Function at 0x1003092f
Capabilities:
Parse pe header

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x10069b43
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
push ecx
sub esp, 0x5d4
push ebx
push esi
push edi
mov dword [ebp - 0x10], esp
and dword [ebp - 0x38], 0
push 2
lea ecx, [ebp - 0x94]
call fcn.100336b5
and dword [ebp - 4], 0
mov dword [ebp - 0xb0], 0x431fadac
mov dword [ebp - 0x33c], 0xfffffff9
mov dword [ebp - 0x3bc], 0
mov dword [ebp - 0x194], 0xfffffffc
push 3
lea ecx, [ebp - 0x4a0]
call fcn.100336b5
mov byte [ebp - 4], 1
mov dword [ebp - 0x3f4], 6
mov dword [ebp - 0x24], 0
jmp 0x100309bc
mov eax, dword [ebp - 0x24]
inc eax
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 3
jge 0x100309d2
mov eax, dword [ebp - 0x24]
mov dword [ebp + eax*4 - 0x428], 2
jmp 0x100309b5
lea eax, [ebp - 0x94]
push eax
lea eax, [ebp - 0x24]
push eax
call fcn.1002f8e3
pop ecx
pop ecx
push 0x2a6f
push 0x1d97
lea eax, [ebp - 0x24]
push eax
push 0x836
push 1
push 0x6a49
push 0
lea eax, [ebp - 0x4a0]
push eax
call fcn.100255ff
add esp, 0x20
mov dword [ebp - 0x24], 0
jmp 0x10030a1f
mov eax, dword [ebp - 0x24]
inc eax
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 2
jge 0x10030a35
mov eax, dword [ebp - 0x24]
mov dword [ebp + eax*4 - 0x4d4], 1
jmp 0x10030a18
push 0
lea ecx, [ebp - 0x94]
call fcn.10033753
mov dword [eax], 2
jmp 0x10030a6e
push 0
lea ecx, [ebp - 0x94]
call fcn.10033753
mov dword [ebp - 0x1f0], eax
mov eax, dword [ebp - 0x1f0]
mov eax, dword [eax]
dec eax
mov ecx, dword [ebp - 0x1f0]
mov dword [ecx], eax
push 0
lea ecx, [ebp - 0x94]
call fcn.10033753
cmp dword [eax], 0
jl 0x10030b6f
mov dword [ebp - 0x3b4], 0xfffffffd
push 0
lea ecx, [ebp - 0x94]
call fcn.10033753
mov eax, dword [eax]
cmp dword [ebp + eax*4 - 0x428], 0
jne 0x10030b47
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0x428], 0xce4a
jl 0x10030ac9
mov dword [ebp - 0x32c], 1
jmp 0x10030ad0
and dword [ebp - 0x32c], 0
cmp dword [ebp - 0x32c], 0x7c4d
jle 0x10030ae8
mov dword [ebp - 0x410], 1
jmp 0x10030aef
and dword [ebp - 0x410], 0
push 1
lea ecx, [ebp - 0x94]
call fcn.10033753
push 0
lea ecx, [ebp - 0x94]
call fcn.10033753
mov eax, dword [eax]
mov eax, dword [ebp + eax*4 - 0x428]
mov dword [ebp - 0x54c], eax
push 0
lea ecx, [ebp - 0x94]
call fcn.10033753
push 0
lea ecx, [ebp - 0x94]
call fcn.10033753
mov eax, dword [eax]
cmp dword [ebp + eax*4 - 0x428], 0
jne 0x10030b47
and dword [ebp - 0x334], 0
jmp 0x10030b51
mov dword [ebp - 0x334], 1
mov eax, dword [ebp - 0x334]
mov dword [ebp - 0xb0], eax
lea eax, [ebp - 0x3b4]
push eax
call fcn.1002f92b
pop ecx
jmp 0x10030a4a
mov eax, dword [ebp - 0x33c]
cmp eax, dword [ebp - 0x33c]
je 0x10030b89
mov dword [ebp - 0x344], 1
jmp 0x10030b90
and dword [ebp - 0x344], 0
mov eax, dword [ebp - 0x344]
mov dword [ebp - 0x3bc], eax
push 1
lea ecx, [ebp - 0x94]
call fcn.10033753
cmp dword [eax], 0x3222
jge 0x10030bd5
push 1
lea ecx, [ebp - 0x94]
call fcn.10033753
cmp dword [eax], 0
jne 0x10030bd5
cmp dword [ebp - 0x194], 0
jne 0x10030bd5
and dword [ebp - 0x324], 0
jmp 0x10030bdf
mov dword [ebp - 0x324], 1
cmp dword [ebp - 0x324], 0x50b7f45b
je 0x10030bf7
mov dword [ebp - 0x184], 1
jmp 0x10030bfe
and dword [ebp - 0x184], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x428]
cmp eax, dword [ebp - 0x184]
jl 0x10030c1f
mov dword [ebp - 0x274], 1
jmp 0x10030c26
and dword [ebp - 0x274], 0
push 0
lea ecx, [ebp - 0x94]
call fcn.10033753
mov eax, dword [eax]
cmp eax, dword [ebp - 0x274]
jne 0x10030c49
mov dword [ebp - 0x18c], 1
jmp 0x10030c50
and dword [ebp - 0x18c], 0
mov eax, dword [ebp - 0x18c]
neg eax
imul esi, eax, 0x4ce5
push 1
lea ecx, [ebp - 0x94]
call fcn.10033753
mov edi, dword [eax]
sub edi, esi
push 1
lea ecx, [ebp - 0x94]
call fcn.10033753
cmp edi, dword [eax]
jl 0x10030c92
mov eax, 0xffff
test eax, eax
jne 0x10030c92
and dword [ebp - 0x310], 0
jmp 0x10030c9c
mov dword [ebp - 0x310], 1
imul esi, dword [ebp - 0x310], 0x400b
push 0
lea ecx, [ebp - 0x94]
call fcn.10033753
mov dword [eax], esi
push 1
lea ecx, [ebp - 0x4a0]
call fcn.10033753
mov esi, eax
push 1
lea ecx, [ebp - 0x94]
call fcn.10033753
mov eax, dword [eax]
mov dword [esi], eax
mov eax, dword [ebp - 0x194]
cmp eax, dword [ebp - 0xb0]
jl 0x10030cef
mov dword [ebp - 0x278], 1
jmp 0x10030cf6
and dword [ebp - 0x278], 0
mov eax, dword [ebp - 0xb0]
cmp eax, dword [ebp - 0x278]
jl 0x10030d10
mov dword [ebp - 0x19c], 1
jmp 0x10030d17
and dword [ebp - 0x19c], 0
mov eax, dword [ebp - 0x19c]
mov dword [ebp - 0xb0], eax
cmp dword [ebp - 0xb0], 0xfdfda84a
ja 0x10030d3b
mov dword [ebp - 0x2e0], 1
jmp 0x10030d42
and dword [ebp - 0x2e0], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x4d4]
cmp dword [ebp - 0x2e0], eax
je 0x10030d63
mov dword [ebp - 0x1a4], 1
jmp 0x10030d6a
and dword [ebp - 0x1a4], 0
mov eax, dword [ebp - 0x1a4]
mov dword [ebp - 0x3f4], eax
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x4a0]
call fcn.10033737
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x94]
call fcn.10033737
mov dword [ebp - 0x4c], 0x6e83
mov dword [ebp - 0x1bc], 0x5e1abe8f
push 1
lea ecx, [ebp - 0x438]
call fcn.100336b5
mov dword [ebp - 4], 2
push 1
lea ecx, [ebp - 0x4ac]
call fcn.100336b5
mov byte [ebp - 4], 3
mov dword [ebp - 0x4c8], 0x18f0ed69
mov dword [ebp - 0x4c4], 0x18f0ed69
mov dword [ebp - 0x4c0], 0x18f0ed69
mov dword [ebp - 0x4bc], 0x18f0ed69
mov dword [ebp - 0x1cc], 0xffff
mov dword [ebp - 0x558], 0x9d07
lea eax, [ebp - 0x438]
push eax
lea eax, [ebp - 0x2c]
push eax
call fcn.1002f942
pop ecx
pop ecx
mov dword [ebp - 0x2c], 0
jmp 0x10030e28
mov eax, dword [ebp - 0x2c]
inc eax
mov dword [ebp - 0x2c], eax
cmp dword [ebp - 0x2c], 1
jge 0x10030e3e
mov eax, dword [ebp - 0x2c]
mov dword [ebp + eax*4 - 0x400], 0x2bf35dd7
jmp 0x10030e21
push 0x5fb8
push 1
push 0x572d
push 0x15c9
push 0x2bbe
lea eax, [ebp - 0x2c]
push eax
push 0x4d3e
push 0x31a4
push 1
lea eax, [ebp - 0x4ac]
push eax
call fcn.10022780
add esp, 0x28
mov dword [ebp - 0x2c], 0
jmp 0x10030e83
mov eax, dword [ebp - 0x2c]
inc eax
mov dword [ebp - 0x2c], eax
cmp dword [ebp - 0x2c], 3
jge 0x10030e99
mov eax, dword [ebp - 0x2c]
mov dword [ebp + eax*4 - 0x594], 0xffffffff
jmp 0x10030e7c
cmp dword [ebp - 0x4c], 1
jne 0x10030eab
mov dword [ebp - 0x288], 1
jmp 0x10030eb2
and dword [ebp - 0x288], 0
cmp dword [ebp - 0x4c], 0
jne 0x10030ec7
cmp dword [ebp - 0x4c], 0
jne 0x10030ec7
and dword [ebp - 0x280], 0
jmp 0x10030ed1
mov dword [ebp - 0x280], 1
cmp dword [ebp - 0x280], 0x62f6
jle 0x10030ee9
mov dword [ebp - 0x128], 1
jmp 0x10030ef0
and dword [ebp - 0x128], 0
push 0
lea ecx, [ebp - 0x438]
call fcn.10033753
mov ecx, dword [ebp - 0x128]
mov dword [eax], ecx
mov eax, dword [ebp - 0x128]
sub eax, dword [ebp - 0x4c]
cmp eax, 0x94b748ab
jb 0x10030f21
mov dword [ebp - 0x1ac], 1
jmp 0x10030f28
and dword [ebp - 0x1ac], 0
cmp dword [ebp - 0x1ac], 6
jge 0x10030f4f
push 0
lea ecx, [ebp - 0x438]
call fcn.10033753
cmp dword [eax], 0
je 0x10030f4f
mov dword [ebp - 0x338], 1
jmp 0x10030f56
and dword [ebp - 0x338], 0
cmp dword [ebp - 0x338], 0x23cc
je 0x10030f71
cmp dword [ebp - 0x4c], 0
jne 0x10030f71
and dword [ebp - 0x1b4], 0
jmp 0x10030f7b
mov dword [ebp - 0x1b4], 1
mov eax, dword [ebp - 0x4c]
cmp dword [ebp - 0x1b4], eax
jle 0x10030f92
mov dword [ebp - 0x164], 1
jmp 0x10030f99
and dword [ebp - 0x164], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x164]
mov dword [ebp + eax - 0x400], ecx
xor eax, eax
inc eax
cmp eax, 0x9b6cd04c
ja 0x10030fc2
mov dword [ebp - 0x2e8], 1
jmp 0x10030fc9
and dword [ebp - 0x2e8], 0
mov eax, dword [ebp - 0x288]
mov dword [ebp - 0x1bc], eax
mov eax, dword [ebp - 0x1bc]
cmp eax, dword [ebp - 0x2e8]
jge 0x10031001
push 0
lea ecx, [ebp - 0x438]
call fcn.10033753
cmp dword [eax], 0
je 0x10031001
mov dword [ebp - 0x1c4], 1
jmp 0x10031008
and dword [ebp - 0x1c4], 0
mov eax, dword [ebp - 0x4c]
cmp eax, dword [ebp - 0x1c4]
jg 0x1003101f
mov dword [ebp - 0x160], 1
jmp 0x10031026
and dword [ebp - 0x160], 0
push 0
lea ecx, [ebp - 0x4ac]
call fcn.10033753
mov ecx, dword [ebp - 0x160]
mov dword [eax], ecx
cmp dword [ebp - 0x160], 0x1639
je 0x10031053
mov dword [ebp - 0x134], 1
jmp 0x1003105a
and dword [ebp - 0x134], 0
push 4
pop eax
shl eax, 1
mov ecx, dword [ebp - 0x134]
mov dword [ebp + eax - 0x4c8], ecx
cmp dword [ebp - 0x134], 0xd91b
jne 0x10031091
mov dword [ebp - 0x290], 0xffffffff
mov eax, dword [ebp - 0x290]
dec eax
mov dword [ebp - 0x290], eax
jmp 0x100310b9
mov dword [ebp - 0x528], 0xffffffff
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0x594], 0xb481d3ef
mov eax, dword [ebp - 0x1cc]
inc eax
mov dword [ebp - 0x1cc], eax
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x4ac]
call fcn.10033737
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x438]
call fcn.10033737
mov dword [ebp - 0x54], 0xfffffffc
mov dword [ebp - 0x36c], 0xac89d73a
mov dword [ebp - 0x124], 0
jmp 0x10031101
mov eax, dword [ebp - 0x124]
inc eax
mov dword [ebp - 0x124], eax
cmp dword [ebp - 0x124], 3
jge 0x1003111d
mov eax, dword [ebp - 0x124]
mov dword [ebp + eax*4 - 0x5ac], 0xa306
jmp 0x100310f4
mov dword [ebp - 0x54], 0
jmp 0x1003112d
mov eax, dword [ebp - 0x54]
inc eax
mov dword [ebp - 0x54], eax
cmp dword [ebp - 0x54], 1
je 0x100311e9
mov dword [ebp - 0x318], 0x738a
mov dword [ebp - 0x298], 0xdc0e3e76
mov dword [ebp - 0x408], 6
push 1
push 0x8c2
lea eax, [ebp - 0x298]
push eax
push 0x6054
lea eax, [ebp - 0x318]
push eax
push 0
lea eax, [ebp - 0x54]
push eax
call fcn.10027380
add esp, 0x1c
cmp dword [ebp - 0x318], 0x986d6dbc
jae 0x10031195
mov dword [ebp - 0x1d4], 1
jmp 0x1003119c
and dword [ebp - 0x1d4], 0
mov eax, dword [ebp - 0x1d4]
add eax, 0x167c28ca
je 0x100311d7
mov eax, dword [ebp - 0x298]
cmp eax, dword [ebp - 0x408]
jne 0x100311c3
mov dword [ebp - 0x1dc], 1
jmp 0x100311ca
and dword [ebp - 0x1dc], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x5ac]
mov eax, dword [ebp - 0x54]
imul eax, dword [ebp - 0x54]
mov dword [ebp - 0x36c], eax
jmp 0x10031126
mov dword [ebp - 0x18], 0xe83c773
mov dword [ebp - 0x2b8], 0xc7eb2367
mov dword [ebp - 0x418], 0xffffffff
mov dword [ebp - 0x21c], 0xdc705be7
mov dword [ebp - 0x108], 0
jmp 0x10031227
mov eax, dword [ebp - 0x108]
inc eax
mov dword [ebp - 0x108], eax
cmp dword [ebp - 0x108], 3
jge 0x10031243
mov eax, dword [ebp - 0x108]
mov dword [ebp + eax*4 - 0x174], 6
jmp 0x1003121a
mov dword [ebp - 0x18], 0
jmp 0x10031253
mov eax, dword [ebp - 0x18]
inc eax
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 2
jg 0x1003149d
mov dword [ebp - 0x1e4], 7
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x18]
mov ecx, dword [ebp + ecx*4 - 0x174]
imul ecx, dword [ebp + eax - 0x174]
mov eax, dword [ebp - 0x18]
cmp dword [ebp + eax*4 - 0x174], ecx
jg 0x10031297
mov dword [ebp - 0x2f0], 1
jmp 0x1003129e
and dword [ebp - 0x2f0], 0
mov eax, dword [ebp - 0x2f0]
mov dword [ebp - 0x1e4], eax
mov eax, dword [ebp - 0x1e4]
mov dword [ebp - 0x580], eax
push 4
pop eax
shl eax, 1
mov ecx, dword [ebp - 0x18]
cmp ecx, dword [ebp + eax - 0x174]
jge 0x100312d3
mov dword [ebp - 0x2a0], 1
jmp 0x100312da
and dword [ebp - 0x2a0], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x2a0]
sub ecx, dword [ebp + eax - 0x174]
cmp ecx, 0xfffd
jne 0x10031301
mov dword [ebp - 0x1ec], 1
jmp 0x10031308
and dword [ebp - 0x1ec], 0
cmp dword [ebp - 0x1ec], 0x7d0d
jg 0x10031320
mov dword [ebp - 0x330], 1
jmp 0x10031327
and dword [ebp - 0x330], 0
mov eax, dword [ebp - 0x18]
cmp dword [ebp - 0x330], eax
jg 0x1003133e
mov dword [ebp - 0x1f4], 1
jmp 0x10031345
and dword [ebp - 0x1f4], 0
mov eax, dword [ebp - 0x1f4]
mov dword [ebp - 0x2b8], eax
mov eax, dword [ebp - 0x18]
add eax, 0x372ba29f
mov dword [ebp - 0x418], eax
cmp dword [ebp - 0x18], 0x585c
jge 0x10031381
mov eax, dword [ebp - 0x18]
cmp dword [ebp + eax*4 - 0x174], 0
je 0x10031381
mov dword [ebp - 0x2a8], 1
jmp 0x10031388
and dword [ebp - 0x2a8], 0
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp + eax*4 - 0x174]
cmp dword [ebp - 0x2a8], eax
jg 0x100313a6
mov dword [ebp - 0x1fc], 1
jmp 0x100313ad
and dword [ebp - 0x1fc], 0
cmp dword [ebp - 0x1fc], 0x223fa3a9
jg 0x100313c5
mov dword [ebp - 0x2f8], 1
jmp 0x100313cc
and dword [ebp - 0x2f8], 0
mov eax, dword [ebp - 0x18]
cmp dword [ebp - 0x2f8], eax
jl 0x100313e3
mov dword [ebp - 0x204], 1
jmp 0x100313ea
and dword [ebp - 0x204], 0
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x18]
mov ecx, dword [ebp + ecx*4 - 0x174]
imul ecx, dword [ebp - 0x204]
cmp ecx, dword [ebp + eax - 0x174]
jg 0x10031416
mov dword [ebp - 0x2b0], 1
jmp 0x1003141d
and dword [ebp - 0x2b0], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x174]
cmp dword [ebp - 0x2b0], eax
jge 0x10031444
cmp dword [ebp - 0x18], 0
je 0x10031444
mov dword [ebp - 0x20c], 1
jmp 0x1003144b
and dword [ebp - 0x20c], 0
cmp dword [ebp - 0x20c], 0xfffffff9
jg 0x10031460
mov dword [ebp - 0x320], 1
jmp 0x10031467
and dword [ebp - 0x320], 0
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp + eax*4 - 0x174]
cmp eax, dword [ebp - 0x320]
jne 0x10031485
mov dword [ebp - 0x214], 1
jmp 0x1003148c
and dword [ebp - 0x214], 0
mov eax, dword [ebp - 0x214]
mov dword [ebp - 0x21c], eax
jmp 0x1003124c
lea eax, [ebp - 0x2b8]
push eax
lea eax, [ebp - 0x21c]
push eax
call fcn.1002f98a
pop ecx
pop ecx
mov eax, dword [ebp + 8]
mov dword [ebp - 0x12c], eax
mov dword [ebp - 0x78], 6
mov dword [ebp - 0xbc], 0
jmp 0x100314db
mov eax, dword [ebp - 0xbc]
inc eax
mov dword [ebp - 0xbc], eax
cmp dword [ebp - 0xbc], 2
jge 0x100314f7
mov eax, dword [ebp - 0xbc]
mov dword [ebp + eax*4 - 0x15c], 8
jmp 0x100314ce
push 4
pop eax
shl eax, 0
push 4
pop ecx
shl ecx, 0
imul ecx, dword [ebp + ecx - 0x15c], 0xcc48
neg ecx
cmp ecx, dword [ebp + eax - 0x15c]
jle 0x10031525
mov dword [ebp - 0x300], 1
jmp 0x1003152c
and dword [ebp - 0x300], 0
mov eax, dword [ebp - 0x300]
neg eax
cmp eax, 0x495e
jle 0x10031547
mov dword [ebp - 0x224], 1
jmp 0x1003154e
and dword [ebp - 0x224], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x15c]
cmp eax, dword [ebp - 0x224]
jne 0x1003156f
mov dword [ebp - 0x2c0], 1
jmp 0x10031576
and dword [ebp - 0x2c0], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x15c]
cmp eax, dword [ebp - 0x2c0]
je 0x10031597
mov dword [ebp - 0x22c], 1
jmp 0x1003159e
and dword [ebp - 0x22c], 0
cmp dword [ebp - 0x22c], 1
jb 0x100315b3
mov dword [ebp - 0x340], 1
jmp 0x100315ba
and dword [ebp - 0x340], 0
cmp dword [ebp - 0x340], 0x29f58382
jg 0x100315d2
mov dword [ebp - 0x234], 1
jmp 0x100315d9
and dword [ebp - 0x234], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x15c]
mov ecx, dword [ebp - 0x234]
lea eax, [ecx + eax + 0x468632ce]
cmp eax, 0xe75d5f8
je 0x10031606
mov dword [ebp - 0x2c8], 1
jmp 0x1003160d
and dword [ebp - 0x2c8], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x15c]
cmp dword [ebp - 0x2c8], eax
je 0x1003162e
mov dword [ebp - 0x23c], 1
jmp 0x10031635
and dword [ebp - 0x23c], 0
mov eax, dword [ebp - 0x23c]
mov dword [ebp - 0x78], eax
mov dword [ebp - 0x78], 0
jmp 0x1003164e
mov eax, dword [ebp - 0x78]
inc eax
mov dword [ebp - 0x78], eax
cmp dword [ebp - 0x78], 2
jge 0x10031664
mov eax, dword [ebp - 0x78]
mov dword [ebp + eax*4 - 0x15c], 0x46e33a79
jmp 0x10031647
mov eax, dword [ebp - 0x12c]
movzx eax, word [eax]
cmp eax, 0x5a4d
je 0x1003170b
mov dword [ebp - 0x308], 0x7ca0029b
push 1
lea ecx, [ebp - 0x470]
call fcn.100336b5
mov dword [ebp - 4], 4
lea eax, [ebp - 0x470]
push eax
lea eax, [ebp - 0x530]
push eax
call fcn.1002fb29
pop ecx
pop ecx
lea eax, [ebp - 0x308]
push eax
push 0x3b5b
push 0x534
push 1
push 1
push 0x6d98
push 0x7a9b
push 0x3227
push 1
lea eax, [ebp - 0x470]
push eax
call fcn.10022c55
add esp, 0x28
lea eax, [ebp - 0x470]
push eax
lea eax, [ebp - 0x308]
push eax
call fcn.1002fc76
pop ecx
pop ecx
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x470]
call fcn.10033737
xor eax, eax
jmp 0x1003349a
mov dword [ebp - 0x244], 3
mov dword [ebp - 0x154], 0
mov dword [ebp - 0x380], 0
mov dword [ebp - 0x378], 0xa20a2982
mov dword [ebp - 0x44], 8
push 1
lea ecx, [ebp - 0x494]
call fcn.100336b5
mov dword [ebp - 4], 5
mov dword [ebp - 0x390], 0xfffffff8
push 1
lea eax, [ebp - 0x494]
push eax
push 0x6d8e
push 1
push 0x207d
lea eax, [ebp - 0x560]
push eax
push 1
call fcn.10023120
add esp, 0x1c
cmp dword [ebp - 0x244], 0
je 0x10031847
mov dword [ebp - 0x388], 3
mov dword [ebp - 0x44c], 0xfffffffe
mov dword [ebp - 0x3fc], 0xfc4b03e3
mov dword [ebp - 0x3f8], 0x3dda37bb
mov dword [ebp - 0x3ac], 0xef989b1a
lea eax, [ebp - 0x3fc]
push eax
lea eax, [ebp - 0x3ac]
push eax
push 0x53f3
push 0x209b
push 0xebd
push 1
lea eax, [ebp - 0x378]
push eax
push 0x543a
lea eax, [ebp - 0x154]
push eax
push 0x26b0
push 0x54cf
lea eax, [ebp - 0x3f8]
push eax
lea eax, [ebp - 0x380]
push eax
lea eax, [ebp - 0x44c]
push eax
push 0x40ef
push 0x5fc1
push 1
push 0x7f0f
lea eax, [ebp - 0x44]
push eax
lea eax, [ebp - 0x494]
push eax
lea eax, [ebp - 0x388]
push eax
lea eax, [ebp - 0x244]
push eax
push 0x72e0
call fcn.10023a58
add esp, 0x5c
jmp 0x100318ad
mov dword [ebp - 0x404], 0xfffffffc
mov dword [ebp - 0x44], 0
jmp 0x10031861
mov eax, dword [ebp - 0x44]
inc eax
mov dword [ebp - 0x44], eax
cmp dword [ebp - 0x44], 0
jg 0x10031891
lea eax, [ebp - 0x404]
push eax
lea eax, [ebp - 0x390]
push eax
lea eax, [ebp - 0x44]
push eax
lea eax, [ebp - 0x494]
push eax
lea eax, [ebp - 0x154]
push eax
call fcn.1002fdea
add esp, 0x14
jmp 0x1003185a
lea eax, [ebp - 0x44]
push eax
push 1
lea eax, [ebp - 0x154]
push eax
push 0x49b6
push 0
call fcn.1002f5a1
add esp, 0x14
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x494]
call fcn.10033737
lea eax, [ebp + 8]
push eax
push 0x227b
push 1
push 0x1874
push 1
push 0x7b41
push 0x5b7d
push 0x645b
lea eax, [ebp - 0x88]
push eax
push 1
lea eax, [ebp - 0x12c]
push eax
push 0x150e
call fcn.10024288
add esp, 0x30
mov dword [ebp - 0x4dc], 0xc6a5
mov byte [ebp - 0x55], 0
lea eax, [ebp - 0x55]
push eax
call fcn.1002ff90
pop ecx
call fcn.1002ffe3
mov eax, dword [ebp - 0x88]
cmp dword [eax], 0x4550
je 0x1003192c
xor eax, eax
jmp 0x1003349a
mov dword [ebp - 0x40], 1
mov dword [ebp - 0xb4], 0
jmp 0x1003194c
mov eax, dword [ebp - 0xb4]
inc eax
mov dword [ebp - 0xb4], eax
cmp dword [ebp - 0xb4], 3
jge 0x10031968
mov eax, dword [ebp - 0xb4]
mov dword [ebp + eax*4 - 0x5a0], 2
jmp 0x1003193f
mov dword [ebp - 0x40], 0
jmp 0x10031978
mov eax, dword [ebp - 0x40]
dec eax
mov dword [ebp - 0x40], eax
cmp dword [ebp - 0x40], 0xffffffe6
jle 0x1003198e
mov byte [ebp - 0x5e], 0
lea eax, [ebp - 0x5e]
push eax
call fcn.10030024
pop ecx
jmp 0x10031971
mov dword [ebp - 0x40], 0
jmp 0x1003199e
mov eax, dword [ebp - 0x40]
inc eax
mov dword [ebp - 0x40], eax
cmp dword [ebp - 0x40], 3
jge 0x100319b4
mov eax, dword [ebp - 0x40]
mov dword [ebp + eax*4 - 0x5a0], 0x1fe77dd6
jmp 0x10031997
push dword [ebp - 0x88]
push 0x51d9
push 0x842
push 0x22da
lea eax, [ebp - 0xd8]
push eax
push 1
push 0x2a44
push 1
call fcn.100200d3
add esp, 0x20
mov dword [ebp - 0x2d0], 0x489d
mov dword [ebp - 0x464], 0x1000a380
cmp dword [ebp - 0x2d0], 0x4a1e
jle 0x10031aad
and dword [ebp - 0xc4], 0
jmp 0x10031a1b
mov eax, dword [ebp - 0xc4]
inc eax
mov dword [ebp - 0xc4], eax
cmp dword [ebp - 0xc4], 0x79a0
jge 0x10031aad
and dword [ebp - 0xf4], 0
jmp 0x10031a41
mov eax, dword [ebp - 0xf4]
inc eax
mov dword [ebp - 0xf4], eax
cmp dword [ebp - 0xf4], 0x2871
jge 0x10031aa8
and dword [ebp - 0xcc], 0
jmp 0x10031a63
mov eax, dword [ebp - 0xcc]
inc eax
mov dword [ebp - 0xcc], eax
cmp dword [ebp - 0xcc], 0x78c1
jge 0x10031aa6
mov eax, dword [ebp - 0xc4]
and eax, dword [ebp - 0xf4]
and eax, dword [ebp - 0xcc]
cdq
mov dword [ebp - 0x3c8], eax
mov dword [ebp - 0x3c4], edx
push dword [ebp - 0x3c4]
push dword [ebp - 0x3c8]
mov ecx, 0x10612a38
call fcn.100335a0
jmp 0x10031a56
jmp 0x10031a34
jmp 0x10031a0e
mov dword [ebp - 0xfc], 0x7ca0029b
mov dword [ebp - 4], 6
cmp dword [ebp - 0x2d0], 0x4600
jge 0x10031ada
mov edx, dword [ebp - 0x464]
mov ecx, 0x10612a38
call fcn.1003504a
jmp 0x10031af6
or dword [ebp - 4], 0xffffffff
jmp 0x10031b00
push 1
lea ecx, [ebp - 0x368]
call fcn.100336b5
mov dword [ebp - 4], 8
lea eax, [ebp - 0x4f4]
push eax
lea eax, [ebp - 0x368]
push eax
push 0x6531
push 0x6006
push 1
push 1
call fcn.10024f39
add esp, 0x18
mov eax, dword [ebp - 0xfc]
mov dword [ebp - 0x398], eax
push 0
lea ecx, [ebp - 0x368]
call fcn.10033753
mov eax, dword [eax]
neg eax
mov dword [ebp - 0x40c], eax
mov eax, dword [ebp - 0xfc]
inc eax
mov dword [ebp - 0xfc], eax
mov eax, dword [ebp - 0x398]
cmp eax, dword [ebp - 0x40c]
jg 0x10031b82
mov dword [ebp - 0x24c], 1
jmp 0x10031b89
and dword [ebp - 0x24c], 0
mov esi, dword [ebp - 0x24c]
neg esi
push 0
lea ecx, [ebp - 0x368]
call fcn.10033753
cmp esi, dword [eax]
je 0x10031bae
mov dword [ebp - 0x328], 1
jmp 0x10031bb5
and dword [ebp - 0x328], 0
push 0
lea ecx, [ebp - 0x368]
call fcn.10033753
mov ecx, dword [ebp - 0x328]
mov dword [eax], ecx
lea eax, [ebp - 0x368]
push eax
lea eax, [ebp - 0xfc]
push eax
call fcn.1003013c
pop ecx
pop ecx
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x368]
call fcn.10033737
cmp dword [ebp - 0xd8], 0
jne 0x10031bfe
xor eax, eax
jmp 0x1003349a
mov dword [ebp - 0x5c], 0
push 2
lea ecx, [ebp - 0x150]
call fcn.100336b5
mov dword [ebp - 4], 9
mov dword [ebp - 0x14], 0x10c13fe6
mov dword [ebp - 0x80], 0x5f5b1b6f
mov dword [ebp - 0xac], 1
mov dword [ebp - 0x198], 0xb4709ba8
mov dword [ebp - 0x7c], 0x5c7d
mov dword [ebp - 0x3b8], 0xfffffff6
push 0x1d49
push 0x372b
push 0x561d
push 1
lea eax, [ebp - 0x30]
push eax
push 1
lea eax, [ebp - 0x150]
push eax
call fcn.100253b6
add esp, 0x1c
mov dword [ebp - 0x30], 0
jmp 0x10031c82
mov eax, dword [ebp - 0x30]
inc eax
mov dword [ebp - 0x30], eax
cmp dword [ebp - 0x30], 1
jge 0x10031c95
mov eax, dword [ebp - 0x30]
mov dword [ebp + eax*4 - 0x20], 6
jmp 0x10031c7b
mov dword [ebp - 0x30], 0
jmp 0x10031ca5
mov eax, dword [ebp - 0x30]
inc eax
mov dword [ebp - 0x30], eax
cmp dword [ebp - 0x30], 3
jge 0x10031cbb
mov eax, dword [ebp - 0x30]
mov dword [ebp + eax*4 - 0x488], 1
jmp 0x10031c9e
cmp dword [ebp - 0x5c], 0
je 0x10031d92
cmp dword [ebp - 0x5c], 0
jne 0x10031d38
mov eax, dword [ebp - 0x5c]
mov dword [ebp - 0x13c], eax
push 1
lea ecx, [ebp - 0x150]
call fcn.10033753
mov ecx, dword [ebp - 0x13c]
mov dword [eax], ecx
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x13c]
mov dword [ebp + eax - 0x20], ecx
cmp dword [ebp - 0x13c], 6
jg 0x10031d0e
mov dword [ebp - 0x254], 1
jmp 0x10031d15
and dword [ebp - 0x254], 0
mov eax, dword [ebp - 0x5c]
mov dword [ebp - 0x4fc], eax
mov eax, dword [ebp - 0x254]
mov dword [ebp - 0x14], eax
mov eax, dword [ebp - 0x14]
cmp eax, dword [ebp - 0x5c]
jl 0x10031d38
and dword [ebp - 0x2d8], 0
jmp 0x10031d42
mov dword [ebp - 0x2d8], 1
mov eax, dword [ebp - 0x5c]
cmp dword [ebp - 0x2d8], eax
jge 0x10031d59
mov dword [ebp - 0x25c], 1
jmp 0x10031d60
and dword [ebp - 0x25c], 0
mov eax, dword [ebp - 0x25c]
mov dword [ebp - 0x80], eax
mov eax, dword [ebp - 0x80]
mov dword [ebp - 0xac], eax
push 4
pop eax
shl eax, 1
mov ecx, dword [ebp - 0xac]
cmp ecx, dword [ebp + eax - 0x488]
jle 0x10031d92
mov dword [ebp - 0x264], 1
jmp 0x10031d99
and dword [ebp - 0x264], 0
cmp dword [ebp - 0x264], 0xfffffff6
jne 0x10031dae
mov dword [ebp - 0x17c], 1
jmp 0x10031db5
and dword [ebp - 0x17c], 0
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x488]
add eax, dword [ebp - 0x17c]
mov dword [ebp - 0x198], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x20]
mov dword [ebp - 0xac], eax
cmp dword [ebp - 0xac], 0
je 0x10031e04
push 1
lea ecx, [ebp - 0x150]
call fcn.10033753
cmp dword [eax], 0
je 0x10031e04
mov dword [ebp - 0x188], 1
jmp 0x10031e0b
and dword [ebp - 0x188], 0
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0x488], 0
jle 0x10031e26
mov dword [ebp - 0x180], 1
jmp 0x10031e2d
and dword [ebp - 0x180], 0
cmp dword [ebp - 0x180], 1
ja 0x10031e42
mov dword [ebp - 0x3a0], 1
jmp 0x10031e49
and dword [ebp - 0x3a0], 0
mov eax, dword [ebp - 0x5c]
mov dword [ebp - 0x504], eax
mov dword [ebp - 0x80], 0xf0e4f200
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x80]
cmp ecx, dword [ebp + eax - 0x20]
jne 0x10031e74
mov dword [ebp - 0x190], 1
jmp 0x10031e7b
and dword [ebp - 0x190], 0
mov eax, dword [ebp - 0x188]
cmp eax, dword [ebp - 0x190]
jg 0x10031e95
mov dword [ebp - 0x460], 1
jmp 0x10031e9c
and dword [ebp - 0x460], 0
push 1
lea ecx, [ebp - 0x150]
call fcn.10033753
mov eax, dword [ebp - 0x198]
mov dword [ebp - 0x50c], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x20]
mov dword [ebp - 0x514], eax
push 0xfffffffffffffffe
pop eax
sub eax, 0x631af665
je 0x10031ee1
cmp dword [ebp - 0x7c], 0
je 0x10031ee1
mov dword [ebp - 0x1a0], 1
jmp 0x10031ee8
and dword [ebp - 0x1a0], 0
mov eax, dword [ebp - 0x14]
cmp dword [ebp - 0x1a0], eax
jg 0x10031f06
push 8
pop eax
test eax, eax
je 0x10031f06
mov dword [ebp - 0x1a8], 1
jmp 0x10031f0d
and dword [ebp - 0x1a8], 0
cmp dword [ebp - 0x1a8], 0xc8fa1b44
jbe 0x10031f25
mov dword [ebp - 0x168], 1
jmp 0x10031f2c
and dword [ebp - 0x168], 0
push 0
lea ecx, [ebp - 0x150]
call fcn.10033753
mov ecx, dword [ebp - 0x168]
mov dword [eax], ecx
imul eax, dword [ebp - 0x168], 0x9a1d
test eax, eax
je 0x10032435
mov dword [ebp - 0x114], 1
mov dword [ebp - 0x11c], 0xf73ecb6a
mov dword [ebp - 0xd4], 0
jmp 0x10031f80
mov eax, dword [ebp - 0xd4]
inc eax
mov dword [ebp - 0xd4], eax
cmp dword [ebp - 0xd4], 4
jge 0x10031f9c
mov eax, dword [ebp - 0xd4]
mov dword [ebp + eax*4 - 0x5c4], 0xfffffffc
jmp 0x10031f73
mov dword [ebp - 0x14], 0
jmp 0x10031fac
mov eax, dword [ebp - 0x14]
inc eax
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 0
jg 0x1003240d
mov dword [ebp - 0x1b0], 0x4c2e
mov dword [ebp - 0x3a8], 0x1000a3e8
cmp dword [ebp - 0x1b0], 0x4d0d
jle 0x100320b9
and dword [ebp - 0xe4], 0
jmp 0x10031ff0
mov eax, dword [ebp - 0xe4]
inc eax
mov dword [ebp - 0xe4], eax
cmp dword [ebp - 0xe4], 0x7fdf
jge 0x100320b9
and dword [ebp - 0x104], 0
jmp 0x10032016
mov eax, dword [ebp - 0x104]
inc eax
mov dword [ebp - 0x104], eax
cmp dword [ebp - 0x104], 0x5d58
jge 0x100320b4
and dword [ebp - 0xdc], 0
jmp 0x1003203c
mov eax, dword [ebp - 0xdc]
inc eax
mov dword [ebp - 0xdc], eax
cmp dword [ebp - 0xdc], 0x3505
jge 0x100320af
and dword [ebp - 0x10c], 0
jmp 0x1003205e
mov eax, dword [ebp - 0x10c]
inc eax
mov dword [ebp - 0x10c], eax
cmp dword [ebp - 0x10c], 0x4d64
jge 0x100320ad
mov eax, dword [ebp - 0x104]
cdq
idiv dword [ebp - 0xdc]
mov eax, edx
cdq
idiv dword [ebp - 0x10c]
mov eax, dword [ebp - 0xe4]
sub eax, edx
cdq
mov dword [ebp - 0x3d4], eax
mov dword [ebp - 0x3d0], edx
push dword [ebp - 0x3d0]
push dword [ebp - 0x3d4]
mov ecx, 0x10612a38
call fcn.100335a0
jmp 0x10032051
jmp 0x1003202f
jmp 0x10032009
jmp 0x10031fe3
mov dword [ebp - 0x144], 0xe11b4c51
mov byte [ebp - 4], 0xa
cmp dword [ebp - 0x1b0], 0x4aec
jge 0x100320e3
mov edx, dword [ebp - 0x3a8]
mov ecx, 0x10612a38
call fcn.1003504a
jmp 0x100320ff
mov dword [ebp - 4], 9
jmp 0x1003210f
mov dword [ebp - 0x41c], 1
push dword [ebp - 0x14]
lea ecx, [ebp - 0x150]
call fcn.10033753
mov esi, eax
push dword [ebp - 0x14]
lea ecx, [ebp - 0x150]
call fcn.10033753
mov eax, dword [eax]
cmp eax, dword [esi]
jge 0x10032149
mov dword [ebp - 0x1b8], 1
jmp 0x10032150
and dword [ebp - 0x1b8], 0
mov eax, dword [ebp - 0x114]
cmp eax, dword [ebp - 0x1b8]
je 0x10032170
mov eax, 0xd0bc
test eax, eax
je 0x10032170
cmp dword [ebp - 0xac], 0
jne 0x1003218c
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x488], 0
je 0x1003218c
mov dword [ebp - 0x1c0], 1
jmp 0x10032193
and dword [ebp - 0x1c0], 0
mov eax, dword [ebp - 0x114]
cmp dword [ebp - 0x1c0], eax
jl 0x100321aa
cmp dword [ebp - 0x11c], 0
je 0x100321bf
mov eax, 0x91de
test eax, eax
je 0x100321bf
mov dword [ebp - 0x1c8], 1
jmp 0x100321c6
and dword [ebp - 0x1c8], 0
cmp dword [ebp - 0x1c8], 0xc23f
jge 0x100321de
mov dword [ebp - 0x1d0], 1
jmp 0x100321e5
and dword [ebp - 0x1d0], 0
cmp dword [ebp - 0x1d0], 0xfffffffd
jle 0x100321fa
mov dword [ebp - 0x1d8], 1
jmp 0x10032201
and dword [ebp - 0x1d8], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x20]
cmp dword [ebp - 0x1d8], eax
jne 0x1003221f
mov dword [ebp - 0x1e0], 1
jmp 0x10032226
and dword [ebp - 0x1e0], 0
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp + eax*4 - 0x20]
cmp dword [ebp - 0x1e0], eax
je 0x10032241
mov dword [ebp - 0x1e8], 1
jmp 0x10032248
and dword [ebp - 0x1e8], 0
push 0
lea ecx, [ebp - 0x150]
call fcn.10033753
mov eax, dword [eax]
cmp eax, dword [ebp - 0x1e8]
jl 0x1003226b
mov dword [ebp - 0x178], 1
jmp 0x10032272
and dword [ebp - 0x178], 0
mov eax, dword [ebp - 0x178]
mov dword [ebp - 0x114], eax
cmp dword [ebp - 0x114], 0
jne 0x100322a2
push 1
lea ecx, [ebp - 0x150]
call fcn.10033753
cmp dword [eax], 0
jne 0x100322a2
and dword [ebp - 0x1f8], 0
jmp 0x100322ac
mov dword [ebp - 0x1f8], 1
mov eax, dword [ebp - 0x1f8]
mov dword [ebp - 0x144], eax
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp + eax*4 - 0x20]
cmp eax, dword [ebp - 0x144]
je 0x100322d3
mov dword [ebp - 0x414], 1
jmp 0x100322da
and dword [ebp - 0x414], 0
cmp dword [ebp - 0x11c], 0
jge 0x100322ef
mov dword [ebp - 0x3b0], 1
jmp 0x100322f6
and dword [ebp - 0x3b0], 0
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp + eax*4 - 0x20]
mov dword [ebp - 0x51c], eax
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp + eax*4 - 0x20]
mov dword [ebp - 0x524], eax
mov eax, dword [ebp - 0x14]
cmp dword [ebp + eax*4 - 0x20], 0
jne 0x1003232c
mov eax, 0x15d1
test eax, eax
jne 0x1003232c
and dword [ebp - 0x200], 0
jmp 0x10032336
mov dword [ebp - 0x200], 1
mov eax, dword [ebp - 0x14]
mov esi, dword [ebp + eax*4 - 0x20]
push dword [ebp - 0x14]
lea ecx, [ebp - 0x150]
call fcn.10033753
mov eax, dword [eax]
add eax, dword [ebp - 0x200]
cmp eax, esi
jl 0x10032363
mov dword [ebp - 0x458], 1
jmp 0x1003236a
and dword [ebp - 0x458], 0
mov eax, dword [ebp - 0x3b8]
mov dword [ebp - 0x52c], eax
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp + eax*4 - 0x20]
mov dword [ebp - 0x534], eax
push 4
pop eax
shl eax, 1
mov ecx, dword [ebp - 0x144]
cmp ecx, dword [ebp + eax - 0x5c4]
je 0x100323a3
mov dword [ebp - 0x208], 1
jmp 0x100323aa
and dword [ebp - 0x208], 0
mov eax, dword [ebp - 0x11c]
add eax, dword [ebp - 0x208]
cmp eax, 0x7e38
jl 0x100323c9
mov dword [ebp - 0x210], 1
jmp 0x100323d0
and dword [ebp - 0x210], 0
mov eax, dword [ebp - 0x210]
mov dword [ebp - 0x11c], eax
push 0x128a
lea eax, [ebp - 0x41c]
push eax
push 0x67db
push 0x523b
push 1
push 0x54f7
push 1
push 0x37d
call fcn.100255ff
add esp, 0x20
jmp 0x10031fa5
mov dword [ebp - 0x7c], 0
jmp 0x1003241d
mov eax, dword [ebp - 0x7c]
inc eax
mov dword [ebp - 0x7c], eax
cmp dword [ebp - 0x7c], 0x10
je 0x10032433
mov byte [ebp - 0x4d], 0
lea eax, [ebp - 0x4d]
push eax
call fcn.100301bc
pop ecx
jmp 0x10032416
jmp 0x10032497
mov dword [ebp - 0x3c0], 0xbad2cc01
mov dword [ebp - 0x450], 0xbbfb6feb
push 0x45a7
push 1
lea eax, [ebp - 0x7c]
push eax
lea eax, [ebp - 0x80]
push eax
push 1
push 0x785a
push 0x5e17
call fcn.100265d2
add esp, 0x1c
cmp dword [ebp - 0x3c0], 0x4779cf81
jne 0x10032484
mov dword [ebp - 0x218], 1
jmp 0x1003248b
and dword [ebp - 0x218], 0
mov eax, dword [ebp - 0x218]
mov dword [ebp - 0x450], eax
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x150]
call fcn.10033737
push 0x2505
push 0x5cfc
push 0x1d32
push 0x412b
push 1
push 0x75be
push 0x2244
push 0x25a0
push 0x1f93
lea eax, [ebp - 0x53c]
push eax
lea eax, [ebp - 0x38]
push eax
lea eax, [ebp - 0x12c]
push eax
push 0x421b
push 0x141d
push 1
lea eax, [ebp - 0xd8]
push eax
push 0x4c7f
lea eax, [ebp - 0x88]
push eax
call fcn.100266ae
add esp, 0x48
mov dword [ebp - 0x28], 0xfffffffe
mov dword [ebp - 0x70], 0
mov dword [ebp - 0x220], 0x1054
mov dword [ebp - 0x3cc], 0x1000a46c
cmp dword [ebp - 0x220], 0x11b1
jle 0x100325e3
and dword [ebp - 0xf8], 0
jmp 0x10032551
mov eax, dword [ebp - 0xf8]
inc eax
mov dword [ebp - 0xf8], eax
cmp dword [ebp - 0xf8], 0x283e
jge 0x100325e3
and dword [ebp - 0xf0], 0
jmp 0x10032577
mov eax, dword [ebp - 0xf0]
inc eax
mov dword [ebp - 0xf0], eax
cmp dword [ebp - 0xf0], 0x3050
jge 0x100325de
and dword [ebp - 0x118], 0
jmp 0x10032599
mov eax, dword [ebp - 0x118]
inc eax
mov dword [ebp - 0x118], eax
cmp dword [ebp - 0x118], 0x2816
jge 0x100325dc
mov eax, dword [ebp - 0xf0]
sub eax, dword [ebp - 0x118]
xor eax, dword [ebp - 0xf8]
cdq
mov dword [ebp - 0x3e0], eax
mov dword [ebp - 0x3dc], edx
push dword [ebp - 0x3dc]
push dword [ebp - 0x3e0]
mov ecx, 0x10612a38
call fcn.100335a0
jmp 0x1003258c
jmp 0x1003256a
jmp 0x10032544
mov dword [ebp - 4], 0xc
cmp dword [ebp - 0x220], 0xe14
jge 0x10032606
mov edx, dword [ebp - 0x3cc]
mov ecx, 0x10612a38
call fcn.1003504a
jmp 0x10032622
or dword [ebp - 4], 0xffffffff
jmp 0x1003262c
mov dword [ebp - 0x110], 0
jmp 0x10032645
mov eax, dword [ebp - 0x110]
inc eax
mov dword [ebp - 0x110], eax
cmp dword [ebp - 0x110], 2
jge 0x10032661
mov eax, dword [ebp - 0x110]
mov dword [ebp + eax*4 - 0x35c], 0xffffffff
jmp 0x10032638
mov dword [ebp - 0x28], 0xfffffffa
jmp 0x10032671
mov eax, dword [ebp - 0x28]
inc eax
mov dword [ebp - 0x28], eax
cmp dword [ebp - 0x28], 0x1c
jne 0x1003272a
push 2
lea ecx, [ebp - 0x4b8]
call fcn.100336b5
mov dword [ebp - 4], 0xe
mov dword [ebp - 0xa4], 0x446df37d
mov dword [ebp - 0x100], 0
jmp 0x100326b2
mov eax, dword [ebp - 0x100]
inc eax
mov dword [ebp - 0x100], eax
cmp dword [ebp - 0x100], 2
jge 0x100326d4
push dword [ebp - 0x100]
lea ecx, [ebp - 0x4b8]
call fcn.10033753
mov dword [eax], 0xfffffffd
jmp 0x100326a5
mov dword [ebp - 0xa4], 0
jmp 0x100326ed
mov eax, dword [ebp - 0xa4]
inc eax
mov dword [ebp - 0xa4], eax
cmp dword [ebp - 0xa4], 1
jg 0x10032716
lea eax, [ebp - 0x28]
push eax
lea eax, [ebp - 0xa4]
push eax
lea eax, [ebp - 0x4b8]
push eax
lea eax, [ebp - 0x70]
push eax
call fcn.100301e5
add esp, 0x10
jmp 0x100326e0
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x4b8]
call fcn.10033737
jmp 0x1003266a
mov dword [ebp - 0x70], 1
jmp 0x1003273a
mov eax, dword [ebp - 0x70]
dec eax
mov dword [ebp - 0x70], eax
cmp dword [ebp - 0x70], 0
jl 0x10032b43
mov dword [ebp - 0x228], 0x5e24
mov dword [ebp - 0x3d8], 0x1000a4d0
cmp dword [ebp - 0x228], 0x5e5e
jle 0x1003284b
push 0x6dd
call dword [sym.imp.USER32.dll_HideCaret]
and dword [ebp - 0xec], 0
jmp 0x10032789
mov eax, dword [ebp - 0xec]
inc eax
mov dword [ebp - 0xec], eax
cmp dword [ebp - 0xec], 0x6e09
jge 0x1003284b
and dword [ebp - 0x120], 0
jmp 0x100327af
mov eax, dword [ebp - 0x120]
inc eax
mov dword [ebp - 0x120], eax
cmp dword [ebp - 0x120], 0x3baf
jge 0x10032846
and dword [ebp - 0xe8], 0
jmp 0x100327d5
mov eax, dword [ebp - 0xe8]
inc eax
mov dword [ebp - 0xe8], eax
cmp dword [ebp - 0xe8], 0x654b
jge 0x10032841
mov eax, dword [ebp - 0x120]
cdq
idiv dword [ebp - 0xe8]
and edx, dword [ebp - 0xec]
mov eax, edx
cdq
mov dword [ebp - 0x3ec], eax
mov dword [ebp - 0x3e8], edx
push dword [ebp - 0x3e8]
push dword [ebp - 0x3ec]
lea ecx, [ebp - 0x5e4]
call fcn.1000dd90
pop ecx
pop ecx
mov dword [ebp - 0x42c], eax
mov ecx, dword [ebp - 0x42c]
call fcn.10033580
push eax
call fcn.10053d16
pop ecx
lea ecx, [ebp - 0x5e4]
call fcn.10033576
jmp 0x100327c8
jmp 0x100327a2
jmp 0x1003277c
mov dword [ebp - 0x260], 0x4f0e4f20
mov dword [ebp - 4], 0xf
cmp dword [ebp - 0x228], 0x5bc1
jge 0x10032874
push dword [ebp - 0x3d8]
call fcn.10053d16
pop ecx
jmp 0x10032890
or dword [ebp - 4], 0xffffffff
jmp 0x1003289a
push 0x451e
push 1
lea eax, [ebp - 0x28]
push eax
push 0x4139
push 0x125e
push 1
push 0x7bf5
call fcn.10026a94
add esp, 0x1c
mov dword [ebp - 0x28], 0
jmp 0x100328ce
mov eax, dword [ebp - 0x28]
inc eax
mov dword [ebp - 0x28], eax
cmp dword [ebp - 0x28], 1
jg 0x10032b3e
mov dword [ebp - 0x34], 0x8664a116
mov dword [ebp - 0x84], 0x53d5ab88
mov dword [ebp - 0x34], 1
jmp 0x100328f9
mov eax, dword [ebp - 0x34]
dec eax
mov dword [ebp - 0x34], eax
cmp dword [ebp - 0x34], 0
jl 0x10032b39
mov dword [ebp - 0x9c], 1
mov dword [ebp - 0xb8], 0
jmp 0x10032926
mov eax, dword [ebp - 0xb8]
inc eax
mov dword [ebp - 0xb8], eax
cmp dword [ebp - 0xb8], 1
jge 0x10032942
mov eax, dword [ebp - 0xb8]
mov dword [ebp + eax*4 - 0x43c], 0
jmp 0x10032919
mov eax, dword [ebp - 0x34]
mov eax, dword [ebp + eax*4 - 0x35c]
mov dword [ebp - 0x544], eax
mov eax, dword [ebp - 0x260]
mov dword [ebp - 0x9c], eax
cmp dword [ebp - 0x9c], 0
je 0x100329ca
mov eax, dword [ebp - 0x9c]
mov dword [ebp - 0x4cc], eax
mov eax, dword [ebp - 0x34]
cmp eax, dword [ebp - 0x9c]
je 0x1003298a
mov dword [ebp - 0x230], 1
jmp 0x10032991
and dword [ebp - 0x230], 0
cmp dword [ebp - 0x230], 0x3e5c
jne 0x100329a9
mov dword [ebp - 0x238], 1
jmp 0x100329b0
and dword [ebp - 0x238], 0
mov eax, dword [ebp - 0x9c]
cmp dword [ebp - 0x238], eax
jne 0x100329ca
mov dword [ebp - 0x454], 1
jmp 0x100329d1
and dword [ebp - 0x454], 0
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp + eax*4 - 0x35c]
mov dword [ebp - 0x3e4], eax
mov eax, dword [ebp - 0x34]
mov ecx, dword [ebp - 0x3e4]
mov dword [ebp + eax*4 - 0x35c], ecx
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x34]
sub ecx, dword [ebp + eax - 0x43c]
cmp ecx, 0xb364fef5
jne 0x10032a15
mov dword [ebp - 0x240], 1
jmp 0x10032a1c
and dword [ebp - 0x240], 0
cmp dword [ebp - 0x240], 0xffffffff
ja 0x10032a31
mov dword [ebp - 0x248], 1
jmp 0x10032a38
and dword [ebp - 0x248], 0
cmp dword [ebp - 0x248], 0xc75b167d
jae 0x10032a4d
mov eax, 0x8e1c
test eax, eax
je 0x10032a6f
mov eax, 0x7d757520
test eax, eax
je 0x10032a6f
mov eax, dword [ebp - 0x34]
cmp dword [ebp + eax*4 - 0x35c], 0
je 0x10032a6f
mov dword [ebp - 0x250], 1
jmp 0x10032a76
and dword [ebp - 0x250], 0
mov eax, dword [ebp - 0x70]
cmp dword [ebp - 0x250], eax
jg 0x10032a8d
mov dword [ebp - 0x258], 1
jmp 0x10032a94
and dword [ebp - 0x258], 0
imul eax, dword [ebp - 0x258], 0xfffffffc
cmp eax, dword [ebp - 0x260]
jg 0x10032aaf
mov dword [ebp - 0x27c], 1
jmp 0x10032ab6
and dword [ebp - 0x27c], 0
mov eax, dword [ebp - 0x27c]
add eax, 0x6d824bfc
jne 0x10032ad3
push 0xfffffffffffffff8
pop eax
test eax, eax
jne 0x10032ad3
and dword [ebp - 0x284], 0
jmp 0x10032add
mov dword [ebp - 0x284], 1
mov eax, dword [ebp - 0x34]
imul eax, dword [ebp - 0x284]
cmp eax, 0xfffffff6
jne 0x10032af8
mov dword [ebp - 0x28c], 1
jmp 0x10032aff
and dword [ebp - 0x28c], 0
mov eax, dword [ebp - 0x28c]
mov dword [ebp - 0x84], eax
mov dword [ebp - 0x84], 0
jmp 0x10032b24
mov eax, dword [ebp - 0x84]
dec eax
mov dword [ebp - 0x84], eax
cmp dword [ebp - 0x84], 0xffffffff
je 0x10032b34
call fcn.100302a3
jmp 0x10032b17
jmp 0x100328f2
jmp 0x100328c7
jmp 0x10032733
push dword [ebp - 0x38]
push 1
push dword [ebp - 0x88]
push dword [ebp + 8]
push 0x5169
push 0x7611
push 0
push 0x37c0
push 0x50e7
push 0x4f81
call fcn.10014661
add esp, 0x28
mov eax, dword [ebp - 0x88]
mov ecx, dword [ebp - 0xd8]
sub ecx, dword [eax + 0x34]
mov dword [ebp - 0x3f0], ecx
call fcn.100302e1
push 0x6e47
push 0x675b
push 1
push 0x4a00
push 1
lea eax, [ebp - 0x38]
push eax
lea eax, [ebp - 0x3f0]
push eax
push 0x4e83
call fcn.100272cc
add esp, 0x20
push dword [ebp - 0x38]
call fcn.1001d7db
pop ecx
test eax, eax
jne 0x10032bcd
xor eax, eax
jmp 0x1003349a
push 1
lea ecx, [ebp - 0x270]
call fcn.100336b5
mov dword [ebp - 4], 0x11
mov dword [ebp - 0x68], 0x24cdb8fa
mov dword [ebp - 0xc8], 6
mov dword [ebp - 0x554], 0xfffffffd
lea eax, [ebp - 0x270]
push eax
lea eax, [ebp - 0x98]
push eax
call fcn.100305d8
pop ecx
pop ecx
mov dword [ebp - 0x98], 0
jmp 0x10032c2a
mov eax, dword [ebp - 0x98]
inc eax
mov dword [ebp - 0x98], eax
cmp dword [ebp - 0x98], 2
jge 0x10032c46
mov eax, dword [ebp - 0x98]
mov dword [ebp + eax*4 - 0x5b4], 0x1d55e0ec
jmp 0x10032c1d
push 0
lea ecx, [ebp - 0x270]
call fcn.10033753
and dword [eax], 0
jmp 0x10032c7c
push 0
lea ecx, [ebp - 0x270]
call fcn.10033753
mov dword [ebp - 0x294], eax
mov eax, dword [ebp - 0x294]
mov eax, dword [eax]
inc eax
mov ecx, dword [ebp - 0x294]
mov dword [ecx], eax
push 0
lea ecx, [ebp - 0x270]
call fcn.10033753
cmp dword [eax], 0x1b
jg 0x10033020
mov dword [ebp - 0x138], 0xf2c9a130
mov dword [ebp - 0x130], 0xbebf3b8c
mov dword [ebp - 0x45c], 0x627e
mov dword [ebp - 0x55c], 0xffffffff
mov dword [ebp - 0x374], 0x8e5efb48
mov dword [ebp - 0xc0], 0
jmp 0x10032cdd
mov eax, dword [ebp - 0xc0]
inc eax
mov dword [ebp - 0xc0], eax
cmp dword [ebp - 0xc0], 3
jge 0x10032cf9
mov eax, dword [ebp - 0xc0]
mov dword [ebp + eax*4 - 0x448], 0xab3921de
jmp 0x10032cd0
mov dword [ebp - 0x68], 0xe1265ab3
mov eax, dword [ebp - 0x68]
push 4
pop ecx
shl ecx, 0
mov dword [ebp + ecx - 0x448], eax
mov dword [ebp - 0x68], 0x17
jmp 0x10032d20
mov eax, dword [ebp - 0x68]
dec eax
mov dword [ebp - 0x68], eax
cmp dword [ebp - 0x68], 3
je 0x1003301b
mov dword [ebp - 0x29c], 0x55ff
mov dword [ebp - 0x3c], 0
mov dword [ebp - 0x564], 0x51885a1e
mov dword [ebp - 0x584], 0x954eb856
mov dword [ebp - 0x4e0], 0xffffffff
mov dword [ebp - 0x4d8], 0
mov dword [ebp - 0x4e4], 0
push 2
lea ecx, [ebp - 0x574]
call fcn.100336b5
mov byte [ebp - 4], 0x12
mov dword [ebp - 0x4ec], 0xffffffff
lea eax, [ebp - 0x574]
push eax
push 1
push 0x4fa6
lea eax, [ebp - 0x538]
push eax
push 0x7bb2
push 1
push 0x6196
push 1
push 0x4a17
call fcn.100274b5
add esp, 0x24
mov dword [ebp - 0xc8], 0x8e418a52
mov eax, dword [ebp - 0x29c]
dec eax
mov dword [ebp - 0x29c], eax
cmp dword [ebp - 0x3c], 0
jne 0x10032e67
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x448], 0
jne 0x10032df5
mov dword [ebp - 0x2a4], 1
jmp 0x10032dfc
and dword [ebp - 0x2a4], 0
mov eax, dword [ebp - 0x2a4]
neg eax
mov dword [ebp - 0x130], eax
mov eax, dword [ebp - 0x130]
mov dword [ebp - 0x4e8], eax
mov eax, dword [ebp - 0x45c]
mov dword [ebp - 0x588], eax
push 0
lea ecx, [ebp - 0x270]
call fcn.10033753
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x448]
mov dword [ebp - 0x4f0], eax
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x448]
mov dword [ebp - 0x540], eax
cmp dword [ebp - 0x130], 0
jne 0x10032e67
and dword [ebp - 0x2ac], 0
jmp 0x10032e71
mov dword [ebp - 0x2ac], 1
mov dword [ebp - 0x138], 0xa051
mov eax, dword [ebp - 0x138]
mov dword [ebp - 0xc8], eax
push 0
lea ecx, [ebp - 0x270]
call fcn.10033753
mov ecx, dword [ebp - 0x2ac]
sub ecx, dword [eax]
cmp dword [ebp - 0xc8], ecx
jne 0x10032eb0
mov dword [ebp - 0x2b4], 1
jmp 0x10032eb7
and dword [ebp - 0x2b4], 0
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x448]
cmp eax, dword [ebp - 0x2b4]
jne 0x10032ed7
mov dword [ebp - 0x2bc], 1
jmp 0x10032ede
and dword [ebp - 0x2bc], 0
mov eax, dword [ebp - 0x2bc]
sub eax, dword [ebp - 0x3c]
je 0x10032efb
cmp dword [ebp - 0x3c], 0
je 0x10032efb
mov dword [ebp - 0x2c4], 1
jmp 0x10032f02
and dword [ebp - 0x2c4], 0
cmp dword [ebp - 0x2c4], 0x9634
jg 0x10032f1a
mov dword [ebp - 0x2cc], 1
jmp 0x10032f21
and dword [ebp - 0x2cc], 0
push 0
lea ecx, [ebp - 0x270]
call fcn.10033753
mov ecx, dword [ebp - 0x2cc]
add ecx, dword [eax]
cmp ecx, 0x5bf8
jle 0x10032f4a
mov dword [ebp - 0x2d4], 1
jmp 0x10032f51
and dword [ebp - 0x2d4], 0
cmp dword [ebp - 0x2d4], 0
jg 0x10032f66
mov dword [ebp - 0x370], 1
jmp 0x10032f6d
and dword [ebp - 0x370], 0
mov eax, dword [ebp - 0xc8]
add eax, dword [ebp - 0x3c]
mov dword [ebp - 0x3c], eax
mov dword [ebp - 0x3c], 0xffffffff
jmp 0x10032f89
mov eax, dword [ebp - 0x3c]
dec eax
mov dword [ebp - 0x3c], eax
cmp dword [ebp - 0x3c], 0xffffffe6
jl 0x10033007
mov dword [ebp - 0xd0], 0
jmp 0x10032fa8
mov eax, dword [ebp - 0xd0]
inc eax
mov dword [ebp - 0xd0], eax
cmp dword [ebp - 0xd0], 2
jge 0x10032fc4
mov eax, dword [ebp - 0xd0]
mov dword [ebp + eax*4 - 0x5cc], 0xbc01d4c3
jmp 0x10032f9b
lea eax, [ebp - 0x374]
push eax
push 0x7dbb
push 0x3acd
push 1
push 0x3d6f
push 0x4705
push 1
push 0x6bba
push 0xf92
push 1
call fcn.10027740
add esp, 0x28
cmp dword [ebp - 0x138], 0
je 0x10033002
jmp 0x10032f82
jmp 0x10032f82
mov byte [ebp - 4], 0x11
lea ecx, [ebp - 0x574]
call fcn.10033737
jmp 0x10032d19
jmp 0x10032c58
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x270]
call fcn.10033737
push 0x36d
push 0x68f0
push 0x20d0
push 0x1cfa
push 1
push 0x3359
push 1
push 0
push 0x4d8e
push dword [ebp - 0x38]
push 0x4168
call fcn.10020ad1
add esp, 0x2c
mov dword [ebp - 0x64], 1
lea eax, [ebp - 0x64]
push eax
call fcn.10030620
pop ecx
mov dword [ebp - 0x64], 0
jmp 0x10033084
mov eax, dword [ebp - 0x64]
inc eax
mov dword [ebp - 0x64], eax
cmp dword [ebp - 0x64], 0x13
jge 0x100331b7
push 3
lea ecx, [ebp - 0x47c]
call fcn.100336b5
mov dword [ebp - 4], 0x13
mov dword [ebp - 0xa0], 0xb3152c58
mov dword [ebp - 0xa8], 0x2da3c3d2
lea eax, [ebp - 0x47c]
push eax
lea eax, [ebp - 0x4f8]
push eax
call fcn.10030639
pop ecx
pop ecx
mov dword [ebp - 0xa0], 0
jmp 0x100330e4
mov eax, dword [ebp - 0xa0]
inc eax
mov dword [ebp - 0xa0], eax
cmp dword [ebp - 0xa0], 2
jg 0x10033192
mov dword [ebp - 0x6c], 0
mov dword [ebp - 0x37c], 0x40c18ab9
lea eax, [ebp - 0x64]
push eax
lea eax, [ebp - 0x37c]
push eax
lea eax, [ebp - 0x6c]
push eax
lea eax, [ebp - 0xa0]
push eax
lea eax, [ebp - 0x47c]
push eax
lea eax, [ebp - 0xa8]
push eax
call fcn.10030681
add esp, 0x18
mov dword [ebp - 0x6c], 0
jmp 0x1003313e
mov eax, dword [ebp - 0x6c]
inc eax
mov dword [ebp - 0x6c], eax
cmp dword [ebp - 0x6c], 2
jg 0x1003318d
mov dword [ebp - 0xa8], 2
jmp 0x1003315d
mov eax, dword [ebp - 0xa8]
dec eax
mov dword [ebp - 0xa8], eax
cmp dword [ebp - 0xa8], 0
jl 0x1003318b
push dword [ebp - 0x6c]
lea ecx, [ebp - 0x47c]
call fcn.10033753
cmp dword [eax], 0
je 0x1003317b
jmp 0x1003318b
mov byte [ebp - 0x5d], 0
lea eax, [ebp - 0x5d]
push eax
call fcn.1003086f
pop ecx
jmp 0x10033150
jmp 0x10033137
jmp 0x100330d7
mov byte [ebp - 0x45], 0
movzx eax, byte [ebp - 0x45]
test eax, eax
je 0x100331a3
call fcn.100308b6
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x47c]
call fcn.10033737
jmp 0x1003307d
mov eax, dword [ebp - 0x38]
mov eax, dword [eax]
cmp dword [eax + 0x28], 0
je 0x1003320e
mov eax, dword [ebp - 0x38]
mov eax, dword [eax]
mov ecx, dword [ebp - 0xd8]
add ecx, dword [eax + 0x28]
mov dword [ebp - 0x2dc], ecx
jne 0x100331df
xor eax, eax
jmp 0x1003349a
push 0
push 1
push 0xdeadbeef
call dword [ebp - 0x2dc]
mov dword [ebp - 0x384], eax
cmp dword [ebp - 0x384], 0
jne 0x10033204
xor eax, eax
jmp 0x1003349a
lea eax, [ebp - 0x38]
push eax
call fcn.100308fc
pop ecx
mov dword [ebp - 0x1c], 0xfffffff7
mov dword [ebp - 0x354], 0x657e3b6f
mov dword [ebp - 0x350], 0x657e3b6f
mov dword [ebp - 0x34c], 0x657e3b6f
mov dword [ebp - 0x348], 0x657e3b6f
mov dword [ebp - 0x74], 0x7c2f5a26
mov dword [ebp - 0x3a4], 0xd4a7c76
mov dword [ebp - 0xe0], 0
jmp 0x10033267
mov eax, dword [ebp - 0xe0]
inc eax
mov dword [ebp - 0xe0], eax
cmp dword [ebp - 0xe0], 1
jge 0x10033283
mov eax, dword [ebp - 0xe0]
mov dword [ebp + eax*4 - 0x39c], 0x1f9531de
jmp 0x1003325a
lea eax, [ebp - 0x1c]
push eax
call fcn.10030916
pop ecx
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0x568], eax
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0x38c], eax
push 4
pop eax
imul eax, eax, 3
mov ecx, dword [ebp - 0x38c]
mov dword [ebp + eax - 0x354], ecx
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0x500], eax
cmp dword [ebp - 0x1c], 0
jne 0x10033362
mov eax, dword [ebp - 0x1c]
neg eax
je 0x100332e8
push 4
pop eax
imul eax, eax, 3
cmp dword [ebp + eax - 0x354], 0
je 0x100332e8
mov dword [ebp - 0x140], 1
jmp 0x100332ef
and dword [ebp - 0x140], 0
push 4
pop eax
imul eax, eax, 3
mov ecx, dword [ebp - 0x140]
mov dword [ebp + eax - 0x354], ecx
mov eax, dword [ebp - 0x1c]
add eax, dword [ebp - 0x140]
je 0x10033329
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x354], 0
je 0x10033329
mov dword [ebp - 0x2e4], 1
jmp 0x10033330
and dword [ebp - 0x2e4], 0
mov eax, dword [ebp - 0x1c]
cmp dword [ebp - 0x2e4], eax
jne 0x10033347
mov dword [ebp - 0x2ec], 1
jmp 0x1003334e
and dword [ebp - 0x2ec], 0
mov eax, dword [ebp - 0x1c]
cmp dword [ebp - 0x2ec], eax
je 0x10033362
and dword [ebp - 0x2f4], 0
jmp 0x1003336c
mov dword [ebp - 0x2f4], 1
cmp dword [ebp - 0x2f4], 0x9e177c42
je 0x10033387
cmp dword [ebp - 0x1c], 0
jne 0x10033387
and dword [ebp - 0x394], 0
jmp 0x10033391
mov dword [ebp - 0x394], 1
mov eax, dword [ebp - 0x74]
mov dword [ebp - 0x548], eax
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0x508], eax
mov eax, dword [ebp - 0x74]
mov dword [ebp - 0x57c], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x354]
mov dword [ebp - 0x510], eax
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0x550], eax
mov eax, dword [ebp - 0x74]
mov dword [ebp - 0x518], eax
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0x578], eax
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0x520], eax
push 4
pop eax
imul eax, eax, 3
cmp dword [ebp + eax - 0x354], 1
jl 0x10033402
cmp dword [ebp - 0x1c], 0
jne 0x10033402
and dword [ebp - 0x2fc], 0
jmp 0x1003340c
mov dword [ebp - 0x2fc], 1
mov eax, dword [ebp - 0x74]
cmp dword [ebp - 0x2fc], eax
jge 0x10033423
mov dword [ebp - 0x304], 1
jmp 0x1003342a
and dword [ebp - 0x304], 0
mov eax, dword [ebp - 0x1c]
cmp dword [ebp - 0x304], eax
jle 0x10033441
mov dword [ebp - 0x30c], 1
jmp 0x10033448
and dword [ebp - 0x30c], 0
mov eax, dword [ebp - 0x30c]
mov dword [ebp - 0x74], eax
mov eax, dword [ebp - 0x74]
mov dword [ebp - 0x314], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x314]
mov dword [ebp + eax - 0x39c], ecx
mov eax, dword [ebp - 0x314]
mov dword [ebp - 0x3a4], eax
mov eax, dword [ebp - 0x38]
cmp dword [eax + 0x10], 0
je 0x1003348d
mov eax, dword [ebp - 0x38]
mov dword [ebp - 0x31c], eax
jmp 0x10033494
and dword [ebp - 0x31c], 0
mov eax, dword [ebp - 0x31c]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret