Function at 0x100304d5
Capabilities:
Enumerate pe sections

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x100642d1
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0xc9c
push esi
push edi
movzx eax, byte [ebp + 0xc]
test eax, eax
je 0x1003051b
push 1
push 0x15ad
push 0x6e39
push 0x77d2
call fcn.10035bda
add esp, 0x10
jmp 0x10035bca
lea eax, [ebp + 0x10]
mov dword [ebp - 0x660], eax
mov eax, dword [ebp + 8]
mov dword [ebp - 0x6cc], eax
mov eax, dword [ebp + 0x14]
mov dword [ebp - 0x6d4], eax
mov eax, dword [ebp + 0x18]
mov dword [ebp - 0x6c4], eax
mov eax, dword [ebp + 0x1c]
mov dword [ebp - 0x6a4], eax
mov eax, dword [ebp - 0x660]
movzx eax, byte [eax]
test eax, eax
je 0x10035b98
mov eax, dword [ebp - 0x6c4]
mov dword [ebp - 0x69c], eax
mov eax, dword [ebp - 0x6cc]
mov dword [ebp - 0x66c], eax
mov eax, dword [ebp - 0x6d4]
mov dword [ebp - 0x1c8], eax
mov dword [ebp - 0x40], 1
mov dword [ebp - 0x114], 0xffffffff
mov dword [ebp - 0x9c8], 0x9281c1d9
push 0x4eaf
push 0
push 0x3341
push 0
push 0x6ee
push 0xafa
call fcn.1002c42f
add esp, 0x18
mov eax, dword [ebp - 0x40]
cmp dword [ebp - 0x40], eax
je 0x100305cc
mov dword [ebp - 0x358], 1
jmp 0x100305d3
and dword [ebp - 0x358], 0
mov eax, dword [ebp - 0x40]
cmp dword [ebp - 0x358], eax
jl 0x100305ea
mov dword [ebp - 0x6dc], 1
jmp 0x100305f1
and dword [ebp - 0x6dc], 0
mov eax, dword [ebp - 0x40]
dec eax
cmp eax, 0xfffffffa
jge 0x10030609
cmp dword [ebp - 0x40], 0
jne 0x10030609
and dword [ebp - 0x598], 0
jmp 0x10030613
mov dword [ebp - 0x598], 1
mov eax, dword [ebp - 0x40]
add eax, dword [ebp - 0x598]
cmp eax, dword [ebp - 0x40]
jge 0x1003062d
mov dword [ebp - 0x6e4], 1
jmp 0x10030634
and dword [ebp - 0x6e4], 0
mov eax, dword [ebp - 0x40]
mov dword [ebp - 0x99c], eax
cmp dword [ebp - 0x40], 0
jne 0x10030650
mov eax, 0xf792
test eax, eax
je 0x10030773
mov dword [ebp - 0x714], 0x17ab6dad
mov dword [ebp - 0x70c], 0xaa05d762
push 2
lea ecx, [ebp - 0x904]
call fcn.1000e0be
and dword [ebp - 4], 0
mov dword [ebp - 0x71c], 0xc995f762
mov dword [ebp - 0x6ec], 0
lea eax, [ebp - 0xa34]
push eax
push 0x22b3
push 0x6325
push 1
lea eax, [ebp - 0x904]
push eax
push 0x6dd1
push 0
call fcn.1002c60c
add esp, 0x1c
push 0
lea eax, [ebp - 0x6ec]
push eax
lea eax, [ebp - 0x114]
push eax
lea eax, [ebp - 0x70c]
push eax
lea eax, [ebp - 0x714]
push eax
lea eax, [ebp - 0x71c]
push eax
lea eax, [ebp - 0x904]
push eax
call fcn.10035ed8
add esp, 0x1c
mov dword [ebp - 0x114], 0xfffffff2
jmp 0x100306ff
mov eax, dword [ebp - 0x114]
dec eax
mov dword [ebp - 0x114], eax
cmp dword [ebp - 0x114], 0xffffffe4
jge 0x10030762
mov dword [ebp - 0x228], 0
jmp 0x10030721
mov eax, dword [ebp - 0x228]
inc eax
mov dword [ebp - 0x228], eax
cmp dword [ebp - 0x228], 1
jge 0x1003073d
mov eax, dword [ebp - 0x228]
mov dword [ebp + eax*4 - 0x5a0], 0x9f48
jmp 0x10030714
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x5a0]
inc eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x5a0], eax
cmp dword [ebp - 0x40], 0
je 0x10030760
jmp 0x100306f2
jmp 0x100306f2
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x904]
call fcn.1000e0fa
jmp 0x10030789
mov dword [ebp - 0x5dc], 0x3e91cb64
mov eax, dword [ebp - 0x5dc]
mov dword [ebp - 0x5dc], eax
mov eax, dword [ebp - 0x1c8]
mov eax, dword [eax + 4]
mov dword [ebp - 0x580], eax
push 3
lea ecx, [ebp - 0xa20]
call fcn.1000e0be
mov dword [ebp - 4], 1
mov dword [ebp - 0x9a4], 1
mov dword [ebp - 0xac8], 0x51ad386c
mov dword [ebp - 0x9ac], 0xcd53bc6e
push 2
lea ecx, [ebp - 0xa10]
call fcn.1000e0be
mov byte [ebp - 4], 2
mov dword [ebp - 0xa44], 0x7d0f
mov dword [ebp - 0x724], 0xffffffff
push 2
lea ecx, [ebp - 0xa00]
call fcn.1000e0be
mov byte [ebp - 4], 3
mov dword [ebp - 0x590], 0x9a7b445a
push 0
lea eax, [ebp - 0x2dc]
push eax
lea eax, [ebp - 0xa20]
push eax
push 0x18c9
call fcn.1002ca24
add esp, 0x10
lea eax, [ebp - 0x2dc]
push eax
push 0x5e5b
push 1
push 1
lea eax, [ebp - 0xa10]
push eax
push 0x1c8b
push 0x699c
push 0x16bf
push 0x7382
push 0x7626
call fcn.1002abf6
add esp, 0x28
push 0
push 0
lea eax, [ebp - 0x2dc]
push eax
push 1
push 0xcd6
push 0x1991
lea eax, [ebp - 0xa00]
push eax
push 0x4077
call fcn.1003c89b
add esp, 0x20
push 0x1bce
push 0
lea eax, [ebp - 0x724]
push eax
push 1
push 0x3626
push 0x7ab7
call fcn.1003002f
add esp, 0x18
mov eax, dword [ebp - 0x590]
dec eax
mov dword [ebp - 0x590], eax
mov byte [ebp - 4], 2
lea ecx, [ebp - 0xa00]
call fcn.1000e0fa
mov byte [ebp - 4], 1
lea ecx, [ebp - 0xa10]
call fcn.1000e0fa
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xa20]
call fcn.1000e0fa
push 4
lea ecx, [ebp - 0xa30]
call fcn.1000e0be
mov dword [ebp - 4], 4
push 1
lea ecx, [ebp - 0x754]
call fcn.1000e0be
mov byte [ebp - 4], 5
lea eax, [ebp - 0x9b4]
push eax
lea eax, [ebp - 0x754]
push eax
push 0
call fcn.10035eb4
add esp, 0xc
mov dword [ebp - 0x72c], 0x155e
cmp dword [ebp - 0x72c], 0xf9f
jge 0x100309df
lea eax, [ebp - 0x254]
push eax
push 0x100077a4
call fcn.1004a93b
pop ecx
pop ecx
and dword [ebp - 0x2b4], 0
mov eax, dword [ebp - 0x254]
mov dword [ebp - 0x734], eax
mov eax, dword [ebp - 0x254]
dec eax
mov dword [ebp - 0x254], eax
cmp dword [ebp - 0x734], 0
je 0x100309cd
lea eax, [ebp - 0x7d4]
push eax
lea eax, [ebp - 0x73c]
push eax
lea eax, [ebp - 0x6bc]
push eax
lea eax, [ebp - 0x744]
push eax
push 0x10007770
call fcn.1004a93b
add esp, 0x14
mov eax, dword [ebp - 0x73c]
sub eax, dword [ebp - 0x744]
inc eax
mov ecx, dword [ebp - 0x7d4]
sub ecx, dword [ebp - 0x6bc]
inc ecx
imul eax, ecx
add eax, dword [ebp - 0x2b4]
mov dword [ebp - 0x2b4], eax
jmp 0x10030957
push dword [ebp - 0x2b4]
push 0x10007788
call fcn.1004ace5
pop ecx
pop ecx
push 0
lea ecx, [ebp - 0x754]
call fcn.1000e0ff
and dword [eax], 0
jmp 0x10030a15
push 0
lea ecx, [ebp - 0x754]
call fcn.1000e0ff
mov dword [ebp - 0x59c], eax
mov eax, dword [ebp - 0x59c]
mov eax, dword [eax]
inc eax
mov ecx, dword [ebp - 0x59c]
mov dword [ecx], eax
push 0
lea ecx, [ebp - 0x754]
call fcn.1000e0ff
cmp dword [eax], 0x11
jge 0x10030a7f
mov dword [ebp - 0x174], 0xaa9ac70c
mov dword [ebp - 0x174], 0xffffffea
jmp 0x10030a4a
mov eax, dword [ebp - 0x174]
inc eax
mov dword [ebp - 0x174], eax
cmp dword [ebp - 0x174], 0xffffffff
jg 0x10030a7a
mov byte [ebp - 0xa5], 0
movzx eax, byte [ebp - 0xa5]
test eax, eax
je 0x10030a78
push 0x76f6
push 1
push 1
push 0
call fcn.1003d337
add esp, 0x10
jmp 0x10030a3d
jmp 0x100309f1
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x754]
call fcn.1000e0fa
mov dword [ebp - 0x138], 0xada439be
mov dword [ebp - 0x17c], 0x75b57fd5
mov dword [ebp - 0x1d8], 0
jmp 0x10030abb
mov eax, dword [ebp - 0x1d8]
inc eax
mov dword [ebp - 0x1d8], eax
cmp dword [ebp - 0x1d8], 3
jge 0x10030ad7
mov eax, dword [ebp - 0x1d8]
mov dword [ebp + eax*4 - 0xaec], 0xffff
jmp 0x10030aae
mov dword [ebp - 0x17c], 0
jmp 0x10030af0
mov eax, dword [ebp - 0x17c]
inc eax
mov dword [ebp - 0x17c], eax
cmp dword [ebp - 0x17c], 0xc
jne 0x10030b9a
push 2
lea ecx, [ebp - 0x7f8]
call fcn.1000e0be
mov byte [ebp - 4], 6
mov dword [ebp - 0x658], 0xffffffff
mov dword [ebp - 0x1dc], 0
jmp 0x10030b31
mov eax, dword [ebp - 0x1dc]
inc eax
mov dword [ebp - 0x1dc], eax
cmp dword [ebp - 0x1dc], 2
jge 0x10030b50
push dword [ebp - 0x1dc]
lea ecx, [ebp - 0x7f8]
call fcn.1000e0ff
and dword [eax], 0
jmp 0x10030b24
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0xaec], 0
je 0x10030b71
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x7f8]
call fcn.1000e0fa
jmp 0x10030b9a
push 1
lea ecx, [ebp - 0x7f8]
call fcn.1000e0ff
mov eax, dword [eax]
mov dword [ebp - 0x658], eax
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x7f8]
call fcn.1000e0fa
jmp 0x10030ae3
mov dword [ebp - 0xa90], 0xffff
mov dword [ebp - 0x54], 0
jmp 0x10030bb4
mov eax, dword [ebp - 0x54]
inc eax
mov dword [ebp - 0x54], eax
cmp dword [ebp - 0x54], 2
jge 0x10030bca
mov eax, dword [ebp - 0x54]
mov dword [ebp + eax*4 - 0x244], 0xa75c
jmp 0x10030bad
mov dword [ebp - 0x54], 0
jmp 0x10030bda
mov eax, dword [ebp - 0x54]
inc eax
mov dword [ebp - 0x54], eax
cmp dword [ebp - 0x54], 2
jge 0x10030bf0
mov eax, dword [ebp - 0x54]
mov dword [ebp + eax*4 - 0x9c0], 0x93876a47
jmp 0x10030bd3
push 0x4ffb
push 0
push 0x293c
push 0xf50
push 1
push 0x5059
call fcn.1002cedb
add esp, 0x18
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x244], 0
jne 0x10030c39
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x244], 0
jne 0x10030c39
and dword [ebp - 0x53c], 0
jmp 0x10030c43
mov dword [ebp - 0x53c], 1
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x244], 0xffffffff
jg 0x10030c5f
mov dword [ebp - 0x2e4], 1
jmp 0x10030c66
and dword [ebp - 0x2e4], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x244]
cmp dword [ebp - 0x2e4], eax
jne 0x10030c87
mov dword [ebp - 0x474], 1
jmp 0x10030c8e
and dword [ebp - 0x474], 0
cmp dword [ebp - 0x474], 0xdb78
jg 0x10030ca6
mov dword [ebp - 0x2ec], 1
jmp 0x10030cad
and dword [ebp - 0x2ec], 0
cmp dword [ebp - 0x2ec], 0x3ec3d4e7
jl 0x10030cc5
mov dword [ebp - 0x748], 1
jmp 0x10030ccc
and dword [ebp - 0x748], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x244]
mov dword [ebp - 0xa68], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x244], 0xc326
jle 0x10030cfe
mov dword [ebp - 0x64c], 1
jmp 0x10030d05
and dword [ebp - 0x64c], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x244]
mov dword [ebp - 0x9d4], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x53c]
sub ecx, dword [ebp + eax - 0x244]
cmp ecx, 1
jle 0x10030d3c
mov dword [ebp - 0x2f4], 1
jmp 0x10030d43
and dword [ebp - 0x2f4], 0
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x2f4]
mov dword [ebp + eax - 0x9c0], ecx
mov dword [ebp - 0x184], 0
jmp 0x10030d6f
mov eax, dword [ebp - 0x184]
inc eax
mov dword [ebp - 0x184], eax
cmp dword [ebp - 0x184], 4
jge 0x10030d91
push dword [ebp - 0x184]
lea ecx, [ebp - 0xa30]
call fcn.1000e0ff
mov dword [eax], 0xbbca
jmp 0x10030d62
mov dword [ebp - 0x138], 3
jmp 0x10030daa
mov eax, dword [ebp - 0x138]
dec eax
mov dword [ebp - 0x138], eax
cmp dword [ebp - 0x138], 0
jl 0x10034138
push 1
lea ecx, [ebp - 0x630]
call fcn.1000e0be
mov byte [ebp - 4], 7
mov dword [ebp - 0x758], 0xffffffff
mov dword [ebp - 0x24], 0
jmp 0x10030de2
mov eax, dword [ebp - 0x24]
inc eax
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 1
jge 0x10030df8
mov eax, dword [ebp - 0x24]
mov dword [ebp + eax*4 - 0x1ec], 0xffffffff
jmp 0x10030ddb
mov dword [ebp - 0x24], 0
jmp 0x10030e08
mov eax, dword [ebp - 0x24]
inc eax
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 1
jge 0x10030e24
push dword [ebp - 0x24]
lea ecx, [ebp - 0x630]
call fcn.1000e0ff
mov dword [eax], 0xc70bb743
jmp 0x10030e01
mov dword [ebp - 0x24], 0
jmp 0x10030e34
mov eax, dword [ebp - 0x24]
inc eax
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 2
jge 0x10030e4a
mov eax, dword [ebp - 0x24]
mov dword [ebp + eax*4 - 0xa58], 0x4dde9a
jmp 0x10030e2d
push 0x4c4f
push 0x2740
push 1
push 0x674b
push 0x75e6
push 0
push 0x6faf
call fcn.1002e64e
add esp, 0x1c
push 0
lea ecx, [ebp - 0x630]
call fcn.1000e0ff
and dword [eax], 0
jmp 0x10030ea5
push 0
lea ecx, [ebp - 0x630]
call fcn.1000e0ff
mov dword [ebp - 0x47c], eax
mov eax, dword [ebp - 0x47c]
mov eax, dword [eax]
inc eax
mov ecx, dword [ebp - 0x47c]
mov dword [ecx], eax
push 0
lea ecx, [ebp - 0x630]
call fcn.1000e0ff
cmp dword [eax], 0
jg 0x10031095
mov dword [ebp - 0x4c], 0xfe1ca2
mov dword [ebp - 0x4c], 0
jmp 0x10030ed2
mov eax, dword [ebp - 0x4c]
inc eax
mov dword [ebp - 0x4c], eax
cmp dword [ebp - 0x4c], 0
jg 0x10030ee9
mov eax, dword [ebp - 0x4c]
cmp dword [ebp + eax*4 - 0x1ec], 0
je 0x10030ee7
jmp 0x10030ee9
jmp 0x10030ecb
mov dword [ebp - 0x4c], 0
jmp 0x10030ef9
mov eax, dword [ebp - 0x4c]
dec eax
mov dword [ebp - 0x4c], eax
cmp dword [ebp - 0x4c], 0
jl 0x10031090
mov dword [ebp - 0x1e4], 0xffffffff
mov byte [ebp - 0xc0], 0
push 0x6c1f
push 1
push 0
push 0x789
push 0x7d8
push 0x5f42
push 1
push 0x4086
lea eax, [ebp - 0xc0]
push eax
call fcn.10035c06
add esp, 0x24
mov dword [ebp - 0x1e4], 0
jmp 0x10030f5b
mov eax, dword [ebp - 0x1e4]
dec eax
mov dword [ebp - 0x1e4], eax
cmp dword [ebp - 0x1e4], 0
jl 0x1003108b
mov dword [ebp - 0x18c], 0x3e7ed6f1
push 0
lea ecx, [ebp - 0x630]
call fcn.1000e0ff
mov eax, dword [eax]
cmp dword [ebp + eax*4 - 0x1ec], 0
je 0x10030f90
jmp 0x1003108b
mov dword [ebp - 0x18c], 0
jmp 0x10030fa9
mov eax, dword [ebp - 0x18c]
inc eax
mov dword [ebp - 0x18c], eax
cmp dword [ebp - 0x18c], 0
jg 0x10031086
mov dword [ebp - 0x13c], 8
mov dword [ebp - 0x13c], 0
jmp 0x10030fd9
mov eax, dword [ebp - 0x13c]
dec eax
mov dword [ebp - 0x13c], eax
cmp dword [ebp - 0x13c], 0
jl 0x10031081
mov dword [ebp - 0x7b8], 0x80643b8a
mov eax, dword [ebp - 0x4c]
mov eax, dword [ebp + eax*4 - 0x1ec]
mov dword [ebp - 0x2fc], eax
mov eax, dword [ebp - 0x13c]
mov ecx, dword [ebp - 0x2fc]
mov dword [ebp + eax*4 - 0x1ec], ecx
cmp dword [ebp - 0x2fc], 0xe6fc
jge 0x1003102b
mov dword [ebp - 0x5d8], 1
jmp 0x10031032
and dword [ebp - 0x5d8], 0
mov eax, dword [ebp - 0x7b8]
mov dword [ebp - 0x304], eax
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x304]
mov dword [ebp + eax - 0xa58], ecx
mov eax, dword [ebp - 0x5d8]
cmp eax, dword [ebp - 0x304]
jg 0x1003106b
mov dword [ebp - 0x668], 1
jmp 0x10031072
and dword [ebp - 0x668], 0
mov dword [ebp - 0x758], 1
jmp 0x10030fcc
jmp 0x10030f9c
jmp 0x10030f4e
jmp 0x10030ef2
jmp 0x10030e81
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x630]
call fcn.1000e0fa
mov dword [ebp - 0x58], 0xffffffff
mov dword [ebp - 0x78], 0
mov dword [ebp - 0x670], 0x143d
cmp dword [ebp - 0x670], 0x6ea
jge 0x1003135d
lea eax, [ebp - 0x2b0]
push eax
push 0x10007748
call fcn.1004a93b
pop ecx
pop ecx
mov eax, dword [ebp - 0x2b0]
mov dword [ebp - 0x7c0], eax
mov eax, dword [ebp - 0x2b0]
dec eax
mov dword [ebp - 0x2b0], eax
cmp dword [ebp - 0x7c0], 0
je 0x1003135d
lea eax, [ebp - 0xbc]
push eax
push 0x10007748
call fcn.1004a93b
pop ecx
pop ecx
and dword [ebp - 0x194], 0
jmp 0x1003112e
mov eax, dword [ebp - 0x194]
inc eax
mov dword [ebp - 0x194], eax
mov eax, dword [ebp - 0x194]
cmp eax, dword [ebp - 0xbc]
jge 0x10031150
imul ecx, dword [ebp - 0x194], 0xc
add ecx, 0x1099e258
call fcn.10043ff3
jmp 0x10031121
and dword [ebp - 0x44], 0
jmp 0x1003115d
mov eax, dword [ebp - 0x44]
inc eax
mov dword [ebp - 0x44], eax
mov eax, dword [ebp - 0x44]
inc eax
cmp eax, dword [ebp - 0xbc]
jge 0x100311de
mov eax, dword [ebp - 0x44]
lea eax, [ebp + eax*4 - 0xca8]
push eax
mov eax, dword [ebp - 0x44]
lea eax, [ebp + eax*4 - 0xbd0]
push eax
mov eax, dword [ebp - 0x44]
lea eax, [ebp + eax*4 - 0xc3c]
push eax
push 0x10007790
call fcn.1004a93b
add esp, 0x10
mov eax, dword [ebp - 0x44]
lea eax, [ebp + eax*4 - 0xbd0]
push eax
mov eax, dword [ebp - 0x44]
imul ecx, dword [ebp + eax*4 - 0xc3c], 0xc
add ecx, 0x1099e258
call fcn.10043fa0
mov eax, dword [ebp - 0x44]
lea eax, [ebp + eax*4 - 0xc3c]
push eax
mov eax, dword [ebp - 0x44]
imul ecx, dword [ebp + eax*4 - 0xbd0], 0xc
add ecx, 0x1099e258
call fcn.10043fa0
jmp 0x10031156
push 4
pop eax
imul eax, eax, 0
mov dword [eax + 0x1099dcb8], 0xfffffffe
push 0xffffffffffffffff
push 0
call fcn.10030443
pop ecx
pop ecx
xorpd xmm0, xmm0
movlpd qword [ebp - 0x164], xmm0
and dword [ebp - 0x34], 0
jmp 0x10031212
mov eax, dword [ebp - 0x34]
inc eax
mov dword [ebp - 0x34], eax
mov eax, dword [ebp - 0x34]
inc eax
cmp eax, dword [ebp - 0xbc]
jge 0x10031318
mov eax, dword [ebp - 0x34]
mov eax, dword [ebp + eax*4 - 0xc3c]
mov ecx, dword [ebp - 0x34]
mov eax, dword [eax*4 + 0x1099dcb8]
cmp eax, dword [ebp + ecx*4 - 0xbd0]
jne 0x100312aa
mov eax, dword [ebp - 0x34]
mov eax, dword [ebp + eax*4 - 0xca8]
cdq
mov ecx, eax
mov esi, edx
mov eax, dword [ebp - 0x34]
mov eax, dword [ebp + eax*4 - 0xc3c]
mov eax, dword [eax*4 + 0x1099e150]
cdq
push edx
push eax
push esi
push ecx
call fcn.10050210
mov ecx, eax
mov esi, edx
mov eax, dword [ebp - 0x34]
mov eax, dword [ebp + eax*4 - 0xc3c]
mov edx, dword [ebp - 0xbc]
sub edx, dword [eax*4 + 0x1099e150]
mov eax, edx
cdq
push edx
push eax
push esi
push ecx
call fcn.10050210
add eax, dword [ebp - 0x164]
adc edx, dword [ebp - 0x160]
mov dword [ebp - 0x164], eax
mov dword [ebp - 0x160], edx
jmp 0x10031313
mov eax, dword [ebp - 0x34]
mov eax, dword [ebp + eax*4 - 0xca8]
cdq
mov ecx, eax
mov esi, edx
mov eax, dword [ebp - 0x34]
mov eax, dword [ebp + eax*4 - 0xbd0]
mov eax, dword [eax*4 + 0x1099e150]
cdq
push edx
push eax
push esi
push ecx
call fcn.10050210
mov ecx, eax
mov esi, edx
mov eax, dword [ebp - 0x34]
mov eax, dword [ebp + eax*4 - 0xbd0]
mov edx, dword [ebp - 0xbc]
sub edx, dword [eax*4 + 0x1099e150]
mov eax, edx
cdq
push edx
push eax
push esi
push ecx
call fcn.10050210
add eax, dword [ebp - 0x164]
adc edx, dword [ebp - 0x160]
mov dword [ebp - 0x164], eax
mov dword [ebp - 0x160], edx
jmp 0x1003120b
mov edx, dword [ebp - 0x160]
mov ecx, dword [ebp - 0x164]
call fcn.1006332f
mov eax, dword [ebp - 0xbc]
dec eax
imul eax, dword [ebp - 0xbc]
cdq
sub eax, edx
sar eax, 1
cvtsi2sd xmm1, eax
divsd xmm0, xmm1
push ecx
push ecx
movsd qword [esp], xmm0
push 0x10007b4c
call fcn.1004ace5
add esp, 0xc
jmp 0x100310df
mov dword [ebp - 0x678], 1
mov dword [ebp - 0x1f4], 0
jmp 0x10031380
mov eax, dword [ebp - 0x1f4]
inc eax
mov dword [ebp - 0x1f4], eax
cmp dword [ebp - 0x1f4], 1
jge 0x1003139c
mov eax, dword [ebp - 0x1f4]
mov dword [ebp + eax*4 - 0x35c], 0xe1d925b0
jmp 0x10031373
mov byte [ebp - 0xad], 0
movzx eax, byte [ebp - 0xad]
test eax, eax
je 0x100313c2
push 0x6868
push 0
push 0x739f
call fcn.1002c943
add esp, 0xc
mov dword [ebp - 0x78], 0
jmp 0x100313d2
mov eax, dword [ebp - 0x78]
dec eax
mov dword [ebp - 0x78], eax
cmp dword [ebp - 0x78], 0xfffffff6
jge 0x10031a84
mov dword [ebp - 0x10], 0x7d45db34
mov dword [ebp - 0x36c], 0xfffffffc
mov dword [ebp - 0x10], 0
jmp 0x100313fd
mov eax, dword [ebp - 0x10]
inc eax
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], 0
jg 0x10031437
mov byte [ebp - 0xc2], 0
movzx eax, byte [ebp - 0xc2]
test eax, eax
je 0x10031435
push 0x78b2
push 0xe6a
push 0x3344
push 0
push 0x63cc
push 1
call fcn.1002c50b
add esp, 0x18
jmp 0x100313f6
mov dword [ebp - 0x10], 0
jmp 0x10031447
mov eax, dword [ebp - 0x10]
dec eax
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], 0xffffffe2
jg 0x10031a7f
mov dword [ebp - 0x324], 0
push 3
lea ecx, [ebp - 0x764]
call fcn.1000e0be
mov byte [ebp - 4], 8
mov dword [ebp - 0xc8], 3
mov dword [ebp - 0x11c], 0
jmp 0x1003148f
mov eax, dword [ebp - 0x11c]
inc eax
mov dword [ebp - 0x11c], eax
cmp dword [ebp - 0x11c], 1
jge 0x100314ab
mov eax, dword [ebp - 0x11c]
mov dword [ebp + eax*4 - 0x124], 1
jmp 0x10031482
push 1
lea eax, [ebp - 0x11c]
push eax
push 1
lea eax, [ebp - 0x764]
push eax
call fcn.1002ae71
add esp, 0x10
mov eax, 0x7d8cf4c5
test eax, eax
je 0x1003164b
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x124]
mov dword [ebp - 0xa6c], eax
cmp dword [ebp - 0x10], 0
je 0x100314fd
cmp dword [ebp - 0x10], 0
je 0x100314fd
mov dword [ebp - 0x484], 1
jmp 0x10031504
and dword [ebp - 0x484], 0
cmp dword [ebp - 0x484], 0xe13f5e3
jne 0x10031525
mov eax, 0xfffc
test eax, eax
je 0x10031525
mov dword [ebp - 0x30c], 1
jmp 0x1003152c
and dword [ebp - 0x30c], 0
cmp dword [ebp - 0x30c], 0xccaea0a9
ja 0x10031544
mov dword [ebp - 0x544], 1
jmp 0x1003154b
and dword [ebp - 0x544], 0
mov eax, dword [ebp - 0x10]
cmp dword [ebp - 0x544], eax
je 0x10031562
mov dword [ebp - 0x314], 1
jmp 0x10031569
and dword [ebp - 0x314], 0
mov eax, dword [ebp - 0x314]
sub eax, dword [ebp - 0x10]
push 4
pop ecx
imul ecx, ecx, 0
cmp eax, dword [ebp + ecx - 0x124]
jne 0x1003158d
mov dword [ebp - 0x48c], 1
jmp 0x10031594
and dword [ebp - 0x48c], 0
mov eax, dword [ebp - 0x48c]
sub eax, 7
cmp eax, dword [ebp - 0x78]
jne 0x100315ae
mov dword [ebp - 0x31c], 1
jmp 0x100315b5
and dword [ebp - 0x31c], 0
mov eax, dword [ebp - 0x10]
cmp eax, dword [ebp - 0x31c]
jne 0x100315cc
mov dword [ebp - 0x5a4], 1
jmp 0x100315d3
and dword [ebp - 0x5a4], 0
mov eax, dword [ebp - 0x5a4]
mov dword [ebp - 0x324], eax
mov eax, dword [ebp - 0x324]
mov dword [ebp - 0x494], eax
push 1
lea ecx, [ebp - 0x764]
call fcn.1000e0ff
mov ecx, dword [ebp - 0x494]
mov dword [eax], ecx
mov eax, dword [ebp - 0x10]
cmp eax, dword [ebp - 0x494]
jne 0x10031617
mov dword [ebp - 0x32c], 1
jmp 0x1003161e
and dword [ebp - 0x32c], 0
mov eax, dword [ebp - 0x32c]
mov dword [ebp - 0xc8], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x124]
cmp dword [ebp - 0xc8], eax
je 0x1003164b
mov dword [ebp - 0x54c], 1
jmp 0x10031652
and dword [ebp - 0x54c], 0
cmp dword [ebp - 0x54c], 9
jne 0x10031667
mov dword [ebp - 0x334], 1
jmp 0x1003166e
and dword [ebp - 0x334], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x334]
sub ecx, dword [ebp + eax - 0x124]
cmp ecx, dword [ebp - 0x10]
je 0x100317df
mov dword [ebp - 0x5c0], 0x3e5c7d81
mov dword [ebp - 0x878], 4
mov dword [ebp - 0x874], 4
mov dword [ebp - 0x870], 4
mov dword [ebp - 0x86c], 4
mov esi, dword [ebp - 0x10]
push 0
lea ecx, [ebp - 0x764]
call fcn.1000e0ff
add esi, dword [eax]
jne 0x100316eb
mov eax, dword [ebp - 0x78]
mov dword [ebp - 0x9dc], eax
cmp dword [ebp - 0xc8], 0
jne 0x100316eb
and dword [ebp - 0x49c], 0
jmp 0x100316f5
mov dword [ebp - 0x49c], 1
mov eax, dword [ebp - 0x78]
cmp dword [ebp - 0x49c], eax
jne 0x1003170c
mov dword [ebp - 0x33c], 1
jmp 0x10031713
and dword [ebp - 0x33c], 0
push 1
lea ecx, [ebp - 0x764]
call fcn.1000e0ff
mov eax, dword [eax]
mov dword [ebp - 0x5c0], eax
mov eax, dword [ebp - 0x33c]
sub eax, dword [ebp - 0xc8]
cmp dword [ebp - 0x5c0], eax
jge 0x10031748
mov dword [ebp - 0x344], 1
jmp 0x1003174f
and dword [ebp - 0x344], 0
mov eax, dword [ebp - 0x344]
mov dword [ebp - 0xc8], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x35c]
cmp dword [ebp - 0xc8], eax
je 0x1003177c
mov dword [ebp - 0x4a4], 1
jmp 0x10031783
and dword [ebp - 0x4a4], 0
cmp dword [ebp - 0x4a4], 1
je 0x10031798
mov dword [ebp - 0x34c], 1
jmp 0x1003179f
and dword [ebp - 0x34c], 0
push 4
pop eax
imul eax, eax, 3
mov eax, dword [ebp + eax - 0x878]
cmp dword [ebp - 0x34c], eax
je 0x100317c0
mov dword [ebp - 0x554], 1
jmp 0x100317c7
and dword [ebp - 0x554], 0
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x554]
mov dword [ebp + eax - 0x878], ecx
jmp 0x10031a6b
mov dword [ebp - 0x14c], 0
mov dword [ebp - 0x19c], 0x1fbcda4f
mov dword [ebp - 0x768], 5
cmp dword [ebp - 0x10], 0
je 0x100319e5
mov eax, dword [ebp - 0x14c]
mov ecx, dword [ebp - 0x14c]
lea eax, [eax + ecx - 0x6030033]
test eax, eax
je 0x10031833
cmp dword [ebp - 0x14c], 0
je 0x10031833
mov dword [ebp - 0x354], 1
jmp 0x1003183a
and dword [ebp - 0x354], 0
mov eax, dword [ebp - 0x78]
cmp dword [ebp - 0x354], eax
jle 0x10031851
mov dword [ebp - 0x4ac], 1
jmp 0x10031858
and dword [ebp - 0x4ac], 0
mov eax, dword [ebp - 0x14c]
add eax, dword [ebp - 0x4ac]
cmp eax, dword [ebp - 0x19c]
je 0x10031881
mov eax, 0x8d5b
test eax, eax
je 0x10031881
mov dword [ebp - 0x5b0], 1
jmp 0x10031888
and dword [ebp - 0x5b0], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x35c]
cmp dword [ebp - 0x5b0], eax
jne 0x100318a9
mov dword [ebp - 0x364], 1
jmp 0x100318b0
and dword [ebp - 0x364], 0
cmp dword [ebp - 0x364], 0
jbe 0x100318c5
mov dword [ebp - 0x4b4], 1
jmp 0x100318cc
and dword [ebp - 0x4b4], 0
mov eax, dword [ebp - 0x4b4]
mov dword [ebp - 0x36c], eax
mov eax, dword [ebp - 0x36c]
sub eax, dword [ebp - 0x19c]
imul eax, dword [ebp - 0x19c]
test eax, eax
jne 0x10031901
mov eax, 0xb39d90dc
test eax, eax
jne 0x10031901
and dword [ebp - 0x55c], 0
jmp 0x1003190b
mov dword [ebp - 0x55c], 1
mov eax, dword [ebp - 0x10]
cmp dword [ebp - 0x55c], eax
jge 0x10031922
mov dword [ebp - 0x374], 1
jmp 0x10031929
and dword [ebp - 0x374], 0
cmp dword [ebp - 0x374], 0x2d46fede
jg 0x10031941
mov dword [ebp - 0x4bc], 1
jmp 0x10031948
and dword [ebp - 0x4bc], 0
mov eax, dword [ebp - 0x19c]
cmp dword [ebp - 0x4bc], eax
jl 0x10031962
mov dword [ebp - 0x37c], 1
jmp 0x10031969
and dword [ebp - 0x37c], 0
cmp dword [ebp - 0x37c], 0x5b12
je 0x10031987
cmp dword [ebp - 0x14c], 0
je 0x10031987
and dword [ebp - 0x5c4], 0
jmp 0x10031991
mov dword [ebp - 0x5c4], 1
cmp dword [ebp - 0x5c4], 0xd754
jl 0x100319a9
mov dword [ebp - 0x384], 1
jmp 0x100319b0
and dword [ebp - 0x384], 0
mov eax, dword [ebp - 0x10]
cmp dword [ebp - 0x384], eax
je 0x100319c7
mov dword [ebp - 0x4c4], 1
jmp 0x100319ce
and dword [ebp - 0x4c4], 0
mov eax, dword [ebp - 0x4c4]
sub eax, dword [ebp - 0x10]
je 0x100319e5
mov dword [ebp - 0x38c], 1
jmp 0x100319ec
and dword [ebp - 0x38c], 0
cmp dword [ebp - 0x38c], 0x3fbd5ced
jne 0x10031a04
mov dword [ebp - 0x564], 1
jmp 0x10031a0b
and dword [ebp - 0x564], 0
mov eax, dword [ebp - 0x10]
cmp dword [ebp - 0x564], eax
jge 0x10031a22
mov dword [ebp - 0x394], 1
jmp 0x10031a29
and dword [ebp - 0x394], 0
cmp dword [ebp - 0x394], 0xdce6
jl 0x10031a41
mov dword [ebp - 0x4cc], 1
jmp 0x10031a48
and dword [ebp - 0x4cc], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x4cc]
sub ecx, dword [ebp + eax - 0x124]
mov dword [ebp - 0x678], ecx
mov dword [ebp - 0x768], 0xffffffff
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x764]
call fcn.1000e0fa
jmp 0x10031440
jmp 0x100313cb
mov dword [ebp - 0x10c], 0x44455595
mov dword [ebp - 0x7c4], 0xb94d0f4f
mov dword [ebp - 0x58], 0
jmp 0x10031aa8
mov eax, dword [ebp - 0x58]
inc eax
mov dword [ebp - 0x58], eax
cmp dword [ebp - 0x58], 3
jg 0x10031e49
mov dword [ebp - 0x680], 0x155f
cmp dword [ebp - 0x680], 0x118c
jge 0x10031cee
lea ecx, [ebp - 0x5ac]
call fcn.1000e26d
mov byte [ebp - 4], 9
lea ecx, [ebp - 0x61c]
call fcn.1000e26d
mov byte [ebp - 4], 0xa
lea ecx, [ebp - 0x774]
call fcn.10021c80
mov byte [ebp - 4], 0xb
lea eax, [ebp - 0x7c8]
push eax
push 0x1000774c
call fcn.1004a93b
pop ecx
pop ecx
mov byte [ebp - 0x15], 1
and dword [ebp - 0x144], 0
and dword [ebp - 0x260], 0
jmp 0x10031b2d
mov eax, dword [ebp - 0x260]
inc eax
mov dword [ebp - 0x260], eax
mov eax, dword [ebp - 0x260]
cmp eax, dword [ebp - 0x7c8]
jge 0x10031c3d
lea eax, [ebp - 0xd0]
push eax
push 0x1000774c
call fcn.1004a93b
pop ecx
pop ecx
mov eax, dword [ebp - 0x144]
inc eax
mov dword [ebp - 0x144], eax
cmp dword [ebp - 0xd0], 0
jle 0x10031bbb
lea eax, [ebp - 0xd0]
push eax
lea ecx, [ebp - 0x61c]
call fcn.10021d99
test eax, eax
je 0x10031b87
mov byte [ebp - 0x15], 0
jmp 0x10031c3d
lea eax, [ebp - 0xd0]
push eax
lea eax, [ebp - 0xb00]
push eax
lea ecx, [ebp - 0x5ac]
call fcn.10021ce7
lea eax, [ebp - 0xd0]
push eax
lea eax, [ebp - 0xb50]
push eax
lea ecx, [ebp - 0x61c]
call fcn.10021ce7
jmp 0x10031c38
mov eax, dword [ebp - 0xd0]
neg eax
mov dword [ebp - 0x688], eax
lea eax, [ebp - 0x688]
push eax
lea ecx, [ebp - 0x5ac]
call fcn.10021d99
test eax, eax
jne 0x10031be5
mov byte [ebp - 0x15], 0
jmp 0x10031c3d
mov eax, dword [ebp - 0xd0]
neg eax
mov dword [ebp - 0x778], eax
lea eax, [ebp - 0x778]
push eax
lea ecx, [ebp - 0x5ac]
call fcn.10021d05
lea ecx, [ebp - 0x5ac]
call fcn.1000e40d
test eax, eax
jne 0x10031c38
lea eax, [ebp - 0x144]
push eax
lea ecx, [ebp - 0x774]
call fcn.10021c94
and dword [ebp - 0x144], 0
lea ecx, [ebp - 0x61c]
call fcn.100226b8
jmp 0x10031b20
cmp dword [ebp - 0x144], 0
jle 0x10031c4a
mov byte [ebp - 0x15], 0
movzx eax, byte [ebp - 0x15]
test eax, eax
je 0x10031cb6
lea ecx, [ebp - 0x774]
call fcn.100145dd
push eax
push 0x10007788
call fcn.1004ace5
pop ecx
pop ecx
and dword [ebp - 0x1fc], 0
jmp 0x10031c80
mov eax, dword [ebp - 0x1fc]
inc eax
mov dword [ebp - 0x1fc], eax
lea ecx, [ebp - 0x774]
call fcn.100145dd
cmp dword [ebp - 0x1fc], eax
jae 0x10031cb4
push dword [ebp - 0x1fc]
lea ecx, [ebp - 0x774]
call fcn.1000e0ff
push dword [eax]
push 0x10007a1c
call fcn.1004ace5
pop ecx
pop ecx
jmp 0x10031c73
jmp 0x10031cc1
push 0x10007a80
call fcn.1004b3f4
pop ecx
mov byte [ebp - 4], 0xa
lea ecx, [ebp - 0x774]
call fcn.1000e0fa
mov byte [ebp - 4], 9
lea ecx, [ebp - 0x61c]
call fcn.1001c64e
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x5ac]
call fcn.1001c64e
mov dword [ebp - 0x12c], 0xffffffff
push 0x1227
push 0x7328
push 0x79f9
push 0x793c
push 0
push 0x6ecb
push 0x42d8
push 0x47ba
lea eax, [ebp - 0x12c]
push eax
push 0x2303
push 0xca0
push 0x1675
call fcn.1002d6ec
add esp, 0x30
mov dword [ebp - 0x12c], 0
jmp 0x10031d54
mov eax, dword [ebp - 0x12c]
inc eax
mov dword [ebp - 0x12c], eax
cmp dword [ebp - 0x12c], 0x19
jne 0x10031e3a
mov dword [ebp - 0x8c0], 0xcb4c23af
mov dword [ebp - 0x8bc], 0xcb4c23af
mov dword [ebp - 0x8b8], 0xcb4c23af
mov dword [ebp - 0x8b4], 0xcb4c23af
lea ecx, [ebp - 0x2a1]
call fcn.1000ed23
push eax
lea eax, [ebp - 0x8b0]
push eax
lea eax, [ebp - 0x8c0]
push eax
lea ecx, [ebp - 0xb30]
call fcn.10021c6c
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0x828]
call fcn.10021c46
mov byte [ebp - 4], 0xc
push 0
lea ecx, [ebp - 0x828]
call fcn.1000e0ff
mov dword [eax], 0xffffffef
jmp 0x10031dfb
push 0
lea ecx, [ebp - 0x828]
call fcn.1000e0ff
mov dword [ebp - 0x39c], eax
mov eax, dword [ebp - 0x39c]
mov eax, dword [eax]
inc eax
mov ecx, dword [ebp - 0x39c]
mov dword [ecx], eax
push 0
lea ecx, [ebp - 0x828]
call fcn.1000e0ff
cmp dword [eax], 0xc
jne 0x10031e26
mov byte [ebp - 0xaf], 0
lea eax, [ebp - 0xaf]
push eax
push 0
call fcn.1002d011
pop ecx
pop ecx
jmp 0x10031dd7
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x828]
call fcn.1000e0fa
jmp 0x10031d47
mov dword [ebp - 0x10c], 0
jmp 0x10031aa1
mov dword [ebp - 0x80], 7
mov dword [ebp - 0x9c], 0x3191b495
mov dword [ebp - 0x574], 0xde2e510b
mov dword [ebp - 0x7d8], 8
mov dword [ebp - 0x690], 0x13d7
cmp dword [ebp - 0x690], 0x8b6
jge 0x1003202a
and dword [ebp - 0x158], 0
and dword [ebp - 0x3a4], 0
lea eax, [ebp - 0x3a4]
push eax
lea eax, [ebp - 0x158]
push eax
push 0x10007a24
call fcn.1004a93b
add esp, 0xc
xor ecx, ecx
mov eax, dword [ebp - 0x158]
push 4
pop edx
mul edx
seto cl
neg ecx
or ecx, eax
push ecx
call fcn.10045feb
pop ecx
mov dword [ebp - 0x7d0], eax
mov eax, dword [ebp - 0x7d0]
mov dword [ebp - 0x5bc], eax
xor ecx, ecx
mov eax, dword [ebp - 0x158]
push 4
pop edx
mul edx
seto cl
neg ecx
or ecx, eax
push ecx
call fcn.10045feb
pop ecx
mov dword [ebp - 0x698], eax
mov eax, dword [ebp - 0x698]
mov dword [ebp - 0x3ac], eax
and dword [ebp - 0x1a4], 0
jmp 0x10031f21
mov eax, dword [ebp - 0x1a4]
inc eax
mov dword [ebp - 0x1a4], eax
mov eax, dword [ebp - 0x1a4]
cmp eax, dword [ebp - 0x158]
jge 0x10031f4d
mov eax, dword [ebp - 0x1a4]
mov ecx, dword [ebp - 0x5bc]
lea eax, [ecx + eax*4]
push eax
push 0x1000774c
call fcn.1004a93b
pop ecx
pop ecx
jmp 0x10031f14
lea ecx, [ebp - 0x6f8]
call fcn.1000e26d
mov byte [ebp - 4], 0xd
mov eax, dword [ebp - 0x158]
dec eax
mov dword [ebp - 0x134], eax
jmp 0x10031f78
mov eax, dword [ebp - 0x134]
dec eax
mov dword [ebp - 0x134], eax
cmp dword [ebp - 0x134], 0
jl 0x10031fbf
mov eax, dword [ebp - 0x134]
mov ecx, dword [ebp - 0x5bc]
lea eax, [ecx + eax*4]
push eax
lea eax, [ebp - 0xb48]
push eax
lea ecx, [ebp - 0x6f8]
call fcn.10021ce7
lea ecx, [ebp - 0x6f8]
call fcn.1000e40d
mov ecx, dword [ebp - 0x134]
mov edx, dword [ebp - 0x3ac]
mov dword [edx + ecx*4], eax
jmp 0x10031f6b
and dword [ebp - 0x4d4], 0
and dword [ebp - 0x290], 0
jmp 0x10031fdc
mov eax, dword [ebp - 0x290]
inc eax
mov dword [ebp - 0x290], eax
mov eax, dword [ebp - 0x290]
cmp eax, dword [ebp - 0x3a4]
jge 0x1003201b
lea eax, [ebp - 0x4d4]
push eax
push 0x1000774c
call fcn.1004a93b
pop ecx
pop ecx
mov eax, dword [ebp - 0x4d4]
mov ecx, dword [ebp - 0x3ac]
push dword [ecx + eax*4 - 4]
push 0x10007788
call fcn.1004ace5
pop ecx
pop ecx
jmp 0x10031fcf
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x6f8]
call fcn.1001c64e
mov dword [ebp - 0x204], 0
jmp 0x10032043
mov eax, dword [ebp - 0x204]
inc eax
mov dword [ebp - 0x204], eax
cmp dword [ebp - 0x204], 1
jge 0x1003205f
mov eax, dword [ebp - 0x204]
mov dword [ebp + eax*4 - 0x88], 1
jmp 0x10032036
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x88], 1
jg 0x1003207b
mov dword [ebp - 0x4dc], 1
jmp 0x10032082
and dword [ebp - 0x4dc], 0
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x88], 8
jge 0x1003209e
mov dword [ebp - 0x56c], 1
jmp 0x100320a5
and dword [ebp - 0x56c], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x88]
add eax, dword [ebp - 0x56c]
je 0x100320d6
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x88], 0
je 0x100320d6
mov dword [ebp - 0x3b4], 1
jmp 0x100320dd
and dword [ebp - 0x3b4], 0
mov eax, dword [ebp - 0x3b4]
mov dword [ebp - 0x80], eax
imul eax, dword [ebp - 0x80], 0
push 4
pop ecx
imul ecx, ecx, 0
mov ecx, dword [ebp + ecx - 0x88]
add ecx, dword [ebp - 0x4dc]
sub ecx, eax
jne 0x10032110
cmp dword [ebp - 0x80], 0
jne 0x10032110
and dword [ebp - 0x3bc], 0
jmp 0x1003211a
mov dword [ebp - 0x3bc], 1
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x3bc]
sub ecx, dword [ebp + eax - 0x88]
jne 0x10032151
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x88], 0
jne 0x10032151
mov eax, 0x89fe57f6
test eax, eax
jne 0x10032151
and dword [ebp - 0x5cc], 0
jmp 0x1003215b
mov dword [ebp - 0x5cc], 1
mov eax, dword [ebp - 0x5cc]
mov dword [ebp - 0x9c], eax
mov dword [ebp - 0x9c], 0
jmp 0x10032180
mov eax, dword [ebp - 0x9c]
inc eax
mov dword [ebp - 0x9c], eax
cmp dword [ebp - 0x9c], 4
jne 0x100324e2
mov dword [ebp - 0x84], 0xffffffff
mov dword [ebp - 0x3f4], 0x9d0e131a
mov dword [ebp - 0x80], 0
jmp 0x100321b1
mov eax, dword [ebp - 0x80]
inc eax
mov dword [ebp - 0x80], eax
cmp dword [ebp - 0x80], 0xc
jg 0x100324dd
mov dword [ebp - 0xf8], 0x181f51b4
mov dword [ebp - 0x3dc], 0x315eac84
mov dword [ebp - 0x1ac], 0x5c87e177
mov dword [ebp - 0x4fc], 0xfad6770d
push 2
lea ecx, [ebp - 0x910]
call fcn.1000e0be
mov byte [ebp - 4], 0xe
mov dword [ebp - 0x60], 0
jmp 0x10032204
mov eax, dword [ebp - 0x60]
inc eax
mov dword [ebp - 0x60], eax
cmp dword [ebp - 0x60], 1
jge 0x1003221a
mov eax, dword [ebp - 0x60]
mov dword [ebp + eax*4 - 0x6a0], 5
jmp 0x100321fd
mov dword [ebp - 0x60], 0
jmp 0x1003222a
mov eax, dword [ebp - 0x60]
inc eax
mov dword [ebp - 0x60], eax
cmp dword [ebp - 0x60], 2
jge 0x10032246
push dword [ebp - 0x60]
lea ecx, [ebp - 0x910]
call fcn.1000e0ff
mov dword [eax], 0xc164d14
jmp 0x10032223
mov eax, dword [ebp - 0x84]
mov dword [ebp - 0xa74], eax
mov eax, dword [ebp - 0x84]
mov dword [ebp - 0x9e4], eax
cmp dword [ebp - 0xf8], 0
je 0x10032285
cmp dword [ebp - 0x84], 0
je 0x10032285
cmp dword [ebp - 0x84], 0
je 0x10032285
mov dword [ebp - 0x3c4], 1
jmp 0x1003228c
and dword [ebp - 0x3c4], 0
mov eax, dword [ebp - 0x84]
cmp dword [ebp - 0x3c4], eax
jne 0x100322b6
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x88], 0
je 0x100322b6
mov dword [ebp - 0x4e4], 1
jmp 0x100322bd
and dword [ebp - 0x4e4], 0
mov eax, dword [ebp - 0xf8]
cmp dword [ebp - 0x4e4], eax
jne 0x100322d7
mov dword [ebp - 0x3cc], 1
jmp 0x100322de
and dword [ebp - 0x3cc], 0
mov eax, dword [ebp - 0x3cc]
mov dword [ebp - 0x574], eax
mov eax, dword [ebp - 0x574]
imul eax, dword [ebp - 0x80]
test eax, eax
jne 0x10032306
or eax, 0xffffffff
jne 0x10032306
and dword [ebp - 0x3d4], 0
jmp 0x10032310
mov dword [ebp - 0x3d4], 1
mov eax, dword [ebp - 0x84]
cmp dword [ebp - 0x3d4], eax
jg 0x1003232a
mov dword [ebp - 0x4ec], 1
jmp 0x10032331
and dword [ebp - 0x4ec], 0
mov eax, dword [ebp - 0x4ec]
mov dword [ebp - 0x3dc], eax
mov eax, dword [ebp - 0x3dc]
imul eax, dword [ebp - 0x7d8]
test eax, eax
je 0x10032363
mov eax, 0x5c5bccbf
test eax, eax
je 0x10032363
mov dword [ebp - 0x5d4], 1
jmp 0x1003236a
and dword [ebp - 0x5d4], 0
mov eax, dword [ebp - 0xf8]
cmp dword [ebp - 0x5d4], eax
jl 0x10032384
mov dword [ebp - 0x3e4], 1
jmp 0x1003238b
and dword [ebp - 0x3e4], 0
mov eax, dword [ebp - 0xf8]
cmp dword [ebp - 0x3e4], eax
jl 0x100323a5
mov dword [ebp - 0x4f4], 1
jmp 0x100323ac
and dword [ebp - 0x4f4], 0
mov eax, dword [ebp - 0x1ac]
cmp dword [ebp - 0x4f4], eax
je 0x100323c6
mov dword [ebp - 0x3ec], 1
jmp 0x100323cd
and dword [ebp - 0x3ec], 0
mov eax, dword [ebp - 0x9c]
cmp dword [ebp - 0x3ec], eax
jg 0x100323ed
cmp dword [ebp - 0x1ac], 0
jne 0x100323ed
and dword [ebp - 0x57c], 0
jmp 0x100323f7
mov dword [ebp - 0x57c], 1
mov eax, dword [ebp - 0x57c]
mov dword [ebp - 0x3f4], eax
mov eax, dword [ebp - 0x3f4]
sub eax, dword [ebp - 0x84]
mov dword [ebp - 0x1ac], eax
mov eax, dword [ebp - 0x1ac]
sub eax, dword [ebp - 0x9c]
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x6a0], eax
mov eax, dword [ebp - 0x84]
mov dword [ebp - 0xa98], eax
mov dword [ebp - 0x4fc], 0xfa7dc071
mov eax, dword [ebp - 0x4fc]
sub eax, 7
imul eax, dword [ebp - 0xf8]
cmp eax, 0xffffffff
jg 0x10032465
mov dword [ebp - 0x3fc], 1
jmp 0x1003246c
and dword [ebp - 0x3fc], 0
mov eax, dword [ebp - 0x3fc]
sub eax, 0xdbdc
cmp eax, dword [ebp - 0xf8]
jne 0x1003248b
mov dword [ebp - 0x5c8], 1
jmp 0x10032492
and dword [ebp - 0x5c8], 0
cmp dword [ebp - 0x5c8], 1
jb 0x100324a7
mov dword [ebp - 0x404], 1
jmp 0x100324ae
and dword [ebp - 0x404], 0
mov esi, dword [ebp - 0x404]
sub esi, 0x58409478
push 1
lea ecx, [ebp - 0x910]
call fcn.1000e0ff
mov dword [eax], esi
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x910]
call fcn.1000e0fa
jmp 0x100321aa
jmp 0x10032173
mov dword [ebp - 0x10c], 0
jmp 0x100324fb
mov eax, dword [ebp - 0x10c]
inc eax
mov dword [ebp - 0x10c], eax
cmp dword [ebp - 0x10c], 3
jg 0x10034133
mov dword [ebp - 0xa4], 1
mov dword [ebp - 0x784], 0x1e2e
cmp dword [ebp - 0x784], 0x81f
jge 0x100326b6
lea eax, [ebp - 0x1b4]
push eax
push 0x1000774c
call fcn.1004a93b
pop ecx
pop ecx
mov eax, dword [ebp - 0x1b4]
shl eax, 1
push eax
lea ecx, [ebp - 0x5f0]
call fcn.1000e0be
mov byte [ebp - 4], 0xf
and dword [ebp - 0x20c], 0
jmp 0x1003256d
mov eax, dword [ebp - 0x20c]
inc eax
mov dword [ebp - 0x20c], eax
mov eax, dword [ebp - 0x1b4]
shl eax, 1
cmp dword [ebp - 0x20c], eax
jge 0x1003259d
push dword [ebp - 0x20c]
lea ecx, [ebp - 0x5f0]
call fcn.1000e0ff
push eax
push 0x1000774c
call fcn.1004a93b
pop ecx
pop ecx
jmp 0x10032560
and dword [ebp - 0x268], 0
and dword [ebp - 0xd8], 0
jmp 0x100325ba
mov eax, dword [ebp - 0xd8]
inc eax
mov dword [ebp - 0xd8], eax
mov eax, dword [ebp - 0x1b4]
shl eax, 1
cmp dword [ebp - 0xd8], eax
jge 0x10032695
push dword [ebp - 0xd8]
lea ecx, [ebp - 0x5f0]
call fcn.1000e0ff
cmp dword [eax], 0
jne 0x100325e6
jmp 0x100325ad
mov eax, dword [ebp - 0xd8]
inc eax
mov dword [ebp - 0xf0], eax
jmp 0x10032602
mov eax, dword [ebp - 0xf0]
inc eax
mov dword [ebp - 0xf0], eax
mov eax, dword [ebp - 0x1b4]
shl eax, 1
cmp dword [ebp - 0xf0], eax
jge 0x1003267c
push dword [ebp - 0xf0]
lea ecx, [ebp - 0x5f0]
call fcn.1000e0ff
mov esi, eax
push dword [ebp - 0xd8]
lea ecx, [ebp - 0x5f0]
call fcn.1000e0ff
mov ecx, dword [esi]
cmp ecx, dword [eax]
je 0x1003267c
push dword [ebp - 0xf0]
lea ecx, [ebp - 0x5f0]
call fcn.1000e0ff
cmp dword [eax], 0
jle 0x1003265e
mov dword [ebp - 0x504], 1
jmp 0x10032665
and dword [ebp - 0x504], 0
mov eax, dword [ebp - 0x268]
add eax, dword [ebp - 0x504]
mov dword [ebp - 0x268], eax
jmp 0x100325f5
push dword [ebp - 0xf0]
lea ecx, [ebp - 0x5f0]
call fcn.1000e0ff
and dword [eax], 0
jmp 0x100325ad
push dword [ebp - 0x268]
push 0x10007788
call fcn.1004ace5
pop ecx
pop ecx
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x5f0]
call fcn.1000e0fa
push 3
lea ecx, [ebp - 0x81c]
call fcn.1000e0be
mov byte [ebp - 4], 0x10
push 1
lea ecx, [ebp - 0x810]
call fcn.1000e0be
mov byte [ebp - 4], 0x11
push 2
lea ecx, [ebp - 0x5fc]
call fcn.1000e0be
mov byte [ebp - 4], 0x12
mov dword [ebp - 0x424], 0xffffffff
mov dword [ebp - 0x58c], 0xfffffffe
mov dword [ebp - 0x48], 0
jmp 0x1003270d
mov eax, dword [ebp - 0x48]
inc eax
mov dword [ebp - 0x48], eax
cmp dword [ebp - 0x48], 3
jge 0x10032726
push dword [ebp - 0x48]
lea ecx, [ebp - 0x81c]
call fcn.1000e0ff
or dword [eax], 0xffffffff
jmp 0x10032706
mov dword [ebp - 0x48], 0
jmp 0x10032736
mov eax, dword [ebp - 0x48]
inc eax
mov dword [ebp - 0x48], eax
cmp dword [ebp - 0x48], 1
jge 0x10032752
push dword [ebp - 0x48]
lea ecx, [ebp - 0x810]
call fcn.1000e0ff
mov dword [eax], 0x1b6eab3c
jmp 0x1003272f
push 0x2b37
lea eax, [ebp - 0x5fc]
push eax
push 0
lea eax, [ebp - 0x48]
push eax
push 0x4e45
call fcn.10036121
add esp, 0x14
push 0
lea eax, [ebp - 0xa4]
push eax
push 0x21a7
push 0x5be0
call fcn.1003cda3
add esp, 0x10
cmp dword [ebp - 0xa4], 1
jne 0x100327a1
mov dword [ebp - 0x5e0], 1
jmp 0x100327a8
and dword [ebp - 0x5e0], 0
cmp dword [ebp - 0xa4], 0xb445
jg 0x100327c0
mov dword [ebp - 0x40c], 1
jmp 0x100327c7
and dword [ebp - 0x40c], 0
mov eax, dword [ebp - 0xa4]
sub eax, dword [ebp - 0x40c]
imul eax, dword [ebp - 0xa4]
mov dword [ebp - 0x584], eax
push 1
lea ecx, [ebp - 0x81c]
call fcn.1000e0ff
mov ecx, dword [ebp - 0x584]
mov dword [eax], ecx
push 0
lea ecx, [ebp - 0x810]
call fcn.1000e0ff
mov ecx, dword [ebp - 0x584]
mov dword [eax], ecx
push 1
lea ecx, [ebp - 0x81c]
call fcn.1000e0ff
cmp dword [eax], 0
jle 0x10032828
mov dword [ebp - 0x414], 1
jmp 0x1003282f
and dword [ebp - 0x414], 0
push 0
lea ecx, [ebp - 0x5fc]
call fcn.1000e0ff
mov ecx, dword [ebp - 0x414]
cmp ecx, dword [eax]
jg 0x10032852
mov dword [ebp - 0x50c], 1
jmp 0x10032859
and dword [ebp - 0x50c], 0
push 1
lea ecx, [ebp - 0x5fc]
call fcn.1000e0ff
mov ecx, dword [ebp - 0x50c]
cmp ecx, dword [eax]
jle 0x1003287c
mov dword [ebp - 0x41c], 1
jmp 0x10032883
and dword [ebp - 0x41c], 0
push 0
lea ecx, [ebp - 0x5fc]
call fcn.1000e0ff
mov ecx, dword [ebp - 0x41c]
imul ecx, dword [eax]
add ecx, dword [ebp - 0x5e0]
cmp ecx, 1
jle 0x100328b0
mov dword [ebp - 0x6a8], 1
jmp 0x100328b7
and dword [ebp - 0x6a8], 0
mov eax, dword [ebp - 0xa4]
mov dword [ebp - 0x9ec], eax
push 0
lea ecx, [ebp - 0x810]
call fcn.1000e0ff
push 0
lea ecx, [ebp - 0x5fc]
call fcn.1000e0ff
mov eax, dword [ebp - 0x424]
mov dword [ebp - 0x954], eax
mov eax, dword [ebp - 0x58c]
mov dword [ebp - 0x958], eax
mov eax, dword [ebp - 0x424]
cmp dword [ebp - 0xa4], eax
jge 0x1003290f
mov dword [ebp - 0x514], 1
jmp 0x10032916
and dword [ebp - 0x514], 0
push 0
lea ecx, [ebp - 0x5fc]
call fcn.1000e0ff
mov ecx, dword [ebp - 0x514]
cmp ecx, dword [eax]
jg 0x10032939
mov dword [ebp - 0x42c], 1
jmp 0x10032940
and dword [ebp - 0x42c], 0
mov eax, dword [ebp - 0x42c]
mov dword [ebp - 0x58c], eax
mov byte [ebp - 4], 0x11
lea ecx, [ebp - 0x5fc]
call fcn.1000e0fa
mov byte [ebp - 4], 0x10
lea ecx, [ebp - 0x810]
call fcn.1000e0fa
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x81c]
call fcn.1000e0fa
mov dword [ebp - 0x888], 1
mov dword [ebp - 0x884], 1
mov dword [ebp - 0x880], 1
mov dword [ebp - 0x87c], 1
mov dword [ebp - 0x30], 8
push 4
lea ecx, [ebp - 0x648]
call fcn.1000e0be
mov byte [ebp - 4], 0x13
mov dword [ebp - 0x794], 0xffffffff
mov dword [ebp - 0x7cc], 0x52259155
mov dword [ebp - 0x6c0], 0
lea eax, [ebp - 0x648]
push eax
lea eax, [ebp - 0x960]
push eax
push 0
call fcn.1003c2c3
add esp, 0xc
mov dword [ebp - 0x30], 2
cmp dword [ebp - 0x30], 0
je 0x10032a5b
mov dword [ebp - 0x7b4], 0xffffffff
mov dword [ebp - 0x6b0], 0xfffffffc
push 0x65e3
push 0x60ec
push 0x1b82
push 0x7c09
push 1
push 0
push 0x70c1
push 0x4df5
lea eax, [ebp - 0x30]
push eax
lea eax, [ebp - 0x7b4]
push eax
lea eax, [ebp - 0x6b0]
push eax
push 0x716f
push 0x25c
call fcn.1002b2ad
add esp, 0x34
jmp 0x10032e2b
mov dword [ebp - 0x28], 0
jmp 0x10032a6b
mov eax, dword [ebp - 0x28]
inc eax
mov dword [ebp - 0x28], eax
cmp dword [ebp - 0x28], 1
jge 0x10032a81
mov eax, dword [ebp - 0x28]
mov dword [ebp + eax*4 - 0xe0], 0x6f39
jmp 0x10032a64
mov dword [ebp - 0x28], 0
jmp 0x10032a91
mov eax, dword [ebp - 0x28]
inc eax
mov dword [ebp - 0x28], eax
cmp dword [ebp - 0x28], 3
jge 0x10032aa7
mov eax, dword [ebp - 0x28]
mov dword [ebp + eax*4 - 0xaf8], 0
jmp 0x10032a8a
mov dword [ebp - 0x28], 0
jmp 0x10032ab7
mov eax, dword [ebp - 0x28]
inc eax
mov dword [ebp - 0x28], eax
cmp dword [ebp - 0x28], 2
jge 0x10032acd
mov eax, dword [ebp - 0x28]
mov dword [ebp + eax*4 - 0x704], 5
jmp 0x10032ab0
mov dword [ebp - 0x30], 0
jmp 0x10032add
mov eax, dword [ebp - 0x30]
inc eax
mov dword [ebp - 0x30], eax
cmp dword [ebp - 0x30], 0
jg 0x10032e2b
mov dword [ebp - 0x100], 0x88592840
mov dword [ebp - 0x21c], 0
jmp 0x10032b0a
mov eax, dword [ebp - 0x21c]
inc eax
mov dword [ebp - 0x21c], eax
cmp dword [ebp - 0x21c], 3
jge 0x10032b26
mov eax, dword [ebp - 0x21c]
mov dword [ebp + eax*4 - 0x63c], 0xfffffff6
jmp 0x10032afd
push 4
pop eax
shl eax, 0
mov dword [ebp + eax - 0x63c], 0
jmp 0x10032b54
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x63c]
inc eax
push 4
pop ecx
shl ecx, 0
mov dword [ebp + ecx - 0x63c], eax
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x63c], 0
jg 0x10032e26
mov dword [ebp - 0xac], 0
mov dword [ebp - 0x454], 0xeccdf493
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0xe0], 1
je 0x10032b98
mov dword [ebp - 0x434], 1
jmp 0x10032b9f
and dword [ebp - 0x434], 0
mov eax, dword [ebp - 0x30]
mov eax, dword [ebp + eax*4 - 0xe0]
cmp eax, dword [ebp - 0x434]
jg 0x10032bbd
mov dword [ebp - 0x78c], 1
jmp 0x10032bc4
and dword [ebp - 0x78c], 0
push 3
pop eax
test eax, eax
jg 0x10032bd7
mov dword [ebp - 0x6b8], 1
jmp 0x10032bde
and dword [ebp - 0x6b8], 0
mov eax, dword [ebp - 0x30]
mov eax, dword [ebp + eax*4 - 0xe0]
mov dword [ebp - 0x968], eax
mov eax, dword [ebp - 0x30]
cmp dword [ebp + eax*4 - 0xe0], 0
je 0x10032c17
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0xe0], 0
je 0x10032c17
mov dword [ebp - 0x51c], 1
jmp 0x10032c1e
and dword [ebp - 0x51c], 0
mov eax, dword [ebp - 0x51c]
mov dword [ebp - 0xac], eax
cmp dword [ebp - 0xac], 0
jne 0x10032c43
push 0xfffffffffffffffb
pop eax
test eax, eax
jne 0x10032c43
and dword [ebp - 0x43c], 0
jmp 0x10032c4d
mov dword [ebp - 0x43c], 1
cmp dword [ebp - 0x43c], 2
jl 0x10032c62
mov dword [ebp - 0x5d0], 1
jmp 0x10032c69
and dword [ebp - 0x5d0], 0
mov eax, dword [ebp - 0x30]
mov eax, dword [ebp + eax*4 - 0xe0]
cmp dword [ebp - 0x5d0], eax
jl 0x10032c87
mov dword [ebp - 0x444], 1
jmp 0x10032c8e
and dword [ebp - 0x444], 0
mov eax, dword [ebp - 0x444]
mov dword [ebp - 0x100], eax
mov dword [ebp - 0xac], 0
jmp 0x10032cb3
mov eax, dword [ebp - 0xac]
inc eax
mov dword [ebp - 0xac], eax
cmp dword [ebp - 0xac], 0
jg 0x10032e21
mov dword [ebp - 0xe8], 0x1d8d4885
mov eax, dword [ebp - 0x100]
mov dword [ebp - 0x970], eax
push 1
lea ecx, [ebp - 0x648]
call fcn.1000e0ff
push 4
pop ecx
imul ecx, ecx, 0
mov eax, dword [eax]
sub eax, dword [ebp + ecx - 0xaf8]
sub eax, dword [ebp - 0xac]
sub eax, 5
push 4
pop ecx
shl ecx, 0
cmp eax, dword [ebp + ecx - 0x63c]
jne 0x10032d16
mov dword [ebp - 0x524], 1
jmp 0x10032d1d
and dword [ebp - 0x524], 0
push 1
lea ecx, [ebp - 0x648]
call fcn.1000e0ff
mov ecx, dword [ebp - 0x524]
cmp ecx, dword [eax]
jne 0x10032d40
mov dword [ebp - 0x44c], 1
jmp 0x10032d47
and dword [ebp - 0x44c], 0
mov eax, dword [ebp - 0x30]
cmp eax, dword [ebp - 0x44c]
jge 0x10032d5e
mov dword [ebp - 0x594], 1
jmp 0x10032d65
and dword [ebp - 0x594], 0
mov eax, dword [ebp - 0x594]
mov dword [ebp - 0x454], eax
mov eax, dword [ebp - 0x454]
mov dword [ebp - 0x978], eax
mov eax, dword [ebp - 0xe8]
mov dword [ebp - 0x980], eax
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0x704], 0xfffffffb
mov dword [ebp - 0x100], 0
jmp 0x10032db3
mov eax, dword [ebp - 0x100]
dec eax
mov dword [ebp - 0x100], eax
cmp dword [ebp - 0x100], 0
jl 0x10032e1c
mov dword [ebp - 0xe8], 0
jmp 0x10032dd5
mov eax, dword [ebp - 0xe8]
inc eax
mov dword [ebp - 0xe8], eax
cmp dword [ebp - 0xe8], 1
jg 0x10032e1a
mov eax, dword [ebp - 0xe8]
mov dword [ebp + eax*4 - 0x704], 0xffffffff
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x63c]
inc eax
push eax
lea ecx, [ebp - 0x648]
call fcn.1000e0ff
push 4
pop ecx
shl ecx, 0
mov eax, dword [eax]
mov dword [ebp + ecx - 0x704], eax
jmp 0x10032dc8
jmp 0x10032da6
jmp 0x10032ca6
jmp 0x10032b39
jmp 0x10032ad6
lea eax, [ebp - 0x648]
push eax
lea eax, [ebp - 0x7cc]
push eax
push 0
lea eax, [ebp - 0x6c0]
push eax
push 0x33c1
lea eax, [ebp - 0x794]
push eax
call fcn.100368e3
add esp, 0x18
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x648]
call fcn.1000e0fa
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x888]
mov dword [ebp - 0x58], eax
push 1
lea ecx, [ebp - 0x250]
call fcn.1000e0be
mov byte [ebp - 4], 0x14
push 2
lea ecx, [ebp - 0x8ec]
call fcn.1000e0be
mov byte [ebp - 4], 0x15
mov dword [ebp - 0x278], 0
push 0x444d
push 0x7f
lea eax, [ebp - 0x7bc]
push eax
push 1
push 0x1449
push 0x3a22
push 1
push 0xcfd
push 0xc85
push 0x71d2
lea eax, [ebp - 0x250]
push eax
call fcn.1002b047
add esp, 0x2c
mov dword [ebp - 0x6c8], 0x2391
cmp dword [ebp - 0x6c8], 0x72b
jge 0x100331c6
call fcn.1004aa75
push 0x20
pop ecx
imul ecx, ecx, 0
add eax, ecx
push eax
push 0x10007750
push 0x10007754
call fcn.1004af2f
add esp, 0xc
call fcn.1004aa75
push 0x20
pop ecx
shl ecx, 0
add eax, ecx
push eax
push 0x1000775c
push 0x10007760
call fcn.1004af2f
add esp, 0xc
lea ecx, [ebp - 0x2d0]
call fcn.1000d97c
mov byte [ebp - 4], 0x16
lea edx, [ebp - 0x2d0]
mov ecx, 0x10656a70
call fcn.10023bf1
mov dword [ebp - 0x52c], eax
mov eax, dword [ebp - 0x52c]
mov eax, dword [eax]
mov ecx, dword [ebp - 0x52c]
add ecx, dword [eax + 4]
call fcn.10022b9a
movzx eax, al
test eax, eax
je 0x100331b7
or dword [ebp - 0x45c], 0xffffffff
and dword [ebp - 0x14], 0
jmp 0x10032f8f
mov eax, dword [ebp - 0x14]
inc eax
mov dword [ebp - 0x14], eax
lea ecx, [ebp - 0x2d0]
call fcn.1000da43
cmp dword [ebp - 0x14], eax
jae 0x100331a3
push dword [ebp - 0x14]
lea ecx, [ebp - 0x2d0]
call fcn.1000da2f
movsx eax, byte [eax]
cmp eax, 0x43
je 0x1003305b
push dword [ebp - 0x14]
lea ecx, [ebp - 0x2d0]
call fcn.1000da2f
movsx eax, byte [eax]
cmp eax, 0x47
je 0x1003305b
push dword [ebp - 0x14]
lea ecx, [ebp - 0x2d0]
call fcn.1000da2f
movsx eax, byte [eax]
cmp eax, 0x4a
je 0x1003305b
push dword [ebp - 0x14]
lea ecx, [ebp - 0x2d0]
call fcn.1000da2f
movsx eax, byte [eax]
cmp eax, 0x4b
je 0x1003305b
push dword [ebp - 0x14]
lea ecx, [ebp - 0x2d0]
call fcn.1000da2f
movsx eax, byte [eax]
cmp eax, 0x51
je 0x1003305b
push dword [ebp - 0x14]
lea ecx, [ebp - 0x2d0]
call fcn.1000da2f
movsx eax, byte [eax]
cmp eax, 0x53
je 0x1003305b
push dword [ebp - 0x14]
lea ecx, [ebp - 0x2d0]
call fcn.1000da2f
movsx eax, byte [eax]
cmp eax, 0x58
je 0x1003305b
push dword [ebp - 0x14]
lea ecx, [ebp - 0x2d0]
call fcn.1000da2f
movsx eax, byte [eax]
cmp eax, 0x5a
jne 0x10033067
mov dword [ebp - 0x50], 2
jmp 0x10033177
push dword [ebp - 0x14]
lea ecx, [ebp - 0x2d0]
call fcn.1000da2f
movsx eax, byte [eax]
cmp eax, 0x42
je 0x100330bf
push dword [ebp - 0x14]
lea ecx, [ebp - 0x2d0]
call fcn.1000da2f
movsx eax, byte [eax]
cmp eax, 0x46
je 0x100330bf
push dword [ebp - 0x14]
lea ecx, [ebp - 0x2d0]
call fcn.1000da2f
movsx eax, byte [eax]
cmp eax, 0x50
je 0x100330bf
push dword [ebp - 0x14]
lea ecx, [ebp - 0x2d0]
call fcn.1000da2f
movsx eax, byte [eax]
cmp eax, 0x56
jne 0x100330cb
mov dword [ebp - 0x50], 1
jmp 0x10033177
push dword [ebp - 0x14]
lea ecx, [ebp - 0x2d0]
call fcn.1000da2f
movsx eax, byte [eax]
cmp eax, 0x44
je 0x100330f7
push dword [ebp - 0x14]
lea ecx, [ebp - 0x2d0]
call fcn.1000da2f
movsx eax, byte [eax]
cmp eax, 0x54
jne 0x10033100
mov dword [ebp - 0x50], 3
jmp 0x10033177
push dword [ebp - 0x14]
lea ecx, [ebp - 0x2d0]
call fcn.1000da2f
movsx eax, byte [eax]
cmp eax, 0x4d
je 0x1003312c
push dword [ebp - 0x14]
lea ecx, [ebp - 0x2d0]
call fcn.1000da2f
movsx eax, byte [eax]
cmp eax, 0x4e
jne 0x10033135
mov dword [ebp - 0x50], 5
jmp 0x10033177
push dword [ebp - 0x14]
lea ecx, [ebp - 0x2d0]
call fcn.1000da2f
movsx eax, byte [eax]
cmp eax, 0x4c
jne 0x10033154
mov dword [ebp - 0x50], 4
jmp 0x10033177
push dword [ebp - 0x14]
lea ecx, [ebp - 0x2d0]
call fcn.1000da2f
movsx eax, byte [eax]
cmp eax, 0x52
jne 0x10033173
mov dword [ebp - 0x50], 6
jmp 0x10033177
or dword [ebp - 0x50], 0xffffffff
mov eax, dword [ebp - 0x50]
cmp eax, dword [ebp - 0x45c]
je 0x10033195
cmp dword [ebp - 0x50], 0xffffffff
je 0x10033195
push dword [ebp - 0x50]
mov ecx, 0x106569b8
call fcn.1000de8f
mov eax, dword [ebp - 0x50]
mov dword [ebp - 0x45c], eax
jmp 0x10032f88
push fcn.10012b0d
mov ecx, 0x106569b8
call fcn.1000dd60
jmp 0x10032f44
mov byte [ebp - 4], 0x15
lea ecx, [ebp - 0x2d0]
call fcn.1000d9e2
push 1
push 0x5ea4
push 0x478d
lea eax, [ebp - 0x7bc]
push eax
push 0
push 0x6e79
lea eax, [ebp - 0x8ec]
push eax
call fcn.1002bf98
add esp, 0x1c
push 0
lea ecx, [ebp - 0x250]
call fcn.1000e0ff
mov dword [eax], 0xffffffea
jmp 0x10033228
push 0
lea ecx, [ebp - 0x250]
call fcn.1000e0ff
mov dword [ebp - 0x5e4], eax
mov eax, dword [ebp - 0x5e4]
mov eax, dword [eax]
inc eax
mov ecx, dword [ebp - 0x5e4]
mov dword [ecx], eax
push 0
lea ecx, [ebp - 0x250]
call fcn.1000e0ff
cmp dword [eax], 0xffffffed
jge 0x1003372d
mov dword [ebp - 0x70], 0xe0b4074d
mov dword [ebp - 0x298], 1
mov dword [ebp - 0x350], 0
mov dword [ebp - 0x1bc], 0
jmp 0x10033272
mov eax, dword [ebp - 0x1bc]
inc eax
mov dword [ebp - 0x1bc], eax
cmp dword [ebp - 0x1bc], 2
jge 0x1003328e
mov eax, dword [ebp - 0x1bc]
mov dword [ebp + eax*4 - 0x624], 0xd6b65720
jmp 0x10033265
mov dword [ebp - 0x70], 0
jmp 0x1003329e
mov eax, dword [ebp - 0x70]
inc eax
mov dword [ebp - 0x70], eax
cmp dword [ebp - 0x70], 0x1a
jl 0x1003370e
mov dword [ebp - 0xcc], 0x8531d14c
mov dword [ebp - 0x270], 0x967268f5
mov dword [ebp - 0x988], 0x119b
mov dword [ebp - 0x224], 0
jmp 0x100332df
mov eax, dword [ebp - 0x224]
inc eax
mov dword [ebp - 0x224], eax
cmp dword [ebp - 0x224], 3
jge 0x100332fb
mov eax, dword [ebp - 0x224]
mov dword [ebp + eax*4 - 0xb64], 0x66d210ec
jmp 0x100332d2
push 0
lea ecx, [ebp - 0x250]
call fcn.1000e0ff
mov esi, dword [ebp - 0xcc]
shl esi, 2
push 0
lea ecx, [ebp - 0x250]
call fcn.1000e0ff
cmp esi, dword [eax]
jge 0x1003332e
mov dword [ebp - 0x464], 1
jmp 0x10033335
and dword [ebp - 0x464], 0
mov eax, dword [ebp - 0xcc]
cmp dword [ebp - 0x464], eax
jl 0x1003334f
mov dword [ebp - 0x2a8], 1
jmp 0x10033356
and dword [ebp - 0x2a8], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x2a8]
mov dword [ebp + eax - 0x624], ecx
mov eax, dword [ebp - 0x2a8]
mov dword [ebp - 0x298], eax
mov eax, dword [ebp - 0x298]
imul eax, dword [ebp - 0x70]
neg eax
cmp eax, dword [ebp - 0x70]
jg 0x10033392
mov dword [ebp - 0x534], 1
jmp 0x10033399
and dword [ebp - 0x534], 0
mov eax, dword [ebp - 0xcc]
cmp dword [ebp - 0x534], eax
je 0x100333b3
mov dword [ebp - 0x46c], 1
jmp 0x100333ba
and dword [ebp - 0x46c], 0
mov eax, dword [ebp - 0xcc]
cmp dword [ebp - 0x46c], eax
jge 0x100333d4
mov dword [ebp - 0x6d0], 1
jmp 0x100333db
and dword [ebp - 0x6d0], 0
push 0
lea ecx, [ebp - 0x250]
call fcn.1000e0ff
cmp dword [eax], 2
jne 0x100333f9
mov dword [ebp - 0x2d8], 1
jmp 0x10033400
and dword [ebp - 0x2d8], 0
cmp dword [ebp - 0x2d8], 5
jle 0x10033415
mov dword [ebp - 0x2e0], 1
jmp 0x1003341c
and dword [ebp - 0x2e0], 0
push 1
lea ecx, [ebp - 0x8ec]
call fcn.1000e0ff
mov ecx, dword [ebp - 0x2e0]
mov dword [eax], ecx
push 0
lea ecx, [ebp - 0x250]
call fcn.1000e0ff
push 0
lea ecx, [ebp - 0x250]
call fcn.1000e0ff
cmp dword [eax], 0
je 0x10033462
cmp dword [ebp - 0x70], 0
je 0x10033462
mov dword [ebp - 0x2e8], 1
jmp 0x10033469
and dword [ebp - 0x2e8], 0
cmp dword [ebp - 0x2e8], 0xeb0badca
jne 0x10033481
mov dword [ebp - 0x2f0], 1
jmp 0x10033488
and dword [ebp - 0x2f0], 0
mov eax, dword [ebp - 0x2f0]
sub eax, dword [ebp - 0x70]
mov dword [ebp - 0x270], eax
cmp dword [ebp - 0x270], 3
jbe 0x100334ac
mov dword [ebp - 0x2f8], 1
jmp 0x100334b3
and dword [ebp - 0x2f8], 0
cmp dword [ebp - 0x2f8], 1
je 0x100334c8
mov dword [ebp - 0x300], 1
jmp 0x100334cf
and dword [ebp - 0x300], 0
mov eax, dword [ebp - 0x300]
mov dword [ebp - 0x278], eax
cmp dword [ebp - 0x278], 0
je 0x10033500
mov eax, 0x38991f3
test eax, eax
je 0x10033500
push 9
pop eax
test eax, eax
je 0x10033500
mov dword [ebp - 0x308], 1
jmp 0x10033507
and dword [ebp - 0x308], 0
mov eax, dword [ebp - 0x70]
cmp dword [ebp - 0x308], eax
jne 0x1003351e
mov dword [ebp - 0x310], 1
jmp 0x10033525
and dword [ebp - 0x310], 0
mov eax, dword [ebp - 0x310]
neg eax
je 0x100336f1
push 3
lea ecx, [ebp - 0x940]
call fcn.1000e0be
mov byte [ebp - 4], 0x17
mov dword [ebp - 0x990], 0xe2dc6606
mov dword [ebp - 0x998], 0xd7787123
mov dword [ebp - 0x79c], 0
mov dword [ebp - 0x1c4], 0
jmp 0x1003357b
mov eax, dword [ebp - 0x1c4]
inc eax
mov dword [ebp - 0x1c4], eax
cmp dword [ebp - 0x1c4], 3
jge 0x1003359d
push dword [ebp - 0x1c4]
lea ecx, [ebp - 0x940]
call fcn.1000e0ff
mov dword [eax], 0xf412f3a6
jmp 0x1003356e
cmp dword [ebp - 0xcc], 0
jne 0x100335b2
mov dword [ebp - 0x318], 1
jmp 0x100335b9
and dword [ebp - 0x318], 0
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x318]
mov dword [ebp + eax - 0x624], ecx
mov esi, dword [ebp - 0x79c]
push 0
lea ecx, [ebp - 0x250]
call fcn.1000e0ff
sub esi, dword [eax]
je 0x100335fc
mov eax, 0xf6dc
test eax, eax
je 0x100335fc
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x624], 0
jbe 0x1003360c
push 0xfffffffffffffff8
pop eax
test eax, eax
jne 0x1003360c
and dword [ebp - 0x320], 0
jmp 0x10033616
mov dword [ebp - 0x320], 1
mov eax, dword [ebp - 0x270]
cmp eax, dword [ebp - 0x320]
jg 0x10033630
mov dword [ebp - 0x328], 1
jmp 0x10033637
and dword [ebp - 0x328], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x624]
cmp dword [ebp - 0x328], eax
jne 0x10033658
mov dword [ebp - 0x330], 1
jmp 0x1003365f
and dword [ebp - 0x330], 0
push 0
lea ecx, [ebp - 0x250]
call fcn.1000e0ff
mov ecx, dword [ebp - 0x330]
cmp ecx, dword [eax]
je 0x10033682
mov dword [ebp - 0x338], 1
jmp 0x10033689
and dword [ebp - 0x338], 0
mov eax, dword [ebp - 0xcc]
cmp dword [ebp - 0x338], eax
jg 0x100336a3
mov dword [ebp - 0x340], 1
jmp 0x100336aa
and dword [ebp - 0x340], 0
push 2
lea ecx, [ebp - 0x940]
call fcn.1000e0ff
mov ecx, dword [ebp - 0x340]
cmp ecx, dword [eax]
jge 0x100336cd
mov dword [ebp - 0x348], 1
jmp 0x100336d4
and dword [ebp - 0x348], 0
mov eax, dword [ebp - 0x348]
mov dword [ebp - 0x298], eax
mov byte [ebp - 4], 0x15
lea ecx, [ebp - 0x940]
call fcn.1000e0fa
jmp 0x10033709
mov eax, dword [ebp - 0x350]
dec eax
mov dword [ebp - 0x350], eax
cmp dword [ebp - 0x278], 0
je 0x10033709
jmp 0x1003370e
jmp 0x10033297
mov byte [ebp - 0xbf], 0
movzx eax, byte [ebp - 0xbf]
test eax, eax
je 0x10033728
push 0
call fcn.1002d243
pop ecx
jmp 0x10033204
mov byte [ebp - 4], 0x14
lea ecx, [ebp - 0x8ec]
call fcn.1000e0fa
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x250]
call fcn.1000e0fa
mov dword [ebp - 0x58], 0
jmp 0x1003375b
mov eax, dword [ebp - 0x58]
inc eax
mov dword [ebp - 0x58], eax
cmp dword [ebp - 0x58], 3
jg 0x1003412e
mov dword [ebp - 0x22c], 0xfffffffb
mov dword [ebp - 0x22c], 0
jmp 0x10033788
mov eax, dword [ebp - 0x22c]
inc eax
mov dword [ebp - 0x22c], eax
cmp dword [ebp - 0x22c], 3
jg 0x10034129
mov dword [ebp - 0x3c], 0
mov dword [ebp - 0x118], 5
mov dword [ebp - 0x5c], 0xfffffffa
mov dword [ebp - 0x168], 4
mov dword [ebp - 0x3c], 0x1a
jmp 0x100337c7
mov eax, dword [ebp - 0x3c]
dec eax
mov dword [ebp - 0x3c], eax
cmp dword [ebp - 0x3c], 0xa
jne 0x10033ad7
mov dword [ebp - 0x2d4], 0x9ee1
mov dword [ebp - 0x6d8], 0x256f
cmp dword [ebp - 0x6d8], 0x1243
jge 0x100339ac
lea eax, [ebp - 0x234]
push eax
lea eax, [ebp - 0x2a0]
push eax
push 0x10007780
call fcn.1004a93b
add esp, 0xc
mov eax, dword [ebp - 0x2a0]
imul eax, dword [ebp - 0x234]
inc eax
push eax
call fcn.10045feb
pop ecx
mov dword [ebp - 0x7dc], eax
mov eax, dword [ebp - 0x7dc]
mov dword [ebp - 0x288], eax
mov dword [ebp - 0x1cc], 1
jmp 0x10033850
mov eax, dword [ebp - 0x1cc]
inc eax
mov dword [ebp - 0x1cc], eax
mov eax, dword [ebp - 0x2a0]
imul eax, dword [ebp - 0x234]
cmp dword [ebp - 0x1cc], eax
jg 0x10033876
mov eax, dword [ebp - 0x288]
add eax, dword [ebp - 0x1cc]
mov byte [eax], 0
jmp 0x10033843
and dword [ebp - 0x280], 0
lea ecx, [ebp - 0x8e0]
call fcn.10021c80
mov byte [ebp - 4], 0x18
and dword [ebp - 0x2ac], 0
jmp 0x100338a2
mov eax, dword [ebp - 0x2ac]
inc eax
mov dword [ebp - 0x2ac], eax
mov eax, dword [ebp - 0x2ac]
cmp eax, dword [ebp - 0x234]
jge 0x100338e6
lea eax, [ebp - 0x280]
push eax
push 0x10007748
call fcn.1004a93b
pop ecx
pop ecx
lea eax, [ebp - 0x280]
push eax
lea ecx, [ebp - 0x8e0]
call fcn.10043fa0
mov eax, dword [ebp - 0x288]
add eax, dword [ebp - 0x280]
mov byte [eax], 1
jmp 0x10033895
and dword [ebp - 0x23c], 0
and dword [ebp - 0x1d4], 0
jmp 0x10033903
mov eax, dword [ebp - 0x1d4]
inc eax
mov dword [ebp - 0x1d4], eax
mov eax, dword [ebp - 0x1d4]
cmp eax, dword [ebp - 0x234]
jge 0x1003399d
push dword [ebp - 0x1d4]
lea ecx, [ebp - 0x8e0]
call fcn.1000e0ff
push dword [eax]
push 0x10007748
call fcn.1004ace5
pop ecx
pop ecx
mov dword [ebp - 0x258], 1
mov eax, dword [ebp - 0x258]
cmp eax, dword [ebp - 0x2a0]
jge 0x1003398d
mov eax, dword [ebp - 0x23c]
inc eax
mov dword [ebp - 0x23c], eax
mov eax, dword [ebp - 0x288]
add eax, dword [ebp - 0x23c]
movzx eax, byte [eax]
test eax, eax
jne 0x1003398b
mov eax, dword [ebp - 0x258]
inc eax
mov dword [ebp - 0x258], eax
push dword [ebp - 0x23c]
push 0x10007b54
call fcn.1004ace5
pop ecx
pop ecx
jmp 0x1003393e
push 0x10007b58
call fcn.1004ace5
pop ecx
jmp 0x100338f6
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x8e0]
call fcn.1000e0fa
mov dword [ebp - 0x218], 0
jmp 0x100339c5
mov eax, dword [ebp - 0x218]
inc eax
mov dword [ebp - 0x218], eax
cmp dword [ebp - 0x218], 1
jge 0x100339e1
mov eax, dword [ebp - 0x218]
mov dword [ebp + eax*4 - 0x110], 1
jmp 0x100339b8
mov dword [ebp - 0x5c], 0xdc34
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x110]
cmp eax, dword [ebp - 0x5c]
je 0x10033a06
mov dword [ebp - 0x360], 1
jmp 0x10033a0d
and dword [ebp - 0x360], 0
mov dword [ebp - 0x2d4], 0x85faafe3
mov eax, dword [ebp - 0x2d4]
cmp eax, dword [ebp - 0x360]
jne 0x10033a31
mov dword [ebp - 0x368], 1
jmp 0x10033a38
and dword [ebp - 0x368], 0
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x110], 0
jne 0x10033a56
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x110], 0
mov eax, 0xb1b6
sub eax, 0xdca2
cmp dword [ebp - 0x368], eax
jg 0x10033a74
mov dword [ebp - 0x370], 1
jmp 0x10033a7b
and dword [ebp - 0x370], 0
mov dword [ebp - 0x118], 0xffffffff
mov eax, dword [ebp - 0x118]
cmp eax, dword [ebp - 0x370]
jle 0x10033a9f
mov dword [ebp - 0x6e0], 1
jmp 0x10033aa6
and dword [ebp - 0x6e0], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x110]
mov dword [ebp - 0x9a0], eax
mov eax, dword [ebp - 0x3c]
mov dword [ebp - 0x168], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x5c]
mov dword [ebp + eax - 0x110], ecx
jmp 0x100337c0
cmp dword [ebp - 0x168], 0
je 0x10033b11
mov dword [ebp - 0x5c], 0x15
jmp 0x10033af0
mov eax, dword [ebp - 0x5c]
dec eax
mov dword [ebp - 0x5c], eax
cmp dword [ebp - 0x5c], 9
jg 0x10033b0c
push 0x741c
push 0x2c5d
push 0
call fcn.1003c206
add esp, 0xc
jmp 0x10033ae9
jmp 0x10033c91
mov dword [ebp - 0x378], 0xffff
mov dword [ebp - 0x380], 0x83f7cd3e
push 3
lea ecx, [ebp - 0x834]
call fcn.1000e0be
mov byte [ebp - 4], 0x19
mov dword [ebp - 0x388], 0xfffffff7
mov dword [ebp - 0x1e0], 0
jmp 0x10033b59
mov eax, dword [ebp - 0x1e0]
inc eax
mov dword [ebp - 0x1e0], eax
cmp dword [ebp - 0x1e0], 3
jge 0x10033b7b
push dword [ebp - 0x1e0]
lea ecx, [ebp - 0x834]
call fcn.1000e0ff
mov dword [eax], 0xc46d
jmp 0x10033b4c
mov dword [ebp - 0x3c], 0
jmp 0x10033b8b
mov eax, dword [ebp - 0x3c]
inc eax
mov dword [ebp - 0x3c], eax
cmp dword [ebp - 0x3c], 8
jge 0x10033bba
mov byte [ebp - 0xb1], 0
push 0x5d80
push 0x15f2
push 0
push 0x31b7
lea eax, [ebp - 0xb1]
push eax
call fcn.1002d9b7
add esp, 0x14
jmp 0x10033b84
cmp dword [ebp - 0x118], 0
je 0x10033c72
cmp dword [ebp - 0x378], 0
jne 0x10033bd7
cmp dword [ebp - 0x378], 0xfffffff9
mov eax, dword [ebp - 0x168]
mov dword [ebp - 0x380], eax
mov esi, dword [ebp - 0x380]
push 2
lea ecx, [ebp - 0x834]
call fcn.1000e0ff
add esi, dword [eax]
mov dword [ebp - 0x3c], esi
mov eax, dword [ebp - 0x3c]
mov dword [ebp - 0x9a8], eax
mov eax, dword [ebp - 0x5c]
mov dword [ebp - 0x9b0], eax
mov eax, dword [ebp - 0x388]
mov dword [ebp - 0x9b8], eax
mov eax, dword [ebp - 0x388]
sub eax, 0x7a4860c0
imul eax, eax, 0xa3f0
cmp eax, dword [ebp - 0x168]
jle 0x10033c3e
mov dword [ebp - 0x390], 1
jmp 0x10033c45
and dword [ebp - 0x390], 0
mov dword [ebp - 0x118], 0x7e10320b
mov esi, dword [ebp - 0x118]
push 1
lea ecx, [ebp - 0x834]
call fcn.1000e0ff
cmp esi, dword [eax]
je 0x10033c72
mov dword [ebp - 0x398], 1
jmp 0x10033c79
and dword [ebp - 0x398], 0
mov eax, dword [ebp - 0x398]
mov dword [ebp - 0x5c], eax
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x834]
call fcn.1000e0fa
mov dword [ebp - 0x1e8], 0xc67ee39f
push 1
lea ecx, [ebp - 0x614]
call fcn.1000e0be
mov byte [ebp - 4], 0x1a
lea eax, [ebp - 0x9c4]
push eax
push 1
lea eax, [ebp - 0x614]
push eax
push 0
push 0x67ec
push 0x5b86
call fcn.1002c42f
add esp, 0x18
push 0
lea ecx, [ebp - 0x614]
call fcn.1000e0ff
mov dword [eax], 0xfffffff6
jmp 0x10033d09
push 0
lea ecx, [ebp - 0x614]
call fcn.1000e0ff
mov dword [ebp - 0x3a0], eax
mov eax, dword [ebp - 0x3a0]
mov eax, dword [eax]
inc eax
mov ecx, dword [ebp - 0x3a0]
mov dword [ecx], eax
push 0
lea ecx, [ebp - 0x614]
call fcn.1000e0ff
cmp dword [eax], 0x13
jne 0x10033ecd
mov dword [ebp - 0x120], 0xd5816210
push 2
lea ecx, [ebp - 0x91c]
call fcn.1000e0be
mov byte [ebp - 4], 0x1b
mov dword [ebp - 0x3a8], 0xa3cfce2
mov dword [ebp - 0x3c8], 8
mov dword [ebp - 0x210], 0
jmp 0x10033d67
mov eax, dword [ebp - 0x210]
inc eax
mov dword [ebp - 0x210], eax
cmp dword [ebp - 0x210], 2
jge 0x10033d89
push dword [ebp - 0x210]
lea ecx, [ebp - 0x91c]
call fcn.1000e0ff
mov dword [eax], 0x23ed15de
jmp 0x10033d5a
cmp dword [ebp - 0x120], 0
je 0x10033da6
mov byte [ebp - 4], 0x1a
lea ecx, [ebp - 0x91c]
call fcn.1000e0fa
jmp 0x10033ecd
mov dword [ebp - 0x120], 0
jmp 0x10033dbf
mov eax, dword [ebp - 0x120]
inc eax
mov dword [ebp - 0x120], eax
cmp dword [ebp - 0x120], 1
jg 0x10033eb9
mov dword [ebp - 0x3d0], 0x3f23e93d
mov dword [ebp - 0x7a4], 1
push 0
lea ecx, [ebp - 0x614]
call fcn.1000e0ff
mov eax, dword [eax]
mov dword [ebp - 0x3a8], eax
mov eax, dword [ebp - 0x3d0]
cmp dword [ebp - 0x3a8], eax
jl 0x10033e0f
mov dword [ebp - 0x3b0], 1
jmp 0x10033e16
and dword [ebp - 0x3b0], 0
mov eax, dword [ebp - 0x3c8]
cmp dword [ebp - 0x3b0], eax
jne 0x10033e30
mov dword [ebp - 0x3b8], 1
jmp 0x10033e37
and dword [ebp - 0x3b8], 0
push 0
lea ecx, [ebp - 0x614]
call fcn.1000e0ff
cmp dword [eax], 0x15256ee9
jg 0x10033e58
mov dword [ebp - 0x3c0], 1
jmp 0x10033e5f
and dword [ebp - 0x3c0], 0
mov eax, dword [ebp - 0x3b8]
imul eax, dword [ebp - 0x3c0]
cmp eax, dword [ebp - 0x3c8]
je 0x10033e80
mov dword [ebp - 0x3d8], 1
jmp 0x10033e87
and dword [ebp - 0x3d8], 0
mov eax, dword [ebp - 0x3d0]
cmp dword [ebp - 0x3d8], eax
jg 0x10033ea1
mov dword [ebp - 0x3e0], 1
jmp 0x10033ea8
and dword [ebp - 0x3e0], 0
mov eax, dword [ebp - 0x3e0]
mov dword [ebp - 0x7a4], eax
jmp 0x10033db2
mov byte [ebp - 4], 0x1a
lea ecx, [ebp - 0x91c]
call fcn.1000e0fa
jmp 0x10033ce5
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x614]
call fcn.1000e0fa
mov dword [ebp - 0x1e8], 0
jmp 0x10033ef5
mov eax, dword [ebp - 0x1e8]
inc eax
mov dword [ebp - 0x1e8], eax
cmp dword [ebp - 0x1e8], 3
jg 0x10034124
push 3
lea ecx, [ebp - 0x84c]
call fcn.1000e0be
mov byte [ebp - 4], 0x1c
mov dword [ebp - 0x128], 0x5252cb13
lea eax, [ebp - 0xac0]
push eax
push 0
push 0x67b7
lea eax, [ebp - 0x84c]
push eax
call fcn.1003650b
add esp, 0x10
mov dword [ebp - 0x128], 0
jmp 0x10033f53
mov eax, dword [ebp - 0x128]
inc eax
mov dword [ebp - 0x128], eax
cmp dword [ebp - 0x128], 2
jg 0x10033fa4
push 2
lea ecx, [ebp - 0x84c]
call fcn.1000e0ff
mov esi, eax
push dword [ebp - 0x128]
lea ecx, [ebp - 0x84c]
call fcn.1000e0ff
mov ecx, dword [esi]
mov dword [eax], ecx
mov byte [ebp - 0x95], 0
push 0
push 0xd99
push 0x154e
lea eax, [ebp - 0x95]
push eax
call fcn.1002d729
add esp, 0x10
jmp 0x10033f46
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x84c]
call fcn.1000e0fa
mov dword [ebp - 0x130], 0x324ec2e0
mov dword [ebp - 0x8d4], 4
mov dword [ebp - 0x8d0], 4
mov dword [ebp - 0x8cc], 4
mov dword [ebp - 0x8c8], 4
lea ecx, [ebp - 0x2b5]
call fcn.1000ed23
push eax
lea eax, [ebp - 0x8c4]
push eax
lea eax, [ebp - 0x8d4]
push eax
lea ecx, [ebp - 0xb58]
call fcn.10021c6c
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0x934]
call fcn.10021c46
mov byte [ebp - 4], 0x1d
mov dword [ebp - 0x6e8], 0x9b3a00d0
mov dword [ebp - 0x130], 0
jmp 0x10034041
mov eax, dword [ebp - 0x130]
dec eax
mov dword [ebp - 0x130], eax
cmp dword [ebp - 0x130], 0xfffffff5
jl 0x100340de
mov dword [ebp - 0x214], 0xb4c23afc
mov dword [ebp - 0x214], 0
jmp 0x10034071
mov eax, dword [ebp - 0x214]
inc eax
mov dword [ebp - 0x214], eax
cmp dword [ebp - 0x214], 3
jg 0x100340d9
mov dword [ebp - 0x108], 0x416db6d0
mov dword [ebp - 0x108], 0
jmp 0x1003409d
mov eax, dword [ebp - 0x108]
inc eax
mov dword [ebp - 0x108], eax
cmp dword [ebp - 0x108], 3
jg 0x100340d7
mov byte [ebp - 0xb0], 0
lea eax, [ebp - 0xb0]
push eax
push 0
call fcn.1003d45d
pop ecx
pop ecx
push dword [ebp - 0x108]
lea ecx, [ebp - 0x934]
call fcn.1000e0ff
cmp dword [eax], 0
je 0x100340d5
jmp 0x10034090
jmp 0x10034090
jmp 0x10034064
jmp 0x10034034
push 0
lea eax, [ebp - 0x6e8]
push eax
lea eax, [ebp - 0x934]
push eax
lea eax, [ebp - 0x130]
push eax
call fcn.10035bda
add esp, 0x10
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x934]
call fcn.1000e0fa
mov eax, dword [ebp - 0x138]
mov eax, dword [ebp + eax*4 - 0x888]
mov dword [ebp - 0x7c4], eax
jmp 0x10033ee8
jmp 0x1003377b
jmp 0x10033754
jmp 0x100324ee
jmp 0x10030d9d
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xa30]
call fcn.1000e0fa
mov dword [ebp - 0x6f0], 1
mov dword [ebp - 0x1f0], 0
jmp 0x1003416a
mov eax, dword [ebp - 0x1f0]
inc eax
mov dword [ebp - 0x1f0], eax
cmp dword [ebp - 0x1f0], 2
jge 0x10034186
mov eax, dword [ebp - 0x1f0]
mov dword [ebp + eax*4 - 0x5b8], 0xfffffff8
jmp 0x1003415d
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0x5b8], 0xd
jmp 0x100341b4
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x5b8]
dec eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x5b8], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x5b8], 0
jl 0x10034290
mov dword [ebp - 0x238], 0
jmp 0x100341e1
mov eax, dword [ebp - 0x238]
inc eax
mov dword [ebp - 0x238], eax
cmp dword [ebp - 0x238], 3
jge 0x100341fd
mov eax, dword [ebp - 0x238]
mov dword [ebp + eax*4 - 0x840], 0xfffffffc
jmp 0x100341d4
push 4
pop eax
shl eax, 0
mov dword [ebp + eax - 0x840], 0
jmp 0x1003422b
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x840]
dec eax
push 4
pop ecx
shl ecx, 0
mov dword [ebp + ecx - 0x840], eax
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x840], 0xffffffed
jne 0x1003428b
mov byte [ebp - 0xb3], 0
push 0
push 0x2291
lea eax, [ebp - 0xb3]
push eax
push 0x4cc
push 0x19bb
push 0x1297
push 0x9f0
push 0x4053
push 0x3ebc
push 1
push 0x685f
push 0x42c3
push 0x565f
push 1
call fcn.1003cfbc
add esp, 0x38
jmp 0x10034210
jmp 0x10034199
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x6f0]
mov dword [ebp + eax - 0x5b8], ecx
mov dword [ebp - 0x6fc], 0xffffffff
mov dword [ebp - 0x7ac], 0x1ba8
cmp dword [ebp - 0x7ac], 0x1137
jge 0x100344a5
mov dword [ebp - 0x950], 3
and dword [ebp - 0x8ac], 0
push 8
pop ecx
xor eax, eax
lea edi, [ebp - 0x8a8]
rep stosd dword es:[edi], eax
and dword [ebp - 0xd4], 0
and dword [ebp - 0x1c], 0
jmp 0x100342f9
mov eax, dword [ebp - 0x1c]
inc eax
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 3
jge 0x10034427
and dword [ebp - 0x20], 0
jmp 0x10034310
mov eax, dword [ebp - 0x20]
inc eax
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 3
jge 0x10034422
lea eax, [ebp - 0xd4]
push eax
push 0x10007748
call fcn.1004a93b
pop ecx
pop ecx
imul eax, dword [ebp - 0x1c], 0xc
lea eax, [ebp + eax - 0x8ac]
mov ecx, dword [ebp - 0x20]
mov eax, dword [eax + ecx*4]
add eax, dword [ebp - 0xd4]
imul ecx, dword [ebp - 0x1c], 0xc
lea ecx, [ebp + ecx - 0x8ac]
mov edx, dword [ebp - 0x20]
mov dword [ecx + edx*4], eax
cmp dword [ebp - 0x1c], 0
jle 0x10034389
mov eax, dword [ebp - 0x1c]
dec eax
imul eax, eax, 0xc
lea eax, [ebp + eax - 0x8ac]
mov ecx, dword [ebp - 0x20]
mov eax, dword [eax + ecx*4]
add eax, dword [ebp - 0xd4]
mov ecx, dword [ebp - 0x1c]
dec ecx
imul ecx, ecx, 0xc
lea ecx, [ebp + ecx - 0x8ac]
mov edx, dword [ebp - 0x20]
mov dword [ecx + edx*4], eax
cmp dword [ebp - 0x20], 0
jle 0x100343b9
imul eax, dword [ebp - 0x1c], 0xc
lea eax, [ebp + eax - 0x8ac]
mov ecx, dword [ebp - 0x20]
mov eax, dword [eax + ecx*4 - 4]
add eax, dword [ebp - 0xd4]
imul ecx, dword [ebp - 0x1c], 0xc
lea ecx, [ebp + ecx - 0x8ac]
mov edx, dword [ebp - 0x20]
mov dword [ecx + edx*4 - 4], eax
cmp dword [ebp - 0x1c], 2
jge 0x100343ed
mov eax, dword [ebp - 0x1c]
inc eax
imul eax, eax, 0xc
lea eax, [ebp + eax - 0x8ac]
mov ecx, dword [ebp - 0x20]
mov eax, dword [eax + ecx*4]
add eax, dword [ebp - 0xd4]
mov ecx, dword [ebp - 0x1c]
inc ecx
imul ecx, ecx, 0xc
lea ecx, [ebp + ecx - 0x8ac]
mov edx, dword [ebp - 0x20]
mov dword [ecx + edx*4], eax
cmp dword [ebp - 0x20], 2
jge 0x1003441d
imul eax, dword [ebp - 0x1c], 0xc
lea eax, [ebp + eax - 0x8ac]
mov ecx, dword [ebp - 0x20]
mov eax, dword [eax + ecx*4 + 4]
add eax, dword [ebp - 0xd4]
imul ecx, dword [ebp - 0x1c], 0xc
lea ecx, [ebp + ecx - 0x8ac]
mov edx, dword [ebp - 0x20]
mov dword [ecx + edx*4 + 4], eax
jmp 0x10034309
jmp 0x100342f2
and dword [ebp - 0x1f8], 0
jmp 0x1003443d
mov eax, dword [ebp - 0x1f8]
inc eax
mov dword [ebp - 0x1f8], eax
cmp dword [ebp - 0x1f8], 3
jge 0x100344a5
and dword [ebp - 0x220], 0
jmp 0x1003445c
mov eax, dword [ebp - 0x220]
inc eax
mov dword [ebp - 0x220], eax
cmp dword [ebp - 0x220], 3
jge 0x10034498
imul eax, dword [ebp - 0x1f8], 0xc
lea eax, [ebp + eax - 0x8ac]
mov ecx, dword [ebp - 0x220]
mov eax, dword [eax + ecx*4]
inc eax
and eax, 0x80000001
jns 0x10034489
dec eax
or eax, 0xfffffffe
inc eax
push eax
push 0x10007748
call fcn.1004ace5
pop ecx
pop ecx
jmp 0x1003444f
push 0x10007b58
call fcn.1004ace5
pop ecx
jmp 0x10034430
push 1
lea ecx, [ebp - 0x94c]
call fcn.1000e0be
mov dword [ebp - 4], 0x1e
mov dword [ebp - 0x9d0], 0x3992
mov dword [ebp - 0x200], 0
jmp 0x100344dc
mov eax, dword [ebp - 0x200]
inc eax
mov dword [ebp - 0x200], eax
cmp dword [ebp - 0x200], 1
jge 0x100344fe
push dword [ebp - 0x200]
lea ecx, [ebp - 0x94c]
call fcn.1000e0ff
mov dword [eax], 0xfb871c7b
jmp 0x100344cf
mov byte [ebp - 0xc1], 0
movzx eax, byte [ebp - 0xc1]
test eax, eax
je 0x10034524
push 0x6383
push 0x4360
push 0
call fcn.1002c88f
add esp, 0xc
mov esi, dword [ebp - 0x6fc]
push 0
lea ecx, [ebp - 0x94c]
call fcn.1000e0ff
mov dword [eax], esi
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x94c]
call fcn.1000e0fa
push 2
lea ecx, [ebp - 0xa40]
call fcn.1000e0be
mov dword [ebp - 4], 0x1f
mov dword [ebp - 0x230], 0xf1febaee
push 1
lea eax, [ebp - 0x9d8]
push eax
push 0x1a2d
push 0x4450
push 1
lea eax, [ebp - 0xa40]
push eax
push 0x27b0
call fcn.1002bf98
add esp, 0x1c
mov dword [ebp - 0x230], 0
jmp 0x100345a8
mov eax, dword [ebp - 0x230]
inc eax
mov dword [ebp - 0x230], eax
cmp dword [ebp - 0x230], 1
jg 0x10034603
mov dword [ebp - 0x208], 0
jmp 0x100345ca
mov eax, dword [ebp - 0x208]
inc eax
mov dword [ebp - 0x208], eax
cmp dword [ebp - 0x208], 1
jge 0x100345e6
mov eax, dword [ebp - 0x208]
mov dword [ebp + eax*4 - 0x3e8], 1
jmp 0x100345bd
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x3e8]
inc eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x3e8], eax
jmp 0x1003459b
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xa40]
call fcn.1000e0fa
mov dword [ebp - 0x64], 2
mov dword [ebp - 0x77c], 0xdb6d0374
mov dword [ebp - 0x780], 0x746e33a7
mov dword [ebp - 0x64], 6
jmp 0x1003463d
mov eax, dword [ebp - 0x64]
dec eax
mov dword [ebp - 0x64], eax
cmp dword [ebp - 0x64], 0xffffffe8
jge 0x10034668
mov byte [ebp - 0xb5], 0
movzx eax, byte [ebp - 0xb5]
test eax, eax
je 0x10034666
push 1
push 1
push 0x6dab
call fcn.1002c1c6
add esp, 0xc
jmp 0x10034636
mov dword [ebp - 0x64], 0
jmp 0x10034678
mov eax, dword [ebp - 0x64]
dec eax
mov dword [ebp - 0x64], eax
cmp dword [ebp - 0x64], 0xfffffffb
jge 0x100346da
mov dword [ebp - 0x710], 0xffffffff
mov dword [ebp - 0x708], 0xfff9
mov byte [ebp - 0xae], 0
push 0
lea eax, [ebp - 0xae]
push eax
call fcn.1003d320
pop ecx
pop ecx
lea eax, [ebp - 0x77c]
push eax
lea eax, [ebp - 0x708]
push eax
push 0
lea eax, [ebp - 0x780]
push eax
push 0x4f06
lea eax, [ebp - 0x64]
push eax
lea eax, [ebp - 0x710]
push eax
call fcn.1002c9f6
add esp, 0x1c
jmp 0x10034671
mov dword [ebp - 0x8c], 0x462d5e48
mov dword [ebp - 0x8c], 0
jmp 0x100346fd
mov eax, dword [ebp - 0x8c]
inc eax
mov dword [ebp - 0x8c], eax
cmp dword [ebp - 0x8c], 0x19
jne 0x10034722
mov byte [ebp - 0xb2], 0
movzx eax, byte [ebp - 0xb2]
test eax, eax
je 0x10034720
push 0
call fcn.1002c96c
pop ecx
jmp 0x100346f0
mov dword [ebp - 0x8c], 0
jmp 0x1003473b
mov eax, dword [ebp - 0x8c]
inc eax
mov dword [ebp - 0x8c], eax
cmp dword [ebp - 0x8c], 5
jne 0x1003475b
mov dword [ebp - 0x788], 0x5b40194d
cmp dword [ebp - 0x788], 0
je 0x10034759
jmp 0x1003475b
jmp 0x1003472e
mov dword [ebp - 0x16c], 0
jmp 0x10034774
mov eax, dword [ebp - 0x16c]
inc eax
mov dword [ebp - 0x16c], eax
cmp dword [ebp - 0x16c], 1
jge 0x10034790
mov eax, dword [ebp - 0x16c]
mov dword [ebp + eax*4 - 0xf4], 6
jmp 0x10034767
mov dword [ebp - 0x718], 0x1f7f
cmp dword [ebp - 0x718], 0x7d8
jge 0x100348fe
lea eax, [ebp - 0x25c]
push eax
push 0x1000774c
call fcn.1004a93b
pop ecx
pop ecx
mov byte [ebp - 0xb4], 0
lea eax, [ebp - 0xb4]
push eax
push dword [ebp - 0x25c]
lea ecx, [ebp - 0xaa8]
call fcn.10022084
mov dword [ebp - 4], 0x20
push 0x10007b5c
call fcn.1004ace5
pop ecx
mov eax, dword [ebp - 0x25c]
dec eax
mov dword [ebp - 0x140], eax
and dword [ebp - 0x264], 0
and dword [ebp - 0x178], 0
jmp 0x10034818
mov eax, dword [ebp - 0x178]
inc eax
mov dword [ebp - 0x178], eax
mov eax, dword [ebp - 0x178]
cmp eax, dword [ebp - 0x25c]
jge 0x100348e4
lea eax, [ebp - 0x170]
push eax
push 0x1000774c
call fcn.1004a93b
pop ecx
pop ecx
mov eax, dword [ebp - 0x170]
dec eax
mov dword [ebp - 0x170], eax
push 1
push dword [ebp - 0x170]
lea eax, [ebp - 0xb18]
push eax
lea ecx, [ebp - 0xaa8]
call fcn.10022105
mov ecx, eax
call fcn.10022124
mov eax, dword [ebp - 0x170]
cmp eax, dword [ebp - 0x140]
jne 0x100348c4
cmp dword [ebp - 0x140], 0
jl 0x100348c4
push dword [ebp - 0x140]
lea eax, [ebp - 0xb28]
push eax
lea ecx, [ebp - 0xaa8]
call fcn.10022105
mov ecx, eax
call fcn.10022149
movzx eax, al
test eax, eax
je 0x100348c4
mov eax, dword [ebp - 0x264]
inc eax
mov dword [ebp - 0x264], eax
mov eax, dword [ebp - 0x140]
dec eax
mov dword [ebp - 0x140], eax
jmp 0x10034879
mov eax, dword [ebp - 0x178]
inc eax
inc eax
sub eax, dword [ebp - 0x264]
push eax
push 0x10007a1c
call fcn.1004ace5
pop ecx
pop ecx
jmp 0x1003480b
push 0x100076b5
call fcn.1004b3f4
pop ecx
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xaa8]
call fcn.100220e5
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0xf4], 0
jmp 0x1003492c
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xf4]
dec eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0xf4], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0xf4], 0xffffffff
jg 0x10034975
mov dword [ebp - 0x790], 0x288a137b
cmp dword [ebp - 0x790], 0
je 0x10034951
jmp 0x10034975
mov byte [ebp - 0x9d], 0
push 0x7408
push 0x663a
push 0
lea eax, [ebp - 0x9d]
push eax
call fcn.1003f0f6
add esp, 0x10
jmp 0x10034911
mov dword [ebp - 0x94], 1
mov dword [ebp - 0xec], 0x3d37a5b7
mov dword [ebp - 0xe4], 0xc2e7ccc8
mov dword [ebp - 0x26c], 0x600d5493
mov dword [ebp - 0x9e0], 1
mov dword [ebp - 0xdc], 1
mov dword [ebp - 0x450], 0x8f7f
mov dword [ebp - 0x470], 0xdcbc
mov dword [ebp - 0x180], 0
jmp 0x100349de
mov eax, dword [ebp - 0x180]
inc eax
mov dword [ebp - 0x180], eax
cmp dword [ebp - 0x180], 4
jge 0x100349fa
mov eax, dword [ebp - 0x180]
mov dword [ebp + eax*4 - 0xae0], 2
jmp 0x100349d1
mov dword [ebp - 0x94], 0
jmp 0x10034a13
mov eax, dword [ebp - 0x94]
dec eax
mov dword [ebp - 0x94], eax
cmp dword [ebp - 0x94], 0xffffffe6
jne 0x10034ecf
mov dword [ebp - 0x7c], 0xd4f2887c
push 3
lea ecx, [ebp - 0x608]
call fcn.1000e0be
mov dword [ebp - 4], 0x21
lea eax, [ebp - 0x608]
push eax
push 0x12b0
push 0x476
push 0x501e
lea eax, [ebp - 0x9e8]
push eax
push 0x6d12
push 0
push 0x5979
call fcn.1002c743
add esp, 0x20
cmp dword [ebp - 0x7c], 0xfffffff9
jg 0x10034a7e
mov dword [ebp - 0x3f0], 1
jmp 0x10034a85
and dword [ebp - 0x3f0], 0
mov eax, dword [ebp - 0x7c]
neg eax
mov dword [ebp - 0xec], eax
mov eax, dword [ebp - 0xec]
cmp dword [ebp - 0x3f0], eax
je 0x10034aaa
mov dword [ebp - 0x3f8], 1
jmp 0x10034ab1
and dword [ebp - 0x3f8], 0
mov eax, dword [ebp - 0x7c]
imul eax, dword [ebp - 0x94]
mov ecx, dword [ebp - 0x94]
add ecx, dword [ebp - 0x3f8]
cmp eax, ecx
jle 0x10034ad7
mov dword [ebp - 0x400], 1
jmp 0x10034ade
and dword [ebp - 0x400], 0
mov eax, dword [ebp - 0x400]
mov dword [ebp - 0xe4], eax
mov dword [ebp - 0xe4], 0
jmp 0x10034b03
mov eax, dword [ebp - 0xe4]
dec eax
mov dword [ebp - 0xe4], eax
cmp dword [ebp - 0xe4], 0xfffffff1
je 0x10034ebb
mov dword [ebp - 0x7ec], 0xa023703a
mov dword [ebp - 0x7e8], 0xa023703a
mov dword [ebp - 0x7e4], 0xa023703a
mov dword [ebp - 0x7e0], 0xa023703a
mov dword [ebp - 0x7a0], 0x781be2fc
mov dword [ebp - 0x7c], 0
jmp 0x10034b52
mov eax, dword [ebp - 0x7c]
inc eax
mov dword [ebp - 0x7c], eax
cmp dword [ebp - 0x7c], 0x2f
jle 0x10034eb6
mov dword [ebp - 0x190], 3
mov dword [ebp - 0x410], 0xd77cccae
cmp dword [ebp - 0xec], 0xca27
jle 0x10034b88
mov dword [ebp - 0x408], 1
jmp 0x10034b8f
and dword [ebp - 0x408], 0
cmp dword [ebp - 0x408], 0xffff3cce
jl 0x10034bff
push 3
lea ecx, [ebp - 0xa50]
call fcn.1000e0be
mov byte [ebp - 4], 0x22
lea eax, [ebp - 0x9f0]
push eax
push 0x12a7
lea eax, [ebp - 0xa50]
push eax
push 1
push 0x32bf
push 1
call fcn.1002c50b
add esp, 0x18
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x7ec]
inc eax
push 4
pop ecx
shl ecx, 0
mov dword [ebp + ecx - 0x7ec], eax
mov byte [ebp - 4], 0x21
lea ecx, [ebp - 0xa50]
call fcn.1000e0fa
jmp 0x10034db8
mov dword [ebp - 0x720], 0xc0a1
mov dword [ebp - 0x798], 0
mov dword [ebp - 0x188], 0
jmp 0x10034c2c
mov eax, dword [ebp - 0x188]
inc eax
mov dword [ebp - 0x188], eax
cmp dword [ebp - 0x188], 1
jge 0x10034c48
mov eax, dword [ebp - 0x188]
mov dword [ebp + eax*4 - 0x440], 0xfffffffb
jmp 0x10034c1f
mov eax, dword [ebp - 0x26c]
mov dword [ebp - 0xec], eax
mov eax, dword [ebp - 0xec]
mov dword [ebp - 0xa7c], eax
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x7ec]
mov dword [ebp - 0xa84], eax
mov eax, dword [ebp - 0x26c]
mov dword [ebp - 0xa8c], eax
mov eax, dword [ebp - 0x720]
mov dword [ebp - 0xa94], eax
mov eax, dword [ebp - 0x798]
mov dword [ebp - 0xad0], eax
mov eax, dword [ebp - 0x410]
mov dword [ebp - 0xacc], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x410]
mov dword [ebp + eax - 0x440], ecx
mov eax, 0x64fef537
test eax, eax
je 0x10034ce6
mov eax, 0x1ddbc75b
test eax, eax
je 0x10034ce6
push 1
lea ecx, [ebp - 0x608]
call fcn.1000e0ff
cmp dword [eax], 0
je 0x10034ce6
mov dword [ebp - 0x418], 1
jmp 0x10034ced
and dword [ebp - 0x418], 0
mov eax, dword [ebp - 0xdc]
cmp dword [ebp - 0x418], eax
jg 0x10034d07
mov dword [ebp - 0x420], 1
jmp 0x10034d0e
and dword [ebp - 0x420], 0
mov eax, dword [ebp - 0x7c]
cmp dword [ebp - 0x420], eax
jle 0x10034d25
mov dword [ebp - 0x428], 1
jmp 0x10034d2c
and dword [ebp - 0x428], 0
mov eax, dword [ebp - 0x190]
cmp dword [ebp - 0x428], eax
je 0x10034d46
mov dword [ebp - 0x430], 1
jmp 0x10034d4d
and dword [ebp - 0x430], 0
mov eax, dword [ebp - 0x190]
cmp dword [ebp - 0x430], eax
je 0x10034d67
mov dword [ebp - 0x438], 1
jmp 0x10034d6e
and dword [ebp - 0x438], 0
push 1
lea ecx, [ebp - 0x608]
call fcn.1000e0ff
mov ecx, dword [ebp - 0x438]
mov dword [eax], ecx
mov dword [ebp - 0xdc], 0
jmp 0x10034d9c
mov eax, dword [ebp - 0xdc]
inc eax
mov dword [ebp - 0xdc], eax
cmp dword [ebp - 0xdc], 1
jge 0x10034db8
mov eax, dword [ebp - 0xdc]
mov dword [ebp + eax*4 - 0x440], 6
jmp 0x10034d8f
cmp dword [ebp - 0x94], 0xffffffff
jg 0x10034dcd
mov dword [ebp - 0x448], 1
jmp 0x10034dd4
and dword [ebp - 0x448], 0
mov eax, dword [ebp - 0x448]
mov dword [ebp - 0x450], eax
mov esi, dword [ebp - 0x450]
push 1
lea ecx, [ebp - 0x608]
call fcn.1000e0ff
cmp esi, dword [eax]
jle 0x10034e03
mov dword [ebp - 0x458], 1
jmp 0x10034e0a
and dword [ebp - 0x458], 0
mov eax, dword [ebp - 0x190]
cmp dword [ebp - 0x458], eax
jg 0x10034e24
mov dword [ebp - 0x728], 1
jmp 0x10034e2b
and dword [ebp - 0x728], 0
mov eax, dword [ebp - 0xe4]
mov dword [ebp - 0xa70], eax
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x7ec], 0
jne 0x10034e59
cmp dword [ebp - 0x7a0], 0
jne 0x10034e59
and dword [ebp - 0x460], 0
jmp 0x10034e63
mov dword [ebp - 0x460], 1
mov esi, dword [ebp - 0x460]
sub esi, 0x737e
push 1
lea ecx, [ebp - 0x608]
call fcn.1000e0ff
cmp esi, dword [eax]
jge 0x10034e95
cmp dword [ebp - 0x190], 0
je 0x10034e95
mov dword [ebp - 0x468], 1
jmp 0x10034e9c
and dword [ebp - 0x468], 0
push 1
lea ecx, [ebp - 0x608]
call fcn.1000e0ff
mov ecx, dword [ebp - 0x468]
mov dword [eax], ecx
jmp 0x10034b4b
jmp 0x10034af6
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x608]
call fcn.1000e0fa
jmp 0x10034a06
mov eax, dword [ebp - 0x470]
mov dword [ebp - 0x9cc], eax
cmp dword [ebp - 0x26c], 0x93a39d8e
jbe 0x10034ef3
mov dword [ebp - 0x730], 1
jmp 0x10034efa
and dword [ebp - 0x730], 0
mov eax, dword [ebp - 0x470]
mov dword [ebp - 0xa78], eax
mov eax, dword [ebp - 0x94]
mov dword [ebp - 0x95c], eax
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0xae0]
mov dword [ebp - 0x9f4], eax
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0xae0], 0xfffffff6
je 0x10034f3f
mov dword [ebp - 0x478], 1
jmp 0x10034f46
and dword [ebp - 0x478], 0
mov eax, dword [ebp - 0x478]
sub eax, 4
mov dword [ebp - 0xec], eax
push 4
pop eax
imul eax, eax, 0
push 4
pop ecx
imul ecx, ecx, 0
mov eax, dword [ebp + eax - 0xf4]
mov dword [ebp + ecx - 0xf4], eax
mov eax, dword [ebp - 0x1c8]
mov eax, dword [eax]
mov ecx, dword [ebp - 0x1c8]
mov ecx, dword [ecx]
movzx ecx, word [ecx + 0x14]
lea eax, [eax + ecx + 0x18]
mov dword [ebp - 0x68], eax
push 4
lea ecx, [ebp - 0xa64]
call fcn.1000e0be
mov dword [ebp - 4], 0x23
mov dword [ebp - 0x154], 0xada439be
mov dword [ebp - 0x198], 0
jmp 0x10034fc1
mov eax, dword [ebp - 0x198]
inc eax
mov dword [ebp - 0x198], eax
cmp dword [ebp - 0x198], 4
jge 0x10034fe3
push dword [ebp - 0x198]
lea ecx, [ebp - 0xa64]
call fcn.1000e0ff
mov dword [eax], 0xbbca
jmp 0x10034fb4
mov dword [ebp - 0x7a8], 0x1764
cmp dword [ebp - 0x7a8], 0x983
jge 0x1003515c
lea eax, [ebp - 0x480]
push eax
lea eax, [ebp - 0x274]
push eax
push 0x10007780
call fcn.1004a93b
add esp, 0xc
mov byte [ebp - 0xbd], 0
lea eax, [ebp - 0xbd]
push eax
push dword [ebp - 0x480]
lea ecx, [ebp - 0xabc]
call fcn.10022084
mov byte [ebp - 4], 0x24
mov eax, dword [ebp - 0x274]
mov dword [ebp - 0x738], eax
mov eax, dword [ebp - 0x274]
dec eax
mov dword [ebp - 0x274], eax
cmp dword [ebp - 0x738], 0
je 0x100350cf
lea eax, [ebp - 0x27c]
push eax
push 0x10007748
call fcn.1004a93b
pop ecx
pop ecx
mov eax, dword [ebp - 0x27c]
mov dword [ebp - 0x7b0], eax
mov eax, dword [ebp - 0x27c]
dec eax
mov dword [ebp - 0x27c], eax
cmp dword [ebp - 0x7b0], 0
je 0x100350ca
lea eax, [ebp - 0x740]
push eax
push 0x10007748
call fcn.1004a93b
pop ecx
pop ecx
push 1
mov eax, dword [ebp - 0x740]
dec eax
push eax
lea eax, [ebp - 0xb40]
push eax
lea ecx, [ebp - 0xabc]
call fcn.10022105
mov ecx, eax
call fcn.10022124
jmp 0x10035070
jmp 0x1003503b
mov byte [ebp - 0x35], 1
and dword [ebp - 0x1a0], 0
jmp 0x100350e9
mov eax, dword [ebp - 0x1a0]
inc eax
mov dword [ebp - 0x1a0], eax
mov eax, dword [ebp - 0x1a0]
cmp eax, dword [ebp - 0x480]
jge 0x10035123
push dword [ebp - 0x1a0]
lea eax, [ebp - 0xb20]
push eax
lea ecx, [ebp - 0xabc]
call fcn.10022105
mov ecx, eax
call fcn.10022149
movzx eax, al
test eax, eax
jne 0x10035121
mov byte [ebp - 0x35], 0
jmp 0x100350dc
movzx eax, byte [ebp - 0x35]
test eax, eax
je 0x10035137
mov dword [ebp - 0x488], 0x10007a7c
jmp 0x10035141
mov dword [ebp - 0x488], 0x10007a78
push dword [ebp - 0x488]
call fcn.1004b3f4
pop ecx
mov byte [ebp - 4], 0x23
lea ecx, [ebp - 0xabc]
call fcn.100220e5
mov dword [ebp - 0x154], 3
jmp 0x10035175
mov eax, dword [ebp - 0x154]
dec eax
mov dword [ebp - 0x154], eax
cmp dword [ebp - 0x154], 0
jl 0x100352ae
mov dword [ebp - 0x6c], 0xffffffff
mov dword [ebp - 0x148], 0x44455595
mov dword [ebp - 0x650], 0xb94d0f4f
mov dword [ebp - 0x6c], 0
jmp 0x100351ad
mov eax, dword [ebp - 0x6c]
inc eax
mov dword [ebp - 0x6c], eax
cmp dword [ebp - 0x6c], 3
jg 0x100351bf
mov dword [ebp - 0x148], 0
jmp 0x100351a6
mov dword [ebp - 0x148], 0
jmp 0x100351d8
mov eax, dword [ebp - 0x148]
inc eax
mov dword [ebp - 0x148], eax
cmp dword [ebp - 0x148], 3
jg 0x100352a9
mov dword [ebp - 0x868], 1
mov dword [ebp - 0x864], 1
mov dword [ebp - 0x860], 1
mov dword [ebp - 0x85c], 1
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x868]
mov dword [ebp - 0x6c], eax
mov dword [ebp - 0x6c], 0
jmp 0x1003522d
mov eax, dword [ebp - 0x6c]
inc eax
mov dword [ebp - 0x6c], eax
cmp dword [ebp - 0x6c], 3
jg 0x100352a4
mov dword [ebp - 0x1a8], 0xfffffffb
mov dword [ebp - 0x1a8], 0
jmp 0x10035256
mov eax, dword [ebp - 0x1a8]
inc eax
mov dword [ebp - 0x1a8], eax
cmp dword [ebp - 0x1a8], 3
jg 0x100352a2
mov dword [ebp - 0x1b0], 0xc67ee39f
mov dword [ebp - 0x1b0], 0
jmp 0x10035282
mov eax, dword [ebp - 0x1b0]
inc eax
mov dword [ebp - 0x1b0], eax
cmp dword [ebp - 0x1b0], 3
jg 0x100352a0
mov eax, dword [ebp - 0x154]
mov eax, dword [ebp + eax*4 - 0x868]
mov dword [ebp - 0x650], eax
jmp 0x10035275
jmp 0x10035249
jmp 0x10035226
jmp 0x100351cb
jmp 0x10035168
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xa64]
call fcn.1000e0fa
mov dword [ebp - 0x2c], 0xb0ceafd9
mov dword [ebp - 0x4d0], 1
push 2
lea ecx, [ebp - 0x858]
call fcn.1000e0be
mov dword [ebp - 4], 0x25
mov dword [ebp - 0xfc], 0xa9413e45
mov dword [ebp - 0x1c0], 0xd925d3c0
mov dword [ebp - 0x4b8], 0x4177fd8b
mov dword [ebp - 0x4f0], 0xfb1cad2b
mov dword [ebp - 0x1b8], 0
jmp 0x10035323
mov eax, dword [ebp - 0x1b8]
inc eax
mov dword [ebp - 0x1b8], eax
cmp dword [ebp - 0x1b8], 2
jge 0x10035345
push dword [ebp - 0x1b8]
lea ecx, [ebp - 0x858]
call fcn.1000e0ff
mov dword [eax], 0x1d686a37
jmp 0x10035316
mov eax, dword [ebp - 0x2c]
cmp dword [ebp - 0x2c], eax
jle 0x10035359
mov dword [ebp - 0x4c0], 1
jmp 0x10035360
and dword [ebp - 0x4c0], 0
mov eax, dword [ebp - 0x2c]
mov dword [ebp - 0x490], eax
push 1
lea ecx, [ebp - 0x858]
call fcn.1000e0ff
mov ecx, dword [ebp - 0x490]
mov dword [eax], ecx
cmp dword [ebp - 0x490], 0
jne 0x10035399
cmp dword [ebp - 0xfc], 0
jne 0x10035399
and dword [ebp - 0x498], 0
jmp 0x100353a3
mov dword [ebp - 0x498], 1
mov eax, dword [ebp - 0x498]
sub eax, dword [ebp - 0x2c]
cmp eax, dword [ebp - 0xfc]
je 0x100353c0
mov dword [ebp - 0x4a0], 1
jmp 0x100353c7
and dword [ebp - 0x4a0], 0
mov eax, dword [ebp - 0xfc]
add eax, dword [ebp - 0x4a0]
add eax, dword [ebp - 0x2c]
cmp eax, dword [ebp - 0x2c]
jl 0x100353e7
mov dword [ebp - 0x654], 1
jmp 0x100353ee
and dword [ebp - 0x654], 0
mov eax, dword [ebp - 0xfc]
mov dword [ebp - 0x964], eax
cmp dword [ebp - 0x2c], 0xaacda2a4
jne 0x1003540f
mov dword [ebp - 0x4a8], 1
jmp 0x10035416
and dword [ebp - 0x4a8], 0
mov eax, dword [ebp - 0x4a8]
mov dword [ebp - 0xfc], eax
cmp dword [ebp - 0xfc], 0
jne 0x1003543a
cmp dword [ebp - 0x2c], 0
jne 0x1003543a
and dword [ebp - 0x4b0], 0
jmp 0x10035444
mov dword [ebp - 0x4b0], 1
mov eax, dword [ebp - 0x2c]
cmp dword [ebp - 0x4b0], eax
jle 0x10035456
cmp dword [ebp - 0x1c0], 0
push 1
lea ecx, [ebp - 0x858]
call fcn.1000e0ff
imul eax, dword [ebp - 0x2c], 0x1665
imul eax, dword [ebp - 0x1c0]
mov dword [ebp - 0x4b8], eax
imul eax, dword [ebp - 0x4b8], 3
cmp eax, dword [ebp - 0x2c]
jge 0x1003548f
mov dword [ebp - 0x4c8], 1
jmp 0x10035496
and dword [ebp - 0x4c8], 0
mov eax, dword [ebp - 0x4c0]
mov dword [ebp - 0x4d0], eax
mov eax, dword [ebp - 0x4c8]
sub eax, dword [ebp - 0x1c0]
imul eax, dword [ebp - 0x2c]
neg eax
mov ecx, dword [ebp - 0x4d0]
sub ecx, eax
cmp dword [ebp - 0x2c], ecx
jg 0x100354cd
mov dword [ebp - 0x4d8], 1
jmp 0x100354d4
and dword [ebp - 0x4d8], 0
mov eax, dword [ebp - 0x4f0]
cmp dword [ebp - 0x4d8], eax
jle 0x100354ee
mov dword [ebp - 0x4e0], 1
jmp 0x100354f5
and dword [ebp - 0x4e0], 0
mov eax, dword [ebp - 0x1c0]
cmp dword [ebp - 0x4e0], eax
jl 0x1003550f
mov dword [ebp - 0x4e8], 1
jmp 0x10035516
and dword [ebp - 0x4e8], 0
mov eax, dword [ebp - 0x4e8]
mov dword [ebp - 0x4f0], eax
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x858]
call fcn.1000e0fa
mov dword [ebp - 0x15c], 1
mov dword [ebp - 0x508], 0x7161ab6e
mov dword [ebp - 0x500], 0
mov dword [ebp - 0x284], 0xbfb3a4df
mov dword [ebp - 0x74], 0
jmp 0x10035569
mov eax, dword [ebp - 0x74]
inc eax
mov dword [ebp - 0x74], eax
cmp dword [ebp - 0x74], 1
jge 0x1003557f
mov eax, dword [ebp - 0x74]
mov dword [ebp + eax*4 - 0x65c], 0xfffffffa
jmp 0x10035562
mov dword [ebp - 0x74], 0
jmp 0x1003558f
mov eax, dword [ebp - 0x74]
inc eax
mov dword [ebp - 0x74], eax
cmp dword [ebp - 0x74], 4
jge 0x100355a5
mov eax, dword [ebp - 0x74]
mov dword [ebp + eax*4 - 0xb10], 0x2b96ce02
jmp 0x10035588
cmp dword [ebp - 0x15c], 0xfffffffa
jle 0x100355ba
mov dword [ebp - 0x4f8], 1
jmp 0x100355c1
and dword [ebp - 0x4f8], 0
mov eax, dword [ebp - 0x4f8]
mov dword [ebp - 0x508], eax
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0x65c], 0
mov dword [ebp - 0x500], 0
mov eax, dword [ebp - 0x500]
cmp dword [ebp - 0x508], eax
jge 0x10035602
mov dword [ebp - 0x510], 1
jmp 0x10035609
and dword [ebp - 0x510], 0
mov eax, dword [ebp - 0x15c]
cmp dword [ebp - 0x510], eax
jne 0x10035623
mov dword [ebp - 0x520], 1
jmp 0x1003562a
and dword [ebp - 0x520], 0
mov eax, dword [ebp - 0x15c]
mov dword [ebp - 0x284], eax
mov eax, dword [ebp - 0x284]
imul eax, dword [ebp - 0x15c]
test eax, eax
jne 0x10035650
cmp dword [ebp - 0x284], 0
je 0x10035660
push 0xfffffffffffffffc
pop eax
test eax, eax
je 0x10035660
and dword [ebp - 0x518], 0
jmp 0x1003566a
mov dword [ebp - 0x518], 1
mov eax, dword [ebp - 0x15c]
add eax, dword [ebp - 0x518]
cmp dword [ebp - 0x520], eax
jne 0x1003568a
mov dword [ebp - 0x528], 1
jmp 0x10035691
and dword [ebp - 0x528], 0
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x528]
mov dword [ebp + eax - 0xb10], ecx
and dword [ebp - 0x28c], 0
jmp 0x100356c3
mov eax, dword [ebp - 0x28c]
inc eax
mov dword [ebp - 0x28c], eax
mov eax, dword [ebp - 0x68]
add eax, 0x28
mov dword [ebp - 0x68], eax
mov eax, dword [ebp - 0x1c8]
mov eax, dword [eax]
movzx eax, word [eax + 6]
cmp dword [ebp - 0x28c], eax
jge 0x10035b96
mov dword [ebp - 0x664], 0xffffffff
push 1
lea ecx, [ebp - 0x8f8]
call fcn.1000e0be
mov dword [ebp - 4], 0x26
mov dword [ebp - 0xac4], 0x3992
lea eax, [ebp - 0x96c]
push eax
push 0x6437
push 1
push 0x1d84
lea eax, [ebp - 0x8f8]
push eax
push 0
push 0x1e
push 0x6248
call fcn.1002d2a9
add esp, 0x20
mov byte [ebp - 0xbe], 0
lea eax, [ebp - 0xbe]
push eax
push 0x510d
push 0x262a
push 0
call fcn.1002d79c
add esp, 0x10
mov esi, dword [ebp - 0x664]
push 0
lea ecx, [ebp - 0x8f8]
call fcn.1000e0ff
mov dword [eax], esi
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x8f8]
call fcn.1000e0fa
mov eax, dword [ebp - 0x68]
cmp dword [eax + 0x10], 0
jne 0x100359df
lea eax, [ebp - 0x66c]
push eax
push 0
lea eax, [ebp - 0x580]
push eax
lea eax, [ebp - 0x29c]
push eax
lea eax, [ebp - 0x68]
push eax
call fcn.1003decf
add esp, 0x14
mov dword [ebp - 0x150], 0
mov dword [ebp - 0x104], 6
mov dword [ebp - 0x90], 3
mov dword [ebp - 0x540], 7
push 2
lea ecx, [ebp - 0x928]
call fcn.1000e0be
mov dword [ebp - 4], 0x27
mov dword [ebp - 0x294], 0xfffffffc
mov dword [ebp - 0x67c], 0x4f8d36fb
lea eax, [ebp - 0x928]
push eax
push 0x22be
push 0
push 0x467b
lea eax, [ebp - 0xa04]
push eax
call fcn.1003b9e2
add esp, 0x14
mov dword [ebp - 0x150], 0xc64a6847
mov eax, dword [ebp - 0x150]
mov dword [ebp - 0x974], eax
mov eax, dword [ebp - 0x150]
mov dword [ebp - 0x104], eax
mov eax, dword [ebp - 0x104]
mov dword [ebp - 0xa80], eax
xor eax, eax
inc eax
je 0x1003585e
cmp dword [ebp - 0x104], 0
je 0x1003585e
mov dword [ebp - 0x530], 1
jmp 0x10035865
and dword [ebp - 0x530], 0
mov eax, dword [ebp - 0x90]
cmp dword [ebp - 0x530], eax
jl 0x1003587f
mov dword [ebp - 0x538], 1
jmp 0x10035886
and dword [ebp - 0x538], 0
mov eax, dword [ebp - 0x538]
sub eax, dword [ebp - 0x90]
mov dword [ebp - 0x540], eax
mov eax, dword [ebp - 0x540]
mov dword [ebp - 0x97c], eax
mov eax, dword [ebp - 0x90]
mov dword [ebp - 0x104], eax
mov eax, dword [ebp - 0x90]
cmp dword [ebp - 0x104], eax
jne 0x100358d3
cmp dword [ebp - 0x150], 0
je 0x100358d3
mov dword [ebp - 0x548], 1
jmp 0x100358da
and dword [ebp - 0x548], 0
mov eax, dword [ebp - 0x90]
cmp dword [ebp - 0x548], eax
jne 0x100358f4
mov dword [ebp - 0x674], 1
jmp 0x100358fb
and dword [ebp - 0x674], 0
mov eax, dword [ebp - 0x104]
mov dword [ebp - 0x550], eax
push 0
lea ecx, [ebp - 0x928]
call fcn.1000e0ff
mov ecx, dword [ebp - 0x550]
mov dword [eax], ecx
cmp dword [ebp - 0x550], 0
je 0x1003593a
cmp dword [ebp - 0x150], 0
je 0x1003593a
mov dword [ebp - 0x558], 1
jmp 0x10035941
and dword [ebp - 0x558], 0
mov eax, dword [ebp - 0x90]
add eax, dword [ebp - 0x558]
add eax, dword [ebp - 0x90]
cmp eax, 0x5c82f744
jge 0x10035966
mov dword [ebp - 0x560], 1
jmp 0x1003596d
and dword [ebp - 0x560], 0
cmp dword [ebp - 0x560], 0
jbe 0x10035982
mov dword [ebp - 0x568], 1
jmp 0x10035989
and dword [ebp - 0x568], 0
mov eax, dword [ebp - 0x568]
mov dword [ebp - 0x294], eax
mov eax, dword [ebp - 0x294]
sub eax, dword [ebp - 0x90]
je 0x100359b8
cmp dword [ebp - 0x294], 0
je 0x100359b8
mov dword [ebp - 0x570], 1
jmp 0x100359bf
and dword [ebp - 0x570], 0
mov eax, dword [ebp - 0x570]
mov dword [ebp - 0x67c], eax
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x928]
call fcn.1000e0fa
jmp 0x100356ad
mov dword [ebp - 0x684], 4
push 4
lea ecx, [ebp - 0x804]
call fcn.1000e0be
mov dword [ebp - 4], 0x28
mov dword [ebp - 0x694], 0xfffffff7
mov dword [ebp - 0x68c], 0xffffffff
mov dword [ebp - 0x578], 0xffffffff
lea eax, [ebp - 0xa14]
push eax
push 0x21bc
push 0
lea eax, [ebp - 0x804]
push eax
call fcn.100300e9
add esp, 0x10
lea eax, [ebp - 0x684]
push eax
push 0x7fed
push 0x198d
lea eax, [ebp - 0x68c]
push eax
push 0
lea eax, [ebp - 0x804]
push eax
lea eax, [ebp - 0x578]
push eax
lea eax, [ebp - 0x694]
push eax
call fcn.1003b0a3
add esp, 0x20
push 0
push 1
push 0x3cab
push 1
lea eax, [ebp - 0x804]
push eax
push 0x1a5
push 0x7d02
lea eax, [ebp - 0x578]
push eax
call fcn.1003c89b
add esp, 0x20
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x804]
call fcn.1000e0fa
push 4
push 0x1000
mov eax, dword [ebp - 0x68]
push dword [eax + 0x10]
mov eax, dword [ebp - 0x68]
mov ecx, dword [ebp - 0x580]
add ecx, dword [eax + 0xc]
push ecx
push 0x1025
push 0x129d
call fcn.1000d25d
pop ecx
pop ecx
call eax
mov dword [ebp - 0x29c], eax
mov eax, dword [ebp - 0x68]
push dword [eax + 0x10]
mov eax, dword [ebp - 0x68]
mov ecx, dword [ebp - 0x69c]
add ecx, dword [eax + 0x14]
push ecx
push dword [ebp - 0x29c]
call fcn.1000d7f8
add esp, 0xc
mov dword [ebp - 0x984], 0
mov dword [ebp - 0xaac], 0xffffffff
mov dword [ebp - 0x98c], 0
mov dword [ebp - 0xa24], 0x2526041
mov dword [ebp - 0x994], 0x5010f7a7
mov dword [ebp - 0xa88], 0x2a8358bd
mov dword [ebp - 0x588], 1
mov dword [ebp - 0x1d0], 0
jmp 0x10035b5c
mov eax, dword [ebp - 0x1d0]
inc eax
mov dword [ebp - 0x1d0], eax
cmp dword [ebp - 0x1d0], 2
jge 0x10035b78
mov eax, dword [ebp - 0x1d0]
mov dword [ebp + eax*4 - 0xb38], 0xfffffffd
jmp 0x10035b4f
mov eax, dword [ebp - 0x588]
dec eax
mov dword [ebp - 0x588], eax
mov eax, dword [ebp - 0x68]
mov ecx, dword [ebp - 0x29c]
mov dword [eax + 8], ecx
jmp 0x100356ad
jmp 0x10035bca
mov eax, dword [ebp - 0x6a4]
mov dword [ebp - 0x6ac], eax
mov eax, dword [ebp - 0x6ac]
mov dword [ebp - 0x6b4], eax
mov eax, dword [ebp - 0x6b4]
movzx eax, byte [eax]
test eax, eax
je 0x10035bca
push 0
push 0x1b9f
call dword [sym.imp.GDI32.dll_GetClipBox]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
mov esp, ebp
pop ebp
ret