Function at 0x10024a59
Capabilities:
Encrypt data using speck

Disassembly:
mov eax, 0x1006175b
call fcn.10060508
sub esp, 0x748
push ebx
push esi
push edi
mov dword [ebp - 0x10], esp
mov dl, 1
push 1
push 0x12c3
push 0x4e87
mov cl, dl
call fcn.10021c45
add esp, 0xc
lea ecx, [ebp - 0x37c]
push 1
call fcn.10004892
push 2
xor ebx, ebx
lea ecx, [ebp - 0x34c]
mov dword [ebp - 4], ebx
pop esi
mov dword [ebp - 0x18], 0x4d2b5f79
mov dword [ebp - 0x40], 0x3dd972c4
push esi
call fcn.10004892
push 1
lea eax, [ebp - 0x5c]
mov byte [ebp - 4], 1
push eax
push ecx
push ecx
lea eax, [ebp - 0x37c]
mov dword [ebp - 0x1b4], 0xffffffff
push 0x6f6e
mov dword [ebp - 0x20], 4
mov edx, 0x414e
push eax
call fcn.10021f1c
add esp, 0x18
mov dword [ebp - 0x5c], ebx
jmp 0x10024afe
mov eax, dword [ebp - 0x5c]
mov dword [ebp + eax*4 - 0xa4], ebx
inc dword [ebp - 0x5c]
cmp dword [ebp - 0x5c], 1
jl 0x10024af1
lea eax, [ebp - 0x34c]
push eax
push ecx
push 0x4c36
push 0x2f38
push ecx
lea edx, [ebp - 0x5c]
mov cl, 1
call fcn.10021f6b
mov eax, dword [ebp - 0xa4]
add esp, 0x14
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0xa4]
mov ecx, dword [ebp - 0xa4]
mov eax, dword [ebp - 0x37c]
mov dword [eax], ecx
cmp ecx, dword [ebp - 0xa4]
je 0x10024b53
cmp dword [ebp - 0x40], ebx
je 0x10024b53
xor edx, edx
inc edx
jmp 0x10024b55
mov edx, ebx
mov eax, dword [ebp - 0xa4]
xor ecx, ecx
cmp edx, eax
mov eax, dword [ebp - 0x34c]
push 0
setne cl
cmp ecx, 7
sbb ecx, ecx
inc ecx
mov dword [eax + 4], ecx
mov eax, dword [ebp - 0x18]
pop ecx
setne cl
sub ecx, eax
neg ecx
sbb ecx, ecx
inc ecx
mov dword [ebp - 0x1b4], ecx
jne 0x10024b97
mov eax, dword [ebp - 0x34c]
cmp dword [eax], ebx
jne 0x10024b97
mov ecx, ebx
jmp 0x10024b9a
xor ecx, ecx
inc ecx
mov eax, dword [ebp - 0xa4]
push ecx
add eax, ecx
mov dword [ebp - 0x20], eax
lea eax, [ebp - 0x37c]
push 0x719a
push eax
push 1
lea eax, [ebp - 0x1b4]
push 0x1f70
push eax
call fcn.10022070
add esp, 0x18
lea ecx, [ebp - 0x34c]
call fcn.100048f4
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x37c]
call fcn.100048f4
push 3
mov dword [ebp - 0x24], ebx
pop edi
jmp 0x10024bfb
mov eax, dword [ebp - 0x24]
mov dword [ebp + eax*4 - 0x1ac], 0xe1757117
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], edi
jl 0x10024bea
mov dword [ebp - 0x1a8], ebx
jmp 0x10024c7b
mov dword [ebp - 0x40], ebx
mov dword [ebp - 0x24], ebx
jmp 0x10024c21
mov eax, dword [ebp - 0x24]
mov dword [ebp + eax*4 - 0x288], 0x23e64f14
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], esi
jl 0x10024c10
mov ecx, dword [ebp - 0x1ac]
xor edx, edx
mov eax, dword [ebp - 0x1a8]
imul ecx, eax
mov eax, dword [ebp - 0x284]
add ecx, eax
mov eax, dword [ebp - 0x1ac]
cmp ecx, eax
mov eax, dword [ebp - 0x284]
setge dl
xor ecx, ecx
cmp eax, 0x28fb
mov dword [ebp - 0x40], edx
mov eax, dword [ebp - 0x288]
setge cl
xor edx, edx
cmp ecx, dword [ebp - 0x40]
setl dl
xor ecx, ecx
cmp edx, eax
sete cl
mov dword [ebp - 0x40], ecx
inc dword [ebp - 0x1a8]
cmp dword [ebp - 0x1a8], 0x17
jge 0x10024c08
mov eax, dword [0x10265f50]
test al, 1
jne 0x10024cbd
or eax, 1
mov dword [0x10265f50], eax
mov dword [ebp - 4], esi
mov dword [0x10265f70], ebx
mov dword [0x10265f74], ebx
call fcn.10029a7c
push 0x10062569
mov dword [0x10265f70], eax
call fcn.100483b2
or dword [ebp - 4], 0xffffffff
pop ecx
cmp byte [0x1007d9b4], 0
jne 0x10027dfc
mov dword [ebp - 0x2ec], 0xffffffff
lea ecx, [ebp - 0x460]
push 1
call fcn.10004892
mov dword [ebp - 4], edi
lea ecx, [ebp - 0x400]
xor eax, eax
mov dword [ebp - 0x34], 0xe6a3735b
inc eax
mov dword [ebp - 0x2fc], eax
mov dword [ebp - 0x2dc], 8
mov dword [ebp - 0x1cc], 0xaf14186e
push eax
call fcn.10004892
push 1
push 0x5b73
push 0xa9
push 0x2d99
lea eax, [ebp - 0x2f0]
mov byte [ebp - 4], 4
push eax
push ebx
mov dword [ebp - 0x2d4], 0x367afff1
lea edx, [ebp - 0x460]
mov dword [ebp - 0x2cc], 0x5bccbf78
mov ecx, 0x509
push 1
call fcn.1002282c
add esp, 0x1c
lea eax, [ebp - 0x400]
xor dl, dl
push eax
push ecx
lea eax, [ebp - 0x2f0]
mov ecx, 0x5e8d
push eax
call fcn.100224dd
add esp, 0xc
lea edx, [ebp - 0x1cc]
push 1
push 0x777b
push 0x6366
call fcn.10022166
mov dword [ebp - 0x38], 0x262
add esp, 0xc
cmp dword [ebp - 0x38], 0x454
jle 0x10024e15
mov esi, ebx
mov dword [ebp - 0x24], ebx
mov eax, esi
mov dword [ebp - 0x28], 0xe85
mov dword [ebp - 0x18], eax
mov edi, ebx
mov esi, ebx
or eax, esi
lea ecx, [ebp - 0x690]
or eax, edi
cdq
push edx
push eax
call fcn.10001a55
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x10024dd3
mov eax, dword [eax]
push eax
call fcn.100483dc
pop ecx
push ebx
push 1
lea ecx, [ebp - 0x690]
call fcn.10004d74
mov eax, dword [ebp - 0x18]
inc esi
cmp esi, 0x5eb7
jl 0x10024db7
inc edi
cmp edi, 0x116
jl 0x10024db5
dec eax
dec dword [ebp - 0x28]
mov dword [ebp - 0x18], eax
jne 0x10024db3
mov esi, dword [ebp - 0x24]
inc esi
mov dword [ebp - 0x24], esi
cmp esi, 0x2d96
jl 0x10024da7
push 0x2063
lea eax, [ebp - 0x2dc]
push eax
lea eax, [ebp - 0x2ec]
push eax
push 0x71d1
push 0x72b1
lea eax, [ebp - 0x460]
push eax
push ebx
push 0x4732
lea eax, [ebp - 0x2cc]
push eax
push 0x1866
lea eax, [ebp - 0x2fc]
push eax
lea eax, [ebp - 0x400]
push eax
push 0x177c
push 0x3067
lea eax, [ebp - 0x1cc]
push eax
push 0x6e99
push 0x99c
lea ecx, [ebp - 0x2d4]
call fcn.10024191
add esp, 0x44
cmp dword [ebp - 0x38], 0x1b3
jge 0x10024e96
push str.lrclkjuqb_vqq_qfofnt_qiunn_pqnqdwe_zuioiw_hrackg_nztlhr_mvu_ecuajtbm_vngttw_pogcc
call fcn.100483dc
pop ecx
lea ecx, [ebp - 0x400]
call fcn.100048f4
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x460]
call fcn.100048f4
push ebx
push ecx
push ecx
mov edx, 0x5b39
mov byte [0x1007d9b4], 1
call fcn.100248d1
mov dword [ebp - 0x198], 0x100795e8
add esp, 0xc
mov dword [ebp - 0x18], 0x2023
cmp dword [ebp - 0x18], 0x23ef
jle 0x10024f06
mov esi, ebx
mov edi, esi
mov ebx, 0x736f
mov eax, edi
mov ecx, 0x1007c858
cdq
push edx
push eax
call fcn.10004668
dec edi
dec ebx
jne 0x10024eea
inc esi
cmp esi, 0x49ea
jl 0x10024ee3
mov dword [ebp - 0x24], 0xe77dd688
mov dword [ebp - 0x40], 0x3588c556
push 3
mov dword [ebp - 0x20], 0xf0dfbc43
mov dword [ebp - 0x1c], ebx
pop edi
jmp 0x10024f34
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0x13c], 1
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], edi
jl 0x10024f23
mov dword [ebp - 0x1c], ebx
jmp 0x10024f4f
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0x314], 0xfffffff8
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 1
jl 0x10024f3e
mov dword [ebp - 0x1c], ebx
jmp 0x10024f6b
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0x4dc], 0xfffffff7
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 2
jl 0x10024f5a
mov dword [ebp - 0x138], 0xfffffffe
jmp 0x10024f8b
cmp dword [ebp - 0x13c], ebx
jne 0x10024f94
inc dword [ebp - 0x138]
cmp dword [ebp - 0x138], 0x19
jle 0x10024f7d
push 8
pop esi
mov dword [ebp - 0x24], esi
jmp 0x1002504f
push 1
lea ecx, [ebp - 0x358]
call fcn.10004892
lea eax, [ebp - 0x4f8]
mov dword [ebp - 4], 7
push eax
push ecx
push 0x250d
push ecx
push ecx
push 0x5f6a
push ecx
push 1
push ecx
mov dword [ebp - 0x28], 0x6e6c8cac
lea edx, [ebp - 0x358]
push ecx
call fcn.100236cc
mov eax, dword [ebp - 0x138]
add esp, 0x28
mov eax, dword [ebp - 0x138]
mov eax, dword [ebp - 0x138]
mov ecx, dword [ebp - 0x40]
mov eax, dword [ebp - 0x358]
cmp ecx, dword [eax]
jne 0x1002500d
cmp dword [ebp - 0x314], ebx
je 0x1002500d
xor ecx, ecx
inc ecx
jmp 0x1002500f
mov ecx, ebx
mov eax, dword [ebp - 0x138]
sub ecx, eax
je 0x10025026
cmp dword [ebp - 0x134], ebx
je 0x10025026
xor edx, edx
inc edx
jmp 0x10025028
mov edx, ebx
mov eax, dword [ebp - 0x20]
xor ecx, ecx
cmp edx, eax
setle cl
mov dword [ebp - 0x28], ecx
lea ecx, [ebp - 0x358]
cmp dword [ebp - 0x4d8], ebx
jne 0x1002505b
or dword [ebp - 4], 0xffffffff
call fcn.100048f4
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], 0xf
jg 0x10024f9f
jmp 0x10025060
call fcn.100048f4
mov dword [ebp - 4], esi
cmp dword [ebp - 0x18], 0x1fa9
jge 0x1002507b
mov edx, str.ohthl_pdyoyhmw_bdnbj_erlojg_feocxfeuj
mov ecx, 0x1007c858
call fcn.10006b3c
or dword [ebp - 4], 0xffffffff
mov dword [ebp - 0x140], ebx
mov eax, 0xee1c
mov dword [ebp - 0x120], eax
mov dword [ebp - 0x11c], eax
mov dword [ebp - 0x118], eax
mov dword [ebp - 0x114], eax
mov dword [ebp - 0x18], 0x93e6
mov dword [ebp - 0x28], 0xfffffff8
mov dword [ebp - 0x24], 0xf3bd791
mov dword [ebp - 0x24], 0xffffffff
mov dword [ebp - 0x24], 0xfffffffe
mov dword [ebp - 0x40], 0x9a1d127a
mov dword [ebp - 0x24], ebx
jmp 0x10025107
mov eax, dword [ebp - 0x24]
mov dword [ebp + eax*4 - 0x4e4], 0xffffffff
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], 2
jl 0x100250f6
mov eax, dword [ebp - 0x114]
cmp dword [ebp - 0x11c], ebx
je 0x100251a7
cmp dword [ebp - 0x114], ebx
jne 0x1002519a
mov ecx, dword [ebp - 0x28]
xor edx, edx
mov eax, dword [ebp - 0x114]
cmp eax, ecx
setge dl
cmp edx, 0xa023703a
jb 0x1002514a
cmp dword [ebp - 0x18], ebx
jne 0x1002514a
mov eax, dword [ebp - 0x114]
mov eax, dword [ebp - 0x18]
mov ecx, 0xbbfad0d7
mov eax, dword [ebp - 0x114]
mov eax, dword [ebp - 0x18]
cmp ecx, eax
sbb edx, edx
neg edx
sub edx, dword [ebp - 0x114]
mov eax, dword [ebp - 0x114]
neg edx
sbb edx, edx
xor ecx, ecx
inc edx
cmp edx, eax
setge cl
mov dword [ebp - 0x24], ecx
mov eax, dword [ebp - 0x24]
mov dword [ebp - 0x4e4], eax
mov eax, dword [ebp - 0x114]
mov dword [ebp - 0x24], eax
mov eax, dword [ebp - 0x24]
cmp dword [ebp - 0x28], ebx
jne 0x1002519a
mov eax, ebx
jmp 0x1002519d
xor eax, eax
inc eax
cmp eax, dword [ebp - 0x28]
je 0x100251a7
xor ecx, ecx
inc ecx
jmp 0x100251a9
mov ecx, ebx
mov eax, dword [ebp - 0x118]
imul eax, ecx
xor ecx, ecx
push 0xc
cmp eax, 0x3363
mov eax, dword [ebp - 0x114]
setl cl
xor edx, edx
cmp ecx, eax
mov eax, dword [ebp - 0x11c]
setge dl
sub edx, eax
mov dword [ebp - 0x24], edx
xor edx, edx
mov ecx, dword [ebp - 0x24]
mov eax, dword [ebp - 0x18]
cmp ecx, eax
setne dl
xor eax, eax
cmp edx, 0x415e
setl al
xor ecx, ecx
mov dword [ebp - 0x40], eax
mov eax, dword [ebp - 0x28]
cmp dword [ebp - 0x40], eax
pop eax
setl cl
mov dword [ebp - 0x40], ecx
mov cl, byte [0x100795e8]
cmp cl, byte [eax + 0x100795e8]
je 0x1002521b
inc eax
cmp eax, 0xe0
jl 0x10025206
jmp 0x100252ce
push 2
lea ecx, [ebp - 0x590]
mov dword [ebp - 0x140], eax
call fcn.10004892
push 0x3636
push ecx
push 1
push 0x7399
lea eax, [ebp - 0x590]
mov dword [ebp - 4], 0xa
push eax
lea eax, [ebp - 0x4fc]
push eax
call fcn.10022235
push 0x205d
push 0x6aba
push 0x448c
lea eax, [ebp - 0x86]
mov byte [ebp - 0x86], bl
push eax
push 0x2e54
push 0x6cd6
push 1
push 1
mov edx, 0x6822
xor cl, cl
call fcn.10023c68
add esp, 0x38
mov byte [ebp - 0x65], bl
lea eax, [ebp - 0x65]
mov dl, 1
push 0x3c2b
push ecx
push eax
push 0x58c3
push 0x7633
push 0x7b1
push ecx
push 0x36d4
mov ecx, 0x3349
call fcn.10022350
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x590]
add esp, 0x20
call fcn.100048f4
mov dword [ebp - 0x24], ebx
jmp 0x100252e4
mov eax, dword [ebp - 0x24]
mov dword [ebp + eax*4 - 0x52c], 0xcd45
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], edi
jl 0x100252d3
push 0x6289
push 0x6ecf
push 0x106b
push 1
xor dl, dl
mov cl, 1
call fcn.100244e3
add esp, 0x10
lea ecx, [ebp - 0x418]
dec dword [ebp - 0x52c]
mov dword [ebp - 0x2b0], 4
mov dword [ebp - 0x24], 0xe1757117
mov dword [ebp - 0x190], ebx
push edi
call fcn.10004892
push ecx
push ecx
push ebx
push ecx
push 0x2d8
lea edx, [ebp - 0x540]
mov dword [ebp - 4], 0xb
lea ecx, [ebp - 0x418]
call fcn.10024437
mov dword [ebp - 0x24], 0x1c
add esp, 0x14
cmp dword [ebp - 0x24], 0xfffffff2
jne 0x1002558b
mov esi, 0xb1b57606
mov dword [ebp - 0x38], 0xfffffffc
mov dword [ebp - 0x28], 1
mov dword [ebp - 0x38], ebx
jmp 0x10025552
push 2
lea ecx, [ebp - 0x578]
call fcn.10004892
lea eax, [ebp - 0x50c]
mov byte [ebp - 4], 0xc
push eax
push ecx
push ebx
lea eax, [ebp - 0x578]
mov dword [ebp - 0x3c], 9
push eax
push 0x3500
push 0x4f28
call fcn.10022235
mov dword [ebp - 0x3c], 1
add esp, 0x18
cmp dword [ebp - 0x3c], ebx
jl 0x10025540
mov dword [ebp - 0x1c], ebx
lea ecx, [ebp - 0x364]
push edi
call fcn.10004892
push ecx
lea eax, [ebp - 0x30c]
mov byte [ebp - 4], 0xd
push eax
push ecx
lea eax, [ebp - 0x364]
push eax
push 1
sub esp, 0x18
call fcn.100223d0
xor ecx, ecx
mov dword [ebp - 0x1c], ebx
add esp, 0x2c
inc ecx
jmp 0x1002551f
mov dword [ebp - 0x2c], 0xffffffff
mov dword [ebp - 0x4b8], esi
mov dword [ebp - 0x4b4], esi
mov dword [ebp - 0x4b0], esi
mov dword [ebp - 0x4ac], esi
mov dword [ebp - 0x2c], ecx
cmp dword [ebp - 0x2c], ebx
jl 0x1002551c
mov dword [ebp - 0x18], 0x221e9c96
mov dword [ebp - 0x20], 0x9063
mov dword [ebp - 0x18], ecx
cmp dword [ebp - 0x18], ebx
jl 0x100254ef
mov dword [ebp - 0x28], ebx
jmp 0x1002545f
mov eax, dword [ebp - 0x28]
mov dword [ebp + eax*4 - 0x3c8], 0xc4b664fb
inc dword [ebp - 0x28]
cmp dword [ebp - 0x28], 2
jl 0x1002544e
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x1c]
cmp dword [ebp - 0x20], ebx
jne 0x1002549e
mov ecx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x364]
neg ecx
sbb ecx, ecx
inc ecx
mov dword [eax], ecx
xor ecx, ecx
mov eax, dword [ebp - 0x3c]
inc ecx
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x3c8]
mov eax, dword [ebp - 0x38]
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x3c8]
mov eax, dword [ebp - 0x1c]
xor edx, edx
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x3c]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x2c]
cmp eax, ecx
mov eax, dword [ebp - 0x1c]
setg dl
xor ecx, ecx
cmp edx, eax
setle cl
mov dword [ebp - 0x28], ecx
xor ecx, ecx
inc ecx
cmp dword [ebp - 0x1c], ecx
jge 0x100254de
mov eax, dword [ebp - 0x364]
cmp dword [eax], ebx
mov eax, ebx
je 0x100254e0
mov eax, ecx
mov dword [ebp - 0x4ac], eax
dec dword [ebp - 0x18]
jns 0x10025449
mov dword [ebp - 0x28], ecx
cmp dword [ebp - 0x28], ebx
jl 0x10025513
mov dword [ebp - 0x40], 0xd964
mov eax, dword [ebp - 0x3c]
cmp dword [ebp - 0x40], 0xfffffffa
sbb eax, eax
inc eax
mov dword [ebp - 0x190], eax
dec dword [ebp - 0x28]
jns 0x100254f7
dec dword [ebp - 0x2c]
jns 0x1002542f
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], ecx
jle 0x10025404
lea ecx, [ebp - 0x364]
mov byte [ebp - 4], 0xc
call fcn.100048f4
dec dword [ebp - 0x3c]
jns 0x100253c9
lea ecx, [ebp - 0x578]
mov byte [ebp - 4], 0xb
call fcn.100048f4
inc dword [ebp - 0x38]
cmp dword [ebp - 0x38], 0x12
jne 0x1002537f
push ecx
lea eax, [ebp - 0x418]
mov dl, 1
push eax
push 0x2318
push 0x51ec
lea ecx, [ebp - 0x190]
call fcn.10021031
add esp, 0x10
dec dword [ebp - 0x24]
cmp dword [ebp - 0x24], 0xfffffff2
je 0x10025369
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x418]
call fcn.100048f4
push dword [ebp - 0x30c]
movdqa xmm0, xmmword [0x1006fa70]
lea eax, [ebp - 0x590]
push eax
lea eax, [ebp - 0x5a0]
mov dword [ebp - 0xf0], 0x100796c8
push eax
push ebx
lea ecx, [ebp - 0x220]
mov dword [ebp - 0x220], ebx
movdqu xmmword [ebp - 0x5a0], xmm0
mov dword [ebp - 0x21c], ebx
mov dword [ebp - 0x218], ebx
call fcn.100073f4
mov dword [ebp - 4], 0xe
mov dword [ebp - 0x18], ebx
jmp 0x10025603
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x1f4], 2
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], edi
jl 0x100255f2
mov dword [ebp - 0x1ec], ebx
cmp dword [ebp - 0x1ec], 0xffffffe9
jge 0x100256db
mov esi, dword [ebp - 0x220]
push edi
lea ecx, [ebp - 0x370]
call fcn.10004892
lea eax, [ebp - 0x2bc]
mov byte [ebp - 4], 0xf
push eax
push 0x4592
push 0x8e9
push 0x6fe2
push 0x6f0e
push 0x4c3f
push 1
mov dword [ebp - 0x40], 9
lea edx, [ebp - 0x370]
mov dword [ebp - 0x20], 0x1de6fc60
mov cl, 1
push ebx
call fcn.10023c68
mov eax, dword [ebp - 0x370]
add esp, 0x20
mov ecx, dword [eax]
sub ecx, dword [esi + 8]
mov eax, dword [ebp - 0x1ec]
sub ecx, 0x181290e8
add eax, ecx
je 0x10025697
cmp dword [ebp - 0x40], ebx
je 0x10025697
xor edx, edx
inc edx
jmp 0x10025699
mov edx, ebx
mov eax, dword [ebp - 0x370]
xor ecx, ecx
cmp dword [eax], edx
setg cl
sub ecx, dword [esi + 0xc]
neg ecx
sbb ecx, ecx
xor eax, eax
inc ecx
cmp ecx, 1
lea ecx, [ebp - 0x370]
setle al
mov dword [ebp - 0x20], eax
mov byte [ebp - 4], 0xe
call fcn.100048f4
dec dword [ebp - 0x1ec]
cmp dword [ebp - 0x1ec], 0xffffffe9
jl 0x10025621
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x220]
call fcn.100048f4
mov cl, byte [0x100796c8]
mov dl, byte [0x100795e8]
mov byte [ebp - 0x41], cl
call fcn.10029ad2
push dword [ebp - 0x2bc]
movdqa xmm0, xmmword [0x1006fab0]
lea ecx, [ebp - 0x230]
mov byte [0x100796c8], al
lea eax, [ebp - 0x5d0]
push eax
lea eax, [ebp - 0x5e0]
mov dword [ebp - 0x18], 0x3b2b74c3
push eax
mov dword [ebp - 0x20], 0xfffffff9
push ebx
movdqu xmmword [ebp - 0x5e0], xmm0
mov dword [ebp - 0x230], ebx
mov dword [ebp - 0x22c], ebx
mov dword [ebp - 0x228], ebx
call fcn.100073f4
mov dword [ebp - 4], 0x10
lea ecx, [ebp - 0x490]
mov dword [ebp - 0x20], 0x7d2a7e9f
push edi
call fcn.10004892
mov byte [ebp - 4], 0x11
mov dword [ebp - 0x98], ebx
jmp 0x10025790
mov eax, dword [ebp - 0x98]
mov dword [ebp + eax*4 - 0x15c], 0xe7937d8e
inc dword [ebp - 0x98]
cmp dword [ebp - 0x98], edi
jl 0x10025779
push ecx
lea eax, [ebp - 0x98]
push eax
lea eax, [ebp - 0x490]
push eax
push 1
call fcn.1002240e
mov eax, dword [ebp - 0x15c]
xor edx, edx
mov eax, dword [ebp - 0x15c]
add esp, 0x10
mov eax, dword [ebp - 0x15c]
mov dword [ebp - 0x18], 0xfffffffc
mov ecx, dword [ebp - 0x158]
mov eax, dword [ebp - 0x15c]
cmp ecx, eax
setl dl
mov dword [ebp - 0x20], edx
xor edx, edx
mov esi, dword [ebp - 0x20]
mov eax, dword [ebp - 0x230]
mov ecx, dword [ebp - 0x18]
mov dword [eax + 8], esi
mov eax, dword [ebp - 0x15c]
cmp ecx, eax
mov eax, dword [ebp - 0x15c]
setg dl
xor ecx, ecx
cmp esi, eax
setne cl
cmp edx, ecx
je 0x10025817
cmp dword [ebp - 0x18], ebx
je 0x10025817
xor ecx, ecx
inc ecx
jmp 0x10025819
mov ecx, ebx
mov eax, dword [ebp - 0x15c]
xor edx, edx
cmp ecx, eax
mov eax, dword [ebp - 0x154]
setg dl
xor ecx, ecx
cmp eax, edx
setg cl
xor edx, edx
mov dword [ebp - 0x20], ecx
mov ecx, dword [ebp - 0x20]
mov eax, dword [ebp - 0x158]
cmp ecx, eax
mov eax, dword [ebp - 0x490]
setne dl
xor ecx, ecx
cmp edx, 1
setg cl
mov dword [eax], ecx
lea ecx, [ebp - 0x490]
call fcn.100048f4
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x230]
call fcn.100048f4
xor esi, esi
inc esi
mov dword [ebp - 0x28], esi
cmp esi, 4
jge 0x10025e32
push edi
lea ecx, [ebp - 0x430]
call fcn.10004892
mov dword [ebp - 4], 0x12
mov dword [ebp - 0xc8], 0xffffffff
mov dword [ebp - 0x2a8], 0x80a7c6dd
mov dword [ebp - 0x18], ebx
jmp 0x100258be
mov ecx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x430]
mov dword [eax + ecx*4], 0xbbca6318
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], edi
jl 0x100258ab
mov dword [ebp - 0xc8], ebx
cmp dword [ebp - 0xc8], 2
jg 0x10025a70
mov dword [ebp - 0x20], 0x45b
cmp dword [ebp - 0x20], 0x573
jle 0x10025948
mov ecx, ebx
mov dword [ebp - 0x18], ebx
mov edi, ebx
mov esi, ebx
mov eax, edi
cdq
idiv esi
mov eax, ecx
mov ecx, edx
shl eax, cl
lea ecx, [ebp - 0x6fc]
cdq
push edx
push eax
call fcn.10001a55
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x10025912
mov eax, dword [eax]
push eax
call fcn.100483dc
pop ecx
push ebx
push 1
lea ecx, [ebp - 0x6fc]
call fcn.10004d74
mov ecx, dword [ebp - 0x18]
inc esi
cmp esi, 0xaee
jl 0x100258ef
inc edi
cmp edi, 0x35ca
jl 0x100258ed
inc ecx
mov dword [ebp - 0x18], ecx
cmp ecx, 0x240a
jl 0x100258eb
mov dword [ebp - 0x1b8], ebx
cmp dword [ebp - 0x20], 0x132
jge 0x10025962
push str.tnzog_trdurpjvy_zfgunxyd_inlkq_wvepva_fafaixew_jixrgacmg_ovumugbyz_nlhrayi_ufledrrm_tneruaaoc
call fcn.100483dc
pop ecx
push 0xbda
push ecx
mov dword [ebp - 4], 0x12
lea ecx, [ebp - 0x1b8]
mov dword [ebp - 0x278], 0xf5452fa8
mov dl, 1
push 0x6482
call fcn.100224dd
add esp, 0xc
lea eax, [ebp - 0x278]
mov edx, 0x4b92
push eax
push ecx
push ecx
push 0x2c88
push ebx
lea eax, [ebp - 0x430]
push eax
lea eax, [ebp - 0x2a8]
push eax
push 0x3f0b
push ecx
push ecx
lea eax, [ebp - 0xc8]
push eax
lea eax, [ebp - 0x1b8]
push eax
push 0x745b
push ecx
push 0x445c
push ecx
mov ecx, 0x5d8c
call fcn.10022706
mov dword [ebp - 0x20], 0x5ae9
add esp, 0x40
cmp dword [ebp - 0x20], 0x5e10
jle 0x10025a4a
mov ecx, ebx
mov dword [ebp - 0x18], ebx
mov edi, ebx
mov esi, ebx
lea eax, [esi + edi]
add eax, ecx
lea ecx, [ebp - 0x660]
cdq
push edx
push eax
call fcn.10001a55
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x10025a14
mov eax, dword [eax]
push eax
call fcn.100483dc
pop ecx
push ebx
push 1
lea ecx, [ebp - 0x660]
call fcn.10004d74
mov ecx, dword [ebp - 0x18]
inc esi
cmp esi, 0x7cff
jl 0x100259f7
inc edi
cmp edi, 0x14bc
jl 0x100259f5
inc ecx
mov dword [ebp - 0x18], ecx
cmp ecx, 0x2352
jl 0x100259f3
cmp dword [ebp - 0x20], 0x57f9
jge 0x10025a5e
push str.wbgegl_rhlmxijd_rzy_gferaz_ibtwmcvug_rifhsxpd_exstuxmhl_umyo_ijvl_zznwhqz_fxlgjjd_pjwqgsd_myxmvswz
call fcn.100483dc
pop ecx
mov dword [ebp - 4], 0x12
inc dword [ebp - 0xc8]
jmp 0x100258c9
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x430]
call fcn.100048f4
mov edi, dword [ebp - 0xf0]
xor edx, edx
mov eax, dword [ebp - 0x28]
inc edx
mov dword [ebp - 0x3c], edi
mov al, byte [eax + edi]
mov byte [ebp - 0x49], al
mov dword [ebp - 0x20], 0xffffffff
mov dword [ebp - 0x18], ebx
jmp 0x10025aae
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x50], 0xfffffffe
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], edx
jl 0x10025aa0
mov dword [ebp - 0x50], ebx
jmp 0x10025c0e
mov dword [ebp - 0x2c], 0xf5fa3187
mov dword [ebp - 0x40], edx
mov dword [ebp - 0x1c], ebx
jmp 0x10025ad7
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0x164], ebx
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 2
jl 0x10025aca
mov dword [ebp - 0x1c], ebx
jmp 0x10025af3
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0x53c], 0x56370016
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 3
jl 0x10025ae2
cmp dword [ebp - 0x50], ebx
je 0x10025b0a
mov eax, dword [ebp - 0x160]
mov eax, dword [ebp - 0x160]
mov eax, dword [ebp - 0x160]
xor ecx, ecx
sub eax, dword [ebp - 0x160]
cmp eax, 2
mov eax, dword [ebp - 0x160]
setle cl
add eax, ecx
mov dword [ebp - 0x2c], eax
mov dword [ebp - 0x53c], ebx
mov dword [ebp - 0x2c], 0x18
jmp 0x10025c01
mov dword [ebp - 0x18], ebx
mov dword [ebp - 0x18], 2
cmp dword [ebp - 0x18], ebx
jl 0x10025b80
mov byte [ebp - 0x2d], bl
cmp byte [ebp - 0x2d], 0
je 0x10025b7b
push 0x1ee7
push ebx
push 0x1677
push 0x7eaf
push edx
push 0x3d1f
mov edx, 0x5ebe
mov cl, 1
call fcn.10020622
xor edx, edx
add esp, 0x18
inc edx
dec dword [ebp - 0x18]
jns 0x10025b4a
cmp dword [ebp - 0x50], ebx
je 0x10025bd9
mov eax, dword [ebp - 0x53c]
xor ecx, ecx
cmp eax, 0xffff2d52
setge cl
cmp ecx, dword [ebp - 0x50]
jge 0x10025ba1
mov esi, edx
cmp dword [ebp - 0x50], ebx
jne 0x10025ba3
mov esi, ebx
mov eax, dword [ebp - 0x2c]
xor ecx, ecx
sub esi, eax
dec esi
cmp esi, 0x4283644b
setg cl
xor eax, eax
cmp ecx, edx
setge al
cmp eax, 0xee83adeb
jbe 0x10025bcc
mov eax, edx
cmp dword [ebp - 0x164], ebx
jne 0x10025bce
mov eax, ebx
mov dword [ebp - 0x20], eax
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x40], eax
jmp 0x10025bfe
push 0x6499
lea eax, [ebp - 0x8e]
mov byte [ebp - 0x8e], bl
push eax
push edx
push 0x6433
mov cl, 1
call fcn.10022515
xor edx, edx
add esp, 0x10
inc edx
dec dword [ebp - 0x2c]
cmp dword [ebp - 0x2c], 0xa
jg 0x10025b3b
dec dword [ebp - 0x50]
cmp dword [ebp - 0x50], 0xffffffe8
je 0x10025abb
mov dword [ebp - 0x38], 0x1085
cmp dword [ebp - 0x38], 0x1308
jle 0x10025cb1
mov ecx, ebx
mov dword [ebp - 0x18], ebx
mov eax, ebx
mov dword [ebp - 0x24], ebx
mov esi, ebx
mov dword [ebp - 0x20], ebx
cdq
mov edi, ebx
idiv esi
mov esi, ecx
mov ecx, edx
sar esi, cl
mov ecx, edi
mov eax, esi
sar eax, cl
lea ecx, [ebp - 0x72c]
cdq
push edx
push eax
call fcn.10001a55
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x10025c64
mov eax, dword [eax]
push eax
call fcn.100483dc
pop ecx
push ebx
push 1
lea ecx, [ebp - 0x72c]
call fcn.10004d74
inc edi
cmp edi, 0x244d
jl 0x10025c46
mov esi, dword [ebp - 0x20]
mov eax, dword [ebp - 0x24]
inc esi
mov ecx, dword [ebp - 0x18]
mov dword [ebp - 0x20], esi
cmp esi, 0xaa
jl 0x10025c3b
inc eax
mov dword [ebp - 0x24], eax
cmp eax, 0x2637
jl 0x10025c36
inc ecx
mov dword [ebp - 0x18], ecx
cmp ecx, 0x61ad
jl 0x10025c31
mov edi, dword [ebp - 0x3c]
push ebx
lea eax, [ebp - 0x75]
mov byte [ebp - 0x75], bl
push eax
push ecx
call fcn.10023f02
add esp, 0xc
cmp dword [ebp - 0x38], 0xf97
jge 0x10025cd6
push str.igoqrzq_ykalgopu_offuzbxd_nwqjl_nxtkp_cczjlaio_efvwuool_zzhlbvalz_kffzrv_ckuo_movrngyzh
call fcn.100483dc
pop ecx
mov eax, dword [ebp - 0x28]
or dword [ebp - 4], 0xffffffff
cdq
idiv dword [ebp - 0x140]
mov cl, byte [ebp - 0x49]
mov esi, edx
mov dl, byte [ebp - 0x41]
call fcn.10029ad2
mov ecx, dword [ebp - 0x198]
mov dl, byte [esi + ecx]
mov cl, al
call fcn.10029ad2
mov esi, dword [ebp - 0x28]
lea ecx, [ebp - 0x478]
push 1
mov byte [esi + edi], al
mov dword [ebp - 0x28], 0x3cdf
mov dword [ebp - 0x1c], 0x9cec79e6
mov dword [ebp - 0x18], 0xffffffff
call fcn.10004892
xor ecx, ecx
mov dword [ebp - 4], 0x19
inc ecx
mov dword [ebp - 0x34], ecx
mov dword [ebp - 0xbc], ebx
jmp 0x10025d55
mov eax, dword [ebp - 0xbc]
mov dword [ebp + eax*4 - 0xf4], 0xfffffffe
inc dword [ebp - 0xbc]
cmp dword [ebp - 0xbc], ecx
jl 0x10025d3e
push ecx
push ebx
lea eax, [ebp - 0xbc]
push eax
push ecx
push 0x38d9
lea edx, [ebp - 0x478]
call fcn.10023109
mov eax, dword [ebp - 0x1c]
add esp, 0x14
mov eax, dword [ebp - 0x1c]
neg eax
je 0x10025ddc
mov eax, dword [ebp - 0x1c]
xor ecx, ecx
mov edx, dword [ebp - 0x1c]
imul edx, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x1c]
sub edx, 0xfffe
cmp edx, eax
setl cl
imul eax, ecx, 0x6cbc
add eax, dword [ebp - 0x1c]
je 0x10025db3
cmp dword [ebp - 0x1c], ebx
je 0x10025db3
xor eax, eax
inc eax
jmp 0x10025db5
mov eax, ebx
mov dword [ebp - 0x1c], eax
xor edx, edx
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0x18], eax
mov ecx, dword [ebp - 0xf4]
mov eax, dword [ebp - 0x18]
cmp eax, ecx
setle dl
cmp edx, 5
je 0x10025dd6
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0xf4]
mov eax, dword [ebp - 0x28]
dec dword [ebp - 0x28]
mov ecx, dword [ebp - 0xf4]
mov eax, dword [ebp - 0x478]
mov dword [ebp - 0xf4], ecx
or dword [ebp - 4], 0xffffffff
mov dword [eax], ecx
lea ecx, [ebp - 0x478]
call fcn.100048f4
push 0x148b
lea eax, [ebp - 0x49]
mov ecx, 0x7d3e
push eax
push 1
push 1
push 1
push 0x25fc
lea edx, [ebp - 0x41]
call fcn.10022614
add esp, 0x18
inc esi
push 3
pop edi
jmp 0x10025873
mov eax, dword [ebp - 0xf0]
mov eax, dword [eax]
mov dword [ebp - 0x12c], eax
mov dword [ebp - 0x18], ebx
jmp 0x10025e56
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x4d4], 0xcd45
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], edi
jl 0x10025e45
push 0x9d5
lea eax, [ebp - 0x7e]
mov byte [ebp - 0x7e], bl
push eax
push 0x1937
mov dl, 1
call fcn.100226a3
add esp, 0xc
dec dword [ebp - 0x4d4]
mov eax, dword [ebp - 0x12c]
dec eax
cmp eax, 0x2693
ja 0x10027dfc
push 0x2d1f
push ecx
push ecx
lea eax, [ebp - 0x12c]
push eax
push 1
push 0x3a8b
push 0x6106
lea eax, [ebp - 0x198]
push eax
push ecx
push ecx
push 0x601b
push 0x2da4
lea eax, [ebp - 0x41]
push eax
push ecx
lea eax, [ebp - 0x2b0]
push eax
push ecx
lea edx, [ebp - 0x140]
lea ecx, [ebp - 0xf0]
call fcn.10022706
add esp, 0x40
lea ecx, [ebp - 0x448]
push 2
pop esi
push esi
call fcn.10004892
push 0x1fe4
lea eax, [ebp - 0x2f4]
mov dword [ebp - 4], 0x1a
push eax
lea eax, [ebp - 0x448]
mov dword [ebp - 0xd4], 0xc184c506
push eax
mov dword [ebp - 0x2b8], 0xd1dc
xor dl, dl
mov dword [ebp - 0x200], 0x896e60be
xor cl, cl
push 1
call fcn.100244e3
mov dword [ebp - 0x38], 0x278f
add esp, 0x10
cmp dword [ebp - 0x38], 0x2b26
jle 0x10025fb6
push ebx
push 0x23ba
push ebx
call dword [sym.imp.OLEAUT32.dll_SafeArrayLock]
mov esi, ebx
mov eax, esi
mov dword [ebp - 0x24], 0x7f72
mov dword [ebp - 0x28], eax
mov dword [ebp - 0x20], eax
mov dword [ebp - 0x18], 0x109a
mov edi, ebx
mov ebx, dword [ebp - 0x20]
mov eax, edi
mov ecx, 0x1007c858
or eax, ebx
cdq
push edx
push eax
call fcn.10004668
inc edi
cmp edi, 0x19f5
jl 0x10025f6b
dec ebx
dec dword [ebp - 0x18]
push 0
mov dword [ebp - 0x20], ebx
pop ebx
jne 0x10025f66
mov eax, dword [ebp - 0x28]
dec eax
dec dword [ebp - 0x24]
mov dword [ebp - 0x28], eax
jne 0x10025f5c
inc esi
cmp esi, 0x1ff5
jl 0x10025f50
push 0xbd0
push ebx
push ebx
call dword [sym.imp.ADVAPI32.dll_OpenSCManagerW]
push 2
pop esi
mov byte [ebp - 4], 0x1b
cmp dword [ebp - 0x38], 0x267a
jge 0x10025ff3
mov edx, str.duezwkz_drtnjnrc_ktuiiv_gvsp_nuuoog_udulsvj_moacnrjm_udf
mov ecx, 0x1007c858
call fcn.10006b3c
jmp 0x10025ff3
mov dword [ebp - 4], 0x1a
push 0xa
mov dword [ebp - 0xd4], 1
pop edi
cmp dword [ebp - 0xd4], ebx
jl 0x100260cd
mov dword [ebp - 0xcc], 0x7c8a6b95
mov dword [ebp - 0xcc], 1
cmp dword [ebp - 0xcc], ebx
jl 0x100260c1
mov dword [ebp - 0x208], 0xffffffff
xor dl, dl
push ecx
mov dword [ebp - 0x1fc], 0xfa01
mov ecx, 0x4070
mov dword [ebp - 0x2c0], 0x19f8c517
call fcn.100230b9
pop ecx
push ebx
lea eax, [ebp - 0xcc]
push eax
push 0x8e6
lea eax, [ebp - 0x2b8]
push eax
push 0x40ad
push 0x374e
push 1
lea eax, [ebp - 0x2c0]
push eax
lea eax, [ebp - 0x448]
push eax
lea eax, [ebp - 0x1fc]
push eax
push 0x263b
lea eax, [ebp - 0x200]
push ebx
push eax
lea edx, [ebp - 0x208]
lea ecx, [ebp - 0xd4]
call fcn.100239b1
add esp, 0x34
dec dword [ebp - 0xcc]
jns 0x10026033
dec dword [ebp - 0xd4]
jns 0x10026013
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x448]
call fcn.100048f4
mov eax, dword [0x10265f70]
mov ecx, 0x10265f70
push dword [eax + 4]
call fcn.100298c7
mov eax, dword [0x10265f70]
lea ecx, [ebp - 0x56c]
mov dword [ebp - 0x9c], ebx
push esi
mov dword [eax + 4], eax
mov eax, dword [0x10265f70]
mov dword [eax], eax
mov eax, dword [0x10265f70]
mov dword [eax + 8], eax
mov dword [0x10265f74], ebx
mov dword [ebp - 0x94], 0x801fc3ee
mov dword [ebp - 0x1b0], 5
mov dword [ebp - 0x20], 5
mov dword [ebp - 0x18], 0xffff
call fcn.10004892
mov dword [ebp - 4], 0x1d
lea eax, [ebp - 0x5c0]
push dword [ebp - 0x2f4]
movdqa xmm0, xmmword [0x1006fa80]
lea ecx, [ebp - 0x388]
push eax
lea eax, [ebp - 0x5d0]
mov dword [ebp - 0x388], ebx
push eax
push ebx
movdqu xmmword [ebp - 0x5d0], xmm0
mov dword [ebp - 0x384], ebx
mov dword [ebp - 0x380], ebx
call fcn.100073f4
push esi
lea ecx, [ebp - 0x54c]
mov byte [ebp - 4], 0x1e
call fcn.10004892
mov byte [ebp - 4], 0x1f
mov dword [ebp - 0xc4], ebx
jmp 0x100261bd
mov ecx, dword [ebp - 0xc4]
mov eax, dword [ebp - 0x56c]
mov dword [eax + ecx*4], 0xa8db8846
inc dword [ebp - 0xc4]
cmp dword [ebp - 0xc4], esi
jl 0x100261a4
push 1
push 0x2f1f
lea eax, [ebp - 0xc4]
mov edx, 0x7b8b
push eax
push 0x666c
push 0x560f
push 1
push 1
lea ecx, [ebp - 0x54c]
call fcn.1002282c
mov eax, dword [ebp - 0x94]
add esp, 0x1c
mov eax, dword [ebp - 0x94]
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x94]
mov eax, dword [ebp - 0x20]
neg eax
cmp eax, dword [ebp - 0x18]
jl 0x10026216
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x94]
lea edx, [ebp - 0x85]
mov dword [ebp - 0x1b0], eax
mov eax, dword [ebp - 0x1b0]
mov eax, dword [ebp - 0x94]
mov eax, dword [ebp - 0x94]
push ecx
mov byte [ebp - 0x85], bl
push ebx
call fcn.10023e87
pop ecx
pop ecx
push 1
push 0x5daf
push ecx
mov edx, 0x241e
mov ecx, 0x707d
call fcn.10022977
add esp, 0xc
lea ecx, [ebp - 0x54c]
call fcn.100048f4
lea ecx, [ebp - 0x388]
call fcn.100048f4
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x56c]
call fcn.100048f4
mov eax, dword [ebp - 0xf0]
xor ecx, ecx
add eax, 4
inc ecx
mov dword [ebp - 0x2c], ecx
mov dword [ebp - 0x40], eax
mov dword [ebp - 0x1c], ebx
jmp 0x100262b0
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0x294], 0xea75c96d
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], esi
jl 0x1002629f
mov dword [ebp - 0x1c], ebx
jmp 0x100262cb
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0x4f0], 0xbef7d651
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], esi
jl 0x100262ba
mov dword [ebp - 0x2c], ecx
cmp dword [ebp - 0x2c], ebx
jl 0x1002630a
mov eax, dword [ebp - 0x2c]
xor ecx, ecx
mov edx, dword [ebp + eax*4 - 0x294]
mov eax, dword [ebp - 0x2c]
mov eax, dword [ebp + eax*4 - 0x294]
cmp edx, eax
setne cl
mov dword [ebp - 0x4f0], ecx
mov eax, dword [ebp - 0x2c]
cmp dword [ebp + eax*4 - 0x294], ebx
jne 0x1002630a
dec dword [ebp - 0x2c]
jns 0x100262d8
push 0xa33
sub esp, 0x10
mov dword [ebp - 0xa0], esi
lea eax, [ebp - 0xa0]
mov dword [ebp - 0x210], 0x568d526d
push ebx
push 0x2216
sub esp, 0x10
push eax
call fcn.10024a08
add esp, 0x30
mov dword [ebp - 0xa0], ebx
jmp 0x100263a0
push esi
lea ecx, [ebp - 0x3e8]
call fcn.10004892
push ecx
push ecx
push ebx
lea eax, [ebp - 0x550]
mov dword [ebp - 4], 0x21
push eax
lea eax, [ebp - 0x3e8]
mov edx, 0x54d6
push eax
call fcn.10020ef0
add esp, 0x14
lea eax, [ebp - 0x210]
push eax
push ecx
lea eax, [ebp - 0x3e8]
push ebx
push eax
call fcn.10020e8c
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x3e8]
add esp, 0x10
call fcn.100048f4
inc dword [ebp - 0xa0]
cmp dword [ebp - 0xa0], 0x29
jge 0x10026342
mov byte [ebp - 0x58], bl
mov word [ebp - 0x57], 0x170
mov byte [ebp - 0x55], 0xe7
mov dword [ebp - 0x1a0], 0xffffffff
mov dword [ebp - 0x84], 0xffffffff
mov dword [ebp - 0x328], 1
mov dword [ebp - 0x60], 9
mov dword [ebp - 0x18], ebx
jmp 0x100263f1
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x3d0], 0xfffc
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], esi
jl 0x100263e0
mov eax, dword [ebp - 0x1a0]
mov eax, dword [ebp - 0x3d0]
cmp dword [ebp - 0x3d0], ebx
je 0x10026508
push 1
push 0x2d6c
push 0x2b1f
push ecx
push 0x5a54
lea eax, [ebp - 0x60]
mov dword [ebp - 0x320], ebx
push eax
lea eax, [ebp - 0x320]
mov edx, 0x5ca2
push eax
lea eax, [ebp - 0x1a0]
push eax
lea eax, [ebp - 0x84]
push eax
push 0x2b03
push 0x6cfa
push 0x4027
push 0x76e1
push ecx
lea eax, [ebp - 0x328]
mov ecx, 0x7aac
push eax
call fcn.100214be
add esp, 0x3c
mov dword [ebp - 0x60], 4
jmp 0x100264fc
push 0x7d5
push 0x477d
push 0x2815
push 0xd92
push 0x79ae
push ecx
push 0x664e
push ecx
push 0x3bdc
push 0xca9
push 0x3f57
push 0x7cdf
push 1
mov ecx, 0x3a1e
call fcn.10022b59
add esp, 0x34
mov edx, 0x11e6
mov cl, 1
push 0x5ccd
push 0x4180
push 1
push 0x7b
push 0x47a8
push 0x59b2
push 0x648c
push 0x4979
push 0x4f90
push 1
push 0x140f
call fcn.10022c47
add esp, 0x2c
dec dword [ebp - 0x60]
cmp dword [ebp - 0x60], 1
jg 0x10026479
jmp 0x10026540
mov dword [ebp - 0x84], ebx
jmp 0x10026537
lea eax, [ebp - 0x280]
mov dword [ebp - 0x280], 0x263b0a6d
push eax
push 0x704d
push ecx
mov cl, 1
call fcn.10022149
add esp, 0xc
dec dword [ebp - 0x84]
cmp dword [ebp - 0x84], 0xffffffea
jne 0x10026510
lea eax, [ebp - 0x84]
mov edx, 0x7d9
push eax
push 1
push 0x7dda
lea eax, [ebp - 0x60]
mov cl, 1
push eax
push 1
push 0x6780
call fcn.10020622
mov word [ebp - 0xd0], di
mov eax, 0x8a61928c
mov dword [ebp - 0x108], eax
add esp, 0x18
mov dword [ebp - 0x104], eax
mov dword [ebp - 0x100], eax
mov dword [ebp - 0xfc], eax
mov dword [ebp - 0x20], 3
mov dword [ebp - 0x18], 0xc022
mov dword [ebp - 0x34], 0x69b2b293
mov dword [ebp - 0xfc], ebx
cmp dword [ebp - 0xfc], 6
jg 0x100266a7
mov byte [ebp - 0x87], bl
mov dword [ebp - 0x2c], 0x44c4
cmp dword [ebp - 0x2c], 0x459f
jle 0x10026633
push 0x10a3
call dword [sym.imp.KERNEL32.dll_SetErrorMode]
mov edi, ebx
mov dword [ebp - 0x38], ebx
mov dword [ebp - 0x24], ebx
mov dword [ebp - 0x20], ebx
mov dword [ebp - 0x28], 0x61a7
mov ebx, edi
mov esi, 0xf55
mov edi, dword [ebp - 0x20]
mov eax, ebx
mov ecx, 0x1007c858
cdq
push edx
push eax
call fcn.10004668
add ebx, edi
dec esi
jne 0x100265f1
mov esi, dword [ebp - 0x24]
add edi, esi
dec dword [ebp - 0x28]
mov dword [ebp - 0x20], edi
mov edi, dword [ebp - 0x38]
jne 0x100265e7
dec esi
mov dword [ebp - 0x24], esi
push 0
pop ebx
cmp esi, 0xffffa8ff
jg 0x100265dd
inc edi
mov dword [ebp - 0x38], edi
cmp edi, 0xef7
jl 0x100265da
push 2
pop esi
lea eax, [ebp - 0x87]
mov edx, 0x6c86
push eax
push ecx
push 0x71f2
push 0x7250
mov cl, 1
call fcn.100207c7
add esp, 0x10
mov dword [ebp - 4], 0x22
cmp dword [ebp - 0x2c], 0x43ed
jge 0x10026673
mov edx, str.uchtibn_jytpkfjzz_sqwlw_wzxvnus_tugfpfup_tiswymktr_jiwnzb_qcg_uofkuwsn_mge_murwletqt_yhyvnulq
mov ecx, 0x1007c858
call fcn.10006b3c
or dword [ebp - 4], 0xffffffff
inc dword [ebp - 0xfc]
jmp 0x100265a7
cmp dword [ebp - 0xfc], ebx
jne 0x10026741
mov eax, dword [ebp - 0xfc]
mov dword [ebp - 0x20], eax
mov eax, dword [ebp - 0xfc]
mov ecx, dword [ebp - 0xfc]
mov eax, dword [ebp - 0x18]
neg ecx
sbb ecx, ecx
xor edx, edx
inc ecx
cmp ecx, eax
setg dl
xor ecx, ecx
add edx, dword [ebp - 0x20]
mov eax, dword [ebp - 0x104]
cmp edx, eax
setne cl
cmp ecx, dword [ebp - 0xfc]
je 0x100266f9
cmp dword [ebp - 0x18], ebx
je 0x100266f9
xor edx, edx
inc edx
jmp 0x100266fb
mov edx, ebx
mov eax, dword [ebp - 0x100]
xor ecx, ecx
cmp edx, eax
mov eax, dword [ebp - 0x104]
setle cl
xor edx, edx
cmp eax, ecx
setle dl
xor eax, eax
test edx, edx
mov dword [ebp - 0xfc], edx
setne al
xor ecx, ecx
mov dword [ebp - 0x20], eax
mov eax, dword [ebp - 0x18]
cmp dword [ebp - 0x20], eax
setg cl
cmp ecx, dword [ebp - 0x18]
jne 0x1002673b
mov eax, dword [ebp - 0x104]
mov eax, dword [ebp - 0xfc]
mov eax, dword [ebp - 0x18]
lea ecx, [ebp - 0x3f4]
push 4
call fcn.10004892
lea eax, [ebp - 0x2c4]
mov dword [ebp - 4], 0x24
push eax
push 1
push ecx
lea eax, [ebp - 0x3f4]
mov edx, 0x2d43
push eax
push ecx
call fcn.10020720
add esp, 0x14
lea eax, [ebp - 0x3f4]
mov edx, 0x45d5
xor cl, cl
push eax
push 0x7470
push 0x3cc1
push 1
push 0x7469
push 0x3a4b
push 0x2937
push 0xd9f
push 1
call fcn.10021add
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x3f4]
add esp, 0x24
call fcn.100048f4
mov edi, esi
mov dword [ebp - 0x128], ebx
mov dword [ebp - 0x38], edi
mov dword [ebp - 0x18], ebx
cmp edi, 4
jae 0x100272fc
jmp 0x100267e8
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x3c0], 1
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], esi
jl 0x100267d7
mov eax, dword [ebp - 0x3c0]
mov dl, 1
push ecx
mov dword [ebp - 0x3bc], eax
lea ecx, [ebp - 0x8b]
mov byte [ebp - 0x8b], bl
call fcn.100230b9
movzx eax, byte [ebp - 0x58]
pop ecx
lea eax, [eax*2 + 2]
cmp edi, eax
jne 0x10026d7e
mov dword [ebp - 0x18], 0xea5d6c05
xor ecx, ecx
mov dword [ebp - 0x34], 0xb4074dd
inc ecx
mov dword [ebp - 0x34], ecx
mov dword [ebp - 0x34], 0xfffffffa
mov dword [ebp - 0x34], 0xc5534bf8
mov dword [ebp - 0x34], 0xffffffff
mov dword [ebp - 0x34], 0xcf415d72
mov dword [ebp - 0x34], 0x6b65720b
mov dword [ebp - 0x34], 0xffffffff
mov dword [ebp - 0x34], ebx
mov dword [ebp - 0x34], ecx
mov dword [ebp - 0x18], ebx
jmp 0x1002687b
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x640], 0xad5befa1
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], esi
jl 0x1002686a
push 0x6fc
push 0x7831
push 0x5239
push ebx
push 0x4a1e
lea eax, [ebp - 0x8d]
mov byte [ebp - 0x8d], bl
push eax
push 0x3a62
push 0x64ac
mov dl, cl
call fcn.10024363
add esp, 0x20
mov dword [ebp - 0x18], 0xffffffec
jmp 0x1002690c
push ecx
mov dword [ebp - 0x34], 0xffffffff
lea eax, [ebp - 0x2c8]
push 1
mov dword [ebp - 0x34], 0x17b844a7
mov edx, 0x4276
push 0x40e6
mov dword [ebp - 0x34], 0xc6fe23a2
push ecx
mov dword [ebp - 0x34], 6
mov dword [ebp - 0x34], 7
mov dword [ebp - 0x2c8], 9
push eax
call fcn.10023109
add esp, 0x14
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 0x1d
jg 0x100268bf
movzx esi, byte [ebp + edi - 0x58]
lea ecx, [ebp - 0x170]
push dword [ebp - 0x2c4]
movdqa xmm0, xmmword [0x1006fa50]
mov dword [ebp - 0x24], esi
lea eax, [esi + 1]
mov dword [ebp - 0x170], ebx
mov dword [ebp - 0x128], eax
lea eax, [ebp - 0x5a0]
push eax
lea eax, [ebp - 0x5b0]
mov dword [ebp - 0x1c], 0x888adae8
push eax
mov dword [ebp - 0x3c], 0x76d6092f
push ebx
movdqu xmmword [ebp - 0x5b0], xmm0
mov dword [ebp - 0x16c], ebx
mov dword [ebp - 0x168], ebx
call fcn.100073f4
mov dword [ebp - 4], 0x25
mov dword [ebp - 0x28], 0x9efec1a2
mov dword [ebp - 0x48], 0xfce88636
mov dword [ebp - 0x20], 0xffffffff
mov dword [ebp - 0x34], 0xffffffff
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x1c]
mov ecx, dword [ebp - 0x1c]
neg ecx
mov dword [ebp - 0x3c], 0xe4b7
mov eax, dword [ebp - 0x1c]
sbb ecx, ecx
xor edx, edx
neg ecx
cmp eax, ecx
mov eax, dword [ebp - 0x1c]
setge dl
xor ecx, ecx
cmp eax, edx
setge cl
xor eax, eax
cmp ecx, 6
mov ecx, dword [ebp - 0x3c]
setne al
sub ecx, eax
mov eax, dword [ebp - 0x170]
mov dword [eax + 0xc], ecx
jne 0x100269e2
cmp dword [ebp - 0x1c], ebx
jne 0x100269e2
xor eax, eax
inc eax
jmp 0x100269e4
mov eax, ebx
mov ecx, dword [ebp - 0x1c]
sub ecx, eax
mov eax, dword [ebp - 0x1c]
neg ecx
sbb ecx, ecx
neg ecx
imul eax, ecx
cmp eax, dword [ebp - 0x1c]
jne 0x10026bd3
push ecx
mov dword [ebp - 0x2c], 0x7c4e
lea ecx, [ebp - 0x8f]
mov byte [ebp - 0x8f], bl
push 1
call fcn.1002314a
cmp dword [ebp - 0x1c], 1
pop ecx
pop ecx
je 0x10026a24
mov eax, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x2c]
xor edx, edx
mov eax, dword [ebp - 0x2c]
mov ecx, dword [ebp - 0x28]
mov eax, dword [ebp - 0x1c]
cmp eax, ecx
mov eax, 0xc2f1fcc1
setle dl
cmp eax, edx
sbb eax, eax
inc eax
imul eax, dword [ebp - 0x2c]
cmp dword [ebp - 0x1c], eax
jle 0x10026ac2
lea eax, [ebp - 0x48]
mov dword [ebp - 0xb4], ebx
push eax
lea eax, [ebp - 0xb4]
mov dword [ebp - 0x2d0], 0xbb0f55f5
push 0x3b2d
push eax
xor dl, dl
call fcn.100226a3
add esp, 0xc
mov dword [ebp - 0xb4], 6
jmp 0x10026ab4
push 0x44df
push ecx
push 1
lea eax, [ebp - 0x204]
mov dword [ebp - 0x204], 0xce4ec6f9
push eax
push ecx
lea eax, [ebp - 0x2d0]
mov edx, 0x345a
push eax
call fcn.1002318a
add esp, 0x18
inc dword [ebp - 0xb4]
cmp dword [ebp - 0xb4], 0x18
jge 0x10026a80
jmp 0x10026bf9
mov dword [ebp - 0x18], 0xffffffff
mov dword [ebp - 0x184], 0xca208381
mov dword [ebp - 0x48], ebx
cmp dword [ebp - 0x48], 3
jg 0x10026bb2
cmp dword [ebp - 0x2c], ebx
jne 0x10026ae8
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x18]
mov ecx, 0xffffe821
mov eax, dword [ebp - 0x2c]
sub ecx, eax
shl ecx, 2
neg ecx
sbb ecx, ecx
neg ecx
cmp ecx, dword [ebp - 0x28]
jg 0x10026b11
mov eax, dword [ebp - 0x170]
cmp dword [eax + 8], ebx
je 0x10026b11
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x48]
mov eax, dword [ebp - 0x48]
mov ecx, dword [ebp - 0x48]
mov eax, dword [ebp - 0x170]
push 0x7ae3
mov eax, dword [eax + ecx*4]
mov ecx, 0xd0b827be
mov dword [ebp - 0x20], eax
mov esi, dword [ebp - 0x48]
mov edi, dword [ebp - 0x48]
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x2c]
cmp ecx, eax
sbb eax, eax
xor ecx, ecx
inc eax
test eax, eax
mov eax, dword [ebp - 0x170]
setle cl
xor edx, edx
cmp dword [eax + esi*4], ecx
mov eax, dword [ebp - 0x3c]
setne dl
xor ecx, ecx
cmp edx, eax
mov eax, dword [ebp - 0x2c]
setne cl
xor edx, edx
cmp ecx, eax
setne dl
sub edx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x20], edx
xor edx, edx
cmp dword [ebp - 0x20], eax
mov eax, dword [ebp - 0x170]
setg dl
xor ecx, ecx
cmp dword [eax + edi*4], edx
setl cl
push ecx
push 1
mov dword [ebp - 0x184], ecx
push 0x78d7
call fcn.10020e8c
add esp, 0x10
inc dword [ebp - 0x48]
cmp dword [ebp - 0x48], 3
jle 0x10026ae0
mov esi, dword [ebp - 0x24]
mov edi, dword [ebp - 0x38]
push ecx
lea eax, [ebp - 0x184]
mov edx, 0xb18
push eax
lea eax, [ebp - 0x48]
push eax
push ecx
push ecx
push ebx
sub esp, 0xc
call fcn.100226d0
add esp, 0x24
jmp 0x10026bf9
mov dword [ebp - 0x3c], ebx
jmp 0x10026bf3
push 1
push ecx
mov byte [ebp - 0x8c], bl
lea edx, [ebp - 0x8c]
push ecx
call fcn.100248d1
add esp, 0xc
dec dword [ebp - 0x3c]
cmp dword [ebp - 0x3c], 0xffffffee
jne 0x10026bd8
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x170]
call fcn.100048f4
dec edi
mov dword [ebp - 0x1c], 0xca4f833f
add edi, esi
mov dword [ebp - 0x18], ebx
jmp 0x10026c28
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x14c], 1
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 3
jl 0x10026c17
push 2
pop esi
mov dword [ebp - 0x1c], esi
cmp dword [ebp - 0x1c], ebx
jl 0x10026d57
push 0xfffffffffffffffd
pop eax
mov dword [ebp - 0x24], 0x1fe77dd6
mov dword [ebp - 0x4c8], eax
mov dword [ebp - 0x4c4], eax
mov dword [ebp - 0x4c0], eax
mov dword [ebp - 0x4bc], eax
mov dword [ebp - 0x24], esi
cmp dword [ebp - 0x24], ebx
jl 0x10026d4e
mov dword [ebp - 0x20], ebx
mov eax, dword [ebp - 0x1c]
cmp dword [ebp + eax*4 - 0x14c], ebx
je 0x10026c8c
push ebx
push 0x4be7
call fcn.10021253
pop ecx
pop ecx
jmp 0x10026d42
mov eax, dword [ebp - 0x14c]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp + eax*4 - 0x14c]
mov dword [ebp - 0x20], eax
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp + eax*4 - 0x14c]
mov edx, dword [ebp - 0x14c]
mov eax, dword [ebp - 0x1c]
neg edx
sbb edx, edx
neg edx
mov ecx, dword [ebp + eax*4 - 0x14c]
xor eax, eax
cmp edx, 0x57736d0c
setge al
xor edx, edx
cmp eax, ecx
mov eax, dword [ebp - 0x24]
setge dl
xor ecx, ecx
cmp edx, eax
mov eax, dword [ebp - 0x148]
setge cl
mov dword [ebp - 0x20], ecx
xor ecx, ecx
cmp eax, dword [ebp - 0x20]
setne cl
cmp ecx, 0x35b263d1
jge 0x10026d00
cmp dword [ebp - 0x24], ebx
jne 0x10026d00
mov eax, ebx
jmp 0x10026d03
xor eax, eax
inc eax
xor ecx, ecx
test eax, eax
mov eax, dword [ebp - 0x148]
sete cl
xor edx, edx
cmp ecx, eax
mov eax, dword [ebp - 0x144]
mov ecx, dword [ebp - 0x144]
setl dl
imul eax, edx
sub ecx, eax
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp + eax*4 - 0x14c]
sub ecx, eax
xor eax, eax
cmp ecx, 0xfffffffd
setne al
mov dword [ebp - 0x4c0], eax
dec dword [ebp - 0x24]
jns 0x10026c6b
push 0xfffffffffffffffd
pop eax
dec dword [ebp - 0x1c]
jns 0x10026c40
mov dword [ebp - 0x1c], 0xf
jmp 0x10026d73
mov byte [ebp - 0x2d], bl
cmp byte [ebp - 0x2d], 0
je 0x10026d70
xor cl, cl
call fcn.1002295e
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 0x18
jg 0x10026d60
jmp 0x100272e4
mov dword [ebp - 0x24], 0xbededb5c
lea ecx, [ebp - 0x40c]
mov dword [ebp - 0xd8], 0xb6917ab6
push esi
call fcn.10004892
mov dword [ebp - 4], 0x26
lea ecx, [ebp - 0x55c]
mov dword [ebp - 0x34], ebx
mov dword [ebp - 0x2c], 1
mov dword [ebp - 0x28], 0x5d06
mov dword [ebp - 0x18], 0xdeb47635
push esi
call fcn.10004892
xor eax, eax
mov byte [ebp - 4], 0x27
inc eax
mov dword [ebp - 0x20], 0x8d3f
push 0x5dcb
push eax
push ecx
mov dword [ebp - 0x3c], eax
lea edx, [ebp - 0x64]
push ecx
lea eax, [ebp - 0x40c]
mov dword [ebp - 0x34], esi
push eax
mov ecx, 0x414b
call fcn.10020ebc
add esp, 0x14
mov dword [ebp - 0x64], ebx
jmp 0x10026e0f
mov eax, dword [ebp - 0x64]
mov dword [ebp + eax*4 - 0x240], 0x7c422d5f
inc dword [ebp - 0x64]
cmp dword [ebp - 0x64], 3
jl 0x10026dfe
push ebx
push 0x5ce5
push ecx
push ecx
lea eax, [ebp - 0x55c]
push eax
push 0x3e6e
lea edx, [ebp - 0x64]
call fcn.10021f1c
mov eax, dword [ebp - 0x238]
add esp, 0x18
inc dword [ebp - 0x18]
xor edx, edx
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0xd8]
mov eax, dword [ebp - 0x240]
mov eax, dword [ebp - 0xd8]
mov eax, dword [ebp - 0x24]
inc dword [ebp - 0x28]
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x238]
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0xd8]
mov eax, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0x238]
cmp eax, 1
mov eax, dword [ebp - 0x24]
setle dl
xor ecx, ecx
cmp edx, eax
setl cl
or edx, 0xffffffff
sub edx, ecx
sub edx, dword [ebp - 0x20]
mov eax, dword [ebp - 0xd8]
mov ecx, dword [ebp - 0x24]
add eax, edx
add ecx, eax
xor edx, edx
mov eax, dword [ebp - 0x24]
cmp ecx, eax
mov eax, dword [ebp - 0x24]
setne dl
xor ecx, ecx
cmp edx, eax
setne cl
xor eax, eax
cmp eax, ecx
sbb eax, eax
xor edx, edx
inc eax
inc edx
mov dword [ebp - 0xd8], eax
mov dword [ebp - 0x18], edx
mov dword [ebp - 0x20], 0xecbc59a6
mov dword [ebp - 0x1c], ebx
jmp 0x10026ee1
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0x1dc], 0x1dbfa2f9
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], esi
jl 0x10026ed0
mov dword [ebp - 0x1c], ebx
jmp 0x10026efc
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0x5ec], 0xb45490a9
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 3
jl 0x10026eeb
cmp dword [ebp - 0x18], ebx
jne 0x10026f46
imul eax, dword [ebp - 0x3c], 0xfff9
test eax, eax
jne 0x10026f18
mov eax, dword [ebp - 0x1d8]
mov eax, dword [ebp - 0x1dc]
mov eax, dword [ebp - 0x1dc]
mov eax, dword [ebp - 0x1dc]
mov dword [ebp - 0x20], eax
mov eax, dword [ebp - 0x238]
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x20]
mov eax, dword [ebp - 0x40c]
dec ecx
cmp dword [eax], ecx
jne 0x10026f46
mov edx, ebx
mov eax, dword [ebp - 0x18]
xor ecx, ecx
cmp eax, edx
setle cl
mov dword [ebp - 0x5e8], ecx
lea ecx, [ebp - 0x55c]
call fcn.100048f4
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x40c]
call fcn.100048f4
movzx edx, byte [ebp + edi - 0x57]
mov eax, edi
sub eax, dword [ebp - 0x128]
movzx eax, byte [ebp + eax - 0x5a]
movzx eax, word [ebp + eax*2 - 0xd0]
mov ecx, eax
and eax, edx
or ecx, edx
sub ecx, eax
movzx eax, byte [ebp + edi - 0x58]
mov word [ebp + eax*2 - 0xd0], cx
mov dword [ebp - 0x6c], 0x18e418a5
mov dword [ebp - 0x20], 0x26b4
cmp dword [ebp - 0x20], 0x11a8
jge 0x10027169
mov dword [ebp - 0x110], ebx
mov dword [ebp - 0x10c], ebx
call fcn.10029aa7
mov dword [ebp - 0x110], eax
mov dword [ebp - 4], 0x28
movzx eax, byte [0x10265e58]
push eax
lea eax, [ebp - 0x20c]
mov dword [ebp - 0x20c], ebx
push eax
push ecx
lea eax, [ebp - 0x630]
push eax
lea ecx, [ebp - 0x110]
call fcn.10029ae5
lea eax, [ebp - 0xf8]
push eax
push str._ld_n
call fcn.10048aff
mov eax, dword [ebp - 0xf8]
pop ecx
pop ecx
test eax, eax
je 0x10027153
dec eax
mov dword [ebp - 0xf8], eax
lea eax, [ebp - 0xec]
push eax
lea eax, [ebp - 0x6d]
push eax
push str._c__ld_n
call fcn.10048aff
mov al, byte [ebp - 0x6d]
add esp, 0xc
cmp al, 0x2b
jne 0x1002706e
movzx eax, byte [0x10265e58]
push eax
lea eax, [ebp - 0xec]
push eax
push ecx
lea eax, [ebp - 0x638]
push eax
lea ecx, [ebp - 0x110]
call fcn.10029ae5
jmp 0x10027142
cmp al, 0x2d
jne 0x100270d6
mov edx, dword [ebp - 0x110]
mov ecx, edx
mov eax, dword [edx + 4]
cmp byte [eax + 0xd], 0
jne 0x100270b4
mov esi, dword [ebp - 0xec]
cmp dword [eax + 0x10], esi
jge 0x10027093
mov eax, dword [eax + 8]
jmp 0x10027097
mov ecx, eax
mov eax, dword [eax]
cmp byte [eax + 0xd], 0
je 0x10027089
cmp ecx, edx
je 0x100270b4
cmp esi, dword [ecx + 0x10]
jl 0x100270b4
mov dword [ebp - 0x2d8], ecx
lea eax, [ebp - 0x2d8]
jmp 0x100270c0
mov dword [ebp - 0x214], edx
lea eax, [ebp - 0x214]
push dword [eax]
lea eax, [ebp - 0x560]
push eax
lea ecx, [ebp - 0x110]
call fcn.10029443
jmp 0x10027142
mov eax, dword [ebp - 0xec]
mov esi, ebx
mov ebx, dword [ebp - 0x110]
not eax
push 0x1e
pop ecx
mov dword [ebp - 0x20], eax
xor edi, edi
mov edx, ebx
inc edi
shl edi, cl
and eax, edi
or esi, eax
mov eax, dword [ebx + 4]
cmp byte [eax + 0xd], 0
jne 0x10027125
cmp dword [eax + 0x10], esi
jge 0x1002710a
mov eax, dword [eax + 8]
jmp 0x1002710e
mov edx, eax
mov eax, dword [eax]
cmp byte [eax + 0xd], 0
je 0x10027100
cmp edx, ebx
je 0x10027125
mov edx, dword [edx + 0x10]
mov eax, esi
sar edx, cl
sar eax, cl
cmp edx, eax
je 0x10027127
xor esi, edi
dec ecx
mov eax, dword [ebp - 0x20]
jns 0x100270ec
xor esi, dword [ebp - 0xec]
push esi
push str._ld_n
call fcn.100483dc
pop ecx
pop ecx
xor ebx, ebx
mov eax, dword [ebp - 0xf8]
test eax, eax
jne 0x10027021
push 2
pop esi
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x110]
dec eax
mov dword [ebp - 0xf8], eax
call fcn.1002941a
mov dword [ebp - 0x124], 0x11bc383c
mov dword [ebp - 0x18c], 0x85e0710
mov dword [ebp - 0x20], 0x3a19
cmp dword [ebp - 0x20], 0x3c45
jle 0x100271e1
push ebx
push ebx
call dword [sym.imp.GDI32.dll_GetNearestPaletteIndex]
mov edi, ebx
mov esi, ebx
mov ecx, esi
mov eax, edi
sar eax, cl
lea ecx, [ebp - 0x678]
cdq
push edx
push eax
call fcn.10001a55
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x100271b7
mov eax, dword [eax]
push eax
call fcn.100483dc
pop ecx
push ebx
push 1
lea ecx, [ebp - 0x678]
call fcn.10004d74
inc esi
cmp esi, 0x606e
jl 0x10027199
inc edi
cmp edi, 0x2ff1
jl 0x10027197
push 2
pop esi
push esi
lea ecx, [ebp - 0x508]
call fcn.10004892
cmp dword [ebp - 0x20], 0x3681
jge 0x10027201
push str.cin_duoqgoo_zxuyrxtw_cqif_imqrw_zlojyc_gwdenocw_quzptcmps
call fcn.100483dc
pop ecx
lea eax, [ebp - 0x508]
mov dword [ebp - 4], 0x29
push eax
lea eax, [ebp - 0x57c]
push eax
push ecx
push ecx
xor cl, cl
call fcn.10024628
mov eax, dword [ebp - 0x6c]
mov ecx, 0x5bf
mov dword [ebp - 0x6c], ebx
mov eax, dword [ebp - 0x124]
mov dword [ebp - 0x124], ebx
mov eax, dword [ebp - 0x124]
mov dword [ebp - 0x18c], eax
mov eax, dword [ebp - 0x18c]
lea eax, [ebp - 0x88]
mov byte [ebp - 0x88], bl
push eax
push ebx
call fcn.100244ba
add esp, 0x18
mov dword [ebp - 0x6c], ebx
jmp 0x100272b0
push 1
push 0x2423
push 0x545c
push 0x698f
push 0x472
push 0x7466
push 1
push 0x6d58
push 0x2537
push 0x68b6
push 0x21ef
push 1
push 0x64b8
mov edx, 0x1cd9
mov ecx, 0x4c14
call fcn.100239b1
add esp, 0x34
inc dword [ebp - 0x6c]
cmp dword [ebp - 0x6c], 6
jl 0x10027263
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x508]
call fcn.100048f4
push ecx
push ecx
push 1
push 0x56be
push 0x2711
lea edx, [ebp - 0x128]
call fcn.10020ef0
mov edi, dword [ebp - 0x38]
add esp, 0x14
add edi, esi
jmp 0x100267c6
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x1c4], 0xe1757117
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 3
jl 0x100272eb
mov dword [ebp - 0x1c0], ebx
jmp 0x1002737d
mov dword [ebp - 0x20], ebx
mov dword [ebp - 0x18], ebx
jmp 0x10027323
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x2a0], 0x23e64f14
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], esi
jl 0x10027312
mov ecx, dword [ebp - 0x1c4]
xor edx, edx
mov eax, dword [ebp - 0x1c0]
imul ecx, eax
mov eax, dword [ebp - 0x29c]
add ecx, eax
mov eax, dword [ebp - 0x1c4]
cmp ecx, eax
mov eax, dword [ebp - 0x29c]
setge dl
xor ecx, ecx
cmp eax, 0x28fb
mov dword [ebp - 0x20], edx
mov eax, dword [ebp - 0x2a0]
setge cl
xor edx, edx
cmp ecx, dword [ebp - 0x20]
setl dl
xor ecx, ecx
cmp edx, eax
sete cl
mov dword [ebp - 0x20], ecx
inc dword [ebp - 0x1c0]
cmp dword [ebp - 0x1c0], 0x17
jge 0x1002730a
xor eax, eax
lea ecx, [ebp - 0x518]
mov word [ebp - 0xce], ax
mov dword [ebp - 0x28], 1
mov dword [ebp - 0x38], 0x555b7cef
mov dword [ebp - 0x34], 0xa592c6ee
mov dword [ebp - 0x20], 0xfffffffc
mov dword [ebp - 0x34], 0xffffffff
mov dword [ebp - 0x2c], 0x64bae0f
mov dword [ebp - 0x34], 0xb06c0e26
mov dword [ebp - 0x3c], 0x641b44ad
mov dword [ebp - 0x34], 0xffffffff
mov dword [ebp - 0x24], 0xffffffff
push esi
call fcn.10004892
mov dword [ebp - 4], 0x2c
mov dword [ebp - 0x34], 0x71a6
mov dword [ebp - 0x18], 0x8214d2fc
mov dword [ebp - 0x20], 0xbca3396d
mov dword [ebp - 0xac], ebx
jmp 0x1002741c
mov eax, dword [ebp - 0xac]
mov dword [ebp + eax*4 - 0x584], 0xb57e8b72
inc dword [ebp - 0xac]
cmp dword [ebp - 0xac], esi
jl 0x10027405
push ebx
lea eax, [ebp - 0x518]
push eax
push 0x5c01
lea ecx, [ebp - 0xac]
call fcn.10021a3c
mov eax, dword [ebp - 0x28]
add esp, 0xc
cmp dword [ebp - 0x28], ebx
je 0x10027475
dec dword [ebp - 0x18]
xor edx, edx
imul ecx, dword [ebp - 0x24], 6
mov eax, dword [ebp - 0x20]
cmp ecx, eax
mov eax, dword [ebp - 0x18]
setle dl
cmp edx, 0xfffffffe
sbb ecx, ecx
xor edx, edx
inc ecx
cmp eax, ecx
setge dl
imul edx, dword [ebp - 0x2c]
test edx, edx
je 0x10027475
xor ecx, ecx
inc ecx
jmp 0x10027477
mov ecx, ebx
mov eax, dword [ebp - 0x28]
imul ecx, eax
mov dword [ebp - 0x580], eax
test ecx, ecx
je 0x1002748a
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x3c]
neg eax
sbb eax, eax
neg eax
mov dword [ebp - 0x24], eax
mov ecx, dword [ebp - 0x24]
mov eax, dword [ebp - 0x38]
inc dword [ebp - 0x38]
cmp eax, ecx
je 0x100274a8
xor eax, eax
inc eax
jmp 0x100274aa
mov eax, ebx
mov dword [ebp - 0x20], eax
mov byte [ebp - 0x2d], bl
cmp byte [ebp - 0x2d], 0
je 0x100274c5
push ecx
push 0x151
mov dl, 1
call fcn.10023b48
pop ecx
pop ecx
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x518]
call fcn.100048f4
xor eax, eax
mov dword [ebp - 0x494], 7
mov word [ebp - 0x4a8], ax
lea ecx, [ebp - 0x4a8]
lea eax, [ebp - 0xd0]
mov dword [ebp - 0x498], ebx
push eax
call fcn.10004db8
cmp dword [ebp - 0x494], 8
lea eax, [ebp - 0x4a8]
push ebx
cmovae eax, dword [ebp - 0x4a8]
lea ecx, [ebp - 0x4a8]
push 1
movzx eax, word [eax]
mov dword [ebp - 0x34], eax
call fcn.10004e40
mov dword [ebp - 0xe8], 0xaf43b7c7
lea ecx, [ebp - 0x424]
push 1
call fcn.10004892
push 1
lea eax, [ebp - 0x51c]
mov dword [ebp - 4], 0x2d
push eax
push 0x5f26
push 0x27b6
lea eax, [ebp - 0x424]
push eax
push ecx
call fcn.10020f48
mov dword [ebp - 0x20], 0x1394
add esp, 0x18
cmp dword [ebp - 0x20], 0x173c
jle 0x100275ed
mov dword [ebp - 0x28], ebx
mov edx, ebx
mov dword [ebp - 0x18], ebx
mov edi, ebx
mov esi, ebx
mov ecx, esi
mov eax, edi
shl eax, cl
mov ecx, dword [ebp - 0x28]
add ecx, edx
xor eax, ecx
lea ecx, [ebp - 0x6c0]
cdq
push edx
push eax
call fcn.10001a55
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x100275a9
mov eax, dword [eax]
push eax
call fcn.100483dc
pop ecx
push ebx
push 1
lea ecx, [ebp - 0x6c0]
call fcn.10004d74
mov edx, dword [ebp - 0x18]
inc esi
cmp esi, 0x5c42
jl 0x10027584
inc edi
cmp edi, 0x79fc
jl 0x10027582
inc edx
mov dword [ebp - 0x18], edx
cmp edx, 0x7f77
jl 0x10027580
mov eax, dword [ebp - 0x28]
inc eax
mov dword [ebp - 0x28], eax
cmp eax, 0x1b8b
jl 0x1002757b
cmp dword [ebp - 0x20], 0x11b2
jge 0x10027601
push str.pxxsqp_ogy_aqtsf_cqf_nvobwn
call fcn.100483dc
pop ecx
sub esp, 0x10
mov dword [ebp - 4], 0x2d
lea edx, [ebp - 0x7d]
mov byte [ebp - 0x7d], bl
mov cl, 1
push 0x281
sub esp, 0x14
call fcn.10023c32
lea eax, [ebp - 0x424]
mov dl, 1
push eax
push 0x4c24
push 0x4e1c
push ebx
mov cl, dl
call fcn.100244e3
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x424]
add esp, 0x38
call fcn.100048f4
mov esi, ebx
push 2
lea ecx, [ebp - 0x43c]
call fcn.10004892
push 2
lea ecx, [ebp - 0x3a0]
mov dword [ebp - 4], 0x30
call fcn.10004892
mov byte [ebp - 4], 0x31
mov dword [ebp - 0x194], 6
mov dword [ebp - 0x2e8], 0x1734826a
mov dword [ebp - 0x2e0], 0xffffffff
mov dword [ebp - 0x224], 0x9358db2e
mov dword [ebp - 0x234], 0xbbe75688
mov dword [ebp - 0x1c], ebx
jmp 0x100276be
mov ecx, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x43c]
mov dword [eax + ecx*4], 0x6482
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 2
jl 0x100276ab
mov dword [ebp - 0x1c], ebx
jmp 0x100276dc
mov ecx, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x3a0]
mov dword [eax + ecx*4], 1
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 2
jl 0x100276c9
push 0x392d
lea eax, [ebp - 0x43c]
mov edx, 0xb50
push eax
push 0x66f2
push 0x1c7a
lea eax, [ebp - 0x3a0]
mov cl, 1
push eax
lea eax, [ebp - 0x194]
push eax
push 1
push 1
call fcn.10023c68
add esp, 0x20
lea eax, [ebp - 0x2e0]
xor dl, dl
push eax
push ecx
push 0x7c8b
lea eax, [ebp - 0x224]
push eax
lea eax, [ebp - 0x2e8]
push eax
lea eax, [ebp - 0x194]
push eax
push ecx
lea eax, [ebp - 0x3a0]
push eax
lea ecx, [ebp - 0x234]
call fcn.10022350
add esp, 0x20
lea ecx, [ebp - 0x3a0]
call fcn.100048f4
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x43c]
call fcn.100048f4
xor eax, eax
mov word [ebp + esi*2 - 0xd0], ax
inc esi
cmp esi, 2
jb 0x1002764f
mov dword [ebp - 0x18], ebx
mov dword [ebp - 0x18], ebx
jmp 0x10027796
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x31c], ebx
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 1
jl 0x10027789
mov dword [ebp - 0x18], ebx
cmp dword [ebp - 0x18], ebx
jl 0x100277b8
push ecx
push 1
mov edx, 0x3cb2
call fcn.10023e87
dec dword [ebp - 0x18]
pop ecx
pop ecx
jns 0x100277a4
push 1
push 0x4fc3
push ecx
call fcn.10023f02
mov eax, dword [ebp - 0x12c]
add esp, 0xc
shr eax, 1
mov dword [ebp - 0xe8], eax
mov eax, dword [ebp - 0x9c]
inc eax
cmp eax, dword [ebp - 0xe8]
jae 0x10027dfc
push dword [ebp - 0x31c]
lea eax, [ebp - 0x5b0]
mov dword [ebp - 0x2c], 0xffffffff
push eax
lea eax, [ebp - 0x5c0]
mov dword [ebp - 0x20], 0x111d0188
push eax
xorps xmm0, xmm0
mov dword [ebp - 0x250], ebx
push ebx
lea ecx, [ebp - 0x250]
mov dword [ebp - 0x24c], ebx
movdqu xmmword [ebp - 0x5c0], xmm0
mov dword [ebp - 0x248], ebx
call fcn.100073f4
mov dword [ebp - 4], 0x32
lea ecx, [ebp - 0x454]
mov dword [ebp - 0x18], 8
push 3
call fcn.10004892
mov byte [ebp - 4], 0x33
mov dword [ebp - 0xc0], ebx
jmp 0x10027872
mov eax, dword [ebp - 0xc0]
mov dword [ebp + eax*4 - 0x244], 0xffffffff
inc dword [ebp - 0xc0]
cmp dword [ebp - 0xc0], 1
jl 0x1002785b
push 0x22d1
lea eax, [ebp - 0xc0]
mov edx, 0x175f
push eax
push 0x494d
push 0x6cd5
push 0x46f6
push ebx
lea eax, [ebp - 0x454]
push eax
push ecx
mov ecx, 0x6fc3
call fcn.100247d4
mov eax, dword [ebp - 0x2c]
add esp, 0x20
cmp dword [ebp - 0x2c], 0xaad8
jne 0x100278da
mov ecx, dword [ebp - 0x2c]
xor edx, edx
mov eax, dword [ebp - 0x2c]
cmp ecx, eax
setg dl
imul edx, dword [ebp - 0x244]
test edx, edx
je 0x100278da
xor ecx, ecx
inc ecx
jmp 0x100278dc
mov ecx, ebx
mov eax, dword [ebp - 0x2c]
sub ecx, eax
sub ecx, dword [ebp - 0x20]
mov eax, dword [ebp - 0x250]
neg ecx
sbb ecx, ecx
inc ecx
mov dword [eax], ecx
mov eax, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x454]
mov dword [eax + 8], 0x703c5764
mov byte [ebp - 0x2d], bl
cmp byte [ebp - 0x2d], 0
je 0x10027919
push ecx
mov cl, 1
call fcn.1002440b
pop ecx
lea ecx, [ebp - 0x454]
call fcn.100048f4
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x250]
call fcn.100048f4
mov eax, dword [ebp - 0x9c]
mov edi, dword [ebp - 0x40]
lea ecx, [edi + eax*2]
call fcn.1001ff61
mov dword [ebp - 0x188], eax
mov dword [ebp - 0x20], 0xffffffff
mov dword [ebp - 0x38], 0x657689a5
mov dword [ebp - 0x24], 0xfdad5a51
mov dword [ebp - 0x18], ebx
mov dword [ebp - 0x28], 0xea0
mov dword [ebp - 0x1c], ebx
jmp 0x1002797f
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0x2f8], 6
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 1
jl 0x1002796e
mov dword [ebp - 0x1c], ebx
jmp 0x1002799b
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0x1d4], 0x79b69b2e
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 2
jl 0x1002798a
mov esi, dword [ebp - 0x20]
xor ecx, ecx
mov dword [ebp - 0x2f8], esi
inc ecx
dec dword [ebp - 0x18]
mov eax, dword [ebp - 0x1d4]
sub ecx, eax
mov edx, dword [ebp - 0x28]
sub edx, ecx
neg edx
sbb edx, edx
inc edx
sub edx, dword [ebp - 0x20]
neg edx
sbb edx, edx
xor eax, eax
inc edx
cmp edx, 8
setl al
xor ecx, ecx
mov dword [ebp - 0x24], eax
mov edx, dword [ebp - 0x28]
add edx, dword [ebp - 0x38]
mov eax, dword [ebp - 0x18]
add eax, esi
cmp eax, edx
setl cl
sub ecx, dword [ebp - 0x24]
jne 0x100279ef
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x1d4]
xor edx, edx
mov eax, dword [ebp - 0x1d4]
mov ecx, dword [ebp - 0x28]
mov eax, dword [ebp - 0x38]
cmp eax, ecx
mov eax, dword [ebp - 0x9c]
setle dl
add eax, 2
mov dword [ebp - 0x1d0], edx
lea ecx, [edi + eax*2]
call fcn.1001ff61
mov esi, eax
lea ecx, [ebp - 0x260]
push 2
mov dword [ebp - 0xe4], esi
call fcn.10004892
lea ecx, [ebp - 0x260]
mov dword [ebp - 4], 0x34
push ecx
xor eax, eax
lea ecx, [ebp - 0x4e8]
inc eax
mov edx, 0x2190
push 0xb7c
push eax
push eax
mov dword [ebp - 0x318], eax
mov dword [ebp - 0x310], 0x9d8d
push ebx
mov dword [ebp - 0x274], 0xc1b16eb2
push 0x1213
mov dword [ebp - 0x308], 0xfffffff6
call fcn.10022614
mov eax, dword [ebp - 0x260]
add esp, 0x18
mov dword [eax], 0xffffffe9
cmp dword [eax], 7
jg 0x10027c19
push 0x2aef
push 1
push 0x4501
push 0x30dc
push 0x3b32
push 0x3f32
push 1
push 0x24f3
push 1
push 0x40a
mov dword [ebp - 0x264], 0x1dc6b79d
mov edx, 0x5b18
mov dword [ebp - 0x27c], 0x6d54ec7e
mov ecx, 0x4271
push 0x5b83
mov dword [ebp - 0x300], 0xfffffff9
mov dword [ebp - 0x254], 0xe7721ca7
push 0x136b
call fcn.10023f7c
lea eax, [ebp - 0x254]
mov ecx, 0x4006
push eax
push 0x7dd9
push 0x4786
lea eax, [ebp - 0x300]
push eax
lea eax, [ebp - 0x264]
push eax
push 0x3d41
push 1
lea eax, [ebp - 0x308]
push eax
push 0x5354
lea eax, [ebp - 0x274]
push eax
push 0x5791
push 0x6e2b
lea eax, [ebp - 0x310]
push eax
lea eax, [ebp - 0x260]
push eax
push 0xc2f
lea eax, [ebp - 0x318]
push eax
lea eax, [ebp - 0x27c]
push eax
call fcn.10024191
mov dword [ebp - 0x28], 0x5f37
add esp, 0x74
cmp dword [ebp - 0x28], 0x61fc
jle 0x10027beb
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x260]
call fcn.100048f4
cmp dword [ebp - 0x188], 0xffffffff
jne 0x10027e12
mov ecx, dword [ebp - 0xc]
mov eax, 0x10265f70
pop edi
pop esi
mov dword fs:[0], ecx
pop ebx
mov esp, ebp
pop ebp
ret