Function at 0x1002b2fa
Capabilities:
Inspect section memory permissions

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x1006c268
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x638
push esi
movzx eax, byte [ebp + 0x30]
test eax, eax
je 0x1002dcaf
lea eax, [ebp + 0x20]
mov dword [ebp - 0x3f4], eax
mov eax, dword [ebp + 0x10]
mov dword [ebp - 0x31c], eax
mov eax, dword [ebp + 0x2c]
mov dword [ebp - 0x3fc], eax
mov eax, dword [ebp + 0x14]
mov dword [ebp - 0x3ec], eax
lea eax, [ebp + 0x28]
mov dword [ebp - 0x374], eax
mov eax, dword [ebp - 0x374]
movzx eax, byte [eax]
test eax, eax
je 0x1002c559
mov eax, dword [ebp - 0x3ec]
mov dword [ebp - 0x404], eax
mov eax, dword [ebp - 0x3f4]
mov dword [ebp - 0x428], eax
mov eax, dword [ebp - 0x3fc]
mov dword [ebp - 0xc4], eax
mov eax, dword [ebp - 0xc4]
mov eax, dword [eax]
mov ecx, dword [ebp - 0x404]
add ecx, dword [eax]
mov dword [ebp - 0x3cc], ecx
mov dword [ebp - 0x568], 0xfffffff6
mov dword [ebp - 0x5cc], 0
mov dword [ebp - 0x50c], 9
mov dword [ebp - 0x514], 0xffffffff
mov dword [ebp - 0x51c], 0x999fb023
mov dword [ebp - 0x524], 0x5dae5a6
mov dword [ebp - 0x52c], 0
mov dword [ebp - 0x538], 0xfffffffe
mov dword [ebp - 0x544], 0
mov dword [ebp - 0x550], 0xdead9bac
mov dword [ebp - 0x55c], 0xfffffff6
mov dword [ebp - 0x4b0], 0x45ee28fd
mov dword [ebp - 0x570], 4
mov dword [ebp - 0x240], 0xffff
mov eax, dword [ebp - 0x240]
dec eax
mov dword [ebp - 0x240], eax
mov eax, dword [ebp - 0xc4]
mov eax, dword [eax]
add eax, 8
mov dword [ebp - 0xb4], eax
mov dword [ebp - 0x68], 0xfffa
mov dword [ebp - 0x64], 0xfffa
mov dword [ebp - 0x60], 0xfffa
mov dword [ebp - 0x5c], 0xfffa
mov dword [ebp - 0x10], 3
mov dword [ebp - 0x48], 0
push 1
lea ecx, [ebp - 0x318]
call fcn.100126dc
and dword [ebp - 4], 0
push 1
lea ecx, [ebp - 0x300]
call fcn.100126dc
mov byte [ebp - 4], 1
push 1
lea eax, [ebp - 0x40c]
push eax
push 1
lea eax, [ebp - 0x318]
push eax
call fcn.1002ace5
add esp, 0x10
lea eax, [ebp - 0x40c]
push eax
lea eax, [ebp - 0x300]
push eax
push 0
push 0
call fcn.100417be
add esp, 0x10
mov dword [ebp - 0x10], 0
jmp 0x1002b4d7
mov eax, dword [ebp - 0x10]
inc eax
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], 3
jg 0x1002b8a1
mov dword [ebp - 0x94], 0x29694d2b
mov eax, dword [ebp - 0x10]
mov ecx, dword [ebp - 0x10]
mov ecx, dword [ebp + ecx*4 - 0x68]
cmp dword [ebp + eax*4 - 0x68], ecx
jg 0x1002b507
mov dword [ebp - 0x2c8], 1
jmp 0x1002b50e
and dword [ebp - 0x2c8], 0
mov eax, dword [ebp - 0x10]
cmp dword [ebp + eax*4 - 0x68], 0xca3691f6
jae 0x1002b527
mov dword [ebp - 0x2d0], 1
jmp 0x1002b52e
and dword [ebp - 0x2d0], 0
cmp dword [ebp - 0x2d0], 0xedb3
jle 0x1002b546
mov dword [ebp - 0x2f0], 1
jmp 0x1002b54d
and dword [ebp - 0x2f0], 0
mov eax, dword [ebp - 0x10]
mov eax, dword [ebp + eax*4 - 0x68]
mov dword [ebp - 0x48], eax
mov eax, dword [ebp - 0x48]
cmp eax, dword [ebp - 0x2f0]
jne 0x1002b56e
mov dword [ebp - 0x184], 1
jmp 0x1002b575
and dword [ebp - 0x184], 0
mov dword [ebp - 0x94], 0
mov eax, dword [ebp - 0x94]
cmp eax, dword [ebp - 0x184]
jge 0x1002b5a0
push 3
pop eax
test eax, eax
je 0x1002b5a0
mov dword [ebp - 0x29c], 1
jmp 0x1002b5a7
and dword [ebp - 0x29c], 0
mov eax, dword [ebp - 0x2c8]
cmp eax, dword [ebp - 0x29c]
jne 0x1002b5ce
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x68], 0
je 0x1002b5ce
mov dword [ebp - 0x18c], 1
jmp 0x1002b5d5
and dword [ebp - 0x18c], 0
cmp dword [ebp - 0x18c], 0x8ceef9a8
je 0x1002b5ed
mov dword [ebp - 0x244], 1
jmp 0x1002b5f4
and dword [ebp - 0x244], 0
cmp dword [ebp - 0x244], 0x2e26595a
jle 0x1002b60c
mov dword [ebp - 0x194], 1
jmp 0x1002b613
and dword [ebp - 0x194], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x68]
add eax, dword [ebp - 0x194]
jne 0x1002b638
mov eax, dword [ebp - 0x10]
cmp dword [ebp + eax*4 - 0x68], 0
jne 0x1002b638
and dword [ebp - 0x2cc], 0
jmp 0x1002b642
mov dword [ebp - 0x2cc], 1
mov eax, dword [ebp - 0x2cc]
add eax, 0x8eb1
mov ecx, dword [ebp - 0x10]
cmp eax, dword [ebp + ecx*4 - 0x68]
jg 0x1002b662
mov dword [ebp - 0x19c], 1
jmp 0x1002b669
and dword [ebp - 0x19c], 0
cmp dword [ebp - 0x19c], 0xffffffff
je 0x1002b691
mov eax, 0x5b04
test eax, eax
jne 0x1002b691
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x68], 0
jne 0x1002b691
and dword [ebp - 0x24c], 0
jmp 0x1002b69b
mov dword [ebp - 0x24c], 1
mov eax, dword [ebp - 0x10]
mov eax, dword [ebp + eax*4 - 0x68]
cmp dword [ebp - 0x24c], eax
jg 0x1002b6b6
mov dword [ebp - 0x1a4], 1
jmp 0x1002b6bd
and dword [ebp - 0x1a4], 0
mov eax, dword [ebp - 0x10]
cmp dword [ebp - 0x1a4], eax
jle 0x1002b6d4
mov dword [ebp - 0x2a4], 1
jmp 0x1002b6db
and dword [ebp - 0x2a4], 0
cmp dword [ebp - 0x2a4], 3
jae 0x1002b6f0
mov dword [ebp - 0x168], 1
jmp 0x1002b6f7
and dword [ebp - 0x168], 0
push 0
lea ecx, [ebp - 0x318]
call fcn.10012743
mov ecx, dword [ebp - 0x168]
mov dword [eax], ecx
push 0
lea ecx, [ebp - 0x300]
call fcn.10012743
mov ecx, dword [ebp - 0x168]
mov dword [eax], ecx
push 0
lea ecx, [ebp - 0x318]
call fcn.10012743
push 4
pop eax
imul eax, eax, 3
cmp dword [ebp + eax - 0x68], 0x312a7fad
jne 0x1002b74a
mov dword [ebp - 0x1ac], 1
jmp 0x1002b751
and dword [ebp - 0x1ac], 0
mov eax, dword [ebp - 0x10]
mov eax, dword [ebp + eax*4 - 0x68]
cmp dword [ebp - 0x1ac], eax
jne 0x1002b76c
mov dword [ebp - 0x254], 1
jmp 0x1002b773
and dword [ebp - 0x254], 0
cmp dword [ebp - 0x254], 1
jne 0x1002b788
mov dword [ebp - 0x1b4], 1
jmp 0x1002b78f
and dword [ebp - 0x1b4], 0
mov eax, dword [ebp - 0x10]
mov eax, dword [ebp + eax*4 - 0x68]
cmp eax, dword [ebp - 0x1b4]
jle 0x1002b7aa
mov dword [ebp - 0x2f4], 1
jmp 0x1002b7b1
and dword [ebp - 0x2f4], 0
mov eax, dword [ebp - 0x10]
mov eax, dword [ebp + eax*4 - 0x68]
cmp dword [ebp - 0x2f4], eax
jle 0x1002b7cc
mov dword [ebp - 0x1bc], 1
jmp 0x1002b7d3
and dword [ebp - 0x1bc], 0
mov eax, dword [ebp - 0x10]
mov eax, dword [ebp + eax*4 - 0x68]
sub eax, 0xfffa
cmp eax, dword [ebp - 0x1bc]
jne 0x1002b7f3
mov dword [ebp - 0x25c], 1
jmp 0x1002b7fa
and dword [ebp - 0x25c], 0
mov eax, dword [ebp - 0x94]
cmp dword [ebp - 0x25c], eax
je 0x1002b814
mov dword [ebp - 0x42c], 1
jmp 0x1002b81b
and dword [ebp - 0x42c], 0
mov eax, dword [ebp - 0x10]
mov eax, dword [ebp + eax*4 - 0x68]
mov dword [ebp - 0x94], eax
mov eax, dword [ebp - 0x10]
mov eax, dword [ebp + eax*4 - 0x68]
cmp dword [ebp - 0x94], eax
jge 0x1002b843
mov dword [ebp - 0x3ac], 1
jmp 0x1002b84a
and dword [ebp - 0x3ac], 0
mov eax, dword [ebp - 0x10]
mov dword [ebp - 0x578], eax
mov eax, dword [ebp - 0x10]
mov eax, dword [ebp + eax*4 - 0x68]
mov dword [ebp - 0x580], eax
mov eax, dword [ebp - 0x10]
cmp dword [ebp + eax*4 - 0x68], 0
jne 0x1002b87d
mov eax, dword [ebp - 0x10]
cmp dword [ebp + eax*4 - 0x68], 0
jne 0x1002b87d
and dword [ebp - 0x1c4], 0
jmp 0x1002b887
mov dword [ebp - 0x1c4], 1
push 0
lea ecx, [ebp - 0x300]
call fcn.10012743
mov ecx, dword [ebp - 0x1c4]
mov dword [eax], ecx
jmp 0x1002b4d0
mov dword [ebp - 0x10], 0xe
jmp 0x1002b8b1
mov eax, dword [ebp - 0x10]
inc eax
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], 0x18
jne 0x1002bb1c
mov dword [ebp - 0x90], 0xffffffff
mov dword [ebp - 0x48], 0xe
jmp 0x1002b8d5
mov eax, dword [ebp - 0x48]
inc eax
mov dword [ebp - 0x48], eax
cmp dword [ebp - 0x48], 0x18
jge 0x1002bb17
mov dword [ebp - 0x18], 0xec31937d
mov dword [ebp - 0x104], 0xfffffffb
cmp dword [ebp - 0x18], 0
je 0x1002b8fb
jmp 0x1002bb17
mov dword [ebp - 0x18], 0
jmp 0x1002b90b
mov eax, dword [ebp - 0x18]
inc eax
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 3
jg 0x1002bb12
mov dword [ebp - 0x100], 0xb613644c
mov dword [ebp - 0x100], 3
jmp 0x1002b938
mov eax, dword [ebp - 0x100]
dec eax
mov dword [ebp - 0x100], eax
cmp dword [ebp - 0x100], 0
jl 0x1002baf6
mov dword [ebp - 0x1dc], 5
cmp dword [ebp - 0x48], 0
je 0x1002b991
push 0
lea ecx, [ebp - 0x300]
call fcn.10012743
mov eax, dword [eax]
add eax, 0x61f0
mov dword [ebp - 0x104], eax
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp + eax*4 - 0x68]
cmp dword [ebp - 0x104], eax
je 0x1002b98a
mov dword [ebp - 0x2ac], 1
jmp 0x1002b991
and dword [ebp - 0x2ac], 0
cmp dword [ebp - 0x104], 0xffff
jb 0x1002b9a9
mov dword [ebp - 0x3d8], 1
jmp 0x1002b9b0
and dword [ebp - 0x3d8], 0
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp + eax*4 - 0x68]
mov dword [ebp - 0x5d0], eax
mov esi, dword [ebp - 0x90]
push 0
lea ecx, [ebp - 0x300]
call fcn.10012743
imul esi, dword [eax]
cmp esi, dword [ebp - 0x18]
jg 0x1002b9e4
mov dword [ebp - 0x1cc], 1
jmp 0x1002b9eb
and dword [ebp - 0x1cc], 0
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp + eax*4 - 0x68]
cmp eax, dword [ebp - 0x1cc]
jg 0x1002ba06
mov dword [ebp - 0x264], 1
jmp 0x1002ba0d
and dword [ebp - 0x264], 0
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp + eax*4 - 0x68]
cmp eax, dword [ebp - 0x264]
jne 0x1002ba2f
mov eax, dword [ebp - 0x18]
cmp dword [ebp + eax*4 - 0x68], 0
jne 0x1002ba2f
and dword [ebp - 0x1d4], 0
jmp 0x1002ba39
mov dword [ebp - 0x1d4], 1
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp + eax*4 - 0x68]
cmp dword [ebp - 0x1d4], eax
jl 0x1002ba54
mov dword [ebp - 0x2d4], 1
jmp 0x1002ba5b
and dword [ebp - 0x2d4], 0
mov eax, dword [ebp - 0x2d4]
mov dword [ebp - 0x1dc], eax
cmp dword [ebp - 0x1dc], 0
je 0x1002bad3
mov eax, dword [ebp - 0x18]
cmp dword [ebp + eax*4 - 0x68], 0
je 0x1002bad3
mov byte [ebp - 0x51], 0
movzx eax, byte [ebp - 0x51]
test eax, eax
je 0x1002ba97
push 1
push 0x664
push 1
call fcn.1002ad9c
add esp, 0xc
mov dword [ebp - 0x90], 3
jmp 0x1002bab0
mov eax, dword [ebp - 0x90]
dec eax
mov dword [ebp - 0x90], eax
cmp dword [ebp - 0x90], 0
jl 0x1002bad1
push 0
lea eax, [ebp - 0x318]
push eax
push 0x7af3
call fcn.10040b5d
add esp, 0xc
jmp 0x1002baa3
jmp 0x1002baf1
mov byte [ebp - 0x52], 0
push 0x7efe
lea eax, [ebp - 0x52]
push eax
push 1
push 0
push 0x7dd0
call fcn.100403cf
add esp, 0x14
jmp 0x1002b92b
push 0
lea ecx, [ebp - 0x318]
call fcn.10012743
cmp dword [eax], 0
je 0x1002bb0d
jmp 0x1002b904
jmp 0x1002b904
jmp 0x1002b8ce
jmp 0x1002b8aa
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x300]
call fcn.1001273e
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x318]
call fcn.1001273e
and dword [ebp - 0x110], 0
jmp 0x1002bb5e
mov eax, dword [ebp - 0x110]
inc eax
mov dword [ebp - 0x110], eax
mov eax, dword [ebp - 0xb4]
inc eax
inc eax
mov dword [ebp - 0xb4], eax
mov eax, dword [ebp - 0xc4]
mov eax, dword [eax]
mov eax, dword [eax + 4]
sub eax, 8
shr eax, 1
cmp dword [ebp - 0x110], eax
jae 0x1002c544
mov dword [ebp - 0x30], 0xffffffff
mov dword [ebp - 0x338], 0xb101
mov dword [ebp - 0x424], 0x574b6046
mov dword [ebp - 0xa4], 0
jmp 0x1002bbae
mov eax, dword [ebp - 0xa4]
inc eax
mov dword [ebp - 0xa4], eax
cmp dword [ebp - 0xa4], 3
jge 0x1002bbca
mov eax, dword [ebp - 0xa4]
mov dword [ebp + eax*4 - 0x608], 0xb06c0e26
jmp 0x1002bba1
mov dword [ebp - 0x30], 0
jmp 0x1002bbda
mov eax, dword [ebp - 0x30]
inc eax
mov dword [ebp - 0x30], eax
cmp dword [ebp - 0x30], 4
jle 0x1002bd98
mov dword [ebp - 0x140], 0x92c6eed1
push 3
lea ecx, [ebp - 0x488]
call fcn.100126dc
mov dword [ebp - 4], 2
mov dword [ebp - 0x32c], 0
mov dword [ebp - 0xec], 0
jmp 0x1002bc25
mov eax, dword [ebp - 0xec]
inc eax
mov dword [ebp - 0xec], eax
cmp dword [ebp - 0xec], 3
jge 0x1002bc47
push dword [ebp - 0xec]
lea ecx, [ebp - 0x488]
call fcn.10012743
mov dword [eax], 1
jmp 0x1002bc18
imul eax, dword [ebp - 0x140], 0xc710
cmp eax, dword [ebp - 0x140]
jge 0x1002bc65
mov dword [ebp - 0x26c], 1
jmp 0x1002bc6c
and dword [ebp - 0x26c], 0
mov eax, dword [ebp - 0x26c]
inc eax
cmp eax, dword [ebp - 0x30]
jl 0x1002bc84
mov dword [ebp - 0x1e4], 1
jmp 0x1002bc8b
and dword [ebp - 0x1e4], 0
mov eax, dword [ebp - 0x338]
sub eax, dword [ebp - 0x1e4]
imul eax, dword [ebp - 0x140]
cmp dword [ebp - 0x30], eax
jne 0x1002bcaf
mov dword [ebp - 0x118], 1
jmp 0x1002bcb6
and dword [ebp - 0x118], 0
push 4
pop eax
shl eax, 1
mov ecx, dword [ebp - 0x118]
mov dword [ebp + eax - 0x608], ecx
cmp dword [ebp - 0x118], 2
jl 0x1002bcdd
mov dword [ebp - 0x2b4], 1
jmp 0x1002bce4
and dword [ebp - 0x2b4], 0
mov eax, dword [ebp - 0x30]
cmp eax, dword [ebp - 0x2b4]
jl 0x1002bcfb
mov dword [ebp - 0x158], 1
jmp 0x1002bd02
and dword [ebp - 0x158], 0
push 1
lea ecx, [ebp - 0x488]
call fcn.10012743
mov ecx, dword [ebp - 0x158]
mov dword [eax], ecx
cmp dword [ebp - 0x158], 0
jne 0x1002bd2f
cmp dword [ebp - 0x30], 0
jne 0x1002bd2f
and dword [ebp - 0x1ec], 0
jmp 0x1002bd39
mov dword [ebp - 0x1ec], 1
mov eax, dword [ebp - 0x32c]
cmp dword [ebp - 0x1ec], eax
jl 0x1002bd53
mov dword [ebp - 0x274], 1
jmp 0x1002bd5a
and dword [ebp - 0x274], 0
mov eax, dword [ebp - 0x30]
cmp dword [ebp - 0x274], eax
jne 0x1002bd71
mov dword [ebp - 0x1f4], 1
jmp 0x1002bd78
and dword [ebp - 0x1f4], 0
mov eax, dword [ebp - 0x1f4]
mov dword [ebp - 0x424], eax
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x488]
call fcn.1001273e
jmp 0x1002bbd3
mov dword [ebp - 0x120], 0
mov dword [ebp - 0x148], 6
mov dword [ebp - 0x3b4], 0xfffffff6
mov dword [ebp - 0xac], 0
jmp 0x1002bdcf
mov eax, dword [ebp - 0xac]
inc eax
mov dword [ebp - 0xac], eax
cmp dword [ebp - 0xac], 1
jge 0x1002bdeb
mov eax, dword [ebp - 0xac]
mov dword [ebp + eax*4 - 0x334], 0x31e468a0
jmp 0x1002bdc2
cmp dword [ebp - 0x120], 0
je 0x1002bf14
mov dword [ebp - 0x78], 0x989d221e
mov eax, dword [ebp - 0x78]
cmp dword [ebp - 0x78], eax
jne 0x1002be13
mov dword [ebp - 0x2e8], 1
jmp 0x1002be1a
and dword [ebp - 0x2e8], 0
mov eax, dword [ebp - 0x78]
cmp dword [ebp - 0x2e8], eax
jg 0x1002be31
mov dword [ebp - 0x1fc], 1
jmp 0x1002be38
and dword [ebp - 0x1fc], 0
mov eax, dword [ebp - 0x78]
cmp dword [ebp - 0x1fc], eax
jle 0x1002be58
mov eax, 0x5196
test eax, eax
je 0x1002be58
mov dword [ebp - 0x27c], 1
jmp 0x1002be5f
and dword [ebp - 0x27c], 0
mov eax, dword [ebp - 0x27c]
mov dword [ebp - 0x148], eax
mov eax, dword [ebp - 0x120]
cmp dword [ebp - 0x148], eax
jne 0x1002be85
mov dword [ebp - 0x204], 1
jmp 0x1002be8c
and dword [ebp - 0x204], 0
mov eax, dword [ebp - 0x120]
cmp eax, dword [ebp - 0x204]
jle 0x1002beac
cmp dword [ebp - 0x148], 0
jne 0x1002beac
and dword [ebp - 0x2bc], 0
jmp 0x1002beb6
mov dword [ebp - 0x2bc], 1
cmp dword [ebp - 0x2bc], 0xfffffffa
jg 0x1002becb
mov dword [ebp - 0x20c], 1
jmp 0x1002bed2
and dword [ebp - 0x20c], 0
mov eax, dword [ebp - 0x78]
cmp dword [ebp - 0x20c], eax
jg 0x1002bee9
mov dword [ebp - 0x128], 1
jmp 0x1002bef0
and dword [ebp - 0x128], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x128]
mov dword [ebp + eax - 0x334], ecx
mov eax, dword [ebp - 0x128]
mov dword [ebp - 0x3b4], eax
jmp 0x1002bfb4
mov dword [ebp - 0x5dc], 0xf9beab1d
mov dword [ebp - 0x5fc], 0x7fc0549e
mov dword [ebp - 0x5c4], 0x2294bb48
mov dword [ebp - 0x5bc], 0x2e819d33
mov dword [ebp - 0x284], 0x7f3c88fe
mov dword [ebp - 0xdc], 0
jmp 0x1002bf5f
mov eax, dword [ebp - 0xdc]
inc eax
mov dword [ebp - 0xdc], eax
cmp dword [ebp - 0xdc], 4
jge 0x1002bf7b
mov eax, dword [ebp - 0xdc]
mov dword [ebp + eax*4 - 0x644], 0xaf066b7a
jmp 0x1002bf52
mov byte [ebp - 0x41], 0
movzx eax, byte [ebp - 0x41]
test eax, eax
je 0x1002bfa7
push 0x1eb
push 0xefc
push 0
push 0x187f
push 0xa4
push 1
call fcn.1002e7e1
add esp, 0x18
mov eax, dword [ebp - 0x284]
inc eax
mov dword [ebp - 0x284], eax
mov eax, dword [ebp - 0xb4]
movzx eax, word [eax]
sar eax, 0xc
mov dword [ebp - 0x400], eax
push 3
lea ecx, [ebp - 0x590]
call fcn.100126dc
mov dword [ebp - 4], 3
lea eax, [ebp - 0x590]
push eax
push 0
lea eax, [ebp - 0x4c4]
push eax
push 0x7907
call fcn.100354e3
add esp, 0x10
mov byte [ebp - 0x55], 0
movzx eax, byte [ebp - 0x55]
test eax, eax
je 0x1002c017
push 0x81
push 0x2468
push 0
call fcn.10040c22
add esp, 0xc
mov byte [ebp - 0x54], 0
lea eax, [ebp - 0x54]
push eax
push 1
push 1
push 0x7348
push 0x3bcf
call fcn.1002ae58
add esp, 0x14
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x590]
call fcn.1001273e
mov eax, dword [ebp - 0xb4]
movzx eax, word [eax]
and eax, 0xfff
mov dword [ebp - 0x36c], eax
mov dword [ebp - 0x24], 0xf89b546
mov dword [ebp - 0x6c], 0xea964a90
mov dword [ebp - 0x98], 0
jmp 0x1002c07f
mov eax, dword [ebp - 0x98]
inc eax
mov dword [ebp - 0x98], eax
cmp dword [ebp - 0x98], 3
jge 0x1002c09b
mov eax, dword [ebp - 0x98]
mov dword [ebp + eax*4 - 0x43c], 0x85f70ad6
jmp 0x1002c072
mov dword [ebp - 0x24], 0
jmp 0x1002c0ab
mov eax, dword [ebp - 0x24]
inc eax
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 2
jg 0x1002c20b
mov dword [ebp - 0x34], 0x52c58fb7
mov dword [ebp - 0x3bc], 0x7008b15e
push 4
lea ecx, [ebp - 0x494]
call fcn.100126dc
mov dword [ebp - 4], 4
mov dword [ebp - 0xfc], 0
jmp 0x1002c0f3
mov eax, dword [ebp - 0xfc]
inc eax
mov dword [ebp - 0xfc], eax
cmp dword [ebp - 0xfc], 4
jge 0x1002c115
push dword [ebp - 0xfc]
lea ecx, [ebp - 0x494]
call fcn.10012743
mov dword [eax], 0xc18ab9c
jmp 0x1002c0e6
mov dword [ebp - 0x34], 2
jmp 0x1002c125
mov eax, dword [ebp - 0x34]
dec eax
mov dword [ebp - 0x34], eax
cmp dword [ebp - 0x34], 0
jl 0x1002c1d0
mov dword [ebp - 0x3f8], 0x58bdfadf
mov dword [ebp - 0x344], 4
mov dword [ebp - 0x34c], 0x87d6364d
mov eax, dword [ebp - 0x34]
cmp dword [ebp + eax*4 - 0x43c], 0
je 0x1002c15c
jmp 0x1002c1d0
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0x43c], 8
jne 0x1002c177
mov dword [ebp - 0x33c], 1
jmp 0x1002c17e
and dword [ebp - 0x33c], 0
mov eax, dword [ebp - 0x24]
mov dword [ebp - 0x56c], eax
mov eax, dword [ebp - 0x3f8]
mov dword [ebp - 0x4d0], eax
mov eax, dword [ebp - 0x34]
mov dword [ebp - 0x344], eax
mov eax, dword [ebp - 0x3bc]
mov dword [ebp - 0x6c], eax
cmp dword [ebp - 0x6c], 0
je 0x1002c1b6
mov eax, dword [ebp - 0x34]
cmp dword [ebp + eax*4 - 0x43c], 0
push 2
lea ecx, [ebp - 0x494]
call fcn.10012743
mov eax, dword [eax]
mov dword [ebp - 0x34c], eax
jmp 0x1002c11e
mov dword [ebp - 0x6c], 0
jmp 0x1002c1e0
mov eax, dword [ebp - 0x6c]
inc eax
mov dword [ebp - 0x6c], eax
cmp dword [ebp - 0x6c], 3
jg 0x1002c1f7
mov eax, dword [ebp - 0x24]
cmp dword [ebp + eax*4 - 0x43c], 0
je 0x1002c1f5
jmp 0x1002c1f7
jmp 0x1002c1d9
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x494]
call fcn.1001273e
jmp 0x1002c0a4
mov dword [ebp - 0x24], 2
jmp 0x1002c21b
mov eax, dword [ebp - 0x24]
dec eax
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 0
jl 0x1002c4fc
mov dword [ebp - 0x420], 0x22ca
cmp dword [ebp - 0x420], 0xf00
jge 0x1002c35f
lea eax, [ebp - 0x160]
push eax
mov ecx, 0x1065cfb8
call fcn.10011ec8
mov eax, dword [ebp - 0x160]
mov dword [ebp - 0x354], eax
mov eax, dword [ebp - 0x160]
dec eax
mov dword [ebp - 0x160], eax
cmp dword [ebp - 0x354], 0
je 0x1002c35f
lea ecx, [ebp - 0x4f8]
call fcn.10011e2a
mov dword [ebp - 4], 5
lea edx, [ebp - 0x4f8]
mov ecx, 0x1065cfb8
call fcn.10028c57
and dword [ebp - 0x80], 0
and dword [ebp - 0x130], 0
and dword [ebp - 0x88], 0
lea ecx, [ebp - 0x4f8]
call fcn.1001ba35
mov dword [ebp - 0x3c4], eax
jmp 0x1002c2ca
mov eax, dword [ebp - 0x88]
inc eax
mov dword [ebp - 0x88], eax
mov eax, dword [ebp - 0x88]
cmp eax, dword [ebp - 0x3c4]
jge 0x1002c32f
push dword [ebp - 0x88]
lea ecx, [ebp - 0x4f8]
call fcn.10014d37
movsx eax, byte [eax]
cmp eax, 0x3c
jne 0x1002c2fa
mov eax, dword [ebp - 0x80]
inc eax
mov dword [ebp - 0x80], eax
jmp 0x1002c32d
push dword [ebp - 0x88]
lea ecx, [ebp - 0x4f8]
call fcn.10014d37
movsx eax, byte [eax]
cmp eax, 0x3e
jne 0x1002c32d
cmp dword [ebp - 0x80], 0
je 0x1002c32d
mov eax, dword [ebp - 0x80]
dec eax
mov dword [ebp - 0x80], eax
mov eax, dword [ebp - 0x130]
inc eax
mov dword [ebp - 0x130], eax
jmp 0x1002c2bd
push fcn.10016a49
push dword [ebp - 0x130]
mov ecx, 0x1065cf10
call fcn.100124b5
mov ecx, eax
call fcn.100124a9
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x4f8]
call fcn.10011e8d
jmp 0x1002c250
mov dword [ebp - 0xbc], 0
jmp 0x1002c378
mov eax, dword [ebp - 0xbc]
inc eax
mov dword [ebp - 0xbc], eax
cmp dword [ebp - 0xbc], 1
jge 0x1002c394
mov eax, dword [ebp - 0xbc]
mov dword [ebp + eax*4 - 0x214], 7
jmp 0x1002c36b
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x214]
dec eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x214], eax
mov byte [ebp - 0x49], 0
movzx eax, byte [ebp - 0x49]
test eax, eax
je 0x1002c4f7
push 0x419d
push 0x1931
push 0
push 1
call fcn.100417be
add esp, 0x10
mov dword [ebp - 0x35c], 0x1bfb
cmp dword [ebp - 0x35c], 0x1076
jge 0x1002c4f7
and dword [ebp - 0xe4], 0
jmp 0x1002c405
mov eax, dword [ebp - 0xe4]
inc eax
mov dword [ebp - 0xe4], eax
cmp dword [ebp - 0xe4], 4
jge 0x1002c42a
mov eax, dword [ebp - 0xe4]
lea eax, [ebp + eax*4 - 0x178]
push eax
push 0x1000dbe8
call fcn.1005030b
pop ecx
pop ecx
jmp 0x1002c3f8
and dword [ebp - 0x50], 0
push 4
pop eax
shl eax, 0
push 4
pop ecx
imul ecx, ecx, 0
mov eax, dword [ebp + eax - 0x178]
cmp eax, dword [ebp + ecx - 0x178]
jne 0x1002c451
mov eax, dword [ebp - 0x50]
inc eax
mov dword [ebp - 0x50], eax
push 4
pop eax
shl eax, 1
push 4
pop ecx
imul ecx, ecx, 0
mov eax, dword [ebp + eax - 0x178]
cmp eax, dword [ebp + ecx - 0x178]
je 0x1002c487
push 4
pop eax
shl eax, 1
push 4
pop ecx
shl ecx, 0
mov eax, dword [ebp + eax - 0x178]
cmp eax, dword [ebp + ecx - 0x178]
jne 0x1002c48e
mov eax, dword [ebp - 0x50]
inc eax
mov dword [ebp - 0x50], eax
push 4
pop eax
imul eax, eax, 3
push 4
pop ecx
imul ecx, ecx, 0
mov eax, dword [ebp + eax - 0x178]
cmp eax, dword [ebp + ecx - 0x178]
je 0x1002c4e1
push 4
pop eax
imul eax, eax, 3
push 4
pop ecx
shl ecx, 0
mov eax, dword [ebp + eax - 0x178]
cmp eax, dword [ebp + ecx - 0x178]
je 0x1002c4e1
push 4
pop eax
imul eax, eax, 3
push 4
pop ecx
shl ecx, 1
mov eax, dword [ebp + eax - 0x178]
cmp eax, dword [ebp + ecx - 0x178]
jne 0x1002c4e8
mov eax, dword [ebp - 0x50]
inc eax
mov dword [ebp - 0x50], eax
push dword [ebp - 0x50]
push 0x1000dfc4
call fcn.10050c2e
pop ecx
pop ecx
jmp 0x1002c214
mov eax, dword [ebp - 0x400]
mov dword [ebp - 0x364], eax
cmp dword [ebp - 0x364], 3
je 0x1002c515
jmp 0x1002c53f
mov eax, dword [ebp - 0x3cc]
add eax, dword [ebp - 0x36c]
mov dword [ebp - 0x2e4], eax
mov eax, dword [ebp - 0x2e4]
mov eax, dword [eax]
mov ecx, dword [ebp - 0x428]
add eax, dword [ecx]
mov ecx, dword [ebp - 0x2e4]
mov dword [ecx], eax
jmp 0x1002bb43
lea eax, [ebp - 0xc4]
push eax
push 0
call fcn.1003f0ba
pop ecx
pop ecx
jmp 0x1002dcaa
mov eax, dword [ebp - 0x31c]
mov dword [ebp - 0xf8], eax
mov dword [ebp - 0x47c], 0xfffffff8
mov dword [ebp - 0x478], 0xfffffff8
mov dword [ebp - 0x474], 0xfffffff8
mov dword [ebp - 0x470], 0xfffffff8
lea ecx, [ebp - 0x161]
call fcn.10012752
push eax
lea eax, [ebp - 0x46c]
push eax
lea eax, [ebp - 0x47c]
push eax
lea ecx, [ebp - 0x61c]
call fcn.10012755
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0x2e0]
call fcn.10012718
mov dword [ebp - 4], 6
mov dword [ebp - 0xa8], 0xffffffff
mov dword [ebp - 0x150], 0xa2324015
mov dword [ebp - 0x3d4], 0xffffffff
mov dword [ebp - 0x4e0], 0xfffffff9
mov dword [ebp - 0x4dc], 0xfffffff7
mov dword [ebp - 0x4fc], 1
mov dword [ebp - 0x504], 0xffffffff
mov dword [ebp - 0x5c0], 0x3b3bbbb5
mov dword [ebp - 0xf4], 0
jmp 0x1002c632
mov eax, dword [ebp - 0xf4]
inc eax
mov dword [ebp - 0xf4], eax
cmp dword [ebp - 0xf4], 1
jge 0x1002c64e
mov eax, dword [ebp - 0xf4]
mov dword [ebp + eax*4 - 0x500], 0xa7160c63
jmp 0x1002c625
push 0
lea ecx, [ebp - 0x2e0]
call fcn.10012743
and dword [eax], 0
jmp 0x1002c684
push 0
lea ecx, [ebp - 0x2e0]
call fcn.10012743
mov dword [ebp - 0x21c], eax
mov eax, dword [ebp - 0x21c]
mov eax, dword [eax]
inc eax
mov ecx, dword [ebp - 0x21c]
mov dword [ecx], eax
push 0
lea ecx, [ebp - 0x2e0]
call fcn.10012743
cmp dword [eax], 0x11
jne 0x1002c97e
mov dword [ebp - 0x28c], 0xb63e8e1b
mov dword [ebp - 0x138], 0x3cfce294
mov dword [ebp - 0x574], 0xffffffff
mov dword [ebp - 0x5f4], 0xffffffff
mov dword [ebp - 0x5f0], 0xffffffff
mov dword [ebp - 0x5ec], 0xffffffff
mov dword [ebp - 0x5e8], 0xffffffff
push 1
lea ecx, [ebp - 0x4a0]
call fcn.100126dc
mov byte [ebp - 4], 7
mov dword [ebp - 0x9c], 0
jmp 0x1002c70a
mov eax, dword [ebp - 0x9c]
inc eax
mov dword [ebp - 0x9c], eax
cmp dword [ebp - 0x9c], 1
jge 0x1002c72c
push dword [ebp - 0x9c]
lea ecx, [ebp - 0x4a0]
call fcn.10012743
mov dword [eax], 6
jmp 0x1002c6fd
cmp dword [ebp - 0x28c], 0
jne 0x1002c742
push 0
lea ecx, [ebp - 0x2e0]
call fcn.10012743
push 0
lea ecx, [ebp - 0x2e0]
call fcn.10012743
cmp dword [eax], 0
je 0x1002c7b2
cmp dword [ebp - 0x28c], 0x93d0b548
ja 0x1002c76c
mov dword [ebp - 0x224], 1
jmp 0x1002c773
and dword [ebp - 0x224], 0
mov dword [ebp - 0x138], 0xeb77278f
mov eax, dword [ebp - 0x138]
cmp eax, dword [ebp - 0x224]
jne 0x1002c794
mov eax, 0x2215
test eax, eax
jne 0x1002c7a6
push 0
lea ecx, [ebp - 0x2e0]
call fcn.10012743
cmp dword [eax], 0
je 0x1002c7b2
mov dword [ebp - 0x2c4], 1
jmp 0x1002c7b9
and dword [ebp - 0x2c4], 0
mov eax, dword [ebp - 0x2c4]
add eax, 0x415
je 0x1002c820
mov byte [ebp - 0x53], 0
movzx eax, byte [ebp - 0x53]
test eax, eax
je 0x1002c7e6
push 0
push 0x478
push 0x880
call fcn.100396b0
add esp, 0xc
mov byte [ebp - 0x4a], 0
lea eax, [ebp - 0x4a]
push eax
push 0x425
push 0x7f92
push 0xaea
push 0x38de
push 0x1097
push 0
push 0x2b80
push 0x6d3a
call fcn.100453b4
add esp, 0x24
jmp 0x1002c96a
mov dword [ebp - 0x22c], 0xfffffff8
mov dword [ebp - 0x294], 0xb2455f99
mov dword [ebp - 0x37c], 9
mov dword [ebp - 0x508], 5
mov dword [ebp - 0x5c8], 0
push 1
lea ecx, [ebp - 0x5a4]
call fcn.100126dc
mov byte [ebp - 4], 8
mov dword [ebp - 0xa0], 0
jmp 0x1002c87c
mov eax, dword [ebp - 0xa0]
inc eax
mov dword [ebp - 0xa0], eax
cmp dword [ebp - 0xa0], 1
jge 0x1002c89e
push dword [ebp - 0xa0]
lea ecx, [ebp - 0x5a4]
call fcn.10012743
mov dword [eax], 0xcadcda6a
jmp 0x1002c86f
mov dword [ebp - 0xa8], 1
push 0
lea ecx, [ebp - 0x2e0]
call fcn.10012743
mov eax, dword [eax]
neg eax
mov dword [ebp - 0x150], eax
mov eax, dword [ebp - 0x150]
sub eax, 8
mov ecx, dword [ebp - 0xa8]
imul ecx, eax
test ecx, ecx
je 0x1002c91a
mov dword [ebp - 0x22c], 0xce35
mov eax, dword [ebp - 0x22c]
mov dword [ebp - 0x294], eax
mov eax, dword [ebp - 0x294]
mov dword [ebp - 0xa8], eax
mov eax, dword [ebp - 0xa8]
add eax, dword [ebp - 0x150]
je 0x1002c91a
cmp dword [ebp - 0x138], 0
je 0x1002c91a
mov dword [ebp - 0x234], 1
jmp 0x1002c921
and dword [ebp - 0x234], 0
mov eax, dword [ebp - 0x234]
mov dword [ebp - 0x3d4], eax
mov dword [ebp - 0x37c], 0xffffffff
push 0
lea ecx, [ebp - 0x4a0]
call fcn.10012743
mov dword [ebp - 0x2ec], eax
mov eax, dword [ebp - 0x2ec]
mov eax, dword [eax]
inc eax
mov ecx, dword [ebp - 0x2ec]
mov dword [ecx], eax
mov byte [ebp - 4], 7
lea ecx, [ebp - 0x5a4]
call fcn.1001273e
mov byte [ebp - 4], 6
lea ecx, [ebp - 0x4a0]
call fcn.1001273e
jmp 0x1002c660
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x2e0]
call fcn.1001273e
mov eax, dword [ebp - 0xf8]
mov eax, dword [eax]
mov ecx, dword [ebp - 0xf8]
mov ecx, dword [ecx]
movzx ecx, word [ecx + 0x14]
lea eax, [eax + ecx + 0x18]
mov dword [ebp - 0x1c], eax
and dword [ebp - 0x108], 0
jmp 0x1002c9c7
mov eax, dword [ebp - 0x108]
inc eax
mov dword [ebp - 0x108], eax
mov eax, dword [ebp - 0x1c]
add eax, 0x28
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0xf8]
mov eax, dword [eax]
movzx eax, word [eax + 6]
cmp dword [ebp - 0x108], eax
jge 0x1002dcaa
mov dword [ebp - 0x70], 0
mov dword [ebp - 0x408], 0x9d5fac12
mov dword [ebp - 0x384], 0x31eb
mov dword [ebp - 0xb0], 0
jmp 0x1002ca13
mov eax, dword [ebp - 0xb0]
inc eax
mov dword [ebp - 0xb0], eax
cmp dword [ebp - 0xb0], 4
jge 0x1002ca2f
mov eax, dword [ebp - 0xb0]
mov dword [ebp + eax*4 - 0x62c], 0xfffffffd
jmp 0x1002ca06
mov byte [ebp - 0x4b], 0
movzx eax, byte [ebp - 0x4b]
test eax, eax
je 0x1002ca5b
push 1
push 0x5f8
push 1
push 0x17a9
push 0x4c3
push 0x212d
call fcn.1002a9f5
add esp, 0x18
mov eax, dword [ebp - 0x70]
cmp dword [ebp - 0x70], eax
jl 0x1002ca6f
mov dword [ebp - 0x23c], 1
jmp 0x1002ca76
and dword [ebp - 0x23c], 0
push 4
pop eax
shl eax, 1
mov dword [ebp + eax - 0x62c], 0xfffb
imul eax, dword [ebp - 0x70], 0xfffb
cmp eax, dword [ebp - 0x23c]
jge 0x1002caa1
mov dword [ebp - 0x180], 1
jmp 0x1002caa8
and dword [ebp - 0x180], 0
cmp dword [ebp - 0x180], 0
jl 0x1002cabd
mov dword [ebp - 0x188], 1
jmp 0x1002cac4
and dword [ebp - 0x188], 0
mov eax, dword [ebp - 0x188]
mov dword [ebp - 0x70], eax
mov eax, dword [ebp - 0x70]
imul eax, dword [ebp - 0x408]
mov dword [ebp - 0x384], eax
mov eax, dword [ebp - 0x1c]
mov eax, dword [eax + 0x24]
and eax, 0x20000000
je 0x1002caf6
mov dword [ebp - 0x190], 1
jmp 0x1002cafd
and dword [ebp - 0x190], 0
mov eax, dword [ebp - 0x190]
mov dword [ebp - 0x3a4], eax
mov eax, dword [ebp - 0x1c]
mov eax, dword [eax + 0x24]
and eax, 0x40000000
je 0x1002cb22
mov dword [ebp - 0x198], 1
jmp 0x1002cb29
and dword [ebp - 0x198], 0
mov eax, dword [ebp - 0x198]
mov dword [ebp - 0x324], eax
mov eax, dword [ebp - 0x1c]
mov eax, dword [eax + 0x24]
and eax, 0x80000000
je 0x1002cb4e
mov dword [ebp - 0x1a0], 1
jmp 0x1002cb55
and dword [ebp - 0x1a0], 0
mov eax, dword [ebp - 0x1a0]
mov dword [ebp - 0x3f0], eax
mov dword [ebp - 0x38], 0
push 4
lea ecx, [ebp - 0xd4]
call fcn.100126dc
mov dword [ebp - 4], 9
push 2
lea ecx, [ebp - 0x30c]
call fcn.100126dc
mov byte [ebp - 4], 0xa
mov dword [ebp - 0x1f8], 0xf5fdfda8
mov dword [ebp - 0x430], 0x26f2c0e8
mov dword [ebp - 0x394], 0x41af53c8
mov dword [ebp - 0x28], 0
jmp 0x1002cbbb
mov eax, dword [ebp - 0x28]
inc eax
mov dword [ebp - 0x28], eax
cmp dword [ebp - 0x28], 4
jge 0x1002cbd7
push dword [ebp - 0x28]
lea ecx, [ebp - 0xd4]
call fcn.10012743
mov dword [eax], 0x386cce57
jmp 0x1002cbb4
mov dword [ebp - 0x28], 0
jmp 0x1002cbe7
mov eax, dword [ebp - 0x28]
inc eax
mov dword [ebp - 0x28], eax
cmp dword [ebp - 0x28], 2
jge 0x1002cc03
push dword [ebp - 0x28]
lea ecx, [ebp - 0x30c]
call fcn.10012743
mov dword [eax], 0xe5fef407
jmp 0x1002cbe0
lea eax, [ebp - 0x38]
push eax
lea eax, [ebp - 0xd4]
push eax
push 1
push 0
call fcn.100344fc
add esp, 0x10
push 1
lea ecx, [ebp - 0xd4]
call fcn.10012743
mov ecx, dword [ebp - 0x38]
cmp dword [eax], ecx
jge 0x1002cc3a
mov dword [ebp - 0x1a8], 1
jmp 0x1002cc41
and dword [ebp - 0x1a8], 0
cmp dword [ebp - 0x1a8], 0x9a27
jle 0x1002cc62
mov eax, 0xe6337258
test eax, eax
je 0x1002cc62
mov dword [ebp - 0x1b0], 1
jmp 0x1002cc69
and dword [ebp - 0x1b0], 0
mov eax, dword [ebp - 0x38]
cmp dword [ebp - 0x1b0], eax
je 0x1002cc80
mov dword [ebp - 0x1b8], 1
jmp 0x1002cc87
and dword [ebp - 0x1b8], 0
push 1
lea ecx, [ebp - 0xd4]
call fcn.10012743
mov eax, dword [eax]
cmp eax, dword [ebp - 0x1b8]
jle 0x1002ccaa
mov dword [ebp - 0x1c0], 1
jmp 0x1002ccb1
and dword [ebp - 0x1c0], 0
push 3
lea ecx, [ebp - 0xd4]
call fcn.10012743
mov ecx, dword [ebp - 0x1c0]
cmp ecx, dword [eax]
jl 0x1002ccd4
mov dword [ebp - 0x1c8], 1
jmp 0x1002ccdb
and dword [ebp - 0x1c8], 0
mov esi, dword [ebp - 0x38]
imul esi, dword [ebp - 0x1c8]
push 1
lea ecx, [ebp - 0xd4]
call fcn.10012743
cmp esi, dword [eax]
jle 0x1002cd02
mov dword [ebp - 0x1d0], 1
jmp 0x1002cd09
and dword [ebp - 0x1d0], 0
push 1
lea ecx, [ebp - 0xd4]
call fcn.10012743
mov ecx, dword [ebp - 0x1d0]
cmp ecx, dword [eax]
jge 0x1002cd2c
mov dword [ebp - 0x1d8], 1
jmp 0x1002cd33
and dword [ebp - 0x1d8], 0
push 3
lea ecx, [ebp - 0xd4]
call fcn.10012743
mov ecx, dword [ebp - 0x1d8]
add ecx, dword [eax]
cmp ecx, dword [ebp - 0x38]
jge 0x1002cd59
mov dword [ebp - 0x1e0], 1
jmp 0x1002cd60
and dword [ebp - 0x1e0], 0
push 0
lea ecx, [ebp - 0xd4]
call fcn.10012743
mov ecx, dword [ebp - 0x1e0]
cmp ecx, dword [eax]
jne 0x1002cd8c
mov eax, 0x88ff7673
test eax, eax
je 0x1002cd8c
mov dword [ebp - 0x1e8], 1
jmp 0x1002cd93
and dword [ebp - 0x1e8], 0
cmp dword [ebp - 0x1e8], 0x1322
jne 0x1002cdab
mov dword [ebp - 0x3dc], 1
jmp 0x1002cdb2
and dword [ebp - 0x3dc], 0
mov eax, dword [ebp - 0x38]
mov dword [ebp - 0x510], eax
push 1
lea ecx, [ebp - 0xd4]
call fcn.10012743
mov esi, eax
push 1
lea ecx, [ebp - 0xd4]
call fcn.10012743
mov ecx, dword [esi]
cmp ecx, dword [eax]
jne 0x1002cdfb
push 1
lea ecx, [ebp - 0xd4]
call fcn.10012743
cmp dword [eax], 0
je 0x1002cdfb
mov dword [ebp - 0x10c], 1
jmp 0x1002ce02
and dword [ebp - 0x10c], 0
push 1
lea ecx, [ebp - 0xd4]
call fcn.10012743
mov ecx, dword [ebp - 0x10c]
mov dword [eax], ecx
push 0
lea ecx, [ebp - 0x30c]
call fcn.10012743
mov ecx, dword [ebp - 0x10c]
sub ecx, dword [eax]
cmp ecx, 0x6c8400b8
jle 0x1002ce40
mov dword [ebp - 0x38c], 1
jmp 0x1002ce47
and dword [ebp - 0x38c], 0
mov eax, dword [ebp - 0x38]
mov dword [ebp - 0x57c], eax
push 0
lea ecx, [ebp - 0x30c]
call fcn.10012743
mov ecx, dword [ebp - 0x1f8]
cmp dword [eax], ecx
jg 0x1002ce73
mov dword [ebp - 0x1f0], 1
jmp 0x1002ce7a
and dword [ebp - 0x1f0], 0
mov eax, dword [ebp - 0x1f0]
mov dword [ebp - 0x430], eax
push 1
lea ecx, [ebp - 0x30c]
call fcn.10012743
mov esi, eax
push 0
lea ecx, [ebp - 0x30c]
call fcn.10012743
mov ecx, dword [esi]
cmp ecx, dword [eax]
jg 0x1002ceb4
mov dword [ebp - 0x200], 1
jmp 0x1002cebb
and dword [ebp - 0x200], 0
mov eax, dword [ebp - 0x1f8]
add eax, dword [ebp - 0x200]
neg eax
mov dword [ebp - 0x394], eax
mov byte [ebp - 4], 9
lea ecx, [ebp - 0x30c]
call fcn.1001273e
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xd4]
call fcn.1001273e
mov eax, dword [ebp - 0x1c]
mov eax, dword [eax + 0x24]
and eax, 0x2000000
je 0x1002cf67
push 0x4000
mov eax, dword [ebp - 0x1c]
push dword [eax + 0x10]
mov eax, dword [ebp - 0x1c]
push dword [eax + 8]
push 0x882b
push 0xa361
call fcn.1001b6be
pop ecx
pop ecx
call eax
mov dword [ebp - 0x39c], 1
mov dword [ebp - 0x3e8], 8
mov dword [ebp - 0x518], 0xfffffffe
push 0
push 0x5ede
push 0x6dfc
push 1
push 1
lea eax, [ebp - 0x3e8]
push eax
lea eax, [ebp - 0x39c]
push eax
call fcn.10034d94
add esp, 0x1c
jmp 0x1002c9b1
mov dword [ebp - 0x14], 0xfff6
mov dword [ebp - 0x20], 1
push 3
lea ecx, [ebp - 0x4ac]
call fcn.100126dc
mov dword [ebp - 4], 0xb
push 0x8f2
push 1
push 0
lea eax, [ebp - 0x5f8]
push eax
lea eax, [ebp - 0x4ac]
push eax
call fcn.1002ae58
add esp, 0x14
mov eax, dword [ebp - 0x14]
sub eax, 0xffff
mov dword [ebp - 0x20], eax
jne 0x1002cfd1
mov eax, dword [ebp - 0x14]
add eax, dword [ebp - 0x20]
cmp eax, dword [ebp - 0x14]
mov eax, 0x38dc5336
sub eax, dword [ebp - 0x14]
jne 0x1002cfd1
and dword [ebp - 0x208], 0
jmp 0x1002cfdb
mov dword [ebp - 0x208], 1
mov eax, dword [ebp - 0x14]
cmp eax, dword [ebp - 0x208]
je 0x1002cff2
mov dword [ebp - 0x210], 1
jmp 0x1002cff9
and dword [ebp - 0x210], 0
mov eax, dword [ebp - 0x14]
cmp eax, dword [ebp - 0x210]
je 0x1002d010
mov dword [ebp - 0x218], 1
jmp 0x1002d017
and dword [ebp - 0x218], 0
mov eax, dword [ebp - 0x14]
cmp dword [ebp - 0x218], eax
jg 0x1002d064
mov dword [ebp - 0x14], 0x1b
jmp 0x1002d032
mov eax, dword [ebp - 0x14]
inc eax
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 0x2c
jne 0x1002d05f
push 1
push 1
push 0x56b
call fcn.1002aaeb
add esp, 0xc
mov byte [ebp - 0x42], 0
movzx eax, byte [ebp - 0x42]
test eax, eax
je 0x1002d05d
push 0
call fcn.1003edc2
pop ecx
jmp 0x1002d02b
jmp 0x1002d2b8
push 1
lea ecx, [ebp - 0x454]
call fcn.100126dc
mov byte [ebp - 4], 0xc
mov dword [ebp - 0xb8], 0
jmp 0x1002d08e
mov eax, dword [ebp - 0xb8]
inc eax
mov dword [ebp - 0xb8], eax
cmp dword [ebp - 0xb8], 1
jge 0x1002d0b0
push dword [ebp - 0xb8]
lea ecx, [ebp - 0x454]
call fcn.10012743
mov dword [eax], 0xffff
jmp 0x1002d081
mov dword [ebp - 0x20], 0
jmp 0x1002d0c0
mov eax, dword [ebp - 0x20]
dec eax
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 0
jl 0x1002d2a9
mov dword [ebp - 0xc0], 0
jmp 0x1002d0e3
mov eax, dword [ebp - 0xc0]
inc eax
mov dword [ebp - 0xc0], eax
cmp dword [ebp - 0xc0], 2
jge 0x1002d0ff
mov eax, dword [ebp - 0xc0]
mov dword [ebp + eax*4 - 0x3e4], 0xfffffffd
jmp 0x1002d0d6
mov dword [ebp - 0x14], 0
jmp 0x1002d10f
mov eax, dword [ebp - 0x14]
inc eax
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 0
jg 0x1002d24e
push 2
lea ecx, [ebp - 0x41c]
call fcn.100126dc
mov byte [ebp - 4], 0xd
mov dword [ebp - 0xc8], 0
jmp 0x1002d143
mov eax, dword [ebp - 0xc8]
inc eax
mov dword [ebp - 0xc8], eax
cmp dword [ebp - 0xc8], 2
jge 0x1002d165
push dword [ebp - 0xc8]
lea ecx, [ebp - 0x41c]
call fcn.10012743
mov dword [eax], 0xe936be85
jmp 0x1002d136
push 1
lea ecx, [ebp - 0x41c]
call fcn.10012743
and dword [eax], 0
jmp 0x1002d19b
push 1
lea ecx, [ebp - 0x41c]
call fcn.10012743
mov dword [ebp - 0x220], eax
mov eax, dword [ebp - 0x220]
mov eax, dword [eax]
inc eax
mov ecx, dword [ebp - 0x220]
mov dword [ecx], eax
push 1
lea ecx, [ebp - 0x41c]
call fcn.10012743
cmp dword [eax], 0
jg 0x1002d23a
mov dword [ebp - 0x410], 0xbd18
push dword [ebp - 0x20]
lea ecx, [ebp - 0x454]
call fcn.10012743
cmp dword [eax], 0x4d07
je 0x1002d1dd
mov dword [ebp - 0x228], 1
jmp 0x1002d1e4
and dword [ebp - 0x228], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x228]
mov dword [ebp + eax - 0x3e4], ecx
push dword [ebp - 0x20]
lea ecx, [ebp - 0x454]
call fcn.10012743
push 4
pop ecx
shl ecx, 0
mov ecx, dword [ebp + ecx - 0x3e4]
cmp dword [eax], ecx
jl 0x1002d222
mov dword [ebp - 0x230], 1
jmp 0x1002d229
and dword [ebp - 0x230], 0
mov eax, dword [ebp - 0x230]
mov dword [ebp - 0x410], eax
jmp 0x1002d177
mov byte [ebp - 4], 0xc
lea ecx, [ebp - 0x41c]
call fcn.1001273e
jmp 0x1002d108
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x3e4]
cmp dword [ebp - 0x20], eax
jge 0x1002d26c
mov dword [ebp - 0x238], 1
jmp 0x1002d273
and dword [ebp - 0x238], 0
cmp dword [ebp - 0x238], 7
ja 0x1002d288
mov dword [ebp - 0x17c], 1
jmp 0x1002d28f
and dword [ebp - 0x17c], 0
push 1
lea ecx, [ebp - 0x4ac]
call fcn.10012743
mov ecx, dword [ebp - 0x17c]
mov dword [eax], ecx
jmp 0x1002d0b9
mov byte [ebp - 4], 0xb
lea ecx, [ebp - 0x454]
call fcn.1001273e
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x4ac]
call fcn.1001273e
lea eax, [ebp - 0x3a4]
push eax
push 1
push 0
lea eax, [ebp - 0x1c]
push eax
push 0x7c1e
lea eax, [ebp - 0x378]
push eax
lea eax, [ebp - 0x3f0]
push eax
push 1
lea eax, [ebp - 0x324]
push eax
call fcn.10035b0f
add esp, 0x24
mov dword [ebp - 0x40], 0x5d6c05ba
mov dword [ebp - 0x134], 0xca8c
mov dword [ebp - 0x328], 0x1bcb
cmp dword [ebp - 0x328], 0xd62
jge 0x1002d6cd
call fcn.1005019b
push 0x20
pop ecx
imul ecx, ecx, 0
add eax, ecx
push eax
push 0x1000e040
push 0x1000e044
call fcn.10051cdd
add esp, 0xc
call fcn.1005019b
push 0x20
pop ecx
shl ecx, 0
add eax, ecx
push eax
push 0x1000dc14
push 0x1000e04c
call fcn.10051cdd
add esp, 0xc
xor eax, eax
inc eax
je 0x1002d6cd
push 0x10cfa678
push 0x1000df8c
call fcn.1005030b
pop ecx
pop ecx
cmp dword [0x10cfa678], 0
jne 0x1002d38d
jmp 0x1002d6cd
push 0x10cfa5d0
push 0x10cfa618
push 0x10d0d720
push 0x10cfabe8
push 0x10cfa5d8
push 0x10d200c0
push 0x10cfa5e8
push 0x10cfabf0
push 0x10ce7c28
push 0x1000e124
call fcn.1005030b
add esp, 0x20
movsd xmm0, qword [0x1000e2c0]
movsd qword [esp], xmm0
movsd xmm0, qword [0x10cfabe8]
subsd xmm0, qword [0x10d200c0]
push ecx
push ecx
movsd qword [esp], xmm0
call fcn.10053610
add esp, 0x10
fstp qword [ebp - 0x534]
movsd xmm0, qword [ebp - 0x534]
push ecx
push ecx
movsd xmm1, qword [0x1000e2c0]
movsd qword [esp], xmm1
movsd xmm1, qword [0x10d0d720]
subsd xmm1, qword [0x10cfa5d8]
push ecx
push ecx
movsd qword [esp], xmm1
movsd qword [ebp - 0x598], xmm0
call fcn.10053610
add esp, 0x10
fstp qword [ebp - 0x540]
movsd xmm0, qword [ebp - 0x598]
addsd xmm0, qword [ebp - 0x540]
movsd qword [0x10cfa6c8], xmm0
and dword [ebp - 0xd8], 0
jmp 0x1002d46b
mov eax, dword [ebp - 0xd8]
inc eax
mov dword [ebp - 0xd8], eax
mov eax, dword [ebp - 0xd8]
cmp eax, dword [0x10cfa678]
jge 0x1002d488
mov eax, dword [ebp - 0xd8]
mov byte [eax + 0x10cdc2c4], 0
jmp 0x1002d45e
and dword [ebp - 0x2c], 0
jmp 0x1002d495
mov eax, dword [ebp - 0x2c]
inc eax
mov dword [ebp - 0x2c], eax
mov eax, dword [ebp - 0x2c]
cmp eax, dword [0x10cfa678]
jge 0x1002d6a3
movsd xmm0, qword [0x1000e2c0]
mulsd xmm0, qword [0x10cfa5e8]
divsd xmm0, qword [0x1000e2c8]
or ecx, 0xffffffff
movsd qword [ebp - 0x558], xmm0
call fcn.10046405
mulsd xmm0, qword [0x1000e2c0]
cvtsi2sd xmm1, dword [0x10cfa678]
divsd xmm0, xmm1
mov eax, dword [ebp - 0x2c]
inc eax
cvtsi2sd xmm1, eax
mulsd xmm0, xmm1
push ecx
push ecx
movsd qword [esp], xmm0
call fcn.10053aa0
pop ecx
pop ecx
fstp qword [ebp - 0x5e4]
movsd xmm0, qword [ebp - 0x5e4]
or ecx, 0xffffffff
movsd qword [ebp - 0x54c], xmm0
call fcn.10046405
mulsd xmm0, qword [0x1000e2c0]
cvtsi2sd xmm1, dword [0x10cfa678]
divsd xmm0, xmm1
cvtsi2sd xmm1, dword [ebp - 0x2c]
mulsd xmm0, xmm1
push ecx
push ecx
movsd qword [esp], xmm0
call fcn.10053aa0
pop ecx
pop ecx
fstp qword [ebp - 0x5ac]
movsd xmm0, qword [ebp - 0x54c]
subsd xmm0, qword [ebp - 0x5ac]
movsd xmm1, qword [ebp - 0x558]
mulsd xmm1, xmm0
or ecx, 0xffffffff
movsd qword [ebp - 0x5d8], xmm1
call fcn.10046405
mulsd xmm0, qword [0x1000e2c0]
cvtsi2sd xmm1, dword [0x10cfa678]
divsd xmm0, xmm1
movsd xmm1, qword [ebp - 0x5d8]
divsd xmm1, xmm0
mov eax, dword [ebp - 0x2c]
movsd qword [eax*8 + 0x10cfa680], xmm1
movsd xmm0, qword [0x1000e2c0]
mulsd xmm0, qword [0x10cfa5e8]
divsd xmm0, qword [0x1000e2c8]
or ecx, 0xffffffff
movsd qword [ebp - 0x4cc], xmm0
call fcn.10046405
mulsd xmm0, qword [0x1000e2c0]
cvtsi2sd xmm1, dword [0x10cfa678]
divsd xmm0, xmm1
cvtsi2sd xmm1, dword [ebp - 0x2c]
mulsd xmm0, xmm1
push ecx
push ecx
movsd qword [esp], xmm0
call fcn.10051d60
pop ecx
pop ecx
fstp qword [ebp - 0x564]
movsd xmm0, qword [ebp - 0x564]
or ecx, 0xffffffff
movsd qword [ebp - 0x4b8], xmm0
call fcn.10046405
mulsd xmm0, qword [0x1000e2c0]
cvtsi2sd xmm1, dword [0x10cfa678]
divsd xmm0, xmm1
mov eax, dword [ebp - 0x2c]
inc eax
cvtsi2sd xmm1, eax
mulsd xmm0, xmm1
push ecx
push ecx
movsd qword [esp], xmm0
call fcn.10051d60
pop ecx
pop ecx
fstp qword [ebp - 0x4c0]
movsd xmm0, qword [ebp - 0x4b8]
subsd xmm0, qword [ebp - 0x4c0]
movsd xmm1, qword [ebp - 0x4cc]
mulsd xmm1, xmm0
or ecx, 0xffffffff
movsd qword [ebp - 0x4d8], xmm1
call fcn.10046405
mulsd xmm0, qword [0x1000e2c0]
cvtsi2sd xmm1, dword [0x10cfa678]
divsd xmm0, xmm1
movsd xmm1, qword [ebp - 0x4d8]
divsd xmm1, xmm0
mov eax, dword [ebp - 0x2c]
movsd qword [eax*8 + 0x10cfa628], xmm1
jmp 0x1002d48e
mov byte [0x10cdc2cd], 0
push 0
call fcn.1002b20f
pop ecx
movzx eax, byte [0x10cdc2cd]
test eax, eax
jne 0x1002d6c8
push 0x1000e154
call fcn.10050c2e
pop ecx
jmp 0x1002d365
mov dword [ebp - 0x358], 0
mov dword [ebp - 0x468], 1
mov dword [ebp - 0x464], 1
mov dword [ebp - 0x460], 1
mov dword [ebp - 0x45c], 1
lea ecx, [ebp - 0x159]
call fcn.10012752
push eax
lea eax, [ebp - 0x458]
push eax
lea eax, [ebp - 0x468]
push eax
lea ecx, [ebp - 0x634]
call fcn.10012755
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0x5b8]
call fcn.10012718
mov dword [ebp - 4], 0xe
mov dword [ebp - 0x14c], 0xf6f6d779
mov dword [ebp - 0x40], 0
jmp 0x1002d755
mov eax, dword [ebp - 0x40]
dec eax
mov dword [ebp - 0x40], eax
cmp dword [ebp - 0x40], 0xfffffff6
jg 0x1002dc39
mov dword [ebp - 0x7c], 0x4074dd03
mov dword [ebp - 0x340], 0x14a3a6d7
mov dword [ebp - 0x154], 0x32afcb06
cmp dword [ebp - 0x7c], 0
je 0x1002db55
mov dword [ebp - 0x13c], 0x98aa
mov dword [ebp - 0xf0], 6
mov dword [ebp - 0x360], 0x2ba1
mov dword [ebp - 0x330], 0x1507
cmp dword [ebp - 0x330], 0x690
jge 0x1002d920
lea eax, [ebp - 0x320]
push eax
lea eax, [ebp - 0x11c]
push eax
push 0x1000e06c
call fcn.1005030b
add esp, 0xc
push dword [ebp - 0x11c]
lea ecx, [ebp - 0x448]
call fcn.100126dc
mov byte [ebp - 4], 0xf
and dword [ebp - 0xe0], 0
jmp 0x1002d802
mov eax, dword [ebp - 0xe0]
inc eax
mov dword [ebp - 0xe0], eax
mov eax, dword [ebp - 0xe0]
cmp eax, dword [ebp - 0x11c]
jge 0x1002d830
push dword [ebp - 0xe0]
lea ecx, [ebp - 0x448]
call fcn.10012743
push eax
push 0x1000dbe8
call fcn.1005030b
pop ecx
pop ecx
jmp 0x1002d7f5
and dword [ebp - 0x114], 0
jmp 0x1002d846
mov eax, dword [ebp - 0x114]
inc eax
mov dword [ebp - 0x114], eax
mov eax, dword [ebp - 0x114]
cmp eax, dword [ebp - 0x320]
jge 0x1002d911
lea eax, [ebp - 0x248]
push eax
push 0x1000dbe8
call fcn.1005030b
pop ecx
pop ecx
and dword [ebp - 0x124], 0
mov eax, dword [ebp - 0x11c]
dec eax
mov dword [ebp - 0x12c], eax
and dword [ebp - 0x250], 0
mov eax, dword [ebp - 0x124]
cmp eax, dword [ebp - 0x12c]
jg 0x1002d8fa
mov eax, dword [ebp - 0x124]
add eax, dword [ebp - 0x12c]
cdq
sub eax, edx
sar eax, 1
mov dword [ebp - 0x74], eax
push dword [ebp - 0x74]
lea ecx, [ebp - 0x448]
call fcn.10012743
mov eax, dword [eax]
cmp eax, dword [ebp - 0x248]
jg 0x1002d8d6
mov eax, dword [ebp - 0x74]
inc eax
mov dword [ebp - 0x250], eax
mov eax, dword [ebp - 0x74]
inc eax
mov dword [ebp - 0x124], eax
jmp 0x1002d8f8
push dword [ebp - 0x74]
lea ecx, [ebp - 0x448]
call fcn.10012743
mov eax, dword [eax]
cmp eax, dword [ebp - 0x248]
jle 0x1002d8f8
mov eax, dword [ebp - 0x74]
dec eax
mov dword [ebp - 0x12c], eax
jmp 0x1002d886
push dword [ebp - 0x250]
push 0x1000df90
call fcn.10050c2e
pop ecx
pop ecx
jmp 0x1002d839
mov byte [ebp - 4], 0xe
lea ecx, [ebp - 0x448]
call fcn.1001273e
mov dword [ebp - 0xe8], 0
jmp 0x1002d939
mov eax, dword [ebp - 0xe8]
inc eax
mov dword [ebp - 0xe8], eax
cmp dword [ebp - 0xe8], 3
jge 0x1002d955
mov eax, dword [ebp - 0xe8]
mov dword [ebp + eax*4 - 0x614], 0xab1943c6
jmp 0x1002d92c
mov eax, dword [ebp - 0x13c]
imul eax, dword [ebp - 0x40]
cmp eax, 0x7d6c5051
jne 0x1002d972
mov dword [ebp - 0x258], 1
jmp 0x1002d979
and dword [ebp - 0x258], 0
mov eax, dword [ebp - 0x134]
cmp dword [ebp - 0x258], eax
jl 0x1002d993
mov dword [ebp - 0x260], 1
jmp 0x1002d99a
and dword [ebp - 0x260], 0
mov eax, dword [ebp - 0x40]
cmp eax, dword [ebp - 0x260]
je 0x1002d9b1
mov dword [ebp - 0x268], 1
jmp 0x1002d9b8
and dword [ebp - 0x268], 0
cmp dword [ebp - 0x268], 0x53b1dab5
jl 0x1002d9ca
cmp dword [ebp - 0x7c], 0
je 0x1002d9d1
cmp dword [ebp - 0x134], 0
mov eax, dword [ebp - 0xf0]
mov dword [ebp - 0x7c], eax
mov eax, dword [ebp - 0x134]
cmp dword [ebp - 0x7c], eax
jg 0x1002d9f1
mov dword [ebp - 0x270], 1
jmp 0x1002d9f8
and dword [ebp - 0x270], 0
cmp dword [ebp - 0x270], 0xffffffff
ja 0x1002da0d
mov dword [ebp - 0x278], 1
jmp 0x1002da14
and dword [ebp - 0x278], 0
mov eax, dword [ebp - 0x278]
mov dword [ebp - 0x340], eax
push 0xfffffffffffffffa
pop eax
test eax, eax
jne 0x1002da39
cmp dword [ebp - 0xf0], 0
jne 0x1002da39
and dword [ebp - 0x348], 0
jmp 0x1002da43
mov dword [ebp - 0x348], 1
mov eax, dword [ebp - 0xf0]
cmp dword [ebp - 0x13c], eax
je 0x1002da5d
mov dword [ebp - 0x280], 1
jmp 0x1002da64
and dword [ebp - 0x280], 0
cmp dword [ebp - 0x280], 0x20f
jl 0x1002da7c
mov dword [ebp - 0x288], 1
jmp 0x1002da83
and dword [ebp - 0x288], 0
mov eax, dword [ebp - 0x40]
cmp dword [ebp - 0x288], eax
jle 0x1002da9a
mov dword [ebp - 0x350], 1
jmp 0x1002daa1
and dword [ebp - 0x350], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x614]
mov dword [ebp - 0x520], eax
mov eax, dword [ebp - 0x13c]
mov dword [ebp - 0x584], eax
mov eax, 0x40b319
cmp eax, 1
je 0x1002dadf
mov eax, 0xffff
test eax, eax
je 0x1002dadf
mov dword [ebp - 0x290], 1
jmp 0x1002dae6
and dword [ebp - 0x290], 0
mov eax, dword [ebp - 0x358]
cmp dword [ebp - 0x290], eax
jge 0x1002db00
mov dword [ebp - 0x298], 1
jmp 0x1002db07
and dword [ebp - 0x298], 0
mov eax, dword [ebp - 0xf0]
cmp dword [ebp - 0x298], eax
jne 0x1002db21
mov dword [ebp - 0x144], 1
jmp 0x1002db28
and dword [ebp - 0x144], 0
push 3
lea ecx, [ebp - 0x5b8]
call fcn.10012743
mov ecx, dword [ebp - 0x144]
mov dword [eax], ecx
mov eax, dword [ebp - 0x154]
imul eax, dword [ebp - 0x144]
mov dword [ebp - 0x360], eax
jmp 0x1002dc34
mov dword [ebp - 0x368], 0xa6ae
mov dword [ebp - 0x2a8], 0xa2db6377
mov dword [ebp - 0x2a0], 0xffffffff
cmp dword [ebp - 0x7c], 0
jne 0x1002db85
mov dword [ebp - 0x2b0], 1
jmp 0x1002db8c
and dword [ebp - 0x2b0], 0
mov eax, dword [ebp - 0x14c]
inc eax
mov dword [ebp - 0x14c], eax
mov eax, dword [ebp - 0x14c]
mov dword [ebp - 0x2a0], eax
mov eax, dword [ebp - 0x2a0]
mov dword [ebp - 0x2a8], eax
mov eax, dword [ebp - 0x2a8]
mov dword [ebp - 0x154], eax
mov eax, dword [ebp - 0x154]
add eax, dword [ebp - 0x2b0]
cmp dword [ebp - 0x368], eax
jge 0x1002dbdd
mov dword [ebp - 0x2b8], 1
jmp 0x1002dbe4
and dword [ebp - 0x2b8], 0
mov eax, dword [ebp - 0x2b8]
sub eax, 4
je 0x1002dc1a
mov byte [ebp - 0x39], 0
movzx eax, byte [ebp - 0x39]
test eax, eax
je 0x1002dc18
push 0
push 0x2166
push 0
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_GetTextExtentPoint32W]
jmp 0x1002dc34
mov dword [ebp - 0x370], 0xfff8
push 0
lea eax, [ebp - 0x370]
push eax
call fcn.100354cc
pop ecx
pop ecx
jmp 0x1002d74e
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x5b8]
call fcn.1001273e
push 1
push 0x5897
lea eax, [ebp - 0x1c]
push eax
lea eax, [ebp - 0xf8]
push eax
push 1
lea eax, [ebp - 0x2c0]
push eax
push 0x4152
call fcn.1002abe7
add esp, 0x1c
cmp dword [ebp - 0x2c0], 0
jbe 0x1002dca5
lea eax, [ebp - 0x528]
push eax
push dword [ebp - 0x378]
push dword [ebp - 0x2c0]
mov eax, dword [ebp - 0x1c]
push dword [eax + 8]
push 0x882b
push 0x95c6
call fcn.1001b6be
pop ecx
pop ecx
call eax
jmp 0x1002c9b1
jmp 0x1002ddd2
mov eax, dword [ebp + 8]
mov dword [ebp - 0x3b0], eax
lea eax, [ebp + 0x24]
mov dword [ebp - 0x380], eax
mov eax, dword [ebp + 0xc]
mov dword [ebp - 0x388], eax
mov eax, dword [ebp + 0x1c]
mov dword [ebp - 0x390], eax
mov eax, dword [ebp + 0x18]
mov dword [ebp - 0x3b8], eax
mov eax, dword [ebp - 0x380]
movzx eax, byte [eax]
test eax, eax
je 0x1002dd5d
mov eax, dword [ebp - 0x388]
mov dword [ebp - 0x398], eax
mov eax, dword [ebp - 0x390]
mov dword [ebp - 0x3a0], eax
mov eax, dword [ebp - 0x398]
mov dword [ebp - 0x84], eax
mov eax, dword [ebp - 0x3a0]
mov dword [ebp - 0x3a8], eax
mov eax, dword [ebp - 0x84]
mov dword [eax], 0
jmp 0x1002dd38
mov eax, dword [ebp - 0x84]
mov eax, dword [eax]
inc eax
mov ecx, dword [ebp - 0x84]
mov dword [ecx], eax
mov eax, dword [ebp - 0x84]
cmp dword [eax], 1
jge 0x1002dd5b
mov eax, dword [ebp - 0x84]
push dword [eax]
mov ecx, dword [ebp - 0x3a8]
call fcn.10012743
and dword [eax], 0
jmp 0x1002dd27
jmp 0x1002ddd2
mov eax, dword [ebp - 0x3b0]
mov dword [ebp - 0x3c0], eax
mov eax, dword [ebp - 0x3b8]
mov dword [ebp - 0x3c8], eax
mov eax, dword [ebp - 0x3c0]
mov dword [ebp - 0x8c], eax
mov eax, dword [ebp - 0x3c8]
mov dword [ebp - 0x3d0], eax
mov eax, dword [ebp - 0x8c]
mov dword [eax], 0
jmp 0x1002ddac
mov eax, dword [ebp - 0x8c]
mov eax, dword [eax]
inc eax
mov ecx, dword [ebp - 0x8c]
mov dword [ecx], eax
mov eax, dword [ebp - 0x8c]
cmp dword [eax], 1
jge 0x1002ddd2
mov eax, dword [ebp - 0x8c]
push dword [eax]
mov ecx, dword [ebp - 0x3d0]
call fcn.10012743
mov dword [eax], 0x488f5754
jmp 0x1002dd9b
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop esi
mov esp, ebp
pop ebp
ret