Function at 0x1001d66c
Capabilities:
Accept command line arguments

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x1007357d
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
mov eax, 0x108c
call fcn.1006e6a0
push ebx
push esi
push edi
movzx eax, byte [ebp + 0x24]
test eax, eax
je 0x1001d770
mov eax, dword [ebp + 0xc]
mov dword [ebp - 0xa88], eax
mov eax, dword [ebp + 8]
mov dword [ebp - 0xa48], eax
mov eax, dword [ebp + 0x14]
mov dword [ebp - 0xa90], eax
lea eax, [ebp + 0x2c]
mov dword [ebp - 0xaa8], eax
mov eax, dword [ebp - 0xaa8]
movzx eax, byte [eax]
test eax, eax
je 0x1001d6f6
mov eax, dword [ebp - 0xa48]
mov dword [ebp - 0xa50], eax
mov eax, dword [ebp - 0xa50]
mov dword [ebp - 0xa80], eax
mov eax, dword [ebp - 0xa80]
mov eax, dword [eax]
mov eax, dword [eax]
and dword [eax + 0xc], 0
jmp 0x1001d76b
mov eax, dword [ebp - 0xa88]
mov dword [ebp - 0xa98], eax
mov eax, dword [ebp - 0xa90]
mov dword [ebp - 0xaa0], eax
mov eax, dword [ebp - 0xa98]
mov dword [ebp - 0x140], eax
mov eax, dword [ebp - 0xaa0]
mov dword [ebp - 0x974], eax
mov eax, dword [ebp - 0x140]
mov dword [eax], 0
jmp 0x1001d745
mov eax, dword [ebp - 0x140]
mov eax, dword [eax]
inc eax
mov ecx, dword [ebp - 0x140]
mov dword [ecx], eax
mov eax, dword [ebp - 0x140]
cmp dword [eax], 3
jge 0x1001d76b
mov eax, dword [ebp - 0x140]
push dword [eax]
mov ecx, dword [ebp - 0x974]
call fcn.1002d7f4
mov dword [eax], 1
jmp 0x1001d734
jmp 0x10024ff9
mov eax, dword [ebp + 0x28]
mov dword [ebp - 0xac8], eax
lea eax, [ebp + 0x18]
mov dword [ebp - 0xab0], eax
mov eax, dword [ebp + 0x1c]
mov dword [ebp - 0xad0], eax
mov eax, dword [ebp + 0x10]
mov dword [ebp - 0xac0], eax
mov eax, dword [ebp + 0x20]
mov dword [ebp - 0xab8], eax
mov eax, dword [ebp - 0xab0]
movzx eax, byte [eax]
test eax, eax
je 0x10024fe1
mov eax, dword [ebp - 0xab8]
mov dword [ebp - 0xb14], eax
mov eax, dword [ebp - 0xac0]
mov dword [ebp - 0xa78], eax
mov eax, dword [ebp - 0xac8]
mov dword [ebp - 0x808], eax
mov eax, dword [ebp - 0xad0]
mov dword [ebp - 0x348], eax
mov dword [ebp - 0x2b8], 0x6326
mov dword [ebp - 0xd84], 0xa21e1d82
mov dword [ebp - 0xd80], 0xa21e1d82
mov dword [ebp - 0xd7c], 0xa21e1d82
mov dword [ebp - 0xd78], 0xa21e1d82
mov dword [ebp - 0xc6c], 0xc863cc1d
mov dword [ebp - 0xc68], 0xc863cc1d
mov dword [ebp - 0xc64], 0xc863cc1d
mov dword [ebp - 0xc60], 0xc863cc1d
lea ecx, [ebp - 0x365]
call fcn.1002d803
push eax
lea eax, [ebp - 0xc5c]
push eax
lea eax, [ebp - 0xc6c]
push eax
lea ecx, [ebp - 0x1040]
call fcn.1002d806
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0xea0]
call fcn.1002d7c0
and dword [ebp - 4], 0
mov dword [ebp - 0x1a4], 0xa60915bb
push 4
lea ecx, [ebp - 0xbb4]
call fcn.1002d70f
mov byte [ebp - 4], 1
mov dword [ebp - 0x38], 0
jmp 0x1001d89c
mov eax, dword [ebp - 0x38]
inc eax
mov dword [ebp - 0x38], eax
cmp dword [ebp - 0x38], 4
jge 0x1001d8b2
mov eax, dword [ebp - 0x38]
mov dword [ebp + eax*4 - 0x1038], 0xe6bacd79
jmp 0x1001d895
mov dword [ebp - 0x38], 0
jmp 0x1001d8c2
mov eax, dword [ebp - 0x38]
inc eax
mov dword [ebp - 0x38], eax
cmp dword [ebp - 0x38], 1
jge 0x1001d8d8
mov eax, dword [ebp - 0x38]
mov dword [ebp + eax*4 - 0xf6c], 0xffffffff
jmp 0x1001d8bb
lea eax, [ebp - 0x38]
push eax
push 0x24cb
push 0x46fe
lea eax, [ebp - 0xbb4]
push eax
push 0
push 0x4e68
push 0x40ff
call fcn.1000ad35
add esp, 0x1c
mov eax, dword [ebp - 0x1a4]
cmp dword [ebp - 0x2b8], eax
jl 0x1001d91b
mov dword [ebp - 0x4c0], 1
jmp 0x1001d922
and dword [ebp - 0x4c0], 0
cmp dword [ebp - 0x4c0], 0x278
je 0x1001d93a
mov dword [ebp - 0x844], 1
jmp 0x1001d941
and dword [ebp - 0x844], 0
mov eax, dword [ebp - 0x2b8]
mov dword [ebp - 0x818], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x818]
mov dword [ebp + eax - 0x1038], ecx
mov eax, dword [ebp - 0x818]
cmp eax, dword [ebp - 0x844]
jne 0x1001da4c
mov dword [ebp - 0x2a8], 0x2b60
mov dword [ebp - 0x854], 0x6e311378
push 3
lea ecx, [ebp - 0xbb4]
call fcn.1002d7f4
cmp dword [eax], 0
je 0x1001d9ab
push 0xfffffffffffffffb
pop eax
test eax, eax
je 0x1001d9ab
mov dword [ebp - 0x84c], 1
jmp 0x1001d9b2
and dword [ebp - 0x84c], 0
mov eax, dword [ebp - 0x84c]
mov dword [ebp - 0x854], eax
mov eax, dword [ebp - 0x854]
neg eax
cmp eax, 0x390d
jl 0x1001d9d9
mov dword [ebp - 0x85c], 1
jmp 0x1001d9e0
and dword [ebp - 0x85c], 0
mov eax, dword [ebp - 0x2a8]
cmp eax, dword [ebp - 0x85c]
jle 0x1001d9fa
mov dword [ebp - 0x864], 1
jmp 0x1001da01
and dword [ebp - 0x864], 0
push 4
pop eax
shl eax, 1
mov ecx, dword [ebp - 0x2a8]
imul ecx, dword [ebp - 0x864]
cmp dword [ebp + eax - 0xd84], ecx
jl 0x1001da28
mov dword [ebp - 0x86c], 1
jmp 0x1001da2f
and dword [ebp - 0x86c], 0
mov esi, dword [ebp - 0x2a8]
add esi, dword [ebp - 0x86c]
push 3
lea ecx, [ebp - 0xea0]
call fcn.1002d7f4
mov dword [eax], esi
jmp 0x1001da9e
mov dword [ebp - 0x1a4], 0
jmp 0x1001da65
mov eax, dword [ebp - 0x1a4]
inc eax
mov dword [ebp - 0x1a4], eax
cmp dword [ebp - 0x1a4], 3
jg 0x1001da9e
lea eax, [ebp - 0xbb4]
push eax
push 0
push 0x734f
push 0x6502
push 0x1628
push 0x705b
lea eax, [ebp - 0x2b8]
push eax
push 0
call fcn.10009ec9
add esp, 0x20
jmp 0x1001da58
mov byte [ebp - 4], 0
lea ecx, [ebp - 0xbb4]
call fcn.1002d7e6
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xea0]
call fcn.1002d7e6
push 2
lea ecx, [ebp - 0xf4]
call fcn.1002d70f
mov dword [ebp - 4], 2
mov dword [ebp - 0x2bc], 0x4157736d
mov dword [ebp - 0xae8], 0x4faf
mov dword [ebp - 0x654], 0xffffffff
push 3
lea ecx, [ebp - 0xcfc]
call fcn.1002d70f
mov byte [ebp - 4], 3
mov dword [ebp - 0x120], 0xfffffffe
mov dword [ebp - 0x154], 5
mov dword [ebp - 0x48], 0
jmp 0x1001db23
mov eax, dword [ebp - 0x48]
inc eax
mov dword [ebp - 0x48], eax
cmp dword [ebp - 0x48], 2
jge 0x1001db3f
push dword [ebp - 0x48]
lea ecx, [ebp - 0xf4]
call fcn.1002d7f4
mov dword [eax], 0xda0e60f9
jmp 0x1001db1c
mov dword [ebp - 0x48], 0
jmp 0x1001db4f
mov eax, dword [ebp - 0x48]
inc eax
mov dword [ebp - 0x48], eax
cmp dword [ebp - 0x48], 3
jge 0x1001db6b
push dword [ebp - 0x48]
lea ecx, [ebp - 0xcfc]
call fcn.1002d7f4
mov dword [eax], 0xb8821692
jmp 0x1001db48
push 1
lea ecx, [ebp - 0xf4]
call fcn.1002d7f4
push 1
lea ecx, [ebp - 0xf4]
call fcn.1002d7f4
push 1
lea ecx, [ebp - 0xf4]
call fcn.1002d7f4
push 1
lea ecx, [ebp - 0xf4]
call fcn.1002d7f4
push 1
lea ecx, [ebp - 0xf4]
call fcn.1002d7f4
mov esi, eax
push 1
lea ecx, [ebp - 0xf4]
call fcn.1002d7f4
mov ecx, dword [esi]
cmp ecx, dword [eax]
jle 0x1001dbcd
mov dword [ebp - 0x880], 1
jmp 0x1001dbd4
and dword [ebp - 0x880], 0
mov eax, dword [ebp - 0x880]
mov dword [ebp - 0x2bc], eax
mov esi, dword [ebp - 0x2bc]
dec esi
push 0
lea ecx, [ebp - 0xf4]
call fcn.1002d7f4
cmp esi, dword [eax]
jle 0x1001dc04
mov dword [ebp - 0x810], 1
jmp 0x1001dc0b
and dword [ebp - 0x810], 0
push 1
lea ecx, [ebp - 0xf4]
call fcn.1002d7f4
mov ecx, dword [ebp - 0x810]
cmp ecx, dword [eax]
jl 0x1001dc2e
mov dword [ebp - 0x3a4], 1
jmp 0x1001dc35
and dword [ebp - 0x3a4], 0
push 0
lea ecx, [ebp - 0xf4]
call fcn.1002d7f4
mov ecx, dword [ebp - 0x3a4]
cmp ecx, dword [eax]
jge 0x1001dc58
mov dword [ebp - 0x884], 1
jmp 0x1001dc5f
and dword [ebp - 0x884], 0
push 1
lea ecx, [ebp - 0xf4]
call fcn.1002d7f4
mov ecx, dword [ebp - 0x884]
add ecx, dword [eax]
jne 0x1001dc82
mov dword [ebp - 0xad8], 1
jmp 0x1001dc89
and dword [ebp - 0xad8], 0
push 1
lea ecx, [ebp - 0xf4]
call fcn.1002d7f4
mov eax, 0xac31
imul esi, eax, 0x6e6c
push 0
lea ecx, [ebp - 0xf4]
call fcn.1002d7f4
cmp esi, dword [eax]
jle 0x1001dcbe
mov dword [ebp - 0x3bc], 1
jmp 0x1001dcc5
and dword [ebp - 0x3bc], 0
push 1
lea ecx, [ebp - 0xf4]
call fcn.1002d7f4
mov ecx, dword [ebp - 0x3bc]
cmp ecx, dword [eax]
jne 0x1001dce8
mov dword [ebp - 0x64c], 1
jmp 0x1001dcef
and dword [ebp - 0x64c], 0
push 1
lea ecx, [ebp - 0xf4]
call fcn.1002d7f4
mov ecx, dword [ebp - 0x64c]
cmp ecx, dword [eax]
jg 0x1001dd12
mov dword [ebp - 0x3c4], 1
jmp 0x1001dd19
and dword [ebp - 0x3c4], 0
push 1
lea ecx, [ebp - 0xf4]
call fcn.1002d7f4
mov ecx, dword [ebp - 0x3c4]
sub ecx, dword [eax]
jns 0x1001dd3c
mov dword [ebp - 0x794], 1
jmp 0x1001dd43
and dword [ebp - 0x794], 0
push 0
lea ecx, [ebp - 0xf4]
call fcn.1002d7f4
mov ecx, dword [ebp - 0x794]
cmp ecx, dword [eax]
jg 0x1001dd66
mov dword [ebp - 0xae0], 1
jmp 0x1001dd6d
and dword [ebp - 0xae0], 0
mov eax, dword [ebp - 0xae8]
mov dword [ebp - 0xe2c], eax
push 1
lea ecx, [ebp - 0xf4]
call fcn.1002d7f4
cmp dword [eax], 0x79339b88
jg 0x1001dd9a
mov dword [ebp - 0x3cc], 1
jmp 0x1001dda1
and dword [ebp - 0x3cc], 0
mov eax, dword [ebp - 0x3cc]
mov dword [ebp - 0x654], eax
cmp dword [ebp - 0x654], 0
je 0x1001ddd4
push 1
lea ecx, [ebp - 0xcfc]
call fcn.1002d7f4
cmp dword [eax], 0
je 0x1001ddd4
mov dword [ebp - 0x3d4], 1
jmp 0x1001dddb
and dword [ebp - 0x3d4], 0
mov eax, dword [ebp - 0x120]
cmp dword [ebp - 0x3d4], eax
je 0x1001ddf5
mov dword [ebp - 0x838], 1
jmp 0x1001ddfc
and dword [ebp - 0x838], 0
mov eax, dword [ebp - 0x838]
mov dword [ebp - 0x154], eax
mov dword [ebp - 0x120], 0
jmp 0x1001de21
mov eax, dword [ebp - 0x120]
inc eax
mov dword [ebp - 0x120], eax
cmp dword [ebp - 0x120], 1
jg 0x1001dea1
lea eax, [ebp - 0xf4]
push eax
push 0
lea eax, [ebp - 0x120]
push eax
call fcn.1000ad63
add esp, 0xc
mov dword [ebp - 0x154], 1
jmp 0x1001de5b
mov eax, dword [ebp - 0x154]
dec eax
mov dword [ebp - 0x154], eax
cmp dword [ebp - 0x154], 0
jl 0x1001de9c
push 0x1188
push 0x1c1
push 0x4f4f
push 0x7c1f
push 0
lea eax, [ebp - 0xf4]
push eax
push 0x646
push 0x712
lea eax, [ebp - 0x2bc]
push eax
call fcn.10028627
add esp, 0x24
jmp 0x1001de4e
jmp 0x1001de14
mov byte [ebp - 4], 2
lea ecx, [ebp - 0xcfc]
call fcn.1002d7e6
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xf4]
call fcn.1002d7e6
mov dword [ebp - 0x58], 0xffffffff
mov dword [ebp - 0x34c], 1
mov dword [ebp - 0x324], 0x86335c0d
mov dword [ebp - 0x2cc], 0x355c
mov dword [ebp - 0x8c4], 1
mov dword [ebp - 0x14], 5
mov dword [ebp - 0x674], 0xf8169c14
push 1
lea ecx, [ebp - 0x398]
call fcn.1002d70f
mov dword [ebp - 4], 4
mov dword [ebp - 0xb18], 0xb704
mov dword [ebp - 0xf44], 9
mov dword [ebp - 0xaf0], 0x1db2
cmp dword [ebp - 0xaf0], 0x11ee
jge 0x1001dffa
xor eax, eax
inc eax
je 0x1001dffa
lea eax, [ebp - 0x3dc]
push eax
push 0x100080f0
call fcn.1005b040
pop ecx
pop ecx
cmp dword [ebp - 0x3dc], 0
jne 0x1001df6b
jmp 0x1001dffa
and dword [ebp - 0x1dc], 0
mov eax, dword [ebp - 0x1dc]
mov dword [ebp - 0x2c4], eax
and dword [ebp - 0x31c], 0
jmp 0x1001df94
mov eax, dword [ebp - 0x31c]
inc eax
mov dword [ebp - 0x31c], eax
mov eax, dword [ebp - 0x31c]
cmp eax, dword [ebp - 0x3dc]
jge 0x1001dfdc
lea eax, [ebp - 0xaf8]
push eax
push 0x100080f0
call fcn.1005b040
pop ecx
pop ecx
cmp dword [ebp - 0xaf8], 0
jne 0x1001dfcd
mov eax, dword [ebp - 0x2c4]
inc eax
mov dword [ebp - 0x2c4], eax
jmp 0x1001dfda
mov eax, dword [ebp - 0x1dc]
inc eax
mov dword [ebp - 0x1dc], eax
jmp 0x1001df87
push dword [ebp - 0x1dc]
push dword [ebp - 0x2c4]
push 0x100082b8
call fcn.1005b488
add esp, 0xc
jmp 0x1001df41
lea eax, [ebp - 0xe34]
push eax
push 0
lea eax, [ebp - 0x398]
push eax
call fcn.1000ad11
add esp, 0xc
mov eax, dword [ebp - 0x58]
mov dword [ebp - 0xe54], eax
cmp dword [ebp - 0x58], 1
jl 0x1001e02d
mov dword [ebp - 0x65c], 1
jmp 0x1001e034
and dword [ebp - 0x65c], 0
mov eax, dword [ebp - 0x65c]
mov dword [ebp - 0x34c], eax
mov eax, dword [ebp - 0x58]
cmp dword [ebp - 0x34c], eax
jl 0x1001e057
mov dword [ebp - 0x3e4], 1
jmp 0x1001e05e
and dword [ebp - 0x3e4], 0
mov eax, dword [ebp - 0x3e4]
mov dword [ebp - 0x324], eax
cmp dword [ebp - 0x324], 0xffffffff
jge 0x1001e07f
mov dword [ebp - 0x79c], 1
jmp 0x1001e086
and dword [ebp - 0x79c], 0
mov eax, dword [ebp - 0x58]
cmp dword [ebp - 0x79c], eax
jle 0x1001e09d
mov dword [ebp - 0x3ec], 1
jmp 0x1001e0a4
and dword [ebp - 0x3ec], 0
mov eax, dword [ebp - 0x58]
cmp dword [ebp - 0x3ec], eax
jg 0x1001e0c4
cmp dword [ebp - 0x2cc], 0
je 0x1001e0c4
mov dword [ebp - 0x664], 1
jmp 0x1001e0cb
and dword [ebp - 0x664], 0
mov eax, dword [ebp - 0x58]
cmp eax, dword [ebp - 0x664]
jge 0x1001e0e2
mov dword [ebp - 0x3f4], 1
jmp 0x1001e0e9
and dword [ebp - 0x3f4], 0
mov eax, dword [ebp - 0x3f4]
mov dword [ebp - 0x8c4], eax
cmp dword [ebp - 0x8c4], 1
jb 0x1001e10a
mov dword [ebp - 0x3fc], 1
jmp 0x1001e111
and dword [ebp - 0x3fc], 0
mov eax, dword [ebp - 0x3fc]
dec eax
cmp eax, dword [ebp - 0x2cc]
jne 0x1001e12c
mov dword [ebp - 0x66c], 1
jmp 0x1001e133
and dword [ebp - 0x66c], 0
cmp dword [ebp - 0x66c], 0
je 0x1001e148
mov dword [ebp - 0x404], 1
jmp 0x1001e14f
and dword [ebp - 0x404], 0
cmp dword [ebp - 0x404], 0xfffffffb
jl 0x1001e164
mov dword [ebp - 0x7a4], 1
jmp 0x1001e16b
and dword [ebp - 0x7a4], 0
mov eax, dword [ebp - 0x7a4]
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 0
je 0x1001e18c
cmp dword [ebp - 0x58], 0
je 0x1001e18c
mov dword [ebp - 0x40c], 1
jmp 0x1001e193
and dword [ebp - 0x40c], 0
mov eax, dword [ebp - 0x40c]
sub eax, 0x5b39c7d7
mov dword [ebp - 0x674], eax
jne 0x1001e1b8
mov eax, 0xa9c79ebe
test eax, eax
jne 0x1001e1b8
and dword [ebp - 0x414], 0
jmp 0x1001e1c2
mov dword [ebp - 0x414], 1
push 6
pop eax
sub eax, dword [ebp - 0x58]
cmp eax, dword [ebp - 0x414]
jg 0x1001e3e7
push 4
lea ecx, [ebp - 0xbcc]
call fcn.1002d70f
mov byte [ebp - 4], 5
mov dword [ebp - 0x67c], 0x77e2192f
mov dword [ebp - 0x2a4], 0
jmp 0x1001e208
mov eax, dword [ebp - 0x2a4]
inc eax
mov dword [ebp - 0x2a4], eax
cmp dword [ebp - 0x2a4], 4
jge 0x1001e227
push dword [ebp - 0x2a4]
lea ecx, [ebp - 0xbcc]
call fcn.1002d7f4
and dword [eax], 0
jmp 0x1001e1fb
mov byte [ebp - 0xad], 0
push 0x4825
lea eax, [ebp - 0xad]
push eax
push 0x710
push 0
call fcn.10025bb6
add esp, 0x10
mov dword [ebp - 0x14], 0
jmp 0x1001e259
mov eax, dword [ebp - 0x14]
dec eax
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 0
jl 0x1001e3d3
mov dword [ebp - 0xb08], 0xffffffff
push dword [ebp - 0x14]
lea ecx, [ebp - 0x398]
call fcn.1002d7f4
push dword [ebp - 0x14]
lea ecx, [ebp - 0x398]
call fcn.1002d7f4
push dword [ebp - 0x14]
lea ecx, [ebp - 0x398]
call fcn.1002d7f4
cmp dword [eax], 0xcd43
jne 0x1001e2bd
push 0
lea ecx, [ebp - 0xbcc]
call fcn.1002d7f4
cmp dword [eax], 0
je 0x1001e2bd
mov dword [ebp - 0x840], 1
jmp 0x1001e2c4
and dword [ebp - 0x840], 0
mov esi, dword [ebp - 0x34c]
imul esi, dword [ebp - 0x840]
push dword [ebp - 0x14]
lea ecx, [ebp - 0x398]
call fcn.1002d7f4
cmp esi, dword [eax]
jl 0x1001e2f2
cmp dword [ebp - 0x58], 0
jne 0x1001e2f2
and dword [ebp - 0x41c], 0
jmp 0x1001e2fc
mov dword [ebp - 0x41c], 1
push 0
lea ecx, [ebp - 0xbcc]
call fcn.1002d7f4
mov eax, dword [eax]
neg eax
cmp eax, dword [ebp - 0x41c]
jl 0x1001e321
mov dword [ebp - 0xb00], 1
jmp 0x1001e328
and dword [ebp - 0xb00], 0
mov eax, dword [ebp - 0xb08]
mov dword [ebp - 0x67c], eax
cmp dword [ebp - 0x67c], 2
jne 0x1001e352
mov eax, 0xba54
test eax, eax
je 0x1001e352
mov dword [ebp - 0x424], 1
jmp 0x1001e359
and dword [ebp - 0x424], 0
mov eax, dword [ebp - 0x2cc]
cmp dword [ebp - 0x424], eax
jge 0x1001e373
mov dword [ebp - 0x7ac], 1
jmp 0x1001e37a
and dword [ebp - 0x7ac], 0
push dword [ebp - 0x14]
lea ecx, [ebp - 0x398]
call fcn.1002d7f4
mov ecx, dword [ebp - 0x7ac]
mov dword [eax], ecx
mov byte [ebp - 0xaf], 0
movzx eax, byte [ebp - 0xaf]
test eax, eax
je 0x1001e3ce
push 0x5e38
push 0
push 0x6246
push 0x48ec
push 0x2b45
push 1
push 0x3cd6
push 0
push 0x6e91
call fcn.10015a3b
add esp, 0x24
jmp 0x1001e252
mov byte [ebp - 4], 4
lea ecx, [ebp - 0xbcc]
call fcn.1002d7e6
jmp 0x1001e4d7
mov dword [ebp - 0x298], 0
jmp 0x1001e400
mov eax, dword [ebp - 0x298]
inc eax
mov dword [ebp - 0x298], eax
cmp dword [ebp - 0x298], 3
jge 0x1001e41c
mov eax, dword [ebp - 0x298]
mov dword [ebp + eax*4 - 0x1018], 0x8dfe
jmp 0x1001e3f3
mov dword [ebp - 0x14], 0
jmp 0x1001e42c
mov eax, dword [ebp - 0x14]
dec eax
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 0
jl 0x1001e4d7
mov dword [ebp - 0x2d4], 0xa6696b49
cmp dword [ebp - 0x324], 0xfffffff6
ja 0x1001e455
mov dword [ebp - 0xb10], 1
jmp 0x1001e45c
and dword [ebp - 0xb10], 0
push dword [ebp - 0x14]
lea ecx, [ebp - 0x398]
call fcn.1002d7f4
mov eax, dword [eax]
mov dword [ebp - 0x2d4], eax
mov eax, dword [ebp - 0x2d4]
mov dword [ebp - 0xf4c], eax
push dword [ebp - 0x14]
lea ecx, [ebp - 0x398]
call fcn.1002d7f4
mov ecx, dword [ebp - 0x2d4]
push 4
pop edx
shl edx, 1
add ecx, dword [ebp + edx - 0x1018]
imul ecx, dword [eax]
cmp ecx, dword [ebp - 0xb18]
jne 0x1001e4b5
mov dword [ebp - 0x42c], 1
jmp 0x1001e4bc
and dword [ebp - 0x42c], 0
push dword [ebp - 0x14]
lea ecx, [ebp - 0x398]
call fcn.1002d7f4
mov ecx, dword [ebp - 0x42c]
mov dword [eax], ecx
jmp 0x1001e425
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x398]
call fcn.1002d7e6
mov dword [ebp - 0xc4], 0x6326
push 1
lea ecx, [ebp - 0xb38]
call fcn.1002d70f
mov dword [ebp - 4], 6
mov dword [ebp - 0x94], 0xffffffff
lea eax, [ebp - 0xb38]
push eax
push 0x4896
lea eax, [ebp - 0xe5c]
push eax
push 0
call fcn.10015eea
add esp, 0x10
mov dword [ebp - 0x94], 0
jmp 0x1001e544
mov eax, dword [ebp - 0x94]
inc eax
mov dword [ebp - 0x94], eax
cmp dword [ebp - 0x94], 0
jg 0x1001e942
mov dword [ebp - 0x1e8], 0xb0ceafd
mov dword [ebp - 0x114], 0x37c5b151
mov dword [ebp - 0x1e8], 0
jmp 0x1001e57e
mov eax, dword [ebp - 0x1e8]
inc eax
mov dword [ebp - 0x1e8], eax
cmp dword [ebp - 0x1e8], 0
jg 0x1001e904
push 3
lea ecx, [ebp - 0x890]
call fcn.1002d70f
mov byte [ebp - 4], 7
and dword [ebp - 0xc44], 0
and dword [ebp - 0xc40], 0
and dword [ebp - 0xc3c], 0
and dword [ebp - 0xc38], 0
lea ecx, [ebp - 0x2b1]
call fcn.1002d803
push eax
lea eax, [ebp - 0xc34]
push eax
lea eax, [ebp - 0xc44]
push eax
lea ecx, [ebp - 0x1020]
call fcn.1002d806
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0xeb0]
call fcn.1002d7c0
mov byte [ebp - 4], 8
push 0
push 0x3883
push 0x1315
lea eax, [ebp - 0x890]
push eax
push 0x5cd1
push 0
push 1
push 0x769
lea eax, [ebp - 0xf98]
push eax
call fcn.100152b9
add esp, 0x24
mov byte [ebp - 0xb1], 0
push 0
lea eax, [ebp - 0xb1]
push eax
push 0x41eb
call fcn.1000a71b
add esp, 0xc
push 1
lea ecx, [ebp - 0x890]
call fcn.1002d7f4
and dword [eax], 0
jmp 0x1001e674
push 1
lea ecx, [ebp - 0x890]
call fcn.1002d7f4
mov dword [ebp - 0x684], eax
mov eax, dword [ebp - 0x684]
mov eax, dword [eax]
inc eax
mov ecx, dword [ebp - 0x684]
mov dword [ecx], eax
push 1
lea ecx, [ebp - 0x890]
call fcn.1002d7f4
cmp dword [eax], 0
jg 0x1001e8e1
mov dword [ebp - 0x70], 0x815cbcef
mov dword [ebp - 0x248], 0
jmp 0x1001e6aa
mov eax, dword [ebp - 0x248]
inc eax
mov dword [ebp - 0x248], eax
cmp dword [ebp - 0x248], 1
jge 0x1001e6c6
mov eax, dword [ebp - 0x248]
mov dword [ebp + eax*4 - 0xb28], 0xfffffffa
jmp 0x1001e69d
mov dword [ebp - 0x70], 0
jmp 0x1001e6d6
mov eax, dword [ebp - 0x70]
dec eax
mov dword [ebp - 0x70], eax
cmp dword [ebp - 0x70], 0
jl 0x1001e861
mov dword [ebp - 0x1f0], 0
jmp 0x1001e6f9
mov eax, dword [ebp - 0x1f0]
inc eax
mov dword [ebp - 0x1f0], eax
cmp dword [ebp - 0x1f0], 1
jge 0x1001e715
mov eax, dword [ebp - 0x1f0]
mov dword [ebp + eax*4 - 0xb20], 1
jmp 0x1001e6ec
push 1
lea ecx, [ebp - 0x890]
call fcn.1002d7f4
push dword [eax]
lea ecx, [ebp - 0xb38]
call fcn.1002d7f4
cmp dword [eax], 0x9ea7eb8e
je 0x1001e743
mov dword [ebp - 0x43c], 1
jmp 0x1001e74a
and dword [ebp - 0x43c], 0
mov eax, dword [ebp - 0x70]
mov ecx, dword [ebp - 0x70]
lea eax, [eax + ecx + 0xbd4a]
cmp eax, dword [ebp - 0x70]
jg 0x1001e768
mov dword [ebp - 0x68c], 1
jmp 0x1001e76f
and dword [ebp - 0x68c], 0
mov eax, dword [ebp - 0x70]
mov dword [ebp - 0x434], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x434]
mov dword [ebp + eax - 0xb20], ecx
push 1
lea ecx, [ebp - 0x890]
call fcn.1002d7f4
push dword [eax]
lea ecx, [ebp - 0xb38]
call fcn.1002d7f4
mov eax, dword [eax]
sub eax, dword [ebp - 0x434]
mov dword [ebp - 0x894], eax
push 0
lea ecx, [ebp - 0xeb0]
call fcn.1002d7f4
mov ecx, dword [ebp - 0x894]
mov dword [eax], ecx
mov eax, dword [ebp - 0x894]
mov dword [ebp - 0x114], eax
mov eax, dword [ebp - 0x43c]
sub eax, dword [ebp - 0x68c]
cmp dword [ebp - 0x114], eax
je 0x1001e7f4
mov dword [ebp - 0x444], 1
jmp 0x1001e7fb
and dword [ebp - 0x444], 0
push 1
lea ecx, [ebp - 0x890]
call fcn.1002d7f4
mov ecx, dword [ebp - 0x444]
cmp ecx, dword [eax]
jle 0x1001e81e
mov dword [ebp - 0x7b4], 1
jmp 0x1001e825
and dword [ebp - 0x7b4], 0
mov eax, dword [ebp - 0x7b4]
sub eax, 8
cmp eax, dword [ebp - 0x94]
jg 0x1001e842
mov dword [ebp - 0x44c], 1
jmp 0x1001e849
and dword [ebp - 0x44c], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x44c]
mov dword [ebp + eax - 0xb28], ecx
jmp 0x1001e6cf
push dword [ebp - 0x94]
lea ecx, [ebp - 0xb38]
call fcn.1002d7f4
cmp dword [eax], 0
jl 0x1001e8c3
mov eax, dword [ebp - 0x94]
sub eax, 0xffff
sub eax, dword [ebp - 0x114]
cmp eax, 0xb676bd76
ja 0x1001e89b
mov dword [ebp - 0x694], 1
jmp 0x1001e8a2
and dword [ebp - 0x694], 0
cmp dword [ebp - 0x694], 0x2e166580
jg 0x1001e8c3
cmp dword [ebp - 0x114], 0
je 0x1001e8c3
mov dword [ebp - 0x454], 1
jmp 0x1001e8ca
and dword [ebp - 0x454], 0
mov eax, dword [ebp - 0x454]
sub eax, dword [ebp - 0x114]
mov dword [ebp - 0x114], eax
jmp 0x1001e650
mov byte [ebp - 4], 7
lea ecx, [ebp - 0xeb0]
call fcn.1002d7e6
mov byte [ebp - 4], 6
lea ecx, [ebp - 0x890]
call fcn.1002d7e6
jmp 0x1001e571
mov byte [ebp - 0xb3], 0
movzx eax, byte [ebp - 0xb3]
test eax, eax
je 0x1001e93d
push 0x7a71
push 0x75a5
push 0
push 0x7b26
push 1
push 0x379d
push 0
push 0x168f
call fcn.100199c3
add esp, 0x20
jmp 0x1001e537
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xb38]
call fcn.1002d7e6
mov dword [ebp - 0xd94], 0xa21e1d82
mov dword [ebp - 0xd90], 0xa21e1d82
mov dword [ebp - 0xd8c], 0xa21e1d82
mov dword [ebp - 0xd88], 0xa21e1d82
mov dword [ebp - 0xc58], 0xc863cc1d
mov dword [ebp - 0xc54], 0xc863cc1d
mov dword [ebp - 0xc50], 0xc863cc1d
mov dword [ebp - 0xc4c], 0xc863cc1d
lea ecx, [ebp - 0x37d]
call fcn.1002d803
push eax
lea eax, [ebp - 0xc48]
push eax
lea eax, [ebp - 0xc58]
push eax
lea ecx, [ebp - 0x1080]
call fcn.1002d806
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0xf10]
call fcn.1002d7c0
mov dword [ebp - 4], 9
push 3
lea ecx, [ebp - 0x8d4]
call fcn.1002d70f
mov byte [ebp - 4], 0xa
mov dword [ebp - 0x6c], 0
jmp 0x1001e9fe
mov eax, dword [ebp - 0x6c]
inc eax
mov dword [ebp - 0x6c], eax
cmp dword [ebp - 0x6c], 3
jge 0x1001ea14
mov eax, dword [ebp - 0x6c]
mov dword [ebp + eax*4 - 0xec0], 0x7117
jmp 0x1001e9f7
mov dword [ebp - 0x6c], 0
jmp 0x1001ea24
mov eax, dword [ebp - 0x6c]
inc eax
mov dword [ebp - 0x6c], eax
cmp dword [ebp - 0x6c], 3
jge 0x1001ea40
push dword [ebp - 0x6c]
lea ecx, [ebp - 0x8d4]
call fcn.1002d7f4
mov dword [eax], 1
jmp 0x1001ea1d
push 0
lea ecx, [ebp - 0x8d4]
call fcn.1002d7f4
mov dword [eax], 2
jmp 0x1001ea79
push 0
lea ecx, [ebp - 0x8d4]
call fcn.1002d7f4
mov dword [ebp - 0x848], eax
mov eax, dword [ebp - 0x848]
mov eax, dword [eax]
dec eax
mov ecx, dword [ebp - 0x848]
mov dword [ecx], eax
push 0
lea ecx, [ebp - 0x8d4]
call fcn.1002d7f4
cmp dword [eax], 0
jl 0x1001edc3
mov dword [ebp - 0xb90], 0x1d39
cmp dword [ebp - 0xb90], 0x134b
jge 0x1001ed6e
lea eax, [ebp - 0x364]
push eax
lea eax, [ebp - 0x128]
push eax
push 0x100080f8
call fcn.1005b040
add esp, 0xc
mov eax, dword [ebp - 0x128]
inc eax
push eax
lea ecx, [ebp - 0xb48]
call fcn.1002d896
mov byte [ebp - 4], 0xb
mov dword [ebp - 0x278], 2
jmp 0x1001eaf4
mov eax, dword [ebp - 0x278]
inc eax
mov dword [ebp - 0x278], eax
mov eax, dword [ebp - 0x278]
cmp eax, dword [ebp - 0x128]
jg 0x1001eb36
lea eax, [ebp - 0xb98]
push eax
push 0x100080f4
call fcn.1005b040
pop ecx
pop ecx
lea eax, [ebp - 0x278]
push eax
push dword [ebp - 0xb98]
lea ecx, [ebp - 0xb48]
call fcn.1002d8fa
mov ecx, eax
call fcn.1002d83e
jmp 0x1001eae7
mov dword [ebp - 0x18c], 1
jmp 0x1001eb4f
mov eax, dword [ebp - 0x18c]
inc eax
mov dword [ebp - 0x18c], eax
mov eax, dword [ebp - 0x18c]
cmp eax, dword [ebp - 0x128]
jg 0x1001eba8
lea eax, [ebp - 0xe64]
push eax
push dword [ebp - 0x18c]
lea ecx, [ebp - 0xb48]
call fcn.1002d8fa
mov ecx, eax
call fcn.1002d828
push dword [eax]
lea eax, [ebp - 0xf50]
push eax
push dword [ebp - 0x18c]
lea ecx, [ebp - 0xb48]
call fcn.1002d8fa
mov ecx, eax
call fcn.1002d81a
push dword [eax]
call fcn.1003237d
pop ecx
pop ecx
jmp 0x1001eb42
and dword [ebp - 0xae4], 0
lea eax, [ebp - 0xae4]
push eax
push 1
lea ecx, [ebp - 0xbe4]
call fcn.1002d74b
mov byte [ebp - 4], 0xc
mov dword [ebp - 0xa40], 1
lea eax, [ebp - 0xa40]
push eax
mov eax, dword [ebp - 0x128]
inc eax
push eax
lea ecx, [ebp - 0xcb4]
call fcn.1002d74b
mov byte [ebp - 4], 0xd
lea eax, [ebp - 0xcb4]
push eax
lea eax, [ebp - 0xbe4]
push eax
push 1
lea eax, [ebp - 0xb48]
push eax
call fcn.1001d5c6
add esp, 0x10
and dword [ebp - 0x9e0], 0
lea eax, [ebp - 0x9e0]
push eax
mov eax, dword [ebp - 0x128]
inc eax
push eax
lea ecx, [ebp - 0xd38]
call fcn.1002d74b
mov byte [ebp - 4], 0xe
mov dword [ebp - 0x15c], 1
jmp 0x1001ec4c
mov eax, dword [ebp - 0x15c]
inc eax
mov dword [ebp - 0x15c], eax
mov eax, dword [ebp - 0x15c]
cmp eax, dword [ebp - 0x128]
jg 0x1001ec82
push dword [ebp - 0x15c]
lea ecx, [ebp - 0xbe4]
call fcn.1002d7f4
push dword [eax]
lea ecx, [ebp - 0xd38]
call fcn.1002d7f4
mov ecx, dword [ebp - 0x15c]
mov dword [eax], ecx
jmp 0x1001ec3f
mov eax, dword [ebp - 0x364]
mov dword [ebp - 0x984], eax
mov eax, dword [ebp - 0x364]
dec eax
mov dword [ebp - 0x364], eax
cmp dword [ebp - 0x984], 0
je 0x1001ed32
lea eax, [ebp - 0x69c]
push eax
lea eax, [ebp - 0x45c]
push eax
push 0x100080f8
call fcn.1005b040
add esp, 0xc
push dword [ebp - 0x45c]
lea ecx, [ebp - 0xcb4]
call fcn.1002d7f4
mov eax, dword [eax]
cmp eax, dword [ebp - 0x69c]
jge 0x1001eceb
push 0x10008150
call fcn.1005b826
pop ecx
jmp 0x1001ec82
push dword [ebp - 0x45c]
lea ecx, [ebp - 0xd38]
call fcn.1002d7f4
mov eax, dword [eax]
mov ecx, dword [ebp - 0x69c]
lea eax, [eax + ecx - 1]
mov dword [ebp - 0xb6c], eax
push dword [ebp - 0xb6c]
lea ecx, [ebp - 0xbe4]
call fcn.1002d7f4
push dword [eax]
push 0x10008100
call fcn.1005b488
pop ecx
pop ecx
jmp 0x1001ec82
mov byte [ebp - 4], 0xd
lea ecx, [ebp - 0xd38]
call fcn.1002d7e6
mov byte [ebp - 4], 0xc
lea ecx, [ebp - 0xcb4]
call fcn.1002d7e6
mov byte [ebp - 4], 0xb
lea ecx, [ebp - 0xbe4]
call fcn.1002d7e6
mov byte [ebp - 4], 0xa
lea ecx, [ebp - 0xb48]
call fcn.1002d8f5
push 0
lea ecx, [ebp - 0x8d4]
call fcn.1002d7f4
mov esi, dword [eax]
push 0
lea ecx, [ebp - 0x8d4]
call fcn.1002d7f4
mov eax, dword [eax]
mov ecx, dword [ebp + esi*4 - 0xec0]
mov dword [ebp + eax*4 - 0xec0], ecx
mov byte [ebp - 0x8e], 0
lea eax, [ebp - 0x8e]
push eax
push 1
push 0x773
push 0x1003
push 0
call fcn.1000a472
add esp, 0x14
jmp 0x1001ea55
mov byte [ebp - 4], 9
lea ecx, [ebp - 0x8d4]
call fcn.1002d7e6
mov dword [ebp - 0x17c], 0xa60915bb
mov dword [ebp - 0x164], 0xbd035c57
mov dword [ebp - 0xa8c], 0x6fda0246
mov dword [ebp - 0x994], 0xbc35
mov dword [ebp - 0x98c], 0xfffffffa
mov dword [ebp - 0x1b4], 1
mov dword [ebp - 0xc80], 0x7f17245c
mov dword [ebp - 0xc7c], 0x7f17245c
mov dword [ebp - 0xc78], 0x7f17245c
mov dword [ebp - 0xc74], 0x7f17245c
lea ecx, [ebp - 0x375]
call fcn.1002d803
push eax
lea eax, [ebp - 0xc70]
push eax
lea eax, [ebp - 0xc80]
push eax
lea ecx, [ebp - 0x1058]
call fcn.1002d806
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0x100c]
call fcn.1002d7c0
mov byte [ebp - 4], 0xf
lea eax, [ebp - 0x98c]
push eax
lea eax, [ebp - 0x164]
push eax
lea eax, [ebp - 0xa8c]
push eax
lea eax, [ebp - 0x1b4]
push eax
push 0
push 0x2a3d
lea eax, [ebp - 0x994]
push eax
call fcn.100164d3
add esp, 0x1c
mov dword [ebp - 0x1b4], 0
jmp 0x1001eeba
mov eax, dword [ebp - 0x1b4]
inc eax
mov dword [ebp - 0x1b4], eax
cmp dword [ebp - 0x1b4], 3
jg 0x1001ef2b
mov dword [ebp - 0xafc], 0xfffe
mov dword [ebp - 0x99c], 0xfffffffe
mov byte [ebp - 0x8f], 0
movzx eax, byte [ebp - 0x8f]
test eax, eax
je 0x1001eef1
push 0
call fcn.1000b35e
pop ecx
mov dword [ebp - 0x164], 0
jmp 0x1001ef0a
mov eax, dword [ebp - 0x164]
inc eax
mov dword [ebp - 0x164], eax
cmp dword [ebp - 0x164], 3
jg 0x1001ef29
mov dword [ebp - 0xafc], 1
mov dword [ebp - 0x99c], 1
jmp 0x1001eefd
jmp 0x1001eead
mov byte [ebp - 4], 9
lea ecx, [ebp - 0x100c]
call fcn.1002d7e6
push 4
lea ecx, [ebp - 0xbc0]
call fcn.1002d70f
mov byte [ebp - 4], 0x10
mov dword [ebp - 0x32c], 3
mov dword [ebp - 0x474], 1
mov dword [ebp - 0x9c], 1
mov dword [ebp - 0x2dc], 1
mov dword [ebp - 0x1f8], 0
jmp 0x1001ef8c
mov eax, dword [ebp - 0x1f8]
inc eax
mov dword [ebp - 0x1f8], eax
cmp dword [ebp - 0x1f8], 4
jge 0x1001efa8
mov eax, dword [ebp - 0x1f8]
mov dword [ebp + eax*4 - 0x87c], 0xffffffff
jmp 0x1001ef7f
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x87c]
mov dword [ebp - 0x9c], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x87c]
mov dword [ebp - 0xe6c], eax
mov eax, dword [ebp - 0x9c]
mov dword [ebp - 0xfe4], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x87c], 0
je 0x1001eff8
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x87c], 0
mov eax, dword [ebp - 0x9c]
mov dword [ebp - 0x9c], eax
mov eax, dword [ebp - 0x9c]
mov dword [ebp - 0xe74], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x87c]
cmp dword [ebp - 0x9c], eax
jle 0x1001f031
mov dword [ebp - 0x464], 1
jmp 0x1001f038
and dword [ebp - 0x464], 0
mov eax, dword [ebp - 0x2dc]
cmp dword [ebp - 0x464], eax
jle 0x1001f052
mov dword [ebp - 0x7bc], 1
jmp 0x1001f059
and dword [ebp - 0x7bc], 0
push 4
pop eax
imul eax, eax, 3
mov ecx, dword [ebp - 0x7bc]
sub ecx, dword [ebp + eax - 0x87c]
imul eax, ecx, 0x3927
cmp eax, 0xee56
jl 0x1001f085
mov dword [ebp - 0x46c], 1
jmp 0x1001f08c
and dword [ebp - 0x46c], 0
mov eax, dword [ebp - 0x2dc]
cmp dword [ebp - 0x46c], eax
jg 0x1001f0a6
mov dword [ebp - 0x6a4], 1
jmp 0x1001f0ad
and dword [ebp - 0x6a4], 0
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x87c]
cmp dword [ebp - 0x6a4], eax
jne 0x1001f0cd
mov dword [ebp - 0xa94], 1
jmp 0x1001f0d4
and dword [ebp - 0xa94], 0
mov eax, dword [ebp - 0x9c]
mov dword [ebp - 0xf60], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x2dc]
cmp dword [ebp + eax - 0x87c], ecx
jne 0x1001f101
mov dword [ebp - 0x8b8], 1
jmp 0x1001f108
and dword [ebp - 0x8b8], 0
mov eax, dword [ebp - 0x32c]
mov dword [ebp - 0x474], eax
mov eax, dword [ebp - 0x474]
mov dword [ebp - 0x9a4], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x87c]
imul eax, dword [ebp - 0x8b8]
push 4
pop ecx
imul ecx, ecx, 0
mov ecx, dword [ebp + ecx - 0x87c]
sub ecx, eax
mov dword [ebp - 0xb3c], ecx
mov eax, dword [ebp - 0x32c]
inc eax
mov dword [ebp - 0x32c], eax
mov eax, dword [ebp - 0x9a4]
cmp eax, dword [ebp - 0xb3c]
jg 0x1001f170
mov dword [ebp - 0x47c], 1
jmp 0x1001f177
and dword [ebp - 0x47c], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x47c]
mov dword [ebp + eax - 0x87c], ecx
mov byte [ebp - 0xb5], 0
movzx eax, byte [ebp - 0xb5]
test eax, eax
je 0x1001f1a4
push 0
call dword [sym.imp.GDI32.dll_CreatePatternBrush]
mov dword [ebp - 0x1c], 0
jmp 0x1001f1b4
mov eax, dword [ebp - 0x1c]
inc eax
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 4
jge 0x1001f1ca
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0x1078], 0xe6bacd79
jmp 0x1001f1ad
mov dword [ebp - 0x1c], 0
jmp 0x1001f1da
mov eax, dword [ebp - 0x1c]
inc eax
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 1
jge 0x1001f1f0
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0xe7c], 0xffffffff
jmp 0x1001f1d3
push 4
lea ecx, [ebp - 0xd68]
call fcn.1002d70f
mov byte [ebp - 4], 0x11
push 1
lea ecx, [ebp - 0x8ec]
call fcn.1002d70f
mov byte [ebp - 4], 0x12
mov dword [ebp - 0x24], 0
jmp 0x1001f222
mov eax, dword [ebp - 0x24]
inc eax
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 4
jge 0x1001f23e
push dword [ebp - 0x24]
lea ecx, [ebp - 0xd68]
call fcn.1002d7f4
mov dword [eax], 0x7571
jmp 0x1001f21b
mov dword [ebp - 0x24], 0
jmp 0x1001f24e
mov eax, dword [ebp - 0x24]
inc eax
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 1
jge 0x1001f26a
push dword [ebp - 0x24]
lea ecx, [ebp - 0x8ec]
call fcn.1002d7f4
mov dword [eax], 0x1febaeef
jmp 0x1001f247
mov dword [ebp - 0x24], 0
jmp 0x1001f27a
mov eax, dword [ebp - 0x24]
inc eax
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 2
jge 0x1001f290
mov eax, dword [ebp - 0x24]
mov dword [ebp + eax*4 - 0x918], 0xe00f6802
jmp 0x1001f273
push 0
lea ecx, [ebp - 0x8ec]
call fcn.1002d7f4
and dword [eax], 0
jmp 0x1001f2c6
push 0
lea ecx, [ebp - 0x8ec]
call fcn.1002d7f4
mov dword [ebp - 0x6ac], eax
mov eax, dword [ebp - 0x6ac]
mov eax, dword [eax]
inc eax
mov ecx, dword [ebp - 0x6ac]
mov dword [ecx], eax
push 0
lea ecx, [ebp - 0x8ec]
call fcn.1002d7f4
cmp dword [eax], 3
jg 0x1001f6cf
mov dword [ebp - 0x970], 0xfffe
mov dword [ebp - 0x96c], 0xfffe
mov dword [ebp - 0x968], 0xfffe
mov dword [ebp - 0x964], 0xfffe
push 4
lea ecx, [ebp - 0x960]
call fcn.1002d70f
mov byte [ebp - 4], 0x13
mov dword [ebp - 0x2c], 0xa2b441a6
mov dword [ebp - 0x250], 0
jmp 0x1001f335
mov eax, dword [ebp - 0x250]
inc eax
mov dword [ebp - 0x250], eax
cmp dword [ebp - 0x250], 4
jge 0x1001f354
push dword [ebp - 0x250]
lea ecx, [ebp - 0x960]
call fcn.1002d7f4
and dword [eax], 0
jmp 0x1001f328
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x970]
mov dword [ebp - 0xfa0], eax
push 0
lea ecx, [ebp - 0x8ec]
call fcn.1002d7f4
push 0
lea ecx, [ebp - 0x960]
call fcn.1002d7f4
mov dword [eax], 0x895196ee
mov dword [ebp - 0x2c], 0x895196ee
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x918]
mov dword [ebp - 0xe84], eax
mov eax, dword [ebp - 0x2c]
mov dword [ebp - 0xf68], eax
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x970]
mov dword [ebp - 0xe8c], eax
push 4
pop eax
shl eax, 0
push 4
pop ecx
shl ecx, 0
mov ecx, dword [ebp + ecx - 0x918]
cmp dword [ebp + eax - 0x918], ecx
je 0x1001f3ec
xor eax, eax
jne 0x1001f3ec
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x970], 0
je 0x1001f429
mov dword [ebp - 0x2c], 0
jmp 0x1001f3fc
mov eax, dword [ebp - 0x2c]
inc eax
mov dword [ebp - 0x2c], eax
cmp dword [ebp - 0x2c], 3
jg 0x1001f424
mov byte [ebp - 0x95], 0
movzx eax, byte [ebp - 0x95]
test eax, eax
je 0x1001f422
push 0
push 0x4cb9
call fcn.100148bc
pop ecx
pop ecx
jmp 0x1001f3f5
jmp 0x1001f6bb
mov dword [ebp - 0x2e4], 0x60d1
mov dword [ebp - 0xa9c], 0x1d4b4ea6
mov dword [ebp - 0xfcc], 8
mov dword [ebp - 0xe94], 1
mov dword [ebp - 0xf70], 0x203d7e6d
push 4
pop eax
shl eax, 0
mov dword [ebp + eax - 0x918], 1
mov dword [ebp - 0x2c], 3
jmp 0x1001f47c
mov eax, dword [ebp - 0x2c]
dec eax
mov dword [ebp - 0x2c], eax
cmp dword [ebp - 0x2c], 0
jl 0x1001f6bb
mov dword [ebp - 0x60], 0xc88fed6c
mov dword [ebp - 0xea4], 0x99fffbc9
mov dword [ebp - 0xd9c], 0xfc6bf2a6
mov dword [ebp - 0x9b4], 0x6852
mov eax, dword [ebp - 0x60]
mov dword [ebp - 0xda0], eax
mov eax, dword [ebp - 0x2e4]
cmp dword [ebp - 0x60], eax
jne 0x1001f4cb
mov dword [ebp - 0x484], 1
jmp 0x1001f4d2
and dword [ebp - 0x484], 0
mov eax, dword [ebp - 0x484]
neg eax
cmp eax, 0x6c1d
je 0x1001f4fc
push 3
lea ecx, [ebp - 0x960]
call fcn.1002d7f4
cmp dword [eax], 0
jne 0x1001f4fc
and dword [ebp - 0x7c4], 0
jmp 0x1001f506
mov dword [ebp - 0x7c4], 1
mov esi, dword [ebp - 0x60]
add esi, dword [ebp - 0x7c4]
push 0
lea ecx, [ebp - 0x8ec]
call fcn.1002d7f4
cmp esi, dword [eax]
jl 0x1001f52c
mov dword [ebp - 0x48c], 1
jmp 0x1001f533
and dword [ebp - 0x48c], 0
cmp dword [ebp - 0x48c], 0x60d4
jl 0x1001f54b
mov dword [ebp - 0x6b4], 1
jmp 0x1001f552
and dword [ebp - 0x6b4], 0
mov eax, dword [ebp - 0x2e4]
add eax, dword [ebp - 0x6b4]
je 0x1001f57b
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0x970], 0
je 0x1001f57b
mov dword [ebp - 0x494], 1
jmp 0x1001f582
and dword [ebp - 0x494], 0
mov eax, dword [ebp - 0x2e4]
cmp dword [ebp - 0x494], eax
jle 0x1001f5a2
cmp dword [ebp - 0x60], 0
je 0x1001f5a2
mov dword [ebp - 0x850], 1
jmp 0x1001f5a9
and dword [ebp - 0x850], 0
mov eax, dword [ebp - 0x60]
cmp dword [ebp - 0x850], eax
je 0x1001f5c0
mov dword [ebp - 0x49c], 1
jmp 0x1001f5c7
and dword [ebp - 0x49c], 0
push 2
lea ecx, [ebp - 0xd68]
call fcn.1002d7f4
mov eax, dword [eax]
cmp eax, dword [ebp - 0x49c]
jl 0x1001f5ea
mov dword [ebp - 0x6bc], 1
jmp 0x1001f5f1
and dword [ebp - 0x6bc], 0
mov eax, dword [ebp - 0x60]
add eax, dword [ebp - 0x6bc]
mov dword [ebp - 0x4a4], eax
push 3
lea ecx, [ebp - 0x960]
call fcn.1002d7f4
mov ecx, dword [ebp - 0x4a4]
mov dword [eax], ecx
mov eax, dword [ebp - 0x2c]
imul eax, dword [ebp - 0x4a4]
cmp eax, dword [ebp - 0x60]
je 0x1001f630
mov dword [ebp - 0x9ac], 1
jmp 0x1001f637
and dword [ebp - 0x9ac], 0
mov eax, dword [ebp - 0x60]
mov dword [ebp - 0xda8], eax
push 3
lea ecx, [ebp - 0x960]
call fcn.1002d7f4
imul eax, dword [eax], 0xbb35
add eax, 0x330167c3
sub eax, dword [ebp - 0x60]
push 4
pop ecx
shl ecx, 1
cmp eax, dword [ebp + ecx - 0x970]
jl 0x1001f675
mov dword [ebp - 0x7cc], 1
jmp 0x1001f67c
and dword [ebp - 0x7cc], 0
mov eax, dword [ebp - 0x7cc]
mov dword [ebp - 0xa9c], eax
push 1
lea eax, [ebp - 0x9b4]
push eax
push 0x574e
push 0x694f
push 0x548e
push 0
push 1
push 0x5137
push 0x14a5
call fcn.100152b9
add esp, 0x24
jmp 0x1001f475
mov byte [ebp - 4], 0x12
lea ecx, [ebp - 0x960]
call fcn.1002d7e6
jmp 0x1001f2a2
mov byte [ebp - 4], 0x11
lea ecx, [ebp - 0x8ec]
call fcn.1002d7e6
mov byte [ebp - 4], 0x10
lea ecx, [ebp - 0xd68]
call fcn.1002d7e6
mov dword [ebp - 0x1c], 0
jmp 0x1001f6fd
mov eax, dword [ebp - 0x1c]
inc eax
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 4
jge 0x1001f719
push dword [ebp - 0x1c]
lea ecx, [ebp - 0xbc0]
call fcn.1002d7f4
mov dword [eax], 0xca0e2c23
jmp 0x1001f6f6
mov dword [ebp - 0x40], 1
mov dword [ebp - 0x9bc], 0xfffffff6
mov dword [ebp - 0x40], 0
jmp 0x1001f73a
mov eax, dword [ebp - 0x40]
inc eax
mov dword [ebp - 0x40], eax
cmp dword [ebp - 0x40], 0
je 0x1001f8e1
mov dword [ebp - 0x200], 0xffffffff
mov dword [ebp - 0xb04], 0xc443
mov dword [ebp - 0x200], 0
jmp 0x1001f771
mov eax, dword [ebp - 0x200]
dec eax
mov dword [ebp - 0x200], eax
cmp dword [ebp - 0x200], 0xffffffed
jg 0x1001f8dc
mov dword [ebp - 0x124], 0xfffffffb
mov dword [ebp - 0x68], 0xffffffff
mov eax, dword [ebp - 0x40]
imul eax, dword [ebp - 0xb04]
sub eax, dword [ebp - 0x124]
je 0x1001f874
cmp dword [ebp - 0x40], 0
jne 0x1001f7bd
mov eax, 0x7ab6
test eax, eax
jne 0x1001f7bd
and dword [ebp - 0x4ac], 0
jmp 0x1001f7c7
mov dword [ebp - 0x4ac], 1
mov eax, dword [ebp - 0x4ac]
mov dword [ebp - 0x68], eax
cmp dword [ebp - 0x68], 0
jne 0x1001f7e5
cmp dword [ebp - 0x68], 0
jne 0x1001f7e5
and dword [ebp - 0x6c4], 0
jmp 0x1001f7ef
mov dword [ebp - 0x6c4], 1
mov eax, dword [ebp - 0x40]
add eax, dword [ebp - 0x6c4]
cmp eax, dword [ebp - 0x40]
jl 0x1001f809
mov dword [ebp - 0x4b4], 1
jmp 0x1001f810
and dword [ebp - 0x4b4], 0
mov eax, dword [ebp - 0x40]
cmp eax, dword [ebp - 0x4b4]
jge 0x1001f874
mov dword [ebp - 0x124], 0
jmp 0x1001f834
mov eax, dword [ebp - 0x124]
dec eax
mov dword [ebp - 0x124], eax
cmp dword [ebp - 0x124], 0xfffffffb
je 0x1001f859
mov byte [ebp - 0xb7], 0
movzx eax, byte [ebp - 0xb7]
test eax, eax
je 0x1001f857
push 0
call fcn.100272ef
pop ecx
jmp 0x1001f827
lea eax, [ebp - 0x40]
push eax
lea eax, [ebp - 0x68]
push eax
push 0
lea eax, [ebp - 0x9bc]
push eax
call fcn.10026d84
add esp, 0x10
jmp 0x1001f8d7
mov dword [ebp - 0x8a4], 0
push 0
lea eax, [ebp - 0x8a4]
push eax
lea eax, [ebp - 0x68]
push eax
call fcn.10027236
add esp, 0xc
mov dword [ebp - 0x68], 0
jmp 0x1001f8a3
mov eax, dword [ebp - 0x68]
inc eax
mov dword [ebp - 0x68], eax
cmp dword [ebp - 0x68], 0x1b
jne 0x1001f8d7
lea eax, [ebp - 0x124]
push eax
push 0x4291
push 0
push 0x54e1
push 0x814
lea eax, [ebp - 0x8a4]
push eax
push 0x6486
call fcn.100113ab
add esp, 0x1c
jmp 0x1001f89c
jmp 0x1001f764
jmp 0x1001f733
push 0
push 0xccc
call fcn.10018923
pop ecx
pop ecx
mov eax, dword [ebp - 0x17c]
cmp dword [ebp - 0xc4], eax
jl 0x1001f909
mov dword [ebp - 0x4bc], 1
jmp 0x1001f910
and dword [ebp - 0x4bc], 0
cmp dword [ebp - 0x4bc], 0x278
je 0x1001f928
mov dword [ebp - 0x4c4], 1
jmp 0x1001f92f
and dword [ebp - 0x4c4], 0
mov eax, dword [ebp - 0xc4]
mov dword [ebp - 0x6cc], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x6cc]
mov dword [ebp + eax - 0x1078], ecx
mov eax, dword [ebp - 0x6cc]
cmp eax, dword [ebp - 0x4c4]
jne 0x10020874
mov dword [ebp - 0x3c], 0xa4f833fc
push 1
lea ecx, [ebp - 0xb58]
call fcn.1002d70f
mov byte [ebp - 4], 0x14
mov dword [ebp - 0xfb8], 0xfffffffa
mov dword [ebp - 0xfb4], 0xfffffffa
mov dword [ebp - 0xfb0], 0xfffffffa
mov dword [ebp - 0xfac], 0xfffffffa
mov dword [ebp - 0x4dc], 0xffff
mov dword [ebp - 0x194], 0
jmp 0x1001f9c3
mov eax, dword [ebp - 0x194]
inc eax
mov dword [ebp - 0x194], eax
cmp dword [ebp - 0x194], 1
jge 0x1001f9df
mov eax, dword [ebp - 0x194]
mov dword [ebp + eax*4 - 0x290], 0xa8e
jmp 0x1001f9b6
push 0
push 0x7164
push 0
lea eax, [ebp - 0xb58]
push eax
push 0x60d7
lea eax, [ebp - 0x194]
push eax
push 0x6d96
push 1
push 0x290b
push 0x315c
call fcn.1001039b
add esp, 0x28
mov dword [ebp - 0x3c], 0
jmp 0x1001fa24
mov eax, dword [ebp - 0x3c]
inc eax
mov dword [ebp - 0x3c], eax
cmp dword [ebp - 0x3c], 0
jg 0x1001fbcf
mov dword [ebp - 0x28], 0x77dd6887
mov dword [ebp - 0x28], 0
jmp 0x1001fa45
mov eax, dword [ebp - 0x28]
dec eax
mov dword [ebp - 0x28], eax
cmp dword [ebp - 0x28], 0
jl 0x1001fbca
mov dword [ebp - 0x88], 8
mov dword [ebp - 0x6d4], 0x11e043ee
mov dword [ebp - 0x9cc], 0xc9f1
mov dword [ebp - 0x88], 0
jmp 0x1001fa86
mov eax, dword [ebp - 0x88]
inc eax
mov dword [ebp - 0x88], eax
cmp dword [ebp - 0x88], 0
jg 0x1001fb02
mov eax, dword [ebp - 0x28]
mov dword [ebp - 0xdb0], eax
mov eax, dword [ebp - 0x28]
cmp dword [ebp - 0x28], eax
jge 0x1001faac
mov dword [ebp - 0xaa4], 1
jmp 0x1001fab3
and dword [ebp - 0xaa4], 0
mov eax, dword [ebp - 0x88]
mov dword [ebp - 0xdb8], eax
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x28]
mov ecx, dword [ebp + ecx*4 - 0x290]
cmp dword [ebp + eax*4 - 0x290], ecx
jge 0x1001fae1
mov dword [ebp - 0x7d4], 1
jmp 0x1001fae8
and dword [ebp - 0x7d4], 0
push 0
lea ecx, [ebp - 0xb58]
call fcn.1002d7f4
mov ecx, dword [ebp - 0x7d4]
mov dword [eax], ecx
jmp 0x1001fa79
mov eax, dword [ebp - 0x88]
mov dword [ebp - 0x4cc], eax
push 0
lea ecx, [ebp - 0xb58]
call fcn.1002d7f4
mov ecx, dword [ebp - 0x4cc]
mov dword [eax], ecx
mov eax, dword [ebp - 0x28]
cmp dword [ebp - 0x4cc], eax
je 0x1001fb3a
mov dword [ebp - 0x4d4], 1
jmp 0x1001fb41
and dword [ebp - 0x4d4], 0
mov eax, dword [ebp - 0x28]
mov dword [ebp - 0x6d4], eax
mov eax, dword [ebp - 0x6d4]
cmp dword [ebp - 0x4d4], eax
jne 0x1001fb64
mov dword [ebp - 0x9c4], 1
jmp 0x1001fb6b
and dword [ebp - 0x9c4], 0
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp + eax*4 - 0x290]
mov dword [ebp - 0xb8c], eax
mov eax, dword [ebp - 0x3c]
mov ecx, dword [ebp - 0xb8c]
mov dword [ebp + eax*4 - 0x290], ecx
mov eax, dword [ebp - 0x88]
mov dword [ebp - 0xdc0], eax
cmp dword [ebp - 0x3c], 6
jge 0x1001fbb2
cmp dword [ebp - 0x9cc], 0
je 0x1001fbb2
mov dword [ebp - 0x858], 1
jmp 0x1001fbb9
and dword [ebp - 0x858], 0
mov eax, dword [ebp - 0x858]
mov dword [ebp - 0x88], eax
jmp 0x1001fa3e
jmp 0x1001fa1d
mov dword [ebp - 0x3c], 0
jmp 0x1001fbdf
mov eax, dword [ebp - 0x3c]
inc eax
mov dword [ebp - 0x3c], eax
cmp dword [ebp - 0x3c], 0
jg 0x1001fd48
mov dword [ebp - 0x80], 0xfffffffd
mov dword [ebp - 0xdc8], 0x9909d073
mov dword [ebp - 0xdd0], 0xfffffff9
mov dword [ebp - 0xdd8], 1
mov dword [ebp - 0xde0], 0xfffffffd
mov dword [ebp - 0xde8], 0xfffffff7
mov dword [ebp - 0xdf0], 0xfffffff6
mov dword [ebp - 0x80], 0
jmp 0x1001fc3c
mov eax, dword [ebp - 0x80]
inc eax
mov dword [ebp - 0x80], eax
cmp dword [ebp - 0x80], 0
jg 0x1001fcaf
mov dword [ebp - 0x16c], 0xd683a7ef
mov dword [ebp - 0x16c], 0
jmp 0x1001fc65
mov eax, dword [ebp - 0x16c]
inc eax
mov dword [ebp - 0x16c], eax
cmp dword [ebp - 0x16c], 1
jge 0x1001fc87
push dword [ebp - 0x16c]
lea ecx, [ebp - 0xb58]
call fcn.1002d7f4
mov dword [eax], 0xe469209a
jmp 0x1001fc58
mov byte [ebp - 0x9d], 0
movzx eax, byte [ebp - 0x9d]
test eax, eax
je 0x1001fcad
push 0x4560
push 0
push 0x688
call fcn.10019b0c
add esp, 0xc
jmp 0x1001fc35
mov dword [ebp - 0x80], 0
jmp 0x1001fcbf
mov eax, dword [ebp - 0x80]
inc eax
mov dword [ebp - 0x80], eax
cmp dword [ebp - 0x80], 0
jg 0x1001fd43
mov dword [ebp - 0xdf8], 0xdd79339b
mov dword [ebp - 0xe00], 0xffffffff
push 3
lea ecx, [ebp - 0xed0]
call fcn.1002d70f
mov byte [ebp - 4], 0x15
mov dword [ebp - 0x208], 0
jmp 0x1001fd03
mov eax, dword [ebp - 0x208]
inc eax
mov dword [ebp - 0x208], eax
cmp dword [ebp - 0x208], 3
jge 0x1001fd22
push dword [ebp - 0x208]
lea ecx, [ebp - 0xed0]
call fcn.1002d7f4
and dword [eax], 0
jmp 0x1001fcf6
mov eax, dword [ebp - 0x4dc]
inc eax
mov dword [ebp - 0x4dc], eax
mov byte [ebp - 4], 0x14
lea ecx, [ebp - 0xed0]
call fcn.1002d7e6
jmp 0x1001fcb8
jmp 0x1001fbd8
mov byte [ebp - 4], 0x10
lea ecx, [ebp - 0xb58]
call fcn.1002d7e6
mov dword [ebp - 0x33c], 0x2b60
mov dword [ebp - 0x10], 0xfffffffd
mov dword [ebp - 0x210], 0x87e3bc4a
mov dword [ebp - 0xbfc], 0xffffffff
mov dword [ebp - 0xbf8], 0xffffffff
mov dword [ebp - 0xbf4], 0xffffffff
mov dword [ebp - 0xbf0], 0xffffffff
mov dword [ebp - 0xa4], 0xa151cd25
mov dword [ebp - 0x9d4], 0xc0cb0a75
mov dword [ebp - 0x258], 0
jmp 0x1001fdc7
mov eax, dword [ebp - 0x258]
inc eax
mov dword [ebp - 0x258], eax
cmp dword [ebp - 0x258], 1
jge 0x1001fde3
mov eax, dword [ebp - 0x258]
mov dword [ebp + eax*4 - 0x280], 9
jmp 0x1001fdba
cmp dword [ebp - 0x10], 0
je 0x1001fe60
mov eax, dword [ebp - 0x10]
mov dword [ebp - 0xe08], eax
cmp dword [ebp - 0x10], 0x67d9
je 0x1001fe07
mov dword [ebp - 0x6dc], 1
jmp 0x1001fe0e
and dword [ebp - 0x6dc], 0
cmp dword [ebp - 0x6dc], 0xfffffffa
jle 0x1001fe23
mov dword [ebp - 0x4e4], 1
jmp 0x1001fe2a
and dword [ebp - 0x4e4], 0
mov eax, dword [ebp - 0x4e4]
mov dword [ebp - 0x210], eax
cmp dword [ebp - 0x210], 0
jne 0x1001fe43
cmp dword [ebp - 0x10], 0
mov eax, dword [ebp - 0x10]
dec eax
mov dword [ebp - 0x7dc], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x7dc]
mov dword [ebp + eax - 0x280], ecx
cmp dword [ebp - 0x10], 0x36378284
je 0x1001fe75
mov dword [ebp - 0x4ec], 1
jmp 0x1001fe7c
and dword [ebp - 0x4ec], 0
mov eax, dword [ebp - 0x10]
cmp dword [ebp - 0x4ec], eax
jl 0x1001fe93
mov dword [ebp - 0x6e4], 1
jmp 0x1001fe9a
and dword [ebp - 0x6e4], 0
mov eax, dword [ebp - 0x10]
cmp dword [ebp - 0x6e4], eax
jne 0x1001feb1
mov dword [ebp - 0x4f4], 1
jmp 0x1001feb8
and dword [ebp - 0x4f4], 0
cmp dword [ebp - 0x4f4], 0xffffffff
jne 0x1001fecd
mov dword [ebp - 0x8c0], 1
jmp 0x1001fed4
and dword [ebp - 0x8c0], 0
mov eax, dword [ebp - 0x10]
cmp dword [ebp - 0x8c0], eax
je 0x1001feeb
mov dword [ebp - 0x4fc], 1
jmp 0x1001fef2
and dword [ebp - 0x4fc], 0
mov eax, dword [ebp - 0x4fc]
sub eax, dword [ebp - 0x10]
mov dword [ebp - 0x6ec], eax
push 4
pop eax
shl eax, 1
mov ecx, dword [ebp - 0x6ec]
mov dword [ebp + eax - 0xbfc], ecx
mov eax, dword [ebp - 0x10]
cmp eax, dword [ebp - 0x6ec]
jge 0x1001ff2a
mov dword [ebp - 0x504], 1
jmp 0x1001ff31
and dword [ebp - 0x504], 0
mov eax, dword [ebp - 0x10]
cmp dword [ebp - 0x504], eax
jg 0x1001ff48
mov dword [ebp - 0x7e4], 1
jmp 0x1001ff4f
and dword [ebp - 0x7e4], 0
mov eax, dword [ebp - 0x10]
add eax, dword [ebp - 0x7e4]
jne 0x1001ff6c
cmp dword [ebp - 0xa4], 0
jne 0x1001ff6c
and dword [ebp - 0x50c], 0
jmp 0x1001ff76
mov dword [ebp - 0x50c], 1
cmp dword [ebp - 0x50c], 0xa275
jl 0x1001ff9b
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x280], 0
jne 0x1001ff9b
and dword [ebp - 0x6f4], 0
jmp 0x1001ffa5
mov dword [ebp - 0x6f4], 1
mov eax, dword [ebp - 0x6f4]
sub eax, dword [ebp - 0xa4]
cmp eax, dword [ebp - 0xa4]
jne 0x10020077
mov dword [ebp - 0x860], 0xac369029
mov dword [ebp - 0xaac], 2
mov dword [ebp - 0x7ec], 0xf55f5dd
cmp dword [ebp - 0x860], 0x9191d4d0
jb 0x1001fff3
mov dword [ebp - 0x514], 1
jmp 0x1001fffa
and dword [ebp - 0x514], 0
cmp dword [ebp - 0x514], 1
jle 0x10020012
cmp dword [ebp - 0x10], 0
jne 0x10020012
and dword [ebp - 0x51c], 0
jmp 0x1002001c
mov dword [ebp - 0x51c], 1
mov eax, dword [ebp - 0x860]
add eax, dword [ebp - 0x51c]
neg eax
cmp eax, dword [ebp - 0xaac]
jne 0x1002003e
mov dword [ebp - 0x6fc], 1
jmp 0x10020045
and dword [ebp - 0x6fc], 0
mov eax, dword [ebp - 0x7ec]
cmp dword [ebp - 0x6fc], eax
je 0x1002005f
mov dword [ebp - 0x524], 1
jmp 0x10020066
and dword [ebp - 0x524], 0
mov eax, dword [ebp - 0x524]
mov dword [ebp - 0x7ec], eax
jmp 0x10020356
mov dword [ebp - 0x2ec], 0xf00bb6e7
mov dword [ebp - 0x544], 0xfa7f
mov dword [ebp - 0x9dc], 0xffffffff
mov dword [ebp - 0xa4], 0xffffffee
jmp 0x100200ae
mov eax, dword [ebp - 0xa4]
inc eax
mov dword [ebp - 0xa4], eax
cmp dword [ebp - 0xa4], 0x35
jg 0x10020356
push 2
lea ecx, [ebp - 0x8a0]
call fcn.1002d70f
mov byte [ebp - 4], 0x16
mov dword [ebp - 0x8b4], 1
push 0
lea eax, [ebp - 0xe10]
push eax
push 0x9ae
push 0x622a
lea eax, [ebp - 0x8a0]
push eax
call fcn.10026059
add esp, 0x14
mov dword [ebp - 0x10], 0x16
jmp 0x10020108
mov eax, dword [ebp - 0x10]
dec eax
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], 4
jge 0x10020342
mov dword [ebp - 0x334], 0xfc6c064b
mov eax, dword [ebp - 0x334]
mov dword [ebp - 0xe18], eax
mov eax, dword [ebp - 0x10]
mov dword [ebp - 0xe20], eax
mov esi, dword [ebp - 0x2ec]
push 4
pop eax
imul eax, eax, 0
add esi, dword [ebp + eax - 0x280]
push 0
lea ecx, [ebp - 0x8a0]
call fcn.1002d7f4
cmp esi, dword [eax]
jge 0x10020161
mov dword [ebp - 0x52c], 1
jmp 0x10020168
and dword [ebp - 0x52c], 0
mov eax, dword [ebp - 0x334]
cmp dword [ebp - 0x52c], eax
jge 0x10020182
mov dword [ebp - 0x704], 1
jmp 0x10020189
and dword [ebp - 0x704], 0
mov eax, dword [ebp - 0x9d4]
mov dword [ebp - 0x210], eax
mov esi, dword [ebp - 0x210]
sub esi, dword [ebp - 0x704]
push 0
lea ecx, [ebp - 0x8a0]
call fcn.1002d7f4
cmp esi, dword [eax]
je 0x100201be
mov dword [ebp - 0x354], 1
jmp 0x100201c5
and dword [ebp - 0x354], 0
push 4
pop eax
shl eax, 1
mov ecx, dword [ebp - 0x354]
mov dword [ebp + eax - 0xbfc], ecx
mov eax, dword [ebp - 0x10]
cmp dword [ebp - 0x354], eax
jg 0x100201ee
mov dword [ebp - 0xb0c], 1
jmp 0x100201f5
and dword [ebp - 0xb0c], 0
mov esi, dword [ebp - 0x2ec]
push 0
lea ecx, [ebp - 0x8a0]
call fcn.1002d7f4
mov ecx, dword [ebp - 0x2ec]
imul ecx, dword [eax]
cmp esi, ecx
jle 0x10020221
mov dword [ebp - 0x534], 1
jmp 0x10020228
and dword [ebp - 0x534], 0
mov eax, dword [ebp - 0x534]
mov dword [ebp - 0x8b4], eax
mov esi, dword [ebp - 0x8b4]
push 1
lea ecx, [ebp - 0x8a0]
call fcn.1002d7f4
cmp dword [eax], esi
jg 0x10020257
mov dword [ebp - 0x53c], 1
jmp 0x1002025e
and dword [ebp - 0x53c], 0
cmp dword [ebp - 0x53c], 0
je 0x10020279
cmp dword [ebp - 0x10], 0
je 0x10020279
mov dword [ebp - 0x70c], 1
jmp 0x10020280
and dword [ebp - 0x70c], 0
push 0
lea ecx, [ebp - 0x8a0]
call fcn.1002d7f4
mov ecx, dword [ebp - 0x70c]
sub ecx, dword [eax]
cmp ecx, dword [ebp - 0x544]
jl 0x100202b2
cmp dword [ebp - 0x544], 0
je 0x100202b2
mov dword [ebp - 0x7f4], 1
jmp 0x100202b9
and dword [ebp - 0x7f4], 0
push 1
lea ecx, [ebp - 0x8a0]
call fcn.1002d7f4
mov eax, dword [eax]
cmp eax, dword [ebp - 0x7f4]
jne 0x100202dc
mov dword [ebp - 0x54c], 1
jmp 0x100202e3
and dword [ebp - 0x54c], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x54c]
mov dword [ebp + eax - 0x280], ecx
cmp dword [ebp - 0x334], 0xffffffff
jne 0x1002030b
mov dword [ebp - 0x714], 1
jmp 0x10020312
and dword [ebp - 0x714], 0
cmp dword [ebp - 0x714], 0x2e4e98e2
jne 0x1002032a
mov dword [ebp - 0x554], 1
jmp 0x10020331
and dword [ebp - 0x554], 0
mov eax, dword [ebp - 0x554]
mov dword [ebp - 0x9dc], eax
jmp 0x10020101
mov byte [ebp - 4], 0x10
lea ecx, [ebp - 0x8a0]
call fcn.1002d7e6
jmp 0x100200a1
mov dword [ebp - 0x72c], 0x6e311378
mov dword [ebp - 0x34], 0xfffffff8
mov dword [ebp - 0xe28], 0xac31e13c
mov dword [ebp - 0x218], 0
jmp 0x1002038a
mov eax, dword [ebp - 0x218]
inc eax
mov dword [ebp - 0x218], eax
cmp dword [ebp - 0x218], 1
jge 0x100203a6
mov eax, dword [ebp - 0x218]
mov dword [ebp + eax*4 - 0x260], 8
jmp 0x1002037d
mov dword [ebp - 0x34], 0
jmp 0x100203b6
mov eax, dword [ebp - 0x34]
inc eax
mov dword [ebp - 0x34], eax
cmp dword [ebp - 0x34], 0
jg 0x100204eb
mov dword [ebp - 0x1ac], 0
mov dword [ebp - 0x1ac], 0
jmp 0x100203e3
mov eax, dword [ebp - 0x1ac]
inc eax
mov dword [ebp - 0x1ac], eax
cmp dword [ebp - 0x1ac], 0
jg 0x100204e6
mov dword [ebp - 0x7fc], 0x91b4956e
mov dword [ebp - 0xab4], 4
cmp dword [ebp - 0x1ac], 0
ja 0x10020419
mov dword [ebp - 0x868], 1
jmp 0x10020420
and dword [ebp - 0x868], 0
cmp dword [ebp - 0x868], 0xe5b1
jge 0x10020438
mov dword [ebp - 0x55c], 1
jmp 0x1002043f
and dword [ebp - 0x55c], 0
cmp dword [ebp - 0x55c], 0x790e8648
jg 0x10020457
mov dword [ebp - 0x71c], 1
jmp 0x1002045e
and dword [ebp - 0x71c], 0
mov eax, dword [ebp - 0x34]
mov ecx, dword [ebp - 0x71c]
sub ecx, dword [ebp + eax*4 - 0x260]
cmp ecx, 0x589f
jle 0x10020482
mov dword [ebp - 0x564], 1
jmp 0x10020489
and dword [ebp - 0x564], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x260]
mov ecx, dword [ebp - 0x34]
mov ecx, dword [ebp + ecx*4 - 0x260]
imul ecx, dword [ebp - 0x564]
add eax, ecx
mov dword [ebp - 0x7fc], eax
cmp dword [ebp - 0x7fc], 0
jg 0x100204c4
mov dword [ebp - 0x56c], 1
jmp 0x100204cb
and dword [ebp - 0x56c], 0
mov eax, dword [ebp - 0x34]
mov eax, dword [ebp + eax*4 - 0x260]
add eax, dword [ebp - 0x56c]
mov dword [ebp - 0xab4], eax
jmp 0x100203d6
jmp 0x100203af
mov dword [ebp - 0x9e4], 0x2517
cmp dword [ebp - 0x9e4], 0x1356
jge 0x10020606
lea ecx, [ebp - 0x1000]
call fcn.1002cf04
mov byte [ebp - 4], 0x17
mov dword [ebp - 0x2f4], 1
jmp 0x1002052d
mov eax, dword [ebp - 0x2f4]
inc eax
mov dword [ebp - 0x2f4], eax
lea edx, [ebp - 0x1000]
mov ecx, 0x10663c90
call fcn.10032375
mov dword [ebp - 0x724], eax
mov eax, dword [ebp - 0x724]
mov eax, dword [eax]
mov ecx, dword [ebp - 0x724]
add ecx, dword [eax + 4]
call fcn.10009cb1
movzx eax, al
test eax, eax
je 0x100205f7
mov edx, 0x10008058
lea ecx, [ebp - 0x1000]
call fcn.100323c8
movzx eax, al
test eax, eax
je 0x100205f7
push dword [ebp - 0x2f4]
mov edx, 0x100082e4
mov ecx, 0x10663bd8
call fcn.1003219e
mov ecx, eax
call fcn.1002d4de
mov edx, 0x10008060
mov ecx, eax
call fcn.1003219e
mov edx, 0x100082ec
lea ecx, [ebp - 0x1000]
call fcn.100323eb
movzx eax, al
test eax, eax
je 0x100205d7
push fcn.10031f18
mov edx, 0x100082f4
mov ecx, 0x10663bd8
call fcn.1003219e
mov ecx, eax
call fcn.1002d4d2
jmp 0x100205f2
push fcn.10031f18
mov edx, 0x10008304
mov ecx, 0x10663bd8
call fcn.1003219e
mov ecx, eax
call fcn.1002d4d2
jmp 0x10020520
mov byte [ebp - 4], 0x10
lea ecx, [ebp - 0x1000]
call fcn.1002cf8c
mov dword [ebp - 0x34], 0
jmp 0x10020616
mov eax, dword [ebp - 0x34]
inc eax
mov dword [ebp - 0x34], eax
cmp dword [ebp - 0x34], 0x1c
jg 0x100207ab
mov dword [ebp - 0xb4c], 0x255f
cmp dword [ebp - 0xb4c], 0x74f
jge 0x10020773
mov dword [ebp - 0xe30], 0x3b9aca00
mov dword [ebp - 0xe38], 0x2c
lea eax, [ebp - 0x37c]
push eax
push 0x100080f4
call fcn.1005b040
pop ecx
pop ecx
mov dword [ebp - 0x2fc], 0xc4653600
mov dword [ebp - 0x174], 0x3b9aca00
and dword [ebp - 0xac], 0
mov eax, dword [ebp - 0x37c]
mov dword [ebp - 0x9ec], eax
mov eax, dword [ebp - 0x37c]
dec eax
mov dword [ebp - 0x37c], eax
cmp dword [ebp - 0x9ec], 0
je 0x10020726
lea eax, [ebp - 0x574]
push eax
lea eax, [ebp - 0xabc]
push eax
push 0x100080f8
call fcn.1005b040
add esp, 0xc
cmp dword [ebp - 0x574], 1
jne 0x100206e6
mov eax, dword [ebp - 0x2fc]
add eax, dword [ebp - 0xac]
cmp eax, 0x2c
jge 0x100206e6
push 0x2c
pop eax
sub eax, dword [ebp - 0xac]
mov dword [ebp - 0x2fc], eax
cmp dword [ebp - 0x574], 2
jne 0x1002070f
mov eax, dword [ebp - 0x174]
add eax, dword [ebp - 0xac]
cmp eax, 0x2c
jl 0x1002070f
push 0x2b
pop eax
sub eax, dword [ebp - 0xac]
mov dword [ebp - 0x174], eax
mov eax, dword [ebp - 0xac]
add eax, dword [ebp - 0xabc]
mov dword [ebp - 0xac], eax
jmp 0x1002067c
mov eax, dword [ebp - 0x2fc]
cmp eax, dword [ebp - 0x174]
jle 0x10020741
push 0x10008280
call fcn.1005b826
pop ecx
jmp 0x10020773
cmp dword [ebp - 0x174], 0x3b9aca00
jl 0x1002075a
push 0x10008314
call fcn.1005b826
pop ecx
jmp 0x10020773
mov eax, dword [ebp - 0x174]
add eax, dword [ebp - 0xac]
push eax
push 0x10008100
call fcn.1005b488
pop ecx
pop ecx
mov dword [ebp - 0x8c8], 0xa1cf0415
push 0x1fa9
push 0x1ba0
lea eax, [ebp - 0x8c8]
push eax
push 0
call fcn.10018669
add esp, 0x10
cmp dword [ebp - 0x8c8], 0
je 0x100207a6
jmp 0x1002060f
jmp 0x1002060f
push 3
lea ecx, [ebp - 0xbc0]
call fcn.1002d7f4
cmp dword [eax], 0
je 0x100207d0
push 0xfffffffffffffffb
pop eax
test eax, eax
je 0x100207d0
mov dword [ebp - 0x57c], 1
jmp 0x100207d7
and dword [ebp - 0x57c], 0
mov eax, dword [ebp - 0x57c]
mov dword [ebp - 0x72c], eax
mov eax, dword [ebp - 0x72c]
neg eax
cmp eax, 0x390d
jl 0x100207fe
mov dword [ebp - 0x584], 1
jmp 0x10020805
and dword [ebp - 0x584], 0
mov eax, dword [ebp - 0x33c]
cmp eax, dword [ebp - 0x584]
jle 0x1002081f
mov dword [ebp - 0x804], 1
jmp 0x10020826
and dword [ebp - 0x804], 0
push 4
pop eax
shl eax, 1
mov ecx, dword [ebp - 0x33c]
imul ecx, dword [ebp - 0x804]
cmp dword [ebp + eax - 0xd94], ecx
jl 0x1002084d
mov dword [ebp - 0x58c], 1
jmp 0x10020854
and dword [ebp - 0x58c], 0
mov esi, dword [ebp - 0x33c]
add esi, dword [ebp - 0x58c]
push 3
lea ecx, [ebp - 0xf10]
call fcn.1002d7f4
mov dword [eax], esi
jmp 0x10020c5c
mov dword [ebp - 0x19c], 0x3948b081
mov dword [ebp - 0xba8], 0xfffffff9
mov dword [ebp - 0xba4], 0xfffffff9
mov dword [ebp - 0xba0], 0xfffffff9
mov dword [ebp - 0xb9c], 0xfffffff9
mov dword [ebp - 0x304], 0xdebf889e
mov dword [ebp - 0xca8], 1
mov dword [ebp - 0xca4], 1
mov dword [ebp - 0xca0], 1
mov dword [ebp - 0xc9c], 1
lea ecx, [ebp - 0x34d]
call fcn.1002d803
push eax
lea eax, [ebp - 0xc98]
push eax
lea eax, [ebp - 0xca8]
push eax
lea ecx, [ebp - 0x1068]
call fcn.1002d806
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0xee0]
call fcn.1002d7c0
mov byte [ebp - 4], 0x18
mov byte [ebp - 0xb9], 0
movzx eax, byte [ebp - 0xb9]
test eax, eax
je 0x10020945
push 0
push 0x7813
push 0x4f33
push 0x689e
push 0x5b0c
push 1
push 0
call fcn.1000a623
add esp, 0x1c
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x304]
cmp dword [ebp + eax - 0xba8], ecx
jne 0x10020966
mov dword [ebp - 0x734], 1
jmp 0x1002096d
and dword [ebp - 0x734], 0
mov eax, dword [ebp - 0x19c]
cmp eax, dword [ebp - 0x734]
jge 0x10020987
mov dword [ebp - 0x594], 1
jmp 0x1002098e
and dword [ebp - 0x594], 0
cmp dword [ebp - 0x594], 0xfdc8
jg 0x100209a6
mov dword [ebp - 0x820], 1
jmp 0x100209ad
and dword [ebp - 0x820], 0
cmp dword [ebp - 0x820], 0x6dd2cc91
jle 0x100209c5
mov dword [ebp - 0x59c], 1
jmp 0x100209cc
and dword [ebp - 0x59c], 0
mov eax, dword [ebp - 0x19c]
cmp eax, dword [ebp - 0x59c]
je 0x100209ef
cmp dword [ebp - 0x19c], 0
je 0x100209ef
mov dword [ebp - 0x73c], 1
jmp 0x100209f6
and dword [ebp - 0x73c], 0
cmp dword [ebp - 0x73c], 8
jb 0x10020a0b
mov dword [ebp - 0x5a4], 1
jmp 0x10020a12
and dword [ebp - 0x5a4], 0
mov eax, dword [ebp - 0x304]
cmp dword [ebp - 0x5a4], eax
jge 0x10020a2c
mov dword [ebp - 0x80c], 1
jmp 0x10020a33
and dword [ebp - 0x80c], 0
mov eax, dword [ebp - 0x19c]
cmp dword [ebp - 0x80c], eax
jge 0x10020a4d
mov dword [ebp - 0x5ac], 1
jmp 0x10020a54
and dword [ebp - 0x5ac], 0
mov eax, dword [ebp - 0x304]
cmp dword [ebp - 0x5ac], eax
jge 0x10020a6e
mov dword [ebp - 0x744], 1
jmp 0x10020a75
and dword [ebp - 0x744], 0
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0xba8]
add eax, dword [ebp - 0x744]
jne 0x10020a8e
or eax, 0xffffffff
je 0x10020aa3
cmp dword [ebp - 0x19c], 0
je 0x10020aa3
mov dword [ebp - 0x5b4], 1
jmp 0x10020aaa
and dword [ebp - 0x5b4], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0xba8]
cmp dword [ebp - 0x5b4], eax
jne 0x10020acb
mov dword [ebp - 0x824], 1
jmp 0x10020ad2
and dword [ebp - 0x824], 0
mov esi, dword [ebp - 0x824]
inc esi
inc esi
push 1
lea ecx, [ebp - 0xee0]
call fcn.1002d7f4
mov dword [eax], esi
mov byte [ebp - 4], 0x10
lea ecx, [ebp - 0xee0]
call fcn.1002d7e6
mov dword [ebp - 0x17c], 0
jmp 0x10020b11
mov eax, dword [ebp - 0x17c]
inc eax
mov dword [ebp - 0x17c], eax
cmp dword [ebp - 0x17c], 3
jg 0x10020c5c
mov dword [ebp - 0xc4], 0
jmp 0x10020b37
mov eax, dword [ebp - 0xc4]
inc eax
mov dword [ebp - 0xc4], eax
cmp dword [ebp - 0xc4], 4
jge 0x10020c57
push 1
lea ecx, [ebp - 0xf00]
call fcn.1002d70f
mov byte [ebp - 4], 0x19
mov dword [ebp - 0x2a0], 0x8094a188
mov dword [ebp - 0xe44], 1
mov dword [ebp - 0x220], 0
jmp 0x10020b82
mov eax, dword [ebp - 0x220]
inc eax
mov dword [ebp - 0x220], eax
cmp dword [ebp - 0x220], 1
jge 0x10020ba4
push dword [ebp - 0x220]
lea ecx, [ebp - 0xf00]
call fcn.1002d7f4
mov dword [eax], 0x9f9b3198
jmp 0x10020b75
mov dword [ebp - 0x2a0], 0
jmp 0x10020bbd
mov eax, dword [ebp - 0x2a0]
dec eax
mov dword [ebp - 0x2a0], eax
cmp dword [ebp - 0x2a0], 0
jl 0x10020c2c
mov dword [ebp - 0xe50], 0xfe5f36f6
push 2
lea ecx, [ebp - 0xef0]
call fcn.1002d70f
mov byte [ebp - 4], 0x1a
mov dword [ebp - 0x9f4], 0x5fd0a320
push 0x1597
lea eax, [ebp - 0xef0]
push eax
push 0
lea eax, [ebp - 0xe58]
push eax
call fcn.10011e18
add esp, 0x10
lea eax, [ebp - 0x9f4]
push eax
push 0
push 0
call fcn.100167df
add esp, 0xc
mov byte [ebp - 4], 0x19
lea ecx, [ebp - 0xef0]
call fcn.1002d7e6
jmp 0x10020bb0
mov byte [ebp - 4], 0x10
lea ecx, [ebp - 0xf00]
call fcn.1002d7e6
push dword [ebp - 0xc4]
lea ecx, [ebp - 0xbc0]
call fcn.1002d7f4
mov dword [eax], 0x52275dd3
jmp 0x10020b2a
jmp 0x10020b04
mov byte [ebp - 4], 9
lea ecx, [ebp - 0xbc0]
call fcn.1002d7e6
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xf10]
call fcn.1002d7e6
mov eax, dword [ebp - 0xb14]
mov eax, dword [eax + 0x38]
mov dword [ebp - 0x340], eax
push 0
push 0x5dc6
push 0x35d
call fcn.1001cfbd
add esp, 0xc
cmp dword [ebp - 0x340], 0
jle 0x10024fdf
mov dword [ebp - 0x228], 0x67e307b5
mov dword [ebp - 0x74c], 3
mov dword [ebp - 0xcc], 0
mov dword [ebp - 0x5cc], 0xffff
push 2
lea ecx, [ebp - 0xd20]
call fcn.1002d70f
mov dword [ebp - 4], 0x1b
mov dword [ebp - 0x9fc], 0xfffffffc
push 0
lea eax, [ebp - 0xd20]
push eax
push 0x3494
push 0x39b0
lea eax, [ebp - 0xe60]
push eax
call fcn.1000b32f
add esp, 0x14
lea eax, [ebp - 0x228]
push eax
push 0x7e26
lea eax, [ebp - 0xcc]
push eax
lea eax, [ebp - 0x5cc]
push eax
push 0x94b
lea eax, [ebp - 0x74c]
push eax
push 0
call fcn.10014c3b
add esp, 0x1c
cmp dword [ebp - 0x228], 0
je 0x10020df5
cmp dword [ebp - 0x228], 0
jne 0x10020de5
cmp dword [ebp - 0x228], 0x967684ab
jb 0x10020d74
mov dword [ebp - 0x5bc], 1
jmp 0x10020d7b
and dword [ebp - 0x5bc], 0
mov eax, dword [ebp - 0xcc]
cmp dword [ebp - 0x5bc], eax
jl 0x10020d95
mov dword [ebp - 0x5c4], 1
jmp 0x10020d9c
and dword [ebp - 0x5c4], 0
mov eax, dword [ebp - 0x74c]
cmp eax, dword [ebp - 0x5c4]
jl 0x10020db6
mov dword [ebp - 0x814], 1
jmp 0x10020dbd
and dword [ebp - 0x814], 0
mov esi, dword [ebp - 0xcc]
add esi, dword [ebp - 0x814]
imul esi, dword [ebp - 0xcc]
push 1
lea ecx, [ebp - 0xd20]
call fcn.1002d7f4
imul esi, dword [eax]
cmp esi, 0xffffffff
jne 0x10020df5
xor eax, eax
je 0x10020df5
mov dword [ebp - 0x754], 1
jmp 0x10020dfc
and dword [ebp - 0x754], 0
mov eax, dword [ebp - 0x5cc]
add eax, dword [ebp - 0x754]
jne 0x10020e1c
mov eax, 0x7ad1
test eax, eax
jne 0x10020e1c
and dword [ebp - 0x5d4], 0
jmp 0x10020e26
mov dword [ebp - 0x5d4], 1
mov eax, dword [ebp - 0xcc]
cmp dword [ebp - 0x5d4], eax
jle 0x10020e40
mov dword [ebp - 0x82c], 1
jmp 0x10020e47
and dword [ebp - 0x82c], 0
mov eax, dword [ebp - 0x82c]
mov dword [ebp - 0xcc], eax
mov eax, dword [ebp - 0xcc]
add eax, 9
mov dword [ebp - 0x9fc], eax
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xd20]
call fcn.1002d7e6
push 4
lea ecx, [ebp - 0x904]
call fcn.1002d70f
mov dword [ebp - 4], 0x1c
mov dword [ebp - 0x3b4], 0xee76f502
mov dword [ebp - 0x3b0], 0xee76f502
mov dword [ebp - 0x3ac], 0xee76f502
mov dword [ebp - 0x3a8], 0xee76f502
push 1
lea ecx, [ebp - 0xcc0]
call fcn.1002d70f
mov byte [ebp - 4], 0x1d
lea eax, [ebp - 0x1bc]
push eax
lea eax, [ebp - 0x904]
push eax
push 0x5cd0
push 0x278a
push 0
call fcn.1000a5df
add esp, 0x14
mov dword [ebp - 0x1bc], 0
jmp 0x10020ef9
mov eax, dword [ebp - 0x1bc]
inc eax
mov dword [ebp - 0x1bc], eax
cmp dword [ebp - 0x1bc], 1
jge 0x10020f18
push dword [ebp - 0x1bc]
lea ecx, [ebp - 0xcc0]
call fcn.1002d7f4
or dword [eax], 0xffffffff
jmp 0x10020eec
push 4
pop eax
shl eax, 1
mov dword [ebp + eax - 0x3b4], 3
jmp 0x10020f43
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x3b4]
dec eax
push 4
pop ecx
shl ecx, 1
mov dword [ebp + ecx - 0x3b4], eax
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0x3b4], 0
jl 0x10021141
mov dword [ebp - 0x74], 0xfb770a77
mov dword [ebp - 0x81c], 4
mov dword [ebp - 0x74], 3
jmp 0x10020f77
mov eax, dword [ebp - 0x74]
dec eax
mov dword [ebp - 0x74], eax
cmp dword [ebp - 0x74], 0
jl 0x100210c6
mov dword [ebp - 0xac4], 0xffffffff
mov dword [ebp - 0x35c], 0
mov eax, dword [ebp - 0xac4]
mov dword [ebp - 0xe68], eax
mov eax, dword [ebp - 0x74]
mov dword [ebp - 0xe70], eax
mov dword [ebp - 0x35c], 0xffff
mov eax, dword [ebp - 0x35c]
dec eax
dec eax
push 4
pop ecx
shl ecx, 1
mov ecx, dword [ebp + ecx - 0x3b4]
neg ecx
cmp ecx, eax
jne 0x10020fda
mov dword [ebp - 0x5dc], 1
jmp 0x10020fe1
and dword [ebp - 0x5dc], 0
cmp dword [ebp - 0x5dc], 0xab9c279a
je 0x10020ff1
cmp dword [ebp - 0x74], 0
push 4
pop eax
shl eax, 1
push dword [ebp + eax - 0x3b4]
lea ecx, [ebp - 0x904]
call fcn.1002d7f4
imul eax, dword [eax], 0xffffffff
test eax, eax
jle 0x1002101b
mov dword [ebp - 0x75c], 1
jmp 0x10021022
and dword [ebp - 0x75c], 0
mov eax, dword [ebp - 0x74]
cmp dword [ebp - 0x75c], eax
jle 0x10021039
mov dword [ebp - 0x5e4], 1
jmp 0x10021040
and dword [ebp - 0x5e4], 0
push 2
lea ecx, [ebp - 0x904]
call fcn.1002d7f4
mov ecx, dword [ebp - 0x5e4]
cmp ecx, dword [eax]
jl 0x10021073
mov byte [ebp - 0xa5], 0
movzx eax, byte [ebp - 0xa5]
test eax, eax
je 0x10021071
push 0
call fcn.10010dd9
pop ecx
jmp 0x1002108d
mov byte [ebp - 0xbb], 0
movzx eax, byte [ebp - 0xbb]
test eax, eax
je 0x1002108d
push 0
call dword [sym.imp.KERNEL32.dll_FreeLibrary]
lea eax, [ebp - 0x74]
push eax
push 0
push 0x7589
push 0x6f57
lea eax, [ebp - 0x35c]
push eax
lea eax, [ebp - 0x904]
push eax
lea eax, [ebp - 0x81c]
push eax
push 0
push 0x4cbe
call fcn.1000afcc
add esp, 0x24
jmp 0x10020f70
push 4
pop eax
shl eax, 1
push dword [ebp + eax - 0x3b4]
lea ecx, [ebp - 0x904]
call fcn.1002d7f4
mov dword [ebp - 0x5ec], eax
push 4
pop eax
shl eax, 1
push dword [ebp + eax - 0x3b4]
lea ecx, [ebp - 0x904]
call fcn.1002d7f4
mov ecx, dword [ebp - 0x5ec]
mov eax, dword [eax]
mov dword [ecx], eax
mov eax, dword [ebp - 0x81c]
mov ecx, dword [ebp - 0x5ec]
cmp dword [ecx], eax
jg 0x10021120
mov dword [ebp - 0x764], 1
jmp 0x10021127
and dword [ebp - 0x764], 0
push 0
lea ecx, [ebp - 0xcc0]
call fcn.1002d7f4
mov ecx, dword [ebp - 0x764]
mov dword [eax], ecx
jmp 0x10020f2a
mov byte [ebp - 4], 0x1c
lea ecx, [ebp - 0xcc0]
call fcn.1002d7e6
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x904]
call fcn.1002d7e6
mov dword [ebp - 0x268], 0x25b9b55b
mov dword [ebp - 0x268], 0
jmp 0x10021182
mov eax, dword [ebp - 0x268]
dec eax
mov dword [ebp - 0x268], eax
cmp dword [ebp - 0x268], 0xfffffff8
jle 0x10021334
mov dword [ebp - 0x5c], 0xa2768935
mov dword [ebp - 0x5c], 0
jmp 0x100211a6
mov eax, dword [ebp - 0x5c]
inc eax
mov dword [ebp - 0x5c], eax
cmp dword [ebp - 0x5c], 0x11
jle 0x1002129b
push 3
lea ecx, [ebp - 0x954]
call fcn.1002d70f
mov dword [ebp - 4], 0x1e
push 0x29df
push 0
lea eax, [ebp - 0x954]
push eax
push 0x5e42
push 0x3a10
lea eax, [ebp - 0xe78]
push eax
push 0x2916
push 1
call fcn.10009ec9
add esp, 0x20
cmp dword [ebp - 0x5c], 0
je 0x1002120c
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x954]
call fcn.1002d7e6
jmp 0x1002129b
push 0
lea ecx, [ebp - 0x954]
call fcn.1002d7f4
and dword [eax], 0
jmp 0x10021242
push 0
lea ecx, [ebp - 0x954]
call fcn.1002d7f4
mov dword [ebp - 0x5f4], eax
mov eax, dword [ebp - 0x5f4]
mov eax, dword [eax]
inc eax
mov ecx, dword [ebp - 0x5f4]
mov dword [ecx], eax
push 0
lea ecx, [ebp - 0x954]
call fcn.1002d7f4
cmp dword [eax], 0x1c
jle 0x10021287
push 1
push 0x7c0d
push 0
push 0x6bb5
push 0x714a
push 0x1467
push 0x1d6c
push 1
push 0x5cee
push 0x1104
call fcn.1001039b
add esp, 0x28
jmp 0x1002121e
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x954]
call fcn.1002d7e6
jmp 0x1002119f
mov dword [ebp - 0x5c], 0xfffffff1
jmp 0x100212ab
mov eax, dword [ebp - 0x5c]
inc eax
mov dword [ebp - 0x5c], eax
cmp dword [ebp - 0x5c], 4
jge 0x1002132f
mov dword [ebp - 0x230], 1
mov dword [ebp - 0x230], 0
jmp 0x100212d4
mov eax, dword [ebp - 0x230]
dec eax
mov dword [ebp - 0x230], eax
cmp dword [ebp - 0x230], 0xffffffff
jg 0x1002132a
mov dword [ebp - 0x288], 9
mov dword [ebp - 0x288], 0x12
jmp 0x10021300
mov eax, dword [ebp - 0x288]
dec eax
mov dword [ebp - 0x288], eax
cmp dword [ebp - 0x288], 7
je 0x10021328
mov byte [ebp - 0xae], 0
push 0
push 0x7ddd
lea eax, [ebp - 0xae]
push eax
call fcn.1000a5ff
add esp, 0xc
jmp 0x100212f3
jmp 0x100212c7
jmp 0x100212a4
jmp 0x10021175
push 4
lea ecx, [ebp - 0xd14]
call fcn.1002d70f
mov dword [ebp - 4], 0x1f
mov dword [ebp - 0x270], 1
push 3
lea ecx, [ebp - 0xccc]
call fcn.1002d70f
mov byte [ebp - 4], 0x20
mov dword [ebp - 0x238], 0
jmp 0x1002137c
mov eax, dword [ebp - 0x238]
inc eax
mov dword [ebp - 0x238], eax
cmp dword [ebp - 0x238], 3
jge 0x1002139e
push dword [ebp - 0x238]
lea ecx, [ebp - 0xccc]
call fcn.1002d7f4
mov dword [eax], 1
jmp 0x1002136f
mov dword [ebp - 0x270], 0
jmp 0x100213b7
mov eax, dword [ebp - 0x270]
inc eax
mov dword [ebp - 0x270], eax
cmp dword [ebp - 0x270], 0x13
je 0x10021429
mov dword [ebp - 0xa04], 8
push 1
push 0x5d20
push 0
push 0x6db9
push 0x7e67
push 0
push 0x6e2
push 0x6ff9
push 0x1331
push 0x26ff
call fcn.1001d66c
add esp, 0x28
push 0x3ad5
lea eax, [ebp - 0xccc]
push eax
push 0x447b
lea eax, [ebp - 0xa04]
push eax
push 0x3e48
push 0
push 0x37f3
call fcn.10011e62
add esp, 0x1c
jmp 0x100213aa
mov byte [ebp - 4], 0x1f
lea ecx, [ebp - 0xccc]
call fcn.1002d7e6
mov dword [ebp - 0x160], 0xe5ccc90a
mov dword [ebp - 0x7c], 0xffffffff
mov dword [ebp - 0x240], 0
jmp 0x10021462
mov eax, dword [ebp - 0x240]
inc eax
mov dword [ebp - 0x240], eax
cmp dword [ebp - 0x240], 3
jge 0x1002147e
mov eax, dword [ebp - 0x240]
mov dword [ebp + eax*4 - 0xf20], 7
jmp 0x10021455
mov dword [ebp - 0x7c], 0
jmp 0x1002148e
mov eax, dword [ebp - 0x7c]
inc eax
mov dword [ebp - 0x7c], eax
cmp dword [ebp - 0x7c], 2
jg 0x100214b8
mov byte [ebp - 0x8d], 0
movzx eax, byte [ebp - 0x8d]
test eax, eax
je 0x100214b6
push 0
push 0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_GetProcessTimes]
jmp 0x10021487
mov dword [ebp - 0x7c], 0xffffffe4
jmp 0x100214c8
mov eax, dword [ebp - 0x7c]
dec eax
mov dword [ebp - 0x7c], eax
cmp dword [ebp - 0x7c], 0xffffffe2
jg 0x100215bc
mov dword [ebp - 0x184], 0x5b40194d
mov dword [ebp - 0x184], 2
jmp 0x100214f5
mov eax, dword [ebp - 0x184]
dec eax
mov dword [ebp - 0x184], eax
cmp dword [ebp - 0x184], 0
jl 0x100215b7
mov dword [ebp - 0x13c], 0
mov dword [ebp - 0x13c], 2
jmp 0x10021525
cmp dword [ebp - 0x13c], 0
jl 0x100215b2
mov dword [ebp - 0x1e0], 0x2fdcba86
mov dword [ebp - 0xb7c], 0x6ab2aee5
mov dword [ebp - 0x1e0], 2
jmp 0x1002155f
cmp dword [ebp - 0x1e0], 0
jl 0x1002157b
jmp 0x100214e8
jmp 0x100214c1
mov dword [ebp - 0x44], 1
mov dword [ebp - 0xacc], 0xfffffff6
mov dword [ebp - 0x44], 0
jmp 0x100215dd
mov eax, dword [ebp - 0x44]
inc eax
mov dword [ebp - 0x44], eax
cmp dword [ebp - 0x44], 0
je 0x10021793
mov dword [ebp - 0x1e4], 0xffffffff
mov dword [ebp - 0xa0c], 0xc443
mov dword [ebp - 0x1e4], 0
jmp 0x10021614
cmp dword [ebp - 0x1e4], 0xffffffed
jg 0x1002178e
mov dword [ebp - 0x104], 0xfffffffb
mov dword [ebp - 0x64], 0xffffffff
mov eax, dword [ebp - 0x44]
imul eax, dword [ebp - 0xa0c]
sub eax, dword [ebp - 0x104]
je 0x1002171a
cmp dword [ebp - 0x44], 0
jne 0x10021660
mov dword [ebp - 0x83c], 0
lea eax, [ebp - 0x83c]
push eax
push 0x632d
push 0x79bf
push 0x30f8
push 1
lea eax, [ebp - 0x64]
push eax
push 0x5370
push 0x3608
push 0
push 0x227f
call fcn.1000a037
add esp, 0x28
mov dword [ebp - 0x64], 0
jmp 0x10021769
jmp 0x100215d6
mov byte [ebp - 0xbd], 0
movzx eax, byte [ebp - 0xbd]
test eax, eax
je 0x100217b9
push 0x5d4f
push 0xea1
push 0
call fcn.100166f4
add esp, 0xc
push 0
lea eax, [ebp - 0xd14]
push eax
push 0x336d
push 0x6ad2
lea eax, [ebp - 0xe80]
push eax
call fcn.10014963
add esp, 0x14
mov dword [ebp - 0x160], 3
jmp 0x100217f4
cmp dword [ebp - 0x160], 0
jl 0x10022510
mov dword [ebp - 0x84], 9
push 3
lea ecx, [ebp - 0x1cc]
call fcn.1002d70f
mov byte [ebp - 4], 0x21
mov dword [ebp - 0xe88], 0xffffffff
lea eax, [ebp - 0x1cc]
push eax
lea eax, [ebp - 0xe90]
push eax
push 0
push 0x4350
push 0xeaf
call fcn.1002500a
add esp, 0x14
mov dword [ebp - 0x84], 0
jmp 0x10021861
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xd14]
call fcn.1002d7e6
push 3
lea ecx, [ebp - 0xd44]
call fcn.1002d70f
mov dword [ebp - 4], 0x27
push 1
lea ecx, [ebp - 0xd2c]
call fcn.1002d70f
mov byte [ebp - 4], 0x28
mov dword [ebp - 0xa54], 0
mov dword [ebp - 0xa58], 0x29a275ff
push 0xb14
push 0x77aa
push 1
push 0x728c
push 1
lea eax, [ebp - 0xd44]
push eax
push 0
lea eax, [ebp - 0x168]
push eax
call fcn.100199c3
add esp, 0x20
mov dword [ebp - 0x168], 0
jmp 0x1002259c
jmp 0x10024ff9
mov byte [ebp - 0xcd], 0
movzx eax, byte [ebp - 0xcd]
test eax, eax
je 0x10024ff9
call dword [sym.imp.KERNEL32.dll_GetACP]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret