Function at 0x1002e54c
Capabilities:
Contain obfuscated stackstrings
Get memory capacity
Query or enumerate registry value

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x100807b6
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0xdf8
push esi
push 2
lea ecx, [ebp - 0xb74]
call fcn.10020bf2
and dword [ebp - 4], 0
mov dword [ebp - 0x148], 0xffffffff
mov dword [ebp - 0xc34], 0xc0d37ad4
mov dword [ebp - 0xb00], 0xf6802998
mov dword [ebp - 0x460], 0x96c7979b
mov dword [ebp - 0x284], 0
jmp 0x1002e5bd
mov eax, dword [ebp - 0x284]
inc eax
mov dword [ebp - 0x284], eax
cmp dword [ebp - 0x284], 2
jge 0x1002e5df
push dword [ebp - 0x284]
lea ecx, [ebp - 0xb74]
call fcn.10020c90
mov dword [eax], 1
jmp 0x1002e5b0
mov dword [ebp - 0x148], 0
jmp 0x1002e5f8
mov eax, dword [ebp - 0x148]
inc eax
mov dword [ebp - 0x148], eax
cmp dword [ebp - 0x148], 1
jg 0x1002e7da
mov dword [ebp - 0xbc8], 0xfffffff6
mov dword [ebp - 0xb08], 0x63f9e923
mov dword [ebp - 0xc30], 7
push 4
lea ecx, [ebp - 0xb64]
call fcn.10020bf2
mov byte [ebp - 4], 1
mov dword [ebp - 0x240], 0
jmp 0x1002e64d
mov eax, dword [ebp - 0x240]
inc eax
mov dword [ebp - 0x240], eax
cmp dword [ebp - 0x240], 4
jge 0x1002e66f
push dword [ebp - 0x240]
lea ecx, [ebp - 0xb64]
call fcn.10020c90
mov dword [eax], 0x81ced8f6
jmp 0x1002e640
mov dword [ebp - 0x6a8], 0x4766
mov dword [ebp - 0x790], 0x10009b64
cmp dword [ebp - 0x6a8], 0x4893
jle 0x1002e7a1
and dword [ebp - 0x150], 0
jmp 0x1002e6a9
mov eax, dword [ebp - 0x150]
inc eax
mov dword [ebp - 0x150], eax
cmp dword [ebp - 0x150], 0x27ce
jge 0x1002e7a1
and dword [ebp - 0x28c], 0
jmp 0x1002e6cf
mov eax, dword [ebp - 0x28c]
inc eax
mov dword [ebp - 0x28c], eax
cmp dword [ebp - 0x28c], 0x289b
jge 0x1002e79c
and dword [ebp - 0x158], 0
jmp 0x1002e6f5
mov eax, dword [ebp - 0x158]
inc eax
mov dword [ebp - 0x158], eax
cmp dword [ebp - 0x158], 0x3a5
jge 0x1002e797
and dword [ebp - 0x248], 0
jmp 0x1002e71b
mov eax, dword [ebp - 0x248]
inc eax
mov dword [ebp - 0x248], eax
cmp dword [ebp - 0x248], 0x6364
jge 0x1002e792
mov eax, dword [ebp - 0x150]
imul eax, dword [ebp - 0x28c]
mov ecx, dword [ebp - 0x158]
sar eax, cl
mov ecx, dword [ebp - 0x248]
shl eax, cl
cdq
mov dword [ebp - 0x79c], eax
mov dword [ebp - 0x798], edx
push dword [ebp - 0x798]
push dword [ebp - 0x79c]
lea ecx, [ebp - 0xdf4]
call fcn.1001098e
pop ecx
pop ecx
mov dword [ebp - 0x8dc], eax
mov ecx, dword [ebp - 0x8dc]
call fcn.100208b8
push eax
call fcn.1006abb3
pop ecx
lea ecx, [ebp - 0xdf4]
call fcn.100208ae
jmp 0x1002e70e
jmp 0x1002e6e8
jmp 0x1002e6c2
jmp 0x1002e69c
mov eax, dword [ebp - 0x460]
dec eax
mov dword [ebp - 0x460], eax
cmp dword [ebp - 0x6a8], 0x44b7
jge 0x1002e7c6
push dword [ebp - 0x790]
call fcn.1006abb3
pop ecx
mov byte [ebp - 4], 0
lea ecx, [ebp - 0xb64]
call fcn.10020c74
jmp 0x1002e5eb
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xb74]
call fcn.10020c74
push 1
lea ecx, [ebp - 0x6e4]
call fcn.10020bf2
mov dword [ebp - 4], 2
push 3
lea ecx, [ebp - 0x344]
call fcn.10020bf2
mov byte [ebp - 4], 3
mov dword [ebp - 0xdc], 0xfffffff8
mov dword [ebp - 0x18], 0
jmp 0x1002e828
mov eax, dword [ebp - 0x18]
inc eax
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 1
jge 0x1002e844
push dword [ebp - 0x18]
lea ecx, [ebp - 0x6e4]
call fcn.10020c90
mov dword [eax], 0x99ac7894
jmp 0x1002e821
mov dword [ebp - 0x18], 0
jmp 0x1002e854
mov eax, dword [ebp - 0x18]
inc eax
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 3
jge 0x1002e870
push dword [ebp - 0x18]
lea ecx, [ebp - 0x344]
call fcn.10020c90
mov dword [eax], 0x12b57e8b
jmp 0x1002e84d
mov dword [ebp - 0x18], 0
jmp 0x1002e880
mov eax, dword [ebp - 0x18]
inc eax
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 3
jge 0x1002e896
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0xc7c], 8
jmp 0x1002e879
mov dword [ebp - 0x18], 0
jmp 0x1002e8a6
mov eax, dword [ebp - 0x18]
inc eax
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 4
jge 0x1002e8bc
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0xce8], 0xffffffff
jmp 0x1002e89f
mov byte [ebp - 0xcf], 0
movzx eax, byte [ebp - 0xcf]
test eax, eax
je 0x1002e8d6
push 0
call dword [sym.imp.KERNEL32.dll_GetStartupInfoW]
push 0
lea ecx, [ebp - 0x344]
call fcn.10020c90
and dword [eax], 0
jmp 0x1002e90c
push 0
lea ecx, [ebp - 0x344]
call fcn.10020c90
mov dword [ebp - 0x6b0], eax
mov eax, dword [ebp - 0x6b0]
mov eax, dword [eax]
inc eax
mov ecx, dword [ebp - 0x6b0]
mov dword [ecx], eax
push 0
lea ecx, [ebp - 0x344]
call fcn.10020c90
cmp dword [eax], 0
jg 0x1002ec57
mov dword [ebp - 0x904], 0xf050
mov dword [ebp - 0x36c], 0xfbde283b
push 0
lea ecx, [ebp - 0x344]
call fcn.10020c90
push dword [eax]
lea ecx, [ebp - 0x6e4]
call fcn.10020c90
cmp dword [eax], 0xe4b9
jl 0x1002e964
mov dword [ebp - 0x6b8], 1
jmp 0x1002e96b
and dword [ebp - 0x6b8], 0
cmp dword [ebp - 0x6b8], 1
jb 0x1002e980
mov dword [ebp - 0x35c], 1
jmp 0x1002e987
and dword [ebp - 0x35c], 0
push 0
lea ecx, [ebp - 0x344]
call fcn.10020c90
push dword [eax]
lea ecx, [ebp - 0x6e4]
call fcn.10020c90
cmp dword [eax], 0
je 0x1002e9b9
push 8
pop eax
test eax, eax
je 0x1002e9b9
mov dword [ebp - 0x6c0], 1
jmp 0x1002e9c0
and dword [ebp - 0x6c0], 0
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x6c0]
sub ecx, dword [ebp + eax - 0xc7c]
jne 0x1002e9e7
mov eax, 0x64bae0f
test eax, eax
jne 0x1002e9e7
and dword [ebp - 0x6cc], 0
jmp 0x1002e9f1
mov dword [ebp - 0x6cc], 1
push 0
lea ecx, [ebp - 0x344]
call fcn.10020c90
push dword [eax]
lea ecx, [ebp - 0x6e4]
call fcn.10020c90
mov ecx, dword [ebp - 0x6cc]
cmp ecx, dword [eax]
jle 0x1002ea21
mov dword [ebp - 0x6a0], 1
jmp 0x1002ea28
and dword [ebp - 0x6a0], 0
mov eax, dword [ebp - 0x35c]
cmp eax, dword [ebp - 0x6a0]
jg 0x1002ea42
mov dword [ebp - 0x524], 1
jmp 0x1002ea49
and dword [ebp - 0x524], 0
push 0
lea ecx, [ebp - 0x344]
call fcn.10020c90
push dword [eax]
lea ecx, [ebp - 0x6e4]
call fcn.10020c90
mov eax, dword [eax]
add eax, dword [ebp - 0x524]
je 0x1002ea8b
push 0
lea ecx, [ebp - 0x344]
call fcn.10020c90
cmp dword [eax], 0
je 0x1002ea8b
mov dword [ebp - 0x364], 1
jmp 0x1002ea92
and dword [ebp - 0x364], 0
mov eax, dword [ebp - 0x364]
mov dword [ebp - 0xdc], eax
mov eax, dword [ebp - 0x904]
cmp dword [ebp - 0xdc], eax
je 0x1002eab8
mov dword [ebp - 0x6d8], 1
jmp 0x1002eabf
and dword [ebp - 0x6d8], 0
mov eax, dword [ebp - 0x6d8]
mov dword [ebp - 0x36c], eax
mov esi, dword [ebp - 0x36c]
push 0
lea ecx, [ebp - 0x6e4]
call fcn.10020c90
sub esi, dword [eax]
push 4
pop eax
shl eax, 1
mov dword [ebp + eax - 0xce8], esi
mov dword [ebp - 0xdc], 0xffffffe3
jmp 0x1002eb05
mov eax, dword [ebp - 0xdc]
inc eax
mov dword [ebp - 0xdc], eax
cmp dword [ebp - 0xdc], 0xffffffe7
jl 0x1002ec52
mov byte [ebp - 0xd8], 0
movzx eax, byte [ebp - 0xd8]
test eax, eax
je 0x1002ec4d
mov dword [ebp - 0x52c], 0xe43
mov dword [ebp - 0x90c], 0x10009b90
cmp dword [ebp - 0x52c], 0xe65
jle 0x1002ec25
and dword [ebp - 0x160], 0
jmp 0x1002eb62
mov eax, dword [ebp - 0x160]
inc eax
mov dword [ebp - 0x160], eax
cmp dword [ebp - 0x160], 0x2ac0
jge 0x1002ec25
and dword [ebp - 0x294], 0
jmp 0x1002eb88
mov eax, dword [ebp - 0x294]
inc eax
mov dword [ebp - 0x294], eax
cmp dword [ebp - 0x294], 0x528d
jge 0x1002ec20
and dword [ebp - 0x168], 0
jmp 0x1002ebae
mov eax, dword [ebp - 0x168]
inc eax
mov dword [ebp - 0x168], eax
cmp dword [ebp - 0x168], 0x3738
jge 0x1002ec1b
and dword [ebp - 0x250], 0
jmp 0x1002ebd0
mov eax, dword [ebp - 0x250]
inc eax
mov dword [ebp - 0x250], eax
cmp dword [ebp - 0x250], 0x5730
jge 0x1002ec19
mov eax, dword [ebp - 0x160]
add eax, dword [ebp - 0x294]
sub eax, dword [ebp - 0x168]
xor eax, dword [ebp - 0x250]
cdq
mov dword [ebp - 0x7a8], eax
mov dword [ebp - 0x7a4], edx
push dword [ebp - 0x7a4]
push dword [ebp - 0x7a8]
mov ecx, 0x10085b58
call fcn.100208d8
jmp 0x1002ebc3
jmp 0x1002eba1
jmp 0x1002eb7b
jmp 0x1002eb55
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_GetSystemTimeAdjustment]
cmp dword [ebp - 0x52c], 0xdb9
jge 0x1002ec4d
mov edx, dword [ebp - 0x90c]
mov ecx, 0x10085b58
call fcn.10023628
jmp 0x1002eaf8
jmp 0x1002e8e8
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x344]
call fcn.10020c74
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x6e4]
call fcn.10020c74
mov dword [ebp - 0x4f8], 0x5851
mov dword [ebp - 0x818], 0x10009be8
cmp dword [ebp - 0x4f8], 0x5956
jle 0x1002ed7c
and dword [ebp - 0x178], 0
jmp 0x1002ecaf
mov eax, dword [ebp - 0x178]
inc eax
mov dword [ebp - 0x178], eax
cmp dword [ebp - 0x178], 0x7c66
jge 0x1002ed72
and dword [ebp - 0x170], 0
jmp 0x1002ecd5
mov eax, dword [ebp - 0x170]
inc eax
mov dword [ebp - 0x170], eax
cmp dword [ebp - 0x170], 0x4f94
jge 0x1002ed6d
and dword [ebp - 0x29c], 0
jmp 0x1002ecfb
mov eax, dword [ebp - 0x29c]
inc eax
mov dword [ebp - 0x29c], eax
cmp dword [ebp - 0x29c], 0x3d54
jge 0x1002ed68
and dword [ebp - 0x258], 0
jmp 0x1002ed1d
mov eax, dword [ebp - 0x258]
inc eax
mov dword [ebp - 0x258], eax
cmp dword [ebp - 0x258], 0x53e8
jge 0x1002ed66
mov eax, dword [ebp - 0x170]
and eax, dword [ebp - 0x29c]
xor eax, dword [ebp - 0x178]
xor eax, dword [ebp - 0x258]
cdq
mov dword [ebp - 0x7b4], eax
mov dword [ebp - 0x7b0], edx
push dword [ebp - 0x7b0]
push dword [ebp - 0x7b4]
mov ecx, 0x10085b58
call fcn.100208d8
jmp 0x1002ed10
jmp 0x1002ecee
jmp 0x1002ecc8
jmp 0x1002eca2
push 0
push 0
call dword [sym.imp.USER32.dll_CreateAcceleratorTableW]
cmp dword [0x1008b008], 0
jne 0x10032958
mov dword [ebp - 0x374], 0x537a
mov dword [ebp - 0x91c], 0x10009c30
cmp dword [ebp - 0x374], 0x56f3
jle 0x1002ee94
and dword [ebp - 0x180], 0
jmp 0x1002edc3
mov eax, dword [ebp - 0x180]
inc eax
mov dword [ebp - 0x180], eax
cmp dword [ebp - 0x180], 0x4547
jge 0x1002ee84
and dword [ebp - 0x2a4], 0
jmp 0x1002ede9
mov eax, dword [ebp - 0x2a4]
inc eax
mov dword [ebp - 0x2a4], eax
cmp dword [ebp - 0x2a4], 0x273c
jge 0x1002ee7f
and dword [ebp - 0x188], 0
jmp 0x1002ee0f
mov eax, dword [ebp - 0x188]
inc eax
mov dword [ebp - 0x188], eax
cmp dword [ebp - 0x188], 0x1871
jge 0x1002ee7a
mov eax, dword [ebp - 0x180]
add eax, dword [ebp - 0x2a4]
mov ecx, dword [ebp - 0x188]
shl eax, cl
cdq
mov dword [ebp - 0x7c0], eax
mov dword [ebp - 0x7bc], edx
push dword [ebp - 0x7bc]
push dword [ebp - 0x7c0]
lea ecx, [ebp - 0xd40]
call fcn.1001098e
pop ecx
pop ecx
mov dword [ebp - 0x914], eax
mov ecx, dword [ebp - 0x914]
call fcn.100208b8
push eax
call fcn.1006abb3
pop ecx
lea ecx, [ebp - 0xd40]
call fcn.100208ae
jmp 0x1002ee02
jmp 0x1002eddc
jmp 0x1002edb6
push 0
push 0
push 0
push 0
push 0
call dword [sym.imp.USER32.dll_SetScrollRange]
mov dword [ebp - 0x37c], 0
cmp dword [ebp - 0x374], 0x5341
jge 0x1002eeb6
push dword [ebp - 0x91c]
call fcn.1006abb3
pop ecx
mov dword [ebp - 0x60c], 0x6275
mov dword [ebp - 0x924], 0x10009c94
cmp dword [ebp - 0x60c], 0x62e1
jle 0x1002efb8
and dword [ebp - 0x260], 0
jmp 0x1002eef0
mov eax, dword [ebp - 0x260]
inc eax
mov dword [ebp - 0x260], eax
cmp dword [ebp - 0x260], 0x5e2a
jge 0x1002efb8
and dword [ebp - 0x190], 0
jmp 0x1002ef16
mov eax, dword [ebp - 0x190]
inc eax
mov dword [ebp - 0x190], eax
cmp dword [ebp - 0x190], 0x79e0
jge 0x1002efb3
and dword [ebp - 0x2ac], 0
jmp 0x1002ef3c
mov eax, dword [ebp - 0x2ac]
inc eax
mov dword [ebp - 0x2ac], eax
cmp dword [ebp - 0x2ac], 0x41d0
jge 0x1002efae
and dword [ebp - 0x198], 0
jmp 0x1002ef5e
mov eax, dword [ebp - 0x198]
inc eax
mov dword [ebp - 0x198], eax
cmp dword [ebp - 0x198], 0x65fa
jge 0x1002efac
mov ecx, dword [ebp - 0x260]
xor ecx, dword [ebp - 0x190]
mov eax, dword [ebp - 0x2ac]
cdq
idiv dword [ebp - 0x198]
xor ecx, edx
mov eax, ecx
cdq
mov dword [ebp - 0x7cc], eax
mov dword [ebp - 0x7c8], edx
push dword [ebp - 0x7c8]
push dword [ebp - 0x7cc]
mov ecx, 0x10085b58
call fcn.100208d8
jmp 0x1002ef51
jmp 0x1002ef2f
jmp 0x1002ef09
jmp 0x1002eee3
cmp dword [ebp - 0x60c], 0x61fe
jge 0x1002efd4
mov edx, dword [ebp - 0x924]
mov ecx, 0x10085b58
call fcn.10023628
mov dword [ebp - 0x268], 0
jmp 0x1002efed
mov eax, dword [ebp - 0x268]
inc eax
mov dword [ebp - 0x268], eax
cmp dword [ebp - 0x268], 2
jge 0x1002f009
mov eax, dword [ebp - 0x268]
mov dword [ebp + eax*4 - 0xab8], 0xdc4b4e12
jmp 0x1002efe0
mov dword [ebp - 0x37c], 0xca631852
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x37c]
mov dword [ebp + eax - 0xab8], ecx
mov byte [ebp - 0xd2], 0
movzx eax, byte [ebp - 0xd2]
test eax, eax
je 0x1002f13c
mov dword [ebp - 0x534], 0x3ba8
mov dword [ebp - 0x934], 0x10009cc0
cmp dword [ebp - 0x534], 0x3c95
jle 0x1002f11a
and dword [ebp - 0x1a0], 0
jmp 0x1002f076
mov eax, dword [ebp - 0x1a0]
inc eax
mov dword [ebp - 0x1a0], eax
cmp dword [ebp - 0x1a0], 0x3fa0
jge 0x1002f106
and dword [ebp - 0x2b4], 0
jmp 0x1002f09c
mov eax, dword [ebp - 0x2b4]
inc eax
mov dword [ebp - 0x2b4], eax
cmp dword [ebp - 0x2b4], 0x297
jge 0x1002f101
mov eax, dword [ebp - 0x1a0]
mov ecx, dword [ebp - 0x2b4]
sar eax, cl
cdq
mov dword [ebp - 0x7d8], eax
mov dword [ebp - 0x7d4], edx
push dword [ebp - 0x7d4]
push dword [ebp - 0x7d8]
lea ecx, [ebp - 0xd10]
call fcn.1001098e
pop ecx
pop ecx
mov dword [ebp - 0x92c], eax
mov ecx, dword [ebp - 0x92c]
call fcn.100208b8
push eax
call fcn.1006abb3
pop ecx
lea ecx, [ebp - 0xd10]
call fcn.100208ae
jmp 0x1002f08f
jmp 0x1002f069
push 0
push 0
push 0
push 0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateFileW]
push 0
push 0
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
cmp dword [ebp - 0x534], 0x3b36
jge 0x1002f13c
push dword [ebp - 0x934]
call fcn.1006abb3
pop ecx
mov dword [ebp - 0xb10], 5
push 3
lea ecx, [ebp - 0xa18]
call fcn.10020bf2
mov dword [ebp - 4], 4
mov dword [ebp - 0x2c], 0
jmp 0x1002f16a
mov eax, dword [ebp - 0x2c]
inc eax
mov dword [ebp - 0x2c], eax
cmp dword [ebp - 0x2c], 1
jge 0x1002f180
mov eax, dword [ebp - 0x2c]
mov dword [ebp + eax*4 - 0x1a8], 0x4e2db58
jmp 0x1002f163
mov dword [ebp - 0x2c], 0
jmp 0x1002f190
mov eax, dword [ebp - 0x2c]
inc eax
mov dword [ebp - 0x2c], eax
cmp dword [ebp - 0x2c], 2
jge 0x1002f1a6
mov eax, dword [ebp - 0x2c]
mov dword [ebp + eax*4 - 0xca8], 0x1b66bafc
jmp 0x1002f189
mov dword [ebp - 0x2c], 0
jmp 0x1002f1b6
mov eax, dword [ebp - 0x2c]
inc eax
mov dword [ebp - 0x2c], eax
cmp dword [ebp - 0x2c], 3
jge 0x1002f1d2
push dword [ebp - 0x2c]
lea ecx, [ebp - 0xa18]
call fcn.10020c90
mov dword [eax], 0xde9bf9f
jmp 0x1002f1af
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0x1a8], 0
jmp 0x1002f200
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x1a8]
dec eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x1a8], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x1a8], 0xffffffeb
je 0x1002f254
mov dword [ebp - 0xbd8], 0
mov dword [ebp - 0xb18], 0xa1220985
mov dword [ebp - 0xc4c], 0
push 1
lea ecx, [ebp - 0xa18]
call fcn.10020c90
mov dword [ebp - 0x384], eax
mov eax, dword [ebp - 0x384]
mov eax, dword [eax]
dec eax
mov ecx, dword [ebp - 0x384]
mov dword [ecx], eax
jmp 0x1002f1e5
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xa18]
call fcn.10020c74
mov dword [ebp - 0xb20], 0x177e
push 4
lea ecx, [ebp - 0xb94]
call fcn.10020bf2
mov dword [ebp - 4], 5
push 1
lea ecx, [ebp - 0xb84]
call fcn.10020bf2
mov byte [ebp - 4], 6
mov dword [ebp - 0xbe8], 1
mov dword [ebp - 0xb28], 0xc6c8
mov dword [ebp - 0xc38], 0x25004
mov dword [ebp - 0x67c], 0xb9c5c935
mov dword [ebp - 0x34], 0
jmp 0x1002f2ca
mov eax, dword [ebp - 0x34]
inc eax
mov dword [ebp - 0x34], eax
cmp dword [ebp - 0x34], 3
jge 0x1002f2e0
mov eax, dword [ebp - 0x34]
mov dword [ebp + eax*4 - 0xddc], 0xebaeef20
jmp 0x1002f2c3
mov dword [ebp - 0x34], 0
jmp 0x1002f2f0
mov eax, dword [ebp - 0x34]
inc eax
mov dword [ebp - 0x34], eax
cmp dword [ebp - 0x34], 4
jge 0x1002f30c
push dword [ebp - 0x34]
lea ecx, [ebp - 0xb94]
call fcn.10020c90
mov dword [eax], 1
jmp 0x1002f2e9
mov dword [ebp - 0x34], 0
jmp 0x1002f31c
mov eax, dword [ebp - 0x34]
inc eax
mov dword [ebp - 0x34], eax
cmp dword [ebp - 0x34], 1
jge 0x1002f335
push dword [ebp - 0x34]
lea ecx, [ebp - 0xb84]
call fcn.10020c90
or dword [eax], 0xffffffff
jmp 0x1002f315
mov eax, dword [ebp - 0x67c]
inc eax
mov dword [ebp - 0x67c], eax
mov byte [ebp - 4], 5
lea ecx, [ebp - 0xb84]
call fcn.10020c74
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xb94]
call fcn.10020c74
mov byte [ebp - 0x138], 6
mov byte [ebp - 0x137], 0x17
mov byte [ebp - 0x136], 7
mov byte [ebp - 0x135], 1
mov byte [ebp - 0x134], 0
mov byte [ebp - 0x133], 0x79
mov byte [ebp - 0x132], 4
mov byte [ebp - 0x131], 0x2e
mov byte [ebp - 0x130], 2
mov byte [ebp - 0x12f], 0x17
mov byte [ebp - 0x12e], 3
mov byte [ebp - 0x12d], 0x1c
mov byte [ebp - 0x12c], 5
mov byte [ebp - 0x12b], 2
mov byte [ebp - 0x12a], 0xb
mov byte [ebp - 0x129], 0
mov byte [ebp - 0x128], 9
mov byte [ebp - 0x127], 8
mov byte [ebp - 0x126], 0xa
mov byte [ebp - 0x125], 8
mov byte [ebp - 0x124], 8
mov byte [ebp - 0x123], 0x42
mov byte [ebp - 0x122], 1
mov byte [ebp - 0x121], 0x4b
and dword [ebp - 0x9cc], 0
and dword [ebp - 0x9c8], 0
and dword [ebp - 0x9c4], 0
and dword [ebp - 0x9c0], 0
lea ecx, [ebp - 0x30d]
call fcn.10020c9f
push eax
lea eax, [ebp - 0x9bc]
push eax
lea eax, [ebp - 0x9cc]
push eax
lea ecx, [ebp - 0xcf8]
call fcn.10020ca2
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0x350]
call fcn.10020c4e
mov dword [ebp - 4], 7
mov dword [ebp - 0x7c], 0x72b21a35
mov dword [ebp - 0x318], 1
mov dword [ebp - 0x13c], 0
jmp 0x1002f48a
mov eax, dword [ebp - 0x13c]
inc eax
mov dword [ebp - 0x13c], eax
cmp dword [ebp - 0x13c], 3
jge 0x1002f4a6
mov eax, dword [ebp - 0x13c]
mov dword [ebp + eax*4 - 0xa24], 7
jmp 0x1002f47d
push 1
lea ecx, [ebp - 0x350]
call fcn.10020c90
and dword [eax], 0
push 3
lea ecx, [ebp - 0x350]
call fcn.10020c90
push 4
pop ecx
shl ecx, 0
mov ecx, dword [ebp + ecx - 0xa24]
neg ecx
cmp dword [eax], ecx
jg 0x1002f4e2
mov dword [ebp - 0x38c], 1
jmp 0x1002f4e9
and dword [ebp - 0x38c], 0
push 1
lea ecx, [ebp - 0x350]
call fcn.10020c90
mov ecx, dword [ebp - 0x38c]
cmp ecx, dword [eax]
jne 0x1002f50c
mov dword [ebp - 0x53c], 1
jmp 0x1002f513
and dword [ebp - 0x53c], 0
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x53c]
mov dword [ebp + eax - 0xa24], ecx
mov eax, dword [ebp - 0x7c]
mov dword [ebp - 0xb30], eax
push 0
lea ecx, [ebp - 0x350]
call fcn.10020c90
cmp dword [eax], 0xddac0faa
jbe 0x1002f550
mov dword [ebp - 0x394], 1
jmp 0x1002f557
and dword [ebp - 0x394], 0
mov eax, dword [ebp - 0x318]
mov dword [ebp - 0x8c8], eax
mov eax, dword [ebp - 0x394]
mov dword [ebp - 0x714], eax
mov eax, dword [ebp - 0x318]
dec eax
mov dword [ebp - 0x318], eax
mov eax, dword [ebp - 0x8c8]
cmp eax, dword [ebp - 0x714]
jl 0x1002f596
mov dword [ebp - 0x614], 1
jmp 0x1002f59d
and dword [ebp - 0x614], 0
push 1
lea ecx, [ebp - 0x350]
call fcn.10020c90
mov eax, dword [eax]
cmp eax, dword [ebp - 0x614]
jg 0x1002f5c0
mov dword [ebp - 0x39c], 1
jmp 0x1002f5c7
and dword [ebp - 0x39c], 0
push 2
lea ecx, [ebp - 0x350]
call fcn.10020c90
mov ecx, dword [ebp - 0x39c]
cmp ecx, dword [eax]
je 0x1002f5ea
mov dword [ebp - 0x544], 1
jmp 0x1002f5f1
and dword [ebp - 0x544], 0
mov eax, dword [ebp - 0x7c]
cmp dword [ebp - 0x544], eax
jg 0x1002f608
mov dword [ebp - 0x3a4], 1
jmp 0x1002f60f
and dword [ebp - 0x3a4], 0
cmp dword [ebp - 0x3a4], 1
je 0x1002f624
mov dword [ebp - 0x6b4], 1
jmp 0x1002f62b
and dword [ebp - 0x6b4], 0
push 1
lea ecx, [ebp - 0x350]
call fcn.10020c90
mov ecx, dword [ebp - 0x6b4]
cmp ecx, dword [eax]
jne 0x1002f64e
mov dword [ebp - 0x3ac], 1
jmp 0x1002f655
and dword [ebp - 0x3ac], 0
mov eax, dword [ebp - 0x7c]
cmp dword [ebp - 0x3ac], eax
jl 0x1002f672
mov eax, 0x2a28
test eax, eax
jne 0x1002f672
and dword [ebp - 0x54c], 0
jmp 0x1002f67c
mov dword [ebp - 0x54c], 1
mov eax, dword [ebp - 0x54c]
mov dword [ebp - 0x7c], eax
mov dword [ebp - 0x61c], 0x7d66
mov dword [ebp - 0x964], 0x10009d10
cmp dword [ebp - 0x61c], 0x7f76
jle 0x1002f753
and dword [ebp - 0x1b0], 0
jmp 0x1002f6bf
mov eax, dword [ebp - 0x1b0]
inc eax
mov dword [ebp - 0x1b0], eax
cmp dword [ebp - 0x1b0], 0x6532
jge 0x1002f753
and dword [ebp - 0x2bc], 0
jmp 0x1002f6e5
mov eax, dword [ebp - 0x2bc]
inc eax
mov dword [ebp - 0x2bc], eax
cmp dword [ebp - 0x2bc], 0x7e0
jge 0x1002f74e
and dword [ebp - 0x1b8], 0
jmp 0x1002f707
mov eax, dword [ebp - 0x1b8]
inc eax
mov dword [ebp - 0x1b8], eax
cmp dword [ebp - 0x1b8], 0x42d5
jge 0x1002f74c
mov eax, dword [ebp - 0x1b0]
mov ecx, dword [ebp - 0x2bc]
shl eax, cl
and eax, dword [ebp - 0x1b8]
cdq
mov dword [ebp - 0x7e4], eax
mov dword [ebp - 0x7e0], edx
push dword [ebp - 0x7e0]
push dword [ebp - 0x7e4]
mov ecx, 0x10085b58
call fcn.100208d8
jmp 0x1002f6fa
jmp 0x1002f6d8
jmp 0x1002f6b2
mov dword [ebp - 0x7c], 3
jmp 0x1002f763
mov eax, dword [ebp - 0x7c]
dec eax
mov dword [ebp - 0x7c], eax
cmp dword [ebp - 0x7c], 0
jl 0x1002f7c4
mov dword [ebp - 0x788], 7
push dword [ebp - 0x7c]
lea ecx, [ebp - 0x350]
call fcn.10020c90
mov esi, eax
push 1
lea ecx, [ebp - 0x350]
call fcn.10020c90
push 4
pop ecx
shl ecx, 1
mov ecx, dword [ebp + ecx - 0xa24]
imul ecx, dword [eax]
cmp dword [esi], ecx
jge 0x1002f7af
mov dword [ebp - 0x3b4], 1
jmp 0x1002f7b6
and dword [ebp - 0x3b4], 0
mov eax, dword [ebp - 0x3b4]
mov dword [ebp - 0x788], eax
jmp 0x1002f75c
cmp dword [ebp - 0x61c], 0x7a23
jge 0x1002f7e0
mov edx, dword [ebp - 0x964]
mov ecx, 0x10085b58
call fcn.10023628
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x350]
call fcn.10020c74
xor eax, eax
inc eax
shl eax, 0
movzx eax, byte [ebp + eax - 0x138]
or eax, 0x24
xor ecx, ecx
inc ecx
shl ecx, 0
movzx ecx, byte [ebp + ecx - 0x138]
and ecx, 0x24
sub eax, ecx
xor ecx, ecx
inc ecx
imul ecx, ecx, 0
movzx ecx, byte [ebp + ecx - 0x138]
mov word [ebp + ecx*2 - 0xa6c], ax
push 3
lea ecx, [ebp - 0xbc4]
call fcn.10020bf2
mov dword [ebp - 4], 8
mov dword [ebp - 0x3bc], 0x6584
mov dword [ebp - 0x71c], 0x10009d68
cmp dword [ebp - 0x3bc], 0x6711
jle 0x1002f8d4
and dword [ebp - 0x274], 0
jmp 0x1002f873
mov eax, dword [ebp - 0x274]
inc eax
mov dword [ebp - 0x274], eax
cmp dword [ebp - 0x274], 0x125d
jge 0x1002f8d4
and dword [ebp - 0x1c0], 0
jmp 0x1002f895
mov eax, dword [ebp - 0x1c0]
inc eax
mov dword [ebp - 0x1c0], eax
cmp dword [ebp - 0x1c0], 0x7699
jge 0x1002f8d2
mov eax, dword [ebp - 0x274]
and eax, dword [ebp - 0x1c0]
cdq
mov dword [ebp - 0x7f0], eax
mov dword [ebp - 0x7ec], edx
push dword [ebp - 0x7ec]
push dword [ebp - 0x7f0]
mov ecx, 0x10085b58
call fcn.100208d8
jmp 0x1002f888
jmp 0x1002f866
cmp dword [ebp - 0x3bc], 0x6237
jge 0x1002f8f0
mov edx, dword [ebp - 0x71c]
mov ecx, 0x10085b58
call fcn.10023628
mov dword [ebp - 0xa8], 0x8795010f
mov dword [ebp - 0x8c4], 0x8bd4dfbd
mov dword [ebp - 0xbf8], 0x43ac46dd
push 4
lea ecx, [ebp - 0xbb4]
call fcn.10020bf2
mov byte [ebp - 4], 9
mov dword [ebp - 0x1c], 0
jmp 0x1002f92f
mov eax, dword [ebp - 0x1c]
inc eax
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 3
jge 0x1002f94b
push dword [ebp - 0x1c]
lea ecx, [ebp - 0xbc4]
call fcn.10020c90
mov dword [eax], 4
jmp 0x1002f928
mov dword [ebp - 0x1c], 0
jmp 0x1002f95b
mov eax, dword [ebp - 0x1c]
inc eax
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 2
jge 0x1002f971
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0xac4], 0
jmp 0x1002f954
mov dword [ebp - 0x1c], 0
jmp 0x1002f981
mov eax, dword [ebp - 0x1c]
inc eax
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 4
jge 0x1002f99d
push dword [ebp - 0x1c]
lea ecx, [ebp - 0xbb4]
call fcn.10020c90
mov dword [eax], 0xd0da0bdb
jmp 0x1002f97a
mov dword [ebp - 0x1c], 0
jmp 0x1002f9ad
mov eax, dword [ebp - 0x1c]
inc eax
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 3
jge 0x1002f9c3
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0xba4], 0x8ea5f34b
jmp 0x1002f9a6
mov eax, dword [ebp - 0xa8]
mov dword [ebp - 0x878], eax
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0xac4]
mov dword [ebp - 0x724], eax
mov eax, dword [ebp - 0xa8]
inc eax
mov dword [ebp - 0xa8], eax
mov eax, dword [ebp - 0x878]
cmp eax, dword [ebp - 0x724]
jne 0x1002fa09
mov dword [ebp - 0x554], 1
jmp 0x1002fa10
and dword [ebp - 0x554], 0
mov eax, dword [ebp - 0x554]
mov dword [ebp - 0x8c4], eax
mov dword [ebp - 0xa8], 0
jmp 0x1002fa35
mov eax, dword [ebp - 0xa8]
inc eax
mov dword [ebp - 0xa8], eax
cmp dword [ebp - 0xa8], 0x14
jge 0x1002fa83
mov dword [ebp - 0xb38], 0
mov dword [ebp - 0xc0c], 0
mov dword [ebp - 0xb40], 0xe6f885ea
mov dword [ebp - 0xc08], 0x4e8fe752
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0xba4]
inc eax
push 4
pop ecx
shl ecx, 0
mov dword [ebp + ecx - 0xba4], eax
jmp 0x1002fa28
mov byte [ebp - 4], 8
lea ecx, [ebp - 0xbb4]
call fcn.10020c74
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xbc4]
call fcn.10020c74
mov dword [ebp - 0x94], 2
and dword [ebp - 0x58c], 0
jmp 0x1002fac2
mov eax, dword [ebp - 0x94]
inc eax
inc eax
mov dword [ebp - 0x94], eax
cmp dword [ebp - 0x94], 0x18
jae 0x100300fd
mov dword [ebp - 0x10], 3
mov dword [ebp - 0x48], 0x24891023
mov dword [ebp - 0x9c], 0
mov dword [ebp - 0x1c8], 0xfffe
mov dword [ebp - 0x890], 1
mov dword [ebp - 0xb48], 0xffffffff
mov dword [ebp - 0x10], 0x26bdde0b
cmp dword [ebp - 0x10], 0
je 0x1002fc05
mov dword [ebp - 0x2b0], 0xffffffff
mov dword [ebp - 0x72c], 0x3cfce294
mov dword [ebp - 0x330], 1
cmp dword [ebp - 0x2b0], 1
jbe 0x1002fb49
mov dword [ebp - 0x3c4], 1
jmp 0x1002fb50
and dword [ebp - 0x3c4], 0
mov eax, dword [ebp - 0x2b0]
cmp eax, dword [ebp - 0x3c4]
je 0x1002fb6a
mov dword [ebp - 0x684], 1
jmp 0x1002fb71
and dword [ebp - 0x684], 0
mov eax, dword [ebp - 0x684]
mov dword [ebp - 0x72c], eax
cmp dword [ebp - 0x2b0], 1
jb 0x1002fbe8
mov eax, dword [ebp - 0x330]
mov dword [ebp - 0x48], eax
mov eax, dword [ebp - 0x48]
cmp dword [ebp - 0x330], eax
je 0x1002fba6
mov dword [ebp - 0x3cc], 1
jmp 0x1002fbad
and dword [ebp - 0x3cc], 0
mov eax, dword [ebp - 0x10]
cmp dword [ebp - 0x10], eax
jl 0x1002fbc7
cmp dword [ebp - 0x2b0], 0
jne 0x1002fbc7
and dword [ebp - 0x55c], 0
jmp 0x1002fbd1
mov dword [ebp - 0x55c], 1
mov eax, dword [ebp - 0x3cc]
sub eax, dword [ebp - 0x55c]
jne 0x1002fbe8
and dword [ebp - 0x884], 0
jmp 0x1002fbf2
mov dword [ebp - 0x884], 1
mov eax, 0xea28
sub eax, 9
mov dword [ebp - 0x330], eax
jmp 0x1002fe5a
mov dword [ebp - 0x44], 0xfdef
mov dword [ebp - 0x73c], 3
mov eax, dword [ebp - 0x48]
cmp dword [ebp - 0x10], eax
jne 0x1002fc2a
mov dword [ebp - 0x3e4], 1
jmp 0x1002fc31
and dword [ebp - 0x3e4], 0
mov eax, dword [ebp - 0x44]
mov dword [ebp - 0xc14], eax
xor eax, eax
inc eax
sub eax, dword [ebp - 0x10]
je 0x1002fc57
mov eax, 0xe89b93b3
test eax, eax
je 0x1002fc57
mov dword [ebp - 0x3d4], 1
jmp 0x1002fc5e
and dword [ebp - 0x3d4], 0
cmp dword [ebp - 0x3d4], 0xffffffff
jl 0x1002fc76
cmp dword [ebp - 0x10], 0
jne 0x1002fc76
and dword [ebp - 0x624], 0
jmp 0x1002fc80
mov dword [ebp - 0x624], 1
mov eax, dword [ebp - 0x624]
sub eax, dword [ebp - 0x44]
mov dword [ebp - 0x9c], eax
cmp dword [ebp - 0x44], 0xfffffff6
jne 0x1002fca1
mov dword [ebp - 0x3dc], 1
jmp 0x1002fca8
and dword [ebp - 0x3dc], 0
mov eax, dword [ebp - 0x10]
cmp dword [ebp - 0x3dc], eax
jg 0x1002fcbf
mov dword [ebp - 0x564], 1
jmp 0x1002fcc6
and dword [ebp - 0x564], 0
mov eax, dword [ebp - 0x10]
cmp dword [ebp - 0x564], eax
jge 0x1002fcdd
mov dword [ebp - 0x734], 1
jmp 0x1002fce4
and dword [ebp - 0x734], 0
mov eax, dword [ebp - 0x48]
mov dword [ebp - 0xa74], eax
cmp dword [ebp - 0x10], 0
jne 0x1002fcff
mov dword [ebp - 0x6d4], 1
jmp 0x1002fd06
and dword [ebp - 0x6d4], 0
mov eax, dword [ebp - 0x3e4]
cmp eax, dword [ebp - 0x6d4]
jne 0x1002fd20
mov dword [ebp - 0x3ec], 1
jmp 0x1002fd27
and dword [ebp - 0x3ec], 0
cmp dword [ebp - 0x3ec], 0x9b12db22
jne 0x1002fd3f
mov dword [ebp - 0x8cc], 1
jmp 0x1002fd46
and dword [ebp - 0x8cc], 0
mov eax, dword [ebp - 0x1c8]
mov dword [ebp - 0xa7c], eax
mov eax, dword [ebp - 0x48]
mov dword [ebp - 0xa84], eax
mov eax, dword [ebp - 0x44]
cmp dword [ebp - 0x44], eax
je 0x1002fd6f
mov dword [ebp - 0x56c], 1
jmp 0x1002fd76
and dword [ebp - 0x56c], 0
mov eax, dword [ebp - 0x10]
cmp dword [ebp - 0x56c], eax
jge 0x1002fd8d
mov dword [ebp - 0x3f4], 1
jmp 0x1002fd94
and dword [ebp - 0x3f4], 0
mov eax, dword [ebp - 0x3f4]
sub eax, dword [ebp - 0x44]
cmp eax, 0xffffffff
jl 0x1002fdae
mov dword [ebp - 0x62c], 1
jmp 0x1002fdb5
and dword [ebp - 0x62c], 0
mov eax, dword [ebp - 0x44]
cmp dword [ebp - 0x62c], eax
jge 0x1002fdcc
mov dword [ebp - 0x3fc], 1
jmp 0x1002fdd3
and dword [ebp - 0x3fc], 0
cmp dword [ebp - 0x3fc], 0
jle 0x1002fde8
mov dword [ebp - 0x574], 1
jmp 0x1002fdef
and dword [ebp - 0x574], 0
mov eax, dword [ebp - 0x44]
cmp dword [ebp - 0x574], eax
je 0x1002fe09
cmp dword [ebp - 0x44], 0
jne 0x1002fe09
and dword [ebp - 0x404], 0
jmp 0x1002fe13
mov dword [ebp - 0x404], 1
mov eax, dword [ebp - 0x404]
mov dword [ebp - 0x73c], eax
mov dword [ebp - 0x44], 0
jmp 0x1002fe2f
mov eax, dword [ebp - 0x44]
inc eax
mov dword [ebp - 0x44], eax
cmp dword [ebp - 0x44], 0x2b
je 0x1002fe5a
mov dword [ebp - 0x10], 0
jmp 0x1002fe45
mov eax, dword [ebp - 0x10]
dec eax
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], 0xfffffffc
jle 0x1002fe58
cmp dword [ebp - 0x9c], 0
je 0x1002fe56
jmp 0x1002fe58
jmp 0x1002fe3e
jmp 0x1002fe28
cmp dword [ebp - 0x10], 0
je 0x1002ff4b
cmp dword [ebp - 0x1c8], 0
je 0x1002fe81
mov eax, dword [ebp - 0x48]
cmp dword [ebp - 0x10], eax
jg 0x1002fe81
mov dword [ebp - 0x68c], 1
jmp 0x1002fe88
and dword [ebp - 0x68c], 0
mov eax, dword [ebp - 0x10]
cmp dword [ebp - 0x68c], eax
jg 0x1002fe9f
mov dword [ebp - 0x40c], 1
jmp 0x1002fea6
and dword [ebp - 0x40c], 0
imul eax, dword [ebp - 0x40c], 0x21fd
cmp eax, dword [ebp - 0x1c8]
jge 0x1002fec4
mov dword [ebp - 0x57c], 1
jmp 0x1002fecb
and dword [ebp - 0x57c], 0
mov eax, dword [ebp - 0x57c]
sub eax, 0x684cc4ca
cmp eax, dword [ebp - 0x10]
jle 0x1002fee7
mov dword [ebp - 0x414], 1
jmp 0x1002feee
and dword [ebp - 0x414], 0
mov eax, dword [ebp - 0x48]
cmp dword [ebp - 0x414], eax
jge 0x1002ff05
mov dword [ebp - 0x634], 1
jmp 0x1002ff0c
and dword [ebp - 0x634], 0
cmp dword [ebp - 0x634], 0xffffffff
jne 0x1002ff21
mov dword [ebp - 0x41c], 1
jmp 0x1002ff28
and dword [ebp - 0x41c], 0
mov eax, dword [ebp - 0x41c]
sub eax, dword [ebp - 0x9c]
imul eax, eax, 0x9bb5
sub eax, 9
je 0x1002ff4b
mov dword [ebp - 0x584], 1
jmp 0x1002ff52
and dword [ebp - 0x584], 0
mov eax, dword [ebp - 0x584]
mov dword [ebp - 0x48], eax
cmp dword [ebp - 0x890], 0x455490eb
jl 0x1002ff73
mov dword [ebp - 0x424], 1
jmp 0x1002ff7a
and dword [ebp - 0x424], 0
mov eax, dword [ebp - 0x424]
shl eax, 2
test eax, eax
je 0x1002ff9c
cmp dword [ebp - 0x1c8], 0
je 0x1002ff9c
mov dword [ebp - 0x6bc], 1
jmp 0x1002ffa3
and dword [ebp - 0x6bc], 0
mov eax, dword [ebp - 0x6bc]
mov dword [ebp - 0x9c], eax
cmp dword [ebp - 0x9c], 0
je 0x10030078
mov dword [ebp - 0x280], 0xc662bffd
mov dword [ebp - 0x744], 9
mov eax, dword [ebp - 0x10]
mov dword [ebp - 0xa8c], eax
mov eax, dword [ebp - 0x280]
mov dword [ebp - 0xa94], eax
mov eax, dword [ebp - 0x280]
mov dword [ebp - 0xa9c], eax
xor eax, eax
inc eax
je 0x1003000b
cmp dword [ebp - 0x744], 0
je 0x1003000b
mov dword [ebp - 0x8d4], 1
jmp 0x10030012
and dword [ebp - 0x8d4], 0
mov eax, dword [ebp - 0x10]
mov dword [ebp - 0xaa4], eax
cmp dword [ebp - 0x48], 0x23de179b
jge 0x10030030
mov dword [ebp - 0x42c], 1
jmp 0x10030037
and dword [ebp - 0x42c], 0
mov eax, dword [ebp - 0x280]
cmp dword [ebp - 0x42c], eax
jge 0x10030051
mov dword [ebp - 0x74c], 1
jmp 0x10030058
and dword [ebp - 0x74c], 0
mov eax, dword [ebp - 0x48]
mov dword [ebp - 0xaac], eax
mov eax, dword [ebp - 0x280]
mov dword [ebp - 0x9c], eax
mov eax, dword [ebp - 0x9c]
mov dword [ebp - 0x48], eax
jmp 0x10030088
mov dword [ebp - 0x48], 0xfffffffd
mov eax, dword [ebp - 0x48]
mov dword [ebp - 0x9c], eax
mov eax, dword [ebp - 0x94]
movzx eax, byte [ebp + eax - 0x137]
mov ecx, dword [ebp - 0x94]
sub ecx, dword [ebp - 0x58c]
movzx ecx, byte [ebp + ecx - 0x13a]
movzx ecx, word [ebp + ecx*2 - 0xa6c]
or eax, ecx
mov ecx, dword [ebp - 0x94]
movzx ecx, byte [ebp + ecx - 0x137]
mov edx, dword [ebp - 0x94]
sub edx, dword [ebp - 0x58c]
movzx edx, byte [ebp + edx - 0x13a]
movzx edx, word [ebp + edx*2 - 0xa6c]
and ecx, edx
sub eax, ecx
mov ecx, dword [ebp - 0x94]
movzx ecx, byte [ebp + ecx - 0x138]
mov word [ebp + ecx*2 - 0xa6c], ax
jmp 0x1002fab4
mov dword [ebp - 0x8c], 0xa87013dc
mov dword [ebp - 0x2fc], 1
mov dword [ebp - 0xad4], 0xfffffff9
mov dword [ebp - 0x694], 0
mov dword [ebp - 0x54], 0
jmp 0x10030135
mov eax, dword [ebp - 0x54]
inc eax
mov dword [ebp - 0x54], eax
cmp dword [ebp - 0x54], 3
jge 0x1003014b
mov eax, dword [ebp - 0x54]
mov dword [ebp + eax*4 - 0x980], 0xd7f825e
jmp 0x1003012e
mov dword [ebp - 0x54], 0
jmp 0x1003015b
mov eax, dword [ebp - 0x54]
inc eax
mov dword [ebp - 0x54], eax
cmp dword [ebp - 0x54], 4
jge 0x10030171
mov eax, dword [ebp - 0x54]
mov dword [ebp + eax*4 - 0xa40], 1
jmp 0x10030154
mov dword [ebp - 0x8c], 2
jmp 0x1003018a
mov eax, dword [ebp - 0x8c]
dec eax
mov dword [ebp - 0x8c], eax
cmp dword [ebp - 0x8c], 0
jl 0x100303a2
mov dword [ebp - 0xadc], 0xfffffff8
mov dword [ebp - 0x78], 0
jmp 0x100301b1
mov eax, dword [ebp - 0x78]
inc eax
mov dword [ebp - 0x78], eax
cmp dword [ebp - 0x78], 1
jge 0x100301c7
mov eax, dword [ebp - 0x78]
mov dword [ebp + eax*4 - 0x754], 0x8b39d205
jmp 0x100301aa
mov dword [ebp - 0x78], 0
jmp 0x100301d7
mov eax, dword [ebp - 0x78]
inc eax
mov dword [ebp - 0x78], eax
cmp dword [ebp - 0x78], 2
jge 0x100301ed
mov eax, dword [ebp - 0x78]
mov dword [ebp + eax*4 - 0x9a0], 0xaba9
jmp 0x100301d0
mov eax, dword [ebp - 0x8c]
mov eax, dword [ebp + eax*4 - 0x980]
mov dword [ebp - 0xae4], eax
mov eax, dword [ebp - 0x2fc]
inc eax
mov dword [ebp - 0x2fc], eax
imul eax, dword [ebp - 0x2fc], 9
cmp eax, 0x945cb81e
je 0x10030227
mov dword [ebp - 0x434], 1
jmp 0x1003022e
and dword [ebp - 0x434], 0
mov eax, dword [ebp - 0x434]
inc eax
push 4
pop ecx
shl ecx, 0
cmp eax, dword [ebp + ecx - 0xa40]
jne 0x10030250
mov dword [ebp - 0x63c], 1
jmp 0x10030257
and dword [ebp - 0x63c], 0
mov eax, dword [ebp - 0x8c]
cmp dword [ebp - 0x63c], eax
jle 0x10030271
mov dword [ebp - 0x43c], 1
jmp 0x10030278
and dword [ebp - 0x43c], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x9a0]
cmp dword [ebp - 0x43c], eax
jl 0x100302a9
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x9a0], 0
je 0x100302a9
mov dword [ebp - 0x594], 1
jmp 0x100302b0
and dword [ebp - 0x594], 0
mov eax, dword [ebp - 0x8c]
mov eax, dword [ebp + eax*4 - 0x980]
cmp eax, dword [ebp - 0x594]
jne 0x100302d1
mov dword [ebp - 0x444], 1
jmp 0x100302d8
and dword [ebp - 0x444], 0
mov eax, dword [ebp - 0x8c]
cmp dword [ebp - 0x444], eax
jne 0x100302f2
mov dword [ebp - 0x89c], 1
jmp 0x100302f9
and dword [ebp - 0x89c], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x980]
mov dword [ebp - 0xaec], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x754]
add eax, 0x5d3e8ea4
jne 0x10030339
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0xa40], 0
jne 0x10030339
and dword [ebp - 0x70c], 0
jmp 0x10030343
mov dword [ebp - 0x70c], 1
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0xa40], 0
je 0x10030364
xor eax, eax
inc eax
je 0x10030364
mov dword [ebp - 0x31c], 1
jmp 0x1003036b
and dword [ebp - 0x31c], 0
push 4
pop eax
shl eax, 1
mov ecx, dword [ebp - 0x31c]
mov dword [ebp + eax - 0xa40], ecx
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x31c]
mov dword [ebp + eax - 0x980], ecx
mov eax, dword [ebp - 0x694]
dec eax
mov dword [ebp - 0x694], eax
jmp 0x1003017d
push 2
pop eax
imul eax, eax, 0xc
xor ecx, ecx
mov word [ebp + eax - 0xa6c], cx
mov dword [ebp - 0x14], 4
mov dword [ebp - 0xac], 0x7b80be39
mov dword [ebp - 0xbc], 0x32111c1b
mov dword [ebp - 0x4cc], 0x4c1f
mov dword [ebp - 0x70], 0
jmp 0x100303e7
mov eax, dword [ebp - 0x70]
inc eax
mov dword [ebp - 0x70], eax
cmp dword [ebp - 0x70], 1
jge 0x100303fa
mov eax, dword [ebp - 0x70]
mov dword [ebp + eax*4 - 0x28], 1
jmp 0x100303e0
mov dword [ebp - 0x70], 0
jmp 0x1003040a
mov eax, dword [ebp - 0x70]
inc eax
mov dword [ebp - 0x70], eax
cmp dword [ebp - 0x70], 4
jge 0x10030420
mov eax, dword [ebp - 0x70]
mov dword [ebp + eax*4 - 0xe04], 0xb10da9be
jmp 0x10030403
mov dword [ebp - 0x14], 0
jmp 0x10030430
mov eax, dword [ebp - 0x14]
dec eax
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 0
jl 0x10030c72
mov dword [ebp - 0x1e0], 0xffffffff
mov dword [ebp - 0xb4], 7
mov dword [ebp - 0x44c], 0x7ff2
mov dword [ebp - 0x75c], 0x10009dc8
cmp dword [ebp - 0x44c], 0x818e
jle 0x1003054f
and dword [ebp - 0x288], 0
jmp 0x10030488
mov eax, dword [ebp - 0x288]
inc eax
mov dword [ebp - 0x288], eax
cmp dword [ebp - 0x288], 0x26d6
jge 0x1003054f
and dword [ebp - 0x1d0], 0
jmp 0x100304ae
mov eax, dword [ebp - 0x1d0]
inc eax
mov dword [ebp - 0x1d0], eax
cmp dword [ebp - 0x1d0], 0x2a65
jge 0x1003054a
and dword [ebp - 0x2d8], 0
jmp 0x100304d4
mov eax, dword [ebp - 0x2d8]
inc eax
mov dword [ebp - 0x2d8], eax
cmp dword [ebp - 0x2d8], 0x775e
jge 0x10030545
and dword [ebp - 0x1d8], 0
jmp 0x100304f6
mov eax, dword [ebp - 0x1d8]
inc eax
mov dword [ebp - 0x1d8], eax
cmp dword [ebp - 0x1d8], 0x3baf
jge 0x10030543
mov eax, dword [ebp - 0x1d0]
mov ecx, dword [ebp - 0x2d8]
sar eax, cl
mov ecx, dword [ebp - 0x1d8]
shl eax, cl
xor eax, dword [ebp - 0x288]
cdq
mov dword [ebp - 0x7fc], eax
mov dword [ebp - 0x7f8], edx
push dword [ebp - 0x7f8]
push dword [ebp - 0x7fc]
mov ecx, 0x10085b58
call fcn.100208d8
jmp 0x100304e9
jmp 0x100304c7
jmp 0x100304a1
jmp 0x1003047b
mov dword [ebp - 0x9f4], 0x46ed4d34
mov dword [ebp - 0x9f0], 0x46ed4d34
mov dword [ebp - 0x9ec], 0x46ed4d34
mov dword [ebp - 0x9e8], 0x46ed4d34
lea ecx, [ebp - 0x331]
call fcn.10020c9f
push eax
lea eax, [ebp - 0x9e4]
push eax
lea eax, [ebp - 0x9f4]
push eax
lea ecx, [ebp - 0xcb8]
call fcn.10020ca2
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0x998]
call fcn.10020c4e
mov dword [ebp - 4], 0xa
cmp dword [ebp - 0x44c], 0x7fa4
jge 0x100305cf
mov edx, dword [ebp - 0x75c]
mov ecx, 0x10085b58
call fcn.10023628
mov dword [ebp - 0x8e4], 0x4b380b77
mov dword [ebp - 0x80], 0
jmp 0x100305e9
mov eax, dword [ebp - 0x80]
inc eax
mov dword [ebp - 0x80], eax
cmp dword [ebp - 0x80], 3
jge 0x100305ff
mov eax, dword [ebp - 0x80]
mov dword [ebp + eax*4 - 0xbd4], 0x1cfd1f2e
jmp 0x100305e2
mov dword [ebp - 0x80], 0
jmp 0x1003060f
mov eax, dword [ebp - 0x80]
inc eax
mov dword [ebp - 0x80], eax
cmp dword [ebp - 0x80], 2
jge 0x10030625
mov eax, dword [ebp - 0x80]
mov dword [ebp + eax*4 - 0x2ec], 0
jmp 0x10030608
mov eax, dword [ebp - 0x14]
cmp dword [ebp + eax*4 - 0x28], 0x279c4185
je 0x1003063e
mov dword [ebp - 0x654], 1
jmp 0x10030645
and dword [ebp - 0x654], 0
cmp dword [ebp - 0x14], 0
jne 0x100308e6
mov eax, dword [ebp - 0x14]
mov ecx, dword [ebp - 0x14]
cmp dword [ebp + eax*4 - 0x28], ecx
jne 0x10030667
mov dword [ebp - 0x59c], 1
jmp 0x1003066e
and dword [ebp - 0x59c], 0
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp + eax*4 - 0x28]
sub eax, dword [ebp - 0x59c]
push 4
pop ecx
imul ecx, ecx, 0
cmp eax, dword [ebp + ecx - 0x28]
jle 0x10030693
mov dword [ebp - 0x454], 1
jmp 0x1003069a
and dword [ebp - 0x454], 0
mov eax, dword [ebp - 0x454]
sub eax, dword [ebp - 0x14]
sub eax, dword [ebp - 0x14]
mov ecx, dword [ebp - 0x14]
cmp eax, dword [ebp + ecx*4 - 0x28]
jge 0x100306bb
mov dword [ebp - 0x644], 1
jmp 0x100306c2
and dword [ebp - 0x644], 0
cmp dword [ebp - 0x644], 0
jl 0x100306d7
mov dword [ebp - 0x45c], 1
jmp 0x100306de
and dword [ebp - 0x45c], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x2ec]
cmp dword [ebp - 0x45c], eax
jl 0x100306ff
mov dword [ebp - 0x5a4], 1
jmp 0x10030706
and dword [ebp - 0x5a4], 0
mov eax, dword [ebp - 0x5a4]
sub eax, dword [ebp - 0x14]
push 4
pop ecx
shl ecx, 0
cmp eax, dword [ebp + ecx - 0x2ec]
jl 0x1003072a
mov dword [ebp - 0x464], 1
jmp 0x10030731
and dword [ebp - 0x464], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x2ec]
cmp dword [ebp - 0x464], eax
jge 0x10030752
mov dword [ebp - 0x6c8], 1
jmp 0x10030759
and dword [ebp - 0x6c8], 0
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp + eax*4 - 0x28]
imul eax, dword [ebp - 0x6c8]
test eax, eax
jne 0x10030784
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x2ec], 0
jne 0x10030784
and dword [ebp - 0x46c], 0
jmp 0x1003078e
mov dword [ebp - 0x46c], 1
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp + eax*4 - 0x28]
cmp dword [ebp - 0x46c], eax
jne 0x100307a9
mov dword [ebp - 0x5ac], 1
jmp 0x100307b0
and dword [ebp - 0x5ac], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x28]
imul eax, dword [ebp - 0x5ac]
test eax, eax
jne 0x100307db
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x28], 0
jne 0x100307db
and dword [ebp - 0x474], 0
jmp 0x100307e5
mov dword [ebp - 0x474], 1
cmp dword [ebp - 0x474], 0xc894628a
jne 0x100307fd
mov dword [ebp - 0x64c], 1
jmp 0x10030804
and dword [ebp - 0x64c], 0
cmp dword [ebp - 0x64c], 0x1e16
jl 0x1003081c
mov dword [ebp - 0x47c], 1
jmp 0x10030823
and dword [ebp - 0x47c], 0
mov eax, dword [ebp - 0x47c]
mov dword [ebp - 0x1e0], eax
cmp dword [ebp - 0x1e0], 0
je 0x1003084d
mov eax, 0x4198
test eax, eax
je 0x1003084d
mov dword [ebp - 0x5b4], 1
jmp 0x10030854
and dword [ebp - 0x5b4], 0
mov eax, dword [ebp - 0x5b4]
mov dword [ebp - 0xb4], eax
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp + eax*4 - 0x28]
mov dword [ebp - 0xaf4], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x28]
mov dword [ebp - 0xafc], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x28]
mov dword [ebp - 0xb04], eax
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp + eax*4 - 0x28]
cmp dword [ebp - 0x1e0], eax
je 0x100308a8
mov dword [ebp - 0x484], 1
jmp 0x100308af
and dword [ebp - 0x484], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x28]
cmp dword [ebp - 0x484], eax
jl 0x100308cd
mov dword [ebp - 0x69c], 1
jmp 0x100308d4
and dword [ebp - 0x69c], 0
cmp dword [ebp - 0x69c], 0xffffffff
jl 0x100308e6
and dword [ebp - 0x48c], 0
jmp 0x100308f0
mov dword [ebp - 0x48c], 1
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x28]
cmp dword [ebp - 0x48c], eax
jg 0x1003090e
mov dword [ebp - 0x5bc], 1
jmp 0x10030915
and dword [ebp - 0x5bc], 0
mov eax, dword [ebp - 0x14]
mov ecx, dword [ebp - 0x5bc]
sub ecx, dword [ebp + eax*4 - 0x28]
push 4
pop eax
shl eax, 0
cmp ecx, dword [ebp + eax - 0x2ec]
jne 0x1003093d
mov dword [ebp - 0x304], 1
jmp 0x10030944
and dword [ebp - 0x304], 0
push 0
lea ecx, [ebp - 0x998]
call fcn.10020c90
mov ecx, dword [ebp - 0x304]
mov dword [eax], ecx
cmp dword [ebp - 0x304], 0
jne 0x10030974
mov eax, 0x8b2e
test eax, eax
jne 0x10030974
and dword [ebp - 0x494], 0
jmp 0x1003097e
mov dword [ebp - 0x494], 1
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x28]
cmp dword [ebp - 0x494], eax
jne 0x1003099c
mov dword [ebp - 0x5c4], 1
jmp 0x100309a3
and dword [ebp - 0x5c4], 0
mov eax, dword [ebp - 0x654]
mov dword [ebp - 0xac], eax
mov eax, dword [ebp - 0xac]
mov dword [ebp - 0x49c], eax
push 4
pop eax
shl eax, 1
mov ecx, dword [ebp - 0x49c]
mov dword [ebp + eax - 0xbd4], ecx
mov eax, dword [ebp - 0x49c]
add eax, dword [ebp - 0x5c4]
cmp eax, 0x2b52
je 0x100309ec
mov dword [ebp - 0x8a8], 1
jmp 0x100309f3
and dword [ebp - 0x8a8], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x2ec]
mov dword [ebp - 0xb0c], eax
cmp dword [ebp - 0xbc], 0
je 0x10030aa0
mov dword [ebp - 0xb4], 0
jmp 0x10030a2c
mov eax, dword [ebp - 0xb4]
inc eax
mov dword [ebp - 0xb4], eax
cmp dword [ebp - 0xb4], 0
jg 0x10030a9b
mov dword [ebp - 0xac], 0
jmp 0x10030a4e
mov eax, dword [ebp - 0xac]
inc eax
mov dword [ebp - 0xac], eax
cmp dword [ebp - 0xac], 2
jg 0x10030a99
mov dword [ebp - 0xbc], 0
jmp 0x10030a70
mov eax, dword [ebp - 0xbc]
inc eax
mov dword [ebp - 0xbc], eax
cmp dword [ebp - 0xbc], 1
jg 0x10030a97
mov eax, dword [ebp - 0xb4]
add eax, 3
push eax
lea ecx, [ebp - 0x998]
call fcn.10020c90
cmp dword [eax], 0
je 0x10030a95
jmp 0x10030a97
jmp 0x10030a63
jmp 0x10030a41
jmp 0x10030a1f
jmp 0x10030c5e
mov dword [ebp - 0x764], 0x5ed53545
mov dword [ebp - 0x5d4], 0x7e0e8bb0
cmp dword [ebp - 0x764], 0
je 0x10030bc2
cmp dword [ebp - 0xac], 0
je 0x10030bc2
xor eax, eax
jne 0x10030b4f
cmp dword [ebp - 0x14], 0
jne 0x10030b0b
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0xbd4]
mov dword [ebp - 0xb14], eax
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0xb4]
cmp dword [ebp + eax - 0x2ec], ecx
jg 0x10030b0b
mov dword [ebp - 0x4a4], 1
jmp 0x10030b12
and dword [ebp - 0x4a4], 0
cmp dword [ebp - 0x4a4], 0x5cd2
jle 0x10030b2a
mov dword [ebp - 0x6c4], 1
jmp 0x10030b31
and dword [ebp - 0x6c4], 0
mov eax, dword [ebp - 0x6c4]
mov dword [ebp - 0xbc], eax
cmp dword [ebp - 0xbc], 0
jne 0x10030b4f
and dword [ebp - 0x4ac], 0
jmp 0x10030b59
mov dword [ebp - 0x4ac], 1
mov eax, dword [ebp - 0x8e4]
cmp dword [ebp - 0x4ac], eax
je 0x10030b73
mov dword [ebp - 0x5cc], 1
jmp 0x10030b7a
and dword [ebp - 0x5cc], 0
mov eax, dword [ebp - 0x14]
cmp dword [ebp - 0x5cc], eax
jl 0x10030b91
mov dword [ebp - 0x338], 1
jmp 0x10030b98
and dword [ebp - 0x338], 0
push 0
lea ecx, [ebp - 0x998]
call fcn.10020c90
mov ecx, dword [ebp - 0x338]
mov dword [eax], ecx
cmp dword [ebp - 0x338], 0
je 0x10030bc2
mov dword [ebp - 0x4b4], 1
jmp 0x10030bc9
and dword [ebp - 0x4b4], 0
mov eax, dword [ebp - 0x5d4]
cmp dword [ebp - 0x4b4], eax
je 0x10030be3
mov dword [ebp - 0x65c], 1
jmp 0x10030bea
and dword [ebp - 0x65c], 0
cmp dword [ebp - 0x65c], 0xcfe89070
jae 0x10030c02
mov dword [ebp - 0x4bc], 1
jmp 0x10030c09
and dword [ebp - 0x4bc], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x2ec]
cmp dword [ebp - 0x4bc], eax
je 0x10030c2a
mov dword [ebp - 0x4c4], 1
jmp 0x10030c31
and dword [ebp - 0x4c4], 0
mov eax, dword [ebp - 0x5d4]
cmp dword [ebp - 0x4c4], eax
jg 0x10030c4b
mov dword [ebp - 0x6a4], 1
jmp 0x10030c52
and dword [ebp - 0x6a4], 0
mov eax, dword [ebp - 0x6a4]
mov dword [ebp - 0x1e0], eax
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x998]
call fcn.10020c74
jmp 0x10030429
mov eax, dword [ebp - 0x4cc]
inc eax
mov dword [ebp - 0x4cc], eax
lea eax, [ebp - 0xa6c]
push eax
lea ecx, [ebp - 0xd70]
call fcn.100425af
mov dword [ebp - 0x76c], eax
mov eax, dword [ebp - 0x76c]
mov dword [ebp - 0x8b4], eax
mov dword [ebp - 4], 0xb
push dword [ebp - 0x8b4]
call fcn.10025499
pop ecx
mov dword [ebp - 0x4f0], eax
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xd70]
call fcn.10020a85
mov dword [ebp - 0x90], 0xffff
mov dword [ebp - 0x5dc], 0x948708ef
mov dword [ebp - 0x4d4], 0
mov dword [ebp - 0x2b8], 0x6f65e790
mov dword [ebp - 0x4e4], 0x8c55
mov dword [ebp - 0x4f4], 0x1f0dfbc4
mov byte [ebp - 0xa1], 0
movzx eax, byte [ebp - 0xa1]
test eax, eax
je 0x10030d21
push 0
call dword [sym.imp.GDI32.dll_CreateBrushIndirect]
mov eax, dword [ebp - 0x90]
mov dword [ebp - 0x5dc], eax
cmp dword [ebp - 0x5dc], 0
jne 0x10030d42
mov dword [ebp - 0x664], 1
jmp 0x10030d49
and dword [ebp - 0x664], 0
mov eax, dword [ebp - 0x90]
mov dword [ebp - 0x4d4], eax
mov eax, dword [ebp - 0x4d4]
cmp dword [ebp - 0x664], eax
jle 0x10030d6f
mov dword [ebp - 0x6d0], 1
jmp 0x10030d76
and dword [ebp - 0x6d0], 0
mov eax, dword [ebp - 0x90]
neg eax
mov dword [ebp - 0x2b8], eax
mov eax, dword [ebp - 0x90]
cmp dword [ebp - 0x2b8], eax
jle 0x10030d9e
mov dword [ebp - 0x4dc], 1
jmp 0x10030da5
and dword [ebp - 0x4dc], 0
cmp dword [ebp - 0x4dc], 1
jle 0x10030dc3
cmp dword [ebp - 0x90], 0
je 0x10030dc3
mov dword [ebp - 0x5e4], 1
jmp 0x10030dca
and dword [ebp - 0x5e4], 0
mov eax, dword [ebp - 0x90]
add eax, dword [ebp - 0x5e4]
mov dword [ebp - 0x4e4], eax
mov eax, dword [ebp - 0x4e4]
mov dword [ebp - 0xb1c], eax
mov eax, dword [ebp - 0x90]
mov dword [ebp - 0xb24], eax
mov eax, dword [ebp - 0x2b8]
mov dword [ebp - 0xb2c], eax
imul eax, dword [ebp - 0x2b8], 0x3eef
cmp eax, dword [ebp - 0x90]
jg 0x10030e1e
mov dword [ebp - 0x4ec], 1
jmp 0x10030e25
and dword [ebp - 0x4ec], 0
mov eax, dword [ebp - 0x6d0]
cmp eax, dword [ebp - 0x4ec]
jle 0x10030e48
cmp dword [ebp - 0x4f4], 0
je 0x10030e48
mov dword [ebp - 0x5ec], 1
jmp 0x10030e4f
and dword [ebp - 0x5ec], 0
mov eax, dword [ebp - 0x5ec]
mov dword [ebp - 0x4f4], eax
and dword [ebp - 0x290], 0
jmp 0x10030e71
mov eax, dword [ebp - 0x290]
inc eax
mov dword [ebp - 0x290], eax
cmp dword [ebp - 0x290], 0xd
jae 0x10030ef3
mov dword [ebp - 0x1e8], 0xfffffff7
mov dword [ebp - 0x1e8], 7
jmp 0x10030e9d
mov eax, dword [ebp - 0x1e8]
inc eax
mov dword [ebp - 0x1e8], eax
cmp dword [ebp - 0x1e8], 9
je 0x10030ede
mov byte [ebp - 0xc5], 0
movzx eax, byte [ebp - 0xc5]
test eax, eax
je 0x10030ec0
push 0
call dword [sym.imp.GDI32.dll_GetStockObject]
mov byte [ebp - 0xd7], 0
movzx eax, byte [ebp - 0xd7]
test eax, eax
je 0x10030edc
push 0
push 0
call dword [sym.imp.KERNEL32.dll_IsDBCSLeadByteEx]
jmp 0x10030e90
xor eax, eax
mov ecx, dword [ebp - 0x290]
mov word [ebp + ecx*2 - 0xa6c], ax
jmp 0x10030e64
mov dword [ebp - 0xc4], 0x4ffb
mov dword [ebp - 0x504], 0x885bd52a
mov dword [ebp - 0xc4], 0xc64a6847
mov dword [ebp - 0xc4], 0x13
jmp 0x10030f2a
mov eax, dword [ebp - 0xc4]
dec eax
mov dword [ebp - 0xc4], eax
cmp dword [ebp - 0xc4], 0xd
jg 0x10031213
push 1
lea ecx, [ebp - 0x6f0]
call fcn.10020bf2
mov dword [ebp - 4], 0xc
mov dword [ebp - 0x38], 0xfffffffc
mov dword [ebp - 0x100], 3
mov dword [ebp - 0x66c], 0x655a
mov dword [ebp - 0x774], 0x10009e24
cmp dword [ebp - 0x66c], 0x67de
jle 0x10030ff5
and dword [ebp - 0x1f0], 0
jmp 0x10030f92
mov eax, dword [ebp - 0x1f0]
inc eax
mov dword [ebp - 0x1f0], eax
cmp dword [ebp - 0x1f0], 0x17ef
jge 0x10030ff5
and dword [ebp - 0x2d0], 0
jmp 0x10030fb4
mov eax, dword [ebp - 0x2d0]
inc eax
mov dword [ebp - 0x2d0], eax
cmp dword [ebp - 0x2d0], 0x36c2
jge 0x10030ff3
mov eax, dword [ebp - 0x1f0]
mov ecx, dword [ebp - 0x2d0]
shl eax, cl
cdq
mov dword [ebp - 0x808], eax
mov dword [ebp - 0x804], edx
push dword [ebp - 0x804]
push dword [ebp - 0x808]
mov ecx, 0x10085b58
call fcn.100208d8
jmp 0x10030fa7
jmp 0x10030f85
cmp dword [ebp - 0x66c], 0x61e4
jge 0x10031011
mov edx, dword [ebp - 0x774]
mov ecx, 0x10085b58
call fcn.10023628
mov dword [ebp - 0x1f8], 0
jmp 0x1003102a
mov eax, dword [ebp - 0x1f8]
inc eax
mov dword [ebp - 0x1f8], eax
cmp dword [ebp - 0x1f8], 1
jge 0x1003104c
push dword [ebp - 0x1f8]
lea ecx, [ebp - 0x6f0]
call fcn.10020c90
mov dword [eax], 4
jmp 0x1003101d
mov dword [ebp - 0x38], 0
jmp 0x1003105c
mov eax, dword [ebp - 0x38]
dec eax
mov dword [ebp - 0x38], eax
cmp dword [ebp - 0x38], 0
jl 0x100311a1
mov dword [ebp - 0x30c], 0
mov dword [ebp - 0x5f4], 0xf738f585
push dword [ebp - 0x38]
lea ecx, [ebp - 0x6f0]
call fcn.10020c90
cmp dword [eax], 0
je 0x100310b5
cmp dword [ebp - 0x504], 0
je 0x100310b5
push dword [ebp - 0x38]
lea ecx, [ebp - 0x6f0]
call fcn.10020c90
cmp dword [eax], 0
je 0x100310b5
mov dword [ebp - 0x4fc], 1
jmp 0x100310bc
and dword [ebp - 0x4fc], 0
push dword [ebp - 0x38]
lea ecx, [ebp - 0x6f0]
call fcn.10020c90
mov ecx, dword [ebp - 0x4fc]
sub ecx, dword [eax]
mov dword [ebp - 0x5f4], ecx
mov esi, dword [ebp - 0x5f4]
push dword [ebp - 0x38]
lea ecx, [ebp - 0x6f0]
call fcn.10020c90
sub esi, dword [eax]
cmp esi, dword [ebp - 0xc4]
je 0x10031102
mov dword [ebp - 0x6ac], 1
jmp 0x10031109
and dword [ebp - 0x6ac], 0
mov eax, dword [ebp - 0x504]
cmp dword [ebp - 0x6ac], eax
jg 0x10031123
mov dword [ebp - 0x50c], 1
jmp 0x1003112a
and dword [ebp - 0x50c], 0
push dword [ebp - 0x38]
lea ecx, [ebp - 0x6f0]
call fcn.10020c90
mov eax, dword [eax]
cmp eax, dword [ebp - 0x50c]
jne 0x10031157
cmp dword [ebp - 0xc4], 0
je 0x10031157
mov dword [ebp - 0x5fc], 1
jmp 0x1003115e
and dword [ebp - 0x5fc], 0
mov eax, dword [ebp - 0x38]
cmp dword [ebp - 0x5fc], eax
jne 0x10031175
mov dword [ebp - 0x514], 1
jmp 0x1003117c
and dword [ebp - 0x514], 0
mov eax, dword [ebp - 0x30c]
imul eax, dword [ebp - 0x514]
mov dword [ebp - 0x100], eax
mov eax, dword [ebp - 0x30c]
dec eax
mov dword [ebp - 0x30c], eax
jmp 0x10031055
mov dword [ebp - 0x38], 0
jmp 0x100311b1
mov eax, dword [ebp - 0x38]
inc eax
mov dword [ebp - 0x38], eax
cmp dword [ebp - 0x38], 0
jg 0x100311ff
mov dword [ebp - 0x100], 0
jmp 0x100311d0
mov eax, dword [ebp - 0x100]
dec eax
mov dword [ebp - 0x100], eax
cmp dword [ebp - 0x100], 0
jl 0x100311fd
mov byte [ebp - 0xd1], 0
movzx eax, byte [ebp - 0xd1]
test eax, eax
je 0x100311fb
push 0
push 0
push 0
push 0
push 0
call dword [sym.imp.USER32.dll_InsertMenuA]
jmp 0x100311c3
jmp 0x100311aa
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x6f0]
call fcn.10020c74
jmp 0x10030f1d
cmp dword [ebp - 0x4f0], 0
je 0x10032958
mov dword [ebp - 0x20], 0x90ac204e
push 3
lea ecx, [ebp - 0x328]
call fcn.10020bf2
mov dword [ebp - 4], 0xd
mov dword [ebp - 0xb34], 0
mov dword [ebp - 0xb3c], 0x4b6d700d
mov dword [ebp - 0xb44], 0x6e8d2ca8
mov dword [ebp - 0x298], 0
jmp 0x10031272
mov eax, dword [ebp - 0x298]
inc eax
mov dword [ebp - 0x298], eax
cmp dword [ebp - 0x298], 3
jge 0x10031294
push dword [ebp - 0x298]
lea ecx, [ebp - 0x328]
call fcn.10020c90
mov dword [eax], 0xfffffff6
jmp 0x10031265
mov dword [ebp - 0x20], 0xb
jmp 0x100312a4
mov eax, dword [ebp - 0x20]
inc eax
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 0x19
je 0x100313cb
mov dword [ebp - 0xe8], 0xe4438bea
mov dword [ebp - 0x604], 0
mov dword [ebp - 0x8c0], 0x9338886a
cmp dword [ebp - 0xe8], 0
je 0x100313aa
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0xe8], eax
cmp dword [ebp - 0xe8], 0
jne 0x10031335
push 2
lea ecx, [ebp - 0x328]
call fcn.10020c90
mov eax, dword [eax]
add eax, 0x21407762
mov dword [ebp - 0xe8], eax
mov esi, dword [ebp - 0xe8]
push 1
lea ecx, [ebp - 0x328]
call fcn.10020c90
imul esi, dword [eax]
cmp esi, dword [ebp - 0x604]
jg 0x10031335
cmp dword [ebp - 0xe8], 0
jne 0x10031335
and dword [ebp - 0x674], 0
jmp 0x1003133f
mov dword [ebp - 0x674], 1
mov eax, dword [ebp - 0x20]
cmp dword [ebp - 0x674], eax
je 0x10031356
mov dword [ebp - 0x8ec], 1
jmp 0x1003135d
and dword [ebp - 0x8ec], 0
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0xb4c], eax
mov eax, 0xbf9f
cmp eax, 1
jb 0x1003137c
mov dword [ebp - 0x51c], 1
jmp 0x10031383
and dword [ebp - 0x51c], 0
push 1
lea ecx, [ebp - 0x328]
call fcn.10020c90
mov eax, dword [eax]
imul eax, dword [ebp - 0x51c]
cmp eax, 1
je 0x100313aa
mov dword [ebp - 0x77c], 1
jmp 0x100313b1
and dword [ebp - 0x77c], 0
mov eax, dword [ebp - 0x8c0]
mov dword [ebp - 0xb54], eax
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x604], eax
jmp 0x1003129d
mov dword [ebp - 0x20], 2
jmp 0x100313db
mov eax, dword [ebp - 0x20]
dec eax
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 0
jl 0x10031495
mov dword [ebp - 0xc24], 0x1f356d9d
push dword [ebp - 0x20]
lea ecx, [ebp - 0x328]
call fcn.10020c90
cmp dword [eax], 0
je 0x10031407
jmp 0x10031495
push 0
lea ecx, [ebp - 0x328]
call fcn.10020c90
push dword [ebp - 0x20]
lea ecx, [ebp - 0x328]
call fcn.10020c90
cmp dword [eax], 1
jg 0x10031433
mov dword [ebp - 0x358], 1
jmp 0x1003143a
and dword [ebp - 0x358], 0
cmp dword [ebp - 0x358], 5
jae 0x1003144f
mov dword [ebp - 0x360], 1
jmp 0x10031456
and dword [ebp - 0x360], 0
mov esi, dword [ebp - 0x360]
sub esi, dword [ebp - 0x20]
push dword [ebp - 0x20]
lea ecx, [ebp - 0x328]
call fcn.10020c90
imul esi, dword [eax]
push dword [ebp - 0x20]
lea ecx, [ebp - 0x328]
call fcn.10020c90
add esi, dword [eax]
push dword [ebp - 0x20]
lea ecx, [ebp - 0x328]
call fcn.10020c90
mov dword [eax], esi
jmp 0x100313d4
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x328]
call fcn.10020c74
mov dword [ebp - 0x32c], 0xf9b2cfb6
mov dword [ebp - 0x8fc], 0xfffffffb
mov dword [ebp - 0xc2c], 0xffffffff
mov dword [ebp - 0xa70], 0x4ccb63e8
mov dword [ebp - 0x78c], 0x146cdead
mov dword [ebp - 0x784], 1
mov dword [ebp - 0x8f4], 0xfffffffd
mov dword [ebp - 0xc3c], 0xe28fdeb7
mov dword [ebp - 0xc50], 0xa8f90a3c
push 1
lea ecx, [ebp - 0xbe4]
call fcn.10020bf2
mov dword [ebp - 4], 0xe
mov dword [ebp - 0x380], 6
mov dword [ebp - 0x64], 0
jmp 0x1003152c
mov eax, dword [ebp - 0x64]
inc eax
mov dword [ebp - 0x64], eax
cmp dword [ebp - 0x64], 1
jge 0x10031548
push dword [ebp - 0x64]
lea ecx, [ebp - 0xbe4]
call fcn.10020c90
mov dword [eax], 0xfffffff7
jmp 0x10031525
mov dword [ebp - 0x64], 0
jmp 0x10031558
mov eax, dword [ebp - 0x64]
inc eax
mov dword [ebp - 0x64], eax
cmp dword [ebp - 0x64], 4
jge 0x1003156e
mov eax, dword [ebp - 0x64]
mov dword [ebp + eax*4 - 0xc70], 0xa760
jmp 0x10031551
mov eax, dword [ebp - 0x32c]
cmp dword [ebp - 0x32c], eax
jl 0x10031588
mov dword [ebp - 0x398], 1
jmp 0x1003158f
and dword [ebp - 0x398], 0
cmp dword [ebp - 0x784], 0
jne 0x100315aa
cmp dword [ebp - 0x32c], 0
jne 0x100315aa
and dword [ebp - 0x368], 0
jmp 0x100315b4
mov dword [ebp - 0x368], 1
mov eax, dword [ebp - 0x380]
cmp dword [ebp - 0x368], eax
je 0x100315ce
mov dword [ebp - 0x370], 1
jmp 0x100315d5
and dword [ebp - 0x370], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0xc70]
dec eax
mov dword [ebp - 0x378], eax
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x378]
mov dword [ebp + eax - 0xc70], ecx
mov eax, dword [ebp - 0x8f4]
mov ecx, dword [ebp - 0x78c]
sub ecx, dword [ebp - 0x370]
imul eax, ecx
cmp dword [ebp - 0x378], eax
jl 0x10031625
mov dword [ebp - 0x388], 1
jmp 0x1003162c
and dword [ebp - 0x388], 0
mov eax, dword [ebp - 0x380]
cmp dword [ebp - 0x388], eax
jle 0x10031646
mov dword [ebp - 0x390], 1
jmp 0x1003164d
and dword [ebp - 0x390], 0
mov eax, dword [ebp - 0x390]
neg eax
cmp dword [ebp - 0x398], eax
jge 0x10031669
mov dword [ebp - 0x3a0], 1
jmp 0x10031670
and dword [ebp - 0x3a0], 0
mov eax, dword [ebp - 0x3a0]
mov dword [ebp - 0x8fc], eax
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xbe4]
call fcn.10020c74
mov byte [ebp - 0x120], 8
mov byte [ebp - 0x11f], 0x48
mov byte [ebp - 0x11e], 3
mov byte [ebp - 0x11d], 0x34
mov byte [ebp - 0x11c], 4
mov byte [ebp - 0x11b], 0x22
mov byte [ebp - 0x11a], 0
mov byte [ebp - 0x119], 0x35
mov byte [ebp - 0x118], 0xd
mov byte [ebp - 0x117], 0x34
mov byte [ebp - 0x116], 0xa
mov byte [ebp - 0x115], 1
mov byte [ebp - 0x114], 7
mov byte [ebp - 0x113], 0x33
mov byte [ebp - 0x112], 1
mov byte [ebp - 0x111], 0x24
mov byte [ebp - 0x110], 0xc
mov byte [ebp - 0x10f], 0x16
mov byte [ebp - 0x10e], 3
mov byte [ebp - 0x10d], 0x4a
mov byte [ebp - 0x10c], 0x94
mov byte [ebp - 0x10b], 0x92
mov byte [ebp - 0x10a], 2
mov byte [ebp - 0x109], 7
mov byte [ebp - 0x108], 9
mov byte [ebp - 0x107], 0x10
mov byte [ebp - 0x106], 0xb
mov byte [ebp - 0x105], 1
mov byte [ebp - 0x104], 6
mov byte [ebp - 0x103], 6
mov byte [ebp - 0x102], 5
mov byte [ebp - 0x101], 0xc
mov dword [ebp - 0x3a8], 0x1e19
mov dword [ebp - 0x794], 0x10009e3c
cmp dword [ebp - 0x3a8], 0x20f0
jle 0x1003186c
and dword [ebp - 0x200], 0
jmp 0x100317a5
mov eax, dword [ebp - 0x200]
inc eax
mov dword [ebp - 0x200], eax
cmp dword [ebp - 0x200], 0x1759
jge 0x1003186c
and dword [ebp - 0x2c0], 0
jmp 0x100317cb
mov eax, dword [ebp - 0x2c0]
inc eax
mov dword [ebp - 0x2c0], eax
cmp dword [ebp - 0x2c0], 0x5c9a
jge 0x10031867
and dword [ebp - 0x208], 0
jmp 0x100317f1
mov eax, dword [ebp - 0x208]
inc eax
mov dword [ebp - 0x208], eax
cmp dword [ebp - 0x208], 0x42ec
jge 0x10031862
and dword [ebp - 0x2a0], 0
jmp 0x10031813
mov eax, dword [ebp - 0x2a0]
inc eax
mov dword [ebp - 0x2a0], eax
cmp dword [ebp - 0x2a0], 0x6a61
jge 0x10031860
mov eax, dword [ebp - 0x200]
mov ecx, dword [ebp - 0x2c0]
shl eax, cl
mov ecx, dword [ebp - 0x208]
add ecx, dword [ebp - 0x2a0]
xor eax, ecx
cdq
mov dword [ebp - 0x814], eax
mov dword [ebp - 0x810], edx
push dword [ebp - 0x810]
push dword [ebp - 0x814]
mov ecx, 0x10085b58
call fcn.100208d8
jmp 0x10031806
jmp 0x100317e4
jmp 0x100317be
jmp 0x10031798
xor eax, eax
inc eax
shl eax, 0
movzx eax, byte [ebp + eax - 0x120]
or eax, 0x2c
xor ecx, ecx
inc ecx
shl ecx, 0
movzx ecx, byte [ebp + ecx - 0x120]
and ecx, 0x2c
sub eax, ecx
xor ecx, ecx
inc ecx
imul ecx, ecx, 0
movzx ecx, byte [ebp + ecx - 0x120]
mov byte [ebp + ecx - 0x974], al
cmp dword [ebp - 0x3a8], 0x1c05
jge 0x100318c1
mov edx, dword [ebp - 0x794]
mov ecx, 0x10085b58
call fcn.10023628
mov dword [ebp - 0x6c], 0x68ec0ae9
mov dword [ebp - 0xf0], 0
mov dword [ebp - 0x6c], 0
jmp 0x100318e2
mov eax, dword [ebp - 0x6c]
inc eax
mov dword [ebp - 0x6c], eax
cmp dword [ebp - 0x6c], 0x17
jne 0x100319d9
mov dword [ebp - 0x210], 0
mov dword [ebp - 0x3c8], 0xcd4431fa
cmp dword [ebp - 0x6c], 0
je 0x100319ac
mov eax, dword [ebp - 0x6c]
mov dword [ebp - 0xc58], eax
mov eax, dword [ebp - 0x6c]
add eax, dword [ebp - 0x6c]
cmp eax, dword [ebp - 0x6c]
je 0x1003192a
mov dword [ebp - 0x3b0], 1
jmp 0x10031931
and dword [ebp - 0x3b0], 0
mov eax, dword [ebp - 0x210]
cmp eax, dword [ebp - 0x3b0]
jl 0x1003194b
mov dword [ebp - 0x3b8], 1
jmp 0x10031952
and dword [ebp - 0x3b8], 0
mov eax, dword [ebp - 0x3b8]
mov dword [ebp - 0xf0], eax
mov eax, dword [ebp - 0x210]
cmp dword [ebp - 0xf0], eax
jl 0x10031978
mov dword [ebp - 0x3c0], 1
jmp 0x1003197f
and dword [ebp - 0x3c0], 0
mov eax, dword [ebp - 0x3c0]
mov dword [ebp - 0x3c8], eax
mov eax, dword [ebp - 0x3c8]
mov dword [ebp - 0xc60], eax
mov eax, dword [ebp - 0xf0]
cmp dword [ebp - 0x210], eax
jl 0x100319ac
cmp dword [ebp - 0xf0], 0
cmp dword [ebp - 0xf0], 0xffffffff
jl 0x100319c1
mov dword [ebp - 0x3d0], 1
jmp 0x100319c8
and dword [ebp - 0x3d0], 0
mov eax, dword [ebp - 0x3d0]
mov dword [ebp - 0x210], eax
jmp 0x100318db
mov byte [ebp - 0xd5], 0
movzx eax, byte [ebp - 0xd5]
test eax, eax
je 0x100319f5
push 0
push 0
call dword [sym.imp.KERNEL32.dll_SetCommTimeouts]
mov dword [ebp - 0x40], 2
and dword [ebp - 0x140], 0
jmp 0x10031a0d
cmp dword [ebp - 0x40], 0x20
jae 0x10032357
xor eax, eax
inc eax
imul eax, eax, 0
movzx eax, byte [ebp + eax - 0x120]
lea eax, [eax + eax + 2]
cmp dword [ebp - 0x40], eax
jne 0x10031c69
mov eax, dword [ebp - 0x40]
movzx eax, byte [ebp + eax - 0x120]
inc eax
mov dword [ebp - 0x140], eax
mov eax, dword [ebp - 0x40]
movzx eax, byte [ebp + eax - 0x120]
mov ecx, dword [ebp - 0x40]
lea eax, [ecx + eax - 1]
mov dword [ebp - 0x40], eax
mov dword [ebp - 0xe0], 9
push 3
lea ecx, [ebp - 0xa00]
call fcn.10020bf2
mov dword [ebp - 4], 0xf
mov dword [ebp - 0x3c], 0
jmp 0x10031a87
mov eax, dword [ebp - 0x3c]
inc eax
mov dword [ebp - 0x3c], eax
cmp dword [ebp - 0x3c], 3
jge 0x10031a9d
mov eax, dword [ebp - 0x3c]
mov dword [ebp + eax*4 - 0x944], 0xfffffffe
jmp 0x10031a80
mov dword [ebp - 0x3c], 0
jmp 0x10031aad
mov eax, dword [ebp - 0x3c]
inc eax
mov dword [ebp - 0x3c], eax
cmp dword [ebp - 0x3c], 3
jge 0x10031ac9
push dword [ebp - 0x3c]
lea ecx, [ebp - 0xa00]
call fcn.10020c90
mov dword [eax], 7
jmp 0x10031aa6
mov dword [ebp - 0x3c], 0
jmp 0x10031ad9
mov eax, dword [ebp - 0x3c]
inc eax
mov dword [ebp - 0x3c], eax
cmp dword [ebp - 0x3c], 3
jge 0x10031aef
mov eax, dword [ebp - 0x3c]
mov dword [ebp + eax*4 - 0xca0], 0xfffffff7
jmp 0x10031ad2
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0x944], 1
jge 0x10031b0a
mov dword [ebp - 0x3d8], 1
jmp 0x10031b11
and dword [ebp - 0x3d8], 0
mov eax, dword [ebp - 0x3d8]
mov dword [ebp - 0xe0], eax
mov eax, dword [ebp - 0xe0]
cmp dword [ebp - 0xe0], eax
jge 0x10031b37
mov dword [ebp - 0x3e0], 1
jmp 0x10031b3e
and dword [ebp - 0x3e0], 0
cmp dword [ebp - 0x3e0], 0x78213af7
jl 0x10031b5f
cmp dword [ebp - 0xe0], 0
je 0x10031b5f
mov dword [ebp - 0x3e8], 1
jmp 0x10031b66
and dword [ebp - 0x3e8], 0
mov eax, dword [ebp - 0x3e8]
add eax, 0x694d
imul eax, eax, 0
imul eax, eax, 0xa86b
neg eax
push 4
pop ecx
imul ecx, ecx, 0
cmp eax, dword [ebp + ecx - 0x944]
jge 0x10031b97
mov dword [ebp - 0x3f0], 1
jmp 0x10031b9e
and dword [ebp - 0x3f0], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x944]
cmp dword [ebp - 0x3f0], eax
jl 0x10031bbf
mov dword [ebp - 0x3f8], 1
jmp 0x10031bc6
and dword [ebp - 0x3f8], 0
mov eax, dword [ebp - 0x3f8]
mov dword [ebp - 0xe0], eax
cmp dword [ebp - 0xe0], 9
jb 0x10031be7
mov dword [ebp - 0x220], 0xda115252
mov dword [ebp - 0x948], 0xd0a7084b
mov dword [ebp - 0x2c8], 0
mov dword [ebp - 0x2f4], 0x89b58331
mov dword [ebp - 0x7ac], 0
mov dword [ebp - 0xc54], 0x7770b168
mov dword [ebp - 0x7a0], 0x9ba5f27a
mov dword [ebp - 0x8d8], 0x85755261
mov dword [ebp - 0xc10], 0xf18c9a01
mov dword [ebp - 0x8d0], 0xfffffffc
mov dword [ebp - 0x7c4], 1
mov dword [ebp - 0x7b8], 0xb37d0226
mov dword [ebp - 0x314], 9
push 2
lea ecx, [ebp - 0xa30]
call fcn.10020bf2
mov dword [ebp - 4], 0x10
mov dword [ebp - 0x2e0], 0
jmp 0x10031d18
mov eax, dword [ebp - 0x2e0]
inc eax
mov dword [ebp - 0x2e0], eax
cmp dword [ebp - 0x2e0], 2
jge 0x10031d3a
push dword [ebp - 0x2e0]
lea ecx, [ebp - 0xa30]
call fcn.10020c90
mov dword [eax], 0xb0ce7aeb
jmp 0x10031d0b
mov eax, dword [ebp - 0x220]
mov dword [ebp - 0x220], eax
mov dword [ebp - 0x438], 0x372d
mov dword [ebp - 0x920], 0x10009e6c
cmp dword [ebp - 0x438], 0x3769
jle 0x10031e0a
and dword [ebp - 0x218], 0
jmp 0x10031d80
mov eax, dword [ebp - 0x218]
inc eax
mov dword [ebp - 0x218], eax
cmp dword [ebp - 0x218], 0x61c
jge 0x10031e0a
and dword [ebp - 0x2a8], 0
jmp 0x10031da2
mov eax, dword [ebp - 0x2a8]
inc eax
mov dword [ebp - 0x2a8], eax
cmp dword [ebp - 0x2a8], 0x65ec
jge 0x10031e05
mov eax, dword [ebp - 0x218]
add eax, dword [ebp - 0x2a8]
cdq
mov dword [ebp - 0x820], eax
mov dword [ebp - 0x81c], edx
push dword [ebp - 0x81c]
push dword [ebp - 0x820]
lea ecx, [ebp - 0xdd0]
call fcn.1001098e
pop ecx
pop ecx
mov dword [ebp - 0x918], eax
mov ecx, dword [ebp - 0x918]
call fcn.100208b8
push eax
call fcn.1006abb3
pop ecx
lea ecx, [ebp - 0xdd0]
call fcn.100208ae
jmp 0x10031d95
jmp 0x10031d73
xor eax, eax
inc eax
je 0x10031e95
mov eax, dword [ebp - 0x314]
dec eax
mov dword [ebp - 0x314], eax
mov eax, dword [ebp - 0x314]
imul eax, dword [ebp - 0x7a0]
mov dword [ebp - 0x8d0], eax
mov eax, dword [ebp - 0x7ac]
mov dword [ebp - 0xa78], eax
imul eax, dword [ebp - 0x2f4], 0xffffffff
test eax, eax
jne 0x10031e5c
cmp dword [ebp - 0x2c8], 0
jne 0x10031e5c
and dword [ebp - 0x418], 0
jmp 0x10031e66
mov dword [ebp - 0x418], 1
mov eax, dword [ebp - 0x948]
mov ecx, dword [ebp - 0x2c8]
add ecx, dword [ebp - 0x418]
imul ecx, dword [ebp - 0x7b8]
sub ecx, dword [ebp - 0x2c8]
add eax, ecx
jne 0x10031e95
mov dword [ebp - 0x420], 1
jmp 0x10031e9c
and dword [ebp - 0x420], 0
mov eax, dword [ebp - 0x420]
mov dword [ebp - 0x2f4], eax
mov eax, dword [ebp - 0x8d8]
cmp dword [ebp - 0x2f4], eax
jle 0x10031ec2
mov dword [ebp - 0x428], 1
jmp 0x10031ec9
and dword [ebp - 0x428], 0
mov dword [ebp - 0x220], 0x1a9565e0
mov eax, dword [ebp - 0x220]
cmp eax, dword [ebp - 0x428]
jne 0x10031eed
mov dword [ebp - 0x430], 1
jmp 0x10031ef4
and dword [ebp - 0x430], 0
mov esi, dword [ebp - 0x430]
add esi, 0xffff
imul esi, dword [ebp - 0x2c8]
push 1
lea ecx, [ebp - 0xa30]
call fcn.10020c90
add esi, dword [eax]
mov dword [ebp - 0x7c4], esi
cmp dword [ebp - 0x438], 0x36f2
jge 0x10031f34
push dword [ebp - 0x920]
call fcn.1006abb3
pop ecx
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xa30]
call fcn.10020c74
mov eax, dword [ebp - 0x40]
movzx eax, byte [ebp + eax - 0x11f]
mov ecx, dword [ebp - 0x40]
sub ecx, dword [ebp - 0x140]
movzx ecx, byte [ebp + ecx - 0x122]
movsx ecx, byte [ebp + ecx - 0x974]
or eax, ecx
mov ecx, dword [ebp - 0x40]
movzx ecx, byte [ebp + ecx - 0x11f]
mov edx, dword [ebp - 0x40]
sub edx, dword [ebp - 0x140]
movzx edx, byte [ebp + edx - 0x122]
movsx edx, byte [ebp + edx - 0x974]
and ecx, edx
sub eax, ecx
mov ecx, dword [ebp - 0x40]
movzx ecx, byte [ebp + ecx - 0x120]
mov byte [ebp + ecx - 0x974], al
push 2
lea ecx, [ebp - 0x708]
call fcn.10020bf2
mov dword [ebp - 4], 0x11
mov dword [ebp - 0x228], 0xeb0647dc
mov dword [ebp - 0x450], 0x80444555
mov dword [ebp - 0x27c], 0xe64fd9e2
mov dword [ebp - 0x230], 0xffffffff
mov dword [ebp - 0xacc], 0x130dfdda
mov dword [ebp - 0x9b8], 7
mov dword [ebp - 0x9b4], 7
mov dword [ebp - 0x9b0], 7
mov dword [ebp - 0x9ac], 7
mov dword [ebp - 0x7e8], 0
mov dword [ebp - 0x488], 0xf32f520a
mov dword [ebp - 0x74], 0
jmp 0x10032035
mov eax, dword [ebp - 0x74]
inc eax
mov dword [ebp - 0x74], eax
cmp dword [ebp - 0x74], 2
jge 0x10032051
push dword [ebp - 0x74]
lea ecx, [ebp - 0x708]
call fcn.10020c90
mov dword [eax], 0x1852
jmp 0x1003202e
mov dword [ebp - 0x74], 0
jmp 0x10032061
cmp dword [ebp - 0x74], 2
jge 0x10032077
mov eax, dword [ebp - 0x74]
mov dword [ebp + eax*4 - 0xcf0], 0x4ab19f88
jmp 0x1003205a
push 1
lea ecx, [ebp - 0x708]
call fcn.10020c90
mov eax, dword [eax]
mov dword [ebp - 0x228], eax
mov esi, dword [ebp - 0x27c]
push 0
lea ecx, [ebp - 0x708]
call fcn.10020c90
cmp esi, dword [eax]
jge 0x100320b5
xor eax, eax
inc eax
imul eax, eax, 0xe
mov byte [ebp + eax - 0x974], 0
mov dword [ebp - 0xb68], 0xbe1d925b
mov dword [ebp - 0xaa0], 0x37d45db3
mov dword [ebp - 0xc18], 0x2887cf2e
mov dword [ebp - 0xaa8], 0xffffffff
mov dword [ebp - 0xb78], 0
mov dword [ebp - 0xab0], 0xffffffff
push 2
lea ecx, [ebp - 0xbf4]
call fcn.10020bf2
mov dword [ebp - 4], 0x12
mov dword [ebp - 0x490], 0xc345fe46
mov dword [ebp - 0x498], 0x55145ccb
mov dword [ebp - 0x60], 0
jmp 0x100323d9
mov eax, dword [ebp - 0x60]
inc eax
mov dword [ebp - 0x60], eax
cmp dword [ebp - 0x60], 1
jge 0x100323ef
mov eax, dword [ebp - 0x60]
mov dword [ebp + eax*4 - 0xc40], 0x48261f9c
jmp 0x100323d2
mov dword [ebp - 0x60], 0
jmp 0x100323ff
mov eax, dword [ebp - 0x60]
inc eax
mov dword [ebp - 0x60], eax
cmp dword [ebp - 0x60], 2
jge 0x1003241b
push dword [ebp - 0x60]
lea ecx, [ebp - 0xbf4]
call fcn.10020c90
mov dword [eax], 0x872d9ee1
jmp 0x100323f8
mov eax, dword [ebp - 0x490]
dec eax
mov dword [ebp - 0x490], eax
mov eax, dword [ebp - 0x498]
inc eax
mov dword [ebp - 0x498], eax
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xbf4]
call fcn.10020c74
lea eax, [ebp - 0x974]
push eax
lea ecx, [ebp - 0xcd0]
call fcn.100425d4
mov dword [ebp - 4], 0x13
and dword [ebp - 0x144], 0
jmp 0x10032473
mov eax, dword [ebp - 0x144]
inc eax
mov dword [ebp - 0x144], eax
cmp dword [ebp - 0x144], 0xf
jae 0x1003248c
mov eax, dword [ebp - 0x144]
mov byte [ebp + eax - 0x974], 0
jmp 0x10032466
mov dword [ebp - 0x24], 0x2c7c
mov dword [ebp - 0xcc], 4
mov dword [ebp - 0x2f8], 4
mov dword [ebp - 0x14c], 0
jmp 0x100324c0
mov eax, dword [ebp - 0x14c]
inc eax
mov dword [ebp - 0x14c], eax
cmp dword [ebp - 0x14c], 3
jge 0x100324dc
mov eax, dword [ebp - 0x14c]
mov dword [ebp + eax*4 - 0xc94], 0xffffffff
jmp 0x100324b3
cmp dword [ebp - 0x24], 0
jne 0x100324f4
mov eax, 0x6b950ba1
test eax, eax
jne 0x100324f4
and dword [ebp - 0x4d0], 0
jmp 0x100324fe
mov dword [ebp - 0x4d0], 1
cmp dword [ebp - 0x24], 0
jne 0x10032512
xor eax, eax
inc eax
jne 0x10032512
and dword [ebp - 0x928], 0
jmp 0x1003251c
mov dword [ebp - 0x928], 1
mov eax, dword [ebp - 0x24]
mov dword [ebp - 0xabc], eax
mov eax, dword [ebp - 0x24]
mov dword [ebp - 0xcc], eax
mov eax, dword [ebp - 0x24]
mov dword [ebp - 0x4a0], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x4a0]
mov dword [ebp + eax - 0xc94], ecx
mov eax, dword [ebp - 0x4a0]
mov dword [ebp - 0x2f8], eax
mov eax, dword [ebp - 0x2f8]
cmp dword [ebp - 0xcc], eax
jge 0x10032570
mov dword [ebp - 0x4a8], 1
jmp 0x10032577
and dword [ebp - 0x4a8], 0
mov eax, dword [ebp - 0x24]
cmp dword [ebp - 0x4a8], eax
je 0x1003258e
mov dword [ebp - 0x4b0], 1
jmp 0x10032595
and dword [ebp - 0x4b0], 0
mov eax, dword [ebp - 0x24]
cmp dword [ebp - 0x4b0], eax
je 0x100325ac
cmp dword [ebp - 0x4f8], 0x5746
jge 0x10032974
mov edx, dword [ebp - 0x818]
mov ecx, 0x10085b58
call fcn.10023628
mov dword [ebp - 0x98], 0xfffffffe
mov dword [ebp - 0x500], 0x789a
mov dword [ebp - 0x824], 0x10009ee8
cmp dword [ebp - 0x500], 0x7ad4
jle 0x10032a4e
and dword [ebp - 0x18c], 0
jmp 0x100329b8
mov eax, dword [ebp - 0x18c]
inc eax
mov dword [ebp - 0x18c], eax
cmp dword [ebp - 0x18c], 0xf40
jge 0x10032a42
and dword [ebp - 0x194], 0
jmp 0x100329da
mov eax, dword [ebp - 0x194]
inc eax
mov dword [ebp - 0x194], eax
cmp dword [ebp - 0x194], 0x7074
jge 0x10032a3d
mov eax, dword [ebp - 0x18c]
xor eax, dword [ebp - 0x194]
cdq
mov dword [ebp - 0x844], eax
mov dword [ebp - 0x840], edx
push dword [ebp - 0x840]
push dword [ebp - 0x844]
lea ecx, [ebp - 0xda0]
call fcn.1001098e
pop ecx
pop ecx
mov dword [ebp - 0x8f8], eax
mov ecx, dword [ebp - 0x8f8]
call fcn.100208b8
push eax
call fcn.1006abb3
pop ecx
lea ecx, [ebp - 0xda0]
call fcn.100208ae
jmp 0x100329cd
jmp 0x100329ab
push 0
push 0
push 0
call dword [sym.imp.USER32.dll_AdjustWindowRect]
mov dword [ebp - 0x510], 0x58528353
cmp dword [ebp - 0x500], 0x7744
jge 0x10032a70
push dword [ebp - 0x824]
call fcn.1006abb3
pop ecx
mov dword [ebp - 0x9e0], 0xf3f7e813
mov dword [ebp - 0x9dc], 0xf3f7e813
mov dword [ebp - 0x9d8], 0xf3f7e813
mov dword [ebp - 0x9d4], 0xf3f7e813
lea ecx, [ebp - 0x2ed]
call fcn.10020c9f
push eax
lea eax, [ebp - 0x9d0]
push eax
lea eax, [ebp - 0x9e0]
push eax
lea ecx, [ebp - 0xcb0]
call fcn.10020ca2
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0xc04]
call fcn.10020c4e
mov dword [ebp - 4], 0x14
mov byte [ebp - 0xb5], 0
movzx eax, byte [ebp - 0xb5]
test eax, eax
je 0x10032af0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_GetCPInfo]
mov eax, dword [ebp - 0x98]
mov dword [ebp - 0xac8], eax
mov eax, dword [ebp - 0x98]
mov dword [ebp - 0xc20], eax
mov eax, dword [ebp - 0x98]
mov dword [ebp - 0xad0], eax
cmp dword [ebp - 0x98], 0
jne 0x10032b3b
mov eax, dword [ebp - 0x98]
mov dword [ebp - 0xb98], eax
cmp dword [ebp - 0x98], 0
jne 0x10032b3b
and dword [ebp - 0x508], 0
jmp 0x10032b45
mov dword [ebp - 0x508], 1
mov eax, dword [ebp - 0x508]
mov dword [ebp - 0x98], eax
mov eax, dword [ebp - 0x98]
add eax, 0x29f6d0a2
mov dword [ebp - 0x510], eax
mov esi, dword [ebp - 0x510]
sub esi, 0x1d52aa0a
neg esi
push 2
lea ecx, [ebp - 0xc04]
call fcn.10020c90
mov dword [eax], esi
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xc04]
call fcn.10020c74
cmp dword [0x1008b008], 0
je 0x10033c82
mov eax, dword [ebp + 8]
mov dword [ebp - 0x908], eax
mov dword [ebp - 0x4c], 0xdada439b
mov dword [ebp - 0xe4], 0x4e1265ab
push 1
lea ecx, [ebp - 0x6fc]
call fcn.10020bf2
mov dword [ebp - 4], 0x15
mov dword [ebp - 0x570], 0x93846f26
mov dword [ebp - 0x19c], 0
jmp 0x10032bec
mov eax, dword [ebp - 0x19c]
inc eax
mov dword [ebp - 0x19c], eax
cmp dword [ebp - 0x19c], 1
jge 0x10032c0e
push dword [ebp - 0x19c]
lea ecx, [ebp - 0x6fc]
call fcn.10020c90
mov dword [eax], 0x24cd
jmp 0x10032bdf
cmp dword [ebp - 0x4c], 0xfffffffc
jbe 0x10032c20
mov dword [ebp - 0x518], 1
jmp 0x10032c27
and dword [ebp - 0x518], 0
mov eax, dword [ebp - 0x518]
mov dword [ebp - 0xe4], eax
mov dword [ebp - 0x4c], 0
jmp 0x10032c43
mov eax, dword [ebp - 0x4c]
dec eax
mov dword [ebp - 0x4c], eax
cmp dword [ebp - 0x4c], 0
jl 0x1003308f
mov dword [ebp - 0x520], 0x1ef8
mov dword [ebp - 0x930], 0x10009f54
cmp dword [ebp - 0x520], 0x1ff1
jle 0x10032d4e
and dword [ebp - 0x1a4], 0
jmp 0x10032c87
mov eax, dword [ebp - 0x1a4]
inc eax
mov dword [ebp - 0x1a4], eax
cmp dword [ebp - 0x1a4], 0x7cab
jge 0x10032d4e
and dword [ebp - 0x1ac], 0
jmp 0x10032cad
mov eax, dword [ebp - 0x1ac]
inc eax
mov dword [ebp - 0x1ac], eax
cmp dword [ebp - 0x1ac], 0x4ec5
jge 0x10032d49
and dword [ebp - 0x1b4], 0
jmp 0x10032cd3
mov eax, dword [ebp - 0x1b4]
inc eax
mov dword [ebp - 0x1b4], eax
cmp dword [ebp - 0x1b4], 0x51e9
jge 0x10032d44
and dword [ebp - 0x1bc], 0
jmp 0x10032cf5
mov eax, dword [ebp - 0x1bc]
inc eax
mov dword [ebp - 0x1bc], eax
cmp dword [ebp - 0x1bc], 0x2957
jge 0x10032d42
mov eax, dword [ebp - 0x1a4]
sub eax, dword [ebp - 0x1ac]
mov edx, dword [ebp - 0x1b4]
mov ecx, dword [ebp - 0x1bc]
shl edx, cl
and eax, edx
cdq
mov dword [ebp - 0x850], eax
mov dword [ebp - 0x84c], edx
push dword [ebp - 0x84c]
push dword [ebp - 0x850]
mov ecx, 0x10085b58
call fcn.100208d8
jmp 0x10032ce8
jmp 0x10032cc6
jmp 0x10032ca0
jmp 0x10032c7a
mov dword [ebp - 0xfc], 0xdbda7fe6
cmp dword [ebp - 0x520], 0x1e97
jge 0x10032d74
mov edx, dword [ebp - 0x930]
mov ecx, 0x10085b58
call fcn.10023628
mov dword [ebp - 0x1d4], 0
mov dword [ebp - 0x548], 1
mov dword [ebp - 0x960], 0xb839bf5b
push dword [ebp - 0x4c]
lea ecx, [ebp - 0x6fc]
call fcn.10020c90
cmp dword [eax], 0
je 0x10032dc4
push dword [ebp - 0x4c]
lea ecx, [ebp - 0x6fc]
call fcn.10020c90
cmp dword [eax], 0
je 0x10032dc4
mov dword [ebp - 0x528], 1
jmp 0x10032dcb
and dword [ebp - 0x528], 0
mov eax, dword [ebp - 0x528]
mov dword [ebp - 0xfc], eax
cmp dword [ebp - 0xfc], 0
je 0x10032edf
mov dword [ebp - 0x530], 0x2021
mov dword [ebp - 0x900], 0x10009f90
cmp dword [ebp - 0x530], 0x2305
jle 0x10032ea8
and dword [ebp - 0x1c4], 0
jmp 0x10032e1e
mov eax, dword [ebp - 0x1c4]
inc eax
mov dword [ebp - 0x1c4], eax
cmp dword [ebp - 0x1c4], 0x4976
jge 0x10032ea8
and dword [ebp - 0x1cc], 0
jmp 0x10032e40
mov eax, dword [ebp - 0x1cc]
inc eax
mov dword [ebp - 0x1cc], eax
cmp dword [ebp - 0x1cc], 0x689f
jge 0x10032ea3
mov eax, dword [ebp - 0x1c4]
or eax, dword [ebp - 0x1cc]
cdq
mov dword [ebp - 0x85c], eax
mov dword [ebp - 0x858], edx
push dword [ebp - 0x858]
push dword [ebp - 0x85c]
lea ecx, [ebp - 0xd28]
call fcn.1001098e
pop ecx
pop ecx
mov dword [ebp - 0x830], eax
mov ecx, dword [ebp - 0x830]
call fcn.100208b8
push eax
call fcn.1006abb3
pop ecx
lea ecx, [ebp - 0xd28]
call fcn.100208ae
jmp 0x10032e33
jmp 0x10032e11
mov byte [ebp - 0xd0], 0
cmp dword [ebp - 0x530], 0x1fde
jge 0x10032ec7
push dword [ebp - 0x900]
call fcn.1006abb3
pop ecx
movzx eax, byte [ebp - 0xd0]
test eax, eax
je 0x10032eda
push 0
call dword [sym.imp.KERNEL32.dll_InitializeSListHead]
jmp 0x1003308a
mov dword [ebp - 0x1dc], 0
mov dword [ebp - 0xe4], 4
mov eax, dword [ebp - 0xe4]
mov dword [ebp - 0xfc], eax
push dword [ebp - 0x4c]
lea ecx, [ebp - 0x6fc]
call fcn.10020c90
mov dword [eax], 0x94ff
mov eax, 0x94ff
test eax, eax
jne 0x10032f58
push dword [ebp - 0x4c]
lea ecx, [ebp - 0x6fc]
call fcn.10020c90
cmp dword [eax], 0
je 0x10032f40
or eax, 0xffffffff
je 0x10032f40
mov dword [ebp - 0x83c], 1
jmp 0x10032f47
and dword [ebp - 0x83c], 0
mov dword [ebp - 0xfc], 0x15cc
cmp dword [ebp - 0xfc], 0
mov eax, dword [ebp - 0x1dc]
cmp dword [ebp - 0x4c], eax
jne 0x10032f6f
mov dword [ebp - 0x538], 1
jmp 0x10032f76
and dword [ebp - 0x538], 0
mov eax, dword [ebp - 0xe4]
sub eax, dword [ebp - 0x538]
sub eax, 0x3b8c
je 0x10032f9e
cmp dword [ebp - 0x1d4], 0
je 0x10032f9e
mov dword [ebp - 0x540], 1
jmp 0x10032fa5
and dword [ebp - 0x540], 0
mov eax, dword [ebp - 0x1d4]
add eax, dword [ebp - 0x540]
mov dword [ebp - 0xe4], eax
mov eax, dword [ebp - 0xe4]
mov dword [ebp - 0xad8], eax
mov eax, dword [ebp - 0x1d4]
mov dword [ebp - 0xc44], eax
mov eax, dword [ebp - 0x1dc]
mov dword [ebp - 0xae0], eax
mov eax, dword [ebp - 0x1d4]
mov dword [ebp - 0x548], eax
cmp dword [ebp - 0x548], 0
jne 0x10033002
mov eax, 0xaffa898c
test eax, eax
jne 0x10033002
and dword [ebp - 0x550], 0
jmp 0x1003300c
mov dword [ebp - 0x550], 1
mov eax, dword [ebp - 0x4c]
imul eax, dword [ebp - 0x550]
test eax, eax
jne 0x10033026
mov dword [ebp - 0x558], 1
jmp 0x1003302d
and dword [ebp - 0x558], 0
mov eax, dword [ebp - 0x4c]
add eax, dword [ebp - 0x558]
cmp dword [ebp - 0x1dc], eax
je 0x1003304a
mov dword [ebp - 0x560], 1
jmp 0x10033051
and dword [ebp - 0x560], 0
mov eax, dword [ebp - 0x1dc]
cmp dword [ebp - 0x560], eax
je 0x1003306b
mov dword [ebp - 0x568], 1
jmp 0x10033072
and dword [ebp - 0x568], 0
mov eax, dword [ebp - 0x568]
mov dword [ebp - 0x570], eax
mov eax, dword [ebp - 0x570]
mov dword [ebp - 0x960], eax
jmp 0x10032c3c
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x6fc]
call fcn.10020c74
mov eax, dword [ebp + 0xc]
mov dword [ebp - 0x710], eax
mov dword [ebp - 0xf4], 0x7e2799ac
mov dword [ebp - 0x848], 1
mov dword [ebp - 0xf4], 0xa
jmp 0x100330d4
mov eax, dword [ebp - 0xf4]
dec eax
mov dword [ebp - 0xf4], eax
cmp dword [ebp - 0xf4], 0xfffffffb
jne 0x1003310d
mov byte [ebp - 0xbd], 0
movzx eax, byte [ebp - 0xbd]
test eax, eax
je 0x100330ff
push 0
push 0
push 0
push 0
push 0
call dword [sym.imp.GDI32.dll_EnumFontFamiliesExA]
mov eax, dword [ebp - 0xf4]
mov dword [ebp - 0x848], eax
jmp 0x100330c7
mov dword [ebp - 0x578], 0x60ff
mov dword [ebp - 0x854], 0x10009fc0
cmp dword [ebp - 0x578], 0x6110
jle 0x100331b4
push 0
push 0
call dword [sym.imp.KERNEL32.dll_WaitNamedPipeA]
and dword [ebp - 0x1e4], 0
jmp 0x10033151
mov eax, dword [ebp - 0x1e4]
inc eax
mov dword [ebp - 0x1e4], eax
cmp dword [ebp - 0x1e4], 0x609d
jge 0x100331b4
and dword [ebp - 0x1ec], 0
jmp 0x10033173
mov eax, dword [ebp - 0x1ec]
inc eax
mov dword [ebp - 0x1ec], eax
cmp dword [ebp - 0x1ec], 0x5d97
jge 0x100331b2
mov eax, dword [ebp - 0x1e4]
mov ecx, dword [ebp - 0x1ec]
sar eax, cl
cdq
mov dword [ebp - 0x868], eax
mov dword [ebp - 0x864], edx
push dword [ebp - 0x864]
push dword [ebp - 0x868]
mov ecx, 0x10085b58
call fcn.100208d8
jmp 0x10033166
jmp 0x10033144
mov eax, dword [ebp - 0x908]
mov dword [ebp - 0x728], eax
cmp dword [ebp - 0x578], 0x5dec
jge 0x100331dc
mov edx, dword [ebp - 0x854]
mov ecx, 0x10085b58
call fcn.10023628
mov dword [ebp - 0x5b0], 0x14
mov dword [ebp - 0x86c], 0x1000a020
cmp dword [ebp - 0x5b0], 0x55
jle 0x1003329d
and dword [ebp - 0x1f4], 0
jmp 0x10033213
mov eax, dword [ebp - 0x1f4]
inc eax
mov dword [ebp - 0x1f4], eax
cmp dword [ebp - 0x1f4], 0x5efe
jge 0x1003329d
and dword [ebp - 0x1fc], 0
jmp 0x10033235
mov eax, dword [ebp - 0x1fc]
inc eax
mov dword [ebp - 0x1fc], eax
cmp dword [ebp - 0x1fc], 0x2648
jge 0x10033298
mov eax, dword [ebp - 0x1f4]
xor eax, dword [ebp - 0x1fc]
cdq
mov dword [ebp - 0x874], eax
mov dword [ebp - 0x870], edx
push dword [ebp - 0x870]
push dword [ebp - 0x874]
lea ecx, [ebp - 0xd58]
call fcn.1001098e
pop ecx
pop ecx
mov dword [ebp - 0x938], eax
mov ecx, dword [ebp - 0x938]
call fcn.100208b8
push eax
call fcn.1006abb3
pop ecx
lea ecx, [ebp - 0xd58]
call fcn.100208ae
jmp 0x10033228
jmp 0x10033206
mov dword [ebp - 0x84], 0x68ec0ae9
mov dword [ebp - 0xf8], 0
mov dword [ebp - 0x84], 0
jmp 0x100332ca
mov eax, dword [ebp - 0x84]
inc eax
mov dword [ebp - 0x84], eax
cmp dword [ebp - 0x84], 0x17
jne 0x100334b5
mov dword [ebp - 0x214], 0
mov dword [ebp - 0x598], 0xcd4431fa
mov dword [ebp - 0x5a8], 0x3b17
mov dword [ebp - 0x910], 0x1000a078
cmp dword [ebp - 0x5a8], 0x3b7d
jle 0x100333b5
and dword [ebp - 0x204], 0
jmp 0x10033325
mov eax, dword [ebp - 0x204]
inc eax
mov dword [ebp - 0x204], eax
cmp dword [ebp - 0x204], 0x70c7
jge 0x100333b5
and dword [ebp - 0x20c], 0
jmp 0x1003334b
mov eax, dword [ebp - 0x20c]
inc eax
mov dword [ebp - 0x20c], eax
cmp dword [ebp - 0x20c], 0x5874
jge 0x100333b0
mov eax, dword [ebp - 0x204]
mov ecx, dword [ebp - 0x20c]
shl eax, cl
cdq
mov dword [ebp - 0x880], eax
mov dword [ebp - 0x87c], edx
push dword [ebp - 0x87c]
push dword [ebp - 0x880]
lea ecx, [ebp - 0xd88]
call fcn.1001098e
pop ecx
pop ecx
mov dword [ebp - 0x860], eax
mov ecx, dword [ebp - 0x860]
call fcn.100208b8
push eax
call fcn.1006abb3
pop ecx
lea ecx, [ebp - 0xd88]
call fcn.100208ae
jmp 0x1003333e
jmp 0x10033318
cmp dword [ebp - 0x84], 0
je 0x10033470
mov eax, dword [ebp - 0x84]
mov dword [ebp - 0xba8], eax
mov eax, dword [ebp - 0x84]
add eax, dword [ebp - 0x84]
cmp eax, dword [ebp - 0x84]
je 0x100333ee
mov dword [ebp - 0x580], 1
jmp 0x100333f5
and dword [ebp - 0x580], 0
mov eax, dword [ebp - 0x214]
cmp eax, dword [ebp - 0x580]
jl 0x1003340f
mov dword [ebp - 0x588], 1
jmp 0x10033416
and dword [ebp - 0x588], 0
mov eax, dword [ebp - 0x588]
mov dword [ebp - 0xf8], eax
mov eax, dword [ebp - 0x214]
cmp dword [ebp - 0xf8], eax
jl 0x1003343c
mov dword [ebp - 0x590], 1
jmp 0x10033443
and dword [ebp - 0x590], 0
mov eax, dword [ebp - 0x590]
mov dword [ebp - 0x598], eax
mov eax, dword [ebp - 0x598]
mov dword [ebp - 0xae8], eax
mov eax, dword [ebp - 0xf8]
cmp dword [ebp - 0x214], eax
jl 0x10033470
cmp dword [ebp - 0xf8], 0
cmp dword [ebp - 0xf8], 0xffffffff
jl 0x10033485
mov dword [ebp - 0x5a0], 1
jmp 0x1003348c
and dword [ebp - 0x5a0], 0
mov eax, dword [ebp - 0x5a0]
mov dword [ebp - 0x214], eax
cmp dword [ebp - 0x5a8], 0x3aa5
jge 0x100334b0
push dword [ebp - 0x910]
call fcn.1006abb3
pop ecx
jmp 0x100332bd
mov byte [ebp - 0xd4], 0
movzx eax, byte [ebp - 0xd4]
test eax, eax
je 0x100334d1
push 0
push 0
call dword [sym.imp.KERNEL32.dll_SetCommTimeouts]
cmp dword [ebp - 0x5b0], 0xfffffea8
jge 0x100334e9
push dword [ebp - 0x86c]
call fcn.1006abb3
pop ecx
mov eax, dword [ebp - 0x710]
mov dword [ebp - 0x720], eax
mov dword [ebp - 0x5f8], 0x5f6d
mov dword [ebp - 0x718], 0x1000a09c
cmp dword [ebp - 0x5f8], 0x61d0
jle 0x10033600
push 0
push 0
call dword [sym.imp.USER32.dll_DrawFocusRect]
and dword [ebp - 0x21c], 0
jmp 0x10033539
mov eax, dword [ebp - 0x21c]
inc eax
mov dword [ebp - 0x21c], eax
cmp dword [ebp - 0x21c], 0x92b
jge 0x10033600
and dword [ebp - 0x224], 0
jmp 0x1003355f
mov eax, dword [ebp - 0x224]
inc eax
mov dword [ebp - 0x224], eax
cmp dword [ebp - 0x224], 0x50ca
jge 0x100335fb
and dword [ebp - 0x22c], 0
jmp 0x10033585
mov eax, dword [ebp - 0x22c]
inc eax
mov dword [ebp - 0x22c], eax
cmp dword [ebp - 0x22c], 0x5334
jge 0x100335f6
and dword [ebp - 0x234], 0
jmp 0x100335a7
mov eax, dword [ebp - 0x234]
inc eax
mov dword [ebp - 0x234], eax
cmp dword [ebp - 0x234], 0x5593
jge 0x100335f4
mov eax, dword [ebp - 0x21c]
mov ecx, dword [ebp - 0x224]
shl eax, cl
mov ecx, dword [ebp - 0x22c]
and ecx, dword [ebp - 0x234]
xor eax, ecx
cdq
mov dword [ebp - 0x88c], eax
mov dword [ebp - 0x888], edx
push dword [ebp - 0x888]
push dword [ebp - 0x88c]
mov ecx, 0x10085b58
call fcn.100208d8
jmp 0x1003359a
jmp 0x10033578
jmp 0x10033552
jmp 0x1003352c
mov dword [ebp - 0xec], 9
push 3
lea ecx, [ebp - 0xa0c]
call fcn.10020bf2
mov dword [ebp - 4], 0x16
mov dword [ebp - 0x30], 0
jmp 0x1003362e
mov eax, dword [ebp - 0x30]
inc eax
mov dword [ebp - 0x30], eax
cmp dword [ebp - 0x30], 3
jge 0x10033644
mov eax, dword [ebp - 0x30]
mov dword [ebp + eax*4 - 0x954], 0xfffffffe
jmp 0x10033627
mov dword [ebp - 0x30], 0
jmp 0x10033654
mov eax, dword [ebp - 0x30]
inc eax
mov dword [ebp - 0x30], eax
cmp dword [ebp - 0x30], 3
jge 0x10033670
push dword [ebp - 0x30]
lea ecx, [ebp - 0xa0c]
call fcn.10020c90
mov dword [eax], 7
jmp 0x1003364d
mov dword [ebp - 0x30], 0
jmp 0x10033680
mov eax, dword [ebp - 0x30]
inc eax
mov dword [ebp - 0x30], eax
cmp dword [ebp - 0x30], 3
jge 0x10033696
mov eax, dword [ebp - 0x30]
mov dword [ebp + eax*4 - 0xc88], 0xfffffff7
jmp 0x10033679
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0x954], 1
jge 0x100336b1
mov dword [ebp - 0x5b8], 1
jmp 0x100336b8
and dword [ebp - 0x5b8], 0
mov eax, dword [ebp - 0x5b8]
mov dword [ebp - 0xec], eax
mov eax, dword [ebp - 0xec]
cmp dword [ebp - 0xec], eax
jge 0x100336de
mov dword [ebp - 0x5c0], 1
jmp 0x100336e5
and dword [ebp - 0x5c0], 0
cmp dword [ebp - 0x5c0], 0x78213af7
jl 0x10033706
cmp dword [ebp - 0xec], 0
je 0x10033706
mov dword [ebp - 0x5c8], 1
jmp 0x1003370d
and dword [ebp - 0x5c8], 0
mov eax, dword [ebp - 0x5c8]
add eax, 0x694d
imul eax, eax, 0
imul eax, eax, 0xa86b
neg eax
push 4
pop ecx
imul ecx, ecx, 0
cmp eax, dword [ebp + ecx - 0x954]
jge 0x1003373e
mov dword [ebp - 0x5d0], 1
jmp 0x10033745
and dword [ebp - 0x5d0], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x954]
cmp dword [ebp - 0x5d0], eax
jl 0x10033766
mov dword [ebp - 0x5d8], 1
jmp 0x1003376d
and dword [ebp - 0x5d8], 0
mov eax, dword [ebp - 0x5d8]
mov dword [ebp - 0xec], eax
cmp dword [ebp - 0xec], 9
jb 0x1003378e
mov dword [ebp - 0x5e0], 1
jmp 0x10033795
and dword [ebp - 0x5e0], 0
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x954]
imul eax, dword [ebp - 0x5e0]
mov dword [ebp - 0x5e8], eax
push 1
lea ecx, [ebp - 0xa0c]
call fcn.10020c90
mov ecx, dword [ebp - 0x5e8]
mov dword [eax], ecx
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x954]
cmp dword [ebp - 0x5e8], eax
je 0x100337e3
mov dword [ebp - 0x5f0], 1
jmp 0x100337ea
and dword [ebp - 0x5f0], 0
push 4
pop eax
shl eax, 1
mov ecx, dword [ebp - 0x5f0]
mov dword [ebp + eax - 0xc88], ecx
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xa0c]
call fcn.10020c74
cmp dword [ebp - 0x5f8], 0x5cf6
jge 0x10033827
mov edx, dword [ebp - 0x718]
mov ecx, 0x10085b58
call fcn.10023628
push dword [ebp - 0x720]
push dword [ebp - 0x728]
call dword [0x1008b008]
mov dword [ebp - 0x758], eax
mov dword [ebp - 0x608], 0xb66bafcb
mov dword [ebp - 0x58], 0x28ea3888
mov dword [ebp - 0xa0], 0xffffffff
mov dword [ebp - 0x50], 0xffffffff
mov eax, dword [ebp - 0x58]
cmp dword [ebp - 0x58], eax
je 0x100338da
mov eax, dword [ebp - 0x58]
mov dword [ebp - 0xc28], eax
push 0xfffffffffffffffd
pop eax
sub eax, dword [ebp - 0x58]
imul eax, eax, 3
cmp eax, dword [ebp - 0x58]
jne 0x100338a1
cmp dword [ebp - 0xa0], 0
jne 0x100338a1
cmp dword [ebp - 0xa0], 0
jne 0x100338a1
cmp dword [ebp - 0x58], 0
jne 0x100338a1
and dword [ebp - 0x600], 0
jmp 0x100338ab
mov dword [ebp - 0x600], 1
mov eax, dword [ebp - 0x600]
sub eax, 6
imul eax, dword [ebp - 0x58]
test eax, eax
je 0x100338da
cmp dword [ebp - 0xa0], 0
je 0x100338da
cmp dword [ebp - 0xa0], 0
je 0x100338da
mov dword [ebp - 0x610], 1
jmp 0x100338e1
and dword [ebp - 0x610], 0
mov dword [ebp - 0x608], 0xc3a0
mov eax, dword [ebp - 0x608]
cmp eax, dword [ebp - 0x610]
jne 0x1003390b
mov eax, 0xaf9d66de
test eax, eax
jne 0x1003390b
and dword [ebp - 0x618], 0
jmp 0x10033915
mov dword [ebp - 0x618], 1
mov eax, dword [ebp - 0x618]
sub eax, dword [ebp - 0xa0]
cmp eax, 0xfffe
jne 0x10033934
mov dword [ebp - 0x620], 1
jmp 0x1003393b
and dword [ebp - 0x620], 0
mov eax, dword [ebp - 0x620]
add eax, 0x29207965
cmp eax, dword [ebp - 0xa0]
jne 0x1003395a
mov dword [ebp - 0x628], 1
jmp 0x10033961
and dword [ebp - 0x628], 0
mov eax, dword [ebp - 0xa0]
cmp dword [ebp - 0x628], eax
je 0x1003397b
mov dword [ebp - 0x630], 1
jmp 0x10033982
and dword [ebp - 0x630], 0
imul eax, dword [ebp - 0x630], 0xe83
mov dword [ebp - 0x58], eax
cmp dword [ebp - 0x58], 0
je 0x10033ac2
mov dword [ebp - 0x638], 0x4489
mov dword [ebp - 0x730], 0x1000a0c0
cmp dword [ebp - 0x638], 0x455a
jle 0x10033a98
and dword [ebp - 0x254], 0
jmp 0x100339d3
mov eax, dword [ebp - 0x254]
inc eax
mov dword [ebp - 0x254], eax
cmp dword [ebp - 0x254], 0x155c
jge 0x10033a98
and dword [ebp - 0x24c], 0
jmp 0x100339f9
mov eax, dword [ebp - 0x24c]
inc eax
mov dword [ebp - 0x24c], eax
cmp dword [ebp - 0x24c], 0x445e
jge 0x10033a93
and dword [ebp - 0x23c], 0
jmp 0x10033a1f
mov eax, dword [ebp - 0x23c]
inc eax
mov dword [ebp - 0x23c], eax
cmp dword [ebp - 0x23c], 0x71e5
jge 0x10033a8e
and dword [ebp - 0x244], 0
jmp 0x10033a41
mov eax, dword [ebp - 0x244]
inc eax
mov dword [ebp - 0x244], eax
cmp dword [ebp - 0x244], 0x47a0
jge 0x10033a8c
mov ecx, dword [ebp - 0x23c]
add ecx, dword [ebp - 0x244]
mov eax, dword [ebp - 0x24c]
sar eax, cl
xor eax, dword [ebp - 0x254]
cdq
mov dword [ebp - 0x898], eax
mov dword [ebp - 0x894], edx
push dword [ebp - 0x894]
push dword [ebp - 0x898]
mov ecx, 0x10085b58
call fcn.100208d8
jmp 0x10033a34
jmp 0x10033a12
jmp 0x100339ec
jmp 0x100339c6
mov eax, dword [ebp - 0xa0]
mov dword [ebp - 0x50], eax
cmp dword [ebp - 0x638], 0x4213
jge 0x10033abd
mov edx, dword [ebp - 0x730]
mov ecx, 0x10085b58
call fcn.10023628
jmp 0x10033c43
mov dword [ebp - 0x748], 0x1cd1ac8c
mov dword [ebp - 0x750], 0xd6b22149
mov dword [ebp - 0x640], 0x7e35
mov dword [ebp - 0x740], 0x1000a130
cmp dword [ebp - 0x640], 0x7f97
jle 0x10033b9a
and dword [ebp - 0x25c], 0
jmp 0x10033b10
mov eax, dword [ebp - 0x25c]
inc eax
mov dword [ebp - 0x25c], eax
cmp dword [ebp - 0x25c], 0x185e
jge 0x10033b9a
and dword [ebp - 0x264], 0
jmp 0x10033b32
mov eax, dword [ebp - 0x264]
inc eax
mov dword [ebp - 0x264], eax
cmp dword [ebp - 0x264], 0x6dbc
jge 0x10033b95
mov eax, dword [ebp - 0x25c]
and eax, dword [ebp - 0x264]
cdq
mov dword [ebp - 0x8a4], eax
mov dword [ebp - 0x8a0], edx
push dword [ebp - 0x8a0]
push dword [ebp - 0x8a4]
lea ecx, [ebp - 0xdb8]
call fcn.1001098e
pop ecx
pop ecx
mov dword [ebp - 0x738], eax
mov ecx, dword [ebp - 0x738]
call fcn.100208b8
push eax
call fcn.1006abb3
pop ecx
lea ecx, [ebp - 0xdb8]
call fcn.100208ae
jmp 0x10033b25
jmp 0x10033b03
mov byte [ebp - 0xcd], 0
movzx eax, byte [ebp - 0xcd]
test eax, eax
je 0x10033bb4
push 0
call dword [sym.imp.USER32.dll_SetCursor]
cmp dword [ebp - 0x640], 0x7aaa
jge 0x10033bcc
push dword [ebp - 0x740]
call fcn.1006abb3
pop ecx
mov dword [ebp - 0x50], 0
jmp 0x10033bdc
mov eax, dword [ebp - 0x50]
dec eax
mov dword [ebp - 0x50], eax
cmp dword [ebp - 0x50], 0xfffffff7
jle 0x10033c43
mov dword [ebp - 0x648], 0xab72
cmp dword [ebp - 0x648], 0
je 0x10033c0a
cmp dword [ebp - 0x648], 0
je 0x10033c0a
mov dword [ebp - 0x650], 1
jmp 0x10033c11
and dword [ebp - 0x650], 0
mov eax, dword [ebp - 0x50]
cmp eax, dword [ebp - 0x650]
je 0x10033c28
mov dword [ebp - 0x658], 1
jmp 0x10033c2f
and dword [ebp - 0x658], 0
mov eax, dword [ebp - 0x748]
add eax, dword [ebp - 0x658]
mov dword [ebp - 0x750], eax
jmp 0x10033bd5
mov dword [ebp - 0x50], 0
jmp 0x10033c53
mov eax, dword [ebp - 0x50]
dec eax
mov dword [ebp - 0x50], eax
cmp dword [ebp - 0x50], 0xffffffe9
jge 0x10033c77
mov byte [ebp - 0xd6], 0
movzx eax, byte [ebp - 0xd6]
test eax, eax
je 0x10033c75
push 0
push 0
call dword [sym.imp.USER32.dll_KillTimer]
jmp 0x10033c4c
mov eax, dword [ebp - 0x758]
jmp 0x10034137
mov dword [ebp - 0x88], 0xa87013dc
mov dword [ebp - 0x300], 1
mov dword [ebp - 0xaf0], 0xfffffff9
mov dword [ebp - 0x690], 0
mov dword [ebp - 0x660], 0x18df
mov dword [ebp - 0x760], 0x1000a160
cmp dword [ebp - 0x660], 0x1be3
jle 0x10033d7e
push 0
call dword [sym.imp.KERNEL32.dll_GlobalMemoryStatus]
and dword [ebp - 0x2cc], 0
jmp 0x10033cec
mov eax, dword [ebp - 0x2cc]
inc eax
mov dword [ebp - 0x2cc], eax
cmp dword [ebp - 0x2cc], 0x7bfc
jge 0x10033d7e
and dword [ebp - 0x26c], 0
jmp 0x10033d12
mov eax, dword [ebp - 0x26c]
inc eax
mov dword [ebp - 0x26c], eax
cmp dword [ebp - 0x26c], 0x1dc8
jge 0x10033d79
and dword [ebp - 0x2c4], 0
jmp 0x10033d34
mov eax, dword [ebp - 0x2c4]
inc eax
mov dword [ebp - 0x2c4], eax
cmp dword [ebp - 0x2c4], 0x7a9c
jge 0x10033d77
mov eax, dword [ebp - 0x26c]
and eax, dword [ebp - 0x2c4]
or eax, dword [ebp - 0x2cc]
cdq
mov dword [ebp - 0x8b0], eax
mov dword [ebp - 0x8ac], edx
push dword [ebp - 0x8ac]
push dword [ebp - 0x8b0]
mov ecx, 0x10085b58
call fcn.100208d8
jmp 0x10033d27
jmp 0x10033d05
jmp 0x10033cdf
mov dword [ebp - 0x5c], 0
jmp 0x10033d8e
mov eax, dword [ebp - 0x5c]
inc eax
mov dword [ebp - 0x5c], eax
cmp dword [ebp - 0x5c], 3
jge 0x10033da4
mov eax, dword [ebp - 0x5c]
mov dword [ebp + eax*4 - 0x98c], 0xd7f825e
jmp 0x10033d87
cmp dword [ebp - 0x660], 0x1839
jge 0x10033dc0
mov edx, dword [ebp - 0x760]
mov ecx, 0x10085b58
call fcn.10023628
mov dword [ebp - 0x5c], 0
jmp 0x10033dd0
mov eax, dword [ebp - 0x5c]
inc eax
mov dword [ebp - 0x5c], eax
cmp dword [ebp - 0x5c], 4
jge 0x10033de6
mov eax, dword [ebp - 0x5c]
mov dword [ebp + eax*4 - 0xa50], 1
jmp 0x10033dc9
mov dword [ebp - 0x88], 2
jmp 0x10033dff
mov eax, dword [ebp - 0x88]
dec eax
mov dword [ebp - 0x88], eax
cmp dword [ebp - 0x88], 0
jl 0x10034135
mov dword [ebp - 0xbb8], 0xfffffff8
mov dword [ebp - 0x68], 0
jmp 0x10033e26
mov eax, dword [ebp - 0x68]
inc eax
mov dword [ebp - 0x68], eax
cmp dword [ebp - 0x68], 1
jge 0x10033e3c
mov eax, dword [ebp - 0x68]
mov dword [ebp + eax*4 - 0x770], 0x8b39d205
jmp 0x10033e1f
mov dword [ebp - 0x68], 0
jmp 0x10033e4c
mov eax, dword [ebp - 0x68]
inc eax
mov dword [ebp - 0x68], eax
cmp dword [ebp - 0x68], 2
jge 0x10033e62
mov eax, dword [ebp - 0x68]
mov dword [ebp + eax*4 - 0x9a8], 0xaba9
jmp 0x10033e45
mov eax, dword [ebp - 0x88]
mov eax, dword [ebp + eax*4 - 0x98c]
mov dword [ebp - 0xaf8], eax
mov eax, dword [ebp - 0x300]
inc eax
mov dword [ebp - 0x300], eax
imul eax, dword [ebp - 0x300], 9
cmp eax, 0x945cb81e
je 0x10033e9c
mov dword [ebp - 0x668], 1
jmp 0x10033ea3
and dword [ebp - 0x668], 0
mov eax, dword [ebp - 0x668]
inc eax
push 4
pop ecx
shl ecx, 0
cmp eax, dword [ebp + ecx - 0xa50]
jne 0x10033ec5
mov dword [ebp - 0x670], 1
jmp 0x10033ecc
and dword [ebp - 0x670], 0
mov eax, dword [ebp - 0x88]
cmp dword [ebp - 0x670], eax
jle 0x10033ee6
mov dword [ebp - 0x678], 1
jmp 0x10033eed
and dword [ebp - 0x678], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x9a8]
cmp dword [ebp - 0x678], eax
jl 0x10033f1e
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x9a8], 0
je 0x10033f1e
mov dword [ebp - 0x680], 1
jmp 0x10033f25
and dword [ebp - 0x680], 0
mov eax, dword [ebp - 0x88]
mov eax, dword [ebp + eax*4 - 0x98c]
cmp eax, dword [ebp - 0x680]
jne 0x10033f46
mov dword [ebp - 0x688], 1
jmp 0x10033f4d
and dword [ebp - 0x688], 0
mov eax, dword [ebp - 0x88]
cmp dword [ebp - 0x688], eax
jne 0x10033f67
mov dword [ebp - 0x768], 1
jmp 0x10033f6e
and dword [ebp - 0x768], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x98c]
mov dword [ebp - 0xc48], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x770]
add eax, 0x5d3e8ea4
jne 0x10033fae
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0xa50], 0
jne 0x10033fae
and dword [ebp - 0x778], 0
jmp 0x10033fb8
mov dword [ebp - 0x778], 1
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0xa50], 0
je 0x10033fd9
xor eax, eax
inc eax
je 0x10033fd9
mov dword [ebp - 0x308], 1
jmp 0x10033fe0
and dword [ebp - 0x308], 0
push 4
pop eax
shl eax, 1
mov ecx, dword [ebp - 0x308]
mov dword [ebp + eax - 0xa50], ecx
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x308]
mov dword [ebp + eax - 0x98c], ecx
mov dword [ebp - 0x698], 0x7aee
mov dword [ebp - 0x780], 0x1000a1b0
cmp dword [ebp - 0x698], 0x7b3b
jle 0x10034107
and dword [ebp - 0x2d4], 0
jmp 0x1003403f
mov eax, dword [ebp - 0x2d4]
inc eax
mov dword [ebp - 0x2d4], eax
cmp dword [ebp - 0x2d4], 0x6d83
jge 0x10034107
and dword [ebp - 0x2dc], 0
jmp 0x10034065
mov eax, dword [ebp - 0x2dc]
inc eax
mov dword [ebp - 0x2dc], eax
cmp dword [ebp - 0x2dc], 0x43b7
jge 0x10034102
and dword [ebp - 0x2e4], 0
jmp 0x1003408b
mov eax, dword [ebp - 0x2e4]
inc eax
mov dword [ebp - 0x2e4], eax
cmp dword [ebp - 0x2e4], 0x5834
jge 0x100340fd
and dword [ebp - 0x278], 0
jmp 0x100340ad
mov eax, dword [ebp - 0x278]
inc eax
mov dword [ebp - 0x278], eax
cmp dword [ebp - 0x278], 0x745d
jge 0x100340fb
mov eax, dword [ebp - 0x2d4]
imul eax, dword [ebp - 0x2dc]
mov edx, dword [ebp - 0x2e4]
mov ecx, dword [ebp - 0x278]
sar edx, cl
xor eax, edx
cdq
mov dword [ebp - 0x8bc], eax
mov dword [ebp - 0x8b8], edx
push dword [ebp - 0x8b8]
push dword [ebp - 0x8bc]
mov ecx, 0x10085b58
call fcn.100208d8
jmp 0x100340a0
jmp 0x1003407e
jmp 0x10034058
jmp 0x10034032
mov eax, dword [ebp - 0x690]
dec eax
mov dword [ebp - 0x690], eax
cmp dword [ebp - 0x698], 0x7887
jge 0x10034130
mov edx, dword [ebp - 0x780]
mov ecx, 0x10085b58
call fcn.10023628
jmp 0x10033df2
xor eax, eax
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop esi
mov esp, ebp
pop ebp
ret