Function at 0x1002583b
Capabilities:
Inspect section memory permissions

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x10080fa6
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x498
push esi
push edi
movzx eax, byte [ebp + 8]
test eax, eax
je 0x100275da
mov eax, dword [ebp + 0x14]
mov dword [ebp - 0xa0], eax
mov dword [ebp - 0x34], 0x4b283066
mov dword [ebp - 0xdc], 0x8d72a67f
mov dword [ebp - 0x54], 0xf1edd1ed
mov dword [ebp - 0x94], 0
jmp 0x100258a1
mov eax, dword [ebp - 0x94]
inc eax
mov dword [ebp - 0x94], eax
cmp dword [ebp - 0x94], 3
jge 0x100258bd
mov eax, dword [ebp - 0x94]
mov dword [ebp + eax*4 - 0x448], 6
jmp 0x10025894
mov byte [ebp - 0x3e], 0
movzx eax, byte [ebp - 0x3e]
test eax, eax
je 0x100258d1
push 1
call fcn.100255a8
pop ecx
mov dword [ebp - 0x34], 2
cmp dword [ebp - 0x34], 0
jne 0x100259ee
cmp dword [ebp - 0x34], 1
je 0x100258f4
mov dword [ebp - 0x150], 1
jmp 0x100258fb
and dword [ebp - 0x150], 0
cmp dword [ebp - 0x150], 0x7bc9
je 0x10025913
mov dword [ebp - 0xb8], 1
jmp 0x1002591a
and dword [ebp - 0xb8], 0
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0xb8]
mov dword [ebp + eax - 0x448], ecx
mov eax, dword [ebp - 0xb8]
mov dword [ebp - 0xdc], eax
mov eax, dword [ebp - 0x34]
cmp dword [ebp - 0xdc], eax
je 0x10025950
mov dword [ebp - 0x268], 1
jmp 0x10025957
and dword [ebp - 0x268], 0
mov eax, dword [ebp - 0x34]
cmp dword [ebp - 0x268], eax
jge 0x1002596e
mov dword [ebp - 0x280], 1
jmp 0x10025975
and dword [ebp - 0x280], 0
mov eax, dword [ebp - 0x34]
cmp eax, dword [ebp - 0x280]
jge 0x1002598c
mov dword [ebp - 0x134], 1
jmp 0x10025993
and dword [ebp - 0x134], 0
cmp dword [ebp - 0x134], 0
je 0x100259a8
mov dword [ebp - 0x118], 1
jmp 0x100259af
and dword [ebp - 0x118], 0
cmp dword [ebp - 0x118], 0x42573927
jne 0x100259c7
mov dword [ebp - 0x2a4], 1
jmp 0x100259ce
and dword [ebp - 0x2a4], 0
mov eax, dword [ebp - 0x34]
mov dword [ebp - 0x3f0], eax
mov eax, dword [ebp - 0xdc]
imul eax, dword [ebp - 0x34]
test eax, eax
jne 0x100259ee
and dword [ebp - 0x248], 0
jmp 0x100259f8
mov dword [ebp - 0x248], 1
cmp dword [ebp - 0x248], 0xde467b47
jbe 0x10025a10
mov dword [ebp - 0x120], 1
jmp 0x10025a17
and dword [ebp - 0x120], 0
mov eax, dword [ebp - 0x54]
cmp dword [ebp - 0x120], eax
jl 0x10025a2e
mov dword [ebp - 0x250], 1
jmp 0x10025a35
and dword [ebp - 0x250], 0
mov eax, dword [ebp - 0x250]
sub eax, dword [ebp - 0x54]
cmp eax, dword [ebp - 0x54]
jl 0x10025a4f
mov dword [ebp - 0x128], 1
jmp 0x10025a56
and dword [ebp - 0x128], 0
mov eax, dword [ebp - 0x54]
add eax, dword [ebp - 0x128]
cmp eax, dword [ebp - 0x54]
jge 0x10025a70
mov dword [ebp - 0x258], 1
jmp 0x10025a77
and dword [ebp - 0x258], 0
mov eax, dword [ebp - 0x258]
mov dword [ebp - 0x54], eax
mov eax, dword [ebp - 0xa0]
mov eax, dword [eax]
mov ecx, dword [ebp - 0xa0]
mov ecx, dword [ecx]
movzx ecx, word [ecx + 0x14]
lea eax, [eax + ecx + 0x18]
mov dword [ebp - 0x20], eax
mov dword [ebp - 0x84], 5
mov dword [ebp - 0x2ec], 0
mov dword [ebp - 0x404], 1
mov dword [ebp - 0x400], 0xb4ef66b1
mov dword [ebp - 0x40c], 0xdd7770b1
push 4
lea ecx, [ebp - 0x380]
call fcn.10015917
and dword [ebp - 4], 0
mov dword [ebp - 0x414], 0x6d065835
mov dword [ebp - 0xc4], 0x1afe
push 1
lea ecx, [ebp - 0x374]
call fcn.10015917
mov byte [ebp - 4], 1
lea eax, [ebp - 0x380]
push eax
push 0
lea eax, [ebp - 0x2dc]
push eax
call fcn.100257d6
add esp, 0xc
push 0x10af
lea eax, [ebp - 0x2dc]
push eax
lea eax, [ebp - 0x374]
push eax
push 0x1382
push 0
push 0xa49
push 0x3f0
call fcn.1002b477
add esp, 0x1c
mov dword [ebp - 0x84], 0xfffffff6
jmp 0x10025b60
mov eax, dword [ebp - 0x84]
inc eax
mov dword [ebp - 0x84], eax
cmp dword [ebp - 0x84], 4
jge 0x10025e46
mov dword [ebp - 0x8c], 0
mov dword [ebp - 0x2e4], 0xffffffff
push 1
lea ecx, [ebp - 0x32c]
call fcn.10015917
mov byte [ebp - 4], 2
mov dword [ebp - 0xa4], 0
jmp 0x10025bab
mov eax, dword [ebp - 0xa4]
inc eax
mov dword [ebp - 0xa4], eax
cmp dword [ebp - 0xa4], 1
jge 0x10025bcd
push dword [ebp - 0xa4]
lea ecx, [ebp - 0x32c]
call fcn.100159b5
mov dword [eax], 0xf985589b
jmp 0x10025b9e
mov dword [ebp - 0x8c], 2
jmp 0x10025be6
mov eax, dword [ebp - 0x8c]
inc eax
mov dword [ebp - 0x8c], eax
cmp dword [ebp - 0x8c], 0x10
jge 0x10025e0c
push 4
lea ecx, [ebp - 0x278]
call fcn.10015917
mov byte [ebp - 4], 3
mov dword [ebp - 0x430], 4
mov dword [ebp - 0x410], 0xfffffffd
push 4
lea ecx, [ebp - 0x398]
call fcn.10015917
mov byte [ebp - 4], 4
mov dword [ebp - 0x428], 0xbb30
mov dword [ebp - 0x24], 0
jmp 0x10025c43
mov eax, dword [ebp - 0x24]
inc eax
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 3
jge 0x10025c59
mov eax, dword [ebp - 0x24]
mov dword [ebp + eax*4 - 0x460], 0xac453072
jmp 0x10025c3c
push 0x40c1
lea eax, [ebp - 0x278]
push eax
push 0x7dab
lea eax, [ebp - 0x24]
push eax
push 0x59e9
push 0
push 0x4c90
push 0x2488
call fcn.1002b1cb
add esp, 0x20
mov dword [ebp - 0x24], 0
jmp 0x10025c97
mov eax, dword [ebp - 0x24]
inc eax
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 4
jge 0x10025cb3
push dword [ebp - 0x24]
lea ecx, [ebp - 0x398]
call fcn.100159b5
mov dword [eax], 0x18c9a01c
jmp 0x10025c90
push 1
lea ecx, [ebp - 0x278]
call fcn.100159b5
and dword [eax], 0
jmp 0x10025ce9
push 1
lea ecx, [ebp - 0x278]
call fcn.100159b5
mov dword [ebp - 0x260], eax
mov eax, dword [ebp - 0x260]
mov eax, dword [eax]
inc eax
mov ecx, dword [ebp - 0x260]
mov dword [ecx], eax
push 1
lea ecx, [ebp - 0x278]
call fcn.100159b5
cmp dword [eax], 2
jg 0x10025dc0
mov dword [ebp - 0x3bc], 0x6c902da
mov dword [ebp - 0x3c4], 0xc3d069f4
mov dword [ebp - 0x9c], 0
jmp 0x10025d2c
mov eax, dword [ebp - 0x9c]
inc eax
mov dword [ebp - 0x9c], eax
cmp dword [ebp - 0x9c], 1
jge 0x10025d48
mov eax, dword [ebp - 0x9c]
mov dword [ebp + eax*4 - 0x3cc], 0x9acd4098
jmp 0x10025d1f
mov eax, dword [ebp - 0xc4]
inc eax
mov dword [ebp - 0xc4], eax
mov esi, dword [ebp - 0xc4]
push 1
lea ecx, [ebp - 0x278]
call fcn.100159b5
mov eax, dword [eax]
mov edi, dword [ebp + eax*4 - 0x460]
imul edi, esi
push 1
lea ecx, [ebp - 0x380]
call fcn.100159b5
mov dword [eax], edi
push 0
lea ecx, [ebp - 0x32c]
call fcn.100159b5
mov dword [ebp - 0x130], eax
push 1
lea ecx, [ebp - 0x278]
call fcn.100159b5
mov ecx, dword [ebp - 0x130]
mov eax, dword [eax]
mov dword [ecx], eax
mov eax, dword [ebp - 0x130]
mov eax, dword [eax]
mov dword [ebp - 0x2e4], eax
jmp 0x10025cc5
cmp dword [ebp - 0x2ec], 0
je 0x10025de9
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x398]
call fcn.10015999
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x278]
call fcn.10015999
jmp 0x10025e0c
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x398]
call fcn.10015999
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x278]
call fcn.10015999
jmp 0x10025bd9
push 0
lea ecx, [ebp - 0x374]
call fcn.100159b5
cmp dword [eax], 0
je 0x10025e32
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x32c]
call fcn.10015999
jmp 0x10025b53
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x32c]
call fcn.10015999
jmp 0x10025b53
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x374]
call fcn.10015999
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x380]
call fcn.10015999
and dword [ebp - 0xd4], 0
jmp 0x10025e83
mov eax, dword [ebp - 0xd4]
inc eax
mov dword [ebp - 0xd4], eax
mov eax, dword [ebp - 0x20]
add eax, 0x28
mov dword [ebp - 0x20], eax
mov eax, dword [ebp - 0xa0]
mov eax, dword [eax]
movzx eax, word [eax + 6]
cmp dword [ebp - 0xd4], eax
jge 0x100275d8
mov dword [ebp - 0x368], 0x3dd33a4a
mov dword [ebp - 0x364], 0x3dd33a4a
mov dword [ebp - 0x360], 0x3dd33a4a
mov dword [ebp - 0x35c], 0x3dd33a4a
lea ecx, [ebp - 0xb9]
call fcn.10008cf3
push eax
lea eax, [ebp - 0x358]
push eax
lea eax, [ebp - 0x368]
push eax
lea ecx, [ebp - 0x474]
call fcn.100159c4
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0xec]
call fcn.10015973
mov dword [ebp - 4], 5
mov dword [ebp - 0x14], 0xffffffff
mov dword [ebp - 0x31c], 0x8cdac369
mov dword [ebp - 0x3d4], 0x1a2c
mov dword [ebp - 0x14], 3
jmp 0x10025f2a
mov eax, dword [ebp - 0x14]
dec eax
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 0
jl 0x100261c1
mov dword [ebp - 0x30], 0xe8c9f369
mov byte [ebp - 0x4e], 0
lea eax, [ebp - 0x4e]
push eax
push 0
call fcn.100256f0
pop ecx
pop ecx
mov dword [ebp - 0x30], 3
jmp 0x10025f5c
mov eax, dword [ebp - 0x30]
dec eax
mov dword [ebp - 0x30], eax
cmp dword [ebp - 0x30], 0
jl 0x100261bc
mov dword [ebp - 0x320], 0x51d77f17
mov dword [ebp - 0x144], 0xfffffffc
mov dword [ebp - 0x78], 0
jmp 0x10025f8a
mov eax, dword [ebp - 0x78]
inc eax
mov dword [ebp - 0x78], eax
cmp dword [ebp - 0x78], 4
jge 0x10025fa0
mov eax, dword [ebp - 0x78]
mov dword [ebp + eax*4 - 0x4a4], 0xfffffff8
jmp 0x10025f83
push dword [ebp - 0x14]
lea ecx, [ebp - 0xec]
call fcn.100159b5
cmp dword [ebp - 0x320], 3
jae 0x10025fc3
mov dword [ebp - 0x1dc], 1
jmp 0x10025fca
and dword [ebp - 0x1dc], 0
push dword [ebp - 0x30]
lea ecx, [ebp - 0xec]
call fcn.100159b5
mov eax, dword [eax]
cmp eax, dword [ebp - 0x1dc]
je 0x10025fee
mov dword [ebp - 0xcc], 1
jmp 0x10025ff5
and dword [ebp - 0xcc], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0xcc]
mov dword [ebp + eax - 0x4a4], ecx
mov eax, dword [ebp - 0xcc]
sub eax, dword [ebp - 0x30]
je 0x10026017
cmp dword [ebp - 0x14], 0
push dword [ebp - 0x30]
lea ecx, [ebp - 0xec]
call fcn.100159b5
mov ecx, dword [ebp - 0x14]
cmp dword [eax], ecx
jle 0x10026038
mov dword [ebp - 0x13c], 1
jmp 0x1002603f
and dword [ebp - 0x13c], 0
mov eax, dword [ebp - 0x13c]
add eax, 0x7bb456e
cmp eax, 0xffffffff
jle 0x1002606b
push dword [ebp - 0x30]
lea ecx, [ebp - 0xec]
call fcn.100159b5
cmp dword [eax], 0
jne 0x1002606b
and dword [ebp - 0x26c], 0
jmp 0x10026075
mov dword [ebp - 0x26c], 1
mov eax, dword [ebp - 0x26c]
mov dword [ebp - 0x144], eax
cmp dword [ebp - 0x144], 0xbbda73a1
je 0x10026099
mov dword [ebp - 0x1e4], 1
jmp 0x100260a0
and dword [ebp - 0x1e4], 0
cmp dword [ebp - 0x1e4], 0x25bb5a27
jg 0x100260b8
mov dword [ebp - 0x14c], 1
jmp 0x100260bf
and dword [ebp - 0x14c], 0
push dword [ebp - 0x14]
lea ecx, [ebp - 0xec]
call fcn.100159b5
mov ecx, dword [ebp - 0x14c]
imul ecx, dword [eax]
add ecx, dword [ebp - 0x14]
jne 0x100260f6
push 0
lea ecx, [ebp - 0xec]
call fcn.100159b5
cmp dword [eax], 0
jne 0x100260f6
and dword [ebp - 0x234], 0
jmp 0x10026100
mov dword [ebp - 0x234], 1
mov esi, dword [ebp - 0x234]
sub esi, dword [ebp - 0x14]
push 3
lea ecx, [ebp - 0xec]
call fcn.100159b5
cmp esi, dword [eax]
jne 0x10026126
mov dword [ebp - 0x154], 1
jmp 0x1002612d
and dword [ebp - 0x154], 0
mov eax, dword [ebp - 0x14]
cmp dword [ebp - 0x154], eax
jne 0x10026144
mov dword [ebp - 0x1ec], 1
jmp 0x1002614b
and dword [ebp - 0x1ec], 0
cmp dword [ebp - 0x1ec], 0x7a540f82
jl 0x10026163
mov dword [ebp - 0x15c], 1
jmp 0x1002616a
and dword [ebp - 0x15c], 0
push dword [ebp - 0x30]
lea ecx, [ebp - 0xec]
call fcn.100159b5
mov esi, eax
push dword [ebp - 0x14]
lea ecx, [ebp - 0xec]
call fcn.100159b5
mov ecx, dword [ebp - 0x14]
add ecx, dword [ebp - 0x15c]
imul ecx, dword [eax]
cmp dword [esi], ecx
jl 0x100261a4
mov dword [ebp - 0x25c], 1
jmp 0x100261ab
and dword [ebp - 0x25c], 0
mov eax, dword [ebp - 0x25c]
mov dword [ebp - 0x31c], eax
jmp 0x10025f55
jmp 0x10025f23
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xec]
call fcn.10015999
mov eax, dword [ebp - 0x20]
mov eax, dword [eax + 0x24]
and eax, 0x20000000
je 0x100261e9
mov dword [ebp - 0x164], 1
jmp 0x100261f0
and dword [ebp - 0x164], 0
mov eax, dword [ebp - 0x164]
mov dword [ebp - 0x2f0], eax
mov dword [ebp - 0x28], 0x824a8c6a
mov dword [ebp - 0x1f4], 0xffffffff
mov dword [ebp - 0xb0], 0
mov byte [ebp - 0x4f], 0
movzx eax, byte [ebp - 0x4f]
test eax, eax
je 0x10026237
push 1
push 0x3038
push 0x2d1c
call fcn.10025604
add esp, 0xc
mov dword [ebp - 0x28], 0
jmp 0x10026247
mov eax, dword [ebp - 0x28]
dec eax
mov dword [ebp - 0x28], eax
cmp dword [ebp - 0x28], 0xfffffff5
je 0x100263f8
push 3
lea ecx, [ebp - 0x2fc]
call fcn.10015917
mov dword [ebp - 4], 6
mov dword [ebp - 0xc0], 0x9974082
mov dword [ebp - 0x2cc], 0xffffffff
lea eax, [ebp - 0x41c]
push eax
push 0x18e4
push 0
lea eax, [ebp - 0x2fc]
push eax
call fcn.1002bf3c
add esp, 0x10
mov eax, dword [ebp - 0x28]
cmp dword [ebp - 0x28], eax
jne 0x100262aa
mov dword [ebp - 0x16c], 1
jmp 0x100262b1
and dword [ebp - 0x16c], 0
push 2
lea ecx, [ebp - 0x2fc]
call fcn.100159b5
mov eax, dword [eax]
mov dword [ebp - 0x1f4], eax
mov esi, dword [ebp - 0x1f4]
push 2
lea ecx, [ebp - 0x2fc]
call fcn.100159b5
add esi, dword [eax]
cmp esi, 0xffffffff
jge 0x100262ec
mov dword [ebp - 0x2b0], 1
jmp 0x100262f3
and dword [ebp - 0x2b0], 0
mov eax, dword [ebp - 0xb0]
imul eax, dword [ebp - 0xb0]
test eax, eax
jne 0x10026316
cmp dword [ebp - 0xc0], 0
jne 0x10026316
and dword [ebp - 0x23c], 0
jmp 0x10026320
mov dword [ebp - 0x23c], 1
mov eax, dword [ebp - 0x16c]
cmp eax, dword [ebp - 0x23c]
jge 0x1002633a
mov dword [ebp - 0x2d4], 1
jmp 0x10026341
and dword [ebp - 0x2d4], 0
mov eax, dword [ebp - 0xc0]
mov dword [ebp - 0x424], eax
cmp dword [ebp - 0x28], 1
jge 0x1002635f
mov dword [ebp - 0x174], 1
jmp 0x10026366
and dword [ebp - 0x174], 0
mov eax, dword [ebp - 0xb0]
cmp dword [ebp - 0x174], eax
jl 0x10026380
mov dword [ebp - 0x1fc], 1
jmp 0x10026387
and dword [ebp - 0x1fc], 0
mov eax, dword [ebp - 0xc0]
cmp dword [ebp - 0x1fc], eax
je 0x100263a1
mov dword [ebp - 0x17c], 1
jmp 0x100263a8
and dword [ebp - 0x17c], 0
mov esi, dword [ebp - 0x28]
add esi, dword [ebp - 0x17c]
sub esi, dword [ebp - 0x28]
push 2
lea ecx, [ebp - 0x2fc]
call fcn.100159b5
cmp esi, dword [eax]
jl 0x100263d1
mov dword [ebp - 0x284], 1
jmp 0x100263d8
and dword [ebp - 0x284], 0
mov eax, dword [ebp - 0x284]
mov dword [ebp - 0x2cc], eax
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x2fc]
call fcn.10015999
jmp 0x10026240
mov eax, dword [ebp - 0x20]
mov eax, dword [eax + 0x24]
and eax, 0x40000000
je 0x10026411
mov dword [ebp - 0x184], 1
jmp 0x10026418
and dword [ebp - 0x184], 0
mov eax, dword [ebp - 0x184]
mov dword [ebp - 0x2c8], eax
mov dword [ebp - 0x5c], 0xffffffff
mov dword [ebp - 0x204], 0
mov dword [ebp - 0x2c0], 0xec51938d
mov dword [ebp - 0x80], 0
jmp 0x1002644f
mov eax, dword [ebp - 0x80]
inc eax
mov dword [ebp - 0x80], eax
cmp dword [ebp - 0x80], 2
jge 0x10026465
mov eax, dword [ebp - 0x80]
mov dword [ebp + eax*4 - 0x3ec], 0xfffffff6
jmp 0x10026448
mov dword [ebp - 0x5c], 0
jmp 0x10026475
mov eax, dword [ebp - 0x5c]
inc eax
mov dword [ebp - 0x5c], eax
cmp dword [ebp - 0x5c], 1
jg 0x10026615
mov dword [ebp - 0x44], 0
mov dword [ebp - 0x194], 0
mov dword [ebp - 0x88], 0
jmp 0x100264a9
mov eax, dword [ebp - 0x88]
inc eax
mov dword [ebp - 0x88], eax
cmp dword [ebp - 0x88], 1
jge 0x100264c5
mov eax, dword [ebp - 0x88]
mov dword [ebp + eax*4 - 0x2e8], 1
jmp 0x1002649c
mov dword [ebp - 0x44], 0
jmp 0x100264d5
mov eax, dword [ebp - 0x44]
inc eax
mov dword [ebp - 0x44], eax
cmp dword [ebp - 0x44], 1
jg 0x100265fc
mov dword [ebp - 0x42c], 0
mov dword [ebp - 0x90], 0
jmp 0x10026502
mov eax, dword [ebp - 0x90]
inc eax
mov dword [ebp - 0x90], eax
cmp dword [ebp - 0x90], 3
jge 0x1002651e
mov eax, dword [ebp - 0x90]
mov dword [ebp + eax*4 - 0x454], 0xfc0233fd
jmp 0x100264f5
cmp dword [ebp - 0x44], 0
je 0x10026598
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0x454], 0
jg 0x1002653f
mov dword [ebp - 0x318], 1
jmp 0x10026546
and dword [ebp - 0x318], 0
mov eax, dword [ebp - 0x44]
mov dword [ebp - 0x434], eax
mov eax, dword [ebp - 0x204]
mov dword [ebp - 0x2b8], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x2b8]
mov dword [ebp + eax - 0x2e8], ecx
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x3ec]
mov dword [ebp - 0x43c], eax
mov eax, dword [ebp - 0x5c]
cmp dword [ebp - 0x204], eax
jle 0x10026598
mov dword [ebp - 0x18c], 1
jmp 0x1002659f
and dword [ebp - 0x18c], 0
mov eax, dword [ebp - 0x5c]
cmp dword [ebp - 0x18c], eax
jg 0x100265b9
cmp dword [ebp - 0x44], 0
jne 0x100265b9
and dword [ebp - 0x244], 0
jmp 0x100265c3
mov dword [ebp - 0x244], 1
mov eax, dword [ebp - 0x244]
mov dword [ebp - 0x194], eax
cmp dword [ebp - 0x194], 0xfffffff8
jg 0x100265e4
mov dword [ebp - 0x20c], 1
jmp 0x100265eb
and dword [ebp - 0x20c], 0
mov eax, dword [ebp - 0x20c]
mov dword [ebp - 0x2c0], eax
jmp 0x100264ce
mov byte [ebp - 0x4d], 0
movzx eax, byte [ebp - 0x4d]
test eax, eax
je 0x10026610
push 1
call fcn.10025695
pop ecx
jmp 0x1002646e
mov eax, dword [ebp - 0x20]
mov eax, dword [eax + 0x24]
and eax, 0x80000000
je 0x1002662e
mov dword [ebp - 0x19c], 1
jmp 0x10026635
and dword [ebp - 0x19c], 0
mov eax, dword [ebp - 0x19c]
mov dword [ebp - 0x310], eax
mov dword [ebp - 0x6c], 1
mov dword [ebp - 0x98], 0
jmp 0x10026661
mov eax, dword [ebp - 0x98]
inc eax
mov dword [ebp - 0x98], eax
cmp dword [ebp - 0x98], 3
jge 0x1002667d
mov eax, dword [ebp - 0x98]
mov dword [ebp + eax*4 - 0x46c], 5
jmp 0x10026654
mov dword [ebp - 0x6c], 2
jmp 0x1002668d
mov eax, dword [ebp - 0x6c]
dec eax
mov dword [ebp - 0x6c], eax
cmp dword [ebp - 0x6c], 0
jl 0x100266a4
mov eax, dword [ebp - 0x6c]
cmp dword [ebp + eax*4 - 0x46c], 0
je 0x100266a2
jmp 0x100266a4
jmp 0x10026686
mov eax, dword [ebp - 0x20]
mov eax, dword [eax + 0x24]
and eax, 0x2000000
je 0x100266da
push 0x4000
mov eax, dword [ebp - 0x20]
push dword [eax + 0x10]
mov eax, dword [ebp - 0x20]
push dword [eax + 8]
push 0x9fac
push 0xa55f
call fcn.1002310d
pop ecx
pop ecx
call eax
jmp 0x10025e6d
push 3
lea ecx, [ebp - 0x30c]
call fcn.10015917
mov dword [ebp - 4], 7
push 3
lea ecx, [ebp - 0x38c]
call fcn.10015917
mov byte [ebp - 4], 8
mov dword [ebp - 0x58], 0xae73598
mov dword [ebp - 0x10], 0
jmp 0x10026716
mov eax, dword [ebp - 0x10]
inc eax
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], 4
jge 0x1002672c
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0x10c], 0xb4e1
jmp 0x1002670f
mov dword [ebp - 0x10], 0
jmp 0x1002673c
mov eax, dword [ebp - 0x10]
inc eax
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], 3
jge 0x10026758
push dword [ebp - 0x10]
lea ecx, [ebp - 0x30c]
call fcn.100159b5
mov dword [eax], 0xb0b44cf5
jmp 0x10026735
push 0
push 0x685b
lea eax, [ebp - 0x38c]
push eax
push 0x1be3
push 0x94b
lea eax, [ebp - 0x10]
push eax
call fcn.1002c25f
add esp, 0x18
mov dword [ebp - 0x10], 0
jmp 0x1002678c
mov eax, dword [ebp - 0x10]
inc eax
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], 4
jge 0x100267a2
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0x494], 0xdbc2a41b
jmp 0x10026785
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x10c]
dec eax
push 4
pop ecx
shl ecx, 1
mov dword [ebp + ecx - 0x10c], eax
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0x10c], 0x6c9c
jne 0x100267d9
mov dword [ebp - 0xc8], 1
jmp 0x100267e0
and dword [ebp - 0xc8], 0
push 1
lea ecx, [ebp - 0x30c]
call fcn.100159b5
mov ecx, dword [ebp - 0xc8]
mov dword [eax], ecx
cmp dword [ebp - 0xc8], 0
je 0x10026846
push 1
lea ecx, [ebp - 0x30c]
call fcn.100159b5
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x10c]
mov dword [ebp - 0x408], eax
push 0
lea ecx, [ebp - 0x30c]
call fcn.100159b5
mov dword [eax], 0xfffc
mov eax, 0xfffc
test eax, eax
je 0x10026846
mov dword [ebp - 0x264], 1
jmp 0x1002684d
and dword [ebp - 0x264], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x10c]
imul eax, dword [ebp - 0x264]
push 4
pop ecx
shl ecx, 1
imul eax, dword [ebp + ecx - 0x10c]
push 4
pop ecx
shl ecx, 1
add eax, dword [ebp + ecx - 0x10c]
push 4
pop ecx
imul ecx, ecx, 3
cmp eax, dword [ebp + ecx - 0x10c]
jge 0x10026895
mov dword [ebp - 0x1a4], 1
jmp 0x1002689c
and dword [ebp - 0x1a4], 0
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x10c]
cmp eax, dword [ebp - 0x1a4]
jl 0x100268bc
mov dword [ebp - 0x214], 1
jmp 0x100268c3
and dword [ebp - 0x214], 0
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x214]
add ecx, dword [ebp + eax - 0x10c]
mov dword [ebp - 0x1ac], ecx
push 1
lea ecx, [ebp - 0x38c]
call fcn.100159b5
mov ecx, dword [ebp - 0x1ac]
mov dword [eax], ecx
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x10c]
cmp dword [ebp - 0x1ac], eax
jle 0x10026911
mov dword [ebp - 0x24c], 1
jmp 0x10026918
and dword [ebp - 0x24c], 0
imul eax, dword [ebp - 0x24c], 0x3488
cmp eax, 0xfffffffb
jge 0x10026933
mov dword [ebp - 0x1b4], 1
jmp 0x1002693a
and dword [ebp - 0x1b4], 0
mov eax, dword [ebp - 0x1b4]
mov dword [ebp - 0x58], eax
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x10c]
cmp dword [ebp - 0x58], eax
jle 0x10026960
mov dword [ebp - 0x21c], 1
jmp 0x10026967
and dword [ebp - 0x21c], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x494]
cmp dword [ebp - 0x21c], eax
jle 0x10026a34
mov dword [ebp - 0x58], 0
jmp 0x10026990
mov eax, dword [ebp - 0x58]
dec eax
mov dword [ebp - 0x58], eax
cmp dword [ebp - 0x58], 0xffffffe2
jge 0x10026a32
mov dword [ebp - 0x2a0], 8
mov dword [ebp - 0x29c], 8
mov dword [ebp - 0x298], 8
mov dword [ebp - 0x294], 8
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0x2a0], 0
jmp 0x100269f0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x2a0]
inc eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x2a0], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x2a0], 2
jg 0x10026a1c
mov byte [ebp - 0x50], 0
movzx eax, byte [ebp - 0x50]
test eax, eax
je 0x10026a1a
push 0x6bc2
push 1
call fcn.100256f0
pop ecx
pop ecx
jmp 0x100269d5
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0x2a0], 0
je 0x10026a2d
jmp 0x10026a32
jmp 0x10026989
jmp 0x10026a70
mov byte [ebp - 0x45], 0
push 0x45f8
lea eax, [ebp - 0x45]
push eax
push 0x2cc5
push 1
call fcn.10025738
add esp, 0x10
mov byte [ebp - 0x3f], 0
movzx eax, byte [ebp - 0x3f]
test eax, eax
je 0x10026a70
push 0x4927
push 0x4bc8
push 0
call fcn.100284b3
add esp, 0xc
mov byte [ebp - 4], 7
lea ecx, [ebp - 0x38c]
call fcn.10015999
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x30c]
call fcn.10015999
push 1
push dword [ebp - 0x20]
push dword [ebp - 0x310]
push dword [ebp - 0x2c8]
lea eax, [ebp - 0x2b4]
push eax
push 0x49e6
push dword [ebp - 0x2f0]
call fcn.1002539b
add esp, 0x1c
push 0x7f57
lea eax, [ebp - 0x124]
push eax
push dword [ebp - 0x20]
push 0
push 0x29c0
push dword [ebp - 0xa0]
call fcn.100295ca
add esp, 0x18
push 1
lea ecx, [ebp - 0x290]
call fcn.10015917
mov dword [ebp - 4], 9
mov dword [ebp - 0x1c], 0xfffffff6
mov dword [ebp - 0x224], 0x54c97515
mov dword [ebp - 0x354], 0x52509e71
mov dword [ebp - 0x350], 0x52509e71
mov dword [ebp - 0x34c], 0x52509e71
mov dword [ebp - 0x348], 0x52509e71
lea ecx, [ebp - 0xb1]
call fcn.10008cf3
push eax
lea eax, [ebp - 0x344]
push eax
lea eax, [ebp - 0x354]
push eax
lea ecx, [ebp - 0x47c]
call fcn.100159c4
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0x3e4]
call fcn.10015973
mov byte [ebp - 4], 0xa
mov dword [ebp - 0x70], 0
jmp 0x10026b73
mov eax, dword [ebp - 0x70]
inc eax
mov dword [ebp - 0x70], eax
cmp dword [ebp - 0x70], 1
jge 0x10026b8f
push dword [ebp - 0x70]
lea ecx, [ebp - 0x290]
call fcn.100159b5
mov dword [eax], 1
jmp 0x10026b6c
mov dword [ebp - 0x1c], 0
jmp 0x10026b9f
mov eax, dword [ebp - 0x1c]
inc eax
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 0
jg 0x10026c34
push 1
lea ecx, [ebp - 0x3a4]
call fcn.10015917
mov byte [ebp - 4], 0xb
mov dword [ebp - 0xa8], 0
jmp 0x10026bd3
mov eax, dword [ebp - 0xa8]
inc eax
mov dword [ebp - 0xa8], eax
cmp dword [ebp - 0xa8], 1
jge 0x10026bf5
push dword [ebp - 0xa8]
lea ecx, [ebp - 0x3a4]
call fcn.100159b5
mov dword [eax], 6
jmp 0x10026bc6
lea eax, [ebp - 0x3a4]
push eax
push 0x2bff
push 0x3859
push 0
push 0x2c0d
lea eax, [ebp - 0x1c]
push eax
lea eax, [ebp - 0x290]
push eax
call fcn.1002b39d
add esp, 0x1c
mov byte [ebp - 4], 0xa
lea ecx, [ebp - 0x3a4]
call fcn.10015999
jmp 0x10026b98
mov dword [ebp - 0x1c], 0
jmp 0x10026c44
mov eax, dword [ebp - 0x1c]
dec eax
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 0
jl 0x10026d1b
mov dword [ebp - 0x1bc], 0x7ef5d870
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0x1bc], eax
mov esi, dword [ebp - 0x1bc]
push dword [ebp - 0x1c]
lea ecx, [ebp - 0x290]
call fcn.100159b5
cmp dword [eax], esi
jne 0x10026c85
mov dword [ebp - 0x27c], 1
jmp 0x10026c8c
and dword [ebp - 0x27c], 0
push dword [ebp - 0x1c]
lea ecx, [ebp - 0x290]
call fcn.100159b5
mov eax, dword [eax]
cmp eax, dword [ebp - 0x27c]
jl 0x10026cb0
mov dword [ebp - 0x1c4], 1
jmp 0x10026cb7
and dword [ebp - 0x1c4], 0
push 0
lea ecx, [ebp - 0x290]
call fcn.100159b5
mov eax, dword [eax]
add eax, dword [ebp - 0x224]
mov ecx, dword [ebp - 0x1c4]
sub ecx, eax
je 0x10026d01
mov dword [ebp - 0x2d0], 4
lea eax, [ebp - 0x2d0]
push eax
lea eax, [ebp - 0x3e4]
push eax
push 0
lea eax, [ebp - 0x224]
push eax
call fcn.1002b082
add esp, 0x10
jmp 0x10026d16
mov dword [ebp - 0x314], 0xf8716b5b
cmp dword [ebp - 0x314], 0
je 0x10026d16
jmp 0x10026d1b
jmp 0x10026c3d
mov byte [ebp - 4], 9
lea ecx, [ebp - 0x3e4]
call fcn.10015999
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x290]
call fcn.10015999
cmp dword [ebp - 0x124], 0
jbe 0x100275d3
mov dword [ebp - 0x2c], 0xab3921de
mov dword [ebp - 0xfc], 0xfffffffd
mov dword [ebp - 0xf8], 0xfffffffd
mov dword [ebp - 0xf4], 0xfffffffd
mov dword [ebp - 0xf0], 0xfffffffd
mov dword [ebp - 0x18], 0x606dc068
mov dword [ebp - 0x38], 0x1e7ff518
mov dword [ebp - 0x74], 0xe70d5dd2
mov dword [ebp - 0x3c], 7
mov dword [ebp - 0xd8], 0xffffffff
mov dword [ebp - 0x3b8], 0xe8ba
mov eax, dword [ebp - 0x2c]
mov dword [ebp - 0x1cc], eax
push 4
pop eax
imul eax, eax, 3
mov ecx, dword [ebp - 0x1cc]
mov dword [ebp + eax - 0xfc], ecx
cmp dword [ebp - 0x1cc], 0
jne 0x10026f87
push 4
pop eax
imul eax, eax, 3
mov eax, dword [ebp + eax - 0xfc]
xor ecx, ecx
sub ecx, dword [ebp - 0x2c]
sub eax, ecx
jne 0x10026df1
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0xfc], 0
mov eax, dword [ebp - 0x2c]
cmp dword [ebp - 0x18], eax
jne 0x10026e05
mov dword [ebp - 0x254], 1
jmp 0x10026e0c
and dword [ebp - 0x254], 0
mov eax, dword [ebp - 0x18]
cmp dword [ebp - 0x254], eax
je 0x10026e23
mov dword [ebp - 0x1d4], 1
jmp 0x10026e2a
and dword [ebp - 0x1d4], 0
mov eax, dword [ebp - 0x18]
cmp dword [ebp - 0x1d4], eax
je 0x10026e4a
mov eax, 0xdb2097e6
test eax, eax
je 0x10026e4a
mov dword [ebp - 0xd0], 1
jmp 0x10026e51
and dword [ebp - 0xd0], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0xd0]
mov dword [ebp + eax - 0xfc], ecx
cmp dword [ebp - 0xd0], 0
jne 0x10026e7d
push 9
pop eax
test eax, eax
jne 0x10026e7d
and dword [ebp - 0x22c], 0
jmp 0x10026e87
mov dword [ebp - 0x22c], 1
mov eax, dword [ebp - 0x2c]
cmp dword [ebp - 0x22c], eax
je 0x10026e9e
mov dword [ebp - 0x12c], 1
jmp 0x10026ea5
and dword [ebp - 0x12c], 0
cmp dword [ebp - 0x12c], 0xe4cf
je 0x10026ebd
mov dword [ebp - 0x138], 1
jmp 0x10026ec4
and dword [ebp - 0x138], 0
mov eax, dword [ebp - 0x38]
cmp dword [ebp - 0x138], eax
jl 0x10026edb
mov dword [ebp - 0x140], 1
jmp 0x10026ee2
and dword [ebp - 0x140], 0
mov eax, dword [ebp - 0x2c]
imul eax, dword [ebp - 0x140]
add eax, 0x6b6ebaff
cmp eax, dword [ebp - 0x38]
jle 0x10026f02
mov dword [ebp - 0x148], 1
jmp 0x10026f09
and dword [ebp - 0x148], 0
cmp dword [ebp - 0x148], 0xffffffff
je 0x10026f2b
push 4
pop eax
imul eax, eax, 3
cmp dword [ebp + eax - 0xfc], 0
jne 0x10026f2b
and dword [ebp - 0x110], 0
jmp 0x10026f35
mov dword [ebp - 0x110], 1
mov eax, dword [ebp - 0x2c]
cmp dword [ebp - 0x110], eax
jle 0x10026f4c
mov dword [ebp - 0x158], 1
jmp 0x10026f53
and dword [ebp - 0x158], 0
cmp dword [ebp - 0x158], 0x4060
jg 0x10026f6b
mov dword [ebp - 0x160], 1
jmp 0x10026f72
and dword [ebp - 0x160], 0
cmp dword [ebp - 0x160], 0xb7dc
jl 0x10026f87
and dword [ebp - 0x168], 0
jmp 0x10026f91
mov dword [ebp - 0x168], 1
mov eax, dword [ebp - 0x18]
cmp dword [ebp - 0x168], eax
je 0x10026fa8
mov dword [ebp - 0x170], 1
jmp 0x10026faf
and dword [ebp - 0x170], 0
mov eax, dword [ebp - 0x18]
cmp dword [ebp - 0x170], eax
jne 0x10026fc6
mov dword [ebp - 0x178], 1
jmp 0x10026fcd
and dword [ebp - 0x178], 0
mov eax, dword [ebp - 0x2c]
cmp dword [ebp - 0x178], eax
jl 0x10026fe4
mov dword [ebp - 0x2d8], 1
jmp 0x10026feb
and dword [ebp - 0x2d8], 0
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x3c0], eax
mov eax, dword [ebp - 0x18]
cmp dword [ebp - 0x38], eax
jge 0x10027008
mov dword [ebp - 0x180], 1
jmp 0x1002700f
and dword [ebp - 0x180], 0
mov eax, dword [ebp - 0x38]
imul eax, dword [ebp - 0x180]
test eax, eax
jne 0x10027036
push 4
pop eax
imul eax, eax, 3
cmp dword [ebp + eax - 0xfc], 0
jne 0x10027036
and dword [ebp - 0x188], 0
jmp 0x10027040
mov dword [ebp - 0x188], 1
mov eax, dword [ebp - 0x188]
add eax, 0x501314d4
cmp eax, dword [ebp - 0x18]
jge 0x1002705c
mov dword [ebp - 0x190], 1
jmp 0x10027063
and dword [ebp - 0x190], 0
mov eax, dword [ebp - 0x38]
cmp dword [ebp - 0x190], eax
jge 0x1002707a
mov dword [ebp - 0x198], 1
jmp 0x10027081
and dword [ebp - 0x198], 0
mov eax, dword [ebp - 0x38]
cmp dword [ebp - 0x198], eax
jl 0x10027098
mov dword [ebp - 0x1a0], 1
jmp 0x1002709f
and dword [ebp - 0x1a0], 0
mov eax, dword [ebp - 0x1a0]
add eax, 3
jne 0x100270c3
push 4
pop eax
imul eax, eax, 3
cmp dword [ebp + eax - 0xfc], 0
jne 0x100270c3
and dword [ebp - 0x1a8], 0
jmp 0x100270cd
mov dword [ebp - 0x1a8], 1
mov eax, dword [ebp - 0x2c]
add eax, dword [ebp - 0x1a8]
cmp eax, dword [ebp - 0x74]
jne 0x100270e7
mov dword [ebp - 0x1b0], 1
jmp 0x100270ee
and dword [ebp - 0x1b0], 0
mov eax, dword [ebp - 0x3c]
cmp dword [ebp - 0x1b0], eax
jg 0x10027105
mov dword [ebp - 0x1b8], 1
jmp 0x1002710c
and dword [ebp - 0x1b8], 0
mov eax, dword [ebp - 0x74]
cmp dword [ebp - 0x1b8], eax
je 0x10027123
mov dword [ebp - 0x1c0], 1
jmp 0x1002712a
and dword [ebp - 0x1c0], 0
mov eax, dword [ebp - 0x74]
cmp dword [ebp - 0x1c0], eax
jne 0x10027141
mov dword [ebp - 0x1c8], 1
jmp 0x10027148
and dword [ebp - 0x1c8], 0
mov eax, dword [ebp - 0x18]
imul eax, dword [ebp - 0x1c8]
test eax, eax
je 0x10027169
push 0xfffffffffffffffd
pop eax
test eax, eax
je 0x10027169
mov dword [ebp - 0x1d0], 1
jmp 0x10027170
and dword [ebp - 0x1d0], 0
mov eax, dword [ebp - 0x1d0]
mov dword [ebp - 0x3c], eax
mov dword [ebp - 0x3c], 0
jmp 0x10027189
mov eax, dword [ebp - 0x3c]
inc eax
mov dword [ebp - 0x3c], eax
cmp dword [ebp - 0x3c], 8
jle 0x100275a7
mov dword [ebp - 0x64], 0xb047c147
mov dword [ebp - 0x4c], 0xed6
mov dword [ebp - 0x60], 0x66c3c348
mov dword [ebp - 0x114], 1
mov dword [ebp - 0x2ac], 0
mov dword [ebp - 0x3b4], 5
mov dword [ebp - 0x3b0], 5
mov dword [ebp - 0x3ac], 5
mov dword [ebp - 0x3a8], 5
mov eax, dword [ebp - 0x2c]
mov dword [ebp - 0x418], eax
cmp dword [ebp - 0x4c], 0
jne 0x10027212
mov eax, dword [ebp - 0xd8]
inc eax
mov dword [ebp - 0xd8], eax
cmp dword [ebp - 0x18], 0
je 0x10027212
mov dword [ebp - 0x1d8], 1
jmp 0x10027219
and dword [ebp - 0x1d8], 0
mov eax, dword [ebp - 0x64]
cmp dword [ebp - 0x74], eax
mov eax, dword [ebp - 0x38]
imul eax, dword [ebp - 0x4c]
cmp eax, 0x2f47d66a
jge 0x10027239
mov dword [ebp - 0x1e0], 1
jmp 0x10027240
and dword [ebp - 0x1e0], 0
mov eax, dword [ebp - 0x1d8]
cmp eax, dword [ebp - 0x1e0]
jg 0x1002725a
mov dword [ebp - 0x1e8], 1
jmp 0x10027261
and dword [ebp - 0x1e8], 0
mov eax, dword [ebp - 0x64]
cmp eax, dword [ebp - 0x1e8]
jg 0x10027278
mov dword [ebp - 0x1f0], 1
jmp 0x1002727f
and dword [ebp - 0x1f0], 0
mov eax, dword [ebp - 0x4c]
imul eax, dword [ebp - 0x1f0]
mov dword [ebp - 0x60], eax
cmp dword [ebp - 0x60], 0
je 0x10027356
mov dword [ebp - 0x340], 0x8949
mov dword [ebp - 0x33c], 0x8949
mov dword [ebp - 0x338], 0x8949
mov dword [ebp - 0x334], 0x8949
lea ecx, [ebp - 0xa9]
call fcn.10008cf3
push eax
lea eax, [ebp - 0x330]
push eax
lea eax, [ebp - 0x340]
push eax
lea ecx, [ebp - 0x484]
call fcn.100159c4
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0x3fc]
call fcn.10015973
mov dword [ebp - 4], 0xc
mov byte [ebp - 0x3d], 0
movzx eax, byte [ebp - 0x3d]
test eax, eax
je 0x1002731a
push 0x4cb2
push 1
push 0x66e3
call fcn.100257d6
add esp, 0xc
push 0x4c44
lea eax, [ebp - 0x60]
push eax
lea eax, [ebp - 0x4c]
push eax
push 0x30d1
push 0
push 0x45d8
lea eax, [ebp - 0x3fc]
push eax
call fcn.10028bc5
add esp, 0x1c
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x3fc]
call fcn.10015999
jmp 0x10027477
mov dword [ebp - 0x7c], 1
mov dword [ebp - 0x2e0], 0xaf445564
cmp dword [ebp - 0x64], 0x3086
jg 0x1002737c
mov dword [ebp - 0x200], 1
jmp 0x10027383
and dword [ebp - 0x200], 0
cmp dword [ebp - 0x4c], 0
jne 0x1002740d
cmp dword [ebp - 0x7c], 0
je 0x100273f1
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x3c8], eax
mov eax, dword [ebp - 0x7c]
mov dword [ebp - 0x438], eax
mov eax, dword [ebp - 0x3c]
mov dword [ebp - 0x3d0], eax
mov eax, dword [ebp - 0x7c]
cmp dword [ebp - 0x4c], eax
jg 0x100273c2
mov dword [ebp - 0x300], 1
jmp 0x100273c9
and dword [ebp - 0x300], 0
mov eax, dword [ebp - 0xd8]
mov dword [ebp - 0x420], eax
mov eax, dword [ebp - 0x114]
neg eax
je 0x100273f1
cmp dword [ebp - 0x64], 0
je 0x100273f1
mov dword [ebp - 0x1f8], 1
jmp 0x100273f8
and dword [ebp - 0x1f8], 0
cmp dword [ebp - 0x1f8], 0xb5f43e01
jne 0x1002740d
and dword [ebp - 0x208], 0
jmp 0x10027417
mov dword [ebp - 0x208], 1
mov eax, dword [ebp - 0x200]
sub eax, dword [ebp - 0x208]
jne 0x10027443
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0xfc], 0
jne 0x10027443
cmp dword [ebp - 0x7c], 0
jne 0x10027443
and dword [ebp - 0x210], 0
jmp 0x1002744d
mov dword [ebp - 0x210], 1
mov eax, dword [ebp - 0x60]
cmp dword [ebp - 0x210], eax
jle 0x10027464
mov dword [ebp - 0x218], 1
jmp 0x1002746b
and dword [ebp - 0x218], 0
mov eax, dword [ebp - 0x218]
mov dword [ebp - 0x2e0], eax
cmp dword [ebp - 0x60], 0
je 0x10027483
cmp dword [ebp - 0x4c], 0
jne 0x10027495
mov eax, 0xf66f
test eax, eax
jne 0x10027495
and dword [ebp - 0x220], 0
jmp 0x1002749f
mov dword [ebp - 0x220], 1
cmp dword [ebp - 0x220], 0xfb7a
jg 0x100274c3
cmp dword [ebp - 0x3c], 0
je 0x100274c3
cmp dword [ebp - 0x38], 0
je 0x100274c3
mov dword [ebp - 0x228], 1
jmp 0x100274ca
and dword [ebp - 0x228], 0
mov eax, dword [ebp - 0x64]
cmp eax, dword [ebp - 0x228]
jne 0x100274e1
mov dword [ebp - 0xe0], 1
jmp 0x100274e8
and dword [ebp - 0xe0], 0
push 4
pop eax
imul eax, eax, 3
mov ecx, dword [ebp - 0xe0]
mov dword [ebp + eax - 0xfc], ecx
mov eax, dword [ebp - 0x2ac]
cmp dword [ebp - 0xe0], eax
jge 0x10027515
mov dword [ebp - 0x230], 1
jmp 0x1002751c
and dword [ebp - 0x230], 0
cmp dword [ebp - 0x230], 8
jge 0x10027531
mov dword [ebp - 0x238], 1
jmp 0x10027538
and dword [ebp - 0x238], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x3b4]
cmp dword [ebp - 0x238], eax
je 0x10027559
mov dword [ebp - 0x240], 1
jmp 0x10027560
and dword [ebp - 0x240], 0
mov eax, dword [ebp - 0x18]
add eax, 0x8280
cmp eax, dword [ebp - 0x240]
jne 0x10027589
push 4
pop eax
imul eax, eax, 3
cmp dword [ebp + eax - 0xfc], 0
jne 0x10027589
and dword [ebp - 0x11c], 0
jmp 0x10027593
mov dword [ebp - 0x11c], 1
mov eax, dword [ebp - 0x114]
add eax, dword [ebp - 0x11c]
mov dword [ebp - 0x60], eax
jmp 0x10027182
lea eax, [ebp - 0x3d8]
push eax
push dword [ebp - 0x2b4]
push dword [ebp - 0x124]
mov eax, dword [ebp - 0x20]
push dword [eax + 8]
push 0x9fac
push 0x88e0
call fcn.1002310d
pop ecx
pop ecx
call eax
jmp 0x10025e6d
jmp 0x10027637
mov eax, dword [ebp + 0xc]
mov dword [ebp - 0x2bc], eax
mov eax, dword [ebp + 0x10]
mov dword [ebp - 0x2c4], eax
mov eax, dword [ebp - 0x2bc]
mov dword [ebp - 0x68], eax
mov eax, dword [ebp - 0x2c4]
mov dword [ebp - 0x2a8], eax
mov eax, dword [ebp - 0x68]
mov dword [eax], 0
jmp 0x10027617
mov eax, dword [ebp - 0x68]
mov eax, dword [eax]
inc eax
mov ecx, dword [ebp - 0x68]
mov dword [ecx], eax
mov eax, dword [ebp - 0x68]
cmp dword [eax], 2
jge 0x10027637
mov eax, dword [ebp - 0x68]
push dword [eax]
mov ecx, dword [ebp - 0x2a8]
call fcn.100159b5
mov dword [eax], 0xfffffffb
jmp 0x1002760c
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
mov esp, ebp
pop ebp
ret