Function at 0x100248ec
Capabilities:
Encrypt data using speck
Log keystrokes via polling

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x1006bf61
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
mov eax, 0x24e4
call fcn.10066aa0
push esi
push edi
movzx eax, byte [ebp + 0x14]
test eax, eax
je 0x10031435
mov eax, dword [ebp + 0x20]
mov dword [ebp - 0x1050], eax
mov eax, dword [ebp + 0x24]
mov dword [ebp - 0x1028], eax
lea eax, [ebp + 8]
mov dword [ebp - 0x1110], eax
lea eax, [ebp + 0x1c]
mov dword [ebp - 0x1030], eax
mov eax, dword [ebp + 0xc]
mov dword [ebp - 0x1048], eax
mov eax, dword [ebp + 0x28]
mov dword [ebp - 0x1058], eax
mov eax, dword [ebp + 0x18]
mov dword [ebp - 0x1040], eax
mov eax, dword [ebp - 0x1110]
movzx eax, byte [eax]
test eax, eax
je 0x10024a01
mov eax, dword [ebp - 0x1028]
mov dword [ebp - 0x90c], eax
mov eax, dword [ebp - 0x1030]
mov dword [ebp - 0x1038], eax
mov eax, dword [ebp - 0x90c]
mov eax, dword [eax + 4]
mov dword [ebp - 0xcf0], eax
mov eax, dword [ebp - 0x90c]
mov eax, dword [eax]
push 8
pop ecx
imul ecx, ecx, 5
lea eax, [eax + ecx + 0x78]
mov dword [ebp - 0xce0], eax
mov eax, dword [ebp - 0xce0]
cmp dword [eax + 4], 0
jbe 0x100249fc
mov eax, dword [ebp - 0xce0]
mov ecx, dword [ebp - 0xcf0]
add ecx, dword [eax]
mov dword [ebp - 0xce8], ecx
mov eax, dword [ebp - 0xce8]
cmp dword [eax], 0
jbe 0x100249fc
mov eax, dword [ebp - 0x1038]
push dword [eax]
lea eax, [ebp - 0xce8]
push eax
push dword [ebp - 0xcf0]
push 0
push 0x690d
call fcn.10032951
add esp, 0x14
jmp 0x100249cb
jmp 0x10031433
mov eax, dword [ebp - 0x1040]
mov dword [ebp - 0x1060], eax
mov eax, dword [ebp - 0x1048]
mov dword [ebp - 0xfd0], eax
mov eax, dword [ebp - 0x1050]
mov dword [ebp - 0xcd0], eax
mov eax, dword [ebp - 0x1058]
mov dword [ebp - 0x548], eax
mov eax, dword [ebp - 0x1060]
mov eax, dword [eax + 0x38]
mov dword [ebp - 0x540], eax
mov dword [ebp - 0x50], 0x7e2799ac
mov dword [ebp - 0x88], 1
mov dword [ebp - 0x47c], 0x97312b94
mov dword [ebp - 0x31c], 0
jmp 0x10024a74
mov eax, dword [ebp - 0x31c]
inc eax
mov dword [ebp - 0x31c], eax
cmp dword [ebp - 0x31c], 2
jge 0x10024a90
mov eax, dword [ebp - 0x31c]
mov dword [ebp + eax*4 - 0x13b8], 0xd9d76c13
jmp 0x10024a67
mov dword [ebp - 0x50], 0xffffffee
jmp 0x10024aa0
mov eax, dword [ebp - 0x50]
inc eax
mov dword [ebp - 0x50], eax
cmp dword [ebp - 0x50], 0x1b
jle 0x100250ef
mov dword [ebp - 0x5c], 0x55b7cefa
mov dword [ebp - 0x4d4], 0xd1e1
mov dword [ebp - 0xbc], 0
jmp 0x10024ad4
mov eax, dword [ebp - 0xbc]
inc eax
mov dword [ebp - 0xbc], eax
cmp dword [ebp - 0xbc], 2
jge 0x10024af0
mov eax, dword [ebp - 0xbc]
mov dword [ebp + eax*4 - 0x608], 0xb72fd491
jmp 0x10024ac7
mov dword [ebp - 0xbc], 0
jmp 0x10024b09
mov eax, dword [ebp - 0xbc]
inc eax
mov dword [ebp - 0xbc], eax
cmp dword [ebp - 0xbc], 3
jge 0x10024b25
mov eax, dword [ebp - 0xbc]
mov dword [ebp + eax*4 - 0x1240], 0xffff
jmp 0x10024afc
mov dword [ebp - 0x5c], 0
jmp 0x10024b35
mov eax, dword [ebp - 0x5c]
inc eax
mov dword [ebp - 0x5c], eax
cmp dword [ebp - 0x5c], 1
jg 0x10024d80
mov dword [ebp - 0x1bc], 0x14173bf3
mov dword [ebp - 0x1070], 0xfffffff8
mov dword [ebp - 0x1bc], 0
jmp 0x10024b6c
mov eax, dword [ebp - 0x1bc]
inc eax
mov dword [ebp - 0x1bc], eax
cmp dword [ebp - 0x1bc], 1
jg 0x10024d5f
push 1
lea ecx, [ebp - 0x1230]
call fcn.1000d911
and dword [ebp - 4], 0
push 0x5c1c
lea eax, [ebp - 0x1230]
push eax
push 0
lea eax, [ebp - 0x1800]
push eax
push 0x47ad
push 0x7774
push 0
call fcn.1002133a
add esp, 0x1c
push 0
lea ecx, [ebp - 0x1230]
call fcn.1000da50
and dword [eax], 0
jmp 0x10024be9
push 0
lea ecx, [ebp - 0x1230]
call fcn.1000da50
mov dword [ebp - 0xcf8], eax
mov eax, dword [ebp - 0xcf8]
mov eax, dword [eax]
inc eax
mov ecx, dword [ebp - 0xcf8]
mov dword [ecx], eax
push 0
lea ecx, [ebp - 0x1230]
call fcn.1000da50
cmp dword [eax], 1
jg 0x10024c75
mov dword [ebp - 0x474], 1
mov dword [ebp - 0x474], 1
jmp 0x10024c1e
mov eax, dword [ebp - 0x474]
dec eax
mov dword [ebp - 0x474], eax
cmp dword [ebp - 0x474], 0
jl 0x10024c70
mov dword [ebp - 0x324], 0
mov dword [ebp - 0x324], 0
jmp 0x10024c4a
mov eax, dword [ebp - 0x324]
inc eax
mov dword [ebp - 0x324], eax
cmp dword [ebp - 0x324], 1
jg 0x10024c6e
mov dword [ebp - 0x4d4], 0xffffffff
mov eax, dword [ebp - 0x5c]
cmp dword [ebp + eax*4 - 0x608], 0
je 0x10024c6c
jmp 0x10024c6e
jmp 0x10024c3d
jmp 0x10024c11
jmp 0x10024bc5
mov eax, dword [ebp - 0x88]
cmp dword [ebp - 0x5c], eax
jge 0x10024c8c
mov dword [ebp - 0x1068], 1
jmp 0x10024c93
and dword [ebp - 0x1068], 0
mov eax, dword [ebp - 0x1bc]
mov dword [ebp - 0x182c], eax
cmp dword [ebp - 0x1bc], 3
jb 0x10024cb4
mov dword [ebp - 0xd00], 1
jmp 0x10024cbb
and dword [ebp - 0xd00], 0
cmp dword [ebp - 0xd00], 0xfffffff8
je 0x10024cd0
mov dword [ebp - 0xd08], 1
jmp 0x10024cd7
and dword [ebp - 0xd08], 0
cmp dword [ebp - 0xd08], 4
je 0x10024cec
mov dword [ebp - 0xd10], 1
jmp 0x10024cf3
and dword [ebp - 0xd10], 0
mov eax, dword [ebp - 0x5c]
mov eax, dword [ebp + eax*4 - 0x608]
cmp eax, dword [ebp - 0xd10]
jle 0x10024d17
mov eax, 0x74489b46
test eax, eax
jne 0x10024d17
and dword [ebp - 0xd18], 0
jmp 0x10024d21
mov dword [ebp - 0xd18], 1
mov eax, dword [ebp - 0x50]
cmp dword [ebp - 0xd18], eax
jge 0x10024d38
mov dword [ebp - 0xd20], 1
jmp 0x10024d3f
and dword [ebp - 0xd20], 0
mov eax, dword [ebp - 0xd20]
mov dword [ebp - 0x1070], eax
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x1230]
call fcn.1000da34
jmp 0x10024b5f
mov eax, dword [ebp - 0x5c]
mov eax, dword [ebp + eax*4 - 0x608]
mov dword [ebp - 0x88], eax
mov eax, dword [ebp - 0x88]
mov dword [ebp - 0x47c], eax
jmp 0x10024b2e
mov eax, 0x7018
test eax, eax
je 0x10025023
mov eax, dword [ebp - 0x50]
cmp dword [ebp - 0x88], eax
jne 0x10024da4
mov dword [ebp - 0xd28], 1
jmp 0x10024dab
and dword [ebp - 0xd28], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x608]
cmp dword [ebp - 0x88], eax
jg 0x10024dcc
mov dword [ebp - 0xd30], 1
jmp 0x10024dd3
and dword [ebp - 0xd30], 0
mov eax, dword [ebp - 0xd28]
imul eax, dword [ebp - 0xd30]
push 4
pop ecx
shl ecx, 1
cmp eax, dword [ebp + ecx - 0x1240]
jle 0x10024dfa
mov dword [ebp - 0xd38], 1
jmp 0x10024e01
and dword [ebp - 0xd38], 0
mov eax, dword [ebp - 0x50]
cmp dword [ebp - 0xd38], eax
jge 0x10024e28
cmp dword [ebp - 0x88], 0
je 0x10024e28
push 5
pop eax
test eax, eax
je 0x10024e28
mov dword [ebp - 0xd40], 1
jmp 0x10024e2f
and dword [ebp - 0xd40], 0
mov eax, dword [ebp - 0x88]
cmp dword [ebp - 0xd40], eax
jne 0x10024e49
mov dword [ebp - 0xd48], 1
jmp 0x10024e50
and dword [ebp - 0xd48], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0xd48]
mov dword [ebp + eax - 0x13b8], ecx
mov eax, dword [ebp - 0x50]
mov dword [ebp - 0x1714], eax
cmp dword [ebp - 0x5c], 0xc30
jne 0x10024e81
mov dword [ebp - 0xd50], 1
jmp 0x10024e88
and dword [ebp - 0xd50], 0
mov eax, dword [ebp - 0x5c]
cmp dword [ebp - 0xd50], eax
jl 0x10024e9f
mov dword [ebp - 0xd58], 1
jmp 0x10024ea6
and dword [ebp - 0xd58], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x608]
cmp dword [ebp - 0xd58], eax
jge 0x10024ec7
mov dword [ebp - 0x1078], 1
jmp 0x10024ece
and dword [ebp - 0x1078], 0
mov eax, dword [ebp - 0x5c]
mov dword [ebp - 0x1934], eax
mov eax, dword [ebp - 0x50]
mov dword [ebp - 0x171c], eax
mov eax, dword [ebp - 0x88]
cmp dword [ebp - 0x50], eax
je 0x10024ef7
mov dword [ebp - 0xd60], 1
jmp 0x10024efe
and dword [ebp - 0xd60], 0
mov eax, dword [ebp - 0x5c]
add eax, dword [ebp - 0xd60]
cmp eax, dword [ebp - 0x50]
jge 0x10024f18
mov dword [ebp - 0x1080], 1
jmp 0x10024f1f
and dword [ebp - 0x1080], 0
mov eax, dword [ebp - 0x4d4]
mov dword [ebp - 0x1834], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x13b8], 0
jne 0x10024f42
push 0xfffffffffffffffa
pop eax
test eax, eax
je 0x10024f67
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x1240], 0
je 0x10024f67
mov eax, 0x6e0e
test eax, eax
je 0x10024f67
mov dword [ebp - 0xd68], 1
jmp 0x10024f6e
and dword [ebp - 0xd68], 0
cmp dword [ebp - 0xd68], 0xd197a07
jl 0x10024f86
mov dword [ebp - 0x1088], 1
jmp 0x10024f8d
and dword [ebp - 0x1088], 0
mov eax, dword [ebp - 0x50]
mov dword [ebp - 0x1724], eax
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x608], 0x2faf
jle 0x10024fb5
mov dword [ebp - 0xd70], 1
jmp 0x10024fbc
and dword [ebp - 0xd70], 0
cmp dword [ebp - 0xd70], 0xfffffffa
jg 0x10024fd1
mov dword [ebp - 0x1090], 1
jmp 0x10024fd8
and dword [ebp - 0x1090], 0
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x1240]
mov dword [ebp - 0x1994], eax
mov eax, 0xc5dc
test eax, eax
jne 0x10024fff
mov dword [ebp - 0xd78], 1
jmp 0x10025006
and dword [ebp - 0xd78], 0
mov eax, dword [ebp - 0xd78]
sub eax, dword [ebp - 0x4d4]
cmp eax, dword [ebp - 0x50]
jl 0x10025023
mov dword [ebp - 0xdc8], 1
jmp 0x1002502a
and dword [ebp - 0xdc8], 0
mov eax, dword [ebp - 0x88]
mov dword [ebp - 0x47c], eax
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x1240]
imul eax, dword [ebp - 0xdc8]
cmp dword [ebp - 0x47c], eax
jg 0x1002505e
mov dword [ebp - 0xdd0], 1
jmp 0x10025065
and dword [ebp - 0xdd0], 0
mov eax, dword [ebp - 0x50]
cmp dword [ebp - 0xdd0], eax
jle 0x10025085
cmp dword [ebp - 0x47c], 0
je 0x10025085
mov dword [ebp - 0xdd8], 1
jmp 0x1002508c
and dword [ebp - 0xdd8], 0
mov eax, dword [ebp - 0x88]
add eax, dword [ebp - 0xdd8]
jne 0x100250aa
push 8
pop eax
test eax, eax
jne 0x100250aa
and dword [ebp - 0xde0], 0
jmp 0x100250b4
mov dword [ebp - 0xde0], 1
cmp dword [ebp - 0xde0], 0x47a5
je 0x100250cc
mov dword [ebp - 0xde8], 1
jmp 0x100250d3
and dword [ebp - 0xde8], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x1240]
imul eax, dword [ebp - 0xde8]
mov dword [ebp - 0x5c], eax
jmp 0x10024a99
mov dword [ebp - 0x194], 0xfffffff6
mov dword [ebp - 0x32c], 0xaf9d66de
mov dword [ebp - 0x194], 0xffffffe6
jmp 0x1002511c
mov eax, dword [ebp - 0x194]
inc eax
mov dword [ebp - 0x194], eax
cmp dword [ebp - 0x194], 0xfffffffe
jge 0x1002540d
push 1
lea ecx, [ebp - 0xe08]
call fcn.1000d911
mov dword [ebp - 4], 1
mov dword [ebp - 0x10b0], 0xfffffff7
mov dword [ebp - 0xec], 0
jmp 0x10025160
mov eax, dword [ebp - 0xec]
inc eax
mov dword [ebp - 0xec], eax
cmp dword [ebp - 0xec], 4
jge 0x1002517c
mov eax, dword [ebp - 0xec]
mov dword [ebp + eax*4 - 0x1974], 0xd95e
jmp 0x10025153
mov dword [ebp - 0xec], 0
jmp 0x10025195
mov eax, dword [ebp - 0xec]
inc eax
mov dword [ebp - 0xec], eax
cmp dword [ebp - 0xec], 1
jge 0x100251b4
push dword [ebp - 0xec]
lea ecx, [ebp - 0xe08]
call fcn.1000da50
or dword [eax], 0xffffffff
jmp 0x10025188
push 0
lea ecx, [ebp - 0xe08]
call fcn.1000da50
and dword [eax], 0
jmp 0x100251ea
push 0
lea ecx, [ebp - 0xe08]
call fcn.1000da50
mov dword [ebp - 0xdf0], eax
mov eax, dword [ebp - 0xdf0]
mov eax, dword [eax]
inc eax
mov ecx, dword [ebp - 0xdf0]
mov dword [ecx], eax
push 0
lea ecx, [ebp - 0xe08]
call fcn.1000da50
cmp dword [eax], 3
jg 0x100253e4
mov dword [ebp - 0xf4], 2
mov dword [ebp - 0xa50], 0xa6d0811
mov dword [ebp - 0xf4], 3
jmp 0x1002522d
mov eax, dword [ebp - 0xf4]
dec eax
mov dword [ebp - 0xf4], eax
cmp dword [ebp - 0xf4], 0
jl 0x100253df
mov dword [ebp - 0x6a0], 0xd0e834ab
mov dword [ebp - 0x10a8], 0xb69c93e3
mov eax, dword [ebp - 0xf4]
mov eax, dword [ebp + eax*4 - 0x1974]
mov dword [ebp - 0xc14], eax
mov eax, dword [ebp - 0xf4]
mov ecx, dword [ebp - 0xc14]
mov dword [ebp + eax*4 - 0x1974], ecx
cmp dword [ebp - 0xc14], 0
je 0x10025370
cmp dword [ebp - 0x194], 0x5bc42206
jle 0x10025299
mov dword [ebp - 0xcd8], 1
jmp 0x100252a0
and dword [ebp - 0xcd8], 0
push 0
lea ecx, [ebp - 0xe08]
call fcn.1000da50
mov eax, dword [eax]
sub eax, dword [ebp - 0xcd8]
sub eax, dword [ebp - 0x194]
sub eax, 0xfff9
mov ecx, dword [ebp - 0xf4]
cmp eax, dword [ebp + ecx*4 - 0x1974]
jle 0x100252db
mov dword [ebp - 0x688], 1
jmp 0x100252e2
and dword [ebp - 0x688], 0
cmp dword [ebp - 0x688], 0x3411
jge 0x100252fa
mov dword [ebp - 0xa78], 1
jmp 0x10025301
and dword [ebp - 0xa78], 0
mov eax, dword [ebp - 0x194]
cmp dword [ebp - 0xa78], eax
jle 0x1002531b
mov dword [ebp - 0x690], 1
jmp 0x10025322
and dword [ebp - 0x690], 0
mov eax, dword [ebp - 0x690]
mov dword [ebp - 0xa50], eax
mov eax, dword [ebp - 0xf4]
cmp dword [ebp - 0xa50], eax
jl 0x10025348
mov dword [ebp - 0x1098], 1
jmp 0x1002534f
and dword [ebp - 0x1098], 0
mov eax, dword [ebp - 0x32c]
mov dword [ebp - 0x172c], eax
mov eax, 0x3388
test eax, eax
je 0x10025370
mov dword [ebp - 0x698], 1
jmp 0x10025377
and dword [ebp - 0x698], 0
cmp dword [ebp - 0x698], 1
jne 0x1002538c
mov dword [ebp - 0xa54], 1
jmp 0x10025393
and dword [ebp - 0xa54], 0
cmp dword [ebp - 0xa54], 0xffff
jb 0x100253a8
cmp dword [ebp - 0x32c], 0
je 0x100253ce
mov dword [ebp - 0x10a0], 0x5b5cf0ad
mov eax, dword [ebp - 0x10a0]
mov dword [ebp - 0x6a0], eax
mov eax, dword [ebp - 0x6a0]
neg eax
mov dword [ebp - 0x10a8], eax
jmp 0x100253da
mov eax, dword [ebp - 0x32c]
mov dword [ebp - 0x10b0], eax
jmp 0x10025220
jmp 0x100251c6
push 0
lea ecx, [ebp - 0xe08]
call fcn.1000da50
mov eax, dword [eax]
mov dword [ebp - 0x32c], eax
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xe08]
call fcn.1000da34
jmp 0x1002510f
mov byte [ebp - 0x184], 0
lea eax, [ebp - 0x184]
push eax
push 0x3a94
push 0x2be5
push 0
call fcn.100345c1
add esp, 0x10
mov dword [ebp - 0x4c], 0x7e2799ac
mov dword [ebp - 0x224], 0xfffffff8
push 3
lea ecx, [ebp - 0x136c]
call fcn.1000d911
mov dword [ebp - 4], 2
mov dword [ebp - 0x6b0], 0
push 1
lea ecx, [ebp - 0x156c]
call fcn.1000d911
mov byte [ebp - 4], 3
mov dword [ebp - 0x98], 0
jmp 0x10025488
mov eax, dword [ebp - 0x98]
inc eax
mov dword [ebp - 0x98], eax
cmp dword [ebp - 0x98], 3
jge 0x100254aa
push dword [ebp - 0x98]
lea ecx, [ebp - 0x136c]
call fcn.1000da50
mov dword [eax], 0xfffffffd
jmp 0x1002547b
mov dword [ebp - 0x98], 0
jmp 0x100254c3
mov eax, dword [ebp - 0x98]
inc eax
mov dword [ebp - 0x98], eax
cmp dword [ebp - 0x98], 3
jge 0x100254df
mov eax, dword [ebp - 0x98]
mov dword [ebp + eax*4 - 0x1848], 0x4cb8
jmp 0x100254b6
lea eax, [ebp - 0x156c]
push eax
push 0x48ce
lea eax, [ebp - 0x98]
push eax
push 0
push 0
call fcn.10020a14
add esp, 0x14
mov byte [ebp - 0x111], 0
movzx eax, byte [ebp - 0x111]
test eax, eax
je 0x10025524
push 0
push 0x75d6
push 0x1467
call fcn.1003391c
add esp, 0xc
or eax, 0xffffffff
je 0x10025543
mov eax, dword [ebp - 0x224]
cmp dword [ebp - 0x224], eax
je 0x10025543
mov dword [ebp - 0x6a8], 1
jmp 0x1002554a
and dword [ebp - 0x6a8], 0
mov eax, dword [ebp - 0x224]
mov dword [ebp - 0xdd4], eax
push 1
lea ecx, [ebp - 0x136c]
call fcn.1000da50
mov ecx, dword [ebp - 0xdd4]
mov dword [eax], ecx
mov eax, dword [ebp - 0xdd4]
cmp eax, dword [ebp - 0x6a8]
jle 0x10025585
mov dword [ebp - 0x10b8], 1
jmp 0x1002558c
and dword [ebp - 0x10b8], 0
mov eax, dword [ebp - 0x224]
mov dword [ebp - 0x183c], eax
mov esi, dword [ebp - 0x224]
push 1
lea ecx, [ebp - 0x136c]
call fcn.1000da50
mov eax, dword [eax]
sub eax, dword [ebp - 0x224]
sub esi, eax
jne 0x100255d0
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x1848], 0
jne 0x100255d0
and dword [ebp - 0xa5c], 0
jmp 0x100255da
mov dword [ebp - 0xa5c], 1
mov eax, dword [ebp - 0xa5c]
mov dword [ebp - 0x6b0], eax
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x1848]
cmp dword [ebp - 0x6b0], eax
jg 0x10025606
mov dword [ebp - 0xc1c], 1
jmp 0x1002560d
and dword [ebp - 0xc1c], 0
imul esi, dword [ebp - 0xc1c], 0xe80d
push 0
lea ecx, [ebp - 0x156c]
call fcn.1000da50
mov dword [eax], esi
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x156c]
call fcn.1000da34
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x136c]
call fcn.1000da34
mov dword [ebp - 0x84], 1
mov dword [ebp - 0x20], 0x659d568d
push 1
lea ecx, [ebp - 0x1868]
call fcn.1000d911
mov dword [ebp - 4], 4
mov dword [ebp - 0x1734], 0x2377d64
mov dword [ebp - 0x193c], 0x9eb818f8
mov dword [ebp - 0x173c], 1
mov dword [ebp - 0x184c], 4
mov dword [ebp - 0x1744], 0xedda
mov dword [ebp - 0x19d4], 0xd786ff52
mov dword [ebp - 0x174c], 0
mov dword [ebp - 0x185c], 0x60a2fc53
mov dword [ebp - 0x1754], 0xfffffff9
mov dword [ebp - 0x1944], 1
mov dword [ebp - 0x580], 0xfffffffe
push 3
lea ecx, [ebp - 0x150c]
call fcn.1000d911
mov byte [ebp - 4], 5
mov dword [ebp - 0x3c], 0
jmp 0x100256f8
mov eax, dword [ebp - 0x3c]
inc eax
mov dword [ebp - 0x3c], eax
cmp dword [ebp - 0x3c], 1
jge 0x10025711
push dword [ebp - 0x3c]
lea ecx, [ebp - 0x1868]
call fcn.1000da50
or dword [eax], 0xffffffff
jmp 0x100256f1
mov dword [ebp - 0x3c], 0
jmp 0x10025721
mov eax, dword [ebp - 0x3c]
inc eax
mov dword [ebp - 0x3c], eax
cmp dword [ebp - 0x3c], 2
jge 0x10025737
mov eax, dword [ebp - 0x3c]
mov dword [ebp + eax*4 - 0x1a60], 7
jmp 0x1002571a
mov dword [ebp - 0x3c], 0
jmp 0x10025747
mov eax, dword [ebp - 0x3c]
inc eax
mov dword [ebp - 0x3c], eax
cmp dword [ebp - 0x3c], 3
jge 0x10025763
push dword [ebp - 0x3c]
lea ecx, [ebp - 0x150c]
call fcn.1000da50
mov dword [eax], 0xe92f9e8
jmp 0x10025740
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x175c], eax
cmp dword [ebp - 0x20], 0x7563ffaf
jle 0x10025781
mov dword [ebp - 0x10c0], 1
jmp 0x10025788
and dword [ebp - 0x10c0], 0
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x186c], eax
mov eax, dword [ebp - 0x20]
cmp dword [ebp - 0x20], eax
je 0x100257a5
mov dword [ebp - 0x6b8], 1
jmp 0x100257ac
and dword [ebp - 0x6b8], 0
cmp dword [ebp - 0x6b8], 0x7bb7ab61
jge 0x100257c4
mov dword [ebp - 0xa64], 1
jmp 0x100257cb
and dword [ebp - 0xa64], 0
mov eax, dword [ebp - 0x20]
cmp dword [ebp - 0xa64], eax
jle 0x100257e2
mov dword [ebp - 0x6c0], 1
jmp 0x100257e9
and dword [ebp - 0x6c0], 0
mov eax, dword [ebp - 0x20]
cmp eax, dword [ebp - 0x6c0]
jl 0x10025800
mov dword [ebp - 0xcfc], 1
jmp 0x10025807
and dword [ebp - 0xcfc], 0
cmp dword [ebp - 0xcfc], 0xe3e76316
jne 0x10025817
cmp dword [ebp - 0x20], 0
mov eax, dword [ebp - 0x20]
add eax, dword [ebp - 0x20]
je 0x10025859
cmp dword [ebp - 0x20], 0
je 0x10025859
mov dword [ebp - 0x20], 0
jmp 0x10025835
mov eax, dword [ebp - 0x20]
inc eax
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 0
jg 0x10025854
mov byte [ebp - 0x183], 0
lea eax, [ebp - 0x183]
push eax
push 0
call fcn.1003ee13
pop ecx
pop ecx
jmp 0x1002582e
jmp 0x10025e54
mov dword [ebp - 0x6c8], 0x62a4b15
mov dword [ebp - 0x1764], 0x9a2a67f6
mov dword [ebp - 0x199c], 0xfffffff9
mov dword [ebp - 0x176c], 0xa53fde75
mov dword [ebp - 0x1154], 0xfffffffc
mov dword [ebp - 0x187c], 1
mov dword [ebp - 0x1774], 6
mov dword [ebp - 0x194c], 0xe3b00b72
mov dword [ebp - 0x10c8], 0x1abe
cmp dword [ebp - 0x10c8], 0x1182
jge 0x10025cde
lea eax, [ebp - 0x620]
push eax
lea eax, [ebp - 0x648]
push eax
lea eax, [ebp - 0xd84]
push eax
lea eax, [ebp - 0x628]
push eax
lea eax, [ebp - 0x1180]
push eax
push 0x10007c58
call fcn.10051a9b
add esp, 0x10
movsd xmm0, qword [ebp - 0x620]
movsd qword [esp], xmm0
push ecx
push ecx
movsd xmm0, qword [ebp - 0x648]
movsd qword [esp], xmm0
push ecx
push ecx
movsd xmm0, qword [ebp - 0xd84]
movsd qword [esp], xmm0
push ecx
push ecx
movsd xmm0, qword [ebp - 0x628]
movsd qword [esp], xmm0
call fcn.10024868
add esp, 0x20
fstp qword [ebp - 0x13e8]
movsd xmm0, qword [ebp - 0x13e8]
addsd xmm0, qword [ebp - 0x1180]
mulsd xmm0, qword [0x10007e48]
movsd qword [ebp - 0x360], xmm0
movsd xmm0, qword [ebp - 0x13e8]
comisd xmm0, xmmword [ebp - 0x1180]
jb 0x100259c2
movsd xmm0, qword [ebp - 0x628]
movsd qword [ebp - 0x638], xmm0
movsd xmm0, qword [ebp - 0x638]
movsd qword [ebp - 0xe28], xmm0
movsd xmm0, qword [ebp - 0xd84]
movsd qword [ebp - 0xd90], xmm0
movsd xmm0, qword [ebp - 0xd90]
movsd qword [ebp - 0xe48], xmm0
movsd xmm0, qword [ebp - 0x1180]
movsd qword [ebp - 0x360], xmm0
jmp 0x10025bc2
movsd xmm0, qword [ebp - 0x628]
ucomisd xmm0, qword [ebp - 0x648]
lahf
test ah, 0x44
jnp 0x10025b72
movsd xmm0, qword [ebp - 0x620]
subsd xmm0, qword [ebp - 0xd84]
movsd xmm1, qword [ebp - 0x648]
subsd xmm1, qword [ebp - 0x628]
divsd xmm0, xmm1
movsd qword [ebp - 0x304], xmm0
movsd xmm0, qword [ebp - 0x304]
mulsd xmm0, qword [ebp - 0x304]
addsd xmm0, qword [0x10007e50]
push ecx
push ecx
movsd qword [esp], xmm0
call fcn.10052854
pop ecx
pop ecx
fstp qword [ebp - 0x15ec]
movsd xmm0, qword [ebp - 0x360]
divsd xmm0, qword [ebp - 0x15ec]
addsd xmm0, qword [ebp - 0x648]
movsd qword [ebp - 0xe28], xmm0
movsd xmm0, qword [ebp - 0x304]
mulsd xmm0, qword [ebp - 0x304]
addsd xmm0, qword [0x10007e50]
push ecx
push ecx
movsd qword [esp], xmm0
call fcn.10052854
pop ecx
pop ecx
fstp qword [ebp - 0x15f8]
movsd xmm0, qword [ebp - 0x360]
divsd xmm0, qword [ebp - 0x15f8]
movsd xmm1, qword [ebp - 0x648]
subsd xmm1, xmm0
movsd qword [ebp - 0x638], xmm1
movsd xmm0, qword [ebp - 0x304]
mulsd xmm0, qword [ebp - 0x360]
movsd xmm1, qword [ebp - 0x304]
mulsd xmm1, qword [ebp - 0x304]
addsd xmm1, qword [0x10007e50]
push ecx
push ecx
movsd qword [esp], xmm1
movsd qword [ebp - 0x15d4], xmm0
call fcn.10052854
pop ecx
pop ecx
fstp qword [ebp - 0x160c]
movsd xmm0, qword [ebp - 0x15d4]
divsd xmm0, qword [ebp - 0x160c]
addsd xmm0, qword [ebp - 0x620]
movsd qword [ebp - 0xe48], xmm0
movsd xmm0, qword [ebp - 0x304]
mulsd xmm0, qword [ebp - 0x360]
movsd xmm1, qword [ebp - 0x304]
mulsd xmm1, qword [ebp - 0x304]
addsd xmm1, qword [0x10007e50]
push ecx
push ecx
movsd qword [esp], xmm1
movsd qword [ebp - 0x1618], xmm0
call fcn.10052854
pop ecx
pop ecx
fstp qword [ebp - 0x1624]
movsd xmm0, qword [ebp - 0x1618]
divsd xmm0, qword [ebp - 0x1624]
movsd xmm1, qword [ebp - 0x620]
subsd xmm1, xmm0
movsd qword [ebp - 0xd90], xmm1
jmp 0x10025bc2
movsd xmm0, qword [ebp - 0x648]
movsd qword [ebp - 0x638], xmm0
movsd xmm0, qword [ebp - 0x638]
movsd qword [ebp - 0xe28], xmm0
movsd xmm0, qword [ebp - 0x620]
subsd xmm0, qword [ebp - 0x360]
movsd qword [ebp - 0xe48], xmm0
movsd xmm0, qword [ebp - 0x620]
addsd xmm0, qword [ebp - 0x360]
movsd qword [ebp - 0xd90], xmm0
push ecx
push ecx
movsd xmm0, qword [ebp - 0xe48]
movsd qword [esp], xmm0
push ecx
push ecx
movsd xmm0, qword [ebp - 0xe28]
movsd qword [esp], xmm0
push ecx
push ecx
movsd xmm0, qword [ebp - 0xd84]
movsd qword [esp], xmm0
push ecx
push ecx
movsd xmm0, qword [ebp - 0x628]
movsd qword [esp], xmm0
call fcn.10024868
add esp, 0x20
fstp qword [ebp - 0x163c]
push ecx
push ecx
movsd xmm0, qword [ebp - 0xd90]
movsd qword [esp], xmm0
push ecx
push ecx
movsd xmm0, qword [ebp - 0x638]
movsd qword [esp], xmm0
push ecx
push ecx
movsd xmm0, qword [ebp - 0xd84]
movsd qword [esp], xmm0
push ecx
push ecx
movsd xmm0, qword [ebp - 0x628]
movsd qword [esp], xmm0
call fcn.10024868
add esp, 0x20
fstp qword [ebp - 0x1630]
movsd xmm0, qword [ebp - 0x1630]
comisd xmm0, xmmword [ebp - 0x163c]
jbe 0x10025ca4
push ecx
push ecx
movsd xmm0, qword [ebp - 0x360]
movsd qword [esp], xmm0
push ecx
push ecx
movsd xmm0, qword [ebp - 0xe48]
movsd qword [esp], xmm0
push ecx
push ecx
movsd xmm0, qword [ebp - 0xe28]
movsd qword [esp], xmm0
push 0x10007c6c
call fcn.1005218c
add esp, 0x1c
jmp 0x10025cde
push ecx
push ecx
movsd xmm0, qword [ebp - 0x360]
movsd qword [esp], xmm0
push ecx
push ecx
movsd xmm0, qword [ebp - 0xd90]
movsd qword [esp], xmm0
push ecx
push ecx
movsd xmm0, qword [ebp - 0x638]
movsd qword [esp], xmm0
push 0x10007c6c
call fcn.1005218c
add esp, 0x1c
mov dword [ebp - 0x1144], 0x9b4ccc41
push 1
lea ecx, [ebp - 0x1858]
call fcn.1000d911
mov byte [ebp - 4], 6
mov dword [ebp - 0x115c], 0xc8c580b0
mov dword [ebp - 0x588], 0xffff
mov dword [ebp - 0x484], 0
jmp 0x10025d26
mov eax, dword [ebp - 0x484]
inc eax
mov dword [ebp - 0x484], eax
cmp dword [ebp - 0x484], 1
jge 0x10025d48
push dword [ebp - 0x484]
lea ecx, [ebp - 0x1858]
call fcn.1000da50
mov dword [eax], 0x2e2cc7bc
jmp 0x10025d19
cmp dword [ebp - 0x6c8], 0
je 0x10025d5d
mov dword [ebp - 0x113c], 1
jmp 0x10025d64
and dword [ebp - 0x113c], 0
mov eax, dword [ebp - 0x580]
dec eax
mov dword [ebp - 0x580], eax
jne 0x10025dc1
mov eax, dword [ebp - 0x6c8]
cmp dword [ebp - 0x1144], eax
jge 0x10025d8d
mov dword [ebp - 0xa6c], 1
jmp 0x10025d94
and dword [ebp - 0xa6c], 0
mov eax, dword [ebp - 0xa6c]
sub eax, dword [ebp - 0x588]
mov ecx, dword [ebp - 0x588]
dec ecx
mov dword [ebp - 0x588], ecx
test eax, eax
jne 0x10025dc1
push 0xfffffffffffffffd
pop eax
test eax, eax
jne 0x10025dc1
and dword [ebp - 0x6d0], 0
jmp 0x10025dcb
mov dword [ebp - 0x6d0], 1
push 1
lea ecx, [ebp - 0x150c]
call fcn.1000da50
mov ecx, dword [ebp - 0x6d0]
cmp ecx, dword [eax]
jge 0x10025dee
mov dword [ebp - 0xc24], 1
jmp 0x10025df5
and dword [ebp - 0xc24], 0
cmp dword [ebp - 0xc24], 1
jl 0x10025e0a
mov dword [ebp - 0x114c], 1
jmp 0x10025e11
and dword [ebp - 0x114c], 0
mov eax, dword [ebp - 0x1154]
mov dword [ebp - 0x177c], eax
xor eax, eax
cmp eax, 0x66a3
jb 0x10025e32
mov dword [ebp - 0x6d8], 1
jmp 0x10025e39
and dword [ebp - 0x6d8], 0
mov eax, dword [ebp - 0x6d8]
mov dword [ebp - 0x115c], eax
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x1858]
call fcn.1000da34
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x150c]
call fcn.1000da34
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x1868]
call fcn.1000da34
mov dword [ebp - 0x3e8], 0x97312b94
mov dword [ebp - 0x24], 0x99c
push 1
lea ecx, [ebp - 0x1354]
call fcn.1000d911
mov dword [ebp - 4], 7
mov dword [ebp - 0x6e0], 0x50f82bae
mov dword [ebp - 0x1c4], 0x9edca8fe
mov dword [ebp - 0x1174], 0xc2f5a260
push 0xdec
lea eax, [ebp - 0x188c]
push eax
push 1
push 0x6506
push 0
lea eax, [ebp - 0x1354]
push eax
call fcn.1001f9ae
add esp, 0x18
mov eax, dword [ebp - 0x24]
mov dword [ebp - 0x1784], eax
mov eax, dword [ebp - 0x24]
mov dword [ebp - 0xa74], eax
push 0
lea ecx, [ebp - 0x1354]
call fcn.1000da50
mov ecx, dword [ebp - 0xa74]
mov dword [eax], ecx
mov eax, dword [ebp - 0xa74]
mov dword [ebp - 0x6e0], eax
mov eax, dword [ebp - 0x6e0]
mov dword [ebp - 0x1c4], eax
mov eax, dword [ebp - 0x24]
inc eax
cmp eax, 0xd5de1fc6
ja 0x10025f2f
mov dword [ebp - 0x1164], 1
jmp 0x10025f36
and dword [ebp - 0x1164], 0
mov eax, dword [ebp - 0x24]
mov dword [ebp - 0x19bc], eax
mov eax, dword [ebp - 0x24]
mov dword [ebp - 0x178c], eax
mov eax, dword [ebp - 0x1c4]
add eax, dword [ebp - 0x24]
cmp eax, dword [ebp - 0x24]
jg 0x10025f62
mov dword [ebp - 0xd6c], 1
jmp 0x10025f69
and dword [ebp - 0xd6c], 0
mov eax, dword [ebp - 0x24]
add eax, dword [ebp - 0xd6c]
cmp dword [ebp - 0x24], eax
jle 0x10025f83
mov dword [ebp - 0x6e8], 1
jmp 0x10025f8a
and dword [ebp - 0x6e8], 0
mov eax, dword [ebp - 0x6e8]
sub eax, dword [ebp - 0x24]
cmp eax, dword [ebp - 0x24]
jg 0x10025fa4
mov dword [ebp - 0xa7c], 1
jmp 0x10025fab
and dword [ebp - 0xa7c], 0
mov eax, dword [ebp - 0x24]
add eax, dword [ebp - 0xa7c]
cmp eax, dword [ebp - 0x24]
jl 0x10025fc5
mov dword [ebp - 0x6f0], 1
jmp 0x10025fcc
and dword [ebp - 0x6f0], 0
mov eax, dword [ebp - 0x24]
cmp dword [ebp - 0x6f0], eax
jge 0x10025fe3
mov dword [ebp - 0xc2c], 1
jmp 0x10025fea
and dword [ebp - 0xc2c], 0
mov eax, dword [ebp - 0x24]
imul eax, dword [ebp - 0xc2c]
test eax, eax
je 0x10026154
mov dword [ebp - 0x1c4], 0
jmp 0x10026015
mov eax, dword [ebp - 0x1c4]
dec eax
mov dword [ebp - 0x1c4], eax
cmp dword [ebp - 0x1c4], 0
jl 0x10026152
mov byte [ebp - 0x149], 0
mov dword [ebp - 0x116c], 0x1872
cmp dword [ebp - 0x116c], 0x9f0
jge 0x1002613a
lea eax, [ebp - 0x6f8]
push eax
mov ecx, 0x1065d1f0
call fcn.1000d289
and dword [ebp - 0x220], 0
jmp 0x1002606a
mov eax, dword [ebp - 0x220]
inc eax
mov dword [ebp - 0x220], eax
mov eax, dword [ebp - 0x220]
cmp eax, dword [ebp - 0x6f8]
jge 0x100260ad
mov eax, dword [ebp - 0x220]
lea eax, [ebp + eax*4 - 0x1d80]
push eax
mov ecx, 0x1065d1f0
call fcn.1000d289
mov eax, dword [ebp - 0x220]
mov eax, dword [ebp + eax*4 - 0x1d80]
dec eax
mov ecx, dword [ebp - 0x220]
mov dword [ebp + ecx*4 - 0x1d80], eax
jmp 0x1002605d
and dword [ebp - 0x240], 0
jmp 0x100260c3
mov eax, dword [ebp - 0x240]
inc eax
mov dword [ebp - 0x240], eax
mov eax, dword [ebp - 0x240]
cmp eax, dword [ebp - 0x6f8]
jge 0x1002611f
mov eax, dword [ebp - 0x240]
mov eax, dword [ebp + eax*4 - 0x1d80]
mov eax, dword [ebp + eax*4 - 0x1d80]
mov eax, dword [ebp + eax*4 - 0x1d80]
mov ecx, dword [ebp - 0x240]
mov ecx, dword [ebp + ecx*4 - 0x1d80]
cmp ecx, dword [ebp + eax*4 - 0x1d80]
jne 0x1002611d
push fcn.10012040
mov edx, 0x100078c4
mov ecx, 0x1065d138
call fcn.100120a1
mov ecx, eax
call fcn.1000d58d
jmp 0x100260b6
push fcn.10012040
mov edx, 0x100078c8
mov ecx, 0x1065d138
call fcn.100120a1
mov ecx, eax
call fcn.1000d58d
movzx eax, byte [ebp - 0x149]
test eax, eax
je 0x1002614d
push 0
call fcn.1003ed00
pop ecx
jmp 0x10026008
jmp 0x10026181
mov byte [ebp - 0x18d], 0
movzx eax, byte [ebp - 0x18d]
test eax, eax
je 0x10026181
push 0
push 0x6626
push 0x3c73
push 0x3a89
push 0
call fcn.10038b49
add esp, 0x14
mov esi, dword [ebp - 0x1174]
push 0
lea ecx, [ebp - 0x1354]
call fcn.1000da50
mov dword [eax], esi
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x1354]
call fcn.1000da34
mov dword [ebp - 0x334], 0
jmp 0x100261be
mov eax, dword [ebp - 0x334]
inc eax
mov dword [ebp - 0x334], eax
cmp dword [ebp - 0x334], 2
jge 0x100261da
mov eax, dword [ebp - 0x334]
mov dword [ebp + eax*4 - 0x1398], 0xd9d76c13
jmp 0x100261b1
mov dword [ebp - 0x58], 9
mov dword [ebp - 0x1cc], 0xffffffff
mov dword [ebp - 0x58], 0
jmp 0x100261fb
mov eax, dword [ebp - 0x58]
dec eax
mov dword [ebp - 0x58], eax
cmp dword [ebp - 0x58], 0xfffffffe
jge 0x100264d4
mov dword [ebp - 0x10c], 0xb7e80d68
mov dword [ebp - 0x48c], 0xc4779d44
mov dword [ebp - 0x590], 0x997736e
mov eax, dword [ebp - 0x58]
mov dword [ebp - 0x1cc], eax
mov eax, dword [ebp - 0x1cc]
add eax, 0x7084bc9c
je 0x1002637e
mov eax, dword [ebp - 0x58]
imul eax, dword [ebp - 0x58]
cmp eax, dword [ebp - 0x10c]
jl 0x1002625e
cmp dword [ebp - 0x10c], 0
jne 0x1002625e
and dword [ebp - 0xa84], 0
jmp 0x10026268
mov dword [ebp - 0xa84], 1
mov eax, dword [ebp - 0xa84]
mov dword [ebp - 0x48c], eax
mov eax, dword [ebp - 0x58]
cmp dword [ebp - 0x48c], eax
jg 0x1002628b
mov dword [ebp - 0x700], 1
jmp 0x10026292
and dword [ebp - 0x700], 0
mov eax, dword [ebp - 0x700]
sub eax, dword [ebp - 0x10c]
cmp eax, dword [ebp - 0x10c]
jne 0x100262b2
mov dword [ebp - 0xd04], 1
jmp 0x100262b9
and dword [ebp - 0xd04], 0
mov eax, dword [ebp - 0x58]
cmp dword [ebp - 0xd04], eax
jge 0x100262d0
mov dword [ebp - 0x708], 1
jmp 0x100262d7
and dword [ebp - 0x708], 0
mov eax, dword [ebp - 0x708]
sub eax, dword [ebp - 0x58]
cmp eax, dword [ebp - 0x10c]
jle 0x100262f4
mov dword [ebp - 0xa8c], 1
jmp 0x100262fb
and dword [ebp - 0xa8c], 0
mov eax, dword [ebp - 0x10c]
cmp dword [ebp - 0xa8c], eax
jne 0x10026315
mov dword [ebp - 0x11b8], 1
jmp 0x1002631c
and dword [ebp - 0x11b8], 0
mov eax, dword [ebp - 0x10c]
mov dword [ebp - 0x189c], eax
mov eax, dword [ebp - 0x10c]
mov dword [ebp - 0x1794], eax
cmp dword [ebp - 0x1cc], 0x7c295a52
jl 0x1002634c
mov dword [ebp - 0x11c0], 1
jmp 0x10026353
and dword [ebp - 0x11c0], 0
mov eax, dword [ebp - 0x58]
mov dword [ebp - 0x1954], eax
mov eax, dword [ebp - 0x1cc]
sub eax, 0xb0ce
je 0x1002637e
cmp dword [ebp - 0x48c], 0
je 0x1002637e
mov dword [ebp - 0x710], 1
jmp 0x10026385
and dword [ebp - 0x710], 0
imul eax, dword [ebp - 0x710], 0x137d
add eax, dword [ebp - 0x58]
je 0x100263a9
mov eax, 0x48e0
test eax, eax
je 0x100263a9
mov dword [ebp - 0xc34], 1
jmp 0x100263b0
and dword [ebp - 0xc34], 0
mov eax, dword [ebp - 0x590]
cmp dword [ebp - 0xc34], eax
jle 0x100263ca
mov dword [ebp - 0x718], 1
jmp 0x100263d1
and dword [ebp - 0x718], 0
mov eax, dword [ebp - 0x718]
sub eax, dword [ebp - 0x590]
je 0x100263f4
mov eax, 0x5618d7c
test eax, eax
je 0x100263f4
mov dword [ebp - 0xa94], 1
jmp 0x100263fb
and dword [ebp - 0xa94], 0
mov eax, dword [ebp - 0x58]
cmp eax, dword [ebp - 0xa94]
jge 0x10026412
mov dword [ebp - 0x720], 1
jmp 0x10026419
and dword [ebp - 0x720], 0
mov eax, dword [ebp - 0x720]
sub eax, dword [ebp - 0x58]
je 0x1002645f
cmp dword [ebp - 0x1cc], 0
je 0x10026432
jmp 0x100264d4
mov byte [ebp - 0x151], 0
movzx eax, byte [ebp - 0x151]
test eax, eax
je 0x1002645d
push 0
push 0
push 0x1b23
push 0x258a
push 0x2445
call dword [sym.imp.USER32.dll_ScrollWindow]
jmp 0x100264a7
mov dword [ebp - 0x11d0], 0xd296
mov dword [ebp - 0x11c8], 0xfffffff8
lea eax, [ebp - 0x11c8]
push eax
push 0x26a6
lea eax, [ebp - 0x590]
push eax
push 0
push 1
lea eax, [ebp - 0x1cc]
push eax
lea eax, [ebp - 0x48c]
push eax
lea eax, [ebp - 0x11d0]
push eax
call fcn.1001eaa2
add esp, 0x20
mov byte [ebp - 0x195], 0
movzx eax, byte [ebp - 0x195]
test eax, eax
je 0x100264cf
push 0
push 0x5c9a
push 0
push 0x635
call fcn.10020c9b
add esp, 0x10
jmp 0x100261f4
mov dword [ebp - 0x4c], 0xffffffee
jmp 0x100264e4
cmp dword [ebp - 0x4c], 0x1b
jle 0x1002ab27
mov dword [ebp - 0x11d8], 0x2288
cmp dword [ebp - 0x11d8], 0x5f9
jge 0x1002662d
xorpd xmm0, xmm0
movlpd qword [ebp - 0x59c], xmm0
xorpd xmm0, xmm0
movlpd qword [ebp - 0xd9c], xmm0
xorpd xmm0, xmm0
movlpd qword [ebp - 0x11a4], xmm0
lea eax, [ebp - 0x11a4]
push eax
lea eax, [ebp - 0xd9c]
push eax
lea eax, [ebp - 0x59c]
push eax
push 0x10007c80
call fcn.10051a9b
add esp, 0x10
mov eax, dword [ebp - 0x59c]
mov dword [ebp - 0x118c], eax
mov eax, dword [ebp - 0x598]
mov dword [ebp - 0x1188], eax
mov eax, dword [ebp - 0x59c]
sub eax, 1
mov ecx, dword [ebp - 0x598]
sbb ecx, 0
mov dword [ebp - 0x59c], eax
mov dword [ebp - 0x598], ecx
mov eax, dword [ebp - 0x118c]
or eax, dword [ebp - 0x1188]
je 0x10026622
xorpd xmm0, xmm0
movlpd qword [ebp - 0x1198], xmm0
lea eax, [ebp - 0x1198]
push eax
push 0x10007c08
call fcn.10051a9b
pop ecx
pop ecx
push dword [ebp - 0xd98]
push dword [ebp - 0xd9c]
push dword [ebp - 0x1194]
push dword [ebp - 0x1198]
call fcn.10057b70
push dword [ebp - 0x11a0]
push dword [ebp - 0x11a4]
push edx
push eax
call fcn.1006aca0
push dword [ebp - 0xd98]
push dword [ebp - 0xd9c]
push edx
push eax
call fcn.1006abf0
mov dword [ebp - 0x11b0], eax
mov dword [ebp - 0x11ac], edx
push dword [ebp - 0x11ac]
push dword [ebp - 0x11b0]
push 0x10007c90
call fcn.1005218c
add esp, 0xc
jmp 0x1002654e
push 0x10007765
call fcn.100525e6
pop ecx
mov dword [ebp - 0x1fc], 0xfffffff8
push 3
lea ecx, [ebp - 0x1384]
call fcn.1000d911
mov dword [ebp - 4], 8
mov dword [ebp - 0x730], 0
push 1
lea ecx, [ebp - 0x1554]
call fcn.1000d911
mov byte [ebp - 4], 9
mov dword [ebp - 0x44], 0
jmp 0x10026676
mov eax, dword [ebp - 0x44]
inc eax
mov dword [ebp - 0x44], eax
cmp dword [ebp - 0x44], 3
jge 0x10026692
push dword [ebp - 0x44]
lea ecx, [ebp - 0x1384]
call fcn.1000da50
mov dword [eax], 0xfffffffd
jmp 0x1002666f
mov dword [ebp - 0x44], 0
jmp 0x100266a2
mov eax, dword [ebp - 0x44]
inc eax
mov dword [ebp - 0x44], eax
cmp dword [ebp - 0x44], 3
jge 0x100266b8
mov eax, dword [ebp - 0x44]
mov dword [ebp + eax*4 - 0x1878], 0x4cb8
jmp 0x1002669b
mov dword [ebp - 0x44], 0
jmp 0x100266c8
mov eax, dword [ebp - 0x44]
inc eax
mov dword [ebp - 0x44], eax
cmp dword [ebp - 0x44], 1
jge 0x100266e4
push dword [ebp - 0x44]
lea ecx, [ebp - 0x1554]
call fcn.1000da50
mov dword [eax], 0x589b5833
jmp 0x100266c1
mov byte [ebp - 0x159], 0
movzx eax, byte [ebp - 0x159]
test eax, eax
je 0x10026704
push 0
push 0x6587
call fcn.10033834
pop ecx
pop ecx
or eax, 0xffffffff
je 0x10026723
mov eax, dword [ebp - 0x1fc]
cmp dword [ebp - 0x1fc], eax
je 0x10026723
mov dword [ebp - 0x728], 1
jmp 0x1002672a
and dword [ebp - 0x728], 0
mov eax, dword [ebp - 0x1fc]
mov dword [ebp - 0xdb8], eax
push 1
lea ecx, [ebp - 0x1384]
call fcn.1000da50
mov ecx, dword [ebp - 0xdb8]
mov dword [eax], ecx
mov eax, dword [ebp - 0xdb8]
cmp eax, dword [ebp - 0x728]
jle 0x10026765
mov dword [ebp - 0x11e0], 1
jmp 0x1002676c
and dword [ebp - 0x11e0], 0
mov eax, dword [ebp - 0x1fc]
mov dword [ebp - 0x179c], eax
mov esi, dword [ebp - 0x1fc]
push 1
lea ecx, [ebp - 0x1384]
call fcn.1000da50
mov eax, dword [eax]
sub eax, dword [ebp - 0x1fc]
sub esi, eax
jne 0x100267b0
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x1878], 0
jne 0x100267b0
and dword [ebp - 0xa9c], 0
jmp 0x100267ba
mov dword [ebp - 0xa9c], 1
mov eax, dword [ebp - 0xa9c]
mov dword [ebp - 0x730], eax
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x1878]
cmp dword [ebp - 0x730], eax
jg 0x100267e6
mov dword [ebp - 0xc3c], 1
jmp 0x100267ed
and dword [ebp - 0xc3c], 0
imul esi, dword [ebp - 0xc3c], 0xe80d
push 0
lea ecx, [ebp - 0x1554]
call fcn.1000da50
mov dword [eax], esi
mov byte [ebp - 4], 8
lea ecx, [ebp - 0x1554]
call fcn.1000da34
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x1384]
call fcn.1000da34
mov dword [ebp - 0x11e8], 0x20db
cmp dword [ebp - 0x11e8], 0xb79
jge 0x100268a7
lea eax, [ebp - 0x600]
push eax
push 0x100077fc
call fcn.10051a9b
pop ecx
pop ecx
mov eax, dword [ebp - 0x600]
mov dword [ebp - 0x11f0], eax
mov eax, dword [ebp - 0x600]
dec eax
mov dword [ebp - 0x600], eax
cmp dword [ebp - 0x11f0], 0
je 0x100268a7
lea eax, [ebp - 0x11f8]
push eax
lea eax, [ebp - 0x1200]
push eax
push 0x100078d8
call fcn.10051a9b
add esp, 0xc
push dword [ebp - 0x11f8]
mov eax, dword [ebp - 0x1200]
dec eax
push eax
push 0x10007800
call fcn.1005218c
add esp, 0xc
jmp 0x1002684d
mov dword [ebp - 0x2c], 0x99c
push 1
lea ecx, [ebp - 0x1330]
call fcn.1000d911
mov dword [ebp - 4], 0xa
mov dword [ebp - 0xaa4], 0x50f82bae
mov dword [ebp - 0x1d4], 0x9edca8fe
mov dword [ebp - 0x1210], 0xc2f5a260
mov dword [ebp - 0x33c], 0
jmp 0x100268f9
mov eax, dword [ebp - 0x33c]
inc eax
mov dword [ebp - 0x33c], eax
cmp dword [ebp - 0x33c], 1
jge 0x1002691b
push dword [ebp - 0x33c]
lea ecx, [ebp - 0x1330]
call fcn.1000da50
mov dword [eax], 0x6a927213
jmp 0x100268ec
mov eax, dword [ebp - 0x2c]
mov dword [ebp - 0x18ac], eax
mov eax, dword [ebp - 0x2c]
mov dword [ebp - 0x738], eax
push 0
lea ecx, [ebp - 0x1330]
call fcn.1000da50
mov ecx, dword [ebp - 0x738]
mov dword [eax], ecx
mov eax, dword [ebp - 0x738]
mov dword [ebp - 0xaa4], eax
mov eax, dword [ebp - 0xaa4]
mov dword [ebp - 0x1d4], eax
mov eax, dword [ebp - 0x2c]
inc eax
cmp eax, 0xd5de1fc6
ja 0x10026971
mov dword [ebp - 0x1208], 1
jmp 0x10026978
and dword [ebp - 0x1208], 0
mov eax, dword [ebp - 0x2c]
mov dword [ebp - 0x17a4], eax
mov eax, dword [ebp - 0x2c]
mov dword [ebp - 0x15d8], eax
mov eax, dword [ebp - 0x1d4]
add eax, dword [ebp - 0x2c]
cmp eax, dword [ebp - 0x2c]
jg 0x100269a4
mov dword [ebp - 0x740], 1
jmp 0x100269ab
and dword [ebp - 0x740], 0
mov eax, dword [ebp - 0x2c]
add eax, dword [ebp - 0x740]
cmp dword [ebp - 0x2c], eax
jle 0x100269c5
mov dword [ebp - 0xd0c], 1
jmp 0x100269cc
and dword [ebp - 0xd0c], 0
mov eax, dword [ebp - 0xd0c]
sub eax, dword [ebp - 0x2c]
cmp eax, dword [ebp - 0x2c]
jg 0x100269e6
mov dword [ebp - 0x748], 1
jmp 0x100269ed
and dword [ebp - 0x748], 0
mov eax, dword [ebp - 0x2c]
add eax, dword [ebp - 0x748]
cmp eax, dword [ebp - 0x2c]
jl 0x10026a07
mov dword [ebp - 0xaac], 1
jmp 0x10026a0e
and dword [ebp - 0xaac], 0
mov eax, dword [ebp - 0x2c]
cmp dword [ebp - 0xaac], eax
jge 0x10026a25
mov dword [ebp - 0x750], 1
jmp 0x10026a2c
and dword [ebp - 0x750], 0
mov eax, dword [ebp - 0x2c]
imul eax, dword [ebp - 0x750]
test eax, eax
je 0x10026a6b
mov dword [ebp - 0x1d4], 0
jmp 0x10026a53
mov eax, dword [ebp - 0x1d4]
dec eax
mov dword [ebp - 0x1d4], eax
cmp dword [ebp - 0x1d4], 0
jl 0x10026a69
push 0
push 1
call fcn.100205ca
pop ecx
pop ecx
jmp 0x10026a46
jmp 0x10026a88
mov byte [ebp - 0x19d], 0
movzx eax, byte [ebp - 0x19d]
test eax, eax
je 0x10026a88
push 0x1579
call dword [sym.imp.KERNEL32.dll_ExitThread]
lea eax, [ebp - 0x1210]
push eax
push 1
push 0
push 0x22cb
lea eax, [ebp - 0x1330]
push eax
call fcn.1001f811
add esp, 0x14
mov dword [ebp - 0x1218], 0x1a08
cmp dword [ebp - 0x1218], 0x70c
jge 0x10026c2d
lea eax, [ebp - 0x640]
push eax
push 0x10007c00
call fcn.10051a9b
pop ecx
pop ecx
mov dword [ebp - 0x5b4], 1
and dword [ebp - 0x5b0], 0
mov dword [ebp - 0x5a8], 1
and dword [ebp - 0x5a4], 0
mov dword [ebp - 0x230], 0xa
and dword [ebp - 0x22c], 0
xorpd xmm0, xmm0
movlpd qword [ebp - 0x630], xmm0
mov eax, dword [ebp - 0x5a4]
cmp eax, dword [ebp - 0x63c]
jg 0x10026c14
jl 0x10026b39
mov eax, dword [ebp - 0x5a8]
cmp eax, dword [ebp - 0x640]
ja 0x10026c14
mov eax, dword [ebp - 0x63c]
cmp eax, dword [ebp - 0x22c]
jg 0x10026b75
jl 0x10026b57
mov eax, dword [ebp - 0x640]
cmp eax, dword [ebp - 0x230]
jae 0x10026b75
mov eax, dword [ebp - 0x640]
add eax, 1
mov ecx, dword [ebp - 0x63c]
adc ecx, 0
mov dword [ebp - 0x230], eax
mov dword [ebp - 0x22c], ecx
mov eax, dword [ebp - 0x230]
sub eax, dword [ebp - 0x5a8]
mov ecx, dword [ebp - 0x22c]
sbb ecx, dword [ebp - 0x5a4]
push ecx
push eax
push dword [ebp - 0x5b0]
push dword [ebp - 0x5b4]
call fcn.10057b70
add eax, dword [ebp - 0x630]
adc edx, dword [ebp - 0x62c]
mov dword [ebp - 0x630], eax
mov dword [ebp - 0x62c], edx
mov eax, dword [ebp - 0x230]
mov dword [ebp - 0x5a8], eax
mov eax, dword [ebp - 0x22c]
mov dword [ebp - 0x5a4], eax
push 0
push 0xa
push dword [ebp - 0x22c]
push dword [ebp - 0x230]
call fcn.10057b70
mov dword [ebp - 0x230], eax
mov dword [ebp - 0x22c], edx
mov eax, dword [ebp - 0x5b4]
add eax, 1
mov ecx, dword [ebp - 0x5b0]
adc ecx, 0
mov dword [ebp - 0x5b4], eax
mov dword [ebp - 0x5b0], ecx
jmp 0x10026b13
push dword [ebp - 0x62c]
push dword [ebp - 0x630]
push 0x10007c00
call fcn.1005218c
add esp, 0xc
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x1330]
call fcn.1000da34
mov dword [ebp - 0x60], 0x55b7cefa
mov dword [ebp - 0x4ec], 0x8905b8b7
mov dword [ebp - 0x1220], 0x2340
cmp dword [ebp - 0x1220], 0x110c
jge 0x10026d6e
lea eax, [ebp - 0xab4]
push eax
push 0x10007830
call fcn.10051a9b
pop ecx
pop ecx
and dword [ebp - 0x248], 0
mov dword [ebp - 0x758], 0x2c
and dword [ebp - 0xc44], 0
mov dword [ebp - 0x4dc], 0x2c
and dword [ebp - 0x5bc], 0
and dword [ebp - 0x2a0], 0
jmp 0x10026cb9
mov eax, dword [ebp - 0x2a0]
inc eax
mov dword [ebp - 0x2a0], eax
mov eax, dword [ebp - 0x2a0]
cmp eax, dword [ebp - 0xab4]
jge 0x10026d28
lea eax, [ebp - 0x248]
push eax
push 0x100077f8
call fcn.10051a9b
pop ecx
pop ecx
mov eax, dword [ebp - 0x248]
cmp eax, dword [ebp - 0xc44]
jle 0x10026d00
mov eax, dword [ebp - 0x2a0]
mov dword [ebp - 0x5bc], eax
mov eax, dword [ebp - 0x248]
mov dword [ebp - 0xc44], eax
mov eax, dword [ebp - 0x248]
cmp eax, dword [ebp - 0x758]
jg 0x10026d26
mov eax, dword [ebp - 0x2a0]
mov dword [ebp - 0x4dc], eax
mov eax, dword [ebp - 0x248]
mov dword [ebp - 0x758], eax
jmp 0x10026cac
mov eax, dword [ebp - 0xab4]
dec eax
sub eax, dword [ebp - 0x4dc]
add eax, dword [ebp - 0x5bc]
mov dword [ebp - 0x4e4], eax
mov eax, dword [ebp - 0x4dc]
cmp eax, dword [ebp - 0x5bc]
jge 0x10026d5c
mov eax, dword [ebp - 0x4e4]
dec eax
mov dword [ebp - 0x4e4], eax
push dword [ebp - 0x4e4]
push 0x10007830
call fcn.1005218c
pop ecx
pop ecx
mov dword [ebp - 0x7a0], 0x2e11914c
mov dword [ebp - 0x4f4], 0xc6f79b34
mov dword [ebp - 0x12f8], 0xe8bfa085
mov dword [ebp - 0x1300], 0x3d35
mov dword [ebp - 0x494], 0
jmp 0x10026daf
mov eax, dword [ebp - 0x494]
inc eax
mov dword [ebp - 0x494], eax
cmp dword [ebp - 0x494], 2
jge 0x10026dcb
mov eax, dword [ebp - 0x494]
mov dword [ebp + eax*4 - 0x1b8], 0xd962ee6d
jmp 0x10026da2
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x1b8], 0
jne 0x10026de8
xor eax, eax
jne 0x10026de8
and dword [ebp - 0x760], 0
jmp 0x10026df2
mov dword [ebp - 0x760], 1
xor eax, eax
sub eax, dword [ebp - 0x760]
push 4
pop ecx
imul ecx, ecx, 0
cmp eax, dword [ebp + ecx - 0x1b8]
jl 0x10026e15
mov dword [ebp - 0xd74], 1
jmp 0x10026e1c
and dword [ebp - 0xd74], 0
mov eax, 0x3de0369b
test eax, eax
je 0x10026e41
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x1b8], 0
je 0x10026e41
mov dword [ebp - 0x768], 1
jmp 0x10026e48
and dword [ebp - 0x768], 0
mov eax, dword [ebp - 0xd74]
cmp eax, dword [ebp - 0x768]
je 0x10026e62
mov dword [ebp - 0xabc], 1
jmp 0x10026e69
and dword [ebp - 0xabc], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x1b8]
cmp dword [ebp - 0xabc], eax
jge 0x10026e8a
mov dword [ebp - 0x770], 1
jmp 0x10026e91
and dword [ebp - 0x770], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x1b8]
cmp dword [ebp - 0x770], eax
jge 0x10026eb2
mov dword [ebp - 0x584], 1
jmp 0x10026eb9
and dword [ebp - 0x584], 0
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x584]
mov dword [ebp + eax - 0x1b8], ecx
cmp dword [ebp - 0x584], 0
je 0x10026f0c
cmp dword [ebp - 0x4ec], 0xc58b
jne 0x10026eed
mov dword [ebp - 0xc4c], 1
jmp 0x10026ef4
and dword [ebp - 0xc4c], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0xc4c]
mov dword [ebp + eax - 0x1b8], ecx
jmp 0x10027140
mov dword [ebp - 0x2a4], 9
mov dword [ebp - 0xd14], 0xfffffffe
mov dword [ebp - 0x10d0], 0xb1dc
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x1b8]
sub eax, dword [ebp - 0x2a4]
inc eax
cmp dword [ebp - 0x2a4], eax
jge 0x10026f83
cmp dword [ebp - 0x7a0], 0
jne 0x10026f5b
mov dword [ebp - 0x778], 1
jmp 0x10026f62
and dword [ebp - 0x778], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x1b8]
cmp dword [ebp - 0x778], eax
jg 0x10026f83
mov dword [ebp - 0xac4], 1
jmp 0x10026f8a
and dword [ebp - 0xac4], 0
mov eax, dword [ebp - 0x4ec]
cmp dword [ebp - 0xac4], eax
je 0x10026fa4
mov dword [ebp - 0x5c0], 1
jmp 0x10026fab
and dword [ebp - 0x5c0], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x5c0]
mov dword [ebp + eax - 0x1b8], ecx
mov eax, dword [ebp - 0x4ec]
cmp dword [ebp - 0x5c0], eax
je 0x10026fd8
mov dword [ebp - 0x780], 1
jmp 0x10026fdf
and dword [ebp - 0x780], 0
mov eax, dword [ebp - 0x780]
mov dword [ebp - 0xd14], eax
cmp dword [ebp - 0xd14], 0x9984
jl 0x10027003
mov dword [ebp - 0x788], 1
jmp 0x1002700a
and dword [ebp - 0x788], 0
mov eax, dword [ebp - 0x788]
mov dword [ebp - 0x4f4], eax
cmp dword [ebp - 0x2a4], 0
je 0x100270c3
cmp dword [ebp - 0x12f8], 0
jb 0x10027038
mov dword [ebp - 0xacc], 1
jmp 0x1002703f
and dword [ebp - 0xacc], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x1b8]
cmp eax, dword [ebp - 0xacc]
jg 0x10027060
mov dword [ebp - 0x790], 1
jmp 0x10027067
and dword [ebp - 0x790], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x1b8]
cmp dword [ebp - 0x790], eax
je 0x10027088
mov dword [ebp - 0xc54], 1
jmp 0x1002708f
and dword [ebp - 0xc54], 0
mov eax, dword [ebp - 0xc54]
mov dword [ebp - 0x4f4], eax
mov eax, dword [ebp - 0x4f4]
mov dword [ebp - 0x15e0], eax
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x1b8], 0
je 0x100270c3
mov dword [ebp - 0x798], 1
jmp 0x100270ca
and dword [ebp - 0x798], 0
mov eax, dword [ebp - 0x2a4]
dec eax
cmp eax, dword [ebp - 0x798]
jge 0x100270ee
cmp dword [ebp - 0x1300], 0
je 0x100270ee
mov dword [ebp - 0xad4], 1
jmp 0x100270f5
and dword [ebp - 0xad4], 0
mov eax, dword [ebp - 0xad4]
add eax, 0x5d5df5b0
cmp eax, dword [ebp - 0x7a0]
jle 0x1002712a
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x1b8], 0
jne 0x1002712a
cmp dword [ebp - 0x2a4], 0
jne 0x1002712a
and dword [ebp - 0xde4], 0
jmp 0x10027134
mov dword [ebp - 0xde4], 1
mov eax, dword [ebp - 0xde4]
mov dword [ebp - 0x10d0], eax
mov dword [ebp - 0x544], 0xd1e1
mov dword [ebp - 0x1020], 0x1624
cmp dword [ebp - 0x1020], 0x534
jge 0x1002728d
lea eax, [ebp - 0xea0]
push eax
push 0x100077f8
call fcn.10051a9b
pop ecx
pop ecx
mov dword [ebp - 0x344], 1
jmp 0x10027190
mov eax, dword [ebp - 0x344]
inc eax
mov dword [ebp - 0x344], eax
mov eax, dword [ebp - 0x344]
cmp eax, dword [ebp - 0xea0]
jg 0x1002728d
lea eax, [ebp - 0x7a8]
push eax
lea eax, [ebp - 0xadc]
push eax
lea eax, [ebp - 0x34c]
push eax
lea eax, [ebp - 0x104]
push eax
push 0x100078cc
call fcn.10051a9b
add esp, 0x14
push dword [ebp - 0x7a8]
push dword [ebp - 0xadc]
push dword [ebp - 0x34c]
push dword [ebp - 0x104]
push dword [ebp - 0x344]
push 0x10007c98
call fcn.1005218c
add esp, 0x18
mov eax, dword [ebp - 0x104]
cdq
idiv dword [ebp - 0x34c]
mov dword [ebp - 0x104], edx
and dword [ebp - 0x49c], 0
jmp 0x1002721f
mov eax, dword [ebp - 0x49c]
inc eax
mov dword [ebp - 0x49c], eax
mov eax, dword [ebp - 0x49c]
cmp eax, dword [ebp - 0x7a8]
jg 0x10027280
imul eax, dword [ebp - 0x104], 7
mov dword [ebp - 0x104], eax
mov eax, dword [ebp - 0x49c]
cmp eax, dword [ebp - 0xadc]
jl 0x1002726b
mov eax, dword [ebp - 0x104]
cdq
idiv dword [ebp - 0x34c]
mov dword [ebp - 0xf00], eax
mov eax, dword [ebp - 0xf00]
add eax, 0x30
push eax
call fcn.10054811
pop ecx
mov eax, dword [ebp - 0x104]
cdq
idiv dword [ebp - 0x34c]
mov dword [ebp - 0x104], edx
jmp 0x10027212
push 0xa
call fcn.10054811
pop ecx
jmp 0x10027183
mov dword [ebp - 0x4a4], 0
jmp 0x100272a6
mov eax, dword [ebp - 0x4a4]
inc eax
mov dword [ebp - 0x4a4], eax
cmp dword [ebp - 0x4a4], 2
jge 0x100272c2
mov eax, dword [ebp - 0x4a4]
mov dword [ebp + eax*4 - 0x1a68], 0x7862
jmp 0x10027299
push 0x5bff
push 0
push 0x6702
push 0x29b0
push 0
call fcn.1003150e
add esp, 0x14
mov byte [ebp - 0x161], 0
movzx eax, byte [ebp - 0x161]
test eax, eax
je 0x1002730c
push 0x1f5d
push 0
push 1
push 0
push 0x64a
push 0x4152
call fcn.10039ca4
add esp, 0x18
mov dword [ebp - 0x90], 0xfffffff6
mov dword [ebp - 0x58c], 0x1145714f
mov dword [ebp - 0x4ac], 0
jmp 0x10027339
mov eax, dword [ebp - 0x4ac]
inc eax
mov dword [ebp - 0x4ac], eax
cmp dword [ebp - 0x4ac], 4
jge 0x10027355
mov eax, dword [ebp - 0x4ac]
mov dword [ebp + eax*4 - 0x1ac8], 0
jmp 0x1002732c
push 0
call fcn.10031729
pop ecx
mov eax, 0x27d373ee
sub eax, dword [ebp - 0x90]
mov dword [ebp - 0x58c], eax
mov eax, dword [ebp - 0x90]
imul eax, dword [ebp - 0x58c]
cmp eax, dword [ebp - 0x90]
je 0x1002738f
mov dword [ebp - 0x7b0], 1
jmp 0x10027396
and dword [ebp - 0x7b0], 0
mov eax, dword [ebp - 0x90]
imul eax, dword [ebp - 0x7b0]
cmp eax, 0x33c7
jne 0x100273bc
mov eax, 0xb5e49576
test eax, eax
jne 0x100273bc
and dword [ebp - 0xeac], 0
jmp 0x100273c6
mov dword [ebp - 0xeac], 1
mov eax, dword [ebp - 0x90]
mov dword [ebp - 0x1670], eax
cmp dword [ebp - 0x58c], 0x5741
jle 0x100273ea
mov dword [ebp - 0xc5c], 1
jmp 0x100273f1
and dword [ebp - 0xc5c], 0
mov eax, dword [ebp - 0xc5c]
add eax, 0xb80e
cmp dword [ebp - 0x90], eax
jl 0x10027410
mov dword [ebp - 0x7b8], 1
jmp 0x10027417
and dword [ebp - 0x7b8], 0
mov eax, dword [ebp - 0x90]
cmp dword [ebp - 0x7b8], eax
jge 0x10027431
mov dword [ebp - 0xae4], 1
jmp 0x10027438
and dword [ebp - 0xae4], 0
mov eax, dword [ebp - 0x90]
cmp dword [ebp - 0xae4], eax
jge 0x10027452
mov dword [ebp - 0x7c0], 1
jmp 0x10027459
and dword [ebp - 0x7c0], 0
mov eax, dword [ebp - 0x90]
cmp dword [ebp - 0x7c0], eax
jle 0x10027473
mov dword [ebp - 0xd1c], 1
jmp 0x1002747a
and dword [ebp - 0xd1c], 0
mov eax, dword [ebp - 0x90]
sub eax, dword [ebp - 0xd1c]
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x1ac8], eax
mov dword [ebp - 0x74], 0xde713a47
mov dword [ebp - 0x364], 0xffff
push 1
lea ecx, [ebp - 0x4d0]
call fcn.1000d911
mov dword [ebp - 4], 0xb
mov dword [ebp - 0xeb4], 1
mov dword [ebp - 0x10d8], 0xffffffff
mov dword [ebp - 0x354], 0
jmp 0x100274e5
mov eax, dword [ebp - 0x354]
inc eax
mov dword [ebp - 0x354], eax
cmp dword [ebp - 0x354], 1
jge 0x10027507
push dword [ebp - 0x354]
lea ecx, [ebp - 0x4d0]
call fcn.1000da50
mov dword [eax], 0xdade661f
jmp 0x100274d8
mov eax, dword [ebp - 0x74]
mov dword [ebp - 0x1678], eax
mov eax, dword [ebp - 0x364]
cmp dword [ebp - 0x74], eax
je 0x10027539
cmp dword [ebp - 0x364], 0
je 0x10027539
cmp dword [ebp - 0x364], 0
je 0x10027539
mov dword [ebp - 0x7c8], 1
jmp 0x10027540
and dword [ebp - 0x7c8], 0
mov eax, dword [ebp - 0x74]
cmp dword [ebp - 0x7c8], eax
je 0x10027557
mov dword [ebp - 0xaec], 1
jmp 0x1002755e
and dword [ebp - 0xaec], 0
mov eax, dword [ebp - 0x74]
add eax, dword [ebp - 0xaec]
or ecx, 0xffffffff
sub ecx, eax
cmp ecx, dword [ebp - 0x74]
jge 0x1002757d
mov dword [ebp - 0x4fc], 1
jmp 0x10027584
and dword [ebp - 0x4fc], 0
push 0
lea ecx, [ebp - 0x4d0]
call fcn.1000da50
mov ecx, dword [ebp - 0x4fc]
mov dword [eax], ecx
mov eax, dword [ebp - 0x74]
cmp eax, dword [ebp - 0x4fc]
jge 0x100275b0
mov dword [ebp - 0x7d0], 1
jmp 0x100275b7
and dword [ebp - 0x7d0], 0
mov eax, dword [ebp - 0x364]
cmp dword [ebp - 0x7d0], eax
jl 0x1002761e
mov dword [ebp - 0x74], 0
jmp 0x100275d5
mov eax, dword [ebp - 0x74]
inc eax
mov dword [ebp - 0x74], eax
cmp dword [ebp - 0x74], 0x2d
jg 0x10027619
mov byte [ebp - 0x19f], 0
movzx eax, byte [ebp - 0x19f]
test eax, eax
je 0x10027617
push 0x6e6e
push 0x63a7
push 0x4505
push 1
push 1
push 0x641d
push 0x4e5
push 0x1f5b
call fcn.1001eaa2
add esp, 0x20
jmp 0x100275ce
jmp 0x10027964
mov dword [ebp - 0x1134], 0x34ac
mov dword [ebp - 0x78], 0xedda
mov dword [ebp - 0x1a8], 0xccc41425
mov dword [ebp - 0x408], 0
jmp 0x10027652
mov eax, dword [ebp - 0x408]
inc eax
mov dword [ebp - 0x408], eax
cmp dword [ebp - 0x408], 2
jge 0x1002766e
mov eax, dword [ebp - 0x408]
mov dword [ebp + eax*4 - 0xda8], 0x7552f0c8
jmp 0x10027645
lea eax, [ebp - 0x1134]
push eax
push 0
lea eax, [ebp - 0x4d0]
push eax
push 0x1631
lea eax, [ebp - 0xeb4]
push eax
lea eax, [ebp - 0x1a8]
push eax
lea eax, [ebp - 0x74]
push eax
lea eax, [ebp - 0x78]
push eax
call fcn.10031deb
add esp, 0x20
mov dword [ebp - 0x1a8], 0
jmp 0x100276ba
mov eax, dword [ebp - 0x1a8]
dec eax
mov dword [ebp - 0x1a8], eax
cmp dword [ebp - 0x1a8], 0
jl 0x10027964
mov dword [ebp - 0xec4], 0
mov byte [ebp - 0x169], 0
movzx eax, byte [ebp - 0x169]
test eax, eax
je 0x100276eb
push 0
call fcn.1003c238
pop ecx
mov dword [ebp - 0x78], 0
jmp 0x100276fb
cmp dword [ebp - 0x78], 0
jg 0x1002795f
mov dword [ebp - 0xebc], 0x7e60
mov dword [ebp - 0x7f0], 9
push dword [ebp - 0x78]
lea ecx, [ebp - 0x4d0]
call fcn.1000da50
mov esi, eax
push dword [ebp - 0x78]
lea ecx, [ebp - 0x4d0]
call fcn.1000da50
mov ecx, dword [esi]
cmp ecx, dword [eax]
jge 0x10027749
mov dword [ebp - 0xaf4], 1
jmp 0x10027750
and dword [ebp - 0xaf4], 0
push 0
lea ecx, [ebp - 0x4d0]
call fcn.1000da50
cmp dword [eax], 0
je 0x10027769
cmp dword [ebp - 0x1a8], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0xda8]
cmp dword [ebp - 0x1a8], eax
jl 0x1002778a
mov dword [ebp - 0x1234], 1
jmp 0x10027791
and dword [ebp - 0x1234], 0
push dword [ebp - 0x78]
lea ecx, [ebp - 0x4d0]
call fcn.1000da50
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xda8]
mov dword [ebp - 0x1680], eax
push 0
lea ecx, [ebp - 0x4d0]
call fcn.1000da50
push 4
pop ecx
shl ecx, 0
mov ecx, dword [ebp + ecx - 0xda8]
cmp dword [eax], ecx
je 0x100277dc
mov dword [ebp - 0xc64], 1
jmp 0x100277e3
and dword [ebp - 0xc64], 0
cmp dword [ebp - 0xc64], 0xb6ef
jle 0x100277fb
mov dword [ebp - 0x7d8], 1
jmp 0x10027802
and dword [ebp - 0x7d8], 0
cmp dword [ebp - 0x7d8], 5
jne 0x10027817
mov dword [ebp - 0x5c8], 1
jmp 0x1002781e
and dword [ebp - 0x5c8], 0
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x5c8]
mov dword [ebp + eax - 0xda8], ecx
mov eax, dword [ebp - 0x5c8]
neg eax
cmp eax, dword [ebp - 0xebc]
jl 0x1002784d
mov dword [ebp - 0x7e0], 1
jmp 0x10027854
and dword [ebp - 0x7e0], 0
mov eax, dword [ebp - 0xaf4]
cmp eax, dword [ebp - 0x7e0]
je 0x1002786e
mov dword [ebp - 0xd7c], 1
jmp 0x10027875
and dword [ebp - 0xd7c], 0
mov eax, dword [ebp - 0x10d8]
cmp dword [ebp - 0xd7c], eax
jle 0x1002788f
jmp 0x100276ad
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x4d0]
call fcn.1000da34
mov dword [ebp - 0xe0], 0
jmp 0x1002798c
mov eax, dword [ebp - 0xe0]
inc eax
mov dword [ebp - 0xe0], eax
cmp dword [ebp - 0xe0], 2
jge 0x100279a8
mov eax, dword [ebp - 0xe0]
mov dword [ebp + eax*4 - 0x610], 0xb72fd491
jmp 0x1002797f
mov dword [ebp - 0xc4], 0x30f94f37
mov dword [ebp - 0xd24], 0xfffffffc
mov dword [ebp - 0x594], 0
mov dword [ebp - 0x368], 0
jmp 0x100279df
mov eax, dword [ebp - 0x368]
inc eax
mov dword [ebp - 0x368], eax
cmp dword [ebp - 0x368], 3
jge 0x100279fb
mov eax, dword [ebp - 0x368]
mov dword [ebp + eax*4 - 0x1a08], 0xffffffff
jmp 0x100279d2
mov dword [ebp - 0xc4], 2
jmp 0x10027a14
cmp dword [ebp - 0xc4], 0
jl 0x10027ca8
mov dword [ebp - 0x250], 0xffff
mov dword [ebp - 0xc74], 0
mov dword [ebp - 0x10e0], 1
mov dword [ebp - 0xed4], 0xd0f12afb
mov dword [ebp - 0x498], 0
jmp 0x10027a62
mov eax, dword [ebp - 0x498]
inc eax
mov dword [ebp - 0x498], eax
cmp dword [ebp - 0x498], 2
jge 0x10027a7e
mov eax, dword [ebp - 0x498]
mov dword [ebp + eax*4 - 0xe30], 0xffffffff
jmp 0x10027a55
mov byte [ebp - 0x1a1], 0
movzx eax, byte [ebp - 0x1a1]
test eax, eax
je 0x10027aa6
push 0x2c7c
push 0x1594
push 0
push 1
call fcn.1001f8ce
add esp, 0x10
cmp dword [ebp - 0x250], 0
jne 0x10027aee
mov eax, dword [ebp - 0x250]
cmp dword [ebp - 0x250], eax
jne 0x10027acf
mov eax, 0xd3
test eax, eax
jne 0x10027acf
mov dword [ebp - 0x7f8], 1
mov eax, dword [ebp - 0x7f8]
neg eax
inc eax
inc eax
jne 0x10027aee
mov dword [ebp - 0x11c4], 1
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0xe30]
mov dword [ebp - 0x1688], eax
mov eax, dword [ebp - 0x594]
mov dword [ebp - 0x1690], eax
mov eax, dword [ebp - 0xc4]
mov ecx, dword [ebp - 0xc4]
mov dword [ebp + eax*4 - 0x1a08], ecx
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0xe30], 0x728a
je 0x10027b56
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0xe30], 0
jne 0x10027b56
mov dword [ebp - 0xb04], 1
mov eax, dword [ebp - 0x250]
cmp eax, dword [ebp - 0xb04]
jl 0x10027b83
mov dword [ebp - 0xe0], 0
jmp 0x10027cc1
mov eax, dword [ebp - 0xe0]
inc eax
mov dword [ebp - 0xe0], eax
cmp dword [ebp - 0xe0], 3
jge 0x10027cdd
mov eax, dword [ebp - 0xe0]
mov dword [ebp + eax*4 - 0x1280], 0xffff
jmp 0x10027cb4
mov dword [ebp - 0x820], 0x19d29be1
mov dword [ebp - 0x5d0], 0xfffffff8
mov dword [ebp - 0x12a4], 0xfffffffc
push 2
lea ecx, [ebp - 0x1524]
call fcn.1000d911
mov dword [ebp - 4], 0xc
mov dword [ebp - 0x50c], 0xfe66
mov dword [ebp - 0x10e8], 0xd5493e6
mov dword [ebp - 0xee4], 0xffffffff
mov dword [ebp - 0x16b0], 0x6ebbfad0
mov dword [ebp - 0x11cc], 0x5379
mov dword [ebp - 0x370], 0
jmp 0x10027d5a
mov eax, dword [ebp - 0x370]
inc eax
mov dword [ebp - 0x370], eax
cmp dword [ebp - 0x370], 2
jge 0x10027d7c
push dword [ebp - 0x370]
lea ecx, [ebp - 0x1524]
call fcn.1000da50
mov dword [eax], 0xfe30f587
jmp 0x10027d4d
mov eax, dword [ebp - 0x820]
mov dword [ebp - 0x16b8], eax
mov eax, dword [ebp - 0x50c]
mov dword [ebp - 0x16c0], eax
mov eax, dword [ebp - 0x50c]
dec eax
mov dword [ebp - 0x50c], eax
mov eax, 0xd9637855
test eax, eax
je 0x10027de9
push 1
lea ecx, [ebp - 0x1524]
call fcn.1000da50
mov eax, dword [eax]
mov dword [ebp - 0x5d0], eax
cmp dword [ebp - 0x5d0], 0
je 0x10027de9
and dword [ebp - 0xedc], 0
mov eax, dword [ebp - 0x10e8]
mov dword [ebp - 0x16c8], eax
mov eax, dword [ebp - 0x820]
add eax, dword [ebp - 0x5d0]
mov dword [ebp - 0xee4], eax
push 1
push 0x7ae
push 0
lea eax, [ebp - 0x11cc]
push eax
call fcn.10020c2f
add esp, 0x10
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x1524]
call fcn.1000da34
mov dword [ebp - 0x60], 0
jmp 0x10027e45
mov dword [ebp - 0x8c], 0x108f
mov dword [ebp - 0xfe4], 0xffffffff
push 3
lea ecx, [ebp - 0x1348]
call fcn.1000d911
mov dword [ebp - 4], 0x1b
mov dword [ebp - 0x1e4], 0x9cee24b2
mov dword [ebp - 0xfec], 0xba8dad4f
mov dword [ebp - 0xf0], 0
jmp 0x1002ab7c
mov eax, dword [ebp - 0xf0]
inc eax
mov dword [ebp - 0xf0], eax
cmp dword [ebp - 0xf0], 2
jge 0x1002ab98
mov eax, dword [ebp - 0xf0]
mov dword [ebp + eax*4 - 0x1ad8], 0
jmp 0x1002ab6f
mov dword [ebp - 0xf0], 0
jmp 0x1002abb1
mov eax, dword [ebp - 0xf0]
inc eax
mov dword [ebp - 0xf0], eax
cmp dword [ebp - 0xf0], 3
jge 0x1002abd3
push dword [ebp - 0xf0]
lea ecx, [ebp - 0x1348]
call fcn.1000da50
mov dword [eax], 0xb227d373
jmp 0x1002aba4
mov eax, dword [ebp - 0x8c]
mov dword [ebp - 0x17d8], eax
mov eax, 0x56a9
imul eax, eax, 0
test eax, eax
je 0x1002af5c
mov dword [ebp - 0x17e0], 0
mov dword [ebp - 0x4a0], 0
jmp 0x1002ac12
mov eax, dword [ebp - 0x4a0]
inc eax
mov dword [ebp - 0x4a0], eax
cmp dword [ebp - 0x4a0], 1
jge 0x1002ac2e
mov eax, dword [ebp - 0x4a0]
mov dword [ebp + eax*4 - 0x17e8], 0xbe56890c
jmp 0x1002ac05
mov dword [ebp - 0x8c], 0
jmp 0x1002ac47
mov eax, dword [ebp - 0x8c]
inc eax
mov dword [ebp - 0x8c], eax
cmp dword [ebp - 0x8c], 0x10
jg 0x1002af57
mov dword [ebp - 0x450], 0x888999d9
mov dword [ebp - 0x17f0], 0x5c285ce9
mov dword [ebp - 0x17f8], 0
mov dword [ebp - 0x3f0], 0
jmp 0x1002ac8b
mov eax, dword [ebp - 0x3f0]
inc eax
mov dword [ebp - 0x3f0], eax
cmp dword [ebp - 0x3f0], 1
jge 0x1002aca7
mov eax, dword [ebp - 0x3f0]
mov dword [ebp + eax*4 - 0x15cc], 0x1311e2db
jmp 0x1002ac7e
mov dword [ebp - 0x450], 0
jmp 0x1002acc0
mov eax, dword [ebp - 0x450]
inc eax
mov dword [ebp - 0x450], eax
cmp dword [ebp - 0x450], 1
jg 0x1002af52
mov dword [ebp - 0x1808], 0xffffffff
mov dword [ebp - 0x1810], 0
mov dword [ebp - 0xfbc], 0x1534
cmp dword [ebp - 0xfbc], 0xf03
jge 0x1002aef6
lea eax, [ebp - 0xfd4]
push eax
mov ecx, 0x1065d1f0
call fcn.1000d289
lea ecx, [ebp - 0x1318]
call fcn.1000d1f3
mov byte [ebp - 4], 0x1c
lea edx, [ebp - 0x1318]
mov ecx, 0x1065d1f0
call fcn.10012302
lea eax, [ebp - 0x1318]
push eax
lea ecx, [ebp - 0x15c8]
call fcn.1000d1cd
mov byte [ebp - 4], 0x1d
and dword [ebp - 0x120], 0
jmp 0x1002ad57
mov eax, dword [ebp - 0x120]
inc eax
mov dword [ebp - 0x120], eax
lea ecx, [ebp - 0x1318]
call fcn.1000d88b
dec eax
cmp dword [ebp - 0x120], eax
jae 0x1002ae66
push dword [ebp - 0x120]
lea ecx, [ebp - 0x1318]
call fcn.1000d260
movsx esi, byte [eax]
mov eax, dword [ebp - 0x120]
inc eax
push eax
lea ecx, [ebp - 0x1318]
call fcn.1000d260
movsx eax, byte [eax]
cmp esi, eax
jle 0x1002ae61
push dword [0x100079fc]
mov eax, dword [ebp - 0x120]
inc eax
push eax
lea eax, [ebp - 0x1b58]
push eax
lea ecx, [ebp - 0x1318]
call fcn.10016f4d
mov dword [ebp - 0x1158], eax
mov eax, dword [ebp - 0x1158]
mov dword [ebp - 0x1204], eax
mov byte [ebp - 4], 0x1e
push dword [ebp - 0x120]
push 0
lea eax, [ebp - 0x1b34]
push eax
lea ecx, [ebp - 0x1318]
call fcn.10016f4d
mov dword [ebp - 0xfc4], eax
mov eax, dword [ebp - 0xfc4]
mov dword [ebp - 0xfcc], eax
mov byte [ebp - 4], 0x1f
push dword [ebp - 0x1204]
mov edx, dword [ebp - 0xfcc]
lea ecx, [ebp - 0x1b1c]
call fcn.100446ba
pop ecx
mov dword [ebp - 0x1160], eax
push dword [ebp - 0x1160]
lea ecx, [ebp - 0x15c8]
call fcn.1000de23
lea ecx, [ebp - 0x1b1c]
call fcn.1000d256
mov byte [ebp - 4], 0x1e
lea ecx, [ebp - 0x1b34]
call fcn.1000d256
mov byte [ebp - 4], 0x1d
lea ecx, [ebp - 0x1b58]
call fcn.1000d256
jmp 0x1002ae66
jmp 0x1002ad4a
lea edx, [ebp - 0x1318]
lea ecx, [ebp - 0x15c8]
call fcn.10044706
movzx eax, al
test eax, eax
je 0x1002aebc
mov eax, dword [ebp - 0xfd4]
dec eax
push eax
push 0
lea eax, [ebp - 0x1b7c]
push eax
lea ecx, [ebp - 0x15c8]
call fcn.10016f4d
mov dword [ebp - 0x12c4], eax
push dword [ebp - 0x12c4]
lea ecx, [ebp - 0x15c8]
call fcn.1000de23
lea ecx, [ebp - 0x1b7c]
call fcn.1000d256
push fcn.10012040
lea edx, [ebp - 0x15c8]
mov ecx, 0x1065d138
call fcn.10017295
mov ecx, eax
call fcn.1000d58d
mov byte [ebp - 4], 0x1c
lea ecx, [ebp - 0x15c8]
call fcn.1000d256
mov byte [ebp - 4], 0x1b
lea ecx, [ebp - 0x1318]
call fcn.1000d256
mov dword [ebp - 0x3f8], 0
jmp 0x1002af0f
mov eax, dword [ebp - 0x3f8]
inc eax
mov dword [ebp - 0x3f8], eax
cmp dword [ebp - 0x3f8], 2
jge 0x1002af2b
mov eax, dword [ebp - 0x3f8]
mov dword [ebp + eax*4 - 0x1a88], 3
jmp 0x1002af02
push 0
push 0x25c8
lea eax, [ebp - 0x1e4]
push eax
push 0
push 0x4df
push 0x288e
call fcn.1003c405
add esp, 0x18
jmp 0x1002acb3
jmp 0x1002ac3a
jmp 0x1002b014
mov dword [ebp - 0x120c], 3
mov dword [ebp - 0x1e4], 0
jmp 0x1002af7f
mov eax, dword [ebp - 0x1e4]
inc eax
mov dword [ebp - 0x1e4], eax
cmp dword [ebp - 0x1e4], 3
jge 0x1002afa1
push dword [ebp - 0x1e4]
lea ecx, [ebp - 0x1348]
call fcn.1000da50
mov dword [eax], 0xd4840737
jmp 0x1002af72
mov dword [ebp - 0x8c], 0
jmp 0x1002afba
mov eax, dword [ebp - 0x8c]
dec eax
mov dword [ebp - 0x8c], eax
cmp dword [ebp - 0x8c], 0xffffffe7
jle 0x1002b014
mov dword [ebp - 0x1168], 0x8e51
mov dword [ebp - 0xfdc], 0x45180735
push 0
lea eax, [ebp - 0x1348]
push eax
lea eax, [ebp - 0xfdc]
push eax
lea eax, [ebp - 0x1168]
push eax
lea eax, [ebp - 0xfe4]
push eax
lea eax, [ebp - 0x120c]
push eax
lea eax, [ebp - 0x8c]
push eax
lea eax, [ebp - 0xfec]
push eax
call fcn.100346a2
add esp, 0x20
jmp 0x1002afad
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x1348]
call fcn.1000da34
cmp dword [ebp - 0x540], 0
jle 0x10031433
mov dword [ebp - 0x228], 0xffffffff
mov dword [ebp - 0xdc], 0xcd49598a
mov dword [ebp - 0x1ec], 0xffffffff
mov dword [ebp - 0x94], 8
mov dword [ebp - 0xbfc], 0
mov dword [ebp - 0x480], 0
jmp 0x1002b07b
mov eax, dword [ebp - 0x480]
inc eax
mov dword [ebp - 0x480], eax
cmp dword [ebp - 0x480], 2
jge 0x1002b097
mov eax, dword [ebp - 0x480]
mov dword [ebp + eax*4 - 0x1a58], 0xbebb6f2b
jmp 0x1002b06e
mov eax, 0xe6f7fbf2
test eax, eax
je 0x1002b14d
mov eax, dword [ebp - 0x228]
add eax, 0xbd65
cmp eax, 0x6810
jl 0x1002b0c2
mov dword [ebp - 0xcdc], 1
jmp 0x1002b0c9
and dword [ebp - 0xcdc], 0
mov eax, dword [ebp - 0xcdc]
mov dword [ebp - 0xdc], eax
mov eax, dword [ebp - 0xdc]
imul eax, dword [ebp - 0x228]
cmp eax, 0x5befa1e1
jle 0x1002b0f5
mov dword [ebp - 0x1170], 1
jmp 0x1002b0fc
and dword [ebp - 0x1170], 0
mov eax, dword [ebp - 0x228]
mov dword [ebp - 0x1818], eax
cmp dword [ebp - 0xdc], 0x9ee491ba
jne 0x1002b120
mov dword [ebp - 0x9b8], 1
jmp 0x1002b127
and dword [ebp - 0x9b8], 0
mov eax, dword [ebp - 0x9b8]
mov dword [ebp - 0x1ec], eax
mov eax, dword [ebp - 0x1ec]
cmp dword [ebp - 0x228], eax
jle 0x1002b14d
mov dword [ebp - 0xbe4], 1
jmp 0x1002b154
and dword [ebp - 0xbe4], 0
mov eax, dword [ebp - 0x228]
cmp dword [ebp - 0xbe4], eax
jne 0x1002b16e
mov dword [ebp - 0x9c0], 1
jmp 0x1002b175
and dword [ebp - 0x9c0], 0
mov eax, dword [ebp - 0x228]
cmp eax, dword [ebp - 0x9c0]
jle 0x1002b18f
mov dword [ebp - 0xd5c], 1
jmp 0x1002b196
and dword [ebp - 0xd5c], 0
cmp dword [ebp - 0xd5c], 0xffffffff
ja 0x1002b1ab
mov dword [ebp - 0x9c8], 1
jmp 0x1002b1b2
and dword [ebp - 0x9c8], 0
imul eax, dword [ebp - 0x9c8], 0x8da8
cmp eax, 0x51fa
jl 0x1002b1cf
mov dword [ebp - 0xbec], 1
jmp 0x1002b1d6
and dword [ebp - 0xbec], 0
mov eax, dword [ebp - 0xbec]
mov dword [ebp - 0x94], eax
cmp dword [ebp - 0xdc], 0
je 0x1002b3fc
mov dword [ebp - 0x400], 0
jmp 0x1002b208
mov eax, dword [ebp - 0x400]
inc eax
mov dword [ebp - 0x400], eax
cmp dword [ebp - 0x400], 3
jge 0x1002b224
mov eax, dword [ebp - 0x400]
mov dword [ebp + eax*4 - 0xdfc], 0xd1d25bb0
jmp 0x1002b1fb
mov dword [ebp - 0xdc], 0
jmp 0x1002b23d
mov eax, dword [ebp - 0xdc]
inc eax
mov dword [ebp - 0xdc], eax
cmp dword [ebp - 0xdc], 3
jge 0x1002b259
mov eax, dword [ebp - 0xdc]
mov dword [ebp + eax*4 - 0xdfc], 0xffffffff
jmp 0x1002b230
mov dword [ebp - 0x94], 0
jmp 0x1002b272
mov eax, dword [ebp - 0x94]
inc eax
mov dword [ebp - 0x94], eax
cmp dword [ebp - 0x94], 2
jg 0x1002b3fa
mov eax, dword [ebp - 0x94]
mov ecx, dword [ebp - 0x94]
mov eax, dword [ebp + eax*4 - 0xdfc]
mov dword [ebp + ecx*4 - 0xdfc], eax
mov dword [ebp - 0x1ec], 0xfffffffc
jmp 0x1002b2b2
mov eax, dword [ebp - 0x1ec]
inc eax
mov dword [ebp - 0x1ec], eax
cmp dword [ebp - 0x1ec], 0x18
je 0x1002b3f5
mov dword [ebp - 0x9f0], 1
mov eax, 0x40b
test eax, eax
je 0x1002b2ee
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0xdfc], 0
je 0x1002b2ee
mov dword [ebp - 0x9d0], 1
jmp 0x1002b2f5
and dword [ebp - 0x9d0], 0
mov eax, dword [ebp - 0x94]
mov eax, dword [ebp + eax*4 - 0xdfc]
mov ecx, dword [ebp - 0x9d0]
lea eax, [ecx + eax + 0xb0ba]
test eax, eax
je 0x1002b323
xor eax, eax
je 0x1002b323
mov dword [ebp - 0xce4], 1
jmp 0x1002b32a
and dword [ebp - 0xce4], 0
mov eax, dword [ebp - 0x9f0]
cmp eax, dword [ebp - 0xce4]
je 0x1002b344
mov dword [ebp - 0x9d8], 1
jmp 0x1002b34b
and dword [ebp - 0x9d8], 0
push 4
pop eax
shl eax, 1
imul eax, dword [ebp + eax - 0xdfc], 9
cmp eax, dword [ebp - 0x9d8]
jne 0x1002b36c
mov dword [ebp - 0xbf4], 1
jmp 0x1002b373
and dword [ebp - 0xbf4], 0
mov eax, dword [ebp - 0x94]
mov eax, dword [ebp + eax*4 - 0xdfc]
cmp dword [ebp - 0xbf4], eax
jg 0x1002b394
mov dword [ebp - 0x9e0], 1
jmp 0x1002b39b
and dword [ebp - 0x9e0], 0
mov eax, dword [ebp - 0x94]
cmp dword [ebp - 0x9e0], eax
jg 0x1002b3b5
mov dword [ebp - 0xdac], 1
jmp 0x1002b3bc
and dword [ebp - 0xdac], 0
cmp dword [ebp - 0xdac], 0xffffffff
jne 0x1002b3d1
mov dword [ebp - 0x9e8], 1
jmp 0x1002b3d8
and dword [ebp - 0x9e8], 0
mov eax, dword [ebp - 0x9e8]
mov dword [ebp - 0xbfc], eax
mov eax, dword [ebp - 0xbfc]
mov dword [ebp - 0x9f0], eax
jmp 0x1002b2a5
jmp 0x1002b265
jmp 0x1002b41c
mov byte [ebp - 0x1a0], 0
movzx eax, byte [ebp - 0x1a0]
test eax, eax
je 0x1002b41c
push 0
push 0x28a8
call fcn.10038ca4
pop ecx
pop ecx
mov dword [ebp - 0x1f4], 0xffff
mov dword [ebp - 0xe4], 1
mov dword [ebp - 0x20c], 0
mov dword [ebp - 0xa00], 0x6b933888
mov dword [ebp - 0x278], 0xfffffff9
mov dword [ebp - 0x458], 0x77b6
mov dword [ebp - 0xff4], 0xa26c
mov dword [ebp - 0xa58], 0x21576660
push 2
lea ecx, [ebp - 0x1548]
call fcn.1000d911
mov dword [ebp - 4], 0x20
mov dword [ebp - 0x2f8], 0
jmp 0x1002b499
mov eax, dword [ebp - 0x2f8]
inc eax
mov dword [ebp - 0x2f8], eax
cmp dword [ebp - 0x2f8], 2
jge 0x1002b4b5
mov eax, dword [ebp - 0x2f8]
mov dword [ebp + eax*4 - 0x1648], 2
jmp 0x1002b48c
push 0
lea eax, [ebp - 0x2f8]
push eax
push 0x15cf
lea eax, [ebp - 0x1548]
push eax
call fcn.10038c89
add esp, 0x10
mov eax, dword [ebp - 0xe4]
cmp dword [ebp - 0xe4], eax
je 0x1002b4ec
mov dword [ebp - 0xcec], 1
jmp 0x1002b4f3
and dword [ebp - 0xcec], 0
cmp dword [ebp - 0xcec], 0
je 0x1002b508
mov dword [ebp - 0x9f8], 1
jmp 0x1002b50f
and dword [ebp - 0x9f8], 0
mov eax, dword [ebp - 0xe4]
cmp dword [ebp - 0x9f8], eax
jge 0x1002b52f
cmp dword [ebp - 0xe4], 0
jne 0x1002b52f
and dword [ebp - 0xc04], 0
jmp 0x1002b539
mov dword [ebp - 0xc04], 1
mov eax, dword [ebp - 0xe4]
imul eax, dword [ebp - 0xc04]
mov dword [ebp - 0x20c], eax
mov eax, dword [ebp - 0x20c]
mov dword [ebp - 0xa00], eax
mov eax, dword [ebp - 0xa00]
mov dword [ebp - 0x278], eax
mov eax, dword [ebp - 0xe4]
cmp dword [ebp - 0x278], eax
jg 0x1002b57e
mov dword [ebp - 0x5f8], 1
jmp 0x1002b585
and dword [ebp - 0x5f8], 0
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x5f8]
mov dword [ebp + eax - 0x1648], ecx
mov eax, dword [ebp - 0xe4]
imul eax, dword [ebp - 0x5f8]
test eax, eax
jbe 0x1002b5b5
mov dword [ebp - 0xd64], 1
jmp 0x1002b5bc
and dword [ebp - 0xd64], 0
mov dword [ebp - 0x1f4], 1
mov eax, dword [ebp - 0x1f4]
cmp eax, dword [ebp - 0xd64]
jge 0x1002b5e0
mov dword [ebp - 0xa08], 1
jmp 0x1002b5e7
and dword [ebp - 0xa08], 0
cmp dword [ebp - 0xa08], 0xa5b5
jl 0x1002b5ff
mov dword [ebp - 0xc0c], 1
jmp 0x1002b606
and dword [ebp - 0xc0c], 0
cmp dword [ebp - 0xc0c], 0xffffffff
jne 0x1002b61b
mov dword [ebp - 0xa10], 1
jmp 0x1002b622
and dword [ebp - 0xa10], 0
mov eax, dword [ebp - 0x458]
cmp dword [ebp - 0xa10], eax
jl 0x1002b63c
mov dword [ebp - 0xcf4], 1
jmp 0x1002b643
and dword [ebp - 0xcf4], 0
imul eax, dword [ebp - 0xcf4], 0x6baf
mov dword [ebp - 0xe4], eax
cmp dword [ebp - 0xe4], 0
jne 0x1002b669
xor eax, eax
jne 0x1002b669
and dword [ebp - 0xa18], 0
jmp 0x1002b673
mov dword [ebp - 0xa18], 1
mov eax, dword [ebp - 0x458]
cmp dword [ebp - 0xa18], eax
jg 0x1002b68d
mov dword [ebp - 0xa4c], 1
jmp 0x1002b694
and dword [ebp - 0xa4c], 0
mov eax, dword [ebp - 0xa4c]
sub eax, dword [ebp - 0xff4]
cmp eax, 6
jbe 0x1002b6b1
mov dword [ebp - 0xa20], 1
jmp 0x1002b6b8
and dword [ebp - 0xa20], 0
mov eax, dword [ebp - 0xa20]
sub eax, dword [ebp - 0x458]
cmp eax, dword [ebp - 0x458]
jle 0x1002b6d8
mov dword [ebp - 0x1284], 1
jmp 0x1002b6df
and dword [ebp - 0x1284], 0
or eax, 0xffffffff
jne 0x1002b6f6
cmp dword [ebp - 0x278], 0
jne 0x1002b6f6
and dword [ebp - 0xa48], 0
jmp 0x1002b700
mov dword [ebp - 0xa48], 1
mov eax, dword [ebp - 0xa48]
mov dword [ebp - 0xa58], eax
mov dword [ebp - 0x20c], 0xfffffffc
jmp 0x1002b725
mov eax, dword [ebp - 0x20c]
inc eax
mov dword [ebp - 0x20c], eax
cmp dword [ebp - 0x20c], 9
je 0x1002b89a
mov dword [ebp - 0x110], 0xffff
mov dword [ebp - 0xffc], 0xfefd6e51
push 0
push 0x3108
push 0x5975
push 0x45ec
call fcn.100315b3
add esp, 0x10
cmp dword [ebp - 0x110], 0
jne 0x1002b7bf
push 1
lea ecx, [ebp - 0x1548]
call fcn.1000da50
cmp dword [eax], 0xffffffff
jne 0x1002b7ab
mov eax, dword [ebp - 0x110]
mov dword [ebp - 0x278], eax
mov eax, dword [ebp - 0x278]
mov dword [ebp - 0x1820], eax
push 7
pop eax
test eax, eax
jne 0x1002b7ab
cmp dword [ebp - 0x110], 0
jne 0x1002b7ab
and dword [ebp - 0xa28], 0
jmp 0x1002b7b5
mov dword [ebp - 0xa28], 1
mov eax, dword [ebp - 0xa28]
neg eax
je 0x1002b810
mov dword [ebp - 0x110], 0
jmp 0x1002b7d8
mov eax, dword [ebp - 0x110]
inc eax
mov dword [ebp - 0x110], eax
cmp dword [ebp - 0x110], 0x34
jge 0x1002b7fd
mov byte [ebp - 0x18c], 0
movzx eax, byte [ebp - 0x18c]
test eax, eax
je 0x1002b7fb
push 0
call fcn.1003e13d
pop ecx
jmp 0x1002b7cb
cmp dword [ebp - 0x110], 0
je 0x1002b80b
jmp 0x1002b89a
jmp 0x1002b895
mov dword [ebp - 0x1f4], 0
jmp 0x1002b829
mov eax, dword [ebp - 0x1f4]
inc eax
mov dword [ebp - 0x1f4], eax
cmp dword [ebp - 0x1f4], 0xb
jg 0x1002b86a
mov byte [ebp - 0x1ae], 0
push 0x4fa7
push 0x2ed7
push 0x3ca1
lea eax, [ebp - 0x1ae]
push eax
push 0
push 0x2152
push 0x582b
push 0x1874
call fcn.10032737
add esp, 0x20
jmp 0x1002b81c
cmp dword [ebp - 0xa58], 0xbc59458d
jbe 0x1002b882
mov dword [ebp - 0xa30], 1
jmp 0x1002b889
and dword [ebp - 0xa30], 0
mov eax, dword [ebp - 0xa30]
mov dword [ebp - 0xffc], eax
jmp 0x1002b718
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x1548]
call fcn.1000da34
mov dword [ebp - 0xa0], 0x108f
mov dword [ebp - 0x130], 0x143e95aa
mov dword [ebp - 0x1214], 0xffffffff
mov dword [ebp - 0x1828], 0xea388845
mov dword [ebp - 0x2c0], 9
mov dword [ebp - 0x1178], 0x4a520274
mov dword [ebp - 0x280], 0
mov dword [ebp - 0x1830], 0xe01b17d7
mov dword [ebp - 0x128], 0x86e3e45b
mov dword [ebp - 0x54c], 0xfffffffe
mov dword [ebp - 0x15a0], 0xfffffffc
mov dword [ebp - 0x159c], 0xfffffffc
mov dword [ebp - 0x1598], 0xfffffffc
mov dword [ebp - 0x1594], 0xfffffffc
mov eax, dword [ebp - 0x130]
mov dword [ebp - 0x1838], eax
mov eax, dword [ebp - 0x128]
imul eax, dword [ebp - 0x1178]
mov dword [ebp - 0x1004], eax
mov eax, dword [ebp - 0x128]
inc eax
mov dword [ebp - 0x128], eax
cmp dword [ebp - 0x1004], 0x22a5bc4
je 0x1002b979
mov dword [ebp - 0xa60], 1
jmp 0x1002b980
and dword [ebp - 0xa60], 0
mov eax, dword [ebp - 0x130]
imul eax, dword [ebp - 0xa60]
neg eax
cmp eax, dword [ebp - 0x54c]
jg 0x1002b9a3
mov dword [ebp - 0xa38], 1
jmp 0x1002b9aa
and dword [ebp - 0xa38], 0
cmp dword [ebp - 0xa38], 0x63b0
jle 0x1002b9c2
mov dword [ebp - 0xa68], 1
jmp 0x1002b9c9
and dword [ebp - 0xa68], 0
mov eax, dword [ebp - 0x1214]
cmp dword [ebp - 0xa68], eax
jle 0x1002b9ec
cmp dword [ebp - 0x2c0], 0
je 0x1002b9ec
mov dword [ebp - 0xa40], 1
jmp 0x1002b9f3
and dword [ebp - 0xa40], 0
mov eax, dword [ebp - 0xa40]
inc eax
inc eax
mov dword [ebp - 0x54c], eax
je 0x1002baf3
mov dword [ebp - 0x1184], 0xcdee94cc
mov dword [ebp - 0x128], 0
jmp 0x1002ba2a
mov eax, dword [ebp - 0x128]
inc eax
mov dword [ebp - 0x128], eax
cmp dword [ebp - 0x128], 0x17
jl 0x1002bad1
push 1
lea ecx, [ebp - 0x1898]
call fcn.1000d911
mov dword [ebp - 4], 0x21
mov dword [ebp - 0x100c], 0x83e731e7
lea eax, [ebp - 0x1898]
push eax
push 1
push 0x211f
lea eax, [ebp - 0x1930]
push eax
push 0xa93
push 0
call fcn.100240e3
add esp, 0x18
mov dword [ebp - 0x280], 0
jmp 0x1002ba92
mov eax, dword [ebp - 0x280]
inc eax
mov dword [ebp - 0x280], eax
cmp dword [ebp - 0x280], 0
jg 0x1002babd
mov dword [ebp - 0xa70], 0x462a77b6
mov dword [ebp - 0xa70], 1
mov eax, dword [ebp - 0xa70]
mov dword [ebp - 0x100c], eax
jmp 0x1002ba85
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x1898]
call fcn.1000da34
jmp 0x1002ba1d
push 0x5892
push 0xf5b
push 1
lea eax, [ebp - 0x1184]
push eax
push 0
call fcn.100202b9
add esp, 0x14
jmp 0x1002bbec
mov dword [ebp - 0x358], 0
jmp 0x1002bb0c
mov eax, dword [ebp - 0x358]
inc eax
mov dword [ebp - 0x358], eax
cmp dword [ebp - 0x358], 4
jge 0x1002bb28
mov eax, dword [ebp - 0x358]
mov dword [ebp + eax*4 - 0x1aa0], 0x33bab721
jmp 0x1002baff
mov dword [ebp - 0x2c0], 0
jmp 0x1002bb41
mov eax, dword [ebp - 0x2c0]
inc eax
mov dword [ebp - 0x2c0], eax
cmp dword [ebp - 0x2c0], 0x16
je 0x1002bbcf
mov dword [ebp - 0x350], 0
jmp 0x1002bb67
mov eax, dword [ebp - 0x350]
inc eax
mov dword [ebp - 0x350], eax
cmp dword [ebp - 0x350], 3
jge 0x1002bb83
mov eax, dword [ebp - 0x350]
mov dword [ebp + eax*4 - 0x18a8], 0
jmp 0x1002bb5a
push 4
pop eax
shl eax, 1
push 4
pop ecx
shl ecx, 0
mov eax, dword [ebp + eax - 0x1aa0]
mov dword [ebp + ecx - 0x18a8], eax
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0x18a8], 0
jne 0x1002bbb7
mov dword [ebp - 0x680], 1
jmp 0x1002bbbe
and dword [ebp - 0x680], 0
mov eax, dword [ebp - 0x680]
mov dword [ebp - 0x280], eax
jmp 0x1002bb34
mov byte [ebp - 0x119], 0
push 0
push 0x13a2
lea eax, [ebp - 0x119]
push eax
call fcn.10031a5f
add esp, 0xc
mov dword [ebp - 0x130], 0
jmp 0x1002bc05
mov eax, dword [ebp - 0x130]
inc eax
mov dword [ebp - 0x130], eax
cmp dword [ebp - 0x130], 4
jge 0x1002bc21
mov eax, dword [ebp - 0x130]
mov dword [ebp + eax*4 - 0x15a0], 0xd1a0
jmp 0x1002bbf8
mov dword [ebp - 0xfb8], 0xffffffff
mov dword [ebp - 0x1c0], 0xec93cc25
mov dword [ebp - 0x6b4], 0xffffffff
mov dword [ebp - 0x554], 0xbb1e5de2
mov dword [ebp - 0x5f4], 0x890ba5fc
mov dword [ebp - 0x6ec], 0xfffffffe
mov dword [ebp - 0xb4], 0
jmp 0x1002bc76
mov eax, dword [ebp - 0xb4]
inc eax
mov dword [ebp - 0xb4], eax
cmp dword [ebp - 0xb4], 2
jge 0x1002bc92
mov eax, dword [ebp - 0xb4]
mov dword [ebp + eax*4 - 0x21c], 0x3df603fa
jmp 0x1002bc69
mov dword [ebp - 0xb4], 0
jmp 0x1002bcab
mov eax, dword [ebp - 0xb4]
inc eax
mov dword [ebp - 0xb4], eax
cmp dword [ebp - 0xb4], 3
jge 0x1002bcc7
mov eax, dword [ebp - 0xb4]
mov dword [ebp + eax*4 - 0x18b8], 0xb26d5d64
jmp 0x1002bc9e
mov byte [ebp - 0x1a9], 0
movzx eax, byte [ebp - 0x1a9]
test eax, eax
je 0x1002bce5
push 0x1b
push 0
push 0
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x21c], 0
xor eax, eax
cmp eax, 0x8376fbfc
jne 0x1002bd08
mov dword [ebp - 0x684], 1
jmp 0x1002bd0f
and dword [ebp - 0x684], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x21c]
cmp dword [ebp - 0x684], eax
jl 0x1002bd30
mov dword [ebp - 0x5c4], 1
jmp 0x1002bd37
and dword [ebp - 0x5c4], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x5c4]
mov dword [ebp + eax - 0x18b8], ecx
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x21c]
cmp dword [ebp - 0x5c4], eax
jg 0x1002bd74
cmp dword [ebp - 0x1c0], 0
je 0x1002bd74
mov dword [ebp - 0x68c], 1
jmp 0x1002bd7b
and dword [ebp - 0x68c], 0
imul eax, dword [ebp - 0x68c], 0x26d8
cmp eax, 0x3281
jg 0x1002bd98
mov dword [ebp - 0x694], 1
jmp 0x1002bd9f
and dword [ebp - 0x694], 0
mov eax, dword [ebp - 0x1c0]
cmp eax, dword [ebp - 0x694]
jge 0x1002bdb9
mov dword [ebp - 0x69c], 1
jmp 0x1002bdc0
and dword [ebp - 0x69c], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x21c]
cmp dword [ebp - 0x69c], eax
je 0x1002bde1
mov dword [ebp - 0x6a4], 1
jmp 0x1002bde8
and dword [ebp - 0x6a4], 0
mov eax, dword [ebp - 0x1c0]
cmp dword [ebp - 0x6a4], eax
jg 0x1002be02
mov dword [ebp - 0x6ac], 1
jmp 0x1002be09
and dword [ebp - 0x6ac], 0
mov eax, dword [ebp - 0x6b4]
add eax, dword [ebp - 0x6ac]
cmp eax, dword [ebp - 0x554]
je 0x1002be29
mov dword [ebp - 0x1014], 1
jmp 0x1002be30
and dword [ebp - 0x1014], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x21c]
mov dword [ebp - 0x1938], eax
mov eax, dword [ebp - 0x6b4]
mov dword [ebp - 0x1940], eax
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x21c]
mov dword [ebp - 0x1948], eax
mov eax, dword [ebp - 0x5f4]
mov dword [ebp - 0x554], eax
mov eax, dword [ebp - 0x554]
mov dword [ebp - 0x5f4], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x21c]
cmp dword [ebp - 0x5f4], eax
jg 0x1002be9b
mov dword [ebp - 0x6bc], 1
jmp 0x1002bea2
and dword [ebp - 0x6bc], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x21c]
cmp dword [ebp - 0x6bc], eax
jl 0x1002bec3
mov dword [ebp - 0x6c4], 1
jmp 0x1002beca
and dword [ebp - 0x6c4], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x21c]
cmp eax, dword [ebp - 0x6c4]
jl 0x1002beeb
mov dword [ebp - 0x6cc], 1
jmp 0x1002bef2
and dword [ebp - 0x6cc], 0
mov eax, dword [ebp - 0x1c0]
cmp dword [ebp - 0x6cc], eax
jg 0x1002bf0c
mov dword [ebp - 0x6d4], 1
jmp 0x1002bf13
and dword [ebp - 0x6d4], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x21c]
imul eax, dword [ebp - 0x6d4]
test eax, eax
jne 0x1002bf44
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x18b8], 0
jne 0x1002bf44
and dword [ebp - 0x6dc], 0
jmp 0x1002bf4e
mov dword [ebp - 0x6dc], 1
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x21c]
cmp dword [ebp - 0x6dc], eax
jg 0x1002bf6f
mov dword [ebp - 0x6e4], 1
jmp 0x1002bf76
and dword [ebp - 0x6e4], 0
mov eax, dword [ebp - 0x6e4]
sub eax, dword [ebp - 0x1c0]
mov dword [ebp - 0x6ec], eax
mov eax, dword [ebp - 0x6ec]
imul eax, dword [ebp - 0x1c0]
push 4
pop ecx
shl ecx, 0
cmp dword [ebp + ecx - 0x21c], eax
jle 0x1002bfb0
mov dword [ebp - 0x6f4], 1
jmp 0x1002bfb7
and dword [ebp - 0x6f4], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x6f4]
mov dword [ebp + eax - 0x21c], ecx
push 3
lea ecx, [ebp - 0x133c]
call fcn.1000d911
mov dword [ebp - 4], 0x22
mov dword [ebp - 0x68], 7
mov dword [ebp - 0x1024], 5
mov dword [ebp - 0x68], 0
jmp 0x1002bfff
mov eax, dword [ebp - 0x68]
dec eax
mov dword [ebp - 0x68], eax
cmp dword [ebp - 0x68], 0xffffffef
je 0x1002c437
push 4
lea ecx, [ebp - 0x1290]
call fcn.1000d911
mov byte [ebp - 4], 0x23
push 2
lea ecx, [ebp - 0x1560]
call fcn.1000d911
mov byte [ebp - 4], 0x24
mov dword [ebp - 0x1190], 0xfffffffc
mov dword [ebp - 0x1c8], 0
jmp 0x1002c04e
mov eax, dword [ebp - 0x1c8]
inc eax
mov dword [ebp - 0x1c8], eax
cmp dword [ebp - 0x1c8], 1
jge 0x1002c06a
mov eax, dword [ebp - 0x1c8]
mov dword [ebp + eax*4 - 0x138], 1
jmp 0x1002c041
lea eax, [ebp - 0x1290]
push eax
lea eax, [ebp - 0x1c8]
push eax
push 0x4136
push 0x365f
push 0x4fe3
push 1
push 0x178d
push 0
call fcn.10020107
add esp, 0x20
push 0x3643
push 0
push 0x2724
lea eax, [ebp - 0x1c8]
push eax
lea eax, [ebp - 0x1560]
push eax
call fcn.1003e6d4
add esp, 0x14
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0x138], 0x10
jmp 0x1002c0e8
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x138], 0x19
jl 0x1002c414
mov dword [ebp - 0x6fc], 1
mov dword [ebp - 0x140], 0x35dd7582
mov dword [ebp - 0x102c], 0x1cc0d681
mov eax, dword [ebp - 0x68]
mov dword [ebp - 0x6fc], eax
cmp dword [ebp - 0x6fc], 0
jne 0x1002c138
mov dword [ebp - 0x704], 1
jmp 0x1002c13f
and dword [ebp - 0x704], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x68]
sub ecx, dword [ebp - 0x704]
cmp dword [ebp + eax - 0x138], ecx
je 0x1002c163
mov dword [ebp - 0x73c], 1
jmp 0x1002c16a
and dword [ebp - 0x73c], 0
mov eax, dword [ebp - 0x68]
cmp dword [ebp - 0x68], eax
je 0x1002c17e
mov byte [ebp - 4], 0x23
lea ecx, [ebp - 0x1560]
call fcn.1000da34
mov byte [ebp - 4], 0x22
lea ecx, [ebp - 0x1290]
call fcn.1000da34
jmp 0x1002bff8
mov dword [ebp - 0x200], 0x9cee24b2
mov dword [ebp - 0x37c], 0x2db58e46
mov dword [ebp - 0x1960], 0x57ad95e1
mov dword [ebp - 0x2e0], 0xfffffffd
mov dword [ebp - 0xa8], 0xa290be4
mov dword [ebp - 0x1990], 0x1220985a
mov dword [ebp - 0x1998], 1
mov dword [ebp - 0x19a0], 0
mov dword [ebp - 0x288], 0xb0815898
mov dword [ebp - 0x19a8], 0
mov dword [ebp - 0x36c], 0
jmp 0x1002c4b4
mov eax, dword [ebp - 0x36c]
inc eax
mov dword [ebp - 0x36c], eax
cmp dword [ebp - 0x36c], 3
jge 0x1002c4d0
mov eax, dword [ebp - 0x36c]
mov dword [ebp + eax*4 - 0x1b40], 0xffffffff
jmp 0x1002c4a7
push 1
push 0x49d1
lea eax, [ebp - 0x288]
push eax
push 0x7740
push 0
call fcn.1001f647
add esp, 0x14
mov dword [ebp - 0x2e0], 0
jmp 0x1002c506
cmp dword [ebp - 0x2e0], 0x14
jle 0x1002cafe
mov dword [ebp - 0x103c], 1
mov dword [ebp - 0x1454], 0x7bf5cbf7
mov dword [ebp - 0x1450], 0x7bf5cbf7
mov dword [ebp - 0x144c], 0x7bf5cbf7
mov dword [ebp - 0x1448], 0x7bf5cbf7
lea ecx, [ebp - 0x555]
call fcn.1000da97
push eax
lea eax, [ebp - 0x1444]
push eax
lea eax, [ebp - 0x1454]
push eax
lea ecx, [ebp - 0x1a70]
call fcn.1000dbc2
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0x18c8]
call fcn.1000da0e
mov byte [ebp - 4], 0x25
mov dword [ebp - 0x374], 0
jmp 0x1002c597
cmp dword [ebp - 0x374], 3
jge 0x1002c5b3
mov eax, dword [ebp - 0x374]
mov dword [ebp + eax*4 - 0x1b64], 1
jmp 0x1002c58a
mov dword [ebp - 0x37c], 0
jmp 0x1002c5cc
mov dword [ebp - 0xfc8], 0xba8dad4f
push 1
lea ecx, [ebp - 0x660]
call fcn.1000d911
mov byte [ebp - 4], 0x26
mov dword [ebp - 0x1d8], 1
mov dword [ebp - 0xb8], 0
jmp 0x1002cb3c
cmp dword [ebp - 0xb8], 3
jge 0x1002cb58
mov eax, dword [ebp - 0xb8]
mov dword [ebp + eax*4 - 0x1578], 0xe0a8
jmp 0x1002cb2f
mov dword [ebp - 0xb8], 0
jmp 0x1002cb71
jmp 0x10031467
mov eax, dword [ebp + 0x10]
mov dword [ebp - 0x1018], eax
mov eax, dword [ebp + 0x2c]
mov dword [ebp - 0x1010], eax
push 0x3342
push 0x424
push 0
push dword [ebp - 0x1010]
push dword [ebp - 0x1018]
call fcn.1003bffa
add esp, 0x14
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
mov esp, ebp
pop ebp
ret