Function at 0x10027915
Capabilities:
Log keystrokes via polling

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x10067671
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x298
push esi
push edi
push 1
lea eax, [ebp - 0x2a4]
push eax
xor edx, edx
inc edx
xor ecx, ecx
call fcn.1001fd70
pop ecx
pop ecx
mov esi, eax
lea edi, [ebp - 0x288]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
lea esi, [ebp - 0x288]
lea edi, [ebp - 0x1dc]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
mov dword [ebp - 0x204], 1
mov dword [ebp - 0x200], 1
mov dword [ebp - 0x1fc], 1
mov dword [ebp - 0x1f8], 1
lea ecx, [ebp - 0x81]
call fcn.1001049a
push eax
lea eax, [ebp - 0x1f4]
push eax
lea eax, [ebp - 0x204]
push eax
lea ecx, [ebp - 0x298]
call fcn.1001049d
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0x25c]
call fcn.10010460
and dword [ebp - 4], 0
mov dword [ebp - 0x54], 0
jmp 0x100279d5
mov eax, dword [ebp - 0x54]
inc eax
mov dword [ebp - 0x54], eax
cmp dword [ebp - 0x54], 1
jge 0x100279e8
mov eax, dword [ebp - 0x54]
mov dword [ebp + eax*4 - 0x64], 0x90c4d8e5
jmp 0x100279ce
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0x64], 0
jmp 0x10027a0d
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x64]
inc eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x64], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x64], 3
jg 0x10027a58
mov dword [ebp - 0x30], 0xffffffff
mov dword [ebp - 0x30], 0
jmp 0x10027a31
mov eax, dword [ebp - 0x30]
inc eax
mov dword [ebp - 0x30], eax
cmp dword [ebp - 0x30], 3
jg 0x10027a56
push dword [ebp - 0x30]
lea ecx, [ebp - 0x25c]
call fcn.1001048b
cmp dword [eax], 0
je 0x10027a4c
jmp 0x10027a56
cmp dword [ebp - 0x30], 0
je 0x10027a54
jmp 0x10027a56
jmp 0x10027a2a
jmp 0x100279f8
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x25c]
call fcn.10010486
push 2
lea ecx, [ebp - 0x188]
call fcn.10010424
mov dword [ebp - 4], 1
push 2
lea ecx, [ebp - 0x26c]
call fcn.10010424
mov byte [ebp - 4], 2
mov dword [ebp - 0x6c], 0x13638ecf
mov dword [ebp - 0x5c], 0
jmp 0x10027aa3
mov eax, dword [ebp - 0x5c]
inc eax
mov dword [ebp - 0x5c], eax
cmp dword [ebp - 0x5c], 2
jge 0x10027abf
push dword [ebp - 0x5c]
lea ecx, [ebp - 0x26c]
call fcn.1001048b
mov dword [eax], 0x342eb90d
jmp 0x10027a9c
mov byte [ebp - 0x2a], 0
movzx eax, byte [ebp - 0x2a]
test eax, eax
je 0x10027ad1
call dword [sym.imp.KERNEL32.dll_GetACP]
mov dword [ebp - 0x6c], 1
jmp 0x10027ae1
mov eax, dword [ebp - 0x6c]
dec eax
mov dword [ebp - 0x6c], eax
cmp dword [ebp - 0x6c], 0
jl 0x10027afd
mov byte [ebp - 0x29], 0
movzx eax, byte [ebp - 0x29]
test eax, eax
je 0x10027afb
push 0
call dword [sym.imp.USER32.dll_GetKeyboardState]
jmp 0x10027ada
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x26c]
call fcn.10010486
mov dword [ebp - 0x1ac], 0x6d4f2887
mov dword [ebp - 0x18], 0xfffffffc
mov dword [ebp - 0x48], 0
mov dword [ebp - 0x80], 0xcde30eca
cmp dword [ebp - 0x18], 0
je 0x10027d2f
mov dword [ebp - 0x14c], 0x38ab659d
mov dword [ebp - 0x140], 1
mov dword [ebp - 0x134], 0x3ae4c7ba
mov dword [ebp - 0x70], 0
mov dword [ebp - 0x13c], 0x1a83acdd
mov dword [ebp - 0x18], 3
jmp 0x10027b74
mov eax, dword [ebp - 0x18]
dec eax
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 0xffffffea
jle 0x10027d2a
mov dword [ebp - 0x68], 0xffffffff
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x14c], eax
cmp dword [ebp - 0x68], 0
je 0x10027d03
mov dword [ebp - 0x140], 0xffffffff
mov eax, dword [ebp - 0x140]
mov dword [ebp - 0x270], eax
cmp dword [ebp - 0x18], 0
jne 0x10027bc3
cmp dword [ebp - 0x18], 0
jne 0x10027bc3
and dword [ebp - 0x9c], 0
jmp 0x10027bcd
mov dword [ebp - 0x9c], 1
imul eax, dword [ebp - 0x9c], 0xd6db
cmp eax, 0x3063d62a
jg 0x10027bea
mov dword [ebp - 0x12c], 1
jmp 0x10027bf1
and dword [ebp - 0x12c], 0
mov eax, dword [ebp - 0x134]
cmp dword [ebp - 0x12c], eax
jg 0x10027c0b
mov dword [ebp - 0xa4], 1
jmp 0x10027c12
and dword [ebp - 0xa4], 0
mov eax, dword [ebp - 0xa4]
mov dword [ebp - 0x70], eax
mov eax, dword [ebp - 0x18]
cmp dword [ebp - 0x70], eax
jle 0x10027c30
xor eax, eax
jne 0x10027c30
and dword [ebp - 0xac], 0
jmp 0x10027c3a
mov dword [ebp - 0xac], 1
mov eax, dword [ebp - 0x134]
add eax, dword [ebp - 0xac]
mov dword [ebp - 0x13c], eax
mov eax, dword [ebp - 0x68]
add eax, dword [ebp - 0x13c]
cmp eax, 0x1a53fde7
je 0x10027c68
mov dword [ebp - 0xb4], 1
jmp 0x10027c6f
and dword [ebp - 0xb4], 0
cmp dword [ebp - 0xb4], 0xed09eb81
jbe 0x10027c87
mov dword [ebp - 0x144], 1
jmp 0x10027c8e
and dword [ebp - 0x144], 0
mov eax, dword [ebp - 0x48]
cmp dword [ebp - 0x144], eax
jl 0x10027ca5
mov dword [ebp - 0xbc], 1
jmp 0x10027cac
and dword [ebp - 0xbc], 0
mov eax, dword [ebp - 0x48]
cmp dword [ebp - 0xbc], eax
je 0x10027cc3
mov dword [ebp - 0x18c], 1
jmp 0x10027cca
and dword [ebp - 0x18c], 0
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x23c], eax
mov dword [ebp - 0x80], 0x6ced
mov eax, dword [ebp - 0x48]
cmp dword [ebp - 0x68], eax
jne 0x10027cee
mov dword [ebp - 0xc4], 1
jmp 0x10027cf5
and dword [ebp - 0xc4], 0
mov eax, dword [ebp - 0x14c]
cmp dword [ebp - 0xc4], eax
jl 0x10027d12
cmp dword [ebp - 0x70], 0
jne 0x10027d12
and dword [ebp - 0x154], 0
jmp 0x10027d1c
mov dword [ebp - 0x154], 1
mov eax, dword [ebp - 0x154]
mov dword [ebp - 0x68], eax
jmp 0x10027b6d
jmp 0x10027e3c
mov dword [ebp - 0x74], 0xcb407cb0
mov dword [ebp - 0x8c], 0xfffffff8
mov dword [ebp - 0x78], 0x1e8e103c
mov dword [ebp - 0x190], 3
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x24c], eax
mov dword [ebp - 0x74], 0x452e2cc7
cmp dword [ebp - 0x74], 0
je 0x10027d9e
cmp dword [ebp - 0x18], 0
je 0x10027d79
mov dword [ebp - 0xcc], 1
jmp 0x10027d80
and dword [ebp - 0xcc], 0
mov eax, dword [ebp - 0xcc]
mov dword [ebp - 0x8c], eax
cmp dword [ebp - 0x8c], 0
jne 0x10027da7
mov eax, 0x2619
test eax, eax
jne 0x10027da7
cmp dword [ebp - 0x8c], 0
je 0x10027db8
xor eax, eax
inc eax
je 0x10027db8
mov dword [ebp - 0x15c], 1
jmp 0x10027dbf
and dword [ebp - 0x15c], 0
mov eax, dword [ebp - 0x78]
cmp dword [ebp - 0x15c], eax
jl 0x10027dd6
mov dword [ebp - 0x170], 1
jmp 0x10027ddd
and dword [ebp - 0x170], 0
cmp dword [ebp - 0x170], 0x65e139a5
jle 0x10027df8
cmp dword [ebp - 0x74], 0
jne 0x10027df8
and dword [ebp - 0xd8], 0
jmp 0x10027e02
mov dword [ebp - 0xd8], 1
mov eax, dword [ebp - 0xd8]
mov dword [ebp - 0x78], eax
mov eax, dword [ebp - 0x78]
mov dword [ebp - 0x80], eax
cmp dword [ebp - 0x80], 0
jne 0x10027e26
cmp dword [ebp - 0x48], 0
jne 0x10027e26
and dword [ebp - 0x128], 0
jmp 0x10027e30
mov dword [ebp - 0x128], 1
mov eax, dword [ebp - 0x128]
mov dword [ebp - 0x190], eax
lea eax, [ebp - 0x188]
push eax
lea eax, [ebp - 0x240]
push eax
call fcn.10026ecd
pop ecx
pop ecx
mov dword [ebp - 0x10], 0
mov dword [ebp - 0x34], 8
mov dword [ebp - 0x60], 0
jmp 0x10027e6f
mov eax, dword [ebp - 0x60]
inc eax
mov dword [ebp - 0x60], eax
cmp dword [ebp - 0x60], 1
jge 0x10027e82
mov eax, dword [ebp - 0x60]
mov dword [ebp + eax*4 - 0x14], 4
jmp 0x10027e68
mov dword [ebp - 0x10], 0
jmp 0x10027e92
mov eax, dword [ebp - 0x10]
inc eax
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], 0
jg 0x10028551
mov dword [ebp - 0x28], 0xfffffffd
mov dword [ebp - 0x218], 0x3c94681c
mov dword [ebp - 0x214], 0x3c94681c
mov dword [ebp - 0x210], 0x3c94681c
mov dword [ebp - 0x20c], 0x3c94681c
lea ecx, [ebp - 0x79]
call fcn.1001049a
push eax
lea eax, [ebp - 0x208]
push eax
lea eax, [ebp - 0x218]
push eax
lea ecx, [ebp - 0x290]
call fcn.1001049d
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0x230]
call fcn.10010460
mov byte [ebp - 4], 3
mov dword [ebp - 0x110], 0x923f2b63
push 4
lea ecx, [ebp - 0x1e8]
call fcn.10010424
mov byte [ebp - 4], 4
mov dword [ebp - 0x1a8], 0x1c05
cmp dword [ebp - 0x1a8], 0xd4d
jge 0x100280f7
lea eax, [ebp - 0x1b0]
push eax
lea eax, [ebp - 0x44]
push eax
push 0x10009060
call fcn.1004d47b
add esp, 0xc
movsd xmm0, qword [0x100095c8]
movsd qword [ebp - 0x278], xmm0
lea eax, [ebp - 0x278]
push eax
push dword [ebp - 0x44]
lea ecx, [ebp - 0x1c4]
call fcn.1002180a
mov byte [ebp - 4], 5
movsd xmm0, qword [0x100095c8]
movsd qword [ebp - 0x248], xmm0
lea eax, [ebp - 0x248]
push eax
push dword [ebp - 0x44]
lea ecx, [ebp - 0x224]
call fcn.1002180a
mov byte [ebp - 4], 6
movsd xmm0, qword [0x100095c8]
movsd qword [ebp - 0x17c], xmm0
and dword [ebp - 0x3c], 0
jmp 0x10027fbd
mov eax, dword [ebp - 0x3c]
inc eax
mov dword [ebp - 0x3c], eax
mov eax, dword [ebp - 0x3c]
cmp eax, dword [ebp - 0x44]
jge 0x10028004
push dword [ebp - 0x3c]
lea ecx, [ebp - 0x1c4]
call fcn.1002182c
push eax
push 0x10009314
call fcn.1004d47b
pop ecx
pop ecx
push dword [ebp - 0x3c]
lea ecx, [ebp - 0x1c4]
call fcn.1002182c
movsd xmm0, qword [ebp - 0x17c]
addsd xmm0, qword [eax]
movsd qword [ebp - 0x17c], xmm0
jmp 0x10027fb6
and dword [ebp - 0x4c], 0
jmp 0x10028011
mov eax, dword [ebp - 0x4c]
inc eax
mov dword [ebp - 0x4c], eax
mov eax, dword [ebp - 0x4c]
cmp eax, dword [ebp - 0x44]
jge 0x10028036
push dword [ebp - 0x4c]
lea ecx, [ebp - 0x224]
call fcn.1002182c
push eax
push 0x10009314
call fcn.1004d47b
pop ecx
pop ecx
jmp 0x1002800a
cvtsi2sd xmm0, dword [ebp - 0x1b0]
divsd xmm0, qword [ebp - 0x17c]
movsd qword [ebp - 0x198], xmm0
and dword [ebp - 0x40], 0
jmp 0x1002805b
mov eax, dword [ebp - 0x40]
inc eax
mov dword [ebp - 0x40], eax
mov eax, dword [ebp - 0x40]
cmp eax, dword [ebp - 0x44]
jge 0x100280b5
push dword [ebp - 0x40]
lea ecx, [ebp - 0x224]
call fcn.1002182c
mov esi, eax
push dword [ebp - 0x40]
lea ecx, [ebp - 0x1c4]
call fcn.1002182c
movsd xmm0, qword [esi]
divsd xmm0, qword [eax]
movsd qword [ebp - 0x1f0], xmm0
movsd xmm0, qword [ebp - 0x198]
comisd xmm0, xmmword [ebp - 0x1f0]
jbe 0x100280b3
movsd xmm0, qword [ebp - 0x1f0]
movsd qword [ebp - 0x198], xmm0
jmp 0x10028054
movsd xmm0, qword [ebp - 0x17c]
mulsd xmm0, qword [ebp - 0x198]
push ecx
push ecx
movsd qword [esp], xmm0
push 0x10009318
call fcn.1004d6af
add esp, 0xc
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x224]
call fcn.100111ea
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x1c4]
call fcn.100111ea
push 3
lea ecx, [ebp - 0x1d0]
call fcn.10010424
mov byte [ebp - 4], 7
mov dword [ebp - 0x1c], 0
jmp 0x10028118
mov eax, dword [ebp - 0x1c]
inc eax
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 4
jge 0x10028131
push dword [ebp - 0x1c]
lea ecx, [ebp - 0x1e8]
call fcn.1001048b
or dword [eax], 0xffffffff
jmp 0x10028111
mov dword [ebp - 0x1c], 0
jmp 0x10028141
mov eax, dword [ebp - 0x1c]
inc eax
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 3
jge 0x1002815d
push dword [ebp - 0x1c]
lea ecx, [ebp - 0x1d0]
call fcn.1001048b
mov dword [eax], 1
jmp 0x1002813a
mov eax, dword [ebp - 0x10]
mov eax, dword [ebp + eax*4 - 0x14]
mov dword [ebp - 0x28], eax
mov eax, dword [ebp - 0x10]
mov eax, dword [ebp + eax*4 - 0x14]
cmp eax, dword [ebp - 0x28]
jl 0x1002817f
mov dword [ebp - 0xe0], 1
jmp 0x10028186
and dword [ebp - 0xe0], 0
cmp dword [ebp - 0xe0], 0xfffffffd
jne 0x1002819b
mov dword [ebp - 0xe8], 1
jmp 0x100281a2
and dword [ebp - 0xe8], 0
mov eax, dword [ebp - 0x10]
cmp dword [ebp + eax*4 - 0x14], 0xfffa
jne 0x100281bb
mov dword [ebp - 0x150], 1
jmp 0x100281c2
and dword [ebp - 0x150], 0
mov eax, dword [ebp - 0x10]
add eax, dword [ebp - 0x150]
cmp dword [ebp - 0xe8], eax
jle 0x100281df
mov dword [ebp - 0x1a0], 1
jmp 0x100281e6
and dword [ebp - 0x1a0], 0
mov eax, dword [ebp - 0x10]
mov eax, dword [ebp + eax*4 - 0x14]
mov dword [ebp - 0x27c], eax
mov eax, 0xe948708e
cmp eax, 0xfffffffd
jbe 0x10028209
mov dword [ebp - 0x130], 1
jmp 0x10028210
and dword [ebp - 0x130], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x14]
cmp dword [ebp - 0x130], eax
jle 0x100282c1
mov dword [ebp - 0x19c], 0x556123d4
mov dword [ebp - 0x28], 0
jmp 0x10028240
mov eax, dword [ebp - 0x28]
inc eax
mov dword [ebp - 0x28], eax
cmp dword [ebp - 0x28], 0
jg 0x10028281
mov dword [ebp - 0x50], 4
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x10]
mov eax, dword [ebp + eax*4 - 0x14]
mov dword [ebp + ecx*4 - 0x14], eax
mov dword [ebp - 0x50], 0
jmp 0x1002826b
mov eax, dword [ebp - 0x50]
dec eax
mov dword [ebp - 0x50], eax
cmp dword [ebp - 0x50], 0
jl 0x1002827f
mov eax, dword [ebp - 0x10]
cmp dword [ebp + eax*4 - 0x14], 0
je 0x1002827d
jmp 0x1002827f
jmp 0x10028264
jmp 0x10028239
cmp dword [ebp - 0x19c], 0
je 0x100282bc
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x1d0]
call fcn.10010486
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x1e8]
call fcn.10010486
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x230]
call fcn.10010486
jmp 0x10027e8b
jmp 0x1002851f
mov dword [ebp - 0x20], 0x6a9c
mov dword [ebp - 0x174], 0xf16ce65c
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x250], eax
mov eax, 0xfffc
cmp eax, 8
jb 0x100282f1
mov dword [ebp - 0xf0], 1
jmp 0x100282f8
and dword [ebp - 0xf0], 0
mov eax, dword [ebp - 0x20]
cmp dword [ebp - 0xf0], eax
jl 0x1002830f
mov dword [ebp - 0x160], 1
jmp 0x10028316
and dword [ebp - 0x160], 0
push 3
lea ecx, [ebp - 0x230]
call fcn.1001048b
mov ecx, dword [ebp - 0x160]
cmp ecx, dword [eax]
jg 0x10028339
mov dword [ebp - 0xf8], 1
jmp 0x10028340
and dword [ebp - 0xf8], 0
mov eax, dword [ebp - 0x34]
cmp dword [ebp - 0xf8], eax
jge 0x10028357
mov dword [ebp - 0x138], 1
jmp 0x1002835e
and dword [ebp - 0x138], 0
mov eax, dword [ebp - 0x138]
sub eax, 0x1cea0262
jne 0x1002836f
cmp dword [ebp - 0x20], 0
mov eax, dword [ebp - 0x20]
cmp dword [ebp - 0x10], eax
je 0x10028383
mov dword [ebp - 0x100], 1
jmp 0x1002838a
and dword [ebp - 0x100], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x14]
cmp dword [ebp - 0x100], eax
jge 0x100283a8
mov dword [ebp - 0x158], 1
jmp 0x100283af
and dword [ebp - 0x158], 0
mov eax, dword [ebp - 0x10]
mov eax, dword [ebp + eax*4 - 0x14]
imul eax, dword [ebp - 0x158]
cmp eax, dword [ebp - 0x20]
jl 0x100283ce
mov dword [ebp - 0x108], 1
jmp 0x100283d5
and dword [ebp - 0x108], 0
cmp dword [ebp - 0x108], 0xfffd
ja 0x100283ed
mov dword [ebp - 0x1b4], 1
jmp 0x100283f4
and dword [ebp - 0x1b4], 0
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x234], eax
mov eax, dword [ebp - 0x10]
mov eax, dword [ebp + eax*4 - 0x14]
cmp dword [ebp - 0x20], eax
jg 0x10028415
mov dword [ebp - 0x94], 1
jmp 0x1002841c
and dword [ebp - 0x94], 0
mov eax, dword [ebp - 0x94]
mov dword [ebp - 0x110], eax
mov eax, dword [ebp - 0x110]
mov dword [ebp - 0x174], eax
cmp dword [ebp - 0x174], 0x9209a488
jne 0x1002844c
mov dword [ebp - 0x118], 1
jmp 0x10028453
and dword [ebp - 0x118], 0
imul eax, dword [ebp - 0x118], 0xd683
push 4
pop ecx
imul ecx, ecx, 0
cmp eax, dword [ebp + ecx - 0x14]
jle 0x10028475
mov dword [ebp - 0x148], 1
jmp 0x1002847c
and dword [ebp - 0x148], 0
mov eax, dword [ebp - 0x10]
mov eax, dword [ebp + eax*4 - 0x14]
imul eax, dword [ebp - 0x148]
cmp eax, 0xfff6
je 0x1002849d
mov dword [ebp - 0x88], 1
jmp 0x100284a4
and dword [ebp - 0x88], 0
push 2
lea ecx, [ebp - 0x1e8]
call fcn.1001048b
mov ecx, dword [ebp - 0x88]
mov dword [eax], ecx
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x14]
imul eax, dword [ebp - 0x88]
cmp eax, dword [ebp - 0x20]
je 0x100284e5
mov eax, dword [ebp - 0x10]
cmp dword [ebp + eax*4 - 0x14], 0
je 0x100284e5
mov dword [ebp - 0x120], 1
jmp 0x100284ec
and dword [ebp - 0x120], 0
mov eax, dword [ebp - 0x34]
cmp dword [ebp - 0x120], eax
jne 0x10028503
mov dword [ebp - 0xd0], 1
jmp 0x1002850a
and dword [ebp - 0xd0], 0
push 1
lea ecx, [ebp - 0x1d0]
call fcn.1001048b
mov ecx, dword [ebp - 0xd0]
mov dword [eax], ecx
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x1d0]
call fcn.10010486
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x1e8]
call fcn.10010486
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x230]
call fcn.10010486
jmp 0x10027e8b
mov dword [ebp - 0x10], 0
jmp 0x10028561
mov eax, dword [ebp - 0x10]
inc eax
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], 0x19
jne 0x10028598
mov dword [ebp - 0x34], 0
jmp 0x10028577
mov eax, dword [ebp - 0x34]
inc eax
mov dword [ebp - 0x34], eax
cmp dword [ebp - 0x34], 0
jg 0x10028596
mov dword [ebp - 0xd4], 0x7c2130be
mov eax, dword [ebp - 0xd4]
dec eax
mov dword [ebp - 0xd4], eax
jmp 0x10028570
jmp 0x1002855a
push 0
lea ecx, [ebp - 0x188]
call fcn.1001048b
and dword [eax], 0
jmp 0x100285ce
push 0
lea ecx, [ebp - 0x188]
call fcn.1001048b
mov dword [ebp - 0xdc], eax
mov eax, dword [ebp - 0xdc]
mov eax, dword [eax]
dec eax
mov ecx, dword [ebp - 0xdc]
mov dword [ecx], eax
push 0
lea ecx, [ebp - 0x188]
call fcn.1001048b
cmp dword [eax], 0xfffffffa
jge 0x100288d7
mov dword [ebp - 0x1b8], 0x6df37d45
mov dword [ebp - 0x38], 0x2e91a049
mov dword [ebp - 0x90], 0xaf86
mov dword [ebp - 0xa0], 0xffffffff
mov dword [ebp - 0x38], 0xfffffffc
jmp 0x10028619
mov eax, dword [ebp - 0x38]
dec eax
mov dword [ebp - 0x38], eax
cmp dword [ebp - 0x38], 0xfffffff1
jle 0x100288b6
push 2
lea ecx, [ebp - 0x16c]
call fcn.10010424
mov byte [ebp - 4], 8
mov dword [ebp - 0x1a4], 0x732a
mov dword [ebp - 0xc0], 0xffffffff
mov dword [ebp - 0x58], 0
jmp 0x10028658
mov eax, dword [ebp - 0x58]
inc eax
mov dword [ebp - 0x58], eax
cmp dword [ebp - 0x58], 2
jge 0x10028674
push dword [ebp - 0x58]
lea ecx, [ebp - 0x16c]
call fcn.1001048b
mov dword [eax], 0xa39ed080
jmp 0x10028651
push 0
lea ecx, [ebp - 0x16c]
call fcn.1001048b
cmp dword [eax], 0
je 0x10028692
mov dword [ebp - 0xe4], 1
jmp 0x10028699
and dword [ebp - 0xe4], 0
mov eax, dword [ebp - 0x90]
cmp dword [ebp - 0xe4], eax
je 0x100286b3
mov dword [ebp - 0xec], 1
jmp 0x100286ba
and dword [ebp - 0xec], 0
push 0
lea ecx, [ebp - 0x16c]
call fcn.1001048b
mov eax, dword [eax]
cmp eax, dword [ebp - 0xec]
jne 0x100286dd
mov dword [ebp - 0xf4], 1
jmp 0x100286e4
and dword [ebp - 0xf4], 0
cmp dword [ebp - 0xf4], 0
jl 0x100286f9
mov dword [ebp - 0xfc], 1
jmp 0x10028700
and dword [ebp - 0xfc], 0
cmp dword [ebp - 0xfc], 0xedf6b3e7
jae 0x10028718
mov dword [ebp - 0x104], 1
jmp 0x1002871f
and dword [ebp - 0x104], 0
cmp dword [ebp - 0x104], 0xfffffffe
jne 0x10028734
mov dword [ebp - 0x10c], 1
jmp 0x1002873b
and dword [ebp - 0x10c], 0
push 0
lea ecx, [ebp - 0x16c]
call fcn.1001048b
mov eax, dword [eax]
cmp eax, dword [ebp - 0x10c]
je 0x1002875e
mov dword [ebp - 0x114], 1
jmp 0x10028765
and dword [ebp - 0x114], 0
cmp dword [ebp - 0x114], 0x56411d7f
jg 0x1002877d
mov dword [ebp - 0x11c], 1
jmp 0x10028784
and dword [ebp - 0x11c], 0
mov eax, dword [ebp - 0x90]
cmp dword [ebp - 0x11c], eax
jle 0x1002879e
mov dword [ebp - 0x124], 1
jmp 0x100287a5
and dword [ebp - 0x124], 0
mov eax, dword [ebp - 0x1a4]
cmp dword [ebp - 0x124], eax
je 0x100287bf
mov dword [ebp - 0x98], 1
jmp 0x100287c6
and dword [ebp - 0x98], 0
mov eax, dword [ebp - 0x98]
mov dword [ebp - 0xa0], eax
mov eax, dword [ebp - 0xa0]
mov dword [ebp - 0x260], eax
mov eax, dword [ebp - 0x90]
mov dword [ebp - 0x238], eax
push 0xfffffffffffffffa
pop eax
cmp eax, 0xc857617
jae 0x10028800
mov dword [ebp - 0xa8], 1
jmp 0x10028807
and dword [ebp - 0xa8], 0
cmp dword [ebp - 0xa8], 3
jne 0x1002881c
mov dword [ebp - 0xb0], 1
jmp 0x10028823
and dword [ebp - 0xb0], 0
mov eax, dword [ebp - 0x38]
imul eax, dword [ebp - 0xb0]
cmp eax, 0xb83e
jl 0x10028840
mov dword [ebp - 0xb8], 1
jmp 0x10028847
and dword [ebp - 0xb8], 0
push 0
lea ecx, [ebp - 0x16c]
call fcn.1001048b
mov ecx, dword [ebp - 0xb8]
imul ecx, dword [eax]
mov dword [ebp - 0xc0], ecx
mov esi, dword [ebp - 0xc0]
push 0
lea ecx, [ebp - 0x16c]
call fcn.1001048b
cmp dword [eax], esi
jge 0x10028886
mov dword [ebp - 0xc8], 1
jmp 0x1002888d
and dword [ebp - 0xc8], 0
push 0
lea ecx, [ebp - 0x16c]
call fcn.1001048b
mov ecx, dword [ebp - 0xc8]
mov dword [eax], ecx
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x16c]
call fcn.10010486
jmp 0x10028612
mov byte [ebp - 0x21], 0
movzx eax, byte [ebp - 0x21]
test eax, eax
je 0x100288c7
call fcn.10027383
cmp dword [ebp - 0x1b8], 0
je 0x100288d2
jmp 0x100288d7
jmp 0x100285aa
lea eax, [ebp - 0x188]
push eax
lea eax, [ebp - 0x1ac]
push eax
call fcn.10027460
pop ecx
pop ecx
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x188]
call fcn.10010486
cmp dword [ebp - 0x1dc], 0
je 0x10028918
push 3
push dword [ebp - 0x1d4]
push dword [ebp - 0x1d8]
call dword [ebp - 0x1dc]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
mov esp, ebp
pop ebp
ret