Function at 0x10031f0a
Capabilities:
Enumerate pe sections

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x10067f4f
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0xbd4
push esi
push edi
movzx eax, byte [ebp + 0x1c]
test eax, eax
je 0x10031f73
mov eax, dword [ebp + 0x10]
mov dword [ebp - 0x6d4], eax
mov eax, dword [ebp + 0x18]
mov dword [ebp - 0x744], eax
push 0x7e30
push 0x5dd4
push 1
push dword [ebp - 0x744]
push 0x647f
push 0x30d4
push dword [ebp - 0x6d4]
call fcn.1003748e
add esp, 0x1c
jmp 0x1003747e
lea eax, [ebp + 0x20]
mov dword [ebp - 0x6dc], eax
mov eax, dword [ebp + 0x24]
mov dword [ebp - 0x6e4], eax
mov eax, dword [ebp + 0x14]
mov dword [ebp - 0x704], eax
mov eax, dword [ebp + 0xc]
mov dword [ebp - 0x6fc], eax
mov eax, dword [ebp + 8]
mov dword [ebp - 0x70c], eax
mov eax, dword [ebp - 0x6dc]
movzx eax, byte [eax]
test eax, eax
je 0x10031fd6
mov eax, dword [ebp - 0x6e4]
mov dword [ebp - 0x6ec], eax
mov eax, dword [ebp - 0x6ec]
mov dword [ebp - 0x6f4], eax
mov eax, dword [ebp - 0x6f4]
mov dword [eax], 0xffffffff
jmp 0x1003747e
mov eax, dword [ebp - 0x6fc]
mov dword [ebp - 0x638], eax
mov eax, dword [ebp - 0x704]
mov dword [ebp - 0x65c], eax
mov eax, dword [ebp - 0x70c]
mov dword [ebp - 0x15c], eax
mov dword [ebp - 0x9a0], 0xffffffff
mov byte [ebp - 0x8b], 0
movzx eax, byte [ebp - 0x8b]
test eax, eax
je 0x10032027
push 0
push 1
push 0x6ab5
call fcn.10025e24
add esp, 0xc
mov byte [ebp - 0x75], 0
push 0x32f6
push 0x5318
push 0x108b
push 1
push 0
push 0x2177
lea eax, [ebp - 0x75]
push eax
push 0
call fcn.10025ce3
add esp, 0x20
push 0x5102
push 0
push 0x2fe4
push 0x73ef
push 1
call fcn.1002556e
add esp, 0x14
mov dword [ebp - 0xf8], 3
mov dword [ebp - 0x1a4], 0xfffffffb
mov dword [ebp - 0x8c8], 0x2304b25b
mov dword [ebp - 0x8c4], 0x2304b25b
mov dword [ebp - 0x8c0], 0x2304b25b
mov dword [ebp - 0x8bc], 0x2304b25b
lea ecx, [ebp - 0x21f]
call fcn.1000dbe3
push eax
lea eax, [ebp - 0x8b8]
push eax
lea eax, [ebp - 0x8c8]
push eax
lea ecx, [ebp - 0xb2c]
call fcn.1000dbe6
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0xa34]
call fcn.1000db92
and dword [ebp - 4], 0
mov dword [ebp - 0x71c], 0xffff
mov dword [ebp - 0x1a4], 0xe
jmp 0x10032104
mov eax, dword [ebp - 0x1a4]
dec eax
mov dword [ebp - 0x1a4], eax
cmp dword [ebp - 0x1a4], 0xffffffe6
jg 0x10032189
mov dword [ebp - 0x714], 0xffffffff
mov dword [ebp - 0xac0], 0xffffffff
mov dword [ebp - 0x138], 0
jmp 0x1003213a
mov eax, dword [ebp - 0x138]
inc eax
mov dword [ebp - 0x138], eax
cmp dword [ebp - 0x138], 3
jge 0x10032156
mov eax, dword [ebp - 0x138]
mov dword [ebp + eax*4 - 0xb8c], 0
jmp 0x1003212d
push 0
lea eax, [ebp - 0x714]
push eax
lea eax, [ebp - 0xa34]
push eax
call fcn.10031530
add esp, 0xc
push 0x39d1
lea eax, [ebp - 0x71c]
push eax
push 0
call fcn.1002e301
add esp, 0xc
jmp 0x100320f7
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xa34]
call fcn.1000dbb8
mov dword [ebp - 0xf8], 0
jmp 0x100321b1
mov eax, dword [ebp - 0xf8]
inc eax
mov dword [ebp - 0xf8], eax
cmp dword [ebp - 0xf8], 0x1b
jg 0x10032c61
mov dword [ebp - 0x1a0], 0x432a2768
mov dword [ebp - 0x9c], 0xfffffff9
mov dword [ebp - 0x180], 0
jmp 0x100321eb
mov eax, dword [ebp - 0x180]
inc eax
mov dword [ebp - 0x180], eax
cmp dword [ebp - 0x180], 2
jge 0x10032207
mov eax, dword [ebp - 0x180]
mov dword [ebp + eax*4 - 0x84c], 6
jmp 0x100321de
cmp dword [ebp - 0x9c], 0
je 0x10032225
cmp dword [ebp - 0x9c], 0
je 0x10032225
mov dword [ebp - 0x1d0], 1
jmp 0x1003222c
and dword [ebp - 0x1d0], 0
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x1d0]
mov dword [ebp + eax - 0x84c], ecx
cmp dword [ebp - 0x1d0], 0xffffffff
jg 0x10032254
mov dword [ebp - 0x344], 1
jmp 0x1003225b
and dword [ebp - 0x344], 0
imul eax, dword [ebp - 0x344], 0xffff
test eax, eax
je 0x10032294
mov byte [ebp - 0x8e], 0
movzx eax, byte [ebp - 0x8e]
test eax, eax
je 0x1003228f
push 0x4a18
push 0x58aa
push 0
call fcn.10029d3d
add esp, 0xc
jmp 0x10032537
mov dword [ebp - 0x24], 1
push 2
lea ecx, [ebp - 0x954]
call fcn.1000db36
mov dword [ebp - 4], 1
push 0x229d
push 0
push 0x3990
lea eax, [ebp - 0xacc]
push eax
lea eax, [ebp - 0x954]
push eax
push 0x3760
call fcn.1003090f
add esp, 0x18
cmp dword [ebp - 0x24], 0
je 0x10032342
mov dword [ebp - 0x58c], 0x7278fa8f
mov dword [ebp - 0x9c], 1
jmp 0x100322ff
mov eax, dword [ebp - 0x9c]
dec eax
mov dword [ebp - 0x9c], eax
cmp dword [ebp - 0x9c], 0
jl 0x1003233d
mov dword [ebp - 0x24], 0
jmp 0x10032318
mov eax, dword [ebp - 0x24]
inc eax
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 2
jge 0x1003232e
mov eax, dword [ebp - 0x24]
mov dword [ebp + eax*4 - 0x84c], 1
jmp 0x10032311
mov eax, dword [ebp - 0x58c]
dec eax
mov dword [ebp - 0x58c], eax
jmp 0x100322f2
jmp 0x100324fe
mov byte [ebp - 0x77], 0
mov dword [ebp - 0x73c], 0x1577
cmp dword [ebp - 0x73c], 0x70a
jge 0x100324d4
call fcn.1004f391
push 0x20
pop ecx
imul ecx, ecx, 0
add eax, ecx
push eax
push 0x1000a258
push 0x1000a25c
call fcn.1004fa3e
add esp, 0xc
call fcn.1004f391
push 0x20
pop ecx
shl ecx, 0
add eax, ecx
push eax
push 0x1000a264
push 0x1000a268
call fcn.1004fa3e
add esp, 0xc
and dword [ebp - 0x1dc], 0
and dword [ebp - 0xf0], 0
jmp 0x100323bd
mov eax, dword [ebp - 0xf0]
inc eax
mov dword [ebp - 0xf0], eax
cmp dword [ebp - 0xf0], 9
jge 0x100323f9
mov eax, dword [ebp - 0xf0]
lea eax, [ebp + eax*4 - 0xb24]
push eax
mov ecx, 0x106585d8
call fcn.1001458f
mov eax, dword [ebp - 0xf0]
mov ecx, dword [ebp - 0x1dc]
add ecx, dword [ebp + eax*4 - 0xb24]
mov dword [ebp - 0x1dc], ecx
jmp 0x100323b0
and dword [ebp - 0xa4], 0
jmp 0x1003240f
mov eax, dword [ebp - 0xa4]
inc eax
mov dword [ebp - 0xa4], eax
cmp dword [ebp - 0xa4], 8
jge 0x100324d4
mov eax, dword [ebp - 0xa4]
inc eax
mov dword [ebp - 0x108], eax
jmp 0x10032438
mov eax, dword [ebp - 0x108]
inc eax
mov dword [ebp - 0x108], eax
cmp dword [ebp - 0x108], 9
jge 0x100324cf
mov eax, dword [ebp - 0xa4]
mov ecx, dword [ebp - 0x1dc]
sub ecx, dword [ebp + eax*4 - 0xb24]
mov eax, dword [ebp - 0x108]
sub ecx, dword [ebp + eax*4 - 0xb24]
cmp ecx, 0x58
jne 0x100324ca
and dword [ebp - 0xcc], 0
jmp 0x10032480
mov eax, dword [ebp - 0xcc]
inc eax
mov dword [ebp - 0xcc], eax
cmp dword [ebp - 0xcc], 9
jge 0x100324ca
mov eax, dword [ebp - 0xcc]
cmp eax, dword [ebp - 0xa4]
je 0x100324c8
mov eax, dword [ebp - 0xcc]
cmp eax, dword [ebp - 0x108]
je 0x100324c8
push fcn.10017304
mov eax, dword [ebp - 0xcc]
push dword [ebp + eax*4 - 0xb24]
mov ecx, 0x106584b8
call fcn.1001478a
mov ecx, eax
call fcn.1001477e
jmp 0x10032473
jmp 0x1003242b
jmp 0x10032402
movzx eax, byte [ebp - 0x77]
test eax, eax
je 0x100324e4
push 0
call fcn.100314d8
pop ecx
mov byte [ebp - 0x90], 0
movzx eax, byte [ebp - 0x90]
test eax, eax
je 0x100324fe
push 0
call fcn.100288f2
pop ecx
mov dword [ebp - 0x24], 7
jmp 0x1003250e
mov eax, dword [ebp - 0x24]
dec eax
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 0xfffffffa
jg 0x10032528
mov esi, dword [ebp - 0x24]
push 0
lea ecx, [ebp - 0x954]
call fcn.1000dbd4
mov dword [eax], esi
jmp 0x10032507
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x954]
call fcn.1000dbb8
mov dword [ebp - 0x75c], 0x7a73d2d6
cmp dword [ebp - 0xf8], 0
je 0x1003254f
jmp 0x10032c61
push 2
lea ecx, [ebp - 0x60c]
call fcn.1000db36
mov dword [ebp - 4], 2
push 3
lea ecx, [ebp - 0x600]
call fcn.1000db36
mov byte [ebp - 4], 3
mov dword [ebp - 0x634], 0x2326
cmp dword [ebp - 0x634], 0x748
jge 0x100326fd
lea eax, [ebp - 0x5c8]
push eax
lea eax, [ebp - 0xac8]
push eax
lea eax, [ebp - 0x5d4]
push eax
lea eax, [ebp - 0x85c]
push eax
push 0x1000a2a8
call fcn.1004d4be
add esp, 0x14
test eax, eax
je 0x100326fd
movsd xmm0, qword [ebp - 0x85c]
ucomisd xmm0, qword [0x1000a410]
lahf
test ah, 0x44
jnp 0x100326fd
movsd xmm0, qword [0x1000a410]
movsd qword [ebp - 0x290], xmm0
mov dword [ebp - 0x140], 1
movsd xmm0, qword [ebp - 0x5c8]
divsd xmm0, qword [0x1000a488]
movsd qword [ebp - 0x5c8], xmm0
movsd xmm0, qword [ebp - 0x5c8]
mulsd xmm0, qword [ebp - 0x5d4]
movsd qword [ebp - 0x5c8], xmm0
xor eax, eax
inc eax
je 0x100326f8
movsd xmm0, qword [ebp - 0x5d4]
comisd xmm0, xmmword [0x1000a410]
jbe 0x10032656
movsd xmm0, qword [ebp - 0x290]
addsd xmm0, qword [ebp - 0x5d4]
movsd qword [ebp - 0x290], xmm0
movsd xmm0, qword [ebp - 0x290]
subsd xmm0, qword [0x1000a420]
comisd xmm0, xmmword [ebp - 0x85c]
jb 0x10032684
push dword [ebp - 0x140]
push 0x1000a2b8
call fcn.1004d076
pop ecx
pop ecx
jmp 0x100326f8
movsd xmm0, qword [ebp - 0x290]
subsd xmm0, qword [ebp - 0xac8]
movsd qword [ebp - 0x290], xmm0
movsd xmm0, qword [ebp - 0x290]
addsd xmm0, qword [0x1000a420]
movsd xmm1, qword [0x1000a410]
comisd xmm1, xmm0
jbe 0x100326ce
push dword [ebp - 0x140]
push 0x1000a2cc
call fcn.1004d076
pop ecx
pop ecx
jmp 0x100326f8
movsd xmm0, qword [ebp - 0x5d4]
subsd xmm0, qword [ebp - 0x5c8]
movsd qword [ebp - 0x5d4], xmm0
mov eax, dword [ebp - 0x140]
inc eax
mov dword [ebp - 0x140], eax
jmp 0x10032623
jmp 0x1003258e
push 3
lea ecx, [ebp - 0x7e4]
call fcn.1000db36
mov byte [ebp - 4], 4
mov dword [ebp - 0x1e4], 0xffffffff
mov dword [ebp - 0x59c], 0xffffffff
mov dword [ebp - 0x74c], 0xd91f06e8
mov dword [ebp - 0xad4], 0x8110
mov dword [ebp - 0x10], 0
jmp 0x10032746
mov eax, dword [ebp - 0x10]
inc eax
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], 2
jge 0x1003275f
push dword [ebp - 0x10]
lea ecx, [ebp - 0x60c]
call fcn.1000dbd4
or dword [eax], 0xffffffff
jmp 0x1003273f
lea eax, [ebp - 0x600]
push eax
lea eax, [ebp - 0x10]
push eax
push 0
call fcn.10029c59
add esp, 0xc
mov dword [ebp - 0x10], 0
jmp 0x10032784
mov eax, dword [ebp - 0x10]
inc eax
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], 3
jge 0x100327a0
push dword [ebp - 0x10]
lea ecx, [ebp - 0x7e4]
call fcn.1000dbd4
mov dword [eax], 0x621e
jmp 0x1003277d
mov dword [ebp - 0x10], 0
jmp 0x100327b0
mov eax, dword [ebp - 0x10]
inc eax
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], 2
jge 0x100327c6
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0x9d0], 0xffffffff
jmp 0x100327a9
mov dword [ebp - 0x10], 0
jmp 0x100327d6
mov eax, dword [ebp - 0x10]
inc eax
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], 1
jge 0x100327ec
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0x1ec], 1
jmp 0x100327cf
push 0
lea ecx, [ebp - 0x60c]
call fcn.1000dbd4
and dword [eax], 0
jmp 0x10032822
push 0
lea ecx, [ebp - 0x60c]
call fcn.1000dbd4
mov dword [ebp - 0x594], eax
mov eax, dword [ebp - 0x594]
mov eax, dword [eax]
dec eax
mov ecx, dword [ebp - 0x594]
mov dword [ecx], eax
push 0
lea ecx, [ebp - 0x60c]
call fcn.1000dbd4
cmp dword [eax], 0xffffffe7
jle 0x10032893
mov dword [ebp - 0x114], 0xb9da4d07
mov dword [ebp - 0x114], 2
jmp 0x10032857
mov eax, dword [ebp - 0x114]
dec eax
mov dword [ebp - 0x114], eax
cmp dword [ebp - 0x114], 0
jl 0x1003288e
mov byte [ebp - 0x79], 0
push 0
push 0
lea eax, [ebp - 0x79]
push eax
call fcn.10029a94
add esp, 0xc
push dword [ebp - 0x114]
lea ecx, [ebp - 0x600]
call fcn.1000dbd4
cmp dword [eax], 0
je 0x1003288c
jmp 0x1003288e
jmp 0x1003284a
jmp 0x100327fe
push 2
lea ecx, [ebp - 0x600]
call fcn.1000dbd4
mov esi, eax
push 0
lea ecx, [ebp - 0x60c]
call fcn.1000dbd4
mov ecx, dword [esi]
cmp ecx, dword [eax]
jle 0x100328c1
mov dword [ebp - 0x224], 1
jmp 0x100328c8
and dword [ebp - 0x224], 0
push 1
lea ecx, [ebp - 0x7e4]
call fcn.1000dbd4
mov dword [eax], 0x4c3f
mov dword [ebp - 0x59c], 1
mov esi, dword [ebp - 0x59c]
push 0
lea ecx, [ebp - 0x600]
call fcn.1000dbd4
cmp esi, dword [eax]
jl 0x10032908
mov dword [ebp - 0x5a4], 1
jmp 0x1003290f
and dword [ebp - 0x5a4], 0
push 2
lea ecx, [ebp - 0x7e4]
call fcn.1000dbd4
mov eax, dword [eax]
mov dword [ebp - 0x1e4], eax
mov eax, dword [ebp - 0x1e4]
cmp eax, dword [ebp - 0x5a4]
jge 0x1003293e
mov dword [ebp - 0x254], 1
jmp 0x10032945
and dword [ebp - 0x254], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x254]
mov dword [ebp + eax - 0x9d0], ecx
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x1ec]
cmp dword [ebp - 0x254], eax
jne 0x10032979
mov dword [ebp - 0x5ac], 1
jmp 0x10032980
and dword [ebp - 0x5ac], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x1ec]
cmp dword [ebp - 0x5ac], eax
jl 0x100329a7
cmp dword [ebp - 0x1e4], 0
jne 0x100329a7
and dword [ebp - 0x5b4], 0
jmp 0x100329b1
mov dword [ebp - 0x5b4], 1
push 1
lea ecx, [ebp - 0x60c]
call fcn.1000dbd4
mov ecx, dword [ebp - 0x224]
mov dword [eax], ecx
mov eax, dword [ebp - 0x224]
cmp eax, dword [ebp - 0x5b4]
je 0x100329e0
mov dword [ebp - 0x248], 1
jmp 0x100329e7
and dword [ebp - 0x248], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x248]
mov dword [ebp + eax - 0x1ec], ecx
push 0
lea ecx, [ebp - 0x600]
call fcn.1000dbd4
mov esi, dword [ebp - 0x248]
add esi, dword [eax]
push 1
lea ecx, [ebp - 0x600]
call fcn.1000dbd4
cmp esi, dword [eax]
jle 0x10032a2c
mov dword [ebp - 0x5bc], 1
jmp 0x10032a33
and dword [ebp - 0x5bc], 0
mov eax, dword [ebp - 0x5bc]
mov dword [ebp - 0x74c], eax
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x7e4]
call fcn.1000dbb8
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x600]
call fcn.1000dbb8
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x60c]
call fcn.1000dbb8
mov dword [ebp - 0x1a0], 0
jmp 0x10032a85
mov eax, dword [ebp - 0x1a0]
dec eax
mov dword [ebp - 0x1a0], eax
cmp dword [ebp - 0x1a0], 0xffffffe9
je 0x10032c5c
mov dword [ebp - 0xac], 0x7ddc85f7
mov dword [ebp - 0x5e4], 1
mov dword [ebp - 0x5ec], 0x7008b15e
mov dword [ebp - 0xac], 0
jmp 0x10032ac9
mov eax, dword [ebp - 0xac]
dec eax
mov dword [ebp - 0xac], eax
cmp dword [ebp - 0xac], 0xfffffff0
jl 0x10032c4d
mov dword [ebp - 0x61c], 0x9b546158
mov dword [ebp - 0x618], 0x9b546158
mov dword [ebp - 0x614], 0x9b546158
mov dword [ebp - 0x610], 0x9b546158
mov dword [ebp - 0x148], 0
jmp 0x10032b17
mov eax, dword [ebp - 0x148]
inc eax
mov dword [ebp - 0x148], eax
cmp dword [ebp - 0x148], 2
jge 0x10032b33
mov eax, dword [ebp - 0x148]
mov dword [ebp + eax*4 - 0xa8c], 0
jmp 0x10032b0a
push 4
pop eax
imul eax, eax, 3
mov dword [ebp + eax - 0x61c], 0x1b
jmp 0x10032b61
push 4
pop eax
imul eax, eax, 3
mov eax, dword [ebp + eax - 0x61c]
dec eax
push 4
pop ecx
imul ecx, ecx, 3
mov dword [ebp + ecx - 0x61c], eax
push 4
pop eax
imul eax, eax, 3
cmp dword [ebp + eax - 0x61c], 0xffffffff
jne 0x10032c48
mov dword [ebp - 0x80], 0xffffffff
mov eax, dword [ebp - 0x80]
cmp dword [ebp - 0xac], eax
jne 0x10032b93
mov dword [ebp - 0x754], 1
jmp 0x10032b9a
and dword [ebp - 0x754], 0
mov eax, dword [ebp - 0x80]
mov dword [ebp - 0xadc], eax
cmp dword [ebp - 0x80], 0
je 0x10032bc5
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x61c], 0
je 0x10032bc5
mov dword [ebp - 0x5dc], 1
jmp 0x10032bcc
and dword [ebp - 0x5dc], 0
mov eax, dword [ebp - 0x5dc]
mov dword [ebp - 0x5e4], eax
mov eax, dword [ebp - 0x5e4]
mov dword [ebp - 0x5ec], eax
mov eax, dword [ebp - 0x5ec]
mov dword [ebp - 0xae4], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x61c]
mov dword [ebp - 0xaec], eax
mov eax, dword [ebp - 0xac]
mov dword [ebp - 0xaf4], eax
mov eax, dword [ebp - 0x80]
cmp dword [ebp - 0x80], eax
jg 0x10032c23
mov dword [ebp - 0x2a0], 1
jmp 0x10032c2a
and dword [ebp - 0x2a0], 0
mov eax, dword [ebp - 0x2a0]
mov dword [ebp - 0x80], eax
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x80]
mov dword [ebp + eax - 0xa8c], ecx
jmp 0x10032b46
jmp 0x10032abc
mov dword [ebp - 0x75c], 1
jmp 0x10032a78
jmp 0x100321a4
push 2
lea ecx, [ebp - 0x270]
call fcn.1000db36
mov dword [ebp - 4], 5
mov dword [ebp - 0x590], 0xfffffffd
mov dword [ebp - 0x3c], 0
jmp 0x10032c8f
mov eax, dword [ebp - 0x3c]
inc eax
mov dword [ebp - 0x3c], eax
cmp dword [ebp - 0x3c], 2
jge 0x10032cab
push dword [ebp - 0x3c]
lea ecx, [ebp - 0x270]
call fcn.1000dbd4
mov dword [eax], 0xdf99ff60
jmp 0x10032c88
mov dword [ebp - 0x3c], 0
jmp 0x10032cbb
mov eax, dword [ebp - 0x3c]
inc eax
mov dword [ebp - 0x3c], eax
cmp dword [ebp - 0x3c], 3
jge 0x10032cd1
mov eax, dword [ebp - 0x3c]
mov dword [ebp + eax*4 - 0xa44], 0
jmp 0x10032cb4
push 1
lea ecx, [ebp - 0x270]
call fcn.1000dbd4
mov dword [eax], 0x15
jmp 0x10032d0a
push 1
lea ecx, [ebp - 0x270]
call fcn.1000dbd4
mov dword [ebp - 0x584], eax
mov eax, dword [ebp - 0x584]
mov eax, dword [eax]
dec eax
mov ecx, dword [ebp - 0x584]
mov dword [ecx], eax
push 1
lea ecx, [ebp - 0x270]
call fcn.1000dbd4
cmp dword [eax], 0xffffffe4
jle 0x1003329b
mov dword [ebp - 0x4c], 0
mov dword [ebp - 0x2a8], 0xb400765e
mov dword [ebp - 0xb4], 0
mov dword [ebp - 0x7c4], 3
mov dword [ebp - 0x188], 0
jmp 0x10032d5e
mov eax, dword [ebp - 0x188]
inc eax
mov dword [ebp - 0x188], eax
cmp dword [ebp - 0x188], 1
jge 0x10032d7a
mov eax, dword [ebp - 0x188]
mov dword [ebp + eax*4 - 0xe8], 0x36444696
jmp 0x10032d51
mov dword [ebp - 0x4c], 0
jmp 0x10032d8a
mov eax, dword [ebp - 0x4c]
inc eax
mov dword [ebp - 0x4c], eax
cmp dword [ebp - 0x4c], 0
jg 0x10033122
mov dword [ebp - 0x88c], 0xec79cf18
mov dword [ebp - 0x888], 0xec79cf18
mov dword [ebp - 0x884], 0xec79cf18
mov dword [ebp - 0x880], 0xec79cf18
lea ecx, [ebp - 0x225]
call fcn.1000dbe3
push eax
lea eax, [ebp - 0x87c]
push eax
lea eax, [ebp - 0x88c]
push eax
lea ecx, [ebp - 0xb5c]
call fcn.1000dbe6
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0x784]
call fcn.1000db92
mov byte [ebp - 4], 6
push 2
lea ecx, [ebp - 0x784]
call fcn.1000dbd4
and dword [eax], 0
jmp 0x10032e2b
push 2
lea ecx, [ebp - 0x784]
call fcn.1000dbd4
mov dword [ebp - 0x2a4], eax
mov eax, dword [ebp - 0x2a4]
mov eax, dword [eax]
dec eax
mov ecx, dword [ebp - 0x2a4]
mov dword [ecx], eax
push 2
lea ecx, [ebp - 0x784]
call fcn.1000dbd4
cmp dword [eax], 0
jl 0x1003310e
mov dword [ebp - 0x100], 0x6887e08a
mov dword [ebp - 0x7cc], 0xfffffff7
mov dword [ebp - 0x100], 0
jmp 0x10032e6e
mov eax, dword [ebp - 0x100]
inc eax
mov dword [ebp - 0x100], eax
cmp dword [ebp - 0x100], 0
jg 0x10033109
mov dword [ebp - 0xc4], 0xffffffff
mov dword [ebp - 0xc4], 0
jmp 0x10032e9e
mov eax, dword [ebp - 0xc4]
dec eax
mov dword [ebp - 0xc4], eax
cmp dword [ebp - 0xc4], 0
jl 0x100330f4
push 1
lea ecx, [ebp - 0x774]
call fcn.1000db36
mov byte [ebp - 4], 7
mov dword [ebp - 0x2c0], 0x48968f25
lea eax, [ebp - 0xaa4]
push eax
push 0
push 0x2647
lea eax, [ebp - 0x774]
push eax
call fcn.10029921
add esp, 0x10
push 0
lea ecx, [ebp - 0x774]
call fcn.1000dbd4
and dword [eax], 0
jmp 0x10032f19
push 0
lea ecx, [ebp - 0x774]
call fcn.1000dbd4
mov dword [ebp - 0x520], eax
mov eax, dword [ebp - 0x520]
mov eax, dword [eax]
dec eax
mov ecx, dword [ebp - 0x520]
mov dword [ecx], eax
push 0
lea ecx, [ebp - 0x774]
call fcn.1000dbd4
cmp dword [eax], 0
jl 0x10032f73
mov dword [ebp - 0x150], 0
jmp 0x10032f44
mov eax, dword [ebp - 0x150]
inc eax
mov dword [ebp - 0x150], eax
cmp dword [ebp - 0x150], 1
jge 0x10032f60
mov eax, dword [ebp - 0x150]
mov dword [ebp + eax*4 - 0x764], 0xffff
jmp 0x10032f37
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0x764], 0xd82c32b9
jmp 0x10032ef5
mov eax, dword [ebp - 0x4c]
cmp dword [ebp + eax*4 - 0xe8], 0
jne 0x10033061
mov eax, dword [ebp - 0xc4]
cmp dword [ebp + eax*4 - 0xe8], 0
jne 0x10032fd7
push 2
lea ecx, [ebp - 0x784]
call fcn.1000dbd4
mov eax, dword [eax]
mov dword [ebp - 0x2a8], eax
mov eax, dword [ebp - 0x2a8]
mov dword [ebp - 0xb4], eax
mov eax, dword [ebp - 0xb4]
mov dword [ebp - 0x9a4], eax
mov eax, dword [ebp - 0x4c]
cmp dword [ebp + eax*4 - 0xe8], 0
jne 0x10032fd7
and dword [ebp - 0x450], 0
jmp 0x10032fe1
mov dword [ebp - 0x450], 1
mov eax, dword [ebp - 0x100]
cmp dword [ebp - 0x450], eax
jl 0x1003300a
push 1
lea ecx, [ebp - 0x270]
call fcn.1000dbd4
cmp dword [eax], 0
jne 0x1003300a
and dword [ebp - 0x2b0], 0
jmp 0x10033014
mov dword [ebp - 0x2b0], 1
cmp dword [ebp - 0x2b0], 1
jb 0x10033029
mov dword [ebp - 0x5c0], 1
jmp 0x10033030
and dword [ebp - 0x5c0], 0
imul eax, dword [ebp - 0x5c0], 0x3d9c
mov ecx, dword [ebp - 0xc4]
imul eax, dword [ebp + ecx*4 - 0xe8]
cmp eax, 0xe522
jge 0x10033058
mov eax, 0xdd36
test eax, eax
jne 0x10033061
and dword [ebp - 0x2b8], 0
jmp 0x1003306b
mov dword [ebp - 0x2b8], 1
cmp dword [ebp - 0x2b8], 0x64f9
jne 0x10033087
xor eax, eax
je 0x10033087
mov dword [ebp - 0x458], 1
jmp 0x1003308e
and dword [ebp - 0x458], 0
mov eax, dword [ebp - 0x458]
mov dword [ebp - 0x2c0], eax
mov eax, dword [ebp - 0x4c]
cmp dword [ebp - 0x2c0], eax
jl 0x100330b1
mov dword [ebp - 0x528], 1
jmp 0x100330b8
and dword [ebp - 0x528], 0
cmp dword [ebp - 0x528], 0
ja 0x100330cd
mov dword [ebp - 0x2c8], 1
jmp 0x100330d4
and dword [ebp - 0x2c8], 0
mov eax, dword [ebp - 0x2c8]
mov dword [ebp - 0x7cc], eax
mov byte [ebp - 4], 6
lea ecx, [ebp - 0x774]
call fcn.1000dbb8
jmp 0x10032e91
push 4
pop eax
shl eax, 1
mov dword [ebp + eax - 0xa44], 0xb8a442f2
jmp 0x10032e61
jmp 0x10032e07
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x784]
call fcn.1000dbb8
jmp 0x10032d83
mov eax, dword [ebp - 0x590]
cmp dword [ebp - 0x7c4], eax
jg 0x1003313c
mov dword [ebp - 0x460], 1
jmp 0x10033143
and dword [ebp - 0x460], 0
push 0
lea ecx, [ebp - 0x270]
call fcn.1000dbd4
mov ecx, dword [ebp - 0x460]
cmp ecx, dword [eax]
jne 0x10033166
mov dword [ebp - 0x2d0], 1
jmp 0x1003316d
and dword [ebp - 0x2d0], 0
mov eax, dword [ebp - 0x2d0]
mov dword [ebp - 0x4c], eax
cmp dword [ebp - 0x4c], 1
je 0x10033188
mov dword [ebp - 0x2d8], 1
jmp 0x1003318f
and dword [ebp - 0x2d8], 0
mov eax, dword [ebp - 0xb4]
sub eax, dword [ebp - 0xb4]
sub eax, dword [ebp - 0x590]
cmp eax, dword [ebp - 0x2d8]
jne 0x100331b5
mov dword [ebp - 0x468], 1
jmp 0x100331bc
and dword [ebp - 0x468], 0
mov eax, dword [ebp - 0x468]
sub eax, dword [ebp - 0xb4]
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xe8]
mov dword [ebp - 0x2e0], eax
push 4
pop eax
shl eax, 1
mov ecx, dword [ebp - 0x2e0]
mov dword [ebp + eax - 0xa44], ecx
push 1
lea ecx, [ebp - 0x270]
call fcn.1000dbd4
mov ecx, dword [ebp - 0x2e0]
cmp ecx, dword [eax]
je 0x10033210
mov dword [ebp - 0x530], 1
jmp 0x10033217
and dword [ebp - 0x530], 0
cmp dword [ebp - 0x530], 0xfff8
ja 0x1003322f
mov dword [ebp - 0x2e8], 1
jmp 0x10033236
and dword [ebp - 0x2e8], 0
push 1
lea ecx, [ebp - 0x270]
call fcn.1000dbd4
mov ecx, dword [ebp - 0x2e8]
cmp ecx, dword [eax]
jg 0x10033259
mov dword [ebp - 0x470], 1
jmp 0x10033260
and dword [ebp - 0x470], 0
push 1
lea ecx, [ebp - 0x270]
call fcn.1000dbd4
mov ecx, dword [ebp - 0x470]
cmp ecx, dword [eax]
jg 0x10033283
mov dword [ebp - 0x2f0], 1
jmp 0x1003328a
and dword [ebp - 0x2f0], 0
mov eax, dword [ebp - 0x2f0]
mov dword [ebp - 0xb4], eax
jmp 0x10032ce6
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x270]
call fcn.1000dbb8
mov eax, dword [ebp - 0x15c]
mov eax, dword [eax + 4]
mov dword [ebp - 0x52c], eax
push 2
lea ecx, [ebp - 0x630]
call fcn.1000db36
mov dword [ebp - 4], 8
mov dword [ebp - 0xd0], 0xfffffffa
mov dword [ebp - 0x478], 0x17c
mov dword [ebp - 0x1b4], 0
jmp 0x100332fa
mov eax, dword [ebp - 0x1b4]
inc eax
mov dword [ebp - 0x1b4], eax
cmp dword [ebp - 0x1b4], 2
jge 0x1003331c
push dword [ebp - 0x1b4]
lea ecx, [ebp - 0x630]
call fcn.1000dbd4
mov dword [eax], 0x57fd5464
jmp 0x100332ed
mov dword [ebp - 0xd0], 1
jmp 0x10033335
mov eax, dword [ebp - 0xd0]
dec eax
mov dword [ebp - 0xd0], eax
cmp dword [ebp - 0xd0], 0
jl 0x100334a6
mov dword [ebp - 0x5c], 0xfffffffd
mov dword [ebp - 0x654], 0xb8ceffb9
mov dword [ebp - 0x5c], 0
jmp 0x10033363
mov eax, dword [ebp - 0x5c]
inc eax
mov dword [ebp - 0x5c], eax
cmp dword [ebp - 0x5c], 1
jg 0x100334a1
mov dword [ebp - 0x6a4], 0xadf29855
push dword [ebp - 0x5c]
lea ecx, [ebp - 0x630]
call fcn.1000dbd4
cmp dword [ebp - 0xd0], 0
je 0x100333ed
cmp dword [ebp - 0x478], 0
jge 0x100333a3
mov dword [ebp - 0x5f0], 1
jmp 0x100333aa
and dword [ebp - 0x5f0], 0
cmp dword [ebp - 0x5f0], 0xe865
jle 0x100333c2
mov dword [ebp - 0x2f8], 1
jmp 0x100333c9
and dword [ebp - 0x2f8], 0
push dword [ebp - 0x5c]
lea ecx, [ebp - 0x630]
call fcn.1000dbd4
mov ecx, dword [ebp - 0x2f8]
add ecx, dword [eax]
je 0x100333ed
mov dword [ebp - 0x300], 1
jmp 0x100333f4
and dword [ebp - 0x300], 0
mov eax, dword [ebp - 0x478]
cmp dword [ebp - 0x300], eax
jge 0x1003340e
mov dword [ebp - 0x6cc], 1
jmp 0x10033415
and dword [ebp - 0x6cc], 0
push dword [ebp - 0x5c]
lea ecx, [ebp - 0x630]
call fcn.1000dbd4
cmp dword [eax], 0x8659
jge 0x10033437
mov dword [ebp - 0x1f4], 1
jmp 0x1003343e
and dword [ebp - 0x1f4], 0
push dword [ebp - 0xd0]
lea ecx, [ebp - 0x630]
call fcn.1000dbd4
mov ecx, dword [ebp - 0x1f4]
mov dword [eax], ecx
mov eax, dword [ebp - 0x5c]
cmp dword [ebp - 0x1f4], eax
je 0x1003346e
mov dword [ebp - 0x538], 1
jmp 0x10033475
and dword [ebp - 0x538], 0
mov eax, dword [ebp - 0x538]
mov dword [ebp - 0x6a4], eax
push 0x38ac
push 0
push 0x2738
lea eax, [ebp - 0x654]
push eax
call fcn.10028944
add esp, 0x10
jmp 0x1003335c
jmp 0x10033328
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x630]
call fcn.1000dbb8
push 4
lea ecx, [ebp - 0x820]
call fcn.1000db36
mov dword [ebp - 4], 9
mov dword [ebp - 0xec], 0x6182eac4
push 0x3143
lea eax, [ebp - 0xabc]
push eax
lea eax, [ebp - 0x820]
push eax
push 0
call fcn.10029906
add esp, 0x10
push 0x5d0
push 0
lea eax, [ebp - 0x820]
push eax
push 0x553b
call fcn.10030fb0
add esp, 0x10
mov dword [ebp - 0xec], 0
jmp 0x10033524
mov eax, dword [ebp - 0xec]
inc eax
mov dword [ebp - 0xec], eax
cmp dword [ebp - 0xec], 3
jg 0x10033665
mov dword [ebp - 0x158], 0
jmp 0x1003354a
mov eax, dword [ebp - 0x158]
inc eax
mov dword [ebp - 0x158], eax
cmp dword [ebp - 0x158], 3
jge 0x10033566
mov eax, dword [ebp - 0x158]
mov dword [ebp + eax*4 - 0x82c], 1
jmp 0x1003353d
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0x82c], 3
jmp 0x10033594
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x82c]
dec eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x82c], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x82c], 0
jl 0x10033660
mov dword [ebp - 0x190], 0xc7516a20
mov dword [ebp - 0x190], 3
jmp 0x100335cb
mov eax, dword [ebp - 0x190]
dec eax
mov dword [ebp - 0x190], eax
cmp dword [ebp - 0x190], 0
jl 0x10033632
mov dword [ebp - 0x160], 0
mov dword [ebp - 0x160], 0
jmp 0x100335f7
mov eax, dword [ebp - 0x160]
inc eax
mov dword [ebp - 0x160], eax
cmp dword [ebp - 0x160], 3
jg 0x10033630
mov dword [ebp - 0x648], 7
push 0
lea eax, [ebp - 0x820]
push eax
lea eax, [ebp - 0xec]
push eax
lea eax, [ebp - 0x648]
push eax
push 0x2351
call fcn.10026460
add esp, 0x14
jmp 0x100335ea
jmp 0x100335be
mov byte [ebp - 0x92], 0
lea eax, [ebp - 0x92]
push eax
push 0x36c7
push 0
push 0
push 0x4b8
push 0x5160
call fcn.10026593
add esp, 0x18
jmp 0x10033579
jmp 0x10033517
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x820]
call fcn.1000dbb8
mov eax, dword [ebp - 0x15c]
mov eax, dword [eax]
mov ecx, dword [ebp - 0x15c]
mov ecx, dword [ecx]
movzx ecx, word [ecx + 0x14]
lea eax, [eax + ecx + 0x18]
mov dword [ebp - 0x48], eax
mov dword [ebp - 0x1ac], 0x69fdf99f
mov dword [ebp - 0x1ac], 8
jmp 0x100336b2
mov eax, dword [ebp - 0x1ac]
dec eax
mov dword [ebp - 0x1ac], eax
cmp dword [ebp - 0x1ac], 0xffffffee
jge 0x10033706
mov dword [ebp - 0x708], 1
push 0x6f72
push 0x12ad
push 0x4c53
push 1
push 1
push 0x6a52
push 0x7287
push 0
call fcn.10025ce3
add esp, 0x20
push 0
lea eax, [ebp - 0x708]
push eax
push 0x9a
push 1
call fcn.10025ea4
add esp, 0x10
jmp 0x100336a5
push 2
lea ecx, [ebp - 0x1cc]
call fcn.1000db36
mov dword [ebp - 4], 0xa
mov dword [ebp - 0x1fc], 0xfffffff9
mov dword [ebp - 0x650], 0x1614
cmp dword [ebp - 0x650], 0x12f1
jge 0x100338ff
movsd xmm0, qword [0x1000a428]
movsd qword [ebp - 0x9dc], xmm0
lea eax, [ebp - 0x778]
push eax
lea eax, [ebp - 0x22c]
push eax
push 0x1000a0e8
call fcn.1004d4be
add esp, 0xc
push dword [ebp - 0x22c]
lea ecx, [ebp - 0x8f4]
call fcn.10040d4c
mov byte [ebp - 4], 0xb
push dword [ebp - 0x22c]
lea ecx, [ebp - 0x93c]
call fcn.10040d4c
mov byte [ebp - 4], 0xc
and dword [ebp - 0xf4], 0
jmp 0x100337a9
mov eax, dword [ebp - 0xf4]
inc eax
mov dword [ebp - 0xf4], eax
mov eax, dword [ebp - 0xf4]
cmp eax, dword [ebp - 0x22c]
jge 0x100337ea
push dword [ebp - 0xf4]
lea ecx, [ebp - 0x93c]
call fcn.100242df
push eax
push dword [ebp - 0xf4]
lea ecx, [ebp - 0x8f4]
call fcn.100242df
push eax
push 0x1000a2e0
call fcn.1004d4be
add esp, 0xc
jmp 0x1003379c
movsd xmm0, qword [0x1000a410]
movsd qword [ebp - 0x728], xmm0
movsd xmm0, qword [0x1000a498]
movsd qword [ebp - 0x734], xmm0
movsd xmm0, qword [0x1000a410]
movsd qword [ebp - 0x844], xmm0
movsd xmm0, qword [ebp - 0x728]
addsd xmm0, qword [ebp - 0x9dc]
movsd xmm1, qword [ebp - 0x734]
comisd xmm1, xmm0
jbe 0x100338c5
movsd xmm0, qword [ebp - 0x728]
addsd xmm0, qword [ebp - 0x734]
divsd xmm0, qword [0x1000a460]
movsd qword [ebp - 0x624], xmm0
push ecx
push ecx
movsd xmm0, qword [ebp - 0x624]
movsd qword [esp], xmm0
push dword [ebp - 0x778]
lea eax, [ebp - 0x93c]
push eax
lea eax, [ebp - 0x8f4]
push eax
call fcn.10031dd5
add esp, 0x14
movzx eax, al
test eax, eax
je 0x100338b0
movsd xmm0, qword [ebp - 0x624]
movsd qword [ebp - 0x844], xmm0
movsd xmm0, qword [ebp - 0x624]
movsd qword [ebp - 0x728], xmm0
jmp 0x100338c0
movsd xmm0, qword [ebp - 0x624]
movsd qword [ebp - 0x734], xmm0
jmp 0x1003381a
push ecx
push ecx
movsd xmm0, qword [ebp - 0x844]
movsd qword [esp], xmm0
push 0x1000a2e8
call fcn.1004d076
add esp, 0xc
mov byte [ebp - 4], 0xb
lea ecx, [ebp - 0x93c]
call fcn.100243d2
mov byte [ebp - 4], 0xa
lea ecx, [ebp - 0x8f4]
call fcn.100243d2
mov dword [ebp - 0x998], 0xffffffff
mov dword [ebp - 0x994], 0xffffffff
mov dword [ebp - 0x990], 0xffffffff
mov dword [ebp - 0x98c], 0xffffffff
mov dword [ebp - 0x988], 0xfffffffd
mov dword [ebp - 0x984], 0xfffffffd
mov dword [ebp - 0x980], 0xfffffffd
mov dword [ebp - 0x97c], 0xfffffffd
mov dword [ebp - 0x710], 0x55c0c8fb
push 0x131c
push 0x15ef
push 0x7b39
push 0x4ac5
push 0x10ee
push 0x3363
push 0x79c9
lea eax, [ebp - 0x1cc]
push eax
push 0
lea eax, [ebp - 0x30]
push eax
push 0xb0a
push 0x52b4
call fcn.10030d37
add esp, 0x30
mov dword [ebp - 0x30], 0
jmp 0x100339ab
mov eax, dword [ebp - 0x30]
inc eax
mov dword [ebp - 0x30], eax
cmp dword [ebp - 0x30], 2
jge 0x100339c1
mov eax, dword [ebp - 0x30]
mov dword [ebp + eax*4 - 0x9f4], 4
jmp 0x100339a4
mov dword [ebp - 0x30], 0
jmp 0x100339d1
mov eax, dword [ebp - 0x30]
inc eax
mov dword [ebp - 0x30], eax
cmp dword [ebp - 0x30], 3
jge 0x100339e7
mov eax, dword [ebp - 0x30]
mov dword [ebp + eax*4 - 0xb00], 0
jmp 0x100339ca
push 1
lea ecx, [ebp - 0x1cc]
call fcn.1000dbd4
mov eax, dword [eax]
mov dword [ebp - 0x1fc], eax
push 0
lea ecx, [ebp - 0x1cc]
call fcn.1000dbd4
mov eax, dword [eax]
mov dword [ebp - 0x1fc], eax
mov eax, dword [ebp - 0x1fc]
mov dword [ebp - 0x308], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x308]
mov dword [ebp + eax - 0x9f4], ecx
push 1
lea ecx, [ebp - 0x1cc]
call fcn.1000dbd4
mov ecx, dword [ebp - 0x308]
cmp ecx, dword [eax]
jl 0x10033a53
mov dword [ebp - 0x320], 1
jmp 0x10033a5a
and dword [ebp - 0x320], 0
push 1
lea ecx, [ebp - 0x1cc]
call fcn.1000dbd4
mov esi, eax
push 1
lea ecx, [ebp - 0x1cc]
call fcn.1000dbd4
mov ecx, dword [esi]
cmp ecx, dword [eax]
jl 0x10033a88
mov dword [ebp - 0x238], 1
jmp 0x10033a8f
and dword [ebp - 0x238], 0
push 4
pop eax
imul eax, eax, 3
mov ecx, dword [ebp - 0x238]
mov dword [ebp + eax - 0x988], ecx
push 1
lea ecx, [ebp - 0x1cc]
call fcn.1000dbd4
mov esi, dword [ebp - 0x238]
sub esi, dword [eax]
push 0
lea ecx, [ebp - 0x1cc]
call fcn.1000dbd4
cmp esi, dword [eax]
jl 0x10033ad4
mov dword [ebp - 0x310], 1
jmp 0x10033adb
and dword [ebp - 0x310], 0
push 4
pop eax
imul eax, eax, 0
lea eax, [ebp + eax - 0x998]
mov dword [ebp - 0x480], eax
push 0
lea ecx, [ebp - 0x1cc]
call fcn.1000dbd4
mov ecx, dword [ebp - 0x480]
mov eax, dword [eax]
mov dword [ecx], eax
push 0
lea ecx, [ebp - 0x1cc]
call fcn.1000dbd4
mov ecx, dword [ebp - 0x480]
mov ecx, dword [ecx]
imul ecx, dword [eax]
cmp ecx, dword [ebp - 0x310]
je 0x10033b31
mov dword [ebp - 0x658], 1
jmp 0x10033b38
and dword [ebp - 0x658], 0
push 1
lea ecx, [ebp - 0x1cc]
call fcn.1000dbd4
push 0xfffffffffffffffc
pop eax
cmp eax, 0xe450bb10
ja 0x10033b5b
mov dword [ebp - 0x598], 1
jmp 0x10033b62
and dword [ebp - 0x598], 0
mov eax, dword [ebp - 0x598]
sub eax, 0xd07ddbf4
mov dword [ebp - 0x318], eax
push 4
pop eax
shl eax, 1
mov ecx, dword [ebp - 0x318]
mov dword [ebp + eax - 0xb00], ecx
push 1
lea ecx, [ebp - 0x1cc]
call fcn.1000dbd4
mov ecx, dword [ebp - 0x318]
cmp ecx, dword [eax]
jne 0x10033ba8
mov dword [ebp - 0x488], 1
jmp 0x10033baf
and dword [ebp - 0x488], 0
mov eax, dword [ebp - 0x488]
neg eax
cmp dword [ebp - 0x320], eax
jne 0x10033bcb
mov dword [ebp - 0x540], 1
jmp 0x10033bd2
and dword [ebp - 0x540], 0
mov eax, dword [ebp - 0x540]
mov dword [ebp - 0x710], eax
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x1cc]
call fcn.1000dbb8
mov dword [ebp - 0x20], 0xdb3ae355
mov dword [ebp - 0x88], 0x7722abac
mov dword [ebp - 0x234], 0xd29a2a67
mov dword [ebp - 0x548], 0x8a57461d
mov dword [ebp - 0x7d4], 0x8c580b0b
mov dword [ebp - 0x168], 0
jmp 0x10033c35
mov eax, dword [ebp - 0x168]
inc eax
mov dword [ebp - 0x168], eax
cmp dword [ebp - 0x168], 2
jge 0x10033c51
mov eax, dword [ebp - 0x168]
mov dword [ebp + eax*4 - 0x854], 0xb818f8f6
jmp 0x10033c28
mov dword [ebp - 0x20], 0
jmp 0x10033c61
mov eax, dword [ebp - 0x20]
dec eax
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 0xffffffea
je 0x10034041
mov dword [ebp - 0xbc], 0xffffffff
mov dword [ebp - 0x668], 0
mov dword [ebp - 0x358], 0
mov dword [ebp - 0x718], 9
cmp dword [ebp - 0xbc], 0x5d09ea9
je 0x10033e6c
mov dword [ebp - 0x660], 6
mov dword [ebp - 0xbc], 0
jmp 0x10033cc6
mov eax, dword [ebp - 0xbc]
inc eax
mov dword [ebp - 0xbc], eax
cmp dword [ebp - 0xbc], 1
jg 0x10033e0e
mov dword [ebp - 0x204], 0x720
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x9ac], eax
cmp dword [ebp - 0x204], 0
jne 0x10033daa
cmp dword [ebp - 0x204], 0
jl 0x10033d08
mov dword [ebp - 0x330], 1
jmp 0x10033d0f
and dword [ebp - 0x330], 0
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0xa68], eax
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x9b4], eax
cmp dword [ebp - 0x20], 0xfffffffe
ja 0x10033d33
mov dword [ebp - 0x328], 1
jmp 0x10033d3a
and dword [ebp - 0x328], 0
mov eax, dword [ebp - 0x204]
cmp dword [ebp - 0x328], eax
jge 0x10033d59
or eax, 0xffffffff
je 0x10033d59
mov dword [ebp - 0x490], 1
jmp 0x10033d60
and dword [ebp - 0x490], 0
mov eax, dword [ebp - 0x490]
mov dword [ebp - 0x88], eax
cmp dword [ebp - 0x88], 5
jge 0x10033d86
or eax, 0xffffffff
je 0x10033d86
mov dword [ebp - 0x5cc], 1
jmp 0x10033d8d
and dword [ebp - 0x5cc], 0
mov eax, dword [ebp - 0x330]
sub eax, dword [ebp - 0x5cc]
mov dword [ebp - 0x234], eax
jne 0x10033daa
and dword [ebp - 0x338], 0
jmp 0x10033db4
mov dword [ebp - 0x338], 1
mov eax, dword [ebp - 0x20]
add eax, dword [ebp - 0x338]
cmp eax, dword [ebp - 0x20]
jge 0x10033dce
mov dword [ebp - 0x498], 1
jmp 0x10033dd5
and dword [ebp - 0x498], 0
mov eax, dword [ebp - 0x660]
cmp dword [ebp - 0x498], eax
jg 0x10033def
mov dword [ebp - 0x340], 1
jmp 0x10033df6
and dword [ebp - 0x340], 0
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x340]
mov dword [ebp + eax - 0x854], ecx
jmp 0x10033cb9
mov dword [ebp - 0x88], 1
jmp 0x10033e27
mov eax, dword [ebp - 0x88]
dec eax
mov dword [ebp - 0x88], eax
cmp dword [ebp - 0x88], 0
jl 0x10033e67
mov dword [ebp - 0xae8], 0xedda5659
mov dword [ebp - 0x9bc], 0xa6d786ff
mov dword [ebp - 0xa78], 1
mov dword [ebp - 0x9c4], 0xd8b3d385
mov eax, dword [ebp - 0x548]
inc eax
mov dword [ebp - 0x548], eax
jmp 0x10033e1a
jmp 0x10034003
mov dword [ebp - 0x5a0], 0xd11e
mov dword [ebp - 0x198], 0
jmp 0x10033e8f
mov eax, dword [ebp - 0x198]
inc eax
mov dword [ebp - 0x198], eax
cmp dword [ebp - 0x198], 3
jge 0x10033eab
mov eax, dword [ebp - 0x198]
mov dword [ebp + eax*4 - 0x924], 0x93d0
jmp 0x10033e82
cmp dword [ebp - 0x234], 0
je 0x10033fe9
mov eax, dword [ebp - 0xbc]
imul eax, dword [ebp - 0x7d4]
xor ecx, ecx
inc ecx
sub ecx, eax
cmp ecx, dword [ebp - 0x668]
jge 0x10033ede
mov dword [ebp - 0x348], 1
jmp 0x10033ee5
and dword [ebp - 0x348], 0
mov eax, dword [ebp - 0x348]
inc eax
je 0x10033ef7
cmp dword [ebp - 0x718], 0
jne 0x10033f09
cmp dword [ebp - 0x358], 0
jne 0x10033f09
and dword [ebp - 0x4a0], 0
jmp 0x10033f13
mov dword [ebp - 0x4a0], 1
mov eax, dword [ebp - 0x5a0]
cmp eax, dword [ebp - 0x4a0]
jle 0x10033f2d
mov dword [ebp - 0x350], 1
jmp 0x10033f34
and dword [ebp - 0x350], 0
mov eax, dword [ebp - 0x88]
cmp eax, dword [ebp - 0x350]
jne 0x10033f4e
mov dword [ebp - 0x670], 1
jmp 0x10033f55
and dword [ebp - 0x670], 0
mov eax, dword [ebp - 0x5a0]
mov dword [ebp - 0xa00], eax
push 4
pop eax
shl eax, 1
mov ecx, 0x67e6
sub ecx, dword [ebp + eax - 0x924]
push 4
pop eax
shl eax, 0
add ecx, dword [ebp + eax - 0x924]
cmp ecx, dword [ebp - 0x20]
jle 0x10033f99
cmp dword [ebp - 0x358], 0
je 0x10033f99
mov dword [ebp - 0x4a8], 1
jmp 0x10033fa0
and dword [ebp - 0x4a8], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x924]
cmp dword [ebp - 0x4a8], eax
jle 0x10033fc1
mov dword [ebp - 0x360], 1
jmp 0x10033fc8
and dword [ebp - 0x360], 0
cmp dword [ebp - 0x360], 0xfffb
jne 0x10033fdd
mov eax, 0xffff
test eax, eax
je 0x10033fe9
mov dword [ebp - 0x550], 1
jmp 0x10033ff0
and dword [ebp - 0x550], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x550]
mov dword [ebp + eax - 0x854], ecx
mov byte [ebp - 0x89], 0
movzx eax, byte [ebp - 0x89]
test eax, eax
je 0x1003403c
push 0x1786
push 0x6530
push 0x4150
push 0
push 1
push 0x7903
push 0x16cf
push 1
call fcn.10025ce3
add esp, 0x20
jmp 0x10033c5a
push 2
lea ecx, [ebp - 0xa54]
call fcn.1000db36
mov dword [ebp - 4], 0xd
mov dword [ebp - 0x170], 0xeef20fe6
push 0x4f69
push 0
lea eax, [ebp - 0xa9c]
push eax
push 0x5bb1
lea eax, [ebp - 0xa54]
push eax
push 0
call fcn.100290ce
add esp, 0x18
mov dword [ebp - 0x170], 1
jmp 0x1003409c
mov eax, dword [ebp - 0x170]
dec eax
mov dword [ebp - 0x170], eax
cmp dword [ebp - 0x170], 0
jl 0x100341a1
push 1
lea ecx, [ebp - 0x794]
call fcn.1000db36
mov byte [ebp - 4], 0xe
mov dword [ebp - 0x1bc], 0
jmp 0x100340d3
mov eax, dword [ebp - 0x1bc]
inc eax
mov dword [ebp - 0x1bc], eax
cmp dword [ebp - 0x1bc], 1
jge 0x100340f5
push dword [ebp - 0x1bc]
lea ecx, [ebp - 0x794]
call fcn.1000dbd4
mov dword [eax], 0xe2c0d37a
jmp 0x100340c6
push 0
lea ecx, [ebp - 0x794]
call fcn.1000dbd4
and dword [eax], 0
jmp 0x1003412b
push 0
lea ecx, [ebp - 0x794]
call fcn.1000dbd4
mov dword [ebp - 0x368], eax
mov eax, dword [ebp - 0x368]
mov eax, dword [eax]
inc eax
mov ecx, dword [ebp - 0x368]
mov dword [ecx], eax
push 0
lea ecx, [ebp - 0x794]
call fcn.1000dbd4
cmp dword [eax], 1
jg 0x1003418d
mov dword [ebp - 0x178], 1
mov dword [ebp - 0x178], 1
jmp 0x10034160
mov eax, dword [ebp - 0x178]
dec eax
mov dword [ebp - 0x178], eax
cmp dword [ebp - 0x178], 0
jl 0x10034188
mov byte [ebp - 0x96], 0
push 0
lea eax, [ebp - 0x96]
push eax
push 0x2dcd
call fcn.1002892c
add esp, 0xc
jmp 0x10034153
jmp 0x10034107
mov byte [ebp - 4], 0xd
lea ecx, [ebp - 0x794]
call fcn.1000dbb8
jmp 0x1003408f
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xa54]
call fcn.1000dbb8
mov dword [ebp - 0x5e0], 0xfffffffb
mov dword [ebp - 0xa08], 0xf43b7c7c
mov dword [ebp - 0xae0], 0xfffffffa
mov dword [ebp - 0xa10], 2
mov dword [ebp - 0xaa0], 0x3248c66f
push 1
lea ecx, [ebp - 0xa64]
call fcn.1000db36
mov dword [ebp - 4], 0xf
mov dword [ebp - 0x788], 0x3c6fe23a
mov dword [ebp - 0x130], 0
jmp 0x10034219
mov eax, dword [ebp - 0x130]
inc eax
mov dword [ebp - 0x130], eax
cmp dword [ebp - 0x130], 1
jge 0x1003423b
push dword [ebp - 0x130]
lea ecx, [ebp - 0xa64]
call fcn.1000dbd4
mov dword [eax], 0x3c891c55
jmp 0x1003420c
lea eax, [ebp - 0x788]
push eax
push 0
push 0
call fcn.1003c972
add esp, 0xc
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xa64]
call fcn.1000dbb8
mov dword [ebp - 0x2ac], 0xe6fc2e60
push 2
lea ecx, [ebp - 0x930]
call fcn.1000db36
mov dword [ebp - 4], 0x10
lea eax, [ebp - 0x930]
push eax
push 0
lea eax, [ebp - 0xa18]
push eax
call fcn.10031548
add esp, 0xc
lea eax, [ebp - 0x930]
push eax
push 0
call fcn.10026483
pop ecx
pop ecx
mov byte [ebp - 0x7b], 0
movzx eax, byte [ebp - 0x7b]
test eax, eax
je 0x100342c5
push 0x50cc
push 0
push 0x37d2
push 0
call fcn.1002e92e
add esp, 0x10
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x930]
call fcn.1000dbb8
push 4
lea ecx, [ebp - 0x7fc]
call fcn.1000db36
mov dword [ebp - 4], 0x11
mov dword [ebp - 0x58], 0x90c4d8e5
mov dword [ebp - 0x134], 0
jmp 0x10034308
mov eax, dword [ebp - 0x134]
inc eax
mov dword [ebp - 0x134], eax
cmp dword [ebp - 0x134], 2
jge 0x10034324
mov eax, dword [ebp - 0x134]
mov dword [ebp + eax*4 - 0x250], 1
jmp 0x100342fb
mov dword [ebp - 0x58], 0
jmp 0x10034334
mov eax, dword [ebp - 0x58]
inc eax
mov dword [ebp - 0x58], eax
cmp dword [ebp - 0x58], 1
jg 0x10034633
mov dword [ebp - 0x6c], 0xfffffffe
mov dword [ebp - 0x378], 0xffffffff
mov dword [ebp - 0x678], 0xfffffff8
mov dword [ebp - 0x6c], 1
jmp 0x10034369
mov eax, dword [ebp - 0x6c]
dec eax
mov dword [ebp - 0x6c], eax
cmp dword [ebp - 0x6c], 0
jl 0x1003462e
mov dword [ebp - 0x40], 0xfffffff9
push 3
lea ecx, [ebp - 0x948]
call fcn.1000db36
mov byte [ebp - 4], 0x12
push 1
push 1
lea eax, [ebp - 0xad0]
push eax
push 0x7910
lea eax, [ebp - 0x948]
push eax
call fcn.1002529c
add esp, 0x14
mov dword [ebp - 0x40], 0
jmp 0x100343ba
mov eax, dword [ebp - 0x40]
inc eax
mov dword [ebp - 0x40], eax
cmp dword [ebp - 0x40], 1
jg 0x1003440d
mov byte [ebp - 0x81], 0
push 0x5630
push 0x129d
push 0
push 1
lea eax, [ebp - 0x81]
push eax
push 0x629f
call fcn.10026593
add esp, 0x18
mov byte [ebp - 0x94], 0
push 0
push 0x896
push 0x43d7
lea eax, [ebp - 0x94]
push eax
call fcn.1002ae3e
add esp, 0x10
jmp 0x100343b3
mov dword [ebp - 0x40], 1
jmp 0x1003441d
mov eax, dword [ebp - 0x40]
dec eax
mov dword [ebp - 0x40], eax
cmp dword [ebp - 0x40], 0
jl 0x1003461a
mov eax, dword [ebp - 0x6c]
cmp dword [ebp + eax*4 - 0x250], 1
je 0x10034440
mov dword [ebp - 0x380], 1
jmp 0x10034447
and dword [ebp - 0x380], 0
mov eax, dword [ebp - 0x58]
cmp dword [ebp + eax*4 - 0x250], 0x4150
jle 0x10034463
mov dword [ebp - 0x4b0], 1
jmp 0x1003446a
and dword [ebp - 0x4b0], 0
mov eax, dword [ebp - 0x58]
mov eax, dword [ebp + eax*4 - 0x250]
cmp dword [ebp - 0x4b0], eax
jle 0x10034488
mov dword [ebp - 0x370], 1
jmp 0x1003448f
and dword [ebp - 0x370], 0
mov eax, dword [ebp - 0x58]
mov eax, dword [ebp + eax*4 - 0x250]
cmp dword [ebp - 0x370], eax
je 0x100344ad
mov dword [ebp - 0x5e8], 1
jmp 0x100344b4
and dword [ebp - 0x5e8], 0
mov dword [ebp - 0x378], 1
mov eax, dword [ebp - 0x5e8]
sub eax, dword [ebp - 0x40]
cmp dword [ebp - 0x378], eax
je 0x100344db
mov dword [ebp - 0x4b8], 1
jmp 0x100344e2
and dword [ebp - 0x4b8], 0
cmp dword [ebp - 0x4b8], 0
je 0x100344f7
mov dword [ebp - 0x20c], 1
jmp 0x100344fe
and dword [ebp - 0x20c], 0
push 2
lea ecx, [ebp - 0x948]
call fcn.1000dbd4
mov ecx, dword [ebp - 0x20c]
mov dword [eax], ecx
mov eax, dword [ebp - 0x58]
mov eax, dword [ebp + eax*4 - 0x250]
cmp dword [ebp - 0x20c], eax
jne 0x10034531
mov dword [ebp - 0x558], 1
jmp 0x10034538
and dword [ebp - 0x558], 0
mov eax, dword [ebp - 0x380]
cmp eax, dword [ebp - 0x558]
jg 0x1003455f
mov eax, dword [ebp - 0x6c]
cmp dword [ebp + eax*4 - 0x250], 0
je 0x1003455f
mov dword [ebp - 0x388], 1
jmp 0x10034566
and dword [ebp - 0x388], 0
cmp dword [ebp - 0x388], 0
jge 0x1003457b
mov dword [ebp - 0x4c0], 1
jmp 0x10034582
and dword [ebp - 0x4c0], 0
cmp dword [ebp - 0x4c0], 0xe01e6e83
jb 0x1003459a
mov dword [ebp - 0x390], 1
jmp 0x100345a1
and dword [ebp - 0x390], 0
cmp dword [ebp - 0x390], 1
jle 0x100345b6
mov dword [ebp - 0x5a8], 1
jmp 0x100345bd
and dword [ebp - 0x5a8], 0
mov eax, dword [ebp - 0x6c]
add eax, dword [ebp - 0x5a8]
cmp eax, dword [ebp - 0x58]
jge 0x100345d7
mov dword [ebp - 0x398], 1
jmp 0x100345de
and dword [ebp - 0x398], 0
imul eax, dword [ebp - 0x398], 0
test eax, eax
jne 0x100345ff
mov eax, dword [ebp - 0x6c]
cmp dword [ebp + eax*4 - 0x250], 0
jne 0x100345ff
and dword [ebp - 0x4c8], 0
jmp 0x10034609
mov dword [ebp - 0x4c8], 1
mov eax, dword [ebp - 0x4c8]
mov dword [ebp - 0x678], eax
jmp 0x10034416
mov byte [ebp - 4], 0x11
lea ecx, [ebp - 0x948]
call fcn.1000dbb8
jmp 0x10034362
jmp 0x1003432d
mov dword [ebp - 0x6c8], 0
mov dword [ebp - 0xa0], 0xfe4b
push 2
lea ecx, [ebp - 0x808]
call fcn.1000db36
mov byte [ebp - 4], 0x13
mov dword [ebp - 0x680], 6
mov dword [ebp - 0x14], 0
jmp 0x10034672
mov eax, dword [ebp - 0x14]
inc eax
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 2
jge 0x10034688
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0xe0], 0x8afc
jmp 0x1003466b
mov dword [ebp - 0x14], 0
jmp 0x10034698
mov eax, dword [ebp - 0x14]
inc eax
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 2
jge 0x100346ae
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x9e8], 0xfffffffb
jmp 0x10034691
mov dword [ebp - 0x14], 0
jmp 0x100346be
mov eax, dword [ebp - 0x14]
inc eax
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 2
jge 0x100346da
push dword [ebp - 0x14]
lea ecx, [ebp - 0x808]
call fcn.1000dbd4
mov dword [eax], 0xfffffffb
jmp 0x100346b7
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0xe0]
mov dword [ebp - 0xa20], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0xa0]
mov dword [ebp + eax - 0x9e8], ecx
mov eax, 0x58099740
sub eax, 0x38425739
push 4
pop ecx
shl ecx, 0
sub eax, dword [ebp + ecx - 0xe0]
je 0x10034735
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0xe0], 0
je 0x10034735
mov dword [ebp - 0x720], 1
jmp 0x1003473c
and dword [ebp - 0x720], 0
mov eax, dword [ebp - 0xa0]
mov dword [ebp - 0xaac], eax
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0xe0]
cmp dword [ebp - 0xa0], eax
jg 0x10034769
mov dword [ebp - 0x23c], 1
jmp 0x10034770
and dword [ebp - 0x23c], 0
push 0
lea ecx, [ebp - 0x808]
call fcn.1000dbd4
mov ecx, dword [ebp - 0x23c]
mov dword [eax], ecx
mov eax, dword [ebp - 0x23c]
sub eax, 0xe2d3
push 4
pop ecx
shl ecx, 0
cmp eax, dword [ebp + ecx - 0xe0]
jne 0x100347ab
mov dword [ebp - 0x3a0], 1
jmp 0x100347b2
and dword [ebp - 0x3a0], 0
cmp dword [ebp - 0x3a0], 0xcea2ff3e
jne 0x100347ca
mov dword [ebp - 0x560], 1
jmp 0x100347d1
and dword [ebp - 0x560], 0
mov eax, dword [ebp - 0xa0]
imul eax, dword [ebp - 0x560]
test eax, eax
jne 0x100347fb
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0xe0], 0
jne 0x100347fb
and dword [ebp - 0x3a8], 0
jmp 0x10034805
mov dword [ebp - 0x3a8], 1
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xe0]
add eax, dword [ebp - 0x3a8]
push 4
pop ecx
shl ecx, 0
cmp eax, dword [ebp + ecx - 0xe0]
jl 0x1003483c
mov eax, 0x37d4
test eax, eax
je 0x1003483c
mov dword [ebp - 0x4d0], 1
jmp 0x10034843
and dword [ebp - 0x4d0], 0
cmp dword [ebp - 0x4d0], 0
je 0x10034865
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0xe0], 0
jne 0x10034865
and dword [ebp - 0x3b0], 0
jmp 0x1003486f
mov dword [ebp - 0x3b0], 1
mov eax, dword [ebp - 0xa0]
cmp eax, dword [ebp - 0x3b0]
jle 0x1003489b
push 0
lea ecx, [ebp - 0x808]
call fcn.1000dbd4
cmp dword [eax], 0
je 0x1003489b
mov dword [ebp - 0x5d8], 1
jmp 0x100348a2
and dword [ebp - 0x5d8], 0
cmp dword [ebp - 0x5d8], 1
jle 0x100348b7
mov dword [ebp - 0x3b8], 1
jmp 0x100348be
and dword [ebp - 0x3b8], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0xe0]
cmp dword [ebp - 0x3b8], eax
jl 0x100348df
mov dword [ebp - 0x4d8], 1
jmp 0x100348e6
and dword [ebp - 0x4d8], 0
mov eax, dword [ebp - 0xa0]
cmp dword [ebp - 0x4d8], eax
jl 0x10034900
mov dword [ebp - 0x3c0], 1
jmp 0x10034907
and dword [ebp - 0x3c0], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0xe0]
cmp dword [ebp - 0x3c0], eax
jle 0x10034928
mov dword [ebp - 0x568], 1
jmp 0x1003492f
and dword [ebp - 0x568], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0xe0]
add eax, dword [ebp - 0x568]
mov dword [ebp - 0x680], eax
mov byte [ebp - 0x71], 0
push 0
push 1
lea eax, [ebp - 0x71]
push eax
push 0
call fcn.1002ef55
add esp, 0x10
mov byte [ebp - 4], 0x11
lea ecx, [ebp - 0x808]
call fcn.1000dbb8
mov dword [ebp - 0x60], 0x743d837b
push 1
lea ecx, [ebp - 0x960]
call fcn.1000db36
mov byte [ebp - 4], 0x14
mov dword [ebp - 0x18], 0
jmp 0x10034995
mov eax, dword [ebp - 0x18]
inc eax
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 3
jge 0x100349ab
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0xb98], 7
jmp 0x1003498e
mov dword [ebp - 0x18], 0
jmp 0x100349bb
mov eax, dword [ebp - 0x18]
inc eax
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 1
jge 0x100349d1
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0xa28], 0xca2961c0
jmp 0x100349b4
mov dword [ebp - 0x18], 0
jmp 0x100349e1
mov eax, dword [ebp - 0x18]
inc eax
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 1
jge 0x100349fd
push dword [ebp - 0x18]
lea ecx, [ebp - 0x960]
call fcn.1000dbd4
mov dword [eax], 0xec4279c4
jmp 0x100349da
mov dword [ebp - 0x60], 2
jmp 0x10034a0d
mov eax, dword [ebp - 0x60]
dec eax
mov dword [ebp - 0x60], eax
cmp dword [ebp - 0x60], 0
jl 0x10034a39
mov dword [ebp - 0x7bc], 0
lea eax, [ebp - 0x960]
push eax
push 0
call fcn.1002ff56
pop ecx
pop ecx
mov dword [ebp - 0x7bc], 8
jmp 0x10034a06
mov dword [ebp - 0x60], 0xfffffff0
jmp 0x10034a49
mov eax, dword [ebp - 0x60]
dec eax
mov dword [ebp - 0x60], eax
cmp dword [ebp - 0x60], 0xffffffec
je 0x10034a81
mov byte [ebp - 0x95], 0
push 0x550b
push 1
push 0x22b9
push 0
lea eax, [ebp - 0x95]
push eax
push 0
push 0x20a6
push 0x6fa6
call fcn.10029d66
add esp, 0x20
jmp 0x10034a42
mov byte [ebp - 4], 0x11
lea ecx, [ebp - 0x960]
call fcn.1000dbb8
mov dword [ebp - 0x28], 0
jmp 0x10034aa0
mov eax, dword [ebp - 0x28]
inc eax
mov dword [ebp - 0x28], eax
cmp dword [ebp - 0x28], 4
jge 0x10034ab6
mov eax, dword [ebp - 0x28]
mov dword [ebp + eax*4 - 0x280], 1
jmp 0x10034a99
mov dword [ebp - 0x214], 0x4e1a3622
mov dword [ebp - 0x400], 0xffffffff
mov dword [ebp - 0x688], 0x14c0
cmp dword [ebp - 0x688], 0x12a2
jge 0x10034c3f
call fcn.1004f391
push 0x20
pop ecx
imul ecx, ecx, 0
add eax, ecx
push eax
push 0x1000a258
push 0x1000a25c
call fcn.1004fa3e
add esp, 0xc
call fcn.1004f391
push 0x20
pop ecx
shl ecx, 0
add eax, ecx
push eax
push 0x1000a264
push 0x1000a268
call fcn.1004fa3e
add esp, 0xc
xor eax, eax
inc eax
je 0x10034c3f
lea eax, [ebp - 0x4e8]
push eax
lea eax, [ebp - 0x3d0]
push eax
lea eax, [ebp - 0x3d8]
push eax
lea eax, [ebp - 0x4e0]
push eax
lea eax, [ebp - 0x5b0]
push eax
lea eax, [ebp - 0x3c8]
push eax
push 0x1000a2f0
call fcn.1004d4be
add esp, 0x1c
cmp dword [ebp - 0x3c8], 0
jne 0x10034b9f
cmp dword [ebp - 0x5b0], 0
jne 0x10034b9f
cmp dword [ebp - 0x4e0], 0
jne 0x10034b9f
cmp dword [ebp - 0x3d8], 0
jne 0x10034b9f
cmp dword [ebp - 0x3d0], 0
jne 0x10034b9f
cmp dword [ebp - 0x4e8], 0
jne 0x10034b9f
jmp 0x10034c3f
mov eax, dword [ebp - 0x3c8]
add eax, dword [ebp - 0x4e0]
add eax, dword [ebp - 0x3d0]
mov dword [ebp - 0x570], eax
mov eax, dword [ebp - 0x5b0]
add eax, dword [ebp - 0x3d8]
add eax, dword [ebp - 0x4e8]
mov dword [ebp - 0x3e0], eax
push fcn.10017304
mov eax, dword [ebp - 0x570]
shl eax, 1
sub eax, dword [ebp - 0x3e0]
cdq
push 3
pop ecx
idiv ecx
push eax
mov eax, dword [ebp - 0x3e0]
shl eax, 1
sub eax, dword [ebp - 0x570]
cdq
push 3
pop ecx
idiv ecx
push eax
mov edx, 0x1000a304
mov ecx, 0x106584b8
call fcn.1000f4f1
mov ecx, eax
call fcn.1001478a
mov edx, 0x1000a1cc
mov ecx, eax
call fcn.1000f4f1
mov ecx, eax
call fcn.1001478a
mov edx, 0x1000a078
mov ecx, eax
call fcn.1000f4f1
mov ecx, eax
call fcn.1001477e
jmp 0x10034b24
mov dword [ebp - 0x698], 0xde64f6cb
push 3
lea ecx, [ebp - 0x90c]
call fcn.1000db36
mov byte [ebp - 4], 0x15
mov dword [ebp - 0xaf0], 0x4dd
mov dword [ebp - 0x13c], 0
jmp 0x10034c7d
mov eax, dword [ebp - 0x13c]
inc eax
mov dword [ebp - 0x13c], eax
cmp dword [ebp - 0x13c], 3
jge 0x10034c9f
push dword [ebp - 0x13c]
lea ecx, [ebp - 0x90c]
call fcn.1000dbd4
mov dword [eax], 0xf84255eb
jmp 0x10034c70
cmp dword [ebp - 0x214], 0
je 0x10034ee5
push 2
lea ecx, [ebp - 0x264]
call fcn.1000db36
mov byte [ebp - 4], 0x16
mov dword [ebp - 0x690], 0xa81a82e7
mov dword [ebp - 0xa38], 0x1658a600
push 2
lea ecx, [ebp - 0x978]
call fcn.1000db36
mov byte [ebp - 4], 0x17
mov dword [ebp - 0x72c], 0xffff
mov dword [ebp - 0xe4], 0
jmp 0x10034d05
mov eax, dword [ebp - 0xe4]
inc eax
mov dword [ebp - 0xe4], eax
cmp dword [ebp - 0xe4], 2
jge 0x10034d27
push dword [ebp - 0xe4]
lea ecx, [ebp - 0x264]
call fcn.1000dbd4
mov dword [eax], 0xfc07e17f
jmp 0x10034cf8
push 0x5ac1
push 1
lea eax, [ebp - 0xe4]
push eax
push 1
push 0x59cc
push 0
lea eax, [ebp - 0x978]
push eax
push 0xf6c
call fcn.10029d66
add esp, 0x20
push 0
lea ecx, [ebp - 0x264]
call fcn.1000dbd4
cmp dword [eax], 0
je 0x10034e3e
push 0
lea ecx, [ebp - 0x264]
call fcn.1000dbd4
cmp dword [eax], 0
jne 0x10034d95
push 0
lea ecx, [ebp - 0x264]
call fcn.1000dbd4
cmp dword [eax], 0
jne 0x10034d95
and dword [ebp - 0x3e8], 0
jmp 0x10034d9f
mov dword [ebp - 0x3e8], 1
cmp dword [ebp - 0x3e8], 0x9cf1
jl 0x10034db7
mov dword [ebp - 0x4f0], 1
jmp 0x10034dbe
and dword [ebp - 0x4f0], 0
push 0
lea ecx, [ebp - 0x264]
call fcn.1000dbd4
mov ecx, dword [ebp - 0x4f0]
cmp ecx, dword [eax]
jl 0x10034de1
mov dword [ebp - 0x3f0], 1
jmp 0x10034de8
and dword [ebp - 0x3f0], 0
mov eax, dword [ebp - 0x214]
cmp dword [ebp - 0x3f0], eax
jge 0x10034e14
push 0
lea ecx, [ebp - 0x264]
call fcn.1000dbd4
cmp dword [eax], 0
je 0x10034e14
mov dword [ebp - 0x5f4], 1
jmp 0x10034e1b
and dword [ebp - 0x5f4], 0
push 0
lea ecx, [ebp - 0x264]
call fcn.1000dbd4
mov ecx, dword [ebp - 0x5f4]
cmp ecx, dword [eax]
jne 0x10034e3e
mov dword [ebp - 0x3f8], 1
jmp 0x10034e45
and dword [ebp - 0x3f8], 0
push 0
lea ecx, [ebp - 0x264]
call fcn.1000dbd4
mov esi, eax
push 0
lea ecx, [ebp - 0x264]
call fcn.1000dbd4
mov edi, dword [eax]
imul edi, dword [ebp - 0x3f8]
push 0
lea ecx, [ebp - 0x264]
call fcn.1000dbd4
sub edi, dword [eax]
cmp dword [esi], edi
je 0x10034e89
mov dword [ebp - 0x4f8], 1
jmp 0x10034e90
and dword [ebp - 0x4f8], 0
mov eax, dword [ebp - 0x4f8]
mov dword [ebp - 0x400], eax
push 0
push 0x3533
push 0x1390
lea eax, [ebp - 0x978]
push eax
lea eax, [ebp - 0x72c]
push eax
lea eax, [ebp - 0x690]
push eax
call fcn.1002dd72
add esp, 0x18
mov byte [ebp - 4], 0x16
lea ecx, [ebp - 0x978]
call fcn.1000dbb8
mov byte [ebp - 4], 0x15
lea ecx, [ebp - 0x264]
call fcn.1000dbb8
jmp 0x10034f34
mov dword [ebp - 0x798], 0xffffffff
mov dword [ebp - 0x738], 0xfffffffc
lea eax, [ebp - 0x798]
push eax
lea eax, [ebp - 0x214]
push eax
lea eax, [ebp - 0x698]
push eax
push 1
push 0x68b5
lea eax, [ebp - 0x90c]
push eax
lea eax, [ebp - 0x400]
push eax
lea eax, [ebp - 0x738]
push eax
push 1
call fcn.10025675
add esp, 0x24
mov byte [ebp - 4], 0x11
lea ecx, [ebp - 0x90c]
call fcn.1000dbb8
push 1
push 0x7bb9
push 1
lea eax, [ebp - 0x7fc]
push eax
push 0
lea eax, [ebp - 0x28]
push eax
push 0x6092
call fcn.1002e344
add esp, 0x1c
mov dword [ebp - 0x7c0], 0xfffffff7
mov dword [ebp - 0x7a8], 4
mov dword [ebp - 0x8b4], 0xddae974c
mov dword [ebp - 0x8b0], 0xddae974c
mov dword [ebp - 0x8ac], 0xddae974c
mov dword [ebp - 0x8a8], 0xddae974c
lea ecx, [ebp - 0x21e]
call fcn.1000dbe3
push eax
lea eax, [ebp - 0x8a4]
push eax
lea eax, [ebp - 0x8b4]
push eax
lea ecx, [ebp - 0xb44]
call fcn.1000dbe6
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0xa84]
call fcn.1000db92
mov byte [ebp - 4], 0x18
mov dword [ebp - 0x6b8], 0x40c3f30
mov dword [ebp - 0x6a8], 0xabebf3b8
mov dword [ebp - 0x6a0], 0x8ed0
mov dword [ebp - 0x8dc], 0x6f26
mov dword [ebp - 0x8d8], 0x6f26
mov dword [ebp - 0x8d4], 0x6f26
mov dword [ebp - 0x8d0], 0x6f26
lea ecx, [ebp - 0x255]
call fcn.1000dbe3
push eax
lea eax, [ebp - 0x8cc]
push eax
lea eax, [ebp - 0x8dc]
push eax
lea ecx, [ebp - 0xb74]
call fcn.1000dbe6
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0xa74]
call fcn.1000db92
mov byte [ebp - 4], 0x19
mov dword [ebp - 0x740], 0x2699ff93
mov dword [ebp - 0x6b0], 1
lea eax, [ebp - 0x6a0]
push eax
lea eax, [ebp - 0x7c0]
push eax
lea eax, [ebp - 0x6a8]
push eax
lea eax, [ebp - 0xa84]
push eax
push 0x5f37
lea eax, [ebp - 0x740]
push eax
lea eax, [ebp - 0x6b0]
push eax
lea eax, [ebp - 0x7a8]
push eax
push 0
lea eax, [ebp - 0x6b8]
push eax
push 0x6cb1
lea eax, [ebp - 0xa74]
push eax
call fcn.1002afec
add esp, 0x30
mov byte [ebp - 4], 0x18
lea ecx, [ebp - 0xa74]
call fcn.1000dbb8
mov byte [ebp - 4], 0x11
lea ecx, [ebp - 0xa84]
call fcn.1000dbb8
mov dword [ebp - 0x28], 0
jmp 0x100350ef
mov eax, dword [ebp - 0x28]
inc eax
mov dword [ebp - 0x28], eax
cmp dword [ebp - 0x28], 3
jge 0x10035105
mov eax, dword [ebp - 0x28]
mov dword [ebp + eax*4 - 0x7a4], 0x623b26d5
jmp 0x100350e8
mov dword [ebp - 0xa8], 0xa228
mov dword [ebp - 0x410], 0xfffffffc
mov dword [ebp - 0x8a0], 0x88d9
mov dword [ebp - 0x89c], 0x88d9
mov dword [ebp - 0x898], 0x88d9
mov dword [ebp - 0x894], 0x88d9
lea ecx, [ebp - 0x22d]
call fcn.1000dbe3
push eax
lea eax, [ebp - 0x890]
push eax
lea eax, [ebp - 0x8a0]
push eax
lea ecx, [ebp - 0xb3c]
call fcn.1000dbe6
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0x7f0]
call fcn.1000db92
mov byte [ebp - 4], 0x1a
push 1
lea ecx, [ebp - 0x918]
call fcn.1000db36
mov byte [ebp - 4], 0x1b
push 3
lea ecx, [ebp - 0x900]
call fcn.1000db36
mov byte [ebp - 4], 0x1c
mov dword [ebp - 0x6c0], 0x4498b94b
push 1
push 0x544d
push 0x4c00
push 0
lea eax, [ebp - 0x918]
push eax
lea eax, [ebp - 0x748]
push eax
push 0
push 0x237
call fcn.1002ff81
add esp, 0x20
push 0
push 1
lea eax, [ebp - 0x900]
push eax
lea eax, [ebp - 0x748]
push eax
push 0x6a
push 0x6033
call fcn.100310c5
add esp, 0x18
imul eax, dword [ebp - 0xa8], 0xd2f25f43
sub eax, dword [ebp - 0xa8]
jne 0x10035240
cmp dword [ebp - 0xa8], 0
jne 0x1003521f
cmp dword [ebp - 0xa8], 0
jne 0x1003521f
and dword [ebp - 0x578], 0
jmp 0x10035229
mov dword [ebp - 0x578], 1
mov eax, dword [ebp - 0xa8]
add eax, dword [ebp - 0x578]
jne 0x10035240
and dword [ebp - 0x408], 0
jmp 0x1003524a
mov dword [ebp - 0x408], 1
cmp dword [ebp - 0x408], 6
ja 0x1003525f
mov dword [ebp - 0x500], 1
jmp 0x10035266
and dword [ebp - 0x500], 0
mov eax, dword [ebp - 0x500]
mov dword [ebp - 0x410], eax
mov esi, dword [ebp - 0x410]
push 0
lea ecx, [ebp - 0x7f0]
call fcn.1000dbd4
cmp esi, dword [eax]
jle 0x10035295
mov dword [ebp - 0x5b8], 1
jmp 0x1003529c
and dword [ebp - 0x5b8], 0
cmp dword [ebp - 0x5b8], 0xf2ef51ae
je 0x100352b4
mov dword [ebp - 0x418], 1
jmp 0x100352bb
and dword [ebp - 0x418], 0
mov eax, dword [ebp - 0x418]
neg eax
jne 0x100352d1
mov dword [ebp - 0x508], 1
jmp 0x100352d8
and dword [ebp - 0x508], 0
push 0
lea ecx, [ebp - 0x7f0]
call fcn.1000dbd4
mov ecx, dword [ebp - 0x508]
cmp ecx, dword [eax]
jne 0x10035304
cmp dword [ebp - 0xa8], 0
je 0x10035304
mov dword [ebp - 0x244], 1
jmp 0x1003530b
and dword [ebp - 0x244], 0
push 0
lea ecx, [ebp - 0x918]
call fcn.1000dbd4
mov ecx, dword [ebp - 0x244]
mov dword [eax], ecx
push 1
lea ecx, [ebp - 0x7f0]
call fcn.1000dbd4
mov ecx, dword [ebp - 0x244]
cmp ecx, dword [eax]
je 0x10035343
mov dword [ebp - 0x420], 1
jmp 0x1003534a
and dword [ebp - 0x420], 0
push 0
lea ecx, [ebp - 0x900]
call fcn.1000dbd4
mov ecx, dword [ebp - 0x420]
cmp ecx, dword [eax]
jne 0x1003536d
mov dword [ebp - 0x580], 1
jmp 0x10035374
and dword [ebp - 0x580], 0
cmp dword [ebp - 0x580], 0xff79facd
jb 0x1003538c
mov dword [ebp - 0x428], 1
jmp 0x10035393
and dword [ebp - 0x428], 0
mov eax, dword [ebp - 0x428]
mov dword [ebp - 0x6c0], eax
mov byte [ebp - 4], 0x1b
lea ecx, [ebp - 0x900]
call fcn.1000dbb8
mov byte [ebp - 4], 0x1a
lea ecx, [ebp - 0x918]
call fcn.1000dbb8
mov byte [ebp - 4], 0x11
lea ecx, [ebp - 0x7f0]
call fcn.1000dbb8
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x280]
mov dword [ebp - 0xab4], eax
mov eax, 0x8ec32687
test eax, eax
jae 0x100353f4
mov dword [ebp - 0x510], 1
jmp 0x100353fb
and dword [ebp - 0x510], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x280]
push 4
pop ecx
imul ecx, ecx, 0
mov ecx, dword [ebp + ecx - 0x280]
add ecx, dword [ebp - 0x510]
imul eax, ecx
cmp eax, 0x8e486aeb
ja 0x10035431
mov dword [ebp - 0x430], 1
jmp 0x10035438
and dword [ebp - 0x430], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x280]
imul eax, dword [ebp - 0x430]
mov dword [ebp - 0x5e0], eax
mov eax, dword [ebp - 0x5e0]
push 4
pop ecx
imul ecx, ecx, 0
add eax, dword [ebp + ecx - 0x280]
cmp eax, 0xdfe0091d
jbe 0x10035478
mov dword [ebp - 0x7c8], 1
jmp 0x1003547f
and dword [ebp - 0x7c8], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x280]
mov dword [ebp - 0xa48], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x280]
mov dword [ebp - 0xad8], eax
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x280]
mov dword [ebp - 0xa58], eax
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0x280], 1
je 0x100354d2
mov dword [ebp - 0x438], 1
jmp 0x100354d9
and dword [ebp - 0x438], 0
mov eax, dword [ebp - 0x438]
mov dword [ebp - 0x2ac], eax
push 4
pop eax
imul eax, eax, 0
imul eax, dword [ebp + eax - 0x280], 0xc2f9
mov dword [ebp - 0x518], eax
push 2
lea ecx, [ebp - 0x7fc]
call fcn.1000dbd4
mov ecx, dword [ebp - 0x518]
mov dword [eax], ecx
cmp dword [ebp - 0x518], 0
je 0x10035538
push 2
lea ecx, [ebp - 0x7fc]
call fcn.1000dbd4
cmp dword [eax], 0
je 0x10035538
mov dword [ebp - 0x440], 1
jmp 0x1003553f
and dword [ebp - 0x440], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x7a4]
add eax, dword [ebp - 0x440]
mov dword [ebp - 0x6c8], eax
mov dword [ebp - 0x750], 0x1c51
cmp dword [ebp - 0x750], 0x753
jge 0x100356cd
and dword [ebp - 0x144], 0
lea eax, [ebp - 0x144]
push eax
push 0x1000a0c8
call fcn.1004d4be
pop ecx
pop ecx
or dword [ebp - 0x154], 0xffffffff
or dword [ebp - 0x14c], 0xffffffff
mov dword [ebp - 0x7b8], 0xf4240
mov eax, dword [ebp - 0x144]
cdq
push 7
pop ecx
idiv ecx
mov dword [ebp - 0xb0], eax
jmp 0x100355c5
mov eax, dword [ebp - 0xb0]
dec eax
mov dword [ebp - 0xb0], eax
cmp dword [ebp - 0xb0], 0
jl 0x10035641
imul eax, dword [ebp - 0xb0], 7
mov ecx, dword [ebp - 0x144]
sub ecx, eax
and ecx, 0x80000003
jns 0x100355ea
dec ecx
or ecx, 0xfffffffc
inc ecx
test ecx, ecx
je 0x100355f0
jmp 0x100355b8
imul eax, dword [ebp - 0xb0], 7
mov ecx, dword [ebp - 0x144]
sub ecx, eax
mov eax, ecx
cdq
and edx, 3
add eax, edx
sar eax, 2
mov dword [ebp - 0x6d0], eax
mov eax, dword [ebp - 0xb0]
mov dword [ebp - 0x154], eax
mov eax, dword [ebp - 0x6d0]
mov dword [ebp - 0x14c], eax
mov eax, dword [ebp - 0x154]
add eax, dword [ebp - 0x14c]
mov dword [ebp - 0x7b8], eax
jmp 0x10035641
cmp dword [ebp - 0x154], 0
jl 0x100356b7
cmp dword [ebp - 0x14c], 0
jl 0x100356b7
and dword [ebp - 0x21c], 0
jmp 0x10035669
mov eax, dword [ebp - 0x21c]
inc eax
mov dword [ebp - 0x21c], eax
mov eax, dword [ebp - 0x21c]
cmp eax, dword [ebp - 0x14c]
jge 0x10035684
push 0x1000a320
call fcn.1004d076
pop ecx
jmp 0x1003565c
and dword [ebp - 0x240], 0
jmp 0x1003569a
mov eax, dword [ebp - 0x240]
inc eax
mov dword [ebp - 0x240], eax
mov eax, dword [ebp - 0x240]
cmp eax, dword [ebp - 0x154]
jge 0x100356b5
push 0x1000a324
call fcn.1004d076
pop ecx
jmp 0x1003568d
jmp 0x100356c2
push 0x1000a1b4
call fcn.1004d076
pop ecx
push 0x10009dcd
call fcn.1004d598
pop ecx
mov dword [ebp - 0x68], 0x743d837b
push 1
lea ecx, [ebp - 0x96c]
call fcn.1000db36
mov byte [ebp - 4], 0x1d
mov dword [ebp - 0x1c], 0
jmp 0x100356f5
mov eax, dword [ebp - 0x1c]
inc eax
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 3
jge 0x1003570b
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0xb80], 7
jmp 0x100356ee
mov dword [ebp - 0x1c], 0
jmp 0x1003571b
mov eax, dword [ebp - 0x1c]
inc eax
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 1
jge 0x10035731
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0x99c], 0xca2961c0
jmp 0x10035714
mov dword [ebp - 0x1c], 0
jmp 0x10035741
mov eax, dword [ebp - 0x1c]
inc eax
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 1
jge 0x1003575d
push dword [ebp - 0x1c]
lea ecx, [ebp - 0x96c]
call fcn.1000dbd4
mov dword [eax], 0xec4279c4
jmp 0x1003573a
mov dword [ebp - 0x68], 2
jmp 0x1003576d
mov eax, dword [ebp - 0x68]
dec eax
mov dword [ebp - 0x68], eax
cmp dword [ebp - 0x68], 0
jl 0x100357ba
mov dword [ebp - 0x6d8], 0
push 0
push 0x57ba
push 0x1c9d
lea eax, [ebp - 0x96c]
push eax
call fcn.1002dc73
add esp, 0x10
lea eax, [ebp - 0x6d8]
push eax
push 0
push 0x1d5e
push 0x4a09
push 0x6d2
call fcn.1002917d
add esp, 0x14
jmp 0x10035766
mov dword [ebp - 0x68], 0xfffffff0
jmp 0x100357ca
mov eax, dword [ebp - 0x68]
dec eax
mov dword [ebp - 0x68], eax
cmp dword [ebp - 0x68], 0xffffffec
je 0x10035801
mov byte [ebp - 0x98], 0
movzx eax, byte [ebp - 0x98]
test eax, eax
je 0x100357ff
push 0
push 0
push 0xb3e
push 0x508c
push 0x7460
push 1
call fcn.10029634
add esp, 0x18
jmp 0x100357c3
mov byte [ebp - 4], 0x11
lea ecx, [ebp - 0x96c]
call fcn.1000dbb8
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x280], 0xffffffff
jg 0x1003582c
mov dword [ebp - 0x588], 1
jmp 0x10035833
and dword [ebp - 0x588], 0
imul eax, dword [ebp - 0x588], 0x1f94
test eax, eax
jne 0x1003585a
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x7a4], 0
jne 0x1003585a
and dword [ebp - 0x448], 0
jmp 0x10035864
mov dword [ebp - 0x448], 1
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x280]
push 4
pop ecx
imul ecx, ecx, 0
add eax, dword [ebp + ecx - 0x7a4]
push 4
pop ecx
imul ecx, ecx, 0
mov edx, dword [ebp - 0x448]
sub edx, dword [ebp + ecx - 0x280]
cmp eax, edx
jle 0x100358a1
mov dword [ebp - 0x29c], 1
jmp 0x100358a8
and dword [ebp - 0x29c], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x7a4]
cmp dword [ebp - 0x29c], eax
jl 0x100358c9
mov dword [ebp - 0x298], 1
jmp 0x100358d0
and dword [ebp - 0x298], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x7a4]
add eax, dword [ebp - 0x298]
mov dword [ebp - 0x2ac], eax
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x7fc]
call fcn.1000dbb8
mov dword [ebp - 0x70], 0
mov dword [ebp - 0x70], 0x14
jmp 0x1003590f
mov eax, dword [ebp - 0x70]
inc eax
mov dword [ebp - 0x70], eax
cmp dword [ebp - 0x70], 0x16
jle 0x10035940
mov dword [ebp - 0x758], 0xe57bf5cd
push 0x1a3b
push 0
push 0x1d39
call fcn.1003118e
add esp, 0xc
cmp dword [ebp - 0x758], 0
je 0x1003593e
jmp 0x10035908
jmp 0x10035908
mov dword [ebp - 0x70], 0x11
jmp 0x10035950
mov eax, dword [ebp - 0x70]
dec eax
mov dword [ebp - 0x70], eax
cmp dword [ebp - 0x70], 0xfffffffa
jle 0x10035978
mov byte [ebp - 0x8d], 0
movzx eax, byte [ebp - 0x8d]
test eax, eax
je 0x10035976
push 0
push 0x28f9
call fcn.1002890b
pop ecx
pop ecx
jmp 0x10035949
and dword [ebp - 0x1d4], 0
jmp 0x10035997
mov eax, dword [ebp - 0x15c]
mov eax, dword [eax]
movzx eax, word [eax + 6]
cmp dword [ebp - 0x1d4], eax
jge 0x1003747e
mov dword [ebp - 0x16c], 0xfffffffc
mov dword [ebp - 0x164], 0
jmp 0x100359d2
mov eax, dword [ebp - 0x164]
inc eax
mov dword [ebp - 0x164], eax
cmp dword [ebp - 0x164], 2
jge 0x100359ee
mov eax, dword [ebp - 0x164]
mov dword [ebp + eax*4 - 0x864], 0xe8b72fd4
jmp 0x100359c5
mov dword [ebp - 0x16c], 0xfffffffd
jmp 0x10035a07
mov eax, dword [ebp - 0x16c]
dec eax
mov dword [ebp - 0x16c], eax
cmp dword [ebp - 0x16c], 0xffffffef
jg 0x10035b2d
mov dword [ebp - 0xfc], 0x7555b7ce
mov byte [ebp - 0x93], 0
movzx eax, byte [ebp - 0x93]
test eax, eax
je 0x10035a3f
push 0
push 0x2128
push 0
call dword [sym.imp.GDI32.dll_GetMetaFileBitsEx]
mov dword [ebp - 0xfc], 0
jmp 0x10035a58
cmp dword [ebp - 0xfc], 1
jg 0x10035b28
mov eax, dword [ebp - 0xfc]
cmp dword [ebp + eax*4 - 0x864], 0
je 0x10035a7a
jmp 0x10035b28
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x864], 0
je 0x10035ac1
mov byte [ebp - 0x8f], 0
movzx eax, byte [ebp - 0x8f]
test eax, eax
je 0x10035abf
push 0x78cb
push 0x2e15
push 0x4544
push 0x7cdd
push 0
push 0x742c
call fcn.1002e0d1
add esp, 0x18
jmp 0x10035b23
mov dword [ebp - 0x174], 1
mov dword [ebp - 0x174], 0xa
jmp 0x10035ae4
cmp dword [ebp - 0x174], 0xffffffee
jle 0x10035b23
push 0x169e
push 0x19d1
push 0x5b9
push 0x2f9
push 0
push 0
push 0x5bec
push 0x696b
push 0x3cfb
push 0x5e5f
call fcn.10026bb4
add esp, 0x28
jmp 0x10035ad7
jmp 0x10035a4b
jmp 0x100359fa
mov dword [ebp - 0x6e0], 0x13ed
cmp dword [ebp - 0x6e0], 0x12a6
jge 0x10035c96
push 4
pop eax
imul eax, eax, 0x12
mov dword [ebp + eax - 0xbe0], 1
mov dword [ebp - 0x17c], 0x63
jmp 0x10035b71
mov eax, dword [ebp - 0x17c]
dec eax
mov dword [ebp - 0x17c], eax
cmp dword [ebp - 0x17c], 0x43
jl 0x10035b8d
mov eax, dword [ebp - 0x17c]
mov dword [ebp + eax*4 - 0xbe0], 2
jmp 0x10035b64
mov dword [ebp - 0x184], 0x42
jmp 0x10035ba6
mov eax, dword [ebp - 0x184]
dec eax
mov dword [ebp - 0x184], eax
cmp dword [ebp - 0x184], 0x37
jl 0x10035bc2
mov eax, dword [ebp - 0x184]
mov dword [ebp + eax*4 - 0xbe0], 3
jmp 0x10035b99
mov dword [ebp - 0x18c], 0x36
jmp 0x10035bdb
cmp dword [ebp - 0x18c], 0x30
jl 0x10035bf7
mov eax, dword [ebp - 0x18c]
mov dword [ebp + eax*4 - 0xbe0], 4
jmp 0x10035bce
mov dword [ebp - 0x104], 0x2f
jmp 0x10035c10
push 4
lea ecx, [ebp - 0xa98]
call fcn.1000db36
mov dword [ebp - 4], 0x1e
mov dword [ebp - 0x194], 0xfffffffb
mov dword [ebp - 0x128], 0
jmp 0x10035ccd
mov eax, dword [ebp - 0x128]
inc eax
mov dword [ebp - 0x128], eax
cmp dword [ebp - 0x128], 4
jge 0x10035cef
push dword [ebp - 0x128]
lea ecx, [ebp - 0xa98]
call fcn.1000dbd4
mov dword [eax], 1
jmp 0x10035cc0
mov dword [ebp - 0x194], 3
jmp 0x10035d08
mov eax, dword [ebp - 0x194]
dec eax
mov dword [ebp - 0x194], eax
cmp dword [ebp - 0x194], 0
jl 0x10035d24
push 0
push 1
push 0x37e7
call fcn.10029a94
add esp, 0xc
jmp 0x10035cfb
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xa98]
call fcn.1000dbb8
mov dword [ebp - 0x9a8], 0xffffffff
mov byte [ebp - 0x97], 0
lea eax, [ebp - 0x97]
push eax
push 1
push 1
call fcn.10025a73
add esp, 0xc
mov byte [ebp - 0x91], 0
movzx eax, byte [ebp - 0x91]
test eax, eax
je 0x10035d7f
push 0xf55
push 0x1ada
push 0
push 0
call fcn.100319db
add esp, 0x10
mov dword [ebp - 0x200], 7
mov dword [ebp - 0x2f4], 0x551fa4c8
mov dword [ebp - 0x760], 1
mov dword [ebp - 0x54], 0
jmp 0x10035dad
cmp dword [ebp - 0x54], 2
jge 0x10035dc3
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
mov esp, ebp
pop ebp
ret