Function at 0x1002dd38
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x1008ebf6
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0xb74
push esi
push 3
lea ecx, [ebp - 0x984]
call fcn.1001a25e
and dword [ebp - 4], 0
mov dword [ebp - 0x6e4], 0x23b6182e
mov dword [ebp - 0x1a0], 0
jmp 0x1002dd8b
mov eax, dword [ebp - 0x1a0]
inc eax
mov dword [ebp - 0x1a0], eax
cmp dword [ebp - 0x1a0], 3
jge 0x1002ddaa
push dword [ebp - 0x1a0]
lea ecx, [ebp - 0x984]
call fcn.1001a2cf
and dword [eax], 0
jmp 0x1002dd7e
lea eax, [ebp - 0x984]
push eax
lea eax, [ebp - 0x6e4]
push eax
push 1
call fcn.1002c4ba
add esp, 0xc
mov byte [ebp - 0x7c], 0
movzx eax, byte [ebp - 0x7c]
test eax, eax
je 0x1002dde7
push 0
push 0x1ea2
push 0x4d19
push 0x30a8
call fcn.10034d54
add esp, 0x10
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x984]
call fcn.1001a2ca
push 4
lea ecx, [ebp - 0x918]
call fcn.1001a25e
mov dword [ebp - 4], 1
mov dword [ebp - 0x72c], 0xdf251d69
mov dword [ebp - 0x604], 5
mov dword [ebp - 0x7a8], 1
mov dword [ebp - 0x7b8], 0x629aa810
mov dword [ebp - 0x7a0], 0x283066c9
mov dword [ebp - 0x634], 0xffffffff
mov dword [ebp - 0x670], 0xfffffffc
mov dword [ebp - 0x724], 0xffffffff
mov dword [ebp - 0xa2c], 0xffffffff
mov dword [ebp - 0xa0c], 0xd3335637
mov dword [ebp - 0xac8], 0
mov dword [ebp - 0x364], 0xfffc
mov dword [ebp - 0x60c], 0xeb94
mov dword [ebp - 0x734], 0x8323
mov dword [ebp - 0x14], 0
jmp 0x1002dea6
mov eax, dword [ebp - 0x14]
inc eax
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 4
jge 0x1002debf
push dword [ebp - 0x14]
lea ecx, [ebp - 0x918]
call fcn.1001a2cf
and dword [eax], 0
jmp 0x1002de9f
mov dword [ebp - 0x14], 0
jmp 0x1002decf
mov eax, dword [ebp - 0x14]
inc eax
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 1
jge 0x1002dee5
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x7b0], 9
jmp 0x1002dec8
mov dword [ebp - 0x14], 0
jmp 0x1002def5
mov eax, dword [ebp - 0x14]
inc eax
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 2
jge 0x1002df0b
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x8a0], 0xb000cd9d
jmp 0x1002deee
mov dword [ebp - 0x14], 0
jmp 0x1002df1b
mov eax, dword [ebp - 0x14]
inc eax
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 3
jge 0x1002df31
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0xa94], 0xfffffff6
jmp 0x1002df14
mov eax, dword [ebp - 0x364]
dec eax
mov dword [ebp - 0x364], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xa94]
mov dword [ebp - 0xa14], eax
mov dword [ebp - 0x604], 0x644bb323
mov eax, dword [ebp - 0x604]
mov dword [ebp - 0x60c], eax
mov eax, dword [ebp - 0x60c]
mov dword [ebp - 0x724], eax
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x8a0]
mov dword [ebp - 0xa3c], eax
push 0
lea ecx, [ebp - 0x918]
call fcn.1001a2cf
cmp dword [eax], 0xbab0
jne 0x1002dfa7
mov dword [ebp - 0x614], 1
jmp 0x1002dfae
and dword [ebp - 0x614], 0
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x614]
add ecx, dword [ebp + eax - 0xa94]
mov dword [ebp - 0x61c], ecx
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x61c]
mov dword [ebp + eax - 0x8a0], ecx
mov eax, dword [ebp - 0x72c]
cmp eax, dword [ebp - 0x61c]
jge 0x1002dffa
cmp dword [ebp - 0x734], 0
jne 0x1002dffa
and dword [ebp - 0x624], 0
jmp 0x1002e004
mov dword [ebp - 0x624], 1
mov eax, dword [ebp - 0x7a0]
cmp dword [ebp - 0x624], eax
je 0x1002e01e
mov dword [ebp - 0x62c], 1
jmp 0x1002e025
and dword [ebp - 0x62c], 0
mov eax, dword [ebp - 0x634]
cmp dword [ebp - 0x62c], eax
jl 0x1002e045
cmp dword [ebp - 0x634], 0
jne 0x1002e045
and dword [ebp - 0x63c], 0
jmp 0x1002e04f
mov dword [ebp - 0x63c], 1
mov eax, dword [ebp - 0x63c]
neg eax
mov dword [ebp - 0x7a8], eax
mov dword [ebp - 0x670], 0x8f1edd1e
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x7b0]
cmp dword [ebp - 0x670], eax
jg 0x1002e088
mov dword [ebp - 0x65c], 1
jmp 0x1002e08f
and dword [ebp - 0x65c], 0
mov eax, dword [ebp - 0x65c]
mov dword [ebp - 0x7b8], eax
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x918]
call fcn.1001a2ca
mov eax, dword [0x11f06044]
and eax, 1
jne 0x1002e0e1
mov eax, dword [0x11f06044]
or eax, 1
mov dword [0x11f06044], eax
mov dword [ebp - 4], 2
mov ecx, 0x11f05fdc
call fcn.1001a3df
push 0x1009145e
call fcn.10075386
pop ecx
or dword [ebp - 4], 0xffffffff
push 2
lea ecx, [ebp - 0x2ec]
call fcn.1001a25e
mov dword [ebp - 4], 3
mov dword [ebp - 0x2b4], 0xaf8716b5
push 3
lea ecx, [ebp - 0x924]
call fcn.1001a25e
mov byte [ebp - 4], 4
mov dword [ebp - 0x3c], 0
jmp 0x1002e120
mov eax, dword [ebp - 0x3c]
inc eax
mov dword [ebp - 0x3c], eax
cmp dword [ebp - 0x3c], 2
jge 0x1002e13c
push dword [ebp - 0x3c]
lea ecx, [ebp - 0x2ec]
call fcn.1001a2cf
mov dword [eax], 0xfffffffb
jmp 0x1002e119
lea eax, [ebp - 0x3c]
push eax
push 0x3765
push 0x28c
push 0x398c
push 0x4f81
lea eax, [ebp - 0x924]
push eax
push 0
push 0x2a46
call fcn.1002c5d4
add esp, 0x20
mov dword [ebp - 0x3c], 0
jmp 0x1002e17a
mov eax, dword [ebp - 0x3c]
inc eax
mov dword [ebp - 0x3c], eax
cmp dword [ebp - 0x3c], 2
jge 0x1002e190
mov eax, dword [ebp - 0x3c]
mov dword [ebp + eax*4 - 0xa28], 0xffffffff
jmp 0x1002e173
push 0
lea ecx, [ebp - 0x2ec]
call fcn.1001a2cf
push 0
lea ecx, [ebp - 0x2ec]
call fcn.1001a2cf
mov esi, dword [eax]
sub esi, 0x5158018d
push 1
lea ecx, [ebp - 0x2ec]
call fcn.1001a2cf
cmp esi, dword [eax]
jne 0x1002e1de
push 0
lea ecx, [ebp - 0x2ec]
call fcn.1001a2cf
cmp dword [eax], 0
jne 0x1002e1de
and dword [ebp - 0x4d0], 0
jmp 0x1002e1e8
mov dword [ebp - 0x4d0], 1
push 0
lea ecx, [ebp - 0x2ec]
call fcn.1001a2cf
mov ecx, dword [ebp - 0x4d0]
sub ecx, dword [eax]
sub ecx, 0x74ed
imul ecx, dword [ebp - 0x2b4]
test ecx, ecx
jne 0x1002e21a
mov dword [ebp - 0x7c0], 1
jmp 0x1002e221
and dword [ebp - 0x7c0], 0
push 1
lea ecx, [ebp - 0x924]
call fcn.1001a2cf
or dword [eax], 0xffffffff
push 0
lea ecx, [ebp - 0x2ec]
call fcn.1001a2cf
mov eax, dword [eax]
inc eax
inc eax
cmp eax, 0xffffffff
jl 0x1002e253
mov dword [ebp - 0x5e4], 1
jmp 0x1002e25a
and dword [ebp - 0x5e4], 0
mov eax, dword [ebp - 0x2b4]
cmp dword [ebp - 0x5e4], eax
jge 0x1002e274
mov dword [ebp - 0x2fc], 1
jmp 0x1002e27b
and dword [ebp - 0x2fc], 0
mov eax, dword [ebp - 0x2b4]
cmp dword [ebp - 0x2fc], eax
jg 0x1002e295
mov dword [ebp - 0x5ec], 1
jmp 0x1002e29c
and dword [ebp - 0x5ec], 0
cmp dword [ebp - 0x5ec], 0x2151
jl 0x1002e2b4
mov dword [ebp - 0x7c8], 1
jmp 0x1002e2bb
and dword [ebp - 0x7c8], 0
push 0
lea ecx, [ebp - 0x2ec]
call fcn.1001a2cf
push 4
pop eax
shl eax, 0
mov dword [ebp + eax - 0xa28], 0
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x924]
call fcn.1001a2ca
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x2ec]
call fcn.1001a2ca
push dword [ebp + 8]
lea ecx, [ebp - 0x9b4]
call fcn.1001a013
mov dword [ebp - 4], 5
mov dword [ebp - 0x154], 0xd6c05baf
mov dword [ebp - 0x304], 0x4c8d3c89
mov dword [ebp - 0x7d8], 0xffffffff
mov byte [ebp - 0x7e], 0
push 0x1a33
push 0x5795
push 0x3297
push 0
lea eax, [ebp - 0x7e]
push eax
call fcn.10034f7c
add esp, 0x14
mov dword [ebp - 0x154], 0
jmp 0x1002e364
mov eax, dword [ebp - 0x154]
inc eax
mov dword [ebp - 0x154], eax
cmp dword [ebp - 0x154], 0x15
jg 0x1002e396
mov dword [ebp - 0x7d0], 1
mov dword [ebp - 0x304], 0x8c66
mov eax, dword [ebp - 0x304]
imul eax, dword [ebp - 0x7d0]
mov dword [ebp - 0x7d8], eax
jmp 0x1002e357
lea eax, [ebp - 0xa1c]
push eax
lea ecx, [ebp - 0x9b4]
call fcn.1001a852
push dword [eax]
lea eax, [ebp - 0xa40]
push eax
lea ecx, [ebp - 0x9b4]
call fcn.1001a866
push dword [eax]
lea eax, [ebp - 0xa44]
push eax
lea ecx, [ebp - 0x9b4]
call fcn.1001a852
push dword [eax]
mov edx, 0x1002a677
lea ecx, [ebp - 0xae0]
call fcn.10035574
add esp, 0xc
mov dword [ebp - 0xc8], 0x20452a26
mov dword [ebp - 0x15c], 9
mov dword [ebp - 0x2e0], 0x3bfa32a1
mov dword [ebp - 0x880], 0x4a87fce6
mov dword [ebp - 0x87c], 0x4a87fce6
mov dword [ebp - 0x878], 0x4a87fce6
mov dword [ebp - 0x874], 0x4a87fce6
mov dword [ebp - 0x7e0], 0x3f29c8dd
mov dword [ebp - 0x4e8], 7
mov dword [ebp - 0x19c], 0
jmp 0x1002e458
mov eax, dword [ebp - 0x19c]
inc eax
mov dword [ebp - 0x19c], eax
cmp dword [ebp - 0x19c], 1
jge 0x1002e474
mov eax, dword [ebp - 0x19c]
mov dword [ebp + eax*4 - 0xe0], 0xffffffff
jmp 0x1002e44b
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xe0]
mov dword [ebp - 0xc8], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xe0]
sub eax, dword [ebp - 0xc8]
push 4
pop ecx
imul ecx, ecx, 0
cmp dword [ebp + ecx - 0xe0], eax
jge 0x1002e4d0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xe0]
cmp dword [ebp - 0xc8], eax
jge 0x1002e4d0
cmp dword [ebp - 0x15c], 0
jne 0x1002e4d0
and dword [ebp - 0x5f4], 0
jmp 0x1002e4da
mov dword [ebp - 0x5f4], 1
mov eax, dword [ebp - 0x5f4]
mov dword [ebp - 0x2e0], eax
mov eax, dword [ebp - 0x15c]
cmp dword [ebp - 0x2e0], eax
jl 0x1002e502
or eax, 0xffffffff
jne 0x1002e502
and dword [ebp - 0x5fc], 0
jmp 0x1002e50c
mov dword [ebp - 0x5fc], 1
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xe0]
imul eax, dword [ebp - 0x5fc]
test eax, eax
je 0x1002e52d
cmp dword [ebp - 0xc8], 0
jne 0x1002e53f
cmp dword [ebp - 0x15c], 0
jne 0x1002e53f
and dword [ebp - 0x310], 0
jmp 0x1002e549
mov dword [ebp - 0x310], 1
cmp dword [ebp - 0x310], 0xa4c
jg 0x1002e561
mov dword [ebp - 0x644], 1
jmp 0x1002e568
and dword [ebp - 0x644], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x644]
mov dword [ebp + eax - 0x880], ecx
mov eax, dword [ebp - 0x7e0]
mov ecx, dword [ebp - 0x2e0]
push 4
pop edx
shl edx, 1
sub ecx, dword [ebp + edx - 0x880]
add eax, ecx
je 0x1002e5bc
mov byte [ebp - 0x99], 0
movzx eax, byte [ebp - 0x99]
test eax, eax
je 0x1002e5b7
push 0
push 0x2383
call fcn.10034dec
pop ecx
pop ecx
jmp 0x1002e73f
mov dword [ebp - 0xd0], 0
cmp dword [ebp - 0xc8], 0
jne 0x1002e5db
mov dword [ebp - 0x5b8], 1
jmp 0x1002e5e2
and dword [ebp - 0x5b8], 0
mov eax, dword [ebp - 0xc8]
inc eax
cmp eax, dword [ebp - 0xd0]
jge 0x1002e5fd
mov dword [ebp - 0x318], 1
jmp 0x1002e604
and dword [ebp - 0x318], 0
cmp dword [ebp - 0x318], 0xa687e91c
jb 0x1002e61c
mov dword [ebp - 0x4d8], 1
jmp 0x1002e623
and dword [ebp - 0x4d8], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xe0]
sub eax, dword [ebp - 0x4d8]
cmp eax, dword [ebp - 0xd0]
jg 0x1002e64a
mov dword [ebp - 0x320], 1
jmp 0x1002e651
and dword [ebp - 0x320], 0
cmp dword [ebp - 0x320], 0xebe1552b
jae 0x1002e669
mov dword [ebp - 0x7e8], 1
jmp 0x1002e670
and dword [ebp - 0x7e8], 0
mov eax, dword [ebp - 0x15c]
mov dword [ebp - 0xa50], eax
mov eax, dword [ebp - 0xd0]
cmp dword [ebp - 0x5b8], eax
jle 0x1002e696
mov dword [ebp - 0x328], 1
jmp 0x1002e69d
and dword [ebp - 0x328], 0
mov eax, dword [ebp - 0xd0]
cmp dword [ebp - 0x328], eax
jle 0x1002e6b7
mov dword [ebp - 0x4e0], 1
jmp 0x1002e6be
and dword [ebp - 0x4e0], 0
mov eax, dword [ebp - 0xd0]
cmp dword [ebp - 0x4e0], eax
jg 0x1002e6d8
mov dword [ebp - 0x330], 1
jmp 0x1002e6df
and dword [ebp - 0x330], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x880]
add eax, dword [ebp - 0x330]
cmp eax, dword [ebp - 0xd0]
je 0x1002e706
mov dword [ebp - 0x628], 1
jmp 0x1002e70d
and dword [ebp - 0x628], 0
cmp dword [ebp - 0x628], 0xfffffffc
jne 0x1002e722
mov dword [ebp - 0x338], 1
jmp 0x1002e729
and dword [ebp - 0x338], 0
mov eax, dword [ebp - 0x338]
mov dword [ebp - 0x4e8], eax
mov dword [ebp - 0x4e8], 0xb1d70f3f
lea ecx, [ebp - 0x9b4]
call fcn.1002a602
mov dword [ebp - 0x594], eax
push 2
lea ecx, [ebp - 0x28c]
call fcn.1001a25e
mov byte [ebp - 4], 6
mov dword [ebp - 0xf0], 9
mov dword [ebp - 0x48], 0
jmp 0x1002e77b
mov eax, dword [ebp - 0x48]
inc eax
mov dword [ebp - 0x48], eax
cmp dword [ebp - 0x48], 2
jge 0x1002e791
mov eax, dword [ebp - 0x48]
mov dword [ebp + eax*4 - 0x1e4], 0x3342eb9
jmp 0x1002e774
mov dword [ebp - 0x48], 0
jmp 0x1002e7a1
mov eax, dword [ebp - 0x48]
inc eax
mov dword [ebp - 0x48], eax
cmp dword [ebp - 0x48], 2
jge 0x1002e7bd
push dword [ebp - 0x48]
lea ecx, [ebp - 0x28c]
call fcn.1001a2cf
mov dword [eax], 0xfffffffa
jmp 0x1002e79a
push 1
lea ecx, [ebp - 0x28c]
call fcn.1001a2cf
mov dword [eax], 1
jmp 0x1002e7f6
push 1
lea ecx, [ebp - 0x28c]
call fcn.1001a2cf
mov dword [ebp - 0x340], eax
mov eax, dword [ebp - 0x340]
mov eax, dword [eax]
dec eax
mov ecx, dword [ebp - 0x340]
mov dword [ecx], eax
push 1
lea ecx, [ebp - 0x28c]
call fcn.1001a2cf
cmp dword [eax], 0
jl 0x1002eaf3
mov dword [ebp - 0x34], 0xffffffff
mov dword [ebp - 0x5c], 0xb0b4ef66
mov dword [ebp - 0x34], 0
jmp 0x1002e82a
mov eax, dword [ebp - 0x34]
inc eax
mov dword [ebp - 0x34], eax
cmp dword [ebp - 0x34], 1
jg 0x1002e95c
mov eax, dword [ebp - 0x34]
cmp dword [ebp + eax*4 - 0x1e4], 0
je 0x1002e90a
push 1
lea ecx, [ebp - 0x28c]
call fcn.1001a2cf
mov eax, dword [eax]
mov eax, dword [ebp + eax*4 - 0x1e4]
mov dword [ebp - 0xaa8], eax
push 1
lea ecx, [ebp - 0x28c]
call fcn.1001a2cf
mov eax, dword [eax]
cmp dword [ebp + eax*4 - 0x1e4], 0xc218
jle 0x1002e889
mov dword [ebp - 0x5c0], 1
jmp 0x1002e890
and dword [ebp - 0x5c0], 0
mov eax, dword [ebp - 0x5c0]
mov dword [ebp - 0x5c], eax
cmp dword [ebp - 0x5c], 0xfffffffd
jg 0x1002e8ab
mov dword [ebp - 0x348], 1
jmp 0x1002e8b2
and dword [ebp - 0x348], 0
cmp dword [ebp - 0x348], 0x8558
jne 0x1002e8ca
mov dword [ebp - 0x4f0], 1
jmp 0x1002e8d1
and dword [ebp - 0x4f0], 0
cmp dword [ebp - 0x4f0], 0x331c587c
jne 0x1002e8e9
mov dword [ebp - 0x350], 1
jmp 0x1002e8f0
and dword [ebp - 0x350], 0
mov eax, dword [ebp - 0x34]
imul eax, dword [ebp - 0x350]
test eax, eax
je 0x1002e90a
mov dword [ebp - 0x648], 1
jmp 0x1002e911
and dword [ebp - 0x648], 0
cmp dword [ebp - 0x648], 0xb89b
jle 0x1002e929
mov dword [ebp - 0x358], 1
jmp 0x1002e930
and dword [ebp - 0x358], 0
push 1
lea ecx, [ebp - 0x28c]
call fcn.1001a2cf
mov eax, dword [eax]
mov eax, dword [ebp + eax*4 - 0x1e4]
imul eax, dword [ebp - 0x358]
mov ecx, dword [ebp - 0x34]
mov dword [ebp + ecx*4 - 0x1e4], eax
jmp 0x1002e823
mov dword [ebp - 0x34], 1
jmp 0x1002e96c
mov eax, dword [ebp - 0x34]
dec eax
mov dword [ebp - 0x34], eax
cmp dword [ebp - 0x34], 0
jl 0x1002eaee
mov dword [ebp - 0x7f0], 0xf7c295a5
mov byte [ebp - 0x80], 0
movzx eax, byte [ebp - 0x80]
test eax, eax
je 0x1002e997
push 0x1e
push 0
call fcn.1002d428
pop ecx
pop ecx
mov dword [ebp - 0x5c], 1
jmp 0x1002e9a7
mov eax, dword [ebp - 0x5c]
dec eax
mov dword [ebp - 0x5c], eax
cmp dword [ebp - 0x5c], 0
jl 0x1002eae9
mov dword [ebp - 0x1c0], 0
mov dword [ebp - 0x98], 0xd44f
mov dword [ebp - 0x7f8], 0x41b0ce7a
mov dword [ebp - 0x1c0], 0
jmp 0x1002e9e8
mov eax, dword [ebp - 0x1c0]
inc eax
mov dword [ebp - 0x1c0], eax
cmp dword [ebp - 0x1c0], 1
jg 0x1002eae4
mov eax, dword [ebp - 0x5c]
mov eax, dword [ebp + eax*4 - 0x1e4]
mov dword [ebp - 0xa58], eax
cmp dword [ebp - 0x98], 0
je 0x1002ea15
cmp dword [ebp - 0x98], 0
mov eax, dword [ebp - 0x5c]
mov eax, dword [ebp + eax*4 - 0x1e4]
cmp dword [ebp - 0x98], eax
je 0x1002ea33
mov dword [ebp - 0x4f8], 1
jmp 0x1002ea3a
and dword [ebp - 0x4f8], 0
mov eax, dword [ebp - 0x5c]
mov eax, dword [ebp + eax*4 - 0x1e4]
cmp dword [ebp - 0x4f8], eax
jne 0x1002ea58
mov dword [ebp - 0x360], 1
jmp 0x1002ea5f
and dword [ebp - 0x360], 0
push 1
lea ecx, [ebp - 0x28c]
call fcn.1001a2cf
mov ecx, dword [ebp - 0x360]
cmp ecx, dword [eax]
jl 0x1002eabb
mov dword [ebp - 0x98], 0
jmp 0x1002ea8f
mov eax, dword [ebp - 0x98]
inc eax
mov dword [ebp - 0x98], eax
cmp dword [ebp - 0x98], 1
jg 0x1002eab9
mov esi, dword [ebp - 0x7f0]
sub esi, 4
push 1
lea ecx, [ebp - 0x28c]
call fcn.1001a2cf
mov eax, dword [eax]
mov dword [ebp + eax*4 - 0x1e4], esi
jmp 0x1002ea82
jmp 0x1002ead5
mov byte [ebp - 0x8e], 0
movzx eax, byte [ebp - 0x8e]
test eax, eax
je 0x1002ead5
push 1
call fcn.1002c52f
pop ecx
mov dword [ebp - 0x7f8], 0xa7221ebc
jmp 0x1002e9db
jmp 0x1002e9a0
jmp 0x1002e965
jmp 0x1002e7d2
mov dword [ebp - 0xf0], 1
jmp 0x1002eb0c
mov eax, dword [ebp - 0xf0]
dec eax
mov dword [ebp - 0xf0], eax
cmp dword [ebp - 0xf0], 0
jl 0x1002eb59
push dword [ebp - 0xf0]
lea ecx, [ebp - 0x28c]
call fcn.1001a2cf
cmp dword [eax], 5
jne 0x1002eb37
mov dword [ebp - 0x5c8], 1
jmp 0x1002eb3e
and dword [ebp - 0x5c8], 0
push dword [ebp - 0xf0]
lea ecx, [ebp - 0x28c]
call fcn.1001a2cf
mov ecx, dword [ebp - 0x5c8]
mov dword [eax], ecx
jmp 0x1002eaff
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x28c]
call fcn.1001a2ca
movzx eax, byte [0x11f05ee9]
test eax, eax
je 0x1002ef22
mov ecx, 0x11f05fdc
call fcn.10035255
movzx eax, al
test eax, eax
jne 0x1002ef22
mov dword [ebp - 0x800], 0x7571177e
mov dword [ebp - 0x860], 0x231fbf68
mov dword [ebp - 0x814], 8
mov dword [ebp - 0x85c], 0x3388a019
lea eax, [ebp - 0x800]
push eax
lea eax, [ebp - 0x860]
push eax
lea eax, [ebp - 0x85c]
push eax
lea eax, [ebp - 0x814]
push eax
push 0
call fcn.1002cb23
add esp, 0x14
lea eax, [ebp - 0x594]
push eax
lea eax, [ebp - 0x390]
push eax
mov ecx, 0x11f05fdc
call fcn.1001a3b7
mov dword [ebp - 0x740], 0xfffffff9
mov dword [ebp - 0x508], 0x93ee3274
mov dword [ebp - 0xad0], 0
mov dword [ebp - 0x6f0], 0xffffffff
push 1
lea ecx, [ebp - 0x99c]
call fcn.1001a25e
mov byte [ebp - 4], 7
mov dword [ebp - 0x2dc], 6
mov dword [ebp - 0x71c], 1
lea eax, [ebp - 0xa60]
push eax
push 0x372d
lea eax, [ebp - 0x99c]
push eax
push 0x7820
push 1
call fcn.1002c553
add esp, 0x14
push 0
lea ecx, [ebp - 0x99c]
call fcn.1001a2cf
cmp dword [eax], 1
jge 0x1002ec7f
mov dword [ebp - 0x368], 1
jmp 0x1002ec86
and dword [ebp - 0x368], 0
mov eax, dword [ebp - 0x2dc]
dec eax
mov dword [ebp - 0x2dc], eax
mov eax, dword [ebp - 0x2dc]
cmp eax, dword [ebp - 0x368]
jg 0x1002ecad
mov dword [ebp - 0x500], 1
jmp 0x1002ecb4
and dword [ebp - 0x500], 0
cmp dword [ebp - 0x500], 0xfffffffc
jbe 0x1002ecc9
mov dword [ebp - 0x370], 1
jmp 0x1002ecd0
and dword [ebp - 0x370], 0
mov eax, dword [ebp - 0x740]
cmp eax, dword [ebp - 0x370]
je 0x1002ecea
mov dword [ebp - 0x630], 1
jmp 0x1002ecf1
and dword [ebp - 0x630], 0
cmp dword [ebp - 0x630], 0
jge 0x1002ed06
mov dword [ebp - 0x378], 1
jmp 0x1002ed0d
and dword [ebp - 0x378], 0
mov eax, dword [ebp - 0x508]
add eax, dword [ebp - 0x378]
add eax, dword [ebp - 0x508]
mov dword [ebp - 0x71c], eax
lea eax, [ebp - 0x6f0]
push eax
push 0x40d4
push 0x173b
push 0
call fcn.1002d47c
add esp, 0x10
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x99c]
call fcn.1001a2ca
lea eax, [ebp - 0xab0]
push eax
mov ecx, 0x11f05fdc
call fcn.1001a3a9
push eax
lea ecx, [ebp - 0x390]
call fcn.1001a3cc
movzx eax, al
test eax, eax
je 0x1002ef22
mov dword [ebp - 0xd8], 0x43d837bc
mov dword [ebp - 0x748], 0xfffffffe
mov dword [ebp - 0x6f8], 0x9193c1de
mov dword [ebp - 0xa68], 0
mov dword [ebp - 0x164], 0
jmp 0x1002edb8
mov eax, dword [ebp - 0x164]
inc eax
mov dword [ebp - 0x164], eax
cmp dword [ebp - 0x164], 3
jge 0x1002edd4
mov eax, dword [ebp - 0x164]
mov dword [ebp + eax*4 - 0x90c], 0x624039b6
jmp 0x1002edab
mov byte [ebp - 0x82], 0
push 0
lea eax, [ebp - 0x82]
push eax
call fcn.1002c8c1
pop ecx
pop ecx
mov dword [ebp - 0xd8], 2
jmp 0x1002ee04
mov eax, dword [ebp - 0xd8]
dec eax
mov dword [ebp - 0xd8], eax
cmp dword [ebp - 0xd8], 0
jl 0x1002eef4
mov dword [ebp - 0xf8], 0xe1ca2961
mov dword [ebp - 0xf8], 2
jmp 0x1002ee34
mov eax, dword [ebp - 0xf8]
dec eax
mov dword [ebp - 0xf8], eax
cmp dword [ebp - 0xf8], 0
jl 0x1002ee51
mov eax, dword [ebp - 0xf8]
cmp dword [ebp + eax*4 - 0x90c], 0
je 0x1002ee4f
jmp 0x1002ee51
jmp 0x1002ee27
mov eax, dword [ebp - 0xd8]
cmp dword [ebp + eax*4 - 0x90c], 0x2f38d927
jl 0x1002ee70
mov dword [ebp - 0x380], 1
jmp 0x1002ee77
and dword [ebp - 0x380], 0
cmp dword [ebp - 0x380], 1
jne 0x1002ee9c
mov eax, dword [ebp - 0xd8]
cmp dword [ebp + eax*4 - 0x90c], 0
je 0x1002ee9c
mov dword [ebp - 0x5d0], 1
jmp 0x1002eea3
and dword [ebp - 0x5d0], 0
cmp dword [ebp - 0x5d0], 0xe3cf9575
ja 0x1002eebb
mov dword [ebp - 0x388], 1
jmp 0x1002eec2
and dword [ebp - 0x388], 0
mov eax, dword [ebp - 0x748]
cmp dword [ebp - 0x388], eax
jle 0x1002eedc
mov dword [ebp - 0x510], 1
jmp 0x1002eee3
and dword [ebp - 0x510], 0
mov eax, dword [ebp - 0x510]
mov dword [ebp - 0x6f8], eax
jmp 0x1002edf7
lea ecx, [ebp - 0x390]
call fcn.1003525e
mov eax, dword [eax + 4]
mov dword [ebp - 0x750], eax
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x9b4]
call fcn.1001a098
mov eax, dword [ebp - 0x750]
jmp 0x10033219
and dword [ebp - 0xc0], 0
mov dword [ebp - 0xc4], 0xffffffff
mov dword [ebp - 0x16c], 0x1fc80ae7
push 4
lea ecx, [ebp - 0x810]
call fcn.1001a25e
mov byte [ebp - 4], 8
mov dword [ebp - 0x130], 0x8d2ca8e1
push 2
lea ecx, [ebp - 0x954]
call fcn.1001a25e
mov byte [ebp - 4], 9
mov dword [ebp - 0xe8], 0
jmp 0x1002ef82
mov eax, dword [ebp - 0xe8]
inc eax
mov dword [ebp - 0xe8], eax
cmp dword [ebp - 0xe8], 1
jge 0x1002ef9e
mov eax, dword [ebp - 0xe8]
mov dword [ebp + eax*4 - 0x1c4], 0x32384b6d
jmp 0x1002ef75
push 0
lea eax, [ebp - 0x810]
push eax
lea eax, [ebp - 0xe8]
push eax
call fcn.1002dcbe
add esp, 0xc
push 0x6129
lea eax, [ebp - 0x954]
push eax
push 0x5483
lea eax, [ebp - 0xe8]
push eax
push 0
call fcn.1002ce13
add esp, 0x14
mov dword [ebp - 0xc4], 0xffffffea
jmp 0x1002eff1
mov eax, dword [ebp - 0xc4]
inc eax
mov dword [ebp - 0xc4], eax
cmp dword [ebp - 0xc4], 0x1a
jge 0x1002f1b3
mov dword [ebp - 0x758], 0xf0a290be
mov dword [ebp - 0x5d8], 0xa22e974a
mov dword [ebp - 0x700], 0x889e
mov dword [ebp - 0xaf0], 0x94ad8a0f
mov dword [ebp - 0x708], 4
mov dword [ebp - 0x1a4], 0
jmp 0x1002f049
mov eax, dword [ebp - 0x1a4]
inc eax
mov dword [ebp - 0x1a4], eax
cmp dword [ebp - 0x1a4], 2
jge 0x1002f065
mov eax, dword [ebp - 0x1a4]
mov dword [ebp + eax*4 - 0xa4c], 0x94fb389f
jmp 0x1002f03c
push 0x2c4a
lea eax, [ebp - 0x5d8]
push eax
lea eax, [ebp - 0xc4]
push eax
lea eax, [ebp - 0x700]
push eax
lea eax, [ebp - 0x16c]
push eax
push 0x2f95
push 1
lea eax, [ebp - 0x758]
push eax
call fcn.1002c5d4
add esp, 0x20
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x1c4]
mov dword [ebp - 0x650], eax
push 3
lea ecx, [ebp - 0x810]
call fcn.1001a2cf
mov ecx, dword [ebp - 0x650]
mov dword [eax], ecx
cmp dword [ebp - 0x650], 0
je 0x1002f0eb
push 3
lea ecx, [ebp - 0x810]
call fcn.1001a2cf
cmp dword [eax], 0
je 0x1002f0eb
mov dword [ebp - 0x398], 1
jmp 0x1002f0f2
and dword [ebp - 0x398], 0
imul eax, dword [ebp - 0x398], 0
cmp dword [ebp - 0x16c], eax
jne 0x1002f10d
mov dword [ebp - 0x518], 1
jmp 0x1002f114
and dword [ebp - 0x518], 0
mov eax, dword [ebp - 0x518]
mov dword [ebp - 0x16c], eax
cmp dword [ebp - 0x16c], 0
jne 0x1002f13e
cmp dword [ebp - 0x130], 0
jne 0x1002f13e
mov dword [ebp - 0x3a0], 1
jmp 0x1002f145
and dword [ebp - 0x3a0], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0xa4c]
cmp dword [ebp - 0x3a0], eax
je 0x1002f16c
cmp dword [ebp - 0x5d8], 0
jne 0x1002f16c
and dword [ebp - 0x3a8], 0
jmp 0x1002f176
mov dword [ebp - 0x3a8], 1
mov eax, dword [ebp - 0x3a8]
sub eax, dword [ebp - 0xc4]
add eax, dword [ebp - 0x708]
cmp eax, 0x59458d81
jle 0x1002f19b
mov dword [ebp - 0x520], 1
jmp 0x1002f1a2
and dword [ebp - 0x520], 0
mov eax, dword [ebp - 0x520]
mov dword [ebp - 0x130], eax
jmp 0x1002efe4
push 4
pop eax
imul eax, eax, 0
push 4
pop ecx
imul ecx, ecx, 0
mov ecx, dword [ebp + ecx - 0x1c4]
cmp dword [ebp + eax - 0x1c4], ecx
jle 0x1002f1db
mov dword [ebp - 0x3b8], 1
jmp 0x1002f1e2
and dword [ebp - 0x3b8], 0
cmp dword [ebp - 0x130], 0xb34d7aeb
ja 0x1002f1fa
mov dword [ebp - 0x2d0], 1
jmp 0x1002f201
and dword [ebp - 0x2d0], 0
push 2
lea ecx, [ebp - 0x810]
call fcn.1001a2cf
mov ecx, dword [ebp - 0x2d0]
mov dword [eax], ecx
push 4
pop eax
imul eax, eax, 0
mov esi, dword [ebp + eax - 0x1c4]
imul esi, dword [ebp - 0x2d0]
push 0
lea ecx, [ebp - 0x954]
call fcn.1001a2cf
cmp esi, dword [eax]
jg 0x1002f247
mov dword [ebp - 0x3b0], 1
jmp 0x1002f24e
and dword [ebp - 0x3b0], 0
mov eax, dword [ebp - 0x130]
cmp dword [ebp - 0x3b0], eax
jge 0x1002f268
mov dword [ebp - 0x638], 1
jmp 0x1002f26f
and dword [ebp - 0x638], 0
mov eax, dword [ebp - 0x638]
add eax, 6
cmp eax, 0xffffffff
jbe 0x1002f289
mov dword [ebp - 0x528], 1
jmp 0x1002f290
and dword [ebp - 0x528], 0
mov eax, dword [ebp - 0x3b8]
imul eax, dword [ebp - 0x528]
mov dword [ebp - 0x130], eax
mov byte [ebp - 4], 8
lea ecx, [ebp - 0x954]
call fcn.1001a2ca
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x810]
call fcn.1001a2ca
lea eax, [ebp - 0x9b4]
push eax
call fcn.1002b505
pop ecx
mov dword [ebp - 0xc0], eax
cmp dword [ebp - 0xc0], 0
jne 0x10032d67
mov dword [ebp - 0x38], 0xfffffffa
mov dword [ebp - 0x38], 0xfffffffa
jmp 0x1002f2f8
mov eax, dword [ebp - 0x38]
inc eax
mov dword [ebp - 0x38], eax
cmp dword [ebp - 0x38], 0x16
jne 0x1002f40b
mov dword [ebp - 0x174], 0x1d69f428
cmp dword [ebp - 0x38], 0
je 0x1002f317
jmp 0x1002f40b
mov dword [ebp - 0x174], 8
jmp 0x1002f330
mov eax, dword [ebp - 0x174]
dec eax
mov dword [ebp - 0x174], eax
cmp dword [ebp - 0x174], 0xffffffe7
jg 0x1002f406
mov dword [ebp - 0x17c], 0xfffffffc
mov dword [ebp - 0x1ac], 0
jmp 0x1002f360
mov eax, dword [ebp - 0x1ac]
inc eax
mov dword [ebp - 0x1ac], eax
cmp dword [ebp - 0x1ac], 2
jge 0x1002f37c
mov eax, dword [ebp - 0x1ac]
mov dword [ebp + eax*4 - 0xa34], 0xb03629aa
jmp 0x1002f353
mov dword [ebp - 0x17c], 1
jmp 0x1002f395
mov eax, dword [ebp - 0x17c]
dec eax
mov dword [ebp - 0x17c], eax
cmp dword [ebp - 0x17c], 0
jl 0x1002f401
mov dword [ebp - 0x110], 8
mov byte [ebp - 0xa9], 0
push 0x5d0a
push 0
push 0x2e96
lea eax, [ebp - 0xa9]
push eax
call fcn.1002c72b
add esp, 0x10
mov dword [ebp - 0x110], 0
jmp 0x1002f3e3
mov eax, dword [ebp - 0x110]
inc eax
mov dword [ebp - 0x110], eax
cmp dword [ebp - 0x110], 2
jge 0x1002f3ff
mov eax, dword [ebp - 0x110]
mov dword [ebp + eax*4 - 0xa34], 0xffffffff
jmp 0x1002f3d6
jmp 0x1002f388
jmp 0x1002f323
jmp 0x1002f2f1
cmp dword [ebp - 0x38], 1
je 0x1002f41d
mov dword [ebp - 0x3c0], 1
jmp 0x1002f424
and dword [ebp - 0x3c0], 0
mov eax, dword [ebp - 0x38]
cmp dword [ebp - 0x3c0], eax
jg 0x1002f447
cmp dword [ebp - 0x38], 0
je 0x1002f447
cmp dword [ebp - 0x38], 0
je 0x1002f447
mov dword [ebp - 0x5e0], 1
jmp 0x1002f44e
and dword [ebp - 0x5e0], 0
mov eax, dword [ebp - 0x5e0]
mov dword [ebp - 0x38], eax
cmp dword [0x11f05ef4], 0
jne 0x100329f2
mov dword [ebp - 0x128], 0xdf99ff60
mov dword [ebp - 0x1dc], 0
jmp 0x1002f487
mov eax, dword [ebp - 0x1dc]
inc eax
mov dword [ebp - 0x1dc], eax
cmp dword [ebp - 0x1dc], 4
jge 0x1002f4a3
mov eax, dword [ebp - 0x1dc]
mov dword [ebp + eax*4 - 0xb4c], 0xffffffff
jmp 0x1002f47a
mov dword [ebp - 0x128], 0xfffffff7
jmp 0x1002f4bc
mov eax, dword [ebp - 0x128]
inc eax
mov dword [ebp - 0x128], eax
cmp dword [ebp - 0x128], 0xd
jg 0x1002f524
mov dword [ebp - 0x760], 1
mov dword [ebp - 0x530], 0x1813f1a0
imul eax, dword [ebp - 0x760], 0xffff
test eax, eax
jne 0x1002f4f9
cmp dword [ebp - 0x128], 0
jne 0x1002f4f9
and dword [ebp - 0x3c8], 0
jmp 0x1002f503
mov dword [ebp - 0x3c8], 1
mov eax, dword [ebp - 0x3c8]
mov dword [ebp - 0x530], eax
push 4
pop eax
imul eax, eax, 3
mov ecx, dword [ebp - 0x530]
mov dword [ebp + eax - 0xb4c], ecx
jmp 0x1002f4af
mov dword [ebp - 0xa70], 0x3b4e
push 0
call fcn.1002caeb
pop ecx
mov byte [ebp - 0x84], 0
movzx eax, byte [ebp - 0x84]
test eax, eax
je 0x1002f550
push 0
call fcn.1002d390
pop ecx
mov dword [ebp - 0xcc], 0xa5d6c05b
mov dword [ebp - 0xcc], 0xfffffff9
jmp 0x1002f573
mov eax, dword [ebp - 0xcc]
dec eax
mov dword [ebp - 0xcc], eax
cmp dword [ebp - 0xcc], 0xffffffe2
jg 0x1002f65e
mov dword [ebp - 0x3d0], 3
mov dword [ebp - 0x768], 0x8aaf0a9b
mov dword [ebp - 0x184], 0
jmp 0x1002f5ad
mov eax, dword [ebp - 0x184]
inc eax
mov dword [ebp - 0x184], eax
cmp dword [ebp - 0x184], 3
jge 0x1002f5c9
mov eax, dword [ebp - 0x184]
mov dword [ebp + eax*4 - 0x88c], 0xfffffffc
jmp 0x1002f5a0
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0x88c], 0
jne 0x1002f625
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x88c]
mov dword [ebp - 0xab8], eax
mov dword [ebp - 0x3d0], 0xffffffff
mov eax, dword [ebp - 0x3d0]
mov dword [ebp - 0xa78], eax
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x88c]
mov dword [ebp - 0xad8], eax
mov eax, 0x2568
test eax, eax
jne 0x1002f625
and dword [ebp - 0x710], 0
jmp 0x1002f62f
mov dword [ebp - 0x710], 1
mov eax, dword [ebp - 0xcc]
mov dword [ebp - 0xa80], eax
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x88c]
mov dword [ebp - 0x9e8], eax
mov eax, dword [ebp - 0xcc]
mov dword [ebp - 0x768], eax
jmp 0x1002f566
mov byte [ebp - 0x278], 5
mov byte [ebp - 0x277], 0x35
mov byte [ebp - 0x276], 9
mov byte [ebp - 0x275], 8
mov byte [ebp - 0x274], 0xa
mov byte [ebp - 0x273], 8
mov byte [ebp - 0x272], 1
mov byte [ebp - 0x271], 9
mov byte [ebp - 0x270], 0xb
mov byte [ebp - 0x26f], 9
mov byte [ebp - 0x26e], 3
mov byte [ebp - 0x26d], 2
mov byte [ebp - 0x26c], 0x2a
mov byte [ebp - 0x26b], 0x61
mov byte [ebp - 0x26a], 0xf2
mov byte [ebp - 0x269], 0xe
mov byte [ebp - 0x268], 0x24
mov byte [ebp - 0x267], 0xdf
mov byte [ebp - 0x266], 0xcd
mov byte [ebp - 0x265], 0x10
mov byte [ebp - 0x264], 0x27
mov byte [ebp - 0x263], 0x91
mov byte [ebp - 0x262], 0x1a
mov byte [ebp - 0x261], 0xe5
mov byte [ebp - 0x260], 0x5c
mov byte [ebp - 0x25f], 0xfe
mov byte [ebp - 0x25e], 0x88
mov byte [ebp - 0x25d], 0x53
mov byte [ebp - 0x25c], 0xd0
mov byte [ebp - 0x25b], 0xca
mov byte [ebp - 0x25a], 0x1f
mov byte [ebp - 0x259], 0xc5
mov byte [ebp - 0x258], 0x6a
mov byte [ebp - 0x257], 0x65
mov byte [ebp - 0x256], 0x5a
mov byte [ebp - 0x255], 0x93
mov byte [ebp - 0x254], 0xd
mov byte [ebp - 0x253], 0x39
mov byte [ebp - 0x252], 0xe
mov byte [ebp - 0x251], 0x5d
mov byte [ebp - 0x250], 0x3e
mov byte [ebp - 0x24f], 0xc0
mov byte [ebp - 0x24e], 0x57
mov byte [ebp - 0x24d], 0xce
mov byte [ebp - 0x24c], 0xb0
mov byte [ebp - 0x24b], 0x7f
mov byte [ebp - 0x24a], 0x9b
mov byte [ebp - 0x249], 0x33
mov byte [ebp - 0x248], 0x58
mov byte [ebp - 0x247], 0xd3
mov byte [ebp - 0x246], 0xd5
mov byte [ebp - 0x245], 0x12
mov byte [ebp - 0x244], 0xe9
mov byte [ebp - 0x243], 0x83
mov byte [ebp - 0x242], 0xc5
mov byte [ebp - 0x241], 4
mov byte [ebp - 0x240], 0xb
mov byte [ebp - 0x23f], 0
mov byte [ebp - 0x23e], 0x2e
mov byte [ebp - 0x23d], 7
mov byte [ebp - 0x23c], 0x79
mov byte [ebp - 0x23b], 8
mov byte [ebp - 0x23a], 0x1c
mov byte [ebp - 0x239], 2
mov byte [ebp - 0x238], 0x5c
mov byte [ebp - 0x237], 6
mov byte [ebp - 0x236], 0x41
mov dword [ebp - 0x118], 0x75dc
mov dword [ebp - 0x144], 0x4bedcc59
push 1
lea ecx, [ebp - 0x67c]
call fcn.1001a25e
mov byte [ebp - 4], 0xa
lea eax, [ebp - 0x9f0]
push eax
push 1
lea eax, [ebp - 0x67c]
push eax
push 0x714
call fcn.1002c72b
add esp, 0x10
cmp dword [ebp - 0x118], 0
je 0x1002f88b
push 0
call fcn.1002d3fc
pop ecx
jmp 0x1002fa42
mov dword [ebp - 0xa0], 0xffffffff
push 1
lea eax, [ebp - 0x67c]
push eax
push 0x62f7
push 0x77bd
lea eax, [ebp - 0x144]
push eax
lea eax, [ebp - 0x118]
push eax
lea eax, [ebp - 0xa0]
push eax
call fcn.1002c7b4
add esp, 0x1c
cmp dword [ebp - 0xa0], 0
je 0x1002fa2f
mov eax, dword [ebp - 0x118]
mov dword [ebp - 0x9f8], eax
push 0
lea ecx, [ebp - 0x67c]
call fcn.1001a2cf
mov eax, dword [ebp - 0xa0]
cmp dword [ebp - 0xa0], eax
je 0x1002f905
mov dword [ebp - 0x658], 1
jmp 0x1002f90c
and dword [ebp - 0x658], 0
mov eax, dword [ebp - 0x144]
imul eax, dword [ebp - 0x658]
test eax, eax
jne 0x1002f92f
cmp dword [ebp - 0xa0], 0
jne 0x1002f92f
and dword [ebp - 0x718], 0
jmp 0x1002f939
mov dword [ebp - 0x718], 1
mov eax, dword [ebp - 0xa0]
mov dword [ebp - 0xa00], eax
mov eax, dword [ebp - 0x118]
mov dword [ebp - 0xa08], eax
push 0
lea ecx, [ebp - 0x67c]
call fcn.1001a2cf
cmp dword [eax], 0x3cfcb8f
jge 0x1002f972
mov dword [ebp - 0x3d8], 1
jmp 0x1002f979
and dword [ebp - 0x3d8], 0
push 0
lea ecx, [ebp - 0x67c]
call fcn.1001a2cf
mov ecx, dword [ebp - 0x3d8]
cmp ecx, dword [eax]
jle 0x1002f99c
mov dword [ebp - 0x538], 1
jmp 0x1002f9a3
and dword [ebp - 0x538], 0
mov eax, dword [ebp - 0x144]
cmp dword [ebp - 0x538], eax
jg 0x1002f9bd
mov dword [ebp - 0x3e0], 1
jmp 0x1002f9c4
and dword [ebp - 0x3e0], 0
cmp dword [ebp - 0x3e0], 0xffff
jae 0x1002f9dc
mov dword [ebp - 0x770], 1
jmp 0x1002f9e3
and dword [ebp - 0x770], 0
push 0
lea ecx, [ebp - 0x67c]
call fcn.1001a2cf
cmp dword [eax], 1
jne 0x1002fa01
mov dword [ebp - 0x5e8], 1
jmp 0x1002fa08
and dword [ebp - 0x5e8], 0
cmp dword [ebp - 0x5e8], 0
jne 0x1002fa23
cmp dword [ebp - 0x118], 0
jne 0x1002fa23
cmp dword [ebp - 0xa0], 0
je 0x1002fa2f
mov dword [ebp - 0x3e8], 1
jmp 0x1002fa36
and dword [ebp - 0x3e8], 0
mov eax, dword [ebp - 0x3e8]
mov dword [ebp - 0x144], eax
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x67c]
call fcn.1001a2ca
xor eax, eax
inc eax
shl eax, 0
movzx eax, byte [ebp + eax - 0x278]
or eax, 0x59
xor ecx, ecx
inc ecx
shl ecx, 0
movzx ecx, byte [ebp + ecx - 0x278]
and ecx, 0x59
sub eax, ecx
xor ecx, ecx
inc ecx
imul ecx, ecx, 0
movzx ecx, byte [ebp + ecx - 0x278]
mov word [ebp + ecx*2 - 0x9e0], ax
mov dword [ebp - 0xd4], 0
mov dword [ebp - 0x720], 0xfffffffd
mov dword [ebp - 0x1b4], 0x2466e9f0
mov dword [ebp - 0x2a4], 0xbf5f40e1
mov dword [ebp - 0x778], 0
mov byte [ebp - 0x90], 0
movzx eax, byte [ebp - 0x90]
test eax, eax
je 0x1002fadd
push 1
push 0x1263
call fcn.1002c8c1
pop ecx
pop ecx
mov eax, dword [ebp - 0xd4]
mov dword [ebp - 0xa10], eax
mov eax, dword [ebp - 0xd4]
mov dword [ebp - 0xd4], eax
cmp dword [ebp - 0xd4], 0x145ccb97
jge 0x1002fb0d
mov dword [ebp - 0x540], 1
jmp 0x1002fb14
and dword [ebp - 0x540], 0
mov eax, dword [ebp - 0xd4]
cmp dword [ebp - 0x540], eax
jg 0x1002fb2e
mov dword [ebp - 0x3f0], 1
jmp 0x1002fb35
and dword [ebp - 0x3f0], 0
imul eax, dword [ebp - 0x3f0], 0
cmp eax, 0x46c2
jle 0x1002fb4f
mov dword [ebp - 0x640], 1
jmp 0x1002fb56
and dword [ebp - 0x640], 0
mov eax, dword [ebp - 0xd4]
cmp dword [ebp - 0x640], eax
jne 0x1002fb70
mov dword [ebp - 0x3f8], 1
jmp 0x1002fb77
and dword [ebp - 0x3f8], 0
mov eax, dword [ebp - 0x3f8]
mov dword [ebp - 0x720], eax
cmp dword [ebp - 0x1b4], 0xfffffffe
jne 0x1002fb98
mov dword [ebp - 0x548], 1
jmp 0x1002fb9f
and dword [ebp - 0x548], 0
mov eax, dword [ebp - 0x1b4]
cmp dword [ebp - 0x548], eax
je 0x1002fbbf
mov eax, 0xe623
test eax, eax
jne 0x1002fbbf
and dword [ebp - 0x400], 0
jmp 0x1002fbc9
mov dword [ebp - 0x400], 1
mov eax, dword [ebp - 0x400]
mov dword [ebp - 0x1b4], eax
cmp dword [ebp - 0x1b4], 0xafb5d1cb
jae 0x1002fbed
mov dword [ebp - 0x5f0], 1
jmp 0x1002fbf4
and dword [ebp - 0x5f0], 0
mov eax, dword [ebp - 0x5f0]
sub eax, dword [ebp - 0x2a4]
cmp eax, 0xffffffff
jg 0x1002fc11
mov dword [ebp - 0x408], 1
jmp 0x1002fc18
and dword [ebp - 0x408], 0
mov eax, dword [ebp - 0x408]
mov dword [ebp - 0x2a4], eax
cmp dword [ebp - 0x2a4], 5
jge 0x1002fc39
mov dword [ebp - 0x550], 1
jmp 0x1002fc40
and dword [ebp - 0x550], 0
mov eax, dword [ebp - 0x550]
mov dword [ebp - 0x778], eax
mov dword [ebp - 0x28], 2
and dword [ebp - 0x1bc], 0
jmp 0x1002fc64
mov eax, dword [ebp - 0x28]
inc eax
inc eax
mov dword [ebp - 0x28], eax
cmp dword [ebp - 0x28], 0x43
jae 0x100303a3
mov dword [ebp - 0x780], 0xffff
mov dword [ebp - 0x730], 0xbf2121f9
mov dword [ebp - 0x410], 0x49aaed6b
mov dword [ebp - 0x788], 0x203bd652
mov dword [ebp - 0x728], 0x8531d14c
push 3
lea ecx, [ebp - 0x948]
call fcn.1001a25e
mov byte [ebp - 4], 0xb
push 0x45b7
lea eax, [ebp - 0x948]
push eax
push 1
lea eax, [ebp - 0x138]
push eax
call fcn.1002c90e
add esp, 0x10
mov dword [ebp - 0x138], 0
jmp 0x1002fce7
mov eax, dword [ebp - 0x138]
inc eax
mov dword [ebp - 0x138], eax
cmp dword [ebp - 0x138], 1
jge 0x1002fd03
mov eax, dword [ebp - 0x138]
mov dword [ebp + eax*4 - 0x738], 0xd7f19125
jmp 0x1002fcda
lea eax, [ebp - 0x948]
push eax
push 1
lea eax, [ebp - 0x410]
push eax
lea eax, [ebp - 0x728]
push eax
lea eax, [ebp - 0x780]
push eax
lea eax, [ebp - 0x730]
push eax
lea eax, [ebp - 0x788]
push eax
call fcn.1002c981
add esp, 0x1c
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x410]
mov dword [ebp + eax - 0x738], ecx
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x948]
call fcn.1001a2ca
xor eax, eax
inc eax
imul eax, eax, 0
movzx eax, byte [ebp + eax - 0x278]
lea eax, [eax + eax + 2]
cmp dword [ebp - 0x28], eax
jne 0x1003032d
push 2
lea ecx, [ebp - 0x960]
call fcn.1001a25e
mov byte [ebp - 4], 0xc
mov dword [ebp - 0x120], 0xdf1febae
mov dword [ebp - 0x10c], 0x1fbf6859
push 0x3b96
push 0x4991
push 0x61a
push 0
push 0x3b3b
push 0x455a
push 0x3dc8
lea eax, [ebp - 0x960]
push eax
lea eax, [ebp - 0xa18]
push eax
call fcn.1002db20
add esp, 0x24
mov dword [ebp - 0x120], 1
jmp 0x1002fde8
mov eax, dword [ebp - 0x120]
dec eax
mov dword [ebp - 0x120], eax
cmp dword [ebp - 0x120], 0
jl 0x1002fec4
mov dword [ebp - 0xfc], 6
mov dword [ebp - 0x790], 0xffffffff
mov dword [ebp - 0xfc], 0
jmp 0x1002fe22
mov eax, dword [ebp - 0xfc]
inc eax
mov dword [ebp - 0xfc], eax
cmp dword [ebp - 0xfc], 1
jg 0x1002febf
lea eax, [ebp - 0x10c]
push eax
lea eax, [ebp - 0x790]
push eax
lea eax, [ebp - 0x120]
push eax
push 0
lea eax, [ebp - 0xfc]
push eax
lea eax, [ebp - 0x960]
push eax
call fcn.1002d6d4
add esp, 0x18
mov dword [ebp - 0x10c], 0x11
jmp 0x1002fe75
mov eax, dword [ebp - 0x10c]
dec eax
mov dword [ebp - 0x10c], eax
cmp dword [ebp - 0x10c], 6
jne 0x1002feba
mov byte [ebp - 0x86], 0
movzx eax, byte [ebp - 0x86]
test eax, eax
je 0x1002fe9e
push 1
push 0x6ebc
call fcn.1002caa3
pop ecx
pop ecx
mov byte [ebp - 0xa1], 0
movzx eax, byte [ebp - 0xa1]
test eax, eax
je 0x1002feb8
push 1
call fcn.1002caeb
pop ecx
jmp 0x1002fe68
jmp 0x1002fe15
jmp 0x1002fddb
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x960]
call fcn.1001a2ca
mov eax, dword [ebp - 0x28]
movzx eax, byte [ebp + eax - 0x278]
inc eax
mov dword [ebp - 0x1bc], eax
mov eax, dword [ebp - 0x28]
movzx eax, byte [ebp + eax - 0x278]
mov ecx, dword [ebp - 0x28]
lea eax, [ecx + eax - 1]
mov dword [ebp - 0x28], eax
push 2
lea ecx, [ebp - 0x108]
call fcn.1001a25e
mov byte [ebp - 4], 0xd
mov dword [ebp - 0x234], 5
mov dword [ebp - 0x230], 5
mov dword [ebp - 0x22c], 5
mov dword [ebp - 0x228], 5
mov dword [ebp - 0x18c], 0
jmp 0x1002ff4c
mov eax, dword [ebp - 0x18c]
inc eax
mov dword [ebp - 0x18c], eax
cmp dword [ebp - 0x18c], 2
jge 0x1002ff6e
push dword [ebp - 0x18c]
lea ecx, [ebp - 0x108]
call fcn.1001a2cf
mov dword [eax], 0xfffffff7
jmp 0x1002ff3f
push 4
pop eax
shl eax, 1
mov dword [ebp + eax - 0x234], 0
jmp 0x1002ff99
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x234]
inc eax
push 4
pop ecx
shl ecx, 1
mov dword [ebp + ecx - 0x234], eax
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0x234], 1
jg 0x10030319
mov dword [ebp - 0x64], 0
push 4
pop eax
shl eax, 1
push dword [ebp + eax - 0x234]
lea ecx, [ebp - 0x108]
call fcn.1001a2cf
mov esi, eax
push 4
pop eax
shl eax, 1
push dword [ebp + eax - 0x234]
lea ecx, [ebp - 0x108]
call fcn.1001a2cf
mov ecx, dword [esi]
cmp ecx, dword [eax]
jle 0x10030081
push 4
pop eax
shl eax, 1
push dword [ebp + eax - 0x234]
lea ecx, [ebp - 0x108]
call fcn.1001a2cf
cmp dword [eax], 0x3535
jle 0x10030018
mov dword [ebp - 0x660], 1
jmp 0x1003001f
and dword [ebp - 0x660], 0
push 4
pop eax
shl eax, 1
push dword [ebp + eax - 0x234]
lea ecx, [ebp - 0x108]
call fcn.1001a2cf
mov ecx, dword [ebp - 0x660]
cmp ecx, dword [eax]
jg 0x1003004c
mov dword [ebp - 0x798], 1
jmp 0x10030053
and dword [ebp - 0x798], 0
push 4
pop eax
shl eax, 1
push dword [ebp + eax - 0x234]
lea ecx, [ebp - 0x108]
call fcn.1001a2cf
push 4
pop eax
shl eax, 1
push dword [ebp + eax - 0x234]
lea ecx, [ebp - 0x108]
call fcn.1001a2cf
push 4
pop eax
shl eax, 1
push dword [ebp + eax - 0x234]
lea ecx, [ebp - 0x108]
call fcn.1001a2cf
mov ecx, dword [ebp - 0x64]
imul ecx, dword [eax]
test ecx, ecx
je 0x100300c4
mov byte [ebp - 0x88], 0
lea eax, [ebp - 0x88]
push eax
push 0x71a0
push 0
call fcn.1002d68b
add esp, 0xc
jmp 0x10030314
mov dword [ebp - 0x418], 0x7d413053
mov dword [ebp - 0x560], 0xb739032f
mov dword [ebp - 0x744], 0x7a540f82
mov dword [ebp - 0x64], 1
jmp 0x100300f2
mov eax, dword [ebp - 0x64]
dec eax
mov dword [ebp - 0x64], eax
cmp dword [ebp - 0x64], 0
jl 0x10030314
mov dword [ebp - 0xdc], 0xc3825062
mov dword [ebp - 0xdc], 0
jmp 0x1003011f
mov eax, dword [ebp - 0xdc]
inc eax
mov dword [ebp - 0xdc], eax
cmp dword [ebp - 0xdc], 1
jg 0x100301c3
mov dword [ebp - 0x114], 1
mov dword [ebp - 0x114], 0
jmp 0x1003014f
mov eax, dword [ebp - 0x114]
inc eax
mov dword [ebp - 0x114], eax
cmp dword [ebp - 0x114], 1
jg 0x1003019c
mov byte [ebp - 0x76], 0
movzx eax, byte [ebp - 0x76]
test eax, eax
je 0x10030182
push 0x7771
push 0x9af
push 0x2a3
push 0x7f9d
push 1
call fcn.1002cb23
add esp, 0x14
push dword [ebp - 0x114]
lea ecx, [ebp - 0x108]
call fcn.1001a2cf
cmp dword [eax], 0
je 0x1003019a
jmp 0x10030142
jmp 0x10030142
push dword [ebp - 0x64]
lea ecx, [ebp - 0x108]
call fcn.1001a2cf
mov esi, eax
push dword [ebp - 0x64]
lea ecx, [ebp - 0x108]
call fcn.1001a2cf
mov ecx, dword [esi]
mov dword [eax], ecx
jmp 0x10030112
mov eax, dword [ebp - 0xdc]
mov dword [ebp - 0xa20], eax
push 0
lea ecx, [ebp - 0x108]
call fcn.1001a2cf
cmp dword [eax], 0
jle 0x10030206
push 4
pop eax
shl eax, 1
push dword [ebp + eax - 0x234]
lea ecx, [ebp - 0x108]
call fcn.1001a2cf
cmp dword [eax], 0
jne 0x10030206
and dword [ebp - 0x558], 0
jmp 0x10030210
mov dword [ebp - 0x558], 1
push 1
lea ecx, [ebp - 0x108]
call fcn.1001a2cf
mov eax, dword [eax]
mov dword [ebp - 0x418], eax
mov eax, dword [ebp - 0x418]
cmp eax, dword [ebp - 0x558]
jl 0x1003023f
mov dword [ebp - 0x420], 1
jmp 0x10030246
and dword [ebp - 0x420], 0
imul eax, dword [ebp - 0x420], 0xa151
test eax, eax
jne 0x10030263
cmp dword [ebp - 0x64], 0
jne 0x10030263
and dword [ebp - 0x5f8], 0
jmp 0x1003026d
mov dword [ebp - 0x5f8], 1
push 4
pop eax
shl eax, 1
push dword [ebp + eax - 0x234]
lea ecx, [ebp - 0x108]
call fcn.1001a2cf
mov eax, dword [eax]
cmp eax, dword [ebp - 0x5f8]
jne 0x100302a5
push 4
pop eax
shl eax, 1
push dword [ebp + eax - 0x234]
lea ecx, [ebp - 0x108]
call fcn.1001a2cf
mov eax, 0x23758185
neg eax
je 0x100302ca
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x234], 0
je 0x100302ca
mov dword [ebp - 0x428], 1
jmp 0x100302d1
and dword [ebp - 0x428], 0
mov eax, dword [ebp - 0x428]
mov dword [ebp - 0x560], eax
mov eax, 0xfff7
sub eax, dword [ebp - 0x560]
cmp eax, dword [ebp - 0x744]
jl 0x100302fc
mov dword [ebp - 0x430], 1
jmp 0x10030303
and dword [ebp - 0x430], 0
mov eax, dword [ebp - 0x430]
mov dword [ebp - 0xdc], eax
jmp 0x100300eb
jmp 0x1002ff80
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x108]
call fcn.1001a2ca
jmp 0x1002fc5c
mov eax, dword [ebp - 0x28]
movzx eax, byte [ebp + eax - 0x277]
mov ecx, dword [ebp - 0x28]
sub ecx, dword [ebp - 0x1bc]
movzx ecx, byte [ebp + ecx - 0x27a]
movzx ecx, word [ebp + ecx*2 - 0x9e0]
or eax, ecx
mov ecx, dword [ebp - 0x28]
movzx ecx, byte [ebp + ecx - 0x277]
mov edx, dword [ebp - 0x28]
sub edx, dword [ebp - 0x1bc]
movzx edx, byte [ebp + edx - 0x27a]
movzx edx, word [ebp + edx*2 - 0x9e0]
and ecx, edx
sub eax, ecx
mov ecx, dword [ebp - 0x28]
movzx ecx, byte [ebp + ecx - 0x278]
mov word [ebp + ecx*2 - 0x9e0], ax
lea eax, [ebp - 0x1bc]
push eax
push 1
call fcn.1002ccc1
pop ecx
pop ecx
jmp 0x1002fc5c
push 1
lea ecx, [ebp - 0x898]
call fcn.1001a25e
mov byte [ebp - 4], 0xe
mov dword [ebp - 0xbc], 0x52061f66
lea eax, [ebp - 0x9e4]
push eax
lea eax, [ebp - 0x898]
push eax
push 1
call fcn.1002ccff
add esp, 0xc
mov dword [ebp - 0xbc], 0
jmp 0x100303ef
mov eax, dword [ebp - 0xbc]
dec eax
mov dword [ebp - 0xbc], eax
cmp dword [ebp - 0xbc], 0
jl 0x10030422
push dword [ebp - 0xbc]
lea ecx, [ebp - 0x898]
call fcn.1001a2cf
mov esi, eax
push dword [ebp - 0xbc]
lea ecx, [ebp - 0x898]
call fcn.1001a2cf
mov ecx, dword [esi]
mov dword [eax], ecx
jmp 0x100303e2
mov byte [ebp - 0x77], 0
movzx eax, byte [ebp - 0x77]
test eax, eax
je 0x10030442
push 0x3198
push 0x22c8
push 1
call fcn.1002cd69
add esp, 0xc
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x898]
call fcn.1001a2ca
push 2
pop eax
imul eax, eax, 0xc
xor ecx, ecx
mov word [ebp + eax - 0x9e0], cx
mov dword [ebp - 0x8c4], 0x8eac
mov dword [ebp - 0x8c0], 0x8eac
mov dword [ebp - 0x8bc], 0x8eac
mov dword [ebp - 0x8b8], 0x8eac
lea ecx, [ebp - 0x299]
call fcn.1000e0f3
push eax
lea eax, [ebp - 0x8b4]
push eax
lea eax, [ebp - 0x8c4]
push eax
lea ecx, [ebp - 0xb1c]
call fcn.1001a2de
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0x820]
call fcn.1001a2a0
mov byte [ebp - 4], 0xf
or dword [ebp - 0x8d8], 0xffffffff
or dword [ebp - 0x8d4], 0xffffffff
or dword [ebp - 0x8d0], 0xffffffff
or dword [ebp - 0x8cc], 0xffffffff
lea ecx, [ebp - 0x292]
call fcn.1000e0f3
push eax
lea eax, [ebp - 0x8c8]
push eax
lea eax, [ebp - 0x8d8]
push eax
lea ecx, [ebp - 0xafc]
call fcn.1001a2de
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0x2cc]
call fcn.1001a2a0
mov byte [ebp - 4], 0x10
mov dword [ebp - 0x850], 0xf196
push 1
lea ecx, [ebp - 0x2cc]
call fcn.1001a2cf
and dword [eax], 0
jmp 0x10030557
push 1
lea ecx, [ebp - 0x2cc]
call fcn.1001a2cf
mov dword [ebp - 0x668], eax
mov eax, dword [ebp - 0x668]
mov eax, dword [eax]
inc eax
mov ecx, dword [ebp - 0x668]
mov dword [ecx], eax
push 1
lea ecx, [ebp - 0x2cc]
call fcn.1001a2cf
cmp dword [eax], 3
jg 0x100305e7
mov dword [ebp - 0x194], 0x708ef6b8
mov dword [ebp - 0x194], 3
jmp 0x1003058c
mov eax, dword [ebp - 0x194]
dec eax
mov dword [ebp - 0x194], eax
cmp dword [ebp - 0x194], 0
jl 0x100305ce
mov byte [ebp - 0x79], 0
lea eax, [ebp - 0x79]
push eax
push 0x42f5
push 0
call fcn.1002d1b9
add esp, 0xc
mov byte [ebp - 0x7b], 0
movzx eax, byte [ebp - 0x7b]
test eax, eax
je 0x100305cc
push 0
push 0x5866
push 0x4056
call fcn.1002d157
add esp, 0xc
jmp 0x1003057f
mov byte [ebp - 0x7d], 0
movzx eax, byte [ebp - 0x7d]
test eax, eax
je 0x100305e2
push 1
call fcn.1002cdd0
pop ecx
jmp 0x10030533
or eax, 0xffffffff
je 0x10030669
push 2
lea ecx, [ebp - 0x820]
call fcn.1001a2cf
mov esi, eax
push 2
lea ecx, [ebp - 0x2cc]
call fcn.1001a2cf
mov ecx, dword [esi]
cmp ecx, dword [eax]
jge 0x10030623
mov eax, 0x5561
test eax, eax
je 0x10030623
mov dword [ebp - 0x438], 1
jmp 0x1003062a
and dword [ebp - 0x438], 0
cmp dword [ebp - 0x438], 0
jg 0x1003063f
mov dword [ebp - 0x568], 1
jmp 0x10030646
and dword [ebp - 0x568], 0
push 0
lea ecx, [ebp - 0x2cc]
call fcn.1001a2cf
mov eax, dword [eax]
cmp eax, dword [ebp - 0x568]
jne 0x10030669
mov dword [ebp - 0x7cc], 1
jmp 0x10030670
and dword [ebp - 0x7cc], 0
push 1
lea ecx, [ebp - 0x2cc]
call fcn.1001a2cf
push 0
lea ecx, [ebp - 0x820]
call fcn.1001a2cf
cmp dword [eax], 0xfffffffb
jae 0x100306aa
push 2
lea ecx, [ebp - 0x2cc]
call fcn.1001a2cf
cmp dword [eax], 0
jne 0x100306aa
and dword [ebp - 0x74c], 0
jmp 0x100306b4
mov dword [ebp - 0x74c], 1
push 1
lea ecx, [ebp - 0x2cc]
call fcn.1001a2cf
push 1
lea ecx, [ebp - 0x2cc]
call fcn.1001a2cf
push 1
lea ecx, [ebp - 0x820]
call fcn.1001a2cf
mov ecx, dword [ebp - 0x850]
cmp dword [eax], ecx
je 0x100306f1
mov dword [ebp - 0x440], 1
jmp 0x100306f8
and dword [ebp - 0x440], 0
push 0
lea ecx, [ebp - 0x820]
call fcn.1001a2cf
mov ecx, dword [ebp - 0x440]
cmp ecx, dword [eax]
jl 0x1003071b
mov dword [ebp - 0x600], 1
jmp 0x10030722
and dword [ebp - 0x600], 0
push 1
lea ecx, [ebp - 0x2cc]
call fcn.1001a2cf
mov ecx, dword [ebp - 0x600]
mov dword [eax], ecx
mov byte [ebp - 4], 0xf
lea ecx, [ebp - 0x2cc]
call fcn.1001a2ca
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x820]
call fcn.1001a2ca
lea eax, [ebp - 0x9e0]
push eax
lea ecx, [ebp - 0xb74]
call fcn.100351a7
mov dword [ebp - 0x754], eax
mov eax, dword [ebp - 0x754]
mov dword [ebp - 0x7d4], eax
mov byte [ebp - 4], 0x11
push dword [ebp - 0x7d4]
call fcn.1002b505
pop ecx
mov dword [ebp - 0x524], eax
mov byte [ebp - 4], 5
lea ecx, [ebp - 0xb74]
call fcn.1001a098
mov dword [ebp - 0xe4], 0xfffffff8
mov dword [ebp - 0x824], 0xffffffff
mov dword [ebp - 0x14c], 0
jmp 0x100307cb
mov eax, dword [ebp - 0x14c]
inc eax
mov dword [ebp - 0x14c], eax
cmp dword [ebp - 0x14c], 1
jge 0x100307e7
mov eax, dword [ebp - 0x14c]
mov dword [ebp + eax*4 - 0x448], 0xfffffffd
jmp 0x100307be
mov dword [ebp - 0xe4], 0
jmp 0x10030800
mov eax, dword [ebp - 0xe4]
inc eax
mov dword [ebp - 0xe4], eax
cmp dword [ebp - 0xe4], 0
jg 0x10030920
mov dword [ebp - 0x50], 0
jmp 0x1003081d
mov eax, dword [ebp - 0x50]
inc eax
mov dword [ebp - 0x50], eax
cmp dword [ebp - 0x50], 1
jge 0x10030833
mov eax, dword [ebp - 0x50]
mov dword [ebp + eax*4 - 0x2bc], 0x1245c810
jmp 0x10030816
mov dword [ebp - 0x50], 0
jmp 0x10030843
mov eax, dword [ebp - 0x50]
inc eax
mov dword [ebp - 0x50], eax
cmp dword [ebp - 0x50], 1
jge 0x10030859
mov eax, dword [ebp - 0x50]
mov dword [ebp + eax*4 - 0x75c], 0xffffffff
jmp 0x1003083c
mov byte [ebp - 0x7f], 0
movzx eax, byte [ebp - 0x7f]
test eax, eax
je 0x1003086d
push 0
call fcn.1002d211
pop ecx
cmp dword [ebp - 0xe4], 0
je 0x10030884
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x448], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x448]
mov dword [ebp - 0xa38], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x2bc], 0
jge 0x100308b3
mov dword [ebp - 0x570], 1
jmp 0x100308ba
and dword [ebp - 0x570], 0
mov eax, dword [ebp - 0xe4]
cmp dword [ebp - 0x570], eax
jne 0x100308d4
mov dword [ebp - 0x450], 1
jmp 0x100308db
and dword [ebp - 0x450], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x450]
mov dword [ebp + eax - 0x75c], ecx
push 4
pop eax
imul eax, eax, 0
imul eax, dword [ebp + eax - 0x2bc], 9
cmp eax, 0xcdb8faaa
jb 0x10030911
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x2bc], 0
mov dword [ebp - 0x824], 0xbb94d0f
jmp 0x100307f3
mov byte [ebp - 0x81], 0
movzx eax, byte [ebp - 0x81]
test eax, eax
je 0x10030940
push 0x882
push 0
call fcn.1002dc64
pop ecx
pop ecx
and dword [ebp - 0x158], 0
jmp 0x10030956
mov eax, dword [ebp - 0x158]
inc eax
mov dword [ebp - 0x158], eax
cmp dword [ebp - 0x158], 0xd
jae 0x10030ad9
mov dword [ebp - 0xa8], 0xd9e2a8d3
mov dword [ebp - 0x64c], 0x4d0f4f23
push 2
lea ecx, [ebp - 0x830]
call fcn.1001a25e
mov byte [ebp - 4], 0x12
mov dword [ebp - 0x150], 0
jmp 0x100309a1
mov eax, dword [ebp - 0x150]
inc eax
mov dword [ebp - 0x150], eax
cmp dword [ebp - 0x150], 2
jge 0x100309c3
push dword [ebp - 0x150]
lea ecx, [ebp - 0x830]
call fcn.1001a2cf
mov dword [eax], 0x839e071a
jmp 0x10030994
lea eax, [ebp - 0xa8]
push eax
push 0x69f0
lea eax, [ebp - 0x64c]
push eax
push 0x3558
push 1
call fcn.1002ce13
add esp, 0x14
mov dword [ebp - 0xa8], 0
jmp 0x100309fe
mov eax, dword [ebp - 0xa8]
inc eax
mov dword [ebp - 0xa8], eax
cmp dword [ebp - 0xa8], 1
jg 0x10030ab5
mov dword [ebp - 0x764], 0xb91ee4c
mov byte [ebp - 0x83], 0
movzx eax, byte [ebp - 0x83]
test eax, eax
je 0x10030a35
push 0x2b35
push 1
call fcn.1002cf3b
pop ecx
pop ecx
push dword [ebp - 0xa8]
lea ecx, [ebp - 0x830]
call fcn.1001a2cf
push dword [ebp - 0xa8]
lea ecx, [ebp - 0x830]
call fcn.1001a2cf
mov eax, dword [ebp - 0x64c]
mov dword [ebp - 0xa54], eax
push 1
lea ecx, [ebp - 0x830]
call fcn.1001a2cf
cmp dword [eax], 0
jne 0x10030a81
mov dword [ebp - 0x458], 1
jmp 0x10030a88
and dword [ebp - 0x458], 0
cmp dword [ebp - 0x458], 0xfffffff6
jne 0x10030a9d
mov dword [ebp - 0x578], 1
jmp 0x10030aa4
and dword [ebp - 0x578], 0
mov eax, dword [ebp - 0x578]
mov dword [ebp - 0x764], eax
jmp 0x100309f1
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x830]
call fcn.1001a2ca
xor eax, eax
mov ecx, dword [ebp - 0x158]
mov word [ebp + ecx*2 - 0x9e0], ax
jmp 0x10030949
mov dword [ebp - 0x2d4], 0x3a5bed85
mov dword [ebp - 0x2a0], 1
mov dword [ebp - 0x1c], 0
jmp 0x10030afd
mov eax, dword [ebp - 0x1c]
inc eax
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 2
jge 0x10030b13
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0x8a8], 2
jmp 0x10030af6
mov dword [ebp - 0x1c], 0
jmp 0x10030b23
mov eax, dword [ebp - 0x1c]
inc eax
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 3
jge 0x10030b39
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0x6e0], 1
jmp 0x10030b1c
mov dword [ebp - 0x1c], 0
jmp 0x10030b49
mov eax, dword [ebp - 0x1c]
inc eax
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 2
jge 0x10030b5f
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0x8b0], 0x87a912e7
jmp 0x10030b42
push 0xfffffffffffffffd
pop eax
test eax, eax
je 0x10030cfb
push 4
pop eax
imul eax, eax, 0
push 4
pop ecx
shl ecx, 1
mov ecx, dword [ebp + ecx - 0x6e0]
cmp dword [ebp + eax - 0x6e0], ecx
jg 0x10030b91
mov dword [ebp - 0x460], 1
jmp 0x10030b98
and dword [ebp - 0x460], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x6e0]
cmp eax, dword [ebp - 0x460]
jne 0x10030bcb
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x6e0], 0
jne 0x10030bcb
or eax, 0xffffffff
jne 0x10030bcb
and dword [ebp - 0x608], 0
jmp 0x10030bd5
mov dword [ebp - 0x608], 1
cmp dword [ebp - 0x608], 0xffffffff
jle 0x10030bea
mov dword [ebp - 0x2b8], 1
jmp 0x10030bf1
and dword [ebp - 0x2b8], 0
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x2b8]
mov dword [ebp + eax - 0x6e0], ecx
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x8b0]
imul eax, dword [ebp - 0x2b8]
cmp eax, 0xfffffffd
jl 0x10030c29
mov dword [ebp - 0x298], 1
jmp 0x10030c30
and dword [ebp - 0x298], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x298]
mov dword [ebp + eax - 0x8b0], ecx
cmp dword [ebp - 0x298], 0xe85ec415
ja 0x10030c5b
mov dword [ebp - 0x468], 1
jmp 0x10030c62
and dword [ebp - 0x468], 0
cmp dword [ebp - 0x468], 0xae7bf199
jb 0x10030c7a
mov dword [ebp - 0x470], 1
jmp 0x10030c81
and dword [ebp - 0x470], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, 0xed1
sub ecx, dword [ebp + eax - 0x8a8]
mov dword [ebp - 0x580], ecx
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x580]
mov dword [ebp + eax - 0x8a8], ecx
mov eax, dword [ebp - 0x580]
add eax, dword [ebp - 0x470]
cmp eax, dword [ebp - 0x2d4]
je 0x10030cd0
push 7
pop eax
test eax, eax
jne 0x10030cd0
and dword [ebp - 0x66c], 0
jmp 0x10030cda
mov dword [ebp - 0x66c], 1
mov eax, dword [ebp - 0x66c]
mov dword [ebp - 0x2d4], eax
cmp dword [ebp - 0x2d4], 0
je 0x10030cfb
mov dword [ebp - 0x478], 1
jmp 0x10030d02
and dword [ebp - 0x478], 0
mov eax, dword [ebp - 0x2a0]
cmp dword [ebp - 0x478], eax
jg 0x10030d1c
mov dword [ebp - 0x588], 1
jmp 0x10030d23
and dword [ebp - 0x588], 0
cmp dword [ebp - 0x588], 0xfcb8f1fe
ja 0x10030d3b
mov dword [ebp - 0x7dc], 1
jmp 0x10030d42
and dword [ebp - 0x7dc], 0
mov eax, dword [ebp - 0x2a0]
mov dword [ebp - 0xa5c], eax
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x6e0]
mov dword [ebp - 0x2a0], eax
cmp dword [ebp - 0x524], 0
je 0x100329f2
mov dword [ebp - 0x24], 0x90c4d8e5
mov dword [ebp - 0x60], 0xa8cf1d65
mov dword [ebp - 0x68], 0x2625
mov dword [ebp - 0x160], 0
jmp 0x10030d9c
mov eax, dword [ebp - 0x160]
inc eax
mov dword [ebp - 0x160], eax
cmp dword [ebp - 0x160], 2
jge 0x10030db8
mov eax, dword [ebp - 0x160]
mov dword [ebp + eax*4 - 0x140], 0xfffffff9
jmp 0x10030d8f
mov dword [ebp - 0x24], 1
jmp 0x10030dc8
cmp dword [ebp - 0x24], 0
jl 0x10031339
push 3
lea ecx, [ebp - 0x688]
call fcn.1001a25e
mov byte [ebp - 4], 0x13
push 1
push 0x1edc
lea eax, [ebp - 0xa64]
push eax
lea eax, [ebp - 0x688]
push eax
call fcn.1002cf94
add esp, 0x10
mov eax, dword [ebp - 0x24]
mov ecx, dword [ebp - 0x24]
cmp dword [ebp + eax*4 - 0x140], ecx
jg 0x10030e1b
mov dword [ebp - 0x480], 1
jmp 0x10030e22
and dword [ebp - 0x480], 0
cmp dword [ebp - 0x480], 6
jge 0x10030e37
mov dword [ebp - 0x610], 1
jmp 0x10030e3e
and dword [ebp - 0x610], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x140]
cmp dword [ebp - 0x610], eax
jle 0x10030f2c
mov eax, dword [ebp - 0x24]
push 4
pop ecx
imul ecx, ecx, 0
mov ecx, dword [ebp + ecx - 0x140]
cmp dword [ebp + eax*4 - 0x140], ecx
je 0x10030e7c
mov dword [ebp - 0x488], 1
jmp 0x10030e83
and dword [ebp - 0x488], 0
mov eax, dword [ebp - 0x488]
mov dword [ebp - 0x60], eax
mov eax, dword [ebp - 0x24]
cmp dword [ebp - 0x60], eax
jl 0x10030ea0
mov dword [ebp - 0x590], 1
jmp 0x10030ea7
and dword [ebp - 0x590], 0
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp + eax*4 - 0x140]
add eax, dword [ebp - 0x590]
mov ecx, dword [ebp - 0x24]
cmp eax, dword [ebp + ecx*4 - 0x140]
jle 0x10030ecf
mov dword [ebp - 0x490], 1
jmp 0x10030ed6
and dword [ebp - 0x490], 0
cmp dword [ebp - 0x490], 0xffffffff
jle 0x10030eeb
and dword [ebp - 0x598], 0
mov eax, dword [ebp - 0x598]
add eax, 0xb421dd2e
mov dword [ebp - 0x4a0], eax
push 1
lea ecx, [ebp - 0x688]
call fcn.1001a2cf
mov ecx, dword [ebp - 0x4a0]
mov dword [eax], ecx
cmp dword [ebp - 0x4a0], 0
je 0x100312e7
cmp dword [ebp - 0x24], 0
je 0x100312e7
mov dword [ebp - 0x900], 0xfffffffa
mov dword [ebp - 0x8fc], 0xfffffffa
mov dword [ebp - 0x8f8], 0xfffffffa
mov dword [ebp - 0x8f4], 0xfffffffa
lea ecx, [ebp - 0x2a9]
call fcn.1000e0f3
push eax
lea eax, [ebp - 0x8f0]
push eax
lea eax, [ebp - 0x900]
push eax
lea ecx, [ebp - 0xb24]
call fcn.1001a2de
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0x6bc]
call fcn.1001a2a0
mov byte [ebp - 4], 0x14
mov dword [ebp - 0xb0], 0xe324e816
mov dword [ebp - 0x31c], 3
push 3
lea ecx, [ebp - 0x6bc]
call fcn.1001a2cf
mov eax, dword [eax]
sub eax, 0x1e9fd5fb
cmp eax, dword [ebp - 0xb0]
jle 0x10031010
cmp dword [ebp - 0x68], 0
jne 0x10031010
mov dword [ebp - 0x618], 1
cmp dword [ebp - 0x618], 0xcbaa
jge 0x10031032
mov dword [ebp - 0x60], 0
jmp 0x100312f7
cmp dword [ebp - 0x60], 1
jg 0x10031325
mov dword [ebp - 0x68], 0
jmp 0x1003130d
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x688]
call fcn.1001a2ca
jmp 0x10030dc1
mov byte [ebp - 0x224], 8
mov byte [ebp - 0x223], 0xc1
mov byte [ebp - 0x222], 5
mov byte [ebp - 0x221], 8
mov byte [ebp - 0x220], 7
mov byte [ebp - 0x21f], 0x1b
mov byte [ebp - 0x21e], 0xa
mov byte [ebp - 0x21d], 0xb
mov byte [ebp - 0x21c], 9
mov byte [ebp - 0x21b], 0xb
mov byte [ebp - 0x21a], 1
mov byte [ebp - 0x219], 0x1d
mov byte [ebp - 0x218], 4
mov byte [ebp - 0x217], 0x23
mov byte [ebp - 0x216], 6
mov byte [ebp - 0x215], 0x2e
mov byte [ebp - 0x214], 0
mov byte [ebp - 0x213], 0x2e
mov byte [ebp - 0x212], 0x24
mov byte [ebp - 0x211], pe_nt_image_headers32
mov byte [ebp - 0x210], 0xd5
mov byte [ebp - 0x20f], 0
mov byte [ebp - 0x20e], 0x28
mov byte [ebp - 0x20d], 0xde
mov byte [ebp - 0x20c], 0
mov byte [ebp - 0x20b], 4
mov byte [ebp - 0x20a], 0xdc
mov byte [ebp - 0x209], 0x98
mov byte [ebp - 0x208], 0x65
mov byte [ebp - 0x207], 0x45
mov byte [ebp - 0x206], 0x44
mov byte [ebp - 0x205], 0x6b
mov byte [ebp - 0x204], 0xc1
mov byte [ebp - 0x203], 0x61
mov byte [ebp - 0x202], 0x44
mov byte [ebp - 0x201], 0x13
mov byte [ebp - 0x200], 0xdc
mov byte [ebp - 0x1ff], 0x4f
mov byte [ebp - 0x1fe], 0x67
mov byte [ebp - 0x1fd], 0xf3
mov byte [ebp - 0x1fc], 0x2e
mov byte [ebp - 0x1fb], 0x72
mov byte [ebp - 0x1fa], 0xd5
mov byte [ebp - 0x1f9], 0xcd
mov byte [ebp - 0x1f8], 0x1b
mov byte [ebp - 0x1f7], 0x7b
mov byte [ebp - 0x1f6], 0x9a
mov byte [ebp - 0x1f5], 0x73
mov byte [ebp - 0x1f4], 0x10
mov byte [ebp - 0x1f3], 0xab
mov byte [ebp - 0x1f2], 0x9d
mov byte [ebp - 0x1f1], 0xeb
mov byte [ebp - 0x1f0], 0x79
mov byte [ebp - 0x1ef], 0x7d
mov byte [ebp - 0x1ee], 0xf8
mov byte [ebp - 0x1ed], 0xb
mov byte [ebp - 0x1ec], 0x1b
mov byte [ebp - 0x1eb], 2
mov byte [ebp - 0x1ea], 0x36
mov byte [ebp - 0x1e9], 3
mov byte [ebp - 0x1e8], 5
xor eax, eax
inc eax
shl eax, 0
movzx eax, byte [ebp + eax - 0x224]
or eax, 0xa0
xor ecx, ecx
inc ecx
shl ecx, 0
movzx ecx, byte [ebp + ecx - 0x224]
and ecx, 0xa0
sub eax, ecx
xor ecx, ecx
inc ecx
imul ecx, ecx, 0
movzx ecx, byte [ebp + ecx - 0x224]
mov byte [ebp + ecx - 0x6a4], al
mov dword [ebp - 0x18], 2
and dword [ebp - 0x11c], 0
jmp 0x1003153a
cmp dword [ebp - 0x18], 0x3d
jae 0x100321ad
xor eax, eax
inc eax
imul eax, eax, 0
movzx eax, byte [ebp + eax - 0x224]
lea eax, [eax + eax + 2]
cmp dword [ebp - 0x18], eax
jne 0x10031cc4
mov dword [ebp - 0x10], 0xffffffff
mov dword [ebp - 0x6c], 0xb15a8df0
mov dword [ebp - 0x374], 0xa7e1289e
mov byte [ebp - 0x85], 0
push 0x4fba
lea eax, [ebp - 0x85]
push eax
push 0x728d
push 1
call fcn.1002d008
add esp, 0x10
cmp dword [ebp - 0x10], 1
ja 0x100315b0
xor eax, eax
inc eax
je 0x100315b0
mov dword [ebp - 0x32c], 1
jmp 0x100315b7
and dword [ebp - 0x32c], 0
mov eax, dword [ebp - 0x10]
cmp eax, dword [ebp - 0x32c]
je 0x100315c6
cmp dword [ebp - 0x10], 0
mov eax, dword [ebp - 0x10]
mov dword [ebp - 0xa74], eax
cmp dword [ebp - 0x10], 0xab9c
jl 0x100315e4
mov dword [ebp - 0x334], 1
jmp 0x100315eb
and dword [ebp - 0x334], 0
mov eax, dword [ebp - 0x10]
cmp dword [ebp - 0x334], eax
jle 0x10031602
mov dword [ebp - 0x20], 0x6e52
mov dword [ebp - 0x8ec], 2
mov dword [ebp - 0x8e8], 2
mov dword [ebp - 0x8e4], 2
mov dword [ebp - 0x8e0], 2
lea ecx, [ebp - 0x291]
call fcn.1000e0f3
push eax
lea eax, [ebp - 0x8dc]
push eax
lea eax, [ebp - 0x8ec]
push eax
lea ecx, [ebp - 0xb2c]
call fcn.1001a2de
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0x990]
call fcn.1001a2a0
mov byte [ebp - 4], 0x17
mov dword [ebp - 0x198], 1
mov dword [ebp - 0x434], 0x77dfcc86
mov dword [ebp - 0x454], 0
mov dword [ebp - 0x44c], 0
mov dword [ebp - 0x7ec], 1
mov byte [ebp - 0x91], 0
movzx eax, byte [ebp - 0x91]
test eax, eax
je 0x10031d78
push 1
call fcn.1002d2a4
pop ecx
mov eax, dword [ebp - 0x198]
dec eax
mov dword [ebp - 0x198], eax
push 1
lea ecx, [ebp - 0x990]
call fcn.1001a2cf
and dword [eax], 0
cmp dword [ebp - 0x198], 0
jle 0x10031daa
mov dword [ebp - 0x404], 1
jmp 0x10031db1
and dword [ebp - 0x404], 0
cmp dword [ebp - 0x20], 0
je 0x10031dcc
mov eax, 0xfffe
test eax, eax
je 0x10031dcc
and dword [ebp - 0x784], 0
mov eax, dword [ebp - 0x404]
sub eax, dword [ebp - 0x20]
cmp eax, dword [ebp - 0x20]
jl 0x10031ded
xor eax, eax
inc eax
imul eax, eax, 0xc
mov byte [ebp + eax - 0x6a4], 0
mov dword [ebp - 0x1a8], 0xfffffffa
mov dword [ebp - 0x2c0], 1
mov dword [ebp - 0x124], 0
mov dword [ebp - 0x4a4], 0xea964a90
mov dword [ebp - 0xaf4], 0
push 1
lea ecx, [ebp - 0x6c8]
call fcn.1001a25e
mov byte [ebp - 4], 0x1a
mov dword [ebp - 0x47c], 0xd21462cc
push 0x442f
push 0
lea eax, [ebp - 0xaa0]
push eax
lea eax, [ebp - 0x6c8]
push eax
push 0x5d88
push 0x53e2
call fcn.1002da8b
add esp, 0x18
mov dword [ebp - 0x1a8], 0xfffffffb
jmp 0x10032248
cmp dword [ebp - 0x1a8], 0x19
jg 0x10032492
mov dword [ebp - 0xf4], 1
mov dword [ebp - 0x844], 4
mov dword [ebp - 0x1b0], 0
jmp 0x10032282
cmp dword [ebp - 0x1b0], 4
jge 0x1003229e
mov eax, dword [ebp - 0x1b0]
mov dword [ebp + eax*4 - 0xb3c], 0x1c58bdfa
jmp 0x10032275
mov eax, 0x369b
test eax, eax
je 0x100323c0
lea eax, [ebp - 0x6c8]
push eax
push 1
call fcn.1002d428
pop ecx
pop ecx
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x6c8]
call fcn.1001a2ca
lea eax, [ebp - 0x6a4]
push eax
lea ecx, [ebp - 0xb14]
call fcn.100351d7
mov byte [ebp - 4], 0x1b
push 2
lea ecx, [ebp - 0x6b0]
call fcn.1001a25e
mov byte [ebp - 4], 0x1c
mov dword [ebp - 0x30], 0xfffffff9
mov dword [ebp - 0x1b8], 0xfffffff9
push 2
lea ecx, [ebp - 0x840]
call fcn.1001a25e
mov byte [ebp - 4], 0x1d
mov dword [ebp - 0x870], 0xffffffff
mov dword [ebp - 0x86c], 0xffffffff
mov dword [ebp - 0x868], 0xffffffff
mov dword [ebp - 0x864], 0xffffffff
mov dword [ebp - 0x2a8], 0x7cf7
mov dword [ebp - 0x12c], 0x96d56a42
mov dword [ebp - 0x9f4], 1
push 0x46cf
lea eax, [ebp - 0x7a4]
push eax
lea eax, [ebp - 0x6b0]
push eax
push 1
call fcn.1002d47c
add esp, 0x10
lea eax, [ebp - 0x7a4]
push eax
push 1
push 0x1c52
push 0x6600
lea eax, [ebp - 0x840]
push eax
call fcn.1002d516
add esp, 0x14
mov dword [ebp - 0x30], 0
mov eax, dword [ebp - 0x1b8]
cmp dword [ebp - 0x30], eax
jle 0x1003259d
mov dword [ebp - 0x4cc], 1
jmp 0x100325a4
and dword [ebp - 0x4cc], 0
mov eax, dword [ebp - 0x1b8]
cmp dword [ebp - 0x4cc], eax
je 0x100325be
mov dword [ebp - 0x4d4], 1
jmp 0x100325c5
and dword [ebp - 0x4d4], 0
push 0
lea ecx, [ebp - 0x840]
call fcn.1001a2cf
mov eax, dword [eax]
cmp eax, dword [ebp - 0x4d4]
jle 0x100325e8
cmp dword [0x11f05ef4], 0
je 0x10032d67
mov dword [ebp - 0x2b0], 1
mov dword [ebp - 0x54c], 0x7e2f9d44
mov dword [ebp - 0x134], 1
mov dword [ebp - 0xa88], 1
push 3
lea ecx, [ebp - 0x1d4]
call fcn.1001a25e
mov byte [ebp - 4], 0x1f
mov dword [ebp - 0x2d8], 0x13b28858
mov dword [ebp - 0x56c], 6
mov dword [ebp - 0x1d8], 0
jmp 0x10032a65
mov eax, dword [ebp - 0x1d8]
inc eax
mov dword [ebp - 0x1d8], eax
cmp dword [ebp - 0x1d8], 3
jge 0x10032a84
push dword [ebp - 0x1d8]
lea ecx, [ebp - 0x1d4]
call fcn.1001a2cf
or dword [eax], 0xffffffff
jmp 0x10032a58
mov byte [ebp - 0x75], 0
push 0x5f65
push 0x23a0
push 0x2b51
push 0x3781
push 1
push 0x6f53
push 0x66fd
push 0x2bdc
lea eax, [ebp - 0x75]
push eax
call fcn.1002d85b
add esp, 0x24
cmp dword [ebp - 0x2b0], 0xffffffff
jne 0x10032ace
mov dword [ebp - 0x52c], 1
jmp 0x10032ad5
and dword [ebp - 0x52c], 0
mov eax, dword [ebp - 0x52c]
mov dword [ebp - 0x858], eax
mov eax, dword [ebp - 0x2d8]
mov dword [ebp - 0x7c4], eax
mov eax, dword [ebp - 0x2d8]
inc eax
mov dword [ebp - 0x2d8], eax
mov eax, dword [ebp - 0x858]
cmp eax, dword [ebp - 0x7c4]
jl 0x10032b14
mov dword [ebp - 0x554], 1
jmp 0x10032b1b
and dword [ebp - 0x554], 0
push 2
lea ecx, [ebp - 0x1d4]
call fcn.1001a2cf
mov eax, dword [ebp - 0x56c]
mov dword [ebp - 0x9fc], eax
mov eax, dword [ebp - 0x134]
mov dword [ebp - 0xae8], eax
push 0
lea ecx, [ebp - 0x1d4]
call fcn.1001a2cf
push 1
lea ecx, [ebp - 0x1d4]
call fcn.1001a2cf
push 8
pop esi
sub esi, dword [eax]
push 0
lea ecx, [ebp - 0x1d4]
call fcn.1001a2cf
cmp esi, dword [eax]
jl 0x10032b8e
push 0
lea ecx, [ebp - 0x1d4]
call fcn.1001a2cf
cmp dword [eax], 0
je 0x10032b8e
mov dword [ebp - 0x534], 1
jmp 0x10032b95
and dword [ebp - 0x534], 0
mov eax, dword [ebp - 0x534]
add eax, 0x2f2bd530
cmp eax, 1
jg 0x10032bb1
mov dword [ebp - 0x53c], 1
jmp 0x10032bb8
and dword [ebp - 0x53c], 0
mov eax, dword [ebp - 0x134]
cmp dword [ebp - 0x53c], eax
jne 0x10032bd6
push 5
pop eax
test eax, eax
jne 0x10032bd6
and dword [ebp - 0x544], 0
jmp 0x10032be0
mov dword [ebp - 0x544], 1
push 0
lea ecx, [ebp - 0x1d4]
call fcn.1001a2cf
mov ecx, dword [ebp - 0x544]
add ecx, dword [eax]
mov dword [ebp - 0x54c], ecx
je 0x10032c12
cmp dword [ebp - 0x134], 0
je 0x10032c12
mov dword [ebp - 0x55c], 1
jmp 0x10032c19
and dword [ebp - 0x55c], 0
mov eax, dword [ebp - 0x554]
cmp eax, dword [ebp - 0x55c]
jne 0x10032c33
mov dword [ebp - 0x564], 1
jmp 0x10032c3a
and dword [ebp - 0x564], 0
mov eax, dword [ebp - 0x564]
mov dword [ebp - 0x134], eax
mov eax, dword [ebp - 0x56c]
cmp dword [ebp - 0x134], eax
jle 0x10032c60
mov dword [ebp - 0x574], 1
jmp 0x10032c67
and dword [ebp - 0x574], 0
push 0
lea ecx, [ebp - 0x1d4]
call fcn.1001a2cf
mov ecx, dword [ebp - 0x574]
cmp ecx, dword [eax]
jl 0x10032c8a
mov dword [ebp - 0x57c], 1
jmp 0x10032c91
and dword [ebp - 0x57c], 0
cmp dword [ebp - 0x57c], 0xfffffff8
jle 0x10032ca6
mov dword [ebp - 0x584], 1
jmp 0x10032cad
and dword [ebp - 0x584], 0
push 0
lea ecx, [ebp - 0x1d4]
call fcn.1001a2cf
mov ecx, dword [ebp - 0x584]
cmp ecx, dword [eax]
jge 0x10032cd0
mov dword [ebp - 0x58c], 1
jmp 0x10032cd7
and dword [ebp - 0x58c], 0
mov esi, dword [ebp - 0x58c]
sub esi, dword [ebp - 0x2b0]
push 2
lea ecx, [ebp - 0x1d4]
call fcn.1001a2cf
cmp esi, dword [eax]
jg 0x10032d00
mov dword [ebp - 0x73c], 1
jmp 0x10032d07
and dword [ebp - 0x73c], 0
mov eax, dword [ebp - 0x2b0]
mov dword [ebp - 0xa04], eax
push 0
lea ecx, [ebp - 0x1d4]
call fcn.1001a2cf
mov esi, eax
push 2
lea ecx, [ebp - 0x1d4]
call fcn.1001a2cf
mov esi, dword [esi]
imul esi, dword [eax]
push 1
lea ecx, [ebp - 0x1d4]
call fcn.1001a2cf
mov dword [eax], esi
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x1d4]
call fcn.1001a2ca
mov ecx, dword [ebp + 8]
call fcn.100351cc
push eax
call dword [0x11f05ef4]
mov dword [ebp - 0xc0], eax
cmp dword [ebp - 0xc0], 0
je 0x10032ebe
movzx eax, byte [0x11f05ee9]
test eax, eax
je 0x10032d94
mov ecx, 0x11f05fdc
call fcn.10035255
movzx eax, al
test eax, eax
jne 0x10032ebe
lea eax, [ebp - 0x594]
push eax
push 1
push 0x3584
push 0x5cd3
lea eax, [ebp - 0xc0]
push eax
push 0x11f05fdc
call fcn.1002da8b
add esp, 0x18
mov dword [ebp - 0x6e8], 0xffff
mov dword [ebp - 0x6f4], 0xbf2121f9
mov dword [ebp - 0x59c], 0x49aaed6b
mov dword [ebp - 0x6ec], 0x203bd652
mov dword [ebp - 0x6fc], 0x8531d14c
push 3
lea ecx, [ebp - 0x93c]
call fcn.1001a25e
mov byte [ebp - 4], 0x20
mov dword [ebp - 0x44], 0
jmp 0x10032e0e
mov eax, dword [ebp - 0x44]
inc eax
mov dword [ebp - 0x44], eax
cmp dword [ebp - 0x44], 3
jge 0x10032e2a
push dword [ebp - 0x44]
lea ecx, [ebp - 0x93c]
call fcn.1001a2cf
mov dword [eax], 0xaf0a9b27
jmp 0x10032e07
mov dword [ebp - 0x44], 0
jmp 0x10032e3a
mov eax, dword [ebp - 0x44]
inc eax
mov dword [ebp - 0x44], eax
cmp dword [ebp - 0x44], 1
jge 0x10032e50
mov eax, dword [ebp - 0x44]
mov dword [ebp + eax*4 - 0x704], 0xd7f19125
jmp 0x10032e33
lea eax, [ebp - 0x6e8]
push eax
lea eax, [ebp - 0x6ec]
push eax
lea eax, [ebp - 0x59c]
push eax
push 1
lea eax, [ebp - 0x6f4]
push eax
lea eax, [ebp - 0x6fc]
push eax
lea eax, [ebp - 0x93c]
push eax
push 0x7347
push 0x55cb
call fcn.1002db20
add esp, 0x24
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x59c]
mov dword [ebp + eax - 0x704], ecx
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x93c]
call fcn.1001a2ca
push 0x11f05ee9
push 1
call fcn.1002dc64
pop ecx
pop ecx
mov dword [ebp - 0x54], 0x19d29be1
mov dword [ebp - 0x290], 0xffffffff
mov dword [ebp - 0xb8], 0x2c78ef8a
mov dword [ebp - 0x4c], 0
jmp 0x10032ee9
mov eax, dword [ebp - 0x4c]
inc eax
mov dword [ebp - 0x4c], eax
cmp dword [ebp - 0x4c], 2
jge 0x10032eff
mov eax, dword [ebp - 0x4c]
mov dword [ebp + eax*4 - 0x280], 0x8261
jmp 0x10032ee2
mov dword [ebp - 0x4c], 0
jmp 0x10032f0f
mov eax, dword [ebp - 0x4c]
inc eax
mov dword [ebp - 0x4c], eax
cmp dword [ebp - 0x4c], 4
jge 0x10032f25
mov eax, dword [ebp - 0x4c]
mov dword [ebp + eax*4 - 0xb5c], 0
jmp 0x10032f08
mov dword [ebp - 0x54], 0
jmp 0x10032f35
mov eax, dword [ebp - 0x54]
inc eax
mov dword [ebp - 0x54], eax
cmp dword [ebp - 0x54], 1
jg 0x100331d2
mov dword [ebp - 0x70], 0xfffffffb
mov dword [ebp - 0x2c], 0x9ba87a5e
cmp dword [ebp - 0x54], 0xf3ccd246
jne 0x10032f62
mov dword [ebp - 0x5a4], 1
jmp 0x10032f69
and dword [ebp - 0x5a4], 0
mov eax, dword [ebp - 0x70]
imul ecx, dword [ebp - 0x70], 0x5245
imul ecx, dword [ebp - 0x5a4]
add eax, ecx
push 4
pop ecx
imul ecx, ecx, 0
cmp eax, dword [ebp + ecx - 0x280]
jle 0x10032fa4
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x280], 0
jne 0x10032fa4
and dword [ebp - 0x5ac], 0
jmp 0x10032fae
mov dword [ebp - 0x5ac], 1
mov eax, dword [ebp - 0x5ac]
mov dword [ebp - 0x70], eax
mov eax, dword [ebp - 0x2c]
cmp dword [ebp - 0x70], eax
je 0x10032fcb
mov dword [ebp - 0x5b4], 1
jmp 0x10032fd2
and dword [ebp - 0x5b4], 0
mov eax, dword [ebp - 0x54]
cmp dword [ebp - 0x5b4], eax
jne 0x10032fe9
mov dword [ebp - 0x5bc], 1
jmp 0x10032ff0
and dword [ebp - 0x5bc], 0
imul eax, dword [ebp - 0x5bc], 0xfffffffa
sub eax, 0x5f40e13f
push 4
pop ecx
imul ecx, ecx, 0
imul eax, dword [ebp + ecx - 0x280]
test eax, eax
jne 0x1003301a
mov dword [ebp - 0x70c], 1
jmp 0x10033021
and dword [ebp - 0x70c], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x280]
mov dword [ebp - 0xa98], eax
mov eax, dword [ebp - 0x54]
cmp dword [ebp - 0x54], eax
jl 0x10033048
mov dword [ebp - 0x5c4], 1
jmp 0x1003304f
and dword [ebp - 0x5c4], 0
mov eax, dword [ebp - 0x5c4]
mov dword [ebp - 0x2c], eax
mov eax, dword [ebp - 0x2c]
mov dword [ebp - 0x290], eax
mov eax, dword [ebp - 0x290]
sub eax, dword [ebp - 0x54]
mov dword [ebp - 0xb8], eax
mov dword [ebp - 0x2c], 1
jmp 0x10033080
mov eax, dword [ebp - 0x2c]
dec eax
mov dword [ebp - 0x2c], eax
cmp dword [ebp - 0x2c], 0
jl 0x100331cd
mov dword [ebp - 0x70], 1
jmp 0x1003309a
mov eax, dword [ebp - 0x70]
dec eax
mov dword [ebp - 0x70], eax
cmp dword [ebp - 0x70], 0
jl 0x100331c8
mov dword [ebp - 0x2f4], 7
mov dword [ebp - 0x300], 0x27db4043
mov dword [ebp - 0xb8], 1
jmp 0x100330d1
mov eax, dword [ebp - 0xb8]
dec eax
mov dword [ebp - 0xb8], eax
cmp dword [ebp - 0xb8], 0
jl 0x100330ed
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0xb5c], 1
jmp 0x100330c4
cmp dword [ebp - 0x2c], 0xa4ef
jg 0x1003310b
mov eax, 0x8e25
test eax, eax
je 0x1003310b
mov dword [ebp - 0x5cc], 1
jmp 0x10033112
and dword [ebp - 0x5cc], 0
mov eax, dword [ebp - 0x2c]
mov eax, dword [ebp + eax*4 - 0x280]
cmp dword [ebp - 0x5cc], eax
jg 0x10033130
mov dword [ebp - 0x5d4], 1
jmp 0x10033137
and dword [ebp - 0x5d4], 0
mov eax, 0x46d7
sub eax, dword [ebp - 0x5d4]
mov dword [ebp - 0xb8], eax
mov eax, dword [ebp - 0x2c]
mov eax, dword [ebp + eax*4 - 0x280]
cmp eax, dword [ebp - 0xb8]
jl 0x10033166
mov dword [ebp - 0x5dc], 1
jmp 0x1003316d
and dword [ebp - 0x5dc], 0
mov eax, dword [ebp - 0x5dc]
mov dword [ebp - 0x2f4], eax
mov eax, dword [ebp - 0x2c]
mov eax, dword [ebp + eax*4 - 0x280]
cmp dword [ebp - 0x2f4], eax
jle 0x10033197
mov dword [ebp - 0x2f8], 1
jmp 0x1003319e
and dword [ebp - 0x2f8], 0
mov eax, dword [ebp - 0x2f8]
mov dword [ebp - 0x300], eax
mov eax, dword [ebp - 0x300]
neg eax
mov ecx, dword [ebp - 0x2c]
imul eax, dword [ebp + ecx*4 - 0x280]
mov dword [ebp - 0x290], eax
jmp 0x10033093
jmp 0x10033079
jmp 0x10032f2e
mov byte [ebp - 0x8c], 0
movzx eax, byte [ebp - 0x8c]
test eax, eax
je 0x100331f8
push 1
push 0x77de
push 0x7539
call fcn.1002dcbe
add esp, 0xc
mov eax, dword [ebp - 0xc0]
mov dword [ebp - 0x714], eax
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x9b4]
call fcn.1001a098
mov eax, dword [ebp - 0x714]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop esi
mov esp, ebp
pop ebp
ret