Function at 0x10012475
Capabilities:
Enumerate pe sections

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x10070726
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x838
push esi
movzx eax, byte [ebp + 0x18]
test eax, eax
je 0x100126de
mov eax, dword [ebp + 0x10]
mov dword [ebp - 0x4e8], eax
mov dword [ebp - 0x42c], 0x19d0
cmp dword [ebp - 0x42c], 0xd53
jge 0x100126bf
push 0x10663f98
push 0x10663f84
push 0x106fbb54
push 0x1000ea1c
call fcn.10056960
add esp, 0x10
push 0x10743190
push 0x10699cb0
push 0x1000ea28
call fcn.10056960
add esp, 0xc
push 0x10699cb0
call fcn.10056780
pop ecx
mov dword [ebp - 0x4e0], eax
push 0x10743190
call fcn.10056780
pop ecx
mov dword [ebp - 0x1a8], eax
and dword [ebp - 0xac], 0
jmp 0x1001252e
mov eax, dword [ebp - 0xac]
inc eax
mov dword [ebp - 0xac], eax
mov eax, dword [ebp - 0x1a8]
mov ecx, dword [ebp - 0xac]
lea eax, [ecx + eax - 1]
cmp eax, dword [ebp - 0x4e0]
jge 0x100125cf
mov byte [ebp - 0x25], 1
and dword [ebp - 0x14c], 0
mov eax, dword [ebp - 0xac]
mov dword [ebp - 0x170], eax
jmp 0x1001257d
mov eax, dword [ebp - 0x14c]
inc eax
mov dword [ebp - 0x14c], eax
mov eax, dword [ebp - 0x170]
inc eax
mov dword [ebp - 0x170], eax
mov eax, dword [ebp - 0x14c]
cmp eax, dword [ebp - 0x1a8]
jge 0x100125b1
mov eax, dword [ebp - 0x170]
movsx eax, byte [eax + 0x10699cb0]
mov ecx, dword [ebp - 0x14c]
movsx ecx, byte [ecx + 0x10743190]
cmp eax, ecx
je 0x100125af
mov byte [ebp - 0x25], 0
jmp 0x100125b1
jmp 0x10012563
movzx eax, byte [ebp - 0x25]
test eax, eax
je 0x100125ca
lea eax, [ebp - 0xac]
push eax
mov ecx, 0x109cd728
call fcn.100302db
jmp 0x10012521
and dword [ebp - 0x178], 0
jmp 0x100125e5
mov eax, dword [ebp - 0x178]
inc eax
mov dword [ebp - 0x178], eax
mov eax, dword [ebp - 0x178]
cmp eax, dword [0x10663f98]
jge 0x100126bf
and dword [ebp - 0x1c8], 0
lea eax, [ebp - 0x188]
push eax
lea eax, [ebp - 0x17c]
push eax
push 0x1000ea30
call fcn.10056960
add esp, 0xc
mov eax, dword [ebp - 0x17c]
dec eax
mov dword [ebp - 0x17c], eax
mov eax, dword [ebp - 0x188]
dec eax
mov dword [ebp - 0x188], eax
and dword [ebp - 0xcc], 0
jmp 0x10012649
mov eax, dword [ebp - 0xcc]
inc eax
mov dword [ebp - 0xcc], eax
mov ecx, 0x109cd728
call fcn.100302c3
cmp dword [ebp - 0xcc], eax
jae 0x100126a8
push dword [ebp - 0xcc]
mov ecx, 0x109cd728
call fcn.100302cc
mov eax, dword [eax]
cmp eax, dword [ebp - 0x17c]
jl 0x100126a6
push dword [ebp - 0xcc]
mov ecx, 0x109cd728
call fcn.100302cc
mov eax, dword [eax]
mov ecx, dword [ebp - 0x1a8]
lea eax, [eax + ecx - 1]
cmp eax, dword [ebp - 0x188]
jg 0x100126a6
mov eax, dword [ebp - 0x1c8]
inc eax
mov dword [ebp - 0x1c8], eax
jmp 0x1001263c
push dword [ebp - 0x1c8]
push 0x1000ea38
call fcn.10056cf1
pop ecx
pop ecx
jmp 0x100125d8
push 1
push 0x5955
push 0x9fd
push dword [ebp - 0x4e8]
call fcn.10015a7c
add esp, 0x10
jmp 0x10015a6d
mov eax, dword [ebp + 0xc]
mov dword [ebp - 0x478], eax
mov eax, dword [ebp + 0x20]
mov dword [ebp - 0x500], eax
mov eax, dword [ebp + 0x1c]
mov dword [ebp - 0x4f8], eax
lea eax, [ebp + 8]
mov dword [ebp - 0x4f0], eax
mov eax, dword [ebp + 0x14]
mov dword [ebp - 0x4c4], eax
mov eax, dword [ebp - 0x4f0]
movzx eax, byte [eax]
test eax, eax
je 0x10015a31
mov eax, dword [ebp - 0x4f8]
mov dword [ebp - 0x470], eax
mov eax, dword [ebp - 0x500]
mov dword [ebp - 0x460], eax
mov eax, dword [ebp - 0x4c4]
mov dword [ebp - 0x104], eax
mov dword [ebp - 0x490], 0x946507e6
mov dword [ebp - 0x4bc], 0x278ee3f2
push 3
lea ecx, [ebp - 0x5bc]
call fcn.100301c4
and dword [ebp - 4], 0
mov dword [ebp - 0x3ec], 0xffffffff
mov dword [ebp - 0x3f4], 1
mov dword [ebp - 0x494], 0xfffffff6
mov dword [ebp - 0x3e4], 5
push 0
lea eax, [ebp - 0x5bc]
push eax
lea eax, [ebp - 0x618]
push eax
call fcn.1001217e
add esp, 0xc
push 0
lea eax, [ebp - 0x3e4]
push eax
push 1
lea eax, [ebp - 0x4bc]
push eax
lea eax, [ebp - 0x3ec]
push eax
lea eax, [ebp - 0x5bc]
push eax
lea eax, [ebp - 0x490]
push eax
lea eax, [ebp - 0x3f4]
push eax
push 0x29e3
lea eax, [ebp - 0x494]
push eax
call fcn.100119e6
add esp, 0x28
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x5bc]
call fcn.10030248
mov dword [ebp - 0x120], 0x5c68ec0a
push 2
lea ecx, [ebp - 0x5d4]
call fcn.100301c4
mov dword [ebp - 4], 1
push 3
lea ecx, [ebp - 0x3d4]
call fcn.100301c4
mov byte [ebp - 4], 2
push 0
push 0x15f7
push 0x2b68
lea eax, [ebp - 0x3fc]
push eax
lea eax, [ebp - 0x5d4]
push eax
call fcn.1001235c
add esp, 0x14
push 0
push 0
push 0x7e37
push 0x620
lea eax, [ebp - 0x3fc]
push eax
push 1
lea eax, [ebp - 0x3d4]
push eax
call fcn.10017f56
add esp, 0x1c
push 2
lea ecx, [ebp - 0x3d4]
call fcn.100302cc
mov dword [eax], 1
jmp 0x100128a6
push 2
lea ecx, [ebp - 0x3d4]
call fcn.100302cc
mov dword [ebp - 0x28c], eax
mov eax, dword [ebp - 0x28c]
mov eax, dword [eax]
dec eax
mov ecx, dword [ebp - 0x28c]
mov dword [ecx], eax
push 2
lea ecx, [ebp - 0x3d4]
call fcn.100302cc
cmp dword [eax], 0
jl 0x100128f1
mov dword [ebp - 0x49c], 0xf9e9
push 0x6ae6
push 1
lea eax, [ebp - 0x5d4]
push eax
push 1
lea eax, [ebp - 0x3d4]
push eax
lea eax, [ebp - 0x49c]
push eax
push 0
push 0x34c0
call fcn.10015fc1
add esp, 0x20
jmp 0x10012882
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x3d4]
call fcn.10030248
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x5d4]
call fcn.10030248
mov dword [ebp - 0x154], 0
mov dword [ebp - 0xf8], 0
jmp 0x10012932
mov eax, dword [ebp - 0xf8]
inc eax
mov dword [ebp - 0xf8], eax
cmp dword [ebp - 0xf8], 3
jge 0x1001294e
mov eax, dword [ebp - 0xf8]
mov dword [ebp + eax*4 - 0x784], 0xfffffff8
jmp 0x10012925
mov dword [ebp - 0x154], 0
jmp 0x10012967
mov eax, dword [ebp - 0x154]
inc eax
mov dword [ebp - 0x154], eax
cmp dword [ebp - 0x154], 2
jg 0x100129ec
mov dword [ebp - 0x100], 0xffffffff
mov dword [ebp - 0x100], 2
jmp 0x10012993
mov eax, dword [ebp - 0x100]
dec eax
mov dword [ebp - 0x100], eax
cmp dword [ebp - 0x100], 0
jl 0x100129e7
mov dword [ebp - 0x15c], 1
mov dword [ebp - 0x15c], 0
jmp 0x100129bf
mov eax, dword [ebp - 0x15c]
inc eax
mov dword [ebp - 0x15c], eax
cmp dword [ebp - 0x15c], 2
jg 0x100129e5
push 1
push 0x1ac9
push 0x63d5
push 0
push 0x63b2
call fcn.1001a478
add esp, 0x14
jmp 0x100129b2
jmp 0x10012986
jmp 0x1001295a
mov byte [ebp - 0x72], 0
movzx eax, byte [ebp - 0x72]
test eax, eax
je 0x10012c77
push 0
call fcn.1002b757
pop ecx
mov dword [ebp - 0x404], 0x1723
cmp dword [ebp - 0x404], 0x10a8
jge 0x10012c77
lea eax, [ebp - 0x4a0]
push eax
push 0x1000ea04
call fcn.10056960
pop ecx
pop ecx
mov dword [ebp - 0x190], 1
jmp 0x10012a4a
mov eax, dword [ebp - 0x190]
inc eax
mov dword [ebp - 0x190], eax
mov eax, dword [ebp - 0x190]
cmp eax, dword [ebp - 0x4a0]
jg 0x10012c77
lea eax, [ebp - 0x108]
push eax
push 0x1000ea04
call fcn.10056960
pop ecx
pop ecx
and dword [ebp - 0x80], 0
jmp 0x10012a7c
mov eax, dword [ebp - 0x80]
inc eax
mov dword [ebp - 0x80], eax
mov eax, dword [ebp - 0x80]
cmp eax, dword [ebp - 0x108]
jge 0x10012ab7
mov eax, dword [ebp - 0x80]
lea eax, [ebp + eax*4 - 0x7e4]
push eax
mov eax, dword [ebp - 0x80]
lea eax, [ebp + eax*4 - 0x844]
push eax
mov eax, dword [ebp - 0x80]
lea eax, [ebp + eax*4 - 0x760]
push eax
push 0x1000ea1c
call fcn.10056960
add esp, 0x10
jmp 0x10012a75
lea eax, [ebp - 0x164]
push eax
push 0x1000ea04
call fcn.10056960
pop ecx
pop ecx
and dword [ebp - 0x40], 0
jmp 0x10012ad7
mov eax, dword [ebp - 0x40]
inc eax
mov dword [ebp - 0x40], eax
mov eax, dword [ebp - 0x40]
cmp eax, dword [ebp - 0x108]
jge 0x10012b69
mov eax, dword [ebp - 0x40]
inc eax
mov dword [ebp - 0x50], eax
jmp 0x10012af6
mov eax, dword [ebp - 0x50]
inc eax
mov dword [ebp - 0x50], eax
mov eax, dword [ebp - 0x50]
cmp eax, dword [ebp - 0x108]
jge 0x10012b64
mov eax, dword [ebp - 0x40]
mov ecx, dword [ebp - 0x50]
mov eax, dword [ebp + eax*4 - 0x760]
cmp eax, dword [ebp + ecx*4 - 0x760]
jle 0x10012b62
mov eax, dword [ebp - 0x50]
lea edx, [ebp + eax*4 - 0x760]
mov eax, dword [ebp - 0x40]
lea ecx, [ebp + eax*4 - 0x760]
call fcn.100346ab
mov eax, dword [ebp - 0x50]
lea edx, [ebp + eax*4 - 0x844]
mov eax, dword [ebp - 0x40]
lea ecx, [ebp + eax*4 - 0x844]
call fcn.100346ab
mov eax, dword [ebp - 0x50]
lea edx, [ebp + eax*4 - 0x7e4]
mov eax, dword [ebp - 0x40]
lea ecx, [ebp + eax*4 - 0x7e4]
call fcn.100346ab
jmp 0x10012aef
jmp 0x10012ad0
mov byte [ebp - 0x1a], 0
and dword [ebp - 0x3b4], 0
and dword [ebp - 0x44], 0
jmp 0x10012b81
mov eax, dword [ebp - 0x44]
inc eax
mov dword [ebp - 0x44], eax
mov eax, dword [ebp - 0x44]
cmp eax, dword [ebp - 0x108]
jge 0x10012c52
movzx eax, byte [ebp - 0x1a]
test eax, eax
jne 0x10012c52
mov eax, dword [ebp - 0x44]
mov eax, dword [ebp + eax*4 - 0x760]
sub eax, dword [ebp - 0x3b4]
imul eax, dword [ebp - 0x164]
mov dword [ebp - 0x3ac], eax
mov eax, dword [ebp - 0x44]
mov ecx, dword [ebp - 0x44]
mov eax, dword [ebp + eax*4 - 0x844]
imul eax, dword [ebp + ecx*4 - 0x7e4]
mov ecx, dword [ebp - 0x44]
imul eax, dword [ebp + ecx*4 - 0x7e4]
mov dword [ebp - 0x3bc], eax
mov eax, dword [ebp - 0x3ac]
cmp eax, dword [ebp - 0x3bc]
jg 0x10012bf3
mov byte [ebp - 0x1a], 1
jmp 0x10012c4d
mov eax, dword [ebp - 0x44]
mov eax, dword [ebp + eax*4 - 0x760]
mov dword [ebp - 0x3b4], eax
cvtsi2sd xmm0, dword [ebp - 0x164]
mov eax, dword [ebp - 0x3bc]
imul eax, dword [ebp - 0x164]
cvtsi2sd xmm1, eax
mulsd xmm1, qword [0x1000ef70]
cvtsi2sd xmm2, dword [ebp - 0x3ac]
divsd xmm1, xmm2
subsd xmm0, xmm1
push ecx
push ecx
movsd qword [esp], xmm0
call fcn.100561a0
pop ecx
pop ecx
call fcn.100700f0
mov dword [ebp - 0x164], eax
jmp 0x10012b7a
movzx eax, byte [ebp - 0x1a]
test eax, eax
je 0x10012c67
push 0x1000ea3c
call fcn.10056cf1
pop ecx
jmp 0x10012c72
push 0x1000ea48
call fcn.10056cf1
pop ecx
jmp 0x10012a3d
mov dword [ebp - 0x4c8], 0xafe44fa3
mov dword [ebp - 0x110], 0
jmp 0x10012c9a
mov eax, dword [ebp - 0x110]
inc eax
mov dword [ebp - 0x110], eax
cmp dword [ebp - 0x110], 3
jge 0x10012cb6
mov eax, dword [ebp - 0x110]
mov dword [ebp + eax*4 - 0x538], 0xffffffff
jmp 0x10012c8d
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0x538], 0
jmp 0x10012ce4
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x538]
dec eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x538], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x538], 0xffffffe4
jge 0x10012d34
push 0
push 0x1d7e
push 0x4cc4
call fcn.10015f98
add esp, 0xc
mov byte [ebp - 0x59], 0
push 0
push 0x392a
push 0x4d50
push 0
push 0x4101
push 1
push 0x2032
lea eax, [ebp - 0x59]
push eax
call fcn.1001205d
add esp, 0x20
jmp 0x10012cc9
mov dword [ebp - 0x16c], 0
jmp 0x10012d4d
mov eax, dword [ebp - 0x16c]
inc eax
mov dword [ebp - 0x16c], eax
cmp dword [ebp - 0x16c], 3
jge 0x10012d69
mov eax, dword [ebp - 0x16c]
mov dword [ebp + eax*4 - 0x778], 0x1328f6c7
jmp 0x10012d40
push 2
lea ecx, [ebp - 0x1e4]
call fcn.100301c4
mov dword [ebp - 4], 3
push 1
lea ecx, [ebp - 0x510]
call fcn.100301c4
mov byte [ebp - 4], 4
mov dword [ebp - 0x220], 0xdbd8d46c
push 1
lea ecx, [ebp - 0x5b0]
call fcn.100301c4
mov byte [ebp - 4], 5
mov dword [ebp - 0x1b0], 1
lea eax, [ebp - 0x1e4]
push eax
push 0x603b
push 0x6305
push 0
push 0x426a
lea eax, [ebp - 0x10]
push eax
call fcn.100219a5
add esp, 0x18
mov dword [ebp - 0x10], 0
jmp 0x10012de7
mov eax, dword [ebp - 0x10]
inc eax
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], 1
jge 0x10012e03
push dword [ebp - 0x10]
lea ecx, [ebp - 0x510]
call fcn.100302cc
mov dword [eax], 0xfffffff6
jmp 0x10012de0
push 0x2e02
lea eax, [ebp - 0x5b0]
push eax
push 0
push 0x40ac
lea eax, [ebp - 0x10]
push eax
call fcn.1001dda1
add esp, 0x14
mov dword [ebp - 0x10], 0
jmp 0x10012e32
mov eax, dword [ebp - 0x10]
inc eax
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], 3
jge 0x10012e48
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0x6e4], 0xffffffff
jmp 0x10012e2b
mov dword [ebp - 0x10], 0
jmp 0x10012e58
mov eax, dword [ebp - 0x10]
inc eax
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], 1
jge 0x10012e6e
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0x358], 0xfffffffd
jmp 0x10012e51
mov dword [ebp - 0x10], 0
jmp 0x10012e7e
mov eax, dword [ebp - 0x10]
inc eax
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], 1
jge 0x10012e94
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0x41c], 0x8bc06fe6
jmp 0x10012e77
push 1
lea ecx, [ebp - 0x1e4]
call fcn.100302cc
mov dword [eax], 0xffffffed
jmp 0x10012ecd
push 1
lea ecx, [ebp - 0x1e4]
call fcn.100302cc
mov dword [ebp - 0x1f0], eax
mov eax, dword [ebp - 0x1f0]
mov eax, dword [eax]
inc eax
mov ecx, dword [ebp - 0x1f0]
mov dword [ecx], eax
push 1
lea ecx, [ebp - 0x1e4]
call fcn.100302cc
cmp dword [eax], 0x14
jne 0x1001320c
mov dword [ebp - 0x158], 0xacd4
mov dword [ebp - 0x94], 0
mov dword [ebp - 0x118], 0x94486cae
mov dword [ebp - 0x1c0], 0xa50d0ce4
mov dword [ebp - 0x414], 0x46c248bd
push 0
lea eax, [ebp - 0x1e4]
push eax
lea eax, [ebp - 0x94]
push eax
lea eax, [ebp - 0x158]
push eax
lea eax, [ebp - 0x510]
push eax
lea eax, [ebp - 0x118]
push eax
call fcn.10018758
add esp, 0x18
mov eax, dword [ebp - 0x94]
mov dword [ebp - 0x1f4], eax
push 0
lea ecx, [ebp - 0x5b0]
call fcn.100302cc
mov ecx, dword [ebp - 0x1f4]
mov dword [eax], ecx
push 1
lea ecx, [ebp - 0x1e4]
call fcn.100302cc
mov ecx, dword [ebp - 0x1f4]
cmp ecx, dword [eax]
jne 0x10012f86
mov dword [ebp - 0x350], 1
jmp 0x10012f8d
and dword [ebp - 0x350], 0
mov eax, dword [ebp - 0x118]
mov dword [ebp - 0x1b0], eax
cmp dword [ebp - 0x1b0], 0
je 0x10012fb7
cmp dword [ebp - 0x1b0], 0
je 0x10012fb7
mov dword [ebp - 0x2e0], 1
jmp 0x10012fbe
and dword [ebp - 0x2e0], 0
mov eax, dword [ebp - 0x2e0]
mov dword [ebp - 0x118], eax
cmp dword [ebp - 0x118], 0x5d6f
jle 0x10012fe2
mov dword [ebp - 0x40c], 1
jmp 0x10012fe9
and dword [ebp - 0x40c], 0
push 1
lea ecx, [ebp - 0x1e4]
call fcn.100302cc
cmp dword [eax], 0
jne 0x1001300b
push 7
pop eax
test eax, eax
jne 0x1001300b
and dword [ebp - 0x504], 0
jmp 0x10013015
mov dword [ebp - 0x504], 1
mov eax, dword [ebp - 0x94]
mov dword [ebp - 0x6a0], eax
push 0
lea ecx, [ebp - 0x510]
call fcn.100302cc
mov eax, dword [eax]
sub eax, dword [ebp - 0x158]
cmp eax, dword [ebp - 0x1c0]
je 0x1001304a
mov dword [ebp - 0x208], 1
jmp 0x10013051
and dword [ebp - 0x208], 0
mov eax, dword [ebp - 0x220]
cmp dword [ebp - 0x208], eax
jg 0x1001306b
mov dword [ebp - 0x210], 1
jmp 0x10013072
and dword [ebp - 0x210], 0
mov eax, dword [ebp - 0x350]
cmp eax, dword [ebp - 0x210]
je 0x1001308c
mov dword [ebp - 0x2e8], 1
jmp 0x10013093
and dword [ebp - 0x2e8], 0
mov eax, dword [ebp - 0x2e8]
mov dword [ebp - 0x94], eax
cmp dword [ebp - 0x94], 0x6bb026eb
jne 0x100130c9
push 0
lea ecx, [ebp - 0x510]
call fcn.100302cc
cmp dword [eax], 0
je 0x100130c9
mov dword [ebp - 0x218], 1
jmp 0x100130d0
and dword [ebp - 0x218], 0
push 1
lea ecx, [ebp - 0x1e4]
call fcn.100302cc
mov ecx, dword [ebp - 0x218]
cmp ecx, dword [eax]
jge 0x100130f9
cmp dword [ebp - 0x414], 0
jne 0x100130f9
and dword [ebp - 0x4a8], 0
jmp 0x10013103
mov dword [ebp - 0x4a8], 1
mov eax, dword [ebp - 0x158]
cmp dword [ebp - 0x158], eax
jl 0x1001311d
mov dword [ebp - 0x388], 1
jmp 0x10013124
and dword [ebp - 0x388], 0
mov eax, dword [ebp - 0x1c0]
cmp dword [ebp - 0x388], eax
jne 0x1001313e
mov dword [ebp - 0x198], 1
jmp 0x10013145
and dword [ebp - 0x198], 0
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x198]
mov dword [ebp + eax - 0x6e4], ecx
mov eax, dword [ebp - 0x220]
cmp eax, dword [ebp - 0x198]
jne 0x10013172
mov dword [ebp - 0x2f0], 1
jmp 0x10013179
and dword [ebp - 0x2f0], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x358]
add eax, dword [ebp - 0x2f0]
cmp eax, dword [ebp - 0x1c0]
je 0x100131a0
mov dword [ebp - 0x228], 1
jmp 0x100131a7
and dword [ebp - 0x228], 0
cmp dword [ebp - 0x228], 4
je 0x100131c5
cmp dword [ebp - 0x94], 0
je 0x100131c5
mov dword [ebp - 0x230], 1
jmp 0x100131cc
and dword [ebp - 0x230], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x358]
cmp dword [ebp - 0x230], eax
jg 0x100131ed
mov dword [ebp - 0x2f8], 1
jmp 0x100131f4
and dword [ebp - 0x2f8], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x2f8]
mov dword [ebp + eax - 0x41c], ecx
jmp 0x10012ea9
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x5b0]
call fcn.10030248
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x510]
call fcn.10030248
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x1e4]
call fcn.10030248
mov dword [ebp - 0x120], 0xffffffeb
jmp 0x10013252
mov eax, dword [ebp - 0x120]
inc eax
mov dword [ebp - 0x120], eax
cmp dword [ebp - 0x120], 0xffffffed
je 0x10013d20
mov dword [ebp - 0x148], 0xfffffff6
push 4
lea ecx, [ebp - 0x664]
call fcn.100301c4
mov dword [ebp - 4], 6
mov dword [ebp - 0x668], 0x9e53e58b
push 1
lea ecx, [ebp - 0x598]
call fcn.100301c4
mov byte [ebp - 4], 7
mov dword [ebp - 0xdc], 0xffffffff
mov dword [ebp - 0x4e4], 0x2070
cmp dword [ebp - 0x4e4], 0x12c0
jge 0x10013359
mov dword [ebp - 0x6a8], 0x18
mov dword [ebp - 0x5dc], 0x3c
lea eax, [ebp - 0x424]
push eax
lea eax, [ebp - 0x8c]
push eax
lea eax, [ebp - 0xb4]
push eax
push 0x1000ea50
call fcn.10056960
add esp, 0x10
mov eax, dword [ebp - 0x8c]
add eax, dword [ebp - 0x424]
mov dword [ebp - 0x8c], eax
mov eax, dword [ebp - 0x8c]
cdq
push 0x3c
pop ecx
idiv ecx
add eax, dword [ebp - 0xb4]
mov dword [ebp - 0xb4], eax
mov eax, dword [ebp - 0x8c]
cdq
push 0x3c
pop ecx
idiv ecx
mov dword [ebp - 0x8c], edx
mov eax, dword [ebp - 0xb4]
cdq
push 0x18
pop ecx
idiv ecx
mov dword [ebp - 0xb4], edx
push dword [ebp - 0x8c]
push dword [ebp - 0xb4]
push 0x1000ea5c
call fcn.10056cf1
add esp, 0xc
lea eax, [ebp - 0x4b0]
push eax
push 1
push 1
push 0xf0c
lea eax, [ebp - 0x664]
push eax
push 0
push 0x5888
call fcn.100184d2
add esp, 0x1c
lea eax, [ebp - 0x598]
push eax
lea eax, [ebp - 0x4b0]
push eax
push 1
push 0x4441
push 0x571d
push 0
call fcn.1001cf26
add esp, 0x18
lea eax, [ebp - 0xdc]
push eax
push 0
call fcn.100220ad
pop ecx
pop ecx
mov dword [ebp - 0xdc], 0xffffffe8
jmp 0x100133cc
mov eax, dword [ebp - 0xdc]
inc eax
mov dword [ebp - 0xdc], eax
cmp dword [ebp - 0xdc], 0x31
jne 0x10013448
mov dword [ebp - 0x3d8], 0x8112def9
push 0x74ae
lea eax, [ebp - 0x598]
push eax
push 0x3004
push 0x6587
lea eax, [ebp - 0x3d8]
push eax
push 0
call fcn.1001d331
add esp, 0x18
mov dword [ebp - 0x148], 0xfffffff6
jmp 0x1001341f
mov eax, dword [ebp - 0x148]
inc eax
mov dword [ebp - 0x148], eax
cmp dword [ebp - 0x148], 0xfffffff7
jg 0x10013443
mov byte [ebp - 0x73], 0
push 0x4407
push 0
lea eax, [ebp - 0x73]
push eax
push 0
call fcn.100114ea
add esp, 0x10
jmp 0x10013412
jmp 0x100133bf
mov byte [ebp - 4], 6
lea ecx, [ebp - 0x598]
call fcn.10030248
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x664]
call fcn.10030248
mov dword [ebp - 0x5e0], 0x6cce57bf
mov dword [ebp - 0x5e8], 0xffffffff
mov byte [ebp - 0x61], 0
movzx eax, byte [ebp - 0x61]
test eax, eax
je 0x1001348e
push 0
call dword [sym.imp.KERNEL32.dll_GetTimeZoneInformation]
mov byte [ebp - 0x71], 0
lea eax, [ebp - 0x71]
push eax
push 0
push 0x742e
push 1
call fcn.100114ea
add esp, 0x10
mov dword [ebp - 0x20], 0xffffffff
mov dword [ebp - 0x300], 0xe77e815f
mov dword [ebp - 0x20], 0xffffffea
jmp 0x100134c8
mov eax, dword [ebp - 0x20]
inc eax
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 0xf
jl 0x1001352e
mov byte [ebp - 0x51], 0
movzx eax, byte [ebp - 0x51]
test eax, eax
je 0x10013524
push 0x3436
push 0x20ca
push 0x4717
push 0x6b
push 0x1288
push 0x36de
push 0x4439
push 0x5009
push 1
push 0
push 0x5ecb
push 0x48ed
push 0x6ddf
push 0x6320
push 0x8f3
call fcn.10016595
add esp, 0x3c
cmp dword [ebp - 0x20], 0
je 0x1001352c
jmp 0x1001352e
jmp 0x100134c1
cmp dword [ebp - 0x20], 0x8ce3e63e
jbe 0x10013543
mov dword [ebp - 0x360], 1
jmp 0x1001354a
and dword [ebp - 0x360], 0
cmp dword [ebp - 0x20], 0
jl 0x1001355c
mov dword [ebp - 0x238], 1
jmp 0x10013563
and dword [ebp - 0x238], 0
cmp dword [ebp - 0x238], 0x13e1
jle 0x10013581
mov eax, 0x28405cef
test eax, eax
jne 0x10013581
and dword [ebp - 0x3b0], 0
jmp 0x1001358b
mov dword [ebp - 0x3b0], 1
mov eax, dword [ebp - 0x20]
cmp dword [ebp - 0x3b0], eax
jg 0x100135a2
mov dword [ebp - 0x240], 1
jmp 0x100135a9
and dword [ebp - 0x240], 0
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x20]
add ecx, dword [ebp - 0x240]
add eax, ecx
mov dword [ebp - 0x300], eax
mov eax, dword [ebp - 0x20]
cmp dword [ebp - 0x300], eax
jne 0x100135d4
mov dword [ebp - 0x248], 1
jmp 0x100135db
and dword [ebp - 0x248], 0
mov eax, dword [ebp - 0x20]
imul eax, dword [ebp - 0x248]
inc eax
cmp eax, 0xa6001648
jne 0x100135f9
mov dword [ebp - 0x250], 1
jmp 0x10013600
and dword [ebp - 0x250], 0
mov eax, dword [ebp - 0x360]
sub eax, dword [ebp - 0x250]
cmp eax, dword [ebp - 0x20]
jge 0x1001361d
mov dword [ebp - 0x308], 1
jmp 0x10013624
and dword [ebp - 0x308], 0
mov eax, dword [ebp - 0x308]
sub eax, dword [ebp - 0x20]
mov dword [ebp - 0x20], eax
mov dword [ebp - 0x5f0], 0x75cb
push 3
lea ecx, [ebp - 0x52c]
call fcn.100301c4
mov dword [ebp - 4], 8
mov dword [ebp - 0x9c], 0x6f5020f8
lea eax, [ebp - 0x52c]
push eax
push 0x1885
push 0x49b8
push 0x4ec9
push 0x5fa0
push 0x1e99
push 0x16e2
push 0x5566
push 1
push 1
lea eax, [ebp - 0x5f8]
push eax
push 0x44c9
push 0x1e00
call fcn.10010772
add esp, 0x34
mov dword [ebp - 0x9c], 0
jmp 0x100136b8
mov eax, dword [ebp - 0x9c]
inc eax
mov dword [ebp - 0x9c], eax
cmp dword [ebp - 0x9c], 2
jg 0x1001374c
mov dword [ebp - 0x128], 0xd3b3152c
mov dword [ebp - 0x128], 0
jmp 0x100136e8
mov eax, dword [ebp - 0x128]
inc eax
mov dword [ebp - 0x128], eax
cmp dword [ebp - 0x128], 2
jg 0x1001371f
push 0
push 0x3a44
call fcn.10022b1d
pop ecx
pop ecx
mov byte [ebp - 0x75], 0
push 1
push 0
push 0x4152
push 0x5fc3
lea eax, [ebp - 0x75]
push eax
call fcn.10022a91
add esp, 0x14
jmp 0x100136db
push dword [ebp - 0x9c]
lea ecx, [ebp - 0x52c]
call fcn.100302cc
mov esi, dword [eax]
neg esi
push dword [ebp - 0x9c]
lea ecx, [ebp - 0x52c]
call fcn.100302cc
mov dword [eax], esi
jmp 0x100136ab
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x52c]
call fcn.10030248
mov dword [ebp - 0x168], 0
jmp 0x10013774
mov eax, dword [ebp - 0x168]
inc eax
mov dword [ebp - 0x168], eax
cmp dword [ebp - 0x168], 4
jge 0x10013790
mov eax, dword [ebp - 0x168]
mov dword [ebp + eax*4 - 0x794], 7
jmp 0x10013767
mov dword [ebp - 0x58], 0
mov dword [ebp - 0x3c], 0xfff9
mov dword [ebp - 0x1a0], 0x45b0e82c
mov dword [ebp - 0x1b8], 0xb0ae28de
mov dword [ebp - 0x434], 0x8470
push 2
lea ecx, [ebp - 0x200]
call fcn.100301c4
mov dword [ebp - 4], 9
mov dword [ebp - 0x268], 1
mov dword [ebp - 0x600], 0xe0c6
push 0
push 0x637
lea eax, [ebp - 0xbc]
push eax
lea eax, [ebp - 0x200]
push eax
push 0x22e5
call fcn.10016188
add esp, 0x14
mov dword [ebp - 0xbc], 0
jmp 0x1001381f
mov eax, dword [ebp - 0xbc]
inc eax
mov dword [ebp - 0xbc], eax
cmp dword [ebp - 0xbc], 2
jge 0x1001383b
mov eax, dword [ebp - 0xbc]
mov dword [ebp + eax*4 - 0x4d0], 0xa818
jmp 0x10013812
xor eax, eax
jne 0x1001384e
cmp dword [ebp - 0x58], 0
jne 0x1001384e
and dword [ebp - 0x390], 0
jmp 0x10013858
mov dword [ebp - 0x390], 1
mov eax, dword [ebp - 0x58]
inc eax
cmp eax, dword [ebp - 0x3c]
jg 0x1001386d
mov dword [ebp - 0x258], 1
jmp 0x10013874
and dword [ebp - 0x258], 0
cmp dword [ebp - 0x258], 0x9ddcef98
je 0x1001388c
mov dword [ebp - 0x4fc], 1
jmp 0x10013893
and dword [ebp - 0x4fc], 0
mov dword [ebp - 0x1a0], 0xc383
mov eax, dword [ebp - 0x1a0]
cmp dword [ebp - 0x390], eax
jle 0x100138b7
mov dword [ebp - 0x260], 1
jmp 0x100138be
and dword [ebp - 0x260], 0
cmp dword [ebp - 0x260], 0xffffffff
jg 0x100138d3
mov dword [ebp - 0x310], 1
jmp 0x100138da
and dword [ebp - 0x310], 0
mov eax, dword [ebp - 0x310]
mov dword [ebp - 0x1b8], eax
imul eax, dword [ebp - 0x1b8], 0x5b15
cmp eax, dword [ebp - 0x434]
jge 0x10013966
mov dword [ebp - 0x4b8], 0x5cf8
mov dword [ebp - 0x43c], 0xfffffffc
mov dword [ebp - 0x58], 0
jmp 0x1001391c
mov eax, dword [ebp - 0x58]
inc eax
mov dword [ebp - 0x58], eax
cmp dword [ebp - 0x58], 1
jg 0x10013961
lea eax, [ebp - 0x200]
push eax
push 0
lea eax, [ebp - 0x58]
push eax
lea eax, [ebp - 0x4b8]
push eax
lea eax, [ebp - 0x1a0]
push eax
push 0x6107
lea eax, [ebp - 0x1b8]
push eax
lea eax, [ebp - 0x268]
push eax
lea eax, [ebp - 0x43c]
push eax
call fcn.1001cad9
add esp, 0x24
jmp 0x10013915
jmp 0x10013ce8
mov dword [ebp - 0x174], 0xe0a4
mov dword [ebp - 0x4c0], 0xbdbb389e
mov dword [ebp - 0x454], 0xfffffff8
mov dword [ebp - 0x444], 0x41a4633b
push 4
lea ecx, [ebp - 0x5c8]
call fcn.100301c4
mov byte [ebp - 4], 0xa
push 0x36bf
push 0x7bbb
lea eax, [ebp - 0x5c8]
push eax
push 0xb3d
push 1
lea eax, [ebp - 0xd4]
push eax
push 0x3479
push 1
push 0x5490
push 0
call fcn.10011d03
add esp, 0x28
mov dword [ebp - 0xd4], 0
jmp 0x100139ed
mov eax, dword [ebp - 0xd4]
inc eax
mov dword [ebp - 0xd4], eax
cmp dword [ebp - 0xd4], 1
jge 0x10013a09
mov eax, dword [ebp - 0xd4]
mov dword [ebp + eax*4 - 0x4ec], 0xffffffff
jmp 0x100139e0
mov dword [ebp - 0x3c], 0
jmp 0x10013a19
mov eax, dword [ebp - 0x3c]
inc eax
mov dword [ebp - 0x3c], eax
cmp dword [ebp - 0x3c], 1
jg 0x10013cc6
mov dword [ebp - 0x608], 5
mov dword [ebp - 0x610], 7
push 3
lea ecx, [ebp - 0x674]
call fcn.100301c4
mov byte [ebp - 4], 0xb
mov dword [ebp - 0x130], 0
jmp 0x10013a61
mov eax, dword [ebp - 0x130]
inc eax
mov dword [ebp - 0x130], eax
cmp dword [ebp - 0x130], 3
jge 0x10013a83
push dword [ebp - 0x130]
lea ecx, [ebp - 0x674]
call fcn.100302cc
mov dword [eax], 1
jmp 0x10013a54
mov byte [ebp - 0x69], 0
movzx eax, byte [ebp - 0x69]
test eax, eax
je 0x10013ac5
push 0x1d83
push 0x181
push 0x7f5b
push 0x6b43
push 1
push 0xa7f
push 0x5ce3
push 0
push 0x3613
push 0
push 0x2405
call fcn.1002358b
add esp, 0x2c
push dword [ebp - 0x3c]
lea ecx, [ebp - 0x200]
call fcn.100302cc
mov esi, dword [eax]
neg esi
inc esi
inc esi
push dword [ebp - 0x3c]
lea ecx, [ebp - 0x200]
call fcn.100302cc
cmp esi, dword [eax]
je 0x10013afd
cmp dword [ebp - 0x268], 0
jne 0x10013afd
and dword [ebp - 0x368], 0
jmp 0x10013b07
mov dword [ebp - 0x368], 1
push dword [ebp - 0x3c]
lea ecx, [ebp - 0x200]
call fcn.100302cc
imul eax, dword [eax], 3
cmp eax, dword [ebp - 0x368]
je 0x10013b2c
mov dword [ebp - 0x270], 1
jmp 0x10013b33
and dword [ebp - 0x270], 0
push dword [ebp - 0x3c]
lea ecx, [ebp - 0x200]
call fcn.100302cc
mov eax, dword [eax]
cmp eax, dword [ebp - 0x270]
jge 0x10013b57
mov dword [ebp - 0x318], 1
jmp 0x10013b5e
and dword [ebp - 0x318], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x4ec]
cmp dword [ebp - 0x318], eax
jge 0x10013b7f
mov dword [ebp - 0x278], 1
jmp 0x10013b86
and dword [ebp - 0x278], 0
cmp dword [ebp - 0x278], 0xf453288e
jae 0x10013b9e
mov dword [ebp - 0x3a8], 1
jmp 0x10013ba5
and dword [ebp - 0x3a8], 0
cmp dword [ebp - 0x3a8], 0xffffffff
jl 0x10013bba
mov dword [ebp - 0x280], 1
jmp 0x10013bc1
and dword [ebp - 0x280], 0
cmp dword [ebp - 0x280], 0xb488
jle 0x10013bd9
mov dword [ebp - 0x320], 1
jmp 0x10013be0
and dword [ebp - 0x320], 0
push 0
lea ecx, [ebp - 0x200]
call fcn.100302cc
mov ecx, dword [ebp - 0x320]
cmp ecx, dword [eax]
jge 0x10013c03
mov dword [ebp - 0x288], 1
jmp 0x10013c0a
and dword [ebp - 0x288], 0
mov eax, dword [ebp - 0x444]
cmp dword [ebp - 0x288], eax
jne 0x10013c24
mov dword [ebp - 0x370], 1
jmp 0x10013c2b
and dword [ebp - 0x370], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x4d0]
add eax, dword [ebp - 0x370]
mov dword [ebp - 0x44c], eax
mov eax, dword [ebp - 0x4c0]
mov dword [ebp - 0x514], eax
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x4d0]
inc eax
push 4
pop ecx
shl ecx, 0
mov dword [ebp + ecx - 0x4d0], eax
mov eax, dword [ebp - 0x44c]
cmp eax, dword [ebp - 0x514]
jg 0x10013c85
mov dword [ebp - 0x290], 1
jmp 0x10013c8c
and dword [ebp - 0x290], 0
mov eax, dword [ebp - 0x174]
inc eax
mov dword [ebp - 0x174], eax
mov eax, dword [ebp - 0x174]
add eax, dword [ebp - 0x290]
mov ecx, 0x9bad2ce6
sub ecx, eax
mov dword [ebp - 0x454], ecx
mov byte [ebp - 4], 0xa
lea ecx, [ebp - 0x674]
call fcn.10030248
jmp 0x10013a12
push 2
lea ecx, [ebp - 0x5c8]
call fcn.100302cc
mov dword [eax], 0x8dc7dad0
mov byte [ebp - 4], 9
lea ecx, [ebp - 0x5c8]
call fcn.10030248
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x200]
call fcn.10030248
push 1
push 0
push 0x7206
lea eax, [ebp - 0x4c8]
push eax
push 0x3c55
push 1
push 0x7a4c
call fcn.10017f56
add esp, 0x1c
jmp 0x10013245
push 3
lea ecx, [ebp - 0x3c8]
call fcn.100301c4
mov dword [ebp - 4], 0xc
mov dword [ebp - 0x2c], 0x96960f57
push 0
lea eax, [ebp - 0x5d8]
push eax
push 0x377e
push 0x6e0d
push 0x6b34
lea eax, [ebp - 0x3c8]
push eax
call fcn.10015b79
add esp, 0x18
mov dword [ebp - 0x2c], 0
jmp 0x10013d72
mov eax, dword [ebp - 0x2c]
inc eax
mov dword [ebp - 0x2c], eax
cmp dword [ebp - 0x2c], 2
jg 0x10014000
mov dword [ebp - 0x48], 0x7fa5c62e
mov dword [ebp - 0xc4], 0xbb4f5ac3
mov dword [ebp - 0x48], 0
jmp 0x10013d9d
mov eax, dword [ebp - 0x48]
inc eax
mov dword [ebp - 0x48], eax
cmp dword [ebp - 0x48], 2
jg 0x10013fc3
mov dword [ebp - 0x150], 0
jmp 0x10013dc0
mov eax, dword [ebp - 0x150]
inc eax
mov dword [ebp - 0x150], eax
cmp dword [ebp - 0x150], 3
jge 0x10013ddc
mov eax, dword [ebp - 0x150]
mov dword [ebp + eax*4 - 0x520], 9
jmp 0x10013db3
push dword [ebp - 0x2c]
lea ecx, [ebp - 0x3c8]
call fcn.100302cc
push 1
lea ecx, [ebp - 0x3c8]
call fcn.100302cc
cmp dword [eax], 0
je 0x10013e1b
push dword [ebp - 0x2c]
lea ecx, [ebp - 0x3c8]
call fcn.100302cc
cmp dword [eax], 0
je 0x10013e1b
mov dword [ebp - 0x328], 1
jmp 0x10013e22
and dword [ebp - 0x328], 0
push dword [ebp - 0x2c]
lea ecx, [ebp - 0x3c8]
call fcn.100302cc
cmp dword [eax], 0x5c2dd78f
jle 0x10013e44
mov dword [ebp - 0x298], 1
jmp 0x10013e4b
and dword [ebp - 0x298], 0
mov eax, dword [ebp - 0x328]
cmp eax, dword [ebp - 0x298]
jge 0x10013e77
push 2
lea ecx, [ebp - 0x3c8]
call fcn.100302cc
cmp dword [eax], 0
je 0x10013e77
mov dword [ebp - 0x398], 1
jmp 0x10013e7e
and dword [ebp - 0x398], 0
mov eax, dword [ebp - 0x2c]
cmp dword [ebp - 0x398], eax
je 0x10013e95
mov dword [ebp - 0x2a0], 1
jmp 0x10013e9c
and dword [ebp - 0x2a0], 0
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x520]
mov dword [ebp - 0x45c], eax
mov eax, dword [ebp - 0x2a0]
mov dword [ebp - 0x4f4], eax
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x520]
inc eax
push 4
pop ecx
shl ecx, 1
mov dword [ebp + ecx - 0x520], eax
mov eax, dword [ebp - 0x45c]
cmp eax, dword [ebp - 0x4f4]
jle 0x10013eed
mov dword [ebp - 0x330], 1
jmp 0x10013ef4
and dword [ebp - 0x330], 0
mov eax, dword [ebp - 0x2c]
cmp dword [ebp - 0x330], eax
je 0x10013f11
cmp dword [ebp - 0x2c], 0
je 0x10013f11
mov dword [ebp - 0x2a8], 1
jmp 0x10013f18
and dword [ebp - 0x2a8], 0
mov eax, dword [ebp - 0x2a8]
mov dword [ebp - 0xc4], eax
mov dword [ebp - 0xc4], 0
jmp 0x10013f3d
mov eax, dword [ebp - 0xc4]
inc eax
mov dword [ebp - 0xc4], eax
cmp dword [ebp - 0xc4], 2
jg 0x10013fbe
mov dword [ebp - 0xe4], 0xffffffff
mov dword [ebp - 0xe4], 0
jmp 0x10013f69
mov eax, dword [ebp - 0xe4]
inc eax
mov dword [ebp - 0xe4], eax
cmp dword [ebp - 0xe4], 2
jg 0x10013fb9
mov dword [ebp - 0x138], 0x1eb64d07
mov dword [ebp - 0x138], 2
jmp 0x10013f95
mov eax, dword [ebp - 0x138]
dec eax
mov dword [ebp - 0x138], eax
cmp dword [ebp - 0x138], 0
jl 0x10013fb7
mov eax, dword [ebp - 0xe4]
mov ecx, dword [ebp - 0x2c]
mov eax, dword [ebp + eax*4 - 0x520]
mov dword [ebp + ecx*4 - 0x520], eax
jmp 0x10013f88
jmp 0x10013f5c
jmp 0x10013f30
jmp 0x10013d96
mov dword [ebp - 0x48], 2
jmp 0x10013fd3
mov eax, dword [ebp - 0x48]
dec eax
mov dword [ebp - 0x48], eax
cmp dword [ebp - 0x48], 0
jl 0x10013ffb
mov byte [ebp - 0x76], 0
movzx eax, byte [ebp - 0x76]
test eax, eax
je 0x10013ff9
push 0x4fa1
push 0x7493
push 0
call fcn.100203c5
add esp, 0xc
jmp 0x10013fcc
jmp 0x10013d6b
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x3c8]
call fcn.10030248
mov byte [ebp - 0x77], 0
movzx eax, byte [ebp - 0x77]
test eax, eax
je 0x1001405b
push 0
push 0x5814
push 0x4b67
push 0x1c01
push 0x81f
push 0x52d3
push 0x4863
push 0x5cb5
push 0x7cb0
push 1
push 0x547
push 1
push 0x1fc0
call fcn.100222c7
add esp, 0x34
mov dword [ebp - 0x160], 0
mov dword [ebp - 0x498], 0x74c38b6b
mov dword [ebp - 0x160], 0xd
jmp 0x10014088
mov eax, dword [ebp - 0x160]
dec eax
mov dword [ebp - 0x160], eax
cmp dword [ebp - 0x160], 0xffffffe9
jl 0x10014188
mov dword [ebp - 0x464], 0x261a
cmp dword [ebp - 0x464], 0x3ff
mov dword [ebp - 0xec], 0
jmp 0x100140c2
mov eax, dword [ebp - 0xec]
inc eax
mov dword [ebp - 0xec], eax
cmp dword [ebp - 0xec], 1
jge 0x100140de
mov eax, dword [ebp - 0xec]
mov dword [ebp + eax*4 - 0xa8], 0
jmp 0x100140b5
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0xa8], 8
jmp 0x1001410c
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xa8]
dec eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0xa8], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0xa8], 0xfffffff1
jg 0x10014183
mov dword [ebp - 0x378], 9
mov dword [ebp - 0x338], 0xdc2a82a1
mov dword [ebp - 0x378], 8
cmp dword [ebp - 0x378], 0
je 0x1001415f
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0xa8], 0
je 0x1001415f
mov dword [ebp - 0x2b0], 1
jmp 0x10014166
and dword [ebp - 0x2b0], 0
mov eax, dword [ebp - 0x2b0]
mov dword [ebp - 0x338], eax
mov eax, dword [ebp - 0x338]
mov dword [ebp - 0x498], eax
jmp 0x100140f1
jmp 0x1001407b
mov eax, dword [ebp - 0x104]
mov eax, dword [eax + 4]
mov dword [ebp - 0x394], eax
mov dword [ebp - 0x46c], 0x17e6
cmp dword [ebp - 0x46c], 0x114f
jge 0x100142b2
and dword [ebp - 0x24], 0
and dword [ebp - 0x14], 0
lea eax, [ebp - 0x14]
push eax
lea eax, [ebp - 0x24]
push eax
push 0x1000ea14
call fcn.10056960
add esp, 0xc
mov byte [ebp - 0x19], 0
xor eax, eax
inc eax
je 0x10014286
cmp dword [ebp - 0x24], 2
jl 0x100141f9
cmp dword [ebp - 0x14], 2
jl 0x100141f9
mov eax, dword [ebp - 0x24]
dec eax
dec eax
mov dword [ebp - 0x24], eax
mov eax, dword [ebp - 0x14]
dec eax
dec eax
mov dword [ebp - 0x14], eax
jmp 0x1001422e
cmp dword [ebp - 0x24], 1
jl 0x10014217
cmp dword [ebp - 0x14], 0xc
jl 0x10014217
mov eax, dword [ebp - 0x24]
dec eax
mov dword [ebp - 0x24], eax
mov eax, dword [ebp - 0x14]
sub eax, 0xc
mov dword [ebp - 0x14], eax
jmp 0x1001422e
cmp dword [ebp - 0x14], 0x16
jl 0x10014228
mov eax, dword [ebp - 0x14]
sub eax, 0x16
mov dword [ebp - 0x14], eax
jmp 0x1001422e
mov byte [ebp - 0x19], 1
jmp 0x10014286
cmp dword [ebp - 0x14], 0x16
jl 0x1001423f
mov eax, dword [ebp - 0x14]
sub eax, 0x16
mov dword [ebp - 0x14], eax
jmp 0x10014281
cmp dword [ebp - 0x14], 0xc
jl 0x1001425d
cmp dword [ebp - 0x24], 1
jl 0x1001425d
mov eax, dword [ebp - 0x24]
dec eax
mov dword [ebp - 0x24], eax
mov eax, dword [ebp - 0x14]
sub eax, 0xc
mov dword [ebp - 0x14], eax
jmp 0x10014281
cmp dword [ebp - 0x14], 2
jl 0x1001427b
cmp dword [ebp - 0x24], 2
jl 0x1001427b
mov eax, dword [ebp - 0x24]
dec eax
dec eax
mov dword [ebp - 0x24], eax
mov eax, dword [ebp - 0x14]
dec eax
dec eax
mov dword [ebp - 0x14], eax
jmp 0x10014281
mov byte [ebp - 0x19], 0
jmp 0x10014286
jmp 0x100141d2
movzx eax, byte [ebp - 0x19]
test eax, eax
je 0x100142a1
push 0x1000ea6c
call fcn.100572e2
pop ecx
mov dword [ebp - 0x48c], eax
jmp 0x100142b2
push 0x1000ea74
call fcn.100572e2
pop ecx
mov dword [ebp - 0x48c], eax
push 3
lea ecx, [ebp - 0x1d8]
call fcn.100301c4
mov dword [ebp - 4], 0xd
mov dword [ebp - 0x90], 0x56dfc9b9
mov dword [ebp - 0x60], 0x86335c0d
mov dword [ebp - 0x30], 0x466a
mov dword [ebp - 0x88], 0x3c27f355
mov dword [ebp - 0x380], 0xfffffff8
lea eax, [ebp - 0xb0]
push eax
push 0x4443
lea eax, [ebp - 0x1d8]
push eax
push 0x8c4
push 1
push 0x4804
push 0x5f2f
push 0
push 0x3ee7
push 1
push 0x387c
call fcn.1002358b
add esp, 0x2c
mov dword [ebp - 0xb0], 0
jmp 0x10014345
mov eax, dword [ebp - 0xb0]
inc eax
mov dword [ebp - 0xb0], eax
cmp dword [ebp - 0xb0], 1
jge 0x10014361
mov eax, dword [ebp - 0xb0]
mov dword [ebp + eax*4 - 0x21c], 0x9e96bb64
jmp 0x10014338
push 1
lea ecx, [ebp - 0x1d8]
call fcn.100302cc
cmp dword [eax], 0
je 0x100144a5
push 2
lea ecx, [ebp - 0x1d8]
call fcn.100302cc
push 1
lea ecx, [ebp - 0x1d8]
call fcn.100302cc
mov eax, dword [eax]
mov dword [ebp - 0x90], eax
mov eax, dword [ebp - 0x90]
mov dword [ebp - 0x60], eax
mov eax, dword [ebp - 0x60]
mov dword [ebp - 0x620], eax
push 1
lea ecx, [ebp - 0x1d8]
call fcn.100302cc
mov eax, dword [ebp - 0x30]
mov dword [ebp - 0x88], eax
cmp dword [ebp - 0x88], 1
jle 0x100143d6
mov dword [ebp - 0x2b8], 1
jmp 0x100143dd
and dword [ebp - 0x2b8], 0
push 2
lea ecx, [ebp - 0x1d8]
call fcn.100302cc
mov ecx, dword [ebp - 0x2b8]
cmp ecx, dword [eax]
jle 0x10014400
mov dword [ebp - 0x3b8], 1
jmp 0x10014407
and dword [ebp - 0x3b8], 0
cmp dword [ebp - 0x3b8], 0
je 0x1001441c
mov dword [ebp - 0x2c0], 1
jmp 0x10014423
and dword [ebp - 0x2c0], 0
cmp dword [ebp - 0x2c0], 0x184dcc8
jle 0x1001443b
mov dword [ebp - 0x340], 1
jmp 0x10014442
and dword [ebp - 0x340], 0
push 0
lea ecx, [ebp - 0x1d8]
call fcn.100302cc
mov esi, dword [eax]
add esi, dword [ebp - 0x340]
push 1
lea ecx, [ebp - 0x1d8]
call fcn.100302cc
cmp esi, dword [eax]
jg 0x1001447d
mov eax, 0x5300
test eax, eax
je 0x1001447d
mov dword [ebp - 0x2c8], 1
jmp 0x10014484
and dword [ebp - 0x2c8], 0
mov eax, dword [ebp - 0x2c8]
mov dword [ebp - 0x380], eax
cmp dword [ebp - 0x380], 0
je 0x100144a5
mov dword [ebp - 0x2d0], 1
jmp 0x100144ac
and dword [ebp - 0x2d0], 0
mov eax, dword [ebp - 0x30]
cmp dword [ebp - 0x2d0], eax
jg 0x100144c6
cmp dword [ebp - 0x30], 0
jne 0x100144c6
and dword [ebp - 0x348], 0
jmp 0x100144d0
mov dword [ebp - 0x348], 1
imul eax, dword [ebp - 0x348], 0x3829
cmp eax, 0xa9ef8169
ja 0x100144ed
mov dword [ebp - 0x2d8], 1
jmp 0x100144f4
and dword [ebp - 0x2d8], 0
push 1
lea ecx, [ebp - 0x1d8]
call fcn.100302cc
mov ecx, dword [ebp - 0x30]
add ecx, dword [ebp - 0x2d8]
cmp dword [eax], ecx
je 0x1001451e
push 2
pop eax
test eax, eax
jne 0x1001451e
and dword [ebp - 0x3a0], 0
jmp 0x10014528
mov dword [ebp - 0x3a0], 1
mov eax, dword [ebp - 0x30]
cmp dword [ebp - 0x3a0], eax
jne 0x1001453f
mov dword [ebp - 0x1ec], 1
jmp 0x10014546
and dword [ebp - 0x1ec], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x1ec]
mov dword [ebp + eax - 0x21c], ecx
mov dword [ebp - 0x474], 0x1a32
cmp dword [ebp - 0x474], 0x54b
dec dword [ebx + 5]
add byte [eax], al
mov eax, dword [ebp - 0x478]
mov dword [ebp - 0x480], eax
mov eax, dword [ebp - 0x480]
mov dword [ebp - 0x488], eax
push 0
mov ecx, dword [ebp - 0x488]
call fcn.100302cc
mov dword [ebp - 0x3a4], eax
mov eax, dword [ebp - 0x3a4]
mov eax, dword [eax]
dec eax
mov ecx, dword [ebp - 0x3a4]
mov dword [ecx], eax