Function at 0x10033f66
Capabilities:
Authenticate hmac
Encrypt data using speck
Get common file path

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x10063e3b
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
push ecx
mov eax, 0x1600
call fcn.1005f4b0
push ebx
push esi
push edi
mov dword [ebp - 0x10], esp
movzx eax, byte [ebp + 0x1c]
test eax, eax
je 0x10033fce
push 0x2bff
push 0x14b5
push 0x2cf6
push 1
push 0x4406
push 0x41b4
push 0x2fa4
push 0x5a9a
push 0x6f61
call fcn.1003def9
add esp, 0x24
jmp 0x1003dee8
lea eax, [ebp + 0xc]
mov dword [ebp - 0xcfc], eax
mov eax, dword [ebp + 0x10]
mov dword [ebp - 0xd78], eax
mov eax, dword [ebp + 8]
mov dword [ebp - 0xc58], eax
mov eax, dword [ebp + 0x18]
mov dword [ebp - 0xc50], eax
mov eax, dword [ebp + 0x14]
mov dword [ebp - 0xc60], eax
mov eax, dword [ebp - 0xcfc]
movzx eax, byte [eax]
test eax, eax
je 0x100341f1
push 2
lea ecx, [ebp - 0x4d4]
call fcn.10011569
and dword [ebp - 4], 0
mov dword [ebp - 0x2e4], 0x5e3edfa8
mov dword [ebp - 0xa48], 0xf7c8b166
mov dword [ebp - 0xa50], 0x23edb395
mov dword [ebp - 0xa68], 0xb76e1ee6
mov dword [ebp - 0xc48], 0
mov dword [ebp - 0x1d8], 0
jmp 0x10034068
mov eax, dword [ebp - 0x1d8]
inc eax
mov dword [ebp - 0x1d8], eax
cmp dword [ebp - 0x1d8], 2
jge 0x1003408a
push dword [ebp - 0x1d8]
lea ecx, [ebp - 0x4d4]
call fcn.10011607
mov dword [eax], 0xa86ba47c
jmp 0x1003405b
push 0
lea ecx, [ebp - 0x4d4]
call fcn.10011607
mov eax, dword [eax]
mov dword [ebp - 0x2e4], eax
mov eax, dword [ebp - 0x2e4]
mov dword [ebp - 0x115c], eax
mov esi, dword [ebp - 0x2e4]
push 0
lea ecx, [ebp - 0x4d4]
call fcn.10011607
cmp dword [eax], esi
jg 0x100340d7
mov eax, 0x2b57
test eax, eax
je 0x100340d7
mov dword [ebp - 0x644], 1
jmp 0x100340de
and dword [ebp - 0x644], 0
cmp dword [ebp - 0x644], 0xffffffff
jne 0x100340f3
mov dword [ebp - 0xa20], 1
jmp 0x100340fa
and dword [ebp - 0xa20], 0
mov eax, dword [ebp - 0x2e4]
cmp dword [ebp - 0xa20], eax
jg 0x10034114
mov dword [ebp - 0xa28], 1
jmp 0x1003411b
and dword [ebp - 0xa28], 0
push 0
lea ecx, [ebp - 0x4d4]
call fcn.10011607
mov esi, dword [eax]
add esi, dword [ebp - 0xa28]
neg esi
push 0
lea ecx, [ebp - 0x4d4]
call fcn.10011607
imul esi, dword [eax]
push 0
lea ecx, [ebp - 0x4d4]
call fcn.10011607
sub esi, dword [eax]
mov dword [ebp - 0xa48], esi
mov esi, dword [ebp - 0xa48]
push 0
lea ecx, [ebp - 0x4d4]
call fcn.10011607
sub esi, dword [eax]
mov dword [ebp - 0xa50], esi
push 0
lea ecx, [ebp - 0x4d4]
call fcn.10011607
mov esi, dword [ebp - 0xa50]
push 0
lea ecx, [ebp - 0x4d4]
call fcn.10011607
cmp esi, dword [eax]
jg 0x100341a2
mov dword [ebp - 0xa58], 1
jmp 0x100341a9
and dword [ebp - 0xa58], 0
cmp dword [ebp - 0xa58], 1
jbe 0x100341be
mov dword [ebp - 0xa60], 1
jmp 0x100341c5
and dword [ebp - 0xa60], 0
mov eax, dword [ebp - 0xa60]
mov dword [ebp - 0xa68], eax
mov eax, dword [ebp - 0xa68]
mov dword [ebp - 0xc48], eax
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x4d4]
call fcn.100115eb
jmp 0x1003dee8
mov eax, dword [ebp - 0xc50]
mov dword [ebp - 0xd84], eax
mov eax, dword [ebp - 0xc58]
mov dword [ebp - 0xb20], eax
mov eax, dword [ebp - 0xc60]
mov dword [ebp - 0xa10], eax
mov eax, dword [ebp - 0xd78]
mov dword [ebp - 0x474], eax
mov dword [ebp - 0x3c], 0x860b4ffb
mov dword [ebp - 0x4a0], 0xfffffff9
push 4
lea ecx, [ebp - 0xb08]
call fcn.10011569
mov dword [ebp - 4], 1
mov dword [ebp - 0xa78], 0xab39e224
mov dword [ebp - 0x500], 0xec560449
mov dword [ebp - 0x1e0], 0
jmp 0x10034273
mov eax, dword [ebp - 0x1e0]
inc eax
mov dword [ebp - 0x1e0], eax
cmp dword [ebp - 0x1e0], 4
jge 0x10034295
push dword [ebp - 0x1e0]
lea ecx, [ebp - 0xb08]
call fcn.10011607
mov dword [eax], 0x6d8bc0d1
jmp 0x10034266
mov byte [ebp - 0xf6], 0
push 0
lea eax, [ebp - 0xf6]
push eax
push 0x609a
push 0
call fcn.10022e07
add esp, 0x10
cmp dword [ebp - 0x3c], 0
je 0x10034451
mov dword [ebp - 0x2e8], 0xecf4
push 1
lea ecx, [ebp - 0x10c8]
call fcn.10011569
mov byte [ebp - 4], 2
mov dword [ebp - 0x58], 0
jmp 0x100342e9
mov eax, dword [ebp - 0x58]
inc eax
mov dword [ebp - 0x58], eax
cmp dword [ebp - 0x58], 1
jge 0x10034305
push dword [ebp - 0x58]
lea ecx, [ebp - 0x10c8]
call fcn.10011607
mov dword [eax], 0xd52a2848
jmp 0x100342e2
mov dword [ebp - 0x58], 0
jmp 0x10034315
mov eax, dword [ebp - 0x58]
inc eax
mov dword [ebp - 0x58], eax
cmp dword [ebp - 0x58], 4
jge 0x1003432b
mov eax, dword [ebp - 0x58]
mov dword [ebp + eax*4 - 0x14b0], 0x95610a1
jmp 0x1003430e
cmp dword [ebp - 0x3c], 0
jne 0x100343a6
mov eax, dword [ebp - 0x3c]
cmp eax, dword [ebp - 0x2e8]
jg 0x10034348
mov dword [ebp - 0xa70], 1
jmp 0x1003434f
and dword [ebp - 0xa70], 0
imul eax, dword [ebp - 0x2e8], 0xffffffff
imul eax, dword [ebp - 0xa70]
test eax, eax
jg 0x1003436d
mov dword [ebp - 0xd80], 1
jmp 0x10034374
and dword [ebp - 0xd80], 0
mov dword [ebp - 0x4a0], 6
mov eax, dword [ebp - 0x4a0]
mov dword [ebp - 0x1340], eax
push 1
lea ecx, [ebp - 0xb08]
call fcn.10011607
mov eax, dword [eax]
mov dword [ebp - 0xa78], eax
cmp dword [ebp - 0xa78], 0
mov eax, dword [ebp - 0x4a0]
cmp eax, dword [ebp - 0x2e8]
je 0x100343d2
push 0
lea ecx, [ebp - 0x10c8]
call fcn.10011607
cmp dword [eax], 0
je 0x100343d2
mov dword [ebp - 0x420], 1
jmp 0x100343d9
and dword [ebp - 0x420], 0
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x420]
mov dword [ebp + eax - 0x14b0], ecx
mov eax, dword [ebp - 0x2e8]
cmp dword [ebp - 0x420], eax
jle 0x10034406
mov dword [ebp - 0xa80], 1
jmp 0x1003440d
and dword [ebp - 0xa80], 0
cmp dword [ebp - 0xa80], 0xffff
jb 0x10034425
mov dword [ebp - 0xa34], 1
jmp 0x1003442c
and dword [ebp - 0xa34], 0
mov eax, dword [ebp - 0xa34]
add eax, 0x6db09c55
mov dword [ebp - 0x500], eax
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x10c8]
call fcn.100115eb
jmp 0x100345dd
mov dword [ebp - 0x1e8], 0
jmp 0x1003446a
mov eax, dword [ebp - 0x1e8]
inc eax
mov dword [ebp - 0x1e8], eax
cmp dword [ebp - 0x1e8], 3
jge 0x10034486
mov eax, dword [ebp - 0x1e8]
mov dword [ebp + eax*4 - 0x11e4], 0x6fbc
jmp 0x1003445d
mov byte [ebp - 0xf9], 0
movzx eax, byte [ebp - 0xf9]
test eax, eax
je 0x100344c2
push 0x3c00
push 0x44c8
push 0x78a4
push 0
push 0x4701
push 0
push 0x5556
push 0x198e
call fcn.10027fb8
add esp, 0x20
mov dword [ebp - 0x3c], 0
jmp 0x100344d2
mov eax, dword [ebp - 0x3c]
inc eax
mov dword [ebp - 0x3c], eax
cmp dword [ebp - 0x3c], 3
jg 0x100345dd
mov dword [ebp - 0x368], 0
jmp 0x100344f5
mov eax, dword [ebp - 0x368]
inc eax
mov dword [ebp - 0x368], eax
cmp dword [ebp - 0x368], 3
jge 0x10034511
mov eax, dword [ebp - 0x368]
mov dword [ebp + eax*4 - 0x1448], 0
jmp 0x100344e8
push dword [ebp - 0x3c]
lea ecx, [ebp - 0xb08]
call fcn.10011607
cmp dword [eax], 0
je 0x100345a9
push dword [ebp - 0x3c]
lea ecx, [ebp - 0xb08]
call fcn.10011607
mov eax, dword [eax]
sub eax, 0x1552
push 4
pop ecx
imul ecx, ecx, 0
cmp dword [ebp + ecx - 0x11e4], eax
jge 0x10034558
mov dword [ebp - 0xa18], 1
jmp 0x1003455f
and dword [ebp - 0xa18], 0
push dword [ebp - 0x3c]
lea ecx, [ebp - 0xb08]
call fcn.10011607
push 4
pop eax
shl eax, 1
mov ecx, dword [ebp - 0x500]
cmp ecx, dword [ebp + eax - 0x11e4]
jge 0x1003458d
mov dword [ebp - 0x954], 1
jmp 0x10034594
and dword [ebp - 0x954], 0
cmp dword [ebp - 0x954], 0xffffffff
ja 0x100345a9
mov dword [ebp - 0x508], 1
jmp 0x100345b0
and dword [ebp - 0x508], 0
push 4
pop eax
shl eax, 1
mov ecx, dword [ebp - 0x508]
mov dword [ebp + eax - 0x1448], ecx
push 0xee1
push 0x532
push 0
push 1
call fcn.10023393
add esp, 0x10
jmp 0x100344cb
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xb08]
call fcn.100115eb
push 4
lea ecx, [ebp - 0x3ec]
call fcn.10011569
mov dword [ebp - 4], 3
mov dword [ebp - 0x98], 0xffffffff
mov dword [ebp - 0x4b0], 0x14ffd814
mov dword [ebp - 0xdb8], 0x99333c7d
push 1
lea ecx, [ebp - 0xa90]
call fcn.10011569
mov byte [ebp - 4], 4
mov dword [ebp - 0x144], 0
push 0
push 0x2424
push 0x37d1
lea eax, [ebp - 0x3ec]
push eax
lea eax, [ebp - 0x100]
push eax
push 0x2252
call fcn.100401d5
add esp, 0x18
push 0x71cb
push 0x385
push 1
push 0x7dc2
push 0
push 0x6ecd
push 0x2ee1
lea eax, [ebp - 0x100]
push eax
lea eax, [ebp - 0xa90]
push eax
push 0
call fcn.1003ea30
add esp, 0x28
mov dword [ebp - 0x100], 0
jmp 0x100346ae
mov eax, dword [ebp - 0x100]
inc eax
mov dword [ebp - 0x100], eax
cmp dword [ebp - 0x100], 1
jge 0x100346ca
mov eax, dword [ebp - 0x100]
mov dword [ebp + eax*4 - 0x1a0], 0xba52b339
jmp 0x100346a1
push 1
lea ecx, [ebp - 0x3ec]
call fcn.10011607
and dword [eax], 0
jmp 0x10034700
push 1
lea ecx, [ebp - 0x3ec]
call fcn.10011607
mov dword [ebp - 0x7ec], eax
mov eax, dword [ebp - 0x7ec]
mov eax, dword [eax]
dec eax
mov ecx, dword [ebp - 0x7ec]
mov dword [ecx], eax
push 1
lea ecx, [ebp - 0x3ec]
call fcn.10011607
cmp dword [eax], 0xffffffe7
jl 0x10034c29
mov dword [ebp - 0x480], 0xffffffff
push 1
lea ecx, [ebp - 0xad4]
call fcn.10011569
mov byte [ebp - 4], 5
mov dword [ebp - 0xda8], 0x642ee1e3
mov dword [ebp - 0x1f0], 0
jmp 0x10034754
mov eax, dword [ebp - 0x1f0]
inc eax
mov dword [ebp - 0x1f0], eax
cmp dword [ebp - 0x1f0], 1
jge 0x10034776
push dword [ebp - 0x1f0]
lea ecx, [ebp - 0xad4]
call fcn.10011607
mov dword [eax], 2
jmp 0x10034747
push 1
lea ecx, [ebp - 0x3ec]
call fcn.10011607
mov eax, dword [eax]
mov dword [ebp - 0xd88], eax
mov eax, dword [ebp - 0x144]
add eax, dword [ebp - 0x98]
mov dword [ebp - 0xd90], eax
mov eax, dword [ebp - 0x144]
inc eax
mov dword [ebp - 0x144], eax
mov eax, dword [ebp - 0xd88]
cmp eax, dword [ebp - 0xd90]
jg 0x100347c4
mov dword [ebp - 0x510], 1
jmp 0x100347cb
and dword [ebp - 0x510], 0
push 0
lea ecx, [ebp - 0xad4]
call fcn.10011607
cmp dword [eax], 0x3d4752e4
jle 0x100347ec
mov dword [ebp - 0xd98], 1
jmp 0x100347f3
and dword [ebp - 0xd98], 0
push 0
lea ecx, [ebp - 0xa90]
call fcn.10011607
mov eax, 0x9cff
cmp eax, 0xc214
jge 0x10034818
mov dword [ebp - 0xa0c], 1
jmp 0x1003481f
and dword [ebp - 0xa0c], 0
mov eax, dword [ebp - 0x510]
cmp eax, dword [ebp - 0xa0c]
jg 0x10034839
mov dword [ebp - 0x518], 1
jmp 0x10034840
and dword [ebp - 0x518], 0
push 0
lea ecx, [ebp - 0xad4]
call fcn.10011607
mov ecx, dword [ebp - 0x518]
cmp ecx, dword [eax]
jg 0x10034863
mov dword [ebp - 0x7f4], 1
jmp 0x1003486a
and dword [ebp - 0x7f4], 0
mov eax, dword [ebp - 0x98]
cmp dword [ebp - 0x7f4], eax
jne 0x10034884
mov dword [ebp - 0x520], 1
jmp 0x1003488b
and dword [ebp - 0x520], 0
mov dword [ebp - 0x480], 0x1328
mov eax, dword [ebp - 0x480]
sub eax, dword [ebp - 0x520]
mov dword [ebp - 0x4b0], eax
mov esi, dword [ebp - 0x4b0]
push 0
lea ecx, [ebp - 0xad4]
call fcn.10011607
cmp esi, dword [eax]
jle 0x100348ca
mov dword [ebp - 0x95c], 1
jmp 0x100348d1
and dword [ebp - 0x95c], 0
cmp dword [ebp - 0x95c], 0x2fde2bbe
jg 0x100348e9
mov dword [ebp - 0x478], 1
jmp 0x100348f0
and dword [ebp - 0x478], 0
push 0
lea ecx, [ebp - 0xad4]
call fcn.10011607
mov ecx, dword [ebp - 0x478]
mov dword [eax], ecx
cmp dword [ebp - 0x478], 0xffff
jbe 0x1003491d
mov dword [ebp - 0x528], 1
jmp 0x10034924
and dword [ebp - 0x528], 0
mov eax, dword [ebp - 0x528]
add eax, 8
je 0x10034b8a
mov dword [ebp - 0x430], 1
mov dword [ebp - 0x6c], 0
jmp 0x1003494d
mov eax, dword [ebp - 0x6c]
inc eax
mov dword [ebp - 0x6c], eax
cmp dword [ebp - 0x6c], 1
jge 0x10034963
mov eax, dword [ebp - 0x6c]
mov dword [ebp + eax*4 - 0x2f0], 0x93a
jmp 0x10034946
mov dword [ebp - 0x6c], 0
jmp 0x10034973
mov eax, dword [ebp - 0x6c]
inc eax
mov dword [ebp - 0x6c], eax
cmp dword [ebp - 0x6c], 3
jge 0x10034989
mov eax, dword [ebp - 0x6c]
mov dword [ebp + eax*4 - 0x1454], 0x8f302d78
jmp 0x1003496c
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x1a0], 0
je 0x10034a95
push 4
pop eax
imul eax, eax, 0
push 4
pop ecx
imul ecx, ecx, 0
mov ecx, dword [ebp + ecx - 0x2f0]
cmp ecx, dword [ebp + eax - 0x2f0]
jge 0x100349c5
mov dword [ebp - 0x428], 1
jmp 0x100349cc
and dword [ebp - 0x428], 0
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x1a0], 0xffff
jb 0x100349eb
mov dword [ebp - 0x7fc], 1
jmp 0x100349f2
and dword [ebp - 0x7fc], 0
push 0
lea ecx, [ebp - 0xad4]
call fcn.10011607
mov ecx, dword [ebp - 0x428]
mov dword [eax], ecx
mov eax, dword [ebp - 0x428]
mov dword [ebp - 0x430], eax
mov eax, dword [ebp - 0x430]
cmp eax, dword [ebp - 0x7fc]
jl 0x10034a2d
mov dword [ebp - 0x530], 1
jmp 0x10034a34
and dword [ebp - 0x530], 0
cmp dword [ebp - 0x530], 0xd863
jge 0x10034a4c
mov dword [ebp - 0xa94], 1
jmp 0x10034a53
and dword [ebp - 0xa94], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x2f0]
cmp dword [ebp - 0xa94], eax
jne 0x10034a74
mov dword [ebp - 0x538], 1
jmp 0x10034a7b
and dword [ebp - 0x538], 0
push 1
lea ecx, [ebp - 0x3ec]
call fcn.10011607
mov ecx, dword [ebp - 0x538]
imul ecx, dword [eax]
test ecx, ecx
jne 0x10034aa7
mov eax, 0x9898
test eax, eax
jne 0x10034aa7
and dword [ebp - 0x804], 0
jmp 0x10034ab1
mov dword [ebp - 0x804], 1
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x804]
neg ecx
cmp ecx, dword [ebp + eax - 0x2f0]
jg 0x10034ad4
mov dword [ebp - 0x540], 1
jmp 0x10034adb
and dword [ebp - 0x540], 0
push 0
lea ecx, [ebp - 0xa90]
call fcn.10011607
mov ecx, dword [ebp - 0x540]
cmp ecx, dword [eax]
jg 0x10034afe
mov dword [ebp - 0x964], 1
jmp 0x10034b05
and dword [ebp - 0x964], 0
mov eax, dword [ebp - 0x4b0]
sub eax, dword [ebp - 0x964]
jne 0x10034b1f
mov dword [ebp - 0xda0], 1
jmp 0x10034b26
and dword [ebp - 0xda0], 0
push 1
lea ecx, [ebp - 0x3ec]
call fcn.10011607
mov eax, dword [ebp - 0x430]
cmp eax, dword [ebp - 0xda8]
jle 0x10034b4d
mov dword [ebp - 0x548], 1
jmp 0x10034b54
and dword [ebp - 0x548], 0
mov eax, dword [ebp - 0x480]
cmp dword [ebp - 0x548], eax
jle 0x10034b6e
mov dword [ebp - 0x80c], 1
jmp 0x10034b75
and dword [ebp - 0x80c], 0
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x80c]
mov dword [ebp + eax - 0x1454], ecx
jmp 0x10034ba4
mov byte [ebp - 0xfb], 0
movzx eax, byte [ebp - 0xfb]
test eax, eax
je 0x10034ba4
push 0
call fcn.1003084f
pop ecx
mov dword [ebp - 0x98], 0x18
jmp 0x10034bbd
mov eax, dword [ebp - 0x98]
dec eax
mov dword [ebp - 0x98], eax
cmp dword [ebp - 0x98], 0x13
jle 0x10034c15
mov dword [ebp - 0xdb0], 0xffff
mov dword [ebp - 0x550], 0x4f120b25
push 0
push 0x2e3
push 0x2bfa
push 0x48e8
lea eax, [ebp - 0x550]
push eax
push 0x4937
push 0
lea eax, [ebp - 0xdb0]
push eax
call fcn.1003f3e3
add esp, 0x20
cmp dword [ebp - 0x550], 0
je 0x10034c13
jmp 0x10034bb0
jmp 0x10034bb0
mov byte [ebp - 4], 4
lea ecx, [ebp - 0xad4]
call fcn.100115eb
jmp 0x100346dc
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x1a0], 0x82
jge 0x10034c48
mov dword [ebp - 0xa14], 1
jmp 0x10034c4f
and dword [ebp - 0xa14], 0
mov eax, dword [ebp - 0xdb8]
cmp dword [ebp - 0xa14], eax
jle 0x10034c69
mov dword [ebp - 0xdc0], 1
jmp 0x10034c70
and dword [ebp - 0xdc0], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x1a0]
mov dword [ebp - 0x1178], eax
mov esi, dword [ebp - 0x144]
push 0
lea ecx, [ebp - 0xa90]
call fcn.10011607
mov edi, eax
push 0
lea ecx, [ebp - 0xa90]
call fcn.10011607
mov eax, dword [eax]
add eax, dword [edi]
sub eax, esi
je 0x10034cbb
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x1a0], 0
push 0
lea ecx, [ebp - 0xa90]
call fcn.10011607
mov dword [ebp - 0x558], eax
push 0
lea ecx, [ebp - 0xa90]
call fcn.10011607
mov ecx, dword [ebp - 0x558]
mov eax, dword [eax]
mov dword [ecx], eax
push 1
lea ecx, [ebp - 0x3ec]
call fcn.10011607
mov ecx, dword [ebp - 0x558]
mov ecx, dword [ecx]
cmp ecx, dword [eax]
jne 0x10034d0a
mov dword [ebp - 0x814], 1
jmp 0x10034d11
and dword [ebp - 0x814], 0
mov esi, dword [ebp - 0x814]
neg esi
push 0
lea ecx, [ebp - 0x3ec]
call fcn.10011607
add esi, dword [eax]
push 3
lea ecx, [ebp - 0x3ec]
call fcn.10011607
mov eax, dword [eax]
neg eax
cmp eax, esi
jg 0x10034d49
mov dword [ebp - 0x560], 1
jmp 0x10034d50
and dword [ebp - 0x560], 0
mov esi, dword [ebp - 0x144]
mov edi, dword [ebp - 0x98]
imul edi, dword [ebp - 0x560]
push 3
lea ecx, [ebp - 0x3ec]
call fcn.10011607
imul edi, dword [eax]
cmp edi, esi
je 0x10034d83
mov dword [ebp - 0x96c], 1
jmp 0x10034d8a
and dword [ebp - 0x96c], 0
mov eax, dword [ebp - 0x98]
sub eax, 0xfffe
cmp eax, dword [ebp - 0x96c]
jle 0x10034da9
mov dword [ebp - 0x568], 1
jmp 0x10034db0
and dword [ebp - 0x568], 0
push 1
lea ecx, [ebp - 0x3ec]
call fcn.10011607
mov ecx, dword [ebp - 0x568]
mov dword [eax], ecx
mov byte [ebp - 4], 3
lea ecx, [ebp - 0xa90]
call fcn.100115eb
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x3ec]
call fcn.100115eb
mov dword [ebp - 0x438], 0xffff
push 2
lea ecx, [ebp - 0x1038]
call fcn.10011569
mov dword [ebp - 4], 6
mov dword [ebp - 0x81c], 0x5c27
mov dword [ebp - 0xdc8], 0x1000a2b4
cmp dword [ebp - 0x81c], 0x5df5
jle 0x10034f09
and dword [ebp - 0x2f8], 0
jmp 0x10034e3b
mov eax, dword [ebp - 0x2f8]
inc eax
mov dword [ebp - 0x2f8], eax
cmp dword [ebp - 0x2f8], 0x262b
jge 0x10034f01
and dword [ebp - 0x1f8], 0
jmp 0x10034e61
mov eax, dword [ebp - 0x1f8]
inc eax
mov dword [ebp - 0x1f8], eax
cmp dword [ebp - 0x1f8], 0x1e06
jge 0x10034efc
and dword [ebp - 0x3a8], 0
jmp 0x10034e87
mov eax, dword [ebp - 0x3a8]
inc eax
mov dword [ebp - 0x3a8], eax
cmp dword [ebp - 0x3a8], 0x7930
jge 0x10034ef7
and dword [ebp - 0x200], 0
jmp 0x10034ea9
mov eax, dword [ebp - 0x200]
inc eax
mov dword [ebp - 0x200], eax
cmp dword [ebp - 0x200], 0x4b72
jge 0x10034ef5
mov eax, dword [ebp - 0x1f8]
imul eax, dword [ebp - 0x3a8]
mov ecx, dword [ebp - 0x200]
sar eax, cl
or eax, dword [ebp - 0x2f8]
cdq
mov dword [ebp - 0xc6c], eax
mov dword [ebp - 0xc68], edx
push dword [ebp - 0xc68]
push dword [ebp - 0xc6c]
mov ecx, 0x1060ba78
call fcn.1001133e
jmp 0x10034e9c
jmp 0x10034e7a
jmp 0x10034e54
jmp 0x10034e2e
push 0
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
mov dword [ebp - 0xdd0], 1
mov byte [ebp - 4], 7
cmp dword [ebp - 0x81c], 0x5870
jge 0x10034f33
mov edx, dword [ebp - 0xdc8]
mov ecx, 0x1060ba78
call fcn.10013c65
jmp 0x10034f4f
mov dword [ebp - 4], 6
jmp 0x10034f5f
mov dword [ebp - 0x208], 0
jmp 0x10034f78
mov eax, dword [ebp - 0x208]
inc eax
mov dword [ebp - 0x208], eax
cmp dword [ebp - 0x208], 2
jge 0x10034f9a
push dword [ebp - 0x208]
lea ecx, [ebp - 0x1038]
call fcn.10011607
mov dword [eax], 3
jmp 0x10034f6b
mov eax, dword [ebp - 0x438]
dec eax
mov dword [ebp - 0x438], eax
lea eax, [ebp - 0x1038]
push eax
push 0x6241
lea eax, [ebp - 0x438]
push eax
lea eax, [ebp - 0xdd0]
push eax
push 0
push 0x1bcd
call fcn.1002959d
add esp, 0x18
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x1038]
call fcn.100115eb
mov dword [ebp - 0x54], 0x860b4ffb
mov dword [ebp - 0x460], 0xfffffff9
mov dword [ebp - 0x30], 0
mov dword [ebp - 0x30], 0
jmp 0x10035007
mov eax, dword [ebp - 0x30]
dec eax
mov dword [ebp - 0x30], eax
cmp dword [ebp - 0x30], 0xffffffe3
jl 0x10035189
mov dword [ebp - 0x12c], 1
mov dword [ebp - 0xde0], 0
mov dword [ebp - 0xde8], 0
mov dword [ebp - 0x370], 0
jmp 0x10035048
mov eax, dword [ebp - 0x370]
inc eax
mov dword [ebp - 0x370], eax
cmp dword [ebp - 0x370], 2
jge 0x10035064
mov eax, dword [ebp - 0x370]
mov dword [ebp + eax*4 - 0x14e0], 0xa56c37fc
jmp 0x1003503b
cmp dword [ebp - 0x30], 0
jne 0x100350ae
mov eax, dword [ebp - 0x30]
mov dword [ebp - 0x1328], eax
mov eax, dword [ebp - 0x30]
cmp eax, dword [ebp - 0x12c]
jne 0x1003508a
mov dword [ebp - 0x570], 1
jmp 0x10035091
and dword [ebp - 0x570], 0
mov eax, dword [ebp - 0x30]
cmp dword [ebp - 0x570], eax
jge 0x100350a5
mov eax, 0x1208373b
test eax, eax
jne 0x100350ae
and dword [ebp - 0xa6c], 0
jmp 0x100350b8
mov dword [ebp - 0xa6c], 1
cmp dword [ebp - 0xa6c], 0x71f0
jne 0x100350d0
mov dword [ebp - 0xdd8], 1
jmp 0x100350d7
and dword [ebp - 0xdd8], 0
mov eax, dword [ebp - 0x30]
mov dword [ebp - 0x1180], eax
mov eax, dword [ebp - 0x12c]
mov dword [ebp - 0x1348], eax
cmp dword [ebp - 0x30], 0xfffffff7
je 0x100350fe
mov dword [ebp - 0x578], 1
jmp 0x10035105
and dword [ebp - 0x578], 0
mov eax, dword [ebp - 0x30]
imul eax, dword [ebp - 0x578]
imul eax, dword [ebp - 0x30]
cmp eax, dword [ebp - 0xde0]
je 0x10035127
mov dword [ebp - 0x824], 1
jmp 0x1003512e
and dword [ebp - 0x824], 0
mov eax, dword [ebp - 0x824]
mov dword [ebp - 0xde8], eax
mov dword [ebp - 0x12c], 0
jmp 0x10035153
mov eax, dword [ebp - 0x12c]
inc eax
mov dword [ebp - 0x12c], eax
cmp dword [ebp - 0x12c], 1
jg 0x10035184
mov byte [ebp - 0xd4], 0
movzx eax, byte [ebp - 0xd4]
test eax, eax
je 0x10035182
push 0x74cb
push 0
push 0x533d
call fcn.1002937f
add esp, 0xc
jmp 0x10035146
jmp 0x10035000
push 4
lea ecx, [ebp - 0xafc]
call fcn.10011569
mov dword [ebp - 4], 9
mov dword [ebp - 0x300], 0xa5d6c05b
mov dword [ebp - 0xcd4], 0x320e32cf
mov dword [ebp - 0x210], 0
jmp 0x100351ca
mov eax, dword [ebp - 0x210]
inc eax
mov dword [ebp - 0x210], eax
cmp dword [ebp - 0x210], 1
jge 0x100351e6
mov eax, dword [ebp - 0x210]
mov dword [ebp + eax*4 - 0xe4c], 0xffff
jmp 0x100351bd
mov byte [ebp - 0xe8], 0
movzx eax, byte [ebp - 0xe8]
test eax, eax
je 0x10035200
push 0
call fcn.10027abb
pop ecx
mov dword [ebp - 0x300], 1
jmp 0x10035219
mov eax, dword [ebp - 0x300]
inc eax
mov dword [ebp - 0x300], eax
cmp dword [ebp - 0x300], 0x1a
jl 0x10035276
mov dword [ebp - 0x218], 0xeede0b40
mov dword [ebp - 0x218], 0xfffffff2
jmp 0x10035245
mov eax, dword [ebp - 0x218]
inc eax
mov dword [ebp - 0x218], eax
cmp dword [ebp - 0x218], 0xf
jl 0x10035274
mov dword [ebp - 0xdf0], 0xaa6e6f7f
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0xdf0]
imul ecx, dword [ebp + eax - 0xe4c]
mov dword [ebp - 0xcd4], ecx
jmp 0x10035238
jmp 0x1003520c
mov dword [ebp - 0x700], 0xab39e224
mov dword [ebp - 0x10c], 3
mov dword [ebp - 0x124], 0x45f1dbec
push 2
lea ecx, [ebp - 0x1098]
call fcn.10011569
mov byte [ebp - 4], 0xa
mov dword [ebp - 0x3c8], 0
jmp 0x100352be
mov eax, dword [ebp - 0x3c8]
inc eax
mov dword [ebp - 0x3c8], eax
cmp dword [ebp - 0x3c8], 2
jge 0x100352e0
push dword [ebp - 0x3c8]
lea ecx, [ebp - 0x1098]
call fcn.10011607
mov dword [eax], 7
jmp 0x100352b1
mov dword [ebp - 0x10c], 0xfffffff7
jmp 0x100352f9
mov eax, dword [ebp - 0x10c]
inc eax
mov dword [ebp - 0x10c], eax
cmp dword [ebp - 0x10c], 0x1d
jg 0x10035562
push 3
lea ecx, [ebp - 0x10f8]
call fcn.10011569
mov byte [ebp - 4], 0xb
push 0
push 0x2b8c
lea eax, [ebp - 0x1188]
push eax
push 0x5a5a
lea eax, [ebp - 0x10f8]
push eax
push 0x6614
push 1
push 0
call fcn.100314c9
add esp, 0x20
mov dword [ebp - 0x580], 0x803
mov dword [ebp - 0xb90], 0x1000a2c8
cmp dword [ebp - 0x580], 0xa86
jle 0x10035483
and dword [ebp - 0x220], 0
jmp 0x1003537c
mov eax, dword [ebp - 0x220]
inc eax
mov dword [ebp - 0x220], eax
cmp dword [ebp - 0x220], 0x1773
jge 0x1003546c
and dword [ebp - 0x1c4], 0
jmp 0x100353a2
mov eax, dword [ebp - 0x1c4]
inc eax
mov dword [ebp - 0x1c4], eax
cmp dword [ebp - 0x1c4], 0x2dfe
jge 0x10035467
and dword [ebp - 0x308], 0
jmp 0x100353c8
mov eax, dword [ebp - 0x308]
inc eax
mov dword [ebp - 0x308], eax
cmp dword [ebp - 0x308], 0x1219
jge 0x10035462
and dword [ebp - 0x228], 0
jmp 0x100353ee
mov eax, dword [ebp - 0x228]
inc eax
mov dword [ebp - 0x228], eax
cmp dword [ebp - 0x228], 0x4989
jge 0x1003545d
mov eax, dword [ebp - 0x220]
and eax, dword [ebp - 0x1c4]
and eax, dword [ebp - 0x308]
and eax, dword [ebp - 0x228]
cdq
mov dword [ebp - 0xc78], eax
mov dword [ebp - 0xc74], edx
push dword [ebp - 0xc74]
push dword [ebp - 0xc78]
lea ecx, [ebp - 0x1568]
call fcn.1000d05e
pop ecx
pop ecx
mov dword [ebp - 0xc40], eax
mov ecx, dword [ebp - 0xc40]
call fcn.1001131e
push eax
call fcn.1004d84f
pop ecx
lea ecx, [ebp - 0x1568]
call fcn.10011314
jmp 0x100353e1
jmp 0x100353bb
jmp 0x10035395
jmp 0x1003536f
push 0
push 0x1477
push 0x189d
push 0x211a
call dword [sym.imp.GDI32.dll_GetSystemPaletteEntries]
mov eax, dword [ebp - 0x10c]
mov dword [ebp - 0x124], eax
mov byte [ebp - 4], 0xc
cmp dword [ebp - 0x580], 0x7f9
jge 0x100354ab
push dword [ebp - 0xb90]
call fcn.1004d84f
pop ecx
jmp 0x100354c7
mov dword [ebp - 4], 0xb
jmp 0x100354d7
mov dword [ebp - 0x124], 2
jmp 0x100354f0
mov eax, dword [ebp - 0x124]
dec eax
mov dword [ebp - 0x124], eax
cmp dword [ebp - 0x124], 0
jl 0x1003554e
mov dword [ebp - 0xb1c], 0xed8f6efb
lea eax, [ebp - 0xb1c]
push eax
push 0x2e6e
push 0
push 0x499c
call fcn.10040e02
add esp, 0x10
push 1
lea ecx, [ebp - 0x10f8]
call fcn.10011607
mov eax, dword [ebp - 0x10c]
mov dword [ebp - 0x1338], eax
mov esi, dword [ebp - 0x124]
push 0
lea ecx, [ebp - 0x1098]
call fcn.10011607
mov dword [eax], esi
jmp 0x100354e3
mov byte [ebp - 4], 0xa
lea ecx, [ebp - 0x10f8]
call fcn.100115eb
jmp 0x100352ec
mov byte [ebp - 4], 9
lea ecx, [ebp - 0x1098]
call fcn.100115eb
mov dword [ebp - 0x56c], 0xec560449
mov dword [ebp - 0x974], 0x794
mov dword [ebp - 0xce0], 0x1000a350
cmp dword [ebp - 0x974], 0x847
jle 0x10035685
push 0x15c2
push 0
call dword [sym.imp.KERNEL32.dll_SetThreadPriority]
and dword [ebp - 0x378], 0
jmp 0x100355c2
mov eax, dword [ebp - 0x378]
inc eax
mov dword [ebp - 0x378], eax
cmp dword [ebp - 0x378], 0x749c
jge 0x10035685
and dword [ebp - 0x230], 0
jmp 0x100355e8
mov eax, dword [ebp - 0x230]
inc eax
mov dword [ebp - 0x230], eax
cmp dword [ebp - 0x230], 0x1a56
jge 0x10035680
and dword [ebp - 0x310], 0
jmp 0x1003560e
mov eax, dword [ebp - 0x310]
inc eax
mov dword [ebp - 0x310], eax
cmp dword [ebp - 0x310], 0x3384
jge 0x1003567b
and dword [ebp - 0x238], 0
jmp 0x10035630
mov eax, dword [ebp - 0x238]
inc eax
mov dword [ebp - 0x238], eax
cmp dword [ebp - 0x238], 0x1c1a
jge 0x10035679
mov eax, dword [ebp - 0x378]
add eax, dword [ebp - 0x230]
and eax, dword [ebp - 0x310]
xor eax, dword [ebp - 0x238]
cdq
mov dword [ebp - 0xc84], eax
mov dword [ebp - 0xc80], edx
push dword [ebp - 0xc80]
push dword [ebp - 0xc84]
mov ecx, 0x1060ba78
call fcn.1001133e
jmp 0x10035623
jmp 0x10035601
jmp 0x100355db
jmp 0x100355b5
mov byte [ebp - 4], 0xe
cmp dword [ebp - 0x974], 0x581
jge 0x100356a5
mov edx, dword [ebp - 0xce0]
mov ecx, 0x1060ba78
call fcn.10013c65
jmp 0x100356c1
mov dword [ebp - 4], 9
jmp 0x100356d1
mov dword [ebp - 0x114], 1
mov dword [ebp - 0x3b0], 0
jmp 0x100356f4
mov eax, dword [ebp - 0x3b0]
inc eax
mov dword [ebp - 0x3b0], eax
cmp dword [ebp - 0x3b0], 1
jge 0x10035710
mov eax, dword [ebp - 0x3b0]
mov dword [ebp + eax*4 - 0x588], 0xc93
jmp 0x100356e7
mov dword [ebp - 0x114], 0
jmp 0x10035729
mov eax, dword [ebp - 0x114]
inc eax
mov dword [ebp - 0x114], eax
cmp dword [ebp - 0x114], 0
jg 0x10035825
mov dword [ebp - 0x9c], 5
mov dword [ebp - 0x9c], 0
jmp 0x10035759
mov eax, dword [ebp - 0x9c]
inc eax
mov dword [ebp - 0x9c], eax
cmp dword [ebp - 0x9c], 0
jg 0x100357a3
mov dword [ebp - 0x194], 0xfffffffd
mov dword [ebp - 0x194], 0
jmp 0x10035785
mov eax, dword [ebp - 0x194]
inc eax
mov dword [ebp - 0x194], eax
cmp dword [ebp - 0x194], 1
jge 0x100357a1
mov eax, dword [ebp - 0x194]
mov dword [ebp + eax*4 - 0x588], 0xffff
jmp 0x10035778
jmp 0x1003574c
mov byte [ebp - 0xd6], 0
push 0x78ad
push 1
push 0
push 0xc69
lea eax, [ebp - 0xd6]
push eax
call fcn.10022d84
add esp, 0x14
mov dword [ebp - 0x9c], 0
jmp 0x100357e0
mov eax, dword [ebp - 0x9c]
inc eax
mov dword [ebp - 0x9c], eax
cmp dword [ebp - 0x9c], 0
jg 0x10035820
mov eax, dword [ebp - 0x114]
cmp dword [ebp + eax*4 - 0x588], 0
je 0x100357fb
jmp 0x10035820
mov byte [ebp - 0xf2], 0
movzx eax, byte [ebp - 0xf2]
test eax, eax
je 0x1003581e
push 0x2732
push 0
push 0
call fcn.10027070
add esp, 0xc
jmp 0x100357d3
jmp 0x1003571c
mov dword [ebp - 0x114], 0xc79e672c
mov dword [ebp - 0x240], 0
jmp 0x10035848
mov eax, dword [ebp - 0x240]
inc eax
mov dword [ebp - 0x240], eax
cmp dword [ebp - 0x240], 4
jge 0x1003586a
push dword [ebp - 0x240]
lea ecx, [ebp - 0xafc]
call fcn.10011607
mov dword [eax], 0x6d8bc0d1
jmp 0x1003583b
mov dword [ebp - 0x834], 0xfffe
push 3
lea ecx, [ebp - 0xe00]
call fcn.10011569
mov byte [ebp - 4], 0x10
mov dword [ebp - 0x1190], 0xffffffff
mov dword [ebp - 0x1350], 6
mov dword [ebp - 0xb24], 1
mov dword [ebp - 0x1198], 0xfffffffe
mov dword [ebp - 0x1358], 0xa065c2dd
mov dword [ebp - 0x11a0], 0xffffffff
mov dword [ebp - 0x440], 0xfb66febf
mov dword [ebp - 0x1344], 0xc3dc99cd
mov dword [ebp - 0xa1c], 7
mov dword [ebp - 0x5a8], 0xffffffff
mov dword [ebp - 0xfa0], 0xbe856dfc
mov dword [ebp - 0xf9c], 0xbe856dfc
mov dword [ebp - 0xf98], 0xbe856dfc
mov dword [ebp - 0xf94], 0xbe856dfc
lea ecx, [ebp - 0x405]
call fcn.10011616
push eax
lea eax, [ebp - 0xf90]
push eax
lea eax, [ebp - 0xfa0]
push eax
lea ecx, [ebp - 0x1498]
call fcn.10011619
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0x1214]
call fcn.100115c5
mov byte [ebp - 4], 0x11
mov dword [ebp - 0x11a8], 1
mov dword [ebp - 0xdc4], 0xfffffffc
push 3
lea ecx, [ebp - 0xe84]
call fcn.10011569
mov byte [ebp - 4], 0x12
mov dword [ebp - 0xb2c], 0xfffffffb
mov dword [ebp - 0x13bc], 1
lea eax, [ebp - 0x134]
push eax
push 0x5a07
lea eax, [ebp - 0xe00]
push eax
push 0x6901
push 0
push 0
call fcn.10023b81
add esp, 0x18
mov dword [ebp - 0x134], 0
jmp 0x100359c0
mov eax, dword [ebp - 0x134]
inc eax
mov dword [ebp - 0x134], eax
cmp dword [ebp - 0x134], 3
jge 0x100359dc
mov eax, dword [ebp - 0x134]
mov dword [ebp + eax*4 - 0x1204], 0x5ac3
jmp 0x100359b3
lea eax, [ebp - 0xe84]
push eax
lea eax, [ebp - 0x134]
push eax
push 0
call fcn.1002b088
add esp, 0xc
mov eax, 0xffff
test eax, eax
je 0x10035a5a
push 0
lea ecx, [ebp - 0xe00]
call fcn.10011607
and dword [eax], 0
xor eax, eax
jne 0x10035a2c
push 0
lea ecx, [ebp - 0xe00]
call fcn.10011607
cmp dword [eax], 0
jne 0x10035a2c
and dword [ebp - 0x82c], 0
jmp 0x10035a36
mov dword [ebp - 0x82c], 1
push 1
lea ecx, [ebp - 0xe84]
call fcn.10011607
mov dword [ebp - 0x4a8], eax
mov ecx, dword [ebp - 0x4a8]
mov ecx, dword [ecx]
dec ecx
mov edx, dword [ebp - 0x4a8]
mov dword [edx], ecx
push 1
lea ecx, [ebp - 0x1214]
call fcn.10011607
cmp dword [eax], 0xfffffff6
je 0x10035a8a
push 1
lea ecx, [ebp - 0xe84]
call fcn.10011607
cmp dword [eax], 0
je 0x10035a8a
mov dword [ebp - 0x590], 1
jmp 0x10035a91
and dword [ebp - 0x590], 0
mov eax, dword [ebp - 0x590]
mov dword [ebp - 0xa1c], eax
mov eax, dword [ebp - 0x834]
cmp eax, dword [ebp - 0xa1c]
jg 0x10035ab7
mov dword [ebp - 0x598], 1
jmp 0x10035abe
and dword [ebp - 0x598], 0
mov eax, dword [ebp - 0x598]
mov dword [ebp - 0x440], eax
cmp dword [ebp - 0x834], 0
je 0x10035ada
cmp dword [ebp - 0xb24], 0
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0x1204], 0
je 0x10035bc2
mov dword [ebp - 0x5b0], 0xc298
cmp dword [ebp - 0x5b0], 1
ja 0x10035b15
cmp dword [ebp - 0xdc4], 0
je 0x10035b15
mov dword [ebp - 0x5a0], 1
jmp 0x10035b1c
and dword [ebp - 0x5a0], 0
mov eax, dword [ebp - 0xb2c]
cmp dword [ebp - 0x5a0], eax
jle 0x10035b36
mov dword [ebp - 0x97c], 1
jmp 0x10035b3d
and dword [ebp - 0x97c], 0
mov dword [ebp - 0x5a8], 0xffffffff
mov eax, dword [ebp - 0x97c]
mov dword [ebp - 0x440], eax
push 4
pop eax
shl eax, 1
imul ecx, dword [ebp - 0x440], 0x8cd9
imul ecx, dword [ebp + eax - 0x1204]
cmp dword [ebp - 0x5a8], ecx
je 0x10035b7e
mov dword [ebp - 0x83c], 1
jmp 0x10035b85
and dword [ebp - 0x83c], 0
mov eax, 0x25c7e4dd
sub eax, dword [ebp - 0x83c]
cmp dword [ebp - 0x5b0], eax
jne 0x10035ba4
mov dword [ebp - 0xac8], 1
jmp 0x10035bab
and dword [ebp - 0xac8], 0
push 0
lea ecx, [ebp - 0xe00]
call fcn.10011607
mov ecx, dword [ebp - 0xac8]
mov dword [eax], ecx
jmp 0x10035bd8
push 0
push 0x407e
push 0x3b8f
push 1
call fcn.10022e07
add esp, 0x10
mov byte [ebp - 0xd8], 0
lea eax, [ebp - 0xd8]
push eax
push 1
push 1
push 0x2481
push 0x787a
call fcn.10022d84
add esp, 0x14
mov byte [ebp - 4], 0x11
lea ecx, [ebp - 0xe84]
call fcn.100115eb
mov byte [ebp - 4], 0x10
lea ecx, [ebp - 0x1214]
call fcn.100115eb
mov byte [ebp - 4], 9
lea ecx, [ebp - 0xe00]
call fcn.100115eb
mov dword [ebp - 0xa38], 0x3db
mov dword [ebp - 0xdcc], 0x1000a3d4
cmp dword [ebp - 0xa38], 0x4b2
jle 0x10035d28
and dword [ebp - 0x250], 0
jmp 0x10035c63
mov eax, dword [ebp - 0x250]
inc eax
mov dword [ebp - 0x250], eax
cmp dword [ebp - 0x250], 0x1ab
jge 0x10035d28
and dword [ebp - 0x318], 0
jmp 0x10035c89
mov eax, dword [ebp - 0x318]
inc eax
mov dword [ebp - 0x318], eax
cmp dword [ebp - 0x318], 0x7b1
jge 0x10035d23
and dword [ebp - 0x248], 0
jmp 0x10035caf
mov eax, dword [ebp - 0x248]
inc eax
mov dword [ebp - 0x248], eax
cmp dword [ebp - 0x248], 0x49f
jge 0x10035d1e
and dword [ebp - 0x380], 0
jmp 0x10035cd1
mov eax, dword [ebp - 0x380]
inc eax
mov dword [ebp - 0x380], eax
cmp dword [ebp - 0x380], 0x5905
jge 0x10035d1c
mov eax, dword [ebp - 0x318]
mov ecx, dword [ebp - 0x248]
shl eax, cl
and eax, dword [ebp - 0x380]
or eax, dword [ebp - 0x250]
cdq
mov dword [ebp - 0xc90], eax
mov dword [ebp - 0xc8c], edx
push dword [ebp - 0xc8c]
push dword [ebp - 0xc90]
mov ecx, 0x1060ba78
call fcn.1001133e
jmp 0x10035cc4
jmp 0x10035ca2
jmp 0x10035c7c
jmp 0x10035c56
mov dword [ebp - 0x268], 0xfffffff7
mov dword [ebp - 0x328], 0x63ba20b9
mov dword [ebp - 0x74], 0x3ff14eb4
mov dword [ebp - 0x11c], 1
mov dword [ebp - 0xb44], 0xfb66
mov dword [ebp - 0xa0], 0
mov dword [ebp - 0x610], 0xc53a
mov dword [ebp - 0x630], 0
mov dword [ebp - 0x8c], 0
jmp 0x10035d8e
mov eax, dword [ebp - 0x8c]
inc eax
mov dword [ebp - 0x8c], eax
cmp dword [ebp - 0x8c], 2
jge 0x10035daa
mov eax, dword [ebp - 0x8c]
mov dword [ebp + eax*4 - 0xca8], 0xdc5336de
jmp 0x10035d81
mov dword [ebp - 0x8c], 0
jmp 0x10035dc3
mov eax, dword [ebp - 0x8c]
inc eax
mov dword [ebp - 0x8c], eax
cmp dword [ebp - 0x8c], 1
jge 0x10035ddf
mov eax, dword [ebp - 0x8c]
mov dword [ebp + eax*4 - 0x11b0], 0xfffffff9
jmp 0x10035db6
mov byte [ebp - 0xea], 0
movzx eax, byte [ebp - 0xea]
test eax, eax
je 0x10035dfe
push 0x218d
push 0
call dword [sym.imp.KERNEL32.dll_GetSystemDirectoryW]
mov eax, 0xfffe
test eax, eax
je 0x10035e98
cmp dword [ebp - 0x328], 0
je 0x10035e3c
mov eax, dword [ebp - 0xa0]
inc eax
mov dword [ebp - 0xa0], eax
mov eax, dword [ebp - 0xa0]
mov dword [ebp - 0x74], eax
cmp dword [ebp - 0x74], 0
je 0x10035e3c
mov dword [ebp - 0x844], 1
jmp 0x10035e43
and dword [ebp - 0x844], 0
xor eax, eax
inc eax
sub eax, dword [ebp - 0x328]
imul eax, dword [ebp - 0x11c]
mov dword [ebp - 0x5b8], eax
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x5b8]
mov dword [ebp + eax - 0xca8], ecx
mov eax, dword [ebp - 0x11c]
sub eax, dword [ebp - 0x5b8]
mov dword [ebp - 0x11c], eax
mov eax, dword [ebp - 0x844]
sub eax, dword [ebp - 0x11c]
je 0x10035e98
mov dword [ebp - 0x5c0], 1
jmp 0x10035e9f
and dword [ebp - 0x5c0], 0
cmp dword [ebp - 0x5c0], 0xffffffff
je 0x10035eb4
mov dword [ebp - 0x984], 1
jmp 0x10035ebb
and dword [ebp - 0x984], 0
cmp dword [ebp - 0x984], 0x38299fa9
jge 0x10035ed3
mov dword [ebp - 0x5c8], 1
jmp 0x10035eda
and dword [ebp - 0x5c8], 0
mov eax, dword [ebp - 0x328]
cmp dword [ebp - 0x5c8], eax
jge 0x10035ef4
mov dword [ebp - 0xcdc], 1
jmp 0x10035efb
and dword [ebp - 0xcdc], 0
mov eax, dword [ebp - 0x268]
dec eax
mov dword [ebp - 0x268], eax
mov eax, dword [ebp - 0x268]
mov dword [ebp - 0x134c], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0xca8], 0
je 0x1003615b
mov dword [ebp - 0x488], 0x8fbdedb
mov dword [ebp - 0xa0], 0xfffffff8
jmp 0x10035f4b
mov eax, dword [ebp - 0xa0]
inc eax
mov dword [ebp - 0xa0], eax
cmp dword [ebp - 0xa0], 0x1c
jne 0x10036107
mov byte [ebp - 0xda], 0
mov dword [ebp - 0x84c], 0x4c13
mov dword [ebp - 0xb34], 0x1000a3f4
cmp dword [ebp - 0x84c], 0x4d12
jle 0x10036066
push 0
call dword [sym.imp.KERNEL32.dll_GetSystemTimeAsFileTime]
and dword [ebp - 0x320], 0
jmp 0x10035fa1
mov eax, dword [ebp - 0x320]
inc eax
mov dword [ebp - 0x320], eax
cmp dword [ebp - 0x320], 0x604
jge 0x10036066
and dword [ebp - 0x258], 0
jmp 0x10035fc7
mov eax, dword [ebp - 0x258]
inc eax
mov dword [ebp - 0x258], eax
cmp dword [ebp - 0x258], 0x6880
jge 0x10036061
and dword [ebp - 0x3d8], 0
jmp 0x10035fed
mov eax, dword [ebp - 0x3d8]
inc eax
mov dword [ebp - 0x3d8], eax
cmp dword [ebp - 0x3d8], 0x1d56
jge 0x1003605c
and dword [ebp - 0x260], 0
jmp 0x1003600f
mov eax, dword [ebp - 0x260]
inc eax
mov dword [ebp - 0x260], eax
cmp dword [ebp - 0x260], 0xf63
jge 0x1003605a
mov eax, dword [ebp - 0x320]
mov ecx, dword [ebp - 0x258]
sar eax, cl
and eax, dword [ebp - 0x3d8]
and eax, dword [ebp - 0x260]
cdq
mov dword [ebp - 0xc9c], eax
mov dword [ebp - 0xc98], edx
push dword [ebp - 0xc98]
push dword [ebp - 0xc9c]
mov ecx, 0x1060ba78
call fcn.1001133e
jmp 0x10036002
jmp 0x10035fe0
jmp 0x10035fba
jmp 0x10035f94
lea eax, [ebp - 0xda]
push eax
push 0
call fcn.1002c185
pop ecx
pop ecx
mov byte [ebp - 4], 0x13
cmp dword [ebp - 0x84c], 0x4a5b
jge 0x10036096
mov edx, dword [ebp - 0xb34]
mov ecx, 0x1060ba78
call fcn.10013c65
jmp 0x100360b2
mov dword [ebp - 4], 9
jmp 0x100360c2
mov dword [ebp - 0x74], 2
jmp 0x100360d2
mov eax, dword [ebp - 0x74]
dec eax
mov dword [ebp - 0x74], eax
cmp dword [ebp - 0x74], 0xffffffe6
jl 0x10036102
mov byte [ebp - 0xfa], 0
movzx eax, byte [ebp - 0xfa]
test eax, eax
je 0x10036100
push 0
push 0
push 0x1125
push 0x4bda
call fcn.10030d8e
add esp, 0x10
jmp 0x100360cb
jmp 0x10035f3e
cmp dword [ebp - 0x488], 1
jg 0x1003611c
mov dword [ebp - 0x5d0], 1
jmp 0x10036123
and dword [ebp - 0x5d0], 0
mov eax, dword [ebp - 0x5d0]
sub eax, dword [ebp - 0x488]
jne 0x10036143
cmp dword [ebp - 0x488], 0
jne 0x10036143
and dword [ebp - 0xa24], 0
jmp 0x1003614d
mov dword [ebp - 0xa24], 1
mov eax, dword [ebp - 0xa24]
mov dword [ebp - 0x74], eax
jmp 0x1003651a
push 2
lea ecx, [ebp - 0xaa0]
call fcn.10011569
mov byte [ebp - 4], 0x15
mov dword [ebp - 0x5f8], 0xbaf34c2
mov dword [ebp - 0xb3c], 0xcd5918cd
mov dword [ebp - 0x86c], 1
mov dword [ebp - 0xce4], 0x3517d3e8
mov dword [ebp - 0x11b8], 0x38bbd881
mov dword [ebp - 0x13f8], 9
push 1
lea ecx, [ebp - 0x1224]
call fcn.10011569
mov byte [ebp - 4], 0x16
push 0x5e39
lea eax, [ebp - 0xe78]
push eax
push 0
lea eax, [ebp - 0xaa0]
push eax
call fcn.100274fa
add esp, 0x10
push 0x6f62
push 0
push 0x58e9
lea eax, [ebp - 0x1224]
push eax
push 1
push 0x7e02
lea eax, [ebp - 0xe78]
push eax
push 0
call fcn.1002380f
add esp, 0x20
cmp dword [ebp - 0x328], 0xef3bb579
ja 0x10036219
mov dword [ebp - 0x5d8], 1
jmp 0x10036220
and dword [ebp - 0x5d8], 0
cmp dword [ebp - 0x5d8], 6
je 0x10036235
mov dword [ebp - 0x854], 1
jmp 0x1003623c
and dword [ebp - 0x854], 0
mov eax, dword [ebp - 0x854]
mov dword [ebp - 0x11c], eax
cmp dword [ebp - 0x11c], 0x9286df49
jne 0x10036260
mov dword [ebp - 0x5e0], 1
jmp 0x10036267
and dword [ebp - 0x5e0], 0
mov eax, dword [ebp - 0x610]
cmp dword [ebp - 0x5e0], eax
jl 0x10036281
mov dword [ebp - 0x98c], 1
jmp 0x10036288
and dword [ebp - 0x98c], 0
mov eax, dword [ebp - 0x268]
cmp dword [ebp - 0x98c], eax
jle 0x100362a2
mov dword [ebp - 0x5e8], 1
jmp 0x100362a9
and dword [ebp - 0x5e8], 0
imul eax, dword [ebp - 0x5e8], 0xe6e2
test eax, eax
jne 0x100362d2
push 0
lea ecx, [ebp - 0xaa0]
call fcn.10011607
cmp dword [eax], 0
jne 0x100362d2
and dword [ebp - 0x85c], 0
jmp 0x100362dc
mov dword [ebp - 0x85c], 1
mov eax, dword [ebp - 0x74]
sub eax, dword [ebp - 0x85c]
je 0x10036305
push 0
lea ecx, [ebp - 0xaa0]
call fcn.10011607
cmp dword [eax], 0
je 0x10036305
mov dword [ebp - 0x5f0], 1
jmp 0x1003630c
and dword [ebp - 0x5f0], 0
push 0
lea ecx, [ebp - 0xaa0]
call fcn.10011607
mov ecx, dword [ebp - 0x5f0]
cmp ecx, dword [eax]
je 0x1003632f
mov dword [ebp - 0xa30], 1
jmp 0x10036336
and dword [ebp - 0xa30], 0
mov eax, dword [ebp - 0xa30]
mov dword [ebp - 0x5f8], eax
mov eax, dword [ebp - 0x5f8]
cmp eax, dword [ebp - 0xb3c]
jg 0x1003635c
mov dword [ebp - 0x864], 1
jmp 0x10036363
and dword [ebp - 0x864], 0
cmp dword [ebp - 0x864], 0
jge 0x10036378
mov dword [ebp - 0x600], 1
jmp 0x1003637f
and dword [ebp - 0x600], 0
cmp dword [ebp - 0x600], 0x1929
jne 0x10036397
mov dword [ebp - 0x994], 1
jmp 0x1003639e
and dword [ebp - 0x994], 0
push 0
lea ecx, [ebp - 0xaa0]
call fcn.10011607
mov ecx, dword [ebp - 0x994]
cmp ecx, dword [eax]
je 0x100363c1
mov dword [ebp - 0x608], 1
jmp 0x100363c8
and dword [ebp - 0x608], 0
imul eax, dword [ebp - 0x608], 0xffff
mov dword [ebp - 0x86c], eax
mov eax, dword [ebp - 0x86c]
cmp eax, dword [ebp - 0x610]
jl 0x100363f2
mov dword [ebp - 0xa2c], 1
jmp 0x100363f9
and dword [ebp - 0xa2c], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0xca8]
add eax, dword [ebp - 0xa2c]
cmp eax, dword [ebp - 0xa0]
jne 0x10036420
mov dword [ebp - 0x618], 1
jmp 0x10036427
and dword [ebp - 0x618], 0
mov eax, dword [ebp - 0xce4]
cmp dword [ebp - 0x618], eax
jg 0x10036441
mov dword [ebp - 0x874], 1
jmp 0x10036448
and dword [ebp - 0x874], 0
cmp dword [ebp - 0x874], 0xabb00f6
jge 0x10036460
mov dword [ebp - 0x620], 1
jmp 0x10036467
and dword [ebp - 0x620], 0
push 0
lea ecx, [ebp - 0xaa0]
call fcn.10011607
mov eax, dword [eax]
cmp eax, dword [ebp - 0x620]
je 0x1003648a
mov dword [ebp - 0x99c], 1
jmp 0x10036491
and dword [ebp - 0x99c], 0
imul esi, dword [ebp - 0x99c], 0xfeb1
push 1
lea ecx, [ebp - 0xaa0]
call fcn.10011607
sub esi, dword [eax]
cmp esi, 0x4bdacabd
jne 0x100364be
mov dword [ebp - 0x628], 1
jmp 0x100364c5
and dword [ebp - 0x628], 0
mov eax, dword [ebp - 0xb44]
cmp dword [ebp - 0x628], eax
jg 0x100364df
mov dword [ebp - 0x87c], 1
jmp 0x100364e6
and dword [ebp - 0x87c], 0
mov eax, dword [ebp - 0x87c]
mov dword [ebp - 0x74], eax
mov eax, dword [ebp - 0x630]
inc eax
mov dword [ebp - 0x630], eax
mov byte [ebp - 4], 0x15
lea ecx, [ebp - 0x1224]
call fcn.100115eb
mov byte [ebp - 4], 9
lea ecx, [ebp - 0xaa0]
call fcn.100115eb
mov byte [ebp - 4], 0x17
cmp dword [ebp - 0xa38], 0x340
jge 0x1003653a
mov edx, dword [ebp - 0xdcc]
mov ecx, 0x1060ba78
call fcn.10013c65
jmp 0x10036556
mov dword [ebp - 4], 9
jmp 0x10036566
mov byte [ebp - 0xdc], 0
movzx eax, byte [ebp - 0xdc]
test eax, eax
je 0x100369d1
mov dword [ebp - 0x40], 0xfffffffb
mov dword [ebp - 0x450], 0xf889e022
mov dword [ebp - 0x4ac], 0x263b0a6d
mov dword [ebp - 0x490], 0
mov dword [ebp - 0x89c], 0x7935db5a
mov dword [ebp - 0x11c0], 0x360abed9
mov dword [ebp - 0x11e8], 0xf94ad8a0
mov dword [ebp - 0x11c8], 0x131ec8e1
mov dword [ebp - 0x11ec], 0x6042c8cd
mov dword [ebp - 0x11d0], 0xfffffffc
mov dword [ebp - 0x11f4], 6
mov dword [ebp - 0x11d8], 0xad385e39
push 1
lea ecx, [ebp - 0x1244]
call fcn.10011569
mov byte [ebp - 4], 0x19
mov dword [ebp - 0x11f0], 0
mov dword [ebp - 0x13d0], 0
mov dword [ebp - 0x11f8], 0x1ef224b3
mov dword [ebp - 0x135c], 0xf83f3a8a
push 1
lea ecx, [ebp - 0x1234]
call fcn.10011569
mov byte [ebp - 4], 0x1a
mov dword [ebp - 0x448], 0xf77a
mov dword [ebp - 0xa74], 0x94a39b7b
mov dword [ebp - 0xb54], 1
mov dword [ebp - 0x48], 0
jmp 0x10036669
mov eax, dword [ebp - 0x48]
inc eax
mov dword [ebp - 0x48], eax
cmp dword [ebp - 0x48], 2
jge 0x1003667f
mov eax, dword [ebp - 0x48]
mov dword [ebp + eax*4 - 0xae8], 0xfb1af9d6
jmp 0x10036662
lea eax, [ebp - 0x48]
push eax
lea eax, [ebp - 0x1244]
push eax
push 0x32b9
push 0
call fcn.1003f4d3
add esp, 0x10
mov dword [ebp - 0x48], 0
jmp 0x100366a9
mov eax, dword [ebp - 0x48]
inc eax
mov dword [ebp - 0x48], eax
cmp dword [ebp - 0x48], 1
jge 0x100366c2
push dword [ebp - 0x48]
lea ecx, [ebp - 0x1234]
call fcn.10011607
or dword [eax], 0xffffffff
jmp 0x100366a2
mov eax, dword [ebp - 0x40]
mov dword [ebp - 0x1208], eax
cmp dword [ebp - 0x40], 0
jne 0x10036841
mov eax, dword [ebp - 0x40]
cmp eax, dword [ebp - 0x40]
jne 0x100366e9
mov dword [ebp - 0x638], 1
jmp 0x100366f0
and dword [ebp - 0x638], 0
mov eax, dword [ebp - 0x638]
neg eax
mov dword [ebp - 0x450], eax
jne 0x10036712
mov eax, 0x6dd
test eax, eax
jne 0x10036712
and dword [ebp - 0x884], 0
jmp 0x1003671c
mov dword [ebp - 0x884], 1
mov eax, dword [ebp - 0x40]
cmp dword [ebp - 0x884], eax
jne 0x10036733
mov dword [ebp - 0x640], 1
jmp 0x1003673a
and dword [ebp - 0x640], 0
mov eax, dword [ebp - 0x640]
mov dword [ebp - 0x4ac], eax
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x4ac]
add ecx, dword [ebp - 0x40]
cmp ecx, dword [ebp + eax - 0xae8]
jle 0x1003676a
mov dword [ebp - 0x9a4], 1
jmp 0x10036771
and dword [ebp - 0x9a4], 0
cmp dword [ebp - 0x9a4], 0x886a
jl 0x1003678c
cmp dword [ebp - 0x40], 0
jne 0x1003678c
and dword [ebp - 0x648], 0
jmp 0x10036796
mov dword [ebp - 0x648], 1
mov eax, dword [ebp - 0x40]
cmp dword [ebp - 0x648], eax
jle 0x100367ad
mov dword [ebp - 0x88c], 1
jmp 0x100367b4
and dword [ebp - 0x88c], 0
cmp dword [ebp - 0x88c], 0x796
jge 0x100367cc
mov dword [ebp - 0x650], 1
jmp 0x100367d3
and dword [ebp - 0x650], 0
mov eax, dword [ebp - 0x650]
mov dword [ebp - 0x490], eax
cmp dword [ebp - 0x490], 0xe95a
jle 0x100367f7
mov dword [ebp - 0xa40], 1
jmp 0x100367fe
and dword [ebp - 0xa40], 0
cmp dword [ebp - 0xa40], 1
je 0x10036813
mov dword [ebp - 0x658], 1
jmp 0x1003681a
and dword [ebp - 0x658], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xae8]
cmp dword [ebp - 0x658], eax
je 0x10036841
mov eax, 0xab462a77
test eax, eax
jne 0x10036841
and dword [ebp - 0x894], 0
jmp 0x1003684b
mov dword [ebp - 0x894], 1
mov eax, dword [ebp - 0x40]
cmp dword [ebp - 0x894], eax
jne 0x10036862
mov dword [ebp - 0x660], 1
jmp 0x10036869
and dword [ebp - 0x660], 0
cmp dword [ebp - 0x660], 0x3e731e7b
jl 0x10036881
mov dword [ebp - 0x9ac], 1
jmp 0x10036888
and dword [ebp - 0x9ac], 0
cmp dword [ebp - 0x9ac], 4
je 0x1003689d
mov dword [ebp - 0x668], 1
jmp 0x100368a4
and dword [ebp - 0x668], 0
mov eax, dword [ebp - 0x668]
mov dword [ebp - 0x89c], eax
mov eax, dword [ebp - 0x448]
inc eax
mov dword [ebp - 0x448], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xae8]
cmp eax, dword [ebp - 0x448]
jl 0x100368de
mov dword [ebp - 0x670], 1
jmp 0x100368e5
and dword [ebp - 0x670], 0
mov eax, dword [ebp - 0x89c]
cmp dword [ebp - 0x670], eax
je 0x10036909
mov eax, dword [ebp - 0xa74]
add eax, 0x6abe
jne 0x10036909
and dword [ebp - 0xb4c], 0
jmp 0x10036913
mov dword [ebp - 0xb4c], 1
mov eax, dword [ebp - 0x40]
mov dword [ebp - 0x13d4], eax
mov eax, dword [ebp - 0x4ac]
mov dword [ebp - 0x1218], eax
cmp dword [ebp - 0xa74], 0xfffffff9
je 0x1003693d
mov dword [ebp - 0x678], 1
jmp 0x10036944
and dword [ebp - 0x678], 0
mov eax, dword [ebp - 0x450]
cmp dword [ebp - 0x678], eax
jne 0x1003695e
mov dword [ebp - 0xcf0], 1
jmp 0x10036965
and dword [ebp - 0xcf0], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0xae8]
shl eax, 1
jne 0x10036988
cmp dword [ebp - 0xb54], 0
jne 0x10036988
and dword [ebp - 0x8a4], 0
jmp 0x10036992
mov dword [ebp - 0x8a4], 1
mov eax, dword [ebp - 0x8a4]
mov dword [ebp - 0x490], eax
mov byte [ebp - 4], 0x19
lea ecx, [ebp - 0x1234]
call fcn.100115eb
mov byte [ebp - 4], 9
lea ecx, [ebp - 0x1244]
call fcn.100115eb
push 0x1f5b
push 0x1990
push 0x836
call dword [sym.imp.KERNEL32.dll_MulDiv]
push 3
lea ecx, [ebp - 0x10e0]
call fcn.10011569
mov byte [ebp - 4], 0x1b
mov dword [ebp - 0x14c], 0xb13638ec
push 0x3036
lea eax, [ebp - 0x10e0]
push eax
push 0x63e3
lea eax, [ebp - 0x1364]
push eax
push 0
call fcn.1003ea01
add esp, 0x14
mov byte [ebp - 0xec], 0
lea eax, [ebp - 0xec]
push eax
push 0
call fcn.1003e33a
pop ecx
pop ecx
mov dword [ebp - 0x14c], 2
jmp 0x10036a3e
mov eax, dword [ebp - 0x14c]
dec eax
mov dword [ebp - 0x14c], eax
cmp dword [ebp - 0x14c], 0
jl 0x10036a83
mov dword [ebp - 0xe64], 0x182eac45
push 0
push 0
push 0x4404
lea eax, [ebp - 0xe64]
push eax
call fcn.1002363b
add esp, 0x10
push dword [ebp - 0x14c]
lea ecx, [ebp - 0x10e0]
call fcn.10011607
cmp dword [eax], 0
je 0x10036a81
jmp 0x10036a31
jmp 0x10036a31
mov byte [ebp - 4], 9
lea ecx, [ebp - 0x10e0]
call fcn.100115eb
cmp dword [ebp - 0x54], 0
je 0x10037a1a
mov dword [ebp - 0x20], 0xdd1e1e87
mov dword [ebp - 0x388], 0
jmp 0x10036abc
mov eax, dword [ebp - 0x388]
inc eax
mov dword [ebp - 0x388], eax
cmp dword [ebp - 0x388], 3
jge 0x10036ad8
mov eax, dword [ebp - 0x388]
mov dword [ebp + eax*4 - 0x4f0], 0xffffffff
jmp 0x10036aaf
mov dword [ebp - 0x6a8], 0x46ef
mov dword [ebp - 0xb64], 0x1000a438
cmp dword [ebp - 0x6a8], 0x48eb
jle 0x10036b71
and dword [ebp - 0x270], 0
jmp 0x10036b0e
mov eax, dword [ebp - 0x270]
inc eax
mov dword [ebp - 0x270], eax
cmp dword [ebp - 0x270], 0x3ad3
jge 0x10036b71
and dword [ebp - 0x330], 0
jmp 0x10036b30
mov eax, dword [ebp - 0x330]
inc eax
mov dword [ebp - 0x330], eax
cmp dword [ebp - 0x330], 0x5106
jge 0x10036b6f
mov eax, dword [ebp - 0x270]
mov ecx, dword [ebp - 0x330]
shl eax, cl
cdq
mov dword [ebp - 0xcb4], eax
mov dword [ebp - 0xcb0], edx
push dword [ebp - 0xcb0]
push dword [ebp - 0xcb4]
mov ecx, 0x1060ba78
call fcn.1001133e
jmp 0x10036b23
jmp 0x10036b01
mov dword [ebp - 0x20], 2
jmp 0x10036b81
mov eax, dword [ebp - 0x20]
dec eax
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 0
jl 0x10036e0d
mov dword [ebp - 0x2c], 0x6801fc3e
push 2
lea ecx, [ebp - 0xf08]
call fcn.10011569
mov byte [ebp - 4], 0x1c
mov dword [ebp - 0xb0c], 0xffffffff
mov dword [ebp - 0x278], 0
jmp 0x10036bc6
mov eax, dword [ebp - 0x278]
inc eax
mov dword [ebp - 0x278], eax
cmp dword [ebp - 0x278], 2
jge 0x10036be8
push dword [ebp - 0x278]
lea ecx, [ebp - 0xf08]
call fcn.10011607
mov dword [eax], 0xee24b2e8
jmp 0x10036bb9
mov eax, dword [ebp - 0x20]
cmp dword [ebp + eax*4 - 0x4f0], 0
je 0x10036c09
mov byte [ebp - 4], 9
lea ecx, [ebp - 0xf08]
call fcn.100115eb
jmp 0x10036e0d
mov dword [ebp - 0x2c], 2
jmp 0x10036c19
mov eax, dword [ebp - 0x2c]
dec eax
mov dword [ebp - 0x2c], eax
cmp dword [ebp - 0x2c], 0
jl 0x10036df9
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x4f0]
mov dword [ebp - 0x1228], eax
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x13dc], eax
mov eax, dword [ebp - 0x2c]
mov dword [ebp - 0x1238], eax
mov eax, dword [ebp - 0x2c]
mov dword [ebp - 0x136c], eax
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp + eax*4 - 0x4f0]
mov dword [ebp - 0x1248], eax
cmp dword [ebp - 0x2c], 0x8f5537c5
ja 0x10036c76
mov dword [ebp - 0x680], 1
jmp 0x10036c7d
and dword [ebp - 0x680], 0
mov eax, dword [ebp - 0x2c]
mov eax, dword [ebp + eax*4 - 0x4f0]
imul eax, dword [ebp - 0x680]
mov dword [ebp - 0x9b4], eax
push 0
lea ecx, [ebp - 0xf08]
call fcn.10011607
mov ecx, dword [ebp - 0x9b4]
mov dword [eax], ecx
imul eax, dword [ebp - 0x9b4], 0xd484
mov ecx, dword [ebp - 0x2c]
cmp dword [ebp + ecx*4 - 0x4f0], eax
jne 0x10036ccb
mov dword [ebp - 0x688], 1
jmp 0x10036cd2
and dword [ebp - 0x688], 0
cmp dword [ebp - 0x688], 0x374fd522
jne 0x10036cea
mov dword [ebp - 0x8ac], 1
jmp 0x10036cf1
and dword [ebp - 0x8ac], 0
mov eax, dword [ebp - 0x2c]
cmp dword [ebp - 0x8ac], eax
jge 0x10036d08
mov dword [ebp - 0xb5c], 1
jmp 0x10036d0f
and dword [ebp - 0xb5c], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x4f0]
cmp eax, dword [ebp - 0x20]
jl 0x10036d2d
mov dword [ebp - 0x690], 1
jmp 0x10036d34
and dword [ebp - 0x690], 0
mov eax, dword [ebp - 0x2c]
mov eax, dword [ebp + eax*4 - 0x4f0]
cmp dword [ebp - 0x690], eax
jle 0x10036d52
mov dword [ebp - 0xa3c], 1
jmp 0x10036d59
and dword [ebp - 0xa3c], 0
mov eax, dword [ebp - 0x20]
add eax, dword [ebp - 0xa3c]
cmp eax, 1
ja 0x10036d73
mov dword [ebp - 0x698], 1
jmp 0x10036d7a
and dword [ebp - 0x698], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x4f0]
cmp dword [ebp - 0x698], eax
je 0x10036d9b
mov dword [ebp - 0x8b4], 1
jmp 0x10036da2
and dword [ebp - 0x8b4], 0
mov eax, dword [ebp - 0x2c]
mov ecx, dword [ebp - 0x8b4]
sub ecx, dword [ebp - 0x20]
cmp ecx, dword [ebp + eax*4 - 0x4f0]
jle 0x10036dc3
mov dword [ebp - 0x6a0], 1
jmp 0x10036dca
and dword [ebp - 0x6a0], 0
mov eax, dword [ebp - 0x20]
cmp dword [ebp - 0x6a0], eax
jge 0x10036de1
mov dword [ebp - 0x9bc], 1
jmp 0x10036de8
and dword [ebp - 0x9bc], 0
mov eax, dword [ebp - 0x9bc]
mov dword [ebp - 0xb0c], eax
jmp 0x10036c12
mov byte [ebp - 4], 9
lea ecx, [ebp - 0xf08]
call fcn.100115eb
jmp 0x10036b7a
mov byte [ebp - 4], 0x1d
cmp dword [ebp - 0x6a8], 0x4387
jge 0x10036e2d
mov edx, dword [ebp - 0xb64]
mov ecx, 0x1060ba78
call fcn.10013c65
jmp 0x10036e49
mov dword [ebp - 4], 9
jmp 0x10036e59
cmp dword [ebp - 0x20], 0
je 0x10036ebc
mov byte [ebp - 0xde], 0
movzx eax, byte [ebp - 0xde]
test eax, eax
je 0x10036e85
push 0xdf5
push 0x6188
push 0
call fcn.1002914b
add esp, 0xc
mov dword [ebp - 0x20], 0xfffffffa
jmp 0x10036e95
mov eax, dword [ebp - 0x20]
inc eax
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 6
jg 0x10036eba
mov byte [ebp - 0xf4], 0
movzx eax, byte [ebp - 0xf4]
test eax, eax
je 0x10036eb8
push 0x194
call dword [sym.imp.GDI32.dll_CreateCompatibleDC]
jmp 0x10036e8e
jmp 0x10036ed0
mov dword [ebp - 0xdd4], 0xffffffff
mov dword [ebp - 0xdd4], 0xa0d7c8a3
mov dword [ebp - 0x290], 0xecf4
push 3
lea ecx, [ebp - 0xe9c]
call fcn.10011569
mov byte [ebp - 4], 0x1f
mov dword [ebp - 0x94], 0xffffffff
mov dword [ebp - 0x458], 0xc25b
push 4
lea ecx, [ebp - 0x10b0]
call fcn.10011569
mov byte [ebp - 4], 0x20
mov dword [ebp - 0xb6c], 0
lea eax, [ebp - 0xe9c]
push eax
push 0
push 0x3d86
push 1
push 1
push 0x5da1
lea eax, [ebp - 0x17c]
push eax
push 0x6772
call fcn.10023a52
add esp, 0x20
mov dword [ebp - 0x17c], 0
jmp 0x10036f5e
mov eax, dword [ebp - 0x17c]
inc eax
mov dword [ebp - 0x17c], eax
cmp dword [ebp - 0x17c], 4
jge 0x10036f80
push dword [ebp - 0x17c]
lea ecx, [ebp - 0x10b0]
call fcn.10011607
mov dword [eax], 0xfffffffb
jmp 0x10036f51
mov dword [ebp - 0x94], 0
jmp 0x10036f99
mov eax, dword [ebp - 0x94]
inc eax
mov dword [ebp - 0x94], eax
cmp dword [ebp - 0x94], 2
jg 0x10036fd4
mov byte [ebp - 0xe0], 0
push 0x66db
push 1
push 0x7d4b
push 0x4b17
push 1
lea eax, [ebp - 0xe0]
push eax
push 0x40f1
push 0
call fcn.100273ce
add esp, 0x20
jmp 0x10036f8c
push 0
lea ecx, [ebp - 0xe9c]
call fcn.10011607
mov eax, dword [eax]
mov dword [ebp - 0x94], eax
cmp dword [ebp - 0x94], 0
jne 0x100370fb
cmp dword [ebp - 0x458], 0
je 0x10037063
mov eax, dword [ebp - 0x458]
mov dword [ebp - 0x8bc], eax
push 2
lea ecx, [ebp - 0x10b0]
call fcn.10011607
mov ecx, dword [ebp - 0x8bc]
mov dword [eax], ecx
push 0
lea ecx, [ebp - 0xe9c]
call fcn.10011607
imul eax, dword [eax], 0
cmp dword [ebp - 0x8bc], eax
je 0x10037044
mov dword [ebp - 0x6b0], 1
jmp 0x1003704b
and dword [ebp - 0x6b0], 0
cmp dword [ebp - 0x6b0], 0x7457
jle 0x10037063
mov dword [ebp - 0xaa4], 1
jmp 0x1003706a
and dword [ebp - 0xaa4], 0
mov eax, dword [ebp - 0x458]
cmp dword [ebp - 0xaa4], eax
jl 0x10037084
mov dword [ebp - 0x6b8], 1
jmp 0x1003708b
and dword [ebp - 0x6b8], 0
imul eax, dword [ebp - 0x6b8], 0xb5e4
test eax, eax
jne 0x100370ab
cmp dword [ebp - 0x94], 0
jne 0x100370ab
and dword [ebp - 0x8c4], 0
jmp 0x100370b5
mov dword [ebp - 0x8c4], 1
cmp dword [ebp - 0x8c4], 0x2db8
jge 0x100370cd
mov dword [ebp - 0x6c0], 1
jmp 0x100370d4
and dword [ebp - 0x6c0], 0
mov eax, dword [ebp - 0x94]
cmp dword [ebp - 0x6c0], eax
jl 0x100370ee
mov dword [ebp - 0x9c4], 1
jmp 0x100370f5
and dword [ebp - 0x9c4], 0
mov eax, dword [ebp - 0x94]
mov dword [ebp - 0xb6c], 6
mov byte [ebp - 4], 0x1f
lea ecx, [ebp - 0x10b0]
call fcn.100115eb
mov byte [ebp - 4], 9
lea ecx, [ebp - 0xe9c]
call fcn.100115eb
push 1
lea ecx, [ebp - 0x105c]
call fcn.10011569
mov byte [ebp - 4], 0x21
push 0x2985
lea eax, [ebp - 0x13c]
push eax
push 0x3a42
push 0
lea eax, [ebp - 0x105c]
push eax
push 0
call fcn.10023904
add esp, 0x18
push 1
lea ecx, [ebp - 0xae0]
call fcn.10011569
mov byte [ebp - 4], 0x22
mov dword [ebp - 0xa8], 1
mov dword [ebp - 0xe54], 0x8bc0d133
mov dword [ebp - 0x3b8], 0
jmp 0x10037196
mov eax, dword [ebp - 0x3b8]
inc eax
mov dword [ebp - 0x3b8], eax
cmp dword [ebp - 0x3b8], 1
jge 0x100371b8
push dword [ebp - 0x3b8]
lea ecx, [ebp - 0xae0]
call fcn.10011607
mov dword [eax], 4
jmp 0x10037189
mov dword [ebp - 0xa8], 0
jmp 0x100371d1
mov eax, dword [ebp - 0xa8]
dec eax
mov dword [ebp - 0xa8], eax
cmp dword [ebp - 0xa8], 0
jl 0x1003754d
mov dword [ebp - 0x154], 0xfffffffb
push 0
lea ecx, [ebp - 0xae0]
call fcn.10011607
cmp dword [eax], 0
jl 0x10037206
mov dword [ebp - 0x6c8], 1
jmp 0x1003720d
and dword [ebp - 0x6c8], 0
push dword [ebp - 0xa8]
lea ecx, [ebp - 0xae0]
call fcn.10011607
mov eax, dword [eax]
sub eax, dword [ebp - 0x6c8]
je 0x100374f8
mov dword [ebp - 0x104], 1
mov dword [ebp - 0x6d0], 0x448112de
mov dword [ebp - 0x8d4], 0x6656
mov dword [ebp - 0xd14], 0x1000a498
cmp dword [ebp - 0x8d4], 0x6963
jle 0x1003736c
and dword [ebp - 0x280], 0
jmp 0x1003727a
mov eax, dword [ebp - 0x280]
inc eax
mov dword [ebp - 0x280], eax
cmp dword [ebp - 0x280], 0x6e60
jge 0x1003736c
and dword [ebp - 0x338], 0
jmp 0x100372a0
mov eax, dword [ebp - 0x338]
inc eax
mov dword [ebp - 0x338], eax
cmp dword [ebp - 0x338], 0x21e0
jge 0x10037367
and dword [ebp - 0x288], 0
jmp 0x100372c6
mov eax, dword [ebp - 0x288]
inc eax
mov dword [ebp - 0x288], eax
cmp dword [ebp - 0x288], 0x1e28
jge 0x10037362
and dword [ebp - 0x390], 0
jmp 0x100372ec
mov eax, dword [ebp - 0x390]
inc eax
mov dword [ebp - 0x390], eax
cmp dword [ebp - 0x390], 0x3929
jge 0x1003735d
mov eax, dword [ebp - 0x280]
add eax, dword [ebp - 0x338]
add eax, dword [ebp - 0x288]
mov ecx, dword [ebp - 0x390]
sar eax, cl
cdq
mov dword [ebp - 0xcc0], eax
mov dword [ebp - 0xcbc], edx
push dword [ebp - 0xcbc]
push dword [ebp - 0xcc0]
lea ecx, [ebp - 0x15c8]
call fcn.1000d05e
pop ecx
pop ecx
mov dword [ebp - 0xd08], eax
mov ecx, dword [ebp - 0xd08]
call fcn.1001131e
push eax
call fcn.1004d84f
pop ecx
lea ecx, [ebp - 0x15c8]
call fcn.10011314
jmp 0x100372df
jmp 0x100372b9
jmp 0x10037293
jmp 0x1003726d
mov dword [ebp - 0x104], 0
jmp 0x10037385
mov eax, dword [ebp - 0x104]
inc eax
mov dword [ebp - 0x104], eax
cmp dword [ebp - 0x104], 0
jg 0x100374ae
mov dword [ebp - 0xb74], 9
mov dword [ebp - 0xb7c], 0xfffffffd
cmp dword [ebp - 0x104], 0
je 0x10037450
push 0
lea ecx, [ebp - 0xae0]
call fcn.10011607
push dword [ebp - 0xa8]
lea ecx, [ebp - 0xae0]
call fcn.10011607
cmp dword [eax], 0x2885
jle 0x100373e5
mov dword [ebp - 0x8cc], 1
jmp 0x100373ec
and dword [ebp - 0x8cc], 0
mov eax, dword [ebp - 0xb74]
mov ecx, dword [ebp - 0x8cc]
lea eax, [ecx + eax - 0xfce8]
mov dword [ebp - 0x6d0], eax
mov eax, dword [ebp - 0x6d0]
mov dword [ebp - 0xe54], eax
cmp dword [ebp - 0xa8], 0
jne 0x1003742c
mov eax, 0xc0fa
test eax, eax
jne 0x1003742c
and dword [ebp - 0xa44], 0
jmp 0x10037436
mov dword [ebp - 0xa44], 1
mov eax, dword [ebp - 0x154]
cmp dword [ebp - 0xa44], eax
jl 0x10037450
mov dword [ebp - 0x6d8], 1
jmp 0x10037457
and dword [ebp - 0x6d8], 0
push dword [ebp - 0xa8]
lea ecx, [ebp - 0xae0]
call fcn.10011607
mov eax, dword [eax]
sub eax, dword [ebp - 0x6d8]
mov ecx, dword [ebp - 0x104]
sub ecx, eax
mov dword [ebp - 0xb7c], ecx
mov byte [ebp - 0xee], 0
push 1
push 0x3078
push 0
lea eax, [ebp - 0xee]
push eax
push 0
push 0x5db0
push 0x2ccf
call fcn.1002854f
add esp, 0x1c
jmp 0x10037378
mov byte [ebp - 4], 0x23
cmp dword [ebp - 0x8d4], 0x65fb
jge 0x100374ca
push dword [ebp - 0xd14]
call fcn.1004d84f
pop ecx
jmp 0x100374e6
mov dword [ebp - 4], 0x22
jmp 0x100374f6
jmp 0x10037548
mov dword [ebp - 0x154], 0
jmp 0x10037511
mov eax, dword [ebp - 0x154]
dec eax
mov dword [ebp - 0x154], eax
cmp dword [ebp - 0x154], 0
jl 0x10037548
mov byte [ebp - 0xe2], 0
push 0x3f5c
lea eax, [ebp - 0xe2]
push eax
push 0x66d2
push 0x1a5c
push 0x2119
push 0
call fcn.10027b21
add esp, 0x18
jmp 0x10037504
jmp 0x100371c4
mov byte [ebp - 4], 0x21
lea ecx, [ebp - 0xae0]
call fcn.100115eb
mov dword [ebp - 0x13c], 0
jmp 0x10037575
mov eax, dword [ebp - 0x13c]
inc eax
mov dword [ebp - 0x13c], eax
cmp dword [ebp - 0x13c], 4
jge 0x10037591
mov eax, dword [ebp - 0x13c]
mov dword [ebp + eax*4 - 0x1510], 0x95610a1
jmp 0x10037568
and dword [ebp - 0xff0], 0
and dword [ebp - 0xfec], 0
and dword [ebp - 0xfe8], 0
and dword [ebp - 0xfe4], 0
lea ecx, [ebp - 0x4a1]
call fcn.10011616
push eax
lea eax, [ebp - 0xfe0]
push eax
lea eax, [ebp - 0xff0]
push eax
lea ecx, [ebp - 0x14e8]
call fcn.10011619
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0x404]
call fcn.100115c5
mov byte [ebp - 4], 0x25
mov dword [ebp - 0xb84], 0x3b16
push 2
lea ecx, [ebp - 0x1254]
call fcn.10011569
mov byte [ebp - 4], 0x26
mov dword [ebp - 0x7c], 0
jmp 0x10037611
mov eax, dword [ebp - 0x7c]
inc eax
mov dword [ebp - 0x7c], eax
cmp dword [ebp - 0x7c], 1
jge 0x10037627
mov eax, dword [ebp - 0x7c]
mov dword [ebp + eax*4 - 0x108], 0
jmp 0x1003760a
mov dword [ebp - 0x7c], 0
jmp 0x10037637
mov eax, dword [ebp - 0x7c]
inc eax
mov dword [ebp - 0x7c], eax
cmp dword [ebp - 0x7c], 2
jge 0x10037653
push dword [ebp - 0x7c]
lea ecx, [ebp - 0x1254]
call fcn.10011607
mov dword [eax], 0x526c7153
jmp 0x10037630
push 0
lea ecx, [ebp - 0x404]
call fcn.10011607
and dword [eax], 0
jmp 0x10037689
push 0
lea ecx, [ebp - 0x404]
call fcn.10011607
cmp dword [eax], 0
jl 0x100378b4
push 3
lea ecx, [ebp - 0x1080]
call fcn.10011569
mov byte [ebp - 4], 0x27
mov dword [ebp - 0x90], 0
jmp 0x100376c9
mov eax, dword [ebp - 0x90]
inc eax
mov dword [ebp - 0x90], eax
cmp dword [ebp - 0x90], 3
jge 0x100376e8
push dword [ebp - 0x90]
lea ecx, [ebp - 0x1080]
call fcn.10011607
or dword [eax], 0xffffffff
jmp 0x100376bc
mov dword [ebp - 0x90], 0
jmp 0x10037701
mov eax, dword [ebp - 0x90]
inc eax
mov dword [ebp - 0x90], eax
cmp dword [ebp - 0x90], 3
jge 0x1003771d
mov eax, dword [ebp - 0x90]
mov dword [ebp + eax*4 - 0x1460], 0xffffffff
jmp 0x100376f4
push 0
lea ecx, [ebp - 0x404]
call fcn.10011607
mov eax, dword [eax]
push 4
pop ecx
imul ecx, ecx, 0
mov ecx, dword [ebp + ecx - 0x108]
cmp ecx, dword [ebp + eax*4 - 0x108]
jle 0x1003774e
mov dword [ebp - 0x9cc], 1
jmp 0x10037755
and dword [ebp - 0x9cc], 0
push 0
lea ecx, [ebp - 0x404]
call fcn.10011607
mov eax, dword [eax]
mov esi, dword [ebp + eax*4 - 0x108]
push 3
lea ecx, [ebp - 0x404]
call fcn.10011607
imul esi, dword [eax]
test esi, esi
jbe 0x1003778b
mov dword [ebp - 0x6e8], 1
jmp 0x10037792
and dword [ebp - 0x6e8], 0
mov eax, dword [ebp - 0x9cc]
cmp eax, dword [ebp - 0x6e8]
jl 0x100377ac
mov dword [ebp - 0x4bc], 1
jmp 0x100377b3
and dword [ebp - 0x4bc], 0
push 1
lea ecx, [ebp - 0x1080]
call fcn.10011607
mov dword [ebp - 0x8dc], eax
push 3
lea ecx, [ebp - 0x404]
call fcn.10011607
mov ecx, dword [ebp - 0x8dc]
mov eax, dword [eax]
mov dword [ecx], eax
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x4bc]
mov dword [ebp + eax - 0x1460], ecx
mov eax, dword [ebp - 0x8dc]
mov eax, dword [eax]
cmp eax, dword [ebp - 0x4bc]
jne 0x1003780c
mov dword [ebp - 0x6f0], 1
jmp 0x10037813
and dword [ebp - 0x6f0], 0
push 0
lea ecx, [ebp - 0x404]
call fcn.10011607
mov eax, dword [eax]
mov esi, dword [ebp - 0x6f0]
sub esi, dword [ebp + eax*4 - 0x108]
push 0
lea ecx, [ebp - 0x404]
call fcn.10011607
mov eax, dword [eax]
cmp dword [ebp + eax*4 - 0x108], esi
jg 0x10037853
mov dword [ebp - 0xa7c], 1
jmp 0x1003785a
and dword [ebp - 0xa7c], 0
push 1
lea ecx, [ebp - 0x404]
call fcn.10011607
mov ecx, dword [ebp - 0xa7c]
cmp ecx, dword [eax]
jle 0x1003787d
mov dword [ebp - 0x6f8], 1
jmp 0x10037884
and dword [ebp - 0x6f8], 0
push 0
lea ecx, [ebp - 0x404]
call fcn.10011607
mov eax, dword [eax]
mov ecx, dword [ebp - 0x6f8]
mov dword [ebp + eax*4 - 0x108], ecx
mov byte [ebp - 4], 0x26
lea ecx, [ebp - 0x1080]
call fcn.100115eb
jmp 0x10037665
push 0x6db
lea eax, [ebp - 0xb84]
push eax
push 0
push 0x2e77
push 0x3b1c
push 0
call fcn.100234c4
add esp, 0x18
mov byte [ebp - 4], 0x25
lea ecx, [ebp - 0x1254]
call fcn.100115eb
mov byte [ebp - 4], 0x21
lea ecx, [ebp - 0x404]
call fcn.100115eb
cmp dword [ebp - 0x54], 0
jne 0x1003796f
mov eax, dword [ebp - 0x54]
cmp eax, dword [ebp - 0x290]
jg 0x10037911
mov dword [ebp - 0x8e4], 1
jmp 0x10037918
and dword [ebp - 0x8e4], 0
imul eax, dword [ebp - 0x290], 0xffffffff
imul eax, dword [ebp - 0x8e4]
test eax, eax
jg 0x10037936
mov dword [ebp - 0xddc], 1
jmp 0x1003793d
and dword [ebp - 0xddc], 0
mov dword [ebp - 0x460], 6
mov eax, dword [ebp - 0x460]
mov dword [ebp - 0x1418], eax
push 1
lea ecx, [ebp - 0xafc]
call fcn.10011607
mov eax, dword [eax]
mov dword [ebp - 0x700], eax
cmp dword [ebp - 0x700], 0
mov eax, dword [ebp - 0x460]
cmp eax, dword [ebp - 0x290]
je 0x1003799b
push 0
lea ecx, [ebp - 0x105c]
call fcn.10011607
cmp dword [eax], 0
je 0x1003799b
mov dword [ebp - 0x498], 1
jmp 0x100379a2
and dword [ebp - 0x498], 0
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x498]
mov dword [ebp + eax - 0x1510], ecx
mov eax, dword [ebp - 0x290]
cmp dword [ebp - 0x498], eax
jle 0x100379cf
mov dword [ebp - 0x9d4], 1
jmp 0x100379d6
and dword [ebp - 0x9d4], 0
cmp dword [ebp - 0x9d4], 0xffff
jb 0x100379ee
mov dword [ebp - 0x708], 1
jmp 0x100379f5
and dword [ebp - 0x708], 0
mov eax, dword [ebp - 0x708]
add eax, 0x6db09c55
mov dword [ebp - 0x56c], eax
mov byte [ebp - 4], 9
lea ecx, [ebp - 0x105c]
call fcn.100115eb
jmp 0x10039fd4
mov dword [ebp - 0x110], 0xf6af1124
mov dword [ebp - 0xd2c], 0x7e40d8eb
mov dword [ebp - 0xba4], 0xc65315fa
mov dword [ebp - 0xbac], 1
mov dword [ebp - 0x340], 0
jmp 0x10037a5b
mov eax, dword [ebp - 0x340]
inc eax
mov dword [ebp - 0x340], eax
cmp dword [ebp - 0x340], 1
jge 0x10037a74
mov eax, dword [ebp - 0x340]
mov dword [ebp + eax*4 - 0x64], 5
jmp 0x10037a4e
mov dword [ebp - 0x110], 0
jmp 0x10037a8d
mov eax, dword [ebp - 0x110]
inc eax
mov dword [ebp - 0x110], eax
cmp dword [ebp - 0x110], 0xa
je 0x1003805c
mov dword [ebp - 0x34], 1
push 1
lea ecx, [ebp - 0xefc]
call fcn.10011569
mov byte [ebp - 4], 0x28
push 0x76db
lea eax, [ebp - 0x1258]
push eax
push 0x74e9
push 0
push 0x2f77
push 0x94e
push 0
push 0x55d8
push 0x3cbe
lea eax, [ebp - 0xefc]
push eax
push 0x3e92
push 1
call fcn.1003f865
add esp, 0x30
cmp dword [ebp - 0x34], 0
je 0x10037b0b
mov byte [ebp - 4], 9
lea ecx, [ebp - 0xefc]
call fcn.100115eb
jmp 0x1003805c
mov dword [ebp - 0x34], 0
jmp 0x10037b1b
mov eax, dword [ebp - 0x34]
inc eax
mov dword [ebp - 0x34], eax
cmp dword [ebp - 0x34], 0x3b
jne 0x10038048
mov dword [ebp - 0x44], 0x91e29ea4
push 3
lea ecx, [ebp - 0xe10]
call fcn.10011569
mov byte [ebp - 4], 0x29
mov dword [ebp - 0xe74], 1
mov dword [ebp - 0x84], 0
jmp 0x10037b60
mov eax, dword [ebp - 0x84]
inc eax
mov dword [ebp - 0x84], eax
cmp dword [ebp - 0x84], 3
jge 0x10037b82
push dword [ebp - 0x84]
lea ecx, [ebp - 0xe10]
call fcn.10011607
mov dword [eax], 0x3fca
jmp 0x10037b53
mov dword [ebp - 0x84], 0
jmp 0x10037b9b
mov eax, dword [ebp - 0x84]
inc eax
mov dword [ebp - 0x84], eax
cmp dword [ebp - 0x84], 1
jge 0x10037bb7
mov eax, dword [ebp - 0x84]
mov dword [ebp + eax*4 - 0xb94], 0xdf561f66
jmp 0x10037b8e
mov byte [ebp - 0xd9], 0
lea eax, [ebp - 0xd9]
push eax
push 0x605
push 0x655f
push 0
push 0
call fcn.10023021
add esp, 0x14
mov dword [ebp - 0x44], 0
jmp 0x10037beb
mov eax, dword [ebp - 0x44]
dec eax
mov dword [ebp - 0x44], eax
cmp dword [ebp - 0x44], 0xfffffff6
jne 0x10038034
mov dword [ebp - 0xb0], 0x68cd546
mov dword [ebp - 0x9e4], 0xa4b6d8d4
cmp dword [ebp - 0x44], 0
je 0x10037d21
mov eax, dword [ebp - 0x44]
mov dword [ebp - 0x1374], eax
cmp dword [ebp - 0x44], 0
jne 0x10037c34
mov eax, 0xa4a2c6eb
test eax, eax
jne 0x10037c34
and dword [ebp - 0x8ec], 0
jmp 0x10037c3e
mov dword [ebp - 0x8ec], 1
mov eax, dword [ebp - 0x34]
add eax, dword [ebp - 0x8ec]
cmp eax, dword [ebp - 0x44]
je 0x10037c5e
mov eax, 0xd9918c6a
test eax, eax
jne 0x10037c5e
and dword [ebp - 0xb8c], 0
jmp 0x10037c68
mov dword [ebp - 0xb8c], 1
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x64]
mov dword [ebp - 0x1268], eax
cmp dword [ebp - 0xb0], 0
je 0x10037ca3
mov eax, 0x80d0e101
test eax, eax
je 0x10037ca3
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x64], 0
je 0x10037ca3
mov dword [ebp - 0x710], 1
jmp 0x10037caa
and dword [ebp - 0x710], 0
mov eax, dword [ebp - 0x710]
sub eax, dword [ebp - 0xb0]
cmp dword [ebp - 0x34], eax
jl 0x10037cc7
mov dword [ebp - 0xa4c], 1
jmp 0x10037cce
and dword [ebp - 0xa4c], 0
cmp dword [ebp - 0xa4c], 7
jle 0x10037ce3
mov dword [ebp - 0x718], 1
jmp 0x10037cea
and dword [ebp - 0x718], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x64]
cmp dword [ebp - 0x718], eax
jge 0x10037d08
mov dword [ebp - 0x8f4], 1
jmp 0x10037d0f
and dword [ebp - 0x8f4], 0
cmp dword [ebp - 0x8f4], 0xfffffff9
je 0x10037d21
and dword [ebp - 0xd20], 0
jmp 0x10037d2b
mov dword [ebp - 0xd20], 1
push 1
lea ecx, [ebp - 0xe10]
call fcn.10011607
mov eax, 0x584125db
test eax, eax
jne 0x10037d57
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x64], 0
jne 0x10037d57
and dword [ebp - 0x720], 0
jmp 0x10037d61
mov dword [ebp - 0x720], 1
mov eax, dword [ebp - 0xb0]
cmp dword [ebp - 0x720], eax
je 0x10037d7b
mov dword [ebp - 0x9dc], 1
jmp 0x10037d82
and dword [ebp - 0x9dc], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x64]
imul eax, dword [ebp - 0x9dc]
imul eax, eax, 0xffff
cmp eax, dword [ebp - 0x44]
je 0x10037daa
mov dword [ebp - 0x728], 1
jmp 0x10037db1
and dword [ebp - 0x728], 0
mov eax, dword [ebp - 0xb0]
imul eax, dword [ebp - 0x728]
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0xb94], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x64]
mov dword [ebp - 0x13e0], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x64], 0
jne 0x10037df5
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x64], 0
je 0x10037e06
xor eax, eax
inc eax
je 0x10037e06
mov dword [ebp - 0x8fc], 1
jmp 0x10037e0d
and dword [ebp - 0x8fc], 0
mov eax, dword [ebp - 0x34]
imul eax, dword [ebp - 0x8fc]
cmp eax, dword [ebp - 0x110]
jle 0x10037e2b
mov dword [ebp - 0x730], 1
jmp 0x10037e32
and dword [ebp - 0x730], 0
mov eax, dword [ebp - 0xb0]
cmp dword [ebp - 0x730], eax
jge 0x10037e4c
mov dword [ebp - 0xac4], 1
jmp 0x10037e53
and dword [ebp - 0xac4], 0
mov eax, dword [ebp - 0xac4]
neg eax
cmp eax, dword [ebp - 0x44]
jge 0x10037e72
mov eax, 0xb10e
test eax, eax
jne 0x10037e72
and dword [ebp - 0x738], 0
jmp 0x10037e7c
mov dword [ebp - 0x738], 1
mov eax, dword [ebp - 0x738]
sub eax, dword [ebp - 0x34]
cmp eax, 1
je 0x10037e96
mov dword [ebp - 0x904], 1
jmp 0x10037e9d
and dword [ebp - 0x904], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x904]
sub ecx, dword [ebp + eax - 0x64]
cmp dword [ebp - 0x34], ecx
je 0x10037ebe
mov dword [ebp - 0x740], 1
jmp 0x10037ec5
and dword [ebp - 0x740], 0
mov eax, dword [ebp - 0x740]
mov dword [ebp - 0xe74], eax
xor eax, eax
jae 0x10037f28
mov dword [ebp - 0xb9c], 0x9ed226f8
lea eax, [ebp - 0xb0]
push eax
push 0
lea eax, [ebp - 0xb9c]
push eax
push 0x3453
lea eax, [ebp - 0xd2c]
push eax
lea eax, [ebp - 0x9e4]
push eax
lea eax, [ebp - 0x110]
push eax
lea eax, [ebp - 0x34]
push eax
push 0
lea eax, [ebp - 0xe10]
push eax
push 0x736b
call fcn.10023c42
add esp, 0x2c
jmp 0x1003802f
mov dword [ebp - 0x298], 0
jmp 0x10037f41
mov eax, dword [ebp - 0x298]
inc eax
mov dword [ebp - 0x298], eax
cmp dword [ebp - 0x298], 1
jge 0x10037f5d
mov eax, dword [ebp - 0x298]
mov dword [ebp + eax*4 - 0xde4], 2
jmp 0x10037f34
cmp dword [ebp - 0x9e4], 0
jne 0x10037f7b
cmp dword [ebp - 0xba4], 0
jne 0x10037f7b
mov dword [ebp - 0x750], 1
jmp 0x10037f82
and dword [ebp - 0x750], 0
cmp dword [ebp - 0xb0], 0xfffffff9
jge 0x10037f97
mov dword [ebp - 0x748], 1
jmp 0x10037f9e
and dword [ebp - 0x748], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xde4]
cmp eax, dword [ebp - 0xbac]
jle 0x10037fce
push 2
lea ecx, [ebp - 0xe10]
call fcn.10011607
cmp dword [eax], 0
jne 0x10037fce
and dword [ebp - 0x90c], 0
jmp 0x10037fd8
mov dword [ebp - 0x90c], 1
mov eax, dword [ebp - 0x748]
cmp eax, dword [ebp - 0x90c]
jl 0x10037ff2
mov dword [ebp - 0xa54], 1
jmp 0x10037ff9
and dword [ebp - 0xa54], 0
mov eax, dword [ebp - 0x750]
cmp eax, dword [ebp - 0xa54]
je 0x10038013
mov dword [ebp - 0x758], 1
jmp 0x1003801a
and dword [ebp - 0x758], 0
push 0
lea ecx, [ebp - 0xefc]
call fcn.10011607
mov ecx, dword [ebp - 0x758]
mov dword [eax], ecx
jmp 0x10037be4
mov byte [ebp - 4], 0x28
lea ecx, [ebp - 0xe10]
call fcn.100115eb
jmp 0x10037b14
mov byte [ebp - 4], 9
lea ecx, [ebp - 0xefc]
call fcn.100115eb
jmp 0x10037a80
mov dword [ebp - 0x2a0], 0xffffffff
mov dword [ebp - 0x3d0], 0
jmp 0x1003807f
mov eax, dword [ebp - 0x3d0]
inc eax
mov dword [ebp - 0x3d0], eax
cmp dword [ebp - 0x3d0], 4
jge 0x1003809b
mov eax, dword [ebp - 0x3d0]
mov dword [ebp + eax*4 - 0x1600], 0xa2768935
jmp 0x10038072
mov dword [ebp - 0x2a0], 0
jmp 0x100380b4
mov eax, dword [ebp - 0x2a0]
dec eax
mov dword [ebp - 0x2a0], eax
cmp dword [ebp - 0x2a0], 0xffffffe3
jl 0x100381b7
mov dword [ebp - 0x15c], 9
push 1
push 0
lea eax, [ebp - 0x15c]
push eax
push 0x140c
call fcn.1002363b
add esp, 0x10
mov dword [ebp - 0x15c], 0x1d
jmp 0x100380fc
mov eax, dword [ebp - 0x15c]
dec eax
mov dword [ebp - 0x15c], eax
cmp dword [ebp - 0x15c], 0x1b
jg 0x100381b2
push 3
lea ecx, [ebp - 0x1074]
call fcn.10011569
mov byte [ebp - 4], 0x2a
push 0x2cd7
push 0x2243
push 0xe48
push 0xe5b
push 0
lea eax, [ebp - 0x184]
push eax
lea eax, [ebp - 0x1074]
push eax
push 0
push 0x7223
call fcn.1003eec0
add esp, 0x24
mov dword [ebp - 0x184], 0
jmp 0x10038166
mov eax, dword [ebp - 0x184]
inc eax
mov dword [ebp - 0x184], eax
cmp dword [ebp - 0x184], 1
jge 0x10038182
mov eax, dword [ebp - 0x184]
mov dword [ebp + eax*4 - 0xd38], 0xe81a7ecc
jmp 0x10038159
push 4
pop eax
imul esi, eax, 0
push 0
lea ecx, [ebp - 0x1074]
call fcn.10011607
mov eax, dword [eax]
mov dword [ebp + esi - 0xd38], eax
mov byte [ebp - 4], 9
lea ecx, [ebp - 0x1074]
call fcn.100115eb
jmp 0x100380ef
jmp 0x100380a7
mov dword [ebp - 0x164], 0xffffffff
mov dword [ebp - 0x164], 0
jmp 0x100381da
mov eax, dword [ebp - 0x164]
dec eax
mov dword [ebp - 0x164], eax
cmp dword [ebp - 0x164], 0xffffffef
jl 0x10038208
mov byte [ebp - 0xa9], 0
movzx eax, byte [ebp - 0xa9]
test eax, eax
je 0x10038206
push 1
push 0x228c
push 0
call fcn.10023703
add esp, 0xc
jmp 0x100381cd
mov dword [ebp - 0x164], 0x9ac70c30
mov dword [ebp - 0x348], 0
jmp 0x1003822b
mov eax, dword [ebp - 0x348]
inc eax
mov dword [ebp - 0x348], eax
cmp dword [ebp - 0x348], 3
jge 0x10038247
mov eax, dword [ebp - 0x348]
mov dword [ebp + eax*4 - 0x1284], 0x6fbc
jmp 0x1003821e
push 2
lea ecx, [ebp - 0x4c8]
call fcn.10011569
mov byte [ebp - 4], 0x2b
mov dword [ebp - 0x398], 0x5e3edfa8
mov dword [ebp - 0x768], 0xf7c8b166
mov dword [ebp - 0x91c], 0x23edb395
mov dword [ebp - 0x778], 0xb76e1ee6
mov dword [ebp - 0xbb4], 0
mov dword [ebp - 0x2a8], 0
jmp 0x100382a3
mov eax, dword [ebp - 0x2a8]
inc eax
mov dword [ebp - 0x2a8], eax
cmp dword [ebp - 0x2a8], 2
jge 0x100382c5
push dword [ebp - 0x2a8]
lea ecx, [ebp - 0x4c8]
call fcn.10011607
mov dword [eax], 0xa86ba47c
jmp 0x10038296
push 0
lea ecx, [ebp - 0x4c8]
call fcn.10011607
mov eax, dword [eax]
mov dword [ebp - 0x398], eax
mov eax, dword [ebp - 0x398]
mov dword [ebp - 0x1278], eax
mov esi, dword [ebp - 0x398]
push 0
lea ecx, [ebp - 0x4c8]
call fcn.10011607
cmp dword [eax], esi
jg 0x10038312
mov eax, 0x2b57
test eax, eax
je 0x10038312
mov dword [ebp - 0x914], 1
jmp 0x10038319
and dword [ebp - 0x914], 0
cmp dword [ebp - 0x914], 0xffffffff
jne 0x1003832e
mov dword [ebp - 0x760], 1
jmp 0x10038335
and dword [ebp - 0x760], 0
mov eax, dword [ebp - 0x398]
cmp dword [ebp - 0x760], eax
jg 0x1003834f
mov dword [ebp - 0x9ec], 1
jmp 0x10038356
and dword [ebp - 0x9ec], 0
push 0
lea ecx, [ebp - 0x4c8]
call fcn.10011607
mov esi, dword [eax]
add esi, dword [ebp - 0x9ec]
neg esi
push 0
lea ecx, [ebp - 0x4c8]
call fcn.10011607
imul esi, dword [eax]
push 0
lea ecx, [ebp - 0x4c8]
call fcn.10011607
sub esi, dword [eax]
mov dword [ebp - 0x768], esi
mov esi, dword [ebp - 0x768]
push 0
lea ecx, [ebp - 0x4c8]
call fcn.10011607
sub esi, dword [eax]
mov dword [ebp - 0x91c], esi
push 0
lea ecx, [ebp - 0x4c8]
call fcn.10011607
mov esi, dword [ebp - 0x91c]
push 0
lea ecx, [ebp - 0x4c8]
call fcn.10011607
cmp esi, dword [eax]
jg 0x100383dd
mov dword [ebp - 0x770], 1
jmp 0x100383e4
and dword [ebp - 0x770], 0
cmp dword [ebp - 0x770], 1
jbe 0x100383f9
mov dword [ebp - 0xa84], 1
jmp 0x10038400
and dword [ebp - 0xa84], 0
mov eax, dword [ebp - 0xa84]
mov dword [ebp - 0x778], eax
mov eax, dword [ebp - 0x778]
mov dword [ebp - 0xbb4], eax
mov byte [ebp - 4], 9
lea ecx, [ebp - 0x4c8]
call fcn.100115eb
mov byte [ebp - 0xf8], 0
mov dword [ebp - 0x190], 0x24a8c6a5
mov dword [ebp - 0x190], 0x1b
jmp 0x10038451
mov eax, dword [ebp - 0x190]
dec eax
mov dword [ebp - 0x190], eax
cmp dword [ebp - 0x190], 0xffffffea
jne 0x1003850d
mov dword [ebp - 0xfc8], 3
mov dword [ebp - 0xfc4], 3
mov dword [ebp - 0xfc0], 3
mov dword [ebp - 0xfbc], 3
lea ecx, [ebp - 0x46d]
call fcn.10011616
push eax
lea eax, [ebp - 0xfb8]
push eax
lea eax, [ebp - 0xfc8]
push eax
lea ecx, [ebp - 0x14b8]
call fcn.10011619
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0x1264]
call fcn.100115c5
mov byte [ebp - 4], 0x2c
mov dword [ebp - 0xe5c], 0
push 0
lea ecx, [ebp - 0x1264]
call fcn.10011607
mov dword [ebp - 0x924], eax
mov eax, dword [ebp - 0x924]
mov eax, dword [eax]
inc eax
mov ecx, dword [ebp - 0x924]
mov dword [ecx], eax
mov eax, dword [ebp - 0x190]
mov dword [ebp - 0xe5c], eax
mov byte [ebp - 4], 9
lea ecx, [ebp - 0x1264]
call fcn.100115eb
jmp 0x10038444
mov dword [ebp - 0x780], 0x65d2
mov dword [ebp - 0xd44], 0x1000a520
cmp dword [ebp - 0x780], 0x69b9
jle 0x10038642
push 0
call dword [sym.imp.KERNEL32.dll_GetFileAttributesW]
and dword [ebp - 0x2b8], 0
jmp 0x1003854f
mov eax, dword [ebp - 0x2b8]
inc eax
mov dword [ebp - 0x2b8], eax
cmp dword [ebp - 0x2b8], 0x3768
jge 0x10038642
and dword [ebp - 0x2b0], 0
jmp 0x10038575
mov eax, dword [ebp - 0x2b0]
inc eax
mov dword [ebp - 0x2b0], eax
cmp dword [ebp - 0x2b0], 0x5bef
jge 0x1003863d
and dword [ebp - 0x350], 0
jmp 0x1003859b
mov eax, dword [ebp - 0x350]
inc eax
mov dword [ebp - 0x350], eax
cmp dword [ebp - 0x350], 0x2e85
jge 0x10038638
and dword [ebp - 0x3c0], 0
jmp 0x100385c1
mov eax, dword [ebp - 0x3c0]
inc eax
mov dword [ebp - 0x3c0], eax
cmp dword [ebp - 0x3c0], 0x5277
jge 0x10038633
mov ecx, dword [ebp - 0x2b0]
imul ecx, dword [ebp - 0x350]
mov eax, dword [ebp - 0x2b8]
sar eax, cl
xor eax, dword [ebp - 0x3c0]
cdq
mov dword [ebp - 0xccc], eax
mov dword [ebp - 0xcc8], edx
push dword [ebp - 0xcc8]
push dword [ebp - 0xccc]
lea ecx, [ebp - 0x1598]
call fcn.1000d05e
pop ecx
pop ecx
mov dword [ebp - 0xbbc], eax
mov ecx, dword [ebp - 0xbbc]
call fcn.1001131e
push eax
call fcn.1004d84f
pop ecx
lea ecx, [ebp - 0x1598]
call fcn.10011314
jmp 0x100385b4
jmp 0x1003858e
jmp 0x10038568
jmp 0x10038542
mov byte [ebp - 0xdb], 0
mov byte [ebp - 4], 0x2d
cmp dword [ebp - 0x780], 0x6374
jge 0x10038665
push dword [ebp - 0xd44]
call fcn.1004d84f
pop ecx
jmp 0x10038681
mov dword [ebp - 4], 9
jmp 0x10038691
movzx eax, byte [ebp - 0xdb]
test eax, eax
je 0x100386a4
push 0
call fcn.1002c04c
pop ecx
movzx eax, byte [ebp - 0xf8]
test eax, eax
je 0x10038a99
mov dword [ebp - 0x358], 0x8a87013d
mov dword [ebp - 0x2c0], 0
jmp 0x100386d6
mov eax, dword [ebp - 0x2c0]
inc eax
mov dword [ebp - 0x2c0], eax
cmp dword [ebp - 0x2c0], 4
jge 0x100386f2
mov eax, dword [ebp - 0x2c0]
mov dword [ebp + eax*4 - 0x15f0], 0x40d7f825
jmp 0x100386c9
mov dword [ebp - 0x358], 3
jmp 0x1003870b
mov eax, dword [ebp - 0x358]
dec eax
mov dword [ebp - 0x358], eax
cmp dword [ebp - 0x358], 0
jl 0x10038908
mov dword [ebp - 0x2c8], 0xffffffff
mov byte [ebp - 0xe4], 0
movzx eax, byte [ebp - 0xe4]
test eax, eax
je 0x1003876d
push 0x2425
push 1
push 0x228b
push 0x4014
push 0x4e30
push 0x36c0
push 0x5744
push 0x2b22
push 0
push 0x1949
push 0x4d07
call fcn.10023c42
add esp, 0x2c
mov dword [ebp - 0x2c8], 0
jmp 0x10038786
cmp dword [ebp - 0x2c8], 3
jg 0x10038903
mov byte [ebp - 0xf0], 0
mov dword [ebp - 0x9f4], 0x441f
mov dword [ebp - 0xdec], 0x1000a578
cmp dword [ebp - 0x9f4], 0x4617
jle 0x10038895
and dword [ebp - 0x3a0], 0
jmp 0x100387d4
cmp dword [ebp - 0x3a0], 0xe4b
jge 0x10038895
movzx eax, byte [ebp - 0xf0]
test eax, eax
je 0x100388ae
push 0
push 0x6a59
call fcn.10030916
pop ecx
pop ecx
mov byte [ebp - 4], 0x2f
cmp dword [ebp - 0x9f4], 0x43ea
jge 0x100388ca
jmp 0x100386fe
push 0x4585
push 0
push 1
push 0x4640
push 0x39ef
call fcn.1002358b
add esp, 0x14
mov dword [ebp - 0x788], 0x1484
mov dword [ebp - 0xd50], 0x1000a5d8
cmp dword [ebp - 0x788], 0x16ec
jle 0x10038a51
and dword [ebp - 0x2d8], 0
jmp 0x1003895d
cmp dword [ebp - 0x2d8], 0x5c6f
jge 0x10038a51
and dword [ebp - 0x2e0], 0
jmp 0x10038983
cmp dword [ebp - 0x2e0], 0x3fbc
jge 0x10038a4c
and dword [ebp - 0x1d0], 0
jmp 0x100389a9
jmp 0x10038950
mov byte [ebp - 4], 0x31
cmp dword [ebp - 0x788], 0x1174
jge 0x10038a6d
push dword [ebp - 0xd50]
call fcn.1004d84f
pop ecx
jmp 0x10038a89
mov dword [ebp - 4], 9
jmp 0x10038a99
mov dword [ebp - 0x54], 0
jmp 0x10038aa9
cmp dword [ebp - 0x54], 3
jg 0x10039fd4
mov dword [ebp - 0x7c0], 3
mov dword [ebp - 0x174], 0xfffffff7
mov dword [ebp - 0x40c], 1
mov dword [ebp - 0x1dc], 0
jmp 0x10038aea
mov eax, dword [ebp - 0x1dc]
inc eax
mov dword [ebp - 0x1dc], eax
cmp dword [ebp - 0x1dc], 3
jge 0x10038b06
mov eax, dword [ebp - 0x1dc]
mov dword [ebp + eax*4 - 0x1b8], 1
jmp 0x10038add
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x1b8], 0x6ff23b1a
jle 0x10038b25
mov dword [ebp - 0x92c], 1
jmp 0x10038b2c
and dword [ebp - 0x92c], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x1b8]
cmp dword [ebp - 0x92c], eax
je 0x10038b4d
mov dword [ebp - 0xbd4], 1
jmp 0x10038b54
and dword [ebp - 0xbd4], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x1b8]
mov dword [ebp - 0x137c], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x1b8]
mov dword [ebp - 0x1288], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x1b8]
mov dword [ebp - 0x1400], eax
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0x1b8], 0xec75
je 0x10038e6b
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0x1b8], 0
je 0x10038e6b
mov dword [ebp - 0x16c], 0x589b
mov dword [ebp - 0x4b4], 6
mov dword [ebp - 0x1e4], 0x82f
mov dword [ebp - 0x7a0], 0x5a527720
mov dword [ebp - 0x468], 8
mov byte [ebp - 0xe6], 0
movzx eax, byte [ebp - 0xe6]
test eax, eax
je 0x10038c17
push 0x14c5
push 0x5fd0
push 0
push 0
push 1
push 0x75ad
call fcn.1002abc1
add esp, 0x18
mov eax, dword [ebp - 0x16c]
mov dword [ebp - 0x4b4], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x1b8]
add eax, dword [ebp - 0x16c]
cmp eax, 0x637b
jge 0x10038c49
mov dword [ebp - 0x18c], 0xf61ca727
mov dword [ebp - 0x94c], 9
mov dword [ebp - 0x514], 0
mov dword [ebp - 0xf78], 0x2cbd0316
mov dword [ebp - 0xf74], 0x2cbd0316
mov dword [ebp - 0xf70], 0x2cbd0316
mov dword [ebp - 0xf6c], 0x2cbd0316
lea ecx, [ebp - 0x4b5]
call fcn.10011616
push eax
lea eax, [ebp - 0xf68]
push eax
lea eax, [ebp - 0xf78]
push eax
lea ecx, [ebp - 0x14d0]
call fcn.10011619
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0x1274]
call fcn.100115c5
mov byte [ebp - 4], 0x33
mov dword [ebp - 0x1ec], 0
jmp 0x10038f03
cmp dword [ebp - 0x1ec], 1
jge 0x10038f1f
mov eax, dword [ebp - 0x1ec]
mov dword [ebp + eax*4 - 0x118], 6
jmp 0x10038ef6
mov eax, 0x3c23
test eax, eax
je 0x10038fe0
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xafc]
call fcn.100115eb
mov dword [ebp - 0x148], 0x24a8c6a5
mov dword [ebp - 0x148], 0x1b
jmp 0x1003a006
mov eax, dword [ebp - 0x148]
dec eax
mov dword [ebp - 0x148], eax
cmp dword [ebp - 0x148], 0xffffffea
jne 0x1003a0bb
mov dword [ebp - 0x1004], 3
mov dword [ebp - 0x1000], 3
mov dword [ebp - 0xffc], 3
mov dword [ebp - 0xff8], 3
lea ecx, [ebp - 0x489]
call fcn.10011616
push eax
lea eax, [ebp - 0xff4]
push eax
lea eax, [ebp - 0x1004]
push eax
lea ecx, [ebp - 0x14f0]
call fcn.10011619
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0x12a4]
call fcn.100115c5
mov dword [ebp - 4], 0x3a
mov dword [ebp - 0xc1c], 0
push 1
push 1
lea eax, [ebp - 0x12a4]
push eax
push 0
push 0x192d
call fcn.10026b46
add esp, 0x14
mov eax, dword [ebp - 0x148]
mov dword [ebp - 0xc1c], eax
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x12a4]
call fcn.100115eb
jmp 0x10039ff9
push 0x2234
push 0x405b
push 0x4f7c
push 1
push 0
call fcn.10023021
add esp, 0x14
mov eax, dword [ebp - 0xd84]
mov eax, dword [eax + 0x38]
mov dword [ebp - 0x46c], eax
mov dword [ebp - 0x60], 0xfebaeef2
mov dword [ebp - 0x424], 0x3b2c57e7
mov dword [ebp - 0x664], 0x31e468a0
push 4
lea ecx, [ebp - 0xecc]
call fcn.10011569
mov dword [ebp - 4], 0x3b
push 3
lea ecx, [ebp - 0x108c]
call fcn.10011569
mov byte [ebp - 4], 0x3c
mov dword [ebp - 0x444], 0
mov dword [ebp - 0x65c], 0x7139
mov dword [ebp - 0xc24], 0x1000a664
cmp dword [ebp - 0x65c], 0x73e1
jle 0x1003a22f
and dword [ebp - 0x22c], 0
jmp 0x1003a169
cmp dword [ebp - 0x22c], 0x4607
jge 0x1003a22f
and dword [ebp - 0x234], 0
jmp 0x1003a18f
cmp dword [ebp - 0x234], 0x775
jge 0x1003a22a
and dword [ebp - 0x21c], 0
jmp 0x1003a1b5
jmp 0x1003a15c
mov dword [ebp - 0x44c], 0xec71cb27
mov byte [ebp - 4], 0x3d
cmp dword [ebp - 0x65c], 0x6ef8
jge 0x1003a259
mov edx, dword [ebp - 0xc24]
mov ecx, 0x1060ba78
call fcn.10013c65
jmp 0x1003a275
mov dword [ebp - 4], 0x3c
jmp 0x1003a285
mov dword [ebp - 0xc2c], 0xc6bcfb65
push 0
lea eax, [ebp - 0x150]
push eax
push 0x4a09
push 0x64b1
lea eax, [ebp - 0xecc]
push eax
call fcn.10040ed6
add esp, 0x14
mov dword [ebp - 0x150], 0
jmp 0x1003a2ca
cmp dword [ebp - 0x150], 3
jge 0x1003a2ec
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret