Function at 0x1001fd1f
Capabilities:
Read .ini file

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x10065bf6
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
push ecx
sub esp, 0x688
push ebx
push esi
push edi
mov dword [ebp - 0x10], esp
mov dword [ebp - 0x78], 1
mov dword [ebp - 0x34], 0xe6bc044b
mov dword [ebp - 0x314], 0xfffffff8
mov dword [ebp - 0x31c], 0x7582ba8d
mov dword [ebp - 0x1b8], 0x1597618d
mov dword [ebp - 0x3c8], 0x7503
push 1
lea ecx, [ebp - 0x4e0]
call fcn.10031395
and dword [ebp - 4], 0
mov dword [ebp - 0x454], 3
mov dword [ebp - 0x64], 0
jmp 0x1001fda5
mov eax, dword [ebp - 0x64]
inc eax
mov dword [ebp - 0x64], eax
cmp dword [ebp - 0x64], 2
jge 0x1001fdbb
mov eax, dword [ebp - 0x64]
mov dword [ebp + eax*4 - 0x84], 0x30fc3532
jmp 0x1001fd9e
lea eax, [ebp - 0x4e0]
push eax
lea eax, [ebp - 0x64]
push eax
call fcn.1001f9af
pop ecx
pop ecx
mov dword [ebp - 0x1c0], 0x74c5
mov dword [ebp - 0x45c], 0x10008e88
cmp dword [ebp - 0x1c0], 0x7857
jle 0x1001fec9
and dword [ebp - 0x104], 0
jmp 0x1001fe07
mov eax, dword [ebp - 0x104]
inc eax
mov dword [ebp - 0x104], eax
cmp dword [ebp - 0x104], 0x564e
jge 0x1001fec9
and dword [ebp - 0x94], 0
jmp 0x1001fe2d
mov eax, dword [ebp - 0x94]
inc eax
mov dword [ebp - 0x94], eax
cmp dword [ebp - 0x94], 0x520b
jge 0x1001fec4
and dword [ebp - 0x13c], 0
jmp 0x1001fe53
mov eax, dword [ebp - 0x13c]
inc eax
mov dword [ebp - 0x13c], eax
cmp dword [ebp - 0x13c], 0x47e4
jge 0x1001febf
mov eax, dword [ebp - 0x104]
imul eax, dword [ebp - 0x94]
mov ecx, dword [ebp - 0x13c]
shl eax, cl
cdq
mov dword [ebp - 0x3d4], eax
mov dword [ebp - 0x3d0], edx
push dword [ebp - 0x3d0]
push dword [ebp - 0x3d4]
lea ecx, [ebp - 0x644]
call fcn.1000d910
pop ecx
pop ecx
mov dword [ebp - 0x394], eax
mov ecx, dword [ebp - 0x394]
call fcn.10031260
push eax
call fcn.10050146
pop ecx
lea ecx, [ebp - 0x644]
call fcn.10031256
jmp 0x1001fe46
jmp 0x1001fe20
jmp 0x1001fdfa
cmp dword [ebp - 0x34], 0
jne 0x1001ff6f
mov eax, dword [ebp - 0x34]
inc eax
cmp eax, dword [ebp - 0x34]
jg 0x1001fee8
mov dword [ebp - 0x274], 1
jmp 0x1001feef
and dword [ebp - 0x274], 0
mov eax, dword [ebp - 0x34]
cmp dword [ebp - 0x274], eax
jne 0x1001ff06
mov dword [ebp - 0x30c], 1
jmp 0x1001ff0d
and dword [ebp - 0x30c], 0
mov eax, dword [ebp - 0x30c]
mov dword [ebp - 0x314], eax
mov eax, dword [ebp - 0x314]
mov dword [ebp - 0x31c], eax
mov eax, dword [ebp - 0x34]
mov dword [ebp - 0x5d4], eax
mov eax, dword [ebp - 0x31c]
mov dword [ebp - 0x5e8], eax
mov dword [ebp - 0x34], 8
cmp dword [ebp - 0x34], 0xb6cd04cd
ja 0x1001ff56
mov dword [ebp - 0x1a0], 1
jmp 0x1001ff5d
and dword [ebp - 0x1a0], 0
cmp dword [ebp - 0x1a0], 1
jne 0x1001ff6f
and dword [ebp - 0x304], 0
jmp 0x1001ff79
mov dword [ebp - 0x304], 1
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x84]
cmp dword [ebp - 0x304], eax
jge 0x1001ff9a
mov dword [ebp - 0x19c], 1
jmp 0x1001ffa1
and dword [ebp - 0x19c], 0
cmp dword [ebp - 0x19c], 7
jb 0x1001ffb6
mov dword [ebp - 0x260], 1
jmp 0x1001ffbd
and dword [ebp - 0x260], 0
push 4
pop eax
imul eax, eax, 0
push 4
pop ecx
shl ecx, 0
mov ecx, dword [ebp + ecx - 0x84]
imul ecx, dword [ebp - 0x260]
cmp ecx, dword [ebp + eax - 0x84]
jge 0x1001ffec
mov dword [ebp - 0x1a8], 1
jmp 0x1001fff3
and dword [ebp - 0x1a8], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x84]
cmp dword [ebp - 0x1a8], eax
jle 0x1002001a
cmp dword [ebp - 0x34], 0
je 0x1002001a
mov dword [ebp - 0x2c0], 1
jmp 0x10020021
and dword [ebp - 0x2c0], 0
push 4
pop eax
shl eax, 0
push 4
pop ecx
shl ecx, 0
mov edx, dword [ebp - 0x2c0]
sub edx, dword [ebp + ecx - 0x84]
cmp edx, dword [ebp + eax - 0x84]
jne 0x1002004f
mov dword [ebp - 0x1b0], 1
jmp 0x10020056
and dword [ebp - 0x1b0], 0
push 4
pop eax
shl eax, 0
push 4
pop ecx
shl ecx, 0
mov ecx, dword [ebp + ecx - 0x84]
add ecx, dword [ebp - 0x1b0]
cmp ecx, dword [ebp + eax - 0x84]
jle 0x10020084
mov dword [ebp - 0x268], 1
jmp 0x1002008b
and dword [ebp - 0x268], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x84]
add eax, dword [ebp - 0x268]
mov dword [ebp - 0x1b8], eax
jne 0x100200b8
cmp dword [ebp - 0x3c8], 0
jne 0x100200b8
and dword [ebp - 0x2f0], 0
jmp 0x100200c2
mov dword [ebp - 0x2f0], 1
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x84]
cmp dword [ebp - 0x2f0], eax
jl 0x100200e8
or eax, 0xffffffff
je 0x100200e8
mov dword [ebp - 0x150], 1
jmp 0x100200ef
and dword [ebp - 0x150], 0
push 0
lea ecx, [ebp - 0x4e0]
call fcn.10031433
mov ecx, dword [ebp - 0x150]
mov dword [eax], ecx
mov eax, dword [ebp - 0x150]
mov dword [ebp - 0x454], eax
mov byte [ebp - 4], 1
cmp dword [ebp - 0x1c0], 0x7429
jge 0x1002012c
push dword [ebp - 0x45c]
call fcn.10050146
pop ecx
jmp 0x10020148
and dword [ebp - 4], 0
jmp 0x10020152
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x4e0]
call fcn.10031417
mov eax, dword [ebp + 8]
mov eax, dword [eax + 4]
mov dword [ebp - 0xb8], eax
mov dword [ebp - 0x9c], 0x24ec2e0c
mov byte [ebp - 0x39], 0
lea eax, [ebp - 0x39]
push eax
call fcn.1001f9f7
pop ecx
mov dword [ebp - 0x9c], 0
jmp 0x1002019e
mov eax, dword [ebp - 0x9c]
inc eax
mov dword [ebp - 0x9c], eax
cmp dword [ebp - 0x9c], 0xb
jg 0x100201d5
mov byte [ebp - 0x3a], 0
movzx eax, byte [ebp - 0x3a]
test eax, eax
je 0x100201d3
push 1
push 1
push 0xf50
push 0x7f64
push 0x2103
push 0xfae
call fcn.1001b048
add esp, 0x18
jmp 0x10020191
push 8
pop eax
shl eax, 0
mov ecx, dword [ebp + 8]
mov ecx, dword [ecx]
lea eax, [ecx + eax + 0x78]
mov dword [ebp - 0x2c8], eax
mov dword [ebp - 0x270], 0x3dbc
mov dword [ebp - 0x414], 0x10008f08
cmp dword [ebp - 0x270], 0x3f36
jle 0x1002031c
and dword [ebp - 0x10c], 0
jmp 0x10020224
mov eax, dword [ebp - 0x10c]
inc eax
mov dword [ebp - 0x10c], eax
cmp dword [ebp - 0x10c], 0x517c
jge 0x1002031c
and dword [ebp - 0xa4], 0
jmp 0x1002024a
mov eax, dword [ebp - 0xa4]
inc eax
mov dword [ebp - 0xa4], eax
cmp dword [ebp - 0xa4], 0x560a
jge 0x10020317
and dword [ebp - 0x144], 0
jmp 0x10020270
mov eax, dword [ebp - 0x144]
inc eax
mov dword [ebp - 0x144], eax
cmp dword [ebp - 0x144], 0x78ca
jge 0x10020312
and dword [ebp - 0xac], 0
jmp 0x10020296
mov eax, dword [ebp - 0xac]
inc eax
mov dword [ebp - 0xac], eax
cmp dword [ebp - 0xac], 0x14fd
jge 0x1002030d
mov eax, dword [ebp - 0x10c]
cdq
idiv dword [ebp - 0xa4]
add edx, dword [ebp - 0x144]
mov ecx, dword [ebp - 0xac]
shl edx, cl
mov eax, edx
cdq
mov dword [ebp - 0x3e0], eax
mov dword [ebp - 0x3dc], edx
push dword [ebp - 0x3dc]
push dword [ebp - 0x3e0]
lea ecx, [ebp - 0x65c]
call fcn.1000d910
pop ecx
pop ecx
mov dword [ebp - 0x464], eax
mov ecx, dword [ebp - 0x464]
call fcn.10031260
push eax
call fcn.10050146
pop ecx
lea ecx, [ebp - 0x65c]
call fcn.10031256
jmp 0x10020289
jmp 0x10020263
jmp 0x1002023d
jmp 0x10020217
mov dword [ebp - 4], 3
cmp dword [ebp - 0x270], 0x3c24
jge 0x1002033b
push dword [ebp - 0x414]
call fcn.10050146
pop ecx
jmp 0x10020357
or dword [ebp - 4], 0xffffffff
jmp 0x10020361
mov dword [ebp - 0x114], 0
jmp 0x1002037a
mov eax, dword [ebp - 0x114]
inc eax
mov dword [ebp - 0x114], eax
cmp dword [ebp - 0x114], 1
jge 0x10020393
mov eax, dword [ebp - 0x114]
mov dword [ebp + eax*4 - 0x6c], 0
jmp 0x1002036d
mov byte [ebp - 0x37], 0
mov dword [ebp - 0x1c8], 0x528
mov dword [ebp - 0x3b8], 0x10008f94
cmp dword [ebp - 0x1c8], 0x714
jle 0x10020465
and dword [ebp - 0xb4], 0
jmp 0x100203d1
mov eax, dword [ebp - 0xb4]
inc eax
mov dword [ebp - 0xb4], eax
cmp dword [ebp - 0xb4], 0x52a
jge 0x10020465
and dword [ebp - 0x14c], 0
jmp 0x100203f7
mov eax, dword [ebp - 0x14c]
inc eax
mov dword [ebp - 0x14c], eax
cmp dword [ebp - 0x14c], 0x50cf
jge 0x10020460
and dword [ebp - 0xbc], 0
jmp 0x10020419
mov eax, dword [ebp - 0xbc]
inc eax
mov dword [ebp - 0xbc], eax
cmp dword [ebp - 0xbc], 0x7ef8
jge 0x1002045e
mov eax, dword [ebp - 0xb4]
add eax, dword [ebp - 0x14c]
mov ecx, dword [ebp - 0xbc]
sar eax, cl
cdq
mov dword [ebp - 0x3ec], eax
mov dword [ebp - 0x3e8], edx
push dword [ebp - 0x3e8]
push dword [ebp - 0x3ec]
mov ecx, 0x1060f818
call fcn.10031280
jmp 0x1002040c
jmp 0x100203ea
jmp 0x100203c4
push 1
push 1
push 0xeb1
lea eax, [ebp - 0x37]
push eax
call fcn.1001b0f5
add esp, 0x10
mov dword [ebp - 4], 5
cmp dword [ebp - 0x1c8], 0x318
jge 0x1002049d
mov edx, dword [ebp - 0x3b8]
mov ecx, 0x1060f818
call fcn.10032d2a
jmp 0x100204b9
or dword [ebp - 4], 0xffffffff
jmp 0x100204c3
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0x6c], 0
jmp 0x100204e8
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x6c]
inc eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x6c], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x6c], 4
jg 0x10020534
mov dword [ebp - 0x88], 0x22124f84
mov dword [ebp - 0x88], 0xa
jmp 0x10020518
mov eax, dword [ebp - 0x88]
inc eax
mov dword [ebp - 0x88], eax
cmp dword [ebp - 0x88], 0x1b
jl 0x10020532
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x6c], 0
je 0x10020530
jmp 0x10020532
jmp 0x1002050b
jmp 0x100204d3
mov eax, dword [ebp - 0x2c8]
cmp dword [eax + 4], 0
jbe 0x10022677
mov eax, dword [ebp - 0x2c8]
mov ecx, dword [ebp - 0xb8]
add ecx, dword [eax]
mov dword [ebp - 0x50], ecx
push 3
lea ecx, [ebp - 0x604]
call fcn.10031395
mov dword [ebp - 4], 7
push 2
lea ecx, [ebp - 0x5f4]
call fcn.10031395
mov byte [ebp - 4], 8
mov dword [ebp - 0x33c], 0x3b31
mov dword [ebp - 0x598], 0xfffffffc
push 1
push 0x2aca
push 0x3460
push 0x66bc
lea eax, [ebp - 0x358]
push eax
push 1
lea eax, [ebp - 0x604]
push eax
push 0x1ee2
call fcn.1001b192
add esp, 0x20
push 0
lea eax, [ebp - 0x5f4]
push eax
push 0x2cff
lea eax, [ebp - 0x358]
push eax
push 0x6043
call fcn.1002a92e
add esp, 0x14
push 0x3b52
push 1
lea eax, [ebp - 0x33c]
push eax
push 0x598a
push 1
call fcn.1001b2ac
add esp, 0x14
mov byte [ebp - 4], 7
lea ecx, [ebp - 0x5f4]
call fcn.10031417
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x604]
call fcn.10031417
jmp 0x10020624
mov eax, dword [ebp - 0x50]
add eax, 0x14
mov dword [ebp - 0x50], eax
push dword [ebp - 0x50]
call fcn.1001a972
pop ecx
movzx eax, al
test eax, eax
jne 0x10022677
mov eax, dword [ebp - 0x50]
cmp dword [eax + 0xc], 0
je 0x10022677
mov dword [ebp - 0x1d0], 0xd33a4a9b
mov dword [ebp - 0x344], 0x6fda0246
mov dword [ebp - 0x510], 0x8f3b8c10
mov dword [ebp - 0x514], 0xd77f1724
mov dword [ebp - 0x51c], 1
mov dword [ebp - 0x524], 1
mov dword [ebp - 0x52c], 1
mov dword [ebp - 0x534], 0xffffffff
mov dword [ebp - 0x53c], 1
mov dword [ebp - 0x544], 0x53bf844b
mov dword [ebp - 0xc4], 0
jmp 0x100206c2
mov eax, dword [ebp - 0xc4]
inc eax
mov dword [ebp - 0xc4], eax
cmp dword [ebp - 0xc4], 1
jge 0x100206de
mov eax, dword [ebp - 0xc4]
mov dword [ebp + eax*4 - 0x54c], 0xd907c4e7
jmp 0x100206b5
cmp dword [ebp - 0x1d0], 0
je 0x100207e0
mov dword [ebp - 0x34c], 0
mov dword [ebp - 0x3c0], 0x735e
mov dword [ebp - 0x3c4], 0xc56e700d
mov dword [ebp - 0x554], 0x35240ca7
mov dword [ebp - 0x584], 0xdb7b2415
mov dword [ebp - 0x58c], 0xe3bc4aee
mov dword [ebp - 0x594], 0xb3659ea4
mov dword [ebp - 0x59c], 0
mov dword [ebp - 0x5a4], 0xffffffff
mov dword [ebp - 0x5ac], 4
mov dword [ebp - 0x444], 0x743e62c9
mov dword [ebp - 0x120], 0
jmp 0x10020772
mov eax, dword [ebp - 0x120]
inc eax
mov dword [ebp - 0x120], eax
cmp dword [ebp - 0x120], 1
jge 0x1002078e
mov eax, dword [ebp - 0x120]
mov dword [ebp + eax*4 - 0x5b4], 0xcd5fec46
jmp 0x10020765
push 1
lea eax, [ebp - 0x3c0]
push eax
lea eax, [ebp - 0x1d0]
push eax
push 0x7746
push 0x31d1
lea eax, [ebp - 0x344]
push eax
lea eax, [ebp - 0x3c4]
push eax
push 0x60d8
push 0x2ca8
push 1
lea eax, [ebp - 0x34c]
push eax
call fcn.1001b389
add esp, 0x2c
lea eax, [ebp - 0x444]
push eax
call fcn.1001fa20
pop ecx
jmp 0x10020837
push 3
lea ecx, [ebp - 0x4ec]
call fcn.10031395
mov dword [ebp - 4], 9
mov dword [ebp - 0x354], 0xf5dda301
lea eax, [ebp - 0x4ec]
push eax
lea eax, [ebp - 0x5bc]
push eax
call fcn.1001fa39
pop ecx
pop ecx
push 0
lea ecx, [ebp - 0x4ec]
call fcn.10031433
mov eax, dword [eax]
mov dword [ebp - 0x354], eax
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x4ec]
call fcn.10031417
mov dword [ebp - 0x1d8], 0x99ac7894
mov dword [ebp - 0x7c], 0xecf0
mov dword [ebp - 0xe4], 9
mov dword [ebp - 0x278], 0x2609
mov dword [ebp - 0x3cc], 0x10009000
cmp dword [ebp - 0x278], 0x2792
jle 0x10020954
and dword [ebp - 0xd4], 0
jmp 0x1002088c
mov eax, dword [ebp - 0xd4]
inc eax
mov dword [ebp - 0xd4], eax
cmp dword [ebp - 0xd4], 0x763f
jge 0x10020954
and dword [ebp - 0x128], 0
jmp 0x100208b2
mov eax, dword [ebp - 0x128]
inc eax
mov dword [ebp - 0x128], eax
cmp dword [ebp - 0x128], 0x4469
jge 0x1002094f
and dword [ebp - 0xcc], 0
jmp 0x100208d8
mov eax, dword [ebp - 0xcc]
inc eax
mov dword [ebp - 0xcc], eax
cmp dword [ebp - 0xcc], 0x3508
jge 0x1002094a
and dword [ebp - 0x148], 0
jmp 0x100208fa
mov eax, dword [ebp - 0x148]
inc eax
mov dword [ebp - 0x148], eax
cmp dword [ebp - 0x148], 0x3243
jge 0x10020948
mov eax, dword [ebp - 0xcc]
cdq
idiv dword [ebp - 0x148]
mov eax, dword [ebp - 0xd4]
mov ecx, dword [ebp - 0x128]
sar eax, cl
xor eax, edx
cdq
mov dword [ebp - 0x3f8], eax
mov dword [ebp - 0x3f4], edx
push dword [ebp - 0x3f4]
push dword [ebp - 0x3f8]
mov ecx, 0x1060f818
call fcn.10031280
jmp 0x100208ed
jmp 0x100208cb
jmp 0x100208a5
jmp 0x1002087f
mov dword [ebp - 0x298], 0xc3ae5071
mov dword [ebp - 4], 0xa
cmp dword [ebp - 0x278], 0x259e
jge 0x10020981
mov edx, dword [ebp - 0x3cc]
mov ecx, 0x1060f818
call fcn.10032d2a
jmp 0x1002099d
or dword [ebp - 4], 0xffffffff
jmp 0x100209a7
mov dword [ebp - 0x16c], 0xfff6
mov dword [ebp - 0x36c], 0xfffffff8
mov dword [ebp - 0xdc], 0
jmp 0x100209d4
mov eax, dword [ebp - 0xdc]
inc eax
mov dword [ebp - 0xdc], eax
cmp dword [ebp - 0xdc], 1
jge 0x100209f0
mov eax, dword [ebp - 0xdc]
mov dword [ebp + eax*4 - 0x420], 0xa164e62b
jmp 0x100209c7
cmp dword [ebp - 0x1d8], 0
je 0x10020a03
call fcn.1001fa81
jmp 0x10020bfa
mov dword [ebp - 0x140], 0
mov dword [ebp - 0x5c], 0xf050678e
mov dword [ebp - 0x2f8], 0
mov dword [ebp - 0x35c], 0xfffffffd
mov dword [ebp - 0x208], 0xe483bbb6
mov dword [ebp - 0x508], 0xffffffff
mov dword [ebp - 0x504], 0xffffffff
mov dword [ebp - 0x500], 0xffffffff
mov dword [ebp - 0x4fc], 0xffffffff
imul eax, dword [ebp - 0x7c], 0x64ba
cmp eax, 0x6c0e263
jg 0x10020a74
mov dword [ebp - 0x308], 1
jmp 0x10020a7b
and dword [ebp - 0x308], 0
mov eax, dword [ebp - 0x1d8]
cmp eax, dword [ebp - 0x308]
jne 0x10020a95
mov dword [ebp - 0x1e0], 1
jmp 0x10020a9c
and dword [ebp - 0x1e0], 0
mov eax, dword [ebp - 0x140]
cmp dword [ebp - 0x1e0], eax
je 0x10020ab6
mov dword [ebp - 0x280], 1
jmp 0x10020abd
and dword [ebp - 0x280], 0
mov eax, dword [ebp - 0x140]
neg eax
cmp eax, dword [ebp - 0x280]
jle 0x10020ad9
mov dword [ebp - 0x1e8], 1
jmp 0x10020ae0
and dword [ebp - 0x1e8], 0
cmp dword [ebp - 0x1e8], 1
ja 0x10020af5
mov dword [ebp - 0x2d0], 1
jmp 0x10020afc
and dword [ebp - 0x2d0], 0
mov eax, dword [ebp - 0x140]
cmp dword [ebp - 0x2d0], eax
jle 0x10020b16
mov dword [ebp - 0x1f0], 1
jmp 0x10020b1d
and dword [ebp - 0x1f0], 0
mov eax, dword [ebp - 0x1f0]
mov dword [ebp - 0x5c], eax
cmp dword [ebp - 0x5c], 0xfffffffb
jl 0x10020b38
mov dword [ebp - 0x288], 1
jmp 0x10020b3f
and dword [ebp - 0x288], 0
mov eax, dword [ebp - 0xe4]
cmp dword [ebp - 0x288], eax
jg 0x10020b59
mov dword [ebp - 0x1f8], 1
jmp 0x10020b60
and dword [ebp - 0x1f8], 0
mov eax, dword [ebp - 0x1f8]
mov dword [ebp - 0x2f8], eax
mov eax, dword [ebp - 0x2f8]
sub eax, dword [ebp - 0x140]
jne 0x10020b8c
cmp dword [ebp - 0xe4], 0
jne 0x10020b8c
and dword [ebp - 0x200], 0
jmp 0x10020b96
mov dword [ebp - 0x200], 1
cmp dword [ebp - 0x200], 0x19ac196a
jg 0x10020bae
mov dword [ebp - 0x290], 1
jmp 0x10020bb5
and dword [ebp - 0x290], 0
mov eax, dword [ebp - 0x35c]
add eax, dword [ebp - 0x290]
mov dword [ebp - 0x208], eax
mov eax, dword [ebp - 0x208]
sub eax, dword [ebp - 0x7c]
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x508], eax
mov dword [ebp - 0x5c], 0xfffffff6
jmp 0x10020bed
mov eax, dword [ebp - 0x5c]
inc eax
mov dword [ebp - 0x5c], eax
cmp dword [ebp - 0x5c], 0
je 0x10020bfa
call fcn.1001fab5
jmp 0x10020be6
mov eax, dword [ebp - 0x298]
mov dword [ebp - 0x2d8], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x2d8]
mov dword [ebp + eax - 0x420], ecx
mov eax, dword [ebp - 0x7c]
cmp eax, dword [ebp - 0x2d8]
jne 0x10020c30
mov dword [ebp - 0x364], 1
jmp 0x10020c37
and dword [ebp - 0x364], 0
mov eax, dword [ebp - 0xe4]
mov dword [ebp - 0x5c4], eax
mov eax, dword [ebp - 0xe4]
cmp eax, dword [ebp - 0x7c]
jne 0x10020c5a
mov dword [ebp - 0x210], 1
jmp 0x10020c61
and dword [ebp - 0x210], 0
cmp dword [ebp - 0x210], 0x9896
jl 0x10020c79
mov dword [ebp - 0x3d8], 1
jmp 0x10020c80
and dword [ebp - 0x3d8], 0
mov eax, dword [ebp - 0x7c]
mov dword [ebp - 0x5cc], eax
mov eax, dword [ebp - 0x16c]
inc eax
mov dword [ebp - 0x16c], eax
mov eax, dword [ebp - 0x16c]
add eax, dword [ebp - 0x298]
mov dword [ebp - 0x36c], eax
mov eax, dword [ebp - 0x50]
mov ecx, dword [ebp - 0xb8]
add ecx, dword [eax + 0xc]
push ecx
push 0x3f37
push 0x343b
call fcn.1004bcdb
pop ecx
pop ecx
call eax
mov dword [ebp - 0x174], eax
mov dword [ebp - 0x118], 0x24ec2e0c
push 0
push 1
push 0x5bae
push 0x190c
push 1
push 0x664
push 0x7d8c
push 0x5b43
push 0x1e32
push 0x1ddc
call fcn.10023259
add esp, 0x28
mov dword [ebp - 0x118], 0
jmp 0x10020d22
mov eax, dword [ebp - 0x118]
inc eax
mov dword [ebp - 0x118], eax
cmp dword [ebp - 0x118], 0xb
jg 0x10020d3b
mov byte [ebp - 0x3b], 0
lea eax, [ebp - 0x3b]
push eax
call fcn.1001fafd
pop ecx
jmp 0x10020d15
cmp dword [ebp - 0x174], 0
jne 0x1002103b
mov dword [ebp - 0x18], 1
mov dword [ebp - 0x50c], 0xfffffff8
mov dword [ebp - 0x230], 0xe91c8413
mov dword [ebp - 0x18], 0x13
jmp 0x10020d73
mov eax, dword [ebp - 0x18]
inc eax
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 0x1c
jne 0x1002102c
mov dword [ebp - 0x54], 0xfffffffd
push 3
lea ecx, [ebp - 0x47c]
call fcn.10031395
mov dword [ebp - 4], 0xc
lea eax, [ebp - 0x47c]
push eax
push 0x5873
push 1
push 0x2ac0
lea eax, [ebp - 0x5dc]
push eax
push 1
call fcn.1001dc06
add esp, 0x18
mov dword [ebp - 0x54], 0
jmp 0x10020dcc
mov eax, dword [ebp - 0x54]
dec eax
mov dword [ebp - 0x54], eax
cmp dword [ebp - 0x54], 0xfffffff0
je 0x10021018
mov dword [ebp - 0x48], 1
mov dword [ebp - 0x178], 0xfffffff6
mov dword [ebp - 0x15c], 3
mov dword [ebp - 0x458], 0xfffffff8
mov eax, dword [ebp - 0x54]
mov dword [ebp - 0x48], eax
cmp dword [ebp - 0x48], 0
je 0x10020e51
mov byte [ebp - 0x35], 0
push 0x3204
push 1
push 0x54c5
push 0x204e
push 0x140d
lea eax, [ebp - 0x35]
push eax
push 0
call fcn.1001e755
add esp, 0x1c
mov dword [ebp - 0x48], 0xfffffff0
jmp 0x10020e3f
mov eax, dword [ebp - 0x48]
inc eax
mov dword [ebp - 0x48], eax
cmp dword [ebp - 0x48], 0xfffffff8
jne 0x10020e4c
call fcn.1001fb32
jmp 0x10020e38
jmp 0x10021013
mov dword [ebp - 0xec], 0
jmp 0x10020e6a
mov eax, dword [ebp - 0xec]
inc eax
mov dword [ebp - 0xec], eax
cmp dword [ebp - 0xec], 1
jge 0x10020e86
mov eax, dword [ebp - 0xec]
mov dword [ebp + eax*4 - 0x2a8], 0x8e17
jmp 0x10020e5d
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x2a8], 0
je 0x10020e9b
jmp 0x10021018
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x5e4], eax
mov eax, dword [ebp - 0x15c]
dec eax
mov dword [ebp - 0x15c], eax
mov eax, dword [ebp - 0x15c]
mov dword [ebp - 0x178], eax
mov eax, dword [ebp - 0x178]
mov dword [ebp - 0x60c], eax
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x614], eax
mov eax, 0x4667
test eax, eax
jne 0x10020ee7
mov dword [ebp - 0x218], 1
jmp 0x10020eee
and dword [ebp - 0x218], 0
mov eax, dword [ebp - 0x54]
cmp eax, dword [ebp - 0x218]
jne 0x10020f05
mov dword [ebp - 0x318], 1
jmp 0x10020f0c
and dword [ebp - 0x318], 0
push 2
lea ecx, [ebp - 0x47c]
call fcn.10031433
mov ecx, dword [ebp - 0x318]
cmp ecx, dword [eax]
je 0x10020f35
cmp dword [ebp - 0x178], 0
jne 0x10020f35
and dword [ebp - 0x220], 0
jmp 0x10020f3f
mov dword [ebp - 0x220], 1
mov eax, dword [ebp - 0x18]
cmp dword [ebp - 0x220], eax
jle 0x10020f56
mov dword [ebp - 0x2a0], 1
jmp 0x10020f5d
and dword [ebp - 0x2a0], 0
cmp dword [ebp - 0x2a0], 0x93fe
jl 0x10020f75
mov dword [ebp - 0x228], 1
jmp 0x10020f7c
and dword [ebp - 0x228], 0
mov eax, dword [ebp - 0x18]
cmp eax, dword [ebp - 0x228]
jl 0x10020f99
cmp dword [ebp - 0x18], 0
je 0x10020f99
mov dword [ebp - 0x2e0], 1
jmp 0x10020fa0
and dword [ebp - 0x2e0], 0
push 1
lea ecx, [ebp - 0x47c]
call fcn.10031433
mov ecx, dword [ebp - 0x2e0]
add ecx, dword [eax]
mov dword [ebp - 0x230], ecx
imul eax, dword [ebp - 0x230], 0x8ca8
cmp eax, 0xc1e0f758
ja 0x10020fd8
mov dword [ebp - 0x238], 1
jmp 0x10020fdf
and dword [ebp - 0x238], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x2a8]
cmp eax, dword [ebp - 0x238]
je 0x10021000
mov dword [ebp - 0x300], 1
jmp 0x10021007
and dword [ebp - 0x300], 0
mov eax, dword [ebp - 0x300]
mov dword [ebp - 0x458], eax
jmp 0x10020dc5
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x47c]
call fcn.10031417
jmp 0x10020d6c
lea eax, [ebp - 0x78]
push eax
call fcn.1001fb58
pop ecx
jmp 0x10022677
call fcn.1001fb6c
push 0x2ecb
push 0
push 0x43ce
push 0x46d2
lea eax, [ebp + 8]
push eax
push 0x312d
push 0x2ab6
call fcn.1002322e
add esp, 0x1c
mov dword [ebp - 0x1c], 0xffffffff
mov dword [ebp - 0x30], 0xf1a969ac
mov dword [ebp - 0x2c], 0xfffffffd
mov dword [ebp - 0x1d4], 0x98ef
mov dword [ebp - 0x14], 0
jmp 0x10021096
mov eax, dword [ebp - 0x14]
inc eax
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 3
jge 0x100210ac
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x470], 0x8f3c34ee
jmp 0x1002108f
mov dword [ebp - 0x14], 0
jmp 0x100210bc
mov eax, dword [ebp - 0x14]
inc eax
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 1
jge 0x100210cf
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x4c], 0x158018d9
jmp 0x100210b5
mov dword [ebp - 0x14], 0
jmp 0x100210df
mov eax, dword [ebp - 0x14]
inc eax
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 2
jge 0x100210f5
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x404], 0xffffffff
jmp 0x100210d8
cmp dword [ebp - 0x1c], 0
jne 0x10021153
mov eax, 0xee21afa9
test eax, eax
je 0x1002113e
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0x30], eax
mov eax, dword [ebp - 0x30]
mov dword [ebp - 0x240], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x240]
mov dword [ebp + eax - 0x4c], ecx
mov eax, dword [ebp - 0x240]
mov dword [ebp - 0x2c], eax
mov eax, dword [ebp - 0x2c]
mov dword [ebp - 0x560], eax
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0x5d0], eax
cmp dword [ebp - 0x2c], 0
je 0x10021153
cmp dword [ebp - 0x30], 0
je 0x10021153
and dword [ebp - 0x2b0], 0
jmp 0x1002115d
mov dword [ebp - 0x2b0], 1
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0x248], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x248]
mov dword [ebp + eax - 0x470], ecx
imul eax, dword [ebp - 0x2b0], 0xebf9
cmp dword [ebp - 0x248], eax
jge 0x10021197
mov dword [ebp - 0x2e8], 1
jmp 0x1002119e
and dword [ebp - 0x2e8], 0
mov eax, dword [ebp - 0x1c]
cmp dword [ebp - 0x2e8], eax
jge 0x100211b5
mov dword [ebp - 0x250], 1
jmp 0x100211bc
and dword [ebp - 0x250], 0
mov eax, dword [ebp - 0x1c]
add eax, dword [ebp - 0x250]
cmp eax, dword [ebp - 0x1c]
jge 0x100211d6
mov dword [ebp - 0x2b8], 1
jmp 0x100211dd
and dword [ebp - 0x2b8], 0
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x2b8]
sub ecx, dword [ebp + eax - 0x404]
je 0x10021338
mov dword [ebp - 0x310], 0xfffffffd
mov dword [ebp - 0x3e4], 0x5674
mov dword [ebp - 0x30], 3
jmp 0x1002121a
mov eax, dword [ebp - 0x30]
dec eax
mov dword [ebp - 0x30], eax
cmp dword [ebp - 0x30], 0xfffffff7
jge 0x10021333
mov dword [ebp - 0x1ac], 1
mov eax, dword [ebp - 0x2c]
mov dword [ebp - 0x518], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x470]
mov dword [ebp - 0x2c], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x4c]
cmp eax, dword [ebp - 0x2c]
jge 0x10021262
mov dword [ebp - 0x258], 1
jmp 0x10021269
and dword [ebp - 0x258], 0
mov eax, dword [ebp - 0x310]
imul eax, dword [ebp - 0x258]
test eax, eax
jne 0x1002128c
cmp dword [ebp - 0x310], 0
jne 0x1002128c
and dword [ebp - 0x198], 0
jmp 0x10021296
mov dword [ebp - 0x198], 1
mov eax, dword [ebp - 0x1ac]
cmp dword [ebp - 0x198], eax
jle 0x100212b0
mov dword [ebp - 0x1a4], 1
jmp 0x100212b7
and dword [ebp - 0x1a4], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x4c]
cmp dword [ebp - 0x1a4], eax
jge 0x100212d5
mov dword [ebp - 0x1b4], 1
jmp 0x100212dc
and dword [ebp - 0x1b4], 0
mov eax, dword [ebp - 0x1ac]
imul eax, dword [ebp - 0x1b4]
xor ecx, ecx
inc ecx
sub ecx, eax
je 0x1002130e
mov byte [ebp - 0x41], 0
lea eax, [ebp - 0x41]
push eax
call fcn.1001fb98
pop ecx
mov byte [ebp - 0x36], 0
lea eax, [ebp - 0x36]
push eax
call fcn.1001fbc8
pop ecx
jmp 0x10021323
mov dword [ebp - 0x374], 1
cmp dword [ebp - 0x374], 0
je 0x10021323
jmp 0x10021333
cmp dword [ebp - 0x3e4], 0
je 0x1002132e
jmp 0x10021333
jmp 0x10021213
jmp 0x10021527
push 4
lea ecx, [ebp - 0x4c8]
call fcn.10031395
mov dword [ebp - 4], 0xd
mov dword [ebp - 0x1ec], 9
push 1
push 0x1146
push 0x18cf
push 1
push 0x5056
lea eax, [ebp - 0x5a0]
push eax
push 0x3b00
push 0x1cc7
push 0x7b92
lea eax, [ebp - 0x4c8]
push eax
call fcn.1001e4bb
add esp, 0x28
push 3
lea ecx, [ebp - 0x4c8]
call fcn.10031433
cmp dword [eax], 0
jne 0x10021459
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x4c]
cmp eax, dword [ebp - 0x1c]
jg 0x100213bf
mov dword [ebp - 0x37c], 1
jmp 0x100213c6
and dword [ebp - 0x37c], 0
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0x520], eax
mov eax, 0x15dfd
cmp eax, 0xd47ebdcf
ja 0x100213e7
mov dword [ebp - 0x1bc], 1
jmp 0x100213ee
and dword [ebp - 0x1bc], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x404]
cmp dword [ebp - 0x1bc], eax
jl 0x1002140f
mov dword [ebp - 0x1c4], 1
jmp 0x10021416
and dword [ebp - 0x1c4], 0
mov eax, dword [ebp - 0x1d4]
cmp dword [ebp - 0x1c4], eax
jg 0x10021430
mov dword [ebp - 0x42c], 1
jmp 0x10021437
and dword [ebp - 0x42c], 0
mov eax, dword [ebp - 0x1ec]
mov dword [ebp - 0x608], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x4c], 7
jg 0x10021459
and dword [ebp - 0x1cc], 0
jmp 0x10021463
mov dword [ebp - 0x1cc], 1
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x470]
cmp dword [ebp - 0x1cc], eax
jl 0x10021484
mov dword [ebp - 0x1dc], 1
jmp 0x1002148b
and dword [ebp - 0x1dc], 0
mov eax, dword [ebp - 0x1d4]
cmp eax, dword [ebp - 0x1dc]
jge 0x100214a5
mov dword [ebp - 0x1e4], 1
jmp 0x100214ac
and dword [ebp - 0x1e4], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x404]
cmp dword [ebp - 0x1e4], eax
je 0x100214cd
mov dword [ebp - 0x164], 1
jmp 0x100214d4
and dword [ebp - 0x164], 0
push 4
pop eax
shl eax, 1
mov ecx, dword [ebp - 0x164]
mov dword [ebp + eax - 0x470], ecx
mov eax, dword [ebp - 0x164]
mov dword [ebp - 0x2c], eax
mov eax, dword [ebp - 0x2c]
imul eax, dword [ebp - 0x1ec]
mov dword [ebp - 0x1f4], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x1f4]
mov dword [ebp + eax - 0x4c], ecx
mov eax, dword [ebp - 0x1f4]
mov dword [ebp - 0x30], eax
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x4c8]
call fcn.10031417
mov byte [ebp - 0x42], 0
mov dword [ebp - 0x1fc], 0x1d54
mov dword [ebp - 0x384], 0x10009044
cmp dword [ebp - 0x1fc], 0x1fa5
jle 0x100215f7
and dword [ebp - 0x124], 0
jmp 0x10021565
mov eax, dword [ebp - 0x124]
inc eax
mov dword [ebp - 0x124], eax
cmp dword [ebp - 0x124], 0x5c4e
jge 0x100215f7
and dword [ebp - 0x11c], 0
jmp 0x1002158b
mov eax, dword [ebp - 0x11c]
inc eax
mov dword [ebp - 0x11c], eax
cmp dword [ebp - 0x11c], 0x2289
jge 0x100215f2
and dword [ebp - 0xf4], 0
jmp 0x100215ad
mov eax, dword [ebp - 0xf4]
inc eax
mov dword [ebp - 0xf4], eax
cmp dword [ebp - 0xf4], 0x2c14
jge 0x100215f0
mov eax, dword [ebp - 0x11c]
sub eax, dword [ebp - 0xf4]
and eax, dword [ebp - 0x124]
cdq
mov dword [ebp - 0x410], eax
mov dword [ebp - 0x40c], edx
push dword [ebp - 0x40c]
push dword [ebp - 0x410]
mov ecx, 0x1060f818
call fcn.10031280
jmp 0x100215a0
jmp 0x1002157e
jmp 0x10021558
push 1
push 0x65bf
push 1
push 0x1fa0
push 0x3ba7
push 0x5f10
lea eax, [ebp - 0x42]
push eax
push 1
call fcn.1001e5b8
add esp, 0x20
mov dword [ebp - 4], 0xe
cmp dword [ebp - 0x1fc], 0x1977
jge 0x10021640
mov edx, dword [ebp - 0x384]
mov ecx, 0x1060f818
call fcn.10032d2a
jmp 0x1002165c
or dword [ebp - 4], 0xffffffff
jmp 0x10021666
mov eax, dword [ebp + 8]
cmp dword [eax + 8], 0
jne 0x10021833
mov dword [ebp - 0xfc], 0x57fd5464
mov dword [ebp - 0x528], 0x77cc4247
mov dword [ebp - 0x5a8], 0xfffffff9
mov dword [ebp - 0x530], 0x8a9017ca
mov dword [ebp - 0x5d8], 0xe49a2f38
mov dword [ebp - 0x538], 0x63a74adf
mov dword [ebp - 0x5b0], 0x219a6fdd
mov dword [ebp - 0x540], 5
mov dword [ebp - 0xfc], 0xfffffff3
jmp 0x100216dc
mov eax, dword [ebp - 0xfc]
inc eax
mov dword [ebp - 0xfc], eax
cmp dword [ebp - 0xfc], 0x11
jg 0x1002182a
mov dword [ebp - 0x55c], 0xfffffffa
mov dword [ebp - 0x548], 0xef9d7865
mov dword [ebp - 0x564], 0x36544d18
mov dword [ebp - 0x20], 0
jmp 0x10021717
mov eax, dword [ebp - 0x20]
inc eax
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 1
jge 0x1002172d
mov eax, dword [ebp - 0x20]
mov dword [ebp + eax*4 - 0x12c], 0xb1c2a2c7
jmp 0x10021710
mov dword [ebp - 0x20], 0
jmp 0x1002173d
mov eax, dword [ebp - 0x20]
inc eax
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 3
jge 0x10021753
mov eax, dword [ebp - 0x20]
mov dword [ebp + eax*4 - 0x680], 0xfffffff8
jmp 0x10021736
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0x12c], 0xfffffffb
jmp 0x10021781
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x12c]
inc eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x12c], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x12c], 0x13
jne 0x10021825
mov dword [ebp - 0x3f0], 0x807cfaf4
mov dword [ebp - 0x550], 1
mov dword [ebp - 0x56c], 0x4f204795
mov dword [ebp - 0x558], 9
mov dword [ebp - 0x574], 0
mov dword [ebp - 0x38c], 0xec1b16eb
mov dword [ebp - 0x8c], 0
jmp 0x100217ea
mov eax, dword [ebp - 0x8c]
inc eax
mov dword [ebp - 0x8c], eax
cmp dword [ebp - 0x8c], 2
jge 0x10021806
mov eax, dword [ebp - 0x8c]
mov dword [ebp + eax*4 - 0x61c], 1
jmp 0x100217dd
lea eax, [ebp - 0x3f0]
push eax
call fcn.1001fbf1
pop ecx
lea eax, [ebp - 0x38c]
push eax
call fcn.1001fa20
pop ecx
jmp 0x10021766
jmp 0x100216cf
and dword [ebp - 0x78], 0
jmp 0x10022677
lea eax, [ebp - 0x3a4]
push eax
lea eax, [ebp - 0x408]
push eax
push dword [ebp - 0xb8]
push dword [ebp - 0x50]
lea eax, [ebp - 0x174]
push eax
push dword [ebp + 8]
call fcn.1001ab40
add esp, 0x18
mov dword [ebp - 0x58], 0xfffffffa
push 2
lea ecx, [ebp - 0x190]
call fcn.10031395
mov dword [ebp - 4], 0x10
mov dword [ebp - 0x32c], 0
mov dword [ebp - 0x90], 0
jmp 0x1002189a
mov eax, dword [ebp - 0x90]
inc eax
mov dword [ebp - 0x90], eax
cmp dword [ebp - 0x90], 2
jge 0x100218bc
push dword [ebp - 0x90]
lea ecx, [ebp - 0x190]
call fcn.10031433
mov dword [eax], 0x29be
jmp 0x1002188d
push 0x39f4
push 0x7227
push 1
lea eax, [ebp - 0x58]
push eax
push 0x7a1d
push 1
call fcn.1001e6d6
add esp, 0x18
mov dword [ebp - 0x58], 0
jmp 0x100218eb
mov eax, dword [ebp - 0x58]
inc eax
mov dword [ebp - 0x58], eax
cmp dword [ebp - 0x58], 1
jg 0x10021c3d
mov dword [ebp - 0x28], 0
mov dword [ebp - 0x438], 0x2095e04a
push 1
push 0x2af1
push 1
push 0xcb4
lea eax, [ebp - 0x28]
push eax
push 0x6725
lea eax, [ebp - 0x190]
push eax
push 1
call fcn.1001e821
add esp, 0x20
mov dword [ebp - 0x28], 0
jmp 0x1002193e
mov eax, dword [ebp - 0x28]
inc eax
mov dword [ebp - 0x28], eax
cmp dword [ebp - 0x28], 1
jg 0x10021c38
mov dword [ebp - 0x40], 0xffffffff
mov dword [ebp - 0x234], 0x122d800
mov dword [ebp - 0x40], 1
jmp 0x10021969
mov eax, dword [ebp - 0x40]
dec eax
mov dword [ebp - 0x40], eax
cmp dword [ebp - 0x40], 0
jl 0x10021c33
mov dword [ebp - 0x3fc], 0
mov dword [ebp - 0x204], 0x6958
mov dword [ebp - 0x39c], 0x100090a8
cmp dword [ebp - 0x204], 0x6cd7
jle 0x10021abf
push 0
push 0x870
push 0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringW]
and dword [ebp - 0x98], 0
jmp 0x100219cc
mov eax, dword [ebp - 0x98]
inc eax
mov dword [ebp - 0x98], eax
cmp dword [ebp - 0x98], 0x4630
jge 0x10021abf
and dword [ebp - 0xa0], 0
jmp 0x100219f2
mov eax, dword [ebp - 0xa0]
inc eax
mov dword [ebp - 0xa0], eax
cmp dword [ebp - 0xa0], 0x3f58
jge 0x10021aba
and dword [ebp - 0xa8], 0
jmp 0x10021a18
mov eax, dword [ebp - 0xa8]
inc eax
mov dword [ebp - 0xa8], eax
cmp dword [ebp - 0xa8], 0x3adc
jge 0x10021ab5
and dword [ebp - 0xb0], 0
jmp 0x10021a3e
mov eax, dword [ebp - 0xb0]
inc eax
mov dword [ebp - 0xb0], eax
cmp dword [ebp - 0xb0], 0x184b
jge 0x10021ab0
mov eax, dword [ebp - 0x98]
cdq
idiv dword [ebp - 0xa0]
add edx, dword [ebp - 0xa8]
and edx, dword [ebp - 0xb0]
mov eax, edx
cdq
mov dword [ebp - 0x41c], eax
mov dword [ebp - 0x418], edx
push dword [ebp - 0x418]
push dword [ebp - 0x41c]
lea ecx, [ebp - 0x674]
call fcn.1000d910
pop ecx
pop ecx
mov dword [ebp - 0x450], eax
mov ecx, dword [ebp - 0x450]
call fcn.10031260
push eax
call fcn.10050146
pop ecx
lea ecx, [ebp - 0x674]
call fcn.10031256
jmp 0x10021a31
jmp 0x10021a0b
jmp 0x100219e5
jmp 0x100219bf
lea eax, [ebp - 0x28]
push eax
lea eax, [ebp - 0x190]
push eax
lea eax, [ebp - 0x32c]
push eax
lea eax, [ebp - 0x58]
push eax
lea eax, [ebp - 0x3fc]
push eax
call fcn.1001fc0a
add esp, 0x14
mov byte [ebp - 4], 0x11
cmp dword [ebp - 0x204], 0x6728
jge 0x10021b00
push dword [ebp - 0x39c]
call fcn.10050146
pop ecx
jmp 0x10021b1c
mov dword [ebp - 4], 0x10
jmp 0x10021b2c
push dword [ebp - 0x28]
lea ecx, [ebp - 0x190]
call fcn.10031433
imul eax, dword [eax], 0x54d
test eax, eax
je 0x10021b69
cmp dword [ebp - 0x40], 0
jne 0x10021b5d
push dword [ebp - 0x28]
lea ecx, [ebp - 0x190]
call fcn.10031433
cmp dword [eax], 0
je 0x10021b69
mov dword [ebp - 0x20c], 1
jmp 0x10021b70
and dword [ebp - 0x20c], 0
cmp dword [ebp - 0x20c], 0xd72
jle 0x10021b88
mov dword [ebp - 0x214], 1
jmp 0x10021b8f
and dword [ebp - 0x214], 0
push dword [ebp - 0x28]
lea ecx, [ebp - 0x190]
call fcn.10031433
mov ecx, dword [ebp - 0x214]
cmp ecx, dword [eax]
jl 0x10021bb3
mov dword [ebp - 0x21c], 1
jmp 0x10021bba
and dword [ebp - 0x21c], 0
push dword [ebp - 0x40]
lea ecx, [ebp - 0x190]
call fcn.10031433
mov eax, dword [eax]
cmp eax, dword [ebp - 0x21c]
jg 0x10021bde
mov dword [ebp - 0x224], 1
jmp 0x10021be5
and dword [ebp - 0x224], 0
push dword [ebp - 0x40]
lea ecx, [ebp - 0x190]
call fcn.10031433
mov eax, dword [eax]
imul eax, dword [ebp - 0x224]
cmp eax, 0xffff
ja 0x10021c0f
mov dword [ebp - 0x22c], 1
jmp 0x10021c16
and dword [ebp - 0x22c], 0
mov eax, dword [ebp - 0x22c]
mov dword [ebp - 0x234], eax
mov eax, dword [ebp - 0x234]
mov dword [ebp - 0x438], eax
jmp 0x10021962
jmp 0x10021937
jmp 0x100218e4
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x190]
call fcn.10031417
lea eax, [ebp - 0x78]
push eax
lea eax, [ebp - 0x3a4]
push eax
lea eax, [ebp - 0x408]
push eax
push dword [ebp - 0xb8]
lea eax, [ebp - 0x174]
push eax
call fcn.1001ade8
add esp, 0x14
mov dword [ebp - 0x24], 0
jmp 0x10021c83
mov eax, dword [ebp - 0x24]
inc eax
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 1
jge 0x10021c99
mov eax, dword [ebp - 0x24]
mov dword [ebp + eax*4 - 0xe0], 0xaf1124f0
jmp 0x10021c7c
mov dword [ebp - 0x24], 0
jmp 0x10021ca9
mov eax, dword [ebp - 0x24]
inc eax
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 3
jge 0x10021cbf
mov eax, dword [ebp - 0x24]
mov dword [ebp + eax*4 - 0x138], 0xf2c29a3d
jmp 0x10021ca2
push 4
pop eax
shl eax, 0
mov dword [ebp + eax - 0x138], 0
jmp 0x10021ced
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x138]
dec eax
push 4
pop ecx
shl ecx, 0
mov dword [ebp + ecx - 0x138], eax
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x138], 0
jl 0x10021dcb
mov dword [ebp - 0x3ac], 0xdfe0091d
mov dword [ebp - 0x154], 0
mov dword [ebp - 0x460], 0x714f
mov dword [ebp - 0x3b4], 0x1a4e6659
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x3ac]
imul ecx, dword [ebp + eax - 0xe0]
cmp ecx, 0x1449c9fb
jl 0x10021d51
mov dword [ebp - 0x23c], 1
jmp 0x10021d58
and dword [ebp - 0x23c], 0
mov eax, dword [ebp - 0x23c]
mov dword [ebp - 0x154], eax
cmp dword [ebp - 0x154], 0
jne 0x10021db0
mov eax, dword [ebp - 0x154]
mov dword [ebp - 0x57c], eax
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x138]
mov dword [ebp - 0x5f8], eax
mov eax, dword [ebp - 0x460]
mov dword [ebp - 0x568], eax
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0x138], 0
jne 0x10021db0
and dword [ebp - 0x244], 0
jmp 0x10021dba
mov dword [ebp - 0x244], 1
mov eax, dword [ebp - 0x244]
mov dword [ebp - 0x3b4], eax
jmp 0x10021cd2
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x138], 0
je 0x100222bf
push 3
lea ecx, [ebp - 0x184]
call fcn.10031395
mov dword [ebp - 4], 0x13
mov dword [ebp - 0x4a4], 0x3f6a0837
mov dword [ebp - 0x4a0], 0x3f6a0837
mov dword [ebp - 0x49c], 0x3f6a0837
mov dword [ebp - 0x498], 0x3f6a0837
lea ecx, [ebp - 0x165]
call fcn.10031442
push eax
lea eax, [ebp - 0x494]
push eax
lea eax, [ebp - 0x4a4]
push eax
lea ecx, [ebp - 0x62c]
call fcn.10031445
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0x328]
call fcn.100313f1
mov byte [ebp - 4], 0x14
mov dword [ebp - 0x338], 0xee8b
push 0x467f
lea eax, [ebp - 0x184]
push eax
push 1
push 1
push 0x62ea
push 0x341c
push 0x26b6
push 0x703d
lea eax, [ebp - 0x74]
push eax
call fcn.1001eb07
add esp, 0x24
mov dword [ebp - 0x74], 0
jmp 0x10021e9e
mov eax, dword [ebp - 0x74]
inc eax
mov dword [ebp - 0x74], eax
cmp dword [ebp - 0x74], 1
jge 0x10021eb4
mov eax, dword [ebp - 0x74]
mov dword [ebp + eax*4 - 0x340], 0x7b48fe2d
jmp 0x10021e97
push 1
lea ecx, [ebp - 0x184]
call fcn.10031433
and dword [eax], 0
jmp 0x10021eea
push 1
lea ecx, [ebp - 0x184]
call fcn.10031433
mov dword [ebp - 0x24c], eax
mov eax, dword [ebp - 0x24c]
mov eax, dword [eax]
inc eax
mov ecx, dword [ebp - 0x24c]
mov dword [ecx], eax
push 1
lea ecx, [ebp - 0x184]
call fcn.10031433
cmp dword [eax], 2
jg 0x10022085
mov byte [ebp - 0x38], 0
mov dword [ebp - 0x254], 0x27ba
mov dword [ebp - 0x3bc], 0x10009130
cmp dword [ebp - 0x254], 0x27fd
jle 0x10022006
and dword [ebp - 0xd0], 0
jmp 0x10021f3e
mov eax, dword [ebp - 0xd0]
inc eax
mov dword [ebp - 0xd0], eax
cmp dword [ebp - 0xd0], 0x1df4
jge 0x10022006
and dword [ebp - 0xc0], 0
jmp 0x10021f64
mov eax, dword [ebp - 0xc0]
inc eax
mov dword [ebp - 0xc0], eax
cmp dword [ebp - 0xc0], 0x3cc6
jge 0x10022001
and dword [ebp - 0xc8], 0
jmp 0x10021f8a
mov eax, dword [ebp - 0xc8]
inc eax
mov dword [ebp - 0xc8], eax
cmp dword [ebp - 0xc8], 0x6d70
jge 0x10021ffc
and dword [ebp - 0xd8], 0
jmp 0x10021fac
mov eax, dword [ebp - 0xd8]
inc eax
mov dword [ebp - 0xd8], eax
cmp dword [ebp - 0xd8], 0x14c0
jge 0x10021ffa
mov eax, dword [ebp - 0xc0]
cdq
idiv dword [ebp - 0xc8]
mov eax, dword [ebp - 0xd0]
mov ecx, edx
shl eax, cl
or eax, dword [ebp - 0xd8]
cdq
mov dword [ebp - 0x428], eax
mov dword [ebp - 0x424], edx
push dword [ebp - 0x424]
push dword [ebp - 0x428]
mov ecx, 0x1060f818
call fcn.10031280
jmp 0x10021f9f
jmp 0x10021f7d
jmp 0x10021f57
jmp 0x10021f31
movzx eax, byte [ebp - 0x38]
test eax, eax
je 0x10022019
push 1
push 1
call fcn.1001ec9b
pop ecx
pop ecx
mov byte [ebp - 4], 0x15
cmp dword [ebp - 0x254], 0x2536
jge 0x10022039
mov edx, dword [ebp - 0x3bc]
mov ecx, 0x1060f818
call fcn.10032d2a
jmp 0x10022055
mov dword [ebp - 4], 0x14
jmp 0x10022065
push 1
lea ecx, [ebp - 0x184]
call fcn.10031433
mov eax, dword [eax]
cmp dword [ebp + eax*4 - 0x138], 0
je 0x10022080
jmp 0x10022085
jmp 0x10021ec6
push 4
pop eax
shl eax, 1
mov esi, dword [ebp + eax - 0x138]
push 2
lea ecx, [ebp - 0x184]
call fcn.10031433
cmp dword [eax], esi
jl 0x10022250
push 1
lea ecx, [ebp - 0x184]
call fcn.10031433
cmp dword [eax], 0
je 0x10022140
push 4
pop eax
imul eax, eax, 0
mov esi, dword [ebp + eax - 0xe0]
push 2
lea ecx, [ebp - 0x328]
call fcn.10031433
mov edi, dword [eax]
add edi, esi
push 1
lea ecx, [ebp - 0x328]
call fcn.10031433
add edi, dword [eax]
cmp edi, 1
je 0x100220fa
mov dword [ebp - 0x25c], 1
jmp 0x10022101
and dword [ebp - 0x25c], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x138]
cmp dword [ebp - 0x25c], eax
jl 0x10022122
mov dword [ebp - 0x264], 1
jmp 0x10022129
and dword [ebp - 0x264], 0
mov eax, dword [ebp - 0x264]
sub eax, 5
je 0x10022140
mov dword [ebp - 0x26c], 1
jmp 0x10022147
and dword [ebp - 0x26c], 0
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x26c]
sub ecx, dword [ebp + eax - 0x138]
test ecx, ecx
jle 0x1002216a
mov dword [ebp - 0x194], 1
jmp 0x10022171
and dword [ebp - 0x194], 0
push 1
lea ecx, [ebp - 0x184]
call fcn.10031433
mov ecx, dword [ebp - 0x194]
cmp ecx, dword [eax]
je 0x10022195
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0x138], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x138]
mov dword [ebp - 0x5b8], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xe0]
mov dword [ebp - 0x570], eax
push 4
pop eax
imul eax, eax, 0
mov esi, dword [ebp + eax - 0xe0]
push 1
lea ecx, [ebp - 0x184]
call fcn.10031433
cmp dword [eax], esi
jg 0x100221e5
mov dword [ebp - 0x334], 1
jmp 0x100221ec
and dword [ebp - 0x334], 0
push 3
lea ecx, [ebp - 0x328]
call fcn.10031433
push 3
lea ecx, [ebp - 0x328]
call fcn.10031433
cmp dword [eax], 0
je 0x10022229
push 0
lea ecx, [ebp - 0x328]
call fcn.10031433
cmp dword [eax], 0
je 0x10022229
mov dword [ebp - 0x27c], 1
jmp 0x10022230
and dword [ebp - 0x27c], 0
push 0
lea ecx, [ebp - 0x328]
call fcn.10031433
mov ecx, dword [ebp - 0x27c]
cmp ecx, dword [eax]
jne 0x10022250
and dword [ebp - 0x284], 0
jmp 0x1002225a
mov dword [ebp - 0x284], 1
mov eax, dword [ebp - 0x284]
neg eax
add eax, dword [ebp - 0x338]
je 0x10022285
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0x138], 0
je 0x10022285
mov dword [ebp - 0x28c], 1
jmp 0x1002228c
and dword [ebp - 0x28c], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x28c]
mov dword [ebp + eax - 0x340], ecx
mov byte [ebp - 4], 0x13
lea ecx, [ebp - 0x328]
call fcn.10031417
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x184]
call fcn.10031417
jmp 0x100222fe
mov dword [ebp - 0x5e0], 0x5349
mov dword [ebp - 0x578], 0xfffffff7
mov dword [ebp - 0x5c0], 0x4c38db07
mov dword [ebp - 0x580], 0x36c8609
mov dword [ebp - 0x348], 0x9e604731
lea eax, [ebp - 0x348]
push eax
call fcn.1001fbf1
pop ecx
cmp dword [ebp - 0x78], 0
jne 0x10022672
push 1
lea ecx, [ebp - 0x4b0]
call fcn.10031395
mov dword [ebp - 4], 0x17
mov dword [ebp - 0x68], 0xfffffffe
mov dword [ebp - 0x370], 0xa81d5f49
push 0
push 0x15c5
lea eax, [ebp - 0x610]
push eax
push 0x3cb4
lea eax, [ebp - 0x4b0]
push eax
push 1
push 0x3a66
push 1
call fcn.1002c5e6
add esp, 0x20
mov dword [ebp - 0x68], 0
jmp 0x10022368
mov eax, dword [ebp - 0x68]
dec eax
mov dword [ebp - 0x68], eax
cmp dword [ebp - 0x68], 0
jl 0x10022661
mov dword [ebp - 0x380], 0xca95
mov dword [ebp - 0x368], 0x9855eec8
mov dword [ebp - 0x294], 0x4176
mov dword [ebp - 0x330], 0x100091a8
cmp dword [ebp - 0x294], 0x442c
jle 0x10022468
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_SystemTimeToTzSpecificLocalTime]
and dword [ebp - 0xe8], 0
jmp 0x100223cc
mov eax, dword [ebp - 0xe8]
inc eax
mov dword [ebp - 0xe8], eax
cmp dword [ebp - 0xe8], 0xafb
jge 0x10022456
and dword [ebp - 0xf0], 0
jmp 0x100223ee
mov eax, dword [ebp - 0xf0]
inc eax
mov dword [ebp - 0xf0], eax
cmp dword [ebp - 0xf0], 0x39f3
jge 0x10022451
mov eax, dword [ebp - 0xe8]
add eax, dword [ebp - 0xf0]
cdq
mov dword [ebp - 0x434], eax
mov dword [ebp - 0x430], edx
push dword [ebp - 0x430]
push dword [ebp - 0x434]
lea ecx, [ebp - 0x698]
call fcn.1000d910
pop ecx
pop ecx
mov dword [ebp - 0x350], eax
mov ecx, dword [ebp - 0x350]
call fcn.10031260
push eax
call fcn.10050146
pop ecx
lea ecx, [ebp - 0x698]
call fcn.10031256
jmp 0x100223e1
jmp 0x100223bf
push 0x162b
push 0x3c0
push 0
call dword [sym.imp.USER32.dll_EnableMenuItem]
mov dword [ebp - 0x378], 0xfffffffb
mov byte [ebp - 4], 0x18
cmp dword [ebp - 0x294], 0x4086
jge 0x1002248e
push dword [ebp - 0x330]
call fcn.10050146
pop ecx
jmp 0x100224aa
mov dword [ebp - 4], 0x17
jmp 0x100224ba
mov dword [ebp - 0x29c], 0x6482
mov dword [ebp - 0x360], 0x10009220
cmp dword [ebp - 0x29c], 0x65f3
jle 0x10022588
and dword [ebp - 0xf8], 0
jmp 0x100224f4
mov eax, dword [ebp - 0xf8]
inc eax
mov dword [ebp - 0xf8], eax
cmp dword [ebp - 0xf8], 0x5860
jge 0x10022588
and dword [ebp - 0x100], 0
jmp 0x1002251a
mov eax, dword [ebp - 0x100]
inc eax
mov dword [ebp - 0x100], eax
cmp dword [ebp - 0x100], 0x8e9
jge 0x10022583
and dword [ebp - 0x108], 0
jmp 0x1002253c
mov eax, dword [ebp - 0x108]
inc eax
mov dword [ebp - 0x108], eax
cmp dword [ebp - 0x108], 0x2ed5
jge 0x10022581
mov eax, dword [ebp - 0xf8]
mov ecx, dword [ebp - 0x100]
shl eax, cl
and eax, dword [ebp - 0x108]
cdq
mov dword [ebp - 0x440], eax
mov dword [ebp - 0x43c], edx
push dword [ebp - 0x43c]
push dword [ebp - 0x440]
mov ecx, 0x1060f818
call fcn.10031280
jmp 0x1002252f
jmp 0x1002250d
jmp 0x100224e7
push 2
lea ecx, [ebp - 0x4f8]
call fcn.10031395
mov byte [ebp - 4], 0x1a
mov byte [ebp - 4], 0x1b
cmp dword [ebp - 0x29c], 0x61e6
jge 0x100225b9
mov edx, dword [ebp - 0x360]
mov ecx, 0x1060f818
call fcn.10032d2a
jmp 0x100225d5
mov dword [ebp - 4], 0x1a
jmp 0x100225e5
lea eax, [ebp - 0x4f8]
push eax
lea eax, [ebp - 0x588]
push eax
call fcn.1001fc77
pop ecx
pop ecx
lea eax, [ebp - 0x368]
push eax
push 0x5520
lea eax, [ebp - 0x370]
push eax
push 0x878
lea eax, [ebp - 0x68]
push eax
push 0x13f2
lea eax, [ebp - 0x4f8]
push eax
push 1
lea eax, [ebp - 0x378]
push eax
push 0x7c2a
lea eax, [ebp - 0x380]
push eax
lea eax, [ebp - 0x4b0]
push eax
push 1
call fcn.1001ef52
add esp, 0x34
call fcn.1001fcbc
mov byte [ebp - 4], 0x17
lea ecx, [ebp - 0x4f8]
call fcn.10031417
jmp 0x10022361
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x4b0]
call fcn.10031417
jmp 0x10022677
jmp 0x1002061b
mov dword [ebp - 0x60], 0
mov dword [ebp - 0x2fc], 4
mov dword [ebp - 0x2ac], 0xa12a2ef7
mov dword [ebp - 0x5c8], 0
mov dword [ebp - 0x2bc], 0x8fe4de5a
mov dword [ebp - 0x2e4], 0
mov dword [ebp - 0x110], 0
jmp 0x100226c9
mov eax, dword [ebp - 0x110]
inc eax
mov dword [ebp - 0x110], eax
cmp dword [ebp - 0x110], 2
jge 0x100226e5
mov eax, dword [ebp - 0x110]
mov dword [ebp + eax*4 - 0x44c], 0xe46552de
jmp 0x100226bc
cmp dword [ebp - 0x60], 0
je 0x10022769
mov dword [ebp - 0x388], 0xed15de05
mov dword [ebp - 0x390], 0x7f37c04c
mov dword [ebp - 0x60], 0
jmp 0x1002270f
mov eax, dword [ebp - 0x60]
inc eax
mov dword [ebp - 0x60], eax
cmp dword [ebp - 0x60], 0x31
jne 0x10022764
mov dword [ebp - 0x3a0], 0xdead
mov dword [ebp - 0x398], 0x5d9b4e94
lea eax, [ebp - 0x388]
push eax
lea eax, [ebp - 0x390]
push eax
call fcn.1001fcf0
pop ecx
pop ecx
lea eax, [ebp - 0x398]
push eax
lea eax, [ebp - 0x3a0]
push eax
push 1
push 0x7207
push 1
push 0x3cf1
call fcn.1001f511
add esp, 0x18
jmp 0x10022708
jmp 0x100229f6
mov dword [ebp - 0x70], 0xdeb77278
mov dword [ebp - 0x490], 0xeb5ea28c
mov dword [ebp - 0x48c], 0xeb5ea28c
mov dword [ebp - 0x488], 0xeb5ea28c
mov dword [ebp - 0x484], 0xeb5ea28c
lea ecx, [ebp - 0x16d]
call fcn.10031442
push eax
lea eax, [ebp - 0x480]
push eax
lea eax, [ebp - 0x490]
push eax
lea ecx, [ebp - 0x624]
call fcn.10031445
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0x4d4]
call fcn.100313f1
mov dword [ebp - 4], 0x1d
mov dword [ebp - 0x158], 0xffff
push 2
lea ecx, [ebp - 0x4bc]
call fcn.10031395
mov byte [ebp - 4], 0x1e
mov dword [ebp - 0x3b0], 9
push 0x6124
push 0x355c
push 0x1d21
push 0x3dab
lea eax, [ebp - 0x4bc]
push eax
push 1
lea eax, [ebp - 0x590]
push eax
push 1
push 0x78
call fcn.1001f8c9
add esp, 0x24
mov eax, dword [ebp - 0x70]
mov dword [ebp - 0x2fc], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x44c]
cmp eax, dword [ebp - 0x2ac]
jg 0x10022853
mov dword [ebp - 0x2a4], 1
jmp 0x1002285a
and dword [ebp - 0x2a4], 0
mov eax, dword [ebp - 0x2a4]
sub eax, dword [ebp - 0x2ac]
cmp eax, dword [ebp - 0x2bc]
jge 0x1002287a
mov dword [ebp - 0x2b4], 1
jmp 0x10022881
and dword [ebp - 0x2b4], 0
mov eax, dword [ebp - 0x158]
imul eax, dword [ebp - 0x2b4]
mov dword [ebp - 0x3a8], eax
mov eax, dword [ebp - 0x158]
dec eax
mov dword [ebp - 0x158], eax
cmp dword [ebp - 0x3a8], 0xfff6
jb 0x100228b9
mov dword [ebp - 0x160], 1
jmp 0x100228c0
and dword [ebp - 0x160], 0
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x160]
mov dword [ebp + eax - 0x44c], ecx
mov eax, dword [ebp - 0x70]
sub eax, dword [ebp - 0x160]
cmp eax, dword [ebp - 0x2bc]
jge 0x100228f0
mov dword [ebp - 0x2c4], 1
jmp 0x100228f7
and dword [ebp - 0x2c4], 0
push 0
lea ecx, [ebp - 0x4d4]
call fcn.10031433
mov ecx, dword [ebp - 0x2c4]
imul ecx, dword [eax]
mov dword [ebp - 0x2cc], ecx
push 3
lea ecx, [ebp - 0x4d4]
call fcn.10031433
mov ecx, dword [ebp - 0x2cc]
mov dword [eax], ecx
imul eax, dword [ebp - 0x2cc], 0x85f8
cmp eax, dword [ebp - 0x70]
je 0x10022943
mov dword [ebp - 0x2d4], 1
jmp 0x1002294a
and dword [ebp - 0x2d4], 0
mov eax, dword [ebp - 0x2e4]
cmp dword [ebp - 0x2d4], eax
jg 0x10022974
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x44c], 0
je 0x10022974
mov dword [ebp - 0x2dc], 1
jmp 0x1002297b
and dword [ebp - 0x2dc], 0
mov eax, dword [ebp - 0x60]
add eax, dword [ebp - 0x2dc]
mov dword [ebp - 0x70], eax
mov eax, dword [ebp - 0x70]
mov dword [ebp - 0x2ec], eax
push 1
lea ecx, [ebp - 0x4bc]
call fcn.10031433
mov ecx, dword [ebp - 0x2ec]
mov dword [eax], ecx
mov eax, dword [ebp - 0x2e4]
cmp dword [ebp - 0x2ec], eax
jne 0x100229bf
mov dword [ebp - 0x2f4], 1
jmp 0x100229c6
and dword [ebp - 0x2f4], 0
mov eax, dword [ebp - 0x2f4]
sub eax, dword [ebp - 0x3b0]
mov dword [ebp - 0x2fc], eax
mov byte [ebp - 4], 0x1d
lea ecx, [ebp - 0x4bc]
call fcn.10031417
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x4d4]
call fcn.10031417
mov eax, dword [ebp - 0x78]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret