Function at 0x1002607f
Capabilities:
Resume thread

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x1007e349
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x348
push esi
movzx eax, byte [ebp + 0x18]
test eax, eax
je 0x10026c75
mov eax, dword [ebp + 8]
mov dword [ebp - 0x1d8], eax
lea eax, [ebp + 0x24]
mov dword [ebp - 0x220], eax
lea eax, [ebp + 0x1c]
mov dword [ebp - 0x1d0], eax
lea eax, [ebp + 0x14]
mov dword [ebp - 0x248], eax
mov eax, dword [ebp + 0x10]
mov dword [ebp - 0x78], eax
mov dword [ebp - 0x68], 1
mov dword [ebp - 0x50], 0
mov dword [ebp - 0x1c], 0xffffffff
mov dword [ebp - 0x3c], 7
mov dword [ebp - 0x210], 0xbd5de1fc
push 1
lea ecx, [ebp - 0x94]
call fcn.1001673e
and dword [ebp - 4], 0
mov dword [ebp - 0x70], 0xffffffff
mov dword [ebp - 0x1dc], 0x1cc0c7fd
push 3
lea ecx, [ebp - 0x294]
call fcn.1001673e
mov byte [ebp - 4], 1
mov dword [ebp - 0x34], 0
jmp 0x1002613d
mov eax, dword [ebp - 0x34]
inc eax
mov dword [ebp - 0x34], eax
cmp dword [ebp - 0x34], 1
jge 0x10026156
push dword [ebp - 0x34]
lea ecx, [ebp - 0x94]
call fcn.100167dc
and dword [eax], 0
jmp 0x10026136
lea eax, [ebp - 0x34]
push eax
lea eax, [ebp - 0x294]
push eax
push 0x3f1e
push 1
call fcn.10025ffe
add esp, 0x10
cmp dword [ebp - 0x68], 0
je 0x10026317
cmp dword [ebp - 0x50], 0
je 0x100262f0
mov eax, dword [ebp - 0x70]
mov ecx, dword [ebp - 0x70]
inc ecx
mov dword [ebp - 0x70], ecx
test eax, eax
jne 0x100261ad
push 0
lea ecx, [ebp - 0x94]
call fcn.100167dc
cmp dword [eax], 0
jne 0x100261ad
and dword [ebp - 0x11c], 0
jmp 0x100261b7
mov dword [ebp - 0x11c], 1
mov esi, dword [ebp - 0x3c]
push 0
lea ecx, [ebp - 0x94]
call fcn.100167dc
sub esi, dword [eax]
cmp dword [ebp - 0x11c], esi
jge 0x100261dd
mov dword [ebp - 0x1a8], 1
jmp 0x100261e4
and dword [ebp - 0x1a8], 0
mov eax, dword [ebp - 0x1a8]
neg eax
cmp eax, 0xf7d9
jg 0x10026202
cmp dword [ebp - 0x68], 0
jne 0x10026202
and dword [ebp - 0x194], 0
jmp 0x1002620c
mov dword [ebp - 0x194], 1
mov eax, dword [ebp - 0x50]
cmp dword [ebp - 0x194], eax
jl 0x10026223
mov dword [ebp - 0xb8], 1
jmp 0x1002622a
and dword [ebp - 0xb8], 0
mov eax, dword [ebp - 0xb8]
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 0
jne 0x1002623d
cmp dword [ebp - 0x1c], 0
mov eax, 0x9e177c42
cmp eax, 0x2522abf7
jb 0x10026255
mov dword [ebp - 0x188], 1
jmp 0x1002625c
and dword [ebp - 0x188], 0
mov esi, dword [ebp - 0x68]
imul esi, dword [ebp - 0x188]
push 0
lea ecx, [ebp - 0x94]
call fcn.100167dc
cmp esi, dword [eax]
jne 0x10026283
mov dword [ebp - 0xc0], 1
jmp 0x1002628a
and dword [ebp - 0xc0], 0
mov eax, dword [ebp - 0x210]
cmp dword [ebp - 0xc0], eax
jg 0x100262a4
mov dword [ebp - 0x138], 1
jmp 0x100262ab
and dword [ebp - 0x138], 0
mov eax, dword [ebp - 0x3c]
imul eax, dword [ebp - 0x138]
test eax, eax
je 0x100262cf
cmp dword [ebp - 0x68], 0
je 0x100262cf
push 3
pop eax
test eax, eax
je 0x100262cf
mov dword [ebp - 0x7c], 1
jmp 0x100262d3
and dword [ebp - 0x7c], 0
push 0
lea ecx, [ebp - 0x94]
call fcn.100167dc
mov ecx, dword [ebp - 0x7c]
mov dword [eax], ecx
mov eax, dword [ebp - 0x7c]
sub eax, 0x3e91cb64
cmp eax, dword [ebp - 0x50]
mov eax, dword [ebp - 0x3c]
mov dword [ebp - 0x2d4], eax
push 0
lea ecx, [ebp - 0x94]
call fcn.100167dc
cmp dword [eax], 0
je 0x10026317
mov dword [ebp - 0xc8], 1
jmp 0x1002631e
and dword [ebp - 0xc8], 0
mov eax, dword [ebp - 0x50]
cmp dword [ebp - 0xc8], eax
jne 0x10026335
mov dword [ebp - 0x170], 1
jmp 0x1002633c
and dword [ebp - 0x170], 0
mov eax, dword [ebp - 0x170]
mov dword [ebp - 0x3c], eax
mov dword [ebp - 0x1c], 0
jmp 0x10026355
mov eax, dword [ebp - 0x1c]
inc eax
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 3
jg 0x1002660c
mov dword [ebp - 0x1e4], 0x6352
mov dword [ebp - 0x30], 3
mov dword [ebp - 0x60], 0
push 1
lea ecx, [ebp - 0x25c]
call fcn.1001673e
mov byte [ebp - 4], 2
mov dword [ebp - 0xa4], 0xffffffff
mov dword [ebp - 0x1ec], 0xfffffffd
mov dword [ebp - 0x1d4], 0x2c2642a2
mov dword [ebp - 0x44], 0
jmp 0x100263b6
mov eax, dword [ebp - 0x44]
inc eax
mov dword [ebp - 0x44], eax
cmp dword [ebp - 0x44], 1
jge 0x100263d2
push dword [ebp - 0x44]
lea ecx, [ebp - 0x25c]
call fcn.100167dc
mov dword [eax], 0xecbc59a6
jmp 0x100263af
mov eax, dword [ebp - 0x1dc]
mov dword [ebp - 0x1e4], eax
mov eax, dword [ebp - 0x60]
mov dword [ebp - 0x32c], eax
push 0
lea ecx, [ebp - 0x94]
call fcn.100167dc
mov eax, dword [ebp - 0x60]
mov dword [ebp - 0x2f8], eax
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0x2e0], eax
push 0
lea ecx, [ebp - 0x94]
call fcn.100167dc
mov eax, dword [eax]
mov dword [ebp - 0x60], eax
cmp dword [ebp - 0x60], 0
jne 0x1002642b
xor eax, eax
jne 0x1002642b
and dword [ebp - 0xd0], 0
jmp 0x10026435
mov dword [ebp - 0xd0], 1
push 0
lea ecx, [ebp - 0x294]
call fcn.100167dc
mov ecx, dword [ebp - 0xd0]
add ecx, dword [eax]
cmp ecx, 0xfffffffb
jae 0x1002646d
push 0
lea ecx, [ebp - 0x94]
call fcn.100167dc
cmp dword [eax], 0
je 0x1002646d
mov dword [ebp - 0x140], 1
jmp 0x10026474
and dword [ebp - 0x140], 0
mov eax, dword [ebp - 0x30]
imul eax, dword [ebp - 0x140]
cmp dword [ebp - 0x30], eax
jne 0x1002648f
mov dword [ebp - 0xd8], 1
jmp 0x10026496
and dword [ebp - 0xd8], 0
mov eax, dword [ebp - 0x3c]
cmp dword [ebp - 0xd8], eax
jge 0x100264ad
mov dword [ebp - 0x198], 1
jmp 0x100264b4
and dword [ebp - 0x198], 0
mov eax, dword [ebp - 0x30]
cmp dword [ebp - 0x198], eax
jl 0x100264cb
mov dword [ebp - 0xe0], 1
jmp 0x100264d2
and dword [ebp - 0xe0], 0
mov eax, dword [ebp - 0xe0]
mov dword [ebp - 0x30], eax
mov esi, dword [ebp - 0x30]
push 0
lea ecx, [ebp - 0x25c]
call fcn.100167dc
cmp esi, dword [eax]
jle 0x100264fb
mov dword [ebp - 0x148], 1
jmp 0x10026502
and dword [ebp - 0x148], 0
mov eax, dword [ebp - 0x148]
sub eax, dword [ebp - 0xa4]
jne 0x1002651c
mov dword [ebp - 0xe8], 1
jmp 0x10026523
and dword [ebp - 0xe8], 0
cmp dword [ebp - 0xe8], 0xfffffffa
jne 0x10026541
mov eax, 0x4adc
test eax, eax
je 0x10026541
mov dword [ebp - 0x178], 1
jmp 0x10026548
and dword [ebp - 0x178], 0
mov eax, dword [ebp - 0x1ec]
cmp dword [ebp - 0x178], eax
jl 0x10026562
mov dword [ebp - 0xf0], 1
jmp 0x10026569
and dword [ebp - 0xf0], 0
push 0
lea ecx, [ebp - 0x94]
call fcn.100167dc
mov ecx, dword [ebp - 0xf0]
cmp ecx, dword [eax]
je 0x1002658c
mov dword [ebp - 0x150], 1
jmp 0x10026593
and dword [ebp - 0x150], 0
mov eax, dword [ebp - 0x150]
mov dword [ebp - 0xa4], eax
mov esi, dword [ebp - 0xa4]
push 0
lea ecx, [ebp - 0x25c]
call fcn.100167dc
cmp esi, dword [eax]
jne 0x100265c2
mov dword [ebp - 0xf8], 1
jmp 0x100265c9
and dword [ebp - 0xf8], 0
cmp dword [ebp - 0xf8], 0xfffffff6
je 0x100265e5
push 7
pop eax
test eax, eax
je 0x100265e5
mov dword [ebp - 0x190], 1
jmp 0x100265ec
and dword [ebp - 0x190], 0
mov eax, dword [ebp - 0x190]
mov dword [ebp - 0x1d4], eax
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x25c]
call fcn.100167c0
jmp 0x1002634e
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x294]
call fcn.100167c0
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x94]
call fcn.100167c0
mov dword [ebp - 0x10], 0x4b811476
push 3
lea ecx, [ebp - 0x20c]
call fcn.1001673e
mov dword [ebp - 4], 3
mov dword [ebp - 0x48], 0x50d8
mov dword [ebp - 0x84], 0
mov dword [ebp - 0x9c], 0x732adaa2
mov dword [ebp - 0x58], 0
jmp 0x10026670
mov eax, dword [ebp - 0x58]
inc eax
mov dword [ebp - 0x58], eax
cmp dword [ebp - 0x58], 3
jge 0x1002668c
push dword [ebp - 0x58]
lea ecx, [ebp - 0x20c]
call fcn.100167dc
mov dword [eax], 1
jmp 0x10026669
mov eax, dword [ebp - 0x10]
mov dword [ebp - 0x318], eax
mov esi, dword [ebp - 0x10]
push 2
lea ecx, [ebp - 0x20c]
call fcn.100167dc
mov dword [eax], esi
push 1
lea ecx, [ebp - 0x20c]
call fcn.100167dc
mov ecx, dword [ebp - 0x10]
cmp dword [eax], ecx
jge 0x100266c7
mov dword [ebp - 0x100], 1
jmp 0x100266ce
and dword [ebp - 0x100], 0
imul eax, dword [ebp - 0x10], 0x7647
add eax, dword [ebp - 0x100]
sub eax, dword [ebp - 0x10]
cmp eax, dword [ebp - 0x48]
je 0x100266ef
mov dword [ebp - 0x1b8], 1
jmp 0x100266f6
and dword [ebp - 0x1b8], 0
push 2
lea ecx, [ebp - 0x20c]
call fcn.100167dc
mov ecx, dword [ebp - 0x48]
cmp dword [eax], ecx
jle 0x10026716
mov dword [ebp - 0x158], 1
jmp 0x1002671d
and dword [ebp - 0x158], 0
cmp dword [ebp - 0x158], 0xdb2b058e
jbe 0x10026735
mov dword [ebp - 0x108], 1
jmp 0x1002673c
and dword [ebp - 0x108], 0
mov eax, dword [ebp - 0x48]
cmp dword [ebp - 0x108], eax
jg 0x10026753
mov dword [ebp - 0x180], 1
jmp 0x1002675a
and dword [ebp - 0x180], 0
mov eax, dword [ebp - 0x180]
mov dword [ebp - 0x84], eax
cmp dword [ebp - 0x84], 0x7fea
jne 0x1002677e
mov dword [ebp - 0x1ac], 1
jmp 0x10026785
and dword [ebp - 0x1ac], 0
mov eax, dword [ebp - 0x10]
mov dword [ebp - 0x2b4], eax
mov eax, dword [ebp - 0x84]
mov dword [ebp - 0x9c], eax
mov eax, dword [ebp - 0x10]
cmp dword [ebp - 0x9c], eax
jg 0x100267b1
mov dword [ebp - 0x110], 1
jmp 0x100267b8
and dword [ebp - 0x110], 0
cmp dword [ebp - 0x110], 0xfffffff8
jle 0x10026901
mov dword [ebp - 0x74], 0x674643a6
mov dword [ebp - 0x1a4], 0xdf2ffa36
mov dword [ebp - 0x10], 0
jmp 0x100267e6
mov eax, dword [ebp - 0x10]
inc eax
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], 0x2e
je 0x100268ff
push 2
lea ecx, [ebp - 0x1fc]
call fcn.1001673e
mov byte [ebp - 4], 4
mov dword [ebp - 0x168], 0
push 0
lea eax, [ebp - 0x2b8]
push eax
lea eax, [ebp - 0x1fc]
push eax
call fcn.10027f3d
add esp, 0xc
push 1
lea ecx, [ebp - 0x1fc]
call fcn.100167dc
cmp dword [ebp - 0x48], 0x544bd1a6
jl 0x10026845
mov dword [ebp - 0x160], 1
jmp 0x1002684c
and dword [ebp - 0x160], 0
mov eax, dword [ebp - 0x74]
cmp dword [ebp - 0x160], eax
jg 0x10026863
mov dword [ebp - 0x118], 1
jmp 0x1002686a
and dword [ebp - 0x118], 0
mov eax, dword [ebp - 0x74]
inc eax
cmp eax, dword [ebp - 0x118]
jle 0x10026882
mov dword [ebp - 0x1c0], 1
jmp 0x10026889
and dword [ebp - 0x1c0], 0
push 1
lea ecx, [ebp - 0x1fc]
call fcn.100167dc
mov eax, dword [eax]
mov dword [ebp - 0x1a4], eax
mov eax, dword [ebp - 0x1a4]
sub eax, dword [ebp - 0x9c]
imul eax, eax, 0xfff6
test eax, eax
je 0x100268c1
push 0
lea ecx, [ebp - 0x1fc]
call fcn.100167dc
mov eax, dword [ebp - 0x74]
cmp dword [ebp - 0x168], eax
jge 0x100268d8
mov dword [ebp - 0x120], 1
jmp 0x100268df
and dword [ebp - 0x120], 0
mov eax, dword [ebp - 0x120]
mov dword [ebp - 0x168], eax
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x1fc]
call fcn.100167c0
jmp 0x100267df
jmp 0x10026937
mov dword [ebp - 0x1c8], 0
mov dword [ebp - 0x244], 0x90ce61fa
push 0x73e1
push 0x25a5
lea eax, [ebp - 0x244]
push eax
lea eax, [ebp - 0x1c8]
push eax
push 0
call fcn.10027a5c
add esp, 0x14
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x20c]
call fcn.100167c0
mov eax, dword [ebp - 0x220]
mov eax, dword [eax]
shl eax, 4
mov ecx, dword [ebp - 0x1d0]
mov ecx, dword [ecx]
lea eax, [eax + ecx*8 + 0x10085848]
mov ecx, dword [ebp - 0x248]
mov ecx, dword [ecx]
mov edx, dword [ebp - 0x78]
mov eax, dword [eax + ecx*4]
mov dword [edx], eax
mov dword [ebp - 0x2c], 0xfffffff8
mov dword [ebp - 0x4c], 0
jmp 0x10026987
mov eax, dword [ebp - 0x4c]
inc eax
mov dword [ebp - 0x4c], eax
cmp dword [ebp - 0x4c], 3
jge 0x1002699d
mov eax, dword [ebp - 0x4c]
mov dword [ebp + eax*4 - 0x21c], 1
jmp 0x10026980
mov byte [ebp - 0x21], 0
movzx eax, byte [ebp - 0x21]
test eax, eax
je 0x100269bd
push 0x3306
push 0x20ba
push 0
call fcn.100277f9
add esp, 0xc
mov dword [ebp - 0x2c], 0
jmp 0x100269cd
mov eax, dword [ebp - 0x2c]
inc eax
mov dword [ebp - 0x2c], eax
cmp dword [ebp - 0x2c], 2
jg 0x10026b97
push 2
lea ecx, [ebp - 0x130]
call fcn.1001673e
mov dword [ebp - 4], 5
mov dword [ebp - 0x54], 0
jmp 0x100269fb
mov eax, dword [ebp - 0x54]
inc eax
mov dword [ebp - 0x54], eax
cmp dword [ebp - 0x54], 2
jge 0x10026a17
push dword [ebp - 0x54]
lea ecx, [ebp - 0x130]
call fcn.100167dc
mov dword [eax], 0xfffffff7
jmp 0x100269f4
push 1
lea ecx, [ebp - 0x130]
call fcn.100167dc
and dword [eax], 0
jmp 0x10026a4d
push 1
lea ecx, [ebp - 0x130]
call fcn.100167dc
mov dword [ebp - 0xb0], eax
mov eax, dword [ebp - 0xb0]
mov eax, dword [eax]
inc eax
mov ecx, dword [ebp - 0xb0]
mov dword [ecx], eax
push 1
lea ecx, [ebp - 0x130]
call fcn.100167dc
cmp dword [eax], 2
jg 0x10026b83
mov dword [ebp - 0xbc], 0xffffffff
push 0
lea ecx, [ebp - 0x130]
call fcn.100167dc
cmp dword [eax], 0
je 0x10026add
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x21c], 1
jne 0x10026a9b
mov dword [ebp - 0xb4], 1
jmp 0x10026aa2
and dword [ebp - 0xb4], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0xb4]
sub ecx, dword [ebp + eax - 0x21c]
mov dword [ebp - 0xbc], ecx
mov eax, dword [ebp - 0xbc]
mov dword [ebp - 0x2c0], eax
or eax, 0xffffffff
cmp eax, 0xebd004dd
jae 0x10026add
mov dword [ebp - 0xc4], 1
jmp 0x10026ae4
and dword [ebp - 0xc4], 0
push 1
lea ecx, [ebp - 0x130]
call fcn.100167dc
mov eax, dword [eax]
cmp eax, dword [ebp - 0xc4]
jle 0x10026b07
mov dword [ebp - 0xcc], 1
jmp 0x10026b0e
and dword [ebp - 0xcc], 0
cmp dword [ebp - 0xcc], 5
jae 0x10026b23
mov dword [ebp - 0xd4], 1
jmp 0x10026b2a
and dword [ebp - 0xd4], 0
mov eax, dword [ebp - 0x2c]
mov ecx, dword [ebp - 0x2c]
mov ecx, dword [ebp + ecx*4 - 0x21c]
add ecx, dword [ebp - 0xd4]
cmp dword [ebp + eax*4 - 0x21c], ecx
jle 0x10026b61
push 1
lea ecx, [ebp - 0x130]
call fcn.100167dc
cmp dword [eax], 0
jne 0x10026b61
and dword [ebp - 0xdc], 0
jmp 0x10026b6b
mov dword [ebp - 0xdc], 1
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0xdc]
mov dword [ebp + eax - 0x21c], ecx
jmp 0x10026a29
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x130]
call fcn.100167c0
jmp 0x100269c6
mov eax, dword [ebp - 0x1d8]
mov eax, dword [eax + 0x24]
and eax, 0x4000000
je 0x10026c70
mov dword [ebp - 0xe4], 0x71d976ff
mov dword [ebp - 0x38], 0x2961c0f8
mov dword [ebp - 0x230], 0x44142b91
push 1
lea ecx, [ebp - 0x2a0]
call fcn.1001673e
mov dword [ebp - 4], 6
push 0x3eef
push 0x86
push 0
lea eax, [ebp - 0x2c8]
push eax
lea eax, [ebp - 0x2a0]
push eax
call fcn.1002ac79
add esp, 0x14
lea eax, [ebp - 0x2a0]
push eax
lea eax, [ebp - 0x38]
push eax
push 0x1e2e
lea eax, [ebp - 0x230]
push eax
lea eax, [ebp - 0xe4]
push eax
push 0
call fcn.1002e776
add esp, 0x18
mov dword [ebp - 0x38], 0
jmp 0x10026c34
mov eax, dword [ebp - 0x38]
inc eax
mov dword [ebp - 0x38], eax
cmp dword [ebp - 0x38], 0
jg 0x10026c52
push 0x854
push 0
lea eax, [ebp - 0xe4]
push eax
call fcn.10027d7e
add esp, 0xc
jmp 0x10026c2d
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x2a0]
call fcn.100167c0
mov eax, dword [ebp - 0x78]
mov eax, dword [eax]
or eax, 0x200
mov ecx, dword [ebp - 0x78]
mov dword [ecx], eax
jmp 0x100275b0
mov eax, dword [ebp + 0x20]
mov dword [ebp - 0x1e0], eax
mov eax, dword [ebp + 0x2c]
mov dword [ebp - 0x200], eax
mov eax, dword [ebp + 0xc]
mov dword [ebp - 0x18c], eax
mov eax, dword [ebp + 0x28]
mov dword [ebp - 0xa0], eax
mov eax, dword [ebp - 0x1e0]
mov eax, dword [eax + 0x38]
mov dword [ebp - 0x98], eax
mov dword [ebp - 0x288], 0x8eac
mov dword [ebp - 0x284], 0x8eac
mov dword [ebp - 0x280], 0x8eac
mov dword [ebp - 0x27c], 0x8eac
lea ecx, [ebp - 0xa5]
call fcn.10008a93
push eax
lea eax, [ebp - 0x278]
push eax
lea eax, [ebp - 0x288]
push eax
lea ecx, [ebp - 0x344]
call fcn.100167eb
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0x2ac]
call fcn.1001679a
mov dword [ebp - 4], 7
mov dword [ebp - 0x40], 0xcb50bf34
mov dword [ebp - 0x2d0], 0x7b051af7
mov byte [ebp - 0x22], 0
movzx eax, byte [ebp - 0x22]
test eax, eax
je 0x10026d31
push 0
call dword [sym.imp.KERNEL32.dll_ResumeThread]
mov dword [ebp - 0x40], 3
jmp 0x10026d41
mov eax, dword [ebp - 0x40]
dec eax
mov dword [ebp - 0x40], eax
cmp dword [ebp - 0x40], 0
jl 0x10026e82
mov dword [ebp - 0x20], 3
mov dword [ebp - 0x2b0], 4
mov dword [ebp - 0x20], 3
jmp 0x10026d6c
mov eax, dword [ebp - 0x20]
dec eax
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 0
jl 0x10026e24
mov dword [ebp - 0x5c], 0
jmp 0x10026d86
mov eax, dword [ebp - 0x5c]
inc eax
mov dword [ebp - 0x5c], eax
cmp dword [ebp - 0x5c], 2
jge 0x10026d9c
mov eax, dword [ebp - 0x5c]
mov dword [ebp + eax*4 - 0x1a0], 0x4caf14c9
jmp 0x10026d7f
push 4
pop eax
shl eax, 0
mov dword [ebp + eax - 0x1a0], 3
jmp 0x10026dca
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x1a0]
dec eax
push 4
pop ecx
shl ecx, 0
mov dword [ebp + ecx - 0x1a0], eax
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x1a0], 0
jl 0x10026e1f
push 4
pop eax
shl eax, 0
push dword [ebp + eax - 0x1a0]
lea ecx, [ebp - 0x2ac]
call fcn.100167dc
mov esi, eax
push dword [ebp - 0x40]
lea ecx, [ebp - 0x2ac]
call fcn.100167dc
mov ecx, dword [esi]
mov dword [eax], ecx
mov byte [ebp - 0x23], 0
push 0x7b26
push 0
lea eax, [ebp - 0x23]
push eax
call fcn.100289ad
add esp, 0xc
jmp 0x10026daf
jmp 0x10026d65
mov dword [ebp - 0x20], 3
jmp 0x10026e34
mov eax, dword [ebp - 0x20]
dec eax
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 0
jl 0x10026e7d
mov dword [ebp - 0x64], 0
jmp 0x10026e4a
mov eax, dword [ebp - 0x64]
inc eax
mov dword [ebp - 0x64], eax
cmp dword [ebp - 0x64], 1
jge 0x10026e60
mov eax, dword [ebp - 0x64]
mov dword [ebp + eax*4 - 0xec], 0xfffffff7
jmp 0x10026e43
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xec]
dec eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0xec], eax
jmp 0x10026e2d
jmp 0x10026d3a
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x2ac]
call fcn.100167c0
cmp dword [ebp - 0x98], 0
jle 0x100275b0
mov dword [ebp - 0x250], 0x692beaa3
mov dword [ebp - 0x2dc], 0x2d149fe
mov dword [ebp - 0x80], 0xf69f7fd1
mov dword [ebp - 0x1f0], 0xffffffff
mov dword [ebp - 0x328], 8
mov dword [ebp - 0x324], 8
mov dword [ebp - 0x320], 8
mov dword [ebp - 0x31c], 8
push 1
lea ecx, [ebp - 0x22c]
call fcn.1001673e
mov dword [ebp - 4], 8
mov dword [ebp - 0x1e8], 1
mov dword [ebp - 0x240], 2
mov dword [ebp - 0x18], 0
jmp 0x10026f23
mov eax, dword [ebp - 0x18]
inc eax
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 1
jge 0x10026f39
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x24c], 0x464f16ef
jmp 0x10026f1c
mov dword [ebp - 0x18], 0
jmp 0x10026f49
mov eax, dword [ebp - 0x18]
inc eax
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 2
jge 0x10026f5f
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x354], 3
jmp 0x10026f42
push 0x1489
lea eax, [ebp - 0x18]
push eax
lea eax, [ebp - 0x22c]
push eax
push 0x500e
push 0
call fcn.100276cc
add esp, 0x14
cmp dword [ebp - 0x250], 0
je 0x1002700b
mov dword [ebp - 0x2e4], 0x579253a3
mov dword [ebp - 0x2ec], 0xfffffffc
push 2
lea ecx, [ebp - 0x304]
call fcn.1001673e
mov byte [ebp - 4], 9
mov dword [ebp - 0x2f4], 0
lea eax, [ebp - 0x304]
push eax
push 0x420f
push 0
push 0x7bd5
lea eax, [ebp - 0x2d8]
push eax
call fcn.10025668
add esp, 0x14
push 0x2d7f
lea eax, [ebp - 0x22c]
push eax
push 0x109b
push 0
call fcn.10024d29
add esp, 0x10
mov byte [ebp - 4], 8
lea ecx, [ebp - 0x304]
call fcn.100167c0
jmp 0x100271de
push 3
lea ecx, [ebp - 0x274]
call fcn.1001673e
mov byte [ebp - 4], 0xa
mov dword [ebp - 0x134], 0x9d0863e8
lea eax, [ebp - 0x274]
push eax
push 0x48bb
lea eax, [ebp - 0x2e8]
push eax
push 1
call fcn.10024d29
add esp, 0x10
mov byte [ebp - 0x24], 0
movzx eax, byte [ebp - 0x24]
test eax, eax
je 0x10027068
push 0
push 0x56cf
push 0x59b0
push 0x6593
call fcn.10028117
add esp, 0x10
push 0
lea ecx, [ebp - 0x22c]
call fcn.100167dc
cmp dword [eax], 0
jne 0x100271bc
xor eax, eax
inc eax
je 0x10027095
cmp dword [ebp - 0x80], 0
je 0x10027095
mov dword [ebp - 0xf4], 1
jmp 0x1002709c
and dword [ebp - 0xf4], 0
mov eax, dword [ebp - 0x1e8]
cmp dword [ebp - 0xf4], eax
jg 0x100270b6
mov dword [ebp - 0xfc], 1
jmp 0x100270bd
and dword [ebp - 0xfc], 0
mov eax, dword [ebp - 0xfc]
neg eax
cmp eax, 8
jbe 0x100270d6
mov dword [ebp - 0x104], 1
jmp 0x100270dd
and dword [ebp - 0x104], 0
mov eax, dword [ebp - 0x240]
cmp dword [ebp - 0x104], eax
jg 0x100270f7
mov dword [ebp - 0x10c], 1
jmp 0x100270fe
and dword [ebp - 0x10c], 0
xor esi, esi
inc esi
sub esi, dword [ebp - 0x10c]
push 0
lea ecx, [ebp - 0x274]
call fcn.100167dc
cmp esi, dword [eax]
jg 0x10027124
mov dword [ebp - 0x114], 1
jmp 0x1002712b
and dword [ebp - 0x114], 0
mov eax, dword [ebp - 0x1f0]
cmp dword [ebp - 0x114], eax
jle 0x10027145
mov dword [ebp - 0xac], 1
jmp 0x1002714c
and dword [ebp - 0xac], 0
xor esi, esi
sub esi, dword [ebp - 0xac]
push 0
lea ecx, [ebp - 0x22c]
call fcn.100167dc
add esi, dword [eax]
push 1
lea ecx, [ebp - 0x274]
call fcn.100167dc
cmp esi, dword [eax]
jge 0x10027180
mov dword [ebp - 0x124], 1
jmp 0x10027187
and dword [ebp - 0x124], 0
mov eax, dword [ebp - 0x124]
mov dword [ebp - 0x134], eax
xor eax, eax
sub eax, dword [ebp - 0x134]
je 0x100271a3
cmp dword [ebp - 0x80], 0
jne 0x100271bc
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x24c], 0
jne 0x100271bc
and dword [ebp - 0x13c], 0
jmp 0x100271c6
mov dword [ebp - 0x13c], 1
mov eax, dword [ebp - 0x13c]
mov dword [ebp - 0x80], eax
mov byte [ebp - 4], 8
lea ecx, [ebp - 0x274]
call fcn.100167c0
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x22c]
call fcn.100167c0
push 4
push 0x1000
push dword [ebp - 0x98]
mov eax, dword [ebp - 0x18c]
mov ecx, dword [ebp - 0x200]
add ecx, dword [eax + 0xc]
push ecx
push 0x81d9
push 0x5d82
call fcn.10024281
pop ecx
pop ecx
call eax
mov ecx, dword [ebp - 0xa0]
mov dword [ecx], eax
mov dword [ebp - 0x1b0], 0x692beaa3
mov dword [ebp - 0x2bc], 0x2d149fe
mov dword [ebp - 0x88], 0xf69f7fd1
mov dword [ebp - 0x1c4], 0xffffffff
mov dword [ebp - 0x33c], 8
mov dword [ebp - 0x338], 8
mov dword [ebp - 0x334], 8
mov dword [ebp - 0x330], 8
push 1
lea ecx, [ebp - 0x23c]
call fcn.1001673e
mov dword [ebp - 4], 0xb
mov dword [ebp - 0x1b4], 1
mov dword [ebp - 0x1bc], 2
mov dword [ebp - 0x14], 0
jmp 0x100272ad
mov eax, dword [ebp - 0x14]
inc eax
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 1
jge 0x100272c3
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x1cc], 0x464f16ef
jmp 0x100272a6
mov dword [ebp - 0x14], 0
jmp 0x100272d3
mov eax, dword [ebp - 0x14]
inc eax
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 2
jge 0x100272e9
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x34c], 3
jmp 0x100272cc
push 0
lea eax, [ebp - 0x23c]
push eax
push 0x358c
lea eax, [ebp - 0x14]
push eax
call fcn.1002804b
add esp, 0x10
cmp dword [ebp - 0x1b0], 0
je 0x10027397
mov dword [ebp - 0x308], 0x579253a3
mov dword [ebp - 0x2c4], 0xfffffffc
push 2
lea ecx, [ebp - 0x314]
call fcn.1001673e
mov byte [ebp - 4], 0xc
mov dword [ebp - 0x2f0], 0
mov dword [ebp - 0x6c], 0
jmp 0x1002734f
mov eax, dword [ebp - 0x6c]
inc eax
mov dword [ebp - 0x6c], eax
cmp dword [ebp - 0x6c], 2
jge 0x10027368
push dword [ebp - 0x6c]
lea ecx, [ebp - 0x314]
call fcn.100167dc
or dword [eax], 0xffffffff
jmp 0x10027348
lea eax, [ebp - 0x23c]
push eax
push 0x1ad3
push 0
push 0x4b67
call fcn.10029f64
add esp, 0x10
mov byte [ebp - 4], 0xb
lea ecx, [ebp - 0x314]
call fcn.100167c0
jmp 0x10027567
push 3
lea ecx, [ebp - 0x268]
call fcn.1001673e
mov byte [ebp - 4], 0xd
mov dword [ebp - 0x17c], 0x9d0863e8
lea eax, [ebp - 0x2cc]
push eax
lea eax, [ebp - 0x268]
push eax
push 0x4aff
push 0
push 0x2037
call fcn.10027c5f
add esp, 0x14
mov byte [ebp - 0x25], 0
movzx eax, byte [ebp - 0x25]
test eax, eax
je 0x100273e8
push 0
call fcn.10027754
pop ecx
push 0
lea ecx, [ebp - 0x23c]
call fcn.100167dc
cmp dword [eax], 0
jne 0x10027542
xor eax, eax
inc eax
je 0x10027418
cmp dword [ebp - 0x88], 0
je 0x10027418
mov dword [ebp - 0x144], 1
jmp 0x1002741f
and dword [ebp - 0x144], 0
mov eax, dword [ebp - 0x1b4]
cmp dword [ebp - 0x144], eax
jg 0x10027439
mov dword [ebp - 0x14c], 1
jmp 0x10027440
and dword [ebp - 0x14c], 0
mov eax, dword [ebp - 0x14c]
neg eax
cmp eax, 8
jbe 0x10027459
mov dword [ebp - 0x154], 1
jmp 0x10027460
and dword [ebp - 0x154], 0
mov eax, dword [ebp - 0x1bc]
cmp dword [ebp - 0x154], eax
jg 0x1002747a
mov dword [ebp - 0x15c], 1
jmp 0x10027481
and dword [ebp - 0x15c], 0
xor esi, esi
inc esi
sub esi, dword [ebp - 0x15c]
push 0
lea ecx, [ebp - 0x268]
call fcn.100167dc
cmp esi, dword [eax]
jg 0x100274a7
mov dword [ebp - 0x164], 1
jmp 0x100274ae
and dword [ebp - 0x164], 0
mov eax, dword [ebp - 0x1c4]
cmp dword [ebp - 0x164], eax
jle 0x100274c8
mov dword [ebp - 0x16c], 1
jmp 0x100274cf
and dword [ebp - 0x16c], 0
xor esi, esi
sub esi, dword [ebp - 0x16c]
push 0
lea ecx, [ebp - 0x23c]
call fcn.100167dc
add esi, dword [eax]
push 1
lea ecx, [ebp - 0x268]
call fcn.100167dc
cmp esi, dword [eax]
jge 0x10027503
mov dword [ebp - 0x174], 1
jmp 0x1002750a
and dword [ebp - 0x174], 0
mov eax, dword [ebp - 0x174]
mov dword [ebp - 0x17c], eax
xor eax, eax
sub eax, dword [ebp - 0x17c]
je 0x10027529
cmp dword [ebp - 0x88], 0
jne 0x10027542
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x1cc], 0
jne 0x10027542
and dword [ebp - 0x184], 0
jmp 0x1002754c
mov dword [ebp - 0x184], 1
mov eax, dword [ebp - 0x184]
mov dword [ebp - 0x88], eax
mov byte [ebp - 4], 0xb
lea ecx, [ebp - 0x268]
call fcn.100167c0
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x23c]
call fcn.100167c0
lea eax, [ebp - 0x18c]
push eax
push 0
push 0x743d
lea eax, [ebp - 0xa0]
push eax
push 0x39d8
call fcn.100275bf
add esp, 0x14
push dword [ebp - 0x98]
push 0
mov eax, dword [ebp - 0xa0]
push dword [eax]
call fcn.100243d7
add esp, 0xc
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop esi
mov esp, ebp
pop ebp
ret