Function at 0x1002c3e3
Capabilities:
Accept command line arguments
Contain obfuscated stackstrings
Encrypt data using speck

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x10086fc9
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x4f0
push esi
push edi
movzx eax, byte [ebp + 0x18]
test eax, eax
je 0x1002e370
mov eax, dword [ebp + 0xc]
mov dword [ebp - 0x2e0], eax
mov eax, dword [ebp + 0x20]
mov dword [ebp - 0x264], eax
mov eax, dword [ebp + 0x2c]
mov dword [ebp - 0x270], eax
mov eax, dword [ebp + 0x28]
mov dword [ebp - 0x254], eax
mov eax, dword [ebp + 0x34]
mov dword [ebp - 0x304], eax
mov eax, dword [ebp + 0x30]
mov dword [ebp - 0x25c], eax
mov eax, dword [ebp + 0x14]
mov dword [ebp - 0x32c], eax
mov eax, dword [ebp + 8]
mov dword [ebp - 0x314], eax
mov eax, dword [ebp + 0x10]
mov dword [ebp - 0x27c], eax
lea eax, [ebp + 0x38]
mov dword [ebp - 0x250], eax
mov eax, dword [ebp + 0x1c]
mov dword [ebp - 0x2f4], eax
mov eax, dword [ebp + 0x24]
mov dword [ebp - 0x30c], eax
mov eax, dword [ebp - 0x250]
movzx eax, byte [eax]
test eax, eax
je 0x1002e01b
mov eax, dword [ebp - 0x2e0]
mov dword [ebp - 0x170], eax
mov eax, dword [ebp - 0x32c]
mov dword [ebp - 0x180], eax
mov eax, dword [0x1008cc74]
and eax, 1
jne 0x1002c4d8
mov eax, dword [0x1008cc74]
or eax, 1
mov dword [0x1008cc74], eax
and dword [ebp - 4], 0
mov ecx, 0x10091078
call fcn.1001fff2
push 0x10087c44
call fcn.100714c9
pop ecx
or dword [ebp - 4], 0xffffffff
mov dword [ebp - 0x34], 0x1bf5
mov dword [ebp - 0x3c], 8
mov dword [ebp - 0x11c], 1
mov dword [ebp - 0x3e0], 0xced4
cmp dword [ebp - 0x34], 0
jne 0x1002c50c
mov dword [ebp - 0x16c], 1
jmp 0x1002c513
and dword [ebp - 0x16c], 0
mov eax, dword [ebp - 0x34]
cmp eax, dword [ebp - 0x16c]
jge 0x1002c52a
mov dword [ebp - 0x1b0], 1
jmp 0x1002c531
and dword [ebp - 0x1b0], 0
cmp dword [ebp - 0x34], 0
je 0x1002c564
mov eax, dword [ebp - 0x34]
cmp dword [ebp - 0x34], eax
jle 0x1002c54b
mov dword [ebp - 0x328], 1
jmp 0x1002c552
and dword [ebp - 0x328], 0
cmp dword [ebp - 0x3c], 0
je 0x1002c564
mov dword [ebp - 0x198], 1
jmp 0x1002c56b
and dword [ebp - 0x198], 0
mov eax, dword [ebp - 0x198]
mov dword [ebp - 0x3c], eax
mov eax, dword [ebp - 0x3c]
mov dword [ebp - 0x11c], eax
mov eax, dword [ebp - 0x11c]
cmp dword [ebp - 0x1b0], eax
jl 0x1002c75c
cmp dword [ebp - 0x11c], 0
je 0x1002c75c
mov dword [ebp - 0x230], 1
mov dword [ebp - 0x8c], 0
jmp 0x1002c5bf
mov eax, dword [ebp - 0x8c]
inc eax
mov dword [ebp - 0x8c], eax
cmp dword [ebp - 0x8c], 3
jge 0x1002c5db
mov eax, dword [ebp - 0x8c]
mov dword [ebp + eax*4 - 0x434], 1
jmp 0x1002c5b2
mov dword [ebp - 0x17c], 0x77a8
mov dword [ebp - 0x1fc], 0x10009e30
cmp dword [ebp - 0x17c], 0x781b
jle 0x1002c6de
and dword [ebp - 0x84], 0
jmp 0x1002c615
mov eax, dword [ebp - 0x84]
inc eax
mov dword [ebp - 0x84], eax
cmp dword [ebp - 0x84], 0x1e70
jge 0x1002c6de
and dword [ebp - 0x110], 0
jmp 0x1002c63b
mov eax, dword [ebp - 0x110]
inc eax
mov dword [ebp - 0x110], eax
cmp dword [ebp - 0x110], 0x438e
jge 0x1002c6d9
and dword [ebp - 0x118], 0
jmp 0x1002c661
mov eax, dword [ebp - 0x118]
inc eax
mov dword [ebp - 0x118], eax
cmp dword [ebp - 0x118], 0x76d9
jge 0x1002c6d4
and dword [ebp - 0xd4], 0
jmp 0x1002c683
mov eax, dword [ebp - 0xd4]
inc eax
mov dword [ebp - 0xd4], eax
cmp dword [ebp - 0xd4], 0x3bf9
jge 0x1002c6d2
mov eax, dword [ebp - 0x84]
mov ecx, dword [ebp - 0x110]
sar eax, cl
mov edx, dword [ebp - 0x118]
mov ecx, dword [ebp - 0xd4]
sar edx, cl
or eax, edx
cdq
mov dword [ebp - 0x26c], eax
mov dword [ebp - 0x268], edx
push dword [ebp - 0x268]
push dword [ebp - 0x26c]
mov ecx, 0x1008bbb8
call fcn.1001fc14
jmp 0x1002c676
jmp 0x1002c654
jmp 0x1002c62e
jmp 0x1002c608
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x434]
mov dword [ebp - 0x3c], eax
cmp dword [ebp - 0x17c], 0x775a
jge 0x1002c70a
mov edx, dword [ebp - 0x1fc]
mov ecx, 0x1008bbb8
call fcn.100228da
push 1
lea eax, [ebp - 0x3c]
push eax
push 1
push 0x5c6e
push 0x254a
push 0x7baf
push 0x51bf
push 0x73d2
lea eax, [ebp - 0x230]
push eax
push 0x1b94
push 0x27f7
push 0x66df
push 0x1fc4
push 1
push 0x23a9
push 0x61e6
call fcn.10028e0f
add esp, 0x40
jmp 0x1002c781
push 1
push 0x23f6
push 0x73ee
push 0x64d0
push 1
push 0x72eb
push 0x6765
call fcn.100291e1
add esp, 0x1c
push dword [ebp - 0x170]
lea ecx, [ebp - 0x350]
call fcn.1001fd29
mov dword [ebp - 4], 1
lea eax, [ebp - 0x408]
push eax
lea ecx, [ebp - 0x350]
call fcn.10020746
push dword [eax]
lea eax, [ebp - 0x418]
push eax
lea ecx, [ebp - 0x350]
call fcn.1002075a
push dword [eax]
lea eax, [ebp - 0x3f4]
push eax
lea ecx, [ebp - 0x350]
call fcn.10020746
push dword [eax]
mov edx, 0x100238d8
lea ecx, [ebp - 0x3f8]
call fcn.100475af
add esp, 0xc
lea ecx, [ebp - 0x350]
call fcn.10023863
mov dword [ebp - 0x178], eax
mov dword [ebp - 0x1ac], 0x6008
mov dword [ebp - 0x1d4], 0x10009e78
cmp dword [ebp - 0x1ac], 0x60ad
jle 0x1002c891
and dword [ebp - 0x94], 0
jmp 0x1002c82f
mov eax, dword [ebp - 0x94]
inc eax
mov dword [ebp - 0x94], eax
cmp dword [ebp - 0x94], 0x20ff
jge 0x1002c891
and dword [ebp - 0x114], 0
jmp 0x1002c851
mov eax, dword [ebp - 0x114]
inc eax
mov dword [ebp - 0x114], eax
cmp dword [ebp - 0x114], 0x6c0c
jge 0x1002c88f
mov eax, dword [ebp - 0x94]
imul eax, dword [ebp - 0x114]
cdq
mov dword [ebp - 0x278], eax
mov dword [ebp - 0x274], edx
push dword [ebp - 0x274]
push dword [ebp - 0x278]
mov ecx, 0x1008bbb8
call fcn.1001fc14
jmp 0x1002c844
jmp 0x1002c822
movzx eax, byte [0x1009100a]
test eax, eax
je 0x1002c936
mov ecx, 0x10091078
call fcn.1004728c
movzx eax, al
test eax, eax
jne 0x1002c936
push 0
push 0x7c25
push 1
push 0x2ff5
push 0x2ef
call fcn.100297d0
add esp, 0x14
lea eax, [ebp - 0x178]
push eax
lea eax, [ebp - 0x14c]
push eax
mov ecx, 0x10091078
call fcn.100200b7
lea eax, [ebp - 0x3fc]
push eax
mov ecx, 0x10091078
call fcn.100200a9
push eax
lea ecx, [ebp - 0x14c]
call fcn.100201d3
movzx eax, al
test eax, eax
je 0x1002c936
lea ecx, [ebp - 0x14c]
call fcn.10047295
mov ecx, dword [ebp - 0x180]
mov eax, dword [eax + 4]
mov dword [ecx], eax
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x350]
call fcn.1001fdc1
jmp 0x1002e389
cmp dword [ebp - 0x1ac], 0x5e3e
jge 0x1002c952
mov edx, dword [ebp - 0x1d4]
mov ecx, 0x1008bbb8
call fcn.100228da
mov dword [ebp - 0x154], 0x128d
mov dword [ebp - 0x1dc], 0x10009ecc
cmp dword [ebp - 0x154], 0x1658
jle 0x1002ca24
push 0
push 0
push 0
push 0
call dword [sym.imp.GDI32.dll_PolyPolyline]
and dword [ebp - 0x9c], 0
jmp 0x1002c99a
mov eax, dword [ebp - 0x9c]
inc eax
mov dword [ebp - 0x9c], eax
cmp dword [ebp - 0x9c], 0x3c6a
jge 0x1002ca24
and dword [ebp - 0xdc], 0
jmp 0x1002c9bc
mov eax, dword [ebp - 0xdc]
inc eax
mov dword [ebp - 0xdc], eax
cmp dword [ebp - 0xdc], 0x5479
jge 0x1002ca1f
mov eax, dword [ebp - 0x9c]
add eax, dword [ebp - 0xdc]
cdq
mov dword [ebp - 0x284], eax
mov dword [ebp - 0x280], edx
push dword [ebp - 0x280]
push dword [ebp - 0x284]
lea ecx, [ebp - 0x4cc]
call fcn.10010ffe
pop ecx
pop ecx
mov dword [ebp - 0x238], eax
mov ecx, dword [ebp - 0x238]
call fcn.1001fbf4
push eax
call fcn.100714f3
pop ecx
lea ecx, [ebp - 0x4cc]
call fcn.1001fbea
jmp 0x1002c9af
jmp 0x1002c98d
and dword [ebp - 0x40], 0
cmp dword [ebp - 0x154], 0x11a2
jge 0x1002ca40
push dword [ebp - 0x1dc]
call fcn.100714f3
pop ecx
mov dword [ebp - 0x364], 0xd6c05baf
mov dword [ebp - 0x360], 0xd6c05baf
mov dword [ebp - 0x35c], 0xd6c05baf
mov dword [ebp - 0x358], 0xd6c05baf
lea ecx, [ebp - 0x12d]
call fcn.1001ffdb
push eax
lea eax, [ebp - 0x354]
push eax
lea eax, [ebp - 0x364]
push eax
lea ecx, [ebp - 0x454]
call fcn.1001ffde
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0x3f0]
call fcn.1001ff8a
mov byte [ebp - 4], 2
push 3
lea ecx, [ebp - 0x384]
call fcn.1001ff2e
mov byte [ebp - 4], 3
push 0x338f
lea eax, [ebp - 0x384]
push eax
push 1
lea eax, [ebp - 0x400]
push eax
push 0
call fcn.10026fdf
add esp, 0x14
push 0x3cf7
push 0x5f86
push 0x49a9
push 0xdd4
push 0x2e52
lea eax, [ebp - 0x384]
push eax
push 0x2f81
lea eax, [ebp - 0x3f0]
push eax
push 1
push 0
call fcn.1002bfb3
add esp, 0x28
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x384]
call fcn.1001ffb0
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x3f0]
call fcn.1001ffb0
lea eax, [ebp - 0x350]
push eax
call fcn.100241e1
pop ecx
mov dword [ebp - 0x40], eax
cmp dword [ebp - 0x40], 0
jne 0x1002deb1
mov dword [ebp - 0x184], 0x24a3
mov dword [ebp - 0x240], 0x10009ee4
cmp dword [ebp - 0x184], 0x2875
jle 0x1002cc0d
and dword [ebp - 0xa4], 0
jmp 0x1002cb7b
mov eax, dword [ebp - 0xa4]
inc eax
mov dword [ebp - 0xa4], eax
cmp dword [ebp - 0xa4], 0x5432
jge 0x1002cc0d
and dword [ebp - 0xfc], 0
jmp 0x1002cba1
mov eax, dword [ebp - 0xfc]
inc eax
mov dword [ebp - 0xfc], eax
cmp dword [ebp - 0xfc], 0x79dc
jge 0x1002cc08
and dword [ebp - 0xac], 0
jmp 0x1002cbc3
mov eax, dword [ebp - 0xac]
inc eax
mov dword [ebp - 0xac], eax
cmp dword [ebp - 0xac], 0x17f4
jge 0x1002cc06
mov eax, dword [ebp - 0xa4]
xor eax, dword [ebp - 0xfc]
or eax, dword [ebp - 0xac]
cdq
mov dword [ebp - 0x290], eax
mov dword [ebp - 0x28c], edx
push dword [ebp - 0x28c]
push dword [ebp - 0x290]
mov ecx, 0x1008bbb8
call fcn.1001fc14
jmp 0x1002cbb6
jmp 0x1002cb94
jmp 0x1002cb6e
push 0x5e52
push 0
push 0x6c2d
call fcn.1002e949
add esp, 0xc
cmp dword [ebp - 0x184], 0x2399
jge 0x1002cc3d
mov edx, dword [ebp - 0x240]
mov ecx, 0x1008bbb8
call fcn.100228da
cmp dword [0x1009100c], 0
jne 0x1002de2a
mov dword [ebp - 0x410], 3
push 1
push 0x657a
push 0x25d8
push 0x564c
push 0x38de
push 1
push 0x24d7
push 0x51ba
push 0x5de4
push 0x4d08
call fcn.100299d9
add esp, 0x28
mov byte [ebp - 0x27], 0
push 0x5b15
push 0x991
push 0x2439
push 0x2678
push 0x70ca
lea eax, [ebp - 0x27]
push eax
push 0x2efa
push 0x29a8
push 0
push 1
call fcn.1002ac29
add esp, 0x28
mov byte [ebp - 0x78], 0
mov byte [ebp - 0x77], 0x86
mov byte [ebp - 0x76], 2
mov byte [ebp - 0x75], 0x28
mov byte [ebp - 0x74], 0x10
mov byte [ebp - 0x73], 5
mov byte [ebp - 0x72], 0x27
mov byte [ebp - 0x71], 0xb
mov byte [ebp - 0x70], 0
mov byte [ebp - 0x6f], 3
mov byte [ebp - 0x6e], 2
mov byte [ebp - 0x6d], 4
mov byte [ebp - 0x6c], 0xb
mov byte [ebp - 0x6b], 0xa
mov byte [ebp - 0x6a], 9
mov byte [ebp - 0x69], 8
mov byte [ebp - 0x68], 0x42
mov byte [ebp - 0x67], 9
mov byte [ebp - 0x66], 0x4a
mov byte [ebp - 0x65], 7
mov byte [ebp - 0x64], 0x56
mov byte [ebp - 0x63], 6
mov byte [ebp - 0x62], 1
mov byte [ebp - 0x61], 1
mov byte [ebp - 0x60], 0x56
mov byte [ebp - 0x5f], 2
mov byte [ebp - 0x5e], 0x17
push 0x5737
push 0x2bb1
push 1
push 1
push 1
push 0x5762
call fcn.10029e0a
add esp, 0x18
xor eax, eax
inc eax
shl eax, 0
movzx eax, byte [ebp + eax - 0x78]
or eax, 0xcd
xor ecx, ecx
inc ecx
shl ecx, 0
movzx ecx, byte [ebp + ecx - 0x78]
and ecx, 0xcd
sub eax, ecx
xor ecx, ecx
inc ecx
imul ecx, ecx, 0
movzx ecx, byte [ebp + ecx - 0x78]
mov word [ebp + ecx*2 - 0x3dc], ax
mov dword [ebp - 0x2c], 0x68ec0ae9
mov dword [ebp - 0x258], 0x6848
mov dword [ebp - 0x1ec], 0xfffffff7
mov dword [ebp - 0x1f4], 8
mov dword [ebp - 0x1c8], 0xfffffff8
mov dword [ebp - 0x2c], 0xfffffff7
jmp 0x1002cdbd
mov eax, dword [ebp - 0x2c]
inc eax
mov dword [ebp - 0x2c], eax
cmp dword [ebp - 0x2c], 0xfffffffe
jne 0x1002cf8d
mov dword [ebp - 0x248], 0xad386cce
mov byte [ebp - 0x25], 0
mov dword [ebp - 0x15c], 0x6c58
mov dword [ebp - 0x1e4], 0x10009f24
cmp dword [ebp - 0x15c], 0x6e83
jle 0x1002cee2
push 0
push 0
push 0
push 0
call dword [sym.imp.GDI32.dll_CombineRgn]
and dword [ebp - 0x10c], 0
jmp 0x1002ce1d
mov eax, dword [ebp - 0x10c]
inc eax
mov dword [ebp - 0x10c], eax
cmp dword [ebp - 0x10c], 0x4318
jge 0x1002cee2
and dword [ebp - 0xe4], 0
jmp 0x1002ce43
mov eax, dword [ebp - 0xe4]
inc eax
mov dword [ebp - 0xe4], eax
cmp dword [ebp - 0xe4], 0xb53
jge 0x1002cedd
and dword [ebp - 0xb4], 0
jmp 0x1002ce69
mov eax, dword [ebp - 0xb4]
inc eax
mov dword [ebp - 0xb4], eax
cmp dword [ebp - 0xb4], 0x711d
jge 0x1002ced8
and dword [ebp - 0xbc], 0
jmp 0x1002ce8b
mov eax, dword [ebp - 0xbc]
inc eax
mov dword [ebp - 0xbc], eax
cmp dword [ebp - 0xbc], 0x3ffe
jge 0x1002ced6
mov eax, dword [ebp - 0xe4]
mov ecx, dword [ebp - 0xb4]
sar eax, cl
and eax, dword [ebp - 0x10c]
xor eax, dword [ebp - 0xbc]
cdq
mov dword [ebp - 0x29c], eax
mov dword [ebp - 0x298], edx
push dword [ebp - 0x298]
push dword [ebp - 0x29c]
mov ecx, 0x1008bbb8
call fcn.1001fc14
jmp 0x1002ce7e
jmp 0x1002ce5c
jmp 0x1002ce36
jmp 0x1002ce10
push 1
push 0x22cb
push 0
push 0x16e9
push 0x546f
push 0x4395
push 0x227
push 0x3596
push 0xa39
push 0x52b3
push 0x35b6
push 0x3a97
push 0x2a65
push 1
push 0x2d78
lea eax, [ebp - 0x25]
push eax
call fcn.10028e0f
add esp, 0x40
cmp dword [ebp - 0x15c], 0x6a10
jge 0x1002cf4c
mov edx, dword [ebp - 0x1e4]
mov ecx, 0x1008bbb8
call fcn.100228da
push 0x2011
lea eax, [ebp - 0x248]
push eax
push 0x7e6a
push 0x2ea5
push 0x1fa3
push 1
push 0x50a5
push 1
push 1
push 0x47bc
lea eax, [ebp - 0x2c]
push eax
push 0x2974
call fcn.10025bb0
add esp, 0x30
jmp 0x1002cdb6
lea eax, [ebp - 0x1ec]
push eax
lea eax, [ebp - 0x1c8]
push eax
lea eax, [ebp - 0x1f4]
push eax
push 0x45a5
push 0x76bf
push 0x492c
lea eax, [ebp - 0x2c]
push eax
lea eax, [ebp - 0x258]
push eax
push 1
push 1
call fcn.1002ac29
add esp, 0x28
mov dword [ebp - 0x14], 2
and dword [ebp - 0x98], 0
jmp 0x1002cfe0
mov eax, dword [ebp - 0x14]
inc eax
inc eax
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 0x1b
jae 0x1002d8b5
push 0x31db
push 0xab
push 0x7e2c
push 1
push 0x4bf8
push 0x6528
push 1
call fcn.1002ae38
add esp, 0x1c
xor eax, eax
inc eax
imul eax, eax, 0
movzx eax, byte [ebp + eax - 0x78]
lea eax, [eax + eax + 2]
cmp dword [ebp - 0x14], eax
jne 0x1002d046
mov eax, dword [ebp - 0x14]
movzx eax, byte [ebp + eax - 0x78]
inc eax
mov dword [ebp - 0x98], eax
mov eax, dword [ebp - 0x14]
movzx eax, byte [ebp + eax - 0x78]
mov ecx, dword [ebp - 0x14]
lea eax, [ecx + eax - 1]
mov dword [ebp - 0x14], eax
jmp 0x1002cfd8
mov dword [ebp - 0x24], 0xdf75dcec
mov dword [ebp - 0x120], 0xf1571c09
mov dword [ebp - 0x214], 0xe8a7
mov dword [ebp - 0x378], 0x7ba9ac04
mov dword [ebp - 0x374], 0x7ba9ac04
mov dword [ebp - 0x370], 0x7ba9ac04
mov dword [ebp - 0x36c], 0x7ba9ac04
lea ecx, [ebp - 0x139]
call fcn.1001ffdb
push eax
lea eax, [ebp - 0x368]
push eax
lea eax, [ebp - 0x378]
push eax
lea ecx, [ebp - 0x44c]
call fcn.1001ffde
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0x3c0]
call fcn.1001ff8a
mov byte [ebp - 4], 4
mov dword [ebp - 0x134], 0xffffffff
mov dword [ebp - 0x318], 0x64ea
mov dword [ebp - 0x1c], 0
jmp 0x1002d0e6
mov eax, dword [ebp - 0x1c]
inc eax
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 4
jge 0x1002d0fc
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0x484], 0x421dd2eb
jmp 0x1002d0df
mov dword [ebp - 0x1c], 0
jmp 0x1002d10c
mov eax, dword [ebp - 0x1c]
inc eax
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 1
jge 0x1002d122
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0x148], 0x2a2d6201
jmp 0x1002d105
mov dword [ebp - 0x24], 0xf
jmp 0x1002d132
mov eax, dword [ebp - 0x24]
dec eax
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 0xffffffe9
jg 0x1002d738
push 1
lea ecx, [ebp - 0x1a8]
call fcn.1001ff2e
mov byte [ebp - 4], 5
mov dword [ebp - 0x19c], 0x7d80
mov dword [ebp - 0x2ac], 0x10009f40
cmp dword [ebp - 0x19c], 0x7f9d
jle 0x1002d285
and dword [ebp - 0xec], 0
jmp 0x1002d187
mov eax, dword [ebp - 0xec]
inc eax
mov dword [ebp - 0xec], eax
cmp dword [ebp - 0xec], 0x63fc
jge 0x1002d27b
and dword [ebp - 0xc4], 0
jmp 0x1002d1ad
mov eax, dword [ebp - 0xc4]
inc eax
mov dword [ebp - 0xc4], eax
cmp dword [ebp - 0xc4], 0x741b
jge 0x1002d276
and dword [ebp - 0x104], 0
jmp 0x1002d1d3
mov eax, dword [ebp - 0x104]
inc eax
mov dword [ebp - 0x104], eax
cmp dword [ebp - 0x104], 0x316b
jge 0x1002d271
and dword [ebp - 0xcc], 0
jmp 0x1002d1f9
mov eax, dword [ebp - 0xcc]
inc eax
mov dword [ebp - 0xcc], eax
cmp dword [ebp - 0xcc], 0x7820
jge 0x1002d26c
mov eax, dword [ebp - 0xec]
mov ecx, dword [ebp - 0xc4]
sar eax, cl
mov ecx, dword [ebp - 0x104]
sub ecx, dword [ebp - 0xcc]
and eax, ecx
cdq
mov dword [ebp - 0x2a8], eax
mov dword [ebp - 0x2a4], edx
push dword [ebp - 0x2a4]
push dword [ebp - 0x2a8]
lea ecx, [ebp - 0x4b4]
call fcn.10010ffe
pop ecx
pop ecx
mov dword [ebp - 0x260], eax
mov ecx, dword [ebp - 0x260]
call fcn.1001fbf4
push eax
call fcn.100714f3
pop ecx
lea ecx, [ebp - 0x4b4]
call fcn.1001fbea
jmp 0x1002d1ec
jmp 0x1002d1c6
jmp 0x1002d1a0
jmp 0x1002d17a
push 0
push 0
call dword [sym.imp.GDI32.dll_SetPolyFillMode]
mov dword [ebp - 0x2b8], 0xfffffffb
cmp dword [ebp - 0x19c], 0x7a1c
jge 0x1002d2a7
push dword [ebp - 0x2ac]
call fcn.100714f3
pop ecx
mov dword [ebp - 0x12c], 0x12e75507
mov dword [ebp - 0x144], 0x6e86ff18
push 4
lea ecx, [ebp - 0x300]
call fcn.1001ff2e
mov byte [ebp - 4], 6
mov dword [ebp - 0x20c], 0x689bb5c
mov dword [ebp - 0x3e4], 0xc0e03a84
lea eax, [ebp - 0x30]
push eax
push 0
lea eax, [ebp - 0x1a8]
push eax
push 0xc13
push 0x61e9
push 0x3315
push 0
push 0x7875
call fcn.1002e3eb
add esp, 0x20
push 0
push 0x3fe6
lea eax, [ebp - 0x300]
push eax
push 0x47dd
push 1
push 0x21f4
lea eax, [ebp - 0x30]
push eax
call fcn.100291e1
add esp, 0x1c
mov dword [ebp - 0x30], 0
jmp 0x1002d341
mov eax, dword [ebp - 0x30]
inc eax
mov dword [ebp - 0x30], eax
cmp dword [ebp - 0x30], 4
jge 0x1002d357
mov eax, dword [ebp - 0x30]
mov dword [ebp + eax*4 - 0x428], 0x1ba1
jmp 0x1002d33a
mov esi, dword [ebp - 0x24]
push 0
lea ecx, [ebp - 0x1a8]
call fcn.1001ffcc
mov edi, eax
push 0
lea ecx, [ebp - 0x1a8]
call fcn.1001ffcc
mov ecx, dword [edi]
add ecx, dword [eax]
cmp esi, ecx
jg 0x1002d38a
mov dword [ebp - 0x140], 1
jmp 0x1002d391
and dword [ebp - 0x140], 0
mov eax, dword [ebp - 0x134]
mov ecx, dword [ebp - 0x134]
inc ecx
mov dword [ebp - 0x134], ecx
test eax, eax
jne 0x1002d4bd
mov eax, dword [ebp - 0x12c]
mov dword [ebp - 0x404], eax
mov eax, 0x49f3923b
cmp eax, 0xcf27260e
je 0x1002d3d0
mov dword [ebp - 0x128], 1
jmp 0x1002d3d7
and dword [ebp - 0x128], 0
push 4
pop eax
imul eax, eax, 3
mov ecx, dword [ebp - 0x128]
mov dword [ebp + eax - 0x484], ecx
cmp dword [ebp - 0x128], 0x221365d5
jle 0x1002d402
mov dword [ebp - 0x164], 1
jmp 0x1002d409
and dword [ebp - 0x164], 0
push 1
lea ecx, [ebp - 0x3c0]
call fcn.1001ffcc
mov eax, dword [eax]
cmp eax, dword [ebp - 0x164]
jle 0x1002d42c
mov dword [ebp - 0x138], 1
jmp 0x1002d433
and dword [ebp - 0x138], 0
push 2
lea ecx, [ebp - 0x300]
call fcn.1001ffcc
mov ecx, dword [ebp - 0x138]
mov dword [eax], ecx
push 0
lea ecx, [ebp - 0x1a8]
call fcn.1001ffcc
mov ecx, dword [ebp - 0x138]
cmp ecx, dword [eax]
jl 0x1002d46b
mov dword [ebp - 0x204], 1
jmp 0x1002d472
and dword [ebp - 0x204], 0
mov eax, dword [ebp - 0x24]
mov dword [ebp - 0x414], eax
mov eax, dword [ebp - 0x318]
mov dword [ebp - 0x40c], eax
mov esi, dword [ebp - 0x120]
push 0
lea ecx, [ebp - 0x1a8]
call fcn.1001ffcc
cmp esi, dword [eax]
je 0x1002d4aa
mov dword [ebp - 0x18c], 1
jmp 0x1002d4b1
and dword [ebp - 0x18c], 0
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x428]
push 1
lea ecx, [ebp - 0x3c0]
call fcn.1001ffcc
imul eax, dword [ebp - 0x20c], 0x23f8
cmp eax, dword [ebp - 0x24]
jl 0x1002d4ee
cmp dword [ebp - 0x2b8], 0
je 0x1002d4ee
mov dword [ebp - 0x1b4], 1
jmp 0x1002d4f5
and dword [ebp - 0x1b4], 0
mov eax, dword [ebp - 0x140]
imul eax, dword [ebp - 0x1b4]
mov dword [ebp - 0x120], eax
cmp dword [ebp - 0x120], 1
ja 0x1002d51d
mov dword [ebp - 0x124], 1
jmp 0x1002d524
and dword [ebp - 0x124], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x124]
mov dword [ebp + eax - 0x148], ecx
mov eax, dword [ebp - 0x124]
sub eax, dword [ebp - 0x214]
mov dword [ebp - 0x12c], eax
cmp dword [ebp - 0x12c], 0xffffffff
jg 0x1002d55e
mov dword [ebp - 0x174], 1
jmp 0x1002d565
and dword [ebp - 0x174], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x428]
cmp dword [ebp - 0x174], eax
je 0x1002d586
mov dword [ebp - 0x194], 1
jmp 0x1002d58d
and dword [ebp - 0x194], 0
mov eax, dword [ebp - 0x194]
sub eax, 0x82240a4
je 0x1002d6c5
cmp dword [ebp - 0x144], 0
je 0x1002d6c5
push 1
lea ecx, [ebp - 0x2f0]
call fcn.1001ff2e
mov byte [ebp - 4], 7
mov dword [ebp - 0xf4], 0
jmp 0x1002d5d5
mov eax, dword [ebp - 0xf4]
inc eax
mov dword [ebp - 0xf4], eax
cmp dword [ebp - 0xf4], 1
jge 0x1002d5f7
push dword [ebp - 0xf4]
lea ecx, [ebp - 0x2f0]
call fcn.1001ffcc
mov dword [eax], 0x97eee40b
jmp 0x1002d5c8
push 0x503a
push 0x6924
push 0x19f8
lea eax, [ebp - 0x2f0]
push eax
push 0x1a18
push 0x53dc
push 0x2c5c
push 0x3802
push 0x12e9
push 1
push 0x5961
push 0x1ea5
push 0x2580
push 0x362c
push 0xc10
push 0x6a9d
push 1
push 0x1eb7
push 0
push 0x5f59
push 0x1422
push 0xcd1
push 0x2f1a
push 0x384e
call fcn.1002782f
add esp, 0x60
push 0
lea ecx, [ebp - 0x2f0]
call fcn.1001ffcc
cmp dword [eax], 0
je 0x1002d6b4
mov byte [ebp - 4], 6
lea ecx, [ebp - 0x2f0]
call fcn.1001ffb0
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x300]
call fcn.1001ffb0
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x1a8]
call fcn.1001ffb0
jmp 0x1002d12b
mov byte [ebp - 4], 6
lea ecx, [ebp - 0x2f0]
call fcn.1001ffb0
jmp 0x1002d715
push 0x16c2
push 1
push 0x50a1
lea eax, [ebp - 0x144]
push eax
push 1
call fcn.1002752b
add esp, 0x14
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x148], 0
je 0x1002d715
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x300]
call fcn.1001ffb0
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x1a8]
call fcn.1001ffb0
jmp 0x1002d12b
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x300]
call fcn.1001ffb0
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x1a8]
call fcn.1001ffb0
jmp 0x1002d12b
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x3c0]
call fcn.1001ffb0
mov eax, dword [ebp - 0x14]
movzx eax, byte [ebp + eax - 0x77]
mov ecx, dword [ebp - 0x14]
sub ecx, dword [ebp - 0x98]
movzx ecx, byte [ebp + ecx - 0x7a]
movzx ecx, word [ebp + ecx*2 - 0x3dc]
or eax, ecx
mov ecx, dword [ebp - 0x14]
movzx ecx, byte [ebp + ecx - 0x77]
mov edx, dword [ebp - 0x14]
sub edx, dword [ebp - 0x98]
movzx edx, byte [ebp + edx - 0x7a]
movzx edx, word [ebp + edx*2 - 0x3dc]
and ecx, edx
sub eax, ecx
mov ecx, dword [ebp - 0x14]
movzx ecx, byte [ebp + ecx - 0x78]
mov word [ebp + ecx*2 - 0x3dc], ax
mov dword [ebp - 0x150], 0x3f67
mov dword [ebp - 0x21c], 0x10009f88
cmp dword [ebp - 0x150], 0x4233
jle 0x1002d863
and dword [ebp - 0x88], 0
jmp 0x1002d7d3
mov eax, dword [ebp - 0x88]
inc eax
mov dword [ebp - 0x88], eax
cmp dword [ebp - 0x88], 0x13c8
jge 0x1002d85d
and dword [ebp - 0x90], 0
jmp 0x1002d7f5
mov eax, dword [ebp - 0x90]
inc eax
mov dword [ebp - 0x90], eax
cmp dword [ebp - 0x90], 0x402
jge 0x1002d858
mov eax, dword [ebp - 0x88]
sub eax, dword [ebp - 0x90]
cdq
mov dword [ebp - 0x2b4], eax
mov dword [ebp - 0x2b0], edx
push dword [ebp - 0x2b0]
push dword [ebp - 0x2b4]
lea ecx, [ebp - 0x49c]
call fcn.10010ffe
pop ecx
pop ecx
mov dword [ebp - 0x330], eax
mov ecx, dword [ebp - 0x330]
call fcn.1001fbf4
push eax
call fcn.100714f3
pop ecx
lea ecx, [ebp - 0x49c]
call fcn.1001fbea
jmp 0x1002d7e8
jmp 0x1002d7c6
call dword [sym.imp.KERNEL32.dll_GetCommandLineA]
cmp dword [ebp - 0x150], 0x3d13
jge 0x1002d87b
push dword [ebp - 0x21c]
call fcn.100714f3
pop ecx
mov dword [ebp - 0x2c4], 8
push 1
push 0x2dc0
push 1
push 1
lea eax, [ebp - 0x2c4]
push eax
push 0x5da
push 0x5acb
call fcn.1002b13c
add esp, 0x1c
and dword [ebp - 0x98], 0
jmp 0x1002cfd8
push 0x30ad
push 0x6ac0
push 0x11de
push 1
push 0x2949
push 1
call fcn.1002b327
add esp, 0x18
push 2
pop eax
imul eax, eax, 0xc
xor ecx, ecx
mov word [ebp + eax - 0x3dc], cx
lea eax, [ebp - 0x3dc]
push eax
lea ecx, [ebp - 0x4fc]
call fcn.100471db
mov dword [ebp - 0x224], eax
mov eax, dword [ebp - 0x224]
mov dword [ebp - 0x320], eax
mov byte [ebp - 4], 8
push dword [ebp - 0x320]
call fcn.100241e1
pop ecx
mov dword [ebp - 0x168], eax
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x4fc]
call fcn.1001fdc1
mov dword [ebp - 0x158], 0x3a07
mov dword [ebp - 0x2dc], 0x10009fe0
cmp dword [ebp - 0x158], 0x3a41
jle 0x1002d9f2
and dword [ebp - 0xa0], 0
jmp 0x1002d968
mov eax, dword [ebp - 0xa0]
inc eax
mov dword [ebp - 0xa0], eax
cmp dword [ebp - 0xa0], 0x17fc
jge 0x1002d9f2
and dword [ebp - 0xa8], 0
jmp 0x1002d98a
mov eax, dword [ebp - 0xa8]
inc eax
mov dword [ebp - 0xa8], eax
cmp dword [ebp - 0xa8], 0x6ed1
jge 0x1002d9ed
mov eax, dword [ebp - 0xa0]
sub eax, dword [ebp - 0xa8]
cdq
mov dword [ebp - 0x2c0], eax
mov dword [ebp - 0x2bc], edx
push dword [ebp - 0x2bc]
push dword [ebp - 0x2c0]
lea ecx, [ebp - 0x4e4]
call fcn.10010ffe
pop ecx
pop ecx
mov dword [ebp - 0x22c], eax
mov ecx, dword [ebp - 0x22c]
call fcn.1001fbf4
push eax
call fcn.100714f3
pop ecx
lea ecx, [ebp - 0x4e4]
call fcn.1001fbea
jmp 0x1002d97d
jmp 0x1002d95b
push 1
lea ecx, [ebp - 0x390]
call fcn.1001ff2e
mov byte [ebp - 4], 9
mov dword [ebp - 0x234], 0x874be76d
mov dword [ebp - 0x334], 2
mov dword [ebp - 0x23c], 1
push 4
lea ecx, [ebp - 0x3a8]
call fcn.1001ff2e
mov byte [ebp - 4], 0xa
push 0
push 1
push 0x7aa3
lea eax, [ebp - 0x390]
push eax
lea eax, [ebp - 0x2d0]
push eax
call fcn.1002b571
add esp, 0x14
push 0x7396
push 1
push 0x1ead
lea eax, [ebp - 0x2d0]
push eax
lea eax, [ebp - 0x3a8]
push eax
call fcn.10026643
add esp, 0x14
push 0x3baa
push 0
push 0x4d5
push 0x7cca
push 0x3869
call fcn.10046cd2
add esp, 0x14
push 0
push 1
push 0x1f4a
push 0x2c4e
push 0x60f7
lea eax, [ebp - 0x234]
push eax
lea eax, [ebp - 0x3a8]
push eax
lea eax, [ebp - 0x390]
push eax
push 0x2830
lea eax, [ebp - 0x334]
push eax
lea eax, [ebp - 0x23c]
push eax
push 0x5a16
call fcn.100289f8
add esp, 0x30
mov byte [ebp - 4], 9
lea ecx, [ebp - 0x3a8]
call fcn.1001ffb0
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x390]
call fcn.1001ffb0
cmp dword [ebp - 0x158], 0x39d5
jge 0x1002db0f
push dword [ebp - 0x2dc]
call fcn.100714f3
pop ecx
and dword [ebp - 0xb0], 0
jmp 0x1002db25
mov eax, dword [ebp - 0xb0]
inc eax
mov dword [ebp - 0xb0], eax
cmp dword [ebp - 0xb0], 0xd
jae 0x1002db40
xor eax, eax
mov ecx, dword [ebp - 0xb0]
mov word [ebp + ecx*2 - 0x3dc], ax
jmp 0x1002db18
cmp dword [ebp - 0x168], 0
je 0x1002de2a
mov byte [ebp - 0x5c], 1
mov byte [ebp - 0x5b], 0x24
mov byte [ebp - 0x5a], 5
mov byte [ebp - 0x59], 6
mov byte [ebp - 0x58], 2
mov byte [ebp - 0x57], 0xe
mov byte [ebp - 0x56], 0xa3
mov byte [ebp - 0x55], 3
mov byte [ebp - 0x54], 0xd
mov byte [ebp - 0x53], 0xa
mov byte [ebp - 0x52], 0x1d
mov byte [ebp - 0x51], 2
mov byte [ebp - 0x50], 0x18
mov byte [ebp - 0x4f], 0xb
mov byte [ebp - 0x4e], 0x36
mov byte [ebp - 0x4d], 0
mov byte [ebp - 0x4c], 0x1b
mov byte [ebp - 0x4b], 9
mov byte [ebp - 0x4a], 0x3e
mov byte [ebp - 0x49], 7
mov byte [ebp - 0x48], 0
mov byte [ebp - 0x47], 4
mov byte [ebp - 0x46], 0x3e
mov byte [ebp - 0x45], 8
mov byte [ebp - 0x44], 0x2d
mov byte [ebp - 0x43], 6
mov byte [ebp - 0x42], 3
xor eax, eax
inc eax
shl eax, 0
movzx eax, byte [ebp + eax - 0x5c]
or eax, 0x4b
xor ecx, ecx
inc ecx
shl ecx, 0
movzx ecx, byte [ebp + ecx - 0x5c]
and ecx, 0x4b
sub eax, ecx
xor ecx, ecx
inc ecx
imul ecx, ecx, 0
movzx ecx, byte [ebp + ecx - 0x5c]
mov byte [ebp + ecx - 0x1c4], al
mov dword [ebp - 0x10], 2
and dword [ebp - 0xd0], 0
jmp 0x1002dc01
mov eax, dword [ebp - 0x10]
inc eax
inc eax
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], 0x1b
jae 0x1002ddaa
xor eax, eax
inc eax
imul eax, eax, 0
movzx eax, byte [ebp + eax - 0x5c]
lea eax, [eax + eax + 2]
cmp dword [ebp - 0x10], eax
jne 0x1002dc42
mov eax, dword [ebp - 0x10]
movzx eax, byte [ebp + eax - 0x5c]
inc eax
mov dword [ebp - 0xd0], eax
mov eax, dword [ebp - 0x10]
movzx eax, byte [ebp + eax - 0x5c]
mov ecx, dword [ebp - 0x10]
lea eax, [ecx + eax - 1]
mov dword [ebp - 0x10], eax
jmp 0x1002dbf9
mov eax, dword [ebp - 0x10]
movzx eax, byte [ebp + eax - 0x5b]
mov ecx, dword [ebp - 0x10]
sub ecx, dword [ebp - 0xd0]
movzx ecx, byte [ebp + ecx - 0x5e]
movsx ecx, byte [ebp + ecx - 0x1c4]
or eax, ecx
mov ecx, dword [ebp - 0x10]
movzx ecx, byte [ebp + ecx - 0x5b]
mov edx, dword [ebp - 0x10]
sub edx, dword [ebp - 0xd0]
movzx edx, byte [ebp + edx - 0x5e]
movsx edx, byte [ebp + edx - 0x1c4]
and ecx, edx
sub eax, ecx
mov ecx, dword [ebp - 0x10]
movzx ecx, byte [ebp + ecx - 0x5c]
mov byte [ebp + ecx - 0x1c4], al
mov dword [ebp - 0x160], 0x3e02
mov dword [ebp - 0x244], 0x1000a028
cmp dword [ebp - 0x160], 0x4005
jle 0x1002dd82
and dword [ebp - 0xb8], 0
jmp 0x1002dccd
mov eax, dword [ebp - 0xb8]
inc eax
mov dword [ebp - 0xb8], eax
cmp dword [ebp - 0xb8], 0x62a
jge 0x1002dd82
and dword [ebp - 0xc0], 0
jmp 0x1002dcf3
mov eax, dword [ebp - 0xc0]
inc eax
mov dword [ebp - 0xc0], eax
cmp dword [ebp - 0xc0], 0x254
jge 0x1002dd7d
and dword [ebp - 0xc8], 0
jmp 0x1002dd15
mov eax, dword [ebp - 0xc8]
inc eax
mov dword [ebp - 0xc8], eax
cmp dword [ebp - 0xc8], 0x1907
jge 0x1002dd78
and dword [ebp - 0x7c], 0
jmp 0x1002dd2e
mov eax, dword [ebp - 0x7c]
inc eax
mov dword [ebp - 0x7c], eax
cmp dword [ebp - 0x7c], 0x78c7
jge 0x1002dd76
mov eax, dword [ebp - 0xb8]
cdq
idiv dword [ebp - 0xc0]
mov ecx, dword [ebp - 0xc8]
shl edx, cl
and edx, dword [ebp - 0x7c]
mov eax, edx
cdq
mov dword [ebp - 0x2cc], eax
mov dword [ebp - 0x2c8], edx
push dword [ebp - 0x2c8]
push dword [ebp - 0x2cc]
mov ecx, 0x1008bbb8
call fcn.1001fc14
jmp 0x1002dd27
jmp 0x1002dd08
jmp 0x1002dce6
jmp 0x1002dcc0
and dword [ebp - 0xd0], 0
cmp dword [ebp - 0x160], 0x3b3f
jge 0x1002dda5
mov edx, dword [ebp - 0x244]
mov ecx, 0x1008bbb8
call fcn.100228da
jmp 0x1002dbf9
xor eax, eax
inc eax
imul eax, eax, 0xc
mov byte [ebp + eax - 0x1c4], 0
lea eax, [ebp - 0x1c4]
push eax
lea ecx, [ebp - 0x474]
call fcn.10047200
mov byte [ebp - 4], 0xb
and dword [ebp - 0xd8], 0
jmp 0x1002dde4
mov eax, dword [ebp - 0xd8]
inc eax
mov dword [ebp - 0xd8], eax
cmp dword [ebp - 0xd8], 0xd
jae 0x1002ddfd
mov eax, dword [ebp - 0xd8]
mov byte [ebp + eax - 0x1c4], 0
jmp 0x1002ddd7
push 0
push 0
lea eax, [ebp - 0x474]
push eax
push dword [ebp - 0x168]
call fcn.10035a0a
add esp, 0x10
mov dword [0x1009100c], eax
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x474]
call fcn.1001fe9b
mov dword [ebp - 0x24c], 8
mov dword [ebp - 0x308], 1
mov dword [ebp - 0x2e4], 0xc1b0fe2c
push 0
push 0x7f69
push 0x4dad
push 0x50fa
call fcn.10045e2a
add esp, 0x10
push 0x15d4
push 1
lea eax, [ebp - 0x308]
push eax
lea eax, [ebp - 0x24c]
push eax
push 0x487f
push 1
push 0x30a4
lea eax, [ebp - 0x2e4]
push eax
push 1
call fcn.1002b7a5
add esp, 0x24
cmp dword [0x1009100c], 0
je 0x1002deb1
mov ecx, dword [ebp - 0x170]
call fcn.1001fe20
push eax
call dword [0x1009100c]
mov dword [ebp - 0x40], eax
push 1
lea eax, [ebp - 0x40]
push eax
push 0x75ea
push 0x1009100a
push 0x10091078
lea eax, [ebp - 0x178]
push eax
push 1
call fcn.1002bb13
add esp, 0x1c
mov dword [ebp - 0x20], 0xac204e2d
mov dword [ebp - 0xe0], 0
jmp 0x1002def7
mov eax, dword [ebp - 0xe0]
inc eax
mov dword [ebp - 0xe0], eax
cmp dword [ebp - 0xe0], 4
jge 0x1002df13
mov eax, dword [ebp - 0xe0]
mov dword [ebp + eax*4 - 0x444], 8
jmp 0x1002deea
mov dword [ebp - 0x20], 0
jmp 0x1002df23
mov eax, dword [ebp - 0x20]
inc eax
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 0x13
jge 0x1002dfc2
mov dword [ebp - 0xf0], 0x290be443
mov dword [ebp - 0xe8], 0
jmp 0x1002df50
mov eax, dword [ebp - 0xe8]
inc eax
mov dword [ebp - 0xe8], eax
cmp dword [ebp - 0xe8], 2
jge 0x1002df6c
mov eax, dword [ebp - 0xe8]
mov dword [ebp + eax*4 - 0x45c], 0xca0029bf
jmp 0x1002df43
mov dword [ebp - 0xf0], 0
jmp 0x1002df85
mov eax, dword [ebp - 0xf0]
inc eax
mov dword [ebp - 0xf0], eax
cmp dword [ebp - 0xf0], 1
jg 0x1002dfbd
mov byte [ebp - 0x26], 0
push 0x2d8e
push 0x1724
push 1
push 0x505c
push 0x43e8
lea eax, [ebp - 0x26]
push eax
push 0x335c
push 1
call fcn.10028713
add esp, 0x20
jmp 0x1002df78
jmp 0x1002df1c
mov dword [ebp - 0x20], 0
jmp 0x1002dfd2
mov eax, dword [ebp - 0x20]
inc eax
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 4
jge 0x1002dfe8
mov eax, dword [ebp - 0x20]
mov dword [ebp + eax*4 - 0x444], 0x1b66bafc
jmp 0x1002dfcb
mov eax, dword [ebp - 0x180]
mov ecx, dword [ebp - 0x40]
mov dword [eax], ecx
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x350]
call fcn.1001fdc1
jmp 0x1002e389
mov eax, dword [ebp - 0x254]
mov dword [ebp - 0x31c], eax
mov eax, dword [ebp - 0x30c]
mov dword [ebp - 0x324], eax
mov eax, dword [ebp - 0x25c]
mov dword [ebp - 0x294], eax
mov eax, dword [ebp - 0x2f4]
mov dword [ebp - 0x310], eax
mov eax, dword [ebp - 0x264]
mov dword [ebp - 0x2a0], eax
mov eax, dword [ebp - 0x314]
mov dword [ebp - 0x338], eax
mov eax, dword [ebp - 0x270]
mov dword [ebp - 0x1f8], eax
mov eax, dword [ebp - 0x304]
mov dword [ebp - 0x200], eax
mov eax, dword [ebp - 0x27c]
mov dword [ebp - 0x208], eax
mov dword [ebp - 0x188], 0x3d71
mov dword [ebp - 0x288], 0x1000a044
cmp dword [ebp - 0x188], 0x3ef6
jle 0x1002e17c
and dword [ebp - 0xf8], 0
jmp 0x1002e0c1
mov eax, dword [ebp - 0xf8]
inc eax
mov dword [ebp - 0xf8], eax
cmp dword [ebp - 0xf8], 0x402a
jge 0x1002e17c
and dword [ebp - 0x100], 0
jmp 0x1002e0e7
mov eax, dword [ebp - 0x100]
inc eax
mov dword [ebp - 0x100], eax
cmp dword [ebp - 0x100], 0x4f77
jge 0x1002e177
and dword [ebp - 0x108], 0
jmp 0x1002e10d
mov eax, dword [ebp - 0x108]
inc eax
mov dword [ebp - 0x108], eax
cmp dword [ebp - 0x108], 0x6cf3
jge 0x1002e172
and dword [ebp - 0x80], 0
jmp 0x1002e126
mov eax, dword [ebp - 0x80]
inc eax
mov dword [ebp - 0x80], eax
cmp dword [ebp - 0x80], 0x44c7
jge 0x1002e170
mov esi, dword [ebp - 0xf8]
mov ecx, dword [ebp - 0x100]
shl esi, cl
mov eax, dword [ebp - 0x108]
cdq
idiv dword [ebp - 0x80]
xor esi, edx
mov eax, esi
cdq
mov dword [ebp - 0x2d8], eax
mov dword [ebp - 0x2d4], edx
push dword [ebp - 0x2d4]
push dword [ebp - 0x2d8]
mov ecx, 0x1008bbb8
call fcn.1001fc14
jmp 0x1002e11f
jmp 0x1002e100
jmp 0x1002e0da
jmp 0x1002e0b4
mov eax, dword [ebp - 0x31c]
mov dword [ebp - 0x38], eax
cmp dword [ebp - 0x188], 0x3b76
jge 0x1002e1a1
mov edx, dword [ebp - 0x288]
mov ecx, 0x1008bbb8
call fcn.100228da
mov eax, dword [ebp - 0x324]
mov dword [ebp - 0x190], eax
mov eax, dword [ebp - 0x294]
mov dword [ebp - 0x218], eax
mov eax, dword [ebp - 0x310]
mov dword [ebp - 0x1f0], eax
mov eax, dword [ebp - 0x2a0]
mov dword [ebp - 0x1e0], eax
mov eax, dword [ebp - 0x338]
mov dword [ebp - 0x1e8], eax
mov eax, dword [ebp - 0x1f8]
mov dword [ebp - 0x228], eax
mov eax, dword [ebp - 0x200]
mov dword [ebp - 0x1d8], eax
mov eax, dword [ebp - 0x208]
mov dword [ebp - 0x1d0], eax
mov eax, dword [ebp - 0x38]
mov dword [eax], 0
jmp 0x1002e217
mov eax, dword [ebp - 0x38]
mov eax, dword [eax]
inc eax
mov ecx, dword [ebp - 0x38]
mov dword [ecx], eax
mov eax, dword [ebp - 0x38]
cmp dword [eax], 0x1a
jg 0x1002e36e
mov dword [ebp - 0x210], 1
push 2
lea ecx, [ebp - 0x3b4]
call fcn.1001ff2e
mov dword [ebp - 4], 0xc
mov dword [ebp - 0x1cc], 0xfffffff8
push 1
lea ecx, [ebp - 0x39c]
call fcn.1001ff2e
mov byte [ebp - 4], 0xd
mov dword [ebp - 0x220], 3
mov dword [ebp - 0x18], 0
jmp 0x1002e276
mov eax, dword [ebp - 0x18]
inc eax
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 2
jge 0x1002e28f
push dword [ebp - 0x18]
lea ecx, [ebp - 0x3b4]
call fcn.1001ffcc
and dword [eax], 0
jmp 0x1002e26f
mov dword [ebp - 0x18], 0
jmp 0x1002e29f
mov eax, dword [ebp - 0x18]
inc eax
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 1
jge 0x1002e2b8
push dword [ebp - 0x18]
lea ecx, [ebp - 0x39c]
call fcn.1001ffcc
and dword [eax], 0
jmp 0x1002e298
mov eax, dword [ebp - 0x190]
mov dword [eax], 1
push 0x2034
lea eax, [ebp - 0x3b4]
push eax
push dword [ebp - 0x190]
push 0xcbc
lea eax, [ebp - 0x210]
push eax
push dword [ebp - 0x218]
push 0x617b
push dword [ebp - 0x38]
push 0x5e47
push 0
lea eax, [ebp - 0x39c]
push eax
lea eax, [ebp - 0x220]
push eax
push dword [ebp - 0x228]
lea eax, [ebp - 0x1cc]
push eax
push 0x2f21
push dword [ebp - 0x1d0]
push 1
push dword [ebp - 0x1d8]
push 0
push dword [ebp - 0x1e0]
push dword [ebp - 0x1e8]
push dword [ebp - 0x1f0]
push 0x58cd
push 0x7234
call fcn.1002782f
add esp, 0x60
mov byte [ebp - 4], 0xc
lea ecx, [ebp - 0x39c]
call fcn.1001ffb0
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x3b4]
call fcn.1001ffb0
jmp 0x1002e20c
jmp 0x1002e389
push 0x960
push 0x33f4
push 1
push 0x17cf
call fcn.100299a5
add esp, 0x10
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
mov esp, ebp
pop ebp
ret