Function at 0x1001b876
Capabilities:
Accept command line arguments
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x1007a387
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0xe2c
mov dword [ebp - 0x168], 0x5d6c05ba
mov dword [ebp - 0xb6c], 0xfffffff7
mov dword [ebp - 0xb88], 0xd7f19125
mov dword [ebp - 0x260], 0
jmp 0x1001b8cb
mov eax, dword [ebp - 0x260]
inc eax
mov dword [ebp - 0x260], eax
cmp dword [ebp - 0x260], 3
jge 0x1001b8e7
mov eax, dword [ebp - 0x260]
mov dword [ebp + eax*4 - 0xdf8], 0x79d
jmp 0x1001b8be
mov dword [ebp - 0x168], 0
jmp 0x1001b900
mov eax, dword [ebp - 0x168]
inc eax
mov dword [ebp - 0x168], eax
cmp dword [ebp - 0x168], 0xa
je 0x1001bad4
mov dword [ebp - 0xb90], 0x249aaed6
mov dword [ebp - 0xb98], 0
mov dword [ebp - 0xba0], 0xffffffff
mov dword [ebp - 0x8b8], 1
mov dword [ebp - 0x268], 0
jmp 0x1001b94e
mov eax, dword [ebp - 0x268]
inc eax
mov dword [ebp - 0x268], eax
cmp dword [ebp - 0x268], 1
jge 0x1001b96a
mov eax, dword [ebp - 0x268]
mov dword [ebp + eax*4 - 0x270], 0xeede0b40
jmp 0x1001b941
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0x270], 5
jmp 0x1001b998
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x270]
inc eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x270], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x270], 0xc
jge 0x1001bacf
mov dword [ebp - 0x234], 0xfffffff7
mov dword [ebp - 0x974], 0x7d7c1188
mov dword [ebp - 0xba8], 0xffffffff
mov dword [ebp - 0x2f4], 0x7b5cf1c9
mov dword [ebp - 0x234], 0
jmp 0x1001b9ed
mov eax, dword [ebp - 0x234]
inc eax
mov dword [ebp - 0x234], eax
cmp dword [ebp - 0x234], 0xa
jl 0x1001baca
mov dword [ebp - 0xbb0], 0x3ab1943c
mov dword [ebp - 0xbb8], 0x6d210ec3
mov dword [ebp - 0xbc0], 0x52568108
mov dword [ebp - 0x97c], 0
mov eax, dword [ebp - 0x2f4]
dec eax
mov dword [ebp - 0x2f4], eax
cmp dword [ebp - 0x2f4], 1
jle 0x1001ba44
mov dword [ebp - 0x46c], 1
jmp 0x1001ba4b
and dword [ebp - 0x46c], 0
mov eax, dword [ebp - 0x8b8]
cmp dword [ebp - 0x46c], eax
jg 0x1001ba65
mov dword [ebp - 0x804], 1
jmp 0x1001ba6c
and dword [ebp - 0x804], 0
mov eax, dword [ebp - 0x804]
neg eax
cmp eax, 4
jne 0x1001ba85
mov dword [ebp - 0x96c], 1
jmp 0x1001ba8c
and dword [ebp - 0x96c], 0
mov eax, dword [ebp - 0x974]
mov dword [ebp - 0xbc8], eax
mov eax, dword [ebp - 0x168]
inc eax
cmp eax, 0x7967
jl 0x1001bab2
mov dword [ebp - 0x80c], 1
jmp 0x1001bab9
and dword [ebp - 0x80c], 0
mov eax, dword [ebp - 0x80c]
mov dword [ebp - 0x97c], eax
jmp 0x1001b9e0
jmp 0x1001b97d
jmp 0x1001b8f3
mov dword [ebp - 0x5c], 0xa7c2
mov dword [ebp - 0x24c], 0xfffffff6
mov dword [ebp - 0x814], 0x7ddbf4d
mov dword [ebp - 0x994], 0x3b06d9e9
mov dword [ebp - 0x78], 0
jmp 0x1001bb09
mov eax, dword [ebp - 0x78]
inc eax
mov dword [ebp - 0x78], eax
cmp dword [ebp - 0x78], 4
jge 0x1001bb1f
mov eax, dword [ebp - 0x78]
mov dword [ebp + eax*4 - 0xdc4], 0
jmp 0x1001bb02
mov dword [ebp - 0x78], 0
jmp 0x1001bb2f
mov eax, dword [ebp - 0x78]
inc eax
mov dword [ebp - 0x78], eax
cmp dword [ebp - 0x78], 3
jge 0x1001bb45
mov eax, dword [ebp - 0x78]
mov dword [ebp + eax*4 - 0xd74], 0x8169c147
jmp 0x1001bb28
xor eax, eax
jne 0x1001bb59
mov eax, dword [ebp - 0x5c]
mov dword [ebp - 0x24c], eax
cmp dword [ebp - 0x24c], 0
mov eax, dword [ebp - 0x5c]
mov dword [ebp - 0xbd0], eax
cmp dword [ebp - 0x5c], 0xc9b996a5
jae 0x1001bb77
mov dword [ebp - 0x984], 1
jmp 0x1001bb7e
and dword [ebp - 0x984], 0
mov eax, dword [ebp - 0x5c]
mov dword [ebp - 0xbd8], eax
mov eax, dword [ebp - 0x5c]
mov dword [ebp - 0xc48], eax
mov eax, dword [ebp - 0x5c]
mov dword [ebp - 0x814], eax
mov eax, dword [ebp - 0x5c]
cmp dword [ebp - 0x814], eax
jle 0x1001bbb0
mov dword [ebp - 0x98c], 1
jmp 0x1001bbb7
and dword [ebp - 0x98c], 0
cmp dword [ebp - 0x5c], 0x5daa
jl 0x1001bbcd
xor eax, eax
jne 0x1001bbcd
and dword [ebp - 0x324], 0
jmp 0x1001bbd7
mov dword [ebp - 0x324], 1
mov eax, dword [ebp - 0x5c]
mov dword [ebp - 0x24c], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x324]
mov dword [ebp + eax - 0xdc4], ecx
mov eax, dword [ebp - 0x24c]
cmp eax, dword [ebp - 0x324]
jge 0x1001bc0d
mov dword [ebp - 0x81c], 1
jmp 0x1001bc14
and dword [ebp - 0x81c], 0
cmp dword [ebp - 0x81c], 0xfffffffa
jg 0x1001bc29
mov dword [ebp - 0x824], 1
jmp 0x1001bc30
and dword [ebp - 0x824], 0
mov eax, dword [ebp - 0x824]
sub eax, dword [ebp - 0x5c]
cmp eax, 0x26b5
jne 0x1001bc4c
mov dword [ebp - 0x82c], 1
jmp 0x1001bc53
and dword [ebp - 0x82c], 0
mov eax, dword [ebp - 0x5c]
imul eax, dword [ebp - 0x82c]
cmp eax, dword [ebp - 0x5c]
jl 0x1001bc6e
mov dword [ebp - 0x840], 1
jmp 0x1001bc75
and dword [ebp - 0x840], 0
mov eax, dword [ebp - 0x5c]
cmp dword [ebp - 0x840], eax
jl 0x1001bc8c
mov dword [ebp - 0x32c], 1
jmp 0x1001bc93
and dword [ebp - 0x32c], 0
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x32c]
mov dword [ebp + eax - 0xd74], ecx
mov eax, dword [ebp - 0x32c]
mov dword [ebp - 0x994], eax
mov byte [ebp - 0x10a], 0
push 0x1501
lea eax, [ebp - 0x10a]
push eax
push 1
call fcn.1001b23c
add esp, 0xc
mov eax, dword [0x10cb554c]
and eax, 1
jne 0x1001bd03
mov eax, dword [0x10cb554c]
or eax, 1
mov dword [0x10cb554c], eax
and dword [ebp - 4], 0
mov ecx, 0x10cb54e0
call fcn.100169b8
push 0x1007b07e
call fcn.10062c26
pop ecx
or dword [ebp - 4], 0xffffffff
push dword [ebp + 8]
lea ecx, [ebp - 0xabc]
call fcn.10016680
mov dword [ebp - 4], 1
mov dword [ebp - 0x14], 0xfffffffd
mov dword [ebp - 0x18], 0xb1891f78
mov dword [ebp - 0xa18], 3
mov dword [ebp - 0x1a8], 0
jmp 0x1001bd49
mov eax, dword [ebp - 0x1a8]
inc eax
mov dword [ebp - 0x1a8], eax
cmp dword [ebp - 0x1a8], 2
jge 0x1001bd65
mov eax, dword [ebp - 0x1a8]
mov dword [ebp + eax*4 - 0x114], 0xfffffffd
jmp 0x1001bd3c
mov eax, dword [ebp - 0x14]
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 0xffffffff
jge 0x1001bd7d
mov dword [ebp - 0x848], 1
jmp 0x1001bd84
and dword [ebp - 0x848], 0
mov eax, dword [ebp - 0x14]
imul eax, dword [ebp - 0x14]
test eax, eax
je 0x1001bda4
mov eax, 0xfff7
test eax, eax
je 0x1001bda4
mov dword [ebp - 0x334], 1
jmp 0x1001bdab
and dword [ebp - 0x334], 0
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x334]
mov dword [ebp + eax - 0x114], ecx
mov eax, dword [ebp - 0x14]
imul eax, dword [ebp - 0x334]
cmp eax, 0x7110
jge 0x1001bde8
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x114], 0
jne 0x1001bde8
and dword [ebp - 0x99c], 0
jmp 0x1001bdf2
mov dword [ebp - 0x99c], 1
mov eax, dword [ebp - 0x14]
mov dword [ebp - 0xc50], eax
mov eax, dword [ebp - 0x14]
mov dword [ebp - 0xc58], eax
cmp dword [ebp - 0x14], 0
jbe 0x1001be16
mov dword [ebp - 0x874], 1
jmp 0x1001be1d
and dword [ebp - 0x874], 0
mov eax, dword [ebp - 0x848]
cmp eax, dword [ebp - 0x874]
jge 0x1001bf32
mov dword [ebp - 0x9c], 0xffffffff
mov dword [ebp - 0x9f4], 0x9c1c73b0
xor eax, eax
inc eax
je 0x1001be5a
cmp dword [ebp - 0x18], 0
je 0x1001be5a
mov dword [ebp - 0x9e4], 1
jmp 0x1001be61
and dword [ebp - 0x9e4], 0
mov eax, dword [ebp - 0x9c]
mov dword [ebp - 0xc60], eax
mov eax, dword [ebp - 0x14]
cmp dword [ebp - 0x9c], eax
jne 0x1001be8a
cmp dword [ebp - 0x9c], 0
jne 0x1001be8a
and dword [ebp - 0x870], 0
jmp 0x1001be94
mov dword [ebp - 0x870], 1
cmp dword [ebp - 0x870], 0x981c5860
jae 0x1001beac
mov dword [ebp - 0x9ec], 1
jmp 0x1001beb3
and dword [ebp - 0x9ec], 0
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0xc68], eax
mov eax, dword [ebp - 0x9c]
mov ecx, dword [ebp - 0x9c]
imul ecx, dword [ebp - 0x9c]
sub eax, ecx
cmp eax, dword [ebp - 0x9c]
jle 0x1001bee5
mov dword [ebp - 0x418], 1
jmp 0x1001beec
and dword [ebp - 0x418], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x114]
mov ecx, dword [ebp - 0x9c]
add ecx, dword [ebp - 0x418]
sub eax, ecx
cmp eax, 0x477a
je 0x1001bf1a
mov dword [ebp - 0x398], 1
jmp 0x1001bf21
and dword [ebp - 0x398], 0
mov eax, dword [ebp - 0x398]
mov dword [ebp - 0x9f4], eax
jmp 0x1001c2a4
mov dword [ebp - 0x3a8], 0
mov dword [ebp - 0x3c8], 0xffffffff
mov dword [ebp - 0x79c], 0x5a33b115
mov dword [ebp - 0x238], 0
jmp 0x1001bf69
mov eax, dword [ebp - 0x238]
inc eax
mov dword [ebp - 0x238], eax
cmp dword [ebp - 0x238], 2
jge 0x1001bf85
mov eax, dword [ebp - 0x238]
mov dword [ebp + eax*4 - 0xa5c], 7
jmp 0x1001bf5c
mov dword [ebp - 0x14], 0
jmp 0x1001bf95
mov eax, dword [ebp - 0x14]
inc eax
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 0x19
jg 0x1001bfef
mov dword [ebp - 0x18], 0
jmp 0x1001bfab
mov eax, dword [ebp - 0x18]
dec eax
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 0xffffffe9
jge 0x1001bfcd
mov dword [ebp - 0x9fc], 0xfffffff9
push 0
lea eax, [ebp - 0x9fc]
push eax
call fcn.1001b5ce
pop ecx
pop ecx
jmp 0x1001bfa4
mov byte [ebp - 0xc9], 0
movzx eax, byte [ebp - 0xc9]
test eax, eax
je 0x1001bfed
push 0
push 0x1c8f
call fcn.1001b513
pop ecx
pop ecx
jmp 0x1001bf8e
mov dword [ebp - 0x18], 0x14
jmp 0x1001bfff
mov eax, dword [ebp - 0x18]
dec eax
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 0xd
jle 0x1001c2a4
mov dword [ebp - 0x888], 0xfffffffa
mov dword [ebp - 0x884], 0xfffffffa
mov dword [ebp - 0x880], 0xfffffffa
mov dword [ebp - 0x87c], 0xfffffffa
mov dword [ebp - 0x14], 0xfffffff1
jmp 0x1001c041
mov eax, dword [ebp - 0x14]
inc eax
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 0x16
je 0x1001c1f7
mov dword [ebp - 0x3b0], 0x9275a805
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x888]
mov dword [ebp - 0xcb4], eax
mov eax, dword [ebp - 0x3a8]
mov dword [ebp - 0xcbc], eax
cmp dword [ebp - 0x3b0], 0
jne 0x1001c08b
cmp dword [ebp - 0x18], 0
jne 0x1001c08b
and dword [ebp - 0x77c], 0
jmp 0x1001c095
mov dword [ebp - 0x77c], 1
cmp dword [ebp - 0x77c], 1
je 0x1001c0aa
mov dword [ebp - 0x3a0], 1
jmp 0x1001c0b1
and dword [ebp - 0x3a0], 0
cmp dword [ebp - 0x3a0], 0xa10b
jge 0x1001c0c9
mov dword [ebp - 0x784], 1
jmp 0x1001c0d0
and dword [ebp - 0x784], 0
mov eax, dword [ebp - 0x784]
sub eax, dword [ebp - 0x3a8]
push 4
pop ecx
shl ecx, 0
mov dword [ebp + ecx - 0x114], eax
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x114]
mov dword [ebp - 0xcc4], eax
xor eax, eax
jne 0x1001c119
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x888], 0
jne 0x1001c119
and dword [ebp - 0x78c], 0
jmp 0x1001c123
mov dword [ebp - 0x78c], 1
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x888]
imul eax, dword [ebp - 0x78c]
cmp eax, 0xfffffff9
jg 0x1001c150
mov eax, 0x3e25
test eax, eax
je 0x1001c150
mov dword [ebp - 0x794], 1
jmp 0x1001c157
and dword [ebp - 0x794], 0
mov eax, dword [ebp - 0x3b0]
cmp dword [ebp - 0x794], eax
jge 0x1001c171
mov dword [ebp - 0x3b8], 1
jmp 0x1001c178
and dword [ebp - 0x3b8], 0
mov eax, dword [ebp - 0x3b8]
mov dword [ebp - 0x79c], eax
or eax, 0xffffffff
sub eax, dword [ebp - 0x79c]
push 4
pop ecx
shl ecx, 0
cmp eax, dword [ebp + ecx - 0x114]
jle 0x1001c1a8
mov dword [ebp - 0x3c0], 1
jmp 0x1001c1af
and dword [ebp - 0x3c0], 0
mov eax, dword [ebp - 0x3c8]
cmp eax, dword [ebp - 0x3c0]
jl 0x1001c1c9
mov dword [ebp - 0x7a4], 1
jmp 0x1001c1d0
and dword [ebp - 0x7a4], 0
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x888]
imul ecx, dword [ebp - 0x7a4], 0
sub eax, ecx
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0xa5c], eax
jmp 0x1001c03a
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x888]
mov dword [ebp - 0xccc], eax
mov eax, dword [ebp - 0x14]
cmp dword [ebp - 0x3c8], eax
jle 0x1001c221
mov dword [ebp - 0x7ac], 1
jmp 0x1001c228
and dword [ebp - 0x7ac], 0
push 4
pop eax
imul eax, eax, 3
mov eax, dword [ebp + eax - 0x888]
push 4
pop ecx
shl ecx, 1
imul eax, dword [ebp + ecx - 0x888]
sub eax, dword [ebp - 0x18]
push 4
pop ecx
imul ecx, ecx, 0
cmp eax, dword [ebp + ecx - 0xa5c]
jne 0x1001c260
mov dword [ebp - 0x3d0], 1
jmp 0x1001c267
and dword [ebp - 0x3d0], 0
mov eax, dword [ebp - 0x18]
imul eax, dword [ebp - 0x7ac]
cmp eax, dword [ebp - 0x3d0]
je 0x1001c285
mov dword [ebp - 0x7b4], 1
jmp 0x1001c28c
and dword [ebp - 0x7b4], 0
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x7b4]
mov dword [ebp + eax - 0x114], ecx
jmp 0x1001bff8
mov dword [ebp - 0x14], 0
jmp 0x1001c2b4
mov eax, dword [ebp - 0x14]
inc eax
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 1
jg 0x1001c494
mov dword [ebp - 0x1b0], 0x8ae6fb37
mov dword [ebp - 0x18], 1
jmp 0x1001c2d8
mov eax, dword [ebp - 0x18]
dec eax
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 0
jl 0x1001c48f
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp + eax*4 - 0x114]
mov dword [ebp - 0x3d8], eax
mov eax, dword [ebp - 0x14]
mov ecx, dword [ebp - 0x3d8]
mov dword [ebp + eax*4 - 0x114], ecx
cmp dword [ebp - 0x3d8], 0
jne 0x1001c434
mov eax, dword [ebp - 0x18]
cmp dword [ebp + eax*4 - 0x114], 0
je 0x1001c331
mov eax, 0x82d8
test eax, eax
je 0x1001c331
mov dword [ebp - 0x7bc], 1
jmp 0x1001c338
and dword [ebp - 0x7bc], 0
mov eax, dword [ebp - 0x1b0]
cmp eax, dword [ebp - 0x7bc]
jle 0x1001c352
mov dword [ebp - 0x3e0], 1
jmp 0x1001c359
and dword [ebp - 0x3e0], 0
cmp dword [ebp - 0x3e0], 0
jne 0x1001c378
mov eax, dword [ebp - 0x14]
cmp dword [ebp + eax*4 - 0x114], 0
jne 0x1001c378
and dword [ebp - 0x7c4], 0
jmp 0x1001c382
mov dword [ebp - 0x7c4], 1
mov eax, dword [ebp - 0x1b0]
cmp dword [ebp - 0x7c4], eax
jle 0x1001c3a9
mov eax, dword [ebp - 0x14]
cmp dword [ebp + eax*4 - 0x114], 0
je 0x1001c3a9
mov dword [ebp - 0x3e8], 1
jmp 0x1001c3b0
and dword [ebp - 0x3e8], 0
imul eax, dword [ebp - 0x3e8], 0x74b6
cmp eax, dword [ebp - 0x18]
jg 0x1001c3cb
mov dword [ebp - 0x7cc], 1
jmp 0x1001c3d2
and dword [ebp - 0x7cc], 0
mov eax, dword [ebp - 0x1b0]
cmp dword [ebp - 0x7cc], eax
jne 0x1001c3ec
mov dword [ebp - 0x3f0], 1
jmp 0x1001c3f3
and dword [ebp - 0x3f0], 0
cmp dword [ebp - 0x3f0], 0x2fb0
je 0x1001c40b
mov dword [ebp - 0xa10], 1
jmp 0x1001c412
and dword [ebp - 0xa10], 0
mov eax, dword [ebp - 0x14]
push 4
pop ecx
shl ecx, 0
mov ecx, dword [ebp + ecx - 0x114]
cmp dword [ebp + eax*4 - 0x114], ecx
jle 0x1001c434
and dword [ebp - 0x7d4], 0
jmp 0x1001c43e
mov dword [ebp - 0x7d4], 1
cmp dword [ebp - 0x7d4], 0xffff
jbe 0x1001c456
mov dword [ebp - 0x3f8], 1
jmp 0x1001c45d
and dword [ebp - 0x3f8], 0
mov eax, dword [ebp - 0x1b0]
cmp dword [ebp - 0x3f8], eax
jle 0x1001c477
mov dword [ebp - 0x7dc], 1
jmp 0x1001c47e
and dword [ebp - 0x7dc], 0
mov eax, dword [ebp - 0x7dc]
mov dword [ebp - 0xa18], eax
jmp 0x1001c2d1
jmp 0x1001c2ad
lea eax, [ebp - 0xcd4]
push eax
lea ecx, [ebp - 0xabc]
call fcn.10016dc6
push dword [eax]
lea eax, [ebp - 0xcdc]
push eax
lea ecx, [ebp - 0xabc]
call fcn.10016dda
push dword [eax]
lea eax, [ebp - 0xce4]
push eax
lea ecx, [ebp - 0xabc]
call fcn.10016dc6
push dword [eax]
mov edx, 0x10018515
lea ecx, [ebp - 0xcec]
call fcn.10023c4f
add esp, 0xc
lea ecx, [ebp - 0xabc]
call fcn.100184a0
mov dword [ebp - 0x704], eax
mov dword [ebp - 0x10], 0xffffffff
mov dword [ebp - 0x8a4], 1
mov dword [ebp - 0x8a0], 1
mov dword [ebp - 0x89c], 1
mov dword [ebp - 0x898], 1
mov dword [ebp - 0x1b8], 0xbecc425f
mov dword [ebp - 0x240], 0
jmp 0x1001c546
mov eax, dword [ebp - 0x240]
inc eax
mov dword [ebp - 0x240], eax
cmp dword [ebp - 0x240], 1
jge 0x1001c55f
mov eax, dword [ebp - 0x240]
mov dword [ebp + eax*4 - 0x1c], 7
jmp 0x1001c539
mov dword [ebp - 0x10], 0
jmp 0x1001c56f
mov eax, dword [ebp - 0x10]
inc eax
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], 0
jg 0x1001ca74
mov dword [ebp - 0x130], 0xfffffffa
mov dword [ebp - 0x8c0], 0x7967268f
mov dword [ebp - 0x458], 0
mov dword [ebp - 0x7f8], 0xfffffffd
mov eax, dword [ebp - 0x10]
mov dword [ebp - 0xcf4], eax
mov eax, dword [ebp - 0x10]
cmp dword [ebp + eax*4 - 0x1c], 0xffffffff
jne 0x1001c5c0
mov dword [ebp - 0x400], 1
jmp 0x1001c5c7
and dword [ebp - 0x400], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x1c]
cmp dword [ebp - 0x400], eax
jle 0x1001c5e5
mov dword [ebp - 0x7e4], 1
jmp 0x1001c5ec
and dword [ebp - 0x7e4], 0
mov eax, dword [ebp - 0x10]
mov eax, dword [ebp + eax*4 - 0x1c]
cmp dword [ebp - 0x7e4], eax
jge 0x1001c607
mov dword [ebp - 0xa30], 1
jmp 0x1001c60e
and dword [ebp - 0xa30], 0
mov eax, dword [ebp - 0x10]
mov eax, dword [ebp + eax*4 - 0x1c]
mov dword [ebp - 0xcfc], eax
mov eax, 0xc505
cmp eax, 0xd2e9
jne 0x1001c633
mov dword [ebp - 0x408], 1
jmp 0x1001c63a
and dword [ebp - 0x408], 0
cmp dword [ebp - 0x408], 0xca8c98aa
jae 0x1001c652
mov dword [ebp - 0x7ec], 1
jmp 0x1001c659
and dword [ebp - 0x7ec], 0
mov eax, dword [ebp - 0x10]
mov eax, dword [ebp + eax*4 - 0x1c]
cmp dword [ebp - 0x7ec], eax
jge 0x1001c674
mov dword [ebp - 0x410], 1
jmp 0x1001c67b
and dword [ebp - 0x410], 0
mov dword [ebp - 0x130], 0x1c946b43
mov eax, dword [ebp - 0x130]
cmp eax, dword [ebp - 0x410]
jge 0x1001c69f
mov dword [ebp - 0xa38], 1
jmp 0x1001c6a6
and dword [ebp - 0xa38], 0
mov eax, dword [ebp - 0x10]
mov eax, dword [ebp + eax*4 - 0x1c]
mov dword [ebp - 0xd04], eax
mov eax, dword [ebp - 0x10]
mov eax, dword [ebp + eax*4 - 0x1c]
cmp dword [ebp - 0x10], eax
jge 0x1001c6cb
mov dword [ebp - 0x7f4], 1
jmp 0x1001c6d2
and dword [ebp - 0x7f4], 0
mov eax, dword [ebp - 0x10]
mov eax, dword [ebp + eax*4 - 0x1c]
cmp dword [ebp - 0x7f4], eax
jl 0x1001c6ed
mov dword [ebp - 0x7fc], 1
jmp 0x1001c6f4
and dword [ebp - 0x7fc], 0
mov eax, dword [ebp - 0x10]
cmp dword [ebp - 0x7fc], eax
jl 0x1001c70b
mov dword [ebp - 0x9a8], 1
jmp 0x1001c712
and dword [ebp - 0x9a8], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x1c]
mov dword [ebp - 0xd0c], eax
mov eax, dword [ebp - 0x10]
mov eax, dword [ebp + eax*4 - 0x1c]
mov dword [ebp - 0x7f0], eax
push 4
pop eax
imul eax, eax, 3
mov ecx, dword [ebp - 0x7f0]
mov dword [ebp + eax - 0x8a4], ecx
mov eax, dword [ebp - 0x10]
mov eax, dword [ebp + eax*4 - 0x1c]
cmp dword [ebp - 0x7f0], eax
jl 0x1001c76f
mov eax, 0xf620a341
test eax, eax
je 0x1001c76f
cmp dword [ebp - 0x130], 0
je 0x1001c76f
mov dword [ebp - 0x420], 1
jmp 0x1001c776
and dword [ebp - 0x420], 0
mov eax, dword [ebp - 0x10]
mov eax, dword [ebp + eax*4 - 0x1c]
cmp dword [ebp - 0x420], eax
jle 0x1001c79b
mov eax, dword [ebp - 0x10]
cmp dword [ebp + eax*4 - 0x1c], 0
je 0x1001c79b
mov dword [ebp - 0x650], 1
jmp 0x1001c7a2
and dword [ebp - 0x650], 0
mov eax, dword [ebp - 0x8c0]
imul eax, dword [ebp - 0x650]
test eax, eax
je 0x1001c7c8
cmp dword [ebp - 0x130], 0
je 0x1001c7c8
mov dword [ebp - 0x428], 1
jmp 0x1001c7cf
and dword [ebp - 0x428], 0
mov eax, dword [ebp - 0x10]
mov eax, dword [ebp + eax*4 - 0x1c]
mov eax, dword [ebp - 0x10]
mov ecx, dword [ebp - 0x10]
mov ecx, dword [ebp + ecx*4 - 0x1c]
cmp dword [ebp + eax*4 - 0x1c], ecx
jne 0x1001c7f2
mov dword [ebp - 0x768], 1
jmp 0x1001c7f9
and dword [ebp - 0x768], 0
cmp dword [ebp - 0x768], 0xfffffffd
jbe 0x1001c80e
mov dword [ebp - 0x430], 1
jmp 0x1001c815
and dword [ebp - 0x430], 0
mov eax, dword [ebp - 0x10]
mov eax, dword [ebp + eax*4 - 0x1c]
cmp dword [ebp - 0x430], eax
jne 0x1001c837
push 0xfffffffffffffffd
pop eax
test eax, eax
je 0x1001c837
mov dword [ebp - 0x658], 1
jmp 0x1001c83e
and dword [ebp - 0x658], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x1c]
add eax, dword [ebp - 0x658]
imul eax, dword [ebp - 0x10]
mov ecx, dword [ebp - 0x10]
imul eax, dword [ebp + ecx*4 - 0x1c]
test eax, eax
je 0x1001ca52
mov dword [ebp - 0x450], 0xfffffff7
mov dword [ebp - 0xd14], 1
mov dword [ebp - 0x8d0], 0xffffffff
mov dword [ebp - 0x8c8], 0
mov dword [ebp - 0xd1c], 9
mov dword [ebp - 0xd60], 0xffffffff
mov dword [ebp - 0x460], 0x6cbaba27
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x1c], 0xffffffff
jne 0x1001c8c1
mov dword [ebp - 0x438], 1
jmp 0x1001c8c8
and dword [ebp - 0x438], 0
push 4
pop eax
imul eax, eax, 3
mov ecx, dword [ebp - 0x438]
mov dword [ebp + eax - 0x8a4], ecx
mov eax, dword [ebp - 0x450]
imul eax, dword [ebp - 0x130]
push 4
pop ecx
imul ecx, ecx, 3
cmp eax, dword [ebp + ecx - 0x8a4]
jl 0x1001c903
mov dword [ebp - 0x83c], 1
jmp 0x1001c90a
and dword [ebp - 0x83c], 0
mov eax, dword [ebp - 0x458]
cmp dword [ebp - 0x83c], eax
jg 0x1001c924
mov dword [ebp - 0x440], 1
jmp 0x1001c92b
and dword [ebp - 0x440], 0
mov eax, dword [ebp - 0x1b8]
mov dword [ebp - 0x964], eax
mov eax, dword [ebp - 0x440]
mov dword [ebp - 0x998], eax
mov eax, dword [ebp - 0x1b8]
dec eax
mov dword [ebp - 0x1b8], eax
mov eax, dword [ebp - 0x964]
cmp eax, dword [ebp - 0x998]
jl 0x1001c96a
mov dword [ebp - 0x660], 1
jmp 0x1001c971
and dword [ebp - 0x660], 0
mov eax, dword [ebp - 0x660]
sub eax, dword [ebp - 0x7f8]
mov dword [ebp - 0x448], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x448]
mov dword [ebp + eax - 0x1c], ecx
cmp dword [ebp - 0x448], 0
jne 0x1001c9a8
mov dword [ebp - 0x770], 1
jmp 0x1001c9af
and dword [ebp - 0x770], 0
mov eax, dword [ebp - 0x770]
add eax, 0xf31a
cmp eax, dword [ebp - 0x450]
jge 0x1001c9ce
mov dword [ebp - 0x668], 1
jmp 0x1001c9d5
and dword [ebp - 0x668], 0
imul eax, dword [ebp - 0x668], 3
cmp eax, 0x721cb4f5
jl 0x1001c9f5
cmp dword [ebp - 0x8c8], 0
jne 0x1001c9f5
and dword [ebp - 0x9cc], 0
jmp 0x1001c9ff
mov dword [ebp - 0x9cc], 1
mov eax, dword [ebp - 0x458]
mov dword [ebp - 0xd68], eax
mov eax, dword [ebp - 0x460]
mov dword [ebp - 0xd48], eax
mov eax, dword [ebp - 0x8d0]
mov dword [ebp - 0xc14], eax
mov eax, dword [ebp - 0x7f8]
add eax, dword [ebp - 0x460]
jns 0x1001ca3d
mov dword [ebp - 0x670], 1
jmp 0x1001ca44
and dword [ebp - 0x670], 0
mov eax, dword [ebp - 0x670]
mov dword [ebp - 0x130], eax
jmp 0x1001ca6f
mov byte [ebp - 0xc7], 0
movzx eax, byte [ebp - 0xc7]
test eax, eax
je 0x1001ca6f
push 0x1040
call dword [sym.imp.KERNEL32.dll_SetLastError]
jmp 0x1001c568
push 4
pop eax
imul eax, eax, 3
mov ecx, dword [ebp - 0x1b8]
cmp dword [ebp + eax - 0x8a4], ecx
jge 0x1001ca95
mov dword [ebp - 0x468], 1
jmp 0x1001ca9c
and dword [ebp - 0x468], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x8a4]
cmp dword [ebp - 0x468], eax
jge 0x1001cabd
mov dword [ebp - 0x778], 1
jmp 0x1001cac4
and dword [ebp - 0x778], 0
mov eax, dword [ebp - 0x778]
mov dword [ebp - 0x10], eax
movzx eax, byte [0x10cb5406]
test eax, eax
je 0x1001ce2b
mov ecx, 0x10cb54e0
call fcn.10023930
movzx eax, al
test eax, eax
jne 0x1001ce2b
mov dword [ebp - 0x138], 0x29be1d92
mov dword [ebp - 0x248], 0
jmp 0x1001cb14
mov eax, dword [ebp - 0x248]
inc eax
mov dword [ebp - 0x248], eax
cmp dword [ebp - 0x248], 1
jge 0x1001cb30
mov eax, dword [ebp - 0x248]
mov dword [ebp + eax*4 - 0x9a0], 0x1f9c
jmp 0x1001cb07
mov dword [ebp - 0x138], 0
jmp 0x1001cb49
mov eax, dword [ebp - 0x138]
inc eax
mov dword [ebp - 0x138], eax
cmp dword [ebp - 0x138], 0
jg 0x1001cb94
mov dword [ebp - 0x1c0], 0xfffffffc
mov dword [ebp - 0x1c0], 0
jmp 0x1001cb75
mov eax, dword [ebp - 0x1c0]
dec eax
mov dword [ebp - 0x1c0], eax
cmp dword [ebp - 0x1c0], 0
jl 0x1001cb92
mov eax, dword [ebp - 0x138]
cmp dword [ebp + eax*4 - 0x9a0], 0
je 0x1001cb90
jmp 0x1001cb92
jmp 0x1001cb68
jmp 0x1001cb3c
push 0
lea eax, [ebp - 0x138]
push eax
call fcn.1001b335
pop ecx
pop ecx
lea eax, [ebp - 0x704]
push eax
lea eax, [ebp - 0x4a0]
push eax
mov ecx, 0x10cb54e0
call fcn.10016990
mov dword [ebp - 0x58], 1
mov dword [ebp - 0x498], 0x13c27f35
mov dword [ebp - 0x8d8], 8
mov dword [ebp - 0x250], 0
jmp 0x1001cbf0
mov eax, dword [ebp - 0x250]
inc eax
mov dword [ebp - 0x250], eax
cmp dword [ebp - 0x250], 3
jge 0x1001cc0c
mov eax, dword [ebp - 0x250]
mov dword [ebp + eax*4 - 0x858], 0xfffffffd
jmp 0x1001cbe3
mov dword [ebp - 0x58], 2
jmp 0x1001cc1c
mov eax, dword [ebp - 0x58]
dec eax
mov dword [ebp - 0x58], eax
cmp dword [ebp - 0x58], 0
jl 0x1001cdd9
mov dword [ebp - 0x680], 0xdfc9
mov eax, dword [ebp - 0x58]
cmp dword [ebp + eax*4 - 0x858], 0xc8f0d071
jbe 0x1001cc56
mov eax, dword [ebp - 0x58]
cmp dword [ebp + eax*4 - 0x858], 0
jne 0x1001cc56
and dword [ebp - 0x868], 0
jmp 0x1001cc60
mov dword [ebp - 0x868], 1
mov eax, dword [ebp - 0x58]
cmp dword [ebp + eax*4 - 0x858], 0xebfb2c41
je 0x1001cc86
mov eax, dword [ebp - 0x58]
cmp dword [ebp + eax*4 - 0x858], 0
jne 0x1001cc86
and dword [ebp - 0x470], 0
jmp 0x1001cc90
mov dword [ebp - 0x470], 1
mov eax, dword [ebp - 0x58]
cmp dword [ebp - 0x470], eax
jg 0x1001cca7
mov dword [ebp - 0x678], 1
jmp 0x1001ccae
and dword [ebp - 0x678], 0
mov eax, dword [ebp - 0x58]
mov eax, dword [ebp + eax*4 - 0x858]
cmp dword [ebp - 0x678], eax
jg 0x1001cccc
mov dword [ebp - 0x478], 1
jmp 0x1001ccd3
and dword [ebp - 0x478], 0
mov eax, dword [ebp - 0x478]
sub eax, dword [ebp - 0x58]
cmp dword [ebp - 0x868], eax
jge 0x1001ccf0
mov dword [ebp - 0x480], 1
jmp 0x1001ccf7
and dword [ebp - 0x480], 0
mov eax, dword [ebp - 0x480]
mov dword [ebp - 0x680], eax
cmp dword [ebp - 0x680], 1
jle 0x1001cd18
mov dword [ebp - 0x488], 1
jmp 0x1001cd1f
and dword [ebp - 0x488], 0
cmp dword [ebp - 0x488], 0xc0de
jne 0x1001cd37
mov dword [ebp - 0x780], 1
jmp 0x1001cd3e
and dword [ebp - 0x780], 0
cmp dword [ebp - 0x780], 0x7dd
jl 0x1001cd56
mov dword [ebp - 0x490], 1
jmp 0x1001cd5d
and dword [ebp - 0x490], 0
mov eax, dword [ebp - 0x58]
mov eax, dword [ebp + eax*4 - 0x858]
mov ecx, dword [ebp - 0x58]
mov ecx, dword [ebp + ecx*4 - 0x858]
add ecx, dword [ebp - 0x490]
sub eax, ecx
push 4
pop ecx
shl ecx, 0
cmp eax, dword [ebp + ecx - 0x858]
je 0x1001cd94
mov dword [ebp - 0x688], 1
jmp 0x1001cd9b
and dword [ebp - 0x688], 0
mov eax, dword [ebp - 0x688]
mov dword [ebp - 0x498], eax
cmp dword [ebp - 0x498], 0
je 0x1001cdc1
xor eax, eax
inc eax
je 0x1001cdc1
mov dword [ebp - 0x800], 1
jmp 0x1001cdc8
and dword [ebp - 0x800], 0
mov eax, dword [ebp - 0x800]
mov dword [ebp - 0x8d8], eax
jmp 0x1001cc15
lea eax, [ebp - 0xb34]
push eax
mov ecx, 0x10cb54e0
call fcn.10016982
push eax
lea ecx, [ebp - 0x4a0]
call fcn.100169a5
movzx eax, al
test eax, eax
je 0x1001ce2b
lea ecx, [ebp - 0x4a0]
call fcn.10023939
mov eax, dword [eax + 4]
mov dword [ebp - 0x9d4], eax
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xabc]
call fcn.10016705
mov eax, dword [ebp - 0x9d4]
jmp 0x10021cb5
mov dword [ebp - 0xd0], 0x387fb0b0
mov dword [ebp - 0x228], 0xedf6b3e7
mov dword [ebp - 0x178], 4
mov dword [ebp - 0x258], 0
jmp 0x1001ce62
mov eax, dword [ebp - 0x258]
inc eax
mov dword [ebp - 0x258], eax
cmp dword [ebp - 0x258], 2
jge 0x1001ce7e
mov eax, dword [ebp - 0x258]
mov dword [ebp + eax*4 - 0xbe4], 0x98ef544b
jmp 0x1001ce55
cmp dword [ebp - 0xd0], 0
je 0x1001cfef
mov dword [ebp - 0x4a8], 0xac54c975
mov dword [ebp - 0x33c], 0x23e52509
mov dword [ebp - 0x844], 0x4edf0ebf
mov dword [ebp - 0x4b8], 0x3847
mov dword [ebp - 0x9dc], 0x80c6548a
cmp dword [ebp - 0x4a8], 0
je 0x1001cedb
cmp dword [ebp - 0xd0], 0
je 0x1001cedb
mov dword [ebp - 0x690], 1
jmp 0x1001cee2
and dword [ebp - 0x690], 0
mov eax, dword [ebp - 0x228]
add eax, dword [ebp - 0x690]
mov dword [ebp - 0x33c], eax
mov eax, dword [ebp - 0x844]
cmp dword [ebp - 0x33c], eax
jne 0x1001cf17
cmp dword [ebp - 0x4a8], 0
je 0x1001cf17
mov dword [ebp - 0x788], 1
jmp 0x1001cf1e
and dword [ebp - 0x788], 0
mov eax, dword [ebp - 0x788]
neg eax
cmp eax, 0x87642760
ja 0x1001cf39
mov dword [ebp - 0x4b0], 1
jmp 0x1001cf40
and dword [ebp - 0x4b0], 0
mov eax, dword [ebp - 0x228]
cmp dword [ebp - 0x4b0], eax
jl 0x1001cf5a
mov dword [ebp - 0x698], 1
jmp 0x1001cf61
and dword [ebp - 0x698], 0
mov eax, dword [ebp - 0x698]
mov dword [ebp - 0x4b8], eax
mov eax, dword [ebp - 0x4b8]
mov dword [ebp - 0x178], eax
cmp dword [ebp - 0x178], 0
je 0x1001cf97
cmp dword [ebp - 0x844], 0
je 0x1001cf97
mov dword [ebp - 0x8e0], 1
jmp 0x1001cf9e
and dword [ebp - 0x8e0], 0
mov eax, dword [ebp - 0xd0]
mov dword [ebp - 0xce0], eax
mov eax, dword [ebp - 0xd0]
mov dword [ebp - 0xb3c], eax
cmp dword [ebp - 0x228], 0x768c
jg 0x1001cfd4
cmp dword [ebp - 0x33c], 0
jne 0x1001cfd4
and dword [ebp - 0x4c0], 0
jmp 0x1001cfde
mov dword [ebp - 0x4c0], 1
mov eax, dword [ebp - 0x4c0]
mov dword [ebp - 0x9dc], eax
jmp 0x1001d1c5
mov dword [ebp - 0x170], 0x796a
mov dword [ebp - 0x4e0], 0xfffffffb
mov dword [ebp - 0x1cc], 0
jmp 0x1001d01c
mov eax, dword [ebp - 0x1cc]
inc eax
mov dword [ebp - 0x1cc], eax
cmp dword [ebp - 0x1cc], 3
jge 0x1001d038
mov eax, dword [ebp - 0x1cc]
mov dword [ebp + eax*4 - 0xc78], 0x71db9567
jmp 0x1001d00f
cmp dword [ebp - 0x228], 0
je 0x1001d101
mov eax, dword [ebp - 0xd0]
mov dword [ebp - 0xc5c], eax
cmp dword [ebp - 0x170], 1
ja 0x1001d066
mov dword [ebp - 0x344], 1
jmp 0x1001d06d
and dword [ebp - 0x344], 0
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x344]
mov dword [ebp + eax - 0xc78], ecx
cmp dword [ebp - 0x344], 0xffff
jae 0x1001d098
mov dword [ebp - 0x6a0], 1
jmp 0x1001d09f
and dword [ebp - 0x6a0], 0
mov eax, dword [ebp - 0xd0]
cmp dword [ebp - 0x6a0], eax
jge 0x1001d0b9
mov dword [ebp - 0x4c8], 1
jmp 0x1001d0c0
and dword [ebp - 0x4c8], 0
mov eax, dword [ebp - 0x170]
cmp dword [ebp - 0x4c8], eax
jne 0x1001d0da
mov dword [ebp - 0x790], 1
jmp 0x1001d0e1
and dword [ebp - 0x790], 0
mov eax, dword [ebp - 0xd0]
sub eax, dword [ebp - 0x790]
cmp eax, dword [ebp - 0x170]
je 0x1001d101
mov dword [ebp - 0x4d0], 1
jmp 0x1001d108
and dword [ebp - 0x4d0], 0
mov eax, dword [ebp - 0x178]
cmp eax, dword [ebp - 0x4d0]
jge 0x1001d122
mov dword [ebp - 0x6a8], 1
jmp 0x1001d129
and dword [ebp - 0x6a8], 0
mov eax, dword [ebp - 0x170]
cmp dword [ebp - 0x6a8], eax
je 0x1001d143
mov dword [ebp - 0x4d8], 1
jmp 0x1001d14a
and dword [ebp - 0x4d8], 0
cmp dword [ebp - 0x4d8], 0xffffffff
jne 0x1001d15f
mov dword [ebp - 0x808], 1
jmp 0x1001d166
and dword [ebp - 0x808], 0
mov eax, dword [ebp - 0x170]
cmp dword [ebp - 0x808], eax
jl 0x1001d180
mov dword [ebp - 0x8e8], 1
jmp 0x1001d187
and dword [ebp - 0x8e8], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0xbe4]
mov dword [ebp - 0xb44], eax
mov eax, dword [ebp - 0x178]
mov dword [ebp - 0xd5c], eax
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0xc78]
mov dword [ebp - 0x4e0], eax
mov eax, dword [ebp - 0x4e0]
mov dword [ebp - 0x178], eax
mov byte [ebp - 0xf9], 0
movzx eax, byte [ebp - 0xf9]
test eax, eax
je 0x1001d1df
push 1
call fcn.1001b288
pop ecx
and dword [ebp - 0x128], 0
mov dword [ebp - 0xd8], 0x18885c6f
mov dword [ebp - 0x878], 0x8de6
mov dword [ebp - 0xadc], 0xdc99220c
mov dword [ebp - 0xad8], 0xdc99220c
mov dword [ebp - 0xad4], 0xdc99220c
mov dword [ebp - 0xad0], 0xdc99220c
mov dword [ebp - 0x6b8], 0x233fd52
mov dword [ebp - 0x88], 0
jmp 0x1001d245
mov eax, dword [ebp - 0x88]
inc eax
mov dword [ebp - 0x88], eax
cmp dword [ebp - 0x88], 2
jge 0x1001d261
mov eax, dword [ebp - 0x88]
mov dword [ebp + eax*4 - 0x2f0], 0x3198a8f9
jmp 0x1001d238
mov dword [ebp - 0x88], 0
jmp 0x1001d27a
mov eax, dword [ebp - 0x88]
inc eax
mov dword [ebp - 0x88], eax
cmp dword [ebp - 0x88], 2
jge 0x1001d296
mov eax, dword [ebp - 0x88]
mov dword [ebp + eax*4 - 0xbf0], 0xa19820b2
jmp 0x1001d26d
mov dword [ebp - 0xd8], 1
jmp 0x1001d2af
mov eax, dword [ebp - 0xd8]
dec eax
mov dword [ebp - 0xd8], eax
cmp dword [ebp - 0xd8], 0
jl 0x1001d322
mov dword [ebp - 0x1d4], 0xfffffffc
mov dword [ebp - 0x1d4], 1
jmp 0x1001d2db
mov eax, dword [ebp - 0x1d4]
dec eax
mov dword [ebp - 0x1d4], eax
cmp dword [ebp - 0x1d4], 0
jl 0x1001d320
mov byte [ebp - 0xe9], 0
movzx eax, byte [ebp - 0xe9]
test eax, eax
je 0x1001d304
push 0
push 0x3e5b
call fcn.100234f4
pop ecx
pop ecx
mov byte [ebp - 0xcb], 0
movzx eax, byte [ebp - 0xcb]
test eax, eax
je 0x1001d31e
push 0
call fcn.1001b715
pop ecx
jmp 0x1001d2ce
jmp 0x1001d2a2
mov eax, dword [ebp - 0xd8]
mov dword [ebp - 0xb4c], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x2f0]
mov dword [ebp - 0xc64], eax
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x2f0], 0
je 0x1001d372
mov eax, dword [ebp - 0x878]
mov dword [ebp - 0xb54], eax
mov eax, 0x510afbd1
test eax, eax
je 0x1001d372
mov dword [ebp - 0x6b0], 1
jmp 0x1001d379
and dword [ebp - 0x6b0], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x2f0]
cmp dword [ebp - 0x6b0], eax
je 0x1001d39a
mov dword [ebp - 0x4e8], 1
jmp 0x1001d3a1
and dword [ebp - 0x4e8], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x2f0]
cmp dword [ebp - 0x4e8], eax
jge 0x1001d3c2
mov dword [ebp - 0x798], 1
jmp 0x1001d3c9
and dword [ebp - 0x798], 0
mov eax, dword [ebp - 0x798]
mov dword [ebp - 0xd8], eax
mov eax, dword [ebp - 0xd8]
mov dword [ebp - 0x4f0], eax
push 4
pop eax
imul eax, eax, 3
mov ecx, dword [ebp - 0x4f0]
mov dword [ebp + eax - 0xadc], ecx
mov eax, dword [ebp - 0x4f0]
mov dword [ebp - 0x6b8], eax
cmp dword [ebp - 0x6b8], 1
jle 0x1001d415
mov dword [ebp - 0x4f8], 1
jmp 0x1001d41c
and dword [ebp - 0x4f8], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x2f0]
cmp dword [ebp - 0x4f8], eax
jne 0x1001d43d
mov dword [ebp - 0x9f0], 1
jmp 0x1001d444
and dword [ebp - 0x9f0], 0
mov eax, dword [ebp - 0x878]
mov dword [ebp - 0xce8], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x2f0]
add eax, 6
push 4
pop ecx
imul ecx, ecx, 0
cmp eax, dword [ebp + ecx - 0x2f0]
jne 0x1001d47b
mov dword [ebp - 0x500], 1
jmp 0x1001d482
and dword [ebp - 0x500], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x2f0]
imul eax, dword [ebp - 0x500]
test eax, eax
je 0x1001d4ab
or eax, 0xffffffff
je 0x1001d4ab
mov dword [ebp - 0x6c0], 1
jmp 0x1001d4b2
and dword [ebp - 0x6c0], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x6c0]
mov dword [ebp + eax - 0xbf0], ecx
lea eax, [ebp - 0xabc]
push eax
call fcn.10019a02
pop ecx
mov dword [ebp - 0x128], eax
cmp dword [ebp - 0x128], 0
jne 0x10021542
mov dword [ebp - 0xb5c], 0x91df82
mov dword [ebp - 0x9b0], 0xfffffff6
mov dword [ebp - 0xc6c], 7
mov dword [ebp - 0x518], 0xc3ec3d4e
mov dword [ebp - 0x34c], 0x3268
mov dword [ebp - 0x8f8], 0
mov dword [ebp - 0x98], 0
jmp 0x1001d53a
mov eax, dword [ebp - 0x98]
inc eax
mov dword [ebp - 0x98], eax
cmp dword [ebp - 0x98], 2
jge 0x1001d556
mov eax, dword [ebp - 0x98]
mov dword [ebp + eax*4 - 0x37c], 0x67215912
jmp 0x1001d52d
mov dword [ebp - 0x98], 0
jmp 0x1001d56f
mov eax, dword [ebp - 0x98]
inc eax
mov dword [ebp - 0x98], eax
cmp dword [ebp - 0x98], 3
jge 0x1001d58b
mov eax, dword [ebp - 0x98]
mov dword [ebp + eax*4 - 0xd80], 0x38330377
jmp 0x1001d562
mov eax, 0xc19c5a65
test eax, eax
je 0x1001d5b0
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x37c], 0
je 0x1001d5b0
mov dword [ebp - 0x8f0], 1
jmp 0x1001d5b7
and dword [ebp - 0x8f0], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x37c]
mov dword [ebp - 0xb64], eax
mov eax, dword [ebp - 0x34c]
mov ecx, dword [ebp - 0x34c]
inc ecx
mov dword [ebp - 0x34c], ecx
test eax, eax
jne 0x1001d6a9
push 4
pop eax
imul eax, eax, 0
imul eax, dword [ebp + eax - 0x37c], 0x3fc2
cmp eax, 0xc0b333ee
jbe 0x1001d609
mov dword [ebp - 0x508], 1
jmp 0x1001d610
and dword [ebp - 0x508], 0
mov eax, dword [ebp - 0x508]
sub eax, dword [ebp - 0x9b0]
cmp eax, 0xa083
jge 0x1001d62f
mov dword [ebp - 0x7a0], 1
jmp 0x1001d636
and dword [ebp - 0x7a0], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x37c]
cmp dword [ebp - 0x7a0], eax
je 0x1001d657
mov dword [ebp - 0x364], 1
jmp 0x1001d65e
and dword [ebp - 0x364], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x364]
mov dword [ebp + eax - 0xd80], ecx
mov eax, dword [ebp - 0x518]
cmp dword [ebp - 0x364], eax
jle 0x1001d68b
mov dword [ebp - 0x510], 1
jmp 0x1001d692
and dword [ebp - 0x510], 0
mov eax, dword [ebp - 0x8f8]
cmp dword [ebp - 0x510], eax
jge 0x1001d6a9
and dword [ebp - 0x6c8], 0
jmp 0x1001d6b3
mov dword [ebp - 0x6c8], 1
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x37c]
cmp dword [ebp - 0x6c8], eax
jl 0x1001d6d4
mov dword [ebp - 0xa14], 1
jmp 0x1001d6db
and dword [ebp - 0xa14], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x37c]
mov dword [ebp - 0xd18], eax
mov dword [ebp - 0x518], 0xa9c5a74d
mov dword [ebp - 0x900], 0x4a025691
mov dword [ebp - 0x908], 3
mov dword [ebp - 0x26c], 0
jmp 0x1001d725
mov eax, dword [ebp - 0x26c]
inc eax
mov dword [ebp - 0x26c], eax
cmp dword [ebp - 0x26c], 1
jge 0x1001d741
mov eax, dword [ebp - 0x26c]
mov dword [ebp + eax*4 - 0x9b8], 0x951ad386
jmp 0x1001d718
push 0x60ff
push 1
call fcn.1001b2ac
pop ecx
pop ecx
mov eax, dword [ebp - 0x900]
mov dword [ebp - 0x810], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x810]
mov dword [ebp + eax - 0x9b8], ecx
mov eax, dword [ebp - 0x810]
mov dword [ebp - 0x908], eax
cmp dword [0x10cb53fc], 0
jne 0x100212c0
mov dword [ebp - 0x1dc], 0
jmp 0x1001d7a0
mov eax, dword [ebp - 0x1dc]
inc eax
mov dword [ebp - 0x1dc], eax
cmp dword [ebp - 0x1dc], 3
jge 0x1001d7bc
mov eax, dword [ebp - 0x1dc]
mov dword [ebp + eax*4 - 0xa54], 0xb110c93b
jmp 0x1001d793
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0xa54], 0
jmp 0x1001d7ea
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xa54]
dec eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0xa54], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0xa54], 0xffffffe8
jne 0x1001d81c
mov byte [ebp - 0xbb], 0
movzx eax, byte [ebp - 0xbb]
test eax, eax
je 0x1001d81a
push 0x470a
push 0
call fcn.10021cc3
pop ecx
pop ecx
jmp 0x1001d7cf
mov dword [ebp - 0xb2c], 1
mov dword [ebp - 0xc7c], 5
mov dword [ebp - 0xb74], 1
mov dword [ebp - 0xcf0], 0xd05ba772
mov dword [ebp - 0xb7c], 0xb3b9da4d
mov dword [ebp - 0xc8c], 0xffffffff
mov dword [ebp - 0xb84], 7
mov dword [ebp - 0x520], 0xfffffff7
mov dword [ebp - 0x1e8], 0
jmp 0x1001d885
mov eax, dword [ebp - 0x1e8]
inc eax
mov dword [ebp - 0x1e8], eax
cmp dword [ebp - 0x1e8], 4
jge 0x1001d8a1
mov eax, dword [ebp - 0x1e8]
mov dword [ebp + eax*4 - 0xe38], 0x2ff40fc0
jmp 0x1001d878
mov byte [ebp - 0xbc], 0
movzx eax, byte [ebp - 0xbc]
test eax, eax
je 0x1001d8c1
push 0x1ec0
push 1
call fcn.1001b2f5
pop ecx
pop ecx
mov eax, dword [ebp - 0x520]
inc eax
mov dword [ebp - 0x520], eax
mov byte [ebp - 0x2e0], 7
mov byte [ebp - 0x2df], 0x6a
mov byte [ebp - 0x2de], 3
mov byte [ebp - 0x2dd], 0x5c
mov byte [ebp - 0x2dc], 0xa
mov byte [ebp - 0x2db], 2
mov byte [ebp - 0x2da], 2
mov byte [ebp - 0x2d9], 0x1e
mov byte [ebp - 0x2d8], 0xb
mov byte [ebp - 0x2d7], 0x1e
mov byte [ebp - 0x2d6], 8
mov byte [ebp - 0x2d5], 0x42
mov byte [ebp - 0x2d4], 4
mov byte [ebp - 0x2d3], 0x4b
mov byte [ebp - 0x2d2], 0
mov byte [ebp - 0x2d1], 0x2e
mov byte [ebp - 0x2d0], 0x49
mov byte [ebp - 0x2cf], 0x75
mov byte [ebp - 0x2ce], 0x1c
mov byte [ebp - 0x2cd], 0x83
mov byte [ebp - 0x2cc], 0x7a
mov byte [ebp - 0x2cb], 0x88
mov byte [ebp - 0x2ca], 0x5e
mov byte [ebp - 0x2c9], 0xa9
mov byte [ebp - 0x2c8], 0x3e
mov byte [ebp - 0x2c7], 0x4a
mov byte [ebp - 0x2c6], 0xe
mov byte [ebp - 0x2c5], pe_nt_image_headers32
mov byte [ebp - 0x2c4], 0x7a
mov byte [ebp - 0x2c3], 0xba
mov byte [ebp - 0x2c2], 0x50
mov byte [ebp - 0x2c1], 0xd5
mov byte [ebp - 0x2c0], 0xcf
mov byte [ebp - 0x2bf], 0xdd
mov byte [ebp - 0x2be], 0xc0
mov byte [ebp - 0x2bd], 0xbd
mov byte [ebp - 0x2bc], 0x20
mov byte [ebp - 0x2bb], 0xca
mov byte [ebp - 0x2ba], 0xe
mov byte [ebp - 0x2b9], 0x7f
mov byte [ebp - 0x2b8], 0xa3
mov byte [ebp - 0x2b7], 0x14
mov byte [ebp - 0x2b6], 0x1a
mov byte [ebp - 0x2b5], 0xea
mov byte [ebp - 0x2b4], 0x47
mov byte [ebp - 0x2b3], 0xae
mov byte [ebp - 0x2b2], 0x91
mov byte [ebp - 0x2b1], 0x25
mov byte [ebp - 0x2b0], 0x68
mov byte [ebp - 0x2af], 0xd6
mov byte [ebp - 0x2ae], 0x85
mov byte [ebp - 0x2ad], 0xd6
mov byte [ebp - 0x2ac], 0x26
mov byte [ebp - 0x2ab], 0xa4
mov byte [ebp - 0x2aa], 0xc
mov byte [ebp - 0x2a9], 0xf2
mov byte [ebp - 0x2a8], 0x57
mov byte [ebp - 0x2a7], 0xbe
mov byte [ebp - 0x2a6], 0xe9
mov byte [ebp - 0x2a5], 0x37
mov byte [ebp - 0x2a4], 0xe1
mov byte [ebp - 0x2a3], 0xe7
mov byte [ebp - 0x2a2], 0x42
mov byte [ebp - 0x2a1], 0xad
mov byte [ebp - 0x2a0], 0x74
mov byte [ebp - 0x29f], 0x54
mov byte [ebp - 0x29e], 0x6a
mov byte [ebp - 0x29d], 0x54
mov byte [ebp - 0x29c], 0xf7
mov byte [ebp - 0x29b], 0x7b
mov byte [ebp - 0x29a], 0x38
mov byte [ebp - 0x299], 0xa9
mov byte [ebp - 0x298], 0x9e
mov byte [ebp - 0x297], 0xe0
mov byte [ebp - 0x296], 0x82
mov byte [ebp - 0x295], 0xc9
mov byte [ebp - 0x294], 0x77
mov byte [ebp - 0x293], 0x7d
mov byte [ebp - 0x292], 0xac
mov byte [ebp - 0x291], 0x58
mov byte [ebp - 0x290], 0xed
mov byte [ebp - 0x28f], 0x49
mov byte [ebp - 0x28e], 0x62
mov byte [ebp - 0x28d], 0xdd
mov byte [ebp - 0x28c], 0x8a
mov byte [ebp - 0x28b], 0x8f
mov byte [ebp - 0x28a], 0xe7
mov byte [ebp - 0x289], 0xe2
mov byte [ebp - 0x288], 0xeb
mov byte [ebp - 0x287], 0x80
mov byte [ebp - 0x286], 6
mov byte [ebp - 0x285], 0x78
mov byte [ebp - 0x284], 9
mov byte [ebp - 0x283], 0x57
mov byte [ebp - 0x282], 1
mov byte [ebp - 0x281], 1
mov byte [ebp - 0x280], 5
mov byte [ebp - 0x27f], 9
xor eax, eax
inc eax
shl eax, 0
movzx eax, byte [ebp + eax - 0x2e0]
or eax, 0x58
xor ecx, ecx
inc ecx
shl ecx, 0
movzx ecx, byte [ebp + ecx - 0x2e0]
and ecx, 0x58
sub eax, ecx
xor ecx, ecx
inc ecx
imul ecx, ecx, 0
movzx ecx, byte [ebp + ecx - 0x2e0]
mov word [ebp + ecx*2 - 0xb28], ax
mov dword [ebp - 0x2c], 0xfffffff7
mov dword [ebp - 0x1e4], 0xffffffff
mov dword [ebp - 0x338], 9
mov dword [ebp - 0xca0], 1
mov dword [ebp - 0x358], 0x7de97ee8
mov dword [ebp - 0x7c], 0
jmp 0x1001dbf5
mov eax, dword [ebp - 0x7c]
inc eax
mov dword [ebp - 0x7c], eax
cmp dword [ebp - 0x7c], 3
jge 0x1001dc0b
mov eax, dword [ebp - 0x7c]
mov dword [ebp + eax*4 - 0x27c], 0xe279
jmp 0x1001dbee
mov dword [ebp - 0x7c], 0
jmp 0x1001dc1b
mov eax, dword [ebp - 0x7c]
inc eax
mov dword [ebp - 0x7c], eax
cmp dword [ebp - 0x7c], 1
jge 0x1001dc31
mov eax, dword [ebp - 0x7c]
mov dword [ebp + eax*4 - 0xb8c], 0xfffffff7
jmp 0x1001dc14
mov dword [ebp - 0x2c], 2
jmp 0x1001dc41
mov eax, dword [ebp - 0x2c]
dec eax
mov dword [ebp - 0x2c], eax
cmp dword [ebp - 0x2c], 0
jl 0x1001ddf0
mov dword [ebp - 0x910], 0x11b55e97
mov eax, dword [ebp - 0x2c]
mov eax, dword [ebp + eax*4 - 0x27c]
mov dword [ebp - 0xc9c], eax
mov eax, dword [ebp - 0x2c]
cmp dword [ebp + eax*4 - 0x27c], 0
je 0x1001dd59
mov eax, dword [ebp - 0x2c]
cmp dword [ebp + eax*4 - 0x27c], 1
jg 0x1001dc8f
mov dword [ebp - 0x6d0], 1
jmp 0x1001dc96
and dword [ebp - 0x6d0], 0
mov eax, dword [ebp - 0x2c]
mov eax, dword [ebp + eax*4 - 0x27c]
cmp dword [ebp - 0x6d0], eax
jl 0x1001dcb4
mov dword [ebp - 0x528], 1
jmp 0x1001dcbb
and dword [ebp - 0x528], 0
mov eax, dword [ebp - 0x528]
mov dword [ebp - 0x1e4], eax
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x27c]
cmp dword [ebp - 0x1e4], eax
jl 0x1001dce4
cmp dword [ebp - 0x1e4], 0
je 0x1001dcf4
xor eax, eax
je 0x1001dcf4
mov dword [ebp - 0x7a8], 1
jmp 0x1001dcfb
and dword [ebp - 0x7a8], 0
mov eax, dword [ebp - 0x7a8]
mov dword [ebp - 0x338], eax
mov eax, dword [ebp - 0x2c]
cmp dword [ebp - 0x338], eax
jne 0x1001dd1e
mov dword [ebp - 0x530], 1
jmp 0x1001dd25
and dword [ebp - 0x530], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x27c]
add eax, dword [ebp - 0x530]
push 4
pop ecx
shl ecx, 1
cmp eax, dword [ebp + ecx - 0x27c]
jl 0x1001dd52
mov dword [ebp - 0x6d8], 1
jmp 0x1001dd59
and dword [ebp - 0x6d8], 0
mov eax, dword [ebp - 0x2c]
mov ecx, dword [ebp - 0x2c]
cmp dword [ebp + eax*4 - 0x27c], ecx
jle 0x1001dd74
mov dword [ebp - 0x538], 1
jmp 0x1001dd7b
and dword [ebp - 0x538], 0
cmp dword [ebp - 0x538], 0xfffffff7
je 0x1001dd90
mov dword [ebp - 0x84c], 1
jmp 0x1001dd97
and dword [ebp - 0x84c], 0
mov eax, dword [ebp - 0x2c]
mov ecx, dword [ebp - 0x84c]
sub ecx, dword [ebp + eax*4 - 0x27c]
cmp ecx, 0xffff
jne 0x1001ddbb
mov dword [ebp - 0x9f8], 1
jmp 0x1001ddc2
and dword [ebp - 0x9f8], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x27c]
mov dword [ebp - 0xb94], eax
mov eax, dword [ebp - 0x2c]
push 4
pop ecx
imul ecx, ecx, 0
sub eax, dword [ebp + ecx - 0x27c]
mov dword [ebp - 0x910], eax
jmp 0x1001dc3a
mov dword [ebp - 0x2c], 2
jmp 0x1001de00
mov eax, dword [ebp - 0x2c]
dec eax
mov dword [ebp - 0x2c], eax
cmp dword [ebp - 0x2c], 0
jl 0x1001df5d
mov dword [ebp - 0x918], 0x2570
mov dword [ebp - 0x24], 0
jmp 0x1001de24
mov eax, dword [ebp - 0x24]
inc eax
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 2
jge 0x1001de3a
mov eax, dword [ebp - 0x24]
mov dword [ebp + eax*4 - 0xd94], 0x748aee51
jmp 0x1001de1d
mov dword [ebp - 0x24], 0
jmp 0x1001de4a
mov eax, dword [ebp - 0x24]
inc eax
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 1
jge 0x1001de60
mov eax, dword [ebp - 0x24]
mov dword [ebp + eax*4 - 0xca4], 0
jmp 0x1001de43
mov dword [ebp - 0x24], 0
jmp 0x1001de70
mov eax, dword [ebp - 0x24]
inc eax
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 3
jge 0x1001de86
mov eax, dword [ebp - 0x24]
mov dword [ebp + eax*4 - 0xe04], 0xffffffff
jmp 0x1001de69
mov dword [ebp - 0x24], 0
jmp 0x1001de96
mov eax, dword [ebp - 0x24]
inc eax
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 2
jge 0x1001deac
mov eax, dword [ebp - 0x24]
mov dword [ebp + eax*4 - 0xdcc], 0xdbc1552c
jmp 0x1001de8f
mov eax, dword [ebp - 0x2c]
mov eax, dword [ebp + eax*4 - 0x27c]
mov dword [ebp - 0xb9c], eax
cmp dword [ebp - 0x1e4], 0
je 0x1001df15
mov eax, dword [ebp - 0x358]
mov dword [ebp - 0x9c0], eax
mov eax, dword [ebp - 0x358]
dec eax
mov dword [ebp - 0x358], eax
cmp dword [ebp - 0x9c0], 0xffff
jae 0x1001def6
mov dword [ebp - 0x540], 1
jmp 0x1001defd
and dword [ebp - 0x540], 0
cmp dword [ebp - 0x540], 0x2038be40
jl 0x1001df15
mov dword [ebp - 0x6e0], 1
jmp 0x1001df1c
and dword [ebp - 0x6e0], 0
cmp dword [ebp - 0x6e0], 0xffffffff
je 0x1001df31
mov dword [ebp - 0x548], 1
jmp 0x1001df38
and dword [ebp - 0x548], 0
mov eax, dword [ebp - 0x2c]
mov eax, dword [ebp + eax*4 - 0x27c]
mov ecx, dword [ebp - 0x918]
imul ecx, dword [ebp - 0x548]
imul eax, ecx
mov dword [ebp - 0x338], eax
jmp 0x1001ddf9
mov dword [ebp - 0x40], 2
and dword [ebp - 0x164], 0
jmp 0x1001df75
mov eax, dword [ebp - 0x40]
inc eax
inc eax
mov dword [ebp - 0x40], eax
cmp dword [ebp - 0x40], 0x62
jae 0x1001f4cb
mov dword [ebp - 0x1ec], 0
jmp 0x1001df98
mov eax, dword [ebp - 0x1ec]
inc eax
mov dword [ebp - 0x1ec], eax
cmp dword [ebp - 0x1ec], 1
jge 0x1001dfb4
mov eax, dword [ebp - 0x1ec]
mov dword [ebp + eax*4 - 0xcac], 0
jmp 0x1001df8b
mov byte [ebp - 0xbe], 0
push 0
lea eax, [ebp - 0xbe]
push eax
call fcn.1001b4ca
pop ecx
pop ecx
mov byte [ebp - 0xc0], 0
movzx eax, byte [ebp - 0xc0]
test eax, eax
je 0x1001dfeb
push 1
push 0x2a0e
call fcn.1001b335
pop ecx
pop ecx
xor eax, eax
inc eax
imul eax, eax, 0
movzx eax, byte [ebp + eax - 0x2e0]
lea eax, [eax + eax + 2]
cmp dword [ebp - 0x40], eax
jne 0x1001ed3c
mov dword [ebp - 0x11c], 0x56915a13
mov dword [ebp - 0x300], 0x673ed132
mov dword [ebp - 0x930], 1
mov dword [ebp - 0xba4], 0x9a040d4f
mov dword [ebp - 0x94], 0
jmp 0x1001e047
mov eax, dword [ebp - 0x94]
inc eax
mov dword [ebp - 0x94], eax
cmp dword [ebp - 0x94], 2
jge 0x1001e063
mov eax, dword [ebp - 0x94]
mov dword [ebp + eax*4 - 0xb8], 0xec0a
jmp 0x1001e03a
mov dword [ebp - 0x94], 0
jmp 0x1001e07c
mov eax, dword [ebp - 0x94]
inc eax
mov dword [ebp - 0x94], eax
cmp dword [ebp - 0x94], 1
jge 0x1001e098
mov eax, dword [ebp - 0x94]
mov dword [ebp + eax*4 - 0xca8], 0xfffffffe
jmp 0x1001e06f
mov dword [ebp - 0x11c], 0
jmp 0x1001e0b1
mov eax, dword [ebp - 0x11c]
inc eax
mov dword [ebp - 0x11c], eax
cmp dword [ebp - 0x11c], 1
jg 0x1001e64c
mov dword [ebp - 0x30], 0xcd53bc6e
mov dword [ebp - 0xe0], 0xffffffff
mov dword [ebp - 0x35c], 0x4fd39ef5
mov dword [ebp - 0xa94], 7
mov dword [ebp - 0xa90], 7
mov dword [ebp - 0xa8c], 7
mov dword [ebp - 0xa88], 7
mov dword [ebp - 0x30], 0
jmp 0x1001e111
mov eax, dword [ebp - 0x30]
inc eax
mov dword [ebp - 0x30], eax
cmp dword [ebp - 0x30], 1
jg 0x1001e647
mov dword [ebp - 0xa48], 0x19e7
mov dword [ebp - 0xa44], 0x19e7
mov dword [ebp - 0xa40], 0x19e7
mov dword [ebp - 0xa3c], 0x19e7
mov eax, dword [ebp - 0x30]
cmp dword [ebp + eax*4 - 0xb8], 0xffffffff
jg 0x1001e165
mov eax, 0xacee
test eax, eax
je 0x1001e165
mov dword [ebp - 0x550], 1
jmp 0x1001e16c
and dword [ebp - 0x550], 0
imul eax, dword [ebp - 0x11c], 0x43e2
cmp eax, 1
jb 0x1001e189
xor eax, eax
inc eax
jne 0x1001e189
and dword [ebp - 0x7b0], 0
jmp 0x1001e193
mov dword [ebp - 0x7b0], 1
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xb8]
cmp dword [ebp - 0x7b0], eax
jge 0x1001e1b4
mov dword [ebp - 0x6e8], 1
jmp 0x1001e1bb
and dword [ebp - 0x6e8], 0
mov eax, dword [ebp - 0x550]
cmp eax, dword [ebp - 0x6e8]
jle 0x1001e1d5
mov dword [ebp - 0x558], 1
jmp 0x1001e1dc
and dword [ebp - 0x558], 0
mov eax, dword [ebp - 0x30]
add eax, dword [ebp - 0x558]
mov ecx, dword [ebp - 0x30]
cmp eax, dword [ebp + ecx*4 - 0xb8]
jge 0x1001e1fd
mov dword [ebp - 0x818], 1
jmp 0x1001e204
and dword [ebp - 0x818], 0
mov eax, dword [ebp - 0x30]
mov eax, dword [ebp + eax*4 - 0xb8]
imul eax, dword [ebp - 0x818]
test eax, eax
jne 0x1001e225
mov dword [ebp - 0x560], 1
jmp 0x1001e22c
and dword [ebp - 0x560], 0
cmp dword [ebp - 0x560], 8
jb 0x1001e241
mov dword [ebp - 0xa34], 1
jmp 0x1001e248
and dword [ebp - 0xa34], 0
mov eax, dword [ebp - 0x30]
mov eax, dword [ebp + eax*4 - 0xb8]
mov dword [ebp - 0xbac], eax
push 3
pop eax
test eax, eax
je 0x1001e274
mov eax, 0xfbf26171
test eax, eax
je 0x1001e274
mov dword [ebp - 0x6f0], 1
jmp 0x1001e27b
and dword [ebp - 0x6f0], 0
mov eax, dword [ebp - 0x6f0]
mov dword [ebp - 0xe0], eax
cmp dword [ebp - 0xe0], 0x670
jg 0x1001e29f
mov dword [ebp - 0x568], 1
jmp 0x1001e2a6
and dword [ebp - 0x568], 0
mov eax, dword [ebp - 0x11c]
cmp dword [ebp - 0x568], eax
jne 0x1001e2c0
mov dword [ebp - 0x7b8], 1
jmp 0x1001e2c7
and dword [ebp - 0x7b8], 0
mov eax, dword [ebp - 0x30]
mov eax, dword [ebp + eax*4 - 0xb8]
mov ecx, dword [ebp - 0x30]
mov edx, dword [ebp - 0x7b8]
sub edx, dword [ebp + ecx*4 - 0xb8]
sub eax, edx
jne 0x1001e2f1
mov dword [ebp - 0x570], 1
jmp 0x1001e2f8
and dword [ebp - 0x570], 0
imul eax, dword [ebp - 0x570], 3
test eax, eax
je 0x1001e52a
mov dword [ebp - 0x9c8], 0x64adb5d2
mov dword [ebp - 0xe0], 1
jmp 0x1001e32a
mov eax, dword [ebp - 0xe0]
dec eax
mov dword [ebp - 0xe0], eax
cmp dword [ebp - 0xe0], 0
jl 0x1001e525
mov dword [ebp - 0xa8], 0xc5c6a81d
mov dword [ebp - 0xa8], 0
jmp 0x1001e35a
mov eax, dword [ebp - 0xa8]
inc eax
mov dword [ebp - 0xa8], eax
cmp dword [ebp - 0xa8], 1
jg 0x1001e520
mov dword [ebp - 0x928], 0xf9c85207
lea eax, [ebp - 0x300]
push eax
push 0x1a53
push 0
call fcn.1001b6c4
add esp, 0xc
mov dword [ebp - 0x35c], 5
mov eax, dword [ebp - 0xa8]
mov eax, dword [ebp + eax*4 - 0xb8]
cmp dword [ebp - 0x35c], eax
jl 0x1001e3b2
mov dword [ebp - 0x920], 1
jmp 0x1001e3b9
and dword [ebp - 0x920], 0
mov eax, dword [ebp - 0xe0]
cmp dword [ebp + eax*4 - 0xb8], 0
je 0x1001e41a
cmp dword [ebp - 0x9c8], 0
jne 0x1001e405
cmp dword [ebp - 0x30], 0
jne 0x1001e3e6
or eax, 0xffffffff
jne 0x1001e3e6
and dword [ebp - 0x6f8], 0
jmp 0x1001e3f0
mov dword [ebp - 0x6f8], 1
mov eax, dword [ebp - 0xa8]
mov eax, dword [ebp + eax*4 - 0xb8]
cmp dword [ebp - 0x6f8], eax
jne 0x1001e41a
cmp dword [ebp - 0x300], 0
je 0x1001e41a
mov dword [ebp - 0x578], 1
jmp 0x1001e421
and dword [ebp - 0x578], 0
cmp dword [ebp - 0x578], 0x2a1dd6b9
jl 0x1001e439
mov dword [ebp - 0x860], 1
jmp 0x1001e440
and dword [ebp - 0x860], 0
mov eax, dword [ebp - 0xa8]
imul eax, dword [ebp - 0x860]
cmp eax, 1
ja 0x1001e45e
mov dword [ebp - 0x580], 1
jmp 0x1001e465
and dword [ebp - 0x580], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x580]
mov dword [ebp + eax - 0xa94], ecx
mov eax, dword [ebp - 0x30]
mov dword [ebp - 0xcf8], eax
mov eax, dword [ebp - 0xa8]
mov eax, dword [ebp + eax*4 - 0xb8]
mov dword [ebp - 0xbb4], eax
mov eax, dword [ebp - 0x30]
mov eax, dword [ebp + eax*4 - 0xb8]
imul eax, dword [ebp - 0x30]
mov ecx, dword [ebp - 0x30]
cmp eax, dword [ebp + ecx*4 - 0xb8]
jle 0x1001e4ba
mov dword [ebp - 0x700], 1
jmp 0x1001e4c1
and dword [ebp - 0x700], 0
mov eax, dword [ebp - 0x30]
mov eax, dword [ebp + eax*4 - 0xb8]
cmp dword [ebp - 0x700], eax
je 0x1001e4e0
xor eax, eax
jne 0x1001e4e0
and dword [ebp - 0x588], 0
jmp 0x1001e4ea
mov dword [ebp - 0x588], 1
mov eax, dword [ebp - 0x30]
mov eax, dword [ebp + eax*4 - 0xb8]
cmp dword [ebp - 0x588], eax
jl 0x1001e508
mov dword [ebp - 0x7c0], 1
jmp 0x1001e50f
and dword [ebp - 0x7c0], 0
mov eax, dword [ebp - 0x7c0]
mov dword [ebp - 0x928], eax
jmp 0x1001e34d
jmp 0x1001e31d
jmp 0x1001e642
mov dword [ebp - 0xa00], 0x43e267a5
mov eax, dword [ebp - 0x300]
mov dword [ebp - 0xcb0], eax
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0xa94], 0
jne 0x1001e561
cmp dword [ebp - 0xa00], 0
jne 0x1001e561
and dword [ebp - 0x590], 0
jmp 0x1001e56b
mov dword [ebp - 0x590], 1
cmp dword [ebp - 0x590], 0x62b336fd
jle 0x1001e583
mov dword [ebp - 0x820], 1
jmp 0x1001e58a
and dword [ebp - 0x820], 0
mov eax, dword [ebp - 0x30]
cmp dword [ebp + eax*4 - 0xb8], 0xffffffff
jge 0x1001e5a3
mov dword [ebp - 0x708], 1
jmp 0x1001e5aa
and dword [ebp - 0x708], 0
mov eax, dword [ebp - 0x708]
sub eax, 0x23b0d726
push 4
pop ecx
imul ecx, ecx, 0
cmp eax, dword [ebp + ecx - 0xa48]
jl 0x1001e5d0
mov dword [ebp - 0x598], 1
jmp 0x1001e5d7
and dword [ebp - 0x598], 0
cmp dword [ebp - 0x598], 0xfffffffd
jle 0x1001e5ec
mov dword [ebp - 0x5a0], 1
jmp 0x1001e5f3
and dword [ebp - 0x5a0], 0
mov eax, dword [ebp - 0x820]
sub eax, dword [ebp - 0x5a0]
je 0x1001e61d
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0xa48], 0
je 0x1001e61d
mov dword [ebp - 0x710], 1
jmp 0x1001e624
and dword [ebp - 0x710], 0
mov eax, dword [ebp - 0x710]
mov dword [ebp - 0x35c], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0xa48], 0
je 0x1001e642
jmp 0x1001e647
jmp 0x1001e10a
jmp 0x1001e0a4
push 1
push 0x286a
lea eax, [ebp - 0x930]
push eax
call fcn.1001b395
add esp, 0xc
mov eax, dword [ebp - 0x40]
movzx eax, byte [ebp + eax - 0x2e0]
inc eax
mov dword [ebp - 0x164], eax
mov dword [ebp - 0x68], 0xffffffff
mov dword [ebp - 0x160], 1
mov dword [ebp - 0x1f0], 0xca5eb5a4
mov dword [ebp - 0xa04], 0xffff
mov dword [ebp - 0x9d8], 0x84c83b0f
mov dword [ebp - 0x8c], 0
jmp 0x1001e6bc
mov eax, dword [ebp - 0x8c]
inc eax
mov dword [ebp - 0x8c], eax
cmp dword [ebp - 0x8c], 3
jge 0x1001e6d8
mov eax, dword [ebp - 0x8c]
mov dword [ebp + eax*4 - 0x894], 1
jmp 0x1001e6af
mov dword [ebp - 0x8c], 0
jmp 0x1001e6f1
mov eax, dword [ebp - 0x8c]
inc eax
mov dword [ebp - 0x8c], eax
cmp dword [ebp - 0x8c], 2
jge 0x1001e70d
mov eax, dword [ebp - 0x8c]
mov dword [ebp + eax*4 - 0xa9c], 0x8610f121
jmp 0x1001e6e4
mov dword [ebp - 0x68], 2
jmp 0x1001e71d
mov eax, dword [ebp - 0x68]
dec eax
mov dword [ebp - 0x68], eax
cmp dword [ebp - 0x68], 0
jl 0x1001ea5f
mov dword [ebp - 0x90], 0xc5a654fd
mov dword [ebp - 0x308], 0xaedf47f2
mov dword [ebp - 0x90], 2
jmp 0x1001e754
mov eax, dword [ebp - 0x90]
dec eax
mov dword [ebp - 0x90], eax
cmp dword [ebp - 0x90], 0
jl 0x1001ea5a
mov dword [ebp - 0x6c], 0xa41449c9
mov dword [ebp - 0x940], 0xffffffff
mov dword [ebp - 0x6c], 2
jmp 0x1001e782
mov eax, dword [ebp - 0x6c]
dec eax
mov dword [ebp - 0x6c], eax
cmp dword [ebp - 0x6c], 0
jl 0x1001ea55
mov dword [ebp - 0x12c], 4
mov dword [ebp - 0x12c], 0
jmp 0x1001e7af
mov eax, dword [ebp - 0x12c]
inc eax
mov dword [ebp - 0x12c], eax
cmp dword [ebp - 0x12c], 2
jg 0x1001e85f
mov dword [ebp - 0x1f4], 0
jmp 0x1001e7d5
mov eax, dword [ebp - 0x1f4]
inc eax
mov dword [ebp - 0x1f4], eax
cmp dword [ebp - 0x1f4], 4
jge 0x1001e7f1
mov eax, dword [ebp - 0x1f4]
mov dword [ebp + eax*4 - 0xacc], 0x83989226
jmp 0x1001e7c8
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0x894], 0
je 0x1001e802
jmp 0x1001e85f
push 4
pop eax
imul eax, eax, 3
mov dword [ebp + eax - 0xacc], 0
jmp 0x1001e830
push 4
pop eax
imul eax, eax, 3
mov eax, dword [ebp + eax - 0xacc]
inc eax
push 4
pop ecx
imul ecx, ecx, 3
mov dword [ebp + ecx - 0xacc], eax
push 4
pop eax
imul eax, eax, 3
cmp dword [ebp + eax - 0xacc], 2
jg 0x1001e85a
mov byte [ebp - 0xc2], 0
movzx eax, byte [ebp - 0xc2]
test eax, eax
je 0x1001e858
call dword [sym.imp.KERNEL32.dll_GetCommandLineW]
jmp 0x1001e815
jmp 0x1001e7a2
mov eax, dword [ebp - 0x90]
cmp dword [ebp - 0x12c], eax
jge 0x1001e8e7
mov dword [ebp - 0x308], 0xea3d
mov eax, dword [ebp - 0x6c]
cmp dword [ebp - 0x308], eax
jl 0x1001e88e
mov dword [ebp - 0x5a8], 1
jmp 0x1001e895
and dword [ebp - 0x5a8], 0
mov eax, dword [ebp - 0x5a8]
mov dword [ebp - 0x160], eax
mov eax, dword [ebp - 0x160]
mov dword [ebp - 0xbbc], eax
mov eax, dword [ebp - 0x90]
mov dword [ebp - 0xd20], eax
mov eax, dword [ebp - 0x90]
mov dword [ebp - 0xbc4], eax
cmp dword [ebp - 0x6c], 0
jne 0x1001e8db
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x894], 0
je 0x1001e8e7
mov dword [ebp - 0x7c8], 1
jmp 0x1001e8ee
and dword [ebp - 0x7c8], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x894]
cmp eax, dword [ebp - 0x7c8]
je 0x1001e90f
mov dword [ebp - 0x5b0], 1
jmp 0x1001e916
and dword [ebp - 0x5b0], 0
cmp dword [ebp - 0x5b0], 1
jne 0x1001e92d
or eax, 0xffffffff
jne 0x1001e92d
and dword [ebp - 0x718], 0
jmp 0x1001e937
mov dword [ebp - 0x718], 1
cmp dword [ebp - 0x718], 0
jne 0x1001e94c
mov dword [ebp - 0x9d0], 1
jmp 0x1001e953
and dword [ebp - 0x9d0], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x894]
push 4
pop ecx
shl ecx, 1
add eax, dword [ebp + ecx - 0x894]
imul eax, eax, 0
mov dword [ebp - 0x5b8], eax
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x5b8]
mov dword [ebp + eax - 0x894], ecx
mov eax, dword [ebp - 0x6c]
imul eax, dword [ebp - 0x5b8]
cmp eax, dword [ebp - 0x90]
jg 0x1001e9a0
cmp dword [ebp - 0x68], 0
je 0x1001e9af
cmp dword [ebp - 0x6c], 0
jne 0x1001e9af
and dword [ebp - 0x85c], 0
jmp 0x1001e9b9
mov dword [ebp - 0x85c], 1
mov eax, dword [ebp - 0x6c]
cmp dword [ebp - 0x85c], eax
je 0x1001e9d9
cmp dword [ebp - 0x160], 0
je 0x1001e9d9
mov dword [ebp - 0x938], 1
jmp 0x1001e9e0
and dword [ebp - 0x938], 0
mov eax, dword [ebp - 0x90]
mov dword [ebp - 0xcb8], eax
mov eax, dword [ebp - 0x6c]
add eax, dword [ebp - 0x12c]
mov dword [ebp - 0x1f0], eax
mov eax, dword [ebp - 0x1f0]
mov dword [ebp - 0xbcc], eax
mov eax, dword [ebp - 0xa04]
mov dword [ebp - 0xd00], eax
mov eax, dword [ebp - 0x6c]
mov dword [ebp - 0xbd4], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xa9c]
cmp dword [ebp - 0x308], eax
jg 0x1001ea3d
mov dword [ebp - 0x5c0], 1
jmp 0x1001ea44
and dword [ebp - 0x5c0], 0
mov eax, dword [ebp - 0x5c0]
mov dword [ebp - 0x940], eax
jmp 0x1001e77b
jmp 0x1001e747
jmp 0x1001e716
mov dword [ebp - 0x68], 2
jmp 0x1001ea6f
mov eax, dword [ebp - 0x68]
dec eax
mov dword [ebp - 0x68], eax
cmp dword [ebp - 0x68], 0
jl 0x1001ec2e
mov dword [ebp - 0x5e0], 0xf75bae5b
mov dword [ebp - 0x340], 0xe414e4a4
mov eax, dword [ebp - 0x68]
mov dword [ebp + eax*4 - 0x894], 0x2b50d22
mov dword [ebp - 0x1f0], 0x2b50d22
cmp dword [ebp - 0x1f0], 0
jne 0x1001eaba
mov dword [ebp - 0x720], 1
jmp 0x1001eac1
and dword [ebp - 0x720], 0
mov eax, dword [ebp - 0x68]
cmp eax, dword [ebp - 0x720]
jne 0x1001ead8
mov dword [ebp - 0x728], 1
jmp 0x1001eadf
and dword [ebp - 0x728], 0
cmp dword [ebp - 0x5e0], 0
jne 0x1001eaef
push 2
pop eax
test eax, eax
je 0x1001eb00
or eax, 0xffffffff
je 0x1001eb00
mov dword [ebp - 0x5c8], 1
jmp 0x1001eb07
and dword [ebp - 0x5c8], 0
cmp dword [ebp - 0x5c8], 0xdff937b1
je 0x1001eb1f
mov dword [ebp - 0x7d0], 1
jmp 0x1001eb26
and dword [ebp - 0x7d0], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xa9c]
mov dword [ebp - 0x160], eax
mov eax, dword [ebp - 0x160]
cmp eax, dword [ebp - 0x7d0]
je 0x1001eb53
mov dword [ebp - 0x5d0], 1
jmp 0x1001eb5a
and dword [ebp - 0x5d0], 0
cmp dword [ebp - 0x5d0], 4
jae 0x1001eb6f
mov dword [ebp - 0x5d8], 1
jmp 0x1001eb76
and dword [ebp - 0x5d8], 0
mov eax, dword [ebp - 0x728]
imul eax, dword [ebp - 0x5d8]
test eax, eax
je 0x1001eb9e
or eax, 0xffffffff
je 0x1001eb9e
cmp dword [ebp - 0x68], 0
je 0x1001eb9e
mov dword [ebp - 0x828], 1
jmp 0x1001eba5
and dword [ebp - 0x828], 0
mov eax, dword [ebp - 0x828]
mov dword [ebp - 0x340], eax
mov eax, dword [ebp - 0x340]
cmp dword [ebp - 0x5e0], eax
jge 0x1001ebd4
cmp dword [ebp - 0x340], 0
je 0x1001ebd4
mov dword [ebp - 0x730], 1
jmp 0x1001ebdb
and dword [ebp - 0x730], 0
cmp dword [ebp - 0x730], 2
jne 0x1001ebf0
mov dword [ebp - 0x5e8], 1
jmp 0x1001ebf7
and dword [ebp - 0x5e8], 0
mov eax, dword [ebp - 0x5e8]
mov dword [ebp - 0x9d8], eax
mov byte [ebp - 0xba], 0
movzx eax, byte [ebp - 0xba]
test eax, eax
je 0x1001ec29
push 0x2976
push 1
push 0x3f52
call fcn.1001b3d4
add esp, 0xc
jmp 0x1001ea68
mov eax, dword [ebp - 0x40]
movzx eax, byte [ebp + eax - 0x2e0]
mov ecx, dword [ebp - 0x40]
lea eax, [ecx + eax - 1]
mov dword [ebp - 0x40], eax
mov dword [ebp - 0x1f8], 0xffffffff
mov dword [ebp - 0x230], 0
jmp 0x1001ec66
mov eax, dword [ebp - 0x230]
inc eax
mov dword [ebp - 0x230], eax
cmp dword [ebp - 0x230], 2
jge 0x1001ec82
mov eax, dword [ebp - 0x230]
mov dword [ebp + eax*4 - 0xbfc], 6
jmp 0x1001ec59
mov dword [ebp - 0x1f8], 0
jmp 0x1001ec9b
mov eax, dword [ebp - 0x1f8]
dec eax
mov dword [ebp - 0x1f8], eax
cmp dword [ebp - 0x1f8], 0xfffffff5
je 0x1001ed37
mov dword [ebp - 0x254], 0xfffffffc
mov byte [ebp - 0xc6], 0
push 0x3e5d
lea eax, [ebp - 0xc6]
push eax
push 0
call fcn.1001b473
add esp, 0xc
mov dword [ebp - 0x254], 0xfffffffd
jmp 0x1001ece8
mov eax, dword [ebp - 0x254]
dec eax
mov dword [ebp - 0x254], eax
cmp dword [ebp - 0x254], 0xfffffff8
jle 0x1001ed32
mov dword [ebp - 0x144], 0x351cdcb3
mov dword [ebp - 0x144], 0
jmp 0x1001ed14
mov eax, dword [ebp - 0x144]
inc eax
mov dword [ebp - 0x144], eax
cmp dword [ebp - 0x144], 2
jge 0x1001ed30
mov eax, dword [ebp - 0x144]
mov dword [ebp + eax*4 - 0xbfc], 0xf9e923e6
jmp 0x1001ed07
jmp 0x1001ecdb
jmp 0x1001ec8e
jmp 0x1001df6d
mov dword [ebp - 0x28], 0x3838a1f9
mov dword [ebp - 0x368], 0xd50f82ba
mov dword [ebp - 0x414], 0x8dacb314
mov dword [ebp - 0x134], 0xffffffff
mov dword [ebp - 0x41c], 0
mov dword [ebp - 0x4c], 0
jmp 0x1001ed7b
mov eax, dword [ebp - 0x4c]
inc eax
mov dword [ebp - 0x4c], eax
cmp dword [ebp - 0x4c], 1
jge 0x1001ed8e
mov eax, dword [ebp - 0x4c]
mov dword [ebp + eax*4 - 0x60], 1
jmp 0x1001ed74
mov dword [ebp - 0x4c], 0
jmp 0x1001ed9e
mov eax, dword [ebp - 0x4c]
inc eax
mov dword [ebp - 0x4c], eax
cmp dword [ebp - 0x4c], 2
jge 0x1001edb4
mov eax, dword [ebp - 0x4c]
mov dword [ebp + eax*4 - 0x838], 0xcd8491f1
jmp 0x1001ed97
mov dword [ebp - 0x4c], 0
jmp 0x1001edc4
mov eax, dword [ebp - 0x4c]
inc eax
mov dword [ebp - 0x4c], eax
cmp dword [ebp - 0x4c], 3
jge 0x1001edda
mov eax, dword [ebp - 0x4c]
mov dword [ebp + eax*4 - 0xc98], 0x3a031552
jmp 0x1001edbd
mov dword [ebp - 0x28], 0
jmp 0x1001edea
mov eax, dword [ebp - 0x28]
inc eax
mov dword [ebp - 0x28], eax
cmp dword [ebp - 0x28], 0
jg 0x1001f3e0
mov dword [ebp - 0x124], 0xfffffff7
mov dword [ebp - 0x310], 1
mov dword [ebp - 0xe8], 0xc0c7fd57
mov dword [ebp - 0x318], 0
mov dword [ebp - 0x830], 0xb87c2657
mov dword [ebp - 0x200], 0
jmp 0x1001ee3f
mov eax, dword [ebp - 0x200]
inc eax
mov dword [ebp - 0x200], eax
cmp dword [ebp - 0x200], 3
jge 0x1001ee5b
mov eax, dword [ebp - 0x200]
mov dword [ebp + eax*4 - 0xc88], 0xf30385d
jmp 0x1001ee32
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp + eax*4 - 0x60]
sub eax, dword [ebp - 0x368]
jne 0x1001ee7c
mov eax, 0x626a
test eax, eax
jne 0x1001ee7c
and dword [ebp - 0x7d8], 0
jmp 0x1001ee86
mov dword [ebp - 0x7d8], 1
mov eax, dword [ebp - 0x7d8]
neg eax
cmp eax, 0xe177c422
ja 0x1001eea1
mov dword [ebp - 0x948], 1
jmp 0x1001eea8
and dword [ebp - 0x948], 0
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp + eax*4 - 0x60]
mov dword [ebp - 0xc10], eax
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x28]
mov ecx, dword [ebp + ecx*4 - 0x60]
cmp dword [ebp + eax*4 - 0x60], ecx
jne 0x1001eed1
mov dword [ebp - 0x5f0], 1
jmp 0x1001eed8
and dword [ebp - 0x5f0], 0
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp + eax*4 - 0x60]
mov dword [ebp - 0x124], eax
mov eax, dword [ebp - 0x124]
cmp eax, dword [ebp - 0x5f0]
jne 0x1001eeff
mov dword [ebp - 0x738], 1
jmp 0x1001ef06
and dword [ebp - 0x738], 0
cmp dword [ebp - 0x738], 0x1d99
jne 0x1001ef24
cmp dword [ebp - 0x414], 0
jne 0x1001ef24
and dword [ebp - 0xa08], 0
jmp 0x1001ef2e
mov dword [ebp - 0xa08], 1
mov eax, dword [ebp - 0x28]
mov dword [ebp - 0x5f8], eax
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x5f8]
mov dword [ebp + eax - 0xc88], ecx
cmp dword [ebp - 0x5f8], 0x1fd9
jg 0x1001ef62
mov dword [ebp - 0x864], 1
jmp 0x1001ef69
and dword [ebp - 0x864], 0
cmp dword [ebp - 0x864], 0x9c01
je 0x1001ef81
mov dword [ebp - 0x600], 1
jmp 0x1001ef88
and dword [ebp - 0x600], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x838]
cmp dword [ebp - 0x600], eax
jge 0x1001efa9
mov dword [ebp - 0x740], 1
jmp 0x1001efb0
and dword [ebp - 0x740], 0
mov eax, dword [ebp - 0x368]
add eax, dword [ebp - 0x740]
cmp eax, 3
jg 0x1001efcd
mov dword [ebp - 0x608], 1
jmp 0x1001efd4
and dword [ebp - 0x608], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x60]
cmp dword [ebp - 0x608], eax
jl 0x1001eff2
mov dword [ebp - 0x7e0], 1
jmp 0x1001eff9
and dword [ebp - 0x7e0], 0
mov eax, dword [ebp - 0x7e0]
mov dword [ebp - 0x310], eax
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp + eax*4 - 0x60]
cmp dword [ebp - 0x310], eax
jle 0x1001f020
mov dword [ebp - 0x610], 1
jmp 0x1001f027
and dword [ebp - 0x610], 0
mov eax, dword [ebp - 0x610]
mov dword [ebp - 0xe8], eax
mov eax, dword [ebp - 0xe8]
mov dword [ebp - 0x318], eax
cmp dword [ebp - 0x318], 1
jbe 0x1001f054
mov dword [ebp - 0x748], 1
jmp 0x1001f05b
and dword [ebp - 0x748], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x838]
cmp dword [ebp - 0x748], eax
jg 0x1001f07c
mov dword [ebp - 0x950], 1
jmp 0x1001f083
and dword [ebp - 0x950], 0
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp + eax*4 - 0x60]
mov dword [ebp - 0xbdc], eax
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp + eax*4 - 0x60]
mov dword [ebp - 0xc18], eax
mov eax, dword [ebp - 0x310]
mov dword [ebp - 0x830], eax
cmp dword [ebp - 0x28], 0
jne 0x1001f167
cmp dword [ebp - 0x368], 0
jne 0x1001f0ce
cmp dword [ebp - 0x318], 0
jne 0x1001f0ce
and dword [ebp - 0x618], 0
jmp 0x1001f0d8
mov dword [ebp - 0x618], 1
cmp dword [ebp - 0x618], 0x2b6
jge 0x1001f0f0
mov dword [ebp - 0x620], 1
jmp 0x1001f0f7
and dword [ebp - 0x620], 0
mov eax, dword [ebp - 0x830]
cmp eax, dword [ebp - 0x620]
je 0x1001f111
mov dword [ebp - 0x750], 1
jmp 0x1001f118
and dword [ebp - 0x750], 0
cmp dword [ebp - 0x750], 0x9b2b2933
je 0x1001f130
mov dword [ebp - 0x628], 1
jmp 0x1001f137
and dword [ebp - 0x628], 0
mov eax, dword [ebp - 0x28]
cmp eax, dword [ebp - 0x628]
jl 0x1001f14e
mov dword [ebp - 0x7e8], 1
jmp 0x1001f155
and dword [ebp - 0x7e8], 0
cmp dword [ebp - 0x7e8], 1
jle 0x1001f167
and dword [ebp - 0x9e0], 0
jmp 0x1001f171
mov dword [ebp - 0x9e0], 1
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp + eax*4 - 0x60]
mov dword [ebp - 0x630], eax
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x630]
mov dword [ebp + eax - 0x838], ecx
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x60]
cmp dword [ebp - 0x630], eax
jle 0x1001f221
mov dword [ebp - 0x124], 4
jmp 0x1001f1bc
mov eax, dword [ebp - 0x124]
dec eax
mov dword [ebp - 0x124], eax
cmp dword [ebp - 0x124], 0xffffffea
jge 0x1001f1e7
mov dword [ebp - 0x958], 0xe194e406
lea eax, [ebp - 0x958]
push eax
push 1
push 0x764d
call fcn.1001b431
add esp, 0xc
jmp 0x1001f1af
mov dword [ebp - 0xe8], 0
jmp 0x1001f200
mov eax, dword [ebp - 0xe8]
inc eax
mov dword [ebp - 0xe8], eax
cmp dword [ebp - 0xe8], 2
jge 0x1001f21c
mov eax, dword [ebp - 0xe8]
mov dword [ebp + eax*4 - 0x838], 0xfffffffd
jmp 0x1001f1f3
jmp 0x1001f3db
mov dword [ebp - 0x23c], 0x76e3b61e
mov dword [ebp - 0x648], 1
mov dword [ebp - 0xbe8], 1
cmp dword [ebp - 0x23c], 0xa6f2
jle 0x1001f257
mov dword [ebp - 0x758], 1
jmp 0x1001f25e
and dword [ebp - 0x758], 0
push 4
pop eax
shl eax, 0
mov dword [ebp + eax - 0x838], 0x9334
cmp dword [ebp - 0x758], 0x9334
jge 0x1001f287
mov dword [ebp - 0x638], 1
jmp 0x1001f28e
and dword [ebp - 0x638], 0
cmp dword [ebp - 0x638], 0xffffffff
jle 0x1001f2a3
mov dword [ebp - 0x86c], 1
jmp 0x1001f2aa
and dword [ebp - 0x86c], 0
imul eax, dword [ebp - 0x86c], 0xb1c
sub eax, dword [ebp - 0x28]
imul eax, dword [ebp - 0x23c]
imul eax, eax, 0xfff6
test eax, eax
je 0x1001f2de
mov eax, dword [ebp - 0x28]
cmp dword [ebp + eax*4 - 0x60], 0
je 0x1001f2de
mov dword [ebp - 0x640], 1
jmp 0x1001f2e5
and dword [ebp - 0x640], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0xc88]
cmp dword [ebp - 0x640], eax
je 0x1001f306
mov dword [ebp - 0x760], 1
jmp 0x1001f30d
and dword [ebp - 0x760], 0
imul eax, dword [ebp - 0x760], 0
mov dword [ebp - 0x134], eax
mov eax, dword [ebp - 0x134]
mov dword [ebp - 0xc20], eax
mov eax, dword [ebp - 0x23c]
mov dword [ebp - 0xbf4], eax
mov eax, dword [ebp - 0x23c]
mov dword [ebp - 0x648], eax
cmp dword [ebp - 0x648], 0xffff
je 0x1001f356
mov dword [ebp - 0xa0c], 1
jmp 0x1001f35d
and dword [ebp - 0xa0c], 0
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp + eax*4 - 0x60]
inc eax
mov dword [ebp - 0x41c], eax
mov dword [ebp - 0x134], 2
jmp 0x1001f384
cmp dword [ebp - 0x134], 0
jl 0x1001f3db
jmp 0x1001ede3
mov eax, dword [ebp - 0x414]
mov dword [ebp - 0x41c], eax
mov eax, dword [ebp - 0x40]
movzx eax, byte [ebp + eax - 0x2df]
mov ecx, dword [ebp - 0x40]
sub ecx, dword [ebp - 0x164]
movzx ecx, byte [ebp + ecx - 0x2e2]
movzx ecx, word [ebp + ecx*2 - 0xb28]
add eax, ecx
mov ecx, dword [ebp - 0x40]
movzx ecx, byte [ebp + ecx - 0x2df]
mov edx, dword [ebp - 0x40]
sub edx, dword [ebp - 0x164]
movzx edx, byte [ebp + edx - 0x2e2]
movzx edx, word [ebp + edx*2 - 0xb28]
and ecx, edx
sub eax, ecx
mov ecx, dword [ebp - 0x40]
movzx ecx, byte [ebp + ecx - 0x2df]
mov edx, dword [ebp - 0x40]
sub edx, dword [ebp - 0x164]
movzx edx, byte [ebp + edx - 0x2e2]
movzx edx, word [ebp + edx*2 - 0xb28]
and ecx, edx
sub eax, ecx
mov ecx, dword [ebp - 0x40]
movzx ecx, byte [ebp + ecx - 0x2e0]
mov word [ebp + ecx*2 - 0xb28], ax
mov dword [ebp - 0xc30], 0
mov byte [ebp - 0xd9], 0
movzx eax, byte [ebp - 0xd9]
test eax, eax
je 0x1001f49f
push 1
push 0x2675
call fcn.1001b4ca
pop ecx
pop ecx
mov byte [ebp - 0xca], 0
push 1
lea eax, [ebp - 0xca]
push eax
call fcn.1001b513
pop ecx
pop ecx
lea eax, [ebp - 0x164]
push eax
push 1
call fcn.1001b554
pop ecx
pop ecx
jmp 0x1001df6d
mov dword [ebp - 0x208], 0
jmp 0x1001f4e4
mov eax, dword [ebp - 0x208]
inc eax
mov dword [ebp - 0x208], eax
cmp dword [ebp - 0x208], 2
jge 0x1001f500
mov eax, dword [ebp - 0x208]
mov dword [ebp + eax*4 - 0x2e8], 0x571177e8
jmp 0x1001f4d7
push 4
pop eax
shl eax, 0
mov dword [ebp + eax - 0x2e8], 0xfffffff9
jmp 0x1001f52e
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x2e8]
inc eax
push 4
pop ecx
shl ecx, 0
mov dword [ebp + ecx - 0x2e8], eax
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x2e8], 0x14
jge 0x1001f773
mov dword [ebp - 0x34], 0xc0d37ad4
mov dword [ebp - 0x264], 0
jmp 0x1001f562
mov eax, dword [ebp - 0x264]
inc eax
mov dword [ebp - 0x264], eax
cmp dword [ebp - 0x264], 1
jge 0x1001f57e
mov eax, dword [ebp - 0x264]
mov dword [ebp + eax*4 - 0x118], 1
jmp 0x1001f555
mov dword [ebp - 0x34], 0
jmp 0x1001f58e
mov eax, dword [ebp - 0x34]
dec eax
mov dword [ebp - 0x34], eax
cmp dword [ebp - 0x34], 0
jl 0x1001f748
mov dword [ebp - 0x434], 0x989d221e
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x34]
mov ecx, dword [ebp + ecx*4 - 0x118]
cmp dword [ebp + eax - 0x118], ecx
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x118], 0
jne 0x1001f5d5
mov dword [ebp - 0x424], 1
jmp 0x1001f5dc
and dword [ebp - 0x424], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x2e8]
cmp eax, dword [ebp - 0x424]
jne 0x1001f5fd
mov dword [ebp - 0x42c], 1
jmp 0x1001f604
and dword [ebp - 0x42c], 0
mov eax, dword [ebp - 0x34]
imul eax, dword [ebp - 0x42c]
cmp eax, 0xfffffff6
jne 0x1001f61f
mov dword [ebp - 0x43c], 1
jmp 0x1001f626
and dword [ebp - 0x43c], 0
mov dword [ebp - 0x434], 0
mov eax, dword [ebp - 0x434]
mov ecx, dword [ebp - 0x34]
mov ecx, dword [ebp + ecx*4 - 0x118]
imul ecx, dword [ebp - 0x43c]
imul eax, ecx
cmp eax, dword [ebp - 0x34]
jge 0x1001f65b
mov dword [ebp - 0x444], 1
jmp 0x1001f662
and dword [ebp - 0x444], 0
mov eax, dword [ebp - 0x34]
mov eax, dword [ebp + eax*4 - 0x118]
cmp dword [ebp - 0x444], eax
je 0x1001f68e
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x2e8], 0
je 0x1001f689
jmp 0x1001f748
jmp 0x1001f743
mov dword [ebp - 0x348], 0x5ba5616d
mov eax, dword [ebp - 0x34]
cmp dword [ebp - 0x34], eax
jne 0x1001f6ac
mov dword [ebp - 0x44c], 1
jmp 0x1001f6b3
and dword [ebp - 0x44c], 0
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x2e8], 0xaa3e
jge 0x1001f6d2
mov dword [ebp - 0x454], 1
jmp 0x1001f6d9
and dword [ebp - 0x454], 0
mov eax, dword [ebp - 0x44c]
cmp eax, dword [ebp - 0x454]
jl 0x1001f6f8
xor eax, eax
inc eax
je 0x1001f6f8
mov dword [ebp - 0x45c], 1
jmp 0x1001f6ff
and dword [ebp - 0x45c], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x34]
imul ecx, dword [ebp - 0x45c]
cmp dword [ebp + eax - 0x2e8], ecx
jle 0x1001f724
mov dword [ebp - 0x464], 1
jmp 0x1001f72b
and dword [ebp - 0x464], 0
mov eax, dword [ebp - 0x464]
mov dword [ebp - 0x348], eax
mov eax, dword [ebp - 0x348]
mov dword [ebp - 0x348], eax
jmp 0x1001f587
mov dword [ebp - 0x34], 0
jmp 0x1001f758
mov eax, dword [ebp - 0x34]
inc eax
mov dword [ebp - 0x34], eax
cmp dword [ebp - 0x34], 1
jge 0x1001f76e
mov eax, dword [ebp - 0x34]
mov dword [ebp + eax*4 - 0x118], 0xed6c
jmp 0x1001f751
jmp 0x1001f513
push 2
pop eax
imul eax, eax, 0xc
xor ecx, ecx
mov word [ebp + eax - 0xb28], cx
mov dword [ebp - 0x50], 0xfffffff6
mov dword [ebp - 0x154], 0
mov dword [ebp - 0x4a4], 7
mov dword [ebp - 0x970], 0xfffa
mov eax, dword [ebp - 0x50]
mov dword [ebp - 0xc0c], eax
mov eax, dword [ebp - 0x50]
inc eax
cmp eax, dword [ebp - 0x50]
jne 0x1001f7c6
mov dword [ebp - 0x390], 1
jmp 0x1001f7cd
and dword [ebp - 0x390], 0
mov eax, dword [ebp - 0x50]
cmp eax, dword [ebp - 0x390]
jle 0x1001f7e4
mov dword [ebp - 0x474], 1
jmp 0x1001f7eb
and dword [ebp - 0x474], 0
mov eax, dword [ebp - 0x50]
mov dword [ebp - 0x154], eax
mov eax, dword [ebp - 0x154]
sub eax, dword [ebp - 0x474]
cmp dword [ebp - 0x50], eax
jge 0x1001f811
mov dword [ebp - 0x960], 1
jmp 0x1001f818
and dword [ebp - 0x960], 0
xor eax, eax
inc eax
je 0x1001f83f
cmp dword [ebp - 0x50], 0
je 0x1001f83f
mov dword [ebp - 0x47c], 0xefa5f9c7
mov eax, dword [ebp - 0x47c]
inc eax
mov dword [ebp - 0x47c], eax
jmp 0x1001fa8c
mov dword [ebp - 0x484], 0x6e8f5917
mov dword [ebp - 0x120], 1
mov dword [ebp - 0x80], 0
jmp 0x1001f863
mov eax, dword [ebp - 0x80]
inc eax
mov dword [ebp - 0x80], eax
cmp dword [ebp - 0x80], 4
jge 0x1001f879
mov eax, dword [ebp - 0x80]
mov dword [ebp + eax*4 - 0xda4], 0xfffd
jmp 0x1001f85c
mov dword [ebp - 0x80], 0
jmp 0x1001f889
mov eax, dword [ebp - 0x80]
inc eax
mov dword [ebp - 0x80], eax
cmp dword [ebp - 0x80], 3
jge 0x1001f89f
mov eax, dword [ebp - 0x80]
mov dword [ebp + eax*4 - 0xd8c], 0xd0127420
jmp 0x1001f882
mov byte [ebp - 0x109], 0
movzx eax, byte [ebp - 0x109]
test eax, eax
je 0x1001f8c0
push 0x13de
push 0
push 0
call dword [sym.imp.KERNEL32.dll_VirtualQuery]
push 3
pop eax
test eax, eax
je 0x1001f8f7
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0xda4], 0x83bc1b0f
mov dword [ebp - 0x484], 0x83bc1b0f
cmp dword [ebp - 0x484], 0
je 0x1001f8f7
mov dword [ebp - 0x9e8], 1
jmp 0x1001f8fe
and dword [ebp - 0x9e8], 0
cmp dword [ebp - 0x50], 0
je 0x1001f923
mov dword [ebp - 0x154], 3
cmp dword [ebp - 0x154], 0
je 0x1001f923
mov dword [ebp - 0x48c], 1
jmp 0x1001f92a
and dword [ebp - 0x48c], 0
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x48c]
mov dword [ebp + eax - 0xd8c], ecx
mov eax, dword [ebp - 0x120]
mov dword [ebp - 0xc38], eax
cmp dword [ebp - 0x50], 9
jbe 0x1001f95b
mov dword [ebp - 0x494], 1
jmp 0x1001f962
and dword [ebp - 0x494], 0
mov eax, dword [ebp - 0x120]
cmp dword [ebp - 0x494], eax
jge 0x1001f97c
mov dword [ebp - 0x968], 1
jmp 0x1001f983
and dword [ebp - 0x968], 0
mov eax, dword [ebp - 0x120]
mov dword [ebp - 0xc40], eax
mov eax, dword [ebp - 0x120]
cmp dword [ebp - 0x50], eax
jge 0x1001f9a6
mov dword [ebp - 0x49c], 1
jmp 0x1001f9ad
and dword [ebp - 0x49c], 0
mov eax, dword [ebp - 0x49c]
mov dword [ebp - 0x4a4], eax
mov eax, dword [ebp - 0x50]
cmp dword [ebp - 0x4a4], eax
jle 0x1001f9d0
mov dword [ebp - 0x4ac], 1
jmp 0x1001f9d7
and dword [ebp - 0x4ac], 0
mov eax, dword [ebp - 0x50]
cmp dword [ebp - 0x4ac], eax
jne 0x1001f9ee
mov dword [ebp - 0x4b4], 1
jmp 0x1001f9f5
and dword [ebp - 0x4b4], 0
mov eax, dword [ebp - 0x4b4]
inc eax
cmp eax, dword [ebp - 0x50]
je 0x1001fa14
push 8
pop eax
test eax, eax
je 0x1001fa14
mov dword [ebp - 0xa1c], 1
jmp 0x1001fa1b
and dword [ebp - 0xa1c], 0
cmp dword [ebp - 0x970], 0xfffffffe
je 0x1001fa30
mov dword [ebp - 0x4bc], 1
jmp 0x1001fa37
and dword [ebp - 0x4bc], 0
mov eax, dword [ebp - 0x120]
cmp dword [ebp - 0x4bc], eax
jle 0x1001fa51
mov dword [ebp - 0x4c4], 1
jmp 0x1001fa58
and dword [ebp - 0x4c4], 0
cmp dword [ebp - 0x4c4], 0xf4f2
jge 0x1001fa70
mov dword [ebp - 0x9a4], 1
jmp 0x1001fa77
and dword [ebp - 0x9a4], 0
mov eax, dword [ebp - 0x50]
mov dword [ebp - 0xcc0], eax
mov eax, dword [ebp - 0x154]
mov dword [ebp - 0x120], eax
lea eax, [ebp - 0xb28]
push eax
lea ecx, [ebp - 0xe28]
call fcn.10023882
mov dword [ebp - 0x978], eax
mov eax, dword [ebp - 0x978]
mov dword [ebp - 0x9ac], eax
mov byte [ebp - 4], 2
push dword [ebp - 0x9ac]
call fcn.10019a02
pop ecx
mov dword [ebp - 0x6cc], eax
mov byte [ebp - 4], 1
lea ecx, [ebp - 0xe28]
call fcn.10016705
mov dword [ebp - 0x64], 0xfffffff9
mov dword [ebp - 0xf0], 0x5ebd
mov dword [ebp - 0x174], 0x9e62b560
mov dword [ebp - 0x988], 0xfffffffe
mov dword [ebp - 0x84], 0
jmp 0x1001fb13
mov eax, dword [ebp - 0x84]
inc eax
mov dword [ebp - 0x84], eax
cmp dword [ebp - 0x84], 3
jge 0x1001fb2f
mov eax, dword [ebp - 0x84]
mov dword [ebp + eax*4 - 0x374], 0xe672
jmp 0x1001fb06
mov dword [ebp - 0x84], 0
jmp 0x1001fb48
mov eax, dword [ebp - 0x84]
inc eax
mov dword [ebp - 0x84], eax
cmp dword [ebp - 0x84], 1
jge 0x1001fb64
mov eax, dword [ebp - 0x84]
mov dword [ebp + eax*4 - 0x360], 0xadf1adb2
jmp 0x1001fb3b
xor eax, eax
jne 0x1001fbb6
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x374]
mov dword [ebp - 0x64], eax
cmp dword [ebp - 0x64], 0
jne 0x1001fb8a
mov dword [ebp - 0x320], 1
jmp 0x1001fb91
and dword [ebp - 0x320], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x320]
mov dword [ebp + eax - 0x360], ecx
cmp dword [ebp - 0x320], 0
jne 0x1001fbb6
and dword [ebp - 0x980], 0
jmp 0x1001fbc0
mov dword [ebp - 0x980], 1
push 4
pop eax
shl eax, 0
push 4
pop ecx
shl ecx, 1
mov ecx, dword [ebp + ecx - 0x374]
cmp dword [ebp + eax - 0x374], ecx
jge 0x1001fbe7
mov dword [ebp - 0x4e4], 1
jmp 0x1001fbee
and dword [ebp - 0x4e4], 0
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x374], 0xffffffff
jg 0x1001fc0a
mov dword [ebp - 0x4cc], 1
jmp 0x1001fc11
and dword [ebp - 0x4cc], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x4cc]
sub ecx, dword [ebp + eax - 0x374]
jne 0x1001fc36
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x374], 0
je 0x1001fc4b
mov eax, 0xffff
test eax, eax
je 0x1001fc4b
mov dword [ebp - 0x4d4], 1
jmp 0x1001fc52
and dword [ebp - 0x4d4], 0
cmp dword [ebp - 0x4d4], 0
jbe 0x1001fc67
mov dword [ebp - 0x4dc], 1
jmp 0x1001fc6e
and dword [ebp - 0x4dc], 0
mov eax, dword [ebp - 0xf0]
cmp dword [ebp - 0x4dc], eax
jge 0x1001fc91
cmp dword [ebp - 0xf0], 0
je 0x1001fc91
mov dword [ebp - 0x4ec], 1
jmp 0x1001fc98
and dword [ebp - 0x4ec], 0
mov eax, dword [ebp - 0x4e4]
sub eax, dword [ebp - 0x4ec]
push 4
pop ecx
shl ecx, 0
cmp eax, dword [ebp + ecx - 0x374]
jge 0x1001fcbf
mov dword [ebp - 0x9b4], 1
jmp 0x1001fcc6
and dword [ebp - 0x9b4], 0
cmp dword [ebp - 0xf0], 0xffffffff
jbe 0x1001fcdb
mov dword [ebp - 0x204], 0
jmp 0x100212d9
mov eax, dword [ebp - 0x204]
inc eax
mov dword [ebp - 0x204], eax
cmp dword [ebp - 0x204], 4
jge 0x100212f5
mov eax, dword [ebp - 0x204]
mov dword [ebp + eax*4 - 0xd58], 1
jmp 0x100212cc
push 4
pop eax
imul eax, eax, 3
cmp dword [ebp + eax - 0xd58], 0
je 0x100214c1
mov dword [ebp - 0x20c], 0x4964a53a
mov dword [ebp - 0x2f8], 0xffffffff
mov dword [ebp - 0x904], 1
mov dword [ebp - 0x20c], 0xffffffe7
jmp 0x10021340
mov eax, dword [ebp - 0x20c]
dec eax
mov dword [ebp - 0x20c], eax
cmp dword [ebp - 0x20c], 0xffffffe4
jle 0x100214bf
mov dword [ebp - 0x21c], 0x10fe
mov dword [ebp - 0xb0c], 1
mov dword [ebp - 0xb08], 1
mov dword [ebp - 0xb04], 1
mov dword [ebp - 0xb00], 1
mov dword [ebp - 0x6dc], 0
mov dword [ebp - 0x214], 0
jmp 0x100213a2
mov eax, dword [ebp - 0x214]
inc eax
mov dword [ebp - 0x214], eax
cmp dword [ebp - 0x214], 4
jge 0x100213be
mov eax, dword [ebp - 0x214]
mov dword [ebp + eax*4 - 0xdb4], 0xffffffff
jmp 0x10021395
mov eax, dword [ebp - 0x21c]
mov dword [ebp - 0x2f8], eax
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x2f8]
add ecx, dword [ebp + eax - 0xd58]
mov dword [ebp - 0x6d4], ecx
push 4
pop eax
shl eax, 1
mov ecx, dword [ebp - 0x6d4]
mov dword [ebp + eax - 0xb0c], ecx
mov eax, dword [ebp - 0x6d4]
mov dword [ebp - 0x6dc], eax
imul eax, dword [ebp - 0x6dc], 0xc752
add eax, dword [ebp - 0x21c]
jne 0x10021425
cmp dword [ebp - 0x2f8], 0
jne 0x10021425
and dword [ebp - 0x6e4], 0
jmp 0x1002142f
mov dword [ebp - 0x6e4], 1
mov eax, dword [ebp - 0x21c]
cmp eax, dword [ebp - 0x6e4]
jne 0x10021449
mov dword [ebp - 0x6ec], 1
jmp 0x10021450
and dword [ebp - 0x6ec], 0
mov eax, dword [ebp - 0x21c]
cmp dword [ebp - 0x6ec], eax
jl 0x1002146f
xor eax, eax
inc eax
je 0x1002146f
mov dword [ebp - 0x6f4], 1
jmp 0x10021476
and dword [ebp - 0x6f4], 0
push 4
pop eax
imul eax, eax, 3
mov ecx, dword [ebp - 0x6f4]
mov dword [ebp + eax - 0xdb4], ecx
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0xd58], 0xe7ad
jg 0x100214a7
mov dword [ebp - 0x6fc], 1
jmp 0x100214ae
and dword [ebp - 0x6fc], 0
mov eax, dword [ebp - 0x6fc]
mov dword [ebp - 0x904], eax
jmp 0x10021333
jmp 0x10021524
mov dword [ebp - 0x224], 0x7d96711d
mov dword [ebp - 0x224], 0
jmp 0x100214e4
mov eax, dword [ebp - 0x224]
inc eax
mov dword [ebp - 0x224], eax
cmp dword [ebp - 0x224], 0x1c
jne 0x10021524
mov byte [ebp - 0xb9], 0
movzx eax, byte [ebp - 0xb9]
test eax, eax
je 0x10021522
push 0x5d6d
push 0x6416
push 0x220
push 0x2a50
push 1
push 0x5593
call fcn.1001b747
add esp, 0x18
jmp 0x100214d7
cmp dword [0x10cb53fc], 0
je 0x10021542
mov ecx, dword [ebp + 8]
call fcn.100238a7
push eax
call dword [0x10cb53fc]
mov dword [ebp - 0x128], eax
cmp dword [ebp - 0x128], 0
je 0x1002158b
movzx eax, byte [0x10cb5406]
test eax, eax
je 0x10021567
mov ecx, 0x10cb54e0
call fcn.10023930
movzx eax, al
test eax, eax
jne 0x1002158b
lea eax, [ebp - 0x704]
push eax
lea eax, [ebp - 0x128]
push eax
push 0x10cb54e0
push 1
call fcn.1001b81d
add esp, 0x10
mov byte [0x10cb5406], 1
mov dword [ebp - 0x70], 0xe1757117
mov dword [ebp - 0x1ac], 0xffffffff
mov dword [ebp - 0x158], 0xb7d4763c
mov dword [ebp - 0x1bc], 0xa04a8f9
mov dword [ebp - 0x31c], 0x17e5c3e0
mov dword [ebp - 0x22c], 0
jmp 0x100215d3
mov eax, dword [ebp - 0x22c]
inc eax
mov dword [ebp - 0x22c], eax
cmp dword [ebp - 0x22c], 1
jge 0x100215ef
mov eax, dword [ebp - 0x22c]
mov dword [ebp + eax*4 - 0x108], 0x656d4c01
jmp 0x100215c6
mov dword [ebp - 0x70], 0xfffffff0
jmp 0x100215ff
mov eax, dword [ebp - 0x70]
inc eax
mov dword [ebp - 0x70], eax
cmp dword [ebp - 0x70], 0xe
jle 0x10021c94
mov dword [ebp - 0x3d4], 0xf9e923e6
mov dword [ebp - 0x140], 0x495231fb
mov dword [ebp - 0x1b4], 0x56c37fc0
mov dword [ebp - 0x93c], 0xe5950169
mov dword [ebp - 0x3a4], 0x55be9843
mov dword [ebp - 0x150], 0x3205e60d
mov dword [ebp - 0xb48], 0
mov dword [ebp - 0x94c], 0xa60d4e02
mov dword [ebp - 0xb50], 0x2820a3d
mov dword [ebp - 0x30c], 0x85ca7dbc
mov dword [ebp - 0x92c], 0xba6c15a2
mov dword [ebp - 0x1a4], 0
jmp 0x10021690
mov eax, dword [ebp - 0x1a4]
inc eax
mov dword [ebp - 0x1a4], eax
cmp dword [ebp - 0x1a4], 1
jge 0x100216ac
mov eax, dword [ebp - 0x1a4]
mov dword [ebp + eax*4 - 0x944], 0x6ab81d4
jmp 0x10021683
mov eax, dword [ebp - 0x3d4]
mov dword [ebp - 0x1ac], eax
mov eax, 0xb441
test eax, eax
je 0x100216fa
cmp dword [ebp - 0x70], 0
jne 0x100216d6
cmp dword [ebp - 0x70], 0
jne 0x100216d6
and dword [ebp - 0x70c], 0
jmp 0x100216e0
mov dword [ebp - 0x70c], 1
mov eax, dword [ebp - 0x140]
cmp dword [ebp - 0x70c], eax
jne 0x100216fa
mov dword [ebp - 0x714], 1
jmp 0x10021701
and dword [ebp - 0x714], 0
mov eax, dword [ebp - 0x140]
imul eax, dword [ebp - 0x714]
cmp eax, dword [ebp - 0x70]
jl 0x1002171f
mov dword [ebp - 0x71c], 1
jmp 0x10021726
and dword [ebp - 0x71c], 0
mov eax, dword [ebp - 0x71c]
mov dword [ebp - 0x1b4], eax
mov eax, dword [ebp - 0x1b4]
cmp dword [ebp - 0x70], eax
jl 0x10021744
cmp dword [ebp - 0x1b4], 0
mov eax, 0x8e2294bb
cmp eax, 0x9d2e819d
jbe 0x1002175c
mov dword [ebp - 0x724], 1
jmp 0x10021763
and dword [ebp - 0x724], 0
mov eax, dword [ebp - 0x1ac]
mov dword [ebp - 0x1ac], eax
mov eax, dword [ebp - 0x1ac]
cmp eax, dword [ebp - 0x724]
je 0x10021789
mov dword [ebp - 0x72c], 1
jmp 0x10021790
and dword [ebp - 0x72c], 0
mov eax, dword [ebp - 0x70]
imul eax, dword [ebp - 0x72c]
sub eax, 6
cmp eax, 0x66b
jge 0x10021b12
mov dword [ebp - 0x3cc], 0xfffffffa
mov dword [ebp - 0xa84], 0xfffffffd
mov dword [ebp - 0xa80], 0xfffffffd
mov dword [ebp - 0xa7c], 0xfffffffd
mov dword [ebp - 0xa78], 0xfffffffd
mov dword [ebp - 0xb58], 0xffffffff
mov dword [ebp - 0x304], 0x23a55a41
mov dword [ebp - 0x2fc], 0x6c4949f7
mov dword [ebp - 0x314], 0xfe0f9cc3
mov eax, dword [ebp - 0x2fc]
mov dword [ebp - 0x90c], eax
mov eax, dword [ebp - 0x2fc]
dec eax
mov dword [ebp - 0x2fc], eax
cmp dword [ebp - 0x90c], 0
jne 0x10021830
mov dword [ebp - 0x734], 1
jmp 0x10021837
and dword [ebp - 0x734], 0
mov eax, dword [ebp - 0x140]
cmp dword [ebp - 0x734], eax
jne 0x10021851
mov dword [ebp - 0x73c], 1
jmp 0x10021858
and dword [ebp - 0x73c], 0
mov eax, dword [ebp - 0x304]
mov dword [ebp - 0x914], eax
mov eax, dword [ebp - 0x73c]
mov dword [ebp - 0x91c], eax
mov eax, dword [ebp - 0x304]
dec eax
mov dword [ebp - 0x304], eax
mov eax, dword [ebp - 0x914]
cmp eax, dword [ebp - 0x91c]
jne 0x10021897
mov dword [ebp - 0x924], 1
jmp 0x1002189e
and dword [ebp - 0x924], 0
cmp dword [ebp - 0x1bc], 1
jl 0x100218b3
mov dword [ebp - 0x744], 1
jmp 0x100218ba
and dword [ebp - 0x744], 0
cmp dword [ebp - 0x744], 0xe14daae8
jne 0x100218db
mov eax, 0x5de3
test eax, eax
je 0x100218db
mov dword [ebp - 0x74c], 1
jmp 0x100218e2
and dword [ebp - 0x74c], 0
mov eax, dword [ebp - 0x1bc]
cmp dword [ebp - 0x74c], eax
jne 0x100218fc
mov dword [ebp - 0x754], 1
jmp 0x10021903
and dword [ebp - 0x754], 0
mov eax, dword [ebp - 0x30c]
cmp dword [ebp - 0x754], eax
jne 0x1002191d
mov dword [ebp - 0x75c], 1
jmp 0x10021924
and dword [ebp - 0x75c], 0
cmp dword [ebp - 0x75c], 0xfffffff6
jne 0x10021939
mov dword [ebp - 0x764], 1
jmp 0x10021940
and dword [ebp - 0x764], 0
mov eax, dword [ebp - 0x92c]
cmp dword [ebp - 0x764], eax
je 0x1002195a
mov dword [ebp - 0x76c], 1
jmp 0x10021961
and dword [ebp - 0x76c], 0
cmp dword [ebp - 0x76c], 1
je 0x10021976
mov dword [ebp - 0x934], 1
jmp 0x1002197d
and dword [ebp - 0x934], 0
mov eax, dword [ebp - 0x140]
mov dword [ebp - 0xb60], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xa84]
mov dword [ebp - 0x774], eax
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x774]
mov dword [ebp + eax - 0xa84], ecx
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x108]
cmp dword [ebp - 0x774], eax
je 0x100219d0
mov dword [ebp - 0x394], 1
jmp 0x100219d7
and dword [ebp - 0x394], 0
mov eax, dword [ebp - 0x1bc]
cmp dword [ebp - 0x394], eax
je 0x100219f1
mov dword [ebp - 0x39c], 1
jmp 0x100219f8
and dword [ebp - 0x39c], 0
mov eax, dword [ebp - 0x39c]
mov dword [ebp - 0x314], eax
mov eax, dword [ebp - 0x314]
mov dword [ebp - 0xb68], eax
mov dword [ebp - 0x3a4], 0x7f693945
mov eax, dword [ebp - 0x93c]
add eax, dword [ebp - 0x3a4]
inc eax
mov dword [ebp - 0x3ac], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x3ac]
mov dword [ebp + eax - 0x944], ecx
mov eax, dword [ebp - 0x1b4]
cmp dword [ebp - 0x3ac], eax
jle 0x10021a5a
mov dword [ebp - 0x3b4], 1
jmp 0x10021a61
and dword [ebp - 0x3b4], 0
mov eax, dword [ebp - 0x3cc]
cmp dword [ebp - 0x3b4], eax
je 0x10021a7b
mov dword [ebp - 0x3bc], 1
jmp 0x10021a82
and dword [ebp - 0x3bc], 0
mov eax, dword [ebp - 0x158]
cmp dword [ebp - 0x3bc], eax
jne 0x10021a9c
mov dword [ebp - 0x3c4], 1
jmp 0x10021aa3
and dword [ebp - 0x3c4], 0
mov eax, dword [ebp - 0x31c]
imul eax, dword [ebp - 0x3c4]
mov dword [ebp - 0x30c], eax
mov eax, dword [ebp - 0x30c]
mov dword [ebp - 0xb70], eax
mov eax, dword [ebp - 0x70]
mov dword [ebp - 0xb78], eax
mov eax, dword [ebp - 0x150]
mov dword [ebp - 0xb80], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x108]
sub eax, dword [ebp - 0x1bc]
sub eax, dword [ebp - 0x3cc]
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x108], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x108]
mov dword [ebp - 0x314], eax
jmp 0x10021b3a
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x140]
mov dword [ebp + eax - 0x108], ecx
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x108], 0
je 0x10021b3a
jmp 0x100215f8
mov dword [ebp - 0x150], 0
jmp 0x10021b53
mov eax, dword [ebp - 0x150]
dec eax
mov dword [ebp - 0x150], eax
cmp dword [ebp - 0x150], 0xfffffffb
jg 0x10021c8f
mov dword [ebp - 0x954], 0xb0ce4c8d
mov dword [ebp - 0x158], 0xa
jmp 0x10021b83
mov eax, dword [ebp - 0x158]
dec eax
mov dword [ebp - 0x158], eax
cmp dword [ebp - 0x158], 7
je 0x10021c8a
cmp dword [ebp - 0x31c], 0
je 0x10021b9e
jmp 0x10021c8a
cmp dword [ebp - 0x31c], 0
jne 0x10021bd8
mov eax, dword [ebp - 0x3d4]
mov dword [ebp - 0x3dc], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x3dc]
mov dword [ebp + eax - 0x108], ecx
cmp dword [ebp - 0x3dc], 0
jne 0x10021bd8
and dword [ebp - 0x3e4], 0
jmp 0x10021be2
mov dword [ebp - 0x3e4], 1
mov eax, dword [ebp - 0x94c]
cmp eax, dword [ebp - 0x3e4]
jne 0x10021bfc
mov dword [ebp - 0x3ec], 1
jmp 0x10021c03
and dword [ebp - 0x3ec], 0
cmp dword [ebp - 0x3ec], 0x781ee239
je 0x10021c1b
mov dword [ebp - 0x3f4], 1
jmp 0x10021c22
and dword [ebp - 0x3f4], 0
cmp dword [ebp - 0x3f4], 0xfffffff7
ja 0x10021c37
mov dword [ebp - 0x3fc], 1
jmp 0x10021c3e
and dword [ebp - 0x3fc], 0
cmp dword [ebp - 0x3fc], 0x19a7386f
jg 0x10021c56
mov dword [ebp - 0x404], 1
jmp 0x10021c5d
and dword [ebp - 0x404], 0
cmp dword [ebp - 0x404], 0xc
je 0x10021c72
mov dword [ebp - 0x40c], 1
jmp 0x10021c79
and dword [ebp - 0x40c], 0
mov eax, dword [ebp - 0x40c]
mov dword [ebp - 0x954], eax
jmp 0x10021b76
jmp 0x10021b46
jmp 0x100215f8
mov eax, dword [ebp - 0x128]
mov dword [ebp - 0x95c], eax
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xabc]
call fcn.10016705
mov eax, dword [ebp - 0x95c]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
mov esp, ebp
pop ebp
ret