Function at 0x100261ad
Capabilities:
Parse pe header

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x1006d898
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0xa18
push esi
push edi
mov dword [ebp - 0x10], 9
mov dword [ebp - 0x1c], 0xfffffffb
mov dword [ebp - 0x668], 0x7d996f04
mov dword [ebp - 0x674], 0x2063
cmp dword [ebp - 0x674], 0x10ca
jge 0x100264d4
lea eax, [ebp - 0x1cc]
push eax
push 0x10007744
call fcn.10055feb
pop ecx
pop ecx
mov eax, dword [ebp - 0x1cc]
mov dword [ebp - 0x584], eax
mov eax, dword [ebp - 0x1cc]
dec eax
mov dword [ebp - 0x1cc], eax
cmp dword [ebp - 0x584], 0
je 0x100264d4
lea eax, [ebp - 0xa8]
push eax
push 0x10007744
call fcn.10055feb
pop ecx
pop ecx
and dword [ebp - 0x58c], 0
lea eax, [ebp - 0x58c]
push eax
mov eax, dword [ebp - 0xa8]
inc eax
push eax
lea ecx, [ebp - 0x81c]
call fcn.1002b733
and dword [ebp - 4], 0
mov dword [ebp - 0x138], 1
jmp 0x10026289
mov eax, dword [ebp - 0x138]
inc eax
mov dword [ebp - 0x138], eax
mov eax, dword [ebp - 0x138]
cmp eax, dword [ebp - 0xa8]
jg 0x100262b7
push dword [ebp - 0x138]
lea ecx, [ebp - 0x81c]
call fcn.1002b7f6
push eax
push 0x10007744
call fcn.10055feb
pop ecx
pop ecx
jmp 0x1002627c
mov byte [ebp - 0x9d], 0
lea eax, [ebp - 0x9d]
push eax
mov eax, dword [ebp - 0xa8]
inc eax
push eax
lea ecx, [ebp - 0x838]
call fcn.1002bc1d
mov byte [ebp - 4], 1
and dword [ebp - 0x594], 0
lea eax, [ebp - 0x594]
push eax
mov eax, dword [ebp - 0xa8]
inc eax
push eax
lea ecx, [ebp - 0x828]
call fcn.1002b733
mov byte [ebp - 4], 2
mov dword [ebp - 0x104], 1
jmp 0x1002631a
mov eax, dword [ebp - 0x104]
inc eax
mov dword [ebp - 0x104], eax
mov eax, dword [ebp - 0x104]
cmp eax, dword [ebp - 0xa8]
jg 0x1002644f
push dword [ebp - 0x104]
lea eax, [ebp - 0x9ac]
push eax
lea ecx, [ebp - 0x838]
call fcn.1002bc9e
mov ecx, eax
call fcn.1002bce2
movzx eax, al
test eax, eax
je 0x10026354
jmp 0x1002630d
lea ecx, [ebp - 0x690]
call fcn.1002b6ea
mov byte [ebp - 4], 3
mov eax, dword [ebp - 0x104]
mov dword [ebp - 0xec], eax
push dword [ebp - 0xec]
lea eax, [ebp - 0x9b4]
push eax
lea ecx, [ebp - 0x838]
call fcn.1002bc9e
mov ecx, eax
call fcn.1002bce2
movzx eax, al
test eax, eax
jne 0x100263e3
push 1
push dword [ebp - 0xec]
lea eax, [ebp - 0x9ec]
push eax
lea ecx, [ebp - 0x838]
call fcn.1002bc9e
mov ecx, eax
call fcn.1002bcbd
lea eax, [ebp - 0xec]
push eax
lea ecx, [ebp - 0x690]
call fcn.1002b924
push dword [ebp - 0xec]
lea ecx, [ebp - 0x81c]
call fcn.1002b7f6
mov eax, dword [eax]
mov dword [ebp - 0xec], eax
jmp 0x1002636f
and dword [ebp - 0x170], 0
jmp 0x100263f9
mov eax, dword [ebp - 0x170]
inc eax
mov dword [ebp - 0x170], eax
lea ecx, [ebp - 0x690]
call fcn.1002b914
cmp dword [ebp - 0x170], eax
jae 0x1002643b
lea ecx, [ebp - 0x690]
call fcn.1002b914
mov esi, eax
push dword [ebp - 0x170]
lea ecx, [ebp - 0x690]
call fcn.1002b7f6
push dword [eax]
lea ecx, [ebp - 0x828]
call fcn.1002b7f6
mov dword [eax], esi
jmp 0x100263ec
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x690]
call fcn.1002b77b
jmp 0x1002630d
mov dword [ebp - 0x140], 1
jmp 0x10026468
mov eax, dword [ebp - 0x140]
inc eax
mov dword [ebp - 0x140], eax
mov eax, dword [ebp - 0x140]
cmp eax, dword [ebp - 0xa8]
jg 0x10026497
push dword [ebp - 0x140]
lea ecx, [ebp - 0x828]
call fcn.1002b7f6
push dword [eax]
push 0x10007760
call fcn.10056438
pop ecx
pop ecx
jmp 0x1002645b
push 0x100076ad
call fcn.100567a1
pop ecx
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x828]
call fcn.1002b77b
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x838]
call fcn.1002bc7e
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x81c]
call fcn.1002b77b
jmp 0x10026212
mov eax, dword [ebp - 0x10]
add eax, dword [ebp - 0x10]
cmp eax, 0x5efa
jg 0x100264ed
mov dword [ebp - 0x328], 1
jmp 0x100264f4
and dword [ebp - 0x328], 0
mov eax, dword [ebp - 0x328]
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
imul eax, dword [ebp - 0x10]
test eax, eax
jne 0x10026516
or eax, 0xffffffff
jne 0x10026516
and dword [ebp - 0x480], 0
jmp 0x10026520
mov dword [ebp - 0x480], 1
mov eax, dword [ebp - 0x10]
cmp dword [ebp - 0x480], eax
jge 0x10026537
mov dword [ebp - 0x488], 1
jmp 0x1002653e
and dword [ebp - 0x488], 0
mov eax, dword [ebp - 0x10]
cmp dword [ebp - 0x488], eax
jle 0x10026abf
mov dword [ebp - 0x724], 0xeeda5852
mov dword [ebp - 0x720], 0xeeda5852
mov dword [ebp - 0x71c], 0xeeda5852
mov dword [ebp - 0x718], 0xeeda5852
lea ecx, [ebp - 0x1b9]
call fcn.1002b805
push eax
lea eax, [ebp - 0x714]
push eax
lea eax, [ebp - 0x724]
push eax
lea ecx, [ebp - 0xa04]
call fcn.1002b808
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0x1b8]
call fcn.1002b755
mov dword [ebp - 4], 4
mov dword [ebp - 0x58], 0x78b7
mov dword [ebp - 0x3ac], 9
mov dword [ebp - 0x1c], 0xffffffeb
jmp 0x100265d2
mov eax, dword [ebp - 0x1c]
dec eax
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 0xffffffe4
jge 0x10026aab
mov dword [ebp - 0x188], 0x3e62
mov dword [ebp - 0x10], 0
jmp 0x100265f6
mov eax, dword [ebp - 0x10]
inc eax
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], 3
jg 0x10026aa6
push 2
lea ecx, [ebp - 0x524]
call fcn.1002b6f7
mov byte [ebp - 4], 5
mov dword [ebp - 0x640], 0xfffffffd
push 1
push 0x7022
lea eax, [ebp - 0x8f4]
push eax
push 0x77be
push 0x176c
push 0x35dd
push 1
push 0x3a09
push 0x61c5
push 0x6ced
lea eax, [ebp - 0x524]
push eax
call fcn.1001c7ca
add esp, 0x2c
mov dword [ebp - 0x59c], 0x16ff
cmp dword [ebp - 0x59c], 0x137c
jge 0x100267a0
call fcn.10056125
push 0x20
pop ecx
imul ecx, ecx, 0
add eax, ecx
push eax
push 0x100077f8
push 0x10007870
call fcn.1005667f
add esp, 0xc
call fcn.10056125
push 0x20
pop ecx
shl ecx, 0
add eax, ecx
push eax
push 0x10007804
push 0x1000787c
call fcn.1005667f
add esp, 0xc
lea eax, [ebp - 0x20]
push eax
push 0x10007740
call fcn.10055feb
pop ecx
pop ecx
lea eax, [ebp - 0x4b4]
push eax
lea eax, [ebp - 0x4bc]
push eax
push 0x10007888
call fcn.10055feb
add esp, 0xc
lea eax, [ebp - 0x4c4]
push eax
lea eax, [ebp - 0x4cc]
push eax
push 0x10007888
call fcn.10055feb
add esp, 0xc
lea eax, [ebp - 0x244]
push eax
lea eax, [ebp - 0x478]
push eax
push 0x10007888
call fcn.10055feb
add esp, 0xc
mov eax, dword [ebp - 0x4bc]
cmp eax, dword [ebp - 0x20]
jne 0x10026729
mov eax, dword [ebp - 0x4b4]
mov dword [ebp - 0x20], eax
jmp 0x1002673d
mov eax, dword [ebp - 0x4b4]
cmp eax, dword [ebp - 0x20]
jne 0x1002673d
mov eax, dword [ebp - 0x4bc]
mov dword [ebp - 0x20], eax
mov eax, dword [ebp - 0x4cc]
cmp eax, dword [ebp - 0x20]
jne 0x10026753
mov eax, dword [ebp - 0x4c4]
mov dword [ebp - 0x20], eax
jmp 0x10026767
mov eax, dword [ebp - 0x4c4]
cmp eax, dword [ebp - 0x20]
jne 0x10026767
mov eax, dword [ebp - 0x4cc]
mov dword [ebp - 0x20], eax
mov eax, dword [ebp - 0x478]
cmp eax, dword [ebp - 0x20]
jne 0x1002677d
mov eax, dword [ebp - 0x244]
mov dword [ebp - 0x20], eax
jmp 0x10026791
mov eax, dword [ebp - 0x244]
cmp eax, dword [ebp - 0x20]
jne 0x10026791
mov eax, dword [ebp - 0x478]
mov dword [ebp - 0x20], eax
push dword [ebp - 0x20]
push 0x10007768
call fcn.10056438
pop ecx
pop ecx
push 1
push 0x5e33
push 1
push 0x460b
call fcn.1001c972
add esp, 0x10
cmp dword [ebp - 0x58], 0
je 0x100267c9
push 0
lea ecx, [ebp - 0x1b8]
call fcn.1002b7f6
mov eax, dword [ebp - 0x58]
cmp dword [ebp - 0x1c], eax
jle 0x100267dd
mov dword [ebp - 0x39c], 1
jmp 0x100267e4
and dword [ebp - 0x39c], 0
cmp dword [ebp - 0x39c], 0xfffffff7
jg 0x100267f9
mov dword [ebp - 0x24c], 1
jmp 0x10026800
and dword [ebp - 0x24c], 0
push 0
lea ecx, [ebp - 0x1b8]
call fcn.1002b7f6
mov eax, dword [eax]
cmp eax, dword [ebp - 0x24c]
jne 0x10026823
mov dword [ebp - 0x4b8], 1
jmp 0x1002682a
and dword [ebp - 0x4b8], 0
cmp dword [ebp - 0x4b8], 0xffffffff
jl 0x1002683f
mov dword [ebp - 0x254], 1
jmp 0x10026846
and dword [ebp - 0x254], 0
mov eax, dword [ebp - 0x254]
sub eax, 0x43
cmp eax, dword [ebp - 0x188]
jg 0x10026863
mov dword [ebp - 0x3a4], 1
jmp 0x1002686a
and dword [ebp - 0x3a4], 0
mov eax, dword [ebp - 0x10]
imul eax, dword [ebp - 0x3a4]
cmp eax, 0xfffffffe
jne 0x10026894
cmp dword [ebp - 0x58], 0
je 0x10026894
cmp dword [ebp - 0x188], 0
je 0x10026894
mov dword [ebp - 0x25c], 1
jmp 0x1002689b
and dword [ebp - 0x25c], 0
mov eax, dword [ebp - 0x188]
cmp dword [ebp - 0x25c], eax
jge 0x100268b5
mov dword [ebp - 0x44c], 1
jmp 0x100268bc
and dword [ebp - 0x44c], 0
push 1
lea ecx, [ebp - 0x524]
call fcn.1002b7f6
mov ecx, dword [ebp - 0x44c]
mov dword [eax], ecx
push 0xfffffffffffffffe
pop eax
test eax, eax
je 0x100268e6
push dword [ebp - 0x10]
lea ecx, [ebp - 0x1b8]
call fcn.1002b7f6
push 0
lea ecx, [ebp - 0x524]
call fcn.1002b7f6
cmp dword [ebp - 0x1c], 0
jne 0x10026909
push 0xfffffffffffffffa
pop eax
test eax, eax
jne 0x10026909
and dword [ebp - 0x264], 0
jmp 0x10026913
mov dword [ebp - 0x264], 1
mov eax, dword [ebp - 0x264]
mov dword [ebp - 0x3ac], eax
mov esi, dword [ebp - 0x3ac]
push dword [ebp - 0x10]
lea ecx, [ebp - 0x1b8]
call fcn.1002b7f6
cmp esi, dword [eax]
jl 0x10026943
mov dword [ebp - 0x26c], 1
jmp 0x1002694a
and dword [ebp - 0x26c], 0
mov eax, dword [ebp - 0x58]
cmp dword [ebp - 0x26c], eax
jne 0x10026961
mov dword [ebp - 0x4a0], 1
jmp 0x10026968
and dword [ebp - 0x4a0], 0
mov eax, dword [ebp - 0x4a0]
sub eax, dword [ebp - 0x188]
cmp eax, dword [ebp - 0x58]
jne 0x1002698c
push dword [ebp - 0x10]
lea ecx, [ebp - 0x1b8]
call fcn.1002b7f6
cmp dword [eax], 0
je 0x1002699c
xor eax, eax
je 0x1002699c
mov dword [ebp - 0x274], 1
jmp 0x100269a3
and dword [ebp - 0x274], 0
push 1
lea ecx, [ebp - 0x1b8]
call fcn.1002b7f6
mov ecx, dword [ebp - 0x274]
cmp ecx, dword [eax]
jl 0x100269d9
push dword [ebp - 0x10]
lea ecx, [ebp - 0x1b8]
call fcn.1002b7f6
cmp dword [eax], 0
je 0x100269d9
mov dword [ebp - 0x630], 1
jmp 0x100269e0
and dword [ebp - 0x630], 0
push dword [ebp - 0x10]
lea ecx, [ebp - 0x1b8]
call fcn.1002b7f6
push dword [ebp - 0x10]
lea ecx, [ebp - 0x1b8]
call fcn.1002b7f6
cmp dword [eax], 8
jl 0x10026a0d
mov dword [ebp - 0x638], 1
jmp 0x10026a14
and dword [ebp - 0x638], 0
push dword [ebp - 0x10]
lea ecx, [ebp - 0x1b8]
call fcn.1002b7f6
push dword [ebp - 0x10]
lea ecx, [ebp - 0x1b8]
call fcn.1002b7f6
mov esi, eax
push 0
lea ecx, [ebp - 0x524]
call fcn.1002b7f6
mov edi, eax
push 0
lea ecx, [ebp - 0x1b8]
call fcn.1002b7f6
mov ecx, dword [edi]
sub ecx, dword [eax]
cmp dword [esi], ecx
jle 0x10026a6f
cmp dword [ebp - 0x1c], 0
je 0x10026a6d
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x524]
call fcn.1002b77b
jmp 0x10026aa6
jmp 0x10026a92
mov dword [ebp - 0x58], 0
jmp 0x10026a7f
mov eax, dword [ebp - 0x58]
inc eax
mov dword [ebp - 0x58], eax
cmp dword [ebp - 0x58], 3
jg 0x10026a92
cmp dword [ebp - 0x640], 0
je 0x10026a90
jmp 0x10026a92
jmp 0x10026a78
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x524]
call fcn.1002b77b
jmp 0x100265ef
jmp 0x100265cb
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x1b8]
call fcn.1002b77b
jmp 0x10026b65
mov dword [ebp - 0x660], 0x82d85846
mov dword [ebp - 0x650], 0x3982aeba
mov dword [ebp - 0x10], 0
jmp 0x10026ae3
mov eax, dword [ebp - 0x10]
inc eax
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], 9
jge 0x10026b65
mov dword [ebp - 0x648], 0x966a49d
mov dword [ebp - 0x658], 0x61f3d49e
mov dword [ebp - 0x1c], 0xfffffff0
jmp 0x10026b0d
mov eax, dword [ebp - 0x1c]
inc eax
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 0x1a
je 0x10026b1a
call fcn.10025907
jmp 0x10026b06
lea eax, [ebp - 0x648]
push eax
push 0x2d0f
lea eax, [ebp - 0x650]
push eax
push 0x66ba
lea eax, [ebp - 0x658]
push eax
lea eax, [ebp - 0x10]
push eax
push 1
lea eax, [ebp - 0x1c]
push eax
lea eax, [ebp - 0x660]
push eax
push 0
lea eax, [ebp - 0x668]
push eax
push 0x32db
call fcn.100243bc
add esp, 0x30
jmp 0x10026adc
and dword [ebp - 0x40], 0
mov dword [ebp - 0x148], 0
mov byte [ebp - 0x77], 0
movzx eax, byte [ebp - 0x77]
test eax, eax
je 0x10026b84
call fcn.10025938
mov dword [ebp - 0x148], 2
jmp 0x10026b9d
mov eax, dword [ebp - 0x148]
dec eax
mov dword [ebp - 0x148], eax
cmp dword [ebp - 0x148], 0xfffffffc
jge 0x10026bb6
mov byte [ebp - 0x6d], 0
lea eax, [ebp - 0x6d]
push eax
call fcn.1002594a
pop ecx
jmp 0x10026b90
mov dword [ebp - 0x200], 7
mov dword [ebp - 0x1dc], 0xfffffffb
mov dword [ebp - 0x150], 0xfffffff8
mov dword [ebp - 0x670], 1
mov dword [ebp - 0x74], 0xb996a530
mov dword [ebp - 0x774], 0xfffffffd
mov dword [ebp - 0x770], 0xfffffffd
mov dword [ebp - 0x76c], 0xfffffffd
mov dword [ebp - 0x768], 0xfffffffd
lea ecx, [ebp - 0x21d]
call fcn.1002b805
push eax
lea eax, [ebp - 0x764]
push eax
lea eax, [ebp - 0x774]
push eax
lea ecx, [ebp - 0xa14]
call fcn.1002b808
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0x7e0]
call fcn.1002b755
mov dword [ebp - 4], 6
mov dword [ebp - 0x3c4], 0xfb49a5c1
mov dword [ebp - 0x738], 0xfffffff6
mov dword [ebp - 0x734], 0xfffffff6
mov dword [ebp - 0x730], 0xfffffff6
mov dword [ebp - 0x72c], 0xfffffff6
lea ecx, [ebp - 0x1c1]
call fcn.1002b805
push eax
lea eax, [ebp - 0x728]
push eax
lea eax, [ebp - 0x738]
push eax
lea ecx, [ebp - 0xa24]
call fcn.1002b808
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0x810]
call fcn.1002b755
mov byte [ebp - 4], 7
mov dword [ebp - 0x57c], 0xffffffff
mov dword [ebp - 0x178], 0
jmp 0x10026cd7
mov eax, dword [ebp - 0x178]
inc eax
mov dword [ebp - 0x178], eax
cmp dword [ebp - 0x178], 1
jge 0x10026cf3
mov eax, dword [ebp - 0x178]
mov dword [ebp + eax*4 - 0x28c], 0xf5ed9a92
jmp 0x10026cca
mov eax, dword [ebp - 0x670]
mov dword [ebp - 0x8c8], eax
mov eax, dword [ebp - 0x1dc]
mov dword [ebp - 0x848], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x28c], 0x9e96bb64
jb 0x10026d2a
mov dword [ebp - 0x3b4], 1
jmp 0x10026d31
and dword [ebp - 0x3b4], 0
cmp dword [ebp - 0x3b4], 0x652f
jne 0x10026d49
mov dword [ebp - 0x27c], 1
jmp 0x10026d50
and dword [ebp - 0x27c], 0
mov esi, dword [ebp - 0x27c]
add esi, 0x3d7f
push 3
lea ecx, [ebp - 0x7e0]
call fcn.1002b7f6
cmp esi, dword [eax]
jge 0x10026d79
mov dword [ebp - 0x678], 1
jmp 0x10026d80
and dword [ebp - 0x678], 0
cmp dword [ebp - 0x200], 0
ja 0x10026d95
mov dword [ebp - 0x224], 1
jmp 0x10026d9c
and dword [ebp - 0x224], 0
push 3
lea ecx, [ebp - 0x7e0]
call fcn.1002b7f6
mov ecx, dword [ebp - 0x224]
mov dword [eax], ecx
mov eax, dword [ebp - 0x3c4]
cmp dword [ebp - 0x224], eax
je 0x10026dcb
mov dword [ebp - 0x454], 1
jmp 0x10026dd2
and dword [ebp - 0x454], 0
cmp dword [ebp - 0x454], 0xc821
je 0x10026dea
mov dword [ebp - 0x284], 1
jmp 0x10026df1
and dword [ebp - 0x284], 0
push 1
lea ecx, [ebp - 0x810]
call fcn.1002b7f6
mov ecx, dword [ebp - 0x284]
cmp ecx, dword [eax]
jg 0x10026e14
mov dword [ebp - 0x3bc], 1
jmp 0x10026e1b
and dword [ebp - 0x3bc], 0
cmp dword [ebp - 0x3bc], 0x932d
jge 0x10026e33
mov dword [ebp - 0x1d4], 1
jmp 0x10026e3a
and dword [ebp - 0x1d4], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x1d4]
mov dword [ebp + eax - 0x28c], ecx
cmp dword [ebp - 0x1d4], 0
jne 0x10026e68
cmp dword [ebp - 0x150], 0
jne 0x10026e68
and dword [ebp - 0x4c8], 0
jmp 0x10026e72
mov dword [ebp - 0x4c8], 1
mov eax, dword [ebp - 0x150]
add eax, dword [ebp - 0x4c8]
cmp eax, dword [ebp - 0x150]
je 0x10026e92
mov dword [ebp - 0x294], 1
jmp 0x10026e99
and dword [ebp - 0x294], 0
mov eax, dword [ebp - 0x294]
mov dword [ebp - 0x200], eax
mov eax, dword [ebp - 0x74]
mov dword [ebp - 0x680], eax
mov eax, dword [ebp - 0x200]
mov dword [ebp - 0x644], eax
mov eax, dword [ebp - 0x74]
dec eax
mov dword [ebp - 0x74], eax
mov eax, dword [ebp - 0x680]
cmp eax, dword [ebp - 0x644]
jne 0x10026edb
mov dword [ebp - 0x29c], 1
jmp 0x10026ee2
and dword [ebp - 0x29c], 0
mov eax, dword [ebp - 0x3c4]
cmp dword [ebp - 0x29c], eax
jl 0x10026efc
mov dword [ebp - 0x45c], 1
jmp 0x10026f03
and dword [ebp - 0x45c], 0
mov esi, dword [ebp - 0x45c]
neg esi
push 1
lea ecx, [ebp - 0x810]
call fcn.1002b7f6
cmp esi, dword [eax]
jle 0x10026f28
mov dword [ebp - 0x2a4], 1
jmp 0x10026f2f
and dword [ebp - 0x2a4], 0
mov eax, dword [ebp - 0x2a4]
mov dword [ebp - 0x1dc], eax
mov eax, dword [ebp - 0x150]
cmp dword [ebp - 0x1dc], eax
jne 0x10026f55
mov dword [ebp - 0x3cc], 1
jmp 0x10026f5c
and dword [ebp - 0x3cc], 0
mov eax, dword [ebp - 0x3cc]
mov dword [ebp - 0x57c], eax
mov dword [ebp - 0x74], 0xffffffe4
jmp 0x10026f78
mov eax, dword [ebp - 0x74]
inc eax
mov dword [ebp - 0x74], eax
cmp dword [ebp - 0x74], 0x28
jge 0x10026fc0
push 0x71cc
push 0x2c0c
push 0x2770
push 0x1cd9
push 0
push 0x6a5c
push 0x3efe
push 0x5fd9
push 0x3eb3
push 1
push 1
push 0x6e86
push 0x437d
call fcn.100222c5
add esp, 0x34
jmp 0x10026f71
mov byte [ebp - 4], 6
lea ecx, [ebp - 0x810]
call fcn.1002b77b
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x7e0]
call fcn.1002b77b
mov dword [ebp - 0x540], 0x1cc6
cmp dword [ebp - 0x540], 0x553
jge 0x10027153
lea eax, [ebp - 0x21c]
push eax
lea eax, [ebp - 0x550]
push eax
mov ecx, 0x1065eb30
call fcn.1002ad65
mov ecx, eax
call fcn.1002ad65
lea ecx, [ebp - 0x9a4]
call fcn.1002ac78
mov dword [ebp - 4], 8
lea edx, [ebp - 0x9a4]
mov ecx, 0x1065eb30
call fcn.10030058
mov eax, dword [ebp - 0x21c]
mov dword [ebp - 0x62c], eax
mov eax, dword [ebp - 0x21c]
dec eax
mov dword [ebp - 0x21c], eax
cmp dword [ebp - 0x62c], 0
je 0x100270e1
lea edx, [ebp - 0x4a8]
mov ecx, 0x1065eb30
call fcn.1002ff7f
lea edx, [ebp - 0x2ac]
mov ecx, eax
call fcn.1002ff7f
push 0
push dword [ebp - 0x4a8]
mov ecx, 0x108ad1a8
call fcn.1002ad3b
mov dword [ebp - 0x548], eax
push 0
push dword [ebp - 0x2ac]
mov ecx, 0x108ad1a8
call fcn.1002ad3b
mov dword [ebp - 0x6bc], eax
push dword [ebp - 0x548]
mov ecx, 0x108ad1a8
call fcn.1002ad04
mov cl, byte [ebp - 0x2ac]
mov byte [eax], cl
push dword [ebp - 0x6bc]
mov ecx, 0x108ad1a8
call fcn.1002ad04
mov cl, byte [ebp - 0x4a8]
mov byte [eax], cl
jmp 0x10027039
and dword [ebp - 0x1a4], 0
jmp 0x100270f7
mov eax, dword [ebp - 0x1a4]
inc eax
mov dword [ebp - 0x1a4], eax
mov eax, dword [ebp - 0x1a4]
cmp eax, dword [ebp - 0x550]
jge 0x10027135
push dword [ebp - 0x1a4]
lea ecx, [ebp - 0x9a4]
call fcn.1002ad04
movsx eax, byte [eax]
sub eax, 0x61
push eax
mov ecx, 0x108ad1a8
call fcn.1002ad04
mov dl, byte [eax]
mov ecx, 0x1065ea78
call fcn.10030267
jmp 0x100270ea
push fcn.1002fce0
mov ecx, 0x1065ea78
call fcn.1002b293
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x9a4]
call fcn.1002acdb
mov dword [ebp - 0x4c0], 0x2cb5
mov dword [ebp - 0x914], 0xd085c9e5
mov dword [ebp - 0x3f4], 0
mov dword [ebp - 0x114], 0xfffffff6
mov dword [ebp - 0x634], 0x50315362
mov dword [ebp - 0x558], 0
mov dword [ebp - 0x1e4], 0x2a26f3f1
push 1
lea ecx, [ebp - 0x6c8]
call fcn.1002b6f7
mov dword [ebp - 4], 9
mov dword [ebp - 0x534], 0x1637c1d6
mov dword [ebp - 0x560], 0x127b
mov dword [ebp - 0x7c], 0xe0cd5c0f
push 1
push 1
push 0x6a18
push 0x32b2
push 0x53dc
lea eax, [ebp - 0x3c]
push eax
push 0x9b6
push 0x255a
push 0x6803
push 0x1e63
push 0x4f40
push 0x6d58
push 1
push 0x562a
push 0x1e5f
push 0xf5e
push 0x7ad9
push 0x1dca
lea eax, [ebp - 0x6c8]
push eax
push 0x194b
push 0x1d79
push 0x3532
push 0x63c1
call fcn.1001cb57
add esp, 0x5c
mov dword [ebp - 0x3c], 0
jmp 0x1002724b
mov eax, dword [ebp - 0x3c]
inc eax
mov dword [ebp - 0x3c], eax
cmp dword [ebp - 0x3c], 3
jge 0x10027261
mov eax, dword [ebp - 0x3c]
mov dword [ebp + eax*4 - 0x968], 0x12a3
jmp 0x10027244
mov dword [ebp - 0x3c], 0
jmp 0x10027271
mov eax, dword [ebp - 0x3c]
inc eax
mov dword [ebp - 0x3c], eax
cmp dword [ebp - 0x3c], 4
jge 0x10027287
mov eax, dword [ebp - 0x3c]
mov dword [ebp + eax*4 - 0x9fc], 0x693ce85d
jmp 0x1002726a
imul eax, dword [ebp - 0x634], 0x4174
mov dword [ebp - 0x2b4], eax
push 0
lea ecx, [ebp - 0x6c8]
call fcn.1002b7f6
mov ecx, dword [ebp - 0x2b4]
mov dword [eax], ecx
cmp dword [ebp - 0x2b4], 0
jne 0x100272c1
mov dword [ebp - 0x2bc], 1
jmp 0x100272c8
and dword [ebp - 0x2bc], 0
mov eax, dword [ebp - 0x558]
mov dword [ebp - 0x850], eax
mov eax, dword [ebp - 0x534]
mov dword [ebp - 0x8d8], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x560]
cmp dword [ebp + eax - 0x968], ecx
jge 0x10027301
mov dword [ebp - 0x3d4], 1
jmp 0x10027308
and dword [ebp - 0x3d4], 0
mov eax, dword [ebp - 0x1e4]
imul eax, dword [ebp - 0x3d4]
cmp eax, 0xfffffffd
je 0x10027326
mov dword [ebp - 0x464], 1
jmp 0x1002732d
and dword [ebp - 0x464], 0
mov eax, dword [ebp - 0x7c]
dec eax
mov dword [ebp - 0x7c], eax
mov eax, dword [ebp - 0x2bc]
add eax, dword [ebp - 0x464]
cmp dword [ebp - 0x7c], eax
jle 0x10027351
mov dword [ebp - 0x2c4], 1
jmp 0x10027358
and dword [ebp - 0x2c4], 0
mov eax, dword [ebp - 0x4c0]
cmp eax, dword [ebp - 0x2c4]
jge 0x10027372
mov dword [ebp - 0x3dc], 1
jmp 0x10027379
and dword [ebp - 0x3dc], 0
mov eax, dword [ebp - 0x3dc]
mov dword [ebp - 0x1e4], eax
cmp dword [ebp - 0x1e4], 0xffff
je 0x1002739d
mov dword [ebp - 0x2cc], 1
jmp 0x100273a4
and dword [ebp - 0x2cc], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x9fc]
add eax, dword [ebp - 0x2cc]
cmp dword [ebp - 0x4c0], eax
je 0x100273cb
mov dword [ebp - 0x2d4], 1
jmp 0x100273d2
and dword [ebp - 0x2d4], 0
mov eax, dword [ebp - 0x114]
cmp dword [ebp - 0x2d4], eax
jg 0x100273ec
mov dword [ebp - 0x3e4], 1
jmp 0x100273f3
and dword [ebp - 0x3e4], 0
mov eax, dword [ebp - 0x3e4]
mov dword [ebp - 0x3f4], eax
mov dword [ebp - 0x7c], 0xffffffe2
jmp 0x1002740f
mov eax, dword [ebp - 0x7c]
inc eax
mov dword [ebp - 0x7c], eax
cmp dword [ebp - 0x7c], 0x1f
jne 0x10027556
mov dword [ebp - 0x60], 0x140c5034
mov dword [ebp - 0x46c], 0x63cd51dc
cmp dword [ebp - 0x60], 0
je 0x10027442
cmp dword [ebp - 0x60], 0
je 0x10027442
mov dword [ebp - 0x2dc], 1
jmp 0x10027449
and dword [ebp - 0x2dc], 0
xor eax, eax
inc eax
sub eax, dword [ebp - 0x2dc]
mov dword [ebp - 0x46c], eax
mov eax, dword [ebp - 0x46c]
sub eax, dword [ebp - 0x60]
cmp eax, dword [ebp - 0x60]
je 0x10027474
or eax, 0xffffffff
jne 0x10027474
and dword [ebp - 0x2e4], 0
jmp 0x1002747e
mov dword [ebp - 0x2e4], 1
push 0
lea ecx, [ebp - 0x6c8]
call fcn.1002b7f6
mov ecx, dword [ebp - 0x2e4]
cmp ecx, dword [eax]
jge 0x100274a1
mov dword [ebp - 0x3ec], 1
jmp 0x100274a8
and dword [ebp - 0x3ec], 0
cmp dword [ebp - 0x3ec], 0xfffd
jbe 0x100274c0
mov dword [ebp - 0x2ec], 1
jmp 0x100274c7
and dword [ebp - 0x2ec], 0
mov eax, dword [ebp - 0x60]
imul eax, dword [ebp - 0x2ec]
cmp dword [ebp - 0x60], eax
jne 0x100274e8
cmp dword [ebp - 0x60], 0
je 0x100274e8
mov dword [ebp - 0x4b0], 1
jmp 0x100274ef
and dword [ebp - 0x4b0], 0
mov eax, dword [ebp - 0x60]
cmp eax, dword [ebp - 0x4b0]
jl 0x10027506
mov dword [ebp - 0x2f4], 1
jmp 0x1002750d
and dword [ebp - 0x2f4], 0
mov eax, dword [ebp - 0x2f4]
mov dword [ebp - 0x3f4], eax
mov dword [ebp - 0x114], 0
jmp 0x10027532
mov eax, dword [ebp - 0x114]
dec eax
mov dword [ebp - 0x114], eax
cmp dword [ebp - 0x114], 0xfffffffa
jne 0x10027551
mov byte [ebp - 0x8d], 0
lea eax, [ebp - 0x8d]
push eax
call fcn.10025973
pop ecx
jmp 0x10027525
jmp 0x10027408
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x6c8]
call fcn.1002b77b
push 0x1858
lea eax, [ebp + 8]
push eax
push 0x432c
lea eax, [ebp - 0x1d0]
push eax
push 1
push 1
call fcn.1001d922
add esp, 0x18
push 1
lea ecx, [ebp - 0x6d4]
call fcn.1002b6f7
mov dword [ebp - 4], 0xa
or dword [ebp - 0x760], 0xffffffff
or dword [ebp - 0x75c], 0xffffffff
or dword [ebp - 0x758], 0xffffffff
or dword [ebp - 0x754], 0xffffffff
lea ecx, [ebp - 0x1f9]
call fcn.1002b805
push eax
lea eax, [ebp - 0x750]
push eax
lea eax, [ebp - 0x760]
push eax
lea ecx, [ebp - 0x9bc]
call fcn.1002b808
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0x500]
call fcn.1002b755
mov byte [ebp - 4], 0xb
mov dword [ebp - 0x6a4], 0xfffffffd
lea eax, [ebp - 0x6d4]
push eax
lea eax, [ebp - 0xf4]
push eax
call fcn.100259ab
pop ecx
pop ecx
mov dword [ebp - 0xf4], 0
jmp 0x10027627
mov eax, dword [ebp - 0xf4]
inc eax
mov dword [ebp - 0xf4], eax
cmp dword [ebp - 0xf4], 1
jge 0x10027643
mov eax, dword [ebp - 0xf4]
mov dword [ebp + eax*4 - 0x858], 1
jmp 0x1002761a
call fcn.100259f3
push 2
lea ecx, [ebp - 0x500]
call fcn.1002b7f6
and dword [eax], 0
jmp 0x1002767e
push 2
lea ecx, [ebp - 0x500]
call fcn.1002b7f6
mov dword [ebp - 0x2fc], eax
mov eax, dword [ebp - 0x2fc]
mov eax, dword [eax]
inc eax
mov ecx, dword [ebp - 0x2fc]
mov dword [ecx], eax
push 2
lea ecx, [ebp - 0x500]
call fcn.1002b7f6
cmp dword [eax], 0
jg 0x10027725
mov dword [ebp - 0x568], 0x5daa08bb
mov dword [ebp - 0x63c], 0xf74f57b1
lea eax, [ebp - 0x500]
push eax
lea eax, [ebp - 0x6d4]
push eax
call fcn.10025a1e
pop ecx
pop ecx
push 1
lea eax, [ebp - 0x63c]
push eax
push 0x3a07
push 0x5251
push 0x14f1
push 0x3486
push 0x55e0
lea eax, [ebp - 0x568]
push eax
push 1
push 1
lea eax, [ebp - 0x6a4]
push eax
lea eax, [ebp - 0x6d4]
push eax
push 0x87a
push 0x6060
push 0x7d4c
lea eax, [ebp - 0x500]
push eax
push 0x1d3c
push 0x4107
call fcn.1001dab6
add esp, 0x48
jmp 0x1002765a
mov byte [ebp - 4], 0xa
lea ecx, [ebp - 0x500]
call fcn.1002b77b
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x6d4]
call fcn.1002b77b
mov eax, dword [ebp - 0x1d0]
movzx eax, word [eax]
cmp eax, 0x5a4d
je 0x10027871
mov dword [ebp - 0x10c], 1
mov dword [ebp - 0x570], 0
mov dword [ebp - 0x5d8], 5
mov dword [ebp - 0x578], 0xfffffffe
mov dword [ebp - 0x788], 0x686a
mov dword [ebp - 0x784], 0x686a
mov dword [ebp - 0x780], 0x686a
mov dword [ebp - 0x77c], 0x686a
lea ecx, [ebp - 0x201]
call fcn.1002b805
push eax
lea eax, [ebp - 0x778]
push eax
lea eax, [ebp - 0x788]
push eax
lea ecx, [ebp - 0xa1c]
call fcn.1002b808
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0x98c]
call fcn.1002b755
mov dword [ebp - 4], 0xc
mov dword [ebp - 0x10c], 0xffffffe9
jmp 0x100277fc
mov eax, dword [ebp - 0x10c]
inc eax
mov dword [ebp - 0x10c], eax
cmp dword [ebp - 0x10c], 0x1b
je 0x1002785b
mov dword [ebp - 0x5d4], 0x3e38693
lea eax, [ebp - 0x570]
push eax
lea eax, [ebp - 0x10c]
push eax
push 0x6ef
push 0
push 0x2fbf
push 1
lea eax, [ebp - 0x5d4]
push eax
push 1
push 0x7d64
lea eax, [ebp - 0x578]
push eax
push 0x2374
push 0x7a0b
lea eax, [ebp - 0x5d8]
push eax
call fcn.10022e30
add esp, 0x34
jmp 0x100277ef
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x98c]
call fcn.1002b77b
xor eax, eax
jmp 0x1002ab96
lea eax, [ebp - 0x1d0]
push eax
lea eax, [ebp + 8]
push eax
lea eax, [ebp - 0x100]
push eax
call fcn.10025a63
add esp, 0xc
push 2
lea ecx, [ebp - 0x50c]
call fcn.1002b6f7
mov dword [ebp - 4], 0xd
mov dword [ebp - 0x64], 0
mov dword [ebp - 0x5c], 0
jmp 0x100278b6
mov eax, dword [ebp - 0x5c]
inc eax
mov dword [ebp - 0x5c], eax
cmp dword [ebp - 0x5c], 2
jge 0x100278d2
push dword [ebp - 0x5c]
lea ecx, [ebp - 0x50c]
call fcn.1002b7f6
mov dword [eax], 1
jmp 0x100278af
mov dword [ebp - 0x5c], 0
jmp 0x100278e2
mov eax, dword [ebp - 0x5c]
inc eax
mov dword [ebp - 0x5c], eax
cmp dword [ebp - 0x5c], 4
jge 0x100278f8
mov eax, dword [ebp - 0x5c]
mov dword [ebp + eax*4 - 0x9d4], 0xb9c279a2
jmp 0x100278db
mov dword [ebp - 0x64], 0
jmp 0x10027908
mov eax, dword [ebp - 0x64]
inc eax
mov dword [ebp - 0x64], eax
cmp dword [ebp - 0x64], 1
jg 0x10027a75
mov dword [ebp - 0x404], 0xfffffffe
call fcn.10025a91
push dword [ebp - 0x64]
lea ecx, [ebp - 0x50c]
call fcn.1002b7f6
mov esi, eax
push dword [ebp - 0x64]
lea ecx, [ebp - 0x50c]
call fcn.1002b7f6
mov ecx, dword [esi]
cmp ecx, dword [eax]
jl 0x10027951
mov dword [ebp - 0x474], 1
jmp 0x10027958
and dword [ebp - 0x474], 0
push dword [ebp - 0x64]
lea ecx, [ebp - 0x50c]
call fcn.1002b7f6
mov eax, dword [eax]
sub eax, 0x1e616a2f
cmp dword [ebp - 0x474], eax
jge 0x10027981
mov dword [ebp - 0x304], 1
jmp 0x10027988
and dword [ebp - 0x304], 0
cmp dword [ebp - 0x304], 0x8589
jl 0x100279a0
mov dword [ebp - 0x3fc], 1
jmp 0x100279a7
and dword [ebp - 0x3fc], 0
mov eax, dword [ebp - 0x64]
cmp dword [ebp - 0x3fc], eax
jne 0x100279be
mov dword [ebp - 0x30c], 1
jmp 0x100279c5
and dword [ebp - 0x30c], 0
push 0
lea ecx, [ebp - 0x50c]
call fcn.1002b7f6
mov ecx, dword [ebp - 0x30c]
cmp ecx, dword [eax]
jge 0x100279e8
mov dword [ebp - 0x490], 1
jmp 0x100279ef
and dword [ebp - 0x490], 0
cmp dword [ebp - 0x490], 0xc700
jge 0x10027a07
mov dword [ebp - 0x314], 1
jmp 0x10027a0e
and dword [ebp - 0x314], 0
mov eax, dword [ebp - 0x314]
mov dword [ebp - 0x404], eax
cmp dword [ebp - 0x404], 0xea96
jl 0x10027a32
mov dword [ebp - 0x31c], 1
jmp 0x10027a39
and dword [ebp - 0x31c], 0
cmp dword [ebp - 0x31c], 0xcd430964
je 0x10027a51
mov dword [ebp - 0x47c], 1
jmp 0x10027a58
and dword [ebp - 0x47c], 0
mov eax, 0xb3152c58
sub eax, dword [ebp - 0x47c]
push 4
pop ecx
imul ecx, ecx, 3
mov dword [ebp + ecx - 0x9d4], eax
jmp 0x10027901
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x50c]
call fcn.1002b77b
mov eax, dword [ebp - 0x100]
cmp dword [eax], 0x4550
je 0x1002801c
push 4
lea ecx, [ebp - 0x194]
call fcn.1002b6f7
mov dword [ebp - 4], 0xe
mov dword [ebp - 0x38], 0x2ba39464
mov dword [ebp - 0x710], 0
mov dword [ebp - 0x70c], 0
mov dword [ebp - 0x708], 0
mov dword [ebp - 0x704], 0
mov dword [ebp - 0x11c], 0xfffffff6
lea eax, [ebp - 0x194]
push eax
lea eax, [ebp - 0x8dc]
push eax
call fcn.10025ab7
pop ecx
pop ecx
mov dword [ebp - 0x38], 0
jmp 0x10027b08
mov eax, dword [ebp - 0x38]
inc eax
mov dword [ebp - 0x38], eax
cmp dword [ebp - 0x38], 3
jg 0x10028006
mov dword [ebp - 0x28], 0x17f75960
mov dword [ebp - 0x590], 7
mov dword [ebp - 0x28], 0
jmp 0x10027b33
mov eax, dword [ebp - 0x28]
inc eax
mov dword [ebp - 0x28], eax
cmp dword [ebp - 0x28], 3
jg 0x10027fd8
mov dword [ebp - 0x8c], 0x622a149c
mov dword [ebp - 0x598], 0xffffffff
push 0x3e9c
push 0x5f3c
push 0x4e2d
push 0x47a3
push 1
push 1
push 1
call fcn.1001e3d6
add esp, 0x1c
mov dword [ebp - 0x8c], 3
jmp 0x10027b8c
mov eax, dword [ebp - 0x8c]
dec eax
mov dword [ebp - 0x8c], eax
cmp dword [ebp - 0x8c], 0
jl 0x10027fd3
mov dword [ebp - 0x84], 0xfffffff7
mov dword [ebp - 0xfc], 0xe45db0ff
mov dword [ebp - 0x84], 0
jmp 0x10027bc6
mov eax, dword [ebp - 0x84]
inc eax
mov dword [ebp - 0x84], eax
cmp dword [ebp - 0x84], 3
jg 0x10027fce
mov dword [ebp - 0x48c], 0xd3b05e26
mov dword [ebp - 0x5f8], 0
push dword [ebp - 0x38]
lea ecx, [ebp - 0x194]
call fcn.1002b7f6
cmp dword [eax], 0
jne 0x10027d61
mov eax, dword [ebp - 0x28]
sub eax, 0x95dbc2a
cmp eax, dword [ebp - 0x28]
jg 0x10027c17
mov dword [ebp - 0x580], 1
jmp 0x10027c1e
and dword [ebp - 0x580], 0
mov eax, dword [ebp - 0x28]
mov dword [ebp - 0x860], eax
cmp dword [ebp - 0x84], 0
je 0x10027c45
mov eax, 0xa3bdf78b
test eax, eax
je 0x10027c45
mov dword [ebp - 0x5e0], 1
jmp 0x10027c4c
and dword [ebp - 0x5e0], 0
push dword [ebp - 0x38]
lea ecx, [ebp - 0x194]
call fcn.1002b7f6
mov esi, dword [ebp - 0x28]
push dword [ebp - 0x38]
lea ecx, [ebp - 0x194]
call fcn.1002b7f6
imul esi, dword [eax]
mov dword [ebp - 0x324], esi
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x324]
mov dword [ebp + eax - 0x710], ecx
cmp dword [ebp - 0x324], 0
jne 0x10027ca2
cmp dword [ebp - 0x8c], 0
jne 0x10027ca2
and dword [ebp - 0x40c], 0
jmp 0x10027cac
mov dword [ebp - 0x40c], 1
push dword [ebp - 0x28]
lea ecx, [ebp - 0x194]
call fcn.1002b7f6
mov eax, dword [eax]
cmp eax, dword [ebp - 0x40c]
jle 0x10027cd0
mov dword [ebp - 0x32c], 1
jmp 0x10027cd7
and dword [ebp - 0x32c], 0
mov eax, dword [ebp - 0x84]
cmp dword [ebp - 0x32c], eax
jg 0x10027cf1
mov dword [ebp - 0x494], 1
jmp 0x10027cf8
and dword [ebp - 0x494], 0
cmp dword [ebp - 0x494], 9
jbe 0x10027d13
cmp dword [ebp - 0x28], 0
je 0x10027d13
mov dword [ebp - 0x334], 1
jmp 0x10027d1a
and dword [ebp - 0x334], 0
imul eax, dword [ebp - 0x334], 0xffff
mov dword [ebp - 0xfc], eax
mov eax, dword [ebp - 0xfc]
mov dword [ebp - 0x8e4], eax
push 0
lea ecx, [ebp - 0x194]
call fcn.1002b7f6
mov esi, eax
push 0
lea ecx, [ebp - 0x194]
call fcn.1002b7f6
mov ecx, dword [esi]
add ecx, dword [eax]
jne 0x10027d61
and dword [ebp - 0x414], 0
jmp 0x10027d6b
mov dword [ebp - 0x414], 1
push dword [ebp - 0x28]
lea ecx, [ebp - 0x194]
call fcn.1002b7f6
mov ecx, dword [ebp - 0x414]
cmp ecx, dword [eax]
jne 0x10027d9d
cmp dword [ebp - 0x8c], 0
je 0x10027d9d
xor eax, eax
inc eax
je 0x10027d9d
mov dword [ebp - 0x33c], 1
jmp 0x10027da4
and dword [ebp - 0x33c], 0
mov eax, dword [ebp - 0x84]
cmp dword [ebp - 0x33c], eax
jne 0x10027dbe
mov dword [ebp - 0x484], 1
jmp 0x10027dc5
and dword [ebp - 0x484], 0
cmp dword [ebp - 0x484], 1
jb 0x10027dda
mov dword [ebp - 0x344], 1
jmp 0x10027de1
and dword [ebp - 0x344], 0
mov eax, dword [ebp - 0x344]
mov dword [ebp - 0x11c], eax
push dword [ebp - 0x38]
lea ecx, [ebp - 0x194]
call fcn.1002b7f6
push 4
pop eax
shl eax, 1
mov ecx, dword [ebp - 0xfc]
cmp dword [ebp + eax - 0x710], ecx
jl 0x10027e1b
mov dword [ebp - 0x588], 1
jmp 0x10027e22
and dword [ebp - 0x588], 0
cmp dword [ebp - 0x28], 0xfffffff6
jne 0x10027e34
mov dword [ebp - 0x41c], 1
jmp 0x10027e3b
and dword [ebp - 0x41c], 0
mov eax, dword [ebp - 0x41c]
inc eax
je 0x10027e63
push dword [ebp - 0x38]
lea ecx, [ebp - 0x194]
call fcn.1002b7f6
cmp dword [eax], 0
je 0x10027e63
mov dword [ebp - 0x34c], 1
jmp 0x10027e6a
and dword [ebp - 0x34c], 0
cmp dword [ebp - 0x34c], 2
jne 0x10027e7f
mov dword [ebp - 0x49c], 1
jmp 0x10027e86
and dword [ebp - 0x49c], 0
push dword [ebp - 0x38]
lea ecx, [ebp - 0x194]
call fcn.1002b7f6
mov esi, eax
push dword [ebp - 0x38]
lea ecx, [ebp - 0x194]
call fcn.1002b7f6
mov ecx, dword [ebp - 0x49c]
imul ecx, dword [eax]
cmp dword [esi], ecx
jne 0x10027ebd
mov dword [ebp - 0x354], 1
jmp 0x10027ec4
and dword [ebp - 0x354], 0
push dword [ebp - 0x28]
lea ecx, [ebp - 0x194]
call fcn.1002b7f6
mov ecx, dword [ebp - 0x354]
cmp ecx, dword [eax]
jg 0x10027ee8
mov dword [ebp - 0x424], 1
jmp 0x10027eef
and dword [ebp - 0x424], 0
cmp dword [ebp - 0x424], 0xafa0b2b0
jae 0x10027f07
mov dword [ebp - 0x35c], 1
jmp 0x10027f0e
and dword [ebp - 0x35c], 0
mov eax, dword [ebp - 0x48c]
cmp dword [ebp - 0x35c], eax
jge 0x10027f28
mov dword [ebp - 0x5e8], 1
jmp 0x10027f2f
and dword [ebp - 0x5e8], 0
mov eax, dword [ebp - 0xfc]
mov dword [ebp - 0x868], eax
mov eax, dword [ebp - 0xfc]
cmp dword [ebp - 0x48c], eax
jne 0x10027f55
mov dword [ebp - 0x364], 1
jmp 0x10027f5c
and dword [ebp - 0x364], 0
mov eax, dword [ebp - 0x590]
cmp dword [ebp - 0x364], eax
jne 0x10027fa5
mov dword [ebp - 0x5f0], 0x3b579419
cmp dword [ebp - 0x5f0], 0
je 0x10027f7f
jmp 0x10027fce
lea eax, [ebp - 0x8c]
push eax
push 1
push 1
push 0x68c8
lea eax, [ebp - 0x598]
push eax
push 0x4f6f
call fcn.1001e507
add esp, 0x18
jmp 0x10027fc9
push 0x5789
push 0x3262
push 0
lea eax, [ebp - 0x5f8]
push eax
push 1
push 1
push 0x2a9b
call fcn.10022864
add esp, 0x1c
jmp 0x10027bb9
jmp 0x10027b7f
jmp 0x10027b2c
mov dword [ebp - 0x11c], 3
jmp 0x10027ff1
mov eax, dword [ebp - 0x11c]
dec eax
mov dword [ebp - 0x11c], eax
cmp dword [ebp - 0x11c], 0
jl 0x10028001
call fcn.10025afc
jmp 0x10027fe4
jmp 0x10027b01
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x194]
call fcn.1002b77b
xor eax, eax
jmp 0x1002ab96
mov dword [ebp - 0x890], 0x44accb24
mov dword [ebp - 0x948], 8
push 2
lea ecx, [ebp - 0x8d4]
call fcn.1002b6f7
mov dword [ebp - 4], 0xf
mov dword [ebp - 0x44], 0
jmp 0x10028054
mov eax, dword [ebp - 0x44]
inc eax
mov dword [ebp - 0x44], eax
cmp dword [ebp - 0x44], 1
jge 0x1002806a
mov eax, dword [ebp - 0x44]
mov dword [ebp + eax*4 - 0x158], 0xd313dd33
jmp 0x1002804d
mov dword [ebp - 0x44], 0
jmp 0x1002807a
mov eax, dword [ebp - 0x44]
inc eax
mov dword [ebp - 0x44], eax
cmp dword [ebp - 0x44], 3
jge 0x10028090
mov eax, dword [ebp - 0x44]
mov dword [ebp + eax*4 - 0x8b4], 7
jmp 0x10028073
lea eax, [ebp - 0x8d4]
push eax
lea eax, [ebp - 0x44]
push eax
call fcn.10025b35
pop ecx
pop ecx
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0x158], 3
jmp 0x100280d0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x158]
inc eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x158], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x158], 5
jle 0x10028733
push 4
lea ecx, [ebp - 0x4e4]
call fcn.1002b6f7
mov byte [ebp - 4], 0x10
mov dword [ebp - 0x898], 1
mov dword [ebp - 0x904], 0xe813a3db
mov dword [ebp - 0x8a0], 0
mov dword [ebp - 0x92c], 0x40ca7005
mov dword [ebp - 0x8a8], 0
push 2
lea ecx, [ebp - 0x8c4]
call fcn.1002b6f7
mov byte [ebp - 4], 0x11
mov dword [ebp - 0x90c], 0xffffffff
push 1
lea eax, [ebp - 0x4e4]
push eax
push 0x2545
push 1
push 1
lea eax, [ebp - 0xb0]
push eax
call fcn.1001e7d0
add esp, 0x18
mov dword [ebp - 0xb0], 0
jmp 0x1002817c
mov eax, dword [ebp - 0xb0]
inc eax
mov dword [ebp - 0xb0], eax
cmp dword [ebp - 0xb0], 2
jge 0x10028198
mov eax, dword [ebp - 0xb0]
mov dword [ebp + eax*4 - 0x9e4], 0xb8c105a8
jmp 0x1002816f
push 0x17f3
push 0x5c25
push 0x4775
lea eax, [ebp - 0x8c4]
push eax
push 0xcd9
push 0x105c
push 1
push 1
lea eax, [ebp - 0xb0]
push eax
call fcn.1001ea02
add esp, 0x24
push 1
lea ecx, [ebp - 0x4e4]
call fcn.1002b7f6
and dword [eax], 0
jmp 0x10028201
push 1
lea ecx, [ebp - 0x4e4]
call fcn.1002b7f6
mov dword [ebp - 0x42c], eax
mov eax, dword [ebp - 0x42c]
mov eax, dword [eax]
inc eax
mov ecx, dword [ebp - 0x42c]
mov dword [ecx], eax
push 1
lea ecx, [ebp - 0x4e4]
call fcn.1002b7f6
cmp dword [eax], 2
jg 0x10028710
mov dword [ebp - 0x8b8], 1
mov dword [ebp - 0x910], 0x76fda02
mov dword [ebp - 0x840], 8
mov dword [ebp - 0x5a0], 0x2570
cmp dword [ebp - 0x5a0], 0x8fb
jge 0x10028553
lea ecx, [ebp - 0x980]
call fcn.1002ac78
mov byte [ebp - 4], 0x12
lea eax, [ebp - 0x208]
push eax
mov ecx, 0x1065eb30
call fcn.1002ad65
mov eax, dword [ebp - 0x208]
mov dword [ebp - 0x600], eax
mov eax, dword [ebp - 0x208]
dec eax
mov dword [ebp - 0x208], eax
cmp dword [ebp - 0x600], 0
je 0x10028544
lea eax, [ebp - 0x1ec]
push eax
lea eax, [ebp - 0x6e8]
push eax
mov ecx, 0x1065eb30
call fcn.1002b0cf
mov ecx, eax
call fcn.1002ad65
mov ecx, 0x108ad180
call fcn.1002bb19
movzx eax, al
test eax, eax
jne 0x100282d1
mov ecx, 0x108ad180
call fcn.1002bc0f
jmp 0x100282b4
mov ecx, 0x108ad1d8
call fcn.1002bb19
movzx eax, al
test eax, eax
jne 0x100282ee
mov ecx, 0x108ad1d8
call fcn.1002bc0f
jmp 0x100282d1
and dword [ebp - 0xe0], 0
mov eax, dword [ebp - 0x1ec]
mov dword [ebp - 0x5ac], eax
mov eax, dword [ebp - 0x1ec]
dec eax
mov dword [ebp - 0x1ec], eax
cmp dword [ebp - 0x5ac], 0
je 0x100283a9
lea eax, [ebp - 0x36c]
push eax
mov ecx, 0x1065eb30
call fcn.1002ad65
lea edx, [ebp - 0x980]
mov ecx, eax
call fcn.10030058
mov edx, 0x10007890
lea ecx, [ebp - 0x980]
call fcn.1003041d
movzx eax, al
test eax, eax
je 0x1002837b
cvtsi2sd xmm0, dword [ebp - 0x36c]
divsd xmm0, qword [0x10007ec0]
movsd qword [ebp - 0x91c], xmm0
lea eax, [ebp - 0x91c]
push eax
mov ecx, 0x108ad180
call fcn.1002bbd0
jmp 0x100283a4
cvtsi2sd xmm0, dword [ebp - 0x36c]
divsd xmm0, qword [0x10007ec0]
movsd qword [ebp - 0x874], xmm0
lea eax, [ebp - 0x874]
push eax
mov ecx, 0x108ad1d8
call fcn.1002bbd0
jmp 0x100282f5
mov ecx, 0x108ad180
call fcn.1002bb19
movzx eax, al
test eax, eax
je 0x100283cf
mov ecx, 0x108ad1d8
call fcn.1002bb19
movzx eax, al
test eax, eax
jne 0x10028523
movsd xmm0, qword [0x10007e90]
movsd qword [ebp - 0x210], xmm0
mov ecx, 0x108ad1d8
call fcn.1002bb19
movzx eax, al
test eax, eax
je 0x10028401
mov ecx, 0x108ad180
call fcn.1002bb19
movzx eax, al
test eax, eax
jne 0x10028410
mov eax, dword [ebp - 0xe0]
inc eax
mov dword [ebp - 0xe0], eax
jmp 0x10028415
jmp 0x10028523
mov ecx, 0x108ad180
call fcn.1002bb19
movzx eax, al
test eax, eax
jne 0x10028478
mov ecx, 0x108ad180
call fcn.1002bbd9
movsd xmm0, qword [ebp - 0x210]
addsd xmm0, qword [eax]
movsd xmm1, qword [ebp - 0x6e8]
comisd xmm1, xmm0
jb 0x10028474
mov ecx, 0x108ad180
call fcn.1002bbd9
movsd xmm0, qword [ebp - 0x210]
addsd xmm0, qword [eax]
movsd qword [ebp - 0x210], xmm0
mov ecx, 0x108ad180
call fcn.1002bc0f
jmp 0x10028476
jmp 0x10028478
jmp 0x10028415
movsd xmm0, qword [0x10007e90]
movsd qword [ebp - 0x210], xmm0
mov ecx, 0x108ad1d8
call fcn.1002bb19
movzx eax, al
test eax, eax
je 0x100284aa
mov ecx, 0x108ad180
call fcn.1002bb19
movzx eax, al
test eax, eax
jne 0x100284b9
mov eax, dword [ebp - 0xe0]
inc eax
mov dword [ebp - 0xe0], eax
jmp 0x100284bb
jmp 0x10028523
mov ecx, 0x108ad1d8
call fcn.1002bb19
movzx eax, al
test eax, eax
jne 0x1002851e
mov ecx, 0x108ad1d8
call fcn.1002bbd9
movsd xmm0, qword [ebp - 0x210]
addsd xmm0, qword [eax]
movsd xmm1, qword [ebp - 0x6e8]
comisd xmm1, xmm0
jb 0x1002851a
mov ecx, 0x108ad1d8
call fcn.1002bbd9
movsd xmm0, qword [ebp - 0x210]
addsd xmm0, qword [eax]
movsd qword [ebp - 0x210], xmm0
mov ecx, 0x108ad1d8
call fcn.1002bc0f
jmp 0x1002851c
jmp 0x1002851e
jmp 0x100284bb
jmp 0x100283a9
push fcn.1002fce0
push dword [ebp - 0xe0]
mov ecx, 0x1065ea78
call fcn.1002b29f
mov ecx, eax
call fcn.1002b293
jmp 0x1002826f
mov byte [ebp - 4], 0x11
lea ecx, [ebp - 0x980]
call fcn.1002acdb
mov dword [ebp - 0x844], 9
mov dword [ebp - 0x608], 0x24bf
cmp dword [ebp - 0x608], 0x124d
jge 0x10028607
lea eax, [ebp - 0x22c]
push eax
lea eax, [ebp - 0xb8]
push eax
mov ecx, 0x1065eb30
call fcn.1002ad65
mov ecx, eax
call fcn.1002ad65
mov eax, dword [ebp - 0x22c]
mov dword [ebp - 0x5b8], eax
mov eax, dword [ebp - 0x22c]
dec eax
mov dword [ebp - 0x22c], eax
cmp dword [ebp - 0x5b8], 0
je 0x100285eb
mov eax, dword [ebp - 0xb8]
cdq
push 0xa
pop ecx
idiv ecx
test edx, edx
jle 0x100285d7
mov eax, dword [ebp - 0xb8]
dec eax
mov dword [ebp - 0xb8], eax
jmp 0x100285e9
mov eax, dword [ebp - 0xb8]
cdq
push 0xa
pop ecx
idiv ecx
mov dword [ebp - 0xb8], eax
jmp 0x10028596
push fcn.1002fce0
push dword [ebp - 0xb8]
mov ecx, 0x1065ea78
call fcn.1002b29f
mov ecx, eax
call fcn.1002b293
mov dword [ebp - 0x84c], 0xffffffff
mov dword [ebp - 0x854], 0xffffffff
mov dword [ebp - 0x85c], 0x9ed7d413
mov dword [ebp - 0x864], 7
mov dword [ebp - 0x86c], 0x73a151cd
mov dword [ebp - 0x878], 0x7557bc77
mov dword [ebp - 0x5c4], 0
push 1
lea ecx, [ebp - 0x4e4]
call fcn.1002b7f6
mov eax, dword [eax]
mov eax, dword [ebp + eax*4 - 0x8b4]
mov dword [ebp - 0x4a4], eax
push 1
lea ecx, [ebp - 0x4e4]
call fcn.1002b7f6
mov eax, dword [eax]
mov ecx, dword [ebp - 0x4a4]
mov dword [ebp + eax*4 - 0x8b4], ecx
cmp dword [ebp - 0x4a4], 0
je 0x100286bc
mov dword [ebp - 0x610], 0x8a94
push 0x4580
push 0
push 0x2409
lea eax, [ebp - 0x610]
push eax
push 0x906
push 1
call fcn.1001ebff
add esp, 0x18
jmp 0x100286fe
mov byte [ebp - 0xa2], 0
movzx eax, byte [ebp - 0xa2]
test eax, eax
je 0x100286fe
push 0x4db
push 0x141b
push 0x178a
push 0x259
push 0x23c2
push 0x11ec
push 0x22b6
push 0x36
push 0xe3
call dword [sym.imp.GDI32.dll_Arc]
lea eax, [ebp - 0x5c4]
push eax
call fcn.10025b7d
pop ecx
jmp 0x100281dd
mov byte [ebp - 4], 0x10
lea ecx, [ebp - 0x8c4]
call fcn.1002b77b
mov byte [ebp - 4], 0xf
lea ecx, [ebp - 0x4e4]
call fcn.1002b77b
jmp 0x100280b5
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x8d4]
call fcn.1002b77b
push 0x723d
push 1
lea eax, [ebp - 0x100]
push eax
push 0x1b0f
lea eax, [ebp - 0x128]
push eax
push 1
call fcn.1001ebff
add esp, 0x18
cmp dword [ebp - 0x128], 0
jne 0x10028932
push 1
lea ecx, [ebp - 0x7c8]
call fcn.1002b6f7
mov dword [ebp - 4], 0x13
mov dword [ebp - 0x50], 0
mov dword [ebp - 0x628], 0xd3672969
mov dword [ebp - 0x5d0], 0xb39523dd
lea eax, [ebp - 0x884]
push eax
push 0x2ad7
push 1
lea eax, [ebp - 0x7c8]
push eax
push 1
push 1
call fcn.1001ecca
add esp, 0x18
mov dword [ebp - 0x50], 0
jmp 0x100287d3
mov eax, dword [ebp - 0x50]
inc eax
mov dword [ebp - 0x50], eax
cmp dword [ebp - 0x50], 0
jg 0x100287f2
mov dword [ebp - 0x618], 6
lea eax, [ebp - 0x618]
push eax
call fcn.10025b96
pop ecx
jmp 0x100287cc
mov dword [ebp - 0x50], 0
jmp 0x10028802
mov eax, dword [ebp - 0x50]
inc eax
mov dword [ebp - 0x50], eax
cmp dword [ebp - 0x50], 0
jg 0x100288a5
mov dword [ebp - 0x620], 0x41ce3cb5
push 2
lea ecx, [ebp - 0x7f8]
call fcn.1002b6f7
mov byte [ebp - 4], 0x14
mov dword [ebp - 0x180], 0
jmp 0x10028840
mov eax, dword [ebp - 0x180]
inc eax
mov dword [ebp - 0x180], eax
cmp dword [ebp - 0x180], 2
jge 0x10028862
push dword [ebp - 0x180]
lea ecx, [ebp - 0x7f8]
call fcn.1002b7f6
mov dword [eax], 0xfffffff6
jmp 0x10028833
lea eax, [ebp - 0x5d0]
push eax
lea eax, [ebp - 0x620]
push eax
lea eax, [ebp - 0x628]
push eax
lea eax, [ebp - 0x50]
push eax
lea eax, [ebp - 0x7c8]
push eax
lea eax, [ebp - 0x7f8]
push eax
call fcn.10025c0a
add esp, 0x18
mov byte [ebp - 4], 0x13
lea ecx, [ebp - 0x7f8]
call fcn.1002b77b
jmp 0x100287fb
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x7c8]
call fcn.1002b77b
mov dword [ebp - 0x67c], 0x6e871d97
mov dword [ebp - 0x5dc], 0xffffffff
mov dword [ebp - 0x160], 0
jmp 0x100288e1
mov eax, dword [ebp - 0x160]
inc eax
mov dword [ebp - 0x160], eax
cmp dword [ebp - 0x160], 4
jge 0x100288fd
mov eax, dword [ebp - 0x160]
mov dword [ebp + eax*4 - 0x95c], 0x2403
jmp 0x100288d4
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x95c]
dec eax
push 4
pop ecx
shl ecx, 1
mov dword [ebp + ecx - 0x95c], eax
lea eax, [ebp - 0x5dc]
push eax
lea eax, [ebp - 0x67c]
push eax
call fcn.10025d21
pop ecx
pop ecx
xor eax, eax
jmp 0x1002ab96
mov dword [ebp - 0xac], 0xb9f9b31
push 4
lea ecx, [ebp - 0x6a0]
call fcn.1002b6f7
mov dword [ebp - 4], 0x15
push 0x7d5a
push 0x3ab0
push 0x1ced
push 1
push 0x343d
push 0x14af
push 0x34c8
lea eax, [ebp - 0x83c]
push eax
push 0x5743
push 0x13d6
push 0x31f8
push 0
lea eax, [ebp - 0x6a0]
push eax
call fcn.1001f4d8
add esp, 0x34
mov dword [ebp - 0xac], 0xffffffee
jmp 0x100289b0
mov eax, dword [ebp - 0xac]
inc eax
mov dword [ebp - 0xac], eax
cmp dword [ebp - 0xac], 0xfffffff8
jge 0x1002913f
mov dword [ebp - 0x24], 0xffffffff
mov dword [ebp - 0x2c], 0x93e9323d
push 2
lea ecx, [ebp - 0x7ec]
call fcn.1002b6f7
mov byte [ebp - 4], 0x16
mov dword [ebp - 0xb4], 0x676bd76d
mov dword [ebp - 0x5e4], 0x13d9
cmp dword [ebp - 0x5e4], 0xaf7
jge 0x10028c54
movsd xmm0, qword [0x10007e90]
movsd qword [ebp - 0x1ac], xmm0
and dword [ebp - 0x19c], 0
lea eax, [ebp - 0x19c]
push eax
push 0x10007740
call fcn.10055feb
pop ecx
pop ecx
movsd xmm0, qword [0x10007e90]
movsd qword [ebp - 0x5c0], xmm0
mov eax, dword [ebp - 0x19c]
mov dword [ebp - 0x64c], eax
mov eax, dword [ebp - 0x19c]
dec eax
mov dword [ebp - 0x19c], eax
cmp dword [ebp - 0x64c], 0
je 0x10028a93
lea eax, [ebp - 0x1ac]
push eax
push 0x10007898
call fcn.10055feb
pop ecx
pop ecx
movsd xmm0, qword [ebp - 0x1ac]
comisd xmm0, xmmword [ebp - 0x5c0]
jbe 0x10028a91
movsd xmm0, qword [ebp - 0x1ac]
movsd qword [ebp - 0x5c0], xmm0
jmp 0x10028a3a
and dword [ebp - 0x168], 0
lea eax, [ebp - 0x168]
push eax
push 0x10007740
call fcn.10055feb
pop ecx
pop ecx
movsd xmm0, qword [0x10007e90]
movsd qword [ebp - 0x4ec], xmm0
mov eax, dword [ebp - 0x168]
mov dword [ebp - 0x5ec], eax
mov eax, dword [ebp - 0x168]
dec eax
mov dword [ebp - 0x168], eax
cmp dword [ebp - 0x5ec], 0
je 0x10028b16
lea eax, [ebp - 0x1ac]
push eax
push 0x10007898
call fcn.10055feb
pop ecx
pop ecx
movsd xmm0, qword [ebp - 0x1ac]
comisd xmm0, xmmword [ebp - 0x4ec]
jbe 0x10028b14
movsd xmm0, qword [ebp - 0x1ac]
movsd qword [ebp - 0x4ec], xmm0
jmp 0x10028abd
and dword [ebp - 0x130], 0
lea eax, [ebp - 0x130]
push eax
push 0x10007740
call fcn.10055feb
pop ecx
pop ecx
movsd xmm0, qword [0x10007ed0]
movsd qword [ebp - 0x5b4], xmm0
mov eax, dword [ebp - 0x130]
mov dword [ebp - 0x6b8], eax
mov eax, dword [ebp - 0x130]
dec eax
mov dword [ebp - 0x130], eax
cmp dword [ebp - 0x6b8], 0
je 0x10028b99
lea eax, [ebp - 0x1ac]
push eax
push 0x10007898
call fcn.10055feb
pop ecx
pop ecx
movsd xmm0, qword [ebp - 0x5b4]
comisd xmm0, xmmword [ebp - 0x1ac]
jbe 0x10028b97
movsd xmm0, qword [ebp - 0x1ac]
movsd qword [ebp - 0x5b4], xmm0
jmp 0x10028b40
movsd xmm0, qword [0x10007e90]
movsd qword [ebp - 0x6f0], xmm0
movsd xmm0, qword [0x10007e90]
movsd qword [ebp - 0x5a8], xmm0
lea eax, [ebp - 0x5a8]
push eax
lea eax, [ebp - 0x6f0]
push eax
push 0x1000789c
call fcn.10055feb
add esp, 0xc
movsd xmm0, qword [ebp - 0x5a8]
mulsd xmm0, qword [ebp - 0x4ec]
movsd xmm1, qword [ebp - 0x5a8]
mulsd xmm1, qword [ebp - 0x4ec]
movsd xmm2, qword [ebp - 0x6f0]
mulsd xmm2, qword [ebp - 0x5b4]
addsd xmm1, xmm2
divsd xmm0, xmm1
push ecx
push ecx
movsd qword [esp], xmm0
call fcn.10053ed4
pop ecx
pop ecx
fstp qword [ebp - 0x8ec]
movsd xmm0, qword [ebp - 0x8ec]
mulsd xmm0, qword [ebp - 0x5c0]
movsd qword [ebp - 0x880], xmm0
push ecx
push ecx
movsd xmm0, qword [ebp - 0x880]
movsd qword [esp], xmm0
push 0x100078a4
call fcn.10056438
add esp, 0xc
push 0x3405
lea eax, [ebp - 0xdc]
push eax
lea eax, [ebp - 0x7ec]
push eax
push 1
push 0x3ea2
push 0x7699
push 1
push 0x46ad
push 0x4674
call fcn.1001f064
add esp, 0x24
mov dword [ebp - 0xdc], 0
jmp 0x10028ca0
mov eax, dword [ebp - 0xdc]
inc eax
mov dword [ebp - 0xdc], eax
cmp dword [ebp - 0xdc], 1
jge 0x10028cbc
mov eax, dword [ebp - 0xdc]
mov dword [ebp + eax*4 - 0x1c8], 0x58f87662
jmp 0x10028c93
mov dword [ebp - 0x24], 0
jmp 0x10028ccc
mov eax, dword [ebp - 0x24]
inc eax
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 0x11
jg 0x10028f3e
mov dword [ebp - 0x134], 0
jmp 0x10028cef
mov eax, dword [ebp - 0x134]
inc eax
mov dword [ebp - 0x134], eax
cmp dword [ebp - 0x134], 2
jge 0x10028d0b
mov eax, dword [ebp - 0x134]
mov dword [ebp + eax*4 - 0x4f4], 1
jmp 0x10028ce2
mov dword [ebp - 0x2c], 0xdd8d1303
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x2c]
mov dword [ebp + eax - 0x4f4], ecx
mov dword [ebp - 0x2c], 5
jmp 0x10028d32
mov eax, dword [ebp - 0x2c]
inc eax
mov dword [ebp - 0x2c], eax
cmp dword [ebp - 0x2c], 0x1a
jne 0x10028f39
mov dword [ebp - 0x5f4], 0x7bb00868
mov dword [ebp - 0x38c], 0xffffffff
mov dword [ebp - 0x654], 0
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x4f4], 1
jl 0x10028d76
mov dword [ebp - 0x374], 1
jmp 0x10028d7d
and dword [ebp - 0x374], 0
cmp dword [ebp - 0x374], 0xf2a6ca0c
je 0x10028d95
mov dword [ebp - 0x434], 1
jmp 0x10028d9c
and dword [ebp - 0x434], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x4f4]
cmp eax, dword [ebp - 0x434]
jge 0x10028dbd
mov dword [ebp - 0x37c], 1
jmp 0x10028dc4
and dword [ebp - 0x37c], 0
mov eax, dword [ebp - 0x2c]
cmp dword [ebp - 0x37c], eax
jge 0x10028de1
cmp dword [ebp - 0x38c], 0
jne 0x10028de1
and dword [ebp - 0x4ac], 0
jmp 0x10028deb
mov dword [ebp - 0x4ac], 1
mov eax, 0xbbd4aa41
sub eax, dword [ebp - 0x4ac]
cmp eax, dword [ebp - 0xac]
jle 0x10028e0a
mov dword [ebp - 0x384], 1
jmp 0x10028e11
and dword [ebp - 0x384], 0
push 0
lea ecx, [ebp - 0x7ec]
call fcn.1002b7f6
mov dword [ebp - 0x1f4], eax
mov eax, dword [ebp - 0x2c]
imul eax, dword [ebp - 0x384]
add eax, dword [ebp - 0x24]
mov dword [ebp - 0xb4], eax
mov eax, dword [ebp - 0x1f4]
mov eax, dword [eax]
sub eax, dword [ebp - 0xb4]
neg eax
mov ecx, dword [ebp - 0x1f4]
mov ecx, dword [ecx]
inc ecx
mov edx, dword [ebp - 0x1f4]
mov dword [edx], ecx
test eax, eax
je 0x10028e6f
push 3
pop eax
test eax, eax
je 0x10028e6f
mov dword [ebp - 0x43c], 1
jmp 0x10028e76
and dword [ebp - 0x43c], 0
mov eax, dword [ebp - 0x24]
imul eax, dword [ebp - 0x43c]
imul eax, dword [ebp - 0x38c]
mov dword [ebp - 0x214], eax
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x214]
mov dword [ebp + eax - 0x4f4], ecx
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x214]
mov dword [ebp + eax - 0x1c8], ecx
push 1
lea ecx, [ebp - 0x6a0]
call fcn.1002b7f6
mov ecx, dword [ebp - 0x214]
cmp ecx, dword [eax]
jg 0x10028ed6
mov dword [ebp - 0x498], 1
jmp 0x10028edd
and dword [ebp - 0x498], 0
mov eax, dword [ebp - 0xac]
sub eax, dword [ebp - 0x498]
jne 0x10028efd
mov eax, 0xbf08
test eax, eax
jne 0x10028efd
and dword [ebp - 0x394], 0
jmp 0x10028f07
mov dword [ebp - 0x394], 1
mov eax, dword [ebp - 0x5f4]
cmp eax, dword [ebp - 0x394]
jge 0x10028f21
mov dword [ebp - 0x444], 1
jmp 0x10028f28
and dword [ebp - 0x444], 0
mov eax, dword [ebp - 0x444]
mov dword [ebp - 0x654], eax
jmp 0x10028d2b
jmp 0x10028cc5
mov dword [ebp - 0xb4], 0
jmp 0x10028f57
mov eax, dword [ebp - 0xb4]
inc eax
mov dword [ebp - 0xb4], eax
cmp dword [ebp - 0xb4], 0
jg 0x1002912b
mov dword [ebp - 0x7b0], 0xe11cd4ee
mov dword [ebp - 0x7ac], 0xe11cd4ee
mov dword [ebp - 0x7a8], 0xe11cd4ee
mov dword [ebp - 0x7a4], 0xe11cd4ee
lea ecx, [ebp - 0x1fa]
call fcn.1002b805
push eax
lea eax, [ebp - 0x7a0]
push eax
lea eax, [ebp - 0x7b0]
push eax
lea ecx, [ebp - 0xa0c]
call fcn.1002b808
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0x7d4]
call fcn.1002b755
mov byte [ebp - 4], 0x17
mov dword [ebp - 0x24], 0
jmp 0x10028fd5
mov eax, dword [ebp - 0x24]
dec eax
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 0
jl 0x10029117
mov dword [ebp - 0x1c0], 1
mov dword [ebp - 0x2c], 0
jmp 0x10028ff9
mov eax, dword [ebp - 0x2c]
inc eax
mov dword [ebp - 0x2c], eax
cmp dword [ebp - 0x2c], 3
jg 0x10029112
mov eax, dword [ebp - 0x24]
cmp dword [ebp + eax*4 - 0x1c8], 0
jne 0x1002908b
push 3
lea ecx, [ebp - 0x7d4]
call fcn.1002b7f6
push dword [ebp - 0x24]
lea ecx, [ebp - 0x6a0]
call fcn.1002b7f6
mov ecx, dword [ebp - 0x1c0]
cmp dword [eax], ecx
jle 0x10029041
mov dword [ebp - 0x5fc], 1
jmp 0x10029048
and dword [ebp - 0x5fc], 0
cmp dword [ebp - 0x1c0], 0x257b
jne 0x10029060
mov dword [ebp - 0x684], 1
jmp 0x10029067
and dword [ebp - 0x684], 0
mov eax, 0x91cfe0c2
test eax, eax
je 0x10029082
push 0
lea ecx, [ebp - 0x7d4]
call fcn.1002b7f6
cmp dword [eax], 0
jne 0x1002908b
and dword [ebp - 0x240], 0
jmp 0x10029095
mov dword [ebp - 0x240], 1
push 1
lea ecx, [ebp - 0x6a0]
call fcn.1002b7f6
mov ecx, dword [ebp - 0x240]
cmp ecx, dword [eax]
jne 0x100290b8
mov dword [ebp - 0x248], 1
jmp 0x100290bf
and dword [ebp - 0x248], 0
mov eax, dword [ebp - 0x1c0]
cmp dword [ebp - 0x248], eax
jge 0x100290d9
mov dword [ebp - 0x250], 1
jmp 0x100290e0
and dword [ebp - 0x250], 0
mov eax, dword [ebp - 0x24]
mov ecx, dword [ebp - 0x250]
mov dword [ebp + eax*4 - 0x1c8], ecx
push 0x22f8
push 1
push 0x7527
push 0x18de
push 1
push 1
call fcn.1001f3f6
add esp, 0x18
jmp 0x10028ff2
jmp 0x10028fce
mov byte [ebp - 4], 0x16
lea ecx, [ebp - 0x7d4]
call fcn.1002b77b
jmp 0x10028f4a
mov byte [ebp - 4], 0x15
lea ecx, [ebp - 0x7ec]
call fcn.1002b77b
jmp 0x100289a3
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x6a0]
call fcn.1002b77b
push 1
lea eax, [ebp - 0x1d0]
push eax
lea eax, [ebp - 0x100]
push eax
push 0x5920
push 0x2288
lea eax, [ebp - 0x924]
push eax
lea eax, [ebp - 0x128]
push eax
push 1
lea eax, [ebp - 0x40]
push eax
call fcn.10021bdb
add esp, 0x24
push 0x2834
push 0x2c5d
push 1
push 1
push 1
push dword [ebp + 8]
push dword [ebp - 0x40]
push dword [ebp - 0x100]
call fcn.1000b8db
add esp, 0x20
mov dword [ebp - 0x34], 4
mov dword [ebp - 0xf8], 0x959310c1
push 3
lea ecx, [ebp - 0x4d8]
call fcn.1002b6f7
mov dword [ebp - 4], 0x18
push 0x1cdc
lea eax, [ebp - 0x4d8]
push eax
lea eax, [ebp - 0x8fc]
push eax
push 1
push 1
push 0x34b7
call fcn.10021d19
add esp, 0x18
mov byte [ebp - 0x7d], 0
lea eax, [ebp - 0x7d]
push eax
call fcn.10025d5f
pop ecx
mov dword [ebp - 0x34], 0xfffffff8
jmp 0x1002920f
mov eax, dword [ebp - 0x34]
dec eax
mov dword [ebp - 0x34], eax
cmp dword [ebp - 0x34], 0xfffffff6
jle 0x10029679
push 1
lea ecx, [ebp - 0x238]
call fcn.1002b6f7
mov byte [ebp - 4], 0x19
push 2
lea ecx, [ebp - 0x6b0]
call fcn.1002b6f7
mov byte [ebp - 4], 0x1a
mov dword [ebp - 0x60c], 3
mov dword [ebp - 0xe8], 0xfffffffb
mov dword [ebp - 0x6b4], 0
lea eax, [ebp - 0x238]
push eax
lea eax, [ebp - 0x604]
push eax
call fcn.100259ab
pop ecx
pop ecx
lea eax, [ebp - 0x6b0]
push eax
lea eax, [ebp - 0x604]
push eax
call fcn.10025d97
pop ecx
pop ecx
mov esi, dword [ebp - 0x34]
push 0
lea ecx, [ebp - 0x238]
call fcn.1002b7f6
cmp esi, dword [eax]
jg 0x100292a3
mov dword [ebp - 0x258], 1
jmp 0x100292aa
and dword [ebp - 0x258], 0
mov eax, dword [ebp - 0x34]
cmp dword [ebp - 0x258], eax
jge 0x100292c1
mov dword [ebp - 0x260], 1
jmp 0x100292c8
and dword [ebp - 0x260], 0
push 0
lea ecx, [ebp - 0x238]
call fcn.1002b7f6
mov ecx, dword [ebp - 0x260]
cmp ecx, dword [eax]
je 0x100292eb
mov dword [ebp - 0x268], 1
jmp 0x100292f2
and dword [ebp - 0x268], 0
mov eax, dword [ebp - 0x34]
cmp dword [ebp - 0x268], eax
je 0x1002930c
cmp dword [ebp - 0x34], 0
jne 0x1002930c
and dword [ebp - 0x270], 0
jmp 0x10029316
mov dword [ebp - 0x270], 1
cmp dword [ebp - 0x270], 0xfffffff9
je 0x1002932b
mov dword [ebp - 0x278], 1
jmp 0x10029332
and dword [ebp - 0x278], 0
mov eax, dword [ebp - 0x34]
mov dword [ebp - 0xf8], eax
mov esi, dword [ebp - 0xf8]
imul esi, dword [ebp - 0x278]
push 0
lea ecx, [ebp - 0x238]
call fcn.1002b7f6
mov edi, eax
push 0
lea ecx, [ebp - 0x238]
call fcn.1002b7f6
mov eax, dword [eax]
add eax, dword [edi]
cmp eax, esi
jne 0x10029378
mov dword [ebp - 0x280], 1
jmp 0x1002937f
and dword [ebp - 0x280], 0
cmp dword [ebp - 0x280], 0
je 0x10029394
mov dword [ebp - 0x65c], 1
jmp 0x1002939b
and dword [ebp - 0x65c], 0
push 0
lea ecx, [ebp - 0x238]
call fcn.1002b7f6
push 0
lea ecx, [ebp - 0x4d8]
call fcn.1002b7f6
cmp dword [ebp - 0x34], 0xffff
jae 0x100293ca
mov dword [ebp - 0x288], 1
jmp 0x100293d1
and dword [ebp - 0x288], 0
cmp dword [ebp - 0x288], 0x40e13f5e
jg 0x100293e9
mov dword [ebp - 0x290], 1
jmp 0x100293f0
and dword [ebp - 0x290], 0
push 1
lea ecx, [ebp - 0x6b0]
call fcn.1002b7f6
mov ecx, dword [ebp - 0x290]
cmp ecx, dword [eax]
jg 0x1002952b
mov dword [ebp - 0x2a0], 0x95e
mov dword [ebp - 0x298], 7
lea eax, [ebp - 0xe8]
push eax
lea eax, [ebp - 0x60c]
push eax
lea eax, [ebp - 0x238]
push eax
lea eax, [ebp - 0x34]
push eax
lea eax, [ebp - 0x2a0]
push eax
lea eax, [ebp - 0x4d8]
push eax
lea eax, [ebp - 0x6b0]
push eax
lea eax, [ebp - 0xf8]
push eax
push 1
push 0x6efc
push 1
push 0x1b1f
lea eax, [ebp - 0x298]
push eax
call fcn.10021f9a
add esp, 0x34
mov dword [ebp - 0xe8], 0
jmp 0x1002948a
mov eax, dword [ebp - 0xe8]
inc eax
mov dword [ebp - 0xe8], eax
cmp dword [ebp - 0xe8], 0x1a
jle 0x10029526
mov dword [ebp - 0xf0], 0x102089c
lea eax, [ebp - 0x298]
push eax
lea eax, [ebp - 0x2a0]
push eax
push 0x638e
push 0x682c
push 1
push 0x6ae
push 0x5063
lea eax, [ebp - 0x4d8]
push eax
push 0x3bb6
push 1
push 1
push 0x7b42
lea eax, [ebp - 0xf0]
push eax
call fcn.100222c5
add esp, 0x34
mov dword [ebp - 0xf0], 0
jmp 0x10029502
mov eax, dword [ebp - 0xf0]
inc eax
mov dword [ebp - 0xf0], eax
cmp dword [ebp - 0xf0], 2
jne 0x10029521
mov byte [ebp - 0x9f], 0
lea eax, [ebp - 0x9f]
push eax
call fcn.10025ddf
pop ecx
jmp 0x100294f5
jmp 0x1002947d
jmp 0x10029615
mov dword [ebp - 0x79c], 0xa8f4439d
mov dword [ebp - 0x798], 0xa8f4439d
mov dword [ebp - 0x794], 0xa8f4439d
mov dword [ebp - 0x790], 0xa8f4439d
lea ecx, [ebp - 0x215]
call fcn.1002b805
push eax
lea eax, [ebp - 0x78c]
push eax
lea eax, [ebp - 0x79c]
push eax
lea ecx, [ebp - 0x9c4]
call fcn.1002b808
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0x6e0]
call fcn.1002b755
mov byte [ebp - 4], 0x1b
push 0x477c
push 0x571a
lea eax, [ebp - 0xf8]
push eax
lea eax, [ebp - 0x6e0]
push eax
lea eax, [ebp - 0x4d8]
push eax
lea eax, [ebp - 0x6b4]
push eax
lea eax, [ebp - 0x238]
push eax
push 1
push 1
call fcn.100226ab
add esp, 0x24
push 1
lea ecx, [ebp - 0x6e0]
call fcn.1002b7f6
cmp dword [eax], 0
je 0x10029606
mov byte [ebp - 4], 0x1a
lea ecx, [ebp - 0x6e0]
call fcn.1002b77b
mov byte [ebp - 4], 0x19
lea ecx, [ebp - 0x6b0]
call fcn.1002b77b
mov byte [ebp - 4], 0x18
lea ecx, [ebp - 0x238]
call fcn.1002b77b
jmp 0x10029679
mov byte [ebp - 4], 0x1a
lea ecx, [ebp - 0x6e0]
call fcn.1002b77b
push 1
lea ecx, [ebp - 0x4d8]
call fcn.1002b7f6
mov esi, eax
push 0
lea ecx, [ebp - 0x4d8]
call fcn.1002b7f6
mov ecx, dword [esi]
cmp ecx, dword [eax]
jl 0x10029643
mov dword [ebp - 0x2a8], 1
jmp 0x1002964a
and dword [ebp - 0x2a8], 0
mov eax, dword [ebp - 0x2a8]
mov dword [ebp - 0xf8], eax
mov byte [ebp - 4], 0x19
lea ecx, [ebp - 0x6b0]
call fcn.1002b77b
mov byte [ebp - 4], 0x18
lea ecx, [ebp - 0x238]
call fcn.1002b77b
jmp 0x10029208
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x4d8]
call fcn.1002b77b
lea eax, [ebp - 0x2b0]
push eax
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
mov esp, ebp
pop ebp
ret