Function at 0x1000af27
Capabilities:
Get file attributes
Get file size

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x1006bcf4
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
mov eax, 0x11e6c
call fcn.100672a0
push esi
push edi
movzx eax, byte [ebp + 0x28]
test eax, eax
je 0x100151bf
mov eax, dword [ebp + 0x18]
mov dword [ebp - 0xd08], eax
lea eax, [ebp + 0x14]
mov dword [ebp - 0xbf4], eax
mov eax, dword [ebp + 8]
mov dword [ebp - 0xda0], eax
mov eax, dword [ebp + 0xc]
mov dword [ebp - 0xcf0], eax
mov eax, dword [ebp + 0x30]
mov dword [ebp - 0xd00], eax
mov eax, dword [ebp + 0x1c]
mov dword [ebp - 0xdb0], eax
mov eax, dword [ebp + 0x38]
mov dword [ebp - 0xdb8], eax
mov eax, dword [ebp + 0x2c]
mov dword [ebp - 0xcf8], eax
mov eax, dword [ebp + 0x34]
mov dword [ebp - 0xd10], eax
mov eax, dword [ebp + 0x10]
mov dword [ebp - 0xda8], eax
mov eax, dword [ebp - 0xbf4]
movzx eax, byte [eax]
test eax, eax
je 0x10015067
mov eax, dword [ebp - 0xda0]
mov dword [ebp - 0xc2c], eax
mov eax, dword [ebp - 0xda8]
mov dword [ebp - 0xcfc], eax
mov eax, dword [ebp - 0xdb0]
mov dword [ebp - 0xa1c], eax
mov eax, dword [ebp - 0xdb8]
mov dword [ebp - 0x440], eax
mov dword [ebp - 0x38], 0xffff
mov dword [ebp - 0x278], 0x6917
push 1
lea ecx, [ebp - 0x10b8]
call fcn.1002c487
and dword [ebp - 4], 0
push 3
lea ecx, [ebp - 0x1374]
call fcn.1002c487
mov byte [ebp - 4], 1
mov dword [ebp - 0x124c], 1
mov dword [ebp - 0x17c], 0
jmp 0x1000b048
mov eax, dword [ebp - 0x17c]
inc eax
mov dword [ebp - 0x17c], eax
cmp dword [ebp - 0x17c], 1
jge 0x1000b064
mov eax, dword [ebp - 0x17c]
mov dword [ebp + eax*4 - 0x3c4], 0xffffffff
jmp 0x1000b03b
lea eax, [ebp - 0x17c]
push eax
push 0x1d95
push 0
lea eax, [ebp - 0x10b8]
push eax
call fcn.10019c78
add esp, 0x10
lea eax, [ebp - 0x17c]
push eax
push 0
push 0x74dd
lea eax, [ebp - 0x1374]
push eax
call fcn.10015bef
add esp, 0x10
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x38]
mov dword [ebp + eax - 0x3c4], ecx
cmp dword [ebp - 0x38], 0
jne 0x1000b0c9
cmp dword [ebp - 0x38], 0
mov eax, dword [ebp - 0x38]
cmp dword [ebp - 0x38], eax
jg 0x1000b0c9
and dword [ebp - 0x6ac], 0
jmp 0x1000b0d3
mov dword [ebp - 0x6ac], 1
mov eax, dword [ebp - 0x38]
cmp eax, dword [ebp - 0x6ac]
jne 0x1000b0f3
mov eax, 0x8fecf792
test eax, eax
je 0x1000b0f3
mov dword [ebp - 0xa44], 1
jmp 0x1000b0fa
and dword [ebp - 0xa44], 0
mov eax, dword [ebp - 0x38]
cmp dword [ebp - 0xa44], eax
jl 0x1000b111
mov dword [ebp - 0xdc0], 1
jmp 0x1000b118
and dword [ebp - 0xdc0], 0
mov eax, dword [ebp - 0x38]
mov dword [ebp - 0x1258], eax
mov eax, dword [ebp - 0x38]
add eax, dword [ebp - 0x38]
cmp eax, dword [ebp - 0x38]
jne 0x1000b138
mov dword [ebp - 0xa4c], 1
jmp 0x1000b13f
and dword [ebp - 0xa4c], 0
mov eax, dword [ebp - 0xa4c]
sub eax, dword [ebp - 0x38]
mov dword [ebp - 0x278], eax
mov dword [ebp - 0x278], 0
jmp 0x1000b167
mov eax, dword [ebp - 0x278]
inc eax
mov dword [ebp - 0x278], eax
cmp dword [ebp - 0x278], 0xf
jle 0x1000b307
mov dword [ebp - 0xa54], 9
mov dword [ebp - 0xde0], 0x281c1d99
mov dword [ebp - 0x143c], 1
mov dword [ebp - 0xdd8], 0xb6930509
mov dword [ebp - 0x1260], 1
mov dword [ebp - 0x1378], 0xfffffff6
mov dword [ebp - 0x1268], 5
mov dword [ebp - 0x147c], 3
mov dword [ebp - 0x2a4], 0xc7fd579
mov dword [ebp - 0x3a8], 0
jmp 0x1000b1e7
mov eax, dword [ebp - 0x3a8]
inc eax
mov dword [ebp - 0x3a8], eax
cmp dword [ebp - 0x3a8], 3
jge 0x1000b203
mov eax, dword [ebp - 0x3a8]
mov dword [ebp + eax*4 - 0x152c], 0xfffffffb
jmp 0x1000b1da
mov eax, dword [ebp - 0xa54]
sub eax, dword [ebp - 0xa54]
je 0x1000b22d
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x3c4], 0
je 0x1000b22d
mov dword [ebp - 0xa6c], 1
jmp 0x1000b234
and dword [ebp - 0xa6c], 0
mov eax, dword [ebp - 0x38]
mov dword [ebp - 0xa5c], eax
push 0
lea ecx, [ebp - 0x10b8]
call fcn.1002c5a0
mov ecx, dword [ebp - 0xa5c]
mov dword [eax], ecx
mov eax, dword [ebp - 0xa5c]
mov dword [ebp - 0xdc8], eax
mov eax, dword [ebp - 0x2a4]
mov dword [ebp - 0xdd0], eax
mov eax, dword [ebp - 0x2a4]
dec eax
mov dword [ebp - 0x2a4], eax
mov eax, dword [ebp - 0xdc8]
cmp eax, dword [ebp - 0xdd0]
jle 0x1000b291
mov dword [ebp - 0xa74], 1
jmp 0x1000b298
and dword [ebp - 0xa74], 0
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x3c4], 0xffffffff
je 0x1000b2b4
mov dword [ebp - 0xa64], 1
jmp 0x1000b2bb
and dword [ebp - 0xa64], 0
mov eax, dword [ebp - 0xdd8]
cmp dword [ebp - 0xa64], eax
jg 0x1000b2d5
mov dword [ebp - 0xa7c], 1
jmp 0x1000b2dc
and dword [ebp - 0xa7c], 0
mov eax, dword [ebp - 0xa6c]
add eax, dword [ebp - 0xa74]
sub eax, dword [ebp - 0xa7c]
mov dword [ebp - 0xde0], eax
cmp dword [ebp - 0x2a4], 0
je 0x1000b302
jmp 0x1000b15a
jmp 0x1000b15a
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x1374]
call fcn.1002c55e
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x10b8]
call fcn.1002c55e
mov dword [ebp - 0x284], 0x1f7e2799
mov dword [ebp - 0x9b4], 0x6046e74a
mov dword [ebp - 0x284], 0
jmp 0x1000b352
mov eax, dword [ebp - 0x284]
dec eax
mov dword [ebp - 0x284], eax
cmp dword [ebp - 0x284], 0xffffffe6
jl 0x1000b62e
push 1
lea ecx, [ebp - 0xaec]
call fcn.1002c487
mov dword [ebp - 4], 2
mov dword [ebp - 0x3a0], 0xedc7555b
mov dword [ebp - 0xdf8], 0xa9d01274
mov dword [ebp - 0x398], 0
jmp 0x1000b3a0
mov eax, dword [ebp - 0x398]
inc eax
mov dword [ebp - 0x398], eax
cmp dword [ebp - 0x398], 1
jge 0x1000b3c2
push dword [ebp - 0x398]
lea ecx, [ebp - 0xaec]
call fcn.1002c5a0
mov dword [eax], 0xb72f
jmp 0x1000b393
mov dword [ebp - 0x3a0], 0
jmp 0x1000b3db
mov eax, dword [ebp - 0x3a0]
dec eax
mov dword [ebp - 0x3a0], eax
cmp dword [ebp - 0x3a0], 0
jl 0x1000b610
mov dword [ebp - 0x30], 0x9cc14173
mov dword [ebp - 0xadc], 0x6eab3ae5
mov dword [ebp - 0x30], 0
jmp 0x1000b409
mov eax, dword [ebp - 0x30]
inc eax
mov dword [ebp - 0x30], eax
cmp dword [ebp - 0x30], 0
jg 0x1000b60b
cmp dword [ebp - 0x9b4], 0x172ddb74
je 0x1000b43d
push 0
lea ecx, [ebp - 0xaec]
call fcn.1002c5a0
cmp dword [eax], 0
je 0x1000b43d
mov dword [ebp - 0xa84], 1
jmp 0x1000b444
and dword [ebp - 0xa84], 0
mov esi, dword [ebp - 0x30]
add esi, dword [ebp - 0xa84]
push dword [ebp - 0x30]
lea ecx, [ebp - 0xaec]
call fcn.1002c5a0
cmp esi, dword [eax]
jge 0x1000b46f
push 0xfffffffffffffffb
pop eax
test eax, eax
jne 0x1000b46f
and dword [ebp - 0xa98], 0
jmp 0x1000b479
mov dword [ebp - 0xa98], 1
mov eax, dword [ebp - 0x30]
cmp dword [ebp - 0xa98], eax
jge 0x1000b490
mov dword [ebp - 0xaa0], 1
jmp 0x1000b497
and dword [ebp - 0xaa0], 0
cmp dword [ebp - 0xaa0], 0xbfe7374
jge 0x1000b4af
mov dword [ebp - 0xaa8], 1
jmp 0x1000b4b6
and dword [ebp - 0xaa8], 0
push dword [ebp - 0x30]
lea ecx, [ebp - 0xaec]
call fcn.1002c5a0
mov ecx, dword [ebp - 0xaa8]
cmp ecx, dword [eax]
jne 0x1000b4da
mov dword [ebp - 0xab0], 1
jmp 0x1000b4e1
and dword [ebp - 0xab0], 0
mov eax, dword [ebp - 0x284]
cmp dword [ebp - 0xab0], eax
jne 0x1000b4fb
mov dword [ebp - 0xab8], 1
jmp 0x1000b502
and dword [ebp - 0xab8], 0
mov eax, dword [ebp - 0xab8]
mov dword [ebp - 0xadc], eax
mov eax, dword [ebp - 0xadc]
add eax, dword [ebp - 0x30]
cmp eax, 1
jge 0x1000b528
mov dword [ebp - 0xde8], 1
jmp 0x1000b52f
and dword [ebp - 0xde8], 0
mov eax, dword [ebp - 0x30]
mov dword [ebp - 0x1270], eax
mov esi, dword [ebp - 0x30]
push 0
lea ecx, [ebp - 0xaec]
call fcn.1002c5a0
cmp esi, dword [eax]
jl 0x1000b558
mov dword [ebp - 0xa3c], 1
jmp 0x1000b55f
and dword [ebp - 0xa3c], 0
push 0
lea ecx, [ebp - 0xaec]
call fcn.1002c5a0
mov ecx, dword [ebp - 0xa3c]
cmp ecx, dword [eax]
jg 0x1000b582
mov dword [ebp - 0xdf0], 1
jmp 0x1000b589
and dword [ebp - 0xdf0], 0
push dword [ebp - 0x30]
lea ecx, [ebp - 0xaec]
call fcn.1002c5a0
mov eax, 0x9a733e34
cmp eax, 0xffffffff
je 0x1000b5ad
mov dword [ebp - 0x500], 1
jmp 0x1000b5b4
and dword [ebp - 0x500], 0
cmp dword [ebp - 0x500], 0x98
je 0x1000b5cc
mov dword [ebp - 0x818], 1
jmp 0x1000b5d3
and dword [ebp - 0x818], 0
cmp dword [ebp - 0x818], 0xf7a0
jle 0x1000b5eb
mov dword [ebp - 0x508], 1
jmp 0x1000b5f2
and dword [ebp - 0x508], 0
mov eax, dword [ebp - 0x508]
mov dword [ebp - 0xdf8], eax
cmp dword [ebp - 0x30], 0
je 0x1000b606
jmp 0x1000b60b
jmp 0x1000b402
jmp 0x1000b3ce
mov dword [ebp - 0x9b4], 1
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xaec]
call fcn.1002c55e
jmp 0x1000b345
mov dword [ebp - 0x4c], 0xffff
mov dword [ebp - 0x58], 0x6fe7d8a8
mov dword [ebp - 0x4b8], 0xbe135e1f
mov dword [ebp - 0x2a0], 0
jmp 0x1000b65f
mov eax, dword [ebp - 0x2a0]
inc eax
mov dword [ebp - 0x2a0], eax
cmp dword [ebp - 0x2a0], 4
jge 0x1000b67b
mov eax, dword [ebp - 0x2a0]
mov dword [ebp + eax*4 - 0x1474], 0xfffffffe
jmp 0x1000b652
mov eax, dword [ebp - 0x58]
cmp dword [ebp - 0x58], eax
jle 0x1000b6bb
push 0x6065
push 0x406a
push 0
push 0x6f15
push 0x6732
push 1
call fcn.1000a51a
add esp, 0x18
lea eax, [ebp - 0x58]
push eax
push 0x7688
push 0
call fcn.10024c39
add esp, 0xc
jmp 0x1000b922
mov dword [ebp - 0x50], 0xffffffff
mov dword [ebp - 0x58], 0
jmp 0x1000b6d2
mov eax, dword [ebp - 0x58]
inc eax
mov dword [ebp - 0x58], eax
cmp dword [ebp - 0x58], 3
jg 0x1000b72c
push 0x3d4e
push 0x443b
push 0x390
push 0
call fcn.10016446
add esp, 0x10
mov eax, dword [ebp - 0x58]
cmp dword [ebp + eax*4 - 0x1474], 0
jne 0x1000b714
mov eax, dword [ebp - 0x58]
cmp dword [ebp + eax*4 - 0x1474], 0
jne 0x1000b714
and dword [ebp - 0x510], 0
jmp 0x1000b71e
mov dword [ebp - 0x510], 1
mov eax, dword [ebp - 0x510]
mov dword [ebp - 0x4b8], eax
jmp 0x1000b6cb
mov eax, dword [ebp - 0x50]
sub eax, dword [ebp - 0x50]
jne 0x1000b759
mov eax, dword [ebp - 0x50]
mov dword [ebp - 0x1388], eax
mov eax, dword [ebp - 0x50]
mov dword [ebp - 0x1278], eax
mov eax, 0xb79d
cmp eax, 1
jl 0x1000b759
and dword [ebp - 0x820], 0
jmp 0x1000b763
mov dword [ebp - 0x820], 1
cmp dword [ebp - 0x820], 0xffff
jbe 0x1000b77e
cmp dword [ebp - 0x50], 0
jne 0x1000b77e
and dword [ebp - 0x518], 0
jmp 0x1000b788
mov dword [ebp - 0x518], 1
mov eax, dword [ebp - 0x50]
mov ecx, dword [ebp - 0x4b8]
imul ecx, dword [ebp - 0x518]
sub ecx, dword [ebp - 0x50]
imul ecx, dword [ebp - 0x4b8]
add eax, ecx
cmp eax, dword [ebp - 0x50]
jne 0x1000b7b5
mov dword [ebp - 0x9a8], 1
jmp 0x1000b7bc
and dword [ebp - 0x9a8], 0
mov eax, dword [ebp - 0x50]
cmp dword [ebp - 0x9a8], eax
jg 0x1000b7d3
mov dword [ebp - 0x520], 1
jmp 0x1000b7da
and dword [ebp - 0x520], 0
cmp dword [ebp - 0x520], 0x5ab
jg 0x1000b7f2
mov dword [ebp - 0x828], 1
jmp 0x1000b7f9
and dword [ebp - 0x828], 0
cmp dword [ebp - 0x828], 0x5725
jne 0x1000b811
mov dword [ebp - 0x528], 1
jmp 0x1000b818
and dword [ebp - 0x528], 0
imul eax, dword [ebp - 0x528], 7
sub eax, 0x798f03dc
je 0x1000b84d
mov eax, 0xbe67
test eax, eax
je 0x1000b84d
push 0
push 0x4d5b
push 0x262f
push 0x70c7
call fcn.10017025
add esp, 0x10
jmp 0x1000b922
mov dword [ebp - 0x4c0], 0xf4846e1d
mov dword [ebp - 0x830], 0x2fb38a83
mov dword [ebp - 0xe38], 0xfffffffd
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x1474]
mov dword [ebp - 0x1444], eax
mov eax, dword [ebp - 0x58]
cmp dword [ebp - 0x50], eax
jg 0x1000b8e6
mov eax, dword [ebp - 0x4c0]
mov dword [ebp - 0x1280], eax
mov eax, dword [ebp - 0x50]
mov dword [ebp - 0x1398], eax
xor eax, eax
inc eax
jne 0x1000b8b2
mov eax, 0x5bdddd5d
test eax, eax
jne 0x1000b8b2
and dword [ebp - 0xa60], 0
jmp 0x1000b8bc
mov dword [ebp - 0xa60], 1
mov eax, dword [ebp - 0x50]
cmp dword [ebp - 0xa60], eax
je 0x1000b8d3
mov dword [ebp - 0xe30], 1
jmp 0x1000b8da
and dword [ebp - 0xe30], 0
mov eax, dword [ebp - 0x4c0]
mov dword [ebp - 0x1288], eax
mov eax, dword [ebp - 0x58]
cmp dword [ebp - 0x58], eax
jge 0x1000b903
cmp dword [ebp - 0x4c0], 0
je 0x1000b903
mov dword [ebp - 0x530], 1
jmp 0x1000b90a
and dword [ebp - 0x530], 0
mov eax, dword [ebp - 0x530]
mov dword [ebp - 0x830], eax
mov eax, dword [ebp - 0x830]
mov dword [ebp - 0xe38], eax
mov dword [ebp - 0x44], 0xffff
mov dword [ebp - 0x1ec], 0x6917
push 1
lea ecx, [ebp - 0x10d0]
call fcn.1002c487
mov dword [ebp - 4], 3
push 3
lea ecx, [ebp - 0x1384]
call fcn.1002c487
mov byte [ebp - 4], 4
mov dword [ebp - 0x1484], 1
mov dword [ebp - 0x1b4], 0
jmp 0x1000b97b
mov eax, dword [ebp - 0x1b4]
inc eax
mov dword [ebp - 0x1b4], eax
cmp dword [ebp - 0x1b4], 1
jge 0x1000b997
mov eax, dword [ebp - 0x1b4]
mov dword [ebp + eax*4 - 0x4c8], 0xffffffff
jmp 0x1000b96e
lea eax, [ebp - 0x10d0]
push eax
push 0x6d02
push 0
push 0x5aaa
lea eax, [ebp - 0x1b4]
push eax
call fcn.100200a8
add esp, 0x14
push 0
lea eax, [ebp - 0x1b4]
push eax
lea eax, [ebp - 0x1384]
push eax
push 0x7938
push 0x7318
call fcn.1001834a
add esp, 0x14
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x44]
mov dword [ebp + eax - 0x4c8], ecx
cmp dword [ebp - 0x44], 0
jne 0x1000ba06
cmp dword [ebp - 0x44], 0
mov eax, dword [ebp - 0x44]
cmp dword [ebp - 0x44], eax
jg 0x1000ba06
and dword [ebp - 0x538], 0
jmp 0x1000ba10
mov dword [ebp - 0x538], 1
mov eax, dword [ebp - 0x44]
cmp eax, dword [ebp - 0x538]
jne 0x1000ba30
mov eax, 0x8fecf792
test eax, eax
je 0x1000ba30
mov dword [ebp - 0x9b0], 1
jmp 0x1000ba37
and dword [ebp - 0x9b0], 0
mov eax, dword [ebp - 0x44]
cmp dword [ebp - 0x9b0], eax
jl 0x1000ba4e
mov dword [ebp - 0xe40], 1
jmp 0x1000ba55
and dword [ebp - 0xe40], 0
mov eax, dword [ebp - 0x44]
mov dword [ebp - 0x1290], eax
mov eax, dword [ebp - 0x44]
add eax, dword [ebp - 0x44]
cmp eax, dword [ebp - 0x44]
jne 0x1000ba75
mov dword [ebp - 0x540], 1
jmp 0x1000ba7c
and dword [ebp - 0x540], 0
mov eax, dword [ebp - 0x540]
sub eax, dword [ebp - 0x44]
mov dword [ebp - 0x1ec], eax
mov dword [ebp - 0x1ec], 0
jmp 0x1000baa4
mov eax, dword [ebp - 0x1ec]
inc eax
mov dword [ebp - 0x1ec], eax
cmp dword [ebp - 0x1ec], 0xf
jle 0x1000bc44
mov dword [ebp - 0x838], 9
mov dword [ebp - 0xe60], 0x281c1d99
mov dword [ebp - 0x13a8], 1
mov dword [ebp - 0xe58], 0xb6930509
mov dword [ebp - 0x1298], 1
mov dword [ebp - 0x144c], 0xfffffff6
mov dword [ebp - 0x12a0], 5
mov dword [ebp - 0x13b8], 3
mov dword [ebp - 0x2ac], 0xc7fd579
mov dword [ebp - 0x32c], 0
jmp 0x1000bb24
mov eax, dword [ebp - 0x32c]
inc eax
mov dword [ebp - 0x32c], eax
cmp dword [ebp - 0x32c], 3
jge 0x1000bb40
mov eax, dword [ebp - 0x32c]
mov dword [ebp + eax*4 - 0x1538], 0xfffffffb
jmp 0x1000bb17
mov eax, dword [ebp - 0x838]
sub eax, dword [ebp - 0x838]
je 0x1000bb6a
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x4c8], 0
je 0x1000bb6a
mov dword [ebp - 0x550], 1
jmp 0x1000bb71
and dword [ebp - 0x550], 0
mov eax, dword [ebp - 0x44]
mov dword [ebp - 0x548], eax
push 0
lea ecx, [ebp - 0x10d0]
call fcn.1002c5a0
mov ecx, dword [ebp - 0x548]
mov dword [eax], ecx
mov eax, dword [ebp - 0x548]
mov dword [ebp - 0xe48], eax
mov eax, dword [ebp - 0x2ac]
mov dword [ebp - 0xe50], eax
mov eax, dword [ebp - 0x2ac]
dec eax
mov dword [ebp - 0x2ac], eax
mov eax, dword [ebp - 0xe48]
cmp eax, dword [ebp - 0xe50]
jle 0x1000bbce
mov dword [ebp - 0x840], 1
jmp 0x1000bbd5
and dword [ebp - 0x840], 0
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x4c8], 0xffffffff
je 0x1000bbf1
mov dword [ebp - 0xad4], 1
jmp 0x1000bbf8
and dword [ebp - 0xad4], 0
mov eax, dword [ebp - 0xe58]
cmp dword [ebp - 0xad4], eax
jg 0x1000bc12
mov dword [ebp - 0x558], 1
jmp 0x1000bc19
and dword [ebp - 0x558], 0
mov eax, dword [ebp - 0x550]
add eax, dword [ebp - 0x840]
sub eax, dword [ebp - 0x558]
mov dword [ebp - 0xe60], eax
cmp dword [ebp - 0x2ac], 0
je 0x1000bc3f
jmp 0x1000ba97
jmp 0x1000ba97
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x1384]
call fcn.1002c55e
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x10d0]
call fcn.1002c55e
mov dword [ebp - 0x204], 0x6917
mov dword [ebp - 0x23c], 0x1f7e2799
mov dword [ebp - 0x9b8], 0x6046e74a
mov dword [ebp - 0x23c], 0
jmp 0x1000bc99
mov eax, dword [ebp - 0x23c]
dec eax
mov dword [ebp - 0x23c], eax
cmp dword [ebp - 0x23c], 0xffffffe6
jl 0x1000be0b
push 1
lea ecx, [ebp - 0x1124]
call fcn.1002c487
mov dword [ebp - 4], 5
mov dword [ebp - 0x3ac], 0xedc7555b
mov dword [ebp - 0xe68], 0xa9d01274
push 0x29f2
push 0
lea eax, [ebp - 0x1454]
push eax
push 1
lea eax, [ebp - 0x1124]
push eax
call fcn.10009648
add esp, 0x14
mov dword [ebp - 0x3ac], 0
jmp 0x1000bd06
mov eax, dword [ebp - 0x3ac]
dec eax
mov dword [ebp - 0x3ac], eax
cmp dword [ebp - 0x3ac], 0
jl 0x1000bd94
mov dword [ebp - 0x1bc], 0x9cc14173
mov dword [ebp - 0xe70], 0x6eab3ae5
mov dword [ebp - 0x1bc], 0
jmp 0x1000bd40
mov eax, dword [ebp - 0x1bc]
inc eax
mov dword [ebp - 0x1bc], eax
cmp dword [ebp - 0x1bc], 0
jg 0x1000bd8f
lea eax, [ebp - 0x1bc]
push eax
lea eax, [ebp - 0x23c]
push eax
lea eax, [ebp - 0x1124]
push eax
lea eax, [ebp - 0xe68]
push eax
push 0
push 0x7d4b
lea eax, [ebp - 0x9b8]
push eax
lea eax, [ebp - 0xe70]
push eax
call fcn.10018478
add esp, 0x20
cmp dword [ebp - 0x1bc], 0
je 0x1000bd8d
jmp 0x1000bd8f
jmp 0x1000bd33
jmp 0x1000bcf9
push 0x3c80
lea eax, [ebp - 0x9b8]
push eax
push 0x7724
push 0
push 0x543
push 0
push 0x5050
push 0x947
push 0x11dd
push 0x4fc5
push 0x1f25
push 0x6fba
push 0x7382
push 0x3a7d
push 0x4c8
push 0xdac
push 0x2e0c
push 0x576c
push 0x1390
call fcn.10017439
add esp, 0x4c
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x1124]
call fcn.1002c55e
jmp 0x1000bc8c
push 1
lea ecx, [ebp - 0x116c]
call fcn.1002c487
mov dword [ebp - 4], 6
mov dword [ebp - 0xb0], 0
jmp 0x1000be38
mov eax, dword [ebp - 0xb0]
inc eax
mov dword [ebp - 0xb0], eax
cmp dword [ebp - 0xb0], 1
jge 0x1000be54
mov eax, dword [ebp - 0xb0]
mov dword [ebp + eax*4 - 0xe78], 4
jmp 0x1000be2b
mov dword [ebp - 0xb0], 0
jmp 0x1000be6d
mov eax, dword [ebp - 0xb0]
inc eax
mov dword [ebp - 0xb0], eax
cmp dword [ebp - 0xb0], 2
jge 0x1000be89
mov eax, dword [ebp - 0xb0]
mov dword [ebp + eax*4 - 0xa90], 0xd06ce125
jmp 0x1000be60
mov byte [ebp - 0x156], 0
movzx eax, byte [ebp - 0x156]
test eax, eax
je 0x1000bea3
push 0
call dword [sym.imp.KERNEL32.dll_GetFileAttributesW]
push 4
pop eax
shl eax, 0
mov dword [ebp + eax - 0xa90], 0
jmp 0x1000bed1
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0xa90]
inc eax
push 4
pop ecx
shl ecx, 0
mov dword [ebp + ecx - 0xa90], eax
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0xa90], 1
jge 0x1000befb
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0xa90]
mov dword [ebp + eax*4 - 0xe78], 1
jmp 0x1000beb6
push 3
lea ecx, [ebp - 0x13a4]
call fcn.1002c487
mov byte [ebp - 4], 7
mov dword [ebp - 0x12f8], 1
push 3
lea ecx, [ebp - 0x113c]
call fcn.1002c487
mov byte [ebp - 4], 8
mov dword [ebp - 0xe80], 0xe7d214c4
mov dword [ebp - 0xe88], 0x7822e6e
mov dword [ebp - 0x2b4], 0
jmp 0x1000bf54
mov eax, dword [ebp - 0x2b4]
inc eax
mov dword [ebp - 0x2b4], eax
cmp dword [ebp - 0x2b4], 3
jge 0x1000bf76
push dword [ebp - 0x2b4]
lea ecx, [ebp - 0x113c]
call fcn.1002c5a0
mov dword [eax], 0x62d5e48d
jmp 0x1000bf47
lea eax, [ebp - 0x113c]
push eax
lea eax, [ebp - 0xe80]
push eax
push 0x3e08
lea eax, [ebp - 0xe88]
push eax
push 0
call fcn.100165cc
add esp, 0x14
mov byte [ebp - 4], 7
lea ecx, [ebp - 0x113c]
call fcn.1002c55e
mov dword [ebp - 0x24], 0
jmp 0x1000bfb9
mov eax, dword [ebp - 0x24]
inc eax
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 1
jge 0x1000bfcf
mov eax, dword [ebp - 0x24]
mov dword [ebp + eax*4 - 0x3ec], 0xffffffff
jmp 0x1000bfb2
mov dword [ebp - 0x1f4], 0xffffffff
push 0
lea eax, [ebp - 0x1f4]
push eax
push 0
call fcn.100152b0
add esp, 0xc
mov dword [ebp - 0x1f4], 0xffffffe3
jmp 0x1000c005
mov eax, dword [ebp - 0x1f4]
inc eax
mov dword [ebp - 0x1f4], eax
cmp dword [ebp - 0x1f4], 0xfffffff9
je 0x1000c0ae
mov dword [ebp - 0x264], 0xa6f44401
mov dword [ebp - 0x264], 0
jmp 0x1000c035
mov eax, dword [ebp - 0x264]
inc eax
mov dword [ebp - 0x264], eax
cmp dword [ebp - 0x264], 0xf
jl 0x1000c09b
push 3
lea ecx, [ebp - 0xfd4]
call fcn.1002c487
mov byte [ebp - 4], 9
lea eax, [ebp - 0x13dc]
push eax
lea eax, [ebp - 0xfd4]
push eax
push 0
call fcn.1001e1eb
add esp, 0xc
push 2
lea ecx, [ebp - 0xfd4]
call fcn.1002c5a0
cmp dword [eax], 0
je 0x1000c08a
mov byte [ebp - 4], 7
lea ecx, [ebp - 0xfd4]
call fcn.1002c55e
jmp 0x1000c09b
mov byte [ebp - 4], 7
lea ecx, [ebp - 0xfd4]
call fcn.1002c55e
jmp 0x1000c028
cmp dword [ebp - 0x264], 0
je 0x1000c0a9
jmp 0x1000bff8
jmp 0x1000bff8
mov dword [ebp - 0x24], 0
jmp 0x1000c0be
mov eax, dword [ebp - 0x24]
inc eax
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 1
jge 0x1000c0d7
push dword [ebp - 0x24]
lea ecx, [ebp - 0x116c]
call fcn.1002c5a0
or dword [eax], 0xffffffff
jmp 0x1000c0b7
mov dword [ebp - 0x24], 0
jmp 0x1000c0e7
mov eax, dword [ebp - 0x24]
inc eax
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 3
jge 0x1000c103
push dword [ebp - 0x24]
lea ecx, [ebp - 0x13a4]
call fcn.1002c5a0
mov dword [eax], 0xd9e177c4
jmp 0x1000c0e0
mov dword [ebp - 0x7c], 0x11c15747
mov dword [ebp - 0x560], 0xcf1d65f4
push 3
lea ecx, [ebp - 0xfc8]
call fcn.1002c487
mov byte [ebp - 4], 0xa
mov dword [ebp - 0x578], 0x73046773
mov dword [ebp - 0x580], 0xe85ec415
mov dword [ebp - 0x590], 0x5bed8572
lea eax, [ebp - 0x1fc]
push eax
push 0x15f
lea eax, [ebp - 0xfc8]
push eax
push 0
call fcn.1001894e
add esp, 0x10
mov dword [ebp - 0x1fc], 0
jmp 0x1000c179
mov eax, dword [ebp - 0x1fc]
inc eax
mov dword [ebp - 0x1fc], eax
cmp dword [ebp - 0x1fc], 2
jge 0x1000c195
mov eax, dword [ebp - 0x1fc]
mov dword [ebp + eax*4 - 0x12ac], 0xd2f55126
jmp 0x1000c16c
cmp dword [ebp - 0x7c], 0x44ad72d7
jne 0x1000c1aa
mov dword [ebp - 0x858], 1
jmp 0x1000c1b1
and dword [ebp - 0x858], 0
mov eax, dword [ebp - 0x7c]
mov dword [ebp - 0x560], eax
mov eax, dword [ebp - 0x7c]
add eax, dword [ebp - 0x560]
je 0x1000c1da
mov eax, 0x6c12
test eax, eax
je 0x1000c1da
mov dword [ebp - 0x848], 1
jmp 0x1000c1e1
and dword [ebp - 0x848], 0
mov eax, dword [ebp - 0x7c]
add eax, dword [ebp - 0x848]
add eax, dword [ebp - 0x7c]
test eax, eax
jg 0x1000c1fd
mov dword [ebp - 0x568], 1
jmp 0x1000c204
and dword [ebp - 0x568], 0
cmp dword [ebp - 0x568], 0xfffc
jb 0x1000c21c
mov dword [ebp - 0x3cc], 1
jmp 0x1000c223
and dword [ebp - 0x3cc], 0
push 0
lea ecx, [ebp - 0xfc8]
call fcn.1002c5a0
mov ecx, dword [ebp - 0x3cc]
mov dword [eax], ecx
cmp dword [ebp - 0x3cc], 0
jne 0x1000c25c
push 1
lea ecx, [ebp - 0xfc8]
call fcn.1002c5a0
cmp dword [eax], 0
jne 0x1000c25c
and dword [ebp - 0xa68], 0
jmp 0x1000c266
mov dword [ebp - 0xa68], 1
mov eax, dword [ebp - 0x7c]
cmp dword [ebp - 0xa68], eax
jge 0x1000c27d
mov dword [ebp - 0x570], 1
jmp 0x1000c284
and dword [ebp - 0x570], 0
mov eax, dword [ebp - 0x7c]
cmp dword [ebp - 0x570], eax
jle 0x1000c29b
mov dword [ebp - 0x850], 1
jmp 0x1000c2a2
and dword [ebp - 0x850], 0
mov eax, dword [ebp - 0x850]
mov dword [ebp - 0x578], eax
mov eax, dword [ebp - 0x7c]
cmp dword [ebp - 0x578], eax
jl 0x1000c2c5
mov dword [ebp - 0x9c0], 1
jmp 0x1000c2cc
and dword [ebp - 0x9c0], 0
mov eax, dword [ebp - 0x9c0]
mov dword [ebp - 0x580], eax
mov eax, dword [ebp - 0x580]
cmp dword [ebp - 0x858], eax
jne 0x1000c2f2
mov dword [ebp - 0x588], 1
jmp 0x1000c2f9
and dword [ebp - 0x588], 0
imul eax, dword [ebp - 0x588], 0x314e
cmp eax, dword [ebp - 0x7c]
jle 0x1000c314
mov dword [ebp - 0xb30], 1
jmp 0x1000c31b
and dword [ebp - 0xb30], 0
mov eax, dword [ebp - 0xb30]
mov dword [ebp - 0x590], eax
mov eax, dword [ebp - 0x7c]
cmp dword [ebp - 0x590], eax
jne 0x1000c33e
mov dword [ebp - 0x860], 1
jmp 0x1000c345
and dword [ebp - 0x860], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x860]
mov dword [ebp + eax - 0x12ac], ecx
mov byte [ebp - 4], 7
lea ecx, [ebp - 0xfc8]
call fcn.1002c55e
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x4c]
mov dword [ebp + eax - 0x3ec], ecx
cmp dword [ebp - 0x4c], 0
jne 0x1000c392
cmp dword [ebp - 0x4c], 0
mov eax, dword [ebp - 0x4c]
cmp dword [ebp - 0x4c], eax
jg 0x1000c392
and dword [ebp - 0x598], 0
jmp 0x1000c39c
mov dword [ebp - 0x598], 1
mov eax, dword [ebp - 0x4c]
cmp eax, dword [ebp - 0x598]
jne 0x1000c3bc
mov eax, 0x8fecf792
test eax, eax
je 0x1000c3bc
mov dword [ebp - 0x9c8], 1
jmp 0x1000c3c3
and dword [ebp - 0x9c8], 0
mov eax, dword [ebp - 0x4c]
cmp dword [ebp - 0x9c8], eax
jl 0x1000c3da
mov dword [ebp - 0xe90], 1
jmp 0x1000c3e1
and dword [ebp - 0xe90], 0
mov eax, dword [ebp - 0x4c]
mov dword [ebp - 0x1300], eax
mov eax, dword [ebp - 0x4c]
add eax, dword [ebp - 0x4c]
cmp eax, dword [ebp - 0x4c]
jne 0x1000c401
mov dword [ebp - 0x5a0], 1
jmp 0x1000c408
and dword [ebp - 0x5a0], 0
mov eax, dword [ebp - 0x5a0]
sub eax, dword [ebp - 0x4c]
mov dword [ebp - 0x204], eax
mov dword [ebp - 0xf8], 0xfffffff8
mov dword [ebp - 0x3dc], 0x7374489b
mov dword [ebp - 0x244], 0xde6eab3a
mov dword [ebp - 0xf8], 0
jmp 0x1000c44e
mov eax, dword [ebp - 0xf8]
inc eax
mov dword [ebp - 0xf8], eax
cmp dword [ebp - 0xf8], 0x11
jg 0x1000c93c
push 3
lea ecx, [ebp - 0xee0]
call fcn.1002c487
mov byte [ebp - 4], 0xb
mov dword [ebp - 0xe98], 0x2266
cmp dword [ebp - 0xe98], 0xc4d
jge 0x1000c588
lea eax, [ebp - 0x44c]
push eax
push 0x100077e0
call fcn.1005459b
pop ecx
pop ecx
mov eax, dword [ebp - 0x44c]
mov dword [ebp - 0xea0], eax
mov eax, dword [ebp - 0x44c]
dec eax
mov dword [ebp - 0x44c], eax
cmp dword [ebp - 0xea0], 0
je 0x1000c588
lea eax, [ebp - 0x3d4]
push eax
push 0x100077e0
call fcn.1005459b
pop ecx
pop ecx
and dword [ebp - 0x334], 0
jmp 0x1000c4e8
mov eax, dword [ebp - 0x334]
inc eax
mov dword [ebp - 0x334], eax
mov eax, dword [ebp - 0x334]
cmp eax, dword [ebp - 0x3d4]
jge 0x1000c512
mov eax, dword [ebp - 0x334]
lea eax, [ebp + eax*4 - 0x1668]
push eax
push 0x100077e0
call fcn.1005459b
pop ecx
pop ecx
jmp 0x1000c4db
mov eax, dword [ebp - 0x3d4]
lea edx, [ebp + eax*4 - 0x1668]
lea ecx, [ebp - 0x1668]
call fcn.100306df
and dword [ebp - 0x494], 0
and dword [ebp - 0x2bc], 0
jmp 0x1000c547
mov eax, dword [ebp - 0x2bc]
inc eax
mov dword [ebp - 0x2bc], eax
mov eax, dword [ebp - 0x2bc]
inc eax
cmp eax, dword [ebp - 0x3d4]
jge 0x1000c571
mov eax, dword [ebp - 0x2bc]
mov ecx, dword [ebp - 0x494]
add ecx, dword [ebp + eax*4 - 0x1668]
mov dword [ebp - 0x494], ecx
jmp 0x1000c53a
push dword [ebp - 0x494]
push 0x10007828
call fcn.10054c24
pop ecx
pop ecx
jmp 0x1000c499
mov dword [ebp - 0x64], 0x2edc7555
mov dword [ebp - 0x5b8], 1
mov dword [ebp - 0x9d0], 0x2d63d2c8
mov dword [ebp - 0xec0], 0xde97ee8c
push 0
lea eax, [ebp - 0xee0]
push eax
lea eax, [ebp - 0x90]
push eax
call fcn.10015392
add esp, 0xc
mov dword [ebp - 0x90], 0
jmp 0x1000c5de
mov eax, dword [ebp - 0x90]
inc eax
mov dword [ebp - 0x90], eax
cmp dword [ebp - 0x90], 3
jge 0x1000c5fa
mov eax, dword [ebp - 0x90]
mov dword [ebp + eax*4 - 0x1394], 0xa1f05067
jmp 0x1000c5d1
mov dword [ebp - 0x90], 0
jmp 0x1000c613
mov eax, dword [ebp - 0x90]
inc eax
mov dword [ebp - 0x90], eax
cmp dword [ebp - 0x90], 2
jge 0x1000c62f
mov eax, dword [ebp - 0x90]
mov dword [ebp + eax*4 - 0x14a4], 5
jmp 0x1000c606
mov dword [ebp - 0x64], 2
jmp 0x1000c63f
mov eax, dword [ebp - 0x64]
dec eax
mov dword [ebp - 0x64], eax
cmp dword [ebp - 0x64], 0
jl 0x1000c7a5
mov dword [ebp - 0x374], 0
mov dword [ebp - 0xeb0], 4
push dword [ebp - 0x64]
lea ecx, [ebp - 0xee0]
call fcn.1002c5a0
mov eax, dword [ebp - 0xf8]
mov dword [ebp - 0x374], eax
mov eax, dword [ebp - 0x374]
mov dword [ebp - 0x1488], eax
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0x1394], 0x5b641b44
mov eax, 0x5b641b44
test eax, eax
jne 0x1000c6a9
mov dword [ebp - 0xea8], 1
jmp 0x1000c6b0
and dword [ebp - 0xea8], 0
mov eax, dword [ebp - 0xeb0]
mov dword [ebp - 0x1308], eax
mov eax, 0xfffd
cmp eax, 0x83bc
jb 0x1000c6da
mov eax, 0xffff
test eax, eax
jne 0x1000c6da
and dword [ebp - 0x868], 0
jmp 0x1000c6e4
mov dword [ebp - 0x868], 1
mov eax, dword [ebp - 0x374]
imul eax, dword [ebp - 0x868]
cmp dword [ebp - 0xf8], eax
jle 0x1000c705
mov dword [ebp - 0x5a8], 1
jmp 0x1000c70c
and dword [ebp - 0x5a8], 0
cmp dword [ebp - 0x5a8], 0xffffffff
jl 0x1000c721
mov dword [ebp - 0xa70], 1
jmp 0x1000c728
and dword [ebp - 0xa70], 0
mov eax, dword [ebp - 0x374]
cmp dword [ebp - 0xa70], eax
je 0x1000c742
mov dword [ebp - 0x5b0], 1
jmp 0x1000c749
and dword [ebp - 0x5b0], 0
mov eax, dword [ebp - 0x64]
imul eax, dword [ebp - 0x5b0]
imul eax, dword [ebp - 0xf8]
cmp eax, 7
jne 0x1000c76b
mov dword [ebp - 0x870], 1
jmp 0x1000c772
and dword [ebp - 0x870], 0
mov eax, dword [ebp - 0x870]
mov dword [ebp - 0x3dc], eax
imul eax, dword [ebp - 0x3dc], 6
mov dword [ebp - 0x244], eax
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x14a4], 0
je 0x1000c7a0
jmp 0x1000c638
jmp 0x1000c638
mov dword [ebp - 0x64], 2
jmp 0x1000c7b5
mov eax, dword [ebp - 0x64]
dec eax
mov dword [ebp - 0x64], eax
cmp dword [ebp - 0x64], 0
jl 0x1000c928
mov dword [ebp - 0x2c4], 0
jmp 0x1000c7d8
mov eax, dword [ebp - 0x2c4]
inc eax
mov dword [ebp - 0x2c4], eax
cmp dword [ebp - 0x2c4], 1
jge 0x1000c7f4
mov eax, dword [ebp - 0x2c4]
mov dword [ebp + eax*4 - 0x3e4], 0xfffffffd
jmp 0x1000c7cb
mov eax, dword [ebp - 0x244]
mov dword [ebp - 0x13ec], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x3e4], 0
jne 0x1000c82e
mov eax, dword [ebp - 0x3dc]
mov dword [ebp - 0x1310], eax
mov eax, 0x9457720
test eax, eax
jne 0x1000c82e
and dword [ebp - 0xeb8], 0
jmp 0x1000c838
mov dword [ebp - 0xeb8], 1
mov eax, 0x9188
cmp eax, 0xabc1
jge 0x1000c850
mov dword [ebp - 0x454], 1
jmp 0x1000c857
and dword [ebp - 0x454], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x454]
mov dword [ebp + eax - 0x1394], ecx
mov eax, dword [ebp - 0x454]
mov dword [ebp - 0x5b8], eax
mov eax, dword [ebp - 0x5b8]
add eax, 0x771fda66
mov dword [ebp - 0x9d0], eax
mov eax, dword [ebp - 0x9d0]
mov dword [ebp - 0x145c], eax
push 1
lea ecx, [ebp - 0xee0]
call fcn.1002c5a0
mov esi, eax
push dword [ebp - 0x64]
lea ecx, [ebp - 0xee0]
call fcn.1002c5a0
mov ecx, dword [esi]
mov dword [eax], ecx
mov eax, dword [ebp - 0x244]
mov dword [ebp - 0x1318], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x3e4], 2
jne 0x1000c8dc
mov dword [ebp - 0x5c0], 1
jmp 0x1000c8e3
and dword [ebp - 0x5c0], 0
mov eax, dword [ebp - 0x5c0]
mov dword [ebp - 0x244], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x3e4]
cmp dword [ebp - 0x244], eax
je 0x1000c910
mov dword [ebp - 0x878], 1
jmp 0x1000c917
and dword [ebp - 0x878], 0
mov eax, dword [ebp - 0x878]
mov dword [ebp - 0xec0], eax
jmp 0x1000c7ae
mov byte [ebp - 4], 7
lea ecx, [ebp - 0xee0]
call fcn.1002c55e
jmp 0x1000c441
mov dword [ebp - 0x204], 0
jmp 0x1000c955
mov eax, dword [ebp - 0x204]
inc eax
mov dword [ebp - 0x204], eax
cmp dword [ebp - 0x204], 0xf
jle 0x1000dc5b
mov dword [ebp - 0x1c4], 0xfffffffa
mov dword [ebp - 0x5c8], 0xdd5d0881
mov dword [ebp - 0xc20], 0xfffffff8
mov dword [ebp - 0x1c4], 0x13
jmp 0x1000c999
mov eax, dword [ebp - 0x1c4]
dec eax
mov dword [ebp - 0x1c4], eax
cmp dword [ebp - 0x1c4], 0xfffffff1
jg 0x1000ca3c
mov dword [ebp - 0xed0], 0x9feb
mov dword [ebp - 0xbd0], 0xfffffffe
mov dword [ebp - 0xec8], 0xa3de81d5
mov dword [ebp - 0xd98], 0x6982b357
mov dword [ebp - 0xc80], 0x11ca4b38
mov dword [ebp - 0xbd4], 0x28cbd6cd
push 0
lea eax, [ebp - 0xec8]
push eax
lea eax, [ebp - 0x1c4]
push eax
lea eax, [ebp - 0xed0]
push eax
lea eax, [ebp - 0x5c8]
push eax
lea eax, [ebp - 0xbd4]
push eax
lea eax, [ebp - 0xd98]
push eax
lea eax, [ebp - 0xc80]
push eax
lea eax, [ebp - 0xc20]
push eax
lea eax, [ebp - 0xbd0]
push eax
call fcn.10019fa0
add esp, 0x28
mov eax, dword [ebp - 0x1c4]
mov dword [ebp - 0x5c8], eax
jmp 0x1000c98c
mov dword [ebp - 0x650], 9
mov dword [ebp - 0x13fc], 0x7e8e
mov dword [ebp - 0x11bc], 8
mov dword [ebp - 0x11c4], 0
mov dword [ebp - 0x11cc], 0xdbeccce1
mov dword [ebp - 0x11d4], 0xfffffffc
push 3
lea ecx, [ebp - 0x1154]
call fcn.1002c487
mov byte [ebp - 4], 0xc
mov dword [ebp - 0x33c], 0
jmp 0x1000caa2
mov eax, dword [ebp - 0x33c]
inc eax
mov dword [ebp - 0x33c], eax
cmp dword [ebp - 0x33c], 3
jge 0x1000cac4
push dword [ebp - 0x33c]
lea ecx, [ebp - 0x1154]
call fcn.1002c5a0
mov dword [eax], 0x3f9e
jmp 0x1000ca95
push 2
lea ecx, [ebp - 0x1154]
call fcn.1002c5a0
mov dword [ebp - 0xad0], eax
mov eax, dword [ebp - 0xad0]
mov eax, dword [eax]
inc eax
mov ecx, dword [ebp - 0xad0]
mov dword [ecx], eax
mov byte [ebp - 4], 7
lea ecx, [ebp - 0x1154]
call fcn.1002c55e
mov dword [ebp - 0xeac], 0x281c1d99
mov dword [ebp - 0x11dc], 1
mov dword [ebp - 0xc14], 0xb6930509
mov dword [ebp - 0x1c0], 0xbca63185
mov dword [ebp - 0x9d8], 0xffffffff
mov dword [ebp - 0x4b4], 5
mov dword [ebp - 0xea4], 5
mov dword [ebp - 0x1c0], 0xf
jmp 0x1000cb56
mov eax, dword [ebp - 0x1c0]
dec eax
mov dword [ebp - 0x1c0], eax
cmp dword [ebp - 0x1c0], 0xf
jl 0x1000ccd8
mov dword [ebp - 0x100], 0x5950
mov dword [ebp - 0x5d0], 0x100c4307
mov dword [ebp - 0x5d0], 0x977a
mov eax, dword [ebp - 0x5d0]
cmp dword [ebp - 0x1c0], eax
jge 0x1000cb9b
mov dword [ebp - 0x880], 1
jmp 0x1000cba2
and dword [ebp - 0x880], 0
mov eax, dword [ebp - 0x100]
mov dword [ebp - 0x11e4], eax
cmp dword [ebp - 0x100], 0xdd01
je 0x1000cbc6
mov dword [ebp - 0x5d8], 1
jmp 0x1000cbcd
and dword [ebp - 0x5d8], 0
mov eax, dword [ebp - 0x880]
mov dword [ebp - 0x4b4], eax
mov eax, dword [ebp - 0x4b4]
cmp eax, dword [ebp - 0x5d8]
jl 0x1000cbfc
cmp dword [ebp - 0x4b4], 0
je 0x1000cbfc
mov dword [ebp - 0x5e0], 1
jmp 0x1000cc03
and dword [ebp - 0x5e0], 0
mov eax, dword [ebp - 0x1c0]
mov dword [ebp - 0x9d8], eax
mov eax, dword [ebp - 0x9d8]
cmp eax, dword [ebp - 0x5e0]
jle 0x1000cc29
mov dword [ebp - 0x888], 1
jmp 0x1000cc30
and dword [ebp - 0x888], 0
mov eax, dword [ebp - 0x100]
cmp eax, dword [ebp - 0x888]
jne 0x1000cc4a
mov dword [ebp - 0x5e8], 1
jmp 0x1000cc51
and dword [ebp - 0x5e8], 0
mov eax, dword [ebp - 0x5e8]
sub eax, dword [ebp - 0x100]
sub eax, dword [ebp - 0x100]
cmp eax, dword [ebp - 0x100]
jge 0x1000cc77
mov dword [ebp - 0xa78], 1
jmp 0x1000cc7e
and dword [ebp - 0xa78], 0
mov eax, dword [ebp - 0x100]
cmp dword [ebp - 0xa78], eax
jg 0x1000cc98
mov dword [ebp - 0x5f0], 1
jmp 0x1000cc9f
and dword [ebp - 0x5f0], 0
mov eax, dword [ebp - 0x5f0]
mov dword [ebp - 0xea4], eax
mov byte [ebp - 0x16a], 0
movzx eax, byte [ebp - 0x16a]
test eax, eax
je 0x1000ccd3
push 0x6ce9
push 0
push 0
push 0x814
call fcn.10024bcf
add esp, 0x10
jmp 0x1000cb49
mov dword [ebp - 0x11ec], 1
mov dword [ebp - 0x11f4], 0xbdde0bcd
mov byte [ebp - 0x158], 0
lea eax, [ebp - 0x158]
push eax
push 0
call fcn.1002625f
pop ecx
pop ecx
mov byte [ebp - 0x170], 0
movzx eax, byte [ebp - 0x170]
test eax, eax
je 0x1000cd25
push 0x154c
push 0x1ce1
call dword [sym.imp.GDI32.dll_SetLayout]
mov dword [ebp - 0x11fc], 0xfffffff6
mov dword [ebp - 0x2cc], 0
jmp 0x1000cd48
mov eax, dword [ebp - 0x2cc]
inc eax
mov dword [ebp - 0x2cc], eax
cmp dword [ebp - 0x2cc], 2
jge 0x1000cd64
mov eax, dword [ebp - 0x2cc]
mov dword [ebp + eax*4 - 0xb90], 0xfffffff8
jmp 0x1000cd3b
mov byte [ebp - 0x15a], 0
movzx eax, byte [ebp - 0x15a]
test eax, eax
je 0x1000cd8a
push 0x23d3
push 0x218
push 0
call fcn.1001e122
add esp, 0xc
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0xb90], 0
jmp 0x1000cdb8
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xb90]
inc eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0xb90], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0xb90], 0x15
jle 0x1000cdea
mov byte [ebp - 0x16c], 0
movzx eax, byte [ebp - 0x16c]
test eax, eax
je 0x1000cde8
push 0
push 0x7c92
call fcn.1001d0eb
pop ecx
pop ecx
jmp 0x1000cd9d
mov dword [ebp - 0x1204], 5
mov dword [ebp - 0xbdc], 0x2093
cmp dword [ebp - 0xbdc], 0xfc1
jge 0x1000d12b
lea eax, [ebp - 0xbc0]
push eax
lea eax, [ebp - 0xf24]
push eax
lea eax, [ebp - 0xd74]
push eax
lea eax, [ebp - 0xbec]
push eax
lea eax, [ebp - 0x40]
push eax
push 0x10007838
call fcn.1005459b
add esp, 0x18
and dword [ebp - 0xd6c], 0
lea eax, [ebp - 0xd6c]
push eax
mov eax, dword [ebp - 0x40]
inc eax
push eax
lea ecx, [ebp - 0xf8c]
call fcn.1002c4c3
mov byte [ebp - 4], 0xd
and dword [ebp - 0xbe4], 0
lea eax, [ebp - 0xbe4]
push eax
mov eax, dword [ebp - 0x40]
inc eax
push eax
lea ecx, [ebp - 0xfe0]
call fcn.1002c4c3
mov byte [ebp - 4], 0xe
and dword [ebp - 0xe44], 0
lea eax, [ebp - 0xe44]
push eax
mov eax, dword [ebp - 0x40]
inc eax
push eax
lea ecx, [ebp - 0xfb0]
call fcn.1002c4c3
mov byte [ebp - 4], 0xf
mov dword [ebp - 0x394], 1
jmp 0x1000ceba
mov eax, dword [ebp - 0x394]
inc eax
mov dword [ebp - 0x394], eax
mov eax, dword [ebp - 0x394]
cmp eax, dword [ebp - 0x40]
jg 0x1000cee5
push dword [ebp - 0x394]
lea ecx, [ebp - 0xf8c]
call fcn.1002c5a0
push eax
push 0x10007828
call fcn.1005459b
pop ecx
pop ecx
jmp 0x1000cead
mov dword [ebp - 0x188], 1
jmp 0x1000cefe
mov eax, dword [ebp - 0x188]
inc eax
mov dword [ebp - 0x188], eax
mov eax, dword [ebp - 0x188]
cmp eax, dword [ebp - 0x40]
jg 0x1000cf48
mov eax, dword [ebp - 0x188]
dec eax
push eax
lea ecx, [ebp - 0xfe0]
call fcn.1002c5a0
mov esi, eax
push dword [ebp - 0x188]
lea ecx, [ebp - 0xf8c]
call fcn.1002c5a0
mov esi, dword [esi]
add esi, dword [eax]
push dword [ebp - 0x188]
lea ecx, [ebp - 0xfe0]
call fcn.1002c5a0
mov dword [eax], esi
jmp 0x1000cef1
mov dword [ebp - 0x1b0], 1
jmp 0x1000cf61
mov eax, dword [ebp - 0x1b0]
inc eax
mov dword [ebp - 0x1b0], eax
mov eax, dword [ebp - 0x1b0]
cmp eax, dword [ebp - 0x40]
jg 0x1000cfb0
mov eax, dword [ebp - 0x1b0]
dec eax
push eax
lea ecx, [ebp - 0xfb0]
call fcn.1002c5a0
mov esi, eax
mov eax, dword [ebp - 0x40]
sub eax, dword [ebp - 0x1b0]
inc eax
push eax
lea ecx, [ebp - 0xf8c]
call fcn.1002c5a0
mov esi, dword [esi]
add esi, dword [eax]
push dword [ebp - 0x1b0]
lea ecx, [ebp - 0xfb0]
call fcn.1002c5a0
mov dword [eax], esi
jmp 0x1000cf54
mov dword [ebp - 0x4a4], 0xa7640000
mov dword [ebp - 0x4a0], 0xde0b6b3
and dword [ebp - 0xa8], 0
jmp 0x1000cfda
mov eax, dword [ebp - 0xa8]
inc eax
mov dword [ebp - 0xa8], eax
mov eax, dword [ebp - 0xa8]
cmp eax, dword [ebp - 0x40]
jg 0x1000d0e5
push dword [ebp - 0xa8]
lea ecx, [ebp - 0xfe0]
call fcn.1002c5a0
mov esi, dword [ebp - 0xbec]
imul esi, dword [eax]
mov eax, dword [ebp - 0x40]
sub eax, dword [ebp - 0xa8]
push eax
lea ecx, [ebp - 0xfb0]
call fcn.1002c5a0
mov ecx, dword [ebp - 0xd74]
imul ecx, dword [eax]
add esi, ecx
mov eax, esi
cdq
mov dword [ebp - 0x1d0], eax
mov dword [ebp - 0x1cc], edx
mov eax, dword [ebp - 0xa8]
shl eax, 1
cmp eax, dword [ebp - 0x40]
jge 0x1000d071
mov eax, dword [ebp - 0xa8]
shl eax, 1
mov ecx, dword [ebp - 0x40]
sub ecx, eax
dec ecx
mov eax, ecx
imul eax, dword [ebp - 0xbc0]
cdq
add eax, dword [ebp - 0x1d0]
adc edx, dword [ebp - 0x1cc]
mov dword [ebp - 0x1d0], eax
mov dword [ebp - 0x1cc], edx
jmp 0x1000d0aa
mov eax, dword [ebp - 0xa8]
shl eax, 1
cmp eax, dword [ebp - 0x40]
jle 0x1000d0aa
mov eax, dword [ebp - 0xa8]
shl eax, 1
sub eax, dword [ebp - 0x40]
dec eax
imul eax, dword [ebp - 0xf24]
cdq
add eax, dword [ebp - 0x1d0]
adc edx, dword [ebp - 0x1cc]
mov dword [ebp - 0x1d0], eax
mov dword [ebp - 0x1cc], edx
mov eax, dword [ebp - 0x1cc]
cmp eax, dword [ebp - 0x4a0]
jg 0x1000d0e0
jl 0x1000d0c8
mov eax, dword [ebp - 0x1d0]
cmp eax, dword [ebp - 0x4a4]
jae 0x1000d0e0
mov eax, dword [ebp - 0x1d0]
mov dword [ebp - 0x4a4], eax
mov eax, dword [ebp - 0x1cc]
mov dword [ebp - 0x4a0], eax
jmp 0x1000cfcd
push dword [ebp - 0x4a0]
push dword [ebp - 0x4a4]
push 0x10007850
call fcn.10054c24
add esp, 0xc
mov byte [ebp - 4], 0xe
lea ecx, [ebp - 0xfb0]
call fcn.1002c55e
mov byte [ebp - 4], 0xd
lea ecx, [ebp - 0xfe0]
call fcn.1002c55e
mov byte [ebp - 4], 7
lea ecx, [ebp - 0xf8c]
call fcn.1002c55e
mov dword [ebp - 0xcc], 0x7e2799ac
mov dword [ebp - 0xe4c], 0x4f4fcf42
mov dword [ebp - 0xcc], 0xffffffe6
jmp 0x1000d158
mov eax, dword [ebp - 0xcc]
inc eax
mov dword [ebp - 0xcc], eax
cmp dword [ebp - 0xcc], 0xffffffff
jge 0x1000d722
push 2
lea ecx, [ebp - 0x4e0]
call fcn.1002c487
mov byte [ebp - 4], 0x10
mov dword [ebp - 0xd7c], 6
mov dword [ebp - 0x274], 0
jmp 0x1000d199
mov eax, dword [ebp - 0x274]
inc eax
mov dword [ebp - 0x274], eax
cmp dword [ebp - 0x274], 2
jge 0x1000d1b5
mov eax, dword [ebp - 0x274]
mov dword [ebp + eax*4 - 0xffc], 0xffffffff
jmp 0x1000d18c
push 0
lea eax, [ebp - 0x4e0]
push eax
lea eax, [ebp - 0x274]
push eax
push 0x6dd
push 0x3ca9
call fcn.1001d13d
add esp, 0x14
push 0
lea ecx, [ebp - 0x4e0]
call fcn.1002c5a0
and dword [eax], 0
jmp 0x1000d20d
push 0
lea ecx, [ebp - 0x4e0]
call fcn.1002c5a0
mov dword [ebp - 0x890], eax
mov eax, dword [ebp - 0x890]
mov eax, dword [eax]
inc eax
mov ecx, dword [ebp - 0x890]
mov dword [ecx], eax
push 0
lea ecx, [ebp - 0x4e0]
call fcn.1002c5a0
cmp dword [eax], 1
jg 0x1000d6dd
mov dword [ebp - 0x98], 1
push 1
lea ecx, [ebp - 0xb6c]
call fcn.1002c487
mov byte [ebp - 4], 0x11
mov dword [ebp - 0x628], 0x37e8f884
push 0x3687
lea eax, [ebp - 0xb6c]
push eax
lea eax, [ebp - 0x120c]
push eax
push 0x49c5
push 0x4019
push 0x6e9f
push 1
push 0x320a
push 0
call fcn.1000a937
add esp, 0x24
mov dword [ebp - 0x98], 0
jmp 0x1000d294
mov eax, dword [ebp - 0x98]
inc eax
mov dword [ebp - 0x98], eax
cmp dword [ebp - 0x98], 1
jg 0x1000d6a5
mov dword [ebp - 0xc0], 0x89a69576
mov dword [ebp - 0xc04], 2
mov dword [ebp - 0xc0], 0
jmp 0x1000d2ce
mov eax, dword [ebp - 0xc0]
inc eax
mov dword [ebp - 0xc0], eax
cmp dword [ebp - 0xc0], 1
jg 0x1000d331
mov byte [ebp - 0x15c], 0
push 0x1b33
push 0
push 0
push 0x1dd2
lea eax, [ebp - 0x15c]
push eax
push 1
call fcn.1002062f
add esp, 0x18
mov byte [ebp - 0x174], 0
movzx eax, byte [ebp - 0x174]
test eax, eax
je 0x1000d32f
push 0x7a1d
push 0x3662
push 0
push 0xbd7
push 0x1d85
push 1
call fcn.1000991f
add esp, 0x18
jmp 0x1000d2c1
mov eax, dword [ebp - 0x98]
mov dword [ebp - 0x1214], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0xffc], 0
jne 0x1000d368
push 1
lea ecx, [ebp - 0x4e0]
call fcn.1002c5a0
cmp dword [eax], 0
jne 0x1000d368
and dword [ebp - 0x5f8], 0
jmp 0x1000d372
mov dword [ebp - 0x5f8], 1
mov eax, dword [ebp - 0x98]
cmp dword [ebp - 0x5f8], eax
je 0x1000d38c
mov dword [ebp - 0x9e0], 1
jmp 0x1000d393
and dword [ebp - 0x9e0], 0
mov eax, dword [ebp - 0x98]
cmp dword [ebp - 0x9e0], eax
je 0x1000d3ad
mov dword [ebp - 0x600], 1
jmp 0x1000d3b4
and dword [ebp - 0x600], 0
mov eax, 0x714ba09
sub eax, dword [ebp - 0x600]
cmp eax, dword [ebp - 0xcc]
jl 0x1000d3d3
mov dword [ebp - 0x898], 1
jmp 0x1000d3da
and dword [ebp - 0x898], 0
mov eax, dword [ebp - 0x98]
mov eax, dword [ebp + eax*4 - 0xffc]
cmp eax, dword [ebp - 0x898]
jg 0x1000d3fb
mov dword [ebp - 0x608], 1
jmp 0x1000d402
and dword [ebp - 0x608], 0
mov eax, dword [ebp - 0x98]
imul eax, dword [ebp - 0x608]
test eax, eax
je 0x1000d428
mov eax, 0x3097
test eax, eax
je 0x1000d428
mov dword [ebp - 0xbfc], 1
jmp 0x1000d42f
and dword [ebp - 0xbfc], 0
mov eax, dword [ebp - 0xc0]
mov dword [ebp - 0x121c], eax
mov eax, dword [ebp - 0xc0]
cmp dword [ebp - 0xcc], eax
jge 0x1000d455
mov dword [ebp - 0xb00], 1
jmp 0x1000d45c
and dword [ebp - 0xb00], 0
cmp dword [ebp - 0xb00], 0x758a8ce9
je 0x1000d474
mov dword [ebp - 0x610], 1
jmp 0x1000d47b
and dword [ebp - 0x610], 0
push 0
lea ecx, [ebp - 0xb6c]
call fcn.1002c5a0
mov esi, dword [ebp - 0x610]
imul esi, dword [eax]
push 0
lea ecx, [ebp - 0xb6c]
call fcn.1002c5a0
cmp esi, dword [eax]
jge 0x1000d4ae
mov dword [ebp - 0x8a0], 1
jmp 0x1000d4b5
and dword [ebp - 0x8a0], 0
push 0
lea ecx, [ebp - 0x4e0]
call fcn.1002c5a0
mov ecx, dword [ebp - 0x8a0]
cmp ecx, dword [eax]
jge 0x1000d4d8
mov dword [ebp - 0x618], 1
jmp 0x1000d4df
and dword [ebp - 0x618], 0
imul eax, dword [ebp - 0x618], 6
sub eax, dword [ebp - 0xc0]
cmp eax, 0xffffffff
jge 0x1000d503
push 0
lea ecx, [ebp - 0x4e0]
call fcn.1002c5a0
cmp dword [eax], 0
jne 0x1000d515
mov eax, 0x4575f7f7
test eax, eax
jne 0x1000d515
and dword [ebp - 0x9e8], 0
jmp 0x1000d51f
mov dword [ebp - 0x9e8], 1
push 0
lea ecx, [ebp - 0xb6c]
call fcn.1002c5a0
mov ecx, dword [ebp - 0x9e8]
sub ecx, dword [eax]
jne 0x1000d548
mov eax, 0x742d63d2
test eax, eax
jne 0x1000d548
and dword [ebp - 0x620], 0
jmp 0x1000d552
mov dword [ebp - 0x620], 1
push 0
lea ecx, [ebp - 0xb6c]
call fcn.1002c5a0
mov ecx, dword [ebp - 0x620]
cmp ecx, dword [eax]
jg 0x1000d575
mov dword [ebp - 0x8a8], 1
jmp 0x1000d57c
and dword [ebp - 0x8a8], 0
mov eax, dword [ebp - 0x8a8]
mov dword [ebp - 0x628], eax
cmp dword [ebp - 0x628], 0
je 0x1000d5a6
cmp dword [ebp - 0xd7c], 0
je 0x1000d5a6
mov dword [ebp - 0xa80], 1
jmp 0x1000d5ad
and dword [ebp - 0xa80], 0
mov eax, dword [ebp - 0xc0]
cmp dword [ebp - 0xa80], eax
je 0x1000d5c7
mov dword [ebp - 0x630], 1
jmp 0x1000d5ce
and dword [ebp - 0x630], 0
push 0
lea ecx, [ebp - 0x4e0]
call fcn.1002c5a0
mov ecx, dword [ebp - 0x630]
cmp ecx, dword [eax]
jl 0x1000d600
push 0
lea ecx, [ebp - 0xb6c]
call fcn.1002c5a0
cmp dword [eax], 0
jne 0x1000d600
and dword [ebp - 0x8b0], 0
jmp 0x1000d60a
mov dword [ebp - 0x8b0], 1
cmp dword [ebp - 0x8b0], 0x538fd232
je 0x1000d622
mov dword [ebp - 0x638], 1
jmp 0x1000d629
and dword [ebp - 0x638], 0
cmp dword [ebp - 0x638], 0
jl 0x1000d63e
mov dword [ebp - 0x9f0], 1
jmp 0x1000d645
and dword [ebp - 0x9f0], 0
cmp dword [ebp - 0x9f0], 0xb0bb
jle 0x1000d65d
mov dword [ebp - 0x640], 1
jmp 0x1000d664
and dword [ebp - 0x640], 0
mov eax, dword [ebp - 0xcc]
cmp dword [ebp - 0x640], eax
jg 0x1000d67e
mov dword [ebp - 0x8b8], 1
jmp 0x1000d685
and dword [ebp - 0x8b8], 0
push 1
lea ecx, [ebp - 0x4e0]
call fcn.1002c5a0
mov ecx, dword [ebp - 0x8b8]
sub ecx, dword [eax]
mov dword [ebp - 0xc04], ecx
jmp 0x1000d287
mov byte [ebp - 0x15e], 0
lea eax, [ebp - 0x15e]
push eax
push 1
push 0x51bd
push 1
push 0x4441
call fcn.10009648
add esp, 0x14
mov byte [ebp - 4], 0x10
lea ecx, [ebp - 0xb6c]
call fcn.1002c55e
jmp 0x1000d1e9
lea eax, [ebp - 0xe4c]
push eax
push 0x4348
push 0x3553
push 0
push 0x66eb
lea eax, [ebp - 0xcc]
push eax
push 0x2a76
push 0x4ada
call fcn.1001d26d
add esp, 0x20
mov byte [ebp - 4], 7
lea ecx, [ebp - 0x4e0]
call fcn.1002c55e
jmp 0x1000d14b
push 1
lea ecx, [ebp - 0xfa4]
call fcn.1002c487
mov byte [ebp - 4], 0x12
mov dword [ebp - 0x1d4], 0
mov dword [ebp - 0x190], 0x8ce3e63e
mov dword [ebp - 0x648], 4
push 0x54c4
push 0x217f
lea eax, [ebp - 0xfa4]
push eax
lea eax, [ebp - 0x20c]
push eax
push 0xd49
push 0
push 0x217e
call fcn.10018448
add esp, 0x1c
mov dword [ebp - 0x20c], 0
jmp 0x1000d796
mov eax, dword [ebp - 0x20c]
inc eax
mov dword [ebp - 0x20c], eax
cmp dword [ebp - 0x20c], 2
jge 0x1000d7b2
mov eax, dword [ebp - 0x20c]
mov dword [ebp + eax*4 - 0x1518], 0
jmp 0x1000d789
push 0
lea ecx, [ebp - 0xfa4]
call fcn.1002c5a0
mov eax, dword [eax]
mov dword [ebp - 0x1d4], eax
push 0xfffffffffffffff9
pop eax
sub eax, dword [ebp - 0x1d4]
mov dword [ebp - 0x190], eax
mov esi, dword [ebp - 0x190]
push 0
lea ecx, [ebp - 0xfa4]
call fcn.1002c5a0
add esi, dword [eax]
mov dword [ebp - 0x648], esi
mov dword [ebp - 0x190], 0x18
jmp 0x1000d80a
mov eax, dword [ebp - 0x190]
dec eax
mov dword [ebp - 0x190], eax
cmp dword [ebp - 0x190], 0xb
jne 0x1000d8c4
mov dword [ebp - 0x24c], 0xffff
push 0xc6a
push 0
push 0x4aca
lea eax, [ebp - 0x648]
push eax
push 0x705b
push 0
lea eax, [ebp - 0x24c]
push eax
call fcn.10018d40
add esp, 0x1c
mov dword [ebp - 0x24c], 0xffffffff
jmp 0x1000d863
mov eax, dword [ebp - 0x24c]
inc eax
mov dword [ebp - 0x24c], eax
cmp dword [ebp - 0x24c], 0x38
jne 0x1000d8bf
mov dword [ebp - 0x1d4], 0
jmp 0x1000d885
mov eax, dword [ebp - 0x1d4]
dec eax
mov dword [ebp - 0x1d4], eax
cmp dword [ebp - 0x1d4], 0xfffffff6
jne 0x1000d8bd
mov byte [ebp - 0xf2], 0
movzx eax, byte [ebp - 0xf2]
test eax, eax
je 0x1000d8bb
push 1
push 0x75c4
push 0x51bc
push 0x421f
push 0
call fcn.1000a192
add esp, 0x14
jmp 0x1000d878
jmp 0x1000d856
jmp 0x1000d7fd
mov byte [ebp - 4], 7
lea ecx, [ebp - 0xfa4]
call fcn.1002c55e
mov dword [ebp - 0x1224], 3
mov dword [ebp - 0x2dc], 0xc7fd579
mov dword [ebp - 0x122c], 0
mov byte [ebp - 0xf3], 0
movzx eax, byte [ebp - 0xf3]
test eax, eax
je 0x1000d923
push 0x692e
push 0
push 0x77ad
push 0
push 0x444a
push 0x10a1
call fcn.10025506
add esp, 0x18
mov byte [ebp - 0x16e], 0
push 0x7a33
push 1
push 0x20d6
lea eax, [ebp - 0x16e]
push eax
push 0x32d8
push 0
push 0x691c
call fcn.10009c96
add esp, 0x1c
mov dword [ebp - 0x2d4], 0
jmp 0x1000d96a
mov eax, dword [ebp - 0x2d4]
inc eax
mov dword [ebp - 0x2d4], eax
cmp dword [ebp - 0x2d4], 3
jge 0x1000d986
mov eax, dword [ebp - 0x2d4]
mov dword [ebp + eax*4 - 0x1544], 0xfffffffb
jmp 0x1000d95d
push 1
lea ecx, [ebp - 0xef0]
call fcn.1002c487
mov byte [ebp - 4], 0x13
push 0
push 0x5532
push 0x1250
lea eax, [ebp - 0x1234]
push eax
push 0x2c7d
lea eax, [ebp - 0xef0]
push eax
call fcn.10015950
add esp, 0x18
push 0
lea ecx, [ebp - 0xef0]
call fcn.1002c5a0
mov dword [eax], 0xfffffffe
jmp 0x1000d9f7
push 0
lea ecx, [ebp - 0xef0]
call fcn.1002c5a0
mov dword [ebp - 0xad8], eax
mov eax, dword [ebp - 0xad8]
mov eax, dword [eax]
inc eax
mov ecx, dword [ebp - 0xad8]
mov dword [ecx], eax
push 0
lea ecx, [ebp - 0xef0]
call fcn.1002c5a0
cmp dword [eax], 0x15
jle 0x1000da93
mov dword [ebp - 0x344], 0xfffffff6
mov dword [ebp - 0x344], 0
jmp 0x1000da30
mov eax, dword [ebp - 0x344]
inc eax
mov dword [ebp - 0x344], eax
cmp dword [ebp - 0x344], 0x1a
jne 0x1000da61
mov byte [ebp - 0xf9], 0
movzx eax, byte [ebp - 0xf9]
test eax, eax
je 0x1000da5f
push 0
push 0x5ec2
push 0x78ea
call fcn.10018d12
add esp, 0xc
jmp 0x1000da23
mov byte [ebp - 0x152], 0
movzx eax, byte [ebp - 0x152]
test eax, eax
je 0x1000da8e
push 0
push 0x5d79
push 0
push 0x6716
push 0x5604
call fcn.10018dd7
add esp, 0x14
jmp 0x1000d9d3
mov byte [ebp - 4], 7
lea ecx, [ebp - 0xef0]
call fcn.1002c55e
mov eax, dword [ebp - 0x650]
sub eax, dword [ebp - 0x650]
je 0x1000dacc
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x3ec], 0
je 0x1000dacc
mov dword [ebp - 0x9f8], 1
jmp 0x1000dad3
and dword [ebp - 0x9f8], 0
mov eax, dword [ebp - 0x4c]
mov dword [ebp - 0x8c0], eax
push 0
lea ecx, [ebp - 0x116c]
call fcn.1002c5a0
mov ecx, dword [ebp - 0x8c0]
mov dword [eax], ecx
mov eax, dword [ebp - 0x8c0]
mov dword [ebp - 0xc0c], eax
mov eax, dword [ebp - 0x2dc]
mov dword [ebp - 0xd84], eax
mov eax, dword [ebp - 0x2dc]
dec eax
mov dword [ebp - 0x2dc], eax
mov eax, dword [ebp - 0xc0c]
cmp eax, dword [ebp - 0xd84]
jle 0x1000db30
mov dword [ebp - 0x660], 1
jmp 0x1000db37
and dword [ebp - 0x660], 0
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x3ec], 0xffffffff
je 0x1000db53
mov dword [ebp - 0x658], 1
jmp 0x1000db5a
and dword [ebp - 0x658], 0
mov eax, dword [ebp - 0xc14]
cmp dword [ebp - 0x658], eax
jg 0x1000db74
mov dword [ebp - 0x8c8], 1
jmp 0x1000db7b
and dword [ebp - 0x8c8], 0
mov eax, dword [ebp - 0x9f8]
add eax, dword [ebp - 0x660]
sub eax, dword [ebp - 0x8c8]
mov dword [ebp - 0xeac], eax
mov dword [ebp - 0x668], 6
mov dword [ebp - 0x45c], 0x7b1891f7
mov dword [ebp - 0xd8c], 8
mov byte [ebp - 0x101], 0
movzx eax, byte [ebp - 0x101]
test eax, eax
je 0x1000dbd7
push 0x2420
push 0
push 0x7d44
call fcn.100179d7
add esp, 0xc
cmp dword [ebp - 0x668], 0
je 0x1000dc04
mov dword [ebp - 0xc1c], 0
mov eax, dword [ebp - 0xc1c]
mov dword [ebp - 0x45c], eax
mov eax, dword [ebp - 0x45c]
mov dword [ebp - 0xd8c], eax
jmp 0x1000dc48
mov dword [ebp - 0xc24], 0x9d01
mov dword [ebp - 0xe54], 0xfa1a8f1e
lea eax, [ebp - 0xc24]
push eax
lea eax, [ebp - 0xe54]
push eax
lea eax, [ebp - 0x668]
push eax
push 0x567
push 0
lea eax, [ebp - 0x45c]
push eax
push 0x24cd
call fcn.100179a2
add esp, 0x1c
cmp dword [ebp - 0x2dc], 0
je 0x1000dc56
jmp 0x1000c948
jmp 0x1000c948
mov byte [ebp - 4], 6
lea ecx, [ebp - 0x13a4]
call fcn.1002c55e
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x116c]
call fcn.1002c55e
mov eax, dword [ebp - 0xc2c]
mov eax, dword [eax + 0x38]
mov dword [ebp - 0x438], eax
mov dword [ebp - 0xc34], 0xffff
mov dword [ebp - 0xd9c], 0xffffffff
mov dword [ebp - 0xa00], 0x2443ac46
mov dword [ebp - 0x678], 0x6652d0da
mov dword [ebp - 0x108], 0
or dword [ebp - 0x1020], 0xffffffff
or dword [ebp - 0x101c], 0xffffffff
or dword [ebp - 0x1018], 0xffffffff
or dword [ebp - 0x1014], 0xffffffff
lea ecx, [ebp - 0x465]
call fcn.1002c5af
push eax
lea eax, [ebp - 0x1010]
push eax
lea eax, [ebp - 0x1020]
push eax
lea ecx, [ebp - 0x14e8]
call fcn.1002c5b2
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0x1184]
call fcn.1002c538
mov dword [ebp - 4], 0x14
mov dword [ebp - 0xc3c], 0xe4b0ad8e
mov dword [ebp - 0x214], 0
mov dword [ebp - 0xd94], 0x161d
cmp dword [ebp - 0xd94], 0x4c8
jge 0x1000dddb
lea eax, [ebp - 0xa88]
push eax
push 0x100077e4
call fcn.1005459b
pop ecx
pop ecx
and dword [ebp - 0x37c], 0
jmp 0x1000dd69
mov eax, dword [ebp - 0x37c]
inc eax
mov dword [ebp - 0x37c], eax
mov eax, dword [ebp - 0x37c]
cmp eax, dword [ebp - 0xa88]
jge 0x1000dddb
and dword [ebp - 0x2e4], 0
jmp 0x1000dd8d
mov eax, dword [ebp - 0x2e4]
inc eax
mov dword [ebp - 0x2e4], eax
mov eax, dword [ebp - 0x2e4]
cmp eax, dword [ebp - 0xa88]
jge 0x1000ddce
mov eax, dword [ebp - 0x37c]
add eax, dword [ebp - 0x2e4]
and eax, 0x80000001
jns 0x1000ddb3
dec eax
or eax, 0xfffffffe
inc eax
test eax, eax
je 0x1000ddbd
mov byte [ebp - 0x71], 0x57
jmp 0x1000ddc1
mov byte [ebp - 0x71], 0x42
movsx eax, byte [ebp - 0x71]
push eax
call fcn.10055009
pop ecx
jmp 0x1000dd80
push 0x1000774d
call fcn.10055012
pop ecx
jmp 0x1000dd5c
cmp dword [ebp - 0xc34], 0x351f2000
jl 0x1000de75
mov eax, dword [ebp - 0x108]
inc eax
mov dword [ebp - 0x108], eax
mov eax, dword [ebp - 0xa00]
cmp dword [ebp - 0x108], eax
jg 0x1000de12
mov dword [ebp - 0x670], 1
jmp 0x1000de19
and dword [ebp - 0x670], 0
push 0
lea ecx, [ebp - 0x1184]
call fcn.1002c5a0
mov esi, dword [ebp - 0x670]
sub esi, dword [eax]
push 1
lea ecx, [ebp - 0x1184]
call fcn.1002c5a0
cmp esi, dword [eax]
jle 0x1000de4b
mov dword [ebp - 0xee4], 1
jmp 0x1000de52
and dword [ebp - 0xee4], 0
mov eax, dword [ebp - 0xc3c]
mov dword [ebp - 0x123c], eax
mov eax, dword [ebp - 0xd9c]
add eax, dword [ebp - 0x214]
jne 0x1000de75
and dword [ebp - 0x8d0], 0
jmp 0x1000de7f
mov dword [ebp - 0x8d0], 1
mov eax, dword [ebp - 0x8d0]
mov dword [ebp - 0x678], eax
mov eax, dword [ebp - 0x678]
mov dword [ebp - 0xa00], eax
mov dword [ebp - 0x108], 0
jmp 0x1000deb0
mov eax, dword [ebp - 0x108]
inc eax
mov dword [ebp - 0x108], eax
cmp dword [ebp - 0x108], 0x34
jge 0x1000df0e
mov dword [ebp - 0x214], 0xc
jmp 0x1000ded2
mov eax, dword [ebp - 0x214]
inc eax
mov dword [ebp - 0x214], eax
cmp dword [ebp - 0x214], 0x14
jl 0x1000df0c
mov byte [ebp - 0x153], 0
movzx eax, byte [ebp - 0x153]
test eax, eax
je 0x1000df0a
push 1
push 0x4221
push 0
push 0x2a1e
push 0
push 0x10a6
call fcn.10015b16
add esp, 0x18
jmp 0x1000dec5
jmp 0x1000dea3
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x1184]
call fcn.1002c55e
cmp dword [ebp - 0x438], 0
jle 0x10015062
mov dword [ebp - 0x10], 7
mov dword [ebp - 0x110], 0xffffffff
mov dword [ebp - 0x88], 0x86d6dbc1
mov dword [ebp - 0x118], 0xfffffffc
mov dword [ebp - 0xc4c], 0xffffffff
mov dword [ebp - 0x49c], 6
mov dword [ebp - 0xe5c], 0xfc53d8b3
mov dword [ebp - 0x1244], 0
mov dword [ebp - 0x3f4], 0x6aa1dd5c
mov eax, 0x56834504
test eax, eax
je 0x1000e208
mov eax, 0x6d2e
test eax, eax
je 0x1000e055
mov eax, dword [ebp - 0x10]
cmp dword [ebp - 0x10], eax
jle 0x1000dfaf
mov dword [ebp - 0x680], 1
jmp 0x1000dfb6
and dword [ebp - 0x680], 0
mov eax, dword [ebp - 0x10]
imul eax, dword [ebp - 0x680]
mov dword [ebp - 0x110], eax
imul eax, dword [ebp - 0x110], 0x615e
cmp eax, dword [ebp - 0x10]
jl 0x1000dfe1
mov dword [ebp - 0xc44], 1
jmp 0x1000dfe8
and dword [ebp - 0xc44], 0
mov eax, dword [ebp - 0x10]
mov dword [ebp - 0x11b8], eax
mov eax, dword [ebp - 0x10]
cmp dword [ebp - 0x10], eax
jl 0x1000e005
mov dword [ebp - 0x8d8], 1
jmp 0x1000e00c
and dword [ebp - 0x8d8], 0
mov eax, dword [ebp - 0x10]
cmp dword [ebp - 0x8d8], eax
jge 0x1000e023
mov dword [ebp - 0x688], 1
jmp 0x1000e02a
and dword [ebp - 0x688], 0
mov eax, dword [ebp - 0x688]
add eax, 0x2fe81720
mov dword [ebp - 0x88], eax
mov eax, dword [ebp - 0x88]
imul eax, dword [ebp - 0x10]
test eax, eax
je 0x1000e055
mov dword [ebp - 0xb20], 1
jmp 0x1000e05c
and dword [ebp - 0xb20], 0
mov eax, dword [ebp - 0x10]
cmp dword [ebp - 0xb20], eax
je 0x1000e073
mov dword [ebp - 0x690], 1
jmp 0x1000e07a
and dword [ebp - 0x690], 0
mov eax, dword [ebp - 0x10]
cmp eax, dword [ebp - 0x690]
jg 0x1000e091
mov dword [ebp - 0x8e0], 1
jmp 0x1000e098
and dword [ebp - 0x8e0], 0
mov eax, dword [ebp - 0x118]
cmp dword [ebp - 0x8e0], eax
jg 0x1000e0b2
mov dword [ebp - 0x698], 1
jmp 0x1000e0b9
and dword [ebp - 0x698], 0
mov eax, dword [ebp - 0x698]
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], 0
je 0x1000e208
mov dword [ebp - 0x34c], 0
jmp 0x1000e0e5
mov eax, dword [ebp - 0x34c]
inc eax
mov dword [ebp - 0x34c], eax
cmp dword [ebp - 0x34c], 3
jge 0x1000e101
mov eax, dword [ebp - 0x34c]
mov dword [ebp + eax*4 - 0x1160], 5
jmp 0x1000e0d8
mov dword [ebp - 0x88], 0xfffffff2
jmp 0x1000e11a
mov eax, dword [ebp - 0x88]
inc eax
mov dword [ebp - 0x88], eax
cmp dword [ebp - 0x88], 0x18
jne 0x1000e206
mov dword [ebp - 0x110], 0
jmp 0x1000e140
mov eax, dword [ebp - 0x110]
inc eax
mov dword [ebp - 0x110], eax
cmp dword [ebp - 0x110], 2
jg 0x1000e1d9
mov dword [ebp - 0x10], 0
jmp 0x1000e15d
mov eax, dword [ebp - 0x10]
inc eax
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], 2
jg 0x1000e186
mov eax, dword [ebp - 0x10]
cmp dword [ebp + eax*4 - 0x1160], 0
je 0x1000e172
jmp 0x1000e186
mov eax, dword [ebp - 0x110]
cmp dword [ebp + eax*4 - 0x1160], 0
je 0x1000e184
jmp 0x1000e156
jmp 0x1000e156
mov dword [ebp - 0x118], 2
jmp 0x1000e19f
mov eax, dword [ebp - 0x118]
dec eax
mov dword [ebp - 0x118], eax
cmp dword [ebp - 0x118], 0
jl 0x1000e1d4
mov dword [ebp - 0x10], 2
jmp 0x1000e1b8
mov eax, dword [ebp - 0x10]
dec eax
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], 0
jl 0x1000e1d2
mov eax, dword [ebp - 0x118]
cmp dword [ebp + eax*4 - 0x1160], 0
je 0x1000e1d0
jmp 0x1000e1d2
jmp 0x1000e1b1
jmp 0x1000e192
jmp 0x1000e133
mov byte [ebp - 0x109], 0
movzx eax, byte [ebp - 0x109]
test eax, eax
je 0x1000e201
push 0x7eb
push 1
push 0x3455
push 0
call fcn.1000a2ad
add esp, 0x10
jmp 0x1000e10d
jmp 0x1000e24e
mov dword [ebp - 0x2ec], 0
jmp 0x1000e221
mov eax, dword [ebp - 0x2ec]
inc eax
mov dword [ebp - 0x2ec], eax
cmp dword [ebp - 0x2ec], 4
jge 0x1000e23d
mov eax, dword [ebp - 0x2ec]
mov dword [ebp + eax*4 - 0x1508], 1
jmp 0x1000e214
push 4
pop eax
shl eax, 0
mov dword [ebp + eax - 0x1508], 1
mov eax, dword [ebp - 0x3f4]
mov ecx, dword [ebp - 0x3f4]
dec ecx
mov dword [ebp - 0x3f4], ecx
test eax, eax
je 0x1000e27a
cmp dword [ebp - 0x49c], 0
je 0x1000e27a
mov dword [ebp - 0x6a8], 1
jmp 0x1000e281
and dword [ebp - 0x6a8], 0
cmp dword [ebp - 0x88], 0
jne 0x1000e328
mov eax, dword [ebp - 0x88]
mov dword [ebp - 0x10], eax
mov eax, dword [ebp - 0xe5c]
mov dword [ebp - 0x88], eax
mov eax, dword [ebp - 0x88]
mov dword [ebp - 0x1254], eax
mov eax, dword [ebp - 0xc4c]
cmp dword [ebp - 0x10], eax
jle 0x1000e2c6
mov dword [ebp - 0xa08], 1
jmp 0x1000e2cd
and dword [ebp - 0xa08], 0
cmp dword [ebp - 0xa08], 0xfff9
ja 0x1000e2e5
mov dword [ebp - 0x6a0], 1
jmp 0x1000e2ec
and dword [ebp - 0x6a0], 0
mov eax, dword [ebp - 0x118]
imul eax, dword [ebp - 0x6a0]
cmp eax, 0x3978
jl 0x1000e30c
mov dword [ebp - 0x8e8], 1
jmp 0x1000e313
and dword [ebp - 0x8e8], 0
cmp dword [ebp - 0x8e8], 0xb00b7228
jb 0x1000e328
and dword [ebp - 0xa94], 0
jmp 0x1000e332
mov dword [ebp - 0xa94], 1
mov eax, dword [ebp - 0x6a8]
cmp eax, dword [ebp - 0xa94]
jl 0x1000e34c
mov dword [ebp - 0x6b0], 1
jmp 0x1000e353
and dword [ebp - 0x6b0], 0
mov eax, dword [ebp - 0x49c]
cmp dword [ebp - 0x6b0], eax
jl 0x1000e36d
mov dword [ebp - 0x8f0], 1
jmp 0x1000e374
and dword [ebp - 0x8f0], 0
mov eax, dword [ebp - 0x8f0]
mov dword [ebp - 0x49c], eax
mov dword [ebp - 0x54], 0xffffffff
mov dword [ebp - 0xa18], 0xffffffff
mov dword [ebp - 0x908], 0xe85a7b05
mov dword [ebp - 0x105c], 1
mov dword [ebp - 0x1058], 1
mov dword [ebp - 0x1054], 1
mov dword [ebp - 0x1050], 1
lea ecx, [ebp - 0x46d]
call fcn.1002c5af
push eax
lea eax, [ebp - 0x104c]
push eax
lea eax, [ebp - 0x105c]
push eax
lea ecx, [ebp - 0x1520]
call fcn.1002c5b2
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0x1178]
call fcn.1002c538
mov dword [ebp - 4], 0x15
mov dword [ebp - 0x3a4], 0
jmp 0x1000e418
mov eax, dword [ebp - 0x3a4]
inc eax
mov dword [ebp - 0x3a4], eax
cmp dword [ebp - 0x3a4], 4
jge 0x1000e434
mov eax, dword [ebp - 0x3a4]
mov dword [ebp + eax*4 - 0xf50], 0xa8eac8b
jmp 0x1000e40b
mov dword [ebp - 0x54], 0
jmp 0x1000e444
mov eax, dword [ebp - 0x54]
inc eax
mov dword [ebp - 0x54], eax
cmp dword [ebp - 0x54], 3
jg 0x1000e460
mov eax, dword [ebp - 0x54]
mov ecx, dword [ebp - 0x54]
mov eax, dword [ebp + eax*4 - 0xf50]
mov dword [ebp + ecx*4 - 0xf50], eax
jmp 0x1000e43d
mov dword [ebp - 0x54], 0
jmp 0x1000e470
mov eax, dword [ebp - 0x54]
dec eax
mov dword [ebp - 0x54], eax
cmp dword [ebp - 0x54], 0xffffffe7
je 0x1000e6b6
mov dword [ebp - 0x2f4], 0xffffffff
mov dword [ebp - 0x6e0], 0x3d188047
mov dword [ebp - 0x6c0], 4
mov dword [ebp - 0x6c8], 0xffffffff
mov dword [ebp - 0xae0], 0xd9a54e58
mov dword [ebp - 0xda4], 0xc23782ec
push 4
pop eax
imul eax, eax, 3
mov eax, dword [ebp + eax - 0xf50]
mov dword [ebp - 0x125c], eax
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0xf50]
cmp dword [ebp - 0x2f4], eax
je 0x1000e4ea
mov dword [ebp - 0x6b8], 1
jmp 0x1000e4f1
and dword [ebp - 0x6b8], 0
mov eax, dword [ebp - 0x2f4]
cmp dword [ebp - 0x6b8], eax
jle 0x1000e50b
mov dword [ebp - 0xa10], 1
jmp 0x1000e512
and dword [ebp - 0xa10], 0
mov eax, dword [ebp - 0xa10]
mov dword [ebp - 0x6c0], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xf50]
cmp dword [ebp - 0x6c0], eax
jg 0x1000e53f
mov dword [ebp - 0x8f8], 1
jmp 0x1000e546
and dword [ebp - 0x8f8], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xf50]
add eax, dword [ebp - 0x8f8]
mov dword [ebp - 0x6c8], eax
mov eax, dword [ebp - 0x6c8]
sub eax, 0xe691938
cmp eax, dword [ebp - 0xae0]
je 0x1000e57e
mov dword [ebp - 0x6d0], 1
jmp 0x1000e585
and dword [ebp - 0x6d0], 0
mov eax, dword [ebp - 0xae0]
cmp dword [ebp - 0x6d0], eax
je 0x1000e59f
mov dword [ebp - 0x900], 1
jmp 0x1000e5a6
and dword [ebp - 0x900], 0
mov eax, dword [ebp - 0x2f4]
cmp eax, dword [ebp - 0x900]
jle 0x1000e5c0
mov dword [ebp - 0x6d8], 1
jmp 0x1000e5c7
and dword [ebp - 0x6d8], 0
mov eax, dword [ebp - 0x54]
cmp dword [ebp - 0x6d8], eax
jne 0x1000e5de
mov dword [ebp - 0x6e8], 1
jmp 0x1000e5e5
and dword [ebp - 0x6e8], 0
mov eax, dword [ebp - 0x2f4]
mov dword [ebp - 0xa18], eax
mov eax, dword [ebp - 0xa18]
mov dword [ebp - 0x6e0], eax
mov eax, dword [ebp - 0x6e0]
mov dword [ebp - 0x908], eax
mov eax, dword [ebp - 0x908]
add eax, dword [ebp - 0x6e8]
jne 0x1000e629
mov eax, 0x469209a4
test eax, eax
jne 0x1000e629
and dword [ebp - 0xa9c], 0
jmp 0x1000e633
mov dword [ebp - 0xa9c], 1
mov eax, dword [ebp - 0x54]
cmp dword [ebp - 0xa9c], eax
jle 0x1000e64a
mov dword [ebp - 0x6f0], 1
jmp 0x1000e651
and dword [ebp - 0x6f0], 0
push 2
lea ecx, [ebp - 0x1178]
call fcn.1002c5a0
mov ecx, dword [ebp - 0x6f0]
cmp ecx, dword [eax]
je 0x1000e674
mov dword [ebp - 0x910], 1
jmp 0x1000e67b
and dword [ebp - 0x910], 0
push 2
lea ecx, [ebp - 0x1178]
call fcn.1002c5a0
mov ecx, dword [ebp - 0x910]
cmp ecx, dword [eax]
jle 0x1000e69e
mov dword [ebp - 0x6f8], 1
jmp 0x1000e6a5
and dword [ebp - 0x6f8], 0
mov eax, dword [ebp - 0x6f8]
mov dword [ebp - 0xda4], eax
jmp 0x1000e469
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x1178]
call fcn.1002c55e
mov dword [ebp - 0xb88], 0x2d5e48d3
mov dword [ebp - 0xb84], 0x2d5e48d3
mov dword [ebp - 0xb80], 0x2d5e48d3
mov dword [ebp - 0xb7c], 0x2d5e48d3
mov dword [ebp - 0x70], 0x52061f6
mov dword [ebp - 0x708], 1
push 1
lea ecx, [ebp - 0xfbc]
call fcn.1002c487
mov dword [ebp - 4], 0x16
mov dword [ebp - 0x354], 0
jmp 0x1000e72b
mov eax, dword [ebp - 0x354]
inc eax
mov dword [ebp - 0x354], eax
cmp dword [ebp - 0x354], 1
jge 0x1000e74d
push dword [ebp - 0x354]
lea ecx, [ebp - 0xfbc]
call fcn.1002c5a0
mov dword [eax], 7
jmp 0x1000e71e
mov dword [ebp - 0x70], 0
jmp 0x1000e75d
mov eax, dword [ebp - 0x70]
inc eax
mov dword [ebp - 0x70], eax
cmp dword [ebp - 0x70], 3
jg 0x1000e82f
push 1
lea ecx, [ebp - 0xba4]
call fcn.1002c487
mov byte [ebp - 4], 0x17
mov dword [ebp - 0x2fc], 0
jmp 0x1000e791
mov eax, dword [ebp - 0x2fc]
inc eax
mov dword [ebp - 0x2fc], eax
cmp dword [ebp - 0x2fc], 1
jge 0x1000e7b3
push dword [ebp - 0x2fc]
lea ecx, [ebp - 0xba4]
call fcn.1002c5a0
mov dword [eax], 1
jmp 0x1000e784
push 0
lea ecx, [ebp - 0xba4]
call fcn.1002c5a0
mov dword [eax], 3
jmp 0x1000e7ec
push 0
lea ecx, [ebp - 0xba4]
call fcn.1002c5a0
mov dword [ebp - 0xa20], eax
mov eax, dword [ebp - 0xa20]
mov eax, dword [eax]
dec eax
mov ecx, dword [ebp - 0xa20]
mov dword [ecx], eax
push 0
lea ecx, [ebp - 0xba4]
call fcn.1002c5a0
cmp dword [eax], 0
jl 0x1000e81b
push 0
lea ecx, [ebp - 0xba4]
call fcn.1002c5a0
mov eax, dword [eax]
cmp dword [ebp + eax*4 - 0xb88], 0
je 0x1000e819
jmp 0x1000e81b
jmp 0x1000e7c8
mov byte [ebp - 4], 0x16
lea ecx, [ebp - 0xba4]
call fcn.1002c55e
jmp 0x1000e756
mov eax, dword [ebp - 0x70]
mov dword [ebp - 0x1264], eax
cmp dword [ebp - 0x70], 0
je 0x1000e85a
push 4
pop eax
imul eax, eax, 3
cmp dword [ebp + eax - 0xb88], 0
je 0x1000e85a
mov dword [ebp - 0xc54], 1
jmp 0x1000e861
and dword [ebp - 0xc54], 0
cmp dword [ebp - 0x70], 0x9f7c
jg 0x1000e876
mov dword [ebp - 0x700], 1
jmp 0x1000e87d
and dword [ebp - 0x700], 0
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x700]
sub ecx, dword [ebp + eax - 0xb88]
cmp ecx, dword [ebp - 0x70]
jne 0x1000e8a8
push 3
pop eax
test eax, eax
je 0x1000e8a8
mov dword [ebp - 0x918], 1
jmp 0x1000e8af
and dword [ebp - 0x918], 0
cmp dword [ebp - 0x918], 6
jge 0x1000e8c4
mov dword [ebp - 0xeb4], 1
jmp 0x1000e8cb
and dword [ebp - 0xeb4], 0
push 4
pop eax
imul eax, eax, 3
mov eax, dword [ebp + eax - 0xb88]
mov dword [ebp - 0x126c], eax
mov dword [ebp - 0x708], 0
mov eax, dword [ebp - 0x708]
mov dword [ebp - 0x1274], eax
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0xb88]
cmp dword [ebp - 0x70], eax
je 0x1000e911
mov dword [ebp - 0xb10], 1
jmp 0x1000e918
and dword [ebp - 0xb10], 0
push 0
lea ecx, [ebp - 0xfbc]
call fcn.1002c5a0
mov ecx, dword [ebp - 0xb10]
imul ecx, dword [eax]
cmp ecx, dword [ebp - 0x70]
jle 0x1000e93f
mov dword [ebp - 0xc5c], 1
jmp 0x1000e946
and dword [ebp - 0xc5c], 0
mov eax, dword [ebp - 0x70]
mov dword [ebp - 0x127c], eax
push 0
lea ecx, [ebp - 0xfbc]
call fcn.1002c5a0
push 4
pop eax
shl eax, 1
mov dword [ebp + eax - 0xb88], 0
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xfbc]
call fcn.1002c55e
mov dword [ebp - 0xde4], 0xffff
mov dword [ebp - 0x26c], 0x76820624
mov dword [ebp - 0xdac], 0x3e7ed6f1
mov dword [ebp - 0x1284], 0xffffffff
mov dword [ebp - 0x710], 0x9193c1de
mov dword [ebp - 0x128c], 0x8b922806
mov dword [ebp - 0x384], 0
mov dword [ebp - 0x26c], 0
jmp 0x1000e9da
mov eax, dword [ebp - 0x26c]
inc eax
mov dword [ebp - 0x26c], eax
cmp dword [ebp - 0x26c], 0x1d
jg 0x1000eb4e
mov dword [ebp - 0x3fc], 0xfffffffe
mov dword [ebp - 0xe64], 0
mov dword [ebp - 0x464], 0xffffffff
mov dword [ebp - 0x1294], 0x8cf5a8b0
push 3
lea ecx, [ebp - 0x10ac]
call fcn.1002c487
mov dword [ebp - 4], 0x18
lea eax, [ebp - 0x129c]
push eax
push 0x7db5
push 1
push 0x3ed5
lea eax, [ebp - 0x10ac]
push eax
push 1
call fcn.1000991f
add esp, 0x18
mov eax, dword [ebp - 0x26c]
mov dword [ebp - 0x12a4], eax
mov eax, dword [ebp - 0x3fc]
mov dword [ebp - 0x12b0], eax
mov eax, dword [ebp - 0x384]
mov ecx, dword [ebp - 0x384]
dec ecx
mov dword [ebp - 0x384], ecx
test eax, eax
je 0x1000eaed
mov eax, dword [ebp - 0x710]
cmp dword [ebp - 0x710], eax
jg 0x1000ea90
mov dword [ebp - 0x920], 1
jmp 0x1000ea97
and dword [ebp - 0x920], 0
mov eax, dword [ebp - 0x3fc]
cmp eax, dword [ebp - 0x920]
jl 0x1000eab1
mov dword [ebp - 0x718], 1
jmp 0x1000eab8
and dword [ebp - 0x718], 0
mov eax, dword [ebp - 0x3fc]
cmp dword [ebp - 0x718], eax
je 0x1000ead2
mov dword [ebp - 0xa28], 1
jmp 0x1000ead9
and dword [ebp - 0xa28], 0
xor eax, eax
sub eax, dword [ebp - 0xa28]
sub eax, dword [ebp - 0x464]
cmp eax, dword [ebp - 0xdac]
mov eax, dword [ebp - 0x384]
mov dword [ebp - 0x12bc], eax
push 4
pop eax
test eax, eax
jne 0x1000eb0c
mov dword [ebp - 0xc64], 1
jmp 0x1000eb13
and dword [ebp - 0xc64], 0
mov eax, dword [ebp - 0xe64]
mov dword [ebp - 0x12c8], eax
mov esi, dword [ebp - 0x464]
push 2
lea ecx, [ebp - 0x10ac]
call fcn.1002c5a0
sub esi, dword [eax]
mov dword [ebp - 0x464], esi
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x10ac]
call fcn.1002c55e
jmp 0x1000e9cd
mov byte [ebp - 0x155], 0
movzx eax, byte [ebp - 0x155]
test eax, eax
je 0x1000eb79
push 0
push 0x5eea
push 0x78f3
push 0x163f
call fcn.1001d116
add esp, 0x10
mov dword [ebp - 0xddc], 0xffffffff
push 2
lea ecx, [ebp - 0x13b4]
call fcn.1002c487
mov dword [ebp - 4], 0x19
mov dword [ebp - 0xc6c], 3
mov dword [ebp - 0xac], 0
jmp 0x1000ebba
mov eax, dword [ebp - 0xac]
inc eax
mov dword [ebp - 0xac], eax
cmp dword [ebp - 0xac], 2
jge 0x1000ebd9
push dword [ebp - 0xac]
lea ecx, [ebp - 0x13b4]
call fcn.1002c5a0
or dword [eax], 0xffffffff
jmp 0x1000ebad
mov dword [ebp - 0xac], 0
jmp 0x1000ebf2
mov eax, dword [ebp - 0xac]
inc eax
mov dword [ebp - 0xac], eax
cmp dword [ebp - 0xac], 4
jge 0x1000ec0e
mov eax, dword [ebp - 0xac]
mov dword [ebp + eax*4 - 0x1194], 0xeef20fe6
jmp 0x1000ebe5
push 4
pop eax
shl eax, 0
mov dword [ebp + eax - 0x1194], 1
jmp 0x1000ec3c
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x1194]
dec eax
push 4
pop ecx
shl ecx, 0
mov dword [ebp + ecx - 0x1194], eax
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x1194], 0
jl 0x1000ec70
mov dword [ebp - 0xdb4], 0xffffffff
push 0
lea eax, [ebp - 0xc6c]
push eax
lea eax, [ebp - 0xdb4]
push eax
call fcn.100162fc
add esp, 0xc
jmp 0x1000ec21
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x13b4]
call fcn.1002c55e
mov dword [ebp - 0xcc4], 0x2443ac46
mov dword [ebp - 0xe7c], 0x6652d0da
mov dword [ebp - 0x25c], 0
push 3
lea ecx, [ebp - 0xb54]
call fcn.1002c487
mov dword [ebp - 4], 0x1a
mov dword [ebp - 0xaa4], 9
push 0x5b4b
push 0x68
push 0x7df
push 0
push 0x355c
push 0x3320
push 0x17cf
push 0
push 0x18fa
push 0x43df
lea eax, [ebp - 0x12d4]
push eax
lea eax, [ebp - 0xb54]
push eax
push 0x3e15
call fcn.1001646b
add esp, 0x34
mov byte [ebp - 0x173], 0
movzx eax, byte [ebp - 0x173]
test eax, eax
je 0x1000ed22
push 1
push 0x519
push 0
call fcn.100152b0
add esp, 0xc
push 1
lea ecx, [ebp - 0xb54]
call fcn.1002c5a0
mov dword [eax], 1
jmp 0x1000ed5b
push 1
lea ecx, [ebp - 0xb54]
call fcn.1002c5a0
mov dword [ebp - 0x720], eax
mov eax, dword [ebp - 0x720]
mov eax, dword [eax]
dec eax
mov ecx, dword [ebp - 0x720]
mov dword [ecx], eax
push 1
lea ecx, [ebp - 0xb54]
call fcn.1002c5a0
cmp dword [eax], 0xffffffe2
jl 0x1000ef38
mov dword [ebp - 0x120], 0xffffffff
mov dword [ebp - 0xc74], 0x2e6e7f73
mov dword [ebp - 0xf14], 0xce3c
mov dword [ebp - 0xc7c], 0x2e3ca369
mov dword [ebp - 0x304], 0
jmp 0x1000edb2
mov eax, dword [ebp - 0x304]
inc eax
mov dword [ebp - 0x304], eax
cmp dword [ebp - 0x304], 3
jge 0x1000edce
mov eax, dword [ebp - 0x304]
mov dword [ebp + eax*4 - 0x10c4], 0x3c8fc558
jmp 0x1000eda5
mov dword [ebp - 0x120], 2
jmp 0x1000ede7
mov eax, dword [ebp - 0x120]
dec eax
mov dword [ebp - 0x120], eax
cmp dword [ebp - 0x120], 0
jl 0x1000ee5a
push 1
lea ecx, [ebp - 0x1130]
call fcn.1002c487
mov byte [ebp - 4], 0x1b
push 0
lea eax, [ebp - 0x1130]
push eax
lea eax, [ebp - 0x12e0]
push eax
call fcn.10025aa2
add esp, 0xc
push 0xa70
push 0
lea eax, [ebp - 0x1130]
push eax
call fcn.10026faa
add esp, 0xc
mov eax, dword [ebp - 0x120]
mov ecx, dword [ebp - 0x120]
mov eax, dword [ebp + eax*4 - 0x10c4]
mov dword [ebp + ecx*4 - 0x10c4], eax
mov byte [ebp - 4], 0x1a
lea ecx, [ebp - 0x1130]
call fcn.1002c55e
jmp 0x1000edda
push 4
pop eax
imul eax, eax, 0
mov esi, dword [ebp + eax - 0x10c4]
push 1
lea ecx, [ebp - 0xb54]
call fcn.1002c5a0
imul eax, dword [eax], 3
cmp esi, eax
jne 0x1000ee87
mov dword [ebp - 0x928], 1
jmp 0x1000ee8e
and dword [ebp - 0x928], 0
mov eax, dword [ebp - 0xc74]
cmp eax, dword [ebp - 0x928]
je 0x1000eeb1
cmp dword [ebp - 0xf14], 0
je 0x1000eeb1
mov dword [ebp - 0x728], 1
jmp 0x1000eeb8
and dword [ebp - 0x728], 0
mov eax, dword [ebp - 0x728]
mov dword [ebp - 0xaa4], eax
mov eax, dword [ebp - 0xaa4]
mov dword [ebp - 0x12fc], eax
mov eax, dword [ebp - 0xc7c]
mov dword [ebp - 0x1304], eax
push 1
lea ecx, [ebp - 0xb54]
call fcn.1002c5a0
mov eax, 0xa98ceef9
cmp eax, 0x551b32e2
jae 0x1000ef01
mov dword [ebp - 0x730], 1
jmp 0x1000ef08
and dword [ebp - 0x730], 0
cmp dword [ebp - 0x730], 0x47c9d5fa
jge 0x1000ef20
mov dword [ebp - 0x930], 1
jmp 0x1000ef27
and dword [ebp - 0x930], 0
mov eax, dword [ebp - 0x930]
mov dword [ebp - 0x120], eax
jmp 0x1000ed37
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xb54]
call fcn.1002c55e
or dword [ebp - 0x1034], 0xffffffff
or dword [ebp - 0x1030], 0xffffffff
or dword [ebp - 0x102c], 0xffffffff
or dword [ebp - 0x1028], 0xffffffff
lea ecx, [ebp - 0x475]
call fcn.1002c5af
push eax
lea eax, [ebp - 0x1024]
push eax
lea eax, [ebp - 0x1034]
push eax
lea ecx, [ebp - 0x14f8]
call fcn.1002c5b2
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0x13e8]
call fcn.1002c538
mov dword [ebp - 4], 0x1c
mov dword [ebp - 0xccc], 0xe4b0ad8e
mov dword [ebp - 0x39c], 0xffffffff
push 3
lea ecx, [ebp - 0x13d8]
call fcn.1002c487
mov byte [ebp - 4], 0x1d
mov dword [ebp - 0xdbc], 0x25d1
cmp dword [ebp - 0xdbc], 0x51d
jge 0x1000f13b
lea eax, [ebp - 0x4c4]
push eax
mov ecx, 0x1065d290
call fcn.1002be5f
and dword [ebp - 0x404], 0
and dword [ebp - 0x21c], 0
and dword [ebp - 0x35c], 0
jmp 0x1000f013
mov eax, dword [ebp - 0x35c]
inc eax
mov dword [ebp - 0x35c], eax
mov eax, dword [ebp - 0x35c]
cmp eax, dword [ebp - 0x4c4]
jge 0x1000f065
lea eax, [ebp - 0x738]
push eax
mov ecx, 0x1065d290
call fcn.1002be5f
mov eax, dword [ebp - 0x404]
add eax, dword [ebp - 0x738]
mov dword [ebp - 0x404], eax
cmp dword [ebp - 0x21c], 0
jne 0x1000f063
cmp dword [ebp - 0x738], 0
je 0x1000f063
mov eax, dword [ebp - 0x35c]
inc eax
mov dword [ebp - 0x21c], eax
jmp 0x1000f006
cmp dword [ebp - 0x21c], 0
jne 0x1000f08e
push fcn.100304e9
mov edx, 0x10007804
mov ecx, 0x1065d1d8
call fcn.100306fd
mov ecx, eax
call fcn.1002c138
jmp 0x1000f13b
push fcn.100304e9
mov edx, 0x10007858
mov ecx, 0x1065d1d8
call fcn.100306fd
mov ecx, eax
call fcn.1002c138
cmp dword [ebp - 0x404], 0
je 0x1000f0dc
push fcn.100304e9
push dword [ebp - 0x4c4]
mov edx, 0x1000785c
mov ecx, 0x1065d1d8
call fcn.100306fd
mov ecx, eax
call fcn.1002c368
mov ecx, eax
call fcn.1002c138
jmp 0x1000f13b
push fcn.100304e9
push dword [ebp - 0x21c]
mov edx, 0x10007864
mov ecx, 0x1065d1d8
call fcn.100306fd
mov ecx, eax
call fcn.1002c368
mov ecx, eax
call fcn.1002c138
push fcn.100304e9
push dword [ebp - 0x4c4]
mov eax, dword [ebp - 0x21c]
inc eax
push eax
mov ecx, 0x1065d1d8
call fcn.1002c368
mov edx, 0x1000786c
mov ecx, eax
call fcn.100306fd
mov ecx, eax
call fcn.1002c368
mov ecx, eax
call fcn.1002c138
mov dword [ebp - 0x30c], 0
jmp 0x1000f154
mov eax, dword [ebp - 0x30c]
inc eax
mov dword [ebp - 0x30c], eax
cmp dword [ebp - 0x30c], 3
jge 0x1000f176
push dword [ebp - 0x30c]
lea ecx, [ebp - 0x13d8]
call fcn.1002c5a0
mov dword [eax], 0x9d786592
jmp 0x1000f147
mov dword [ebp - 0x39c], 0xb
jmp 0x1000f18f
mov eax, dword [ebp - 0x39c]
dec eax
mov dword [ebp - 0x39c], eax
cmp dword [ebp - 0x39c], 1
jg 0x1000f237
mov dword [ebp - 0xc84], 3
mov dword [ebp - 0x130c], 0
push 1
lea ecx, [ebp - 0x13c4]
call fcn.1002c487
mov byte [ebp - 4], 0x1e
mov dword [ebp - 0x314], 0
jmp 0x1000f1da
mov eax, dword [ebp - 0x314]
inc eax
mov dword [ebp - 0x314], eax
cmp dword [ebp - 0x314], 1
jge 0x1000f1fc
push dword [ebp - 0x314]
lea ecx, [ebp - 0x13c4]
call fcn.1002c5a0
mov dword [eax], 7
jmp 0x1000f1cd
push 1
push 0
lea eax, [ebp - 0xc84]
push eax
push 0x58ac
push 0xea1
push 0x3919
push 0x4dc8
call fcn.1000a829
add esp, 0x1c
mov byte [ebp - 4], 0x1d
lea ecx, [ebp - 0x13c4]
call fcn.1002c55e
jmp 0x1000f182
mov byte [ebp - 4], 0x1c
lea ecx, [ebp - 0x13d8]
call fcn.1002c55e
mov dword [ebp - 0x234], 0
push 3
lea ecx, [ebp - 0x3c0]
call fcn.1002c487
mov byte [ebp - 4], 0x1f
mov dword [ebp - 0xc94], 0xbbf9acf2
mov dword [ebp - 0xdc4], 0x34c865b4
mov dword [ebp - 0x414], 0xffff
push 1
lea ecx, [ebp - 0x10e8]
call fcn.1002c487
mov byte [ebp - 4], 0x20
mov dword [ebp - 0x38c], 0xffffffff
mov dword [ebp - 0x31c], 6
mov dword [ebp - 0xa38], 0x10ca1d2
mov dword [ebp - 0xe6c], 0x157b
cmp dword [ebp - 0xe6c], 0xb72
jge 0x1000f4fc
push 0x109fe63c
push 0x100077e0
call fcn.1005459b
pop ecx
pop ecx
and dword [ebp - 0x40c], 0
jmp 0x1000f2ef
mov eax, dword [ebp - 0x40c]
inc eax
mov dword [ebp - 0x40c], eax
mov eax, dword [ebp - 0x40c]
cmp eax, dword [0x109fe63c]
jge 0x1000f4fc
lea eax, [ebp - 0x3b4]
push eax
lea eax, [ebp - 0x1dc]
push eax
push 0x10007870
call fcn.1005459b
add esp, 0xc
push 0
push 2
push dword [ebp - 0x3b0]
push dword [ebp - 0x3b4]
call fcn.1006b3f0
mov dword [ebp - 0x6c], eax
mov dword [ebp - 0x68], edx
mov eax, dword [ebp - 0x6c]
add eax, 1
mov ecx, dword [ebp - 0x68]
adc ecx, 0
push ecx
push eax
push dword [ebp - 0x68]
push dword [ebp - 0x6c]
call fcn.100584a0
mov dword [ebp - 0x168], eax
mov dword [ebp - 0x164], edx
mov eax, dword [ebp - 0x1dc]
sub eax, 1
mov ecx, dword [ebp - 0x1d8]
sbb ecx, 0
push 0
push 2
push ecx
push eax
call fcn.1006b3f0
mov dword [ebp - 0x6c], eax
mov dword [ebp - 0x68], edx
mov eax, dword [ebp - 0x6c]
add eax, 1
mov ecx, dword [ebp - 0x68]
adc ecx, 0
push ecx
push eax
push dword [ebp - 0x68]
push dword [ebp - 0x6c]
call fcn.100584a0
mov ecx, dword [ebp - 0x168]
sub ecx, eax
mov eax, dword [ebp - 0x164]
sbb eax, edx
mov dword [ebp - 0x168], ecx
mov dword [ebp - 0x164], eax
push 0
push 2
push dword [ebp - 0x3b0]
push dword [ebp - 0x3b4]
call fcn.1006b3f0
mov dword [ebp - 0x6c], eax
mov dword [ebp - 0x68], edx
mov eax, dword [ebp - 0x3b4]
add eax, 1
mov ecx, dword [ebp - 0x3b0]
adc ecx, 0
push ecx
push eax
push dword [ebp - 0x3b0]
push dword [ebp - 0x3b4]
call fcn.100584a0
push 0
push 2
push edx
push eax
call fcn.1006b3f0
mov esi, eax
mov edi, edx
mov eax, dword [ebp - 0x6c]
add eax, 1
mov ecx, dword [ebp - 0x68]
adc ecx, 0
push ecx
push eax
push dword [ebp - 0x68]
push dword [ebp - 0x6c]
call fcn.100584a0
sub esi, eax
sbb edi, edx
mov eax, dword [ebp - 0x168]
sub eax, esi
mov ecx, dword [ebp - 0x164]
sbb ecx, edi
mov dword [ebp - 0x168], eax
mov dword [ebp - 0x164], ecx
mov eax, dword [ebp - 0x1dc]
sub eax, 1
mov ecx, dword [ebp - 0x1d8]
sbb ecx, 0
mov dword [ebp - 0x1dc], eax
mov dword [ebp - 0x1d8], ecx
push 0
push 2
push dword [ebp - 0x1d8]
push dword [ebp - 0x1dc]
call fcn.1006b3f0
mov dword [ebp - 0x6c], eax
mov dword [ebp - 0x68], edx
mov eax, dword [ebp - 0x1dc]
add eax, 1
mov ecx, dword [ebp - 0x1d8]
adc ecx, 0
push ecx
push eax
push dword [ebp - 0x1d8]
push dword [ebp - 0x1dc]
call fcn.100584a0
push 0
push 2
push edx
push eax
call fcn.1006b3f0
mov esi, eax
mov edi, edx
mov eax, dword [ebp - 0x6c]
add eax, 1
mov ecx, dword [ebp - 0x68]
adc ecx, 0
push ecx
push eax
push dword [ebp - 0x68]
push dword [ebp - 0x6c]
call fcn.100584a0
sub esi, eax
sbb edi, edx
add esi, dword [ebp - 0x168]
adc edi, dword [ebp - 0x164]
mov dword [ebp - 0x168], esi
mov dword [ebp - 0x164], edi
push dword [ebp - 0x164]
push dword [ebp - 0x168]
push 0x10007850
call fcn.10054c24
add esp, 0xc
jmp 0x1000f2e2
push 0
push 0x23f4
lea eax, [ebp - 0xc8c]
push eax
lea eax, [ebp - 0x3c0]
push eax
push 0x57c2
push 0x34e4
push 0x1cda
push 0x7de0
call fcn.10015ac4
add esp, 0x20
push 0x4a00
push 1
lea eax, [ebp - 0xc8c]
push eax
push 0x4771
lea eax, [ebp - 0x10e8]
push eax
push 1
push 0x5937
call fcn.10009c96
add esp, 0x1c
push 0x3936
lea eax, [ebp - 0x3c0]
push eax
lea eax, [ebp - 0xdc4]
push eax
push 0
push 0x1904
lea eax, [ebp - 0xc94]
push eax
lea eax, [ebp - 0x414]
push eax
call fcn.100255db
add esp, 0x1c
push 2
lea ecx, [ebp - 0x3c0]
call fcn.1002c5a0
push 0
lea ecx, [ebp - 0x3c0]
call fcn.1002c5a0
cmp dword [eax], 1
je 0x1000f5b1
mov dword [ebp - 0xa30], 1
jmp 0x1000f5b8
and dword [ebp - 0xa30], 0
mov eax, dword [ebp - 0x414]
imul eax, dword [ebp - 0xa30]
mov dword [ebp - 0x38c], eax
cmp dword [ebp - 0x38c], 1
ja 0x1000f5e0
mov dword [ebp - 0x740], 1
jmp 0x1000f5e7
and dword [ebp - 0x740], 0
cmp dword [ebp - 0x740], 0
jb 0x1000f5fc
mov dword [ebp - 0x938], 1
jmp 0x1000f603
and dword [ebp - 0x938], 0
mov eax, dword [ebp - 0x938]
mov dword [ebp - 0x31c], eax
mov esi, dword [ebp - 0x31c]
push 2
lea ecx, [ebp - 0x3c0]
call fcn.1002c5a0
add esi, dword [eax]
je 0x1000f6d2
mov dword [ebp - 0xebc], 0x6aeab669
cmp dword [ebp - 0xebc], 0
je 0x1000f690
mov dword [ebp - 0xc9c], 0xffffffff
push 0x57f1
push 0x594b
lea eax, [ebp - 0x3c0]
push eax
push 0
push 0xa86
lea eax, [ebp - 0xc9c]
push eax
push 0x2079
push 1
push 0x3fb6
push 0x64c
push 0x743b
push 0x3001
push 0x1c7f
call fcn.1001646b
add esp, 0x34
jmp 0x1000f6cd
mov byte [ebp - 0x16b], 0
movzx eax, byte [ebp - 0x16b]
test eax, eax
je 0x1000f6ad
push 0x144f
call dword [sym.imp.USER32.dll_IsIconic]
mov byte [ebp - 0x171], 0
movzx eax, byte [ebp - 0x171]
test eax, eax
je 0x1000f6cd
push 0
push 0x52db
call fcn.10015422
pop ecx
pop ecx
jmp 0x1000f97d
mov dword [ebp - 0x254], 0x57f0
mov dword [ebp - 0x46c], 0xfffffffb
mov dword [ebp - 0xaac], 0xcfa8
mov dword [ebp - 0xdcc], 0
mov dword [ebp - 0x364], 0
jmp 0x1000f713
mov eax, dword [ebp - 0x364]
inc eax
mov dword [ebp - 0x364], eax
cmp dword [ebp - 0x364], 1
jge 0x1000f72f
mov eax, dword [ebp - 0x364]
mov dword [ebp + eax*4 - 0x4a8], 0x1d5bc3f
jmp 0x1000f706
mov eax, dword [ebp - 0x254]
mov dword [ebp - 0x1314], eax
push 2
lea ecx, [ebp - 0x3c0]
call fcn.1002c5a0
cmp dword [eax], 0
je 0x1000f82c
mov dword [ebp - 0x31c], 0xd3f1
mov eax, dword [ebp - 0x31c]
mov dword [ebp - 0x46c], eax
mov esi, dword [ebp - 0x46c]
push 2
lea ecx, [ebp - 0x3c0]
call fcn.1002c5a0
cmp esi, dword [eax]
jg 0x1000f78a
mov dword [ebp - 0x748], 1
jmp 0x1000f791
and dword [ebp - 0x748], 0
push 2
lea ecx, [ebp - 0x3c0]
call fcn.1002c5a0
mov ecx, dword [ebp - 0x748]
cmp ecx, dword [eax]
jle 0x1000f7b4
and dword [ebp - 0x758], 0
mov eax, dword [ebp - 0x758]
mov dword [ebp - 0xa38], eax
mov eax, dword [ebp - 0xa38]
mov dword [ebp - 0x38c], eax
mov eax, dword [ebp - 0x38c]
mov dword [ebp - 0x131c], eax
push 0
lea ecx, [ebp - 0x10e8]
call fcn.1002c5a0
mov esi, dword [ebp - 0xaac]
push 2
lea ecx, [ebp - 0x3c0]
call fcn.1002c5a0
sub esi, dword [eax]
je 0x1000f882
cmp dword [ebp - 0x46c], 0
cmp dword [ebp - 0x254], 2
jbe 0x1000f897
mov byte [ebp - 4], 0x1f
lea ecx, [ebp - 0x10e8]
call fcn.1002c55e
mov byte [ebp - 4], 0x1c
lea ecx, [ebp - 0x3c0]
call fcn.1002c55e
mov dword [ebp - 0x36c], 3
mov dword [ebp - 0xc4], 6
mov dword [ebp - 0x324], 0xffffffff
mov dword [ebp - 0xe74], 0xa7fc
mov dword [ebp - 0x41c], 0x5be734e2
push 1
lea ecx, [ebp - 0x10dc]
call fcn.1002c487
mov byte [ebp - 4], 0x21
mov dword [ebp - 0xef4], 0x7b405a81
push 0x1834
lea eax, [ebp - 0x10dc]
push eax
push 0
lea eax, [ebp - 0x1324]
push eax
push 0x1283
call fcn.1001692a
add esp, 0x14
push 0x15fa
lea eax, [ebp - 0x36c]
push eax
lea eax, [ebp - 0xc4]
push eax
push 0
push 0x3709
call fcn.100153bb
add esp, 0x14
mov dword [ebp - 0xc4], 1
jmp 0x1000fa45
jmp 0x100151ba
mov eax, dword [ebp - 0xcf0]
mov dword [ebp - 0xd18], eax
mov eax, dword [ebp - 0xcf8]
mov dword [ebp - 0xd20], eax
mov eax, dword [ebp - 0xd00]
mov dword [ebp - 0xd28], eax
mov eax, dword [ebp - 0xd08]
mov dword [ebp - 0xd30], eax
mov eax, dword [ebp - 0xd10]
mov dword [ebp - 0xd38], eax
mov eax, dword [ebp - 0xd18]
mov dword [ebp - 0xd58], eax
mov eax, dword [ebp - 0xd20]
mov dword [ebp - 0xd50], eax
mov eax, dword [ebp - 0xd28]
mov dword [ebp - 0x298], eax
mov eax, dword [ebp - 0xd30]
mov dword [ebp - 0xd40], eax
mov eax, dword [ebp - 0xd38]
mov dword [ebp - 0xd48], eax
mov eax, dword [ebp - 0x298]
mov ecx, dword [ebp - 0x298]
mov ecx, dword [ecx]
cmp dword [eax], ecx
jne 0x100150fd
mov dword [ebp - 0xa2c], 1
jmp 0x10015104
and dword [ebp - 0xa2c], 0
mov eax, dword [ebp - 0x298]
cmp dword [eax], 0xdfcc
jge 0x1001511e
mov dword [ebp - 0x448], 1
jmp 0x10015125
and dword [ebp - 0x448], 0
mov eax, dword [ebp - 0xd40]
mov ecx, dword [ebp - 0x448]
mov dword [eax], ecx
cmp dword [ebp - 0x448], 0
jne 0x10015150
mov eax, dword [ebp - 0xd48]
cmp dword [eax], 0xfffffffe
jge 0x10015150
and dword [ebp - 0xa24], 0
jmp 0x1001515a
mov dword [ebp - 0xa24], 1
mov eax, dword [ebp - 0x298]
mov eax, dword [eax]
cmp dword [ebp - 0xa24], eax
jg 0x10015176
mov dword [ebp - 0xa34], 1
jmp 0x1001517d
and dword [ebp - 0xa34], 0
mov eax, dword [ebp - 0xa2c]
cmp eax, dword [ebp - 0xa34]
jle 0x10015197
mov dword [ebp - 0x450], 1
jmp 0x1001519e
and dword [ebp - 0x450], 0
mov eax, dword [ebp - 0xd50]
mov ecx, dword [ebp - 0x450]
mov dword [eax], ecx
mov eax, dword [ebp - 0xd58]
mov ecx, dword [ebp - 0x450]
mov dword [eax], ecx
jmp 0x10015266
mov eax, dword [ebp + 0x24]
mov dword [ebp - 0xd68], eax
mov eax, dword [ebp + 0x3c]
mov dword [ebp - 0xd80], eax
lea eax, [ebp + 0x20]
mov dword [ebp - 0xd60], eax
mov eax, dword [ebp - 0xd60]
movzx eax, byte [eax]
test eax, eax
je 0x10015237
mov eax, dword [ebp - 0xd68]
mov dword [ebp - 0xd70], eax
mov eax, dword [ebp - 0xd70]
mov dword [ebp - 0xd78], eax
mov eax, dword [ebp - 0xd78]
movzx eax, byte [eax]
test eax, eax
je 0x10015235
push 0x12b5
push 0xcc3
push 0xc74
push 0x1bba
push 0x20fc
push 0xf34
push 0x4db
call dword [sym.imp.GDI32.dll_RoundRect]
jmp 0x10015266
mov eax, dword [ebp - 0xd80]
mov dword [ebp - 0xd88], eax
mov eax, dword [ebp - 0xd88]
mov dword [ebp - 0xd90], eax
mov eax, dword [ebp - 0xd90]
movzx eax, byte [eax]
test eax, eax
je 0x10015266
push 0
push 0
call dword [sym.imp.KERNEL32.dll_GetFileSize]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
mov esp, ebp
pop ebp
ret