Function at 0x1002ed0d
Capabilities:
Query environment variable

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x100907d9
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x4f8
push esi
movzx eax, byte [ebp + 0x14]
test eax, eax
je 0x1002ed61
mov eax, dword [ebp + 0xc]
mov dword [ebp - 0x380], eax
mov eax, dword [ebp + 0x18]
mov dword [ebp - 0x2b4], eax
push dword [ebp - 0x2b4]
push 1
push dword [ebp - 0x380]
call fcn.10030bff
add esp, 0xc
jmp 0x10030bf0
mov eax, dword [ebp + 0x20]
mov dword [ebp - 0x3b4], eax
mov eax, dword [ebp + 0x34]
mov dword [ebp - 0x3a0], eax
lea eax, [ebp + 0x28]
mov dword [ebp - 0x39c], eax
mov eax, dword [ebp + 0x30]
mov dword [ebp - 0x338], eax
mov eax, dword [ebp + 8]
mov dword [ebp - 0x3a4], eax
mov eax, dword [ebp + 0x38]
mov dword [ebp - 0x2c8], eax
mov eax, dword [ebp + 0x10]
mov dword [ebp - 0x334], eax
mov eax, dword [ebp + 0x2c]
mov dword [ebp - 0x2c0], eax
mov eax, dword [ebp + 0x24]
mov dword [ebp - 0x35c], eax
mov eax, dword [ebp + 0x1c]
mov dword [ebp - 0x2f8], eax
mov eax, dword [ebp - 0x39c]
movzx eax, byte [eax]
test eax, eax
je 0x1002ef96
mov eax, dword [ebp - 0x3a4]
mov dword [ebp - 0x394], eax
mov eax, dword [ebp - 0x3b4]
mov dword [ebp - 0x2d0], eax
mov eax, dword [ebp - 0x334]
mov dword [ebp - 0x344], eax
mov eax, dword [ebp - 0x2c0]
mov dword [ebp - 0x2d8], eax
mov eax, dword [ebp - 0x338]
mov dword [ebp - 0x38c], eax
mov eax, dword [ebp - 0x2c8]
mov dword [ebp - 0x2e0], eax
mov eax, dword [ebp - 0x394]
mov dword [ebp - 0x2f0], eax
mov eax, dword [ebp - 0x2d0]
mov dword [ebp - 0x390], eax
mov eax, dword [ebp - 0x344]
mov dword [ebp - 0x2e8], eax
mov eax, dword [ebp - 0x2d8]
mov dword [ebp - 0x58], eax
mov eax, dword [ebp - 0x38c]
mov dword [ebp - 0xb0], eax
mov eax, dword [ebp - 0x2e0]
mov dword [ebp - 0x350], eax
mov eax, dword [ebp - 0x58]
cmp dword [eax], 0
jne 0x1002eef8
mov eax, dword [ebp - 0xb0]
mov ecx, dword [ebp - 0xb0]
mov ecx, dword [ecx]
cmp dword [eax], ecx
jl 0x1002ee83
mov dword [ebp - 0x28c], 1
jmp 0x1002ee8a
and dword [ebp - 0x28c], 0
mov eax, dword [ebp - 0x58]
mov eax, dword [eax]
cmp dword [ebp - 0x28c], eax
jg 0x1002eea9
mov eax, 0x4f5ac3d6
test eax, eax
jne 0x1002eea9
and dword [ebp - 0x270], 0
jmp 0x1002eeb3
mov dword [ebp - 0x270], 1
mov eax, dword [ebp - 0x350]
mov eax, dword [eax]
cmp dword [ebp - 0x270], eax
jle 0x1002eed7
mov eax, dword [ebp - 0x58]
cmp dword [eax], 0
je 0x1002eed7
mov dword [ebp - 0x278], 1
jmp 0x1002eede
and dword [ebp - 0x278], 0
cmp dword [ebp - 0x278], 0xc8f0d071
je 0x1002eef8
or eax, 0xffffffff
jne 0x1002eef8
and dword [ebp - 0x108], 0
jmp 0x1002ef02
mov dword [ebp - 0x108], 1
mov eax, dword [ebp - 0x58]
mov eax, dword [eax]
cmp eax, dword [ebp - 0x108]
jg 0x1002ef21
mov eax, 0x7dd
test eax, eax
jne 0x1002ef21
and dword [ebp - 0x10c], 0
jmp 0x1002ef2b
mov dword [ebp - 0x10c], 1
mov eax, dword [ebp - 0x58]
mov eax, dword [eax]
mov dword [ebp - 0xb8], eax
push 2
mov ecx, dword [ebp - 0x2e8]
call fcn.10025597
mov ecx, dword [ebp - 0xb8]
mov dword [eax], ecx
mov eax, dword [ebp - 0x390]
mov ecx, dword [ebp - 0xb8]
mov dword [eax], ecx
mov eax, dword [ebp - 0xb0]
mov eax, dword [eax]
imul eax, dword [ebp - 0x10c]
cmp dword [ebp - 0xb8], eax
jl 0x1002ef7c
mov dword [ebp - 0x1cc], 1
jmp 0x1002ef83
and dword [ebp - 0x1cc], 0
mov eax, dword [ebp - 0x2f0]
mov ecx, dword [ebp - 0x1cc]
mov dword [eax], ecx
jmp 0x10030bf0
mov eax, dword [ebp - 0x35c]
mov dword [ebp - 0xe4], eax
mov eax, dword [ebp - 0x2f8]
mov dword [ebp - 0xb4], eax
mov eax, dword [ebp - 0x3a0]
mov dword [ebp - 0xe8], eax
mov dword [ebp - 0x114], 0x4398
mov dword [ebp - 0x368], 0x100090e0
cmp dword [ebp - 0x114], 0x4624
jle 0x1002f080
and dword [ebp - 0x70], 0
jmp 0x1002efeb
mov eax, dword [ebp - 0x70]
inc eax
mov dword [ebp - 0x70], eax
cmp dword [ebp - 0x70], 0xb14
jge 0x1002f080
and dword [ebp - 0xac], 0
jmp 0x1002f00e
mov eax, dword [ebp - 0xac]
inc eax
mov dword [ebp - 0xac], eax
cmp dword [ebp - 0xac], 0x4a04
jge 0x1002f07b
mov eax, dword [ebp - 0x70]
imul eax, dword [ebp - 0xac]
cdq
mov dword [ebp - 0x340], eax
mov dword [ebp - 0x33c], edx
call dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov dword [ebp - 0x400], eax
push dword [ebp - 0x33c]
push dword [ebp - 0x340]
lea ecx, [ebp - 0x4ec]
call fcn.1001147b
pop ecx
pop ecx
mov dword [ebp - 0x300], eax
mov ecx, dword [ebp - 0x300]
call fcn.100252e9
push eax
call fcn.1008287d
pop ecx
lea ecx, [ebp - 0x4ec]
call fcn.100252df
jmp 0x1002f001
jmp 0x1002efe4
cmp dword [ebp - 0x114], 0x4216
jge 0x1002f098
push dword [ebp - 0x368]
call fcn.1008287d
pop ecx
mov dword [ebp - 0x308], 0x8bac
mov dword [ebp - 0x50], 3
mov dword [ebp - 0x434], 0x5c1d1022
lea eax, [ebp - 0x50]
push eax
push 0xe50
push 0x71db
lea eax, [ebp - 0x308]
push eax
push 0
call fcn.1002811b
add esp, 0x14
mov dword [ebp - 0x50], 0
jmp 0x1002f0e2
mov eax, dword [ebp - 0x50]
inc eax
mov dword [ebp - 0x50], eax
cmp dword [ebp - 0x50], 0x12
jg 0x1002f0f8
push 0
push 0x7b0a
call fcn.100287c9
pop ecx
pop ecx
jmp 0x1002f0db
mov ecx, dword [ebp - 0xe4]
call fcn.1004d5ad
movzx eax, al
test eax, eax
je 0x1002f118
mov eax, dword [ebp - 0xe8]
mov byte [eax], 0
jmp 0x10030bf0
mov eax, dword [ebp - 0xb4]
and dword [eax], 0
mov dword [ebp - 0x1dc], 0x49c8
mov dword [ebp - 0x374], 0x1000913c
cmp dword [ebp - 0x1dc], 0x4a0f
jle 0x1002f230
and dword [ebp - 0x78], 0
jmp 0x1002f152
mov eax, dword [ebp - 0x78]
inc eax
mov dword [ebp - 0x78], eax
cmp dword [ebp - 0x78], 0x632f
jge 0x1002f230
and dword [ebp - 0x80], 0
jmp 0x1002f16c
mov eax, dword [ebp - 0x80]
inc eax
mov dword [ebp - 0x80], eax
cmp dword [ebp - 0x80], 0x148f
jge 0x1002f22b
and dword [ebp - 0x68], 0
jmp 0x1002f186
mov eax, dword [ebp - 0x68]
inc eax
mov dword [ebp - 0x68], eax
cmp dword [ebp - 0x68], 0x13c7
jge 0x1002f226
and dword [ebp - 0x98], 0
jmp 0x1002f1a9
mov eax, dword [ebp - 0x98]
inc eax
mov dword [ebp - 0x98], eax
cmp dword [ebp - 0x98], 0x2c4c
jge 0x1002f221
mov eax, dword [ebp - 0x78]
cdq
idiv dword [ebp - 0x80]
mov eax, dword [ebp - 0x68]
add eax, dword [ebp - 0x98]
xor eax, edx
cdq
mov dword [ebp - 0x34c], eax
mov dword [ebp - 0x348], edx
call dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov dword [ebp - 0x41c], eax
push dword [ebp - 0x348]
push dword [ebp - 0x34c]
lea ecx, [ebp - 0x4a4]
call fcn.1001147b
pop ecx
pop ecx
mov dword [ebp - 0x398], eax
mov ecx, dword [ebp - 0x398]
call fcn.100252e9
push eax
call fcn.1008287d
pop ecx
lea ecx, [ebp - 0x4a4]
call fcn.100252df
jmp 0x1002f19c
jmp 0x1002f17f
jmp 0x1002f165
jmp 0x1002f14b
push 4
lea ecx, [ebp - 0x3d0]
call fcn.100254f9
and dword [ebp - 4], 0
push 3
lea ecx, [ebp - 0xf4]
call fcn.100254f9
mov byte [ebp - 4], 1
mov dword [ebp - 0x310], 0xee1c
mov dword [ebp - 0xd4], 0xbf5f
push 0
lea eax, [ebp - 0x3d0]
push eax
lea eax, [ebp - 0x4c]
push eax
call fcn.10029a03
add esp, 0xc
push 0
lea eax, [ebp - 0x4c]
push eax
push 0x3a74
lea eax, [ebp - 0xf4]
push eax
push 0x2c8a
call fcn.1002c70b
add esp, 0x14
mov dword [ebp - 0x4c], 0
jmp 0x1002f2aa
mov eax, dword [ebp - 0x4c]
inc eax
mov dword [ebp - 0x4c], eax
cmp dword [ebp - 0x4c], 4
jge 0x1002f2c0
mov eax, dword [ebp - 0x4c]
mov dword [ebp + eax*4 - 0x48c], 0xfffffff7
jmp 0x1002f2a3
push 0
lea eax, [ebp - 0xd4]
push eax
call fcn.10027aad
pop ecx
pop ecx
push 2
lea ecx, [ebp - 0x3d0]
call fcn.10025597
push 1
lea ecx, [ebp - 0xf4]
call fcn.10025597
cmp dword [eax], 0
jne 0x1002f37c
push 1
lea ecx, [ebp - 0xf4]
call fcn.10025597
mov ecx, dword [ebp - 0xd4]
cmp dword [eax], ecx
jne 0x1002f316
mov dword [ebp - 0x22c], 1
jmp 0x1002f31d
and dword [ebp - 0x22c], 0
push 0
lea ecx, [ebp - 0xf4]
call fcn.10025597
mov ecx, dword [ebp - 0x22c]
cmp ecx, dword [eax]
jge 0x1002f340
mov dword [ebp - 0x11c], 1
jmp 0x1002f347
and dword [ebp - 0x11c], 0
push 3
lea ecx, [ebp - 0x3d0]
call fcn.10025597
mov esi, dword [ebp - 0x11c]
add esi, dword [eax]
push 1
lea ecx, [ebp - 0xf4]
call fcn.10025597
add esi, dword [eax]
cmp esi, 0x1dbc46d7
jg 0x1002f37c
and dword [ebp - 0x1d4], 0
jmp 0x1002f386
mov dword [ebp - 0x1d4], 1
mov eax, dword [ebp - 0xd4]
cmp dword [ebp - 0x1d4], eax
jge 0x1002f3a0
mov dword [ebp - 0x124], 1
jmp 0x1002f3a7
and dword [ebp - 0x124], 0
imul esi, dword [ebp - 0x124], 0xfffb
push 1
lea ecx, [ebp - 0xf4]
call fcn.10025597
sub esi, dword [eax]
cmp esi, dword [ebp - 0x310]
jge 0x1002f3d4
mov dword [ebp - 0xc4], 1
jmp 0x1002f3db
and dword [ebp - 0xc4], 0
push 4
pop eax
shl eax, 1
mov ecx, dword [ebp - 0xc4]
mov dword [ebp + eax - 0x48c], ecx
push 1
lea ecx, [ebp - 0xf4]
call fcn.10025597
mov eax, dword [eax]
cmp eax, dword [ebp - 0xc4]
jg 0x1002f410
mov dword [ebp - 0x25c], 1
jmp 0x1002f417
and dword [ebp - 0x25c], 0
push 1
lea ecx, [ebp - 0xf4]
call fcn.10025597
mov eax, dword [eax]
cmp eax, dword [ebp - 0x25c]
jl 0x1002f43a
mov dword [ebp - 0x12c], 1
jmp 0x1002f441
and dword [ebp - 0x12c], 0
push 1
lea ecx, [ebp - 0xf4]
call fcn.10025597
mov ecx, dword [ebp - 0x12c]
mov dword [eax], ecx
mov byte [ebp - 4], 0
lea ecx, [ebp - 0xf4]
call fcn.1002557b
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x3d0]
call fcn.1002557b
cmp dword [ebp - 0x1dc], 0x48ec
jge 0x1002f48c
push dword [ebp - 0x374]
call fcn.1008287d
pop ecx
lea eax, [ebp - 0x54]
push eax
mov ecx, dword [ebp - 0xe4]
call fcn.10025daa
jmp 0x1002f4a5
lea ecx, [ebp - 0x54]
call fcn.1004d5b6
lea eax, [ebp - 0x43c]
push eax
mov ecx, dword [ebp - 0xe4]
call fcn.10025dbe
push eax
lea ecx, [ebp - 0x54]
call fcn.10025697
movzx eax, al
test eax, eax
je 0x10030878
mov dword [ebp - 0x10], 1
mov dword [ebp - 0x2c], 0x176df7e
mov dword [ebp - 0x174], 0xa25a9550
mov dword [ebp - 0x1fc], 0xb9d6240
mov dword [ebp - 0x3e4], 2
mov dword [ebp - 0x3e0], 2
mov dword [ebp - 0x3dc], 2
mov dword [ebp - 0x3d8], 2
lea ecx, [ebp - 0xb9]
call fcn.100255a6
push eax
lea eax, [ebp - 0x3d4]
push eax
lea eax, [ebp - 0x3e4]
push eax
lea ecx, [ebp - 0x47c]
call fcn.100255a9
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0x430]
call fcn.10025555
mov dword [ebp - 4], 2
mov dword [ebp - 0x384], 0x6d0c81cf
mov dword [ebp - 0x424], 9
mov dword [ebp - 0x134], 0x30e
mov dword [ebp - 0x388], 0x10009170
cmp dword [ebp - 0x134], 0x4a6
jle 0x1002f670
and dword [ebp - 0x88], 0
jmp 0x1002f59f
mov eax, dword [ebp - 0x88]
inc eax
mov dword [ebp - 0x88], eax
cmp dword [ebp - 0x88], 0x143d
jge 0x1002f670
and dword [ebp - 0xa8], 0
jmp 0x1002f5c5
mov eax, dword [ebp - 0xa8]
inc eax
mov dword [ebp - 0xa8], eax
cmp dword [ebp - 0xa8], 0x312c
jge 0x1002f66b
and dword [ebp - 0x90], 0
jmp 0x1002f5eb
mov eax, dword [ebp - 0x90]
inc eax
mov dword [ebp - 0x90], eax
cmp dword [ebp - 0x90], 0x575
jge 0x1002f666
mov eax, dword [ebp - 0x88]
imul eax, dword [ebp - 0xa8]
mov ecx, dword [ebp - 0x90]
sar eax, cl
cdq
mov dword [ebp - 0x358], eax
mov dword [ebp - 0x354], edx
call dword [sym.imp.KERNEL32.dll_GetEnvironmentStringsW]
mov dword [ebp - 0x444], eax
push dword [ebp - 0x354]
push dword [ebp - 0x358]
lea ecx, [ebp - 0x4bc]
call fcn.1001147b
pop ecx
pop ecx
mov dword [ebp - 0x318], eax
mov ecx, dword [ebp - 0x318]
call fcn.100252e9
push eax
call fcn.1008287d
pop ecx
lea ecx, [ebp - 0x4bc]
call fcn.100252df
jmp 0x1002f5de
jmp 0x1002f5b8
jmp 0x1002f592
cmp dword [ebp - 0x134], 0x81
jge 0x1002f688
push dword [ebp - 0x388]
call fcn.1008287d
pop ecx
mov eax, dword [ebp - 0x10]
mov dword [ebp - 0x44c], eax
cmp dword [ebp - 0x10], 0x8065
jge 0x1002f6a6
mov dword [ebp - 0x234], 1
jmp 0x1002f6ad
and dword [ebp - 0x234], 0
mov eax, dword [ebp - 0x10]
cmp dword [ebp - 0x234], eax
jg 0x1002f6c4
mov dword [ebp - 0x13c], 1
jmp 0x1002f6cb
and dword [ebp - 0x13c], 0
mov eax, dword [ebp - 0x10]
cmp eax, dword [ebp - 0x13c]
jne 0x1002f6e2
mov dword [ebp - 0x320], 1
jmp 0x1002f6e9
and dword [ebp - 0x320], 0
mov eax, dword [ebp - 0x10]
mov dword [ebp - 0x450], eax
cmp dword [ebp - 0x10], 1
jl 0x1002f997
push 1
lea ecx, [ebp - 0x298]
call fcn.100254f9
mov byte [ebp - 4], 3
mov dword [ebp - 0x1f4], 0x7c264f89
mov dword [ebp - 0x37c], 0xffffffff
push 0
push 0x12ed
lea eax, [ebp - 0x60]
push eax
lea eax, [ebp - 0x298]
push eax
push 0x34e
call fcn.1002b212
add esp, 0x14
mov dword [ebp - 0x60], 0
jmp 0x1002f750
mov eax, dword [ebp - 0x60]
inc eax
mov dword [ebp - 0x60], eax
cmp dword [ebp - 0x60], 3
jge 0x1002f766
mov eax, dword [ebp - 0x60]
mov dword [ebp + eax*4 - 0x474], 0x9fdb81fd
jmp 0x1002f749
push 0x594d
push 0x25e0
push 0
call fcn.100286c1
add esp, 0xc
push 0
lea ecx, [ebp - 0x298]
call fcn.10025597
cmp dword [eax], 0x826243a5
jbe 0x1002f79b
mov dword [ebp - 0x1e4], 1
jmp 0x1002f7a2
and dword [ebp - 0x1e4], 0
mov eax, dword [ebp - 0x2c]
cmp dword [ebp - 0x1e4], eax
jne 0x1002f7b9
mov dword [ebp - 0x144], 1
jmp 0x1002f7c0
and dword [ebp - 0x144], 0
cmp dword [ebp - 0x144], 0x697a
jl 0x1002f7d8
mov dword [ebp - 0x274], 1
jmp 0x1002f7df
and dword [ebp - 0x274], 0
push 0
lea ecx, [ebp - 0x298]
call fcn.10025597
mov eax, dword [eax]
mov ecx, dword [ebp - 0x274]
lea eax, [ecx + eax + 0x7d66]
cmp eax, dword [ebp - 0x174]
je 0x1002f80f
mov dword [ebp - 0x14c], 1
jmp 0x1002f816
and dword [ebp - 0x14c], 0
cmp dword [ebp - 0x14c], 0x97d93cb
jl 0x1002f82e
mov dword [ebp - 0x1ec], 1
jmp 0x1002f835
and dword [ebp - 0x1ec], 0
mov eax, dword [ebp - 0x10]
cmp dword [ebp - 0x1ec], eax
jle 0x1002f84c
mov dword [ebp - 0x154], 1
jmp 0x1002f853
and dword [ebp - 0x154], 0
push 0
lea ecx, [ebp - 0x298]
call fcn.10025597
mov eax, dword [eax]
cmp eax, dword [ebp - 0x154]
jne 0x1002f876
mov dword [ebp - 0x23c], 1
jmp 0x1002f87d
and dword [ebp - 0x23c], 0
mov eax, dword [ebp - 0x2c]
cmp eax, dword [ebp - 0x23c]
jne 0x1002f894
mov dword [ebp - 0xcc], 1
jmp 0x1002f89b
and dword [ebp - 0xcc], 0
push 4
pop eax
shl eax, 1
mov ecx, dword [ebp - 0xcc]
mov dword [ebp + eax - 0x474], ecx
mov eax, dword [ebp - 0x1f4]
imul eax, dword [ebp - 0xcc]
cmp eax, 0x4592
jg 0x1002f8cd
mov dword [ebp - 0x15c], 1
jmp 0x1002f8d4
and dword [ebp - 0x15c], 0
mov eax, dword [ebp - 0x15c]
mov dword [ebp - 0x2c], eax
cmp dword [ebp - 0x1f4], 0x198f
jg 0x1002f8fb
cmp dword [ebp - 0x10], 0
je 0x1002f8fb
mov dword [ebp - 0x164], 1
jmp 0x1002f902
and dword [ebp - 0x164], 0
mov eax, dword [ebp - 0x10]
cmp dword [ebp - 0x164], eax
jne 0x1002f919
mov dword [ebp - 0x264], 1
jmp 0x1002f920
and dword [ebp - 0x264], 0
mov eax, dword [ebp - 0x37c]
cmp dword [ebp - 0x264], eax
jg 0x1002f93a
mov dword [ebp - 0x328], 1
jmp 0x1002f941
and dword [ebp - 0x328], 0
push 0
lea ecx, [ebp - 0x298]
call fcn.10025597
push 0
lea ecx, [ebp - 0x298]
call fcn.10025597
mov eax, dword [eax]
neg eax
cmp eax, dword [ebp - 0x10]
jg 0x1002f970
mov dword [ebp - 0x16c], 1
jmp 0x1002f977
and dword [ebp - 0x16c], 0
mov eax, dword [ebp - 0x16c]
mov dword [ebp - 0x1fc], eax
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x298]
call fcn.1002557b
jmp 0x1002fa1f
mov dword [ebp - 0x2c], 0
jmp 0x1002f9a7
mov eax, dword [ebp - 0x2c]
inc eax
mov dword [ebp - 0x2c], eax
cmp dword [ebp - 0x2c], 0xd
jg 0x1002fa1f
mov dword [ebp - 0x10], 0
jmp 0x1002f9bd
mov eax, dword [ebp - 0x10]
inc eax
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], 3
jg 0x1002fa1d
push 1
lea ecx, [ebp - 0x3fc]
call fcn.100254f9
mov byte [ebp - 4], 4
lea eax, [ebp - 0x3fc]
push eax
lea eax, [ebp - 0x440]
push eax
push 0x29c9
push 0
call fcn.100490d7
add esp, 0x10
push 0
push 0x60b0
lea eax, [ebp - 0x3fc]
push eax
push 0x5ed
call fcn.1002ece1
add esp, 0x10
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x3fc]
call fcn.1002557b
jmp 0x1002f9b6
jmp 0x1002f9a0
lea eax, [ebp - 0x1fc]
push eax
lea eax, [ebp - 0x10]
push eax
lea eax, [ebp - 0x384]
push eax
push 0
lea eax, [ebp - 0x430]
push eax
lea eax, [ebp - 0x174]
push eax
lea eax, [ebp - 0x2c]
push eax
call fcn.1002dd78
add esp, 0x1c
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x430]
call fcn.1002557b
lea ecx, [ebp - 0x54]
call fcn.10025ea4
movsx eax, byte [eax]
cmp eax, 0x30
jl 0x100300e7
lea ecx, [ebp - 0x54]
call fcn.10025ea4
movsx eax, byte [eax]
cmp eax, 0x39
jg 0x100300e7
mov dword [ebp - 0x30], 0x48261f9c
mov dword [ebp - 0x14], 0x29be1d92
mov dword [ebp - 0x8c], 0xf37d
mov dword [ebp - 0xdc], 0xffffffff
push 0
lea eax, [ebp - 0x8c]
push eax
call fcn.1002784f
pop ecx
pop ecx
mov eax, dword [ebp - 0x14]
mov dword [ebp - 0x468], eax
mov eax, dword [ebp - 0x14]
mov dword [ebp - 0x404], eax
xor eax, eax
jne 0x1002fadb
cmp dword [ebp - 0x14], 0
jne 0x1002fadb
and dword [ebp - 0x244], 0
jmp 0x1002fae5
mov dword [ebp - 0x244], 1
cmp dword [ebp - 0x244], 1
ja 0x1002fafa
mov dword [ebp - 0x17c], 1
jmp 0x1002fb01
and dword [ebp - 0x17c], 0
cmp dword [ebp - 0x17c], 0x5f5b
je 0x1002fb19
mov dword [ebp - 0x204], 1
jmp 0x1002fb20
and dword [ebp - 0x204], 0
mov eax, dword [ebp - 0x204]
sub eax, dword [ebp - 0x8c]
add eax, 8
cmp dword [ebp - 0x8c], eax
jg 0x1002fb43
mov dword [ebp - 0x184], 1
jmp 0x1002fb4a
and dword [ebp - 0x184], 0
mov eax, dword [ebp - 0x30]
add eax, dword [ebp - 0x184]
je 0x1002feb4
mov dword [ebp - 0x38], 1
mov dword [ebp - 0x2bc], 0x7cd3
mov dword [ebp - 0x2c4], 7
mov dword [ebp - 0x30], 0
jmp 0x1002fb84
mov eax, dword [ebp - 0x30]
inc eax
mov dword [ebp - 0x30], eax
cmp dword [ebp - 0x30], 0x16
jge 0x1002feaf
mov dword [ebp - 0x40], 0
mov dword [ebp - 0x3c4], 0xc01
mov dword [ebp - 0x3c0], 0xc01
mov dword [ebp - 0x3bc], 0xc01
mov dword [ebp - 0x3b8], 0xc01
mov dword [ebp - 0x14], 0
jmp 0x1002fbcd
mov eax, dword [ebp - 0x14]
inc eax
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 0x1b
jne 0x1002fea2
mov dword [ebp - 0x20c], 0x95e04a2
mov dword [ebp - 0x48], 0x169b41db
mov dword [ebp - 0x1ac], 4
mov dword [ebp - 0x1b4], 0x347b
mov dword [ebp - 0x2cc], 0x100091d0
cmp dword [ebp - 0x1b4], 0x3486
jle 0x1002fcb4
and dword [ebp - 0xa0], 0
jmp 0x1002fc2c
mov eax, dword [ebp - 0xa0]
inc eax
mov dword [ebp - 0xa0], eax
cmp dword [ebp - 0xa0], 0x150e
jge 0x1002fcb4
and dword [ebp - 0x7c], 0
jmp 0x1002fc45
mov eax, dword [ebp - 0x7c]
inc eax
mov dword [ebp - 0x7c], eax
cmp dword [ebp - 0x7c], 0x1575
jge 0x1002fcaf
mov eax, dword [ebp - 0xa0]
and eax, dword [ebp - 0x7c]
cdq
mov dword [ebp - 0x364], eax
mov dword [ebp - 0x360], edx
call dword [sym.imp.KERNEL32.dll_GetSystemDefaultLangID]
mov word [ebp - 0x378], ax
push dword [ebp - 0x360]
push dword [ebp - 0x364]
lea ecx, [ebp - 0x4d4]
call fcn.1001147b
pop ecx
pop ecx
mov dword [ebp - 0x330], eax
mov ecx, dword [ebp - 0x330]
call fcn.100252e9
push eax
call fcn.1008287d
pop ecx
lea ecx, [ebp - 0x4d4]
call fcn.100252df
jmp 0x1002fc3e
jmp 0x1002fc1f
cmp dword [ebp - 0x38], 0
jne 0x1002fcc6
mov dword [ebp - 0x24c], 1
jmp 0x1002fccd
and dword [ebp - 0x24c], 0
mov eax, dword [ebp - 0x38]
cmp dword [ebp - 0x40], eax
jg 0x1002fce1
mov dword [ebp - 0x2b8], 1
jmp 0x1002fce8
and dword [ebp - 0x2b8], 0
imul eax, dword [ebp - 0x20c], 0xffff
cmp eax, dword [ebp - 0x30]
jl 0x1002fd03
mov dword [ebp - 0x27c], 1
jmp 0x1002fd0a
and dword [ebp - 0x27c], 0
mov eax, dword [ebp - 0x40]
add eax, dword [ebp - 0x27c]
cmp eax, dword [ebp - 0x2bc]
je 0x1002fd27
mov dword [ebp - 0x18c], 1
jmp 0x1002fd2e
and dword [ebp - 0x18c], 0
mov eax, dword [ebp - 0x18c]
mov dword [ebp - 0x48], eax
mov eax, dword [ebp - 0x48]
add eax, dword [ebp - 0x20c]
cmp eax, dword [ebp - 0x1ac]
jle 0x1002fd54
mov dword [ebp - 0x194], 1
jmp 0x1002fd5b
and dword [ebp - 0x194], 0
mov eax, dword [ebp - 0x14]
cmp dword [ebp - 0x194], eax
jge 0x1002fd72
mov dword [ebp - 0x19c], 1
jmp 0x1002fd79
and dword [ebp - 0x19c], 0
mov eax, dword [ebp - 0x24c]
sub eax, dword [ebp - 0x19c]
cmp eax, dword [ebp - 0x2c4]
je 0x1002fd99
mov dword [ebp - 0x214], 1
jmp 0x1002fda0
and dword [ebp - 0x214], 0
cmp dword [ebp - 0x214], 0xfffffff9
jne 0x1002fdb5
mov dword [ebp - 0x1a4], 1
jmp 0x1002fdbc
and dword [ebp - 0x1a4], 0
cmp dword [ebp - 0x1a4], 0xa12a
jne 0x1002fdda
cmp dword [ebp - 0x30], 0
je 0x1002fdda
mov dword [ebp - 0x26c], 1
jmp 0x1002fde1
and dword [ebp - 0x26c], 0
push 4
pop eax
imul eax, eax, 3
mov eax, dword [ebp + eax - 0x3c4]
cmp dword [ebp - 0x26c], eax
jge 0x1002fe02
mov dword [ebp - 0x21c], 1
jmp 0x1002fe09
and dword [ebp - 0x21c], 0
mov eax, dword [ebp - 0x1ac]
add eax, dword [ebp - 0x21c]
cmp eax, dword [ebp - 0x38]
jl 0x1002fe46
mov dword [ebp - 0x48], 0
jmp 0x1002fe2a
mov eax, dword [ebp - 0x48]
dec eax
mov dword [ebp - 0x48], eax
cmp dword [ebp - 0x48], 0xfffffffd
jl 0x1002fe44
push 4
pop eax
imul eax, eax, 3
cmp dword [ebp + eax - 0x3c4], 0
je 0x1002fe42
jmp 0x1002fe44
jmp 0x1002fe23
jmp 0x1002fe85
mov dword [ebp - 0x40], 0
jmp 0x1002fe56
mov eax, dword [ebp - 0x40]
inc eax
mov dword [ebp - 0x40], eax
cmp dword [ebp - 0x40], 3
jg 0x1002fe85
mov dword [ebp - 0x38], 0
jmp 0x1002fe6c
mov eax, dword [ebp - 0x38]
inc eax
mov dword [ebp - 0x38], eax
cmp dword [ebp - 0x38], 3
jg 0x1002fe83
mov eax, dword [ebp - 0x40]
cmp dword [ebp + eax*4 - 0x3c4], 0
je 0x1002fe81
jmp 0x1002fe83
jmp 0x1002fe65
jmp 0x1002fe4f
cmp dword [ebp - 0x1b4], 0x325a
jge 0x1002fe9d
push dword [ebp - 0x2cc]
call fcn.1008287d
pop ecx
jmp 0x1002fbc6
cmp dword [ebp - 0x14], 0
je 0x1002feaa
jmp 0x1002feaf
jmp 0x1002fb7d
jmp 0x100300cd
mov dword [ebp - 0x18], 0xc0ba
mov dword [ebp - 0x254], 0xffffffff
mov dword [ebp - 0x84], 0xcda4f1df
lea eax, [ebp - 0x14]
push eax
push 0
lea eax, [ebp - 0x18]
push eax
call fcn.10028139
add esp, 0xc
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x254], eax
cmp dword [ebp - 0x254], 0
jne 0x1002ff05
mov eax, 0xb93b5720
test eax, eax
jne 0x1002ff05
and dword [ebp - 0x224], 0
jmp 0x1002ff0f
mov dword [ebp - 0x224], 1
cmp dword [ebp - 0x18], 0x8d7e
je 0x1002ff24
mov dword [ebp - 0x1bc], 1
jmp 0x1002ff2b
and dword [ebp - 0x1bc], 0
mov eax, dword [ebp - 0x14]
cmp dword [ebp - 0x1bc], eax
jle 0x1002ff3d
cmp dword [ebp - 0xdc], 0
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x84], eax
mov eax, dword [ebp - 0x84]
cmp dword [ebp - 0x224], eax
jl 0x1002ff60
mov dword [ebp - 0x1c4], 1
jmp 0x1002ff67
and dword [ebp - 0x1c4], 0
mov eax, dword [ebp - 0x18]
sub eax, dword [ebp - 0x1c4]
imul eax, dword [ebp - 0x18]
test eax, eax
jae 0x1002ff84
mov dword [ebp - 0x104], 1
jmp 0x1002ff8b
and dword [ebp - 0x104], 0
cmp dword [ebp - 0x104], 0x6211ee15
je 0x1002ffa3
mov dword [ebp - 0x100], 1
jmp 0x1002ffaa
and dword [ebp - 0x100], 0
mov eax, dword [ebp - 0x18]
cmp eax, dword [ebp - 0x100]
jle 0x1002ffbe
cmp dword [ebp - 0x84], 0
je 0x1002ffd3
cmp dword [ebp - 0x84], 0
je 0x1002ffd3
mov dword [ebp - 0x110], 1
jmp 0x1002ffda
and dword [ebp - 0x110], 0
cmp dword [ebp - 0x110], 7
je 0x1002ffef
mov dword [ebp - 0x118], 1
jmp 0x1002fff6
and dword [ebp - 0x118], 0
mov eax, dword [ebp - 0x14]
cmp dword [ebp - 0x118], eax
jl 0x10030013
cmp dword [ebp - 0x18], 0
je 0x10030013
mov dword [ebp - 0x120], 1
jmp 0x1003001a
and dword [ebp - 0x120], 0
mov eax, dword [ebp - 0x18]
cmp dword [ebp - 0x120], eax
je 0x10030031
mov dword [ebp - 0x128], 1
jmp 0x10030038
and dword [ebp - 0x128], 0
cmp dword [ebp - 0x128], 0x8c85
jne 0x10030050
mov dword [ebp - 0x130], 1
jmp 0x10030057
and dword [ebp - 0x130], 0
imul eax, dword [ebp - 0x130], 0xaaf7
cmp eax, dword [ebp - 0x18]
jl 0x1003007b
cmp dword [ebp - 0xdc], 0
je 0x1003007b
mov dword [ebp - 0x138], 1
jmp 0x10030082
and dword [ebp - 0x138], 0
mov eax, dword [ebp - 0x8c]
cmp dword [ebp - 0x138], eax
jg 0x1003009c
mov dword [ebp - 0x140], 1
jmp 0x100300a3
and dword [ebp - 0x140], 0
mov eax, dword [ebp - 0x18]
cmp dword [ebp - 0x140], eax
jge 0x100300ba
mov dword [ebp - 0x148], 1
jmp 0x100300c1
and dword [ebp - 0x148], 0
mov eax, dword [ebp - 0x148]
mov dword [ebp - 0xdc], eax
push 0
lea eax, [ebp - 0xb4]
push eax
lea eax, [ebp - 0x54]
push eax
call fcn.10029ea1
add esp, 0xc
jmp 0x10030873
push 0
push 0x4be6
call fcn.1002e94c
pop ecx
pop ecx
push 1
push 0x5dcb
lea eax, [ebp - 0xb4]
push eax
push 1
push 0x5c57
push 0
call fcn.10028158
add esp, 0x18
push 3
lea ecx, [ebp - 0x288]
call fcn.100254f9
mov dword [ebp - 4], 5
mov dword [ebp - 0x5c], 0xfff6
mov dword [ebp - 0x20], 0xda8afc1d
mov dword [ebp - 0x1e0], 3
push 1
lea ecx, [ebp - 0x3f0]
call fcn.100254f9
mov byte [ebp - 4], 6
mov dword [ebp - 0x408], 0xfffffffc
mov dword [ebp - 0x410], 0xfffffff6
push 0
lea eax, [ebp - 0x44]
push eax
lea eax, [ebp - 0x288]
push eax
push 0x45fe
push 0x3188
push 0x2c26
push 0x4f35
call fcn.100491f0
add esp, 0x1c
mov dword [ebp - 0x150], 0x8d9
mov dword [ebp - 0x2dc], 0x10009208
cmp dword [ebp - 0x150], 0xc3b
jle 0x10030262
and dword [ebp - 0x94], 0
jmp 0x100301c8
mov eax, dword [ebp - 0x94]
inc eax
mov dword [ebp - 0x94], eax
cmp dword [ebp - 0x94], 0x1658
jge 0x10030262
and dword [ebp - 0x9c], 0
jmp 0x100301ee
mov eax, dword [ebp - 0x9c]
inc eax
mov dword [ebp - 0x9c], eax
cmp dword [ebp - 0x9c], 0x60a5
jge 0x1003025d
mov eax, dword [ebp - 0x94]
add eax, dword [ebp - 0x9c]
cdq
mov dword [ebp - 0x370], eax
mov dword [ebp - 0x36c], edx
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x418], eax
push dword [ebp - 0x36c]
push dword [ebp - 0x370]
lea ecx, [ebp - 0x504]
call fcn.1001147b
pop ecx
pop ecx
mov dword [ebp - 0x2d4], eax
mov ecx, dword [ebp - 0x2d4]
call fcn.100252e9
push eax
call fcn.1008287d
pop ecx
lea ecx, [ebp - 0x504]
call fcn.100252df
jmp 0x100301e1
jmp 0x100301bb
mov dword [ebp - 0x44], 0
jmp 0x10030272
mov eax, dword [ebp - 0x44]
inc eax
mov dword [ebp - 0x44], eax
cmp dword [ebp - 0x44], 3
jge 0x10030288
mov eax, dword [ebp - 0x44]
mov dword [ebp + eax*4 - 0x3b0], 1
jmp 0x1003026b
cmp dword [ebp - 0x150], 0x71d
jge 0x100302a0
push dword [ebp - 0x2dc]
call fcn.1008287d
pop ecx
push 0x5fa8
lea eax, [ebp - 0x3f0]
push eax
push 0
push 1
lea eax, [ebp - 0x44]
push eax
call fcn.1002994d
add esp, 0x14
mov eax, 0x4288a137
test eax, eax
je 0x1003035a
push 1
lea ecx, [ebp - 0x288]
call fcn.10025597
mov esi, eax
push 0
lea ecx, [ebp - 0x288]
call fcn.10025597
mov ecx, dword [esi]
cmp ecx, dword [eax]
jle 0x100302f7
mov dword [ebp - 0x158], 1
jmp 0x100302fe
and dword [ebp - 0x158], 0
push 1
lea ecx, [ebp - 0x288]
call fcn.10025597
mov esi, eax
push 1
lea ecx, [ebp - 0x288]
call fcn.10025597
mov ecx, dword [ebp - 0x158]
add ecx, dword [eax]
mov eax, dword [esi]
imul eax, ecx
mov dword [ebp - 0x160], eax
push 4
pop eax
shl eax, 1
mov ecx, dword [ebp - 0x160]
mov dword [ebp + eax - 0x3b0], ecx
cmp dword [ebp - 0x160], 0
je 0x1003035a
cmp dword [ebp - 0x5c], 0
je 0x1003035a
mov dword [ebp - 0x168], 1
jmp 0x10030361
and dword [ebp - 0x168], 0
cmp dword [ebp - 0x168], 0xffffffff
jle 0x10030376
mov dword [ebp - 0x170], 1
jmp 0x1003037d
and dword [ebp - 0x170], 0
push 0
lea ecx, [ebp - 0x288]
call fcn.10025597
mov ecx, dword [ebp - 0x170]
imul ecx, dword [eax]
mov dword [ebp - 0x20], ecx
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x1e0], eax
mov dword [ebp - 0x20], 2
jmp 0x100303af
mov eax, dword [ebp - 0x20]
dec eax
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 0
jl 0x10030847
mov dword [ebp - 0x1c], 1
mov dword [ebp - 0x1b8], 0x71c25028
mov dword [ebp - 0x2f4], 0xffffffff
push 2
lea ecx, [ebp - 0x45c]
call fcn.100254f9
mov byte [ebp - 4], 7
mov dword [ebp - 0x2fc], 0x914f0912
mov dword [ebp - 0x1c0], 0xfffffffd
mov dword [ebp - 0xa4], 0
jmp 0x10030412
mov eax, dword [ebp - 0xa4]
inc eax
mov dword [ebp - 0xa4], eax
cmp dword [ebp - 0xa4], 2
jge 0x10030431
push dword [ebp - 0xa4]
lea ecx, [ebp - 0x45c]
call fcn.10025597
or dword [eax], 0xffffffff
jmp 0x10030405
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x3b0]
mov dword [ebp - 0x1c], eax
push 0x2ac6
push 0
push 0x73c1
call fcn.10030bff
add esp, 0xc
mov dword [ebp - 0x1c], 0
jmp 0x10030465
mov eax, dword [ebp - 0x1c]
inc eax
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 2
jg 0x10030833
mov dword [ebp - 0x64], 0xffffffff
mov dword [ebp - 0x6c], 0xf08a1bab
mov dword [ebp - 0x5c], 0
jmp 0x1003048d
mov eax, dword [ebp - 0x5c]
inc eax
mov dword [ebp - 0x5c], eax
cmp dword [ebp - 0x5c], 2
jg 0x1003082e
push 1
lea ecx, [ebp - 0x2b0]
call fcn.100254f9
mov byte [ebp - 4], 8
mov dword [ebp - 0x314], 0
mov dword [ebp - 0x1a0], 0x5a42069
mov dword [ebp - 0x31c], 0xd0c6a332
mov dword [ebp - 0x304], 0x6aee34d1
mov dword [ebp - 0x420], 0x5e6d9927
mov dword [ebp - 0xc8], 0xfffd
lea eax, [ebp - 0x2b0]
push eax
lea eax, [ebp - 0x464]
push eax
push 0
call fcn.1002c338
add esp, 0xc
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0x438], eax
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x448], eax
push 1
lea ecx, [ebp - 0x288]
call fcn.10025597
cmp dword [ebp - 0x64], 0
jbe 0x1003052d
mov dword [ebp - 0x178], 1
jmp 0x10030534
and dword [ebp - 0x178], 0
push 0
lea ecx, [ebp - 0x2b0]
call fcn.10025597
mov ecx, dword [ebp - 0x178]
cmp ecx, dword [eax]
je 0x1003055a
cmp dword [ebp - 0x1c], 0
jne 0x1003055a
and dword [ebp - 0xc0], 0
jmp 0x10030564
mov dword [ebp - 0xc0], 1
mov eax, dword [ebp - 0x1c]
mov ecx, dword [ebp - 0xc0]
mov dword [ebp + eax*4 - 0x3b0], ecx
cmp dword [ebp - 0xc0], 7
jae 0x10030589
mov dword [ebp - 0x2e4], 1
jmp 0x10030590
and dword [ebp - 0x2e4], 0
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp + eax*4 - 0x3b0]
sub eax, dword [ebp - 0x20]
je 0x100305b1
cmp dword [ebp - 0x6c], 0
je 0x100305b1
mov dword [ebp - 0x2ec], 1
jmp 0x100305b8
and dword [ebp - 0x2ec], 0
push 0
lea ecx, [ebp - 0x3f0]
call fcn.10025597
cmp dword [ebp - 0x64], 0
jne 0x100305dd
mov eax, 0x7bde
test eax, eax
jne 0x100305dd
and dword [ebp - 0x180], 0
jmp 0x100305e7
mov dword [ebp - 0x180], 1
mov eax, dword [ebp - 0x6c]
cmp dword [ebp - 0x180], eax
jge 0x10030607
cmp dword [ebp - 0x1b8], 0
je 0x10030607
mov dword [ebp - 0x188], 1
jmp 0x1003060e
and dword [ebp - 0x188], 0
cmp dword [ebp - 0x188], 0xaeb3
jg 0x10030626
mov dword [ebp - 0x190], 1
jmp 0x1003062d
and dword [ebp - 0x190], 0
mov eax, dword [ebp - 0x190]
mov dword [ebp - 0x2f4], eax
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x40c], eax
mov eax, dword [ebp - 0x2fc]
mov dword [ebp - 0x64], eax
cmp dword [ebp - 0x64], 0
jne 0x1003067b
cmp dword [ebp - 0x6c], 0x24539cfd
jg 0x10030666
mov dword [ebp - 0xf8], 1
jmp 0x1003066d
and dword [ebp - 0xf8], 0
mov eax, dword [ebp - 0x1c0]
cmp dword [ebp - 0xf8], eax
jge 0x1003068d
cmp dword [ebp - 0x64], 0
je 0x1003068d
mov dword [ebp - 0x198], 1
jmp 0x10030694
and dword [ebp - 0x198], 0
mov eax, dword [ebp - 0x198]
mov dword [ebp - 0x1a0], eax
cmp dword [ebp - 0x1a0], 0xffffffff
je 0x100306c4
push 0
lea ecx, [ebp - 0x2b0]
call fcn.10025597
cmp dword [eax], 0
jne 0x100306c4
and dword [ebp - 0x1a8], 0
jmp 0x100306ce
mov dword [ebp - 0x1a8], 1
push 0
lea ecx, [ebp - 0x2b0]
call fcn.10025597
mov ecx, dword [ebp - 0x1a8]
cmp ecx, dword [eax]
jle 0x100306f1
mov dword [ebp - 0x1b0], 1
jmp 0x100306f8
and dword [ebp - 0x1b0], 0
mov eax, dword [ebp - 0x304]
cmp dword [ebp - 0x1b0], eax
jg 0x10030712
mov dword [ebp - 0x30c], 1
jmp 0x10030719
and dword [ebp - 0x30c], 0
mov eax, dword [ebp - 0x1b8]
cmp dword [ebp - 0x6c], eax
jle 0x10030730
mov dword [ebp - 0x1c8], 1
jmp 0x10030737
and dword [ebp - 0x1c8], 0
mov eax, dword [ebp - 0x1c0]
cmp dword [ebp - 0x1c8], eax
jne 0x10030751
mov dword [ebp - 0x1d0], 1
jmp 0x10030758
and dword [ebp - 0x1d0], 0
mov eax, dword [ebp - 0xc8]
inc eax
mov dword [ebp - 0xc8], eax
mov eax, dword [ebp - 0xc8]
cmp eax, dword [ebp - 0x1d0]
jge 0x1003077f
mov dword [ebp - 0x1d8], 1
jmp 0x10030786
and dword [ebp - 0x1d8], 0
push 0
lea ecx, [ebp - 0x2b0]
call fcn.10025597
mov ecx, dword [ebp - 0x1d8]
cmp ecx, dword [eax]
jg 0x100307a9
mov dword [ebp - 0x1e8], 1
jmp 0x100307b0
and dword [ebp - 0x1e8], 0
mov eax, dword [ebp - 0x1e0]
cmp dword [ebp - 0x1e8], eax
jle 0x100307ca
mov dword [ebp - 0x1f8], 1
jmp 0x100307d1
and dword [ebp - 0x1f8], 0
mov eax, dword [ebp - 0x314]
mov dword [ebp - 0x1f0], eax
mov eax, dword [ebp - 0x1c]
mov ecx, dword [ebp - 0x1f0]
mov dword [ebp + eax*4 - 0x3b0], ecx
mov eax, dword [ebp - 0x1f0]
cmp eax, dword [ebp - 0x1f8]
je 0x10030807
mov dword [ebp - 0x200], 1
jmp 0x1003080e
and dword [ebp - 0x200], 0
mov eax, dword [ebp - 0x200]
mov dword [ebp - 0x31c], eax
mov byte [ebp - 4], 7
lea ecx, [ebp - 0x2b0]
call fcn.1002557b
jmp 0x10030486
jmp 0x1003045e
mov byte [ebp - 4], 6
lea ecx, [ebp - 0x45c]
call fcn.1002557b
jmp 0x100303a8
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x3f0]
call fcn.1002557b
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x288]
call fcn.1002557b
mov eax, dword [ebp - 0xe8]
mov byte [eax], 0
jmp 0x10030bf0
jmp 0x1002f49d
mov dword [ebp - 0x28], 0xfffffffb
push 3
lea ecx, [ebp - 0x2a4]
call fcn.100254f9
mov dword [ebp - 4], 9
mov dword [ebp - 0x220], 0x5a60915b
mov dword [ebp - 0x324], 0x2714
lea eax, [ebp - 0x2a4]
push eax
lea eax, [ebp - 0x460]
push eax
push 0
call fcn.10028cb5
add esp, 0xc
mov dword [ebp - 0x28], 0
jmp 0x100308cf
mov eax, dword [ebp - 0x28]
inc eax
mov dword [ebp - 0x28], eax
cmp dword [ebp - 0x28], 0x13
jg 0x10030bd8
mov dword [ebp - 0x24], 8
mov dword [ebp - 0x74], 0xce02
mov dword [ebp - 0xe0], 0xe5c48968
mov dword [ebp - 0x32c], 0xfffffffe
mov dword [ebp - 0x24], 0
jmp 0x1003090b
mov eax, dword [ebp - 0x24]
inc eax
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 2
jg 0x10030bb8
mov dword [ebp - 0x248], 0x1b713623
mov dword [ebp - 0x228], 0xf2f34e40
mov eax, dword [ebp - 0x28]
mov dword [ebp - 0x414], eax
xor eax, eax
jne 0x10030948
cmp dword [ebp - 0x248], 0
jne 0x10030948
and dword [ebp - 0x208], 0
jmp 0x10030952
mov dword [ebp - 0x208], 1
mov eax, dword [ebp - 0x74]
cmp eax, dword [ebp - 0x208]
jne 0x1003096c
cmp dword [ebp - 0x74], 0
jne 0x1003096c
and dword [ebp - 0x210], 0
jmp 0x10030976
mov dword [ebp - 0x210], 1
push 0
lea ecx, [ebp - 0x2a4]
call fcn.10025597
mov ecx, dword [ebp - 0x210]
sub ecx, dword [eax]
inc ecx
cmp ecx, dword [ebp - 0x28]
jne 0x1003099d
mov dword [ebp - 0x218], 1
jmp 0x100309a4
and dword [ebp - 0x218], 0
mov eax, dword [ebp - 0x218]
mov dword [ebp - 0x220], eax
mov eax, dword [ebp - 0x220]
add eax, dword [ebp - 0x74]
mov dword [ebp - 0x228], eax
mov esi, dword [ebp - 0x228]
push dword [ebp - 0x24]
lea ecx, [ebp - 0x2a4]
call fcn.10025597
cmp dword [eax], esi
jl 0x100309e3
mov dword [ebp - 0x230], 1
jmp 0x100309ea
and dword [ebp - 0x230], 0
mov eax, dword [ebp - 0x74]
add eax, dword [ebp - 0x230]
cmp eax, dword [ebp - 0x24]
jle 0x10030a04
mov dword [ebp - 0x238], 1
jmp 0x10030a0b
and dword [ebp - 0x238], 0
mov eax, dword [ebp - 0x324]
cmp dword [ebp - 0x238], eax
jge 0x10030a25
mov dword [ebp - 0x240], 1
jmp 0x10030a2c
and dword [ebp - 0x240], 0
cmp dword [ebp - 0x240], 0x22b6
jne 0x10030a44
mov dword [ebp - 0x250], 1
jmp 0x10030a4b
and dword [ebp - 0x250], 0
mov eax, dword [ebp - 0x248]
cmp dword [ebp - 0x250], eax
jle 0x10030a7a
mov byte [ebp - 0x31], 0
push 0x4edf
push 0
push 0x4f8a
lea eax, [ebp - 0x31]
push eax
call fcn.10028790
add esp, 0x10
jmp 0x10030b8d
mov dword [ebp - 0xd0], 0xf6d1
mov dword [ebp - 0xd8], 0xc73f5cfe
cmp dword [ebp - 0xd0], 0
jne 0x10030add
cmp dword [ebp - 0xd0], 0
jne 0x10030add
cmp dword [ebp - 0x24], 0
je 0x10030ab8
cmp dword [ebp - 0x28], 0
je 0x10030ab8
mov dword [ebp - 0x258], 1
jmp 0x10030abf
and dword [ebp - 0x258], 0
mov eax, dword [ebp - 0x258]
mov dword [ebp - 0xd8], eax
cmp dword [ebp - 0xd8], 0
jne 0x10030add
and dword [ebp - 0x260], 0
jmp 0x10030ae7
mov dword [ebp - 0x260], 1
cmp dword [ebp - 0x260], 0xfffffff6
jge 0x10030afc
mov dword [ebp - 0x268], 1
jmp 0x10030b03
and dword [ebp - 0x268], 0
push dword [ebp - 0x24]
lea ecx, [ebp - 0x2a4]
call fcn.10025597
mov ecx, dword [ebp - 0x268]
cmp ecx, dword [eax]
jg 0x10030b27
mov dword [ebp - 0xfc], 1
jmp 0x10030b2e
and dword [ebp - 0xfc], 0
imul eax, dword [ebp - 0xfc], 7
test eax, eax
je 0x10030b53
push 0
lea eax, [ebp - 0xd0]
push eax
lea eax, [ebp - 0xe0]
push eax
call fcn.100280f9
add esp, 0xc
jmp 0x10030b8d
push 0
lea eax, [ebp - 0x24]
push eax
lea eax, [ebp - 0xe0]
push eax
lea eax, [ebp - 0x28]
push eax
lea eax, [ebp - 0x2a4]
push eax
lea eax, [ebp - 0xd8]
push eax
push 0x5560
call fcn.100286f9
add esp, 0x1c
cmp dword [ebp - 0x32c], 0
je 0x10030b8d
jmp 0x10030904
mov byte [ebp - 0x39], 0
push 0x1829
push 0x7a0b
lea eax, [ebp - 0x39]
push eax
push 0x30cf
push 0x43e0
push 0
call fcn.1004cccc
add esp, 0x18
jmp 0x10030904
lea eax, [ebp - 0xe0]
push eax
push 0x75c0
push 0
push 0x6ea
call fcn.10028dd6
add esp, 0x10
jmp 0x100308c8
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x2a4]
call fcn.1002557b
mov eax, dword [ebp - 0xe8]
mov byte [eax], 1
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop esi
mov esp, ebp
pop ebp
ret