Function at 0x10025413
Capabilities:
Parse pe header

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x1006959e
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x55c
push esi
and dword [ebp - 0x28], 0
mov dword [ebp - 0x3c], 0x76f5020f
mov dword [ebp - 0x78], 0x9a20b287
mov dword [ebp - 0x70], 0xfffffff6
mov dword [ebp - 0x12c], 3
mov dword [ebp - 0x33c], 0
mov dword [ebp - 0x3fc], 0x2e84
mov dword [ebp - 0x3f8], 0x2e84
mov dword [ebp - 0x3f4], 0x2e84
mov dword [ebp - 0x3f0], 0x2e84
lea ecx, [ebp - 0x121]
call fcn.1002a593
push eax
lea eax, [ebp - 0x3ec]
push eax
lea eax, [ebp - 0x3fc]
push eax
lea ecx, [ebp - 0x560]
call fcn.1002a596
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0x48c]
call fcn.1002a4b9
and dword [ebp - 4], 0
mov dword [ebp - 0xec], 0
jmp 0x100254d9
mov eax, dword [ebp - 0xec]
inc eax
mov dword [ebp - 0xec], eax
cmp dword [ebp - 0xec], 1
jge 0x100254f2
mov eax, dword [ebp - 0xec]
mov dword [ebp + eax*4 - 0x48], 9
jmp 0x100254cc
mov dword [ebp - 0x3c], 0
jmp 0x10025502
mov eax, dword [ebp - 0x3c]
dec eax
mov dword [ebp - 0x3c], eax
cmp dword [ebp - 0x3c], 0
jl 0x10025725
mov dword [ebp - 0xc4], 0xffffffff
mov dword [ebp - 0x334], 0xffffffff
mov dword [ebp - 0xc4], 0
jmp 0x10025539
mov eax, dword [ebp - 0xc4]
dec eax
mov dword [ebp - 0xc4], eax
cmp dword [ebp - 0xc4], 0
jl 0x100255da
mov dword [ebp - 0xe8], 0
jmp 0x1002555f
mov eax, dword [ebp - 0xe8]
inc eax
mov dword [ebp - 0xe8], eax
cmp dword [ebp - 0xe8], 3
jge 0x1002557b
mov eax, dword [ebp - 0xe8]
mov dword [ebp + eax*4 - 0x374], 4
jmp 0x10025552
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0x374], 0
jmp 0x100255a9
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x374]
inc eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x374], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x374], 1
jge 0x100255d0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x374]
mov dword [ebp + eax*4 - 0x48], 0xfffffff7
jmp 0x1002558e
call fcn.100240f6
jmp 0x1002552c
push 4
pop eax
imul eax, eax, 0
imul eax, dword [ebp + eax - 0x48], 0xc3d2
test eax, eax
jne 0x10025604
mov eax, 0xd03b15a8
test eax, eax
jne 0x10025604
cmp dword [ebp - 0x70], 0
jne 0x10025604
and dword [ebp - 0x1b0], 0
jmp 0x1002560e
mov dword [ebp - 0x1b0], 1
mov eax, dword [ebp - 0x1b0]
mov dword [ebp - 0x70], eax
cmp dword [ebp - 0x70], 0
jne 0x1002562d
push 0xfffffffffffffffc
pop eax
test eax, eax
jne 0x1002562d
and dword [ebp - 0x304], 0
jmp 0x10025637
mov dword [ebp - 0x304], 1
mov dword [ebp - 0x78], 0x9642e40
mov eax, dword [ebp - 0x78]
mov dword [ebp - 0x4dc], eax
mov eax, dword [ebp - 0x3c]
mov eax, dword [ebp + eax*4 - 0x48]
push 4
pop ecx
imul ecx, ecx, 0
imul eax, dword [ebp + ecx - 0x48]
test eax, eax
ja 0x10025669
mov dword [ebp - 0x290], 1
jmp 0x10025670
and dword [ebp - 0x290], 0
mov eax, dword [ebp - 0x3c]
mov eax, dword [ebp + eax*4 - 0x48]
cmp dword [ebp - 0x290], eax
jle 0x1002568b
mov dword [ebp - 0x324], 1
jmp 0x10025692
and dword [ebp - 0x324], 0
cmp dword [ebp - 0x12c], 0
jne 0x100256a7
mov dword [ebp - 0x298], 1
jmp 0x100256ae
and dword [ebp - 0x298], 0
cmp dword [ebp - 0x298], 0x321210cb
je 0x100256cf
cmp dword [ebp - 0x12c], 0
je 0x100256cf
mov dword [ebp - 0x2ac], 1
jmp 0x100256d6
and dword [ebp - 0x2ac], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x48]
imul eax, dword [ebp - 0x2ac]
test eax, eax
jbe 0x100256f7
mov dword [ebp - 0x32c], 1
jmp 0x100256fe
and dword [ebp - 0x32c], 0
mov eax, dword [ebp - 0x3c]
mov eax, dword [ebp + eax*4 - 0x48]
mov dword [ebp - 0x464], eax
mov eax, dword [ebp - 0x334]
mov dword [ebp - 0x4e8], eax
mov eax, dword [ebp - 0x78]
mov dword [ebp - 0x33c], eax
jmp 0x100254fb
mov eax, dword [ebp - 0x78]
mov dword [ebp - 0x4b4], eax
cmp dword [ebp - 0x3c], 0xf6d007dd
jl 0x10025743
mov dword [ebp - 0x344], 1
jmp 0x1002574a
and dword [ebp - 0x344], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x48]
mov dword [ebp - 0x70], eax
mov eax, dword [ebp - 0x70]
mov dword [ebp - 0x4a0], eax
cmp dword [ebp - 0x70], 0
je 0x1002577b
mov eax, 0x615
test eax, eax
je 0x1002577b
mov dword [ebp - 0x2b4], 1
jmp 0x10025782
and dword [ebp - 0x2b4], 0
cmp dword [ebp - 0x2b4], 0x349b8ae0
jl 0x1002579a
mov dword [ebp - 0x34c], 1
jmp 0x100257a1
and dword [ebp - 0x34c], 0
mov eax, dword [ebp - 0x3c]
mov dword [ebp - 0x4b8], eax
mov eax, dword [ebp - 0x78]
cmp dword [ebp - 0x12c], eax
jge 0x100257c1
mov dword [ebp - 0x2bc], 1
jmp 0x100257c8
and dword [ebp - 0x2bc], 0
push 0
lea ecx, [ebp - 0x48c]
call fcn.1002a44b
mov dword [ebp - 0x128], eax
mov eax, dword [ebp - 0x128]
mov eax, dword [eax]
sub eax, dword [ebp - 0x2bc]
sub eax, 8
mov dword [ebp - 0x78], eax
mov eax, dword [ebp - 0x128]
mov eax, dword [eax]
inc eax
mov ecx, dword [ebp - 0x128]
mov dword [ecx], eax
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x48c]
call fcn.1002a420
call fcn.1002414f
mov dword [ebp - 0x2b0], 0xddc85f70
push 3
lea ecx, [ebp - 0x420]
call fcn.1002a3c2
mov dword [ebp - 4], 1
push 2
lea ecx, [ebp - 0x42c]
call fcn.1002a3c2
mov byte [ebp - 4], 2
push 0x20f
push 0x6a02
lea eax, [ebp - 0x354]
push eax
push 1
push 1
push 0x2b95
push 0x2d7f
push 1
push 0x42d4
lea eax, [ebp - 0x420]
push eax
call fcn.10015d98
add esp, 0x28
push 1
push 1
lea eax, [ebp - 0x42c]
push eax
push 0xa7b
push 0x4c36
lea eax, [ebp - 0x354]
push eax
push 0x3652
call fcn.10015f1f
add esp, 0x1c
push 0x6763
push 0x5068
push 0x1fc3
push 0x4e5e
push 0x53e6
push 0x371b
push 0x2b1a
push 0x3787
lea eax, [ebp - 0x2b0]
push eax
push 1
push 0x3e49
push 1
call fcn.10016163
add esp, 0x30
lea eax, [ebp - 0x420]
push eax
lea eax, [ebp - 0x42c]
push eax
lea eax, [ebp - 0x2b0]
push eax
call fcn.1002433b
add esp, 0xc
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x42c]
call fcn.1002a420
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x420]
call fcn.1002a420
mov dword [ebp - 0x31c], 0x40d7f825
push 4
lea ecx, [ebp - 0x390]
call fcn.1002a3c2
mov dword [ebp - 4], 3
mov dword [ebp - 0x364], 0x58de384c
mov dword [ebp - 0x35c], 0xfffffffd
push 0x1b05
push 0x7402
push 0x49b5
lea eax, [ebp - 0x4b0]
push eax
push 0
lea eax, [ebp - 0x390]
push eax
push 1
push 1
call fcn.1001af6c
add esp, 0x20
lea eax, [ebp - 0x35c]
push eax
lea eax, [ebp - 0x364]
push eax
lea eax, [ebp - 0x390]
push eax
lea eax, [ebp - 0x31c]
push eax
call fcn.100243c6
add esp, 0x10
lea eax, [ebp - 0x390]
push eax
call fcn.10024948
pop ecx
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x390]
call fcn.1002a420
mov eax, dword [ebp + 8]
mov dword [ebp - 0x104], eax
mov dword [ebp - 0x50], 0
mov dword [ebp - 0x3d4], 3
mov dword [ebp - 0x3d0], 3
mov dword [ebp - 0x3cc], 3
mov dword [ebp - 0x3c8], 3
push 1
lea ecx, [ebp - 0x3b4]
call fcn.1002a3c2
mov dword [ebp - 4], 4
mov dword [ebp - 0x2f4], 0x78ee
mov dword [ebp - 0x2f8], 0xe401d933
push 1
lea ecx, [ebp - 0x49c]
call fcn.1002a3c2
mov byte [ebp - 4], 5
push 0x11e0
push 0x1a0d
push 0x1149
push 0x53e5
push 1
lea eax, [ebp - 0x3b4]
push eax
push 1
push 0x656a
lea eax, [ebp - 0x2e4]
push eax
call fcn.1001a7e2
add esp, 0x24
push 0x73d4
lea eax, [ebp - 0x49c]
push eax
push 0x7a0c
push 0xef6
push 0x6d3c
lea eax, [ebp - 0x2e4]
push eax
push 0
push 1
push 0x73e2
call fcn.10028ff4
add esp, 0x24
mov eax, 0x3f1a
test eax, eax
je 0x10025b66
mov eax, dword [ebp - 0x50]
cmp dword [ebp - 0x50], eax
jg 0x10025ab1
mov dword [ebp - 0x288], 1
jmp 0x10025ab8
and dword [ebp - 0x288], 0
cmp dword [ebp - 0x288], 0x4df6
jle 0x10025ad0
mov dword [ebp - 0x16c], 1
jmp 0x10025ad7
and dword [ebp - 0x16c], 0
mov eax, dword [ebp - 0x16c]
neg eax
sub eax, 0x92ea
je 0x10025af8
cmp dword [ebp - 0x50], 0
je 0x10025af8
mov dword [ebp - 0x21c], 1
jmp 0x10025aff
and dword [ebp - 0x21c], 0
mov eax, dword [ebp - 0x50]
cmp dword [ebp - 0x21c], eax
jge 0x10025b16
mov dword [ebp - 0xfc], 1
jmp 0x10025b1d
and dword [ebp - 0xfc], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0xfc]
mov dword [ebp + eax - 0x3d4], ecx
cmp dword [ebp - 0xfc], 0xc1dab973
jbe 0x10025b48
mov dword [ebp - 0x174], 1
jmp 0x10025b4f
and dword [ebp - 0x174], 0
mov eax, dword [ebp - 0x50]
cmp eax, dword [ebp - 0x174]
jg 0x10025b66
mov dword [ebp - 0x274], 1
jmp 0x10025b6d
and dword [ebp - 0x274], 0
mov eax, dword [ebp - 0x50]
cmp dword [ebp - 0x274], eax
jne 0x10025b90
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0x3d4], 0
jne 0x10025b90
and dword [ebp - 0x17c], 0
jmp 0x10025b9a
mov dword [ebp - 0x17c], 1
mov eax, dword [ebp - 0x17c]
sub eax, dword [ebp - 0x50]
jne 0x10025bc0
push 0
lea ecx, [ebp - 0x3b4]
call fcn.1002a44b
cmp dword [eax], 0
jne 0x10025bc0
and dword [ebp - 0x224], 0
jmp 0x10025bca
mov dword [ebp - 0x224], 1
mov esi, dword [ebp - 0x50]
sub esi, dword [ebp - 0x224]
push 0
lea ecx, [ebp - 0x3b4]
call fcn.1002a44b
cmp esi, dword [eax]
jle 0x10025bf9
cmp dword [ebp - 0x2f4], 0
je 0x10025bf9
mov dword [ebp - 0x184], 1
jmp 0x10025c00
and dword [ebp - 0x184], 0
mov eax, dword [ebp - 0x184]
mov dword [ebp - 0x2f8], eax
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x49c]
call fcn.1002a420
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x3b4]
call fcn.1002a420
mov eax, dword [ebp - 0x104]
movzx eax, word [eax]
cmp eax, 0x5a4d
je 0x100260c1
mov dword [ebp - 0x20], 0xa4c9
push 2
lea ecx, [ebp - 0x2d4]
call fcn.1002a3c2
mov dword [ebp - 4], 6
mov dword [ebp - 0x24], 0
mov dword [ebp - 0x4c0], 0xfffffff7
mov dword [ebp - 0x30], 0
jmp 0x10025c7a
mov eax, dword [ebp - 0x30]
inc eax
mov dword [ebp - 0x30], eax
cmp dword [ebp - 0x30], 2
jge 0x10025c90
mov eax, dword [ebp - 0x30]
mov dword [ebp + eax*4 - 0xd8], 0x8f8
jmp 0x10025c73
mov dword [ebp - 0x30], 0
jmp 0x10025ca0
mov eax, dword [ebp - 0x30]
inc eax
mov dword [ebp - 0x30], eax
cmp dword [ebp - 0x30], 2
jge 0x10025cbc
push dword [ebp - 0x30]
lea ecx, [ebp - 0x2d4]
call fcn.1002a44b
mov dword [eax], 7
jmp 0x10025c99
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0xd8], 0
je 0x10025d6a
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0xd8]
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 0x41145714
je 0x10025cf5
mov dword [ebp - 0x348], 1
jmp 0x10025cfc
and dword [ebp - 0x348], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0xd8]
mov dword [ebp - 0x4c8], eax
push 1
lea ecx, [ebp - 0x2d4]
call fcn.1002a44b
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0xd8]
mov dword [ebp - 0x4bc], eax
cmp dword [ebp - 0x24], 0xffff
jbe 0x10025d44
mov dword [ebp - 0x300], 1
jmp 0x10025d4b
and dword [ebp - 0x300], 0
push 0
lea ecx, [ebp - 0x2d4]
call fcn.1002a44b
xor ecx, ecx
sub ecx, dword [eax]
je 0x10025d6a
mov dword [ebp - 0x29c], 1
jmp 0x10025d71
and dword [ebp - 0x29c], 0
mov eax, dword [ebp - 0x24]
cmp dword [ebp - 0x29c], eax
jg 0x10025d88
mov dword [ebp - 0x18c], 1
jmp 0x10025d8f
and dword [ebp - 0x18c], 0
mov eax, dword [ebp - 0x24]
cmp dword [ebp - 0x18c], eax
je 0x10025da6
mov dword [ebp - 0x22c], 1
jmp 0x10025dad
and dword [ebp - 0x22c], 0
mov eax, dword [ebp - 0x24]
cmp dword [ebp - 0x22c], eax
jl 0x10025dc4
mov dword [ebp - 0x194], 1
jmp 0x10025dcb
and dword [ebp - 0x194], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xd8]
cmp dword [ebp - 0x194], eax
jle 0x10025dec
mov dword [ebp - 0x27c], 1
jmp 0x10025df3
and dword [ebp - 0x27c], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0xd8]
cmp dword [ebp - 0x27c], eax
jl 0x10025e14
mov dword [ebp - 0x19c], 1
jmp 0x10025e1b
and dword [ebp - 0x19c], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0xd8]
cmp eax, dword [ebp - 0x19c]
jne 0x10025e3c
mov dword [ebp - 0x234], 1
jmp 0x10025e43
and dword [ebp - 0x234], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0xd8]
add eax, dword [ebp - 0x234]
jne 0x10025e5e
cmp dword [ebp - 0x24], 0
je 0x10025edc
mov dword [ebp - 0x20], 0
jmp 0x10025e6e
mov eax, dword [ebp - 0x20]
dec eax
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 0xffffffff
jle 0x10025ed7
mov dword [ebp - 0x378], 1
cmp dword [ebp - 0x378], 0
je 0x10025e97
mov byte [ebp - 0x66], 0
lea eax, [ebp - 0x66]
push eax
call fcn.10024966
pop ecx
jmp 0x10025ed5
mov dword [ebp - 0x24], 0
jmp 0x10025ea7
mov eax, dword [ebp - 0x24]
inc eax
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 2
jge 0x10025ed5
push 0x37f8
lea eax, [ebp - 0x24]
push eax
lea eax, [ebp - 0x2d4]
push eax
push 1
push 0x7964
push 0x345
push 1
call fcn.1001aaa0
add esp, 0x1c
jmp 0x10025ea0
jmp 0x10025e67
jmp 0x10026084
mov dword [ebp - 0x308], 0x2a93f045
push 3
lea ecx, [ebp - 0x438]
call fcn.1002a3c2
mov byte [ebp - 4], 7
push 0
lea eax, [ebp - 0x438]
push eax
push 0x792
lea eax, [ebp - 0x4e0]
push eax
push 0x170f
call fcn.100279ef
add esp, 0x14
mov dword [ebp - 0x20], 0
jmp 0x10025f29
mov eax, dword [ebp - 0x20]
inc eax
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 1
jg 0x10026075
push 3
lea ecx, [ebp - 0x39c]
call fcn.1002a3c2
mov byte [ebp - 4], 8
mov dword [ebp - 0x1ac], 0xfffffff8
lea eax, [ebp - 0x39c]
push eax
lea eax, [ebp - 0x4c4]
push eax
call fcn.1002498f
pop ecx
pop ecx
push 0x59c3
push 0x28b7
push 0x26c1
push 1
lea eax, [ebp - 0x39c]
push eax
push 0x2a45
push 0x2386
push 0x32db
push 1
push 0x2270
push 1
push 0x2489
push 0x6fcb
push 0x318c
call fcn.1001abd5
add esp, 0x38
push dword [ebp - 0x20]
lea ecx, [ebp - 0x2d4]
call fcn.1002a44b
mov eax, dword [ebp - 0x20]
mov dword [ebp + eax*4 - 0xd8], 0x8140
cmp dword [ebp - 0x308], 0x8140
jge 0x10025fde
mov dword [ebp - 0x1a4], 1
jmp 0x10025fe5
and dword [ebp - 0x1a4], 0
push 2
lea ecx, [ebp - 0x39c]
call fcn.1002a44b
cmp dword [eax], 0
jne 0x10026003
mov dword [ebp - 0x2a4], 1
jmp 0x1002600a
and dword [ebp - 0x2a4], 0
mov esi, dword [ebp - 0x1a4]
imul esi, dword [ebp - 0x2a4]
push dword [ebp - 0x20]
lea ecx, [ebp - 0x2d4]
call fcn.1002a44b
imul esi, dword [eax]
mov dword [ebp - 0x1ac], esi
mov eax, dword [ebp - 0x20]
cmp dword [ebp - 0x1ac], eax
jne 0x10026045
mov dword [ebp - 0x23c], 1
jmp 0x1002604c
and dword [ebp - 0x23c], 0
push 2
lea ecx, [ebp - 0x438]
call fcn.1002a44b
mov ecx, dword [ebp - 0x23c]
mov dword [eax], ecx
mov byte [ebp - 4], 7
lea ecx, [ebp - 0x39c]
call fcn.1002a420
jmp 0x10025f22
mov byte [ebp - 4], 6
lea ecx, [ebp - 0x438]
call fcn.1002a420
mov byte [ebp - 0x67], 0
movzx eax, byte [ebp - 0x67]
test eax, eax
je 0x100260ab
push 1
push 0x1a26
push 1
push 0x1c90
push 0x21dd
call fcn.1001ae38
add esp, 0x14
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x2d4]
call fcn.1002a420
xor eax, eax
jmp 0x100279e0
mov dword [ebp - 0x350], 0xcb50bf34
mov dword [ebp - 0xcc], 0
jmp 0x100260e4
mov eax, dword [ebp - 0xcc]
inc eax
mov dword [ebp - 0xcc], eax
cmp dword [ebp - 0xcc], 3
jge 0x10026100
mov eax, dword [ebp - 0xcc]
mov dword [ebp + eax*4 - 0x520], 0
jmp 0x100260d7
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x520]
mov dword [ebp - 0x350], eax
call fcn.100249d7
mov eax, dword [ebp - 0x104]
mov ecx, dword [ebp + 8]
add ecx, dword [eax + 0x3c]
mov dword [ebp - 0xa8], ecx
call fcn.10024a09
mov eax, dword [ebp - 0xa8]
cmp dword [eax], 0x4550
je 0x10026143
xor eax, eax
jmp 0x100279e0
mov dword [ebp - 0xe0], 0xdd33a4a9
cmp dword [ebp - 0xe0], 0
je 0x10026172
mov eax, dword [ebp - 0xe0]
mov dword [ebp - 0xe0], eax
mov byte [ebp - 0x65], 0
lea eax, [ebp - 0x65]
push eax
call fcn.10024e06
pop ecx
jmp 0x1002617f
lea eax, [ebp - 0xe0]
push eax
call fcn.10024e2f
pop ecx
push 0x31e
lea eax, [ebp - 0xd0]
push eax
push 1
push 0x5a2b
push dword [ebp - 0xa8]
push 0x52ec
push 1
push 0x442a
call fcn.100156b7
add esp, 0x20
mov dword [ebp - 0x4f8], 0x9ff60657
mov dword [ebp - 0x4f4], 0x9ff60657
mov dword [ebp - 0x4f0], 0x9ff60657
mov dword [ebp - 0x4ec], 0x9ff60657
mov dword [ebp - 0x310], 0xe6bacd79
mov dword [ebp - 0x450], 0xd94543be
lea eax, [ebp - 0x310]
push eax
call fcn.10024e72
pop ecx
cmp dword [ebp - 0xd0], 0
jne 0x10026653
push 3
lea ecx, [ebp - 0x8c]
call fcn.1002a3c2
mov dword [ebp - 4], 9
mov dword [ebp - 0xbc], 6
mov dword [ebp - 0xc0], 0x7d77fc7d
mov dword [ebp - 0x18], 0
jmp 0x1002623a
mov eax, dword [ebp - 0x18]
inc eax
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 3
jge 0x10026250
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x150], 9
jmp 0x10026233
mov dword [ebp - 0x18], 0
jmp 0x10026260
mov eax, dword [ebp - 0x18]
inc eax
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 3
jge 0x1002627c
push dword [ebp - 0x18]
lea ecx, [ebp - 0x8c]
call fcn.1002a44b
mov dword [eax], 0xd1e1e87d
jmp 0x10026259
mov dword [ebp - 0x18], 0
jmp 0x1002628c
mov eax, dword [ebp - 0x18]
inc eax
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 2
jge 0x100262a2
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x470], 9
jmp 0x10026285
push 2
lea ecx, [ebp - 0x8c]
call fcn.1002a44b
and dword [eax], 0
jmp 0x100262d8
push 2
lea ecx, [ebp - 0x8c]
call fcn.1002a44b
mov dword [ebp - 0x1b4], eax
mov eax, dword [ebp - 0x1b4]
mov eax, dword [eax]
inc eax
mov ecx, dword [ebp - 0x1b4]
mov dword [ecx], eax
push 2
lea ecx, [ebp - 0x8c]
call fcn.1002a44b
cmp dword [eax], 2
jg 0x1002663d
mov dword [ebp - 0x1ec], 0
mov dword [ebp - 0xc8], 0xdc0f1fa6
push 2
lea ecx, [ebp - 0x8c]
call fcn.1002a44b
mov eax, dword [eax]
mov eax, dword [ebp + eax*4 - 0x150]
mov dword [ebp - 0x284], eax
push 2
lea ecx, [ebp - 0x8c]
call fcn.1002a44b
mov eax, dword [eax]
mov ecx, dword [ebp - 0x284]
mov dword [ebp + eax*4 - 0x150], ecx
cmp dword [ebp - 0x284], 0
jne 0x10026451
push 2
lea ecx, [ebp - 0x8c]
call fcn.1002a44b
mov eax, dword [eax]
mov eax, dword [ebp + eax*4 - 0x150]
mov dword [ebp - 0x458], eax
push 2
lea ecx, [ebp - 0x8c]
call fcn.1002a44b
mov eax, dword [eax]
mov ecx, dword [ebp - 0xbc]
cmp dword [ebp + eax*4 - 0x150], ecx
jge 0x1002638d
mov dword [ebp - 0x1bc], 1
jmp 0x10026394
and dword [ebp - 0x1bc], 0
cmp dword [ebp - 0x1bc], 0x537c
jne 0x100263ac
mov dword [ebp - 0x244], 1
jmp 0x100263b3
and dword [ebp - 0x244], 0
push 2
lea ecx, [ebp - 0x8c]
call fcn.1002a44b
mov ecx, dword [ebp - 0x244]
cmp ecx, dword [eax]
jne 0x100263d6
mov dword [ebp - 0x1c4], 1
jmp 0x100263dd
and dword [ebp - 0x1c4], 0
push 2
lea ecx, [ebp - 0x8c]
call fcn.1002a44b
mov eax, dword [eax]
mov eax, dword [ebp + eax*4 - 0x150]
add eax, dword [ebp - 0x1c4]
mov dword [ebp - 0x2a8], eax
push 2
lea ecx, [ebp - 0x8c]
call fcn.1002a44b
mov eax, dword [eax]
mov ecx, dword [ebp - 0x2a8]
mov dword [ebp + eax*4 - 0x150], ecx
cmp dword [ebp - 0x2a8], 0x1457
jl 0x10026433
mov dword [ebp - 0x1cc], 1
jmp 0x1002643a
and dword [ebp - 0x1cc], 0
mov eax, dword [ebp - 0xbc]
cmp dword [ebp - 0x1cc], eax
jge 0x10026451
and dword [ebp - 0x24c], 0
jmp 0x1002645b
mov dword [ebp - 0x24c], 1
mov eax, dword [ebp - 0x24c]
add eax, 0xf7bd
cmp eax, 6
jne 0x10026480
cmp dword [ebp - 0xbc], 0
je 0x10026480
mov dword [ebp - 0x1d4], 1
jmp 0x10026487
and dword [ebp - 0x1d4], 0
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x1d4]
mov dword [ebp + eax - 0x470], ecx
push 0
lea ecx, [ebp - 0x8c]
call fcn.1002a44b
push 2
lea ecx, [ebp - 0x8c]
call fcn.1002a44b
mov eax, dword [eax]
mov ecx, dword [ebp - 0x1ec]
cmp dword [ebp + eax*4 - 0x150], ecx
jle 0x100264d1
mov dword [ebp - 0x28c], 1
jmp 0x100264d8
and dword [ebp - 0x28c], 0
imul eax, dword [ebp - 0x28c], 0x752e
cmp eax, 0xffffffff
jg 0x100264f3
mov dword [ebp - 0x1dc], 1
jmp 0x100264fa
and dword [ebp - 0x1dc], 0
cmp dword [ebp - 0x1dc], 0xa1172167
jne 0x10026512
mov dword [ebp - 0x254], 1
jmp 0x10026519
and dword [ebp - 0x254], 0
push 2
lea ecx, [ebp - 0x8c]
call fcn.1002a44b
mov ecx, dword [ebp - 0x254]
cmp ecx, dword [eax]
jge 0x10026552
push 2
lea ecx, [ebp - 0x8c]
call fcn.1002a44b
mov eax, dword [eax]
cmp dword [ebp + eax*4 - 0x150], 0
jne 0x10026552
and dword [ebp - 0x1e4], 0
jmp 0x1002655c
mov dword [ebp - 0x1e4], 1
mov eax, dword [ebp - 0xc8]
cmp dword [ebp - 0x1e4], eax
je 0x1002658c
push 2
lea ecx, [ebp - 0x8c]
call fcn.1002a44b
mov eax, dword [eax]
cmp dword [ebp + eax*4 - 0x150], 0
jne 0x1002658c
and dword [ebp - 0x2b8], 0
jmp 0x10026596
mov dword [ebp - 0x2b8], 1
mov eax, dword [ebp - 0x2b8]
mov dword [ebp - 0xc8], eax
mov eax, dword [ebp - 0x1ec]
cmp dword [ebp - 0xc8], eax
je 0x100265bc
mov dword [ebp - 0x25c], 1
jmp 0x100265c3
and dword [ebp - 0x25c], 0
mov eax, dword [ebp - 0x25c]
mov dword [ebp - 0xc0], eax
cmp dword [ebp - 0xc0], 0
je 0x100265fe
mov byte [ebp - 0x5d], 0
movzx eax, byte [ebp - 0x5d]
test eax, eax
je 0x100265ef
push 0x396
call dword [sym.imp.USER32.dll_SetFocus]
lea eax, [ebp - 0xc0]
push eax
call fcn.10024ecd
pop ecx
jmp 0x10026633
mov dword [ebp - 0x384], 2
lea eax, [ebp - 0xbc]
push eax
lea eax, [ebp - 0x8c]
push eax
lea eax, [ebp - 0xc0]
push eax
lea eax, [ebp - 0x384]
push eax
lea eax, [ebp - 0xc8]
push eax
call fcn.10024f1e
add esp, 0x14
call fcn.10024f99
jmp 0x100262b4
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x8c]
call fcn.1002a420
xor eax, eax
jmp 0x100279e0
push 0x5058
lea eax, [ebp - 0x460]
push eax
push 0x3ab5
push 1
push 0x3218
lea eax, [ebp - 0xd0]
push eax
lea eax, [ebp - 0x104]
push eax
lea eax, [ebp - 0x28]
push eax
lea eax, [ebp - 0xa8]
push eax
push 1
push 1
push 0x59f7
call fcn.1001b567
add esp, 0x30
lea eax, [ebp + 8]
push eax
push 1
push 0xb50
push 1
lea eax, [ebp - 0xa8]
push eax
lea eax, [ebp - 0x28]
push eax
push 0x668e
push 0x54fa
call fcn.1001b77f
add esp, 0x20
mov dword [ebp - 0x98], 0x2c70bb74
mov dword [ebp - 0x468], 0
mov dword [ebp - 0x474], 0xf8067e30
mov dword [ebp - 0x480], 0xffffffff
mov dword [ebp - 0x4d0], 0xf186
mov dword [ebp - 0x3e8], 0xfffffff8
mov dword [ebp - 0x3e4], 0xfffffff8
mov dword [ebp - 0x3e0], 0xfffffff8
mov dword [ebp - 0x3dc], 0xfffffff8
lea ecx, [ebp - 0x105]
call fcn.1002a593
push eax
lea eax, [ebp - 0x3d8]
push eax
lea eax, [ebp - 0x3e8]
push eax
lea ecx, [ebp - 0x558]
call fcn.1002a596
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0x538]
call fcn.1002a4b9
mov dword [ebp - 4], 0xa
mov dword [ebp - 0x44c], 0
mov dword [ebp - 0x318], 2
mov dword [ebp - 0x38], 0
jmp 0x10026779
mov eax, dword [ebp - 0x38]
inc eax
mov dword [ebp - 0x38], eax
cmp dword [ebp - 0x38], 3
jge 0x1002678f
mov eax, dword [ebp - 0x38]
mov dword [ebp + eax*4 - 0x52c], 0xfffffff6
jmp 0x10026772
mov dword [ebp - 0x38], 0
jmp 0x1002679f
mov eax, dword [ebp - 0x38]
inc eax
mov dword [ebp - 0x38], eax
cmp dword [ebp - 0x38], 2
jge 0x100267b5
mov eax, dword [ebp - 0x38]
mov dword [ebp + eax*4 - 0x568], 0x9ec4279c
jmp 0x10026798
mov dword [ebp - 0x98], 2
jmp 0x100267ce
mov eax, dword [ebp - 0x98]
dec eax
mov dword [ebp - 0x98], eax
cmp dword [ebp - 0x98], 0
jl 0x100267eb
mov eax, dword [ebp - 0x98]
cmp dword [ebp + eax*4 - 0x52c], 0
je 0x100267e9
jmp 0x100267eb
jmp 0x100267c1
push 1
lea eax, [ebp - 0x318]
push eax
push 0x5507
push 0x141
push 0x50b3
push 0x5b47
push 1
call fcn.1001b8a7
add esp, 0x1c
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x538]
call fcn.1002a420
mov eax, dword [ebp - 0xa8]
mov ecx, dword [ebp - 0xd0]
sub ecx, dword [eax + 0x34]
mov dword [ebp - 0x1f4], ecx
je 0x1002686a
push 0x2d1
push 1
push 0x7986
push 0x4b63
lea eax, [ebp - 0x28]
push eax
push 0x392d
push 0x28e6
push 1
lea eax, [ebp - 0x1f4]
push eax
push 1
call fcn.1001b995
add esp, 0x28
push dword [ebp - 0x28]
call fcn.10013ce2
pop ecx
test eax, eax
jne 0x1002687e
xor eax, eax
jmp 0x100279e0
push dword [ebp - 0x28]
push 0x4c3e
push 0x206e
push 0x45f3
push 1
push 0x1489
push 0x7d96
push 0x1e19
push 0x5f8a
push 0xe3c
push 1
push 0x5050
push 0x4508
push 0x134f
push 0x4f4c
push 0x51a7
call fcn.1000c9aa
add esp, 0x40
mov eax, dword [ebp - 0x28]
mov eax, dword [eax]
cmp dword [eax + 0x28], 0
je 0x100279bf
mov eax, dword [ebp - 0x28]
mov eax, dword [eax]
mov ecx, dword [ebp - 0xd0]
add ecx, dword [eax + 0x28]
mov dword [ebp - 0x1b8], ecx
jne 0x10026e88
mov dword [ebp - 0x44], 0x6432a276
mov dword [ebp - 0x4c], 0xfffffff8
mov dword [ebp - 0x4c], 0
cmp dword [ebp - 0x4c], 0
je 0x10026d54
mov dword [ebp - 0x448], 0xfffffff7
mov dword [ebp - 0x444], 0xfffffff7
mov dword [ebp - 0x440], 0xfffffff7
mov dword [ebp - 0x43c], 0xfffffff7
mov dword [ebp - 0x358], 0x1ef4
cmp dword [ebp - 0x358], 0xc96
jge 0x10026ce0
lea ecx, [ebp - 0x414]
call fcn.10029dda
mov dword [ebp - 4], 0xb
lea edx, [ebp - 0x414]
mov ecx, 0x1065a5f0
call fcn.1002e925
lea ecx, [ebp - 0x414]
call fcn.10029e68
mov dword [ebp - 0x54], eax
xorpd xmm0, xmm0
movlpd qword [ebp - 0x4d8], xmm0
lea eax, [ebp - 0x4d8]
push eax
push dword [ebp - 0x54]
lea ecx, [ebp - 0x2e0]
call fcn.1002a656
mov byte [ebp - 4], 0xc
xorpd xmm0, xmm0
movlpd qword [ebp - 0x47c], xmm0
lea eax, [ebp - 0x47c]
push eax
push dword [ebp - 0x54]
lea ecx, [ebp - 0x3a8]
call fcn.1002a656
mov byte [ebp - 4], 0xd
and dword [ebp - 0x6c], 0
jmp 0x100269df
mov eax, dword [ebp - 0x6c]
inc eax
mov dword [ebp - 0x6c], eax
mov eax, dword [ebp - 0x6c]
cmp eax, dword [ebp - 0x54]
jge 0x10026bb3
mov eax, dword [ebp - 0x6c]
mov dword [ebp - 0xa0], eax
mov eax, dword [ebp - 0x6c]
mov dword [ebp - 0xb0], eax
jmp 0x10026a19
mov eax, dword [ebp - 0xa0]
dec eax
mov dword [ebp - 0xa0], eax
mov eax, dword [ebp - 0xb0]
inc eax
mov dword [ebp - 0xb0], eax
cmp dword [ebp - 0xa0], 0
jl 0x10026acc
mov eax, dword [ebp - 0xb0]
cmp eax, dword [ebp - 0x54]
jge 0x10026acc
push dword [ebp - 0xa0]
lea ecx, [ebp - 0x414]
call fcn.10029e54
movsx esi, byte [eax]
push dword [ebp - 0xb0]
lea ecx, [ebp - 0x414]
call fcn.10029e54
movsx eax, byte [eax]
cmp esi, eax
jne 0x10026acc
push dword [ebp - 0xa0]
lea ecx, [ebp - 0x2e0]
call fcn.1002a6f7
mov dword [ebp - 0x294], eax
mov eax, dword [ebp - 0x294]
mov ecx, dword [eax]
add ecx, 1
mov eax, dword [eax + 4]
adc eax, 0
mov edx, dword [ebp - 0x294]
mov dword [edx], ecx
mov dword [edx + 4], eax
push dword [ebp - 0xb0]
lea ecx, [ebp - 0x3a8]
call fcn.1002a6f7
mov dword [ebp - 0x1fc], eax
mov eax, dword [ebp - 0x1fc]
mov ecx, dword [eax]
add ecx, 1
mov eax, dword [eax + 4]
adc eax, 0
mov edx, dword [ebp - 0x1fc]
mov dword [edx], ecx
mov dword [edx + 4], eax
jmp 0x100269ff
mov eax, dword [ebp - 0x6c]
mov dword [ebp - 0x90], eax
mov eax, dword [ebp - 0x6c]
inc eax
mov dword [ebp - 0x94], eax
jmp 0x10026afb
mov eax, dword [ebp - 0x90]
dec eax
mov dword [ebp - 0x90], eax
mov eax, dword [ebp - 0x94]
inc eax
mov dword [ebp - 0x94], eax
cmp dword [ebp - 0x90], 0
jl 0x10026bae
mov eax, dword [ebp - 0x94]
cmp eax, dword [ebp - 0x54]
jge 0x10026bae
push dword [ebp - 0x90]
lea ecx, [ebp - 0x414]
call fcn.10029e54
movsx esi, byte [eax]
push dword [ebp - 0x94]
lea ecx, [ebp - 0x414]
call fcn.10029e54
movsx eax, byte [eax]
cmp esi, eax
jne 0x10026bae
push dword [ebp - 0x90]
lea ecx, [ebp - 0x2e0]
call fcn.1002a6f7
mov dword [ebp - 0x264], eax
mov eax, dword [ebp - 0x264]
mov ecx, dword [eax]
add ecx, 1
mov eax, dword [eax + 4]
adc eax, 0
mov edx, dword [ebp - 0x264]
mov dword [edx], ecx
mov dword [edx + 4], eax
push dword [ebp - 0x94]
lea ecx, [ebp - 0x3a8]
call fcn.1002a6f7
mov dword [ebp - 0x204], eax
mov eax, dword [ebp - 0x204]
mov ecx, dword [eax]
add ecx, 1
mov eax, dword [eax + 4]
adc eax, 0
mov edx, dword [ebp - 0x204]
mov dword [edx], ecx
mov dword [edx + 4], eax
jmp 0x10026ae1
jmp 0x100269d8
xorpd xmm0, xmm0
movlpd qword [ebp - 0x138], xmm0
mov eax, dword [ebp - 0x54]
dec eax
dec eax
mov dword [ebp - 0x9c], eax
jmp 0x10026bd9
mov eax, dword [ebp - 0x9c]
dec eax
mov dword [ebp - 0x9c], eax
cmp dword [ebp - 0x9c], 0
jl 0x10026c29
push dword [ebp - 0x9c]
lea ecx, [ebp - 0x2e0]
call fcn.1002a6f7
mov dword [ebp - 0x2a0], eax
mov eax, dword [ebp - 0x9c]
inc eax
push eax
lea ecx, [ebp - 0x2e0]
call fcn.1002a6f7
mov ecx, dword [ebp - 0x2a0]
mov edx, dword [ecx]
add edx, dword [eax]
mov ecx, dword [ecx + 4]
adc ecx, dword [eax + 4]
mov eax, dword [ebp - 0x2a0]
mov dword [eax], edx
mov dword [eax + 4], ecx
jmp 0x10026bcc
and dword [ebp - 0xa4], 0
jmp 0x10026c3f
mov eax, dword [ebp - 0xa4]
inc eax
mov dword [ebp - 0xa4], eax
mov eax, dword [ebp - 0x54]
dec eax
cmp dword [ebp - 0xa4], eax
jge 0x10026c9a
push dword [ebp - 0xa4]
lea ecx, [ebp - 0x3a8]
call fcn.1002a6f7
mov esi, eax
mov eax, dword [ebp - 0xa4]
inc eax
push eax
lea ecx, [ebp - 0x2e0]
call fcn.1002a6f7
push dword [eax + 4]
push dword [eax]
push dword [esi + 4]
push dword [esi]
call fcn.100546c0
add eax, dword [ebp - 0x138]
adc edx, dword [ebp - 0x134]
mov dword [ebp - 0x138], eax
mov dword [ebp - 0x134], edx
jmp 0x10026c32
push dword [ebp - 0x134]
push dword [ebp - 0x138]
push 0x1000776c
call fcn.10050853
add esp, 0xc
mov byte [ebp - 4], 0xc
lea ecx, [ebp - 0x3a8]
call fcn.1002a420
mov byte [ebp - 4], 0xb
lea ecx, [ebp - 0x2e0]
call fcn.1002a420
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x414]
call fcn.10029e1a
mov dword [ebp - 0x4c], 3
jmp 0x10026cf0
mov eax, dword [ebp - 0x4c]
dec eax
mov dword [ebp - 0x4c], eax
cmp dword [ebp - 0x4c], 0
jl 0x10026d4f
mov dword [ebp - 0x44], 0
jmp 0x10026d06
mov eax, dword [ebp - 0x44]
inc eax
mov dword [ebp - 0x44], eax
cmp dword [ebp - 0x44], 3
jg 0x10026d4d
mov dword [ebp - 0xac], 0xc5021c3a
mov dword [ebp - 0xac], 0
jmp 0x10026d2f
mov eax, dword [ebp - 0xac]
inc eax
mov dword [ebp - 0xac], eax
cmp dword [ebp - 0xac], 4
jge 0x10026d4b
mov eax, dword [ebp - 0xac]
mov dword [ebp + eax*4 - 0x448], 0xfe5e81a7
jmp 0x10026d22
jmp 0x10026cff
jmp 0x10026ce9
jmp 0x10026e81
mov dword [ebp - 0x80], 4
mov dword [ebp - 0x44], 0x16
jmp 0x10026d6b
mov eax, dword [ebp - 0x44]
dec eax
mov dword [ebp - 0x44], eax
cmp dword [ebp - 0x44], 0x14
jne 0x10026e81
mov dword [ebp - 0xf0], 0xfffffffb
mov dword [ebp - 0x320], 1
mov dword [ebp - 0x380], 0xfffffffd
mov eax, dword [ebp - 0x80]
imul eax, dword [ebp - 0xf0]
mov ecx, dword [ebp - 0x80]
imul ecx, dword [ebp - 0x4c]
sub eax, ecx
je 0x10026dbd
cmp dword [ebp - 0xf0], 0
je 0x10026dbd
mov dword [ebp - 0x20c], 1
jmp 0x10026dc4
and dword [ebp - 0x20c], 0
mov eax, dword [ebp - 0x80]
cmp dword [ebp - 0x20c], eax
jne 0x10026ddb
mov dword [ebp - 0x26c], 1
jmp 0x10026de2
and dword [ebp - 0x26c], 0
mov eax, dword [ebp - 0x4c]
cmp dword [ebp - 0x26c], eax
jne 0x10026df9
mov dword [ebp - 0x214], 1
jmp 0x10026e00
and dword [ebp - 0x214], 0
mov eax, dword [ebp - 0x80]
mov ecx, dword [ebp - 0x80]
add ecx, dword [ebp - 0x214]
imul eax, ecx
cmp eax, 1
je 0x10026e20
mov dword [ebp - 0x164], 1
jmp 0x10026e27
and dword [ebp - 0x164], 0
imul eax, dword [ebp - 0x164], 0xb94b
cmp eax, dword [ebp - 0xf0]
jg 0x10026e45
mov dword [ebp - 0x168], 1
jmp 0x10026e4c
and dword [ebp - 0x168], 0
mov eax, dword [ebp - 0x320]
cmp dword [ebp - 0x168], eax
jge 0x10026e66
mov dword [ebp - 0x170], 1
jmp 0x10026e6d
and dword [ebp - 0x170], 0
mov eax, dword [ebp - 0x170]
sub eax, dword [ebp - 0x80]
mov dword [ebp - 0x380], eax
jmp 0x10026d64
xor eax, eax
jmp 0x100279e0
mov dword [ebp - 0x328], 0x142a
cmp dword [ebp - 0x328], 0x4c2
jge 0x10027044
lea eax, [ebp - 0x10c]
push eax
push 0x1000774c
call fcn.1005056b
pop ecx
pop ecx
mov eax, dword [ebp - 0x10c]
mov dword [ebp - 0x360], eax
mov eax, dword [ebp - 0x10c]
dec eax
mov dword [ebp - 0x10c], eax
cmp dword [ebp - 0x360], 0
je 0x10027044
lea eax, [ebp - 0x40]
push eax
lea eax, [ebp - 0x58]
push eax
lea eax, [ebp - 0x64]
push eax
push 0x10007890
call fcn.1005056b
add esp, 0x10
lea eax, [ebp - 0x7c]
push eax
lea eax, [ebp - 0x74]
push eax
lea eax, [ebp - 0x188]
push eax
lea eax, [ebp - 0x180]
push eax
lea eax, [ebp - 0x178]
push eax
push 0x100078ec
call fcn.1005056b
add esp, 0x18
mov byte [ebp - 0xd], 1
mov eax, dword [ebp - 0x178]
cmp eax, dword [ebp - 0x64]
jg 0x10026f43
mov eax, dword [ebp - 0x180]
cmp eax, dword [ebp - 0x58]
jg 0x10026f43
mov eax, dword [ebp - 0x188]
cmp eax, dword [ebp - 0x40]
jle 0x10026f47
mov byte [ebp - 0xd], 0
mov eax, dword [ebp - 0x64]
sub eax, dword [ebp - 0x178]
mov dword [ebp - 0x64], eax
mov eax, dword [ebp - 0x58]
sub eax, dword [ebp - 0x180]
mov dword [ebp - 0x58], eax
mov eax, dword [ebp - 0x40]
sub eax, dword [ebp - 0x188]
mov dword [ebp - 0x40], eax
mov eax, dword [ebp - 0x64]
cmp eax, dword [ebp - 0x74]
jge 0x10026f7e
mov eax, dword [ebp - 0x64]
mov dword [ebp - 0x190], eax
jmp 0x10026f87
mov eax, dword [ebp - 0x74]
mov dword [ebp - 0x190], eax
mov eax, dword [ebp - 0x190]
mov dword [ebp - 0x198], eax
mov eax, dword [ebp - 0x64]
sub eax, dword [ebp - 0x198]
mov dword [ebp - 0x64], eax
mov eax, dword [ebp - 0x74]
sub eax, dword [ebp - 0x198]
mov dword [ebp - 0x74], eax
mov eax, dword [ebp - 0x40]
cmp eax, dword [ebp - 0x74]
jge 0x10026fb7
mov byte [ebp - 0xd], 0
mov eax, dword [ebp - 0x40]
sub eax, dword [ebp - 0x74]
mov dword [ebp - 0x40], eax
mov eax, dword [ebp - 0x58]
cmp eax, dword [ebp - 0x7c]
jge 0x10026fd3
mov eax, dword [ebp - 0x58]
mov dword [ebp - 0x1a0], eax
jmp 0x10026fdc
mov eax, dword [ebp - 0x7c]
mov dword [ebp - 0x1a0], eax
mov eax, dword [ebp - 0x1a0]
mov dword [ebp - 0x1a8], eax
mov eax, dword [ebp - 0x58]
sub eax, dword [ebp - 0x1a8]
mov dword [ebp - 0x58], eax
mov eax, dword [ebp - 0x7c]
sub eax, dword [ebp - 0x1a8]
mov dword [ebp - 0x7c], eax
mov eax, dword [ebp - 0x40]
cmp eax, dword [ebp - 0x7c]
jge 0x1002700c
mov byte [ebp - 0xd], 0
mov eax, dword [ebp - 0x40]
sub eax, dword [ebp - 0x7c]
mov dword [ebp - 0x40], eax
movzx eax, byte [ebp - 0xd]
test eax, eax
je 0x10027029
mov dword [ebp - 0x160], 0x10007760
jmp 0x10027033
mov dword [ebp - 0x160], 0x10007764
push dword [ebp - 0x160]
call fcn.10050b42
pop ecx
jmp 0x10026eb5
push 0
push 1
push 0xdeadbeef
call dword [ebp - 0x1b8]
mov dword [ebp - 0x330], eax
cmp dword [ebp - 0x330], 0
jne 0x10027266
call fcn.10024fc8
mov dword [ebp - 0x14], 1
mov dword [ebp - 0x120], 0xfce6bb2f
mov dword [ebp - 0x1e0], 0xfaab39e2
mov dword [ebp - 0x340], 0x3abefa02
mov dword [ebp - 0xdc], 0
jmp 0x100270a9
mov eax, dword [ebp - 0xdc]
inc eax
mov dword [ebp - 0xdc], eax
cmp dword [ebp - 0xdc], 3
jge 0x100270c5
mov eax, dword [ebp - 0xdc]
mov dword [ebp + eax*4 - 0x2c8], 1
jmp 0x1002709c
mov dword [ebp - 0x14], 0
jmp 0x100270d5
mov eax, dword [ebp - 0x14]
inc eax
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 2
jg 0x10027243
mov dword [ebp - 0x338], 0
mov eax, dword [ebp - 0x14]
cmp dword [ebp - 0x14], eax
jg 0x100270fd
mov dword [ebp - 0x1c0], 1
jmp 0x10027104
and dword [ebp - 0x1c0], 0
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp + eax*4 - 0x2c8]
cmp eax, dword [ebp - 0x1c0]
jle 0x10027122
mov dword [ebp - 0x1c8], 1
jmp 0x10027129
and dword [ebp - 0x1c8], 0
mov eax, dword [ebp - 0x1c8]
sub eax, 0x2884b727
mov dword [ebp - 0x120], eax
cmp dword [ebp - 0x120], 0xfffffffb
je 0x1002714f
mov dword [ebp - 0x1d0], 1
jmp 0x10027156
and dword [ebp - 0x1d0], 0
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp + eax*4 - 0x2c8]
cmp eax, dword [ebp - 0x1d0]
jl 0x10027174
mov dword [ebp - 0x1d8], 1
jmp 0x1002717b
and dword [ebp - 0x1d8], 0
mov eax, dword [ebp - 0x14]
cmp dword [ebp - 0x1d8], eax
jl 0x1002719f
mov eax, dword [ebp - 0x14]
cmp dword [ebp + eax*4 - 0x2c8], 0
je 0x1002719f
mov dword [ebp - 0x37c], 1
jmp 0x100271a6
and dword [ebp - 0x37c], 0
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp + eax*4 - 0x2c8]
mov dword [ebp - 0x4e4], eax
mov eax, dword [ebp - 0x14]
mov dword [ebp - 0x1e0], eax
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp + eax*4 - 0x2c8]
cmp dword [ebp - 0x1e0], eax
jne 0x100271dd
mov dword [ebp - 0x1e8], 1
jmp 0x100271e4
and dword [ebp - 0x1e8], 0
cmp dword [ebp - 0x1e8], 0x80f885bd
ja 0x100271fc
mov dword [ebp - 0x1f0], 1
jmp 0x10027203
and dword [ebp - 0x1f0], 0
mov eax, dword [ebp - 0x338]
cmp dword [ebp - 0x1f0], eax
je 0x1002721d
mov dword [ebp - 0x368], 1
jmp 0x10027224
and dword [ebp - 0x368], 0
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp + eax*4 - 0x2c8]
mov ecx, dword [ebp - 0x14]
sub eax, dword [ebp + ecx*4 - 0x2c8]
mov dword [ebp - 0x340], eax
jmp 0x100270ce
push 1
push 0
lea eax, [ebp - 0x14]
push eax
push 0x7f0
lea eax, [ebp - 0x120]
push eax
call fcn.10023f29
add esp, 0x14
xor eax, eax
jmp 0x100279e0
mov dword [ebp - 0xe4], 0xb3ae3556
mov dword [ebp - 0x314], 1
mov dword [ebp - 0x114], 0x3c61c71b
mov dword [ebp - 0x3c4], 0xa07563ff
mov dword [ebp - 0x3c0], 0xa07563ff
mov dword [ebp - 0x3bc], 0xa07563ff
mov dword [ebp - 0x3b8], 0xa07563ff
push 4
lea ecx, [ebp - 0x144]
call fcn.1002a3c2
mov dword [ebp - 4], 0xe
mov dword [ebp - 0x2e8], 0xe9ad
mov dword [ebp - 0x30c], 1
lea eax, [ebp - 0x144]
push eax
lea eax, [ebp - 0x514]
push eax
call fcn.100253cb
pop ecx
pop ecx
mov dword [ebp - 0xe4], 0xfffffffd
jmp 0x10027302
mov eax, dword [ebp - 0xe4]
dec eax
mov dword [ebp - 0xe4], eax
cmp dword [ebp - 0xe4], 0xffffffea
jl 0x1002798a
push 4
lea ecx, [ebp - 0x15c]
call fcn.1002a3c2
mov byte [ebp - 4], 0xf
mov dword [ebp - 0x34], 0xea983111
mov dword [ebp - 0x11c], 0x73063d62
mov dword [ebp - 0x1f8], 0
mov dword [ebp - 0x510], 0
mov dword [ebp - 0x1c], 0
jmp 0x10027355
mov eax, dword [ebp - 0x1c]
inc eax
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 4
jge 0x10027371
push dword [ebp - 0x1c]
lea ecx, [ebp - 0x15c]
call fcn.1002a44b
mov dword [eax], 0xfffffffd
jmp 0x1002734e
mov dword [ebp - 0x1c], 0
jmp 0x10027381
mov eax, dword [ebp - 0x1c]
inc eax
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 4
jge 0x10027397
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0x50c], 0x8f6a1c3d
jmp 0x1002737a
mov dword [ebp - 0x1c], 0
jmp 0x100273a7
mov eax, dword [ebp - 0x1c]
inc eax
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 3
jge 0x100273bd
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0x544], 0xc5ea
jmp 0x100273a0
mov dword [ebp - 0x34], 0
jmp 0x100273cd
mov eax, dword [ebp - 0x34]
inc eax
mov dword [ebp - 0x34], eax
cmp dword [ebp - 0x34], 3
jg 0x10027783
mov dword [ebp - 0xb4], 0xffffffff
mov dword [ebp - 0x490], 0xde661fbc
mov dword [ebp - 0x2f0], 0xfffffffa
mov dword [ebp - 0x454], 0x1720d700
mov dword [ebp - 0x4fc], 0
mov dword [ebp - 0x5c], 0xae4f78d7
push 2
lea ecx, [ebp - 0x4ac]
call fcn.1002a3c2
mov byte [ebp - 4], 0x10
mov dword [ebp - 0x2c], 0
jmp 0x10027431
mov eax, dword [ebp - 0x2c]
inc eax
mov dword [ebp - 0x2c], eax
cmp dword [ebp - 0x2c], 2
jge 0x1002744a
push dword [ebp - 0x2c]
lea ecx, [ebp - 0x4ac]
call fcn.1002a44b
or dword [eax], 0xffffffff
jmp 0x1002742a
mov dword [ebp - 0x2c], 0
jmp 0x1002745a
mov eax, dword [ebp - 0x2c]
inc eax
mov dword [ebp - 0x2c], eax
cmp dword [ebp - 0x2c], 3
jge 0x10027470
mov eax, dword [ebp - 0x2c]
mov dword [ebp + eax*4 - 0x550], 0x3333db96
jmp 0x10027453
mov dword [ebp - 0xb4], 0
jmp 0x10027489
mov eax, dword [ebp - 0xb4]
inc eax
mov dword [ebp - 0xb4], eax
cmp dword [ebp - 0xb4], 3
jg 0x100275fa
mov dword [ebp - 0x45c], 0x6a1c17c7
mov dword [ebp - 0xb8], 0
jmp 0x100274b9
mov eax, dword [ebp - 0xb8]
inc eax
mov dword [ebp - 0xb8], eax
cmp dword [ebp - 0xb8], 1
jge 0x100274d5
mov eax, dword [ebp - 0xb8]
mov dword [ebp + eax*4 - 0x2ec], 0xab61b583
jmp 0x100274ac
push 0x4f5a
push 1
push 1
lea eax, [ebp - 0x11c]
push eax
call fcn.10023ec1
add esp, 0x10
push dword [ebp - 0x34]
lea ecx, [ebp - 0x15c]
call fcn.1002a44b
cmp dword [eax], 0
jne 0x1002750c
mov dword [ebp - 0x200], 1
jmp 0x10027513
and dword [ebp - 0x200], 0
push dword [ebp - 0x34]
lea ecx, [ebp - 0x15c]
call fcn.1002a44b
mov eax, dword [eax]
mov dword [ebp - 0x1f8], eax
mov eax, dword [ebp - 0x1f8]
cmp dword [ebp - 0x200], eax
jl 0x10027543
mov dword [ebp - 0x210], 1
jmp 0x1002754a
and dword [ebp - 0x210], 0
push 3
lea ecx, [ebp - 0x144]
call fcn.1002a44b
mov dword [ebp - 0x110], eax
mov eax, dword [ebp - 0x110]
mov eax, dword [eax]
dec eax
mov ecx, dword [ebp - 0x110]
mov dword [ecx], eax
mov eax, dword [ebp - 0x110]
cmp dword [eax], 0
je 0x100275d5
mov eax, dword [ebp - 0x2f0]
mov dword [ebp - 0x4cc], eax
push dword [ebp - 0x34]
lea ecx, [ebp - 0x15c]
call fcn.1002a44b
mov esi, eax
push dword [ebp - 0x34]
lea ecx, [ebp - 0x15c]
call fcn.1002a44b
mov ecx, dword [esi]
cmp ecx, dword [eax]
jge 0x100275b5
mov dword [ebp - 0x208], 1
jmp 0x100275bc
and dword [ebp - 0x208], 0
mov eax, 0xdd5c0aec
sub eax, dword [ebp - 0x208]
je 0x100275d5
mov dword [ebp - 0x218], 1
jmp 0x100275dc
and dword [ebp - 0x218], 0
mov eax, dword [ebp - 0x210]
sub eax, dword [ebp - 0x218]
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x2ec], eax
jmp 0x1002747c
mov dword [ebp - 0x5c], 0
jmp 0x1002760a
mov eax, dword [ebp - 0x5c]
inc eax
mov dword [ebp - 0x5c], eax
cmp dword [ebp - 0x5c], 3
jg 0x1002776f
mov dword [ebp - 0x2fc], 0
push dword [ebp - 0x5c]
lea ecx, [ebp - 0x144]
call fcn.1002a44b
cmp dword [eax], 0
je 0x10027646
mov eax, 0x475678d5
test eax, eax
je 0x10027646
mov dword [ebp - 0xf8], 1
jmp 0x1002764d
and dword [ebp - 0xf8], 0
push dword [ebp - 0x5c]
lea ecx, [ebp - 0x144]
call fcn.1002a44b
push 3
lea ecx, [ebp - 0x144]
call fcn.1002a44b
mov ecx, dword [ebp - 0xb4]
cmp dword [eax], ecx
jge 0x1002767e
mov dword [ebp - 0x130], 1
jmp 0x10027685
and dword [ebp - 0x130], 0
push 0
lea ecx, [ebp - 0x15c]
call fcn.1002a44b
mov ecx, dword [ebp - 0x130]
mov dword [eax], ecx
mov eax, dword [ebp - 0x130]
sub eax, 0x69977148
jns 0x100276bc
cmp dword [ebp - 0x114], 0
je 0x100276bc
mov dword [ebp - 0x118], 1
jmp 0x100276c3
and dword [ebp - 0x118], 0
push 4
pop eax
imul eax, eax, 3
mov ecx, dword [ebp - 0x118]
mov dword [ebp + eax - 0x3c4], ecx
cmp dword [ebp - 0x118], 0xffffffff
jle 0x100276eb
mov dword [ebp - 0xf4], 1
jmp 0x100276f2
and dword [ebp - 0xf4], 0
push 4
pop eax
imul eax, eax, 3
mov ecx, dword [ebp - 0xf4]
mov dword [ebp + eax - 0x50c], ecx
cmp dword [ebp - 0xf4], 0x9fe29f19
je 0x10027723
cmp dword [ebp - 0x5c], 0
je 0x10027723
mov dword [ebp - 0x220], 1
jmp 0x1002772a
and dword [ebp - 0x220], 0
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0xf8]
mov dword [ebp + eax - 0x550], ecx
mov eax, dword [ebp - 0xf8]
cmp eax, dword [ebp - 0x220]
je 0x10027757
mov dword [ebp - 0x228], 1
jmp 0x1002775e
and dword [ebp - 0x228], 0
mov eax, dword [ebp - 0x228]
mov dword [ebp - 0x2fc], eax
jmp 0x10027603
mov byte [ebp - 4], 0xf
lea ecx, [ebp - 0x4ac]
call fcn.1002a420
jmp 0x100273c6
push 3
lea ecx, [ebp - 0x144]
call fcn.1002a44b
cmp dword [eax], 0
je 0x100277be
push 4
pop eax
shl eax, 1
mov esi, dword [ebp + eax - 0x50c]
push 2
lea ecx, [ebp - 0x15c]
call fcn.1002a44b
add esi, dword [eax]
je 0x100277be
mov dword [ebp - 0x230], 1
jmp 0x100277c5
and dword [ebp - 0x230], 0
mov eax, dword [ebp - 0x2e8]
cmp dword [ebp - 0x230], eax
jl 0x100277df
mov dword [ebp - 0x238], 1
jmp 0x100277e6
and dword [ebp - 0x238], 0
cmp dword [ebp - 0x238], 1
jae 0x100277fb
mov dword [ebp - 0x240], 1
jmp 0x10027802
and dword [ebp - 0x240], 0
mov eax, dword [ebp - 0x11c]
neg eax
cmp eax, dword [ebp - 0x240]
jg 0x1002781e
mov dword [ebp - 0x100], 1
jmp 0x10027825
and dword [ebp - 0x100], 0
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x100]
mov dword [ebp + eax - 0x3c4], ecx
cmp dword [ebp - 0x100], 5
jb 0x1002784d
mov dword [ebp - 0x248], 1
jmp 0x10027854
and dword [ebp - 0x248], 0
cmp dword [ebp - 0x248], 0xffffffff
jg 0x10027869
mov dword [ebp - 0x250], 1
jmp 0x10027870
and dword [ebp - 0x250], 0
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x50c]
imul eax, dword [ebp - 0x250]
mov dword [ebp - 0x114], eax
mov esi, dword [ebp - 0x114]
push 3
lea ecx, [ebp - 0x144]
call fcn.1002a44b
cmp esi, dword [eax]
jle 0x100278ac
mov dword [ebp - 0x258], 1
jmp 0x100278b3
and dword [ebp - 0x258], 0
push 3
lea ecx, [ebp - 0x144]
call fcn.1002a44b
mov ecx, dword [ebp - 0x258]
cmp ecx, dword [eax]
jne 0x100278d6
mov dword [ebp - 0x260], 1
jmp 0x100278dd
and dword [ebp - 0x260], 0
push 3
lea ecx, [ebp - 0x15c]
call fcn.1002a44b
mov eax, dword [eax]
cmp eax, dword [ebp - 0x260]
jle 0x100278fd
cmp dword [ebp - 0x30c], 0
je 0x10027912
mov eax, 0x63c96aad
test eax, eax
je 0x10027912
mov dword [ebp - 0x268], 1
jmp 0x10027919
and dword [ebp - 0x268], 0
mov eax, dword [ebp - 0x34]
imul eax, dword [ebp - 0x268]
dec eax
je 0x10027942
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x544], 0
je 0x10027942
mov dword [ebp - 0x270], 1
jmp 0x10027949
and dword [ebp - 0x270], 0
mov eax, dword [ebp - 0x11c]
cmp dword [ebp - 0x270], eax
jne 0x10027963
mov dword [ebp - 0x278], 1
jmp 0x1002796a
and dword [ebp - 0x278], 0
mov eax, dword [ebp - 0x278]
mov dword [ebp - 0x314], eax
mov byte [ebp - 4], 0xe
lea ecx, [ebp - 0x15c]
call fcn.1002a420
jmp 0x100272f5
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x144]
call fcn.1002a420
push 0x7860
push 0x1ada
push 1
push 1
push 0x241e
push 1
push 0x32c9
lea eax, [ebp - 0x28]
push eax
call fcn.10023ff0
add esp, 0x20
mov eax, dword [ebp - 0x28]
cmp dword [eax + 0x10], 0
je 0x100279d3
mov eax, dword [ebp - 0x28]
mov dword [ebp - 0x280], eax
jmp 0x100279da
and dword [ebp - 0x280], 0
mov eax, dword [ebp - 0x280]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop esi
mov esp, ebp
pop ebp
ret