Function at 0x1001c009
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x10082fce
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0xc6c
mov dword [ebp - 0x368], 0
mov dword [ebp - 0x364], 0
mov dword [ebp - 0x360], 0
mov dword [ebp - 0x35c], 0
mov dword [ebp - 0x38c], 0xfc3c737e
mov dword [ebp - 0x804], 0xa391de2f
mov dword [ebp - 0x20c], 0
jmp 0x1001c07c
mov eax, dword [ebp - 0x20c]
inc eax
mov dword [ebp - 0x20c], eax
cmp dword [ebp - 0x20c], 2
jge 0x1001c098
mov eax, dword [ebp - 0x20c]
mov dword [ebp + eax*4 - 0xa0], 0x8261
jmp 0x1001c06f
push 4
pop eax
shl eax, 0
mov dword [ebp + eax - 0x368], 1
jmp 0x1001c0c6
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x368]
dec eax
push 4
pop ecx
shl ecx, 0
mov dword [ebp + ecx - 0x368], eax
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x368], 0
jl 0x1001c392
mov dword [ebp - 0x7f4], 0xfffffffd
mov dword [ebp - 0x214], 0
jmp 0x1001c0fd
mov eax, dword [ebp - 0x214]
inc eax
mov dword [ebp - 0x214], eax
cmp dword [ebp - 0x214], 1
jge 0x1001c116
mov eax, dword [ebp - 0x214]
mov dword [ebp + eax*4 - 0x6c], 0
jmp 0x1001c0f0
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0x6c], 0
jmp 0x1001c13b
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x6c]
inc eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x6c], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x6c], 1
jg 0x1001c38d
mov dword [ebp - 0x4c], 1
mov dword [ebp - 0x4c], 1
jmp 0x1001c163
mov eax, dword [ebp - 0x4c]
dec eax
mov dword [ebp - 0x4c], eax
cmp dword [ebp - 0x4c], 0
jl 0x1001c388
mov dword [ebp - 0x38], 1
mov dword [ebp - 0x77c], 1
mov dword [ebp - 0x38], 1
jmp 0x1001c18e
mov eax, dword [ebp - 0x38]
dec eax
mov dword [ebp - 0x38], eax
cmp dword [ebp - 0x38], 0
jl 0x1001c1b0
mov byte [ebp - 0xaf], 0
movzx eax, byte [ebp - 0xaf]
test eax, eax
je 0x1001c1ae
push 0
call fcn.1001b806
pop ecx
jmp 0x1001c187
mov dword [ebp - 0x38], 1
jmp 0x1001c1c0
mov eax, dword [ebp - 0x38]
dec eax
mov dword [ebp - 0x38], eax
cmp dword [ebp - 0x38], 0
jl 0x1001c383
mov dword [ebp - 0x2f0], 0x5493e623
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x6c]
mov dword [ebp - 0x2f0], eax
mov eax, dword [ebp - 0x2f0]
mov dword [ebp - 0xa2c], eax
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0x368], 0
je 0x1001c2d0
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x6c], 0
je 0x1001c229
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x6c], 0
je 0x1001c229
mov dword [ebp - 0x6ec], 1
jmp 0x1001c230
and dword [ebp - 0x6ec], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x368]
imul eax, dword [ebp - 0x6ec]
test eax, eax
je 0x1001c261
mov eax, dword [ebp - 0x4c]
cmp dword [ebp + eax*4 - 0xa0], 0
je 0x1001c261
mov dword [ebp - 0x718], 1
jmp 0x1001c268
and dword [ebp - 0x718], 0
mov eax, dword [ebp - 0x4c]
cmp dword [ebp - 0x718], eax
jl 0x1001c27f
mov dword [ebp - 0x720], 1
jmp 0x1001c286
and dword [ebp - 0x720], 0
mov eax, dword [ebp - 0x38]
add eax, dword [ebp - 0x720]
je 0x1001c2ac
cmp dword [ebp - 0x77c], 0
je 0x1001c2ac
cmp dword [ebp - 0x4c], 0
je 0x1001c2ac
mov dword [ebp - 0x728], 1
jmp 0x1001c2b3
and dword [ebp - 0x728], 0
mov eax, dword [ebp - 0x728]
sub eax, dword [ebp - 0x38]
cmp eax, dword [ebp - 0x2f0]
jg 0x1001c2d0
mov dword [ebp - 0x744], 1
jmp 0x1001c2d7
and dword [ebp - 0x744], 0
mov eax, dword [ebp - 0x4c]
mov eax, dword [ebp + eax*4 - 0xa0]
mov ecx, dword [ebp - 0x38]
imul ecx, dword [ebp - 0x744]
add eax, ecx
cmp eax, 1
jne 0x1001c2fe
mov dword [ebp - 0x74c], 1
jmp 0x1001c305
and dword [ebp - 0x74c], 0
cmp dword [ebp - 0x74c], 0x4f20077f
jge 0x1001c31d
mov dword [ebp - 0x7ec], 1
jmp 0x1001c324
and dword [ebp - 0x7ec], 0
mov eax, dword [ebp - 0x4c]
mov dword [ebp - 0xb4c], eax
push 8
pop eax
cmp eax, 0xfffffff7
jg 0x1001c341
mov dword [ebp - 0x754], 1
jmp 0x1001c348
and dword [ebp - 0x754], 0
cmp dword [ebp - 0x754], 0xc0a1033
je 0x1001c360
mov dword [ebp - 0x750], 1
jmp 0x1001c367
and dword [ebp - 0x750], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x6c]
imul eax, dword [ebp - 0x750]
mov dword [ebp - 0x7f4], eax
jmp 0x1001c1b9
jmp 0x1001c15c
jmp 0x1001c126
jmp 0x1001c0ab
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xa0]
mov dword [ebp - 0xa98], eax
push 4
pop eax
shl eax, 0
push 4
pop ecx
shl ecx, 0
mov ecx, dword [ebp + ecx - 0x368]
cmp dword [ebp + eax - 0xa0], ecx
jne 0x1001c3cd
mov dword [ebp - 0x404], 1
jmp 0x1001c3d4
and dword [ebp - 0x404], 0
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x404]
sub ecx, dword [ebp + eax - 0x368]
cmp ecx, 1
jl 0x1001c3f8
mov dword [ebp - 0x324], 1
jmp 0x1001c3ff
and dword [ebp - 0x324], 0
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x324]
mov dword [ebp + eax - 0x368], ecx
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xa0]
cmp dword [ebp - 0x324], eax
jge 0x1001c433
mov dword [ebp - 0x374], 1
jmp 0x1001c43a
and dword [ebp - 0x374], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xa0]
cmp eax, dword [ebp - 0x374]
jge 0x1001c45b
mov dword [ebp - 0x680], 1
jmp 0x1001c462
and dword [ebp - 0x680], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xa0]
cmp dword [ebp - 0x680], eax
jle 0x1001c483
mov dword [ebp - 0x37c], 1
jmp 0x1001c48a
and dword [ebp - 0x37c], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0xa0]
cmp dword [ebp - 0x37c], eax
je 0x1001c4ab
mov dword [ebp - 0x688], 1
jmp 0x1001c4b2
and dword [ebp - 0x688], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xa0]
cmp dword [ebp - 0x688], eax
jl 0x1001c4e0
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0xa0], 0
jne 0x1001c4e0
and dword [ebp - 0x384], 0
jmp 0x1001c4ea
mov dword [ebp - 0x384], 1
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0xa0]
cmp dword [ebp - 0x384], eax
jge 0x1001c50b
mov dword [ebp - 0x690], 1
jmp 0x1001c512
and dword [ebp - 0x690], 0
mov eax, dword [ebp - 0x690]
mov dword [ebp - 0x38c], eax
mov eax, dword [ebp - 0x38c]
mov dword [ebp - 0xb24], eax
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x368]
mov dword [ebp - 0xaa8], eax
mov eax, 0x67d3
add eax, 0xdb2edd43
push 4
pop ecx
shl ecx, 0
cmp eax, dword [ebp + ecx - 0xa0]
jg 0x1001c567
mov eax, 0x5de30ea3
test eax, eax
jne 0x1001c567
and dword [ebp - 0x7fc], 0
jmp 0x1001c571
mov dword [ebp - 0x7fc], 1
push 4
pop eax
shl eax, 0
push 4
pop ecx
shl ecx, 0
mov ecx, dword [ebp + ecx - 0xa0]
cmp dword [ebp + eax - 0xa0], ecx
jg 0x1001c599
mov dword [ebp - 0x698], 1
jmp 0x1001c5a0
and dword [ebp - 0x698], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xa0]
cmp dword [ebp - 0x698], eax
jne 0x1001c5c1
mov dword [ebp - 0x394], 1
jmp 0x1001c5c8
and dword [ebp - 0x394], 0
mov eax, dword [ebp - 0x394]
mov dword [ebp - 0x804], eax
mov eax, dword [0x10674ef4]
and eax, 1
jne 0x1001c608
mov eax, dword [0x10674ef4]
or eax, 1
mov dword [0x10674ef4], eax
and dword [ebp - 4], 0
mov ecx, 0x10674efc
call fcn.100165fe
push 0x100841ce
call fcn.10067fb6
pop ecx
or dword [ebp - 4], 0xffffffff
mov dword [ebp - 0x1d8], 0xb1cecb45
mov dword [ebp - 0x868], 0x2abb
mov dword [ebp - 0x870], 1
mov dword [ebp - 0x83c], 0xf2fdad5
mov dword [ebp - 0x878], 0x79b69b2e
mov dword [ebp - 0xb74], 0x17473468
mov dword [ebp - 0x334], 6
mov dword [ebp - 0x8e8], 4
mov dword [ebp - 0x8e4], 4
mov dword [ebp - 0x8e0], 4
mov dword [ebp - 0x8dc], 4
mov dword [ebp - 0x898], 0x4b67
mov dword [ebp - 0x32c], 1
mov dword [ebp - 0x21c], 0
jmp 0x1001c6a3
mov eax, dword [ebp - 0x21c]
inc eax
mov dword [ebp - 0x21c], eax
cmp dword [ebp - 0x21c], 3
jge 0x1001c6bf
mov eax, dword [ebp - 0x21c]
mov dword [ebp + eax*4 - 0xc60], 0xfffffff7
jmp 0x1001c696
mov eax, dword [ebp - 0x1d8]
mov dword [ebp - 0x1d8], eax
mov eax, dword [ebp - 0x868]
mov dword [ebp - 0xab8], eax
mov eax, dword [ebp - 0x1d8]
mov dword [ebp - 0x870], eax
mov eax, dword [ebp - 0x878]
cmp dword [ebp - 0x898], eax
jg 0x1001c706
cmp dword [ebp - 0x334], 0
je 0x1001c706
mov dword [ebp - 0x6a0], 1
jmp 0x1001c70d
and dword [ebp - 0x6a0], 0
mov eax, dword [ebp - 0x32c]
mov dword [ebp - 0x884], eax
mov eax, dword [ebp - 0x6a0]
mov dword [ebp - 0x81c], eax
mov eax, dword [ebp - 0x32c]
dec eax
mov dword [ebp - 0x32c], eax
mov eax, dword [ebp - 0x884]
cmp eax, dword [ebp - 0x81c]
jne 0x1001c74c
mov dword [ebp - 0x39c], 1
jmp 0x1001c753
and dword [ebp - 0x39c], 0
cmp dword [ebp - 0x39c], 0x7b332e0c
jg 0x1001c76b
mov dword [ebp - 0x6a8], 1
jmp 0x1001c772
and dword [ebp - 0x6a8], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x8e8]
cmp dword [ebp - 0x6a8], eax
jl 0x1001c793
mov dword [ebp - 0x3a4], 1
jmp 0x1001c79a
and dword [ebp - 0x3a4], 0
mov eax, dword [ebp - 0x3a4]
mov dword [ebp - 0x334], eax
mov eax, dword [ebp - 0x334]
mov dword [ebp - 0xb2c], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x8e8]
cmp dword [ebp - 0x1d8], eax
jne 0x1001c7d3
mov dword [ebp - 0x6b0], 1
jmp 0x1001c7da
and dword [ebp - 0x6b0], 0
mov eax, dword [ebp - 0x6b0]
mov dword [ebp - 0x83c], eax
push dword [ebp + 8]
lea ecx, [ebp - 0x954]
call fcn.100162c6
mov dword [ebp - 4], 1
lea eax, [ebp - 0xac8]
push eax
lea ecx, [ebp - 0x954]
call fcn.10016a71
push dword [eax]
lea eax, [ebp - 0xb54]
push eax
lea ecx, [ebp - 0x954]
call fcn.10016a85
push dword [eax]
lea eax, [ebp - 0xa3c]
push eax
lea ecx, [ebp - 0x954]
call fcn.10016a71
push dword [eax]
mov edx, 0x10019631
lea ecx, [ebp - 0xa44]
call fcn.10023614
add esp, 0xc
mov dword [ebp - 0x144], 0xada439be
mov dword [ebp - 0x788], 0xfffffffa
mov dword [ebp - 0x158], 0
jmp 0x1001c877
mov eax, dword [ebp - 0x158]
inc eax
mov dword [ebp - 0x158], eax
cmp dword [ebp - 0x158], 4
jge 0x1001c893
mov eax, dword [ebp - 0x158]
mov dword [ebp + eax*4 - 0x964], 0xbbca
jmp 0x1001c86a
mov dword [ebp - 0x144], 3
jmp 0x1001c8ac
mov eax, dword [ebp - 0x144]
dec eax
mov dword [ebp - 0x144], eax
cmp dword [ebp - 0x144], 0
jl 0x1001cc0c
mov dword [ebp - 0x24], 0x4cdb8faa
mov byte [ebp - 0x74], 0
movzx eax, byte [ebp - 0x74]
test eax, eax
je 0x1001c8d4
push 1
call fcn.1001b806
pop ecx
mov dword [ebp - 0x24], 3
jmp 0x1001c8e4
mov eax, dword [ebp - 0x24]
dec eax
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 0
jl 0x1001c90e
mov byte [ebp - 0x73], 0
movzx eax, byte [ebp - 0x73]
test eax, eax
je 0x1001c90c
push 0
push 0x23f9
push 0
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_SetTimer]
jmp 0x1001c8dd
mov dword [ebp - 0x24], 3
jmp 0x1001c91e
mov eax, dword [ebp - 0x24]
dec eax
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 0
jl 0x1001cc07
mov dword [ebp - 0x18], 0xfffffffd
mov dword [ebp - 0x7e4], 4
mov dword [ebp - 0x18], 3
jmp 0x1001c949
mov eax, dword [ebp - 0x18]
dec eax
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 0
jl 0x1001cbdc
mov dword [ebp - 0x14c], 0x8d3a18e4
mov dword [ebp - 0x3d4], 0xca779041
mov dword [ebp - 0x6b8], 0xe07ea4c5
mov dword [ebp - 0x14c], 3
jmp 0x1001c98a
mov eax, dword [ebp - 0x14c]
dec eax
mov dword [ebp - 0x14c], eax
cmp dword [ebp - 0x14c], 0
jl 0x1001cbd7
mov dword [ebp - 0x13c], 0x17c10977
mov dword [ebp - 0x3c4], 0xd058bbe5
mov dword [ebp - 0x1cc], 0
jmp 0x1001c9c4
mov eax, dword [ebp - 0x1cc]
inc eax
mov dword [ebp - 0x1cc], eax
cmp dword [ebp - 0x1cc], 2
jge 0x1001c9e0
mov eax, dword [ebp - 0x1cc]
mov dword [ebp + eax*4 - 0x9fc], 0
jmp 0x1001c9b7
mov dword [ebp - 0x13c], 0
jmp 0x1001c9f9
mov eax, dword [ebp - 0x13c]
inc eax
mov dword [ebp - 0x13c], eax
cmp dword [ebp - 0x13c], 3
jg 0x1001cbd2
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp + eax*4 - 0x964]
mov dword [ebp - 0xa4c], eax
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0xa54], eax
mov eax, dword [ebp - 0x24]
mov dword [ebp - 0x3d4], eax
mov eax, 0x94ff5452
cmp eax, 0x14b11f38
jb 0x1001ca40
mov dword [ebp - 0x3ac], 1
jmp 0x1001ca47
and dword [ebp - 0x3ac], 0
mov eax, dword [ebp - 0x3ac]
mov dword [ebp - 0x6b8], eax
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp + eax*4 - 0x964]
mov dword [ebp - 0xa5c], eax
mov eax, dword [ebp - 0x6b8]
mov dword [ebp - 0xa64], eax
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0xa6c], eax
mov eax, dword [ebp - 0x18]
cmp dword [ebp + eax*4 - 0x964], 0xf15cc7c4
jbe 0x1001ca94
mov dword [ebp - 0x3b4], 1
jmp 0x1001ca9b
and dword [ebp - 0x3b4], 0
mov eax, dword [ebp - 0x13c]
cmp dword [ebp - 0x3b4], eax
jge 0x1001cbae
mov dword [ebp - 0x33c], 3
mov dword [ebp - 0x6d8], 0x4c3f121f
cmp dword [ebp - 0x24], 0
je 0x1001caea
mov eax, dword [ebp - 0x33c]
mov ecx, dword [ebp - 0x33c]
dec ecx
mov dword [ebp - 0x33c], ecx
test eax, eax
je 0x1001caea
mov dword [ebp - 0x6c8], 1
jmp 0x1001caf1
and dword [ebp - 0x6c8], 0
cmp dword [ebp - 0x18], 0xff93
jg 0x1001cb06
mov dword [ebp - 0x6c0], 1
jmp 0x1001cb0d
and dword [ebp - 0x6c0], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x9fc]
imul eax, dword [ebp - 0x6c0]
cmp dword [ebp - 0x24], eax
jle 0x1001cb32
mov dword [ebp - 0x3bc], 1
jmp 0x1001cb39
and dword [ebp - 0x3bc], 0
mov eax, dword [ebp - 0x3bc]
sub eax, dword [ebp - 0x6d8]
sub eax, dword [ebp - 0x3c4]
mov ecx, dword [ebp - 0x6c8]
sub ecx, eax
mov dword [ebp - 0x7e4], ecx
mov eax, dword [ebp - 0x3c4]
sub eax, 0x7a5e1371
cmp dword [ebp - 0x24], eax
jle 0x1001cb75
mov dword [ebp - 0x6d0], 1
jmp 0x1001cb7c
and dword [ebp - 0x6d0], 0
mov eax, dword [ebp - 0x24]
cmp dword [ebp - 0x6d0], eax
jl 0x1001cb93
mov dword [ebp - 0x3cc], 1
jmp 0x1001cb9a
and dword [ebp - 0x3cc], 0
mov eax, dword [ebp - 0x3cc]
sub eax, dword [ebp - 0x144]
mov dword [ebp - 0x6d8], eax
jmp 0x1001cbcd
lea eax, [ebp - 0x3d4]
push eax
lea eax, [ebp - 0x788]
push eax
push 0
lea eax, [ebp - 0x14c]
push eax
call fcn.1001bdcc
add esp, 0x10
jmp 0x1001c9ec
jmp 0x1001c97d
jmp 0x1001c942
mov dword [ebp - 0x18], 0
jmp 0x1001cbec
mov eax, dword [ebp - 0x18]
inc eax
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 4
jge 0x1001cc02
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x964], 0x3b7d
jmp 0x1001cbe5
jmp 0x1001c917
jmp 0x1001c89f
lea ecx, [ebp - 0x954]
call fcn.100195bc
mov dword [ebp - 0x398], eax
mov dword [ebp - 0xa74], 0xfffffffc
mov byte [ebp - 0xa3], 0
lea eax, [ebp - 0xa3]
push eax
push 0
push 0x13ca
call fcn.1001ba09
add esp, 0xc
mov byte [ebp - 0x75], 0
movzx eax, byte [ebp - 0x75]
test eax, eax
je 0x1001cc5e
push 1
push 0x580d
call fcn.1001b836
pop ecx
pop ecx
movzx eax, byte [0x10674e29]
test eax, eax
je 0x1001d022
mov ecx, 0x10674efc
call fcn.100232f7
movzx eax, al
test eax, eax
jne 0x1001d022
lea eax, [ebp - 0x398]
push eax
lea eax, [ebp - 0x3f4]
push eax
mov ecx, 0x10674efc
call fcn.100165d6
mov dword [ebp - 0x128], 9
mov dword [ebp - 0x874], 0xfffffffb
mov dword [ebp - 0xb4], 0
mov dword [ebp - 0x1c], 0
jmp 0x1001ccc8
mov eax, dword [ebp - 0x1c]
inc eax
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 4
jge 0x1001ccde
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0xc18], 5
jmp 0x1001ccc1
mov dword [ebp - 0x1c], 0
jmp 0x1001ccee
mov eax, dword [ebp - 0x1c]
inc eax
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 3
jge 0x1001cd04
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0x930], 0xa284868f
jmp 0x1001cce7
mov dword [ebp - 0x1c], 0
jmp 0x1001cd14
mov eax, dword [ebp - 0x1c]
inc eax
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 2
jge 0x1001cd2a
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0x8d0], 1
jmp 0x1001cd0d
imul eax, dword [ebp - 0x128], 0xffff
cmp eax, 8
jle 0x1001cd45
mov dword [ebp - 0x6e0], 1
jmp 0x1001cd4c
and dword [ebp - 0x6e0], 0
mov eax, dword [ebp - 0x128]
cmp eax, dword [ebp - 0x6e0]
jg 0x1001cd66
mov dword [ebp - 0x3dc], 1
jmp 0x1001cd6d
and dword [ebp - 0x3dc], 0
mov eax, dword [ebp - 0x128]
add eax, dword [ebp - 0x3dc]
mov dword [ebp - 0xb4], eax
mov eax, dword [ebp - 0xb4]
add eax, dword [ebp - 0x874]
je 0x1001cd9d
xor eax, eax
je 0x1001cd9d
mov dword [ebp - 0x6e8], 1
jmp 0x1001cda4
and dword [ebp - 0x6e8], 0
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x930]
cmp dword [ebp - 0x6e8], eax
je 0x1001cdc4
mov dword [ebp - 0x790], 1
jmp 0x1001cdcb
and dword [ebp - 0x790], 0
mov eax, dword [ebp - 0x128]
mov dword [ebp - 0xa7c], eax
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x930]
mov dword [ebp - 0xa84], eax
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0x930], 0
je 0x1001ce47
mov dword [ebp - 0xb00], 0xa025ec56
mov dword [ebp - 0xb08], 0x2ad015b0
mov dword [ebp - 0xb10], 0
mov dword [ebp - 0xb18], 2
mov dword [ebp - 0xb20], 1
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x8d0]
inc eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x8d0], eax
jmp 0x1001ceab
mov dword [ebp - 0x844], 2
mov dword [ebp - 0xb4], 2
jmp 0x1001ce6a
mov eax, dword [ebp - 0xb4]
dec eax
mov dword [ebp - 0xb4], eax
cmp dword [ebp - 0xb4], 0
jl 0x1001ceab
mov byte [ebp - 0xa5], 0
movzx eax, byte [ebp - 0xa5]
test eax, eax
je 0x1001ce93
push 0x7ff1
push 0
call fcn.100215b0
pop ecx
pop ecx
push 1
lea eax, [ebp - 0x844]
push eax
push 0x1c17
call fcn.1001b871
add esp, 0xc
jmp 0x1001ce5d
cmp dword [ebp - 0x128], 0
jae 0x1001cec0
mov dword [ebp - 0x3e4], 1
jmp 0x1001cec7
and dword [ebp - 0x3e4], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x3e4]
mov dword [ebp + eax - 0xc18], ecx
lea eax, [ebp - 0xb28]
push eax
mov ecx, 0x10674efc
call fcn.100165c8
push eax
lea ecx, [ebp - 0x3f4]
call fcn.100165eb
movzx eax, al
test eax, eax
je 0x1001d022
mov dword [ebp - 0x168], 0xffffffff
mov dword [ebp - 0x1d4], 3
mov dword [ebp - 0xb30], 0xffffffff
mov dword [ebp - 0x160], 0
jmp 0x1001cf39
mov eax, dword [ebp - 0x160]
inc eax
mov dword [ebp - 0x160], eax
cmp dword [ebp - 0x160], 4
jge 0x1001cf55
mov eax, dword [ebp - 0x160]
mov dword [ebp + eax*4 - 0xc08], 0x2b000cd9
jmp 0x1001cf2c
mov eax, dword [ebp - 0x168]
add eax, dword [ebp - 0x1d4]
cmp dword [ebp - 0x168], eax
jle 0x1001cfb1
mov eax, dword [ebp - 0x1d4]
cmp dword [ebp - 0x1d4], eax
jle 0x1001cf83
mov dword [ebp - 0x6f0], 1
jmp 0x1001cf8a
and dword [ebp - 0x6f0], 0
mov eax, dword [ebp - 0x1d4]
cmp eax, dword [ebp - 0x6f0]
jle 0x1001cfa4
mov dword [ebp - 0x3ec], 1
jmp 0x1001cfab
and dword [ebp - 0x3ec], 0
mov eax, dword [ebp - 0x168]
cmp dword [ebp - 0x168], 0xffffffff
ja 0x1001cfc6
mov dword [ebp - 0x6f8], 1
jmp 0x1001cfcd
and dword [ebp - 0x6f8], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x6f8]
mov dword [ebp + eax - 0xc08], ecx
mov byte [ebp - 0x7d], 0
movzx eax, byte [ebp - 0x7d]
test eax, eax
je 0x1001cff4
push 0
call dword [sym.imp.GDI32.dll_CreateSolidBrush]
lea ecx, [ebp - 0x3f4]
call fcn.10023300
mov eax, dword [eax + 4]
mov dword [ebp - 0x798], eax
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x954]
call fcn.1001634b
mov eax, dword [ebp - 0x798]
jmp 0x100215a2
mov dword [ebp - 0x134], 0xfffffff8
mov dword [ebp - 0x3fc], 0xffffffff
mov dword [ebp - 0x7a0], 0x46cdead9
cmp dword [ebp - 0x134], 0
je 0x1001d0ac
mov dword [ebp - 0x880], 0xb7f37c04
mov dword [ebp - 0x134], 0xffffffff
jmp 0x1001d06c
mov eax, dword [ebp - 0x134]
inc eax
mov dword [ebp - 0x134], eax
cmp dword [ebp - 0x134], 0x1a
jne 0x1001d0aa
mov dword [ebp - 0x700], 8
mov eax, dword [ebp - 0x700]
mov dword [ebp - 0x3fc], eax
lea eax, [ebp - 0x880]
push eax
push 0x5a88
lea eax, [ebp - 0x700]
push eax
push 1
call fcn.1001b8ae
add esp, 0x10
jmp 0x1001d05f
jmp 0x1001d0c9
lea eax, [ebp - 0x3fc]
push eax
push 0x73b8
push 0
lea eax, [ebp - 0x7a0]
push eax
call fcn.1001be46
add esp, 0x10
and dword [ebp - 0xd8], 0
mov dword [ebp - 0x5c], 0xffffffff
mov dword [ebp - 0x1dc], 0
jmp 0x1001d0f0
mov eax, dword [ebp - 0x1dc]
inc eax
mov dword [ebp - 0x1dc], eax
cmp dword [ebp - 0x1dc], 3
jge 0x1001d10c
mov eax, dword [ebp - 0x1dc]
mov dword [ebp + eax*4 - 0xa94], 0x4778
jmp 0x1001d0e3
mov dword [ebp - 0x5c], 2
jmp 0x1001d11c
mov eax, dword [ebp - 0x5c]
dec eax
mov dword [ebp - 0x5c], eax
cmp dword [ebp - 0x5c], 0
jl 0x1001d25a
mov dword [ebp - 0x7c], 0xfffffffb
mov dword [ebp - 0x170], 0
jmp 0x1001d146
mov eax, dword [ebp - 0x170]
inc eax
mov dword [ebp - 0x170], eax
cmp dword [ebp - 0x170], 4
jge 0x1001d162
mov eax, dword [ebp - 0x170]
mov dword [ebp + eax*4 - 0xb8c], 0x39ba095a
jmp 0x1001d139
mov dword [ebp - 0x7c], 0
jmp 0x1001d172
mov eax, dword [ebp - 0x7c]
inc eax
mov dword [ebp - 0x7c], eax
cmp dword [ebp - 0x7c], 2
jg 0x1001d255
mov dword [ebp - 0x1e4], 0xfffffff6
mov dword [ebp - 0x1e4], 2
jmp 0x1001d19f
mov eax, dword [ebp - 0x1e4]
dec eax
mov dword [ebp - 0x1e4], eax
cmp dword [ebp - 0x1e4], 0
jl 0x1001d250
mov dword [ebp - 0x344], 0
push 4
pop eax
imul eax, eax, 3
mov dword [ebp + eax - 0xb8c], 0x924c0001
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x7c]
cmp dword [ebp + eax - 0xb8c], ecx
jl 0x1001d1e5
mov dword [ebp - 0x708], 1
jmp 0x1001d1ec
and dword [ebp - 0x708], 0
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x5c]
mov eax, dword [ebp + eax - 0xa94]
mov dword [ebp + ecx*4 - 0xa94], eax
mov eax, dword [ebp - 0x7c]
cmp dword [ebp - 0x708], eax
jg 0x1001d21a
mov dword [ebp - 0x84c], 1
jmp 0x1001d221
and dword [ebp - 0x84c], 0
mov eax, dword [ebp - 0x344]
cmp dword [ebp - 0x7c], eax
jl 0x1001d238
mov dword [ebp - 0x7a8], 1
jmp 0x1001d23f
and dword [ebp - 0x7a8], 0
mov eax, dword [ebp - 0x344]
mov dword [ebp - 0x344], eax
jmp 0x1001d192
jmp 0x1001d16b
jmp 0x1001d115
mov dword [ebp - 0x5c], 0
jmp 0x1001d26a
mov eax, dword [ebp - 0x5c]
dec eax
mov dword [ebp - 0x5c], eax
cmp dword [ebp - 0x5c], 0xffffffe6
je 0x1001d2e8
mov dword [ebp - 0x34c], 0x4d07ddbf
mov dword [ebp - 0x87c], 0x6ac3a608
mov dword [ebp - 0x178], 0
jmp 0x1001d29d
mov eax, dword [ebp - 0x178]
inc eax
mov dword [ebp - 0x178], eax
cmp dword [ebp - 0x178], 2
jge 0x1001d2b9
mov eax, dword [ebp - 0x178]
mov dword [ebp + eax*4 - 0xa08], 9
jmp 0x1001d290
push 4
pop eax
shl eax, 0
mov dword [ebp + eax - 0xa08], 0xffffffff
mov eax, dword [ebp - 0x34c]
mov dword [ebp - 0x34c], eax
imul eax, dword [ebp - 0x34c], 0xffffffff
mov dword [ebp - 0x87c], eax
jmp 0x1001d263
lea eax, [ebp - 0x954]
push eax
call fcn.1001a316
pop ecx
mov dword [ebp - 0xd8], eax
cmp dword [ebp - 0xd8], 0
jne 0x10021169
mov dword [ebp - 0x34], 1
mov dword [ebp - 0x2f8], 0xd743ccc
mov dword [ebp - 0x424], 3
mov dword [ebp - 0xb38], 0xffe61709
mov dword [ebp - 0x108], 0
mov dword [ebp - 0x54], 0
jmp 0x1001d347
mov eax, dword [ebp - 0x54]
inc eax
mov dword [ebp - 0x54], eax
cmp dword [ebp - 0x54], 3
jge 0x1001d35d
mov eax, dword [ebp - 0x54]
mov dword [ebp + eax*4 - 0x924], 0x89b5
jmp 0x1001d340
mov dword [ebp - 0x54], 0
jmp 0x1001d36d
mov eax, dword [ebp - 0x54]
inc eax
mov dword [ebp - 0x54], eax
cmp dword [ebp - 0x54], 2
jge 0x1001d383
mov eax, dword [ebp - 0x54]
mov dword [ebp + eax*4 - 0x810], 0x3b1d
jmp 0x1001d366
mov dword [ebp - 0x34], 0x16
jmp 0x1001d393
mov eax, dword [ebp - 0x34]
dec eax
mov dword [ebp - 0x34], eax
cmp dword [ebp - 0x34], 0xf
je 0x1001d77e
mov dword [ebp - 0x68], 0xffab8c3a
mov dword [ebp - 0x68c], 0xc700
mov dword [ebp - 0x72c], 0
mov dword [ebp - 0x1f4], 0xffff
mov dword [ebp - 0x6fc], 0xa2dd
mov dword [ebp - 0x1ec], 0
jmp 0x1001d3e5
mov eax, dword [ebp - 0x1ec]
inc eax
mov dword [ebp - 0x1ec], eax
cmp dword [ebp - 0x1ec], 4
jge 0x1001d401
mov eax, dword [ebp - 0x1ec]
mov dword [ebp + eax*4 - 0xbf8], 0xfffffff6
jmp 0x1001d3d8
mov dword [ebp - 0x68], 0
jmp 0x1001d411
mov eax, dword [ebp - 0x68]
inc eax
mov dword [ebp - 0x68], eax
cmp dword [ebp - 0x68], 2
jg 0x1001d5db
mov dword [ebp - 0x710], 0x4653ffd0
mov dword [ebp - 0x7b0], 0
mov dword [ebp - 0x7b8], 0x8d23
mov dword [ebp - 0x180], 0
jmp 0x1001d452
mov eax, dword [ebp - 0x180]
inc eax
mov dword [ebp - 0x180], eax
cmp dword [ebp - 0x180], 2
jge 0x1001d46e
mov eax, dword [ebp - 0x180]
mov dword [ebp + eax*4 - 0x8f8], 0xfffffff7
jmp 0x1001d445
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x8f8]
mov dword [ebp - 0xb40], eax
mov eax, dword [ebp - 0x34]
inc eax
mov dword [ebp - 0x710], eax
mov eax, dword [ebp - 0x710]
add eax, dword [ebp - 0x7b0]
je 0x1001d4a5
mov dword [ebp - 0x5b4], 1
jmp 0x1001d4ac
and dword [ebp - 0x5b4], 0
mov eax, dword [ebp - 0x34]
cmp dword [ebp - 0x5b4], eax
je 0x1001d4c3
mov dword [ebp - 0x40c], 1
jmp 0x1001d4ca
and dword [ebp - 0x40c], 0
mov eax, dword [ebp - 0x68c]
cmp eax, dword [ebp - 0x40c]
je 0x1001d4f0
cmp dword [ebp - 0x68], 0
je 0x1001d4f0
cmp dword [ebp - 0x34], 0
je 0x1001d4f0
mov dword [ebp - 0x414], 1
jmp 0x1001d4f7
and dword [ebp - 0x414], 0
mov eax, dword [ebp - 0x68c]
mov dword [ebp - 0x354], eax
mov eax, dword [ebp - 0x68]
mov ecx, dword [ebp - 0x354]
mov dword [ebp + eax*4 - 0x924], ecx
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x354]
mov dword [ebp + eax - 0x8f8], ecx
mov eax, dword [ebp - 0x354]
add eax, dword [ebp - 0x414]
imul eax, eax, 0xe712
cmp eax, dword [ebp - 0x2f8]
jl 0x1001d54c
mov dword [ebp - 0x854], 1
jmp 0x1001d553
and dword [ebp - 0x854], 0
mov eax, dword [ebp - 0x34]
mov dword [ebp - 0xb48], eax
mov eax, dword [ebp - 0x2f8]
mov dword [ebp - 0x7b8], eax
mov eax, 0x210cbedf
test eax, eax
je 0x1001d584
push 0xfffffffffffffffc
pop eax
test eax, eax
je 0x1001d584
mov dword [ebp - 0x5bc], 1
jmp 0x1001d58b
and dword [ebp - 0x5bc], 0
cmp dword [ebp - 0x5bc], 0x4acc0136
jl 0x1001d5a3
mov dword [ebp - 0x41c], 1
jmp 0x1001d5aa
and dword [ebp - 0x41c], 0
mov eax, dword [ebp - 0x41c]
mov dword [ebp - 0x424], eax
mov byte [ebp - 0xa7], 0
movzx eax, byte [ebp - 0xa7]
test eax, eax
je 0x1001d5d6
push 0x7677
push 1
call fcn.1001b91b
pop ecx
pop ecx
jmp 0x1001d40a
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x924], 0
jne 0x1001d6a4
cmp dword [ebp - 0x34], 0
je 0x1001d618
mov eax, dword [ebp - 0x1f4]
mov dword [ebp - 0x72c], eax
mov eax, dword [ebp - 0x72c]
mov ecx, dword [ebp - 0x1f4]
inc ecx
mov dword [ebp - 0x1f4], ecx
test eax, eax
jne 0x1001d627
mov eax, dword [ebp - 0x108]
inc eax
mov dword [ebp - 0x108], eax
je 0x1001d63c
cmp dword [ebp - 0x108], 0
je 0x1001d63c
mov dword [ebp - 0x694], 1
jmp 0x1001d643
and dword [ebp - 0x694], 0
mov eax, 0xdb1a
test eax, eax
je 0x1001d661
cmp dword [ebp - 0x424], 0
je 0x1001d661
mov dword [ebp - 0x5c4], 1
jmp 0x1001d668
and dword [ebp - 0x5c4], 0
mov eax, dword [ebp - 0x5c4]
sub eax, 9
cmp eax, 6
je 0x1001d682
mov dword [ebp - 0x42c], 1
jmp 0x1001d689
and dword [ebp - 0x42c], 0
imul eax, dword [ebp - 0x42c], 0x53cf
cmp dword [ebp - 0x694], eax
je 0x1001d6a4
and dword [ebp - 0x434], 0
jmp 0x1001d6ae
mov dword [ebp - 0x434], 1
mov eax, dword [ebp - 0x34]
add eax, dword [ebp - 0x434]
jne 0x1001d6c0
cmp dword [ebp - 0x1f4], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x810]
mov dword [ebp - 0xb50], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x924], 9
jl 0x1001d6ef
mov dword [ebp - 0x5cc], 1
jmp 0x1001d6f6
and dword [ebp - 0x5cc], 0
mov eax, dword [ebp - 0x5cc]
mov dword [ebp - 0x68], eax
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x810]
cmp dword [ebp - 0x68], eax
je 0x1001d71d
mov dword [ebp - 0x43c], 1
jmp 0x1001d724
and dword [ebp - 0x43c], 0
mov eax, dword [ebp - 0x6fc]
cmp dword [ebp - 0x43c], eax
je 0x1001d73e
mov dword [ebp - 0x444], 1
jmp 0x1001d745
and dword [ebp - 0x444], 0
mov eax, dword [ebp - 0x6fc]
cmp dword [ebp - 0x444], eax
jg 0x1001d75f
mov dword [ebp - 0x5d4], 1
jmp 0x1001d766
and dword [ebp - 0x5d4], 0
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x5d4]
mov dword [ebp + eax - 0xbf8], ecx
jmp 0x1001d38c
mov eax, dword [ebp - 0x2f8]
mov dword [ebp - 0xb7c], eax
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x810], 0x40e6
jg 0x1001d7a9
mov dword [ebp - 0x44c], 1
jmp 0x1001d7b0
and dword [ebp - 0x44c], 0
mov eax, dword [ebp - 0x108]
cmp dword [ebp - 0x44c], eax
jge 0x1001d7ca
mov dword [ebp - 0x69c], 1
jmp 0x1001d7d1
and dword [ebp - 0x69c], 0
mov eax, dword [ebp - 0x69c]
mov dword [ebp - 0x34], eax
mov dword [ebp - 0xec], 0x1e1e87df
mov dword [ebp - 0x188], 0
jmp 0x1001d7fd
mov eax, dword [ebp - 0x188]
inc eax
mov dword [ebp - 0x188], eax
cmp dword [ebp - 0x188], 3
jge 0x1001d819
mov eax, dword [ebp - 0x188]
mov dword [ebp + eax*4 - 0xaa4], 0xfffffffe
jmp 0x1001d7f0
mov dword [ebp - 0xec], 2
jmp 0x1001d832
mov eax, dword [ebp - 0xec]
dec eax
mov dword [ebp - 0xec], eax
cmp dword [ebp - 0xec], 0
jl 0x1001d877
mov byte [ebp - 0x85], 0
movzx eax, byte [ebp - 0x85]
test eax, eax
je 0x1001d85b
push 0xebd
push 1
call fcn.1001b965
pop ecx
pop ecx
mov eax, dword [ebp - 0xec]
mov ecx, dword [ebp - 0xec]
mov eax, dword [ebp + eax*4 - 0xaa4]
mov dword [ebp + ecx*4 - 0xaa4], eax
jmp 0x1001d825
cmp dword [0x10674e2c], 0
jne 0x10020c3a
mov dword [ebp - 0x204], 0xfffffffb
mov dword [ebp - 0x1fc], 0
jmp 0x1001d8a7
mov eax, dword [ebp - 0x1fc]
inc eax
mov dword [ebp - 0x1fc], eax
cmp dword [ebp - 0x1fc], 2
jge 0x1001d8c3
mov eax, dword [ebp - 0x1fc]
mov dword [ebp + eax*4 - 0xbc8], 0xffff
jmp 0x1001d89a
mov dword [ebp - 0x204], 0xffffffff
jmp 0x1001d8dc
mov eax, dword [ebp - 0x204]
inc eax
mov dword [ebp - 0x204], eax
cmp dword [ebp - 0x204], 1
je 0x1001d961
mov dword [ebp - 0x888], 0xfffffffa
mov dword [ebp - 0x148], 0xd435
cmp dword [ebp - 0x888], 1
jae 0x1001d90e
mov dword [ebp - 0x454], 1
jmp 0x1001d915
and dword [ebp - 0x454], 0
mov eax, dword [ebp - 0x454]
mov dword [ebp - 0x148], eax
mov dword [ebp - 0x148], 0
jmp 0x1001d93a
mov eax, dword [ebp - 0x148]
inc eax
mov dword [ebp - 0x148], eax
cmp dword [ebp - 0x148], 1
jg 0x1001d95c
mov byte [ebp - 0xa9], 0
movzx eax, byte [ebp - 0xa9]
test eax, eax
je 0x1001d95a
call fcn.1001b9bf
jmp 0x1001d92d
jmp 0x1001d8cf
mov dword [ebp - 0x130], 0x167fa5c6
mov dword [ebp - 0x198], 0xfffffffd
mov dword [ebp - 0x330], 0xfffffffd
mov dword [ebp - 0xb70], 0x4f5ac3d6
mov dword [ebp - 0x73c], 0x936be856
mov dword [ebp - 0x474], 0xa5308633
mov dword [ebp - 0xbc], 1
mov dword [ebp - 0x218], 1
mov dword [ebp - 0x300], 0
mov dword [ebp - 0x110], 0x6ac3a608
mov dword [ebp - 0x5dc], 9
mov dword [ebp - 0x350], 0xbfc7
mov dword [ebp - 0x60], 0
jmp 0x1001d9e9
mov eax, dword [ebp - 0x60]
inc eax
mov dword [ebp - 0x60], eax
cmp dword [ebp - 0x60], 3
jge 0x1001d9ff
mov eax, dword [ebp - 0x60]
mov dword [ebp + eax*4 - 0x8a4], 0x315b
jmp 0x1001d9e2
mov dword [ebp - 0x60], 0
jmp 0x1001da0f
mov eax, dword [ebp - 0x60]
inc eax
mov dword [ebp - 0x60], eax
cmp dword [ebp - 0x60], 3
jge 0x1001da25
mov eax, dword [ebp - 0x60]
mov dword [ebp + eax*4 - 0xab4], 0x6237ddc4
jmp 0x1001da08
cmp dword [ebp - 0x130], 0
jne 0x1001da3a
mov dword [ebp - 0x604], 1
jmp 0x1001da41
and dword [ebp - 0x604], 0
mov eax, dword [ebp - 0xbc]
mov dword [ebp - 0x5dc], eax
mov eax, dword [ebp - 0x5dc]
imul eax, dword [ebp - 0x110]
cmp eax, dword [ebp - 0x110]
jle 0x1001da6e
mov dword [ebp - 0x45c], 1
jmp 0x1001da75
and dword [ebp - 0x45c], 0
mov eax, dword [ebp - 0x45c]
mov dword [ebp - 0x218], eax
mov eax, dword [ebp - 0x198]
cmp dword [ebp - 0x218], eax
mov eax, 0x93d
sub eax, 0xedbe
add eax, dword [ebp - 0x198]
je 0x1001daaf
xor eax, eax
je 0x1001daaf
mov dword [ebp - 0x734], 1
jmp 0x1001dab6
and dword [ebp - 0x734], 0
mov eax, dword [ebp - 0x300]
cmp dword [ebp - 0x734], eax
jne 0x1001dad0
mov dword [ebp - 0x464], 1
jmp 0x1001dad7
and dword [ebp - 0x464], 0
mov eax, dword [ebp - 0x474]
cmp dword [ebp - 0x464], eax
jle 0x1001daec
cmp dword [ebp - 0x130], 0
xor eax, eax
jne 0x1001dafe
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x8a4], 0
push 0xfffffffffffffffa
pop eax
cmp eax, 0x98071081
jb 0x1001db14
mov dword [ebp - 0x5e4], 1
jmp 0x1001db1b
and dword [ebp - 0x5e4], 0
cmp dword [ebp - 0x5e4], 0x67d
jle 0x1001db33
mov dword [ebp - 0x46c], 1
jmp 0x1001db3a
and dword [ebp - 0x46c], 0
mov eax, dword [ebp - 0x330]
cmp dword [ebp - 0x46c], eax
jg 0x1001db54
mov dword [ebp - 0x6a4], 1
jmp 0x1001db5b
and dword [ebp - 0x6a4], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x8a4]
cmp dword [ebp - 0x6a4], eax
jl 0x1001db7c
mov dword [ebp - 0x5ec], 1
jmp 0x1001db83
and dword [ebp - 0x5ec], 0
mov eax, dword [ebp - 0x474]
cmp dword [ebp - 0x5ec], eax
je 0x1001db9d
mov dword [ebp - 0x47c], 1
jmp 0x1001dba4
and dword [ebp - 0x47c], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x8a4]
cmp dword [ebp - 0x47c], eax
jle 0x1001dbc5
mov dword [ebp - 0x704], 1
jmp 0x1001dbcc
and dword [ebp - 0x704], 0
mov eax, dword [ebp - 0x350]
mov ecx, dword [ebp - 0x704]
mov edx, dword [ebp - 0x350]
inc edx
mov dword [ebp - 0x350], edx
cmp eax, ecx
jne 0x1001dbfb
mov eax, 0x60deea39
test eax, eax
jne 0x1001dbfb
and dword [ebp - 0x484], 0
jmp 0x1001dc05
mov dword [ebp - 0x484], 1
mov eax, dword [ebp - 0x484]
mov dword [ebp - 0x330], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x8a4], 0
je 0x1001dc34
push 9
pop eax
test eax, eax
je 0x1001dc34
mov dword [ebp - 0x5f4], 1
jmp 0x1001dc3b
and dword [ebp - 0x5f4], 0
mov eax, dword [ebp - 0x110]
imul eax, dword [ebp - 0x5f4]
cmp eax, 0x56014efc
jne 0x1001dc5b
mov dword [ebp - 0x48c], 1
jmp 0x1001dc62
and dword [ebp - 0x48c], 0
cmp dword [ebp - 0x48c], 0xffffffff
jg 0x1001dc77
mov dword [ebp - 0x6ac], 1
jmp 0x1001dc7e
and dword [ebp - 0x6ac], 0
mov eax, dword [ebp - 0x6ac]
add eax, 0x1939
imul eax, eax, 0xd913
push 4
pop ecx
shl ecx, 0
cmp eax, dword [ebp + ecx - 0xab4]
jg 0x1001dcaa
mov dword [ebp - 0x494], 1
jmp 0x1001dcb1
and dword [ebp - 0x494], 0
mov eax, dword [ebp - 0x494]
neg eax
cmp eax, dword [ebp - 0x130]
jne 0x1001dcd6
cmp dword [ebp - 0x300], 0
je 0x1001dcd6
mov dword [ebp - 0x5fc], 1
jmp 0x1001dcdd
and dword [ebp - 0x5fc], 0
cmp dword [ebp - 0x5fc], 0xffffffff
je 0x1001dcf8
cmp dword [ebp - 0x73c], 0
jne 0x1001dcf8
and dword [ebp - 0x49c], 0
jmp 0x1001dd02
mov dword [ebp - 0x49c], 1
mov eax, dword [ebp - 0x130]
cmp eax, dword [ebp - 0x49c]
jl 0x1001dd1c
mov dword [ebp - 0x4a4], 1
jmp 0x1001dd23
and dword [ebp - 0x4a4], 0
mov eax, dword [ebp - 0x73c]
add eax, dword [ebp - 0x4a4]
cmp dword [ebp - 0x604], eax
jl 0x1001dd4c
mov eax, 0x4a3a207b
test eax, eax
je 0x1001dd4c
mov dword [ebp - 0x4ac], 1
jmp 0x1001dd53
and dword [ebp - 0x4ac], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xab4]
cmp dword [ebp - 0x4ac], eax
jg 0x1001dd74
mov dword [ebp - 0x6b4], 1
jmp 0x1001dd7b
and dword [ebp - 0x6b4], 0
mov eax, dword [ebp - 0x6b4]
mov dword [ebp - 0x110], eax
cmp dword [ebp - 0x110], 0
je 0x1001ddaf
mov byte [ebp - 0xa2], 0
movzx eax, byte [ebp - 0xa2]
test eax, eax
je 0x1001ddaa
push 0
call fcn.1001bec7
pop ecx
jmp 0x1001e09c
mov dword [ebp - 0x194], 0
jmp 0x1001ddc8
mov eax, dword [ebp - 0x194]
inc eax
mov dword [ebp - 0x194], eax
cmp dword [ebp - 0x194], 3
jge 0x1001dde4
mov eax, dword [ebp - 0x194]
mov dword [ebp + eax*4 - 0x2e0], 0x8a84a00
jmp 0x1001ddbb
xor eax, eax
jne 0x1001df4c
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x2e0], 0
je 0x1001de8b
push 4
pop eax
shl eax, 1
mov ecx, 0xd3e8
sub ecx, dword [ebp + eax - 0x2e0]
add ecx, 9
cmp ecx, dword [ebp - 0x130]
jge 0x1001de28
mov dword [ebp - 0x4b4], 1
jmp 0x1001de2f
and dword [ebp - 0x4b4], 0
mov eax, dword [ebp - 0x300]
cmp dword [ebp - 0x4b4], eax
jl 0x1001de49
mov dword [ebp - 0x7c0], 1
jmp 0x1001de50
and dword [ebp - 0x7c0], 0
mov eax, dword [ebp - 0x198]
mov dword [ebp - 0xb34], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x2e0]
mov dword [ebp - 0xa00], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x2e0], 0
je 0x1001de8b
mov dword [ebp - 0x60c], 1
jmp 0x1001de92
and dword [ebp - 0x60c], 0
mov eax, dword [ebp - 0x60c]
inc eax
cmp eax, 6
jle 0x1001deaa
mov dword [ebp - 0x4bc], 1
jmp 0x1001deb1
and dword [ebp - 0x4bc], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x2e0]
cmp dword [ebp - 0x4bc], eax
jle 0x1001ded2
mov dword [ebp - 0x85c], 1
jmp 0x1001ded9
and dword [ebp - 0x85c], 0
mov eax, dword [ebp - 0xbc]
mov dword [ebp - 0xa1c], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x2e0]
cmp dword [ebp - 0x198], eax
jne 0x1001df06
mov dword [ebp - 0x70c], 1
jmp 0x1001df0d
and dword [ebp - 0x70c], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x2e0]
cmp eax, dword [ebp - 0x70c]
jge 0x1001df2e
mov dword [ebp - 0x7c8], 1
jmp 0x1001df35
and dword [ebp - 0x7c8], 0
xor eax, eax
inc eax
je 0x1001df43
cmp dword [ebp - 0x218], 0
jne 0x1001df4c
and dword [ebp - 0x4c4], 0
jmp 0x1001df56
mov dword [ebp - 0x4c4], 1
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x2e0]
cmp dword [ebp - 0x4c4], eax
je 0x1001df76
mov dword [ebp - 0x614], 1
jmp 0x1001df7d
and dword [ebp - 0x614], 0
mov eax, dword [ebp - 0x218]
cmp dword [ebp - 0x614], eax
je 0x1001df97
mov dword [ebp - 0x4cc], 1
jmp 0x1001df9e
and dword [ebp - 0x4cc], 0
mov eax, dword [ebp - 0x330]
imul eax, dword [ebp - 0x4cc]
push 4
pop ecx
imul ecx, ecx, 0
imul eax, dword [ebp + ecx - 0x2e0]
test eax, eax
ja 0x1001dfde
mov dword [ebp - 0x890], 0x5a2910e9
push 4
pop eax
shl eax, 1
mov ecx, dword [ebp - 0x890]
mov dword [ebp + eax - 0x2e0], ecx
jmp 0x1001e09c
mov dword [ebp - 0x118], 0x339bca7a
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x118]
mov dword [ebp + eax - 0x2e0], ecx
mov dword [ebp - 0xbc], 0
jmp 0x1001e014
mov eax, dword [ebp - 0xbc]
inc eax
mov dword [ebp - 0xbc], eax
cmp dword [ebp - 0xbc], 0x12
jne 0x1001e09c
mov eax, dword [ebp - 0x118]
add eax, dword [ebp - 0x118]
je 0x1001e037
mov dword [ebp - 0x6bc], 1
jmp 0x1001e03e
and dword [ebp - 0x6bc], 0
cmp dword [ebp - 0x118], 0
jne 0x1001e059
cmp dword [ebp - 0x118], 0
jne 0x1001e059
and dword [ebp - 0x4d4], 0
jmp 0x1001e063
mov dword [ebp - 0x4d4], 1
mov eax, dword [ebp - 0x6bc]
cmp eax, dword [ebp - 0x4d4]
jg 0x1001e07d
mov dword [ebp - 0x61c], 1
jmp 0x1001e084
and dword [ebp - 0x61c], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x61c]
mov dword [ebp + eax - 0x2e0], ecx
jmp 0x1001e007
mov byte [ebp - 0x8d], 0
movzx eax, byte [ebp - 0x8d]
test eax, eax
je 0x1001e0c2
push 0
push 0x4746
push 0x68bb
call fcn.1001bcf2
add esp, 0xc
mov byte [ebp - 0x25c], 9
mov byte [ebp - 0x25b], 0x38
mov byte [ebp - 0x25a], 2
mov byte [ebp - 0x259], 0x16
mov byte [ebp - 0x258], 4
mov byte [ebp - 0x257], 0x17
mov byte [ebp - 0x256], 3
mov byte [ebp - 0x255], 0xb
mov byte [ebp - 0x254], 0xb
mov byte [ebp - 0x253], 2
mov byte [ebp - 0x252], 6
mov byte [ebp - 0x251], 0x5f
mov byte [ebp - 0x250], 0
mov byte [ebp - 0x24f], 0x78
mov byte [ebp - 0x24e], 7
mov byte [ebp - 0x24d], 0x79
mov byte [ebp - 0x24c], 5
mov byte [ebp - 0x24b], 0x5e
mov byte [ebp - 0x24a], 1
mov byte [ebp - 0x249], 9
mov byte [ebp - 0x248], 0x26
mov byte [ebp - 0x247], 0xe6
mov byte [ebp - 0x246], 0xe2
mov byte [ebp - 0x245], 0x5d
mov byte [ebp - 0x244], 0x99
mov byte [ebp - 0x243], 0x42
mov byte [ebp - 0x242], 0xd8
mov byte [ebp - 0x241], 0xba
mov byte [ebp - 0x240], 0x58
mov byte [ebp - 0x23f], 0x3f
mov byte [ebp - 0x23e], 0x71
mov byte [ebp - 0x23d], 0x7f
mov byte [ebp - 0x23c], 0x9b
mov byte [ebp - 0x23b], 0x18
mov byte [ebp - 0x23a], 1
mov byte [ebp - 0x239], 0xf9
mov byte [ebp - 0x238], 0xd2
mov byte [ebp - 0x237], 0xa8
mov byte [ebp - 0x236], 0xb3
mov byte [ebp - 0x235], 0x20
mov byte [ebp - 0x234], 0xe3
mov byte [ebp - 0x233], 0x23
mov byte [ebp - 0x232], 0x88
mov byte [ebp - 0x231], 0x75
mov byte [ebp - 0x230], 0x90
mov byte [ebp - 0x22f], 0x2d
mov byte [ebp - 0x22e], 8
mov byte [ebp - 0x22d], 0x2d
mov byte [ebp - 0x22c], 0x8d
mov byte [ebp - 0x22b], 0x6e
mov byte [ebp - 0x22a], 0xaf
mov byte [ebp - 0x229], 0x41
mov byte [ebp - 0x228], 0x5f
mov byte [ebp - 0x227], 0xcb
mov byte [ebp - 0x226], 0xbf
mov byte [ebp - 0x225], 0xd0
mov byte [ebp - 0x224], 0xc5
mov byte [ebp - 0x223], 0xe4
mov byte [ebp - 0x222], 0x67
mov byte [ebp - 0x221], 0xa
mov byte [ebp - 0x220], 9
mov byte [ebp - 0x21f], 8
mov byte [ebp - 0x21e], 0x42
push 0x3ce6
push 0
call fcn.10022f36
pop ecx
pop ecx
xor eax, eax
inc eax
shl eax, 0
movzx eax, byte [ebp + eax - 0x25c]
or eax, 0x5c
xor ecx, ecx
inc ecx
shl ecx, 0
movzx ecx, byte [ebp + ecx - 0x25c]
and ecx, 0x5c
sub eax, ecx
xor ecx, ecx
inc ecx
imul ecx, ecx, 0
movzx ecx, byte [ebp + ecx - 0x25c]
mov word [ebp + ecx*2 - 0x9d0], ax
mov dword [ebp - 0x28], 2
and dword [ebp - 0x1a8], 0
jmp 0x1001e2db
mov eax, dword [ebp - 0x28]
inc eax
inc eax
mov dword [ebp - 0x28], eax
cmp dword [ebp - 0x28], 0x3f
jae 0x1001e8d2
xor eax, eax
inc eax
imul eax, eax, 0
movzx eax, byte [ebp + eax - 0x25c]
lea eax, [eax + eax + 2]
cmp dword [ebp - 0x28], eax
jne 0x1001e51e
mov eax, dword [ebp - 0x28]
movzx eax, byte [ebp + eax - 0x25c]
inc eax
mov dword [ebp - 0x1a8], eax
mov eax, dword [ebp - 0x28]
movzx eax, byte [ebp + eax - 0x25c]
mov ecx, dword [ebp - 0x28]
lea eax, [ecx + eax - 1]
mov dword [ebp - 0x28], eax
mov dword [ebp - 0x84], 0xfffffffc
mov dword [ebp - 0x308], 0xfffffff9
mov dword [ebp - 0x6c4], 0x33ee6768
mov dword [ebp - 0x1a0], 0
jmp 0x1001e35e
mov eax, dword [ebp - 0x1a0]
inc eax
mov dword [ebp - 0x1a0], eax
cmp dword [ebp - 0x1a0], 2
jge 0x1001e37a
mov eax, dword [ebp - 0x1a0]
mov dword [ebp + eax*4 - 0xa14], 0xffffffff
jmp 0x1001e351
mov dword [ebp - 0x84], 0xfffffffd
jmp 0x1001e393
mov eax, dword [ebp - 0x84]
inc eax
mov dword [ebp - 0x84], eax
cmp dword [ebp - 0x84], 0x17
je 0x1001e519
mov dword [ebp - 0xe8], 0xa654
mov dword [ebp - 0x70], 2
mov dword [ebp - 0x7d0], 0xc0a9c5a7
mov eax, dword [ebp - 0xe8]
mov dword [ebp - 0x9e8], eax
mov eax, 0xc25fcc58
test eax, eax
je 0x1001e4c6
cmp dword [ebp - 0x308], 0
jne 0x1001e46f
mov eax, dword [ebp - 0xe8]
mov dword [ebp - 0xa24], eax
mov eax, dword [ebp - 0x84]
mov dword [ebp - 0x9f4], eax
mov eax, 0x92978d8e
cmp eax, 0xffffffff
ja 0x1001e40f
mov dword [ebp - 0x4dc], 1
jmp 0x1001e416
and dword [ebp - 0x4dc], 0
mov eax, dword [ebp - 0xe8]
cmp dword [ebp - 0x4dc], eax
je 0x1001e430
mov dword [ebp - 0x738], 1
jmp 0x1001e437
and dword [ebp - 0x738], 0
mov eax, dword [ebp - 0x738]
inc eax
je 0x1001e44c
mov dword [ebp - 0x4e4], 1
jmp 0x1001e453
and dword [ebp - 0x4e4], 0
mov eax, dword [ebp - 0x84]
cmp dword [ebp - 0x4e4], eax
jge 0x1001e466
xor eax, eax
inc eax
jne 0x1001e46f
and dword [ebp - 0x624], 0
jmp 0x1001e479
mov dword [ebp - 0x624], 1
mov eax, dword [ebp - 0xe8]
add eax, dword [ebp - 0x624]
cmp eax, 0xc312fbb6
je 0x1001e49e
cmp dword [ebp - 0x308], 0
jne 0x1001e49e
and dword [ebp - 0x4ec], 0
jmp 0x1001e4a8
mov dword [ebp - 0x4ec], 1
mov eax, dword [ebp - 0x4ec]
mov dword [ebp - 0x6c4], eax
mov eax, dword [ebp - 0x6c4]
mov dword [ebp - 0x70], eax
mov eax, dword [ebp - 0x308]
cmp dword [ebp - 0x70], eax
cmp dword [ebp - 0x84], 0
mov eax, dword [ebp - 0xe8]
mov dword [ebp - 0x9d4], eax
mov eax, dword [ebp - 0xe8]
mov dword [ebp - 0xa34], eax
mov eax, dword [ebp - 0x70]
mov dword [ebp - 0x7d0], eax
mov dword [ebp - 0x70], 0
jmp 0x1001e4fe
mov eax, dword [ebp - 0x70]
inc eax
mov dword [ebp - 0x70], eax
cmp dword [ebp - 0x70], 2
jge 0x1001e514
mov eax, dword [ebp - 0x70]
mov dword [ebp + eax*4 - 0xa14], 1
jmp 0x1001e4f7
jmp 0x1001e386
jmp 0x1001e2d3
mov dword [ebp - 0x140], 1
mov dword [ebp - 0xc4], 1
mov dword [ebp - 0xdc], 0xfffffff8
mov dword [ebp - 0x338], 0x1b7e280b
mov dword [ebp - 0x310], 0xffffffff
mov dword [ebp - 0x348], 0
mov dword [ebp - 0x1e0], 0
jmp 0x1001e573
mov eax, dword [ebp - 0x1e0]
inc eax
mov dword [ebp - 0x1e0], eax
cmp dword [ebp - 0x1e0], 2
jge 0x1001e58f
mov eax, dword [ebp - 0x1e0]
mov dword [ebp + eax*4 - 0xf8], 0x7cef
jmp 0x1001e566
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0xf8], 0
je 0x1001e5bb
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0xf8], 0
je 0x1001e5bb
mov dword [ebp - 0x634], 1
jmp 0x1001e5c2
and dword [ebp - 0x634], 0
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0xf8], 0
je 0x1001e6dd
cmp dword [ebp - 0x140], 0
jne 0x1001e621
push 4
pop eax
imul eax, eax, 0
push 4
pop ecx
shl ecx, 0
mov ecx, dword [ebp + ecx - 0xf8]
cmp dword [ebp + eax - 0xf8], ecx
je 0x1001e607
mov dword [ebp - 0x818], 1
jmp 0x1001e60e
and dword [ebp - 0x818], 0
mov eax, dword [ebp - 0xc4]
mov dword [ebp - 0xad8], eax
cmp dword [ebp - 0x140], 0
mov eax, dword [ebp - 0xc4]
mov dword [ebp - 0xc4], eax
mov eax, dword [ebp - 0x140]
cmp dword [ebp - 0xc4], eax
jle 0x1001e647
mov dword [ebp - 0x4f4], 1
jmp 0x1001e64e
and dword [ebp - 0x4f4], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0xf8]
cmp dword [ebp - 0x4f4], eax
jg 0x1001e66f
mov dword [ebp - 0x62c], 1
jmp 0x1001e676
and dword [ebp - 0x62c], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0xf8]
cmp dword [ebp - 0x62c], eax
jle 0x1001e697
mov dword [ebp - 0x4fc], 1
jmp 0x1001e69e
and dword [ebp - 0x4fc], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0xf8]
cmp dword [ebp - 0x4fc], eax
jl 0x1001e6bf
mov dword [ebp - 0x714], 1
jmp 0x1001e6c6
and dword [ebp - 0x714], 0
imul eax, dword [ebp - 0x714], 3
test eax, eax
je 0x1001e6dd
mov dword [ebp - 0x504], 1
jmp 0x1001e6e4
and dword [ebp - 0x504], 0
mov eax, dword [ebp - 0x504]
mov dword [ebp - 0xdc], eax
mov eax, dword [ebp - 0xdc]
cmp dword [ebp - 0x634], eax
jg 0x1001e70a
mov dword [ebp - 0x50c], 1
jmp 0x1001e711
and dword [ebp - 0x50c], 0
mov eax, dword [ebp - 0xc4]
mov dword [ebp - 0x338], eax
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0xf8]
mov dword [ebp - 0xc4], eax
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0xf8]
neg eax
push 4
pop ecx
imul ecx, ecx, 0
cmp eax, dword [ebp + ecx - 0xf8]
jne 0x1001e75a
mov dword [ebp - 0x6cc], 1
jmp 0x1001e761
and dword [ebp - 0x6cc], 0
mov eax, dword [ebp - 0xdc]
mov dword [ebp - 0xa0c], eax
mov eax, dword [ebp - 0xdc]
mov ecx, dword [ebp - 0x6cc]
sub ecx, dword [ebp - 0x140]
imul eax, ecx
mov dword [ebp - 0x310], eax
mov eax, dword [ebp - 0x338]
cmp dword [ebp - 0x310], eax
jl 0x1001e7a2
mov dword [ebp - 0x514], 1
jmp 0x1001e7a9
and dword [ebp - 0x514], 0
mov eax, dword [ebp - 0x514]
mov dword [ebp - 0xdc], eax
mov eax, dword [ebp - 0x348]
cmp dword [ebp - 0xdc], eax
jle 0x1001e7dc
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0xf8], 0
jne 0x1001e7dc
and dword [ebp - 0x63c], 0
jmp 0x1001e7e6
mov dword [ebp - 0x63c], 1
mov eax, dword [ebp - 0x140]
cmp dword [ebp - 0x63c], eax
jne 0x1001e809
cmp dword [ebp - 0x348], 0
je 0x1001e809
mov dword [ebp - 0x51c], 1
jmp 0x1001e810
and dword [ebp - 0x51c], 0
mov eax, dword [ebp - 0x348]
cmp dword [ebp - 0x51c], eax
jge 0x1001e82a
mov dword [ebp - 0x748], 1
jmp 0x1001e831
and dword [ebp - 0x748], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0xf8]
cmp dword [ebp - 0x748], eax
jge 0x1001e852
mov dword [ebp - 0x7d8], 1
jmp 0x1001e859
and dword [ebp - 0x7d8], 0
mov eax, dword [ebp - 0x310]
mov dword [ebp - 0x338], eax
mov eax, dword [ebp - 0x28]
movzx eax, byte [ebp + eax - 0x25b]
mov ecx, dword [ebp - 0x28]
sub ecx, dword [ebp - 0x1a8]
movzx ecx, byte [ebp + ecx - 0x25e]
movzx ecx, word [ebp + ecx*2 - 0x9d0]
or eax, ecx
mov ecx, dword [ebp - 0x28]
movzx ecx, byte [ebp + ecx - 0x25b]
mov edx, dword [ebp - 0x28]
sub edx, dword [ebp - 0x1a8]
movzx edx, byte [ebp + edx - 0x25e]
movzx edx, word [ebp + edx*2 - 0x9d0]
and ecx, edx
sub eax, ecx
mov ecx, dword [ebp - 0x28]
movzx ecx, byte [ebp + ecx - 0x25c]
mov word [ebp + ecx*2 - 0x9d0], ax
and dword [ebp - 0x1a8], 0
jmp 0x1001e2d3
mov dword [ebp - 0x138], 0x167fa5c6
mov dword [ebp - 0x1b0], 0xfffffffd
mov dword [ebp - 0x320], 0xfffffffd
mov dword [ebp - 0xaec], 0x4f5ac3d6
mov dword [ebp - 0x56c], 0x936be856
mov dword [ebp - 0x71c], 0xa5308633
mov dword [ebp - 0xcc], 1
mov dword [ebp - 0x1e8], 1
mov dword [ebp - 0x358], 0
mov dword [ebp - 0x120], 0x6ac3a608
mov dword [ebp - 0x524], 9
mov dword [ebp - 0x318], 0xbfc7
mov dword [ebp - 0x3c], 0
jmp 0x1001e95a
mov eax, dword [ebp - 0x3c]
inc eax
mov dword [ebp - 0x3c], eax
cmp dword [ebp - 0x3c], 3
jge 0x1001e970
mov eax, dword [ebp - 0x3c]
mov dword [ebp + eax*4 - 0x8b0], 0x315b
jmp 0x1001e953
mov dword [ebp - 0x3c], 0
jmp 0x1001e980
mov eax, dword [ebp - 0x3c]
inc eax
mov dword [ebp - 0x3c], eax
cmp dword [ebp - 0x3c], 3
jge 0x1001e996
mov eax, dword [ebp - 0x3c]
mov dword [ebp + eax*4 - 0xac4], 0x6237ddc4
jmp 0x1001e979
cmp dword [ebp - 0x138], 0
jne 0x1001e9ab
mov dword [ebp - 0x574], 1
jmp 0x1001e9b2
and dword [ebp - 0x574], 0
mov eax, dword [ebp - 0xcc]
mov dword [ebp - 0x524], eax
mov eax, dword [ebp - 0x524]
imul eax, dword [ebp - 0x120]
cmp eax, dword [ebp - 0x120]
jle 0x1001e9df
mov dword [ebp - 0x644], 1
jmp 0x1001e9e6
and dword [ebp - 0x644], 0
mov eax, dword [ebp - 0x644]
mov dword [ebp - 0x1e8], eax
mov eax, dword [ebp - 0x1b0]
cmp dword [ebp - 0x1e8], eax
mov eax, 0x93d
sub eax, 0xedbe
add eax, dword [ebp - 0x1b0]
je 0x1001ea20
xor eax, eax
je 0x1001ea20
mov dword [ebp - 0x52c], 1
jmp 0x1001ea27
and dword [ebp - 0x52c], 0
mov eax, dword [ebp - 0x358]
cmp dword [ebp - 0x52c], eax
jne 0x1001ea41
mov dword [ebp - 0x6d4], 1
jmp 0x1001ea48
and dword [ebp - 0x6d4], 0
mov eax, dword [ebp - 0x71c]
cmp dword [ebp - 0x6d4], eax
jle 0x1001ea5d
cmp dword [ebp - 0x138], 0
xor eax, eax
jne 0x1001ea6f
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x8b0], 0
push 0xfffffffffffffffa
pop eax
cmp eax, 0x98071081
jb 0x1001ea85
mov dword [ebp - 0x534], 1
jmp 0x1001ea8c
and dword [ebp - 0x534], 0
cmp dword [ebp - 0x534], 0x67d
jle 0x1001eaa4
mov dword [ebp - 0x64c], 1
jmp 0x1001eaab
and dword [ebp - 0x64c], 0
mov eax, dword [ebp - 0x320]
cmp dword [ebp - 0x64c], eax
jg 0x1001eac5
mov dword [ebp - 0x53c], 1
jmp 0x1001eacc
and dword [ebp - 0x53c], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x8b0]
cmp dword [ebp - 0x53c], eax
jl 0x1001eaed
mov dword [ebp - 0x544], 1
jmp 0x1001eaf4
and dword [ebp - 0x544], 0
mov eax, dword [ebp - 0x71c]
cmp dword [ebp - 0x544], eax
je 0x1001eb0e
mov dword [ebp - 0x654], 1
jmp 0x1001eb15
and dword [ebp - 0x654], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x8b0]
cmp dword [ebp - 0x654], eax
jle 0x1001eb36
mov dword [ebp - 0x54c], 1
jmp 0x1001eb3d
and dword [ebp - 0x54c], 0
mov eax, dword [ebp - 0x318]
mov ecx, dword [ebp - 0x54c]
mov edx, dword [ebp - 0x318]
inc edx
mov dword [ebp - 0x318], edx
cmp eax, ecx
jne 0x1001eb6c
mov eax, 0x60deea39
test eax, eax
jne 0x1001eb6c
and dword [ebp - 0x6dc], 0
jmp 0x1001eb76
mov dword [ebp - 0x6dc], 1
mov eax, dword [ebp - 0x6dc]
mov dword [ebp - 0x320], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x8b0], 0
je 0x1001eba5
push 9
pop eax
test eax, eax
je 0x1001eba5
mov dword [ebp - 0x554], 1
jmp 0x1001ebac
and dword [ebp - 0x554], 0
mov eax, dword [ebp - 0x120]
imul eax, dword [ebp - 0x554]
cmp eax, 0x56014efc
jne 0x1001ebcc
mov dword [ebp - 0x65c], 1
jmp 0x1001ebd3
and dword [ebp - 0x65c], 0
cmp dword [ebp - 0x65c], 0xffffffff
jg 0x1001ebe8
mov dword [ebp - 0x55c], 1
jmp 0x1001ebef
and dword [ebp - 0x55c], 0
mov eax, dword [ebp - 0x55c]
add eax, 0x1939
imul eax, eax, 0xd913
push 4
pop ecx
shl ecx, 0
cmp eax, dword [ebp + ecx - 0xac4]
jg 0x1001ec1b
mov dword [ebp - 0x740], 1
jmp 0x1001ec22
and dword [ebp - 0x740], 0
mov eax, dword [ebp - 0x740]
neg eax
cmp eax, dword [ebp - 0x138]
jne 0x1001ec47
cmp dword [ebp - 0x358], 0
je 0x1001ec47
mov dword [ebp - 0x564], 1
jmp 0x1001ec4e
and dword [ebp - 0x564], 0
cmp dword [ebp - 0x564], 0xffffffff
je 0x1001ec69
cmp dword [ebp - 0x56c], 0
jne 0x1001ec69
and dword [ebp - 0x664], 0
jmp 0x1001ec73
mov dword [ebp - 0x664], 1
mov eax, dword [ebp - 0x138]
cmp eax, dword [ebp - 0x664]
jl 0x1001ec8d
mov dword [ebp - 0x6e4], 1
jmp 0x1001ec94
and dword [ebp - 0x6e4], 0
mov eax, dword [ebp - 0x56c]
add eax, dword [ebp - 0x6e4]
cmp dword [ebp - 0x574], eax
jl 0x1001ecbd
mov eax, 0x4a3a207b
test eax, eax
je 0x1001ecbd
mov dword [ebp - 0x66c], 1
jmp 0x1001ecc4
and dword [ebp - 0x66c], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xac4]
cmp dword [ebp - 0x66c], eax
jg 0x1001ece5
mov dword [ebp - 0x57c], 1
jmp 0x1001ecec
and dword [ebp - 0x57c], 0
mov eax, dword [ebp - 0x57c]
mov dword [ebp - 0x120], eax
cmp dword [ebp - 0x120], 0
je 0x1001ed20
mov byte [ebp - 0x71], 0
movzx eax, byte [ebp - 0x71]
test eax, eax
je 0x1001ed1b
push 1
push 0x29ec
call fcn.1001b9ce
pop ecx
pop ecx
jmp 0x1001f00d
mov dword [ebp - 0x200], 0
jmp 0x1001ed39
mov eax, dword [ebp - 0x200]
inc eax
mov dword [ebp - 0x200], eax
cmp dword [ebp - 0x200], 3
jge 0x1001ed55
mov eax, dword [ebp - 0x200]
mov dword [ebp + eax*4 - 0x2ec], 0x8a84a00
jmp 0x1001ed2c
xor eax, eax
jne 0x1001eebd
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x2ec], 0
je 0x1001edfc
push 4
pop eax
shl eax, 1
mov ecx, 0xd3e8
sub ecx, dword [ebp + eax - 0x2ec]
add ecx, 9
cmp ecx, dword [ebp - 0x138]
jge 0x1001ed99
mov dword [ebp - 0x724], 1
jmp 0x1001eda0
and dword [ebp - 0x724], 0
mov eax, dword [ebp - 0x358]
cmp dword [ebp - 0x724], eax
jl 0x1001edba
mov dword [ebp - 0x820], 1
jmp 0x1001edc1
and dword [ebp - 0x820], 0
mov eax, dword [ebp - 0x1b0]
mov dword [ebp - 0xa18], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x2ec]
mov dword [ebp - 0xae8], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x2ec], 0
je 0x1001edfc
mov dword [ebp - 0x584], 1
jmp 0x1001ee03
and dword [ebp - 0x584], 0
mov eax, dword [ebp - 0x584]
inc eax
cmp eax, 6
jle 0x1001ee1b
mov dword [ebp - 0x674], 1
jmp 0x1001ee22
and dword [ebp - 0x674], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x2ec]
cmp dword [ebp - 0x674], eax
jle 0x1001ee43
mov dword [ebp - 0x7e0], 1
jmp 0x1001ee4a
and dword [ebp - 0x7e0], 0
mov eax, dword [ebp - 0xcc]
mov dword [ebp - 0xa20], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x2ec]
cmp dword [ebp - 0x1b0], eax
jne 0x1001ee77
mov dword [ebp - 0x58c], 1
jmp 0x1001ee7e
and dword [ebp - 0x58c], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x2ec]
cmp eax, dword [ebp - 0x58c]
jge 0x1001ee9f
mov dword [ebp - 0x828], 1
jmp 0x1001eea6
and dword [ebp - 0x828], 0
xor eax, eax
inc eax
je 0x1001eeb4
cmp dword [ebp - 0x1e8], 0
jne 0x1001eebd
and dword [ebp - 0x36c], 0
jmp 0x1001eec7
mov dword [ebp - 0x36c], 1
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x2ec]
cmp dword [ebp - 0x36c], eax
je 0x1001eee7
mov dword [ebp - 0x594], 1
jmp 0x1001eeee
and dword [ebp - 0x594], 0
mov eax, dword [ebp - 0x1e8]
cmp dword [ebp - 0x594], eax
je 0x1001ef08
mov dword [ebp - 0x67c], 1
jmp 0x1001ef0f
and dword [ebp - 0x67c], 0
mov eax, dword [ebp - 0x320]
imul eax, dword [ebp - 0x67c]
push 4
pop ecx
imul ecx, ecx, 0
imul eax, dword [ebp + ecx - 0x2ec]
test eax, eax
ja 0x1001ef4f
mov dword [ebp - 0x7e8], 0x5a2910e9
push 4
pop eax
shl eax, 1
mov ecx, dword [ebp - 0x7e8]
mov dword [ebp + eax - 0x2ec], ecx
jmp 0x1001f00d
mov dword [ebp - 0x100], 0x339bca7a
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x100]
mov dword [ebp + eax - 0x2ec], ecx
mov dword [ebp - 0xcc], 0
jmp 0x1001ef85
cmp dword [ebp - 0xcc], 0x12
jne 0x1001f00d
mov eax, dword [ebp - 0x100]
add eax, dword [ebp - 0x100]
je 0x1001efa8
mov dword [ebp - 0x59c], 1
jmp 0x1001efaf
and dword [ebp - 0x59c], 0
cmp dword [ebp - 0x100], 0
jne 0x1001efca
mov byte [ebp - 0xac], 0
movzx eax, byte [ebp - 0xac]
test eax, eax
je 0x1001f02d
push 0x600d
push 0
call fcn.1001be8e
pop ecx
pop ecx
push 2
pop eax
imul eax, eax, 0xc
xor ecx, ecx
mov word [ebp + eax - 0x9d0], cx
mov dword [ebp - 0x328], 0xae77ab39
mov dword [ebp - 0x6f4], 0xdfe4d9ed
mov dword [ebp - 0x984], 0
mov dword [ebp - 0x980], 0
mov dword [ebp - 0x97c], 0
mov dword [ebp - 0x978], 0
mov dword [ebp - 0x838], 9
mov dword [ebp - 0xb64], 0x846f2633
mov dword [ebp - 0xb60], 0x846f2633
mov dword [ebp - 0xb5c], 0x846f2633
mov dword [ebp - 0xb58], 0x846f2633
mov dword [ebp - 0x340], 0xeb2cfb11
mov dword [ebp - 0x418], 0xd782
mov dword [ebp - 0x9a4], 7
mov dword [ebp - 0x9a0], 7
mov dword [ebp - 0x99c], 7
mov dword [ebp - 0x998], 7
mov dword [ebp - 0x1b8], 0
jmp 0x1001f100
mov dword [ebp - 0x58], 0xfe0a8eac
mov dword [ebp - 0x2c], 0x5e790e86
mov dword [ebp - 0x58], 0
jmp 0x10020c58
mov eax, dword [ebp - 0x58]
dec eax
mov dword [ebp - 0x58], eax
cmp dword [ebp - 0x58], 0xfffffff1
jl 0x10020d1e
mov dword [ebp - 0x164], 0
jmp 0x10020c7b
mov eax, dword [ebp - 0x164]
inc eax
mov dword [ebp - 0x164], eax
cmp dword [ebp - 0x164], 3
jge 0x10020c97
mov eax, dword [ebp - 0x164]
mov dword [ebp + eax*4 - 0xae4], 7
jmp 0x10020c6e
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0xae4]
mov dword [ebp - 0xa78], eax
cmp dword [ebp - 0x58], 0x97a6
jg 0x10020cbf
mov dword [ebp - 0x610], 1
jmp 0x10020cc6
and dword [ebp - 0x610], 0
push 4
pop eax
imul eax, eax, 0
imul eax, dword [ebp + eax - 0xae4], 0x729c
cmp eax, dword [ebp - 0x610]
jg 0x10020ceb
mov dword [ebp - 0x618], 1
jmp 0x10020cf2
and dword [ebp - 0x618], 0
mov eax, dword [ebp - 0x58]
cmp dword [ebp - 0x618], eax
jne 0x10020d09
mov dword [ebp - 0x620], 1
jmp 0x10020d10
and dword [ebp - 0x620], 0
mov eax, dword [ebp - 0x620]
mov dword [ebp - 0x2c], eax
jmp 0x10020c51
cmp dword [ebp - 0x2c], 0
jne 0x10020d94
mov eax, dword [ebp - 0x2c]
mov ecx, dword [ebp - 0x2c]
lea eax, [eax + ecx - 0x6845]
cmp eax, 0xfffffff7
jge 0x10020d42
mov dword [ebp - 0x628], 1
jmp 0x10020d49
and dword [ebp - 0x628], 0
mov eax, dword [ebp - 0x2c]
imul eax, dword [ebp - 0x628]
mov dword [ebp - 0x58], eax
mov eax, dword [ebp - 0x2c]
cmp dword [ebp - 0x58], eax
jg 0x10020d6a
mov dword [ebp - 0x7b4], 1
jmp 0x10020d71
and dword [ebp - 0x7b4], 0
mov eax, dword [ebp - 0x2c]
mov dword [ebp - 0xb6c], eax
mov eax, dword [ebp - 0x2c]
mov dword [ebp - 0xa80], eax
mov eax, dword [ebp - 0x2c]
cmp dword [ebp - 0x58], eax
jge 0x10020d94
and dword [ebp - 0x630], 0
jmp 0x10020d9e
mov dword [ebp - 0x630], 1
mov eax, dword [ebp - 0x630]
sub eax, dword [ebp - 0x2c]
cmp eax, dword [ebp - 0x2c]
jle 0x10020db8
mov dword [ebp - 0x638], 1
jmp 0x10020dbf
and dword [ebp - 0x638], 0
mov eax, dword [ebp - 0x638]
mov dword [ebp - 0x2c], eax
cmp dword [0x10674e2c], 0
je 0x10021169
mov dword [ebp - 0xc0], 1
mov dword [ebp - 0x94], 0x2285faaf
mov dword [ebp - 0xb8], 3
mov dword [ebp - 0x380], 0x703acb6d
mov dword [ebp - 0x650], 0
mov dword [ebp - 0x378], 0x8fa1b441
mov dword [ebp - 0x7c4], 0xffffffff
mov dword [ebp - 0x10], 0
jmp 0x10020e2b
mov eax, dword [ebp - 0x10]
inc eax
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], 3
jge 0x10020e41
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0x8bc], 0xfffffff6
jmp 0x10020e24
mov dword [ebp - 0x10], 0
jmp 0x10020e51
mov eax, dword [ebp - 0x10]
inc eax
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], 2
jge 0x10020e67
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0x9e4], 0
jmp 0x10020e4a
mov dword [ebp - 0x10], 0
jmp 0x10020e77
mov eax, dword [ebp - 0x10]
inc eax
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], 2
jge 0x10020e8d
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0x9f0], 0
jmp 0x10020e70
mov dword [ebp - 0x10], 0
jmp 0x10020e9d
mov eax, dword [ebp - 0x10]
inc eax
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], 3
jge 0x10020eb3
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0xbb4], 0xf5379a1d
jmp 0x10020e96
mov dword [ebp - 0xc0], 0
jmp 0x10020ecc
mov eax, dword [ebp - 0xc0]
inc eax
mov dword [ebp - 0xc0], eax
cmp dword [ebp - 0xc0], 2
jg 0x10020fd2
mov dword [ebp - 0x16c], 0
jmp 0x10020ef2
mov eax, dword [ebp - 0x16c]
inc eax
mov dword [ebp - 0x16c], eax
cmp dword [ebp - 0x16c], 4
jge 0x10020f0e
mov eax, dword [ebp - 0x16c]
mov dword [ebp + eax*4 - 0xbe8], 1
jmp 0x10020ee5
mov eax, dword [ebp - 0xb8]
dec eax
mov dword [ebp - 0xb8], eax
mov dword [ebp - 0x94], 0
jmp 0x10020f34
mov eax, dword [ebp - 0x94]
inc eax
mov dword [ebp - 0x94], eax
cmp dword [ebp - 0x94], 2
jg 0x10020fcd
mov dword [ebp - 0x7bc], 0x13f5e3d1
mov dword [ebp - 0x640], 0xfd77ccca
mov dword [ebp - 0xb8], 0
jmp 0x10020f6e
mov eax, dword [ebp - 0xb8]
inc eax
mov dword [ebp - 0xb8], eax
cmp dword [ebp - 0xb8], 2
jg 0x10020fb0
mov eax, dword [ebp - 0x94]
push 4
pop ecx
imul ecx, ecx, 0
mov eax, dword [ebp + eax*4 - 0x8bc]
mov dword [ebp + ecx - 0xbe8], eax
mov byte [ebp - 0x96], 0
push 1
push 0x747e
lea eax, [ebp - 0x96]
push eax
call fcn.1001bf12
add esp, 0xc
jmp 0x10020f61
mov eax, dword [ebp - 0x7bc]
mov dword [ebp - 0x640], eax
mov eax, dword [ebp - 0x640]
mov dword [ebp - 0x380], eax
jmp 0x10020f27
jmp 0x10020ebf
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0x8bc], 0
je 0x10020ff6
cmp dword [ebp - 0x650], 0
je 0x10020ff6
mov dword [ebp - 0x648], 1
jmp 0x10020ffd
and dword [ebp - 0x648], 0
mov eax, dword [ebp - 0x648]
mov dword [ebp - 0xc0], eax
cmp dword [ebp - 0xc0], 0
je 0x1002101e
mov dword [ebp - 0x658], 1
jmp 0x10021025
and dword [ebp - 0x658], 0
mov eax, dword [ebp - 0x650]
cmp eax, dword [ebp - 0x658]
jne 0x1002103f
mov dword [ebp - 0x660], 1
jmp 0x10021046
and dword [ebp - 0x660], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x8bc]
cmp eax, dword [ebp - 0x660]
jg 0x10021067
mov dword [ebp - 0x668], 1
jmp 0x1002106e
and dword [ebp - 0x668], 0
mov eax, dword [ebp - 0x668]
mov dword [ebp - 0x94], eax
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x8bc]
cmp eax, dword [ebp - 0x94]
jle 0x1002109b
mov dword [ebp - 0x678], 1
jmp 0x100210a2
and dword [ebp - 0x678], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x9e4]
mov dword [ebp - 0x670], eax
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x670]
mov dword [ebp + eax - 0x9f0], ecx
mov eax, dword [ebp - 0x670]
cmp eax, dword [ebp - 0x678]
jle 0x100210e2
mov dword [ebp - 0x370], 1
jmp 0x100210e9
and dword [ebp - 0x370], 0
mov eax, dword [ebp - 0x370]
mov dword [ebp - 0x378], eax
mov eax, dword [ebp - 0x378]
add eax, dword [ebp - 0x380]
test eax, eax
jle 0x10021111
mov dword [ebp - 0x388], 1
jmp 0x10021118
and dword [ebp - 0x388], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x388]
mov dword [ebp + eax - 0xbb4], ecx
push 0xfffffffffffffffb
pop eax
cmp eax, 0xd3d8e1ce
jbe 0x10021141
mov dword [ebp - 0x390], 1
jmp 0x10021148
and dword [ebp - 0x390], 0
mov eax, dword [ebp - 0x390]
mov dword [ebp - 0x7c4], eax
mov ecx, dword [ebp + 8]
call fcn.1002326e
push eax
call dword [0x10674e2c]
mov dword [ebp - 0xd8], eax
cmp dword [ebp - 0xd8], 0
je 0x10021581
movzx eax, byte [0x10674e29]
test eax, eax
je 0x10021196
mov ecx, 0x10674efc
call fcn.100232f7
movzx eax, al
test eax, eax
jne 0x10021581
mov dword [ebp - 0x174], 0
mov byte [ebp - 0xa1], 0
push 1
lea eax, [ebp - 0xa1]
push eax
call fcn.1001bf73
pop ecx
pop ecx
mov dword [ebp - 0x174], 0
jmp 0x100211d0
mov eax, dword [ebp - 0x174]
dec eax
mov dword [ebp - 0x174], eax
cmp dword [ebp - 0x174], 0xffffffef
jge 0x1002121a
mov dword [ebp - 0x17c], 0xffffffff
mov dword [ebp - 0x17c], 0xfffffff4
jmp 0x100211fc
mov eax, dword [ebp - 0x17c]
inc eax
mov dword [ebp - 0x17c], eax
cmp dword [ebp - 0x17c], 0x13
jge 0x10021218
mov byte [ebp - 0x72], 0
lea eax, [ebp - 0x72]
push eax
push 1
call fcn.1001bfc4
pop ecx
pop ecx
jmp 0x100211ef
jmp 0x100211c3
lea eax, [ebp - 0x398]
push eax
mov ecx, 0x10674efc
call fcn.100232b9
mov ecx, dword [ebp - 0xd8]
mov dword [eax], ecx
mov dword [ebp - 0x12c], 1
mov dword [ebp - 0xc8], 1
mov dword [ebp - 0xd0], 0xfffffff8
mov dword [ebp - 0x31c], 0x1b7e280b
mov dword [ebp - 0x314], 0xffffffff
mov dword [ebp - 0x30c], 0
mov dword [ebp - 0x184], 0
jmp 0x10021288
mov eax, dword [ebp - 0x184]
inc eax
mov dword [ebp - 0x184], eax
cmp dword [ebp - 0x184], 2
jge 0x100212a4
mov eax, dword [ebp - 0x184]
mov dword [ebp + eax*4 - 0xe4], 0x7cef
jmp 0x1002127b
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0xe4], 0
je 0x100212d0
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0xe4], 0
je 0x100212d0
mov dword [ebp - 0x3c8], 1
jmp 0x100212d7
and dword [ebp - 0x3c8], 0
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0xe4], 0
je 0x100213f2
cmp dword [ebp - 0x12c], 0
jne 0x10021336
push 4
pop eax
imul eax, eax, 0
push 4
pop ecx
shl ecx, 0
mov ecx, dword [ebp + ecx - 0xe4]
cmp dword [ebp + eax - 0xe4], ecx
je 0x1002131c
mov dword [ebp - 0x7cc], 1
jmp 0x10021323
and dword [ebp - 0x7cc], 0
mov eax, dword [ebp - 0xc8]
mov dword [ebp - 0xb1c], eax
cmp dword [ebp - 0x12c], 0
mov eax, dword [ebp - 0xc8]
mov dword [ebp - 0xc8], eax
mov eax, dword [ebp - 0x12c]
cmp dword [ebp - 0xc8], eax
jle 0x1002135c
mov dword [ebp - 0x3a0], 1
jmp 0x10021363
and dword [ebp - 0x3a0], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0xe4]
cmp dword [ebp - 0x3a0], eax
jg 0x10021384
mov dword [ebp - 0x3a8], 1
jmp 0x1002138b
and dword [ebp - 0x3a8], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0xe4]
cmp dword [ebp - 0x3a8], eax
jle 0x100213ac
mov dword [ebp - 0x3b0], 1
jmp 0x100213b3
and dword [ebp - 0x3b0], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0xe4]
cmp dword [ebp - 0x3b0], eax
jl 0x100213d4
mov dword [ebp - 0x3b8], 1
jmp 0x100213db
and dword [ebp - 0x3b8], 0
imul eax, dword [ebp - 0x3b8], 3
test eax, eax
je 0x100213f2
mov dword [ebp - 0x3c0], 1
jmp 0x100213f9
and dword [ebp - 0x3c0], 0
mov eax, dword [ebp - 0x3c0]
mov dword [ebp - 0xd0], eax
mov eax, dword [ebp - 0xd0]
cmp dword [ebp - 0x3c8], eax
jg 0x1002141f
mov dword [ebp - 0x3d0], 1
jmp 0x10021426
and dword [ebp - 0x3d0], 0
mov eax, dword [ebp - 0xc8]
mov dword [ebp - 0x31c], eax
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0xe4]
mov dword [ebp - 0xc8], eax
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0xe4]
neg eax
push 4
pop ecx
imul ecx, ecx, 0
cmp eax, dword [ebp + ecx - 0xe4]
jne 0x1002146f
mov dword [ebp - 0x3d8], 1
jmp 0x10021476
and dword [ebp - 0x3d8], 0
mov eax, dword [ebp - 0xd0]
mov dword [ebp - 0xa88], eax
mov eax, dword [ebp - 0xd0]
mov ecx, dword [ebp - 0x3d8]
sub ecx, dword [ebp - 0x12c]
imul eax, ecx
mov dword [ebp - 0x314], eax
mov eax, dword [ebp - 0x31c]
cmp dword [ebp - 0x314], eax
jl 0x100214b7
mov dword [ebp - 0x3e0], 1
jmp 0x100214be
and dword [ebp - 0x3e0], 0
mov eax, dword [ebp - 0x3e0]
mov dword [ebp - 0xd0], eax
mov eax, dword [ebp - 0x30c]
cmp dword [ebp - 0xd0], eax
jle 0x100214f1
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0xe4], 0
jne 0x100214f1
and dword [ebp - 0x3e8], 0
jmp 0x100214fb
mov dword [ebp - 0x3e8], 1
mov eax, dword [ebp - 0x12c]
cmp dword [ebp - 0x3e8], eax
jne 0x1002151e
cmp dword [ebp - 0x30c], 0
je 0x1002151e
mov dword [ebp - 0x3f0], 1
jmp 0x10021525
and dword [ebp - 0x3f0], 0
mov eax, dword [ebp - 0x30c]
cmp dword [ebp - 0x3f0], eax
jge 0x1002153f
mov dword [ebp - 0x3f8], 1
jmp 0x10021546
and dword [ebp - 0x3f8], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0xe4]
cmp dword [ebp - 0x3f8], eax
jge 0x10021567
mov dword [ebp - 0x7d4], 1
jmp 0x1002156e
and dword [ebp - 0x7d4], 0
mov eax, dword [ebp - 0x314]
mov dword [ebp - 0x31c], eax
mov byte [0x10674e29], 1
mov eax, dword [ebp - 0xd8]
mov dword [ebp - 0x7dc], eax
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x954]
call fcn.1001634b
mov eax, dword [ebp - 0x7dc]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
mov esp, ebp
pop ebp
ret