Function at 0x10032dc5
Capabilities:
Check os version

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x1006a58d
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
push ecx
sub esp, 0x40c
push ebx
push esi
push edi
mov dword [ebp - 0x10], esp
movzx eax, byte [ebp + 0x18]
test eax, eax
je 0x10032e0f
mov eax, dword [ebp + 0x1c]
mov dword [ebp - 0x260], eax
push dword [ebp - 0x260]
push 1
call fcn.100348b0
pop ecx
pop ecx
jmp 0x1003489f
mov eax, dword [ebp + 0xc]
mov dword [ebp - 0x204], eax
lea eax, [ebp + 0x10]
mov dword [ebp - 0x250], eax
mov eax, dword [ebp + 0x14]
mov dword [ebp - 0x264], eax
mov eax, dword [ebp + 8]
mov dword [ebp - 0x248], eax
mov eax, dword [ebp - 0x250]
movzx eax, byte [eax]
test eax, eax
je 0x10032e8f
mov eax, dword [ebp - 0x264]
mov dword [ebp - 0x26c], eax
mov eax, dword [ebp - 0x26c]
mov dword [ebp - 0x274], eax
mov eax, dword [ebp - 0x274]
movzx eax, byte [eax]
test eax, eax
je 0x10032e8a
push 0x3baf
push 0x333d
push 0x60c4
push 1
push 0x1a1f
push 1
push 0x661e
call fcn.1002d381
add esp, 0x1c
jmp 0x1003489f
mov eax, dword [ebp - 0x204]
mov dword [ebp - 0x30], eax
mov eax, dword [ebp - 0x248]
mov dword [ebp - 0x240], eax
mov dword [ebp - 0x14], 7
mov dword [ebp - 0x3c], 0x3d42374b
push 2
lea ecx, [ebp - 0x350]
call fcn.1000c137
and dword [ebp - 4], 0
mov dword [ebp - 0x58], 0
jmp 0x10032ed3
mov eax, dword [ebp - 0x58]
inc eax
mov dword [ebp - 0x58], eax
cmp dword [ebp - 0x58], 2
jge 0x10032eef
push dword [ebp - 0x58]
lea ecx, [ebp - 0x350]
call fcn.1000c1d5
mov dword [eax], 1
jmp 0x10032ecc
cmp dword [ebp - 0x14], 0
jne 0x10032f62
mov eax, dword [ebp - 0x14]
cmp dword [ebp - 0x14], eax
jle 0x10032f09
mov dword [ebp - 0x1c4], 1
jmp 0x10032f10
and dword [ebp - 0x1c4], 0
cmp dword [ebp - 0x14], 0x34ee
jge 0x10032f25
mov dword [ebp - 0x16c], 1
jmp 0x10032f2c
and dword [ebp - 0x16c], 0
mov eax, dword [ebp - 0x14]
cmp eax, dword [ebp - 0x16c]
jne 0x10032f43
mov dword [ebp - 0xd8], 1
jmp 0x10032f4a
and dword [ebp - 0xd8], 0
mov eax, dword [ebp - 0x1c4]
cmp eax, dword [ebp - 0xd8]
jle 0x10032f62
cmp dword [ebp - 0x3c], 0
je 0x100330c2
mov dword [ebp - 0xec], 0x6b3e713e
mov dword [ebp - 0x24c], 2
mov dword [ebp - 0x14], 0
jmp 0x10032f86
mov eax, dword [ebp - 0x14]
inc eax
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 0x12
jle 0x1003306b
mov dword [ebp - 0x3c], 0x1d
jmp 0x10032fa0
mov eax, dword [ebp - 0x3c]
dec eax
mov dword [ebp - 0x3c], eax
cmp dword [ebp - 0x3c], 7
jle 0x10033066
mov dword [ebp - 0xa4], 0
mov dword [ebp - 0xa4], 0xffffffed
jmp 0x10032fcd
mov eax, dword [ebp - 0xa4]
inc eax
mov dword [ebp - 0xa4], eax
cmp dword [ebp - 0xa4], 0x10
jne 0x10033061
mov dword [ebp - 0x50], 1
mov dword [ebp - 0x6c], 0
jmp 0x10032ff1
mov eax, dword [ebp - 0x6c]
inc eax
mov dword [ebp - 0x6c], eax
cmp dword [ebp - 0x6c], 1
jge 0x10033007
mov eax, dword [ebp - 0x6c]
mov dword [ebp + eax*4 - 0x210], 1
jmp 0x10032fea
mov dword [ebp - 0x50], 0
jmp 0x10033017
mov eax, dword [ebp - 0x50]
inc eax
mov dword [ebp - 0x50], eax
cmp dword [ebp - 0x50], 0
jg 0x10033054
mov eax, dword [ebp - 0x50]
mov eax, dword [ebp + eax*4 - 0x210]
mov dword [ebp - 0xec], eax
mov byte [ebp - 0x34], 0
movzx eax, byte [ebp - 0x34]
test eax, eax
je 0x10033052
push 0x2755
push 0x5298
push 0x1b36
push 0
call fcn.1003a2a0
add esp, 0x10
jmp 0x10033010
cmp dword [ebp - 0x14], 0
je 0x1003305c
jmp 0x10033061
jmp 0x10032fc0
jmp 0x10032f99
jmp 0x10032f7f
push 0x3aa5
push 0
push 0x677e
push 0xb53
push 0x794b
push 0x2651
push 0x7084
push 0
lea eax, [ebp - 0x14]
push eax
push 0x7a32
lea eax, [ebp - 0x24c]
push eax
push 0x48f0
push 0x53b
lea eax, [ebp - 0xec]
push eax
push 0x4f10
push 0x1b4c
call fcn.1003ac71
add esp, 0x40
jmp 0x10033119
mov byte [ebp - 0x37], 0
push 1
lea eax, [ebp - 0x37]
push eax
push 0x31aa
push 0x51fa
push 0
call fcn.1003a82b
add esp, 0x14
mov dword [ebp - 0x14], 0
jmp 0x100330f0
mov eax, dword [ebp - 0x14]
inc eax
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 1
jg 0x10033119
push 1
push 0x722f
push 0x4c91
push 0x40e6
push 0
push 1
lea eax, [ebp - 0x3c]
push eax
call fcn.1002b6e9
add esp, 0x1c
jmp 0x100330e9
mov byte [ebp - 0x36], 0
push 0
push 1
lea eax, [ebp - 0x36]
push eax
push 0x40d9
push 0x4f24
push 0x9f3
push 0x4bda
push 0x2be4
push 0x73a
push 0
push 0x4eb7
call fcn.1002cd48
add esp, 0x2c
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x350]
call fcn.1000c1b9
mov dword [ebp - 0x54], 1
mov eax, dword [ebp - 0x30]
mov eax, dword [eax + 4]
mov dword [ebp - 0xa0], eax
mov eax, dword [ebp - 0x30]
mov eax, dword [eax]
push 8
pop ecx
shl ecx, 0
lea eax, [eax + ecx + 0x78]
mov dword [ebp - 0x160], eax
push 4
lea ecx, [ebp - 0x380]
call fcn.1000c137
mov dword [ebp - 4], 1
mov dword [ebp - 0x94], 0xdba76aab
mov dword [ebp - 0x3ac], 0xa5efa20b
mov dword [ebp - 0x364], 7
mov dword [ebp - 0x354], 0xffffffff
mov dword [ebp - 0x374], 0x7e813a3d
mov dword [ebp - 0x3bc], 0xffffffff
mov dword [ebp - 0x310], 0x51c6076f
push 3
lea ecx, [ebp - 0x370]
call fcn.1000c137
mov byte [ebp - 4], 2
lea eax, [ebp - 0x44]
push eax
lea eax, [ebp - 0x380]
push eax
push 1
push 0x195f
push 1
push 0x3a6d
push 0
call fcn.1002e53c
add esp, 0x1c
mov dword [ebp - 0x44], 0
jmp 0x10033227
mov eax, dword [ebp - 0x44]
inc eax
mov dword [ebp - 0x44], eax
cmp dword [ebp - 0x44], 3
jge 0x10033243
push dword [ebp - 0x44]
lea ecx, [ebp - 0x370]
call fcn.1000c1d5
mov dword [eax], 0xfffffff9
jmp 0x10033220
mov dword [ebp - 0x190], 0x6574
mov dword [ebp - 0x290], 0x100084c8
cmp dword [ebp - 0x190], 0x68d5
jle 0x10033354
call dword [sym.imp.KERNEL32.dll_GetVersion]
and dword [ebp - 0x8c], 0
jmp 0x10033283
mov eax, dword [ebp - 0x8c]
inc eax
mov dword [ebp - 0x8c], eax
cmp dword [ebp - 0x8c], 0x2d52
jge 0x10033354
and dword [ebp - 0x74], 0
jmp 0x100332a0
mov eax, dword [ebp - 0x74]
inc eax
mov dword [ebp - 0x74], eax
cmp dword [ebp - 0x74], 0x6bc3
jge 0x1003334f
and dword [ebp - 0x9c], 0
jmp 0x100332c3
mov eax, dword [ebp - 0x9c]
inc eax
mov dword [ebp - 0x9c], eax
cmp dword [ebp - 0x9c], 0x11a4
jge 0x1003334a
and dword [ebp - 0x7c], 0
jmp 0x100332dc
mov eax, dword [ebp - 0x7c]
inc eax
mov dword [ebp - 0x7c], eax
cmp dword [ebp - 0x7c], 0x7b56
jge 0x10033345
mov eax, dword [ebp - 0x8c]
imul eax, dword [ebp - 0x74]
mov ecx, dword [ebp - 0x9c]
sub ecx, dword [ebp - 0x7c]
and eax, ecx
cdq
mov dword [ebp - 0x25c], eax
mov dword [ebp - 0x258], edx
push dword [ebp - 0x258]
push dword [ebp - 0x25c]
lea ecx, [ebp - 0x41c]
call fcn.1000a5da
pop ecx
pop ecx
mov dword [ebp - 0x20c], eax
mov ecx, dword [ebp - 0x20c]
call fcn.1000c002
push eax
call fcn.10050f66
pop ecx
lea ecx, [ebp - 0x41c]
call fcn.1000bff8
jmp 0x100332d5
jmp 0x100332b6
jmp 0x10033299
jmp 0x10033276
mov dword [ebp - 0x94], 3
jmp 0x1003336d
mov eax, dword [ebp - 0x94]
dec eax
mov dword [ebp - 0x94], eax
cmp dword [ebp - 0x94], 0
jl 0x100334a3
mov dword [ebp - 0x84], 0
mov dword [ebp - 0x318], 0xfffffffd
mov dword [ebp - 0x320], 0xab76d609
mov dword [ebp - 0x158], 0xcb24
push 3
lea ecx, [ebp - 0x360]
call fcn.1000c137
mov byte [ebp - 4], 3
or dword [ebp - 0x2f0], 0xffffffff
or dword [ebp - 0x2ec], 0xffffffff
or dword [ebp - 0x2e8], 0xffffffff
or dword [ebp - 0x2e4], 0xffffffff
lea ecx, [ebp - 0xa9]
call fcn.1000c1e4
push eax
lea eax, [ebp - 0x2e0]
push eax
lea eax, [ebp - 0x2f0]
push eax
lea ecx, [ebp - 0x3fc]
call fcn.1000c1e7
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0x3e0]
call fcn.1000c193
mov byte [ebp - 4], 4
mov dword [ebp - 0xf0], 0x9ea4d59f
push 0
push 0x2f6e
lea eax, [ebp - 0x328]
push eax
push 0x510d
lea eax, [ebp - 0x360]
push eax
call fcn.10039a91
add esp, 0x14
mov dword [ebp - 0x84], 0
jmp 0x1003344d
mov eax, dword [ebp - 0x84]
inc eax
mov dword [ebp - 0x84], eax
cmp dword [ebp - 0x84], 3
jg 0x10033473
push 0
push 0x98f
call fcn.1003c255
pop ecx
pop ecx
mov eax, dword [ebp - 0x158]
inc eax
mov dword [ebp - 0x158], eax
jmp 0x10033440
mov eax, dword [ebp - 0xf0]
inc eax
mov dword [ebp - 0xf0], eax
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x3e0]
call fcn.1000c1b9
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x360]
call fcn.1000c1b9
jmp 0x10033360
mov byte [ebp - 4], 5
cmp dword [ebp - 0x190], 0x6554
jge 0x100334bf
push dword [ebp - 0x290]
call fcn.10050f66
pop ecx
jmp 0x100334db
mov dword [ebp - 4], 2
jmp 0x100334eb
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x370]
call fcn.1000c1b9
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x380]
call fcn.1000c1b9
mov eax, dword [ebp - 0x160]
cmp dword [eax + 4], 0
jbe 0x100346a9
mov dword [ebp - 0x68], 0xf5540d7f
push 4
lea ecx, [ebp - 0x390]
call fcn.1000c137
mov dword [ebp - 4], 7
mov dword [ebp - 0x254], 0xec62bb2c
mov dword [ebp - 0x60], 0
jmp 0x1003354e
mov eax, dword [ebp - 0x60]
inc eax
mov dword [ebp - 0x60], eax
cmp dword [ebp - 0x60], 4
jge 0x1003356a
push dword [ebp - 0x60]
lea ecx, [ebp - 0x390]
call fcn.1000c1d5
mov dword [eax], 0xdce9d05b
jmp 0x10033547
mov dword [ebp - 0x68], 0xfffffff4
jmp 0x1003357a
mov eax, dword [ebp - 0x68]
inc eax
mov dword [ebp - 0x68], eax
cmp dword [ebp - 0x68], 0xfffffffb
jge 0x1003375a
mov dword [ebp - 0x2dc], 0xb3b9da4d
mov dword [ebp - 0x2d8], 0xb3b9da4d
mov dword [ebp - 0x2d4], 0xb3b9da4d
mov dword [ebp - 0x2d0], 0xb3b9da4d
lea ecx, [ebp - 0xb5]
call fcn.1000c1e4
push eax
lea eax, [ebp - 0x2cc]
push eax
lea eax, [ebp - 0x2dc]
push eax
lea ecx, [ebp - 0x3f4]
call fcn.1000c1e7
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0x2a8]
call fcn.1000c193
mov byte [ebp - 4], 8
mov dword [ebp - 0x214], 0xfffffff8
mov dword [ebp - 0x330], 0x18d303f
mov dword [ebp - 0x338], 0xf88039d6
mov dword [ebp - 0x340], 0xe5a945cb
mov dword [ebp - 0x70], 0
jmp 0x1003361d
mov eax, dword [ebp - 0x70]
inc eax
mov dword [ebp - 0x70], eax
cmp dword [ebp - 0x70], 1
jge 0x10033633
mov eax, dword [ebp - 0x70]
mov dword [ebp + eax*4 - 0x3b8], 0xfffffff6
jmp 0x10033616
push 0
lea ecx, [ebp - 0x2a8]
call fcn.1000c1d5
and dword [eax], 0
jmp 0x10033669
push 0
lea ecx, [ebp - 0x2a8]
call fcn.1000c1d5
mov dword [ebp - 0xf8], eax
mov eax, dword [ebp - 0xf8]
mov eax, dword [eax]
inc eax
mov ecx, dword [ebp - 0xf8]
mov dword [ecx], eax
push 0
lea ecx, [ebp - 0x2a8]
call fcn.1000c1d5
cmp dword [eax], 3
jg 0x10033746
mov dword [ebp - 0x5c], 0
jmp 0x1003368f
mov eax, dword [ebp - 0x5c]
inc eax
mov dword [ebp - 0x5c], eax
cmp dword [ebp - 0x5c], 3
jge 0x100336a5
mov eax, dword [ebp - 0x5c]
mov dword [ebp + eax*4 - 0x29c], 0xffffffff
jmp 0x10033688
push 4
pop eax
shl eax, 0
mov dword [ebp + eax - 0x29c], 3
jmp 0x100336d3
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x29c]
dec eax
push 4
pop ecx
shl ecx, 0
mov dword [ebp + ecx - 0x29c], eax
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x29c], 0
jl 0x1003371f
push 0x1de5
push 1
push 0x70d9
push 0x33b7
push 0x6138
push 0
push 0x5fd7
push 0x5fa7
call fcn.1002dc5f
add esp, 0x20
push 0
lea eax, [ebp - 0x214]
push eax
call fcn.100319fd
pop ecx
pop ecx
jmp 0x100336b8
push 1
push 1
lea eax, [ebp - 0x254]
push eax
push 0x5e7b
push 0x5f8
push 0x2358
call fcn.1002b584
add esp, 0x18
jmp 0x10033645
mov byte [ebp - 4], 7
lea ecx, [ebp - 0x2a8]
call fcn.1000c1b9
jmp 0x10033573
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x390]
call fcn.1000c1b9
mov eax, dword [ebp - 0x160]
mov ecx, dword [ebp - 0xa0]
add ecx, dword [eax]
mov dword [ebp - 0x40], ecx
jmp 0x10033785
mov eax, dword [ebp - 0x40]
add eax, 0x14
mov dword [ebp - 0x40], eax
push dword [ebp - 0x40]
call fcn.1002a5a3
pop ecx
movzx eax, al
test eax, eax
jne 0x100346a9
mov eax, dword [ebp - 0x40]
cmp dword [eax + 0xc], 0
je 0x100346a9
mov dword [ebp - 0x2c8], 1
mov dword [ebp - 0x2c4], 1
mov dword [ebp - 0x2c0], 1
mov dword [ebp - 0x2bc], 1
lea ecx, [ebp - 0xbd]
call fcn.1000c1e4
push eax
lea eax, [ebp - 0x2b8]
push eax
lea eax, [ebp - 0x2c8]
push eax
lea ecx, [ebp - 0x404]
call fcn.1000c1e7
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0x284]
call fcn.1000c193
mov dword [ebp - 4], 9
mov dword [ebp - 0x1c], 5
push 2
lea ecx, [ebp - 0x1dc]
call fcn.1000c137
mov byte [ebp - 4], 0xa
mov dword [ebp - 0x1b0], 0x69209a48
mov dword [ebp - 0xc8], 0x842b
mov dword [ebp - 0x21c], 0xc90c63b8
push 1
lea ecx, [ebp - 0x2fc]
call fcn.1000c137
mov byte [ebp - 4], 0xb
mov dword [ebp - 0x278], 0x96a9cbd
mov dword [ebp - 0x224], 0x681c37f5
mov dword [ebp - 0x20], 0
jmp 0x10033875
mov eax, dword [ebp - 0x20]
inc eax
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 4
jge 0x1003388b
mov eax, dword [ebp - 0x20]
mov dword [ebp + eax*4 - 0x3d4], 0x96e6a373
jmp 0x1003386e
mov dword [ebp - 0x20], 0
jmp 0x1003389b
mov eax, dword [ebp - 0x20]
inc eax
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 2
jge 0x100338b7
push dword [ebp - 0x20]
lea ecx, [ebp - 0x1dc]
call fcn.1000c1d5
mov dword [eax], 0xdfbc43c
jmp 0x10033894
push 0
push 0x6497
push 0x2b7d
push 0
push 0x14ba
push 0x8c8
lea eax, [ebp - 0x20]
push eax
lea eax, [ebp - 0x2fc]
push eax
call fcn.1003cf77
add esp, 0x20
mov dword [ebp - 0x1c], 0
jmp 0x100338f2
mov eax, dword [ebp - 0x1c]
inc eax
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 4
jge 0x1003391b
lea eax, [ebp - 0x1c]
push eax
lea eax, [ebp - 0x284]
push eax
push 1
push 1
push 0x16e3
push 0x35a4
call fcn.1002b621
add esp, 0x18
jmp 0x100338eb
push 4
pop eax
imul eax, eax, 3
cmp dword [ebp + eax - 0x3d4], 0
jne 0x10033a89
cmp dword [ebp - 0x1c], 0
je 0x10033a35
push 1
lea ecx, [ebp - 0x1dc]
call fcn.1000c1d5
cmp dword [eax], 0
je 0x10033957
mov dword [ebp - 0x100], 1
jmp 0x1003395e
and dword [ebp - 0x100], 0
push 1
lea ecx, [ebp - 0x284]
call fcn.1000c1d5
mov ecx, dword [ebp - 0x100]
add ecx, dword [eax]
cmp ecx, dword [ebp - 0x1c]
jg 0x1003398a
push 1
lea ecx, [ebp - 0x1dc]
call fcn.1000c1d5
cmp dword [eax], 0
je 0x100339a8
push 1
lea ecx, [ebp - 0x1dc]
call fcn.1000c1d5
cmp dword [eax], 0
je 0x100339a8
mov dword [ebp - 0x1b8], 1
jmp 0x100339af
and dword [ebp - 0x1b8], 0
mov eax, dword [ebp - 0x1b0]
imul eax, dword [ebp - 0x1b8]
cmp eax, 1
jae 0x100339cd
mov dword [ebp - 0x108], 1
jmp 0x100339d4
and dword [ebp - 0x108], 0
push 4
pop eax
imul eax, eax, 3
mov ecx, dword [ebp - 0x108]
mov dword [ebp + eax - 0x3d4], ecx
push 1
lea ecx, [ebp - 0x284]
call fcn.1000c1d5
push 1
lea ecx, [ebp - 0x1dc]
call fcn.1000c1d5
mov ecx, dword [ebp - 0xc8]
cmp dword [eax], ecx
jg 0x10033a17
mov dword [ebp - 0x168], 1
jmp 0x10033a1e
and dword [ebp - 0x168], 0
mov eax, dword [ebp - 0x1c]
add eax, dword [ebp - 0x168]
je 0x10033a35
mov dword [ebp - 0x110], 1
jmp 0x10033a3c
and dword [ebp - 0x110], 0
push 1
lea ecx, [ebp - 0x1dc]
call fcn.1000c1d5
mov ecx, dword [ebp - 0x110]
cmp ecx, dword [eax]
jge 0x10033a5f
mov dword [ebp - 0x198], 1
jmp 0x10033a66
and dword [ebp - 0x198], 0
push 2
lea ecx, [ebp - 0x284]
call fcn.1000c1d5
mov ecx, dword [ebp - 0x198]
cmp ecx, dword [eax]
je 0x10033a89
mov dword [ebp - 0x118], 1
jmp 0x10033a90
and dword [ebp - 0x118], 0
mov eax, dword [ebp - 0x118]
mov dword [ebp - 0x21c], eax
mov eax, dword [ebp - 0xc8]
cmp dword [ebp - 0x1c], eax
je 0x10033ab3
mov dword [ebp - 0x170], 1
jmp 0x10033aba
and dword [ebp - 0x170], 0
mov eax, dword [ebp - 0x1c]
cmp dword [ebp - 0x170], eax
je 0x10033ad1
mov dword [ebp - 0x120], 1
jmp 0x10033ad8
and dword [ebp - 0x120], 0
push 0
lea ecx, [ebp - 0x2fc]
call fcn.1000c1d5
mov ecx, dword [ebp - 0x120]
mov dword [eax], ecx
mov dword [ebp - 0x1c], 1
mov eax, dword [ebp - 0x1c]
add eax, dword [ebp - 0x1b0]
cmp eax, dword [ebp - 0xc8]
jl 0x10033b11
mov dword [ebp - 0x128], 1
jmp 0x10033b18
and dword [ebp - 0x128], 0
mov eax, dword [ebp - 0x128]
mov dword [ebp - 0x278], eax
mov dword [ebp - 0x224], 0xe181f51b
mov byte [ebp - 4], 0xa
lea ecx, [ebp - 0x2fc]
call fcn.1000c1b9
mov byte [ebp - 4], 9
lea ecx, [ebp - 0x1dc]
call fcn.1000c1b9
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x284]
call fcn.1000c1b9
mov eax, dword [ebp - 0x40]
mov ecx, dword [ebp - 0xa0]
add ecx, dword [eax + 0xc]
push ecx
push 0x464b
push 0x483e
call fcn.10023906
pop ecx
pop ecx
call eax
mov dword [ebp - 0xc4], eax
mov dword [ebp - 0x18], 0x6df3
mov dword [ebp - 0x80], 0xffffffff
mov dword [ebp - 0xdc], 0xb9725245
mov dword [ebp - 0x1c0], 0
mov dword [ebp - 0x28c], 1
mov eax, dword [ebp - 0x18]
cmp dword [ebp - 0x18], eax
jle 0x10033bc1
mov dword [ebp - 0x1f8], 1
jmp 0x10033bc8
and dword [ebp - 0x1f8], 0
mov eax, dword [ebp - 0x18]
cmp dword [ebp - 0x18], eax
jle 0x10033bdc
mov dword [ebp - 0x178], 1
jmp 0x10033be3
and dword [ebp - 0x178], 0
cmp dword [ebp - 0x178], 0xffffffff
je 0x10033bf8
mov dword [ebp - 0x130], 1
jmp 0x10033bff
and dword [ebp - 0x130], 0
mov eax, dword [ebp - 0x80]
cmp dword [ebp - 0x130], eax
jle 0x10033c16
mov dword [ebp - 0x1a0], 1
jmp 0x10033c1d
and dword [ebp - 0x1a0], 0
mov eax, dword [ebp - 0x18]
cmp dword [ebp - 0x1a0], eax
je 0x10033c34
mov dword [ebp - 0x138], 1
jmp 0x10033c3b
and dword [ebp - 0x138], 0
mov eax, dword [ebp - 0x18]
imul eax, dword [ebp - 0x138]
test eax, eax
je 0x10033c5e
mov eax, 0xcdc345fe
test eax, eax
je 0x10033c5e
mov dword [ebp - 0x22c], 1
jmp 0x10033c65
and dword [ebp - 0x22c], 0
push 8
pop eax
sub eax, dword [ebp - 0x18]
je 0x1003403b
push 4
lea ecx, [ebp - 0x1d0]
call fcn.1000c137
mov dword [ebp - 4], 0xc
mov dword [ebp - 0x28], 0
mov dword [ebp - 0x200], 0x2095e04a
mov dword [ebp - 0xb4], 0
mov dword [ebp - 0xb0], 0x631a
push 1
lea eax, [ebp - 0x1d0]
push eax
push 0x10c1
push 0x4f28
push 1
lea eax, [ebp - 0x3c0]
push eax
push 0x5373
call fcn.1002baf2
add esp, 0x1c
mov dword [ebp - 0x18], 3
jmp 0x10033ce3
mov eax, dword [ebp - 0x18]
dec eax
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 0
jl 0x1003402a
mov dword [ebp - 0x30c], 0
mov dword [ebp - 0x23c], 0x390f3bd7
mov dword [ebp - 0x234], 2
push 1
lea ecx, [ebp - 0x2b4]
call fcn.1000c137
mov byte [ebp - 4], 0xd
mov dword [ebp - 0x48], 0
jmp 0x10033d2c
mov eax, dword [ebp - 0x48]
inc eax
mov dword [ebp - 0x48], eax
cmp dword [ebp - 0x48], 3
jge 0x10033d42
mov eax, dword [ebp - 0x48]
mov dword [ebp + eax*4 - 0x3ec], 0xffffffff
jmp 0x10033d25
push 1
push 0x6bdb
lea eax, [ebp - 0x48]
push eax
lea eax, [ebp - 0x2b4]
push eax
push 1
push 1
push 0x9b3
call fcn.1002b6e9
add esp, 0x1c
mov eax, dword [ebp - 0x28]
dec eax
mov dword [ebp - 0x28], eax
mov dword [ebp - 0x28], 0
jmp 0x10033d7c
mov eax, dword [ebp - 0x28]
inc eax
mov dword [ebp - 0x28], eax
cmp dword [ebp - 0x28], 3
jg 0x10034016
mov dword [ebp - 0x78], 0xfffffff8
mov dword [ebp - 0x3b0], 0
mov eax, dword [ebp - 0x1c0]
mov dword [ebp - 0x314], eax
mov eax, dword [ebp - 0x28c]
mov dword [ebp - 0x384], eax
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x3ec], 0
jne 0x10033dd1
cmp dword [ebp - 0xb4], 0
jne 0x10033dd1
and dword [ebp - 0x180], 0
jmp 0x10033ddb
mov dword [ebp - 0x180], 1
mov eax, 0x8e1c
sub eax, dword [ebp - 0x180]
sub eax, 0xab88
neg eax
je 0x10033e01
cmp dword [ebp - 0x78], 0
je 0x10033e01
mov dword [ebp - 0x140], 1
jmp 0x10033e08
and dword [ebp - 0x140], 0
mov eax, dword [ebp - 0xb4]
cmp dword [ebp - 0x140], eax
jle 0x10033e1d
cmp dword [ebp - 0x234], 0
mov eax, dword [ebp - 0x80]
mov dword [ebp - 0x31c], eax
mov eax, dword [ebp - 0x28]
mov dword [ebp - 0x3b4], eax
cmp dword [ebp - 0x80], 0
je 0x10033e48
push 4
pop eax
test eax, eax
je 0x10033e48
mov dword [ebp - 0x268], 1
jmp 0x10033e4f
and dword [ebp - 0x268], 0
push 0
lea ecx, [ebp - 0x2b4]
call fcn.1000c1d5
mov eax, dword [ebp - 0x78]
mov dword [ebp - 0x324], eax
mov eax, dword [ebp - 0xb0]
mov dword [ebp - 0x288], eax
mov eax, dword [ebp - 0x23c]
mov dword [ebp - 0x244], eax
mov eax, dword [ebp - 0xb0]
inc eax
mov dword [ebp - 0xb0], eax
mov eax, dword [ebp - 0x288]
cmp eax, dword [ebp - 0x244]
jne 0x10033ea4
mov dword [ebp - 0x148], 1
jmp 0x10033eab
and dword [ebp - 0x148], 0
mov eax, dword [ebp - 0x1c0]
add eax, dword [ebp - 0x148]
cmp eax, dword [ebp - 0x78]
jg 0x10033ec8
mov dword [ebp - 0x188], 1
jmp 0x10033ecf
and dword [ebp - 0x188], 0
mov eax, dword [ebp - 0xdc]
cmp dword [ebp - 0x188], eax
jge 0x10033efb
push 2
lea ecx, [ebp - 0x1d0]
call fcn.1000c1d5
cmp dword [eax], 0
je 0x10033efb
mov dword [ebp - 0x150], 1
jmp 0x10033f02
and dword [ebp - 0x150], 0
cmp dword [ebp - 0x150], 4
jl 0x10033f17
mov dword [ebp - 0x1a8], 1
jmp 0x10033f1e
and dword [ebp - 0x1a8], 0
cmp dword [ebp - 0x1a8], 0
je 0x10033f38
xor eax, eax
inc eax
je 0x10033f38
mov dword [ebp - 0xd4], 1
jmp 0x10033f3f
and dword [ebp - 0xd4], 0
push dword [ebp - 0x18]
lea ecx, [ebp - 0x1d0]
call fcn.1000c1d5
mov eax, dword [eax]
neg eax
add eax, dword [ebp - 0xdc]
cmp eax, dword [ebp - 0xd4]
jl 0x10033f6b
mov dword [ebp - 0xf4], 1
jmp 0x10033f72
and dword [ebp - 0xf4], 0
push dword [ebp - 0x18]
lea ecx, [ebp - 0x1d0]
call fcn.1000c1d5
mov ecx, dword [ebp - 0xf4]
cmp ecx, dword [eax]
jg 0x10033f96
mov dword [ebp - 0xfc], 1
jmp 0x10033f9d
and dword [ebp - 0xfc], 0
push 0
lea ecx, [ebp - 0x2b4]
call fcn.1000c1d5
mov ecx, dword [ebp - 0xfc]
add ecx, dword [eax]
cmp ecx, dword [ebp - 0xb4]
jne 0x10033fc6
mov dword [ebp - 0x270], 1
jmp 0x10033fcd
and dword [ebp - 0x270], 0
push dword [ebp - 0x18]
lea ecx, [ebp - 0x1d0]
call fcn.1000c1d5
push 2
lea ecx, [ebp - 0x1d0]
call fcn.1000c1d5
mov eax, dword [eax]
add eax, 7
cmp eax, dword [ebp - 0x78]
jg 0x10033ffe
mov dword [ebp - 0x104], 1
jmp 0x10034005
and dword [ebp - 0x104], 0
mov eax, dword [ebp - 0x104]
mov dword [ebp - 0x200], eax
jmp 0x10033d75
mov byte [ebp - 4], 0xc
lea ecx, [ebp - 0x2b4]
call fcn.1000c1b9
jmp 0x10033cdc
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x1d0]
call fcn.1000c1b9
jmp 0x10034067
mov byte [ebp - 0x33], 0
movzx eax, byte [ebp - 0x33]
test eax, eax
je 0x10034067
push 0x7b18
push 0x43b3
push 0
push 0x2a7d
push 0x4ce5
push 1
call fcn.10039c61
add esp, 0x18
lea eax, [ebp - 0x80]
push eax
push 0x3464
push 0
call fcn.1003c63f
add esp, 0xc
cmp dword [ebp - 0xc4], 0
jne 0x100344f0
push 1
lea ecx, [ebp - 0xe8]
call fcn.1000c137
mov dword [ebp - 4], 0xe
mov dword [ebp - 0xbc], 0xffffffff
mov dword [ebp - 0x154], 0xec3e1b8d
push 0x56f9
push 1
push 0x3b04
push 0
lea eax, [ebp - 0xe8]
push eax
lea eax, [ebp - 0x394]
push eax
call fcn.10031c9e
add esp, 0x18
push 0
lea ecx, [ebp - 0xe8]
call fcn.1000c1d5
mov dword [eax], 0xfffffffd
jmp 0x1003410c
push 0
lea ecx, [ebp - 0xe8]
call fcn.1000c1d5
mov dword [ebp - 0x10c], eax
mov eax, dword [ebp - 0x10c]
mov eax, dword [eax]
dec eax
mov ecx, dword [ebp - 0x10c]
mov dword [ecx], eax
push 0
lea ecx, [ebp - 0xe8]
call fcn.1000c1d5
cmp dword [eax], 0xffffffee
jl 0x10034422
mov dword [ebp - 0x24], 0x4768c0aa
mov dword [ebp - 0x1fc], 0x79942796
mov dword [ebp - 0x88], 0
jmp 0x1003414c
mov eax, dword [ebp - 0x88]
inc eax
mov dword [ebp - 0x88], eax
cmp dword [ebp - 0x88], 1
jge 0x10034168
mov eax, dword [ebp - 0x88]
mov dword [ebp + eax*4 - 0x98], 6
jmp 0x1003413f
mov dword [ebp - 0x24], 0
jmp 0x10034178
mov eax, dword [ebp - 0x24]
inc eax
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 0
jg 0x1003441d
mov dword [ebp - 0x90], 0
jmp 0x1003419b
mov eax, dword [ebp - 0x90]
inc eax
mov dword [ebp - 0x90], eax
cmp dword [ebp - 0x90], 2
jge 0x100341b7
mov eax, dword [ebp - 0x90]
mov dword [ebp + eax*4 - 0x1e4], 0xfffffff9
jmp 0x1003418e
mov byte [ebp - 0x32], 0
push 0x75d3
push 0x3116
push 1
lea eax, [ebp - 0x32]
push eax
push 0
push 0x2d14
push 1
call fcn.1002e53c
add esp, 0x1c
mov eax, 0x21af
test eax, eax
je 0x10034378
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x1e4]
push 4
pop ecx
imul ecx, ecx, 0
imul eax, dword [ebp + ecx - 0x1e4]
push 4
pop ecx
imul ecx, ecx, 0
cmp eax, dword [ebp + ecx - 0x98]
je 0x1003421f
mov dword [ebp - 0x114], 1
jmp 0x10034226
and dword [ebp - 0x114], 0
push 0
lea ecx, [ebp - 0xe8]
call fcn.1000c1d5
mov ecx, dword [ebp - 0x114]
imul ecx, dword [eax]
push 4
pop eax
shl eax, 0
cmp ecx, dword [ebp + eax - 0x1e4]
jne 0x10034260
cmp dword [ebp - 0xbc], 0
je 0x10034260
mov dword [ebp - 0x11c], 1
jmp 0x10034267
and dword [ebp - 0x11c], 0
push 0
lea ecx, [ebp - 0xe8]
call fcn.1000c1d5
mov ecx, dword [ebp - 0x11c]
cmp ecx, dword [eax]
je 0x1003428a
mov dword [ebp - 0x124], 1
jmp 0x10034291
and dword [ebp - 0x124], 0
mov eax, dword [ebp - 0x24]
cmp dword [ebp - 0x124], eax
jne 0x100342a8
mov dword [ebp - 0x12c], 1
jmp 0x100342af
and dword [ebp - 0x12c], 0
cmp dword [ebp - 0x12c], 0xffff
jb 0x100342c7
mov dword [ebp - 0x134], 1
jmp 0x100342ce
and dword [ebp - 0x134], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x98]
cmp eax, dword [ebp - 0x134]
jge 0x100342ef
mov dword [ebp - 0x13c], 1
jmp 0x100342f6
and dword [ebp - 0x13c], 0
mov eax, dword [ebp - 0x24]
cmp eax, dword [ebp - 0x13c]
jge 0x1003430d
mov dword [ebp - 0x208], 1
jmp 0x10034314
and dword [ebp - 0x208], 0
mov eax, dword [ebp - 0xbc]
mov dword [ebp - 0x32c], eax
or eax, 0xffffffff
jne 0x10034334
cmp dword [ebp - 0x24], 0
jne 0x10034334
and dword [ebp - 0x144], 0
jmp 0x1003433e
mov dword [ebp - 0x144], 1
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp + eax*4 - 0x98]
cmp eax, dword [ebp - 0x144]
jne 0x1003435c
mov dword [ebp - 0x14c], 1
jmp 0x10034363
and dword [ebp - 0x14c], 0
mov eax, dword [ebp - 0x14c]
mov dword [ebp - 0x154], eax
cmp dword [ebp - 0x154], 0
jne 0x1003438e
mov eax, dword [ebp - 0x24]
cmp dword [ebp + eax*4 - 0x98], 0
jne 0x1003438e
and dword [ebp - 0x15c], 0
jmp 0x10034398
mov dword [ebp - 0x15c], 1
push 0
lea ecx, [ebp - 0xe8]
call fcn.1000c1d5
mov ecx, dword [ebp - 0x15c]
cmp ecx, dword [eax]
jge 0x100343bb
mov dword [ebp - 0x164], 1
jmp 0x100343c2
and dword [ebp - 0x164], 0
mov eax, dword [ebp - 0x164]
dec eax
cmp eax, dword [ebp - 0xbc]
jl 0x100343dd
mov dword [ebp - 0xd0], 1
jmp 0x100343e4
and dword [ebp - 0xd0], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x1e4]
cmp dword [ebp - 0xd0], eax
jle 0x10034405
mov dword [ebp - 0x174], 1
jmp 0x1003440c
and dword [ebp - 0x174], 0
mov eax, dword [ebp - 0x174]
mov dword [ebp - 0x1fc], eax
jmp 0x10034171
jmp 0x100340e8
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xe8]
call fcn.1000c1b9
and dword [ebp - 0x54], 0
push 3
lea ecx, [ebp - 0x308]
call fcn.1000c137
mov dword [ebp - 4], 0xf
mov dword [ebp - 0x4c], 0x39beb064
push 1
lea eax, [ebp - 0x3c4]
push eax
push 0
push 0
push 0x6cb3
push 0x7f14
push 0x75a9
push 0x773
push 0x11f7
push 0x23c4
lea eax, [ebp - 0x308]
push eax
call fcn.10030e55
add esp, 0x2c
mov dword [ebp - 0x4c], 0
jmp 0x1003449a
mov eax, dword [ebp - 0x4c]
inc eax
mov dword [ebp - 0x4c], eax
cmp dword [ebp - 0x4c], 2
jg 0x100344dc
mov byte [ebp - 0x29], 0
lea eax, [ebp - 0x29]
push eax
push 0x5bbb
push 0
push 0x7160
push 1
push 0x32c8
call fcn.1003c66a
add esp, 0x18
lea eax, [ebp - 0x308]
push eax
lea eax, [ebp - 0x4c]
push eax
push 0
push 0
call fcn.1003b3bf
add esp, 0x10
jmp 0x10034493
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x308]
call fcn.1000c1b9
jmp 0x100346a9
mov eax, dword [ebp - 0x30]
mov eax, dword [eax + 0xc]
lea eax, [eax*4 + 4]
push eax
mov eax, dword [ebp - 0x30]
push dword [eax + 8]
call fcn.10051a93
pop ecx
pop ecx
mov ecx, dword [ebp - 0x30]
mov dword [ecx + 8], eax
push 1
lea ecx, [ebp - 0x3a0]
call fcn.1000c137
mov dword [ebp - 4], 0x10
push 0
lea eax, [ebp - 0x3a0]
push eax
push 0x5cb0
lea eax, [ebp - 0x334]
push eax
call fcn.1003a71c
add esp, 0x10
mov byte [ebp - 0x35], 0
push 0x49f5
lea eax, [ebp - 0x35]
push eax
push 0
push 0x7fba
push 0x4f0a
push 0
call fcn.1003c193
add esp, 0x18
mov byte [ebp - 0x31], 0
push 1
lea eax, [ebp - 0x31]
push eax
push 0x10cb
push 1
call fcn.1002c91c
add esp, 0x10
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x3a0]
call fcn.1000c1b9
mov eax, dword [ebp - 0x30]
cmp dword [eax + 8], 0
jne 0x1003464c
mov dword [ebp - 0x184], 0
mov dword [ebp - 0x218], 0x845d811f
mov dword [ebp - 0x17c], 0xffffffff
lea eax, [ebp - 0x184]
push eax
push 0
push 0x62ee
lea eax, [ebp - 0x17c]
push eax
push 0x60a
lea eax, [ebp - 0x218]
push eax
push 0x487a
push 0x5790
push 1
call fcn.100351fe
add esp, 0x24
push 1
push 0xfa5
push 1
push 0
push 0x7fe0
push 0x4590
lea eax, [ebp - 0x17c]
push eax
push 0x6fa1
lea eax, [ebp - 0x184]
push eax
push 0x4b4c
push 0x180
call fcn.10030e55
add esp, 0x2c
lea eax, [ebp - 0x54]
push eax
push 1
push 0
push 0x4ac7
call fcn.1003077c
add esp, 0x10
push 0
push 0x5d69
call fcn.10031449
pop ecx
pop ecx
jmp 0x100346a9
lea eax, [ebp - 0x220]
push eax
lea eax, [ebp - 0x228]
push eax
push dword [ebp - 0xa0]
push dword [ebp - 0x40]
lea eax, [ebp - 0xc4]
push eax
push dword [ebp - 0x30]
call fcn.1002a727
add esp, 0x18
lea eax, [ebp - 0x54]
push eax
lea eax, [ebp - 0x220]
push eax
lea eax, [ebp - 0x228]
push eax
push dword [ebp - 0xa0]
lea eax, [ebp - 0xc4]
push eax
call fcn.1002b08f
add esp, 0x14
cmp dword [ebp - 0x54], 0
jne 0x100346a4
jmp 0x100346a9
jmp 0x1003377c
mov dword [ebp - 0x64], 0x5b0e446d
mov dword [ebp - 0x3a4], 0xbbfad0d7
mov dword [ebp - 0x19c], 0
mov dword [ebp - 0xcc], 0
mov dword [ebp - 0x1f4], 4
mov dword [ebp - 0x1f0], 4
mov dword [ebp - 0x1ec], 4
mov dword [ebp - 0x1e8], 4
mov dword [ebp - 0xa8], 0
jmp 0x1003470f
mov eax, dword [ebp - 0xa8]
inc eax
mov dword [ebp - 0xa8], eax
cmp dword [ebp - 0xa8], 1
jge 0x1003472b
mov eax, dword [ebp - 0xa8]
mov dword [ebp + eax*4 - 0x1ac], 0x767c8fa1
jmp 0x10034702
cmp dword [ebp - 0x64], 0
jl 0x1003473d
mov dword [ebp - 0x18c], 1
jmp 0x10034744
and dword [ebp - 0x18c], 0
push 4
pop eax
imul eax, eax, 3
mov eax, dword [ebp + eax - 0x1f4]
add eax, dword [ebp - 0x18c]
push 4
pop ecx
imul ecx, ecx, 3
cmp eax, dword [ebp + ecx - 0x1f4]
jl 0x10034772
mov dword [ebp - 0x230], 1
jmp 0x10034779
and dword [ebp - 0x230], 0
mov eax, dword [ebp - 0x64]
mov dword [ebp - 0x33c], eax
mov eax, dword [ebp - 0xcc]
mov dword [ebp - 0x64], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0xcc]
mov dword [ebp + eax - 0x1ac], ecx
push 4
pop eax
imul eax, eax, 3
mov eax, dword [ebp + eax - 0x1f4]
mov dword [ebp - 0x3a8], eax
mov eax, dword [ebp - 0xcc]
mov dword [ebp - 0x344], eax
cmp dword [ebp - 0x19c], 5
jae 0x100347d2
mov dword [ebp - 0x194], 1
jmp 0x100347d9
and dword [ebp - 0x194], 0
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0x1f4], 0x5b79f3ff
imul eax, dword [ebp - 0x194], 0x5b79f3ff
test eax, eax
je 0x10034814
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x1f4], 0
je 0x10034814
mov dword [ebp - 0x1a4], 1
jmp 0x1003481b
and dword [ebp - 0x1a4], 0
mov eax, dword [ebp - 0x19c]
cmp dword [ebp - 0x1a4], eax
jle 0x10034835
mov dword [ebp - 0x1b4], 1
jmp 0x1003483c
and dword [ebp - 0x1b4], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x1ac]
cmp dword [ebp - 0x1b4], eax
jge 0x1003485d
mov dword [ebp - 0x1bc], 1
jmp 0x10034864
and dword [ebp - 0x1bc], 0
mov eax, dword [ebp - 0x1bc]
add eax, 0xfffc
cmp eax, 7
jne 0x10034880
mov dword [ebp - 0x238], 1
jmp 0x10034887
and dword [ebp - 0x238], 0
mov eax, 0x7348
sub eax, 0x89c1
mov dword [ebp - 0x64], eax
mov eax, dword [ebp - 0x240]
mov ecx, dword [ebp - 0x54]
mov dword [eax], ecx
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret