Function at 0x1001e2c4
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x10085bef
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x5c0
push esi
and dword [ebp - 0x2a8], 0
push 3
lea ecx, [ebp - 0x3b8]
call fcn.100289a7
and dword [ebp - 4], 0
push 2
lea ecx, [ebp - 0x448]
call fcn.100289a7
mov byte [ebp - 4], 1
mov dword [ebp - 0x88], 0
jmp 0x1001e325
mov eax, dword [ebp - 0x88]
inc eax
mov dword [ebp - 0x88], eax
cmp dword [ebp - 0x88], 3
jge 0x1001e347
push dword [ebp - 0x88]
lea ecx, [ebp - 0x3b8]
call fcn.10028a14
mov dword [eax], 0x2e91a049
jmp 0x1001e318
push 0x5cae
lea eax, [ebp - 0x448]
push eax
push 0x536b
push 0
lea eax, [ebp - 0x88]
push eax
call fcn.100223d6
add esp, 0x14
mov byte [ebp - 0x53], 0
movzx eax, byte [ebp - 0x53]
test eax, eax
je 0x1001e37d
push 0
call fcn.1001dfa2
pop ecx
push 1
lea ecx, [ebp - 0x3b8]
call fcn.10028a14
mov dword [eax], 0xffffffed
jmp 0x1001e3b6
push 1
lea ecx, [ebp - 0x3b8]
call fcn.10028a14
mov dword [ebp - 0x228], eax
mov eax, dword [ebp - 0x228]
mov eax, dword [eax]
inc eax
mov ecx, dword [ebp - 0x228]
mov dword [ecx], eax
push 1
lea ecx, [ebp - 0x3b8]
call fcn.10028a14
cmp dword [eax], 2
jl 0x1001e3fd
mov dword [ebp - 0x35c], 0xffff
mov esi, dword [ebp - 0x35c]
push 0
lea ecx, [ebp - 0x448]
call fcn.10028a14
mov dword [eax], esi
mov byte [ebp - 0x5a], 0
movzx eax, byte [ebp - 0x5a]
test eax, eax
je 0x1001e3fb
push 0
call fcn.10020ead
pop ecx
jmp 0x1001e392
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x448]
call fcn.10028a0f
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x3b8]
call fcn.10028a0f
mov byte [ebp - 0x16c], 0xf
mov byte [ebp - 0x16b], 0x8b
mov byte [ebp - 0x16a], 0x18
mov byte [ebp - 0x169], 9
mov byte [ebp - 0x168], 0x15
mov byte [ebp - 0x167], 0xf
mov byte [ebp - 0x166], 2
mov byte [ebp - 0x165], 0x15
mov byte [ebp - 0x164], 7
mov byte [ebp - 0x163], 0xb
mov byte [ebp - 0x162], 6
mov byte [ebp - 0x161], 0xf
mov byte [ebp - 0x160], 0
mov byte [ebp - 0x15f], 6
mov byte [ebp - 0x15e], 9
mov byte [ebp - 0x15d], 0xb
mov byte [ebp - 0x15c], 8
mov byte [ebp - 0x15b], 3
mov byte [ebp - 0x15a], 0x17
mov byte [ebp - 0x159], 0x11
mov byte [ebp - 0x158], 0xd
mov byte [ebp - 0x157], 0x16
mov byte [ebp - 0x156], 0x10
mov byte [ebp - 0x155], 0x1f
mov byte [ebp - 0x154], 0xe
mov byte [ebp - 0x153], 0x1e
mov byte [ebp - 0x152], 0x12
mov byte [ebp - 0x151], 0x1c
mov byte [ebp - 0x150], 0xa
mov byte [ebp - 0x14f], 0x18
mov byte [ebp - 0x14e], 3
mov byte [ebp - 0x14d], 0xf
mov byte [ebp - 0x14c], 0x40
mov byte [ebp - 0x14b], 0x24
mov byte [ebp - 0x14a], 0xf8
mov byte [ebp - 0x149], 0x92
mov byte [ebp - 0x148], 0xb0
mov byte [ebp - 0x147], 0x3e
mov byte [ebp - 0x146], 0xa2
mov byte [ebp - 0x145], 0x4a
mov byte [ebp - 0x144], 0xa1
mov byte [ebp - 0x143], 0xd
mov byte [ebp - 0x142], 0xa9
mov byte [ebp - 0x141], 0xdb
mov byte [ebp - 0x140], 4
mov byte [ebp - 0x13f], 0x88
mov byte [ebp - 0x13e], 0x9a
mov byte [ebp - 0x13d], 3
mov byte [ebp - 0x13c], 0x43
mov byte [ebp - 0x13b], 0xdd
mov byte [ebp - 0x13a], 0x62
mov byte [ebp - 0x139], 0x54
mov byte [ebp - 0x138], 0x41
mov byte [ebp - 0x137], 0x37
mov byte [ebp - 0x136], 0xcd
mov byte [ebp - 0x135], 0x56
mov byte [ebp - 0x134], 0x6e
mov byte [ebp - 0x133], 0x8e
mov byte [ebp - 0x132], 0x52
mov byte [ebp - 0x131], 0x34
mov byte [ebp - 0x130], 0xe9
mov byte [ebp - 0x12f], 0x52
mov byte [ebp - 0x12e], 0x7f
mov byte [ebp - 0x12d], 0xf4
mov byte [ebp - 0x12c], 0xc0
mov byte [ebp - 0x12b], 0x3b
mov byte [ebp - 0x12a], 0x46
mov byte [ebp - 0x129], 0x33
mov byte [ebp - 0x128], 0xa
mov byte [ebp - 0x127], 0x11
mov byte [ebp - 0x126], 0xf7
mov byte [ebp - 0x125], 0xc0
mov byte [ebp - 0x124], 0x56
mov byte [ebp - 0x123], 0x57
mov byte [ebp - 0x122], 0x96
mov byte [ebp - 0x121], 0x2f
mov byte [ebp - 0x120], 0x53
mov byte [ebp - 0x11f], 0xa
mov byte [ebp - 0x11e], pe_nt_image_headers32
mov byte [ebp - 0x11d], 0x34
mov byte [ebp - 0x11c], 8
mov byte [ebp - 0x11b], 0x6a
mov byte [ebp - 0x11a], 0x6e
mov byte [ebp - 0x119], 0x59
mov byte [ebp - 0x118], 5
mov byte [ebp - 0x117], 0x80
mov byte [ebp - 0x116], 0x17
mov byte [ebp - 0x115], 0xe2
mov byte [ebp - 0x114], 0xfe
mov byte [ebp - 0x113], 0x5d
mov byte [ebp - 0x112], 0xe4
mov byte [ebp - 0x111], 0xfd
mov byte [ebp - 0x110], 0xa1
mov byte [ebp - 0x10f], 0xb5
mov byte [ebp - 0x10e], 0xd8
mov byte [ebp - 0x10d], 0x7e
mov byte [ebp - 0x10c], 0x93
mov byte [ebp - 0x10b], 0xc
mov byte [ebp - 0x10a], 9
mov byte [ebp - 0x109], 4
mov byte [ebp - 0x108], 8
mov byte [ebp - 0x107], 0x19
mov byte [ebp - 0x106], 0x1f
mov byte [ebp - 0x105], 0x13
mov byte [ebp - 0x104], 0xe
mov byte [ebp - 0x103], 0x11
mov byte [ebp - 0x102], 6
mov byte [ebp - 0x101], 0x16
mov byte [ebp - 0x100], 5
mov byte [ebp - 0xff], 0xb
mov byte [ebp - 0xfe], 0x1b
mov byte [ebp - 0xfd], 5
mov byte [ebp - 0xfc], 0xa
mov byte [ebp - 0xfb], 1
mov byte [ebp - 0xfa], 4
mov byte [ebp - 0xf9], 0x14
mov byte [ebp - 0xf8], 0x17
xor eax, eax
inc eax
shl eax, 0
movzx eax, byte [ebp + eax - 0x16c]
or eax, 0xfb
xor ecx, ecx
inc ecx
shl ecx, 0
movzx ecx, byte [ebp + ecx - 0x16c]
and ecx, 0xfb
sub eax, ecx
xor ecx, ecx
inc ecx
imul ecx, ecx, 0
movzx ecx, byte [ebp + ecx - 0x16c]
mov byte [ebp + ecx - 0x488], al
mov dword [ebp - 0x74], 0xf0f5ebe
mov dword [ebp - 0x50], 3
mov dword [ebp - 0x1cc], 1
mov dword [ebp - 0x398], 0xffffffff
mov dword [ebp - 0x34], 0
jmp 0x1001e7be
mov eax, dword [ebp - 0x34]
inc eax
mov dword [ebp - 0x34], eax
cmp dword [ebp - 0x34], 1
jge 0x1001e7d1
mov eax, dword [ebp - 0x34]
mov dword [ebp + eax*4 - 0x20], 0x244c3f4
jmp 0x1001e7b7
mov dword [ebp - 0x34], 0
jmp 0x1001e7e1
mov eax, dword [ebp - 0x34]
inc eax
mov dword [ebp - 0x34], eax
cmp dword [ebp - 0x34], 3
jge 0x1001e7f7
mov eax, dword [ebp - 0x34]
mov dword [ebp + eax*4 - 0x508], 0xfffffff6
jmp 0x1001e7da
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x20], 1
jge 0x1001e810
mov dword [ebp - 0x2b8], 1
jmp 0x1001e817
and dword [ebp - 0x2b8], 0
cmp dword [ebp - 0x2b8], 0x6f084217
jge 0x1001e82f
mov dword [ebp - 0x2c0], 1
jmp 0x1001e836
and dword [ebp - 0x2c0], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x20]
cmp dword [ebp - 0x2c0], eax
jne 0x1001e854
mov dword [ebp - 0x2dc], 1
jmp 0x1001e85b
and dword [ebp - 0x2dc], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x20]
imul eax, dword [ebp - 0x2dc]
push 4
pop ecx
imul ecx, ecx, 0
cmp eax, dword [ebp + ecx - 0x20]
je 0x1001e884
mov dword [ebp - 0x2e4], 1
jmp 0x1001e88b
and dword [ebp - 0x2e4], 0
cmp dword [ebp - 0x2e4], 0xedb7758b
jne 0x1001e8a3
mov dword [ebp - 0x1bc], 1
jmp 0x1001e8aa
and dword [ebp - 0x1bc], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x20]
mov ecx, dword [ebp - 0x1bc]
lea eax, [eax + ecx*4]
imul eax, eax, 0x7723
cmp eax, 0x4d4e
jg 0x1001e8d6
mov dword [ebp - 0x2b0], 1
jmp 0x1001e8dd
and dword [ebp - 0x2b0], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x20]
add eax, dword [ebp - 0x2b0]
jne 0x1001e901
mov eax, 0x95cd1d2a
test eax, eax
jne 0x1001e901
and dword [ebp - 0x25c], 0
jmp 0x1001e90b
mov dword [ebp - 0x25c], 1
mov eax, dword [ebp - 0x25c]
mov dword [ebp - 0x50], eax
mov dword [ebp - 0x74], 0xffffffe8
jmp 0x1001e924
mov eax, dword [ebp - 0x74]
inc eax
mov dword [ebp - 0x74], eax
cmp dword [ebp - 0x74], 0xffffffea
jl 0x1001eb5f
mov dword [ebp - 0x358], 1
mov dword [ebp - 0x170], 0xe9f81a77
mov dword [ebp - 0xf4], 0
jmp 0x1001e95b
mov eax, dword [ebp - 0xf4]
inc eax
mov dword [ebp - 0xf4], eax
cmp dword [ebp - 0xf4], 2
jge 0x1001e977
mov eax, dword [ebp - 0xf4]
mov dword [ebp + eax*4 - 0x308], 0
jmp 0x1001e94e
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x308], 4
je 0x1001e993
mov dword [ebp - 0x1c4], 1
jmp 0x1001e99a
and dword [ebp - 0x1c4], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x308]
cmp dword [ebp - 0x1c4], eax
jle 0x1001e9c4
mov eax, 0x372
test eax, eax
je 0x1001e9c4
mov dword [ebp - 0x348], 1
jmp 0x1001e9cb
and dword [ebp - 0x348], 0
mov eax, dword [ebp - 0x1cc]
mov dword [ebp - 0x53c], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x20], 0x91f4
je 0x1001e9f3
mov dword [ebp - 0x2ac], 1
jmp 0x1001e9fa
and dword [ebp - 0x2ac], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x508]
cmp dword [ebp - 0x2ac], eax
jle 0x1001ea1b
mov dword [ebp - 0x350], 1
jmp 0x1001ea22
and dword [ebp - 0x350], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x20]
mov dword [ebp - 0x4d8], eax
mov eax, dword [ebp - 0x358]
add eax, 0x4846e1d6
mov dword [ebp - 0x170], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x308]
add eax, dword [ebp - 0x170]
je 0x1001eb1b
mov dword [ebp - 0x388], 4
cmp dword [ebp - 0x388], 0
jle 0x1001ea7b
mov dword [ebp - 0x390], 1
jmp 0x1001ea82
and dword [ebp - 0x390], 0
mov eax, dword [ebp - 0x170]
mov dword [ebp - 0x530], eax
mov eax, dword [ebp - 0x1cc]
mov dword [ebp - 0x4e0], eax
mov eax, dword [ebp - 0x74]
mov dword [ebp - 0x558], eax
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x308]
mov ecx, dword [ebp - 0x398]
add ecx, 0xab81
sub eax, ecx
push 4
pop ecx
imul ecx, ecx, 0
sub eax, dword [ebp + ecx - 0x20]
push 4
pop ecx
imul ecx, ecx, 0
cmp eax, dword [ebp + ecx - 0x20]
jle 0x1001eae0
mov dword [ebp - 0x3a0], 1
jmp 0x1001eae7
and dword [ebp - 0x3a0], 0
mov eax, dword [ebp - 0x74]
mov dword [ebp - 0x3a8], eax
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x3a8]
mov dword [ebp + eax - 0x508], ecx
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x20]
mov dword [ebp - 0x538], eax
mov eax, dword [ebp - 0x50]
mov dword [ebp - 0x50], eax
jmp 0x1001eb37
mov byte [ebp - 0x6e], 0
push 0x7577
lea eax, [ebp - 0x6e]
push eax
push 0x6c18
push 0
call fcn.1001e075
add esp, 0x10
mov dword [ebp - 0x50], 0
jmp 0x1001eb47
mov eax, dword [ebp - 0x50]
inc eax
mov dword [ebp - 0x50], eax
cmp dword [ebp - 0x50], 1
jge 0x1001eb5a
mov eax, dword [ebp - 0x50]
mov dword [ebp + eax*4 - 0x20], 0x654a1373
jmp 0x1001eb40
jmp 0x1001e91d
mov dword [ebp - 0x1c], 2
and dword [ebp - 0xe0], 0
jmp 0x1001eb77
mov eax, dword [ebp - 0x1c]
inc eax
inc eax
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 0x75
jae 0x1001f293
mov dword [ebp - 0x3c], 0x2e91a04
mov dword [ebp - 0x32c], 0xc857617
mov dword [ebp - 0x3c], 0
jmp 0x1001eba2
mov eax, dword [ebp - 0x3c]
dec eax
mov dword [ebp - 0x3c], eax
cmp dword [ebp - 0x3c], 0xffffffe5
jne 0x1001ec61
push 1
lea ecx, [ebp - 0x46c]
call fcn.100289a7
mov dword [ebp - 4], 2
mov dword [ebp - 0xa4], 0xffffffff
push 0
push 0x4086
lea eax, [ebp - 0x4f4]
push eax
lea eax, [ebp - 0x46c]
push eax
call fcn.10022ef3
add esp, 0x10
mov dword [ebp - 0xa4], 0
jmp 0x1001ec00
mov eax, dword [ebp - 0xa4]
dec eax
mov dword [ebp - 0xa4], eax
cmp dword [ebp - 0xa4], 0
jl 0x1001ec4d
mov dword [ebp - 0x364], 9
mov byte [ebp - 0x5c], 0
movzx eax, byte [ebp - 0x5c]
test eax, eax
je 0x1001ec27
push 1
call fcn.1001dfa2
pop ecx
lea eax, [ebp - 0x364]
push eax
lea eax, [ebp - 0x46c]
push eax
push 1
push 0x10f4
lea eax, [ebp - 0xa4]
push eax
call fcn.1001dfcb
add esp, 0x14
jmp 0x1001ebf3
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x46c]
call fcn.10028a0f
jmp 0x1001eb9b
mov dword [ebp - 0x3c], 0xfffffff4
jmp 0x1001ec71
mov eax, dword [ebp - 0x3c]
dec eax
mov dword [ebp - 0x3c], eax
cmp dword [ebp - 0x3c], 0xffffffe3
jge 0x1001ed68
push 3
lea ecx, [ebp - 0x460]
call fcn.100289a7
mov dword [ebp - 4], 3
mov dword [ebp - 0x7c], 0
push 0x760
push 0
lea eax, [ebp - 0x460]
push eax
lea eax, [ebp - 0x560]
push eax
push 0x69a0
call fcn.10021f07
add esp, 0x14
mov byte [ebp - 0x51], 0
movzx eax, byte [ebp - 0x51]
test eax, eax
je 0x1001ecd2
push 0x6148
push 1
call fcn.1001e039
pop ecx
pop ecx
mov dword [ebp - 0x7c], 2
jmp 0x1001ece2
mov eax, dword [ebp - 0x7c]
dec eax
mov dword [ebp - 0x7c], eax
cmp dword [ebp - 0x7c], 0
jl 0x1001ed54
mov dword [ebp - 0x340], 0xffffffff
lea eax, [ebp - 0x7c]
push eax
lea eax, [ebp - 0x3c]
push eax
lea eax, [ebp - 0x32c]
push eax
push 0x7ebf
lea eax, [ebp - 0x460]
push eax
push 0
lea eax, [ebp - 0x340]
push eax
call fcn.10021800
add esp, 0x1c
mov byte [ebp - 0x55], 0
movzx eax, byte [ebp - 0x55]
test eax, eax
je 0x1001ed52
push 0x6b96
push 0x3f23
push 0x55c4
push 0x47d3
push 0x49a1
push 0
push 0xe26
call fcn.1002160a
add esp, 0x1c
jmp 0x1001ecdb
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x460]
call fcn.10028a0f
jmp 0x1001ec6a
xor eax, eax
inc eax
imul eax, eax, 0
movzx eax, byte [ebp + eax - 0x16c]
lea eax, [eax + eax + 2]
cmp dword [ebp - 0x1c], eax
jne 0x1001f16f
mov dword [ebp - 0x1e4], 0x57a55752
mov dword [ebp - 0x18], 0
jmp 0x1001ed9d
mov eax, dword [ebp - 0x18]
inc eax
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 3
jge 0x1001edb3
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x320], 0xd7f825e
jmp 0x1001ed96
mov dword [ebp - 0x18], 0
jmp 0x1001edc3
mov eax, dword [ebp - 0x18]
inc eax
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 2
jge 0x1001edd9
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0xac], 0x87013dce
jmp 0x1001edbc
mov dword [ebp - 0x18], 0
jmp 0x1001ede9
mov eax, dword [ebp - 0x18]
inc eax
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 3
jge 0x1001edff
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x1b0], 0
jmp 0x1001ede2
push 4
pop eax
shl eax, 0
mov dword [ebp + eax - 0xac], 2
jmp 0x1001ee2d
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0xac]
dec eax
push 4
pop ecx
shl ecx, 0
mov dword [ebp + ecx - 0xac], eax
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0xac], 0
jl 0x1001ee70
mov byte [ebp - 0x5d], 0
movzx eax, byte [ebp - 0x5d]
test eax, eax
je 0x1001ee5d
push 0x34e
push 0
push 0x248e
call fcn.10021fb1
add esp, 0xc
mov byte [ebp - 0x57], 0
lea eax, [ebp - 0x57]
push eax
push 0
call fcn.10021dc2
pop ecx
pop ecx
jmp 0x1001ee12
push 4
pop eax
shl eax, 0
mov dword [ebp + eax - 0x1b0], 2
jmp 0x1001ee9e
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x1b0]
dec eax
push 4
pop ecx
shl ecx, 0
mov dword [ebp + ecx - 0x1b0], eax
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x1b0], 0
jl 0x1001f143
mov dword [ebp - 0x14], 0xd2ab60e7
mov dword [ebp - 0x17c], 0x5aba9a98
mov dword [ebp - 0x14], 0
jmp 0x1001eed3
mov eax, dword [ebp - 0x14]
inc eax
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 1
jg 0x1001f125
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x1b0]
mov eax, dword [ebp + eax*4 - 0x320]
mov dword [ebp - 0x490], eax
push 4
pop eax
shl eax, 0
xor ecx, ecx
inc ecx
sub ecx, dword [ebp + eax - 0x1b0]
cmp ecx, dword [ebp - 0x14]
jle 0x1001ef18
mov dword [ebp - 0x264], 1
jmp 0x1001ef1f
and dword [ebp - 0x264], 0
mov eax, dword [ebp - 0x264]
sub eax, dword [ebp - 0x14]
mov dword [ebp - 0x17c], eax
mov eax, dword [ebp - 0x17c]
add eax, 0x5721
jne 0x1001ef4d
cmp dword [ebp - 0x17c], 0
jne 0x1001ef4d
and dword [ebp - 0x1d4], 0
jmp 0x1001ef57
mov dword [ebp - 0x1d4], 1
cmp dword [ebp - 0x1d4], 0xe67e
jle 0x1001ef6f
mov dword [ebp - 0x2e0], 1
jmp 0x1001ef76
and dword [ebp - 0x2e0], 0
mov eax, dword [ebp - 0x14]
mov ecx, dword [ebp - 0x2e0]
sub ecx, dword [ebp + eax*4 - 0xac]
mov eax, dword [ebp - 0x14]
cmp ecx, dword [ebp + eax*4 - 0x320]
jle 0x1001ef9e
mov dword [ebp - 0x1dc], 1
jmp 0x1001efa5
and dword [ebp - 0x1dc], 0
cmp dword [ebp - 0x1dc], 0x792891f4
jg 0x1001efbd
mov dword [ebp - 0x26c], 1
jmp 0x1001efc4
and dword [ebp - 0x26c], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x26c]
sub ecx, dword [ebp + eax - 0x320]
mov dword [ebp - 0x1e4], ecx
mov eax, dword [ebp - 0x1e4]
add eax, 0xe769
imul eax, dword [ebp - 0x14]
push 4
pop ecx
shl ecx, 0
mov ecx, dword [ebp + ecx - 0x1b0]
cmp dword [ebp + ecx*4 - 0x320], eax
jne 0x1001f00e
mov dword [ebp - 0x184], 1
jmp 0x1001f015
and dword [ebp - 0x184], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x184]
mov dword [ebp + eax - 0x320], ecx
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp + eax*4 - 0xac]
cmp dword [ebp - 0x184], eax
jge 0x1001f046
mov dword [ebp - 0x2b4], 1
jmp 0x1001f04d
and dword [ebp - 0x2b4], 0
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp + eax*4 - 0xac]
cmp dword [ebp - 0x2b4], eax
jle 0x1001f071
mov eax, 0xa016
test eax, eax
jne 0x1001f071
and dword [ebp - 0x1ec], 0
jmp 0x1001f07b
mov dword [ebp - 0x1ec], 1
cmp dword [ebp - 0x1ec], 0xe8ea
jne 0x1001f093
mov dword [ebp - 0x274], 1
jmp 0x1001f09a
and dword [ebp - 0x274], 0
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x274]
sub ecx, dword [ebp + eax - 0x1b0]
mov eax, dword [ebp - 0x14]
cmp ecx, dword [ebp + eax*4 - 0xac]
jge 0x1001f0c5
mov dword [ebp - 0x1f4], 1
jmp 0x1001f0cc
and dword [ebp - 0x1f4], 0
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp + eax*4 - 0xac]
cmp eax, dword [ebp - 0x1f4]
jg 0x1001f0ea
mov dword [ebp - 0x2d8], 1
jmp 0x1001f0f1
and dword [ebp - 0x2d8], 0
cmp dword [ebp - 0x2d8], 0x59141a9
jl 0x1001f109
mov dword [ebp - 0x1fc], 1
jmp 0x1001f110
and dword [ebp - 0x1fc], 0
mov eax, dword [ebp - 0x14]
mov ecx, dword [ebp - 0x1fc]
mov dword [ebp + eax*4 - 0xac], ecx
jmp 0x1001eecc
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x1b0]
cmp dword [ebp + eax*4 - 0x320], 0
je 0x1001f13e
jmp 0x1001f143
jmp 0x1001ee83
mov eax, dword [ebp - 0x1c]
movzx eax, byte [ebp + eax - 0x16c]
inc eax
mov dword [ebp - 0xe0], eax
mov eax, dword [ebp - 0x1c]
movzx eax, byte [ebp + eax - 0x16c]
mov ecx, dword [ebp - 0x1c]
lea eax, [ecx + eax - 1]
mov dword [ebp - 0x1c], eax
jmp 0x1001eb6f
mov eax, dword [ebp - 0x1c]
movzx eax, byte [ebp + eax - 0x16b]
mov ecx, dword [ebp - 0x1c]
sub ecx, dword [ebp - 0xe0]
movzx ecx, byte [ebp + ecx - 0x16e]
movsx ecx, byte [ebp + ecx - 0x488]
or eax, ecx
mov ecx, dword [ebp - 0x1c]
movzx ecx, byte [ebp + ecx - 0x16b]
mov edx, dword [ebp - 0x1c]
sub edx, dword [ebp - 0xe0]
movzx edx, byte [ebp + edx - 0x16e]
movsx edx, byte [ebp + edx - 0x488]
and ecx, edx
sub eax, ecx
mov ecx, dword [ebp - 0x1c]
movzx ecx, byte [ebp + ecx - 0x16c]
mov byte [ebp + ecx - 0x488], al
push 2
lea ecx, [ebp - 0x454]
call fcn.100289a7
mov dword [ebp - 4], 4
mov dword [ebp - 0x84], 0xfffffffc
mov dword [ebp - 0xc4], 0
jmp 0x1001f206
mov eax, dword [ebp - 0xc4]
inc eax
mov dword [ebp - 0xc4], eax
cmp dword [ebp - 0xc4], 2
jge 0x1001f228
push dword [ebp - 0xc4]
lea ecx, [ebp - 0x454]
call fcn.10028a14
mov dword [eax], 0x571177e8
jmp 0x1001f1f9
mov dword [ebp - 0x84], 0
jmp 0x1001f241
mov eax, dword [ebp - 0x84]
inc eax
mov dword [ebp - 0x84], eax
cmp dword [ebp - 0x84], 1
jg 0x1001f264
push dword [ebp - 0x84]
lea ecx, [ebp - 0x454]
call fcn.10028a14
cmp dword [eax], 0
je 0x1001f262
jmp 0x1001f264
jmp 0x1001f234
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x454]
call fcn.10028a0f
push 0x2040
push 0
push 0x4346
lea eax, [ebp - 0xe0]
push eax
call fcn.10020b1b
add esp, 0x10
jmp 0x1001eb6f
push 1
lea ecx, [ebp - 0x3f4]
call fcn.100289a7
mov dword [ebp - 4], 5
mov dword [ebp - 0x48], 0
jmp 0x1001f2b7
mov eax, dword [ebp - 0x48]
inc eax
mov dword [ebp - 0x48], eax
cmp dword [ebp - 0x48], 1
jge 0x1001f2d3
push dword [ebp - 0x48]
lea ecx, [ebp - 0x3f4]
call fcn.10028a14
mov dword [eax], 0x9f9b3198
jmp 0x1001f2b0
mov dword [ebp - 0x48], 0
jmp 0x1001f2e3
mov eax, dword [ebp - 0x48]
inc eax
mov dword [ebp - 0x48], eax
cmp dword [ebp - 0x48], 2
jge 0x1001f2f9
mov eax, dword [ebp - 0x48]
mov dword [ebp + eax*4 - 0x1a4], 0x8094a188
jmp 0x1001f2dc
push 4
pop eax
shl eax, 0
mov dword [ebp + eax - 0x1a4], 0
jmp 0x1001f327
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x1a4]
dec eax
push 4
pop ecx
shl ecx, 0
mov dword [ebp + ecx - 0x1a4], eax
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x1a4], 0
jl 0x1001f36f
push 4
pop eax
shl eax, 0
push dword [ebp + eax - 0x1a4]
lea ecx, [ebp - 0x3f4]
call fcn.10028a14
mov esi, eax
push 4
pop eax
shl eax, 0
push dword [ebp + eax - 0x1a4]
lea ecx, [ebp - 0x3f4]
call fcn.10028a14
mov ecx, dword [esi]
mov dword [eax], ecx
jmp 0x1001f30c
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x3f4]
call fcn.10028a0f
xor eax, eax
inc eax
imul eax, eax, 0x1a
mov byte [ebp + eax - 0x488], 0
mov dword [ebp - 0x64], 0xac204e2d
mov dword [ebp - 0x334], 0xffffffff
mov byte [ebp - 0x6d], 0
push 0
lea eax, [ebp - 0x6d]
push eax
push 0x2209
push 0x2b0
call fcn.100236db
add esp, 0x10
mov dword [ebp - 0x64], 0xffffffeb
jmp 0x1001f3c9
mov eax, dword [ebp - 0x64]
inc eax
mov dword [ebp - 0x64], eax
cmp dword [ebp - 0x64], 0xfffffff6
jle 0x1001f49f
mov dword [ebp - 0x38], 0xffffffff
mov dword [ebp - 0x38], 0
jmp 0x1001f3ea
mov eax, dword [ebp - 0x38]
inc eax
mov dword [ebp - 0x38], eax
cmp dword [ebp - 0x38], 0xe
jge 0x1001f454
mov dword [ebp - 0x98], 0xbea1
push 0x1dfc
push 0
lea eax, [ebp - 0x98]
push eax
lea eax, [ebp - 0x64]
push eax
push 0x2c44
call fcn.1002283f
add esp, 0x14
mov dword [ebp - 0x98], 0xe
jmp 0x1001f432
mov eax, dword [ebp - 0x98]
inc eax
mov dword [ebp - 0x98], eax
cmp dword [ebp - 0x98], 0x26
jle 0x1001f452
mov dword [ebp - 0x3cc], 0x143e
cmp dword [ebp - 0x3cc], 0
je 0x1001f450
jmp 0x1001f452
jmp 0x1001f425
jmp 0x1001f3e3
cmp dword [ebp - 0x38], 0
jne 0x1001f472
cmp dword [ebp - 0x64], 0
je 0x1001f484
push 7
pop eax
sub eax, dword [ebp - 0x64]
mov ecx, dword [ebp - 0x38]
neg ecx
sub ecx, dword [ebp - 0x38]
cmp eax, ecx
je 0x1001f484
cmp dword [ebp - 0x38], 0
je 0x1001f484
mov dword [ebp - 0x27c], 1
jmp 0x1001f48b
and dword [ebp - 0x27c], 0
mov eax, dword [ebp - 0x38]
add eax, dword [ebp - 0x27c]
mov dword [ebp - 0x334], eax
jmp 0x1001f3c2
lea eax, [ebp - 0x488]
push eax
lea ecx, [ebp - 0x5a4]
call fcn.10028880
mov dword [ebp - 4], 6
mov dword [ebp - 0xe8], 0x507e
push 3
lea ecx, [ebp - 0x3c8]
call fcn.100289a7
mov byte [ebp - 4], 7
mov dword [ebp - 0x33c], 5
mov dword [ebp - 0xbc], 0x68e1
mov dword [ebp - 0xa0], 0xe5aba8d6
mov dword [ebp - 0x20c], 0xa0b8914b
mov dword [ebp - 0x3e0], 0x2bac4117
push 0
lea eax, [ebp - 0x90]
push eax
push 0x4bc7
lea eax, [ebp - 0x3c8]
push eax
push 0x209d
call fcn.10021bc8
add esp, 0x14
mov dword [ebp - 0x90], 0
jmp 0x1001f540
mov eax, dword [ebp - 0x90]
inc eax
mov dword [ebp - 0x90], eax
cmp dword [ebp - 0x90], 1
jge 0x1001f55c
mov eax, dword [ebp - 0x90]
mov dword [ebp + eax*4 - 0x178], 0xd88c
jmp 0x1001f533
cmp dword [ebp - 0xe8], 0
jne 0x1001f715
mov eax, dword [ebp - 0xbc]
mov ecx, dword [ebp - 0xbc]
dec ecx
mov dword [ebp - 0xbc], ecx
test eax, eax
je 0x1001f6ab
push 0
lea ecx, [ebp - 0x3c8]
call fcn.10028a14
mov dword [ebp - 0x204], eax
push 0
lea ecx, [ebp - 0x3c8]
call fcn.10028a14
mov ecx, dword [ebp - 0x204]
mov eax, dword [eax]
mov dword [ecx], eax
mov eax, dword [ebp - 0xa0]
mov ecx, dword [ebp - 0x204]
cmp dword [ecx], eax
jl 0x1001f5ca
mov dword [ebp - 0x2bc], 1
jmp 0x1001f5d1
and dword [ebp - 0x2bc], 0
mov eax, dword [ebp - 0x2bc]
mov dword [ebp - 0x20c], eax
mov eax, dword [ebp - 0x20c]
imul eax, dword [ebp - 0xa0]
cmp eax, dword [ebp - 0xa0]
jne 0x1001f5fe
mov dword [ebp - 0x284], 1
jmp 0x1001f605
and dword [ebp - 0x284], 0
cmp dword [ebp - 0x284], 0
jle 0x1001f61a
mov dword [ebp - 0x214], 1
jmp 0x1001f621
and dword [ebp - 0x214], 0
cmp dword [ebp - 0x214], 4
jle 0x1001f636
mov dword [ebp - 0x2c8], 1
jmp 0x1001f63d
and dword [ebp - 0x2c8], 0
cmp dword [ebp - 0x2c8], 0x87d3
jne 0x1001f655
mov dword [ebp - 0x21c], 1
jmp 0x1001f65c
and dword [ebp - 0x21c], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x178]
cmp eax, dword [ebp - 0x21c]
jne 0x1001f67d
mov dword [ebp - 0x28c], 1
jmp 0x1001f684
and dword [ebp - 0x28c], 0
mov eax, dword [ebp - 0xe8]
mov ecx, dword [ebp - 0x28c]
lea eax, [ecx + eax - 0x8ac2]
cmp eax, dword [ebp - 0xa0]
je 0x1001f6ab
mov dword [ebp - 0x224], 1
jmp 0x1001f6b2
and dword [ebp - 0x224], 0
mov eax, dword [ebp - 0xe8]
imul eax, dword [ebp - 0x224]
cmp eax, 0xa82
jne 0x1001f6d8
cmp dword [ebp - 0xbc], 0
jne 0x1001f6d8
and dword [ebp - 0x39c], 0
jmp 0x1001f6e2
mov dword [ebp - 0x39c], 1
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x178]
mov dword [ebp - 0x494], eax
push 2
lea ecx, [ebp - 0x3c8]
call fcn.10028a14
mov ecx, dword [ebp - 0x33c]
cmp dword [eax], ecx
jl 0x1001f715
and dword [ebp - 0x2c4], 0
jmp 0x1001f71f
mov dword [ebp - 0x2c4], 1
mov eax, dword [ebp - 0x2c4]
sub eax, 0x9948
push 4
pop ecx
imul ecx, ecx, 0
cmp eax, dword [ebp + ecx - 0x178]
jl 0x1001f745
mov dword [ebp - 0x22c], 1
jmp 0x1001f74c
and dword [ebp - 0x22c], 0
mov eax, dword [ebp - 0xe8]
imul eax, dword [ebp - 0x22c]
cmp eax, dword [ebp - 0xa0]
jge 0x1001f76d
mov dword [ebp - 0x294], 1
jmp 0x1001f774
and dword [ebp - 0x294], 0
cmp dword [ebp - 0x294], 0xffffffff
jle 0x1001f789
mov dword [ebp - 0x234], 1
jmp 0x1001f790
and dword [ebp - 0x234], 0
mov eax, dword [ebp - 0x234]
mov dword [ebp - 0x3e0], eax
mov byte [ebp - 4], 6
lea ecx, [ebp - 0x3c8]
call fcn.10028a0f
and dword [ebp - 0xcc], 0
jmp 0x1001f7c1
mov eax, dword [ebp - 0xcc]
inc eax
mov dword [ebp - 0xcc], eax
cmp dword [ebp - 0xcc], 0x1b
jae 0x1001fabc
push 4
lea ecx, [ebp - 0x3d8]
call fcn.100289a7
mov byte [ebp - 4], 8
mov dword [ebp - 0x6c], 0x19d29be1
push 1
lea ecx, [ebp - 0x43c]
call fcn.100289a7
mov byte [ebp - 4], 9
push 0
push 0x6062
lea eax, [ebp - 0x3d8]
push eax
push 0x4d0f
lea eax, [ebp - 0x78]
push eax
call fcn.100229d6
add esp, 0x14
mov dword [ebp - 0x78], 0
jmp 0x1001f826
mov eax, dword [ebp - 0x78]
inc eax
mov dword [ebp - 0x78], eax
cmp dword [ebp - 0x78], 2
jge 0x1001f83c
mov eax, dword [ebp - 0x78]
mov dword [ebp + eax*4 - 0x4ec], 0xffffffff
jmp 0x1001f81f
push 0
push 0x4de1
push 0x192
lea eax, [ebp - 0x43c]
push eax
push 0x4548
lea eax, [ebp - 0x78]
push eax
call fcn.1002253b
add esp, 0x18
mov dword [ebp - 0x6c], 0
jmp 0x1001f870
mov eax, dword [ebp - 0x6c]
inc eax
mov dword [ebp - 0x6c], eax
cmp dword [ebp - 0x6c], 3
jg 0x1001fa71
mov dword [ebp - 0x80], 0x4e6d4f28
mov dword [ebp - 0x49c], 0xd5493e6
mov dword [ebp - 0x4a4], 0x6a7f4ea1
mov dword [ebp - 0x4ac], 0xfffffffa
mov dword [ebp - 0x4b4], 0x13f5e3d1
mov dword [ebp - 0x4bc], 0xcaea0a9f
mov dword [ebp - 0xf0], 0
jmp 0x1001f8cc
mov eax, dword [ebp - 0xf0]
inc eax
mov dword [ebp - 0xf0], eax
cmp dword [ebp - 0xf0], 3
jge 0x1001f8e8
mov eax, dword [ebp - 0xf0]
mov dword [ebp + eax*4 - 0x5b0], 0x3703acb6
jmp 0x1001f8bf
mov dword [ebp - 0x80], 3
jmp 0x1001f8f8
mov eax, dword [ebp - 0x80]
dec eax
mov dword [ebp - 0x80], eax
cmp dword [ebp - 0x80], 0
jl 0x1001fa48
mov dword [ebp - 0xec], 0
jmp 0x1001f91b
mov eax, dword [ebp - 0xec]
inc eax
mov dword [ebp - 0xec], eax
cmp dword [ebp - 0xec], 3
jge 0x1001f937
mov eax, dword [ebp - 0xec]
mov dword [ebp + eax*4 - 0x40c], 0xba07e4fc
jmp 0x1001f90e
push 4
pop eax
shl eax, 0
mov dword [ebp + eax - 0x40c], 0
jmp 0x1001f965
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x40c]
inc eax
push 4
pop ecx
shl ecx, 0
mov dword [ebp + ecx - 0x40c], eax
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x40c], 3
jg 0x1001fa43
mov dword [ebp - 0x360], 0
push dword [ebp - 0x6c]
lea ecx, [ebp - 0x3d8]
call fcn.10028a14
cmp dword [eax], 0
jb 0x1001f9a2
mov dword [ebp - 0x2cc], 1
jmp 0x1001f9a9
and dword [ebp - 0x2cc], 0
mov eax, dword [ebp - 0x2cc]
sub eax, 0xfffc
mov dword [ebp - 0x23c], eax
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x23c]
mov dword [ebp + eax - 0x4ec], ecx
cmp dword [ebp - 0x23c], 0
je 0x1001f9e9
push 0xfffffffffffffffb
pop eax
test eax, eax
je 0x1001f9e9
mov dword [ebp - 0x344], 1
jmp 0x1001f9f0
and dword [ebp - 0x344], 0
push dword [ebp - 0x6c]
lea ecx, [ebp - 0x3d8]
call fcn.10028a14
push dword [ebp - 0x6c]
lea ecx, [ebp - 0x3d8]
call fcn.10028a14
cmp dword [eax], 0x3ddc
jl 0x1001fa20
mov dword [ebp - 0x29c], 1
jmp 0x1001fa27
and dword [ebp - 0x29c], 0
mov eax, dword [ebp - 0x29c]
mov dword [ebp - 0x360], eax
cmp dword [ebp - 0x80], 0
je 0x1001fa3e
jmp 0x1001f94a
jmp 0x1001f94a
jmp 0x1001f8f1
push 0
lea ecx, [ebp - 0x43c]
call fcn.10028a14
mov dword [ebp - 0x244], eax
mov eax, dword [ebp - 0x244]
mov eax, dword [eax]
inc eax
mov ecx, dword [ebp - 0x244]
mov dword [ecx], eax
jmp 0x1001f869
mov byte [ebp - 0x59], 0
movzx eax, byte [ebp - 0x59]
test eax, eax
je 0x1001fa8b
push 0
push 0x3249
call fcn.10022991
pop ecx
pop ecx
mov byte [ebp - 4], 8
lea ecx, [ebp - 0x43c]
call fcn.10028a0f
mov byte [ebp - 4], 6
lea ecx, [ebp - 0x3d8]
call fcn.10028a0f
mov eax, dword [ebp - 0xcc]
mov byte [ebp + eax - 0x488], 0
jmp 0x1001f7b4
push 0x10008058
lea ecx, [ebp - 0x57c]
call fcn.10028880
mov byte [ebp - 4], 0xa
mov dword [ebp - 0xe4], 0x6d60
push 3
lea ecx, [ebp - 0x300]
call fcn.100289a7
mov byte [ebp - 4], 0xb
push 3
lea ecx, [ebp - 0x400]
call fcn.100289a7
mov byte [ebp - 4], 0xc
mov dword [ebp - 0x8c], 0x46bc2273
push 1
lea ecx, [ebp - 0x19c]
call fcn.100289a7
mov byte [ebp - 4], 0xd
mov dword [ebp - 0x1c0], 0x9ed7d413
mov dword [ebp - 0x180], 0x7557bc77
mov dword [ebp - 0x190], 0x8f9
mov dword [ebp - 0x36c], 5
mov dword [ebp - 0x10], 0
jmp 0x1001fb4f
mov eax, dword [ebp - 0x10]
inc eax
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], 3
jge 0x1001fb6b
push dword [ebp - 0x10]
lea ecx, [ebp - 0x300]
call fcn.10028a14
mov dword [eax], 0x451d52aa
jmp 0x1001fb48
mov dword [ebp - 0x10], 0
jmp 0x1001fb7b
mov eax, dword [ebp - 0x10]
inc eax
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], 3
jge 0x1001fb97
push dword [ebp - 0x10]
lea ecx, [ebp - 0x400]
call fcn.10028a14
mov dword [eax], 1
jmp 0x1001fb74
lea eax, [ebp - 0x19c]
push eax
push 0x3040
lea eax, [ebp - 0x10]
push eax
push 1
call fcn.1001e075
add esp, 0x10
mov dword [ebp - 0x10], 0
jmp 0x1001fbc1
mov eax, dword [ebp - 0x10]
inc eax
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], 2
jge 0x1001fbd7
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0x420], 7
jmp 0x1001fbba
cmp dword [ebp - 0xe4], 0
jne 0x1001fcbd
push 0
lea ecx, [ebp - 0x400]
call fcn.10028a14
mov dword [ebp - 0x18c], eax
mov eax, dword [ebp - 0xe4]
mov dword [ebp - 0x34c], eax
mov eax, dword [ebp - 0x18c]
mov eax, dword [eax]
mov dword [ebp - 0x368], eax
mov eax, dword [ebp - 0x18c]
mov eax, dword [eax]
inc eax
mov ecx, dword [ebp - 0x18c]
mov dword [ecx], eax
mov eax, dword [ebp - 0x34c]
cmp eax, dword [ebp - 0x368]
jne 0x1001fc3c
mov dword [ebp - 0x2d4], 1
jmp 0x1001fc43
and dword [ebp - 0x2d4], 0
imul eax, dword [ebp - 0xe4], 0xb365
cmp eax, 7
je 0x1001fc5e
mov dword [ebp - 0x354], 1
jmp 0x1001fc65
and dword [ebp - 0x354], 0
push 1
lea ecx, [ebp - 0x300]
call fcn.10028a14
mov dword [ebp - 0x370], eax
push 0
lea ecx, [ebp - 0x300]
call fcn.10028a14
mov ecx, dword [ebp - 0x370]
mov eax, dword [eax]
mov dword [ecx], eax
push 1
lea ecx, [ebp - 0x300]
call fcn.10028a14
mov ecx, dword [ebp - 0x2d4]
imul ecx, dword [eax]
mov dword [ebp - 0x8c], ecx
cmp dword [ebp - 0x8c], 0
jne 0x1001fcbd
and dword [ebp - 0x24c], 0
jmp 0x1001fcc7
mov dword [ebp - 0x24c], 1
cmp dword [ebp - 0x24c], 0x2845
jg 0x1001fcdf
mov dword [ebp - 0x2a4], 1
jmp 0x1001fce6
and dword [ebp - 0x2a4], 0
push 0
lea ecx, [ebp - 0x19c]
call fcn.10028a14
mov ecx, dword [ebp - 0x2a4]
cmp ecx, dword [eax]
je 0x1001fd09
mov dword [ebp - 0x254], 1
jmp 0x1001fd10
and dword [ebp - 0x254], 0
cmp dword [ebp - 0x254], 0x6fa66fa4
jge 0x1001fd28
mov dword [ebp - 0x2d0], 1
jmp 0x1001fd2f
and dword [ebp - 0x2d0], 0
push 0
lea ecx, [ebp - 0x19c]
call fcn.10028a14
mov ecx, dword [ebp - 0x2d0]
cmp ecx, dword [eax]
jle 0x1001fd52
mov dword [ebp - 0x1b8], 1
jmp 0x1001fd59
and dword [ebp - 0x1b8], 0
mov eax, dword [ebp - 0x1b8]
mov dword [ebp - 0x1c0], eax
mov esi, dword [ebp - 0x1c0]
push 0
lea ecx, [ebp - 0x19c]
call fcn.10028a14
cmp esi, dword [eax]
jne 0x1001fd97
push 1
lea ecx, [ebp - 0x300]
call fcn.10028a14
cmp dword [eax], 0
jne 0x1001fd97
and dword [ebp - 0x1c8], 0
jmp 0x1001fda1
mov dword [ebp - 0x1c8], 1
push 0
lea ecx, [ebp - 0x19c]
call fcn.10028a14
mov esi, dword [ebp - 0x1c8]
add esi, dword [eax]
push 0
lea ecx, [ebp - 0x19c]
call fcn.10028a14
cmp esi, dword [eax]
jge 0x1001fdd3
mov dword [ebp - 0x1d0], 1
jmp 0x1001fdda
and dword [ebp - 0x1d0], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x1d0]
sub ecx, dword [ebp + eax - 0x420]
mov dword [ebp - 0x180], ecx
je 0x1001fe90
mov dword [ebp - 0x380], 1
mov dword [ebp - 0x378], 0xffffffff
mov dword [ebp - 0x324], 0xef61160d
mov byte [ebp - 0x65], 0
movzx eax, byte [ebp - 0x65]
test eax, eax
je 0x1001fe50
push 0x46bc
push 0
push 0x6929
push 0x842
push 0x27bc
push 0x52f1
push 0x56c2
push 0x19de
call fcn.1001e0fc
add esp, 0x20
lea eax, [ebp - 0x19c]
push eax
push 1
lea eax, [ebp - 0x8c]
push eax
lea eax, [ebp - 0x300]
push eax
lea eax, [ebp - 0x324]
push eax
lea eax, [ebp - 0x378]
push eax
lea eax, [ebp - 0x400]
push eax
lea eax, [ebp - 0x380]
push eax
call fcn.1001e0fc
add esp, 0x20
jmp 0x100200a1
mov dword [ebp - 0xd4], 0xed5a0a0d
mov dword [ebp - 0x44], 0
jmp 0x1001feaa
mov eax, dword [ebp - 0x44]
inc eax
mov dword [ebp - 0x44], eax
cmp dword [ebp - 0x44], 4
jge 0x1001fec0
mov eax, dword [ebp - 0x44]
mov dword [ebp + eax*4 - 0x58c], 0x71521f00
jmp 0x1001fea3
mov dword [ebp - 0x44], 0
jmp 0x1001fed0
mov eax, dword [ebp - 0x44]
inc eax
mov dword [ebp - 0x44], eax
cmp dword [ebp - 0x44], 4
jge 0x1001fee6
mov eax, dword [ebp - 0x44]
mov dword [ebp + eax*4 - 0x550], 0x97a0ede8
jmp 0x1001fec9
mov byte [ebp - 0x5b], 0
movzx eax, byte [ebp - 0x5b]
test eax, eax
je 0x1001ff00
push 0
push 0x553e
call fcn.1002195e
pop ecx
pop ecx
push 4
pop eax
imul eax, eax, 3
cmp dword [ebp + eax - 0x58c], 0
je 0x1001ff2e
push 0
lea ecx, [ebp - 0x19c]
call fcn.10028a14
cmp dword [eax], 0
je 0x1001ff2e
mov dword [ebp - 0x3a4], 1
jmp 0x1001ff35
and dword [ebp - 0x3a4], 0
mov eax, dword [ebp - 0x8c]
mov dword [ebp - 0x4c4], eax
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x420], 0xe4e98e2c
jae 0x1001ff60
mov dword [ebp - 0x1d8], 1
jmp 0x1001ff67
and dword [ebp - 0x1d8], 0
mov eax, dword [ebp - 0xe4]
add eax, dword [ebp - 0x1d8]
jne 0x1001ff7c
cmp dword [ebp - 0xd4], 0
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0x550], 0xfffffffc
jle 0x1001ff97
mov dword [ebp - 0x1e0], 1
jmp 0x1001ff9e
and dword [ebp - 0x1e0], 0
mov eax, dword [ebp - 0x36c]
cmp dword [ebp - 0x1e0], eax
jg 0x1001ffb8
mov dword [ebp - 0x1e8], 1
jmp 0x1001ffbf
and dword [ebp - 0x1e8], 0
cmp dword [ebp - 0x1e8], 9
je 0x1001ffd4
mov dword [ebp - 0x3dc], 1
jmp 0x1001ffdb
and dword [ebp - 0x3dc], 0
push 0
lea ecx, [ebp - 0x19c]
call fcn.10028a14
push 1
lea ecx, [ebp - 0x300]
call fcn.10028a14
mov eax, dword [ebp - 0x8c]
mov dword [ebp - 0x4cc], eax
mov eax, dword [ebp - 0xd4]
cmp dword [ebp - 0x180], eax
jg 0x1002001b
mov dword [ebp - 0x1f0], 1
jmp 0x10020022
and dword [ebp - 0x1f0], 0
mov eax, dword [ebp - 0x190]
add eax, dword [ebp - 0x1f0]
mov dword [ebp - 0xd4], eax
push 4
pop eax
imul eax, eax, 3
mov eax, dword [ebp + eax - 0x58c]
add eax, dword [ebp - 0xd4]
mov dword [ebp - 0x374], eax
push 4
pop eax
imul eax, eax, 3
mov eax, dword [ebp + eax - 0x550]
mov dword [ebp - 0x3ac], eax
mov eax, dword [ebp - 0x190]
dec eax
mov dword [ebp - 0x190], eax
mov eax, dword [ebp - 0x374]
cmp eax, dword [ebp - 0x3ac]
jg 0x10020087
mov dword [ebp - 0x1f8], 1
jmp 0x1002008e
and dword [ebp - 0x1f8], 0
push 4
pop eax
imul eax, eax, 3
mov ecx, dword [ebp - 0x1f8]
mov dword [ebp + eax - 0x550], ecx
mov byte [ebp - 4], 0xc
lea ecx, [ebp - 0x19c]
call fcn.10028a0f
mov byte [ebp - 4], 0xb
lea ecx, [ebp - 0x400]
call fcn.10028a0f
mov byte [ebp - 4], 0xa
lea ecx, [ebp - 0x300]
call fcn.10028a0f
mov dword [ebp - 0x24], 0x76f5020f
mov dword [ebp - 0x28], 0xffffffff
mov dword [ebp - 0x37c], 0xb287
mov dword [ebp - 0x3e8], 0x3334
mov dword [ebp - 0x4d4], 0xb4028481
mov dword [ebp - 0x4dc], 0x67df2ddf
mov dword [ebp - 0x4e4], 5
mov dword [ebp - 0x4f0], 0x84cbf776
mov dword [ebp - 0x4f8], 0x7e1289ed
push 1
lea ecx, [ebp - 0x518]
call fcn.100289a7
mov byte [ebp - 4], 0xe
mov dword [ebp - 0x534], 0
mov dword [ebp - 0x48c], 0x2efaadad
mov dword [ebp - 0x248], 0x3d0097e4
mov dword [ebp - 0x4c], 0
jmp 0x10020161
mov eax, dword [ebp - 0x4c]
inc eax
mov dword [ebp - 0x4c], eax
cmp dword [ebp - 0x4c], 4
jge 0x10020177
mov eax, dword [ebp - 0x4c]
mov dword [ebp + eax*4 - 0x2f4], 1
jmp 0x1002015a
mov dword [ebp - 0x4c], 0
jmp 0x10020187
mov eax, dword [ebp - 0x4c]
inc eax
mov dword [ebp - 0x4c], eax
cmp dword [ebp - 0x4c], 1
jge 0x100201a3
push dword [ebp - 0x4c]
lea ecx, [ebp - 0x518]
call fcn.10028a14
mov dword [eax], 3
jmp 0x10020180
mov dword [ebp - 0x24], 0
jmp 0x100201b3
mov eax, dword [ebp - 0x24]
inc eax
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 3
jg 0x1002042f
mov dword [ebp - 0x30], 0xa5ea964a
mov dword [ebp - 0xb0], 0xffffffff
mov eax, dword [ebp - 0x30]
cmp dword [ebp - 0x24], eax
jne 0x100201e2
mov dword [ebp - 0x200], 1
jmp 0x100201e9
and dword [ebp - 0x200], 0
cmp dword [ebp - 0x200], 0
je 0x100201fe
mov dword [ebp - 0x208], 1
jmp 0x10020205
and dword [ebp - 0x208], 0
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp + eax*4 - 0x2f4]
cmp eax, dword [ebp - 0x208]
jle 0x10020223
mov dword [ebp - 0x210], 1
jmp 0x1002022a
and dword [ebp - 0x210], 0
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp + eax*4 - 0x2f4]
cmp eax, dword [ebp - 0x210]
jle 0x10020248
mov dword [ebp - 0x218], 1
jmp 0x1002024f
and dword [ebp - 0x218], 0
mov eax, dword [ebp - 0x218]
sub eax, dword [ebp - 0x24]
neg eax
imul eax, eax, 0x40c1
cmp eax, dword [ebp - 0x37c]
jle 0x10020274
mov dword [ebp - 0x220], 1
jmp 0x1002027b
and dword [ebp - 0x220], 0
mov eax, dword [ebp - 0x24]
imul eax, dword [ebp - 0x220]
mov dword [ebp - 0xb0], eax
push 4
pop eax
imul eax, eax, 3
mov eax, dword [ebp + eax - 0x2f4]
cmp eax, dword [ebp - 0xb0]
jle 0x100202ac
mov dword [ebp - 0x1b4], 1
jmp 0x100202b3
and dword [ebp - 0x1b4], 0
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp + eax*4 - 0x2f4]
mov dword [ebp - 0x28], eax
mov eax, dword [ebp - 0x28]
cmp eax, dword [ebp - 0x1b4]
jge 0x100202d6
mov eax, dword [ebp - 0x24]
cmp dword [ebp + eax*4 - 0x2f4], 0
cmp dword [ebp - 0xb0], 0
je 0x10020334
mov byte [ebp - 0x52], 0
movzx eax, byte [ebp - 0x52]
test eax, eax
je 0x100202f9
push 0x2d77
push 1
call fcn.1001e27e
pop ecx
pop ecx
mov dword [ebp - 0x30], 0xb
jmp 0x10020309
mov eax, dword [ebp - 0x30]
inc eax
mov dword [ebp - 0x30], eax
cmp dword [ebp - 0x30], 0x23
jg 0x10020332
mov byte [ebp - 0x54], 0
push 0x73d2
lea eax, [ebp - 0x54]
push eax
push 0x62dc
push 0x3f95
push 0
call fcn.10022f73
add esp, 0x14
jmp 0x10020302
jmp 0x1002034a
mov byte [ebp - 0x56], 0
movzx eax, byte [ebp - 0x56]
test eax, eax
je 0x1002034a
push 0
push 0
call dword [sym.imp.KERNEL32.dll_FindFirstFileA]
mov dword [ebp - 0x30], 0
jmp 0x1002035a
mov eax, dword [ebp - 0x30]
inc eax
mov dword [ebp - 0x30], eax
cmp dword [ebp - 0x30], 3
jg 0x1002042a
mov dword [ebp - 0x28], 3
jmp 0x10020374
mov eax, dword [ebp - 0x28]
dec eax
mov dword [ebp - 0x28], eax
cmp dword [ebp - 0x28], 0
jl 0x10020425
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x3e8]
cmp dword [ebp + eax*4 - 0x2f4], ecx
jg 0x100203f6
mov eax, dword [ebp - 0x24]
mov ecx, dword [ebp - 0x28]
mov ecx, dword [ebp + ecx*4 - 0x2f4]
dec ecx
dec ecx
cmp dword [ebp + eax*4 - 0x2f4], ecx
jg 0x100203b4
mov dword [ebp - 0x230], 1
jmp 0x100203bb
and dword [ebp - 0x230], 0
cmp dword [ebp - 0x230], 0xfffffff8
jbe 0x100203d0
mov dword [ebp - 0x238], 1
jmp 0x100203d7
and dword [ebp - 0x238], 0
cmp dword [ebp - 0x238], 0
jne 0x100203f6
mov eax, dword [ebp - 0x28]
cmp dword [ebp + eax*4 - 0x2f4], 0
jne 0x100203f6
and dword [ebp - 0x240], 0
jmp 0x10020400
mov dword [ebp - 0x240], 1
mov eax, dword [ebp - 0x240]
mov dword [ebp - 0xb0], eax
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x30]
mov eax, dword [ebp + eax*4 - 0x2f4]
mov dword [ebp + ecx*4 - 0x2f4], eax
jmp 0x1002036d
jmp 0x10020353
jmp 0x100201ac
mov eax, dword [ebp - 0x248]
inc eax
mov dword [ebp - 0x248], eax
mov byte [ebp - 4], 0xa
lea ecx, [ebp - 0x518]
call fcn.10028a0f
lea ecx, [ebp - 0x57c]
call fcn.1002892e
cmp eax, dword [ebp + 0xc]
je 0x10020a4e
mov dword [ebp - 0xc0], 1
mov dword [ebp - 0x384], 0xc0021fbb
mov dword [ebp - 0x55c], 0xfffb
mov dword [ebp - 0xdc], 0
jmp 0x10020496
mov eax, dword [ebp - 0xdc]
inc eax
mov dword [ebp - 0xdc], eax
cmp dword [ebp - 0xdc], 3
jge 0x100204b2
mov eax, dword [ebp - 0xdc]
mov dword [ebp + eax*4 - 0x5bc], 0x585ed065
jmp 0x10020489
mov dword [ebp - 0xc0], 0
jmp 0x100204cb
mov eax, dword [ebp - 0xc0]
inc eax
mov dword [ebp - 0xc0], eax
cmp dword [ebp - 0xc0], 2
jne 0x10020921
mov dword [ebp - 0x40], 0x2d149feb
mov dword [ebp - 0xb4], 0xffffffff
push 3
lea ecx, [ebp - 0x314]
call fcn.100289a7
mov byte [ebp - 4], 0xf
mov dword [ebp - 0x564], 0
mov dword [ebp - 0x38c], 0x479b69b2
mov dword [ebp - 0x3e4], 0x73468807
push 0
lea eax, [ebp - 0x314]
push eax
lea eax, [ebp - 0x94]
push eax
call fcn.10021204
add esp, 0xc
mov dword [ebp - 0x94], 0
jmp 0x10020549
mov eax, dword [ebp - 0x94]
inc eax
mov dword [ebp - 0x94], eax
cmp dword [ebp - 0x94], 1
jge 0x10020565
mov eax, dword [ebp - 0x94]
mov dword [ebp + eax*4 - 0xd0], 0
jmp 0x1002053c
mov eax, dword [ebp - 0x40]
mov dword [ebp - 0xb4], eax
mov dword [ebp - 0x40], 2
jmp 0x1002057e
mov eax, dword [ebp - 0x40]
dec eax
mov dword [ebp - 0x40], eax
cmp dword [ebp - 0x40], 0
jl 0x1002090d
mov dword [ebp - 0x4fc], 0xffffffff
mov dword [ebp - 0xd8], 0x47d1afd0
mov dword [ebp - 0x498], 0x70cadd63
push 2
lea ecx, [ebp - 0x418]
call fcn.100289a7
mov byte [ebp - 4], 0x10
mov dword [ebp - 0x9c], 0x1e69d086
lea eax, [ebp - 0x540]
push eax
push 0x70af
push 0
lea eax, [ebp - 0x418]
push eax
call fcn.10020a9c
add esp, 0x10
push dword [ebp - 0x40]
lea ecx, [ebp - 0x314]
call fcn.10028a14
cmp dword [eax], 0xbf9a
jge 0x10020600
mov dword [ebp - 0x250], 1
jmp 0x10020607
and dword [ebp - 0x250], 0
push dword [ebp - 0x40]
lea ecx, [ebp - 0x314]
call fcn.10028a14
mov eax, dword [eax]
cmp eax, dword [ebp - 0x250]
jle 0x1002062b
mov dword [ebp - 0x258], 1
jmp 0x10020632
and dword [ebp - 0x258], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xd0]
dec eax
mov dword [ebp - 0x260], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x260]
mov dword [ebp + eax - 0xd0], ecx
mov eax, dword [ebp - 0x258]
cmp eax, dword [ebp - 0x260]
je 0x10020859
mov dword [ebp - 0x4a0], 0x982b
mov dword [ebp - 0x3bc], 0xffffffff
mov dword [ebp - 0x50c], 0xcab43068
mov dword [ebp - 0xc8], 0
jmp 0x100206a2
mov eax, dword [ebp - 0xc8]
inc eax
mov dword [ebp - 0xc8], eax
cmp dword [ebp - 0xc8], 4
jge 0x100206be
mov eax, dword [ebp - 0xc8]
mov dword [ebp + eax*4 - 0x5cc], 0xfffffffe
jmp 0x10020695
push 0
lea ecx, [ebp - 0x418]
call fcn.10028a14
mov dword [ebp - 0x188], eax
mov eax, dword [ebp - 0x188]
mov eax, dword [eax]
inc eax
mov ecx, dword [ebp - 0x188]
mov dword [ecx], eax
mov eax, dword [ebp - 0x188]
cmp dword [eax], 0
jne 0x1002082b
cmp dword [ebp - 0xd8], 0
jne 0x10020718
mov eax, dword [ebp - 0x9c]
mov dword [ebp - 0x4a8], eax
mov eax, 0x8712
test eax, eax
jne 0x10020718
and dword [ebp - 0x278], 0
jmp 0x10020722
mov dword [ebp - 0x278], 1
cmp dword [ebp - 0x384], 5
jle 0x1002073d
cmp dword [ebp - 0x3bc], 0
jne 0x1002073d
and dword [ebp - 0x268], 0
jmp 0x10020747
mov dword [ebp - 0x268], 1
mov eax, dword [ebp - 0xb4]
cmp dword [ebp - 0x268], eax
jg 0x10020761
mov dword [ebp - 0x270], 1
jmp 0x10020768
and dword [ebp - 0x270], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xd0]
cmp dword [ebp - 0x270], eax
jge 0x10020789
mov dword [ebp - 0x280], 1
jmp 0x10020790
and dword [ebp - 0x280], 0
push dword [ebp - 0x40]
lea ecx, [ebp - 0x314]
call fcn.10028a14
mov eax, dword [eax]
imul eax, dword [ebp - 0x278]
cmp eax, dword [ebp - 0x280]
jg 0x100207bb
mov dword [ebp - 0x288], 1
jmp 0x100207c2
and dword [ebp - 0x288], 0
mov eax, dword [ebp - 0x38c]
cmp dword [ebp - 0x288], eax
je 0x100207dc
mov dword [ebp - 0x290], 1
jmp 0x100207e3
and dword [ebp - 0x290], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xd0]
imul eax, dword [ebp - 0x290]
inc eax
cmp eax, 0xffae3c77
jb 0x1002080b
mov dword [ebp - 0x298], 1
jmp 0x10020812
and dword [ebp - 0x298], 0
mov eax, dword [ebp - 0x298]
sub eax, dword [ebp - 0xd8]
neg eax
jne 0x1002082b
and dword [ebp - 0x174], 0
jmp 0x10020835
mov dword [ebp - 0x174], 1
push dword [ebp - 0x40]
lea ecx, [ebp - 0x314]
call fcn.10028a14
mov ecx, dword [ebp - 0x174]
mov dword [eax], ecx
mov eax, dword [ebp - 0x174]
mov dword [ebp - 0xb4], eax
jmp 0x1002089a
mov dword [ebp - 0x430], 0xc7e9a03a
mov dword [ebp - 0x42c], 0xc7e9a03a
mov dword [ebp - 0x428], 0xc7e9a03a
mov dword [ebp - 0x424], 0xc7e9a03a
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x430]
inc eax
push 4
pop ecx
shl ecx, 1
mov dword [ebp + ecx - 0x430], eax
mov dword [ebp - 0x9c], 0xffffffe7
jmp 0x100208b3
mov eax, dword [ebp - 0x9c]
inc eax
mov dword [ebp - 0x9c], eax
cmp dword [ebp - 0x9c], 0x33
je 0x100208f9
mov dword [ebp - 0x520], 0xbff0
push 1
lea ecx, [ebp - 0x418]
call fcn.10028a14
mov eax, dword [eax]
mov dword [ebp - 0xd8], eax
mov eax, dword [ebp - 0xd8]
mov dword [ebp - 0x4b0], eax
imul eax, dword [ebp - 0x3e4], 0xfff9
mov dword [ebp - 0xb4], eax
jmp 0x100208a6
mov byte [ebp - 4], 0xf
lea ecx, [ebp - 0x418]
call fcn.10028a0f
jmp 0x10020577
mov byte [ebp - 4], 0xa
lea ecx, [ebp - 0x314]
call fcn.10028a0f
jmp 0x100204be
call fcn.1006e07b
mov esi, eax
lea ecx, [ebp - 0x5a4]
call fcn.1002892e
mov ecx, eax
mov eax, esi
xor edx, edx
div ecx
mov dword [ebp - 0x338], edx
mov dword [ebp - 0x2c], 1
mov dword [ebp - 0xb8], 0xc407858f
mov dword [ebp - 0x328], 0x24b5
mov dword [ebp - 0x330], 3
mov byte [ebp - 0x58], 0
push 0x179f
lea eax, [ebp - 0x58]
push eax
push 0
call fcn.10021438
add esp, 0xc
mov eax, dword [ebp - 0x2c]
mov dword [ebp - 0x51c], eax
mov eax, dword [ebp - 0x2c]
mov dword [ebp - 0xb8], eax
mov eax, dword [ebp - 0xb8]
mov dword [ebp - 0x4b8], eax
mov eax, dword [ebp - 0x2c]
mov dword [ebp - 0x524], eax
mov eax, dword [ebp - 0x2c]
cmp dword [ebp - 0xb8], eax
jne 0x100209bb
mov dword [ebp - 0x2a0], 1
jmp 0x100209c2
and dword [ebp - 0x2a0], 0
mov eax, dword [ebp - 0x2c]
cmp eax, dword [ebp - 0x2a0]
je 0x100209d9
mov dword [ebp - 0x394], 1
jmp 0x100209e0
and dword [ebp - 0x394], 0
mov eax, dword [ebp - 0x2c]
mov dword [ebp - 0x4c0], eax
mov eax, dword [ebp - 0xb8]
mov dword [ebp - 0x52c], eax
mov eax, dword [ebp - 0x2c]
mov dword [ebp - 0x4c8], eax
mov eax, dword [ebp - 0x2c]
mov dword [ebp - 0x528], eax
mov eax, dword [ebp - 0x2c]
mov dword [ebp - 0x4d0], eax
mov eax, dword [ebp - 0x328]
mov dword [ebp - 0x554], eax
mov eax, dword [ebp - 0x2c]
mov dword [ebp - 0x330], eax
lea eax, [ebp - 0x338]
push eax
push 0
push 0x8d1
lea eax, [ebp - 0x5a4]
push eax
lea eax, [ebp - 0x57c]
push eax
call fcn.1002374c
add esp, 0x14
jmp 0x1002044b
lea eax, [ebp - 0x57c]
push eax
mov ecx, dword [ebp + 8]
call fcn.100288af
mov eax, dword [ebp - 0x2a8]
or eax, 1
mov dword [ebp - 0x2a8], eax
mov byte [ebp - 4], 6
lea ecx, [ebp - 0x57c]
call fcn.10028908
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x5a4]
call fcn.10028908
mov eax, dword [ebp + 8]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop esi
mov esp, ebp
pop ebp
ret