Function at 0x10024edd
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x10071509
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
mov eax, 0x1b58
call fcn.1006b5d0
push esi
movzx eax, byte [ebp + 0x10]
test eax, eax
je 0x100308f6
mov eax, dword [ebp + 0x20]
mov dword [ebp - 0xf90], eax
lea eax, [ebp + 0xc]
mov dword [ebp - 0xf5c], eax
mov eax, dword [ebp + 0x1c]
mov dword [ebp - 0xf98], eax
mov eax, dword [ebp + 0x14]
mov dword [ebp - 0xfa0], eax
mov eax, dword [ebp + 0x18]
mov dword [ebp - 0xfa8], eax
mov eax, dword [ebp - 0xf5c]
movzx eax, byte [eax]
test eax, eax
je 0x100308d1
mov eax, dword [ebp - 0xf90]
mov dword [ebp - 0xe0c], eax
mov eax, dword [ebp - 0xf98]
mov dword [ebp - 0xdc8], eax
mov eax, dword [ebp - 0xfa0]
mov dword [ebp - 0xbd0], eax
mov eax, dword [ebp - 0xfa8]
mov dword [ebp - 0x4f8], eax
mov dword [ebp - 0xbf0], 1
mov dword [ebp - 0x38c], 1
mov dword [ebp - 0x448], 0xfff8
mov dword [ebp - 0xc90], 0xffff
mov dword [ebp - 0xbe8], 0x5cab4306
mov dword [ebp - 0xbf8], 0xb72b416c
mov dword [ebp - 0xc68], 7
mov dword [ebp - 0xc88], 1
mov dword [ebp - 0x100c], 0
mov dword [ebp - 0xc8], 0
jmp 0x10024fed
mov eax, dword [ebp - 0xc8]
inc eax
mov dword [ebp - 0xc8], eax
cmp dword [ebp - 0xc8], 1
jge 0x10025009
mov eax, dword [ebp - 0xc8]
mov dword [ebp + eax*4 - 0xfb0], 0xfffffff9
jmp 0x10024fe0
mov dword [ebp - 0xc8], 0
jmp 0x10025022
mov eax, dword [ebp - 0xc8]
inc eax
mov dword [ebp - 0xc8], eax
cmp dword [ebp - 0xc8], 1
jge 0x1002503e
mov eax, dword [ebp - 0xc8]
mov dword [ebp + eax*4 - 0x2e0], 0x53a3
jmp 0x10025015
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0xfb0], 0xea0
mov eax, dword [ebp - 0x448]
mov dword [ebp - 0xfb8], eax
mov eax, dword [ebp - 0x448]
dec eax
mov dword [ebp - 0x448], eax
cmp dword [ebp - 0xfb8], 0xea0
jg 0x10025080
mov dword [ebp - 0x7b8], 1
jmp 0x10025087
and dword [ebp - 0x7b8], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x2e0]
cmp dword [ebp - 0x7b8], eax
jg 0x100250a8
mov dword [ebp - 0xbd8], 1
jmp 0x100250af
and dword [ebp - 0xbd8], 0
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x2e0], 0
jne 0x100250cb
mov dword [ebp - 0xc70], 1
jmp 0x100250d2
and dword [ebp - 0xc70], 0
mov eax, dword [ebp - 0xc90]
mov dword [ebp - 0x38c], eax
mov eax, dword [ebp - 0xbe8]
cmp dword [ebp - 0x38c], eax
jle 0x100250f8
mov dword [ebp - 0xbe0], 1
jmp 0x100250ff
and dword [ebp - 0xbe0], 0
mov eax, dword [ebp - 0xbe0]
sub eax, dword [ebp - 0xbf0]
add eax, dword [ebp - 0xbe8]
mov dword [ebp - 0xbf8], eax
mov eax, dword [ebp - 0xbf0]
cmp dword [ebp - 0xbf8], eax
jle 0x10025131
mov dword [ebp - 0xc58], 1
jmp 0x10025138
and dword [ebp - 0xc58], 0
cmp dword [ebp - 0xc58], 0
je 0x1002514d
mov dword [ebp - 0xfc0], 1
jmp 0x10025154
and dword [ebp - 0xfc0], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x2e0]
mov dword [ebp - 0x15ec], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x2e0]
cmp dword [ebp - 0x38c], eax
jge 0x10025188
mov dword [ebp - 0xc60], 1
jmp 0x1002518f
and dword [ebp - 0xc60], 0
mov eax, dword [ebp - 0xc60]
mov dword [ebp - 0xc68], eax
mov eax, dword [ebp - 0xc68]
cmp dword [ebp - 0xc70], eax
jg 0x100251b5
mov dword [ebp - 0xc78], 1
jmp 0x100251bc
and dword [ebp - 0xc78], 0
cmp dword [ebp - 0xc78], 0x96bc712b
jbe 0x100251d4
mov dword [ebp - 0xc80], 1
jmp 0x100251db
and dword [ebp - 0xc80], 0
mov eax, dword [ebp - 0xc80]
mov dword [ebp - 0xc88], eax
cmp dword [ebp - 0xc88], 0
jne 0x100251fd
xor eax, eax
jne 0x100251fd
and dword [ebp - 0xfc8], 0
jmp 0x10025207
mov dword [ebp - 0xfc8], 1
mov eax, dword [ebp - 0xc90]
mov dword [ebp - 0x17bc], eax
mov eax, dword [ebp - 0x38c]
add eax, dword [ebp - 0xbd8]
jne 0x10025231
push 0xfffffffffffffffc
pop eax
test eax, eax
jne 0x10025231
and dword [ebp - 0x574], 0
jmp 0x1002523b
mov dword [ebp - 0x574], 1
mov eax, dword [ebp - 0x574]
mov dword [ebp - 0x100c], eax
push 2
lea ecx, [ebp - 0x1318]
call fcn.100100aa
and dword [ebp - 4], 0
mov dword [ebp - 0x218], 0x7a876e6b
mov dword [ebp - 0x2f4], 0
jmp 0x1002527b
mov eax, dword [ebp - 0x2f4]
inc eax
mov dword [ebp - 0x2f4], eax
cmp dword [ebp - 0x2f4], 2
jge 0x1002529d
push dword [ebp - 0x2f4]
lea ecx, [ebp - 0x1318]
call fcn.10010148
mov dword [eax], 0x99ff6065
jmp 0x1002526e
mov dword [ebp - 0x218], 1
jmp 0x100252b6
mov eax, dword [ebp - 0x218]
dec eax
mov dword [ebp - 0x218], eax
cmp dword [ebp - 0x218], 0
jl 0x10025350
mov dword [ebp - 0x101c], 0xffffffff
mov dword [ebp - 0x1014], 6
mov byte [ebp - 0x169], 0
push 0x2670
push 0x80c
push 0
push 0x4b8e
lea eax, [ebp - 0x169]
push eax
push 0x69ca
push 0
push 0x1839
push 0xa3f
call fcn.10032c55
add esp, 0x24
push 0
lea eax, [ebp - 0x218]
push eax
lea eax, [ebp - 0x1318]
push eax
push 0x172f
lea eax, [ebp - 0x1014]
push eax
push 1
push 0x1b98
push 0x1b07
push 0x6718
lea eax, [ebp - 0x101c]
push eax
call fcn.10024b2f
add esp, 0x28
jmp 0x100252a9
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x1318]
call fcn.1001012c
mov dword [ebp - 0x654], 1
mov dword [ebp - 0x44c], 0xb0f7
mov dword [ebp - 0x2fc], 0
mov dword [ebp - 0x1514], 0xedb5cabf
mov dword [ebp - 0xb14], 0
mov dword [ebp - 0x1648], 0xffffffff
mov dword [ebp - 0x151c], 0xfecafe8b
mov dword [ebp - 0x1744], 0
mov dword [ebp - 0x268], 0xec752f67
mov dword [ebp - 0x594], 0xffffffff
mov dword [ebp - 0x1024], 4
mov dword [ebp - 0x1034], 0xecf7921e
mov dword [ebp - 0x454], 0x41fd9d08
mov dword [ebp - 0x51c], 0x3dec
mov dword [ebp - 0x3dc], 0
jmp 0x10025404
mov eax, dword [ebp - 0x3dc]
inc eax
mov dword [ebp - 0x3dc], eax
cmp dword [ebp - 0x3dc], 4
jge 0x10025420
mov eax, dword [ebp - 0x3dc]
mov dword [ebp + eax*4 - 0x1874], 4
jmp 0x100253f7
mov eax, dword [ebp - 0x44c]
mov dword [ebp - 0x2fc], eax
mov eax, dword [ebp - 0x44c]
mov dword [ebp - 0x2fc], eax
mov eax, dword [ebp - 0x2fc]
mov dword [ebp - 0x1524], eax
mov eax, dword [ebp - 0x44c]
mov dword [ebp - 0x1658], eax
mov eax, dword [ebp - 0x51c]
dec eax
mov dword [ebp - 0x51c], eax
mov eax, dword [ebp - 0x51c]
mov dword [ebp - 0x152c], eax
mov eax, dword [ebp - 0x268]
mov dword [ebp - 0x268], eax
mov eax, dword [ebp - 0x268]
mov dword [ebp - 0x17ac], eax
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x1874], 0
je 0x100254d6
mov byte [ebp - 0x199], 0
movzx eax, byte [ebp - 0x199]
test eax, eax
je 0x100254b7
push 0x5cb5
push 0
push 0x2c3d
call fcn.10036812
add esp, 0xc
mov byte [ebp - 0x171], 0
movzx eax, byte [ebp - 0x171]
test eax, eax
je 0x100254d1
push 0
call fcn.1003423b
pop ecx
jmp 0x1002573d
mov dword [ebp - 0x1224], 0x199e
mov dword [ebp - 0x1220], 0x199e
mov dword [ebp - 0x121c], 0x199e
mov dword [ebp - 0x1218], 0x199e
lea ecx, [ebp - 0x525]
call fcn.10010157
push eax
lea eax, [ebp - 0x1214]
push eax
lea eax, [ebp - 0x1224]
push eax
lea ecx, [ebp - 0x184c]
call fcn.1001015a
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0xcc0]
call fcn.10010106
mov dword [ebp - 4], 1
mov dword [ebp - 0x584], 0xe76dcb0c
mov dword [ebp - 0x13e8], 0x702b6816
mov dword [ebp - 0x13e4], 0x702b6816
mov dword [ebp - 0x13e0], 0x702b6816
mov dword [ebp - 0x13dc], 0x702b6816
push 0x5209
push 0x379c
push 0x6bd1
push 0x1bcf
lea eax, [ebp - 0x454]
push eax
push 0
lea eax, [ebp - 0x268]
push eax
push 0x7247
call fcn.100336a4
add esp, 0x20
push 0
lea ecx, [ebp - 0xcc0]
call fcn.10010148
cmp dword [eax], 0
jne 0x100255bc
push 2
lea ecx, [ebp - 0xcc0]
call fcn.10010148
xor eax, eax
inc eax
je 0x10025611
mov eax, dword [ebp - 0x594]
mov dword [ebp - 0x1534], eax
mov eax, 0xbc35
test eax, eax
jne 0x100255f1
push 2
lea ecx, [ebp - 0xcc0]
call fcn.10010148
cmp dword [eax], 0
jne 0x100255f1
and dword [ebp - 0x934], 0
jmp 0x100255fb
mov dword [ebp - 0x934], 1
mov eax, dword [ebp - 0x934]
neg eax
je 0x10025611
mov dword [ebp - 0x57c], 1
jmp 0x10025618
and dword [ebp - 0x57c], 0
mov eax, dword [ebp - 0x2fc]
mov dword [ebp - 0x1668], eax
mov eax, dword [ebp - 0x57c]
neg eax
mov dword [ebp - 0xb14], eax
mov eax, dword [ebp - 0xb14]
mov dword [ebp - 0x584], eax
mov eax, dword [ebp - 0x584]
mov dword [ebp - 0x153c], eax
push 0
lea ecx, [ebp - 0xcc0]
call fcn.10010148
mov eax, dword [ebp - 0x454]
cmp dword [ebp - 0x268], eax
jne 0x10025671
mov dword [ebp - 0x93c], 1
jmp 0x10025678
and dword [ebp - 0x93c], 0
mov eax, dword [ebp - 0x454]
add eax, dword [ebp - 0x93c]
cmp eax, dword [ebp - 0x1024]
jl 0x10025698
mov dword [ebp - 0x102c], 1
jmp 0x1002569f
and dword [ebp - 0x102c], 0
push 0
lea ecx, [ebp - 0xcc0]
call fcn.10010148
push 2
lea ecx, [ebp - 0xcc0]
call fcn.10010148
cmp dword [eax], 0
jne 0x100256d0
cmp dword [ebp - 0x1034], 0
jne 0x100256d0
and dword [ebp - 0x58c], 0
jmp 0x100256da
mov dword [ebp - 0x58c], 1
cmp dword [ebp - 0x58c], 0xfffffff9
jle 0x100256ef
mov dword [ebp - 0xc08], 1
jmp 0x100256f6
and dword [ebp - 0xc08], 0
cmp dword [ebp - 0xc08], 0x5c2c
jle 0x1002570e
mov dword [ebp - 0x944], 1
jmp 0x10025715
and dword [ebp - 0x944], 0
mov eax, dword [ebp - 0x594]
add eax, dword [ebp - 0x944]
push 4
pop ecx
imul ecx, ecx, 3
mov dword [ebp + ecx - 0x13e8], eax
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xcc0]
call fcn.1001012c
mov dword [ebp - 0x3ec], 1
mov dword [ebp - 0x5c], 0xb60e704f
mov dword [ebp - 0x1044], 7
mov dword [ebp - 0x106c], 0xfffffff8
mov dword [ebp - 0x1758], 0xfffffffe
mov dword [ebp - 0x1064], 0
mov dword [ebp - 0x1544], 0x49ef57a5
mov dword [ebp - 0x1790], 0x933df47b
and dword [ebp - 0x1274], 0
and dword [ebp - 0x1270], 0
and dword [ebp - 0x126c], 0
and dword [ebp - 0x1268], 0
lea ecx, [ebp - 0x4fd]
call fcn.10010157
push eax
lea eax, [ebp - 0x1264]
push eax
lea eax, [ebp - 0x1274]
push eax
lea ecx, [ebp - 0x18bc]
call fcn.1001015a
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0x1624]
call fcn.10010106
mov dword [ebp - 4], 2
mov dword [ebp - 0x1074], 9
mov dword [ebp - 0x394], 0
jmp 0x10025805
mov eax, dword [ebp - 0x394]
inc eax
mov dword [ebp - 0x394], eax
cmp dword [ebp - 0x394], 2
jge 0x10025821
mov eax, dword [ebp - 0x394]
mov dword [ebp + eax*4 - 0x1864], 6
jmp 0x100257f8
mov eax, dword [ebp - 0x5c]
mov dword [ebp - 0x1588], eax
cmp dword [ebp - 0x5c], 0xffff
je 0x1002583f
mov dword [ebp - 0x59c], 1
jmp 0x10025846
and dword [ebp - 0x59c], 0
mov eax, dword [ebp - 0x5c]
cmp eax, dword [ebp - 0x59c]
jne 0x10025855
cmp dword [ebp - 0x5c], 0
push 0xfffffffffffffffe
pop eax
sub eax, dword [ebp - 0x5c]
imul eax, dword [ebp - 0x5c]
cmp eax, 0x94d03572
ja 0x10025872
mov dword [ebp - 0x103c], 1
jmp 0x10025879
and dword [ebp - 0x103c], 0
mov eax, dword [ebp - 0x5c]
mov dword [ebp - 0x16b4], eax
mov eax, dword [ebp - 0x5c]
mov dword [ebp - 0x1590], eax
mov eax, dword [ebp - 0x5c]
mov dword [ebp - 0x1784], eax
mov eax, dword [ebp - 0x1044]
mov dword [ebp - 0x1598], eax
mov eax, 0xc2d621ec
test eax, eax
jne 0x100258b8
cmp dword [ebp - 0x5c], 0
jne 0x100258b8
and dword [ebp - 0xb1c], 0
jmp 0x100258c2
mov dword [ebp - 0xb1c], 1
mov eax, dword [ebp - 0x5c]
cmp dword [ebp - 0xb1c], eax
jl 0x10025b0a
mov dword [ebp - 0x16c4], 0
mov dword [ebp - 0x15a0], 0x58b39d20
mov dword [ebp - 0x1798], 0x18670fc2
mov dword [ebp - 0x1400], 0xfffffffe
mov dword [ebp - 0x105c], 0x770aacc7
mov dword [ebp - 0x104c], 0x1e86
cmp dword [ebp - 0x104c], 0x841
jge 0x10025a3e
lea eax, [ebp - 0x304]
push eax
push 0x10009234
call fcn.10057beb
pop ecx
pop ecx
xor ecx, ecx
mov eax, dword [ebp - 0x304]
push 4
pop edx
mul edx
seto cl
neg ecx
or ecx, eax
push ecx
call fcn.10051c89
pop ecx
mov dword [ebp - 0x1054], eax
mov eax, dword [ebp - 0x1054]
mov dword [ebp - 0x29c], eax
and dword [ebp - 0x4cc], 0
and dword [ebp - 0x404], 0
and dword [ebp - 0x45c], 0
and dword [ebp - 0x220], 0
jmp 0x10025988
mov eax, dword [ebp - 0x220]
inc eax
mov dword [ebp - 0x220], eax
mov eax, dword [ebp - 0x220]
cmp eax, dword [ebp - 0x304]
jge 0x100259cf
mov eax, dword [ebp - 0x220]
mov ecx, dword [ebp - 0x29c]
lea eax, [ecx + eax*4]
push eax
push 0x10009148
call fcn.10057beb
pop ecx
pop ecx
mov eax, dword [ebp - 0x220]
mov ecx, dword [ebp - 0x29c]
mov edx, dword [ebp - 0x4cc]
add edx, dword [ecx + eax*4]
mov dword [ebp - 0x4cc], edx
jmp 0x1002597b
mov eax, dword [ebp - 0x304]
mov ecx, dword [ebp - 0x29c]
lea edx, [ecx + eax*4]
mov ecx, dword [ebp - 0x29c]
call fcn.100474b9
mov eax, dword [ebp - 0x4cc]
cdq
sub eax, edx
sar eax, 1
cmp dword [ebp - 0x45c], eax
jg 0x10025a2c
mov eax, dword [ebp - 0x404]
inc eax
mov dword [ebp - 0x404], eax
mov eax, dword [ebp - 0x304]
sub eax, dword [ebp - 0x404]
mov ecx, dword [ebp - 0x29c]
mov edx, dword [ebp - 0x45c]
add edx, dword [ecx + eax*4]
mov dword [ebp - 0x45c], edx
jmp 0x100259e9
push dword [ebp - 0x404]
push 0x10009160
call fcn.10057ed1
pop ecx
pop ecx
mov dword [ebp - 0xd4], 0
jmp 0x10025a57
mov eax, dword [ebp - 0xd4]
inc eax
mov dword [ebp - 0xd4], eax
cmp dword [ebp - 0xd4], 4
jge 0x10025a73
mov eax, dword [ebp - 0xd4]
mov dword [ebp + eax*4 - 0x1974], 1
jmp 0x10025a4a
mov dword [ebp - 0xd4], 0
jmp 0x10025a8c
mov eax, dword [ebp - 0xd4]
inc eax
mov dword [ebp - 0xd4], eax
cmp dword [ebp - 0xd4], 3
jge 0x10025aa8
mov eax, dword [ebp - 0xd4]
mov dword [ebp + eax*4 - 0x1954], 0x6695cd1d
jmp 0x10025a7f
push 0x624f
push 0x6af
push 0x2610
push 0x985
lea eax, [ebp - 0x105c]
push eax
push 0x2ffc
push 0x7cce
push 0x21ce
push 0x27
push 1
push 0x3565
push 0x128e
push 0
push 0
push 0x7d22
push 0x78af
push 0x7736
push 0x7845
push 0x5ba
call fcn.100327b1
add esp, 0x4c
jmp 0x10025ca4
mov dword [ebp - 0x30c], 0x8c46158e
mov dword [ebp - 0x5ac], 0xfffffff9
mov dword [ebp - 0x1408], 0x4462d17f
mov dword [ebp - 0x1410], 0
mov dword [ebp - 0x1418], 0x987f9bd8
push 2
lea ecx, [ebp - 0x1348]
call fcn.100100aa
mov byte [ebp - 4], 3
mov dword [ebp - 0x504], 0xe89b
lea eax, [ebp - 0x1348]
push eax
push 0x3e8d
push 0
lea eax, [ebp - 0x1420]
push eax
call fcn.10039a10
add esp, 0x10
push 0x2630
push 0x6e40
push 0
lea eax, [ebp - 0x30c]
push eax
lea eax, [ebp - 0x1064]
push eax
call fcn.10036d7a
add esp, 0x14
cmp dword [ebp - 0x30c], 0
jne 0x10025bd1
mov eax, dword [ebp - 0x504]
neg eax
neg eax
mov ecx, dword [ebp - 0x30c]
add ecx, dword [ebp - 0x106c]
add ecx, eax
mov eax, dword [ebp - 0x504]
inc eax
mov dword [ebp - 0x504], eax
test ecx, ecx
jne 0x10025bd1
and dword [ebp - 0xc38], 0
jmp 0x10025bdb
mov dword [ebp - 0xc38], 1
push 3
lea ecx, [ebp - 0x1624]
call fcn.10010148
imul eax, dword [eax], 0xe866
test eax, eax
jbe 0x10025bfe
mov dword [ebp - 0x5a4], 1
jmp 0x10025c05
and dword [ebp - 0x5a4], 0
cmp dword [ebp - 0x5a4], 0xffffffff
jb 0x10025c23
cmp dword [ebp - 0x1074], 0
je 0x10025c23
mov dword [ebp - 0x94c], 1
jmp 0x10025c2a
and dword [ebp - 0x94c], 0
mov eax, dword [ebp - 0x94c]
mov dword [ebp - 0x5ac], eax
mov eax, dword [ebp - 0x5ac]
cmp dword [ebp - 0xc38], eax
jge 0x10025c50
mov dword [ebp - 0x5b4], 1
jmp 0x10025c57
and dword [ebp - 0x5b4], 0
mov eax, dword [ebp - 0x5b4]
sub eax, 0xe08a
jne 0x10025c76
cmp dword [ebp - 0x30c], 0
jne 0x10025c76
and dword [ebp - 0x954], 0
jmp 0x10025c80
mov dword [ebp - 0x954], 1
push 0
lea ecx, [ebp - 0x1348]
call fcn.10010148
mov ecx, dword [ebp - 0x954]
mov dword [eax], ecx
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x1348]
call fcn.1001012c
mov byte [ebp - 0x19b], 0
movzx eax, byte [ebp - 0x19b]
test eax, eax
je 0x10025cc1
push 0
push 0
call fcn.10040231
pop ecx
pop ecx
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x1624]
call fcn.1001012c
mov dword [ebp - 0x5bc], 0x3d8d
mov dword [ebp - 0x1428], 7
mov dword [ebp - 0x1430], 7
mov dword [ebp - 0x314], 0x3bd65256
mov dword [ebp - 0xb24], 0xcd49598a
mov dword [ebp - 0x1438], 0xfffffffb
mov dword [ebp - 0x39c], 0
jmp 0x10025d25
mov eax, dword [ebp - 0x39c]
inc eax
mov dword [ebp - 0x39c], eax
cmp dword [ebp - 0x39c], 3
jge 0x10025d41
mov eax, dword [ebp - 0x39c]
mov dword [ebp + eax*4 - 0x182c], 0
jmp 0x10025d18
mov eax, dword [ebp - 0x5bc]
mov dword [ebp - 0x1440], eax
mov eax, dword [ebp - 0x314]
inc eax
mov dword [ebp - 0x314], eax
mov eax, dword [ebp - 0x5bc]
add eax, dword [ebp - 0xb24]
je 0x10025de6
mov eax, 0xffff
test eax, eax
je 0x10025d8d
cmp dword [ebp - 0x314], 0
cmp dword [ebp - 0x314], 0
je 0x10025d8d
mov dword [ebp - 0x5c4], 1
jmp 0x10025d94
and dword [ebp - 0x5c4], 0
mov eax, dword [ebp - 0xb24]
cmp dword [ebp - 0x5c4], eax
jl 0x10025dae
mov dword [ebp - 0x95c], 1
jmp 0x10025db5
and dword [ebp - 0x95c], 0
cmp dword [ebp - 0x95c], 3
jle 0x10025dca
mov dword [ebp - 0x5cc], 1
jmp 0x10025dd1
and dword [ebp - 0x5cc], 0
cmp dword [ebp - 0x5cc], 1
ja 0x10025de6
mov dword [ebp - 0xc14], 1
jmp 0x10025ded
and dword [ebp - 0xc14], 0
mov eax, dword [ebp - 0xc14]
add eax, 0x3b1dab55
push 4
pop ecx
shl ecx, 1
mov dword [ebp + ecx - 0x182c], eax
mov dword [ebp - 0xf4], 0xbe8e56f9
mov dword [ebp - 0x1448], 0x891023f1
mov dword [ebp - 0x1450], 0xf4326038
mov dword [ebp - 0xb4], 0
jmp 0x10025e3b
mov eax, dword [ebp - 0xb4]
inc eax
mov dword [ebp - 0xb4], eax
cmp dword [ebp - 0xb4], 2
jge 0x10025e57
mov eax, dword [ebp - 0xb4]
mov dword [ebp + eax*4 - 0xfd4], 0x26bdde0b
jmp 0x10025e2e
mov dword [ebp - 0xb4], 0
jmp 0x10025e70
mov eax, dword [ebp - 0xb4]
inc eax
mov dword [ebp - 0xb4], eax
cmp dword [ebp - 0xb4], 4
jge 0x10025e8c
mov eax, dword [ebp - 0xb4]
mov dword [ebp + eax*4 - 0x17e0], 1
jmp 0x10025e63
mov dword [ebp - 0xf4], 1
jmp 0x10025ea5
mov eax, dword [ebp - 0xf4]
dec eax
mov dword [ebp - 0xf4], eax
cmp dword [ebp - 0xf4], 0
jl 0x10025fcf
mov dword [ebp - 0x110], 0x9fb023ed
mov dword [ebp - 0x110], 1
jmp 0x10025ed5
mov eax, dword [ebp - 0x110]
dec eax
mov dword [ebp - 0x110], eax
cmp dword [ebp - 0x110], 0
jl 0x10025fca
mov dword [ebp - 0x107c], 1
mov eax, dword [ebp - 0xf4]
mov eax, dword [ebp + eax*4 - 0xfd4]
mov dword [ebp - 0x1458], eax
mov eax, dword [ebp - 0x110]
mov dword [ebp - 0x1460], eax
cmp dword [ebp - 0x110], 0
jne 0x10025f20
mov dword [ebp - 0x5d4], 1
jmp 0x10025f27
and dword [ebp - 0x5d4], 0
mov eax, dword [ebp - 0xf4]
mov ecx, dword [ebp - 0x5d4]
sub ecx, dword [ebp + eax*4 - 0xfd4]
sub ecx, dword [ebp - 0x110]
cmp ecx, 0x6ee97341
je 0x10025f54
mov dword [ebp - 0x964], 1
jmp 0x10025f5b
and dword [ebp - 0x964], 0
mov eax, dword [ebp - 0x964]
add eax, 0x348f4a8f
imul eax, dword [ebp - 0xf4]
cmp eax, dword [ebp - 0x110]
jne 0x10025f81
mov dword [ebp - 0x5dc], 1
jmp 0x10025f88
and dword [ebp - 0x5dc], 0
mov eax, dword [ebp - 0xf4]
mov eax, dword [ebp + eax*4 - 0xfd4]
cmp eax, dword [ebp - 0x5dc]
je 0x10025fb2
cmp dword [ebp - 0xf4], 0
je 0x10025fb2
mov dword [ebp - 0xb2c], 1
jmp 0x10025fb9
and dword [ebp - 0xb2c], 0
mov eax, dword [ebp - 0xb2c]
mov dword [ebp - 0x107c], eax
jmp 0x10025ec8
jmp 0x10025e98
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x17e0]
inc eax
push 4
pop ecx
shl ecx, 1
mov dword [ebp + ecx - 0x17e0], eax
mov dword [ebp - 0x474], 0xfff8
mov dword [ebp - 0x11fc], 0xfe0a8eac
mov dword [ebp - 0x11f8], 0xfe0a8eac
mov dword [ebp - 0x11f4], 0xfe0a8eac
mov dword [ebp - 0x11f0], 0xfe0a8eac
lea ecx, [ebp - 0x505]
call fcn.10010157
push eax
lea eax, [ebp - 0x11ec]
push eax
lea eax, [ebp - 0x11fc]
push eax
lea ecx, [ebp - 0x18a4]
call fcn.1001015a
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0x10f4]
call fcn.10010106
mov dword [ebp - 4], 4
mov dword [ebp - 0x13f8], 0x9729cf30
mov dword [ebp - 0x13f4], 0x9729cf30
mov dword [ebp - 0x13f0], 0x9729cf30
mov dword [ebp - 0x13ec], 0x9729cf30
push 1
lea ecx, [ebp - 0x119c]
call fcn.100100aa
mov byte [ebp - 4], 5
push 1
lea ecx, [ebp - 0x1154]
call fcn.100100aa
mov byte [ebp - 4], 6
mov dword [ebp - 0x2c], 0
jmp 0x100260b0
mov eax, dword [ebp - 0x2c]
inc eax
mov dword [ebp - 0x2c], eax
cmp dword [ebp - 0x2c], 1
jge 0x100260cc
push dword [ebp - 0x2c]
lea ecx, [ebp - 0x119c]
call fcn.10010148
mov dword [eax], 0xf3e76e5b
jmp 0x100260a9
mov dword [ebp - 0x2c], 0
jmp 0x100260dc
mov eax, dword [ebp - 0x2c]
inc eax
mov dword [ebp - 0x2c], eax
cmp dword [ebp - 0x2c], 1
jge 0x100260f8
push dword [ebp - 0x2c]
lea ecx, [ebp - 0x1154]
call fcn.10010148
mov dword [eax], 0xfffffffc
jmp 0x100260d5
mov dword [ebp - 0x2c], 0
jmp 0x10026108
mov eax, dword [ebp - 0x2c]
inc eax
mov dword [ebp - 0x2c], eax
cmp dword [ebp - 0x2c], 3
jge 0x1002611e
mov eax, dword [ebp - 0x2c]
mov dword [ebp + eax*4 - 0x1844], 1
jmp 0x10026101
push 0
lea ecx, [ebp - 0x10f4]
call fcn.10010148
mov dword [eax], 0xb
jmp 0x10026157
push 0
lea ecx, [ebp - 0x10f4]
call fcn.10010148
mov dword [ebp - 0x5e4], eax
mov eax, dword [ebp - 0x5e4]
mov eax, dword [eax]
dec eax
mov ecx, dword [ebp - 0x5e4]
mov dword [ecx], eax
push 0
lea ecx, [ebp - 0x10f4]
call fcn.10010148
cmp dword [eax], 0xfffffffe
jg 0x10026272
mov dword [ebp - 0x228], 0x188047d2
mov byte [ebp - 0x179], 0
movzx eax, byte [ebp - 0x179]
test eax, eax
je 0x10026191
push 0
call fcn.1004018d
pop ecx
mov esi, dword [ebp - 0x228]
push 0
lea ecx, [ebp - 0x119c]
call fcn.10010148
mov dword [eax], esi
mov eax, dword [ebp - 0x228]
neg eax
cmp eax, dword [ebp - 0x228]
jl 0x100261cb
cmp dword [ebp - 0x228], 0
je 0x100261cb
mov dword [ebp - 0x96c], 1
jmp 0x100261d2
and dword [ebp - 0x96c], 0
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x96c]
sub ecx, dword [ebp - 0x228]
cmp dword [ebp + eax - 0x13f8], ecx
jle 0x100261f9
mov dword [ebp - 0x1084], 1
jmp 0x10026200
and dword [ebp - 0x1084], 0
mov eax, 0x91b4956e
test eax, eax
jne 0x10026224
push 0
lea ecx, [ebp - 0x119c]
call fcn.10010148
cmp dword [eax], 0
jne 0x10026224
and dword [ebp - 0x5ec], 0
jmp 0x1002622e
mov dword [ebp - 0x5ec], 1
push 1
lea ecx, [ebp - 0x10f4]
call fcn.10010148
mov eax, dword [eax]
cmp eax, dword [ebp - 0x5ec]
je 0x10026251
mov dword [ebp - 0xc40], 1
jmp 0x10026258
and dword [ebp - 0xc40], 0
push 0
lea ecx, [ebp - 0x1154]
call fcn.10010148
mov ecx, dword [ebp - 0xc40]
mov dword [eax], ecx
jmp 0x10026133
push 4
pop eax
shl eax, 1
mov esi, dword [ebp + eax - 0x1844]
push 0
lea ecx, [ebp - 0x1154]
call fcn.10010148
mov dword [eax], esi
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x1154]
call fcn.1001012c
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x119c]
call fcn.1001012c
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x10f4]
call fcn.1001012c
mov dword [ebp - 0x9b4], 0xffff
mov dword [ebp - 0xc50], 0x5cab4306
mov dword [ebp - 0x1468], 0x2e31d83
mov dword [ebp - 0x1470], 0
mov dword [ebp - 0x1478], 0xffffffff
mov dword [ebp - 0x1480], 7
mov dword [ebp - 0x1488], 0xfffffff7
mov dword [ebp - 0x464], 0xffff
mov dword [ebp - 0xbc], 0
jmp 0x10026323
mov eax, dword [ebp - 0xbc]
inc eax
mov dword [ebp - 0xbc], eax
cmp dword [ebp - 0xbc], 2
jge 0x1002633f
mov eax, dword [ebp - 0xbc]
mov dword [ebp + eax*4 - 0x167c], 0xffff
jmp 0x10026316
mov dword [ebp - 0xbc], 0
jmp 0x10026358
mov eax, dword [ebp - 0xbc]
inc eax
mov dword [ebp - 0xbc], eax
cmp dword [ebp - 0xbc], 4
jge 0x10026374
mov eax, dword [ebp - 0xbc]
mov dword [ebp + eax*4 - 0x1984], 0x5f0ed1ad
jmp 0x1002634b
mov eax, dword [ebp - 0x464]
mov dword [ebp - 0x108c], eax
mov eax, dword [ebp - 0x464]
inc eax
mov dword [ebp - 0x464], eax
cmp dword [ebp - 0x108c], 0
jle 0x100263a2
mov dword [ebp - 0x5f4], 1
jmp 0x100263a9
and dword [ebp - 0x5f4], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x167c]
sub eax, dword [ebp - 0x5f4]
je 0x10026410
push 2
lea ecx, [ebp - 0x1360]
call fcn.100100aa
mov dword [ebp - 4], 7
lea eax, [ebp - 0x1360]
push eax
push 0
lea eax, [ebp - 0x1490]
push eax
push 1
call fcn.10023e2b
add esp, 0x10
push 0
lea ecx, [ebp - 0x1360]
call fcn.10010148
mov dword [eax], 3
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x1360]
call fcn.1001012c
jmp 0x10026436
mov byte [ebp - 0x19d], 0
movzx eax, byte [ebp - 0x19d]
test eax, eax
je 0x10026436
push 0
push 0
push 0x2310
push 0x2242
call dword [sym.imp.USER32.dll_PostMessageA]
mov dword [ebp - 0x9a4], 0xb72b416c
mov dword [ebp - 0x1094], 0x18d1
cmp dword [ebp - 0x1094], 0xc00
jge 0x1002677f
lea eax, [ebp - 0x1b4]
push eax
push 0x10009160
call fcn.10057beb
pop ecx
pop ecx
and dword [ebp - 0x109c], 0
lea eax, [ebp - 0x109c]
push eax
push dword [ebp - 0x1b4]
lea ecx, [ebp - 0xd34]
call fcn.10046ee9
mov dword [ebp - 4], 8
and dword [ebp - 0x3e4], 0
jmp 0x100264a9
mov eax, dword [ebp - 0x3e4]
inc eax
mov dword [ebp - 0x3e4], eax
mov eax, dword [ebp - 0x3e4]
cmp eax, dword [ebp - 0x1b4]
jge 0x100264d7
push dword [ebp - 0x3e4]
lea ecx, [ebp - 0xd34]
call fcn.10010148
push eax
push 0x10009158
call fcn.10057beb
pop ecx
pop ecx
jmp 0x1002649c
xorpd xmm0, xmm0
movlpd qword [ebp - 0x1550], xmm0
lea eax, [ebp - 0x1550]
push eax
mov eax, dword [ebp - 0x1b4]
inc eax
push eax
lea ecx, [ebp - 0x11b4]
call fcn.10046f12
mov byte [ebp - 4], 9
xorpd xmm0, xmm0
movlpd qword [ebp - 0x200], xmm0
and dword [ebp - 0x27c], 0
jmp 0x10026523
mov eax, dword [ebp - 0x27c]
inc eax
mov dword [ebp - 0x27c], eax
mov eax, dword [ebp - 0x27c]
cmp eax, dword [ebp - 0x1b4]
jge 0x10026583
push dword [ebp - 0x27c]
lea ecx, [ebp - 0xd34]
call fcn.10010148
mov eax, dword [eax]
cdq
add eax, dword [ebp - 0x200]
adc edx, dword [ebp - 0x1fc]
mov dword [ebp - 0x200], eax
mov dword [ebp - 0x1fc], edx
mov eax, dword [ebp - 0x27c]
inc eax
push eax
lea ecx, [ebp - 0x11b4]
call fcn.10046f34
mov ecx, dword [ebp - 0x200]
mov dword [eax], ecx
mov ecx, dword [ebp - 0x1fc]
mov dword [eax + 4], ecx
jmp 0x10026516
lea eax, [ebp - 0x1498]
push eax
lea ecx, [ebp - 0xd34]
call fcn.100101b8
push dword [eax]
lea eax, [ebp - 0x14a0]
push eax
lea ecx, [ebp - 0xd34]
call fcn.100101aa
push dword [eax]
call fcn.10012d93
pop ecx
pop ecx
xorpd xmm0, xmm0
movlpd qword [ebp - 0x178c], xmm0
lea eax, [ebp - 0x178c]
push eax
mov eax, dword [ebp - 0x1b4]
inc eax
push eax
lea ecx, [ebp - 0x116c]
call fcn.10046f12
mov byte [ebp - 4], 0xa
xorpd xmm0, xmm0
movlpd qword [ebp - 0x200], xmm0
and dword [ebp - 0x230], 0
jmp 0x100265fe
mov eax, dword [ebp - 0x230]
inc eax
mov dword [ebp - 0x230], eax
mov eax, dword [ebp - 0x230]
cmp eax, dword [ebp - 0x1b4]
jge 0x1002665e
push dword [ebp - 0x230]
lea ecx, [ebp - 0xd34]
call fcn.10010148
mov eax, dword [eax]
cdq
add eax, dword [ebp - 0x200]
adc edx, dword [ebp - 0x1fc]
mov dword [ebp - 0x200], eax
mov dword [ebp - 0x1fc], edx
mov eax, dword [ebp - 0x230]
inc eax
push eax
lea ecx, [ebp - 0x116c]
call fcn.10046f34
mov ecx, dword [ebp - 0x200]
mov dword [eax], ecx
mov ecx, dword [ebp - 0x1fc]
mov dword [eax + 4], ecx
jmp 0x100265f1
lea eax, [ebp - 0x10a4]
push eax
push 0x10009160
call fcn.10057beb
pop ecx
pop ecx
and dword [ebp - 0x4d4], 0
jmp 0x10026687
mov eax, dword [ebp - 0x4d4]
inc eax
mov dword [ebp - 0x4d4], eax
mov eax, dword [ebp - 0x4d4]
cmp eax, dword [ebp - 0x10a4]
jge 0x10026752
lea eax, [ebp - 0x5fc]
push eax
lea eax, [ebp - 0xb34]
push eax
lea eax, [ebp - 0x974]
push eax
push 0x100093ec
call fcn.10057beb
add esp, 0x10
cmp dword [ebp - 0x974], 1
jne 0x10026705
push dword [ebp - 0x5fc]
lea ecx, [ebp - 0x11b4]
call fcn.10046f34
mov esi, eax
mov eax, dword [ebp - 0xb34]
dec eax
push eax
lea ecx, [ebp - 0x11b4]
call fcn.10046f34
mov ecx, dword [esi]
sub ecx, dword [eax]
mov edx, dword [esi + 4]
sbb edx, dword [eax + 4]
push edx
push ecx
push 0x100094b0
call fcn.10057ed1
add esp, 0xc
jmp 0x1002674d
cmp dword [ebp - 0x974], 2
jne 0x1002674d
push dword [ebp - 0x5fc]
lea ecx, [ebp - 0x116c]
call fcn.10046f34
mov esi, eax
mov eax, dword [ebp - 0xb34]
dec eax
push eax
lea ecx, [ebp - 0x116c]
call fcn.10046f34
mov ecx, dword [esi]
sub ecx, dword [eax]
mov edx, dword [esi + 4]
sbb edx, dword [eax + 4]
push edx
push ecx
push 0x100094b0
call fcn.10057ed1
add esp, 0xc
jmp 0x1002667a
mov byte [ebp - 4], 9
lea ecx, [ebp - 0x116c]
call fcn.1001012c
mov byte [ebp - 4], 8
lea ecx, [ebp - 0x11b4]
call fcn.1001012c
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xd34]
call fcn.1001012c
mov dword [ebp - 0x97c], 0
push 3
lea ecx, [ebp - 0x1378]
call fcn.100100aa
mov dword [ebp - 4], 0xb
push 1
push 0x1be0
push 0
push 0x1c61
push 1
push 0x5a83
lea eax, [ebp - 0x14a8]
push eax
lea eax, [ebp - 0x1378]
push eax
push 0x78a2
call fcn.10024dac
add esp, 0x24
mov eax, dword [ebp - 0x97c]
mov dword [ebp - 0x604], eax
push 0
lea ecx, [ebp - 0x1378]
call fcn.10010148
mov ecx, dword [ebp - 0x604]
mov dword [eax], ecx
mov eax, dword [ebp - 0x604]
mov dword [ebp - 0x97c], eax
mov byte [ebp - 0x181], 0
movzx eax, byte [ebp - 0x181]
test eax, eax
je 0x10026814
push 0
call fcn.10039fc0
pop ecx
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x1378]
call fcn.1001012c
mov dword [ebp - 0x664], 7
mov dword [ebp - 0x674], 1
mov dword [ebp - 0x80], 0x40fc0272
mov dword [ebp - 0x54], 0xfffffffd
mov dword [ebp - 0x130], 0xf4f88039
mov dword [ebp - 0x108], 3
mov dword [ebp - 0x238], 0x770aacc7
mov dword [ebp - 0x1210], 0x1b546539
mov dword [ebp - 0x120c], 0x1b546539
mov dword [ebp - 0x1208], 0x1b546539
mov dword [ebp - 0x1204], 0x1b546539
lea ecx, [ebp - 0x50d]
call fcn.10010157
push eax
lea eax, [ebp - 0x1200]
push eax
lea eax, [ebp - 0x1210]
push eax
lea ecx, [ebp - 0x18b4]
call fcn.1001015a
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0x1838]
call fcn.10010106
mov dword [ebp - 4], 0xc
cmp dword [ebp - 0x80], 0xffffffff
jg 0x100268d9
mov dword [ebp - 0xc20], 1
jmp 0x100268e0
and dword [ebp - 0xc20], 0
mov eax, dword [ebp - 0x80]
cmp dword [ebp - 0x80], eax
jl 0x100268f4
mov dword [ebp - 0x60c], 1
jmp 0x100268fb
and dword [ebp - 0x60c], 0
mov eax, dword [ebp - 0x60c]
mov dword [ebp - 0x54], eax
mov eax, dword [ebp - 0x54]
mov dword [ebp - 0x130], eax
mov eax, dword [ebp - 0xc20]
sub eax, dword [ebp - 0x130]
je 0x10026930
cmp dword [ebp - 0x108], 0
je 0x10026930
mov dword [ebp - 0x614], 1
jmp 0x10026937
and dword [ebp - 0x614], 0
mov eax, dword [ebp - 0x80]
imul eax, dword [ebp - 0x614]
cmp eax, 1
jne 0x10026952
mov dword [ebp - 0x984], 1
jmp 0x10026959
and dword [ebp - 0x984], 0
mov eax, dword [ebp - 0x80]
cmp dword [ebp - 0x984], eax
je 0x10026970
mov dword [ebp - 0x10ac], 1
jmp 0x10026977
and dword [ebp - 0x10ac], 0
mov eax, dword [ebp - 0x80]
mov dword [ebp - 0x14b0], eax
cmp dword [ebp - 0x80], 0
je 0x10026998
cmp dword [ebp - 0x54], 0
je 0x10026998
mov dword [ebp - 0x61c], 1
jmp 0x1002699f
and dword [ebp - 0x61c], 0
mov eax, dword [ebp - 0x80]
cmp eax, dword [ebp - 0x61c]
jl 0x100269b6
mov dword [ebp - 0xb3c], 1
jmp 0x100269bd
and dword [ebp - 0xb3c], 0
cmp dword [ebp - 0xb3c], 4
jb 0x100269d2
mov dword [ebp - 0x10b4], 1
jmp 0x100269d9
and dword [ebp - 0x10b4], 0
mov eax, dword [ebp - 0x80]
mov dword [ebp - 0x14b8], eax
mov eax, dword [ebp - 0x108]
mov dword [ebp - 0x14c0], eax
cmp dword [ebp - 0x54], 0
je 0x10026a06
cmp dword [ebp - 0x54], 0
je 0x10026a06
mov dword [ebp - 0x624], 1
jmp 0x10026a0d
and dword [ebp - 0x624], 0
cmp dword [ebp - 0x624], 0xffffffff
jl 0x10026ce2
mov dword [ebp - 0x10bc], 0x59f89f2e
push 3
lea ecx, [ebp - 0x1390]
call fcn.100100aa
mov byte [ebp - 4], 0xd
mov dword [ebp - 0x10c4], 0
mov dword [ebp - 0x31c], 0
jmp 0x10026a58
mov eax, dword [ebp - 0x31c]
inc eax
mov dword [ebp - 0x31c], eax
cmp dword [ebp - 0x31c], 3
jge 0x10026a77
push dword [ebp - 0x31c]
lea ecx, [ebp - 0x1390]
call fcn.10010148
or dword [eax], 0xffffffff
jmp 0x10026a4b
push 0x37e9
push 0x3b2d
push 0x7f6b
lea eax, [ebp - 0x10bc]
push eax
lea eax, [ebp - 0x1390]
push eax
lea eax, [ebp - 0x80]
push eax
push 0x7bda
lea eax, [ebp - 0x54]
push eax
lea eax, [ebp - 0x130]
push eax
lea eax, [ebp - 0x10c4]
push eax
push 0x2853
lea eax, [ebp - 0x108]
push eax
lea eax, [ebp - 0x238]
push eax
push 0
push 0x6d2c
call fcn.10032d22
add esp, 0x3c
mov dword [ebp - 0x10cc], 0x1ffc
cmp dword [ebp - 0x10cc], 0xe92
jge 0x10026c80
mov edx, 0x100094b8
mov ecx, 0x10664338
call fcn.100130d7
lea eax, [ebp - 0x2bc]
push eax
mov ecx, 0x106643e0
call fcn.1001fcfb
push dword [ebp - 0x2bc]
mov edx, 0x100094e0
mov ecx, 0x10664338
call fcn.100130d7
mov ecx, eax
call fcn.1001ff61
mov edx, 0x100094d4
mov ecx, eax
call fcn.100130d7
and dword [ebp - 0x34], 0
jmp 0x10026b40
mov eax, dword [ebp - 0x34]
inc eax
mov dword [ebp - 0x34], eax
mov eax, dword [ebp - 0x34]
cmp eax, dword [ebp - 0x2bc]
jge 0x10026b62
mov eax, dword [ebp - 0x34]
lea eax, [ebp + eax*4 - 0x1a4c]
push eax
mov ecx, 0x106643e0
call fcn.1001fcfb
jmp 0x10026b39
mov edx, 0x100094e8
mov ecx, 0x10664338
call fcn.100130d7
and dword [ebp - 0x34], 0
jmp 0x10026b7e
mov eax, dword [ebp - 0x34]
inc eax
mov dword [ebp - 0x34], eax
mov eax, dword [ebp - 0x2bc]
dec eax
cmp dword [ebp - 0x34], eax
jge 0x10026c19
and dword [ebp - 0xdc], 0
jmp 0x10026ba4
mov eax, dword [ebp - 0xdc]
inc eax
mov dword [ebp - 0xdc], eax
mov eax, dword [ebp - 0x2bc]
sub eax, dword [ebp - 0x34]
dec eax
cmp dword [ebp - 0xdc], eax
jge 0x10026c14
mov eax, dword [ebp - 0xdc]
mov ecx, dword [ebp - 0xdc]
mov eax, dword [ebp + eax*4 - 0x1a4c]
cmp eax, dword [ebp + ecx*4 - 0x1a48]
jle 0x10026c12
mov eax, dword [ebp - 0xdc]
mov eax, dword [ebp + eax*4 - 0x1a4c]
mov dword [ebp - 0x10d4], eax
mov eax, dword [ebp - 0xdc]
mov ecx, dword [ebp - 0xdc]
mov ecx, dword [ebp + ecx*4 - 0x1a48]
mov dword [ebp + eax*4 - 0x1a4c], ecx
mov eax, dword [ebp - 0xdc]
mov ecx, dword [ebp - 0x10d4]
mov dword [ebp + eax*4 - 0x1a48], ecx
jmp 0x10026b97
jmp 0x10026b77
mov edx, 0x10009510
mov ecx, 0x10664338
call fcn.100130d7
mov edx, 0x10009530
mov ecx, 0x10664338
call fcn.100130d7
and dword [ebp - 0x34], 0
jmp 0x10026c44
mov eax, dword [ebp - 0x34]
inc eax
mov dword [ebp - 0x34], eax
mov eax, dword [ebp - 0x34]
cmp eax, dword [ebp - 0x2bc]
jge 0x10026c71
mov eax, dword [ebp - 0x34]
push dword [ebp + eax*4 - 0x1a4c]
mov ecx, 0x10664338
call fcn.1001ff61
mov edx, 0x10009484
mov ecx, eax
call fcn.100130d7
jmp 0x10026c3d
push fcn.100132ae
mov ecx, 0x10664338
call fcn.1000fea3
push 0x72c6
push 0x6113
push 0xc6d
push 0x2d87
push 0x6b35
push 0x7d59
lea eax, [ebp - 0x54]
push eax
push 0x47a5
push 0
push 0x3744
push 0x3854
lea eax, [ebp - 0x108]
push eax
push 0x605f
push 0
push 0x1a05
call fcn.1002321c
add esp, 0x3c
mov byte [ebp - 4], 0xc
lea ecx, [ebp - 0x1390]
call fcn.1001012c
jmp 0x10026db5
mov dword [ebp - 0x54], 3
jmp 0x10026cf2
mov eax, dword [ebp - 0x54]
dec eax
mov dword [ebp - 0x54], eax
cmp dword [ebp - 0x54], 0
jl 0x10026db5
mov dword [ebp - 0x108], 0
jmp 0x10026d15
mov eax, dword [ebp - 0x108]
inc eax
mov dword [ebp - 0x108], eax
cmp dword [ebp - 0x108], 3
jg 0x10026db0
mov dword [ebp - 0x238], 0
jmp 0x10026d3b
mov eax, dword [ebp - 0x238]
inc eax
mov dword [ebp - 0x238], eax
cmp dword [ebp - 0x238], 3
jg 0x10026dab
push 0x5555
push 0x7cbe
push 0x3864
push 0x2ce1
push 0
call fcn.100321e8
add esp, 0x14
mov dword [ebp - 0x130], 0
jmp 0x10026d7b
mov eax, dword [ebp - 0x130]
inc eax
mov dword [ebp - 0x130], eax
cmp dword [ebp - 0x130], 3
jg 0x10026da9
mov byte [ebp - 0x19f], 0
movzx eax, byte [ebp - 0x19f]
test eax, eax
je 0x10026da7
push 0x2ef2
push 0
push 0
call fcn.10032445
add esp, 0xc
jmp 0x10026d6e
jmp 0x10026d2e
jmp 0x10026d08
jmp 0x10026ceb
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x1838]
call fcn.1001012c
mov dword [ebp - 0xdf4], 0
mov dword [ebp - 0x98], 1
push 1
lea ecx, [ebp - 0x1184]
call fcn.100100aa
mov dword [ebp - 4], 0xe
mov dword [ebp - 0x10dc], 0
mov dword [ebp - 0x10e4], 0xffff
mov dword [ebp - 0x3a4], 0
jmp 0x10026e19
mov eax, dword [ebp - 0x3a4]
inc eax
mov dword [ebp - 0x3a4], eax
cmp dword [ebp - 0x3a4], 1
jge 0x10026e3b
push dword [ebp - 0x3a4]
lea ecx, [ebp - 0x1184]
call fcn.10010148
mov dword [eax], 0xaa9ac70c
jmp 0x10026e0c
mov dword [ebp - 0x98], 0
jmp 0x10026e54
mov eax, dword [ebp - 0x98]
dec eax
mov dword [ebp - 0x98], eax
cmp dword [ebp - 0x98], 0xffffffe3
jl 0x10026ed2
mov dword [ebp - 0x284], 0xe04822b1
mov dword [ebp - 0x284], 0
jmp 0x10026e80
mov eax, dword [ebp - 0x284]
inc eax
mov dword [ebp - 0x284], eax
cmp dword [ebp - 0x284], 1
jge 0x10026ecd
push 0x1cf2
push 0
push 1
push 0x5229
push 0x4d42
push 0x405a
lea eax, [ebp - 0x284]
push eax
push 0x413b
push 0x6c9c
push 0x21ed
push 0x661f
lea eax, [ebp - 0x1184]
push eax
call fcn.1002351e
add esp, 0x30
jmp 0x10026e73
jmp 0x10026e47
mov dword [ebp - 0x98], 0
jmp 0x10026eeb
mov eax, dword [ebp - 0x98]
dec eax
mov dword [ebp - 0x98], eax
cmp dword [ebp - 0x98], 0
jl 0x10026f45
mov dword [ebp - 0xf88], 0xededb5ca
push 0
lea eax, [ebp - 0x10dc]
push eax
lea eax, [ebp - 0x1184]
push eax
lea eax, [ebp - 0x98]
push eax
push 1
lea eax, [ebp - 0x10e4]
push eax
push 0x380f
lea eax, [ebp - 0xf88]
push eax
push 0x76eb
push 0x2685
push 0
push 0x642e
call fcn.1003e71e
add esp, 0x30
jmp 0x10026ede
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x1184]
call fcn.1001012c
push 3
lea ecx, [ebp - 0xce4]
call fcn.100100aa
mov dword [ebp - 4], 0xf
mov dword [ebp - 0x118], 0
mov dword [ebp - 0x62c], 0x1cb4e76a
mov dword [ebp - 0xc48], 1
mov dword [ebp - 0x138], 0x980db959
mov dword [ebp - 0x324], 0
jmp 0x10026fa9
mov eax, dword [ebp - 0x324]
inc eax
mov dword [ebp - 0x324], eax
cmp dword [ebp - 0x324], 3
jge 0x10026fcb
push dword [ebp - 0x324]
lea ecx, [ebp - 0xce4]
call fcn.10010148
mov dword [eax], 0x46db5052
jmp 0x10026f9c
mov eax, dword [ebp - 0x118]
add eax, 8
cmp eax, 1
je 0x10026fe5
mov dword [ebp - 0x98c], 1
jmp 0x10026fec
and dword [ebp - 0x98c], 0
mov eax, dword [ebp - 0x118]
imul eax, dword [ebp - 0x98c]
mov dword [ebp - 0x62c], eax
mov eax, dword [ebp - 0x62c]
mov dword [ebp - 0xc48], eax
mov esi, dword [ebp - 0xc48]
push 1
lea ecx, [ebp - 0xce4]
call fcn.10010148
cmp dword [eax], esi
jne 0x1002702f
xor eax, eax
jne 0x1002702f
and dword [ebp - 0x634], 0
jmp 0x10027039
mov dword [ebp - 0x634], 1
push 0
lea ecx, [ebp - 0xce4]
call fcn.10010148
mov eax, dword [eax]
cmp eax, dword [ebp - 0x634]
jne 0x1002705c
mov dword [ebp - 0x994], 1
jmp 0x10027063
and dword [ebp - 0x994], 0
mov eax, dword [ebp - 0x994]
mov dword [ebp - 0x138], eax
cmp dword [ebp - 0x138], 0
je 0x100270a3
mov byte [ebp - 0x189], 0
movzx eax, byte [ebp - 0x189]
test eax, eax
je 0x1002709e
push 0
push 0x1cfa
push 0x58c4
call fcn.10032c33
add esp, 0xc
jmp 0x1002712e
mov dword [ebp - 0x63c], 0xc8b166c1
push 0
lea eax, [ebp - 0x63c]
push eax
push 0x42ab
lea eax, [ebp - 0xce4]
push eax
lea eax, [ebp - 0x138]
push eax
push 0
push 0x511d
call fcn.10022ecb
add esp, 0x1c
mov dword [ebp - 0x138], 0
jmp 0x100270f1
mov eax, dword [ebp - 0x138]
dec eax
mov dword [ebp - 0x138], eax
cmp dword [ebp - 0x138], 0xfffffff4
jl 0x1002712e
mov esi, dword [ebp - 0x118]
push 0
lea ecx, [ebp - 0xce4]
call fcn.10010148
add esi, dword [eax]
mov dword [ebp - 0x63c], esi
mov byte [ebp - 0x1a1], 0
lea eax, [ebp - 0x1a1]
push eax
push 0
call fcn.10031a67
pop ecx
pop ecx
jmp 0x100270e4
mov dword [ebp - 0x118], 0
jmp 0x10027147
mov eax, dword [ebp - 0x118]
inc eax
mov dword [ebp - 0x118], eax
cmp dword [ebp - 0x118], 3
jge 0x10027169
push dword [ebp - 0x118]
lea ecx, [ebp - 0xce4]
call fcn.10010148
mov dword [eax], 0x9ba5b042
jmp 0x1002713a
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xce4]
call fcn.1001012c
mov dword [ebp - 0xc4], 0
jmp 0x10027191
mov eax, dword [ebp - 0xc4]
inc eax
mov dword [ebp - 0xc4], eax
cmp dword [ebp - 0xc4], 1
jge 0x100271ad
mov eax, dword [ebp - 0xc4]
mov dword [ebp + eax*4 - 0xde4], 0xfffffff9
jmp 0x10027184
mov dword [ebp - 0xdcc], 0xfffffff9
mov dword [ebp - 0xe88], 0x1c98
cmp dword [ebp - 0xe88], 0xb48
jge 0x10027399
lea ecx, [ebp - 0x13a8]
call fcn.10046da9
mov dword [ebp - 4], 0x10
mov byte [ebp - 0x191], 1
lea eax, [ebp - 0x191]
push eax
lea edx, [ebp - 0x18e8]
lea ecx, [ebp - 0x1930]
call fcn.100474d7
pop ecx
xor eax, eax
inc eax
shl eax, 0
mov byte [ebp + eax - 0x1930], 0
xor eax, eax
inc eax
imul eax, eax, 0
mov byte [ebp + eax - 0x1930], 0
mov dword [ebp - 0x424], 1
jmp 0x10027238
mov eax, dword [ebp - 0x424]
inc eax
mov dword [ebp - 0x424], eax
cmp dword [ebp - 0x424], 0x48
jge 0x10027251
mov eax, dword [ebp - 0x424]
mov byte [ebp + eax*2 - 0x1930], 0
jmp 0x1002722b
mov dword [ebp - 0x100], 3
jmp 0x1002726b
mov eax, dword [ebp - 0x100]
inc eax
inc eax
mov dword [ebp - 0x100], eax
cmp dword [ebp - 0x100], 0x48
jge 0x100272e8
mov eax, dword [ebp - 0x100]
movzx eax, byte [ebp + eax - 0x1930]
test eax, eax
je 0x100272e3
cmp dword [ebp - 0x100], 0x48
jge 0x100272a1
lea eax, [ebp - 0x100]
push eax
lea ecx, [ebp - 0x13a8]
call fcn.10046db6
mov dword [ebp - 0x32c], 2
jmp 0x100272ba
mov eax, dword [ebp - 0x32c]
inc eax
mov dword [ebp - 0x32c], eax
mov eax, dword [ebp - 0x32c]
imul eax, dword [ebp - 0x100]
cmp eax, 0x48
jge 0x100272e3
mov eax, dword [ebp - 0x100]
imul eax, dword [ebp - 0x32c]
mov byte [ebp + eax - 0x1930], 0
jmp 0x100272ad
jmp 0x1002725d
xor eax, eax
inc eax
je 0x1002738a
lea eax, [ebp - 0x52c]
push eax
push 0x10009148
call fcn.10057beb
pop ecx
pop ecx
cmp dword [ebp - 0x52c], 0
jne 0x1002730f
jmp 0x1002738a
and dword [ebp - 0x46c], 0
jmp 0x10027325
mov eax, dword [ebp - 0x46c]
inc eax
mov dword [ebp - 0x46c], eax
push dword [ebp - 0x46c]
lea ecx, [ebp - 0x13a8]
call fcn.10010148
mov eax, dword [eax]
mov dword [ebp - 0x644], eax
mov eax, dword [ebp - 0x52c]
sub eax, dword [ebp - 0x644]
mov dword [ebp - 0xb44], eax
mov eax, dword [ebp - 0xb44]
movzx eax, byte [ebp + eax - 0x1930]
test eax, eax
je 0x10027383
push dword [ebp - 0xb44]
push dword [ebp - 0x644]
push dword [ebp - 0x52c]
push 0x10009548
call fcn.10057ed1
add esp, 0x10
jmp 0x10027385
jmp 0x10027318
jmp 0x100272e8
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x13a8]
call fcn.1001012c
mov dword [ebp - 0x14c8], 0xb779c63c
mov dword [ebp - 0xdc4], 0x8f9c25b0
mov dword [ebp - 0xdf0], 0x56890c54
mov dword [ebp - 0x14d0], 0x28ed4a55
mov dword [ebp - 0x14d8], 0xab227d37
mov dword [ebp - 0x14e0], 0x73a4c924
mov dword [ebp - 0x14e8], 1
mov dword [ebp - 0xf64], 0
mov dword [ebp - 0x14f0], 0xffffffff
mov dword [ebp - 0x1040], 0xfffffff7
mov dword [ebp - 0x14f8], 0xfffffff9
mov dword [ebp - 0x1500], 0x741311e2
mov dword [ebp - 0xddc], 0xbbd4856c
push 1
lea ecx, [ebp - 0x1634]
call fcn.100100aa
mov dword [ebp - 4], 0x11
mov dword [ebp - 0xda4], 0
mov dword [ebp - 0x10a0], 0x81dd
mov dword [ebp - 0x1038], 0xffffffff
mov dword [ebp - 0xdd4], 0xfffffffc
mov dword [ebp - 0x3ac], 0
jmp 0x10027470
mov eax, dword [ebp - 0x3ac]
inc eax
mov dword [ebp - 0x3ac], eax
cmp dword [ebp - 0x3ac], 1
jge 0x1002748f
push dword [ebp - 0x3ac]
lea ecx, [ebp - 0x1634]
call fcn.10010148
and dword [eax], 0
jmp 0x10027463
push 0
lea eax, [ebp - 0xdf0]
push eax
lea eax, [ebp - 0x1038]
push eax
lea eax, [ebp - 0xdc4]
push eax
lea eax, [ebp - 0xda4]
push eax
push 0x5624
lea eax, [ebp - 0xdcc]
push eax
lea eax, [ebp - 0x10a0]
push eax
lea eax, [ebp - 0xdd4]
push eax
lea eax, [ebp - 0xf64]
push eax
lea eax, [ebp - 0xddc]
push eax
lea eax, [ebp - 0x1040]
push eax
call fcn.1003a39c
add esp, 0x30
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x1634]
call fcn.1001012c
mov dword [ebp - 0xc4], 0
jmp 0x1002750c
mov eax, dword [ebp - 0xc4]
inc eax
mov dword [ebp - 0xc4], eax
cmp dword [ebp - 0xc4], 1
jge 0x10027528
mov eax, dword [ebp - 0xc4]
mov dword [ebp + eax*4 - 0x334], 0x53a3
jmp 0x100274ff
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0xde4], 0xea0
mov eax, dword [ebp - 0x474]
mov dword [ebp - 0xf6c], eax
mov eax, dword [ebp - 0x474]
dec eax
mov dword [ebp - 0x474], eax
cmp dword [ebp - 0xf6c], 0xea0
jg 0x1002756a
mov dword [ebp - 0x99c], 1
jmp 0x10027571
and dword [ebp - 0x99c], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x334]
cmp dword [ebp - 0x99c], eax
jg 0x10027592
mov dword [ebp - 0x67c], 1
jmp 0x10027599
and dword [ebp - 0x67c], 0
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x334], 0
jne 0x100275b5
mov dword [ebp - 0x9ac], 1
jmp 0x100275bc
and dword [ebp - 0x9ac], 0
mov eax, dword [ebp - 0x9b4]
mov dword [ebp - 0x3ec], eax
mov eax, dword [ebp - 0xc50]
cmp dword [ebp - 0x3ec], eax
jle 0x100275e2
mov dword [ebp - 0x64c], 1
jmp 0x100275e9
and dword [ebp - 0x64c], 0
mov eax, dword [ebp - 0x64c]
sub eax, dword [ebp - 0x654]
add eax, dword [ebp - 0xc50]
mov dword [ebp - 0x9a4], eax
mov eax, dword [ebp - 0x654]
cmp dword [ebp - 0x9a4], eax
jle 0x1002761b
mov dword [ebp - 0x65c], 1
jmp 0x10027622
and dword [ebp - 0x65c], 0
cmp dword [ebp - 0x65c], 0
je 0x10027637
mov dword [ebp - 0xdec], 1
jmp 0x1002763e
and dword [ebp - 0xdec], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x334]
mov dword [ebp - 0x1508], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x334]
cmp dword [ebp - 0x3ec], eax
jge 0x10027672
mov dword [ebp - 0xb4c], 1
jmp 0x10027679
and dword [ebp - 0xb4c], 0
mov eax, dword [ebp - 0xb4c]
mov dword [ebp - 0x664], eax
mov eax, dword [ebp - 0x664]
cmp dword [ebp - 0x9ac], eax
jg 0x1002769f
mov dword [ebp - 0x66c], 1
jmp 0x100276a6
and dword [ebp - 0x66c], 0
cmp dword [ebp - 0x66c], 0x96bc712b
jbe 0x100276be
mov dword [ebp - 0xc2c], 1
jmp 0x100276c5
and dword [ebp - 0xc2c], 0
mov eax, dword [ebp - 0xc2c]
mov dword [ebp - 0x674], eax
cmp dword [ebp - 0x674], 0
jne 0x100276e7
xor eax, eax
jne 0x100276e7
and dword [ebp - 0x1108], 0
jmp 0x100276f1
mov dword [ebp - 0x1108], 1
mov eax, dword [ebp - 0x9b4]
mov dword [ebp - 0x1510], eax
mov eax, dword [ebp - 0x3ec]
add eax, dword [ebp - 0x67c]
jne 0x1002771b
push 0xfffffffffffffffc
pop eax
test eax, eax
jne 0x1002771b
and dword [ebp - 0xb54], 0
jmp 0x10027725
mov dword [ebp - 0xb54], 1
mov eax, dword [ebp - 0xb54]
mov dword [ebp - 0xdf4], eax
mov dword [ebp - 0x208], 1
mov dword [ebp - 0x240], 0x588c5561
mov dword [ebp - 0x4dc], 0xffffffff
mov dword [ebp - 0xc34], 0xfffffffe
mov dword [ebp - 0xdfc], 1
mov dword [ebp - 0x1e0], 0xffffffff
mov dword [ebp - 0x208], 0
jmp 0x10027786
mov eax, dword [ebp - 0x208]
inc eax
mov dword [ebp - 0x208], eax
cmp dword [ebp - 0x208], 0
jle 0x10027b0c
push 2
lea ecx, [ebp - 0xd94]
call fcn.100100aa
mov dword [ebp - 4], 0x12
mov dword [ebp - 0x1518], 0xe469209a
mov dword [ebp - 0xec], 0
jmp 0x100277ca
mov eax, dword [ebp - 0xec]
inc eax
mov dword [ebp - 0xec], eax
cmp dword [ebp - 0xec], 2
jge 0x100277ec
push dword [ebp - 0xec]
lea ecx, [ebp - 0xd94]
call fcn.10010148
mov dword [eax], 0xfda0e60f
jmp 0x100277bd
mov dword [ebp - 0xec], 0
jmp 0x10027805
mov eax, dword [ebp - 0xec]
inc eax
mov dword [ebp - 0xec], eax
cmp dword [ebp - 0xec], 3
jge 0x10027821
mov eax, dword [ebp - 0xec]
mov dword [ebp + eax*4 - 0x1644], 0xc43cc9f1
jmp 0x100277f8
push 0
lea ecx, [ebp - 0xd94]
call fcn.10010148
and dword [eax], 0
jmp 0x10027857
push 0
lea ecx, [ebp - 0xd94]
call fcn.10010148
mov dword [ebp - 0x684], eax
mov eax, dword [ebp - 0x684]
mov eax, dword [eax]
inc eax
mov ecx, dword [ebp - 0x684]
mov dword [ecx], eax
push 0
lea ecx, [ebp - 0xd94]
call fcn.10010148
cmp dword [eax], 5
jg 0x10027af8
mov dword [ebp - 0x33c], 0xffffffff
mov dword [ebp - 0x33c], 0
jmp 0x10027890
cmp dword [ebp - 0x33c], 0xfffffff9
jle 0x10027af3
mov dword [ebp - 0x140], 0xffffffff
mov dword [ebp - 0x140], 0
jmp 0x100278c0
cmp dword [ebp - 0x140], 0xa
jg 0x10027ada
mov dword [ebp - 0xf74], 3
mov dword [ebp - 0x1520], 0xfffffffb
push 2
lea ecx, [ebp - 0x1654]
call fcn.100100aa
mov byte [ebp - 4], 0x13
mov dword [ebp - 0x3b4], 0
jmp 0x1002790b
push 0x4ceb
push 0
push 0x694a
call fcn.1003f4de
add esp, 0xc
jmp 0x10027883
jmp 0x10027833
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xd94]
call fcn.1001012c
jmp 0x10027779
cmp dword [ebp - 0xdfc], 1
jge 0x10027b21
mov dword [ebp - 0x1048], 1
jmp 0x10027b28
and dword [ebp - 0x1048], 0
cmp dword [ebp - 0xc34], 0
je 0x10027b46
mov eax, 0xdd8e181f
test eax, eax
je 0x10027b46
mov dword [ebp - 0x6a4], 1
jmp 0x10027b4d
and dword [ebp - 0x6a4], 0
cmp dword [ebp - 0x6a4], 2
jle 0x10027b62
mov dword [ebp - 0xe04], 1
jmp 0x10027b69
and dword [ebp - 0xe04], 0
push 0xfffffffffffffff7
pop eax
cmp eax, 0xfffffffb
je 0x10027b7d
mov dword [ebp - 0x9cc], 1
jmp 0x10027b84
and dword [ebp - 0x9cc], 0
cmp dword [ebp - 0x9cc], 0x57a8
jne 0x10027b9c
mov dword [ebp - 0xf7c], 1
jmp 0x10027ba3
and dword [ebp - 0xf7c], 0
mov eax, dword [ebp - 0x4dc]
mov dword [ebp - 0x1530], eax
mov dword [ebp - 0x4dc], 0x6979f9f4
cmp dword [ebp - 0x4dc], 0x8694a219
je 0x10027bd1
mov dword [ebp - 0x6ac], 1
jmp 0x10027bd8
and dword [ebp - 0x6ac], 0
mov eax, dword [ebp - 0x6ac]
mov dword [ebp - 0xc34], eax
mov eax, dword [ebp - 0xe0c]
mov eax, dword [eax + 0x38]
mov dword [ebp - 0x4f0], eax
push 4
lea ecx, [ebp - 0x4c4]
call fcn.100100aa
mov dword [ebp - 4], 0x14
mov dword [ebp - 0x90], 0xffffffff
mov dword [ebp - 0x344], 0
jmp 0x10027c2a
mov eax, dword [ebp - 0x344]
inc eax
mov dword [ebp - 0x344], eax
cmp dword [ebp - 0x344], 4
jge 0x10027c4c
push dword [ebp - 0x344]
lea ecx, [ebp - 0x4c4]
call fcn.10010148
mov dword [eax], 0x8c6a
jmp 0x10027c1d
mov dword [ebp - 0x90], 3
jmp 0x10027c65
cmp dword [ebp - 0x90], 0
jl 0x10027f64
mov dword [ebp - 0x4c], 0x891f782a
mov dword [ebp - 0x74], 0xfa1a8f1e
mov dword [ebp - 0x1538], 0xbb323fa9
mov dword [ebp - 0x4c], 3
jmp 0x10027c9a
mov byte [ebp - 0x11e], 0
push 0x57e4
push 0
push 0x5c1c
lea eax, [ebp - 0x11e]
push eax
call fcn.10039a50
add esp, 0x10
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x4c4]
call fcn.1001012c
mov dword [ebp - 0x1f0], 1
mov dword [ebp - 0x22c], 0x588c5561
push 4
lea ecx, [ebp - 0x1114]
call fcn.100100aa
mov dword [ebp - 4], 0x15
mov dword [ebp - 0x9e4], 0x6f97812a
mov dword [ebp - 0xf84], 0xfffffff8
mov dword [ebp - 0xe1c], 9
lea eax, [ebp - 0x1114]
push eax
push 0
lea eax, [ebp - 0x2a4]
push eax
call fcn.1003613d
add esp, 0xc
mov dword [ebp - 0x2a4], 0
jmp 0x1002800c
push 0
push 0x743
push 0x1597
push 0x20ae
push 0x1bdc
push 0x6ad
push 0
call dword [sym.imp.USER32.dll_TrackPopupMenu]
jmp 0x10030914
mov eax, dword [ebp + 8]
mov dword [ebp - 0xf80], eax
push 0
push dword [ebp - 0xf80]
push 0x46cb
call fcn.1003fa9d
add esp, 0xc
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop esi
mov esp, ebp
pop ebp
ret