Function at 0x1001ef24
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x1007e1de
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0xc80
push esi
push edi
mov dword [ebp - 0x7e4], 0xfffffff6
mov dword [ebp - 0x844], 0x23b6182e
mov dword [ebp - 0x83c], 0x516a205b
mov dword [ebp - 0x834], 5
mov dword [ebp - 0x85c], 0xfffffffc
push 0x30d9
push 0x6f16
push 0x5d8b
lea eax, [ebp - 0x85c]
push eax
lea eax, [ebp - 0x7e4]
push eax
lea eax, [ebp - 0x834]
push eax
push 0x3c7f
lea eax, [ebp - 0x83c]
push eax
push 0
push 0x421d
lea eax, [ebp - 0x844]
push eax
call fcn.1001dcb2
add esp, 0x2c
mov byte [ebp - 0xad], 0
push 0x5164
push 0x237d
lea eax, [ebp - 0xad]
push eax
push 0x3512
push 0x5a09
push 0x79ba
push 0x350e
push 0
call fcn.1001d4c3
add esp, 0x20
mov dword [ebp - 0xd0], 0
mov dword [ebp - 0x12c], 0xe9934b0b
mov dword [ebp - 0x98c], 0xb17b722b
mov dword [ebp - 0x988], 0xb17b722b
mov dword [ebp - 0x984], 0xb17b722b
mov dword [ebp - 0x980], 0xb17b722b
lea ecx, [ebp - 0x299]
call fcn.10008dc3
push eax
lea eax, [ebp - 0x97c]
push eax
lea eax, [ebp - 0x98c]
push eax
lea ecx, [ebp - 0xc44]
call fcn.10017e4b
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0xb14]
call fcn.10017dfa
and dword [ebp - 4], 0
mov dword [ebp - 0x854], 0xff18c9a0
cmp dword [ebp - 0xd0], 0
je 0x1001f152
push 4
lea ecx, [ebp - 0x920]
call fcn.10017d9e
mov byte [ebp - 4], 1
mov dword [ebp - 0x1c4], 0
jmp 0x1001f0a8
mov eax, dword [ebp - 0x1c4]
inc eax
mov dword [ebp - 0x1c4], eax
cmp dword [ebp - 0x1c4], 4
jge 0x1001f0ca
push dword [ebp - 0x1c4]
lea ecx, [ebp - 0x920]
call fcn.10017e3c
mov dword [eax], 0xfffffffc
jmp 0x1001f09b
lea eax, [ebp - 0x920]
push eax
call fcn.1001d4a8
pop ecx
mov dword [ebp - 0xd0], 0
jmp 0x1001f0f0
mov eax, dword [ebp - 0xd0]
inc eax
mov dword [ebp - 0xd0], eax
cmp dword [ebp - 0xd0], 3
jg 0x1001f13e
mov dword [ebp - 0x84c], 0xfffffffb
lea eax, [ebp - 0x84c]
push eax
lea eax, [ebp - 0xd0]
push eax
push 0x6fa
lea eax, [ebp - 0xb14]
push eax
lea eax, [ebp - 0x854]
push eax
lea eax, [ebp - 0x920]
push eax
lea eax, [ebp - 0x12c]
push eax
push 1
call fcn.1001d4c3
add esp, 0x20
jmp 0x1001f0e3
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x920]
call fcn.10017e20
jmp 0x1001f1e2
mov dword [ebp - 0x738], 0xe3bf118c
mov byte [ebp - 0x91], 0
movzx eax, byte [ebp - 0x91]
test eax, eax
je 0x1001f182
push 0x795b
push 1
push 0x536e
call fcn.1001d621
add esp, 0xc
mov dword [ebp - 0x12c], 0
jmp 0x1001f19b
mov eax, dword [ebp - 0x12c]
inc eax
mov dword [ebp - 0x12c], eax
cmp dword [ebp - 0x12c], 0x17
jne 0x1001f1e2
mov dword [ebp - 0x864], 0x1966
mov byte [ebp - 0xc8], 0
movzx eax, byte [ebp - 0xc8]
test eax, eax
je 0x1001f1d4
push 0x7fd0
push 1
push 0x4575
call fcn.1001d690
add esp, 0xc
mov eax, dword [ebp - 0x738]
mov dword [ebp - 0x864], eax
jmp 0x1001f18e
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xb14]
call fcn.10017e20
mov eax, dword [0x10670b5c]
and eax, 1
jne 0x1001f228
mov eax, dword [0x10670b5c]
or eax, 1
mov dword [0x10670b5c], eax
mov dword [ebp - 4], 2
mov ecx, 0x10670b14
call fcn.10017f4c
push 0x1007fe5e
call fcn.10064966
pop ecx
or dword [ebp - 4], 0xffffffff
push 1
lea ecx, [ebp - 0x9d4]
call fcn.10017d9e
mov dword [ebp - 4], 3
mov dword [ebp - 0xf8], 0x3606de71
mov dword [ebp - 0x1cc], 0
jmp 0x1001f25f
mov eax, dword [ebp - 0x1cc]
inc eax
mov dword [ebp - 0x1cc], eax
cmp dword [ebp - 0x1cc], 1
jge 0x1001f27e
push dword [ebp - 0x1cc]
lea ecx, [ebp - 0x9d4]
call fcn.10017e3c
and dword [eax], 0
jmp 0x1001f252
push 0
push 0x7f6a
call fcn.1001dacd
pop ecx
pop ecx
mov dword [ebp - 0xf8], 0
jmp 0x1001f2a5
mov eax, dword [ebp - 0xf8]
dec eax
mov dword [ebp - 0xf8], eax
cmp dword [ebp - 0xf8], 0
jl 0x1001f2de
mov dword [ebp - 0x86c], 0x1738ab65
lea eax, [ebp - 0x86c]
push eax
lea eax, [ebp - 0x9d4]
push eax
push 0x3584
lea eax, [ebp - 0xf8]
push eax
push 0
call fcn.1001e8b8
add esp, 0x14
jmp 0x1001f298
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x9d4]
call fcn.10017e20
push dword [ebp + 8]
lea ecx, [ebp - 0x9f8]
call fcn.10017b53
mov dword [ebp - 4], 4
push 2
lea ecx, [ebp - 0x89c]
call fcn.10017d9e
mov byte [ebp - 4], 5
mov dword [ebp - 0x128], 0
jmp 0x1001f32c
mov eax, dword [ebp - 0x128]
inc eax
mov dword [ebp - 0x128], eax
cmp dword [ebp - 0x128], 1
jge 0x1001f348
mov eax, dword [ebp - 0x128]
mov dword [ebp + eax*4 - 0xb04], 1
jmp 0x1001f31f
lea eax, [ebp - 0x128]
push eax
push 0
push 0x31c8
push 0x128b
lea eax, [ebp - 0x89c]
push eax
call fcn.1001e373
add esp, 0x14
push 1
lea ecx, [ebp - 0x89c]
call fcn.10017e3c
and dword [eax], 0
jmp 0x1001f3a0
push 1
lea ecx, [ebp - 0x89c]
call fcn.10017e3c
mov dword [ebp - 0x3cc], eax
mov eax, dword [ebp - 0x3cc]
mov eax, dword [eax]
inc eax
mov ecx, dword [ebp - 0x3cc]
mov dword [ecx], eax
push 1
lea ecx, [ebp - 0x89c]
call fcn.10017e3c
cmp dword [eax], 0
jg 0x1001f3c8
push 0x7344
push 0x11ee
push 0
call fcn.1001e83e
add esp, 0xc
jmp 0x1001f37c
mov byte [ebp - 0xc6], 0
movzx eax, byte [ebp - 0xc6]
test eax, eax
je 0x1001f3e2
push 0
call fcn.1001ee06
pop ecx
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x89c]
call fcn.10017e20
lea eax, [ebp - 0xaf4]
push eax
lea ecx, [ebp - 0x9f8]
call fcn.100183fd
push dword [eax]
lea eax, [ebp - 0xb98]
push eax
lea ecx, [ebp - 0x9f8]
call fcn.10018411
push dword [eax]
lea eax, [ebp - 0xb08]
push eax
lea ecx, [ebp - 0x9f8]
call fcn.100183fd
push dword [eax]
mov edx, 0x10019d3a
lea ecx, [ebp - 0xbc0]
call fcn.100266f8
add esp, 0xc
mov dword [ebp - 0x3c], 0x13dd33a4
push 1
lea ecx, [ebp - 0x71c]
call fcn.10017d9e
mov byte [ebp - 4], 6
mov dword [ebp - 0x7f0], 0x2674
mov dword [ebp - 0x740], 0x9ff40b36
push 2
lea ecx, [ebp - 0x9bc]
call fcn.10017d9e
mov byte [ebp - 4], 7
mov dword [ebp - 0x100], 0
jmp 0x1001f496
mov eax, dword [ebp - 0x100]
inc eax
mov dword [ebp - 0x100], eax
cmp dword [ebp - 0x100], 1
jge 0x1001f4b8
push dword [ebp - 0x100]
lea ecx, [ebp - 0x71c]
call fcn.10017e3c
mov dword [eax], 0xfffffffe
jmp 0x1001f489
push 1
lea eax, [ebp - 0x9bc]
push eax
lea eax, [ebp - 0x100]
push eax
push 0x1284
push 0x515e
push 0x1ed2
call fcn.1001d6f7
add esp, 0x18
mov dword [ebp - 0x3c], 0
jmp 0x1001f4ef
mov eax, dword [ebp - 0x3c]
dec eax
mov dword [ebp - 0x3c], eax
cmp dword [ebp - 0x3c], 0xffffffef
jl 0x1001f527
mov dword [ebp - 0x87c], 0x1d89
mov dword [ebp - 0x874], 0x5efa20bd
lea eax, [ebp - 0x3c]
push eax
lea eax, [ebp - 0x874]
push eax
push 1
lea eax, [ebp - 0x87c]
push eax
call fcn.1001d7cc
add esp, 0x10
jmp 0x1001f4e8
mov dword [ebp - 0x3c], 0xd
jmp 0x1001f537
mov eax, dword [ebp - 0x3c]
dec eax
mov dword [ebp - 0x3c], eax
cmp dword [ebp - 0x3c], 0xfffffff9
je 0x1001f790
mov dword [ebp - 0x20], 0x51d52aa0
mov dword [ebp - 0x660], 0xffffffff
mov eax, dword [ebp - 0x3c]
imul ecx, dword [ebp - 0x20], 0xca7
add eax, ecx
cmp eax, 8
jbe 0x1001f56f
mov dword [ebp - 0x664], 1
jmp 0x1001f576
and dword [ebp - 0x664], 0
mov eax, dword [ebp - 0x20]
imul eax, dword [ebp - 0x664]
test eax, eax
jne 0x1001f593
cmp dword [ebp - 0x20], 0
jne 0x1001f593
and dword [ebp - 0x66c], 0
jmp 0x1001f59d
mov dword [ebp - 0x66c], 1
mov eax, 0xfff7
sub eax, dword [ebp - 0x20]
imul eax, dword [ebp - 0x66c]
test eax, eax
je 0x1001f6d7
mov dword [ebp - 0x674], 0xd29ed7d4
mov dword [ebp - 0x188], 0
jmp 0x1001f5d7
mov eax, dword [ebp - 0x188]
inc eax
mov dword [ebp - 0x188], eax
cmp dword [ebp - 0x188], 3
jge 0x1001f5f3
mov eax, dword [ebp - 0x188]
mov dword [ebp + eax*4 - 0xb24], 0x451d77f1
jmp 0x1001f5ca
mov dword [ebp - 0x20], 0
jmp 0x1001f603
mov eax, dword [ebp - 0x20]
inc eax
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 0
jg 0x1001f625
mov byte [ebp - 0x93], 0
movzx eax, byte [ebp - 0x93]
test eax, eax
je 0x1001f623
push 0
call fcn.1001e241
pop ecx
jmp 0x1001f5fc
mov dword [ebp - 0x20], 0
jmp 0x1001f635
mov eax, dword [ebp - 0x20]
inc eax
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 0
jg 0x1001f6d2
mov dword [ebp - 0x884], 1
push dword [ebp - 0x20]
lea ecx, [ebp - 0x71c]
call fcn.10017e3c
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0xb24]
mov dword [ebp - 0x674], eax
mov eax, dword [ebp - 0x674]
cmp dword [ebp - 0x20], eax
jne 0x1001f681
mov dword [ebp - 0x67c], 1
jmp 0x1001f688
and dword [ebp - 0x67c], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xb24]
cmp eax, dword [ebp - 0x67c]
jl 0x1001f6a9
mov dword [ebp - 0x684], 1
jmp 0x1001f6b0
and dword [ebp - 0x684], 0
push dword [ebp - 0x20]
lea ecx, [ebp - 0x71c]
call fcn.10017e3c
mov eax, dword [eax]
imul eax, dword [ebp - 0x684]
mov dword [ebp - 0x884], eax
jmp 0x1001f62e
jmp 0x1001f78b
mov dword [ebp - 0x88c], 0xffffffff
mov dword [ebp - 0x6a0], 0x8636eebc
mov dword [ebp - 0x900], 0xefce06df
mov dword [ebp - 0x904], 0xbbb785aa
mov dword [ebp - 0x7dc], 0xfffffffe
lea eax, [ebp - 0x3c]
push eax
lea eax, [ebp - 0x88c]
push eax
lea eax, [ebp - 0x6a0]
push eax
lea eax, [ebp - 0x900]
push eax
lea eax, [ebp - 0x660]
push eax
push 0
lea eax, [ebp - 0x71c]
push eax
push 0x1eff
call fcn.1001db20
add esp, 0x20
lea eax, [ebp - 0x71c]
push eax
lea eax, [ebp - 0x904]
push eax
lea eax, [ebp - 0x6a0]
push eax
lea eax, [ebp - 0x9bc]
push eax
lea eax, [ebp - 0x660]
push eax
lea eax, [ebp - 0x7f0]
push eax
push 0x6870
lea eax, [ebp - 0x740]
push eax
push 0x28ee
lea eax, [ebp - 0x7dc]
push eax
push 0
call fcn.1001ec48
add esp, 0x2c
jmp 0x1001f530
mov byte [ebp - 4], 6
lea ecx, [ebp - 0x9bc]
call fcn.10017e20
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x71c]
call fcn.10017e20
lea ecx, [ebp - 0x9f8]
call fcn.10019cc5
mov dword [ebp - 0x624], eax
mov dword [ebp - 0x38], 6
push 3
lea ecx, [ebp - 0x734]
call fcn.10017d9e
mov byte [ebp - 4], 8
mov dword [ebp - 0xac], 0xecf04b06
mov dword [ebp - 0x300], 5
mov dword [ebp - 0x308], 0
push 1
push 0x52d7
push 0x1543
lea eax, [ebp - 0xb18]
push eax
lea eax, [ebp - 0x734]
push eax
call fcn.1001d84b
add esp, 0x14
mov byte [ebp - 0x95], 0
movzx eax, byte [ebp - 0x95]
test eax, eax
je 0x1001f839
push 0x16cf
push 0x11b0
call dword [sym.imp.USER32.dll_SetCaretPos]
mov eax, dword [ebp - 0x38]
mov dword [ebp - 0x65c], eax
push 2
lea ecx, [ebp - 0x734]
call fcn.10017e3c
mov ecx, dword [ebp - 0x65c]
mov dword [eax], ecx
cmp dword [ebp - 0x65c], 0
je 0x1001f907
mov dword [ebp - 0x8a0], 6
mov dword [ebp - 0x840], 6
mov dword [ebp - 0x748], 0xb0fe2cf4
mov dword [ebp - 0x38], 9
jmp 0x1001f892
mov eax, dword [ebp - 0x38]
inc eax
mov dword [ebp - 0x38], eax
cmp dword [ebp - 0x38], 0x1c
jne 0x1001f8cb
mov byte [ebp - 0x97], 0
movzx eax, byte [ebp - 0x97]
test eax, eax
je 0x1001f8b2
push 0
call dword [sym.imp.ole32.dll_CoTaskMemFree]
mov byte [ebp - 0x8d], 0
push 0
lea eax, [ebp - 0x8d]
push eax
call fcn.1001da33
pop ecx
pop ecx
jmp 0x1001f88b
lea eax, [ebp - 0xac]
push eax
push 0x60f8
push 0x28a8
lea eax, [ebp - 0x8a0]
push eax
lea eax, [ebp - 0x748]
push eax
push 1
lea eax, [ebp - 0x840]
push eax
lea eax, [ebp - 0x734]
push eax
call fcn.1001d8cc
add esp, 0x20
jmp 0x1001fb0c
mov dword [ebp - 0x2b4], 0xc3ae5071
mov dword [ebp - 0x1e4], 0xfffffff7
mov dword [ebp - 0x248], 0xfffffffe
mov dword [ebp - 0x760], 0
mov dword [ebp - 0xac], 0xfffffffa
jmp 0x1001f948
mov eax, dword [ebp - 0xac]
inc eax
mov dword [ebp - 0xac], eax
cmp dword [ebp - 0xac], 1
jle 0x1001f9c5
mov dword [ebp - 0x8fc], 2
mov dword [ebp - 0x38], 0x17
jmp 0x1001f96b
mov eax, dword [ebp - 0x38]
inc eax
mov dword [ebp - 0x38], eax
cmp dword [ebp - 0x38], 0x2a
jl 0x1001f9c0
mov dword [ebp - 0x758], 0xffffffff
mov dword [ebp - 0x750], 0xffffffff
lea eax, [ebp - 0x734]
push eax
lea eax, [ebp - 0x750]
push eax
lea eax, [ebp - 0x8fc]
push eax
lea eax, [ebp - 0x1e4]
push eax
push 0
push 0x4a15
lea eax, [ebp - 0x2b4]
push eax
lea eax, [ebp - 0x758]
push eax
call fcn.1001e656
add esp, 0x20
jmp 0x1001f964
jmp 0x1001f93b
mov dword [ebp - 0x300], 0x7ee8c4b0
cmp dword [ebp - 0x300], 0
je 0x1001f9ed
cmp dword [ebp - 0x248], 0
je 0x1001f9ed
mov dword [ebp - 0x4f0], 1
jmp 0x1001f9f4
and dword [ebp - 0x4f0], 0
mov eax, dword [ebp - 0x4f0]
mov dword [ebp - 0x308], eax
mov eax, dword [ebp - 0x38]
imul eax, dword [ebp - 0x38]
cmp dword [ebp - 0x308], eax
je 0x1001fa21
mov eax, 0xb447
test eax, eax
jne 0x1001fa21
and dword [ebp - 0x5e8], 0
jmp 0x1001fa2b
mov dword [ebp - 0x5e8], 1
mov eax, dword [ebp - 0x248]
imul eax, dword [ebp - 0x5e8]
cmp dword [ebp - 0x2b4], eax
jge 0x1001fa4c
mov dword [ebp - 0x310], 1
jmp 0x1001fa53
and dword [ebp - 0x310], 0
mov eax, dword [ebp - 0x38]
cmp dword [ebp - 0x310], eax
jne 0x1001fa70
mov eax, 0xfff6
test eax, eax
jne 0x1001fa70
and dword [ebp - 0x318], 0
jmp 0x1001fa7a
mov dword [ebp - 0x318], 1
mov dword [ebp - 0x1e4], 0xfffffff9
mov eax, dword [ebp - 0x1e4]
mov dword [ebp - 0x4f8], eax
push 2
lea ecx, [ebp - 0x734]
call fcn.10017e3c
mov ecx, dword [ebp - 0x4f8]
mov dword [eax], ecx
mov eax, dword [ebp - 0x4f8]
mov dword [ebp - 0xac], eax
mov eax, dword [ebp - 0xac]
cmp eax, dword [ebp - 0x318]
jne 0x1001facb
mov dword [ebp - 0x6a8], 1
jmp 0x1001fad2
and dword [ebp - 0x6a8], 0
mov eax, dword [ebp - 0x248]
cmp dword [ebp - 0x6a8], eax
jge 0x1001faf5
cmp dword [ebp - 0x1e4], 0
je 0x1001faf5
mov dword [ebp - 0x848], 1
jmp 0x1001fafc
and dword [ebp - 0x848], 0
imul eax, dword [ebp - 0x2b4], 0x85aa
mov dword [ebp - 0x760], eax
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x734]
call fcn.10017e20
movzx eax, byte [0x10670a16]
test eax, eax
je 0x1002049f
mov ecx, 0x10670b14
call fcn.100263d9
movzx eax, al
test eax, eax
jne 0x1002049f
lea eax, [ebp - 0x624]
push eax
lea eax, [ebp - 0x610]
push eax
mov ecx, 0x10670b14
call fcn.10017f24
mov dword [ebp - 0xba0], 0xdfa860b4
mov byte [ebp - 0xb5], 0
push 1
lea eax, [ebp - 0xb5]
push eax
call fcn.1001d9fa
pop ecx
pop ecx
mov byte [ebp - 0x99], 0
movzx eax, byte [ebp - 0x99]
test eax, eax
je 0x1001fb98
push 1
push 0x2a55
call fcn.1001da33
pop ecx
pop ecx
lea eax, [ebp - 0xb28]
push eax
mov ecx, 0x10670b14
call fcn.10017f16
push eax
lea ecx, [ebp - 0x610]
call fcn.10017f39
movzx eax, al
test eax, eax
je 0x1002049f
mov dword [ebp - 0x10], 0
mov dword [ebp - 0x24], 0x59c17633
push 3
lea ecx, [ebp - 0x2f0]
call fcn.10017d9e
mov byte [ebp - 4], 9
lea eax, [ebp - 0x144]
push eax
lea eax, [ebp - 0x2f0]
push eax
push 0
call fcn.1001e986
add esp, 0xc
mov dword [ebp - 0x144], 0
jmp 0x1001fc10
mov eax, dword [ebp - 0x144]
inc eax
mov dword [ebp - 0x144], eax
cmp dword [ebp - 0x144], 1
jge 0x1001fc29
mov eax, dword [ebp - 0x144]
mov dword [ebp + eax*4 - 0x44], 0x2b56095d
jmp 0x1001fc03
mov eax, dword [ebp - 0x10]
mov dword [ebp - 0xa4c], eax
mov eax, dword [ebp - 0x10]
cmp dword [ebp - 0x10], eax
jl 0x1001fc46
mov dword [ebp - 0x320], 1
jmp 0x1001fc4d
and dword [ebp - 0x320], 0
mov eax, dword [ebp - 0x10]
cmp dword [ebp - 0x320], eax
jl 0x1001fc64
mov dword [ebp - 0x8b0], 1
jmp 0x1001fc6b
and dword [ebp - 0x8b0], 0
or eax, 0xffffffff
je 0x1001fc82
cmp dword [ebp - 0x10], 0
je 0x1001fc82
mov dword [ebp - 0x500], 1
jmp 0x1001fc89
and dword [ebp - 0x500], 0
mov eax, dword [ebp - 0x10]
imul eax, dword [ebp - 0x500]
test eax, eax
jne 0x1001fca6
cmp dword [ebp - 0x10], 0
jne 0x1001fca6
and dword [ebp - 0x768], 0
jmp 0x1001fcb0
mov dword [ebp - 0x768], 1
mov eax, dword [ebp - 0x10]
mov dword [ebp - 0xa50], eax
cmp dword [ebp - 0x10], 0xfffffffc
jl 0x1001fccb
mov dword [ebp - 0x850], 1
jmp 0x1001fcd2
and dword [ebp - 0x850], 0
cmp dword [ebp - 0x10], 0
jne 0x1001fcea
mov eax, 0x1658
test eax, eax
jne 0x1001fcea
and dword [ebp - 0x328], 0
jmp 0x1001fcf4
mov dword [ebp - 0x328], 1
mov eax, dword [ebp - 0x10]
cmp dword [ebp - 0x328], eax
jle 0x1001fd0b
mov dword [ebp - 0x5f0], 1
jmp 0x1001fd12
and dword [ebp - 0x5f0], 0
mov eax, dword [ebp - 0x10]
cmp dword [ebp - 0x5f0], eax
jne 0x1001fd29
mov dword [ebp - 0x330], 1
jmp 0x1001fd30
and dword [ebp - 0x330], 0
mov eax, dword [ebp - 0x10]
cmp dword [ebp - 0x330], eax
jge 0x1001fd47
mov dword [ebp - 0x770], 1
jmp 0x1001fd4e
and dword [ebp - 0x770], 0
mov eax, dword [ebp - 0x10]
mov dword [ebp - 0x24], eax
mov eax, dword [ebp - 0x24]
mov dword [ebp - 0xa58], eax
push 2
lea ecx, [ebp - 0x2f0]
call fcn.10017e3c
or dword [eax], 0xffffffff
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0x44], 0xffffffff
cmp dword [ebp - 0x24], 0
je 0x1001ff0e
mov dword [ebp - 0x70], 0
jmp 0x1001fd95
mov eax, dword [ebp - 0x70]
inc eax
mov dword [ebp - 0x70], eax
cmp dword [ebp - 0x70], 2
jge 0x1001fdab
mov eax, dword [ebp - 0x70]
mov dword [ebp + eax*4 - 0x958], 0x8deb256
jmp 0x1001fd8e
mov dword [ebp - 0x70], 0
jmp 0x1001fdbb
mov eax, dword [ebp - 0x70]
inc eax
mov dword [ebp - 0x70], eax
cmp dword [ebp - 0x70], 1
jge 0x1001fdd1
mov eax, dword [ebp - 0x70]
mov dword [ebp + eax*4 - 0x8f4], 0xafa0b2b0
jmp 0x1001fdb4
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x44], 0
je 0x1001fef9
cmp dword [ebp - 0x24], 0
je 0x1001fe18
push 2
lea ecx, [ebp - 0x2f0]
call fcn.10017e3c
imul eax, dword [eax], 0x5cf1
test eax, eax
jne 0x1001fe0c
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x44], 0
je 0x1001fe18
mov dword [ebp - 0x508], 1
jmp 0x1001fe1f
and dword [ebp - 0x508], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x958]
cmp dword [ebp - 0x508], eax
je 0x1001fe40
mov dword [ebp - 0x250], 1
jmp 0x1001fe47
and dword [ebp - 0x250], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x250]
mov dword [ebp + eax - 0x958], ecx
mov eax, dword [ebp - 0x10]
cmp eax, dword [ebp - 0x250]
je 0x1001fe7b
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x44], 0
jne 0x1001fe7b
and dword [ebp - 0x338], 0
jmp 0x1001fe85
mov dword [ebp - 0x338], 1
push 2
lea ecx, [ebp - 0x2f0]
call fcn.10017e3c
mov eax, dword [eax]
cmp eax, dword [ebp - 0x338]
jge 0x1001fea8
mov dword [ebp - 0x668], 1
jmp 0x1001feaf
and dword [ebp - 0x668], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x44]
add eax, dword [ebp - 0x668]
push 4
pop ecx
imul ecx, ecx, 0
cmp eax, dword [ebp + ecx - 0x8f4]
je 0x1001feda
mov dword [ebp - 0x340], 1
jmp 0x1001fee1
and dword [ebp - 0x340], 0
cmp dword [ebp - 0x340], 0x14a1
jge 0x1001fef9
mov dword [ebp - 0x510], 1
jmp 0x1001ff00
and dword [ebp - 0x510], 0
mov eax, dword [ebp - 0x510]
mov dword [ebp - 0x24], eax
jmp 0x10020462
push 2
lea ecx, [ebp - 0x6dc]
call fcn.10017d9e
mov byte [ebp - 4], 0xa
mov dword [ebp - 0x258], 1
mov dword [ebp - 0x3a8], 0xfda5
mov dword [ebp - 0x858], 0x1ca2
mov dword [ebp - 0x190], 0
jmp 0x1001ff56
mov eax, dword [ebp - 0x190]
inc eax
mov dword [ebp - 0x190], eax
cmp dword [ebp - 0x190], 2
jge 0x1001ff78
push dword [ebp - 0x190]
lea ecx, [ebp - 0x6dc]
call fcn.10017e3c
mov dword [eax], 0x64f6128b
jmp 0x1001ff49
mov dword [ebp - 0x24], 0
jmp 0x1001ff88
mov eax, dword [ebp - 0x24]
inc eax
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 2
jg 0x10020453
mov dword [ebp - 0x108], 0xc5c2da50
mov byte [ebp - 0xc7], 0
movzx eax, byte [ebp - 0xc7]
test eax, eax
je 0x1001ffc2
push 0
push 0x613f
push 0x203
call fcn.1001e41a
add esp, 0xc
mov dword [ebp - 0x10], 0
jmp 0x1001ffd2
mov eax, dword [ebp - 0x10]
inc eax
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], 0
jg 0x1002044e
mov dword [ebp - 0x134], 0xcb5dcfd1
push 1
lea ecx, [ebp - 0x6dc]
call fcn.10017e3c
cmp dword [eax], 0
jne 0x1002013f
push 2
lea ecx, [ebp - 0x2f0]
call fcn.10017e3c
mov dword [eax], 0xe1d6
mov eax, 0xe1d6
cmp eax, 0x106d
jne 0x10020027
mov dword [ebp - 0x290], 1
jmp 0x1002002e
and dword [ebp - 0x290], 0
mov eax, dword [ebp - 0x10]
mov ecx, dword [ebp - 0x290]
mov dword [ebp + eax*4 - 0x44], ecx
mov eax, dword [ebp - 0x290]
mov dword [ebp - 0x258], eax
mov eax, dword [ebp - 0x10]
cmp dword [ebp - 0x258], eax
jle 0x1002005e
mov dword [ebp - 0x348], 1
jmp 0x10020065
and dword [ebp - 0x348], 0
cmp dword [ebp - 0x348], 0xffffffff
jg 0x1002007a
mov dword [ebp - 0x5f8], 1
jmp 0x10020081
and dword [ebp - 0x5f8], 0
mov eax, dword [ebp - 0x10]
cmp dword [ebp - 0x5f8], eax
jne 0x10020098
mov dword [ebp - 0x350], 1
jmp 0x1002009f
and dword [ebp - 0x350], 0
mov eax, dword [ebp - 0x108]
cmp dword [ebp - 0x350], eax
jl 0x100200b9
mov dword [ebp - 0x518], 1
jmp 0x100200c0
and dword [ebp - 0x518], 0
mov eax, dword [ebp - 0x134]
cmp dword [ebp - 0x518], eax
jl 0x100200da
mov dword [ebp - 0x358], 1
jmp 0x100200e1
and dword [ebp - 0x358], 0
push 1
lea ecx, [ebp - 0x6dc]
call fcn.10017e3c
mov eax, dword [eax]
cmp eax, dword [ebp - 0x358]
jne 0x10020104
mov dword [ebp - 0x6b8], 1
jmp 0x1002010b
and dword [ebp - 0x6b8], 0
mov eax, dword [ebp - 0x134]
add eax, dword [ebp - 0x6b8]
imul eax, dword [ebp - 0x10]
add eax, dword [ebp - 0x134]
cmp eax, dword [ebp - 0x10]
jl 0x10020132
mov dword [ebp - 0x360], 1
jmp 0x10020139
and dword [ebp - 0x360], 0
mov eax, dword [ebp - 0x134]
mov eax, dword [ebp - 0x108]
cmp dword [ebp - 0x108], eax
jl 0x10020159
mov dword [ebp - 0x778], 1
jmp 0x10020160
and dword [ebp - 0x778], 0
push 1
lea ecx, [ebp - 0x6dc]
call fcn.10017e3c
cmp dword [ebp - 0x10], 0xfffffffb
jl 0x10020182
cmp dword [ebp - 0x24], 0
jne 0x10020182
and dword [ebp - 0x520], 0
jmp 0x1002018c
mov dword [ebp - 0x520], 1
push 1
lea ecx, [ebp - 0x6dc]
call fcn.10017e3c
mov ecx, dword [ebp - 0x520]
cmp ecx, dword [eax]
jne 0x100201bc
push 4
pop eax
imul eax, eax, 0
push 4
pop ecx
imul ecx, ecx, 0
mov eax, dword [ebp + eax - 0x44]
mov dword [ebp + ecx - 0x44], eax
jmp 0x1002043e
mov dword [ebp - 0x110], 0
mov dword [ebp - 0x378], 0x22bda668
mov eax, 0x56e
test eax, eax
je 0x10020265
cmp dword [ebp - 0x110], 0
jne 0x100201f2
mov dword [ebp - 0x368], 1
jmp 0x100201f9
and dword [ebp - 0x368], 0
mov eax, dword [ebp - 0x108]
cmp dword [ebp - 0x368], eax
jg 0x10020213
mov dword [ebp - 0x600], 1
jmp 0x1002021a
and dword [ebp - 0x600], 0
mov eax, dword [ebp - 0x10]
mov esi, dword [ebp - 0x600]
sub esi, dword [ebp + eax*4 - 0x44]
push 1
lea ecx, [ebp - 0x6dc]
call fcn.10017e3c
cmp esi, dword [eax]
jne 0x10020244
mov dword [ebp - 0x370], 1
jmp 0x1002024b
and dword [ebp - 0x370], 0
mov eax, dword [ebp - 0x110]
add eax, dword [ebp - 0x370]
je 0x10020265
mov dword [ebp - 0x528], 1
jmp 0x1002026c
and dword [ebp - 0x528], 0
mov eax, dword [ebp - 0x108]
imul eax, dword [ebp - 0x528]
test eax, eax
je 0x10020284
cmp dword [ebp - 0x110], 0
push dword [ebp - 0x24]
lea ecx, [ebp - 0x2f0]
call fcn.10017e3c
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x44]
mov dword [ebp - 0xa60], eax
mov eax, dword [ebp - 0x378]
mov dword [ebp - 0xa68], eax
cmp dword [ebp - 0x3a8], 0x906a
jl 0x100202c6
mov dword [ebp - 0x670], 1
jmp 0x100202cd
and dword [ebp - 0x670], 0
mov eax, dword [ebp - 0x378]
cmp dword [ebp - 0x670], eax
jle 0x100202e7
mov dword [ebp - 0x380], 1
jmp 0x100202ee
and dword [ebp - 0x380], 0
push dword [ebp - 0x24]
lea ecx, [ebp - 0x2f0]
call fcn.10017e3c
mov ecx, dword [ebp - 0x380]
cmp ecx, dword [eax]
jne 0x10020312
mov dword [ebp - 0x530], 1
jmp 0x10020319
and dword [ebp - 0x530], 0
cmp dword [ebp - 0x530], 0xffffffff
jb 0x1002032e
mov dword [ebp - 0x388], 1
jmp 0x10020335
and dword [ebp - 0x388], 0
cmp dword [ebp - 0x388], 1
jne 0x1002034a
mov dword [ebp - 0x608], 1
jmp 0x10020351
and dword [ebp - 0x608], 0
mov eax, dword [ebp - 0x608]
sub eax, dword [ebp - 0x134]
cmp eax, dword [ebp - 0x858]
je 0x10020371
mov dword [ebp - 0x390], 1
jmp 0x10020378
and dword [ebp - 0x390], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x44]
cmp dword [ebp - 0x390], eax
jle 0x10020396
mov dword [ebp - 0x538], 1
jmp 0x1002039d
and dword [ebp - 0x538], 0
imul eax, dword [ebp - 0x538], 0
test eax, eax
je 0x100203ba
cmp dword [ebp - 0x24], 0
je 0x100203ba
mov dword [ebp - 0x398], 1
jmp 0x100203c1
and dword [ebp - 0x398], 0
mov eax, dword [ebp - 0x110]
cmp eax, dword [ebp - 0x398]
je 0x100203db
mov dword [ebp - 0x6b0], 1
jmp 0x100203e2
and dword [ebp - 0x6b0], 0
push dword [ebp - 0x24]
lea ecx, [ebp - 0x2f0]
call fcn.10017e3c
mov ecx, dword [ebp - 0x6b0]
cmp ecx, dword [eax]
jg 0x10020406
mov dword [ebp - 0x3a0], 1
jmp 0x1002040d
and dword [ebp - 0x3a0], 0
cmp dword [ebp - 0x3a0], 0x1027
jle 0x10020425
mov dword [ebp - 0x540], 1
jmp 0x1002042c
and dword [ebp - 0x540], 0
mov eax, dword [ebp - 0x110]
add eax, dword [ebp - 0x540]
mov dword [ebp - 0x258], eax
cmp dword [ebp - 0x3a8], 0
je 0x10020449
jmp 0x1002044e
jmp 0x1001ffcb
jmp 0x1001ff81
mov byte [ebp - 4], 9
lea ecx, [ebp - 0x6dc]
call fcn.10017e20
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x2f0]
call fcn.10017e20
lea ecx, [ebp - 0x610]
call fcn.100263e2
mov eax, dword [eax + 4]
mov dword [ebp - 0x780], eax
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x9f8]
call fcn.10017bd8
mov eax, dword [ebp - 0x780]
jmp 0x100248cd
mov dword [ebp - 0xec], 0x951ad386
mov dword [ebp - 0xa18], 0xffffffff
mov dword [ebp - 0xa14], 0xffffffff
mov dword [ebp - 0xa10], 0xffffffff
mov dword [ebp - 0xa0c], 0xffffffff
mov dword [ebp - 0x2b8], 0x8217
mov dword [ebp - 0xa70], 0
mov dword [ebp - 0x194], 0
jmp 0x100204fe
mov eax, dword [ebp - 0x194]
inc eax
mov dword [ebp - 0x194], eax
cmp dword [ebp - 0x194], 3
jge 0x1002051a
mov eax, dword [ebp - 0x194]
mov dword [ebp + eax*4 - 0x728], 0xffff
jmp 0x100204f1
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x728]
mov dword [ebp - 0xec], eax
mov dword [ebp - 0xec], 0
jmp 0x10020545
mov eax, dword [ebp - 0xec]
inc eax
mov dword [ebp - 0xec], eax
cmp dword [ebp - 0xec], 2
jg 0x1002085d
mov dword [ebp - 0x34], 0xfffffffc
mov dword [ebp - 0x3e0], 0xfffffffe
mov dword [ebp - 0x34], 2
jmp 0x10020573
mov eax, dword [ebp - 0x34]
dec eax
mov dword [ebp - 0x34], eax
cmp dword [ebp - 0x34], 0
jl 0x10020858
push 2
lea ecx, [ebp - 0x2c4]
call fcn.10017d9e
mov byte [ebp - 4], 0xb
push 0
push 0x1d5c
push 0x7fd8
push 0x51e6
lea eax, [ebp - 0x2c4]
push eax
lea eax, [ebp - 0xa78]
push eax
call fcn.1001ebb3
add esp, 0x18
push 4
pop eax
shl eax, 1
mov dword [ebp + eax - 0xa18], 1
push 1
lea ecx, [ebp - 0x2c4]
call fcn.10017e3c
and dword [eax], 0
jmp 0x100205fb
push 1
lea ecx, [ebp - 0x2c4]
call fcn.10017e3c
mov dword [ebp - 0x3b0], eax
mov eax, dword [ebp - 0x3b0]
mov eax, dword [eax]
inc eax
mov ecx, dword [ebp - 0x3b0]
mov dword [ecx], eax
push 1
lea ecx, [ebp - 0x2c4]
call fcn.10017e3c
cmp dword [eax], 2
jg 0x10020844
mov dword [ebp - 0x618], 1
mov dword [ebp - 0x3d8], 0xffffffff
mov eax, dword [ebp - 0x34]
mov eax, dword [ebp + eax*4 - 0x728]
mov dword [ebp - 0xa80], eax
push 1
lea ecx, [ebp - 0x2c4]
call fcn.10017e3c
mov esi, eax
mov edi, dword [ebp - 0x34]
push 1
lea ecx, [ebp - 0x2c4]
call fcn.10017e3c
imul edi, dword [eax]
imul edi, dword [esi]
cmp edi, dword [ebp - 0x2b8]
je 0x1002066e
mov dword [ebp - 0x548], 1
jmp 0x10020675
and dword [ebp - 0x548], 0
mov eax, dword [ebp - 0x34]
mov eax, dword [ebp + eax*4 - 0x728]
cmp dword [ebp - 0x548], eax
jg 0x10020693
mov dword [ebp - 0x3b8], 1
jmp 0x1002069a
and dword [ebp - 0x3b8], 0
mov eax, dword [ebp - 0x3b8]
add eax, 0x1780eec2
je 0x100206bc
mov eax, 0x3e5ec352
test eax, eax
je 0x100206bc
mov dword [ebp - 0x678], 1
jmp 0x100206c3
and dword [ebp - 0x678], 0
mov eax, dword [ebp - 0x34]
cmp dword [ebp - 0x678], eax
jg 0x100206da
mov dword [ebp - 0x3c0], 1
jmp 0x100206e1
and dword [ebp - 0x3c0], 0
cmp dword [ebp - 0x3c0], 0xfafb
jle 0x100206f9
mov dword [ebp - 0x550], 1
jmp 0x10020700
and dword [ebp - 0x550], 0
cmp dword [ebp - 0x550], 0xfffffffb
je 0x10020715
mov dword [ebp - 0x8c0], 1
jmp 0x1002071c
and dword [ebp - 0x8c0], 0
mov eax, dword [ebp - 0x34]
mov dword [ebp - 0xa88], eax
imul eax, dword [ebp - 0x34], 0xbc69
imul eax, dword [ebp - 0x2b8]
cmp eax, dword [ebp - 0x618]
jle 0x10020747
mov dword [ebp - 0x3c8], 1
jmp 0x1002074e
and dword [ebp - 0x3c8], 0
mov esi, dword [ebp - 0x34]
add esi, dword [ebp - 0x3c8]
push 1
lea ecx, [ebp - 0x2c4]
call fcn.10017e3c
cmp esi, dword [eax]
je 0x100207d7
mov eax, dword [ebp - 0x618]
cmp dword [ebp - 0x2b8], eax
jne 0x10020782
mov dword [ebp - 0x3d0], 1
jmp 0x10020789
and dword [ebp - 0x3d0], 0
mov eax, dword [ebp - 0x34]
mov eax, dword [ebp + eax*4 - 0x728]
mov dword [ebp - 0x558], eax
mov eax, dword [ebp - 0x34]
mov ecx, dword [ebp - 0x558]
mov dword [ebp + eax*4 - 0x728], ecx
mov eax, dword [ebp - 0x3d0]
sub eax, dword [ebp - 0x558]
mov dword [ebp - 0x3e0], eax
mov byte [ebp - 0x9b], 0
movzx eax, byte [ebp - 0x9b]
test eax, eax
je 0x100207d5
push 0
call fcn.1001eb8c
pop ecx
jmp 0x1002083f
mov dword [ebp - 0x788], 0xfffffff7
mov esi, dword [ebp - 0x788]
push 4
pop eax
shl eax, 1
sub esi, dword [ebp + eax - 0x728]
push 1
lea ecx, [ebp - 0x2c4]
call fcn.10017e3c
imul esi, dword [eax]
mov dword [ebp - 0x3d8], esi
mov esi, dword [ebp - 0x3d8]
push 1
lea ecx, [ebp - 0x2c4]
call fcn.10017e3c
cmp esi, dword [eax]
jg 0x1002082c
mov dword [ebp - 0x69c], 1
jmp 0x10020833
and dword [ebp - 0x69c], 0
mov eax, dword [ebp - 0x69c]
mov dword [ebp - 0x3e0], eax
jmp 0x100205d7
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x2c4]
call fcn.10017e20
jmp 0x1002056c
jmp 0x10020538
and dword [ebp - 0xe8], 0
mov dword [ebp - 0x88], 0x42c70bb7
mov dword [ebp - 0x198], 0
jmp 0x10020887
mov eax, dword [ebp - 0x198]
inc eax
mov dword [ebp - 0x198], eax
cmp dword [ebp - 0x198], 1
jge 0x100208a3
mov eax, dword [ebp - 0x198]
mov dword [ebp + eax*4 - 0xa90], 4
jmp 0x1002087a
mov dword [ebp - 0x88], 0
jmp 0x100208bc
mov eax, dword [ebp - 0x88]
inc eax
mov dword [ebp - 0x88], eax
cmp dword [ebp - 0x88], 0
jg 0x100208f2
mov byte [ebp - 0xbd], 0
movzx eax, byte [ebp - 0xbd]
test eax, eax
je 0x100208f0
push 0x4e01
push 0x4ce4
push 0
push 0x55b7
call fcn.1001ee31
add esp, 0x10
jmp 0x100208af
mov dword [ebp - 0x88], 3
jmp 0x1002090b
mov eax, dword [ebp - 0x88]
dec eax
mov dword [ebp - 0x88], eax
cmp dword [ebp - 0x88], 1
jle 0x1002093c
mov byte [ebp - 0x9d], 0
movzx eax, byte [ebp - 0x9d]
test eax, eax
je 0x1002093a
push 1
push 0xea
push 0xfd0
call fcn.1001da74
add esp, 0xc
jmp 0x100208fe
lea eax, [ebp - 0x9f8]
push eax
call fcn.1001bd1e
pop ecx
mov dword [ebp - 0xe8], eax
cmp dword [ebp - 0xe8], 0
jne 0x1002435d
mov dword [ebp - 0x54], 6
push 3
lea ecx, [ebp - 0x2e4]
call fcn.10017d9e
mov byte [ebp - 4], 0xc
mov dword [ebp - 0xe4], 0xecf04b06
mov dword [ebp - 0x7a8], 5
mov dword [ebp - 0x870], 0
push 0
lea eax, [ebp - 0x2e4]
push eax
push 0x27b8
lea eax, [ebp - 0xa98]
push eax
call fcn.1001eea4
add esp, 0x10
mov byte [ebp - 0xc9], 0
push 1
lea eax, [ebp - 0xc9]
push eax
call fcn.1001dacd
pop ecx
pop ecx
mov eax, dword [ebp - 0x54]
mov dword [ebp - 0x560], eax
push 2
lea ecx, [ebp - 0x2e4]
call fcn.10017e3c
mov ecx, dword [ebp - 0x560]
mov dword [eax], ecx
cmp dword [ebp - 0x560], 0
je 0x10020abc
mov dword [ebp - 0x8e4], 6
mov dword [ebp - 0x790], 6
mov dword [ebp - 0x860], 0xb0fe2cf4
mov dword [ebp - 0x54], 9
jmp 0x10020a1f
mov eax, dword [ebp - 0x54]
inc eax
mov dword [ebp - 0x54], eax
cmp dword [ebp - 0x54], 0x1c
jne 0x10020a71
mov byte [ebp - 0x9f], 0
push 0x7420
push 0x5767
push 0x405d
push 0x5494
push 0x511e
push 1
push 0x68bf
lea eax, [ebp - 0x9f]
push eax
call fcn.1001db20
add esp, 0x20
push 0x30a7
push 1
push 0x1153
call fcn.1001dc3c
add esp, 0xc
jmp 0x10020a18
lea eax, [ebp - 0x860]
push eax
lea eax, [ebp - 0x790]
push eax
lea eax, [ebp - 0xe4]
push eax
push 0x51ab
push 0x570
push 0x2bc4
lea eax, [ebp - 0x8e4]
push eax
push 0x1cff
push 1
lea eax, [ebp - 0x2e4]
push eax
push 0x6794
call fcn.1001dcb2
add esp, 0x2c
jmp 0x10020cd5
mov dword [ebp - 0x2a4], 0xc3ae5071
mov dword [ebp - 0x268], 0xfffffff7
mov dword [ebp - 0x8d0], 0xfffffffe
mov dword [ebp - 0x7b0], 0
mov dword [ebp - 0xe4], 0xfffffffa
jmp 0x10020afd
mov eax, dword [ebp - 0xe4]
inc eax
mov dword [ebp - 0xe4], eax
cmp dword [ebp - 0xe4], 1
jle 0x10020c85
mov dword [ebp - 0x260], 2
mov dword [ebp - 0x54], 0x17
jmp 0x10020b24
mov eax, dword [ebp - 0x54]
inc eax
mov dword [ebp - 0x54], eax
cmp dword [ebp - 0x54], 0x2a
jl 0x10020c80
mov dword [ebp - 0x298], 0xffffffff
mov dword [ebp - 0x3e8], 0xffffffff
cmp dword [ebp - 0x260], 0x16de
jg 0x10020c32
mov eax, dword [ebp - 0x3e8]
cmp dword [ebp - 0x260], eax
jl 0x10020b6c
mov dword [ebp - 0x798], 1
jmp 0x10020b73
and dword [ebp - 0x798], 0
mov eax, dword [ebp - 0x260]
mov dword [ebp - 0xaa0], eax
mov eax, dword [ebp - 0x3e8]
mov dword [ebp - 0xaa8], eax
mov eax, dword [ebp - 0x298]
mov dword [ebp - 0x868], eax
mov eax, dword [ebp - 0x2a4]
mov dword [ebp - 0x7a0], eax
mov eax, dword [ebp - 0x298]
inc eax
mov dword [ebp - 0x298], eax
mov eax, dword [ebp - 0x868]
cmp eax, dword [ebp - 0x7a0]
jg 0x10020bca
mov dword [ebp - 0x620], 1
jmp 0x10020bd1
and dword [ebp - 0x620], 0
mov eax, dword [ebp - 0x2a4]
cmp eax, dword [ebp - 0x620]
jl 0x10020beb
mov dword [ebp - 0x3f0], 1
jmp 0x10020bf2
and dword [ebp - 0x3f0], 0
mov eax, dword [ebp - 0x3f0]
mov dword [ebp - 0x268], eax
mov eax, dword [ebp - 0x268]
mov dword [ebp - 0xab0], eax
push 2
lea ecx, [ebp - 0x2e4]
call fcn.10017e3c
push 2
lea ecx, [ebp - 0x2e4]
call fcn.10017e3c
cmp dword [eax], 0
jne 0x10020c32
and dword [ebp - 0x568], 0
jmp 0x10020c3c
mov dword [ebp - 0x568], 1
push 2
lea ecx, [ebp - 0x2e4]
call fcn.10017e3c
mov ecx, dword [ebp - 0x568]
cmp ecx, dword [eax]
jle 0x10020c5f
mov dword [ebp - 0x3f8], 1
jmp 0x10020c66
and dword [ebp - 0x3f8], 0
push 2
lea ecx, [ebp - 0x2e4]
call fcn.10017e3c
mov ecx, dword [ebp - 0x3f8]
mov dword [eax], ecx
jmp 0x10020b1d
jmp 0x10020af0
lea eax, [ebp - 0xe4]
push eax
lea eax, [ebp - 0x2e4]
push eax
lea eax, [ebp - 0x8d0]
push eax
lea eax, [ebp - 0x7a8]
push eax
lea eax, [ebp - 0x54]
push eax
lea eax, [ebp - 0x268]
push eax
lea eax, [ebp - 0x870]
push eax
push 0x1a73
lea eax, [ebp - 0x2a4]
push eax
push 1
lea eax, [ebp - 0x7b0]
push eax
push 0x46e3
call fcn.1001ded8
add esp, 0x30
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x2e4]
call fcn.10017e20
cmp dword [0x10670a10], 0
jne 0x10023d8a
mov dword [ebp - 0x19c], 0xfffffffb
mov dword [ebp - 0xab8], 4
mov dword [ebp - 0xac0], 0
mov dword [ebp - 0x19c], 9
jmp 0x10020d28
mov eax, dword [ebp - 0x19c]
dec eax
mov dword [ebp - 0x19c], eax
cmp dword [ebp - 0x19c], 1
jle 0x10020d68
mov dword [ebp - 0xac8], 0
mov dword [ebp - 0xad0], 0x444696a4
mov dword [ebp - 0xad8], 0
mov dword [ebp - 0x680], 0xec79cf18
mov eax, dword [ebp - 0x680]
dec eax
mov dword [ebp - 0x680], eax
jmp 0x10020d1b
mov dword [ebp - 0x68], 0
jmp 0x10020d78
mov eax, dword [ebp - 0x68]
inc eax
mov dword [ebp - 0x68], eax
cmp dword [ebp - 0x68], 3
jge 0x10020d8e
mov eax, dword [ebp - 0x68]
mov dword [ebp + eax*4 - 0x92c], 0xe1757117
jmp 0x10020d71
mov dword [ebp - 0x68], 0
jmp 0x10020d9e
mov eax, dword [ebp - 0x68]
inc eax
mov dword [ebp - 0x68], eax
cmp dword [ebp - 0x68], 1
jge 0x10020db4
mov eax, dword [ebp - 0x68]
mov dword [ebp + eax*4 - 0x7ec], 1
jmp 0x10020d97
push 4
pop eax
shl eax, 1
mov dword [ebp + eax - 0x92c], 0xfffffffb
jmp 0x10020ddf
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x92c]
dec eax
push 4
pop ecx
shl ecx, 1
mov dword [ebp + ecx - 0x92c], eax
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0x92c], 0xffffffed
jge 0x10020e30
mov dword [ebp - 0x154], 0xd37ad43
mov dword [ebp - 0x154], 0
jmp 0x10020e11
mov eax, dword [ebp - 0x154]
inc eax
mov dword [ebp - 0x154], eax
cmp dword [ebp - 0x154], 0
jg 0x10020e2e
mov eax, dword [ebp - 0x154]
cmp dword [ebp + eax*4 - 0x7ec], 0
je 0x10020e2c
jmp 0x10020e2e
jmp 0x10020e04
jmp 0x10020dc6
mov dword [ebp - 0x6d0], 0xf8b8ae50
mov dword [ebp - 0x6cc], 0xf8b8ae50
mov dword [ebp - 0x6c8], 0xf8b8ae50
mov dword [ebp - 0x6c4], 0xf8b8ae50
mov dword [ebp - 0x6a4], 0xa9d01274
mov dword [ebp - 0x7f4], 0xb66c146d
mov dword [ebp - 0xae0], 0xfff8
mov dword [ebp - 0x28], 0
jmp 0x10020e86
mov eax, dword [ebp - 0x28]
inc eax
mov dword [ebp - 0x28], eax
cmp dword [ebp - 0x28], 4
jge 0x10020e9c
mov eax, dword [ebp - 0x28]
mov dword [ebp + eax*4 - 0xbf0], 0xf59172dd
jmp 0x10020e7f
mov dword [ebp - 0x28], 0
jmp 0x10020eac
mov eax, dword [ebp - 0x28]
inc eax
mov dword [ebp - 0x28], eax
cmp dword [ebp - 0x28], 3
jge 0x10020ec2
mov eax, dword [ebp - 0x28]
mov dword [ebp + eax*4 - 0xbfc], 0x89b467bb
jmp 0x10020ea5
mov dword [ebp - 0x28], 0
jmp 0x10020ed2
mov eax, dword [ebp - 0x28]
inc eax
mov dword [ebp - 0x28], eax
cmp dword [ebp - 0x28], 2
jge 0x10020ee8
mov eax, dword [ebp - 0x28]
mov dword [ebp + eax*4 - 0x2d8], 0x4e62
jmp 0x10020ecb
xor eax, eax
inc eax
je 0x100210ad
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x6d0]
mov dword [ebp - 0xae8], eax
push 4
pop eax
imul eax, eax, 3
mov dword [ebp + eax - 0xbf0], 1
mov eax, 0x6e48
test eax, eax
jne 0x10020f2f
mov eax, 0x66ef
test eax, eax
jne 0x10020f2f
and dword [ebp - 0x400], 0
jmp 0x10020f39
mov dword [ebp - 0x400], 1
push 4
pop eax
imul eax, eax, 3
mov eax, dword [ebp + eax - 0x6d0]
cmp dword [ebp - 0x400], eax
jg 0x10020f5a
mov dword [ebp - 0x570], 1
jmp 0x10020f61
and dword [ebp - 0x570], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x570]
mov dword [ebp + eax - 0xbfc], ecx
push 4
pop eax
imul eax, eax, 3
mov eax, dword [ebp + eax - 0x6d0]
mov dword [ebp - 0xaf0], eax
mov eax, 0xe5d5ec7e
cmp eax, 1
ja 0x10020f9d
mov dword [ebp - 0x408], 1
jmp 0x10020fa4
and dword [ebp - 0x408], 0
push 4
pop eax
imul eax, eax, 3
mov eax, dword [ebp + eax - 0x6d0]
add eax, dword [ebp - 0x408]
jne 0x10020fcb
mov eax, 0x8214
test eax, eax
jne 0x10020fcb
and dword [ebp - 0x628], 0
jmp 0x10020fd5
mov dword [ebp - 0x628], 1
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x6d0]
cmp dword [ebp - 0x628], eax
jle 0x10020ff6
mov dword [ebp - 0x410], 1
jmp 0x10020ffd
and dword [ebp - 0x410], 0
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x6d0]
add eax, dword [ebp - 0x410]
push 4
pop ecx
shl ecx, 0
cmp eax, dword [ebp + ecx - 0x2d8]
jne 0x1002102a
mov dword [ebp - 0x578], 1
jmp 0x10021031
and dword [ebp - 0x578], 0
push 4
pop eax
imul eax, eax, 3
mov eax, dword [ebp + eax - 0x6d0]
cmp eax, dword [ebp - 0x578]
jne 0x10021052
mov dword [ebp - 0x418], 1
jmp 0x10021059
and dword [ebp - 0x418], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x418]
sub ecx, dword [ebp + eax - 0x2d8]
mov dword [ebp - 0x6a4], ecx
mov eax, dword [ebp - 0x6a4]
mov dword [ebp - 0xaf8], eax
push 4
pop eax
imul eax, eax, 3
mov eax, dword [ebp + eax - 0x6d0]
mov dword [ebp - 0xa48], eax
push 4
pop eax
imul eax, eax, 3
cmp dword [ebp + eax - 0xbf0], 0
je 0x100210ad
mov dword [ebp - 0x420], 1
jmp 0x100210b4
and dword [ebp - 0x420], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x2d8]
cmp dword [ebp - 0x420], eax
jg 0x100210d5
mov dword [ebp - 0x7b8], 1
jmp 0x100210dc
and dword [ebp - 0x7b8], 0
mov eax, 0x717c9257
sub eax, 0x32d748ae
push 4
pop ecx
imul ecx, ecx, 0
cmp eax, dword [ebp + ecx - 0x2d8]
jle 0x10021101
mov dword [ebp - 0x580], 1
jmp 0x10021108
and dword [ebp - 0x580], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x2d8]
cmp dword [ebp - 0x580], eax
jle 0x10021129
mov dword [ebp - 0x428], 1
jmp 0x10021130
and dword [ebp - 0x428], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x2d8]
cmp dword [ebp - 0x428], eax
je 0x10021151
mov dword [ebp - 0x630], 1
jmp 0x10021158
and dword [ebp - 0x630], 0
mov eax, dword [ebp - 0x630]
inc eax
cmp eax, 0x1422
jge 0x10021172
mov dword [ebp - 0x430], 1
jmp 0x10021179
and dword [ebp - 0x430], 0
mov eax, dword [ebp - 0x430]
mov dword [ebp - 0x7f4], eax
mov byte [ebp - 0x178], 7
mov byte [ebp - 0x177], 0xd
mov byte [ebp - 0x176], 4
mov byte [ebp - 0x175], 0x57
mov byte [ebp - 0x174], 9
mov byte [ebp - 0x173], 1
mov byte [ebp - 0x172], 0xa
mov byte [ebp - 0x171], 8
mov byte [ebp - 0x170], 1
mov byte [ebp - 0x16f], 9
mov byte [ebp - 0x16e], 2
mov byte [ebp - 0x16d], 0x17
mov byte [ebp - 0x16c], 5
mov byte [ebp - 0x16b], 0x1e
mov byte [ebp - 0x16a], 3
mov byte [ebp - 0x169], 2
mov byte [ebp - 0x168], 7
mov byte [ebp - 0x167], 0x7d
mov byte [ebp - 0x166], 0x4d
mov byte [ebp - 0x165], 0xa1
mov byte [ebp - 0x164], 0xf1
mov byte [ebp - 0x163], 0x1a
mov byte [ebp - 0x162], 0x91
mov byte [ebp - 0x161], 0xea
mov byte [ebp - 0x160], 6
mov byte [ebp - 0x15f], 0x5d
mov byte [ebp - 0x15e], 0xb
mov byte [ebp - 0x15d], 0x5f
mov byte [ebp - 0x15c], 0
mov byte [ebp - 0x15b], 0x27
mov byte [ebp - 0x15a], 8
mov byte [ebp - 0x159], 0x65
xor eax, eax
inc eax
shl eax, 0
movzx eax, byte [ebp + eax - 0x178]
or eax, 0x3f
xor ecx, ecx
inc ecx
shl ecx, 0
movzx ecx, byte [ebp + ecx - 0x178]
and ecx, 0x3f
sub eax, ecx
xor ecx, ecx
inc ecx
imul ecx, ecx, 0
movzx ecx, byte [ebp + ecx - 0x178]
mov word [ebp + ecx*2 - 0xa44], ax
mov dword [ebp - 0x7c8], 0x274b
push 4
lea ecx, [ebp - 0x9e0]
call fcn.10017d9e
mov byte [ebp - 4], 0xd
mov dword [ebp - 0x804], 0xffffffff
mov dword [ebp - 0x7fc], 0x39e
mov dword [ebp - 0x7c0], 0
lea eax, [ebp - 0xb84]
push eax
push 0
lea eax, [ebp - 0x9e0]
push eax
call fcn.1001eb16
add esp, 0xc
push 0x5fd4
push 0
call fcn.1001e323
pop ecx
pop ecx
lea eax, [ebp - 0x7c0]
push eax
push 0x5220
push 1
lea eax, [ebp - 0x7fc]
push eax
lea eax, [ebp - 0x9e0]
push eax
lea eax, [ebp - 0x7c8]
push eax
lea eax, [ebp - 0x804]
push eax
call fcn.1001e09b
add esp, 0x1c
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x9e0]
call fcn.10017e20
mov dword [ebp - 0x18], 2
and dword [ebp - 0x13c], 0
jmp 0x10021357
mov eax, dword [ebp - 0x18]
inc eax
inc eax
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 0x20
jae 0x10021b9f
xor eax, eax
inc eax
imul eax, eax, 0
movzx eax, byte [ebp + eax - 0x178]
lea eax, [eax + eax + 2]
cmp dword [ebp - 0x18], eax
jne 0x100216b3
mov eax, dword [ebp - 0x18]
movzx eax, byte [ebp + eax - 0x178]
inc eax
mov dword [ebp - 0x13c], eax
push 1
lea ecx, [ebp - 0x9b0]
call fcn.10017d9e
mov byte [ebp - 4], 0xe
push 0
push 0x116b
push 0x54e6
lea eax, [ebp - 0x118]
push eax
push 0x46f8
lea eax, [ebp - 0x9b0]
push eax
call fcn.100248dd
add esp, 0x18
mov dword [ebp - 0x118], 0
jmp 0x100213df
mov eax, dword [ebp - 0x118]
inc eax
mov dword [ebp - 0x118], eax
cmp dword [ebp - 0x118], 4
jge 0x100213fb
mov eax, dword [ebp - 0x118]
mov dword [ebp + eax*4 - 0x978], 0xfffffffa
jmp 0x100213d2
push 4
pop eax
shl eax, 1
mov dword [ebp + eax - 0x978], 0
jmp 0x10021426
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x978]
inc eax
push 4
pop ecx
shl ecx, 1
mov dword [ebp + ecx - 0x978], eax
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0x978], 1
jge 0x10021454
push 4
pop eax
shl eax, 1
push dword [ebp + eax - 0x978]
lea ecx, [ebp - 0x9b0]
call fcn.10017e3c
mov dword [eax], 3
jmp 0x1002140d
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x9b0]
call fcn.10017e20
mov eax, dword [ebp - 0x18]
movzx eax, byte [ebp + eax - 0x178]
mov ecx, dword [ebp - 0x18]
lea eax, [ecx + eax - 1]
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x40], 0xfffffffc
mov dword [ebp - 0x688], 0x39f5fa31
mov dword [ebp - 0x7d0], 0xf8b4dfec
mov dword [ebp - 0x438], 0x740826f3
mov dword [ebp - 0x440], 0
mov dword [ebp - 0x448], 9
mov dword [ebp - 0x1f4], 0
jmp 0x100214ca
mov eax, dword [ebp - 0x1f4]
inc eax
mov dword [ebp - 0x1f4], eax
cmp dword [ebp - 0x1f4], 3
jge 0x100214e6
mov eax, dword [ebp - 0x1f4]
mov dword [ebp + eax*4 - 0x704], 2
jmp 0x100214bd
mov byte [ebp - 0xc5], 0
movzx eax, byte [ebp - 0xc5]
test eax, eax
je 0x10021500
push 0
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
mov dword [ebp - 0x40], 0
jmp 0x10021510
mov eax, dword [ebp - 0x40]
inc eax
mov dword [ebp - 0x40], eax
cmp dword [ebp - 0x40], 2
jg 0x100216ae
mov dword [ebp - 0x598], 0xedb6b7be
mov dword [ebp - 0x814], 0xffffffff
push 0xfffffffffffffff9
pop eax
test eax, eax
je 0x10021696
mov eax, dword [ebp - 0x40]
imul eax, dword [ebp + eax*4 - 0x704], 0x4419
mov dword [ebp - 0x7d0], eax
mov eax, dword [ebp - 0x40]
cmp dword [ebp + eax*4 - 0x704], 4
je 0x10021566
mov dword [ebp - 0x588], 1
jmp 0x1002156d
and dword [ebp - 0x588], 0
mov dword [ebp - 0x688], 0x958900fd
mov eax, dword [ebp - 0x588]
mov dword [ebp - 0x438], eax
mov eax, dword [ebp - 0x438]
mov dword [ebp - 0x440], eax
mov eax, dword [ebp - 0x688]
neg eax
cmp eax, dword [ebp - 0x440]
je 0x100215ab
mov dword [ebp - 0x590], 1
jmp 0x100215b2
and dword [ebp - 0x590], 0
mov eax, dword [ebp - 0x590]
mov dword [ebp - 0x448], eax
cmp dword [ebp - 0x448], 0
jne 0x100215d6
cmp dword [ebp - 0x40], 0
jne 0x100215d6
and dword [ebp - 0x80c], 0
jmp 0x100215e0
mov dword [ebp - 0x80c], 1
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x704]
mov dword [ebp - 0xb8c], eax
mov eax, dword [ebp - 0x40]
cmp dword [ebp + eax*4 - 0x704], 0
je 0x10021610
xor eax, eax
inc eax
je 0x10021610
mov dword [ebp - 0x638], 1
jmp 0x10021617
and dword [ebp - 0x638], 0
mov eax, dword [ebp - 0x598]
cmp dword [ebp - 0x638], eax
jne 0x10021631
mov dword [ebp - 0x7d8], 1
jmp 0x10021638
and dword [ebp - 0x7d8], 0
mov eax, dword [ebp - 0x40]
mov eax, dword [ebp + eax*4 - 0x704]
mov dword [ebp - 0x450], eax
mov eax, dword [ebp - 0x40]
mov ecx, dword [ebp - 0x450]
mov dword [ebp + eax*4 - 0x704], ecx
mov eax, dword [ebp - 0x40]
add eax, dword [ebp - 0x450]
cmp eax, dword [ebp - 0x598]
jle 0x10021675
mov dword [ebp - 0x458], 1
jmp 0x1002167c
and dword [ebp - 0x458], 0
imul eax, dword [ebp - 0x458], 0xa2ff
test eax, eax
je 0x10021696
mov dword [ebp - 0x6ac], 1
jmp 0x1002169d
and dword [ebp - 0x6ac], 0
mov eax, dword [ebp - 0x6ac]
mov dword [ebp - 0x814], eax
jmp 0x10021509
jmp 0x1002134f
mov dword [ebp - 0x5a0], 0xfa5fef9d
mov dword [ebp - 0xb94], 1
mov dword [ebp - 0xb9c], 0x4d1878ab
mov dword [ebp - 0x7e8], 0xee87f6fb
mov dword [ebp - 0xba4], 0xaf425f5f
mov dword [ebp - 0xbac], 0x77cc4247
mov dword [ebp - 0xbb4], 0
mov dword [ebp - 0x270], 0xceffb91e
mov dword [ebp - 0x81c], 0xfa01
mov dword [ebp - 0x74], 0
jmp 0x1002171d
mov eax, dword [ebp - 0x74]
inc eax
mov dword [ebp - 0x74], eax
cmp dword [ebp - 0x74], 1
jge 0x10021733
mov eax, dword [ebp - 0x74]
mov dword [ebp + eax*4 - 0x460], 0
jmp 0x10021716
mov dword [ebp - 0x74], 0
jmp 0x10021743
mov eax, dword [ebp - 0x74]
inc eax
mov dword [ebp - 0x74], eax
cmp dword [ebp - 0x74], 4
jge 0x10021759
mov eax, dword [ebp - 0x74]
mov dword [ebp + eax*4 - 0xc8c], 0xffffffff
jmp 0x1002173c
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x460]
mov dword [ebp - 0xbbc], eax
mov eax, dword [ebp - 0x270]
mov ecx, dword [ebp - 0x270]
dec ecx
mov dword [ebp - 0x270], ecx
cmp eax, 0xf2b29949
je 0x10021798
cmp dword [ebp - 0x5a0], 0
jne 0x10021798
and dword [ebp - 0x7e0], 0
jmp 0x100217a2
mov dword [ebp - 0x7e0], 1
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x460]
mov dword [ebp - 0xbd0], eax
cmp dword [ebp - 0x81c], 0x37911b9c
jne 0x100217cd
mov dword [ebp - 0x468], 1
jmp 0x100217d4
and dword [ebp - 0x468], 0
mov eax, dword [ebp - 0x5a0]
cmp dword [ebp - 0x468], eax
je 0x100217ee
mov dword [ebp - 0x640], 1
jmp 0x100217f5
and dword [ebp - 0x640], 0
mov eax, dword [ebp - 0x640]
mov dword [ebp - 0x7e8], eax
mov eax, dword [ebp - 0x18]
movzx eax, byte [ebp + eax - 0x177]
mov ecx, dword [ebp - 0x18]
sub ecx, dword [ebp - 0x13c]
movzx ecx, byte [ebp + ecx - 0x17a]
movzx ecx, word [ebp + ecx*2 - 0xa44]
add eax, ecx
mov ecx, dword [ebp - 0x18]
movzx ecx, byte [ebp + ecx - 0x177]
mov edx, dword [ebp - 0x18]
sub edx, dword [ebp - 0x13c]
movzx edx, byte [ebp + edx - 0x17a]
movzx edx, word [ebp + edx*2 - 0xa44]
and ecx, edx
sub eax, ecx
mov ecx, dword [ebp - 0x18]
movzx ecx, byte [ebp + ecx - 0x177]
mov edx, dword [ebp - 0x18]
sub edx, dword [ebp - 0x13c]
movzx edx, byte [ebp + edx - 0x17a]
movzx edx, word [ebp + edx*2 - 0xa44]
and ecx, edx
sub eax, ecx
mov ecx, dword [ebp - 0x18]
movzx ecx, byte [ebp + ecx - 0x178]
mov word [ebp + ecx*2 - 0xa44], ax
mov dword [ebp - 0x1a4], 0xfffffffb
mov dword [ebp - 0x84], 0xab89
mov dword [ebp - 0x488], 0xffffffff
mov dword [ebp - 0xdc], 0xfffffffe
mov dword [ebp - 0x8e8], 0x11771b70
mov dword [ebp - 0x5c], 0
jmp 0x100218cc
mov eax, dword [ebp - 0x5c]
inc eax
mov dword [ebp - 0x5c], eax
cmp dword [ebp - 0x5c], 3
jge 0x100218e2
mov eax, dword [ebp - 0x5c]
mov dword [ebp + eax*4 - 0x710], 0x90da1152
jmp 0x100218c5
mov dword [ebp - 0x5c], 0
jmp 0x100218f2
mov eax, dword [ebp - 0x5c]
inc eax
mov dword [ebp - 0x5c], eax
cmp dword [ebp - 0x5c], 1
jge 0x10021908
mov eax, dword [ebp - 0x5c]
mov dword [ebp + eax*4 - 0x1d4], 1
jmp 0x100218eb
push 4
pop eax
shl eax, 0
push 4
pop ecx
imul ecx, ecx, 0
mov eax, dword [ebp + eax - 0x710]
mov dword [ebp + ecx - 0x1d4], eax
push 4
pop eax
shl eax, 0
push 4
pop ecx
imul ecx, ecx, 0
mov ecx, dword [ebp + ecx - 0x710]
cmp dword [ebp + eax - 0x710], ecx
jl 0x1002194a
mov dword [ebp - 0x470], 1
jmp 0x10021951
and dword [ebp - 0x470], 0
mov eax, dword [ebp - 0x470]
mov dword [ebp - 0x84], eax
cmp dword [ebp - 0x84], 0
je 0x10021981
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0x710], 0
je 0x10021981
mov dword [ebp - 0x5a8], 1
jmp 0x10021988
and dword [ebp - 0x5a8], 0
mov eax, dword [ebp - 0x1a4]
imul eax, dword [ebp - 0x5a8]
push 4
pop ecx
imul ecx, ecx, 0
cmp eax, dword [ebp + ecx - 0x1d4]
jge 0x100219b0
mov dword [ebp - 0x824], 1
jmp 0x100219b7
and dword [ebp - 0x824], 0
push 9
pop eax
add eax, 0xb857
imul eax, eax, 0xffff
test eax, eax
jne 0x100219db
cmp dword [ebp - 0x1a4], 0
jne 0x100219db
and dword [ebp - 0x478], 0
jmp 0x100219e5
mov dword [ebp - 0x478], 1
cmp dword [ebp - 0x478], 0xffffffff
jb 0x100219fa
mov dword [ebp - 0x698], 1
jmp 0x10021a01
and dword [ebp - 0x698], 0
mov eax, dword [ebp - 0x698]
sub eax, 0x68f6
push 4
pop ecx
imul ecx, ecx, 0
cmp eax, dword [ebp + ecx - 0x1d4]
jle 0x10021a34
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x710], 0
jne 0x10021a34
and dword [ebp - 0x82c], 0
jmp 0x10021a3e
mov dword [ebp - 0x82c], 1
mov eax, dword [ebp - 0x1a4]
mov dword [ebp - 0xbd8], eax
push 0xfffffffffffffffa
pop eax
add eax, 0xfffffff8
je 0x10021b38
mov dword [ebp - 0x2a0], 0xce7
mov dword [ebp - 0x480], 0xb137d370
mov dword [ebp - 0x84], 2
jmp 0x10021a83
mov eax, dword [ebp - 0x84]
dec eax
mov dword [ebp - 0x84], eax
cmp dword [ebp - 0x84], 0
jl 0x10021aa0
mov eax, dword [ebp - 0x84]
cmp dword [ebp + eax*4 - 0x710], 0
je 0x10021a9e
jmp 0x10021aa0
jmp 0x10021a76
mov eax, dword [ebp - 0x2a0]
add eax, dword [ebp - 0x2a0]
mov dword [ebp - 0x480], eax
mov eax, dword [ebp - 0x1a4]
cmp dword [ebp - 0x480], eax
jge 0x10021acc
mov dword [ebp - 0x5b0], 1
jmp 0x10021ad3
and dword [ebp - 0x5b0], 0
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0x1d4], 0x35a7ab5b
mov eax, dword [ebp - 0x5b0]
mov dword [ebp - 0x488], eax
mov eax, 0x35a7ab5b
neg eax
sub eax, dword [ebp - 0x488]
mov dword [ebp - 0xdc], eax
mov eax, dword [ebp - 0x84]
add eax, dword [ebp - 0xdc]
cmp eax, dword [ebp - 0x2a0]
jle 0x10021b23
mov dword [ebp - 0x648], 1
jmp 0x10021b2a
and dword [ebp - 0x648], 0
mov eax, dword [ebp - 0x648]
mov dword [ebp - 0x8e8], eax
jmp 0x10021b8a
mov dword [ebp - 0xdc], 0xa
jmp 0x10021b51
mov eax, dword [ebp - 0xdc]
dec eax
mov dword [ebp - 0xdc], eax
cmp dword [ebp - 0xdc], 0xffffffff
jne 0x10021b76
mov byte [ebp - 0xa1], 0
movzx eax, byte [ebp - 0xa1]
test eax, eax
je 0x10021b74
push 1
call fcn.1001e241
pop ecx
jmp 0x10021b44
push 0
push 0x7050
push 0x38ac
call fcn.1001e2a1
add esp, 0xc
push 1
lea eax, [ebp - 0x13c]
push eax
call fcn.1001e26f
pop ecx
pop ecx
jmp 0x1002134f
mov dword [ebp - 0x7c], 0x17571177
push 2
lea ecx, [ebp - 0x8ac]
call fcn.10017d9e
mov byte [ebp - 4], 0xf
mov dword [ebp - 0xd4], 0x6840eb44
mov dword [ebp - 0x4a0], 0
mov dword [ebp - 0x878], 0xc34f1d4b
push 1
lea eax, [ebp - 0xbe0]
push eax
lea eax, [ebp - 0x8ac]
push eax
call fcn.1001e2a1
add esp, 0xc
mov dword [ebp - 0x7c], 0
jmp 0x10021bfd
mov eax, dword [ebp - 0x7c]
dec eax
mov dword [ebp - 0x7c], eax
cmp dword [ebp - 0x7c], 0xffffffe2
jge 0x10021e95
mov dword [ebp - 0x2a8], 2
mov dword [ebp - 0x1ac], 0
jmp 0x10021c2a
mov eax, dword [ebp - 0x1ac]
inc eax
mov dword [ebp - 0x1ac], eax
cmp dword [ebp - 0x1ac], 1
jge 0x10021c46
mov eax, dword [ebp - 0x1ac]
mov dword [ebp + eax*4 - 0x1ec], 0
jmp 0x10021c1d
cmp dword [ebp - 0x7c], 0
je 0x10021cd0
cmp dword [ebp - 0x7c], 0
je 0x10021c72
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x1ec], 0
je 0x10021c72
mov dword [ebp - 0x278], 1
jmp 0x10021c79
and dword [ebp - 0x278], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x278]
mov dword [ebp + eax - 0x1ec], ecx
mov eax, dword [ebp - 0x2a8]
sub eax, dword [ebp - 0x2a8]
cmp dword [ebp - 0x278], eax
jg 0x10021cac
mov dword [ebp - 0x490], 1
jmp 0x10021cb3
and dword [ebp - 0x490], 0
mov eax, dword [ebp - 0x7c]
add eax, dword [ebp - 0x490]
cmp eax, dword [ebp - 0x2a8]
jl 0x10021cd0
mov dword [ebp - 0x280], 1
jmp 0x10021cd7
and dword [ebp - 0x280], 0
push 1
lea ecx, [ebp - 0x8ac]
call fcn.10017e3c
mov ecx, dword [ebp - 0x280]
mov dword [eax], ecx
mov eax, dword [ebp - 0x7c]
cmp dword [ebp - 0x280], eax
jg 0x10021d03
mov dword [ebp - 0x7f8], 1
jmp 0x10021d0a
and dword [ebp - 0x7f8], 0
push 1
lea ecx, [ebp - 0x8ac]
call fcn.10017e3c
mov eax, dword [eax]
mov dword [ebp - 0xd4], eax
mov dword [ebp - 0xd4], 9
jmp 0x10021d38
mov eax, dword [ebp - 0xd4]
dec eax
mov dword [ebp - 0xd4], eax
cmp dword [ebp - 0xd4], 0xffffffe3
jg 0x10021e90
mov dword [ebp - 0x1b4], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x1b4]
cmp dword [ebp + eax - 0x1ec], ecx
jge 0x10021d70
mov dword [ebp - 0x2b0], 1
jmp 0x10021d77
and dword [ebp - 0x2b0], 0
push 1
lea ecx, [ebp - 0x8ac]
call fcn.10017e3c
mov ecx, dword [ebp - 0x2b0]
mov dword [eax], ecx
mov eax, dword [ebp - 0x1b4]
cmp eax, dword [ebp - 0x2b0]
jl 0x10021da6
mov dword [ebp - 0x5b8], 1
jmp 0x10021dad
and dword [ebp - 0x5b8], 0
mov eax, dword [ebp - 0xd4]
cmp eax, dword [ebp - 0x5b8]
je 0x10021dc7
mov dword [ebp - 0x498], 1
jmp 0x10021dce
and dword [ebp - 0x498], 0
mov eax, dword [ebp - 0x7c]
add eax, dword [ebp - 0x498]
cmp eax, 0xa5616d21
jbe 0x10021dea
mov dword [ebp - 0x6b4], 1
jmp 0x10021df1
and dword [ebp - 0x6b4], 0
mov eax, dword [ebp - 0x6b4]
mov dword [ebp - 0x4a0], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x1ec]
cmp dword [ebp - 0x4a0], eax
jg 0x10021e1e
mov dword [ebp - 0x5c0], 1
jmp 0x10021e25
and dword [ebp - 0x5c0], 0
mov eax, dword [ebp - 0x1b4]
cmp eax, dword [ebp - 0x5c0]
jne 0x10021e3f
mov dword [ebp - 0x4a8], 1
jmp 0x10021e46
and dword [ebp - 0x4a8], 0
mov eax, dword [ebp - 0x1b4]
cmp eax, dword [ebp - 0x4a8]
jne 0x10021e60
mov dword [ebp - 0x650], 1
jmp 0x10021e67
and dword [ebp - 0x650], 0
mov eax, dword [ebp - 0x650]
mov dword [ebp - 0x878], eax
mov byte [ebp - 0xcb], 0
movzx eax, byte [ebp - 0xcb]
test eax, eax
je 0x10021e8b
call dword [sym.imp.KERNEL32.dll_GetCurrentThread]
jmp 0x10021d2b
jmp 0x10021bf6
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x8ac]
call fcn.10017e20
push 2
pop eax
imul eax, eax, 0xc
xor ecx, ecx
mov word [ebp + eax - 0xa44], cx
lea eax, [ebp - 0xa44]
push eax
lea ecx, [ebp - 0xc5c]
call fcn.1002632b
mov dword [ebp - 0x800], eax
mov eax, dword [ebp - 0x800]
mov dword [ebp - 0x8e0], eax
mov byte [ebp - 4], 0x10
push dword [ebp - 0x8e0]
call fcn.1001bd1e
pop ecx
mov dword [ebp - 0x50c], eax
mov byte [ebp - 4], 4
lea ecx, [ebp - 0xc5c]
call fcn.10017bd8
and dword [ebp - 0x1fc], 0
jmp 0x10021f13
mov eax, dword [ebp - 0x1fc]
inc eax
mov dword [ebp - 0x1fc], eax
cmp dword [ebp - 0x1fc], 0xd
jae 0x100224cb
mov dword [ebp - 0x14c], 0x942a1e94
mov dword [ebp - 0x4b0], 0xffffffff
mov dword [ebp - 0x820], 0xfffffff8
mov dword [ebp - 0x880], 0xf30836b1
mov dword [ebp - 0x1dc], 9
mov dword [ebp - 0x1bc], 0x97a61eef
mov dword [ebp - 0x33c], 0x9fe5
mov dword [ebp - 0x8f0], 0x7736d0c1
mov dword [ebp - 0x288], 0x4d9a54e5
mov dword [ebp - 0x2ac], 0xfffffffa
mov dword [ebp - 0x810], 5
push 4
lea ecx, [ebp - 0x8bc]
call fcn.10017d9e
mov byte [ebp - 4], 0x11
mov dword [ebp - 0x4e8], 1
mov dword [ebp - 0x120], 0
jmp 0x10021fc2
mov eax, dword [ebp - 0x120]
inc eax
mov dword [ebp - 0x120], eax
cmp dword [ebp - 0x120], 3
jge 0x10021fde
mov eax, dword [ebp - 0x120]
mov dword [ebp + eax*4 - 0x938], 4
jmp 0x10021fb5
lea eax, [ebp - 0x8bc]
push eax
push 0
push 0x46b2
lea eax, [ebp - 0x120]
push eax
call fcn.1001e5d2
add esp, 0x10
mov eax, dword [ebp - 0x288]
dec eax
mov dword [ebp - 0x288], eax
cmp dword [ebp - 0x288], 0xc3b7
je 0x10022020
mov dword [ebp - 0x808], 1
jmp 0x10022027
and dword [ebp - 0x808], 0
mov eax, dword [ebp - 0x14c]
mov dword [ebp - 0xbd4], eax
mov eax, dword [ebp - 0x2ac]
mov dword [ebp - 0xb60], eax
mov eax, dword [ebp - 0x2ac]
mov dword [ebp - 0xb5c], eax
mov eax, dword [ebp - 0x4b0]
mov dword [ebp - 0xa54], eax
mov eax, dword [ebp - 0x4b0]
mov dword [ebp - 0xb38], eax
or eax, 0xffffffff
cmp eax, 0xfffffffc
ja 0x10022077
mov dword [ebp - 0x5c8], 1
jmp 0x1002207e
and dword [ebp - 0x5c8], 0
mov eax, dword [ebp - 0x880]
add eax, dword [ebp - 0x5c8]
jne 0x10022095
cmp dword [ebp - 0x14c], 0
je 0x100220aa
cmp dword [ebp - 0x1bc], 0
je 0x100220aa
mov dword [ebp - 0x4b8], 1
jmp 0x100220b1
and dword [ebp - 0x4b8], 0
mov eax, dword [ebp - 0x4b8]
mov dword [ebp - 0x1bc], eax
mov eax, dword [ebp - 0x1bc]
mov dword [ebp - 0x1dc], eax
cmp dword [ebp - 0x1dc], 0xe56
jge 0x100220e1
mov dword [ebp - 0x4c0], 1
jmp 0x100220e8
and dword [ebp - 0x4c0], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x938]
mov dword [ebp - 0x6bc], eax
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x6bc]
mov dword [ebp + eax - 0x938], ecx
mov eax, dword [ebp - 0x6bc]
cmp eax, dword [ebp - 0x4c0]
jg 0x10022128
mov dword [ebp - 0x5d0], 1
jmp 0x1002212f
and dword [ebp - 0x5d0], 0
mov eax, dword [ebp - 0x5d0]
neg eax
cmp eax, dword [ebp - 0x2ac]
jl 0x1002214b
mov dword [ebp - 0x4c8], 1
jmp 0x10022152
and dword [ebp - 0x4c8], 0
mov eax, dword [ebp - 0x4c8]
sub eax, 0x1cea
imul eax, dword [ebp - 0x810]
mov dword [ebp - 0x14c], eax
cmp dword [ebp - 0x8f0], 0
je 0x1002218f
mov byte [ebp - 0xa3], 0
lea eax, [ebp - 0xa3]
push eax
push 1
call fcn.1001e323
pop ecx
pop ecx
jmp 0x100224a7
mov dword [ebp - 0x818], 0x625c2a3d
mov dword [ebp - 0x31c], 0
mov dword [ebp - 0x914], 6
mov dword [ebp - 0x910], 6
mov dword [ebp - 0x90c], 6
mov dword [ebp - 0x908], 6
push 3
lea ecx, [ebp - 0x8bc]
call fcn.10017e3c
mov dword [ebp - 0x658], eax
mov eax, dword [ebp - 0x658]
mov eax, dword [eax]
dec eax
mov ecx, dword [ebp - 0x658]
mov dword [ecx], eax
cmp dword [ebp - 0x4e8], 0
jne 0x10022204
mov dword [ebp - 0x4d8], 1
jmp 0x1002220b
and dword [ebp - 0x4d8], 0
cmp dword [ebp - 0x31c], 0x19510ddf
jl 0x10022223
mov dword [ebp - 0x4d0], 1
jmp 0x1002222a
and dword [ebp - 0x4d0], 0
cmp dword [ebp - 0x4d0], 0x75beb379
jne 0x10022242
mov dword [ebp - 0x5d8], 1
jmp 0x10022249
and dword [ebp - 0x5d8], 0
cmp dword [ebp - 0x5d8], 0xffffffff
jne 0x1002225e
mov dword [ebp - 0x6c0], 1
jmp 0x10022265
and dword [ebp - 0x6c0], 0
mov eax, dword [ebp - 0x4d8]
imul eax, dword [ebp - 0x6c0]
test eax, eax
jne 0x1002227f
cmp dword [ebp - 0x818], 0
je 0x1002229b
push 0xfffffffffffffffa
pop eax
test eax, eax
je 0x1002229b
mov eax, 0x1e6d
test eax, eax
je 0x1002229b
mov dword [ebp - 0x888], 1
jmp 0x100222a2
and dword [ebp - 0x888], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x914]
mov dword [ebp - 0xa5c], eax
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x1dc]
cmp dword [ebp + eax - 0x938], ecx
jl 0x100222d6
mov dword [ebp - 0x4e0], 1
jmp 0x100222dd
and dword [ebp - 0x4e0], 0
imul eax, dword [ebp - 0x4e0], 0xffffffff
test eax, eax
jne 0x100222f8
push 6
pop eax
test eax, eax
jne 0x100222f8
and dword [ebp - 0x5e0], 0
jmp 0x10022302
mov dword [ebp - 0x5e0], 1
push 1
lea ecx, [ebp - 0x8bc]
call fcn.10017e3c
mov ecx, dword [ebp - 0x5e0]
cmp ecx, dword [eax]
jne 0x10022325
mov dword [ebp - 0x2f8], 1
jmp 0x1002232c
and dword [ebp - 0x2f8], 0
mov eax, dword [ebp - 0x4e8]
cmp dword [ebp - 0x2f8], eax
jl 0x10022346
mov dword [ebp - 0x2fc], 1
jmp 0x1002234d
and dword [ebp - 0x2fc], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x914]
imul eax, dword [ebp - 0x2fc]
cmp eax, 0x21f9
jle 0x10022374
mov dword [ebp - 0x304], 1
jmp 0x1002237b
and dword [ebp - 0x304], 0
mov eax, dword [ebp - 0x1dc]
imul eax, dword [ebp - 0x304]
test eax, eax
jne 0x10022398
mov dword [ebp - 0x30c], 1
jmp 0x1002239f
and dword [ebp - 0x30c], 0
push 2
lea ecx, [ebp - 0x8bc]
call fcn.10017e3c
mov ecx, dword [ebp - 0x30c]
cmp ecx, dword [eax]
jg 0x100223c2
mov dword [ebp - 0x314], 1
jmp 0x100223c9
and dword [ebp - 0x314], 0
mov eax, dword [ebp - 0x314]
mov dword [ebp - 0x14c], eax
mov eax, dword [ebp - 0x14c]
mov dword [ebp - 0xb64], eax
mov eax, dword [ebp - 0x33c]
mov dword [ebp - 0xa64], eax
mov eax, dword [ebp - 0x31c]
mov dword [ebp - 0xb48], eax
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x820]
cmp dword [ebp + eax - 0x914], ecx
jl 0x1002241a
mov dword [ebp - 0x324], 1
jmp 0x10022421
and dword [ebp - 0x324], 0
cmp dword [ebp - 0x324], 0xf045c746
je 0x10022439
mov dword [ebp - 0x32c], 1
jmp 0x10022440
and dword [ebp - 0x32c], 0
cmp dword [ebp - 0x32c], 0x3855
jg 0x10022458
mov dword [ebp - 0x334], 1
jmp 0x1002245f
and dword [ebp - 0x334], 0
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x938]
imul eax, dword [ebp - 0x334]
sub eax, dword [ebp - 0x33c]
cmp eax, 0xfaf4b059
jne 0x10022491
mov eax, 0xd3be
test eax, eax
jne 0x10022491
and dword [ebp - 0x344], 0
jmp 0x1002249b
mov dword [ebp - 0x344], 1
mov eax, dword [ebp - 0x344]
mov dword [ebp - 0x1bc], eax
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x8bc]
call fcn.10017e20
xor eax, eax
mov ecx, dword [ebp - 0x1fc]
mov word [ebp + ecx*2 - 0xa44], ax
jmp 0x10021f06
cmp dword [ebp - 0x50c], 0
je 0x10023d8a
mov dword [ebp - 0x8c], 0
mov dword [ebp - 0xf4], 0x4c3f4f88
mov dword [ebp - 0x25c], 0xbec5
mov dword [ebp - 0x36c], 0xffffffff
push 4
lea ecx, [ebp - 0x950]
call fcn.10017d9e
mov byte [ebp - 4], 0x12
mov dword [ebp - 0x2c], 0
jmp 0x10022521
mov eax, dword [ebp - 0x2c]
inc eax
mov dword [ebp - 0x2c], eax
cmp dword [ebp - 0x2c], 3
jge 0x10022537
mov eax, dword [ebp - 0x2c]
mov dword [ebp + eax*4 - 0x998], 0xd7f825e7
jmp 0x1002251a
mov dword [ebp - 0x2c], 0
jmp 0x10022547
mov eax, dword [ebp - 0x2c]
inc eax
mov dword [ebp - 0x2c], eax
cmp dword [ebp - 0x2c], 4
jge 0x1002255d
mov eax, dword [ebp - 0x2c]
mov dword [ebp + eax*4 - 0x968], 0x8d020bd2
jmp 0x10022540
mov dword [ebp - 0x2c], 0
jmp 0x1002256d
mov eax, dword [ebp - 0x2c]
inc eax
mov dword [ebp - 0x2c], eax
cmp dword [ebp - 0x2c], 4
jge 0x10022586
push dword [ebp - 0x2c]
lea ecx, [ebp - 0x950]
call fcn.10017e3c
and dword [eax], 0
jmp 0x10022566
mov dword [ebp - 0x8c], 2
jmp 0x1002259f
mov eax, dword [ebp - 0x8c]
dec eax
mov dword [ebp - 0x8c], eax
cmp dword [ebp - 0x8c], 0
jl 0x100227c9
mov dword [ebp - 0x8f8], 0x6f08
mov dword [ebp - 0x364], 0x9d20578c
mov dword [ebp - 0x828], 0x1d2a6f9a
push 3
lea ecx, [ebp - 0xb34]
call fcn.10017d9e
mov byte [ebp - 4], 0x13
push 0xfeb
push 1
lea eax, [ebp - 0xb34]
push eax
lea eax, [ebp - 0xf0]
push eax
push 0x3a11
call fcn.1001e373
add esp, 0x14
mov dword [ebp - 0xf0], 0
jmp 0x10022616
mov eax, dword [ebp - 0xf0]
inc eax
mov dword [ebp - 0xf0], eax
cmp dword [ebp - 0xf0], 1
jge 0x10022632
mov eax, dword [ebp - 0xf0]
mov dword [ebp + eax*4 - 0x38c], 0xc090
jmp 0x10022609
push 4
pop eax
shl eax, 1
mov dword [ebp + eax - 0x968], 0xffffffff
mov eax, dword [ebp - 0xf4]
mov dword [ebp - 0xa6c], eax
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0x968], 0
je 0x1002266b
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x998], 0
mov eax, dword [ebp - 0x25c]
cmp dword [ebp - 0xf4], eax
je 0x1002268e
mov eax, 0x2bb2c593
test eax, eax
je 0x1002268e
mov dword [ebp - 0x24c], 1
jmp 0x10022695
and dword [ebp - 0x24c], 0
push 4
pop eax
shl eax, 1
mov ecx, dword [ebp - 0x24c]
mov dword [ebp + eax - 0x968], ecx
mov eax, dword [ebp - 0x8c]
cmp dword [ebp - 0x24c], eax
jne 0x100226c1
mov dword [ebp - 0x34c], 1
jmp 0x100226c8
and dword [ebp - 0x34c], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x998]
cmp dword [ebp - 0x34c], eax
jg 0x100226e9
mov dword [ebp - 0x354], 1
jmp 0x100226f0
and dword [ebp - 0x354], 0
cmp dword [ebp - 0x354], 1
jb 0x10022705
mov dword [ebp - 0x35c], 1
jmp 0x1002270c
and dword [ebp - 0x35c], 0
mov eax, dword [ebp - 0x35c]
mov dword [ebp - 0x364], eax
mov eax, dword [ebp - 0x364]
mov dword [ebp - 0x36c], eax
mov eax, dword [ebp - 0x36c]
cmp dword [ebp - 0x8f8], eax
je 0x1002273e
mov dword [ebp - 0x374], 1
jmp 0x10022745
and dword [ebp - 0x374], 0
mov eax, dword [ebp - 0x8c]
cmp dword [ebp - 0x374], eax
je 0x1002275f
mov dword [ebp - 0x37c], 1
jmp 0x10022766
and dword [ebp - 0x37c], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x998]
cmp dword [ebp - 0x37c], eax
jg 0x10022787
mov dword [ebp - 0x384], 1
jmp 0x1002278e
and dword [ebp - 0x384], 0
mov eax, dword [ebp - 0x384]
mov dword [ebp - 0x828], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x38c]
inc eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x38c], eax
mov byte [ebp - 4], 0x12
lea ecx, [ebp - 0xb34]
call fcn.10017e20
jmp 0x10022592
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0x968], 0
jne 0x1002284b
mov eax, dword [ebp - 0xf4]
add eax, dword [ebp - 0xf4]
cmp dword [ebp - 0x8c], eax
jl 0x100227f8
mov dword [ebp - 0x254], 1
jmp 0x100227ff
and dword [ebp - 0x254], 0
push 4
pop eax
shl eax, 1
mov ecx, dword [ebp - 0x254]
mov dword [ebp + eax - 0x968], ecx
mov eax, dword [ebp - 0x25c]
cmp dword [ebp - 0x254], eax
jg 0x1002282b
mov dword [ebp - 0x394], 1
jmp 0x10022832
and dword [ebp - 0x394], 0
cmp dword [ebp - 0x394], 0xffffffff
jbe 0x1002284b
push 6
pop eax
test eax, eax
jne 0x1002284b
and dword [ebp - 0x39c], 0
jmp 0x10022855
mov dword [ebp - 0x39c], 1
mov eax, dword [ebp - 0x25c]
cmp eax, dword [ebp - 0x39c]
jg 0x1002286f
mov dword [ebp - 0x3a4], 1
jmp 0x10022876
and dword [ebp - 0x3a4], 0
mov esi, dword [ebp - 0xf4]
add esi, dword [ebp - 0x3a4]
push 3
lea ecx, [ebp - 0x950]
call fcn.10017e3c
cmp esi, dword [eax]
jl 0x100228a3
push 7
pop eax
test eax, eax
jne 0x100228a3
and dword [ebp - 0x3ac], 0
jmp 0x100228ad
mov dword [ebp - 0x3ac], 1
push 3
lea ecx, [ebp - 0x950]
call fcn.10017e3c
mov ecx, dword [ebp - 0x3ac]
sub ecx, dword [eax]
mov dword [ebp - 0x8c], ecx
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x950]
call fcn.10017e20
mov dword [ebp - 0x184], 0xfffb
mov dword [ebp - 0x18c], 1
mov dword [ebp - 0x4c], 0x5f36f6dd
mov dword [ebp - 0x264], 1
mov dword [ebp - 0x3f4], 0xffffffff
mov dword [ebp - 0x180], 0
jmp 0x1002291f
mov eax, dword [ebp - 0x180]
inc eax
mov dword [ebp - 0x180], eax
cmp dword [ebp - 0x180], 4
jge 0x1002293b
mov eax, dword [ebp - 0x180]
mov dword [ebp + eax*4 - 0xc3c], 0xbd92
jmp 0x10022912
cmp dword [ebp - 0x184], 0
jne 0x10022967
mov eax, dword [ebp - 0x264]
inc eax
mov dword [ebp - 0x264], eax
mov dword [ebp - 0x4c], 0x23d1
cmp dword [ebp - 0x4c], 0
jne 0x10022967
and dword [ebp - 0x3d4], 0
jmp 0x10022971
mov dword [ebp - 0x3d4], 1
cmp dword [ebp - 0x184], 0
je 0x10022a1a
cmp dword [ebp - 0x18c], 1
je 0x10022993
mov dword [ebp - 0x3b4], 1
jmp 0x1002299a
and dword [ebp - 0x3b4], 0
mov eax, dword [ebp - 0x3b4]
mov dword [ebp - 0x18c], eax
mov eax, dword [ebp - 0x18c]
cmp dword [ebp - 0x184], eax
jle 0x100229c0
mov dword [ebp - 0x3bc], 1
jmp 0x100229c7
and dword [ebp - 0x3bc], 0
mov eax, dword [ebp - 0x184]
cmp dword [ebp - 0x3bc], eax
jle 0x100229e1
mov dword [ebp - 0x3c4], 1
jmp 0x100229e8
and dword [ebp - 0x3c4], 0
cmp dword [ebp - 0x3c4], 0xfffffff8
ja 0x100229fd
mov dword [ebp - 0x2f4], 1
jmp 0x10022a04
and dword [ebp - 0x2f4], 0
mov eax, dword [ebp - 0x2f4]
neg eax
je 0x10022a1a
mov dword [ebp - 0x3dc], 1
jmp 0x10022a21
and dword [ebp - 0x3dc], 0
mov eax, dword [ebp - 0x3d4]
cmp eax, dword [ebp - 0x3dc]
jne 0x10022a5a
mov dword [ebp - 0x4c], 0
jmp 0x10022a3f
mov eax, dword [ebp - 0x4c]
inc eax
mov dword [ebp - 0x4c], eax
cmp dword [ebp - 0x4c], 4
jge 0x10022a55
mov eax, dword [ebp - 0x4c]
mov dword [ebp + eax*4 - 0xc3c], 8
jmp 0x10022a38
jmp 0x10022b45
mov dword [ebp - 0x17c], 0xb11d
mov dword [ebp - 0x830], 0x5687c41
mov eax, dword [ebp - 0x4c]
mov dword [ebp - 0xb6c], eax
cmp dword [ebp - 0x17c], 5
jg 0x10022a92
cmp dword [ebp - 0x17c], 0
jne 0x10022a92
and dword [ebp - 0x3e4], 0
jmp 0x10022a9c
mov dword [ebp - 0x3e4], 1
mov eax, dword [ebp - 0x3f4]
cmp dword [ebp - 0x3e4], eax
jne 0x10022ab6
mov dword [ebp - 0x3ec], 1
jmp 0x10022abd
and dword [ebp - 0x3ec], 0
cmp dword [ebp - 0x3ec], 0xffffffff
jl 0x10022adb
mov eax, 0x85b3
test eax, eax
je 0x10022adb
mov dword [ebp - 0x890], 1
jmp 0x10022ae2
and dword [ebp - 0x890], 0
mov eax, dword [ebp - 0x4c]
mov dword [ebp - 0xa74], eax
mov eax, dword [ebp - 0x264]
mov dword [ebp - 0xb58], eax
mov eax, dword [ebp - 0x18c]
mov dword [ebp - 0xa7c], eax
mov eax, dword [ebp - 0x3f4]
mov dword [ebp - 0xb74], eax
mov eax, dword [ebp - 0x4c]
mov dword [ebp - 0xa84], eax
mov eax, dword [ebp - 0x17c]
cmp dword [ebp - 0x17c], eax
jge 0x10022b32
mov dword [ebp - 0x3fc], 1
jmp 0x10022b39
and dword [ebp - 0x3fc], 0
mov eax, dword [ebp - 0x3fc]
mov dword [ebp - 0x830], eax
mov dword [ebp - 0x40c], 0xfa5fef9d
mov dword [ebp - 0xb7c], 1
mov dword [ebp - 0xa8c], 0x4d1878ab
mov dword [ebp - 0x73c], 0xee87f6fb
mov dword [ebp - 0xbc4], 0xaf425f5f
mov dword [ebp - 0xa94], 0x77cc4247
mov dword [ebp - 0xb68], 0
mov dword [ebp - 0x26c], 0xceffb91e
mov dword [ebp - 0x838], 0xfa01
mov dword [ebp - 0x60], 0
jmp 0x10022baf
mov eax, dword [ebp - 0x60]
inc eax
mov dword [ebp - 0x60], eax
cmp dword [ebp - 0x60], 1
jge 0x10022bc5
mov eax, dword [ebp - 0x60]
mov dword [ebp + eax*4 - 0x404], 0
jmp 0x10022ba8
mov dword [ebp - 0x60], 0
jmp 0x10022bd5
mov eax, dword [ebp - 0x60]
inc eax
mov dword [ebp - 0x60], eax
cmp dword [ebp - 0x60], 4
jge 0x10022beb
mov eax, dword [ebp - 0x60]
mov dword [ebp + eax*4 - 0xc7c], 0xffffffff
jmp 0x10022bce
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x404]
mov dword [ebp - 0xa9c], eax
mov eax, dword [ebp - 0x26c]
mov ecx, dword [ebp - 0x26c]
dec ecx
mov dword [ebp - 0x26c], ecx
cmp eax, 0xf2b29949
je 0x10022c2a
cmp dword [ebp - 0x40c], 0
jne 0x10022c2a
and dword [ebp - 0x8ec], 0
jmp 0x10022c34
mov dword [ebp - 0x8ec], 1
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x404]
mov dword [ebp - 0xba8], eax
cmp dword [ebp - 0x838], 0x37911b9c
jne 0x10022c5f
mov dword [ebp - 0x414], 1
jmp 0x10022c66
and dword [ebp - 0x414], 0
mov eax, dword [ebp - 0x40c]
cmp dword [ebp - 0x414], eax
je 0x10022c80
mov dword [ebp - 0x41c], 1
jmp 0x10022c87
and dword [ebp - 0x41c], 0
mov eax, dword [ebp - 0x41c]
mov dword [ebp - 0x73c], eax
mov byte [ebp - 0x244], 5
mov byte [ebp - 0x243], 0x8f
mov byte [ebp - 0x242], 4
mov byte [ebp - 0x241], 0x25
mov byte [ebp - 0x240], 8
mov byte [ebp - 0x23f], 0x2d
mov byte [ebp - 0x23e], 0xa
mov byte [ebp - 0x23d], 0x18
mov byte [ebp - 0x23c], 6
mov byte [ebp - 0x23b], 0x1b
mov byte [ebp - 0x23a], 1
mov byte [ebp - 0x239], 0xd
mov byte [ebp - 0x238], 0x2a
mov byte [ebp - 0x237], 0x5a
mov byte [ebp - 0x236], 0x1f
mov byte [ebp - 0x235], 0x93
mov byte [ebp - 0x234], 0x53
mov byte [ebp - 0x233], 0xc7
mov byte [ebp - 0x232], 0x60
mov byte [ebp - 0x231], 0x2f
mov byte [ebp - 0x230], 0x51
mov byte [ebp - 0x22f], 2
mov byte [ebp - 0x22e], 0xa7
mov byte [ebp - 0x22d], 0xd7
mov byte [ebp - 0x22c], 0xd0
mov byte [ebp - 0x22b], 0xb0
mov byte [ebp - 0x22a], 0xca
mov byte [ebp - 0x229], 0xcc
mov byte [ebp - 0x228], 0x18
mov byte [ebp - 0x227], 0x36
mov byte [ebp - 0x226], 0xb6
mov byte [ebp - 0x225], 0x4a
mov byte [ebp - 0x224], 0x18
mov byte [ebp - 0x223], 0x10
mov byte [ebp - 0x222], 0xd8
mov byte [ebp - 0x221], 0xac
mov byte [ebp - 0x220], 0x18
mov byte [ebp - 0x21f], 0x8e
mov byte [ebp - 0x21e], 0xf5
mov byte [ebp - 0x21d], 0xb0
mov byte [ebp - 0x21c], 3
mov byte [ebp - 0x21b], 0xd7
mov byte [ebp - 0x21a], 0x4b
mov byte [ebp - 0x219], 0xe0
mov byte [ebp - 0x218], 0xaf
mov byte [ebp - 0x217], 0x3a
mov byte [ebp - 0x216], 0xf
mov byte [ebp - 0x215], 0xe6
mov byte [ebp - 0x214], 0xf9
mov byte [ebp - 0x213], 0xd2
mov byte [ebp - 0x212], 0x1d
mov byte [ebp - 0x211], 0x53
mov byte [ebp - 0x210], 0x82
mov byte [ebp - 0x20f], 0x96
mov byte [ebp - 0x20e], 0x6b
mov byte [ebp - 0x20d], 0xb
mov byte [ebp - 0x20c], 0x38
mov byte [ebp - 0x20b], 7
mov byte [ebp - 0x20a], 0x25
mov byte [ebp - 0x209], 3
mov byte [ebp - 0x208], 0x16
mov byte [ebp - 0x207], 2
mov byte [ebp - 0x206], 5
mov byte [ebp - 0x205], 0
mov byte [ebp - 0x204], 0x2d
mov byte [ebp - 0x203], 9
mov byte [ebp - 0x202], 0x3e
mov dword [ebp - 0xfc], 0x951ad386
mov dword [ebp - 0xa08], 0xffffffff
mov dword [ebp - 0xa04], 0xffffffff
mov dword [ebp - 0xa00], 0xffffffff
mov dword [ebp - 0x9fc], 0xffffffff
mov dword [ebp - 0x274], 0x8217
mov dword [ebp - 0xaa4], 0
mov dword [ebp - 0x1a0], 0
jmp 0x10022ec7
mov eax, dword [ebp - 0x1a0]
inc eax
mov dword [ebp - 0x1a0], eax
cmp dword [ebp - 0x1a0], 3
jge 0x10022ee3
mov eax, dword [ebp - 0x1a0]
mov dword [ebp + eax*4 - 0x6f8], 0xffff
jmp 0x10022eba
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x6f8]
mov dword [ebp - 0xfc], eax
mov dword [ebp - 0xfc], 0
jmp 0x10022f0e
mov eax, dword [ebp - 0xfc]
inc eax
mov dword [ebp - 0xfc], eax
cmp dword [ebp - 0xfc], 2
jg 0x1002321f
mov dword [ebp - 0x30], 0xfffffffc
mov dword [ebp - 0x484], 0xfffffffe
mov dword [ebp - 0x30], 2
jmp 0x10022f3c
mov eax, dword [ebp - 0x30]
dec eax
mov dword [ebp - 0x30], eax
cmp dword [ebp - 0x30], 0
jl 0x1002321a
push 2
lea ecx, [ebp - 0x2d0]
call fcn.10017d9e
mov byte [ebp - 4], 0x14
push 1
lea eax, [ebp - 0x2d0]
push eax
lea eax, [ebp - 0xb70]
push eax
call fcn.1001e41a
add esp, 0xc
push 4
pop eax
shl eax, 1
mov dword [ebp + eax - 0xa08], 1
push 1
lea ecx, [ebp - 0x2d0]
call fcn.10017e3c
and dword [eax], 0
jmp 0x10022fb5
push 1
lea ecx, [ebp - 0x2d0]
call fcn.10017e3c
mov dword [ebp - 0x424], eax
mov eax, dword [ebp - 0x424]
mov eax, dword [eax]
inc eax
mov ecx, dword [ebp - 0x424]
mov dword [ecx], eax
push 1
lea ecx, [ebp - 0x2d0]
call fcn.10017e3c
cmp dword [eax], 2
jg 0x10023206
mov dword [ebp - 0x45c], 1
mov dword [ebp - 0x474], 0xffffffff
mov eax, dword [ebp - 0x30]
mov eax, dword [ebp + eax*4 - 0x6f8]
mov dword [ebp - 0xaac], eax
push 1
lea ecx, [ebp - 0x2d0]
call fcn.10017e3c
mov esi, eax
mov edi, dword [ebp - 0x30]
push 1
lea ecx, [ebp - 0x2d0]
call fcn.10017e3c
imul edi, dword [eax]
imul edi, dword [esi]
cmp edi, dword [ebp - 0x274]
je 0x10023028
mov dword [ebp - 0x42c], 1
jmp 0x1002302f
and dword [ebp - 0x42c], 0
mov eax, dword [ebp - 0x30]
mov eax, dword [ebp + eax*4 - 0x6f8]
cmp dword [ebp - 0x42c], eax
jg 0x1002304d
mov dword [ebp - 0x434], 1
jmp 0x10023054
and dword [ebp - 0x434], 0
mov eax, dword [ebp - 0x434]
add eax, 0x1780eec2
je 0x10023076
mov eax, 0x3e5ec352
test eax, eax
je 0x10023076
mov dword [ebp - 0x43c], 1
jmp 0x1002307d
and dword [ebp - 0x43c], 0
mov eax, dword [ebp - 0x30]
cmp dword [ebp - 0x43c], eax
jg 0x10023094
mov dword [ebp - 0x444], 1
jmp 0x1002309b
and dword [ebp - 0x444], 0
cmp dword [ebp - 0x444], 0xfafb
jle 0x100230b3
mov dword [ebp - 0x44c], 1
jmp 0x100230ba
and dword [ebp - 0x44c], 0
cmp dword [ebp - 0x44c], 0xfffffffb
je 0x100230cf
mov dword [ebp - 0x744], 1
jmp 0x100230d6
and dword [ebp - 0x744], 0
mov eax, dword [ebp - 0x30]
mov dword [ebp - 0xbc8], eax
imul eax, dword [ebp - 0x30], 0xbc69
imul eax, dword [ebp - 0x274]
cmp eax, dword [ebp - 0x45c]
jle 0x10023101
mov dword [ebp - 0x454], 1
jmp 0x10023108
and dword [ebp - 0x454], 0
mov esi, dword [ebp - 0x30]
add esi, dword [ebp - 0x454]
push 1
lea ecx, [ebp - 0x2d0]
call fcn.10017e3c
cmp esi, dword [eax]
je 0x10023199
mov eax, dword [ebp - 0x45c]
cmp dword [ebp - 0x274], eax
jne 0x1002313c
mov dword [ebp - 0x464], 1
jmp 0x10023143
and dword [ebp - 0x464], 0
mov eax, dword [ebp - 0x30]
mov eax, dword [ebp + eax*4 - 0x6f8]
mov dword [ebp - 0x46c], eax
mov eax, dword [ebp - 0x30]
mov ecx, dword [ebp - 0x46c]
mov dword [ebp + eax*4 - 0x6f8], ecx
mov eax, dword [ebp - 0x464]
sub eax, dword [ebp - 0x46c]
mov dword [ebp - 0x484], eax
mov byte [ebp - 0xca], 0
push 1
push 0x5f18
lea eax, [ebp - 0xca]
push eax
push 0x56ee
call fcn.1001e4c2
add esp, 0x10
jmp 0x10023201
mov dword [ebp - 0x74c], 0xfffffff7
mov esi, dword [ebp - 0x74c]
push 4
pop eax
shl eax, 1
sub esi, dword [ebp + eax - 0x6f8]
push 1
lea ecx, [ebp - 0x2d0]
call fcn.10017e3c
imul esi, dword [eax]
mov dword [ebp - 0x474], esi
mov esi, dword [ebp - 0x474]
push 1
lea ecx, [ebp - 0x2d0]
call fcn.10017e3c
cmp esi, dword [eax]
jg 0x100231ee
mov dword [ebp - 0x47c], 1
jmp 0x100231f5
and dword [ebp - 0x47c], 0
mov eax, dword [ebp - 0x47c]
mov dword [ebp - 0x484], eax
jmp 0x10022f91
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x2d0]
call fcn.10017e20
jmp 0x10022f35
jmp 0x10022f01
xor eax, eax
inc eax
shl eax, 0
movzx eax, byte [ebp + eax - 0x244]
or eax, 0xe6
xor ecx, ecx
inc ecx
shl ecx, 0
movzx ecx, byte [ebp + ecx - 0x244]
and ecx, 0xe6
sub eax, ecx
xor ecx, ecx
inc ecx
imul ecx, ecx, 0
movzx ecx, byte [ebp + ecx - 0x244]
mov byte [ebp + ecx - 0x6ec], al
mov dword [ebp - 0x1c], 2
and dword [ebp - 0x11c], 0
jmp 0x10023275
mov eax, dword [ebp - 0x1c]
inc eax
inc eax
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 0x43
jae 0x100238d1
push 1
lea ecx, [ebp - 0x9a4]
call fcn.10017d9e
mov byte [ebp - 4], 0x15
mov dword [ebp - 0x764], 0
mov dword [ebp - 0x76c], 0xcbcb1a7a
mov dword [ebp - 0x754], 8
mov dword [ebp - 0x75c], 0x4886255d
mov dword [ebp - 0xab4], 0x9842
mov dword [ebp - 0x1a8], 0
jmp 0x100232db
mov eax, dword [ebp - 0x1a8]
inc eax
mov dword [ebp - 0x1a8], eax
cmp dword [ebp - 0x1a8], 1
jge 0x100232fd
push dword [ebp - 0x1a8]
lea ecx, [ebp - 0x9a4]
call fcn.10017e3c
mov dword [eax], 1
jmp 0x100232ce
push 0x57d2
lea eax, [ebp - 0x754]
push eax
lea eax, [ebp - 0x75c]
push eax
lea eax, [ebp - 0x9a4]
push eax
push 1
lea eax, [ebp - 0x764]
push eax
lea eax, [ebp - 0x76c]
push eax
call fcn.1001e542
add esp, 0x1c
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x9a4]
call fcn.10017e20
xor eax, eax
inc eax
imul eax, eax, 0
movzx eax, byte [ebp + eax - 0x244]
lea eax, [eax + eax + 2]
cmp dword [ebp - 0x1c], eax
jne 0x10023605
push 1
lea ecx, [ebp - 0xb44]
call fcn.10017d9e
mov byte [ebp - 4], 0x16
mov dword [ebp - 0x1b0], 0
jmp 0x10023383
mov eax, dword [ebp - 0x1b0]
inc eax
mov dword [ebp - 0x1b0], eax
cmp dword [ebp - 0x1b0], 1
jge 0x100233a2
push dword [ebp - 0x1b0]
lea ecx, [ebp - 0xb44]
call fcn.10017e3c
and dword [eax], 0
jmp 0x10023376
mov byte [ebp - 0x8e], 0
push 0x31bb
push 1
lea eax, [ebp - 0x8e]
push eax
push 0x358d
call fcn.1001e5d2
add esp, 0x10
mov byte [ebp - 0x90], 0
push 0x936
push 0x19bb
push 0x5db6
push 0x383c
push 1
lea eax, [ebp - 0x90]
push eax
push 0x114d
push 0x3a22
call fcn.1001e656
add esp, 0x20
mov byte [ebp - 4], 4
lea ecx, [ebp - 0xb44]
call fcn.10017e20
mov eax, dword [ebp - 0x1c]
movzx eax, byte [ebp + eax - 0x244]
inc eax
mov dword [ebp - 0x11c], eax
mov eax, dword [ebp - 0x1c]
movzx eax, byte [ebp + eax - 0x244]
mov ecx, dword [ebp - 0x1c]
lea eax, [ecx + eax - 1]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x104], 0x99c
mov dword [ebp - 0x1b8], 4
mov dword [ebp - 0x114], 1
mov dword [ebp - 0x10c], 3
mov dword [ebp - 0x77c], 0xfffffff9
mov dword [ebp - 0x784], 0
push 2
lea ecx, [ebp - 0x9c8]
call fcn.10017d9e
mov byte [ebp - 4], 0x17
push 0xfdb
lea eax, [ebp - 0xb78]
push eax
lea eax, [ebp - 0x9c8]
push eax
push 0
call fcn.10024972
add esp, 0x10
cmp dword [ebp - 0x104], 0
jne 0x100234aa
cmp dword [ebp - 0x104], 0
mov eax, dword [ebp - 0x1b8]
mov dword [ebp - 0xabc], eax
mov eax, dword [ebp - 0x1b8]
cmp dword [ebp - 0x104], eax
jg 0x100234d0
mov dword [ebp - 0x48c], 1
jmp 0x100234d7
and dword [ebp - 0x48c], 0
mov eax, dword [ebp - 0x48c]
mov dword [ebp - 0x114], eax
mov eax, dword [ebp - 0x10c]
cmp dword [ebp - 0x114], eax
jg 0x100234fd
mov dword [ebp - 0x494], 1
jmp 0x10023504
and dword [ebp - 0x494], 0
mov eax, dword [ebp - 0x104]
cmp dword [ebp - 0x494], eax
jge 0x1002351e
mov dword [ebp - 0x49c], 1
jmp 0x10023525
and dword [ebp - 0x49c], 0
mov eax, dword [ebp - 0x10c]
cmp dword [ebp - 0x49c], eax
jne 0x1002353f
mov dword [ebp - 0x774], 1
jmp 0x10023546
and dword [ebp - 0x774], 0
mov eax, dword [ebp - 0x1b8]
mov dword [ebp - 0xbb0], eax
push 2
pop eax
sub eax, dword [ebp - 0x104]
cmp eax, dword [ebp - 0x77c]
jl 0x1002356f
mov dword [ebp - 0x4a4], 1
jmp 0x10023576
and dword [ebp - 0x4a4], 0
mov eax, dword [ebp - 0x4a4]
mov dword [ebp - 0x784], eax
mov eax, dword [ebp - 0x1b8]
cmp dword [ebp - 0x114], eax
jge 0x1002359c
mov dword [ebp - 0x4ac], 1
jmp 0x100235a3
and dword [ebp - 0x4ac], 0
mov eax, dword [ebp - 0x10c]
mov dword [ebp - 0x10c], eax
mov eax, dword [ebp - 0x10c]
cmp eax, dword [ebp - 0x4ac]
jge 0x100235c9
mov dword [ebp - 0x4b4], 1
jmp 0x100235d0
and dword [ebp - 0x4b4], 0
mov eax, dword [ebp - 0x4b4]
mov dword [ebp - 0x114], eax
mov esi, dword [ebp - 0x114]
push 1
lea ecx, [ebp - 0x9c8]
call fcn.10017e3c
mov dword [eax], esi
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x9c8]
call fcn.10017e20
jmp 0x1002326d
mov dword [ebp - 0x27c], 0x7ab6
mov dword [ebp - 0x64], 0
jmp 0x1002361f
mov eax, dword [ebp - 0x64]
inc eax
mov dword [ebp - 0x64], eax
cmp dword [ebp - 0x64], 4
jge 0x10023635
mov eax, dword [ebp - 0x64]
mov dword [ebp + eax*4 - 0xc6c], 0x7563ffaf
jmp 0x10023618
mov dword [ebp - 0x64], 0
jmp 0x10023645
mov eax, dword [ebp - 0x64]
inc eax
mov dword [ebp - 0x64], eax
cmp dword [ebp - 0x64], 1
jge 0x1002365b
mov eax, dword [ebp - 0x64]
mov dword [ebp + eax*4 - 0x794], 0xc9fa8bc0
jmp 0x1002363e
cmp dword [ebp - 0x27c], 0x6a1c
jle 0x10023673
mov dword [ebp - 0x4bc], 1
jmp 0x1002367a
and dword [ebp - 0x4bc], 0
cmp dword [ebp - 0x4bc], 1
jb 0x1002368f
mov dword [ebp - 0x78c], 1
jmp 0x10023696
and dword [ebp - 0x78c], 0
mov eax, dword [ebp - 0x27c]
mov dword [ebp - 0xac4], eax
imul eax, dword [ebp - 0x27c], 0x7631
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x794], eax
mov byte [ebp - 0x92], 0
push 1
push 0x21a9
lea eax, [ebp - 0x92]
push eax
push 0x6420
call fcn.1001e7b1
add esp, 0x10
mov eax, dword [ebp - 0x1c]
movzx eax, byte [ebp + eax - 0x243]
mov ecx, dword [ebp - 0x1c]
sub ecx, dword [ebp - 0x11c]
movzx ecx, byte [ebp + ecx - 0x246]
movsx ecx, byte [ebp + ecx - 0x6ec]
add eax, ecx
mov ecx, dword [ebp - 0x1c]
movzx ecx, byte [ebp + ecx - 0x243]
mov edx, dword [ebp - 0x1c]
sub edx, dword [ebp - 0x11c]
movzx edx, byte [ebp + edx - 0x246]
movsx edx, byte [ebp + edx - 0x6ec]
and ecx, edx
sub eax, ecx
mov ecx, dword [ebp - 0x1c]
movzx ecx, byte [ebp + ecx - 0x243]
mov edx, dword [ebp - 0x1c]
sub edx, dword [ebp - 0x11c]
movzx edx, byte [ebp + edx - 0x246]
movsx edx, byte [ebp + edx - 0x6ec]
and ecx, edx
sub eax, ecx
mov ecx, dword [ebp - 0x1c]
movzx ecx, byte [ebp + ecx - 0x244]
mov byte [ebp + ecx - 0x6ec], al
push 2
lea ecx, [ebp - 0x8cc]
call fcn.10017d9e
mov byte [ebp - 4], 0x18
mov dword [ebp - 0x1c0], 0
jmp 0x1002378d
mov eax, dword [ebp - 0x1c0]
inc eax
mov dword [ebp - 0x1c0], eax
cmp dword [ebp - 0x1c0], 2
jge 0x100237af
push dword [ebp - 0x1c0]
lea ecx, [ebp - 0x8cc]
call fcn.10017e3c
mov dword [eax], 1
jmp 0x10023780
push 0
lea ecx, [ebp - 0x8cc]
call fcn.10017e3c
mov dword [eax], 0xffffffee
jmp 0x100237e8
push 0
lea ecx, [ebp - 0x8cc]
call fcn.10017e3c
mov dword [ebp - 0x4c4], eax
mov eax, dword [ebp - 0x4c4]
mov eax, dword [eax]
dec eax
mov ecx, dword [ebp - 0x4c4]
mov dword [ecx], eax
push 0
lea ecx, [ebp - 0x8cc]
call fcn.10017e3c
cmp dword [eax], 0xffffffec
je 0x100238b6
push 3
lea ecx, [ebp - 0x944]
call fcn.10017d9e
mov byte [ebp - 4], 0x19
mov dword [ebp - 0x1c8], 0x97f0a290
lea eax, [ebp - 0xb80]
push eax
lea eax, [ebp - 0x944]
push eax
push 1
call fcn.1001e83e
add esp, 0xc
mov dword [ebp - 0x1c8], 2
jmp 0x1002384a
mov eax, dword [ebp - 0x1c8]
dec eax
mov dword [ebp - 0x1c8], eax
cmp dword [ebp - 0x1c8], 0
jl 0x1002387c
mov byte [ebp - 0x94], 0
push 0x46d
push 0x7ad7
lea eax, [ebp - 0x94]
push eax
push 0x324c
push 1
call fcn.1001e8b8
add esp, 0x14
jmp 0x1002383d
push 0
lea ecx, [ebp - 0x944]
call fcn.10017e3c
cmp dword [eax], 0
je 0x100238a2
mov byte [ebp - 4], 0x18
lea ecx, [ebp - 0x944]
call fcn.10017e20
jmp 0x100237c4
mov byte [ebp - 4], 0x18
lea ecx, [ebp - 0x944]
call fcn.10017e20
jmp 0x100237c4
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x8cc]
call fcn.10017e20
and dword [ebp - 0x11c], 0
jmp 0x1002326d
mov dword [ebp - 0x50], 0x3905c809
mov dword [ebp - 0x124], 1
mov dword [ebp - 0x79c], 0xffff
mov dword [ebp - 0x130], 1
mov dword [ebp - 0x284], 1
mov dword [ebp - 0x1d0], 0
jmp 0x10023919
mov eax, dword [ebp - 0x1d0]
inc eax
mov dword [ebp - 0x1d0], eax
cmp dword [ebp - 0x1d0], 1
jge 0x10023935
mov eax, dword [ebp - 0x1d0]
mov dword [ebp + eax*4 - 0xd8], 0x9b31
jmp 0x1002390c
mov dword [ebp - 0x50], 0
jmp 0x10023945
mov eax, dword [ebp - 0x50]
inc eax
mov dword [ebp - 0x50], eax
cmp dword [ebp - 0x50], 1
jge 0x1002395b
mov eax, dword [ebp - 0x50]
mov dword [ebp + eax*4 - 0xd8], 0xfffa
jmp 0x1002393e
cmp dword [ebp - 0x50], 0
je 0x1002399e
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xd8]
mov dword [ebp - 0xacc], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xd8]
add eax, 0xfffc
imul eax, dword [ebp - 0x50]
sub eax, dword [ebp - 0x79c]
je 0x1002399e
mov dword [ebp - 0x4cc], 1
jmp 0x100239a5
and dword [ebp - 0x4cc], 0
mov eax, dword [ebp - 0x4cc]
mov dword [ebp - 0x50], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xd8]
cmp eax, dword [ebp - 0x50]
jl 0x100239cc
mov dword [ebp - 0x4d4], 1
jmp 0x100239d3
and dword [ebp - 0x4d4], 0
mov eax, dword [ebp - 0x130]
cmp dword [ebp - 0x4d4], eax
jg 0x100239ed
mov dword [ebp - 0x7a4], 1
jmp 0x100239f4
and dword [ebp - 0x7a4], 0
mov eax, dword [ebp - 0x130]
mov dword [ebp - 0xbcc], eax
mov eax, dword [ebp - 0x50]
push 4
pop ecx
imul ecx, ecx, 0
imul eax, dword [ebp + ecx - 0xd8]
cmp eax, dword [ebp - 0x124]
jle 0x10023a25
mov dword [ebp - 0x4dc], 1
jmp 0x10023a2c
and dword [ebp - 0x4dc], 0
cmp dword [ebp - 0x4dc], 0x25d3c095
jge 0x10023a44
mov dword [ebp - 0x4e4], 1
jmp 0x10023a4b
and dword [ebp - 0x4e4], 0
mov eax, dword [ebp - 0x124]
add eax, dword [ebp - 0x4e4]
sub eax, dword [ebp - 0x130]
imul eax, dword [ebp - 0x124]
add eax, dword [ebp - 0x284]
cmp eax, 0xfd8b
je 0x10023a86
cmp dword [ebp - 0x284], 0
je 0x10023a86
mov dword [ebp - 0x4ec], 1
jmp 0x10023a8d
and dword [ebp - 0x4ec], 0
mov eax, dword [ebp - 0x284]
add eax, dword [ebp - 0x4ec]
jne 0x10023aad
cmp dword [ebp - 0x124], 0
jne 0x10023aad
and dword [ebp - 0x4f4], 0
jmp 0x10023ab7
mov dword [ebp - 0x4f4], 1
mov eax, dword [ebp - 0x130]
cmp dword [ebp - 0x4f4], eax
jl 0x10023ad1
mov dword [ebp - 0x4fc], 1
jmp 0x10023ad8
and dword [ebp - 0x4fc], 0
mov eax, dword [ebp - 0x124]
cmp dword [ebp - 0x4fc], eax
jg 0x10023af2
mov dword [ebp - 0x504], 1
jmp 0x10023af9
and dword [ebp - 0x504], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xd8]
sub eax, dword [ebp - 0x504]
mov dword [ebp - 0x130], eax
xor eax, eax
inc eax
imul eax, eax, 0xc
mov byte [ebp + eax - 0x6ec], 0
mov dword [ebp - 0x138], 0x313dd33a
mov dword [ebp - 0x138], 0
jmp 0x10023b43
mov eax, dword [ebp - 0x138]
inc eax
mov dword [ebp - 0x138], eax
cmp dword [ebp - 0x138], 0x1c
je 0x10023b9e
mov dword [ebp - 0x1d8], 0xfe01bd97
mov dword [ebp - 0x1d8], 0
jmp 0x10023b6f
mov eax, dword [ebp - 0x1d8]
dec eax
mov dword [ebp - 0x1d8], eax
cmp dword [ebp - 0x1d8], 0xfffffff6
jne 0x10023b9c
cmp dword [ebp - 0x138], 0
je 0x10023b83
jmp 0x10023b9c
mov byte [ebp - 0x96], 0
lea eax, [ebp - 0x96]
push eax
push 0
call fcn.1001e9ff
pop ecx
pop ecx
jmp 0x10023b62
jmp 0x10023b36
lea eax, [ebp - 0x6ec]
push eax
lea ecx, [ebp - 0xc2c]
call fcn.1002635b
mov byte [ebp - 4], 0x1a
and dword [ebp - 0x1f0], 0
jmp 0x10023bca
cmp dword [ebp - 0x1f0], 0xd
jae 0x10023d10
mov dword [ebp - 0x1e8], 0xb7c7ce53
mov dword [ebp - 0x1e0], 0
jmp 0x10023bfa
mov eax, dword [ebp - 0x1e0]
inc eax
mov dword [ebp - 0x1e0], eax
cmp dword [ebp - 0x1e0], 3
jge 0x10023c16
mov eax, dword [ebp - 0x1e0]
mov dword [ebp + eax*4 - 0xc14], 0
jmp 0x10023bed
mov dword [ebp - 0x1e8], 0
jmp 0x10023c2f
cmp dword [ebp - 0x1e8], 2
jg 0x10023ce5
mov dword [ebp - 0x80], 0xfffffffd
mov dword [ebp - 0x80], 2
jmp 0x10023c53
cmp dword [ebp - 0x80], 0
jl 0x10023cb4
mov byte [ebp - 0x9a], 0
movzx eax, byte [ebp - 0x9a]
test eax, eax
je 0x10023cfd
call dword [sym.imp.KERNEL32.dll_GetOEMCP]
mov eax, dword [ebp - 0x1f0]
mov byte [ebp + eax - 0x6ec], 0
jmp 0x10023bbd
mov dword [ebp - 0x7ac], 0x87fb
cmp dword [ebp - 0x7ac], 0
je 0x10023d45
mov byte [ebp - 0x9c], 0
movzx eax, byte [ebp - 0x9c]
test eax, eax
je 0x10023d43
push 0x1a61
push 1
call fcn.1001e9ff
pop ecx
pop ecx
jmp 0x10023d5d
mov byte [ebp - 0x9e], 0
movzx eax, byte [ebp - 0x9e]
test eax, eax
je 0x10023d5d
call dword [sym.imp.USER32.dll_ReleaseCapture]
push 0
push 0
lea eax, [ebp - 0xc2c]
push eax
push dword [ebp - 0x50c]
call fcn.10025191
add esp, 0x10
mov dword [0x10670a10], eax
mov byte [ebp - 4], 4
lea ecx, [ebp - 0xc2c]
call fcn.10017d00
push 3
lea ecx, [ebp - 0x694]
call fcn.10017d9e
mov byte [ebp - 4], 0x1b
mov dword [ebp - 0x14], 4
mov dword [ebp - 0x6c], 0xffffffff
mov dword [ebp - 0x5ac], 0x93208af0
mov dword [ebp - 0x7b4], 0x456c
lea eax, [ebp - 0x148]
push eax
push 0
push 0x7379
push 0x1989
lea eax, [ebp - 0x694]
push eax
push 0x779b
call fcn.10026138
add esp, 0x18
mov dword [ebp - 0x148], 0
jmp 0x10023dfd
mov eax, dword [ebp - 0x148]
inc eax
mov dword [ebp - 0x148], eax
cmp dword [ebp - 0x148], 3
jge 0x10023e19
mov eax, dword [ebp - 0x148]
mov dword [ebp + eax*4 - 0xb54], 0
jmp 0x10023df0
mov dword [ebp - 0x14], 2
jmp 0x10023e29
mov eax, dword [ebp - 0x14]
dec eax
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 0
jl 0x10024330
mov dword [ebp - 0x58], 0xa88e00f6
cmp dword [ebp - 0x58], 0
je 0x10023e4c
mov dword [ebp - 0x534], 1
jmp 0x10023e53
and dword [ebp - 0x534], 0
mov eax, dword [ebp - 0x14]
sub eax, 0xfbf6
imul eax, dword [ebp - 0x14]
cmp eax, dword [ebp - 0x58]
jge 0x10023e70
mov dword [ebp - 0x514], 1
jmp 0x10023e77
and dword [ebp - 0x514], 0
mov eax, dword [ebp - 0x514]
sub eax, dword [ebp - 0x14]
cmp eax, dword [ebp - 0x14]
jg 0x10023e91
mov dword [ebp - 0x51c], 1
jmp 0x10023e98
and dword [ebp - 0x51c], 0
cmp dword [ebp - 0x51c], 0xfffd
ja 0x10023eb0
mov dword [ebp - 0x524], 1
jmp 0x10023eb7
and dword [ebp - 0x524], 0
mov eax, dword [ebp - 0x14]
cmp dword [ebp - 0x524], eax
jg 0x10023ece
mov dword [ebp - 0x52c], 1
jmp 0x10023ed5
and dword [ebp - 0x52c], 0
mov eax, dword [ebp - 0x58]
add eax, dword [ebp - 0x52c]
cmp eax, dword [ebp - 0x58]
jle 0x10023eef
mov dword [ebp - 0x544], 1
jmp 0x10023ef6
and dword [ebp - 0x544], 0
mov eax, dword [ebp - 0x534]
add eax, dword [ebp - 0x58]
mov dword [ebp - 0x53c], eax
push dword [ebp - 0x14]
lea ecx, [ebp - 0x694]
call fcn.10017e3c
mov ecx, dword [ebp - 0x53c]
mov dword [eax], ecx
mov eax, dword [ebp - 0x53c]
mov dword [ebp - 0x6c], eax
mov eax, dword [ebp - 0x6c]
add eax, dword [ebp - 0x544]
cmp eax, 4
je 0x10023f45
push 0xfffffffffffffff7
pop eax
test eax, eax
je 0x10023f45
mov dword [ebp - 0x54c], 1
jmp 0x10023f4c
and dword [ebp - 0x54c], 0
mov eax, dword [ebp - 0x58]
imul eax, dword [ebp - 0x54c]
mov dword [ebp - 0x5ac], eax
mov eax, dword [ebp - 0x6c]
mov dword [ebp - 0x554], eax
push 2
lea ecx, [ebp - 0x694]
call fcn.10017e3c
mov ecx, dword [ebp - 0x554]
mov dword [eax], ecx
mov eax, dword [ebp - 0x554]
sub eax, dword [ebp - 0x14]
je 0x10023fd2
cmp dword [ebp - 0x58], 0
jne 0x10023f9e
push dword [ebp - 0x14]
lea ecx, [ebp - 0x694]
call fcn.10017e3c
cmp dword [eax], 0
je 0x10023fd2
push 4
pop eax
shl eax, 0
mov dword [ebp + eax - 0xb54], 0xf1d4b082
push dword [ebp - 0x14]
lea ecx, [ebp - 0x694]
call fcn.10017e3c
mov eax, dword [eax]
sub eax, 0xe2b4f7e
je 0x10023fd2
mov dword [ebp - 0x55c], 1
jmp 0x10023fd9
and dword [ebp - 0x55c], 0
mov eax, dword [ebp - 0x6c]
cmp dword [ebp - 0x55c], eax
jge 0x10024057
mov dword [ebp - 0x6c], 2
jmp 0x10023ff4
mov eax, dword [ebp - 0x6c]
dec eax
mov dword [ebp - 0x6c], eax
cmp dword [ebp - 0x6c], 0
jl 0x10024052
mov byte [ebp - 0xa0], 0
movzx eax, byte [ebp - 0xa0]
test eax, eax
je 0x1002402a
push 0x637d
push 1
push 0x3365
push 0x58da
push 0x328f
call fcn.1001ea48
add esp, 0x14
mov byte [ebp - 0xa2], 0
movzx eax, byte [ebp - 0xa2]
test eax, eax
je 0x10024050
push 0x63ae
push 1
push 0x5a82
call fcn.1001eb16
add esp, 0xc
jmp 0x10023fed
jmp 0x1002432b
mov dword [ebp - 0xe0], 1
mov dword [ebp - 0x150], 0xf2a6bc67
mov eax, dword [ebp - 0xe0]
mov dword [ebp - 0xad4], eax
mov eax, dword [ebp - 0x14]
sub eax, dword [ebp - 0x58]
cmp eax, 0xdbc8
je 0x10024090
mov dword [ebp - 0x564], 1
jmp 0x10024097
and dword [ebp - 0x564], 0
cmp dword [ebp - 0x564], 1
je 0x100240ac
mov dword [ebp - 0x56c], 1
jmp 0x100240b3
and dword [ebp - 0x56c], 0
mov eax, dword [ebp - 0xe0]
cmp dword [ebp - 0x56c], eax
jge 0x100240cd
mov dword [ebp - 0x574], 1
jmp 0x100240d4
and dword [ebp - 0x574], 0
mov eax, dword [ebp - 0xe0]
cmp dword [ebp - 0x574], eax
je 0x100240ee
mov dword [ebp - 0x57c], 1
jmp 0x100240f5
and dword [ebp - 0x57c], 0
cmp dword [ebp - 0x57c], 0xb1b57606
jae 0x1002410d
mov dword [ebp - 0x584], 1
jmp 0x10024114
and dword [ebp - 0x584], 0
cmp dword [ebp - 0x584], 0xd4b4
je 0x10024135
mov eax, 0x65d3
test eax, eax
je 0x10024135
mov dword [ebp - 0x58c], 1
jmp 0x1002413c
and dword [ebp - 0x58c], 0
mov eax, dword [ebp - 0xe0]
cmp dword [ebp - 0x58c], eax
jg 0x10024156
mov dword [ebp - 0x594], 1
jmp 0x1002415d
and dword [ebp - 0x594], 0
mov eax, dword [ebp - 0xe0]
cmp eax, dword [ebp - 0x594]
jge 0x10024177
mov dword [ebp - 0x59c], 1
jmp 0x1002417e
and dword [ebp - 0x59c], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0xb54]
cmp dword [ebp - 0x59c], eax
jge 0x1002419f
mov dword [ebp - 0x5a4], 1
jmp 0x100241a6
and dword [ebp - 0x5a4], 0
mov eax, dword [ebp - 0x5a4]
add eax, 0x9ee5
cmp eax, 0xfffffffc
jae 0x100241c2
mov dword [ebp - 0x28c], 1
jmp 0x100241c9
and dword [ebp - 0x28c], 0
push 0
lea ecx, [ebp - 0x694]
call fcn.10017e3c
mov ecx, dword [ebp - 0x28c]
mov dword [eax], ecx
mov eax, dword [ebp - 0x28c]
mov dword [ebp - 0x150], eax
mov eax, dword [ebp - 0x150]
mov dword [ebp - 0xb88], eax
mov eax, dword [ebp - 0x7b4]
mov dword [ebp - 0x5ac], eax
mov eax, dword [ebp - 0x58]
mov dword [ebp - 0xadc], eax
push dword [ebp - 0x14]
lea ecx, [ebp - 0x694]
call fcn.10017e3c
cmp dword [eax], 0x6e21
jne 0x1002422d
mov dword [ebp - 0x5c4], 1
jmp 0x10024234
and dword [ebp - 0x5c4], 0
mov eax, dword [ebp - 0x58]
imul eax, dword [ebp - 0x14]
sub eax, dword [ebp - 0x150]
je 0x10024258
cmp dword [ebp - 0xe0], 0
je 0x10024258
mov dword [ebp - 0x5b4], 1
jmp 0x1002425f
and dword [ebp - 0x5b4], 0
cmp dword [ebp - 0x5b4], 0x38aa138
jle 0x10024277
mov dword [ebp - 0x5bc], 1
jmp 0x1002427e
and dword [ebp - 0x5bc], 0
mov eax, dword [ebp - 0x5bc]
mov dword [ebp - 0x150], eax
mov eax, dword [ebp - 0x14]
cmp dword [ebp - 0x150], eax
je 0x100242a1
mov dword [ebp - 0x5cc], 1
jmp 0x100242a8
and dword [ebp - 0x5cc], 0
mov eax, dword [ebp - 0x5c4]
cmp eax, dword [ebp - 0x5cc]
jne 0x100242c2
mov dword [ebp - 0x5d4], 1
jmp 0x100242c9
and dword [ebp - 0x5d4], 0
cmp dword [ebp - 0x5d4], 0xfffffffe
jb 0x100242de
mov dword [ebp - 0x5dc], 1
jmp 0x100242e5
and dword [ebp - 0x5dc], 0
mov eax, dword [ebp - 0x14]
cmp dword [ebp - 0x5dc], eax
jge 0x100242fc
mov dword [ebp - 0x5e4], 1
jmp 0x10024303
and dword [ebp - 0x5e4], 0
cmp dword [ebp - 0x5e4], 0x3ca38079
jg 0x1002431b
mov dword [ebp - 0x5ec], 1
jmp 0x10024322
and dword [ebp - 0x5ec], 0
mov eax, dword [ebp - 0x5ec]
mov dword [ebp - 0x6c], eax
jmp 0x10023e22
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x694]
call fcn.10017e20
cmp dword [0x10670a10], 0
je 0x1002435d
mov ecx, dword [ebp + 8]
call fcn.10026350
push eax
call dword [0x10670a10]
mov dword [ebp - 0xe8], eax
mov dword [ebp - 0xb4], 0x914d2edc
mov dword [ebp - 0x61c], 8
mov dword [ebp - 0x7c4], 0xb44adca1
mov dword [ebp - 0x1f8], 0
jmp 0x10024394
mov eax, dword [ebp - 0x1f8]
inc eax
mov dword [ebp - 0x1f8], eax
cmp dword [ebp - 0x1f8], 3
jge 0x100243b0
mov eax, dword [ebp - 0x1f8]
mov dword [ebp + eax*4 - 0xc08], 5
jmp 0x10024387
mov byte [ebp - 0xa4], 0
movzx eax, byte [ebp - 0xa4]
test eax, eax
je 0x100243ca
push 1
call fcn.1001eb8c
pop ecx
mov eax, dword [ebp - 0xb4]
mov dword [ebp - 0xbb8], eax
mov eax, dword [ebp - 0xb4]
mov dword [ebp - 0xae4], eax
cmp dword [ebp - 0xb4], 0x33e3
je 0x100243fa
mov dword [ebp - 0x5f4], 1
jmp 0x10024401
and dword [ebp - 0x5f4], 0
cmp dword [ebp - 0x5f4], 1
jne 0x10024416
mov dword [ebp - 0x5fc], 1
jmp 0x1002441d
and dword [ebp - 0x5fc], 0
cmp dword [ebp - 0x5fc], 0x8bffbefa
jb 0x10024435
mov dword [ebp - 0x7bc], 1
jmp 0x1002443c
and dword [ebp - 0x7bc], 0
mov eax, dword [ebp - 0xb4]
mov dword [ebp - 0xb90], eax
cmp dword [ebp - 0xb4], 0xffffffff
ja 0x1002445d
mov dword [ebp - 0x604], 1
jmp 0x10024464
and dword [ebp - 0x604], 0
mov eax, dword [ebp - 0xb4]
cmp eax, dword [ebp - 0x604]
jge 0x1002447e
mov dword [ebp - 0x60c], 1
jmp 0x10024485
and dword [ebp - 0x60c], 0
cmp dword [ebp - 0x60c], 0xd3ecf04
jg 0x1002449d
mov dword [ebp - 0x614], 1
jmp 0x100244a4
and dword [ebp - 0x614], 0
mov eax, dword [ebp - 0xb4]
sub eax, dword [ebp - 0x614]
mov dword [ebp - 0x61c], eax
mov eax, dword [ebp - 0x61c]
push 4
pop ecx
shl ecx, 1
sub eax, dword [ebp + ecx - 0xc08]
mov dword [ebp - 0x7c4], eax
cmp dword [ebp - 0xe8], 0
je 0x10024521
movzx eax, byte [0x10670a16]
test eax, eax
je 0x100244f3
mov ecx, 0x10670b14
call fcn.100263d9
movzx eax, al
test eax, eax
jne 0x10024521
push 1
push 0x10670b14
lea eax, [ebp - 0x624]
push eax
lea eax, [ebp - 0xe8]
push eax
push 0x5539
push 0x6e44
call fcn.1001ebb3
add esp, 0x18
mov byte [0x10670a16], 1
mov dword [ebp - 0xc4], 0xffffffff
mov dword [ebp - 0xbc], 0xfffffff9
mov dword [ebp - 0x78], 0
jmp 0x10024545
mov eax, dword [ebp - 0x78]
inc eax
mov dword [ebp - 0x78], eax
cmp dword [ebp - 0x78], 1
jge 0x10024558
mov eax, dword [ebp - 0x78]
mov dword [ebp + eax*4 - 0x48], 0xffff
jmp 0x1002453e
mov dword [ebp - 0x78], 0
jmp 0x10024568
mov eax, dword [ebp - 0x78]
inc eax
mov dword [ebp - 0x78], eax
cmp dword [ebp - 0x78], 2
jge 0x1002457e
mov eax, dword [ebp - 0x78]
mov dword [ebp + eax*4 - 0xb00], 0x33c2251
jmp 0x10024561
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x48]
mov dword [ebp - 0xaec], eax
push 4
pop eax
imul eax, eax, 0
push 4
pop ecx
imul ecx, ecx, 0
mov ecx, dword [ebp + ecx - 0x48]
cmp dword [ebp + eax - 0x48], ecx
jne 0x100245b0
mov dword [ebp - 0x62c], 1
jmp 0x100245b7
and dword [ebp - 0x62c], 0
cmp dword [ebp - 0x62c], 1
jne 0x100245cc
mov dword [ebp - 0x634], 1
jmp 0x100245d3
and dword [ebp - 0x634], 0
mov eax, dword [ebp - 0x634]
mov dword [ebp - 0xbc], eax
mov eax, dword [ebp - 0xbc]
push 4
pop ecx
imul ecx, ecx, 0
add eax, dword [ebp + ecx - 0x48]
jne 0x10024603
cmp dword [ebp - 0xbc], 0
jne 0x10024603
and dword [ebp - 0x294], 0
jmp 0x1002460d
mov dword [ebp - 0x294], 1
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x294]
mov dword [ebp + eax - 0xb00], ecx
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x48]
add eax, dword [ebp - 0x294]
je 0x1002488a
mov dword [ebp - 0xc4], 0
jmp 0x1002464f
mov eax, dword [ebp - 0xc4]
inc eax
mov dword [ebp - 0xc4], eax
cmp dword [ebp - 0xc4], 0
jg 0x10024888
push 1
lea ecx, [ebp - 0x8dc]
call fcn.10017d9e
mov byte [ebp - 4], 0x1c
mov dword [ebp - 0xa28], 1
mov dword [ebp - 0xa24], 1
mov dword [ebp - 0xa20], 1
mov dword [ebp - 0xa1c], 1
mov dword [ebp - 0x654], 0xffffffff
push 0x102f
push 0x1996
push 0x482a
push 0x63c0
push 0x3b3d
push 0x7243
lea eax, [ebp - 0xbdc]
push eax
push 0x14e3
lea eax, [ebp - 0x8dc]
push eax
push 0x3a4b
push 1
call fcn.1001ec48
add esp, 0x2c
mov dword [ebp - 0xbc], 0
jmp 0x100246f8
mov eax, dword [ebp - 0xbc]
dec eax
mov dword [ebp - 0xbc], eax
cmp dword [ebp - 0xbc], 0
jl 0x10024874
mov dword [ebp - 0x7cc], 1
mov eax, dword [ebp - 0xc4]
mov esi, dword [ebp + eax*4 - 0x48]
push 4
pop eax
imul eax, eax, 0
mov edi, dword [ebp + eax - 0x48]
push 0
lea ecx, [ebp - 0x8dc]
call fcn.10017e3c
mov eax, dword [eax]
sub eax, 0x62b994b7
sub edi, eax
cmp esi, edi
jne 0x10024749
mov dword [ebp - 0x63c], 1
jmp 0x10024750
and dword [ebp - 0x63c], 0
mov eax, dword [ebp - 0xc4]
mov eax, dword [ebp + eax*4 - 0x48]
imul eax, dword [ebp - 0x63c]
test eax, eax
je 0x100247c6
mov dword [ebp - 0x200], 0x75da2ca3
mov dword [ebp - 0x200], 0
jmp 0x10024788
mov eax, dword [ebp - 0x200]
inc eax
mov dword [ebp - 0x200], eax
cmp dword [ebp - 0x200], 0
jg 0x100247c1
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0xc4]
mov eax, dword [ebp + eax - 0x48]
mov dword [ebp + ecx*4 - 0x48], eax
mov byte [ebp - 0x8f], 0
movzx eax, byte [ebp - 0x8f]
test eax, eax
je 0x100247bf
push 1
call fcn.1001ee06
pop ecx
jmp 0x1002477b
jmp 0x1002486f
mov dword [ebp - 0x158], 0xd7d2a7e9
mov dword [ebp - 0x158], 0
jmp 0x100247e9
mov eax, dword [ebp - 0x158]
inc eax
mov dword [ebp - 0x158], eax
cmp dword [ebp - 0x158], 0
jg 0x10024850
push dword [ebp - 0x158]
lea ecx, [ebp - 0x8dc]
call fcn.10017e3c
mov eax, dword [eax]
sub eax, 0xf0ed
je 0x1002481c
xor eax, eax
je 0x1002481c
mov dword [ebp - 0x644], 1
jmp 0x10024823
and dword [ebp - 0x644], 0
mov eax, dword [ebp - 0x644]
dec eax
mov dword [ebp - 0x64c], eax
push 4
pop eax
shl eax, 1
mov ecx, dword [ebp - 0x64c]
mov dword [ebp + eax - 0xa28], ecx
mov eax, dword [ebp - 0x64c]
mov dword [ebp - 0x654], eax
jmp 0x100247dc
lea eax, [ebp - 0x654]
push eax
lea eax, [ebp - 0x8dc]
push eax
push 1
lea eax, [ebp - 0x7cc]
push eax
call fcn.1001ee31
add esp, 0x10
jmp 0x100246eb
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x8dc]
call fcn.10017e20
jmp 0x10024642
jmp 0x100248ac
mov byte [ebp - 0xa5], 0
push 1
push 0x7301
lea eax, [ebp - 0xa5]
push eax
push 0x2de8
call fcn.1001eea4
add esp, 0x10
mov eax, dword [ebp - 0xe8]
mov dword [ebp - 0x7d4], eax
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x9f8]
call fcn.10017bd8
mov eax, dword [ebp - 0x7d4]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
mov esp, ebp
pop ebp
ret