Function at 0x10024ade
Capabilities:
Clear file content
Contain obfuscated stackstrings
Delete file

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x10073c80
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
mov eax, 0x180c
call fcn.1006f150
push esi
push edi
movzx eax, byte [ebp + 0x28]
test eax, eax
je 0x1003099e
mov eax, dword [ebp + 0x1c]
mov dword [ebp - 0xf88], eax
lea eax, [ebp + 0x30]
mov dword [ebp - 0x10f0], eax
mov eax, dword [ebp + 0x34]
mov dword [ebp - 0xf58], eax
mov eax, dword [ebp + 8]
mov dword [ebp - 0xf90], eax
mov eax, dword [ebp + 0x24]
mov dword [ebp - 0xf98], eax
mov eax, dword [ebp + 0x2c]
mov dword [ebp - 0xf80], eax
mov eax, dword [ebp + 0x10]
mov dword [ebp - 0xf60], eax
mov eax, dword [ebp - 0x10f0]
movzx eax, byte [eax]
test eax, eax
je 0x10024bd4
mov eax, dword [ebp - 0xf58]
mov dword [ebp - 0xf68], eax
mov eax, dword [ebp - 0xf60]
mov dword [ebp - 0xf70], eax
mov eax, dword [ebp - 0xf68]
mov dword [ebp - 0x22c], eax
mov eax, dword [ebp - 0xf70]
mov dword [ebp - 0xf78], eax
mov eax, dword [ebp - 0x22c]
mov dword [eax], 0
jmp 0x10024ba9
mov eax, dword [ebp - 0x22c]
mov eax, dword [eax]
inc eax
mov ecx, dword [ebp - 0x22c]
mov dword [ecx], eax
mov eax, dword [ebp - 0x22c]
cmp dword [eax], 2
jge 0x10024bcf
mov eax, dword [ebp - 0x22c]
push dword [eax]
mov ecx, dword [ebp - 0xf78]
call fcn.10013deb
mov dword [eax], 1
jmp 0x10024b98
jmp 0x1003099c
mov eax, dword [ebp - 0xf80]
mov dword [ebp - 0xefc], eax
mov eax, dword [ebp - 0xf88]
mov dword [ebp - 0xef0], eax
mov eax, dword [ebp - 0xf90]
mov dword [ebp - 0xbd4], eax
mov eax, dword [ebp - 0xf98]
mov dword [ebp - 0x578], eax
push 4
lea ecx, [ebp - 0x4b4]
call fcn.10013d2b
and dword [ebp - 4], 0
mov dword [ebp - 0x34], 0
jmp 0x10024c25
mov eax, dword [ebp - 0x34]
inc eax
mov dword [ebp - 0x34], eax
cmp dword [ebp - 0x34], 3
jge 0x10024c3b
mov eax, dword [ebp - 0x34]
mov dword [ebp + eax*4 - 0x1150], 0xfffffff6
jmp 0x10024c1e
mov dword [ebp - 0x34], 0
jmp 0x10024c4b
mov eax, dword [ebp - 0x34]
inc eax
mov dword [ebp - 0x34], eax
cmp dword [ebp - 0x34], 4
jge 0x10024c67
push dword [ebp - 0x34]
lea ecx, [ebp - 0x4b4]
call fcn.10013deb
mov dword [eax], 0xe83c773
jmp 0x10024c44
mov dword [ebp - 0x34], 0
jmp 0x10024c77
mov eax, dword [ebp - 0x34]
inc eax
mov dword [ebp - 0x34], eax
cmp dword [ebp - 0x34], 2
jge 0x10024c8d
mov eax, dword [ebp - 0x34]
mov dword [ebp + eax*4 - 0xd84], 0x3afc3718
jmp 0x10024c70
mov byte [ebp - 0xf0], 0
movzx eax, byte [ebp - 0xf0]
test eax, eax
je 0x10024ca7
push 0
call dword [sym.imp.KERNEL32.dll_SetEndOfFile]
push 3
lea ecx, [ebp - 0x4b4]
call fcn.10013deb
mov dword [eax], 2
jmp 0x10024ce0
push 3
lea ecx, [ebp - 0x4b4]
call fcn.10013deb
mov dword [ebp - 0x6dc], eax
mov eax, dword [ebp - 0x6dc]
mov eax, dword [eax]
dec eax
mov ecx, dword [ebp - 0x6dc]
mov dword [ecx], eax
push 3
lea ecx, [ebp - 0x4b4]
call fcn.10013deb
cmp dword [eax], 0
jl 0x100250f7
mov dword [ebp - 0x20], 0xd86e52d8
mov dword [ebp - 0xc9c], 0xb416c011
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x20]
mov dword [ebp + eax - 0xd84], ecx
mov dword [ebp - 0x20], 0
jmp 0x10024d27
mov eax, dword [ebp - 0x20]
inc eax
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 2
jg 0x100250f2
mov dword [ebp - 0x18], 0x1d847576
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x14f0], eax
mov eax, dword [ebp - 0x18]
cmp dword [ebp - 0x18], eax
jge 0x10024d55
mov dword [ebp - 0xbe4], 1
jmp 0x10024d5c
and dword [ebp - 0xbe4], 0
mov esi, dword [ebp - 0x20]
push 3
lea ecx, [ebp - 0x4b4]
call fcn.10013deb
mov eax, dword [eax]
imul eax, dword [ebp - 0xbe4]
sub eax, dword [ebp - 0x18]
cmp esi, eax
jg 0x10024d88
mov dword [ebp - 0xbec], 1
jmp 0x10024d8f
and dword [ebp - 0xbec], 0
mov eax, dword [ebp - 0xbec]
sub eax, dword [ebp - 0x20]
cmp eax, dword [ebp - 0x18]
jle 0x10024da9
mov dword [ebp - 0xfa0], 1
jmp 0x10024db0
and dword [ebp - 0xfa0], 0
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x14b4], eax
push 2
lea ecx, [ebp - 0x4b4]
call fcn.10013deb
push 3
lea ecx, [ebp - 0x4b4]
call fcn.10013deb
mov eax, dword [ebp - 0x20]
cmp dword [ebp - 0x20], eax
jg 0x10024de7
mov dword [ebp - 0xbf4], 1
jmp 0x10024dee
and dword [ebp - 0xbf4], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0xd84]
cmp dword [ebp - 0xbf4], eax
jg 0x10024e0f
mov dword [ebp - 0xbfc], 1
jmp 0x10024e16
and dword [ebp - 0xbfc], 0
mov eax, dword [ebp - 0xbfc]
imul eax, dword [ebp - 0x18]
mov dword [ebp - 0xc04], eax
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0xc04]
mov dword [ebp + eax - 0xd84], ecx
cmp dword [ebp - 0x20], 0
je 0x10024e88
mov dword [ebp - 0x18], 2
jmp 0x10024e4f
mov eax, dword [ebp - 0x18]
dec eax
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 0
jl 0x10024e83
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x20]
mov eax, dword [ebp + eax*4 - 0x1150]
mov dword [ebp + ecx*4 - 0x1150], eax
push 1
push 0x2c79
push 0x7db
push 0
push 0
call fcn.10031d7d
add esp, 0x14
jmp 0x10024e48
jmp 0x100250e3
mov dword [ebp - 0x274], 0xe8ee72c9
mov dword [ebp - 0x18], 0
jmp 0x10024ea2
mov eax, dword [ebp - 0x18]
inc eax
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 1
jg 0x10024f94
mov dword [ebp - 0x2d0], 0x4daed0f1
mov dword [ebp - 0x2d0], 0
jmp 0x10024ecf
mov eax, dword [ebp - 0x2d0]
inc eax
mov dword [ebp - 0x2d0], eax
cmp dword [ebp - 0x2d0], 2
jg 0x10024f8f
push 2
lea ecx, [ebp - 0x1140]
call fcn.10013d2b
mov byte [ebp - 4], 1
push 0xa8b
push 0x5b4
push 0
push 0
lea eax, [ebp - 0x15d4]
push eax
lea eax, [ebp - 0x1140]
push eax
call fcn.1002247c
add esp, 0x18
push 1
lea ecx, [ebp - 0x1140]
call fcn.10013deb
and dword [eax], 0
jmp 0x10024f47
push 1
lea ecx, [ebp - 0x1140]
call fcn.10013deb
mov dword [ebp - 0xc0c], eax
mov eax, dword [ebp - 0xc0c]
mov eax, dword [eax]
inc eax
mov ecx, dword [ebp - 0xc0c]
mov dword [ecx], eax
push 1
lea ecx, [ebp - 0x1140]
call fcn.10013deb
cmp dword [eax], 1
jg 0x10024f7b
push 3
lea ecx, [ebp - 0x4b4]
call fcn.10013deb
mov eax, dword [eax]
mov ecx, dword [ebp - 0x18]
mov eax, dword [ebp + eax*4 - 0x1150]
mov dword [ebp + ecx*4 - 0x114c], eax
jmp 0x10024f23
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x1140]
call fcn.10013d8d
jmp 0x10024ec2
jmp 0x10024e9b
push 2
lea ecx, [ebp - 0x4b4]
call fcn.10013deb
cmp dword [eax], 0xffff
ja 0x10024fb5
mov dword [ebp - 0xc74], 1
jmp 0x10024fbc
and dword [ebp - 0xc74], 0
mov eax, dword [ebp - 0x18]
neg eax
cmp dword [ebp - 0xc74], eax
je 0x10024fd5
mov dword [ebp - 0xfa8], 1
jmp 0x10024fdc
and dword [ebp - 0xfa8], 0
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x14bc], eax
push 2
lea ecx, [ebp - 0x4b4]
call fcn.10013deb
mov ecx, dword [ebp - 0x20]
imul ecx, dword [eax]
cmp ecx, 0xffffffff
jl 0x10025009
mov dword [ebp - 0xc7c], 1
jmp 0x10025010
and dword [ebp - 0xc7c], 0
mov eax, dword [ebp - 0x18]
cmp dword [ebp - 0xc7c], eax
jge 0x10025027
mov dword [ebp - 0xc84], 1
jmp 0x1002502e
and dword [ebp - 0xc84], 0
imul eax, dword [ebp - 0xc84], 0xeddd
cmp eax, dword [ebp - 0x20]
jle 0x10025049
mov dword [ebp - 0xc8c], 1
jmp 0x10025050
and dword [ebp - 0xc8c], 0
mov eax, dword [ebp - 0xc8c]
mov dword [ebp - 0x274], eax
cmp dword [ebp - 0x274], 0
je 0x10025069
cmp dword [ebp - 0x20], 0
push 4
pop eax
shl eax, 0
mov esi, dword [ebp + eax - 0x1150]
push 3
lea ecx, [ebp - 0x4b4]
call fcn.10013deb
cmp dword [ebp - 0x274], 0
je 0x100250a1
cmp dword [ebp - 0x274], 0
je 0x100250a1
mov dword [ebp - 0xfb0], 1
jmp 0x100250a8
and dword [ebp - 0xfb0], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0xd84]
mov dword [ebp - 0x16d4], eax
cmp dword [ebp - 0x274], 0
jne 0x100250d0
mov dword [ebp - 0xc94], 1
jmp 0x100250d7
and dword [ebp - 0xc94], 0
mov eax, dword [ebp - 0xc94]
mov dword [ebp - 0xc9c], eax
mov dword [ebp - 0xc9c], 0xfffffffa
jmp 0x10024d20
jmp 0x10024cbc
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x4b4]
call fcn.10013d8d
mov dword [ebp - 0xfb8], 0x2c32b96c
mov dword [ebp - 0x14c4], 0x15a60915
mov dword [ebp - 0xfc0], 0x91ba8027
mov dword [ebp - 0x1020], 1
mov dword [ebp - 0xfd0], 0xd933bd3e
mov dword [ebp - 0x1040], 0xdb88dcfd
mov dword [ebp - 0x15e4], 0x2b622b60
mov dword [ebp - 0x14cc], 0xfffffffe
push 1
lea ecx, [ebp - 0x1334]
call fcn.10013d2b
mov dword [ebp - 4], 2
mov dword [ebp - 0xfc8], 0xfffffffe
mov dword [ebp - 0x1060], 0x12393dfe
mov dword [ebp - 0x170c], 0xc0d2
mov dword [ebp - 0x1038], 0
mov dword [ebp - 0x1030], 0xfffffff9
mov dword [ebp - 0x1048], 0x348f3bea
mov dword [ebp - 0x1058], 0x9bf80b7f
mov dword [ebp - 0x1028], 6
mov dword [ebp - 0x1050], 1
lea eax, [ebp - 0x14d4]
push eax
push 0xd98
lea eax, [ebp - 0x1334]
push eax
push 1
push 0
push 0x136b
push 0
call fcn.100214f1
add esp, 0x1c
lea eax, [ebp - 0xfb8]
push eax
lea eax, [ebp - 0xfc0]
push eax
lea eax, [ebp - 0xfc8]
push eax
push 1
lea eax, [ebp - 0xfd0]
push eax
lea eax, [ebp - 0x1020]
push eax
lea eax, [ebp - 0x1028]
push eax
lea eax, [ebp - 0x1030]
push eax
lea eax, [ebp - 0x1038]
push eax
lea eax, [ebp - 0x1334]
push eax
push 0
lea eax, [ebp - 0x1040]
push eax
lea eax, [ebp - 0x1048]
push eax
lea eax, [ebp - 0x1050]
push eax
lea eax, [ebp - 0x1058]
push eax
lea eax, [ebp - 0x1060]
push eax
call fcn.1001d748
add esp, 0x40
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x1334]
call fcn.10013d8d
mov dword [ebp - 0x5f0], 3
push 4
lea ecx, [ebp - 0x1364]
call fcn.10013d2b
mov dword [ebp - 4], 3
mov dword [ebp - 0x1068], 0x1e6e2bf
mov dword [ebp - 0xcb4], 0x8cf5a8
mov dword [ebp - 0xcbc], 0
push 4
lea ecx, [ebp - 0x134c]
call fcn.10013d2b
mov byte [ebp - 4], 4
push 0x2d13
lea eax, [ebp - 0x1364]
push eax
lea eax, [ebp - 0x68]
push eax
push 0
call fcn.10038a27
add esp, 0x10
mov dword [ebp - 0x68], 0
jmp 0x100252de
mov eax, dword [ebp - 0x68]
inc eax
mov dword [ebp - 0x68], eax
cmp dword [ebp - 0x68], 3
jge 0x100252f4
mov eax, dword [ebp - 0x68]
mov dword [ebp + eax*4 - 0x175c], 1
jmp 0x100252d7
mov dword [ebp - 0x68], 0
jmp 0x10025304
mov eax, dword [ebp - 0x68]
inc eax
mov dword [ebp - 0x68], eax
cmp dword [ebp - 0x68], 4
jge 0x10025320
push dword [ebp - 0x68]
lea ecx, [ebp - 0x134c]
call fcn.10013deb
mov dword [eax], 0x9c7c6f1f
jmp 0x100252fd
mov byte [ebp - 0x194], 0
movzx eax, byte [ebp - 0x194]
test eax, eax
je 0x10025345
push 0
push 0x5520
push 1
push 0
call fcn.10030cf8
add esp, 0x10
mov eax, dword [ebp - 0x5f0]
add eax, 0xa1fa
cmp dword [ebp - 0x5f0], eax
je 0x10025364
mov dword [ebp - 0x5f8], 1
jmp 0x1002536b
and dword [ebp - 0x5f8], 0
push 3
lea ecx, [ebp - 0x1364]
call fcn.10013deb
mov ecx, dword [ebp - 0x5f8]
mov dword [eax], ecx
mov eax, dword [ebp - 0x5f0]
cmp eax, dword [ebp - 0x5f8]
jle 0x1002539a
mov dword [ebp - 0xca4], 1
jmp 0x100253a1
and dword [ebp - 0xca4], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x175c]
add eax, dword [ebp - 0xca4]
cmp eax, dword [ebp - 0x1068]
jne 0x100253c8
mov dword [ebp - 0xcac], 1
jmp 0x100253cf
and dword [ebp - 0xcac], 0
mov eax, dword [ebp - 0xcac]
mov dword [ebp - 0xcb4], eax
mov eax, dword [ebp - 0xcb4]
sub eax, 0x60d2f38d
mov dword [ebp - 0xcbc], eax
mov esi, dword [ebp - 0xcbc]
push 1
lea ecx, [ebp - 0x134c]
call fcn.10013deb
mov dword [eax], esi
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x134c]
call fcn.10013d8d
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x1364]
call fcn.10013d8d
push 4
lea ecx, [ebp - 0x4c0]
call fcn.10013d2b
mov dword [ebp - 4], 5
mov dword [ebp - 0x15f4], 0xfffffff7
push 3
lea ecx, [ebp - 0xdc8]
call fcn.10013d2b
mov byte [ebp - 4], 6
mov dword [ebp - 0x67c], 0xd5d7
mov dword [ebp - 0x14dc], 0x2ad015b0
mov dword [ebp - 0x9c8], 1
mov dword [ebp - 0x5cc], 0x3ebe1552
mov dword [ebp - 0x428], 0xfffffffb
mov dword [ebp - 0x608], 0
mov dword [ebp - 0x1080], 0x3c6e85a6
mov dword [ebp - 0x1088], 0xffffffff
push 1
lea ecx, [ebp - 0x1278]
call fcn.10013d2b
mov byte [ebp - 4], 7
mov dword [ebp - 0x1070], 0x259d
cmp dword [ebp - 0x1070], 0x92f
jge 0x10025695
lea eax, [ebp - 0x2d8]
push eax
mov ecx, 0x10663ef0
call fcn.100135b8
push dword [ebp - 0x2d8]
lea ecx, [ebp - 0x1170]
call fcn.10013d2b
mov byte [ebp - 4], 8
and dword [ebp - 0x3cc], 0
jmp 0x10025505
mov eax, dword [ebp - 0x3cc]
inc eax
mov dword [ebp - 0x3cc], eax
mov eax, dword [ebp - 0x3cc]
cmp eax, dword [ebp - 0x2d8]
jge 0x10025531
push dword [ebp - 0x3cc]
lea ecx, [ebp - 0x1170]
call fcn.10013deb
push eax
mov ecx, 0x10663ef0
call fcn.100135b8
jmp 0x100254f8
lea ecx, [ebp - 0x1160]
call fcn.10013d1e
mov byte [ebp - 4], 9
and dword [ebp - 0x1a4], 0
jmp 0x10025556
mov eax, dword [ebp - 0x1a4]
inc eax
mov dword [ebp - 0x1a4], eax
mov eax, dword [ebp - 0x1a4]
cmp eax, dword [ebp - 0x2d8]
jge 0x100255f2
mov byte [ebp - 0x4e], 1
mov eax, dword [ebp - 0x1a4]
inc eax
mov dword [ebp - 0x3c0], eax
jmp 0x10025588
mov eax, dword [ebp - 0x3c0]
inc eax
mov dword [ebp - 0x3c0], eax
mov eax, dword [ebp - 0x3c0]
cmp eax, dword [ebp - 0x2d8]
jge 0x100255c8
push dword [ebp - 0x1a4]
lea ecx, [ebp - 0x1170]
call fcn.10013deb
mov esi, eax
push dword [ebp - 0x3c0]
lea ecx, [ebp - 0x1170]
call fcn.10013deb
mov ecx, dword [esi]
cmp ecx, dword [eax]
jne 0x100255c6
mov byte [ebp - 0x4e], 0
jmp 0x100255c8
jmp 0x1002557b
movzx eax, byte [ebp - 0x4e]
test eax, eax
je 0x100255ed
push dword [ebp - 0x1a4]
lea ecx, [ebp - 0x1170]
call fcn.10013deb
push eax
lea ecx, [ebp - 0x1160]
call fcn.1003b970
jmp 0x10025549
push fcn.100184bb
lea ecx, [ebp - 0x1160]
call fcn.10013e50
push eax
mov ecx, 0x10663e38
call fcn.1003b85e
mov ecx, eax
call fcn.100139d1
and dword [ebp - 0x2e0], 0
jmp 0x1002562a
mov eax, dword [ebp - 0x2e0]
inc eax
mov dword [ebp - 0x2e0], eax
lea ecx, [ebp - 0x1160]
call fcn.10013e50
cmp dword [ebp - 0x2e0], eax
jae 0x10025668
push dword [ebp - 0x2e0]
lea ecx, [ebp - 0x1160]
call fcn.10013deb
push dword [eax]
mov ecx, 0x10663e38
call fcn.100139dd
mov edx, 0x1000b2fc
mov ecx, eax
call fcn.100188c7
jmp 0x1002561d
push fcn.100184bb
mov ecx, 0x10663e38
call fcn.100139d1
mov byte [ebp - 4], 8
lea ecx, [ebp - 0x1160]
call fcn.10013d8d
mov byte [ebp - 4], 7
lea ecx, [ebp - 0x1170]
call fcn.10013d8d
push 0x72a3
push 0x134d
push 0
push 0x5469
push 0
push 0x3a56
push 0x649f
lea eax, [ebp - 0x54]
push eax
push 0x5e2
push 0x6e60
lea eax, [ebp - 0xdc8]
push eax
call fcn.10035e60
add esp, 0x2c
mov dword [ebp - 0x54], 0
jmp 0x100256df
mov eax, dword [ebp - 0x54]
inc eax
mov dword [ebp - 0x54], eax
cmp dword [ebp - 0x54], 2
jge 0x100256f5
mov eax, dword [ebp - 0x54]
mov dword [ebp + eax*4 - 0xc18], 0xbefc7127
jmp 0x100256d8
push 0x1922
push 0
lea eax, [ebp - 0x54]
push eax
push 0x4775
push 0x1c95
push 0xd69
push 0x78
push 0x11e0
push 0xcfa
push 0x396c
push 0x38da
push 0x198a
push 0
lea eax, [ebp - 0x1278]
push eax
call fcn.1003656c
add esp, 0x38
mov dword [ebp - 0x54], 0
jmp 0x1002574b
mov eax, dword [ebp - 0x54]
inc eax
mov dword [ebp - 0x54], eax
cmp dword [ebp - 0x54], 2
jge 0x10025761
mov eax, dword [ebp - 0x54]
mov dword [ebp + eax*4 - 0x1718], 1
jmp 0x10025744
cmp dword [ebp - 0x5cc], 1
jl 0x10025776
mov dword [ebp - 0x600], 1
jmp 0x1002577d
and dword [ebp - 0x600], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x600]
mov dword [ebp + eax - 0xc18], ecx
mov eax, dword [ebp - 0x600]
mov dword [ebp - 0x428], eax
push 1
lea ecx, [ebp - 0xdc8]
call fcn.10013deb
or dword [eax], 0xffffffff
or eax, 0xffffffff
je 0x10025996
push 0
lea ecx, [ebp - 0xdc8]
call fcn.10013deb
mov dword [eax], 1
push 0
lea ecx, [ebp - 0xdc8]
call fcn.10013deb
cmp dword [eax], 9
jne 0x100257ed
push 7
pop eax
test eax, eax
je 0x100257ed
mov dword [ebp - 0xcc4], 1
jmp 0x100257f4
and dword [ebp - 0xcc4], 0
cmp dword [ebp - 0xcc4], 0
jl 0x10025809
mov dword [ebp - 0xccc], 1
jmp 0x10025810
and dword [ebp - 0xccc], 0
mov eax, dword [ebp - 0x608]
cmp dword [ebp - 0xccc], eax
jle 0x1002582a
mov dword [ebp - 0x1078], 1
jmp 0x10025831
and dword [ebp - 0x1078], 0
mov eax, dword [ebp - 0x428]
mov dword [ebp - 0x16dc], eax
cmp dword [ebp - 0x5cc], 0xe0bb
jne 0x10025855
mov dword [ebp - 0xcd4], 1
jmp 0x1002585c
and dword [ebp - 0xcd4], 0
mov eax, dword [ebp - 0xcd4]
mov dword [ebp - 0x428], eax
mov eax, dword [ebp - 0x428]
mov dword [ebp - 0x1080], eax
cmp dword [ebp - 0x67c], 0xb5b2
jne 0x1002588c
mov dword [ebp - 0xbdc], 1
jmp 0x10025893
and dword [ebp - 0xbdc], 0
mov eax, dword [ebp - 0xbdc]
mov dword [ebp - 0x1088], eax
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0xc18]
sub eax, dword [ebp - 0x9c8]
mov dword [ebp - 0x654], eax
push 0
lea ecx, [ebp - 0x1278]
call fcn.10013deb
mov ecx, dword [ebp - 0x654]
mov dword [eax], ecx
cmp dword [ebp - 0x654], 0
je 0x100258f4
push 0
lea ecx, [ebp - 0x1278]
call fcn.10013deb
cmp dword [eax], 0
je 0x100258f4
mov dword [ebp - 0x660], 1
jmp 0x100258fb
and dword [ebp - 0x660], 0
mov eax, dword [ebp - 0x67c]
add eax, dword [ebp - 0x660]
imul eax, eax, 0x9862
push 4
pop ecx
shl ecx, 0
mov dword [ebp + ecx - 0x1718], eax
cmp dword [ebp - 0x608], 0x6635
jl 0x1002593b
mov eax, 0x53b787d1
test eax, eax
je 0x1002593b
mov dword [ebp - 0x9c0], 1
jmp 0x10025942
and dword [ebp - 0x9c0], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0xc18]
add eax, dword [ebp - 0x9c0]
jne 0x10025972
push 0
lea ecx, [ebp - 0xdc8]
call fcn.10013deb
cmp dword [eax], 0
jne 0x10025972
and dword [ebp - 0x668], 0
jmp 0x1002597c
mov dword [ebp - 0x668], 1
mov eax, dword [ebp - 0x608]
cmp dword [ebp - 0x668], eax
jge 0x10025996
mov dword [ebp - 0xb70], 1
jmp 0x1002599d
and dword [ebp - 0xb70], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0xc18]
cmp eax, dword [ebp - 0xb70]
jle 0x100259be
mov dword [ebp - 0x670], 1
jmp 0x100259c5
and dword [ebp - 0x670], 0
mov eax, dword [ebp - 0x5cc]
cmp dword [ebp - 0x670], eax
jle 0x100259df
mov dword [ebp - 0x678], 1
jmp 0x100259e6
and dword [ebp - 0x678], 0
mov eax, dword [ebp - 0x9c8]
cmp dword [ebp - 0x678], eax
je 0x10025a00
mov dword [ebp - 0xc5c], 1
jmp 0x10025a07
and dword [ebp - 0xc5c], 0
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0xc5c]
mov dword [ebp + eax - 0xc18], ecx
mov byte [ebp - 4], 6
lea ecx, [ebp - 0x1278]
call fcn.10013d8d
mov byte [ebp - 4], 5
lea ecx, [ebp - 0xdc8]
call fcn.10013d8d
mov dword [ebp - 0x680], 0x3631e19e
mov dword [ebp - 0x2e8], 0
jmp 0x10025a5b
mov eax, dword [ebp - 0x2e8]
inc eax
mov dword [ebp - 0x2e8], eax
cmp dword [ebp - 0x2e8], 1
jge 0x10025a77
mov eax, dword [ebp - 0x2e8]
mov dword [ebp + eax*4 - 0x234], 0xfffffff7
jmp 0x10025a4e
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0x234], 0
jmp 0x10025aa5
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x234]
dec eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x234], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x234], 0xfffffff1
jne 0x10025c35
mov dword [ebp - 0xc60], 0x3b31
mov dword [ebp - 0x1090], 0xea964a90
mov dword [ebp - 0x1098], 5
mov dword [ebp - 0x3c8], 0
jmp 0x10025af0
mov eax, dword [ebp - 0x3c8]
inc eax
mov dword [ebp - 0x3c8], eax
cmp dword [ebp - 0x3c8], 3
jge 0x10025b0c
mov eax, dword [ebp - 0x3c8]
mov dword [ebp + eax*4 - 0x178c], 0x787d6364
jmp 0x10025ae3
mov dword [ebp - 0x680], 0x14a9bacd
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x234]
cmp eax, dword [ebp - 0x680]
jge 0x10025b37
mov dword [ebp - 0x9d0], 1
jmp 0x10025b3e
and dword [ebp - 0x9d0], 0
cmp dword [ebp - 0x9d0], 0xdf63
je 0x10025b56
mov dword [ebp - 0x688], 1
jmp 0x10025b5d
and dword [ebp - 0x688], 0
mov eax, dword [ebp - 0x688]
dec eax
cmp eax, dword [ebp - 0x1090]
je 0x10025b78
mov dword [ebp - 0xb78], 1
jmp 0x10025b7f
and dword [ebp - 0xb78], 0
cmp dword [ebp - 0xb78], 0
je 0x10025b94
mov dword [ebp - 0x690], 1
jmp 0x10025b9b
and dword [ebp - 0x690], 0
cmp dword [ebp - 0x690], 0x2ee6
jge 0x10025bb3
mov dword [ebp - 0x9d8], 1
jmp 0x10025bba
and dword [ebp - 0x9d8], 0
mov eax, dword [ebp - 0xc60]
cmp dword [ebp - 0x9d8], eax
jge 0x10025bd4
mov dword [ebp - 0x698], 1
jmp 0x10025bdb
and dword [ebp - 0x698], 0
mov eax, dword [ebp - 0x1098]
cmp dword [ebp - 0x698], eax
je 0x10025bf5
mov dword [ebp - 0x6a0], 1
jmp 0x10025bfc
and dword [ebp - 0x6a0], 0
mov eax, dword [ebp - 0xc60]
imul eax, dword [ebp - 0x6a0]
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x178c], eax
mov byte [ebp - 0xf5], 0
movzx eax, byte [ebp - 0xf5]
test eax, eax
je 0x10025c30
push 0
call fcn.10037d0b
pop ecx
jmp 0x10025a8a
or dword [ebp - 0x12e0], 0xffffffff
or dword [ebp - 0x12dc], 0xffffffff
or dword [ebp - 0x12d8], 0xffffffff
or dword [ebp - 0x12d4], 0xffffffff
lea ecx, [ebp - 0x5dd]
call fcn.10013dfa
push eax
lea eax, [ebp - 0x12d0]
push eax
lea eax, [ebp - 0x12e0]
push eax
lea ecx, [ebp - 0x17dc]
call fcn.10013dfd
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0x21c]
call fcn.10013d67
mov byte [ebp - 4], 0xa
mov dword [ebp - 0x28], 0xfffffff6
mov dword [ebp - 0x14e4], 1
mov dword [ebp - 0x28], 3
jmp 0x10025cab
mov eax, dword [ebp - 0x28]
dec eax
mov dword [ebp - 0x28], eax
cmp dword [ebp - 0x28], 0
jl 0x1002664c
mov dword [ebp - 0xa8], 0xc8a6b950
mov dword [ebp - 0x10a0], 0x2391
cmp dword [ebp - 0x10a0], 0xd1b
jge 0x10025d91
and dword [ebp - 0x4e4], 0
lea eax, [ebp - 0x10b0]
push eax
lea eax, [ebp - 0x10a8]
push eax
lea eax, [ebp - 0x10d0]
push eax
lea eax, [ebp - 0x10c8]
push eax
lea eax, [ebp - 0x10c0]
push eax
lea eax, [ebp - 0x10b8]
push eax
push 0x1000b664
call fcn.1005821b
add esp, 0x1c
mov eax, dword [ebp - 0x10a8]
mov dword [ebp - 0x2b8], eax
jmp 0x10025d32
mov eax, dword [ebp - 0x2b8]
inc eax
mov dword [ebp - 0x2b8], eax
mov eax, dword [ebp - 0x2b8]
cmp eax, dword [ebp - 0x10b0]
jg 0x10025d7f
mov eax, dword [ebp - 0x2b8]
cdq
idiv dword [ebp - 0x10b8]
mov eax, edx
cdq
idiv dword [ebp - 0x10c0]
mov eax, edx
cdq
idiv dword [ebp - 0x10c8]
mov eax, edx
cdq
idiv dword [ebp - 0x10d0]
cmp dword [ebp - 0x2b8], edx
jne 0x10025d7d
mov eax, dword [ebp - 0x4e4]
inc eax
mov dword [ebp - 0x4e4], eax
jmp 0x10025d25
push dword [ebp - 0x4e4]
push 0x1000b5fc
call fcn.100585c5
pop ecx
pop ecx
mov dword [ebp - 0x23c], 0
mov dword [ebp - 0xe2c], 0x9855eec8
mov dword [ebp - 0xe28], 0x9855eec8
mov dword [ebp - 0xe24], 0x9855eec8
mov dword [ebp - 0xe20], 0x9855eec8
push dword [ebp - 0x28]
lea ecx, [ebp - 0x21c]
call fcn.10013deb
cmp dword [eax], 0
je 0x10025ddb
jmp 0x1002664c
mov byte [ebp - 0x18c], 0
movzx eax, byte [ebp - 0x18c]
test eax, eax
je 0x10025e04
push 0x871
push 0x9bc
push 0xc72
push 0
call dword [sym.imp.USER32.dll_GetMessageA]
mov dword [ebp - 0xa8], 3
jmp 0x10025e1d
mov eax, dword [ebp - 0xa8]
dec eax
mov dword [ebp - 0xa8], eax
cmp dword [ebp - 0xa8], 0
jl 0x10026647
mov dword [ebp - 0x78], 0xfa5fef9d
mov dword [ebp - 0x1108], 0
mov dword [ebp - 0x1100], 0
mov dword [ebp - 0x2f0], 0
jmp 0x10025e5e
mov eax, dword [ebp - 0x2f0]
inc eax
mov dword [ebp - 0x2f0], eax
cmp dword [ebp - 0x2f0], 1
jge 0x10025e7a
mov eax, dword [ebp - 0x2f0]
mov dword [ebp + eax*4 - 0x6d8], 0xffffffff
jmp 0x10025e51
mov dword [ebp - 0x78], 0
jmp 0x10025e8a
mov eax, dword [ebp - 0x78]
inc eax
mov dword [ebp - 0x78], eax
cmp dword [ebp - 0x78], 3
jg 0x10025fe3
mov dword [ebp - 0x10d8], 8
push dword [ebp - 0x28]
lea ecx, [ebp - 0x21c]
call fcn.10013deb
cmp dword [eax], 0
jne 0x10025ec3
cmp dword [ebp - 0x23c], 0
jne 0x10025ec3
and dword [ebp - 0x9e0], 0
jmp 0x10025ecd
mov dword [ebp - 0x9e0], 1
cmp dword [ebp - 0x9e0], 0xf340
jge 0x10025ee5
mov dword [ebp - 0x6a8], 1
jmp 0x10025eec
and dword [ebp - 0x6a8], 0
imul esi, dword [ebp - 0x6a8], 0xa955
push dword [ebp - 0x28]
lea ecx, [ebp - 0x21c]
call fcn.10013deb
cmp esi, dword [eax]
jg 0x10025f14
mov dword [ebp - 0x57c], 1
jmp 0x10025f1b
and dword [ebp - 0x57c], 0
push 4
pop eax
imul eax, eax, 3
mov ecx, dword [ebp - 0x57c]
mov dword [ebp + eax - 0xe2c], ecx
cmp dword [ebp - 0x57c], 1
jl 0x10025f43
mov dword [ebp - 0xb80], 1
jmp 0x10025f4a
and dword [ebp - 0xb80], 0
cmp dword [ebp - 0xb80], 0
jge 0x10025f5f
mov dword [ebp - 0x6b0], 1
jmp 0x10025f66
and dword [ebp - 0x6b0], 0
mov eax, dword [ebp - 0x10d8]
sub eax, dword [ebp - 0x6b0]
cmp eax, 0xffb91e60
jae 0x10025f85
mov dword [ebp - 0x9e8], 1
jmp 0x10025f8c
and dword [ebp - 0x9e8], 0
push dword [ebp - 0x28]
lea ecx, [ebp - 0x21c]
call fcn.10013deb
mov eax, dword [eax]
cmp eax, dword [ebp - 0x9e8]
jl 0x10025fb0
mov dword [ebp - 0x6b8], 1
jmp 0x10025fb7
and dword [ebp - 0x6b8], 0
push dword [ebp - 0x28]
lea ecx, [ebp - 0x21c]
call fcn.10013deb
mov esi, dword [eax]
imul esi, dword [ebp - 0x6b8]
push dword [ebp - 0x28]
lea ecx, [ebp - 0x21c]
call fcn.10013deb
mov dword [eax], esi
jmp 0x10025e83
mov dword [ebp - 0x10e0], 0x1e15
cmp dword [ebp - 0x10e0], 0xd5d
jge 0x10026058
lea eax, [ebp - 0x10e8]
push eax
mov ecx, 0x10663ef0
call fcn.100135b8
mov eax, dword [ebp - 0x10e8]
and eax, 0x80000001
jns 0x1002601c
dec eax
or eax, 0xfffffffe
inc eax
test eax, eax
jle 0x1002603d
push fcn.100184bb
mov edx, 0x1000b678
mov ecx, 0x10663e38
call fcn.100188c7
mov ecx, eax
call fcn.100139d1
jmp 0x10026058
push fcn.100184bb
mov edx, 0x1000b680
mov ecx, 0x10663e38
call fcn.100188c7
mov ecx, eax
call fcn.100139d1
mov dword [ebp - 0x23c], 0
jmp 0x10026071
mov eax, dword [ebp - 0x23c]
inc eax
mov dword [ebp - 0x23c], eax
cmp dword [ebp - 0x23c], 3
jg 0x10026642
push 3
lea ecx, [ebp - 0x137c]
call fcn.10013d2b
mov byte [ebp - 4], 0xb
mov dword [ebp - 0x1110], 2
mov dword [ebp - 0x484], 0
jmp 0x100260b2
mov eax, dword [ebp - 0x484]
inc eax
mov dword [ebp - 0x484], eax
cmp dword [ebp - 0x484], 3
jge 0x100260d4
push dword [ebp - 0x484]
lea ecx, [ebp - 0x137c]
call fcn.10013deb
mov dword [eax], 1
jmp 0x100260a5
mov dword [ebp - 0x78], 3
jmp 0x100260e4
mov eax, dword [ebp - 0x78]
dec eax
mov dword [ebp - 0x78], eax
cmp dword [ebp - 0x78], 0
jl 0x10026158
mov dword [ebp - 0x1604], 0x4801465e
mov dword [ebp - 0x14ec], 8
mov dword [ebp - 0x1744], 0xffffffff
mov dword [ebp - 0x2f8], 0
jmp 0x10026121
mov eax, dword [ebp - 0x2f8]
inc eax
mov dword [ebp - 0x2f8], eax
cmp dword [ebp - 0x2f8], 3
jge 0x1002613d
mov eax, dword [ebp - 0x2f8]
mov dword [ebp + eax*4 - 0x15e0], 0xfffffff8
jmp 0x10026114
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x15e0]
dec eax
push 4
pop ecx
shl ecx, 1
mov dword [ebp + ecx - 0x15e0], eax
jmp 0x100260dd
mov dword [ebp - 0xe30], 0x1dd0
cmp dword [ebp - 0xe30], 0x56e
jge 0x100263f3
lea eax, [ebp - 0x5b4]
push eax
mov ecx, 0x10663ef0
call fcn.1001380d
xorpd xmm0, xmm0
movlpd qword [ebp - 0x1518], xmm0
lea eax, [ebp - 0x1518]
push eax
push dword [ebp - 0x5b4]
lea ecx, [ebp - 0x1180]
call fcn.10013f4c
mov byte [ebp - 4], 0xc
xorpd xmm0, xmm0
movlpd qword [ebp - 0x610], xmm0
and dword [ebp - 0x27c], 0
jmp 0x100261cd
mov eax, dword [ebp - 0x27c]
inc eax
mov dword [ebp - 0x27c], eax
mov eax, dword [ebp - 0x27c]
cdq
mov dword [ebp - 0xfdc], eax
mov dword [ebp - 0xfd8], edx
mov eax, dword [ebp - 0xfd8]
cmp eax, dword [ebp - 0x5b0]
jg 0x1002624d
jl 0x100261fe
mov eax, dword [ebp - 0xfdc]
cmp eax, dword [ebp - 0x5b4]
jae 0x1002624d
push dword [ebp - 0x27c]
lea ecx, [ebp - 0x1180]
call fcn.10013f6e
push eax
mov ecx, 0x10663ef0
call fcn.1001380d
push dword [ebp - 0x27c]
lea ecx, [ebp - 0x1180]
call fcn.10013f6e
mov ecx, dword [ebp - 0x610]
add ecx, dword [eax]
mov edx, dword [ebp - 0x60c]
adc edx, dword [eax + 4]
mov dword [ebp - 0x610], ecx
mov dword [ebp - 0x60c], edx
jmp 0x100261c0
push dword [ebp - 0x5b0]
push dword [ebp - 0x5b4]
push dword [ebp - 0x60c]
push dword [ebp - 0x610]
call fcn.10072a00
mov dword [ebp - 0xff4], eax
mov dword [ebp - 0xff0], edx
xorpd xmm0, xmm0
movlpd qword [ebp - 0x618], xmm0
xorpd xmm0, xmm0
movlpd qword [ebp - 0x45c], xmm0
jmp 0x100262ae
mov eax, dword [ebp - 0x45c]
add eax, 1
mov ecx, dword [ebp - 0x458]
adc ecx, 0
mov dword [ebp - 0x45c], eax
mov dword [ebp - 0x458], ecx
mov eax, dword [ebp - 0x5b4]
sub eax, 1
mov ecx, dword [ebp - 0x5b0]
sbb ecx, 0
mov dword [ebp - 0xfe8], eax
mov dword [ebp - 0xfe4], ecx
mov eax, dword [ebp - 0x458]
cmp eax, dword [ebp - 0xfe4]
jg 0x100263c2
jl 0x100262f2
mov eax, dword [ebp - 0x45c]
cmp eax, dword [ebp - 0xfe8]
jae 0x100263c2
push dword [ebp - 0x45c]
lea ecx, [ebp - 0x1180]
call fcn.10013f6e
mov ecx, dword [ebp - 0xff4]
sub ecx, dword [eax]
mov edx, dword [ebp - 0xff0]
sbb edx, dword [eax + 4]
mov dword [ebp - 0x298], ecx
mov dword [ebp - 0x294], edx
mov eax, dword [ebp - 0x45c]
add eax, 1
mov ecx, dword [ebp - 0x458]
adc ecx, 0
push eax
lea ecx, [ebp - 0x1180]
call fcn.10013f6e
mov dword [ebp - 0xcb8], eax
mov eax, dword [ebp - 0xcb8]
mov ecx, dword [eax]
sub ecx, dword [ebp - 0x298]
mov eax, dword [eax + 4]
sbb eax, dword [ebp - 0x294]
mov edx, dword [ebp - 0xcb8]
mov dword [edx], ecx
mov dword [edx + 4], eax
cmp dword [ebp - 0x294], 0
jg 0x10026399
jl 0x1002637a
cmp dword [ebp - 0x298], 0
jae 0x10026399
mov eax, dword [ebp - 0x298]
neg eax
mov ecx, dword [ebp - 0x294]
adc ecx, 0
neg ecx
mov dword [ebp - 0x298], eax
mov dword [ebp - 0x294], ecx
mov eax, dword [ebp - 0x618]
add eax, dword [ebp - 0x298]
mov ecx, dword [ebp - 0x614]
adc ecx, dword [ebp - 0x294]
mov dword [ebp - 0x618], eax
mov dword [ebp - 0x614], ecx
jmp 0x10026290
push fcn.100184bb
push dword [ebp - 0x614]
push dword [ebp - 0x618]
mov ecx, 0x10663e38
call fcn.10013aef
mov ecx, eax
call fcn.100139d1
mov byte [ebp - 4], 0xb
lea ecx, [ebp - 0x1180]
call fcn.10013d8d
push 0
lea ecx, [ebp - 0x21c]
call fcn.10013deb
push 4
pop ecx
imul ecx, ecx, 0
mov eax, dword [eax]
mov dword [ebp + ecx - 0x6d8], eax
push dword [ebp - 0xa8]
lea ecx, [ebp - 0x21c]
call fcn.10013deb
cmp dword [eax], 1
jl 0x10026432
push 2
lea ecx, [ebp - 0x137c]
call fcn.10013deb
push 4
pop eax
imul eax, eax, 0
mov esi, dword [ebp + eax - 0xe2c]
push dword [ebp - 0xa8]
lea ecx, [ebp - 0x21c]
call fcn.10013deb
cmp esi, dword [eax]
jl 0x10026460
mov dword [ebp - 0x6c0], 1
jmp 0x10026467
and dword [ebp - 0x6c0], 0
push dword [ebp - 0x28]
lea ecx, [ebp - 0x21c]
call fcn.10013deb
mov eax, dword [eax]
cmp eax, dword [ebp - 0x6c0]
je 0x1002648b
mov dword [ebp - 0x10f8], 1
jmp 0x10026492
and dword [ebp - 0x10f8], 0
mov eax, dword [ebp - 0x1100]
mov dword [ebp - 0x14f4], eax
mov esi, dword [ebp - 0x1108]
sub esi, 4
push dword [ebp - 0x28]
lea ecx, [ebp - 0x21c]
call fcn.10013deb
cmp esi, dword [eax]
jg 0x100264c5
mov dword [ebp - 0x9f0], 1
jmp 0x100264cc
and dword [ebp - 0x9f0], 0
push dword [ebp - 0xa8]
lea ecx, [ebp - 0x21c]
call fcn.10013deb
mov eax, dword [eax]
cmp eax, dword [ebp - 0x9f0]
jg 0x100264f3
mov dword [ebp - 0x6c8], 1
jmp 0x100264fa
and dword [ebp - 0x6c8], 0
mov esi, dword [ebp - 0x6c8]
sub esi, 9
imul esi, dword [ebp - 0x78]
push dword [ebp - 0x28]
lea ecx, [ebp - 0x21c]
call fcn.10013deb
cmp esi, dword [eax]
jge 0x10026525
mov dword [ebp - 0xb88], 1
jmp 0x1002652c
and dword [ebp - 0xb88], 0
push dword [ebp - 0xa8]
lea ecx, [ebp - 0x21c]
call fcn.10013deb
mov ecx, dword [ebp - 0xb88]
imul ecx, dword [eax]
test ecx, ecx
jne 0x10026566
push dword [ebp - 0x28]
lea ecx, [ebp - 0x21c]
call fcn.10013deb
cmp dword [eax], 0
jne 0x10026566
and dword [ebp - 0x6d0], 0
jmp 0x10026570
mov dword [ebp - 0x6d0], 1
push 4
pop eax
imul eax, eax, 3
mov eax, dword [ebp + eax - 0xe2c]
cmp dword [ebp - 0x6d0], eax
jle 0x10026591
mov dword [ebp - 0x9f8], 1
jmp 0x10026598
and dword [ebp - 0x9f8], 0
push 4
pop eax
imul eax, eax, 3
mov ecx, dword [ebp - 0x9f8]
sub ecx, dword [ebp + eax - 0xe2c]
je 0x100265c9
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x6d8], 0
je 0x100265c9
mov dword [ebp - 0x4ec], 1
jmp 0x100265d0
and dword [ebp - 0x4ec], 0
push 4
pop eax
imul eax, eax, 3
mov ecx, dword [ebp - 0x4ec]
mov dword [ebp + eax - 0xe2c], ecx
push dword [ebp - 0xa8]
lea ecx, [ebp - 0x21c]
call fcn.10013deb
mov esi, dword [ebp - 0x4ec]
imul esi, dword [eax]
push dword [ebp - 0x28]
lea ecx, [ebp - 0x21c]
call fcn.10013deb
cmp esi, dword [eax]
jle 0x1002661b
mov dword [ebp - 0xc68], 1
jmp 0x10026622
and dword [ebp - 0xc68], 0
mov eax, dword [ebp - 0xc68]
mov dword [ebp - 0x1110], eax
mov byte [ebp - 4], 0xa
lea ecx, [ebp - 0x137c]
call fcn.10013d8d
jmp 0x10026064
jmp 0x10025e10
jmp 0x10025ca4
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x21c]
call fcn.10013d8d
mov dword [ebp - 0x3c], 0
jmp 0x1002666b
mov eax, dword [ebp - 0x3c]
inc eax
mov dword [ebp - 0x3c], eax
cmp dword [ebp - 0x3c], 3
jge 0x10026681
mov eax, dword [ebp - 0x3c]
mov dword [ebp + eax*4 - 0x11d0], 0xfffffff6
jmp 0x10026664
push 2
lea ecx, [ebp - 0x1394]
call fcn.10013d2b
mov byte [ebp - 4], 0xd
mov dword [ebp - 0xa4], 0
jmp 0x100266ab
mov eax, dword [ebp - 0xa4]
inc eax
mov dword [ebp - 0xa4], eax
cmp dword [ebp - 0xa4], 2
jge 0x100266cd
push dword [ebp - 0xa4]
lea ecx, [ebp - 0x1394]
call fcn.10013deb
mov dword [eax], 6
jmp 0x1002669e
mov dword [ebp - 0xa4], 0
jmp 0x100266e6
mov eax, dword [ebp - 0xa4]
inc eax
mov dword [ebp - 0xa4], eax
cmp dword [ebp - 0xa4], 1
jge 0x10026702
mov eax, dword [ebp - 0xa4]
mov dword [ebp + eax*4 - 0x3d0], 0xfffffff8
jmp 0x100266d9
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0x3d0], 1
jmp 0x10026730
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x3d0]
dec eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x3d0], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x3d0], 0
jl 0x1002696c
push 2
lea ecx, [ebp - 0xdf8]
call fcn.10013d2b
mov byte [ebp - 4], 0xe
mov dword [ebp - 0x300], 0
jmp 0x1002676e
mov eax, dword [ebp - 0x300]
inc eax
mov dword [ebp - 0x300], eax
cmp dword [ebp - 0x300], 2
jge 0x10026790
push dword [ebp - 0x300]
lea ecx, [ebp - 0xdf8]
call fcn.10013deb
mov dword [eax], 0xfffffffc
jmp 0x10026761
push 1
lea ecx, [ebp - 0xdf8]
call fcn.10013deb
mov dword [eax], 1
jmp 0x100267c9
push 1
lea ecx, [ebp - 0xdf8]
call fcn.10013deb
mov dword [ebp - 0x6e0], eax
mov eax, dword [ebp - 0x6e0]
mov eax, dword [eax]
dec eax
mov ecx, dword [ebp - 0x6e0]
mov dword [ecx], eax
push 1
lea ecx, [ebp - 0xdf8]
call fcn.10013deb
cmp dword [eax], 0
jl 0x10026958
mov dword [ebp - 0x244], 0xfffffff6
mov dword [ebp - 0x244], 1
jmp 0x10026802
mov eax, dword [ebp - 0x244]
dec eax
mov dword [ebp - 0x244], eax
cmp dword [ebp - 0x244], 0
jl 0x10026912
mov dword [ebp - 0x1118], 0x42477066
mov dword [ebp - 0x430], 0
jmp 0x10026832
mov eax, dword [ebp - 0x430]
inc eax
mov dword [ebp - 0x430], eax
cmp dword [ebp - 0x430], 2
jge 0x1002684e
mov eax, dword [ebp - 0x430]
mov dword [ebp + eax*4 - 0xd9c], 0xf2c36544
jmp 0x10026825
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0xd9c], 0
jmp 0x1002687c
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xd9c]
inc eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0xd9c], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0xd9c], 1
jg 0x100268eb
mov dword [ebp - 0x308], 0
mov dword [ebp - 0x308], 1
jmp 0x100268af
mov eax, dword [ebp - 0x308]
dec eax
mov dword [ebp - 0x308], eax
cmp dword [ebp - 0x308], 0
jl 0x100268e6
push dword [ebp - 0x244]
lea ecx, [ebp - 0x1394]
call fcn.10013deb
cmp dword [eax], 0
je 0x100268d0
jmp 0x100268e6
push 1
lea ecx, [ebp - 0xdf8]
call fcn.10013deb
cmp dword [eax], 0
je 0x100268e4
jmp 0x100268e6
jmp 0x100268a2
jmp 0x10026861
push 0x5fa9
lea eax, [ebp - 0x1118]
push eax
push 0
push 0x7b91
push 1
push 0x7d14
call fcn.1001e41a
add esp, 0x18
jmp 0x100267f5
mov byte [ebp - 0xfd], 0
movzx eax, byte [ebp - 0xfd]
test eax, eax
je 0x10026953
push 1
push 0x1846
push 0x1965
push 0
push 0x4072
push 0x40d6
push 0x4162
push 0x5751
push 0x1a6d
call fcn.1001ea95
add esp, 0x24
jmp 0x100267a5
mov byte [ebp - 4], 0xd
lea ecx, [ebp - 0xdf8]
call fcn.10013d8d
jmp 0x10026715
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x1394]
call fcn.10013d8d
mov dword [ebp - 0x3c], 0
jmp 0x1002698b
mov eax, dword [ebp - 0x3c]
inc eax
mov dword [ebp - 0x3c], eax
cmp dword [ebp - 0x3c], 4
jge 0x100269a7
push dword [ebp - 0x3c]
lea ecx, [ebp - 0x4c0]
call fcn.10013deb
mov dword [eax], 0xe83c773
jmp 0x10026984
mov dword [ebp - 0x3c], 0
jmp 0x100269b7
mov eax, dword [ebp - 0x3c]
inc eax
mov dword [ebp - 0x3c], eax
cmp dword [ebp - 0x3c], 2
jge 0x100269cd
mov eax, dword [ebp - 0x3c]
mov dword [ebp + eax*4 - 0xd8c], 0x3afc3718
jmp 0x100269b0
mov dword [ebp - 0x38], 0
mov dword [ebp - 0x7c], 4
cmp dword [ebp - 0x38], 0xcba86ba4
jne 0x100269f0
mov dword [ebp - 0x6e8], 1
jmp 0x100269f7
and dword [ebp - 0x6e8], 0
mov eax, dword [ebp - 0x38]
cmp dword [ebp - 0x38], eax
jne 0x10026a0b
mov dword [ebp - 0xa00], 1
jmp 0x10026a12
and dword [ebp - 0xa00], 0
mov eax, dword [ebp - 0x38]
cmp dword [ebp - 0xa00], eax
jge 0x10026a29
mov dword [ebp - 0xb90], 1
jmp 0x10026a30
and dword [ebp - 0xb90], 0
mov eax, dword [ebp - 0x6e8]
cmp eax, dword [ebp - 0xb90]
jle 0x10026a4a
mov dword [ebp - 0x6f0], 1
jmp 0x10026a51
and dword [ebp - 0x6f0], 0
cmp dword [ebp - 0x6f0], 0x8213af72
jbe 0x10026a69
mov dword [ebp - 0xa08], 1
jmp 0x10026a70
and dword [ebp - 0xa08], 0
mov eax, dword [ebp - 0x38]
add eax, dword [ebp - 0xa08]
cmp eax, dword [ebp - 0x38]
jle 0x10026a8a
mov dword [ebp - 0x6f8], 1
jmp 0x10026a91
and dword [ebp - 0x6f8], 0
mov eax, dword [ebp - 0x6f8]
neg eax
mov dword [ebp - 0x7c], eax
mov eax, dword [ebp - 0x38]
mov dword [ebp - 0x1614], eax
mov eax, dword [ebp - 0x7c]
mov dword [ebp - 0x14fc], eax
cmp dword [ebp - 0x7c], 0x9f7c8b16
jae 0x10026ac3
mov dword [ebp - 0xd20], 1
jmp 0x10026aca
and dword [ebp - 0xd20], 0
mov eax, dword [ebp - 0x38]
cmp dword [ebp - 0xd20], eax
jne 0x10026ae1
mov dword [ebp - 0x1120], 1
jmp 0x10026ae8
and dword [ebp - 0x1120], 0
cmp dword [ebp - 0x7c], 0
je 0x10026b91
push 4
lea ecx, [ebp - 0x13a0]
call fcn.10013d2b
mov byte [ebp - 4], 0xf
mov dword [ebp - 0x1130], 0
mov dword [ebp - 0x1128], 0xfffffff7
mov dword [ebp - 0x3d8], 0
jmp 0x10026b30
mov eax, dword [ebp - 0x3d8]
inc eax
mov dword [ebp - 0x3d8], eax
cmp dword [ebp - 0x3d8], 4
jge 0x10026b4f
push dword [ebp - 0x3d8]
lea ecx, [ebp - 0x13a0]
call fcn.10013deb
or dword [eax], 0xffffffff
jmp 0x10026b23
lea eax, [ebp - 0x13a0]
push eax
lea eax, [ebp - 0x38]
push eax
push 0
push 0x2c38
lea eax, [ebp - 0x1128]
push eax
lea eax, [ebp - 0x7c]
push eax
push 0
lea eax, [ebp - 0x1130]
push eax
call fcn.10030d97
add esp, 0x20
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x13a0]
call fcn.10013d8d
jmp 0x10026d69
mov dword [ebp - 0x7c], 0x12
jmp 0x10026ba1
mov eax, dword [ebp - 0x7c]
inc eax
mov dword [ebp - 0x7c], eax
cmp dword [ebp - 0x7c], 0x12
je 0x10026d69
mov byte [ebp - 0x19c], 0
movzx eax, byte [ebp - 0x19c]
test eax, eax
je 0x10026bcc
push 0
push 0x1e40
push 0
call dword [sym.imp.GDI32.dll_GetRegionData]
mov dword [ebp - 0x38], 0
jmp 0x10026bdc
mov eax, dword [ebp - 0x38]
inc eax
mov dword [ebp - 0x38], eax
cmp dword [ebp - 0x38], 0x17
jle 0x10026d64
mov dword [ebp - 0x2a0], 0xe7a32987
mov dword [ebp - 0x310], 0
jmp 0x10026c09
mov eax, dword [ebp - 0x310]
inc eax
mov dword [ebp - 0x310], eax
cmp dword [ebp - 0x310], 1
jge 0x10026c25
mov eax, dword [ebp - 0x310]
mov dword [ebp + eax*4 - 0x1238], 0xfffffffc
jmp 0x10026bfc
mov eax, dword [ebp - 0x38]
mov dword [ebp - 0x2a0], eax
mov dword [ebp - 0x2a0], 0
jmp 0x10026c47
mov eax, dword [ebp - 0x2a0]
inc eax
mov dword [ebp - 0x2a0], eax
cmp dword [ebp - 0x2a0], 0
jg 0x10026d5f
push 4
lea ecx, [ebp - 0x1190]
call fcn.10013d2b
mov byte [ebp - 4], 0x10
mov dword [ebp - 0x464], 0
jmp 0x10026c7e
mov eax, dword [ebp - 0x464]
inc eax
mov dword [ebp - 0x464], eax
cmp dword [ebp - 0x464], 4
jge 0x10026ca0
push dword [ebp - 0x464]
lea ecx, [ebp - 0x1190]
call fcn.10013deb
mov dword [eax], 0xd1f6657e
jmp 0x10026c71
push 1
lea ecx, [ebp - 0x1190]
call fcn.10013deb
and dword [eax], 0
jmp 0x10026cd6
push 1
lea ecx, [ebp - 0x1190]
call fcn.10013deb
mov dword [ebp - 0x700], eax
mov eax, dword [ebp - 0x700]
mov eax, dword [eax]
dec eax
mov ecx, dword [ebp - 0x700]
mov dword [ecx], eax
push 1
lea ecx, [ebp - 0x1190]
call fcn.10013deb
cmp dword [eax], 0
jl 0x10026d4b
mov dword [ebp - 0x24c], 0xd402a53e
mov byte [ebp - 0x105], 0
push 0x6b02
lea eax, [ebp - 0x105]
push eax
push 0
push 0
call fcn.1001df93
add esp, 0x10
mov dword [ebp - 0x24c], 0
jmp 0x10026d2a
mov eax, dword [ebp - 0x24c]
inc eax
mov dword [ebp - 0x24c], eax
cmp dword [ebp - 0x24c], 1
jge 0x10026d46
mov eax, dword [ebp - 0x24c]
mov dword [ebp + eax*4 - 0x1238], 0xf782
jmp 0x10026d1d
jmp 0x10026cb2
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x1190]
call fcn.10013d8d
jmp 0x10026c3a
jmp 0x10026bd5
jmp 0x10026b9a
mov byte [ebp - 0x18e], 0
movzx eax, byte [ebp - 0x18e]
test eax, eax
je 0x10026f75
mov dword [ebp - 0xf4], 0xe0648261
mov dword [ebp - 0xf50], 2
mov dword [ebp - 0x16e4], 1
mov dword [ebp - 0xf4], 0xfffffff7
jmp 0x10026db6
mov eax, dword [ebp - 0xf4]
dec eax
mov dword [ebp - 0xf4], eax
cmp dword [ebp - 0xf4], 0xfffffff2
jge 0x10026f3b
push 2
lea ecx, [ebp - 0xce4]
call fcn.10013d2b
mov byte [ebp - 4], 0x11
mov dword [ebp - 0x80], 0
jmp 0x10026de4
mov eax, dword [ebp - 0x80]
inc eax
mov dword [ebp - 0x80], eax
cmp dword [ebp - 0x80], 3
jge 0x10026dfa
mov eax, dword [ebp - 0x80]
mov dword [ebp + eax*4 - 0x17a4], 9
jmp 0x10026ddd
mov dword [ebp - 0x80], 0
jmp 0x10026e0a
mov eax, dword [ebp - 0x80]
inc eax
mov dword [ebp - 0x80], eax
cmp dword [ebp - 0x80], 2
jge 0x10026e26
push dword [ebp - 0x80]
lea ecx, [ebp - 0xce4]
call fcn.10013deb
mov dword [eax], 0xfffffff7
jmp 0x10026e03
push 1
lea ecx, [ebp - 0xce4]
call fcn.10013deb
mov dword [eax], 2
jmp 0x10026e5f
push 1
lea ecx, [ebp - 0xce4]
call fcn.10013deb
mov dword [ebp - 0xa10], eax
mov eax, dword [ebp - 0xa10]
mov eax, dword [eax]
dec eax
mov ecx, dword [ebp - 0xa10]
mov dword [ecx], eax
push 1
lea ecx, [ebp - 0xce4]
call fcn.10013deb
cmp dword [eax], 0
jl 0x10026ebf
mov dword [ebp - 0x318], 0xdc9ed9ba
mov dword [ebp - 0x318], 2
jmp 0x10026e94
mov eax, dword [ebp - 0x318]
dec eax
mov dword [ebp - 0x318], eax
cmp dword [ebp - 0x318], 0
jl 0x10026eba
push 1
lea ecx, [ebp - 0xce4]
call fcn.10013deb
mov eax, dword [eax]
cmp dword [ebp + eax*4 - 0x17a4], 0
je 0x10026eb8
jmp 0x10026eba
jmp 0x10026e87
jmp 0x10026e3b
push 1
lea ecx, [ebp - 0xce4]
call fcn.10013deb
push 1
lea ecx, [ebp - 0xce4]
call fcn.10013deb
mov eax, dword [ebp - 0xf4]
cmp dword [ebp - 0xf4], eax
jl 0x10026ef3
mov dword [ebp - 0x708], 1
jmp 0x10026efa
and dword [ebp - 0x708], 0
mov eax, dword [ebp - 0xf4]
cmp eax, dword [ebp - 0x708]
je 0x10026f14
mov dword [ebp - 0xb98], 1
jmp 0x10026f1b
and dword [ebp - 0xb98], 0
mov eax, dword [ebp - 0xb98]
mov dword [ebp - 0xf50], eax
mov byte [ebp - 4], 5
lea ecx, [ebp - 0xce4]
call fcn.10013d8d
jmp 0x10026da9
mov byte [ebp - 0x10d], 0
movzx eax, byte [ebp - 0x10d]
test eax, eax
je 0x10026f6d
push 0x2bba
push 0
push 1
push 0x4433
push 0x5714
push 0x250c
call fcn.1001cf1a
add esp, 0x18
push 0
call dword [sym.imp.KERNEL32.dll_SetEndOfFile]
push 0
call fcn.100374ab
pop ecx
push 3
lea ecx, [ebp - 0x4c0]
call fcn.10013deb
mov dword [eax], 2
jmp 0x10026fb6
push 3
lea ecx, [ebp - 0x4c0]
call fcn.10013deb
mov dword [ebp - 0x710], eax
mov eax, dword [ebp - 0x710]
mov eax, dword [eax]
dec eax
mov ecx, dword [ebp - 0x710]
mov dword [ecx], eax
push 3
lea ecx, [ebp - 0x4c0]
call fcn.10013deb
cmp dword [eax], 0
jl 0x10029f9b
mov dword [ebp - 0x284], 0x25b9b55b
push 1
lea ecx, [ebp - 0x13e8]
call fcn.10013d2b
mov byte [ebp - 4], 0x12
lea eax, [ebp - 0x1504]
push eax
lea eax, [ebp - 0x13e8]
push eax
push 0x50ff
push 0
push 0
push 0x6b14
call fcn.1001d2a2
add esp, 0x18
mov dword [ebp - 0x284], 0
jmp 0x10027024
mov eax, dword [ebp - 0x284]
dec eax
mov dword [ebp - 0x284], eax
cmp dword [ebp - 0x284], 0xfffffffc
jge 0x10027080
mov dword [ebp - 0xa18], 0
cmp dword [ebp - 0xa18], 0
je 0x10027042
jmp 0x10027080
lea eax, [ebp - 0x284]
push eax
push 0x148e
push 1
push 0x5ebb
lea eax, [ebp - 0x13e8]
push eax
lea eax, [ebp - 0xa18]
push eax
push 1
push 0x2c98
push 0x3528
push 0x547a
push 0
call fcn.1001fbf8
add esp, 0x2c
jmp 0x10027017
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x13e8]
call fcn.10013d8d
mov dword [ebp - 0x24], 0xd86e52d8
mov dword [ebp - 0xe38], 0x7cb3f4f4
push 2
lea ecx, [ebp - 0x1400]
call fcn.10013d2b
mov byte [ebp - 4], 0x13
mov dword [ebp - 0x3e0], 0
jmp 0x100270ca
mov eax, dword [ebp - 0x3e0]
inc eax
mov dword [ebp - 0x3e0], eax
cmp dword [ebp - 0x3e0], 2
jge 0x100270e9
push dword [ebp - 0x3e0]
lea ecx, [ebp - 0x1400]
call fcn.10013deb
or dword [eax], 0xffffffff
jmp 0x100270bd
mov byte [ebp - 0x196], 0
movzx eax, byte [ebp - 0x196]
test eax, eax
je 0x10027108
push 0
push 0x176e
call dword [sym.imp.USER32.dll_MapDialogRect]
push 1
push 0x778d
lea eax, [ebp - 0xe38]
push eax
push 0x3682
push 0
lea eax, [ebp - 0x1400]
push eax
push 0x5774
call fcn.1001d66d
add esp, 0x1c
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x1400]
call fcn.10013d8d
mov dword [ebp - 0x8b8], 0xb416c011
mov dword [ebp - 0x1624], 0
push 0x73b
push 0
push 0x2cb9
push 1
push 0x2180
push 0x5bd7
push 0x189f
push 0
call fcn.10032128
add esp, 0x20
push 0x1ff9
push 0x6d4b
push 0
push 0x7626
call fcn.1003b464
add esp, 0x10
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x24]
mov dword [ebp + eax - 0xd8c], ecx
push 4
lea ecx, [ebp - 0x15f0]
call fcn.10013d2b
mov byte [ebp - 4], 0x14
mov dword [ebp - 0x328], 0
mov dword [ebp - 0xe70], 0xffffffff
mov dword [ebp - 0x320], 0
jmp 0x100271e2
mov eax, dword [ebp - 0x320]
inc eax
mov dword [ebp - 0x320], eax
cmp dword [ebp - 0x320], 4
jge 0x10027201
push dword [ebp - 0x320]
lea ecx, [ebp - 0x15f0]
call fcn.10013deb
and dword [eax], 0
jmp 0x100271d5
mov dword [ebp - 0xee0], 0x20b5
cmp dword [ebp - 0xee0], 0x589
jge 0x1002738b
lea ecx, [ebp - 0x1460]
call fcn.10013541
mov byte [ebp - 4], 0x15
lea edx, [ebp - 0x1460]
mov ecx, 0x10663ef0
call fcn.1001880f
and dword [ebp - 0x588], 0
and dword [ebp - 0x438], 0
and dword [ebp - 0x1b0], 0
mov byte [ebp - 0x4d], 1
and dword [ebp - 0x1d8], 0
jmp 0x10027269
mov eax, dword [ebp - 0x1d8]
inc eax
mov dword [ebp - 0x1d8], eax
lea ecx, [ebp - 0x1460]
call fcn.1001359f
cmp dword [ebp - 0x1d8], eax
jae 0x1002731c
push dword [ebp - 0x1d8]
lea ecx, [ebp - 0x1460]
call fcn.1001358b
movsx eax, byte [eax]
cmp eax, 0x28
jne 0x100272a8
mov eax, dword [ebp - 0x438]
inc eax
mov dword [ebp - 0x438], eax
jmp 0x10027303
push dword [ebp - 0x1d8]
lea ecx, [ebp - 0x1460]
call fcn.1001358b
movsx eax, byte [eax]
cmp eax, 0x29
jne 0x100272d0
mov eax, dword [ebp - 0x1b0]
inc eax
mov dword [ebp - 0x1b0], eax
jmp 0x10027303
push dword [ebp - 0x1d8]
lea ecx, [ebp - 0x1460]
call fcn.1001358b
movsx eax, byte [eax]
cmp eax, 0x23
jne 0x10027303
mov eax, dword [ebp - 0x588]
inc eax
mov dword [ebp - 0x588], eax
mov eax, dword [ebp - 0x1b0]
inc eax
mov dword [ebp - 0x1b0], eax
mov eax, dword [ebp - 0x438]
cmp eax, dword [ebp - 0x1b0]
jge 0x10027317
mov byte [ebp - 0x4d], 0
jmp 0x1002731c
jmp 0x1002725c
movzx eax, byte [ebp - 0x4d]
test eax, eax
je 0x10027371
and dword [ebp - 0x4f4], 0
jmp 0x1002733a
mov eax, dword [ebp - 0x4f4]
inc eax
mov dword [ebp - 0x4f4], eax
mov eax, dword [ebp - 0x588]
dec eax
cmp dword [ebp - 0x4f4], eax
jge 0x10027356
push 0x1000b688
call fcn.10058886
pop ecx
jmp 0x1002732d
mov eax, dword [ebp - 0x438]
sub eax, dword [ebp - 0x1b0]
push eax
push 0x1000b274
call fcn.100585c5
pop ecx
pop ecx
jmp 0x1002737c
push 0x1000b270
call fcn.10058886
pop ecx
mov byte [ebp - 4], 0x14
lea ecx, [ebp - 0x1460]
call fcn.10013581
mov byte [ebp - 0x186], 0
push 1
lea eax, [ebp - 0x186]
push eax
push 0
call fcn.1001e84a
add esp, 0xc
mov dword [ebp - 0x328], 0
jmp 0x100273be
mov eax, dword [ebp - 0x328]
inc eax
mov dword [ebp - 0x328], eax
cmp dword [ebp - 0x328], 3
jg 0x100274dd
mov dword [ebp - 0xe54], 0x22263126
mov dword [ebp - 0xe50], 0x22263126
mov dword [ebp - 0xe4c], 0x22263126
mov dword [ebp - 0xe48], 0x22263126
mov dword [ebp - 0x3e8], 0
jmp 0x1002740c
mov eax, dword [ebp - 0x3e8]
inc eax
mov dword [ebp - 0x3e8], eax
cmp dword [ebp - 0x3e8], 3
jge 0x10027428
mov eax, dword [ebp - 0x3e8]
mov dword [ebp + eax*4 - 0x1798], 0xffffffff
jmp 0x100273ff
push 4
pop eax
shl eax, 1
mov dword [ebp + eax - 0x1798], 0xfffffff7
push 4
pop eax
shl eax, 0
mov dword [ebp + eax - 0xe54], 3
jmp 0x10027466
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0xe54]
dec eax
push 4
pop ecx
shl ecx, 0
mov dword [ebp + ecx - 0xe54], eax
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0xe54], 0
jl 0x100274d8
mov dword [ebp - 0x330], 0x6c516535
mov dword [ebp - 0x330], 0
jmp 0x10027499
mov eax, dword [ebp - 0x330]
inc eax
mov dword [ebp - 0x330], eax
cmp dword [ebp - 0x330], 3
jg 0x100274c9
mov byte [ebp - 0x198], 0
movzx eax, byte [ebp - 0x198]
test eax, eax
je 0x100274c7
push 0
push 0x1fa3
push 1
push 1
call fcn.10030cf8
add esp, 0x10
jmp 0x1002748c
mov dword [ebp - 0xe70], 0xc902dafb
jmp 0x1002744b
jmp 0x100273b1
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x15f0]
call fcn.10013d8d
mov dword [ebp - 0x24], 0
jmp 0x100274fc
mov eax, dword [ebp - 0x24]
inc eax
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 2
jg 0x10029f96
push 2
lea ecx, [ebp - 0x1418]
call fcn.10013d2b
mov byte [ebp - 4], 0x16
mov dword [ebp - 0x254], 0x57a7c203
push 0x724f
push 0
lea eax, [ebp - 0x150c]
push eax
lea eax, [ebp - 0x1418]
push eax
push 1
push 0xc62
push 0x6bc5
call fcn.1001dcff
add esp, 0x1c
mov byte [ebp - 0xee], 0
movzx eax, byte [ebp - 0xee]
test eax, eax
je 0x10027581
push 0x518e
push 0x2046
push 0x2051
push 1
push 0x18e7
push 0x31c8
push 0
call fcn.10020072
add esp, 0x1c
mov dword [ebp - 0x254], 0
jmp 0x1002759a
mov eax, dword [ebp - 0x254]
inc eax
mov dword [ebp - 0x254], eax
cmp dword [ebp - 0x254], 1
jg 0x1002778f
mov dword [ebp - 0xe68], 0x1aec
cmp dword [ebp - 0xe68], 0xddf
jge 0x1002773d
mov dword [ebp - 0x4fc], 1
xor eax, eax
inc eax
je 0x1002773d
push 0x10664fa4
push 0x10664fa0
push 0x108de27c
push 0x10694334
push 0x1000b68c
call fcn.1005821b
add esp, 0x14
cmp dword [0x10664fa0], 0
jne 0x10027603
jmp 0x1002773d
mov eax, dword [0x10664fa4]
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0x94], eax
and dword [ebp - 0xfc], 0
lea eax, [ebp - 0x94]
push eax
call fcn.100248db
pop ecx
mov dword [ebp - 0x94], eax
lea eax, [ebp - 0x1c]
push eax
call fcn.100248db
pop ecx
mov dword [ebp - 0x1c], eax
lea eax, [ebp - 0x1c]
push eax
call fcn.100248db
pop ecx
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0xfc]
inc eax
mov dword [ebp - 0xfc], eax
mov eax, dword [ebp - 0x94]
cmp eax, dword [ebp - 0x1c]
jne 0x1002761b
mov eax, dword [0x10664fa4]
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0x94], eax
and dword [ebp - 0x584], 0
jmp 0x10027687
mov eax, dword [ebp - 0x584]
inc eax
mov dword [ebp - 0x584], eax
mov eax, dword [ebp - 0x584]
cmp eax, dword [ebp - 0xfc]
jge 0x100276a4
lea eax, [ebp - 0x1c]
push eax
call fcn.100248db
pop ecx
mov dword [ebp - 0x1c], eax
jmp 0x1002767a
and dword [ebp - 0xfc], 0
mov eax, dword [ebp - 0x94]
cmp eax, dword [ebp - 0x1c]
je 0x100276d8
lea eax, [ebp - 0x94]
push eax
call fcn.100248db
pop ecx
mov dword [ebp - 0x94], eax
lea eax, [ebp - 0x1c]
push eax
call fcn.100248db
pop ecx
mov dword [ebp - 0x1c], eax
jmp 0x100276ab
mov eax, dword [ebp - 0x94]
mov dword [ebp - 0x1c], eax
lea eax, [ebp - 0x1c]
push eax
call fcn.100248db
pop ecx
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0xfc]
inc eax
mov dword [ebp - 0xfc], eax
mov eax, dword [ebp - 0x1c]
cmp eax, dword [ebp - 0x94]
jne 0x100276e1
mov eax, dword [ebp - 0x4fc]
mov dword [ebp - 0x1010], eax
push dword [ebp - 0xfc]
push dword [ebp - 0x1010]
push 0x1000b698
call fcn.100585c5
add esp, 0xc
mov eax, dword [ebp - 0x4fc]
inc eax
mov dword [ebp - 0x4fc], eax
jmp 0x100275cb
mov byte [ebp - 0x18a], 0
movzx eax, byte [ebp - 0x18a]
test eax, eax
je 0x1002776f
push 0
push 1
push 0x6c7b
push 0x240
push 0xd3e
push 0x67af
call fcn.1001d59d
add esp, 0x18
push dword [ebp - 0x254]
lea ecx, [ebp - 0x1418]
call fcn.10013deb
cmp dword [eax], 0
je 0x1002778a
jmp 0x1002758d
jmp 0x1002758d
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x1418]
call fcn.10013d8d
mov dword [ebp - 0x14], 0x1d847576
mov eax, dword [ebp - 0x24]
mov dword [ebp - 0x1534], eax
mov eax, dword [ebp - 0x14]
cmp dword [ebp - 0x14], eax
jge 0x100277c2
mov dword [ebp - 0x718], 1
jmp 0x100277c9
and dword [ebp - 0x718], 0
mov esi, dword [ebp - 0x24]
push 3
lea ecx, [ebp - 0x4c0]
call fcn.10013deb
mov eax, dword [eax]
imul eax, dword [ebp - 0x718]
sub eax, dword [ebp - 0x14]
cmp esi, eax
jg 0x100277f5
mov dword [ebp - 0xc70], 1
jmp 0x100277fc
and dword [ebp - 0xc70], 0
mov eax, dword [ebp - 0xc70]
sub eax, dword [ebp - 0x24]
cmp eax, dword [ebp - 0x14]
jle 0x10027816
mov dword [ebp - 0xe5c], 1
jmp 0x1002781d
and dword [ebp - 0xe5c], 0
mov eax, dword [ebp - 0x24]
mov dword [ebp - 0x173c], eax
push 2
lea ecx, [ebp - 0x4c0]
call fcn.10013deb
push 3
lea ecx, [ebp - 0x4c0]
call fcn.10013deb
mov eax, dword [ebp - 0x24]
cmp dword [ebp - 0x24], eax
jg 0x10027854
mov dword [ebp - 0x720], 1
jmp 0x1002785b
and dword [ebp - 0x720], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0xd8c]
cmp dword [ebp - 0x720], eax
jg 0x1002787c
mov dword [ebp - 0xa20], 1
jmp 0x10027883
and dword [ebp - 0xa20], 0
mov eax, dword [ebp - 0xa20]
imul eax, dword [ebp - 0x14]
mov dword [ebp - 0x728], eax
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x728]
mov dword [ebp + eax - 0xd8c], ecx
cmp dword [ebp - 0x24], 0
je 0x10028652
mov dword [ebp - 0x47c], 0xd4e7937d
cmp dword [ebp - 0x47c], 7
jg 0x1002793a
mov eax, dword [ebp - 0x47c]
cmp dword [ebp - 0x47c], eax
jne 0x100278dd
mov dword [ebp - 0x11d4], 1
jmp 0x100278e4
and dword [ebp - 0x11d4], 0
mov eax, 0xabe8
test eax, eax
je 0x1002793a
mov byte [ebp - 0x115], 0
movzx eax, byte [ebp - 0x115]
test eax, eax
je 0x10027915
push 0
push 0x415d
push 0
push 0xa24
call fcn.100311a7
add esp, 0x10
mov byte [ebp - 0x116], 0
movzx eax, byte [ebp - 0x116]
test eax, eax
je 0x10027938
push 0
push 1
push 0x127c
call fcn.1001e0fa
add esp, 0xc
jmp 0x1002795e
mov dword [ebp - 0xe64], 0x4c38b6b0
push 0
lea eax, [ebp - 0xe64]
push eax
push 1
lea eax, [ebp - 0x47c]
push eax
call fcn.100311a7
add esp, 0x10
mov dword [ebp - 0x14], 2
jmp 0x1002796e
mov eax, dword [ebp - 0x14]
dec eax
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 0
jl 0x1002864d
push 4
lea ecx, [ebp - 0x210]
call fcn.10013d2b
mov byte [ebp - 4], 0x17
mov dword [ebp - 0x5a0], 0
mov dword [ebp - 0xd0], 0xfffffffc
mov dword [ebp - 0x10ec], 0xf3b7
mov dword [ebp - 0xe74], 0x7c93e255
mov dword [ebp - 0xb4], 0
jmp 0x100279ca
mov eax, dword [ebp - 0xb4]
inc eax
mov dword [ebp - 0xb4], eax
cmp dword [ebp - 0xb4], 4
jge 0x100279ec
push dword [ebp - 0xb4]
lea ecx, [ebp - 0x210]
call fcn.10013deb
mov dword [eax], 0x824a8c6a
jmp 0x100279bd
mov dword [ebp - 0xb4], 0
jmp 0x10027a05
mov eax, dword [ebp - 0xb4]
inc eax
mov dword [ebp - 0xb4], eax
cmp dword [ebp - 0xb4], 1
jge 0x10027a21
mov eax, dword [ebp - 0xb4]
mov dword [ebp + eax*4 - 0x3f0], 0xfffffff9
jmp 0x100279f8
push 2
lea ecx, [ebp - 0x210]
call fcn.10013deb
and dword [eax], 0
jmp 0x10027a57
push 2
lea ecx, [ebp - 0x210]
call fcn.10013deb
mov dword [ebp - 0xba0], eax
mov eax, dword [ebp - 0xba0]
mov eax, dword [eax]
inc eax
mov ecx, dword [ebp - 0xba0]
mov dword [ecx], eax
push 2
lea ecx, [ebp - 0x210]
call fcn.10013deb
cmp dword [eax], 0x1c
je 0x100280f5
mov dword [ebp - 0x60], 3
mov dword [ebp - 0xe6c], 9
mov dword [ebp - 0x340], 0xfffffffb
push 4
lea ecx, [ebp - 0xde0]
call fcn.10013d2b
mov byte [ebp - 4], 0x18
mov dword [ebp - 0x338], 0
jmp 0x10027ab2
mov eax, dword [ebp - 0x338]
inc eax
mov dword [ebp - 0x338], eax
cmp dword [ebp - 0x338], 4
jge 0x10027ad4
push dword [ebp - 0x338]
lea ecx, [ebp - 0xde0]
call fcn.10013deb
mov dword [eax], 0xfffffff8
jmp 0x10027aa5
push 2
lea ecx, [ebp - 0x210]
call fcn.10013deb
cmp dword [eax], 0
je 0x10027afa
mov byte [ebp - 4], 0x17
lea ecx, [ebp - 0xde0]
call fcn.10013d8d
jmp 0x100280f5
push 1
lea ecx, [ebp - 0x210]
call fcn.10013deb
cmp dword [eax], 0
jne 0x10027b27
push 2
lea ecx, [ebp - 0x210]
call fcn.10013deb
cmp dword [eax], 0
jne 0x10027b27
and dword [ebp - 0x730], 0
jmp 0x10027b31
mov dword [ebp - 0x730], 1
push 3
lea ecx, [ebp - 0x210]
call fcn.10013deb
mov ecx, dword [ebp - 0x730]
cmp ecx, dword [eax]
jge 0x10027b54
mov dword [ebp - 0xa28], 1
jmp 0x10027b5b
and dword [ebp - 0xa28], 0
push 1
lea ecx, [ebp - 0x210]
call fcn.10013deb
mov eax, dword [eax]
mov dword [ebp - 0x5a0], eax
mov eax, dword [ebp - 0x60]
cmp dword [ebp - 0x5a0], eax
jge 0x10027b8d
mov eax, 0x789
test eax, eax
jne 0x10027b8d
and dword [ebp - 0x738], 0
jmp 0x10027b97
mov dword [ebp - 0x738], 1
mov eax, dword [ebp - 0xa28]
sub eax, dword [ebp - 0x738]
mov dword [ebp - 0xcc0], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0xcc0]
mov dword [ebp + eax - 0x3f0], ecx
mov eax, dword [ebp - 0xcc0]
mov dword [ebp - 0xd0], eax
cmp dword [ebp - 0xd0], 0
je 0x10027edf
mov dword [ebp - 0x504], 9
push 1
lea ecx, [ebp - 0xd64]
call fcn.10013d2b
mov byte [ebp - 4], 0x19
mov dword [ebp - 0x1248], 1
mov dword [ebp - 0x1244], 1
mov dword [ebp - 0x1240], 1
mov dword [ebp - 0x123c], 1
lea eax, [ebp - 0xd64]
push eax
push 0
lea eax, [ebp - 0x153c]
push eax
push 0x67b8
push 0x40a4
push 0
push 0xda2
call fcn.10037ab3
add esp, 0x1c
mov eax, dword [ebp - 0x60]
mov dword [ebp - 0x1658], eax
cmp dword [ebp - 0x60], 0
jne 0x10027df8
mov eax, dword [ebp - 0x60]
push 4
pop ecx
imul ecx, ecx, 0
imul eax, dword [ebp + ecx - 0x3f0]
test eax, eax
jne 0x10027c84
push 0
lea ecx, [ebp - 0xd64]
call fcn.10013deb
cmp dword [eax], 0
jne 0x10027c84
and dword [ebp - 0x740], 0
jmp 0x10027c8e
mov dword [ebp - 0x740], 1
push 0
lea ecx, [ebp - 0xd64]
call fcn.10013deb
mov ecx, dword [ebp - 0x740]
cmp ecx, dword [eax]
je 0x10027cb1
mov dword [ebp - 0xa30], 1
jmp 0x10027cb8
and dword [ebp - 0xa30], 0
mov eax, dword [ebp - 0x60]
cmp dword [ebp - 0xa30], eax
jle 0x10027ccf
mov dword [ebp - 0x101c], 1
jmp 0x10027cd6
and dword [ebp - 0x101c], 0
push 3
lea ecx, [ebp - 0x210]
call fcn.10013deb
push 2
lea ecx, [ebp - 0x210]
call fcn.10013deb
cmp dword [eax], 0
je 0x10027d1c
push 0
lea ecx, [ebp - 0xd64]
call fcn.10013deb
cmp dword [eax], 0
je 0x10027d1c
mov eax, 0x23fa9dfe
test eax, eax
je 0x10027d1c
mov dword [ebp - 0x598], 1
jmp 0x10027d23
and dword [ebp - 0x598], 0
push 0
lea ecx, [ebp - 0xd64]
call fcn.10013deb
mov ecx, dword [ebp - 0x598]
mov dword [eax], ecx
cmp dword [ebp - 0x598], 0
jne 0x10027d5c
push 0
lea ecx, [ebp - 0xd64]
call fcn.10013deb
cmp dword [eax], 0
jne 0x10027d5c
and dword [ebp - 0x748], 0
jmp 0x10027d66
mov dword [ebp - 0x748], 1
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x1248]
cmp dword [ebp - 0x748], eax
jg 0x10027d86
mov dword [ebp - 0xba8], 1
jmp 0x10027d8d
and dword [ebp - 0xba8], 0
mov eax, dword [ebp - 0x60]
cmp dword [ebp - 0xba8], eax
jle 0x10027da4
mov dword [ebp - 0x750], 1
jmp 0x10027dab
and dword [ebp - 0x750], 0
push 2
lea ecx, [ebp - 0x210]
call fcn.10013deb
mov ecx, dword [ebp - 0x750]
cmp ecx, dword [eax]
jle 0x10027dce
mov dword [ebp - 0xa38], 1
jmp 0x10027dd5
and dword [ebp - 0xa38], 0
mov esi, dword [ebp - 0x60]
add esi, dword [ebp - 0xa38]
push 0
lea ecx, [ebp - 0x210]
call fcn.10013deb
cmp esi, dword [eax]
jne 0x10027df8
and dword [ebp - 0x758], 0
jmp 0x10027e02
mov dword [ebp - 0x758], 1
mov eax, dword [ebp - 0x504]
inc eax
mov dword [ebp - 0x504], eax
mov eax, dword [ebp - 0x60]
imul eax, dword [ebp - 0x758]
cmp dword [ebp - 0x504], eax
jl 0x10027e2d
mov dword [ebp - 0xc78], 1
jmp 0x10027e34
and dword [ebp - 0xc78], 0
mov eax, dword [ebp - 0xc78]
sub eax, 0x5f885928
push 4
pop ecx
imul ecx, ecx, 3
cmp eax, dword [ebp + ecx - 0x1248]
jl 0x10027e6c
push 2
lea ecx, [ebp - 0x210]
call fcn.10013deb
cmp dword [eax], 0
je 0x10027e6c
mov dword [ebp - 0x760], 1
jmp 0x10027e73
and dword [ebp - 0x760], 0
mov eax, dword [ebp - 0xe6c]
cmp dword [ebp - 0x760], eax
jle 0x10027e8d
mov dword [ebp - 0xa40], 1
jmp 0x10027e94
and dword [ebp - 0xa40], 0
cmp dword [ebp - 0xa40], 1
jle 0x10027eaf
mov eax, 0xffff
test eax, eax
jne 0x10027eaf
and dword [ebp - 0x768], 0
jmp 0x10027eb9
mov dword [ebp - 0x768], 1
push 4
pop eax
shl eax, 1
mov ecx, dword [ebp - 0x768]
mov dword [ebp + eax - 0x1248], ecx
mov byte [ebp - 4], 0x18
lea ecx, [ebp - 0xd64]
call fcn.10013d8d
jmp 0x100280e1
mov dword [ebp - 0x440], 0
mov dword [ebp - 0x5a0], 1
mov eax, dword [ebp - 0x440]
mov dword [ebp - 0x340], eax
mov eax, dword [ebp - 0x340]
mov dword [ebp - 0x1544], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x3f0]
cmp dword [ebp - 0x60], eax
jge 0x10027f29
mov dword [ebp - 0xbb0], 1
jmp 0x10027f30
and dword [ebp - 0xbb0], 0
push 3
lea ecx, [ebp - 0x210]
call fcn.10013deb
mov ecx, dword [ebp - 0xbb0]
cmp ecx, dword [eax]
jge 0x10027f53
mov dword [ebp - 0x770], 1
jmp 0x10027f5a
and dword [ebp - 0x770], 0
push 2
lea ecx, [ebp - 0x210]
call fcn.10013deb
mov ecx, dword [ebp - 0x770]
imul ecx, dword [eax]
push 4
pop eax
imul eax, eax, 0
cmp ecx, dword [ebp + eax - 0x3f0]
jne 0x10027f8b
mov dword [ebp - 0xa48], 1
jmp 0x10027f92
and dword [ebp - 0xa48], 0
mov eax, dword [ebp - 0x440]
cmp dword [ebp - 0xa48], eax
je 0x10027fac
mov dword [ebp - 0x778], 1
jmp 0x10027fb3
and dword [ebp - 0x778], 0
push 1
lea ecx, [ebp - 0xde0]
call fcn.10013deb
mov ecx, dword [ebp - 0x778]
cmp ecx, dword [eax]
je 0x10027fd6
mov dword [ebp - 0xd00], 1
jmp 0x10027fdd
and dword [ebp - 0xd00], 0
push 2
lea ecx, [ebp - 0xde0]
call fcn.10013deb
mov ecx, dword [ebp - 0xd00]
imul ecx, dword [eax]
cmp ecx, 0xffffffff
jne 0x10028004
mov dword [ebp - 0x780], 1
jmp 0x1002800b
and dword [ebp - 0x780], 0
mov eax, dword [ebp - 0xd0]
cmp dword [ebp - 0x780], eax
jl 0x10028025
mov dword [ebp - 0xa50], 1
jmp 0x1002802c
and dword [ebp - 0xa50], 0
mov eax, dword [ebp - 0x340]
imul eax, dword [ebp - 0xa50]
sub eax, dword [ebp - 0x10ec]
mov ecx, dword [ebp - 0x60]
lea eax, [eax + ecx + 0x361ae7d5]
test eax, eax
jne 0x10028059
mov dword [ebp - 0x788], 1
jmp 0x10028060
and dword [ebp - 0x788], 0
mov eax, dword [ebp - 0x340]
cmp dword [ebp - 0x788], eax
je 0x1002807a
mov dword [ebp - 0xbb8], 1
jmp 0x10028081
and dword [ebp - 0xbb8], 0
mov eax, dword [ebp - 0x440]
cmp dword [ebp - 0xbb8], eax
jge 0x1002809b
mov dword [ebp - 0x790], 1
jmp 0x100280a2
and dword [ebp - 0x790], 0
mov eax, dword [ebp - 0x440]
cmp eax, dword [ebp - 0x790]
jne 0x100280cb
push 3
lea ecx, [ebp - 0xde0]
call fcn.10013deb
cmp dword [eax], 0
jne 0x100280cb
and dword [ebp - 0xa58], 0
jmp 0x100280d5
mov dword [ebp - 0xa58], 1
mov eax, dword [ebp - 0xa58]
mov dword [ebp - 0xe74], eax
mov byte [ebp - 4], 0x17
lea ecx, [ebp - 0xde0]
call fcn.10013d8d
jmp 0x10027a33
mov dword [ebp - 0xd0], 0
jmp 0x1002810e
mov eax, dword [ebp - 0xd0]
inc eax
mov dword [ebp - 0xd0], eax
cmp dword [ebp - 0xd0], 4
jge 0x1002813d
push 0x4741
push 0x6fce
lea eax, [ebp - 0xd0]
push eax
lea eax, [ebp - 0x210]
push eax
push 1
push 0
call fcn.1001e577
add esp, 0x18
jmp 0x10028101
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x210]
call fcn.10013d8d
mov dword [ebp - 0x2b0], 6
mov dword [ebp - 0x1024], 1
push 4
lea ecx, [ebp - 0x140c]
call fcn.10013d2b
mov byte [ebp - 4], 0x1a
push 0x7538
push 0x4429
lea eax, [ebp - 0x140c]
push eax
push 0
push 0
push 0x3394
lea eax, [ebp - 0x16f4]
push eax
push 1
push 0x4f64
push 0x6b6d
push 0x1dfd
push 0x15c2
call fcn.10035668
add esp, 0x30
mov dword [ebp - 0x2b0], 0xa
jmp 0x100281c9
mov eax, dword [ebp - 0x2b0]
inc eax
mov dword [ebp - 0x2b0], eax
cmp dword [ebp - 0x2b0], 0x12
jle 0x10028234
mov dword [ebp - 0xe7c], 0xaad8
mov dword [ebp - 0x798], 0x22e974a5
lea eax, [ebp - 0x2b0]
push eax
push 0
lea eax, [ebp - 0x1024]
push eax
push 1
lea eax, [ebp - 0x798]
push eax
lea eax, [ebp - 0xe7c]
push eax
call fcn.100217ed
add esp, 0x18
push 0x5df7
push 0
push 0
push 0x2c3f
lea eax, [ebp - 0x798]
push eax
lea eax, [ebp - 0x140c]
push eax
call fcn.1001d39c
add esp, 0x18
jmp 0x100281bc
mov byte [ebp - 0x117], 0
lea eax, [ebp - 0x117]
push eax
push 0
call fcn.10035d95
pop ecx
pop ecx
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x140c]
call fcn.10013d8d
mov eax, dword [ebp - 0x14]
mov ecx, dword [ebp - 0x24]
mov eax, dword [ebp + eax*4 - 0x11d0]
mov dword [ebp + ecx*4 - 0x11d0], eax
mov byte [ebp - 0x135], 0
movzx eax, byte [ebp - 0x135]
test eax, eax
je 0x10028648
mov dword [ebp - 0x7b0], 0xfffffffd
mov dword [ebp - 0x1174], 1
mov dword [ebp - 0x1b8], 0xe0c8
mov dword [ebp - 0x1f0], 0xba80278e
push 3
lea ecx, [ebp - 0x1340]
call fcn.10013d2b
mov byte [ebp - 4], 0x1b
mov dword [ebp - 0x64], 0
jmp 0x100282cd
mov eax, dword [ebp - 0x64]
inc eax
mov dword [ebp - 0x64], eax
cmp dword [ebp - 0x64], 3
jge 0x100282e3
mov eax, dword [ebp - 0x64]
mov dword [ebp + eax*4 - 0xcfc], 0xffff
jmp 0x100282c6
mov dword [ebp - 0x64], 0
jmp 0x100282f3
mov eax, dword [ebp - 0x64]
inc eax
mov dword [ebp - 0x64], eax
cmp dword [ebp - 0x64], 3
jge 0x10028309
mov eax, dword [ebp - 0x64]
mov dword [ebp + eax*4 - 0x4cc], 0x632667a8
jmp 0x100282ec
push 0x65a6
lea eax, [ebp - 0x1340]
push eax
push 0x23e
lea eax, [ebp - 0x64]
push eax
push 1
push 0
call fcn.10021e74
add esp, 0x18
push 4
pop eax
shl eax, 0
mov dword [ebp + eax - 0x4cc], 0
jmp 0x10028358
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x4cc]
inc eax
push 4
pop ecx
shl ecx, 0
mov dword [ebp + ecx - 0x4cc], eax
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x4cc], 2
jg 0x10028607
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0x4cc], 0
jne 0x1002838d
cmp dword [ebp - 0x1174], 0
jne 0x1002838d
and dword [ebp - 0xc80], 0
jmp 0x10028397
mov dword [ebp - 0xc80], 1
cmp dword [ebp - 0xc80], 0xffff
jbe 0x100283b5
mov eax, 0x21e1
test eax, eax
jne 0x100283b5
and dword [ebp - 0x7a0], 0
jmp 0x100283bf
mov dword [ebp - 0x7a0], 1
cmp dword [ebp - 0x7a0], 0xb96c
jne 0x100283d7
mov dword [ebp - 0xa60], 1
jmp 0x100283de
and dword [ebp - 0xa60], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x4cc]
mov eax, dword [ebp + eax*4 - 0xcfc]
cmp eax, dword [ebp - 0xa60]
jg 0x10028406
mov dword [ebp - 0x7a8], 1
jmp 0x1002840d
and dword [ebp - 0x7a8], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0xcfc]
cmp dword [ebp - 0x7a8], eax
jle 0x1002842e
mov dword [ebp - 0xbc0], 1
jmp 0x10028435
and dword [ebp - 0xbc0], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x4cc]
mov eax, dword [ebp + eax*4 - 0xcfc]
cmp eax, dword [ebp - 0xbc0]
je 0x1002845d
mov dword [ebp - 0xa68], 1
jmp 0x10028464
and dword [ebp - 0xa68], 0
mov dword [ebp - 0x7b0], 1
mov eax, dword [ebp - 0x7b0]
add eax, dword [ebp - 0xa68]
push 4
pop ecx
shl ecx, 0
mov ecx, dword [ebp + ecx - 0x4cc]
mov ecx, dword [ebp + ecx*4 - 0xcfc]
add ecx, eax
sub ecx, dword [ebp - 0x1b8]
je 0x100284cb
mov byte [ebp - 0x189], 0
push 0x6c0b
lea eax, [ebp - 0x189]
push eax
push 0x2744
push 0
push 0x52ef
push 0x2b22
push 0
call fcn.10031621
add esp, 0x1c
jmp 0x100285df
mov dword [ebp - 0x7b8], 0x33c017f2
mov dword [ebp - 0xe84], 0xd933
cmp dword [ebp - 0x7b8], 0
jne 0x100284ff
mov eax, dword [ebp - 0xe84]
cmp dword [ebp - 0x1f0], eax
jne 0x100284ff
and dword [ebp - 0x102c], 0
jmp 0x10028509
mov dword [ebp - 0x102c], 1
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x4cc]
mov ecx, dword [ebp - 0x7b8]
cmp dword [ebp + eax*4 - 0xcfc], ecx
je 0x10028531
mov dword [ebp - 0xcc8], 1
jmp 0x10028538
and dword [ebp - 0xcc8], 0
mov eax, dword [ebp - 0x1f0]
cmp dword [ebp - 0xcc8], eax
je 0x10028552
mov dword [ebp - 0xe8c], 1
jmp 0x10028559
and dword [ebp - 0xe8c], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x4cc]
mov eax, dword [ebp + eax*4 - 0xcfc]
push 4
pop ecx
shl ecx, 0
sub eax, dword [ebp + ecx - 0x4cc]
je 0x10028586
push 0
call fcn.10031610
pop ecx
jmp 0x100285df
mov dword [ebp - 0x1f0], 0xfffffffe
jmp 0x1002859f
mov eax, dword [ebp - 0x1f0]
inc eax
mov dword [ebp - 0x1f0], eax
cmp dword [ebp - 0x1f0], 8
je 0x100285df
mov dword [ebp - 0x1b8], 0
jmp 0x100285c1
mov eax, dword [ebp - 0x1b8]
inc eax
mov dword [ebp - 0x1b8], eax
cmp dword [ebp - 0x1b8], 3
jge 0x100285dd
mov eax, dword [ebp - 0x1b8]
mov dword [ebp + eax*4 - 0xcfc], 0xfc1f
jmp 0x100285b4
jmp 0x10028592
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x4cc]
mov esi, dword [ebp + eax*4 - 0xcfc]
push 1
lea ecx, [ebp - 0x1340]
call fcn.10013deb
mov dword [eax], esi
jmp 0x1002833d
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x1340]
call fcn.10013d8d
push 0x202d
push 0x47f3
push 0x4da5
push 0x4106
push 0x4bff
push 0x52aa
push 0
push 0x6bc8
push 0x4c11
call fcn.1003123a
add esp, 0x24
jmp 0x10027967
jmp 0x10029c95
mov dword [ebp - 0x154c], 0
mov byte [ebp - 0x190], 0
movzx eax, byte [ebp - 0x190]
test eax, eax
je 0x10028689
push 0x3354
push 0
push 0x373b
push 0x65cb
push 0
call fcn.10038756
add esp, 0x14
mov byte [ebp - 0x11d], 0
movzx eax, byte [ebp - 0x11d]
test eax, eax
je 0x100286b1
push 0
push 0
push 0x7adc
push 0x22ef
call fcn.100220d8
add esp, 0x10
mov dword [ebp - 0x238], 0xe8ee72c9
mov dword [ebp - 0x14], 0
jmp 0x100286cb
mov eax, dword [ebp - 0x14]
inc eax
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 1
jg 0x1002975a
mov dword [ebp - 0x3f8], 0x4daed0f1
mov dword [ebp - 0x104], 3
mov dword [ebp - 0x25c], 0x6d39c7c6
mov dword [ebp - 0x7c8], 0x42b9
mov dword [ebp - 0x50c], 0xfffffffe
mov dword [ebp - 0x6c], 5
mov dword [ebp - 0x348], 0
jmp 0x10028727
mov eax, dword [ebp - 0x348]
inc eax
mov dword [ebp - 0x348], eax
cmp dword [ebp - 0x348], 3
jge 0x10028743
mov eax, dword [ebp - 0x348]
mov dword [ebp + eax*4 - 0x11a0], 1
jmp 0x1002871a
mov eax, dword [ebp - 0x104]
cmp dword [ebp - 0x104], eax
jle 0x1002875d
mov dword [ebp - 0x10f4], 1
jmp 0x10028764
and dword [ebp - 0x10f4], 0
mov eax, dword [ebp - 0x104]
mov dword [ebp - 0x1668], eax
cmp dword [ebp - 0x25c], 0x38d9
jl 0x10028791
mov eax, 0xfdbd
test eax, eax
je 0x10028791
mov dword [ebp - 0x7c0], 1
jmp 0x10028798
and dword [ebp - 0x7c0], 0
mov eax, dword [ebp - 0x104]
cmp dword [ebp - 0x7c0], eax
jge 0x100287b2
mov dword [ebp - 0xa70], 1
jmp 0x100287b9
and dword [ebp - 0xa70], 0
mov eax, dword [ebp - 0xa70]
mov dword [ebp - 0x7c8], eax
mov eax, dword [ebp - 0x104]
cmp dword [ebp - 0x7c8], eax
jne 0x100287e8
cmp dword [ebp - 0x25c], 0
je 0x100287e8
mov dword [ebp - 0xbc8], 1
jmp 0x100287ef
and dword [ebp - 0xbc8], 0
mov eax, dword [ebp - 0x104]
cmp dword [ebp - 0xbc8], eax
jne 0x10028809
mov dword [ebp - 0x7d0], 1
jmp 0x10028810
and dword [ebp - 0x7d0], 0
mov eax, dword [ebp - 0x7d0]
mov dword [ebp - 0x50c], eax
cmp dword [ebp - 0x50c], 1
ja 0x10028831
mov dword [ebp - 0xa78], 1
jmp 0x10028838
and dword [ebp - 0xa78], 0
cmp dword [ebp - 0xa78], 1
jbe 0x1002884d
mov dword [ebp - 0xe94], 1
jmp 0x10028854
and dword [ebp - 0xe94], 0
mov eax, dword [ebp - 0x25c]
mov dword [ebp - 0x1554], eax
mov eax, dword [ebp - 0x104]
cmp dword [ebp - 0x50c], eax
jg 0x1002887a
mov dword [ebp - 0x7d8], 1
jmp 0x10028881
and dword [ebp - 0x7d8], 0
mov eax, dword [ebp - 0x25c]
cmp dword [ebp - 0x7d8], eax
jne 0x1002889b
mov dword [ebp - 0xc88], 1
jmp 0x100288a2
and dword [ebp - 0xc88], 0
mov eax, dword [ebp - 0xc88]
mov dword [ebp - 0x6c], eax
mov dword [ebp - 0x6c], 0
jmp 0x100288bb
mov eax, dword [ebp - 0x6c]
inc eax
mov dword [ebp - 0x6c], eax
cmp dword [ebp - 0x6c], 2
jg 0x10028994
mov dword [ebp - 0x1224], 0
mov eax, dword [ebp - 0x6c]
cmp dword [ebp + eax*4 - 0x11a0], 0
ja 0x100288e8
mov dword [ebp - 0x1034], 1
jmp 0x100288ef
and dword [ebp - 0x1034], 0
mov eax, dword [ebp - 0x6c]
cmp dword [ebp + eax*4 - 0x11a0], 0
je 0x10028915
mov eax, dword [ebp - 0x6c]
cmp dword [ebp + eax*4 - 0x11a0], 0
je 0x10028915
mov dword [ebp - 0x7e0], 1
jmp 0x1002891c
and dword [ebp - 0x7e0], 0
mov eax, dword [ebp - 0x6c]
cmp dword [ebp - 0x7e0], eax
jl 0x10028933
mov dword [ebp - 0xa80], 1
jmp 0x1002893a
and dword [ebp - 0xa80], 0
mov eax, dword [ebp - 0xa80]
sub eax, dword [ebp - 0x25c]
cmp eax, 0x5e0b
jne 0x10028959
mov dword [ebp - 0xe9c], 1
jmp 0x10028960
and dword [ebp - 0xe9c], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x11a0]
mov dword [ebp - 0x7e8], eax
mov eax, dword [ebp - 0x6c]
mov ecx, dword [ebp - 0x7e8]
mov dword [ebp + eax*4 - 0x11a0], ecx
mov eax, dword [ebp - 0x7e8]
mov dword [ebp - 0x1224], eax
jmp 0x100288b4
mov dword [ebp - 0x3f8], 0
jmp 0x100289ad
mov eax, dword [ebp - 0x3f8]
inc eax
mov dword [ebp - 0x3f8], eax
cmp dword [ebp - 0x3f8], 2
jg 0x10029755
mov dword [ebp - 0xc8], 0xa9ac70c3
push 2
lea ecx, [ebp - 0xd7c]
call fcn.10013d2b
mov byte [ebp - 4], 0x1c
mov dword [ebp - 0x514], 0
mov dword [ebp - 0xea4], 0x5f7626a9
mov dword [ebp - 0x350], 0
jmp 0x10028a02
mov eax, dword [ebp - 0x350]
inc eax
mov dword [ebp - 0x350], eax
cmp dword [ebp - 0x350], 2
jge 0x10028a24
push dword [ebp - 0x350]
lea ecx, [ebp - 0xd7c]
call fcn.10013deb
mov dword [eax], 0x3938dd44
jmp 0x100289f5
mov eax, dword [ebp - 0xc8]
sub eax, dword [ebp - 0xc8]
jne 0x10028b2f
mov eax, dword [ebp - 0xc8]
add eax, dword [ebp - 0xc8]
jne 0x10028a4b
cmp dword [ebp - 0xc8], 0
push 0
lea ecx, [ebp - 0xd7c]
call fcn.10013deb
cmp dword [eax], 1
jne 0x10028a69
mov dword [ebp - 0xbd0], 1
jmp 0x10028a70
and dword [ebp - 0xbd0], 0
push 0
lea ecx, [ebp - 0xd7c]
call fcn.10013deb
mov esi, dword [ebp - 0xbd0]
sub esi, dword [eax]
push 0
lea ecx, [ebp - 0xd7c]
call fcn.10013deb
cmp esi, dword [eax]
jne 0x10028aa2
mov dword [ebp - 0x5fc], 1
jmp 0x10028aa9
and dword [ebp - 0x5fc], 0
push 0
lea ecx, [ebp - 0xd7c]
call fcn.10013deb
mov ecx, dword [ebp - 0x5fc]
mov dword [eax], ecx
mov eax, dword [ebp - 0x5fc]
add eax, 0xffff
cmp eax, dword [ebp - 0xc8]
je 0x10028add
mov dword [ebp - 0x7f0], 1
jmp 0x10028ae4
and dword [ebp - 0x7f0], 0
mov eax, dword [ebp - 0xc8]
cmp eax, dword [ebp - 0x7f0]
jl 0x10028afe
mov dword [ebp - 0xa88], 1
jmp 0x10028b05
and dword [ebp - 0xa88], 0
mov eax, dword [ebp - 0x514]
mov ecx, dword [ebp - 0xa88]
mov edx, dword [ebp - 0x514]
dec edx
mov dword [ebp - 0x514], edx
cmp eax, ecx
jge 0x10028b2f
xor eax, eax
jne 0x10028b2f
and dword [ebp - 0x7f8], 0
jmp 0x10028b39
mov dword [ebp - 0x7f8], 1
mov eax, dword [ebp - 0xc8]
cmp eax, dword [ebp - 0x7f8]
jge 0x10028b65
push 0
lea ecx, [ebp - 0xd7c]
call fcn.10013deb
cmp dword [eax], 0
je 0x10028b65
mov dword [ebp - 0xd40], 1
jmp 0x10028b6c
and dword [ebp - 0xd40], 0
mov eax, dword [ebp - 0xd40]
mov dword [ebp - 0xea4], eax
mov byte [ebp - 0x19a], 0
push 0x491b
push 0
push 0
push 1
lea eax, [ebp - 0x19a]
push eax
call fcn.1001e785
add esp, 0x14
mov byte [ebp - 4], 5
lea ecx, [ebp - 0xd7c]
call fcn.10013d8d
push 2
lea ecx, [ebp - 0x11c0]
call fcn.10013d2b
mov byte [ebp - 4], 0x1d
mov dword [ebp - 0x28c], 0xda11525
mov dword [ebp - 0x46c], 0
jmp 0x10028bdc
mov eax, dword [ebp - 0x46c]
inc eax
mov dword [ebp - 0x46c], eax
cmp dword [ebp - 0x46c], 4
jge 0x10028bf8
mov eax, dword [ebp - 0x46c]
mov dword [ebp + eax*4 - 0x17d4], 1
jmp 0x10028bcf
mov dword [ebp - 0x28c], 0
jmp 0x10028c11
mov eax, dword [ebp - 0x28c]
inc eax
mov dword [ebp - 0x28c], eax
cmp dword [ebp - 0x28c], 4
jge 0x10028c2d
mov eax, dword [ebp - 0x28c]
mov dword [ebp + eax*4 - 0x17d4], 0xffffffff
jmp 0x10028c04
mov byte [ebp - 0x125], 0
movzx eax, byte [ebp - 0x125]
test eax, eax
je 0x10028c50
push 0x76ff
push 0
push 1
call fcn.1001e8d4
add esp, 0xc
mov dword [ebp - 0x400], 0xe1757117
push 2
lea ecx, [ebp - 0x1600]
call fcn.10013d2b
mov byte [ebp - 4], 0x1e
mov dword [ebp - 0x358], 0
jmp 0x10028c84
mov eax, dword [ebp - 0x358]
inc eax
mov dword [ebp - 0x358], eax
cmp dword [ebp - 0x358], 2
jge 0x10028ca6
push dword [ebp - 0x358]
lea ecx, [ebp - 0x1600]
call fcn.10013deb
mov dword [eax], 0xfffffff8
jmp 0x10028c77
mov dword [ebp - 0x400], 0x1c
jmp 0x10028cbf
mov eax, dword [ebp - 0x400]
dec eax
mov dword [ebp - 0x400], eax
cmp dword [ebp - 0x400], 0x16
jne 0x10028e72
push 4
lea ecx, [ebp - 0xe10]
call fcn.10013d2b
mov byte [ebp - 4], 0x1f
mov dword [ebp - 0x264], 0
jmp 0x10028cf6
mov eax, dword [ebp - 0x264]
inc eax
mov dword [ebp - 0x264], eax
cmp dword [ebp - 0x264], 3
jge 0x10028d12
mov eax, dword [ebp - 0x264]
mov dword [ebp + eax*4 - 0x11b0], 0xffffffff
jmp 0x10028ce9
push 0x1181
push 0x6e1b
push 0x241a
push 1
push 0
push 0x615d
push 0x60b1
push 1
push 0x14e8
lea eax, [ebp - 0x264]
push eax
lea eax, [ebp - 0xe10]
push eax
push 0x16e5
call fcn.10035668
add esp, 0x30
push 4
pop eax
shl eax, 0
mov dword [ebp + eax - 0x11b0], 1
jmp 0x10028d7f
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x11b0]
dec eax
push 4
pop ecx
shl ecx, 0
mov dword [ebp + ecx - 0x11b0], eax
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x11b0], 0
jl 0x10028dc5
mov byte [ebp - 0x12d], 0
movzx eax, byte [ebp - 0x12d]
test eax, eax
je 0x10028dc3
push 0x8af
push 0x7b33
push 0
push 0x72af
push 0x73b8
push 1
push 0
call fcn.10037dfc
add esp, 0x1c
jmp 0x10028d64
push 1
lea ecx, [ebp - 0xe10]
call fcn.10013deb
mov dword [eax], 2
jmp 0x10028dfe
push 1
lea ecx, [ebp - 0xe10]
call fcn.10013deb
mov dword [ebp - 0x800], eax
mov eax, dword [ebp - 0x800]
mov eax, dword [eax]
dec eax
mov ecx, dword [ebp - 0x800]
mov dword [ecx], eax
push 1
lea ecx, [ebp - 0xe10]
call fcn.10013deb
cmp dword [eax], 0
jl 0x10028e5e
mov dword [ebp - 0x360], 0x63a88e00
mov dword [ebp - 0x360], 0
jmp 0x10028e33
mov eax, dword [ebp - 0x360]
inc eax
mov dword [ebp - 0x360], eax
cmp dword [ebp - 0x360], 2
jg 0x10028e59
push 1
lea ecx, [ebp - 0xe10]
call fcn.10013deb
mov eax, dword [eax]
cmp dword [ebp + eax*4 - 0x11b0], 0
je 0x10028e57
jmp 0x10028e59
jmp 0x10028e26
jmp 0x10028dda
mov byte [ebp - 4], 0x1e
lea ecx, [ebp - 0xe10]
call fcn.10013d8d
jmp 0x10028cb2
mov byte [ebp - 4], 0x1d
lea ecx, [ebp - 0x1600]
call fcn.10013d8d
mov dword [ebp - 0x448], 0
jmp 0x10028e9a
mov eax, dword [ebp - 0x448]
inc eax
mov dword [ebp - 0x448], eax
cmp dword [ebp - 0x448], 2
jge 0x10028ebc
push dword [ebp - 0x448]
lea ecx, [ebp - 0x11c0]
call fcn.10013deb
mov dword [eax], 0xfffffff7
jmp 0x10028e8d
mov dword [ebp - 0x2a8], 0
mov dword [ebp - 0x2a8], 0xa
jmp 0x10028edf
mov eax, dword [ebp - 0x2a8]
dec eax
mov dword [ebp - 0x2a8], eax
cmp dword [ebp - 0x2a8], 0xfffffff2
jg 0x10028f1a
mov dword [ebp - 0x103c], 0x665683c8
lea eax, [ebp - 0x2a8]
push eax
push 0
lea eax, [ebp - 0x103c]
push eax
push 1
push 0
push 0x52a4
push 0x58bb
call fcn.10036725
add esp, 0x1c
jmp 0x10028ed2
mov byte [ebp - 0x187], 0
movzx eax, byte [ebp - 0x187]
test eax, eax
je 0x10028f4e
push 0x5496
push 0
push 0x3e6f
push 1
push 1
push 0x72dc
push 0x55bd
call fcn.10036725
add esp, 0x1c
push 1
lea ecx, [ebp - 0x11c0]
call fcn.10013deb
and dword [eax], 0
jmp 0x10028f84
push 1
lea ecx, [ebp - 0x11c0]
call fcn.10013deb
cmp dword [eax], 1
jg 0x10029741
mov dword [ebp - 0xc90], 0xfffffffd
mov dword [ebp - 0xeac], 1
mov dword [ebp - 0x200], 0xe0c8
mov dword [ebp - 0x1c0], 0xba80278e
push 3
lea ecx, [ebp - 0x13c4]
call fcn.10013d2b
mov byte [ebp - 4], 0x20
mov dword [ebp - 0x58], 0
jmp 0x10028fe3
mov eax, dword [ebp - 0x58]
inc eax
mov dword [ebp - 0x58], eax
cmp dword [ebp - 0x58], 3
jge 0x10028ff9
mov eax, dword [ebp - 0x58]
mov dword [ebp + eax*4 - 0xd0c], 0xffff
jmp 0x10028fdc
mov dword [ebp - 0x58], 0
jmp 0x10029009
mov eax, dword [ebp - 0x58]
inc eax
mov dword [ebp - 0x58], eax
cmp dword [ebp - 0x58], 3
jge 0x1002901f
mov eax, dword [ebp - 0x58]
mov dword [ebp + eax*4 - 0x4a8], 0x632667a8
jmp 0x10029002
push 0
lea eax, [ebp - 0x58]
push eax
lea eax, [ebp - 0x13c4]
push eax
call fcn.10036c86
add esp, 0xc
push 4
pop eax
shl eax, 0
mov dword [ebp + eax - 0x4a8], 0
jmp 0x10029062
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x4a8], 2
jg 0x100294a6
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0x4a8], 0
jne 0x10029097
cmp dword [ebp - 0xeac], 0
jne 0x10029097
mov dword [ebp - 0x808], 1
cmp dword [ebp - 0x808], 0xffff
jbe 0x100290bf
mov byte [ebp - 4], 0x1d
lea ecx, [ebp - 0x13c4]
call fcn.10013d8d
push 4
lea ecx, [ebp - 0xd1c]
call fcn.10013d2b
mov byte [ebp - 4], 0x21
mov dword [ebp - 0x9c], 0x22ba3946
mov dword [ebp - 0x5dc], 0xfffffff6
mov dword [ebp - 0x104c], 0x7e815f84
mov dword [ebp - 0x408], 0
jmp 0x100294fd
cmp dword [ebp - 0x408], 4
jge 0x1002951f
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x11c0]
call fcn.10013d8d
jmp 0x100289a0
jmp 0x100286c4
push 3
lea ecx, [ebp - 0x594]
call fcn.10013d2b
mov byte [ebp - 4], 0x22
mov dword [ebp - 0x74], 9
mov dword [ebp - 0x870], 0xfffffffb
mov dword [ebp - 0x230], 0x9523
mov dword [ebp - 0xedc], 0
mov dword [ebp - 0x48c], 0
jmp 0x100297a9
mov eax, dword [ebp - 0x48c]
inc eax
mov dword [ebp - 0x48c], eax
cmp dword [ebp - 0x48c], 3
jge 0x100297cb
push dword [ebp - 0x48c]
lea ecx, [ebp - 0x594]
call fcn.10013deb
mov dword [eax], 0x46db5052
jmp 0x1002979c
cmp dword [ebp - 0x74], 0xab2aee5a
je 0x100297e0
mov dword [ebp - 0xbe8], 1
jmp 0x100297e7
and dword [ebp - 0xbe8], 0
cmp dword [ebp - 0xbe8], 0
jne 0x100297fc
mov dword [ebp - 0x850], 1
jmp 0x10029803
and dword [ebp - 0x850], 0
mov eax, dword [ebp - 0x74]
imul eax, dword [ebp - 0x850]
test eax, eax
jge 0x1002981d
mov dword [ebp - 0xecc], 1
jmp 0x10029824
and dword [ebp - 0xecc], 0
mov eax, dword [ebp - 0x74]
mov dword [ebp - 0x155c], eax
mov eax, dword [ebp - 0x74]
cmp dword [ebp - 0x74], eax
jle 0x10029841
mov dword [ebp - 0xab8], 1
jmp 0x10029848
and dword [ebp - 0xab8], 0
mov eax, dword [ebp - 0xab8]
inc eax
cmp eax, dword [ebp - 0x74]
jg 0x10029860
mov dword [ebp - 0x858], 1
jmp 0x10029867
and dword [ebp - 0x858], 0
push 1
lea ecx, [ebp - 0x594]
call fcn.10013deb
mov dword [ebp - 0x524], eax
mov eax, dword [ebp - 0x524]
mov eax, dword [eax]
mov dword [ebp - 0x1104], eax
mov eax, dword [ebp - 0x74]
mov ecx, dword [ebp - 0x858]
lea eax, [eax + ecx + 0xfffb]
imul eax, eax, 0xffff
mov dword [ebp - 0xed4], eax
mov eax, dword [ebp - 0x524]
mov eax, dword [eax]
inc eax
mov ecx, dword [ebp - 0x524]
mov dword [ecx], eax
mov eax, dword [ebp - 0x1104]
cmp eax, dword [ebp - 0xed4]
jle 0x100298cf
mov dword [ebp - 0xc98], 1
jmp 0x100298d6
and dword [ebp - 0xc98], 0
mov eax, dword [ebp - 0xc98]
mov dword [ebp - 0x870], eax
mov eax, dword [ebp - 0x230]
mov dword [ebp - 0x1678], eax
push 1
lea ecx, [ebp - 0x594]
call fcn.10013deb
mov eax, dword [eax]
mov dword [ebp - 0x74], eax
mov eax, dword [ebp - 0x230]
mov dword [ebp - 0x1564], eax
mov eax, dword [ebp - 0x74]
mov dword [ebp - 0x16fc], eax
push 1
lea ecx, [ebp - 0x594]
call fcn.10013deb
mov ecx, dword [ebp - 0x230]
cmp dword [eax], ecx
jne 0x10029938
mov dword [ebp - 0x1054], 1
jmp 0x1002993f
and dword [ebp - 0x1054], 0
mov eax, dword [ebp - 0x74]
mov dword [ebp - 0x156c], eax
push 1
lea ecx, [ebp - 0x594]
call fcn.10013deb
mov ecx, dword [ebp - 0x230]
cmp dword [eax], ecx
jle 0x1002996b
mov dword [ebp - 0x860], 1
jmp 0x10029972
and dword [ebp - 0x860], 0
cmp dword [ebp - 0x860], 1
jge 0x10029987
mov dword [ebp - 0xac0], 1
jmp 0x1002998e
and dword [ebp - 0xac0], 0
push 1
lea ecx, [ebp - 0x594]
call fcn.10013deb
mov esi, dword [ebp - 0xac0]
imul esi, dword [eax]
push 1
lea ecx, [ebp - 0x594]
call fcn.10013deb
imul esi, dword [eax]
cmp esi, 0xb51fd9ab
jbe 0x100299d1
cmp dword [ebp - 0x230], 0
je 0x100299d1
mov dword [ebp - 0x868], 1
jmp 0x100299d8
and dword [ebp - 0x868], 0
mov esi, dword [ebp - 0x868]
sub esi, 0x63832542
push 1
lea ecx, [ebp - 0x594]
call fcn.10013deb
cmp esi, dword [eax]
jle 0x10029a01
mov dword [ebp - 0xbf0], 1
jmp 0x10029a08
and dword [ebp - 0xbf0], 0
mov eax, dword [ebp - 0xedc]
cmp dword [ebp - 0xbf0], eax
jl 0x10029a22
mov dword [ebp - 0xac8], 1
jmp 0x10029a29
and dword [ebp - 0xac8], 0
mov eax, dword [ebp - 0x870]
add eax, dword [ebp - 0xac8]
cmp eax, 0xc23988f1
ja 0x10029a48
mov dword [ebp - 0x878], 1
jmp 0x10029a4f
and dword [ebp - 0x878], 0
push 1
lea ecx, [ebp - 0x594]
call fcn.10013deb
mov eax, dword [eax]
cmp eax, dword [ebp - 0x878]
jne 0x10029a72
mov dword [ebp - 0xd10], 1
jmp 0x10029a79
and dword [ebp - 0xd10], 0
push 1
lea ecx, [ebp - 0x594]
call fcn.10013deb
mov ecx, dword [ebp - 0xd10]
sub ecx, dword [eax]
imul eax, ecx, 0x197b
test eax, eax
je 0x10029ac4
mov byte [ebp - 0x18d], 0
movzx eax, byte [ebp - 0x18d]
test eax, eax
je 0x10029ac2
push 0
push 0x1184
push 0x27c9
push 1
push 0
call fcn.10030acf
add esp, 0x14
jmp 0x10029b37
mov dword [ebp - 0x378], 0
jmp 0x10029add
mov eax, dword [ebp - 0x378]
inc eax
mov dword [ebp - 0x378], eax
cmp dword [ebp - 0x378], 2
jge 0x10029af9
mov eax, dword [ebp - 0x378]
mov dword [ebp + eax*4 - 0x12a8], 0x987c837e
jmp 0x10029ad0
mov byte [ebp - 0x13d], 0
movzx eax, byte [ebp - 0x13d]
test eax, eax
je 0x10029b1d
push 0
push 0x20fe
push 0x1dc5
call dword [sym.imp.GDI32.dll_CreatePen]
push 4
pop eax
imul eax, eax, 0
push 4
pop ecx
imul ecx, ecx, 0
mov eax, dword [ebp + eax - 0x12a8]
mov dword [ebp + ecx - 0x12a8], eax
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x594]
call fcn.10013d8d
push 2
lea ecx, [ebp - 0x4c0]
call fcn.10013deb
cmp dword [eax], 0xffff
ja 0x10029b67
mov dword [ebp - 0x880], 1
jmp 0x10029b6e
and dword [ebp - 0x880], 0
mov eax, dword [ebp - 0x14]
neg eax
cmp dword [ebp - 0x880], eax
je 0x10029b87
mov dword [ebp - 0x11e4], 1
jmp 0x10029b8e
and dword [ebp - 0x11e4], 0
mov eax, dword [ebp - 0x14]
mov dword [ebp - 0x1688], eax
push 2
lea ecx, [ebp - 0x4c0]
call fcn.10013deb
mov ecx, dword [ebp - 0x24]
imul ecx, dword [eax]
cmp ecx, 0xffffffff
jl 0x10029bbb
mov dword [ebp - 0xad0], 1
jmp 0x10029bc2
and dword [ebp - 0xad0], 0
mov eax, dword [ebp - 0x14]
cmp dword [ebp - 0xad0], eax
jge 0x10029bd9
mov dword [ebp - 0x888], 1
jmp 0x10029be0
and dword [ebp - 0x888], 0
imul eax, dword [ebp - 0x888], 0xeddd
cmp eax, dword [ebp - 0x24]
jle 0x10029bfb
mov dword [ebp - 0xbf8], 1
jmp 0x10029c02
and dword [ebp - 0xbf8], 0
mov eax, dword [ebp - 0xbf8]
mov dword [ebp - 0x238], eax
cmp dword [ebp - 0x238], 0
je 0x10029c1b
cmp dword [ebp - 0x24], 0
push 4
pop eax
shl eax, 0
mov esi, dword [ebp + eax - 0x11d0]
push 3
lea ecx, [ebp - 0x4c0]
call fcn.10013deb
cmp dword [ebp - 0x238], 0
je 0x10029c53
cmp dword [ebp - 0x238], 0
je 0x10029c53
mov dword [ebp - 0xee4], 1
jmp 0x10029c5a
and dword [ebp - 0xee4], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0xd8c]
mov dword [ebp - 0x1574], eax
cmp dword [ebp - 0x238], 0
jne 0x10029c82
mov dword [ebp - 0x890], 1
jmp 0x10029c89
and dword [ebp - 0x890], 0
mov eax, dword [ebp - 0x890]
mov dword [ebp - 0x8b8], eax
mov dword [ebp - 0x10c], 1
mov dword [ebp - 0x410], 0x355fff83
mov dword [ebp - 0x5a4], 0x7af2c9a1
mov dword [ebp - 0x16bc], 0xf15cc7c4
mov dword [ebp - 0x157c], 0xffffffff
mov dword [ebp - 0x1698], 0x31ea062
mov dword [ebp - 0x1584], 0xc6dd3ed2
mov dword [ebp - 0x16c0], 0xfffffffa
push 4
lea ecx, [ebp - 0x1620]
call fcn.10013d2b
mov byte [ebp - 4], 0x23
push 0x4cdf
push 0
lea eax, [ebp - 0x158c]
push eax
push 0x7b80
lea eax, [ebp - 0x1620]
push eax
call fcn.10031024
add esp, 0x14
lea eax, [ebp - 0x10c]
push eax
push 0
call fcn.1003742a
pop ecx
pop ecx
cmp dword [ebp - 0x10c], 0
je 0x10029d46
mov eax, 0x414b58e1
test eax, eax
je 0x10029d46
mov dword [ebp - 0xad8], 1
jmp 0x10029d4d
and dword [ebp - 0xad8], 0
mov eax, dword [ebp - 0x10c]
imul eax, dword [ebp - 0x10c]
cmp eax, 0x383c
jge 0x10029d6f
or eax, 0xffffffff
jne 0x10029d6f
and dword [ebp - 0x105c], 0
jmp 0x10029d79
mov dword [ebp - 0x105c], 1
mov eax, dword [ebp - 0x10c]
mov dword [ebp - 0x16a8], eax
cmp dword [ebp - 0xad8], 1
jne 0x10029d9a
mov dword [ebp - 0x898], 1
jmp 0x10029da1
and dword [ebp - 0x898], 0
mov eax, dword [ebp - 0x410]
cmp dword [ebp - 0x898], eax
je 0x10029dbb
mov dword [ebp - 0xca0], 1
jmp 0x10029dc2
and dword [ebp - 0xca0], 0
mov eax, dword [ebp - 0x5a4]
imul eax, dword [ebp - 0xca0]
cmp eax, dword [ebp - 0x410]
jg 0x10029de3
mov dword [ebp - 0x8a0], 1
jmp 0x10029dea
and dword [ebp - 0x8a0], 0
mov eax, dword [ebp - 0x8a0]
mov dword [ebp - 0x10c], eax
mov eax, dword [ebp - 0x10c]
add eax, 0x74ca
cmp eax, dword [ebp - 0x410]
jle 0x10029e15
mov dword [ebp - 0xae0], 1
jmp 0x10029e1c
and dword [ebp - 0xae0], 0
mov eax, dword [ebp - 0x5a4]
cmp dword [ebp - 0xae0], eax
jle 0x10029e36
mov dword [ebp - 0x8a8], 1
jmp 0x10029e3d
and dword [ebp - 0x8a8], 0
mov eax, dword [ebp - 0x410]
cmp dword [ebp - 0x8a8], eax
jg 0x10029e57
mov dword [ebp - 0xc00], 1
jmp 0x10029e5e
and dword [ebp - 0xc00], 0
cmp dword [ebp - 0xc00], 0xffffffff
jl 0x10029e73
mov dword [ebp - 0x8b0], 1
jmp 0x10029e7a
and dword [ebp - 0x8b0], 0
mov eax, dword [ebp - 0x5a4]
cmp dword [ebp - 0x8b0], eax
je 0x10029e94
mov dword [ebp - 0xae8], 1
jmp 0x10029e9b
and dword [ebp - 0xae8], 0
mov eax, dword [ebp - 0xae8]
add eax, 0x58aae07e
je 0x10029ecf
mov byte [ebp - 0x18b], 0
push 0x1811
push 0x277e
lea eax, [ebp - 0x18b]
push eax
push 0
call fcn.10031437
add esp, 0x10
jmp 0x10029f78
mov dword [ebp - 0x1594], 0xfffffffe
push 2
lea ecx, [ebp - 0x1358]
call fcn.10013d2b
mov byte [ebp - 4], 0x24
mov dword [ebp - 0x240], 0
jmp 0x10029f03
mov eax, dword [ebp - 0x240]
inc eax
mov dword [ebp - 0x240], eax
cmp dword [ebp - 0x240], 1
jge 0x10029f1f
mov eax, dword [ebp - 0x240]
mov dword [ebp + eax*4 - 0x16c8], 0xffffffff
jmp 0x10029ef6
push 0x4a6e
lea eax, [ebp - 0x1358]
push eax
push 0
push 0x3bb4
push 0x2d4
push 0x1dbb
push 0
push 0x6990
push 0x5ef9
lea eax, [ebp - 0x240]
push eax
push 1
call fcn.1001fbf8
add esp, 0x2c
push 0
lea eax, [ebp - 0x1358]
push eax
call fcn.10030ce1
pop ecx
pop ecx
mov byte [ebp - 4], 0x23
lea ecx, [ebp - 0x1358]
call fcn.10013d8d
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x1620]
call fcn.10013d8d
mov dword [ebp - 0x8b8], 0xfffffffa
jmp 0x100274f5
jmp 0x10026f92
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x4c0]
call fcn.10013d8d
push 4
lea ecx, [ebp - 0x63c]
call fcn.10013d2b
mov dword [ebp - 4], 0x25
mov dword [ebp - 0x8c8], 0
mov dword [ebp - 0x248], 0
jmp 0x10029fe1
mov eax, dword [ebp - 0x248]
inc eax
mov dword [ebp - 0x248], eax
cmp dword [ebp - 0x248], 1
jge 0x10029ffd
mov eax, dword [ebp - 0x248]
mov dword [ebp + eax*4 - 0x114], 0x40d7
jmp 0x10029fd4
lea eax, [ebp - 0x248]
push eax
push 0
lea eax, [ebp - 0x63c]
push eax
push 0
call fcn.1001dbf5
add esp, 0x10
push 2
lea ecx, [ebp - 0x63c]
call fcn.10013deb
and dword [eax], 0
jmp 0x1002a04d
push 2
lea ecx, [ebp - 0x63c]
call fcn.10013deb
mov dword [ebp - 0xcd8], eax
mov eax, dword [ebp - 0xcd8]
mov eax, dword [eax]
inc eax
mov ecx, dword [ebp - 0xcd8]
mov dword [ecx], eax
push 2
lea ecx, [ebp - 0x63c]
call fcn.10013deb
cmp dword [eax], 0
jg 0x1002a28d
mov dword [ebp - 0x1c8], 0xfffffffe
mov dword [ebp - 0x110c], 0x1ec2
mov dword [ebp - 0xeec], 1
mov dword [ebp - 0xc08], 0x78cca699
mov dword [ebp - 0x380], 0
jmp 0x1002a0a4
mov eax, dword [ebp - 0x380]
inc eax
mov dword [ebp - 0x380], eax
cmp dword [ebp - 0x380], 2
jge 0x1002a0c0
mov eax, dword [ebp - 0x380]
mov dword [ebp + eax*4 - 0x1638], 0x5c8a52b4
jmp 0x1002a097
mov byte [ebp - 0x14d], 0
movzx eax, byte [ebp - 0x14d]
test eax, eax
je 0x1002a0e8
push 0x6b63
push 1
push 0x8ff
push 0
call fcn.1001dbf5
add esp, 0x10
mov byte [ebp - 0x18f], 0
movzx eax, byte [ebp - 0x18f]
test eax, eax
je 0x1002a112
push 0
push 0
push 0x4b4e
push 1
push 0x7dc
call fcn.1001e9ae
add esp, 0x14
mov dword [ebp - 0x1c8], 0
jmp 0x1002a12b
mov eax, dword [ebp - 0x1c8]
dec eax
mov dword [ebp - 0x1c8], eax
cmp dword [ebp - 0x1c8], 0
jl 0x1002a288
mov dword [ebp - 0x1064], 0xffffffff
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0xeec]
cmp dword [ebp + eax - 0x114], ecx
jne 0x1002a163
mov dword [ebp - 0x8c0], 1
jmp 0x1002a16a
and dword [ebp - 0x8c0], 0
push 2
lea ecx, [ebp - 0x63c]
call fcn.10013deb
mov ecx, dword [ebp - 0x8c0]
cmp ecx, dword [eax]
jge 0x1002a18d
mov dword [ebp - 0xaf0], 1
jmp 0x1002a194
and dword [ebp - 0xaf0], 0
mov eax, dword [ebp - 0x110c]
cmp eax, dword [ebp - 0xaf0]
jl 0x1002a1ae
mov dword [ebp - 0xef4], 1
jmp 0x1002a1b5
and dword [ebp - 0xef4], 0
push 2
lea ecx, [ebp - 0x63c]
call fcn.10013deb
push 2
lea ecx, [ebp - 0x63c]
call fcn.10013deb
mov eax, dword [eax]
mov ecx, dword [ebp - 0x1c8]
mov ecx, dword [ebp + ecx*4 - 0x114]
cmp dword [ebp + eax*4 - 0x114], ecx
jne 0x1002a1f5
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x1638], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x114]
mov dword [ebp - 0x8c8], eax
mov eax, dword [ebp - 0x8c8]
neg eax
imul eax, eax, 3
neg eax
sub eax, 0x2488a74d
mov dword [ebp - 0xc08], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x114]
cmp dword [ebp - 0xc08], eax
jne 0x1002a257
push 2
lea ecx, [ebp - 0x63c]
call fcn.10013deb
mov eax, dword [eax]
cmp dword [ebp + eax*4 - 0x114], 0
jne 0x1002a257
and dword [ebp - 0x8d0], 0
jmp 0x1002a261
mov dword [ebp - 0x8d0], 1
mov eax, dword [ebp - 0x1c8]
mov eax, dword [ebp + eax*4 - 0x114]
mov ecx, dword [ebp - 0x8d0]
add ecx, 0x695c
imul eax, ecx
mov dword [ebp - 0x1064], eax
jmp 0x1002a11e
jmp 0x1002a029
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x63c]
call fcn.10013d8d
mov eax, dword [ebp - 0xefc]
mov eax, dword [eax + 0x38]
mov dword [ebp - 0x570], eax
push 1
lea ecx, [ebp - 0x4d8]
call fcn.10013d2b
mov dword [ebp - 4], 0x26
mov dword [ebp - 0x2c], 0x81c2900
mov dword [ebp - 0xca8], 0xffffffff
push 0x4589
push 1
push 1
lea eax, [ebp - 0x4d8]
push eax
push 0x65e3
lea eax, [ebp - 0x159c]
push eax
call fcn.1001cf1a
add esp, 0x18
mov dword [ebp - 0x2c], 0
jmp 0x1002a304
mov eax, dword [ebp - 0x2c]
dec eax
mov dword [ebp - 0x2c], eax
cmp dword [ebp - 0x2c], 0
jl 0x1002a589
mov dword [ebp - 0x5f4], 0x5546
mov dword [ebp - 0x1428], 0
mov dword [ebp - 0x1424], 0
mov dword [ebp - 0x1420], 0
mov dword [ebp - 0x141c], 0
mov dword [ebp - 0x1194], 0x30b91300
push dword [ebp - 0x2c]
lea ecx, [ebp - 0x4d8]
call fcn.10013deb
mov esi, eax
push dword [ebp - 0x2c]
lea ecx, [ebp - 0x4d8]
call fcn.10013deb
mov ecx, dword [esi]
cmp ecx, dword [eax]
jne 0x1002a37a
mov dword [ebp - 0xb08], 1
jmp 0x1002a381
and dword [ebp - 0xb08], 0
push 0
lea ecx, [ebp - 0x4d8]
call fcn.10013deb
push 0
lea ecx, [ebp - 0x4d8]
call fcn.10013deb
cmp dword [eax], 0
je 0x1002a3b2
cmp dword [ebp - 0x2c], 0
je 0x1002a3b2
mov dword [ebp - 0xaf8], 1
jmp 0x1002a3b9
and dword [ebp - 0xaf8], 0
push dword [ebp - 0x2c]
lea ecx, [ebp - 0x4d8]
call fcn.10013deb
mov ecx, dword [ebp - 0xaf8]
cmp ecx, dword [eax]
jl 0x1002a3e0
cmp dword [ebp - 0x2c], 0
jne 0x1002a3e0
and dword [ebp - 0x8d8], 0
jmp 0x1002a3ea
mov dword [ebp - 0x8d8], 1
mov eax, dword [ebp - 0x8d8]
mov dword [ebp - 0xca8], eax
cmp dword [ebp - 0xca8], 0
je 0x1002a414
mov eax, 0xe2bf
test eax, eax
je 0x1002a414
mov dword [ebp - 0x8e0], 1
jmp 0x1002a41b
and dword [ebp - 0x8e0], 0
push dword [ebp - 0x2c]
lea ecx, [ebp - 0x4d8]
call fcn.10013deb
mov ecx, dword [ebp - 0x8e0]
cmp ecx, dword [eax]
jg 0x1002a43f
mov dword [ebp - 0x52c], 1
jmp 0x1002a446
and dword [ebp - 0x52c], 0
push 4
pop eax
imul eax, eax, 3
mov ecx, dword [ebp - 0x52c]
mov dword [ebp + eax - 0x1428], ecx
cmp dword [ebp - 0x52c], 0
je 0x1002a477
mov eax, 0xaa2910a8
test eax, eax
je 0x1002a477
mov dword [ebp - 0xb00], 1
jmp 0x1002a47e
and dword [ebp - 0xb00], 0
mov esi, dword [ebp - 0x5f4]
push dword [ebp - 0x2c]
lea ecx, [ebp - 0x4d8]
call fcn.10013deb
mov edi, dword [ebp - 0xb00]
add edi, dword [eax]
push dword [ebp - 0x2c]
lea ecx, [ebp - 0x4d8]
call fcn.10013deb
imul edi, dword [eax]
sub edi, dword [ebp - 0x5f4]
cmp esi, edi
jne 0x1002a4c7
cmp dword [ebp - 0x2c], 0
je 0x1002a4c7
mov dword [ebp - 0x8e8], 1
jmp 0x1002a4ce
and dword [ebp - 0x8e8], 0
mov eax, dword [ebp - 0x5f4]
cmp dword [ebp - 0x8e8], eax
jg 0x1002a4e8
mov dword [ebp - 0xc10], 1
jmp 0x1002a4ef
and dword [ebp - 0xc10], 0
push dword [ebp - 0x2c]
lea ecx, [ebp - 0x4d8]
call fcn.10013deb
mov ecx, dword [ebp - 0xc10]
add ecx, dword [eax]
jne 0x1002a519
mov eax, 0x452a2c7a
test eax, eax
jne 0x1002a519
and dword [ebp - 0x8f0], 0
jmp 0x1002a523
mov dword [ebp - 0x8f0], 1
mov eax, dword [ebp - 0x8f0]
neg eax
imul eax, eax, 0
cmp dword [ebp - 0xb08], eax
jge 0x1002a542
mov dword [ebp - 0x8f8], 1
jmp 0x1002a549
and dword [ebp - 0x8f8], 0
push dword [ebp - 0x2c]
lea ecx, [ebp - 0x4d8]
call fcn.10013deb
mov ecx, dword [ebp - 0x8f8]
sub ecx, dword [eax]
je 0x1002a571
xor eax, eax
je 0x1002a571
mov dword [ebp - 0xd30], 1
jmp 0x1002a578
and dword [ebp - 0xd30], 0
mov eax, dword [ebp - 0xd30]
mov dword [ebp - 0x1194], eax
jmp 0x1002a2fd
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x4d8]
call fcn.10013d8d
mov dword [ebp - 0x106c], 0xfffffff8
mov dword [ebp - 0xf04], 0xfffffff9
mov dword [ebp - 0xf0c], 0x8eb16e2c
mov dword [ebp - 0x1114], 0x7032f1ef
mov byte [ebp - 0x155], 0
movzx eax, byte [ebp - 0x155]
test eax, eax
je 0x1002a5dd
push 1
push 0
call fcn.1001e938
pop ecx
pop ecx
lea eax, [ebp - 0xf04]
push eax
lea eax, [ebp - 0x106c]
push eax
push 0
push 0
push 0x3414
lea eax, [ebp - 0xf0c]
push eax
push 0x4fdc
push 0x63e1
push 0x30ad
lea eax, [ebp - 0x1114]
push eax
push 0x7943
push 1
call fcn.100351a0
add esp, 0x30
push 4
lea ecx, [ebp - 0x1630]
call fcn.10013d2b
mov dword [ebp - 4], 0x27
mov dword [ebp - 0x388], 0xfffffffd
mov dword [ebp - 0x450], 0
jmp 0x1002a657
mov eax, dword [ebp - 0x450]
inc eax
mov dword [ebp - 0x450], eax
cmp dword [ebp - 0x450], 4
jge 0x1002a676
push dword [ebp - 0x450]
lea ecx, [ebp - 0x1630]
call fcn.10013deb
or dword [eax], 0xffffffff
jmp 0x1002a64a
mov dword [ebp - 0x388], 0
jmp 0x1002a68f
mov eax, dword [ebp - 0x388]
inc eax
mov dword [ebp - 0x388], eax
cmp dword [ebp - 0x388], 3
jg 0x1002a7b5
mov dword [ebp - 0x418], 0
jmp 0x1002a6b5
mov eax, dword [ebp - 0x418]
inc eax
mov dword [ebp - 0x418], eax
cmp dword [ebp - 0x418], 4
jge 0x1002a6d1
mov eax, dword [ebp - 0x418]
mov dword [ebp + eax*4 - 0x12b8], 1
jmp 0x1002a6a8
mov byte [ebp - 0x191], 0
movzx eax, byte [ebp - 0x191]
test eax, eax
je 0x1002a705
push 0x454a
push 0x3d2d
push 0xaf8
push 0
push 0x74
push 0x7810
push 0
call fcn.10022620
add esp, 0x1c
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0x12b8], 0
jmp 0x1002a733
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x12b8]
inc eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x12b8], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x12b8], 3
jg 0x1002a7b0
mov dword [ebp - 0x390], 0xfffffffd
mov dword [ebp - 0x390], 0
jmp 0x1002a766
mov eax, dword [ebp - 0x390]
inc eax
mov dword [ebp - 0x390], eax
cmp dword [ebp - 0x390], 3
jg 0x1002a796
mov dword [ebp - 0xf14], 0xffffffff
push 0x40ae
lea eax, [ebp - 0xf14]
push eax
push 0x1e2d
push 0
call fcn.10035165
add esp, 0x10
jmp 0x1002a759
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x12b8], 0
je 0x1002a7ab
jmp 0x1002a718
jmp 0x1002a718
jmp 0x1002a682
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x1630]
call fcn.10013d8d
mov dword [ebp - 0x16b8], 0
mov byte [ebp - 0x15d], 0
movzx eax, byte [ebp - 0x15d]
test eax, eax
je 0x1002a800
push 0
push 0x610d
push 0x11d5
push 1
push 0x2758
push 0x15a8
call fcn.1001dee3
add esp, 0x18
mov byte [ebp - 0x193], 0
lea eax, [ebp - 0x193]
push eax
push 0x6970
push 0
push 1
call fcn.1001df93
add esp, 0x10
push 4
lea ecx, [ebp - 0x624]
call fcn.10013d2b
mov dword [ebp - 4], 0x28
mov dword [ebp - 0x1074], 0x16c3
cmp dword [ebp - 0x1074], 0xa50
jge 0x1002a8fa
lea eax, [ebp - 0x534]
push eax
push 0x1000b248
call fcn.1005821b
pop ecx
pop ecx
mov eax, dword [ebp - 0x534]
mov dword [ebp - 0xf1c], eax
mov eax, dword [ebp - 0x534]
dec eax
mov dword [ebp - 0x534], eax
cmp dword [ebp - 0xf1c], 0
je 0x1002a8fa
lea eax, [ebp - 0x900]
push eax
push 0x1000b248
call fcn.1005821b
pop ecx
pop ecx
cmp dword [ebp - 0x900], 1
jg 0x1002a8ab
push 0x1000b270
call fcn.10058886
pop ecx
jmp 0x1002a8f5
push 0x1000b6a8
call fcn.100585c5
pop ecx
mov dword [ebp - 0x5ac], 1
jmp 0x1002a8cf
mov eax, dword [ebp - 0x5ac]
inc eax
mov dword [ebp - 0x5ac], eax
mov eax, dword [ebp - 0x5ac]
cmp eax, dword [ebp - 0x900]
jge 0x1002a8ea
push 0x1000b6ac
call fcn.100585c5
pop ecx
jmp 0x1002a8c2
push 0x1000b1b5
call fcn.10058886
pop ecx
jmp 0x1002a860
mov dword [ebp - 0x70], 0xc75b57fd
push 2
lea ecx, [ebp - 0x1370]
call fcn.10013d2b
mov byte [ebp - 4], 0x29
push 1
lea ecx, [ebp - 0x13f4]
call fcn.10013d2b
mov byte [ebp - 4], 0x2a
mov dword [ebp - 0x15a4], 0xf8c51723
lea eax, [ebp - 0x1214]
push eax
push 1
push 0
lea eax, [ebp - 0x1370]
push eax
push 0x64a
push 0x743e
call fcn.1001d39c
add esp, 0x18
push 0x6ed6
lea eax, [ebp - 0x13f4]
push eax
lea eax, [ebp - 0x1214]
push eax
push 0
call fcn.100309f4
add esp, 0x10
mov dword [ebp - 0x70], 0
jmp 0x1002a97e
mov eax, dword [ebp - 0x70]
dec eax
mov dword [ebp - 0x70], eax
cmp dword [ebp - 0x70], 0xffffffe6
jne 0x1002ac2f
mov dword [ebp - 0x11c], 0x403ca955
mov dword [ebp - 0x12f4], 0xc80f219a
mov dword [ebp - 0x12f0], 0xc80f219a
mov dword [ebp - 0x12ec], 0xc80f219a
mov dword [ebp - 0x12e8], 0xc80f219a
lea ecx, [ebp - 0x5e5]
call fcn.10013dfa
push eax
lea eax, [ebp - 0x12e4]
push eax
lea eax, [ebp - 0x12f4]
push eax
lea ecx, [ebp - 0x17ac]
call fcn.10013dfd
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0x1644]
call fcn.10013d67
mov byte [ebp - 4], 0x2b
mov dword [ebp - 0xb28], 0xffffffff
mov eax, dword [ebp - 0x70]
mov dword [ebp - 0x16d0], eax
mov eax, 0x106ec6e5
test eax, eax
je 0x1002ab3d
cmp dword [ebp - 0x11c], 0x3a74adf2
jne 0x1002aa2b
mov dword [ebp - 0x53c], 1
jmp 0x1002aa32
and dword [ebp - 0x53c], 0
push 0
lea ecx, [ebp - 0x1644]
call fcn.10013deb
mov ecx, dword [ebp - 0x53c]
mov dword [eax], ecx
mov eax, dword [ebp - 0x11c]
add eax, dword [ebp - 0x53c]
cmp eax, 0xfffd
jb 0x1002aa66
mov dword [ebp - 0xb10], 1
jmp 0x1002aa6d
and dword [ebp - 0xb10], 0
cmp dword [ebp - 0xb10], 0xfffffffa
je 0x1002aa82
mov dword [ebp - 0x908], 1
jmp 0x1002aa89
and dword [ebp - 0x908], 0
mov eax, dword [ebp - 0x70]
cmp dword [ebp - 0x908], eax
jge 0x1002aaa0
mov dword [ebp - 0xc1c], 1
jmp 0x1002aaa7
and dword [ebp - 0xc1c], 0
mov eax, dword [ebp - 0x70]
cmp dword [ebp - 0xc1c], eax
jge 0x1002aabe
mov dword [ebp - 0x910], 1
jmp 0x1002aac5
and dword [ebp - 0x910], 0
mov eax, dword [ebp - 0x11c]
cmp dword [ebp - 0x910], eax
jle 0x1002aadf
mov dword [ebp - 0xb18], 1
jmp 0x1002aae6
and dword [ebp - 0xb18], 0
cmp dword [ebp - 0xb18], 4
jae 0x1002aafb
mov dword [ebp - 0x918], 1
jmp 0x1002ab02
and dword [ebp - 0x918], 0
mov eax, dword [ebp - 0x70]
cmp dword [ebp - 0x918], eax
jne 0x1002ab19
mov dword [ebp - 0xcb0], 1
jmp 0x1002ab20
and dword [ebp - 0xcb0], 0
mov eax, dword [ebp - 0x11c]
imul eax, dword [ebp - 0xcb0]
test eax, eax
je 0x1002ab3d
mov dword [ebp - 0x920], 1
jmp 0x1002ab44
and dword [ebp - 0x920], 0
mov eax, dword [ebp - 0x11c]
imul eax, dword [ebp - 0x920]
cmp eax, dword [ebp - 0x70]
jl 0x1002ab62
mov dword [ebp - 0xb20], 1
jmp 0x1002ab69
and dword [ebp - 0xb20], 0
mov eax, dword [ebp - 0x70]
cmp dword [ebp - 0xb20], eax
je 0x1002ab80
mov dword [ebp - 0x928], 1
jmp 0x1002ab87
and dword [ebp - 0x928], 0
mov eax, dword [ebp - 0x11c]
cmp dword [ebp - 0x928], eax
jl 0x1002aba1
mov dword [ebp - 0xc28], 1
jmp 0x1002aba8
and dword [ebp - 0xc28], 0
mov eax, dword [ebp - 0x11c]
cmp dword [ebp - 0xc28], eax
jl 0x1002abc2
mov dword [ebp - 0x930], 1
jmp 0x1002abc9
and dword [ebp - 0x930], 0
mov eax, dword [ebp - 0x930]
mov dword [ebp - 0xb28], eax
cmp dword [ebp - 0xb28], 8
jae 0x1002abea
mov dword [ebp - 0x5e4], 1
jmp 0x1002abf1
and dword [ebp - 0x5e4], 0
push 0
lea ecx, [ebp - 0x1370]
call fcn.10013deb
mov ecx, dword [ebp - 0x5e4]
mov dword [eax], ecx
push 0
lea ecx, [ebp - 0x13f4]
call fcn.10013deb
mov ecx, dword [ebp - 0x5e4]
mov dword [eax], ecx
mov byte [ebp - 4], 0x2a
lea ecx, [ebp - 0x1644]
call fcn.10013d8d
jmp 0x1002a977
mov byte [ebp - 4], 0x29
lea ecx, [ebp - 0x13f4]
call fcn.10013d8d
mov byte [ebp - 4], 0x28
lea ecx, [ebp - 0x1370]
call fcn.10013d8d
mov dword [ebp - 0x9c4], 0
push 4
lea ecx, [ebp - 0xd2c]
call fcn.10013d2b
mov byte [ebp - 4], 0x2c
mov dword [ebp - 0xac], 0x22ba3946
mov dword [ebp - 0x544], 0xfffffff6
mov dword [ebp - 0x107c], 0x7e815f84
push 0x4378
push 1
lea eax, [ebp - 0xd2c]
push eax
lea eax, [ebp - 0x15ac]
push eax
push 0
push 0x6f5b
push 0x27d8
call fcn.100245ab
add esp, 0x1c
mov dword [ebp - 0xac], 3
jmp 0x1002acc8
mov eax, dword [ebp - 0xac]
dec eax
mov dword [ebp - 0xac], eax
cmp dword [ebp - 0xac], 0
jl 0x1002ae9d
mov dword [ebp - 0x474], 0
jmp 0x1002acee
mov eax, dword [ebp - 0x474]
inc eax
mov dword [ebp - 0x474], eax
cmp dword [ebp - 0x474], 3
jge 0x1002ad0a
mov eax, dword [ebp - 0x474]
mov dword [ebp + eax*4 - 0x1654], 0x1874da8
jmp 0x1002ace1
push 0
lea ecx, [ebp - 0xd2c]
call fcn.10013deb
mov esi, eax
push dword [ebp - 0xac]
lea ecx, [ebp - 0xd2c]
call fcn.10013deb
mov ecx, dword [esi]
cmp ecx, dword [eax]
jg 0x1002ad3c
mov dword [ebp - 0xf24], 1
jmp 0x1002ad43
and dword [ebp - 0xf24], 0
mov eax, dword [ebp - 0xac]
mov dword [ebp - 0x1468], eax
push 0
lea ecx, [ebp - 0xd2c]
call fcn.10013deb
cmp dword [eax], 1
jae 0x1002ad6d
mov dword [ebp - 0x938], 1
jmp 0x1002ad74
and dword [ebp - 0x938], 0
mov eax, dword [ebp - 0x544]
add eax, dword [ebp - 0x938]
cmp eax, 0x15d0
jl 0x1002ad93
mov dword [ebp - 0xc58], 1
jmp 0x1002ad9a
and dword [ebp - 0xc58], 0
mov eax, dword [ebp - 0xc58]
mov dword [ebp - 0x544], eax
mov eax, dword [ebp - 0x544]
mov dword [ebp - 0x940], eax
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x940]
mov dword [ebp + eax - 0x1654], ecx
cmp dword [ebp - 0x940], 0
jne 0x1002addc
xor eax, eax
inc eax
jne 0x1002addc
and dword [ebp - 0xb30], 0
jmp 0x1002ade6
mov dword [ebp - 0xb30], 1
mov esi, dword [ebp - 0xac]
imul esi, dword [ebp - 0xb30]
push dword [ebp - 0xac]
lea ecx, [ebp - 0xd2c]
call fcn.10013deb
cmp esi, dword [eax]
je 0x1002ae14
mov dword [ebp - 0x948], 1
jmp 0x1002ae1b
and dword [ebp - 0x948], 0
push dword [ebp - 0xac]
lea ecx, [ebp - 0xd2c]
call fcn.10013deb
mov esi, eax
push 2
lea ecx, [ebp - 0xd2c]
call fcn.10013deb
mov ecx, dword [esi]
imul ecx, dword [eax]
cmp ecx, dword [ebp - 0x948]
jle 0x1002ae54
mov dword [ebp - 0xc34], 1
jmp 0x1002ae5b
and dword [ebp - 0xc34], 0
cmp dword [ebp - 0xc34], 0xfffffffe
jne 0x1002ae70
mov dword [ebp - 0x950], 1
jmp 0x1002ae77
and dword [ebp - 0x950], 0
mov eax, dword [ebp - 0x950]
mov dword [ebp - 0x107c], eax
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x1654], 0
je 0x1002ae98
jmp 0x1002acbb
jmp 0x1002acbb
mov byte [ebp - 4], 0x28
lea ecx, [ebp - 0xd2c]
call fcn.10013d8d
push 4
lea ecx, [ebp - 0x1290]
call fcn.10013d2b
mov byte [ebp - 4], 0x2d
push 2
lea ecx, [ebp - 0x11e0]
call fcn.10013d2b
mov byte [ebp - 4], 0x2e
push 0x67ca
push 0x2555
lea eax, [ebp - 0x1e8]
push eax
push 0
push 1
lea eax, [ebp - 0x1290]
push eax
call fcn.1001d2a2
add esp, 0x18
mov dword [ebp - 0x1e8], 0
jmp 0x1002af0b
mov eax, dword [ebp - 0x1e8]
inc eax
mov dword [ebp - 0x1e8], eax
cmp dword [ebp - 0x1e8], 2
jge 0x1002af27
mov eax, dword [ebp - 0x1e8]
mov dword [ebp + eax*4 - 0xc30], 0x915a1369
jmp 0x1002aefe
lea eax, [ebp - 0x1e8]
push eax
push 0
lea eax, [ebp - 0x11e0]
push eax
push 0x2ebf
push 1
call fcn.10038756
add esp, 0x14
push 4
pop eax
shl eax, 0
mov dword [ebp + eax - 0xc30], 0
jmp 0x1002af74
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0xc30]
inc eax
push 4
pop ecx
shl ecx, 0
mov dword [ebp + ecx - 0xc30], eax
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0xc30], 3
jg 0x1002b038
mov dword [ebp - 0x398], 0
jmp 0x1002afa1
mov eax, dword [ebp - 0x398]
inc eax
mov dword [ebp - 0x398], eax
cmp dword [ebp - 0x398], 2
jge 0x1002afbd
mov eax, dword [ebp - 0x398]
mov dword [ebp + eax*4 - 0xc24], 0x7a00f47a
jmp 0x1002af94
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0xc24], 0
jmp 0x1002afeb
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xc24]
inc eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0xc24], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0xc24], 3
jg 0x1002b033
push 4
pop eax
imul eax, eax, 0
push dword [ebp + eax - 0xc24]
lea ecx, [ebp - 0x1290]
call fcn.10013deb
mov esi, eax
push 4
pop eax
shl eax, 0
push dword [ebp + eax - 0xc30]
lea ecx, [ebp - 0x1290]
call fcn.10013deb
mov ecx, dword [esi]
mov dword [eax], ecx
jmp 0x1002afd0
jmp 0x1002af59
push 0
lea ecx, [ebp - 0x11e0]
call fcn.10013deb
and dword [eax], 0
jmp 0x1002b06e
push 0
lea ecx, [ebp - 0x11e0]
call fcn.10013deb
mov dword [ebp - 0xb38], eax
mov eax, dword [ebp - 0xb38]
mov eax, dword [eax]
dec eax
mov ecx, dword [ebp - 0xb38]
mov dword [ecx], eax
push 0
lea ecx, [ebp - 0x11e0]
call fcn.10013deb
cmp dword [eax], 0xffffffe2
je 0x1002b0df
mov dword [ebp - 0xf2c], 0x49b76eea
mov dword [ebp - 0xf34], 0xfffffff7
mov dword [ebp - 0x111c], 0x93e75cb5
push 0xe81
lea eax, [ebp - 0xf2c]
push eax
push 1
push 0x159f
push 0
push 0x67e9
call fcn.1001e2c6
add esp, 0x18
lea eax, [ebp - 0x111c]
push eax
lea eax, [ebp - 0xf34]
push eax
push 0
push 0
call fcn.1001dc8b
add esp, 0x10
jmp 0x1002b04a
mov byte [ebp - 4], 0x2d
lea ecx, [ebp - 0x11e0]
call fcn.10013d8d
mov byte [ebp - 4], 0x28
lea ecx, [ebp - 0x1290]
call fcn.10013d8d
mov dword [ebp - 0x88], 0
jmp 0x1002b116
mov eax, dword [ebp - 0x88]
inc eax
mov dword [ebp - 0x88], eax
cmp dword [ebp - 0x88], 1
jge 0x1002b132
mov eax, dword [ebp - 0x88]
mov dword [ebp + eax*4 - 0x15c], 0x40d7
jmp 0x1002b109
mov dword [ebp - 0x88], 0
jmp 0x1002b14b
mov eax, dword [ebp - 0x88]
inc eax
mov dword [ebp - 0x88], eax
cmp dword [ebp - 0x88], 4
jge 0x1002b16a
push dword [ebp - 0x88]
lea ecx, [ebp - 0x624]
call fcn.10013deb
or dword [eax], 0xffffffff
jmp 0x1002b13e
mov dword [ebp - 0x1d0], 0x28ea388
mov dword [ebp - 0x420], 0x45bbbdeb
mov dword [ebp - 0x5b8], 0x4361a6b7
mov dword [ebp - 0x131c], 1
mov dword [ebp - 0x1318], 1
mov dword [ebp - 0x1314], 1
mov dword [ebp - 0x1310], 1
lea ecx, [ebp - 0x4d9]
call fcn.10013dfa
push eax
lea eax, [ebp - 0x130c]
push eax
lea eax, [ebp - 0x131c]
push eax
lea ecx, [ebp - 0x17ec]
call fcn.10013dfd
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0x11f0]
call fcn.10013d67
mov byte [ebp - 4], 0x2f
mov dword [ebp - 0x12a0], 0xfffffffc
mov dword [ebp - 0x129c], 0xfffffffc
mov dword [ebp - 0x1298], 0xfffffffc
mov dword [ebp - 0x1294], 0xfffffffc
mov dword [ebp - 0x998], 0xfffffff7
mov dword [ebp - 0xf3c], 0xe731
mov dword [ebp - 0x980], 0x4d2570d9
mov dword [ebp - 0xc4c], 0
or eax, 0xffffffff
je 0x1002b2d0
mov eax, dword [ebp - 0x1d0]
mov dword [ebp - 0x1470], eax
cmp dword [ebp - 0x1d0], 0
jne 0x1002b25c
or eax, 0xffffffff
je 0x1002b271
mov eax, 0x11d01887
test eax, eax
je 0x1002b271
mov dword [ebp - 0x958], 1
jmp 0x1002b278
and dword [ebp - 0x958], 0
cmp dword [ebp - 0x958], 0x515f
jg 0x1002b290
mov dword [ebp - 0xc50], 1
jmp 0x1002b297
and dword [ebp - 0xc50], 0
mov eax, dword [ebp - 0x1d0]
cmp dword [ebp - 0xc50], eax
jge 0x1002b2b1
mov dword [ebp - 0x960], 1
jmp 0x1002b2b8
and dword [ebp - 0x960], 0
cmp dword [ebp - 0x960], 0xd72b90f9
jne 0x1002b2d0
mov dword [ebp - 0xb40], 1
jmp 0x1002b2d7
and dword [ebp - 0xb40], 0
mov eax, dword [ebp - 0xb40]
mov dword [ebp - 0x420], eax
mov eax, dword [ebp - 0x420]
mov dword [ebp - 0x1478], eax
mov eax, dword [ebp - 0x1d0]
mov dword [ebp - 0x1480], eax
cmp dword [ebp - 0x420], 0
jne 0x1002b312
or eax, 0xffffffff
jne 0x1002b312
and dword [ebp - 0x968], 0
jmp 0x1002b31c
mov dword [ebp - 0x968], 1
mov eax, dword [ebp - 0x1d0]
cmp dword [ebp - 0x968], eax
jne 0x1002b336
mov dword [ebp - 0xc40], 1
jmp 0x1002b33d
and dword [ebp - 0xc40], 0
mov eax, dword [ebp - 0xc40]
mov dword [ebp - 0x5b8], eax
cmp dword [ebp - 0x5b8], 0
jne 0x1002b35e
mov dword [ebp - 0x970], 1
jmp 0x1002b365
and dword [ebp - 0x970], 0
cmp dword [ebp - 0x970], 0x5e17ca00
jl 0x1002b37d
mov dword [ebp - 0xb48], 1
jmp 0x1002b384
and dword [ebp - 0xb48], 0
mov eax, dword [ebp - 0x1d0]
cmp dword [ebp - 0xb48], eax
jg 0x1002b39e
mov dword [ebp - 0x978], 1
jmp 0x1002b3a5
and dword [ebp - 0x978], 0
push 1
lea ecx, [ebp - 0x11f0]
call fcn.10013deb
mov ecx, dword [ebp - 0x978]
mov dword [eax], ecx
push 4
pop eax
shl eax, 1
lea eax, [ebp + eax - 0x12a0]
mov dword [ebp - 0xc54], eax
push 0
lea ecx, [ebp - 0x11f0]
call fcn.10013deb
mov ecx, dword [ebp - 0xc54]
mov eax, dword [eax]
mov dword [ecx], eax
mov eax, dword [ebp - 0xc54]
mov eax, dword [eax]
mov dword [ebp - 0x998], eax
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0x12a0], 0xfffffffe
push 1
lea ecx, [ebp - 0x11f0]
call fcn.10013deb
mov eax, dword [eax]
inc eax
mov dword [ebp - 0x980], eax
jne 0x1002b42c
mov eax, 0xf356d9de
test eax, eax
jne 0x1002b42c
and dword [ebp - 0xb50], 0
jmp 0x1002b436
mov dword [ebp - 0xb50], 1
mov eax, dword [ebp - 0xc4c]
cmp dword [ebp - 0xb50], eax
jl 0x1002b450
mov dword [ebp - 0x988], 1
jmp 0x1002b457
and dword [ebp - 0x988], 0
imul esi, dword [ebp - 0x988], 0x6e3
push 1
lea ecx, [ebp - 0x11f0]
call fcn.10013deb
cmp esi, dword [eax]
jne 0x1002b47e
mov dword [ebp - 0x1084], 1
jmp 0x1002b485
and dword [ebp - 0x1084], 0
mov eax, dword [ebp - 0xf3c]
mov dword [ebp - 0x1488], eax
mov eax, dword [ebp - 0xc4c]
mov ecx, dword [ebp - 0x420]
lea eax, [eax + ecx - 0x6a36]
cmp eax, 0xcdab
je 0x1002b4b7
mov dword [ebp - 0x990], 1
jmp 0x1002b4be
and dword [ebp - 0x990], 0
mov eax, dword [ebp - 0x5b8]
cmp dword [ebp - 0x990], eax
jle 0x1002b4d8
mov dword [ebp - 0xb58], 1
jmp 0x1002b4df
and dword [ebp - 0xb58], 0
mov eax, dword [ebp - 0xb58]
mov dword [ebp - 0x998], eax
mov byte [ebp - 4], 0x28
lea ecx, [ebp - 0x11f0]
call fcn.10013d8d
push 2
lea ecx, [ebp - 0x624]
call fcn.10013deb
and dword [eax], 0
jmp 0x1002b530
push 2
lea ecx, [ebp - 0x624]
call fcn.10013deb
cmp dword [eax], 0
jg 0x1002ee84
mov dword [ebp - 0x4c], 0xfffffff6
mov dword [ebp - 0x3a0], 0
jmp 0x1002b566
mov eax, dword [ebp - 0x3a0]
inc eax
mov dword [ebp - 0x3a0], eax
cmp dword [ebp - 0x3a0], 1
jge 0x1002b582
mov eax, dword [ebp - 0x3a0]
mov dword [ebp + eax*4 - 0x90], 7
jmp 0x1002b559
mov dword [ebp - 0x4c], 0
jmp 0x1002b592
mov eax, dword [ebp - 0x4c]
inc eax
mov dword [ebp - 0x4c], eax
cmp dword [ebp - 0x4c], 0
jg 0x1002b5ae
mov eax, dword [ebp - 0x4c]
mov ecx, dword [ebp - 0x4c]
mov eax, dword [ebp + eax*4 - 0x90]
mov dword [ebp + ecx*4 - 0x90], eax
jmp 0x1002b58b
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x90]
mov dword [ebp - 0x4c], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x90]
add eax, 9
cmp dword [ebp - 0x4c], eax
je 0x1002b5df
mov dword [ebp - 0x9a8], 1
jmp 0x1002b5e6
and dword [ebp - 0x9a8], 0
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x90], 0
je 0x1002b63d
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x90], 0xe1b1b552
jbe 0x1002b615
mov dword [ebp - 0x9a0], 1
jmp 0x1002b61c
and dword [ebp - 0x9a0], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x90]
cmp dword [ebp - 0x9a0], eax
jge 0x1002b63d
mov dword [ebp - 0xb60], 1
jmp 0x1002b644
and dword [ebp - 0xb60], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x90]
cmp dword [ebp - 0xb60], eax
jg 0x1002b665
mov dword [ebp - 0xc6c], 1
jmp 0x1002b66c
and dword [ebp - 0xc6c], 0
mov eax, dword [ebp - 0x9a8]
add eax, dword [ebp - 0xc6c]
je 0x1002b6b1
mov dword [ebp - 0x4c], 0
jmp 0x1002b68a
mov eax, dword [ebp - 0x4c]
inc eax
mov dword [ebp - 0x4c], eax
cmp dword [ebp - 0x4c], 3
jg 0x1002b6af
mov byte [ebp - 0x165], 0
lea eax, [ebp - 0x165]
push eax
push 0
push 0x3bcd
call fcn.10031452
add esp, 0xc
jmp 0x1002b683
jmp 0x1002b70c
mov dword [ebp - 0x11a4], 0xffffffff
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x90]
mov dword [ebp - 0x11a4], eax
mov byte [ebp - 0x195], 0
movzx eax, byte [ebp - 0x195]
test eax, eax
je 0x1002b70c
push 0x4dc4
push 0x3f47
push 0xed1
push 0
push 1
push 0x2588
push 0x1b74
push 0
push 0x3369
call fcn.10031f49
add esp, 0x24
mov dword [ebp - 0x1f4], 0xfffffffe
mov dword [ebp - 0x3a8], 0xd4e06482
mov dword [ebp - 0x1a8], 1
mov dword [ebp - 0x108c], 0xfffffff8
mov dword [ebp - 0x54c], 0x93e623b4
mov dword [ebp - 0x1308], 0xc5530c4e
mov dword [ebp - 0x1304], 0xc5530c4e
mov dword [ebp - 0x1300], 0xc5530c4e
mov dword [ebp - 0x12fc], 0xc5530c4e
lea ecx, [ebp - 0x5a5]
call fcn.10013dfa
push eax
lea eax, [ebp - 0x12f8]
push eax
lea eax, [ebp - 0x1308]
push eax
lea ecx, [ebp - 0x17f4]
call fcn.10013dfd
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0xd70]
call fcn.10013d67
mov byte [ebp - 4], 0x30
mov dword [ebp - 0x604], 0xfffffffe
mov dword [ebp - 0xf4c], 0xfffffffa
mov dword [ebp - 0x3b8], 0
jmp 0x1002b7cc
mov eax, dword [ebp - 0x3b8]
inc eax
mov dword [ebp - 0x3b8], eax
cmp dword [ebp - 0x3b8], 1
jge 0x1002b7e8
mov eax, dword [ebp - 0x3b8]
mov dword [ebp + eax*4 - 0x258], 0xfffffff8
jmp 0x1002b7bf
mov dword [ebp - 0x3a8], 3
jmp 0x1002b801
mov eax, dword [ebp - 0x3a8]
dec eax
mov dword [ebp - 0x3a8], eax
cmp dword [ebp - 0x3a8], 0xffffffe5
jg 0x1002b923
mov dword [ebp - 0x3bc], 0xfffffff7
mov dword [ebp - 0x3bc], 7
jmp 0x1002b831
mov eax, dword [ebp - 0x3bc]
dec eax
mov dword [ebp - 0x3bc], eax
cmp dword [ebp - 0x3bc], 0xffffffe5
jne 0x1002b91e
mov dword [ebp - 0x250], 0x4f2887cf
mov dword [ebp - 0x250], 0xfffffff0
jmp 0x1002b861
mov eax, dword [ebp - 0x250]
dec eax
mov dword [ebp - 0x250], eax
cmp dword [ebp - 0x250], 0xffffffe7
jle 0x1002b8f3
mov dword [ebp - 0x1f8], 0xfe30f587
mov dword [ebp - 0x3b0], 0
jmp 0x1002b891
mov eax, dword [ebp - 0x3b0]
inc eax
mov dword [ebp - 0x3b0], eax
cmp dword [ebp - 0x3b0], 3
jge 0x1002b8ad
mov eax, dword [ebp - 0x3b0]
mov dword [ebp + eax*4 - 0x1780], 0xffffffff
jmp 0x1002b884
mov dword [ebp - 0x1f8], 0
jmp 0x1002b8c6
mov eax, dword [ebp - 0x1f8]
inc eax
mov dword [ebp - 0x1f8], eax
cmp dword [ebp - 0x1f8], 3
jge 0x1002b8e2
mov eax, dword [ebp - 0x1f8]
mov dword [ebp + eax*4 - 0x1780], 0xffffffff
jmp 0x1002b8b9
mov eax, dword [ebp - 0x250]
mov dword [ebp - 0x1f8], eax
jmp 0x1002b854
mov byte [ebp - 0x16d], 0
movzx eax, byte [ebp - 0x16d]
test eax, eax
je 0x1002b919
push 0x73b1
push 0
push 0x57ea
call fcn.10035dbb
add esp, 0xc
jmp 0x1002b824
jmp 0x1002b7f4
mov eax, dword [ebp - 0x1a8]
add eax, 0x555b0966
cmp dword [ebp - 0x604], eax
jg 0x1002b942
mov dword [ebp - 0xf44], 1
jmp 0x1002b949
and dword [ebp - 0xf44], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x258]
mov dword [ebp - 0x1490], eax
push 0
lea ecx, [ebp - 0xd70]
call fcn.10013deb
mov esi, eax
push 2
lea ecx, [ebp - 0xd70]
call fcn.10013deb
mov ecx, dword [esi]
cmp ecx, dword [eax]
jge 0x1002b98a
mov dword [ebp - 0x9b0], 1
jmp 0x1002b991
and dword [ebp - 0x9b0], 0
mov eax, dword [ebp - 0x9b0]
sub eax, dword [ebp - 0x1a8]
cmp eax, dword [ebp - 0x604]
jge 0x1002b9b1
mov dword [ebp - 0xb68], 1
jmp 0x1002b9b8
and dword [ebp - 0xb68], 0
mov eax, dword [ebp - 0xb68]
neg eax
push 4
pop ecx
imul ecx, ecx, 0
add eax, dword [ebp + ecx - 0x258]
jne 0x1002b9e1
mov eax, 0x88307b36
test eax, eax
jne 0x1002b9e1
and dword [ebp - 0x9b8], 0
jmp 0x1002b9eb
mov dword [ebp - 0x9b8], 1
push 3
lea ecx, [ebp - 0xd70]
call fcn.10013deb
mov ecx, dword [ebp - 0x9b8]
cmp ecx, dword [eax]
jl 0x1002ba0e
mov dword [ebp - 0x658], 1
jmp 0x1002ba15
and dword [ebp - 0x658], 0
push 2
lea ecx, [ebp - 0xd70]
call fcn.10013deb
mov eax, dword [eax]
cmp eax, dword [ebp - 0x658]
je 0x1002ba38
mov dword [ebp - 0x65c], 1
jmp 0x1002ba3f
and dword [ebp - 0x65c], 0
mov eax, dword [ebp - 0x1a8]
cmp dword [ebp - 0x65c], eax
jne 0x1002ba59
mov dword [ebp - 0x664], 1
jmp 0x1002ba60
and dword [ebp - 0x664], 0
push 2
lea ecx, [ebp - 0xd70]
call fcn.10013deb
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x664]
mov dword [ebp + eax - 0x258], ecx
mov eax, dword [ebp - 0x54c]
dec eax
mov dword [ebp - 0x54c], eax
mov eax, dword [ebp - 0x54c]
mov dword [ebp - 0x1498], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x258]
mov dword [ebp - 0x14a0], eax
cmp dword [ebp - 0x604], 0xe7a4
jne 0x1002badd
cmp dword [ebp - 0x108c], 0
je 0x1002badd
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x258], 0
je 0x1002badd
mov dword [ebp - 0x66c], 1
jmp 0x1002bae4
and dword [ebp - 0x66c], 0
mov eax, dword [ebp - 0x1a8]
add eax, dword [ebp - 0x66c]
cmp eax, 0xe7ccc895
jne 0x1002bb03
mov dword [ebp - 0x674], 1
jmp 0x1002bb0a
and dword [ebp - 0x674], 0
mov eax, dword [ebp - 0x674]
mov dword [ebp - 0x1a8], eax
mov esi, dword [ebp - 0x1a8]
push 2
lea ecx, [ebp - 0xd70]
call fcn.10013deb
cmp esi, dword [eax]
jge 0x1002bb39
mov dword [ebp - 0x650], 1
jmp 0x1002bb40
and dword [ebp - 0x650], 0
mov eax, dword [ebp - 0x650]
mov dword [ebp - 0xf4c], eax
mov byte [ebp - 4], 0x28
lea ecx, [ebp - 0xd70]
call fcn.10013d8d
mov dword [ebp - 0xec0], 0x1ec2
mov dword [ebp - 0x1124], 0x1aff
cmp dword [ebp - 0x1124], 0xbbe
jge 0x1002bc9b
mov dword [ebp - 0x14a8], 0xa
lea eax, [ebp - 0xf54]
push eax
lea eax, [ebp - 0x554]
push eax
lea eax, [ebp - 0x684]
push eax
push 0x1000b27c
call fcn.1005821b
add esp, 0x10
mov eax, dword [ebp - 0x684]
mov dword [ebp - 0x3c4], eax
mov dword [ebp - 0x1ac], 1
jmp 0x1002bbd0
mov eax, dword [ebp - 0x1ac]
cmp eax, dword [ebp - 0x684]
jg 0x1002bc87
lea eax, [ebp - 0x68c]
push eax
push 0x1000b248
call fcn.1005821b
pop ecx
pop ecx
cmp dword [ebp - 0x68c], 0
jle 0x1002bc0c
mov eax, dword [ebp - 0x68c]
cmp eax, dword [ebp - 0xf54]
jle 0x1002bc0e
jmp 0x1002bbc3
imul eax, dword [ebp - 0x3c4], 0xa
push eax
push 0x1000b274
call fcn.100585c5
pop ecx
pop ecx
mov dword [ebp - 0x2cc], 0x5540d7f8
mov dword [ebp - 0x6e4], 1
mov dword [ebp - 0x14b0], 0xfffffffd
mov dword [ebp - 0x1094], 0x2600
cmp dword [ebp - 0x1094], 0xd6f
jge 0x1002be2d
lea eax, [ebp - 0x6ac]
push eax
push 0x1000b248
call fcn.1005821b
pop ecx
pop ecx
push dword [ebp - 0x6ac]
lea ecx, [ebp - 0xdbc]
call fcn.10013d2b
mov byte [ebp - 4], 0x31
and dword [ebp - 0x2c8], 0
jmp 0x1002bd11
mov eax, dword [ebp - 0x2c8]
cmp eax, dword [ebp - 0x6ac]
jge 0x1002bd3f
push dword [ebp - 0x2c8]
lea ecx, [ebp - 0xdbc]
call fcn.10013deb
push eax
push 0x1000b248
call fcn.1005821b
pop ecx
pop ecx
jmp 0x1002bd04
lea eax, [ebp - 0x14b8]
push eax
lea ecx, [ebp - 0xdbc]
call fcn.10013e41
push dword [eax]
lea eax, [ebp - 0x14c0]
push eax
lea ecx, [ebp - 0xdbc]
call fcn.10013e33
push dword [eax]
call fcn.10018497
pop ecx
pop ecx
lea eax, [ebp - 0xf5c]
push eax
push 0x1000b248
call fcn.1005821b
pop ecx
pop ecx
and dword [ebp - 0x5c4], 0
jmp 0x1002bd97
mov dword [ebp - 0x14c8], 0
mov dword [ebp - 0x64c], 0xfffffffe
mov dword [ebp - 0x112c], 4
mov dword [ebp - 0x10a4], 1
mov dword [ebp - 0x14d0], 0x5cb81eca
mov dword [ebp - 0xf74], 0x2314af1
mov dword [ebp - 0x14d8], 5
mov dword [ebp - 0x14e0], 0
mov dword [ebp - 0x14e8], 0xfffffff6
mov dword [ebp - 0x55c], 0xf1e5c8a5
mov dword [ebp - 0x2cc], 3
jmp 0x1002beaa
cmp dword [ebp - 0x2cc], 0xc
jl 0x1002c0a8
mov dword [ebp - 0x260], 1
mov dword [ebp - 0x1464], 0xa9c21324
mov dword [ebp - 0xf7c], 9
mov dword [ebp - 0x2d4], 0
jmp 0x1002beee
mov byte [ebp - 0x197], 0
movzx eax, byte [ebp - 0x197]
test eax, eax
je 0x1002c0df
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x624]
call fcn.10013d8d
mov dword [ebp - 0x164], 1
mov dword [ebp - 0x3fc], 0x355fff83
mov dword [ebp - 0x520], 0x7af2c9a1
mov dword [ebp - 0x1708], 0xf15cc7c4
mov dword [ebp - 0x1710], 0xffffffff
mov dword [ebp - 0x171c], 0x31ea062
mov dword [ebp - 0x1738], 0xc6dd3ed2
mov dword [ebp - 0x1740], 0xfffffffa
push 4
lea ecx, [ebp - 0x1694]
call fcn.10013d2b
mov dword [ebp - 4], 0x44
lea eax, [ebp - 0x1748]
push eax
push 0x66c4
push 0
push 1
push 0x1b7f
lea eax, [ebp - 0x1694]
push eax
push 0x4b3d
push 0x8a5
call fcn.1001fb29
add esp, 0x20
push 0x2c0d
push 1
push 0
push 0x2997
lea eax, [ebp - 0x164]
push eax
push 0x102c
call fcn.1001e664
add esp, 0x18
cmp dword [ebp - 0x164], 0
je 0x1002ef65
mov eax, 0x414b58e1
test eax, eax
je 0x1002ef65
mov dword [ebp - 0x9dc], 1
jmp 0x1002ef6c
and dword [ebp - 0x9dc], 0
mov eax, dword [ebp - 0x164]
imul eax, dword [ebp - 0x164]
cmp eax, 0x383c
jge 0x1002ef8e
or eax, 0xffffffff
jne 0x1002ef8e
and dword [ebp - 0xed8], 0
jmp 0x1002ef98
mov dword [ebp - 0xed8], 1
mov eax, dword [ebp - 0x164]
mov dword [ebp - 0x1750], eax
cmp dword [ebp - 0x9dc], 1
jne 0x1002efb9
mov dword [ebp - 0x9e4], 1
jmp 0x1002efc0
and dword [ebp - 0x9e4], 0
mov eax, dword [ebp - 0x3fc]
cmp dword [ebp - 0x9e4], eax
je 0x1002efda
mov dword [ebp - 0x9ec], 1
jmp 0x1002efe1
and dword [ebp - 0x9ec], 0
mov eax, dword [ebp - 0x520]
imul eax, dword [ebp - 0x9ec]
cmp eax, dword [ebp - 0x3fc]
jg 0x1002f002
mov dword [ebp - 0x9f4], 1
jmp 0x1002f009
and dword [ebp - 0x9f4], 0
mov eax, dword [ebp - 0x9f4]
mov dword [ebp - 0x164], eax
mov eax, dword [ebp - 0x164]
add eax, 0x74ca
cmp eax, dword [ebp - 0x3fc]
jle 0x1002f034
mov dword [ebp - 0x9fc], 1
jmp 0x1002f03b
and dword [ebp - 0x9fc], 0
mov eax, dword [ebp - 0x520]
cmp dword [ebp - 0x9fc], eax
jle 0x1002f055
mov dword [ebp - 0xa04], 1
jmp 0x1002f05c
and dword [ebp - 0xa04], 0
mov eax, dword [ebp - 0x3fc]
cmp dword [ebp - 0xa04], eax
jg 0x1002f076
mov dword [ebp - 0xa0c], 1
jmp 0x1002f07d
and dword [ebp - 0xa0c], 0
cmp dword [ebp - 0xa0c], 0xffffffff
jl 0x1002f092
mov dword [ebp - 0xa14], 1
jmp 0x1002f099
and dword [ebp - 0xa14], 0
mov eax, dword [ebp - 0x520]
cmp dword [ebp - 0xa14], eax
je 0x1002f0b3
mov dword [ebp - 0xa1c], 1
jmp 0x1002f0ba
and dword [ebp - 0xa1c], 0
mov eax, dword [ebp - 0xa1c]
add eax, 0x58aae07e
je 0x1002f130
mov byte [ebp - 0x185], 0
movzx eax, byte [ebp - 0x185]
test eax, eax
je 0x1002f12b
push 0x7c0c
push 0x5c86
push 0x6518
push 1
push 0xd3
push 0x6a08
push 0x4140
push 0x7812
push 0xb70
push 0x1a98
push 1
push 0x3c41
push 0x4b2d
push 0x3102
push 0x53ce
push 0x7fa2
call fcn.1001d748
add esp, 0x40
jmp 0x1002f202
mov dword [ebp - 0x174c], 0xfffffffe
push 2
lea ecx, [ebp - 0x13ac]
call fcn.10013d2b
mov byte [ebp - 4], 0x45
mov dword [ebp - 0xb8], 0
jmp 0x1002f164
mov eax, dword [ebp - 0xb8]
inc eax
mov dword [ebp - 0xb8], eax
cmp dword [ebp - 0xb8], 1
jge 0x1002f180
mov eax, dword [ebp - 0xb8]
mov dword [ebp + eax*4 - 0x1648], 0xffffffff
jmp 0x1002f157
mov dword [ebp - 0xb8], 0
jmp 0x1002f199
mov eax, dword [ebp - 0xb8]
inc eax
mov dword [ebp - 0xb8], eax
cmp dword [ebp - 0xb8], 2
jge 0x1002f1bb
push dword [ebp - 0xb8]
lea ecx, [ebp - 0x13ac]
call fcn.10013deb
mov dword [eax], 1
jmp 0x1002f18c
push 0x30b5
push 0x79f6
push 1
push 0x77a7
push 0x6b56
push 0x1e3d
push 0
lea eax, [ebp - 0x13ac]
push eax
push 0x7de1
push 0x3edd
push 1
call fcn.1001fbf8
add esp, 0x2c
mov byte [ebp - 4], 0x44
lea ecx, [ebp - 0x13ac]
call fcn.10013d8d
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x1694]
call fcn.10013d8d
cmp dword [ebp - 0x570], 0
jle 0x1003099c
mov dword [ebp - 0x29c], 0x25b9b55b
push 1
lea ecx, [ebp - 0x1328]
call fcn.10013d2b
mov dword [ebp - 4], 0x46
mov dword [ebp - 0x404], 0
jmp 0x1002f255
mov eax, dword [ebp - 0x404]
inc eax
mov dword [ebp - 0x404], eax
cmp dword [ebp - 0x404], 1
jge 0x1002f274
push dword [ebp - 0x404]
lea ecx, [ebp - 0x1328]
call fcn.10013deb
or dword [eax], 0xffffffff
jmp 0x1002f248
mov dword [ebp - 0x29c], 0
jmp 0x1002f28d
mov eax, dword [ebp - 0x29c]
dec eax
mov dword [ebp - 0x29c], eax
cmp dword [ebp - 0x29c], 0xfffffffc
jge 0x1002f2d3
mov dword [ebp - 0xa24], 0
cmp dword [ebp - 0xa24], 0
je 0x1002f2ab
jmp 0x1002f2d3
lea eax, [ebp - 0xa24]
push eax
lea eax, [ebp - 0x29c]
push eax
push 0x6e93
push 1
push 1
lea eax, [ebp - 0x1328]
push eax
call fcn.1001db4d
add esp, 0x18
jmp 0x1002f280
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x1328]
call fcn.10013d8d
mov dword [ebp - 0xbc], 0x2e91a04
mov dword [ebp - 0x40c], 0xfffffffa
mov dword [ebp - 0x414], 0x768c0aa3
mov dword [ebp - 0x41c], 1
mov dword [ebp - 0x2c4], 0
jmp 0x1002f323
mov eax, dword [ebp - 0x2c4]
inc eax
mov dword [ebp - 0x2c4], eax
cmp dword [ebp - 0x2c4], 4
jge 0x1002f33f
mov eax, dword [ebp - 0x2c4]
mov dword [ebp + eax*4 - 0x1818], 0xfffc
jmp 0x1002f316
mov dword [ebp - 0xbc], 0xfffffff1
jmp 0x1002f358
mov eax, dword [ebp - 0xbc]
inc eax
mov dword [ebp - 0xbc], eax
cmp dword [ebp - 0xbc], 0x10
jl 0x1002f3ad
mov dword [ebp - 0x146c], 5
mov dword [ebp - 0x16d8], 0x78f3c34e
mov dword [ebp - 0x1474], 0xd42374b1
mov dword [ebp - 0xe34], 0xffffffff
lea eax, [ebp - 0xe34]
push eax
push 0x2500
push 0
push 0
push 0x1688
push 0x601c
call fcn.1002202f
add esp, 0x18
jmp 0x1002f34b
mov dword [ebp - 0x40c], 0
jmp 0x1002f3c6
cmp dword [ebp - 0x40c], 5
jle 0x1002f49f
mov dword [ebp - 0x414], 3
jmp 0x1002f3ec
cmp dword [ebp - 0x414], 0
jl 0x1002f480
push 1
lea ecx, [ebp - 0x49c]
call fcn.10013d2b
mov dword [ebp - 4], 0x47
mov dword [ebp - 0x30], 0x81c2900
mov dword [ebp - 0xa3c], 0xffffffff
mov dword [ebp - 0x424], 0
jmp 0x1002f4dd
cmp dword [ebp - 0x424], 1
jge 0x1002f4ff
jmp 0x100309e4
mov eax, dword [ebp + 0x14]
mov dword [ebp - 0xf38], eax
mov eax, dword [ebp + 0xc]
mov dword [ebp - 0xf48], eax
mov eax, dword [ebp + 0x20]
mov dword [ebp - 0xf40], eax
mov eax, dword [ebp + 0x18]
mov dword [ebp - 0xf30], eax
push dword [ebp - 0xf30]
push dword [ebp - 0xf38]
push 0
push dword [ebp - 0xf40]
push dword [ebp - 0xf48]
call fcn.100318db
add esp, 0x14
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
mov esp, ebp
pop ebp
ret