Function at 0x100108ae
Capabilities:
Enumerate pe sections

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x10062d77
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x98c
push esi
movzx eax, byte [ebp + 0x1c]
test eax, eax
je 0x100108f2
mov eax, dword [ebp + 0x18]
mov dword [ebp - 0x590], eax
push dword [ebp - 0x590]
push 0
call fcn.10018f4c
pop ecx
pop ecx
jmp 0x10014dbc
lea eax, [ebp + 0x14]
mov dword [ebp - 0x64c], eax
mov eax, dword [ebp + 8]
mov dword [ebp - 0x680], eax
mov eax, dword [ebp + 0x10]
mov dword [ebp - 0x654], eax
mov eax, dword [ebp + 0xc]
mov dword [ebp - 0x678], eax
mov eax, dword [ebp - 0x64c]
movzx eax, byte [eax]
test eax, eax
je 0x10014d7f
mov eax, dword [ebp - 0x654]
mov dword [ebp - 0x63c], eax
mov eax, dword [ebp - 0x678]
mov dword [ebp - 0x604], eax
mov eax, dword [ebp - 0x680]
mov dword [ebp - 0x148], eax
mov dword [ebp - 0x1a8], 0xad313dd3
mov dword [ebp - 0x134], 0
jmp 0x1001096e
mov eax, dword [ebp - 0x134]
inc eax
mov dword [ebp - 0x134], eax
cmp dword [ebp - 0x134], 1
jge 0x1001098a
mov eax, dword [ebp - 0x134]
mov dword [ebp + eax*4 - 0x550], 0xfe01bd97
jmp 0x10010961
mov dword [ebp - 0x1a8], 0xfffffff8
jmp 0x100109a3
mov eax, dword [ebp - 0x1a8]
dec eax
mov dword [ebp - 0x1a8], eax
cmp dword [ebp - 0x1a8], 0xffffffe6
jge 0x10010b26
mov dword [ebp - 0xc0], 7
mov dword [ebp - 0xc0], 0
jmp 0x100109d3
mov eax, dword [ebp - 0xc0]
inc eax
mov dword [ebp - 0xc0], eax
cmp dword [ebp - 0xc0], 0
jg 0x10010aff
mov dword [ebp - 0xdc], 0xb5a5efa2
mov dword [ebp - 0x13c], 0xa5dec4f
mov dword [ebp - 0xdc], 0
jmp 0x10010a0d
mov eax, dword [ebp - 0xdc]
dec eax
mov dword [ebp - 0xdc], eax
cmp dword [ebp - 0xdc], 0
jl 0x10010afa
mov dword [ebp - 0x698], 0xffff
mov eax, dword [ebp - 0xdc]
xor ecx, ecx
inc ecx
sub ecx, dword [ebp + eax*4 - 0x550]
mov dword [ebp - 0x13c], ecx
mov eax, dword [ebp - 0x698]
cmp dword [ebp - 0x13c], eax
jg 0x10010a66
mov eax, dword [ebp - 0xc0]
mov dword [ebp - 0x13c], eax
cmp dword [ebp - 0x13c], 0
jne 0x10010a66
and dword [ebp - 0x2b8], 0
jmp 0x10010a70
mov dword [ebp - 0x2b8], 1
mov eax, dword [ebp - 0xc0]
cmp dword [ebp - 0x2b8], eax
jle 0x10010a8a
mov dword [ebp - 0x3fc], 1
jmp 0x10010a91
and dword [ebp - 0x3fc], 0
mov eax, dword [ebp - 0xdc]
mov eax, dword [ebp + eax*4 - 0x550]
sub eax, dword [ebp - 0x3fc]
je 0x10010ace
mov byte [ebp - 0xa5], 0
movzx eax, byte [ebp - 0xa5]
test eax, eax
je 0x10010acc
push 0x6cd6
push 0
push 0x659d
call fcn.100243be
add esp, 0xc
jmp 0x10010af5
mov byte [ebp - 0xad], 0
movzx eax, byte [ebp - 0xad]
test eax, eax
je 0x10010af5
push 0x14f4
push 0x1453
push 0x2669
call dword [sym.imp.GDI32.dll_GetPixel]
jmp 0x10010a00
jmp 0x100109c6
mov byte [ebp - 0xb9], 0
push 0
push 0x79b0
lea eax, [ebp - 0xb9]
push eax
push 0x1bff
call fcn.1001f906
add esp, 0x10
jmp 0x10010996
mov eax, dword [ebp - 0x148]
mov eax, dword [eax + 4]
mov dword [ebp - 0x27c], eax
mov dword [ebp - 0x908], 0xffffffff
mov byte [ebp - 0xb0], 0
movzx eax, byte [ebp - 0xb0]
test eax, eax
je 0x10010b82
push 0x5425
push 0x3055
push 0x6965
push 0x4e39
push 0
push 0x526e
push 0x3ee7
push 1
push 1
push 0x7657
call fcn.10022a87
add esp, 0x28
mov byte [ebp - 0xb8], 0
movzx eax, byte [ebp - 0xb8]
test eax, eax
je 0x10010bb7
push 0x733e
push 0
push 0x1036
push 0x20cc
push 0x5500
push 0xbf3
call fcn.100157d2
add esp, 0x18
mov dword [ebp - 0xcc], 0xeee2
push 1
push 0
push 0x4d82
push 1
push 0x324
push 0x3055
call fcn.10015478
add esp, 0x18
mov dword [ebp - 0x258], 0x4888999d
push 1
lea ecx, [ebp - 0x6a8]
call fcn.1000ad98
and dword [ebp - 4], 0
mov dword [ebp - 0x6c], 0xb871c7bf
mov dword [ebp - 0x248], 0xe22401db
push 0x75cb
lea eax, [ebp - 0x6a8]
push eax
push 0
push 0x11d
push 0x5672
lea eax, [ebp - 0x7b8]
push eax
call fcn.1002227e
add esp, 0x18
lea eax, [ebp - 0x6c]
push eax
push 0
push 1
push 0x4883
push 0x1585
lea eax, [ebp - 0x6a8]
push eax
push 0x3bcb
push 1
call fcn.100251dd
add esp, 0x20
cmp dword [ebp - 0x6c], 0x3c4ab274
je 0x10010c6e
mov dword [ebp - 0x250], 1
jmp 0x10010c75
and dword [ebp - 0x250], 0
mov eax, dword [ebp - 0x6c]
mov dword [ebp - 0x7c0], eax
cmp dword [ebp - 0x6c], 0
jne 0x10010c9f
push 0
lea ecx, [ebp - 0x6a8]
call fcn.1000adff
cmp dword [eax], 0
jne 0x10010c9f
and dword [ebp - 0x66c], 0
jmp 0x10010ca9
mov dword [ebp - 0x66c], 1
push 0
lea ecx, [ebp - 0x6a8]
call fcn.1000adff
or eax, 0xffffffff
imul eax, eax, 0xfce6
cmp eax, 1
jbe 0x10010cd0
mov dword [ebp - 0x4f8], 1
jmp 0x10010cd7
and dword [ebp - 0x4f8], 0
mov eax, dword [ebp - 0x6c]
cmp eax, dword [ebp - 0x4f8]
je 0x10010cee
mov dword [ebp - 0x240], 1
jmp 0x10010cf5
and dword [ebp - 0x240], 0
mov eax, dword [ebp - 0x6c]
add eax, dword [ebp - 0x240]
cmp eax, 0xd133f29c
jne 0x10010d17
cmp dword [ebp - 0x6c], 0
je 0x10010d17
mov dword [ebp - 0x500], 1
jmp 0x10010d1e
and dword [ebp - 0x500], 0
mov eax, dword [ebp - 0x500]
mov dword [ebp - 0x248], eax
cmp dword [ebp - 0x248], 0
jne 0x10010d3f
mov dword [ebp - 0x508], 1
jmp 0x10010d46
and dword [ebp - 0x508], 0
mov eax, dword [ebp - 0x508]
neg eax
cmp eax, dword [ebp - 0x6c]
je 0x10010d5f
mov dword [ebp - 0x510], 1
jmp 0x10010d66
and dword [ebp - 0x510], 0
mov eax, dword [ebp - 0x250]
sub eax, dword [ebp - 0x510]
mov dword [ebp - 0x6c], eax
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x6a8]
call fcn.1000adfa
cmp dword [ebp - 0xcc], 0
je 0x10010da2
cmp dword [ebp - 0xcc], 0
je 0x10010da2
mov dword [ebp - 0x518], 1
jmp 0x10010da9
and dword [ebp - 0x518], 0
cmp dword [ebp - 0xcc], 1
jl 0x10010dbe
mov dword [ebp - 0x644], 1
jmp 0x10010dc5
and dword [ebp - 0x644], 0
mov eax, dword [ebp - 0xcc]
mov dword [ebp - 0x258], eax
mov eax, dword [ebp - 0x258]
imul eax, dword [ebp - 0x518]
mov ecx, dword [ebp - 0xcc]
add ecx, dword [ebp - 0xcc]
cmp eax, ecx
jg 0x10010dfa
mov dword [ebp - 0x260], 1
jmp 0x10010e01
and dword [ebp - 0x260], 0
cmp dword [ebp - 0x260], 0xffff
jae 0x100111c4
mov eax, 0x4ffd8143
test eax, eax
je 0x100111c4
mov dword [ebp - 0x5bc], 0xe57ad95e
mov dword [ebp - 0xfc], 6
push 0x5636
push 0x3a0b
push 1
lea eax, [ebp - 0xfc]
push eax
lea eax, [ebp - 0x5bc]
push eax
push 0x61
push 0
call fcn.10018ff5
add esp, 0x1c
mov dword [ebp - 0xfc], 0
jmp 0x10010e71
mov eax, dword [ebp - 0xfc]
dec eax
mov dword [ebp - 0xfc], eax
cmp dword [ebp - 0xfc], 0xfffffffe
jl 0x10010ead
push 0x1b02
push 0x4b3d
push 0
push 0x5928
push 1
push 0x7fed
push 0x1690
push 1
push 0x58f6
push 0x1224
call fcn.10023977
add esp, 0x28
jmp 0x10010e64
mov dword [ebp - 0x114], 0x24ec2e0c
mov byte [ebp - 0xb2], 0
movzx eax, byte [ebp - 0xb2]
test eax, eax
je 0x10010ed4
push 1
push 0
call fcn.10023503
pop ecx
pop ecx
mov dword [ebp - 0x114], 7
jmp 0x10010eed
mov eax, dword [ebp - 0x114]
dec eax
mov dword [ebp - 0x114], eax
cmp dword [ebp - 0x114], 0xffffffe9
jne 0x10010f48
mov dword [ebp - 0x5a0], 0xcda2
mov dword [ebp - 0x638], 0xffffffff
push 0x1777
push 1
push 0x540d
push 1
push 0x572d
push 0x1d5c
lea eax, [ebp - 0x5a0]
push eax
lea eax, [ebp - 0x638]
push eax
push 0
lea eax, [ebp - 0x114]
push eax
push 0x3d37
call fcn.1002652e
add esp, 0x2c
jmp 0x10010ee0
mov byte [ebp - 0xb6], 0
mov dword [ebp - 0x270], 0xffffffff
mov dword [ebp - 0x7c8], 0
mov dword [ebp - 0x5b0], 0x3b3152c5
mov dword [ebp - 0x520], 0xa77c8748
mov dword [ebp - 0x640], 0xfffffffd
mov dword [ebp - 0x7d0], 4
mov dword [ebp - 0x7d8], 0
mov dword [ebp - 0x80c], 0x369
mov dword [ebp - 0x1d8], 0xfffffff6
mov dword [ebp - 0x528], 0
mov dword [ebp - 0x1c8], 0
jmp 0x10010fcc
mov eax, dword [ebp - 0x1c8]
inc eax
mov dword [ebp - 0x1c8], eax
cmp dword [ebp - 0x1c8], 1
jge 0x10010fe8
mov eax, dword [ebp - 0x1c8]
mov dword [ebp + eax*4 - 0x814], 0xffffffff
jmp 0x10010fbf
mov eax, dword [ebp - 0x520]
cmp dword [ebp - 0x520], eax
jge 0x10011002
mov dword [ebp - 0x268], 1
jmp 0x10011009
and dword [ebp - 0x268], 0
mov eax, dword [ebp - 0x270]
cmp eax, dword [ebp - 0x268]
jl 0x10011023
mov dword [ebp - 0x5a8], 1
jmp 0x1001102a
and dword [ebp - 0x5a8], 0
mov dword [ebp - 0x528], 0
mov eax, dword [ebp - 0x528]
cmp dword [ebp - 0x270], eax
jne 0x1001104e
mov dword [ebp - 0x690], 1
jmp 0x10011055
and dword [ebp - 0x690], 0
mov eax, dword [ebp - 0x1d8]
inc eax
mov dword [ebp - 0x1d8], eax
mov eax, dword [ebp - 0x1d8]
mov dword [ebp - 0x81c], eax
mov eax, dword [ebp - 0x5b0]
mov dword [ebp - 0x640], eax
movzx eax, byte [ebp - 0xb6]
test eax, eax
je 0x100111bf
mov dword [ebp - 0x538], 0xcbad86e5
mov dword [ebp - 0x530], 0xc23afc37
mov dword [ebp - 0x278], 0x56718e50
mov dword [ebp - 0x280], 0xfffffffc
mov dword [ebp - 0x540], 0xfffffff7
mov dword [ebp - 0x5b8], 0xf12afbc
push 1
lea ecx, [ebp - 0x78c]
call fcn.1000ad98
mov dword [ebp - 4], 1
mov dword [ebp - 0x144], 0
jmp 0x100110f2
mov eax, dword [ebp - 0x144]
inc eax
mov dword [ebp - 0x144], eax
cmp dword [ebp - 0x144], 1
jge 0x10011114
push dword [ebp - 0x144]
lea ecx, [ebp - 0x78c]
call fcn.1000adff
mov dword [eax], 0xfffffffc
jmp 0x100110e5
lea eax, [ebp - 0x530]
push eax
push 0
lea eax, [ebp - 0x540]
push eax
lea eax, [ebp - 0x538]
push eax
lea eax, [ebp - 0x280]
push eax
push 0x13c7
lea eax, [ebp - 0x278]
push eax
push 0x648c
call fcn.10016298
add esp, 0x20
push 0x6bf5
lea eax, [ebp - 0x5b8]
push eax
push 0
lea eax, [ebp - 0x530]
push eax
push 0x446b
lea eax, [ebp - 0x78c]
push eax
lea eax, [ebp - 0x278]
push eax
push 0x1b7d
lea eax, [ebp - 0x538]
push eax
lea eax, [ebp - 0x280]
push eax
lea eax, [ebp - 0x540]
push eax
push 1
call fcn.10021df5
add esp, 0x30
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x78c]
call fcn.1000adfa
push 0xf13
push 0x670
push 0
push 0x5480
call fcn.10015428
add esp, 0x10
jmp 0x100120ec
mov dword [ebp - 0x10], 0xce456251
mov dword [ebp - 0xec], 0xc56d20a2
mov dword [ebp - 0x154], 0x5291
mov dword [ebp - 0x19c], 0x8b3d385e
mov dword [ebp - 0x14c], 0x4f86fc33
mov dword [ebp - 0x1e0], 0xffffffff
mov dword [ebp - 0x4c], 0
mov dword [ebp - 0x5d0], 4
mov dword [ebp - 0x188], 0
jmp 0x10011227
mov eax, dword [ebp - 0x188]
inc eax
mov dword [ebp - 0x188], eax
cmp dword [ebp - 0x188], 2
jge 0x10011243
mov eax, dword [ebp - 0x188]
mov dword [ebp + eax*4 - 0x574], 0x828e8bf3
jmp 0x1001121a
push 7
pop eax
test eax, eax
je 0x100113f7
cmp dword [ebp - 0x10], 0
jne 0x100112a6
mov eax, dword [ebp - 0x10]
mov dword [ebp - 0x824], eax
cmp dword [ebp - 0x10], 0
mov eax, dword [ebp - 0x10]
mov dword [ebp - 0x82c], eax
mov eax, dword [ebp - 0x10]
mov dword [ebp - 0x834], eax
cmp dword [ebp - 0x10], 0
jne 0x10011288
cmp dword [ebp - 0x10], 0
jne 0x10011288
and dword [ebp - 0x548], 0
jmp 0x10011292
mov dword [ebp - 0x548], 1
mov eax, dword [ebp - 0x10]
cmp dword [ebp - 0x548], eax
jl 0x100112a6
and dword [ebp - 0x28c], 0
jmp 0x100112b0
mov dword [ebp - 0x28c], 1
mov eax, dword [ebp - 0x10]
add eax, dword [ebp - 0x28c]
je 0x100112cd
cmp dword [ebp - 0x10], 0
je 0x100112cd
mov dword [ebp - 0x514], 1
jmp 0x100112d4
and dword [ebp - 0x514], 0
mov eax, dword [ebp - 0x10]
cmp dword [ebp - 0x514], eax
jne 0x100112f1
cmp dword [ebp - 0x10], 0
je 0x100112f1
mov dword [ebp - 0x294], 1
jmp 0x100112f8
and dword [ebp - 0x294], 0
mov eax, dword [ebp - 0x10]
cmp dword [ebp - 0x294], eax
jle 0x1001130f
mov dword [ebp - 0x404], 1
jmp 0x10011316
and dword [ebp - 0x404], 0
mov eax, dword [ebp - 0x10]
cmp dword [ebp - 0x404], eax
jl 0x10011333
cmp dword [ebp - 0xec], 0
jne 0x10011333
and dword [ebp - 0x29c], 0
jmp 0x1001133d
mov dword [ebp - 0x29c], 1
mov eax, dword [ebp - 0x29c]
sub eax, dword [ebp - 0x10]
cmp eax, dword [ebp - 0xec]
jle 0x1001135a
mov dword [ebp - 0x4bc], 1
jmp 0x10011361
and dword [ebp - 0x4bc], 0
mov eax, dword [ebp - 0x10]
sub eax, dword [ebp - 0x4bc]
jne 0x1001137e
cmp dword [ebp - 0xec], 0
jne 0x1001137e
and dword [ebp - 0x2a4], 0
jmp 0x10011388
mov dword [ebp - 0x2a4], 1
mov eax, dword [ebp - 0x154]
imul eax, dword [ebp - 0x2a4]
test eax, eax
jne 0x100113ab
cmp dword [ebp - 0xec], 0
jne 0x100113ab
and dword [ebp - 0x40c], 0
jmp 0x100113b5
mov dword [ebp - 0x40c], 1
mov eax, dword [ebp - 0x154]
cmp dword [ebp - 0x40c], eax
jge 0x100113cf
mov dword [ebp - 0x2ac], 1
jmp 0x100113d6
and dword [ebp - 0x2ac], 0
mov eax, dword [ebp - 0x2ac]
mov dword [ebp - 0x19c], eax
cmp dword [ebp - 0x19c], 0
je 0x100113f7
mov dword [ebp - 0x68c], 1
jmp 0x100113fe
and dword [ebp - 0x68c], 0
mov eax, dword [ebp - 0x10]
mov dword [ebp - 0x83c], eax
mov eax, 0xfffc
sub eax, dword [ebp - 0xec]
cmp eax, dword [ebp - 0x14c]
jle 0x10011776
mov dword [ebp - 0x194], 3
mov dword [ebp - 0x15c], 0
mov dword [ebp - 0x84], 0x7b4ad293
mov dword [ebp - 0x4cc], 0xffffffff
cmp dword [ebp - 0xec], 0
je 0x100115bd
cmp dword [ebp - 0x154], 0x29f1
je 0x1001146e
cmp dword [ebp - 0x10], 0
jne 0x1001146e
and dword [ebp - 0x544], 0
jmp 0x10011478
mov dword [ebp - 0x544], 1
mov eax, dword [ebp - 0x194]
mov dword [ebp - 0x5c0], eax
mov eax, dword [ebp - 0x544]
neg eax
mov dword [ebp - 0x648], eax
mov eax, dword [ebp - 0x194]
inc eax
mov dword [ebp - 0x194], eax
mov eax, dword [ebp - 0x5c0]
cmp eax, dword [ebp - 0x648]
je 0x100114b9
mov dword [ebp - 0x2b4], 1
jmp 0x100114c0
and dword [ebp - 0x2b4], 0
mov eax, dword [ebp - 0x2b4]
mov dword [ebp - 0x15c], eax
imul eax, dword [ebp - 0x15c], 0xb9ef
cmp eax, dword [ebp - 0x84]
jl 0x100114ea
mov dword [ebp - 0x414], 1
jmp 0x100114f1
and dword [ebp - 0x414], 0
mov eax, dword [ebp - 0x14c]
cmp eax, dword [ebp - 0x414]
je 0x1001150b
mov dword [ebp - 0x2bc], 1
jmp 0x10011512
and dword [ebp - 0x2bc], 0
mov eax, dword [ebp - 0x2bc]
mov dword [ebp - 0x14c], eax
mov eax, dword [ebp - 0x14c]
cmp dword [ebp - 0x19c], eax
jge 0x10011538
mov dword [ebp - 0x4c4], 1
jmp 0x1001153f
and dword [ebp - 0x4c4], 0
mov eax, dword [ebp - 0x4c4]
neg eax
jne 0x1001155b
cmp dword [ebp - 0x194], 0
jne 0x1001155b
and dword [ebp - 0x2c4], 0
jmp 0x10011565
mov dword [ebp - 0x2c4], 1
mov eax, dword [ebp - 0x10]
cmp dword [ebp - 0x2c4], eax
jg 0x1001157c
mov dword [ebp - 0x41c], 1
jmp 0x10011583
and dword [ebp - 0x41c], 0
mov eax, dword [ebp - 0x84]
cmp dword [ebp - 0x41c], eax
jg 0x1001159d
mov dword [ebp - 0x2cc], 1
jmp 0x100115a4
and dword [ebp - 0x2cc], 0
mov eax, dword [ebp - 0x2cc]
sub eax, 0x28dfe901
je 0x100115bd
mov dword [ebp - 0x51c], 1
jmp 0x100115c4
and dword [ebp - 0x51c], 0
mov eax, dword [ebp - 0x1e0]
cmp dword [ebp - 0x51c], eax
jg 0x100115e4
cmp dword [ebp - 0x154], 0
jne 0x100115e4
and dword [ebp - 0x2d4], 0
jmp 0x100115ee
mov dword [ebp - 0x2d4], 1
mov eax, dword [ebp - 0x84]
cmp dword [ebp - 0x2d4], eax
jl 0x10011608
mov dword [ebp - 0x424], 1
jmp 0x1001160f
and dword [ebp - 0x424], 0
mov eax, dword [ebp - 0x19c]
mov ecx, dword [ebp - 0x424]
lea eax, [ecx + eax + 1]
sub eax, dword [ebp - 0x84]
imul eax, dword [ebp - 0x4c]
mov dword [ebp - 0x1e0], eax
mov dword [ebp - 0x4c], 0
jmp 0x1001163f
mov eax, dword [ebp - 0x4c]
inc eax
mov dword [ebp - 0x4c], eax
cmp dword [ebp - 0x4c], 1
jg 0x10011774
mov dword [ebp - 0x5c8], 0x3ae4374f
push 1
lea ecx, [ebp - 0x708]
call fcn.1000ad98
mov dword [ebp - 4], 2
push 0x6bc4
lea eax, [ebp - 0x708]
push eax
push 1
push 0x7180
push 0
push 0x7b27
lea eax, [ebp - 0x844]
push eax
call fcn.100174ee
add esp, 0x1c
mov eax, dword [ebp - 0x4c]
mov eax, dword [ebp + eax*4 - 0x574]
mov dword [ebp - 0x2dc], eax
mov eax, dword [ebp - 0x4c]
mov ecx, dword [ebp - 0x2dc]
mov dword [ebp + eax*4 - 0x574], ecx
mov eax, dword [ebp - 0x4c]
mov eax, dword [ebp + eax*4 - 0x574]
mov dword [ebp - 0x84c], eax
mov dword [ebp - 0x84], 0
mov eax, dword [ebp - 0x84]
mov ecx, dword [ebp - 0x4c]
sub eax, dword [ebp + ecx*4 - 0x574]
cmp eax, dword [ebp - 0x5c8]
jg 0x100116ee
mov dword [ebp - 0x6ac], 1
jmp 0x100116f5
and dword [ebp - 0x6ac], 0
mov eax, dword [ebp - 0x84]
mov dword [ebp - 0x854], eax
imul eax, dword [ebp - 0x4cc], 0
test eax, eax
jne 0x10011715
cmp dword [ebp - 0x4cc], 0
je 0x1001172a
cmp dword [ebp - 0x15c], 0
je 0x1001172a
mov dword [ebp - 0x2e4], 1
jmp 0x10011731
and dword [ebp - 0x2e4], 0
mov eax, dword [ebp - 0x2e4]
mov dword [ebp - 0x15c], eax
push 0
lea ecx, [ebp - 0x708]
call fcn.1000adff
cmp dword [eax], 0
je 0x10011760
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x708]
call fcn.1000adfa
jmp 0x10011774
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x708]
call fcn.1000adfa
jmp 0x10011638
jmp 0x100117b7
mov dword [ebp - 0x650], 1
push 0x6b1f
push 0x6f3d
lea eax, [ebp - 0x1e0]
push eax
push 0x2a4d
lea eax, [ebp - 0x5d0]
push eax
push 0
lea eax, [ebp - 0x4c]
push eax
push 0x38c6
lea eax, [ebp - 0x650]
push eax
call fcn.10016264
add esp, 0x24
mov dword [ebp - 0x78], 0xfffffffc
mov dword [ebp - 0x434], 0xfffffff6
mov dword [ebp - 0x164], 0x6eff3de0
mov dword [ebp - 0x2f4], 0xffffffff
mov dword [ebp - 0x1a4], 0
jmp 0x100117f5
mov eax, dword [ebp - 0x1a4]
inc eax
mov dword [ebp - 0x1a4], eax
cmp dword [ebp - 0x1a4], 4
jge 0x10011811
mov eax, dword [ebp - 0x1a4]
mov dword [ebp + eax*4 - 0x8fc], 0xc85f70ad
jmp 0x100117e8
mov dword [ebp - 0x78], 0
jmp 0x10011821
mov eax, dword [ebp - 0x78]
inc eax
mov dword [ebp - 0x78], eax
cmp dword [ebp - 0x78], 3
jg 0x10011942
mov dword [ebp - 0x43c], 0xe6d058a8
mov eax, dword [ebp - 0x164]
dec eax
mov dword [ebp - 0x164], eax
mov eax, dword [ebp - 0x78]
imul ecx, dword [ebp - 0x78], 0xffffffff
cmp dword [ebp + eax*4 - 0x8fc], ecx
jl 0x1001185e
mov dword [ebp - 0x42c], 1
jmp 0x10011865
and dword [ebp - 0x42c], 0
mov eax, dword [ebp - 0x164]
imul eax, dword [ebp - 0x42c]
cmp eax, dword [ebp - 0x2f4]
jle 0x10011886
mov dword [ebp - 0x2ec], 1
jmp 0x1001188d
and dword [ebp - 0x2ec], 0
imul eax, dword [ebp - 0x2ec], 0xfffffffc
mov ecx, dword [ebp - 0x78]
cmp eax, dword [ebp + ecx*4 - 0x8fc]
jge 0x100118ac
mov dword [ebp - 0x560], 1
jmp 0x100118b3
and dword [ebp - 0x560], 0
mov eax, dword [ebp - 0x560]
mov dword [ebp - 0x434], eax
mov eax, dword [ebp - 0x2f4]
cmp dword [ebp - 0x434], eax
jl 0x100118d9
mov dword [ebp - 0x2fc], 1
jmp 0x100118e0
and dword [ebp - 0x2fc], 0
mov eax, dword [ebp - 0x43c]
cmp dword [ebp - 0x2fc], eax
jl 0x100118fa
mov dword [ebp - 0x4d4], 1
jmp 0x10011901
and dword [ebp - 0x4d4], 0
imul eax, dword [ebp - 0x4d4], 0xccd2
mov ecx, dword [ebp - 0x78]
mov dword [ebp + ecx*4 - 0x8fc], eax
cmp dword [ebp - 0x164], 7
jbe 0x1001192a
mov dword [ebp - 0x304], 1
jmp 0x10011931
and dword [ebp - 0x304], 0
mov eax, dword [ebp - 0x304]
mov dword [ebp - 0x43c], eax
jmp 0x1001181a
mov byte [ebp - 0x7e], 0
mov dword [ebp - 0x16c], 1
mov dword [ebp - 0x85c], 9
mov dword [ebp - 0x5e0], 0xfffffffb
mov dword [ebp - 0x444], 0
mov dword [ebp - 0x220], 2
mov dword [ebp - 0x104], 7
mov dword [ebp - 0x5d8], 0xa0d461e3
mov dword [ebp - 0x1ac], 0
jmp 0x100119a5
mov eax, dword [ebp - 0x1ac]
inc eax
mov dword [ebp - 0x1ac], eax
cmp dword [ebp - 0x1ac], 2
jge 0x100119c1
mov eax, dword [ebp - 0x1ac]
mov dword [ebp + eax*4 - 0x71c], 6
jmp 0x10011998
mov eax, dword [ebp - 0x16c]
cmp dword [ebp - 0x16c], eax
jl 0x100119db
mov dword [ebp - 0x524], 1
jmp 0x100119e2
and dword [ebp - 0x524], 0
mov eax, dword [ebp - 0x104]
inc eax
mov dword [ebp - 0x104], eax
mov eax, dword [ebp - 0x16c]
sub eax, dword [ebp - 0x5d8]
je 0x10011a19
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x71c], 0
je 0x10011a19
mov dword [ebp - 0x30c], 1
jmp 0x10011a20
and dword [ebp - 0x30c], 0
cmp dword [ebp - 0x30c], 0xfffffffd
je 0x10011a35
mov dword [ebp - 0x314], 1
jmp 0x10011a3c
and dword [ebp - 0x314], 0
mov eax, dword [ebp - 0x524]
add eax, dword [ebp - 0x314]
mov dword [ebp - 0x444], eax
je 0x10011a7f
mov dword [ebp - 0x31c], 0
mov dword [ebp - 0x694], 0xb66febfb
mov dword [ebp - 0x31c], 0xc3a065c2
mov eax, dword [ebp - 0x31c]
mov dword [ebp - 0x694], eax
jmp 0x10011bf8
mov dword [ebp - 0x4dc], 0xc79ebef9
mov dword [ebp - 0x1b4], 0x5f402be2
mov eax, dword [ebp - 0x16c]
mov dword [ebp - 0x864], eax
mov dword [ebp - 0x4dc], 0xef8169c1
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x71c]
cmp dword [ebp - 0x4dc], eax
jg 0x10011aca
mov dword [ebp - 0x324], 1
jmp 0x10011ad1
and dword [ebp - 0x324], 0
mov eax, dword [ebp - 0x104]
imul eax, dword [ebp - 0x324]
cmp eax, dword [ebp - 0x1b4]
jle 0x10011af2
mov dword [ebp - 0x44c], 1
jmp 0x10011af9
and dword [ebp - 0x44c], 0
mov eax, dword [ebp - 0x5e0]
add eax, 9
sub eax, dword [ebp - 0x44c]
sub eax, dword [ebp - 0x1b4]
je 0x10011b17
cmp dword [ebp - 0x220], 0
cmp dword [ebp - 0x104], 1
ja 0x10011b2c
mov dword [ebp - 0x32c], 1
jmp 0x10011b33
and dword [ebp - 0x32c], 0
cmp dword [ebp - 0x32c], 0x525
jl 0x10011b4b
mov dword [ebp - 0x54c], 1
jmp 0x10011b52
and dword [ebp - 0x54c], 0
cmp dword [ebp - 0x54c], 0xbb7a
jg 0x10011b6a
mov dword [ebp - 0x334], 1
jmp 0x10011b71
and dword [ebp - 0x334], 0
imul eax, dword [ebp - 0x334], 0
mov ecx, 0xfffe
sub ecx, eax
cmp ecx, 0xfffffffd
jl 0x10011b90
mov dword [ebp - 0x454], 1
jmp 0x10011b97
and dword [ebp - 0x454], 0
mov eax, dword [ebp - 0x454]
mov dword [ebp - 0x1b4], eax
mov eax, dword [ebp - 0x1b4]
sub eax, 0xfffb
cmp eax, dword [ebp - 0x220]
jle 0x10011bc2
mov dword [ebp - 0x33c], 1
jmp 0x10011bc9
and dword [ebp - 0x33c], 0
mov eax, dword [ebp - 0x104]
cmp dword [ebp - 0x33c], eax
jl 0x10011be3
mov dword [ebp - 0x4e4], 1
jmp 0x10011bea
and dword [ebp - 0x4e4], 0
mov eax, dword [ebp - 0x4e4]
neg eax
mov dword [ebp - 0x220], eax
movzx eax, byte [ebp - 0x7e]
test eax, eax
je 0x100120ec
push 3
lea ecx, [ebp - 0x8c4]
call fcn.1000ad98
mov dword [ebp - 4], 3
push 1
lea ecx, [ebp - 0x6b8]
call fcn.1000ad98
mov byte [ebp - 4], 4
mov dword [ebp - 0x86c], 1
mov dword [ebp - 0x874], 0
mov dword [ebp - 0x87c], 0
mov dword [ebp - 0x884], 0x45c17473
mov dword [ebp - 0x88c], 0xfffffff9
mov dword [ebp - 0x894], 1
mov dword [ebp - 0x89c], 0x9cf7
mov dword [ebp - 0x14], 0
jmp 0x10011c7f
mov eax, dword [ebp - 0x14]
inc eax
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 3
jge 0x10011c9b
push dword [ebp - 0x14]
lea ecx, [ebp - 0x8c4]
call fcn.1000adff
mov dword [eax], 0xb3c692be
jmp 0x10011c78
mov dword [ebp - 0x14], 0
jmp 0x10011cab
mov eax, dword [ebp - 0x14]
inc eax
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 1
jge 0x10011cc7
push dword [ebp - 0x14]
lea ecx, [ebp - 0x6b8]
call fcn.1000adff
mov dword [eax], 0xb457102d
jmp 0x10011ca4
mov dword [ebp - 0x658], 0x1b93
cmp dword [ebp - 0x658], 0xb72
jge 0x10011ed9
lea eax, [ebp - 0x1e8]
push eax
push 0x10007754
call fcn.10049deb
pop ecx
pop ecx
mov eax, dword [ebp - 0x1e8]
mov dword [ebp - 0x5e8], eax
mov eax, dword [ebp - 0x1e8]
dec eax
mov dword [ebp - 0x1e8], eax
cmp dword [ebp - 0x5e8], 0
je 0x10011ed9
lea eax, [ebp - 0x1c]
push eax
lea eax, [ebp - 0x40]
push eax
lea eax, [ebp - 0x8c]
push eax
lea eax, [ebp - 0x74]
push eax
push 0x100078a8
call fcn.10049deb
add esp, 0x14
mov eax, dword [ebp - 0x74]
dec eax
mov dword [ebp - 0x74], eax
mov eax, dword [ebp - 0x8c]
dec eax
mov dword [ebp - 0x8c], eax
mov eax, dword [ebp - 0x40]
dec eax
mov dword [ebp - 0x40], eax
or dword [ebp - 0xf4], 0xffffffff
mov eax, dword [ebp - 0x40]
sub eax, dword [ebp - 0x8c]
mov dword [ebp - 0xd4], eax
cmp dword [ebp - 0xd4], 0
jle 0x10011d82
mov eax, dword [ebp - 0xd4]
mov dword [ebp - 0x344], eax
jmp 0x10011d90
mov eax, dword [ebp - 0xd4]
neg eax
mov dword [ebp - 0x344], eax
mov eax, dword [ebp - 0x344]
mov dword [ebp - 0xd4], eax
mov eax, dword [ebp - 0xd4]
cdq
idiv dword [ebp - 0x1c]
test edx, edx
jne 0x10011dbf
mov eax, dword [ebp - 0xd4]
cdq
idiv dword [ebp - 0x1c]
mov dword [ebp - 0xf4], eax
jmp 0x10011ec2
mov eax, dword [ebp - 0x74]
cdq
idiv dword [ebp - 0x1c]
test edx, edx
jne 0x10011e5d
mov eax, dword [ebp - 0x40]
cdq
idiv dword [ebp - 0x1c]
test edx, edx
jne 0x10011e5d
mov eax, dword [ebp - 0x40]
cdq
idiv dword [ebp - 0x1c]
mov ecx, eax
mov eax, dword [ebp - 0x1c]
mov edx, dword [ebp - 0x8c]
lea eax, [edx + eax - 1]
cdq
idiv dword [ebp - 0x1c]
add ecx, eax
mov dword [ebp - 0x45c], ecx
mov eax, dword [ebp - 0x74]
sub eax, dword [ebp - 0x8c]
mov ecx, dword [ebp - 0x1c]
lea eax, [eax + ecx - 1]
cdq
idiv dword [ebp - 0x1c]
mov ecx, eax
mov eax, dword [ebp - 0x74]
sub eax, dword [ebp - 0x40]
cdq
idiv dword [ebp - 0x1c]
add ecx, eax
mov dword [ebp - 0x34c], ecx
mov eax, dword [ebp - 0x45c]
cmp eax, dword [ebp - 0x34c]
jge 0x10011e43
mov eax, dword [ebp - 0x45c]
mov dword [ebp - 0x52c], eax
jmp 0x10011e4f
mov eax, dword [ebp - 0x34c]
mov dword [ebp - 0x52c], eax
mov eax, dword [ebp - 0x52c]
mov dword [ebp - 0xf4], eax
jmp 0x10011ec2
mov eax, dword [ebp - 0x40]
cdq
idiv dword [ebp - 0x1c]
test edx, edx
jne 0x10011e8c
mov eax, dword [ebp - 0x40]
cdq
idiv dword [ebp - 0x1c]
mov ecx, eax
mov eax, dword [ebp - 0x1c]
mov edx, dword [ebp - 0x8c]
lea eax, [edx + eax - 1]
cdq
idiv dword [ebp - 0x1c]
add ecx, eax
mov dword [ebp - 0xf4], ecx
jmp 0x10011ec2
mov eax, dword [ebp - 0x74]
sub eax, dword [ebp - 0x40]
cdq
idiv dword [ebp - 0x1c]
test edx, edx
jne 0x10011ec2
mov eax, dword [ebp - 0x74]
sub eax, dword [ebp - 0x8c]
mov ecx, dword [ebp - 0x1c]
lea eax, [eax + ecx - 1]
cdq
idiv dword [ebp - 0x1c]
mov ecx, eax
mov eax, dword [ebp - 0x74]
sub eax, dword [ebp - 0x40]
cdq
idiv dword [ebp - 0x1c]
add ecx, eax
mov dword [ebp - 0xf4], ecx
push dword [ebp - 0xf4]
push 0x10007778
call fcn.1004a17c
pop ecx
pop ecx
jmp 0x10011cf4
mov dword [ebp - 0x14], 0
jmp 0x10011ee9
mov eax, dword [ebp - 0x14]
inc eax
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 2
jge 0x10011eff
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x930], 0xffffffff
jmp 0x10011ee2
mov dword [ebp - 0x14], 0
jmp 0x10011f0f
mov eax, dword [ebp - 0x14]
inc eax
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 2
jge 0x10011f25
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x724], 0xf8f9
jmp 0x10011f08
push 0
lea ecx, [ebp - 0x6b8]
call fcn.1000adff
and dword [eax], 0
jmp 0x10011f5b
push 0
lea ecx, [ebp - 0x6b8]
call fcn.1000adff
mov dword [ebp - 0x354], eax
mov eax, dword [ebp - 0x354]
mov eax, dword [eax]
inc eax
mov ecx, dword [ebp - 0x354]
mov dword [ecx], eax
push 0
lea ecx, [ebp - 0x6b8]
call fcn.1000adff
cmp dword [eax], 2
jg 0x100120a2
mov dword [ebp - 0x1bc], 0x3c633843
push 3
lea ecx, [ebp - 0x8b4]
call fcn.1000ad98
mov byte [ebp - 4], 5
mov dword [ebp - 0x174], 0
jmp 0x10011fa5
mov eax, dword [ebp - 0x174]
inc eax
mov dword [ebp - 0x174], eax
cmp dword [ebp - 0x174], 3
jge 0x10011fc7
push dword [ebp - 0x174]
lea ecx, [ebp - 0x8b4]
call fcn.1000adff
mov dword [eax], 0x689a5a40
jmp 0x10011f98
mov byte [ebp - 0xae], 0
push 1
push 0
push 0x5025
push 0x24d3
lea eax, [ebp - 0xae]
push eax
push 1
push 0x6b00
push 0x4ebc
call fcn.10017118
add esp, 0x20
mov dword [ebp - 0x1bc], 2
jmp 0x10012010
mov eax, dword [ebp - 0x1bc]
dec eax
mov dword [ebp - 0x1bc], eax
cmp dword [ebp - 0x1bc], 0
jl 0x1001208e
mov dword [ebp - 0x8a4], 0xfffffff9
mov dword [ebp - 0x7a8], 0x2b483718
mov dword [ebp - 0x910], 0xd81479b6
mov dword [ebp - 0x7f0], 1
mov dword [ebp - 0x8e8], 0
mov dword [ebp - 0x7b4], 0x20a6ff60
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x724]
inc eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x724], eax
push 0x3aea
push 0
push 0x2437
push 0x58a6
call fcn.1001673f
add esp, 0x10
jmp 0x10012003
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x8b4]
call fcn.1000adfa
jmp 0x10011f37
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x6b8]
call fcn.1000adfa
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x8c4]
call fcn.1000adfa
push 0xab0
push 0
push 0x67bc
push 0x56a9
push 0x27c1
push 1
push 0x258e
push 0x5276
push 1
call fcn.100268f4
add esp, 0x24
mov dword [ebp - 0xe4], 0x6847
mov eax, dword [ebp - 0xe4]
inc eax
mov dword [ebp - 0xe4], eax
mov dword [ebp - 0xe4], 0
jmp 0x1001211c
mov eax, dword [ebp - 0xe4]
inc eax
mov dword [ebp - 0xe4], eax
cmp dword [ebp - 0xe4], 0xd
jl 0x10012147
mov byte [ebp - 0x85], 0
movzx eax, byte [ebp - 0x85]
test eax, eax
je 0x10012145
push 0x7c1d
push 0
call fcn.1001769f
pop ecx
pop ecx
jmp 0x1001210f
mov dword [ebp - 0x124], 0x2a43d953
mov dword [ebp - 0xc4], 0x746e33a7
push 4
lea ecx, [ebp - 0x7a4]
call fcn.1000ad98
mov dword [ebp - 4], 6
mov dword [ebp - 0x4f4], 0x570e81de
mov dword [ebp - 0x6d4], 0xd1d8475
push 0
lea eax, [ebp - 0x7a4]
push eax
push 0x6491
push 1
push 0x7b98
lea eax, [ebp - 0x860]
push eax
call fcn.10015d39
add esp, 0x18
mov byte [ebp - 0xb1], 0
movzx eax, byte [ebp - 0xb1]
test eax, eax
je 0x100121cd
push 0xbd6
push 0xc35
push 0
call fcn.10022460
add esp, 0xc
cmp dword [ebp - 0x124], 0
jne 0x1001238b
mov eax, dword [ebp - 0x124]
cmp dword [ebp - 0x124], eax
jne 0x100121f4
mov dword [ebp - 0x464], 1
jmp 0x100121fb
and dword [ebp - 0x464], 0
cmp dword [ebp - 0x464], 1
jle 0x10012210
mov dword [ebp - 0x35c], 1
jmp 0x10012217
and dword [ebp - 0x35c], 0
cmp dword [ebp - 0x35c], 0xd5f8d9a2
jb 0x1001222f
mov dword [ebp - 0x4ec], 1
jmp 0x10012236
and dword [ebp - 0x4ec], 0
mov eax, dword [ebp - 0xc4]
cmp dword [ebp - 0x4ec], eax
jg 0x10012250
mov dword [ebp - 0x364], 1
jmp 0x10012257
and dword [ebp - 0x364], 0
mov eax, dword [ebp - 0x364]
sub eax, dword [ebp - 0xc4]
je 0x10012275
xor eax, eax
je 0x10012275
mov dword [ebp - 0x46c], 1
jmp 0x1001227c
and dword [ebp - 0x46c], 0
mov eax, dword [ebp - 0xc4]
cmp dword [ebp - 0x46c], eax
jle 0x10012296
mov dword [ebp - 0x208], 1
jmp 0x1001229d
and dword [ebp - 0x208], 0
push 2
lea ecx, [ebp - 0x7a4]
call fcn.1000adff
mov ecx, dword [ebp - 0x208]
mov dword [eax], ecx
cmp dword [ebp - 0x208], 0
je 0x100122d0
cmp dword [ebp - 0xc4], 0
je 0x100122d0
mov dword [ebp - 0x36c], 1
jmp 0x100122d7
and dword [ebp - 0x36c], 0
cmp dword [ebp - 0x36c], 0xffff
jne 0x100122ef
mov dword [ebp - 0x558], 1
jmp 0x100122f6
and dword [ebp - 0x558], 0
cmp dword [ebp - 0x558], 0xfff6
jb 0x1001230e
mov dword [ebp - 0x374], 1
jmp 0x10012315
and dword [ebp - 0x374], 0
mov eax, dword [ebp - 0xc4]
cmp dword [ebp - 0x374], eax
je 0x1001232f
mov dword [ebp - 0x474], 1
jmp 0x10012336
and dword [ebp - 0x474], 0
mov eax, dword [ebp - 0xc4]
add eax, dword [ebp - 0x474]
jne 0x1001235f
cmp dword [ebp - 0x124], 0
jne 0x1001235f
cmp dword [ebp - 0x124], 0
jne 0x1001235f
and dword [ebp - 0x37c], 0
jmp 0x10012369
mov dword [ebp - 0x37c], 1
mov eax, dword [ebp - 0x37c]
mov dword [ebp - 0x4f4], eax
cmp dword [ebp - 0x4f4], 0
je 0x10012382
xor eax, eax
jne 0x1001238b
and dword [ebp - 0x384], 0
jmp 0x10012395
mov dword [ebp - 0x384], 1
cmp dword [ebp - 0x384], 0xfffffffd
jg 0x100123aa
mov dword [ebp - 0x47c], 1
jmp 0x100123b1
and dword [ebp - 0x47c], 0
mov eax, dword [ebp - 0x47c]
mov dword [ebp - 0x6d4], eax
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x7a4]
call fcn.1000adfa
mov dword [ebp - 0x10c], 8
mov dword [ebp - 0x17c], 0
jmp 0x100123ef
mov eax, dword [ebp - 0x17c]
inc eax
mov dword [ebp - 0x17c], eax
cmp dword [ebp - 0x17c], 1
jge 0x1001240b
mov eax, dword [ebp - 0x17c]
mov dword [ebp + eax*4 - 0x5f0], 0x74dd032
jmp 0x100123e2
mov dword [ebp - 0x10c], 0xffffffff
jmp 0x10012424
mov eax, dword [ebp - 0x10c]
inc eax
mov dword [ebp - 0x10c], eax
cmp dword [ebp - 0x10c], 0xf
jge 0x10012442
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x10c]
mov dword [ebp + eax - 0x5f0], ecx
jmp 0x10012417
mov byte [ebp - 0xb7], 0
push 0x9e5
push 0
lea eax, [ebp - 0xb7]
push eax
push 0x1fad
push 0x20cc
push 0x28b5
push 1
call fcn.10014dfb
add esp, 0x1c
mov dword [ebp - 0x738], 4
mov dword [ebp - 0x734], 4
mov dword [ebp - 0x730], 4
mov dword [ebp - 0x72c], 4
lea ecx, [ebp - 0x219]
call fcn.1000ae0e
push eax
lea eax, [ebp - 0x728]
push eax
lea eax, [ebp - 0x738]
push eax
lea ecx, [ebp - 0x948]
call fcn.1000ae11
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0x714]
call fcn.1000add4
mov dword [ebp - 4], 7
mov dword [ebp - 0x230], 0xb4e1a362
mov dword [ebp - 0x22c], 0xb4e1a362
mov dword [ebp - 0x228], 0xb4e1a362
mov dword [ebp - 0x224], 0xb4e1a362
mov dword [ebp - 0x34], 0xf98a59c1
mov dword [ebp - 0x54], 0xfff8
mov dword [ebp - 0x394], 0
push 1
lea ecx, [ebp - 0x750]
call fcn.1000ad98
mov byte [ebp - 4], 8
mov dword [ebp - 0x7bc], 0xa23a
mov dword [ebp - 0x1c4], 0
jmp 0x10012548
mov eax, dword [ebp - 0x1c4]
inc eax
mov dword [ebp - 0x1c4], eax
cmp dword [ebp - 0x1c4], 1
jge 0x1001256a
push dword [ebp - 0x1c4]
lea ecx, [ebp - 0x750]
call fcn.1000adff
mov dword [eax], 0xf213ed42
jmp 0x1001253b
mov dword [ebp - 0x34], 0
jmp 0x1001257a
mov eax, dword [ebp - 0x34]
inc eax
mov dword [ebp - 0x34], eax
cmp dword [ebp - 0x34], 3
jg 0x100126dc
mov dword [ebp - 0xc8], 0
mov dword [ebp - 0xc8], 0
jmp 0x100125a7
mov eax, dword [ebp - 0xc8]
inc eax
mov dword [ebp - 0xc8], eax
cmp dword [ebp - 0xc8], 3
jg 0x100126a2
mov dword [ebp - 0x184], 0xa622a149
mov dword [ebp - 0x184], 3
jmp 0x100125d7
mov eax, dword [ebp - 0x184]
dec eax
mov dword [ebp - 0x184], eax
cmp dword [ebp - 0x184], 0
jl 0x10012651
mov dword [ebp - 0x60], 0xa2337124
mov dword [ebp - 0x60], 0
jmp 0x100125f7
mov eax, dword [ebp - 0x60]
inc eax
mov dword [ebp - 0x60], eax
cmp dword [ebp - 0x60], 4
jge 0x1001260d
mov eax, dword [ebp - 0x60]
mov dword [ebp + eax*4 - 0x230], 0xdf1adb2b
jmp 0x100125f0
mov dword [ebp - 0x60], 3
jmp 0x1001261d
mov eax, dword [ebp - 0x60]
dec eax
mov dword [ebp - 0x60], eax
cmp dword [ebp - 0x60], 0
jl 0x1001264c
lea eax, [ebp - 0x54]
push eax
push 0x53de
push 0x5cac
push 0x38ac
push 0x205
push 0
push 0x5686
call fcn.10022430
add esp, 0x1c
jmp 0x10012616
jmp 0x100125ca
mov dword [ebp - 0x54], 0
jmp 0x10012661
mov eax, dword [ebp - 0x54]
inc eax
mov dword [ebp - 0x54], eax
cmp dword [ebp - 0x54], 3
jg 0x1001269d
mov byte [ebp - 0xaf], 0
movzx eax, byte [ebp - 0xaf]
test eax, eax
je 0x10012684
push 0
push 1
call fcn.100103b4
pop ecx
pop ecx
mov eax, dword [ebp - 0xc8]
mov ecx, dword [ebp - 0x34]
mov eax, dword [ebp + eax*4 - 0x230]
mov dword [ebp + ecx*4 - 0x230], eax
jmp 0x1001265a
jmp 0x1001259a
mov eax, dword [ebp - 0x34]
mov ecx, dword [ebp - 0x34]
mov ecx, dword [ebp + ecx*4 - 0x230]
cmp dword [ebp + eax*4 - 0x230], ecx
je 0x100126c4
mov dword [ebp - 0x38c], 1
jmp 0x100126cb
and dword [ebp - 0x38c], 0
mov eax, dword [ebp - 0x38c]
mov dword [ebp - 0xc8], eax
jmp 0x10012573
mov eax, dword [ebp - 0x54]
mov dword [ebp - 0x34], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x230]
mov dword [ebp - 0x8a8], eax
push 4
pop eax
imul eax, eax, 3
mov eax, dword [ebp + eax - 0x230]
cmp dword [ebp - 0x54], eax
jg 0x10012713
mov dword [ebp - 0x534], 1
jmp 0x1001271a
and dword [ebp - 0x534], 0
mov eax, dword [ebp - 0x534]
mov dword [ebp - 0x394], eax
mov eax, dword [ebp - 0x394]
push 4
pop ecx
imul ecx, ecx, 0
add eax, dword [ebp + ecx - 0x230]
sub eax, dword [ebp - 0x54]
je 0x10012750
cmp dword [ebp - 0x54], 0
je 0x10012750
mov dword [ebp - 0x484], 1
jmp 0x10012757
and dword [ebp - 0x484], 0
mov eax, dword [ebp - 0x34]
mov dword [ebp - 0x34], eax
xor eax, eax
inc eax
sub eax, dword [ebp - 0x34]
cmp eax, dword [ebp - 0x484]
jle 0x10012779
or eax, 0xffffffff
jne 0x10012779
and dword [ebp - 0x39c], 0
jmp 0x10012783
mov dword [ebp - 0x39c], 1
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x230]
imul eax, dword [ebp - 0x39c]
cmp eax, 1
ja 0x100127a7
mov dword [ebp - 0x4fc], 1
jmp 0x100127ae
and dword [ebp - 0x4fc], 0
push 0
lea ecx, [ebp - 0x750]
call fcn.1000adff
mov ecx, dword [ebp - 0x4fc]
mov dword [eax], ecx
mov byte [ebp - 4], 7
lea ecx, [ebp - 0x750]
call fcn.1000adfa
mov dword [ebp - 0x3c], 0x110c93b4
mov dword [ebp - 0x11c], 0xffffffff
mov dword [ebp - 0x1cc], 1
mov dword [ebp - 0x3c], 7
jmp 0x100127fd
mov eax, dword [ebp - 0x3c]
dec eax
mov dword [ebp - 0x3c], eax
cmp dword [ebp - 0x3c], 0xfffffff4
jg 0x10012825
mov byte [ebp - 0x8d], 0
movzx eax, byte [ebp - 0x8d]
test eax, eax
je 0x10012823
push 0
push 0x7a28
call fcn.10014dcb
pop ecx
pop ecx
jmp 0x100127f6
cmp dword [ebp - 0x3c], 0
je 0x1001290f
cmp dword [ebp - 0x3c], 0x758e
jle 0x10012844
mov dword [ebp - 0x3a4], 1
jmp 0x1001284b
and dword [ebp - 0x3a4], 0
cmp dword [ebp - 0x3a4], 1
jle 0x10012860
mov dword [ebp - 0x48c], 1
jmp 0x10012867
and dword [ebp - 0x48c], 0
mov eax, dword [ebp - 0x3c]
imul eax, dword [ebp - 0x48c]
imul eax, dword [ebp - 0x11c]
cmp eax, dword [ebp - 0x3c]
jl 0x10012892
mov eax, 0xb1a7a81a
test eax, eax
je 0x10012892
mov dword [ebp - 0x3ac], 1
jmp 0x10012899
and dword [ebp - 0x3ac], 0
mov eax, dword [ebp - 0x1cc]
cmp dword [ebp - 0x3ac], eax
jne 0x100128b3
mov dword [ebp - 0x554], 1
jmp 0x100128ba
and dword [ebp - 0x554], 0
mov eax, dword [ebp - 0x11c]
cmp dword [ebp - 0x554], eax
jge 0x100128d4
mov dword [ebp - 0x3b4], 1
jmp 0x100128db
and dword [ebp - 0x3b4], 0
mov eax, dword [ebp - 0x1cc]
cmp dword [ebp - 0x3b4], eax
jl 0x100128f5
mov dword [ebp - 0x664], 1
jmp 0x100128fc
and dword [ebp - 0x664], 0
mov eax, dword [ebp - 0x1cc]
mov dword [ebp - 0x7c4], eax
cmp dword [ebp - 0x1cc], 0
mov eax, dword [ebp - 0x11c]
cmp dword [ebp - 0x3c], eax
jne 0x1001292b
xor eax, eax
inc eax
je 0x1001292b
mov dword [ebp - 0x494], 1
jmp 0x10012932
and dword [ebp - 0x494], 0
mov eax, dword [ebp - 0x494]
sub eax, dword [ebp - 0x11c]
imul eax, dword [ebp - 0x11c]
mov dword [ebp - 0x3c], eax
push 0
lea ecx, [ebp - 0x714]
call fcn.1000adff
mov dword [eax], 0x16
jmp 0x10012981
push 0
lea ecx, [ebp - 0x714]
call fcn.1000adff
mov dword [ebp - 0x3bc], eax
mov eax, dword [ebp - 0x3bc]
mov eax, dword [eax]
dec eax
mov ecx, dword [ebp - 0x3bc]
mov dword [ecx], eax
push 0
lea ecx, [ebp - 0x714]
call fcn.1000adff
cmp dword [eax], 0xa
jle 0x10014156
mov dword [ebp - 0x24], 0x5596960f
push 4
lea ecx, [ebp - 0x6d0]
call fcn.1000ad98
mov byte [ebp - 4], 9
mov dword [ebp - 0x600], 0xffffffff
mov dword [ebp - 0xf8], 0
jmp 0x100129d2
mov eax, dword [ebp - 0xf8]
inc eax
mov dword [ebp - 0xf8], eax
cmp dword [ebp - 0xf8], 3
jge 0x100129ee
mov eax, dword [ebp - 0xf8]
mov dword [ebp + eax*4 - 0x56c], 1
jmp 0x100129c5
push 0x1d54
lea eax, [ebp - 0xf8]
push eax
lea eax, [ebp - 0x6d0]
push eax
push 0x7aec
push 0x133e
push 1
push 1
push 0x1d9c
call fcn.1001003b
add esp, 0x20
mov dword [ebp - 0x24], 2
jmp 0x10012a2c
mov eax, dword [ebp - 0x24]
dec eax
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 0
jl 0x10012db4
mov dword [ebp - 0x48], 0x5c62e089
mov dword [ebp - 0x4a4], 0x487972e7
mov dword [ebp - 0x670], 0xa1e2510a
mov dword [ebp - 0x190], 0
jmp 0x10012a6a
mov eax, dword [ebp - 0x190]
inc eax
mov dword [ebp - 0x190], eax
cmp dword [ebp - 0x190], 2
jge 0x10012a86
mov eax, dword [ebp - 0x190]
mov dword [ebp + eax*4 - 0x660], 0xbbe26b5c
jmp 0x10012a5d
mov dword [ebp - 0x48], 0
jmp 0x10012a96
mov eax, dword [ebp - 0x48]
inc eax
mov dword [ebp - 0x48], eax
cmp dword [ebp - 0x48], 2
jg 0x10012b37
push 2
lea ecx, [ebp - 0x780]
call fcn.1000ad98
mov byte [ebp - 4], 0xa
mov dword [ebp - 0x12c], 0
jmp 0x10012aca
mov eax, dword [ebp - 0x12c]
inc eax
mov dword [ebp - 0x12c], eax
cmp dword [ebp - 0x12c], 2
jge 0x10012aec
push dword [ebp - 0x12c]
lea ecx, [ebp - 0x780]
call fcn.1000adff
mov dword [eax], 0xc39ba095
jmp 0x10012abd
mov eax, dword [ebp - 0x24]
mov ecx, dword [ebp - 0x48]
cmp dword [ebp + eax*4 - 0x56c], ecx
jl 0x10012b07
mov dword [ebp - 0x504], 1
jmp 0x10012b0e
and dword [ebp - 0x504], 0
push 0
lea ecx, [ebp - 0x780]
call fcn.1000adff
mov ecx, dword [ebp - 0x504]
mov dword [eax], ecx
mov byte [ebp - 4], 9
lea ecx, [ebp - 0x780]
call fcn.1000adfa
jmp 0x10012a8f
mov eax, dword [ebp - 0x24]
cmp dword [ebp + eax*4 - 0x56c], 0
jne 0x10012cd8
mov eax, dword [ebp - 0x48]
mov dword [ebp - 0x868], eax
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp + eax*4 - 0x56c]
mov dword [ebp - 0x5f8], eax
mov eax, dword [ebp - 0x24]
mov ecx, dword [ebp - 0x5f8]
mov dword [ebp + eax*4 - 0x56c], ecx
mov eax, dword [ebp - 0x24]
mov dword [ebp - 0x7cc], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x660]
mov dword [ebp - 0x8ec], eax
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x56c]
add eax, dword [ebp - 0x24]
mov dword [ebp - 0x3c4], eax
push 1
lea ecx, [ebp - 0x6d0]
call fcn.1000adff
mov ecx, dword [ebp - 0x3c4]
mov dword [eax], ecx
cmp dword [ebp - 0x3c4], 0
je 0x10012bd2
cmp dword [ebp - 0x48], 0
je 0x10012bd2
mov dword [ebp - 0x49c], 1
jmp 0x10012bd9
and dword [ebp - 0x49c], 0
mov eax, dword [ebp - 0x4a4]
cmp dword [ebp - 0x49c], eax
jne 0x10012bf3
mov dword [ebp - 0x3cc], 1
jmp 0x10012bfa
and dword [ebp - 0x3cc], 0
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x3cc]
sub ecx, dword [ebp + eax - 0x660]
cmp ecx, dword [ebp - 0x24]
jl 0x10012c1e
mov dword [ebp - 0x53c], 1
jmp 0x10012c25
and dword [ebp - 0x53c], 0
mov eax, dword [ebp - 0x24]
cmp dword [ebp - 0x53c], eax
jne 0x10012c4b
push 1
lea ecx, [ebp - 0x6d0]
call fcn.1000adff
cmp dword [eax], 0
jne 0x10012c4b
and dword [ebp - 0x3d4], 0
jmp 0x10012c55
mov dword [ebp - 0x3d4], 1
mov eax, dword [ebp - 0x3d4]
sub eax, dword [ebp - 0x4a4]
je 0x10012c7c
mov eax, dword [ebp - 0x24]
cmp dword [ebp + eax*4 - 0x56c], 0
je 0x10012c7c
mov dword [ebp - 0x3dc], 1
jmp 0x10012c83
and dword [ebp - 0x3dc], 0
imul eax, dword [ebp - 0x3dc], 0xfff7
test eax, eax
je 0x10012ca3
cmp dword [ebp - 0x48], 0
je 0x10012ca3
mov dword [ebp - 0x668], 1
jmp 0x10012caa
and dword [ebp - 0x668], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x660]
mov dword [ebp - 0x7d4], eax
push 2
lea ecx, [ebp - 0x6d0]
call fcn.1000adff
cmp dword [eax], 0
jne 0x10012cd8
and dword [ebp - 0x50c], 0
jmp 0x10012ce2
mov dword [ebp - 0x50c], 1
cmp dword [ebp - 0x50c], 0xffff
jae 0x10012cfa
mov dword [ebp - 0x3e4], 1
jmp 0x10012d01
and dword [ebp - 0x3e4], 0
mov eax, dword [ebp - 0x3e4]
mov dword [ebp - 0x48], eax
mov eax, dword [ebp - 0x48]
add eax, 0x3e4f637e
jne 0x10012d26
mov eax, 0x53a2
test eax, eax
jne 0x10012d26
and dword [ebp - 0x4ac], 0
jmp 0x10012d30
mov dword [ebp - 0x4ac], 1
cmp dword [ebp - 0x4ac], 0xffffffff
jge 0x10012d45
mov dword [ebp - 0x3ec], 1
jmp 0x10012d4c
and dword [ebp - 0x3ec], 0
mov eax, dword [ebp - 0x24]
cmp dword [ebp - 0x3ec], eax
jg 0x10012d64
mov eax, dword [ebp - 0x24]
cmp dword [ebp + eax*4 - 0x56c], 0
je 0x10012d75
or eax, 0xffffffff
je 0x10012d75
mov dword [ebp - 0x55c], 1
jmp 0x10012d7c
and dword [ebp - 0x55c], 0
mov eax, dword [ebp - 0x600]
imul eax, dword [ebp - 0x55c]
cmp eax, 0x6da84b50
jne 0x10012d9c
mov dword [ebp - 0x3f4], 1
jmp 0x10012da3
and dword [ebp - 0x3f4], 0
mov eax, dword [ebp - 0x3f4]
mov dword [ebp - 0x670], eax
jmp 0x10012a25
mov byte [ebp - 0x95], 0
push 0x297b
lea eax, [ebp - 0x95]
push eax
push 0x69f0
push 0
call fcn.10026d27
add esp, 0x10
mov byte [ebp - 4], 7
lea ecx, [ebp - 0x6d0]
call fcn.1000adfa
mov dword [ebp - 0x1a0], 0x72fd4914
push 2
lea ecx, [ebp - 0x580]
call fcn.1000ad98
mov byte [ebp - 4], 0xb
mov dword [ebp - 0xd0], 4
mov dword [ebp - 0x290], 0xffffffff
mov dword [ebp - 0x2c0], 0x6eae1177
mov dword [ebp - 0x610], 0x2964
mov dword [ebp - 0x18c], 0
jmp 0x10012e41
mov eax, dword [ebp - 0x18c]
inc eax
mov dword [ebp - 0x18c], eax
cmp dword [ebp - 0x18c], 2
jge 0x10012e63
push dword [ebp - 0x18c]
lea ecx, [ebp - 0x580]
call fcn.1000adff
mov dword [eax], 0x42eb90da
jmp 0x10012e34
mov dword [ebp - 0xd0], 1
jmp 0x10012e7c
mov eax, dword [ebp - 0xd0]
dec eax
mov dword [ebp - 0xd0], eax
cmp dword [ebp - 0xd0], 0
jl 0x100131d1
mov dword [ebp - 0x94], 0
mov dword [ebp - 0x4b4], 0x906c
push 2
lea ecx, [ebp - 0x6e0]
call fcn.1000ad98
mov byte [ebp - 4], 0xc
mov dword [ebp - 0x69c], 0xffffffff
mov dword [ebp - 0x64], 0
jmp 0x10012ec8
mov eax, dword [ebp - 0x64]
inc eax
mov dword [ebp - 0x64], eax
cmp dword [ebp - 0x64], 3
jge 0x10012ede
mov eax, dword [ebp - 0x64]
mov dword [ebp + eax*4 - 0x91c], 0x165352f7
jmp 0x10012ec1
mov dword [ebp - 0x64], 0
jmp 0x10012eee
mov eax, dword [ebp - 0x64]
inc eax
mov dword [ebp - 0x64], eax
cmp dword [ebp - 0x64], 2
jge 0x10012f0a
push dword [ebp - 0x64]
lea ecx, [ebp - 0x6e0]
call fcn.1000adff
mov dword [eax], 4
jmp 0x10012ee7
push 1
push 0x1bb2
push 0xe38
push 0x37c9
push 0
call fcn.10010526
add esp, 0x14
mov dword [ebp - 0x94], 1
jmp 0x10012f3e
mov eax, dword [ebp - 0x94]
dec eax
mov dword [ebp - 0x94], eax
cmp dword [ebp - 0x94], 0
jl 0x100131bd
mov dword [ebp - 0x234], 0
mov dword [ebp - 0x218], 0xccddd1d8
mov eax, dword [ebp - 0x4b4]
inc eax
mov dword [ebp - 0x4b4], eax
push 1
lea ecx, [ebp - 0x6e0]
call fcn.1000adff
mov dword [ebp - 0x1f0], eax
mov eax, dword [ebp - 0x1f0]
mov eax, dword [eax]
mov ecx, dword [ebp - 0x1f0]
mov ecx, dword [ecx]
inc ecx
mov edx, dword [ebp - 0x1f0]
mov dword [edx], ecx
test eax, eax
jne 0x10013155
mov eax, 0xf928
test eax, eax
je 0x100130ef
push dword [ebp - 0x94]
lea ecx, [ebp - 0x580]
call fcn.1000adff
cmp dword [eax], 4
jae 0x10012fcf
mov dword [ebp - 0x284], 1
jmp 0x10012fd6
and dword [ebp - 0x284], 0
mov eax, dword [ebp - 0x234]
cmp eax, dword [ebp - 0x284]
jge 0x10012ff0
mov dword [ebp - 0x608], 1
jmp 0x10012ff7
and dword [ebp - 0x608], 0
xor eax, eax
je 0x1001300e
push 4
pop eax
test eax, eax
je 0x1001300e
mov dword [ebp - 0x288], 1
jmp 0x10013015
and dword [ebp - 0x288], 0
mov eax, dword [ebp - 0x288]
mov dword [ebp - 0x290], eax
mov eax, dword [ebp - 0x290]
mov dword [ebp - 0x298], eax
push 4
pop eax
shl eax, 1
mov ecx, dword [ebp - 0x298]
mov dword [ebp + eax - 0x91c], ecx
push 1
lea ecx, [ebp - 0x6e0]
call fcn.1000adff
mov ecx, dword [ebp - 0x298]
cmp ecx, dword [eax]
jne 0x10013062
mov dword [ebp - 0x2a0], 1
jmp 0x10013069
and dword [ebp - 0x2a0], 0
push 0
lea ecx, [ebp - 0x6e0]
call fcn.1000adff
imul eax, dword [ebp - 0x218], 5
cmp dword [ebp - 0xd0], eax
jge 0x10013091
mov dword [ebp - 0x2a8], 1
jmp 0x10013098
and dword [ebp - 0x2a8], 0
mov eax, dword [ebp - 0x2a8]
neg eax
cmp eax, 1
jne 0x100130b1
mov dword [ebp - 0x2b0], 1
jmp 0x100130b8
and dword [ebp - 0x2b0], 0
mov eax, dword [ebp - 0x2b0]
mov dword [ebp - 0x234], eax
mov dword [ebp - 0x218], 0xfec1
mov eax, dword [ebp - 0x218]
mov dword [ebp - 0x2c0], eax
cmp dword [ebp - 0x2c0], 0
je 0x100130ef
mov dword [ebp - 0x2c8], 1
jmp 0x100130f6
and dword [ebp - 0x2c8], 0
mov esi, dword [ebp - 0x2c8]
sub esi, 0x5618d7c
push 1
lea ecx, [ebp - 0x580]
call fcn.1000adff
cmp esi, dword [eax]
jle 0x1001311f
mov dword [ebp - 0x2d0], 1
jmp 0x10013126
and dword [ebp - 0x2d0], 0
cmp dword [ebp - 0x2d0], 0
je 0x1001313b
mov dword [ebp - 0x2d8], 1
jmp 0x10013142
and dword [ebp - 0x2d8], 0
mov eax, dword [ebp - 0x2d8]
mov dword [ebp - 0x69c], eax
cmp dword [ebp - 0xd0], 0
push dword [ebp - 0x94]
lea ecx, [ebp - 0x580]
call fcn.1000adff
cmp dword [eax], 0
jae 0x10013177
mov dword [ebp - 0x2e0], 1
jmp 0x1001317e
and dword [ebp - 0x2e0], 0
push dword [ebp - 0x94]
lea ecx, [ebp - 0x580]
call fcn.1000adff
mov ecx, dword [ebp - 0x2e0]
cmp ecx, dword [eax]
je 0x100131a5
mov dword [ebp - 0x2e8], 1
jmp 0x100131ac
and dword [ebp - 0x2e8], 0
mov eax, dword [ebp - 0x2e8]
mov dword [ebp - 0x610], eax
jmp 0x10012f31
mov byte [ebp - 4], 0xb
lea ecx, [ebp - 0x6e0]
call fcn.1000adfa
jmp 0x10012e6f
mov byte [ebp - 4], 7
lea ecx, [ebp - 0x580]
call fcn.1000adfa
mov byte [ebp - 0xb3], 0
mov dword [ebp - 0xd8], 0xbe8e
mov dword [ebp - 0x30], 0x6318d581
mov dword [ebp - 0x318], 8
mov dword [ebp - 0x618], 0xa74db503
mov dword [ebp - 0x1b0], 0
jmp 0x10013225
mov eax, dword [ebp - 0x1b0]
inc eax
mov dword [ebp - 0x1b0], eax
cmp dword [ebp - 0x1b0], 2
jge 0x10013241
mov eax, dword [ebp - 0x1b0]
mov dword [ebp + eax*4 - 0x1d4], 0x3ed15de0
jmp 0x10013218
mov eax, dword [ebp - 0xd8]
imul eax, dword [ebp - 0xd8]
mov dword [ebp - 0x30], eax
mov dword [ebp - 0xd8], 0
jmp 0x1001326a
mov eax, dword [ebp - 0xd8]
inc eax
mov dword [ebp - 0xd8], eax
cmp dword [ebp - 0xd8], 1
jg 0x10013407
mov dword [ebp - 0x5c], 0x278fa8f9
mov dword [ebp - 0x684], 0xffffffff
mov dword [ebp - 0x30], 0
jmp 0x10013298
mov eax, dword [ebp - 0x30]
inc eax
mov dword [ebp - 0x30], eax
cmp dword [ebp - 0x30], 1
jg 0x100133f9
mov eax, dword [ebp - 0x5c]
mov ecx, dword [ebp - 0x5c]
inc ecx
mov dword [ebp - 0x5c], ecx
test eax, eax
jne 0x100133de
mov eax, dword [ebp - 0x30]
mov eax, dword [ebp + eax*4 - 0x1d4]
mov dword [ebp - 0x7ec], eax
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x1d4], 0
ja 0x100132e0
mov dword [ebp - 0x2f0], 1
jmp 0x100132e7
and dword [ebp - 0x2f0], 0
imul eax, dword [ebp - 0x5c], 0xb611
mov ecx, dword [ebp - 0x30]
imul eax, dword [ebp + ecx*4 - 0x1d4]
imul eax, eax, 0xfffffffd
test eax, eax
jne 0x10013316
mov eax, dword [ebp - 0x30]
cmp dword [ebp + eax*4 - 0x1d4], 0
jne 0x10013316
and dword [ebp - 0x2f8], 0
jmp 0x10013320
mov dword [ebp - 0x2f8], 1
mov eax, dword [ebp - 0x2f0]
cmp eax, dword [ebp - 0x2f8]
je 0x1001333a
mov dword [ebp - 0x674], 1
jmp 0x10013341
and dword [ebp - 0x674], 0
mov eax, dword [ebp - 0x30]
mov eax, dword [ebp + eax*4 - 0x1d4]
mov dword [ebp - 0x7dc], eax
mov eax, dword [ebp - 0x5c]
mov dword [ebp - 0x7f4], eax
mov eax, dword [ebp - 0x30]
mov ecx, dword [ebp - 0x30]
mov ecx, dword [ebp + ecx*4 - 0x1d4]
cmp dword [ebp + eax*4 - 0x1d4], ecx
jg 0x1001337c
mov dword [ebp - 0x300], 1
jmp 0x10013383
and dword [ebp - 0x300], 0
cmp dword [ebp - 0x300], 0xd8c65816
jne 0x1001339b
mov dword [ebp - 0x308], 1
jmp 0x100133a2
and dword [ebp - 0x308], 0
cmp dword [ebp - 0x308], 0xb58fe4de
jbe 0x100133ba
mov dword [ebp - 0x310], 1
jmp 0x100133c1
and dword [ebp - 0x310], 0
mov eax, dword [ebp - 0x310]
sub eax, dword [ebp - 0x5c]
je 0x100133d7
mov eax, dword [ebp - 0x30]
cmp dword [ebp + eax*4 - 0x1d4], 0
mov eax, dword [ebp - 0x5c]
imul eax, dword [ebp - 0x5c]
mov dword [ebp - 0x318], 0x5f0e77da
mov eax, dword [ebp - 0x318]
mov dword [ebp - 0x618], eax
jmp 0x10013291
mov eax, dword [ebp - 0x5c]
mov dword [ebp - 0x684], eax
jmp 0x1001325d
movzx eax, byte [ebp - 0xb3]
test eax, eax
je 0x10013711
mov dword [ebp - 0x100], 1
mov dword [ebp - 0x338], 1
push 1
lea ecx, [ebp - 0x6fc]
call fcn.1000ad98
mov byte [ebp - 4], 0xd
push 3
lea ecx, [ebp - 0x768]
call fcn.1000ad98
mov byte [ebp - 4], 0xe
mov dword [ebp - 0x50], 0
jmp 0x1001345c
mov eax, dword [ebp - 0x50]
inc eax
mov dword [ebp - 0x50], eax
cmp dword [ebp - 0x50], 1
jge 0x1001346f
mov eax, dword [ebp - 0x50]
mov dword [ebp + eax*4 - 0x20], 1
jmp 0x10013455
mov dword [ebp - 0x50], 0
jmp 0x1001347f
mov eax, dword [ebp - 0x50]
inc eax
mov dword [ebp - 0x50], eax
cmp dword [ebp - 0x50], 1
jge 0x10013498
push dword [ebp - 0x50]
lea ecx, [ebp - 0x6fc]
call fcn.1000adff
or dword [eax], 0xffffffff
jmp 0x10013478
lea eax, [ebp - 0x768]
push eax
lea eax, [ebp - 0x50]
push eax
push 1
push 1
push 0x4b92
call fcn.10010151
add esp, 0x14
push 4
pop eax
imul eax, eax, 0
push 4
pop ecx
imul ecx, ecx, 0
mov ecx, dword [ebp + ecx - 0x20]
cmp dword [ebp + eax - 0x20], ecx
jg 0x100134d6
mov dword [ebp - 0x320], 1
jmp 0x100134dd
and dword [ebp - 0x320], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x20]
cmp dword [ebp - 0x320], eax
je 0x100134fb
mov dword [ebp - 0x620], 1
jmp 0x10013502
and dword [ebp - 0x620], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x20]
mov dword [ebp - 0x7e8], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x20]
mov dword [ebp - 0x7fc], eax
mov eax, dword [ebp - 0x100]
push 4
pop ecx
imul ecx, ecx, 0
mov ecx, dword [ebp + ecx - 0x20]
lea eax, [eax + ecx + 0x5c22c920]
cmp eax, dword [ebp - 0x100]
jl 0x1001354d
mov dword [ebp - 0x328], 1
jmp 0x10013554
and dword [ebp - 0x328], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x20]
cmp dword [ebp - 0x328], eax
jl 0x10013572
mov dword [ebp - 0x330], 1
jmp 0x10013579
and dword [ebp - 0x330], 0
mov eax, dword [ebp - 0x330]
mov dword [ebp - 0x338], eax
mov eax, dword [ebp - 0x338]
push 4
pop ecx
imul ecx, ecx, 0
sub eax, dword [ebp + ecx - 0x20]
cmp eax, dword [ebp - 0x100]
jl 0x100135a9
mov dword [ebp - 0x340], 1
jmp 0x100135b0
and dword [ebp - 0x340], 0
cmp dword [ebp - 0x340], 0xfffffff6
jae 0x100135c5
mov dword [ebp - 0x348], 1
jmp 0x100135cc
and dword [ebp - 0x348], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x20]
cmp dword [ebp - 0x348], eax
jge 0x100135ea
mov dword [ebp - 0x350], 1
jmp 0x100135f1
and dword [ebp - 0x350], 0
push 4
pop eax
imul eax, eax, 0
imul ecx, dword [ebp - 0x350], 0xfff9
push 4
pop edx
imul edx, edx, 0
add ecx, dword [ebp + edx - 0x20]
cmp dword [ebp + eax - 0x20], ecx
je 0x1001361d
mov dword [ebp - 0x67c], 1
jmp 0x10013624
and dword [ebp - 0x67c], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x20]
mov dword [ebp - 0x804], eax
mov eax, dword [ebp - 0x100]
mov dword [ebp - 0x870], eax
mov esi, dword [ebp - 0x100]
push 0
lea ecx, [ebp - 0x6fc]
call fcn.1000adff
mov dword [eax], esi
push 4
pop eax
imul eax, eax, 0
mov esi, dword [ebp + eax - 0x20]
push 0
lea ecx, [ebp - 0x6fc]
call fcn.1000adff
cmp esi, dword [eax]
je 0x1001367c
mov dword [ebp - 0x358], 1
jmp 0x10013683
and dword [ebp - 0x358], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x20]
cmp dword [ebp - 0x358], eax
jl 0x100136a1
mov dword [ebp - 0x360], 1
jmp 0x100136a8
and dword [ebp - 0x360], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x20]
cmp dword [ebp - 0x360], eax
jne 0x100136c6
mov dword [ebp - 0x368], 1
jmp 0x100136cd
and dword [ebp - 0x368], 0
push 2
lea ecx, [ebp - 0x768]
call fcn.1000adff
mov ecx, dword [ebp - 0x368]
mov dword [eax], ecx
mov byte [ebp - 4], 0xd
lea ecx, [ebp - 0x768]
call fcn.1000adfa
mov byte [ebp - 4], 7
lea ecx, [ebp - 0x6fc]
call fcn.1000adfa
push 0x7c26
push 1
push 1
call fcn.10010423
add esp, 0xc
mov dword [ebp - 0x44], 3
mov dword [ebp - 0x9c], 0x88039d6b
mov dword [ebp - 0x1f8], 8
mov dword [ebp - 0x198], 0
jmp 0x10013745
mov eax, dword [ebp - 0x198]
inc eax
mov dword [ebp - 0x198], eax
cmp dword [ebp - 0x198], 4
jge 0x10013761
mov eax, dword [ebp - 0x198]
mov dword [ebp + eax*4 - 0x940], 0
jmp 0x10013738
mov eax, dword [ebp - 0x44]
mov dword [ebp - 0x7f8], eax
mov eax, dword [ebp - 0x44]
add eax, 0x5616
jne 0x10013783
cmp dword [ebp - 0x44], 0
jne 0x10013783
and dword [ebp - 0x370], 0
jmp 0x1001378d
mov dword [ebp - 0x370], 1
mov eax, dword [ebp - 0x44]
cmp dword [ebp - 0x370], eax
jge 0x100137a4
mov dword [ebp - 0x378], 1
jmp 0x100137ab
and dword [ebp - 0x378], 0
mov eax, dword [ebp - 0x378]
inc eax
imul eax, dword [ebp - 0x44]
mov dword [ebp - 0x9c], eax
cmp dword [ebp - 0x9c], 0
je 0x100137d7
cmp dword [ebp - 0x44], 0
je 0x100137d7
mov dword [ebp - 0x380], 1
jmp 0x100137de
and dword [ebp - 0x380], 0
mov eax, dword [ebp - 0x44]
cmp dword [ebp - 0x380], eax
jne 0x100137f5
mov dword [ebp - 0x388], 1
jmp 0x100137fc
and dword [ebp - 0x388], 0
mov eax, dword [ebp - 0x44]
cmp dword [ebp - 0x388], eax
jle 0x10013813
mov dword [ebp - 0x390], 1
jmp 0x1001381a
and dword [ebp - 0x390], 0
mov eax, dword [ebp - 0x44]
cmp dword [ebp - 0x390], eax
jl 0x10013834
cmp dword [ebp - 0x44], 0
jne 0x10013834
and dword [ebp - 0x398], 0
jmp 0x1001383e
mov dword [ebp - 0x398], 1
mov eax, dword [ebp - 0x398]
neg eax
je 0x100138c1
mov dword [ebp - 0x1c0], 0
jmp 0x10013861
mov eax, dword [ebp - 0x1c0]
inc eax
mov dword [ebp - 0x1c0], eax
cmp dword [ebp - 0x1c0], 1
jge 0x1001387d
mov eax, dword [ebp - 0x1c0]
mov dword [ebp + eax*4 - 0x3a0], 0
jmp 0x10013854
mov dword [ebp - 0x9c], 0xfffffff4
jmp 0x10013896
mov eax, dword [ebp - 0x9c]
inc eax
mov dword [ebp - 0x9c], eax
cmp dword [ebp - 0x9c], 0xd
jl 0x100138bc
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x3a0]
inc eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x3a0], eax
jmp 0x10013889
jmp 0x100139d4
mov dword [ebp - 0x210], 0xd4e2b79d
push 1
lea ecx, [ebp - 0x798]
call fcn.1000ad98
mov byte [ebp - 4], 0xf
lea eax, [ebp - 0x8b8]
push eax
lea eax, [ebp - 0x798]
push eax
push 0
call fcn.10010740
add esp, 0xc
mov eax, dword [ebp - 0x9c]
cmp dword [ebp - 0x1f8], eax
jle 0x1001390e
mov dword [ebp - 0x3a8], 1
jmp 0x10013915
and dword [ebp - 0x3a8], 0
mov eax, dword [ebp - 0x210]
cmp dword [ebp - 0x3a8], eax
jle 0x1001392f
mov dword [ebp - 0x3b0], 1
jmp 0x10013936
and dword [ebp - 0x3b0], 0
mov eax, dword [ebp - 0x210]
cmp eax, dword [ebp - 0x3b0]
jne 0x10013950
mov dword [ebp - 0x3b8], 1
jmp 0x10013957
and dword [ebp - 0x3b8], 0
push 4
pop eax
imul eax, eax, 3
mov eax, dword [ebp + eax - 0x940]
cmp dword [ebp - 0x3b8], eax
jl 0x10013978
mov dword [ebp - 0x628], 1
jmp 0x1001397f
and dword [ebp - 0x628], 0
mov eax, dword [ebp - 0x1f8]
mov dword [ebp - 0x800], eax
mov eax, dword [ebp - 0x1f8]
cmp dword [ebp - 0x210], eax
je 0x100139a5
mov dword [ebp - 0x3c0], 1
jmp 0x100139ac
and dword [ebp - 0x3c0], 0
imul esi, dword [ebp - 0x3c0], 0x14278
push 0
lea ecx, [ebp - 0x798]
call fcn.1000adff
mov dword [eax], esi
mov byte [ebp - 4], 7
lea ecx, [ebp - 0x798]
call fcn.1000adfa
mov dword [ebp - 0x1a0], 0
jmp 0x100139ed
mov eax, dword [ebp - 0x1a0]
inc eax
mov dword [ebp - 0x1a0], eax
cmp dword [ebp - 0x1a0], 0
jle 0x10014151
mov dword [ebp - 0x200], 1
mov dword [ebp - 0x3c8], 0x231fbf68
mov dword [ebp - 0x58], 0
jmp 0x10013a1e
mov eax, dword [ebp - 0x58]
inc eax
mov dword [ebp - 0x58], eax
cmp dword [ebp - 0x58], 1
jge 0x10013a34
mov eax, dword [ebp - 0x58]
mov dword [ebp + eax*4 - 0xa4], 0x17571177
jmp 0x10013a17
mov dword [ebp - 0x58], 0
jmp 0x10013a44
mov eax, dword [ebp - 0x58]
inc eax
mov dword [ebp - 0x58], eax
cmp dword [ebp - 0x58], 3
jge 0x10013a5a
mov eax, dword [ebp - 0x58]
mov dword [ebp + eax*4 - 0x928], 8
jmp 0x10013a3d
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0xa4], 0xffffffe3
jmp 0x10013a88
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xa4]
inc eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0xa4], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0xa4], 0xfffffff5
jne 0x10013d59
mov dword [ebp - 0x108], 1
mov dword [ebp - 0x3d0], 0xeab1d6a5
mov dword [ebp - 0x1b8], 6
mov dword [ebp - 0x878], 0xfffffff9
mov dword [ebp - 0x6f0], 0
mov dword [ebp - 0x6ec], 0
mov dword [ebp - 0x6e8], 0
mov dword [ebp - 0x6e4], 0
push 3
lea ecx, [ebp - 0x744]
call fcn.1000ad98
mov byte [ebp - 4], 0x10
mov dword [ebp - 0x1e4], 0xaafd
push 0
lea eax, [ebp - 0x744]
push eax
lea eax, [ebp - 0x808]
push eax
push 0x7486
call fcn.1001f33a
add esp, 0x10
mov dword [ebp - 0x200], 0x1f09a2b4
cmp dword [ebp - 0x200], 0
jne 0x10013b49
cmp dword [ebp - 0x200], 0
jne 0x10013b49
and dword [ebp - 0x688], 0
jmp 0x10013b53
mov dword [ebp - 0x688], 1
mov eax, dword [ebp - 0x108]
dec eax
mov dword [ebp - 0x108], eax
mov eax, dword [ebp - 0x108]
mov dword [ebp - 0x3c8], eax
mov eax, dword [ebp - 0x3c8]
mov dword [ebp - 0x3d0], eax
mov eax, dword [ebp - 0x3d0]
mov dword [ebp - 0x900], eax
push 1
lea ecx, [ebp - 0x744]
call fcn.1000adff
mov dword [ebp - 0x1dc], eax
mov eax, dword [ebp - 0x1dc]
mov eax, dword [eax]
mov dword [ebp - 0x630], eax
mov eax, dword [ebp - 0x1dc]
mov eax, dword [eax]
inc eax
mov ecx, dword [ebp - 0x1dc]
mov dword [ecx], eax
cmp dword [ebp - 0x630], 0x66b7a7bc
jl 0x10013bce
mov dword [ebp - 0x3d8], 1
jmp 0x10013bd5
and dword [ebp - 0x3d8], 0
mov eax, dword [ebp - 0x1e4]
mov dword [ebp - 0x810], eax
mov eax, dword [ebp - 0x1e4]
dec eax
mov dword [ebp - 0x1e4], eax
mov eax, dword [ebp - 0x1b8]
cmp dword [ebp - 0x3d8], eax
jne 0x10013c08
mov dword [ebp - 0x3e0], 1
jmp 0x10013c0f
and dword [ebp - 0x3e0], 0
mov eax, dword [ebp - 0x1b8]
cmp dword [ebp - 0x3e0], eax
jne 0x10013c29
mov dword [ebp - 0x3e8], 1
jmp 0x10013c30
and dword [ebp - 0x3e8], 0
mov eax, dword [ebp - 0x3e8]
sub eax, dword [ebp - 0x108]
je 0x10013c5a
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0xa4], 0
je 0x10013c5a
mov dword [ebp - 0x3f0], 1
jmp 0x10013c61
and dword [ebp - 0x3f0], 0
cmp dword [ebp - 0x3f0], 0xca7a
jg 0x10013c79
mov dword [ebp - 0x3f8], 1
jmp 0x10013c80
and dword [ebp - 0x3f8], 0
push 4
pop eax
shl eax, 1
mov ecx, dword [ebp - 0x3f8]
sub ecx, dword [ebp + eax - 0x6f0]
jne 0x10013cb0
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0xa4], 0
je 0x10013cb0
mov dword [ebp - 0x400], 1
jmp 0x10013cb7
and dword [ebp - 0x400], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x6f0]
imul eax, dword [ebp - 0x400]
cmp eax, 0x7949
jle 0x10013cde
mov dword [ebp - 0x598], 1
jmp 0x10013ce5
and dword [ebp - 0x598], 0
mov eax, dword [ebp - 0x108]
mov dword [ebp - 0x880], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xa4]
mov dword [ebp - 0x818], eax
push 4
pop eax
imul eax, eax, 0
push 4
pop ecx
imul ecx, ecx, 3
mov ecx, dword [ebp + ecx - 0x6f0]
cmp dword [ebp + eax - 0x928], ecx
jl 0x10013d2c
mov dword [ebp - 0x408], 1
jmp 0x10013d33
and dword [ebp - 0x408], 0
mov eax, dword [ebp - 0x408]
sub eax, dword [ebp - 0x1b8]
mov dword [ebp - 0x1b8], eax
mov byte [ebp - 4], 7
lea ecx, [ebp - 0x744]
call fcn.1000adfa
jmp 0x10013a6d
mov byte [ebp - 0x7d], 0
mov dword [ebp - 0x7c], 0xffffffff
mov dword [ebp - 0x130], 0x31615e82
mov dword [ebp - 0x110], 0xba16
mov dword [ebp - 0x7c], 4
jmp 0x10013d88
mov eax, dword [ebp - 0x7c]
dec eax
mov dword [ebp - 0x7c], eax
cmp dword [ebp - 0x7c], 0xffffffed
jl 0x10013dc7
mov dword [ebp - 0x59c], 0x659d568d
mov byte [ebp - 0x9d], 0
movzx eax, byte [ebp - 0x9d]
test eax, eax
je 0x10013dbb
push 0x26f7
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_VirtualQueryEx]
mov dword [ebp - 0x59c], 0
jmp 0x10013d81
mov eax, dword [ebp - 0x7c]
cmp dword [ebp - 0x7c], eax
jg 0x10013ddb
mov dword [ebp - 0x418], 1
jmp 0x10013de2
and dword [ebp - 0x418], 0
mov eax, dword [ebp - 0x130]
cmp dword [ebp - 0x130], eax
jle 0x10013dfc
mov dword [ebp - 0x410], 1
jmp 0x10013e03
and dword [ebp - 0x410], 0
mov eax, dword [ebp - 0x130]
cmp eax, dword [ebp - 0x410]
jl 0x10013e1d
mov dword [ebp - 0x5a4], 1
jmp 0x10013e24
and dword [ebp - 0x5a4], 0
mov eax, dword [ebp - 0x418]
mov dword [ebp - 0x7c], eax
mov eax, dword [ebp - 0x7c]
mov dword [ebp - 0x8c8], eax
cmp dword [ebp - 0x110], 0
jne 0x10013e51
mov eax, 0xcae2
test eax, eax
jne 0x10013e51
and dword [ebp - 0x5ac], 0
jmp 0x10013e5b
mov dword [ebp - 0x5ac], 1
mov eax, dword [ebp - 0x110]
mov dword [ebp - 0x820], eax
cmp dword [ebp - 0x110], 0
jne 0x10013e82
cmp dword [ebp - 0x110], 0
jne 0x10013e82
and dword [ebp - 0x5b4], 0
jmp 0x10013e8c
mov dword [ebp - 0x5b4], 1
or eax, 0xffffffff
cmp eax, 0xbae8b012
jb 0x10013ea2
mov dword [ebp - 0x420], 1
jmp 0x10013ea9
and dword [ebp - 0x420], 0
mov eax, dword [ebp - 0x420]
sub eax, dword [ebp - 0x110]
mov dword [ebp - 0x130], eax
movzx eax, byte [ebp - 0x7d]
test eax, eax
je 0x10013f5a
mov dword [ebp - 0x594], 0xfffffffd
push 1
lea ecx, [ebp - 0x75c]
call fcn.1000ad98
mov byte [ebp - 4], 0x11
mov dword [ebp - 0x5c4], 0xfffffff8
lea eax, [ebp - 0x75c]
push eax
push 0x1a8a
lea eax, [ebp - 0x888]
push eax
push 0xcea
push 0
call fcn.1001f497
add esp, 0x14
push 0xf3a
lea eax, [ebp - 0x75c]
push eax
lea eax, [ebp - 0x594]
push eax
push 0x2f0b
push 0
lea eax, [ebp - 0x5c4]
push eax
call fcn.10014ecc
add esp, 0x18
mov byte [ebp - 4], 7
lea ecx, [ebp - 0x75c]
call fcn.1000adfa
push 0
push 0x75aa
push 0x7f81
call fcn.10026ee3
add esp, 0xc
mov dword [ebp - 0x5cc], 0x1709
cmp dword [ebp - 0x5cc], 0x4aa
jge 0x1001413b
call fcn.10049f25
push 0x20
pop ecx
imul ecx, ecx, 0
add eax, ecx
push eax
push 0x10007758
push 0x1000775c
call fcn.1004a3bf
add esp, 0xc
call fcn.10049f25
push 0x20
pop ecx
shl ecx, 0
add eax, ecx
push eax
push 0x10007764
push 0x10007768
call fcn.1004a3bf
add esp, 0xc
xor eax, eax
inc eax
je 0x1001413b
lea eax, [ebp - 0x428]
push eax
lea eax, [ebp - 0x138]
push eax
push 0x100077bc
call fcn.10049deb
add esp, 0xc
cmp dword [ebp - 0x138], 0
jne 0x10013fef
cmp dword [ebp - 0x428], 0
jne 0x10013fef
jmp 0x1001413b
mov dword [ebp - 0x5d4], 1
lea eax, [ebp - 0x5d4]
push eax
mov eax, dword [ebp - 0x138]
lea edx, [ebp + eax - 0x998]
lea ecx, [ebp - 0x998]
call fcn.1002c932
pop ecx
and dword [ebp - 0x1ec], 0
jmp 0x1001402f
mov eax, dword [ebp - 0x1ec]
inc eax
mov dword [ebp - 0x1ec], eax
mov eax, dword [ebp - 0x1ec]
cmp eax, dword [ebp - 0x428]
jge 0x100140b6
and dword [ebp - 0x118], 0
jmp 0x10014053
mov eax, dword [ebp - 0x118]
inc eax
mov dword [ebp - 0x118], eax
mov eax, dword [ebp - 0x118]
cmp eax, dword [ebp - 0x138]
jge 0x100140b1
lea eax, [ebp - 0x15]
push eax
mov ecx, 0x10653dd0
call fcn.1002a92e
mov eax, dword [ebp - 0x118]
movzx eax, byte [ebp + eax - 0x998]
test eax, eax
je 0x10014095
movzx eax, byte [ebp - 0x15]
test eax, eax
je 0x10014095
mov dword [ebp - 0x430], 1
jmp 0x1001409c
and dword [ebp - 0x430], 0
mov eax, dword [ebp - 0x118]
mov cl, byte [ebp - 0x430]
mov byte [ebp + eax - 0x998], cl
jmp 0x10014046
jmp 0x10014022
mov byte [ebp - 0x15], 0
and dword [ebp - 0x140], 0
jmp 0x100140d0
mov eax, dword [ebp - 0x140]
inc eax
mov dword [ebp - 0x140], eax
mov eax, dword [ebp - 0x140]
cmp eax, dword [ebp - 0x138]
jge 0x10014113
mov eax, dword [ebp - 0x140]
movzx eax, byte [ebp + eax - 0x998]
test eax, eax
je 0x10014111
push fcn.1000e758
mov edx, 0x100078b8
mov ecx, 0x10653d18
call fcn.1002c75b
mov ecx, eax
call fcn.1000ab4c
mov byte [ebp - 0x15], 1
jmp 0x10014113
jmp 0x100140c3
movzx eax, byte [ebp - 0x15]
test eax, eax
jne 0x10014136
push fcn.1000e758
mov edx, 0x100078bc
mov ecx, 0x10653d18
call fcn.1002c75b
mov ecx, eax
call fcn.1000ab4c
jmp 0x10013fb4
push 0
push 0x2a3c
push 1
call fcn.10025148
add esp, 0xc
jmp 0x100139e0
jmp 0x1001295d
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x714]
call fcn.1000adfa
push 1
lea ecx, [ebp - 0x6c4]
call fcn.1000ad98
mov dword [ebp - 4], 0x12
mov dword [ebp - 0x5e4], 0
lea eax, [ebp - 0x6c4]
push eax
push 0x6554
push 0
lea eax, [ebp - 0x828]
push eax
call fcn.100225a0
add esp, 0x10
push 0
lea ecx, [ebp - 0x6c4]
call fcn.1000adff
and dword [eax], 0
jmp 0x100141d6
push 0
lea ecx, [ebp - 0x6c4]
call fcn.1000adff
mov dword [ebp - 0x438], eax
mov eax, dword [ebp - 0x438]
mov eax, dword [eax]
dec eax
mov ecx, dword [ebp - 0x438]
mov dword [ecx], eax
push 0
lea ecx, [ebp - 0x6c4]
call fcn.1000adff
cmp dword [eax], 0xfffffffe
jne 0x10014222
mov dword [ebp - 0x5dc], 0x23ed15d
mov dword [ebp - 0x440], 0xe5a60d00
push 0
lea eax, [ebp - 0x5dc]
push eax
lea eax, [ebp - 0x440]
push eax
call fcn.100107f2
add esp, 0xc
mov eax, dword [ebp - 0x440]
mov dword [ebp - 0x5e4], eax
jmp 0x100141b2
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x6c4]
call fcn.1000adfa
mov eax, dword [ebp - 0x148]
mov eax, dword [eax]
mov ecx, dword [ebp - 0x148]
mov ecx, dword [ecx]
movzx ecx, word [ecx + 0x14]
lea eax, [eax + ecx + 0x18]
mov dword [ebp - 0x68], eax
and dword [ebp - 0x1f4], 0
jmp 0x1001426b
mov eax, dword [ebp - 0x1f4]
inc eax
mov dword [ebp - 0x1f4], eax
mov eax, dword [ebp - 0x68]
add eax, 0x28
mov dword [ebp - 0x68], eax
mov eax, dword [ebp - 0x148]
mov eax, dword [eax]
movzx eax, word [eax + 6]
cmp dword [ebp - 0x1f4], eax
jge 0x10014d7d
mov dword [ebp - 0x2c], 0xf46db505
mov dword [ebp - 0x70], 0xfffffffc
mov dword [ebp - 0x1fc], 0xfffffff8
mov eax, dword [ebp - 0x2c]
mov dword [ebp - 0x90c], eax
mov eax, dword [ebp - 0x2c]
mov ecx, dword [ebp - 0x2c]
lea eax, [eax + ecx - 1]
imul eax, dword [ebp - 0x2c]
mov dword [ebp - 0x70], eax
mov eax, dword [ebp - 0x2c]
cmp dword [ebp - 0x70], eax
jg 0x100142c9
mov dword [ebp - 0x448], 1
jmp 0x100142d0
and dword [ebp - 0x448], 0
cmp dword [ebp - 0x448], 0xfffa
jbe 0x100142eb
cmp dword [ebp - 0x70], 0
jne 0x100142eb
and dword [ebp - 0x5ec], 0
jmp 0x100142f5
mov dword [ebp - 0x5ec], 1
mov eax, dword [ebp - 0x2c]
mov dword [ebp - 0x830], eax
cmp dword [ebp - 0x2c], 0
mov eax, dword [ebp - 0x2c]
sub eax, dword [ebp - 0x70]
mov dword [ebp - 0x1fc], eax
cmp dword [ebp - 0x70], 0
je 0x10014500
mov dword [ebp - 0x478], 1
mov dword [ebp - 0x150], 0xfc72fa5d
mov dword [ebp - 0x470], 0xffffffff
mov dword [ebp - 0x5fc], 1
mov dword [ebp - 0x2c], 0xc
jmp 0x10014350
mov eax, dword [ebp - 0x2c]
dec eax
mov dword [ebp - 0x2c], eax
cmp dword [ebp - 0x2c], 0xffffffef
je 0x100144fe
mov dword [ebp - 0x158], 0x87fd
mov eax, dword [ebp - 0x478]
mov dword [ebp - 0x890], eax
mov eax, dword [ebp - 0x158]
mov dword [ebp - 0x150], eax
cmp dword [ebp - 0x150], 0
je 0x1001441c
mov eax, dword [ebp - 0x2c]
mov dword [ebp - 0x838], eax
cmp dword [ebp - 0x1fc], 0x2bc90638
je 0x100143aa
mov dword [ebp - 0x450], 1
jmp 0x100143b1
and dword [ebp - 0x450], 0
cmp dword [ebp - 0x450], 0x19d8
jne 0x100143c9
mov dword [ebp - 0x5f4], 1
jmp 0x100143d0
and dword [ebp - 0x5f4], 0
mov eax, 0xfff9
test eax, eax
jne 0x100143e5
mov dword [ebp - 0x458], 1
jmp 0x100143ec
and dword [ebp - 0x458], 0
mov eax, dword [ebp - 0x1fc]
mov dword [ebp - 0x150], eax
mov eax, dword [ebp - 0x150]
mov ecx, dword [ebp - 0x458]
lea eax, [eax + ecx + 0x6770ea16]
sub eax, dword [ebp - 0x70]
je 0x1001441c
mov dword [ebp - 0x460], 1
jmp 0x10014423
and dword [ebp - 0x460], 0
mov eax, dword [ebp - 0x460]
mov dword [ebp - 0x70], eax
mov eax, dword [ebp - 0x158]
cmp dword [ebp - 0x70], eax
jne 0x10014443
mov dword [ebp - 0x468], 1
jmp 0x1001444a
and dword [ebp - 0x468], 0
mov eax, dword [ebp - 0x468]
mov dword [ebp - 0x470], eax
mov eax, dword [ebp - 0x470]
imul eax, dword [ebp - 0x478]
cmp eax, 1
jle 0x10014474
mov dword [ebp - 0x480], 1
jmp 0x1001447b
and dword [ebp - 0x480], 0
mov eax, dword [ebp - 0x480]
sub eax, 0x837e
cmp eax, 0xfffffff9
jbe 0x10014497
mov dword [ebp - 0x488], 1
jmp 0x1001449e
and dword [ebp - 0x488], 0
mov eax, dword [ebp - 0x488]
sub eax, dword [ebp - 0x158]
jne 0x100144be
cmp dword [ebp - 0x158], 0
jne 0x100144be
and dword [ebp - 0x490], 0
jmp 0x100144c8
mov dword [ebp - 0x490], 1
cmp dword [ebp - 0x490], 0x26a8acdd
jl 0x100144e6
cmp dword [ebp - 0x2c], 0
je 0x100144e6
mov dword [ebp - 0x498], 1
jmp 0x100144ed
and dword [ebp - 0x498], 0
mov eax, dword [ebp - 0x498]
mov dword [ebp - 0x5fc], eax
jmp 0x10014349
jmp 0x10014522
mov byte [ebp - 0xb4], 0
lea eax, [ebp - 0xb4]
push eax
push 0x7968
push 0x3ec9
push 0
call fcn.100105a5
add esp, 0x10
mov eax, dword [ebp - 0x68]
cmp dword [eax + 0x10], 0
jne 0x10014a45
mov dword [ebp - 0xe0], 0xdb6d0374
mov dword [ebp - 0xe8], 5
push 3
lea ecx, [ebp - 0x58c]
call fcn.1000ad98
mov dword [ebp - 4], 0x13
mov dword [ebp - 0xac], 0xc9ebf495
mov dword [ebp - 0x4d0], 0x67bc620
mov dword [ebp - 0x204], 0xcad8e65d
push 0
lea eax, [ebp - 0x8d8]
push eax
lea eax, [ebp - 0x58c]
push eax
call fcn.10017714
add esp, 0xc
mov eax, dword [ebp - 0xac]
mov ecx, dword [ebp - 0xac]
dec ecx
mov dword [ebp - 0xac], ecx
test eax, eax
jne 0x100146a4
push 1
lea ecx, [ebp - 0x58c]
call fcn.1000adff
mov dword [eax], 0xf74
mov eax, 0xf74
test eax, eax
jne 0x1001465f
or eax, 0xffffffff
je 0x10014641
push 1
lea ecx, [ebp - 0x58c]
call fcn.1000adff
mov dword [eax], 0xffff
mov eax, 0xffff
sub eax, dword [ebp - 0xe0]
cmp eax, dword [ebp - 0xac]
je 0x100145ff
mov dword [ebp - 0x4a0], 1
jmp 0x10014606
and dword [ebp - 0x4a0], 0
mov eax, dword [ebp - 0x4a0]
neg eax
mov dword [ebp - 0xe8], eax
mov eax, dword [ebp - 0xe8]
mov dword [ebp - 0x840], eax
mov eax, dword [ebp - 0xac]
mov dword [ebp - 0x898], eax
cmp dword [ebp - 0xe8], 0
je 0x10014641
mov dword [ebp - 0x4a8], 1
jmp 0x10014648
and dword [ebp - 0x4a8], 0
mov eax, dword [ebp - 0xe0]
cmp dword [ebp - 0x4a8], eax
jle 0x1001465f
and dword [ebp - 0x4b0], 0
jmp 0x10014669
mov dword [ebp - 0x4b0], 1
xor eax, eax
inc eax
sub eax, dword [ebp - 0x4b0]
cmp eax, dword [ebp - 0xac]
jl 0x10014686
mov dword [ebp - 0x4b8], 1
jmp 0x1001468d
and dword [ebp - 0x4b8], 0
mov eax, dword [ebp - 0xac]
cmp dword [ebp - 0x4b8], eax
jge 0x100146a4
and dword [ebp - 0x4c0], 0
jmp 0x100146ae
mov dword [ebp - 0x4c0], 1
cmp dword [ebp - 0x4c0], 0x1958
je 0x100146c6
mov dword [ebp - 0x4c8], 1
jmp 0x100146cd
and dword [ebp - 0x4c8], 0
mov eax, dword [ebp - 0x4c8]
add eax, 0x3585ca25
cmp eax, dword [ebp - 0xe0]
jg 0x10014702
push 0
lea ecx, [ebp - 0x58c]
call fcn.1000adff
cmp dword [eax], 0
je 0x10014702
cmp dword [ebp - 0xe8], 0
je 0x10014702
cmp dword [ebp - 0xe0], 0
mov dword [ebp - 0x4d0], 9
cmp dword [ebp - 0x4d0], 0
jne 0x10014727
cmp dword [ebp - 0xe0], 0
jne 0x10014727
and dword [ebp - 0x4d8], 0
jmp 0x10014731
mov dword [ebp - 0x4d8], 1
mov eax, dword [ebp - 0x4d8]
mov dword [ebp - 0x204], eax
mov eax, dword [ebp - 0xe0]
mov dword [ebp - 0x204], eax
mov eax, dword [ebp - 0x204]
mov dword [ebp - 0xe8], eax
mov esi, dword [ebp - 0xe8]
push 1
lea ecx, [ebp - 0x58c]
call fcn.1000adff
mov dword [eax], esi
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x58c]
call fcn.1000adfa
push dword [ebp - 0x27c]
push 0
push 1
push 0x1929
lea eax, [ebp - 0x214]
push eax
push dword [ebp - 0x604]
push 0x7e8e
push dword [ebp - 0x68]
push 0x482a
call fcn.1001949d
add esp, 0x24
mov dword [ebp - 0x848], 5
mov dword [ebp - 0x170], 1
mov dword [ebp - 0x904], 0xf3de0369
push 2
lea ecx, [ebp - 0x8e4]
call fcn.1000ad98
mov dword [ebp - 4], 0x14
mov dword [ebp - 0x120], 0xffff
mov dword [ebp - 0x28], 0
jmp 0x100147f6
mov eax, dword [ebp - 0x28]
inc eax
mov dword [ebp - 0x28], eax
cmp dword [ebp - 0x28], 2
jge 0x1001480c
mov eax, dword [ebp - 0x28]
mov dword [ebp + eax*4 - 0x7e4], 0x5f70
jmp 0x100147ef
mov dword [ebp - 0x28], 0
jmp 0x1001481c
mov eax, dword [ebp - 0x28]
inc eax
mov dword [ebp - 0x28], eax
cmp dword [ebp - 0x28], 2
jge 0x10014838
push dword [ebp - 0x28]
lea ecx, [ebp - 0x8e4]
call fcn.1000adff
mov dword [eax], 0x780ca9f8
jmp 0x10014815
mov dword [ebp - 0x28], 0
jmp 0x10014848
mov eax, dword [ebp - 0x28]
inc eax
mov dword [ebp - 0x28], eax
cmp dword [ebp - 0x28], 2
jge 0x1001485e
mov eax, dword [ebp - 0x28]
mov dword [ebp + eax*4 - 0x958], 0x2da3c3d
jmp 0x10014841
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x7e4], 0
je 0x100148dc
mov dword [ebp - 0x850], 0xb546158d
mov dword [ebp - 0x8a0], 0x8c3ad3b3
mov dword [ebp - 0x858], 0xffffffff
mov dword [ebp - 0x160], 0
jmp 0x100148a5
mov eax, dword [ebp - 0x160]
inc eax
mov dword [ebp - 0x160], eax
cmp dword [ebp - 0x160], 2
jge 0x100148c1
mov eax, dword [ebp - 0x160]
mov dword [ebp + eax*4 - 0x950], 0
jmp 0x10014898
lea eax, [ebp - 0x120]
push eax
push 0
push 0x2a6a
call fcn.100175dd
add esp, 0xc
jmp 0x10014a31
push 3
lea ecx, [ebp - 0x8d4]
call fcn.1000ad98
mov byte [ebp - 4], 0x15
mov dword [ebp - 0x168], 0
jmp 0x10014906
mov eax, dword [ebp - 0x168]
inc eax
mov dword [ebp - 0x168], eax
cmp dword [ebp - 0x168], 3
jge 0x10014928
push dword [ebp - 0x168]
lea ecx, [ebp - 0x8d4]
call fcn.1000adff
mov dword [eax], 0x40c18ab9
jmp 0x100148f9
mov dword [ebp - 0x170], 0
jmp 0x10014941
mov eax, dword [ebp - 0x170]
dec eax
mov dword [ebp - 0x170], eax
cmp dword [ebp - 0x170], 0xffffffef
jl 0x10014a22
push 2
lea ecx, [ebp - 0x774]
call fcn.1000ad98
mov byte [ebp - 4], 0x16
mov dword [ebp - 0x178], 0
jmp 0x10014978
mov eax, dword [ebp - 0x178]
inc eax
mov dword [ebp - 0x178], eax
cmp dword [ebp - 0x178], 2
jge 0x1001499a
push dword [ebp - 0x178]
lea ecx, [ebp - 0x774]
call fcn.1000adff
mov dword [eax], 0x64ea33a4
jmp 0x1001496b
mov byte [ebp - 0xb5], 0
movzx eax, byte [ebp - 0xb5]
test eax, eax
je 0x100149b6
push 0
push 0
call dword [sym.imp.OLEAUT32.dll_VariantCopyInd]
mov dword [ebp - 0x120], 0
jmp 0x100149cf
mov eax, dword [ebp - 0x120]
inc eax
mov dword [ebp - 0x120], eax
cmp dword [ebp - 0x120], 1
jg 0x10014a0e
push 0x1846
push 0x13cf
push 0x1dab
push 0
push 0x78fa
push 0x21a6
push 0x2f85
push 0x23a3
lea eax, [ebp - 0x774]
push eax
call fcn.1002286d
add esp, 0x24
jmp 0x100149c2
mov byte [ebp - 4], 0x15
lea ecx, [ebp - 0x774]
call fcn.1000adfa
jmp 0x10014934
mov byte [ebp - 4], 0x14
lea ecx, [ebp - 0x8d4]
call fcn.1000adfa
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x8e4]
call fcn.1000adfa
jmp 0x10014255
mov dword [ebp - 0x38], 0
mov dword [ebp - 0x128], 0
mov dword [ebp - 0x20c], 0xfffffffd
mov dword [ebp - 0x180], 0xffff
mov dword [ebp - 0x634], 0
mov eax, dword [ebp - 0x38]
mov dword [ebp - 0x20c], eax
cmp dword [ebp - 0x38], 0
jg 0x10014a8f
mov dword [ebp - 0x4e0], 1
jmp 0x10014a96
and dword [ebp - 0x4e0], 0
mov eax, dword [ebp - 0x38]
sub eax, dword [ebp - 0x4e0]
cmp eax, 0x57688195
je 0x10014ab2
mov dword [ebp - 0x4e8], 1
jmp 0x10014ab9
and dword [ebp - 0x4e8], 0
mov eax, dword [ebp - 0x38]
cmp dword [ebp - 0x4e8], eax
jge 0x10014ad0
mov dword [ebp - 0x4f0], 1
jmp 0x10014ad7
and dword [ebp - 0x4f0], 0
mov eax, dword [ebp - 0x38]
mov dword [ebp - 0x128], eax
mov eax, dword [ebp - 0x128]
imul eax, dword [ebp - 0x4f0]
cmp eax, dword [ebp - 0x38]
jle 0x10014afe
mov dword [ebp - 0x238], 1
jmp 0x10014b05
and dword [ebp - 0x238], 0
cmp dword [ebp - 0x238], 5
jb 0x10014b20
cmp dword [ebp - 0x180], 0
jne 0x10014b20
and dword [ebp - 0x23c], 0
jmp 0x10014b2a
mov dword [ebp - 0x23c], 1
cmp dword [ebp - 0x23c], 5
je 0x10014b3f
mov dword [ebp - 0x244], 1
jmp 0x10014b46
and dword [ebp - 0x244], 0
mov eax, dword [ebp - 0x38]
cmp dword [ebp - 0x244], eax
jne 0x10014caf
mov dword [ebp - 0xf0], 0x6e74
mov dword [ebp - 0x264], 0xfffffff7
mov dword [ebp - 0x614], 0xffffffff
cmp dword [ebp - 0xf0], 0
jne 0x10014b88
mov dword [ebp - 0x254], 1
jmp 0x10014b8f
and dword [ebp - 0x254], 0
cmp dword [ebp - 0xf0], 0
je 0x10014ba1
cmp dword [ebp - 0xf0], 0
jne 0x10014bed
mov eax, dword [ebp - 0xf0]
sub eax, dword [ebp - 0xf0]
je 0x10014bc8
mov eax, 0xe50714ba
test eax, eax
je 0x10014bc8
xor eax, eax
je 0x10014bc8
mov dword [ebp - 0x24c], 1
jmp 0x10014bcf
and dword [ebp - 0x24c], 0
mov eax, dword [ebp - 0x128]
cmp dword [ebp - 0x24c], eax
jl 0x10014be6
mov eax, 0x57cf7a02
test eax, eax
je 0x10014bed
cmp dword [ebp - 0x180], 0
mov eax, dword [ebp - 0xf0]
mov dword [ebp - 0x7ac], eax
or eax, 0xffffffff
sub eax, dword [ebp - 0x20c]
imul eax, eax, 0x971c
cmp dword [ebp - 0x254], eax
jg 0x10014c22
cmp dword [ebp - 0x128], 0
jne 0x10014c22
and dword [ebp - 0x25c], 0
jmp 0x10014c2c
mov dword [ebp - 0x25c], 1
mov eax, dword [ebp - 0x180]
cmp dword [ebp - 0x25c], eax
jge 0x10014c46
mov dword [ebp - 0x60c], 1
jmp 0x10014c4d
and dword [ebp - 0x60c], 0
mov eax, dword [ebp - 0x38]
mov dword [ebp - 0x7b0], eax
mov dword [ebp - 0x264], 0xeeb4983
mov eax, dword [ebp - 0x38]
cmp dword [ebp - 0x264], eax
jne 0x10014c77
mov dword [ebp - 0x26c], 1
jmp 0x10014c7e
and dword [ebp - 0x26c], 0
mov eax, dword [ebp - 0x38]
cmp dword [ebp - 0x26c], eax
jge 0x10014c95
mov dword [ebp - 0x274], 1
jmp 0x10014c9c
and dword [ebp - 0x274], 0
mov eax, dword [ebp - 0x274]
add eax, 0xcf04
mov dword [ebp - 0x614], eax
jmp 0x10014d18
mov dword [ebp - 0x61c], 0xad537e8f
mov dword [ebp - 0x62c], 4
mov dword [ebp - 0x624], 1
push 1
push 0
push 0x5a57
lea eax, [ebp - 0x61c]
push eax
push 0x4970
lea eax, [ebp - 0x38]
push eax
lea eax, [ebp - 0x624]
push eax
lea eax, [ebp - 0x20c]
push eax
lea eax, [ebp - 0x180]
push eax
lea eax, [ebp - 0x62c]
push eax
lea eax, [ebp - 0x634]
push eax
lea eax, [ebp - 0x128]
push eax
call fcn.1001fb90
add esp, 0x30
push 4
push 0x1000
mov eax, dword [ebp - 0x68]
push dword [eax + 0x10]
mov eax, dword [ebp - 0x68]
mov ecx, dword [ebp - 0x27c]
add ecx, dword [eax + 0xc]
push ecx
push 0xbb15
push 0xc725
call fcn.10032708
pop ecx
pop ecx
call eax
mov dword [ebp - 0x214], eax
mov eax, dword [ebp - 0x68]
push dword [eax + 0x10]
mov eax, dword [ebp - 0x68]
mov ecx, dword [ebp - 0x63c]
add ecx, dword [eax + 0x14]
push ecx
push dword [ebp - 0x214]
call fcn.1003286a
add esp, 0xc
mov eax, dword [ebp - 0x68]
mov ecx, dword [ebp - 0x214]
mov dword [eax + 8], ecx
jmp 0x10014255
jmp 0x10014dbc
push 0xad5
push 0x59d
push 0x6da
push 0x1665
push 0x19e9
push 0x8b
push 0x14a3
push 0x6bc
push 0x1ef3
push 0x12dc
push 0x189e
call dword [sym.imp.GDI32.dll_StretchBlt]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop esi
mov esp, ebp
pop ebp
ret