Function at 0x1001fd53
Capabilities:
Read .ini file

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x10071ddd
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0xb4c
push esi
movzx eax, byte [ebp + 0x24]
test eax, eax
je 0x100251dc
mov eax, dword [ebp + 0x10]
mov dword [ebp - 0x6d4], eax
mov eax, dword [ebp + 0x14]
mov dword [ebp - 0x87c], eax
mov eax, dword [ebp + 0x20]
mov dword [ebp - 0x6e4], eax
mov eax, dword [ebp + 0x18]
mov dword [ebp - 0x6dc], eax
mov eax, dword [ebp + 0xc]
mov dword [ebp - 0x7d4], eax
lea eax, [ebp + 8]
mov dword [ebp - 0x71c], eax
mov eax, dword [ebp + 0x1c]
mov dword [ebp - 0x6cc], eax
mov eax, dword [ebp - 0x71c]
movzx eax, byte [eax]
test eax, eax
je 0x1001fe44
mov eax, dword [ebp - 0x87c]
mov dword [ebp - 0x864], eax
mov eax, dword [ebp - 0x7d4]
mov dword [ebp - 0x6c0], eax
mov eax, dword [ebp - 0x864]
mov dword [ebp - 0x138], eax
mov eax, dword [ebp - 0x6c0]
mov dword [ebp - 0x6c4], eax
mov eax, dword [ebp - 0x138]
mov dword [eax], 0
jmp 0x1001fe19
mov eax, dword [ebp - 0x138]
mov eax, dword [eax]
inc eax
mov ecx, dword [ebp - 0x138]
mov dword [ecx], eax
mov eax, dword [ebp - 0x138]
cmp dword [eax], 3
jge 0x1001fe3f
mov eax, dword [ebp - 0x138]
push dword [eax]
mov ecx, dword [ebp - 0x6c4]
call fcn.10009b6a
mov dword [eax], 0x7ddc85f7
jmp 0x1001fe08
jmp 0x100251da
mov eax, dword [ebp - 0x6cc]
mov dword [ebp - 0x6ec], eax
mov eax, dword [ebp - 0x6d4]
mov dword [ebp - 0x7c0], eax
mov eax, dword [ebp - 0x6dc]
mov dword [ebp - 0x574], eax
mov eax, dword [ebp - 0x6e4]
mov dword [ebp - 0x254], eax
mov eax, dword [ebp - 0x6ec]
mov eax, dword [eax + 0x38]
mov dword [ebp - 0x24c], eax
cmp dword [ebp - 0x24c], 0
jle 0x100251da
mov dword [ebp - 0x60], 0x971c
mov dword [ebp - 0x638], 0xffffffff
push 1
lea ecx, [ebp - 0x8d8]
call fcn.10009afa
and dword [ebp - 4], 0
mov dword [ebp - 0x6fc], 0x857b1a09
mov dword [ebp - 0x11c], 0xeb61943e
mov dword [ebp - 0x704], 1
mov dword [ebp - 0x6f4], 0x2211
cmp dword [ebp - 0x6f4], 0x12bf
jge 0x10020391
lea eax, [ebp - 0x9c]
push eax
lea eax, [ebp - 0x94]
push eax
lea eax, [ebp - 0xa4]
push eax
lea eax, [ebp - 0xac]
push eax
lea eax, [ebp - 0x8c]
push eax
push 0x100079e8
call fcn.10057e4b
add esp, 0x18
mov dword [ebp - 0x3c], 1
and dword [ebp - 0x38], 0
mov eax, dword [ebp - 0x94]
add eax, 1
mov ecx, dword [ebp - 0x90]
adc ecx, 0
sub eax, dword [ebp - 0xa4]
sbb ecx, dword [ebp - 0xa0]
mov dword [ebp - 0x730], eax
mov dword [ebp - 0x72c], ecx
mov eax, dword [ebp - 0x38]
cmp eax, dword [ebp - 0x72c]
jl 0x1001ff7b
jg 0x1001ff67
mov eax, dword [ebp - 0x3c]
cmp eax, dword [ebp - 0x730]
jbe 0x1001ff7b
mov eax, dword [ebp - 0x3c]
mov dword [ebp - 0x5dc], eax
mov eax, dword [ebp - 0x38]
mov dword [ebp - 0x5d8], eax
jmp 0x1001ffa5
mov eax, dword [ebp - 0x94]
add eax, 1
mov ecx, dword [ebp - 0x90]
adc ecx, 0
sub eax, dword [ebp - 0xa4]
sbb ecx, dword [ebp - 0xa0]
mov dword [ebp - 0x5dc], eax
mov dword [ebp - 0x5d8], ecx
mov eax, dword [ebp - 0x5dc]
mov dword [ebp - 0x3c], eax
mov eax, dword [ebp - 0x5d8]
mov dword [ebp - 0x38], eax
mov eax, dword [ebp - 0x9c]
add eax, 1
mov ecx, dword [ebp - 0x98]
adc ecx, 0
sub eax, dword [ebp - 0xac]
sbb ecx, dword [ebp - 0xa8]
mov dword [ebp - 0x73c], eax
mov dword [ebp - 0x738], ecx
mov eax, dword [ebp - 0x38]
cmp eax, dword [ebp - 0x738]
jl 0x1002000d
jg 0x1001fff9
mov eax, dword [ebp - 0x3c]
cmp eax, dword [ebp - 0x73c]
jbe 0x1002000d
mov eax, dword [ebp - 0x3c]
mov dword [ebp - 0x5e8], eax
mov eax, dword [ebp - 0x38]
mov dword [ebp - 0x5e4], eax
jmp 0x10020037
mov eax, dword [ebp - 0x9c]
add eax, 1
mov ecx, dword [ebp - 0x98]
adc ecx, 0
sub eax, dword [ebp - 0xac]
sbb ecx, dword [ebp - 0xa8]
mov dword [ebp - 0x5e8], eax
mov dword [ebp - 0x5e4], ecx
mov eax, dword [ebp - 0x5e8]
mov dword [ebp - 0x3c], eax
mov eax, dword [ebp - 0x5e4]
mov dword [ebp - 0x38], eax
mov eax, dword [ebp - 0x94]
add eax, 1
mov ecx, dword [ebp - 0x90]
adc ecx, 0
add eax, dword [ebp - 0x9c]
adc ecx, dword [ebp - 0x98]
sub eax, dword [ebp - 0xac]
sbb ecx, dword [ebp - 0xa8]
sub eax, dword [ebp - 0xa4]
sbb ecx, dword [ebp - 0xa0]
mov dword [ebp - 0x748], eax
mov dword [ebp - 0x744], ecx
mov eax, dword [ebp - 0x38]
cmp eax, dword [ebp - 0x744]
jl 0x100200b7
jg 0x100200a3
mov eax, dword [ebp - 0x3c]
cmp eax, dword [ebp - 0x748]
jbe 0x100200b7
mov eax, dword [ebp - 0x3c]
mov dword [ebp - 0x5f4], eax
mov eax, dword [ebp - 0x38]
mov dword [ebp - 0x5f0], eax
jmp 0x100200f9
mov eax, dword [ebp - 0x94]
add eax, 1
mov ecx, dword [ebp - 0x90]
adc ecx, 0
add eax, dword [ebp - 0x9c]
adc ecx, dword [ebp - 0x98]
sub eax, dword [ebp - 0xac]
sbb ecx, dword [ebp - 0xa8]
sub eax, dword [ebp - 0xa4]
sbb ecx, dword [ebp - 0xa0]
mov dword [ebp - 0x5f4], eax
mov dword [ebp - 0x5f0], ecx
mov eax, dword [ebp - 0x5f4]
mov dword [ebp - 0x3c], eax
mov eax, dword [ebp - 0x5f0]
mov dword [ebp - 0x38], eax
mov eax, dword [ebp - 0x8c]
mov dword [ebp - 0x34], eax
mov eax, dword [ebp - 0x88]
mov dword [ebp - 0x30], eax
mov eax, dword [ebp - 0x8c]
add eax, dword [ebp - 0x94]
mov ecx, dword [ebp - 0x88]
adc ecx, dword [ebp - 0x90]
sub eax, dword [ebp - 0xa4]
sbb ecx, dword [ebp - 0xa0]
mov dword [ebp - 0x754], eax
mov dword [ebp - 0x750], ecx
mov eax, dword [ebp - 0x30]
cmp eax, dword [ebp - 0x750]
jg 0x10020179
jl 0x10020165
mov eax, dword [ebp - 0x34]
cmp eax, dword [ebp - 0x754]
jae 0x10020179
mov eax, dword [ebp - 0x34]
mov dword [ebp - 0x600], eax
mov eax, dword [ebp - 0x30]
mov dword [ebp - 0x5fc], eax
jmp 0x100201a9
mov eax, dword [ebp - 0x8c]
add eax, dword [ebp - 0x94]
mov ecx, dword [ebp - 0x88]
adc ecx, dword [ebp - 0x90]
sub eax, dword [ebp - 0xa4]
sbb ecx, dword [ebp - 0xa0]
mov dword [ebp - 0x600], eax
mov dword [ebp - 0x5fc], ecx
mov eax, dword [ebp - 0x600]
mov dword [ebp - 0x34], eax
mov eax, dword [ebp - 0x5fc]
mov dword [ebp - 0x30], eax
mov eax, dword [ebp - 0x8c]
add eax, dword [ebp - 0x9c]
mov ecx, dword [ebp - 0x88]
adc ecx, dword [ebp - 0x98]
sub eax, dword [ebp - 0xac]
sbb ecx, dword [ebp - 0xa8]
mov dword [ebp - 0x760], eax
mov dword [ebp - 0x75c], ecx
mov eax, dword [ebp - 0x30]
cmp eax, dword [ebp - 0x75c]
jg 0x10020217
jl 0x10020203
mov eax, dword [ebp - 0x34]
cmp eax, dword [ebp - 0x760]
jae 0x10020217
mov eax, dword [ebp - 0x34]
mov dword [ebp - 0x60c], eax
mov eax, dword [ebp - 0x30]
mov dword [ebp - 0x608], eax
jmp 0x10020247
mov eax, dword [ebp - 0x8c]
add eax, dword [ebp - 0x9c]
mov ecx, dword [ebp - 0x88]
adc ecx, dword [ebp - 0x98]
sub eax, dword [ebp - 0xac]
sbb ecx, dword [ebp - 0xa8]
mov dword [ebp - 0x60c], eax
mov dword [ebp - 0x608], ecx
mov eax, dword [ebp - 0x60c]
mov dword [ebp - 0x34], eax
mov eax, dword [ebp - 0x608]
mov dword [ebp - 0x30], eax
mov eax, dword [ebp - 0x8c]
add eax, dword [ebp - 0x94]
mov ecx, dword [ebp - 0x88]
adc ecx, dword [ebp - 0x90]
add eax, dword [ebp - 0x9c]
adc ecx, dword [ebp - 0x98]
sub eax, dword [ebp - 0xac]
sbb ecx, dword [ebp - 0xa8]
sub eax, dword [ebp - 0xa4]
sbb ecx, dword [ebp - 0xa0]
mov dword [ebp - 0x76c], eax
mov dword [ebp - 0x768], ecx
mov eax, dword [ebp - 0x30]
cmp eax, dword [ebp - 0x768]
jg 0x100202cd
jl 0x100202b9
mov eax, dword [ebp - 0x34]
cmp eax, dword [ebp - 0x76c]
jae 0x100202cd
mov eax, dword [ebp - 0x34]
mov dword [ebp - 0x618], eax
mov eax, dword [ebp - 0x30]
mov dword [ebp - 0x614], eax
jmp 0x10020315
mov eax, dword [ebp - 0x8c]
add eax, dword [ebp - 0x94]
mov ecx, dword [ebp - 0x88]
adc ecx, dword [ebp - 0x90]
add eax, dword [ebp - 0x9c]
adc ecx, dword [ebp - 0x98]
sub eax, dword [ebp - 0xac]
sbb ecx, dword [ebp - 0xa8]
sub eax, dword [ebp - 0xa4]
sbb ecx, dword [ebp - 0xa0]
mov dword [ebp - 0x618], eax
mov dword [ebp - 0x614], ecx
mov eax, dword [ebp - 0x618]
mov dword [ebp - 0x34], eax
mov eax, dword [ebp - 0x614]
mov dword [ebp - 0x30], eax
mov eax, dword [ebp - 0x30]
cmp eax, dword [ebp - 0x38]
jl 0x1002036c
jg 0x10020339
mov eax, dword [ebp - 0x34]
cmp eax, dword [ebp - 0x3c]
jb 0x1002036c
mov eax, dword [ebp - 0x34]
sub eax, dword [ebp - 0x3c]
mov ecx, dword [ebp - 0x30]
sbb ecx, dword [ebp - 0x38]
add eax, 1
adc ecx, 0
push ecx
push eax
push dword [ebp - 0x88]
push dword [ebp - 0x8c]
call fcn.1005e290
mov dword [ebp - 0x6ac], eax
mov dword [ebp - 0x6a8], edx
jmp 0x10020378
xorpd xmm0, xmm0
movlpd qword [ebp - 0x6ac], xmm0
push dword [ebp - 0x6a8]
push dword [ebp - 0x6ac]
push 0x10007934
call fcn.10058066
add esp, 0xc
mov dword [ebp - 0x4a8], 0x97fb
mov dword [ebp - 0x714], 0xc6aa
mov dword [ebp - 0x1ec], 0
jmp 0x100203be
mov eax, dword [ebp - 0x1ec]
inc eax
mov dword [ebp - 0x1ec], eax
cmp dword [ebp - 0x1ec], 1
jge 0x100203e0
push dword [ebp - 0x1ec]
lea ecx, [ebp - 0x8d8]
call fcn.10009b6a
mov dword [eax], 0x6548aab5
jmp 0x100203b1
cmp dword [ebp - 0x60], 0
jne 0x10020433
cmp dword [ebp - 0x60], 1
je 0x100203f8
mov dword [ebp - 0x344], 1
jmp 0x100203ff
and dword [ebp - 0x344], 0
mov eax, dword [ebp - 0x60]
add eax, dword [ebp - 0x344]
je 0x1002041f
mov eax, 0x6038
test eax, eax
je 0x1002041f
mov dword [ebp - 0x598], 1
jmp 0x10020426
and dword [ebp - 0x598], 0
cmp dword [ebp - 0x598], 0
je 0x10020754
mov dword [ebp - 0xe4], 0xfffffff7
mov dword [ebp - 0xdc], 0x5d73
mov dword [ebp - 0x70c], 0xfffffffd
mov dword [ebp - 0x1f4], 0
jmp 0x1002046a
mov eax, dword [ebp - 0x1f4]
inc eax
mov dword [ebp - 0x1f4], eax
cmp dword [ebp - 0x1f4], 3
jge 0x10020486
mov eax, dword [ebp - 0x1f4]
mov dword [ebp + eax*4 - 0x8a8], 0xfffffff6
jmp 0x1002045d
mov eax, dword [ebp - 0x60]
cmp dword [ebp - 0x60], eax
jg 0x1002049a
mov dword [ebp - 0x5c8], 1
jmp 0x100204a1
and dword [ebp - 0x5c8], 0
mov eax, dword [ebp - 0xe4]
mov dword [ebp - 0x5a0], eax
push 0
lea ecx, [ebp - 0x8d8]
call fcn.10009b6a
mov ecx, dword [ebp - 0x5a0]
mov dword [eax], ecx
mov eax, dword [ebp - 0x5a0]
sub eax, dword [ebp - 0x60]
imul eax, dword [ebp - 0xdc]
cmp eax, 1
je 0x100204ec
cmp dword [ebp - 0xdc], 0
je 0x100204ec
mov dword [ebp - 0x5a8], 1
jmp 0x100204f3
and dword [ebp - 0x5a8], 0
mov eax, dword [ebp - 0x5a8]
mov dword [ebp - 0x6fc], eax
mov dword [ebp - 0xe4], 0xffffffff
mov eax, dword [ebp - 0xe4]
add eax, dword [ebp - 0xdc]
mov dword [ebp - 0x5b0], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x5b0]
mov dword [ebp + eax - 0x8a8], ecx
mov eax, dword [ebp - 0x11c]
imul eax, dword [ebp - 0x5b0]
cmp eax, dword [ebp - 0xdc]
je 0x1002054f
mov dword [ebp - 0x5b8], 1
jmp 0x10020556
and dword [ebp - 0x5b8], 0
mov eax, dword [ebp - 0xdc]
cmp dword [ebp - 0x5b8], eax
jle 0x10020570
mov dword [ebp - 0x5c0], 1
jmp 0x10020577
and dword [ebp - 0x5c0], 0
mov eax, dword [ebp - 0xdc]
cmp dword [ebp - 0x5c0], eax
jg 0x10020591
mov dword [ebp - 0x5d0], 1
jmp 0x10020598
and dword [ebp - 0x5d0], 0
mov eax, dword [ebp - 0x5c8]
cmp eax, dword [ebp - 0x5d0]
jl 0x100205b2
mov dword [ebp - 0x640], 1
jmp 0x100205b9
and dword [ebp - 0x640], 0
mov eax, dword [ebp - 0x60]
mov dword [ebp - 0x638], eax
mov eax, dword [ebp - 0x638]
sub eax, dword [ebp - 0x640]
cmp dword [ebp - 0x60], eax
jne 0x100205df
mov dword [ebp - 0x648], 1
jmp 0x100205e6
and dword [ebp - 0x648], 0
mov eax, dword [ebp - 0x648]
mov dword [ebp - 0x704], eax
mov dword [ebp - 0xe4], 0x594484f7
cmp dword [ebp - 0xe4], 0x5c2f4fe1
jl 0x10020718
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x8a8]
mov dword [ebp - 0xaf4], eax
cmp dword [ebp - 0x11c], 0
jne 0x10020634
mov dword [ebp - 0x650], 1
jmp 0x1002063b
and dword [ebp - 0x650], 0
mov eax, dword [ebp - 0x650]
sub eax, 9
jne 0x10020655
cmp dword [ebp - 0x60], 0
jne 0x10020655
and dword [ebp - 0x678], 0
jmp 0x1002065f
mov dword [ebp - 0x678], 1
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x8a8]
add eax, dword [ebp - 0x678]
sub eax, dword [ebp - 0xe4]
cmp eax, dword [ebp - 0x11c]
jle 0x1002068c
mov dword [ebp - 0x2a4], 1
jmp 0x10020693
and dword [ebp - 0x2a4], 0
push 0
lea ecx, [ebp - 0x8d8]
call fcn.10009b6a
mov ecx, dword [ebp - 0x2a4]
mov dword [eax], ecx
mov eax, dword [ebp - 0x2a4]
inc eax
cmp eax, dword [ebp - 0x11c]
jne 0x100206c3
mov dword [ebp - 0x274], 1
jmp 0x100206ca
and dword [ebp - 0x274], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x274]
mov dword [ebp + eax - 0x8a8], ecx
mov eax, dword [ebp - 0x4a8]
cmp dword [ebp - 0x274], eax
jle 0x100206f7
mov dword [ebp - 0x664], 1
jmp 0x100206fe
and dword [ebp - 0x664], 0
mov eax, dword [ebp - 0x70c]
cmp dword [ebp - 0x664], eax
jle 0x10020718
mov dword [ebp - 0x57c], 1
jmp 0x1002071f
and dword [ebp - 0x57c], 0
mov eax, dword [ebp - 0x11c]
cmp eax, dword [ebp - 0x57c]
jge 0x10020739
mov dword [ebp - 0x2f0], 1
jmp 0x10020740
and dword [ebp - 0x2f0], 0
mov eax, dword [ebp - 0x2f0]
sub eax, dword [ebp - 0x4a8]
mov dword [ebp - 0x714], eax
jmp 0x1002077b
mov byte [ebp - 0xc8], 0
movzx eax, byte [ebp - 0xc8]
test eax, eax
je 0x1002077b
push 0
push 0x23b
push 0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringW]
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x8d8]
call fcn.10009b5c
mov dword [ebp - 0x2d4], 0x3b26bdde
mov dword [ebp - 0x2d0], 0x3b26bdde
mov dword [ebp - 0x2cc], 0x3b26bdde
mov dword [ebp - 0x2c8], 0x3b26bdde
mov dword [ebp - 0x310], 8
mov dword [ebp - 0x4b8], 0xfffffffa
mov dword [ebp - 0x160], 0
jmp 0x100207df
mov eax, dword [ebp - 0x160]
inc eax
mov dword [ebp - 0x160], eax
cmp dword [ebp - 0x160], 4
jge 0x100207fb
mov eax, dword [ebp - 0x160]
mov dword [ebp + eax*4 - 0xb50], 0xfffffff9
jmp 0x100207d2
push 4
pop eax
shl eax, 1
mov dword [ebp + eax - 0x2d4], 0
jmp 0x10020826
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x2d4]
dec eax
push 4
pop ecx
shl ecx, 1
mov dword [ebp + ecx - 0x2d4], eax
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0x2d4], 0xffffffec
jl 0x10020a7e
mov dword [ebp - 0x588], 2
mov dword [ebp - 0x9fc], 0x15fb26c4
mov dword [ebp - 0x9f8], 0x15fb26c4
mov dword [ebp - 0x9f4], 0x15fb26c4
mov dword [ebp - 0x9f0], 0x15fb26c4
mov dword [ebp - 0x1fc], 0
jmp 0x10020884
mov eax, dword [ebp - 0x1fc]
inc eax
mov dword [ebp - 0x1fc], eax
cmp dword [ebp - 0x1fc], 2
jge 0x100208a0
mov eax, dword [ebp - 0x1fc]
mov dword [ebp + eax*4 - 0x624], 0
jmp 0x10020877
push 4
pop eax
imul eax, eax, 0
push 4
pop ecx
shl ecx, 1
mov ecx, dword [ebp + ecx - 0x2d4]
cmp dword [ebp + eax - 0x2d4], ecx
je 0x100208c7
mov dword [ebp - 0x2f8], 1
jmp 0x100208ce
and dword [ebp - 0x2f8], 0
mov eax, dword [ebp - 0x2f8]
add eax, 5
push 4
pop ecx
shl ecx, 1
cmp eax, dword [ebp + ecx - 0x2d4]
jge 0x100208f1
mov dword [ebp - 0x590], 1
jmp 0x100208f8
and dword [ebp - 0x590], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x624]
cmp dword [ebp - 0x590], eax
jl 0x10020919
mov dword [ebp - 0x300], 1
jmp 0x10020920
and dword [ebp - 0x300], 0
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x2d4]
cmp dword [ebp - 0x300], eax
jge 0x10020940
mov dword [ebp - 0x4b0], 1
jmp 0x10020947
and dword [ebp - 0x4b0], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x624]
sub eax, dword [ebp - 0x4b0]
push 4
pop ecx
shl ecx, 0
cmp eax, dword [ebp + ecx - 0x624]
jge 0x10020975
mov dword [ebp - 0x308], 1
jmp 0x1002097c
and dword [ebp - 0x308], 0
mov eax, dword [ebp - 0x308]
mov dword [ebp - 0x588], eax
mov eax, dword [ebp - 0x588]
mov dword [ebp - 0x310], eax
push 4
pop eax
shl eax, 1
mov ecx, dword [ebp - 0x310]
sub ecx, dword [ebp + eax - 0x2d4]
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x624]
imul eax, ecx
mov dword [ebp - 0x4b8], eax
cmp dword [ebp - 0x4b8], 0xfffffffa
je 0x100209d1
mov dword [ebp - 0x6bc], 1
jmp 0x100209d8
and dword [ebp - 0x6bc], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x2d4]
mov dword [ebp - 0x724], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x724]
mov dword [ebp + eax - 0xb50], ecx
push 4
pop eax
imul eax, eax, 0
push 4
pop ecx
imul ecx, ecx, 0
mov ecx, dword [ebp + ecx - 0x624]
cmp dword [ebp + eax - 0x2d4], ecx
jg 0x10020a59
mov byte [ebp - 0xc5], 0
push 0x466
push 0x4a20
lea eax, [ebp - 0xc5]
push eax
push 0
push 0x27c2
push 0x7be3
call fcn.10026901
add esp, 0x18
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0x9fc], 0
jmp 0x10020a79
mov dword [ebp - 0x7c8], 0x9192
push 0xc27
lea eax, [ebp - 0x7c8]
push eax
push 0
call fcn.10027f5d
add esp, 0xc
jmp 0x1002080d
mov dword [ebp - 0x54], 0x971c
mov dword [ebp - 0x48], 3
mov dword [ebp - 0x204], 0x58b39d20
push 1
lea ecx, [ebp - 0x820]
call fcn.10009afa
mov dword [ebp - 4], 1
push 3
lea ecx, [ebp - 0x810]
call fcn.10009afa
mov byte [ebp - 4], 2
push 1
lea ecx, [ebp - 0x6b8]
call fcn.10009afa
mov byte [ebp - 4], 3
mov dword [ebp - 0x340], 0
mov dword [ebp - 0x2ac], 0x31b54653
mov dword [ebp - 0x5a4], 0xffffffff
mov dword [ebp - 0xa74], 0x6d0a
mov dword [ebp - 0x124], 0x7fb90efd
mov dword [ebp - 0x10], 0
jmp 0x10020b0e
mov eax, dword [ebp - 0x10]
inc eax
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], 4
jge 0x10020b24
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0x6a4], 2
jmp 0x10020b07
mov dword [ebp - 0x10], 0
jmp 0x10020b34
mov eax, dword [ebp - 0x10]
inc eax
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], 1
jge 0x10020b50
push dword [ebp - 0x10]
lea ecx, [ebp - 0x820]
call fcn.10009b6a
mov dword [eax], 0xd28e4879
jmp 0x10020b2d
mov dword [ebp - 0x10], 0
jmp 0x10020b60
mov eax, dword [ebp - 0x10]
inc eax
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], 3
jge 0x10020b7c
push dword [ebp - 0x10]
lea ecx, [ebp - 0x810]
call fcn.10009b6a
mov dword [eax], 0xac8e4c12
jmp 0x10020b59
mov dword [ebp - 0x10], 0
jmp 0x10020b8c
mov eax, dword [ebp - 0x10]
inc eax
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], 1
jge 0x10020ba8
push dword [ebp - 0x10]
lea ecx, [ebp - 0x6b8]
call fcn.10009b6a
mov dword [eax], 0xfffffff9
jmp 0x10020b85
mov dword [ebp - 0x10], 0
jmp 0x10020bb8
mov eax, dword [ebp - 0x10]
inc eax
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], 2
jge 0x10020bce
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0x630], 1
jmp 0x10020bb1
mov dword [ebp - 0x10], 0
jmp 0x10020bde
mov eax, dword [ebp - 0x10]
inc eax
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], 1
jge 0x10020bf4
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0xa7c], 0
jmp 0x10020bd7
mov dword [ebp - 0x48], 0
jmp 0x10020c04
mov eax, dword [ebp - 0x48]
inc eax
mov dword [ebp - 0x48], eax
cmp dword [ebp - 0x48], 2
jl 0x100210e8
mov dword [ebp - 0x328], 9
mov dword [ebp - 0x348], 0x68be135e
mov dword [ebp - 0x200], 0xffffffff
mov dword [ebp - 0x318], 0x60cbeb96
mov dword [ebp - 0x95c], 0xfffffff7
mov dword [ebp - 0x958], 0xfffffff7
mov dword [ebp - 0x954], 0xfffffff7
mov dword [ebp - 0x950], 0xfffffff7
lea ecx, [ebp - 0x259]
call fcn.10009bd3
push eax
lea eax, [ebp - 0x94c]
push eax
lea eax, [ebp - 0x95c]
push eax
lea ecx, [ebp - 0xb38]
call fcn.10009bd6
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0x980]
call fcn.10009b36
mov byte [ebp - 4], 4
mov dword [ebp - 0x7d0], 4
mov dword [ebp - 0x7f8], 0xffffffff
cmp dword [ebp - 0x328], 0
jne 0x10020e56
mov eax, dword [ebp - 0x204]
inc eax
mov dword [ebp - 0x204], eax
mov dword [ebp - 0x318], 0xfffffff6
cmp dword [ebp - 0x318], 0
je 0x10020d37
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x204]
mov dword [ebp + eax - 0x6a4], ecx
mov eax, dword [ebp - 0x204]
cmp dword [ebp - 0x48], eax
jne 0x10020d02
mov dword [ebp - 0x58c], 1
jmp 0x10020d09
and dword [ebp - 0x58c], 0
push 0
lea ecx, [ebp - 0x820]
call fcn.10009b6a
or dword [eax], 0xffffffff
mov eax, dword [ebp - 0x58c]
dec eax
je 0x10020d37
mov eax, 0x57a55752
test eax, eax
je 0x10020d37
mov dword [ebp - 0x320], 1
jmp 0x10020d3e
and dword [ebp - 0x320], 0
mov eax, dword [ebp - 0x320]
sub eax, 0xffff
cmp eax, dword [ebp - 0x200]
jne 0x10020d5d
mov dword [ebp - 0x4c0], 1
jmp 0x10020d64
and dword [ebp - 0x4c0], 0
push 0
lea ecx, [ebp - 0x810]
call fcn.10009b6a
mov ecx, dword [ebp - 0x4c0]
add ecx, dword [eax]
cmp ecx, dword [ebp - 0x48]
jg 0x10020d8a
mov dword [ebp - 0x5f8], 1
jmp 0x10020d91
and dword [ebp - 0x5f8], 0
mov eax, dword [ebp - 0x328]
cmp dword [ebp - 0x5f8], eax
jne 0x10020dbb
push 4
pop eax
imul eax, eax, 3
cmp dword [ebp + eax - 0x6a4], 0
je 0x10020dbb
mov dword [ebp - 0x27c], 1
jmp 0x10020dc2
and dword [ebp - 0x27c], 0
push 0
lea ecx, [ebp - 0x6b8]
call fcn.10009b6a
mov ecx, dword [ebp - 0x27c]
mov dword [eax], ecx
cmp dword [ebp - 0x27c], 0xd67a
jle 0x10020def
mov dword [ebp - 0x330], 1
jmp 0x10020df6
and dword [ebp - 0x330], 0
push 0
lea ecx, [ebp - 0x810]
call fcn.10009b6a
mov ecx, dword [ebp - 0x330]
cmp ecx, dword [eax]
jge 0x10020e19
mov dword [ebp - 0x4c8], 1
jmp 0x10020e20
and dword [ebp - 0x4c8], 0
mov eax, dword [ebp - 0x348]
cmp dword [ebp - 0x4c8], eax
jge 0x10020e3a
mov dword [ebp - 0x338], 1
jmp 0x10020e41
and dword [ebp - 0x338], 0
cmp dword [ebp - 0x338], 0x776e9f81
jle 0x10020e56
and dword [ebp - 0x594], 0
jmp 0x10020e60
mov dword [ebp - 0x594], 1
mov eax, dword [ebp - 0x48]
imul eax, dword [ebp - 0x594]
mov dword [ebp - 0x340], eax
mov eax, dword [ebp - 0x340]
mov dword [ebp - 0x200], eax
push 0
lea ecx, [ebp - 0x980]
call fcn.10009b6a
cmp dword [eax], 0
je 0x10020ede
push 4
pop eax
imul eax, eax, 3
mov eax, dword [ebp + eax - 0x6a4]
mov dword [ebp - 0x200], eax
mov eax, dword [ebp - 0x200]
neg eax
cmp eax, dword [ebp - 0x2ac]
jg 0x10020ebd
mov dword [ebp - 0x4d0], 1
jmp 0x10020ec4
and dword [ebp - 0x4d0], 0
push 2
lea ecx, [ebp - 0x980]
call fcn.10009b6a
mov ecx, dword [ebp - 0x4d0]
mov dword [eax], ecx
jmp 0x100210d4
mov dword [ebp - 0x63c], 0x13735ca7
mov dword [ebp - 0x294], 0x9ce07b88
push 1
lea ecx, [ebp - 0x974]
call fcn.10009afa
mov byte [ebp - 4], 5
mov dword [ebp - 0x1e4], 0
jmp 0x10020f1c
mov eax, dword [ebp - 0x1e4]
inc eax
mov dword [ebp - 0x1e4], eax
cmp dword [ebp - 0x1e4], 1
jge 0x10020f3e
push dword [ebp - 0x1e4]
lea ecx, [ebp - 0x974]
call fcn.10009b6a
mov dword [eax], 0xfffffffb
jmp 0x10020f0f
mov eax, dword [ebp - 0x48]
cmp dword [ebp - 0x7d0], eax
jg 0x10020f55
mov dword [ebp - 0x350], 1
jmp 0x10020f5c
and dword [ebp - 0x350], 0
mov eax, dword [ebp - 0x63c]
mov dword [ebp - 0x294], eax
cmp dword [ebp - 0x294], 0xfffffff6
jne 0x10020f7d
mov dword [ebp - 0x7d8], 1
jmp 0x10020f84
and dword [ebp - 0x7d8], 0
mov eax, dword [ebp - 0x5a4]
mov dword [ebp - 0x7e0], eax
push 0
lea ecx, [ebp - 0x820]
call fcn.10009b6a
mov ecx, dword [ebp - 0x7e0]
mov dword [eax], ecx
cmp dword [ebp - 0x348], 0
je 0x10020fc3
cmp dword [ebp - 0x294], 0
je 0x10020fc3
mov dword [ebp - 0x7e8], 1
jmp 0x10020fca
and dword [ebp - 0x7e8], 0
push 4
pop eax
imul eax, eax, 3
mov eax, dword [ebp + eax - 0x6a4]
mov dword [ebp - 0xa84], eax
mov eax, 0x2937
cmp eax, 1
jne 0x10020ff3
mov dword [ebp - 0x29c], 1
jmp 0x10020ffa
and dword [ebp - 0x29c], 0
push 4
pop eax
shl eax, 1
mov ecx, dword [ebp - 0x29c]
mov dword [ebp + eax - 0x6a4], ecx
cmp dword [ebp - 0x29c], 1
je 0x10021021
mov dword [ebp - 0x7f0], 1
jmp 0x10021028
and dword [ebp - 0x7f0], 0
mov eax, dword [ebp - 0x2ac]
mov dword [ebp - 0xa8c], eax
mov eax, dword [ebp - 0x7f8]
sub eax, dword [ebp - 0x63c]
mov dword [ebp - 0x22c], eax
push 0
lea ecx, [ebp - 0x6b8]
call fcn.10009b6a
mov ecx, dword [ebp - 0x22c]
mov dword [eax], ecx
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x22c]
mov dword [ebp + eax - 0x630], ecx
cmp dword [ebp - 0x22c], 0xba43
jle 0x10021086
mov dword [ebp - 0x4d8], 1
jmp 0x1002108d
and dword [ebp - 0x4d8], 0
mov eax, dword [ebp - 0x350]
neg eax
cmp eax, dword [ebp - 0x4d8]
jle 0x100210a9
mov dword [ebp - 0x358], 1
jmp 0x100210b0
and dword [ebp - 0x358], 0
push 0
lea ecx, [ebp - 0x974]
call fcn.10009b6a
mov ecx, dword [ebp - 0x358]
mov dword [eax], ecx
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x974]
call fcn.10009b5c
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x980]
call fcn.10009b5c
jmp 0x10020bfd
mov eax, dword [ebp - 0x124]
mov ecx, dword [ebp - 0x124]
inc ecx
mov dword [ebp - 0x124], ecx
test eax, eax
jne 0x100212e5
mov eax, dword [ebp - 0x124]
mov dword [ebp - 0x59c], eax
push 0
lea ecx, [ebp - 0x6b8]
call fcn.10009b6a
mov ecx, dword [ebp - 0x59c]
mov dword [eax], ecx
push 4
pop eax
imul eax, eax, 3
mov ecx, dword [ebp - 0x59c]
mov dword [ebp + eax - 0x6a4], ecx
mov eax, dword [ebp - 0x48]
mov dword [ebp - 0xa94], eax
push 4
pop eax
imul eax, eax, 3
mov ecx, dword [ebp - 0x2ac]
cmp dword [ebp + eax - 0x6a4], ecx
jl 0x1002116d
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0x6a4], 0
jne 0x1002116d
and dword [ebp - 0x360], 0
jmp 0x10021177
mov dword [ebp - 0x360], 1
push 0
lea ecx, [ebp - 0x810]
call fcn.10009b6a
mov ecx, dword [ebp - 0x360]
cmp ecx, dword [eax]
jg 0x1002119a
mov dword [ebp - 0x4e0], 1
jmp 0x100211a1
and dword [ebp - 0x4e0], 0
cmp dword [ebp - 0x4e0], 0x9c241240
jbe 0x100211b9
mov dword [ebp - 0x368], 1
jmp 0x100211c0
and dword [ebp - 0x368], 0
mov eax, dword [ebp - 0x124]
cmp dword [ebp - 0x368], eax
jg 0x100211da
mov dword [ebp - 0x604], 1
jmp 0x100211e1
and dword [ebp - 0x604], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x630]
cmp dword [ebp - 0x604], eax
jg 0x10021202
mov dword [ebp - 0x370], 1
jmp 0x10021209
and dword [ebp - 0x370], 0
push 4
pop eax
imul eax, eax, 3
mov esi, dword [ebp + eax - 0x6a4]
push 0
lea ecx, [ebp - 0x6b8]
call fcn.10009b6a
mov eax, dword [eax]
sub eax, dword [ebp - 0x370]
cmp esi, eax
jne 0x10021241
mov eax, 0x47bed265
test eax, eax
jne 0x10021241
and dword [ebp - 0x4e8], 0
jmp 0x1002124b
mov dword [ebp - 0x4e8], 1
cmp dword [ebp - 0x4e8], 0xc1af
jg 0x10021263
mov dword [ebp - 0x378], 1
jmp 0x1002126a
and dword [ebp - 0x378], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x630]
cmp dword [ebp - 0x378], eax
jge 0x1002128b
mov dword [ebp - 0x2b4], 1
jmp 0x10021292
and dword [ebp - 0x2b4], 0
push 0
lea ecx, [ebp - 0x820]
call fcn.10009b6a
mov ecx, dword [ebp - 0x2b4]
mov dword [eax], ecx
mov eax, dword [ebp - 0x5a4]
cmp dword [ebp - 0x2b4], eax
jl 0x100212c1
mov dword [ebp - 0x380], 1
jmp 0x100212c8
and dword [ebp - 0x380], 0
mov eax, dword [ebp - 0x48]
cmp dword [ebp - 0x380], eax
je 0x100212e5
mov eax, 0xd161
test eax, eax
jne 0x100212e5
and dword [ebp - 0x4f0], 0
jmp 0x100212ef
mov dword [ebp - 0x4f0], 1
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x630]
imul eax, dword [ebp - 0x4f0]
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x630], eax
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x6b8]
call fcn.10009b5c
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x810]
call fcn.10009b5c
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x820]
call fcn.10009b5c
mov dword [ebp - 0x2f4], 0xffffffff
push 1
lea ecx, [ebp - 0x8fc]
call fcn.10009afa
mov dword [ebp - 4], 6
mov dword [ebp - 0x734], 0x857b1a09
mov dword [ebp - 0x148], 0xeb61943e
mov dword [ebp - 0x28], 0x77e8edf1
mov dword [ebp - 0x948], 6
mov dword [ebp - 0x944], 6
mov dword [ebp - 0x940], 6
mov dword [ebp - 0x93c], 6
lea ecx, [ebp - 0x261]
call fcn.10009bd3
push eax
lea eax, [ebp - 0x938]
push eax
lea eax, [ebp - 0x948]
push eax
lea ecx, [ebp - 0xb30]
call fcn.10009bd6
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0x8f0]
call fcn.10009b36
mov byte [ebp - 4], 7
cmp dword [ebp - 0x28], 0
je 0x10021450
cmp dword [ebp - 0x28], 0
je 0x10021407
push 0x3d41
push 0x1b
push 0x6031
push 0
push 0x19ce
push 1
push 0x370f
call fcn.1001f6c4
add esp, 0x1c
jmp 0x10021434
mov dword [ebp - 0x28], 0
jmp 0x10021417
mov eax, dword [ebp - 0x28]
inc eax
mov dword [ebp - 0x28], eax
cmp dword [ebp - 0x28], 4
jge 0x10021434
lea eax, [ebp - 0x28]
push eax
lea eax, [ebp - 0x8f0]
push eax
push 0
call fcn.10033639
add esp, 0xc
jmp 0x10021410
mov byte [ebp - 0xad], 0
movzx eax, byte [ebp - 0xad]
test eax, eax
je 0x1002144e
push 0
call fcn.10025823
pop ecx
jmp 0x100214cd
mov dword [ebp - 0x800], 0x9989d221
mov dword [ebp - 0x28], 0x14
jmp 0x1002146a
mov eax, dword [ebp - 0x28]
dec eax
mov dword [ebp - 0x28], eax
cmp dword [ebp - 0x28], 0xa
jne 0x100214b8
mov dword [ebp - 0x12c], 0xffffffff
mov dword [ebp - 0x12c], 0
jmp 0x10021493
mov eax, dword [ebp - 0x12c]
inc eax
mov dword [ebp - 0x12c], eax
cmp dword [ebp - 0x12c], 3
jg 0x100214b6
push dword [ebp - 0x12c]
lea ecx, [ebp - 0x8f0]
call fcn.10009b6a
cmp dword [eax], 0
je 0x100214b4
jmp 0x100214b6
jmp 0x10021486
jmp 0x10021463
push 2
lea ecx, [ebp - 0x8f0]
call fcn.10009b6a
mov eax, dword [eax]
mov dword [ebp - 0x800], eax
mov byte [ebp - 4], 6
lea ecx, [ebp - 0x8f0]
call fcn.10009b5c
mov dword [ebp - 0x788], 1
mov dword [ebp - 0x364], 0x97fb
mov dword [ebp - 0x1c], 0x4768
mov dword [ebp - 0x6c8], 0
mov dword [ebp - 0x16c], 0
jmp 0x1002151a
mov eax, dword [ebp - 0x16c]
inc eax
mov dword [ebp - 0x16c], eax
cmp dword [ebp - 0x16c], 3
jge 0x10021536
mov eax, dword [ebp - 0x16c]
mov dword [ebp + eax*4 - 0x210], 0
jmp 0x1002150d
mov byte [ebp - 0xc7], 0
lea eax, [ebp - 0xc7]
push eax
push 0x397a
push 0
push 0
push 0x2375
call fcn.1001cba3
add esp, 0x14
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0xae0], eax
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0xae8], eax
push 4
pop eax
imul eax, eax, 0
push 4
pop ecx
shl ecx, 1
mov ecx, dword [ebp + ecx - 0x210]
cmp dword [ebp + eax - 0x210], ecx
jl 0x100215a3
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x210], 0
je 0x100215a3
mov dword [ebp - 0x388], 1
jmp 0x100215aa
and dword [ebp - 0x388], 0
cmp dword [ebp - 0x388], 0xebf9
jl 0x100215c2
mov dword [ebp - 0x894], 1
jmp 0x100215c9
and dword [ebp - 0x894], 0
push 4
pop eax
imul eax, eax, 0
push 4
pop ecx
imul ecx, ecx, 0
mov ecx, dword [ebp + ecx - 0x210]
cmp dword [ebp + eax - 0x210], ecx
jg 0x100215f1
mov dword [ebp - 0x89c], 1
jmp 0x100215f8
and dword [ebp - 0x89c], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x210]
mov dword [ebp - 0xaf0], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x210]
mov dword [ebp - 0xaf8], eax
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x210]
mov dword [ebp - 0xb00], eax
mov eax, dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], eax
jge 0x10021644
mov dword [ebp - 0x890], 1
jmp 0x1002164b
and dword [ebp - 0x890], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x210]
mov dword [ebp - 0xb08], eax
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0xb10], eax
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x210]
mov dword [ebp - 0xad4], eax
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x210]
sub eax, dword [ebp - 0x1c]
cmp eax, dword [ebp - 0x1c]
je 0x100217a0
push 3
lea ecx, [ebp - 0x998]
call fcn.10009afa
mov byte [ebp - 4], 8
push 0x61aa
push 0x25aa
lea eax, [ebp - 0xa48]
push eax
lea eax, [ebp - 0x998]
push eax
push 0
call fcn.10028272
add esp, 0x14
mov dword [ebp - 0x1c], 8
jmp 0x100216d6
mov eax, dword [ebp - 0x1c]
inc eax
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 0x17
jne 0x1002178c
mov dword [ebp - 0x84], 0
mov dword [ebp - 0xa08], 0
mov dword [ebp - 0x84], 2
jmp 0x1002170d
mov eax, dword [ebp - 0x84]
dec eax
mov dword [ebp - 0x84], eax
cmp dword [ebp - 0x84], 0
jl 0x10021731
push 0x208a
push 0x2ff0
push 0
push 0x503
call fcn.1003915d
add esp, 0x10
jmp 0x10021700
mov dword [ebp - 0x84], 0
jmp 0x1002174a
mov eax, dword [ebp - 0x84]
inc eax
mov dword [ebp - 0x84], eax
cmp dword [ebp - 0x84], 2
jg 0x10021787
mov byte [ebp - 0xca], 0
lea eax, [ebp - 0xca]
push eax
push 0
call fcn.100270ad
pop ecx
pop ecx
lea eax, [ebp - 0x998]
push eax
push 0
push 0x193b
push 0x4b20
call fcn.10025adb
add esp, 0x10
jmp 0x1002173d
jmp 0x100216cf
mov byte [ebp - 4], 6
lea ecx, [ebp - 0x998]
call fcn.10009b5c
jmp 0x100219ae
mov dword [ebp - 0x288], 0xfffffff7
mov dword [ebp - 0x13c], 0x7f668cde
mov dword [ebp - 0x1bc], 0
jmp 0x100217cd
mov eax, dword [ebp - 0x1bc]
inc eax
mov dword [ebp - 0x1bc], eax
cmp dword [ebp - 0x1bc], 3
jge 0x100217e9
mov eax, dword [ebp - 0x1bc]
mov dword [ebp + eax*4 - 0xb1c], 7
jmp 0x100217c0
mov dword [ebp - 0x1c], 0
jmp 0x100217f9
mov eax, dword [ebp - 0x1c]
inc eax
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 0x39
jl 0x100219ae
mov dword [ebp - 0x134], 0x3e8af804
mov byte [ebp - 0xcc], 0
movzx eax, byte [ebp - 0xcc]
test eax, eax
je 0x1002183a
push 0x719f
push 0x414
push 1
push 0
push 0x108f
call fcn.1001cba3
add esp, 0x14
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x210], 0
mov eax, dword [ebp - 0x134]
cmp dword [ebp - 0x288], eax
jle 0x10021862
mov dword [ebp - 0x654], 1
jmp 0x10021869
and dword [ebp - 0x654], 0
mov eax, dword [ebp - 0x134]
cmp dword [ebp - 0x654], eax
jg 0x10021883
mov dword [ebp - 0x390], 1
jmp 0x1002188a
and dword [ebp - 0x390], 0
mov eax, dword [ebp - 0x288]
cmp dword [ebp - 0x390], eax
je 0x100218a4
mov dword [ebp - 0x784], 1
jmp 0x100218ab
and dword [ebp - 0x784], 0
mov eax, dword [ebp - 0x134]
mov dword [ebp - 0xb04], eax
mov eax, dword [ebp - 0x134]
cmp dword [ebp - 0x134], eax
jle 0x100218d6
xor eax, eax
inc eax
je 0x100218d6
mov dword [ebp - 0x4f8], 1
jmp 0x100218dd
and dword [ebp - 0x4f8], 0
mov eax, dword [ebp - 0x4f8]
sub eax, dword [ebp - 0x13c]
cmp eax, 1
jne 0x100218fa
mov dword [ebp - 0x398], 1
jmp 0x10021901
and dword [ebp - 0x398], 0
mov eax, dword [ebp - 0x288]
cmp dword [ebp - 0x398], eax
je 0x1002191b
mov dword [ebp - 0x7cc], 1
jmp 0x10021922
and dword [ebp - 0x7cc], 0
imul eax, dword [ebp - 0x13c], 0x91c6
cmp eax, dword [ebp - 0x13c]
jg 0x10021940
mov dword [ebp - 0x5ac], 1
jmp 0x10021947
and dword [ebp - 0x5ac], 0
mov eax, dword [ebp - 0x5ac]
mov dword [ebp - 0x13c], eax
mov eax, dword [ebp - 0x13c]
mov dword [ebp - 0x3a0], eax
push 4
pop eax
shl eax, 1
mov ecx, dword [ebp - 0x3a0]
mov dword [ebp + eax - 0xb1c], ecx
cmp dword [ebp - 0x3a0], 0
jne 0x10021993
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x210], 0
jne 0x10021993
and dword [ebp - 0x500], 0
jmp 0x1002199d
mov dword [ebp - 0x500], 1
mov eax, dword [ebp - 0x500]
mov dword [ebp - 0x6c8], eax
jmp 0x100217f2
mov dword [ebp - 0x790], 0xc6aa
mov dword [ebp - 0xec], 0xc184c506
mov dword [ebp - 0x174], 0
jmp 0x100219db
mov eax, dword [ebp - 0x174]
inc eax
mov dword [ebp - 0x174], eax
cmp dword [ebp - 0x174], 2
jge 0x100219f7
mov eax, dword [ebp - 0x174]
mov dword [ebp + eax*4 - 0x910], 0xb57f
jmp 0x100219ce
mov dword [ebp - 0xec], 0
jmp 0x10021a10
mov eax, dword [ebp - 0xec]
inc eax
mov dword [ebp - 0xec], eax
cmp dword [ebp - 0xec], 1
jg 0x10021a35
mov eax, dword [ebp - 0xec]
mov ecx, dword [ebp - 0xec]
mov eax, dword [ebp + eax*4 - 0x910]
mov dword [ebp + ecx*4 - 0x910], eax
jmp 0x10021a03
mov dword [ebp - 0x14], 0x6fe7d8a8
push 1
lea ecx, [ebp - 0x908]
call fcn.10009afa
mov byte [ebp - 4], 9
mov dword [ebp - 0xa10], 0x596def04
mov dword [ebp - 0x144], 0
jmp 0x10021a70
mov eax, dword [ebp - 0x144]
inc eax
mov dword [ebp - 0x144], eax
cmp dword [ebp - 0x144], 4
jge 0x10021a8c
mov eax, dword [ebp - 0x144]
mov dword [ebp + eax*4 - 0x228], 0x540d
jmp 0x10021a63
lea eax, [ebp - 0x908]
push eax
push 0
lea eax, [ebp - 0x144]
push eax
push 0x27e1
push 0x2af1
call fcn.100385ed
add esp, 0x14
mov dword [ebp - 0x14], 0
jmp 0x10021abe
mov eax, dword [ebp - 0x14]
inc eax
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 3
jg 0x1002208a
mov dword [ebp - 0x18], 0x5b3b9da4
mov dword [ebp - 0xf4], 0x33c8a0c0
mov dword [ebp - 0x238], 0x61e9426
mov dword [ebp - 0x6e0], 0xbeba
mov dword [ebp - 0x18], 3
jmp 0x10021afd
mov eax, dword [ebp - 0x18]
dec eax
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 0
jl 0x1002206e
mov dword [ebp - 0x78], 0xffffffff
mov dword [ebp - 0x14c], 0xe4c12f69
mov dword [ebp - 0x74], 0
jmp 0x10021b28
mov eax, dword [ebp - 0x74]
inc eax
mov dword [ebp - 0x74], eax
cmp dword [ebp - 0x74], 2
jge 0x10021b3e
mov eax, dword [ebp - 0x74]
mov dword [ebp + eax*4 - 0x778], 5
jmp 0x10021b21
mov dword [ebp - 0x74], 0
jmp 0x10021b4e
mov eax, dword [ebp - 0x74]
inc eax
mov dword [ebp - 0x74], eax
cmp dword [ebp - 0x74], 2
jge 0x10021b64
mov eax, dword [ebp - 0x74]
mov dword [ebp + eax*4 - 0xaac], 0xdb4546b7
jmp 0x10021b47
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x18]
mov eax, dword [ebp + eax*4 - 0x228]
mov dword [ebp + ecx*4 - 0x228], eax
mov dword [ebp - 0x78], 3
jmp 0x10021b88
mov eax, dword [ebp - 0x78]
dec eax
mov dword [ebp - 0x78], eax
cmp dword [ebp - 0x78], 0
jl 0x10022069
mov dword [ebp - 0x7dc], 1
mov dword [ebp - 0x7e4], 1
mov eax, dword [ebp - 0x14]
mov ecx, dword [ebp - 0x18]
mov eax, dword [ebp + eax*4 - 0x228]
mov dword [ebp + ecx*4 - 0x228], eax
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp + eax*4 - 0x228]
mov dword [ebp - 0xa90], eax
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0xa18], eax
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x14]
cmp dword [ebp + eax - 0x228], ecx
jle 0x10021bf1
mov dword [ebp - 0x3a8], 1
jmp 0x10021bf8
and dword [ebp - 0x3a8], 0
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x3a8]
sub ecx, dword [ebp + eax*4 - 0x228]
cmp ecx, dword [ebp - 0x18]
jl 0x10021c19
mov dword [ebp - 0x610], 1
jmp 0x10021c20
and dword [ebp - 0x610], 0
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp + eax*4 - 0x228]
cmp dword [ebp - 0x610], eax
jle 0x10021c51
cmp dword [ebp - 0x7dc], 0
jne 0x10021c51
mov eax, dword [ebp - 0x14]
cmp dword [ebp + eax*4 - 0x228], 0
jne 0x10021c51
and dword [ebp - 0x6d0], 0
jmp 0x10021c5b
mov dword [ebp - 0x6d0], 1
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0xae4], eax
mov eax, dword [ebp - 0x14]
cmp dword [ebp - 0x78], eax
jl 0x10021c78
mov dword [ebp - 0x3b0], 1
jmp 0x10021c7f
and dword [ebp - 0x3b0], 0
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp + eax*4 - 0x228]
cmp eax, dword [ebp - 0x3b0]
jg 0x10021c9d
mov dword [ebp - 0x884], 1
jmp 0x10021ca4
and dword [ebp - 0x884], 0
push 4
pop eax
imul eax, eax, 3
mov eax, dword [ebp + eax - 0x228]
mov dword [ebp - 0xa20], eax
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp + eax*4 - 0x228]
mov dword [ebp - 0xa98], eax
mov eax, dword [ebp - 0xf4]
mov dword [ebp - 0xa28], eax
mov eax, dword [ebp - 0xf4]
cmp dword [ebp - 0x14], eax
jl 0x10021cea
mov dword [ebp - 0x2a0], 1
jmp 0x10021cf1
and dword [ebp - 0x2a0], 0
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x2a0]
mov dword [ebp + eax - 0x778], ecx
mov eax, dword [ebp - 0x2a0]
sub eax, dword [ebp - 0x14]
cmp eax, 0xfffffff9
jne 0x10021d1e
mov dword [ebp - 0x508], 1
jmp 0x10021d25
and dword [ebp - 0x508], 0
mov eax, dword [ebp - 0x508]
mov dword [ebp - 0x14c], eax
mov eax, dword [ebp - 0x14c]
imul eax, dword [ebp - 0x78]
test eax, eax
jne 0x10021d55
mov eax, dword [ebp - 0x18]
cmp dword [ebp + eax*4 - 0x228], 0
jne 0x10021d55
and dword [ebp - 0x3b8], 0
jmp 0x10021d5f
mov dword [ebp - 0x3b8], 1
mov eax, dword [ebp - 0x14]
cmp dword [ebp - 0x3b8], eax
jg 0x10021d80
cmp dword [ebp - 0x14], 0
je 0x10021d80
xor eax, eax
je 0x10021d80
mov dword [ebp - 0x6d8], 1
jmp 0x10021d87
and dword [ebp - 0x6d8], 0
mov eax, dword [ebp - 0x78]
mov dword [ebp - 0xafc], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x778], 0
je 0x10021eb1
mov dword [ebp - 0xf4], 0x14
jmp 0x10021dbd
mov eax, dword [ebp - 0xf4]
dec eax
mov dword [ebp - 0xf4], eax
cmp dword [ebp - 0xf4], 0x13
jne 0x10021eac
mov eax, 0xffff6d05
test eax, eax
je 0x10021def
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x778], 0
je 0x10021def
mov dword [ebp - 0x3c0], 1
jmp 0x10021df6
and dword [ebp - 0x3c0], 0
mov eax, dword [ebp - 0x14]
mov dword [ebp - 0x238], eax
cmp dword [ebp - 0x238], 0xb39
jg 0x10021e17
mov dword [ebp - 0x5b4], 1
jmp 0x10021e1e
and dword [ebp - 0x5b4], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x228]
add eax, dword [ebp - 0x5b4]
cmp dword [ebp - 0x3c0], eax
jne 0x10021e45
mov dword [ebp - 0x510], 1
jmp 0x10021e4c
and dword [ebp - 0x510], 0
mov eax, dword [ebp - 0x510]
mov dword [ebp - 0x14c], eax
mov eax, dword [ebp - 0x18]
cmp dword [ebp - 0x14c], eax
jle 0x10021e75
cmp dword [ebp - 0x14], 0
je 0x10021e75
mov dword [ebp - 0x3c8], 1
jmp 0x10021e7c
and dword [ebp - 0x3c8], 0
cmp dword [ebp - 0x3c8], 0x7d38
jg 0x10021e94
mov dword [ebp - 0x644], 1
jmp 0x10021e9b
and dword [ebp - 0x644], 0
mov eax, dword [ebp - 0x644]
mov dword [ebp - 0x7e4], eax
jmp 0x10021db0
jmp 0x10022064
mov dword [ebp - 0x1c4], 0
jmp 0x10021eca
mov eax, dword [ebp - 0x1c4]
inc eax
mov dword [ebp - 0x1c4], eax
cmp dword [ebp - 0x1c4], 1
jge 0x10021ee6
mov eax, dword [ebp - 0x1c4]
mov dword [ebp + eax*4 - 0x280], 1
jmp 0x10021ebd
cmp dword [ebp - 0x14], 0
je 0x10021f08
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x280], 0xfffffff8
je 0x10021f08
mov dword [ebp - 0x3d0], 1
jmp 0x10021f0f
and dword [ebp - 0x3d0], 0
cmp dword [ebp - 0x3d0], 0x153d
je 0x10021f27
mov dword [ebp - 0x518], 1
jmp 0x10021f2e
and dword [ebp - 0x518], 0
cmp dword [ebp - 0x518], 0
je 0x10021f43
mov dword [ebp - 0x3d8], 1
jmp 0x10021f4a
and dword [ebp - 0x3d8], 0
mov eax, dword [ebp - 0x3d8]
sub eax, dword [ebp - 0x14]
mov ecx, dword [ebp - 0x18]
cmp eax, dword [ebp + ecx*4 - 0x228]
jge 0x10021f6b
mov dword [ebp - 0x5bc], 1
jmp 0x10021f72
and dword [ebp - 0x5bc], 0
mov eax, dword [ebp - 0x238]
cmp eax, dword [ebp - 0x5bc]
jle 0x10021f8c
mov dword [ebp - 0x3e0], 1
jmp 0x10021f93
and dword [ebp - 0x3e0], 0
mov eax, dword [ebp - 0x3e0]
sub eax, dword [ebp - 0x78]
cmp eax, dword [ebp - 0x6e0]
je 0x10021fb0
mov dword [ebp - 0x88c], 1
jmp 0x10021fb7
and dword [ebp - 0x88c], 0
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0xa30], eax
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0xaac]
mov ecx, dword [ebp - 0x18]
sub eax, dword [ebp + ecx*4 - 0x228]
push 4
pop ecx
imul ecx, ecx, 0
sub eax, dword [ebp + ecx - 0x280]
cmp eax, 0xffffffff
jne 0x10021ff5
mov dword [ebp - 0x520], 1
jmp 0x10021ffc
and dword [ebp - 0x520], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x280]
cmp dword [ebp - 0x520], eax
jl 0x1002201d
mov dword [ebp - 0x3e8], 1
jmp 0x10022024
and dword [ebp - 0x3e8], 0
cmp dword [ebp - 0x3e8], 0x451c
jne 0x1002203c
mov dword [ebp - 0x240], 1
jmp 0x10022043
and dword [ebp - 0x240], 0
push 0
lea ecx, [ebp - 0x908]
call fcn.10009b6a
mov ecx, dword [ebp - 0x240]
mov dword [eax], ecx
mov eax, dword [ebp - 0x240]
mov dword [ebp - 0x14c], eax
jmp 0x10021b81
jmp 0x10021af6
push 0
lea ecx, [ebp - 0x908]
call fcn.10009b6a
cmp dword [eax], 0
je 0x10022085
jmp 0x10021ab7
jmp 0x10021ab7
mov byte [ebp - 4], 6
lea ecx, [ebp - 0x908]
call fcn.10009b5c
mov dword [ebp - 0x17c], 0
jmp 0x100220b2
mov eax, dword [ebp - 0x17c]
inc eax
mov dword [ebp - 0x17c], eax
cmp dword [ebp - 0x17c], 1
jge 0x100220d4
push dword [ebp - 0x17c]
lea ecx, [ebp - 0x8fc]
call fcn.10009b6a
mov dword [eax], 0x6548aab5
jmp 0x100220a5
cmp dword [ebp - 0x54], 0
jne 0x10022127
cmp dword [ebp - 0x54], 1
je 0x100220ec
mov dword [ebp - 0x61c], 1
jmp 0x100220f3
and dword [ebp - 0x61c], 0
mov eax, dword [ebp - 0x54]
add eax, dword [ebp - 0x61c]
je 0x10022113
mov eax, 0x6038
test eax, eax
je 0x10022113
mov dword [ebp - 0x3f0], 1
jmp 0x1002211a
and dword [ebp - 0x3f0], 0
cmp dword [ebp - 0x3f0], 0
je 0x100238ea
mov dword [ebp - 0xb4], 0xfffffffb
mov dword [ebp - 0x110], 0
push 2
lea ecx, [ebp - 0x830]
call fcn.10009afa
mov byte [ebp - 4], 0xa
mov dword [ebp - 0x6f0], 0xffffffff
mov dword [ebp - 0xaec], 0xfffffff9
mov dword [ebp - 0x1c8], 0
jmp 0x10022179
mov eax, dword [ebp - 0x1c8]
inc eax
mov dword [ebp - 0x1c8], eax
cmp dword [ebp - 0x1c8], 2
jge 0x10022198
push dword [ebp - 0x1c8]
lea ecx, [ebp - 0x830]
call fcn.10009b6a
or dword [eax], 0xffffffff
jmp 0x1002216c
mov dword [ebp - 0xb4], 0x16
jmp 0x100221b1
mov eax, dword [ebp - 0xb4]
dec eax
mov dword [ebp - 0xb4], eax
cmp dword [ebp - 0xb4], 0xffffffff
jg 0x1002222d
mov dword [ebp - 0x528], 0xffab8c3a
mov dword [ebp - 0x6e8], 9
mov dword [ebp - 0x7ec], 0xb78acc4b
mov dword [ebp - 0x110], 0
mov esi, dword [ebp - 0x528]
add esi, dword [ebp - 0x110]
push 0
lea ecx, [ebp - 0x830]
call fcn.10009b6a
mov dword [eax], esi
lea eax, [ebp - 0x6e8]
push eax
push 0
lea eax, [ebp - 0x830]
push eax
lea eax, [ebp - 0x7ec]
push eax
lea eax, [ebp - 0x528]
push eax
push 0x675f
call fcn.10025280
add esp, 0x18
jmp 0x100221a4
mov eax, dword [ebp - 0xb4]
mov dword [ebp - 0xa50], eax
cmp dword [ebp - 0x110], 0
je 0x1002225b
mov eax, dword [ebp - 0x110]
shl eax, 3
test eax, eax
je 0x1002225b
mov dword [ebp - 0x3f8], 1
jmp 0x10022262
and dword [ebp - 0x3f8], 0
mov eax, dword [ebp - 0x6f0]
cmp dword [ebp - 0x3f8], eax
jl 0x1002227c
mov dword [ebp - 0x5c4], 1
jmp 0x10022283
and dword [ebp - 0x5c4], 0
cmp dword [ebp - 0x5c4], 0x4465
jle 0x1002229b
mov dword [ebp - 0x530], 1
jmp 0x100222a2
and dword [ebp - 0x530], 0
mov dword [ebp - 0xb4], 8
mov eax, dword [ebp - 0xb4]
mov dword [ebp - 0x400], eax
push 1
lea ecx, [ebp - 0x830]
call fcn.10009b6a
mov ecx, dword [ebp - 0x400]
mov dword [eax], ecx
mov eax, dword [ebp - 0x400]
sub eax, dword [ebp - 0x530]
mov dword [ebp - 0x110], eax
mov byte [ebp - 4], 6
lea ecx, [ebp - 0x830]
call fcn.10009b5c
mov dword [ebp - 0x870], 0x1b90
cmp dword [ebp - 0x870], 0x41f
jge 0x100225a2
lea eax, [ebp - 0x150]
push eax
push 0x100078f8
call fcn.10057e4b
pop ecx
pop ecx
mov eax, dword [ebp - 0x150]
imul eax, dword [ebp - 0x150]
push eax
lea ecx, [ebp - 0x2c4]
call fcn.10009afa
mov byte [ebp - 4], 0xb
and dword [ebp - 0x184], 0
jmp 0x1002234e
mov eax, dword [ebp - 0x184]
inc eax
mov dword [ebp - 0x184], eax
mov eax, dword [ebp - 0x150]
imul eax, dword [ebp - 0x150]
cmp dword [ebp - 0x184], eax
jge 0x10022383
push dword [ebp - 0x184]
lea ecx, [ebp - 0x2c4]
call fcn.10009b6a
push eax
push 0x100078ec
call fcn.10057e4b
pop ecx
pop ecx
jmp 0x10022341
lea eax, [ebp - 0xabc]
push eax
lea ecx, [ebp - 0x2c4]
call fcn.10015172
push dword [eax]
lea eax, [ebp - 0xa58]
push eax
lea ecx, [ebp - 0x2c4]
call fcn.10009fe5
push dword [eax]
call fcn.10041857
pop ecx
pop ecx
lea ecx, [ebp - 0x660]
call fcn.10009aed
mov byte [ebp - 4], 0xc
and dword [ebp - 0x284], 0
jmp 0x100223d7
mov eax, dword [ebp - 0x284]
inc eax
mov dword [ebp - 0x284], eax
mov eax, dword [ebp - 0x284]
cmp eax, dword [ebp - 0x150]
jge 0x1002252f
lea ecx, [ebp - 0x2c4]
call fcn.10040db7
cmp dword [eax], 0
jge 0x10022406
lea ecx, [ebp - 0x2c4]
call fcn.10009bce
jmp 0x100223e9
lea ecx, [ebp - 0x2c4]
call fcn.10040db7
mov eax, dword [eax]
mov dword [ebp - 0x6f8], eax
lea ecx, [ebp - 0x2c4]
call fcn.10009bce
lea eax, [ebp - 0x6f8]
push eax
lea ecx, [ebp - 0x660]
call fcn.10040dbe
and dword [ebp - 0x18c], 0
jmp 0x1002244c
mov eax, dword [ebp - 0x18c]
inc eax
mov dword [ebp - 0x18c], eax
lea ecx, [ebp - 0x660]
call fcn.10009b61
cmp dword [ebp - 0x18c], eax
jae 0x1002252a
and dword [ebp - 0x1e8], 0
jmp 0x10022479
mov eax, dword [ebp - 0x1e8]
inc eax
mov dword [ebp - 0x1e8], eax
lea ecx, [ebp - 0x660]
call fcn.10009b61
cmp dword [ebp - 0x1e8], eax
jae 0x10022525
push dword [ebp - 0x1e8]
lea ecx, [ebp - 0x660]
call fcn.10009b6a
push dword [eax]
push dword [ebp - 0x18c]
lea ecx, [ebp - 0x660]
call fcn.10009b6a
push dword [eax]
call fcn.1001fd25
pop ecx
pop ecx
mov dword [ebp - 0x7f4], eax
lea ecx, [ebp - 0x2c4]
call fcn.10009b61
dec eax
mov dword [ebp - 0x118], eax
jmp 0x100224e4
mov eax, dword [ebp - 0x118]
dec eax
mov dword [ebp - 0x118], eax
cmp dword [ebp - 0x118], 0
jl 0x10022520
push dword [ebp - 0x118]
lea ecx, [ebp - 0x2c4]
call fcn.10009b6a
mov eax, dword [eax]
cmp eax, dword [ebp - 0x7f4]
jne 0x1002251e
push dword [ebp - 0x118]
lea ecx, [ebp - 0x2c4]
call fcn.10009b6a
or dword [eax], 0xffffffff
jmp 0x10022520
jmp 0x100224d7
jmp 0x1002246c
jmp 0x1002243f
jmp 0x100223ca
and dword [ebp - 0x1d0], 0
jmp 0x10022545
mov eax, dword [ebp - 0x1d0]
inc eax
mov dword [ebp - 0x1d0], eax
lea ecx, [ebp - 0x660]
call fcn.10009b61
cmp dword [ebp - 0x1d0], eax
jae 0x10022579
push dword [ebp - 0x1d0]
lea ecx, [ebp - 0x660]
call fcn.10009b6a
push dword [eax]
push 0x100079c8
call fcn.10058066
pop ecx
pop ecx
jmp 0x10022538
push 0x10007781
call fcn.10058226
pop ecx
mov byte [ebp - 4], 0xb
lea ecx, [ebp - 0x660]
call fcn.1000a086
mov byte [ebp - 4], 6
lea ecx, [ebp - 0x2c4]
call fcn.1000a086
mov dword [ebp - 0xd8], 0xfffffff7
mov dword [ebp - 0x7c], 0xe8cff0ea
mov dword [ebp - 0x248], 3
mov dword [ebp - 0x688], 1
mov dword [ebp - 0x684], 1
mov dword [ebp - 0x680], 1
mov dword [ebp - 0x67c], 1
mov dword [ebp - 0x19c], 0xdb80ebbd
mov dword [ebp - 0x674], 0xcff29c21
mov dword [ebp - 0x28c], 0x7c8a36a7
mov dword [ebp - 0x7c], 3
jmp 0x10022613
mov eax, dword [ebp - 0x7c]
dec eax
mov dword [ebp - 0x7c], eax
cmp dword [ebp - 0x7c], 2
jg 0x1002272c
push 3
lea ecx, [ebp - 0x840]
call fcn.10009afa
mov byte [ebp - 4], 0xd
push 0
lea eax, [ebp - 0xb0c]
push eax
lea eax, [ebp - 0x840]
push eax
push 0x4440
call fcn.10037df9
add esp, 0x10
push 2
lea ecx, [ebp - 0x840]
call fcn.10009b6a
and dword [eax], 0
jmp 0x10022681
push 2
lea ecx, [ebp - 0x840]
call fcn.10009b6a
mov dword [ebp - 0x408], eax
mov eax, dword [ebp - 0x408]
mov eax, dword [eax]
dec eax
mov ecx, dword [ebp - 0x408]
mov dword [ecx], eax
push 2
lea ecx, [ebp - 0x840]
call fcn.10009b6a
cmp dword [eax], 0xffffffec
jg 0x1002270f
mov dword [ebp - 0x1f8], 0x888999d9
mov dword [ebp - 0x194], 0
jmp 0x100226b6
mov eax, dword [ebp - 0x194]
inc eax
mov dword [ebp - 0x194], eax
cmp dword [ebp - 0x194], 2
jge 0x100226d2
mov eax, dword [ebp - 0x194]
mov dword [ebp + eax*4 - 0xb40], 0xbbef
jmp 0x100226a9
mov dword [ebp - 0x1f8], 0
jmp 0x100226eb
mov eax, dword [ebp - 0x1f8]
inc eax
mov dword [ebp - 0x1f8], eax
cmp dword [ebp - 0x1f8], 1
jg 0x1002270a
push 0x7d84
push 0
push 0x328c
call fcn.10028017
add esp, 0xc
jmp 0x100226de
jmp 0x1002265d
mov eax, dword [ebp - 0x7c]
mov dword [ebp - 0x248], eax
mov byte [ebp - 4], 6
lea ecx, [ebp - 0x840]
call fcn.10009b5c
jmp 0x1002260c
mov eax, dword [ebp - 0x19c]
dec eax
mov dword [ebp - 0x19c], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x688]
mov dword [ebp - 0xa60], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x688]
mov dword [ebp - 0xacc], eax
cmp dword [ebp - 0x248], 0
jne 0x10022783
cmp dword [ebp - 0x19c], 0
jne 0x10022783
cmp dword [ebp - 0x674], 0
jne 0x10022783
and dword [ebp - 0x410], 0
jmp 0x1002278d
mov dword [ebp - 0x410], 1
mov eax, dword [ebp - 0x674]
cmp eax, dword [ebp - 0x410]
jle 0x100227a7
mov dword [ebp - 0x538], 1
jmp 0x100227ae
and dword [ebp - 0x538], 0
mov eax, dword [ebp - 0x28c]
cmp dword [ebp - 0x538], eax
jge 0x100227c8
mov dword [ebp - 0x418], 1
jmp 0x100227cf
and dword [ebp - 0x418], 0
cmp dword [ebp - 0x418], 0xf3c5a4a1
je 0x100227e7
mov dword [ebp - 0x5cc], 1
jmp 0x100227ee
and dword [ebp - 0x5cc], 0
push 4
pop eax
shl eax, 1
mov ecx, dword [ebp - 0x5cc]
sub ecx, dword [ebp + eax - 0x688]
cmp ecx, dword [ebp - 0x248]
jg 0x10022814
mov dword [ebp - 0x420], 1
jmp 0x1002281b
and dword [ebp - 0x420], 0
cmp dword [ebp - 0x420], 0xd73c
je 0x10022833
mov dword [ebp - 0x540], 1
jmp 0x1002283a
and dword [ebp - 0x540], 0
mov eax, dword [ebp - 0x540]
sub eax, 0x140a
push 4
pop ecx
shl ecx, 1
cmp eax, dword [ebp + ecx - 0x688]
jge 0x1002285f
mov dword [ebp - 0x428], 1
jmp 0x10022866
and dword [ebp - 0x428], 0
mov eax, dword [ebp - 0x19c]
cmp dword [ebp - 0x428], eax
jge 0x10022880
mov dword [ebp - 0x628], 1
jmp 0x10022887
and dword [ebp - 0x628], 0
push 4
pop eax
imul eax, eax, 3
mov eax, dword [ebp + eax - 0x688]
add eax, dword [ebp - 0x628]
cmp eax, dword [ebp - 0x28c]
jg 0x100228ae
mov dword [ebp - 0x700], 1
jmp 0x100228b5
and dword [ebp - 0x700], 0
mov eax, dword [ebp - 0x7c]
mov dword [ebp - 0xa68], eax
mov eax, dword [ebp - 0x28c]
mov dword [ebp - 0xad0], eax
push 4
pop eax
imul eax, eax, 3
mov eax, dword [ebp + eax - 0x688]
mov dword [ebp - 0x7c], eax
cmp dword [ebp - 0x7c], 0
jne 0x100228ec
mov dword [ebp - 0x430], 1
jmp 0x100228f3
and dword [ebp - 0x430], 0
push 4
pop eax
shl eax, 1
mov ecx, dword [ebp - 0x430]
mov dword [ebp + eax - 0x688], ecx
mov dword [ebp - 0xe0], 0x5d73
mov dword [ebp - 0x708], 0x64dc9ed9
push 2
lea ecx, [ebp - 0x9a4]
call fcn.10009afa
mov byte [ebp - 4], 0xe
mov dword [ebp - 0x888], 0xa5b7d8cf
mov dword [ebp - 0x7fc], 0xffffffff
mov dword [ebp - 0x1d8], 0
jmp 0x10022957
mov eax, dword [ebp - 0x1d8]
inc eax
mov dword [ebp - 0x1d8], eax
cmp dword [ebp - 0x1d8], 2
jge 0x10022976
push dword [ebp - 0x1d8]
lea ecx, [ebp - 0x9a4]
call fcn.10009b6a
and dword [eax], 0
jmp 0x1002294a
lea eax, [ebp - 0x888]
push eax
lea eax, [ebp - 0x708]
push eax
lea eax, [ebp - 0x9a4]
push eax
lea eax, [ebp - 0x7fc]
push eax
push 0
call fcn.100256be
add esp, 0x14
mov byte [ebp - 0xc6], 0
lea eax, [ebp - 0xc6]
push eax
push 0x3707
push 0
call fcn.10027e74
add esp, 0xc
mov byte [ebp - 4], 6
lea ecx, [ebp - 0x9a4]
call fcn.10009b5c
mov dword [ebp - 0x710], 0x1b19
cmp dword [ebp - 0x710], 0x4a1
jge 0x10022aa5
lea eax, [ebp - 0x250]
push eax
mov ecx, 0x10663c70
call fcn.1001bc37
mov eax, dword [ebp - 0x250]
mov dword [ebp - 0x878], eax
mov eax, dword [ebp - 0x250]
dec eax
mov dword [ebp - 0x250], eax
cmp dword [ebp - 0x878], 0
je 0x10022aa5
lea eax, [ebp - 0x548]
push eax
lea eax, [ebp - 0x438]
push eax
lea eax, [ebp - 0x718]
push eax
lea eax, [ebp - 0x804]
push eax
mov ecx, 0x10663c70
call fcn.1001bc37
mov ecx, eax
call fcn.1001bc37
mov ecx, eax
call fcn.1001bc37
mov ecx, eax
call fcn.1001bc37
push fcn.1000d301
mov eax, dword [ebp - 0x548]
sub eax, dword [ebp - 0x718]
add eax, dword [ebp - 0x548]
push eax
mov eax, dword [ebp - 0x438]
sub eax, dword [ebp - 0x804]
add eax, dword [ebp - 0x438]
push eax
mov ecx, 0x10663bb8
call fcn.10040b71
mov dl, 0x20
mov ecx, eax
call fcn.1004187b
mov ecx, eax
call fcn.10040b71
mov ecx, eax
call fcn.100099cf
jmp 0x100229f3
mov dword [ebp - 0x558], 0
mov dword [ebp - 0x70], 0
jmp 0x10022abf
mov eax, dword [ebp - 0x70]
inc eax
mov dword [ebp - 0x70], eax
cmp dword [ebp - 0x70], 1
jge 0x10022ad5
mov eax, dword [ebp - 0x70]
mov dword [ebp + eax*4 - 0x2b0], 0xfffffff9
jmp 0x10022ab8
mov dword [ebp - 0x70], 0
jmp 0x10022ae5
mov eax, dword [ebp - 0x70]
inc eax
mov dword [ebp - 0x70], eax
cmp dword [ebp - 0x70], 2
jge 0x10022afb
mov eax, dword [ebp - 0x70]
mov dword [ebp + eax*4 - 0x218], 6
jmp 0x10022ade
push 4
pop eax
shl eax, 0
mov dword [ebp + eax - 0x218], 0
jmp 0x10022b29
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x218]
inc eax
push 4
pop ecx
shl ecx, 0
mov dword [ebp + ecx - 0x218], eax
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x218], 0
jg 0x10022fcf
mov dword [ebp - 0x450], 0x6d8bc0d1
mov dword [ebp - 0x720], 0x1c01
cmp dword [ebp - 0x720], 0x44a
jge 0x10022e8f
lea eax, [ebp - 0xbc]
push eax
push 0x100078ec
call fcn.10057e4b
pop ecx
pop ecx
push dword [ebp - 0xbc]
lea ecx, [ebp - 0x8e4]
call fcn.10009afa
mov byte [ebp - 4], 0xf
and dword [ebp - 0x1a4], 0
jmp 0x10022b9f
mov eax, dword [ebp - 0x1a4]
inc eax
mov dword [ebp - 0x1a4], eax
mov eax, dword [ebp - 0x1a4]
cmp eax, dword [ebp - 0xbc]
jge 0x10022bcd
push dword [ebp - 0x1a4]
lea ecx, [ebp - 0x8e4]
call fcn.10009b6a
push eax
push 0x100078ec
call fcn.10057e4b
pop ecx
pop ecx
jmp 0x10022b92
mov eax, dword [ebp - 0xbc]
dec eax
push eax
lea ecx, [ebp - 0x15c]
call fcn.10009afa
mov byte [ebp - 4], 0x10
and dword [ebp - 0x58], 0
jmp 0x10022bf1
mov eax, dword [ebp - 0x58]
inc eax
mov dword [ebp - 0x58], eax
mov eax, dword [ebp - 0xbc]
dec eax
cmp dword [ebp - 0x58], eax
jge 0x10022c68
mov eax, dword [ebp - 0x58]
inc eax
push eax
lea ecx, [ebp - 0x8e4]
call fcn.10009b6a
mov esi, eax
push dword [ebp - 0x58]
lea ecx, [ebp - 0x8e4]
call fcn.10009b6a
mov esi, dword [esi]
sub esi, dword [eax]
push dword [ebp - 0x58]
lea ecx, [ebp - 0x15c]
call fcn.10009b6a
mov dword [eax], esi
push dword [ebp - 0x58]
lea ecx, [ebp - 0x15c]
call fcn.10009b6a
cmp dword [eax], 0
jge 0x10022c66
push dword [ebp - 0x58]
lea ecx, [ebp - 0x15c]
call fcn.10009b6a
mov esi, dword [eax]
neg esi
push dword [ebp - 0x58]
lea ecx, [ebp - 0x15c]
call fcn.10009b6a
mov dword [eax], esi
jmp 0x10022bea
and dword [ebp - 0x1f0], 0
jmp 0x10022c7e
mov eax, dword [ebp - 0x1f0]
inc eax
mov dword [ebp - 0x1f0], eax
mov eax, dword [ebp - 0xbc]
dec eax
cmp dword [ebp - 0x1f0], eax
jge 0x10022cae
push dword [ebp - 0x1f0]
lea ecx, [ebp - 0x15c]
call fcn.10009b6a
push dword [eax]
push 0x100079c8
call fcn.10058066
pop ecx
pop ecx
jmp 0x10022c71
push 0x10007781
call fcn.10058226
pop ecx
push 0
lea ecx, [ebp - 0x15c]
call fcn.10009b6a
mov eax, dword [eax]
mov dword [ebp - 0x44], eax
push 0
lea ecx, [ebp - 0x15c]
call fcn.10009b6a
mov eax, dword [eax]
mov dword [ebp - 0x24], eax
mov dword [ebp - 0xfc], 2
jmp 0x10022cf7
mov eax, dword [ebp - 0xfc]
inc eax
inc eax
mov dword [ebp - 0xfc], eax
mov eax, dword [ebp - 0xbc]
dec eax
cmp dword [ebp - 0xfc], eax
jge 0x10022d78
push dword [ebp - 0xfc]
lea ecx, [ebp - 0x15c]
call fcn.10009b6a
mov esi, eax
mov eax, dword [ebp - 0xfc]
dec eax
push eax
lea ecx, [ebp - 0x15c]
call fcn.10009b6a
mov ecx, dword [esi]
sub ecx, dword [eax]
add ecx, dword [ebp - 0x24]
mov dword [ebp - 0x24], ecx
jns 0x10022d4e
push dword [ebp - 0xfc]
lea ecx, [ebp - 0x15c]
call fcn.10009b6a
mov eax, dword [eax]
mov dword [ebp - 0x24], eax
mov eax, dword [ebp - 0x44]
cmp eax, dword [ebp - 0x24]
jle 0x10022d61
mov eax, dword [ebp - 0x44]
mov dword [ebp - 0x5d4], eax
jmp 0x10022d6a
mov eax, dword [ebp - 0x24]
mov dword [ebp - 0x5d4], eax
mov eax, dword [ebp - 0x5d4]
mov dword [ebp - 0x44], eax
jmp 0x10022ce9
push 1
lea ecx, [ebp - 0x15c]
call fcn.10009b6a
mov eax, dword [eax]
mov dword [ebp - 0x24], eax
push 1
lea ecx, [ebp - 0x15c]
call fcn.10009b6a
mov ecx, dword [ebp - 0x44]
cmp ecx, dword [eax]
jle 0x10022da9
mov eax, dword [ebp - 0x44]
mov dword [ebp - 0x440], eax
jmp 0x10022dbe
push 1
lea ecx, [ebp - 0x15c]
call fcn.10009b6a
mov eax, dword [eax]
mov dword [ebp - 0x440], eax
mov eax, dword [ebp - 0x440]
mov dword [ebp - 0x44], eax
mov dword [ebp - 0x104], 3
jmp 0x10022de1
mov eax, dword [ebp - 0x104]
inc eax
inc eax
mov dword [ebp - 0x104], eax
mov eax, dword [ebp - 0xbc]
dec eax
cmp dword [ebp - 0x104], eax
jge 0x10022e62
push dword [ebp - 0x104]
lea ecx, [ebp - 0x15c]
call fcn.10009b6a
mov esi, eax
mov eax, dword [ebp - 0x104]
dec eax
push eax
lea ecx, [ebp - 0x15c]
call fcn.10009b6a
mov ecx, dword [esi]
sub ecx, dword [eax]
add ecx, dword [ebp - 0x24]
mov dword [ebp - 0x24], ecx
jns 0x10022e38
push dword [ebp - 0x104]
lea ecx, [ebp - 0x15c]
call fcn.10009b6a
mov eax, dword [eax]
mov dword [ebp - 0x24], eax
mov eax, dword [ebp - 0x44]
cmp eax, dword [ebp - 0x24]
jle 0x10022e4b
mov eax, dword [ebp - 0x44]
mov dword [ebp - 0x550], eax
jmp 0x10022e54
mov eax, dword [ebp - 0x24]
mov dword [ebp - 0x550], eax
mov eax, dword [ebp - 0x550]
mov dword [ebp - 0x44], eax
jmp 0x10022dd3
push dword [ebp - 0x44]
push 0x100078f8
call fcn.10058066
pop ecx
pop ecx
mov byte [ebp - 4], 0xf
lea ecx, [ebp - 0x15c]
call fcn.1000a086
mov byte [ebp - 4], 6
lea ecx, [ebp - 0x8e4]
call fcn.1000a086
mov dword [ebp - 0x728], 0xfffffffa
xor eax, eax
inc eax
je 0x10022ee9
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x218], 0xfffffff8
je 0x10022eba
mov dword [ebp - 0x448], 1
jmp 0x10022ec1
and dword [ebp - 0x448], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x218]
mov eax, dword [ebp + eax*4 - 0x2b0]
cmp dword [ebp - 0x448], eax
jne 0x10022ee9
mov dword [ebp - 0x64c], 1
jmp 0x10022ef0
and dword [ebp - 0x64c], 0
mov eax, dword [ebp - 0x64c]
add eax, 9
mov dword [ebp - 0x450], eax
jne 0x10022f13
mov eax, 0xfffb
test eax, eax
jne 0x10022f13
and dword [ebp - 0x898], 0
jmp 0x10022f1d
mov dword [ebp - 0x898], 1
mov eax, 0x39e22401
dec eax
je 0x10022f51
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x218]
cmp dword [ebp + eax*4 - 0x2b0], 0
je 0x10022f51
mov eax, 0xfff7
test eax, eax
je 0x10022f51
mov dword [ebp - 0x458], 1
jmp 0x10022f58
and dword [ebp - 0x458], 0
mov dword [ebp - 0x558], 0x86bd085
mov eax, dword [ebp - 0x558]
cmp eax, dword [ebp - 0x458]
jge 0x10022f7c
mov dword [ebp - 0x5e0], 1
jmp 0x10022f83
and dword [ebp - 0x5e0], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x218]
mov eax, dword [ebp + eax*4 - 0x2b0]
imul eax, dword [ebp - 0x5e0]
mov dword [ebp - 0x728], eax
mov byte [ebp - 0xcd], 0
movzx eax, byte [ebp - 0xcd]
test eax, eax
je 0x10022fca
push 0x5e25
push 0x5af2
push 0
call fcn.100272f2
add esp, 0xc
jmp 0x10022b0e
mov dword [ebp - 0x740], 0xfffffffd
mov dword [ebp - 0x108], 0xa1c1
mov dword [ebp - 0x470], 0x7cbae8b0
mov dword [ebp - 0x480], 1
mov dword [ebp - 0x780], 0x6a191a83
mov dword [ebp - 0x68], 0
jmp 0x10023011
mov eax, dword [ebp - 0x68]
inc eax
mov dword [ebp - 0x68], eax
cmp dword [ebp - 0x68], 4
jge 0x10023027
mov eax, dword [ebp - 0x68]
mov dword [ebp + eax*4 - 0x920], 0x8cae2fe8
jmp 0x1002300a
mov dword [ebp - 0x68], 0
jmp 0x10023037
mov eax, dword [ebp - 0x68]
inc eax
mov dword [ebp - 0x68], eax
cmp dword [ebp - 0x68], 3
jge 0x1002304d
mov eax, dword [ebp - 0x68]
mov dword [ebp + eax*4 - 0xaa4], 0xffffffff
jmp 0x10023030
xor eax, eax
inc eax
je 0x10023124
mov eax, dword [ebp - 0x108]
xor ecx, ecx
sub ecx, dword [ebp - 0x108]
sub eax, ecx
je 0x10023084
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x920], 0
je 0x10023084
mov dword [ebp - 0x460], 1
jmp 0x1002308b
and dword [ebp - 0x460], 0
mov eax, dword [ebp - 0x108]
cmp eax, dword [ebp - 0x460]
jne 0x100230a5
mov dword [ebp - 0x560], 1
jmp 0x100230ac
and dword [ebp - 0x560], 0
cmp dword [ebp - 0x560], 0x986d
je 0x100230c4
mov dword [ebp - 0x468], 1
jmp 0x100230cb
and dword [ebp - 0x468], 0
cmp dword [ebp - 0x468], 1
je 0x100230ed
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x920], 0
jne 0x100230ed
and dword [ebp - 0x634], 0
jmp 0x100230f7
mov dword [ebp - 0x634], 1
mov eax, dword [ebp - 0x634]
mov dword [ebp - 0x470], eax
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x920]
cmp dword [ebp - 0x470], eax
jge 0x10023124
mov dword [ebp - 0x568], 1
jmp 0x1002312b
and dword [ebp - 0x568], 0
mov eax, dword [ebp - 0x108]
cmp dword [ebp - 0x568], eax
je 0x10023145
mov dword [ebp - 0x478], 1
jmp 0x1002314c
and dword [ebp - 0x478], 0
mov eax, dword [ebp - 0x478]
neg eax
cmp eax, dword [ebp - 0x108]
jg 0x10023168
mov dword [ebp - 0x5ec], 1
jmp 0x1002316f
and dword [ebp - 0x5ec], 0
mov eax, dword [ebp - 0x5ec]
mov dword [ebp - 0x480], eax
mov eax, dword [ebp - 0x480]
push 4
pop ecx
shl ecx, 0
sub eax, dword [ebp + ecx - 0x920]
neg eax
push 4
pop ecx
imul ecx, ecx, 0
imul eax, dword [ebp + ecx - 0xaa4]
push 4
pop ecx
shl ecx, 1
cmp eax, dword [ebp + ecx - 0xaa4]
jg 0x100231b8
mov dword [ebp - 0x570], 1
jmp 0x100231bf
and dword [ebp - 0x570], 0
cmp dword [ebp - 0x570], 0xf3004570
jae 0x100231d7
mov dword [ebp - 0x488], 1
jmp 0x100231de
and dword [ebp - 0x488], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x920]
cmp dword [ebp - 0x488], eax
jle 0x100231ff
mov dword [ebp - 0x584], 1
jmp 0x10023206
and dword [ebp - 0x584], 0
mov eax, dword [ebp - 0x584]
mov dword [ebp - 0x780], eax
mov byte [ebp - 0xd1], 0
movzx eax, byte [ebp - 0xd1]
test eax, eax
je 0x10023238
push 0x22e9
push 0
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetClassNameW]
mov dword [ebp - 0x1ac], 0
jmp 0x10023251
mov eax, dword [ebp - 0x1ac]
inc eax
mov dword [ebp - 0x1ac], eax
cmp dword [ebp - 0x1ac], 3
jge 0x1002326d
mov eax, dword [ebp - 0x1ac]
mov dword [ebp + eax*4 - 0x8cc], 0xfffffff6
jmp 0x10023244
mov eax, dword [ebp - 0x54]
cmp dword [ebp - 0x54], eax
jg 0x10023281
mov dword [ebp - 0x2e8], 1
jmp 0x10023288
and dword [ebp - 0x2e8], 0
mov eax, dword [ebp - 0xd8]
mov dword [ebp - 0x490], eax
push 0
lea ecx, [ebp - 0x8fc]
call fcn.10009b6a
mov ecx, dword [ebp - 0x490]
mov dword [eax], ecx
mov eax, dword [ebp - 0x490]
sub eax, dword [ebp - 0x54]
imul eax, dword [ebp - 0xe0]
cmp eax, 1
je 0x100232d3
cmp dword [ebp - 0xe0], 0
je 0x100232d3
mov dword [ebp - 0x578], 1
jmp 0x100232da
and dword [ebp - 0x578], 0
mov eax, dword [ebp - 0x578]
mov dword [ebp - 0x734], eax
mov dword [ebp - 0xd8], 0xffffffff
mov eax, dword [ebp - 0xd8]
add eax, dword [ebp - 0xe0]
mov dword [ebp - 0x498], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x498]
mov dword [ebp + eax - 0x8cc], ecx
mov eax, dword [ebp - 0x148]
imul eax, dword [ebp - 0x498]
cmp eax, dword [ebp - 0xe0]
je 0x10023336
mov dword [ebp - 0x580], 1
jmp 0x1002333d
and dword [ebp - 0x580], 0
mov eax, dword [ebp - 0xe0]
cmp dword [ebp - 0x580], eax
jle 0x10023357
mov dword [ebp - 0x4a0], 1
jmp 0x1002335e
and dword [ebp - 0x4a0], 0
mov eax, dword [ebp - 0xe0]
cmp dword [ebp - 0x4a0], eax
jg 0x10023378
mov dword [ebp - 0x2ec], 1
jmp 0x1002337f
and dword [ebp - 0x2ec], 0
mov eax, dword [ebp - 0x2e8]
cmp eax, dword [ebp - 0x2ec]
jl 0x10023399
mov dword [ebp - 0x2fc], 1
jmp 0x100233a0
and dword [ebp - 0x2fc], 0
mov eax, dword [ebp - 0x54]
mov dword [ebp - 0x2f4], eax
mov eax, dword [ebp - 0x2f4]
sub eax, dword [ebp - 0x2fc]
cmp dword [ebp - 0x54], eax
jne 0x100233c6
mov dword [ebp - 0x304], 1
jmp 0x100233cd
and dword [ebp - 0x304], 0
mov eax, dword [ebp - 0x304]
mov dword [ebp - 0x788], eax
push 4
lea ecx, [ebp - 0x850]
call fcn.10009afa
mov byte [ebp - 4], 0x11
mov dword [ebp - 0x314], 0xccd2466e
mov dword [ebp - 0x1e0], 0
jmp 0x1002340d
mov eax, dword [ebp - 0x1e0]
inc eax
mov dword [ebp - 0x1e0], eax
cmp dword [ebp - 0x1e0], 4
jge 0x1002342f
push dword [ebp - 0x1e0]
lea ecx, [ebp - 0x850]
call fcn.10009b6a
mov dword [eax], 0x4e064826
jmp 0x10023400
push 2
lea ecx, [ebp - 0x850]
call fcn.10009b6a
and dword [eax], 0
jmp 0x10023465
push 2
lea ecx, [ebp - 0x850]
call fcn.10009b6a
mov dword [ebp - 0x30c], eax
mov eax, dword [ebp - 0x30c]
mov eax, dword [eax]
inc eax
mov ecx, dword [ebp - 0x30c]
mov dword [ecx], eax
push 2
lea ecx, [ebp - 0x850]
call fcn.10009b6a
cmp dword [eax], 4
jg 0x10023753
push 3
lea ecx, [ebp - 0x670]
call fcn.10009afa
mov byte [ebp - 4], 0x12
mov dword [ebp - 0x120], 1
push 0x7af0
lea eax, [ebp - 0xa70]
push eax
lea eax, [ebp - 0x670]
push eax
push 0
push 0x1963
call fcn.100251f3
add esp, 0x14
mov dword [ebp - 0x120], 2
jmp 0x100234d1
mov eax, dword [ebp - 0x120]
dec eax
mov dword [ebp - 0x120], eax
cmp dword [ebp - 0x120], 0
jl 0x10023725
mov dword [ebp - 0x50], 0xdc9ed9ba
mov dword [ebp - 0x50], 2
jmp 0x100234f5
mov eax, dword [ebp - 0x50]
dec eax
mov dword [ebp - 0x50], eax
cmp dword [ebp - 0x50], 0
jl 0x10023720
mov dword [ebp - 0x1c0], 0xd9ee1c97
mov dword [ebp - 0x1b4], 0
jmp 0x10023522
mov eax, dword [ebp - 0x1b4]
inc eax
mov dword [ebp - 0x1b4], eax
cmp dword [ebp - 0x1b4], 3
jge 0x1002353e
mov eax, dword [ebp - 0x1b4]
mov dword [ebp + eax*4 - 0xb28], 0x2afd77cc
jmp 0x10023515
mov dword [ebp - 0x1c0], 0
jmp 0x10023557
cmp dword [ebp - 0x1c0], 2
jg 0x1002371b
mov dword [ebp - 0x4c], 0xffffffff
push 2
lea ecx, [ebp - 0x9d4]
call fcn.10009afa
mov byte [ebp - 4], 0x13
lea eax, [ebp - 0x9d4]
push eax
lea eax, [ebp - 0xad8]
push eax
push 0x5308
push 0
call fcn.10034c86
add esp, 0x10
mov dword [ebp - 0x4c], 2
jmp 0x100235a9
mov eax, dword [ebp - 0x4c]
dec eax
mov dword [ebp - 0x4c], eax
cmp dword [ebp - 0x4c], 0
jl 0x100235d6
push dword [ebp - 0x120]
lea ecx, [ebp - 0x670]
call fcn.10009b6a
mov esi, eax
push dword [ebp - 0x50]
lea ecx, [ebp - 0x670]
call fcn.10009b6a
mov ecx, dword [esi]
mov dword [eax], ecx
jmp 0x100235a2
mov dword [ebp - 0x4c], 0
jmp 0x100235e6
cmp dword [ebp - 0x4c], 2
jg 0x10023707
mov byte [ebp - 0xc9], 0
movzx eax, byte [ebp - 0xc9]
test eax, eax
je 0x10023625
mov byte [ebp - 4], 0x12
lea ecx, [ebp - 0x9d4]
call fcn.10009b5c
jmp 0x1002354a
jmp 0x100234ee
jmp 0x100234c4
mov byte [ebp - 0xae], 0
movzx eax, byte [ebp - 0xae]
test eax, eax
je 0x1002373f
push 0
call fcn.10033ce3
pop ecx
mov byte [ebp - 4], 0x11
lea ecx, [ebp - 0x670]
call fcn.10009b5c
jmp 0x10023441
mov byte [ebp - 0xce], 0
movzx eax, byte [ebp - 0xce]
test eax, eax
je 0x10023776
push 0x487f
push 0
push 0
call fcn.100388fe
add esp, 0xc
mov byte [ebp - 4], 6
lea ecx, [ebp - 0x850]
call fcn.10009b5c
mov dword [ebp - 0xd8], 0x594484f7
cmp dword [ebp - 0xd8], 0x5c2f4fe1
jl 0x100238ab
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x8cc]
mov dword [ebp - 0xa78], eax
cmp dword [ebp - 0x148], 0
jne 0x100237c7
mov dword [ebp - 0x33c], 1
jmp 0x100237ce
and dword [ebp - 0x33c], 0
mov eax, dword [ebp - 0x33c]
sub eax, 9
jne 0x100237e8
cmp dword [ebp - 0x54], 0
jne 0x100237e8
and dword [ebp - 0x2e4], 0
jmp 0x100237f2
mov dword [ebp - 0x2e4], 1
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x8cc]
add eax, dword [ebp - 0x2e4]
sub eax, dword [ebp - 0xd8]
cmp eax, dword [ebp - 0x148]
jle 0x1002381f
mov dword [ebp - 0x258], 1
jmp 0x10023826
and dword [ebp - 0x258], 0
push 0
lea ecx, [ebp - 0x8fc]
call fcn.10009b6a
mov ecx, dword [ebp - 0x258]
mov dword [eax], ecx
mov eax, dword [ebp - 0x258]
inc eax
cmp eax, dword [ebp - 0x148]
jne 0x10023856
mov dword [ebp - 0x290], 1
jmp 0x1002385d
and dword [ebp - 0x290], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x290]
mov dword [ebp + eax - 0x8cc], ecx
mov eax, dword [ebp - 0x364]
cmp dword [ebp - 0x290], eax
jle 0x1002388a
mov dword [ebp - 0x34c], 1
jmp 0x10023891
and dword [ebp - 0x34c], 0
mov eax, dword [ebp - 0x740]
cmp dword [ebp - 0x34c], eax
jle 0x100238ab
mov dword [ebp - 0x354], 1
jmp 0x100238b2
and dword [ebp - 0x354], 0
mov eax, dword [ebp - 0x148]
cmp eax, dword [ebp - 0x354]
jge 0x100238cc
mov dword [ebp - 0x35c], 1
jmp 0x100238d3
and dword [ebp - 0x35c], 0
mov eax, dword [ebp - 0x35c]
sub eax, dword [ebp - 0x364]
mov dword [ebp - 0x790], eax
jmp 0x100241cc
mov dword [ebp - 0x168], 0xdb3ae355
push 1
lea ecx, [ebp - 0xab8]
call fcn.10009afa
mov byte [ebp - 4], 0x14
mov dword [ebp - 0x164], 0
jmp 0x1002391e
mov eax, dword [ebp - 0x164]
inc eax
mov dword [ebp - 0x164], eax
cmp dword [ebp - 0x164], 1
jge 0x1002393d
push dword [ebp - 0x164]
lea ecx, [ebp - 0xab8]
call fcn.10009b6a
or dword [eax], 0xffffffff
jmp 0x10023911
mov dword [ebp - 0x168], 0xffffffea
jmp 0x10023956
mov eax, dword [ebp - 0x168]
inc eax
mov dword [ebp - 0x168], eax
cmp dword [ebp - 0x168], 0xd
jle 0x100239ce
mov dword [ebp - 0x170], 0x98311173
mov byte [ebp - 0xd0], 0
push 0x7d4e
push 0
push 0x4fe0
lea eax, [ebp - 0xd0]
push eax
call fcn.100263f6
add esp, 0x10
mov dword [ebp - 0x170], 0
jmp 0x100239a4
mov eax, dword [ebp - 0x170]
inc eax
mov dword [ebp - 0x170], eax
cmp dword [ebp - 0x170], 0
jg 0x100239c9
mov byte [ebp - 0xd2], 0
movzx eax, byte [ebp - 0xd2]
test eax, eax
je 0x100239c7
push 0
call fcn.10034c39
pop ecx
jmp 0x10023997
jmp 0x10023949
mov byte [ebp - 4], 6
lea ecx, [ebp - 0xab8]
call fcn.10009b5c
mov dword [ebp - 0xa00], 2
mov byte [ebp - 0xd4], 0
movzx eax, byte [ebp - 0xd4]
test eax, eax
je 0x10023a01
push 0
call fcn.10026fbf
pop ecx
mov byte [ebp - 0xcf], 0
movzx eax, byte [ebp - 0xcf]
test eax, eax
je 0x10023a27
push 0xf09
push 0x687e
push 0
call fcn.1003774c
add esp, 0xc
mov byte [ebp - 0xb5], 0
mov dword [ebp - 0x934], 0x928c176b
mov dword [ebp - 0x930], 0x928c176b
mov dword [ebp - 0x92c], 0x928c176b
mov dword [ebp - 0x928], 0x928c176b
lea ecx, [ebp - 0x269]
call fcn.10009bd3
push eax
lea eax, [ebp - 0x924]
push eax
lea eax, [ebp - 0x934]
push eax
lea ecx, [ebp - 0xb58]
call fcn.10009bd6
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0x860]
call fcn.10009b36
mov byte [ebp - 4], 0x15
push 2
lea ecx, [ebp - 0x2e0]
call fcn.10009afa
mov byte [ebp - 4], 0x16
mov dword [ebp - 0x128], 8
mov dword [ebp - 0x758], 0x6711db60
push 0
lea eax, [ebp - 0xa80]
push eax
push 0xfe4
lea eax, [ebp - 0x2e0]
push eax
push 0x76b2
call fcn.100261ea
add esp, 0x14
push 0
lea ecx, [ebp - 0x2e0]
call fcn.10009b6a
and dword [eax], 0
jmp 0x10023b0c
push 0
lea ecx, [ebp - 0x2e0]
call fcn.10009b6a
mov dword [ebp - 0x36c], eax
mov eax, dword [ebp - 0x36c]
mov eax, dword [eax]
inc eax
mov ecx, dword [ebp - 0x36c]
mov dword [ecx], eax
push 0
lea ecx, [ebp - 0x2e0]
call fcn.10009b6a
cmp dword [eax], 3
jg 0x10023b61
mov dword [ebp - 0x798], 0xc662a2b3
mov dword [ebp - 0x74c], 0xfffffffb
lea eax, [ebp - 0x74c]
push eax
lea eax, [ebp - 0x798]
push eax
lea eax, [ebp - 0x2e0]
push eax
push 1
push 0x1383
push 1
lea eax, [ebp - 0x860]
push eax
call fcn.1001f6c4
add esp, 0x1c
jmp 0x10023ae8
push 0
lea ecx, [ebp - 0x2e0]
call fcn.10009b6a
push 1
lea ecx, [ebp - 0x2e0]
call fcn.10009b6a
mov eax, dword [eax]
mov dword [ebp - 0x128], eax
mov eax, dword [ebp - 0x128]
mov dword [ebp - 0xadc], eax
push 0
lea ecx, [ebp - 0x2e0]
call fcn.10009b6a
cmp dword [eax], 0
je 0x10023bb6
cmp dword [ebp - 0x128], 0
je 0x10023bb6
mov dword [ebp - 0x374], 1
jmp 0x10023bbd
and dword [ebp - 0x374], 0
push 0
lea ecx, [ebp - 0x860]
call fcn.10009b6a
mov eax, dword [eax]
cmp eax, dword [ebp - 0x374]
jg 0x10023be0
mov dword [ebp - 0x37c], 1
jmp 0x10023be7
and dword [ebp - 0x37c], 0
push 3
lea ecx, [ebp - 0x860]
call fcn.10009b6a
mov ecx, dword [ebp - 0x37c]
cmp ecx, dword [eax]
jne 0x10023c0a
mov dword [ebp - 0x384], 1
jmp 0x10023c11
and dword [ebp - 0x384], 0
mov esi, dword [ebp - 0x128]
imul esi, dword [ebp - 0x384]
add esi, 9
push 0
lea ecx, [ebp - 0x2e0]
call fcn.10009b6a
sub esi, dword [eax]
cmp esi, dword [ebp - 0x128]
jge 0x10023c44
mov dword [ebp - 0x38c], 1
jmp 0x10023c4b
and dword [ebp - 0x38c], 0
push 2
lea ecx, [ebp - 0x860]
call fcn.10009b6a
mov ecx, dword [ebp - 0x38c]
cmp ecx, dword [eax]
jle 0x10023c6e
mov dword [ebp - 0x394], 1
jmp 0x10023c75
and dword [ebp - 0x394], 0
mov eax, dword [ebp - 0x394]
mov dword [ebp - 0x758], eax
mov byte [ebp - 4], 0x15
lea ecx, [ebp - 0x2e0]
call fcn.10009b5c
mov byte [ebp - 4], 6
lea ecx, [ebp - 0x860]
call fcn.10009b5c
movzx eax, byte [ebp - 0xb5]
test eax, eax
je 0x100241cc
mov dword [ebp - 0x7a0], 0x2439
cmp dword [ebp - 0x7a0], 0xe69
jge 0x10023da3
lea eax, [ebp - 0x260]
push eax
mov ecx, 0x10663c70
call fcn.1001bc37
mov eax, dword [ebp - 0x260]
mov dword [ebp - 0x764], eax
mov eax, dword [ebp - 0x260]
dec eax
mov dword [ebp - 0x260], eax
cmp dword [ebp - 0x764], 0
je 0x10023da3
lea eax, [ebp - 0x39c]
push eax
lea eax, [ebp - 0x2a8]
push eax
mov ecx, 0x10663c70
call fcn.1001bc37
mov ecx, eax
call fcn.1001bc37
mov eax, dword [ebp - 0x2a8]
cmp eax, dword [ebp - 0x39c]
je 0x10023d62
push fcn.1000d301
mov eax, dword [ebp - 0x2a8]
inc eax
cdq
sub eax, edx
mov ecx, eax
sar ecx, 1
mov eax, dword [ebp - 0x39c]
inc eax
cdq
sub eax, edx
sar eax, 1
imul ecx, eax
push ecx
mov ecx, 0x10663bb8
call fcn.10040b71
mov ecx, eax
call fcn.100099cf
jmp 0x10023d9e
mov eax, dword [ebp - 0x2a8]
inc eax
cdq
sub eax, edx
sar eax, 1
mov dword [ebp - 0x3a4], eax
push fcn.1000d301
mov eax, dword [ebp - 0x3a4]
inc eax
imul eax, dword [ebp - 0x3a4]
cdq
sub eax, edx
sar eax, 1
push eax
mov ecx, 0x10663bb8
call fcn.10040b71
mov ecx, eax
call fcn.100099cf
jmp 0x10023cd9
push 4
lea ecx, [ebp - 0x694]
call fcn.10009afa
mov byte [ebp - 4], 0x17
mov dword [ebp - 0x2c], 0xdba76aab
mov dword [ebp - 0xf0], 0xffffffff
mov dword [ebp - 0x7a8], 7
push 0x2da5
lea eax, [ebp - 0x694]
push eax
lea eax, [ebp - 0x140]
push eax
push 0x57da
push 0
call fcn.100267f7
add esp, 0x14
mov dword [ebp - 0x140], 0
jmp 0x10023e0a
mov eax, dword [ebp - 0x140]
inc eax
mov dword [ebp - 0x140], eax
cmp dword [ebp - 0x140], 1
jge 0x10023e26
mov eax, dword [ebp - 0x140]
mov dword [ebp + eax*4 - 0x270], 1
jmp 0x10023dfd
mov dword [ebp - 0x2c], 3
jmp 0x10023e36
mov eax, dword [ebp - 0x2c]
dec eax
mov dword [ebp - 0x2c], eax
cmp dword [ebp - 0x2c], 0
jl 0x100241a8
mov dword [ebp - 0x80], 8
push dword [ebp - 0x2c]
lea ecx, [ebp - 0x694]
call fcn.10009b6a
cmp dword [eax], 0
je 0x10023e5f
jmp 0x100241a8
mov dword [ebp - 0x80], 0
jmp 0x10023e6f
mov eax, dword [ebp - 0x80]
inc eax
mov dword [ebp - 0x80], eax
cmp dword [ebp - 0x80], 0xe
jle 0x100241a3
mov dword [ebp - 0x5c], 0xe3bc
mov dword [ebp - 0x268], 1
cmp dword [ebp - 0x2c], 0
jne 0x10023f9b
mov eax, dword [ebp - 0x5c]
add eax, dword [ebp - 0x5c]
jne 0x10023eae
cmp dword [ebp - 0x80], 0
je 0x10023eae
mov dword [ebp - 0x3ac], 1
jmp 0x10023eb5
and dword [ebp - 0x3ac], 0
mov eax, dword [ebp - 0x80]
imul eax, dword [ebp - 0x3ac]
imul eax, eax, 0xc352
mov dword [ebp - 0xf0], eax
mov eax, dword [ebp - 0xf0]
mov dword [ebp - 0x3b4], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x3b4]
mov dword [ebp + eax - 0x270], ecx
cmp dword [ebp - 0x3b4], 0xfffffffb
jne 0x10023eff
mov dword [ebp - 0x3bc], 1
jmp 0x10023f06
and dword [ebp - 0x3bc], 0
push dword [ebp - 0x2c]
lea ecx, [ebp - 0x694]
call fcn.10009b6a
mov ecx, dword [ebp - 0x3bc]
add ecx, dword [eax]
imul eax, ecx, 0xf1fc
cmp eax, dword [ebp - 0x5c]
je 0x10023f33
mov dword [ebp - 0x3c4], 1
jmp 0x10023f3a
and dword [ebp - 0x3c4], 0
mov eax, dword [ebp - 0x2c]
cmp dword [ebp - 0x3c4], eax
jg 0x10023f51
mov dword [ebp - 0x3cc], 1
jmp 0x10023f58
and dword [ebp - 0x3cc], 0
push dword [ebp - 0x2c]
lea ecx, [ebp - 0x694]
call fcn.10009b6a
mov ecx, dword [ebp - 0x3cc]
cmp ecx, dword [eax]
jle 0x10023f7c
mov dword [ebp - 0x3d4], 1
jmp 0x10023f83
and dword [ebp - 0x3d4], 0
mov eax, dword [ebp - 0x3d4]
add eax, 0xffff
neg eax
jne 0x10023f9b
and dword [ebp - 0x3dc], 0
jmp 0x10023fa5
mov dword [ebp - 0x3dc], 1
cmp dword [ebp - 0x3dc], 0x6d6092f6
jl 0x10023fbd
mov dword [ebp - 0x3e4], 1
jmp 0x10023fc4
and dword [ebp - 0x3e4], 0
mov eax, dword [ebp - 0x5c]
cmp dword [ebp - 0x3e4], eax
jg 0x10023fdb
mov dword [ebp - 0x3ec], 1
jmp 0x10023fe2
and dword [ebp - 0x3ec], 0
mov eax, dword [ebp - 0x3ec]
neg eax
add eax, 0x53bf
je 0x10024045
cmp dword [ebp - 0x2c], 0
je 0x10024045
mov dword [ebp - 0xf0], 0xfffffff9
jmp 0x10024010
mov eax, dword [ebp - 0xf0]
dec eax
mov dword [ebp - 0xf0], eax
cmp dword [ebp - 0xf0], 0xfffffff3
jg 0x10024040
cmp dword [ebp - 0x80], 1
jne 0x1002402b
mov dword [ebp - 0x3f4], 1
jmp 0x10024032
and dword [ebp - 0x3f4], 0
mov eax, dword [ebp - 0x3f4]
mov dword [ebp - 0x268], eax
jmp 0x10024003
jmp 0x1002419e
mov dword [ebp - 0x298], 0xacefce0
mov dword [ebp - 0x5c], 0xf
jmp 0x1002405f
mov eax, dword [ebp - 0x5c]
dec eax
mov dword [ebp - 0x5c], eax
cmp dword [ebp - 0x5c], 5
jge 0x100240ab
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x270], 0
je 0x10024077
jmp 0x100240ab
push 0xe7e
push 0x5d73
push 1
push 0
push 0
push 0x2ba3
lea eax, [ebp - 0x5c]
push eax
push 0x2914
push 0xea6
lea eax, [ebp - 0x268]
push eax
call fcn.10034cb7
add esp, 0x28
jmp 0x10024058
cmp dword [ebp - 0x268], 0
jne 0x10024181
cmp dword [ebp - 0x80], 0xfffffffd
jg 0x100240ca
mov dword [ebp - 0x3fc], 1
jmp 0x100240d1
and dword [ebp - 0x3fc], 0
mov eax, dword [ebp - 0x7a8]
mov dword [ebp - 0xa88], eax
push 9
pop eax
test eax, eax
je 0x100240f9
mov eax, 0x3245
test eax, eax
je 0x100240f9
mov dword [ebp - 0x404], 1
jmp 0x10024100
and dword [ebp - 0x404], 0
mov eax, dword [ebp - 0x3fc]
cmp eax, dword [ebp - 0x404]
jge 0x1002411a
mov dword [ebp - 0x770], 1
jmp 0x10024121
and dword [ebp - 0x770], 0
mov eax, dword [ebp - 0x298]
mov dword [ebp - 0xa04], eax
push dword [ebp - 0x2c]
lea ecx, [ebp - 0x694]
call fcn.10009b6a
push 2
lea ecx, [ebp - 0x694]
call fcn.10009b6a
cmp dword [eax], 0xfff6
je 0x1002415c
mov dword [ebp - 0x7b0], 1
jmp 0x10024163
and dword [ebp - 0x7b0], 0
mov eax, dword [ebp - 0x298]
mov dword [ebp - 0xa0c], eax
cmp dword [ebp - 0x298], 0
jne 0x10024181
and dword [ebp - 0x40c], 0
jmp 0x1002418b
mov dword [ebp - 0x40c], 1
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x40c]
mov dword [ebp + eax - 0x270], ecx
jmp 0x10023e68
jmp 0x10023e2f
mov byte [ebp - 4], 6
lea ecx, [ebp - 0x694]
call fcn.10009b5c
push 0
push 0x23b
push 0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringW]
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x8fc]
call fcn.10009b5c
mov dword [ebp - 0x424], 1
mov dword [ebp - 0x434], 0
mov dword [ebp - 0x41c], 0x336de018
mov dword [ebp - 0x42c], 0x5bfb66fe
mov dword [ebp - 0x7b8], 1
push 2
lea ecx, [ebp - 0x9b0]
call fcn.10009afa
mov dword [ebp - 4], 0x18
push 0
lea eax, [ebp - 0xa14]
push eax
lea eax, [ebp - 0x9b0]
push eax
push 0x76a2
call fcn.10026e9f
add esp, 0x10
lea eax, [ebp - 0x41c]
push eax
lea eax, [ebp - 0x424]
push eax
push 0
lea eax, [ebp - 0x42c]
push eax
lea eax, [ebp - 0x434]
push eax
call fcn.100264ad
add esp, 0x14
mov dword [ebp - 0x77c], 0x1a78
cmp dword [ebp - 0x77c], 0x1172
jge 0x100243d6
lea eax, [ebp - 0x180]
push eax
push 0x100078ec
call fcn.10057e4b
pop ecx
pop ecx
push dword [ebp - 0x180]
lea ecx, [ebp - 0x8b4]
call fcn.10009afa
mov byte [ebp - 4], 0x19
and dword [ebp - 0x178], 0
jmp 0x100242bc
mov eax, dword [ebp - 0x178]
inc eax
mov dword [ebp - 0x178], eax
mov eax, dword [ebp - 0x178]
cmp eax, dword [ebp - 0x180]
jge 0x100242ea
push dword [ebp - 0x178]
lea ecx, [ebp - 0x8b4]
call fcn.10009b6a
push eax
push 0x100078ec
call fcn.10057e4b
pop ecx
pop ecx
jmp 0x100242af
and dword [ebp - 0x190], 0
and dword [ebp - 0x130], 0
jmp 0x10024307
mov eax, dword [ebp - 0x130]
inc eax
mov dword [ebp - 0x130], eax
mov eax, dword [ebp - 0x130]
cmp eax, dword [ebp - 0x180]
jge 0x10024399
mov eax, dword [ebp - 0x130]
inc eax
mov dword [ebp - 0x188], eax
jmp 0x10024335
mov eax, dword [ebp - 0x188]
cmp eax, dword [ebp - 0x180]
jge 0x10024394
push dword [ebp - 0x130]
lea ecx, [ebp - 0x8b4]
call fcn.10009b6a
mov esi, eax
push dword [ebp - 0x188]
lea ecx, [ebp - 0x8b4]
call fcn.10009b6a
mov ecx, dword [esi]
cmp ecx, dword [eax]
jle 0x10024379
mov dword [ebp - 0x414], 1
jmp 0x10024380
and dword [ebp - 0x414], 0
mov eax, dword [ebp - 0x190]
add eax, dword [ebp - 0x414]
mov dword [ebp - 0x190], eax
jmp 0x10024328
jmp 0x100242fa
mov eax, dword [ebp - 0x190]
cdq
sub eax, edx
sar eax, 1
mov ecx, dword [ebp - 0x190]
and ecx, 0x80000001
jns 0x100243b7
dec ecx
or ecx, 0xfffffffe
inc ecx
lea eax, [ecx + eax*4]
push eax
push 0x100078f8
call fcn.10058066
pop ecx
pop ecx
mov byte [ebp - 4], 0x18
lea ecx, [ebp - 0x8b4]
call fcn.1000a086
lea eax, [ebp - 0x41c]
push eax
push 0x7767
lea eax, [ebp - 0x424]
push eax
push 0
lea eax, [ebp - 0x9b0]
push eax
lea eax, [ebp - 0x42c]
push eax
push 0x258b
push 0x6388
push 0
push 0x7590
push 0x7b75
lea eax, [ebp - 0x7b8]
push eax
push 0x5fa
lea eax, [ebp - 0x434]
push eax
push 0x3772
call fcn.10038e50
add esp, 0x3c
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x9b0]
call fcn.10009b5c
push 4
push 0x1000
push dword [ebp - 0x24c]
mov eax, dword [ebp - 0x574]
mov ecx, dword [ebp - 0x7c0]
add ecx, dword [eax + 0xc]
push ecx
push 0x9f1f
push 0x9a94
call fcn.100146f5
pop ecx
pop ecx
call eax
mov ecx, dword [ebp - 0x254]
mov dword [ecx], eax
mov dword [ebp - 0x40], 0xf46d
mov dword [ebp - 0x1a0], 0
mov dword [ebp - 0x1b0], 0xffffffff
mov dword [ebp - 0x1a8], 0x9523dd97
mov dword [ebp - 0x198], 0
jmp 0x100244b4
mov eax, dword [ebp - 0x198]
inc eax
mov dword [ebp - 0x198], eax
cmp dword [ebp - 0x198], 2
jge 0x100244d0
mov eax, dword [ebp - 0x198]
mov dword [ebp + eax*4 - 0xa3c], 0x1b32e265
jmp 0x100244a7
cmp dword [ebp - 0x40], 0
jne 0x10024610
mov eax, dword [ebp - 0x40]
mov dword [ebp - 0xa1c], eax
cmp dword [ebp - 0x40], 0xfff9
jne 0x100244fb
cmp dword [ebp - 0x40], 0
jne 0x100244fb
and dword [ebp - 0x43c], 0
jmp 0x10024505
mov dword [ebp - 0x43c], 1
mov eax, dword [ebp - 0x40]
cmp dword [ebp - 0x43c], eax
jle 0x1002451c
mov dword [ebp - 0x444], 1
jmp 0x10024523
and dword [ebp - 0x444], 0
cmp dword [ebp - 0x444], 0
jae 0x10024538
mov dword [ebp - 0x44c], 1
jmp 0x1002453f
and dword [ebp - 0x44c], 0
imul eax, dword [ebp - 0x44c], 0xf3d4
neg eax
cmp eax, dword [ebp - 0x40]
jle 0x1002455c
mov dword [ebp - 0x814], 1
jmp 0x10024563
and dword [ebp - 0x814], 0
mov eax, dword [ebp - 0x40]
mov dword [ebp - 0x1a0], eax
mov eax, dword [ebp - 0x1a0]
mov dword [ebp - 0xa24], eax
cmp dword [ebp - 0x40], 1
jne 0x1002458a
mov dword [ebp - 0x45c], 1
mov eax, dword [ebp - 0x40]
mov ecx, dword [ebp - 0x1a8]
imul ecx, dword [ebp - 0x45c]
add eax, ecx
je 0x10024775
mov dword [ebp - 0x230], 0x55a61940
mov dword [ebp - 0x278], 0x7ea82bc9
mov eax, dword [ebp - 0x1a8]
cmp dword [ebp - 0x278], eax
jg 0x10024666
mov eax, 0xb19d
test eax, eax
jne 0x10024666
and dword [ebp - 0x464], 0
jmp 0x10024670
mov dword [ebp - 0x464], 1
mov eax, dword [ebp - 0x1a0]
cmp dword [ebp - 0x464], eax
jne 0x1002468a
mov dword [ebp - 0x46c], 1
jmp 0x10024691
and dword [ebp - 0x46c], 0
cmp dword [ebp - 0x46c], 0x1359
jg 0x100246a9
mov dword [ebp - 0x474], 1
jmp 0x100246b0
and dword [ebp - 0x474], 0
cmp dword [ebp - 0x474], 0x32f
jg 0x100246c8
mov byte [ebp - 0xcb], 0
movzx eax, byte [ebp - 0xcb]
test eax, eax
je 0x1002479b
push 0
push 0x3563
push 0x6bd0
call fcn.10025aa8
add esp, 0xc
mov byte [ebp - 0xbd], 0
movzx eax, byte [ebp - 0xbd]
test eax, eax
je 0x100247c1
push 0x59b8
push 0
push 0x2b2
call fcn.1003922a
add esp, 0xc
mov dword [ebp - 0x524], 1
mov dword [ebp - 0x1b8], 0xfffffffb
mov dword [ebp - 0x4a4], 6
mov dword [ebp - 0x78c], 0xf3c34eea
mov dword [ebp - 0x1b8], 0
jmp 0x10024802
cmp dword [ebp - 0x1b8], 0x12
jge 0x10024818
jmp 0x100251e4
push 0
call fcn.10026fbf
pop ecx
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop esi
mov esp, ebp
pop ebp
ret