Function at 0x10032b41
Capabilities:
Parse pe header

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x1006208b
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x770
push esi
and dword [ebp - 0x3c], 0
mov dword [ebp - 0x1c], 0x82ca
mov dword [ebp - 0x12c], 0
push 2
lea ecx, [ebp - 0x43c]
call fcn.1000b4e9
and dword [ebp - 4], 0
push 0x2198
push 0x42f0
push 0
push 1
push 1
lea eax, [ebp - 0x43c]
push eax
push 0x7da9
lea eax, [ebp - 0x64c]
push eax
push 0x4f63
call fcn.1002d4da
add esp, 0x24
cmp dword [ebp - 0x1c], 0
je 0x10032c18
mov eax, 0x8470
test eax, eax
je 0x10032c18
mov eax, dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], eax
jle 0x10032bd9
mov dword [ebp - 0x254], 1
jmp 0x10032be0
and dword [ebp - 0x254], 0
mov eax, dword [ebp - 0x1c]
add eax, dword [ebp - 0x254]
cmp eax, dword [ebp - 0x1c]
jle 0x10032bfa
mov dword [ebp - 0x414], 1
jmp 0x10032c01
and dword [ebp - 0x414], 0
mov eax, dword [ebp - 0x1c]
cmp dword [ebp - 0x414], eax
jne 0x10032c18
mov dword [ebp - 0x440], 1
jmp 0x10032c1f
and dword [ebp - 0x440], 0
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0x5f4], eax
mov eax, dword [ebp - 0x1c]
add eax, 0x58c4
cmp dword [ebp - 0x1c], eax
jge 0x10032c41
mov dword [ebp - 0x41c], 1
jmp 0x10032c48
and dword [ebp - 0x41c], 0
mov eax, dword [ebp - 0x1c]
cmp dword [ebp - 0x41c], eax
jle 0x10032c5f
mov dword [ebp - 0x3f8], 1
jmp 0x10032c66
and dword [ebp - 0x3f8], 0
mov eax, dword [ebp - 0x1c]
cmp dword [ebp - 0x3f8], eax
jge 0x10032c7d
mov dword [ebp - 0x1b4], 1
jmp 0x10032c84
and dword [ebp - 0x1b4], 0
cmp dword [ebp - 0x1b4], 0xb27
jg 0x10032c9c
mov dword [ebp - 0x510], 1
jmp 0x10032ca3
and dword [ebp - 0x510], 0
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0x5f8], eax
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0x600], eax
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0x61c], eax
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0x624], eax
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0x62c], eax
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0x634], eax
mov eax, dword [ebp - 0x12c]
mov dword [ebp - 0x63c], eax
push 1
lea ecx, [ebp - 0x43c]
call fcn.1000b52a
cmp dword [eax], 0
jne 0x10032d12
push 1
lea ecx, [ebp - 0x43c]
call fcn.1000b52a
cmp dword [eax], 0
jne 0x10032d12
and dword [ebp - 0x3f4], 0
jmp 0x10032d1c
mov dword [ebp - 0x3f4], 1
push 0
lea ecx, [ebp - 0x43c]
call fcn.1000b52a
mov ecx, dword [ebp - 0x3f4]
cmp ecx, dword [eax]
jl 0x10032d41
or eax, 0xffffffff
jne 0x10032d41
and dword [ebp - 0x1bc], 0
jmp 0x10032d4b
mov dword [ebp - 0x1bc], 1
mov eax, dword [ebp - 0x12c]
cmp dword [ebp - 0x1bc], eax
jne 0x10032d6b
mov eax, 0xc4177fd8
test eax, eax
jne 0x10032d6b
and dword [ebp - 0x3fc], 0
jmp 0x10032d75
mov dword [ebp - 0x3fc], 1
mov eax, dword [ebp - 0x3fc]
inc eax
cmp eax, dword [ebp - 0x12c]
jne 0x10032d8b
call fcn.10032386
jmp 0x10032de5
mov dword [ebp - 0x518], 0xf4b430f
mov dword [ebp - 0x520], 1
push 0x491c
lea eax, [ebp - 0x518]
push eax
push 0x2672
lea eax, [ebp - 0x520]
push eax
push 0xfaf
push 0
push 1
lea eax, [ebp - 0x43c]
push eax
push 0x6036
push 0x75f6
lea eax, [ebp - 0x12c]
push eax
push 0x399e
call fcn.1002e92d
add esp, 0x30
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x43c]
call fcn.1000b525
mov dword [ebp - 0xe8], 0x252cb136
mov dword [ebp - 0x28], 0xb89bdd77
mov dword [ebp - 0x2fc], 0xf62c4df8
mov dword [ebp - 0x88], 0x44f4
mov dword [ebp - 0x130], 0
jmp 0x10032e32
mov eax, dword [ebp - 0x130]
inc eax
mov dword [ebp - 0x130], eax
cmp dword [ebp - 0x130], 4
jge 0x10032e4e
mov eax, dword [ebp - 0x130]
mov dword [ebp + eax*4 - 0x714], 1
jmp 0x10032e25
push 0x6b79
push 0x1e43
lea eax, [ebp - 0xe8]
push eax
push 0x344a
push 1
push 1
push 0x38d
call fcn.1002bca7
add esp, 0x1c
mov eax, dword [ebp - 0xe8]
mov dword [ebp - 0x644], eax
mov eax, dword [ebp - 0x28]
cmp dword [ebp - 0x28], eax
je 0x10032e95
mov dword [ebp - 0x1c4], 1
jmp 0x10032e9c
and dword [ebp - 0x1c4], 0
mov eax, dword [ebp - 0x28]
cmp dword [ebp - 0x1c4], eax
jle 0x10032eb3
mov dword [ebp - 0x404], 1
jmp 0x10032eba
and dword [ebp - 0x404], 0
mov eax, dword [ebp - 0x28]
cmp dword [ebp - 0x404], eax
jl 0x10032ed1
mov dword [ebp - 0x40c], 1
jmp 0x10032ed8
and dword [ebp - 0x40c], 0
mov eax, dword [ebp - 0x28]
cmp dword [ebp - 0x40c], eax
jne 0x10032eef
mov dword [ebp - 0x1d0], 1
jmp 0x10032ef6
and dword [ebp - 0x1d0], 0
mov eax, dword [ebp - 0x1d0]
mov dword [ebp - 0x2fc], eax
mov eax, dword [ebp - 0x28]
imul eax, dword [ebp - 0x2fc]
cmp eax, dword [ebp - 0x28]
jge 0x10032f1d
mov dword [ebp - 0x1d8], 1
jmp 0x10032f24
and dword [ebp - 0x1d8], 0
mov eax, dword [ebp - 0x1d8]
dec eax
cmp eax, dword [ebp - 0x88]
jle 0x10032f3f
mov dword [ebp - 0x300], 1
jmp 0x10032f46
and dword [ebp - 0x300], 0
mov eax, dword [ebp - 0x28]
cmp dword [ebp - 0x300], eax
jl 0x10032f5d
mov dword [ebp - 0x1e0], 1
jmp 0x10032f64
and dword [ebp - 0x1e0], 0
mov eax, dword [ebp - 0x1e0]
mov dword [ebp - 0x28], eax
cmp dword [ebp - 0x28], 0
jne 0x10032f82
cmp dword [ebp - 0x28], 0
jne 0x10032f82
and dword [ebp - 0x390], 0
jmp 0x10032f8c
mov dword [ebp - 0x390], 1
mov eax, dword [ebp - 0x88]
cmp dword [ebp - 0x390], eax
jl 0x10032fa6
mov dword [ebp - 0x1e8], 1
jmp 0x10032fad
and dword [ebp - 0x1e8], 0
mov eax, dword [ebp - 0x88]
add eax, dword [ebp - 0x1e8]
cmp eax, 0x7084
jl 0x10032fcc
mov dword [ebp - 0x308], 1
jmp 0x10032fd3
and dword [ebp - 0x308], 0
mov eax, dword [ebp - 0x88]
cmp dword [ebp - 0x308], eax
jle 0x10032fed
mov dword [ebp - 0x1f0], 1
jmp 0x10032ff4
and dword [ebp - 0x1f0], 0
mov eax, dword [ebp - 0x1f0]
neg eax
je 0x1003300f
xor eax, eax
inc eax
je 0x1003300f
mov dword [ebp - 0x3d8], 1
jmp 0x10033016
and dword [ebp - 0x3d8], 0
cmp dword [ebp - 0x3d8], 1
jne 0x1003302b
mov dword [ebp - 0x1f8], 1
jmp 0x10033032
and dword [ebp - 0x1f8], 0
mov eax, dword [ebp - 0x1f8]
sub eax, dword [ebp - 0x88]
cmp eax, 5
jae 0x1003304f
mov dword [ebp - 0x310], 1
jmp 0x10033056
and dword [ebp - 0x310], 0
mov dword [ebp - 0xe8], 0xfffffff7
mov eax, dword [ebp - 0xe8]
cmp eax, dword [ebp - 0x310]
jge 0x1003307a
mov dword [ebp - 0x200], 1
jmp 0x10033081
and dword [ebp - 0x200], 0
mov eax, dword [ebp - 0x88]
cmp dword [ebp - 0x200], eax
jg 0x1003309b
mov dword [ebp - 0x398], 1
jmp 0x100330a2
and dword [ebp - 0x398], 0
cmp dword [ebp - 0x398], 7
jbe 0x100330b7
mov dword [ebp - 0x208], 1
jmp 0x100330be
and dword [ebp - 0x208], 0
cmp dword [ebp - 0x208], 0xffffffff
jg 0x100330d3
mov dword [ebp - 0x318], 1
jmp 0x100330da
and dword [ebp - 0x318], 0
push 4
pop eax
imul eax, eax, 3
mov ecx, dword [ebp - 0x318]
mov dword [ebp + eax - 0x714], ecx
mov dword [ebp - 0x4f0], 0x966b9117
mov dword [ebp - 0x44c], 0xb721
mov dword [ebp - 0x4e4], 0xffffffff
mov dword [ebp - 0x5f0], 0xffffffff
mov dword [ebp - 0x40], 0
jmp 0x10033125
mov eax, dword [ebp - 0x40]
inc eax
mov dword [ebp - 0x40], eax
cmp dword [ebp - 0x40], 4
jge 0x1003313b
mov eax, dword [ebp - 0x40]
mov dword [ebp + eax*4 - 0x160], 0x7f2fb5a5
jmp 0x1003311e
mov dword [ebp - 0x40], 0
jmp 0x1003314b
mov eax, dword [ebp - 0x40]
inc eax
mov dword [ebp - 0x40], eax
cmp dword [ebp - 0x40], 1
jge 0x10033161
mov eax, dword [ebp - 0x40]
mov dword [ebp + eax*4 - 0x218], 1
jmp 0x10033144
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x160], 0
jne 0x10033343
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x160], 0xffffffff
jle 0x100331fb
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x160], 0
jne 0x100331b2
or eax, 0xffffffff
jne 0x100331b2
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0x160], 0
jne 0x100331b2
and dword [ebp - 0x568], 0
jmp 0x100331bc
mov dword [ebp - 0x568], 1
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x160]
mov dword [ebp - 0x654], eax
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x160], 0
je 0x100331fb
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x160], 0
je 0x100331fb
mov dword [ebp - 0x210], 1
jmp 0x10033202
and dword [ebp - 0x210], 0
cmp dword [ebp - 0x210], 0x1c36b586
jg 0x1003321a
mov dword [ebp - 0x418], 1
jmp 0x10033221
and dword [ebp - 0x418], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x418]
mov dword [ebp + eax - 0x218], ecx
mov eax, 0xc254
test eax, eax
jne 0x1003324d
push 0xfffffffffffffffc
pop eax
test eax, eax
jne 0x1003324d
and dword [ebp - 0x4fc], 0
jmp 0x10033257
mov dword [ebp - 0x4fc], 1
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x218]
mov dword [ebp - 0x65c], eax
push 4
pop eax
imul eax, eax, 3
push 4
pop ecx
imul ecx, ecx, 3
mov ecx, dword [ebp + ecx - 0x160]
cmp dword [ebp + eax - 0x160], ecx
jg 0x10033292
mov dword [ebp - 0x320], 1
jmp 0x10033299
and dword [ebp - 0x320], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x320]
sub ecx, 5
cmp dword [ebp + eax - 0x160], ecx
jge 0x100332bd
mov dword [ebp - 0x220], 1
jmp 0x100332c4
and dword [ebp - 0x220], 0
imul eax, dword [ebp - 0x220], 0xe42
push 4
pop ecx
shl ecx, 0
cmp eax, dword [ebp + ecx - 0x160]
jle 0x100332e9
mov dword [ebp - 0x3a0], 1
jmp 0x100332f0
and dword [ebp - 0x3a0], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x160]
add eax, dword [ebp - 0x3a0]
push 4
pop ecx
imul ecx, ecx, 0
cmp eax, dword [ebp + ecx - 0x160]
jge 0x1003331e
mov dword [ebp - 0x228], 1
jmp 0x10033325
and dword [ebp - 0x228], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x160]
cmp dword [ebp - 0x228], eax
jg 0x10033343
and dword [ebp - 0x328], 0
jmp 0x1003334d
mov dword [ebp - 0x328], 1
mov eax, dword [ebp - 0x4f0]
cmp dword [ebp - 0x328], eax
je 0x10033367
mov dword [ebp - 0x230], 1
jmp 0x1003336e
and dword [ebp - 0x230], 0
mov eax, dword [ebp - 0x44c]
imul eax, dword [ebp - 0x230]
push 4
pop ecx
imul ecx, ecx, 0
cmp eax, dword [ebp + ecx - 0x160]
jg 0x10033396
mov dword [ebp - 0x3e0], 1
jmp 0x1003339d
and dword [ebp - 0x3e0], 0
cmp dword [ebp - 0x3e0], 0x3690
je 0x100333b5
mov dword [ebp - 0x238], 1
jmp 0x100333bc
and dword [ebp - 0x238], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x160]
cmp dword [ebp - 0x238], eax
jl 0x100333dd
mov dword [ebp - 0x330], 1
jmp 0x100333e4
and dword [ebp - 0x330], 0
mov eax, dword [ebp - 0x330]
mov dword [ebp - 0x4e4], eax
push 0x34d6
push 0x572a
push 1
lea eax, [ebp - 0x17c]
push eax
lea eax, [ebp + 8]
push eax
push 1
push 0x6918
push 0xb29
call fcn.1002c3d2
add esp, 0x20
mov dword [ebp - 0x454], 0x1a8c
cmp dword [ebp - 0x454], 0x83a
jge 0x100336a3
mov dword [ebp - 0x664], 0x3b
and dword [ebp - 0x534], 0
lea eax, [ebp - 0x534]
push eax
push 2
lea ecx, [ebp - 0x6d4]
call fcn.1000b539
mov dword [ebp - 0x45c], eax
mov eax, dword [ebp - 0x45c]
mov dword [ebp - 0x4ec], eax
mov dword [ebp - 4], 1
push dword [ebp - 0x4ec]
push 0x3b
lea ecx, [ebp - 0x530]
call fcn.100365a5
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x6d4]
call fcn.1000b525
mov dword [ebp - 0xb8], 1
mov dword [ebp - 0x44], 2
mov byte [ebp - 0x22], 0
lea eax, [ebp - 0x464]
push eax
push 0x10007788
call fcn.1004833b
pop ecx
pop ecx
and dword [ebp - 0x138], 0
jmp 0x100334d3
mov eax, dword [ebp - 0x138]
inc eax
mov dword [ebp - 0x138], eax
mov eax, dword [ebp - 0x138]
cmp eax, dword [ebp - 0x464]
jg 0x100335be
lea eax, [ebp - 0x164]
push eax
push 0x10007788
call fcn.1004833b
pop ecx
pop ecx
cmp dword [ebp - 0x138], 0
jne 0x10033503
jmp 0x100334c6
mov eax, dword [ebp - 0x44]
sub eax, dword [ebp - 0xb8]
cmp eax, 1
jle 0x1003351e
cmp dword [ebp - 0x164], 1
jle 0x1003351e
mov byte [ebp - 0x22], 1
and dword [ebp - 0x9c], 0
jmp 0x10033534
mov eax, dword [ebp - 0x9c]
inc eax
mov dword [ebp - 0x9c], eax
mov eax, dword [ebp - 0x9c]
cmp eax, dword [ebp - 0x164]
jge 0x100335a4
push 0
mov eax, dword [ebp - 0x44]
add eax, dword [ebp - 0x9c]
push eax
lea ecx, [ebp - 0x530]
call fcn.10014a0f
mov ecx, eax
call fcn.1000b52a
mov ecx, dword [ebp - 0xb8]
mov dword [eax], ecx
mov ecx, dword [ebp - 0x44]
sub ecx, dword [ebp - 0xb8]
mov eax, dword [ebp - 0x9c]
cdq
idiv ecx
mov esi, edx
add esi, dword [ebp - 0xb8]
push 1
mov eax, dword [ebp - 0x44]
add eax, dword [ebp - 0x9c]
push eax
lea ecx, [ebp - 0x530]
call fcn.10014a0f
mov ecx, eax
call fcn.1000b52a
mov dword [eax], esi
jmp 0x10033527
mov eax, dword [ebp - 0x44]
mov dword [ebp - 0xb8], eax
mov eax, dword [ebp - 0x44]
add eax, dword [ebp - 0x164]
mov dword [ebp - 0x44], eax
jmp 0x100334c6
movzx eax, byte [ebp - 0x22]
test eax, eax
je 0x10033689
push 0x10007c54
call fcn.10048716
pop ecx
mov dword [ebp - 0xf0], 1
jmp 0x100335ee
mov eax, dword [ebp - 0xf0]
inc eax
mov dword [ebp - 0xf0], eax
mov eax, dword [ebp - 0xf0]
cmp eax, dword [ebp - 0x44]
jge 0x10033623
push 0
push dword [ebp - 0xf0]
lea ecx, [ebp - 0x530]
call fcn.10014a0f
mov ecx, eax
call fcn.1000b52a
push dword [eax]
push 0x10007a28
call fcn.10048556
pop ecx
pop ecx
jmp 0x100335e1
push 0x100076f1
call fcn.10048716
pop ecx
mov dword [ebp - 0x140], 1
jmp 0x10033647
mov eax, dword [ebp - 0x140]
inc eax
mov dword [ebp - 0x140], eax
mov eax, dword [ebp - 0x140]
cmp eax, dword [ebp - 0x44]
jge 0x1003367c
push 1
push dword [ebp - 0x140]
lea ecx, [ebp - 0x530]
call fcn.10014a0f
mov ecx, eax
call fcn.1000b52a
push dword [eax]
push 0x10007a28
call fcn.10048556
pop ecx
pop ecx
jmp 0x1003363a
push 0x100076f1
call fcn.10048716
pop ecx
jmp 0x10033694
push 0x10007c60
call fcn.10048716
pop ecx
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x530]
call fcn.10014a0a
mov eax, dword [ebp - 0x17c]
movzx eax, word [eax]
cmp eax, 0x5a4d
je 0x10033f31
mov dword [ebp - 0x5c], 0x4fd3df75
mov dword [ebp - 0x240], 0xe3d2f551
mov dword [ebp - 0x18c], 0xbca925f3
mov dword [ebp - 0x16c], 0x5dfcc9f7
mov dword [ebp - 0x150], 0x4d9faba
mov dword [ebp - 0x400], 0x818ebcce
mov dword [ebp - 0xf8], 0
jmp 0x10033709
mov eax, dword [ebp - 0xf8]
inc eax
mov dword [ebp - 0xf8], eax
cmp dword [ebp - 0xf8], 1
jge 0x10033725
mov eax, dword [ebp - 0xf8]
mov dword [ebp + eax*4 - 0x484], 0xb70e9afb
jmp 0x100336fc
mov dword [ebp - 0x5c], 0
jmp 0x10033735
mov eax, dword [ebp - 0x5c]
inc eax
mov dword [ebp - 0x5c], eax
cmp dword [ebp - 0x5c], 6
jne 0x10033f2a
mov dword [ebp - 0x2c], 0xffffffff
mov dword [ebp - 0x46c], 0x7a760e06
mov dword [ebp - 0x2c], 0xfffffff7
jmp 0x10033760
mov eax, dword [ebp - 0x2c]
inc eax
mov dword [ebp - 0x2c], eax
cmp dword [ebp - 0x2c], 5
jl 0x10033f25
mov dword [ebp - 0xc8], 1
mov dword [ebp - 0x60], 0x1dd2eb2f
mov dword [ebp - 0x270], 0
mov dword [ebp - 0x560], 1
push 0x192f
push 1
lea eax, [ebp - 0x2c]
push eax
push 1
lea eax, [ebp - 0x5c]
push eax
push 0x6cd9
lea eax, [ebp - 0xc8]
push eax
push 0x1ad0
lea eax, [ebp - 0x60]
push eax
call fcn.1002c537
add esp, 0x24
cmp dword [ebp - 0x5c], 0
je 0x100338eb
mov dword [ebp - 0x16c], 0x95d7c154
mov eax, dword [ebp - 0x16c]
cmp dword [ebp - 0x2c], eax
jge 0x100337e8
mov dword [ebp - 0x3a8], 1
jmp 0x100337ef
and dword [ebp - 0x3a8], 0
cmp dword [ebp - 0xc8], 0
je 0x1003380a
cmp dword [ebp - 0x2c], 0
je 0x1003380a
mov dword [ebp - 0x248], 1
jmp 0x10033811
and dword [ebp - 0x248], 0
mov dword [ebp - 0x240], 0xfff6
mov eax, dword [ebp - 0x240]
mov dword [ebp - 0x18c], eax
mov eax, dword [ebp - 0x3a8]
mov dword [ebp - 0x150], eax
mov eax, dword [ebp - 0x18c]
imul eax, dword [ebp - 0x150]
cmp eax, dword [ebp - 0x248]
jle 0x10033854
mov dword [ebp - 0x4f8], 1
jmp 0x1003385b
and dword [ebp - 0x4f8], 0
mov eax, dword [ebp - 0x5c]
cmp dword [ebp - 0x5c], eax
jle 0x10033876
push 8
pop eax
test eax, eax
je 0x10033876
mov dword [ebp - 0x338], 1
jmp 0x1003387d
and dword [ebp - 0x338], 0
mov eax, dword [ebp - 0x2c]
cmp dword [ebp - 0x338], eax
jne 0x10033894
mov dword [ebp - 0x250], 1
jmp 0x1003389b
and dword [ebp - 0x250], 0
mov eax, dword [ebp - 0x250]
mov dword [ebp - 0x400], eax
cmp dword [ebp - 0x400], 0xa942f34c
jb 0x100338bf
mov dword [ebp - 0x258], 1
jmp 0x100338c6
and dword [ebp - 0x258], 0
mov eax, dword [ebp - 0x258]
mov dword [ebp - 0x60], eax
mov eax, dword [ebp - 0x60]
mov dword [ebp - 0x6b8], eax
push 0xfffffffffffffffc
pop eax
test eax, eax
je 0x100338eb
mov dword [ebp - 0x340], 1
jmp 0x100338f2
and dword [ebp - 0x340], 0
cmp dword [ebp - 0x340], 0x5008d6db
je 0x10033d48
push 0x6a63
lea eax, [ebp - 0x46c]
push eax
push 0x5e55
push 1
push 0x1dac
push 0x28f9
push 1
push 0x4215
call fcn.1002c7c2
add esp, 0x20
mov byte [ebp - 0x73], 0
mov dword [ebp - 0x4f4], 0x154e
cmp dword [ebp - 0x4f4], 0xd41
jge 0x10033d36
lea eax, [ebp - 0x47c]
push eax
lea eax, [ebp - 0x1a8]
push eax
lea eax, [ebp - 0x1a0]
push eax
push 0x10007c68
call fcn.1004833b
add esp, 0x10
mov byte [ebp - 0x69], 0
lea eax, [ebp - 0x69]
push eax
push dword [ebp - 0x1a8]
lea ecx, [ebp - 0x72c]
call fcn.10014a1c
mov dword [ebp - 0x474], eax
mov eax, dword [ebp - 0x474]
mov dword [ebp - 0x500], eax
mov dword [ebp - 4], 4
push dword [ebp - 0x500]
push dword [ebp - 0x1a0]
lea ecx, [ebp - 0x108]
call fcn.10036830
mov byte [ebp - 4], 6
lea ecx, [ebp - 0x72c]
call fcn.10014a7d
and dword [ebp - 0xb4], 0
mov dword [ebp - 0x78], 1
jmp 0x100339dd
mov eax, dword [ebp - 0x78]
inc eax
mov dword [ebp - 0x78], eax
mov eax, dword [ebp - 0x78]
cmp eax, dword [ebp - 0x47c]
jg 0x10033d15
lea eax, [ebp - 0x10]
push eax
lea eax, [ebp - 0x14]
push eax
push 0x10007a94
call fcn.1004833b
add esp, 0xc
mov eax, dword [ebp - 0x14]
dec eax
mov dword [ebp - 0x14], eax
mov eax, dword [ebp - 0x10]
dec eax
mov dword [ebp - 0x10], eax
push 1
push dword [ebp - 0x10]
lea eax, [ebp - 0x73c]
push eax
push dword [ebp - 0x14]
lea ecx, [ebp - 0x108]
call fcn.10036857
mov ecx, eax
call fcn.10014a9d
mov ecx, eax
call fcn.10014abc
cmp dword [ebp - 0x14], 0
jle 0x10033ae8
cmp dword [ebp - 0x10], 0
jle 0x10033ae8
push dword [ebp - 0x10]
lea eax, [ebp - 0x764]
push eax
mov eax, dword [ebp - 0x14]
dec eax
push eax
lea ecx, [ebp - 0x108]
call fcn.10036857
mov ecx, eax
call fcn.10014a9d
mov ecx, eax
call fcn.10014ae1
movzx eax, al
test eax, eax
je 0x10033ae8
mov eax, dword [ebp - 0x10]
dec eax
push eax
lea eax, [ebp - 0x6e4]
push eax
push dword [ebp - 0x14]
lea ecx, [ebp - 0x108]
call fcn.10036857
mov ecx, eax
call fcn.10014a9d
mov ecx, eax
call fcn.10014ae1
movzx eax, al
test eax, eax
je 0x10033ae8
mov eax, dword [ebp - 0x10]
dec eax
push eax
lea eax, [ebp - 0x6ec]
push eax
mov eax, dword [ebp - 0x14]
dec eax
push eax
lea ecx, [ebp - 0x108]
call fcn.10036857
mov ecx, eax
call fcn.10014a9d
mov ecx, eax
call fcn.10014ae1
movzx eax, al
test eax, eax
je 0x10033ae8
mov eax, dword [ebp - 0x78]
mov dword [ebp - 0xb4], eax
jmp 0x10033d15
cmp dword [ebp - 0x14], 0
jle 0x10033b9f
mov eax, dword [ebp - 0x1a8]
dec eax
cmp dword [ebp - 0x10], eax
jge 0x10033b9f
push dword [ebp - 0x10]
lea eax, [ebp - 0x6fc]
push eax
mov eax, dword [ebp - 0x14]
dec eax
push eax
lea ecx, [ebp - 0x108]
call fcn.10036857
mov ecx, eax
call fcn.10014a9d
mov ecx, eax
call fcn.10014ae1
movzx eax, al
test eax, eax
je 0x10033b9f
mov eax, dword [ebp - 0x10]
inc eax
push eax
lea eax, [ebp - 0x6dc]
push eax
push dword [ebp - 0x14]
lea ecx, [ebp - 0x108]
call fcn.10036857
mov ecx, eax
call fcn.10014a9d
mov ecx, eax
call fcn.10014ae1
movzx eax, al
test eax, eax
je 0x10033b9f
mov eax, dword [ebp - 0x10]
inc eax
push eax
lea eax, [ebp - 0x74c]
push eax
mov eax, dword [ebp - 0x14]
dec eax
push eax
lea ecx, [ebp - 0x108]
call fcn.10036857
mov ecx, eax
call fcn.10014a9d
mov ecx, eax
call fcn.10014ae1
movzx eax, al
test eax, eax
je 0x10033b9f
mov eax, dword [ebp - 0x78]
mov dword [ebp - 0xb4], eax
jmp 0x10033d15
mov eax, dword [ebp - 0x1a0]
dec eax
cmp dword [ebp - 0x14], eax
jge 0x10033c56
cmp dword [ebp - 0x10], 0
jle 0x10033c56
push dword [ebp - 0x10]
lea eax, [ebp - 0x75c]
push eax
mov eax, dword [ebp - 0x14]
inc eax
push eax
lea ecx, [ebp - 0x108]
call fcn.10036857
mov ecx, eax
call fcn.10014a9d
mov ecx, eax
call fcn.10014ae1
movzx eax, al
test eax, eax
je 0x10033c56
mov eax, dword [ebp - 0x10]
dec eax
push eax
lea eax, [ebp - 0x734]
push eax
push dword [ebp - 0x14]
lea ecx, [ebp - 0x108]
call fcn.10036857
mov ecx, eax
call fcn.10014a9d
mov ecx, eax
call fcn.10014ae1
movzx eax, al
test eax, eax
je 0x10033c56
mov eax, dword [ebp - 0x10]
dec eax
push eax
lea eax, [ebp - 0x6f4]
push eax
mov eax, dword [ebp - 0x14]
inc eax
push eax
lea ecx, [ebp - 0x108]
call fcn.10036857
mov ecx, eax
call fcn.10014a9d
mov ecx, eax
call fcn.10014ae1
movzx eax, al
test eax, eax
je 0x10033c56
mov eax, dword [ebp - 0x78]
mov dword [ebp - 0xb4], eax
jmp 0x10033d15
mov eax, dword [ebp - 0x1a0]
dec eax
cmp dword [ebp - 0x14], eax
jge 0x10033d10
mov eax, dword [ebp - 0x1a8]
dec eax
cmp dword [ebp - 0x10], eax
jge 0x10033d10
push dword [ebp - 0x10]
lea eax, [ebp - 0x754]
push eax
mov eax, dword [ebp - 0x14]
inc eax
push eax
lea ecx, [ebp - 0x108]
call fcn.10036857
mov ecx, eax
call fcn.10014a9d
mov ecx, eax
call fcn.10014ae1
movzx eax, al
test eax, eax
je 0x10033d10
mov eax, dword [ebp - 0x10]
inc eax
push eax
lea eax, [ebp - 0x704]
push eax
push dword [ebp - 0x14]
lea ecx, [ebp - 0x108]
call fcn.10036857
mov ecx, eax
call fcn.10014a9d
mov ecx, eax
call fcn.10014ae1
movzx eax, al
test eax, eax
je 0x10033d10
mov eax, dword [ebp - 0x10]
inc eax
push eax
lea eax, [ebp - 0x744]
push eax
mov eax, dword [ebp - 0x14]
inc eax
push eax
lea ecx, [ebp - 0x108]
call fcn.10036857
mov ecx, eax
call fcn.10014a9d
mov ecx, eax
call fcn.10014ae1
movzx eax, al
test eax, eax
je 0x10033d10
mov eax, dword [ebp - 0x78]
mov dword [ebp - 0xb4], eax
jmp 0x10033d15
jmp 0x100339d6
push dword [ebp - 0xb4]
push 0x10007794
call fcn.10048556
pop ecx
pop ecx
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x108]
call fcn.10036852
movzx eax, byte [ebp - 0x73]
test eax, eax
je 0x10033d43
call fcn.100323ae
jmp 0x10033f20
mov dword [ebp - 0x148], 0x970979b5
mov dword [ebp - 0x350], 0xffffffff
cmp dword [ebp - 0x148], 0
jne 0x10033e91
cmp dword [ebp - 0x148], 0x13ec5cb
jge 0x10033d7e
cmp dword [ebp - 0x16c], 0
je 0x10033d91
push 0xfffffffffffffffa
pop eax
test eax, eax
je 0x10033d91
mov dword [ebp - 0x260], 1
jmp 0x10033d98
and dword [ebp - 0x260], 0
mov eax, dword [ebp - 0x150]
cmp eax, dword [ebp - 0x260]
jne 0x10033db2
mov dword [ebp - 0x3b0], 1
jmp 0x10033db9
and dword [ebp - 0x3b0], 0
mov eax, dword [ebp - 0x2c]
mov ecx, dword [ebp - 0x3b0]
lea eax, [ecx + eax + 0xfff6]
add eax, dword [ebp - 0xc8]
mov dword [ebp - 0x148], eax
mov eax, dword [ebp - 0x350]
cmp dword [ebp - 0x148], eax
je 0x10033df8
cmp dword [ebp - 0xc8], 0
je 0x10033df8
mov dword [ebp - 0x508], 1
jmp 0x10033dff
and dword [ebp - 0x508], 0
mov eax, dword [ebp - 0x150]
push 7
pop ecx
sub ecx, dword [ebp - 0x60]
sub eax, ecx
cmp eax, dword [ebp - 0x60]
je 0x10033e1e
mov dword [ebp - 0x268], 1
jmp 0x10033e25
and dword [ebp - 0x268], 0
mov eax, dword [ebp - 0x268]
mov dword [ebp - 0x60], eax
mov eax, dword [ebp - 0xc8]
cmp dword [ebp - 0x60], eax
jne 0x10033e45
mov dword [ebp - 0x348], 1
jmp 0x10033e4c
and dword [ebp - 0x348], 0
mov eax, dword [ebp - 0x348]
mov dword [ebp - 0x270], eax
cmp dword [ebp - 0x270], 0
jne 0x10033e70
cmp dword [ebp - 0x60], 0
jne 0x10033e70
and dword [ebp - 0x3e8], 0
jmp 0x10033e7a
mov dword [ebp - 0x3e8], 1
mov eax, dword [ebp - 0x18c]
add eax, dword [ebp - 0x3e8]
jne 0x10033e91
and dword [ebp - 0x278], 0
jmp 0x10033e9b
mov dword [ebp - 0x278], 1
mov eax, dword [ebp - 0x2c]
cmp dword [ebp - 0x278], eax
jge 0x10033ec2
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x484], 0
je 0x10033ec2
mov dword [ebp - 0x280], 1
jmp 0x10033ec9
and dword [ebp - 0x280], 0
mov eax, dword [ebp - 0x350]
add eax, dword [ebp - 0x280]
cmp eax, 0xfffe
jae 0x10033ee8
mov dword [ebp - 0x3b8], 1
jmp 0x10033eef
and dword [ebp - 0x3b8], 0
mov eax, dword [ebp - 0x3b8]
mov dword [ebp - 0x560], eax
push 0x2c62
push 0x1820
push 0x5f22
push 1
push 1
push 0x206d
push 0x5c15
call fcn.1002cb7f
add esp, 0x1c
jmp 0x10033759
jmp 0x1003372e
xor eax, eax
jmp 0x100362fb
mov dword [ebp - 0x38], 0
mov dword [ebp - 0x298], 0x678e045d
mov dword [ebp - 0x2a0], 0x46e74a6
mov dword [ebp - 0x4c], 0
jmp 0x10033f5c
mov eax, dword [ebp - 0x4c]
inc eax
mov dword [ebp - 0x4c], eax
cmp dword [ebp - 0x4c], 1
jge 0x10033f72
mov eax, dword [ebp - 0x4c]
mov dword [ebp + eax*4 - 0x48c], 0x2799ac78
jmp 0x10033f55
mov dword [ebp - 0x4c], 0
jmp 0x10033f82
mov eax, dword [ebp - 0x4c]
inc eax
mov dword [ebp - 0x4c], eax
cmp dword [ebp - 0x4c], 3
jge 0x10033f98
mov eax, dword [ebp - 0x4c]
mov dword [ebp + eax*4 - 0x674], 1
jmp 0x10033f7b
mov dword [ebp - 0x38], 0
jmp 0x10033fa8
mov eax, dword [ebp - 0x38]
inc eax
mov dword [ebp - 0x38], eax
cmp dword [ebp - 0x38], 0
jg 0x10034134
mov dword [ebp - 0x174], 0xf38c0887
mov dword [ebp - 0x360], 0x1aae4b9a
mov dword [ebp - 0x290], 0xe5ab06c0
mov dword [ebp - 0x494], 0x280bfe73
cmp dword [ebp - 0x174], 0
je 0x100340bc
mov eax, dword [ebp - 0x38]
mov dword [ebp - 0x288], eax
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x288]
mov dword [ebp + eax - 0x674], ecx
mov eax, dword [ebp - 0x38]
mov dword [ebp + eax*4 - 0x48c], 0xcf04
cmp dword [ebp - 0x288], 0xcf04
jl 0x10034029
mov dword [ebp - 0x358], 1
jmp 0x10034030
and dword [ebp - 0x358], 0
mov eax, dword [ebp - 0x358]
mov dword [ebp - 0x290], eax
cmp dword [ebp - 0x290], 0
jne 0x10034054
cmp dword [ebp - 0x38], 0
jne 0x10034054
and dword [ebp - 0x410], 0
jmp 0x1003405e
mov dword [ebp - 0x410], 1
mov eax, dword [ebp - 0x410]
mov dword [ebp - 0x298], eax
mov eax, dword [ebp - 0x174]
cmp dword [ebp - 0x298], eax
jg 0x10034084
mov dword [ebp - 0x504], 1
jmp 0x1003408b
and dword [ebp - 0x504], 0
mov eax, dword [ebp - 0x38]
mov dword [ebp - 0x360], eax
mov eax, dword [ebp - 0x360]
mov dword [ebp - 0x6c0], eax
mov eax, dword [ebp - 0x38]
sub eax, 0xfe2c
mov dword [ebp - 0x2a0], eax
je 0x100340bc
mov dword [ebp - 0x3c0], 1
jmp 0x100340c3
and dword [ebp - 0x3c0], 0
mov eax, dword [ebp - 0x174]
cmp dword [ebp - 0x3c0], eax
jne 0x100340dd
mov dword [ebp - 0x2a8], 1
jmp 0x100340e4
and dword [ebp - 0x2a8], 0
cmp dword [ebp - 0x2a8], 0
jbe 0x100340f9
mov dword [ebp - 0x368], 1
jmp 0x10034100
and dword [ebp - 0x368], 0
mov eax, dword [ebp - 0x38]
cmp dword [ebp - 0x368], eax
jl 0x10034117
mov dword [ebp - 0x2b0], 1
jmp 0x1003411e
and dword [ebp - 0x2b0], 0
mov eax, dword [ebp - 0x2b0]
mov dword [ebp - 0x494], eax
call fcn.100323bb
jmp 0x10033fa1
push 4
pop eax
shl eax, 0
mov dword [ebp + eax - 0x674], 0xfffffff9
push 0x58c3
push 0xb7a
push 1
push 0x43bd
lea eax, [ebp - 0xb0]
push eax
lea eax, [ebp - 0x17c]
push eax
push 1
push 0x7c55
push 0x6f9
push 0x7b7f
lea eax, [ebp + 8]
push eax
push 0x2bfa
push 0x49be
push 0x143f
call fcn.1002ce46
add esp, 0x38
mov dword [ebp - 0x544], 0
lea eax, [ebp - 0x544]
push eax
call fcn.100323f2
pop ecx
mov eax, dword [ebp - 0xb0]
cmp dword [eax], 0x4550
je 0x100342a5
push 0x2622
push 0x38e0
push 1
push 1
push 1
push 0x2af1
push 0x4003
push 0x5de1
push 0x4bc
call fcn.1002d4da
add esp, 0x24
mov dword [ebp - 0x10c], 0
jmp 0x100341fe
mov eax, dword [ebp - 0x10c]
inc eax
mov dword [ebp - 0x10c], eax
cmp dword [ebp - 0x10c], 1
jge 0x1003421a
mov eax, dword [ebp - 0x10c]
mov dword [ebp + eax*4 - 0x14c], 0x9fdf99ff
jmp 0x100341f1
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0x14c], 0
jmp 0x10034248
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x14c]
dec eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x14c], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x14c], 0xffffffeb
je 0x1003429e
mov dword [ebp - 0x50c], 0x696a
mov dword [ebp - 0x49c], 0x5cbd9454
push 1
lea eax, [ebp - 0x49c]
push eax
push 1
push 0x1b2f
push 0x5b90
push 1
lea eax, [ebp - 0x50c]
push eax
push 0x6cf9
push 0x273b
call fcn.1002de25
add esp, 0x24
jmp 0x1003422d
xor eax, eax
jmp 0x100362fb
push 0x64fc
push 0x5a30
push 1
push 0x2aec
push 1
push dword [ebp - 0xb0]
lea eax, [ebp - 0xe0]
push eax
push 0x86b
call fcn.1002b44e
add esp, 0x20
cmp dword [ebp - 0xe0], 0
jne 0x10034979
mov dword [ebp - 0x20], 0xfffffffc
mov dword [ebp - 0x94], 1
mov dword [ebp - 0x134], 0xc82f744e
push 1
lea ecx, [ebp - 0x584]
call fcn.1000b4e9
mov dword [ebp - 4], 7
lea eax, [ebp - 0x6c8]
push eax
push 0x6ee6
push 1
push 0x5698
push 1
lea eax, [ebp - 0x584]
push eax
call fcn.1002df5c
add esp, 0x18
lea eax, [ebp - 0x20]
push eax
call fcn.10032456
pop ecx
mov dword [ebp - 0x20], 0x15
jmp 0x1003434c
mov eax, dword [ebp - 0x20]
dec eax
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 0
jl 0x100347ab
mov dword [ebp - 0x30], 1
mov dword [ebp - 0x80], 1
mov dword [ebp - 0xa4], 0x401dbdae
mov dword [ebp - 0x114], 0
jmp 0x10034387
mov eax, dword [ebp - 0x114]
inc eax
mov dword [ebp - 0x114], eax
cmp dword [ebp - 0x114], 2
jge 0x100343a3
mov eax, dword [ebp - 0x114]
mov dword [ebp + eax*4 - 0x5a4], 0xee06f66b
jmp 0x1003437a
mov dword [ebp - 0x30], 0x16
jmp 0x100343b3
mov eax, dword [ebp - 0x30]
dec eax
mov dword [ebp - 0x30], eax
cmp dword [ebp - 0x30], 8
jg 0x100343d5
push 0xdbc
push 0
push 0x51af
lea eax, [ebp - 0x80]
push eax
push 1
call fcn.10031d7c
add esp, 0x14
jmp 0x100343ac
mov eax, dword [ebp - 0x80]
mov dword [ebp - 0x6bc], eax
cmp dword [ebp - 0x20], 0xfffffffd
jl 0x100343f0
mov dword [ebp - 0x3f0], 1
jmp 0x100343f7
and dword [ebp - 0x3f0], 0
mov eax, dword [ebp - 0x30]
add eax, dword [ebp - 0x3f0]
jne 0x10034412
push 6
pop eax
test eax, eax
je 0x10034412
and dword [ebp - 0x2b8], 0
jmp 0x1003441c
mov dword [ebp - 0x2b8], 1
mov eax, dword [ebp - 0xa4]
cmp dword [ebp - 0x2b8], eax
jne 0x1003443f
cmp dword [ebp - 0xa4], 0
je 0x1003443f
mov dword [ebp - 0x370], 1
jmp 0x10034446
and dword [ebp - 0x370], 0
mov eax, dword [ebp - 0x370]
mov dword [ebp - 0x30], eax
mov eax, dword [ebp - 0xa4]
cmp dword [ebp - 0x30], eax
jle 0x10034466
mov dword [ebp - 0x2c0], 1
jmp 0x1003446d
and dword [ebp - 0x2c0], 0
mov eax, dword [ebp - 0x20]
cmp dword [ebp - 0x2c0], eax
jg 0x1003448a
cmp dword [ebp - 0xa4], 0
jne 0x1003448a
and dword [ebp - 0x4a4], 0
jmp 0x10034494
mov dword [ebp - 0x4a4], 1
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x698], eax
mov eax, dword [ebp - 0x80]
cmp dword [ebp - 0x20], eax
jne 0x100344b1
mov dword [ebp - 0x3c8], 1
jmp 0x100344b8
and dword [ebp - 0x3c8], 0
imul eax, dword [ebp - 0x3c8], 0x38f5
test eax, eax
je 0x1003450f
mov dword [ebp - 0x4ac], 0xabac8ef3
mov dword [ebp - 0x558], 1
lea eax, [ebp - 0x558]
push eax
lea eax, [ebp - 0x20]
push eax
lea eax, [ebp - 0x80]
push eax
lea eax, [ebp - 0x4ac]
push eax
lea eax, [ebp - 0x30]
push eax
lea eax, [ebp - 0x94]
push eax
lea eax, [ebp - 0xa4]
push eax
call fcn.10032516
add esp, 0x1c
jmp 0x100347a6
mov dword [ebp - 0x68], 0xffffffff
mov dword [ebp - 0x19c], 0xfffffff8
mov dword [ebp - 0x554], 0x3588d280
lea eax, [ebp - 0x134]
push eax
push 0x773f
push 0x2cbd
lea eax, [ebp - 0x20]
push eax
push 0x7115
push 1
push 0x55ea
push 1
lea eax, [ebp - 0x68]
push eax
call fcn.1002e51f
add esp, 0x24
cmp dword [ebp - 0x80], 0
jne 0x100345ed
mov eax, dword [ebp - 0x94]
mov dword [ebp - 0x614], eax
mov eax, dword [ebp - 0x68]
mov dword [ebp - 0x5fc], eax
mov eax, dword [ebp - 0x94]
cmp dword [ebp - 0x68], eax
jg 0x1003458f
mov dword [ebp - 0x2c8], 1
jmp 0x10034596
and dword [ebp - 0x2c8], 0
cmp dword [ebp - 0x2c8], 0xdd98ae1f
ja 0x100345ae
mov dword [ebp - 0x514], 1
jmp 0x100345b5
and dword [ebp - 0x514], 0
mov eax, dword [ebp - 0x134]
mov dword [ebp - 0x658], eax
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x5a4]
mov dword [ebp - 0x604], eax
mov eax, dword [ebp - 0x134]
mov dword [ebp - 0x6c4], eax
mov dword [ebp - 0x80], 0xffffffff
mov eax, dword [ebp - 0x68]
cmp dword [ebp - 0x80], eax
mov eax, dword [ebp - 0x94]
cmp dword [ebp - 0x68], eax
jg 0x10034604
mov dword [ebp - 0x378], 1
jmp 0x1003460b
and dword [ebp - 0x378], 0
push 0
lea ecx, [ebp - 0x584]
call fcn.1000b52a
mov ecx, dword [ebp - 0x378]
imul ecx, dword [eax]
push 4
pop eax
imul eax, eax, 0
cmp ecx, dword [ebp + eax - 0x5a4]
jg 0x1003463c
mov dword [ebp - 0x2d0], 1
jmp 0x10034643
and dword [ebp - 0x2d0], 0
mov eax, dword [ebp - 0x94]
cmp dword [ebp - 0x2d0], eax
jl 0x1003465d
mov dword [ebp - 0x408], 1
jmp 0x10034664
and dword [ebp - 0x408], 0
mov eax, dword [ebp - 0x20]
add eax, dword [ebp - 0x408]
cmp eax, dword [ebp - 0x94]
jge 0x10034690
push 0
lea ecx, [ebp - 0x584]
call fcn.1000b52a
cmp dword [eax], 0
jne 0x10034690
and dword [ebp - 0x2d8], 0
jmp 0x1003469a
mov dword [ebp - 0x2d8], 1
mov eax, dword [ebp - 0x2d8]
sub eax, dword [ebp - 0xa4]
imul eax, eax, 0xfffe
cmp eax, dword [ebp - 0x68]
jge 0x100346c1
push 6
pop eax
test eax, eax
jne 0x100346c1
and dword [ebp - 0x4b4], 0
jmp 0x100346cb
mov dword [ebp - 0x4b4], 1
mov eax, dword [ebp - 0x30]
mov dword [ebp - 0x610], eax
mov eax, dword [ebp - 0x68]
cmp dword [ebp - 0x134], eax
jge 0x100346eb
mov dword [ebp - 0x380], 1
jmp 0x100346f2
and dword [ebp - 0x380], 0
cmp dword [ebp - 0x380], 0xffffffff
jbe 0x10034707
mov dword [ebp - 0x2e0], 1
jmp 0x1003470e
and dword [ebp - 0x2e0], 0
mov eax, dword [ebp - 0x2e0]
mov dword [ebp - 0x19c], eax
cmp dword [ebp - 0x19c], 0
je 0x10034738
cmp dword [ebp - 0x19c], 0
je 0x10034738
mov dword [ebp - 0x3d0], 1
jmp 0x1003473f
and dword [ebp - 0x3d0], 0
mov eax, dword [ebp - 0x68]
cmp dword [ebp - 0x3d0], eax
jle 0x10034756
mov dword [ebp - 0x2e8], 1
jmp 0x1003475d
and dword [ebp - 0x2e8], 0
mov eax, dword [ebp - 0x30]
cmp dword [ebp - 0x2e8], eax
jle 0x10034774
mov dword [ebp - 0x388], 1
jmp 0x1003477b
and dword [ebp - 0x388], 0
cmp dword [ebp - 0x388], 0xc1e6
jne 0x10034793
mov dword [ebp - 0x2f0], 1
jmp 0x1003479a
and dword [ebp - 0x2f0], 0
mov eax, dword [ebp - 0x2f0]
mov dword [ebp - 0x554], eax
jmp 0x10034345
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x584]
call fcn.1000b525
push 1
lea ecx, [ebp - 0x540]
call fcn.1000b4e9
mov dword [ebp - 4], 8
push 0x2bfc
push 0x4c67
push 0x6555
push 0x4b63
lea eax, [ebp - 0x660]
push eax
push 0x7d7c
push 0x3ddb
push 0x1203
push 0x1c32
push 0
lea eax, [ebp - 0x540]
push eax
push 0x294e
push 0x1f23
push 1
push 0x7dfa
push 0x4c7a
call fcn.1002f7ae
add esp, 0x40
push 0
lea ecx, [ebp - 0x540]
call fcn.1000b52a
mov dword [eax], 0xfffffffa
jmp 0x1003485d
push 0
lea ecx, [ebp - 0x540]
call fcn.1000b52a
mov dword [ebp - 0x2f8], eax
mov eax, dword [ebp - 0x2f8]
mov eax, dword [eax]
dec eax
mov ecx, dword [ebp - 0x2f8]
mov dword [ecx], eax
push 0
lea ecx, [ebp - 0x540]
call fcn.1000b52a
cmp dword [eax], 0xfffffff7
jle 0x10034963
mov dword [ebp - 0x5c8], 0x5d09ea9
mov dword [ebp - 0x5c4], 0x5d09ea9
mov dword [ebp - 0x5c0], 0x5d09ea9
mov dword [ebp - 0x5bc], 0x5d09ea9
lea ecx, [ebp - 0x195]
call fcn.1000ba50
push eax
lea eax, [ebp - 0x5b8]
push eax
lea eax, [ebp - 0x5c8]
push eax
lea ecx, [ebp - 0x71c]
call fcn.1003658a
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0x684]
call fcn.1003655e
mov byte [ebp - 4], 9
mov dword [ebp - 0x8c], 0xffffffff
mov dword [ebp - 0x8c], 0
jmp 0x100348f7
mov eax, dword [ebp - 0x8c]
inc eax
mov dword [ebp - 0x8c], eax
cmp dword [ebp - 0x8c], 3
jg 0x10034942
mov byte [ebp - 0x71], 0
push 1
lea eax, [ebp - 0x71]
push eax
push 0x47fa
push 0x77dc
push 0x256
push 0x107d
push 1
call fcn.1002e737
add esp, 0x1c
push dword [ebp - 0x8c]
lea ecx, [ebp - 0x684]
call fcn.1000b52a
cmp dword [eax], 0
je 0x10034940
jmp 0x10034942
jmp 0x100348ea
lea eax, [ebp - 0x8c]
push eax
call fcn.100327d8
pop ecx
mov byte [ebp - 4], 8
lea ecx, [ebp - 0x684]
call fcn.1000b525
jmp 0x10034839
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x540]
call fcn.1000b525
xor eax, eax
jmp 0x100362fb
lea eax, [ebp - 0xe0]
push eax
push 0x62db
push 0x7d60
push 0x1387
lea eax, [ebp - 0x3c]
push eax
push 1
push 1
push 0x2412
lea eax, [ebp - 0x17c]
push eax
lea eax, [ebp - 0xb0]
push eax
push 0xf75
lea eax, [ebp - 0x618]
push eax
call fcn.1002e92d
add esp, 0x30
push 1
lea eax, [ebp - 0x3c]
push eax
lea eax, [ebp - 0xb0]
push eax
push 1
push 0x4a87
lea eax, [ebp + 8]
push eax
call fcn.1002eeeb
add esp, 0x18
mov dword [ebp - 0x50], 0x4fd3df75
mov dword [ebp - 0x1cc], 0xe3d2f551
mov dword [ebp - 0x184], 0xbca925f3
mov dword [ebp - 0x194], 0x5dfcc9f7
mov dword [ebp - 0x124], 0x4d9faba
mov dword [ebp - 0x1f4], 0x818ebcce
mov dword [ebp - 0x11c], 0
jmp 0x10034a30
mov eax, dword [ebp - 0x11c]
inc eax
mov dword [ebp - 0x11c], eax
cmp dword [ebp - 0x11c], 1
jge 0x10034a4c
mov eax, dword [ebp - 0x11c]
mov dword [ebp + eax*4 - 0x4d4], 0xb70e9afb
jmp 0x10034a23
mov dword [ebp - 0x50], 0
jmp 0x10034a5c
mov eax, dword [ebp - 0x50]
inc eax
mov dword [ebp - 0x50], eax
cmp dword [ebp - 0x50], 6
jne 0x10034f4b
mov dword [ebp - 0x34], 0xffffffff
mov dword [ebp - 0x4cc], 0x7a760e06
mov dword [ebp - 0x34], 0xfffffff7
jmp 0x10034a87
mov eax, dword [ebp - 0x34]
inc eax
mov dword [ebp - 0x34], eax
cmp dword [ebp - 0x34], 5
jl 0x10034f46
mov dword [ebp - 0xc0], 1
mov dword [ebp - 0x64], 0x1dd2eb2f
mov dword [ebp - 0x4bc], 0x1b79
cmp dword [ebp - 0x4bc], 0xf3f
jge 0x10034bae
call fcn.1004a257
push 0x20
pop ecx
imul ecx, ecx, 0
add eax, ecx
push eax
push 0x10007b1c
push 0x10007b20
call fcn.1004a5ef
add esp, 0xc
call fcn.1004a257
push 0x20
pop ecx
shl ecx, 0
add eax, ecx
push eax
push 0x10007b28
push 0x10007b2c
call fcn.1004a5ef
add esp, 0xc
mov edx, 0x1181fea0
mov ecx, 0x10652fb0
call fcn.10015ff3
mov edx, 0x1181fe5c
mov ecx, eax
call fcn.10015ff3
mov dword [ebp - 0x1c8], eax
mov eax, dword [ebp - 0x1c8]
mov eax, dword [eax]
mov ecx, dword [ebp - 0x1c8]
add ecx, dword [eax + 4]
call fcn.10016a99
movzx eax, al
test eax, eax
je 0x10034bae
mov ecx, 0x1181fea0
call fcn.1000b840
dec eax
push eax
push 0
mov ecx, 0x1181fea0
call fcn.1000b840
dec eax
push eax
push 0
lea eax, [ebp - 0x77c]
push eax
call fcn.10032970
add esp, 0x14
mov dword [ebp - 0x51c], eax
mov eax, dword [ebp - 0x51c]
mov dword [ebp - 0x4c4], eax
mov dword [ebp - 4], 0xa
push fcn.1000ea73
mov edx, dword [ebp - 0x4c4]
mov ecx, 0x10652ef8
call fcn.10036f70
mov ecx, eax
call fcn.1000b3c8
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x77c]
call fcn.1000b1ba
jmp 0x10034afc
mov dword [ebp - 0x22c], 0
mov dword [ebp - 0x564], 1
push 0x6b04
lea eax, [ebp - 0x50]
push eax
push 1
push 0x6b3d
lea eax, [ebp - 0xc0]
push eax
push 0x1b1f
push 0x1f89
lea eax, [ebp - 0x64]
push eax
push 0x359
push 1
push 0x3d8b
lea eax, [ebp - 0x34]
push eax
call fcn.1002efe0
add esp, 0x30
cmp dword [ebp - 0x50], 0
je 0x10034d2d
mov dword [ebp - 0x194], 0x95d7c154
mov eax, dword [ebp - 0x194]
cmp dword [ebp - 0x34], eax
jge 0x10034c2a
mov dword [ebp - 0x1d4], 1
jmp 0x10034c31
and dword [ebp - 0x1d4], 0
cmp dword [ebp - 0xc0], 0
je 0x10034c4c
cmp dword [ebp - 0x34], 0
je 0x10034c4c
mov dword [ebp - 0x1dc], 1
jmp 0x10034c53
and dword [ebp - 0x1dc], 0
mov dword [ebp - 0x1cc], 0xfff6
mov eax, dword [ebp - 0x1cc]
mov dword [ebp - 0x184], eax
mov eax, dword [ebp - 0x1d4]
mov dword [ebp - 0x124], eax
mov eax, dword [ebp - 0x184]
imul eax, dword [ebp - 0x124]
cmp eax, dword [ebp - 0x1dc]
jle 0x10034c96
mov dword [ebp - 0x55c], 1
jmp 0x10034c9d
and dword [ebp - 0x55c], 0
mov eax, dword [ebp - 0x50]
cmp dword [ebp - 0x50], eax
jle 0x10034cb8
push 8
pop eax
test eax, eax
je 0x10034cb8
mov dword [ebp - 0x1e4], 1
jmp 0x10034cbf
and dword [ebp - 0x1e4], 0
mov eax, dword [ebp - 0x34]
cmp dword [ebp - 0x1e4], eax
jne 0x10034cd6
mov dword [ebp - 0x1ec], 1
jmp 0x10034cdd
and dword [ebp - 0x1ec], 0
mov eax, dword [ebp - 0x1ec]
mov dword [ebp - 0x1f4], eax
cmp dword [ebp - 0x1f4], 0xa942f34c
jb 0x10034d01
mov dword [ebp - 0x1fc], 1
jmp 0x10034d08
and dword [ebp - 0x1fc], 0
mov eax, dword [ebp - 0x1fc]
mov dword [ebp - 0x64], eax
mov eax, dword [ebp - 0x64]
mov dword [ebp - 0x6a8], eax
push 0xfffffffffffffffc
pop eax
test eax, eax
je 0x10034d2d
mov dword [ebp - 0x204], 1
jmp 0x10034d34
and dword [ebp - 0x204], 0
cmp dword [ebp - 0x204], 0x5008d6db
je 0x10034d89
push 1
push 1
push 0x658a
lea eax, [ebp - 0x4cc]
push eax
push 0x2cdb
call fcn.1002f187
add esp, 0x14
push 1
push 0x73f6
push 0x4aae
push 1
push 1
push 0x269d
push 0x3d5f
push 0xf81
call fcn.1002f414
add esp, 0x20
jmp 0x10034f41
mov dword [ebp - 0x144], 0x970979b5
mov dword [ebp - 0x244], 0xffffffff
cmp dword [ebp - 0x144], 0
jne 0x10034ed2
cmp dword [ebp - 0x144], 0x13ec5cb
jge 0x10034dbf
cmp dword [ebp - 0x194], 0
je 0x10034dd2
push 0xfffffffffffffffa
pop eax
test eax, eax
je 0x10034dd2
mov dword [ebp - 0x20c], 1
jmp 0x10034dd9
and dword [ebp - 0x20c], 0
mov eax, dword [ebp - 0x124]
cmp eax, dword [ebp - 0x20c]
jne 0x10034df3
mov dword [ebp - 0x214], 1
jmp 0x10034dfa
and dword [ebp - 0x214], 0
mov eax, dword [ebp - 0x34]
mov ecx, dword [ebp - 0x214]
lea eax, [ecx + eax + 0xfff6]
add eax, dword [ebp - 0xc0]
mov dword [ebp - 0x144], eax
mov eax, dword [ebp - 0x244]
cmp dword [ebp - 0x144], eax
je 0x10034e39
cmp dword [ebp - 0xc0], 0
je 0x10034e39
mov dword [ebp - 0x524], 1
jmp 0x10034e40
and dword [ebp - 0x524], 0
mov eax, dword [ebp - 0x124]
push 7
pop ecx
sub ecx, dword [ebp - 0x64]
sub eax, ecx
cmp eax, dword [ebp - 0x64]
je 0x10034e5f
mov dword [ebp - 0x21c], 1
jmp 0x10034e66
and dword [ebp - 0x21c], 0
mov eax, dword [ebp - 0x21c]
mov dword [ebp - 0x64], eax
mov eax, dword [ebp - 0xc0]
cmp dword [ebp - 0x64], eax
jne 0x10034e86
mov dword [ebp - 0x224], 1
jmp 0x10034e8d
and dword [ebp - 0x224], 0
mov eax, dword [ebp - 0x224]
mov dword [ebp - 0x22c], eax
cmp dword [ebp - 0x22c], 0
jne 0x10034eb1
cmp dword [ebp - 0x64], 0
jne 0x10034eb1
and dword [ebp - 0x234], 0
jmp 0x10034ebb
mov dword [ebp - 0x234], 1
mov eax, dword [ebp - 0x184]
add eax, dword [ebp - 0x234]
jne 0x10034ed2
and dword [ebp - 0x23c], 0
jmp 0x10034edc
mov dword [ebp - 0x23c], 1
mov eax, dword [ebp - 0x34]
cmp dword [ebp - 0x23c], eax
jge 0x10034f03
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x4d4], 0
je 0x10034f03
mov dword [ebp - 0x24c], 1
jmp 0x10034f0a
and dword [ebp - 0x24c], 0
mov eax, dword [ebp - 0x244]
add eax, dword [ebp - 0x24c]
cmp eax, 0xfffe
jae 0x10034f29
mov dword [ebp - 0x1ac], 1
jmp 0x10034f30
and dword [ebp - 0x1ac], 0
mov eax, dword [ebp - 0x1ac]
mov dword [ebp - 0x564], eax
call fcn.1003282e
jmp 0x10034a80
jmp 0x10034a55
push 0
push 0x44c2
lea eax, [ebp - 0xe0]
push eax
push 1
lea eax, [ebp - 0x274]
push eax
push 0xf46
lea eax, [ebp - 0xb0]
push eax
call fcn.1003224d
add esp, 0x1c
cmp dword [ebp - 0x274], 0
je 0x100353c4
mov dword [ebp - 0xac], 1
mov dword [ebp - 0xfc], 0xfffffff9
mov dword [ebp - 0x458], 0xb969161d
mov dword [ebp - 0x468], 0
mov dword [ebp - 0x460], 0xfffffffa
mov dword [ebp - 0x4dc], 0x1607
cmp dword [ebp - 0x4dc], 0xfc3
jge 0x100350e2
push 0x10007c28
lea ecx, [ebp - 0x5ec]
call fcn.1000b168
mov dword [ebp - 4], 0xb
lea edx, [ebp - 0x5ec]
mov ecx, 0x10652fb0
call fcn.10036cbd
mov byte [ebp - 0x15], 0
and dword [ebp - 0x48], 0
lea ecx, [ebp - 0x5ec]
call fcn.1000b840
dec eax
mov dword [ebp - 0x54], eax
jmp 0x10035016
mov eax, dword [ebp - 0x54]
dec eax
mov dword [ebp - 0x54], eax
cmp dword [ebp - 0x54], 0
jl 0x100350c4
movzx eax, byte [ebp - 0x15]
test eax, eax
jne 0x10035047
push dword [ebp - 0x54]
lea ecx, [ebp - 0x5ec]
call fcn.1000cd30
movsx eax, byte [eax]
cmp eax, 0x30
jne 0x10035047
mov eax, dword [ebp - 0x48]
inc eax
mov dword [ebp - 0x48], eax
jmp 0x100350bf
movzx eax, byte [ebp - 0x15]
test eax, eax
je 0x1003506f
push dword [ebp - 0x54]
lea ecx, [ebp - 0x5ec]
call fcn.1000cd30
movsx eax, byte [eax]
cmp eax, 0x30
jne 0x1003506f
mov eax, dword [ebp - 0x48]
inc eax
inc eax
mov dword [ebp - 0x48], eax
jmp 0x100350bf
push dword [ebp - 0x54]
lea ecx, [ebp - 0x5ec]
call fcn.1000cd30
movsx eax, byte [eax]
cmp eax, 0x31
jne 0x10035098
cmp dword [ebp - 0x54], 0
jle 0x10035098
mov eax, dword [ebp - 0x48]
inc eax
mov dword [ebp - 0x48], eax
mov byte [ebp - 0x15], 1
jmp 0x100350bf
push dword [ebp - 0x54]
lea ecx, [ebp - 0x5ec]
call fcn.1000cd30
movsx eax, byte [eax]
cmp eax, 0x31
jne 0x100350bf
movzx eax, byte [ebp - 0x15]
cmp eax, 1
jne 0x100350bf
mov eax, dword [ebp - 0x48]
inc eax
inc eax
mov dword [ebp - 0x48], eax
jmp 0x1003500f
push dword [ebp - 0x48]
push 0x10007794
call fcn.10048556
pop ecx
pop ecx
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x5ec]
call fcn.1000b1ba
mov dword [ebp - 0x450], 0
mov eax, dword [ebp - 0xac]
mov dword [ebp - 0xfc], eax
cmp dword [ebp - 0xfc], 0
jne 0x1003510f
or eax, 0xffffffff
jne 0x1003510f
and dword [ebp - 0x25c], 0
jmp 0x10035119
mov dword [ebp - 0x25c], 1
mov eax, dword [ebp - 0xac]
cmp dword [ebp - 0x25c], eax
jne 0x100351bc
mov dword [ebp - 0x264], 0xfffffff9
mov dword [ebp - 0x448], 0xfffffff6
mov dword [ebp - 0x444], 0x59141a9c
lea eax, [ebp - 0xac]
push eax
lea eax, [ebp - 0x264]
push eax
call fcn.1000fbfa
pop ecx
pop ecx
push 0x3318
push 0x180d
push 0x17db
lea eax, [ebp - 0xfc]
push eax
push 0x425f
lea eax, [ebp - 0x264]
push eax
lea eax, [ebp - 0xac]
push eax
push 0x3187
lea eax, [ebp - 0x444]
push eax
push 1
push 0x6d63
push 0x22f9
lea eax, [ebp - 0x448]
push eax
push 1
push 0x6c4d
push 0xc6b
call fcn.1002f7ae
add esp, 0x40
jmp 0x1003520c
mov dword [ebp - 0x13c], 0
jmp 0x100351d5
mov eax, dword [ebp - 0x13c]
inc eax
mov dword [ebp - 0x13c], eax
cmp dword [ebp - 0x13c], 1
jge 0x100351f1
mov eax, dword [ebp - 0x13c]
mov dword [ebp + eax*4 - 0x26c], 0x9d6b
jmp 0x100351c8
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x26c]
dec eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x26c], eax
lea eax, [ebp - 0x450]
push eax
lea eax, [ebp - 0x458]
push eax
push 0x52e9
push 0x217f
push 1
push 0x6c54
push 0x3cda
push 0x2881
push 1
push 0x11a
push 1
push 0x18f2
lea eax, [ebp - 0xac]
push eax
push 0x5711
lea eax, [ebp - 0xfc]
push eax
lea eax, [ebp - 0x460]
push eax
push 0x7492
lea eax, [ebp - 0x468]
push eax
call fcn.1002fa6c
add esp, 0x48
push 0x66eb
lea eax, [ebp - 0x3c]
push eax
push 0x132b
push 1
push 0x5d1e
lea eax, [ebp - 0x274]
push eax
push 1
call fcn.1002ff9a
add esp, 0x1c
mov dword [ebp - 0x470], 0x1821
cmp dword [ebp - 0x470], 0x48c
jge 0x100353c4
and dword [ebp - 0x430], 0
and dword [ebp - 0x42c], 0
and dword [ebp - 0x428], 0
and dword [ebp - 0x424], 0
and dword [ebp - 0x420], 0
mov byte [ebp - 0x21], 0
and dword [ebp - 0x1a4], 0
jmp 0x100352ee
mov eax, dword [ebp - 0x1a4]
inc eax
mov dword [ebp - 0x1a4], eax
cmp dword [ebp - 0x1a4], 3
jge 0x10035330
lea eax, [ebp - 0x168]
push eax
push 0x10007784
call fcn.1004833b
pop ecx
pop ecx
cmp dword [ebp - 0x168], 4
jg 0x1003532e
mov eax, dword [ebp - 0x168]
mov eax, dword [ebp + eax*4 - 0x430]
inc eax
mov ecx, dword [ebp - 0x168]
mov dword [ebp + ecx*4 - 0x430], eax
jmp 0x100352e1
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x430], 0
jg 0x10035387
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0x430], 1
jg 0x10035387
push 4
pop eax
imul eax, eax, 3
cmp dword [ebp + eax - 0x430], 2
jg 0x10035387
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0x430], 1
jl 0x1003537e
push 4
pop eax
shl eax, 2
cmp dword [ebp + eax - 0x430], 2
jge 0x10035387
and dword [ebp - 0x27c], 0
jmp 0x10035391
mov dword [ebp - 0x27c], 1
mov al, byte [ebp - 0x27c]
mov byte [ebp - 0x21], al
movzx eax, byte [ebp - 0x21]
test eax, eax
je 0x100353ae
mov dword [ebp - 0x284], 0x10007a40
jmp 0x100353b8
mov dword [ebp - 0x284], 0x10007a44
push dword [ebp - 0x284]
call fcn.10048716
pop ecx
mov dword [ebp - 0x58], 0x815898f
mov dword [ebp - 0x90], 0xffffffff
push 2
lea ecx, [ebp - 0x590]
call fcn.1000b4e9
mov dword [ebp - 4], 0xc
mov dword [ebp - 0x70], 0
mov dword [ebp - 0xdc], 8
push 3
lea ecx, [ebp - 0x5d4]
call fcn.1000b4e9
mov byte [ebp - 4], 0xd
mov dword [ebp - 0x490], 0xffffffff
lea eax, [ebp - 0x590]
push eax
lea eax, [ebp - 0x478]
push eax
call fcn.1003285f
pop ecx
pop ecx
push 0x7257
push 0x2e50
push 0x412a
push 1
push 1
push 0x5e4c
lea eax, [ebp - 0x478]
push eax
push 0x5282
lea eax, [ebp - 0x5d4]
push eax
call fcn.100300f0
add esp, 0x24
mov eax, dword [ebp - 0x58]
mov dword [ebp - 0x90], eax
mov eax, dword [ebp - 0x90]
cmp dword [ebp - 0x58], eax
jl 0x1003547d
mov dword [ebp - 0x2a4], 1
jmp 0x10035484
and dword [ebp - 0x2a4], 0
cmp dword [ebp - 0x58], 0
je 0x1003549c
cmp dword [ebp - 0x58], 0
je 0x1003549c
mov dword [ebp - 0x170], 1
jmp 0x100354a3
and dword [ebp - 0x170], 0
push 0
lea ecx, [ebp - 0x590]
call fcn.1000b52a
mov ecx, dword [ebp - 0x170]
mov dword [eax], ecx
mov eax, dword [ebp - 0x58]
cmp dword [ebp - 0x170], eax
jl 0x100354cf
mov dword [ebp - 0x28c], 1
jmp 0x100354d6
and dword [ebp - 0x28c], 0
mov eax, dword [ebp - 0x58]
cmp eax, dword [ebp - 0x28c]
jle 0x100354ed
mov dword [ebp - 0x294], 1
jmp 0x100354f4
and dword [ebp - 0x294], 0
cmp dword [ebp - 0x294], 1
je 0x10035509
mov dword [ebp - 0x29c], 1
jmp 0x10035510
and dword [ebp - 0x29c], 0
mov eax, dword [ebp - 0x29c]
mov dword [ebp - 0x70], eax
mov eax, dword [ebp - 0x2a4]
sub eax, dword [ebp - 0x70]
cmp eax, dword [ebp - 0xdc]
jl 0x10035536
mov dword [ebp - 0x2ac], 1
jmp 0x1003553d
and dword [ebp - 0x2ac], 0
mov eax, dword [ebp - 0x2ac]
add eax, 0xfff9
je 0x1003555f
cmp dword [ebp - 0xdc], 0
je 0x1003555f
mov dword [ebp - 0x2b4], 1
jmp 0x10035566
and dword [ebp - 0x2b4], 0
mov eax, dword [ebp - 0x58]
add eax, dword [ebp - 0x2b4]
cmp eax, dword [ebp - 0xdc]
je 0x10035583
mov dword [ebp - 0x2bc], 1
jmp 0x1003558a
and dword [ebp - 0x2bc], 0
imul eax, dword [ebp - 0x2bc], 0x66de
test eax, eax
je 0x100355aa
cmp dword [ebp - 0x70], 0
je 0x100355aa
mov dword [ebp - 0x2c4], 1
jmp 0x100355b1
and dword [ebp - 0x2c4], 0
cmp dword [ebp - 0x2c4], 0xc65b0b56
jne 0x100355cb
xor eax, eax
inc eax
jne 0x100355cb
and dword [ebp - 0x2cc], 0
jmp 0x100355d5
mov dword [ebp - 0x2cc], 1
cmp dword [ebp - 0x2cc], 0x7292
jl 0x100355ed
mov dword [ebp - 0x178], 1
jmp 0x100355f4
and dword [ebp - 0x178], 0
push 2
lea ecx, [ebp - 0x5d4]
call fcn.1000b52a
mov ecx, dword [ebp - 0x178]
mov dword [eax], ecx
mov eax, dword [ebp - 0xdc]
add eax, dword [ebp - 0x178]
neg eax
je 0x10035637
mov byte [ebp - 0x74], 0
push 1
push 1
push 0x2e5c
lea eax, [ebp - 0x74]
push eax
call fcn.1003029e
add esp, 0x10
jmp 0x1003584a
mov dword [ebp - 0x480], 2
mov dword [ebp - 0x488], 0
mov dword [ebp - 0x498], 0x4457c1b2
mov dword [ebp - 0x110], 0
jmp 0x1003566e
mov eax, dword [ebp - 0x110]
inc eax
mov dword [ebp - 0x110], eax
cmp dword [ebp - 0x110], 3
jge 0x1003568a
mov eax, dword [ebp - 0x110]
mov dword [ebp + eax*4 - 0x694], 1
jmp 0x10035661
mov dword [ebp - 0x90], 7
jmp 0x100356a3
mov eax, dword [ebp - 0x90]
inc eax
mov dword [ebp - 0x90], eax
cmp dword [ebp - 0x90], 0xa
je 0x1003584a
mov dword [ebp - 0x98], 0x9de360ab
mov dword [ebp - 0x70], 0xffffffe7
jmp 0x100356ca
mov eax, dword [ebp - 0x70]
inc eax
mov dword [ebp - 0x70], eax
cmp dword [ebp - 0x70], 0xffffffea
jg 0x100356e3
push 4
pop eax
shl eax, 0
mov dword [ebp + eax - 0x694], 0xffffffff
jmp 0x100356c3
mov eax, dword [ebp - 0x98]
push 4
pop ecx
shl ecx, 0
mov edx, 0x31ec
sub edx, dword [ebp + ecx - 0x694]
add eax, edx
cmp dword [ebp - 0x98], eax
jg 0x10035711
mov dword [ebp - 0x2d4], 1
jmp 0x10035718
and dword [ebp - 0x2d4], 0
cmp dword [ebp - 0x2d4], 0
jae 0x1003572d
mov dword [ebp - 0x2dc], 1
jmp 0x10035734
and dword [ebp - 0x2dc], 0
mov eax, dword [ebp - 0x480]
imul eax, dword [ebp - 0x2dc]
cmp eax, 0x46bb
je 0x10035754
mov dword [ebp - 0x2e4], 1
jmp 0x1003575b
and dword [ebp - 0x2e4], 0
mov eax, dword [ebp - 0x98]
cmp dword [ebp - 0x2e4], eax
jl 0x1003577b
cmp dword [ebp - 0x488], 0
jne 0x1003577b
and dword [ebp - 0x2ec], 0
jmp 0x10035785
mov dword [ebp - 0x2ec], 1
push 0
lea ecx, [ebp - 0x590]
call fcn.1000b52a
mov ecx, dword [ebp - 0x2ec]
mov dword [eax], ecx
mov eax, dword [ebp - 0x58]
mov dword [ebp - 0x620], eax
mov eax, dword [ebp - 0x490]
mov dword [ebp - 0x668], eax
cmp dword [ebp - 0x98], 0
je 0x100357cd
cmp dword [ebp - 0x98], 0
je 0x100357cd
mov dword [ebp - 0x2f4], 1
jmp 0x100357d4
and dword [ebp - 0x2f4], 0
cmp dword [ebp - 0x2f4], 0x30e88fef
jl 0x100357ec
mov dword [ebp - 0x304], 1
jmp 0x100357f3
and dword [ebp - 0x304], 0
mov eax, dword [ebp - 0x98]
cmp dword [ebp - 0x304], eax
jge 0x1003580d
mov dword [ebp - 0x30c], 1
jmp 0x10035814
and dword [ebp - 0x30c], 0
cmp dword [ebp - 0x30c], 0xfffffffc
jbe 0x1003582f
mov eax, 0xdd2d
test eax, eax
jne 0x1003582f
and dword [ebp - 0x314], 0
jmp 0x10035839
mov dword [ebp - 0x314], 1
mov eax, dword [ebp - 0x314]
mov dword [ebp - 0x498], eax
jmp 0x10035696
mov byte [ebp - 0x82], 0
movzx eax, byte [ebp - 0x82]
test eax, eax
je 0x1003588b
push 0x4023
push 0xf4f
push 0x15b
push 0xab4
push 0x26cb
push 0x48ad
push 0x6078
push 1
push 1
call fcn.100303be
add esp, 0x24
mov byte [ebp - 4], 0xc
lea ecx, [ebp - 0x5d4]
call fcn.1000b525
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x590]
call fcn.1000b525
push dword [ebp - 0x3c]
call fcn.10029e9a
pop ecx
test eax, eax
jne 0x100358bd
xor eax, eax
jmp 0x100362fb
mov dword [ebp - 0x334], 0xfffffffc
mov dword [ebp - 0xa0], 1
mov dword [ebp - 0x4c8], 3
mov dword [ebp - 0x628], 0xffffffff
mov dword [ebp - 0x6ac], 3
push 2
lea ecx, [ebp - 0x6a4]
call fcn.1000b4e9
mov dword [ebp - 4], 0xe
mov dword [ebp - 0x630], 0x61780eec
mov dword [ebp - 0x34c], 1
mov dword [ebp - 0x678], 0xdb84
mov dword [ebp - 0x4a0], 0x23ac
cmp dword [ebp - 0x4a0], 0x9ac
jge 0x100359b1
lea eax, [ebp - 0x60c]
push eax
lea eax, [ebp - 0x4a8]
push eax
lea eax, [ebp - 0x79]
push eax
lea eax, [ebp - 0x5ac]
push eax
lea eax, [ebp - 0x4b0]
push eax
lea eax, [ebp - 0x4b8]
push eax
push 0x10007b74
call fcn.1004833b
add esp, 0x14
movsd xmm0, qword [ebp - 0x60c]
movsd qword [esp], xmm0
cvtss2sd xmm0, dword [ebp - 0x4a8]
push ecx
push ecx
movsd qword [esp], xmm0
movsx eax, byte [ebp - 0x79]
push eax
push dword [ebp - 0x5a8]
push dword [ebp - 0x5ac]
push dword [ebp - 0x4b0]
push dword [ebp - 0x4b8]
push 0x10007b8c
call fcn.10048556
add esp, 0x28
mov dword [ebp - 0xbc], 0
jmp 0x100359ca
mov eax, dword [ebp - 0xbc]
inc eax
mov dword [ebp - 0xbc], eax
cmp dword [ebp - 0xbc], 1
jge 0x100359e6
mov eax, dword [ebp - 0xbc]
mov dword [ebp + eax*4 - 0x324], 0xa6f4
jmp 0x100359bd
lea eax, [ebp - 0x6a4]
push eax
lea eax, [ebp - 0xbc]
push eax
call fcn.100328a7
pop ecx
pop ecx
cmp dword [ebp - 0x334], 0xfffffffb
jge 0x10035a10
mov dword [ebp - 0x344], 1
jmp 0x10035a17
and dword [ebp - 0x344], 0
mov eax, dword [ebp - 0xa0]
mov dword [ebp - 0x638], eax
mov eax, dword [ebp - 0xa0]
mov dword [ebp - 0x6b0], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x324]
cmp dword [ebp - 0xa0], eax
jl 0x10035a50
mov dword [ebp - 0x31c], 1
jmp 0x10035a57
and dword [ebp - 0x31c], 0
mov eax, dword [ebp - 0xa0]
cmp dword [ebp - 0x31c], eax
jge 0x10035a71
mov dword [ebp - 0x32c], 1
jmp 0x10035a78
and dword [ebp - 0x32c], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x324]
cmp dword [ebp - 0x32c], eax
je 0x10035a99
mov dword [ebp - 0x33c], 1
jmp 0x10035aa0
and dword [ebp - 0x33c], 0
mov eax, dword [ebp - 0x334]
sub eax, dword [ebp - 0x33c]
cmp dword [ebp - 0x344], eax
jl 0x10035ac0
mov dword [ebp - 0x4c0], 1
jmp 0x10035ac7
and dword [ebp - 0x4c0], 0
mov eax, dword [ebp - 0xa0]
mov dword [ebp - 0x640], eax
mov eax, dword [ebp - 0xa0]
mov dword [ebp - 0x4c8], eax
mov eax, dword [ebp - 0x34c]
dec eax
mov dword [ebp - 0x34c], eax
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x6a4]
call fcn.1000b525
push 1
lea eax, [ebp - 0x3c]
push eax
push 1
push 1
push 0x1ba8
push 0x42ea
call fcn.10030787
add esp, 0x18
push 4
lea ecx, [ebp - 0xd8]
call fcn.1000b4e9
mov dword [ebp - 4], 0xf
mov dword [ebp - 0xc4], 0
jmp 0x10035b44
mov eax, dword [ebp - 0xc4]
inc eax
mov dword [ebp - 0xc4], eax
cmp dword [ebp - 0xc4], 4
jge 0x10035b60
mov eax, dword [ebp - 0xc4]
mov dword [ebp + eax*4 - 0x578], 0x82062403
jmp 0x10035b37
lea eax, [ebp - 0xc4]
push eax
push 1
push 0xb6a
push 0x546a
push 1
lea eax, [ebp - 0xd8]
push eax
call fcn.10030bf5
add esp, 0x18
push 3
lea ecx, [ebp - 0xd8]
call fcn.1000b52a
mov dword [eax], 3
jmp 0x10035bbd
push 3
lea ecx, [ebp - 0xd8]
call fcn.1000b52a
mov dword [ebp - 0x354], eax
mov eax, dword [ebp - 0x354]
mov eax, dword [eax]
dec eax
mov ecx, dword [ebp - 0x354]
mov dword [ecx], eax
push 3
lea ecx, [ebp - 0xd8]
call fcn.1000b52a
cmp dword [eax], 0
jl 0x10035fdf
mov dword [ebp - 0xa8], 1
push 3
lea ecx, [ebp - 0x550]
call fcn.1000b4e9
mov byte [ebp - 4], 0x10
mov dword [ebp - 0x120], 0x796a
mov dword [ebp - 0x190], 1
lea eax, [ebp - 0x688]
push eax
lea eax, [ebp - 0x550]
push eax
push 0x23ce
push 1
push 1
call fcn.1003180f
add esp, 0x14
mov dword [ebp - 0xa8], 0
jmp 0x10035c3a
mov eax, dword [ebp - 0xa8]
inc eax
mov dword [ebp - 0xa8], eax
cmp dword [ebp - 0xa8], 3
jg 0x10035e2e
mov dword [ebp - 0x188], 0x73e7ed6f
mov dword [ebp - 0x648], 0xffffffff
mov dword [ebp - 0x364], 0x2955
mov dword [ebp - 0x118], 0
jmp 0x10035c7e
mov eax, dword [ebp - 0x118]
inc eax
mov dword [ebp - 0x118], eax
cmp dword [ebp - 0x118], 2
jge 0x10035c9a
mov eax, dword [ebp - 0x118]
mov dword [ebp + eax*4 - 0x5b4], 0xfffffffa
jmp 0x10035c71
mov eax, dword [ebp - 0x120]
dec eax
mov dword [ebp - 0x120], eax
mov eax, dword [ebp - 0x120]
sub eax, 0x8573
je 0x10035d9e
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x5b4]
cmp dword [ebp - 0x364], eax
jne 0x10035cd9
mov dword [ebp - 0x35c], 1
jmp 0x10035ce0
and dword [ebp - 0x35c], 0
cmp dword [ebp - 0x35c], 1
jb 0x10035cf5
mov dword [ebp - 0x4d0], 1
jmp 0x10035cfc
and dword [ebp - 0x4d0], 0
push 3
lea ecx, [ebp - 0xd8]
call fcn.1000b52a
mov eax, dword [eax]
mov eax, dword [ebp + eax*4 - 0x578]
mov dword [ebp - 0x6b4], eax
push 3
lea ecx, [ebp - 0xd8]
call fcn.1000b52a
mov eax, dword [eax]
mov eax, dword [ebp + eax*4 - 0x578]
mov dword [ebp - 0x36c], eax
push 1
lea ecx, [ebp - 0x550]
call fcn.1000b52a
mov ecx, dword [ebp - 0x36c]
mov dword [eax], ecx
mov eax, dword [ebp - 0x364]
mov dword [ebp - 0x190], eax
mov eax, dword [ebp - 0x190]
cmp dword [ebp - 0x36c], eax
je 0x10035d6f
mov dword [ebp - 0x374], 1
jmp 0x10035d76
and dword [ebp - 0x374], 0
mov eax, dword [ebp - 0x374]
add eax, 0xdc6d
cmp eax, dword [ebp - 0xa8]
jl 0x10035d92
cmp dword [ebp - 0x188], 0
je 0x10035d9e
mov dword [ebp - 0x37c], 1
jmp 0x10035da5
and dword [ebp - 0x37c], 0
cmp dword [ebp - 0x37c], 0x9118158f
jne 0x10035dbd
mov dword [ebp - 0x180], 1
jmp 0x10035dc4
and dword [ebp - 0x180], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x180]
mov dword [ebp + eax - 0x578], ecx
mov esi, dword [ebp - 0x180]
add esi, 0xb49f2b7
push 1
lea ecx, [ebp - 0xd8]
call fcn.1000b52a
sub esi, dword [eax]
mov dword [ebp - 0x188], esi
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x188]
mov dword [ebp + eax - 0x5b4], ecx
push 3
lea ecx, [ebp - 0xd8]
call fcn.1000b52a
mov eax, dword [eax]
cmp dword [ebp + eax*4 - 0x578], 0
je 0x10035e29
jmp 0x10035c2d
jmp 0x10035c2d
push 4
pop eax
shl eax, 0
mov dword [ebp + eax - 0x578], 0xc894628a
cmp dword [ebp - 0xa8], 0xc894628a
jge 0x10035e57
mov dword [ebp - 0x3ac], 1
jmp 0x10035e5e
and dword [ebp - 0x3ac], 0
mov eax, dword [ebp - 0x120]
mov dword [ebp - 0x650], eax
push 3
lea ecx, [ebp - 0xd8]
call fcn.1000b52a
cmp dword [eax], 0xd624
je 0x10035e8b
mov dword [ebp - 0x384], 1
jmp 0x10035e92
and dword [ebp - 0x384], 0
push 3
lea ecx, [ebp - 0xd8]
call fcn.1000b52a
mov ecx, dword [ebp - 0x384]
add ecx, dword [eax]
jne 0x10035eb5
mov dword [ebp - 0x38c], 1
jmp 0x10035ebc
and dword [ebp - 0x38c], 0
cmp dword [ebp - 0x38c], 0xfffffff9
jle 0x10035ed1
mov dword [ebp - 0x394], 1
jmp 0x10035ed8
and dword [ebp - 0x394], 0
push 1
lea ecx, [ebp - 0x550]
call fcn.1000b52a
mov ecx, dword [ebp - 0x394]
cmp ecx, dword [eax]
jg 0x10035efb
mov dword [ebp - 0x39c], 1
jmp 0x10035f02
and dword [ebp - 0x39c], 0
cmp dword [ebp - 0x39c], 4
jae 0x10035f17
mov dword [ebp - 0x3a4], 1
jmp 0x10035f1e
and dword [ebp - 0x3a4], 0
cmp dword [ebp - 0x3a4], 5
je 0x10035f33
mov dword [ebp - 0x3b4], 1
jmp 0x10035f3a
and dword [ebp - 0x3b4], 0
mov eax, dword [ebp - 0x3ac]
imul eax, dword [ebp - 0x3b4]
add eax, 0xfdb8
je 0x10035f63
mov eax, 0xad4a
test eax, eax
je 0x10035f63
mov dword [ebp - 0x3bc], 1
jmp 0x10035f6a
and dword [ebp - 0x3bc], 0
push 3
lea ecx, [ebp - 0xd8]
call fcn.1000b52a
mov ecx, dword [ebp - 0x3bc]
add ecx, dword [eax]
imul eax, ecx, 0xfffffff7
mov dword [ebp - 0x3c4], eax
push 1
lea ecx, [ebp - 0x550]
call fcn.1000b52a
mov ecx, dword [ebp - 0x3c4]
mov dword [eax], ecx
push 3
lea ecx, [ebp - 0xd8]
call fcn.1000b52a
mov esi, dword [ebp - 0x3c4]
imul esi, dword [eax]
push 3
lea ecx, [ebp - 0xd8]
call fcn.1000b52a
add esi, dword [eax]
imul eax, esi, 0xfffffffb
mov dword [ebp - 0x190], eax
mov byte [ebp - 4], 0xf
lea ecx, [ebp - 0x550]
call fcn.1000b525
jmp 0x10035b99
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x578]
sub eax, 0x60f3
cmp eax, 0x235bd639
je 0x10036004
mov dword [ebp - 0x3cc], 1
jmp 0x1003600b
and dword [ebp - 0x3cc], 0
push 3
lea ecx, [ebp - 0xd8]
call fcn.1000b52a
mov eax, dword [eax]
cmp eax, dword [ebp - 0x3cc]
jge 0x1003602e
mov dword [ebp - 0x3d4], 1
jmp 0x10036035
and dword [ebp - 0x3d4], 0
push 3
lea ecx, [ebp - 0xd8]
call fcn.1000b52a
mov ecx, dword [ebp - 0x3d4]
mov dword [eax], ecx
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xd8]
call fcn.1000b525
mov eax, dword [ebp - 0x3c]
mov eax, dword [eax]
cmp dword [eax + 0x28], 0
je 0x10036256
mov dword [ebp - 0xcc], 0xffffffff
mov dword [ebp - 0x128], 0
jmp 0x1003608b
mov eax, dword [ebp - 0x128]
inc eax
mov dword [ebp - 0x128], eax
cmp dword [ebp - 0x128], 1
jge 0x100360a7
mov eax, dword [ebp - 0x128]
mov dword [ebp + eax*4 - 0x4d8], 0x8c6a53d0
jmp 0x1003607e
mov byte [ebp - 0x81], 0
lea eax, [ebp - 0x81]
push eax
call fcn.100328ec
pop ecx
mov dword [ebp - 0xcc], 0
jmp 0x100360d4
mov eax, dword [ebp - 0xcc]
inc eax
mov dword [ebp - 0xcc], eax
cmp dword [ebp - 0xcc], 1
jge 0x100360f0
mov eax, dword [ebp - 0xcc]
mov dword [ebp + eax*4 - 0x4d8], 0xf251d69f
jmp 0x100360c7
mov eax, dword [ebp - 0x3c]
mov eax, dword [eax]
mov ecx, dword [ebp - 0xe0]
add ecx, dword [eax + 0x28]
mov dword [ebp - 0x1b8], ecx
mov dword [ebp - 0xec], 0xfffffffc
mov dword [ebp - 0x3dc], 0
mov dword [ebp - 0xe4], 0
jmp 0x10036131
mov eax, dword [ebp - 0xe4]
inc eax
mov dword [ebp - 0xe4], eax
cmp dword [ebp - 0xe4], 1
jge 0x1003614d
mov eax, dword [ebp - 0xe4]
mov dword [ebp + eax*4 - 0x4e0], 0xfffffff6
jmp 0x10036124
lea eax, [ebp - 0xec]
push eax
push 1
push 0x29de
push 1
push 0x334b
call fcn.10031ce4
add esp, 0x14
cmp dword [ebp - 0x3dc], 0xfffffffb
jbe 0x1003617f
mov dword [ebp - 0x3e4], 1
jmp 0x10036186
and dword [ebp - 0x3e4], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x3dc]
cmp dword [ebp + eax - 0x4e0], ecx
jle 0x100361a7
mov dword [ebp - 0x3ec], 1
jmp 0x100361ae
and dword [ebp - 0x3ec], 0
mov eax, dword [ebp - 0xec]
add eax, dword [ebp - 0x3e4]
mov ecx, dword [ebp - 0x3ec]
sub ecx, dword [ebp - 0xec]
cmp eax, ecx
jg 0x100361d6
mov dword [ebp - 0x1b0], 1
jmp 0x100361dd
and dword [ebp - 0x1b0], 0
mov eax, dword [ebp - 0x1b0]
mov dword [ebp - 0xec], eax
cmp dword [ebp - 0x1b8], 0
jne 0x100361f9
xor eax, eax
jmp 0x100362fb
push 0
push 1
push 0xdeadbeef
call dword [ebp - 0x1b8]
mov dword [ebp - 0x4e8], eax
cmp dword [ebp - 0x4e8], 0
jne 0x1003621e
xor eax, eax
jmp 0x100362fb
push 0x294a
push 0x1f1b
push 1
push 0x1ab7
push 0x794a
push 1
push 0x75a9
push 0x4082
push 0x12b
push 0x4ff9
lea eax, [ebp - 0x3c]
push eax
call fcn.10031e24
add esp, 0x2c
mov dword [ebp - 0xf4], 0
jmp 0x1003626f
mov eax, dword [ebp - 0xf4]
inc eax
mov dword [ebp - 0xf4], eax
cmp dword [ebp - 0xf4], 3
jge 0x1003628b
mov eax, dword [ebp - 0xf4]
mov dword [ebp + eax*4 - 0x59c], 0xfffffff8
jmp 0x10036262
push 4
pop eax
shl eax, 1
mov dword [ebp + eax - 0x59c], 0
jmp 0x100362b6
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x59c]
inc eax
push 4
pop ecx
shl ecx, 1
mov dword [ebp + ecx - 0x59c], eax
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0x59c], 0xe
je 0x100362cc
call fcn.10032916
jmp 0x1003629d
mov byte [ebp - 0x72], 0
lea eax, [ebp - 0x72]
push eax
call fcn.10032947
pop ecx
mov eax, dword [ebp - 0x3c]
cmp dword [eax + 0x10], 0
je 0x100362ee
mov eax, dword [ebp - 0x3c]
mov dword [ebp - 0x1c0], eax
jmp 0x100362f5
and dword [ebp - 0x1c0], 0
mov eax, dword [ebp - 0x1c0]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop esi
mov esp, ebp
pop ebp
ret