Function at 0x100293a3
Capabilities:
Parse pe header

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x100658b7
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
push ecx
sub esp, 0x5a0
push ebx
push esi
push edi
mov dword [ebp - 0x10], esp
movzx eax, byte [ebp + 0x1c]
test eax, eax
je 0x1002beb9
mov eax, dword [ebp + 8]
mov dword [ebp - 0x310], eax
mov eax, dword [ebp + 0x18]
mov dword [ebp - 0x2dc], eax
lea eax, [ebp + 0xc]
mov dword [ebp - 0x304], eax
mov eax, dword [ebp + 0x14]
mov dword [ebp - 0x308], eax
mov eax, dword [ebp - 0x304]
movzx eax, byte [eax]
test eax, eax
je 0x1002be8e
mov eax, dword [ebp - 0x308]
mov dword [ebp - 0x104], eax
mov eax, dword [ebp - 0x310]
mov dword [ebp - 0x5c], eax
push 2
lea ecx, [ebp - 0x484]
call fcn.10009c88
and dword [ebp - 4], 0
mov dword [ebp - 0x90], 0
jmp 0x10029448
mov eax, dword [ebp - 0x90]
inc eax
mov dword [ebp - 0x90], eax
cmp dword [ebp - 0x90], 2
jge 0x1002946a
push dword [ebp - 0x90]
lea ecx, [ebp - 0x484]
call fcn.10009d00
mov dword [eax], 0xd41e
jmp 0x1002943b
push 1
push 0x2f79
push 0x7373
push 0x630
push 1
call fcn.1001d62b
add esp, 0x14
push 1
lea ecx, [ebp - 0x484]
call fcn.10009d00
cmp dword [eax], 0
je 0x100294cf
mov dword [ebp - 0x318], 0x70a
push 0x29bb
lea eax, [ebp - 0x318]
push eax
push 0x5a10
push 0x5188
push 1
push 0x648f
push 0
push 0xec1
call fcn.1001e2d7
add esp, 0x20
jmp 0x100294fe
mov byte [ebp - 0x4b], 0
push 0x35d0
push 0x3ba7
push 1
push 0xe27
push 0x2dba
push 0x5a20
push 1
push 0
lea eax, [ebp - 0x4b]
push eax
call fcn.10028d9c
add esp, 0x24
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x484]
call fcn.10009ce4
and dword [ebp - 0x28], 0
mov dword [ebp - 0xcc], 0xd29be1d9
mov dword [ebp - 0x9c], 0
jmp 0x10029534
mov eax, dword [ebp - 0x9c]
inc eax
mov dword [ebp - 0x9c], eax
cmp dword [ebp - 0x9c], 3
jge 0x10029550
mov eax, dword [ebp - 0x9c]
mov dword [ebp + eax*4 - 0x5a4], 0x648261f9
jmp 0x10029527
push 0x79e2
push 0x390c
push 0
push 1
push 0x760
call fcn.10021af5
add esp, 0x14
mov dword [ebp - 0xcc], 2
jmp 0x10029584
mov eax, dword [ebp - 0xcc]
dec eax
mov dword [ebp - 0xcc], eax
cmp dword [ebp - 0xcc], 0
jl 0x100295c3
mov byte [ebp - 0x4f], 0
lea eax, [ebp - 0x4f]
push eax
push 0x296b
push 0x34b4
push 0x2dd8
push 1
push 0x75e6
push 0x5e30
push 1
push 0x36f8
push 1
call fcn.100227d6
add esp, 0x28
jmp 0x10029577
push 3
lea ecx, [ebp - 0x3a8]
call fcn.10009c88
mov dword [ebp - 4], 1
mov dword [ebp - 0x398], 0xffffffff
mov dword [ebp - 0x320], 0xd3d47825
mov dword [ebp - 0xa8], 0
jmp 0x10029604
mov eax, dword [ebp - 0xa8]
inc eax
mov dword [ebp - 0xa8], eax
cmp dword [ebp - 0xa8], 3
jge 0x10029626
push dword [ebp - 0xa8]
lea ecx, [ebp - 0x3a8]
call fcn.10009d00
mov dword [eax], 0xd16df251
jmp 0x100295f7
push 0x7a47
lea eax, [ebp - 0x3a8]
push eax
push 0x4b6c
push 1
lea eax, [ebp - 0x320]
push eax
push 1
push 0x7fea
lea eax, [ebp - 0x398]
push eax
call fcn.1001d774
add esp, 0x20
push 0
lea ecx, [ebp - 0x3a8]
call fcn.10009d00
cmp dword [eax], 0
je 0x1002968a
push 0x2efd
push 0x27c4
push 0x5a3f
push 1
push 0x3b87
push 1
call fcn.1002296e
add esp, 0x18
jmp 0x100296d9
push 3
lea ecx, [ebp - 0x478]
call fcn.10009c88
mov byte [ebp - 4], 2
push 1
push 0
lea eax, [ebp - 0x478]
push eax
lea eax, [ebp - 0x4b4]
push eax
push 0x52d
call fcn.1002e44b
add esp, 0x14
push 2
lea ecx, [ebp - 0x478]
call fcn.10009d00
or dword [eax], 0xffffffff
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x478]
call fcn.10009ce4
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x3a8]
call fcn.10009ce4
push 3
lea ecx, [ebp - 0x330]
call fcn.10009c88
mov dword [ebp - 4], 3
push 1
push 0x452
push 0x5e67
push 1
lea eax, [ebp - 0x330]
push eax
push 0x272
push 0x15d1
lea eax, [ebp - 0x4d4]
push eax
call fcn.10022e7a
add esp, 0x20
push 1
lea ecx, [ebp - 0x330]
call fcn.10009d00
and dword [eax], 0
jmp 0x10029760
push 1
lea ecx, [ebp - 0x330]
call fcn.10009d00
mov dword [ebp - 0x218], eax
mov eax, dword [ebp - 0x218]
mov eax, dword [eax]
inc eax
mov ecx, dword [ebp - 0x218]
mov dword [ecx], eax
push 1
lea ecx, [ebp - 0x330]
call fcn.10009d00
cmp dword [eax], 0x14
jl 0x10029799
push 0x2ef2
push 1
push 0x4fd0
push 0xb6b
push 0x2825
push 1
push 0x7744
call fcn.10023011
add esp, 0x1c
jmp 0x1002973c
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x330]
call fcn.10009ce4
push 0
call fcn.1002c285
pop ecx
push 0x56c2
push 0xc1e
push 0x2fcb
lea eax, [ebp - 0x128]
push eax
push 1
push 0x47f3
push 1
push 1
lea eax, [ebp - 0x104]
push eax
call fcn.1001dc2b
add esp, 0x24
mov dword [ebp - 0x2a0], 0xffffffff
mov dword [ebp - 0x2f4], 0xbab59342
push 0x1736
push 0x5dc6
push 1
push 1
push 0x3398
lea eax, [ebp - 0x2f4]
push eax
push 0x675d
push 0xb27
push 1
lea eax, [ebp - 0x2a0]
push eax
call fcn.1002312b
add esp, 0x28
mov eax, dword [ebp - 0x128]
movzx eax, word [eax]
cmp eax, 0x5a4d
je 0x10029a6c
mov dword [ebp - 0x558], 0xfffffff9
mov dword [ebp - 0x554], 0xfffffff9
mov dword [ebp - 0x550], 0xfffffff9
mov dword [ebp - 0x54c], 0xfffffff9
mov dword [ebp - 0x4dc], 0x37a9a971
mov dword [ebp - 0x3c], 0
jmp 0x1002987f
mov eax, dword [ebp - 0x3c]
inc eax
mov dword [ebp - 0x3c], eax
cmp dword [ebp - 0x3c], 3
jge 0x10029895
mov eax, dword [ebp - 0x3c]
mov dword [ebp + eax*4 - 0x3d8], 1
jmp 0x10029878
mov dword [ebp - 0x3c], 0
jmp 0x100298a5
mov eax, dword [ebp - 0x3c]
inc eax
mov dword [ebp - 0x3c], eax
cmp dword [ebp - 0x3c], 3
jge 0x100298bb
mov eax, dword [ebp - 0x3c]
mov dword [ebp + eax*4 - 0x520], 1
jmp 0x1002989e
push 4
pop eax
shl eax, 1
mov dword [ebp + eax - 0x3d8], 3
jmp 0x100298e6
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x3d8]
dec eax
push 4
pop ecx
shl ecx, 1
mov dword [ebp + ecx - 0x3d8], eax
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0x3d8], 0
jl 0x10029a61
mov dword [ebp - 0x514], 0
mov dword [ebp - 0x260], 0x64c9
mov dword [ebp - 0x354], 0x100082d8
cmp dword [ebp - 0x260], 0x6880
jle 0x1002999b
and dword [ebp - 0xd0], 0
jmp 0x10029939
mov eax, dword [ebp - 0xd0]
inc eax
mov dword [ebp - 0xd0], eax
cmp dword [ebp - 0xd0], 0x33a2
jge 0x1002999b
and dword [ebp - 0xb0], 0
jmp 0x1002995b
mov eax, dword [ebp - 0xb0]
inc eax
mov dword [ebp - 0xb0], eax
cmp dword [ebp - 0xb0], 0x54ce
jge 0x10029999
mov eax, dword [ebp - 0xd0]
imul eax, dword [ebp - 0xb0]
cdq
mov dword [ebp - 0x300], eax
mov dword [ebp - 0x2fc], edx
push dword [ebp - 0x2fc]
push dword [ebp - 0x300]
mov ecx, 0x1060cf38
call fcn.100144da
jmp 0x1002994e
jmp 0x1002992c
mov dword [ebp - 0x4e4], 0xffffffff
mov dword [ebp - 4], 4
cmp dword [ebp - 0x260], 0x6101
jge 0x100299c8
mov edx, dword [ebp - 0x354]
mov ecx, 0x1060cf38
call fcn.10016dcb
jmp 0x100299e4
or dword [ebp - 4], 0xffffffff
jmp 0x100299ee
mov dword [ebp - 0x540], 1
mov dword [ebp - 0x4ec], 0x5f499006
mov dword [ebp - 0x524], 8
mov dword [ebp - 0xf0], 0
jmp 0x10029a25
mov eax, dword [ebp - 0xf0]
inc eax
mov dword [ebp - 0xf0], eax
cmp dword [ebp - 0xf0], 2
jge 0x10029a41
mov eax, dword [ebp - 0xf0]
mov dword [ebp + eax*4 - 0x588], 0xffffffff
jmp 0x10029a18
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x520]
inc eax
push 4
pop ecx
shl ecx, 0
mov dword [ebp + ecx - 0x520], eax
jmp 0x100298cd
mov eax, dword [ebp - 0x5c]
and dword [eax], 0
jmp 0x1002bedc
mov dword [ebp - 0x60], 0x69fdf99f
mov dword [ebp - 0x3f8], 6
mov dword [ebp - 0x3f4], 6
mov dword [ebp - 0x3f0], 6
mov dword [ebp - 0x3ec], 6
lea ecx, [ebp - 0x105]
call fcn.10009e64
push eax
lea eax, [ebp - 0x3e8]
push eax
lea eax, [ebp - 0x3f8]
push eax
lea ecx, [ebp - 0x580]
call fcn.10014809
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0x290]
call fcn.100147e3
mov dword [ebp - 4], 6
mov dword [ebp - 0x1e4], 0x1362
mov dword [ebp - 0x4f4], 0xffffffff
mov dword [ebp - 0x60], 0
jmp 0x10029afb
mov eax, dword [ebp - 0x60]
inc eax
mov dword [ebp - 0x60], eax
cmp dword [ebp - 0x60], 0x10
jle 0x10029cd2
mov dword [ebp - 0x144], 0x5cbd9454
mov dword [ebp - 0x140], 0x5cbd9454
mov dword [ebp - 0x13c], 0x5cbd9454
mov dword [ebp - 0x138], 0x5cbd9454
mov dword [ebp - 0xb8], 2
push 4
pop eax
shl eax, 0
mov dword [ebp + eax - 0x144], 0
jmp 0x10029b65
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x144]
inc eax
push 4
pop ecx
shl ecx, 0
mov dword [ebp + ecx - 0x144], eax
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x144], 3
jg 0x10029bad
push 4
pop eax
shl eax, 0
push dword [ebp + eax - 0x144]
lea ecx, [ebp - 0x290]
call fcn.10009d00
mov esi, eax
push 4
pop eax
shl eax, 0
push dword [ebp + eax - 0x144]
lea ecx, [ebp - 0x290]
call fcn.10009d00
mov eax, dword [eax]
mov dword [esi], eax
jmp 0x10029b4a
mov eax, dword [ebp - 0xb8]
mov dword [ebp - 0x55c], eax
mov eax, dword [ebp - 0x1e4]
mov dword [ebp - 0x498], eax
mov esi, dword [ebp - 0x60]
mov edi, dword [ebp - 0x1e4]
push 0
lea ecx, [ebp - 0x290]
call fcn.10009d00
sub edi, dword [eax]
cmp edi, esi
jle 0x10029bed
mov dword [ebp - 0x258], 1
jmp 0x10029bf4
and dword [ebp - 0x258], 0
imul eax, dword [ebp - 0x60], 0xfffffffe
cmp eax, dword [ebp - 0x258]
jg 0x10029c0c
mov dword [ebp - 0x2a8], 1
jmp 0x10029c13
and dword [ebp - 0x2a8], 0
mov eax, dword [ebp - 0xb8]
mov dword [ebp - 0x49c], eax
push 1
lea ecx, [ebp - 0x290]
call fcn.10009d00
cmp dword [ebp - 0xb8], 0
je 0x10029c55
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x144], 0
je 0x10029c55
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x144], 0
jne 0x10029c67
cmp dword [ebp - 0xb8], 0
jne 0x10029c67
and dword [ebp - 0x154], 0
jmp 0x10029c71
mov dword [ebp - 0x154], 1
push 1
lea ecx, [ebp - 0x290]
call fcn.10009d00
mov ecx, dword [ebp - 0x154]
cmp ecx, dword [eax]
jl 0x10029c94
mov dword [ebp - 0x254], 1
jmp 0x10029c9b
and dword [ebp - 0x254], 0
cmp dword [ebp - 0x254], 0x142b622b
jg 0x10029cb3
mov dword [ebp - 0x15c], 1
jmp 0x10029cba
and dword [ebp - 0x15c], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x15c]
mov dword [ebp + eax - 0x144], ecx
jmp 0x10029af4
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x290]
call fcn.10009ce4
lea eax, [ebp - 0x68]
push eax
push 0
lea eax, [ebp - 0x128]
push eax
push 0x2bf8
lea eax, [ebp - 0x104]
push eax
call fcn.1002e772
add esp, 0x14
mov dword [ebp - 0xd8], 0x2e91a049
mov dword [ebp - 0xd8], 4
jmp 0x10029d25
mov eax, dword [ebp - 0xd8]
inc eax
mov dword [ebp - 0xd8], eax
cmp dword [ebp - 0xd8], 0x15
jle 0x10029da7
mov dword [ebp - 0x88], 0x14768c0a
mov dword [ebp - 0xc0], 0
jmp 0x10029d51
mov eax, dword [ebp - 0xc0]
inc eax
mov dword [ebp - 0xc0], eax
cmp dword [ebp - 0xc0], 1
jge 0x10029d6d
mov eax, dword [ebp - 0xc0]
mov dword [ebp + eax*4 - 0x394], 2
jmp 0x10029d44
mov dword [ebp - 0x88], 0
jmp 0x10029d86
mov eax, dword [ebp - 0x88]
inc eax
mov dword [ebp - 0x88], eax
cmp dword [ebp - 0x88], 1
jge 0x10029da2
mov eax, dword [ebp - 0x88]
mov dword [ebp + eax*4 - 0x394], 0x9ed080c1
jmp 0x10029d79
jmp 0x10029d18
mov eax, dword [ebp - 0x68]
cmp dword [eax], 0x4550
je 0x1002a0bf
push 1
push 0x60cd
push 0x7e9
push 0x4a83
push 1
push 0x1ef3
call fcn.100234a3
add esp, 0x18
mov dword [ebp - 0x48], 0x28ade19d
push 1
lea ecx, [ebp - 0x100]
call fcn.10009c88
mov dword [ebp - 4], 7
mov dword [ebp - 0x120], 0xa9f4f9a
mov dword [ebp - 0x16c], 0x390f3bd7
mov dword [ebp - 0x110], 0xffffffff
mov dword [ebp - 0x2c0], 0
mov dword [ebp - 0x30], 0
jmp 0x10029e29
mov eax, dword [ebp - 0x30]
inc eax
mov dword [ebp - 0x30], eax
cmp dword [ebp - 0x30], 3
jge 0x10029e3f
mov eax, dword [ebp - 0x30]
mov dword [ebp + eax*4 - 0x3cc], 0xe064
jmp 0x10029e22
mov dword [ebp - 0x30], 0
jmp 0x10029e4f
mov eax, dword [ebp - 0x30]
inc eax
mov dword [ebp - 0x30], eax
cmp dword [ebp - 0x30], 1
jge 0x10029e6b
push dword [ebp - 0x30]
lea ecx, [ebp - 0x100]
call fcn.10009d00
mov dword [eax], 0xf4c59cdc
jmp 0x10029e48
mov dword [ebp - 0x48], 0
jmp 0x10029e7b
mov eax, dword [ebp - 0x48]
inc eax
mov dword [ebp - 0x48], eax
cmp dword [ebp - 0x48], 3
jge 0x10029e91
mov eax, dword [ebp - 0x48]
mov dword [ebp + eax*4 - 0x3cc], 0xbe1d
jmp 0x10029e74
push 0
lea ecx, [ebp - 0x100]
call fcn.10009d00
cmp dword [eax], 0
jne 0x10029ff5
push 0
lea ecx, [ebp - 0x100]
call fcn.10009d00
cmp dword [eax], 0
je 0x10029f1d
push 4
pop eax
shl eax, 0
mov esi, dword [ebp + eax - 0x3cc]
push 0
lea ecx, [ebp - 0x100]
call fcn.10009d00
cmp esi, dword [eax]
jle 0x10029ee3
mov dword [ebp - 0x1ec], 1
jmp 0x10029eea
and dword [ebp - 0x1ec], 0
mov eax, dword [ebp - 0x120]
cmp dword [ebp - 0x1ec], eax
jge 0x10029f04
mov dword [ebp - 0x164], 1
jmp 0x10029f0b
and dword [ebp - 0x164], 0
cmp dword [ebp - 0x164], 0xffffffff
jb 0x10029f1d
and dword [ebp - 0x2b0], 0
jmp 0x10029f27
mov dword [ebp - 0x2b0], 1
push 0
lea ecx, [ebp - 0x100]
call fcn.10009d00
cmp dword [eax], 0
jne 0x10029f42
cmp dword [ebp - 0x120], 0
je 0x10029f55
push 6
pop eax
test eax, eax
je 0x10029f55
mov dword [ebp - 0x234], 1
jmp 0x10029f5c
and dword [ebp - 0x234], 0
mov esi, dword [ebp - 0x234]
add esi, 8
push 0
lea ecx, [ebp - 0x100]
call fcn.10009d00
cmp esi, dword [eax]
jle 0x10029f82
mov dword [ebp - 0x39c], 1
jmp 0x10029f89
and dword [ebp - 0x39c], 0
mov eax, dword [ebp - 0x48]
mov dword [ebp - 0x48], eax
mov eax, dword [ebp - 0x48]
mov dword [ebp - 0x4a4], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x3cc]
mov dword [ebp - 0x16c], eax
mov esi, dword [ebp - 0x16c]
push 0
lea ecx, [ebp - 0x100]
call fcn.10009d00
cmp dword [eax], esi
jne 0x10029fce
mov dword [ebp - 0x1f4], 1
jmp 0x10029fd5
and dword [ebp - 0x1f4], 0
push 0
lea ecx, [ebp - 0x100]
call fcn.10009d00
mov ecx, dword [ebp - 0x1f4]
add ecx, dword [eax]
jne 0x10029ff5
and dword [ebp - 0x174], 0
jmp 0x10029fff
mov dword [ebp - 0x174], 1
mov eax, dword [ebp - 0x120]
cmp dword [ebp - 0x174], eax
jne 0x1002a019
mov dword [ebp - 0x2b8], 1
jmp 0x1002a020
and dword [ebp - 0x2b8], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x3cc]
mov dword [ebp - 0x4ac], eax
mov esi, dword [ebp - 0x110]
push 0
lea ecx, [ebp - 0x100]
call fcn.10009d00
cmp esi, dword [eax]
jge 0x1002a056
mov dword [ebp - 0x360], 1
jmp 0x1002a05d
and dword [ebp - 0x360], 0
push 0
lea ecx, [ebp - 0x100]
call fcn.10009d00
mov eax, 0x336
imul eax, eax, 0xffff
sub eax, dword [ebp - 0x110]
jne 0x1002a08f
cmp dword [ebp - 0x110], 0
jne 0x1002a08f
and dword [ebp - 0x284], 0
jmp 0x1002a099
mov dword [ebp - 0x284], 1
mov eax, dword [ebp - 0x284]
mov dword [ebp - 0x2c0], eax
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x100]
call fcn.10009ce4
mov eax, dword [ebp - 0x5c]
and dword [eax], 0
jmp 0x1002bedc
lea eax, [ebp - 0x68]
push eax
push 0x6889
push 1
push 0x3ee8
push 0xecd
lea eax, [ebp - 0xdc]
push eax
push 0x7906
push 0x72e9
push 1
push 0x1f1
push 0
call fcn.10020133
add esp, 0x2c
mov dword [ebp - 0x80], 0xa8eac8b
push 1
lea ecx, [ebp - 0x418]
call fcn.10009c88
mov dword [ebp - 4], 8
push 3
lea ecx, [ebp - 0x490]
call fcn.10009c88
mov byte [ebp - 4], 9
mov dword [ebp - 0x494], 0xb786
lea eax, [ebp - 0x418]
push eax
lea eax, [ebp - 0x70]
push eax
push 1
push 0x7380
push 0
call fcn.1002e144
add esp, 0x14
mov dword [ebp - 0x70], 0
jmp 0x1002a158
mov eax, dword [ebp - 0x70]
inc eax
mov dword [ebp - 0x70], eax
cmp dword [ebp - 0x70], 3
jge 0x1002a174
push dword [ebp - 0x70]
lea ecx, [ebp - 0x490]
call fcn.10009d00
mov dword [eax], 0xfe1f230b
jmp 0x1002a151
mov dword [ebp - 0x80], 0
jmp 0x1002a184
mov eax, dword [ebp - 0x80]
dec eax
mov dword [ebp - 0x80], eax
cmp dword [ebp - 0x80], 0xffffffe9
jne 0x1002a213
mov dword [ebp - 0x380], 0xfffffffe
mov dword [ebp - 0x2c8], 5
mov dword [ebp - 0xe8], 0
jmp 0x1002a1bb
mov eax, dword [ebp - 0xe8]
inc eax
mov dword [ebp - 0xe8], eax
cmp dword [ebp - 0xe8], 2
jge 0x1002a1d7
mov eax, dword [ebp - 0xe8]
mov dword [ebp + eax*4 - 0x590], 0
jmp 0x1002a1ae
lea eax, [ebp - 0x80]
push eax
push 0x7f38
lea eax, [ebp - 0x380]
push eax
lea eax, [ebp - 0x2c8]
push eax
push 0x686e
push 1
push 1
push 0x12e0
push 0x423f
push 0x4dff
call fcn.1001e06b
add esp, 0x28
jmp 0x1002a17d
push 1
lea ecx, [ebp - 0x490]
call fcn.10009d00
cmp dword [eax], 1
jg 0x1002a231
mov dword [ebp - 0x17c], 1
jmp 0x1002a238
and dword [ebp - 0x17c], 0
cmp dword [ebp - 0x17c], 0
je 0x1002a24d
mov dword [ebp - 0x1fc], 1
jmp 0x1002a254
and dword [ebp - 0x1fc], 0
push 0
lea ecx, [ebp - 0x418]
call fcn.10009d00
mov ecx, dword [ebp - 0x1fc]
mov dword [eax], ecx
mov byte [ebp - 4], 8
lea ecx, [ebp - 0x490]
call fcn.10009ce4
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x418]
call fcn.10009ce4
cmp dword [ebp - 0xdc], 0
jne 0x1002a474
mov dword [ebp - 0xa0], 0x3b26bdde
mov dword [ebp - 0xc8], 0
jmp 0x1002a2b7
mov eax, dword [ebp - 0xc8]
inc eax
mov dword [ebp - 0xc8], eax
cmp dword [ebp - 0xc8], 1
jge 0x1002a2d3
mov eax, dword [ebp - 0xc8]
mov dword [ebp + eax*4 - 0x2d0], 5
jmp 0x1002a2aa
mov dword [ebp - 0xa0], 0xfffffffd
jmp 0x1002a2ec
mov eax, dword [ebp - 0xa0]
dec eax
mov dword [ebp - 0xa0], eax
cmp dword [ebp - 0xa0], 0xffffffea
je 0x1002a447
mov dword [ebp - 0x38], 0xfffffffa
mov dword [ebp - 0xac], 0
mov dword [ebp - 0x38], 0xfffffff5
jmp 0x1002a31a
mov eax, dword [ebp - 0x38]
dec eax
mov dword [ebp - 0x38], eax
cmp dword [ebp - 0x38], 0xfffffff4
jl 0x1002a3d5
mov dword [ebp - 0xa4], 0x9fb023ed
mov dword [ebp - 0xa4], 0
jmp 0x1002a347
mov eax, dword [ebp - 0xa4]
dec eax
mov dword [ebp - 0xa4], eax
cmp dword [ebp - 0xa4], 0xffffffef
je 0x1002a38f
mov dword [ebp - 0x368], 0x9b4e
push 0x4bf3
push 1
push 0x6c4a
push 0x11d1
push 1
push 0x4349
push 1
lea eax, [ebp - 0x368]
push eax
push 0x5c2a
push 0x449e
call fcn.10023699
add esp, 0x28
jmp 0x1002a33a
mov byte [ebp - 0x49], 0
push 0x3154
push 0x2785
push 0x502f
push 0x2148
push 0x5c72
push 0x69df
push 0x44fb
push 0x3a9e
push 1
lea eax, [ebp - 0x49]
push eax
push 1
push 0x3956
call fcn.1001e1d6
add esp, 0x30
jmp 0x1002a313
mov dword [ebp - 0xac], 0
jmp 0x1002a3ee
mov eax, dword [ebp - 0xac]
dec eax
mov dword [ebp - 0xac], eax
cmp dword [ebp - 0xac], 0xfffffff2
jg 0x1002a442
mov dword [ebp - 0x38], 0
jmp 0x1002a407
mov eax, dword [ebp - 0x38]
dec eax
mov dword [ebp - 0x38], eax
cmp dword [ebp - 0x38], 0xfffffff4
jle 0x1002a421
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x2d0], 0
je 0x1002a41f
jmp 0x1002a421
jmp 0x1002a400
push 0
push 0x1094
push 0x1312
lea eax, [ebp - 0x38]
push eax
push 0x4b46
push 1
call fcn.100278a5
add esp, 0x18
jmp 0x1002a3e1
jmp 0x1002a2df
push 0x2285
push 0x13b
push 0x51d3
push 1
push 1
push 0x1233
push 0
call fcn.1002bfed
add esp, 0x1c
mov eax, dword [ebp - 0x5c]
and dword [eax], 0
jmp 0x1002bedc
mov dword [ebp - 0xbc], 0xeb6b9dd9
mov dword [ebp - 0x118], 0x9a5a40f2
mov dword [ebp - 0x19c], 0
mov dword [ebp - 0x204], 1
mov dword [ebp - 0x25c], 0x88c5540f
mov dword [ebp - 0x390], 0x2190
cmp dword [ebp - 0x390], 0x65e
jge 0x1002a5d2
lea eax, [ebp - 0x130]
push eax
mov ecx, 0x1060d058
call fcn.1002f8ea
push dword [ebp - 0x130]
lea ecx, [ebp - 0x340]
call fcn.10009c88
mov dword [ebp - 4], 0xa
and dword [ebp - 0xb4], 0
jmp 0x1002a4ff
mov eax, dword [ebp - 0xb4]
inc eax
mov dword [ebp - 0xb4], eax
mov eax, dword [ebp - 0xb4]
cmp eax, dword [ebp - 0x130]
jge 0x1002a52b
push dword [ebp - 0xb4]
lea ecx, [ebp - 0x340]
call fcn.10009d00
push eax
mov ecx, 0x1060d058
call fcn.1002f8ea
jmp 0x1002a4f2
mov byte [ebp - 0x1d], 0
and dword [ebp - 0x78], 0
jmp 0x1002a53c
mov eax, dword [ebp - 0x78]
inc eax
mov dword [ebp - 0x78], eax
mov eax, dword [ebp - 0x78]
cmp eax, dword [ebp - 0x130]
jge 0x1002a583
push dword [ebp - 0x78]
lea ecx, [ebp - 0x340]
call fcn.10009d00
mov eax, dword [eax]
dec eax
push eax
lea ecx, [ebp - 0x340]
call fcn.10009d00
mov eax, dword [eax]
dec eax
push eax
lea ecx, [ebp - 0x340]
call fcn.10009d00
mov eax, dword [eax]
dec eax
cmp dword [ebp - 0x78], eax
jne 0x1002a581
mov byte [ebp - 0x1d], 1
jmp 0x1002a583
jmp 0x1002a535
movzx eax, byte [ebp - 0x1d]
test eax, eax
je 0x1002a5a8
push 0x100319c7
mov edx, 0x10008344
mov ecx, 0x1060cf38
call fcn.10016dcb
mov ecx, eax
call fcn.1002fbeb
jmp 0x1002a5c3
push 0x100319c7
mov edx, 0x10008348
mov ecx, 0x1060cf38
call fcn.10016dcb
mov ecx, eax
call fcn.1002fbeb
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x340]
call fcn.10009ce4
mov dword [ebp - 0x4bc], 0xfffffffe
mov dword [ebp - 0x2c], 0
jmp 0x1002a5ec
mov eax, dword [ebp - 0x2c]
inc eax
mov dword [ebp - 0x2c], eax
cmp dword [ebp - 0x2c], 1
jge 0x1002a5ff
mov eax, dword [ebp - 0x2c]
mov dword [ebp + eax*4 - 0x44], 0
jmp 0x1002a5e5
mov dword [ebp - 0x2c], 0
jmp 0x1002a60f
mov eax, dword [ebp - 0x2c]
inc eax
mov dword [ebp - 0x2c], eax
cmp dword [ebp - 0x2c], 4
jge 0x1002a625
mov eax, dword [ebp - 0x2c]
mov dword [ebp + eax*4 - 0x56c], 0
jmp 0x1002a608
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x44]
mov dword [ebp - 0x4c4], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x44], 0x3384
jl 0x1002a651
mov dword [ebp - 0x184], 1
jmp 0x1002a658
and dword [ebp - 0x184], 0
mov eax, dword [ebp - 0x184]
mov dword [ebp - 0xbc], eax
cmp dword [ebp - 0xbc], 0
jne 0x1002a683
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x44]
inc eax
jne 0x1002a683
and dword [ebp - 0x23c], 0
jmp 0x1002a68d
mov dword [ebp - 0x23c], 1
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x44]
cmp dword [ebp - 0x23c], eax
jg 0x1002a6ab
mov dword [ebp - 0x18c], 1
jmp 0x1002a6b2
and dword [ebp - 0x18c], 0
mov eax, dword [ebp - 0x18c]
inc eax
mov dword [ebp - 0x118], eax
cmp dword [ebp - 0x19c], 0
jne 0x1002a75b
cmp dword [ebp - 0x204], 0
jne 0x1002a73d
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x44]
mov dword [ebp - 0x118], eax
mov eax, dword [ebp - 0x118]
mov dword [ebp - 0x4d0], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x44], 1
jne 0x1002a710
cmp dword [ebp - 0x204], 0
jne 0x1002a710
and dword [ebp - 0x194], 0
jmp 0x1002a71a
mov dword [ebp - 0x194], 1
mov eax, dword [ebp - 0x194]
mov dword [ebp - 0x25c], eax
mov eax, dword [ebp - 0x25c]
add eax, dword [ebp - 0x19c]
jne 0x1002a73d
and dword [ebp - 0x20c], 0
jmp 0x1002a747
mov dword [ebp - 0x20c], 1
mov eax, dword [ebp - 0x20c]
sub eax, 3
jne 0x1002a75b
and dword [ebp - 0x1a4], 0
jmp 0x1002a765
mov dword [ebp - 0x1a4], 1
push 4
pop eax
imul eax, eax, 3
push 4
pop ecx
imul ecx, ecx, 3
push 4
pop edx
imul edx, edx, 0
mov esi, dword [ebp - 0x1a4]
sub esi, dword [ebp + edx - 0x44]
neg esi
sub esi, dword [ebp - 0xbc]
sub esi, dword [ebp + ecx - 0x56c]
cmp esi, dword [ebp + eax - 0x56c]
je 0x1002a7a5
mov dword [ebp - 0x2d8], 1
jmp 0x1002a7ac
and dword [ebp - 0x2d8], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x44]
mov dword [ebp - 0xbc], eax
push 0x1cc8
lea eax, [ebp - 0xdc]
push eax
lea eax, [ebp - 0x128]
push eax
lea eax, [ebp - 0x68]
push eax
push 1
push 1
push 0x60c9
push 0x5f3
lea eax, [ebp - 0x4d8]
push eax
lea eax, [ebp - 0x28]
push eax
push 0x4f40
call fcn.1002394f
add esp, 0x2c
mov dword [ebp - 0x2f0], 0xdd688769
mov dword [ebp - 0x2e0], 0x3b7c
mov dword [ebp - 0x378], 0xe469209a
mov dword [ebp - 0x2e8], 0xacb2d505
mov dword [ebp - 0x388], 0x996fd0fe
push 4
lea ecx, [ebp - 0x43c]
call fcn.10009c88
mov dword [ebp - 4], 0xb
mov dword [ebp - 0x244], 0
mov dword [ebp - 0x370], 0xffffffff
mov dword [ebp - 0x358], 1
push 0x4cd0
push 1
lea eax, [ebp - 0x43c]
push eax
push 0x1653
push 1
lea eax, [ebp - 0x4e0]
push eax
push 0x5d12
call fcn.10023a74
add esp, 0x1c
push 0x559f
push 0x6ccc
push 0x46
lea eax, [ebp - 0x370]
push eax
lea eax, [ebp - 0x2e0]
push eax
push 0x3b26
lea eax, [ebp - 0x388]
push eax
push 1
push 0x2683
push 0x7250
lea eax, [ebp - 0x2e8]
push eax
push 0x51c5
lea eax, [ebp - 0x43c]
push eax
lea eax, [ebp - 0x378]
push eax
lea eax, [ebp - 0x244]
push eax
push 1
lea eax, [ebp - 0x2f0]
push eax
call fcn.10023c6e
add esp, 0x44
push 0x5396
push 0x4caa
lea eax, [ebp - 0x244]
push eax
lea eax, [ebp - 0x358]
push eax
push 1
push 0x5fbc
push 1
push 0x4edb
call fcn.1001e2d7
add esp, 0x20
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x43c]
call fcn.10009ce4
push 0x6468
push 1
push 0xc8a
lea eax, [ebp - 0x104]
push eax
lea eax, [ebp - 0x68]
push eax
push 1
push 0x32
push 1
lea eax, [ebp - 0x28]
push eax
push 0xf89
call fcn.100240e0
add esp, 0x28
push 0
lea eax, [ebp - 0xdc]
push eax
push 1
lea eax, [ebp - 0x1ac]
push eax
lea eax, [ebp - 0x68]
push eax
push 0x2dd9
call fcn.1002c19d
add esp, 0x18
mov dword [ebp - 0x40c], 8
mov dword [ebp - 0x408], 8
mov dword [ebp - 0x404], 8
mov dword [ebp - 0x400], 8
lea ecx, [ebp - 0x131]
call fcn.10009e64
push eax
lea eax, [ebp - 0x3fc]
push eax
lea eax, [ebp - 0x40c]
push eax
lea ecx, [ebp - 0x598]
call fcn.10014809
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0x530]
call fcn.100147e3
mov dword [ebp - 4], 0xc
push 0x3ba7
push 1
push 0x6381
lea eax, [ebp - 0x530]
push eax
push 0x361e
push 1
push 0x198f
call fcn.10024654
add esp, 0x1c
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x530]
call fcn.10009ce4
cmp dword [ebp - 0x1ac], 0
je 0x1002ab2b
push 2
lea ecx, [ebp - 0x46c]
call fcn.10009c88
mov dword [ebp - 4], 0xd
mov dword [ebp - 0x2f8], 0x54207647
mov dword [ebp - 0x35c], 3
push 0x487f
push 1
push 1
push 0x662b
lea eax, [ebp - 0x4e8]
push eax
push 0
lea eax, [ebp - 0x46c]
push eax
push 0x1b9d
push 0x5a95
call fcn.10028201
add esp, 0x24
push 0
lea eax, [ebp - 0x46c]
push eax
push 0x3682
push 1
push 0x1385
lea eax, [ebp - 0x2f8]
push eax
lea eax, [ebp - 0x35c]
push eax
push 0x4ea3
call fcn.10022e7a
add esp, 0x20
push 0x4160
push 0x7bbb
push 0x1fff
push 0
push 0x3885
push 0x69ef
push 0x1c91
push 1
push 0xc66
push 0x6d51
call fcn.10028b5e
add esp, 0x28
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x46c]
call fcn.10009ce4
push 1
push 0x1dfd
push 0x6bd8
push 0
lea eax, [ebp - 0x28]
push eax
push 0x46d8
push 0x651c
push 1
push 0x9de
lea eax, [ebp - 0x1ac]
push eax
push 0x5520
push 0x1e09
push 0x5a28
call fcn.10021cba
add esp, 0x34
mov dword [ebp - 0xc4], 0x2e91a049
mov dword [ebp - 0x294], 0x8764
mov dword [ebp - 0x36c], 0xeac691c6
mov dword [ebp - 0x374], 0x62da72df
mov byte [ebp - 0x4a], 0
push 1
push 0x6a8f
lea eax, [ebp - 0x4a]
push eax
push 0x2780
push 0x7747
push 1
call fcn.100278a5
add esp, 0x18
mov dword [ebp - 0xc4], 0xffffffe8
jmp 0x1002ab8f
mov eax, dword [ebp - 0xc4]
inc eax
mov dword [ebp - 0xc4], eax
cmp dword [ebp - 0xc4], 0xffffffed
jle 0x1002ac74
push 1
lea ecx, [ebp - 0x454]
call fcn.10009c88
mov dword [ebp - 4], 0xe
mov dword [ebp - 0x314], 0xfffffffa
mov dword [ebp - 0x364], 0
mov dword [ebp - 0x30c], 0x4309e953
push 1
push 1
lea eax, [ebp - 0x454]
push eax
push 0x433f
push 0
push 0x7997
push 0x2bab
push 0x631f
lea eax, [ebp - 0x4f0]
push eax
push 0x8e4
call fcn.10028ed9
add esp, 0x28
lea eax, [ebp - 0x294]
push eax
push 1
push 0x43ad
lea eax, [ebp - 0x454]
push eax
lea eax, [ebp - 0x364]
push eax
push 0x1205
push 1
push 0x261f
push 0x6389
push 0x5175
lea eax, [ebp - 0x30c]
push eax
lea eax, [ebp - 0x36c]
push eax
push 0x4b9d
lea eax, [ebp - 0x314]
push eax
lea eax, [ebp - 0x374]
push eax
push 1
call fcn.10027a5d
add esp, 0x40
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x454]
call fcn.10009ce4
jmp 0x1002ab82
push dword [ebp - 0x28]
call fcn.1001cebb
pop ecx
test eax, eax
jne 0x1002ad9a
push 1
lea ecx, [ebp - 0x430]
call fcn.10009c88
mov dword [ebp - 4], 0xf
mov dword [ebp - 0x4f8], 0xffffffff
push 4
lea ecx, [ebp - 0x424]
call fcn.10009c88
mov byte [ebp - 4], 0x10
mov dword [ebp - 0x31c], 0xd4c3
mov dword [ebp - 0x6c], 0
jmp 0x1002acce
mov eax, dword [ebp - 0x6c]
inc eax
mov dword [ebp - 0x6c], eax
cmp dword [ebp - 0x6c], 1
jge 0x1002acea
push dword [ebp - 0x6c]
lea ecx, [ebp - 0x430]
call fcn.10009d00
mov dword [eax], 0x48bbca63
jmp 0x1002acc7
lea eax, [ebp - 0x424]
push eax
lea eax, [ebp - 0x6c]
push eax
push 0x4371
push 0
call fcn.1002e358
add esp, 0x10
mov byte [ebp - 0x55], 0
push 1
push 0x5b6e
push 1
push 0x5f97
push 0x7ef7
lea eax, [ebp - 0x55]
push eax
push 0x71b8
push 0x4c91
push 1
push 0x496f
call fcn.10028063
add esp, 0x28
push 0x1ea6
push 0x4234
push 1
push 0x7653
lea eax, [ebp - 0x430]
push eax
push 0x4b
push 0x5b8e
lea eax, [ebp - 0x424]
push eax
push 1
lea eax, [ebp - 0x31c]
push eax
push 1
call fcn.10020133
add esp, 0x2c
mov byte [ebp - 4], 0xf
lea ecx, [ebp - 0x424]
call fcn.10009ce4
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x430]
call fcn.10009ce4
mov eax, dword [ebp - 0x5c]
and dword [eax], 0
jmp 0x1002bedc
mov dword [ebp - 0x7c], 0xd4e06482
push 1
lea ecx, [ebp - 0x350]
call fcn.10009c88
mov dword [ebp - 4], 0x11
mov dword [ebp - 0x37c], 0xff12
push 1
push 0x62b2
push 0
push 0x12af
lea eax, [ebp - 0x500]
push eax
push 0x1da7
push 0x78c
lea eax, [ebp - 0x350]
push eax
push 1
push 0x46c5
call fcn.10028063
add esp, 0x28
mov dword [ebp - 0x7c], 0
jmp 0x1002ae04
mov eax, dword [ebp - 0x7c]
dec eax
mov dword [ebp - 0x7c], eax
cmp dword [ebp - 0x7c], 0xfffffff3
jl 0x1002af70
mov dword [ebp - 0x74], 0xe662db8e
mov dword [ebp - 0x94], 0
jmp 0x1002ae2e
mov eax, dword [ebp - 0x94]
inc eax
mov dword [ebp - 0x94], eax
cmp dword [ebp - 0x94], 3
jge 0x1002ae4a
mov eax, dword [ebp - 0x94]
mov dword [ebp + eax*4 - 0x3c0], 0xd4f2887c
jmp 0x1002ae21
mov eax, 0x7412
test eax, eax
je 0x1002ae6e
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0x3c0], 0
je 0x1002ae6e
mov dword [ebp - 0x214], 1
jmp 0x1002ae75
and dword [ebp - 0x214], 0
push 4
pop eax
shl eax, 1
mov ecx, dword [ebp - 0x214]
inc ecx
cmp ecx, dword [ebp + eax - 0x3c0]
jg 0x1002ae96
mov dword [ebp - 0x1b4], 1
jmp 0x1002ae9d
and dword [ebp - 0x1b4], 0
cmp dword [ebp - 0x1b4], 0x7e4
jg 0x1002aeb5
mov dword [ebp - 0x274], 1
jmp 0x1002aebc
and dword [ebp - 0x274], 0
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x3c0]
cmp eax, dword [ebp - 0x274]
jl 0x1002aedc
mov dword [ebp - 0x1bc], 1
jmp 0x1002aee3
and dword [ebp - 0x1bc], 0
cmp dword [ebp - 0x1bc], 0xfffffffa
ja 0x1002aef8
mov dword [ebp - 0x21c], 1
jmp 0x1002aeff
and dword [ebp - 0x21c], 0
push 0
lea ecx, [ebp - 0x350]
call fcn.10009d00
mov ecx, dword [ebp - 0x21c]
mov dword [eax], ecx
mov dword [ebp - 0x74], 0
jmp 0x1002af24
mov eax, dword [ebp - 0x74]
inc eax
mov dword [ebp - 0x74], eax
cmp dword [ebp - 0x74], 2
jg 0x1002af6b
lea eax, [ebp - 0x37c]
push eax
push 1
push 1
lea eax, [ebp - 0x350]
push eax
push 0x5f06
push 1
push 0x10ea
push 0x9da
push 0x2e43
call fcn.10028201
add esp, 0x24
mov eax, dword [ebp - 0x74]
cmp dword [ebp + eax*4 - 0x3c0], 0
je 0x1002af69
jmp 0x1002af6b
jmp 0x1002af1d
jmp 0x1002adfd
push 0x20c6
push 1
push 1
push 0x1a4
push 0x4749
push 0xe8d
lea eax, [ebp - 0x7c]
push eax
lea eax, [ebp - 0x350]
push eax
call fcn.10028370
add esp, 0x20
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x350]
call fcn.10009ce4
push 0x389b
lea eax, [ebp - 0x28]
push eax
push 1
push 0xb45
push 1
push 0x5167
call fcn.100213dc
add esp, 0x18
mov eax, dword [ebp - 0x28]
mov eax, dword [eax]
cmp dword [eax + 0x28], 0
je 0x1002bc69
mov dword [ebp - 0x14], 0
mov dword [ebp - 0x298], 0xf0f592b0
mov dword [ebp - 0x508], 0xfffffffd
mov dword [ebp - 0x124], 0xa577dc96
mov dword [ebp - 0x160], 0
mov dword [ebp - 0x12c], 0xffffffff
mov dword [ebp - 0x178], 0x94cf7123
mov dword [ebp - 0x2a4], 0
mov dword [ebp - 0x98], 0
jmp 0x1002b03e
mov eax, dword [ebp - 0x98]
inc eax
mov dword [ebp - 0x98], eax
cmp dword [ebp - 0x98], 1
jge 0x1002b057
mov eax, dword [ebp - 0x98]
mov dword [ebp + eax*4 - 0x18], 0xd5f8d9a2
jmp 0x1002b031
mov eax, 0x3d1f30a9
test eax, eax
je 0x1002b0a1
mov dword [ebp - 0x324], 0xffffffff
mov dword [ebp - 0x384], 0x9cd329b3
lea eax, [ebp - 0x14]
push eax
push 0
lea eax, [ebp - 0x324]
push eax
lea eax, [ebp - 0x384]
push eax
push 1
push 0x1b33
push 0x25c3
call fcn.10022463
add esp, 0x1c
jmp 0x1002b3ed
mov dword [ebp - 0x10c], 0xfffffffc
mov dword [ebp - 0xd4], 0
jmp 0x1002b0c4
mov eax, dword [ebp - 0xd4]
inc eax
mov dword [ebp - 0xd4], eax
cmp dword [ebp - 0xd4], 1
jge 0x1002b0e0
mov eax, dword [ebp - 0xd4]
mov dword [ebp + eax*4 - 0x114], 0xd4d14b71
jmp 0x1002b0b7
mov dword [ebp - 0x14], 0
jmp 0x1002b0f0
mov eax, dword [ebp - 0x14]
inc eax
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 0
jg 0x1002b3ed
push 3
lea ecx, [ebp - 0x448]
call fcn.10009c88
mov dword [ebp - 4], 0x12
push 2
lea ecx, [ebp - 0x3b4]
call fcn.10009c88
mov byte [ebp - 4], 0x13
lea eax, [ebp - 0x334]
push eax
push 1
push 0x7255
push 0x5726
lea eax, [ebp - 0x448]
push eax
push 0x3403
push 0x7b0a
push 1
call fcn.100285da
add esp, 0x20
lea eax, [ebp - 0x334]
push eax
push 1
push 1
lea eax, [ebp - 0x3b4]
push eax
call fcn.100286f0
add esp, 0x10
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp + eax*4 - 0x18]
mov dword [ebp - 0x510], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x18], 0
je 0x1002b197
mov eax, dword [ebp - 0x14]
cmp dword [ebp + eax*4 - 0x18], 0
je 0x1002b197
mov dword [ebp - 0x1c4], 1
jmp 0x1002b19e
and dword [ebp - 0x1c4], 0
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp + eax*4 - 0x18]
cmp dword [ebp - 0x1c4], eax
je 0x1002b1b9
mov dword [ebp - 0x38c], 1
jmp 0x1002b1c0
and dword [ebp - 0x38c], 0
mov eax, dword [ebp - 0x10c]
mov dword [ebp - 0x544], eax
mov eax, dword [ebp - 0x10c]
mov dword [ebp - 0x548], eax
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp + eax*4 - 0x18]
sub eax, dword [ebp - 0x14]
mov ecx, dword [ebp - 0x14]
cmp dword [ebp + ecx*4 - 0x18], eax
je 0x1002b1f7
mov dword [ebp - 0x24c], 1
jmp 0x1002b1fe
and dword [ebp - 0x24c], 0
mov eax, dword [ebp - 0x24c]
add eax, 0xa7f
cmp eax, dword [ebp - 0x10c]
jg 0x1002b21d
mov dword [ebp - 0x344], 1
jmp 0x1002b224
and dword [ebp - 0x344], 0
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp + eax*4 - 0x18]
mov dword [ebp - 0x53c], eax
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0x114], 6
mov eax, dword [ebp - 0x14]
cmp dword [ebp + eax*4 - 0x18], 6
jge 0x1002b25a
mov eax, dword [ebp - 0x14]
cmp dword [ebp + eax*4 - 0x18], 0
je 0x1002b3a2
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x114], 0xffffffff
je 0x1002b276
mov dword [ebp - 0x1cc], 1
jmp 0x1002b27d
and dword [ebp - 0x1cc], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x18]
cmp dword [ebp - 0x1cc], eax
jge 0x1002b29b
mov dword [ebp - 0x224], 1
jmp 0x1002b2a2
and dword [ebp - 0x224], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x18]
imul eax, dword [ebp - 0x224]
mov dword [ebp - 0x1d4], eax
push 1
lea ecx, [ebp - 0x448]
call fcn.10009d00
mov ecx, dword [ebp - 0x1d4]
mov dword [eax], ecx
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x18]
cmp eax, dword [ebp - 0x1d4]
jle 0x1002b2ec
mov dword [ebp - 0x11c], 1
jmp 0x1002b2f3
and dword [ebp - 0x11c], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x11c]
mov dword [ebp + eax - 0x114], ecx
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp + eax*4 - 0x18]
cmp dword [ebp - 0x11c], eax
je 0x1002b321
mov dword [ebp - 0x264], 1
jmp 0x1002b328
and dword [ebp - 0x264], 0
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp + eax*4 - 0x18]
cmp eax, dword [ebp - 0x264]
jne 0x1002b343
mov dword [ebp - 0x1dc], 1
jmp 0x1002b34a
and dword [ebp - 0x1dc], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x18]
cmp eax, dword [ebp - 0x1dc]
jne 0x1002b368
mov dword [ebp - 0x22c], 1
jmp 0x1002b36f
and dword [ebp - 0x22c], 0
cmp dword [ebp - 0x22c], 1
jb 0x1002b384
mov dword [ebp - 0x14c], 1
jmp 0x1002b38b
and dword [ebp - 0x14c], 0
push 0
lea ecx, [ebp - 0x3b4]
call fcn.10009d00
mov ecx, dword [ebp - 0x14c]
mov dword [eax], ecx
jmp 0x1002b3ca
push 0x1602
push 1
push 0xa23
push 1
call fcn.10028798
add esp, 0x10
mov esi, dword [ebp - 0x14]
push 0
lea ecx, [ebp - 0x3b4]
call fcn.10009d00
mov dword [eax], esi
mov byte [ebp - 4], 0x12
lea ecx, [ebp - 0x3b4]
call fcn.10009ce4
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x448]
call fcn.10009ce4
jmp 0x1002b0e9
mov dword [ebp - 0x124], 1
cmp dword [ebp - 0x124], 0xfffc
ja 0x1002b40f
mov dword [ebp - 0x150], 1
jmp 0x1002b416
and dword [ebp - 0x150], 0
cmp dword [ebp - 0x150], 0x6159332c
jle 0x1002b437
mov eax, 0xb122
test eax, eax
je 0x1002b437
mov dword [ebp - 0x158], 1
jmp 0x1002b43e
and dword [ebp - 0x158], 0
mov eax, dword [ebp - 0x158]
mov dword [ebp - 0x160], eax
mov eax, dword [ebp - 0x160]
imul eax, dword [ebp - 0x14]
test eax, eax
jne 0x1002b46a
cmp dword [ebp - 0x298], 0
jne 0x1002b46a
and dword [ebp - 0x29c], 0
jmp 0x1002b474
mov dword [ebp - 0x29c], 1
mov eax, dword [ebp - 0x12c]
mov dword [ebp - 0x4fc], eax
mov eax, dword [ebp - 0x124]
mov dword [ebp - 0x4a0], eax
cmp dword [ebp - 0x12c], 0xffffffff
jg 0x1002b4a1
mov dword [ebp - 0x168], 1
jmp 0x1002b4a8
and dword [ebp - 0x168], 0
mov eax, dword [ebp - 0x12c]
cmp dword [ebp - 0x168], eax
jg 0x1002b4c2
mov dword [ebp - 0x170], 1
jmp 0x1002b4c9
and dword [ebp - 0x170], 0
mov eax, dword [ebp - 0x170]
mov dword [ebp - 0x178], eax
cmp dword [ebp - 0x178], 0xf49da2b6
jne 0x1002b4ed
mov dword [ebp - 0x180], 1
jmp 0x1002b4f4
and dword [ebp - 0x180], 0
cmp dword [ebp - 0x180], 0xf2e326e2
jae 0x1002b50c
mov dword [ebp - 0x188], 1
jmp 0x1002b513
and dword [ebp - 0x188], 0
mov eax, dword [ebp - 0x14]
imul eax, dword [ebp - 0x188]
cmp eax, dword [ebp - 0x14]
jg 0x1002b52e
mov dword [ebp - 0x190], 1
jmp 0x1002b535
and dword [ebp - 0x190], 0
mov eax, dword [ebp - 0x190]
mov dword [ebp - 0x2a4], eax
mov eax, dword [ebp - 0x28]
mov eax, dword [eax]
mov ecx, dword [ebp - 0xdc]
add ecx, dword [eax + 0x28]
mov dword [ebp - 0x198], ecx
mov dword [ebp - 0x534], 0x24039b64
mov dword [ebp - 0x4a8], 0x3d837bc7
mov dword [ebp - 0x504], 3
mov dword [ebp - 0x4b0], 0xfffffff8
push 3
lea ecx, [ebp - 0x460]
call fcn.10009c88
mov dword [ebp - 4], 0x14
lea eax, [ebp - 0x538]
push eax
push 1
push 0x175f
push 0
push 0x3505
lea eax, [ebp - 0x460]
push eax
push 0x5609
push 0x539b
push 0x7363
push 0x44d0
push 0x1c35
push 0xe4b
push 0x6959
push 0x273e
call fcn.10022a48
add esp, 0x38
push 0
lea eax, [ebp - 0x460]
push eax
call fcn.1002ea40
pop ecx
pop ecx
mov byte [ebp - 0x4d], 0
push 0x52c5
push 0
push 0x1598
push 0x4a8b
push 1
push 0x5814
lea eax, [ebp - 0x4d]
push eax
call fcn.1002bf1c
add esp, 0x1c
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x460]
call fcn.10009ce4
cmp dword [ebp - 0x198], 0
jne 0x1002b69e
mov dword [ebp - 0x84], 9
mov dword [ebp - 0x84], 0
jmp 0x1002b650
mov eax, dword [ebp - 0x84]
inc eax
mov dword [ebp - 0x84], eax
cmp dword [ebp - 0x84], 0xf
je 0x1002b693
mov byte [ebp - 0x4e], 0
push 0x6899
lea eax, [ebp - 0x4e]
push eax
push 1
push 0x1a70
push 1
push 0x6387
push 0x1c0e
push 0x1cc5
call fcn.10028856
add esp, 0x20
cmp dword [ebp - 0x84], 0
je 0x1002b691
jmp 0x1002b643
jmp 0x1002b643
mov eax, dword [ebp - 0x5c]
and dword [eax], 0
jmp 0x1002bedc
mov dword [ebp - 0xe4], 6
mov dword [ebp - 0x40], 0
jmp 0x1002b6b8
mov eax, dword [ebp - 0x40]
inc eax
mov dword [ebp - 0x40], eax
cmp dword [ebp - 0x40], 1
jge 0x1002b6ce
mov eax, dword [ebp - 0x40]
mov dword [ebp + eax*4 - 0x4b8], 1
jmp 0x1002b6b1
mov dword [ebp - 0x40], 0
jmp 0x1002b6de
mov eax, dword [ebp - 0x40]
inc eax
mov dword [ebp - 0x40], eax
cmp dword [ebp - 0x40], 1
jge 0x1002b6f4
mov eax, dword [ebp - 0x40]
mov dword [ebp + eax*4 - 0x50c], 0
jmp 0x1002b6d7
mov dword [ebp - 0xe4], 0xfffffffd
jmp 0x1002b70d
mov eax, dword [ebp - 0xe4]
dec eax
mov dword [ebp - 0xe4], eax
cmp dword [ebp - 0xe4], 0xfffffff9
jge 0x1002b7cd
mov dword [ebp - 0xec], 0x2ffab8c3
mov dword [ebp - 0xec], 0
jmp 0x1002b73d
mov eax, dword [ebp - 0xec]
inc eax
mov dword [ebp - 0xec], eax
cmp dword [ebp - 0xec], 0
jg 0x1002b785
mov dword [ebp - 0x2ac], 0
push 1
push 0
push 0x2b66
push 0x1346
push 1
push 0x617d
push 0x48ba
lea eax, [ebp - 0x2ac]
push eax
push 0x39bc
push 0x61e2
call fcn.10028ed9
add esp, 0x28
jmp 0x1002b730
mov byte [ebp - 0x4c], 0
push 0x1aff
push 0x61ae
push 0x4b54
push 0x74d8
push 0x1e5a
push 1
push 0x452d
push 0x179a
push 1
lea eax, [ebp - 0x4c]
push eax
push 1
push 0x4128
push 0x42df
call fcn.10028999
add esp, 0x34
jmp 0x1002b700
push 0
push 1
push 0xdeadbeef
call dword [ebp - 0x198]
mov dword [ebp - 0x2bc], eax
push 2
lea ecx, [ebp - 0x280]
call fcn.10009c88
mov dword [ebp - 4], 0x15
mov dword [ebp - 0x2b4], 0xfffffff9
push 3
lea ecx, [ebp - 0x270]
call fcn.10009c88
mov byte [ebp - 4], 0x16
push 0x7cae
push 0x3c81
push 1
push 0x3eaf
lea eax, [ebp - 0x24]
push eax
lea eax, [ebp - 0x280]
push eax
push 1
push 1
push 0x5f9a
call fcn.10028d9c
add esp, 0x24
mov dword [ebp - 0x24], 0
jmp 0x1002b84e
mov eax, dword [ebp - 0x24]
inc eax
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 3
jge 0x1002b86a
push dword [ebp - 0x24]
lea ecx, [ebp - 0x270]
call fcn.10009d00
mov dword [eax], 6
jmp 0x1002b847
mov dword [ebp - 0x24], 0
jmp 0x1002b87a
mov eax, dword [ebp - 0x24]
inc eax
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 2
jge 0x1002b890
mov eax, dword [ebp - 0x24]
mov dword [ebp + eax*4 - 0x4cc], 1
jmp 0x1002b873
push 0
push 0x1d69
push 0
push 0x17b2
push 0x47ed
lea eax, [ebp - 0x280]
push eax
call fcn.1002c19d
add esp, 0x18
push 0
lea ecx, [ebp - 0x280]
call fcn.10009d00
mov esi, dword [eax]
neg esi
push 0
lea ecx, [ebp - 0x280]
call fcn.10009d00
mov dword [eax], esi
push 0
lea ecx, [ebp - 0x270]
call fcn.10009d00
cmp dword [eax], 0
je 0x1002b924
push 0
lea ecx, [ebp - 0x280]
call fcn.10009d00
mov esi, eax
push 0
lea ecx, [ebp - 0x270]
call fcn.10009d00
mov eax, dword [eax]
cmp eax, dword [esi]
jg 0x1002b924
push 1
lea ecx, [ebp - 0x280]
call fcn.10009d00
cmp dword [eax], 0
je 0x1002b924
mov dword [ebp - 0x1a0], 1
jmp 0x1002b92b
and dword [ebp - 0x1a0], 0
cmp dword [ebp - 0x1a0], 5
jne 0x1002b940
mov dword [ebp - 0x1a8], 1
jmp 0x1002b947
and dword [ebp - 0x1a8], 0
mov eax, dword [ebp - 0x2b4]
cmp dword [ebp - 0x1a8], eax
jg 0x1002b961
mov dword [ebp - 0x1b0], 1
jmp 0x1002b968
and dword [ebp - 0x1b0], 0
push 0
lea ecx, [ebp - 0x270]
call fcn.10009d00
mov ecx, dword [ebp - 0x1b0]
cmp ecx, dword [eax]
je 0x1002b98b
mov dword [ebp - 0x1b8], 1
jmp 0x1002b992
and dword [ebp - 0x1b8], 0
mov eax, dword [ebp - 0x1b8]
neg eax
mov dword [ebp - 0x1c0], eax
push 0
lea ecx, [ebp - 0x280]
call fcn.10009d00
mov ecx, dword [ebp - 0x1c0]
mov dword [eax], ecx
push 0
lea ecx, [ebp - 0x270]
call fcn.10009d00
mov eax, dword [eax]
mov ecx, dword [ebp - 0x1c0]
lea esi, [eax + ecx + 0x7540]
push 0
lea ecx, [ebp - 0x270]
call fcn.10009d00
cmp esi, dword [eax]
jle 0x1002b9ee
mov dword [ebp - 0x1c8], 1
jmp 0x1002b9f5
and dword [ebp - 0x1c8], 0
push 1
lea ecx, [ebp - 0x270]
call fcn.10009d00
mov ecx, dword [ebp - 0x1c8]
cmp ecx, dword [eax]
jl 0x1002ba18
mov dword [ebp - 0x1d0], 1
jmp 0x1002ba1f
and dword [ebp - 0x1d0], 0
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x1d0]
mov dword [ebp + eax - 0x4cc], ecx
mov byte [ebp - 4], 0x15
lea ecx, [ebp - 0x270]
call fcn.10009ce4
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x280]
call fcn.10009ce4
cmp dword [ebp - 0x2bc], 0
jne 0x1002bb84
mov dword [ebp - 0x64], 0xd94b4b13
mov dword [ebp - 0x1d8], 1
push 2
lea ecx, [ebp - 0x3e4]
call fcn.10009c88
mov dword [ebp - 4], 0x17
mov dword [ebp - 0x8c], 0x5741
mov dword [ebp - 0xf4], 0
jmp 0x1002baa5
mov eax, dword [ebp - 0xf4]
inc eax
mov dword [ebp - 0xf4], eax
cmp dword [ebp - 0xf4], 2
jge 0x1002bac4
push dword [ebp - 0xf4]
lea ecx, [ebp - 0x3e4]
call fcn.10009d00
and dword [eax], 0
jmp 0x1002ba98
push 1
push 1
push 0x57af
lea eax, [ebp - 0x1d8]
push eax
push 1
lea eax, [ebp - 0x64]
push eax
lea eax, [ebp - 0x8c]
push eax
push 0x5e4c
push 0x584c
lea eax, [ebp - 0x3e4]
push eax
call fcn.10028ed9
add esp, 0x28
mov dword [ebp - 0x8c], 0
jmp 0x1002bb13
mov eax, dword [ebp - 0x8c]
inc eax
mov dword [ebp - 0x8c], eax
cmp dword [ebp - 0x8c], 1
jg 0x1002bb6a
push 1
lea eax, [ebp - 0x1d8]
push eax
lea eax, [ebp - 0x3e4]
push eax
push 0x26e4
push 1
lea eax, [ebp - 0x64]
push eax
call fcn.10029122
add esp, 0x18
mov dword [ebp - 0x64], 0
jmp 0x1002bb4f
mov eax, dword [ebp - 0x64]
inc eax
mov dword [ebp - 0x64], eax
cmp dword [ebp - 0x64], 1
jg 0x1002bb68
push 1
push 0x10f
push 1
call fcn.10029240
add esp, 0xc
jmp 0x1002bb48
jmp 0x1002bb06
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x3e4]
call fcn.10009ce4
mov eax, dword [ebp - 0x5c]
and dword [eax], 0
jmp 0x1002bedc
mov dword [ebp - 0x2c4], 0
mov dword [ebp - 0x1e0], 7
mov dword [ebp - 0x2cc], 0x9576c3a0
mov dword [ebp - 0xe0], 0
jmp 0x1002bbbb
mov eax, dword [ebp - 0xe0]
inc eax
mov dword [ebp - 0xe0], eax
cmp dword [ebp - 0xe0], 3
jge 0x1002bbd7
mov eax, dword [ebp - 0xe0]
mov dword [ebp + eax*4 - 0x578], 0x90be4438
jmp 0x1002bbae
push 1
push 0x7bb9
push 0x3e68
push 0x63a9
push 0x67fd
push 1
call fcn.100292b4
add esp, 0x18
mov eax, dword [ebp - 0x2c4]
mov dword [ebp - 0x1e0], eax
mov eax, dword [ebp - 0x1e0]
mov dword [ebp - 0x1e8], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x1e8]
mov dword [ebp + eax - 0x578], ecx
cmp dword [ebp - 0x1e8], 0xffffffff
jl 0x1002bc37
mov dword [ebp - 0x1f0], 1
jmp 0x1002bc3e
and dword [ebp - 0x1f0], 0
mov eax, dword [ebp - 0x1f0]
mov dword [ebp - 0x2cc], eax
push 0x6ceb
push 0x222e
push 1
push 1
push 0x1c18
lea eax, [ebp - 0x28]
push eax
call fcn.100221c9
add esp, 0x18
mov dword [ebp - 0x1c], 0xfc07e17f
mov dword [ebp - 0x200], 0xd40a1650
mov dword [ebp - 0x240], 0x35984225
mov dword [ebp - 0x34], 0
jmp 0x1002bc94
mov eax, dword [ebp - 0x34]
inc eax
mov dword [ebp - 0x34], eax
cmp dword [ebp - 0x34], 1
jge 0x1002bca7
mov eax, dword [ebp - 0x34]
mov dword [ebp + eax*4 - 0x54], 0xcfbc
jmp 0x1002bc8d
mov dword [ebp - 0x34], 0
jmp 0x1002bcb7
mov eax, dword [ebp - 0x34]
inc eax
mov dword [ebp - 0x34], eax
cmp dword [ebp - 0x34], 3
jge 0x1002bccd
mov eax, dword [ebp - 0x34]
mov dword [ebp + eax*4 - 0x5b0], 0x8b15b45b
jmp 0x1002bcb0
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0x4c0], eax
push 4
pop eax
imul eax, eax, 0
push 4
pop ecx
imul ecx, ecx, 0
mov ecx, dword [ebp + ecx - 0x54]
cmp ecx, dword [ebp + eax - 0x54]
je 0x1002bcf8
mov dword [ebp - 0x1f8], 1
jmp 0x1002bcff
and dword [ebp - 0x1f8], 0
mov eax, dword [ebp - 0x1f8]
mov dword [ebp - 0x200], eax
mov eax, dword [ebp - 0x1c]
cmp eax, dword [ebp - 0x200]
je 0x1002bd22
mov dword [ebp - 0x208], 1
jmp 0x1002bd29
and dword [ebp - 0x208], 0
cmp dword [ebp - 0x208], 0x8628
jle 0x1002bd41
mov dword [ebp - 0x2d4], 1
jmp 0x1002bd48
and dword [ebp - 0x2d4], 0
push 4
pop eax
imul eax, eax, 0
push 4
pop ecx
imul ecx, ecx, 0
mov ecx, dword [ebp + ecx - 0x54]
add ecx, dword [ebp - 0x1c]
cmp ecx, dword [ebp + eax - 0x54]
jne 0x1002bd6d
mov dword [ebp - 0x210], 1
jmp 0x1002bd74
and dword [ebp - 0x210], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x54]
add eax, dword [ebp - 0x210]
cmp eax, 0x1658
jle 0x1002bd97
mov dword [ebp - 0x148], 1
jmp 0x1002bd9e
and dword [ebp - 0x148], 0
cmp dword [ebp - 0x148], 0x16488a97
jle 0x1002bdb6
mov dword [ebp - 0x220], 1
jmp 0x1002bdbd
and dword [ebp - 0x220], 0
mov eax, dword [ebp - 0x220]
sub eax, dword [ebp - 0x1c]
sub eax, 9
cmp dword [ebp - 0x1c], eax
je 0x1002bdda
mov dword [ebp - 0x228], 1
jmp 0x1002bde1
and dword [ebp - 0x228], 0
cmp dword [ebp - 0x228], 0x3622ba39
jg 0x1002bdf9
mov dword [ebp - 0x230], 1
jmp 0x1002be00
and dword [ebp - 0x230], 0
mov eax, dword [ebp - 0x230]
mov dword [ebp - 0x240], eax
mov dword [ebp - 0x1c], 0
jmp 0x1002be1c
mov eax, dword [ebp - 0x1c]
inc eax
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 0
jg 0x1002be64
mov eax, dword [ebp - 0x1c]
mov ecx, dword [ebp - 0x1c]
mov ecx, dword [ebp + ecx*4 - 0x54]
cmp ecx, dword [ebp + eax*4 - 0x54]
jne 0x1002be3e
mov dword [ebp - 0x238], 1
jmp 0x1002be45
and dword [ebp - 0x238], 0
mov eax, dword [ebp - 0x238]
mov dword [ebp - 0x240], eax
push 1
push 0
push 0x415f
call fcn.100226f2
add esp, 0xc
jmp 0x1002be15
mov eax, dword [ebp - 0x28]
cmp dword [eax + 0x10], 0
je 0x1002be78
mov eax, dword [ebp - 0x28]
mov dword [ebp - 0x248], eax
jmp 0x1002be7f
and dword [ebp - 0x248], 0
mov eax, dword [ebp - 0x5c]
mov ecx, dword [ebp - 0x248]
mov dword [eax], ecx
jmp 0x1002bedc
mov eax, dword [ebp - 0x2dc]
mov dword [ebp - 0x2e4], eax
mov eax, dword [ebp - 0x2e4]
mov dword [ebp - 0x250], eax
mov eax, dword [ebp - 0x250]
mov eax, dword [eax]
dec eax
mov ecx, dword [ebp - 0x250]
mov dword [ecx], eax
jmp 0x1002bedc
mov eax, dword [ebp + 0x10]
mov dword [ebp - 0x2ec], eax
push dword [ebp - 0x2ec]
push 0x33ad
push 0
push 0x3ad4
call fcn.1001ac38
add esp, 0x10
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret