Function at 0x10028aa6
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x10058039
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
push ecx
sub esp, 0x524
push ebx
push esi
push edi
mov dword [ebp - 0x10], esp
movzx eax, byte [ebp + 0x18]
test eax, eax
je 0x1002ada3
mov eax, dword [ebp + 0x1c]
mov dword [ebp - 0x2e0], eax
mov eax, dword [ebp + 8]
mov dword [ebp - 0x330], eax
mov eax, dword [ebp + 0x14]
mov dword [ebp - 0x2d0], eax
mov eax, dword [ebp + 0xc]
mov dword [ebp - 0x2d8], eax
lea eax, [ebp + 0x10]
mov dword [ebp - 0x2dc], eax
mov eax, dword [ebp - 0x2dc]
movzx eax, byte [eax]
test eax, eax
je 0x10028c7e
mov eax, dword [ebp - 0x2d0]
mov dword [ebp - 0x158], eax
mov eax, dword [ebp - 0x2d8]
mov dword [ebp - 0x250], eax
mov eax, dword [0x100724d0]
and eax, 1
jne 0x10028b61
mov eax, dword [0x100724d0]
or eax, 1
mov dword [0x100724d0], eax
and dword [ebp - 4], 0
mov ecx, 0x1007246c
call fcn.1000e43b
push 0x10058418
call fcn.10039ed9
pop ecx
or dword [ebp - 4], 0xffffffff
movzx eax, byte [0x10070f85]
test eax, eax
je 0x10028bd3
mov ecx, 0x1007246c
call fcn.10036dcc
movzx eax, al
test eax, eax
jne 0x10028bd3
push dword [ebp - 0x158]
lea eax, [ebp - 0x1b8]
push eax
mov ecx, 0x1007246c
call fcn.1000e500
lea eax, [ebp - 0x3e0]
push eax
mov ecx, 0x1007246c
call fcn.1000e4f2
push eax
lea ecx, [ebp - 0x1b8]
call fcn.1000e75d
movzx eax, al
test eax, eax
je 0x10028bd3
lea ecx, [ebp - 0x1b8]
call fcn.10036dd5
mov ecx, dword [ebp - 0x250]
mov eax, dword [eax + 4]
mov dword [ecx], eax
jmp 0x1002adbb
mov eax, dword [ebp - 0x158]
push dword [eax]
lea eax, [ebp - 0x4a0]
push eax
call fcn.1000cb55
pop ecx
pop ecx
mov dword [ebp - 4], 1
lea eax, [ebp - 0x4a0]
push eax
call fcn.100288dd
pop ecx
mov dword [ebp - 0x258], eax
movzx eax, byte [0x10070f85]
test eax, eax
je 0x10028c1f
mov ecx, 0x1007246c
call fcn.10036dcc
movzx eax, al
test eax, eax
jne 0x10028c48
push dword [ebp - 0x158]
mov ecx, 0x1007246c
call fcn.10036d8e
mov ecx, dword [ebp - 0x258]
mov dword [eax], ecx
push 0x10070f85
push 1
push 1
call fcn.1002890a
add esp, 0xc
mov eax, dword [ebp - 0x250]
mov ecx, dword [ebp - 0x258]
mov dword [eax], ecx
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x4a0]
call fcn.1000e2ce
jmp 0x1002adbb
mov eax, dword [ebp - 0x2e0]
mov dword [ebp - 0x210], eax
mov eax, dword [ebp - 0x330]
mov dword [ebp - 0x238], eax
mov dword [ebp - 0x240], 0x3aa9
mov dword [ebp - 0x2b8], str.obqpbps_irtuduk_uxdhyp_vwvvmxm
cmp dword [ebp - 0x240], 0x3bd8
jle 0x10028dc9
and dword [ebp - 0x108], 0
jmp 0x10028cd0
mov eax, dword [ebp - 0x108]
inc eax
mov dword [ebp - 0x108], eax
cmp dword [ebp - 0x108], 0x4830
jge 0x10028dc9
and dword [ebp - 0xd0], 0
jmp 0x10028cf6
mov eax, dword [ebp - 0xd0]
inc eax
mov dword [ebp - 0xd0], eax
cmp dword [ebp - 0xd0], 0x3cdc
jge 0x10028dc4
and dword [ebp - 0x124], 0
jmp 0x10028d1c
mov eax, dword [ebp - 0x124]
inc eax
mov dword [ebp - 0x124], eax
cmp dword [ebp - 0x124], 0x578f
jge 0x10028dbf
and dword [ebp - 0x12c], 0
jmp 0x10028d42
mov eax, dword [ebp - 0x12c]
inc eax
mov dword [ebp - 0x12c], eax
cmp dword [ebp - 0x12c], 0x6304
jge 0x10028dba
mov eax, dword [ebp - 0xd0]
imul eax, dword [ebp - 0x124]
imul eax, dword [ebp - 0x12c]
mov ecx, dword [ebp - 0x108]
sub ecx, eax
mov eax, ecx
cdq
mov dword [ebp - 0x2ec], eax
mov dword [ebp - 0x2e8], edx
push dword [ebp - 0x2e8]
push dword [ebp - 0x2ec]
lea ecx, [ebp - 0x50c]
call fcn.10002407
pop ecx
pop ecx
mov dword [ebp - 0x348], eax
mov ecx, dword [ebp - 0x348]
call fcn.1000e139
push eax
call fcn.10039f03
pop ecx
lea ecx, [ebp - 0x50c]
call fcn.1000e12f
jmp 0x10028d35
jmp 0x10028d0f
jmp 0x10028ce9
jmp 0x10028cc3
mov dword [ebp - 0x288], 0x847dfa86
mov dword [ebp - 0x284], 0x847dfa86
mov dword [ebp - 0x280], 0x847dfa86
mov dword [ebp - 0x27c], 0x847dfa86
mov dword [ebp - 0x28], 0xf0b96ca2
mov dword [ebp - 0x31c], 1
mov dword [ebp - 0xb0], 0
jmp 0x10028e1b
mov eax, dword [ebp - 0xb0]
inc eax
mov dword [ebp - 0xb0], eax
cmp dword [ebp - 0xb0], 2
jge 0x10028e37
mov eax, dword [ebp - 0xb0]
mov dword [ebp + eax*4 - 0x14c], 0xfffffffd
jmp 0x10028e0e
mov dword [ebp - 0x28], 3
jmp 0x10028e47
mov eax, dword [ebp - 0x28]
dec eax
mov dword [ebp - 0x28], eax
cmp dword [ebp - 0x28], 0
jl 0x100291e7
mov dword [ebp - 0x14], 7
mov dword [ebp - 0x2c8], 0xffffffff
mov dword [ebp - 0x11c], 0
jmp 0x10028e7b
mov eax, dword [ebp - 0x11c]
inc eax
mov dword [ebp - 0x11c], eax
cmp dword [ebp - 0x11c], 2
jge 0x10028e97
mov eax, dword [ebp - 0x11c]
mov dword [ebp + eax*4 - 0x374], 0xfffffffc
jmp 0x10028e6e
mov dword [ebp - 0x14], 0
jmp 0x10028ea7
mov eax, dword [ebp - 0x14]
inc eax
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 3
jg 0x10029004
mov dword [ebp - 0x358], 0
mov dword [ebp - 0xb8], 0
jmp 0x10028ed4
mov eax, dword [ebp - 0xb8]
inc eax
mov dword [ebp - 0xb8], eax
cmp dword [ebp - 0xb8], 4
jge 0x10028ef0
mov eax, dword [ebp - 0xb8]
mov dword [ebp + eax*4 - 0x458], 0xb3bfa32a
jmp 0x10028ec7
mov eax, dword [ebp - 0x28]
cmp dword [ebp + eax*4 - 0x288], 0x4163
jne 0x10028f0c
mov dword [ebp - 0x16c], 1
jmp 0x10028f13
and dword [ebp - 0x16c], 0
push 4
pop eax
imul eax, eax, 3
mov ecx, dword [ebp - 0x16c]
mov dword [ebp + eax - 0x458], ecx
cmp dword [ebp - 0x16c], 0
je 0x10028f6c
mov eax, dword [ebp - 0x28]
mov dword [ebp - 0x260], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x260]
mov dword [ebp + eax - 0x14c], ecx
push 4
pop eax
imul eax, eax, 3
mov eax, dword [ebp + eax - 0x458]
cmp dword [ebp - 0x260], eax
jne 0x10028f6c
mov dword [ebp - 0x268], 1
jmp 0x10028f73
and dword [ebp - 0x268], 0
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x268]
inc ecx
sub ecx, dword [ebp + eax*4 - 0x288]
cmp ecx, 0xffff
je 0x10028f98
mov dword [ebp - 0x28c], 1
jmp 0x10028f9f
and dword [ebp - 0x28c], 0
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x14]
add ecx, dword [ebp - 0x28c]
cmp ecx, dword [ebp + eax*4 - 0x288]
jle 0x10028fc0
mov dword [ebp - 0x350], 1
jmp 0x10028fc7
and dword [ebp - 0x350], 0
mov eax, dword [ebp - 0x14]
mov dword [ebp - 0x3fc], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x288]
mov dword [ebp - 0x244], eax
mov eax, dword [ebp - 0x14]
mov ecx, dword [ebp - 0x244]
mov dword [ebp + eax*4 - 0x288], ecx
mov eax, dword [ebp - 0x244]
mov dword [ebp - 0x358], eax
jmp 0x10028ea0
mov dword [ebp - 0x14], 1
jmp 0x10029014
mov eax, dword [ebp - 0x14]
dec eax
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 0
jl 0x100291e2
mov dword [ebp - 0x128], 0xfffffffb
mov dword [ebp - 0x31c], 0xbe1552b9
mov eax, 0xaa43
test eax, eax
jne 0x10029054
push 4
pop eax
imul eax, eax, 3
cmp dword [ebp + eax - 0x288], 0
jne 0x10029054
and dword [ebp - 0x248], 0
jmp 0x1002905e
mov dword [ebp - 0x248], 1
mov eax, dword [ebp - 0x14]
add eax, dword [ebp - 0x248]
jne 0x10029070
cmp dword [ebp - 0x128], 0
cmp dword [ebp - 0x14], 0x44ed25e4
jg 0x10029085
mov dword [ebp - 0x17c], 1
jmp 0x1002908c
and dword [ebp - 0x17c], 0
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp + eax*4 - 0x14c]
cmp dword [ebp - 0x17c], eax
jl 0x100290a2
cmp dword [ebp - 0x28], 0
mov eax, dword [ebp - 0x14]
mov ecx, dword [ebp - 0x128]
cmp ecx, dword [ebp + eax*4 - 0x14c]
jle 0x100290c0
mov dword [ebp - 0x204], 1
jmp 0x100290c7
and dword [ebp - 0x204], 0
mov eax, dword [ebp - 0x204]
mov dword [ebp - 0x128], eax
cmp dword [ebp - 0x14], 0
jne 0x100290f1
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0x288], 0
jne 0x100290f1
and dword [ebp - 0x320], 0
jmp 0x100290fb
mov dword [ebp - 0x320], 1
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x14c]
mov dword [ebp - 0x43c], eax
mov eax, dword [ebp - 0x2c8]
mov dword [ebp - 0x404], eax
mov eax, dword [ebp - 0x14]
mov ecx, dword [ebp - 0x14]
imul ecx, dword [ebp + ecx*4 - 0x14c], 0x5604
cmp ecx, dword [ebp + eax*4 - 0x14c]
jl 0x10029142
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x14c], 0
mov eax, 0xe4a839bb
cmp eax, 0xf7fae0cd
jne 0x1002915a
mov dword [ebp - 0x184], 1
jmp 0x10029161
and dword [ebp - 0x184], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x14]
mov ecx, dword [ebp + ecx*4 - 0x14c]
add ecx, dword [ebp - 0x184]
cmp ecx, dword [ebp + eax - 0x288]
je 0x1002918c
mov dword [ebp - 0x278], 1
jmp 0x10029193
and dword [ebp - 0x278], 0
mov eax, dword [ebp - 0x278]
add eax, 0x418d0dca
push 4
pop ecx
shl ecx, 0
mov dword [ebp + ecx - 0x374], eax
cmp dword [ebp - 0x128], 0xcf62392e
jae 0x100291c3
mov dword [ebp - 0x18c], 1
jmp 0x100291ca
and dword [ebp - 0x18c], 0
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x18c]
mov dword [ebp + eax - 0x374], ecx
jmp 0x1002900d
jmp 0x10028e40
mov byte [ebp - 0x45], 0
push 1
push 1
lea eax, [ebp - 0x45]
push eax
call fcn.10027715
add esp, 0xc
mov dword [ebp - 0x54], 0x4e064826
mov dword [ebp - 0x54], 0
jmp 0x10029212
mov eax, dword [ebp - 0x54]
inc eax
mov dword [ebp - 0x54], eax
cmp dword [ebp - 0x54], 0x15
je 0x10029222
cmp dword [ebp - 0x54], 0
je 0x10029220
jmp 0x10029222
jmp 0x1002920b
push 1
push 0x26d5
push 0
push 0x670d
call fcn.100341c1
add esp, 0x10
mov eax, dword [0x100724d0]
and eax, 2
jne 0x1002926f
mov eax, dword [0x100724d0]
or eax, 2
mov dword [0x100724d0], eax
mov dword [ebp - 4], 2
mov ecx, 0x1007248c
call fcn.1000e43b
push 0x10058409
call fcn.10039ed9
pop ecx
or dword [ebp - 4], 0xffffffff
push dword [ebp - 0x210]
lea ecx, [ebp - 0x38c]
call fcn.1000e26e
mov dword [ebp - 4], 3
lea eax, [ebp - 0x434]
push eax
lea ecx, [ebp - 0x38c]
call fcn.1000ecdb
push dword [eax]
lea eax, [ebp - 0x40c]
push eax
lea ecx, [ebp - 0x38c]
call fcn.1000ecef
push dword [eax]
lea eax, [ebp - 0x420]
push eax
lea ecx, [ebp - 0x38c]
call fcn.1000ecdb
push dword [eax]
mov edx, 0x10026333
lea ecx, [ebp - 0x414]
call fcn.100371fe
add esp, 0xc
mov dword [ebp - 0x20c], 0x5999
mov dword [ebp - 0x2bc], str.zanfd_ywfk_ovm_fzzwlrz_fcnks_yswgfr_hfibubmai_mksuzazdk
cmp dword [ebp - 0x20c], 0x5c4f
jle 0x1002938d
push 0x2f7
push 0xc08
push 0x113b
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_CheckRadioButton]
and dword [ebp - 0xc0], 0
jmp 0x1002932c
mov eax, dword [ebp - 0xc0]
inc eax
mov dword [ebp - 0xc0], eax
cmp dword [ebp - 0xc0], 0x38da
jge 0x1002938d
and dword [ebp - 0x110], 0
jmp 0x1002934e
mov eax, dword [ebp - 0x110]
inc eax
mov dword [ebp - 0x110], eax
cmp dword [ebp - 0x110], 0x64a
jge 0x1002938b
mov eax, dword [ebp - 0xc0]
add eax, dword [ebp - 0x110]
cdq
mov dword [ebp - 0x2f8], eax
mov dword [ebp - 0x2f4], edx
push dword [ebp - 0x2f4]
push dword [ebp - 0x2f8]
mov ecx, 0x10070b88
call fcn.1000e159
jmp 0x10029341
jmp 0x1002931f
mov byte [ebp - 4], 4
cmp dword [ebp - 0x20c], 0x592b
jge 0x100293ad
mov edx, dword [ebp - 0x2bc]
mov ecx, 0x10070b88
call fcn.10010f71
jmp 0x100293c9
mov dword [ebp - 4], 3
jmp 0x100293d9
mov dword [ebp - 0x3c], 0
mov dword [ebp - 0xd8], 0xbefcdf11
mov dword [ebp - 0x118], 0xe856dfc9
mov dword [ebp - 0x26c], 1
mov dword [ebp - 0xc8], 0
jmp 0x10029417
mov eax, dword [ebp - 0xc8]
inc eax
mov dword [ebp - 0xc8], eax
cmp dword [ebp - 0xc8], 1
jge 0x10029433
mov eax, dword [ebp - 0xc8]
mov dword [ebp + eax*4 - 0xa8], 1
jmp 0x1002940a
mov dword [ebp - 0x3c], 0
jmp 0x10029443
mov eax, dword [ebp - 0x3c]
inc eax
mov dword [ebp - 0x3c], eax
cmp dword [ebp - 0x3c], 0
jg 0x10029500
mov dword [ebp - 0x138], 0
jmp 0x10029466
mov eax, dword [ebp - 0x138]
inc eax
mov dword [ebp - 0x138], eax
cmp dword [ebp - 0x138], 3
jge 0x10029482
mov eax, dword [ebp - 0x138]
mov dword [ebp + eax*4 - 0x340], 0x398070ad
jmp 0x10029459
push 4
pop eax
shl eax, 1
mov dword [ebp + eax - 0x340], 0
jmp 0x100294ad
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x340]
inc eax
push 4
pop ecx
shl ecx, 1
mov dword [ebp + ecx - 0x340], eax
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0x340], 1
jge 0x100294d5
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x340]
mov dword [ebp + eax*4 - 0xa8], 0xffffffff
jmp 0x10029494
mov byte [ebp - 0x46], 0
push 0x4a1a
push 0xc64
push 0xc63
push 0x79d6
lea eax, [ebp - 0x46]
push eax
push 0
call fcn.1003684c
add esp, 0x18
jmp 0x1002943c
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0xa8], 0
jne 0x100295e2
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0xa8], 0xffffffff
jge 0x10029530
mov dword [ebp - 0x194], 1
jmp 0x10029537
and dword [ebp - 0x194], 0
mov eax, dword [ebp - 0x194]
mov dword [ebp - 0xd8], eax
mov eax, dword [ebp - 0xd8]
cmp eax, dword [ebp - 0x3c]
jg 0x1002955a
mov dword [ebp - 0x24c], 1
jmp 0x10029561
and dword [ebp - 0x24c], 0
xor eax, eax
sub eax, dword [ebp - 0x24c]
mov dword [ebp - 0x118], eax
mov eax, dword [ebp - 0x118]
cmp eax, dword [ebp - 0x3c]
jg 0x1002958c
cmp dword [ebp - 0xd8], 0
jne 0x1002958c
and dword [ebp - 0x19c], 0
jmp 0x10029596
mov dword [ebp - 0x19c], 1
cmp dword [ebp - 0x19c], 0xffffffff
jl 0x100295b4
mov eax, 0xc0de
test eax, eax
je 0x100295b4
mov dword [ebp - 0x214], 1
jmp 0x100295bb
and dword [ebp - 0x214], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xa8]
cmp dword [ebp - 0x214], eax
jl 0x100295e2
cmp dword [ebp - 0x118], 0
jne 0x100295e2
and dword [ebp - 0x1a4], 0
jmp 0x100295ec
mov dword [ebp - 0x1a4], 1
cmp dword [ebp - 0x1a4], 1
jge 0x10029601
mov dword [ebp - 0x328], 1
jmp 0x10029608
and dword [ebp - 0x328], 0
mov eax, dword [ebp - 0x26c]
mov dword [ebp - 0x428], eax
mov eax, dword [ebp - 0x118]
mov dword [ebp - 0x41c], eax
mov eax, dword [ebp - 0x26c]
mov dword [ebp - 0x3b8], eax
mov eax, dword [ebp - 0x3c]
cmp eax, dword [ebp - 0xd8]
jg 0x10029643
mov dword [ebp - 0x1ac], 1
jmp 0x1002964a
and dword [ebp - 0x1ac], 0
mov eax, dword [ebp - 0x1ac]
mov dword [ebp - 0x3c], eax
lea ecx, [ebp - 0x38c]
call fcn.100262be
mov dword [ebp - 0x218], eax
mov dword [ebp - 0x21c], 0x3b00
mov dword [ebp - 0x344], str.qnkitly_yuuhz_svyllse_aahgt_ibwjy_xkn_ykesid_daqndn_nftfjl_ehykwqyx
cmp dword [ebp - 0x21c], 0x3d2e
jle 0x10029728
and dword [ebp - 0x130], 0
jmp 0x1002969e
mov eax, dword [ebp - 0x130]
inc eax
mov dword [ebp - 0x130], eax
cmp dword [ebp - 0x130], 0x5b13
jge 0x10029728
and dword [ebp - 0xe0], 0
jmp 0x100296c0
mov eax, dword [ebp - 0xe0]
inc eax
mov dword [ebp - 0xe0], eax
cmp dword [ebp - 0xe0], 0x1608
jge 0x10029723
mov eax, dword [ebp - 0x130]
sub eax, dword [ebp - 0xe0]
cdq
mov dword [ebp - 0x304], eax
mov dword [ebp - 0x300], edx
push dword [ebp - 0x300]
push dword [ebp - 0x304]
lea ecx, [ebp - 0x4dc]
call fcn.10002407
pop ecx
pop ecx
mov dword [ebp - 0x2c4], eax
mov ecx, dword [ebp - 0x2c4]
call fcn.1000e139
push eax
call fcn.10039f03
pop ecx
lea ecx, [ebp - 0x4dc]
call fcn.1000e12f
jmp 0x100296b3
jmp 0x10029691
mov dword [ebp - 0x70], 0xfffffff8
mov dword [ebp - 0x120], 0
jmp 0x10029748
mov eax, dword [ebp - 0x120]
inc eax
mov dword [ebp - 0x120], eax
cmp dword [ebp - 0x120], 3
jge 0x10029764
mov eax, dword [ebp - 0x120]
mov dword [ebp + eax*4 - 0x3d0], 0x313dd33a
jmp 0x1002973b
mov dword [ebp - 0x70], 0
jmp 0x10029774
mov eax, dword [ebp - 0x70]
inc eax
mov dword [ebp - 0x70], eax
cmp dword [ebp - 0x70], 2
jg 0x100297e7
mov dword [ebp - 0xe8], 0x888adae8
mov eax, dword [ebp - 0x70]
cmp dword [ebp + eax*4 - 0x3d0], 0
je 0x10029793
jmp 0x100297e7
mov dword [ebp - 0xe8], 0
jmp 0x100297ac
mov eax, dword [ebp - 0xe8]
inc eax
mov dword [ebp - 0xe8], eax
cmp dword [ebp - 0xe8], 2
jg 0x100297e5
mov dword [ebp - 0x60], 0xa20bd035
mov dword [ebp - 0x60], 0
jmp 0x100297cc
mov eax, dword [ebp - 0x60]
inc eax
mov dword [ebp - 0x60], eax
cmp dword [ebp - 0x60], 2
jg 0x100297e3
mov eax, dword [ebp - 0x60]
cmp dword [ebp + eax*4 - 0x3d0], 0
je 0x100297e1
jmp 0x100297e3
jmp 0x100297c5
jmp 0x1002979f
jmp 0x1002976d
mov byte [ebp - 4], 6
cmp dword [ebp - 0x21c], 0x3834
jge 0x10029803
push dword [ebp - 0x344]
call fcn.10039f03
pop ecx
jmp 0x1002981f
mov dword [ebp - 4], 3
jmp 0x1002982f
movzx eax, byte [0x10070f86]
test eax, eax
je 0x10029a45
mov ecx, 0x1007248c
call fcn.10036dcc
movzx eax, al
test eax, eax
jne 0x10029a45
lea eax, [ebp - 0x218]
push eax
lea eax, [ebp - 0x1cc]
push eax
mov ecx, 0x1007248c
call fcn.1000e500
mov dword [ebp - 0x160], 1
mov dword [ebp - 0x168], 0x6b3e713e
mov dword [ebp - 0x134], 0
jmp 0x10029898
mov eax, dword [ebp - 0x134]
inc eax
mov dword [ebp - 0x134], eax
cmp dword [ebp - 0x134], 4
jge 0x100298b4
mov eax, dword [ebp - 0x134]
mov dword [ebp + eax*4 - 0x36c], 0x1b055cc2
jmp 0x1002988b
xor eax, eax
inc eax
je 0x10029928
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x36c], 0
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0x36c], 0
ja 0x100298f2
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x36c], 0
je 0x100298f2
mov dword [ebp - 0x2cc], 1
jmp 0x100298f9
and dword [ebp - 0x2cc], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x36c]
mov dword [ebp - 0x1b4], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x1b4]
mov dword [ebp + eax - 0x36c], ecx
cmp dword [ebp - 0x1b4], 0
jne 0x10029941
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x36c], 0
jne 0x10029941
and dword [ebp - 0x254], 0
jmp 0x1002994b
mov dword [ebp - 0x254], 1
mov eax, dword [ebp - 0x168]
cmp dword [ebp - 0x254], eax
je 0x10029965
mov dword [ebp - 0x1bc], 1
jmp 0x1002996c
and dword [ebp - 0x1bc], 0
cmp dword [ebp - 0x1bc], 0xfff8
ja 0x10029984
mov dword [ebp - 0x224], 1
jmp 0x1002998b
and dword [ebp - 0x224], 0
mov eax, dword [ebp - 0x168]
cmp dword [ebp - 0x224], eax
jl 0x100299a5
mov dword [ebp - 0x1c4], 1
jmp 0x100299ac
and dword [ebp - 0x1c4], 0
mov eax, dword [ebp - 0x160]
dec eax
mov dword [ebp - 0x160], eax
mov eax, dword [ebp - 0x160]
cmp eax, dword [ebp - 0x1c4]
jl 0x100299d3
mov dword [ebp - 0x270], 1
jmp 0x100299da
and dword [ebp - 0x270], 0
mov eax, dword [ebp - 0x270]
mov dword [ebp - 0x168], eax
push 0x5e90
push 0
push 1
call fcn.1002890a
add esp, 0xc
lea eax, [ebp - 0x3c0]
push eax
mov ecx, 0x1007248c
call fcn.1000e4f2
push eax
lea ecx, [ebp - 0x1cc]
call fcn.1000e75d
movzx eax, al
test eax, eax
je 0x10029a45
lea ecx, [ebp - 0x1cc]
call fcn.10036dd5
mov ecx, dword [ebp - 0x238]
mov eax, dword [eax + 4]
mov dword [ecx], eax
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x38c]
call fcn.1000e2ce
jmp 0x1002adbb
mov dword [ebp - 0x40], 0xfffffff8
mov dword [ebp - 0x2c], 0x5466bc65
mov dword [ebp - 0x400], 0
mov dword [ebp - 0x408], 2
mov dword [ebp - 0x410], 0x61ea52fa
mov dword [ebp - 0xf0], 0
jmp 0x10029a8a
mov eax, dword [ebp - 0xf0]
inc eax
mov dword [ebp - 0xf0], eax
cmp dword [ebp - 0xf0], 3
jge 0x10029aa6
mov eax, dword [ebp - 0xf0]
mov dword [ebp + eax*4 - 0x4c4], 8
jmp 0x10029a7d
mov dword [ebp - 0x40], 0
jmp 0x10029ab6
mov eax, dword [ebp - 0x40]
dec eax
mov dword [ebp - 0x40], eax
cmp dword [ebp - 0x40], 0xfffffff7
jge 0x10029ebd
mov dword [ebp - 0x4c], 3
mov dword [ebp - 0x64], 0x3d3b
mov dword [ebp - 0x418], 1
mov dword [ebp - 0x440], 0x1f7ee045
mov dword [ebp - 0x448], 0xd68e480b
mov dword [ebp - 0x354], 0x42a2
mov dword [ebp - 0x104], 0
jmp 0x10029b0f
mov eax, dword [ebp - 0x104]
inc eax
mov dword [ebp - 0x104], eax
cmp dword [ebp - 0x104], 4
jge 0x10029b2b
mov eax, dword [ebp - 0x104]
mov dword [ebp + eax*4 - 0x534], 0
jmp 0x10029b02
mov eax, dword [ebp - 0x4c]
mov dword [ebp - 0x424], eax
mov eax, dword [ebp - 0x4c]
mov dword [ebp - 0x2c], eax
mov eax, dword [ebp - 0x2c]
sub eax, dword [ebp - 0x4c]
cmp eax, 8
jg 0x10029b51
mov dword [ebp - 0x22c], 1
jmp 0x10029b58
and dword [ebp - 0x22c], 0
mov eax, dword [ebp - 0x22c]
sub eax, 0x5492527f
cmp eax, 0x50f82bae
jge 0x10029b76
mov dword [ebp - 0x1d4], 1
jmp 0x10029b7d
and dword [ebp - 0x1d4], 0
mov eax, dword [ebp - 0x4c]
cmp dword [ebp - 0x1d4], eax
je 0x10029b94
mov dword [ebp - 0x25c], 1
jmp 0x10029b9b
and dword [ebp - 0x25c], 0
cmp dword [ebp - 0x25c], 0xde1fc657
ja 0x10029bb3
mov dword [ebp - 0x324], 1
jmp 0x10029bba
and dword [ebp - 0x324], 0
mov eax, dword [ebp - 0x64]
mov dword [ebp - 0x430], eax
mov eax, dword [ebp - 0x64]
cmp eax, dword [ebp - 0x40]
jle 0x10029bd7
mov dword [ebp - 0x1dc], 1
jmp 0x10029bde
and dword [ebp - 0x1dc], 0
cmp dword [ebp - 0x1dc], 0xffffffff
jle 0x10029bf9
cmp dword [ebp - 0x2c], 0
je 0x10029bf9
mov dword [ebp - 0x234], 1
jmp 0x10029c00
and dword [ebp - 0x234], 0
mov eax, dword [ebp - 0x234]
sub eax, dword [ebp - 0x40]
cmp dword [ebp - 0x40], eax
jl 0x10029c1a
mov dword [ebp - 0x1e4], 1
jmp 0x10029c21
and dword [ebp - 0x1e4], 0
mov eax, dword [ebp - 0x4c]
imul eax, dword [ebp - 0x1e4]
push 9
pop ecx
sub ecx, eax
je 0x10029e31
mov dword [ebp - 0x1ec], 0x7c76
mov dword [ebp - 0xf8], 0
jmp 0x10029c59
mov eax, dword [ebp - 0xf8]
inc eax
mov dword [ebp - 0xf8], eax
cmp dword [ebp - 0xf8], 2
jge 0x10029c75
mov eax, dword [ebp - 0xf8]
mov dword [ebp + eax*4 - 0x3dc], 0x3c8d3fd9
jmp 0x10029c4c
mov dword [ebp - 0x2c], 0
jmp 0x10029c85
mov eax, dword [ebp - 0x2c]
inc eax
mov dword [ebp - 0x2c], eax
cmp dword [ebp - 0x2c], 3
jne 0x10029e2c
mov dword [ebp - 0x180], 0xc35cf455
mov dword [ebp - 0x2d4], 0x657a772b
mov dword [ebp - 0x10c], 0
jmp 0x10029cbc
mov eax, dword [ebp - 0x10c]
inc eax
mov dword [ebp - 0x10c], eax
cmp dword [ebp - 0x10c], 4
jge 0x10029cd8
mov eax, dword [ebp - 0x10c]
mov dword [ebp + eax*4 - 0x488], 0x7dcc3592
jmp 0x10029caf
cmp dword [ebp - 0x64], 0
je 0x10029cf3
cmp dword [ebp - 0x1ec], 0
je 0x10029cf3
mov dword [ebp - 0x274], 1
jmp 0x10029cfa
and dword [ebp - 0x274], 0
cmp dword [ebp - 0x274], 1
jl 0x10029d0f
mov dword [ebp - 0x23c], 1
jmp 0x10029d16
and dword [ebp - 0x23c], 0
mov eax, dword [ebp - 0x1ec]
cmp dword [ebp - 0x23c], eax
je 0x10029d3b
xor eax, eax
inc eax
je 0x10029d3b
cmp dword [ebp - 0x64], 0
je 0x10029d3b
mov dword [ebp - 0x1f4], 1
jmp 0x10029d42
and dword [ebp - 0x1f4], 0
cmp dword [ebp - 0x1f4], 0
je 0x10029d57
mov dword [ebp - 0x264], 1
jmp 0x10029d5e
and dword [ebp - 0x264], 0
mov eax, dword [ebp - 0x2c]
add eax, dword [ebp - 0x264]
jne 0x10029d6f
cmp dword [ebp - 0x2c], 0
je 0x10029d82
push 9
pop eax
test eax, eax
je 0x10029d82
mov dword [ebp - 0x1fc], 1
jmp 0x10029d89
and dword [ebp - 0x1fc], 0
cmp dword [ebp - 0x1fc], 0x1c1d
jge 0x10029da1
mov dword [ebp - 0x174], 1
jmp 0x10029da8
and dword [ebp - 0x174], 0
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x488]
imul eax, dword [ebp - 0x174]
cmp eax, dword [ebp - 0x40]
jl 0x10029dcc
mov dword [ebp - 0x178], 1
jmp 0x10029dd3
and dword [ebp - 0x178], 0
mov eax, dword [ebp - 0x178]
mov dword [ebp - 0x180], eax
cmp dword [ebp - 0x180], 0
je 0x10029e03
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0x488], 0
je 0x10029e03
mov dword [ebp - 0x188], 1
jmp 0x10029e0a
and dword [ebp - 0x188], 0
mov eax, dword [ebp - 0x188]
mov dword [ebp - 0x2d4], eax
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0x3dc], 0
jmp 0x10029c7e
jmp 0x10029eb8
mov dword [ebp - 0x2b0], 0xf33d48a2
mov dword [ebp - 0x3bc], 0x194e4064
mov dword [ebp - 0x30], 0
jmp 0x10029e55
mov eax, dword [ebp - 0x30]
inc eax
mov dword [ebp - 0x30], eax
cmp dword [ebp - 0x30], 1
jge 0x10029e6b
mov eax, dword [ebp - 0x30]
mov dword [ebp + eax*4 - 0x3b4], 0x2db60270
jmp 0x10029e4e
mov dword [ebp - 0x30], 0
jmp 0x10029e7b
mov eax, dword [ebp - 0x30]
inc eax
mov dword [ebp - 0x30], eax
cmp dword [ebp - 0x30], 3
jge 0x10029e91
mov eax, dword [ebp - 0x30]
mov dword [ebp + eax*4 - 0x524], 0
jmp 0x10029e74
push 0x44b9
lea eax, [ebp - 0x64]
push eax
lea eax, [ebp - 0x354]
push eax
push 1
lea eax, [ebp - 0x4c]
push eax
lea eax, [ebp - 0x2b0]
push eax
push 1
call fcn.10027883
add esp, 0x1c
jmp 0x10029aaf
and dword [ebp - 0x5c], 0
lea eax, [ebp - 0x38c]
push eax
call fcn.10026a50
pop ecx
mov dword [ebp - 0x5c], eax
cmp dword [ebp - 0x5c], 0
jne 0x1002ab43
mov dword [ebp - 0x44], 1
mov dword [ebp - 0x100], 0
jmp 0x10029efb
mov eax, dword [ebp - 0x100]
inc eax
mov dword [ebp - 0x100], eax
cmp dword [ebp - 0x100], 2
jge 0x10029f14
mov eax, dword [ebp - 0x100]
mov dword [ebp + eax*4 - 0x6c], 0x98a8f939
jmp 0x10029eee
mov dword [ebp - 0x44], 0
jmp 0x10029f24
mov eax, dword [ebp - 0x44]
inc eax
mov dword [ebp - 0x44], eax
cmp dword [ebp - 0x44], 1
jg 0x1002a0a1
mov dword [ebp - 0x20], 0xafd94fe5
mov dword [ebp - 0x114], 0x48bd921b
mov dword [ebp - 0x20], 1
jmp 0x10029f4f
mov eax, dword [ebp - 0x20]
dec eax
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 0
jl 0x1002a09c
mov eax, dword [ebp - 0x20]
cmp dword [ebp + eax*4 - 0x6c], 0
jne 0x10029f76
mov eax, dword [ebp - 0x20]
cmp dword [ebp + eax*4 - 0x6c], 0
jne 0x10029f76
and dword [ebp - 0x190], 0
jmp 0x10029f80
mov dword [ebp - 0x190], 1
mov eax, dword [ebp - 0x190]
add eax, 0x2360
mov ecx, dword [ebp - 0x44]
mov ecx, dword [ebp + ecx*4 - 0x6c]
sub ecx, eax
mov eax, dword [ebp - 0x20]
mov dword [ebp + eax*4 - 0x6c], ecx
xor eax, eax
jne 0x1002a03f
cmp dword [ebp - 0x20], 0xfffffffe
jg 0x10029fb5
mov dword [ebp - 0x198], 1
jmp 0x10029fbc
and dword [ebp - 0x198], 0
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp + eax*4 - 0x6c]
cmp eax, dword [ebp - 0x198]
jg 0x10029fd7
mov dword [ebp - 0x32c], 1
jmp 0x10029fde
and dword [ebp - 0x32c], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x6c]
mov dword [ebp - 0x114], eax
mov eax, dword [ebp - 0x114]
mov dword [ebp - 0x3c4], eax
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x20]
mov ecx, dword [ebp + ecx*4 - 0x6c]
cmp ecx, dword [ebp + eax*4 - 0x6c]
jne 0x1002a01d
mov eax, dword [ebp - 0x20]
cmp dword [ebp + eax*4 - 0x6c], 0
jne 0x1002a01d
and dword [ebp - 0x1a0], 0
jmp 0x1002a027
mov dword [ebp - 0x1a0], 1
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp + eax*4 - 0x6c]
cmp dword [ebp - 0x1a0], eax
jge 0x1002a03f
cmp dword [ebp - 0x114], 0
je 0x1002a068
push 0x5139
push 0xd47
push 1
push 0x702e
push 0
push 0x5efb
push 0x105e
push 1
call fcn.1003451e
add esp, 0x20
jmp 0x1002a097
mov eax, dword [ebp - 0x44]
cmp dword [ebp + eax*4 - 0x6c], 0
jne 0x1002a081
cmp dword [ebp - 0x44], 0
jne 0x1002a081
and dword [ebp - 0x1a8], 0
jmp 0x1002a08b
mov dword [ebp - 0x1a8], 1
mov eax, dword [ebp - 0x1a8]
mov dword [ebp - 0x114], eax
jmp 0x10029f48
jmp 0x10029f1d
cmp dword [0x10070f94], 0
jne 0x1002a6e5
mov dword [ebp - 0xb4], 0xffffffff
mov dword [ebp - 0x2e4], 0xfffffffc
mov dword [ebp - 0xac], 0
jmp 0x1002a0db
mov eax, dword [ebp - 0xac]
inc eax
mov dword [ebp - 0xac], eax
cmp dword [ebp - 0xac], 3
jge 0x1002a0f7
mov eax, dword [ebp - 0xac]
mov dword [ebp + eax*4 - 0x518], 0xa8c6a53d
jmp 0x1002a0ce
mov dword [ebp - 0xb4], 0
jmp 0x1002a110
mov eax, dword [ebp - 0xb4]
inc eax
mov dword [ebp - 0xb4], eax
cmp dword [ebp - 0xb4], 2
jg 0x1002a136
mov byte [ebp - 0x47], 0
push 1
push 1
push 1
lea eax, [ebp - 0x47]
push eax
push 0x4388
call fcn.10026f14
add esp, 0x14
jmp 0x1002a103
push 0x4de0
push 0
lea eax, [ebp - 0x2e4]
push eax
call fcn.1003431e
add esp, 0xc
mov byte [ebp - 0xa4], 3
mov byte [ebp - 0xa3], 0xcb
mov byte [ebp - 0xa2], 0xb
mov byte [ebp - 0xa1], 2
mov byte [ebp - 0xa0], 6
mov byte [ebp - 0x9f], 0x5f
mov byte [ebp - 0x9e], 0
mov byte [ebp - 0x9d], 0x78
mov byte [ebp - 0x9c], 4
mov byte [ebp - 0x9b], 0x2e
mov byte [ebp - 0x9a], 8
mov byte [ebp - 0x99], 0x4b
mov byte [ebp - 0x98], 5
mov byte [ebp - 0x97], 0x42
mov byte [ebp - 0x96], 1
mov byte [ebp - 0x95], 9
mov byte [ebp - 0x94], 2
mov byte [ebp - 0x93], 0x17
mov byte [ebp - 0x92], 0xa
mov byte [ebp - 0x91], 0x1e
mov byte [ebp - 0x90], 9
mov byte [ebp - 0x8f], 8
mov byte [ebp - 0x8e], 7
mov byte [ebp - 0x8d], 0x56
xor eax, eax
inc eax
shl eax, 0
movzx eax, byte [ebp + eax - 0xa4]
and eax, 0xa5
xor ecx, ecx
inc ecx
shl ecx, 0
movzx ecx, byte [ebp + ecx - 0xa4]
or ecx, 0xa5
sub ecx, eax
xor eax, eax
inc eax
imul eax, eax, 0
movzx eax, byte [ebp + eax - 0xa4]
mov word [ebp + eax*2 - 0x3b0], cx
mov dword [ebp - 0x24], 2
and dword [ebp - 0x15c], 0
jmp 0x1002a24b
mov eax, dword [ebp - 0x24]
inc eax
inc eax
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 0x18
jae 0x1002a2e3
mov eax, dword [ebp - 0x24]
sub eax, dword [ebp - 0x15c]
movzx eax, byte [ebp + eax - 0xa6]
movzx eax, word [ebp + eax*2 - 0x3b0]
mov ecx, dword [ebp - 0x24]
movzx ecx, byte [ebp + ecx - 0xa3]
and ecx, eax
mov eax, dword [ebp - 0x24]
sub eax, dword [ebp - 0x15c]
movzx eax, byte [ebp + eax - 0xa6]
movzx eax, word [ebp + eax*2 - 0x3b0]
mov edx, dword [ebp - 0x24]
movzx edx, byte [ebp + edx - 0xa3]
and edx, eax
mov eax, dword [ebp - 0x24]
sub eax, dword [ebp - 0x15c]
movzx eax, byte [ebp + eax - 0xa6]
movzx eax, word [ebp + eax*2 - 0x3b0]
mov esi, dword [ebp - 0x24]
movzx esi, byte [ebp + esi - 0xa3]
add esi, eax
sub esi, edx
sub esi, ecx
mov eax, dword [ebp - 0x24]
movzx eax, byte [ebp + eax - 0xa4]
mov word [ebp + eax*2 - 0x3b0], si
jmp 0x1002a243
push 2
pop eax
imul eax, eax, 0xc
xor ecx, ecx
mov word [ebp + eax - 0x3b0], cx
lea eax, [ebp - 0x3b0]
push eax
lea ecx, [ebp - 0x4f4]
call fcn.10015c13
mov dword [ebp - 0x34c], eax
mov eax, dword [ebp - 0x34c]
mov dword [ebp - 0x2f0], eax
mov byte [ebp - 4], 8
push dword [ebp - 0x2f0]
call fcn.10026a50
pop ecx
mov dword [ebp - 0x170], eax
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x4f4]
call fcn.1000e2ce
and dword [ebp - 0xbc], 0
jmp 0x1002a352
mov eax, dword [ebp - 0xbc]
inc eax
mov dword [ebp - 0xbc], eax
cmp dword [ebp - 0xbc], 0xd
jae 0x1002a36d
xor eax, eax
mov ecx, dword [ebp - 0xbc]
mov word [ebp + ecx*2 - 0x3b0], ax
jmp 0x1002a345
cmp dword [ebp - 0x170], 0
je 0x1002a6e5
mov byte [ebp - 0x8c], 3
mov byte [ebp - 0x8b], 0x51
mov byte [ebp - 0x8a], 9
mov byte [ebp - 0x89], 0x16
mov byte [ebp - 0x88], 0xa
mov byte [ebp - 0x87], 0xb
mov byte [ebp - 0x86], 7
mov byte [ebp - 0x85], 0xb
mov byte [ebp - 0x84], 3
mov byte [ebp - 0x83], 0xc4
mov byte [ebp - 0x82], 0xda
mov byte [ebp - 0x81], 0x68
mov byte [ebp - 0x80], 8
mov byte [ebp - 0x7f], 0x13
mov byte [ebp - 0x7e], 0
mov byte [ebp - 0x7d], 0x2d
mov byte [ebp - 0x7c], 6
mov byte [ebp - 0x7b], 0x2e
mov byte [ebp - 0x7a], 4
mov byte [ebp - 0x79], 0x2e
mov byte [ebp - 0x78], 0xb
mov byte [ebp - 0x77], 0x1b
mov byte [ebp - 0x76], 5
mov byte [ebp - 0x75], 0x3e
mov byte [ebp - 0x74], 1
mov byte [ebp - 0x73], 6
mov byte [ebp - 0x72], 2
mov byte [ebp - 0x71], 0xe
xor eax, eax
inc eax
shl eax, 0
movzx eax, byte [ebp + eax - 0x8c]
and eax, 0x35
xor ecx, ecx
inc ecx
shl ecx, 0
movzx ecx, byte [ebp + ecx - 0x8c]
or ecx, 0x35
sub ecx, eax
xor eax, eax
inc eax
imul eax, eax, 0
movzx eax, byte [ebp + eax - 0x8c]
mov byte [ebp + eax - 0x2ac], cl
mov dword [ebp - 0x1c], 2
and dword [ebp - 0x58], 0
jmp 0x1002a45c
mov eax, dword [ebp - 0x1c]
inc eax
inc eax
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 0x1c
jae 0x1002a665
xor eax, eax
inc eax
imul eax, eax, 0
movzx eax, byte [ebp + eax - 0x8c]
lea eax, [eax + eax + 2]
cmp dword [ebp - 0x1c], eax
jne 0x1002a4a3
mov eax, dword [ebp - 0x1c]
movzx eax, byte [ebp + eax - 0x8c]
inc eax
mov dword [ebp - 0x58], eax
mov eax, dword [ebp - 0x1c]
movzx eax, byte [ebp + eax - 0x8c]
mov ecx, dword [ebp - 0x1c]
lea eax, [ecx + eax - 1]
mov dword [ebp - 0x1c], eax
jmp 0x1002a454
mov eax, dword [ebp - 0x1c]
sub eax, dword [ebp - 0x58]
movzx eax, byte [ebp + eax - 0x8e]
movsx eax, byte [ebp + eax - 0x2ac]
mov ecx, dword [ebp - 0x1c]
movzx ecx, byte [ebp + ecx - 0x8b]
and ecx, eax
mov eax, dword [ebp - 0x1c]
sub eax, dword [ebp - 0x58]
movzx eax, byte [ebp + eax - 0x8e]
movsx eax, byte [ebp + eax - 0x2ac]
mov edx, dword [ebp - 0x1c]
movzx edx, byte [ebp + edx - 0x8b]
and edx, eax
mov eax, dword [ebp - 0x1c]
sub eax, dword [ebp - 0x58]
movzx eax, byte [ebp + eax - 0x8e]
movsx eax, byte [ebp + eax - 0x2ac]
mov esi, dword [ebp - 0x1c]
movzx ebx, byte [ebp + esi - 0x8b]
add ebx, eax
sub ebx, edx
sub ebx, ecx
mov eax, dword [ebp - 0x1c]
movzx eax, byte [ebp + eax - 0x8c]
mov byte [ebp + eax - 0x2ac], bl
push 0x3385
push 0x438b
push 0x7fa9
push 1
lea eax, [ebp - 0x58]
push eax
push 0x1e7e
push 1
call fcn.10027981
add esp, 0x1c
mov dword [ebp - 0x1b0], 0x472b
mov dword [ebp - 0x334], str.mxhpuv_iqwb_zyhvxq_hibvift_ljgiwxpjt_ryuchij_xlqqfizk_sfjnnro_zov_ssxe_yoxn_grno_xggxynn
cmp dword [ebp - 0x1b0], 0x4894
jle 0x1002a614
and dword [ebp - 0xc4], 0
jmp 0x1002a580
mov eax, dword [ebp - 0xc4]
inc eax
mov dword [ebp - 0xc4], eax
cmp dword [ebp - 0xc4], 0x72e8
jge 0x1002a614
and dword [ebp - 0xcc], 0
jmp 0x1002a5a6
mov eax, dword [ebp - 0xcc]
inc eax
mov dword [ebp - 0xcc], eax
cmp dword [ebp - 0xcc], 0x695b
jge 0x1002a60f
and dword [ebp - 0xd4], 0
jmp 0x1002a5c8
mov eax, dword [ebp - 0xd4]
inc eax
mov dword [ebp - 0xd4], eax
cmp dword [ebp - 0xd4], 0x1dad
jge 0x1002a60d
mov eax, dword [ebp - 0xc4]
mov ecx, dword [ebp - 0xcc]
sar eax, cl
or eax, dword [ebp - 0xd4]
cdq
mov dword [ebp - 0x310], eax
mov dword [ebp - 0x30c], edx
push dword [ebp - 0x30c]
push dword [ebp - 0x310]
mov ecx, 0x10070b88
call fcn.1000e159
jmp 0x1002a5bb
jmp 0x1002a599
jmp 0x1002a573
mov byte [ebp - 4], 9
cmp dword [ebp - 0x1b0], 0x44ac
jge 0x1002a634
mov edx, dword [ebp - 0x334]
mov ecx, 0x10070b88
call fcn.10010f71
jmp 0x1002a650
mov dword [ebp - 4], 3
jmp 0x1002a660
jmp 0x1002a454
xor eax, eax
inc eax
imul eax, eax, 0xc
mov byte [ebp + eax - 0x2ac], 0
lea eax, [ebp - 0x2ac]
push eax
lea ecx, [ebp - 0x4b8]
call fcn.10036c13
mov byte [ebp - 4], 0xb
and dword [ebp - 0xdc], 0
jmp 0x1002a69f
mov eax, dword [ebp - 0xdc]
inc eax
mov dword [ebp - 0xdc], eax
cmp dword [ebp - 0xdc], 0xd
jae 0x1002a6b8
mov eax, dword [ebp - 0xdc]
mov byte [ebp + eax - 0x2ac], 0
jmp 0x1002a692
push 0
push 0
lea eax, [ebp - 0x4b8]
push eax
push dword [ebp - 0x170]
call fcn.10031fc7
add esp, 0x10
mov dword [0x10070f94], eax
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x4b8]
call fcn.1000e3a8
mov dword [ebp - 0x29c], 0x847dfa86
mov dword [ebp - 0x298], 0x847dfa86
mov dword [ebp - 0x294], 0x847dfa86
mov dword [ebp - 0x290], 0x847dfa86
mov dword [ebp - 0x38], 0xf0b96ca2
mov dword [ebp - 0x308], 1
mov dword [ebp - 0xe4], 0
jmp 0x1002a737
mov eax, dword [ebp - 0xe4]
inc eax
mov dword [ebp - 0xe4], eax
cmp dword [ebp - 0xe4], 2
jge 0x1002a753
mov eax, dword [ebp - 0xe4]
mov dword [ebp + eax*4 - 0x154], 0xfffffffd
jmp 0x1002a72a
mov dword [ebp - 0x38], 3
jmp 0x1002a763
mov eax, dword [ebp - 0x38]
dec eax
mov dword [ebp - 0x38], eax
cmp dword [ebp - 0x38], 0
jl 0x1002ab03
mov dword [ebp - 0x18], 7
mov dword [ebp - 0x314], 0xffffffff
mov dword [ebp - 0xec], 0
jmp 0x1002a797
mov eax, dword [ebp - 0xec]
inc eax
mov dword [ebp - 0xec], eax
cmp dword [ebp - 0xec], 2
jge 0x1002a7b3
mov eax, dword [ebp - 0xec]
mov dword [ebp + eax*4 - 0x394], 0xfffffffc
jmp 0x1002a78a
mov dword [ebp - 0x18], 0
jmp 0x1002a7c3
mov eax, dword [ebp - 0x18]
inc eax
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 3
jg 0x1002a920
mov dword [ebp - 0x35c], 0
mov dword [ebp - 0xf4], 0
jmp 0x1002a7f0
mov eax, dword [ebp - 0xf4]
inc eax
mov dword [ebp - 0xf4], eax
cmp dword [ebp - 0xf4], 4
jge 0x1002a80c
mov eax, dword [ebp - 0xf4]
mov dword [ebp + eax*4 - 0x468], 0xb3bfa32a
jmp 0x1002a7e3
mov eax, dword [ebp - 0x38]
cmp dword [ebp + eax*4 - 0x29c], 0x4163
jne 0x1002a828
mov dword [ebp - 0x164], 1
jmp 0x1002a82f
and dword [ebp - 0x164], 0
push 4
pop eax
imul eax, eax, 3
mov ecx, dword [ebp - 0x164]
mov dword [ebp + eax - 0x468], ecx
cmp dword [ebp - 0x164], 0
je 0x1002a888
mov eax, dword [ebp - 0x38]
mov dword [ebp - 0x1c0], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x1c0]
mov dword [ebp + eax - 0x154], ecx
push 4
pop eax
imul eax, eax, 3
mov eax, dword [ebp + eax - 0x468]
cmp dword [ebp - 0x1c0], eax
jne 0x1002a888
mov dword [ebp - 0x1c8], 1
jmp 0x1002a88f
and dword [ebp - 0x1c8], 0
mov eax, dword [ebp - 0x38]
mov ecx, dword [ebp - 0x1c8]
inc ecx
sub ecx, dword [ebp + eax*4 - 0x29c]
cmp ecx, 0xffff
je 0x1002a8b4
mov dword [ebp - 0x1d0], 1
jmp 0x1002a8bb
and dword [ebp - 0x1d0], 0
mov eax, dword [ebp - 0x38]
mov ecx, dword [ebp - 0x18]
add ecx, dword [ebp - 0x1d0]
cmp ecx, dword [ebp + eax*4 - 0x29c]
jle 0x1002a8dc
mov dword [ebp - 0x2fc], 1
jmp 0x1002a8e3
and dword [ebp - 0x2fc], 0
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x3e8], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x29c]
mov dword [ebp - 0x1d8], eax
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x1d8]
mov dword [ebp + eax*4 - 0x29c], ecx
mov eax, dword [ebp - 0x1d8]
mov dword [ebp - 0x35c], eax
jmp 0x1002a7bc
mov dword [ebp - 0x18], 1
jmp 0x1002a930
mov eax, dword [ebp - 0x18]
dec eax
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 0
jl 0x1002aafe
mov dword [ebp - 0xfc], 0xfffffffb
mov dword [ebp - 0x308], 0xbe1552b9
mov eax, 0xaa43
test eax, eax
jne 0x1002a970
push 4
pop eax
imul eax, eax, 3
cmp dword [ebp + eax - 0x29c], 0
jne 0x1002a970
and dword [ebp - 0x1e0], 0
jmp 0x1002a97a
mov dword [ebp - 0x1e0], 1
mov eax, dword [ebp - 0x18]
add eax, dword [ebp - 0x1e0]
jne 0x1002a98c
cmp dword [ebp - 0xfc], 0
cmp dword [ebp - 0x18], 0x44ed25e4
jg 0x1002a9a1
mov dword [ebp - 0x1e8], 1
jmp 0x1002a9a8
and dword [ebp - 0x1e8], 0
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp + eax*4 - 0x154]
cmp dword [ebp - 0x1e8], eax
jl 0x1002a9be
cmp dword [ebp - 0x38], 0
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0xfc]
cmp ecx, dword [ebp + eax*4 - 0x154]
jle 0x1002a9dc
mov dword [ebp - 0x1f0], 1
jmp 0x1002a9e3
and dword [ebp - 0x1f0], 0
mov eax, dword [ebp - 0x1f0]
mov dword [ebp - 0xfc], eax
cmp dword [ebp - 0x18], 0
jne 0x1002aa0d
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0x29c], 0
jne 0x1002aa0d
and dword [ebp - 0x318], 0
jmp 0x1002aa17
mov dword [ebp - 0x318], 1
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x154]
mov dword [ebp - 0x3d4], eax
mov eax, dword [ebp - 0x314]
mov dword [ebp - 0x3f0], eax
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x18]
imul ecx, dword [ebp + ecx*4 - 0x154], 0x5604
cmp ecx, dword [ebp + eax*4 - 0x154]
jl 0x1002aa5e
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x154], 0
mov eax, 0xe4a839bb
cmp eax, 0xf7fae0cd
jne 0x1002aa76
mov dword [ebp - 0x1f8], 1
jmp 0x1002aa7d
and dword [ebp - 0x1f8], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x18]
mov ecx, dword [ebp + ecx*4 - 0x154]
add ecx, dword [ebp - 0x1f8]
cmp ecx, dword [ebp + eax - 0x29c]
je 0x1002aaa8
mov dword [ebp - 0x200], 1
jmp 0x1002aaaf
and dword [ebp - 0x200], 0
mov eax, dword [ebp - 0x200]
add eax, 0x418d0dca
push 4
pop ecx
shl ecx, 0
mov dword [ebp + ecx - 0x394], eax
cmp dword [ebp - 0xfc], 0xcf62392e
jae 0x1002aadf
mov dword [ebp - 0x208], 1
jmp 0x1002aae6
and dword [ebp - 0x208], 0
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x208]
mov dword [ebp + eax - 0x394], ecx
jmp 0x1002a929
jmp 0x1002a75c
push 0x24ca
push 0xb34
push 1
push 0x7bb
push 0x42
push 1
push 0x6ab
call fcn.100287b7
add esp, 0x1c
cmp dword [0x10070f94], 0
je 0x1002ab43
mov ecx, dword [ebp - 0x210]
call fcn.1000e32d
push eax
call dword [0x10070f94]
mov dword [ebp - 0x5c], eax
push 0x1007248c
push 0x10070f86
lea eax, [ebp - 0x218]
push eax
push 1
push 0x5ab8
lea eax, [ebp - 0x5c]
push eax
push 0
call fcn.10027981
add esp, 0x1c
mov dword [ebp - 0x50], 0xfffffff7
mov dword [ebp - 0x34], 0
jmp 0x1002ab80
mov eax, dword [ebp - 0x34]
inc eax
mov dword [ebp - 0x34], eax
cmp dword [ebp - 0x34], 3
jge 0x1002ab96
mov eax, dword [ebp - 0x34]
mov dword [ebp + eax*4 - 0x144], 0
jmp 0x1002ab79
mov dword [ebp - 0x34], 0
jmp 0x1002aba6
mov eax, dword [ebp - 0x34]
inc eax
mov dword [ebp - 0x34], eax
cmp dword [ebp - 0x34], 4
jge 0x1002abbc
mov eax, dword [ebp - 0x34]
mov dword [ebp + eax*4 - 0x478], 0xf0f5
jmp 0x1002ab9f
push 4
pop eax
shl eax, 1
mov dword [ebp + eax - 0x144], 0xfffffffd
xor eax, eax
jne 0x1002abf1
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0x144], 0
jne 0x1002abf1
mov eax, 0x18d
test eax, eax
jne 0x1002abf1
and dword [ebp - 0x2b4], 0
jmp 0x1002abfb
mov dword [ebp - 0x2b4], 1
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x144]
mov dword [ebp - 0x3f8], eax
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x144]
mov dword [ebp - 0x3e4], eax
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x144]
mov dword [ebp - 0x438], eax
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x144]
mov dword [ebp - 0x3ec], eax
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x144]
mov dword [ebp - 0x444], eax
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x144]
mov dword [ebp - 0x3f4], eax
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x144]
mov dword [ebp - 0x42c], eax
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x144], 0xfffb
ja 0x1002ac9b
mov dword [ebp - 0x220], 1
jmp 0x1002aca2
and dword [ebp - 0x220], 0
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x220]
imul ecx, dword [ebp + eax - 0x144]
mov dword [ebp - 0x228], ecx
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x228]
mov dword [ebp + eax - 0x478], ecx
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x144]
cmp eax, dword [ebp - 0x228]
jle 0x1002acef
mov dword [ebp - 0x230], 1
jmp 0x1002acf6
and dword [ebp - 0x230], 0
push 4
pop eax
shl eax, 1
mov ecx, dword [ebp - 0x230]
sub ecx, dword [ebp + eax - 0x144]
mov dword [ebp - 0x50], ecx
mov dword [ebp - 0x50], 0
jmp 0x1002ad1b
mov eax, dword [ebp - 0x50]
inc eax
mov dword [ebp - 0x50], eax
cmp dword [ebp - 0x50], 4
jge 0x1002ad31
mov eax, dword [ebp - 0x50]
mov dword [ebp + eax*4 - 0x478], 0xfffffffe
jmp 0x1002ad14
mov eax, dword [ebp - 0x238]
mov ecx, dword [ebp - 0x5c]
mov dword [eax], ecx
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x38c]
call fcn.1000e2ce
jmp 0x1002adbb
mov eax, dword [ebp + 0x20]
mov dword [ebp - 0x2c0], eax
push dword [ebp - 0x2c0]
push 0
call fcn.10026932
pop ecx
pop ecx
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret