Function at 0x1002b48d
Capabilities:
Get file system object information

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x10070443
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
mov eax, 0x1384
call fcn.1006b100
push esi
push edi
movzx eax, byte [ebp + 8]
test eax, eax
je 0x1002f8b2
mov eax, dword [ebp + 0xc]
mov dword [ebp - 0x634], eax
mov eax, dword [ebp + 0x14]
mov dword [ebp - 0x61c], eax
mov eax, dword [ebp + 0x18]
mov dword [ebp - 0x62c], eax
lea eax, [ebp + 0x1c]
mov dword [ebp - 0x63c], eax
mov eax, dword [ebp + 0x20]
mov dword [ebp - 0x624], eax
mov eax, dword [ebp + 0x24]
mov dword [ebp - 0x5fc], eax
mov eax, dword [ebp + 0x10]
mov dword [ebp - 0x5f4], eax
mov eax, dword [ebp - 0x63c]
movzx eax, byte [eax]
test eax, eax
je 0x1002b583
mov eax, dword [ebp - 0x5f4]
mov dword [ebp - 0x604], eax
mov eax, dword [ebp - 0x5fc]
mov dword [ebp - 0x60c], eax
mov eax, dword [ebp - 0x604]
mov dword [ebp - 0x100], eax
mov eax, dword [ebp - 0x60c]
mov dword [ebp - 0x614], eax
mov eax, dword [ebp - 0x100]
mov dword [eax], 0
jmp 0x1002b558
mov eax, dword [ebp - 0x100]
mov eax, dword [eax]
inc eax
mov ecx, dword [ebp - 0x100]
mov dword [ecx], eax
mov eax, dword [ebp - 0x100]
cmp dword [eax], 1
jge 0x1002b57e
mov eax, dword [ebp - 0x100]
push dword [eax]
mov ecx, dword [ebp - 0x614]
call fcn.100114b6
mov dword [eax], 0xfffffff7
jmp 0x1002b547
jmp 0x1002f8ad
mov eax, dword [ebp - 0x61c]
mov dword [ebp - 0x55c], eax
mov eax, dword [ebp - 0x624]
mov dword [ebp - 0x574], eax
mov eax, dword [ebp - 0x62c]
mov dword [ebp - 0x450], eax
mov eax, dword [ebp - 0x634]
mov dword [ebp - 0x1d8], eax
mov eax, dword [ebp - 0x55c]
mov eax, dword [eax + 0x38]
mov dword [ebp - 0x1d0], eax
mov dword [ebp - 0x50], 0xfffffffa
mov dword [ebp - 0x50], 0
jmp 0x1002b5d9
mov eax, dword [ebp - 0x50]
dec eax
mov dword [ebp - 0x50], eax
cmp dword [ebp - 0x50], 0xfffffffe
jne 0x1002b868
push 2
lea ecx, [ebp - 0x840]
call fcn.10011475
and dword [ebp - 4], 0
mov dword [ebp - 0xf0], 1
lea eax, [ebp - 0x840]
push eax
push 0x3fc5
push 0
lea eax, [ebp - 0x7b0]
push eax
call fcn.1003477c
add esp, 0x10
mov dword [ebp - 0x644], 0x163b
cmp dword [ebp - 0x644], 0x899
jge 0x1002b7f3
push 0x1254d11c
push 0x10009d04
call fcn.10055d2e
pop ecx
pop ecx
and dword [ebp - 0x18c], 0
jmp 0x1002b65c
mov eax, dword [ebp - 0x18c]
inc eax
mov dword [ebp - 0x18c], eax
mov eax, dword [ebp - 0x18c]
cmp eax, dword [0x1254d11c]
jge 0x1002b685
imul eax, dword [ebp - 0x18c], 0x3c
add eax, 0x124ead38
push eax
push 0x10009df0
call fcn.10055d2e
pop ecx
pop ecx
jmp 0x1002b64f
and dword [ebp - 0x74], 0
mov dword [ebp - 0xe8], 0x31
jmp 0x1002b6a2
mov eax, dword [ebp - 0xe8]
dec eax
mov dword [ebp - 0xe8], eax
cmp dword [ebp - 0xe8], 0
jl 0x1002b719
and dword [ebp - 0x12c], 0
jmp 0x1002b6c1
mov eax, dword [ebp - 0x12c]
inc eax
mov dword [ebp - 0x12c], eax
mov eax, dword [ebp - 0x12c]
cmp eax, dword [0x1254d11c]
jge 0x1002b6f0
imul eax, dword [ebp - 0x12c], 0x3c
mov ecx, dword [ebp - 0xe8]
movsx eax, byte [eax + ecx + 0x124ead38]
mov ecx, dword [ebp - 0x74]
lea eax, [ecx + eax - 0x30]
mov dword [ebp - 0x74], eax
jmp 0x1002b6b4
mov eax, dword [ebp - 0x74]
cdq
push 0xa
pop ecx
idiv ecx
add edx, 0x30
mov eax, dword [ebp - 0xe8]
mov byte [eax + 0x12d272e0], dl
mov eax, dword [ebp - 0x74]
cdq
push 0xa
pop ecx
idiv ecx
mov dword [ebp - 0x74], eax
jmp 0x1002b695
cmp dword [ebp - 0x74], 0
jne 0x1002b76a
and dword [ebp - 0x194], 0
jmp 0x1002b735
mov eax, dword [ebp - 0x194]
inc eax
mov dword [ebp - 0x194], eax
cmp dword [ebp - 0x194], 0xa
jge 0x1002b75a
mov eax, dword [ebp - 0x194]
movsx eax, byte [eax + 0x12d272e0]
push eax
push 0x1000a000
call fcn.100558e6
pop ecx
pop ecx
jmp 0x1002b728
push 0x10009905
call fcn.10057e5c
pop ecx
jmp 0x1002b7f3
mov ecx, dword [ebp - 0x74]
call fcn.1004eb25
addsd xmm0, qword [0x1000a280]
cvttsd2si eax, xmm0
mov dword [ebp - 0x110], eax
push dword [ebp - 0x74]
push 0x10009d04
call fcn.100558e6
pop ecx
pop ecx
mov eax, dword [ebp - 0x110]
inc eax
mov dword [ebp - 0x110], eax
and dword [ebp - 0x1b4], 0
jmp 0x1002b7c3
mov eax, dword [ebp - 0x1b4]
inc eax
mov dword [ebp - 0x1b4], eax
mov eax, dword [ebp - 0x110]
inc eax
mov dword [ebp - 0x110], eax
cmp dword [ebp - 0x110], 0xa
jg 0x1002b7e8
mov eax, dword [ebp - 0x1b4]
movsx eax, byte [eax + 0x12d272e0]
push eax
push 0x1000a000
call fcn.100558e6
pop ecx
pop ecx
jmp 0x1002b7a9
push 0x10009905
call fcn.10057e5c
pop ecx
mov dword [ebp - 0xf0], 0
jmp 0x1002b80c
mov eax, dword [ebp - 0xf0]
inc eax
mov dword [ebp - 0xf0], eax
cmp dword [ebp - 0xf0], 1
jg 0x1002b839
mov byte [ebp - 0x95], 0
push 0x483
push 0x3779
lea eax, [ebp - 0x95]
push eax
push 0
call fcn.1002fe24
add esp, 0x10
jmp 0x1002b7ff
push 0x1882
push 0
push 0x2f9b
lea eax, [ebp - 0xf0]
push eax
call fcn.1002fd56
add esp, 0x10
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x840]
call fcn.100114b1
jmp 0x1002b5d2
mov dword [ebp - 0x50], 0
jmp 0x1002b878
mov eax, dword [ebp - 0x50]
dec eax
mov dword [ebp - 0x50], eax
cmp dword [ebp - 0x50], 0xffffffea
jl 0x1002b8f8
mov dword [ebp - 0x64c], 0x98f01ba0
mov dword [ebp - 0x134], 0
jmp 0x1002b8a1
mov eax, dword [ebp - 0x134]
inc eax
mov dword [ebp - 0x134], eax
cmp dword [ebp - 0x134], 2
jge 0x1002b8bd
mov eax, dword [ebp - 0x134]
mov dword [ebp + eax*4 - 0x7d8], 0x3617
jmp 0x1002b894
push 4
pop eax
shl eax, 0
mov dword [ebp + eax - 0x7d8], 0xfffffff7
cmp dword [ebp - 0x50], 0xfffffff7
jg 0x1002b8e0
mov dword [ebp - 0x2c8], 1
jmp 0x1002b8e7
and dword [ebp - 0x2c8], 0
mov eax, dword [ebp - 0x2c8]
mov dword [ebp - 0x64c], eax
jmp 0x1002b871
mov dword [ebp - 0x19c], 3
mov dword [ebp - 0x19c], 0x13
jmp 0x1002b91b
mov eax, dword [ebp - 0x19c]
dec eax
mov dword [ebp - 0x19c], eax
cmp dword [ebp - 0x19c], 0xffffffed
je 0x1002b958
mov dword [ebp - 0x654], 4
mov byte [ebp - 0xb5], 0
lea eax, [ebp - 0xb5]
push eax
push 0x5e25
push 0
call fcn.10030d71
add esp, 0xc
cmp dword [ebp - 0x654], 0
je 0x1002b956
jmp 0x1002b958
jmp 0x1002b90e
mov dword [ebp - 0x60], 0xfffffffa
mov dword [ebp - 0x7c], 0xffffffff
mov dword [ebp - 0x1a4], 0
jmp 0x1002b97f
mov eax, dword [ebp - 0x1a4]
inc eax
mov dword [ebp - 0x1a4], eax
cmp dword [ebp - 0x1a4], 2
jge 0x1002b99b
mov eax, dword [ebp - 0x1a4]
mov dword [ebp + eax*4 - 0x7fc], 0xfffffff6
jmp 0x1002b972
mov dword [ebp - 0x7c], 0
jmp 0x1002b9ab
mov eax, dword [ebp - 0x7c]
inc eax
mov dword [ebp - 0x7c], eax
cmp dword [ebp - 0x7c], 1
jg 0x1002ba30
mov dword [ebp - 0x108], 0xfffffffd
mov dword [ebp - 0x76c], 0x272
mov dword [ebp - 0x768], 0x272
mov dword [ebp - 0x764], 0x272
mov dword [ebp - 0x760], 0x272
mov dword [ebp - 0x108], 1
jmp 0x1002b9fc
mov eax, dword [ebp - 0x108]
dec eax
mov dword [ebp - 0x108], eax
cmp dword [ebp - 0x108], 0
jl 0x1002ba19
mov eax, dword [ebp - 0x108]
cmp dword [ebp + eax*4 - 0x7fc], 0
je 0x1002ba17
jmp 0x1002ba19
jmp 0x1002b9ef
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x76c], 0
je 0x1002ba2b
jmp 0x1002ba30
jmp 0x1002b9a4
mov dword [ebp - 0x7c], 1
jmp 0x1002ba40
mov eax, dword [ebp - 0x7c]
dec eax
mov dword [ebp - 0x7c], eax
cmp dword [ebp - 0x7c], 0
jl 0x1002ba80
mov byte [ebp - 0x8d], 0
push 0x7f14
push 0x1cc1
push 0x7c8c
lea eax, [ebp - 0x8d]
push eax
push 0xc8b
push 0
push 0
push 0x503d
push 0x71d7
call fcn.1002fba2
add esp, 0x24
jmp 0x1002ba39
mov dword [ebp - 0x60], 0
jmp 0x1002ba90
mov eax, dword [ebp - 0x60]
dec eax
mov dword [ebp - 0x60], eax
cmp dword [ebp - 0x60], 0xfffffffe
jne 0x1002cd98
push 4
lea ecx, [ebp - 0x53c]
call fcn.10011475
mov dword [ebp - 4], 1
mov dword [ebp - 0x1c], 0
lea eax, [ebp - 0x7c4]
push eax
lea eax, [ebp - 0x53c]
push eax
push 0
push 0x45b8
call fcn.10046c84
add esp, 0x10
mov dword [ebp - 0x1c], 0
jmp 0x1002bae2
mov eax, dword [ebp - 0x1c]
inc eax
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 3
jg 0x1002bb15
mov dword [ebp - 0x65c], 0xffffffff
lea eax, [ebp - 0x1c]
push eax
lea eax, [ebp - 0x53c]
push eax
lea eax, [ebp - 0x65c]
push eax
push 0x7095
push 0
call fcn.100313db
add esp, 0x14
jmp 0x1002badb
push 1
lea ecx, [ebp - 0x53c]
call fcn.100114b6
mov esi, dword [eax]
sub esi, 0x657e
push 1
lea ecx, [ebp - 0x53c]
call fcn.100114b6
cmp esi, dword [eax]
je 0x1002bb4a
cmp dword [ebp - 0x1c], 0
jne 0x1002bb4a
and dword [ebp - 0x4a0], 0
jmp 0x1002bb54
mov dword [ebp - 0x4a0], 1
mov eax, dword [ebp - 0x1c]
sub eax, dword [ebp - 0x4a0]
cmp eax, 0xfffffff7
jb 0x1002bb6e
mov dword [ebp - 0x4a8], 1
jmp 0x1002bb75
and dword [ebp - 0x4a8], 0
mov eax, dword [ebp - 0x1c]
cmp dword [ebp - 0x4a8], eax
jge 0x1002bb8c
mov dword [ebp - 0x4d8], 1
jmp 0x1002bb93
and dword [ebp - 0x4d8], 0
mov eax, dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 0
jge 0x1002bba8
mov dword [ebp - 0x4ec], 1
jmp 0x1002bbaf
and dword [ebp - 0x4ec], 0
push 2
lea ecx, [ebp - 0x53c]
call fcn.100114b6
mov eax, dword [eax]
cmp eax, dword [ebp - 0x4ec]
jge 0x1002bbd2
mov dword [ebp - 0x4e0], 1
jmp 0x1002bbd9
and dword [ebp - 0x4e0], 0
mov eax, dword [ebp - 0x1c]
cmp dword [ebp - 0x4e0], eax
jle 0x1002bbf0
mov dword [ebp - 0x244], 1
jmp 0x1002bbf7
and dword [ebp - 0x244], 0
mov eax, dword [ebp - 0x1c]
imul eax, dword [ebp - 0x244]
cmp eax, 0x70e7ad53
je 0x1002bc14
mov dword [ebp - 0x498], 1
jmp 0x1002bc1b
and dword [ebp - 0x498], 0
mov eax, dword [ebp - 0x1c]
imul eax, dword [ebp - 0x498]
mov dword [ebp - 0x1c], eax
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x53c]
call fcn.100114b1
push 2
lea ecx, [ebp - 0x850]
call fcn.10011475
mov dword [ebp - 4], 2
mov dword [ebp - 0xec], 1
mov dword [ebp - 0x3c], 0xffffffff
mov dword [ebp - 0x6bc], 0x1b45
cmp dword [ebp - 0x6bc], 0x136a
jge 0x1002be2a
and dword [ebp - 0xf8], 0
and dword [ebp - 0x118], 0
lea eax, [ebp - 0x118]
push eax
lea eax, [ebp - 0xf8]
push eax
push 0x10009df8
call fcn.10055d2e
add esp, 0xc
lea ecx, [ebp - 0x8a4]
call fcn.1004db4d
mov byte [ebp - 4], 3
and dword [ebp - 0x240], 0
and dword [ebp - 0x224], 0
jmp 0x1002bccb
mov eax, dword [ebp - 0x224]
inc eax
mov dword [ebp - 0x224], eax
mov eax, dword [ebp - 0x224]
cmp eax, dword [ebp - 0xf8]
jge 0x1002bd1c
lea eax, [ebp - 0x240]
push eax
push 0x10009d04
call fcn.10055d2e
pop ecx
pop ecx
mov eax, dword [ebp - 0x240]
dec eax
je 0x1002bcfb
mov byte [ebp - 0x35], 1
jmp 0x1002bcff
mov byte [ebp - 0x35], 0
mov al, byte [ebp - 0x35]
mov byte [ebp - 0xbf], al
lea eax, [ebp - 0xbf]
push eax
lea ecx, [ebp - 0x8a4]
call fcn.1004db77
jmp 0x1002bcbe
and dword [ebp - 0x1bc], 0
and dword [ebp - 0x13c], 0
jmp 0x1002bd39
mov eax, dword [ebp - 0x13c]
inc eax
mov dword [ebp - 0x13c], eax
mov eax, dword [ebp - 0x13c]
cmp eax, dword [ebp - 0x118]
jge 0x1002be09
and dword [ebp - 0xc8], 0
mov eax, dword [ebp - 0x13c]
mov dword [ebp - 0x178], eax
jmp 0x1002bd72
mov eax, dword [ebp - 0x178]
add eax, dword [ebp - 0x118]
mov dword [ebp - 0x178], eax
mov eax, dword [ebp - 0x178]
cmp eax, dword [ebp - 0xf8]
jge 0x1002bdb0
push dword [ebp - 0x178]
lea eax, [ebp - 0x918]
push eax
lea ecx, [ebp - 0x8a4]
call fcn.100235eb
mov ecx, eax
call fcn.1002362f
movzx eax, al
add eax, dword [ebp - 0xc8]
mov dword [ebp - 0xc8], eax
jmp 0x1002bd60
mov eax, dword [ebp - 0xf8]
cdq
idiv dword [ebp - 0x118]
sub eax, dword [ebp - 0xc8]
cmp dword [ebp - 0xc8], eax
jge 0x1002bdd9
mov eax, dword [ebp - 0xc8]
mov dword [ebp - 0x4c0], eax
jmp 0x1002bdf2
mov eax, dword [ebp - 0xf8]
cdq
idiv dword [ebp - 0x118]
sub eax, dword [ebp - 0xc8]
mov dword [ebp - 0x4c0], eax
mov eax, dword [ebp - 0x1bc]
add eax, dword [ebp - 0x4c0]
mov dword [ebp - 0x1bc], eax
jmp 0x1002bd2c
push dword [ebp - 0x1bc]
push 0x10009d18
call fcn.100558e6
pop ecx
pop ecx
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x8a4]
call fcn.100235cb
push 2
lea ecx, [ebp - 0x504]
call fcn.10011475
mov byte [ebp - 4], 4
mov dword [ebp - 0xd4], 0x2d714f98
mov dword [ebp - 0x274], 0x33ee
mov dword [ebp - 0x1ec], 0xfffffffd
lea eax, [ebp - 0x504]
push eax
lea eax, [ebp - 0xdc]
push eax
push 0
call fcn.10030253
add esp, 0xc
mov dword [ebp - 0xdc], 0
jmp 0x1002be8a
mov eax, dword [ebp - 0xdc]
inc eax
mov dword [ebp - 0xdc], eax
cmp dword [ebp - 0xdc], 2
jge 0x1002bea6
mov eax, dword [ebp - 0xdc]
mov dword [ebp + eax*4 - 0x4b4], 0xd4e70302
jmp 0x1002be7d
mov dword [ebp - 0x3c], 0xffffffff
mov esi, dword [ebp - 0x3c]
push 0
lea ecx, [ebp - 0x504]
call fcn.100114b6
cmp esi, dword [eax]
je 0x1002becd
mov dword [ebp - 0x25c], 1
jmp 0x1002bed4
and dword [ebp - 0x25c], 0
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x4b4], 0x6c31
jne 0x1002bef3
mov dword [ebp - 0x24c], 1
jmp 0x1002befa
and dword [ebp - 0x24c], 0
mov eax, dword [ebp - 0x24c]
sub eax, dword [ebp - 0xd4]
cmp eax, 1
ja 0x1002bf17
mov dword [ebp - 0x3ac], 1
jmp 0x1002bf1e
and dword [ebp - 0x3ac], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x4b4]
cmp dword [ebp - 0x3ac], eax
je 0x1002bf48
mov eax, 0x85b6478c
test eax, eax
je 0x1002bf48
mov dword [ebp - 0x254], 1
jmp 0x1002bf4f
and dword [ebp - 0x254], 0
cmp dword [ebp - 0x254], 6
jg 0x1002bf64
mov dword [ebp - 0x45c], 1
jmp 0x1002bf6b
and dword [ebp - 0x45c], 0
cmp dword [ebp - 0x45c], 4
ja 0x1002bf80
mov dword [ebp - 0x3b4], 1
jmp 0x1002bf87
and dword [ebp - 0x3b4], 0
mov eax, dword [ebp - 0x25c]
cmp eax, dword [ebp - 0x3b4]
jle 0x1002bfa1
mov dword [ebp - 0x264], 1
jmp 0x1002bfa8
and dword [ebp - 0x264], 0
push 0
lea ecx, [ebp - 0x504]
call fcn.100114b6
mov ecx, dword [ebp - 0x264]
cmp ecx, dword [eax]
jne 0x1002c15d
mov dword [ebp - 0x284], 0xe6fc
mov dword [ebp - 0x5ec], 0xfffb
mov dword [ebp - 0x3c], 0
jmp 0x1002bfe7
mov eax, dword [ebp - 0x3c]
inc eax
mov dword [ebp - 0x3c], eax
cmp dword [ebp - 0x3c], 1
jg 0x1002c01b
push 0
lea eax, [ebp - 0xd4]
push eax
push 0x6463
push 0x3b1c
push 0x7e0f
push 1
push 0x2449
push 0xec3
call fcn.1002aba9
add esp, 0x20
jmp 0x1002bfe0
cmp dword [ebp - 0x284], 0
je 0x1002c030
mov dword [ebp - 0x4b8], 1
jmp 0x1002c037
and dword [ebp - 0x4b8], 0
mov eax, dword [ebp - 0x274]
cmp dword [ebp - 0x4b8], eax
je 0x1002c051
mov dword [ebp - 0x26c], 1
jmp 0x1002c058
and dword [ebp - 0x26c], 0
cmp dword [ebp - 0x26c], 0xfffffffc
je 0x1002c07a
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x4b4], 0
jne 0x1002c07a
and dword [ebp - 0x3bc], 0
jmp 0x1002c084
mov dword [ebp - 0x3bc], 1
mov eax, dword [ebp - 0x3bc]
mov dword [ebp - 0x1ec], eax
mov eax, dword [ebp - 0x1ec]
add eax, 0xea3d
je 0x1002c0b2
cmp dword [ebp - 0x1ec], 0
je 0x1002c0b2
mov dword [ebp - 0x27c], 1
jmp 0x1002c0b9
and dword [ebp - 0x27c], 0
mov eax, dword [ebp - 0x274]
mov dword [ebp - 0x464], eax
push 0
lea ecx, [ebp - 0x504]
call fcn.100114b6
mov ecx, dword [ebp - 0x464]
mov dword [eax], ecx
mov eax, dword [ebp - 0x464]
cmp eax, dword [ebp - 0x27c]
jle 0x1002c0f4
mov dword [ebp - 0x3c4], 1
jmp 0x1002c0fb
and dword [ebp - 0x3c4], 0
cmp dword [ebp - 0x3c4], 0x7f28
je 0x1002c113
mov dword [ebp - 0x688], 1
jmp 0x1002c11a
and dword [ebp - 0x688], 0
mov eax, dword [ebp - 0x284]
mov dword [ebp - 0x804], eax
push 0
lea ecx, [ebp - 0x504]
call fcn.100114b6
mov eax, dword [eax]
neg eax
jne 0x1002c145
mov dword [ebp - 0x4c8], 1
jmp 0x1002c14c
and dword [ebp - 0x4c8], 0
mov eax, dword [ebp - 0x4c8]
mov dword [ebp - 0x5ec], eax
jmp 0x1002c289
mov dword [ebp - 0x1c4], 0xffff
mov dword [ebp - 0xd4], 0xffffffec
jmp 0x1002c180
mov eax, dword [ebp - 0xd4]
inc eax
mov dword [ebp - 0xd4], eax
cmp dword [ebp - 0xd4], 1
jne 0x1002c289
mov dword [ebp - 0x3c], 1
jmp 0x1002c19d
mov eax, dword [ebp - 0x3c]
dec eax
mov dword [ebp - 0x3c], eax
cmp dword [ebp - 0x3c], 0
jl 0x1002c284
mov eax, dword [ebp - 0x3c]
cmp dword [ebp + eax*4 - 0x4b4], 0
je 0x1002c1c9
cmp dword [ebp - 0x1c4], 0
je 0x1002c1c9
mov dword [ebp - 0x28c], 1
jmp 0x1002c1d0
and dword [ebp - 0x28c], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x4b4]
mov dword [ebp - 0x7cc], eax
xor eax, eax
inc eax
cmp eax, 0x7203fca5
je 0x1002c1f9
mov dword [ebp - 0x3cc], 1
jmp 0x1002c200
and dword [ebp - 0x3cc], 0
mov eax, dword [ebp - 0x28c]
cmp eax, dword [ebp - 0x3cc]
jne 0x1002c21a
mov dword [ebp - 0x294], 1
jmp 0x1002c221
and dword [ebp - 0x294], 0
cmp dword [ebp - 0x294], 4
jle 0x1002c236
mov dword [ebp - 0x46c], 1
jmp 0x1002c23d
and dword [ebp - 0x46c], 0
mov eax, 0x461
sub eax, dword [ebp - 0x46c]
cmp eax, dword [ebp - 0x1c4]
je 0x1002c25c
mov dword [ebp - 0x29c], 1
jmp 0x1002c263
and dword [ebp - 0x29c], 0
mov esi, dword [ebp - 0x1c4]
imul esi, dword [ebp - 0x29c]
push 0
lea ecx, [ebp - 0x504]
call fcn.100114b6
mov dword [eax], esi
jmp 0x1002c196
jmp 0x1002c173
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x504]
call fcn.100114b1
push 1
lea ecx, [ebp - 0x524]
call fcn.10011475
mov byte [ebp - 4], 5
mov dword [ebp - 0x2ac], 8
mov dword [ebp - 0x150], 0x6c9cd49f
lea eax, [ebp - 0xe0]
push eax
lea eax, [ebp - 0x524]
push eax
push 0
call fcn.1002fdaf
add esp, 0xc
mov dword [ebp - 0xe0], 0
jmp 0x1002c2ee
mov eax, dword [ebp - 0xe0]
inc eax
mov dword [ebp - 0xe0], eax
cmp dword [ebp - 0xe0], 2
jge 0x1002c30a
mov eax, dword [ebp - 0xe0]
mov dword [ebp + eax*4 - 0x518], 0xffffffff
jmp 0x1002c2e1
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x518]
mov dword [ebp - 0x150], eax
mov eax, dword [ebp - 0x150]
mov dword [ebp - 0x800], eax
push 0
lea ecx, [ebp - 0x524]
call fcn.100114b6
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x518], 0xfffffffe
je 0x1002c356
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x518], 0
je 0x1002c374
push 0
lea ecx, [ebp - 0x524]
call fcn.100114b6
cmp dword [eax], 0
je 0x1002c374
mov dword [ebp - 0x3d4], 1
jmp 0x1002c37b
and dword [ebp - 0x3d4], 0
imul eax, dword [ebp - 0x3d4], 0
test eax, eax
jne 0x1002c398
cmp dword [ebp - 0x150], 0
jne 0x1002c398
and dword [ebp - 0x2a4], 0
jmp 0x1002c3a2
mov dword [ebp - 0x2a4], 1
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x518]
cmp dword [ebp - 0x2a4], eax
jge 0x1002c3c9
mov eax, 0x4f6cbcb1
test eax, eax
jne 0x1002c3c9
and dword [ebp - 0x4d0], 0
jmp 0x1002c3d3
mov dword [ebp - 0x4d0], 1
push 0
lea ecx, [ebp - 0x524]
call fcn.100114b6
mov ecx, dword [ebp - 0x2ac]
imul ecx, dword [ebp - 0x4d0]
imul ecx, dword [ebp - 0x2ac]
cmp dword [eax], ecx
jle 0x1002c41b
mov byte [ebp - 0xbd], 0
movzx eax, byte [ebp - 0xbd]
test eax, eax
je 0x1002c419
push 0
push 0x2517
push 0
call dword [sym.imp.ADVAPI32.dll_ControlService]
jmp 0x1002c43f
push 0x72a
push 0
push 0
lea eax, [ebp - 0x524]
push eax
lea eax, [ebp - 0x150]
push eax
push 0x7fa0
call fcn.1002aa42
add esp, 0x18
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x524]
call fcn.100114b1
lea eax, [ebp - 0x810]
push eax
lea eax, [ebp - 0x850]
push eax
push 0x1cb5
push 0
call fcn.10046ba7
add esp, 0x10
mov dword [ebp - 0xec], 0
jmp 0x1002c484
mov eax, dword [ebp - 0xec]
inc eax
mov dword [ebp - 0xec], eax
cmp dword [ebp - 0xec], 1
jg 0x1002c6d7
mov dword [ebp - 0x474], 0x94b4b132
mov dword [ebp - 0x3e4], 0x5e49
mov dword [ebp - 0x628], 0x1311e2db
mov dword [ebp - 0x568], 0xd4856cd8
mov dword [ebp - 0x2b4], 0xfffffff9
mov dword [ebp - 0x2c4], 7
mov dword [ebp - 0x3dc], 0xffffffff
push 2
lea ecx, [ebp - 0x530]
call fcn.10011475
mov byte [ebp - 4], 6
mov dword [ebp - 0x6a8], 0xffffffff
mov dword [ebp - 0x190], 0
jmp 0x1002c50b
mov eax, dword [ebp - 0x190]
inc eax
mov dword [ebp - 0x190], eax
cmp dword [ebp - 0x190], 2
jge 0x1002c52d
push dword [ebp - 0x190]
lea ecx, [ebp - 0x530]
call fcn.100114b6
mov dword [eax], 0x6b2c4eb0
jmp 0x1002c4fe
lea eax, [ebp - 0x2c4]
push eax
push 0x4e3
lea eax, [ebp - 0x530]
push eax
lea eax, [ebp - 0x568]
push eax
push 0x15d
lea eax, [ebp - 0x628]
push eax
lea eax, [ebp - 0x474]
push eax
lea eax, [ebp - 0x3dc]
push eax
lea eax, [ebp - 0x3e4]
push eax
push 0x2c2c
push 0x1150
lea eax, [ebp - 0x2b4]
push eax
push 0
call fcn.10030309
add esp, 0x34
mov eax, dword [ebp - 0x3dc]
mov dword [ebp - 0x808], eax
cmp dword [ebp - 0x2b4], 0xfff6
jne 0x1002c5a7
mov dword [ebp - 0x2bc], 1
jmp 0x1002c5ae
and dword [ebp - 0x2bc], 0
mov eax, dword [ebp - 0x474]
cmp eax, dword [ebp - 0x2bc]
je 0x1002c5c8
mov dword [ebp - 0x570], 1
jmp 0x1002c5cf
and dword [ebp - 0x570], 0
push 1
lea ecx, [ebp - 0x530]
call fcn.100114b6
push 0
lea ecx, [ebp - 0x530]
call fcn.100114b6
push 0
lea ecx, [ebp - 0x530]
call fcn.100114b6
cmp dword [ebp - 0x3e4], 0
jne 0x1002c611
cmp dword [ebp - 0x2c4], 0
jne 0x1002c611
and dword [ebp - 0x4c4], 0
jmp 0x1002c61b
mov dword [ebp - 0x4c4], 1
mov eax, dword [ebp - 0x4c4]
mov dword [ebp - 0x6a8], eax
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x530]
call fcn.100114b1
mov byte [ebp - 0x9d], 0
mov dword [ebp - 0x158], 3
mov dword [ebp - 0x158], 0x13
jmp 0x1002c660
mov eax, dword [ebp - 0x158]
dec eax
mov dword [ebp - 0x158], eax
cmp dword [ebp - 0x158], 0xffffffed
je 0x1002c6a3
mov dword [ebp - 0x578], 4
push 0x7be2
push 0x2253
push 0
push 0x2fa9
push 0x4ec1
push 0x5e2e
call fcn.10045894
add esp, 0x18
cmp dword [ebp - 0x578], 0
je 0x1002c6a1
jmp 0x1002c6a3
jmp 0x1002c653
push 0
push 0x42bc
push 0x204e
push 0x5f83
lea eax, [ebp - 0x9d]
push eax
push 0x6843
push 0x610b
push 0x74a1
call fcn.1002ff52
add esp, 0x20
jmp 0x1002c477
mov dword [ebp - 0x14], 0xa3fc4b03
mov dword [ebp - 0x18], 0xfffffff6
mov dword [ebp - 0x2f4], 1
mov dword [ebp - 0x590], 0xffffffff
xor eax, eax
inc eax
je 0x1002c73b
mov eax, dword [ebp - 0x14]
mov dword [ebp - 0x80c], eax
mov eax, dword [ebp - 0x14]
dec eax
cmp dword [ebp - 0x14], eax
je 0x1002c71c
mov dword [ebp - 0x2cc], 1
jmp 0x1002c723
and dword [ebp - 0x2cc], 0
mov eax, dword [ebp - 0x14]
add eax, dword [ebp - 0x2cc]
sub eax, dword [ebp - 0x14]
add eax, dword [ebp - 0x14]
cmp eax, dword [ebp - 0x14]
jge 0x1002c73b
cmp dword [ebp - 0x14], 0
mov eax, dword [ebp - 0x14]
cmp dword [ebp - 0x14], eax
je 0x1002c74f
mov dword [ebp - 0x3ec], 1
jmp 0x1002c756
and dword [ebp - 0x3ec], 0
mov eax, dword [ebp - 0x3ec]
mov dword [ebp - 0x14], eax
mov eax, dword [ebp - 0x18]
cmp dword [ebp - 0x14], eax
je 0x1002c773
mov dword [ebp - 0x2d4], 1
jmp 0x1002c77a
and dword [ebp - 0x2d4], 0
mov eax, dword [ebp - 0x18]
cmp dword [ebp - 0x2d4], eax
jne 0x1002c791
mov dword [ebp - 0x47c], 1
jmp 0x1002c798
and dword [ebp - 0x47c], 0
mov eax, dword [ebp - 0x18]
add eax, dword [ebp - 0x47c]
cmp eax, dword [ebp - 0x18]
jne 0x1002c7b2
mov dword [ebp - 0x2dc], 1
jmp 0x1002c7b9
and dword [ebp - 0x2dc], 0
mov eax, dword [ebp - 0x18]
imul eax, dword [ebp - 0x2dc]
cmp eax, dword [ebp - 0x18]
jg 0x1002cba4
mov byte [ebp - 0xc1], 0
mov dword [ebp - 0x630], 0x1fab
cmp dword [ebp - 0x630], 0xbb2
jge 0x1002cb74
mov dword [ebp - 0x580], 2
lea eax, [ebp - 0x580]
push eax
mov ecx, 0x12e4c464
call fcn.10023406
mov dword [ebp - 0xe4], 3
jmp 0x1002c822
mov eax, dword [ebp - 0xe4]
inc eax
inc eax
mov dword [ebp - 0xe4], eax
cmp dword [ebp - 0xe4], 0x2a
jge 0x1002c851
push dword [ebp - 0xe4]
call fcn.1002b363
pop ecx
movzx eax, al
test eax, eax
je 0x1002c84f
lea eax, [ebp - 0xe4]
push eax
mov ecx, 0x12e4c464
call fcn.10023406
jmp 0x1002c814
and dword [ebp - 0x698], 0
lea eax, [ebp - 0x698]
push eax
mov ecx, 0x12e4c464
call fcn.100234da
push eax
lea ecx, [ebp - 0x744]
call fcn.100234f7
mov byte [ebp - 4], 7
lea eax, [ebp - 0x744]
push eax
push 0x2a
lea ecx, [ebp - 0x66c]
call fcn.1004dbe9
mov byte [ebp - 4], 8
mov dword [ebp - 0xcc], 2
jmp 0x1002c8aa
mov eax, dword [ebp - 0xcc]
inc eax
mov dword [ebp - 0xcc], eax
cmp dword [ebp - 0xcc], 0x2a
jge 0x1002c992
and dword [ebp - 0x8c], 0
jmp 0x1002c8cd
mov eax, dword [ebp - 0x8c]
inc eax
mov dword [ebp - 0x8c], eax
mov ecx, 0x12e4c464
call fcn.100234da
cmp dword [ebp - 0x8c], eax
jae 0x1002c98d
push dword [ebp - 0x8c]
mov ecx, 0x12e4c464
call fcn.100114b6
mov eax, dword [eax]
cmp eax, dword [ebp - 0xcc]
jg 0x1002c98d
mov eax, dword [ebp - 0xcc]
mov dword [ebp - 0x180], eax
cmp dword [ebp - 0x180], 0
je 0x1002c988
push dword [ebp - 0x8c]
push dword [ebp - 0xcc]
lea ecx, [ebp - 0x66c]
call fcn.10023580
mov ecx, eax
call fcn.100114b6
mov dword [ebp - 0x3f4], eax
push dword [ebp - 0x8c]
mov ecx, 0x12e4c464
call fcn.100114b6
mov ecx, eax
mov eax, dword [ebp - 0x180]
cdq
idiv dword [ecx]
mov ecx, dword [ebp - 0x3f4]
add eax, dword [ecx]
mov ecx, dword [ebp - 0x3f4]
mov dword [ecx], eax
push dword [ebp - 0x8c]
mov ecx, 0x12e4c464
call fcn.100114b6
mov ecx, eax
mov eax, dword [ebp - 0x180]
cdq
idiv dword [ecx]
mov dword [ebp - 0x180], eax
jmp 0x1002c90d
jmp 0x1002c8c0
jmp 0x1002c89d
mov ecx, 0x12e4c464
call fcn.100234da
push eax
lea ecx, [ebp - 0x6c8]
call fcn.10011475
mov byte [ebp - 4], 9
lea eax, [ebp - 0x2ec]
push eax
lea eax, [ebp - 0x4e4]
push eax
mov ecx, 0x10660718
call fcn.10010f2e
mov ecx, eax
call fcn.10010f2e
mov dword [ebp - 0x2e4], eax
mov eax, dword [ebp - 0x2e4]
mov eax, dword [eax]
mov ecx, dword [ebp - 0x2e4]
add ecx, dword [eax + 4]
call fcn.1002a9f3
movzx eax, al
test eax, eax
je 0x1002cb47
lea eax, [ebp - 0x744]
push eax
lea ecx, [ebp - 0x6c8]
call fcn.1004da65
mov dword [ebp - 0x1fc], 1
and dword [ebp - 0x1f8], 0
and dword [ebp - 0x94], 0
jmp 0x1002ca2b
mov eax, dword [ebp - 0x94]
inc eax
mov dword [ebp - 0x94], eax
mov ecx, 0x12e4c464
call fcn.100234da
cmp dword [ebp - 0x94], eax
jae 0x1002cac2
push dword [ebp - 0x94]
push dword [ebp - 0x4e4]
lea ecx, [ebp - 0x66c]
call fcn.10023580
mov ecx, eax
call fcn.100114b6
mov esi, eax
push dword [ebp - 0x94]
push dword [ebp - 0x2ec]
lea ecx, [ebp - 0x66c]
call fcn.10023580
mov ecx, eax
call fcn.100114b6
mov esi, dword [esi]
sub esi, dword [eax]
push dword [ebp - 0x94]
mov eax, dword [ebp - 0x4e4]
sub eax, dword [ebp - 0x2ec]
push eax
lea ecx, [ebp - 0x66c]
call fcn.10023580
mov ecx, eax
call fcn.100114b6
sub esi, dword [eax]
push dword [ebp - 0x94]
lea ecx, [ebp - 0x6c8]
call fcn.100114b6
mov dword [eax], esi
jmp 0x1002ca1e
and dword [ebp - 0x160], 0
jmp 0x1002cad8
mov eax, dword [ebp - 0x160]
inc eax
mov dword [ebp - 0x160], eax
mov ecx, 0x12e4c464
call fcn.100234da
cmp dword [ebp - 0x160], eax
jae 0x1002cb20
push dword [ebp - 0x160]
lea ecx, [ebp - 0x6c8]
call fcn.100114b6
mov eax, dword [eax]
inc eax
cdq
push edx
push eax
push dword [ebp - 0x1f8]
push dword [ebp - 0x1fc]
call fcn.1005b740
mov dword [ebp - 0x1fc], eax
mov dword [ebp - 0x1f8], edx
jmp 0x1002cacb
push fcn.10013ebe
push dword [ebp - 0x1f8]
push dword [ebp - 0x1fc]
mov ecx, 0x106605f8
call fcn.1000be98
mov ecx, eax
call fcn.1001111d
jmp 0x1002c9ac
mov byte [ebp - 4], 8
lea ecx, [ebp - 0x6c8]
call fcn.100114b1
mov byte [ebp - 4], 7
lea ecx, [ebp - 0x66c]
call fcn.1002357b
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x744]
call fcn.100114b1
movzx eax, byte [ebp - 0xc1]
test eax, eax
je 0x1002cb9f
push 0x5b00
push 0
push 1
push 0x324f
push 0x2c3
push 0x3c0a
call fcn.1002aa42
add esp, 0x18
jmp 0x1002cd50
mov dword [ebp - 0x638], 8
mov dword [ebp - 0x18], 0
jmp 0x1002cbbe
mov eax, dword [ebp - 0x18]
inc eax
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 3
jg 0x1002cc17
mov dword [ebp - 0x588], 0xfffffff6
mov byte [ebp - 0xa5], 0
movzx eax, byte [ebp - 0xa5]
test eax, eax
je 0x1002cbf5
push 0
push 0
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
push 0
push 0
call dword [sym.imp.USER32.dll_DialogBoxParamA]
push 0x71de
push 0x573c
push 0
lea eax, [ebp - 0x588]
push eax
push 0x5e02
call fcn.1002ff2a
add esp, 0x14
jmp 0x1002cbb7
mov dword [ebp - 0x18], 0
jmp 0x1002cc27
mov eax, dword [ebp - 0x18]
inc eax
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 0xb
jl 0x1002cd50
mov dword [ebp - 0x1a0], 0
jmp 0x1002cc4a
mov eax, dword [ebp - 0x1a0]
inc eax
mov dword [ebp - 0x1a0], eax
cmp dword [ebp - 0x1a0], 3
jge 0x1002cc66
mov eax, dword [ebp - 0x1a0]
mov dword [ebp + eax*4 - 0x6f8], 1
jmp 0x1002cc3d
mov dword [ebp - 0x14], 0
jmp 0x1002cc76
mov eax, dword [ebp - 0x14]
inc eax
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 2
jg 0x1002cd39
mov dword [ebp - 0x70], 0x19820b27
mov dword [ebp - 0x70], 0
jmp 0x1002cc97
mov eax, dword [ebp - 0x70]
inc eax
mov dword [ebp - 0x70], eax
cmp dword [ebp - 0x70], 2
jg 0x1002cd34
mov dword [ebp - 0x2fc], 0x7fd8b26d
mov eax, dword [ebp - 0x70]
mov ecx, dword [ebp - 0x70]
cmp dword [ebp + eax*4 - 0x6f8], ecx
je 0x1002ccd9
mov eax, dword [ebp - 0x70]
cmp dword [ebp + eax*4 - 0x6f8], 0
je 0x1002ccd9
cmp dword [ebp - 0x18], 0
jne 0x1002ccd9
mov dword [ebp - 0x3fc], 1
jmp 0x1002cce0
and dword [ebp - 0x3fc], 0
mov eax, dword [ebp - 0x3fc]
mov dword [ebp - 0x2f4], eax
mov eax, dword [ebp - 0x638]
cmp dword [ebp - 0x2f4], eax
je 0x1002cd06
mov dword [ebp - 0x484], 1
jmp 0x1002cd0d
and dword [ebp - 0x484], 0
mov eax, dword [ebp - 0x70]
mov eax, dword [ebp + eax*4 - 0x6f8]
add eax, dword [ebp - 0x484]
mov dword [ebp - 0x2fc], eax
mov eax, dword [ebp - 0x2fc]
mov dword [ebp - 0x590], eax
jmp 0x1002cc90
jmp 0x1002cc6f
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x6f8], 0
je 0x1002cd4b
jmp 0x1002cd50
jmp 0x1002cc20
push 0x3938
push 0x7fc7
push 0x5d25
push 0x17c1
push 0x2c50
push 0
push 0x1fe7
push 0x67e8
lea eax, [ebp - 0xec]
push eax
call fcn.10030b4a
add esp, 0x24
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x850]
call fcn.100114b1
jmp 0x1002ba89
push 1
lea ecx, [ebp - 0x234]
call fcn.10011475
mov dword [ebp - 4], 0xa
mov dword [ebp - 0x4cc], 0x4f204795
mov dword [ebp - 0x640], 0x481f3403
mov dword [ebp - 0x24], 0
jmp 0x1002cdd0
mov eax, dword [ebp - 0x24]
inc eax
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 1
jge 0x1002cdec
push dword [ebp - 0x24]
lea ecx, [ebp - 0x234]
call fcn.100114b6
mov dword [eax], 0x9dfc
jmp 0x1002cdc9
mov dword [ebp - 0x24], 0
jmp 0x1002cdfc
mov eax, dword [ebp - 0x24]
inc eax
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 3
jge 0x1002ce12
mov eax, dword [ebp - 0x24]
mov dword [ebp + eax*4 - 0x860], 0x8abc106e
jmp 0x1002cdf5
mov dword [ebp - 0x24], 0
jmp 0x1002ce22
mov eax, dword [ebp - 0x24]
inc eax
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 1
jge 0x1002ce38
mov eax, dword [ebp - 0x24]
mov dword [ebp + eax*4 - 0x20c], 0xfffffff9
jmp 0x1002ce1b
push 0
lea ecx, [ebp - 0x234]
call fcn.100114b6
mov esi, eax
push 0
lea ecx, [ebp - 0x234]
call fcn.100114b6
mov ecx, dword [esi]
cmp ecx, dword [eax]
jne 0x1002ce78
push 0
lea ecx, [ebp - 0x234]
call fcn.100114b6
cmp dword [eax], 0
je 0x1002ce78
mov dword [ebp - 0x6b8], 1
jmp 0x1002ce7f
and dword [ebp - 0x6b8], 0
push 4
pop eax
shl eax, 1
lea eax, [ebp + eax - 0x860]
mov dword [ebp - 0x598], eax
push 0
lea ecx, [ebp - 0x234]
call fcn.100114b6
mov ecx, dword [ebp - 0x598]
mov eax, dword [eax]
mov dword [ecx], eax
push 0
lea ecx, [ebp - 0x234]
call fcn.100114b6
push 4
pop ecx
shl ecx, 0
mov ecx, dword [ebp + ecx - 0x860]
push 4
pop edx
imul edx, edx, 0
add ecx, dword [ebp + edx - 0x20c]
imul ecx, dword [eax]
push 4
pop eax
imul eax, eax, 0
cmp ecx, dword [ebp + eax - 0x20c]
je 0x1002ceed
mov dword [ebp - 0x404], 1
jmp 0x1002cef4
and dword [ebp - 0x404], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x20c]
cmp dword [ebp - 0x404], eax
jle 0x1002cf15
mov dword [ebp - 0x304], 1
jmp 0x1002cf1c
and dword [ebp - 0x304], 0
mov eax, dword [ebp - 0x304]
mov dword [ebp - 0x4cc], eax
mov esi, dword [ebp - 0x4cc]
push 0
lea ecx, [ebp - 0x234]
call fcn.100114b6
imul esi, dword [eax]
sub esi, 0xfff6
je 0x1002cf64
push 0
lea ecx, [ebp - 0x234]
call fcn.100114b6
cmp dword [eax], 0
je 0x1002cf64
mov dword [ebp - 0x30c], 1
jmp 0x1002cf6b
and dword [ebp - 0x30c], 0
mov eax, dword [ebp - 0x30c]
mov dword [ebp - 0x640], eax
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x234]
call fcn.100114b1
mov dword [ebp - 0x60], 0
jmp 0x1002cf96
mov eax, dword [ebp - 0x60]
dec eax
mov dword [ebp - 0x60], eax
cmp dword [ebp - 0x60], 0xffffffea
jl 0x1002db96
mov dword [ebp - 0x20], 0xe9d0
mov dword [ebp - 0x188], 2
mov dword [ebp - 0x718], 0xda4d
mov dword [ebp - 0x714], 0xda4d
mov dword [ebp - 0x710], 0xda4d
mov dword [ebp - 0x70c], 0xda4d
lea ecx, [ebp - 0x1ed]
call fcn.10011c66
push eax
lea eax, [ebp - 0x708]
push eax
lea eax, [ebp - 0x718]
push eax
lea ecx, [ebp - 0x950]
call fcn.100234e3
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0x1b0]
call fcn.1002345b
mov dword [ebp - 4], 0xb
mov dword [ebp - 0x414], 0x8cca6991
mov dword [ebp - 0x4e8], 0x695cd1d2
mov dword [ebp - 0x5a0], 1
mov dword [ebp - 0x78], 0x24489be6
mov dword [ebp - 0x64], 0
jmp 0x1002d04a
mov eax, dword [ebp - 0x64]
inc eax
mov dword [ebp - 0x64], eax
cmp dword [ebp - 0x64], 4
jge 0x1002d060
mov eax, dword [ebp - 0x64]
mov dword [ebp + eax*4 - 0x8d4], 0xfffffff9
jmp 0x1002d043
mov dword [ebp - 0x64], 0
jmp 0x1002d070
mov eax, dword [ebp - 0x64]
inc eax
mov dword [ebp - 0x64], eax
cmp dword [ebp - 0x64], 2
jge 0x1002d086
mov eax, dword [ebp - 0x64]
mov dword [ebp + eax*4 - 0x7e4], 0xb1ed3090
jmp 0x1002d069
lea eax, [ebp - 0x20]
push eax
lea eax, [ebp - 0x188]
push eax
push 0
push 0x157f
push 0x4bc0
push 0x2b4d
push 0x7f75
push 0x720e
call fcn.10043287
add esp, 0x20
mov dword [ebp - 0x20], 0
jmp 0x1002d0c4
mov eax, dword [ebp - 0x20]
inc eax
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 3
jg 0x1002d4b4
mov dword [ebp - 0x168], 0xf59f89f2
mov dword [ebp - 0x188], 0x6992f1e5
mov esi, dword [ebp - 0x188]
push dword [ebp - 0x20]
lea ecx, [ebp - 0x1b0]
call fcn.100114b6
add esi, dword [eax]
cmp dword [ebp - 0x20], esi
jge 0x1002d109
mov dword [ebp - 0x40c], 1
jmp 0x1002d110
and dword [ebp - 0x40c], 0
cmp dword [ebp - 0x40c], 0x4902314a
jle 0x1002d128
mov dword [ebp - 0x314], 1
jmp 0x1002d12f
and dword [ebp - 0x314], 0
push dword [ebp - 0x20]
lea ecx, [ebp - 0x1b0]
call fcn.100114b6
mov eax, dword [eax]
imul eax, dword [ebp - 0x314]
test eax, eax
jne 0x1002d165
push 3
lea ecx, [ebp - 0x1b0]
call fcn.100114b6
cmp dword [eax], 0
jne 0x1002d165
and dword [ebp - 0x48c], 0
jmp 0x1002d16f
mov dword [ebp - 0x48c], 1
push dword [ebp - 0x20]
lea ecx, [ebp - 0x1b0]
call fcn.100114b6
mov ecx, dword [ebp - 0x48c]
cmp ecx, dword [eax]
jg 0x1002d193
mov dword [ebp - 0x31c], 1
jmp 0x1002d19a
and dword [ebp - 0x31c], 0
mov eax, dword [ebp - 0x31c]
mov dword [ebp - 0x414], eax
mov eax, dword [ebp - 0x20]
cmp dword [ebp - 0x414], eax
jle 0x1002d1bd
mov dword [ebp - 0x324], 1
jmp 0x1002d1c4
and dword [ebp - 0x324], 0
mov eax, dword [ebp - 0x324]
add eax, 0x57ea
mov dword [ebp - 0x4e8], eax
mov eax, dword [ebp - 0x4e8]
mov dword [ebp - 0x864], eax
push 1
lea ecx, [ebp - 0x1b0]
call fcn.100114b6
mov esi, dword [ebp - 0x20]
imul esi, dword [ebp - 0x5a0]
push dword [ebp - 0x20]
lea ecx, [ebp - 0x1b0]
call fcn.100114b6
cmp esi, dword [eax]
je 0x1002d216
mov dword [ebp - 0x32c], 1
jmp 0x1002d21d
and dword [ebp - 0x32c], 0
push 3
lea ecx, [ebp - 0x1b0]
call fcn.100114b6
mov ecx, dword [ebp - 0x32c]
cmp ecx, dword [eax]
jle 0x1002d240
mov dword [ebp - 0x41c], 1
jmp 0x1002d247
and dword [ebp - 0x41c], 0
mov eax, dword [ebp - 0x41c]
mov dword [ebp - 0x168], eax
mov esi, dword [ebp - 0x168]
push 2
lea ecx, [ebp - 0x1b0]
call fcn.100114b6
cmp esi, dword [eax]
jg 0x1002d276
mov dword [ebp - 0x334], 1
jmp 0x1002d27d
and dword [ebp - 0x334], 0
mov eax, dword [ebp - 0x334]
add eax, 7
mov dword [ebp - 0x78], eax
cmp dword [ebp - 0x78], 0xffff
je 0x1002d29e
mov dword [ebp - 0x494], 1
jmp 0x1002d2a5
and dword [ebp - 0x494], 0
push dword [ebp - 0x20]
lea ecx, [ebp - 0x1b0]
call fcn.100114b6
cmp dword [ebp - 0x168], 0
je 0x1002d2d9
mov esi, dword [ebp - 0x78]
push 1
lea ecx, [ebp - 0x1b0]
call fcn.100114b6
add esi, dword [eax]
mov dword [ebp - 0x168], esi
jmp 0x1002d489
mov dword [ebp - 0x170], 0xffffffff
mov dword [ebp - 0x33c], 0x8d9a65c8
mov dword [ebp - 0x78], 0
jmp 0x1002d2fd
mov eax, dword [ebp - 0x78]
inc eax
mov dword [ebp - 0x78], eax
cmp dword [ebp - 0x78], 3
jg 0x1002d489
push dword [ebp - 0x20]
lea ecx, [ebp - 0x1b0]
call fcn.100114b6
cmp dword [eax], 0
je 0x1002d335
push 1
push 0
push 0x2fb0
push 0x4338
call fcn.1002af82
add esp, 0x10
jmp 0x1002d484
push 1
lea ecx, [ebp - 0x704]
call fcn.10011475
mov byte [ebp - 4], 0xc
push 0x22aa
lea eax, [ebp - 0x704]
push eax
push 0x7793
push 0
push 0x2a91
lea eax, [ebp - 0x814]
push eax
push 0
call fcn.1004621a
add esp, 0x1c
mov eax, dword [ebp - 0x188]
mov dword [ebp - 0x894], eax
push 0
lea ecx, [ebp - 0x704]
call fcn.100114b6
mov eax, dword [eax]
mov dword [ebp - 0x33c], eax
mov esi, dword [ebp - 0x33c]
push 0
lea ecx, [ebp - 0x704]
call fcn.100114b6
cmp esi, dword [eax]
jne 0x1002d3b3
mov dword [ebp - 0x424], 1
jmp 0x1002d3ba
and dword [ebp - 0x424], 0
cmp dword [ebp - 0x424], 0xc702b5bd
ja 0x1002d3e2
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x8d4], 0
je 0x1002d3e2
mov dword [ebp - 0x344], 1
jmp 0x1002d3e9
and dword [ebp - 0x344], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x344]
sub ecx, dword [ebp + eax - 0x8d4]
cmp ecx, dword [ebp - 0x170]
jl 0x1002d410
mov dword [ebp - 0x4d4], 1
jmp 0x1002d417
and dword [ebp - 0x4d4], 0
mov eax, dword [ebp - 0x170]
cmp eax, dword [ebp - 0x4d4]
jne 0x1002d431
mov dword [ebp - 0x34c], 1
jmp 0x1002d438
and dword [ebp - 0x34c], 0
mov eax, dword [ebp - 0x34c]
mov dword [ebp - 0x170], eax
mov eax, dword [ebp - 0x170]
cmp dword [ebp - 0x78], eax
je 0x1002d45b
mov dword [ebp - 0x42c], 1
jmp 0x1002d462
and dword [ebp - 0x42c], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x42c]
mov dword [ebp + eax - 0x7e4], ecx
mov byte [ebp - 4], 0xb
lea ecx, [ebp - 0x704]
call fcn.100114b1
jmp 0x1002d2f6
mov byte [ebp - 0xc0], 0
movzx eax, byte [ebp - 0xc0]
test eax, eax
je 0x1002d4af
push 0x6680
push 0x784
push 0
call fcn.10043d26
add esp, 0xc
jmp 0x1002d0bd
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x1b0]
call fcn.100114b1
mov dword [ebp - 0x6a0], 0x32d7af2c
mov dword [ebp - 0x820], 0xffffffff
mov dword [ebp - 0x198], 0
jmp 0x1002d4f0
mov eax, dword [ebp - 0x198]
inc eax
mov dword [ebp - 0x198], eax
cmp dword [ebp - 0x198], 4
jge 0x1002d50c
mov eax, dword [ebp - 0x198]
mov dword [ebp + eax*4 - 0x558], 0xffffffff
jmp 0x1002d4e3
push 0x7bb4
push 0x4c0a
push 0x3ddf
push 0x1fc8
push 0
push 0
call fcn.1002b176
add esp, 0x18
push 4
pop eax
shl eax, 1
mov dword [ebp + eax - 0x558], 0
jmp 0x1002d557
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x558]
inc eax
push 4
pop ecx
shl ecx, 1
mov dword [ebp + ecx - 0x558], eax
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0x558], 3
jne 0x1002d691
mov dword [ebp - 0x9c], 7
mov dword [ebp - 0x5a8], 0xfffffffa
push 4
pop eax
imul eax, eax, 3
mov eax, dword [ebp + eax - 0x558]
mov dword [ebp - 0x784], eax
cmp dword [ebp - 0x9c], 0
jne 0x1002d5d7
cmp dword [ebp - 0x9c], 0
jne 0x1002d5d7
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x558]
mov dword [ebp - 0x788], eax
push 4
pop eax
imul eax, eax, 0
imul eax, dword [ebp + eax - 0x558], 0xfffe
cmp eax, dword [ebp - 0x9c]
jg 0x1002d5d7
and dword [ebp - 0x354], 0
jmp 0x1002d5e1
mov dword [ebp - 0x354], 1
mov eax, dword [ebp - 0x354]
add eax, 0xb94d
jne 0x1002d5fb
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0x558], 0
mov eax, dword [ebp - 0x6a0]
mov dword [ebp - 0x790], eax
cmp dword [ebp - 0x9c], 0x7904
jne 0x1002d61f
mov dword [ebp - 0x49c], 1
jmp 0x1002d626
and dword [ebp - 0x49c], 0
cmp dword [ebp - 0x49c], 0x94ff
je 0x1002d63e
mov dword [ebp - 0x35c], 1
jmp 0x1002d645
and dword [ebp - 0x35c], 0
mov eax, dword [ebp - 0x9c]
mov ecx, dword [ebp - 0x35c]
add ecx, 0xfa81
imul eax, ecx
add eax, dword [ebp - 0x9c]
cmp eax, 0x8aae07ea
je 0x1002d673
mov dword [ebp - 0x434], 1
jmp 0x1002d67a
and dword [ebp - 0x434], 0
mov eax, dword [ebp - 0x9c]
add eax, dword [ebp - 0x434]
mov dword [ebp - 0x5a8], eax
jmp 0x1002d53e
mov dword [ebp - 0x650], 0x98f01ba0
mov dword [ebp - 0x10], 0xfe7d8a87
mov dword [ebp - 0x40], 0xd8607f47
mov dword [ebp - 0xd0], 0xffffffff
push 1
lea ecx, [ebp - 0x75c]
call fcn.10011475
mov dword [ebp - 4], 0xd
mov dword [ebp - 0x684], 0x6722525a
mov dword [ebp - 0x5c], 0
jmp 0x1002d6e1
mov eax, dword [ebp - 0x5c]
inc eax
mov dword [ebp - 0x5c], eax
cmp dword [ebp - 0x5c], 4
jge 0x1002d6f7
mov eax, dword [ebp - 0x5c]
mov dword [ebp + eax*4 - 0x21c], 1
jmp 0x1002d6da
mov dword [ebp - 0x5c], 0
jmp 0x1002d707
mov eax, dword [ebp - 0x5c]
inc eax
mov dword [ebp - 0x5c], eax
cmp dword [ebp - 0x5c], 1
jge 0x1002d720
push dword [ebp - 0x5c]
lea ecx, [ebp - 0x75c]
call fcn.100114b6
or dword [eax], 0xffffffff
jmp 0x1002d700
mov dword [ebp - 0x10], 3
jmp 0x1002d730
mov eax, dword [ebp - 0x10]
dec eax
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], 0
jl 0x1002dae5
mov dword [ebp - 0x250], 0x6cefc6e2
mov eax, dword [ebp - 0x10]
mov eax, dword [ebp + eax*4 - 0x21c]
mov dword [ebp - 0x364], eax
mov eax, dword [ebp - 0x10]
mov ecx, dword [ebp - 0x364]
mov dword [ebp + eax*4 - 0x21c], ecx
cmp dword [ebp - 0x364], 0
jne 0x1002da95
push 4
pop eax
imul eax, eax, 3
mov eax, dword [ebp + eax - 0x21c]
cmp dword [ebp - 0x10], eax
jg 0x1002d78f
mov dword [ebp - 0x4dc], 1
jmp 0x1002d796
and dword [ebp - 0x4dc], 0
mov eax, dword [ebp - 0x40]
cmp dword [ebp - 0x4dc], eax
jl 0x1002d7ad
mov dword [ebp - 0x36c], 1
jmp 0x1002d7b4
and dword [ebp - 0x36c], 0
mov eax, dword [ebp - 0x10]
cmp dword [ebp - 0x36c], eax
jge 0x1002d7e1
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x21c], 0
jne 0x1002d7e1
mov eax, 0xfffa
test eax, eax
jne 0x1002d7e1
and dword [ebp - 0x43c], 0
jmp 0x1002d7eb
mov dword [ebp - 0x43c], 1
mov eax, dword [ebp - 0x43c]
mov dword [ebp - 0xd0], eax
mov eax, dword [ebp - 0xd0]
sub eax, dword [ebp - 0x10]
jne 0x1002d814
cmp dword [ebp - 0xd0], 0
jne 0x1002d814
and dword [ebp - 0x374], 0
jmp 0x1002d81e
mov dword [ebp - 0x374], 1
mov eax, dword [ebp - 0x40]
cmp dword [ebp - 0x374], eax
jl 0x1002d835
mov dword [ebp - 0x4a4], 1
jmp 0x1002d83c
and dword [ebp - 0x4a4], 0
mov eax, dword [ebp - 0x10]
cmp dword [ebp - 0x4a4], eax
jle 0x1002d853
mov dword [ebp - 0x37c], 1
jmp 0x1002d85a
and dword [ebp - 0x37c], 0
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x21c]
cmp eax, dword [ebp - 0x37c]
jl 0x1002d87a
mov dword [ebp - 0x444], 1
jmp 0x1002d881
and dword [ebp - 0x444], 0
mov eax, dword [ebp - 0x10]
mov eax, dword [ebp + eax*4 - 0x21c]
imul eax, dword [ebp - 0x444]
mov ecx, dword [ebp - 0x10]
add eax, dword [ebp + ecx*4 - 0x21c]
je 0x1002d8b7
mov eax, dword [ebp - 0x10]
cmp dword [ebp + eax*4 - 0x21c], 0
je 0x1002d8b7
mov dword [ebp - 0x384], 1
jmp 0x1002d8be
and dword [ebp - 0x384], 0
mov eax, dword [ebp - 0x10]
mov eax, dword [ebp + eax*4 - 0x21c]
cmp dword [ebp - 0x384], eax
jg 0x1002d8e2
mov eax, 0xa259
test eax, eax
jne 0x1002d8e2
and dword [ebp - 0x648], 0
jmp 0x1002d8ec
mov dword [ebp - 0x648], 1
mov eax, dword [ebp - 0x10]
mov eax, dword [ebp + eax*4 - 0x21c]
mov dword [ebp - 0x798], eax
cmp dword [ebp - 0x40], 0
je 0x1002d915
push 5
pop eax
test eax, eax
je 0x1002d915
mov dword [ebp - 0x4bc], 1
jmp 0x1002d91c
and dword [ebp - 0x4bc], 0
mov eax, dword [ebp - 0x10]
imul eax, dword [ebp - 0x4bc]
mov ecx, dword [ebp - 0x10]
cmp eax, dword [ebp + ecx*4 - 0x21c]
jg 0x1002d93b
mov eax, 0x58e56a96
test eax, eax
je 0x1002d950
cmp dword [ebp - 0xd0], 0
je 0x1002d950
mov dword [ebp - 0x38c], 1
jmp 0x1002d957
and dword [ebp - 0x38c], 0
mov eax, dword [ebp - 0x10]
cmp dword [ebp - 0x38c], eax
je 0x1002d96e
mov dword [ebp - 0x44c], 1
jmp 0x1002d975
and dword [ebp - 0x44c], 0
mov eax, dword [ebp - 0x10]
mov eax, dword [ebp + eax*4 - 0x21c]
cmp dword [ebp - 0x44c], eax
jne 0x1002d993
mov dword [ebp - 0x394], 1
jmp 0x1002d99a
and dword [ebp - 0x394], 0
cmp dword [ebp - 0x394], 0xffffffff
ja 0x1002d9af
mov dword [ebp - 0x4ac], 1
jmp 0x1002d9b6
and dword [ebp - 0x4ac], 0
mov eax, dword [ebp - 0x10]
mov eax, dword [ebp + eax*4 - 0x21c]
cmp dword [ebp - 0x4ac], eax
jl 0x1002d9d4
mov dword [ebp - 0x39c], 1
jmp 0x1002d9db
and dword [ebp - 0x39c], 0
mov eax, dword [ebp - 0x40]
cmp dword [ebp - 0x39c], eax
jge 0x1002d9f2
mov dword [ebp - 0x454], 1
jmp 0x1002d9f9
and dword [ebp - 0x454], 0
imul eax, dword [ebp - 0x454], 0xffffffff
cmp eax, 0x5c8b
jne 0x1002da13
mov dword [ebp - 0x5b0], 1
jmp 0x1002da1a
and dword [ebp - 0x5b0], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x21c]
mov dword [ebp - 0x7a0], eax
mov eax, dword [ebp - 0x40]
cmp dword [ebp - 0x40], eax
jl 0x1002da4a
cmp dword [ebp - 0xd0], 0
je 0x1002da4a
mov dword [ebp - 0x3a4], 1
jmp 0x1002da51
and dword [ebp - 0x3a4], 0
imul eax, dword [ebp - 0x3a4], 0xb60e
mov dword [ebp - 0x23c], eax
push 0
lea ecx, [ebp - 0x75c]
call fcn.100114b6
mov ecx, dword [ebp - 0x23c]
mov dword [eax], ecx
cmp dword [ebp - 0x23c], 0
je 0x1002da8c
mov eax, dword [ebp - 0x10]
cmp dword [ebp + eax*4 - 0x21c], 0
jne 0x1002da95
and dword [ebp - 0x248], 0
jmp 0x1002da9f
mov dword [ebp - 0x248], 1
mov eax, dword [ebp - 0x250]
add eax, dword [ebp - 0x248]
je 0x1002dac2
cmp dword [ebp - 0x250], 0
je 0x1002dac2
mov dword [ebp - 0x258], 1
jmp 0x1002dac9
and dword [ebp - 0x258], 0
mov eax, dword [ebp - 0x258]
mov dword [ebp - 0x684], eax
cmp dword [ebp - 0xd0], 0
je 0x1002dae0
jmp 0x1002dae5
jmp 0x1002d729
mov dword [ebp - 0x40], 0
jmp 0x1002daf5
mov eax, dword [ebp - 0x40]
inc eax
mov dword [ebp - 0x40], eax
cmp dword [ebp - 0x40], 3
jg 0x1002db17
mov dword [ebp - 0x5b8], 0x7ab81002
push 0
lea eax, [ebp - 0x5b8]
push eax
call fcn.10030292
pop ecx
pop ecx
jmp 0x1002daee
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x75c]
call fcn.100114b1
mov dword [ebp - 0x138], 0
jmp 0x1002db3f
mov eax, dword [ebp - 0x138]
inc eax
mov dword [ebp - 0x138], eax
cmp dword [ebp - 0x138], 2
jge 0x1002db5b
mov eax, dword [ebp - 0x138]
mov dword [ebp + eax*4 - 0x81c], 0x3617
jmp 0x1002db32
push 4
pop eax
shl eax, 0
mov dword [ebp + eax - 0x81c], 0xfffffff7
cmp dword [ebp - 0x60], 0xfffffff7
jg 0x1002db7e
mov dword [ebp - 0x260], 1
jmp 0x1002db85
and dword [ebp - 0x260], 0
mov eax, dword [ebp - 0x260]
mov dword [ebp - 0x650], eax
jmp 0x1002cf8f
mov dword [ebp - 0xf4], 0xffffffff
mov dword [ebp - 0xf4], 0xfffffffa
jmp 0x1002dbb9
mov eax, dword [ebp - 0xf4]
dec eax
mov dword [ebp - 0xf4], eax
cmp dword [ebp - 0xf4], 0xffffffe2
jl 0x1002dbe6
cmp dword [ebp - 0xf4], 0
je 0x1002dbcd
jmp 0x1002dbe6
mov byte [ebp - 0x86], 0
lea eax, [ebp - 0x86]
push eax
push 0
call fcn.100317d2
pop ecx
pop ecx
jmp 0x1002dbac
cmp dword [ebp - 0x1d0], 0
jle 0x1002f8ad
mov dword [ebp - 0x1f4], 7
mov dword [ebp - 0x7a8], 0xfffffffe
mov dword [ebp - 0x780], 0xffffffff
mov dword [ebp - 0x5e0], 3
mov dword [ebp - 0x278], 0xb3a4df6f
mov dword [ebp - 0x7b8], 0xffffffff
mov dword [ebp - 0x5d0], 0x1e1d82c3
mov dword [ebp - 0x660], 8
mov dword [ebp - 0x298], 0xc2e9378f
mov dword [ebp - 0x5d8], 5
mov dword [ebp - 0x1cc], 0x9737e0d1
mov dword [ebp - 0x2a8], 3
mov dword [ebp - 0x2b0], 0x48dc164f
mov dword [ebp - 0x7c0], 0x7806aa1c
push 1
lea ecx, [ebp - 0x510]
call fcn.10011475
mov dword [ebp - 4], 0xe
mov dword [ebp - 0x694], 1
mov dword [ebp - 0x54], 0
jmp 0x1002dcad
mov eax, dword [ebp - 0x54]
inc eax
mov dword [ebp - 0x54], eax
cmp dword [ebp - 0x54], 1
jge 0x1002dcc6
push dword [ebp - 0x54]
lea ecx, [ebp - 0x510]
call fcn.100114b6
and dword [eax], 0
jmp 0x1002dca6
mov dword [ebp - 0x5c0], 0x24d9
cmp dword [ebp - 0x5c0], 0xe09
jge 0x1002de91
push 0x1000a004
lea ecx, [ebp - 0x910]
call fcn.1000be4a
mov byte [ebp - 4], 0xf
push 0x1000a010
lea ecx, [ebp - 0x948]
call fcn.1000be4a
mov byte [ebp - 4], 0x10
push 0x1000a018
lea ecx, [ebp - 0x930]
call fcn.1000be4a
mov byte [ebp - 4], 0x11
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x7c8], esp
lea eax, [ebp - 0x948]
push eax
call fcn.1000be13
mov dword [ebp - 0x7d0], eax
mov byte [ebp - 4], 0x12
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x7dc], esp
lea eax, [ebp - 0x910]
push eax
call fcn.1000be13
mov byte [ebp - 4], 0x11
call fcn.1002b3a8
add esp, 0x30
mov dword [ebp - 0x68c], eax
mov eax, dword [ebp - 0x68c]
mov dword [ebp - 0x268], eax
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x7e8], esp
lea eax, [ebp - 0x930]
push eax
call fcn.1000be13
mov dword [ebp - 0x7f4], eax
mov byte [ebp - 4], 0x13
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x830], esp
lea eax, [ebp - 0x910]
push eax
call fcn.1000be13
mov byte [ebp - 4], 0x11
call fcn.1002b3a8
add esp, 0x30
mov dword [ebp - 0x5c8], eax
mov eax, dword [ebp - 0x5c8]
mov dword [ebp - 0x270], eax
cmp dword [ebp - 0x268], 0xffffffff
je 0x1002ddfb
push fcn.10013ebe
push dword [ebp - 0x268]
mov edx, 0x1000a020
mov ecx, 0x106605f8
call fcn.1000d867
mov ecx, eax
call fcn.10011129
mov ecx, eax
call fcn.1001111d
jmp 0x1002de16
push fcn.10013ebe
mov edx, 0x1000a038
mov ecx, 0x106605f8
call fcn.1000d867
mov ecx, eax
call fcn.1001111d
cmp dword [ebp - 0x270], 0xffffffff
je 0x1002de49
push fcn.10013ebe
push dword [ebp - 0x270]
mov edx, 0x1000a050
mov ecx, 0x106605f8
call fcn.1000d867
mov ecx, eax
call fcn.10011129
mov ecx, eax
call fcn.1001111d
jmp 0x1002de64
push fcn.10013ebe
mov edx, 0x1000a068
mov ecx, 0x106605f8
call fcn.1000d867
mov ecx, eax
call fcn.1001111d
mov byte [ebp - 4], 0x10
lea ecx, [ebp - 0x930]
call fcn.1000be79
mov byte [ebp - 4], 0xf
lea ecx, [ebp - 0x948]
call fcn.1000be79
mov byte [ebp - 4], 0xe
lea ecx, [ebp - 0x910]
call fcn.1000be79
mov dword [ebp - 0x54], 0
jmp 0x1002dea1
mov eax, dword [ebp - 0x54]
inc eax
mov dword [ebp - 0x54], eax
cmp dword [ebp - 0x54], 4
jge 0x1002deb7
mov eax, dword [ebp - 0x54]
mov dword [ebp + eax*4 - 0x77c], 2
jmp 0x1002de9a
mov eax, dword [ebp - 0x1f4]
mov dword [ebp - 0x878], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x77c]
mov dword [ebp - 0x880], eax
push 0
lea ecx, [ebp - 0x510]
call fcn.100114b6
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x77c]
inc eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x77c], eax
mov eax, dword [ebp - 0x2b0]
mov dword [ebp - 0x278], eax
mov esi, dword [ebp - 0x278]
push 0
lea ecx, [ebp - 0x510]
call fcn.100114b6
cmp esi, dword [eax]
jl 0x1002df2d
mov dword [ebp - 0x280], 1
jmp 0x1002df34
and dword [ebp - 0x280], 0
mov eax, dword [ebp - 0x280]
sub eax, dword [ebp - 0x1cc]
cmp eax, 0xe859
jne 0x1002df53
mov dword [ebp - 0x288], 1
jmp 0x1002df5a
and dword [ebp - 0x288], 0
push 0
lea ecx, [ebp - 0x510]
call fcn.100114b6
mov eax, dword [eax]
cmp eax, dword [ebp - 0x288]
je 0x1002df7d
mov dword [ebp - 0x290], 1
jmp 0x1002df84
and dword [ebp - 0x290], 0
push 0
lea ecx, [ebp - 0x510]
call fcn.100114b6
mov ecx, dword [ebp - 0x290]
mov dword [eax], ecx
push 0
lea ecx, [ebp - 0x510]
call fcn.100114b6
mov eax, dword [eax]
mov dword [ebp - 0x298], eax
mov eax, dword [ebp - 0x2a8]
cmp dword [ebp - 0x298], eax
jne 0x1002dfc8
mov dword [ebp - 0x658], 1
jmp 0x1002dfcf
and dword [ebp - 0x658], 0
mov eax, dword [ebp - 0x1f4]
mov dword [ebp - 0x888], eax
mov eax, dword [ebp - 0x5d0]
mov dword [ebp - 0x1cc], eax
mov eax, dword [ebp - 0x694]
cmp dword [ebp - 0x1cc], eax
jg 0x1002e001
mov dword [ebp - 0x2a0], 1
jmp 0x1002e008
and dword [ebp - 0x2a0], 0
mov eax, dword [ebp - 0x2a0]
sub eax, dword [ebp - 0x2a8]
cmp dword [ebp - 0x1f4], eax
jge 0x1002e028
mov dword [ebp - 0x2b8], 1
jmp 0x1002e02f
and dword [ebp - 0x2b8], 0
mov eax, dword [ebp - 0x2b0]
cmp dword [ebp - 0x2b8], eax
jg 0x1002e049
mov dword [ebp - 0x2c0], 1
jmp 0x1002e050
and dword [ebp - 0x2c0], 0
mov eax, dword [ebp - 0x5d8]
add eax, dword [ebp - 0x2c0]
je 0x1002e07a
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x77c], 0
je 0x1002e07a
mov dword [ebp - 0x238], 1
jmp 0x1002e081
and dword [ebp - 0x238], 0
mov eax, dword [ebp - 0x660]
cmp dword [ebp - 0x238], eax
jle 0x1002e09b
mov dword [ebp - 0x2d0], 1
jmp 0x1002e0a2
and dword [ebp - 0x2d0], 0
mov eax, dword [ebp - 0x2d0]
mov dword [ebp - 0x5e0], eax
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x510]
call fcn.100114b1
push 2
lea ecx, [ebp - 0x148]
call fcn.10011475
mov dword [ebp - 4], 0x14
mov dword [ebp - 0x2f0], 0xfffffffa
mov dword [ebp - 0xa4], 0x906d8bc0
mov dword [ebp - 0x14c], 0xfffffff7
push 2
lea ecx, [ebp - 0x4f8]
call fcn.10011475
mov byte [ebp - 4], 0x15
mov dword [ebp - 0x44], 0
jmp 0x1002e110
mov eax, dword [ebp - 0x44]
inc eax
mov dword [ebp - 0x44], eax
cmp dword [ebp - 0x44], 2
jge 0x1002e12c
push dword [ebp - 0x44]
lea ecx, [ebp - 0x148]
call fcn.100114b6
mov dword [eax], 0xca2c
jmp 0x1002e109
lea eax, [ebp - 0x4f8]
push eax
push 0
push 0x79ac
lea eax, [ebp - 0x44]
push eax
call fcn.10030277
add esp, 0x10
mov dword [ebp - 0x44], 0
jmp 0x1002e156
mov eax, dword [ebp - 0x44]
inc eax
mov dword [ebp - 0x44], eax
cmp dword [ebp - 0x44], 4
jge 0x1002e16c
mov eax, dword [ebp - 0x44]
mov dword [ebp + eax*4 - 0x960], 0x7e906900
jmp 0x1002e14f
mov byte [ebp - 0x82], 0
movzx eax, byte [ebp - 0x82]
test eax, eax
je 0x1002e186
push 0
call fcn.1004191d
pop ecx
push 1
lea ecx, [ebp - 0x148]
call fcn.100114b6
cmp dword [eax], 0
je 0x1002e32b
push 1
lea ecx, [ebp - 0x148]
call fcn.100114b6
cmp dword [eax], 0
je 0x1002e20c
push 1
lea ecx, [ebp - 0x148]
call fcn.100114b6
push 0
lea ecx, [ebp - 0x148]
call fcn.100114b6
cmp dword [eax], 0xb3bf
je 0x1002e1dc
mov dword [ebp - 0x2d8], 1
jmp 0x1002e1e3
and dword [ebp - 0x2d8], 0
cmp dword [ebp - 0x2d8], 7
jbe 0x1002e1f8
mov dword [ebp - 0x2e0], 1
jmp 0x1002e1ff
and dword [ebp - 0x2e0], 0
push 1
lea ecx, [ebp - 0x148]
call fcn.100114b6
push 0
lea ecx, [ebp - 0x148]
call fcn.100114b6
mov esi, eax
push 0
lea ecx, [ebp - 0x148]
call fcn.100114b6
mov ecx, dword [esi]
cmp ecx, dword [eax]
jle 0x1002e23a
mov dword [ebp - 0x2e8], 1
jmp 0x1002e241
and dword [ebp - 0x2e8], 0
mov eax, dword [ebp - 0x2e8]
mov dword [ebp - 0x2f0], eax
mov eax, dword [ebp - 0x2f0]
mov dword [ebp - 0xa4], eax
mov esi, dword [ebp - 0xa4]
push 1
lea ecx, [ebp - 0x148]
call fcn.100114b6
cmp esi, dword [eax]
jle 0x1002e27c
mov dword [ebp - 0x2f8], 1
jmp 0x1002e283
and dword [ebp - 0x2f8], 0
push 0
lea ecx, [ebp - 0x148]
call fcn.100114b6
mov ecx, dword [ebp - 0x2f8]
cmp ecx, dword [eax]
jge 0x1002e2a6
mov dword [ebp - 0x300], 1
jmp 0x1002e2ad
and dword [ebp - 0x300], 0
push 1
lea ecx, [ebp - 0x148]
call fcn.100114b6
mov ecx, dword [ebp - 0x300]
cmp ecx, dword [eax]
jge 0x1002e2d0
mov dword [ebp - 0x308], 1
jmp 0x1002e2d7
and dword [ebp - 0x308], 0
mov eax, dword [ebp - 0x308]
neg eax
mov dword [ebp - 0x14c], eax
mov esi, dword [ebp - 0x14c]
push 1
lea ecx, [ebp - 0x148]
call fcn.100114b6
imul esi, dword [eax]
mov dword [ebp - 0x310], esi
push 0
lea ecx, [ebp - 0x4f8]
call fcn.100114b6
mov ecx, dword [ebp - 0x310]
mov dword [eax], ecx
cmp dword [ebp - 0x310], 0
je 0x1002e32b
mov dword [ebp - 0x318], 1
jmp 0x1002e332
and dword [ebp - 0x318], 0
push 1
lea ecx, [ebp - 0x148]
call fcn.100114b6
mov ecx, dword [ebp - 0x318]
cmp ecx, dword [eax]
jl 0x1002e355
mov dword [ebp - 0x320], 1
jmp 0x1002e35c
and dword [ebp - 0x320], 0
cmp dword [ebp - 0x320], 0x86095610
jae 0x1002e5e3
push 4
lea ecx, [ebp - 0x738]
call fcn.10011475
mov byte [ebp - 4], 0x16
mov dword [ebp - 0x340], 0x2c752785
mov dword [ebp - 0x4c], 0
jmp 0x1002e397
mov eax, dword [ebp - 0x4c]
inc eax
mov dword [ebp - 0x4c], eax
cmp dword [ebp - 0x4c], 3
jge 0x1002e3ad
mov eax, dword [ebp - 0x4c]
mov dword [ebp + eax*4 - 0x6ec], 0xffffffff
jmp 0x1002e390
push 0x4e6b
push 0x16a4
push 0
lea eax, [ebp - 0x738]
push eax
lea eax, [ebp - 0x4c]
push eax
push 0x7062
call fcn.10041dd0
add esp, 0x18
mov dword [ebp - 0x4c], 0
jmp 0x1002e3e1
mov eax, dword [ebp - 0x4c]
inc eax
mov dword [ebp - 0x4c], eax
cmp dword [ebp - 0x4c], 3
jge 0x1002e3f7
mov eax, dword [ebp - 0x4c]
mov dword [ebp + eax*4 - 0x8f8], 0xfffffff9
jmp 0x1002e3da
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x6ec], 0
jne 0x1002e4b3
push 0
lea ecx, [ebp - 0x4f8]
call fcn.100114b6
cmp dword [eax], 0
je 0x1002e43f
push 0
lea ecx, [ebp - 0x4f8]
call fcn.100114b6
mov eax, dword [eax]
add eax, 0x1d70
je 0x1002e43f
mov dword [ebp - 0x69c], 1
jmp 0x1002e446
and dword [ebp - 0x69c], 0
mov eax, 0xb1ad
test eax, eax
je 0x1002e45b
mov dword [ebp - 0x328], 1
jmp 0x1002e462
and dword [ebp - 0x328], 0
push 3
lea ecx, [ebp - 0x738]
call fcn.100114b6
or dword [eax], 0xffffffff
cmp dword [ebp - 0x328], 0xffffffff
jl 0x1002e487
mov dword [ebp - 0x1d4], 1
jmp 0x1002e48e
and dword [ebp - 0x1d4], 0
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x1d4]
mov dword [ebp + eax - 0x8f8], ecx
cmp dword [ebp - 0x1d4], 0
jne 0x1002e4b3
and dword [ebp - 0x330], 0
jmp 0x1002e4bd
mov dword [ebp - 0x330], 1
mov eax, dword [ebp - 0x330]
mov dword [ebp - 0x14c], eax
mov esi, dword [ebp - 0x14c]
push 0
lea ecx, [ebp - 0x4f8]
call fcn.100114b6
cmp esi, dword [eax]
je 0x1002e4f2
mov eax, 0xac89d693
test eax, eax
jne 0x1002e4f2
and dword [ebp - 0x338], 0
jmp 0x1002e4fc
mov dword [ebp - 0x338], 1
mov eax, dword [ebp - 0x338]
mov dword [ebp - 0x340], eax
mov eax, dword [ebp - 0x340]
push 4
pop ecx
imul ecx, ecx, 0
imul eax, dword [ebp + ecx - 0x960]
push 4
pop ecx
imul ecx, ecx, 0
imul eax, dword [ebp + ecx - 0x6ec]
mov dword [ebp - 0x348], eax
push 1
lea ecx, [ebp - 0x4f8]
call fcn.100114b6
mov ecx, dword [ebp - 0x348]
mov dword [eax], ecx
cmp dword [ebp - 0x348], 0xffff
jae 0x1002e55d
mov dword [ebp - 0x350], 1
jmp 0x1002e564
and dword [ebp - 0x350], 0
cmp dword [ebp - 0x350], 0x5c0f
je 0x1002e57c
mov dword [ebp - 0x358], 1
jmp 0x1002e583
and dword [ebp - 0x358], 0
mov eax, dword [ebp - 0x358]
add eax, 0x1a68
push 4
pop ecx
imul ecx, ecx, 0
cmp eax, dword [ebp + ecx - 0x6ec]
je 0x1002e5af
mov eax, 0x72f236bb
test eax, eax
jne 0x1002e5af
and dword [ebp - 0x360], 0
jmp 0x1002e5b9
mov dword [ebp - 0x360], 1
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x6ec]
add eax, dword [ebp - 0x360]
mov dword [ebp - 0xa4], eax
mov byte [ebp - 4], 0x15
lea ecx, [ebp - 0x738]
call fcn.100114b1
jmp 0x1002e627
mov dword [ebp - 0xa4], 0x1d
jmp 0x1002e5fc
mov eax, dword [ebp - 0xa4]
dec eax
mov dword [ebp - 0xa4], eax
cmp dword [ebp - 0xa4], 0xd
jge 0x1002e627
mov byte [ebp - 0x83], 0
movzx eax, byte [ebp - 0x83]
test eax, eax
je 0x1002e625
push 0
push 0
push 0
push 0
call dword [sym.imp.ADVAPI32.dll_RegGetKeySecurity]
jmp 0x1002e5ef
mov byte [ebp - 4], 0x14
lea ecx, [ebp - 0x4f8]
call fcn.100114b1
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x148]
call fcn.100114b1
mov dword [ebp - 0xfc], 0xffffffff
mov dword [ebp - 0x5e8], 0xa43d
push 1
lea ecx, [ebp - 0x750]
call fcn.10011475
mov dword [ebp - 4], 0x17
mov dword [ebp - 0x5f0], 0xa92bd42c
mov dword [ebp - 0x670], 0xc9ebf495
push 0x3070
push 0
lea eax, [ebp - 0x750]
push eax
lea eax, [ebp - 0x890]
push eax
push 0x5ea4
call fcn.1004727b
add esp, 0x14
mov byte [ebp - 0x85], 0
movzx eax, byte [ebp - 0x85]
test eax, eax
je 0x1002e6ce
push 0x5ff8
push 0
push 0x7dc
push 0x1b6
call fcn.10045791
add esp, 0x10
lea eax, [ebp - 0x5e8]
push eax
lea eax, [ebp - 0x670]
push eax
lea eax, [ebp - 0x750]
push eax
push 0
push 0x3e45
lea eax, [ebp - 0x5f0]
push eax
push 0x290c
call fcn.1003894a
add esp, 0x1c
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x750]
call fcn.100114b1
mov dword [ebp - 0xfc], 0xfffffffa
jmp 0x1002e726
mov eax, dword [ebp - 0xfc]
dec eax
mov dword [ebp - 0xfc], eax
cmp dword [ebp - 0xfc], 0xffffffe2
jl 0x1002f1c1
cmp dword [ebp - 0xfc], 0
je 0x1002e741
jmp 0x1002f1c1
mov dword [ebp - 0x28], 0xe0648261
push 0x2724
push 0x1d86
push 0
call fcn.100302b3
add esp, 0xc
mov dword [ebp - 0x28], 0
jmp 0x1002e76c
mov eax, dword [ebp - 0x28]
dec eax
mov dword [ebp - 0x28], eax
cmp dword [ebp - 0x28], 0xffffffff
jge 0x1002ea01
mov dword [ebp - 0xac], 0x5f5b
mov dword [ebp - 0x10c], 0xafb5
push 3
lea ecx, [ebp - 0x6e0]
call fcn.10011475
mov dword [ebp - 4], 0x18
lea eax, [ebp - 0x8ac]
push eax
lea eax, [ebp - 0x6e0]
push eax
push 0
push 1
call fcn.1002ab10
add esp, 0x10
mov eax, dword [ebp - 0x28]
mov dword [ebp - 0x884], eax
cmp dword [ebp - 0xac], 0xfffffffa
ja 0x1002e7d6
mov dword [ebp - 0x368], 1
jmp 0x1002e7dd
and dword [ebp - 0x368], 0
mov eax, dword [ebp - 0xac]
cmp eax, dword [ebp - 0x368]
jle 0x1002e7f7
mov dword [ebp - 0x370], 1
jmp 0x1002e7fe
and dword [ebp - 0x370], 0
cmp dword [ebp - 0x370], 0
jge 0x1002e813
mov dword [ebp - 0x378], 1
jmp 0x1002e81a
and dword [ebp - 0x378], 0
mov eax, dword [ebp - 0xac]
cmp dword [ebp - 0x378], eax
jle 0x1002e834
mov dword [ebp - 0x380], 1
jmp 0x1002e83b
and dword [ebp - 0x380], 0
mov eax, dword [ebp - 0xac]
cmp dword [ebp - 0x380], eax
je 0x1002e855
mov dword [ebp - 0x388], 1
jmp 0x1002e85c
and dword [ebp - 0x388], 0
mov eax, dword [ebp - 0x28]
cmp dword [ebp - 0x388], eax
je 0x1002e873
mov dword [ebp - 0x390], 1
jmp 0x1002e87a
and dword [ebp - 0x390], 0
mov eax, dword [ebp - 0x10c]
cmp dword [ebp - 0x390], eax
jl 0x1002e894
mov dword [ebp - 0x398], 1
jmp 0x1002e89b
and dword [ebp - 0x398], 0
mov eax, dword [ebp - 0x28]
add eax, dword [ebp - 0x398]
add eax, dword [ebp - 0x28]
jne 0x1002e8b9
push 8
pop eax
test eax, eax
jne 0x1002e8b9
and dword [ebp - 0x3a0], 0
jmp 0x1002e8c3
mov dword [ebp - 0x3a0], 1
cmp dword [ebp - 0x3a0], 6
jbe 0x1002e8d8
mov dword [ebp - 0x3a8], 1
jmp 0x1002e8df
and dword [ebp - 0x3a8], 0
mov eax, dword [ebp - 0x28]
imul eax, dword [ebp - 0x3a8]
cmp dword [ebp - 0x28], eax
jle 0x1002e8fa
mov dword [ebp - 0x6a4], 1
jmp 0x1002e901
and dword [ebp - 0x6a4], 0
mov eax, dword [ebp - 0xac]
mov dword [ebp - 0x874], eax
mov eax, dword [ebp - 0x28]
mov dword [ebp - 0x78c], eax
mov eax, dword [ebp - 0x28]
mov dword [ebp - 0x82c], eax
mov eax, dword [ebp - 0x28]
mov dword [ebp - 0x794], eax
mov eax, dword [ebp - 0xac]
mov dword [ebp - 0x88c], eax
cmp dword [ebp - 0x28], 0
je 0x1002e9d6
mov dword [ebp - 0x104], 0x9da9
cmp dword [ebp - 0x104], 0
je 0x1002e965
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x6e0]
call fcn.100114b1
jmp 0x1002ea01
mov dword [ebp - 0x104], 0
jmp 0x1002e97e
mov eax, dword [ebp - 0x104]
inc eax
mov dword [ebp - 0x104], eax
cmp dword [ebp - 0x104], 2
jg 0x1002e9d4
mov dword [ebp - 0x10c], 0
jmp 0x1002e9a0
mov eax, dword [ebp - 0x10c]
inc eax
mov dword [ebp - 0x10c], eax
cmp dword [ebp - 0x10c], 2
jg 0x1002e9d2
push 0x30d
lea eax, [ebp - 0xac]
push eax
push 0x5675
push 0x1d49
push 0
lea eax, [ebp - 0x6e0]
push eax
call fcn.100326c7
add esp, 0x18
jmp 0x1002e993
jmp 0x1002e971
jmp 0x1002e9ed
mov byte [ebp - 0xad], 0
lea eax, [ebp - 0xad]
push eax
push 0
call fcn.100329b0
pop ecx
pop ecx
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x6e0]
call fcn.100114b1
jmp 0x1002e765
push 3
lea ecx, [ebp - 0x67c]
call fcn.10011475
mov dword [ebp - 4], 0x19
mov dword [ebp - 0x120], 0xfffffffe
mov dword [ebp - 0x114], 1
push 0xfe7
push 0x628
lea eax, [ebp - 0x67c]
push eax
lea eax, [ebp - 0x79c]
push eax
push 1
push 0
call fcn.1002b176
add esp, 0x18
mov dword [ebp - 0x120], 0
jmp 0x1002ea66
mov eax, dword [ebp - 0x120]
inc eax
mov dword [ebp - 0x120], eax
cmp dword [ebp - 0x120], 2
jg 0x1002ee15
mov dword [ebp - 0x80], 0xb6748f69
mov byte [ebp - 0x84], 0
movzx eax, byte [ebp - 0x84]
test eax, eax
je 0x1002eaa0
push 0
push 0x965
push 0x539b
call fcn.10034977
add esp, 0xc
mov dword [ebp - 0x80], 2
jmp 0x1002eab0
mov eax, dword [ebp - 0x80]
dec eax
mov dword [ebp - 0x80], eax
cmp dword [ebp - 0x80], 0
jl 0x1002ee10
mov dword [ebp - 0x154], 0
jmp 0x1002ead3
mov eax, dword [ebp - 0x154]
inc eax
mov dword [ebp - 0x154], eax
cmp dword [ebp - 0x154], 1
jge 0x1002eaef
mov eax, dword [ebp - 0x154]
mov dword [ebp + eax*4 - 0x15c], 0x5206
jmp 0x1002eac6
mov eax, dword [ebp - 0x80]
mov dword [ebp - 0x834], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x15c], 0
je 0x1002eb23
mov eax, 0xea0c
test eax, eax
je 0x1002eb23
cmp dword [ebp - 0x80], 0
je 0x1002eb23
mov dword [ebp - 0x3b0], 1
jmp 0x1002eb2a
and dword [ebp - 0x3b0], 0
push 0
lea ecx, [ebp - 0x67c]
call fcn.100114b6
mov ecx, dword [ebp - 0x3b0]
cmp ecx, dword [eax]
jl 0x1002eb4f
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x15c], 0
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x15c], 0xadd6
jge 0x1002eb74
mov eax, 0x290ce96f
test eax, eax
jne 0x1002eb74
and dword [ebp - 0x3b8], 0
jmp 0x1002eb7e
mov dword [ebp - 0x3b8], 1
cmp dword [ebp - 0x3b8], 0xa40f
jne 0x1002eb96
mov dword [ebp - 0x5f8], 1
jmp 0x1002eb9d
and dword [ebp - 0x5f8], 0
push 0
lea ecx, [ebp - 0x67c]
call fcn.100114b6
mov eax, 0x34c8
sub eax, 6
cmp eax, dword [ebp - 0x80]
jg 0x1002ebd2
push 2
lea ecx, [ebp - 0x67c]
call fcn.100114b6
cmp dword [eax], 0
jne 0x1002ebd2
and dword [ebp - 0x3c0], 0
jmp 0x1002ebdc
mov dword [ebp - 0x3c0], 1
mov eax, dword [ebp - 0x80]
cmp dword [ebp - 0x3c0], eax
je 0x1002ebf3
mov dword [ebp - 0x3c8], 1
jmp 0x1002ebfa
and dword [ebp - 0x3c8], 0
cmp dword [ebp - 0x3c8], 0xffffffff
jl 0x1002ec0f
mov dword [ebp - 0x3d0], 1
jmp 0x1002ec16
and dword [ebp - 0x3d0], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x15c]
imul eax, dword [ebp - 0x3d0]
mov dword [ebp - 0x114], eax
mov dword [ebp - 0x680], 0x235a
cmp dword [ebp - 0x680], 0x863
jge 0x1002ed50
push 0x1000a080
lea ecx, [ebp - 0x8ec]
call fcn.1000be4a
mov byte [ebp - 4], 0x1a
push 0x10009905
lea ecx, [ebp - 0x8c4]
call fcn.1000be4a
mov byte [ebp - 4], 0x1b
lea edx, [ebp - 0x8c4]
mov ecx, 0x10660718
call fcn.1004eb4c
and dword [ebp - 0x228], 0
and dword [ebp - 0xd8], 0
and dword [ebp - 0x1dc], 0
mov eax, dword [ebp - 0xd8]
cmp eax, dword [0x10009d00]
je 0x1002ed20
push dword [ebp - 0x228]
lea eax, [ebp - 0x8ec]
push eax
lea ecx, [ebp - 0x8c4]
call fcn.1004d694
mov dword [ebp - 0xd8], eax
mov eax, dword [ebp - 0xd8]
cmp eax, dword [0x10009d00]
je 0x1002ed1b
mov esi, dword [ebp - 0xd8]
sub esi, dword [ebp - 0x228]
inc esi
lea ecx, [ebp - 0x8c4]
call fcn.1000c275
mov edi, eax
sub edi, dword [ebp - 0xd8]
lea ecx, [ebp - 0x8ec]
call fcn.1000c275
sub edi, eax
inc edi
imul esi, edi
add esi, dword [ebp - 0x1dc]
mov dword [ebp - 0x1dc], esi
mov eax, dword [ebp - 0xd8]
inc eax
mov dword [ebp - 0x228], eax
jmp 0x1002ec97
push dword [ebp - 0x1dc]
push 0x10009e78
call fcn.100558e6
pop ecx
pop ecx
mov byte [ebp - 4], 0x1a
lea ecx, [ebp - 0x8c4]
call fcn.1000be79
mov byte [ebp - 4], 0x19
lea ecx, [ebp - 0x8ec]
call fcn.1000be79
mov dword [ebp - 0x114], 0
jmp 0x1002ed69
mov eax, dword [ebp - 0x114]
inc eax
mov dword [ebp - 0x114], eax
cmp dword [ebp - 0x114], 2
jg 0x1002ee0b
push 2
lea ecx, [ebp - 0x6d4]
call fcn.10011475
mov byte [ebp - 4], 0x1c
lea eax, [ebp - 0x7a4]
push eax
push 0
push 0x2b8d
push 0xea2
lea eax, [ebp - 0x6d4]
push eax
call fcn.100327ad
add esp, 0x14
push 0
lea ecx, [ebp - 0x6d4]
call fcn.100114b6
cmp dword [eax], 0
je 0x1002edcc
mov byte [ebp - 4], 0x19
lea ecx, [ebp - 0x6d4]
call fcn.100114b1
jmp 0x1002ee0b
mov byte [ebp - 0xbe], 0
movzx eax, byte [ebp - 0xbe]
test eax, eax
je 0x1002edf7
push 0x687
push 0xcb
push 0
push 0x22e
push 0
call dword [sym.imp.SHELL32.dll_SHGetFileInfoW]
mov byte [ebp - 4], 0x19
lea ecx, [ebp - 0x6d4]
call fcn.100114b1
jmp 0x1002ed5c
jmp 0x1002eaa9
jmp 0x1002ea59
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x67c]
call fcn.100114b1
mov byte [ebp - 0x81], 0
mov dword [ebp - 0x68], 0xfffffffa
mov dword [ebp - 0x68], 0
jmp 0x1002ee42
mov eax, dword [ebp - 0x68]
dec eax
mov dword [ebp - 0x68], eax
cmp dword [ebp - 0x68], 0xfffffffe
jne 0x1002eed9
push 2
lea ecx, [ebp - 0x870]
call fcn.10011475
mov dword [ebp - 4], 0x1d
mov dword [ebp - 0x3d8], 1
mov dword [ebp - 0x164], 0
jmp 0x1002ee83
mov eax, dword [ebp - 0x164]
inc eax
mov dword [ebp - 0x164], eax
cmp dword [ebp - 0x164], 2
jge 0x1002eea5
push dword [ebp - 0x164]
lea ecx, [ebp - 0x870]
call fcn.100114b6
mov dword [eax], 0xad95
jmp 0x1002ee76
lea eax, [ebp - 0x3d8]
push eax
push 0x639f
push 0
call fcn.10031fa1
add esp, 0xc
mov dword [ebp - 0x3d8], 1
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x870]
call fcn.100114b1
jmp 0x1002ee3b
mov dword [ebp - 0x68], 0
jmp 0x1002eee9
mov eax, dword [ebp - 0x68]
dec eax
mov dword [ebp - 0x68], eax
cmp dword [ebp - 0x68], 0xffffffea
jl 0x1002ef69
mov dword [ebp - 0x600], 0x98f01ba0
mov dword [ebp - 0x16c], 0
jmp 0x1002ef12
mov eax, dword [ebp - 0x16c]
inc eax
mov dword [ebp - 0x16c], eax
cmp dword [ebp - 0x16c], 2
jge 0x1002ef2e
mov eax, dword [ebp - 0x16c]
mov dword [ebp + eax*4 - 0x7f0], 0x3617
jmp 0x1002ef05
push 4
pop eax
shl eax, 0
mov dword [ebp + eax - 0x7f0], 0xfffffff7
cmp dword [ebp - 0x68], 0xfffffff7
jg 0x1002ef51
mov dword [ebp - 0x3e0], 1
jmp 0x1002ef58
and dword [ebp - 0x3e0], 0
mov eax, dword [ebp - 0x3e0]
mov dword [ebp - 0x600], eax
jmp 0x1002eee2
movzx eax, byte [ebp - 0x81]
test eax, eax
je 0x1002f1bc
mov dword [ebp - 0x6ac], 0x1d94
cmp dword [ebp - 0x6ac], 0xc34
jge 0x1002f0f3
call fcn.100577c7
push 0x20
pop ecx
imul ecx, ecx, 0
add eax, ecx
push eax
push 0x10009e30
push 0x10009e34
call fcn.10057e36
add esp, 0xc
call fcn.100577c7
push 0x20
pop ecx
shl ecx, 0
add eax, ecx
push eax
push 0x10009e3c
push 0x10009e40
call fcn.10057e36
add esp, 0xc
lea eax, [ebp - 0x608]
push eax
mov ecx, 0x10660718
call fcn.10010f2e
and dword [ebp - 0x200], 0
jmp 0x1002eff9
mov eax, dword [ebp - 0x200]
inc eax
mov dword [ebp - 0x200], eax
mov eax, dword [ebp - 0x200]
cmp eax, dword [ebp - 0x608]
jge 0x1002f0f3
lea eax, [ebp - 0x564]
push eax
lea eax, [ebp - 0x618]
push eax
lea eax, [ebp - 0x560]
push eax
lea eax, [ebp - 0x6b0]
push eax
lea eax, [ebp - 0x620]
push eax
lea eax, [ebp - 0x610]
push eax
lea eax, [ebp - 0x690]
push eax
lea eax, [ebp - 0x6b4]
push eax
mov ecx, 0x10660718
call fcn.10010f2e
mov ecx, eax
call fcn.10010f2e
mov ecx, eax
call fcn.10010f2e
mov ecx, eax
call fcn.10010f2e
mov ecx, eax
call fcn.10010f2e
mov ecx, eax
call fcn.10010f2e
mov ecx, eax
call fcn.10010f2e
mov ecx, eax
call fcn.10010f2e
mov eax, dword [ebp - 0x6b4]
add eax, dword [ebp - 0x610]
mov ecx, dword [ebp - 0x6b0]
add ecx, dword [ebp - 0x618]
cmp eax, ecx
jne 0x1002f0d3
mov eax, dword [ebp - 0x690]
add eax, dword [ebp - 0x620]
mov ecx, dword [ebp - 0x560]
add ecx, dword [ebp - 0x564]
cmp eax, ecx
jne 0x1002f0d3
push fcn.10013ebe
mov edx, 0x10009f54
mov ecx, 0x106605f8
call fcn.1000d867
mov ecx, eax
call fcn.1001111d
jmp 0x1002f0ee
push fcn.10013ebe
mov edx, 0x10009f50
mov ecx, 0x106605f8
call fcn.1000d867
mov ecx, eax
call fcn.1001111d
jmp 0x1002efec
mov dword [ebp - 0x58], 0xfffffffc
mov dword [ebp - 0x3e8], 0x9a924c00
mov dword [ebp - 0x56c], 1
mov dword [ebp - 0x174], 0
jmp 0x1002f127
mov eax, dword [ebp - 0x174]
inc eax
mov dword [ebp - 0x174], eax
cmp dword [ebp - 0x174], 2
jge 0x1002f143
mov eax, dword [ebp - 0x174]
mov dword [ebp + eax*4 - 0x828], 0x95a9
jmp 0x1002f11a
mov eax, dword [ebp - 0x58]
imul eax, dword [ebp - 0x58]
cmp eax, dword [ebp - 0x58]
jg 0x1002f16a
mov eax, dword [ebp - 0x58]
mov dword [ebp - 0x3e8], eax
cmp dword [ebp - 0x3e8], 0
jne 0x1002f16a
and dword [ebp - 0x3f0], 0
jmp 0x1002f174
mov dword [ebp - 0x3f0], 1
mov eax, dword [ebp - 0x3f0]
mov dword [ebp - 0x56c], eax
mov dword [ebp - 0x58], 0
jmp 0x1002f190
mov eax, dword [ebp - 0x58]
inc eax
mov dword [ebp - 0x58], eax
cmp dword [ebp - 0x58], 2
jge 0x1002f1a6
mov eax, dword [ebp - 0x58]
mov dword [ebp + eax*4 - 0x828], 0xfffffff9
jmp 0x1002f189
push 0x3703
push 0x552b
push 1
push 1
call fcn.1002ab10
add esp, 0x10
jmp 0x1002e719
push 4
push 0x1000
push dword [ebp - 0x1d0]
mov eax, dword [ebp - 0x450]
mov ecx, dword [ebp - 0x574]
add ecx, dword [eax + 0xc]
push ecx
push 0x4fe5
push 0x5727
call fcn.10029ab1
pop ecx
pop ecx
call eax
mov ecx, dword [ebp - 0x1d8]
mov dword [ecx], eax
mov dword [ebp - 0x6c], 0x5d6c05ba
mov dword [ebp - 0x1c8], 0xfffffff9
mov dword [ebp - 0x5b4], 0x3b1d
mov dword [ebp - 0x448], 3
push 0
call fcn.10031f1a
pop ecx
mov dword [ebp - 0x6c], 0
jmp 0x1002f236
mov eax, dword [ebp - 0x6c]
inc eax
mov dword [ebp - 0x6c], eax
cmp dword [ebp - 0x6c], 0x12
jl 0x1002f884
mov dword [ebp - 0x57c], 0x240b
cmp dword [ebp - 0x57c], 0xbf9
jge 0x1002f62e
push fcn.100114b1
push fcn.100233f9
push 0xa3
push 0xc
lea eax, [ebp - 0x1390]
push eax
call fcn.10057cd0
mov dword [ebp - 4], 0x1e
xor eax, eax
inc eax
je 0x1002f612
lea eax, [ebp - 0x1c0]
push eax
lea eax, [ebp - 0x2c]
push eax
push 0x10009df8
call fcn.10055d2e
add esp, 0xc
cmp dword [ebp - 0x2c], 0
jne 0x1002f2aa
jmp 0x1002f612
mov eax, dword [ebp - 0x2c]
imul eax, dword [ebp - 0x1c0]
mov dword [ebp - 0x584], eax
and dword [ebp - 0x17c], 0
jmp 0x1002f2d0
mov eax, dword [ebp - 0x17c]
inc eax
mov dword [ebp - 0x17c], eax
mov eax, dword [ebp - 0x17c]
cmp eax, dword [ebp - 0x584]
jge 0x1002f2f3
imul eax, dword [ebp - 0x17c], 0xc
lea ecx, [ebp + eax - 0x1390]
call fcn.1004db47
jmp 0x1002f2c3
and dword [ebp - 0x30], 0
jmp 0x1002f300
mov eax, dword [ebp - 0x30]
inc eax
mov dword [ebp - 0x30], eax
mov eax, dword [ebp - 0x1c0]
lea eax, [eax + eax - 1]
cmp dword [ebp - 0x30], eax
jge 0x1002f4c8
mov eax, dword [ebp - 0x30]
and eax, 1
je 0x1002f3f0
and dword [ebp - 0xb4], 0
jmp 0x1002f335
mov eax, dword [ebp - 0xb4]
inc eax
mov dword [ebp - 0xb4], eax
mov eax, dword [ebp - 0xb4]
cmp eax, dword [ebp - 0x2c]
jge 0x1002f3eb
lea eax, [ebp - 0x1e4]
push eax
push 0x10009d04
call fcn.10055d2e
pop ecx
pop ecx
cmp dword [ebp - 0x1e4], 0
jne 0x1002f3e6
mov eax, dword [ebp - 0x30]
cdq
sub eax, edx
sar eax, 1
inc eax
imul eax, dword [ebp - 0x2c]
add eax, dword [ebp - 0xb4]
mov dword [ebp - 0x58c], eax
lea eax, [ebp - 0x58c]
push eax
mov eax, dword [ebp - 0x30]
cdq
sub eax, edx
sar eax, 1
imul eax, dword [ebp - 0x2c]
add eax, dword [ebp - 0xb4]
imul eax, eax, 0xc
lea ecx, [ebp + eax - 0x1390]
call fcn.10023406
mov eax, dword [ebp - 0x30]
cdq
sub eax, edx
sar eax, 1
imul eax, dword [ebp - 0x2c]
add eax, dword [ebp - 0xb4]
mov dword [ebp - 0x594], eax
lea eax, [ebp - 0x594]
push eax
mov eax, dword [ebp - 0x30]
cdq
sub eax, edx
sar eax, 1
inc eax
imul eax, dword [ebp - 0x2c]
add eax, dword [ebp - 0xb4]
imul eax, eax, 0xc
lea ecx, [ebp + eax - 0x1390]
call fcn.10023406
jmp 0x1002f328
jmp 0x1002f4c3
and dword [ebp - 0xbc], 0
jmp 0x1002f406
mov eax, dword [ebp - 0xbc]
inc eax
mov dword [ebp - 0xbc], eax
mov eax, dword [ebp - 0x2c]
dec eax
cmp dword [ebp - 0xbc], eax
jge 0x1002f4c3
lea eax, [ebp - 0x1e4]
push eax
push 0x10009d04
call fcn.10055d2e
pop ecx
pop ecx
cmp dword [ebp - 0x1e4], 0
jne 0x1002f4be
mov eax, dword [ebp - 0x30]
cdq
sub eax, edx
sar eax, 1
imul eax, dword [ebp - 0x2c]
mov ecx, dword [ebp - 0xbc]
lea eax, [eax + ecx + 1]
mov dword [ebp - 0x59c], eax
lea eax, [ebp - 0x59c]
push eax
mov eax, dword [ebp - 0x30]
cdq
sub eax, edx
sar eax, 1
imul eax, dword [ebp - 0x2c]
add eax, dword [ebp - 0xbc]
imul eax, eax, 0xc
lea ecx, [ebp + eax - 0x1390]
call fcn.10023406
mov eax, dword [ebp - 0x30]
cdq
sub eax, edx
sar eax, 1
imul eax, dword [ebp - 0x2c]
add eax, dword [ebp - 0xbc]
mov dword [ebp - 0x5a4], eax
lea eax, [ebp - 0x5a4]
push eax
mov eax, dword [ebp - 0x30]
cdq
sub eax, edx
sar eax, 1
imul eax, dword [ebp - 0x2c]
mov ecx, dword [ebp - 0xbc]
lea eax, [eax + ecx + 1]
imul eax, eax, 0xc
lea ecx, [ebp + eax - 0x1390]
call fcn.10023406
jmp 0x1002f3f9
jmp 0x1002f2f9
lea ecx, [ebp - 0x72c]
call fcn.1004dc0b
mov byte [ebp - 4], 0x1f
push 0x28c
push 0xffffffffffffffff
lea eax, [ebp - 0xbec]
push eax
call fcn.1002a209
add esp, 0xc
and dword [ebp - 0x5ac], 0
lea eax, [ebp - 0x5ac]
push eax
lea ecx, [ebp - 0x72c]
call fcn.1004dc41
push 4
pop eax
imul eax, eax, 0
and dword [ebp + eax - 0xbec], 0
lea ecx, [ebp - 0x72c]
call fcn.1004dc4a
movzx eax, al
test eax, eax
jne 0x1002f5df
lea ecx, [ebp - 0x72c]
call fcn.1004dc53
mov eax, dword [eax]
mov dword [ebp - 0x220], eax
lea ecx, [ebp - 0x72c]
call fcn.1004dc8a
imul eax, dword [ebp - 0x220], 0xc
lea ecx, [ebp + eax - 0x1390]
call fcn.100234da
dec eax
mov dword [ebp - 0x184], eax
jmp 0x1002f571
mov eax, dword [ebp - 0x184]
dec eax
mov dword [ebp - 0x184], eax
cmp dword [ebp - 0x184], 0
jl 0x1002f5da
push dword [ebp - 0x184]
imul eax, dword [ebp - 0x220], 0xc
lea ecx, [ebp + eax - 0x1390]
call fcn.100114b6
mov eax, dword [eax]
mov dword [ebp - 0x1b8], eax
mov eax, dword [ebp - 0x1b8]
cmp dword [ebp + eax*4 - 0xbec], 0xffffffff
jne 0x1002f5d8
lea eax, [ebp - 0x1b8]
push eax
lea ecx, [ebp - 0x72c]
call fcn.1004dc41
mov eax, dword [ebp - 0x220]
mov eax, dword [ebp + eax*4 - 0xbec]
inc eax
mov ecx, dword [ebp - 0x1b8]
mov dword [ebp + ecx*4 - 0xbec], eax
jmp 0x1002f564
jmp 0x1002f514
mov eax, dword [ebp - 0x1c0]
imul eax, dword [ebp - 0x2c]
mov eax, dword [ebp + eax*4 - 0xbf0]
inc eax
push eax
push 0x10009d18
call fcn.100558e6
pop ecx
pop ecx
mov byte [ebp - 4], 0x1e
lea ecx, [ebp - 0x72c]
call fcn.1004dc98
jmp 0x1002f27e
or dword [ebp - 4], 0xffffffff
push fcn.100114b1
push 0xa3
push 0xc
lea eax, [ebp - 0x1390]
push eax
call fcn.100578a3
mov dword [ebp - 0x48], 0x66f5a9c4
mov dword [ebp - 0x124], 0
jmp 0x1002f64e
mov eax, dword [ebp - 0x124]
inc eax
mov dword [ebp - 0x124], eax
cmp dword [ebp - 0x124], 2
jge 0x1002f66a
mov eax, dword [ebp - 0x124]
mov dword [ebp + eax*4 - 0x208], 0xde0b4074
jmp 0x1002f641
mov dword [ebp - 0x48], 0
jmp 0x1002f67a
mov eax, dword [ebp - 0x48]
inc eax
mov dword [ebp - 0x48], eax
cmp dword [ebp - 0x48], 1
jg 0x1002f87f
mov eax, dword [ebp - 0x48]
cmp dword [ebp + eax*4 - 0x208], 0
je 0x1002f739
cmp dword [ebp - 0x6c], 0x3d7f1912
jne 0x1002f6aa
mov dword [ebp - 0x3f8], 1
jmp 0x1002f6b1
and dword [ebp - 0x3f8], 0
mov eax, dword [ebp - 0x6c]
mov dword [ebp - 0x1c8], eax
mov eax, dword [ebp - 0x1c8]
cmp eax, dword [ebp - 0x3f8]
jl 0x1002f6d4
mov dword [ebp - 0x400], 1
jmp 0x1002f6db
and dword [ebp - 0x400], 0
cmp dword [ebp - 0x400], 0
je 0x1002f6f6
cmp dword [ebp - 0x6c], 0
je 0x1002f6f6
mov dword [ebp - 0x408], 1
jmp 0x1002f6fd
and dword [ebp - 0x408], 0
mov eax, dword [ebp - 0x6c]
cmp dword [ebp - 0x408], eax
jg 0x1002f714
mov dword [ebp - 0x410], 1
jmp 0x1002f71b
and dword [ebp - 0x410], 0
mov eax, dword [ebp - 0x48]
mov eax, dword [ebp + eax*4 - 0x208]
cmp dword [ebp - 0x410], eax
jge 0x1002f739
mov dword [ebp - 0x418], 1
jmp 0x1002f740
and dword [ebp - 0x418], 0
cmp dword [ebp - 0x418], 0xfffffff8
jge 0x1002f755
mov dword [ebp - 0x420], 1
jmp 0x1002f75c
and dword [ebp - 0x420], 0
mov eax, dword [ebp - 0x48]
mov eax, dword [ebp + eax*4 - 0x208]
cmp dword [ebp - 0x420], eax
jne 0x1002f77a
mov dword [ebp - 0x428], 1
jmp 0x1002f781
and dword [ebp - 0x428], 0
mov eax, dword [ebp - 0x48]
mov eax, dword [ebp + eax*4 - 0x208]
cmp eax, dword [ebp - 0x428]
jl 0x1002f79f
mov dword [ebp - 0x430], 1
jmp 0x1002f7a6
and dword [ebp - 0x430], 0
mov eax, dword [ebp - 0x5b4]
cmp dword [ebp - 0x430], eax
jne 0x1002f7c0
mov dword [ebp - 0x5bc], 1
jmp 0x1002f7c7
and dword [ebp - 0x5bc], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x208]
mov ecx, dword [ebp - 0x48]
sub eax, dword [ebp + ecx*4 - 0x208]
je 0x1002f7f5
mov eax, 0x6aed1d25
test eax, eax
je 0x1002f7f5
mov dword [ebp - 0x438], 1
jmp 0x1002f7fc
and dword [ebp - 0x438], 0
mov eax, dword [ebp - 0x438]
mov dword [ebp - 0x448], eax
push 4
pop eax
test eax, eax
jne 0x1002f821
mov eax, 0xef3b0639
test eax, eax
jne 0x1002f821
and dword [ebp - 0x440], 0
jmp 0x1002f82b
mov dword [ebp - 0x440], 1
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x440]
mov dword [ebp + eax - 0x208], ecx
push 0
push 1
push 0x1fe2
lea eax, [ebp - 0x48]
push eax
lea eax, [ebp - 0x1c8]
push eax
push 0x4046
push 0x4d23
lea eax, [ebp - 0x448]
push eax
push 0x3509
push 0x2da5
push 0x1fca
call fcn.1002b02b
add esp, 0x2c
jmp 0x1002f673
jmp 0x1002f22f
mov eax, dword [ebp - 0x450]
mov ecx, dword [ebp - 0x1d8]
mov ecx, dword [ecx]
mov dword [eax + 8], ecx
push dword [ebp - 0x1d0]
push 0
mov eax, dword [ebp - 0x1d8]
push dword [eax]
call fcn.1002a209
add esp, 0xc
jmp 0x1002fb67
mov dword [ebp - 0x34], 0x94b4b132
mov dword [ebp - 0x130], 0x5e49
mov dword [ebp - 0x478], 0x1311e2db
mov dword [ebp - 0x470], 0xd4856cd8
mov dword [ebp - 0x11c], 0xfffffff9
mov dword [ebp - 0x1e8], 7
mov dword [ebp - 0x1e0], 0xffffffff
push 2
lea ecx, [ebp - 0x548]
call fcn.10011475
mov dword [ebp - 4], 0x20
mov dword [ebp - 0x5e4], 0xffffffff
mov dword [ebp - 0x128], 0
jmp 0x1002f92c
mov eax, dword [ebp - 0x128]
inc eax
mov dword [ebp - 0x128], eax
cmp dword [ebp - 0x128], 2
jge 0x1002f94e
push dword [ebp - 0x128]
lea ecx, [ebp - 0x548]
call fcn.100114b6
mov dword [eax], 0x6b2c4eb0
jmp 0x1002f91f
mov eax, dword [ebp - 0x34]
cmp dword [ebp - 0x34], eax
je 0x1002f962
mov dword [ebp - 0x458], 1
jmp 0x1002f969
and dword [ebp - 0x458], 0
mov eax, dword [ebp - 0x34]
cmp dword [ebp - 0x458], eax
jge 0x1002f980
mov dword [ebp - 0x5c4], 1
jmp 0x1002f987
and dword [ebp - 0x5c4], 0
mov eax, dword [ebp - 0x34]
mov dword [ebp - 0x87c], eax
cmp dword [ebp - 0x34], 0
jl 0x1002f9a2
mov dword [ebp - 0x460], 1
jmp 0x1002f9a9
and dword [ebp - 0x460], 0
mov eax, dword [ebp - 0x34]
sub eax, dword [ebp - 0x460]
imul eax, dword [ebp - 0x130]
cmp eax, dword [ebp - 0x478]
je 0x1002f9cd
mov dword [ebp - 0x468], 1
jmp 0x1002f9d4
and dword [ebp - 0x468], 0
mov eax, dword [ebp - 0x468]
mov dword [ebp - 0x470], eax
mov eax, dword [ebp - 0x470]
cmp dword [ebp - 0x34], eax
jle 0x1002f9f7
mov dword [ebp - 0x5cc], 1
jmp 0x1002f9fe
and dword [ebp - 0x5cc], 0
mov eax, dword [ebp - 0x11c]
mov dword [ebp - 0x7ac], eax
mov eax, dword [ebp - 0x34]
mov dword [ebp - 0x844], eax
mov eax, dword [ebp - 0x478]
mov dword [ebp - 0x7b4], eax
mov eax, dword [ebp - 0x34]
mov dword [ebp - 0x8a8], eax
mov eax, dword [ebp - 0x11c]
mov dword [ebp - 0x11c], eax
mov eax, dword [ebp - 0x11c]
mov dword [ebp - 0x1e8], eax
mov eax, dword [ebp - 0x34]
cmp dword [ebp - 0x1e8], eax
je 0x1002fa57
mov dword [ebp - 0x5d4], 1
jmp 0x1002fa5e
and dword [ebp - 0x5d4], 0
mov eax, dword [ebp - 0x130]
mov dword [ebp - 0x7bc], eax
mov eax, dword [ebp - 0x130]
add eax, 7
mov dword [ebp - 0x1e0], eax
je 0x1002fa87
mov dword [ebp - 0x480], 1
jmp 0x1002fa8e
and dword [ebp - 0x480], 0
push 0
lea ecx, [ebp - 0x548]
call fcn.100114b6
mov ecx, dword [ebp - 0x480]
mov dword [eax], ecx
mov eax, dword [ebp - 0x1e0]
mov dword [ebp - 0x854], eax
cmp dword [ebp - 0x11c], 0xfff6
jne 0x1002fac7
mov dword [ebp - 0x488], 1
jmp 0x1002face
and dword [ebp - 0x488], 0
mov eax, dword [ebp - 0x34]
cmp eax, dword [ebp - 0x488]
je 0x1002fae5
mov dword [ebp - 0x5dc], 1
jmp 0x1002faec
and dword [ebp - 0x5dc], 0
push 1
lea ecx, [ebp - 0x548]
call fcn.100114b6
push 0
lea ecx, [ebp - 0x548]
call fcn.100114b6
push 0
lea ecx, [ebp - 0x548]
call fcn.100114b6
cmp dword [ebp - 0x130], 0
jne 0x1002fb2e
cmp dword [ebp - 0x1e8], 0
jne 0x1002fb2e
and dword [ebp - 0x490], 0
jmp 0x1002fb38
mov dword [ebp - 0x490], 1
mov eax, dword [ebp - 0x490]
mov dword [ebp - 0x5e4], eax
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x548]
call fcn.100114b1
push 0x5050
push 1
push 0x4882
call fcn.1002a9fe
add esp, 0xc
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
mov esp, ebp
pop ebp
ret