Function at 0x10031a9f
Capabilities:
Compare security identifiers
Enumerate pe sections

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x10088d63
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x250
push esi
movzx eax, byte [ebp + 0xc]
test eax, eax
je 0x10031ad5
push 0
push 0
call dword [sym.imp.ADVAPI32.dll_EqualSid]
jmp 0x10032a1f
mov eax, dword [ebp + 8]
mov dword [ebp - 0x1c0], eax
mov eax, dword [ebp + 0x14]
mov dword [ebp - 0x1a0], eax
mov eax, dword [ebp + 0x10]
mov dword [ebp - 0x58], eax
mov dword [ebp - 0x5c], 0xe2fde2bb
mov dword [ebp - 0x28], 0x4888999d
push 2
lea ecx, [ebp - 0x200]
call fcn.10019b25
and dword [ebp - 4], 0
mov dword [ebp - 0x11c], 1
mov dword [ebp - 0x138], 0x2f37fc03
mov dword [ebp - 0x1d0], 0x49cff29c
lea eax, [ebp - 0x248]
push eax
push 0x68b
push 0x3c8e
push 0
push 0x241d
lea eax, [ebp - 0x200]
push eax
push 0x76f5
call fcn.1002c2d2
add esp, 0x1c
mov eax, dword [ebp - 0x5c]
mov dword [ebp - 0x228], eax
mov eax, dword [ebp - 0x5c]
cmp dword [ebp - 0x28], eax
jle 0x10031b70
mov dword [ebp - 0x7c], 1
jmp 0x10031b74
and dword [ebp - 0x7c], 0
mov eax, dword [ebp - 0x5c]
mov dword [ebp - 0x11c], eax
mov eax, dword [ebp - 0x11c]
add eax, dword [ebp - 0x28]
cmp eax, dword [ebp - 0x5c]
jle 0x10031b9a
cmp dword [ebp - 0x28], 0
jne 0x10031b9a
and dword [ebp - 0x19c], 0
jmp 0x10031ba4
mov dword [ebp - 0x19c], 1
mov eax, dword [ebp - 0x28]
imul eax, dword [ebp - 0x28]
test eax, eax
je 0x10031bb3
cmp dword [ebp - 0x28], 0
mov eax, 0xcee2
imul eax, eax, 9
imul eax, eax, 0
neg eax
add eax, 0x4af7
cmp eax, 0x8846
jge 0x10031bd8
mov dword [ebp - 0x188], 1
jmp 0x10031bdf
and dword [ebp - 0x188], 0
push 0
lea ecx, [ebp - 0x200]
call fcn.10019b92
mov ecx, dword [ebp - 0x7c]
mov dword [eax], ecx
mov eax, dword [ebp - 0x188]
mov dword [ebp - 0x138], eax
mov eax, dword [ebp - 0x138]
cmp dword [ebp - 0x7c], eax
jge 0x10031c14
mov dword [ebp - 0x130], 1
jmp 0x10031c1b
and dword [ebp - 0x130], 0
mov eax, dword [ebp - 0x28]
cmp dword [ebp - 0x130], eax
jle 0x10031c32
mov dword [ebp - 0xa8], 1
jmp 0x10031c39
and dword [ebp - 0xa8], 0
mov eax, dword [ebp - 0x28]
cmp dword [ebp - 0xa8], eax
jg 0x10031c51
xor eax, eax
jne 0x10031c51
and dword [ebp - 0x13c], 0
jmp 0x10031c5b
mov dword [ebp - 0x13c], 1
mov eax, dword [ebp - 0x13c]
mov dword [ebp - 0x1d0], eax
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x200]
call fcn.10019b8d
mov eax, dword [ebp - 0x58]
mov eax, dword [eax + 4]
mov dword [ebp - 0xd4], eax
mov dword [ebp - 0x50], 0x98a8f939
mov dword [ebp - 0x144], 0x921b0ae2
mov dword [ebp - 0x1e0], 0x99ea
cmp dword [ebp - 0x50], 0
je 0x10031cc8
mov byte [ebp - 0x2c], 0
movzx eax, byte [ebp - 0x2c]
test eax, eax
je 0x10031cc3
push 0
push 0x432e
push 0x2cb0
call fcn.100354ed
add esp, 0xc
jmp 0x10031e2a
mov dword [ebp - 0x24], 0
mov dword [ebp - 0x1c4], 0xa42bbd4a
mov dword [ebp - 0x40], 0
jmp 0x10031ce9
mov eax, dword [ebp - 0x40]
inc eax
mov dword [ebp - 0x40], eax
cmp dword [ebp - 0x40], 2
jge 0x10031cff
mov eax, dword [ebp - 0x40]
mov dword [ebp + eax*4 - 0x20c], 0xfffffff6
jmp 0x10031ce2
mov eax, dword [ebp - 0x50]
cmp dword [ebp - 0x24], eax
jne 0x10031d13
mov dword [ebp - 0xc0], 1
jmp 0x10031d1a
and dword [ebp - 0xc0], 0
mov eax, dword [ebp - 0x50]
add eax, dword [ebp - 0x24]
je 0x10031d37
mov eax, 0x9683
test eax, eax
je 0x10031d37
mov dword [ebp - 0xb0], 1
jmp 0x10031d3e
and dword [ebp - 0xb0], 0
mov eax, dword [ebp - 0xb0]
mov dword [ebp - 0x144], eax
mov eax, dword [ebp - 0x50]
cmp dword [ebp - 0x144], eax
jge 0x10031d61
mov dword [ebp - 0xb8], 1
jmp 0x10031d68
and dword [ebp - 0xb8], 0
mov eax, dword [ebp - 0x24]
cmp dword [ebp - 0xb8], eax
jl 0x10031d7f
mov dword [ebp - 0x1d8], 1
jmp 0x10031d86
and dword [ebp - 0x1d8], 0
mov eax, dword [ebp - 0x24]
mov dword [ebp - 0x21c], eax
mov eax, dword [ebp - 0x24]
mov dword [ebp - 0x1e0], eax
mov eax, dword [ebp - 0x24]
mov dword [ebp - 0x14c], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x14c]
mov dword [ebp + eax - 0x20c], ecx
imul eax, dword [ebp - 0x14c], 0x65de
cmp dword [ebp - 0xc0], eax
jg 0x10031dd2
mov dword [ebp - 0x154], 1
jmp 0x10031dd9
and dword [ebp - 0x154], 0
mov eax, dword [ebp - 0x24]
add eax, dword [ebp - 0x154]
je 0x10031df9
mov eax, 0x11c3fc02
test eax, eax
je 0x10031df9
mov dword [ebp - 0xc8], 1
jmp 0x10031e00
and dword [ebp - 0xc8], 0
mov eax, dword [ebp - 0x24]
cmp eax, dword [ebp - 0xc8]
jge 0x10031e17
mov dword [ebp - 0x15c], 1
jmp 0x10031e1e
and dword [ebp - 0x15c], 0
mov eax, dword [ebp - 0x15c]
mov dword [ebp - 0x1c4], eax
mov dword [ebp - 0x48], 3
mov dword [ebp - 0x1c8], 0xfffffff6
mov dword [ebp - 0x1a8], 0x136dc992
mov dword [ebp - 0x98], 0x2bbd4aa4
mov dword [ebp - 0x1d4], 0x5e09b704
mov dword [ebp - 0x34], 0
jmp 0x10031e69
mov eax, dword [ebp - 0x34]
inc eax
mov dword [ebp - 0x34], eax
cmp dword [ebp - 0x34], 2
jge 0x10031e7f
mov eax, dword [ebp - 0x34]
mov dword [ebp + eax*4 - 0x180], 5
jmp 0x10031e62
mov dword [ebp - 0x48], 0
jmp 0x10031e8f
mov eax, dword [ebp - 0x48]
inc eax
mov dword [ebp - 0x48], eax
cmp dword [ebp - 0x48], 1
jg 0x10032133
mov dword [ebp - 0x14], 0x6e60b0c
mov dword [ebp - 0x224], 0x8b26de0d
mov byte [ebp - 0x2a], 0
movzx eax, byte [ebp - 0x2a]
test eax, eax
je 0x10031eca
push 0
push 0x4592
push 0x6a18
call fcn.1002defd
add esp, 0xc
mov dword [ebp - 0x14], 1
jmp 0x10031eda
mov eax, dword [ebp - 0x14]
dec eax
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 0
jl 0x1003212e
mov dword [ebp - 0x30], 0xffffffff
mov dword [ebp - 0xec], 9
mov eax, dword [ebp - 0x14]
cmp dword [ebp + eax*4 - 0x180], 0
je 0x10031f07
jmp 0x1003212e
mov dword [ebp - 0x30], 0
jmp 0x10031f17
mov eax, dword [ebp - 0x30]
inc eax
mov dword [ebp - 0x30], eax
cmp dword [ebp - 0x30], 1
jg 0x10032129
mov dword [ebp - 0xd0], 0
mov dword [ebp - 0xe4], 1
mov dword [ebp - 0x204], 0
mov dword [ebp - 0x1f4], 0xe11cd4ee
mov dword [ebp - 0x1f0], 0xe11cd4ee
mov dword [ebp - 0x1ec], 0xe11cd4ee
mov dword [ebp - 0x1e8], 0xe11cd4ee
lea ecx, [ebp - 0x8d]
call fcn.10008e93
push eax
lea eax, [ebp - 0x1e4]
push eax
lea eax, [ebp - 0x1f4]
push eax
lea ecx, [ebp - 0x25c]
call fcn.10019ba1
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0x234]
call fcn.10019b67
mov dword [ebp - 4], 1
mov eax, dword [ebp - 0x14]
mov ecx, dword [ebp - 0x14]
mov eax, dword [ebp + eax*4 - 0x180]
mov dword [ebp + ecx*4 - 0x180], eax
cmp dword [ebp - 0x30], 0
je 0x100320a3
cmp dword [ebp - 0x1c8], 0
jne 0x1003208b
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp + eax*4 - 0x180]
mov dword [ebp - 0xd0], eax
mov eax, dword [ebp - 0xd0]
sub eax, 0x5b1510af
cmp eax, 0xffffffff
je 0x10032007
mov eax, dword [ebp - 0x14]
cmp dword [ebp + eax*4 - 0x180], 0
je 0x10032007
mov dword [ebp - 0x164], 1
jmp 0x1003200e
and dword [ebp - 0x164], 0
mov eax, dword [ebp - 0x1a8]
cmp dword [ebp - 0x164], eax
jle 0x10032028
mov dword [ebp - 0xd8], 1
jmp 0x1003202f
and dword [ebp - 0xd8], 0
mov eax, dword [ebp - 0x14]
cmp dword [ebp - 0xd8], eax
jg 0x10032046
mov dword [ebp - 0x16c], 1
jmp 0x1003204d
and dword [ebp - 0x16c], 0
mov eax, dword [ebp - 0x30]
cmp dword [ebp - 0x16c], eax
jg 0x10032064
mov dword [ebp - 0x174], 1
jmp 0x1003206b
and dword [ebp - 0x174], 0
mov eax, dword [ebp - 0x174]
mov dword [ebp - 0xe4], eax
mov eax, dword [ebp - 0xe4]
cmp dword [ebp - 0x14], eax
jg 0x1003208b
and dword [ebp - 0x134], 0
jmp 0x10032095
mov dword [ebp - 0x134], 1
mov eax, dword [ebp - 0x134]
mov dword [ebp - 0x98], eax
jmp 0x10032115
mov dword [ebp - 0x1ac], 0x7d6a5839
mov byte [ebp - 0x2b], 0
movzx eax, byte [ebp - 0x2b]
test eax, eax
je 0x100320c7
push 0x432b
push 0
call fcn.1002eeb8
pop ecx
pop ecx
push 3
lea ecx, [ebp - 0x234]
call fcn.10019b92
mov eax, dword [eax]
mov dword [ebp - 0xec], eax
mov eax, dword [ebp - 0x1ac]
cmp dword [ebp - 0xec], eax
je 0x100320f6
mov dword [ebp - 0x160], 1
jmp 0x100320fd
and dword [ebp - 0x160], 0
mov eax, dword [ebp - 0x160]
mov dword [ebp - 0x98], eax
mov eax, dword [ebp - 0x98]
mov dword [ebp - 0x1d4], eax
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x234]
call fcn.10019b8d
jmp 0x10031f10
jmp 0x10031ed3
jmp 0x10031e88
mov eax, dword [ebp - 0x58]
mov eax, dword [eax]
mov ecx, dword [ebp - 0x58]
mov ecx, dword [ecx]
movzx ecx, word [ecx + 0x14]
lea eax, [eax + ecx + 0x18]
mov dword [ebp - 0x20], eax
mov dword [ebp - 0x1b4], 7
mov dword [ebp - 0x4c], 0
jmp 0x10032162
mov eax, dword [ebp - 0x4c]
inc eax
mov dword [ebp - 0x4c], eax
cmp dword [ebp - 0x4c], 3
jge 0x10032178
mov eax, dword [ebp - 0x4c]
mov dword [ebp + eax*4 - 0x254], 0x960f57a7
jmp 0x1003215b
mov byte [ebp - 0x29], 0
movzx eax, byte [ebp - 0x29]
test eax, eax
je 0x10032198
push 0x58e3
push 0x2e25
push 1
call fcn.10029d86
add esp, 0xc
push 4
pop eax
shl eax, 1
mov ecx, dword [ebp - 0x1b4]
mov dword [ebp + eax - 0x254], ecx
and dword [ebp - 0x84], 0
jmp 0x100321c9
mov eax, dword [ebp - 0x84]
inc eax
mov dword [ebp - 0x84], eax
mov eax, dword [ebp - 0x20]
add eax, 0x28
mov dword [ebp - 0x20], eax
mov eax, dword [ebp - 0x58]
mov eax, dword [eax]
movzx eax, word [eax + 6]
cmp dword [ebp - 0x84], eax
jge 0x10032a1f
mov dword [ebp - 0x10], 1
mov dword [ebp - 0x198], 0x2d149fe
mov dword [ebp - 0x194], 0x2d149fe
mov dword [ebp - 0x190], 0x2d149fe
mov dword [ebp - 0x18c], 0x2d149fe
mov dword [ebp - 0x170], 7
mov dword [ebp - 0x8c], 0x4bfcc0c2
mov dword [ebp - 0x10], 0xffffffee
jmp 0x10032231
mov eax, dword [ebp - 0x10]
inc eax
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], 0xe
je 0x10032720
mov dword [ebp - 0xfc], 4
mov dword [ebp - 0x124], 0x3c5ebb4e
mov dword [ebp - 0x44], 0
jmp 0x1003225f
mov eax, dword [ebp - 0x44]
inc eax
mov dword [ebp - 0x44], eax
cmp dword [ebp - 0x44], 4
jge 0x10032272
mov eax, dword [ebp - 0x44]
mov dword [ebp + eax*4 - 0x6c], 0x733c6338
jmp 0x10032258
cmp dword [ebp - 0x10], 0
je 0x1003227d
jmp 0x10032720
push 4
pop eax
shl eax, 1
mov dword [ebp + eax - 0x6c], 3
jmp 0x1003229f
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x6c]
dec eax
push 4
pop ecx
shl ecx, 1
mov dword [ebp + ecx - 0x6c], eax
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0x6c], 0
jl 0x1003271b
mov dword [ebp - 0x18], 0x4f16efa4
mov dword [ebp - 0x18], 3
jmp 0x100322c6
mov eax, dword [ebp - 0x18]
dec eax
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 0
jl 0x10032716
mov dword [ebp - 0x1c], 1
mov dword [ebp - 0x54], 0x534a
mov dword [ebp - 0x94], 0xade45a91
mov dword [ebp - 0x1bc], 0x111919b1
mov dword [ebp - 0x1a4], 0x900a
mov dword [ebp - 0x1c], 3
jmp 0x1003230c
mov eax, dword [ebp - 0x1c]
dec eax
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 0
jl 0x10032711
mov dword [ebp - 0x80], 1
mov dword [ebp - 0x1dc], 0x20a73bc0
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x6c]
mov eax, dword [ebp + eax*4 - 0x198]
mov dword [ebp - 0x244], eax
mov eax, dword [ebp - 0x1c]
cmp dword [ebp + eax*4 - 0x198], 0x4343
jne 0x10032359
mov dword [ebp - 0x168], 1
jmp 0x10032360
and dword [ebp - 0x168], 0
mov eax, dword [ebp - 0x54]
inc eax
mov dword [ebp - 0x54], eax
je 0x100323d1
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x6c]
mov dword [ebp - 0x240], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x6c]
cmp dword [ebp - 0x10], eax
je 0x10032393
mov dword [ebp - 0xf4], 1
jmp 0x1003239a
and dword [ebp - 0xf4], 0
cmp dword [ebp - 0xf4], 0xfffffffa
jge 0x100323b5
cmp dword [ebp - 0x18], 0
je 0x100323b5
mov dword [ebp - 0x140], 1
jmp 0x100323bc
and dword [ebp - 0x140], 0
mov eax, dword [ebp - 0x140]
mov dword [ebp - 0xfc], eax
cmp dword [ebp - 0xfc], 6
jb 0x100323e7
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x6c], 0
jne 0x100323e7
and dword [ebp - 0x184], 0
jmp 0x100323f1
mov dword [ebp - 0x184], 1
mov eax, dword [ebp - 0x184]
mov dword [ebp - 0x80], eax
mov eax, dword [ebp - 0x1c]
cmp dword [ebp - 0x80], eax
jg 0x10032414
cmp dword [ebp - 0x54], 0
je 0x10032414
mov dword [ebp - 0x104], 1
jmp 0x1003241b
and dword [ebp - 0x104], 0
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x6c]
imul eax, dword [ebp - 0x104]
add eax, dword [ebp - 0x10]
cmp eax, dword [ebp - 0x1c]
jle 0x1003243f
mov dword [ebp - 0x148], 1
jmp 0x10032446
and dword [ebp - 0x148], 0
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x6c]
mov eax, dword [ebp + eax*4 - 0x198]
cmp dword [ebp - 0x148], eax
jle 0x1003246a
mov dword [ebp - 0x10c], 1
jmp 0x10032471
and dword [ebp - 0x10c], 0
mov eax, dword [ebp - 0x10c]
mov dword [ebp - 0x94], eax
mov eax, dword [ebp - 0x10]
mov dword [ebp - 0x210], eax
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x214], eax
cmp dword [ebp - 0x168], 0xb6c4
jl 0x100324a7
mov dword [ebp - 0x114], 1
jmp 0x100324ae
and dword [ebp - 0x114], 0
cmp dword [ebp - 0x114], 0x9d08
jge 0x100324c6
mov dword [ebp - 0x150], 1
jmp 0x100324cd
and dword [ebp - 0x150], 0
mov eax, dword [ebp - 0x1c]
cmp dword [ebp - 0x150], eax
jl 0x100324e4
mov dword [ebp - 0x9c], 1
jmp 0x100324eb
and dword [ebp - 0x9c], 0
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x6c]
cmp dword [ebp - 0x9c], eax
je 0x10032508
mov dword [ebp - 0x178], 1
jmp 0x1003250f
and dword [ebp - 0x178], 0
cmp dword [ebp - 0x178], 0x83a38c8a
ja 0x10032527
mov dword [ebp - 0x1cc], 1
jmp 0x1003252e
and dword [ebp - 0x1cc], 0
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x6c]
mov dword [ebp - 0x218], eax
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x6c]
mov eax, dword [ebp + eax*4 - 0x198]
mov dword [ebp - 0x238], eax
mov eax, dword [ebp - 0x10]
mov dword [ebp - 0x124], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x198]
cmp dword [ebp - 0x124], eax
jne 0x1003257d
mov dword [ebp - 0x158], 1
jmp 0x10032584
and dword [ebp - 0x158], 0
mov eax, dword [ebp - 0x158]
mov dword [ebp - 0x1bc], eax
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x6c]
mov dword [ebp + eax*4 - 0x198], 4
mov eax, dword [ebp - 0x10]
mov dword [ebp - 0x220], eax
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x6c]
mov dword [ebp - 0x23c], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x6c]
sub eax, dword [ebp - 0x1c]
mov dword [ebp - 0x94], eax
je 0x100325e9
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0x198], 0
jne 0x100325e9
and dword [ebp - 0x12c], 0
jmp 0x100325f3
mov dword [ebp - 0x12c], 1
mov eax, dword [ebp - 0x18]
imul eax, dword [ebp - 0x12c]
cmp eax, dword [ebp - 0x170]
je 0x10032611
mov dword [ebp - 0xdc], 1
jmp 0x10032618
and dword [ebp - 0xdc], 0
mov eax, dword [ebp - 0x170]
imul eax, dword [ebp - 0xdc]
cmp eax, dword [ebp - 0x8c]
jg 0x1003263d
push 0xfffffffffffffffc
pop eax
test eax, eax
jne 0x1003263d
and dword [ebp - 0xe0], 0
jmp 0x10032647
mov dword [ebp - 0xe0], 1
mov eax, dword [ebp - 0x8c]
cmp dword [ebp - 0xe0], eax
jle 0x10032661
mov dword [ebp - 0xe8], 1
jmp 0x10032668
and dword [ebp - 0xe8], 0
mov eax, dword [ebp - 0x8c]
cmp dword [ebp - 0xe8], eax
jg 0x10032682
mov dword [ebp - 0xf0], 1
jmp 0x10032689
and dword [ebp - 0xf0], 0
mov eax, dword [ebp - 0x1dc]
cmp dword [ebp - 0xf0], eax
jl 0x100326a3
mov dword [ebp - 0xf8], 1
jmp 0x100326aa
and dword [ebp - 0xf8], 0
mov eax, dword [ebp - 0x18]
cmp dword [ebp - 0xf8], eax
jle 0x100326c4
cmp dword [ebp - 0x10], 0
jne 0x100326c4
and dword [ebp - 0x100], 0
jmp 0x100326ce
mov dword [ebp - 0x100], 1
cmp dword [ebp - 0x100], 0
je 0x10032703
cmp dword [ebp - 0x18], 0
je 0x100326f2
push 0x2395
push 1
lea eax, [ebp - 0x80]
push eax
call fcn.1002aec0
add esp, 0xc
jmp 0x10032701
push 4
pop eax
imul eax, eax, 3
cmp dword [ebp + eax - 0x6c], 0
je 0x10032701
jmp 0x10032711
jmp 0x1003270c
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x1a4], eax
jmp 0x10032305
jmp 0x100322bf
jmp 0x1003228c
jmp 0x1003222a
mov eax, dword [ebp - 0x20]
cmp dword [eax + 0x10], 0
jne 0x1003275b
lea eax, [ebp - 0xd4]
push eax
lea eax, [ebp - 0x1a0]
push eax
lea eax, [ebp - 0x88]
push eax
push 0x16ca
push 0
push 0x2bdc
lea eax, [ebp - 0x20]
push eax
call fcn.100351ac
add esp, 0x1c
jmp 0x100321b3
push 3
lea ecx, [ebp - 0x78]
call fcn.10019b25
mov dword [ebp - 4], 2
mov dword [ebp - 0x108], 0xffffffff
mov dword [ebp - 0xbc], 1
mov dword [ebp - 0x3c], 0x34e401d9
mov dword [ebp - 0x1b0], 0
mov dword [ebp - 0x1b8], 0x888ad88c
mov dword [ebp - 0x38], 0
jmp 0x100327ab
mov eax, dword [ebp - 0x38]
inc eax
mov dword [ebp - 0x38], eax
cmp dword [ebp - 0x38], 3
jge 0x100327c4
push dword [ebp - 0x38]
lea ecx, [ebp - 0x78]
call fcn.10019b92
mov dword [eax], 0xa11015aa
jmp 0x100327a4
mov dword [ebp - 0x108], 1
mov esi, dword [ebp - 0x108]
push 1
lea ecx, [ebp - 0x78]
call fcn.10019b92
cmp esi, dword [eax]
jg 0x100327ee
mov dword [ebp - 0x110], 1
jmp 0x100327f5
and dword [ebp - 0x110], 0
push 2
lea ecx, [ebp - 0x78]
call fcn.10019b92
mov eax, dword [eax]
cmp eax, dword [ebp - 0x110]
je 0x10032815
mov dword [ebp - 0x118], 1
jmp 0x1003281c
and dword [ebp - 0x118], 0
cmp dword [ebp - 0x118], 1
ja 0x10032831
mov dword [ebp - 0x120], 1
jmp 0x10032838
and dword [ebp - 0x120], 0
cmp dword [ebp - 0x120], 0x43af7806
je 0x10032850
mov dword [ebp - 0x128], 1
jmp 0x10032857
and dword [ebp - 0x128], 0
push 0
lea ecx, [ebp - 0x78]
call fcn.10019b92
mov ecx, dword [ebp - 0x128]
cmp ecx, dword [eax]
jge 0x10032877
mov dword [ebp - 0xa0], 1
jmp 0x1003287e
and dword [ebp - 0xa0], 0
push 2
lea ecx, [ebp - 0x78]
call fcn.10019b92
mov ecx, dword [ebp - 0xa0]
cmp ecx, dword [eax]
je 0x100328a7
cmp dword [ebp - 0xbc], 0
je 0x100328a7
mov dword [ebp - 0xa4], 1
jmp 0x100328ae
and dword [ebp - 0xa4], 0
push 0
lea ecx, [ebp - 0x78]
call fcn.10019b92
mov eax, dword [eax]
cmp eax, dword [ebp - 0xa4]
jl 0x100328ce
mov dword [ebp - 0xac], 1
jmp 0x100328d5
and dword [ebp - 0xac], 0
push 2
lea ecx, [ebp - 0x78]
call fcn.10019b92
mov eax, dword [eax]
sub eax, dword [ebp - 0xac]
jne 0x10032901
push 2
lea ecx, [ebp - 0x78]
call fcn.10019b92
cmp dword [eax], 0
jne 0x10032901
and dword [ebp - 0xb4], 0
jmp 0x1003290b
mov dword [ebp - 0xb4], 1
mov eax, dword [ebp - 0xb4]
mov dword [ebp - 0x3c], eax
imul eax, dword [ebp - 0x3c], 0x734f
imul eax, eax, 0xfffffff6
add eax, 8
mov dword [ebp - 0x1b0], eax
cmp dword [ebp - 0x3c], 0
jne 0x10032945
push 2
lea ecx, [ebp - 0x78]
call fcn.10019b92
cmp dword [eax], 0
jne 0x10032945
and dword [ebp - 0xc4], 0
jmp 0x1003294f
mov dword [ebp - 0xc4], 1
mov esi, dword [ebp - 0xbc]
imul esi, dword [ebp - 0xc4]
push 2
lea ecx, [ebp - 0x78]
call fcn.10019b92
add esi, dword [eax]
push 2
lea ecx, [ebp - 0x78]
call fcn.10019b92
cmp esi, dword [eax]
jne 0x10032988
cmp dword [ebp - 0x3c], 0
je 0x10032988
mov dword [ebp - 0xcc], 1
jmp 0x1003298f
and dword [ebp - 0xcc], 0
mov eax, dword [ebp - 0xcc]
mov dword [ebp - 0x1b8], eax
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x78]
call fcn.10019b8d
push 4
push 0x1000
mov eax, dword [ebp - 0x20]
push dword [eax + 0x10]
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0xd4]
add ecx, dword [eax + 0xc]
push ecx
push 0x75cc
push 0x8268
call fcn.10029314
pop ecx
pop ecx
call eax
mov dword [ebp - 0x88], eax
mov eax, dword [ebp - 0x20]
push dword [eax + 0x10]
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c0]
add ecx, dword [eax + 0x14]
push ecx
push dword [ebp - 0x88]
call fcn.10029376
add esp, 0xc
push 0
lea eax, [ebp - 0x88]
push eax
push 0x7b99
lea eax, [ebp - 0x20]
push eax
push 0x1239
call fcn.10032b67
add esp, 0x14
jmp 0x100321b3
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop esi
mov esp, ebp
pop ebp
ret