Function at 0x100373cc
Capabilities:
Enumerate pe sections

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x1006ff2b
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x860
push esi
movzx eax, byte [ebp + 0x24]
test eax, eax
je 0x1003ad87
lea eax, [ebp + 0x10]
mov dword [ebp - 0x550], eax
mov eax, dword [ebp + 0x20]
mov dword [ebp - 0x50c], eax
mov eax, dword [ebp + 0xc]
mov dword [ebp - 0x59c], eax
mov eax, dword [ebp + 0x18]
mov dword [ebp - 0x594], eax
mov eax, dword [ebp + 8]
mov dword [ebp - 0x538], eax
mov eax, dword [ebp + 0x14]
mov dword [ebp - 0x504], eax
mov eax, dword [ebp - 0x550]
movzx eax, byte [eax]
test eax, eax
je 0x1003747f
mov eax, dword [ebp - 0x504]
mov dword [ebp - 0x574], eax
mov eax, dword [ebp - 0x50c]
mov dword [ebp - 0x57c], eax
mov eax, dword [ebp - 0x574]
mov dword [ebp - 0x584], eax
mov eax, dword [ebp - 0x57c]
mov dword [ebp - 0x58c], eax
mov eax, dword [ebp - 0x584]
mov ecx, dword [ebp - 0x58c]
mov ecx, dword [ecx]
mov dword [eax], ecx
jmp 0x1003ad85
mov eax, dword [ebp - 0x594]
mov dword [ebp - 0x4ec], eax
mov eax, dword [ebp - 0x59c]
mov dword [ebp - 0x4d4], eax
mov eax, dword [ebp - 0x538]
mov dword [ebp - 0xdc], eax
mov dword [ebp - 0x750], 0xb4e1a362
mov dword [ebp - 0x6a0], 0xfffffff6
mov dword [ebp - 0x6a8], 1
mov dword [ebp - 0x6b0], 0x3efc07e1
mov dword [ebp - 0x6b8], 0x9c3fbb4e
mov dword [ebp - 0x6ec], 0xce3e63e3
mov dword [ebp - 0x6f4], 0
mov dword [ebp - 0x6fc], 6
push 1
lea ecx, [ebp - 0x78c]
call fcn.1000f096
and dword [ebp - 4], 0
mov dword [ebp - 0x704], 0xfffffffd
mov dword [ebp - 0x4fc], 0
lea eax, [ebp - 0x78c]
push eax
lea eax, [ebp - 0x70c]
push eax
push 0
call fcn.10040cf7
add esp, 0xc
lea eax, [ebp - 0x4fc]
push eax
push 0
call fcn.10041d0a
pop ecx
pop ecx
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x78c]
call fcn.1000f0f8
mov dword [ebp - 0x30c], 0
mov dword [ebp - 0x714], 0xfffffffa
mov dword [ebp - 0x480], 0x1c13
cmp dword [ebp - 0x480], 0xd07
jge 0x1003787b
lea ecx, [ebp - 0xd0]
call fcn.1000ed2a
mov dword [ebp - 4], 1
lea edx, [ebp - 0xd0]
mov ecx, 0x10663e50
call fcn.10020a90
push 0
lea ecx, [ebp - 0xd0]
call fcn.10010b50
movsx eax, byte [eax]
cmp eax, 0x2d
je 0x100375f8
lea ecx, [ebp - 0xd0]
call fcn.1000f4c7
cmp eax, 3
jb 0x100375e8
lea ecx, [ebp - 0xd0]
call fcn.1000f4c7
cmp eax, 3
jne 0x100375f8
push 0x1000cee4
lea ecx, [ebp - 0xd0]
call fcn.1001fab5
test eax, eax
jg 0x100375f8
push 0x1000cee8
call fcn.100551a6
pop ecx
jmp 0x1003786c
push 0
lea ecx, [ebp - 0xd0]
call fcn.10010b50
movsx eax, byte [eax]
cmp eax, 0x2d
jne 0x10037651
lea ecx, [ebp - 0xd0]
call fcn.1000f4c7
cmp eax, 4
jb 0x10037641
lea ecx, [ebp - 0xd0]
call fcn.1000f4c7
cmp eax, 4
jne 0x10037651
push 0x1000cef0
lea ecx, [ebp - 0xd0]
call fcn.1001fab5
test eax, eax
jg 0x10037651
push 0x1000cee8
call fcn.100551a6
pop ecx
jmp 0x1003786c
push 0
lea ecx, [ebp - 0xd0]
call fcn.10010b50
movsx eax, byte [eax]
cmp eax, 0x2d
je 0x100376aa
lea ecx, [ebp - 0xd0]
call fcn.1000f4c7
cmp eax, 5
jb 0x1003769a
lea ecx, [ebp - 0xd0]
call fcn.1000f4c7
cmp eax, 5
jne 0x100376aa
push 0x1000cee4
lea ecx, [ebp - 0xd0]
call fcn.1001fab5
test eax, eax
jg 0x100376aa
push 0x1000cef4
call fcn.100551a6
pop ecx
jmp 0x1003786c
push 0
lea ecx, [ebp - 0xd0]
call fcn.10010b50
movsx eax, byte [eax]
cmp eax, 0x2d
jne 0x10037703
lea ecx, [ebp - 0xd0]
call fcn.1000f4c7
cmp eax, 6
jb 0x100376f3
lea ecx, [ebp - 0xd0]
call fcn.1000f4c7
cmp eax, 6
jne 0x10037703
push 0x1000cef0
lea ecx, [ebp - 0xd0]
call fcn.1001fab5
test eax, eax
jg 0x10037703
push 0x1000cef4
call fcn.100551a6
pop ecx
jmp 0x1003786c
push 0
lea ecx, [ebp - 0xd0]
call fcn.10010b50
movsx eax, byte [eax]
cmp eax, 0x2d
je 0x1003775c
lea ecx, [ebp - 0xd0]
call fcn.1000f4c7
cmp eax, 0xa
jb 0x1003774c
lea ecx, [ebp - 0xd0]
call fcn.1000f4c7
cmp eax, 0xa
jne 0x1003775c
push 0x1000cee4
lea ecx, [ebp - 0xd0]
call fcn.1001fab5
test eax, eax
jg 0x1003775c
push 0x1000cefc
call fcn.100551a6
pop ecx
jmp 0x1003786c
push 0
lea ecx, [ebp - 0xd0]
call fcn.10010b50
movsx eax, byte [eax]
cmp eax, 0x2d
jne 0x100377b5
lea ecx, [ebp - 0xd0]
call fcn.1000f4c7
cmp eax, 0xb
jb 0x100377a5
lea ecx, [ebp - 0xd0]
call fcn.1000f4c7
cmp eax, 0xb
jne 0x100377b5
push 0x1000cef0
lea ecx, [ebp - 0xd0]
call fcn.1001fab5
test eax, eax
jg 0x100377b5
push 0x1000cefc
call fcn.100551a6
pop ecx
jmp 0x1003786c
push 0
lea ecx, [ebp - 0xd0]
call fcn.10010b50
movsx eax, byte [eax]
cmp eax, 0x2d
je 0x1003780b
lea ecx, [ebp - 0xd0]
call fcn.1000f4c7
cmp eax, 0x13
jb 0x100377fe
lea ecx, [ebp - 0xd0]
call fcn.1000f4c7
cmp eax, 0x13
jne 0x1003780b
push 0x1000cf00
lea ecx, [ebp - 0xd0]
call fcn.1001fab5
test eax, eax
jg 0x1003780b
push 0x1000cf08
call fcn.100551a6
pop ecx
jmp 0x1003786c
push 0
lea ecx, [ebp - 0xd0]
call fcn.10010b50
movsx eax, byte [eax]
cmp eax, 0x2d
jne 0x10037861
lea ecx, [ebp - 0xd0]
call fcn.1000f4c7
cmp eax, 0x14
jb 0x10037854
lea ecx, [ebp - 0xd0]
call fcn.1000f4c7
cmp eax, 0x14
jne 0x10037861
push 0x1000cf10
lea ecx, [ebp - 0xd0]
call fcn.1001fab5
test eax, eax
jg 0x10037861
push 0x1000cf08
call fcn.100551a6
pop ecx
jmp 0x1003786c
push 0x1000cf18
call fcn.100551a6
pop ecx
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xd0]
call fcn.1000ed6a
mov dword [ebp - 0x598], 1
mov dword [ebp - 0x71c], 0x6db6d037
mov dword [ebp - 0x440], 0x5af8b513
mov dword [ebp - 0x724], 0xffffffff
mov dword [ebp - 0x540], 1
mov dword [ebp - 0x490], 0xca8cda2a
mov dword [ebp - 0x498], 1
mov dword [ebp - 0x72c], 0xc8953526
mov dword [ebp - 0x734], 0
mov dword [ebp - 0x73c], 0xbc6200d4
mov dword [ebp - 0x144], 0xffff
push 3
lea ecx, [ebp - 0x664]
call fcn.1000f096
mov dword [ebp - 4], 2
mov dword [ebp - 0x98], 0
jmp 0x10037916
mov eax, dword [ebp - 0x98]
inc eax
mov dword [ebp - 0x98], eax
cmp dword [ebp - 0x98], 3
jge 0x10037932
mov eax, dword [ebp - 0x98]
mov dword [ebp + eax*4 - 0x79c], 0
jmp 0x10037909
lea eax, [ebp - 0x98]
push eax
push 0
lea eax, [ebp - 0x664]
push eax
push 0x5de7
push 0x6c4a
push 1
push 0x515e
push 0xd16
call fcn.1003403b
add esp, 0x20
mov eax, dword [ebp - 0x30c]
mov dword [ebp - 0x744], eax
mov eax, dword [ebp - 0x30c]
mov dword [ebp - 0x74c], eax
mov eax, dword [ebp - 0x144]
mov dword [ebp - 0x570], eax
mov eax, dword [ebp - 0x144]
dec eax
mov dword [ebp - 0x144], eax
cmp dword [ebp - 0x570], 9
jg 0x100379a6
mov dword [ebp - 0x488], 1
jmp 0x100379ad
and dword [ebp - 0x488], 0
mov eax, dword [ebp - 0x440]
mov dword [ebp - 0x754], eax
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0x79c], 0
jge 0x100379d4
mov dword [ebp - 0x424], 1
jmp 0x100379db
and dword [ebp - 0x424], 0
mov eax, dword [ebp - 0x144]
cmp dword [ebp - 0x424], eax
jle 0x100379fe
mov eax, 0x7b70
test eax, eax
je 0x100379fe
mov dword [ebp - 0x438], 1
jmp 0x10037a05
and dword [ebp - 0x438], 0
mov eax, dword [ebp - 0x438]
sub eax, dword [ebp - 0x440]
neg eax
je 0x10037a21
mov dword [ebp - 0x448], 1
jmp 0x10037a28
and dword [ebp - 0x448], 0
mov eax, dword [ebp - 0x540]
cmp dword [ebp - 0x448], eax
jl 0x10037a42
mov dword [ebp - 0x450], 1
jmp 0x10037a49
and dword [ebp - 0x450], 0
mov eax, dword [ebp - 0x490]
cmp dword [ebp - 0x450], eax
jne 0x10037a63
mov dword [ebp - 0x328], 1
jmp 0x10037a6a
and dword [ebp - 0x328], 0
mov eax, dword [ebp - 0x598]
cmp dword [ebp - 0x328], eax
jge 0x10037a84
mov dword [ebp - 0x41c], 1
jmp 0x10037a8b
and dword [ebp - 0x41c], 0
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x41c]
mov dword [ebp + eax - 0x79c], ecx
push 1
lea ecx, [ebp - 0x664]
call fcn.1000f0fd
mov eax, dword [eax]
mov dword [ebp - 0x498], eax
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x664]
call fcn.1000f0f8
push 1
lea ecx, [ebp - 0x5ac]
call fcn.1000f096
mov dword [ebp - 4], 3
mov dword [ebp - 0xa4], 0x1c234ac0
mov dword [ebp - 0x30], 0xfe
mov dword [ebp - 0xf8], 0xfdbd0176
mov dword [ebp - 0xa8], 0x791e6e40
mov dword [ebp - 0x8c], 0x1e214356
mov dword [ebp - 0x68], 0xffff
mov dword [ebp - 0xe0], 0
jmp 0x10037b25
mov eax, dword [ebp - 0xe0]
inc eax
mov dword [ebp - 0xe0], eax
cmp dword [ebp - 0xe0], 3
jge 0x10037b41
mov eax, dword [ebp - 0xe0]
mov dword [ebp + eax*4 - 0x860], 6
jmp 0x10037b18
cmp dword [ebp - 0x30], 0
je 0x10037bf2
cmp dword [ebp - 0x30], 0x8cf5a8b0
je 0x10037b60
mov dword [ebp - 0x1f8], 1
jmp 0x10037b67
and dword [ebp - 0x1f8], 0
mov eax, dword [ebp - 0x30]
cmp eax, dword [ebp - 0x1f8]
jg 0x10037b7e
mov dword [ebp - 0x410], 1
jmp 0x10037b85
and dword [ebp - 0x410], 0
cmp dword [ebp - 0x410], 1
je 0x10037b9a
mov dword [ebp - 0x200], 1
jmp 0x10037ba1
and dword [ebp - 0x200], 0
mov eax, dword [ebp - 0x30]
cmp dword [ebp - 0x200], eax
jne 0x10037bb8
mov dword [ebp - 0x330], 1
jmp 0x10037bbf
and dword [ebp - 0x330], 0
cmp dword [ebp - 0x330], 3
jle 0x10037bd4
mov dword [ebp - 0x208], 1
jmp 0x10037bdb
and dword [ebp - 0x208], 0
mov eax, dword [ebp - 0x30]
cmp dword [ebp - 0x208], eax
jl 0x10037bf2
mov dword [ebp - 0x3c8], 1
jmp 0x10037bf9
and dword [ebp - 0x3c8], 0
mov eax, dword [ebp - 0x30]
cmp dword [ebp - 0x3c8], eax
jge 0x10037c10
mov dword [ebp - 0x210], 1
jmp 0x10037c17
and dword [ebp - 0x210], 0
mov eax, dword [ebp - 0x210]
mov dword [ebp - 0xf8], eax
mov eax, dword [ebp - 0xf8]
dec eax
je 0x10037d26
mov dword [ebp - 0x14c], 0xfbe5
mov dword [ebp - 0x548], 0xab6ce1a8
cmp dword [ebp - 0xf8], 0xd0f065f4
jne 0x10037c5c
mov dword [ebp - 0x338], 1
jmp 0x10037c63
and dword [ebp - 0x338], 0
mov eax, dword [ebp - 0xa8]
cmp eax, dword [ebp - 0x338]
je 0x10037c83
cmp dword [ebp - 0xa8], 0
jne 0x10037c83
and dword [ebp - 0x218], 0
jmp 0x10037c8d
mov dword [ebp - 0x218], 1
cmp dword [ebp - 0x218], 3
jne 0x10037ca2
mov dword [ebp - 0x43c], 1
jmp 0x10037ca9
and dword [ebp - 0x43c], 0
mov eax, dword [ebp - 0x14c]
cmp eax, dword [ebp - 0x43c]
jle 0x10037cc3
mov dword [ebp - 0x220], 1
jmp 0x10037cca
and dword [ebp - 0x220], 0
mov eax, dword [ebp - 0x14c]
cmp dword [ebp - 0x220], eax
je 0x10037ce4
mov dword [ebp - 0x340], 1
jmp 0x10037ceb
and dword [ebp - 0x340], 0
mov eax, dword [ebp - 0x14c]
cmp dword [ebp - 0x340], eax
jg 0x10037d05
mov dword [ebp - 0x228], 1
jmp 0x10037d0c
and dword [ebp - 0x228], 0
mov eax, dword [ebp - 0x30]
add eax, dword [ebp - 0x228]
sub eax, dword [ebp - 0x14c]
mov dword [ebp - 0x548], eax
jmp 0x100380f0
mov dword [ebp - 0x240], 0x826243a5
mov dword [ebp - 0x78], 0x55069097
mov dword [ebp - 0x16c], 0xf7d69fdb
mov dword [ebp - 0x4a0], 0x25a2
cmp dword [ebp - 0x4a0], 0x126e
jge 0x10037fb1
lea eax, [ebp - 0xa0]
push eax
push 0x1000cb38
call fcn.10054a3b
pop ecx
pop ecx
and dword [ebp - 0x578], 0
lea eax, [ebp - 0x578]
push eax
mov eax, dword [ebp - 0xa0]
inc eax
push eax
lea ecx, [ebp - 0x640]
call fcn.1001ff6f
mov byte [ebp - 4], 4
mov byte [ebp - 0x5a], 0
lea eax, [ebp - 0x5a]
push eax
mov eax, dword [ebp - 0xa0]
inc eax
push eax
lea ecx, [ebp - 0x680]
call fcn.1000f123
mov byte [ebp - 4], 5
mov dword [ebp - 0x154], 1
jmp 0x10037dcb
mov eax, dword [ebp - 0x154]
inc eax
mov dword [ebp - 0x154], eax
mov eax, dword [ebp - 0x154]
cmp eax, dword [ebp - 0xa0]
jg 0x10037df9
push dword [ebp - 0x154]
lea ecx, [ebp - 0x640]
call fcn.1000f0fd
push eax
push 0x1000cb38
call fcn.10054a3b
pop ecx
pop ecx
jmp 0x10037dbe
and dword [ebp - 0x1b8], 0
mov dword [ebp - 0x164], 1
jmp 0x10037e19
mov eax, dword [ebp - 0x164]
inc eax
mov dword [ebp - 0x164], eax
mov eax, dword [ebp - 0x164]
cmp eax, dword [ebp - 0xa0]
jg 0x10037e4e
lea eax, [ebp - 0x4a8]
push eax
push 0x1000cc30
call fcn.10054a3b
pop ecx
pop ecx
mov eax, dword [ebp - 0x1b8]
add eax, dword [ebp - 0x4a8]
mov dword [ebp - 0x1b8], eax
jmp 0x10037e0c
and dword [ebp - 0x128], 0
mov dword [ebp - 0xb0], 1
jmp 0x10037e6e
mov eax, dword [ebp - 0xb0]
inc eax
mov dword [ebp - 0xb0], eax
mov eax, dword [ebp - 0xb0]
cmp eax, dword [ebp - 0xa0]
jg 0x10037f28
push dword [ebp - 0xb0]
lea eax, [ebp - 0x824]
push eax
lea ecx, [ebp - 0x680]
call fcn.1000f1a4
mov ecx, eax
call fcn.1000f1e8
movzx eax, al
test eax, eax
je 0x10037ea8
jmp 0x10037e61
mov eax, dword [ebp - 0x128]
inc eax
mov dword [ebp - 0x128], eax
mov eax, dword [ebp - 0xb0]
mov dword [ebp - 0xd4], eax
push dword [ebp - 0xd4]
lea eax, [ebp - 0x84c]
push eax
lea ecx, [ebp - 0x680]
call fcn.1000f1a4
mov ecx, eax
call fcn.1000f1e8
movzx eax, al
test eax, eax
jne 0x10037f23
push 1
push dword [ebp - 0xd4]
lea eax, [ebp - 0x83c]
push eax
lea ecx, [ebp - 0x680]
call fcn.1000f1a4
mov ecx, eax
call fcn.1000f1c3
push dword [ebp - 0xd4]
lea ecx, [ebp - 0x640]
call fcn.1000f0fd
mov eax, dword [eax]
mov dword [ebp - 0xd4], eax
jmp 0x10037ec1
jmp 0x10037e61
cmp dword [ebp - 0x128], 1
jle 0x10037f3f
mov eax, dword [ebp - 0x128]
mov dword [ebp - 0x3d0], eax
jmp 0x10037f46
and dword [ebp - 0x3d0], 0
mov eax, dword [ebp - 0x1b8]
and eax, 0x80000001
jns 0x10037f58
dec eax
or eax, 0xfffffffe
inc eax
test eax, eax
jne 0x10037f68
mov dword [ebp - 0x230], 1
jmp 0x10037f6f
and dword [ebp - 0x230], 0
mov eax, dword [ebp - 0x3d0]
add eax, dword [ebp - 0x230]
mov dword [ebp - 0x474], eax
push dword [ebp - 0x474]
push 0x1000cb5c
call fcn.10054dcc
pop ecx
pop ecx
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x680]
call fcn.1000f184
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x640]
call fcn.1000f0f8
mov dword [ebp - 0x4b0], 9
lea eax, [ebp - 0x16c]
push eax
lea eax, [ebp - 0x240]
push eax
push 0
lea eax, [ebp - 0x8c]
push eax
lea eax, [ebp - 0xa8]
push eax
lea eax, [ebp - 0x78]
push eax
lea eax, [ebp - 0xf8]
push eax
push 0x7649
call fcn.100411aa
add esp, 0x20
cmp dword [ebp - 0x78], 0
jne 0x100380c9
cmp dword [ebp - 0xa8], 1
jg 0x10038010
mov dword [ebp - 0x348], 1
jmp 0x10038017
and dword [ebp - 0x348], 0
mov eax, dword [ebp - 0x16c]
cmp dword [ebp - 0x348], eax
jg 0x10038031
mov dword [ebp - 0x238], 1
jmp 0x10038038
and dword [ebp - 0x238], 0
mov eax, dword [ebp - 0x238]
mov dword [ebp - 0x68], eax
mov eax, dword [ebp - 0x78]
cmp dword [ebp - 0x68], eax
jg 0x10038055
mov dword [ebp - 0x418], 1
jmp 0x1003805c
and dword [ebp - 0x418], 0
mov eax, dword [ebp - 0x8c]
imul eax, dword [ebp - 0x418]
neg eax
cmp eax, 1
jne 0x1003807c
mov dword [ebp - 0x350], 1
jmp 0x10038083
and dword [ebp - 0x350], 0
mov eax, dword [ebp - 0x240]
imul eax, dword [ebp - 0x350]
mov dword [ebp - 0x16c], eax
cmp dword [ebp - 0x78], 0
je 0x100380b1
mov eax, 0x2b60d90c
test eax, eax
je 0x100380b1
mov dword [ebp - 0x248], 1
jmp 0x100380b8
and dword [ebp - 0x248], 0
mov eax, dword [ebp - 0x248]
add eax, 0xffff
je 0x100380c9
cmp dword [ebp - 0x30], 0
mov eax, dword [ebp - 0x4b0]
cmp dword [ebp - 0x78], eax
jg 0x100380e0
mov dword [ebp - 0x590], 1
jmp 0x100380e7
and dword [ebp - 0x590], 0
mov eax, dword [ebp - 0xa8]
mov dword [ebp - 0x78], eax
mov dword [ebp - 0x68], 0
jmp 0x10038100
mov eax, dword [ebp - 0x68]
inc eax
mov dword [ebp - 0x68], eax
cmp dword [ebp - 0x68], 2
jg 0x1003815a
mov dword [ebp - 0x8c], 0
jmp 0x1003811f
mov eax, dword [ebp - 0x8c]
inc eax
mov dword [ebp - 0x8c], eax
cmp dword [ebp - 0x8c], 2
jg 0x10038158
mov byte [ebp - 0x3f], 0
movzx eax, byte [ebp - 0x3f]
test eax, eax
je 0x10038156
push 0x5a
push 0x7061
push 0
push 0x5309
push 0
push 0x29c0
push 0x69d
call fcn.1003d37b
add esp, 0x1c
jmp 0x10038112
jmp 0x100380f9
mov dword [ebp - 0x150], 0
jmp 0x10038173
mov eax, dword [ebp - 0x150]
inc eax
mov dword [ebp - 0x150], eax
cmp dword [ebp - 0x150], 1
jge 0x10038195
push dword [ebp - 0x150]
lea ecx, [ebp - 0x5ac]
call fcn.1000f0fd
mov dword [eax], 0x3ae35568
jmp 0x10038166
push 0
lea ecx, [ebp - 0x5ac]
call fcn.1000f0fd
mov dword [eax], 0xfffffff2
jmp 0x100381ce
push 0
lea ecx, [ebp - 0x5ac]
call fcn.1000f0fd
mov dword [ebp - 0x3d8], eax
mov eax, dword [ebp - 0x3d8]
mov eax, dword [eax]
inc eax
mov ecx, dword [ebp - 0x3d8]
mov dword [ecx], eax
push 0
lea ecx, [ebp - 0x5ac]
call fcn.1000f0fd
cmp dword [eax], 7
jle 0x10038d96
mov dword [ebp - 0x20], 0xac204e2d
mov dword [ebp - 0x100], 0
jmp 0x10038204
mov eax, dword [ebp - 0x100]
inc eax
mov dword [ebp - 0x100], eax
cmp dword [ebp - 0x100], 2
jge 0x10038220
mov eax, dword [ebp - 0x100]
mov dword [ebp + eax*4 - 0x518], 1
jmp 0x100381f7
mov dword [ebp - 0x20], 3
jmp 0x10038230
mov eax, dword [ebp - 0x20]
dec eax
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 0xfffffffe
jne 0x10038364
mov dword [ebp - 0x628], 0xfffffffb
mov dword [ebp - 0x624], 0xfffffffb
mov dword [ebp - 0x620], 0xfffffffb
mov dword [ebp - 0x61c], 0xfffffffb
lea ecx, [ebp - 0x1ad]
call fcn.1000f10c
push eax
lea eax, [ebp - 0x618]
push eax
lea eax, [ebp - 0x628]
push eax
lea ecx, [ebp - 0x854]
call fcn.1000f10f
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0x810]
call fcn.1000f0d2
mov byte [ebp - 4], 6
mov dword [ebp - 0x75c], 0xa0b8
mov dword [ebp - 0x764], 0
mov dword [ebp - 0x76c], 0xfffffff7
mov dword [ebp - 0x774], 0xde9bf9f
mov dword [ebp - 0x77c], 0x8b081589
mov dword [ebp - 0x7c4], 0xc8dfba22
mov dword [ebp - 0x7e8], 0
mov dword [ebp - 0x7e4], 0
mov dword [ebp - 0x7e0], 0
mov dword [ebp - 0x7dc], 0
mov dword [ebp - 0x4b8], 4
push 0
push 0x355b
push 0x38cf
push 0x1f3a
push 0x484c
lea eax, [ebp - 0x4b8]
push eax
push 0x627f
push 0x3927
push 1
push 0x3fe0
call fcn.10028ab2
add esp, 0x28
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0x518], 0xde6b9338
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x810]
call fcn.1000f0f8
jmp 0x10038229
mov dword [ebp - 0x20], 0
jmp 0x10038374
mov eax, dword [ebp - 0x20]
inc eax
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 1
jg 0x100383ae
mov eax, dword [ebp - 0x20]
cmp dword [ebp + eax*4 - 0x518], 0xffffffff
ja 0x10038393
mov dword [ebp - 0x250], 1
jmp 0x1003839a
and dword [ebp - 0x250], 0
mov eax, dword [ebp - 0x250]
neg eax
mov ecx, dword [ebp - 0x20]
mov dword [ebp + ecx*4 - 0x518], eax
jmp 0x1003836d
mov dword [ebp - 0x38], 0xeb905d09
mov dword [ebp - 0x38], 0
jmp 0x100383c5
mov eax, dword [ebp - 0x38]
inc eax
mov dword [ebp - 0x38], eax
cmp dword [ebp - 0x38], 8
je 0x10038ae0
push 1
lea ecx, [ebp - 0x1c8]
call fcn.1000f096
mov byte [ebp - 4], 7
mov dword [ebp - 0x130], 0
jmp 0x100383f9
mov eax, dword [ebp - 0x130]
inc eax
mov dword [ebp - 0x130], eax
cmp dword [ebp - 0x130], 1
jge 0x1003841b
push dword [ebp - 0x130]
lea ecx, [ebp - 0x1c8]
call fcn.1000f0fd
mov dword [eax], 0xdb3ae355
jmp 0x100383ec
push 0
lea ecx, [ebp - 0x1c8]
call fcn.1000f0fd
mov dword [eax], 0x1a
jmp 0x10038454
push 0
lea ecx, [ebp - 0x1c8]
call fcn.1000f0fd
mov dword [ebp - 0x358], eax
mov eax, dword [ebp - 0x358]
mov eax, dword [eax]
dec eax
mov ecx, dword [ebp - 0x358]
mov dword [ecx], eax
push 0
lea ecx, [ebp - 0x1c8]
call fcn.1000f0fd
cmp dword [eax], 0xfffffff6
jne 0x1003860c
mov dword [ebp - 0x258], 0x82aa9dad
mov dword [ebp - 0x558], 0xffffffff
mov dword [ebp - 0x108], 0
jmp 0x10038497
mov eax, dword [ebp - 0x108]
inc eax
mov dword [ebp - 0x108], eax
cmp dword [ebp - 0x108], 2
jge 0x100384b3
mov eax, dword [ebp - 0x108]
mov dword [ebp + eax*4 - 0x5f0], 0x513c
jmp 0x1003848a
mov byte [ebp - 0x41], 0
movzx eax, byte [ebp - 0x41]
test eax, eax
je 0x100384d5
push 0x776d
push 0x1d8a
push 1
push 1
call fcn.10028727
add esp, 0x10
push 0
lea ecx, [ebp - 0x1c8]
call fcn.1000f0fd
imul eax, dword [eax], 0x83dc
mov dword [ebp - 0x258], eax
mov esi, dword [ebp - 0x258]
push 0
lea ecx, [ebp - 0x1c8]
call fcn.1000f0fd
imul esi, dword [eax]
push 0
lea ecx, [ebp - 0x1c8]
call fcn.1000f0fd
cmp esi, dword [eax]
jl 0x10038521
mov dword [ebp - 0x458], 1
jmp 0x10038528
and dword [ebp - 0x458], 0
push 4
pop eax
shl eax, 0
push 4
pop ecx
shl ecx, 0
mov ecx, dword [ebp + ecx - 0x5f0]
imul ecx, dword [ebp - 0x458]
cmp dword [ebp + eax - 0x5f0], ecx
jg 0x10038557
mov dword [ebp - 0x260], 1
jmp 0x1003855e
and dword [ebp - 0x260], 0
push 0
lea ecx, [ebp - 0x1c8]
call fcn.1000f0fd
mov eax, dword [eax]
cmp eax, dword [ebp - 0x260]
jg 0x10038581
mov dword [ebp - 0x360], 1
jmp 0x10038588
and dword [ebp - 0x360], 0
push 0
lea ecx, [ebp - 0x1c8]
call fcn.1000f0fd
mov ecx, dword [ebp - 0x360]
cmp ecx, dword [eax]
jne 0x100385ab
mov dword [ebp - 0x268], 1
jmp 0x100385b2
and dword [ebp - 0x268], 0
cmp dword [ebp - 0x268], 0xe81720d7
jne 0x100385ca
mov dword [ebp - 0x3e0], 1
jmp 0x100385d1
and dword [ebp - 0x3e0], 0
push 0
lea ecx, [ebp - 0x1c8]
call fcn.1000f0fd
mov eax, dword [eax]
cmp eax, dword [ebp - 0x3e0]
jle 0x100385f4
mov dword [ebp - 0x270], 1
jmp 0x100385fb
and dword [ebp - 0x270], 0
mov eax, dword [ebp - 0x270]
mov dword [ebp - 0x558], eax
jmp 0x10038430
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x1c8]
call fcn.1000f0f8
mov dword [ebp - 0x148], 0
jmp 0x10038634
mov eax, dword [ebp - 0x148]
inc eax
mov dword [ebp - 0x148], eax
cmp dword [ebp - 0x148], 3
jge 0x10038650
mov eax, dword [ebp - 0x148]
mov dword [ebp + eax*4 - 0x7ac], 0x1bc7dcd6
jmp 0x10038627
mov dword [ebp - 0x7cc], 0x2fafd11d
mov dword [ebp - 0x48], 1
mov dword [ebp - 0x4c8], 0xf7cf8fb6
mov dword [ebp - 0x14], 0
jmp 0x1003867b
mov eax, dword [ebp - 0x14]
inc eax
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 4
jge 0x10038691
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x690], 0x70ad
jmp 0x10038674
mov dword [ebp - 0x14], 0
jmp 0x100386a1
mov eax, dword [ebp - 0x14]
inc eax
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 2
jge 0x100386b7
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x430], 0
jmp 0x1003869a
mov dword [ebp - 0x14], 0
jmp 0x100386c7
mov eax, dword [ebp - 0x14]
inc eax
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 4
jge 0x100386dd
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x804], 0x58a835a
jmp 0x100386c0
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x690]
inc eax
push 4
pop ecx
shl ecx, 1
mov dword [ebp + ecx - 0x690], eax
push 4
pop eax
shl eax, 0
mov dword [ebp + eax - 0x430], 0xfffffffa
jmp 0x10038724
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x430]
inc eax
push 4
pop ecx
shl ecx, 0
mov dword [ebp + ecx - 0x430], eax
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x430], 0x1b
je 0x10038a18
mov dword [ebp - 0x4c0], 5
mov dword [ebp - 0x7d4], 0x369bd69
mov dword [ebp - 0x7f0], 3
mov dword [ebp - 0x444], 0x90c6d21c
mov dword [ebp - 0x1cc], 0xfff6
mov dword [ebp - 0x5a0], 0x3e270bb1
mov dword [ebp - 0x110], 0
jmp 0x1003878d
mov eax, dword [ebp - 0x110]
inc eax
mov dword [ebp - 0x110], eax
cmp dword [ebp - 0x110], 1
jge 0x100387a9
mov eax, dword [ebp - 0x110]
mov dword [ebp + eax*4 - 0x580], 0
jmp 0x10038780
push 0x7e
push 0x710a
push 1
push 1
lea eax, [ebp - 0x444]
push eax
call fcn.100287c3
add esp, 0x14
mov dword [ebp - 0x48], 0
jmp 0x100387d3
mov eax, dword [ebp - 0x48]
inc eax
mov dword [ebp - 0x48], eax
cmp dword [ebp - 0x48], 3
jg 0x10038a13
mov dword [ebp - 0x560], 0xffffffff
mov dword [ebp - 0x370], 0x78e60d74
mov dword [ebp - 0x4d0], 0xfab8d232
xor eax, eax
jne 0x1003894a
push 4
pop eax
imul eax, eax, 3
mov eax, dword [ebp + eax - 0x804]
sub eax, 5
cmp eax, dword [ebp - 0x4c0]
je 0x10038827
mov dword [ebp - 0x368], 1
jmp 0x1003882e
and dword [ebp - 0x368], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x430]
cmp dword [ebp - 0x368], eax
jl 0x1003884f
mov dword [ebp - 0x278], 1
jmp 0x10038856
and dword [ebp - 0x278], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x580]
cmp dword [ebp - 0x278], eax
je 0x10038877
mov dword [ebp - 0x420], 1
jmp 0x1003887e
and dword [ebp - 0x420], 0
mov eax, dword [ebp - 0x4c8]
sub eax, dword [ebp - 0x420]
je 0x1003889c
xor eax, eax
je 0x1003889c
mov dword [ebp - 0x280], 1
jmp 0x100388a3
and dword [ebp - 0x280], 0
mov eax, dword [ebp - 0x280]
mov dword [ebp - 0x370], eax
push 4
pop eax
shl eax, 1
mov ecx, dword [ebp - 0x48]
sub ecx, dword [ebp - 0x370]
cmp ecx, dword [ebp + eax - 0x690]
jle 0x100388d2
mov dword [ebp - 0x288], 1
jmp 0x100388d9
and dword [ebp - 0x288], 0
mov eax, dword [ebp - 0x560]
cmp dword [ebp - 0x288], eax
jge 0x100388f3
mov dword [ebp - 0x3e8], 1
jmp 0x100388fa
and dword [ebp - 0x3e8], 0
mov eax, dword [ebp - 0x1cc]
dec eax
mov dword [ebp - 0x1cc], eax
mov eax, dword [ebp - 0x48]
mov eax, dword [ebp + eax*4 - 0x690]
imul eax, dword [ebp - 0x1cc]
cmp eax, dword [ebp - 0x3e8]
jle 0x1003892c
mov dword [ebp - 0x290], 1
jmp 0x10038933
and dword [ebp - 0x290], 0
mov eax, dword [ebp - 0x4d0]
cmp dword [ebp - 0x290], eax
jge 0x1003894a
and dword [ebp - 0x378], 0
jmp 0x10038954
mov dword [ebp - 0x378], 1
mov eax, dword [ebp - 0x5a0]
cmp dword [ebp - 0x378], eax
jl 0x1003896e
mov dword [ebp - 0x298], 1
jmp 0x10038975
and dword [ebp - 0x298], 0
mov eax, dword [ebp - 0x298]
sub eax, dword [ebp - 0x444]
cmp eax, dword [ebp - 0x48]
jle 0x10038992
mov dword [ebp - 0x174], 1
jmp 0x10038999
and dword [ebp - 0x174], 0
push 4
pop eax
shl eax, 1
mov ecx, dword [ebp - 0x174]
mov dword [ebp + eax - 0x804], ecx
cmp dword [ebp - 0x174], 0
je 0x100389e4
mov byte [ebp - 0x3e], 0
movzx eax, byte [ebp - 0x3e]
test eax, eax
je 0x100389e2
push 0x4306
push 0
push 0x4a9f
push 0x629e
push 0
push 0x3e18
push 1
call fcn.100344ae
add esp, 0x1c
jmp 0x10038a0e
mov dword [ebp - 0x4d8], 0xceaa
push 0x6d40
push 0x2110
push 0
push 0x43a7
lea eax, [ebp - 0x4d8]
push eax
call fcn.1003d42a
add esp, 0x14
jmp 0x100387cc
jmp 0x10038709
mov byte [ebp - 0x49], 0
movzx eax, byte [ebp - 0x49]
test eax, eax
je 0x10038a39
push 0
push 0
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
push 0
push 0
call dword [sym.imp.USER32.dll_CreateDialogIndirectParamA]
cmp dword [ebp - 0x38], 0x747b
jge 0x10038a4e
mov dword [ebp - 0x2a0], 1
jmp 0x10038a55
and dword [ebp - 0x2a0], 0
cmp dword [ebp - 0x2a0], 0xfffffff9
je 0x10038a6a
mov dword [ebp - 0x380], 1
jmp 0x10038a71
and dword [ebp - 0x380], 0
mov eax, dword [ebp - 0x38]
add eax, dword [ebp - 0x38]
je 0x10038a89
xor eax, eax
je 0x10038a89
mov dword [ebp - 0x568], 1
jmp 0x10038a90
and dword [ebp - 0x568], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x7ac]
mov dword [ebp - 0x7b8], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x7ac]
imul eax, dword [ebp - 0x380]
cmp eax, dword [ebp - 0x38]
jge 0x10038ac8
mov dword [ebp - 0x4e0], 1
jmp 0x10038acf
and dword [ebp - 0x4e0], 0
mov eax, 0xd7006986
dec eax
mov dword [ebp - 0xa4], eax
jmp 0x100383be
mov byte [ebp - 0x40], 0
mov dword [ebp - 0x524], 0x16d9
cmp dword [ebp - 0x524], 0x980
jge 0x10038d77
lea eax, [ebp - 0x1a4]
push eax
push 0x1000cb38
call fcn.10054a3b
pop ecx
pop ecx
mov eax, dword [ebp - 0x1a4]
mov dword [ebp - 0x4e8], eax
mov eax, dword [ebp - 0x1a4]
dec eax
mov dword [ebp - 0x1a4], eax
cmp dword [ebp - 0x4e8], 0
je 0x10038d77
lea eax, [ebp - 0x118]
push eax
push 0x1000cb38
call fcn.10054a3b
pop ecx
pop ecx
push dword [ebp - 0x118]
lea ecx, [ebp - 0x464]
call fcn.1000f096
mov byte [ebp - 4], 8
and dword [ebp - 0x138], 0
jmp 0x10038b75
mov eax, dword [ebp - 0x138]
inc eax
mov dword [ebp - 0x138], eax
mov eax, dword [ebp - 0x138]
cmp eax, dword [ebp - 0x118]
jge 0x10038ba3
push dword [ebp - 0x138]
lea ecx, [ebp - 0x464]
call fcn.1000f0fd
push eax
push 0x1000cb38
call fcn.10054a3b
pop ecx
pop ecx
jmp 0x10038b68
lea ecx, [ebp - 0x464]
call fcn.10046d29
mov eax, dword [eax]
dec eax
mov dword [ebp - 0x534], eax
lea eax, [ebp - 0x534]
push eax
lea ecx, [ebp - 0x464]
call fcn.1000f225
lea ecx, [ebp - 0x1e8]
call fcn.1000f20f
mov byte [ebp - 4], 9
mov dword [ebp - 0x50], 1
jmp 0x10038be8
mov eax, dword [ebp - 0x50]
inc eax
mov dword [ebp - 0x50], eax
mov eax, dword [ebp - 0x50]
cmp eax, dword [ebp - 0x118]
jg 0x10038c3c
mov eax, dword [ebp - 0x50]
dec eax
push eax
lea ecx, [ebp - 0x464]
call fcn.1000f0fd
mov esi, eax
push dword [ebp - 0x50]
lea ecx, [ebp - 0x464]
call fcn.1000f0fd
mov ecx, dword [esi]
cmp ecx, dword [eax]
jle 0x10038c3a
lea eax, [ebp - 0x50]
push eax
lea ecx, [ebp - 0x1e8]
call fcn.1000f225
mov eax, dword [ebp - 0x118]
cdq
sub eax, edx
sar eax, 1
cmp dword [ebp - 0x50], eax
jle 0x10038c3a
jmp 0x10038c3c
jmp 0x10038be1
and dword [ebp - 0x70], 0
and dword [ebp - 0x58], 0
and dword [ebp - 0x34], 0
lea ecx, [ebp - 0x1e8]
call fcn.1000f21c
cmp eax, 3
jbe 0x10038d3e
lea ecx, [ebp - 0x1e8]
call fcn.1001ff64
push 0
lea ecx, [ebp - 0x1e8]
call fcn.1000f0fd
mov eax, dword [eax]
mov dword [ebp - 0x70], eax
lea ecx, [ebp - 0x1e8]
call fcn.10046d29
mov esi, eax
push 0
lea ecx, [ebp - 0x1e8]
call fcn.1000f0fd
mov ecx, dword [esi]
sub ecx, dword [eax]
mov dword [ebp - 0x58], ecx
and dword [ebp - 0x34], 0
lea ecx, [ebp - 0x1e8]
call fcn.1000f21c
dec eax
mov dword [ebp - 0xb8], eax
jmp 0x10038cbf
mov eax, dword [ebp - 0xb8]
dec eax
mov dword [ebp - 0xb8], eax
cmp dword [ebp - 0xb8], 0
jle 0x10038d1e
push dword [ebp - 0xb8]
lea ecx, [ebp - 0x1e8]
call fcn.1000f0fd
mov esi, eax
mov eax, dword [ebp - 0xb8]
dec eax
push eax
lea ecx, [ebp - 0x1e8]
call fcn.1000f0fd
mov ecx, dword [esi]
sub ecx, dword [eax]
mov dword [ebp - 0x2a8], ecx
mov eax, dword [ebp - 0x34]
cmp eax, dword [ebp - 0x70]
jg 0x10038d1a
mov eax, dword [ebp - 0x34]
add eax, dword [ebp - 0x2a8]
mov dword [ebp - 0x34], eax
mov eax, dword [ebp - 0x58]
sub eax, dword [ebp - 0x2a8]
mov dword [ebp - 0x58], eax
jmp 0x10038d1c
jmp 0x10038d1e
jmp 0x10038cb2
mov eax, dword [ebp - 0x70]
cmp eax, dword [ebp - 0x58]
jge 0x10038d2e
mov eax, dword [ebp - 0x70]
cmp eax, dword [ebp - 0x34]
jl 0x10038d3e
and dword [ebp - 0x34], 0
mov eax, dword [ebp - 0x34]
mov dword [ebp - 0x58], eax
mov eax, dword [ebp - 0x58]
mov dword [ebp - 0x70], eax
push dword [ebp - 0x34]
push dword [ebp - 0x58]
push dword [ebp - 0x70]
push 0x1000ce68
call fcn.10054dcc
add esp, 0x10
mov byte [ebp - 4], 8
lea ecx, [ebp - 0x1e8]
call fcn.1000f0f8
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x464]
call fcn.1000f0f8
jmp 0x10038b11
push 0
push 0x2345
push 1
lea eax, [ebp - 0x40]
push eax
push 0x282d
call fcn.10028b5c
add esp, 0x14
jmp 0x100381aa
mov dword [ebp - 0x158], 0xffffffff
mov dword [ebp - 0x4f0], 0x443eb606
mov dword [ebp - 0x158], 0
jmp 0x10038dc3
mov eax, dword [ebp - 0x158]
dec eax
mov dword [ebp - 0x158], eax
cmp dword [ebp - 0x158], 0xffffffe5
jl 0x10038e80
mov dword [ebp - 0x9c], 0xffffffff
mov dword [ebp - 0x9c], 0xfffffff9
jmp 0x10038df3
mov eax, dword [ebp - 0x9c]
inc eax
mov dword [ebp - 0x9c], eax
cmp dword [ebp - 0x9c], 0x10
jne 0x10038e6f
mov dword [ebp - 0x120], 0x1738ab65
mov dword [ebp - 0x120], 0
jmp 0x10038e1f
mov eax, dword [ebp - 0x120]
inc eax
mov dword [ebp - 0x120], eax
cmp dword [ebp - 0x120], 0xb
jg 0x10038e6a
mov byte [ebp - 0x59], 0
movzx eax, byte [ebp - 0x59]
test eax, eax
je 0x10038e68
push 1
push 0x2223
push 0x4bda
push 0x2611
push 0xbc2
push 0x51af
push 0x1355
push 0x1822
push 1
push 0x329a
call fcn.10028ab2
add esp, 0x28
jmp 0x10038e12
jmp 0x10038de6
mov eax, dword [ebp - 0x9c]
mov dword [ebp - 0x4f0], eax
jmp 0x10038db6
mov dword [ebp - 0xa4], 0
jmp 0x10038e99
mov eax, dword [ebp - 0xa4]
dec eax
mov dword [ebp - 0xa4], eax
cmp dword [ebp - 0xa4], 0xffffffe4
jg 0x10038ecb
mov byte [ebp - 0x42], 0
movzx eax, byte [ebp - 0x42]
test eax, eax
je 0x10038ec9
push 1
push 0x4619
push 1
push 0x6f83
push 0x3a58
call fcn.10028b5c
add esp, 0x14
jmp 0x10038e8c
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x5ac]
call fcn.1000f0f8
push 3
lea ecx, [ebp - 0xf0]
call fcn.1000f096
mov dword [ebp - 4], 0xa
mov dword [ebp - 0x1ac], 0x9e3d3b0c
mov dword [ebp - 0x10], 0xffffffff
mov dword [ebp - 0x184], 0xf7626a9d
mov dword [ebp - 0x1dc], 0x3e91cb64
mov dword [ebp - 0xac], 0xa4792d8c
mov dword [ebp - 0x554], 6
mov dword [ebp - 0x694], 0
mov dword [ebp - 0x69c], 0x1179d740
mov dword [ebp - 0x6c0], 1
mov dword [ebp - 0x510], 0x1fa8bf40
mov dword [ebp - 0x2c], 0
jmp 0x10038f5f
mov eax, dword [ebp - 0x2c]
inc eax
mov dword [ebp - 0x2c], eax
cmp dword [ebp - 0x2c], 3
jge 0x10038f7b
push dword [ebp - 0x2c]
lea ecx, [ebp - 0xf0]
call fcn.1000f0fd
mov dword [eax], 0x6a92
jmp 0x10038f58
mov dword [ebp - 0x2c], 0
jmp 0x10038f8b
mov eax, dword [ebp - 0x2c]
inc eax
mov dword [ebp - 0x2c], eax
cmp dword [ebp - 0x2c], 2
jge 0x10038fa1
mov eax, dword [ebp - 0x2c]
mov dword [ebp + eax*4 - 0x82c], 5
jmp 0x10038f84
lea eax, [ebp - 0xf0]
push eax
push 0x1170
push 1
push 1
push 0x1ef0
lea eax, [ebp - 0x184]
push eax
lea eax, [ebp - 0x10]
push eax
push 0x64e6
push 0
lea eax, [ebp - 0x1ac]
push eax
push 0x7531
call fcn.100360d0
add esp, 0x2c
mov dword [ebp - 0x520], 0x2301
cmp dword [ebp - 0x520], 0x80f
jge 0x100390b3
lea eax, [ebp - 0x500]
push eax
lea eax, [ebp - 0x544]
push eax
lea eax, [ebp - 0x17c]
push eax
push 0x1000ce68
call fcn.10054a3b
add esp, 0x10
and dword [ebp - 0x1bc], 0
and dword [ebp - 0x140], 0
mov eax, dword [ebp - 0x17c]
mov dword [ebp - 0x4f8], eax
mov eax, dword [ebp - 0x17c]
dec eax
mov dword [ebp - 0x17c], eax
cmp dword [ebp - 0x4f8], 0
je 0x100390a1
lea eax, [ebp - 0x3f0]
push eax
push 0x1000cb38
call fcn.10054a3b
pop ecx
pop ecx
mov eax, dword [ebp - 0x3f0]
cmp eax, dword [ebp - 0x544]
jle 0x1003906b
jmp 0x10039026
mov eax, dword [ebp - 0x140]
add eax, dword [ebp - 0x3f0]
mov dword [ebp - 0x140], eax
mov eax, dword [ebp - 0x140]
cmp eax, dword [ebp - 0x500]
jle 0x1003909f
mov eax, dword [ebp - 0x1bc]
inc eax
mov dword [ebp - 0x1bc], eax
and dword [ebp - 0x140], 0
jmp 0x10039026
push dword [ebp - 0x1bc]
push 0x1000cb5c
call fcn.10054dcc
pop ecx
pop ecx
mov dword [ebp - 0x10], 0
jmp 0x100390c3
mov eax, dword [ebp - 0x10]
inc eax
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], 2
jg 0x1003959b
mov dword [ebp - 0x18c], 0x68169b2b
mov dword [ebp - 0x6a4], 0xa031552a
mov dword [ebp - 0x6c4], 0x5e4941ae
mov dword [ebp - 0xe4], 0
jmp 0x10039104
mov eax, dword [ebp - 0xe4]
inc eax
mov dword [ebp - 0xe4], eax
cmp dword [ebp - 0xe4], 1
jge 0x10039120
mov eax, dword [ebp - 0xe4]
mov dword [ebp + eax*4 - 0x104], 0
jmp 0x100390f7
mov eax, dword [ebp - 0x10]
mov dword [ebp - 0x6ac], eax
push dword [ebp - 0x10]
lea ecx, [ebp - 0xf0]
call fcn.1000f0fd
mov eax, 0xfd90538e
add eax, 0xb0c7b249
cmp eax, dword [ebp - 0x1ac]
jle 0x10039155
mov dword [ebp - 0x2b0], 1
jmp 0x1003915c
and dword [ebp - 0x2b0], 0
mov eax, dword [ebp - 0x2b0]
neg eax
js 0x10039172
mov dword [ebp - 0x388], 1
jmp 0x10039179
and dword [ebp - 0x388], 0
cmp dword [ebp - 0x388], 0xa9b2
jge 0x10039191
mov dword [ebp - 0x2b8], 1
jmp 0x10039198
and dword [ebp - 0x2b8], 0
push dword [ebp - 0x10]
lea ecx, [ebp - 0xf0]
call fcn.1000f0fd
mov ecx, dword [ebp - 0x2b8]
cmp ecx, dword [eax]
je 0x100391bc
mov dword [ebp - 0x428], 1
jmp 0x100391c3
and dword [ebp - 0x428], 0
mov eax, dword [ebp - 0x10]
add eax, dword [ebp - 0x428]
mov dword [ebp - 0x184], eax
cmp dword [ebp - 0x184], 0
push dword [ebp - 0x10]
lea ecx, [ebp - 0xf0]
call fcn.1000f0fd
push dword [ebp - 0x10]
lea ecx, [ebp - 0xf0]
call fcn.1000f0fd
mov esi, eax
push dword [ebp - 0x10]
lea ecx, [ebp - 0xf0]
call fcn.1000f0fd
mov ecx, dword [esi]
imul ecx, dword [eax]
cmp ecx, dword [ebp - 0x18c]
je 0x1003921e
mov dword [ebp - 0x2c0], 1
jmp 0x10039225
and dword [ebp - 0x2c0], 0
mov eax, dword [ebp - 0x18c]
cmp dword [ebp - 0x2c0], eax
jl 0x1003923f
mov dword [ebp - 0x54c], 1
jmp 0x10039246
and dword [ebp - 0x54c], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x104]
mov dword [ebp - 0x6cc], eax
push 4
pop eax
imul eax, eax, 0
mov esi, dword [ebp + eax - 0x104]
push dword [ebp - 0x10]
lea ecx, [ebp - 0xf0]
call fcn.1000f0fd
mov eax, dword [eax]
lea eax, [esi + eax + 0xab2b]
cmp eax, 4
jl 0x1003929e
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x104], 0
je 0x1003929e
mov dword [ebp - 0x390], 1
jmp 0x100392a5
and dword [ebp - 0x390], 0
cmp dword [ebp - 0x390], 1
je 0x100392ba
mov dword [ebp - 0x2c8], 1
jmp 0x100392c1
and dword [ebp - 0x2c8], 0
mov eax, dword [ebp - 0x1dc]
cmp eax, dword [ebp - 0x2c8]
jne 0x100392db
mov dword [ebp - 0x3f8], 1
jmp 0x100392e2
and dword [ebp - 0x3f8], 0
push 0
lea ecx, [ebp - 0xf0]
call fcn.1000f0fd
mov ecx, dword [ebp - 0x3f8]
cmp ecx, dword [eax]
jg 0x10039305
mov dword [ebp - 0x2d0], 1
jmp 0x1003930c
and dword [ebp - 0x2d0], 0
push dword [ebp - 0x10]
lea ecx, [ebp - 0xf0]
call fcn.1000f0fd
mov eax, dword [eax]
cmp eax, dword [ebp - 0x2d0]
jg 0x10039330
mov dword [ebp - 0x398], 1
jmp 0x10039337
and dword [ebp - 0x398], 0
mov eax, dword [ebp - 0x1ac]
cmp dword [ebp - 0x398], eax
jg 0x10039351
mov dword [ebp - 0x2d8], 1
jmp 0x10039358
and dword [ebp - 0x2d8], 0
mov eax, dword [ebp - 0xac]
cmp dword [ebp - 0x2d8], eax
jge 0x10039372
mov dword [ebp - 0x454], 1
jmp 0x10039379
and dword [ebp - 0x454], 0
mov eax, dword [ebp - 0x454]
mov dword [ebp - 0x1dc], eax
mov dword [ebp - 0xac], 0
jmp 0x1003939e
mov eax, dword [ebp - 0xac]
inc eax
mov dword [ebp - 0xac], eax
cmp dword [ebp - 0xac], 2
jg 0x10039596
mov dword [ebp - 0xfc], 0xf2db
mov dword [ebp - 0x6b4], 0
mov dword [ebp - 0x6d4], 7
mov dword [ebp - 0x6bc], 0x52d5f2ab
mov dword [ebp - 0x6dc], 4
mov dword [ebp - 0x6e4], 0
mov dword [ebp - 0xf4], 0
jmp 0x10039400
mov eax, dword [ebp - 0xf4]
inc eax
mov dword [ebp - 0xf4], eax
cmp dword [ebp - 0xf4], 3
jge 0x1003941c
mov eax, dword [ebp - 0xf4]
mov dword [ebp + eax*4 - 0x86c], 0xfffffffe
jmp 0x100393f3
push 0
lea ecx, [ebp - 0xf0]
call fcn.1000f0fd
cmp dword [eax], 0x676e
jge 0x1003943d
mov dword [ebp - 0x3a8], 1
jmp 0x10039444
and dword [ebp - 0x3a8], 0
mov eax, dword [ebp - 0x18c]
mov dword [ebp - 0x6c8], eax
cmp dword [ebp - 0xfc], 1
je 0x10039465
mov dword [ebp - 0x2e0], 1
jmp 0x1003946c
and dword [ebp - 0x2e0], 0
push dword [ebp - 0x10]
lea ecx, [ebp - 0xf0]
call fcn.1000f0fd
mov ecx, dword [ebp - 0x2e0]
cmp ecx, dword [eax]
jl 0x10039499
cmp dword [ebp - 0xfc], 0
je 0x10039499
mov dword [ebp - 0x3a0], 1
jmp 0x100394a0
and dword [ebp - 0x3a0], 0
mov eax, dword [ebp - 0xfc]
mov ecx, dword [ebp - 0x3a0]
lea eax, [ecx + eax + 0x70b1cb45]
test eax, eax
jne 0x100394c9
mov eax, 0xdaee1d35
test eax, eax
jne 0x100394c9
and dword [ebp - 0x2e8], 0
jmp 0x100394d3
mov dword [ebp - 0x2e8], 1
cmp dword [ebp - 0x2e8], 0xa534c8a1
jae 0x100394eb
mov dword [ebp - 0x508], 1
jmp 0x100394f2
and dword [ebp - 0x508], 0
push 0
lea ecx, [ebp - 0xf0]
call fcn.1000f0fd
cmp dword [ebp - 0x554], 5
jle 0x10039514
mov dword [ebp - 0x400], 1
jmp 0x1003951b
and dword [ebp - 0x400], 0
mov eax, dword [ebp - 0xfc]
cmp dword [ebp - 0x400], eax
jne 0x10039535
mov dword [ebp - 0x2f0], 1
jmp 0x1003953c
and dword [ebp - 0x2f0], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x104]
cmp dword [ebp - 0x2f0], eax
jl 0x1003955d
mov dword [ebp - 0x2f8], 1
jmp 0x10039564
and dword [ebp - 0x2f8], 0
mov eax, dword [ebp - 0x3a8]
add eax, dword [ebp - 0x2f8]
mov dword [ebp - 0x1dc], eax
push 0
push 0x672b
lea eax, [ebp - 0x510]
push eax
push 0x7d1c
call fcn.1003ef35
add esp, 0x10
jmp 0x10039391
jmp 0x100390bc
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xf0]
call fcn.1000f0f8
mov eax, dword [ebp - 0xdc]
mov eax, dword [eax + 4]
mov dword [ebp - 0x414], eax
mov dword [ebp - 0x10c], 0
jmp 0x100395d2
mov eax, dword [ebp - 0x10c]
inc eax
mov dword [ebp - 0x10c], eax
cmp dword [ebp - 0x10c], 3
jge 0x100395ee
mov eax, dword [ebp - 0x10c]
mov dword [ebp + eax*4 - 0x5dc], 0xfd3df75d
jmp 0x100395c5
push 4
pop eax
shl eax, 1
mov dword [ebp + eax - 0x5dc], 0
jmp 0x10039619
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x5dc]
inc eax
push 4
pop ecx
shl ecx, 1
mov dword [ebp + ecx - 0x5dc], eax
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0x5dc], 0xb
jge 0x1003964f
mov byte [ebp - 0x51], 0
movzx eax, byte [ebp - 0x51]
test eax, eax
je 0x1003964d
push 0x6b32
push 0x1470
push 0x1540
push 0
call fcn.1003adb9
add esp, 0x10
jmp 0x10039600
push 2
lea ecx, [ebp - 0x5c4]
call fcn.1000f096
mov dword [ebp - 4], 0xb
mov dword [ebp - 0x614], 0x25b0e446
mov dword [ebp - 0x610], 0x25b0e446
mov dword [ebp - 0x60c], 0x25b0e446
mov dword [ebp - 0x608], 0x25b0e446
lea ecx, [ebp - 0x1a5]
call fcn.1000f10c
push eax
lea eax, [ebp - 0x604]
push eax
lea eax, [ebp - 0x614]
push eax
lea ecx, [ebp - 0x834]
call fcn.1000f10f
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0x670]
call fcn.1000f0d2
mov byte [ebp - 4], 0xc
mov dword [ebp - 0x94], 1
mov dword [ebp - 0x114], 0
jmp 0x100396e7
mov eax, dword [ebp - 0x114]
inc eax
mov dword [ebp - 0x114], eax
cmp dword [ebp - 0x114], 2
jge 0x10039709
push dword [ebp - 0x114]
lea ecx, [ebp - 0x5c4]
call fcn.1000f0fd
mov dword [eax], 0x28ad
jmp 0x100396da
push 0x49e6
push 0
push 1
lea eax, [ebp - 0x670]
push eax
lea eax, [ebp - 0x94]
push eax
push 0x66c8
lea eax, [ebp - 0x5c4]
push eax
call fcn.10034bd1
add esp, 0x1c
mov dword [ebp - 0x94], 0
jmp 0x1003974d
mov eax, dword [ebp - 0x94]
inc eax
mov dword [ebp - 0x94], eax
cmp dword [ebp - 0x94], 1
jg 0x100397b1
mov dword [ebp - 0x55c], 0
mov dword [ebp - 0x51c], 0x600d5493
push 0x6500
push 0
lea eax, [ebp - 0x94]
push eax
push 0
lea eax, [ebp - 0x55c]
push eax
push 0x6d58
push 0x32be
push 1
lea eax, [ebp - 0x5c4]
push eax
lea eax, [ebp - 0x670]
push eax
lea eax, [ebp - 0x51c]
push eax
push 0x1ae4
call fcn.10036b38
add esp, 0x30
jmp 0x10039740
mov byte [ebp - 4], 0xb
lea ecx, [ebp - 0x670]
call fcn.1000f0f8
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x5c4]
call fcn.1000f0f8
mov dword [ebp - 0x1c], 0x4a8b108f
mov dword [ebp - 0x56c], 0xb541
mov dword [ebp - 0x300], 1
mov dword [ebp - 0x3c0], 3
mov dword [ebp - 0x11c], 0
jmp 0x1003980d
mov eax, dword [ebp - 0x11c]
inc eax
mov dword [ebp - 0x11c], eax
cmp dword [ebp - 0x11c], 2
jge 0x10039829
mov eax, dword [ebp - 0x11c]
mov dword [ebp + eax*4 - 0x160], 0x75c96dd1
jmp 0x10039800
mov dword [ebp - 0x1c], 1
jmp 0x10039839
mov eax, dword [ebp - 0x1c]
dec eax
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 0
jl 0x10039a16
mov dword [ebp - 0x18], 9
mov dword [ebp - 0x18], 0
jmp 0x1003985a
mov eax, dword [ebp - 0x18]
inc eax
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 1
jg 0x10039932
mov dword [ebp - 0x564], 1
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp + eax*4 - 0x160]
mov dword [ebp - 0x434], eax
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x434]
mov dword [ebp + eax*4 - 0x160], ecx
cmp dword [ebp - 0x434], 0xfffffff9
jne 0x100398a3
mov dword [ebp - 0x3b0], 1
jmp 0x100398aa
and dword [ebp - 0x3b0], 0
mov eax, dword [ebp - 0x300]
mov dword [ebp - 0x7b0], eax
mov eax, dword [ebp - 0x300]
cmp dword [ebp - 0x564], eax
je 0x100398d0
mov dword [ebp - 0x308], 1
jmp 0x100398d7
and dword [ebp - 0x308], 0
mov eax, dword [ebp - 0x3b0]
cmp eax, dword [ebp - 0x308]
jl 0x100398f1
mov dword [ebp - 0x408], 1
jmp 0x100398f8
and dword [ebp - 0x408], 0
mov eax, dword [ebp - 0x18]
cmp dword [ebp - 0x408], eax
jge 0x1003990f
mov dword [ebp - 0x310], 1
jmp 0x10039916
and dword [ebp - 0x310], 0
mov eax, dword [ebp - 0x310]
mov dword [ebp - 0x3c0], eax
cmp dword [ebp - 0x18], 0
je 0x1003992d
jmp 0x10039853
jmp 0x10039853
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp + eax*4 - 0x160]
mov dword [ebp - 0x6d0], eax
mov eax, dword [ebp - 0x56c]
mov dword [ebp - 0x758], eax
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp + eax*4 - 0x160]
mov dword [ebp - 0x6d8], eax
mov eax, dword [ebp - 0x1c]
push 4
pop ecx
imul ecx, ecx, 0
mov ecx, dword [ebp + ecx - 0x160]
cmp dword [ebp + eax*4 - 0x160], ecx
jge 0x10039983
mov dword [ebp - 0x3b8], 1
jmp 0x1003998a
and dword [ebp - 0x3b8], 0
mov eax, dword [ebp - 0x18]
cmp dword [ebp - 0x3b8], eax
jge 0x100399a7
cmp dword [ebp - 0x18], 0
je 0x100399a7
mov dword [ebp - 0x318], 1
jmp 0x100399ae
and dword [ebp - 0x318], 0
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp + eax*4 - 0x160]
cmp eax, dword [ebp - 0x318]
jle 0x100399cc
mov dword [ebp - 0x44c], 1
jmp 0x100399d3
and dword [ebp - 0x44c], 0
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp + eax*4 - 0x160]
add eax, dword [ebp - 0x44c]
sub eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x1c]
cmp eax, dword [ebp + ecx*4 - 0x160]
je 0x100399fe
mov dword [ebp - 0x320], 1
jmp 0x10039a05
and dword [ebp - 0x320], 0
mov eax, dword [ebp - 0x320]
mov dword [ebp - 0x3c0], eax
jmp 0x10039832
mov dword [ebp - 0x3c], 9
mov dword [ebp - 0x214], 0x223b16aa
mov dword [ebp - 0x1f0], 0x752
mov dword [ebp - 0x24c], 0x1ac7eb23
mov dword [ebp - 0x60], 0x24067bc6
mov dword [ebp - 0x47c], 0xc4b6369d
mov dword [ebp - 0x124], 0
jmp 0x10039a65
mov eax, dword [ebp - 0x124]
inc eax
mov dword [ebp - 0x124], eax
cmp dword [ebp - 0x124], 3
jge 0x10039a81
mov eax, dword [ebp - 0x124]
mov dword [ebp + eax*4 - 0x470], 0x2e0cf572
jmp 0x10039a58
mov dword [ebp - 0x3c], 0
jmp 0x10039a91
mov eax, dword [ebp - 0x3c]
inc eax
mov dword [ebp - 0x3c], eax
cmp dword [ebp - 0x3c], 2
jg 0x10039ca4
mov dword [ebp - 0x7b4], 0xfffffffe
mov dword [ebp - 0x53c], 0xfffffffa
mov dword [ebp - 0x12c], 0x6c715341
mov dword [ebp - 0x244], 9
mov eax, dword [ebp - 0x3c]
mov eax, dword [ebp + eax*4 - 0x470]
mov dword [ebp - 0x6e0], eax
mov eax, dword [ebp - 0x3c]
mov eax, dword [ebp + eax*4 - 0x470]
mov dword [ebp - 0x760], eax
mov eax, dword [ebp - 0x1f0]
inc eax
mov dword [ebp - 0x1f0], eax
cmp dword [ebp - 0x12c], 0
jne 0x10039b05
mov dword [ebp - 0x1f4], 1
jmp 0x10039b0c
and dword [ebp - 0x1f4], 0
mov eax, dword [ebp - 0x244]
cmp dword [ebp - 0x1f4], eax
jle 0x10039b26
mov dword [ebp - 0x1fc], 1
jmp 0x10039b2d
and dword [ebp - 0x1fc], 0
mov eax, dword [ebp - 0x214]
cmp dword [ebp - 0x1fc], eax
jne 0x10039b50
cmp dword [ebp - 0x24c], 0
je 0x10039b50
mov dword [ebp - 0x204], 1
jmp 0x10039b57
and dword [ebp - 0x204], 0
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x470]
cmp dword [ebp - 0x204], eax
jl 0x10039b77
mov dword [ebp - 0x20c], 1
jmp 0x10039b7e
and dword [ebp - 0x20c], 0
mov eax, dword [ebp - 0x12c]
cmp dword [ebp - 0x20c], eax
jle 0x10039b98
mov dword [ebp - 0x21c], 1
jmp 0x10039b9f
and dword [ebp - 0x21c], 0
mov eax, dword [ebp - 0x214]
cmp dword [ebp - 0x21c], eax
jg 0x10039bb9
mov dword [ebp - 0x224], 1
jmp 0x10039bc0
and dword [ebp - 0x224], 0
cmp dword [ebp - 0x224], 0x951f
jne 0x10039bd8
mov dword [ebp - 0x22c], 1
jmp 0x10039bdf
and dword [ebp - 0x22c], 0
mov eax, dword [ebp - 0x53c]
cmp dword [ebp - 0x22c], eax
jle 0x10039bf9
mov dword [ebp - 0x234], 1
jmp 0x10039c00
and dword [ebp - 0x234], 0
mov eax, dword [ebp - 0x12c]
cmp dword [ebp - 0x234], eax
jle 0x10039c1a
mov dword [ebp - 0x23c], 1
jmp 0x10039c21
and dword [ebp - 0x23c], 0
cmp dword [ebp - 0x23c], 0xfffffffe
jb 0x10039c36
mov dword [ebp - 0x588], 1
jmp 0x10039c3d
and dword [ebp - 0x588], 0
cmp dword [ebp - 0x60], 0
jne 0x10039c53
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x470], 0
je 0x10039c64
xor eax, eax
inc eax
je 0x10039c64
mov dword [ebp - 0x478], 1
jmp 0x10039c6b
and dword [ebp - 0x478], 0
mov eax, dword [ebp - 0x244]
mov dword [ebp - 0x6e8], eax
mov eax, dword [ebp - 0x3c]
mov eax, dword [ebp + eax*4 - 0x470]
mov dword [ebp - 0x7bc], eax
mov eax, dword [ebp - 0x24c]
mov dword [ebp - 0x6f0], eax
mov eax, dword [ebp - 0x12c]
mov dword [ebp - 0x47c], eax
jmp 0x10039a8a
mov dword [ebp - 0x60], 2
jmp 0x10039cb4
mov eax, dword [ebp - 0x60]
dec eax
mov dword [ebp - 0x60], eax
cmp dword [ebp - 0x60], 0
jl 0x10039cca
mov eax, dword [ebp - 0x60]
mov dword [ebp + eax*4 - 0x470], 0xaed0f12a
jmp 0x10039cad
push 1
lea ecx, [ebp - 0x5d0]
call fcn.1000f096
mov dword [ebp - 4], 0xd
mov dword [ebp - 0x88], 3
mov dword [ebp - 0x134], 0
jmp 0x10039d01
mov eax, dword [ebp - 0x134]
inc eax
mov dword [ebp - 0x134], eax
cmp dword [ebp - 0x134], 1
jge 0x10039d23
push dword [ebp - 0x134]
lea ecx, [ebp - 0x5d0]
call fcn.1000f0fd
mov dword [eax], 0x862f
jmp 0x10039cf4
push 0x6220
push 1
push 0
push 0x3cee
push 0
push 0x103a
lea eax, [ebp - 0x5d0]
push eax
lea eax, [ebp - 0x88]
push eax
push 0x229a
push 0x2c84
call fcn.10040993
add esp, 0x28
mov dword [ebp - 0x88], 0
jmp 0x10039d71
mov eax, dword [ebp - 0x88]
inc eax
mov dword [ebp - 0x88], eax
cmp dword [ebp - 0x88], 1
jge 0x10039dbd
push 1
push 0x177f
push 0x5098
push 0x4f3f
push 0x1281
push 0
push 0
lea eax, [ebp - 0x5d0]
push eax
lea eax, [ebp - 0x88]
push eax
push 0x599d
push 0x22ad
push 0x3706
push 0x6a
call fcn.1003ec35
add esp, 0x34
jmp 0x10039d64
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x5d0]
call fcn.1000f0f8
mov eax, dword [ebp - 0xdc]
mov eax, dword [eax]
mov ecx, dword [ebp - 0xdc]
mov ecx, dword [ecx]
movzx ecx, word [ecx + 0x14]
lea eax, [eax + ecx + 0x18]
mov dword [ebp - 0x28], eax
push 1
lea ecx, [ebp - 0x5e8]
call fcn.1000f096
mov dword [ebp - 4], 0xe
mov dword [ebp - 0x80], 3
mov dword [ebp - 0x13c], 0
jmp 0x10039e1b
mov eax, dword [ebp - 0x13c]
inc eax
mov dword [ebp - 0x13c], eax
cmp dword [ebp - 0x13c], 1
jge 0x10039e3d
push dword [ebp - 0x13c]
lea ecx, [ebp - 0x5e8]
call fcn.1000f0fd
mov dword [eax], 0x862f
jmp 0x10039e0e
mov dword [ebp - 0x80], 0
jmp 0x10039e4d
mov eax, dword [ebp - 0x80]
inc eax
mov dword [ebp - 0x80], eax
cmp dword [ebp - 0x80], 0
jg 0x10039e6a
push dword [ebp - 0x80]
lea ecx, [ebp - 0x5e8]
call fcn.1000f0fd
cmp dword [eax], 0
je 0x10039e68
jmp 0x10039e6a
jmp 0x10039e46
push 0x6720
push 0
push 0x25e2
lea eax, [ebp - 0x80]
push eax
push 0xdb4
push 0x6a0d
push 1
push 0x5edf
lea eax, [ebp - 0x5e8]
push eax
call fcn.10034f02
add esp, 0x24
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x5e8]
call fcn.1000f0f8
push 2
lea ecx, [ebp - 0x5b8]
call fcn.1000f096
mov dword [ebp - 4], 0xf
mov dword [ebp - 0x74], 0x5c8094a
mov dword [ebp - 0x2ac], 0xbd13d8c5
mov dword [ebp - 0x768], 1
mov dword [ebp - 0x4ac], 0x99220c43
mov dword [ebp - 0x48c], 0x686a37bd
mov dword [ebp - 0x170], 0x8069d1fe
push 1
lea ecx, [ebp - 0x64c]
call fcn.1000f096
mov byte [ebp - 4], 0x10
mov dword [ebp - 0x1b4], 5
mov dword [ebp - 0x494], 0xaf453288
mov dword [ebp - 0x4a4], 0
push 0x1db5
push 0
push 0x17ce
push 1
push 0x2e58
push 0x74ca
lea eax, [ebp - 0x5b8]
push eax
push 1
push 0x6c95
push 0x6485
push 0x4254
lea eax, [ebp - 0x90]
push eax
call fcn.10036b38
add esp, 0x30
mov dword [ebp - 0x90], 0
jmp 0x10039f7d
mov eax, dword [ebp - 0x90]
inc eax
mov dword [ebp - 0x90], eax
cmp dword [ebp - 0x90], 3
jge 0x10039f99
mov eax, dword [ebp - 0x90]
mov dword [ebp + eax*4 - 0x81c], 0xffffffff
jmp 0x10039f70
push 0x6ea7
push 0
lea eax, [ebp - 0x64c]
push eax
push 1
lea eax, [ebp - 0x90]
push eax
push 0x5d73
call fcn.1003478a
add esp, 0x18
mov dword [ebp - 0x74], 0
jmp 0x10039fcd
mov eax, dword [ebp - 0x74]
inc eax
mov dword [ebp - 0x74], eax
cmp dword [ebp - 0x74], 1
jg 0x1003a3f5
mov dword [ebp - 0x6f8], 0x82ca9683
mov dword [ebp - 0x194], 0x1b0ae28d
mov dword [ebp - 0x7ec], 3
mov dword [ebp - 0x4b4], 3
mov dword [ebp - 0x2dc], 0xffffffff
mov dword [ebp - 0x700], 1
mov dword [ebp - 0x770], 0xbbd4aa41
mov dword [ebp - 0x708], 1
mov dword [ebp - 0x49c], 4
mov dword [ebp - 0x7c0], 0x413e
mov dword [ebp - 0x710], 0xfffffffd
mov dword [ebp - 0x484], 0xf9eb11de
mov dword [ebp - 0x778], 0x865e1bfe
mov dword [ebp - 0x19c], 0x8d10fbf2
mov dword [ebp - 0x718], 1
mov dword [ebp - 0x7d8], 0x925d3c09
push 2
lea ecx, [ebp - 0x530]
call fcn.1000f096
mov byte [ebp - 4], 0x11
mov dword [ebp - 0x2cc], 0xfffffff9
mov dword [ebp - 0x25c], 0xda4aa2ee
mov dword [ebp - 0xd8], 0
jmp 0x1003a0b5
mov eax, dword [ebp - 0xd8]
inc eax
mov dword [ebp - 0xd8], eax
cmp dword [ebp - 0xd8], 2
jge 0x1003a0d7
push dword [ebp - 0xd8]
lea ecx, [ebp - 0x530]
call fcn.1000f0fd
mov dword [eax], 6
jmp 0x1003a0a8
cmp dword [ebp - 0x2cc], 0
jne 0x1003a283
mov esi, dword [ebp - 0x194]
push 0
lea ecx, [ebp - 0x64c]
call fcn.1000f0fd
cmp esi, dword [eax]
jl 0x1003a107
mov dword [ebp - 0x254], 1
jmp 0x1003a10e
and dword [ebp - 0x254], 0
mov eax, dword [ebp - 0x254]
sub eax, dword [ebp - 0x74]
mov dword [ebp - 0x25c], eax
mov esi, dword [ebp - 0x25c]
push 1
lea ecx, [ebp - 0x530]
call fcn.1000f0fd
cmp esi, dword [eax]
jge 0x1003a140
mov dword [ebp - 0x264], 1
jmp 0x1003a147
and dword [ebp - 0x264], 0
cmp dword [ebp - 0x264], 0x1e844912
jge 0x1003a15f
mov dword [ebp - 0x26c], 1
jmp 0x1003a166
and dword [ebp - 0x26c], 0
mov eax, dword [ebp - 0x484]
imul eax, dword [ebp - 0x26c]
cmp eax, dword [ebp - 0x170]
jle 0x1003a187
mov dword [ebp - 0x274], 1
jmp 0x1003a18e
and dword [ebp - 0x274], 0
mov eax, dword [ebp - 0x274]
mov dword [ebp - 0x194], eax
mov eax, dword [ebp - 0x194]
mov dword [ebp - 0x720], eax
mov eax, dword [ebp - 0x48c]
mov dword [ebp - 0x780], eax
push 1
lea ecx, [ebp - 0x530]
call fcn.1000f0fd
cmp dword [ebp - 0x2dc], 0x74473ca5
jl 0x1003a1d7
mov dword [ebp - 0x27c], 1
jmp 0x1003a1de
and dword [ebp - 0x27c], 0
mov eax, dword [ebp - 0x170]
cmp dword [ebp - 0x27c], eax
je 0x1003a1f8
mov dword [ebp - 0x284], 1
jmp 0x1003a1ff
and dword [ebp - 0x284], 0
mov eax, dword [ebp - 0x494]
cmp dword [ebp - 0x284], eax
jge 0x1003a219
mov dword [ebp - 0x28c], 1
jmp 0x1003a220
and dword [ebp - 0x28c], 0
mov eax, dword [ebp - 0x28c]
mov dword [ebp - 0x19c], eax
mov esi, dword [ebp - 0x19c]
push 0
lea ecx, [ebp - 0x530]
call fcn.1000f0fd
add esi, dword [eax]
jne 0x1003a24f
mov dword [ebp - 0x294], 1
jmp 0x1003a256
and dword [ebp - 0x294], 0
mov eax, dword [ebp - 0x49c]
cmp dword [ebp - 0x294], eax
jle 0x1003a270
mov dword [ebp - 0x29c], 1
jmp 0x1003a277
and dword [ebp - 0x29c], 0
cmp dword [ebp - 0x29c], 0x80454f8d
jne 0x1003a298
cmp dword [ebp - 0x2ac], 0
je 0x1003a298
mov dword [ebp - 0x2a4], 1
jmp 0x1003a29f
and dword [ebp - 0x2a4], 0
mov eax, dword [ebp - 0x1b4]
dec eax
mov dword [ebp - 0x1b4], eax
mov eax, dword [ebp - 0x1b4]
cmp eax, dword [ebp - 0x2a4]
je 0x1003a2c6
mov dword [ebp - 0x2b4], 1
jmp 0x1003a2cd
and dword [ebp - 0x2b4], 0
mov eax, dword [ebp - 0x2ac]
cmp dword [ebp - 0x2b4], eax
jle 0x1003a2e7
mov dword [ebp - 0x2bc], 1
jmp 0x1003a2ee
and dword [ebp - 0x2bc], 0
mov esi, dword [ebp - 0x2bc]
sub esi, 9
push 1
lea ecx, [ebp - 0x5b8]
call fcn.1000f0fd
sub esi, dword [eax]
je 0x1003a31d
cmp dword [ebp - 0x4a4], 0
je 0x1003a31d
mov dword [ebp - 0x2c4], 1
jmp 0x1003a324
and dword [ebp - 0x2c4], 0
push dword [ebp - 0x74]
lea ecx, [ebp - 0x5b8]
call fcn.1000f0fd
mov eax, dword [eax]
sub eax, dword [ebp - 0x2c4]
cmp eax, dword [ebp - 0x4ac]
jg 0x1003a357
cmp dword [ebp - 0x19c], 0
je 0x1003a357
mov dword [ebp - 0x168], 1
jmp 0x1003a35e
and dword [ebp - 0x168], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x168]
mov dword [ebp + eax - 0x81c], ecx
mov eax, dword [ebp - 0x2cc]
cmp dword [ebp - 0x168], eax
jl 0x1003a38b
mov dword [ebp - 0x2d4], 1
jmp 0x1003a392
and dword [ebp - 0x2d4], 0
mov eax, dword [ebp - 0x170]
cmp dword [ebp - 0x2d4], eax
jl 0x1003a3ac
mov dword [ebp - 0x2e4], 1
jmp 0x1003a3b3
and dword [ebp - 0x2e4], 0
mov eax, dword [ebp - 0x2dc]
cmp dword [ebp - 0x2e4], eax
jl 0x1003a3cd
mov dword [ebp - 0x2ec], 1
jmp 0x1003a3d4
and dword [ebp - 0x2ec], 0
mov eax, dword [ebp - 0x2ec]
inc eax
mov dword [ebp - 0x4b4], eax
mov byte [ebp - 4], 0x10
lea ecx, [ebp - 0x530]
call fcn.1000f0f8
jmp 0x10039fc6
mov byte [ebp - 4], 0xf
lea ecx, [ebp - 0x64c]
call fcn.1000f0f8
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x5b8]
call fcn.1000f0f8
and dword [ebp - 0x178], 0
jmp 0x1003a432
mov eax, dword [ebp - 0x178]
inc eax
mov dword [ebp - 0x178], eax
mov eax, dword [ebp - 0x28]
add eax, 0x28
mov dword [ebp - 0x28], eax
mov eax, dword [ebp - 0xdc]
mov eax, dword [eax]
movzx eax, word [eax + 6]
cmp dword [ebp - 0x178], eax
jge 0x1003ad85
mov dword [ebp - 0x7c], 0x9b54
mov dword [ebp - 0x314], 0xfab8c3ad
mov dword [ebp - 0x2f4], 0x214a9bac
mov dword [ebp - 0x4bc], 0xffffffff
mov byte [ebp - 0x3d], 0
movzx eax, byte [ebp - 0x3d]
test eax, eax
je 0x1003a48c
push 1
push 1
push 0x2b95
call fcn.100333cb
add esp, 0xc
mov eax, dword [ebp - 0x7c]
mov dword [ebp - 0x728], eax
mov eax, dword [ebp - 0x7c]
mov dword [ebp - 0x2f4], eax
cmp dword [ebp - 0x2f4], 0x843631e1
jne 0x1003a4b6
mov dword [ebp - 0x2fc], 1
jmp 0x1003a4bd
and dword [ebp - 0x2fc], 0
mov eax, dword [ebp - 0x7c]
cmp eax, dword [ebp - 0x2fc]
je 0x1003a4dd
mov eax, 0xc58bdfad
test eax, eax
je 0x1003a4dd
mov dword [ebp - 0x304], 1
jmp 0x1003a4e4
and dword [ebp - 0x304], 0
mov eax, dword [ebp - 0x7c]
sub eax, dword [ebp - 0x304]
jne 0x1003a4fe
cmp dword [ebp - 0x7c], 0
jne 0x1003a4fe
and dword [ebp - 0x1ec], 0
jmp 0x1003a508
mov dword [ebp - 0x1ec], 1
mov eax, dword [ebp - 0x1ec]
add eax, 0x38ff74eb
cmp eax, 0x64a9
jle 0x1003a526
mov dword [ebp - 0x31c], 1
jmp 0x1003a52d
and dword [ebp - 0x31c], 0
mov eax, dword [ebp - 0x7c]
mov dword [ebp - 0x314], eax
mov eax, dword [ebp - 0x314]
cmp eax, dword [ebp - 0x31c]
jle 0x1003a550
mov dword [ebp - 0x324], 1
jmp 0x1003a557
and dword [ebp - 0x324], 0
mov eax, dword [ebp - 0x324]
mov dword [ebp - 0x4bc], eax
mov eax, dword [ebp - 0x28]
cmp dword [eax + 0x10], 0
jne 0x1003ac15
mov dword [ebp - 0x24], 0xfffffffc
mov dword [ebp - 0x188], 0xfbfc
mov dword [ebp - 0x64], 0xb26d5d64
mov dword [ebp - 0x600], 0xd88101ae
mov dword [ebp - 0x5fc], 0xd88101ae
mov dword [ebp - 0x5f8], 0xd88101ae
mov dword [ebp - 0x5f4], 0xd88101ae
mov dword [ebp - 0x7c8], 0x7b48
mov dword [ebp - 0x24], 0
jmp 0x1003a5ca
mov eax, dword [ebp - 0x24]
dec eax
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 0xfffffff5
jl 0x1003a931
mov dword [ebp - 0x84], 0x4800fa7
mov dword [ebp - 0x384], 0xa31c0a9c
mov dword [ebp - 0x190], 0xffffffff
mov eax, dword [ebp - 0x84]
mov dword [ebp - 0x730], eax
cmp dword [ebp - 0x24], 0
jne 0x1003a610
mov dword [ebp - 0x32c], 1
jmp 0x1003a617
and dword [ebp - 0x32c], 0
mov eax, dword [ebp - 0x84]
cmp dword [ebp - 0x32c], eax
jg 0x1003a631
mov dword [ebp - 0x334], 1
jmp 0x1003a638
and dword [ebp - 0x334], 0
mov eax, dword [ebp - 0x24]
cmp dword [ebp - 0x334], eax
jle 0x1003a64f
mov dword [ebp - 0x33c], 1
jmp 0x1003a656
and dword [ebp - 0x33c], 0
mov eax, dword [ebp - 0x24]
cmp dword [ebp - 0x33c], eax
je 0x1003a66d
mov dword [ebp - 0x344], 1
jmp 0x1003a674
and dword [ebp - 0x344], 0
cmp dword [ebp - 0x344], 0xfffffff7
je 0x1003a689
mov dword [ebp - 0x34c], 1
jmp 0x1003a690
and dword [ebp - 0x34c], 0
cmp dword [ebp - 0x34c], 0x53fc2f92
jge 0x1003a6a8
mov dword [ebp - 0x354], 1
jmp 0x1003a6af
and dword [ebp - 0x354], 0
mov eax, dword [ebp - 0x24]
add eax, dword [ebp - 0x354]
jne 0x1003a6cc
cmp dword [ebp - 0x84], 0
jne 0x1003a6cc
and dword [ebp - 0x35c], 0
jmp 0x1003a6d6
mov dword [ebp - 0x35c], 1
mov eax, dword [ebp - 0x188]
cmp dword [ebp - 0x35c], eax
jle 0x1003a6f0
mov dword [ebp - 0x364], 1
jmp 0x1003a6f7
and dword [ebp - 0x364], 0
mov eax, dword [ebp - 0x84]
imul eax, dword [ebp - 0x364]
cmp eax, 8
jbe 0x1003a71b
cmp dword [ebp - 0x24], 0
je 0x1003a71b
mov dword [ebp - 0x36c], 1
jmp 0x1003a722
and dword [ebp - 0x36c], 0
mov eax, dword [ebp - 0x188]
cmp dword [ebp - 0x36c], eax
jg 0x1003a73c
mov dword [ebp - 0x374], 1
jmp 0x1003a743
and dword [ebp - 0x374], 0
mov eax, dword [ebp - 0x374]
mov dword [ebp - 0x64], eax
cmp dword [ebp - 0x64], 0
jne 0x1003a764
cmp dword [ebp - 0x84], 0
jne 0x1003a764
and dword [ebp - 0x37c], 0
jmp 0x1003a76e
mov dword [ebp - 0x37c], 1
mov eax, dword [ebp - 0x37c]
mov dword [ebp - 0x384], eax
cmp dword [ebp - 0x384], 0xf9c3
jge 0x1003a792
mov dword [ebp - 0x38c], 1
jmp 0x1003a799
and dword [ebp - 0x38c], 0
cmp dword [ebp - 0x38c], 0x129e
jne 0x1003a7b1
mov dword [ebp - 0x394], 1
jmp 0x1003a7b8
and dword [ebp - 0x394], 0
cmp dword [ebp - 0x394], 0x25fcc58a
jl 0x1003a7d0
mov dword [ebp - 0x180], 1
jmp 0x1003a7d7
and dword [ebp - 0x180], 0
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x180]
mov dword [ebp + eax - 0x600], ecx
cmp dword [ebp - 0x180], 0xfff6
jae 0x1003a802
mov dword [ebp - 0x39c], 1
jmp 0x1003a809
and dword [ebp - 0x39c], 0
mov eax, dword [ebp - 0x188]
cmp dword [ebp - 0x39c], eax
jl 0x1003a82c
mov eax, 0x4a2c
test eax, eax
je 0x1003a82c
mov dword [ebp - 0x3a4], 1
jmp 0x1003a833
and dword [ebp - 0x3a4], 0
mov eax, dword [ebp - 0x84]
cmp dword [ebp - 0x3a4], eax
je 0x1003a84d
mov dword [ebp - 0x3ac], 1
jmp 0x1003a854
and dword [ebp - 0x3ac], 0
mov eax, dword [ebp - 0x3ac]
mov dword [ebp - 0x190], eax
mov dword [ebp - 0x64], 0xffffffee
jmp 0x1003a870
mov eax, dword [ebp - 0x64]
inc eax
mov dword [ebp - 0x64], eax
cmp dword [ebp - 0x64], 0xb
jle 0x1003a92c
mov dword [ebp - 0x3bc], 1
mov dword [ebp - 0x4cc], 4
mov eax, dword [ebp - 0x190]
mov dword [ebp - 0x790], eax
cmp dword [ebp - 0x3bc], 0
je 0x1003a8b8
mov eax, 0x9003
test eax, eax
je 0x1003a8b8
mov dword [ebp - 0x4c4], 1
jmp 0x1003a8bf
and dword [ebp - 0x4c4], 0
mov eax, dword [ebp - 0x190]
mov dword [ebp - 0x738], eax
mov eax, 0x73ee
cmp eax, 1
je 0x1003a8e1
mov dword [ebp - 0x3b4], 1
jmp 0x1003a8e8
and dword [ebp - 0x3b4], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x3b4]
mov dword [ebp + eax - 0x600], ecx
push 0xa8a
push 0x1533
push 0x53fe
push 0x6f4c
lea eax, [ebp - 0x3bc]
push eax
push 0
lea eax, [ebp - 0x4cc]
push eax
call fcn.100424cb
add esp, 0x1c
jmp 0x1003a869
jmp 0x1003a5c3
lea eax, [ebp - 0x28]
push eax
push 0x3916
push 1
push 0
push 0x6a3b
lea eax, [ebp - 0x1a0]
push eax
lea eax, [ebp - 0x414]
push eax
push 0x51d6
lea eax, [ebp - 0x4d4]
push eax
push 0x542f
push 0
push 0x211d
push 0x1cb6
call fcn.100402aa
add esp, 0x34
push 1
lea ecx, [ebp - 0x1d8]
call fcn.1000f096
mov dword [ebp - 4], 0x12
mov dword [ebp - 0x6c], 0xa43d9532
mov dword [ebp - 0x198], 0x2c4475ee
push 2
lea ecx, [ebp - 0x658]
call fcn.1000f096
mov byte [ebp - 4], 0x13
push 1
push 0x6d00
push 0x3445
push 0xc41
push 0x123d
push 1
push 0
push 0x53b3
push 0x6a43
lea eax, [ebp - 0x1d8]
push eax
push 0xee3
push 0x12f4
lea eax, [ebp - 0x4dc]
push eax
call fcn.1003ec35
add esp, 0x34
push 0x1d43
push 0x20cc
push 1
push 0
lea eax, [ebp - 0x658]
push eax
push 0x3b76
push 0x7f15
lea eax, [ebp - 0x4dc]
push eax
push 0x5074
push 0x530e
push 1
push 0x756f
push 0x55b2
call fcn.100402aa
add esp, 0x34
push 0
push 0x3b88
push 0x7c2e
lea eax, [ebp - 0x6c]
push eax
lea eax, [ebp - 0x1d8]
push eax
push 0
call fcn.10034cc9
add esp, 0x18
mov eax, dword [ebp - 0x6c]
mov dword [ebp - 0x198], eax
mov esi, dword [ebp - 0x198]
push 0
lea ecx, [ebp - 0x1d8]
call fcn.1000f0fd
cmp esi, dword [eax]
je 0x1003aa81
mov dword [ebp - 0x4e4], 1
jmp 0x1003aa88
and dword [ebp - 0x4e4], 0
push 0
lea ecx, [ebp - 0x1d8]
call fcn.1000f0fd
mov eax, dword [ebp - 0x198]
add eax, 0x5ebfaadc
cmp eax, 0x223b16aa
jg 0x1003aab3
mov dword [ebp - 0x3c4], 1
jmp 0x1003aaba
and dword [ebp - 0x3c4], 0
cmp dword [ebp - 0x3c4], 0xffff6142
jg 0x1003aad2
mov dword [ebp - 0x3cc], 1
jmp 0x1003aad9
and dword [ebp - 0x3cc], 0
push 0
lea ecx, [ebp - 0x1d8]
call fcn.1000f0fd
mov esi, eax
push 0
lea ecx, [ebp - 0x1d8]
call fcn.1000f0fd
mov ecx, dword [ebp - 0x3cc]
add ecx, dword [eax]
add ecx, dword [esi]
je 0x1003ab1f
push 0
lea ecx, [ebp - 0x1d8]
call fcn.1000f0fd
cmp dword [eax], 0
je 0x1003ab1f
mov dword [ebp - 0x3d4], 1
jmp 0x1003ab26
and dword [ebp - 0x3d4], 0
push 0
lea ecx, [ebp - 0x1d8]
call fcn.1000f0fd
mov ecx, dword [ebp - 0x3d4]
cmp ecx, dword [eax]
je 0x1003ab49
mov dword [ebp - 0x3dc], 1
jmp 0x1003ab50
and dword [ebp - 0x3dc], 0
mov eax, dword [ebp - 0x3dc]
sub eax, dword [ebp - 0x6c]
mov dword [ebp - 0x3e4], eax
push 1
lea ecx, [ebp - 0x658]
call fcn.1000f0fd
mov ecx, dword [ebp - 0x3e4]
mov dword [eax], ecx
mov eax, dword [ebp - 0x6c]
cmp dword [ebp - 0x3e4], eax
jne 0x1003ab8b
mov dword [ebp - 0x3ec], 1
jmp 0x1003ab92
and dword [ebp - 0x3ec], 0
mov eax, dword [ebp - 0x6c]
cmp eax, dword [ebp - 0x3ec]
je 0x1003aba9
mov dword [ebp - 0x3f4], 1
jmp 0x1003abb0
and dword [ebp - 0x3f4], 0
push 0
lea ecx, [ebp - 0x1d8]
call fcn.1000f0fd
mov esi, dword [ebp - 0x3f4]
sub esi, dword [eax]
push 0
lea ecx, [ebp - 0x1d8]
call fcn.1000f0fd
cmp esi, dword [eax]
jle 0x1003abe2
mov dword [ebp - 0x3fc], 1
jmp 0x1003abe9
and dword [ebp - 0x3fc], 0
mov eax, dword [ebp - 0x3fc]
mov dword [ebp - 0x6c], eax
mov byte [ebp - 4], 0x12
lea ecx, [ebp - 0x658]
call fcn.1000f0f8
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x1d8]
call fcn.1000f0f8
jmp 0x1003a41c
push 2
lea ecx, [ebp - 0x634]
call fcn.1000f096
mov dword [ebp - 4], 0x14
mov dword [ebp - 0x7f4], 0xd4914d2e
mov dword [ebp - 0x740], 1
mov dword [ebp - 0x7a0], 0xffffffff
mov dword [ebp - 0x748], 0xffffffff
mov dword [ebp - 0x7d0], 0xf38c0887
mov dword [ebp - 0x698], 0xb8ae505b
mov dword [ebp - 0x40c], 0x71a6e483
push 0
push 0x1875
lea eax, [ebp - 0x634]
push eax
push 0x222b
lea eax, [ebp - 0xb4]
push eax
call fcn.1004041b
add esp, 0x14
mov dword [ebp - 0xb4], 0
jmp 0x1003acaa
mov eax, dword [ebp - 0xb4]
inc eax
mov dword [ebp - 0xb4], eax
cmp dword [ebp - 0xb4], 2
jge 0x1003acc6
mov eax, dword [ebp - 0xb4]
mov dword [ebp + eax*4 - 0x844], 0xfffffffa
jmp 0x1003ac9d
push 0
lea ecx, [ebp - 0x634]
call fcn.1000f0fd
mov dword [ebp - 0x404], eax
mov eax, dword [ebp - 0x404]
mov eax, dword [eax]
dec eax
mov ecx, dword [ebp - 0x404]
mov dword [ecx], eax
mov eax, dword [ebp - 0x40c]
dec eax
mov dword [ebp - 0x40c], eax
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x634]
call fcn.1000f0f8
push 4
push 0x1000
mov eax, dword [ebp - 0x28]
push dword [eax + 0x10]
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x414]
add ecx, dword [eax + 0xc]
push ecx
push 0x6c55
push 0x5c17
call fcn.11236000
pop ecx
pop ecx
call eax
mov dword [ebp - 0x1a0], eax
mov eax, dword [ebp - 0x28]
push dword [eax + 0x10]
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x4ec]
add ecx, dword [eax + 0x14]
push ecx
push dword [ebp - 0x1a0]
call fcn.10025d3a
add esp, 0xc
push 0x6151
lea eax, [ebp - 0x1a0]
push eax
push 0
lea eax, [ebp - 0x28]
push eax
push 0
push 0x22a0
push 0x3f5
call fcn.1003f5ef
add esp, 0x1c
jmp 0x1003a41c
jmp 0x1003adaa
mov eax, dword [ebp + 0x1c]
mov dword [ebp - 0x4f4], eax
push 0
push dword [ebp - 0x4f4]
push 0x5d6b
push 0x6d41
call fcn.1003fb4b
add esp, 0x10
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop esi
mov esp, ebp
pop ebp
ret