Function at 0x1002c4e9
Capabilities:
Inspect section memory permissions

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x100822d0
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x444
push esi
movzx eax, byte [ebp + 0x14]
test eax, eax
je 0x1002e3f0
mov eax, dword [ebp + 0x10]
mov dword [ebp - 0xd4], eax
mov dword [ebp - 0x328], 0xe91a049f
mov dword [ebp - 0x324], 0xe91a049f
mov dword [ebp - 0x320], 0xe91a049f
mov dword [ebp - 0x31c], 0xe91a049f
mov dword [ebp - 0x38], 0xc1ec2db2
mov dword [ebp - 0x1b8], 0xa237f4a7
mov dword [ebp - 0x3b4], 1
mov dword [ebp - 0x38], 0
jmp 0x1002c570
mov eax, dword [ebp - 0x38]
inc eax
mov dword [ebp - 0x38], eax
cmp dword [ebp - 0x38], 3
jg 0x1002c644
mov dword [ebp - 0xb4], 0x80c170c
mov dword [ebp - 0xb4], 0
jmp 0x1002c59d
mov eax, dword [ebp - 0xb4]
inc eax
mov dword [ebp - 0xb4], eax
cmp dword [ebp - 0xb4], 3
jg 0x1002c63f
mov dword [ebp - 0xcc], 8
mov dword [ebp - 0xcc], 3
jmp 0x1002c5cd
mov eax, dword [ebp - 0xcc]
dec eax
mov dword [ebp - 0xcc], eax
cmp dword [ebp - 0xcc], 0
jl 0x1002c63a
mov dword [ebp - 0xd0], 1
mov byte [ebp - 0x45], 0
movzx eax, byte [ebp - 0x45]
test eax, eax
je 0x1002c5f4
push 0
call fcn.1002e4c0
pop ecx
mov dword [ebp - 0xd0], 3
jmp 0x1002c60d
mov eax, dword [ebp - 0xd0]
dec eax
mov dword [ebp - 0xd0], eax
cmp dword [ebp - 0xd0], 0
jl 0x1002c638
mov byte [ebp - 0x42], 0
movzx eax, byte [ebp - 0x42]
test eax, eax
je 0x1002c636
push 0x5fde
push 0
push 0x7af5
call fcn.1002eb17
add esp, 0xc
jmp 0x1002c600
jmp 0x1002c5c0
jmp 0x1002c590
jmp 0x1002c569
mov dword [ebp - 0x38], 0xffffffe3
jmp 0x1002c654
mov eax, dword [ebp - 0x38]
inc eax
mov dword [ebp - 0x38], eax
cmp dword [ebp - 0x38], 0xf
jg 0x1002c716
mov dword [ebp - 0x144], 0
mov dword [ebp - 0xe4], 0x6548aab5
mov eax, 0xffff
test eax, eax
je 0x1002c6cb
push 4
pop eax
imul eax, eax, 3
mov eax, dword [ebp + eax - 0x328]
add eax, dword [ebp - 0x144]
mov ecx, 0x6974
sub ecx, eax
push 4
pop eax
shl eax, 0
sub ecx, dword [ebp + eax - 0x328]
push 4
pop eax
imul eax, eax, 3
imul ecx, dword [ebp + eax - 0x328]
imul ecx, dword [ebp - 0x144]
add ecx, dword [ebp - 0xe4]
je 0x1002c6cb
mov dword [ebp - 0x118], 1
jmp 0x1002c6d2
and dword [ebp - 0x118], 0
mov eax, dword [ebp - 0xe4]
imul eax, dword [ebp - 0x118]
cmp eax, 0xff4c
jne 0x1002c6f2
mov dword [ebp - 0x254], 1
jmp 0x1002c6f9
and dword [ebp - 0x254], 0
mov eax, dword [ebp - 0x254]
mov dword [ebp - 0x1b8], eax
mov eax, dword [ebp - 0xe4]
mov dword [ebp - 0x1b8], eax
jmp 0x1002c64d
mov eax, dword [ebp - 0xd4]
mov eax, dword [eax]
mov ecx, dword [ebp - 0xd4]
mov ecx, dword [ecx]
movzx ecx, word [ecx + 0x14]
lea eax, [eax + ecx + 0x18]
mov dword [ebp - 0x24], eax
mov dword [ebp - 0x36c], 0xffffffff
mov dword [ebp - 0x368], 0xffffffff
mov dword [ebp - 0x364], 0xffffffff
mov dword [ebp - 0x360], 0xffffffff
mov dword [ebp - 0x2b4], 0xcb61d225
mov dword [ebp - 0x1d0], 0x13717be9
mov dword [ebp - 0x138], 1
push 2
lea ecx, [ebp - 0x340]
call fcn.10026cbf
and dword [ebp - 4], 0
mov dword [ebp - 0x3d8], 0xfffffffb
mov dword [ebp - 0x1c8], 0x3818264d
mov dword [ebp - 0xb0], 0x5adf851f
mov dword [ebp - 0x128], 0xe5f88592
mov dword [ebp - 0x270], 0x4045
mov dword [ebp - 0x14], 0
jmp 0x1002c7ca
mov eax, dword [ebp - 0x14]
inc eax
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 4
jge 0x1002c7e0
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x450], 0x89328a06
jmp 0x1002c7c3
lea eax, [ebp - 0x14]
push eax
lea eax, [ebp - 0x340]
push eax
push 0x4131
push 0
call fcn.1002c365
add esp, 0x10
mov dword [ebp - 0x14], 0
jmp 0x1002c80a
mov eax, dword [ebp - 0x14]
inc eax
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 4
jge 0x1002c820
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x430], 0x2a67f8b4
jmp 0x1002c803
mov dword [ebp - 0x14], 0
jmp 0x1002c830
mov eax, dword [ebp - 0x14]
inc eax
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 1
jge 0x1002c846
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x274], 0xe4ed383d
jmp 0x1002c829
mov byte [ebp - 0x44], 0
movzx eax, byte [ebp - 0x44]
test eax, eax
je 0x1002c860
push 0
push 0x74a5
call fcn.100325cf
pop ecx
pop ecx
cmp dword [ebp - 0x1d0], 0xf5fa
je 0x1002c878
mov dword [ebp - 0x208], 1
jmp 0x1002c87f
and dword [ebp - 0x208], 0
push 1
lea ecx, [ebp - 0x340]
call fcn.10026d2c
mov dword [ebp - 0x10c], eax
push 4
pop eax
imul eax, eax, 0
lea eax, [ebp + eax - 0x450]
mov dword [ebp - 0x120], eax
mov eax, dword [ebp - 0x120]
mov ecx, dword [ebp - 0x10c]
mov ecx, dword [ecx]
mov dword [eax], ecx
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x36c]
mov dword [ebp - 0x2e8], eax
mov eax, dword [ebp - 0x120]
mov eax, dword [eax]
add eax, dword [ebp - 0x208]
mov dword [ebp - 0x258], eax
mov eax, dword [ebp - 0x10c]
mov eax, dword [eax]
dec eax
mov ecx, dword [ebp - 0x10c]
mov dword [ecx], eax
mov eax, dword [ebp - 0x2e8]
cmp eax, dword [ebp - 0x258]
jle 0x1002c906
mov dword [ebp - 0x2e0], 1
jmp 0x1002c90d
and dword [ebp - 0x2e0], 0
mov eax, dword [ebp - 0xb0]
dec eax
mov dword [ebp - 0xb0], eax
mov eax, dword [ebp - 0xb0]
mov dword [ebp - 0x128], eax
mov eax, dword [ebp - 0x128]
sub eax, dword [ebp - 0x138]
mov dword [ebp - 0x288], eax
push 4
pop eax
imul eax, eax, 3
mov ecx, dword [ebp - 0x288]
mov dword [ebp + eax - 0x430], ecx
mov dword [ebp - 0x270], 0
push 4
pop eax
shl eax, 1
mov ecx, dword [ebp - 0xb0]
cmp dword [ebp + eax - 0x36c], ecx
jle 0x1002c975
mov dword [ebp - 0x1c0], 1
jmp 0x1002c97c
and dword [ebp - 0x1c0], 0
mov eax, dword [ebp - 0x1c8]
cmp dword [ebp - 0x1c0], eax
jne 0x1002c996
mov dword [ebp - 0x130], 1
jmp 0x1002c99d
and dword [ebp - 0x130], 0
cmp dword [ebp - 0x130], 0xffffffff
jl 0x1002c9b2
mov dword [ebp - 0x230], 1
jmp 0x1002c9b9
and dword [ebp - 0x230], 0
push 4
pop eax
imul eax, eax, 3
mov eax, dword [ebp + eax - 0x430]
cmp dword [ebp - 0x230], eax
jne 0x1002c9da
mov dword [ebp - 0x26c], 1
jmp 0x1002c9e1
and dword [ebp - 0x26c], 0
mov eax, dword [ebp - 0x2b4]
mov dword [ebp - 0x3e0], eax
push 1
lea ecx, [ebp - 0x340]
call fcn.10026d2c
mov eax, dword [ebp - 0x138]
cmp dword [ebp - 0x1c8], eax
jle 0x1002ca14
mov dword [ebp - 0x140], 1
jmp 0x1002ca1b
and dword [ebp - 0x140], 0
cmp dword [ebp - 0x140], 9
jae 0x1002ca30
mov dword [ebp - 0x210], 1
jmp 0x1002ca37
and dword [ebp - 0x210], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x274]
cmp dword [ebp - 0x210], eax
je 0x1002ca58
mov dword [ebp - 0x148], 1
jmp 0x1002ca5f
and dword [ebp - 0x148], 0
mov eax, dword [ebp - 0x148]
mov dword [ebp - 0x1d0], eax
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x340]
call fcn.10026d27
and dword [ebp - 0x108], 0
jmp 0x1002ca99
mov eax, dword [ebp - 0x108]
inc eax
mov dword [ebp - 0x108], eax
mov eax, dword [ebp - 0x24]
add eax, 0x28
mov dword [ebp - 0x24], eax
mov eax, dword [ebp - 0xd4]
mov eax, dword [eax]
movzx eax, word [eax + 6]
cmp dword [ebp - 0x108], eax
jge 0x1002e3ee
mov dword [ebp - 0x4c], 0
push 4
lea ecx, [ebp - 0x2f8]
call fcn.10026cbf
mov dword [ebp - 4], 1
mov dword [ebp - 0x70], 0x8700d35
mov dword [ebp - 0x35c], 4
mov dword [ebp - 0x358], 4
mov dword [ebp - 0x354], 4
mov dword [ebp - 0x350], 4
mov dword [ebp - 0x180], 0x6f80366e
mov dword [ebp - 0x30c], 0xffffffff
mov dword [ebp - 0xa0], 0
jmp 0x1002cb28
mov eax, dword [ebp - 0xa0]
inc eax
mov dword [ebp - 0xa0], eax
cmp dword [ebp - 0xa0], 1
jge 0x1002cb41
mov eax, dword [ebp - 0xa0]
mov dword [ebp + eax*4 - 0x20], 0
jmp 0x1002cb1b
lea eax, [ebp - 0x2f8]
push eax
push 0x2d65
lea eax, [ebp - 0xa0]
push eax
push 0
push 0x122e
call fcn.10032dcb
add esp, 0x14
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x20], 0
jne 0x1002ccf1
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x20]
mov dword [ebp - 0x3e8], eax
push 4
pop eax
imul eax, eax, 0
push 4
pop ecx
imul ecx, ecx, 0
mov ecx, dword [ebp + ecx - 0x20]
cmp dword [ebp + eax - 0x20], ecx
jne 0x1002cbac
cmp dword [ebp - 0x4c], 0
je 0x1002cbac
mov dword [ebp - 0x150], 1
jmp 0x1002cbb3
and dword [ebp - 0x150], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x20]
cmp dword [ebp - 0x150], eax
jl 0x1002cbd1
mov dword [ebp - 0xf0], 1
jmp 0x1002cbd8
and dword [ebp - 0xf0], 0
push 2
lea ecx, [ebp - 0x2f8]
call fcn.10026d2c
mov ecx, dword [ebp - 0xf0]
mov dword [eax], ecx
cmp dword [ebp - 0xf0], 0
jne 0x1002cc05
cmp dword [ebp - 0x70], 0
jne 0x1002cc05
and dword [ebp - 0x250], 0
jmp 0x1002cc0f
mov dword [ebp - 0x250], 1
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x20]
cmp dword [ebp - 0x250], eax
jne 0x1002cc2d
mov dword [ebp - 0x158], 1
jmp 0x1002cc34
and dword [ebp - 0x158], 0
mov eax, dword [ebp - 0x4c]
cmp dword [ebp - 0x158], eax
jg 0x1002cc4b
mov dword [ebp - 0x1d8], 1
jmp 0x1002cc52
and dword [ebp - 0x1d8], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x20]
add eax, dword [ebp - 0x1d8]
mov dword [ebp - 0x160], eax
push 4
pop eax
imul eax, eax, 3
mov ecx, dword [ebp - 0x160]
mov dword [ebp + eax - 0x35c], ecx
cmp dword [ebp - 0x160], 0xd8475761
jae 0x1002cc93
mov dword [ebp - 0x218], 1
jmp 0x1002cc9a
and dword [ebp - 0x218], 0
mov eax, dword [ebp - 0x218]
neg eax
je 0x1002ccb9
mov eax, 0x7eb2
test eax, eax
je 0x1002ccb9
mov dword [ebp - 0x168], 1
jmp 0x1002ccc0
and dword [ebp - 0x168], 0
cmp dword [ebp - 0x168], 0xde8cc195
jae 0x1002ccd8
mov dword [ebp - 0x1e0], 1
jmp 0x1002ccdf
and dword [ebp - 0x1e0], 0
cmp dword [ebp - 0x1e0], 0
jne 0x1002ccf1
and dword [ebp - 0x170], 0
jmp 0x1002ccfb
mov dword [ebp - 0x170], 1
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x20]
cmp eax, dword [ebp - 0x170]
jg 0x1002cd19
mov dword [ebp - 0x238], 1
jmp 0x1002cd20
and dword [ebp - 0x238], 0
cmp dword [ebp - 0x238], 0x951f
jne 0x1002cd38
mov dword [ebp - 0x178], 1
jmp 0x1002cd3f
and dword [ebp - 0x178], 0
mov eax, dword [ebp - 0x70]
cmp dword [ebp - 0x178], eax
jle 0x1002cd56
mov dword [ebp - 0x1e8], 1
jmp 0x1002cd5d
and dword [ebp - 0x1e8], 0
mov eax, dword [ebp - 0x1e8]
mov dword [ebp - 0x180], eax
mov eax, dword [ebp - 0x180]
mov dword [ebp - 0x30c], eax
mov dword [ebp - 0x70], 0xffffffea
jmp 0x1002cd85
mov eax, dword [ebp - 0x70]
inc eax
mov dword [ebp - 0x70], eax
cmp dword [ebp - 0x70], 0xf
jl 0x1002d008
mov dword [ebp - 0x1c], 0xdc705be7
mov dword [ebp - 0x284], 0x11945b4
mov eax, dword [ebp - 0x1c]
neg eax
je 0x1002ce3a
mov dword [ebp - 0x4c], 0
jmp 0x1002cdbb
mov eax, dword [ebp - 0x4c]
inc eax
mov dword [ebp - 0x4c], eax
cmp dword [ebp - 0x4c], 0
jg 0x1002ce0e
mov dword [ebp - 0x1c], 0
jmp 0x1002cdd1
mov eax, dword [ebp - 0x1c]
inc eax
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 0
jg 0x1002cde7
mov eax, dword [ebp - 0x4c]
mov dword [ebp + eax*4 - 0x358], 0xfffffff7
jmp 0x1002cdca
mov byte [ebp - 0x43], 0
movzx eax, byte [ebp - 0x43]
test eax, eax
je 0x1002ce0c
push 0x6fc2
push 1
push 0x7e0e
push 0x514c
call fcn.1002acd0
add esp, 0x10
jmp 0x1002cdb4
mov byte [ebp - 0x61], 0
movzx eax, byte [ebp - 0x61]
test eax, eax
je 0x1002ce38
push 0x52e
push 0x723
push 0x293b
push 0x4108
push 0
call fcn.1002eb81
add esp, 0x14
jmp 0x1002ce4e
push 0x5d8f
push 0x5cc5
push 1
call fcn.1002bd4a
add esp, 0xc
cmp dword [ebp - 0x1c], 0x6e71
jl 0x1002ce63
mov dword [ebp - 0x220], 1
jmp 0x1002ce6a
and dword [ebp - 0x220], 0
cmp dword [ebp - 0x220], 0xcb25bb5
jg 0x1002ce82
mov dword [ebp - 0x27c], 1
jmp 0x1002ce89
and dword [ebp - 0x27c], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x20]
mov dword [ebp - 0x3b0], eax
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0x3ac], eax
cmp dword [ebp - 0x1c], 0x7cd1
jl 0x1002ceb7
mov dword [ebp - 0x188], 1
jmp 0x1002cebe
and dword [ebp - 0x188], 0
mov eax, dword [ebp - 0x1c]
cmp eax, dword [ebp - 0x188]
jg 0x1002ced9
push 4
pop eax
test eax, eax
jne 0x1002ced9
and dword [ebp - 0x1f0], 0
jmp 0x1002cee3
mov dword [ebp - 0x1f0], 1
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x20]
cmp eax, dword [ebp - 0x1f0]
jle 0x1002cf01
mov dword [ebp - 0x190], 1
jmp 0x1002cf08
and dword [ebp - 0x190], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x20]
add eax, dword [ebp - 0x190]
cmp eax, 0xa9ad1dc2
je 0x1002cf2b
mov dword [ebp - 0x248], 1
jmp 0x1002cf32
and dword [ebp - 0x248], 0
mov eax, dword [ebp - 0x1c]
cmp dword [ebp - 0x248], eax
jle 0x1002cf49
mov dword [ebp - 0x100], 1
jmp 0x1002cf50
and dword [ebp - 0x100], 0
push 2
lea ecx, [ebp - 0x2f8]
call fcn.10026d2c
mov ecx, dword [ebp - 0x100]
mov dword [eax], ecx
cmp dword [ebp - 0x100], 0xfff7
jb 0x1002cf7d
mov dword [ebp - 0x2bc], 1
jmp 0x1002cf84
and dword [ebp - 0x2bc], 0
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0x3bc], eax
mov eax, 0x7e87
test eax, eax
je 0x1002cfb4
push 2
lea ecx, [ebp - 0x2f8]
call fcn.10026d2c
cmp dword [eax], 0
je 0x1002cfb4
mov dword [ebp - 0x198], 1
jmp 0x1002cfbb
and dword [ebp - 0x198], 0
mov eax, dword [ebp - 0x1c]
cmp dword [ebp - 0x198], eax
jl 0x1002cfd2
mov dword [ebp - 0x1f8], 1
jmp 0x1002cfd9
and dword [ebp - 0x1f8], 0
mov eax, dword [ebp - 0x1c]
cmp dword [ebp - 0x1f8], eax
je 0x1002cff0
mov dword [ebp - 0x1a0], 1
jmp 0x1002cff7
and dword [ebp - 0x1a0], 0
mov eax, dword [ebp - 0x1a0]
mov dword [ebp - 0x284], eax
jmp 0x1002cd7e
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x2f8]
call fcn.10026d27
mov dword [ebp - 0x10], 0xffffffff
mov dword [ebp - 0x40], 0xe0fc36fe
push 2
lea ecx, [ebp - 0x308]
call fcn.10026cbf
mov dword [ebp - 4], 2
mov dword [ebp - 0x30], 0
jmp 0x1002d049
mov eax, dword [ebp - 0x30]
inc eax
mov dword [ebp - 0x30], eax
cmp dword [ebp - 0x30], 2
jge 0x1002d05c
mov eax, dword [ebp - 0x30]
mov dword [ebp + eax*4 - 0x6c], 0xe2799ac7
jmp 0x1002d042
mov dword [ebp - 0x30], 0
jmp 0x1002d06c
mov eax, dword [ebp - 0x30]
inc eax
mov dword [ebp - 0x30], eax
cmp dword [ebp - 0x30], 2
jge 0x1002d088
push dword [ebp - 0x30]
lea ecx, [ebp - 0x308]
call fcn.10026d2c
mov dword [eax], 0xbd95d606
jmp 0x1002d065
mov dword [ebp - 0x10], 0
jmp 0x1002d098
mov eax, dword [ebp - 0x10]
inc eax
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], 1
jg 0x1002d163
mov dword [ebp - 0xf8], 0
mov eax, dword [ebp - 0x10]
mov eax, dword [ebp + eax*4 - 0x6c]
mov dword [ebp - 0x2e4], eax
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x2e4]
mov dword [ebp + eax - 0x6c], ecx
mov eax, dword [ebp - 0x10]
mov dword [ebp - 0x3c4], eax
cmp dword [ebp - 0x10], 0xfffffff8
ja 0x1002d0ed
cmp dword [ebp - 0xf8], 0
je 0x1002d0ed
mov dword [ebp - 0x28c], 1
jmp 0x1002d0f4
and dword [ebp - 0x28c], 0
mov eax, dword [ebp - 0x10]
mov dword [ebp - 0x3cc], eax
cmp dword [ebp - 0xf8], 0x53f0d3ec
je 0x1002d11b
cmp dword [ebp - 0xf8], 0
jne 0x1002d11b
and dword [ebp - 0x228], 0
jmp 0x1002d125
mov dword [ebp - 0x228], 1
mov eax, dword [ebp - 0x10]
cmp eax, dword [ebp - 0x228]
jle 0x1002d13c
mov dword [ebp - 0x1a8], 1
jmp 0x1002d143
and dword [ebp - 0x1a8], 0
mov eax, dword [ebp - 0x10]
imul eax, dword [ebp - 0x1a8]
mov dword [ebp - 0x40], eax
mov eax, dword [ebp - 0x10]
mov ecx, dword [ebp - 0x10]
mov eax, dword [ebp + eax*4 - 0x6c]
mov dword [ebp + ecx*4 - 0x6c], eax
jmp 0x1002d091
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x40]
cmp dword [ebp + eax - 0x6c], ecx
je 0x1002d17e
mov dword [ebp - 0x200], 1
jmp 0x1002d185
and dword [ebp - 0x200], 0
cmp dword [ebp - 0x200], 0xa88af16d
jb 0x1002d19d
mov dword [ebp - 0x1b0], 1
jmp 0x1002d1a4
and dword [ebp - 0x1b0], 0
mov eax, dword [ebp - 0x40]
cmp eax, dword [ebp - 0x1b0]
jl 0x1002d1bb
mov dword [ebp - 0x240], 1
jmp 0x1002d1c2
and dword [ebp - 0x240], 0
cmp dword [ebp - 0x240], 5
je 0x1002d1d7
mov dword [ebp - 0x2c4], 1
jmp 0x1002d1de
and dword [ebp - 0x2c4], 0
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x6c], 0x7e01
je 0x1002d1fa
mov dword [ebp - 0x294], 1
jmp 0x1002d201
and dword [ebp - 0x294], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x6c]
mov dword [ebp - 0x3d4], eax
cmp dword [ebp - 0x40], 0
je 0x1002d21d
cmp dword [ebp - 0x40], 0
jne 0x1002d226
mov eax, 0xae50714b
test eax, eax
je 0x1002d291
mov dword [ebp - 0x10], 1
jmp 0x1002d236
mov eax, dword [ebp - 0x10]
dec eax
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], 0
jl 0x1002d28c
mov eax, dword [ebp - 0x10]
cmp dword [ebp + eax*4 - 0x6c], 0
je 0x1002d27c
mov byte [ebp - 0x4d], 0
movzx eax, byte [ebp - 0x4d]
test eax, eax
je 0x1002d266
push 0x3de5
push 0
push 0x5a91
call fcn.1002f633
add esp, 0xc
push 0x6b28
push 0x389d
push 1
call fcn.1002bda9
add esp, 0xc
jmp 0x1002d28a
mov eax, dword [ebp - 0x10]
mov ecx, dword [ebp - 0x10]
mov eax, dword [ebp + eax*4 - 0x6c]
mov dword [ebp + ecx*4 - 0x6c], eax
jmp 0x1002d22f
jmp 0x1002d534
mov dword [ebp - 0xd8], 0x5701832d
mov dword [ebp - 0x2fc], 0
mov dword [ebp - 0x2a4], 0x2d63d2c8
mov dword [ebp - 0x3dc], 1
mov dword [ebp - 0x11c], 0x9ad537e8
mov dword [ebp - 0x2ac], 0xfffffffa
mov dword [ebp - 0x3f0], 0x9257de97
mov dword [ebp - 0xe8], 0xd232038b
mov dword [ebp - 0xf4], 9
mov eax, dword [ebp - 0xd8]
mov dword [ebp - 0x10], eax
mov eax, dword [ebp - 0xd8]
cmp dword [ebp - 0x10], eax
jg 0x1002d30b
mov dword [ebp - 0x15c], 1
jmp 0x1002d312
and dword [ebp - 0x15c], 0
mov eax, dword [ebp - 0xe8]
inc eax
mov dword [ebp - 0xe8], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x6c]
cmp dword [ebp - 0xe8], eax
jge 0x1002d33d
mov dword [ebp - 0x12c], 1
jmp 0x1002d344
and dword [ebp - 0x12c], 0
cmp dword [ebp - 0x2fc], 0xfffffffe
jae 0x1002d359
mov dword [ebp - 0x114], 1
jmp 0x1002d360
and dword [ebp - 0x114], 0
mov eax, dword [ebp - 0xf4]
cmp dword [ebp - 0x114], eax
jl 0x1002d37a
mov dword [ebp - 0x29c], 1
jmp 0x1002d381
and dword [ebp - 0x29c], 0
mov eax, dword [ebp - 0xd8]
mov dword [ebp - 0x3f8], eax
cmp dword [ebp - 0xf4], 0
jne 0x1002d3a2
mov dword [ebp - 0x2cc], 1
jmp 0x1002d3a9
and dword [ebp - 0x2cc], 0
mov eax, dword [ebp - 0x11c]
mov dword [ebp - 0x400], eax
mov eax, dword [ebp - 0x40]
cmp dword [ebp - 0x11c], eax
jne 0x1002d3cc
mov dword [ebp - 0x124], 1
jmp 0x1002d3d3
and dword [ebp - 0x124], 0
mov eax, dword [ebp - 0x124]
mov dword [ebp - 0x40], eax
mov eax, dword [ebp - 0x40]
cmp dword [ebp - 0x12c], eax
jl 0x1002d3f3
mov dword [ebp - 0x134], 1
jmp 0x1002d3fa
and dword [ebp - 0x134], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x6c]
cmp dword [ebp - 0x134], eax
jge 0x1002d418
mov dword [ebp - 0x13c], 1
jmp 0x1002d41f
and dword [ebp - 0x13c], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x6c]
cmp dword [ebp - 0x13c], eax
jl 0x1002d443
mov eax, 0x206c
test eax, eax
jne 0x1002d443
and dword [ebp - 0xec], 0
jmp 0x1002d44d
mov dword [ebp - 0xec], 1
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0xec]
mov dword [ebp + eax - 0x6c], ecx
mov eax, dword [ebp - 0xd8]
cmp dword [ebp - 0xec], eax
je 0x1002d477
mov dword [ebp - 0x110], 1
jmp 0x1002d47e
and dword [ebp - 0x110], 0
cmp dword [ebp - 0x110], 0xd8e7029b
jne 0x1002d49c
cmp dword [ebp - 0x2a4], 0
jne 0x1002d49c
and dword [ebp - 0x14c], 0
jmp 0x1002d4a6
mov dword [ebp - 0x14c], 1
mov eax, dword [ebp - 0xf4]
cmp dword [ebp - 0x14c], eax
jle 0x1002d4c0
mov dword [ebp - 0x154], 1
jmp 0x1002d4c7
and dword [ebp - 0x154], 0
push 0
lea ecx, [ebp - 0x308]
call fcn.10026d2c
mov ecx, dword [ebp - 0x154]
cmp ecx, dword [eax]
je 0x1002d4ea
mov dword [ebp - 0x164], 1
jmp 0x1002d4f1
and dword [ebp - 0x164], 0
mov eax, dword [ebp - 0x15c]
cmp eax, dword [ebp - 0x164]
jg 0x1002d50b
mov dword [ebp - 0x2ec], 1
jmp 0x1002d512
and dword [ebp - 0x2ec], 0
push 1
lea ecx, [ebp - 0x308]
call fcn.10026d2c
push 1
lea ecx, [ebp - 0x308]
call fcn.10026d2c
mov eax, dword [eax]
mov dword [ebp - 0x2ac], eax
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x308]
call fcn.10026d27
mov eax, dword [ebp - 0x24]
mov eax, dword [eax + 0x24]
and eax, 0x20000000
je 0x1002d55c
mov dword [ebp - 0x16c], 1
jmp 0x1002d563
and dword [ebp - 0x16c], 0
mov eax, dword [ebp - 0x16c]
mov dword [ebp - 0x2a8], eax
mov eax, dword [ebp - 0x24]
mov eax, dword [eax + 0x24]
and eax, 0x40000000
je 0x1002d588
mov dword [ebp - 0x174], 1
jmp 0x1002d58f
and dword [ebp - 0x174], 0
mov eax, dword [ebp - 0x174]
mov dword [ebp - 0x298], eax
mov dword [ebp - 0xe0], 0x7e2799ac
mov dword [ebp - 0x408], 0xe12aa53f
mov dword [ebp - 0x410], 0xffffffff
mov dword [ebp - 0x3fc], 0xfffffff9
mov dword [ebp - 0x3ec], 0xab06c0e2
mov dword [ebp - 0x264], 0x7374
mov dword [ebp - 0x18], 0
jmp 0x1002d5e7
mov eax, dword [ebp - 0x18]
inc eax
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 3
jge 0x1002d5fd
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x334], 0x72fd4914
jmp 0x1002d5e0
mov dword [ebp - 0x18], 0
jmp 0x1002d60d
mov eax, dword [ebp - 0x18]
inc eax
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 2
jge 0x1002d623
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x440], 0xfffffffc
jmp 0x1002d606
mov dword [ebp - 0x18], 0
jmp 0x1002d633
mov eax, dword [ebp - 0x18]
inc eax
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 2
jge 0x1002d649
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x438], 0x41b44adc
jmp 0x1002d62c
mov dword [ebp - 0xe0], 0x12
jmp 0x1002d662
mov eax, dword [ebp - 0xe0]
dec eax
mov dword [ebp - 0xe0], eax
cmp dword [ebp - 0xe0], 0xfffffff3
jne 0x1002d767
mov dword [ebp - 0x80], 0x7cefa9d1
mov byte [ebp - 0x5f], 0
movzx eax, byte [ebp - 0x5f]
test eax, eax
je 0x1002d6a0
push 0x7f0b
push 0x2b63
push 0x5416
push 0x161
push 1
call fcn.1002be44
add esp, 0x14
mov dword [ebp - 0x80], 2
jmp 0x1002d6b0
mov eax, dword [ebp - 0x80]
dec eax
mov dword [ebp - 0x80], eax
cmp dword [ebp - 0x80], 0
jl 0x1002d762
mov dword [ebp - 0x94], 0
mov dword [ebp - 0x7c], 8
mov dword [ebp - 0x94], 0
jmp 0x1002d6e4
mov eax, dword [ebp - 0x94]
inc eax
mov dword [ebp - 0x94], eax
cmp dword [ebp - 0x94], 2
jg 0x1002d75d
mov eax, dword [ebp - 0x94]
mov eax, dword [ebp + eax*4 - 0x334]
neg eax
cmp eax, 0xfffb
jb 0x1002d70f
mov dword [ebp - 0x17c], 1
jmp 0x1002d716
and dword [ebp - 0x17c], 0
mov eax, dword [ebp - 0x80]
mov eax, dword [ebp + eax*4 - 0x334]
imul eax, dword [ebp - 0x17c]
mov dword [ebp - 0x7c], eax
mov dword [ebp - 0x7c], 0
jmp 0x1002d73a
mov eax, dword [ebp - 0x7c]
inc eax
mov dword [ebp - 0x7c], eax
cmp dword [ebp - 0x7c], 2
jg 0x1002d758
push 4
pop eax
shl eax, 1
mov ecx, dword [ebp - 0x7c]
mov eax, dword [ebp + eax - 0x334]
mov dword [ebp + ecx*4 - 0x334], eax
jmp 0x1002d733
jmp 0x1002d6d7
jmp 0x1002d6a9
jmp 0x1002d655
push 0x6241
push 0
push 0x35c7
push 0x245e
push 0x5462
lea eax, [ebp - 0x264]
push eax
push 0x34fa
call fcn.1002c1c6
add esp, 0x1c
mov eax, dword [ebp - 0x24]
mov eax, dword [eax + 0x24]
and eax, 0x80000000
je 0x1002d7aa
mov dword [ebp - 0x184], 1
jmp 0x1002d7b1
and dword [ebp - 0x184], 0
mov eax, dword [ebp - 0x184]
mov dword [ebp - 0x2a0], eax
mov dword [ebp - 0x2c], 0x75b57fd5
mov dword [ebp - 0x9c], 7
mov dword [ebp - 0xfc], 9
mov dword [ebp - 0x278], 0
mov dword [ebp - 0x2c], 0
jmp 0x1002d7f2
mov eax, dword [ebp - 0x2c]
inc eax
mov dword [ebp - 0x2c], eax
cmp dword [ebp - 0x2c], 0x10
jge 0x1002dab2
mov dword [ebp - 0x34], 0xbd7b1c2a
mov dword [ebp - 0x78], 0x5eec80f2
mov dword [ebp - 0x34], 0
jmp 0x1002d81a
mov eax, dword [ebp - 0x34]
inc eax
mov dword [ebp - 0x34], eax
cmp dword [ebp - 0x34], 0x1a
jg 0x1002d947
mov dword [ebp - 0x8c], 0xffffffff
cmp dword [ebp - 0x8c], 0
jne 0x1002d849
mov eax, 0x368a
test eax, eax
jne 0x1002d849
and dword [ebp - 0x194], 0
jmp 0x1002d853
mov dword [ebp - 0x194], 1
cmp dword [ebp - 0x9c], 0
je 0x1002d871
cmp dword [ebp - 0x8c], 0
je 0x1002d871
mov dword [ebp - 0x18c], 1
jmp 0x1002d878
and dword [ebp - 0x18c], 0
mov eax, dword [ebp - 0x18c]
neg eax
imul eax, dword [ebp - 0x194]
cmp eax, 0x9df9481f
jne 0x1002d89a
mov dword [ebp - 0x19c], 1
jmp 0x1002d8a1
and dword [ebp - 0x19c], 0
imul eax, dword [ebp - 0x19c], 0xfffffffb
cmp eax, dword [ebp - 0x34]
jle 0x1002d8bc
cmp dword [ebp - 0x34], 0
jne 0x1002d8bc
and dword [ebp - 0x1a4], 0
jmp 0x1002d8c6
mov dword [ebp - 0x1a4], 1
cmp dword [ebp - 0x1a4], 0
je 0x1002d8db
mov dword [ebp - 0x1ac], 1
jmp 0x1002d8e2
and dword [ebp - 0x1ac], 0
mov eax, dword [ebp - 0x1ac]
mov dword [ebp - 0x78], eax
mov eax, dword [ebp - 0x78]
cmp dword [ebp - 0x2c], eax
jg 0x1002d905
cmp dword [ebp - 0x8c], 0
jne 0x1002d905
and dword [ebp - 0x1b4], 0
jmp 0x1002d90f
mov dword [ebp - 0x1b4], 1
mov eax, dword [ebp - 0x1b4]
mov dword [ebp - 0x8c], eax
lea eax, [ebp - 0x9c]
push eax
push 0x39c1
push 0
lea eax, [ebp - 0x8c]
push eax
push 0x6e2b
push 0x4a53
call fcn.100337da
add esp, 0x18
jmp 0x1002d813
mov eax, dword [ebp - 0x9c]
mov dword [ebp - 0x3b8], eax
cmp dword [ebp - 0x2c], 0
jne 0x1002d99c
mov dword [ebp - 0x34], 0xaead
cmp dword [ebp - 0x34], 0
je 0x1002d979
push 7
pop eax
test eax, eax
je 0x1002d979
mov dword [ebp - 0x1bc], 1
jmp 0x1002d980
and dword [ebp - 0x1bc], 0
mov eax, dword [ebp - 0x1bc]
sub eax, 0x5c12
mov dword [ebp - 0xfc], eax
jne 0x1002d99c
and dword [ebp - 0x1c4], 0
jmp 0x1002d9a6
mov dword [ebp - 0x1c4], 1
mov eax, dword [ebp - 0x1c4]
sub eax, dword [ebp - 0x78]
jne 0x1002d9c3
cmp dword [ebp - 0x9c], 0
jne 0x1002d9c3
and dword [ebp - 0x1cc], 0
jmp 0x1002d9cd
mov dword [ebp - 0x1cc], 1
cmp dword [ebp - 0x1cc], 0xfffffff6
jle 0x1002d9e5
cmp dword [ebp - 0x78], 0
jne 0x1002d9e5
and dword [ebp - 0x1d4], 0
jmp 0x1002d9ef
mov dword [ebp - 0x1d4], 1
mov eax, dword [ebp - 0x9c]
cmp dword [ebp - 0x1d4], eax
je 0x1002da09
mov dword [ebp - 0x1dc], 1
jmp 0x1002da10
and dword [ebp - 0x1dc], 0
mov eax, dword [ebp - 0x2c]
cmp eax, dword [ebp - 0x1dc]
jl 0x1002da27
mov dword [ebp - 0x268], 1
jmp 0x1002da2e
and dword [ebp - 0x268], 0
mov eax, 0xfa2e5769
neg eax
cmp eax, dword [ebp - 0x78]
jl 0x1002da4c
mov eax, 0xd004
test eax, eax
jne 0x1002da4c
and dword [ebp - 0x260], 0
jmp 0x1002da56
mov dword [ebp - 0x260], 1
mov eax, dword [ebp - 0x78]
mov dword [ebp - 0x40c], eax
mov eax, dword [ebp - 0x2c]
mov dword [ebp - 0x3c0], eax
xor eax, eax
inc eax
je 0x1002da77
cmp dword [ebp - 0x2c], 0
je 0x1002da75
jmp 0x1002dab2
jmp 0x1002daad
mov dword [ebp - 0x280], 0xfffffffb
lea eax, [ebp - 0x278]
push eax
push 1
lea eax, [ebp - 0xfc]
push eax
lea eax, [ebp - 0x280]
push eax
lea eax, [ebp - 0x2c]
push eax
push 0x14e4
lea eax, [ebp - 0x34]
push eax
call fcn.1002c1c6
add esp, 0x1c
jmp 0x1002d7eb
mov eax, dword [ebp - 0x24]
mov eax, dword [eax + 0x24]
and eax, 0x2000000
je 0x1002df5a
push 0x4000
mov eax, dword [ebp - 0x24]
push dword [eax + 0x10]
mov eax, dword [ebp - 0x24]
push dword [eax + 8]
push 0x47ee
push 0x41ae
call fcn.1004f3c3
pop ecx
pop ecx
call eax
mov dword [ebp - 0x54], 0xfffffff7
mov dword [ebp - 0x290], 0x49a7
mov dword [ebp - 0x54], 0
jmp 0x1002db08
mov eax, dword [ebp - 0x54]
inc eax
mov dword [ebp - 0x54], eax
cmp dword [ebp - 0x54], 2
jg 0x1002df55
mov dword [ebp - 0x5c], 0x89b54615
mov dword [ebp - 0x5c], 0xffffffe7
jmp 0x1002db29
mov eax, dword [ebp - 0x5c]
inc eax
mov dword [ebp - 0x5c], eax
cmp dword [ebp - 0x5c], 0xfffffffd
jne 0x1002df20
mov dword [ebp - 0x28], 0xfa2fafd1
push 2
lea ecx, [ebp - 0x390]
call fcn.10026cbf
mov dword [ebp - 4], 3
mov dword [ebp - 0x84], 0
jmp 0x1002db67
mov eax, dword [ebp - 0x84]
inc eax
mov dword [ebp - 0x84], eax
cmp dword [ebp - 0x84], 4
jge 0x1002db83
mov eax, dword [ebp - 0x84]
mov dword [ebp + eax*4 - 0x420], 0x770a
jmp 0x1002db5a
lea eax, [ebp - 0x84]
push eax
push 0xf75
push 0
lea eax, [ebp - 0x390]
push eax
call fcn.100313a8
add esp, 0x10
mov dword [ebp - 0x28], 0
jmp 0x1002dbb0
mov eax, dword [ebp - 0x28]
inc eax
mov dword [ebp - 0x28], eax
cmp dword [ebp - 0x28], 3
jg 0x1002dc8a
push 1
lea ecx, [ebp - 0x318]
call fcn.10026cbf
mov byte [ebp - 4], 4
mov dword [ebp - 0xbc], 0
jmp 0x1002dbe4
mov eax, dword [ebp - 0xbc]
inc eax
mov dword [ebp - 0xbc], eax
cmp dword [ebp - 0xbc], 1
jge 0x1002dc06
push dword [ebp - 0xbc]
lea ecx, [ebp - 0x318]
call fcn.10026d2c
mov dword [eax], 1
jmp 0x1002dbd7
push 0
lea ecx, [ebp - 0x318]
call fcn.10026d2c
and dword [eax], 0
jmp 0x1002dc3c
push 0
lea ecx, [ebp - 0x318]
call fcn.10026d2c
mov dword [ebp - 0x1e4], eax
mov eax, dword [ebp - 0x1e4]
mov eax, dword [eax]
inc eax
mov ecx, dword [ebp - 0x1e4]
mov dword [ecx], eax
push 0
lea ecx, [ebp - 0x318]
call fcn.10026d2c
cmp dword [eax], 3
jg 0x1002dc76
mov eax, dword [ebp - 0x28]
cmp dword [ebp + eax*4 - 0x420], 0
je 0x1002dc5d
jmp 0x1002dc76
mov byte [ebp - 0x60], 0
push 0
push 0x5645
lea eax, [ebp - 0x60]
push eax
call fcn.10033323
add esp, 0xc
jmp 0x1002dc18
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x318]
call fcn.10026d27
jmp 0x1002dba9
mov dword [ebp - 0x28], 0xffffffe5
jmp 0x1002dc9a
mov eax, dword [ebp - 0x28]
inc eax
mov dword [ebp - 0x28], eax
cmp dword [ebp - 0x28], 0x1a
jle 0x1002df0c
mov dword [ebp - 0xdc], 0
jmp 0x1002dcbd
mov eax, dword [ebp - 0xdc]
inc eax
mov dword [ebp - 0xdc], eax
cmp dword [ebp - 0xdc], 3
jge 0x1002dcd9
mov eax, dword [ebp - 0xdc]
mov dword [ebp + eax*4 - 0x2dc], 0xffffffff
jmp 0x1002dcb0
push 4
pop eax
shl eax, 0
mov dword [ebp + eax - 0x2dc], 0
jmp 0x1002dd07
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x2dc]
inc eax
push 4
pop ecx
shl ecx, 0
mov dword [ebp + ecx - 0x2dc], eax
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x2dc], 0x1c
jge 0x1002df07
mov dword [ebp - 0xc4], 0xc58bdfad
mov dword [ebp - 0x25c], 0xf7cf
mov dword [ebp - 0xc4], 4
jmp 0x1002dd48
mov eax, dword [ebp - 0xc4]
dec eax
mov dword [ebp - 0xc4], eax
cmp dword [ebp - 0xc4], 0xffffffe4
jge 0x1002df02
push 3
lea ecx, [ebp - 0x34c]
call fcn.10026cbf
mov byte [ebp - 4], 5
lea eax, [ebp - 0x3f4]
push eax
push 0
lea eax, [ebp - 0x34c]
push eax
call fcn.1002c415
add esp, 0xc
mov eax, dword [ebp - 0x28]
push 4
pop ecx
shl ecx, 0
sub eax, dword [ebp + ecx - 0x2dc]
cmp eax, 0xfffc
jae 0x1002dda1
mov dword [ebp - 0x1ec], 1
jmp 0x1002dda8
and dword [ebp - 0x1ec], 0
push 1
lea ecx, [ebp - 0x34c]
call fcn.10026d2c
mov ecx, dword [ebp - 0x1ec]
cmp ecx, dword [eax]
je 0x1002ddcb
mov dword [ebp - 0x1f4], 1
jmp 0x1002ddd2
and dword [ebp - 0x1f4], 0
mov eax, dword [ebp - 0x54]
cmp dword [ebp - 0x1f4], eax
jg 0x1002dde9
mov dword [ebp - 0x1fc], 1
jmp 0x1002ddf0
and dword [ebp - 0x1fc], 0
cmp dword [ebp - 0x1fc], 2
jne 0x1002de05
mov dword [ebp - 0x204], 1
jmp 0x1002de0c
and dword [ebp - 0x204], 0
cmp dword [ebp - 0x204], 0xe11
jl 0x1002de24
mov dword [ebp - 0x20c], 1
jmp 0x1002de2b
and dword [ebp - 0x20c], 0
mov eax, dword [ebp - 0x20c]
add eax, 0x43334adc
cmp eax, dword [ebp - 0x5c]
jge 0x1002de50
mov eax, 0x47d17017
test eax, eax
je 0x1002de50
mov dword [ebp - 0x214], 1
jmp 0x1002de57
and dword [ebp - 0x214], 0
push 0
lea ecx, [ebp - 0x34c]
call fcn.10026d2c
mov ecx, dword [ebp - 0x214]
add ecx, dword [eax]
je 0x1002de7f
xor eax, eax
inc eax
je 0x1002de7f
mov dword [ebp - 0x21c], 1
jmp 0x1002de86
and dword [ebp - 0x21c], 0
mov eax, dword [ebp - 0x54]
imul eax, dword [ebp - 0x21c]
cmp eax, dword [ebp - 0x28]
jg 0x1002dea1
mov dword [ebp - 0x224], 1
jmp 0x1002dea8
and dword [ebp - 0x224], 0
mov eax, dword [ebp - 0x224]
mov dword [ebp - 0x25c], eax
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0x420], 0x197c
jl 0x1002ded2
mov dword [ebp - 0x22c], 1
jmp 0x1002ded9
and dword [ebp - 0x22c], 0
push 1
lea ecx, [ebp - 0x390]
call fcn.10026d2c
mov ecx, dword [ebp - 0x22c]
mov dword [eax], ecx
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x34c]
call fcn.10026d27
jmp 0x1002dd3b
jmp 0x1002dcec
jmp 0x1002dc93
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x390]
call fcn.10026d27
jmp 0x1002db22
mov eax, dword [ebp - 0x54]
mov dword [ebp - 0x3c8], eax
mov eax, dword [ebp - 0x5c]
cmp dword [ebp - 0x5c], eax
jg 0x1002df3d
mov dword [ebp - 0x234], 1
jmp 0x1002df44
and dword [ebp - 0x234], 0
mov eax, dword [ebp - 0x234]
mov dword [ebp - 0x290], eax
jmp 0x1002db01
jmp 0x1002ca83
push 3
lea ecx, [ebp - 0x39c]
call fcn.10026cbf
mov dword [ebp - 4], 6
lea eax, [ebp - 0x39c]
push eax
push 1
lea eax, [ebp - 0x404]
push eax
call fcn.1002c2f0
add esp, 0xc
push 0xef
push 0xf9e
lea eax, [ebp - 0x39c]
push eax
push 1
call fcn.1002c365
add esp, 0x10
mov byte [ebp - 0x41], 0
movzx eax, byte [ebp - 0x41]
test eax, eax
je 0x1002dfb5
push 0
call dword [sym.imp.GDI32.dll_CreateSolidBrush]
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x39c]
call fcn.10026d27
lea eax, [ebp - 0x298]
push eax
lea eax, [ebp - 0x24]
push eax
lea eax, [ebp - 0x2a0]
push eax
push 0
lea eax, [ebp - 0x2b8]
push eax
lea eax, [ebp - 0x2a8]
push eax
call fcn.1002e77e
add esp, 0x18
lea eax, [ebp - 0x24c]
push eax
lea eax, [ebp - 0x24]
push eax
lea eax, [ebp - 0xd4]
push eax
push 0
call fcn.1002c488
add esp, 0x10
mov dword [ebp - 0x88], 0x1824a8c6
mov dword [ebp - 0x3c], 0x29aa810d
mov dword [ebp - 0x74], 0x5498
mov dword [ebp - 0xa4], 0
jmp 0x1002e03b
mov eax, dword [ebp - 0xa4]
inc eax
mov dword [ebp - 0xa4], eax
cmp dword [ebp - 0xa4], 3
jge 0x1002e057
mov eax, dword [ebp - 0xa4]
mov dword [ebp + eax*4 - 0x3a8], 0xc23c
jmp 0x1002e02e
mov dword [ebp - 0x88], 0
jmp 0x1002e070
mov eax, dword [ebp - 0x88]
dec eax
mov dword [ebp - 0x88], eax
cmp dword [ebp - 0x88], 0xffffffe7
je 0x1002e0e9
mov dword [ebp - 0x23c], 0x8a13
mov dword [ebp - 0x104], 0x1f782a18
mov dword [ebp - 0x2b0], 1
mov eax, dword [ebp - 0x23c]
mov dword [ebp - 0x104], eax
mov eax, dword [ebp - 0x104]
mov dword [ebp - 0x3c], eax
push 0x1a28
push 0x4a68
lea eax, [ebp - 0x2b0]
push eax
lea eax, [ebp - 0x104]
push eax
lea eax, [ebp - 0x23c]
push eax
lea eax, [ebp - 0x88]
push eax
lea eax, [ebp - 0x74]
push eax
push 0
lea eax, [ebp - 0x3c]
push eax
call fcn.10033405
add esp, 0x24
jmp 0x1002e063
mov dword [ebp - 0x74], 0
jmp 0x1002e0f9
mov eax, dword [ebp - 0x74]
inc eax
mov dword [ebp - 0x74], eax
cmp dword [ebp - 0x74], 2
jg 0x1002e1ca
mov dword [ebp - 0x3c], 2
jmp 0x1002e113
mov eax, dword [ebp - 0x3c]
dec eax
mov dword [ebp - 0x3c], eax
cmp dword [ebp - 0x3c], 0
jl 0x1002e1a5
mov dword [ebp - 0x244], 0xae055a24
push 4
lea ecx, [ebp - 0x378]
call fcn.10026cbf
mov dword [ebp - 4], 7
lea eax, [ebp - 0x3d0]
push eax
push 0x7469
push 0
lea eax, [ebp - 0x378]
push eax
call fcn.1002ea7d
add esp, 0x10
mov eax, dword [ebp - 0x3c]
mov ecx, dword [ebp - 0x74]
mov eax, dword [ebp + eax*4 - 0x3a8]
mov dword [ebp + ecx*4 - 0x3a8], eax
mov eax, dword [ebp - 0x3c]
mov eax, dword [ebp + eax*4 - 0x3a8]
mov dword [ebp - 0x244], eax
mov esi, dword [ebp - 0x244]
push 1
lea ecx, [ebp - 0x378]
call fcn.10026d2c
mov dword [eax], esi
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x378]
call fcn.10026d27
jmp 0x1002e10c
mov byte [ebp - 0x55], 0
movzx eax, byte [ebp - 0x55]
test eax, eax
je 0x1002e1c5
push 0x32b4
push 1
push 0x18d1
call fcn.1002c415
add esp, 0xc
jmp 0x1002e0f2
cmp dword [ebp - 0x24c], 0
jbe 0x1002e3e9
mov dword [ebp - 0xb8], 1
mov dword [ebp - 0xb8], 0
jmp 0x1002e1fa
mov eax, dword [ebp - 0xb8]
dec eax
mov dword [ebp - 0xb8], eax
cmp dword [ebp - 0xb8], 0xfffffff3
jl 0x1002e3bd
mov dword [ebp - 0xc0], 6
mov dword [ebp - 0xc0], 0
jmp 0x1002e22a
mov eax, dword [ebp - 0xc0]
dec eax
mov dword [ebp - 0xc0], eax
cmp dword [ebp - 0xc0], 0xfffffffc
jne 0x1002e393
push 4
lea ecx, [ebp - 0x384]
call fcn.10026cbf
mov dword [ebp - 4], 8
mov dword [ebp - 0xa8], 0x8987f2fb
mov dword [ebp - 0xc8], 0
jmp 0x1002e26e
mov eax, dword [ebp - 0xc8]
inc eax
mov dword [ebp - 0xc8], eax
cmp dword [ebp - 0xc8], 4
jge 0x1002e290
push dword [ebp - 0xc8]
lea ecx, [ebp - 0x384]
call fcn.10026d2c
mov dword [eax], 0xfffffffe
jmp 0x1002e261
mov dword [ebp - 0xa8], 3
jmp 0x1002e2a9
mov eax, dword [ebp - 0xa8]
dec eax
mov dword [ebp - 0xa8], eax
cmp dword [ebp - 0xa8], 0
jl 0x1002e37f
mov dword [ebp - 0xac], 0
jmp 0x1002e2cf
mov eax, dword [ebp - 0xac]
inc eax
mov dword [ebp - 0xac], eax
cmp dword [ebp - 0xac], 1
jge 0x1002e2eb
mov eax, dword [ebp - 0xac]
mov dword [ebp + eax*4 - 0x90], 6
jmp 0x1002e2c2
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0x90], 3
jmp 0x1002e319
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x90]
dec eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x90], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x90], 0
jl 0x1002e37a
mov byte [ebp - 0x5e], 0
push 0x4ba8
push 0x2d04
push 0
push 0xbfd
lea eax, [ebp - 0x5e]
push eax
push 0x6283
push 0x5833
push 0x649f
call fcn.10030b11
add esp, 0x20
push 4
pop eax
imul eax, eax, 0
push dword [ebp + eax - 0x90]
lea ecx, [ebp - 0x384]
call fcn.10026d2c
cmp dword [eax], 0
je 0x1002e378
jmp 0x1002e2fe
jmp 0x1002e2fe
jmp 0x1002e29c
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x384]
call fcn.10026d27
jmp 0x1002e21d
mov byte [ebp - 0x5d], 0
movzx eax, byte [ebp - 0x5d]
test eax, eax
je 0x1002e3b8
push 0x7cd5
push 0x2de5
push 0x493f
push 1
call fcn.1002c488
add esp, 0x10
jmp 0x1002e1ed
lea eax, [ebp - 0x3e4]
push eax
push dword [ebp - 0x2b8]
push dword [ebp - 0x24c]
mov eax, dword [ebp - 0x24]
push dword [eax + 8]
push 0x47ee
push 0x384e
call fcn.1004f3c3
pop ecx
pop ecx
call eax
jmp 0x1002ca83
jmp 0x1002e45f
mov eax, dword [ebp + 0xc]
mov dword [ebp - 0x2c0], eax
mov eax, dword [ebp + 8]
mov dword [ebp - 0x2c8], eax
mov eax, dword [ebp - 0x2c0]
mov dword [ebp - 0x98], eax
mov eax, dword [ebp - 0x2c8]
mov dword [ebp - 0x2d0], eax
mov eax, dword [ebp - 0x98]
mov dword [eax], 0
jmp 0x1002e439
mov eax, dword [ebp - 0x98]
mov eax, dword [eax]
inc eax
mov ecx, dword [ebp - 0x98]
mov dword [ecx], eax
mov eax, dword [ebp - 0x98]
cmp dword [eax], 1
jge 0x1002e45f
mov eax, dword [ebp - 0x98]
push dword [eax]
mov ecx, dword [ebp - 0x2d0]
call fcn.10026d2c
mov dword [eax], 0xc74a
jmp 0x1002e428
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop esi
mov esp, ebp
pop ebp
ret