Function at 0x1001a79c
Capabilities:
Parse pe header

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x10071772
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
push ecx
sub esp, 0x7a0
push ebx
push esi
push edi
mov dword [ebp - 0x10], esp
movzx eax, byte [ebp + 0x2c]
test eax, eax
je 0x1001e029
mov eax, dword [ebp + 0x20]
mov dword [ebp - 0x4cc], eax
mov eax, dword [ebp + 0x28]
mov dword [ebp - 0x4bc], eax
lea eax, [ebp + 8]
mov dword [ebp - 0x530], eax
mov eax, dword [ebp + 0xc]
mov dword [ebp - 0x45c], eax
mov eax, dword [ebp + 0x10]
mov dword [ebp - 0x454], eax
mov eax, dword [ebp + 0x1c]
mov dword [ebp - 0x464], eax
mov eax, dword [ebp - 0x530]
movzx eax, byte [eax]
test eax, eax
je 0x1001dfc3
mov eax, dword [ebp - 0x4bc]
mov dword [ebp - 0x164], eax
mov dword [ebp - 0x4c4], 0x1b62
cmp dword [ebp - 0x4c4], 0x4da
jge 0x1001a8d4
and dword [ebp - 0x268], 0
and dword [ebp - 0x188], 0
and dword [ebp - 0x170], 0
lea eax, [ebp - 0x170]
push eax
lea eax, [ebp - 0x188]
push eax
lea eax, [ebp - 0x268]
push eax
push 0x10009988
call fcn.100592cb
add esp, 0x10
mov eax, dword [ebp - 0x268]
cdq
sub eax, edx
sar eax, 1
mov dword [ebp - 0xc8], eax
mov eax, dword [ebp - 0x188]
cmp eax, dword [ebp - 0xc8]
je 0x1001a89f
mov eax, dword [ebp - 0xc8]
inc eax
cmp dword [ebp - 0x188], eax
jne 0x1001a8c9
mov eax, dword [ebp - 0x170]
cmp eax, dword [ebp - 0xc8]
je 0x1001a8bc
mov eax, dword [ebp - 0xc8]
inc eax
cmp dword [ebp - 0x170], eax
jne 0x1001a8c9
push 0x10009994
call fcn.10059751
pop ecx
jmp 0x1001a8d4
push 0x10009998
call fcn.10059751
pop ecx
mov eax, dword [ebp - 0x4cc]
mov dword [ebp - 0x68], eax
mov dword [ebp - 0x1c4], 0xffffffff
mov dword [ebp - 0x1c0], 0xffffffff
mov dword [ebp - 0x1bc], 0xffffffff
mov dword [ebp - 0x1b8], 0xffffffff
mov dword [ebp - 0x70], 0xfffffffe
mov dword [ebp - 0x74], 1
mov dword [ebp - 0x50], 1
mov dword [ebp - 0x5f0], 0xba87a5ea
mov dword [ebp - 0x5ec], 0xba87a5ea
mov dword [ebp - 0x5e8], 0xba87a5ea
mov dword [ebp - 0x5e4], 0xba87a5ea
lea ecx, [ebp - 0x15d]
call fcn.10024a3a
push eax
lea eax, [ebp - 0x5e0]
push eax
lea eax, [ebp - 0x5f0]
push eax
lea ecx, [ebp - 0x764]
call fcn.10024a3d
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0x6d0]
call fcn.100249e9
and dword [ebp - 4], 0
mov dword [ebp - 0xb0], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x1c4]
mov dword [ebp - 0x684], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x1c4], 0
je 0x1001aa38
mov dword [ebp - 0x70], 6
push 4
pop eax
imul eax, eax, 0
push 4
pop ecx
shl ecx, 0
mov ecx, dword [ebp + ecx - 0x1c4]
imul ecx, dword [ebp - 0x70]
cmp ecx, dword [ebp + eax - 0x1c4]
jne 0x1001a9df
mov dword [ebp - 0x3d8], 1
jmp 0x1001a9e6
and dword [ebp - 0x3d8], 0
mov eax, dword [ebp - 0x74]
cmp dword [ebp - 0x3d8], eax
jg 0x1001a9fd
mov dword [ebp - 0x3e0], 1
jmp 0x1001aa04
and dword [ebp - 0x3e0], 0
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x1c4]
cmp dword [ebp - 0x3e0], eax
jg 0x1001aa24
mov dword [ebp - 0x3a8], 1
jmp 0x1001aa2b
and dword [ebp - 0x3a8], 0
push 4
pop eax
imul eax, eax, 3
mov eax, dword [ebp + eax - 0x1c4]
mov eax, dword [ebp - 0x50]
mov dword [ebp - 0x674], eax
push 2
lea ecx, [ebp - 0x6d0]
call fcn.10024a2b
mov eax, dword [ebp - 0x50]
mov dword [ebp - 0x70c], eax
cmp dword [ebp - 0x50], 0xffffffff
jl 0x1001aa69
mov dword [ebp - 0x2dc], 1
jmp 0x1001aa70
and dword [ebp - 0x2dc], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x2dc]
sub ecx, dword [ebp + eax - 0x1c4]
push 4
pop eax
imul eax, eax, 3
cmp ecx, dword [ebp + eax - 0x1c4]
jne 0x1001aa9e
mov dword [ebp - 0x1cc], 1
jmp 0x1001aaa5
and dword [ebp - 0x1cc], 0
mov eax, dword [ebp - 0x1cc]
sub eax, dword [ebp - 0x50]
sub eax, dword [ebp - 0x74]
sub eax, 0x54d8141
mov dword [ebp - 0xb0], eax
mov dword [ebp - 0x70], 0
jmp 0x1001aacc
mov eax, dword [ebp - 0x70]
dec eax
mov dword [ebp - 0x70], eax
cmp dword [ebp - 0x70], 0xfffffff0
jg 0x1001ac1c
mov dword [ebp - 0xa0], 0xfffffff6
mov byte [ebp - 0x56], 0
push 1
push 0x21ee
lea eax, [ebp - 0x56]
push eax
push 1
push 1
push 0x6900
call fcn.100180ab
add esp, 0x18
mov dword [ebp - 0xb0], 0
jmp 0x1001ab19
mov eax, dword [ebp - 0xb0]
inc eax
mov dword [ebp - 0xb0], eax
cmp dword [ebp - 0xb0], 3
jg 0x1001ac17
mov dword [ebp - 0x50], 0
jmp 0x1001ab36
mov eax, dword [ebp - 0x50]
inc eax
mov dword [ebp - 0x50], eax
cmp dword [ebp - 0x50], 3
jg 0x1001ac12
push 0
push 0x2920
push 0
push 0x6297
push 1
push 0x714c
call fcn.10018990
add esp, 0x18
mov dword [ebp - 0x74], 0
jmp 0x1001ab6d
mov eax, dword [ebp - 0x74]
inc eax
mov dword [ebp - 0x74], eax
cmp dword [ebp - 0x74], 3
jg 0x1001ac0d
mov dword [ebp - 0xb8], 1
mov dword [ebp - 0xb8], 0
jmp 0x1001ab9a
mov eax, dword [ebp - 0xb8]
inc eax
mov dword [ebp - 0xb8], eax
cmp dword [ebp - 0xb8], 3
jg 0x1001ac08
lea eax, [ebp - 0xa0]
push eax
push 1
push 0x59e6
push 0
push 1
call fcn.10012cf8
add esp, 0x14
mov dword [ebp - 0xa0], 3
jmp 0x1001abd6
mov eax, dword [ebp - 0xa0]
dec eax
mov dword [ebp - 0xa0], eax
cmp dword [ebp - 0xa0], 0
jl 0x1001ac06
mov byte [ebp - 0x57], 0
push 1
lea eax, [ebp - 0x57]
push eax
push 1
push 1
push 0x544f
push 0x706e
push 0x652b
call fcn.1001163c
add esp, 0x1c
jmp 0x1001abc9
jmp 0x1001ab8d
jmp 0x1001ab66
jmp 0x1001ab2f
jmp 0x1001ab0c
jmp 0x1001aac5
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x6d0]
call fcn.10024a0f
and dword [ebp - 0x28], 0
push 2
lea ecx, [ebp - 0x40c]
call fcn.100249ad
mov dword [ebp - 4], 1
mov dword [ebp - 0x110], 0
jmp 0x1001ac5c
mov eax, dword [ebp - 0x110]
inc eax
mov dword [ebp - 0x110], eax
cmp dword [ebp - 0x110], 2
jge 0x1001ac7b
push dword [ebp - 0x110]
lea ecx, [ebp - 0x40c]
call fcn.10024a2b
or dword [eax], 0xffffffff
jmp 0x1001ac4f
push 0
lea ecx, [ebp - 0x40c]
call fcn.10024a2b
and dword [eax], 0
jmp 0x1001acb1
push 0
lea ecx, [ebp - 0x40c]
call fcn.10024a2b
mov dword [ebp - 0x3ac], eax
mov eax, dword [ebp - 0x3ac]
mov eax, dword [eax]
inc eax
mov ecx, dword [ebp - 0x3ac]
mov dword [ecx], eax
push 0
lea ecx, [ebp - 0x40c]
call fcn.10024a2b
cmp dword [eax], 0x13
je 0x1001adae
push 1
lea ecx, [ebp - 0x620]
call fcn.100249ad
mov byte [ebp - 4], 2
push 0x2612
push 1
push 1
lea eax, [ebp - 0x67c]
push eax
push 1
push 0x787
lea eax, [ebp - 0x620]
push eax
push 0x7305
call fcn.100118b6
add esp, 0x20
push 0
lea ecx, [ebp - 0x620]
call fcn.10024a2b
cmp dword [eax], 0
je 0x1001ad7a
mov dword [ebp - 0xd0], 0x6f5a9c4c
mov dword [ebp - 0xd0], 0
jmp 0x1001ad38
mov eax, dword [ebp - 0xd0]
dec eax
mov dword [ebp - 0xd0], eax
cmp dword [ebp - 0xd0], 0xffffffef
jl 0x1001ad78
mov dword [ebp - 0x4d4], 3
mov dword [ebp - 0x544], 0x7d7c1188
push 1
push 0
lea eax, [ebp - 0x4d4]
push eax
lea eax, [ebp - 0x544]
push eax
push 0
push 0x317d
call fcn.1001e62c
add esp, 0x18
jmp 0x1001ad2b
jmp 0x1001ad9a
push 0x5213
push 0x469e
push 0x420f
push 1
push 0x3edb
push 1
call fcn.100119e6
add esp, 0x18
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x620]
call fcn.10024a0f
jmp 0x1001ac8d
push 0x35be
push 1
push 1
push 0x6081
lea eax, [ebp - 0x40c]
push eax
push 0xbd3
call fcn.10011ae5
add esp, 0x18
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x40c]
call fcn.10024a0f
push 3
lea ecx, [ebp - 0x62c]
call fcn.100249ad
mov dword [ebp - 4], 3
push 4
lea ecx, [ebp - 0x638]
call fcn.100249ad
mov byte [ebp - 4], 4
mov dword [ebp - 0x534], 0xc46d
mov dword [ebp - 0x55c], 0xffffffff
mov dword [ebp - 0x4b4], 0xfffffffd
mov dword [ebp - 0x564], 0xfffffff6
push 0x6ede
push 0
push 1
lea eax, [ebp - 0x54c]
push eax
lea eax, [ebp - 0x62c]
push eax
push 0x6a92
push 0xeff
call fcn.10017dc4
add esp, 0x1c
lea eax, [ebp - 0x638]
push eax
push 0x3c08
lea eax, [ebp - 0x54c]
push eax
push 0x103c
push 0x159a
push 1
push 1
call fcn.10011bf9
add esp, 0x1c
mov dword [ebp - 0x1d4], 0x60e0
mov dword [ebp - 0x428], 0x100099a0
cmp dword [ebp - 0x1d4], 0x61f7
jle 0x1001af42
and dword [ebp - 0x130], 0
jmp 0x1001aeb8
mov eax, dword [ebp - 0x130]
inc eax
mov dword [ebp - 0x130], eax
cmp dword [ebp - 0x130], 0x3a4
jge 0x1001af42
and dword [ebp - 0xd8], 0
jmp 0x1001aeda
mov eax, dword [ebp - 0xd8]
inc eax
mov dword [ebp - 0xd8], eax
cmp dword [ebp - 0xd8], 0x561e
jge 0x1001af3d
mov eax, dword [ebp - 0x130]
sub eax, dword [ebp - 0xd8]
cdq
mov dword [ebp - 0x4e0], eax
mov dword [ebp - 0x4dc], edx
push dword [ebp - 0x4dc]
push dword [ebp - 0x4e0]
lea ecx, [ebp - 0x788]
call fcn.1000bb70
pop ecx
pop ecx
mov dword [ebp - 0x554], eax
mov ecx, dword [ebp - 0x554]
call fcn.10024878
push eax
call fcn.100594e6
pop ecx
lea ecx, [ebp - 0x788]
call fcn.1002486e
jmp 0x1001aecd
jmp 0x1001aeab
lea eax, [ebp - 0x638]
push eax
lea eax, [ebp - 0x55c]
push eax
lea eax, [ebp - 0x564]
push eax
lea eax, [ebp - 0x534]
push eax
push 0xed3
push 1
lea eax, [ebp - 0x62c]
push eax
push 1
lea eax, [ebp - 0x4b4]
push eax
push 0x7629
call fcn.10018315
add esp, 0x28
mov byte [ebp - 4], 5
cmp dword [ebp - 0x1d4], 0x5d57
jge 0x1001af9e
push dword [ebp - 0x428]
call fcn.100594e6
pop ecx
jmp 0x1001afba
mov dword [ebp - 4], 4
jmp 0x1001afca
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x638]
call fcn.10024a0f
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x62c]
call fcn.10024a0f
mov dword [ebp - 0x41c], 0x2fe22364
mov dword [ebp - 0x430], 0xfffffffc
mov dword [ebp - 0x118], 0
jmp 0x1001b015
mov eax, dword [ebp - 0x118]
inc eax
mov dword [ebp - 0x118], eax
cmp dword [ebp - 0x118], 4
jge 0x1001b031
mov eax, dword [ebp - 0x118]
mov dword [ebp + eax*4 - 0x7b0], 3
jmp 0x1001b008
lea eax, [ebp - 0x41c]
push eax
push 1
lea eax, [ebp - 0x430]
push eax
push 0x1318
push 1
push 0x18c9
call fcn.10011d09
add esp, 0x18
mov dword [ebp - 0x500], 0x5d6c05ba
mov dword [ebp - 0x438], 3
push 0x4d5f
push 0x7c10
lea eax, [ebp - 0x500]
push eax
lea eax, [ebp - 0x438]
push eax
push 0x44d
push 0x27ce
push 1
push 0x7a12
push 0x6d8a
push 1
push 0x7fa6
call fcn.10018730
add esp, 0x2c
push 1
lea eax, [ebp - 0x1a0]
push eax
lea eax, [ebp - 0x164]
push eax
push 1
push 0x47ee
push 0x6ff8
push 0x39f7
push 0xd86
push 0x437b
call fcn.10011e11
add esp, 0x24
mov eax, dword [ebp - 0x1a0]
movzx eax, word [eax]
cmp eax, 0x5a4d
je 0x1001b29b
mov dword [ebp - 0x7c], 0xfffffffc
push 3
lea ecx, [ebp - 0x650]
call fcn.100249ad
mov dword [ebp - 4], 7
push 0
lea eax, [ebp - 0x6e4]
push eax
lea eax, [ebp - 0x650]
push eax
push 0x7d1c
push 0x118d
push 0x4c7e
push 1
call fcn.10017116
add esp, 0x1c
mov dword [ebp - 0x7c], 0
jmp 0x1001b141
mov eax, dword [ebp - 0x7c]
inc eax
mov dword [ebp - 0x7c], eax
cmp dword [ebp - 0x7c], 0x18
jne 0x1001b265
mov eax, dword [ebp - 0x7c]
neg eax
je 0x1001b1ec
mov dword [ebp - 0x4fc], 0xca0029bf
mov byte [ebp - 0x63], 0
movzx eax, byte [ebp - 0x63]
test eax, eax
je 0x1001b1b4
push 0x20fb
push 0x68ca
push 0xd40
push 0x2d62
push 0x6731
push 0x330a
push 0x3146
push 1
push 1
push 0x702a
push 0x210f
push 0x3dcb
push 0x2b0f
push 0x373b
call fcn.100121ef
add esp, 0x38
push 1
push 0xf9f
lea eax, [ebp - 0x4fc]
push eax
push 0x48e5
push 1
push 0x2f4e
push 0x6590
push 0x6c27
push 0x19f4
push 0x1fc1
call fcn.10012681
add esp, 0x28
jmp 0x1001b260
mov dword [ebp - 0x90], 0xb8ee41b6
mov dword [ebp - 0xe0], 0
jmp 0x1001b20f
mov eax, dword [ebp - 0xe0]
inc eax
mov dword [ebp - 0xe0], eax
cmp dword [ebp - 0xe0], 4
jge 0x1001b22b
mov eax, dword [ebp - 0xe0]
mov dword [ebp + eax*4 - 0x74c], 1
jmp 0x1001b202
mov dword [ebp - 0x90], 0
jmp 0x1001b244
mov eax, dword [ebp - 0x90]
inc eax
mov dword [ebp - 0x90], eax
cmp dword [ebp - 0x90], 4
jge 0x1001b260
mov eax, dword [ebp - 0x90]
mov dword [ebp + eax*4 - 0x74c], 0
jmp 0x1001b237
jmp 0x1001b13a
push 0
lea eax, [ebp - 0x650]
push eax
push 0x2956
lea eax, [ebp - 0x7c]
push eax
push 1
call fcn.1001431b
add esp, 0x14
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x650]
call fcn.10024a0f
mov eax, dword [ebp - 0x68]
and dword [eax], 0
jmp 0x1001e06a
push 0x2d73
lea eax, [ebp - 0x1a0]
push eax
push 0
lea eax, [ebp - 0x164]
push eax
lea eax, [ebp - 0xa8]
push eax
call fcn.1001ecda
add esp, 0x14
push 2
lea ecx, [ebp - 0x6e0]
call fcn.100249ad
mov dword [ebp - 4], 8
mov dword [ebp - 0xe8], 4
mov dword [ebp - 0x144], 0
jmp 0x1001b2f6
mov eax, dword [ebp - 0x144]
inc eax
mov dword [ebp - 0x144], eax
cmp dword [ebp - 0x144], 2
jge 0x1001b318
push dword [ebp - 0x144]
lea ecx, [ebp - 0x6e0]
call fcn.10024a2b
mov dword [eax], 0xdf99ff60
jmp 0x1001b2e9
mov dword [ebp - 0xe8], 1
jmp 0x1001b331
mov eax, dword [ebp - 0xe8]
dec eax
mov dword [ebp - 0xe8], eax
cmp dword [ebp - 0xe8], 0
jl 0x1001b42b
mov dword [ebp - 0x120], 0
jmp 0x1001b357
mov eax, dword [ebp - 0x120]
inc eax
mov dword [ebp - 0x120], eax
cmp dword [ebp - 0x120], 2
jge 0x1001b373
mov eax, dword [ebp - 0x120]
mov dword [ebp + eax*4 - 0x3e8], 2
jmp 0x1001b34a
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0x3e8], 1
jmp 0x1001b3a1
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x3e8]
dec eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x3e8], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x3e8], 0
jl 0x1001b40b
mov dword [ebp - 0xf0], 0xffffffff
mov dword [ebp - 0xf0], 1
jmp 0x1001b3d4
mov eax, dword [ebp - 0xf0]
dec eax
mov dword [ebp - 0xf0], eax
cmp dword [ebp - 0xf0], 0
jl 0x1001b406
mov dword [ebp - 0x440], 0xf0946507
lea eax, [ebp - 0x440]
push eax
push 1
push 1
push 0x4718
push 0x35c0
call fcn.10018874
add esp, 0x14
jmp 0x1001b3c7
jmp 0x1001b386
mov byte [ebp - 0x59], 0
push 0x23ce
push 1
lea eax, [ebp - 0x59]
push eax
push 1
push 1
call fcn.10012cf8
add esp, 0x14
jmp 0x1001b324
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x6e0]
call fcn.10024a0f
mov eax, dword [ebp - 0xa8]
cmp dword [eax], 0x4550
je 0x1001ba1d
mov dword [ebp - 0x14], 1
mov dword [ebp - 0x1c], 1
mov dword [ebp - 0x44], 0xffffffff
mov dword [ebp - 0x3c], 0
jmp 0x1001b471
mov eax, dword [ebp - 0x3c]
inc eax
mov dword [ebp - 0x3c], eax
cmp dword [ebp - 0x3c], 2
jge 0x1001b487
mov eax, dword [ebp - 0x3c]
mov dword [ebp + eax*4 - 0x3f8], 0xd6db
jmp 0x1001b46a
mov dword [ebp - 0x3c], 0
jmp 0x1001b497
mov eax, dword [ebp - 0x3c]
inc eax
mov dword [ebp - 0x3c], eax
cmp dword [ebp - 0x3c], 1
jge 0x1001b4ad
mov eax, dword [ebp - 0x3c]
mov dword [ebp + eax*4 - 0x3d0], 0xfffffffe
jmp 0x1001b490
cmp dword [ebp - 0x14], 0
jne 0x1001b4c3
push 9
pop eax
test eax, eax
jne 0x1001b4c3
and dword [ebp - 0x36c], 0
jmp 0x1001b4cd
mov dword [ebp - 0x36c], 1
mov eax, dword [ebp - 0x14]
cmp dword [ebp - 0x14], eax
je 0x1001b4e1
mov dword [ebp - 0x2e4], 1
jmp 0x1001b4e8
and dword [ebp - 0x2e4], 0
mov eax, dword [ebp - 0x14]
cmp dword [ebp - 0x2e4], eax
jg 0x1001b4ff
mov dword [ebp - 0x1dc], 1
jmp 0x1001b506
and dword [ebp - 0x1dc], 0
mov eax, dword [ebp - 0x14]
add eax, dword [ebp - 0x1dc]
cmp dword [ebp - 0x36c], eax
jg 0x1001b532
cmp dword [ebp - 0x14], 0
je 0x1001b532
mov eax, 0x9fa8
test eax, eax
je 0x1001b532
mov dword [ebp - 0x558], 1
jmp 0x1001b539
and dword [ebp - 0x558], 0
mov eax, dword [ebp - 0x14]
mov dword [ebp - 0x66c], eax
mov eax, dword [ebp - 0x14]
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 7
jae 0x1001b55a
mov dword [ebp - 0x1e4], 1
jmp 0x1001b561
and dword [ebp - 0x1e4], 0
mov eax, dword [ebp - 0x1e4]
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
imul eax, dword [ebp - 0x44]
test eax, eax
jne 0x1001b58e
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x3f8], 0
jne 0x1001b58e
and dword [ebp - 0x2ec], 0
jmp 0x1001b598
mov dword [ebp - 0x2ec], 1
mov eax, dword [ebp - 0x2ec]
mov dword [ebp - 0x44], eax
cmp dword [ebp - 0x44], 0xffff
jb 0x1001b5b6
mov dword [ebp - 0x1ec], 1
jmp 0x1001b5bd
and dword [ebp - 0x1ec], 0
imul eax, dword [ebp - 0x1ec], 0x13a4
push 4
pop ecx
shl ecx, 0
cmp eax, dword [ebp + ecx - 0x3f8]
je 0x1001b5e2
mov dword [ebp - 0x3c8], 1
jmp 0x1001b5e9
and dword [ebp - 0x3c8], 0
mov eax, dword [ebp - 0x3c8]
neg eax
push 4
pop ecx
imul ecx, ecx, 0
cmp eax, dword [ebp + ecx - 0x3f8]
jne 0x1001b8b2
mov dword [ebp - 0x448], 0xfff8
mov dword [ebp - 0x1c], 0xffffffec
jmp 0x1001b61e
mov eax, dword [ebp - 0x1c]
inc eax
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 6
jl 0x1001b8ad
mov dword [ebp - 0x198], 0xe60a2fc5
mov dword [ebp - 0x13c], 0
jmp 0x1001b64b
mov eax, dword [ebp - 0x13c]
inc eax
mov dword [ebp - 0x13c], eax
cmp dword [ebp - 0x13c], 2
jge 0x1001b667
mov eax, dword [ebp - 0x13c]
mov dword [ebp + eax*4 - 0x400], 0xffffffff
jmp 0x1001b63e
mov dword [ebp - 0x14], 0xfffffff0
jmp 0x1001b677
mov eax, dword [ebp - 0x14]
inc eax
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 0xfffffffa
jne 0x1001b86e
mov dword [ebp - 0x1f4], 0xe13cd4fe
mov dword [ebp - 0x2fc], 0xb4404179
mov dword [ebp - 0xf8], 0
jmp 0x1001b6ae
mov eax, dword [ebp - 0xf8]
inc eax
mov dword [ebp - 0xf8], eax
cmp dword [ebp - 0xf8], 2
jge 0x1001b6ca
mov eax, dword [ebp - 0xf8]
mov dword [ebp + eax*4 - 0x698], 0
jmp 0x1001b6a1
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0x400], 0xa83acdd7
imul eax, dword [ebp - 0x198], 0x6ff5
mov dword [ebp - 0x1f4], eax
cmp dword [ebp - 0x1f4], 0xffffffff
jne 0x1001b700
mov dword [ebp - 0x2f4], 1
jmp 0x1001b707
and dword [ebp - 0x2f4], 0
mov eax, dword [ebp - 0x448]
cmp eax, dword [ebp - 0x2f4]
jg 0x1001b721
mov dword [ebp - 0x1fc], 1
jmp 0x1001b728
and dword [ebp - 0x1fc], 0
mov eax, dword [ebp - 0x1c]
cmp eax, dword [ebp - 0x1fc]
jl 0x1001b73f
mov dword [ebp - 0x374], 1
jmp 0x1001b746
and dword [ebp - 0x374], 0
cmp dword [ebp - 0x374], 2
jne 0x1001b768
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x3f8], 0
jne 0x1001b768
and dword [ebp - 0x204], 0
jmp 0x1001b772
mov dword [ebp - 0x204], 1
mov eax, dword [ebp - 0x204]
mov dword [ebp - 0x44], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x3d0]
mov dword [ebp - 0x198], eax
push 4
pop eax
shl eax, 0
mov ecx, 0x8d56
sub ecx, dword [ebp + eax - 0x400]
cmp dword [ebp - 0x198], ecx
je 0x1001b7b4
mov dword [ebp - 0x20c], 1
jmp 0x1001b7bb
and dword [ebp - 0x20c], 0
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x400], 2
ja 0x1001b7d7
mov dword [ebp - 0x504], 1
jmp 0x1001b7de
and dword [ebp - 0x504], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x400]
mov dword [ebp - 0x2fc], eax
mov eax, dword [ebp - 0x2fc]
cmp dword [ebp - 0x20c], eax
jg 0x1001b80b
mov dword [ebp - 0x214], 1
jmp 0x1001b812
and dword [ebp - 0x214], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x3d0]
cmp dword [ebp - 0x214], eax
je 0x1001b833
mov dword [ebp - 0x304], 1
jmp 0x1001b83a
and dword [ebp - 0x304], 0
cmp dword [ebp - 0x304], 1
jl 0x1001b84f
mov dword [ebp - 0x21c], 1
jmp 0x1001b856
and dword [ebp - 0x21c], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x21c]
mov dword [ebp + eax - 0x698], ecx
jmp 0x1001b670
push 0x3c98
push 0x69e9
push 0x50be
lea eax, [ebp - 0x1c]
push eax
push 0x5ec9
push 0x33bd
push 0
push 0x6578
lea eax, [ebp - 0x44]
push eax
push 0x761d
push 0x709b
call fcn.10020090
add esp, 0x2c
jmp 0x1001b617
jmp 0x1001b963
mov dword [ebp - 0x540], 0xef5427e5
mov dword [ebp - 0x1c], 0x15
jmp 0x1001b8cc
mov eax, dword [ebp - 0x1c]
dec eax
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 0xfffffffe
jg 0x1001b963
mov dword [ebp - 0x128], 0
jmp 0x1001b8ef
mov eax, dword [ebp - 0x128]
inc eax
mov dword [ebp - 0x128], eax
cmp dword [ebp - 0x128], 1
jge 0x1001b90b
mov eax, dword [ebp - 0x128]
mov dword [ebp + eax*4 - 0x450], 0x552f0c8c
jmp 0x1001b8e2
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x450]
mov dword [ebp - 0x14], eax
mov dword [ebp - 0x44], 0
jmp 0x1001b92b
mov eax, dword [ebp - 0x44]
inc eax
mov dword [ebp - 0x44], eax
cmp dword [ebp - 0x44], 0
jg 0x1001b95e
cmp dword [ebp - 0x540], 0
je 0x1001b93c
jmp 0x1001b95e
mov byte [ebp - 0x61], 0
push 1
lea eax, [ebp - 0x61]
push eax
push 1
push 0x1319
push 1
push 0x7c6b
call fcn.10018990
add esp, 0x18
jmp 0x1001b924
jmp 0x1001b8c5
mov dword [ebp - 0x84], 0x95364446
cmp dword [ebp - 0x84], 0
jne 0x1001b9f2
mov dword [ebp - 0x84], 0
jmp 0x1001b98f
mov eax, dword [ebp - 0x84]
inc eax
mov dword [ebp - 0x84], eax
cmp dword [ebp - 0x84], 0x1e
je 0x1001b9ba
push 0x62c5
push 0x3510
push 1
push 0x38a5
push 0x2e43
push 1
call fcn.10013a69
add esp, 0x18
jmp 0x1001b982
mov byte [ebp - 0x55], 0
movzx eax, byte [ebp - 0x55]
test eax, eax
je 0x1001b9f0
push 0x6e46
push 0x2e4a
push 1
push 0x4fa5
push 1
push 0x9aa
push 0x3937
push 0x3330
call fcn.10013d8f
add esp, 0x20
jmp 0x1001ba12
push 0x5689
push 1
push 0x675d
push 0x3681
push 0xc3c
push 1
call fcn.10018bf7
add esp, 0x18
mov eax, dword [ebp - 0x68]
and dword [eax], 0
jmp 0x1001e06a
mov dword [ebp - 0x458], 0
mov dword [ebp - 0x6a0], 1
mov dword [ebp - 0x68c], 0x76942a1e
mov dword [ebp - 0x6a8], 0xef6b8f3d
mov dword [ebp - 0x50c], 0x790e8648
mov dword [ebp - 0x100], 0
jmp 0x1001ba68
mov eax, dword [ebp - 0x100]
inc eax
mov dword [ebp - 0x100], eax
cmp dword [ebp - 0x100], 2
jge 0x1001ba84
mov eax, dword [ebp - 0x100]
mov dword [ebp + eax*4 - 0x73c], 0x4caf14c9
jmp 0x1001ba5b
push 0x30a6
push 0x388d
push 0x68ba
push 0x387
push 0x2b3b
push 0x43bd
push 1
push 0x71ea
push 1
push 0x5623
push 0x41e4
lea eax, [ebp - 0x458]
push eax
push 0x7525
call fcn.10018d75
add esp, 0x34
push 0xeb1
push 1
push 0x3d61
lea eax, [ebp - 0x50c]
push eax
push 0x6160
push 0x3170
push 1
push 0x188e
call fcn.10013f1b
add esp, 0x20
push 1
push 0x16ff
lea eax, [ebp - 0xa8]
push eax
push 0x1760
push 0x376c
push 0x240d
push 0x25ec
lea eax, [ebp - 0x124]
push eax
push 0x37c3
push 1
call fcn.1001401c
add esp, 0x28
mov dword [ebp - 0x38], 0x643cdf98
mov dword [ebp - 0x71c], 0xffffffff
mov dword [ebp - 0x6ac], 0xfffffff8
mov dword [ebp - 0x108], 0x1247adf1
mov dword [ebp - 0x6f4], 0x3c15d0d6
mov dword [ebp - 0x6b4], 0xffffffff
mov dword [ebp - 0x224], 0xd91509cf
mov dword [ebp - 0x514], 0xfcfbce00
mov dword [ebp - 0x460], 0x16488a9
mov dword [ebp - 0x14c], 0
jmp 0x1001bb9d
mov eax, dword [ebp - 0x14c]
inc eax
mov dword [ebp - 0x14c], eax
cmp dword [ebp - 0x14c], 4
jge 0x1001bbb9
mov eax, dword [ebp - 0x14c]
mov dword [ebp + eax*4 - 0x594], 0xc93b4e1
jmp 0x1001bb90
mov dword [ebp - 0x38], 3
jmp 0x1001bbc9
mov eax, dword [ebp - 0x38]
dec eax
mov dword [ebp - 0x38], eax
cmp dword [ebp - 0x38], 0
jl 0x1001bd52
mov dword [ebp - 0x714], 0xfffffffd
mov dword [ebp - 0x34], 0
jmp 0x1001bbed
mov eax, dword [ebp - 0x34]
inc eax
mov dword [ebp - 0x34], eax
cmp dword [ebp - 0x34], 3
jge 0x1001bc03
mov eax, dword [ebp - 0x34]
mov dword [ebp + eax*4 - 0x770], 0xa622a149
jmp 0x1001bbe6
mov dword [ebp - 0x34], 0
jmp 0x1001bc13
mov eax, dword [ebp - 0x34]
inc eax
mov dword [ebp - 0x34], eax
cmp dword [ebp - 0x34], 2
jge 0x1001bc29
mov eax, dword [ebp - 0x34]
mov dword [ebp + eax*4 - 0x4ec], 1
jmp 0x1001bc0c
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x4ec]
inc eax
push 4
pop ecx
shl ecx, 0
mov dword [ebp + ecx - 0x4ec], eax
mov eax, dword [ebp - 0x38]
cmp dword [ebp + eax*4 - 0x594], 0xfffffff6
jge 0x1001bc5d
mov dword [ebp - 0x37c], 1
jmp 0x1001bc64
and dword [ebp - 0x37c], 0
mov eax, dword [ebp - 0x37c]
mov dword [ebp - 0x224], eax
cmp dword [ebp - 0x224], 0
je 0x1001bc91
push 1
push 0x379c
push 1
push 1
call fcn.1001941c
add esp, 0x10
jmp 0x1001bd4d
mov dword [ebp - 0x468], 0x25189d9e
mov dword [ebp - 0x108], 0
jmp 0x1001bcb4
mov eax, dword [ebp - 0x108]
inc eax
mov dword [ebp - 0x108], eax
cmp dword [ebp - 0x108], 3
jg 0x1001bd4d
mov dword [ebp - 0x30c], 0x7f59ec13
mov eax, dword [ebp - 0x460]
mov dword [ebp - 0x30c], eax
mov eax, dword [ebp - 0x38]
mov eax, dword [ebp + eax*4 - 0x594]
cmp eax, dword [ebp - 0x30c]
jne 0x1001bcf5
mov dword [ebp - 0x568], 1
jmp 0x1001bcfc
and dword [ebp - 0x568], 0
cmp dword [ebp - 0x468], 0
je 0x1001bd18
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x4ec]
mov dword [ebp - 0x6bc], eax
mov eax, dword [ebp - 0x514]
mov dword [ebp - 0x704], eax
mov eax, dword [ebp - 0x38]
mov eax, dword [ebp + eax*4 - 0x594]
mov dword [ebp - 0x6c4], eax
mov eax, dword [ebp - 0x38]
mov ecx, dword [ebp - 0x38]
mov eax, dword [ebp + eax*4 - 0x594]
mov dword [ebp + ecx*4 - 0x594], eax
jmp 0x1001bca7
jmp 0x1001bbc2
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x594], 0
je 0x1001bd8c
mov byte [ebp - 0x58], 0
push 1
push 0xfee
push 1
lea eax, [ebp - 0x58]
push eax
push 0x1cb2
push 0x445a
push 0x4361
call fcn.100194ff
add esp, 0x1c
jmp 0x1001bd9a
push 1
push 1
push 1
call fcn.1001959b
add esp, 0xc
cmp dword [ebp - 0x124], 0
jne 0x1001bfdd
mov dword [ebp - 0x560], 0xbe8f2100
mov dword [ebp - 0x488], 0x7d2a7e9f
mov dword [ebp - 0x470], 0x194c
cmp dword [ebp - 0x470], 0xd17
jge 0x1001bf21
lea eax, [ebp - 0x190]
push eax
lea eax, [ebp - 0x22c]
push eax
push 0x100098ac
call fcn.100592cb
add esp, 0xc
mov eax, dword [ebp - 0x22c]
cdq
idiv dword [ebp - 0x190]
mov dword [ebp - 0x51c], eax
and dword [ebp - 0x548], 0
lea eax, [ebp - 0x548]
push eax
push dword [ebp - 0x190]
lea ecx, [ebp - 0x668]
call fcn.10024a5e
mov dword [ebp - 4], 9
and dword [ebp - 0x178], 0
jmp 0x1001be3f
mov eax, dword [ebp - 0x178]
inc eax
mov dword [ebp - 0x178], eax
mov eax, dword [ebp - 0x178]
cmp eax, dword [ebp - 0x22c]
jge 0x1001be8c
lea eax, [ebp - 0x478]
push eax
push 0x10008fc0
call fcn.100592cb
pop ecx
pop ecx
mov eax, dword [ebp - 0x478]
dec eax
push eax
lea ecx, [ebp - 0x668]
call fcn.10024a2b
mov dword [ebp - 0x3dc], eax
mov eax, dword [ebp - 0x3dc]
mov eax, dword [eax]
inc eax
mov ecx, dword [ebp - 0x3dc]
mov dword [ecx], eax
jmp 0x1001be32
and dword [ebp - 0x180], 0
and dword [ebp - 0xc0], 0
jmp 0x1001bea9
mov eax, dword [ebp - 0xc0]
inc eax
mov dword [ebp - 0xc0], eax
mov eax, dword [ebp - 0xc0]
cmp eax, dword [ebp - 0x190]
jge 0x1001befa
push dword [ebp - 0xc0]
lea ecx, [ebp - 0x668]
call fcn.10024a2b
mov ecx, dword [ebp - 0x51c]
sub ecx, dword [eax]
mov dword [ebp - 0xc4], ecx
jns 0x1001bee6
mov eax, dword [ebp - 0xc4]
neg eax
mov dword [ebp - 0xc4], eax
mov eax, dword [ebp - 0x180]
add eax, dword [ebp - 0xc4]
mov dword [ebp - 0x180], eax
jmp 0x1001be9c
mov eax, dword [ebp - 0x180]
cdq
sub eax, edx
sar eax, 1
push eax
push 0x100095f8
call fcn.100594e6
pop ecx
pop ecx
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x668]
call fcn.10024a0f
mov dword [ebp - 0x524], 0x9956a218
mov dword [ebp - 0x490], 0xc7a2e428
push 4
lea ecx, [ebp - 0x614]
call fcn.100249ad
mov dword [ebp - 4], 0xa
mov dword [ebp - 0x480], 0xe57b6a69
push 1
push 0x2584
lea eax, [ebp - 0x614]
push eax
push 0x4b70
lea eax, [ebp - 0x718]
push eax
push 0x3369
push 1
push 1
call fcn.100145db
add esp, 0x20
push 1
push 1
push 0x3db2
lea eax, [ebp - 0x480]
push eax
lea eax, [ebp - 0x560]
push eax
lea eax, [ebp - 0x488]
push eax
lea eax, [ebp - 0x614]
push eax
push 0x730c
lea eax, [ebp - 0x524]
push eax
lea eax, [ebp - 0x490]
push eax
push 0x7435
call fcn.10019a4f
add esp, 0x2c
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x614]
call fcn.10024a0f
mov eax, dword [ebp - 0x68]
and dword [eax], 0
jmp 0x1001e06a
push 0x2f65
push 0x5aab
push 0
call fcn.1001eb00
add esp, 0xc
lea eax, [ebp - 0x28]
push eax
push 0
lea eax, [ebp - 0x1a0]
push eax
lea eax, [ebp - 0x6d4]
push eax
lea eax, [ebp - 0x124]
push eax
lea eax, [ebp - 0xa8]
push eax
call fcn.10022e02
add esp, 0x18
push 0x3fff
push 1
push 0x3451
push 1
push 0x40e8
lea eax, [ebp - 0x28]
push eax
lea eax, [ebp - 0x164]
push eax
lea eax, [ebp - 0xa8]
push eax
call fcn.10016377
add esp, 0x20
mov dword [ebp - 0x40], 0xe56f9b2c
mov dword [ebp - 0x550], 0xfffffff8
mov dword [ebp - 0xcc], 0
jmp 0x1001c072
mov eax, dword [ebp - 0xcc]
inc eax
mov dword [ebp - 0xcc], eax
cmp dword [ebp - 0xcc], 1
jge 0x1001c08e
mov eax, dword [ebp - 0xcc]
mov dword [ebp + eax*4 - 0x98], 0xbdde0bcd
jmp 0x1001c065
push 1
push 0x32ee
push 0x167e
push 0x7837
push 0x50c8
push 0x77e4
push 0x108c
push 1
push 0x7eaa
push 0x331b
call fcn.100165a0
add esp, 0x28
mov dword [ebp - 0x40], 0
jmp 0x1001c0d2
mov eax, dword [ebp - 0x40]
inc eax
mov dword [ebp - 0x40], eax
cmp dword [ebp - 0x40], 0
jg 0x1001c1b8
mov eax, dword [ebp - 0x40]
cmp dword [ebp + eax*4 - 0x98], 0
je 0x1001c102
mov eax, dword [ebp - 0x40]
cmp dword [ebp + eax*4 - 0x98], 0xfffffffc
jl 0x1001c102
mov dword [ebp - 0x234], 1
jmp 0x1001c109
and dword [ebp - 0x234], 0
mov eax, dword [ebp - 0x40]
mov eax, dword [ebp + eax*4 - 0x98]
cmp dword [ebp - 0x234], eax
jne 0x1001c127
mov dword [ebp - 0x314], 1
jmp 0x1001c12e
and dword [ebp - 0x314], 0
mov eax, dword [ebp - 0x40]
mov ecx, 0xacc5
sub ecx, dword [ebp + eax*4 - 0x98]
cmp ecx, dword [ebp - 0x314]
je 0x1001c151
mov dword [ebp - 0x23c], 1
jmp 0x1001c158
and dword [ebp - 0x23c], 0
mov eax, dword [ebp - 0x23c]
sub eax, 0x30cc0dd
cmp eax, 0x6b6f
jl 0x1001c176
mov dword [ebp - 0x384], 1
jmp 0x1001c17d
and dword [ebp - 0x384], 0
mov eax, dword [ebp - 0x384]
sub eax, 0x9d60
mov ecx, dword [ebp - 0x40]
cmp eax, dword [ebp + ecx*4 - 0x98]
jne 0x1001c1a0
mov dword [ebp - 0x244], 1
jmp 0x1001c1a7
and dword [ebp - 0x244], 0
mov eax, dword [ebp - 0x244]
mov dword [ebp - 0x550], eax
jmp 0x1001c0cb
lea eax, [ebp - 0xa8]
push eax
push 1
push 1
push 0xd8c
lea eax, [ebp - 0x1e8]
push eax
lea eax, [ebp - 0x124]
push eax
call fcn.10019f99
add esp, 0x18
mov dword [ebp - 0x24], 0xfffffffe
mov dword [ebp - 0xf4], 1
mov dword [ebp - 0x8c], 0x95cd1d2a
mov dword [ebp - 0x18], 0xfffffffd
mov dword [ebp - 0x32c], 0xd70783db
mov dword [ebp - 0x4c], 0xeb1ed309
push 1
lea ecx, [ebp - 0x3bc]
call fcn.100249ad
mov dword [ebp - 4], 0xb
mov dword [ebp - 0x39c], 0xfffffff6
mov dword [ebp - 0x31c], 0x286
mov dword [ebp - 0x52c], 0x10009a18
cmp dword [ebp - 0x31c], 0x598
jle 0x1001c361
and dword [ebp - 0xec], 0
jmp 0x1001c269
mov eax, dword [ebp - 0xec]
inc eax
mov dword [ebp - 0xec], eax
cmp dword [ebp - 0xec], 0x21c9
jge 0x1001c361
and dword [ebp - 0xe4], 0
jmp 0x1001c28f
mov eax, dword [ebp - 0xe4]
inc eax
mov dword [ebp - 0xe4], eax
cmp dword [ebp - 0xe4], 0x427b
jge 0x1001c35c
and dword [ebp - 0xd4], 0
jmp 0x1001c2b5
mov eax, dword [ebp - 0xd4]
inc eax
mov dword [ebp - 0xd4], eax
cmp dword [ebp - 0xd4], 0x5426
jge 0x1001c357
and dword [ebp - 0xdc], 0
jmp 0x1001c2db
mov eax, dword [ebp - 0xdc]
inc eax
mov dword [ebp - 0xdc], eax
cmp dword [ebp - 0xdc], 0x36d4
jge 0x1001c352
mov eax, dword [ebp - 0xd4]
cdq
idiv dword [ebp - 0xdc]
mov eax, dword [ebp - 0xe4]
mov ecx, edx
shl eax, cl
xor eax, dword [ebp - 0xec]
cdq
mov dword [ebp - 0x53c], eax
mov dword [ebp - 0x538], edx
push dword [ebp - 0x538]
push dword [ebp - 0x53c]
lea ecx, [ebp - 0x7a0]
call fcn.1000bb70
pop ecx
pop ecx
mov dword [ebp - 0x498], eax
mov ecx, dword [ebp - 0x498]
call fcn.10024878
push eax
call fcn.100594e6
pop ecx
lea ecx, [ebp - 0x7a0]
call fcn.1002486e
jmp 0x1001c2ce
jmp 0x1001c2a8
jmp 0x1001c282
jmp 0x1001c25c
mov byte [ebp - 4], 0xc
cmp dword [ebp - 0x31c], 0xfffffec0
jge 0x1001c37d
push dword [ebp - 0x52c]
call fcn.100594e6
pop ecx
jmp 0x1001c399
mov dword [ebp - 4], 0xb
jmp 0x1001c3a9
push 0x2140
lea eax, [ebp - 0x3bc]
push eax
push 0x57d2
push 1
push 0x344c
lea eax, [ebp - 0x670]
push eax
push 0x2525
push 1
push 0x29c5
call fcn.1001a070
add esp, 0x24
mov dword [ebp - 0x24], 0xb
jmp 0x1001c3ec
mov eax, dword [ebp - 0x24]
inc eax
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 0x11
je 0x1001c7b3
mov dword [ebp - 0x16c], 0xffffffff
mov dword [ebp - 0x60], 0x2a83a0f0
mov dword [ebp - 0x264], 0xfffffff6
mov dword [ebp - 0x88], 0x65392fb3
mov dword [ebp - 0x6c], 2
lea eax, [ebp - 0x16c]
push eax
push 1
push 0x608e
push 0x794f
lea eax, [ebp - 0x60]
push eax
push 0x378d
lea eax, [ebp - 0x264]
push eax
lea eax, [ebp - 0xf4]
push eax
push 1
lea eax, [ebp - 0x18]
push eax
push 0x5423
push 0x6940
lea eax, [ebp - 0x24]
push eax
push 0x384d
lea eax, [ebp - 0x8c]
push eax
push 1
call fcn.10016752
add esp, 0x40
cmp dword [ebp - 0x60], 0
jne 0x1001c489
xor eax, eax
jne 0x1001c489
and dword [ebp - 0x24c], 0
jmp 0x1001c493
mov dword [ebp - 0x24c], 1
mov eax, dword [ebp - 0x18]
add eax, dword [ebp - 0x24c]
mov dword [ebp - 0x60], eax
mov eax, dword [ebp - 0x60]
mov dword [ebp - 0x678], eax
imul eax, dword [ebp - 0x60], 0x8c46
test eax, eax
jne 0x1001c4c5
cmp dword [ebp - 0xf4], 0
jne 0x1001c4c5
and dword [ebp - 0x3c4], 0
jmp 0x1001c4cf
mov dword [ebp - 0x3c4], 1
mov dword [ebp - 0x8c], 0xffffffff
mov eax, dword [ebp - 0x8c]
cmp eax, dword [ebp - 0x3c4]
jg 0x1001c4f3
mov dword [ebp - 0x254], 1
jmp 0x1001c4fa
and dword [ebp - 0x254], 0
mov eax, dword [ebp - 0x254]
inc eax
cmp eax, dword [ebp - 0x16c]
jne 0x1001c515
mov dword [ebp - 0x324], 1
jmp 0x1001c51c
and dword [ebp - 0x324], 0
cmp dword [ebp - 0x324], 0xfffffffd
jae 0x1001c531
mov dword [ebp - 0x25c], 1
jmp 0x1001c538
and dword [ebp - 0x25c], 0
cmp dword [ebp - 0x25c], 8
je 0x1001c54d
mov dword [ebp - 0x38c], 1
jmp 0x1001c554
and dword [ebp - 0x38c], 0
mov eax, dword [ebp - 0x38c]
mov dword [ebp - 0x88], eax
mov eax, dword [ebp - 0x88]
mov dword [ebp - 0xf4], eax
mov eax, dword [ebp - 0xf4]
mov dword [ebp - 0x32c], eax
mov eax, dword [ebp - 0x264]
add eax, dword [ebp - 0x32c]
cmp eax, dword [ebp - 0x16c]
je 0x1001c598
mov dword [ebp - 0x26c], 1
jmp 0x1001c59f
and dword [ebp - 0x26c], 0
mov eax, dword [ebp - 0x24]
cmp eax, dword [ebp - 0x26c]
jl 0x1001c5b6
mov dword [ebp - 0x3d4], 1
jmp 0x1001c5bd
and dword [ebp - 0x3d4], 0
mov eax, dword [ebp - 0x3d4]
mov dword [ebp - 0x4c], eax
mov eax, dword [ebp - 0x24]
cmp dword [ebp - 0x4c], eax
jge 0x1001c5da
mov dword [ebp - 0x274], 1
jmp 0x1001c5e1
and dword [ebp - 0x274], 0
cmp dword [ebp - 0x274], 1
ja 0x1001c5f6
mov dword [ebp - 0x334], 1
jmp 0x1001c5fd
and dword [ebp - 0x334], 0
imul eax, dword [ebp - 0x334], 0
add eax, dword [ebp - 0x6c]
je 0x1001c645
mov dword [ebp - 0x6c], 0xffffffff
jmp 0x1001c619
mov eax, dword [ebp - 0x6c]
dec eax
mov dword [ebp - 0x6c], eax
cmp dword [ebp - 0x6c], 0xffffffe5
jg 0x1001c640
mov dword [ebp - 0x4a0], 0xfffffff6
lea eax, [ebp - 0x4a0]
push eax
lea eax, [ebp - 0x4c]
push eax
push 0
call fcn.1002330b
add esp, 0xc
jmp 0x1001c612
jmp 0x1001c7ae
mov dword [ebp - 0x578], 0x63f78caf
mov dword [ebp - 0xbc], 0
jmp 0x1001c668
mov eax, dword [ebp - 0xbc]
inc eax
mov dword [ebp - 0xbc], eax
cmp dword [ebp - 0xbc], 1
jge 0x1001c684
mov eax, dword [ebp - 0xbc]
mov dword [ebp + eax*4 - 0xfc], 0
jmp 0x1001c65b
cmp dword [ebp - 0x88], 0
je 0x1001c6b0
mov eax, dword [ebp - 0x60]
mov dword [ebp - 0x680], eax
mov dword [ebp - 0x578], 0
xor eax, eax
je 0x1001c6b0
mov dword [ebp - 0x27c], 1
jmp 0x1001c6b7
and dword [ebp - 0x27c], 0
mov eax, dword [ebp - 0x6c]
cmp dword [ebp - 0x27c], eax
jge 0x1001c6ce
mov dword [ebp - 0x394], 1
jmp 0x1001c6d5
and dword [ebp - 0x394], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xfc]
mov dword [ebp - 0x4c], eax
mov eax, dword [ebp - 0x4c]
cmp eax, dword [ebp - 0x394]
jne 0x1001c6fc
mov dword [ebp - 0x284], 1
jmp 0x1001c703
and dword [ebp - 0x284], 0
imul eax, dword [ebp - 0x284], 0xfffffff6
add eax, dword [ebp - 0x60]
cmp eax, dword [ebp - 0x88]
jge 0x1001c721
mov dword [ebp - 0x33c], 1
jmp 0x1001c728
and dword [ebp - 0x33c], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xfc]
cmp dword [ebp - 0x33c], eax
jg 0x1001c749
mov dword [ebp - 0x4a8], 1
jmp 0x1001c750
and dword [ebp - 0x4a8], 0
mov eax, dword [ebp - 0x88]
mov dword [ebp - 0x688], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xfc]
mov dword [ebp - 0x690], eax
mov eax, dword [ebp - 0x8c]
mov dword [ebp - 0x69c], eax
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0xfc], 0xb77d8654
mov byte [ebp - 0x5a], 0
movzx eax, byte [ebp - 0x5a]
test eax, eax
je 0x1001c7ae
push 0
push 0x1146
push 1
push 0x1896
call fcn.10022d77
add esp, 0x10
jmp 0x1001c3e5
mov dword [ebp - 0x18], 0
jmp 0x1001c7c3
mov eax, dword [ebp - 0x18]
inc eax
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 0
jg 0x1001cb11
mov dword [ebp - 0x10c], 0xfffffffb
mov dword [ebp - 0x104], 0
jmp 0x1001c7f0
mov eax, dword [ebp - 0x104]
inc eax
mov dword [ebp - 0x104], eax
cmp dword [ebp - 0x104], 4
jge 0x1001c80c
mov eax, dword [ebp - 0x104]
mov dword [ebp + eax*4 - 0x734], 0xcedf6e77
jmp 0x1001c7e3
lea eax, [ebp - 0x3bc]
push eax
push 1
push 0x1162
push 0x6401
push 0
push 0x5e44
lea eax, [ebp - 0x18]
push eax
call fcn.10016cf0
add esp, 0x1c
push dword [ebp - 0x18]
lea ecx, [ebp - 0x3bc]
call fcn.10024a2b
mov esi, eax
push dword [ebp - 0x18]
lea ecx, [ebp - 0x3bc]
call fcn.10024a2b
mov eax, dword [eax]
sub eax, dword [ebp - 0x39c]
imul eax, dword [ebp - 0x24]
cmp dword [esi], eax
jg 0x1001c86c
mov dword [ebp - 0x28c], 1
jmp 0x1001c873
and dword [ebp - 0x28c], 0
cmp dword [ebp - 0x28c], 0
ja 0x1001c888
mov dword [ebp - 0x3cc], 1
jmp 0x1001c88f
and dword [ebp - 0x3cc], 0
cmp dword [ebp - 0x3cc], 0
jg 0x1001c8a4
mov dword [ebp - 0x294], 1
jmp 0x1001c8ab
and dword [ebp - 0x294], 0
push dword [ebp - 0x18]
lea ecx, [ebp - 0x3bc]
call fcn.10024a2b
mov ecx, dword [ebp - 0x294]
cmp ecx, dword [eax]
je 0x1001c8cf
mov dword [ebp - 0x344], 1
jmp 0x1001c8d6
and dword [ebp - 0x344], 0
mov eax, dword [ebp - 0x344]
mov dword [ebp - 0x10c], eax
mov esi, dword [ebp - 0x10c]
push dword [ebp - 0x18]
lea ecx, [ebp - 0x3bc]
call fcn.10024a2b
cmp dword [eax], esi
jne 0x1001c906
mov dword [ebp - 0x29c], 1
jmp 0x1001c90d
and dword [ebp - 0x29c], 0
mov eax, dword [ebp - 0x24]
cmp dword [ebp - 0x29c], eax
jne 0x1001c924
mov dword [ebp - 0x2a4], 1
jmp 0x1001c92b
and dword [ebp - 0x2a4], 0
mov eax, dword [ebp - 0x39c]
cmp eax, dword [ebp - 0x2a4]
jl 0x1001c945
mov dword [ebp - 0x34c], 1
jmp 0x1001c94c
and dword [ebp - 0x34c], 0
push 4
pop eax
imul eax, eax, 3
mov ecx, dword [ebp - 0x34c]
mov dword [ebp + eax - 0x734], ecx
mov dword [ebp - 0x4c], 0
jmp 0x1001c96f
mov eax, dword [ebp - 0x4c]
inc eax
mov dword [ebp - 0x4c], eax
cmp dword [ebp - 0x4c], 0
jg 0x1001cb0c
mov dword [ebp - 0x114], 0xe1a6
mov dword [ebp - 0x3b0], 1
cmp dword [ebp - 0x114], 0
je 0x1001c99b
jmp 0x1001cb0c
mov eax, dword [ebp - 0x114]
cmp dword [ebp - 0x8c], eax
jl 0x1001c9b5
mov dword [ebp - 0x2ac], 1
jmp 0x1001c9bc
and dword [ebp - 0x2ac], 0
mov eax, dword [ebp - 0x2ac]
mov dword [ebp - 0x3b0], eax
mov esi, dword [ebp - 0x3b0]
push dword [ebp - 0x18]
lea ecx, [ebp - 0x3bc]
call fcn.10024a2b
cmp esi, dword [eax]
jne 0x1001c9ec
mov dword [ebp - 0x2b4], 1
jmp 0x1001c9f3
and dword [ebp - 0x2b4], 0
push 9
pop eax
sub eax, dword [ebp - 0x2b4]
cmp dword [ebp - 0x10c], eax
jne 0x1001ca10
mov dword [ebp - 0x354], 1
jmp 0x1001ca17
and dword [ebp - 0x354], 0
mov eax, dword [ebp - 0x354]
neg eax
cmp dword [ebp - 0x114], eax
jle 0x1001ca33
mov dword [ebp - 0x2bc], 1
jmp 0x1001ca3a
and dword [ebp - 0x2bc], 0
cmp dword [ebp - 0x2bc], 0x2f179d16
je 0x1001ca52
mov dword [ebp - 0x3a4], 1
jmp 0x1001ca59
and dword [ebp - 0x3a4], 0
cmp dword [ebp - 0x3a4], 0
jae 0x1001ca6e
mov dword [ebp - 0x2c4], 1
jmp 0x1001ca75
and dword [ebp - 0x2c4], 0
cmp dword [ebp - 0x2c4], 0x6bda
jg 0x1001ca8d
mov dword [ebp - 0x35c], 1
jmp 0x1001ca94
and dword [ebp - 0x35c], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x734]
cmp dword [ebp - 0x35c], eax
jg 0x1001cab5
mov dword [ebp - 0x2cc], 1
jmp 0x1001cabc
and dword [ebp - 0x2cc], 0
mov eax, dword [ebp - 0x10c]
cmp dword [ebp - 0x2cc], eax
jg 0x1001cad6
mov dword [ebp - 0x3c0], 1
jmp 0x1001cadd
and dword [ebp - 0x3c0], 0
mov eax, dword [ebp - 0x114]
cmp dword [ebp - 0x3c0], eax
jl 0x1001caf7
mov dword [ebp - 0x2d4], 1
jmp 0x1001cafe
and dword [ebp - 0x2d4], 0
mov eax, dword [ebp - 0x2d4]
mov dword [ebp - 0x24], eax
jmp 0x1001c968
jmp 0x1001c7bc
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x3bc]
call fcn.10024a0f
cmp dword [ebp - 0x1e8], 0
je 0x1001ce62
mov dword [ebp - 0x78], 0xaa0d
mov dword [ebp - 0x1b4], 0xb7d6
mov dword [ebp - 0x5dc], 0xfda37b18
mov dword [ebp - 0x5d8], 0xfda37b18
mov dword [ebp - 0x5d4], 0xfda37b18
mov dword [ebp - 0x5d0], 0xfda37b18
lea ecx, [ebp - 0x165]
call fcn.10024a3a
push eax
lea eax, [ebp - 0x5cc]
push eax
lea eax, [ebp - 0x5dc]
push eax
lea ecx, [ebp - 0x75c]
call fcn.10024a3d
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0x644]
call fcn.100249e9
mov dword [ebp - 4], 0xe
mov dword [ebp - 0x9c], 0x9aa50887
mov dword [ebp - 0x4b0], 1
mov dword [ebp - 0x94], 8
mov dword [ebp - 0x4f4], 0xfffffffa
push 3
lea ecx, [ebp - 0x5ac]
call fcn.100249ad
mov byte [ebp - 4], 0xf
mov dword [ebp - 0x364], 2
mov dword [ebp - 0x1e0], 0x5bec372b
mov dword [ebp - 0x11c], 0
jmp 0x1001cc08
mov eax, dword [ebp - 0x11c]
inc eax
mov dword [ebp - 0x11c], eax
cmp dword [ebp - 0x11c], 3
jge 0x1001cc2a
push dword [ebp - 0x11c]
lea ecx, [ebp - 0x5ac]
call fcn.10024a2b
mov dword [eax], 0x95534fd3
jmp 0x1001cbfb
lea eax, [ebp - 0x9c]
push eax
lea eax, [ebp - 0x4f4]
push eax
push 0x49
lea eax, [ebp - 0x5ac]
push eax
lea eax, [ebp - 0x364]
push eax
lea eax, [ebp - 0x1b4]
push eax
lea eax, [ebp - 0x4b0]
push eax
push 0
push 0x63d7
lea eax, [ebp - 0x78]
push eax
lea eax, [ebp - 0x644]
push eax
lea eax, [ebp - 0x94]
push eax
call fcn.1001edd6
add esp, 0x30
mov dword [ebp - 0x94], 0x13
jmp 0x1001cc90
mov eax, dword [ebp - 0x94]
inc eax
mov dword [ebp - 0x94], eax
cmp dword [ebp - 0x94], 0x15
je 0x1001ce12
mov dword [ebp - 0x1d8], 0
push 1
lea ecx, [ebp - 0x6f0]
call fcn.100249ad
mov byte [ebp - 4], 0x10
push 0
push 1
lea eax, [ebp - 0x6f0]
push eax
push 0x335f
push 0x62ac
push 0x228b
push 1
push 0x770f
push 0x187c
lea eax, [ebp - 0x6b0]
push eax
call fcn.10016b89
add esp, 0x28
mov dword [ebp - 0x78], 0x14
jmp 0x1001ccfd
mov eax, dword [ebp - 0x78]
dec eax
mov dword [ebp - 0x78], eax
cmp dword [ebp - 0x78], 0xe
jge 0x1001cdf1
mov dword [ebp - 0x4f8], 0xffff
mov dword [ebp - 0x1d0], 0xa6575e0a
mov dword [ebp - 0x4f0], 1
mov dword [ebp - 0x9c], 0xd
jmp 0x1001cd3e
mov eax, dword [ebp - 0x9c]
dec eax
mov dword [ebp - 0x9c], eax
cmp dword [ebp - 0x9c], 0xfffffff0
jg 0x1001cdec
mov dword [ebp - 0x1c8], 1
mov dword [ebp - 0x4b8], 0xfffffffa
lea eax, [ebp - 0x4f8]
push eax
lea eax, [ebp - 0x364]
push eax
lea eax, [ebp - 0x1d8]
push eax
lea eax, [ebp - 0x5ac]
push eax
push 0x5c80
lea eax, [ebp - 0x1b4]
push eax
push 0x47fa
lea eax, [ebp - 0x1c8]
push eax
push 1
push 1
lea eax, [ebp - 0x1d0]
push eax
call fcn.1001a177
add esp, 0x2c
push 1
push 0x3516
push 1
lea eax, [ebp - 0x1c8]
push eax
lea eax, [ebp - 0x1d0]
push eax
lea eax, [ebp - 0x4b8]
push eax
lea eax, [ebp - 0x4f0]
push eax
lea eax, [ebp - 0x78]
push eax
lea eax, [ebp - 0x1d8]
push eax
lea eax, [ebp - 0x644]
push eax
push 0
call fcn.10016de2
add esp, 0x2c
jmp 0x1001cd31
jmp 0x1001ccf6
mov eax, dword [ebp - 0x1e0]
dec eax
mov dword [ebp - 0x1e0], eax
mov byte [ebp - 4], 0xf
lea ecx, [ebp - 0x6f0]
call fcn.10024a0f
jmp 0x1001cc83
mov byte [ebp - 4], 0xe
lea ecx, [ebp - 0x5ac]
call fcn.10024a0f
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x644]
call fcn.10024a0f
push 1
push 1
push 0x19ab
push 0x3b5b
lea eax, [ebp - 0x1e8]
push eax
push 0x4198
push 1
lea eax, [ebp - 0x28]
push eax
push 0x636f
push 0x52c9
call fcn.10016b89
add esp, 0x28
push 1
push 0
push 0x1a6a
push 0x54da
push 1
push 0x63b6
call fcn.1001e62c
add esp, 0x18
push dword [ebp - 0x28]
call fcn.10011178
pop ecx
test eax, eax
jne 0x1001cf46
mov dword [ebp - 0x4c0], 0xfffffffd
mov dword [ebp - 0x5c8], 0x2768
mov dword [ebp - 0x5c4], 0x2768
mov dword [ebp - 0x5c0], 0x2768
mov dword [ebp - 0x5bc], 0x2768
lea ecx, [ebp - 0x199]
call fcn.10024a3a
push eax
lea eax, [ebp - 0x5b8]
push eax
lea eax, [ebp - 0x5c8]
push eax
lea ecx, [ebp - 0x754]
call fcn.10024a3d
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0x700]
call fcn.100249e9
mov dword [ebp - 4], 0x11
push 0x1340
lea eax, [ebp - 0x700]
push eax
push 1
lea eax, [ebp - 0x4c0]
push eax
push 0x63f7
push 0x4886
push 1
push 0x5708
call fcn.1001a5a9
add esp, 0x20
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x700]
call fcn.10024a0f
mov eax, dword [ebp - 0x68]
and dword [eax], 0
jmp 0x1001e06a
push 1
push 0xa39
push 1
push 0x696a
lea eax, [ebp - 0x28]
push eax
call fcn.1001705e
add esp, 0x14
mov dword [ebp - 0x80], 0
push 3
lea ecx, [ebp - 0x574]
call fcn.100249ad
mov dword [ebp - 4], 0x12
mov dword [ebp - 0x2c], 0
jmp 0x1001cf8b
mov eax, dword [ebp - 0x2c]
inc eax
mov dword [ebp - 0x2c], eax
cmp dword [ebp - 0x2c], 1
jge 0x1001cf9e
mov eax, dword [ebp - 0x2c]
mov dword [ebp + eax*4 - 0x54], 0x6960f57a
jmp 0x1001cf84
push 1
push 0x5ba8
push 0x300a
push 0x612b
lea eax, [ebp - 0x2c]
push eax
lea eax, [ebp - 0x574]
push eax
push 1
call fcn.10017116
add esp, 0x1c
mov dword [ebp - 0x2c], 0
jmp 0x1001cfd4
mov eax, dword [ebp - 0x2c]
inc eax
mov dword [ebp - 0x2c], eax
cmp dword [ebp - 0x2c], 2
jge 0x1001cfea
mov eax, dword [ebp - 0x2c]
mov dword [ebp + eax*4 - 0x5b4], 1
jmp 0x1001cfcd
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x54]
mov dword [ebp - 0x80], eax
mov dword [ebp - 0x80], 0
jmp 0x1001d007
mov eax, dword [ebp - 0x80]
dec eax
mov dword [ebp - 0x80], eax
cmp dword [ebp - 0x80], 0xfffffff8
jl 0x1001d767
push 1
lea ecx, [ebp - 0x15c]
call fcn.100249ad
mov byte [ebp - 4], 0x13
mov dword [ebp - 0x174], 7
mov dword [ebp - 0x2d8], 0x2192fe2c
mov dword [ebp - 0x298], 7
push 0x1613
push 0x7d45
lea eax, [ebp - 0xa4]
push eax
push 0
push 0x64fa
lea eax, [ebp - 0x15c]
push eax
call fcn.10020065
add esp, 0x18
mov dword [ebp - 0xa4], 0
jmp 0x1001d080
mov eax, dword [ebp - 0xa4]
inc eax
mov dword [ebp - 0xa4], eax
cmp dword [ebp - 0xa4], 3
jge 0x1001d09c
mov eax, dword [ebp - 0xa4]
mov dword [ebp + eax*4 - 0x1ac], 0xfb66febf
jmp 0x1001d073
push 0
lea ecx, [ebp - 0x15c]
call fcn.10024a2b
mov eax, dword [ebp - 0x174]
mov dword [ebp - 0x508], eax
push 0
lea ecx, [ebp - 0x15c]
call fcn.10024a2b
mov eax, dword [eax]
mov dword [ebp - 0x4c8], eax
mov eax, dword [ebp - 0x174]
inc eax
mov dword [ebp - 0x174], eax
mov eax, dword [ebp - 0x508]
cmp eax, dword [ebp - 0x4c8]
jl 0x1001d0f1
mov dword [ebp - 0x1f0], 1
jmp 0x1001d0f8
and dword [ebp - 0x1f0], 0
cmp dword [ebp - 0x1f0], 0xfffd
ja 0x1001d110
mov dword [ebp - 0x1f8], 1
jmp 0x1001d117
and dword [ebp - 0x1f8], 0
push 0
lea ecx, [ebp - 0x15c]
call fcn.10024a2b
push 0
lea ecx, [ebp - 0x15c]
call fcn.10024a2b
cmp dword [eax], 0x3a60
jl 0x1001d145
mov dword [ebp - 0x200], 1
jmp 0x1001d14c
and dword [ebp - 0x200], 0
mov eax, dword [ebp - 0x1f8]
sub eax, dword [ebp - 0x200]
je 0x1001d165
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x54], 0
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x54], 0x95
jge 0x1001d181
mov dword [ebp - 0x208], 1
jmp 0x1001d188
and dword [ebp - 0x208], 0
cmp dword [ebp - 0x208], 0xffffffff
jge 0x1001d1a1
push 0xfffffffffffffffe
pop eax
test eax, eax
jne 0x1001d1a1
and dword [ebp - 0x210], 0
jmp 0x1001d1ab
mov dword [ebp - 0x210], 1
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x210]
sub ecx, dword [ebp + eax - 0x1ac]
je 0x1001d739
push 2
lea ecx, [ebp - 0x418]
call fcn.100249ad
mov byte [ebp - 4], 0x14
mov dword [ebp - 0xb4], 0
push 0x528e
lea eax, [ebp - 0x6b8]
push eax
lea eax, [ebp - 0x418]
push eax
push 1
push 0x2f03
push 1
push 0x2694
call fcn.10017317
add esp, 0x1c
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x54]
mov dword [ebp - 0x6c0], eax
push 0
lea ecx, [ebp - 0x15c]
call fcn.10024a2b
push 4
pop ecx
shl ecx, 0
mov eax, dword [eax]
mov dword [ebp + ecx - 0x5b4], eax
push 1
lea ecx, [ebp - 0x418]
call fcn.10024a2b
cmp dword [eax], 0xffff
jae 0x1001d255
mov dword [ebp - 0x218], 1
jmp 0x1001d25c
and dword [ebp - 0x218], 0
push 1
lea ecx, [ebp - 0x418]
call fcn.10024a2b
mov eax, dword [eax]
cmp eax, dword [ebp - 0x218]
jge 0x1001d27f
mov dword [ebp - 0x220], 1
jmp 0x1001d286
and dword [ebp - 0x220], 0
mov eax, dword [ebp - 0x220]
dec eax
mov dword [ebp - 0xb4], eax
mov esi, dword [ebp - 0xb4]
push 0
lea ecx, [ebp - 0x574]
call fcn.10024a2b
add esi, dword [eax]
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0x1ac], esi
jl 0x1001d2c2
mov dword [ebp - 0x228], 1
jmp 0x1001d2c9
and dword [ebp - 0x228], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x5b4]
cmp dword [ebp - 0x228], eax
je 0x1001d2f0
cmp dword [ebp - 0x80], 0
je 0x1001d2f0
mov dword [ebp - 0x17c], 1
jmp 0x1001d2f7
and dword [ebp - 0x17c], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x17c]
mov dword [ebp + eax - 0x1ac], ecx
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x17c]
sub ecx, dword [ebp + eax - 0x54]
neg ecx
je 0x1001d339
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0x1ac], 0
je 0x1001d339
mov dword [ebp - 0x230], 1
jmp 0x1001d340
and dword [ebp - 0x230], 0
push 0
lea ecx, [ebp - 0x15c]
call fcn.10024a2b
mov ecx, dword [ebp - 0x230]
cmp ecx, dword [eax]
je 0x1001d363
mov dword [ebp - 0x238], 1
jmp 0x1001d36a
and dword [ebp - 0x238], 0
push 0
lea ecx, [ebp - 0x15c]
call fcn.10024a2b
mov ecx, dword [ebp - 0x238]
cmp ecx, dword [eax]
jg 0x1001d38d
mov dword [ebp - 0x240], 1
jmp 0x1001d394
and dword [ebp - 0x240], 0
imul eax, dword [ebp - 0x240], 0x67d
mov dword [ebp - 0x2d8], eax
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0x1ac], 0
jne 0x1001d3bf
mov dword [ebp - 0x248], 1
jmp 0x1001d3c6
and dword [ebp - 0x248], 0
cmp dword [ebp - 0x248], 0x4a1a
jle 0x1001d3de
mov dword [ebp - 0x184], 1
jmp 0x1001d3e5
and dword [ebp - 0x184], 0
push 4
pop eax
shl eax, 1
mov ecx, dword [ebp - 0x184]
mov dword [ebp + eax - 0x1ac], ecx
cmp dword [ebp - 0x184], 0
jne 0x1001d41d
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x1ac]
sub eax, 0xd03d
jne 0x1001d41d
and dword [ebp - 0x250], 0
jmp 0x1001d427
mov dword [ebp - 0x250], 1
push 0
lea ecx, [ebp - 0x15c]
call fcn.10024a2b
cmp dword [eax], 0
je 0x1001d445
mov dword [ebp - 0x258], 1
jmp 0x1001d44c
and dword [ebp - 0x258], 0
mov eax, dword [ebp - 0x250]
cmp eax, dword [ebp - 0x258]
jge 0x1001d466
mov dword [ebp - 0x260], 1
jmp 0x1001d46d
and dword [ebp - 0x260], 0
push 0
lea ecx, [ebp - 0x15c]
call fcn.10024a2b
mov ecx, dword [ebp - 0x260]
imul ecx, dword [eax]
test ecx, ecx
jne 0x1001d493
mov dword [ebp - 0x510], 1
jmp 0x1001d49a
and dword [ebp - 0x510], 0
push 0
lea ecx, [ebp - 0x15c]
call fcn.10024a2b
push 4
pop eax
imul eax, eax, 0
push 4
pop ecx
imul ecx, ecx, 0
mov ecx, dword [ebp + ecx - 0x54]
cmp dword [ebp + eax - 0x1ac], ecx
jge 0x1001d4d2
mov eax, 0xeaf7
test eax, eax
jne 0x1001d4d2
and dword [ebp - 0x4d0], 0
jmp 0x1001d4dc
mov dword [ebp - 0x4d0], 1
xor eax, eax
cmp eax, 0xffffffff
ja 0x1001d4ef
mov dword [ebp - 0x1b0], 1
jmp 0x1001d4f6
and dword [ebp - 0x1b0], 0
push 1
lea ecx, [ebp - 0x418]
call fcn.10024a2b
mov ecx, dword [ebp - 0x1b0]
cmp ecx, dword [eax]
jle 0x1001d519
mov dword [ebp - 0x270], 1
jmp 0x1001d520
and dword [ebp - 0x270], 0
push 1
lea ecx, [ebp - 0x418]
call fcn.10024a2b
mov ecx, dword [ebp - 0x270]
cmp ecx, dword [eax]
jg 0x1001d543
mov dword [ebp - 0x278], 1
jmp 0x1001d54a
and dword [ebp - 0x278], 0
cmp dword [ebp - 0x278], 0x4be5697a
je 0x1001d562
mov dword [ebp - 0x280], 1
jmp 0x1001d569
and dword [ebp - 0x280], 0
push 0
lea ecx, [ebp - 0x574]
call fcn.10024a2b
mov ecx, dword [ebp - 0x280]
add ecx, dword [eax]
mov dword [ebp - 0xb4], ecx
cmp dword [ebp - 0xb4], 0xfffffffa
je 0x1001d599
mov dword [ebp - 0x288], 1
jmp 0x1001d5a0
and dword [ebp - 0x288], 0
cmp dword [ebp - 0x288], 0xffff
jne 0x1001d5d4
mov byte [ebp - 0x62], 0
push 0x663d
push 1
push 0x49e2
push 0x1158
lea eax, [ebp - 0x62]
push eax
push 1
call fcn.1001a696
add esp, 0x18
jmp 0x1001d728
mov dword [ebp - 0xac], 0xbb00
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0x1ac], 0xf5a29150
jbe 0x1001d5fc
mov dword [ebp - 0x2a0], 1
jmp 0x1001d603
and dword [ebp - 0x2a0], 0
push 4
pop eax
shl eax, 1
mov esi, dword [ebp + eax - 0x1ac]
neg esi
push 0
lea ecx, [ebp - 0x574]
call fcn.10024a2b
cmp esi, dword [eax]
jg 0x1001d62e
mov dword [ebp - 0x290], 1
jmp 0x1001d635
and dword [ebp - 0x290], 0
mov eax, dword [ebp - 0x290]
mov dword [ebp - 0x298], eax
mov eax, dword [ebp - 0x298]
cmp dword [ebp - 0x2a0], eax
jg 0x1001d65b
mov dword [ebp - 0x2a8], 1
jmp 0x1001d662
and dword [ebp - 0x2a8], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x54]
cmp dword [ebp - 0x2a8], eax
jl 0x1001d680
mov dword [ebp - 0x2b0], 1
jmp 0x1001d687
and dword [ebp - 0x2b0], 0
cmp dword [ebp - 0x2b0], 0xffffffff
ja 0x1001d69c
mov dword [ebp - 0x2b8], 1
jmp 0x1001d6a3
and dword [ebp - 0x2b8], 0
mov eax, dword [ebp - 0xac]
cmp dword [ebp - 0x2b8], eax
jne 0x1001d6bd
mov dword [ebp - 0x2c0], 1
jmp 0x1001d6c4
and dword [ebp - 0x2c0], 0
mov eax, dword [ebp - 0xac]
add eax, dword [ebp - 0x2c0]
cmp eax, dword [ebp - 0xac]
jl 0x1001d6e4
mov dword [ebp - 0x2c8], 1
jmp 0x1001d6eb
and dword [ebp - 0x2c8], 0
mov eax, dword [ebp - 0xac]
imul eax, dword [ebp - 0x2c8]
cmp eax, dword [ebp - 0xac]
jge 0x1001d712
mov eax, 0x87d4e0d3
test eax, eax
je 0x1001d712
and dword [ebp - 0x2d0], 0
jmp 0x1001d71c
mov dword [ebp - 0x2d0], 1
mov eax, dword [ebp - 0x2d0]
mov dword [ebp - 0xb4], eax
mov byte [ebp - 4], 0x13
lea ecx, [ebp - 0x418]
call fcn.10024a0f
jmp 0x1001d753
cmp dword [ebp - 0x2d8], 0
je 0x1001d753
mov byte [ebp - 4], 0x12
lea ecx, [ebp - 0x15c]
call fcn.10024a0f
jmp 0x1001d767
mov byte [ebp - 4], 0x12
lea ecx, [ebp - 0x15c]
call fcn.10024a0f
jmp 0x1001d000
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x574]
call fcn.10024a0f
mov eax, dword [ebp - 0x28]
mov eax, dword [eax]
cmp dword [eax + 0x28], 0
je 0x1001df96
mov eax, dword [ebp - 0x28]
mov eax, dword [eax]
mov ecx, dword [ebp - 0x124]
add ecx, dword [eax + 0x28]
mov dword [ebp - 0x308], ecx
mov dword [ebp - 0x30], 7
mov dword [ebp - 0x4d8], 0
mov dword [ebp - 0x520], 0xe0d1
mov dword [ebp - 0x18c], 2
mov dword [ebp - 0x30], 0xfffffff3
jmp 0x1001d7ce
mov eax, dword [ebp - 0x30]
inc eax
mov dword [ebp - 0x30], eax
cmp dword [ebp - 0x30], 9
jg 0x1001d908
mov dword [ebp - 0x138], 0
mov dword [ebp - 0x12c], 1
mov eax, dword [ebp - 0x138]
mov dword [ebp - 0x708], eax
mov eax, dword [ebp - 0x12c]
cmp dword [ebp - 0x138], eax
jle 0x1001d812
mov dword [ebp - 0x2e0], 1
jmp 0x1001d819
and dword [ebp - 0x2e0], 0
cmp dword [ebp - 0x2e0], 0
ja 0x1001d82e
mov dword [ebp - 0x2e8], 1
jmp 0x1001d835
and dword [ebp - 0x2e8], 0
mov eax, dword [ebp - 0x30]
add eax, dword [ebp - 0x2e8]
cmp dword [ebp - 0x30], eax
jg 0x1001d84f
mov dword [ebp - 0x518], 1
jmp 0x1001d856
and dword [ebp - 0x518], 0
mov eax, dword [ebp - 0x4d8]
mov dword [ebp - 0x710], eax
mov eax, dword [ebp - 0x12c]
mov dword [ebp - 0x724], eax
mov eax, dword [ebp - 0x30]
cmp dword [ebp - 0x138], eax
jl 0x1001d885
mov dword [ebp - 0x2f0], 1
jmp 0x1001d88c
and dword [ebp - 0x2f0], 0
mov eax, dword [ebp - 0x2f0]
sub eax, dword [ebp - 0x520]
cmp eax, dword [ebp - 0x12c]
jl 0x1001d8ac
mov dword [ebp - 0x2f8], 1
jmp 0x1001d8b3
and dword [ebp - 0x2f8], 0
mov eax, dword [ebp - 0x30]
sub eax, dword [ebp - 0x30]
mov ecx, dword [ebp - 0x12c]
imul ecx, dword [ebp - 0x2f8]
cmp eax, ecx
jg 0x1001d8d6
mov dword [ebp - 0x300], 1
jmp 0x1001d8dd
and dword [ebp - 0x300], 0
mov eax, dword [ebp - 0x300]
mov dword [ebp - 0x18c], eax
mov eax, dword [ebp - 0x18c]
mov dword [ebp - 0x138], eax
cmp dword [ebp - 0x18c], 0
je 0x1001d903
jmp 0x1001d7c7
jmp 0x1001d7c7
cmp dword [ebp - 0x308], 0
jne 0x1001da45
push 4
lea ecx, [ebp - 0x65c]
call fcn.100249ad
mov dword [ebp - 4], 0x15
mov dword [ebp - 0x4e4], 9
push 2
lea ecx, [ebp - 0x5fc]
call fcn.100249ad
mov byte [ebp - 4], 0x16
mov dword [ebp - 0x528], 0x5b45beac
mov dword [ebp - 0x420], 0x42c3b03c
mov dword [ebp - 0x48], 0
jmp 0x1001d968
mov eax, dword [ebp - 0x48]
inc eax
mov dword [ebp - 0x48], eax
cmp dword [ebp - 0x48], 4
jge 0x1001d981
push dword [ebp - 0x48]
lea ecx, [ebp - 0x65c]
call fcn.10024a2b
and dword [eax], 0
jmp 0x1001d961
mov dword [ebp - 0x48], 0
jmp 0x1001d991
mov eax, dword [ebp - 0x48]
inc eax
mov dword [ebp - 0x48], eax
cmp dword [ebp - 0x48], 2
jge 0x1001d9ad
push dword [ebp - 0x48]
lea ecx, [ebp - 0x5fc]
call fcn.10024a2b
mov dword [eax], 1
jmp 0x1001d98a
push 0x2ba5
lea eax, [ebp - 0x4e4]
push eax
push 0x22df
push 0x854
lea eax, [ebp - 0x65c]
push eax
push 0x1d8f
lea eax, [ebp - 0x528]
push eax
push 1
push 0x5c1e
lea eax, [ebp - 0x420]
push eax
push 0x1602
push 0x6df
push 1
lea eax, [ebp - 0x5fc]
push eax
call fcn.100175da
add esp, 0x38
mov byte [ebp - 0x5b], 0
movzx eax, byte [ebp - 0x5b]
test eax, eax
je 0x1001da1c
push 0xcfe
push 1
push 1
call fcn.10017a59
add esp, 0xc
mov byte [ebp - 4], 0x15
lea ecx, [ebp - 0x5fc]
call fcn.10024a0f
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x65c]
call fcn.10024a0f
mov eax, dword [ebp - 0x68]
and dword [eax], 0
jmp 0x1001e06a
push 0
push 1
push 0xdeadbeef
call dword [ebp - 0x308]
mov dword [ebp - 0x424], eax
cmp dword [ebp - 0x424], 0
jne 0x1001dea4
mov dword [ebp - 0x20], 0xba76
mov dword [ebp - 0x148], 0xab76d609
mov dword [ebp - 0x434], 0xffffffff
mov dword [ebp - 0x140], 0
jmp 0x1001da9b
mov eax, dword [ebp - 0x140]
inc eax
mov dword [ebp - 0x140], eax
cmp dword [ebp - 0x140], 2
jge 0x1001dab7
mov eax, dword [ebp - 0x140]
mov dword [ebp + eax*4 - 0x3f0], 0x240ca700
jmp 0x1001da8e
mov eax, dword [ebp - 0x20]
cmp dword [ebp - 0x20], eax
jne 0x1001dacb
mov dword [ebp - 0x318], 1
jmp 0x1001dad2
and dword [ebp - 0x318], 0
cmp dword [ebp - 0x20], 0xffff
jne 0x1001dae7
mov dword [ebp - 0x310], 1
jmp 0x1001daee
and dword [ebp - 0x310], 0
mov eax, dword [ebp - 0x20]
imul eax, dword [ebp - 0x310]
test eax, eax
jne 0x1001db0b
cmp dword [ebp - 0x20], 0
jne 0x1001db0b
and dword [ebp - 0x320], 0
jmp 0x1001db15
mov dword [ebp - 0x320], 1
mov eax, dword [ebp - 0x318]
mov dword [ebp - 0x148], eax
mov eax, dword [ebp - 0x148]
cmp eax, dword [ebp - 0x320]
jg 0x1001db3b
mov dword [ebp - 0x328], 1
jmp 0x1001db42
and dword [ebp - 0x328], 0
mov eax, dword [ebp - 0x20]
cmp dword [ebp - 0x328], eax
jge 0x1001db59
mov dword [ebp - 0x330], 1
jmp 0x1001db60
and dword [ebp - 0x330], 0
cmp dword [ebp - 0x330], 0xffffffff
jle 0x1001db75
mov dword [ebp - 0x338], 1
jmp 0x1001db7c
and dword [ebp - 0x338], 0
mov eax, dword [ebp - 0x20]
cmp dword [ebp - 0x338], eax
jge 0x1001db93
mov dword [ebp - 0x340], 1
jmp 0x1001db9a
and dword [ebp - 0x340], 0
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x20]
imul ecx, dword [ebp - 0x340]
sub eax, ecx
je 0x1001de4c
mov dword [ebp - 0x43c], 0xbc227363
push 3
lea ecx, [ebp - 0x584]
call fcn.100249ad
mov dword [ebp - 4], 0x17
push 4
lea ecx, [ebp - 0x5a0]
call fcn.100249ad
mov byte [ebp - 4], 0x18
mov dword [ebp - 0x194], 0xc4e7ccce
push 0x76ee
lea eax, [ebp - 0x584]
push eax
push 0x30b
lea eax, [ebp - 0x42c]
push eax
push 1
push 1
call fcn.10017cf1
add esp, 0x18
lea eax, [ebp - 0x42c]
push eax
push 1
push 1
push 1
lea eax, [ebp - 0x5a0]
push eax
push 0x28be
call fcn.10017eb1
add esp, 0x18
cmp dword [ebp - 0x20], 0
jne 0x1001dc45
cmp dword [ebp - 0x148], 0
jne 0x1001dc45
and dword [ebp - 0x348], 0
jmp 0x1001dc4f
mov dword [ebp - 0x348], 1
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x348]
mov dword [ebp + eax - 0x3f0], ecx
push 1
lea ecx, [ebp - 0x584]
call fcn.10024a2b
mov ecx, dword [ebp - 0x148]
cmp dword [eax], ecx
jg 0x1001dc85
mov dword [ebp - 0x350], 1
jmp 0x1001dc8c
and dword [ebp - 0x350], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x3f0]
cmp dword [ebp - 0x350], eax
jle 0x1001dcad
mov dword [ebp - 0x358], 1
jmp 0x1001dcb4
and dword [ebp - 0x358], 0
cmp dword [ebp - 0x358], 0xfffffff9
jg 0x1001dcc9
mov dword [ebp - 0x360], 1
jmp 0x1001dcd0
and dword [ebp - 0x360], 0
push 0
lea ecx, [ebp - 0x584]
call fcn.10024a2b
mov ecx, dword [ebp - 0x360]
mov dword [eax], ecx
push 0
lea ecx, [ebp - 0x5a0]
call fcn.10024a2b
mov ecx, dword [ebp - 0x434]
sub ecx, 0xeebc
cmp dword [eax], ecx
jg 0x1001dd13
or eax, 0xffffffff
je 0x1001dd13
mov dword [ebp - 0x368], 1
jmp 0x1001dd1a
and dword [ebp - 0x368], 0
cmp dword [ebp - 0x368], 1
jbe 0x1001dd33
xor eax, eax
je 0x1001dd33
mov dword [ebp - 0x370], 1
jmp 0x1001dd3a
and dword [ebp - 0x370], 0
mov eax, dword [ebp - 0x43c]
cmp dword [ebp - 0x370], eax
je 0x1001dd61
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x3f0], 0
jne 0x1001dd61
and dword [ebp - 0x378], 0
jmp 0x1001dd6b
mov dword [ebp - 0x378], 1
push 0
lea ecx, [ebp - 0x5a0]
call fcn.10024a2b
mov ecx, dword [ebp - 0x378]
cmp ecx, dword [eax]
je 0x1001dd8e
mov dword [ebp - 0x380], 1
jmp 0x1001dd95
and dword [ebp - 0x380], 0
mov eax, dword [ebp - 0x194]
sub eax, dword [ebp - 0x380]
mov ecx, dword [ebp - 0x194]
dec ecx
mov dword [ebp - 0x194], ecx
test eax, eax
jne 0x1001ddcd
push 0
lea ecx, [ebp - 0x584]
call fcn.10024a2b
cmp dword [eax], 0
jne 0x1001ddcd
and dword [ebp - 0x388], 0
jmp 0x1001ddd7
mov dword [ebp - 0x388], 1
mov eax, 0xa83d
sub eax, dword [ebp - 0x20]
cmp eax, dword [ebp - 0x388]
jne 0x1001ddf3
mov dword [ebp - 0x390], 1
jmp 0x1001ddfa
and dword [ebp - 0x390], 0
cmp dword [ebp - 0x390], 0x77c41863
jl 0x1001de12
mov dword [ebp - 0x398], 1
jmp 0x1001de19
and dword [ebp - 0x398], 0
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x398]
mov dword [ebp + eax - 0x3f0], ecx
mov byte [ebp - 4], 0x17
lea ecx, [ebp - 0x5a0]
call fcn.10024a0f
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x584]
call fcn.10024a0f
jmp 0x1001de99
mov dword [ebp - 0x444], 0xffff
push 0x2833
push 0x71a2
push 0x23b9
push 0
push 0x54ab
push 0x6dd9
push 0x5ba2
lea eax, [ebp - 0x444]
push eax
push 0x12c9
push 0x15af
push 0x3c8a
push 0x5a5
call fcn.10023393
add esp, 0x30
mov eax, dword [ebp - 0x68]
and dword [eax], 0
jmp 0x1001e06a
mov dword [ebp - 0x134], 0xffffffff
mov dword [ebp - 0x150], 0
jmp 0x1001dec7
mov eax, dword [ebp - 0x150]
inc eax
mov dword [ebp - 0x150], eax
cmp dword [ebp - 0x150], 1
jge 0x1001dee3
mov eax, dword [ebp - 0x150]
mov dword [ebp + eax*4 - 0x720], 0xfffffff7
jmp 0x1001deba
mov dword [ebp - 0x134], 0
jmp 0x1001defc
mov eax, dword [ebp - 0x134]
dec eax
mov dword [ebp - 0x134], eax
cmp dword [ebp - 0x134], 0
jl 0x1001df8c
mov dword [ebp - 0x44c], 0xcc25
push 3
lea ecx, [ebp - 0x608]
call fcn.100249ad
mov dword [ebp - 4], 0x19
push 0x6a58
push 0x3e78
push 0x3f07
push 1
push 0x1c60
push 1
lea eax, [ebp - 0x6a4]
push eax
push 0x307f
push 0x1902
lea eax, [ebp - 0x608]
push eax
call fcn.10017fd0
add esp, 0x28
imul esi, dword [ebp - 0x44c], 0xba1b
push 1
lea ecx, [ebp - 0x608]
call fcn.10024a2b
mov dword [eax], esi
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x608]
call fcn.10024a0f
jmp 0x1001deef
mov eax, dword [ebp - 0x28]
mov dword [eax + 0x10], 1
mov eax, dword [ebp - 0x28]
cmp dword [eax + 0x10], 0
je 0x1001dfaa
mov eax, dword [ebp - 0x28]
mov dword [ebp - 0x3a0], eax
jmp 0x1001dfb1
and dword [ebp - 0x3a0], 0
mov eax, dword [ebp - 0x68]
mov ecx, dword [ebp - 0x3a0]
mov dword [eax], ecx
jmp 0x1001e06a
mov eax, dword [ebp - 0x454]
mov dword [ebp - 0x46c], eax
mov eax, dword [ebp - 0x45c]
mov dword [ebp - 0x474], eax
mov eax, dword [ebp - 0x464]
mov dword [ebp - 0x47c], eax
mov eax, dword [ebp - 0x46c]
mov dword [ebp - 0x494], eax
mov eax, dword [ebp - 0x474]
mov dword [ebp - 0x48c], eax
mov eax, dword [ebp - 0x47c]
mov dword [ebp - 0x484], eax
mov eax, dword [ebp - 0x484]
mov eax, dword [eax]
mov ecx, dword [ebp - 0x48c]
mov ecx, dword [ecx]
add ecx, dword [eax]
mov eax, dword [ebp - 0x494]
mov eax, dword [eax]
mov dword [eax], ecx
jmp 0x1001e06a
mov eax, dword [ebp + 0x18]
mov dword [ebp - 0x4a4], eax
mov eax, dword [ebp + 0x14]
mov dword [ebp - 0x4ac], eax
mov eax, dword [ebp + 0x24]
mov dword [ebp - 0x49c], eax
push 0x673e
push dword [ebp - 0x49c]
push 0
push dword [ebp - 0x4a4]
push dword [ebp - 0x4ac]
push 0x3def
call fcn.10013fec
add esp, 0x18
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret