Function at 0x1002d2ee
Capabilities:
Suspend thread

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x1006c5d2
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
mov eax, 0x1460
call fcn.10066f00
push esi
push edi
movzx eax, byte [ebp + 0x10]
test eax, eax
je 0x10036cfa
mov eax, dword [ebp + 0x1c]
mov dword [ebp - 0xdac], eax
mov eax, dword [ebp + 0x2c]
mov dword [ebp - 0xd74], eax
lea eax, [ebp + 0x14]
mov dword [ebp - 0xc08], eax
mov eax, dword [ebp + 8]
mov dword [ebp - 0xda4], eax
mov eax, dword [ebp + 0x24]
mov dword [ebp - 0xd9c], eax
mov eax, dword [ebp + 0x28]
mov dword [ebp - 0xd94], eax
mov eax, dword [ebp - 0xc08]
movzx eax, byte [eax]
test eax, eax
je 0x1002d38f
mov eax, dword [ebp - 0xd74]
mov dword [ebp - 0xd8c], eax
mov eax, dword [ebp - 0xd8c]
mov dword [ebp - 0x664], eax
mov eax, dword [ebp - 0x664]
mov eax, dword [eax]
dec eax
mov ecx, dword [ebp - 0x664]
mov dword [ecx], eax
jmp 0x10036cf5
mov eax, dword [ebp - 0xd94]
mov dword [ebp - 0xe38], eax
mov eax, dword [ebp - 0xd9c]
mov dword [ebp - 0xc1c], eax
mov eax, dword [ebp - 0xda4]
mov dword [ebp - 0xb14], eax
mov eax, dword [ebp - 0xdac]
mov dword [ebp - 0x40c], eax
mov dword [ebp - 0xdbc], 0xbf8f
mov dword [ebp - 0xdb4], 0xfffffffc
mov dword [ebp - 0xde0], 0
mov dword [ebp - 0xdd8], 0x3ba6aed1
push 0
push 1
push 0x127a
push 0
call fcn.1002bc86
add esp, 0x10
push 0x329e
lea eax, [ebp - 0xdb4]
push eax
push 0x821
push 0x6e33
lea eax, [ebp - 0xdbc]
push eax
push 0x4f39
lea eax, [ebp - 0xdd8]
push eax
lea eax, [ebp - 0xde0]
push eax
push 0
push 0
push 1
push 0x7a57
push 0x491c
call fcn.1003f5a9
add esp, 0x34
push 1
lea ecx, [ebp - 0xbe0]
call fcn.1000e5bc
and dword [ebp - 4], 0
mov dword [ebp - 0x64], 0xd8143836
mov dword [ebp - 0xf8c], 0x56cd
mov dword [ebp - 0xf88], 0x56cd
mov dword [ebp - 0xf84], 0x56cd
mov dword [ebp - 0xf80], 0x56cd
lea ecx, [ebp - 0x461]
call fcn.1000e632
push eax
lea eax, [ebp - 0xf7c]
push eax
lea eax, [ebp - 0xf8c]
push eax
lea ecx, [ebp - 0x13c0]
call fcn.1000e635
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0x12d4]
call fcn.1000e5f8
mov byte [ebp - 4], 1
mov dword [ebp - 0x2e4], 1
mov dword [ebp - 0x238], 1
mov dword [ebp - 0x1a0], 0
jmp 0x1002d4e8
mov eax, dword [ebp - 0x1a0]
inc eax
mov dword [ebp - 0x1a0], eax
cmp dword [ebp - 0x1a0], 2
jge 0x1002d504
mov eax, dword [ebp - 0x1a0]
mov dword [ebp + eax*4 - 0x4ac], 0xeee2
jmp 0x1002d4db
push 0x1d9f
lea eax, [ebp - 0xbe0]
push eax
push 0x24a5
push 0
lea eax, [ebp - 0x1a0]
push eax
call fcn.10040c2a
add esp, 0x14
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x4ac]
mov dword [ebp - 0x1354], eax
push 0
lea ecx, [ebp - 0xbe0]
call fcn.1000e623
cmp dword [eax], 0
jne 0x1002d5d3
push 0
lea ecx, [ebp - 0xbe0]
call fcn.1000e623
mov esi, eax
push 0
lea ecx, [ebp - 0xbe0]
call fcn.1000e623
mov ecx, dword [esi]
cmp ecx, dword [eax]
je 0x1002d57d
mov dword [ebp - 0xb24], 1
jmp 0x1002d584
and dword [ebp - 0xb24], 0
push 4
pop eax
shl eax, 0
push 4
pop ecx
shl ecx, 0
mov ecx, dword [ebp + ecx - 0x4ac]
add ecx, dword [ebp - 0xb24]
cmp dword [ebp + eax - 0x4ac], ecx
je 0x1002d5b2
mov dword [ebp - 0xde8], 1
jmp 0x1002d5b9
and dword [ebp - 0xde8], 0
mov dword [ebp - 0x64], 0xfffffff6
mov eax, dword [ebp - 0x64]
neg eax
cmp eax, 0xfffffffd
jl 0x1002d5d3
and dword [ebp - 0xdf0], 0
jmp 0x1002d5dd
mov dword [ebp - 0xdf0], 1
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x4ac]
mov dword [ebp - 0x109c], eax
push 0
lea ecx, [ebp - 0xbe0]
call fcn.1000e623
mov eax, 0xde57413
dec eax
cmp eax, 0xfffffff6
jl 0x1002d614
mov dword [ebp - 0xb2c], 1
jmp 0x1002d61b
and dword [ebp - 0xb2c], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x4ac]
cmp dword [ebp - 0xb2c], eax
je 0x1002d63c
mov dword [ebp - 0xb34], 1
jmp 0x1002d643
and dword [ebp - 0xb34], 0
push 0
lea ecx, [ebp - 0x12d4]
call fcn.1000e623
mov ecx, dword [ebp - 0xb34]
cmp ecx, dword [eax]
jle 0x1002d66d
push 0xfffffffffffffffd
pop eax
test eax, eax
je 0x1002d66d
mov dword [ebp - 0xb3c], 1
jmp 0x1002d674
and dword [ebp - 0xb3c], 0
mov eax, dword [ebp - 0xb3c]
mov dword [ebp - 0x2e4], eax
cmp dword [ebp - 0x2e4], 0
je 0x1002d7ca
mov dword [ebp - 0xb60], 0x2f37
mov dword [ebp - 0x380], 1
push 4
lea ecx, [ebp - 0xff4]
call fcn.1000e5bc
mov byte [ebp - 4], 2
mov dword [ebp - 0x260], 0
jmp 0x1002d6cb
mov eax, dword [ebp - 0x260]
inc eax
mov dword [ebp - 0x260], eax
cmp dword [ebp - 0x260], 4
jge 0x1002d6ed
push dword [ebp - 0x260]
lea ecx, [ebp - 0xff4]
call fcn.1000e623
mov dword [eax], 0xeeda781b
jmp 0x1002d6be
mov eax, dword [ebp - 0x380]
cmp dword [ebp - 0x238], eax
jle 0x1002d707
mov dword [ebp - 0xb44], 1
jmp 0x1002d70e
and dword [ebp - 0xb44], 0
cmp dword [ebp - 0xb44], 0x6717b38e
jge 0x1002d726
mov dword [ebp - 0xb4c], 1
jmp 0x1002d72d
and dword [ebp - 0xb4c], 0
mov eax, dword [ebp - 0xb4c]
mov dword [ebp - 0x2e4], eax
mov eax, dword [ebp - 0x64]
cmp dword [ebp - 0x2e4], eax
jl 0x1002d750
mov dword [ebp - 0xb68], 1
jmp 0x1002d757
and dword [ebp - 0xb68], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x4ac]
sub eax, 0x846b
mov dword [ebp - 0xb60], eax
mov eax, dword [ebp - 0xb60]
add eax, 0x336
cmp eax, dword [ebp - 0xb68]
jg 0x1002d78e
mov dword [ebp - 0xb70], 1
jmp 0x1002d795
and dword [ebp - 0xb70], 0
mov eax, dword [ebp - 0xb70]
mov dword [ebp - 0x380], eax
mov esi, dword [ebp - 0x380]
push 0
lea ecx, [ebp - 0xff4]
call fcn.1000e623
mov dword [eax], esi
mov byte [ebp - 4], 1
lea ecx, [ebp - 0xff4]
call fcn.1000e61e
jmp 0x1002d86c
mov dword [ebp - 0xb78], 0
mov dword [ebp - 0x268], 0
jmp 0x1002d7ed
mov eax, dword [ebp - 0x268]
inc eax
mov dword [ebp - 0x268], eax
cmp dword [ebp - 0x268], 2
jge 0x1002d809
mov eax, dword [ebp - 0x268]
mov dword [ebp + eax*4 - 0xf40], 0xffffffff
jmp 0x1002d7e0
mov dword [ebp - 0x238], 0x14
jmp 0x1002d822
mov eax, dword [ebp - 0x238]
inc eax
mov dword [ebp - 0x238], eax
cmp dword [ebp - 0x238], 0x23
jg 0x1002d85c
mov dword [ebp - 0xdf8], 0xc553
mov eax, dword [ebp - 0xdf8]
mov dword [ebp - 0x64], eax
mov eax, dword [ebp - 0x64]
mov dword [ebp - 0xb78], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0xb78]
mov dword [ebp + eax - 0xf40], ecx
jmp 0x1002d815
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x64]
mov dword [ebp + eax - 0xf40], ecx
mov dword [ebp - 0x64], 0
jmp 0x1002d87c
mov eax, dword [ebp - 0x64]
dec eax
mov dword [ebp - 0x64], eax
cmp dword [ebp - 0x64], 0xffffffe9
jle 0x1002d8d4
mov dword [ebp - 0xe00], 0x9e520c3d
push 0x5d71
push 0x9ad
push 0
push 0
push 0xf9f
push 1
push 0x4315
push 0x2bc8
push 0xe8f
push 0x28d4
push 0x2c5e
push 0x7c33
call fcn.1002c6ce
add esp, 0x30
cmp dword [ebp - 0xe00], 0
je 0x1002d8d2
jmp 0x1002d8d4
jmp 0x1002d875
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x12d4]
call fcn.1000e61e
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xbe0]
call fcn.1000e61e
push 3
lea ecx, [ebp - 0x474]
call fcn.1000e5bc
mov dword [ebp - 4], 3
mov dword [ebp - 0x1a8], 0x66e58d02
mov dword [ebp - 0xe18], 0xd2a6f9a4
mov dword [ebp - 0x88], 0
jmp 0x1002d933
mov eax, dword [ebp - 0x88]
inc eax
mov dword [ebp - 0x88], eax
cmp dword [ebp - 0x88], 3
jge 0x1002d955
push dword [ebp - 0x88]
lea ecx, [ebp - 0x474]
call fcn.1000e623
mov dword [eax], 0xf40fc027
jmp 0x1002d926
mov dword [ebp - 0x88], 0
jmp 0x1002d96e
mov eax, dword [ebp - 0x88]
inc eax
mov dword [ebp - 0x88], eax
cmp dword [ebp - 0x88], 1
jge 0x1002d98a
mov eax, dword [ebp - 0x88]
mov dword [ebp + eax*4 - 0xe10], 0x69919c44
jmp 0x1002d961
push 1
lea ecx, [ebp - 0x474]
call fcn.1000e623
mov eax, dword [eax]
mov dword [ebp - 0x1a8], eax
imul eax, dword [ebp - 0x1a8], 3
test eax, eax
jne 0x1002dacd
push 1
lea ecx, [ebp - 0x474]
call fcn.1000e623
cmp dword [eax], 0
je 0x1002dacd
push 0
lea ecx, [ebp - 0x474]
call fcn.1000e623
mov esi, eax
push 1
lea ecx, [ebp - 0x474]
call fcn.1000e623
mov ecx, dword [esi]
cmp ecx, dword [eax]
jle 0x1002d9f2
mov dword [ebp - 0xb80], 1
jmp 0x1002d9f9
and dword [ebp - 0xb80], 0
cmp dword [ebp - 0xb80], 0xf5ebec5
jg 0x1002da11
mov dword [ebp - 0xb88], 1
jmp 0x1002da18
and dword [ebp - 0xb88], 0
push 1
lea ecx, [ebp - 0x474]
call fcn.1000e623
mov ecx, dword [ebp - 0xb88]
add ecx, dword [eax]
jns 0x1002da44
cmp dword [ebp - 0x1a8], 0
je 0x1002da44
mov dword [ebp - 0xb90], 1
jmp 0x1002da4b
and dword [ebp - 0xb90], 0
push 1
lea ecx, [ebp - 0x474]
call fcn.1000e623
mov eax, dword [eax]
cmp eax, dword [ebp - 0xb90]
jle 0x1002da6e
mov dword [ebp - 0xb98], 1
jmp 0x1002da75
and dword [ebp - 0xb98], 0
mov eax, dword [ebp - 0xb98]
sub eax, dword [ebp - 0x1a8]
jne 0x1002da8f
mov dword [ebp - 0xba0], 1
jmp 0x1002da96
and dword [ebp - 0xba0], 0
cmp dword [ebp - 0xba0], 8
jg 0x1002dab4
cmp dword [ebp - 0x1a8], 0
je 0x1002dab4
mov dword [ebp - 0xba8], 1
jmp 0x1002dabb
and dword [ebp - 0xba8], 0
cmp dword [ebp - 0xba8], 0
je 0x1002dacd
and dword [ebp - 0xe08], 0
jmp 0x1002dad7
mov dword [ebp - 0xe08], 1
push 1
lea ecx, [ebp - 0x474]
call fcn.1000e623
push 4
pop eax
imul eax, eax, 0
lea eax, [ebp + eax - 0xe10]
mov dword [ebp - 0xb1c], eax
push 2
lea ecx, [ebp - 0x474]
call fcn.1000e623
mov ecx, dword [ebp - 0xb1c]
mov eax, dword [eax]
mov dword [ecx], eax
push 1
lea ecx, [ebp - 0x474]
call fcn.1000e623
mov ecx, dword [ebp - 0xb1c]
mov ecx, dword [ecx]
cmp ecx, dword [eax]
jge 0x1002db33
mov dword [ebp - 0x4fc], 1
jmp 0x1002db3a
and dword [ebp - 0x4fc], 0
mov eax, dword [ebp - 0x4fc]
mov dword [ebp - 0xe18], eax
mov byte [ebp - 0x153], 0
movzx eax, byte [ebp - 0x153]
test eax, eax
je 0x1002db71
push 0x3a5b
push 0x2af6
push 0
push 0x4280
call fcn.1003f1aa
add esp, 0x10
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x474]
call fcn.1000e61e
mov dword [ebp - 0xe8], 0xbf8f
mov dword [ebp - 0x410], 0xfffffffc
push 3
lea ecx, [ebp - 0x12e4]
call fcn.1000e5bc
mov dword [ebp - 4], 4
mov dword [ebp - 0x10a4], 0xe6bacd79
mov dword [ebp - 0xf78], 0xfffffff7
mov dword [ebp - 0xf74], 0xfffffff7
mov dword [ebp - 0xf70], 0xfffffff7
mov dword [ebp - 0xf6c], 0xfffffff7
lea ecx, [ebp - 0x375]
call fcn.1000e632
push eax
lea eax, [ebp - 0xf68]
push eax
lea eax, [ebp - 0xf78]
push eax
lea ecx, [ebp - 0x1408]
call fcn.1000e635
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0x13a0]
call fcn.1000e5f8
mov byte [ebp - 4], 5
push 1
lea ecx, [ebp - 0x100c]
call fcn.1000e5bc
mov byte [ebp - 4], 6
mov dword [ebp - 0xb0], 0
jmp 0x1002dc3d
mov eax, dword [ebp - 0xb0]
inc eax
mov dword [ebp - 0xb0], eax
cmp dword [ebp - 0xb0], 3
jge 0x1002dc5f
push dword [ebp - 0xb0]
lea ecx, [ebp - 0x12e4]
call fcn.1000e623
mov dword [eax], 0x6579
jmp 0x1002dc30
mov dword [ebp - 0xb0], 0
jmp 0x1002dc78
mov eax, dword [ebp - 0xb0]
inc eax
mov dword [ebp - 0xb0], eax
cmp dword [ebp - 0xb0], 1
jge 0x1002dc9a
push dword [ebp - 0xb0]
lea ecx, [ebp - 0x100c]
call fcn.1000e623
mov dword [eax], 0x13f1
jmp 0x1002dc6b
push 0x2213
lea eax, [ebp - 0x100c]
push eax
push 0x4b64
push 0
call fcn.10036fdc
add esp, 0x10
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x100c]
call fcn.1000e61e
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x13a0]
call fcn.1000e61e
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x12e4]
call fcn.1000e61e
mov dword [ebp - 0x390], 0
mov dword [ebp - 0xe44], 0xbf5cd53b
mov dword [ebp - 0x4f0], 4
mov dword [ebp - 0xe4c], 0x44401d1b
mov dword [ebp - 0xe20], 0xffffffff
push 2
lea ecx, [ebp - 0x1048]
call fcn.1000e5bc
mov dword [ebp - 4], 7
push 1
lea eax, [ebp - 0x10ac]
push eax
push 0x255f
lea eax, [ebp - 0x1048]
push eax
push 0
call fcn.1002bbba
add esp, 0x14
lea eax, [ebp - 0xe20]
push eax
push 0x6bbd
push 0x215
push 0
lea eax, [ebp - 0x4f0]
push eax
push 0x37de
push 0
lea eax, [ebp - 0xe44]
push eax
lea eax, [ebp - 0xe4c]
push eax
call fcn.100409e2
add esp, 0x24
push 0x68c3
lea eax, [ebp - 0x1048]
push eax
push 0
push 0
push 0x280a
push 0x7432
push 0x5210
lea eax, [ebp - 0x4f0]
push eax
push 1
call fcn.1004763d
add esp, 0x24
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x1048]
call fcn.1000e61e
mov dword [ebp - 0xc40], 0x3ba6aed1
push 3
lea ecx, [ebp - 0xe98]
call fcn.1000e5bc
mov dword [ebp - 4], 8
mov dword [ebp - 0x200], 0
jmp 0x1002ddf4
mov eax, dword [ebp - 0x200]
inc eax
mov dword [ebp - 0x200], eax
cmp dword [ebp - 0x200], 4
jge 0x1002de10
mov eax, dword [ebp - 0x200]
mov dword [ebp + eax*4 - 0x145c], 0xc85f70ad
jmp 0x1002dde7
push 0x2751
push 0x3018
push 0
lea eax, [ebp - 0x200]
push eax
lea eax, [ebp - 0xe98]
push eax
call fcn.1003f84b
add esp, 0x14
push 1
lea ecx, [ebp - 0xe98]
call fcn.1000e623
and dword [eax], 0
jmp 0x1002de68
push 1
lea ecx, [ebp - 0xe98]
call fcn.1000e623
mov dword [ebp - 0x84c], eax
mov eax, dword [ebp - 0x84c]
mov eax, dword [eax]
inc eax
mov ecx, dword [ebp - 0x84c]
mov dword [ecx], eax
push 1
lea ecx, [ebp - 0xe98]
call fcn.1000e623
cmp dword [eax], 3
jg 0x1002decf
mov dword [ebp - 0xe54], 1
mov byte [ebp - 0x119], 0
push 0x2701
push 0x375e
push 0
push 0
lea eax, [ebp - 0x119]
push eax
push 1
call fcn.1003e80a
add esp, 0x18
push 0x7887
push 0x4eb0
push 0x3f2e
lea eax, [ebp - 0xe54]
push eax
push 0
call fcn.10046e4d
add esp, 0x14
jmp 0x1002de44
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xe98]
call fcn.1000e61e
mov byte [ebp - 0x14a], 0
mov dword [ebp - 0xe5c], 0x138e
cmp dword [ebp - 0xe5c], 0x118f
jge 0x1002e0c6
lea eax, [ebp - 0x408]
push eax
push 0x1000775c
call fcn.100528eb
pop ecx
pop ecx
mov eax, dword [ebp - 0x408]
mov dword [ebp - 0xe64], eax
mov eax, dword [ebp - 0x408]
dec eax
mov dword [ebp - 0x408], eax
cmp dword [ebp - 0xe64], 0
je 0x1002e0c6
lea eax, [ebp - 0x90]
push eax
lea eax, [ebp - 0xa4]
push eax
lea eax, [ebp - 0x15c]
push eax
push 0x100077c8
call fcn.100528eb
add esp, 0x10
mov eax, dword [ebp - 0x15c]
add eax, dword [ebp - 0xa4]
mov ecx, dword [ebp - 0x90]
lea eax, [eax + ecx + 2]
cdq
push 3
pop ecx
idiv ecx
mov dword [ebp - 0xb8], eax
mov eax, dword [ebp - 0xb8]
mov dword [ebp - 0x508], eax
mov eax, dword [ebp - 0x15c]
cmp eax, dword [ebp - 0xa4]
jge 0x1002dfa8
mov eax, dword [ebp - 0x90]
cmp eax, dword [ebp - 0xa4]
jl 0x1002e0af
mov eax, dword [ebp - 0x15c]
cmp eax, dword [ebp - 0x90]
jge 0x1002dfda
mov eax, dword [ebp - 0x90]
mov dword [ebp - 0xe6c], eax
mov eax, dword [ebp - 0x15c]
mov dword [ebp - 0x90], eax
mov eax, dword [ebp - 0xe6c]
mov dword [ebp - 0x15c], eax
mov eax, dword [ebp - 0x90]
cmp eax, dword [ebp - 0xb8]
jge 0x1002e02c
mov eax, dword [ebp - 0xb8]
sub eax, dword [ebp - 0x90]
mov ecx, dword [ebp - 0xa4]
sub ecx, eax
mov dword [ebp - 0xa4], ecx
cmp dword [ebp - 0xa4], 0
jle 0x1002e019
mov eax, dword [ebp - 0xa4]
mov dword [ebp - 0x4f8], eax
jmp 0x1002e020
and dword [ebp - 0x4f8], 0
mov eax, dword [ebp - 0x4f8]
mov dword [ebp - 0xa4], eax
mov eax, dword [ebp - 0xb8]
cmp eax, dword [ebp - 0x90]
jle 0x1002e048
mov eax, dword [ebp - 0xb8]
mov dword [ebp - 0x850], eax
jmp 0x1002e054
mov eax, dword [ebp - 0x90]
mov dword [ebp - 0x850], eax
mov eax, dword [ebp - 0x850]
mov dword [ebp - 0xb8], eax
mov eax, dword [ebp - 0xa4]
mov ecx, dword [ebp - 0x15c]
lea eax, [ecx + eax + 1]
cdq
sub eax, edx
sar eax, 1
mov dword [ebp - 0x500], eax
mov eax, dword [ebp - 0xb8]
cmp eax, dword [ebp - 0x500]
jle 0x1002e097
mov eax, dword [ebp - 0xb8]
mov dword [ebp - 0x9f8], eax
jmp 0x1002e0a3
mov eax, dword [ebp - 0x500]
mov dword [ebp - 0x9f8], eax
mov eax, dword [ebp - 0x9f8]
mov dword [ebp - 0x508], eax
push dword [ebp - 0x508]
push 0x100077ac
call fcn.10052b06
pop ecx
pop ecx
jmp 0x1002df12
push 1
lea ecx, [ebp - 0x1060]
call fcn.1000e5bc
mov dword [ebp - 4], 9
mov dword [ebp - 0x164], 0xfffffffd
mov dword [ebp - 0x10b4], 0x35e1f6f0
mov dword [ebp - 0x10bc], 0xbeb96916
mov dword [ebp - 0x10c4], 0x4902314a
mov dword [ebp - 0x10cc], 0xc86992f1
mov dword [ebp - 0x10d4], 0x2b4b5a9c
mov dword [ebp - 0x10dc], 0xccedb775
mov dword [ebp - 0x10e4], 0x2b79dc86
mov dword [ebp - 0x30], 0
jmp 0x1002e13a
mov eax, dword [ebp - 0x30]
inc eax
mov dword [ebp - 0x30], eax
cmp dword [ebp - 0x30], 1
jge 0x1002e156
push dword [ebp - 0x30]
lea ecx, [ebp - 0x1060]
call fcn.1000e623
mov dword [eax], 0xfffffffe
jmp 0x1002e133
mov dword [ebp - 0x30], 0
jmp 0x1002e166
mov eax, dword [ebp - 0x30]
inc eax
mov dword [ebp - 0x30], eax
cmp dword [ebp - 0x30], 4
jge 0x1002e17c
mov eax, dword [ebp - 0x30]
mov dword [ebp + eax*4 - 0x146c], 0
jmp 0x1002e15f
mov dword [ebp - 0x30], 0
jmp 0x1002e18c
mov eax, dword [ebp - 0x30]
inc eax
mov dword [ebp - 0x30], eax
cmp dword [ebp - 0x30], 3
jge 0x1002e1a2
mov eax, dword [ebp - 0x30]
mov dword [ebp + eax*4 - 0x1304], 0x3c8a0c09
jmp 0x1002e185
push 0
lea ecx, [ebp - 0x1060]
call fcn.1000e623
cmp dword [eax], 0xffffffff
jl 0x1002e1c0
mov dword [ebp - 0x858], 1
jmp 0x1002e1c7
and dword [ebp - 0x858], 0
mov eax, dword [ebp - 0x858]
mov dword [ebp - 0x164], eax
cmp dword [ebp - 0x164], 0
je 0x1002e23d
mov dword [ebp - 0x510], 0xc0272a72
mov dword [ebp - 0x2e8], 0
jmp 0x1002e1ff
mov eax, dword [ebp - 0x2e8]
inc eax
mov dword [ebp - 0x2e8], eax
cmp dword [ebp - 0x2e8], 3
jge 0x1002e21b
mov eax, dword [ebp - 0x2e8]
mov dword [ebp + eax*4 - 0x13b8], 0xffffffff
jmp 0x1002e1f2
mov dword [ebp - 0x510], 0xda4d073f
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x510]
mov dword [ebp + eax - 0x13b8], ecx
jmp 0x1002e341
mov dword [ebp - 0x10ec], 0xffffffff
mov dword [ebp - 0x115c], 0xd018d303
mov dword [ebp - 0x1164], 0xd6b9c2d6
mov dword [ebp - 0x116c], 0xa945cb81
push 1
lea ecx, [ebp - 0x12f4]
call fcn.1000e5bc
mov byte [ebp - 4], 0xa
mov dword [ebp - 0xb74], 0x489be67e
mov dword [ebp - 0x270], 0
jmp 0x1002e299
mov eax, dword [ebp - 0x270]
inc eax
mov dword [ebp - 0x270], eax
cmp dword [ebp - 0x270], 1
jge 0x1002e2bb
push dword [ebp - 0x270]
lea ecx, [ebp - 0x12f4]
call fcn.1000e623
mov dword [eax], 0xa0f0f5eb
jmp 0x1002e28c
mov dword [ebp - 0x164], 0xfffffffe
jmp 0x1002e2d4
mov eax, dword [ebp - 0x164]
inc eax
mov dword [ebp - 0x164], eax
cmp dword [ebp - 0x164], 9
jl 0x1002e332
mov dword [ebp - 0x1174], 0x41a9c213
mov dword [ebp - 0x117c], 0xfffffff9
mov dword [ebp - 0x1184], 0xcca69919
mov dword [ebp - 0x118c], 0xd2a6f9a4
mov dword [ebp - 0x1194], 0xe7f13bcf
mov dword [ebp - 0x119c], 0
mov dword [ebp - 0x11a4], 6
mov eax, dword [ebp - 0xb74]
inc eax
mov dword [ebp - 0xb74], eax
jmp 0x1002e2c7
mov byte [ebp - 4], 9
lea ecx, [ebp - 0x12f4]
call fcn.1000e61e
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x1304]
inc eax
push 4
pop ecx
shl ecx, 1
mov dword [ebp + ecx - 0x1304], eax
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x1060]
call fcn.1000e61e
movzx eax, byte [ebp - 0x14a]
test eax, eax
je 0x1002e72f
push 2
lea ecx, [ebp - 0xea8]
call fcn.1000e5bc
mov dword [ebp - 4], 0xb
mov dword [ebp - 0x520], 0x4a61bf07
mov dword [ebp - 0x11ac], 0xcb27f08e
mov dword [ebp - 0x11b4], 0x1bb35b68
mov dword [ebp - 0x11bc], 0x7e06985b
mov dword [ebp - 0xd6c], 0xfffffff8
mov dword [ebp - 0x11c4], 0xffffffff
push 1
lea ecx, [ebp - 0x1314]
call fcn.1000e5bc
mov byte [ebp - 4], 0xc
push 0x3471
push 0x37ae
push 0x7c9d
push 0
push 0x2383
push 0x4a90
push 0x7e26
lea eax, [ebp - 0xe74]
push eax
lea eax, [ebp - 0xea8]
push eax
push 0x404a
push 0x74da
call fcn.10048247
add esp, 0x2c
push 0
lea eax, [ebp - 0xe74]
push eax
lea eax, [ebp - 0x1314]
push eax
call fcn.1003fc36
add esp, 0xc
push 1
lea ecx, [ebp - 0xea8]
call fcn.1000e623
mov dword [eax], 2
jmp 0x1002e46a
push 1
lea ecx, [ebp - 0xea8]
call fcn.1000e623
mov dword [ebp - 0x518], eax
mov eax, dword [ebp - 0x518]
mov eax, dword [eax]
inc eax
mov ecx, dword [ebp - 0x518]
mov dword [ecx], eax
push 1
lea ecx, [ebp - 0xea8]
call fcn.1000e623
cmp dword [eax], 4
je 0x1002e709
mov dword [ebp - 0x1b0], 0x3245f1db
mov dword [ebp - 0x98], 0xf147909b
mov dword [ebp - 0xc18], 0xb489f7a9
mov dword [ebp - 0x868], 0xf0bb9a67
mov dword [ebp - 0x11cc], 0x9843c6bc
mov dword [ebp - 0x11d4], 0x7ad46d23
mov dword [ebp - 0x11dc], 0xffffffff
mov dword [ebp - 0x388], 0x18144871
mov dword [ebp - 0x1b0], 2
jmp 0x1002e4e9
mov eax, dword [ebp - 0x1b0]
inc eax
mov dword [ebp - 0x1b0], eax
cmp dword [ebp - 0x1b0], 0xa
jle 0x1002e704
mov dword [ebp - 0xe7c], 0xffffffff
mov dword [ebp - 0x11e4], 0xc37fc054
mov dword [ebp - 0x11ec], 0x9d3388a0
mov dword [ebp - 0x11f4], 1
mov dword [ebp - 0x11fc], 0xfffffffe
mov dword [ebp - 0x1204], 0xd21b1857
mov dword [ebp - 0x120c], 0xa4abff1e
mov dword [ebp - 0x1214], 0x50169ff9
mov dword [ebp - 0x121c], 0
mov dword [ebp - 0x1224], 0xfffffff6
mov dword [ebp - 0x122c], 0x19c36c1
mov dword [ebp - 0xc54], 0xffff
mov dword [ebp - 0x340], 0
jmp 0x1002e587
mov eax, dword [ebp - 0x340]
inc eax
mov dword [ebp - 0x340], eax
cmp dword [ebp - 0x340], 1
jge 0x1002e5a3
mov eax, dword [ebp - 0x340]
mov dword [ebp + eax*4 - 0x228], 6
jmp 0x1002e57a
mov eax, dword [ebp - 0xe7c]
mov dword [ebp - 0x98], eax
mov dword [ebp - 0x98], 0
jmp 0x1002e5c8
mov eax, dword [ebp - 0x98]
dec eax
mov dword [ebp - 0x98], eax
cmp dword [ebp - 0x98], 0
jl 0x1002e6ff
mov dword [ebp - 0x1234], 1
mov dword [ebp - 0x123c], 0
mov dword [ebp - 0x1244], 5
mov dword [ebp - 0x124c], 0x8fed6c34
mov dword [ebp - 0x1254], 0x4fb7d476
mov eax, dword [ebp - 0x98]
mov ecx, dword [ebp - 0x98]
mov eax, dword [ebp + eax*4 - 0x228]
mov dword [ebp + ecx*4 - 0x228], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x228], 0
jne 0x1002e6a7
mov eax, dword [ebp - 0x98]
mov eax, dword [ebp + eax*4 - 0x228]
mov dword [ebp - 0x125c], eax
mov eax, dword [ebp - 0x388]
dec eax
mov dword [ebp - 0x388], eax
mov eax, dword [ebp - 0x388]
mov dword [ebp - 0x1264], eax
cmp dword [ebp - 0xd6c], 0xffffffff
jae 0x1002e672
mov dword [ebp - 0x860], 1
jmp 0x1002e679
and dword [ebp - 0x860], 0
mov dword [ebp - 0x520], 0x1e46
imul eax, dword [ebp - 0x860], 0x24a
cmp dword [ebp - 0x520], eax
jl 0x1002e6a7
cmp dword [ebp - 0x1b0], 0
jne 0x1002e6a7
and dword [ebp - 0xa00], 0
jmp 0x1002e6b1
mov dword [ebp - 0xa00], 1
mov eax, dword [ebp - 0x98]
mov eax, dword [ebp + eax*4 - 0x228]
sub eax, dword [ebp - 0xa00]
imul eax, eax, 0xfffffffe
cmp eax, dword [ebp - 0xc54]
jg 0x1002e6db
mov dword [ebp - 0x528], 1
jmp 0x1002e6e2
and dword [ebp - 0x528], 0
mov eax, dword [ebp - 0x528]
mov dword [ebp - 0x868], eax
mov eax, dword [ebp - 0x868]
mov dword [ebp - 0xc18], eax
jmp 0x1002e5bb
jmp 0x1002e4dc
jmp 0x1002e446
mov byte [ebp - 4], 0xb
lea ecx, [ebp - 0x1314]
call fcn.1000e61e
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xea8]
call fcn.1000e61e
push 0
call dword [sym.imp.KERNEL32.dll_SuspendThread]
mov dword [ebp - 0x14], 0xfffffff9
mov dword [ebp - 0x5c], 0xfffffffd
push 3
lea ecx, [ebp - 0x1078]
call fcn.1000e5bc
mov dword [ebp - 4], 0xd
mov dword [ebp - 0x248], 0xffffffff
push 1
lea ecx, [ebp - 0xeb8]
call fcn.1000e5bc
mov byte [ebp - 4], 0xe
mov dword [ebp - 0x1b8], 0
jmp 0x1002e785
mov eax, dword [ebp - 0x1b8]
inc eax
mov dword [ebp - 0x1b8], eax
cmp dword [ebp - 0x1b8], 3
jge 0x1002e7a4
push dword [ebp - 0x1b8]
lea ecx, [ebp - 0x1078]
call fcn.1000e623
and dword [eax], 0
jmp 0x1002e778
lea eax, [ebp - 0xeb8]
push eax
push 0
push 0x5f67
push 0xbde
lea eax, [ebp - 0x1b8]
push eax
call fcn.10047613
add esp, 0x14
mov eax, dword [ebp - 0x14]
mov dword [ebp - 0x126c], eax
cmp dword [ebp - 0x5c], 0xb0e1
jge 0x1002e7e4
mov dword [ebp - 0x530], 1
jmp 0x1002e7eb
and dword [ebp - 0x530], 0
mov eax, dword [ebp - 0x14]
cmp eax, dword [ebp - 0x530]
jge 0x1002e802
mov dword [ebp - 0xad8], 1
jmp 0x1002e809
and dword [ebp - 0xad8], 0
mov eax, dword [ebp - 0x5c]
cmp dword [ebp - 0xad8], eax
jg 0x1002e820
mov dword [ebp - 0x538], 1
jmp 0x1002e827
and dword [ebp - 0x538], 0
mov eax, dword [ebp - 0x538]
sub eax, 0xa
cmp eax, dword [ebp - 0x14]
je 0x1002e841
mov dword [ebp - 0x870], 1
jmp 0x1002e848
and dword [ebp - 0x870], 0
cmp dword [ebp - 0x870], 0x76d7
jle 0x1002e860
mov dword [ebp - 0x540], 1
jmp 0x1002e867
and dword [ebp - 0x540], 0
mov eax, dword [ebp - 0x14]
cmp dword [ebp - 0x540], eax
jge 0x1002e87e
mov dword [ebp - 0xa08], 1
jmp 0x1002e885
and dword [ebp - 0xa08], 0
mov eax, dword [ebp - 0x14]
cmp eax, dword [ebp - 0xa08]
je 0x1002e89c
mov dword [ebp - 0x548], 1
jmp 0x1002e8a3
and dword [ebp - 0x548], 0
mov eax, dword [ebp - 0x548]
sub eax, dword [ebp - 0x5c]
mov dword [ebp - 0x5c], eax
cmp dword [ebp - 0x14], 0
jne 0x1002e8c4
cmp dword [ebp - 0x14], 0
jne 0x1002e8c4
and dword [ebp - 0x558], 0
jmp 0x1002e8ce
mov dword [ebp - 0x558], 1
mov eax, dword [ebp - 0x14]
add eax, 0x2fb32fdf
cmp eax, 0x2910
jg 0x1002e8e9
mov dword [ebp - 0x878], 1
jmp 0x1002e8f0
and dword [ebp - 0x878], 0
mov eax, dword [ebp - 0x5c]
cmp dword [ebp - 0x878], eax
jg 0x1002e907
mov dword [ebp - 0x550], 1
jmp 0x1002e90e
and dword [ebp - 0x550], 0
mov eax, dword [ebp - 0x14]
cmp dword [ebp - 0x550], eax
jl 0x1002e925
mov dword [ebp - 0xb40], 1
jmp 0x1002e92c
and dword [ebp - 0xb40], 0
mov eax, dword [ebp - 0x14]
sub eax, dword [ebp - 0x14]
mov ecx, dword [ebp - 0xb40]
add ecx, 0x8f0e
imul ecx, dword [ebp - 0x14]
cmp eax, ecx
jl 0x1002e952
mov dword [ebp - 0x880], 1
jmp 0x1002e959
and dword [ebp - 0x880], 0
mov eax, dword [ebp - 0x558]
cmp eax, dword [ebp - 0x880]
jl 0x1002e973
mov dword [ebp - 0x560], 1
jmp 0x1002e97a
and dword [ebp - 0x560], 0
mov eax, dword [ebp - 0x5c]
mov ecx, dword [ebp - 0x560]
lea eax, [eax + ecx*4]
mov dword [ebp - 0x5c], eax
mov eax, dword [ebp - 0x14]
cmp dword [ebp - 0x5c], eax
je 0x1002ed41
mov dword [ebp - 0xc30], 0xfffffffa
mov dword [ebp - 0xd84], 0x1781
cmp dword [ebp - 0xd84], 0x102c
jge 0x1002ece7
call fcn.100533f6
push 0x20
pop ecx
imul ecx, ecx, 0
add eax, ecx
push eax
push 0x10007b98
push 0x10007b9c
call fcn.100535be
add esp, 0xc
call fcn.100533f6
push 0x20
pop ecx
shl ecx, 0
add eax, ecx
push eax
push 0x10007ba4
push 0x10007ba8
call fcn.100535be
add esp, 0xc
xor eax, eax
inc eax
je 0x1002ece7
push 0x10cb6230
push 0x10cb6458
mov ecx, 0x1065c150
call fcn.1000e075
mov ecx, eax
call fcn.1000e075
cmp dword [0x10cb6230], 0
jne 0x1002ea2b
jmp 0x1002ece7
mov ecx, 0x11087328
call fcn.1004b62a
and dword [ebp - 0x478], 0
jmp 0x1002ea4b
mov eax, dword [ebp - 0x478]
inc eax
mov dword [ebp - 0x478], eax
mov eax, dword [ebp - 0x478]
cmp eax, dword [0x10cb6230]
jge 0x1002ea7d
lea eax, [ebp - 0xc20]
push eax
mov ecx, 0x1065c150
call fcn.1000e075
lea eax, [ebp - 0xc20]
push eax
mov ecx, 0x11087328
call fcn.100269f1
jmp 0x1002ea3e
mov ecx, 0x1108734c
call fcn.1004b856
push 0
call fcn.1002ce3c
pop ecx
mov ecx, 0x1108734c
call fcn.1004b737
test eax, eax
jne 0x1002eaee
push fcn.10012c7f
push fcn.10012c7f
push dword [0x10cb6458]
mov edx, 0x10007c08
mov ecx, 0x1065c098
call fcn.100128f2
mov ecx, eax
call fcn.1000e270
mov edx, 0x10007c04
mov ecx, eax
call fcn.100128f2
mov ecx, eax
call fcn.1000e264
mov edx, 0x10007bfc
mov ecx, eax
call fcn.100128f2
mov ecx, eax
call fcn.1000e264
jmp 0x1002e9f9
and dword [ebp - 0x208], 0
jmp 0x1002eb04
mov eax, dword [ebp - 0x208]
inc eax
mov dword [ebp - 0x208], eax
mov ecx, 0x1108734c
call fcn.1004b737
dec eax
cmp dword [ebp - 0x208], eax
jae 0x1002ebda
mov eax, dword [ebp - 0x208]
inc eax
mov dword [ebp - 0xe0], eax
jmp 0x1002eb37
mov eax, dword [ebp - 0xe0]
inc eax
mov dword [ebp - 0xe0], eax
mov ecx, 0x1108734c
call fcn.1004b737
cmp dword [ebp - 0xe0], eax
jae 0x1002ebd5
push dword [ebp - 0xe0]
mov ecx, 0x1108734c
call fcn.10022aa0
mov esi, eax
push dword [ebp - 0x208]
mov ecx, 0x1108734c
call fcn.10022aa0
mov edx, esi
mov ecx, eax
call fcn.1004bd54
movzx eax, al
test eax, eax
je 0x1002ebd0
push dword [ebp - 0xe0]
lea eax, [ebp - 0x1274]
push eax
lea eax, [ebp - 0x127c]
push eax
mov ecx, 0x1108734c
call fcn.1000e700
mov ecx, eax
call fcn.1004b88f
mov eax, dword [eax]
mov dword [ebp - 0xd80], eax
push dword [ebp - 0xd80]
lea eax, [ebp - 0x1284]
push eax
mov ecx, 0x1108734c
call fcn.1004b7d9
mov eax, dword [ebp - 0xe0]
dec eax
mov dword [ebp - 0xe0], eax
jmp 0x1002eb2a
jmp 0x1002eaf7
push fcn.10012c7f
push dword [0x10cb6458]
mov edx, 0x10007c08
mov ecx, 0x1065c098
call fcn.100128f2
mov ecx, eax
call fcn.1000e270
mov edx, 0x10007c04
mov ecx, eax
call fcn.100128f2
mov ecx, eax
call fcn.1000e264
and dword [ebp - 0x17c], 0
jmp 0x1002ec24
mov eax, dword [ebp - 0x17c]
inc eax
mov dword [ebp - 0x17c], eax
mov ecx, 0x1108734c
call fcn.1004b737
cmp dword [ebp - 0x17c], eax
jae 0x1002ece2
and dword [ebp - 0x1c0], 0
jmp 0x1002ec50
mov eax, dword [ebp - 0x1c0]
inc eax
mov dword [ebp - 0x1c0], eax
push dword [ebp - 0x17c]
mov ecx, 0x1108734c
call fcn.10022aa0
mov ecx, eax
call fcn.100139a0
cmp dword [ebp - 0x1c0], eax
jae 0x1002ecdd
push dword [ebp - 0x1c0]
push dword [ebp - 0x17c]
mov ecx, 0x1108734c
call fcn.10022aa0
mov ecx, eax
call fcn.1000e623
push dword [eax]
mov ecx, 0x1065c098
call fcn.1000e270
push dword [ebp - 0x17c]
mov ecx, 0x1108734c
call fcn.10022aa0
mov ecx, eax
call fcn.100139a0
dec eax
cmp dword [ebp - 0x1c0], eax
je 0x1002ecc9
mov edx, 0x10007c14
mov ecx, 0x1065c098
call fcn.100128f2
jmp 0x1002ecd8
push fcn.10012c7f
mov ecx, 0x1065c098
call fcn.1000e264
jmp 0x1002ec43
jmp 0x1002ec17
jmp 0x1002e9f9
mov dword [ebp - 0xc28], 0
mov dword [ebp - 0xe3c], 0xd6813f8
lea eax, [ebp - 0xc28]
push eax
lea eax, [ebp - 0xe3c]
push eax
lea eax, [ebp - 0x5c]
push eax
lea eax, [ebp - 0x14]
push eax
push 0
lea eax, [ebp - 0xc30]
push eax
call fcn.10036eb8
add esp, 0x18
mov byte [ebp - 0x121], 0
movzx eax, byte [ebp - 0x121]
test eax, eax
je 0x1002ed3c
push 0
call fcn.1003e7e7
pop ecx
jmp 0x1002ee40
mov dword [ebp - 0xa10], 0x243c00ee
mov dword [ebp - 0x14], 2
jmp 0x1002ed5b
mov eax, dword [ebp - 0x14]
dec eax
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 0
jl 0x1002eda5
lea eax, [ebp - 0x5c]
push eax
lea eax, [ebp - 0x14]
push eax
push 0x5e27
push 0x709e
push 0
lea eax, [ebp - 0x1078]
push eax
push 0x6e74
lea eax, [ebp - 0xa10]
push eax
push 0x3572
lea eax, [ebp - 0x248]
push eax
lea eax, [ebp - 0xeb8]
push eax
call fcn.1003e711
add esp, 0x2c
jmp 0x1002ed54
mov dword [ebp - 0x248], 0xf
jmp 0x1002edbe
mov eax, dword [ebp - 0x248]
dec eax
mov dword [ebp - 0x248], eax
cmp dword [ebp - 0x248], 0xfffffffe
je 0x1002ee40
mov dword [ebp - 0xd88], 0x7c3ac0f7
mov dword [ebp - 0x568], 0xffffffff
push 0x2913
lea eax, [ebp - 0xa10]
push eax
lea eax, [ebp - 0x568]
push eax
push 0x484b
push 0
push 1
push 0x465f
push 0
lea eax, [ebp - 0xd88]
push eax
lea eax, [ebp - 0xeb8]
push eax
push 0x5cd
call fcn.1002ca57
add esp, 0x2c
lea eax, [ebp - 0xeb8]
push eax
push 0x16a
lea eax, [ebp - 0x568]
push eax
push 0
push 0x1ec6
call fcn.1003f56b
add esp, 0x14
jmp 0x1002edb1
mov byte [ebp - 4], 0xd
lea ecx, [ebp - 0xeb8]
call fcn.1000e61e
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x1078]
call fcn.1000e61e
mov eax, dword [ebp - 0xe8]
cmp dword [ebp - 0xe8], eax
jge 0x1002ee78
mov dword [ebp - 0xc38], 1
jmp 0x1002ee7f
and dword [ebp - 0xc38], 0
mov eax, dword [ebp - 0xe8]
mov dword [ebp - 0x128c], eax
xor eax, eax
cmp eax, 0xd14c
jbe 0x1002eea0
mov dword [ebp - 0x888], 1
jmp 0x1002eea7
and dword [ebp - 0x888], 0
mov eax, dword [ebp - 0xe8]
cmp eax, dword [ebp - 0x888]
jle 0x1002eec1
mov dword [ebp - 0x570], 1
jmp 0x1002eec8
and dword [ebp - 0x570], 0
mov eax, dword [ebp - 0xe8]
cmp dword [ebp - 0x570], eax
je 0x1002eee2
mov dword [ebp - 0xae0], 1
jmp 0x1002eee9
and dword [ebp - 0xae0], 0
mov eax, dword [ebp - 0xae0]
mov dword [ebp - 0x410], eax
cmp dword [ebp - 0x410], 0xfffc
jae 0x1002ef14
push 3
pop eax
test eax, eax
je 0x1002ef14
mov dword [ebp - 0x578], 1
jmp 0x1002ef1b
and dword [ebp - 0x578], 0
mov eax, dword [ebp - 0xe8]
cmp dword [ebp - 0x578], eax
jl 0x1002ef35
mov dword [ebp - 0xeec], 1
jmp 0x1002ef3c
and dword [ebp - 0xeec], 0
mov eax, dword [ebp - 0x390]
mov dword [ebp - 0x1294], eax
mov dword [ebp - 0x390], 0xffffffff
cmp dword [ebp - 0x390], 0
je 0x1002ef62
cmp dword [ebp - 0xe8], 0
cmp dword [ebp - 0x410], 0xf43b
jne 0x1002ef7a
mov dword [ebp - 0x890], 1
jmp 0x1002ef81
and dword [ebp - 0x890], 0
mov eax, dword [ebp - 0x890]
mov dword [ebp - 0xc40], eax
mov dword [ebp - 0x2f0], 1
mov dword [ebp - 0x278], 0x52f3
mov dword [ebp - 0x398], 2
mov dword [ebp - 0x1c8], 0xf36a5b5c
push 4
lea ecx, [ebp - 0x1054]
call fcn.1000e5bc
mov dword [ebp - 4], 0xf
mov dword [ebp - 0xd90], 0xffffffff
mov dword [ebp - 0xc48], 0xfffffff9
lea eax, [ebp - 0x1054]
push eax
lea eax, [ebp - 0x129c]
push eax
push 0
push 0x630d
call fcn.100370b6
add esp, 0x10
lea eax, [ebp - 0x1c8]
push eax
lea eax, [ebp - 0x2f0]
push eax
lea eax, [ebp - 0x278]
push eax
push 0
lea eax, [ebp - 0x398]
push eax
call fcn.10045603
add esp, 0x14
imul eax, dword [ebp - 0x1c8], 0xca0b
test eax, eax
jne 0x1002f0a8
mov eax, dword [ebp - 0x1c8]
mov dword [ebp - 0x12a4], eax
mov eax, dword [ebp - 0x278]
mov dword [ebp - 0x398], eax
cmp dword [ebp - 0x398], 0
jne 0x1002f061
cmp dword [ebp - 0x278], 0
jne 0x1002f061
and dword [ebp - 0x580], 0
jmp 0x1002f06b
mov dword [ebp - 0x580], 1
mov eax, dword [ebp - 0x1c8]
cmp eax, dword [ebp - 0x580]
je 0x1002f085
mov dword [ebp - 0xa18], 1
jmp 0x1002f08c
and dword [ebp - 0xa18], 0
mov eax, dword [ebp - 0xa18]
sub eax, dword [ebp - 0x278]
je 0x1002f09f
or eax, 0xffffffff
jne 0x1002f0a8
and dword [ebp - 0x588], 0
jmp 0x1002f0b2
mov dword [ebp - 0x588], 1
mov eax, dword [ebp - 0x588]
mov dword [ebp - 0x1c8], eax
mov eax, 0x37f20bab
cmp eax, 0xffffffff
jae 0x1002f0d4
mov dword [ebp - 0x898], 1
jmp 0x1002f0db
and dword [ebp - 0x898], 0
mov eax, dword [ebp - 0x2f0]
cmp dword [ebp - 0x898], eax
jne 0x1002f0f5
mov dword [ebp - 0x460], 1
jmp 0x1002f0fc
and dword [ebp - 0x460], 0
push 2
lea ecx, [ebp - 0x1054]
call fcn.1000e623
mov ecx, dword [ebp - 0x460]
mov dword [eax], ecx
mov eax, dword [ebp - 0x2f0]
cmp dword [ebp - 0x460], eax
jne 0x1002f131
mov eax, 0x3131ec8e
test eax, eax
jne 0x1002f131
and dword [ebp - 0x590], 0
jmp 0x1002f13b
mov dword [ebp - 0x590], 1
mov eax, dword [ebp - 0x2f0]
imul eax, dword [ebp - 0x590]
cmp eax, dword [ebp - 0xd90]
jle 0x1002f15c
mov dword [ebp - 0xb9c], 1
jmp 0x1002f163
and dword [ebp - 0xb9c], 0
mov eax, dword [ebp - 0xb9c]
mov dword [ebp - 0xc48], eax
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x1054]
call fcn.1000e61e
mov eax, dword [ebp - 0xe38]
mov eax, dword [eax + 0x38]
mov dword [ebp - 0x404], eax
push 0x1d8b
push 0x1966
push 1
push 1
push 0x973
push 0
push 0x515
push 0x4a83
push 0x6aca
push 0x4d54
push 0x7758
push 0x5317
call fcn.1002c6ce
add esp, 0x30
mov dword [ebp - 0xf0], 5
mov dword [ebp - 0x3a0], 9
mov dword [ebp - 0x1d0], 0xa2c39d5b
mov dword [ebp - 0x3a8], 0x3090707e
push 3
lea ecx, [ebp - 0xfd0]
call fcn.1000e5bc
mov dword [ebp - 4], 0x10
push 0xa2b
push 0x1a9f
push 0x7a63
lea eax, [ebp - 0x12ac]
push eax
push 0
push 1
lea eax, [ebp - 0xfd0]
push eax
push 1
push 0x55ab
push 0x6661
push 0x41d2
call fcn.1002ca57
add esp, 0x2c
mov dword [ebp - 0xf0], 0x10
jmp 0x1002f257
mov eax, dword [ebp - 0xf0]
dec eax
mov dword [ebp - 0xf0], eax
cmp dword [ebp - 0xf0], 0xffffffe4
je 0x1002f55d
mov dword [ebp - 0x210], 8
push 2
lea ecx, [ebp - 0xec8]
call fcn.1000e5bc
mov byte [ebp - 4], 0x11
mov dword [ebp - 0x230], 0x5b0d69b4
mov dword [ebp - 0xc58], 0x4826422f
push 0x689e
push 0x5338
lea eax, [ebp - 0xec8]
push eax
lea eax, [ebp - 0x12b4]
push eax
push 1
push 0x2777
push 0
push 0x3fda
call fcn.1003f25e
add esp, 0x20
mov dword [ebp - 0x3a0], 0x9fa85f88
cmp dword [ebp - 0x3a0], 0
jne 0x1002f2e6
cmp dword [ebp - 0x3a0], 0
jne 0x1002f2e6
and dword [ebp - 0xc50], 0
jmp 0x1002f2f0
mov dword [ebp - 0xc50], 1
cmp dword [ebp - 0x210], 0xfffffff6
jb 0x1002f305
mov dword [ebp - 0xd98], 1
jmp 0x1002f30c
and dword [ebp - 0xd98], 0
cmp dword [ebp - 0x1d0], 0
jge 0x1002f321
mov dword [ebp - 0x598], 1
jmp 0x1002f328
and dword [ebp - 0x598], 0
mov eax, dword [ebp - 0x598]
add eax, 0x14a15d74
cmp eax, dword [ebp - 0x210]
jle 0x1002f347
mov dword [ebp - 0x8a0], 1
jmp 0x1002f34e
and dword [ebp - 0x8a0], 0
mov eax, dword [ebp - 0x210]
cmp dword [ebp - 0x8a0], eax
jne 0x1002f368
mov dword [ebp - 0x5a0], 1
jmp 0x1002f36f
and dword [ebp - 0x5a0], 0
mov eax, dword [ebp - 0x210]
cmp dword [ebp - 0x5a0], eax
jne 0x1002f38f
cmp dword [ebp - 0x210], 0
jne 0x1002f38f
and dword [ebp - 0xa20], 0
jmp 0x1002f399
mov dword [ebp - 0xa20], 1
mov eax, dword [ebp - 0x1d0]
cmp dword [ebp - 0xa20], eax
jle 0x1002f3b3
mov dword [ebp - 0x418], 1
jmp 0x1002f3ba
and dword [ebp - 0x418], 0
push 1
lea ecx, [ebp - 0xec8]
call fcn.1000e623
mov ecx, dword [ebp - 0x418]
mov dword [eax], ecx
mov eax, dword [ebp - 0x1d0]
cmp dword [ebp - 0x418], eax
je 0x1002f3e9
mov dword [ebp - 0x5a8], 1
jmp 0x1002f3f0
and dword [ebp - 0x5a8], 0
mov eax, dword [ebp - 0x5a8]
mov dword [ebp - 0x1d0], eax
mov eax, dword [ebp - 0x1d0]
mov dword [ebp - 0x3a8], eax
cmp dword [ebp - 0x3a8], 0
push 0
lea ecx, [ebp - 0xec8]
call fcn.1000e623
cmp dword [eax], 0x6a9b03be
jle 0x1002f430
mov dword [ebp - 0x8a8], 1
jmp 0x1002f437
and dword [ebp - 0x8a8], 0
mov esi, dword [ebp - 0xf0]
add esi, dword [ebp - 0x8a8]
push 2
lea ecx, [ebp - 0xfd0]
call fcn.1000e623
mov dword [eax], esi
push 1
lea ecx, [ebp - 0xec8]
call fcn.1000e623
mov eax, dword [eax]
sub eax, dword [ebp - 0xf0]
sub eax, dword [ebp - 0xf0]
je 0x1002f484
cmp dword [ebp - 0x230], 0
je 0x1002f484
mov dword [ebp - 0x5b0], 1
jmp 0x1002f48b
and dword [ebp - 0x5b0], 0
cmp dword [ebp - 0x5b0], 4
jne 0x1002f4a0
mov dword [ebp - 0xae8], 1
jmp 0x1002f4a7
and dword [ebp - 0xae8], 0
mov eax, dword [ebp - 0xae8]
mov dword [ebp - 0xc58], eax
cmp dword [ebp - 0x3a8], 0
je 0x1002f508
mov dword [ebp - 0x230], 0
jmp 0x1002f4d5
mov eax, dword [ebp - 0x230]
inc eax
mov dword [ebp - 0x230], eax
cmp dword [ebp - 0x230], 2
jne 0x1002f506
mov byte [ebp - 0x14c], 0
movzx eax, byte [ebp - 0x14c]
test eax, eax
je 0x1002f504
push 0x16cc
push 0
push 0x6f93
call fcn.10046380
add esp, 0xc
jmp 0x1002f4c8
jmp 0x1002f549
mov dword [ebp - 0x5b8], 0xfffb
mov dword [ebp - 0xe78], 0x34d89bb6
mov eax, dword [ebp - 0x5b8]
cmp dword [ebp - 0x5b8], eax
jge 0x1002f536
mov dword [ebp - 0x8b0], 1
jmp 0x1002f53d
and dword [ebp - 0x8b0], 0
mov eax, dword [ebp - 0x8b0]
mov dword [ebp - 0xe78], eax
mov byte [ebp - 4], 0x10
lea ecx, [ebp - 0xec8]
call fcn.1000e61e
jmp 0x1002f24a
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xfd0]
call fcn.1000e61e
mov dword [ebp - 0xac], 0xf70ad6f2
mov dword [ebp - 0xc60], 0x1898
cmp dword [ebp - 0xc60], 0x4cf
jge 0x1002f6ce
and dword [ebp - 0x5c0], 0
lea eax, [ebp - 0x5c0]
push eax
push 0x10007758
call fcn.100528eb
pop ecx
pop ecx
and dword [ebp - 0x1440], 0
push 9
pop ecx
xor eax, eax
lea edi, [ebp - 0x143c]
rep stosd dword es:[edi], eax
and dword [ebp - 0x434], 0
jmp 0x1002f5d4
mov eax, dword [ebp - 0x434]
inc eax
mov dword [ebp - 0x434], eax
cmp dword [ebp - 0x434], 5
jge 0x1002f63f
and dword [ebp - 0x3b0], 0
jmp 0x1002f5f3
mov eax, dword [ebp - 0x3b0]
inc eax
mov dword [ebp - 0x3b0], eax
cmp dword [ebp - 0x3b0], 5
jge 0x1002f632
mov byte [ebp - 0x19], 0x2e
lea eax, [ebp - 0x19]
push eax
push 0x1000779c
call fcn.100528eb
pop ecx
pop ecx
movsx eax, byte [ebp - 0x19]
cmp eax, 0x2e
je 0x1002f630
movsx eax, byte [ebp - 0x19]
mov eax, dword [ebp + eax*4 - 0x1500]
inc eax
movsx ecx, byte [ebp - 0x19]
mov dword [ebp + ecx*4 - 0x1500], eax
jmp 0x1002f5e6
push 0x10007c18
call fcn.100528eb
pop ecx
jmp 0x1002f5c7
push 0x100078ec
lea ecx, [ebp - 0x1394]
call fcn.1000e027
mov dword [ebp - 4], 0x12
mov dword [ebp - 0x280], 1
jmp 0x1002f66f
mov eax, dword [ebp - 0x280]
inc eax
mov dword [ebp - 0x280], eax
cmp dword [ebp - 0x280], 9
jg 0x1002f6a3
mov eax, dword [ebp - 0x5c0]
shl eax, 1
mov ecx, dword [ebp - 0x280]
cmp dword [ebp + ecx*4 - 0x1440], eax
jle 0x1002f6a1
push 0x100078f0
lea ecx, [ebp - 0x1394]
call fcn.1002257b
jmp 0x1002f6a3
jmp 0x1002f662
push fcn.10012c7f
lea edx, [ebp - 0x1394]
mov ecx, 0x1065c098
call fcn.1004bd90
mov ecx, eax
call fcn.1000e264
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x1394]
call fcn.1000e056
mov dword [ebp - 0x1d8], 1
mov dword [ebp - 0x424], 0
mov dword [ebp - 0x328], 0
jmp 0x1002f6fb
mov eax, dword [ebp - 0x328]
inc eax
mov dword [ebp - 0x328], eax
cmp dword [ebp - 0x328], 2
jge 0x1002f717
mov eax, dword [ebp - 0x328]
mov dword [ebp + eax*4 - 0xb58], 0xa90c6d21
jmp 0x1002f6ee
cmp dword [ebp - 0xac], 0
je 0x1002f8a8
mov dword [ebp - 0x288], 0
jmp 0x1002f73d
mov eax, dword [ebp - 0x288]
inc eax
mov dword [ebp - 0x288], eax
cmp dword [ebp - 0x288], 2
jge 0x1002f759
mov eax, dword [ebp - 0x288]
mov dword [ebp + eax*4 - 0x420], 0xfffb
jmp 0x1002f730
mov dword [ebp - 0xac], 0
jmp 0x1002f772
mov eax, dword [ebp - 0xac]
inc eax
mov dword [ebp - 0xac], eax
cmp dword [ebp - 0xac], 1
jg 0x1002f8a3
mov dword [ebp - 0xa28], 0
mov byte [ebp - 0x129], 0
push 0
lea eax, [ebp - 0x129]
push eax
call fcn.1004524b
pop ecx
pop ecx
mov eax, dword [ebp - 0xac]
cmp dword [ebp + eax*4 - 0x420], 0
jne 0x1002f7e1
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x420]
mov dword [ebp - 0xa28], eax
mov eax, dword [ebp - 0xac]
mov eax, dword [ebp + eax*4 - 0x420]
cmp eax, dword [ebp - 0xa28]
je 0x1002f7e1
and dword [ebp - 0x8b8], 0
jmp 0x1002f7eb
mov dword [ebp - 0x8b8], 1
mov eax, dword [ebp - 0xac]
mov eax, dword [ebp + eax*4 - 0x420]
mov dword [ebp - 0x12bc], eax
cmp dword [ebp - 0xac], 1
je 0x1002f813
mov dword [ebp - 0x5c8], 1
jmp 0x1002f81a
and dword [ebp - 0x5c8], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x420]
cmp eax, dword [ebp - 0x5c8]
jge 0x1002f83b
mov dword [ebp - 0x5d0], 1
jmp 0x1002f842
and dword [ebp - 0x5d0], 0
mov eax, dword [ebp - 0x8b8]
cmp eax, dword [ebp - 0x5d0]
jl 0x1002f85c
mov dword [ebp - 0xb48], 1
jmp 0x1002f863
and dword [ebp - 0xb48], 0
mov eax, dword [ebp - 0xb48]
mov dword [ebp - 0x1d8], eax
mov eax, dword [ebp - 0x1d8]
push 4
pop ecx
shl ecx, 0
imul eax, dword [ebp + ecx - 0x420]
push 4
pop ecx
imul ecx, ecx, 0
imul eax, dword [ebp + ecx - 0x420]
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0xb58], eax
jmp 0x1002f765
jmp 0x1002fc9b
mov dword [ebp - 0xf8], 8
mov dword [ebp - 0x2f8], 0
jmp 0x1002f8cb
mov eax, dword [ebp - 0x2f8]
inc eax
mov dword [ebp - 0x2f8], eax
cmp dword [ebp - 0x2f8], 4
jge 0x1002f8e7
mov eax, dword [ebp - 0x2f8]
mov dword [ebp + eax*4 - 0xe8c], 0xfffffff6
jmp 0x1002f8be
push 0x4a8f
push 0
lea eax, [ebp - 0xf8]
push eax
push 0x1cff
push 0x73e5
push 0x239c
push 0
push 0x44f6
push 0x74ab
push 0x79a9
push 0x51ab
call fcn.1003bb0c
add esp, 0x2c
cmp dword [ebp - 0xf8], 0
jne 0x1002f93d
mov eax, 0x402d
test eax, eax
jne 0x1002f93d
and dword [ebp - 0x8d0], 0
jmp 0x1002f947
mov dword [ebp - 0x8d0], 1
mov eax, dword [ebp - 0xf8]
mov dword [ebp - 0x12c4], eax
push 4
pop eax
imul eax, eax, 3
mov eax, dword [ebp + eax - 0xe8c]
mov dword [ebp - 0x5d8], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x5d8]
mov dword [ebp + eax - 0xb58], ecx
mov eax, dword [ebp - 0x5d8]
sub eax, dword [ebp - 0x424]
je 0x1002f9a3
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0xb58], 0
je 0x1002f9a3
push 0xfffffffffffffffb
pop eax
test eax, eax
je 0x1002f9a3
or eax, 0xffffffff
jne 0x1002f9b1
xor eax, eax
inc eax
jne 0x1002f9b1
and dword [ebp - 0x8c0], 0
jmp 0x1002f9bb
mov dword [ebp - 0x8c0], 1
mov eax, dword [ebp - 0x1d8]
imul eax, dword [ebp - 0x8c0]
neg eax
mov ecx, 0x1210cbed
sub ecx, eax
je 0x1002f9f8
cmp dword [ebp - 0x1d8], 0
je 0x1002f9f8
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0xb58], 0
je 0x1002f9f8
mov dword [ebp - 0x5e0], 1
jmp 0x1002f9ff
and dword [ebp - 0x5e0], 0
mov eax, dword [ebp - 0x424]
cmp dword [ebp - 0x5e0], eax
jl 0x1002fa19
mov dword [ebp - 0xa30], 1
jmp 0x1002fa20
and dword [ebp - 0xa30], 0
push 4
pop eax
imul eax, eax, 3
mov eax, dword [ebp + eax - 0xe8c]
cmp dword [ebp - 0xa30], eax
jge 0x1002fa41
mov dword [ebp - 0x5e8], 1
jmp 0x1002fa48
and dword [ebp - 0x5e8], 0
mov eax, dword [ebp - 0xf8]
cmp eax, dword [ebp - 0x5e8]
jge 0x1002fa66
push 4
pop eax
imul eax, eax, 3
cmp dword [ebp + eax - 0xe8c], 0
je 0x1002fa6d
cmp dword [ebp - 0x424], 0
mov eax, 0x3965
test eax, eax
je 0x1002fa8b
cmp dword [ebp - 0xf8], 0
je 0x1002fa8b
mov dword [ebp - 0x8c8], 1
jmp 0x1002fa92
and dword [ebp - 0x8c8], 0
mov eax, dword [ebp - 0x8c8]
add eax, dword [ebp - 0x1d8]
mov dword [ebp - 0x5f0], eax
push 4
pop eax
imul eax, eax, 3
mov ecx, dword [ebp - 0x5f0]
mov dword [ebp + eax - 0xe8c], ecx
cmp dword [ebp - 0x5f0], 0
jl 0x1002facc
mov dword [ebp - 0xaf0], 1
jmp 0x1002fad3
and dword [ebp - 0xaf0], 0
cmp dword [ebp - 0xaf0], 0
jbe 0x1002fae8
mov dword [ebp - 0x5f8], 1
jmp 0x1002faef
and dword [ebp - 0x5f8], 0
cmp dword [ebp - 0x5f8], 1
jl 0x1002fb04
mov dword [ebp - 0x600], 1
jmp 0x1002fb0b
and dword [ebp - 0x600], 0
mov eax, dword [ebp - 0x8d0]
cmp eax, dword [ebp - 0x600]
jne 0x1002fb25
mov dword [ebp - 0xa38], 1
jmp 0x1002fb2c
and dword [ebp - 0xa38], 0
cmp dword [ebp - 0xa38], 0
jg 0x1002fb83
cmp dword [ebp - 0xf8], 0
jle 0x1002fb4a
mov dword [ebp - 0x608], 1
jmp 0x1002fb51
and dword [ebp - 0x608], 0
push 4
pop eax
imul eax, eax, 3
mov ecx, dword [ebp - 0x608]
mov dword [ebp + eax - 0xe8c], ecx
mov byte [ebp - 0x14e], 0
movzx eax, byte [ebp - 0x14e]
test eax, eax
je 0x1002fb7e
push 0
call fcn.1003f11f
pop ecx
jmp 0x1002fc9b
mov dword [ebp - 0x290], 0x555f25ad
mov dword [ebp - 0x8d8], 0
mov dword [ebp - 0xc68], 0xffffffff
mov byte [ebp - 0x131], 0
movzx eax, byte [ebp - 0x131]
test eax, eax
je 0x1002fbbe
push 0x34c
call dword [sym.imp.KERNEL32.dll_TlsFree]
mov eax, dword [ebp - 0x290]
mov dword [ebp - 0x134c], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xb58]
mov dword [ebp - 0x8d8], eax
cmp dword [ebp - 0x8d8], 0
je 0x1002fbf6
xor eax, eax
je 0x1002fbf6
mov dword [ebp - 0x610], 1
jmp 0x1002fbfd
and dword [ebp - 0x610], 0
mov eax, dword [ebp - 0x290]
push 4
pop ecx
imul ecx, ecx, 3
mov ecx, dword [ebp + ecx - 0xe8c]
imul ecx, dword [ebp - 0x610]
add eax, ecx
cmp eax, 0x202d95c7
je 0x1002fc2c
mov dword [ebp - 0xb7c], 1
jmp 0x1002fc33
and dword [ebp - 0xb7c], 0
xor eax, eax
inc eax
sub eax, dword [ebp - 0xb7c]
cmp eax, dword [ebp - 0xf8]
je 0x1002fc50
mov dword [ebp - 0x618], 1
jmp 0x1002fc57
and dword [ebp - 0x618], 0
mov eax, dword [ebp - 0x618]
sub eax, 0x96aa
cmp dword [ebp - 0x290], eax
jne 0x1002fc76
mov dword [ebp - 0xda0], 1
jmp 0x1002fc7d
and dword [ebp - 0xda0], 0
mov eax, dword [ebp - 0x290]
mov dword [ebp - 0x108c], eax
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0xe8c]
mov dword [ebp - 0xc68], eax
mov dword [ebp - 0x44], 1
mov dword [ebp - 0x118], 0x52f3
mov dword [ebp - 0x40], 4
mov dword [ebp - 0x100], 0x99cdf9c7
mov dword [ebp - 0x18c], 0xfffffffb
mov dword [ebp - 0xe40], 0
mov dword [ebp - 0x650], 1
mov dword [ebp - 0x135c], 0
cmp dword [ebp - 0x40], 0x8974b66
jge 0x1002fe05
mov eax, dword [ebp - 0x40]
mov dword [ebp - 0x1364], eax
mov dword [ebp - 0x100], 2
cmp dword [ebp - 0x100], 0
jne 0x1002fd1c
xor eax, eax
inc eax
jne 0x1002fd1c
and dword [ebp - 0x8e0], 0
jmp 0x1002fd26
mov dword [ebp - 0x8e0], 1
mov eax, dword [ebp - 0x40]
cmp dword [ebp - 0x8e0], eax
jg 0x1002fd3d
mov dword [ebp - 0x620], 1
jmp 0x1002fd44
and dword [ebp - 0x620], 0
mov eax, dword [ebp - 0x40]
cmp dword [ebp - 0x620], eax
jge 0x1002fd5b
mov dword [ebp - 0xa40], 1
jmp 0x1002fd62
and dword [ebp - 0xa40], 0
mov eax, dword [ebp - 0x40]
imul eax, dword [ebp - 0xa40]
add eax, dword [ebp - 0x40]
mov dword [ebp - 0x40], eax
jne 0x1002fd8c
mov eax, 0x1dfe936b
test eax, eax
jne 0x1002fd8c
cmp dword [ebp - 0x40], 0
jne 0x1002fd8c
and dword [ebp - 0x628], 0
jmp 0x1002fd96
mov dword [ebp - 0x628], 1
mov eax, dword [ebp - 0x18c]
imul eax, dword [ebp - 0x628]
xor ecx, ecx
inc ecx
sub ecx, eax
je 0x1002fdbf
cmp dword [ebp - 0x100], 0
je 0x1002fdbf
mov dword [ebp - 0x8e8], 1
jmp 0x1002fdc6
and dword [ebp - 0x8e8], 0
mov eax, dword [ebp - 0x18c]
cmp dword [ebp - 0x8e8], eax
jl 0x1002fde0
mov dword [ebp - 0x630], 1
jmp 0x1002fde7
and dword [ebp - 0x630], 0
mov eax, dword [ebp - 0x630]
mov dword [ebp - 0x18c], eax
mov eax, 0x27f355c0
test eax, eax
jne 0x1002fe05
and dword [ebp - 0xaf8], 0
jmp 0x1002fe0f
mov dword [ebp - 0xaf8], 1
cmp dword [ebp - 0xaf8], 0xffff
ja 0x1002fe27
mov dword [ebp - 0x638], 1
jmp 0x1002fe2e
and dword [ebp - 0x638], 0
mov eax, dword [ebp - 0xe40]
cmp dword [ebp - 0x638], eax
je 0x1002ffa9
mov dword [ebp - 0x16c], 0xffffffff
mov dword [ebp - 0x350], 0xffffffff
mov dword [ebp - 0xda8], 0x840c2c6f
mov dword [ebp - 0x640], 0x1460deea
mov dword [ebp - 0xc78], 0xffffffff
mov eax, dword [ebp - 0x16c]
sub eax, 0xedbe
mov dword [ebp - 0x350], eax
mov eax, dword [ebp - 0x16c]
cmp dword [ebp - 0x350], eax
jle 0x1002fea6
mov eax, 0xcd43
test eax, eax
je 0x1002fea6
mov dword [ebp - 0x8f0], 1
jmp 0x1002fead
and dword [ebp - 0x8f0], 0
mov eax, dword [ebp - 0x16c]
cmp eax, dword [ebp - 0x8f0]
jle 0x1002fed6
mov eax, 0xe2510a74
test eax, eax
jne 0x1002fed6
cmp dword [ebp - 0x350], 0
jne 0x1002fed6
and dword [ebp - 0xc70], 0
jmp 0x1002fee0
mov dword [ebp - 0xc70], 1
mov eax, dword [ebp - 0xda8]
mov dword [ebp - 0x136c], eax
mov eax, dword [ebp - 0x16c]
mov dword [ebp - 0x1374], eax
mov eax, dword [ebp - 0x350]
mov dword [ebp - 0x137c], eax
mov eax, dword [ebp - 0x16c]
mov dword [ebp - 0x1228], eax
mov eax, dword [ebp - 0x640]
mov dword [ebp - 0x640], eax
mov eax, dword [ebp - 0x40]
cmp dword [ebp - 0x100], eax
jg 0x1002ff33
mov dword [ebp - 0xa48], 1
jmp 0x1002ff3a
and dword [ebp - 0xa48], 0
mov eax, dword [ebp - 0x100]
imul eax, dword [ebp - 0xa48]
cmp eax, 0xe8b7dd14
jae 0x1002ff5a
mov dword [ebp - 0x648], 1
jmp 0x1002ff61
and dword [ebp - 0x648], 0
mov eax, dword [ebp - 0x16c]
sub eax, dword [ebp - 0x648]
mov dword [ebp - 0x100], eax
mov eax, dword [ebp - 0x100]
mov dword [ebp - 0x18c], eax
cmp dword [ebp - 0x18c], 0xffffffff
jl 0x1002ff94
mov dword [ebp - 0x8f8], 1
jmp 0x1002ff9b
and dword [ebp - 0x8f8], 0
mov eax, dword [ebp - 0x8f8]
mov dword [ebp - 0xc78], eax
jmp 0x1002fff4
mov byte [ebp - 0x150], 0
movzx eax, byte [ebp - 0x150]
test eax, eax
je 0x1002ffc9
push 0x4827
push 0
call fcn.10036ee5
pop ecx
pop ecx
push 0x61f
push 0
lea eax, [ebp - 0x40]
push eax
push 0
push 0x7616
push 0x28b2
push 0x27a8
lea eax, [ebp - 0x18c]
push eax
call fcn.1002c293
add esp, 0x20
mov eax, dword [ebp - 0x650]
dec eax
mov dword [ebp - 0x650], eax
mov dword [ebp - 0x358], 2
push 3
lea ecx, [ebp - 0xfe8]
call fcn.1000e5bc
mov dword [ebp - 4], 0x13
mov dword [ebp - 0x218], 0
jmp 0x10030038
mov eax, dword [ebp - 0x218]
inc eax
mov dword [ebp - 0x218], eax
cmp dword [ebp - 0x218], 1
jge 0x10030054
mov eax, dword [ebp - 0x218]
mov dword [ebp + eax*4 - 0x108], 1
jmp 0x1003002b
lea eax, [ebp - 0x218]
push eax
lea eax, [ebp - 0xfe8]
push eax
push 0
push 0
call fcn.1003e746
add esp, 0x10
mov byte [ebp - 0x139], 0
movzx eax, byte [ebp - 0x139]
test eax, eax
je 0x10030094
push 0
push 0xfe0
push 0x3117
call fcn.1003fe12
add esp, 0xc
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0x108], 0
jmp 0x100300c2
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x108]
dec eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x108], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x108], 0xffffffee
je 0x10030257
mov dword [ebp - 0x298], 0x92bd
push 4
lea ecx, [ebp - 0x1030]
call fcn.1000e5bc
mov byte [ebp - 4], 0x14
mov dword [ebp - 0xc80], 0x9a2b82c4
push 0x6c97
lea eax, [ebp - 0x1030]
push eax
push 0x6d82
push 0
lea eax, [ebp - 0x1210]
push eax
call fcn.100466d8
add esp, 0x14
cmp dword [ebp - 0x298], 0
je 0x10030132
mov dword [ebp - 0x658], 1
jmp 0x10030139
and dword [ebp - 0x658], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x108]
cmp dword [ebp - 0x298], eax
jg 0x1003015a
mov dword [ebp - 0xb50], 1
jmp 0x10030161
and dword [ebp - 0xb50], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x108]
cmp dword [ebp - 0xb50], eax
je 0x10030182
mov dword [ebp - 0x900], 1
jmp 0x10030189
and dword [ebp - 0x900], 0
mov eax, dword [ebp - 0x658]
cmp eax, dword [ebp - 0x900]
je 0x100301a3
mov dword [ebp - 0x660], 1
jmp 0x100301aa
and dword [ebp - 0x660], 0
mov eax, dword [ebp - 0x298]
cmp dword [ebp - 0x660], eax
jl 0x100301c4
mov dword [ebp - 0xa50], 1
jmp 0x100301cb
and dword [ebp - 0xa50], 0
mov eax, dword [ebp - 0xa50]
add eax, 0x495e
jne 0x100301e4
mov dword [ebp - 0xebc], 1
jmp 0x100301eb
and dword [ebp - 0xebc], 0
mov eax, dword [ebp - 0x298]
mov dword [ebp - 0x1098], eax
push 1
lea ecx, [ebp - 0x1030]
call fcn.1000e623
push 4
pop ecx
imul ecx, ecx, 0
mov ecx, dword [ebp + ecx - 0x108]
cmp dword [eax], ecx
jge 0x10030221
mov dword [ebp - 0x668], 1
jmp 0x10030228
and dword [ebp - 0x668], 0
mov esi, dword [ebp - 0x668]
sub esi, dword [ebp - 0xc80]
push 2
lea ecx, [ebp - 0xfe8]
call fcn.1000e623
mov dword [eax], esi
mov byte [ebp - 4], 0x13
lea ecx, [ebp - 0x1030]
call fcn.1000e61e
jmp 0x100300a7
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xfe8]
call fcn.1000e61e
mov dword [ebp - 0x1b4], 0xf36a5b5c
mov dword [ebp - 0xa0], 0
mov dword [ebp - 0x198], 0xfffffffb
mov dword [ebp - 0x110], 0xb4bc662a
mov dword [ebp - 0x12a8], 2
cmp dword [ebp - 0xa0], 1
jne 0x100302ad
mov dword [ebp - 0x908], 1
jmp 0x100302b4
and dword [ebp - 0x908], 0
mov eax, dword [ebp - 0x908]
mov dword [ebp - 0x198], eax
mov eax, dword [ebp - 0x198]
sub eax, dword [ebp - 0xa0]
mov ecx, dword [ebp - 0xa0]
add ecx, eax
mov dword [ebp - 0x110], ecx
mov dword [ebp - 0xdb0], 0x19a3
cmp dword [ebp - 0xdb0], 0x4e5
jge 0x10030615
xor cl, cl
call fcn.1002b276
lea eax, [ebp - 0x240]
push eax
lea eax, [ebp - 0x1e8]
push eax
mov ecx, 0x1065c150
call fcn.1000e075
mov ecx, eax
call fcn.1000e075
and dword [ebp - 0xc88], 0
lea eax, [ebp - 0xc88]
push eax
push dword [ebp - 0x240]
lea ecx, [ebp - 0x13ac]
call fcn.10022aba
mov dword [ebp - 0xe48], eax
mov eax, dword [ebp - 0xe48]
mov dword [ebp - 0xc90], eax
mov dword [ebp - 4], 0x15
push dword [ebp - 0xc90]
push dword [ebp - 0x1e8]
lea ecx, [ebp - 0xbf8]
call fcn.1004b715
mov byte [ebp - 4], 0x17
lea ecx, [ebp - 0x13ac]
call fcn.1000e61e
and dword [ebp - 0x2a0], 0
jmp 0x1003038e
mov eax, dword [ebp - 0x2a0]
inc eax
mov dword [ebp - 0x2a0], eax
mov eax, dword [ebp - 0x2a0]
cmp eax, dword [ebp - 0x1e8]
jge 0x100303ed
and dword [ebp - 0x300], 0
jmp 0x100303b2
mov eax, dword [ebp - 0x300]
inc eax
mov dword [ebp - 0x300], eax
mov eax, dword [ebp - 0x300]
cmp eax, dword [ebp - 0x240]
jge 0x100303eb
push dword [ebp - 0x300]
push dword [ebp - 0x2a0]
lea ecx, [ebp - 0xbf8]
call fcn.10022aa0
mov ecx, eax
call fcn.1000e623
push eax
mov ecx, 0x1065c150
call fcn.1000e075
jmp 0x100303a5
jmp 0x10030381
and dword [ebp - 0x74], 0
and dword [ebp - 0x1e0], 0
jmp 0x10030407
mov eax, dword [ebp - 0x1e0]
inc eax
mov dword [ebp - 0x1e0], eax
mov eax, dword [ebp - 0x1e0]
cmp eax, dword [ebp - 0x1e8]
jge 0x100304ef
and dword [ebp - 0x670], 0
and dword [ebp - 0x330], 0
jmp 0x10030436
mov eax, dword [ebp - 0x330]
inc eax
mov dword [ebp - 0x330], eax
mov eax, dword [ebp - 0x330]
cmp eax, dword [ebp - 0x240]
jge 0x10030481
push dword [ebp - 0x330]
push dword [ebp - 0x1e0]
lea ecx, [ebp - 0xbf8]
call fcn.10022aa0
mov ecx, eax
call fcn.1000e623
cmp dword [eax], 0
je 0x10030473
mov dword [ebp - 0x670], 1
jmp 0x1003047f
mov eax, dword [ebp - 0x74]
add eax, dword [ebp - 0x670]
mov dword [ebp - 0x74], eax
jmp 0x10030429
and dword [ebp - 0xb00], 0
mov eax, dword [ebp - 0x240]
dec eax
mov dword [ebp - 0x2a8], eax
jmp 0x100304a4
mov eax, dword [ebp - 0x2a8]
dec eax
mov dword [ebp - 0x2a8], eax
cmp dword [ebp - 0x2a8], 0
jl 0x100304ea
push dword [ebp - 0x2a8]
push dword [ebp - 0x1e0]
lea ecx, [ebp - 0xbf8]
call fcn.10022aa0
mov ecx, eax
call fcn.1000e623
cmp dword [eax], 0
je 0x100304dc
mov dword [ebp - 0xb00], 1
jmp 0x100304e8
mov eax, dword [ebp - 0x74]
add eax, dword [ebp - 0xb00]
mov dword [ebp - 0x74], eax
jmp 0x10030497
jmp 0x100303fa
and dword [ebp - 0x220], 0
jmp 0x10030505
mov eax, dword [ebp - 0x220]
inc eax
mov dword [ebp - 0x220], eax
mov eax, dword [ebp - 0x220]
cmp eax, dword [ebp - 0x240]
jge 0x100305ed
and dword [ebp - 0x678], 0
and dword [ebp - 0x308], 0
jmp 0x10030534
mov eax, dword [ebp - 0x308]
inc eax
mov dword [ebp - 0x308], eax
mov eax, dword [ebp - 0x308]
cmp eax, dword [ebp - 0x1e8]
jge 0x1003057f
push dword [ebp - 0x220]
push dword [ebp - 0x308]
lea ecx, [ebp - 0xbf8]
call fcn.10022aa0
mov ecx, eax
call fcn.1000e623
cmp dword [eax], 0
je 0x10030571
mov dword [ebp - 0x678], 1
jmp 0x1003057d
mov eax, dword [ebp - 0x74]
add eax, dword [ebp - 0x678]
mov dword [ebp - 0x74], eax
jmp 0x10030527
and dword [ebp - 0x910], 0
mov eax, dword [ebp - 0x1e8]
dec eax
mov dword [ebp - 0x2b0], eax
jmp 0x100305a2
mov eax, dword [ebp - 0x2b0]
dec eax
mov dword [ebp - 0x2b0], eax
cmp dword [ebp - 0x2b0], 0
jl 0x100305e8
push dword [ebp - 0x220]
push dword [ebp - 0x2b0]
lea ecx, [ebp - 0xbf8]
call fcn.10022aa0
mov ecx, eax
call fcn.1000e623
cmp dword [eax], 0
je 0x100305da
mov dword [ebp - 0x910], 1
jmp 0x100305e6
mov eax, dword [ebp - 0x74]
add eax, dword [ebp - 0x910]
mov dword [ebp - 0x74], eax
jmp 0x10030595
jmp 0x100304f8
push fcn.10012c7f
push dword [ebp - 0x74]
mov ecx, 0x1065c098
call fcn.100226af
mov ecx, eax
call fcn.1000e264
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xbf8]
call fcn.10022a9b
cmp dword [ebp - 0xa0], 0x8bff9cf0
jle 0x1003062d
mov dword [ebp - 0xa58], 1
jmp 0x10030634
and dword [ebp - 0xa58], 0
mov eax, dword [ebp - 0xa0]
mov dword [ebp - 0x10a0], eax
mov eax, dword [ebp - 0xa0]
cmp dword [ebp - 0x110], eax
je 0x1003065a
mov dword [ebp - 0x680], 1
jmp 0x10030661
and dword [ebp - 0x680], 0
mov eax, dword [ebp - 0x110]
add eax, dword [ebp - 0x680]
add eax, dword [ebp - 0xa0]
cmp dword [ebp - 0xa58], eax
jl 0x100307ab
mov dword [ebp - 0xc98], 0xffffffff
mov dword [ebp - 0x1218], 0xb6dad816
mov dword [ebp - 0xdb8], 0xffffffff
mov dword [ebp - 0x348], 0
jmp 0x100306b6
mov eax, dword [ebp - 0x348]
inc eax
mov dword [ebp - 0x348], eax
cmp dword [ebp - 0x348], 1
jge 0x100306d2
mov eax, dword [ebp - 0x348]
mov dword [ebp + eax*4 - 0x3b8], 1
jmp 0x100306a9
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x3b8]
inc eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x3b8], eax
cmp dword [ebp - 0x198], 0
je 0x10030775
cmp dword [ebp - 0x110], 0
je 0x10030732
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x3b8]
mov dword [ebp - 0x10a8], eax
mov eax, dword [ebp - 0xa0]
mov dword [ebp - 0x1358], eax
cmp dword [ebp - 0x110], 0
jne 0x10030732
xor eax, eax
je 0x10030732
cmp dword [ebp - 0x110], 0
cmp dword [ebp - 0x110], 0xb95520f3
ja 0x1003074a
mov dword [ebp - 0x688], 1
jmp 0x10030751
and dword [ebp - 0x688], 0
mov dword [ebp - 0x198], 9
mov eax, dword [ebp - 0x198]
cmp eax, dword [ebp - 0x688]
jle 0x10030775
mov dword [ebp - 0x918], 1
jmp 0x1003077c
and dword [ebp - 0x918], 0
mov eax, dword [ebp - 0xdb8]
cmp eax, dword [ebp - 0x918]
jle 0x10030796
mov dword [ebp - 0x690], 1
jmp 0x1003079d
and dword [ebp - 0x690], 0
mov eax, dword [ebp - 0x690]
mov dword [ebp - 0xc98], eax
jmp 0x100307de
mov dword [ebp - 0xdc4], 0xbdf11caf
push 0x5535
lea eax, [ebp - 0xa0]
push eax
push 0
push 0x4f6d
push 0x62c5
lea eax, [ebp - 0xdc4]
push eax
push 1
call fcn.1002b320
add esp, 0x1c
push 4
lea ecx, [ebp - 0x103c]
call fcn.1000e5bc
mov dword [ebp - 4], 0x18
mov dword [ebp - 0x50], 4
mov dword [ebp - 0x2b8], 0x99cdf9c7
mov dword [ebp - 0x19c], 0xfffffffb
mov dword [ebp - 0xca0], 0
mov dword [ebp - 0xb08], 1
mov dword [ebp - 0x10b0], 0
cmp dword [ebp - 0x50], 0x8974b66
jge 0x1003094b
mov eax, dword [ebp - 0x50]
mov dword [ebp - 0x1220], eax
mov dword [ebp - 0x2b8], 2
cmp dword [ebp - 0x2b8], 0
jne 0x10030862
xor eax, eax
inc eax
jne 0x10030862
and dword [ebp - 0xb94], 0
jmp 0x1003086c
mov dword [ebp - 0xb94], 1
mov eax, dword [ebp - 0x50]
cmp dword [ebp - 0xb94], eax
jg 0x10030883
mov dword [ebp - 0x698], 1
jmp 0x1003088a
and dword [ebp - 0x698], 0
mov eax, dword [ebp - 0x50]
cmp dword [ebp - 0x698], eax
jge 0x100308a1
mov dword [ebp - 0x920], 1
jmp 0x100308a8
and dword [ebp - 0x920], 0
mov eax, dword [ebp - 0x50]
imul eax, dword [ebp - 0x920]
add eax, dword [ebp - 0x50]
mov dword [ebp - 0x50], eax
jne 0x100308d2
mov eax, 0x1dfe936b
test eax, eax
jne 0x100308d2
cmp dword [ebp - 0x50], 0
jne 0x100308d2
and dword [ebp - 0x6a0], 0
jmp 0x100308dc
mov dword [ebp - 0x6a0], 1
mov eax, dword [ebp - 0x19c]
imul eax, dword [ebp - 0x6a0]
xor ecx, ecx
inc ecx
sub ecx, eax
je 0x10030905
cmp dword [ebp - 0x2b8], 0
je 0x10030905
mov dword [ebp - 0xa60], 1
jmp 0x1003090c
and dword [ebp - 0xa60], 0
mov eax, dword [ebp - 0x19c]
cmp dword [ebp - 0xa60], eax
jl 0x10030926
mov dword [ebp - 0x6a8], 1
jmp 0x1003092d
and dword [ebp - 0x6a8], 0
mov eax, dword [ebp - 0x6a8]
mov dword [ebp - 0x19c], eax
mov eax, 0x27f355c0
test eax, eax
jne 0x1003094b
and dword [ebp - 0x928], 0
jmp 0x10030955
mov dword [ebp - 0x928], 1
cmp dword [ebp - 0x928], 0xffff
ja 0x1003096d
mov dword [ebp - 0x6b0], 1
jmp 0x10030974
and dword [ebp - 0x6b0], 0
mov eax, dword [ebp - 0xca0]
cmp dword [ebp - 0x6b0], eax
je 0x100309ff
mov dword [ebp - 0xdd0], 0xffffffff
mov dword [ebp - 0xdc8], 0xffffffff
mov dword [ebp - 0xcb0], 0x840c2c6f
mov dword [ebp - 0xdc0], 0x1460deea
mov dword [ebp - 0xca8], 0xffffffff
push 0
lea eax, [ebp - 0x2b8]
push eax
lea eax, [ebp - 0xdc0]
push eax
lea eax, [ebp - 0xca8]
push eax
lea eax, [ebp - 0xdc8]
push eax
lea eax, [ebp - 0x19c]
push eax
lea eax, [ebp - 0xcb0]
push eax
push 1
lea eax, [ebp - 0x50]
push eax
lea eax, [ebp - 0xdd0]
push eax
push 0x3321
call fcn.1002b46d
add esp, 0x2c
jmp 0x10030b5a
mov byte [ebp - 0x152], 0
push 0x2ed3
push 0x1444
push 0
lea eax, [ebp - 0x152]
push eax
push 0x2d69
push 0x21d1
push 0x6c80
call fcn.10042896
add esp, 0x1c
mov dword [ebp - 0xcb8], 0x1af0
cmp dword [ebp - 0xcb8], 0x105f
jge 0x10030b51
lea ecx, [ebp - 0xfb8]
call fcn.1000e016
mov byte [ebp - 4], 0x19
lea eax, [ebp - 0x444]
push eax
lea eax, [ebp - 0xcc0]
push eax
mov ecx, 0x1065c150
call fcn.1000e075
mov ecx, eax
call fcn.1000e075
lea edx, [ebp - 0xfb8]
mov ecx, eax
call fcn.10023d94
mov eax, dword [ebp - 0x444]
mov dword [ebp - 0xdcc], eax
mov eax, dword [ebp - 0x444]
dec eax
mov dword [ebp - 0x444], eax
cmp dword [ebp - 0xdcc], 0
je 0x10030b26
mov eax, dword [ebp - 0xcc0]
dec eax
mov dword [ebp - 0x60], eax
jmp 0x10030aba
mov eax, dword [ebp - 0x60]
dec eax
mov dword [ebp - 0x60], eax
cmp dword [ebp - 0x60], 0
jl 0x10030b21
push dword [ebp - 0x60]
lea ecx, [ebp - 0xfb8]
call fcn.100104b2
movsx eax, byte [eax]
cmp eax, 0x47
jne 0x10030b1f
mov eax, dword [ebp - 0x60]
dec eax
js 0x10030b1f
mov eax, dword [ebp - 0x60]
dec eax
push eax
lea ecx, [ebp - 0xfb8]
call fcn.100104b2
movsx eax, byte [eax]
cmp eax, 0x42
jne 0x10030b1f
push dword [ebp - 0x60]
lea ecx, [ebp - 0xfb8]
call fcn.100104b2
mov byte [eax], 0x42
mov eax, dword [ebp - 0x60]
dec eax
push eax
lea ecx, [ebp - 0xfb8]
call fcn.100104b2
mov byte [eax], 0x47
mov eax, dword [ebp - 0x60]
dec eax
mov dword [ebp - 0x60], eax
jmp 0x10030ab3
jmp 0x10030a85
push fcn.10012c7f
lea edx, [ebp - 0xfb8]
mov ecx, 0x1065c098
call fcn.1004bd90
mov ecx, eax
call fcn.1000e264
mov byte [ebp - 4], 0x18
lea ecx, [ebp - 0xfb8]
call fcn.1000e056
mov eax, dword [ebp - 0x19c]
mov dword [ebp - 0x50], eax
mov eax, dword [ebp - 0xb08]
dec eax
mov dword [ebp - 0xb08], eax
mov dword [ebp - 0xce8], 0xffffffff
mov dword [ebp - 0xe50], 0x22e8
cmp dword [ebp - 0xe50], 0x400
jge 0x10030c1b
lea eax, [ebp - 0x3c0]
push eax
push 0x1000775c
call fcn.100528eb
pop ecx
pop ecx
mov eax, dword [ebp - 0x3c0]
mov dword [ebp - 0xcc8], eax
mov eax, dword [ebp - 0x3c0]
dec eax
mov dword [ebp - 0x3c0], eax
cmp dword [ebp - 0xcc8], 0
je 0x10030c1b
lea eax, [ebp - 0xdd4]
push eax
push 0x1000775c
call fcn.100528eb
pop ecx
pop ecx
mov dword [ebp - 0x310], 1
jmp 0x10030bec
mov eax, dword [ebp - 0x310]
inc eax
mov dword [ebp - 0x310], eax
mov eax, dword [ebp - 0x310]
cmp eax, dword [ebp - 0xdd4]
jg 0x10030c0e
push dword [ebp - 0x310]
push 0x100078cc
call fcn.10052b06
pop ecx
pop ecx
jmp 0x10030bdf
push 0x100076c5
call fcn.10052cc6
pop ecx
jmp 0x10030b9e
mov dword [ebp - 0xfa0], 0x324ec2e0
mov dword [ebp - 0xf9c], 0x324ec2e0
mov dword [ebp - 0xf98], 0x324ec2e0
mov dword [ebp - 0xf94], 0x324ec2e0
lea ecx, [ebp - 0x459]
call fcn.1000e632
push eax
lea eax, [ebp - 0xf90]
push eax
lea eax, [ebp - 0xfa0]
push eax
lea ecx, [ebp - 0x1418]
call fcn.1000e635
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0xbd4]
call fcn.1000e5f8
mov byte [ebp - 4], 0x1a
mov dword [ebp - 0xcd0], 0x2096
cmp dword [ebp - 0xcd0], 0x6e5
jge 0x10030d30
and dword [ebp - 0x6b8], 0
and dword [ebp - 0x430], 0
and dword [ebp - 0x3c8], 0
lea eax, [ebp - 0x3c8]
push eax
lea eax, [ebp - 0x430]
push eax
lea eax, [ebp - 0x6b8]
push eax
push 0x100077dc
call fcn.100528eb
add esp, 0x10
mov eax, dword [ebp - 0x6b8]
cdq
sub eax, edx
sar eax, 1
mov dword [ebp - 0x2c0], eax
mov eax, dword [ebp - 0x430]
cmp eax, dword [ebp - 0x2c0]
je 0x10030cfb
mov eax, dword [ebp - 0x2c0]
inc eax
cmp dword [ebp - 0x430], eax
jne 0x10030d25
mov eax, dword [ebp - 0x3c8]
cmp eax, dword [ebp - 0x2c0]
je 0x10030d18
mov eax, dword [ebp - 0x2c0]
inc eax
cmp dword [ebp - 0x3c8], eax
jne 0x10030d25
push 0x100078f0
call fcn.10052cc6
pop ecx
jmp 0x10030d30
push 0x100078ec
call fcn.10052cc6
pop ecx
mov dword [ebp - 0x338], 0x6d0374c7
mov dword [ebp - 0x6d0], 4
mov dword [ebp - 0x1ac], 0xfffffff6
mov dword [ebp - 0xd0], 0xffffffff
push 0
lea ecx, [ebp - 0xbd4]
call fcn.1000e623
mov dword [eax], 0xfffffffe
jmp 0x10030d91
push 0
lea ecx, [ebp - 0xbd4]
call fcn.1000e623
cmp dword [eax], 0xfffffff1
jg 0x10031161
mov dword [ebp - 0x174], 0xd0e75d5
push 3
lea ecx, [ebp - 0xf2c]
call fcn.1000e5bc
mov byte [ebp - 4], 0x1b
mov dword [ebp - 0x1a4], 0
jmp 0x10030ddb
mov eax, dword [ebp - 0x1a4]
inc eax
mov dword [ebp - 0x1a4], eax
cmp dword [ebp - 0x1a4], 1
jge 0x10030df7
mov eax, dword [ebp - 0x1a4]
mov dword [ebp + eax*4 - 0x184], 0xfffc
jmp 0x10030dce
lea eax, [ebp - 0xf2c]
push eax
push 1
push 0x3998
push 0
push 0x44c4
push 0x4aef
lea eax, [ebp - 0x1a4]
push eax
push 0x1474
call fcn.1002c293
add esp, 0x20
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x184], 0
jne 0x10030e50
push 0
lea ecx, [ebp - 0xbd4]
call fcn.1000e623
cmp dword [eax], 0
jne 0x10030e50
mov dword [ebp - 0x6c8], 1
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x184]
mov dword [ebp - 0x10b8], eax
push 0
lea ecx, [ebp - 0xbd4]
call fcn.1000e623
cmp dword [eax], 0
je 0x10030e9b
mov byte [ebp - 0xd6], 0
movzx eax, byte [ebp - 0xd6]
test eax, eax
je 0x1003118e
push 0x7570
push 0x7bd3
push 0
push 0x2a9f
push 0
call fcn.1002cd55
add esp, 0x14
mov byte [ebp - 4], 0x18
lea ecx, [ebp - 0xbd4]
call fcn.1000e61e
mov dword [ebp - 0xde4], 0xfffffff9
push 0x63d0
lea eax, [ebp - 0x10c0]
push eax
push 0x3791
push 0
lea eax, [ebp - 0x103c]
push eax
call fcn.10036d9c
add esp, 0x14
mov dword [ebp - 0xc8], 0x5d6c05ba
mov dword [ebp - 0x3d0], 0xab1943c6
mov dword [ebp - 0x1110], 0xfac5
mov dword [ebp - 0xc8], 0
jmp 0x10031200
cmp dword [ebp - 0xc8], 0x16
jl 0x10031643
mov dword [ebp - 0x6f8], 0xc553
mov dword [ebp - 0x3d8], 0x245597e
mov dword [ebp - 0x2c8], 0
jmp 0x1003123a
mov eax, dword [ebp - 0x44]
mov dword [ebp - 0x10d0], eax
mov eax, dword [ebp - 0x44]
cmp dword [ebp - 0x118], eax
jne 0x10031663
jmp 0x10036d8c
mov eax, dword [ebp + 0xc]
mov dword [ebp - 0xd3c], eax
lea eax, [ebp + 0x20]
mov dword [ebp - 0xd34], eax
mov eax, dword [ebp + 0x18]
mov dword [ebp - 0xd54], eax
mov eax, dword [ebp - 0xd34]
movzx eax, byte [eax]
test eax, eax
je 0x10036d68
mov eax, dword [ebp - 0xd3c]
mov dword [ebp - 0xd44], eax
mov eax, dword [ebp - 0xd44]
mov dword [ebp - 0xd4c], eax
mov eax, dword [ebp - 0xd4c]
movzx eax, byte [eax]
test eax, eax
je 0x10036d66
push 0
push 0
push 0xa0e
push 0
push 0x29c
push 0
push 0xeb6
push 0
call dword [sym.imp.KERNEL32.dll_DeviceIoControl]
jmp 0x10036d8c
mov eax, dword [ebp - 0xd54]
mov dword [ebp - 0xd5c], eax
mov eax, dword [ebp - 0xd5c]
mov dword [ebp - 0xd64], eax
mov eax, dword [ebp - 0xd64]
mov dword [eax], 0x477862fd
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
mov esp, ebp
pop ebp
ret