Function at 0x1000abb9
Capabilities:
Inspect section memory permissions

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x1007b537
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x23c
push esi
movzx eax, byte [ebp + 0xc]
test eax, eax
je 0x1000bb3e
mov eax, dword [ebp + 8]
mov dword [ebp - 0x74], eax
mov dword [ebp - 0x1e0], 7
mov dword [ebp - 0x58], 0
jmp 0x1000ac04
mov eax, dword [ebp - 0x58]
inc eax
mov dword [ebp - 0x58], eax
cmp dword [ebp - 0x58], 1
jge 0x1000ac17
mov eax, dword [ebp - 0x58]
mov dword [ebp + eax*4 - 0x7c], 0xffffffff
jmp 0x1000abfd
mov byte [ebp - 0x33], 0
movzx eax, byte [ebp - 0x33]
test eax, eax
je 0x1000ac69
push 0x3811
push 1
push 0x4fb8
push 0x6ca7
push 0x772a
push 0x728f
push 0xb3e
push 0x36ae
push 0x4fe3
push 0x1040
push 0x3392
push 0x54df
push 0x5c33
call fcn.1000a7de
add esp, 0x34
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0x7c], 0
jmp 0x1000ac8e
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x7c]
inc eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x7c], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x7c], 0xe
jg 0x1000aca5
push 0
call fcn.1000e293
pop ecx
jmp 0x1000ac79
mov eax, dword [ebp - 0x74]
mov eax, dword [eax]
mov ecx, dword [ebp - 0x74]
mov ecx, dword [ecx]
movzx ecx, word [ecx + 0x14]
lea eax, [eax + ecx + 0x18]
mov dword [ebp - 0x14], eax
mov dword [ebp - 0x1c], 0xb9b55bb2
mov dword [ebp - 0x1c], 0
jmp 0x1000acd1
mov eax, dword [ebp - 0x1c]
dec eax
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 0xffffffe8
je 0x1000adc0
mov dword [ebp - 0x15c], 0xfe5e81a7
mov dword [ebp - 0x190], 0xf3ac9d73
mov dword [ebp - 0x60], 0
jmp 0x1000acff
mov eax, dword [ebp - 0x60]
inc eax
mov dword [ebp - 0x60], eax
cmp dword [ebp - 0x60], 3
jge 0x1000ad15
mov eax, dword [ebp - 0x60]
mov dword [ebp + eax*4 - 0x1c8], 1
jmp 0x1000acf8
cmp dword [ebp - 0x1c], 0
jne 0x1000ad95
cmp dword [ebp - 0x15c], 0
jne 0x1000ad71
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0x1fc], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x1c8]
mov dword [ebp - 0x1dc], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x1c8]
sub eax, dword [ebp - 0x1c]
push 4
pop ecx
imul ecx, ecx, 0
add eax, dword [ebp + ecx - 0x1c8]
cmp eax, dword [ebp - 0x1c]
jl 0x1000ad71
cmp dword [ebp - 0x1c], 0
jne 0x1000ad71
and dword [ebp - 0x104], 0
jmp 0x1000ad7b
mov dword [ebp - 0x104], 1
imul eax, dword [ebp - 0x104], 0xfffffff6
test eax, eax
jne 0x1000ad8f
mov eax, 0xd8ea5f34
test eax, eax
je 0x1000ada8
cmp dword [ebp - 0x1c], 0
je 0x1000ada8
push 6
pop eax
test eax, eax
je 0x1000ada8
mov dword [ebp - 0xc4], 1
jmp 0x1000adaf
and dword [ebp - 0xc4], 0
mov eax, dword [ebp - 0xc4]
mov dword [ebp - 0x190], eax
jmp 0x1000acca
and dword [ebp - 0x98], 0
jmp 0x1000addf
mov eax, dword [ebp - 0x98]
inc eax
mov dword [ebp - 0x98], eax
mov eax, dword [ebp - 0x14]
add eax, 0x28
mov dword [ebp - 0x14], eax
mov eax, dword [ebp - 0x74]
mov eax, dword [eax]
movzx eax, word [eax + 6]
cmp dword [ebp - 0x98], eax
jge 0x1000bb3c
push 2
lea ecx, [ebp - 0x1d4]
call fcn.10012997
and dword [ebp - 4], 0
mov dword [ebp - 0x48], 0xabecba2a
mov dword [ebp - 0x1d8], 0xb57a67d9
mov dword [ebp - 0x19c], 0x46cd5fec
mov dword [ebp - 0x70], 0
jmp 0x1000ae30
mov eax, dword [ebp - 0x70]
inc eax
mov dword [ebp - 0x70], eax
cmp dword [ebp - 0x70], 2
jge 0x1000ae4c
push dword [ebp - 0x70]
lea ecx, [ebp - 0x1d4]
call fcn.10012a38
mov dword [eax], 0xdd33a4a9
jmp 0x1000ae29
mov dword [ebp - 0x48], 0
jmp 0x1000ae5c
mov eax, dword [ebp - 0x48]
inc eax
mov dword [ebp - 0x48], eax
cmp dword [ebp - 0x48], 2
jge 0x1000ae78
push dword [ebp - 0x48]
lea ecx, [ebp - 0x1d4]
call fcn.10012a38
mov dword [eax], 7
jmp 0x1000ae55
lea eax, [ebp - 0x19c]
push eax
push 0
push 0x13bb
call fcn.1000abb9
add esp, 0xc
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x1d4]
call fcn.10012a1c
mov eax, dword [ebp - 0x14]
mov eax, dword [eax + 0x24]
and eax, 0x20000000
je 0x1000aeb6
mov dword [ebp - 0x138], 1
jmp 0x1000aebd
and dword [ebp - 0x138], 0
mov eax, dword [ebp - 0x138]
mov dword [ebp - 0x188], eax
push 1
call fcn.1000aa6a
pop ecx
mov eax, dword [ebp - 0x14]
mov eax, dword [eax + 0x24]
and eax, 0x40000000
je 0x1000aeea
mov dword [ebp - 0xac], 1
jmp 0x1000aef1
and dword [ebp - 0xac], 0
mov eax, dword [ebp - 0xac]
mov dword [ebp - 0x160], eax
mov eax, dword [ebp - 0x14]
mov eax, dword [eax + 0x24]
and eax, 0x80000000
je 0x1000af16
mov dword [ebp - 0x140], 1
jmp 0x1000af1d
and dword [ebp - 0x140], 0
mov eax, dword [ebp - 0x140]
mov dword [ebp - 0x180], eax
mov dword [ebp - 0x94], 0xe033c22
mov dword [ebp - 0x68], 0
jmp 0x1000af43
mov eax, dword [ebp - 0x68]
inc eax
mov dword [ebp - 0x68], eax
cmp dword [ebp - 0x68], 3
jge 0x1000af59
mov eax, dword [ebp - 0x68]
mov dword [ebp + eax*4 - 0x1a8], 0x31713b91
jmp 0x1000af3c
push 4
pop eax
shl eax, 1
mov dword [ebp + eax - 0x1a8], 0
jmp 0x1000af84
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x1a8]
inc eax
push 4
pop ecx
shl ecx, 1
mov dword [ebp + ecx - 0x1a8], eax
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0x1a8], 7
jne 0x1000b136
mov dword [ebp - 0x90], 0xffff
mov dword [ebp - 0x168], 0xcbed562b
mov dword [ebp - 0x194], 0x2ca3
mov dword [ebp - 0x78], 0
jmp 0x1000afc5
mov eax, dword [ebp - 0x78]
inc eax
mov dword [ebp - 0x78], eax
cmp dword [ebp - 0x78], 1
jge 0x1000afd8
mov eax, dword [ebp - 0x78]
mov dword [ebp + eax*4 - 0x28], 0x7d8e6e83
jmp 0x1000afbe
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0x28], 0xf
jmp 0x1000affd
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x28]
dec eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x28], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x28], 0xfffffffb
jne 0x1000b131
mov dword [ebp - 0x134], 1
mov dword [ebp - 0x170], 0xe2bf35dd
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x28]
mov dword [ebp - 0x94], eax
mov eax, dword [ebp - 0x90]
cmp dword [ebp - 0x94], eax
je 0x1000b04c
mov dword [ebp - 0xb4], 1
jmp 0x1000b053
and dword [ebp - 0xb4], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x28]
cmp dword [ebp - 0xb4], eax
je 0x1000b071
mov dword [ebp - 0x148], 1
jmp 0x1000b078
and dword [ebp - 0x148], 0
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x28], 0
jne 0x1000b097
cmp dword [ebp - 0x90], 0
jne 0x1000b097
and dword [ebp - 0xbc], 0
jmp 0x1000b0a1
mov dword [ebp - 0xbc], 1
mov eax, dword [ebp - 0x148]
neg eax
imul ecx, dword [ebp - 0xbc], 0xbec0
push 4
pop edx
imul edx, edx, 0
imul ecx, dword [ebp + edx - 0x28]
sub eax, ecx
sub eax, dword [ebp - 0x134]
cmp eax, dword [ebp - 0x90]
jne 0x1000b0da
mov dword [ebp - 0x150], 1
jmp 0x1000b0e1
and dword [ebp - 0x150], 0
cmp dword [ebp - 0x150], 0
je 0x1000b0f6
mov dword [ebp - 0x158], 1
jmp 0x1000b0fd
and dword [ebp - 0x158], 0
mov eax, dword [ebp - 0x158]
mov dword [ebp - 0x168], eax
mov eax, dword [ebp - 0x194]
mov dword [ebp - 0x1e8], eax
mov eax, dword [ebp - 0x134]
mov dword [ebp - 0x170], eax
cmp dword [ebp - 0x94], 0
je 0x1000b12c
jmp 0x1000b131
jmp 0x1000afe8
jmp 0x1000af6b
mov eax, dword [ebp - 0x14]
mov eax, dword [eax + 0x24]
and eax, 0x2000000
je 0x1000b1da
push 0x4000
mov eax, dword [ebp - 0x14]
push dword [eax + 0x10]
mov eax, dword [ebp - 0x14]
push dword [eax + 8]
push 0x42d2
push 0x54c9
call fcn.10040bda
pop ecx
pop ecx
call eax
mov dword [ebp - 0x38], 0xffffffff
mov dword [ebp - 0x200], 0xfffffffd
mov dword [ebp - 0x38], 0
jmp 0x1000b18c
mov eax, dword [ebp - 0x38]
inc eax
mov dword [ebp - 0x38], eax
cmp dword [ebp - 0x38], 4
jge 0x1000b1cc
mov dword [ebp - 0x44], 0x59e57ad9
mov dword [ebp - 0x44], 0xffffffe4
jmp 0x1000b1a9
mov eax, dword [ebp - 0x44]
inc eax
mov dword [ebp - 0x44], eax
cmp dword [ebp - 0x44], 0xfffffff3
jg 0x1000b1ca
mov byte [ebp - 0x32], 0
push 1
lea eax, [ebp - 0x32]
push eax
call fcn.1000ab69
pop ecx
pop ecx
cmp dword [ebp - 0x44], 0
je 0x1000b1c8
jmp 0x1000b1ca
jmp 0x1000b1a2
jmp 0x1000b185
mov eax, dword [ebp - 0x38]
add eax, dword [ebp - 0x38]
mov dword [ebp - 0x38], eax
jmp 0x1000adc9
mov dword [ebp - 0x10], 1
mov dword [ebp - 0x2c], 0x98ba832a
mov dword [ebp - 0x4c], 0xfffffff8
mov dword [ebp - 0x1bc], 0x4c5d19e7
mov dword [ebp - 0x1b8], 0x4c5d19e7
mov dword [ebp - 0x1b4], 0x4c5d19e7
mov dword [ebp - 0x1b0], 0x4c5d19e7
lea ecx, [ebp - 0x99]
call fcn.10012a47
push eax
lea eax, [ebp - 0x1ac]
push eax
lea eax, [ebp - 0x1bc]
push eax
lea ecx, [ebp - 0x248]
call fcn.10012a4a
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0x240]
call fcn.100129f6
mov dword [ebp - 4], 1
mov dword [ebp - 0x10], 0
jmp 0x1000b263
mov eax, dword [ebp - 0x10]
dec eax
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], 0xffffffee
jne 0x1000b6b5
push 3
lea ecx, [ebp - 0x8c]
call fcn.10012997
mov byte [ebp - 4], 2
mov dword [ebp - 0x80], 0xffffffff
mov dword [ebp - 0x50], 0
jmp 0x1000b295
mov eax, dword [ebp - 0x50]
inc eax
mov dword [ebp - 0x50], eax
cmp dword [ebp - 0x50], 3
jge 0x1000b2b1
push dword [ebp - 0x50]
lea ecx, [ebp - 0x8c]
call fcn.10012a38
mov dword [eax], 0x3695
jmp 0x1000b28e
mov dword [ebp - 0x80], 0
jmp 0x1000b2c1
mov eax, dword [ebp - 0x80]
inc eax
mov dword [ebp - 0x80], eax
cmp dword [ebp - 0x80], 2
jg 0x1000b67b
mov dword [ebp - 0x24], 0
mov dword [ebp - 0xdc], 0xe2499e68
mov dword [ebp - 0x24], 0
jmp 0x1000b2ec
mov eax, dword [ebp - 0x24]
inc eax
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 2
jg 0x1000b676
mov dword [ebp - 0x18], 0xd72276b
mov dword [ebp - 0x178], 1
mov dword [ebp - 0x18], 0
jmp 0x1000b317
mov eax, dword [ebp - 0x18]
inc eax
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 2
jg 0x1000b356
mov dword [ebp - 0x54], 0
jmp 0x1000b32d
mov eax, dword [ebp - 0x54]
inc eax
mov dword [ebp - 0x54], eax
cmp dword [ebp - 0x54], 1
jge 0x1000b343
mov eax, dword [ebp - 0x54]
mov dword [ebp + eax*4 - 0x18c], 0xfffffffe
jmp 0x1000b326
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0x18c], 3
jmp 0x1000b310
mov dword [ebp - 0x18], 2
jmp 0x1000b366
mov eax, dword [ebp - 0x18]
dec eax
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 0
jl 0x1000b671
mov dword [ebp - 0x30], 0
mov dword [ebp - 0x30], 0
jmp 0x1000b387
mov eax, dword [ebp - 0x30]
inc eax
mov dword [ebp - 0x30], eax
cmp dword [ebp - 0x30], 2
jg 0x1000b5a6
mov dword [ebp - 0x5c], 9
mov dword [ebp - 0x5c], 2
jmp 0x1000b3a8
mov eax, dword [ebp - 0x5c]
dec eax
mov dword [ebp - 0x5c], eax
cmp dword [ebp - 0x5c], 0
jl 0x1000b3c1
mov byte [ebp - 0x39], 0
push 0
lea eax, [ebp - 0x39]
push eax
call fcn.1000d42a
pop ecx
pop ecx
jmp 0x1000b3a1
push dword [ebp - 0x24]
lea ecx, [ebp - 0x8c]
call fcn.10012a38
cmp dword [eax], 0
je 0x1000b474
mov eax, dword [ebp - 0x30]
cmp dword [ebp - 0x18], eax
jle 0x1000b3ec
mov dword [ebp - 0xcc], 1
jmp 0x1000b3f3
and dword [ebp - 0xcc], 0
cmp dword [ebp - 0xcc], 0x7b187b35
jge 0x1000b40b
mov dword [ebp - 0x114], 1
jmp 0x1000b412
and dword [ebp - 0x114], 0
mov eax, dword [ebp - 0x114]
sub eax, dword [ebp - 0x24]
cmp eax, 0xfffffff6
jne 0x1000b42c
mov dword [ebp - 0xd4], 1
jmp 0x1000b433
and dword [ebp - 0xd4], 0
cmp dword [ebp - 0xd4], 0xfffffffc
jle 0x1000b448
mov dword [ebp - 0x154], 1
jmp 0x1000b44f
and dword [ebp - 0x154], 0
mov eax, dword [ebp - 0x30]
imul eax, dword [ebp - 0x154]
mov dword [ebp - 0xdc], eax
cmp dword [ebp - 0xdc], 0
je 0x1000b474
mov dword [ebp - 0x11c], 1
jmp 0x1000b47b
and dword [ebp - 0x11c], 0
push dword [ebp - 0x24]
lea ecx, [ebp - 0x8c]
call fcn.10012a38
mov eax, dword [eax]
cmp eax, dword [ebp - 0x11c]
jge 0x1000b49f
mov dword [ebp - 0xe4], 1
jmp 0x1000b4a6
and dword [ebp - 0xe4], 0
push dword [ebp - 0x24]
lea ecx, [ebp - 0x8c]
call fcn.10012a38
mov ecx, dword [ebp - 0xe4]
cmp ecx, dword [eax]
jl 0x1000b4ca
mov dword [ebp - 0x13c], 1
jmp 0x1000b4d1
and dword [ebp - 0x13c], 0
cmp dword [ebp - 0x13c], 0x88ff7673
jae 0x1000b4e9
mov dword [ebp - 0xec], 1
jmp 0x1000b4f0
and dword [ebp - 0xec], 0
mov eax, dword [ebp - 0x10]
add eax, dword [ebp - 0xec]
cmp eax, 0x2d6273d5
jle 0x1000b50c
mov dword [ebp - 0x124], 1
jmp 0x1000b513
and dword [ebp - 0x124], 0
mov eax, dword [ebp - 0x10]
cmp dword [ebp - 0x124], eax
jl 0x1000b52a
mov dword [ebp - 0xf4], 1
jmp 0x1000b531
and dword [ebp - 0xf4], 0
push 1
lea ecx, [ebp - 0x8c]
call fcn.10012a38
mov ecx, dword [ebp - 0xf4]
cmp ecx, dword [eax]
jle 0x1000b554
mov dword [ebp - 0x14c], 1
jmp 0x1000b55b
and dword [ebp - 0x14c], 0
cmp dword [ebp - 0x14c], 0xfffffffd
jbe 0x1000b57c
push 1
lea ecx, [ebp - 0x8c]
call fcn.10012a38
cmp dword [eax], 0
jne 0x1000b57c
cmp dword [ebp - 0x18], 0
je 0x1000b58e
cmp dword [ebp - 0x24], 0
je 0x1000b58e
mov dword [ebp - 0xfc], 1
jmp 0x1000b595
and dword [ebp - 0xfc], 0
mov eax, dword [ebp - 0xfc]
mov dword [ebp - 0x178], eax
jmp 0x1000b380
mov eax, dword [ebp - 0x30]
mov dword [ebp - 0x220], eax
mov esi, dword [ebp - 0x10]
push 1
lea ecx, [ebp - 0x8c]
call fcn.10012a38
sub esi, dword [eax]
cmp esi, dword [ebp - 0x2c]
je 0x1000b5d2
mov dword [ebp - 0x12c], 1
jmp 0x1000b5d9
and dword [ebp - 0x12c], 0
push 2
lea ecx, [ebp - 0x8c]
call fcn.10012a38
mov eax, dword [eax]
cmp eax, dword [ebp - 0x12c]
jg 0x1000b5fc
mov dword [ebp - 0xa0], 1
jmp 0x1000b603
and dword [ebp - 0xa0], 0
mov eax, dword [ebp - 0x18]
cmp dword [ebp - 0xa0], eax
jle 0x1000b61a
mov dword [ebp - 0x144], 1
jmp 0x1000b621
and dword [ebp - 0x144], 0
cmp dword [ebp - 0x144], 1
jne 0x1000b636
mov dword [ebp - 0x10c], 1
jmp 0x1000b63d
and dword [ebp - 0x10c], 0
mov eax, dword [ebp - 0x10c]
add eax, 0xd230
je 0x1000b65c
cmp dword [ebp - 0x30], 0
je 0x1000b65c
mov dword [ebp - 0xc0], 1
jmp 0x1000b663
and dword [ebp - 0xc0], 0
mov eax, dword [ebp - 0xc0]
mov dword [ebp - 0x4c], eax
jmp 0x1000b35f
jmp 0x1000b2e5
jmp 0x1000b2ba
push 0
lea ecx, [ebp - 0x8c]
call fcn.10012a38
cmp dword [eax], 0
je 0x1000b6a1
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x8c]
call fcn.10012a1c
jmp 0x1000b25c
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x8c]
call fcn.10012a1c
jmp 0x1000b25c
cmp dword [ebp - 0x2c], 0
jne 0x1000b755
cmp dword [ebp - 0x2c], 0
jne 0x1000b6d4
cmp dword [ebp - 0x2c], 0
jne 0x1000b6d4
and dword [ebp - 0x198], 0
jmp 0x1000b6de
mov dword [ebp - 0x198], 1
mov eax, dword [ebp - 0x2c]
mov dword [ebp - 0x1e4], eax
mov eax, dword [ebp - 0x2c]
cmp dword [ebp - 0x4c], eax
jne 0x1000b6fb
mov dword [ebp - 0xc8], 1
jmp 0x1000b702
and dword [ebp - 0xc8], 0
mov eax, dword [ebp - 0x4c]
cmp dword [ebp - 0xc8], eax
jne 0x1000b719
mov dword [ebp - 0xd0], 1
jmp 0x1000b720
and dword [ebp - 0xd0], 0
mov eax, dword [ebp - 0xd0]
sub eax, dword [ebp - 0x10]
cmp eax, dword [ebp - 0x2c]
je 0x1000b73a
mov dword [ebp - 0xd8], 1
jmp 0x1000b741
and dword [ebp - 0xd8], 0
mov eax, dword [ebp - 0x4c]
cmp dword [ebp - 0xd8], eax
jl 0x1000b755
and dword [ebp - 0xe0], 0
jmp 0x1000b75f
mov dword [ebp - 0xe0], 1
mov eax, dword [ebp - 0x10]
cmp dword [ebp - 0xe0], eax
jg 0x1000b776
mov dword [ebp - 0xe8], 1
jmp 0x1000b77d
and dword [ebp - 0xe8], 0
mov eax, dword [ebp - 0x10]
cmp eax, dword [ebp - 0xe8]
jne 0x1000b794
mov dword [ebp - 0xf0], 1
jmp 0x1000b79b
and dword [ebp - 0xf0], 0
mov eax, dword [ebp - 0x10]
imul eax, dword [ebp - 0xf0]
add eax, dword [ebp - 0x2c]
cmp eax, 0x5b3a
jne 0x1000b7bb
mov dword [ebp - 0xf8], 1
jmp 0x1000b7c2
and dword [ebp - 0xf8], 0
mov eax, dword [ebp - 0x10]
cmp dword [ebp - 0xf8], eax
jl 0x1000b7d9
mov dword [ebp - 0x100], 1
jmp 0x1000b7e0
and dword [ebp - 0x100], 0
mov eax, dword [ebp - 0x100]
mov dword [ebp - 0x4c], eax
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x240]
call fcn.10012a1c
push 0
push 0x2ed7
push dword [ebp - 0x14]
push dword [ebp - 0x180]
lea eax, [ebp - 0x17c]
push eax
push dword [ebp - 0x188]
push dword [ebp - 0x160]
call fcn.1001107e
add esp, 0x1c
mov dword [ebp - 0x20], 0xfffffff6
mov dword [ebp - 0x164], 8
mov dword [ebp - 0x64], 0
jmp 0x1000b844
mov eax, dword [ebp - 0x64]
inc eax
mov dword [ebp - 0x64], eax
cmp dword [ebp - 0x64], 3
jge 0x1000b85a
mov eax, dword [ebp - 0x64]
mov dword [ebp + eax*4 - 0x1f8], 0x64a6847d
jmp 0x1000b83d
mov dword [ebp - 0x20], 0
jmp 0x1000b86a
mov eax, dword [ebp - 0x20]
inc eax
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 2
jg 0x1000b8a0
mov dword [ebp - 0x6c], 9
mov dword [ebp - 0x6c], 0
jmp 0x1000b887
mov eax, dword [ebp - 0x6c]
inc eax
mov dword [ebp - 0x6c], eax
cmp dword [ebp - 0x6c], 2
jg 0x1000b89e
mov eax, dword [ebp - 0x20]
cmp dword [ebp + eax*4 - 0x1f8], 0
je 0x1000b89c
jmp 0x1000b89e
jmp 0x1000b880
jmp 0x1000b863
mov dword [ebp - 0x20], 0xffffffed
jmp 0x1000b8b0
mov eax, dword [ebp - 0x20]
inc eax
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 0x10
jg 0x1000b9e3
mov dword [ebp - 0x40], 0x7d2703d9
lea eax, [ebp - 0x40]
push eax
push 0
call fcn.1000d0b1
pop ecx
pop ecx
cmp dword [ebp - 0x20], 0
jne 0x1000b8e3
cmp dword [ebp - 0x40], 0
jne 0x1000b8e3
and dword [ebp - 0x110], 0
jmp 0x1000b8ed
mov dword [ebp - 0x110], 1
cmp dword [ebp - 0x40], 0
je 0x1000b909
mov eax, dword [ebp - 0x40]
neg eax
cmp eax, dword [ebp - 0x40]
jg 0x1000b909
mov dword [ebp - 0x108], 1
jmp 0x1000b910
and dword [ebp - 0x108], 0
cmp dword [ebp - 0x108], 0x30a4ccfd
je 0x1000b928
mov dword [ebp - 0x118], 1
jmp 0x1000b92f
and dword [ebp - 0x118], 0
mov eax, dword [ebp - 0x110]
cmp eax, dword [ebp - 0x118]
jge 0x1000b949
mov dword [ebp - 0x120], 1
jmp 0x1000b950
and dword [ebp - 0x120], 0
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x1f8]
cmp dword [ebp - 0x120], eax
jle 0x1000b970
mov dword [ebp - 0x128], 1
jmp 0x1000b977
and dword [ebp - 0x128], 0
mov eax, dword [ebp - 0x40]
cmp dword [ebp - 0x128], eax
je 0x1000b98e
mov dword [ebp - 0x130], 1
jmp 0x1000b995
and dword [ebp - 0x130], 0
mov eax, dword [ebp - 0x40]
cmp dword [ebp - 0x130], eax
jne 0x1000b9ac
mov dword [ebp - 0xa4], 1
jmp 0x1000b9b3
and dword [ebp - 0xa4], 0
cmp dword [ebp - 0xa4], 0xb72b
jge 0x1000b9cb
mov dword [ebp - 0xa8], 1
jmp 0x1000b9d2
and dword [ebp - 0xa8], 0
mov eax, dword [ebp - 0xa8]
mov dword [ebp - 0x164], eax
jmp 0x1000b8a9
lea eax, [ebp - 0xb0]
push eax
lea eax, [ebp - 0x14]
push eax
push 0
push 0x6ecb
push 0x5411
lea eax, [ebp - 0x74]
push eax
call fcn.1000d8ad
add esp, 0x18
push 4
lea ecx, [ebp - 0x21c]
call fcn.10012997
mov dword [ebp - 4], 3
push 3
lea ecx, [ebp - 0x20c]
call fcn.10012997
mov byte [ebp - 4], 4
mov dword [ebp - 0x230], 0x8d72a67f
mov dword [ebp - 0x22c], 0x8d72a67f
mov dword [ebp - 0x228], 0x8d72a67f
mov dword [ebp - 0x224], 0x8d72a67f
mov dword [ebp - 0x210], 0x9974082
mov dword [ebp - 0x1ec], 0xffffffff
mov dword [ebp - 0x174], 0x3d2ae456
lea eax, [ebp - 0x16c]
push eax
push 0x79e1
lea eax, [ebp - 0x21c]
push eax
push 0
push 0x7317
call fcn.10011ebc
add esp, 0x14
push 0x3e77
push 0x5ade
lea eax, [ebp - 0x16c]
push eax
push 0x3374
lea eax, [ebp - 0x20c]
push eax
push 0
call fcn.100122fe
add esp, 0x18
push 0x6fbc
lea eax, [ebp - 0x174]
push eax
push 0
call fcn.100108b9
add esp, 0xc
mov byte [ebp - 0x31], 0
movzx eax, byte [ebp - 0x31]
test eax, eax
je 0x1000bae4
push 0
call fcn.1000c229
pop ecx
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x20c]
call fcn.10012a1c
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x21c]
call fcn.10012a1c
cmp dword [ebp - 0xb0], 0
jbe 0x1000bb37
lea eax, [ebp - 0x234]
push eax
push dword [ebp - 0x17c]
push dword [ebp - 0xb0]
mov eax, dword [ebp - 0x14]
push dword [eax + 8]
push 0x42d2
push 0x4563
call fcn.10040bda
pop ecx
pop ecx
call eax
jmp 0x1000adc9
jmp 0x1000bb64
mov eax, dword [ebp + 0x10]
mov dword [ebp - 0x184], eax
mov eax, dword [ebp - 0x184]
mov dword [ebp - 0xb8], eax
mov eax, dword [ebp - 0xb8]
mov eax, dword [eax]
inc eax
mov ecx, dword [ebp - 0xb8]
mov dword [ecx], eax
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop esi
mov esp, ebp
pop ebp
ret