Function at 0x1001a538
Capabilities:
Create directory

Disassembly:
mov eax, 0x100880df
call fcn.100877a0
sub esp, 0x144
push ebx
push esi
push edi
push 3
pop esi
mov edi, ecx
mov dword [ebp - 0x6c], edx
mov dword [ebp - 0x10], 0xffffffff
lea ecx, [ebp - 0xb8]
push esi
call fcn.10017f97
mov dword [ebp - 0x2c], 0xfffffff9
xor ebx, ebx
mov dword [ebp - 0x20], 0x34ea
mov dword [ebp - 0x14], ebx
jmp 0x1001a58e
mov ecx, dword [ebp - 0x14]
mov eax, dword [ebp - 0xb8]
mov dword [eax + ecx*4], 0x452a
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], esi
jl 0x1001a57b
mov dword [ebp - 0x14], ebx
jmp 0x1001a5a5
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0xcc], esi
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], 2
jl 0x1001a598
mov dword [ebp - 0x14], ebx
jmp 0x1001a5bd
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x98], ebx
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], 1
jl 0x1001a5b0
mov eax, dword [ebp - 0x10]
mov eax, dword [ebp - 0x10]
mov esi, dword [ebp - 0xb8]
mov eax, dword [esi + 8]
sub eax, dword [esi + 4]
mov dword [ebp - 0x2c], eax
mov eax, dword [ebp - 0x2c]
neg eax
mov dword [ebp - 0xc8], eax
mov ecx, dword [ebp - 0x2c]
mov eax, dword [ebp - 0xb8]
neg ecx
sbb ecx, ecx
neg ecx
mov edx, dword [eax]
xor eax, eax
cmp ecx, dword [esi + 4]
mov dword [ebp - 0x98], ecx
setle al
xor ecx, ecx
cmp eax, edx
setg cl
add ecx, edx
add ecx, dword [esi + 4]
neg ecx
je 0x1001a624
mov byte [ebp - 0x19], bl
cmp byte [ebp - 0x19], bl
je 0x1001a651
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_CreateDirectoryW]
jmp 0x1001a651
mov dword [ebp - 0x24], 0x5950cfdf
mov dword [ebp - 0x24], 0xb6bd0d42
mov dword [ebp - 0x28], ebx
jmp 0x1001a648
mov eax, dword [ebp - 0x28]
mov dword [ebp + eax*4 - 0x150], 0xfffffffd
inc dword [ebp - 0x28]
cmp dword [ebp - 0x28], 4
jl 0x1001a637
dec dword [ebp - 0x20]
mov dword [ebp - 0x20], ebx
jmp 0x1001a674
mov dword [ebp - 0x24], 0xfffffffa
mov eax, dword [ebp - 0x20]
cmp dword [ebp + eax*4 - 0xcc], 0xd36fbc6a
sbb eax, eax
inc eax
mov dword [ebp - 0x24], eax
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], 1
jle 0x1001a656
lea ecx, [ebp - 0xb8]
call fcn.10018895
mov dword [ebp - 0x7c], 8
lea ecx, [ebp - 0xc4]
mov dword [ebp - 0x40], 0xffffffff
push 3
call fcn.10017f97
mov dword [ebp - 4], ebx
mov dword [ebp - 0x28], ebx
jmp 0x1001a6bb
mov ecx, dword [ebp - 0x28]
mov eax, dword [ebp - 0xc4]
mov dword [eax + ecx*4], 0xfffffff7
inc dword [ebp - 0x28]
cmp dword [ebp - 0x28], 3
jl 0x1001a6a8
push 0x5d66
lea eax, [ebp - 0x40]
push eax
push 0x32fa
push ebx
lea edx, [ebp - 0xc4]
lea ecx, [ebp - 0x7c]
call fcn.1001a011
add esp, 0x10
mov dword [ebp - 0x40], 0xffffffeb
cmp dword [ebp - 0x40], 0x10
jl 0x1001a79a
mov esi, dword [ebp - 0xc4]
mov dword [ebp - 0x10], 0xffffffff
push 2
mov dword [ebp - 0x24], 0x4e785c2f
mov dword [ebp - 0x14], ebx
pop ecx
jmp 0x1001a71f
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x94], 1
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], ecx
jl 0x1001a70e
mov dword [ebp - 0x14], ebx
jmp 0x1001a73a
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0xa0], 0x796a
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], ecx
jl 0x1001a729
cmp dword [esi + 8], ebx
jne 0x1001a766
mov dword [ebp - 0x10], ebx
mov eax, dword [ebp - 0x10]
mov dword [ebp - 0x94], eax
mov eax, dword [ebp - 0x94]
mov dword [ebp - 0x94], 1
mov eax, dword [ebp - 0x10]
mov eax, dword [ebp - 0x10]
mov edx, dword [ebp - 0x9c]
mov eax, dword [ebp - 0x9c]
neg edx
sbb edx, edx
xor ecx, ecx
neg edx
sub edx, eax
mov eax, dword [ebp - 0x9c]
cmp edx, eax
setge cl
add ecx, dword [esi + 8]
mov dword [ebp - 0x24], ecx
inc dword [ebp - 0x40]
cmp dword [ebp - 0x40], 0x10
jge 0x1001a6f8
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xc4]
call fcn.10018895
cmp dword [edi + 0x10], ebx
jne 0x1001a7b5
xor al, al
jmp 0x1001b31f
xor ecx, ecx
inc ecx
mov dword [ebp - 0x14], ecx
mov dword [ebp - 0x20], 0xde661fbc
mov dword [ebp - 0x18], 0x1213072c
mov dword [ebp - 0x24], 0xffffffff
mov dword [ebp - 0x24], ebx
mov dword [ebp - 0x28], ebx
jmp 0x1001a7e6
mov eax, dword [ebp - 0x28]
mov dword [ebp + eax*4 - 0x60], 0xb659d568
inc dword [ebp - 0x28]
cmp dword [ebp - 0x28], 2
jl 0x1001a7d8
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp - 0x14]
neg eax
push 0xfffffffffffffff6
sbb eax, eax
inc eax
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 0xbc07c207
pop esi
sbb eax, eax
add eax, 0xe4262eb2
cmp eax, esi
jne 0x1001a819
cmp dword [ebp - 0x14], ebx
jne 0x1001a819
mov ecx, ebx
xor eax, eax
mov dword [ebp - 0x5c], 0x9831
cmp ecx, 0x693009c
setl al
sub eax, dword [ebp - 0x14]
neg eax
sbb eax, eax
xor edx, edx
inc eax
imul ecx, eax, 0x9831
mov eax, dword [ebp - 0x14]
cmp ecx, eax
setge dl
sub edx, 0xfffffff7
neg edx
sbb edx, edx
inc edx
imul edx, dword [ebp - 0x14]
mov dword [ebp - 0x14], edx
mov eax, dword [ebp - 0x14]
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x18], ebx
jmp 0x1001a980
mov dword [ebp - 0x10], 0x29b4ccc4
lea ecx, [ebp - 0xf0]
push 2
call fcn.10017f97
mov dword [ebp - 0x24], 3
mov dword [ebp - 0x28], ebx
jmp 0x1001a893
mov ecx, dword [ebp - 0x28]
mov eax, dword [ebp - 0xf0]
mov dword [eax + ecx*4], 1
inc dword [ebp - 0x28]
cmp dword [ebp - 0x28], 2
jl 0x1001a880
mov dword [ebp - 0x20], ebx
jmp 0x1001a8d2
mov dword [ebp - 0x14], 1
cmp dword [ebp - 0x14], ebx
jl 0x1001a8cf
mov byte [ebp - 0x19], bl
cmp byte [ebp - 0x19], 0
je 0x1001a8c1
push ebx
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_KillTimer]
mov eax, dword [ebp - 0x20]
cmp dword [ebp + eax*4 - 0x60], ebx
jne 0x1001a8cf
dec dword [ebp - 0x14]
jns 0x1001a8aa
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], 1
jle 0x1001a89e
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp + eax*4 - 0x60]
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp - 0x10]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp + eax*4 - 0x60]
mov eax, dword [ebp - 0x18]
cmp dword [ebp + eax*4 - 0x60], ebx
jne 0x1001a8fa
cmp dword [ebp - 0x10], ebx
je 0x1001a8ff
cmp dword [ebp - 0x10], ebx
jne 0x1001a908
cmp dword [ebp - 0x5c], ebx
jne 0x1001a908
mov edx, ebx
jmp 0x1001a90b
xor edx, edx
inc edx
mov eax, dword [ebp - 0x14]
xor ecx, ecx
cmp edx, eax
setle cl
xor edx, edx
imul ecx, dword [ebp - 0x10]
mov dword [ebp - 0x14], ecx
mov ecx, dword [ebp - 0x14]
mov eax, dword [ebp - 0xf0]
cmp ecx, dword [eax]
mov eax, dword [ebp - 0x5c]
setge dl
sub edx, eax
mov eax, dword [ebp - 0x18]
add eax, edx
jne 0x1001a941
cmp dword [ebp - 0x24], ebx
jne 0x1001a941
mov edx, ebx
jmp 0x1001a944
xor edx, edx
inc edx
mov eax, dword [ebp - 0x18]
cmp esi, edx
mov edx, 0x807c1f4b
mov ecx, dword [ebp + eax*4 - 0x60]
sbb eax, eax
inc eax
cmp edx, eax
sbb eax, eax
xor edx, edx
neg eax
cmp ecx, eax
mov eax, dword [ebp - 0x10]
sete dl
xor ecx, ecx
shl edx, 2
cmp edx, eax
setl cl
mov dword [ebp - 0x24], ecx
lea ecx, [ebp - 0xf0]
call fcn.10018895
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 1
jle 0x1001a860
mov eax, dword [ebp - 0x6c]
lea ecx, [ebp - 0xfc]
push 1
mov dword [eax], ebx
mov dword [ebp - 0x10], 0xd6c05baf
call fcn.10017f97
mov dword [ebp - 4], 1
mov dword [ebp - 0x10], ebx
jmp 0x1001a9c2
mov ecx, dword [ebp - 0x10]
mov eax, dword [ebp - 0xfc]
mov dword [eax + ecx*4], 6
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], 1
jl 0x1001a9af
push 0xfffffffffffffff9
mov dword [ebp - 0x10], 0xfffffffd
pop esi
jmp 0x1001aa5b
push 1
lea ecx, [ebp - 0xe4]
call fcn.10017f97
push 1
lea ecx, [ebp - 0x120]
mov byte [ebp - 4], 2
call fcn.10017f97
xor edx, edx
mov dword [ebp - 0x24], 0xfffffffa
mov dword [ebp - 0x18], ebx
inc edx
jmp 0x1001aa17
mov ecx, dword [ebp - 0x18]
mov eax, dword [ebp - 0xe4]
mov dword [eax + ecx*4], 0xeede0b40
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], edx
jl 0x1001aa04
mov dword [ebp - 0x18], ebx
jmp 0x1001aa31
mov ecx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x120]
or dword [eax + ecx*4], 0xffffffff
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], edx
jl 0x1001aa21
mov eax, dword [ebp - 0xe4]
lea ecx, [ebp - 0x120]
mov dword [eax], ebx
call fcn.10018895
lea ecx, [ebp - 0xe4]
mov byte [ebp - 4], 1
call fcn.10018895
dec dword [ebp - 0x10]
cmp dword [ebp - 0x10], esi
jne 0x1001a9d7
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xfc]
call fcn.10018895
mov dword [ebp - 0x14], 1
mov dword [ebp - 0x2c], 0x8bc8977b
mov dword [ebp - 0x24], 0xfffffffd
mov dword [ebp - 0x18], ebx
jmp 0x1001aa9b
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x34], 0x4ec2
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 1
jl 0x1001aa8d
mov dword [ebp - 0x18], ebx
jmp 0x1001aab4
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x68], 0x8f381c4e
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 2
jl 0x1001aaa6
mov dword [ebp - 0x14], ebx
cmp dword [ebp - 0x14], ebx
jg 0x1001ad3f
push 3
pop esi
mov dword [ebp - 0x20], 0xc9ebf495
lea ecx, [ebp - 0xac]
push 1
call fcn.10017f97
mov dword [ebp - 4], esi
lea ecx, [ebp - 0xd8]
mov dword [ebp - 0x28], 0x7a140552
mov dword [ebp - 0x44], 0x925b974d
mov dword [ebp - 0x44], 0x736fa7ab
push 1
call fcn.10017f97
mov dword [ebp - 0x18], ebx
jmp 0x1001ab1a
mov ecx, dword [ebp - 0x18]
mov eax, dword [ebp - 0xac]
mov dword [eax + ecx*4], 0x9a56718e
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 1
jl 0x1001ab07
mov dword [ebp - 0x18], ebx
jmp 0x1001ab38
mov ecx, dword [ebp - 0x18]
mov eax, dword [ebp - 0xd8]
mov dword [eax + ecx*4], 0xfffffffb
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 1
jl 0x1001ab25
mov eax, dword [ebp - 0x14]
cmp dword [ebp + eax*4 - 0x34], ebx
je 0x1001ab5e
mov eax, dword [ebp - 0x14]
xor edx, edx
mov ecx, dword [ebp + eax*4 - 0x34]
mov eax, dword [ebp - 0x14]
cmp eax, ecx
setl dl
mov dword [ebp - 0x20], edx
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp + eax*4 - 0x34]
mov eax, dword [ebp - 0x20]
cmp dword [ebp - 0x34], ebx
jne 0x1001ab7d
mov eax, dword [ebp - 0x14]
cmp dword [ebp + eax*4 - 0x34], ebx
jne 0x1001ab7d
mov edx, ebx
jmp 0x1001ab80
xor edx, edx
inc edx
mov eax, dword [ebp - 0x34]
xor ecx, ecx
cmp edx, eax
setle cl
cmp ecx, dword [ebp - 0x34]
jne 0x1001ab98
cmp dword [ebp - 0x14], ebx
jne 0x1001ab98
mov edx, ebx
jmp 0x1001ab9b
xor edx, edx
inc edx
mov eax, dword [ebp - 0xac]
xor ecx, ecx
cmp edx, dword [eax]
setle cl
add ecx, 2
mov dword [ebp - 0x28], ecx
mov dword [ebp - 0x20], ebx
jmp 0x1001acf6
mov dword [ebp - 0x4c], 0xffffffff
mov dword [ebp - 0x74], 8
mov dword [ebp - 0x28], ebx
jmp 0x1001acea
mov dword [ebp - 0x18], 0xfffffffe
mov dword [ebp - 0x48], 1
mov dword [ebp - 0x10], ebx
jmp 0x1001abec
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0x134], ebx
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], esi
jl 0x1001abdf
mov dword [ebp - 0x18], ebx
cmp dword [ebp - 0x18], ebx
jl 0x1001ace4
mov dword [ebp - 0x10], 7
mov dword [ebp - 0x78], 0x8a746c20
mov eax, dword [ebp - 0x4c]
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x44], eax
mov eax, dword [ebp - 0x44]
inc eax
sub eax, dword [ebp - 0x10]
neg eax
sbb eax, eax
xor ebx, ebx
inc eax
cmp eax, 6
setl bl
xor edx, edx
mov dword [ebp - 0x130], ebx
mov ecx, dword [ebp - 0x74]
mov eax, dword [ebp - 0xac]
imul ecx, dword [eax]
cmp ecx, ebx
setne dl
xor eax, eax
cmp edx, 0xfffffff6
setg al
cmp eax, 1
mov eax, dword [ebp - 0x18]
sbb ecx, ecx
xor edx, edx
neg ecx
cmp ecx, eax
mov eax, dword [ebp - 0x78]
setl dl
xor ecx, ecx
cmp edx, eax
setne cl
sub ecx, dword [ebp - 0x10]
neg ecx
sbb ecx, ecx
xor eax, eax
inc ecx
imul ecx, dword [ebp - 0x74]
cmp ecx, 0x5d487c75
mov ecx, 0xa909f00f
setge al
sub eax, dword [ebp - 0x10]
mov dword [ebp - 0x44], eax
mov eax, dword [ebp - 0x44]
cmp ecx, eax
mov eax, dword [ebp - 0x78]
sbb ecx, ecx
xor edx, edx
neg ecx
cmp ecx, eax
mov eax, dword [ebp - 0x18]
setg dl
xor ecx, ecx
add edx, 0x747eab1a
cmp edx, eax
mov eax, dword [ebp - 0x4c]
setle cl
cmp ecx, 4
sbb ecx, ecx
xor ebx, ebx
neg ecx
cmp ecx, eax
mov eax, dword [ebp - 0xd8]
setl bl
xor edx, edx
mov dword [eax], ebx
mov eax, dword [ebp - 0x10]
cmp ebx, eax
mov eax, dword [ebp - 0x64]
setg dl
xor ecx, ecx
cmp edx, eax
setl cl
mov dword [ebp - 0x64], ecx
dec dword [ebp - 0x18]
jns 0x1001abfd
xor ebx, ebx
dec dword [ebp - 0x48]
inc dword [ebp - 0x28]
cmp dword [ebp - 0x28], ebx
jle 0x1001abcc
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], ebx
jle 0x1001abb6
lea ecx, [ebp - 0xd8]
call fcn.10018895
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xac]
call fcn.10018895
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], ebx
jle 0x1001aac9
jne 0x1001ad3f
mov eax, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x34]
mov eax, dword [ebp - 0x34]
mov eax, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x64]
mov eax, dword [ebp - 0x64]
mov eax, dword [ebp - 0x34]
mov eax, dword [ebp - 0x64]
xor ecx, ecx
cmp eax, 1
setl cl
cmp ecx, dword [ebp - 0x68]
jne 0x1001ad64
push 0x1fe8
push 0x4d01
push ebx
call fcn.1001b970
add esp, 0xc
jmp 0x1001add1
mov dword [ebp - 0x20], 0x8cb2cc2
xor edx, edx
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x34]
mov eax, dword [ebp - 0x14]
cmp ecx, eax
mov eax, dword [ebp - 0x20]
setle dl
xor ecx, ecx
cmp edx, eax
mov eax, dword [ebp - 0x20]
setl cl
xor edx, edx
cmp eax, ecx
setl dl
xor ecx, ecx
sub edx, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x20]
cmp edx, eax
setl cl
xor eax, eax
add ecx, dword [ebp - 0x20]
cmp eax, ecx
mov eax, dword [ebp - 0x24]
sbb edx, edx
xor ecx, ecx
neg edx
cmp edx, eax
setle cl
xor edx, edx
mov dword [ebp - 0x20], ecx
mov ecx, dword [ebp - 0x20]
mov eax, dword [ebp - 0x68]
cmp ecx, eax
mov eax, dword [ebp - 0x24]
setle dl
xor ecx, ecx
cmp edx, eax
setg cl
mov dword [ebp - 0x64], ecx
cmp dword [edi + 0x14], 0x10
jb 0x1001addb
mov esi, dword [edi]
jmp 0x1001addd
mov esi, edi
cmp dword [edi + 0x14], 0x10
jb 0x1001ade7
mov ecx, dword [edi]
jmp 0x1001ade9
mov ecx, edi
mov eax, dword [edi + 0x10]
add eax, ecx
cmp esi, eax
je 0x1001b0b1
mov dword [ebp - 0x30], ebx
lea ecx, [ebp - 0x8c]
mov dword [ebp - 0x2c], 0x2efe8e60
mov dword [ebp - 0x24], 3
mov dword [ebp - 0x38], 0xefecf47a
push 1
call fcn.10017f97
push ebx
lea eax, [ebp - 0x8c]
mov dword [ebp - 4], 4
push eax
lea eax, [ebp - 0x124]
mov dword [ebp - 0x48], 0x3f43c5ea
mov dword [ebp - 0x4c], 0x1b62c3dc
push eax
call fcn.1001d185
mov ecx, dword [ebp - 0x30]
xor edx, edx
mov eax, dword [ebp - 0x30]
add ecx, 0xa972ad93
add esp, 0xc
cmp ecx, eax
mov ecx, dword [ebp - 0x30]
mov eax, dword [ebp - 0x30]
setge dl
sub ecx, edx
neg ecx
sbb ecx, ecx
inc ecx
imul eax, ecx
cmp eax, dword [ebp - 0x30]
jl 0x1001af0e
push 4
lea ecx, [ebp - 0x108]
call fcn.10017f97
mov byte [ebp - 4], 5
mov dword [ebp - 0x24], 0xeca6d78
mov dword [ebp - 0x24], ebx
mov dword [ebp - 0x24], 0xcb407cb0
push 4
pop edx
mov dword [ebp - 0x24], edx
mov dword [ebp - 0x24], 3
mov dword [ebp - 0x24], 0xffffffff
mov dword [ebp - 0x10], ebx
jmp 0x1001aebd
mov ecx, dword [ebp - 0x10]
mov eax, dword [ebp - 0x108]
mov dword [eax + ecx*4], ebx
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], edx
jl 0x1001aeae
mov eax, dword [ebp - 0x38]
xor edx, edx
mov eax, dword [ebp - 0x30]
mov ecx, dword [ebp - 0x30]
mov eax, dword [ebp - 0x30]
add ecx, 0xffff4750
cmp eax, ecx
setl dl
mov dword [ebp - 0x24], edx
mov byte [ebp - 0x19], bl
cmp byte [ebp - 0x19], 0
je 0x1001aefa
push 0x37b5
push ebx
push 0x390e
call fcn.1001b3d7
add esp, 0xc
lea ecx, [ebp - 0x108]
mov byte [ebp - 4], 4
call fcn.10018895
jmp 0x1001af98
xor edx, edx
mov dword [ebp - 0x14], 6
mov dword [ebp - 0x10], ebx
inc edx
jmp 0x1001af2b
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0x70], 4
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], edx
jl 0x1001af1d
mov dword [ebp - 0x2c], 0x8dfe9016
mov ecx, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x8c]
mov dword [eax], ecx
test ecx, ecx
je 0x1001af8c
cmp dword [ebp - 0x14], ebx
jne 0x1001af7c
cmp dword [ebp - 0x2c], ebx
je 0x1001af53
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp - 0x38]
mov eax, dword [ebp - 0x30]
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp - 0x48]
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp - 0x14]
cmp eax, dword [ebp - 0x24]
jne 0x1001af7c
mov dword [ebp - 0x70], ebx
cmp dword [ebp - 0x24], ebx
jne 0x1001af7f
mov eax, ebx
jmp 0x1001af81
mov dword [ebp - 0x70], edx
mov eax, edx
cmp eax, dword [ebp - 0x14]
je 0x1001af89
mov eax, dword [ebp - 0x30]
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp - 0x14]
mov dword [ebp - 0x4c], edx
mov dword [ebp - 0x38], ebx
jmp 0x1001afdd
push ebx
lea eax, [ebp - 0x38]
push eax
push 0x6948
lea eax, [ebp - 0x8c]
push eax
push 0x5669
call fcn.1001caea
push 0x7b03
push ebx
push 0x6a10
lea eax, [ebp - 0x30]
push eax
lea eax, [ebp - 0x38]
push eax
lea eax, [ebp - 0x8c]
push eax
call fcn.1001d82c
add esp, 0x2c
inc dword [ebp - 0x38]
cmp dword [ebp - 0x38], ebx
jle 0x1001af9d
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x8c]
call fcn.10018895
mov al, byte [esi]
cmp al, 0x30
jl 0x1001b062
cmp al, 0x39
jg 0x1001b062
push ebx
push 0x12c6
push 0x6959
push 0x7b2f
push 0x3dd
push 0xa3d
push 0x9b
lea eax, [ebp - 0x39]
mov dword [ebp - 0x24], 9
push 0x5ba1
mov byte [ebp - 0x39], bl
push eax
call fcn.1001e005
push 0x42bd
push ebx
lea eax, [ebp - 0x3b]
mov byte [ebp - 0x3b], bl
push eax
push 0x3cc3
call fcn.1001b4ed
mov edx, dword [ebp - 0x6c]
add esp, 0x34
movsx eax, byte [esi]
imul ecx, dword [edx], 0xa
add ecx, 0xffffffd0
add eax, ecx
inc esi
mov dword [edx], eax
jmp 0x1001addd
mov dword [ebp - 0x10], 0x68206240
mov byte [ebp - 0x19], bl
cmp byte [ebp - 0x19], 0
je 0x1001b079
push ebx
call fcn.1001e0cf
pop ecx
mov dword [ebp - 0x10], 0x13
jmp 0x1001b09a
push 0x5f61
lea eax, [ebp - 0x3a]
mov byte [ebp - 0x3a], bl
push eax
push ebx
call fcn.1001b752
add esp, 0xc
dec dword [ebp - 0x10]
cmp dword [ebp - 0x10], 9
je 0x1001b082
lea eax, [ebp - 0x6c]
push ebx
push eax
call fcn.1001b9d9
pop ecx
pop ecx
jmp 0x1001a7ae
mov dword [ebp - 0x10], 0x6af1124f
xor ecx, ecx
mov dword [ebp - 0x28], ebx
inc ecx
mov dword [ebp - 0x24], 0xfb37b048
mov dword [ebp - 0x10], 0xcc58a012
mov dword [ebp - 0x10], 0x3d783989
mov dword [ebp - 0x2c], 0x2fbb6bc3
mov dword [ebp - 0x24], 0x8d383303
push 3
pop esi
mov dword [ebp - 0x24], esi
mov dword [ebp - 0x24], ecx
mov dword [ebp - 0x20], 0x4e665969
mov dword [ebp - 0x10], ebx
jmp 0x1001b103
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0x140], ecx
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], esi
jl 0x1001b0f6
mov dword [ebp - 0x10], 0xfffffff7
jmp 0x1001b19b
mov dword [ebp - 0x24], 0xffffffff
lea ecx, [ebp - 0x114]
call fcn.10017f97
lea eax, [ebp - 0x114]
mov dword [ebp - 4], 6
push eax
push 0xa92
lea eax, [ebp - 0x128]
mov dword [ebp - 0x80], 9
push eax
push 1
mov edx, 0x386d
mov ecx, 0xd10
call fcn.1001a011
mov byte [ebp - 0x19], bl
add esp, 0x10
cmp byte [ebp - 0x19], 0
je 0x1001b177
push 0x624f
push 0x273c
push ebx
call fcn.1001b36e
add esp, 0xc
lea eax, [ebp - 0x80]
push eax
push 0x5fa4
push ebx
call fcn.1001b7b3
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x114]
add esp, 0xc
call fcn.10018895
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], 0xa
push 2
jg 0x1001b114
mov dword [ebp - 0x28], ebx
pop ecx
jmp 0x1001b223
mov dword [ebp - 0x2c], ecx
cmp dword [ebp - 0x2c], ebx
jl 0x1001b1d9
mov byte [ebp - 0x19], bl
cmp byte [ebp - 0x19], 0
je 0x1001b1d1
push 0x4a87
push 0x2456
push ebx
call fcn.1001dd84
add esp, 0xc
dec dword [ebp - 0x2c]
jns 0x1001b1b5
push 2
pop ecx
mov dword [ebp - 0x20], ebx
jmp 0x1001b202
mov byte [ebp - 0x19], bl
cmp byte [ebp - 0x19], 0
je 0x1001b1f7
push ebx
push 0x6f5a
call fcn.1001d6b8
pop ecx
pop ecx
push 2
pop ecx
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], ecx
jle 0x1001b1de
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], ecx
mov dword [ebp - 0x10], ebx
jle 0x1001b1fa
jmp 0x1001b21b
mov eax, dword [ebp - 0x28]
cmp dword [ebp + eax*4 - 0x140], ebx
jne 0x1001b220
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], ecx
jle 0x1001b20c
inc dword [ebp - 0x28]
cmp dword [ebp - 0x28], ecx
jle 0x1001b1ad
push 0xfffffffffffffffc
pop eax
mov dword [ebp - 0x24], eax
mov dword [ebp - 0x10], 1
mov dword [ebp - 0x2c], ebx
mov dword [ebp - 0x24], 5
mov dword [ebp - 0x24], eax
mov dword [ebp - 0x24], 0xc5674fa7
mov dword [ebp - 0x10], ebx
jmp 0x1001b25c
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0x58], 0x97ee
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], esi
jl 0x1001b24e
mov eax, dword [ebp - 0x50]
xor edx, edx
mov ecx, dword [ebp - 0x50]
mov eax, dword [ebp - 0x50]
cmp ecx, eax
setle dl
mov dword [ebp - 0x24], edx
xor edx, edx
mov ecx, dword [ebp - 0x24]
mov eax, dword [ebp - 0x50]
cmp ecx, eax
mov eax, dword [ebp - 0x50]
setge dl
sub eax, edx
neg eax
sbb eax, eax
inc eax
cmp eax, 0xffffffff
sbb eax, eax
xor edx, edx
inc eax
mov dword [ebp - 0x10], eax
mov eax, dword [ebp - 0x10]
mov dword [ebp - 0x2c], eax
mov ecx, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x50]
cmp ecx, eax
mov eax, dword [ebp - 0x50]
setl dl
xor ecx, ecx
cmp edx, eax
mov eax, dword [ebp - 0x58]
setne cl
xor edx, edx
cmp ecx, eax
mov eax, dword [ebp - 0x50]
setg dl
xor ecx, ecx
cmp eax, edx
setl cl
xor eax, eax
cmp ecx, 9
setge al
xor edx, edx
mov dword [ebp - 0x24], eax
mov eax, dword [ebp - 0x50]
mov eax, dword [ebp - 0x24]
mov ecx, dword [ebp - 0x54]
sub ecx, eax
mov eax, dword [ebp - 0x10]
cmp ecx, 0xf3b0
setg dl
xor ecx, ecx
cmp edx, eax
mov eax, dword [ebp - 0x50]
setne cl
sub ecx, eax
cmp dword [ebp - 0x2c], ecx
jge 0x1001b302
cmp dword [ebp - 0x2c], ebx
je 0x1001b302
xor ebx, ebx
inc ebx
mov ecx, dword [ebp - 0x50]
push 0xfffffffffffffff9
pop eax
sub eax, ebx
sub ecx, eax
mov al, 1
neg ecx
sbb ecx, ecx
inc ecx
cmp ecx, 0xffff
sbb ecx, ecx
inc ecx
mov dword [ebp - 0x24], ecx
mov ecx, dword [ebp - 0xc]
pop edi
pop esi
pop ebx
mov dword fs:[0], ecx
mov esp, ebp
pop ebp
ret