Function at 0x1002fc1f
Capabilities:
Enumerate pe sections

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x1006f98f
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0xf94
push ebx
push esi
push edi
movzx eax, byte [ebp + 0x1c]
test eax, eax
je 0x10036e7b
mov eax, dword [ebp + 0x20]
mov dword [ebp - 0x9d0], eax
mov eax, dword [ebp + 8]
mov dword [ebp - 0xa00], eax
lea eax, [ebp + 0x24]
mov dword [ebp - 0xa78], eax
mov eax, dword [ebp + 0xc]
mov dword [ebp - 0xa08], eax
mov eax, dword [ebp + 0x18]
mov dword [ebp - 0x9f8], eax
mov eax, dword [ebp - 0xa78]
movzx eax, byte [eax]
test eax, eax
je 0x10036e50
mov eax, dword [ebp - 0x9f8]
mov dword [ebp - 0x9c0], eax
mov eax, dword [ebp - 0xa00]
mov dword [ebp - 0x970], eax
mov eax, dword [ebp - 0xa08]
mov dword [ebp - 0x28c], eax
mov dword [ebp - 0xa10], 0x26b1
cmp dword [ebp - 0xa10], 0x12ce
jge 0x1002fe52
push 0x10f89d14
push 0x10f89d10
mov ecx, 0x10660dd0
call fcn.10012620
mov ecx, eax
call fcn.10012620
and dword [ebp - 0x234], 0
jmp 0x1002fcf9
mov eax, dword [ebp - 0x234]
inc eax
mov dword [ebp - 0x234], eax
mov eax, dword [ebp - 0x234]
cmp eax, dword [0x10f89d10]
jge 0x1002fd21
mov eax, dword [ebp - 0x234]
lea eax, [eax*4 + 0x10e64d60]
push eax
mov ecx, 0x10660dd0
call fcn.10012620
jmp 0x1002fcec
and dword [ebp - 0x270], 0
jmp 0x1002fd37
mov eax, dword [ebp - 0x270]
inc eax
mov dword [ebp - 0x270], eax
mov eax, dword [ebp - 0x270]
cmp eax, dword [0x10f89d10]
jge 0x1002fd5f
mov eax, dword [ebp - 0x270]
lea eax, [eax*4 + 0x10e032d8]
push eax
mov ecx, 0x10660dd0
call fcn.10012620
jmp 0x1002fd2a
xorpd xmm0, xmm0
movlpd qword [ebp - 0x354], xmm0
mov dword [ebp - 0x31c], 0x77359400
and dword [ebp - 0x318], 0
xorpd xmm0, xmm0
movlpd qword [ebp - 0x89c], xmm0
mov eax, dword [ebp - 0x350]
cmp eax, dword [ebp - 0x318]
jg 0x1002fe30
jl 0x1002fdae
mov eax, dword [ebp - 0x354]
cmp eax, dword [ebp - 0x31c]
ja 0x1002fe30
mov eax, dword [ebp - 0x354]
add eax, dword [ebp - 0x31c]
mov ecx, dword [ebp - 0x350]
adc ecx, dword [ebp - 0x318]
push 0
push 2
push ecx
push eax
call fcn.1006e3d0
mov dword [ebp - 0x1b0], eax
mov eax, dword [ebp - 0x1b0]
cdq
push edx
push eax
call fcn.1002fb86
pop ecx
pop ecx
movzx eax, al
test eax, eax
je 0x1002fe17
mov eax, dword [ebp - 0x1b0]
inc eax
cdq
mov dword [ebp - 0x354], eax
mov dword [ebp - 0x350], edx
mov eax, dword [ebp - 0x1b0]
cdq
mov dword [ebp - 0x89c], eax
mov dword [ebp - 0x898], edx
jmp 0x1002fe2b
mov eax, dword [ebp - 0x1b0]
dec eax
cdq
mov dword [ebp - 0x31c], eax
mov dword [ebp - 0x318], edx
jmp 0x1002fd88
push fcn.100267b6
push dword [ebp - 0x898]
push dword [ebp - 0x89c]
mov ecx, 0x10660f08
call fcn.100292a8
mov ecx, eax
call fcn.10024de2
mov dword [ebp - 0xea0], 0xfffffffb
mov byte [ebp - 0xaa], 0
movzx eax, byte [ebp - 0xaa]
test eax, eax
je 0x1002fe7b
push 0x1ff5
push 0
call dword [sym.imp.KERNEL32.dll_EnumSystemLocalesW]
mov byte [ebp - 0xdd], 0
movzx eax, byte [ebp - 0xdd]
test eax, eax
je 0x1002fea8
push 1
push 0x38dc
push 0x3c40
push 0x570
push 0
call fcn.1002f7cc
add esp, 0x14
mov dword [ebp - 0x14], 0x3d7d
push 1
lea ecx, [ebp - 0x8c0]
call fcn.10012a45
and dword [ebp - 4], 0
push 3
lea ecx, [ebp - 0xb00]
call fcn.10012a45
mov byte [ebp - 4], 1
mov dword [ebp - 0xa18], 0x13d0
cmp dword [ebp - 0xa18], 0xd75
jge 0x10030020
and dword [ebp - 0x4d8], 0
lea eax, [ebp - 0x4d8]
push eax
push 0x1000bf0c
call fcn.10053beb
pop ecx
pop ecx
and dword [ebp - 0x134], 0
and dword [ebp - 0x258], 0
mov dword [ebp - 0x220], 0x90
and dword [ebp - 0x1b8], 0
and dword [ebp - 0x2dc], 0
jmp 0x1002ff3a
mov eax, dword [ebp - 0x2dc]
inc eax
mov dword [ebp - 0x2dc], eax
mov eax, dword [ebp - 0x2dc]
cmp eax, dword [ebp - 0x4d8]
jge 0x1002ffad
lea eax, [ebp - 0x134]
push eax
push 0x1000bf0c
call fcn.10053beb
pop ecx
pop ecx
mov eax, dword [ebp - 0x258]
add eax, dword [ebp - 0x134]
mov dword [ebp - 0x258], eax
mov eax, dword [ebp - 0x134]
and eax, 0x80000001
jns 0x1002ff7f
dec eax
or eax, 0xfffffffe
inc eax
cmp eax, 1
jne 0x1002ffab
mov eax, dword [ebp - 0x1b8]
inc eax
mov dword [ebp - 0x1b8], eax
mov eax, dword [ebp - 0x134]
cmp eax, dword [ebp - 0x220]
jge 0x1002ffab
mov eax, dword [ebp - 0x134]
mov dword [ebp - 0x220], eax
jmp 0x1002ff2d
cmp dword [ebp - 0x220], 0x90
jle 0x1002ffc6
push 0x1000c078
call fcn.10053fdd
pop ecx
jmp 0x10030020
mov eax, dword [ebp - 0x1b8]
and eax, 0x80000001
jns 0x1002ffd8
dec eax
or eax, 0xfffffffe
inc eax
test eax, eax
jne 0x1002fff7
mov eax, dword [ebp - 0x258]
sub eax, dword [ebp - 0x220]
push eax
push 0x1000bf24
call fcn.10053e1f
pop ecx
pop ecx
jmp 0x10030020
mov eax, dword [ebp - 0x1b8]
and eax, 0x80000001
jns 0x10030009
dec eax
or eax, 0xfffffffe
inc eax
cmp eax, 1
jne 0x10030020
push dword [ebp - 0x258]
push 0x1000bf24
call fcn.10053e1f
pop ecx
pop ecx
mov dword [ebp - 0xe2c], 1
mov dword [ebp - 0x1c0], 0xb5c1
mov dword [ebp - 0xa60], 0xf4a3ca5a
mov dword [ebp - 0x38c], 1
mov dword [ebp - 0xa68], 0xe5defa76
push 3
lea ecx, [ebp - 0xbb8]
call fcn.10012a45
mov byte [ebp - 4], 2
mov dword [ebp - 0x28], 0
jmp 0x10030073
mov eax, dword [ebp - 0x28]
inc eax
mov dword [ebp - 0x28], eax
cmp dword [ebp - 0x28], 1
jge 0x1003008f
push dword [ebp - 0x28]
lea ecx, [ebp - 0x8c0]
call fcn.10012ae3
mov dword [eax], 0xfffffffa
jmp 0x1003006c
mov dword [ebp - 0x28], 0
jmp 0x1003009f
mov eax, dword [ebp - 0x28]
inc eax
mov dword [ebp - 0x28], eax
cmp dword [ebp - 0x28], 3
jge 0x100300b8
push dword [ebp - 0x28]
lea ecx, [ebp - 0xb00]
call fcn.10012ae3
or dword [eax], 0xffffffff
jmp 0x10030098
mov dword [ebp - 0x28], 0
jmp 0x100300c8
mov eax, dword [ebp - 0x28]
inc eax
mov dword [ebp - 0x28], eax
cmp dword [ebp - 0x28], 3
jge 0x100300e1
push dword [ebp - 0x28]
lea ecx, [ebp - 0xbb8]
call fcn.10012ae3
and dword [eax], 0
jmp 0x100300c1
mov eax, dword [ebp - 0x14]
dec eax
mov dword [ebp - 0x14], eax
mov eax, dword [ebp - 0x14]
mov dword [ebp - 0xd64], eax
mov eax, dword [ebp - 0x14]
mov dword [ebp - 0xe9c], eax
cmp dword [ebp - 0x14], 0x7bff
je 0x1003010f
mov dword [ebp - 0x7e0], 1
jmp 0x10030116
and dword [ebp - 0x7e0], 0
mov eax, dword [ebp - 0x14]
sub eax, dword [ebp - 0x7e0]
add eax, dword [ebp - 0x14]
sub eax, dword [ebp - 0x14]
mov dword [ebp - 0x7e8], eax
push 0
lea ecx, [ebp - 0x8c0]
call fcn.10012ae3
mov ecx, dword [ebp - 0x7e8]
mov dword [eax], ecx
mov eax, dword [ebp - 0x14]
imul eax, dword [ebp - 0x7e8]
cmp dword [ebp - 0x14], eax
jle 0x1003015b
mov dword [ebp - 0x7f0], 1
jmp 0x10030162
and dword [ebp - 0x7f0], 0
mov eax, dword [ebp - 0x14]
cmp eax, dword [ebp - 0x7f0]
jge 0x10030179
mov dword [ebp - 0x7f8], 1
jmp 0x10030180
and dword [ebp - 0x7f8], 0
mov eax, dword [ebp - 0x7f8]
sub eax, dword [ebp - 0x14]
je 0x1003019e
push 4
pop eax
test eax, eax
je 0x1003019e
mov dword [ebp - 0x81c], 1
jmp 0x100301a5
and dword [ebp - 0x81c], 0
cmp dword [ebp - 0x81c], 0
je 0x100304e3
mov dword [ebp - 0x2a4], 0x954e3f15
mov dword [ebp - 0xd6c], 0x942f34c9
mov dword [ebp - 0xa70], 0
mov dword [ebp - 0xe3c], 0xffffffff
mov dword [ebp - 0x2fc], 1
mov dword [ebp - 0xa50], 0
mov dword [ebp - 0x7e4], 0xfffffff6
mov byte [ebp - 0xb4], 0
movzx eax, byte [ebp - 0xb4]
test eax, eax
je 0x10030212
push 0
call fcn.100411eb
pop ecx
mov eax, dword [ebp - 0x2a4]
mov dword [ebp - 0xd74], eax
mov eax, dword [ebp - 0x2fc]
mov dword [ebp - 0x824], eax
push 2
lea ecx, [ebp - 0xb00]
call fcn.10012ae3
mov ecx, dword [ebp - 0x824]
mov dword [eax], ecx
mov eax, dword [ebp - 0x2fc]
add eax, dword [ebp - 0x824]
sub eax, dword [ebp - 0xa50]
cmp eax, 0xab91
jg 0x10030264
mov dword [ebp - 0x82c], 1
jmp 0x1003026b
and dword [ebp - 0x82c], 0
mov eax, dword [ebp - 0x1c0]
dec eax
mov dword [ebp - 0x1c0], eax
mov eax, dword [ebp - 0x1c0]
cmp eax, dword [ebp - 0x82c]
jl 0x10030298
mov eax, 0x9ac0
test eax, eax
jne 0x10030298
and dword [ebp - 0x834], 0
jmp 0x100302a2
mov dword [ebp - 0x834], 1
cmp dword [ebp - 0x834], 3
jg 0x100302b7
mov dword [ebp - 0x844], 1
jmp 0x100302be
and dword [ebp - 0x844], 0
cmp dword [ebp - 0x844], 0x5018227f
je 0x100302d6
mov dword [ebp - 0x84c], 1
jmp 0x100302dd
and dword [ebp - 0x84c], 0
mov eax, dword [ebp - 0x2a4]
cmp dword [ebp - 0x84c], eax
jne 0x100302f7
mov dword [ebp - 0x85c], 1
jmp 0x100302fe
and dword [ebp - 0x85c], 0
mov eax, dword [ebp - 0x7e4]
cmp dword [ebp - 0x85c], eax
jle 0x10030318
mov dword [ebp - 0xa58], 1
jmp 0x1003031f
and dword [ebp - 0xa58], 0
mov eax, dword [ebp - 0xa60]
mov dword [ebp - 0xec4], eax
mov eax, dword [ebp - 0x14]
cmp dword [ebp - 0x1c0], eax
jne 0x10030342
mov dword [ebp - 0x7d8], 1
jmp 0x10030349
and dword [ebp - 0x7d8], 0
cmp dword [ebp - 0x7d8], 0x1eed
jge 0x10030361
mov dword [ebp - 0x604], 1
jmp 0x10030368
and dword [ebp - 0x604], 0
mov eax, dword [ebp - 0x604]
mov dword [ebp - 0x38c], eax
mov esi, dword [ebp - 0xa68]
mov edi, dword [ebp - 0x14]
mov ebx, dword [ebp - 0x38c]
push 0
lea ecx, [ebp - 0x8c0]
call fcn.10012ae3
imul ebx, dword [eax]
sub ebx, edi
sub ebx, esi
jne 0x100303b4
push 2
lea ecx, [ebp - 0xb00]
call fcn.10012ae3
cmp dword [eax], 0
jne 0x100303b4
and dword [ebp - 0x744], 0
jmp 0x100303be
mov dword [ebp - 0x744], 1
mov eax, dword [ebp - 0x744]
imul eax, dword [ebp - 0x14]
mov dword [ebp - 0x394], eax
push 0
lea ecx, [ebp - 0x8c0]
call fcn.10012ae3
mov ecx, dword [ebp - 0x394]
mov dword [eax], ecx
cmp dword [ebp - 0x394], 0
ja 0x100303f8
mov dword [ebp - 0x60c], 1
jmp 0x100303ff
and dword [ebp - 0x60c], 0
cmp dword [ebp - 0x60c], 1
jb 0x10030414
mov dword [ebp - 0x39c], 1
jmp 0x1003041b
and dword [ebp - 0x39c], 0
imul eax, dword [ebp - 0x39c], 0xffff
cmp eax, dword [ebp - 0x7e4]
je 0x10030439
mov dword [ebp - 0x3a4], 1
jmp 0x10030440
and dword [ebp - 0x3a4], 0
mov eax, dword [ebp - 0x3a4]
sub eax, 9
cmp eax, dword [ebp - 0xa70]
jge 0x1003045d
mov dword [ebp - 0x614], 1
jmp 0x10030464
and dword [ebp - 0x614], 0
cmp dword [ebp - 0x614], 0xfffffff9
ja 0x10030479
mov dword [ebp - 0x3ac], 1
jmp 0x10030480
and dword [ebp - 0x3ac], 0
mov eax, dword [ebp - 0x3ac]
sub eax, dword [ebp - 0x14]
cmp eax, dword [ebp - 0x14]
je 0x1003049a
mov dword [ebp - 0x74c], 1
jmp 0x100304a1
and dword [ebp - 0x74c], 0
cmp dword [ebp - 0x74c], 0x871e8ee
je 0x100304b9
mov dword [ebp - 0x8d0], 1
jmp 0x100304c0
and dword [ebp - 0x8d0], 0
mov eax, dword [ebp - 0x2a4]
mov dword [ebp - 0xd7c], eax
mov esi, dword [ebp - 0x2fc]
push 2
lea ecx, [ebp - 0xbb8]
call fcn.10012ae3
mov dword [eax], esi
jmp 0x10030524
mov dword [ebp - 0xa80], 0
mov dword [ebp - 0xa88], 0xfffffffd
mov eax, dword [ebp - 0xa80]
mov dword [ebp - 0x3b4], eax
push 0
lea ecx, [ebp - 0x8c0]
call fcn.10012ae3
mov ecx, dword [ebp - 0x3b4]
mov dword [eax], ecx
mov eax, dword [ebp - 0x3b4]
mov dword [ebp - 0xa88], eax
mov byte [ebp - 4], 1
lea ecx, [ebp - 0xbb8]
call fcn.10012ac7
mov byte [ebp - 4], 0
lea ecx, [ebp - 0xb00]
call fcn.10012ac7
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x8c0]
call fcn.10012ac7
mov dword [ebp - 0x1f8], 0xc05baf43
mov dword [ebp - 0x2ec], 0xfffffff9
mov dword [ebp - 0x124], 0xa631
mov dword [ebp - 0x13c], 0x90611bc3
mov dword [ebp - 0x3d4], 0
mov dword [ebp - 0x2b4], 0xdb62b2fa
cmp dword [ebp - 0x124], 0
je 0x100307e4
mov dword [ebp - 0xa0], 1
mov dword [ebp - 0x2ac], 0xfffffffa
mov dword [ebp - 0xa90], 0x8ed0bd2f
mov dword [ebp - 0x228], 0
jmp 0x100305d1
mov eax, dword [ebp - 0x228]
inc eax
mov dword [ebp - 0x228], eax
cmp dword [ebp - 0x228], 3
jge 0x100305ed
mov eax, dword [ebp - 0x228]
mov dword [ebp + eax*4 - 0xdc8], 0xc3f30b9
jmp 0x100305c4
cmp dword [ebp - 0xa0], 0x3ef6885f
jl 0x10030605
mov dword [ebp - 0x624], 1
jmp 0x1003060c
and dword [ebp - 0x624], 0
mov eax, dword [ebp - 0x2ac]
sub eax, dword [ebp - 0xa0]
jne 0x1003062c
cmp dword [ebp - 0x124], 0
jne 0x1003062c
and dword [ebp - 0x61c], 0
jmp 0x10030636
mov dword [ebp - 0x61c], 1
mov eax, dword [ebp - 0x2ac]
cmp dword [ebp - 0x61c], eax
jl 0x10030650
mov dword [ebp - 0x3bc], 1
jmp 0x10030657
and dword [ebp - 0x3bc], 0
mov eax, dword [ebp - 0xa0]
cmp eax, dword [ebp - 0x3bc]
jl 0x10030671
mov dword [ebp - 0x838], 1
jmp 0x10030678
and dword [ebp - 0x838], 0
mov eax, dword [ebp - 0x2ac]
cmp dword [ebp - 0x838], eax
jg 0x10030692
mov dword [ebp - 0x3c4], 1
jmp 0x10030699
and dword [ebp - 0x3c4], 0
mov eax, dword [ebp - 0xa0]
mov ecx, dword [ebp - 0x3c4]
sub ecx, 0xe07e
sub eax, ecx
cmp eax, dword [ebp - 0x124]
jl 0x100306c1
mov dword [ebp - 0x3cc], 1
jmp 0x100306c8
and dword [ebp - 0x3cc], 0
mov eax, dword [ebp - 0x624]
mov dword [ebp - 0x13c], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x3cc]
mov dword [ebp + eax - 0xdc8], ecx
mov eax, dword [ebp - 0x13c]
mov dword [ebp - 0xc98], eax
mov eax, dword [ebp - 0x124]
cmp dword [ebp - 0xa0], eax
jle 0x10030713
cmp dword [ebp - 0x13c], 0
jne 0x10030713
and dword [ebp - 0x754], 0
jmp 0x1003071d
mov dword [ebp - 0x754], 1
mov eax, dword [ebp - 0x754]
mov dword [ebp - 0x3d4], eax
mov eax, dword [ebp - 0x124]
cmp dword [ebp - 0x3d4], eax
jle 0x10030743
mov dword [ebp - 0x62c], 1
jmp 0x1003074a
and dword [ebp - 0x62c], 0
mov eax, dword [ebp - 0xa0]
imul eax, dword [ebp - 0x62c]
sub eax, dword [ebp - 0xa0]
cmp eax, 0xffffffff
jl 0x1003076e
mov dword [ebp - 0x3dc], 1
jmp 0x10030775
and dword [ebp - 0x3dc], 0
mov eax, dword [ebp - 0xa0]
cmp dword [ebp - 0x3dc], eax
jge 0x1003079f
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0xdc8], 0
je 0x1003079f
mov dword [ebp - 0x7ec], 1
jmp 0x100307a6
and dword [ebp - 0x7ec], 0
mov eax, dword [ebp - 0xa90]
add eax, dword [ebp - 0x7ec]
cmp eax, 0x37f4
jg 0x100307c5
mov dword [ebp - 0x3e4], 1
jmp 0x100307cc
and dword [ebp - 0x3e4], 0
mov eax, dword [ebp - 0x124]
imul eax, dword [ebp - 0x3e4]
mov dword [ebp - 0x2b4], eax
jmp 0x10030918
mov dword [ebp - 0x15c], 0x27649690
mov dword [ebp - 0x1c8], 0
jmp 0x10030807
mov eax, dword [ebp - 0x1c8]
inc eax
mov dword [ebp - 0x1c8], eax
cmp dword [ebp - 0x1c8], 2
jge 0x10030823
mov eax, dword [ebp - 0x1c8]
mov dword [ebp + eax*4 - 0xb14], 0x885a1ec8
jmp 0x100307fa
cmp dword [ebp - 0x15c], 0
je 0x100308db
cmp dword [ebp - 0x15c], 0
je 0x10030899
mov eax, dword [ebp - 0x15c]
mov dword [ebp - 0xca0], eax
cmp dword [ebp - 0x15c], 0xffffffff
jne 0x1003085a
mov dword [ebp - 0x2e4], 1
jmp 0x10030861
and dword [ebp - 0x2e4], 0
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x2e4]
mov dword [ebp + eax - 0xb14], ecx
cmp dword [ebp - 0x2e4], 0
je 0x10030899
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0xb14], 0
je 0x10030899
mov dword [ebp - 0x634], 1
jmp 0x100308a0
and dword [ebp - 0x634], 0
mov eax, dword [ebp - 0x15c]
cmp dword [ebp - 0x634], eax
jle 0x100308ba
mov dword [ebp - 0x3ec], 1
jmp 0x100308c1
and dword [ebp - 0x3ec], 0
mov eax, dword [ebp - 0x13c]
sub eax, dword [ebp - 0x3ec]
je 0x100308db
mov dword [ebp - 0xa98], 1
jmp 0x100308e2
and dword [ebp - 0xa98], 0
mov eax, dword [ebp - 0x2b4]
mov dword [ebp - 0xca8], eax
cmp dword [ebp - 0x2b4], 0xffffffff
je 0x10030903
mov dword [ebp - 0x75c], 1
jmp 0x1003090a
and dword [ebp - 0x75c], 0
mov eax, dword [ebp - 0x75c]
neg eax
mov dword [ebp - 0x13c], eax
mov byte [ebp - 0xed], 0
movzx eax, byte [ebp - 0xed]
test eax, eax
je 0x1003094e
push 0x28c
push 0
push 0
push 0
push 0
push 0xa78
push 0xed9
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_ScrollWindowEx]
mov dword [ebp - 0xc4], 0xeede
mov dword [ebp - 0x280], 0
mov dword [ebp - 0xaa0], 1
push 2
lea ecx, [ebp - 0xdd8]
call fcn.10012a45
mov dword [ebp - 4], 3
lea eax, [ebp - 0xcb0]
push eax
push 0
lea eax, [ebp - 0xdd8]
push eax
call fcn.10048bb4
add esp, 0xc
mov dword [ebp - 0x280], 0x17
jmp 0x100309b1
mov eax, dword [ebp - 0x280]
dec eax
mov dword [ebp - 0x280], eax
cmp dword [ebp - 0x280], 0xd
je 0x10030a16
mov dword [ebp - 0x1d0], 0
jmp 0x100309d3
mov eax, dword [ebp - 0x1d0]
inc eax
mov dword [ebp - 0x1d0], eax
cmp dword [ebp - 0x1d0], 4
jge 0x100309ef
mov eax, dword [ebp - 0x1d0]
mov dword [ebp + eax*4 - 0xee8], 0x34f09465
jmp 0x100309c6
mov dword [ebp - 0xaa0], 0
push 4
pop eax
imul eax, eax, 3
mov eax, dword [ebp + eax - 0xee8]
inc eax
push 4
pop ecx
imul ecx, ecx, 3
mov dword [ebp + ecx - 0xee8], eax
jmp 0x100309a4
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xdd8]
call fcn.10012ac7
mov eax, dword [ebp - 0xc4]
inc eax
mov dword [ebp - 0xc4], eax
mov dword [ebp - 0x18], 0
mov dword [ebp - 0x230], 0
jmp 0x10030a52
mov eax, dword [ebp - 0x230]
inc eax
mov dword [ebp - 0x230], eax
cmp dword [ebp - 0x230], 3
jge 0x10030a6e
mov eax, dword [ebp - 0x230]
mov dword [ebp + eax*4 - 0xef4], 0xd795
jmp 0x10030a45
mov eax, dword [ebp - 0x18]
sub eax, dword [ebp - 0x18]
je 0x10030b9f
mov dword [ebp - 0x18], 0
jmp 0x10030a8a
mov eax, dword [ebp - 0x18]
inc eax
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 2
jg 0x10030b7a
mov dword [ebp - 0x1d8], 1
mov byte [ebp - 0xb8], 0
push 0
lea eax, [ebp - 0xb8]
push eax
call fcn.10037cea
pop ecx
pop ecx
mov byte [ebp - 0xa9], 0
push 0x2b5b
push 0x1665
push 1
push 0x2762
push 0x7504
push 0x6416
push 0x7272
push 0x2975
push 0x689f
push 0
lea eax, [ebp - 0xa9]
push eax
call fcn.100484a8
add esp, 0x2c
mov dword [ebp - 0x1d8], 2
jmp 0x10030b10
mov eax, dword [ebp - 0x1d8]
dec eax
mov dword [ebp - 0x1d8], eax
cmp dword [ebp - 0x1d8], 0
jl 0x10030b75
mov dword [ebp - 0x260], 0xfffffff6
mov dword [ebp - 0x260], 2
jmp 0x10030b3c
mov eax, dword [ebp - 0x260]
dec eax
mov dword [ebp - 0x260], eax
cmp dword [ebp - 0x260], 0
jl 0x10030b73
push 0x3842
push 0
push 0x3129
push 0x1f57
push 1
push 0x12d5
push 1
push 0x730
push 0x5d11
call fcn.1002e65e
add esp, 0x24
jmp 0x10030b2f
jmp 0x10030b03
jmp 0x10030a83
mov dword [ebp - 0x18], 0xf
jmp 0x10030b8a
mov eax, dword [ebp - 0x18]
dec eax
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 0xfffffff4
jle 0x10030b9a
push 0
call fcn.10037008
pop ecx
jmp 0x10030b83
jmp 0x10030d43
mov dword [ebp - 0x1e0], 4
mov dword [ebp - 0x3fc], 1
mov dword [ebp - 0x764], 0xa9390dfc
mov dword [ebp - 0x414], 0x765e4b
mov dword [ebp - 0x7f4], 0
cmp dword [ebp - 0x1e0], 0
jne 0x10030d02
cmp dword [ebp - 0x1e0], 0
jne 0x10030caa
cmp dword [ebp - 0x18], 0xe401d933
jbe 0x10030c00
mov dword [ebp - 0x3f4], 1
jmp 0x10030c07
and dword [ebp - 0x3f4], 0
mov eax, dword [ebp - 0x18]
cmp dword [ebp - 0x3f4], eax
jl 0x10030c1e
mov dword [ebp - 0x63c], 1
jmp 0x10030c25
and dword [ebp - 0x63c], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0xef4]
mov dword [ebp - 0xcb8], eax
mov eax, dword [ebp - 0x63c]
mov dword [ebp - 0x3fc], eax
mov eax, dword [ebp - 0x3fc]
mov dword [ebp - 0xcc0], eax
mov eax, dword [ebp - 0x1e0]
mov dword [ebp - 0xcc8], eax
cmp dword [ebp - 0x18], 0x42b6
jne 0x10030c71
mov dword [ebp - 0x800], 1
jmp 0x10030c78
and dword [ebp - 0x800], 0
mov eax, dword [ebp - 0x18]
cmp dword [ebp - 0x800], eax
jle 0x10030c8f
mov dword [ebp - 0x404], 1
jmp 0x10030c96
and dword [ebp - 0x404], 0
mov eax, dword [ebp - 0x18]
cmp dword [ebp - 0x404], eax
jne 0x10030caa
and dword [ebp - 0x644], 0
jmp 0x10030cb4
mov dword [ebp - 0x644], 1
mov eax, dword [ebp - 0x1e0]
cmp dword [ebp - 0x644], eax
je 0x10030cce
mov dword [ebp - 0x40c], 1
jmp 0x10030cd5
and dword [ebp - 0x40c], 0
mov eax, dword [ebp - 0x40c]
mov dword [ebp - 0x764], eax
mov eax, dword [ebp - 0x764]
mov dword [ebp - 0x414], eax
cmp dword [ebp - 0x414], 0x6ce028f4
jl 0x10030d02
and dword [ebp - 0x64c], 0
jmp 0x10030d0c
mov dword [ebp - 0x64c], 1
mov eax, dword [ebp - 0x18]
cmp dword [ebp - 0x64c], eax
jg 0x10030d23
mov dword [ebp - 0x41c], 1
jmp 0x10030d2a
and dword [ebp - 0x41c], 0
imul eax, dword [ebp - 0x41c], 0x8ca0
sub eax, dword [ebp - 0x18]
sub eax, dword [ebp - 0x7f4]
mov dword [ebp - 0x7f4], eax
mov dword [ebp - 0xc4], 0
jmp 0x10030d5c
mov eax, dword [ebp - 0xc4]
inc eax
mov dword [ebp - 0xc4], eax
cmp dword [ebp - 0xc4], 3
jge 0x10032161
mov dword [ebp - 0xcc], 0xffffffff
and dword [ebp - 0xb80], 0
and dword [ebp - 0xb7c], 0
and dword [ebp - 0xb78], 0
and dword [ebp - 0xb74], 0
lea ecx, [ebp - 0x299]
call fcn.10012af2
push eax
lea eax, [ebp - 0xb70]
push eax
lea eax, [ebp - 0xb80]
push eax
lea ecx, [ebp - 0xf34]
call fcn.10012af5
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0x194]
call fcn.10012aa1
mov dword [ebp - 4], 4
mov dword [ebp - 0xaa8], 0x193d
cmp dword [ebp - 0xaa8], 0x665
jge 0x10030e9c
mov dword [ebp - 0x238], 1
xor eax, eax
inc eax
je 0x10030e9c
lea eax, [ebp - 0x30c]
push eax
push 0x1000bf0c
call fcn.10053beb
pop ecx
pop ecx
cmp dword [ebp - 0x30c], 0
jne 0x10030e19
jmp 0x10030e9c
lea eax, [ebp - 0x654]
push eax
lea eax, [ebp - 0x424]
push eax
push 0x1000bf1c
call fcn.10053beb
add esp, 0xc
mov eax, dword [ebp - 0x424]
imul eax, dword [ebp - 0x424]
mov ecx, dword [ebp - 0x654]
imul ecx, dword [ebp - 0x654]
add eax, ecx
mov ecx, dword [ebp - 0x30c]
shl ecx, 2
imul ecx, dword [ebp - 0x30c]
cmp eax, ecx
jle 0x10030e78
push dword [ebp - 0x238]
push 0x1000bf28
call fcn.10053e1f
pop ecx
pop ecx
jmp 0x10030e8a
push dword [ebp - 0x238]
push 0x1000bf50
call fcn.10053e1f
pop ecx
pop ecx
mov eax, dword [ebp - 0x238]
inc eax
mov dword [ebp - 0x238], eax
jmp 0x10030def
mov dword [ebp - 0xbc], 0
push 3
lea ecx, [ebp - 0x36c]
call fcn.10012a45
mov byte [ebp - 4], 5
mov dword [ebp - 0x1e8], 0
jmp 0x10030ed0
mov eax, dword [ebp - 0x1e8]
inc eax
mov dword [ebp - 0x1e8], eax
cmp dword [ebp - 0x1e8], 3
jge 0x10030ef2
push dword [ebp - 0x1e8]
lea ecx, [ebp - 0x36c]
call fcn.10012ae3
mov dword [eax], 0xe734e2e0
jmp 0x10030ec3
mov dword [ebp - 0xbc], 1
mov dword [ebp - 0xbc], 0xfffffff2
jmp 0x10030f15
mov eax, dword [ebp - 0xbc]
dec eax
mov dword [ebp - 0xbc], eax
cmp dword [ebp - 0xbc], 0xffffffe8
jl 0x10031512
mov dword [ebp - 0x10], 0xfffffffb
mov dword [ebp - 0x9c], 0x1ebdc590
mov dword [ebp - 0x10], 3
jmp 0x10030f43
mov eax, dword [ebp - 0x10]
dec eax
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], 0
jl 0x1003132f
mov dword [ebp - 0xac8], 0x5955
mov dword [ebp - 0x278], 0
jmp 0x10030f70
mov eax, dword [ebp - 0x278]
inc eax
mov dword [ebp - 0x278], eax
cmp dword [ebp - 0x278], 1
jge 0x10030f8c
mov eax, dword [ebp - 0x278]
mov dword [ebp + eax*4 - 0x240], 0x200d40a7
jmp 0x10030f63
push dword [ebp - 0x10]
lea ecx, [ebp - 0x194]
call fcn.10012ae3
push 3
lea ecx, [ebp - 0x194]
call fcn.10012ae3
cmp dword [eax], 0
jne 0x10031091
push dword [ebp - 0x10]
lea ecx, [ebp - 0x194]
call fcn.10012ae3
push 4
pop ecx
sub ecx, dword [eax]
cmp ecx, dword [ebp - 0x10]
je 0x10030fd4
mov dword [ebp - 0x42c], 1
jmp 0x10030fdb
and dword [ebp - 0x42c], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x240]
imul eax, dword [ebp - 0x42c]
test eax, eax
ja 0x10031011
push 3
lea ecx, [ebp - 0x194]
call fcn.10012ae3
cmp dword [eax], 0
je 0x10031011
mov dword [ebp - 0x76c], 1
jmp 0x10031018
and dword [ebp - 0x76c], 0
push dword [ebp - 0x10]
lea ecx, [ebp - 0x194]
call fcn.10012ae3
mov ecx, dword [ebp - 0x76c]
cmp ecx, dword [eax]
jne 0x1003103c
mov dword [ebp - 0x434], 1
jmp 0x10031043
and dword [ebp - 0x434], 0
mov eax, dword [ebp - 0x10]
cmp dword [ebp - 0x434], eax
jl 0x1003105a
mov dword [ebp - 0x65c], 1
jmp 0x10031061
and dword [ebp - 0x65c], 0
push 1
lea ecx, [ebp - 0x36c]
call fcn.10012ae3
mov ecx, dword [ebp - 0x65c]
mov dword [eax], ecx
push 3
lea ecx, [ebp - 0x194]
call fcn.10012ae3
cmp dword [eax], 0
jne 0x10031091
and dword [ebp - 0x43c], 0
jmp 0x1003109b
mov dword [ebp - 0x43c], 1
push 3
lea ecx, [ebp - 0x194]
call fcn.10012ae3
mov ecx, dword [ebp - 0x43c]
cmp ecx, dword [eax]
jge 0x100310be
mov dword [ebp - 0x804], 1
jmp 0x100310c5
and dword [ebp - 0x804], 0
mov eax, dword [ebp - 0x10]
cmp dword [ebp - 0x804], eax
jge 0x100310dc
mov dword [ebp - 0x444], 1
jmp 0x100310e3
and dword [ebp - 0x444], 0
mov esi, dword [ebp - 0x10]
push 3
lea ecx, [ebp - 0x194]
call fcn.10012ae3
cmp esi, dword [eax]
jg 0x10031103
mov dword [ebp - 0xab0], 1
jmp 0x1003110a
and dword [ebp - 0xab0], 0
mov eax, dword [ebp - 0xbc]
mov dword [ebp - 0xcd0], eax
or eax, 0xffffffff
cmp eax, 0x5f87b70d
je 0x1003112c
mov dword [ebp - 0x664], 1
jmp 0x10031133
and dword [ebp - 0x664], 0
push 3
lea ecx, [ebp - 0x194]
call fcn.10012ae3
mov ecx, dword [ebp - 0x664]
imul ecx, dword [eax]
sub ecx, 0x468b2465
je 0x1003127a
mov dword [ebp - 0x184], 0xffffffff
mov dword [ebp - 0x1f0], 0
jmp 0x10031178
mov eax, dword [ebp - 0x1f0]
inc eax
mov dword [ebp - 0x1f0], eax
cmp dword [ebp - 0x1f0], 4
jge 0x10031194
mov eax, dword [ebp - 0x1f0]
mov dword [ebp + eax*4 - 0xf54], 0xf3bc
jmp 0x1003116b
mov dword [ebp - 0x184], 3
jmp 0x100311ad
mov eax, dword [ebp - 0x184]
dec eax
mov dword [ebp - 0x184], eax
cmp dword [ebp - 0x184], 0
jl 0x10031275
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x240], 0
je 0x100311dc
cmp dword [ebp - 0x10], 0
je 0x100311dc
mov dword [ebp - 0xab8], 1
jmp 0x100311e3
and dword [ebp - 0xab8], 0
push 1
lea ecx, [ebp - 0x36c]
call fcn.10012ae3
push dword [ebp - 0x10]
lea ecx, [ebp - 0x194]
call fcn.10012ae3
mov ecx, dword [ebp - 0x184]
cmp dword [eax], ecx
je 0x10031229
mov eax, 0xc80d6736
test eax, eax
jne 0x10031229
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0xf54], 0
jne 0x10031229
and dword [ebp - 0x2bc], 0
jmp 0x10031233
mov dword [ebp - 0x2bc], 1
push 1
lea ecx, [ebp - 0x36c]
call fcn.10012ae3
mov ecx, dword [ebp - 0x2bc]
mov dword [eax], ecx
cmp dword [ebp - 0x2bc], 1
jg 0x1003125d
mov dword [ebp - 0x44c], 1
jmp 0x10031264
and dword [ebp - 0x44c], 0
mov eax, dword [ebp - 0x44c]
mov dword [ebp - 0x9c], eax
jmp 0x100311a0
jmp 0x1003132a
mov dword [ebp - 0xac0], 0xe8793eb1
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0x240], 0xd142575e
imul eax, dword [ebp - 0x9c], 0xfffffff7
cmp eax, 3
jl 0x100312ad
mov dword [ebp - 0x774], 1
jmp 0x100312b4
and dword [ebp - 0x774], 0
mov eax, dword [ebp - 0xac0]
cmp eax, dword [ebp - 0x774]
jl 0x100312d7
mov eax, 0x1a91f101
test eax, eax
je 0x100312d7
mov dword [ebp - 0x454], 1
jmp 0x100312de
and dword [ebp - 0x454], 0
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0x240], 0x6794
cmp dword [ebp - 0x454], 0x6794
jg 0x10031307
mov dword [ebp - 0x66c], 1
jmp 0x1003130e
and dword [ebp - 0x66c], 0
push dword [ebp - 0x10]
lea ecx, [ebp - 0x194]
call fcn.10012ae3
mov eax, dword [eax]
add eax, dword [ebp - 0x66c]
mov dword [ebp - 0xac8], eax
jmp 0x10030f3c
mov dword [ebp - 0x9c], 2
jmp 0x10031348
mov eax, dword [ebp - 0x9c]
dec eax
mov dword [ebp - 0x9c], eax
cmp dword [ebp - 0x9c], 0
jl 0x1003150d
mov dword [ebp - 0x10], 2
jmp 0x10031365
mov eax, dword [ebp - 0x10]
dec eax
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], 0
jl 0x10031394
mov byte [ebp - 0xab], 0
push 0x603d
push 0x11c4
lea eax, [ebp - 0xab]
push eax
push 0
push 0x6f8
call fcn.1003e5f4
add esp, 0x14
jmp 0x1003135e
push 1
lea ecx, [ebp - 0x194]
call fcn.10012ae3
cmp dword [eax], 0
jne 0x100313b5
cmp dword [ebp - 0x10], 0
jne 0x100313b5
and dword [ebp - 0x464], 0
jmp 0x100313bf
mov dword [ebp - 0x464], 1
push dword [ebp - 0x9c]
lea ecx, [ebp - 0x36c]
call fcn.10012ae3
cmp dword [eax], 0
jne 0x10031442
push 3
lea ecx, [ebp - 0x194]
call fcn.10012ae3
mov ecx, dword [ebp - 0xbc]
cmp dword [eax], ecx
jge 0x100313f8
mov dword [ebp - 0x45c], 1
jmp 0x100313ff
and dword [ebp - 0x45c], 0
mov esi, dword [ebp - 0x45c]
sub esi, dword [ebp - 0x10]
push 0
lea ecx, [ebp - 0x36c]
call fcn.10012ae3
cmp esi, dword [eax]
jle 0x10031425
mov dword [ebp - 0x7fc], 1
jmp 0x1003142c
and dword [ebp - 0x7fc], 0
mov eax, dword [ebp - 0x7fc]
sub eax, 0xffff
jne 0x10031442
and dword [ebp - 0x674], 0
jmp 0x1003144c
mov dword [ebp - 0x674], 1
mov eax, dword [ebp - 0x464]
cmp eax, dword [ebp - 0x674]
jg 0x10031466
mov dword [ebp - 0x46c], 1
jmp 0x1003146d
and dword [ebp - 0x46c], 0
push 2
lea ecx, [ebp - 0x194]
call fcn.10012ae3
mov ecx, dword [ebp - 0x46c]
cmp ecx, dword [eax]
jg 0x10031490
mov dword [ebp - 0x77c], 1
jmp 0x10031497
and dword [ebp - 0x77c], 0
push dword [ebp - 0x9c]
lea ecx, [ebp - 0x36c]
call fcn.10012ae3
mov eax, dword [eax]
cmp eax, dword [ebp - 0x77c]
je 0x100314d0
mov eax, 0xffff
test eax, eax
je 0x100314d0
mov eax, 0x216f
test eax, eax
je 0x100314d0
mov dword [ebp - 0x474], 1
jmp 0x100314d7
and dword [ebp - 0x474], 0
cmp dword [ebp - 0x474], 0xfffffff8
je 0x100314ec
mov dword [ebp - 0x67c], 1
jmp 0x100314f3
and dword [ebp - 0x67c], 0
push 1
lea ecx, [ebp - 0x36c]
call fcn.10012ae3
mov ecx, dword [ebp - 0x67c]
mov dword [eax], ecx
jmp 0x1003133b
jmp 0x10030f08
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x36c]
call fcn.10012ac7
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x194]
call fcn.10012ac7
mov dword [ebp - 0x1f8], 0
jmp 0x10031549
mov eax, dword [ebp - 0x1f8]
dec eax
mov dword [ebp - 0x1f8], eax
cmp dword [ebp - 0x1f8], 0xfffffffb
jg 0x1003215c
mov dword [ebp - 0xcd8], 1
mov byte [ebp - 0xad], 0
movzx eax, byte [ebp - 0xad]
test eax, eax
je 0x10031580
push 0x11fd
push 0
call fcn.1003767f
pop ecx
pop ecx
mov byte [ebp - 0xaf], 0
movzx eax, byte [ebp - 0xaf]
test eax, eax
je 0x100315be
push 0x3790
push 1
push 0x2b64
push 0x4754
push 1
push 0x727f
push 0
push 0x7d2e
push 0x21c0
call fcn.1002e65e
add esp, 0x24
push 1
lea ecx, [ebp - 0x86c]
call fcn.10012a45
mov dword [ebp - 4], 6
push 3
lea ecx, [ebp - 0xde8]
call fcn.10012a45
mov byte [ebp - 4], 7
mov dword [ebp - 0x200], 0xe2236432
mov dword [ebp - 0x268], 0
jmp 0x10031606
mov eax, dword [ebp - 0x268]
inc eax
mov dword [ebp - 0x268], eax
cmp dword [ebp - 0x268], 3
jge 0x10031628
push dword [ebp - 0x268]
lea ecx, [ebp - 0xde8]
call fcn.10012ae3
mov dword [eax], 0xb9b55bb2
jmp 0x100315f9
mov dword [ebp - 0x200], 0
jmp 0x10031641
mov eax, dword [ebp - 0x200]
inc eax
mov dword [ebp - 0x200], eax
cmp dword [ebp - 0x200], 2
jg 0x100316a7
mov byte [ebp - 0xa6], 0
movzx eax, byte [ebp - 0xa6]
test eax, eax
je 0x10031675
push 0x47d
push 0
push 0x2b40
push 0x4586
call fcn.10038111
add esp, 0x10
mov byte [ebp - 0xa8], 0
movzx eax, byte [ebp - 0xa8]
test eax, eax
je 0x100316a5
push 0x9eb
push 0
push 0x29d8
push 0x3a03
push 0x44ed
call fcn.10046e10
add esp, 0x14
jmp 0x10031634
mov byte [ebp - 4], 6
lea ecx, [ebp - 0xde8]
call fcn.10012ac7
mov dword [ebp - 0x8fc], 0xd7494dfd
mov dword [ebp - 0xa4], 0xfffffff9
mov dword [ebp - 0x44], 0xd635290c
mov dword [ebp - 0x4b4], 0xa2c930f8
mov dword [ebp - 0x814], 0x9aeda1e1
mov dword [ebp - 0x8e4], 0x97d63f7c
mov dword [ebp - 0x9e4], 0xfffffffc
mov dword [ebp - 0xce0], 0x6f056e99
mov dword [ebp - 0x248], 0
jmp 0x1003171c
mov eax, dword [ebp - 0x248]
inc eax
mov dword [ebp - 0x248], eax
cmp dword [ebp - 0x248], 1
jge 0x10031738
mov eax, dword [ebp - 0x248]
mov dword [ebp + eax*4 - 0x208], 0x841b
jmp 0x1003170f
mov dword [ebp - 0xa4], 0
jmp 0x10031751
mov eax, dword [ebp - 0xa4]
inc eax
mov dword [ebp - 0xa4], eax
cmp dword [ebp - 0xa4], 0
jg 0x10031e06
mov dword [ebp - 0x40], 0xffffffff
mov dword [ebp - 0x40], 0
jmp 0x10031775
mov eax, dword [ebp - 0x40]
dec eax
mov dword [ebp - 0x40], eax
cmp dword [ebp - 0x40], 0
jl 0x10031c09
mov dword [ebp - 0x5c], 0
mov dword [ebp - 0x8dc], 0x1cc8
cmp dword [ebp - 0x8dc], 0xf48
jge 0x10031909
lea eax, [ebp - 0x16c]
push eax
push 0x1000bdf0
call fcn.10053beb
pop ecx
pop ecx
cmp dword [ebp - 0x16c], 4
jge 0x100317cc
push 0x1000c03c
call fcn.10053fdd
pop ecx
jmp 0x10031909
mov eax, dword [ebp - 0x16c]
and eax, 0x80000001
jns 0x100317de
dec eax
or eax, 0xfffffffe
inc eax
test eax, eax
jne 0x10031867
push 0x1000c040
call fcn.10053fdd
pop ecx
push 0x1000c3dc
call fcn.10053fdd
pop ecx
push 0x1000c3e8
call fcn.10053fdd
pop ecx
push 0x1000c3f4
call fcn.10053fdd
pop ecx
mov dword [ebp - 0x144], 6
jmp 0x1003182c
mov eax, dword [ebp - 0x144]
inc eax
inc eax
mov dword [ebp - 0x144], eax
mov eax, dword [ebp - 0x144]
cmp eax, dword [ebp - 0x16c]
jg 0x10031862
mov eax, dword [ebp - 0x144]
dec eax
push eax
push dword [ebp - 0x144]
push 0x1000c400
call fcn.10053e1f
add esp, 0xc
push 0x1000c410
call fcn.10053fdd
pop ecx
jmp 0x1003181e
jmp 0x10031909
mov eax, dword [ebp - 0x16c]
and eax, 0x80000001
jns 0x10031879
dec eax
or eax, 0xfffffffe
inc eax
cmp eax, 1
jne 0x10031909
push 0x1000c040
call fcn.10053fdd
pop ecx
push 0x1000c41c
call fcn.10053fdd
pop ecx
push 0x1000c428
call fcn.10053fdd
pop ecx
push 0x1000c434
call fcn.10053fdd
pop ecx
push 0x1000c440
call fcn.10053fdd
pop ecx
mov dword [ebp - 0x14c], 7
jmp 0x100318d3
mov eax, dword [ebp - 0x14c]
inc eax
inc eax
mov dword [ebp - 0x14c], eax
mov eax, dword [ebp - 0x14c]
cmp eax, dword [ebp - 0x16c]
jg 0x10031909
mov eax, dword [ebp - 0x14c]
dec eax
push eax
push dword [ebp - 0x14c]
push 0x1000c400
call fcn.10053e1f
add esp, 0xc
push 0x1000c410
call fcn.10053fdd
pop ecx
jmp 0x100318c5
mov byte [ebp - 0xb5], 0
movzx eax, byte [ebp - 0xb5]
test eax, eax
je 0x1003192f
push 0x76c0
push 0
push 0x5e0f
call fcn.10037279
add esp, 0xc
mov dword [ebp - 0x5c], 0
jmp 0x1003193f
mov eax, dword [ebp - 0x5c]
inc eax
mov dword [ebp - 0x5c], eax
cmp dword [ebp - 0x5c], 0
jg 0x10031c04
mov dword [ebp - 0x4a4], 0x7d1afd06
mov dword [ebp - 0x4bc], 9
cmp dword [ebp - 0xa4], 0
je 0x10031a02
mov eax, dword [ebp - 0x40]
cmp dword [ebp - 0x5c], eax
jl 0x1003197e
mov dword [ebp - 0x47c], 1
jmp 0x10031985
and dword [ebp - 0x47c], 0
mov eax, dword [ebp - 0x5c]
cmp dword [ebp - 0x4a4], eax
jl 0x1003199c
mov dword [ebp - 0x80c], 1
jmp 0x100319a3
and dword [ebp - 0x80c], 0
mov eax, dword [ebp - 0x47c]
cmp eax, dword [ebp - 0x80c]
jg 0x100319bd
mov dword [ebp - 0x484], 1
jmp 0x100319c4
and dword [ebp - 0x484], 0
mov eax, dword [ebp - 0x40]
cmp dword [ebp - 0x484], eax
je 0x100319e1
mov eax, 0xfffd
test eax, eax
jne 0x100319e1
and dword [ebp - 0x684], 0
jmp 0x100319eb
mov dword [ebp - 0x684], 1
mov eax, dword [ebp - 0x40]
cmp dword [ebp - 0x684], eax
jg 0x10031a02
mov dword [ebp - 0x48c], 1
jmp 0x10031a09
and dword [ebp - 0x48c], 0
cmp dword [ebp - 0x48c], 0xffffffff
jge 0x10031a1e
mov dword [ebp - 0x9f0], 1
jmp 0x10031a25
and dword [ebp - 0x9f0], 0
mov eax, dword [ebp - 0xa4]
mov dword [ebp - 0xce8], eax
cmp dword [ebp - 0x5c], 0x920a
jl 0x10031a46
mov dword [ebp - 0x784], 1
jmp 0x10031a4d
and dword [ebp - 0x784], 0
mov eax, dword [ebp - 0xa4]
add eax, dword [ebp - 0x784]
mov dword [ebp - 0x44], eax
mov dword [ebp - 0x44], 0
jmp 0x10031a6c
mov eax, dword [ebp - 0x44]
dec eax
mov dword [ebp - 0x44], eax
cmp dword [ebp - 0x44], 0
jl 0x10031bff
mov eax, dword [ebp - 0x44]
cmp dword [ebp + eax*4 - 0x208], 0
je 0x10031a88
jmp 0x10031bff
cmp dword [ebp - 0x5c], 0x1516
jl 0x10031a9d
mov dword [ebp - 0x78c], 1
jmp 0x10031aa4
and dword [ebp - 0x78c], 0
cmp dword [ebp - 0x44], 0x332e0c28
jg 0x10031ab9
mov dword [ebp - 0x494], 1
jmp 0x10031ac0
and dword [ebp - 0x494], 0
mov eax, dword [ebp - 0x44]
or ecx, 0xffffffff
sub ecx, dword [ebp + eax*4 - 0x208]
cmp ecx, dword [ebp - 0x5c]
jne 0x10031ade
mov dword [ebp - 0x68c], 1
jmp 0x10031ae5
and dword [ebp - 0x68c], 0
mov eax, dword [ebp - 0x494]
neg eax
cmp eax, dword [ebp - 0x68c]
je 0x10031b01
mov dword [ebp - 0x49c], 1
jmp 0x10031b08
and dword [ebp - 0x49c], 0
mov eax, dword [ebp - 0x40]
cmp dword [ebp - 0x49c], eax
je 0x10031b1f
mov dword [ebp - 0x930], 1
jmp 0x10031b26
and dword [ebp - 0x930], 0
mov eax, dword [ebp - 0xa4]
add eax, dword [ebp - 0x5c]
mov dword [ebp - 0x814], eax
jne 0x10031b4d
mov eax, dword [ebp - 0x44]
cmp dword [ebp + eax*4 - 0x208], 0
jne 0x10031b4d
and dword [ebp - 0xa6c], 0
jmp 0x10031b57
mov dword [ebp - 0xa6c], 1
mov eax, dword [ebp - 0x40]
mov dword [ebp - 0xcf0], eax
mov eax, dword [ebp - 0x44]
mov eax, dword [ebp + eax*4 - 0x208]
mov dword [ebp - 0xcf8], eax
imul eax, dword [ebp - 0x4a4], 7
cmp eax, dword [ebp - 0x40]
jge 0x10031b88
mov dword [ebp - 0x694], 1
jmp 0x10031b8f
and dword [ebp - 0x694], 0
cmp dword [ebp - 0x694], 0xdea9
jl 0x10031ba7
mov dword [ebp - 0x4ac], 1
jmp 0x10031bae
and dword [ebp - 0x4ac], 0
cmp dword [ebp - 0x4ac], 4
jne 0x10031bc3
mov dword [ebp - 0x69c], 1
jmp 0x10031bca
and dword [ebp - 0x69c], 0
mov eax, dword [ebp - 0x78c]
mov dword [ebp - 0x4b4], eax
mov eax, dword [ebp - 0x4b4]
add eax, dword [ebp - 0x69c]
imul eax, eax, 0x7d98
mov dword [ebp - 0x4bc], eax
mov eax, dword [ebp - 0x4bc]
mov dword [ebp - 0x8e4], eax
jmp 0x10031a65
jmp 0x10031938
jmp 0x1003176e
lea eax, [ebp - 0x9e4]
push eax
lea eax, [ebp - 0x40]
push eax
push 0x4cc1
lea eax, [ebp - 0x44]
push eax
push 0
push 0x6564
call fcn.10036ee6
add esp, 0x18
mov dword [ebp - 0x8ec], 0x2077
cmp dword [ebp - 0x8ec], 0x10eb
jge 0x10031e01
mov dword [ebp - 0xd00], 0x989680
lea eax, [ebp - 0x17c]
push eax
push 0x1000bf0c
call fcn.10053beb
pop ecx
pop ecx
push dword [ebp - 0x17c]
lea ecx, [ebp - 0xc00]
call fcn.10012a45
mov byte [ebp - 4], 8
push dword [ebp - 0x17c]
lea ecx, [ebp - 0xc3c]
call fcn.10012a45
mov byte [ebp - 4], 9
and dword [ebp - 0x288], 0
jmp 0x10031ca3
mov eax, dword [ebp - 0x288]
inc eax
mov dword [ebp - 0x288], eax
mov eax, dword [ebp - 0x288]
cmp eax, dword [ebp - 0x17c]
jge 0x10031cd1
push dword [ebp - 0x288]
lea ecx, [ebp - 0xc00]
call fcn.10012ae3
push eax
push 0x1000bf0c
call fcn.10053beb
pop ecx
pop ecx
jmp 0x10031c96
and dword [ebp - 0x210], 0
jmp 0x10031ce7
mov eax, dword [ebp - 0x210]
inc eax
mov dword [ebp - 0x210], eax
mov eax, dword [ebp - 0x210]
cmp eax, dword [ebp - 0x17c]
jge 0x10031d15
push dword [ebp - 0x210]
lea ecx, [ebp - 0xc3c]
call fcn.10012ae3
push eax
push 0x1000bf0c
call fcn.10053beb
pop ecx
pop ecx
jmp 0x10031cda
movsd xmm0, qword [0x1000c508]
movsd qword [ebp - 0xa24], xmm0
and dword [ebp - 0x250], 0
jmp 0x10031d3b
mov eax, dword [ebp - 0x250]
inc eax
mov dword [ebp - 0x250], eax
cmp dword [ebp - 0x250], 0x989680
jge 0x10031dbf
and dword [ebp - 0x154], 0
jmp 0x10031d5d
mov eax, dword [ebp - 0x154]
inc eax
mov dword [ebp - 0x154], eax
mov eax, dword [ebp - 0x154]
cmp eax, dword [ebp - 0x17c]
jge 0x10031dba
push dword [ebp - 0x154]
lea ecx, [ebp - 0xc00]
call fcn.10012ae3
mov ecx, eax
mov eax, dword [ebp - 0x250]
cdq
idiv dword [ecx]
mov esi, edx
push dword [ebp - 0x154]
lea ecx, [ebp - 0xc3c]
call fcn.10012ae3
cmp esi, dword [eax]
jne 0x10031db8
movsd xmm0, qword [ebp - 0xa24]
addsd xmm0, qword [0x1000c528]
movsd qword [ebp - 0xa24], xmm0
jmp 0x10031dba
jmp 0x10031d50
jmp 0x10031d2e
movsd xmm0, qword [ebp - 0xa24]
divsd xmm0, qword [0x1000c550]
push ecx
push ecx
movsd qword [esp], xmm0
push 0x1000c44c
call fcn.10053e1f
add esp, 0xc
mov byte [ebp - 4], 8
lea ecx, [ebp - 0xc3c]
call fcn.10012ac7
mov byte [ebp - 4], 6
lea ecx, [ebp - 0xc00]
call fcn.10012ac7
jmp 0x10031744
push 1
lea ecx, [ebp - 0xdf8]
call fcn.10012a45
mov byte [ebp - 4], 0xa
mov dword [ebp - 0x218], 0
jmp 0x10031e30
mov eax, dword [ebp - 0x218]
inc eax
mov dword [ebp - 0x218], eax
cmp dword [ebp - 0x218], 1
jge 0x10031e52
push dword [ebp - 0x218]
lea ecx, [ebp - 0xdf8]
call fcn.10012ae3
mov dword [eax], 0x24f01c08
jmp 0x10031e23
mov byte [ebp - 0xe5], 0
movzx eax, byte [ebp - 0xe5]
test eax, eax
je 0x10031e76
push 0x84a
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetWindowLongA]
mov byte [ebp - 0xb7], 0
push 0
lea eax, [ebp - 0xb7]
push eax
call fcn.10037a28
pop ecx
pop ecx
mov byte [ebp - 4], 6
lea ecx, [ebp - 0xdf8]
call fcn.10012ac7
push 0x26c7
push 0x5d29
lea eax, [ebp - 0xd08]
push eax
push 0
push 0
lea eax, [ebp - 0x86c]
push eax
call fcn.10037d23
add esp, 0x18
mov dword [ebp - 0x8f4], 0xf2e5664d
mov dword [ebp - 0xaa4], 0xfffffffb
push 1
lea ecx, [ebp - 0xc18]
call fcn.10012a45
mov byte [ebp - 4], 0xb
mov dword [ebp - 0x1a4], 0
jmp 0x10031efe
mov eax, dword [ebp - 0x1a4]
inc eax
mov dword [ebp - 0x1a4], eax
cmp dword [ebp - 0x1a4], 1
jge 0x10031f1d
push dword [ebp - 0x1a4]
lea ecx, [ebp - 0xc18]
call fcn.10012ae3
and dword [eax], 0
jmp 0x10031ef1
push 0
lea eax, [ebp - 0xaa4]
push eax
lea eax, [ebp - 0x8f4]
push eax
push 0x6089
lea eax, [ebp - 0xc18]
push eax
call fcn.1003724a
add esp, 0x14
mov byte [ebp - 0xa7], 0
movzx eax, byte [ebp - 0xa7]
test eax, eax
je 0x10031f6e
push 0x7263
push 0
push 0x382b
push 1
push 0x307e
call fcn.100371a8
add esp, 0x14
mov byte [ebp - 4], 6
lea ecx, [ebp - 0xc18]
call fcn.10012ac7
cmp dword [ebp - 0xcc], 0xffffffff
jae 0x10031f92
mov dword [ebp - 0x808], 1
jmp 0x10031f99
and dword [ebp - 0x808], 0
mov eax, dword [ebp - 0xcc]
cmp eax, dword [ebp - 0x808]
jne 0x10031fc2
push 0
lea ecx, [ebp - 0x86c]
call fcn.10012ae3
cmp dword [eax], 0
jne 0x10031fc2
and dword [ebp - 0x4c4], 0
jmp 0x10031fcc
mov dword [ebp - 0x4c4], 1
mov eax, dword [ebp - 0x4c4]
neg eax
jne 0x10031fdf
cmp dword [ebp - 0x2ec], 0
je 0x10031ff4
cmp dword [ebp - 0xcc], 0
je 0x10031ff4
mov dword [ebp - 0x6a4], 1
jmp 0x10031ffb
and dword [ebp - 0x6a4], 0
mov eax, dword [ebp - 0xcc]
cmp eax, dword [ebp - 0x6a4]
jge 0x10032015
mov dword [ebp - 0x4cc], 1
jmp 0x1003201c
and dword [ebp - 0x4cc], 0
cmp dword [ebp - 0x4cc], 0xed1d25bb
je 0x10032034
mov dword [ebp - 0x794], 1
jmp 0x1003203b
and dword [ebp - 0x794], 0
mov esi, dword [ebp - 0x2ec]
push 0
lea ecx, [ebp - 0x86c]
call fcn.10012ae3
mov ecx, dword [ebp - 0x794]
add ecx, dword [eax]
cmp esi, ecx
jle 0x10032066
mov dword [ebp - 0x4d4], 1
jmp 0x1003206d
and dword [ebp - 0x4d4], 0
push 0
lea ecx, [ebp - 0x86c]
call fcn.10012ae3
mov ecx, dword [ebp - 0x4d4]
cmp ecx, dword [eax]
jne 0x10032096
cmp dword [ebp - 0xcc], 0
jne 0x10032096
and dword [ebp - 0x6ac], 0
jmp 0x100320a0
mov dword [ebp - 0x6ac], 1
mov eax, dword [ebp - 0x2ec]
cmp dword [ebp - 0x6ac], eax
jl 0x100320ba
mov dword [ebp - 0x4dc], 1
jmp 0x100320c1
and dword [ebp - 0x4dc], 0
push 0
lea ecx, [ebp - 0x86c]
call fcn.10012ae3
mov esi, dword [eax]
add esi, dword [ebp - 0x4dc]
push 0
lea ecx, [ebp - 0x86c]
call fcn.10012ae3
sub esi, dword [eax]
cmp esi, dword [ebp - 0xcc]
jle 0x100320ff
mov eax, 0x8413
test eax, eax
jne 0x100320ff
and dword [ebp - 0x83c], 0
jmp 0x10032109
mov dword [ebp - 0x83c], 1
push 0
lea ecx, [ebp - 0x86c]
call fcn.10012ae3
mov ecx, dword [ebp - 0x83c]
add ecx, dword [eax]
je 0x10032135
cmp dword [ebp - 0xc4], 0
je 0x10032135
mov dword [ebp - 0x9ec], 1
jmp 0x1003213c
and dword [ebp - 0x9ec], 0
mov eax, dword [ebp - 0xcc]
mov dword [ebp - 0x8fc], eax
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x86c]
call fcn.10012ac7
jmp 0x1003153c
jmp 0x10030d4f
mov eax, dword [ebp - 0x28c]
mov eax, dword [eax + 4]
mov dword [ebp - 0x7b8], eax
mov dword [ebp - 0xd4], 0xfffffffc
mov dword [ebp - 0x12c], 8
mov dword [ebp - 0x4c], 6
mov dword [ebp - 0x1ac], 0
jmp 0x100321a4
mov eax, dword [ebp - 0x1ac]
inc eax
mov dword [ebp - 0x1ac], eax
cmp dword [ebp - 0x1ac], 1
jge 0x100321bd
mov eax, dword [ebp - 0x1ac]
mov dword [ebp + eax*4 - 0x6c], 0xffffffff
jmp 0x10032197
mov dword [ebp - 0xd4], 0
jmp 0x100321d6
mov eax, dword [ebp - 0xd4]
dec eax
mov dword [ebp - 0xd4], eax
cmp dword [ebp - 0xd4], 0
jl 0x100323f7
mov dword [ebp - 0x174], 0x85faafe3
mov dword [ebp - 0x2c4], 8
mov dword [ebp - 0x174], 0x9ed9ba07
mov eax, dword [ebp - 0xd4]
mov eax, dword [ebp + eax*4 - 0x6c]
cmp eax, dword [ebp - 0x174]
jne 0x1003221f
mov dword [ebp - 0x4e4], 1
jmp 0x10032226
and dword [ebp - 0x4e4], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x6c]
neg eax
cmp dword [ebp - 0x4e4], eax
jge 0x1003232c
mov eax, dword [ebp - 0xd4]
cmp dword [ebp + eax*4 - 0x6c], 0
je 0x100322b3
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x6c]
mov dword [ebp - 0xd10], eax
mov eax, dword [ebp - 0xd4]
mov dword [ebp - 0x12c], eax
mov eax, dword [ebp - 0x12c]
inc eax
mov dword [ebp - 0x2c4], eax
mov eax, dword [ebp - 0x174]
cmp dword [ebp - 0x2c4], eax
jle 0x1003228e
mov dword [ebp - 0x6b4], 1
jmp 0x10032295
and dword [ebp - 0x6b4], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x6c]
cmp dword [ebp - 0x6b4], eax
je 0x100322b3
mov dword [ebp - 0x4ec], 1
jmp 0x100322ba
and dword [ebp - 0x4ec], 0
mov eax, dword [ebp - 0x4ec]
mov dword [ebp - 0x4c], eax
cmp dword [ebp - 0x4c], 0
jne 0x100322e2
push 6
pop eax
test eax, eax
jne 0x100322e2
cmp dword [ebp - 0x174], 0
jne 0x100322e2
and dword [ebp - 0x79c], 0
jmp 0x100322ec
mov dword [ebp - 0x79c], 1
cmp dword [ebp - 0x79c], 0xfffa
ja 0x10032304
mov dword [ebp - 0xa74], 1
jmp 0x1003230b
and dword [ebp - 0xa74], 0
mov eax, dword [ebp - 0x174]
mov dword [ebp - 0xd18], eax
cmp dword [ebp - 0x12c], 0
je 0x1003232c
mov dword [ebp - 0x4f4], 1
jmp 0x10032333
and dword [ebp - 0x4f4], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x6c]
add eax, dword [ebp - 0x4f4]
je 0x10032361
mov byte [ebp - 0xb1], 0
movzx eax, byte [ebp - 0xb1]
test eax, eax
je 0x1003235f
push 0
call dword [sym.imp.KERNEL32.dll_ClearCommBreak]
jmp 0x100323b3
mov dword [ebp - 0x904], 0x72737ae9
mov dword [ebp - 0x1b4], 0
jmp 0x10032384
mov eax, dword [ebp - 0x1b4]
inc eax
mov dword [ebp - 0x1b4], eax
cmp dword [ebp - 0x1b4], 2
jge 0x100323a0
mov eax, dword [ebp - 0x1b4]
mov dword [ebp + eax*4 - 0xe50], 0x3acb
jmp 0x10032377
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0xe50]
mov dword [ebp - 0x904], eax
mov dword [ebp - 0x4c], 0
jmp 0x100323c3
mov eax, dword [ebp - 0x4c]
inc eax
mov dword [ebp - 0x4c], eax
cmp dword [ebp - 0x4c], 0
jg 0x100323f2
lea eax, [ebp - 0x2c4]
push eax
push 0x440a
push 0
push 0x324d
push 0x1e45
push 0x343b
push 1
call fcn.1003ed7b
add esp, 0x1c
jmp 0x100323bc
jmp 0x100321c9
mov dword [ebp - 0x4c], 0
jmp 0x10032407
mov eax, dword [ebp - 0x4c]
dec eax
mov dword [ebp - 0x4c], eax
cmp dword [ebp - 0x4c], 0
jl 0x1003253f
mov dword [ebp - 0x90c], 0xf69a
mov dword [ebp - 0x504], 0xdb40437e
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x6c], 0xffffffff
jg 0x10032447
cmp dword [ebp - 0x12c], 0
je 0x10032447
mov dword [ebp - 0x9f4], 1
jmp 0x1003244e
and dword [ebp - 0x9f4], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x6c]
mov dword [ebp - 0xd20], eax
mov eax, 0x6a3f
add eax, 0xc01e
cmp eax, 0xfffc
je 0x1003247b
mov dword [ebp - 0x6bc], 1
jmp 0x10032482
and dword [ebp - 0x6bc], 0
cmp dword [ebp - 0x6bc], 0
jg 0x10032497
mov dword [ebp - 0x4fc], 1
jmp 0x1003249e
and dword [ebp - 0x4fc], 0
cmp dword [ebp - 0x4fc], 9
jle 0x100324b3
mov dword [ebp - 0x810], 1
jmp 0x100324ba
and dword [ebp - 0x810], 0
mov eax, dword [ebp - 0x90c]
add eax, dword [ebp - 0x810]
mov dword [ebp - 0x504], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x6c]
cmp eax, dword [ebp - 0x504]
jl 0x100324ea
mov dword [ebp - 0x6c4], 1
jmp 0x100324f1
and dword [ebp - 0x6c4], 0
mov eax, dword [ebp - 0x4c]
cmp dword [ebp - 0x6c4], eax
je 0x10032508
mov dword [ebp - 0x50c], 1
jmp 0x1003250f
and dword [ebp - 0x50c], 0
cmp dword [ebp - 0x50c], 0x22d800f4
jge 0x10032527
mov dword [ebp - 0x7a4], 1
jmp 0x1003252e
and dword [ebp - 0x7a4], 0
mov eax, dword [ebp - 0x7a4]
mov dword [ebp - 0x12c], eax
jmp 0x10032400
mov dword [ebp - 0x120], 0
push 1
lea ecx, [ebp - 0xb0c]
call fcn.10012a45
mov dword [ebp - 4], 0xc
mov dword [ebp - 0x1bc], 0
jmp 0x10032576
mov eax, dword [ebp - 0x1bc]
inc eax
mov dword [ebp - 0x1bc], eax
cmp dword [ebp - 0x1bc], 1
jge 0x10032598
push dword [ebp - 0x1bc]
lea ecx, [ebp - 0xb0c]
call fcn.10012ae3
mov dword [eax], 0xd133f29
jmp 0x10032569
mov dword [ebp - 0x120], 0
jmp 0x100325b1
mov eax, dword [ebp - 0x120]
dec eax
mov dword [ebp - 0x120], eax
cmp dword [ebp - 0x120], 0xfffffff8
jge 0x100327d5
mov dword [ebp - 0x130], 0xb96ca2cb
mov dword [ebp - 0x1c4], 0
jmp 0x100325e1
mov eax, dword [ebp - 0x1c4]
inc eax
mov dword [ebp - 0x1c4], eax
cmp dword [ebp - 0x1c4], 2
jge 0x100325fd
mov eax, dword [ebp - 0x1c4]
mov dword [ebp + eax*4 - 0xc74], 0
jmp 0x100325d4
mov dword [ebp - 0x130], 0
jmp 0x10032616
mov eax, dword [ebp - 0x130]
dec eax
mov dword [ebp - 0x130], eax
cmp dword [ebp - 0x130], 0xffffffe7
je 0x100327d0
push 1
lea ecx, [ebp - 0x8a8]
call fcn.10012a45
mov byte [ebp - 4], 0xd
mov dword [ebp - 0x6cc], 3
mov dword [ebp - 0x80], 0
jmp 0x1003264e
mov eax, dword [ebp - 0x80]
inc eax
mov dword [ebp - 0x80], eax
cmp dword [ebp - 0x80], 1
jge 0x10032664
mov eax, dword [ebp - 0x80]
mov dword [ebp + eax*4 - 0xacc], 0x4ab274bf
jmp 0x10032647
mov dword [ebp - 0x80], 0
jmp 0x10032674
mov eax, dword [ebp - 0x80]
inc eax
mov dword [ebp - 0x80], eax
cmp dword [ebp - 0x80], 1
jge 0x10032690
push dword [ebp - 0x80]
lea ecx, [ebp - 0x8a8]
call fcn.10012ae3
mov dword [eax], 0x2086bd08
jmp 0x1003266d
push 0
lea ecx, [ebp - 0x8a8]
call fcn.10012ae3
and dword [eax], 0
jmp 0x100326c6
push 0
lea ecx, [ebp - 0x8a8]
call fcn.10012ae3
mov dword [ebp - 0x514], eax
mov eax, dword [ebp - 0x514]
mov eax, dword [eax]
inc eax
mov ecx, dword [ebp - 0x514]
mov dword [ecx], eax
push 0
lea ecx, [ebp - 0x8a8]
call fcn.10012ae3
cmp dword [eax], 0
jg 0x100327bc
mov dword [ebp - 0x6cc], 0xc1d6b3bf
mov eax, dword [ebp - 0x120]
cmp dword [ebp - 0x6cc], eax
jl 0x10032700
mov dword [ebp - 0x304], 1
jmp 0x10032707
and dword [ebp - 0x304], 0
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x304]
mov dword [ebp + eax - 0xc74], ecx
mov eax, 0x5fffa
sub eax, dword [ebp - 0x120]
add eax, dword [ebp - 0x304]
push 4
pop ecx
imul ecx, ecx, 0
cmp dword [ebp + ecx - 0xacc], eax
jg 0x10032746
mov dword [ebp - 0x51c], 1
jmp 0x1003274d
and dword [ebp - 0x51c], 0
push 0
lea ecx, [ebp - 0x8a8]
call fcn.10012ae3
mov esi, dword [ebp - 0x130]
imul esi, dword [ebp - 0x51c]
add esi, dword [eax]
push 0
lea ecx, [ebp - 0xb0c]
call fcn.10012ae3
mov dword [eax], esi
mov dword [ebp - 0x914], 0x24f3
cmp dword [ebp - 0x914], 0x754
mov byte [ebp - 0xb3], 0
movzx eax, byte [ebp - 0xb3]
test eax, eax
je 0x100327b7
push 0x85b
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_SetLayout]
jmp 0x100326a2
mov byte [ebp - 4], 0xc
lea ecx, [ebp - 0x8a8]
call fcn.10012ac7
jmp 0x10032609
jmp 0x100325a4
push 0
lea ecx, [ebp - 0xb0c]
call fcn.10012ae3
mov dword [eax], 0x39e22401
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xb0c]
call fcn.10012ac7
mov dword [ebp - 0x70], 1
push 1
lea ecx, [ebp - 0x334]
call fcn.10012a45
mov dword [ebp - 4], 0xe
mov dword [ebp - 0x108], 0xfffffffa
mov dword [ebp - 0xa04], 0xffffffff
mov dword [ebp - 0x90], 0
jmp 0x1003283f
mov eax, dword [ebp - 0x90]
inc eax
mov dword [ebp - 0x90], eax
cmp dword [ebp - 0x90], 2
jge 0x1003285b
mov eax, dword [ebp - 0x90]
mov dword [ebp + eax*4 - 0xfc], 0
jmp 0x10032832
mov dword [ebp - 0x90], 0
jmp 0x10032874
mov eax, dword [ebp - 0x90]
inc eax
mov dword [ebp - 0x90], eax
cmp dword [ebp - 0x90], 1
jge 0x10032896
push dword [ebp - 0x90]
lea ecx, [ebp - 0x334]
call fcn.10012ae3
mov dword [eax], 0xfffffffb
jmp 0x10032867
push 4
pop eax
shl eax, 0
mov dword [ebp + eax - 0xfc], 7
jmp 0x100328c4
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0xfc]
dec eax
push 4
pop ecx
shl ecx, 0
mov dword [ebp + ecx - 0xfc], eax
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0xfc], 0xfffffff6
jge 0x10032e09
mov dword [ebp - 0x1c], 0x5f88
mov dword [ebp - 0x2cc], 0xb2455f99
mov dword [ebp - 0x91c], 0xaa05
mov dword [ebp - 0x6f4], 0x7d796e99
mov dword [ebp - 0x57c], 0xca00af40
mov dword [ebp - 0x924], 1
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0xd28], eax
mov dword [ebp - 0x2cc], 1
mov eax, dword [ebp - 0x2cc]
push 4
pop ecx
imul ecx, ecx, 0
add eax, dword [ebp + ecx - 0xfc]
jne 0x10032947
or eax, 0xffffffff
jne 0x10032947
and dword [ebp - 0x840], 0
jmp 0x10032951
mov dword [ebp - 0x840], 1
mov eax, dword [ebp - 0x1c]
cmp dword [ebp - 0x840], eax
jg 0x10032968
mov dword [ebp - 0x524], 1
jmp 0x1003296f
and dword [ebp - 0x524], 0
cmp dword [ebp - 0x524], 0xffffffff
je 0x10032984
mov dword [ebp - 0x6d4], 1
jmp 0x1003298b
and dword [ebp - 0x6d4], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0xfc]
cmp dword [ebp - 0x6d4], eax
jle 0x100329ac
mov dword [ebp - 0x52c], 1
jmp 0x100329b3
and dword [ebp - 0x52c], 0
mov eax, dword [ebp - 0x52c]
neg eax
add eax, 0x2a6f
cmp eax, dword [ebp - 0x1c]
jl 0x100329d1
mov dword [ebp - 0x7ac], 1
jmp 0x100329d8
and dword [ebp - 0x7ac], 0
mov eax, dword [ebp - 0x1c]
cmp dword [ebp - 0x7ac], eax
jge 0x100329f8
mov eax, 0xe46552de
test eax, eax
je 0x100329f8
mov dword [ebp - 0x534], 1
jmp 0x100329ff
and dword [ebp - 0x534], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0xfc]
cmp dword [ebp - 0x534], eax
jl 0x10032a20
mov dword [ebp - 0x6dc], 1
jmp 0x10032a27
and dword [ebp - 0x6dc], 0
cmp dword [ebp - 0x6dc], 0x8642
jge 0x10032a3f
mov dword [ebp - 0x9fc], 1
jmp 0x10032a46
and dword [ebp - 0x9fc], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xfc]
mov dword [ebp - 0xd30], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xfc]
mov dword [ebp - 0xd38], eax
mov eax, dword [ebp - 0x2cc]
push 4
pop ecx
shl ecx, 0
add eax, dword [ebp + ecx - 0xfc]
push 4
pop ecx
shl ecx, 0
sub eax, dword [ebp + ecx - 0xfc]
cmp eax, dword [ebp - 0x1c]
jg 0x10032a9d
mov dword [ebp - 0x53c], 1
jmp 0x10032aa4
and dword [ebp - 0x53c], 0
mov eax, dword [ebp - 0x91c]
add eax, dword [ebp - 0x53c]
jne 0x10032ac0
xor eax, eax
inc eax
jne 0x10032ac0
and dword [ebp - 0xa7c], 0
jmp 0x10032aca
mov dword [ebp - 0xa7c], 1
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0xfc]
mov dword [ebp - 0xd40], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xfc]
mov dword [ebp - 0x70], eax
cmp dword [ebp - 0x70], 0
je 0x10032d55
mov dword [ebp - 0x2f4], 0xa513
mov dword [ebp - 0x7bc], 0
mov dword [ebp - 0x1c], 0
jmp 0x10032b1b
mov eax, dword [ebp - 0x1c]
inc eax
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 0
jg 0x10032d53
push dword [ebp - 0x1c]
lea ecx, [ebp - 0x334]
call fcn.10012ae3
mov eax, dword [ebp - 0x70]
cmp dword [ebp - 0x2f4], eax
jg 0x10032b4a
mov dword [ebp - 0x818], 1
jmp 0x10032b51
and dword [ebp - 0x818], 0
push 4
pop eax
shl eax, 0
mov esi, dword [ebp + eax - 0xfc]
push dword [ebp - 0x1c]
lea ecx, [ebp - 0x334]
call fcn.10012ae3
cmp esi, dword [eax]
jl 0x10032b7e
push 5
pop eax
test eax, eax
jne 0x10032b7e
cmp dword [ebp - 0x7bc], 0
push dword [ebp - 0x1c]
lea ecx, [ebp - 0x334]
call fcn.10012ae3
cmp dword [eax], 0x4a05a9ee
jge 0x10032ba0
mov dword [ebp - 0x544], 1
jmp 0x10032ba7
and dword [ebp - 0x544], 0
mov eax, dword [ebp - 0x818]
cmp eax, dword [ebp - 0x544]
jg 0x10032bd1
push dword [ebp - 0x1c]
lea ecx, [ebp - 0x334]
call fcn.10012ae3
cmp dword [eax], 0
jne 0x10032bd1
and dword [ebp - 0x6e4], 0
jmp 0x10032bdb
mov dword [ebp - 0x6e4], 1
mov eax, dword [ebp - 0x6f4]
cmp dword [ebp - 0x6e4], eax
jg 0x10032bf5
mov dword [ebp - 0x54c], 1
jmp 0x10032bfc
and dword [ebp - 0x54c], 0
push dword [ebp - 0x1c]
lea ecx, [ebp - 0x334]
call fcn.10012ae3
mov ecx, dword [ebp - 0x54c]
cmp ecx, dword [eax]
jne 0x10032c20
mov dword [ebp - 0x7b4], 1
jmp 0x10032c27
and dword [ebp - 0x7b4], 0
mov eax, dword [ebp - 0x7b4]
add eax, 0x1a4a
jne 0x10032c40
mov dword [ebp - 0x554], 1
jmp 0x10032c47
and dword [ebp - 0x554], 0
cmp dword [ebp - 0x554], 0
jne 0x10032c5c
mov dword [ebp - 0x6ec], 1
jmp 0x10032c63
and dword [ebp - 0x6ec], 0
push dword [ebp - 0x1c]
lea ecx, [ebp - 0x334]
call fcn.10012ae3
mov eax, dword [eax]
cmp eax, dword [ebp - 0x6ec]
jg 0x10032c90
mov eax, 0x6037bad6
test eax, eax
je 0x10032c90
mov dword [ebp - 0x55c], 1
jmp 0x10032c97
and dword [ebp - 0x55c], 0
mov eax, dword [ebp - 0x57c]
cmp dword [ebp - 0x55c], eax
jg 0x10032cb1
mov dword [ebp - 0x870], 1
jmp 0x10032cb8
and dword [ebp - 0x870], 0
mov eax, dword [ebp - 0x108]
cmp dword [ebp - 0x870], eax
jl 0x10032cd2
mov dword [ebp - 0x564], 1
jmp 0x10032cd9
and dword [ebp - 0x564], 0
mov eax, dword [ebp - 0x2f4]
cmp dword [ebp - 0x564], eax
je 0x10032cf3
mov dword [ebp - 0x56c], 1
jmp 0x10032cfa
and dword [ebp - 0x56c], 0
mov eax, dword [ebp - 0x6f4]
cmp dword [ebp - 0x56c], eax
jg 0x10032d14
mov dword [ebp - 0x574], 1
jmp 0x10032d1b
and dword [ebp - 0x574], 0
mov eax, dword [ebp - 0x7bc]
cmp dword [ebp - 0x2f4], 0x415dbe4b
jl 0x10032d39
mov dword [ebp - 0x6fc], 1
jmp 0x10032d40
and dword [ebp - 0x6fc], 0
mov eax, dword [ebp - 0x6fc]
neg eax
mov dword [ebp - 0x924], eax
jmp 0x10032b14
jmp 0x10032d63
cmp dword [ebp - 0xa04], 0
je 0x10032d63
jmp 0x10032e09
mov dword [ebp - 0x70], 0
jmp 0x10032d73
mov eax, dword [ebp - 0x70]
dec eax
mov dword [ebp - 0x70], eax
cmp dword [ebp - 0x70], 0
jl 0x10032e04
mov dword [ebp - 0x92c], 0
mov dword [ebp - 0x108], 0
jmp 0x10032da0
mov eax, dword [ebp - 0x108]
dec eax
mov dword [ebp - 0x108], eax
cmp dword [ebp - 0x108], 0
jl 0x10032dff
push dword [ebp - 0x70]
lea ecx, [ebp - 0x334]
call fcn.10012ae3
cmp dword [eax], 0
je 0x10032dbe
jmp 0x10032dff
lea eax, [ebp - 0x70]
push eax
push 0x1366
push 0x45a3
lea eax, [ebp - 0x1c]
push eax
lea eax, [ebp - 0x108]
push eax
lea eax, [ebp - 0x57c]
push eax
lea eax, [ebp - 0x92c]
push eax
push 0
push 1
lea eax, [ebp - 0x334]
push eax
push 0x6259
call fcn.1002ead4
add esp, 0x2c
jmp 0x10032d93
jmp 0x10032d6c
jmp 0x100328a9
mov byte [ebp - 0xb2], 0
movzx eax, byte [ebp - 0xb2]
test eax, eax
je 0x10032e36
push 0x6245
push 0
push 0
push 0x7d5d
push 0x33d0
call fcn.1003f054
add esp, 0x14
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x334]
call fcn.10012ac7
mov dword [ebp - 0xc58], 0xe56f9b2c
mov dword [ebp - 0xc54], 0xe56f9b2c
mov dword [ebp - 0xc50], 0xe56f9b2c
mov dword [ebp - 0xc4c], 0xe56f9b2c
mov dword [ebp - 0xa0c], 0x3606
push 2
lea ecx, [ebp - 0xc30]
call fcn.10012a45
mov dword [ebp - 4], 0xf
mov dword [ebp - 0xaac], 0xd568d526
mov dword [ebp - 0x934], 0x88d0d3f7
push 0x4215
push 0x193c
push 0
push 0
lea eax, [ebp - 0xd48]
push eax
lea eax, [ebp - 0xc30]
push eax
push 0x3f33
call fcn.10037b9e
add esp, 0x1c
push 0xe57
push 1
lea eax, [ebp - 0xaac]
push eax
push 0x3d8b
push 1
lea eax, [ebp - 0x934]
push eax
push 1
lea eax, [ebp - 0xc30]
push eax
lea eax, [ebp - 0xa0c]
push eax
call fcn.1002e65e
add esp, 0x24
push 0x24c4
push 0
push 0x259a
push 0x4a0d
push 0x471f
push 0x79c3
push 0x2f59
push 0x188d
push 0x2d46
push 1
call fcn.1002f15c
add esp, 0x28
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xc30]
call fcn.10012ac7
mov dword [ebp - 0x148], 0
mov dword [ebp - 0x1cc], 0xe0a8eac8
mov dword [ebp - 0x1cc], 0xffffffeb
jmp 0x10032f6c
mov eax, dword [ebp - 0x1cc]
inc eax
mov dword [ebp - 0x1cc], eax
cmp dword [ebp - 0x1cc], 0x1d
jle 0x10032f9c
mov dword [ebp - 0x93c], 0x1fe77dd6
push 0x8f3
push 0x4427
push 0
lea eax, [ebp - 0x93c]
push eax
call fcn.1003f1bb
add esp, 0x10
jmp 0x10032f5f
mov byte [ebp - 0xd5], 0
lea eax, [ebp - 0xd5]
push eax
push 0x774d
push 0x6ed8
push 0
call fcn.1003fe6d
add esp, 0x10
mov dword [ebp - 0xd50], 5
push 3
lea ecx, [ebp - 0xbdc]
call fcn.10012a45
mov dword [ebp - 4], 0x10
push 3
lea ecx, [ebp - 0xad8]
call fcn.10012a45
mov byte [ebp - 4], 0x11
push 1
lea ecx, [ebp - 0xe08]
call fcn.10012a45
mov byte [ebp - 4], 0x12
mov dword [ebp - 0x118], 0x8959310c
mov dword [ebp - 0x2d4], 0xc5530c4e
mov dword [ebp - 0x944], 6
mov dword [ebp - 0x820], 0xc7d8169b
mov dword [ebp - 0xd58], 0xffffffff
mov dword [ebp - 0x314], 0xffffffff
mov dword [ebp - 0x54], 0
jmp 0x1003304a
mov eax, dword [ebp - 0x54]
inc eax
mov dword [ebp - 0x54], eax
cmp dword [ebp - 0x54], 3
jge 0x10033063
push dword [ebp - 0x54]
lea ecx, [ebp - 0xbdc]
call fcn.10012ae3
or dword [eax], 0xffffffff
jmp 0x10033043
lea eax, [ebp - 0xad8]
push eax
push 0
push 0x55f5
push 0x5305
push 0x583e
push 1
push 0x7090
lea eax, [ebp - 0x54]
push eax
call fcn.1002f30b
add esp, 0x20
mov dword [ebp - 0x54], 0
jmp 0x1003309e
mov eax, dword [ebp - 0x54]
inc eax
mov dword [ebp - 0x54], eax
cmp dword [ebp - 0x54], 1
jge 0x100330ba
push dword [ebp - 0x54]
lea ecx, [ebp - 0xe08]
call fcn.10012ae3
mov dword [eax], 1
jmp 0x10033097
push 0
lea eax, [ebp - 0x118]
push eax
call fcn.10038324
pop ecx
pop ecx
mov dword [ebp - 0x118], 0
jmp 0x100330e3
mov eax, dword [ebp - 0x118]
inc eax
mov dword [ebp - 0x118], eax
cmp dword [ebp - 0x118], 2
jg 0x100332cd
mov dword [ebp - 0x138], 0xffffffff
push 2
lea ecx, [ebp - 0xc48]
call fcn.10012a45
mov byte [ebp - 4], 0x13
mov dword [ebp - 0xd60], 0xf6658d83
mov dword [ebp - 0xac4], 0x42cc3231
mov dword [ebp - 0x1d4], 0
jmp 0x10033138
mov eax, dword [ebp - 0x1d4]
inc eax
mov dword [ebp - 0x1d4], eax
cmp dword [ebp - 0x1d4], 2
jge 0x1003315a
push dword [ebp - 0x1d4]
lea ecx, [ebp - 0xc48]
call fcn.10012ae3
mov dword [eax], 0xa4f69a75
jmp 0x1003312b
mov dword [ebp - 0x138], 0
jmp 0x10033173
mov eax, dword [ebp - 0x138]
inc eax
mov dword [ebp - 0x138], eax
cmp dword [ebp - 0x138], 2
jg 0x100331ce
mov dword [ebp - 0xa84], 0xd4e2095e
lea eax, [ebp - 0xa84]
push eax
lea eax, [ebp - 0x138]
push eax
lea eax, [ebp - 0xbdc]
push eax
lea eax, [ebp - 0xad8]
push eax
push 0x6714
lea eax, [ebp - 0x944]
push eax
push 0
lea eax, [ebp - 0x2d4]
push eax
call fcn.10037e02
add esp, 0x20
mov eax, dword [ebp - 0x820]
inc eax
mov dword [ebp - 0x820], eax
jmp 0x10033166
push dword [ebp - 0x118]
lea ecx, [ebp - 0xad8]
call fcn.10012ae3
mov esi, eax
push 0
lea ecx, [ebp - 0xad8]
call fcn.10012ae3
mov ecx, dword [esi]
cmp ecx, dword [eax]
je 0x10033209
cmp dword [ebp - 0x2d4], 0
je 0x10033209
mov dword [ebp - 0x584], 1
jmp 0x10033210
and dword [ebp - 0x584], 0
mov eax, dword [ebp - 0x2d4]
mov dword [ebp - 0xd68], eax
cmp dword [ebp - 0x584], 0
jne 0x10033231
mov dword [ebp - 0x704], 1
jmp 0x10033238
and dword [ebp - 0x704], 0
mov eax, dword [ebp - 0x314]
mov dword [ebp - 0xa14], eax
mov eax, dword [ebp - 0x704]
mov dword [ebp - 0x94c], eax
mov eax, dword [ebp - 0x314]
dec eax
mov dword [ebp - 0x314], eax
mov eax, dword [ebp - 0xa14]
cmp eax, dword [ebp - 0x94c]
jl 0x10033277
mov dword [ebp - 0x58c], 1
jmp 0x1003327e
and dword [ebp - 0x58c], 0
mov eax, dword [ebp - 0xac4]
add eax, dword [ebp - 0x58c]
cmp eax, 0x4415e40c
jl 0x1003329d
mov dword [ebp - 0x7c4], 1
jmp 0x100332a4
and dword [ebp - 0x7c4], 0
push 0
lea ecx, [ebp - 0xc48]
call fcn.10012ae3
mov ecx, dword [ebp - 0x7c4]
mov dword [eax], ecx
mov byte [ebp - 4], 0x12
lea ecx, [ebp - 0xc48]
call fcn.10012ac7
jmp 0x100330d6
mov byte [ebp - 4], 0x11
lea ecx, [ebp - 0xe08]
call fcn.10012ac7
mov byte [ebp - 4], 0x10
lea ecx, [ebp - 0xad8]
call fcn.10012ac7
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xbdc]
call fcn.10012ac7
mov dword [ebp - 0xd70], 0xffffffff
mov dword [ebp - 0x110], 0x498e64e6
mov dword [ebp - 0xb44], 0x4727cad7
mov dword [ebp - 0xb40], 0x4727cad7
mov dword [ebp - 0xb3c], 0x4727cad7
mov dword [ebp - 0xb38], 0x4727cad7
lea ecx, [ebp - 0x28d]
call fcn.10012af2
push eax
lea eax, [ebp - 0xb34]
push eax
lea eax, [ebp - 0xb44]
push eax
lea ecx, [ebp - 0xf3c]
call fcn.10012af5
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0x360]
call fcn.10012aa1
mov dword [ebp - 4], 0x14
mov dword [ebp - 0x2a0], 1
push 2
lea ecx, [ebp - 0xae8]
call fcn.10012a45
mov byte [ebp - 4], 0x15
mov dword [ebp - 0x72c], 7
mov dword [ebp - 0xa1c], 0xfffffffe
push 4
lea ecx, [ebp - 0xc0c]
call fcn.10012a45
mov byte [ebp - 4], 0x16
mov dword [ebp - 0x964], 0xc327405e
mov dword [ebp - 0x58], 0
jmp 0x100333cc
mov eax, dword [ebp - 0x58]
inc eax
mov dword [ebp - 0x58], eax
cmp dword [ebp - 0x58], 3
jge 0x100333e2
mov eax, dword [ebp - 0x58]
mov dword [ebp + eax*4 - 0x340], 5
jmp 0x100333c5
push 1
push 1
lea eax, [ebp - 0xae8]
push eax
lea eax, [ebp - 0x58]
push eax
call fcn.1002e870
add esp, 0x10
mov dword [ebp - 0x58], 0
jmp 0x10033409
mov eax, dword [ebp - 0x58]
inc eax
mov dword [ebp - 0x58], eax
cmp dword [ebp - 0x58], 4
jge 0x10033425
push dword [ebp - 0x58]
lea ecx, [ebp - 0xc0c]
call fcn.10012ae3
mov dword [eax], 0xe38b
jmp 0x10033402
cmp dword [ebp - 0x110], 0xfff8
jae 0x1003343d
mov dword [ebp - 0x594], 1
jmp 0x10033444
and dword [ebp - 0x594], 0
push 3
lea ecx, [ebp - 0x360]
call fcn.10012ae3
mov ecx, dword [ebp - 0x594]
cmp ecx, dword [eax]
jle 0x10033467
mov dword [ebp - 0x848], 1
jmp 0x1003346e
and dword [ebp - 0x848], 0
cmp dword [ebp - 0x110], 0x78c0
jg 0x10033486
mov dword [ebp - 0x70c], 1
jmp 0x1003348d
and dword [ebp - 0x70c], 0
push 3
lea ecx, [ebp - 0x360]
call fcn.10012ae3
mov ecx, dword [ebp - 0x70c]
cmp ecx, dword [eax]
jle 0x100334b0
mov dword [ebp - 0x59c], 1
jmp 0x100334b7
and dword [ebp - 0x59c], 0
mov eax, dword [ebp - 0x59c]
mov ecx, dword [ebp - 0x848]
lea eax, [ecx + eax - 1]
test eax, eax
jne 0x100334d9
xor eax, eax
inc eax
jne 0x100334d9
and dword [ebp - 0x298], 0
jmp 0x100334e3
mov dword [ebp - 0x298], 1
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x298]
mov dword [ebp + eax - 0x340], ecx
imul eax, dword [ebp - 0x298], 0xa7b0
cmp eax, 0x4f402e31
jne 0x10033513
mov dword [ebp - 0x5a4], 1
jmp 0x1003351a
and dword [ebp - 0x5a4], 0
push 3
lea ecx, [ebp - 0x360]
call fcn.10012ae3
mov ecx, dword [ebp - 0x5a4]
cmp ecx, dword [eax]
je 0x1003353d
mov dword [ebp - 0x714], 1
jmp 0x10033544
and dword [ebp - 0x714], 0
push 3
lea ecx, [ebp - 0x360]
call fcn.10012ae3
mov esi, dword [ebp - 0x714]
sub esi, dword [eax]
push 2
lea ecx, [ebp - 0x360]
call fcn.10012ae3
cmp esi, dword [eax]
jl 0x10033576
mov dword [ebp - 0x5ac], 1
jmp 0x1003357d
and dword [ebp - 0x5ac], 0
mov eax, dword [ebp - 0x5ac]
mov dword [ebp - 0x2a0], eax
cmp dword [ebp - 0x110], 0
je 0x10033687
mov esi, dword [ebp - 0x110]
push 1
lea ecx, [ebp - 0xae8]
call fcn.10012ae3
cmp esi, dword [eax]
jl 0x100335b9
mov dword [ebp - 0x7cc], 1
jmp 0x100335c0
and dword [ebp - 0x7cc], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x340]
add eax, dword [ebp - 0x7cc]
push 4
pop ecx
shl ecx, 1
cmp eax, dword [ebp + ecx - 0x340]
jne 0x100335ed
mov dword [ebp - 0x5b4], 1
jmp 0x100335f4
and dword [ebp - 0x5b4], 0
imul esi, dword [ebp - 0x5b4], 0x9c7d
push 0
lea ecx, [ebp - 0x360]
call fcn.10012ae3
cmp esi, dword [eax]
jge 0x1003361b
mov dword [ebp - 0x954], 1
jmp 0x10033622
and dword [ebp - 0x954], 0
cmp dword [ebp - 0x72c], 0
jne 0x10033639
xor eax, eax
inc eax
jne 0x10033639
and dword [ebp - 0x71c], 0
jmp 0x10033643
mov dword [ebp - 0x71c], 1
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x71c]
sub ecx, 0x1daafe7e
cmp dword [ebp + eax - 0x340], ecx
jg 0x1003366a
mov dword [ebp - 0x5bc], 1
jmp 0x10033671
and dword [ebp - 0x5bc], 0
mov eax, dword [ebp - 0x5bc]
neg eax
je 0x10033687
mov dword [ebp - 0x828], 1
jmp 0x1003368e
and dword [ebp - 0x828], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x340]
mov dword [ebp - 0x2a0], eax
mov eax, dword [ebp - 0x2a0]
cmp eax, dword [ebp - 0x828]
jne 0x100336bb
mov dword [ebp - 0x5c4], 1
jmp 0x100336c2
and dword [ebp - 0x5c4], 0
push 1
lea ecx, [ebp - 0xae8]
call fcn.10012ae3
mov ecx, dword [ebp - 0x5c4]
cmp ecx, dword [eax]
jl 0x100336e5
mov dword [ebp - 0x724], 1
jmp 0x100336ec
and dword [ebp - 0x724], 0
mov eax, dword [ebp - 0x724]
mov dword [ebp - 0xa1c], eax
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x110]
cmp dword [ebp + eax - 0x340], ecx
jle 0x10033719
mov dword [ebp - 0x5cc], 1
jmp 0x10033720
and dword [ebp - 0x5cc], 0
mov eax, dword [ebp - 0x5cc]
neg eax
cmp eax, 0xfff6
ja 0x1003373b
mov dword [ebp - 0x7d4], 1
jmp 0x10033742
and dword [ebp - 0x7d4], 0
mov eax, dword [ebp - 0x110]
cmp dword [ebp - 0x7d4], eax
je 0x1003375c
mov dword [ebp - 0x5d4], 1
jmp 0x10033763
and dword [ebp - 0x5d4], 0
mov eax, dword [ebp - 0x5d4]
sub eax, dword [ebp - 0x72c]
je 0x10033783
push 0
lea ecx, [ebp - 0x360]
call fcn.10012ae3
cmp dword [eax], 0
jne 0x1003379e
push 3
lea ecx, [ebp - 0x360]
call fcn.10012ae3
cmp dword [eax], 0
jne 0x1003379e
and dword [ebp - 0x5dc], 0
jmp 0x100337a8
mov dword [ebp - 0x5dc], 1
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x340]
add eax, dword [ebp - 0x5dc]
cmp eax, 0xfa62
jne 0x100337ce
mov dword [ebp - 0x294], 1
jmp 0x100337d5
and dword [ebp - 0x294], 0
push 3
lea ecx, [ebp - 0xc0c]
call fcn.10012ae3
mov ecx, dword [ebp - 0x294]
mov dword [eax], ecx
push 0
lea ecx, [ebp - 0xae8]
call fcn.10012ae3
mov ecx, dword [ebp - 0x294]
cmp ecx, dword [eax]
jg 0x1003380d
mov dword [ebp - 0x95c], 1
jmp 0x10033814
and dword [ebp - 0x95c], 0
push 8
pop eax
cmp eax, 0xb1cc
je 0x1003382a
mov dword [ebp - 0x860], 1
jmp 0x10033831
and dword [ebp - 0x860], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x340]
cmp dword [ebp - 0x860], eax
jl 0x10033852
mov dword [ebp - 0xa30], 1
jmp 0x10033859
and dword [ebp - 0xa30], 0
push 4
pop eax
shl eax, 0
push 4
pop ecx
imul ecx, ecx, 0
mov ecx, dword [ebp + ecx - 0x340]
cmp dword [ebp + eax - 0x340], ecx
jl 0x10033881
mov dword [ebp - 0x5e4], 1
jmp 0x10033888
and dword [ebp - 0x5e4], 0
cmp dword [ebp - 0x5e4], 0x2dd0
jg 0x100338a0
mov dword [ebp - 0x734], 1
jmp 0x100338a7
and dword [ebp - 0x734], 0
mov eax, dword [ebp - 0x734]
mov dword [ebp - 0x964], eax
mov byte [ebp - 4], 0x15
lea ecx, [ebp - 0xc0c]
call fcn.10012ac7
mov byte [ebp - 4], 0x14
lea ecx, [ebp - 0xae8]
call fcn.10012ac7
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x360]
call fcn.10012ac7
mov dword [ebp - 0x1dc], 0xc1d10227
mov dword [ebp - 0x374], 0xfffffffe
mov dword [ebp - 0x198], 0
jmp 0x1003390d
mov eax, dword [ebp - 0x198]
inc eax
mov dword [ebp - 0x198], eax
cmp dword [ebp - 0x198], 1
jge 0x10033926
mov eax, dword [ebp - 0x198]
mov dword [ebp + eax*4 - 0x3c], 0xffffffff
jmp 0x10033900
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x3c]
push 4
pop ecx
imul ecx, ecx, 0
mov ecx, dword [ebp + ecx - 0x3c]
neg ecx
add eax, ecx
jne 0x10033952
mov eax, 0x37a9
test eax, eax
jne 0x10033952
and dword [ebp - 0x73c], 0
jmp 0x1003395c
mov dword [ebp - 0x73c], 1
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x3c]
mov dword [ebp - 0x1dc], eax
cmp dword [ebp - 0x1dc], 0
je 0x100339a1
mov dword [ebp - 0x1dc], 0xf72b5725
cmp dword [ebp - 0x1dc], 0
je 0x100339a1
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x3c], 0
je 0x100339a1
mov dword [ebp - 0x5ec], 1
jmp 0x100339a8
and dword [ebp - 0x5ec], 0
cmp dword [ebp - 0x5ec], 1
jl 0x100339bd
mov dword [ebp - 0x7dc], 1
jmp 0x100339c4
and dword [ebp - 0x7dc], 0
cmp dword [ebp - 0x7dc], 0xfffffff9
jle 0x100339d9
mov dword [ebp - 0xa28], 1
jmp 0x100339e0
and dword [ebp - 0xa28], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x3c]
mov dword [ebp - 0xd78], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x3c]
mov dword [ebp - 0xd80], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x3c], 0
jne 0x10033a1b
xor eax, eax
inc eax
jne 0x10033a1b
and dword [ebp - 0x5f4], 0
jmp 0x10033a25
mov dword [ebp - 0x5f4], 1
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x3c]
cmp dword [ebp - 0x5f4], eax
jl 0x10033a43
mov dword [ebp - 0x5fc], 1
jmp 0x10033a4a
and dword [ebp - 0x5fc], 0
mov eax, dword [ebp - 0x73c]
cmp eax, dword [ebp - 0x5fc]
jg 0x10033a64
mov dword [ebp - 0x830], 1
jmp 0x10033a6b
and dword [ebp - 0x830], 0
mov eax, dword [ebp - 0x830]
mov dword [ebp - 0x374], eax
mov eax, dword [ebp - 0x374]
mov dword [ebp - 0xd88], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x3c]
mov dword [ebp - 0xd90], eax
push 4
pop eax
imul eax, eax, 0
push 4
pop ecx
imul ecx, ecx, 0
mov eax, dword [ebp + eax - 0x3c]
mov dword [ebp + ecx - 0x3c], eax
mov byte [ebp - 0xac], 0
push 0x1b1b
push 0x7331
push 0x7270
lea eax, [ebp - 0xac]
push eax
push 1
push 0x29b8
push 1
call fcn.1002e935
add esp, 0x1c
mov dword [ebp - 0xd98], 8
mov dword [ebp - 0x38], 0xfffffffe
mov dword [ebp - 0x388], 0x4475ee4c
mov dword [ebp - 0x3d8], 1
push 1
lea ecx, [ebp - 0xbc4]
call fcn.10012a45
mov dword [ebp - 4], 0x17
mov dword [ebp - 0x140], 0
jmp 0x10033b27
mov eax, dword [ebp - 0x140]
inc eax
mov dword [ebp - 0x140], eax
cmp dword [ebp - 0x140], 3
jge 0x10033b43
mov eax, dword [ebp - 0x140]
mov dword [ebp + eax*4 - 0x894], 0xec2e0cf5
jmp 0x10033b1a
lea eax, [ebp - 0xbc4]
push eax
push 0x59c3
push 0
push 0x3cb3
push 0
push 1
push 0xdd1
push 0x1cd0
push 0x14ad
push 0x187
lea eax, [ebp - 0x140]
push eax
push 0x4deb
push 0x10b8
call fcn.10046baa
add esp, 0x34
mov dword [ebp - 0x38], 2
jmp 0x10033b97
mov eax, dword [ebp - 0x38]
dec eax
mov dword [ebp - 0x38], eax
cmp dword [ebp - 0x38], 0
jl 0x10033d55
mov dword [ebp - 0x3b0], 0x2a0c0e07
mov dword [ebp - 0x3c0], 0
xor eax, eax
jne 0x10033bcf
mov eax, dword [ebp - 0x38]
cmp dword [ebp + eax*4 - 0x894], 0
jne 0x10033bcf
and dword [ebp - 0x3c8], 0
jmp 0x10033bd9
mov dword [ebp - 0x3c8], 1
mov eax, dword [ebp - 0x38]
mov dword [ebp - 0xda0], eax
mov dword [ebp - 0x388], 0x5f8d
cmp dword [ebp - 0x388], 0
jne 0x10033c0e
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x894], 0
jne 0x10033c0e
and dword [ebp - 0x96c], 0
jmp 0x10033c18
mov dword [ebp - 0x96c], 1
mov eax, dword [ebp - 0x38]
mov dword [ebp - 0xda8], eax
cmp dword [ebp - 0x38], 0
je 0x10033c3a
push 2
pop eax
test eax, eax
je 0x10033c3a
mov dword [ebp - 0x390], 1
jmp 0x10033c41
and dword [ebp - 0x390], 0
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x894]
imul eax, dword [ebp - 0x390]
mov ecx, dword [ebp - 0x38]
cmp eax, dword [ebp + ecx*4 - 0x894]
jg 0x10033c6c
mov dword [ebp - 0x398], 1
jmp 0x10033c73
and dword [ebp - 0x398], 0
cmp dword [ebp - 0x398], 0x26c7
je 0x10033c8b
mov dword [ebp - 0x3a0], 1
jmp 0x10033c92
and dword [ebp - 0x3a0], 0
cmp dword [ebp - 0x3a0], 0xffffffff
jae 0x10033cb1
mov eax, dword [ebp - 0x38]
cmp dword [ebp + eax*4 - 0x894], 0
jne 0x10033cb1
and dword [ebp - 0x3a8], 0
jmp 0x10033cbb
mov dword [ebp - 0x3a8], 1
mov eax, dword [ebp - 0x3a8]
inc eax
inc eax
mov dword [ebp - 0x3b0], eax
mov eax, dword [ebp - 0x3b0]
inc eax
jne 0x10033cde
mov dword [ebp - 0x3b8], 1
jmp 0x10033ce5
and dword [ebp - 0x3b8], 0
mov eax, dword [ebp - 0x3b8]
mov dword [ebp - 0x3c0], eax
mov eax, dword [ebp - 0x38]
mov eax, dword [ebp + eax*4 - 0x894]
cmp dword [ebp - 0x3c0], eax
jl 0x10033d0e
mov eax, dword [ebp - 0x38]
cmp dword [ebp + eax*4 - 0x894], 0
cmp dword [ebp - 0x3c8], 0x4757
jg 0x10033d26
mov dword [ebp - 0x3d0], 1
jmp 0x10033d2d
and dword [ebp - 0x3d0], 0
mov eax, dword [ebp - 0x3d0]
neg eax
mov dword [ebp - 0x3d8], eax
mov esi, dword [ebp - 0x3d8]
push 0
lea ecx, [ebp - 0xbc4]
call fcn.10012ae3
mov dword [eax], esi
jmp 0x10033b90
mov byte [ebp - 0xbd], 0
movzx eax, byte [ebp - 0xbd]
test eax, eax
je 0x10033d7b
push 0x2588
push 0x4ed5
push 0
call fcn.1003829b
add esp, 0xc
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xbc4]
call fcn.10012ac7
mov dword [ebp - 0x74], 0
jmp 0x10033d9a
mov eax, dword [ebp - 0x74]
inc eax
mov dword [ebp - 0x74], eax
cmp dword [ebp - 0x74], 2
jge 0x10033db0
mov eax, dword [ebp - 0x74]
mov dword [ebp + eax*4 - 0xc88], 3
jmp 0x10033d93
mov dword [ebp - 0x74], 0
jmp 0x10033dc0
mov eax, dword [ebp - 0x74]
inc eax
mov dword [ebp - 0x74], eax
cmp dword [ebp - 0x74], 2
jge 0x10033dd6
mov eax, dword [ebp - 0x74]
mov dword [ebp + eax*4 - 0xf7c], 0x2603
jmp 0x10033db9
push 3
lea ecx, [ebp - 0xa3c]
call fcn.10012a45
mov dword [ebp - 4], 0x18
mov dword [ebp - 0xdb0], 0x96a450c1
mov dword [ebp - 0x1e4], 0
jmp 0x10033e0d
mov eax, dword [ebp - 0x1e4]
inc eax
mov dword [ebp - 0x1e4], eax
cmp dword [ebp - 0x1e4], 3
jge 0x10033e2f
push dword [ebp - 0x1e4]
lea ecx, [ebp - 0xa3c]
call fcn.10012ae3
mov dword [eax], 0xfffffffb
jmp 0x10033e00
mov byte [ebp - 0xae], 0
movzx eax, byte [ebp - 0xae]
test eax, eax
je 0x10033e61
push 1
push 0x2c54
push 0x532a
push 1
push 0x493
push 0x215a
call fcn.1002e9f7
add esp, 0x18
push 1
lea ecx, [ebp - 0xa3c]
call fcn.10012ae3
cmp dword [eax], 0
je 0x10033ec7
mov dword [ebp - 0xa2c], 0x8114768c
push 0x33b9
push 0x2d09
push 0x4e8
push 0
push 0x6935
push 0x20f7
call fcn.10036ebe
add esp, 0x18
push 0
lea eax, [ebp - 0xa2c]
push eax
push 0x3677
lea eax, [ebp - 0xa3c]
push eax
push 0x219e
call fcn.1003f623
add esp, 0x14
jmp 0x10033fcc
mov dword [ebp - 0x100], 0x170cd509
mov dword [ebp - 0x974], 0x8d8131dd
mov dword [ebp - 0x100], 0xfffffff1
jmp 0x10033ef4
mov eax, dword [ebp - 0x100]
dec eax
mov dword [ebp - 0x100], eax
cmp dword [ebp - 0x100], 0xffffffee
jl 0x10033f8d
mov dword [ebp - 0x1ec], 0x42374b1b
mov dword [ebp - 0x1ec], 0
jmp 0x10033f24
mov eax, dword [ebp - 0x1ec]
dec eax
mov dword [ebp - 0x1ec], eax
cmp dword [ebp - 0x1ec], 0xffffffeb
je 0x10033f7d
mov byte [ebp - 0xb0], 0
movzx eax, byte [ebp - 0xb0]
test eax, eax
je 0x10033f7b
push 0x77ec
push 0xb37
push 0x2ee8
push 0x4dad
push 0x983
push 0x3f59
push 0x2f30
push 0
push 0x69f4
push 0x55e5
push 0x6a30
call fcn.1003b185
add esp, 0x2c
jmp 0x10033f17
cmp dword [ebp - 0x100], 0
je 0x10033f88
jmp 0x10033f8d
jmp 0x10033ee7
push 0xfe0
lea eax, [ebp - 0xa3c]
push eax
lea eax, [ebp - 0x100]
push eax
push 0x73ee
push 0x5ca5
push 0xe91
push 0x2920
push 1
push 1
push 0x30c2
lea eax, [ebp - 0x974]
push eax
call fcn.1002ead4
add esp, 0x2c
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xa3c]
call fcn.10012ac7
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0xc58], 0x99fb
je 0x10033ffa
mov dword [ebp - 0x3e0], 1
jmp 0x10034001
and dword [ebp - 0x3e0], 0
mov eax, dword [ebp - 0x3e0]
mov dword [ebp - 0x148], eax
mov dword [ebp - 0xdc], 8
mov dword [ebp - 0x1f4], 0
jmp 0x10034030
mov eax, dword [ebp - 0x1f4]
inc eax
mov dword [ebp - 0x1f4], eax
cmp dword [ebp - 0x1f4], 2
jge 0x1003404c
mov eax, dword [ebp - 0x1f4]
mov dword [ebp + eax*4 - 0xc7c], 1
jmp 0x10034023
mov eax, dword [ebp - 0xdc]
dec eax
mov dword [ebp - 0xdc], eax
mov dword [ebp - 0xdc], 0
jmp 0x10034072
mov eax, dword [ebp - 0xdc]
inc eax
mov dword [ebp - 0xdc], eax
cmp dword [ebp - 0xdc], 0x23
jne 0x100340b2
mov dword [ebp - 0xa48], 0xfffffffd
mov eax, dword [ebp - 0xdc]
mov dword [ebp - 0x3e8], eax
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x3e8]
mov dword [ebp + eax - 0xc7c], ecx
mov eax, dword [ebp - 0x3e8]
mov dword [ebp - 0xa48], eax
jmp 0x10034065
mov dword [ebp - 0x148], 6
jmp 0x100340cb
mov eax, dword [ebp - 0x148]
dec eax
mov dword [ebp - 0x148], eax
cmp dword [ebp - 0x148], 0xfffffff3
jl 0x100349b8
mov dword [ebp - 0x104], 0xe87df2f4
mov dword [ebp - 0x984], 0xffffffff
mov dword [ebp - 0xa8c], 0
mov dword [ebp - 0x2b0], 0x8f9c25b0
mov dword [ebp - 0xdb8], 0x73ee7637
mov dword [ebp - 0x408], 0x4b541145
mov dword [ebp - 0xeb4], 3
mov dword [ebp - 0xeb0], 3
mov dword [ebp - 0xeac], 3
mov dword [ebp - 0xea8], 3
mov dword [ebp - 0x3f0], 0xffff
mov dword [ebp - 0x97c], 0xb0881dd
mov dword [ebp - 0x1fc], 0
jmp 0x10034169
mov eax, dword [ebp - 0x1fc]
inc eax
mov dword [ebp - 0x1fc], eax
cmp dword [ebp - 0x1fc], 2
jge 0x10034185
mov eax, dword [ebp - 0x1fc]
mov dword [ebp + eax*4 - 0xb1c], 0xcff0ea75
jmp 0x1003415c
mov dword [ebp - 0x104], 1
jmp 0x1003419e
mov eax, dword [ebp - 0x104]
dec eax
mov dword [ebp - 0x104], eax
cmp dword [ebp - 0x104], 0
jl 0x1003432d
mov dword [ebp - 0xe90], 0xc3eee2fd
mov dword [ebp - 0xe98], 0x121ac488
mov dword [ebp - 0x430], 2
mov dword [ebp - 0x3f8], 0xfffffffb
mov dword [ebp - 0xc6c], 0x90c54408
mov dword [ebp - 0xec8], 3
mov dword [ebp - 0x204], 0
jmp 0x10034200
mov eax, dword [ebp - 0x204]
inc eax
mov dword [ebp - 0x204], eax
cmp dword [ebp - 0x204], 1
jge 0x1003421c
mov eax, dword [ebp - 0x204]
mov dword [ebp + eax*4 - 0xa40], 0x5ce96b77
jmp 0x100341f3
mov eax, dword [ebp - 0x3f0]
inc eax
mov dword [ebp - 0x3f0], eax
mov eax, dword [ebp - 0x104]
cmp dword [ebp + eax*4 - 0xb1c], 0
jne 0x10034312
cmp dword [ebp - 0x97c], 0
je 0x1003426b
mov eax, 0xdb88
test eax, eax
je 0x1003426b
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0xa40], 0
je 0x1003426b
mov dword [ebp - 0x418], 1
jmp 0x10034272
and dword [ebp - 0x418], 0
mov eax, dword [ebp - 0x2b0]
mov dword [ebp - 0x3f8], eax
mov eax, dword [ebp - 0x104]
mov eax, dword [ebp + eax*4 - 0xb1c]
cmp dword [ebp - 0x3f8], eax
jne 0x1003429f
mov dword [ebp - 0x400], 1
jmp 0x100342a6
and dword [ebp - 0x400], 0
mov eax, dword [ebp - 0x400]
mov dword [ebp - 0x408], eax
mov eax, dword [ebp - 0x408]
imul eax, dword [ebp - 0x984]
cmp eax, dword [ebp - 0x430]
jle 0x100342d3
mov dword [ebp - 0x410], 1
jmp 0x100342da
and dword [ebp - 0x410], 0
mov eax, dword [ebp - 0x2b0]
cmp dword [ebp - 0x410], eax
jg 0x100342f4
mov dword [ebp - 0x420], 1
jmp 0x100342fb
and dword [ebp - 0x420], 0
mov eax, dword [ebp - 0x418]
cmp eax, dword [ebp - 0x420]
jle 0x10034312
and dword [ebp - 0x428], 0
jmp 0x1003431c
mov dword [ebp - 0x428], 1
mov eax, dword [ebp - 0x428]
mov dword [ebp - 0x430], eax
jmp 0x10034191
mov eax, dword [ebp - 0xa8c]
mov dword [ebp - 0x2b0], eax
mov dword [ebp - 0xed0], 0x3e93
mov dword [ebp - 0x60], 0xfffffffc
mov dword [ebp - 0x384], 0xe42a43d9
mov dword [ebp - 0x380], 0xe42a43d9
mov dword [ebp - 0x37c], 0xe42a43d9
mov dword [ebp - 0x378], 0xe42a43d9
mov dword [ebp - 0x2c], 2
mov dword [ebp - 0xec], 4
mov dword [ebp - 0x60], 0xfffffffc
jmp 0x10034393
mov eax, dword [ebp - 0x60]
inc eax
mov dword [ebp - 0x60], eax
cmp dword [ebp - 0x60], 0xa
jle 0x1003485a
mov dword [ebp - 0x24], 0x86e52d8c
mov dword [ebp - 0x24], 0
jmp 0x100343b4
mov eax, dword [ebp - 0x24]
inc eax
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 3
jg 0x10034855
mov dword [ebp - 0x460], 0xffffffff
mov dword [ebp - 0x4d0], 0x1ebdc590
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0x384], 0xffffffff
or eax, 0xffffffff
je 0x1003461a
mov dword [ebp - 0xe4], 0xffff
cmp dword [ebp - 0x60], 0
jne 0x100345ba
mov eax, dword [ebp - 0x24]
mov dword [ebp + eax*4 - 0x384], 0x9b7ac006
mov eax, 0x9b7ac006
test eax, eax
jne 0x10034425
xor eax, eax
inc eax
jne 0x10034425
and dword [ebp - 0x438], 0
jmp 0x1003442f
mov dword [ebp - 0x438], 1
mov eax, dword [ebp - 0x24]
cmp dword [ebp - 0x438], eax
je 0x10034446
mov dword [ebp - 0x440], 1
jmp 0x1003444d
and dword [ebp - 0x440], 0
mov eax, dword [ebp - 0x24]
cmp dword [ebp - 0x440], eax
jl 0x10034464
mov dword [ebp - 0x448], 1
jmp 0x1003446b
and dword [ebp - 0x448], 0
mov eax, dword [ebp - 0xe4]
cmp eax, dword [ebp - 0x448]
jne 0x10034485
mov dword [ebp - 0x450], 1
jmp 0x1003448c
and dword [ebp - 0x450], 0
imul eax, dword [ebp - 0x450], 0x5f87
cmp eax, dword [ebp - 0x60]
jne 0x100344a7
mov dword [ebp - 0x480], 1
mov eax, dword [ebp - 0x60]
cmp dword [ebp - 0x480], eax
jge 0x100345db
mov dword [ebp - 0x488], 1
jmp 0x100345e2
and dword [ebp - 0x488], 0
mov eax, dword [ebp - 0xe4]
cmp dword [ebp - 0x488], eax
je 0x100345fc
mov dword [ebp - 0x490], 1
jmp 0x10034603
and dword [ebp - 0x490], 0
mov eax, dword [ebp - 0xec]
add eax, dword [ebp - 0x490]
mov dword [ebp - 0x4d0], eax
jmp 0x10034850
mov dword [ebp - 0xab4], 0
mov dword [ebp - 0xec], 0
jmp 0x1003463d
cmp dword [ebp - 0xec], 3
jg 0x10034850
push 4
lea ecx, [ebp - 0xbd0]
call fcn.10012a45
mov dword [ebp - 4], 0x19
mov dword [ebp - 0x20c], 0
jmp 0x10034677
mov eax, dword [ebp - 0x20c]
inc eax
mov dword [ebp - 0x20c], eax
cmp dword [ebp - 0x20c], 4
jge 0x10034699
push dword [ebp - 0x20c]
lea ecx, [ebp - 0xbd0]
call fcn.10012ae3
mov dword [eax], 2
jmp 0x1003466a
mov dword [ebp - 0x2c], 3
jmp 0x100346a9
cmp dword [ebp - 0x2c], 0
jl 0x1003483c
jmp 0x100343ad
jmp 0x1003438c
lea eax, [ebp - 0x2c]
push eax
lea eax, [ebp - 0xec]
push eax
push 1
push 0
push 0x4f3e
push 0x2b42
lea eax, [ebp - 0x60]
push eax
call fcn.10037b9e
add esp, 0x1c
mov dword [ebp - 0xc94], 0xfffffff8
mov dword [ebp - 0xe60], 0x6bdd
mov byte [ebp - 0xcd], 0
push 0x6215
push 1
push 0x2202
push 1
lea eax, [ebp - 0xcd]
push eax
call fcn.1002f0d2
add esp, 0x14
mov byte [ebp - 0xa5], 0
movzx eax, byte [ebp - 0xa5]
test eax, eax
je 0x100348dd
push 0
push 0x758b
push 0x2ebf
call fcn.10048a6d
add esp, 0xc
mov dword [ebp - 0xc9c], 1
mov dword [ebp - 0xd94], 0xfffffff8
mov dword [ebp - 0xca4], 0x426a760
mov dword [ebp - 0xe78], 0xfffffff6
mov dword [ebp - 0xcac], 0
mov dword [ebp - 0xd9c], 0xb611fb8e
push 4
lea ecx, [ebp - 0xe18]
call fcn.10012a45
mov dword [ebp - 4], 0x1a
mov dword [ebp - 0xcb4], 1
mov dword [ebp - 0xe70], 0xfffffffb
lea eax, [ebp - 0x150]
push eax
push 0x102b
lea eax, [ebp - 0xe18]
push eax
push 0
call fcn.100384b3
add esp, 0x10
mov dword [ebp - 0x150], 0
jmp 0x10034977
mov eax, dword [ebp - 0x150]
inc eax
mov dword [ebp - 0x150], eax
cmp dword [ebp - 0x150], 3
jge 0x10034993
mov eax, dword [ebp - 0x150]
mov dword [ebp + eax*4 - 0xf90], 0x7da19ae8
jmp 0x1003496a
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0xc88], 1
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xe18]
call fcn.10012ac7
jmp 0x100340be
mov dword [ebp - 0x128], 1
mov dword [ebp - 0x19c], 0xffffffff
mov dword [ebp - 0x2b8], 1
mov dword [ebp - 0x34], 0x4015fb26
push 1
lea ecx, [ebp - 0x858]
call fcn.10012a45
mov dword [ebp - 4], 0x1b
mov dword [ebp - 0x9bc], 0x4b2b
mov dword [ebp - 0xa9c], 0x6edae8e3
mov dword [ebp - 0xcbc], 0
mov dword [ebp - 0x568], 1
mov dword [ebp - 0x88], 0
jmp 0x10034a32
mov eax, dword [ebp - 0x88]
inc eax
mov dword [ebp - 0x88], eax
cmp dword [ebp - 0x88], 1
jge 0x10034a54
push dword [ebp - 0x88]
lea ecx, [ebp - 0x858]
call fcn.10012ae3
mov dword [eax], 0x9bb643c8
jmp 0x10034a25
mov dword [ebp - 0x88], 0
jmp 0x10034a6d
mov eax, dword [ebp - 0x88]
inc eax
mov dword [ebp - 0x88], eax
cmp dword [ebp - 0x88], 2
jge 0x10034a89
mov eax, dword [ebp - 0x88]
mov dword [ebp + eax*4 - 0xf2c], 0xffffffff
jmp 0x10034a60
mov eax, dword [ebp - 0x128]
mov dword [ebp - 0x19c], eax
cmp dword [ebp - 0x128], 1
jle 0x10034aaa
mov dword [ebp - 0x370], 1
jmp 0x10034ab1
and dword [ebp - 0x370], 0
mov eax, dword [ebp - 0x2b8]
cmp dword [ebp - 0x370], eax
jl 0x10034acb
mov dword [ebp - 0x4e0], 1
jmp 0x10034ad2
and dword [ebp - 0x4e0], 0
mov eax, dword [ebp - 0x128]
cmp dword [ebp - 0x4e0], eax
jne 0x10034aec
mov dword [ebp - 0x99c], 1
jmp 0x10034af3
and dword [ebp - 0x99c], 0
mov dword [ebp - 0x34], 0xd8c6
mov eax, dword [ebp - 0x34]
cmp dword [ebp - 0x2b8], eax
jl 0x10034b11
mov dword [ebp - 0x4e8], 1
jmp 0x10034b18
and dword [ebp - 0x4e8], 0
mov eax, dword [ebp - 0x19c]
cmp eax, dword [ebp - 0x4e8]
jne 0x10034b9b
push 3
lea ecx, [ebp - 0xbe8]
call fcn.10012a45
mov byte [ebp - 4], 0x1c
mov dword [ebp - 0x214], 0
jmp 0x10034b50
mov eax, dword [ebp - 0x214]
inc eax
mov dword [ebp - 0x214], eax
cmp dword [ebp - 0x214], 3
jge 0x10034b72
push dword [ebp - 0x214]
lea ecx, [ebp - 0xbe8]
call fcn.10012ae3
mov dword [eax], 0x5a82
jmp 0x10034b43
push 2
lea ecx, [ebp - 0xbe8]
call fcn.10012ae3
mov eax, dword [eax]
mov dword [ebp - 0x19c], eax
mov byte [ebp - 4], 0x1b
lea ecx, [ebp - 0xbe8]
call fcn.10012ac7
jmp 0x1003526e
mov dword [ebp - 0xa4c], 0x1882
cmp dword [ebp - 0xa4c], 0x507
jge 0x10034d0f
and dword [ebp - 0x21c], 0
lea eax, [ebp - 0x21c]
push eax
push 0x1000bf0c
call fcn.10053beb
pop ecx
pop ecx
and dword [ebp - 0x4f0], 0
and dword [ebp - 0x158], 0
and dword [ebp - 0x224], 0
lea ecx, [ebp - 0x8b4]
call fcn.10012c32
mov byte [ebp - 4], 0x1d
mov eax, dword [ebp - 0x21c]
mov dword [ebp - 0x9a4], eax
mov eax, dword [ebp - 0x21c]
dec eax
mov dword [ebp - 0x21c], eax
cmp dword [ebp - 0x9a4], 0
je 0x10034c81
lea eax, [ebp - 0x4f0]
push eax
push 0x1000bf0c
call fcn.10053beb
pop ecx
pop ecx
cmp dword [ebp - 0x4f0], 0
jge 0x10034c3e
mov eax, dword [ebp - 0x224]
inc eax
mov dword [ebp - 0x224], eax
cmp dword [ebp - 0x224], 3
jl 0x10034c6f
mov dword [ebp - 0x224], 1
lea eax, [ebp - 0x158]
push eax
lea ecx, [ebp - 0x8b4]
call fcn.1004d7cb
mov dword [ebp - 0x158], 1
jmp 0x10034c7c
mov eax, dword [ebp - 0x158]
inc eax
mov dword [ebp - 0x158], eax
jmp 0x10034bf3
lea eax, [ebp - 0x158]
push eax
lea ecx, [ebp - 0x8b4]
call fcn.1004d7cb
lea ecx, [ebp - 0x8b4]
call fcn.10012cbf
push eax
push 0x1000bdf0
call fcn.10053e1f
pop ecx
pop ecx
and dword [ebp - 0x22c], 0
jmp 0x10034cc1
mov eax, dword [ebp - 0x22c]
inc eax
mov dword [ebp - 0x22c], eax
lea ecx, [ebp - 0x8b4]
call fcn.10012cbf
cmp dword [ebp - 0x22c], eax
jae 0x10034cf5
push dword [ebp - 0x22c]
lea ecx, [ebp - 0x8b4]
call fcn.10012ae3
push dword [eax]
push 0x1000c454
call fcn.10053e1f
pop ecx
pop ecx
jmp 0x10034cb4
push 0x1000bd3d
call fcn.10053fdd
pop ecx
mov byte [ebp - 4], 0x1b
lea ecx, [ebp - 0x8b4]
call fcn.10012ac7
mov dword [ebp - 0x244], 0x5ccfdef0
mov dword [ebp - 0x558], 0xfff8
mov dword [ebp - 0xc68], 0x3d82f881
mov dword [ebp - 0xc64], 0x3d82f881
mov dword [ebp - 0xc60], 0x3d82f881
mov dword [ebp - 0xc5c], 0x3d82f881
mov dword [ebp - 0x1a0], 0
jmp 0x10034d64
mov eax, dword [ebp - 0x1a0]
inc eax
mov dword [ebp - 0x1a0], eax
cmp dword [ebp - 0x1a0], 1
jge 0x10034d80
mov eax, dword [ebp - 0x1a0]
mov dword [ebp + eax*4 - 0x10c], 0xfffffff6
jmp 0x10034d57
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x10c], 8
ja 0x10034d9c
mov dword [ebp - 0xa94], 1
jmp 0x10034da3
and dword [ebp - 0xa94], 0
push 0
lea ecx, [ebp - 0x858]
call fcn.10012ae3
cmp dword [eax], 0
jbe 0x10034dc1
mov dword [ebp - 0x4f8], 1
jmp 0x10034dc8
and dword [ebp - 0x4f8], 0
mov eax, dword [ebp - 0x4f8]
mov dword [ebp - 0x244], eax
cmp dword [ebp - 0x244], 0
jne 0x10034df6
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x858]
call fcn.10012ac7
mov dword [ebp - 0xabc], 0x8ade19d2
mov dword [ebp - 0x9d4], 1
mov dword [ebp - 0x9dc], 8
mov dword [ebp - 0xe88], 0x5db34e6d
push 1
lea eax, [ebp - 0x9d4]
push eax
push 0
lea eax, [ebp - 0xabc]
push eax
lea eax, [ebp - 0x9dc]
push eax
push 0x3759
push 1
push 0x76cb
push 0x57ae
push 0x7456
call fcn.1003eb8e
add esp, 0x28
mov byte [ebp - 0xb6], 0
movzx eax, byte [ebp - 0xb6]
test eax, eax
je 0x100352f6
push 0
call dword [sym.imp.KERNEL32.dll_GetLocalTime]
mov dword [ebp - 0x610], 0
mov dword [ebp - 0x8d8], 0x1f5a
cmp dword [ebp - 0x8d8], 0x10bd
jge 0x10035446
lea eax, [ebp - 0x114]
push eax
push 0x1000bdd0
call fcn.10053beb
pop ecx
pop ecx
push dword [ebp - 0x114]
lea ecx, [ebp - 0xba0]
call fcn.10012c3f
mov dword [ebp - 4], 0x1f
and dword [ebp - 0x254], 0
jmp 0x1003535b
mov dword [ebp - 0x94], 0
jmp 0x1003545f
mov eax, dword [ebp - 0x9d0]
mov dword [ebp - 0x9d8], eax
mov eax, dword [ebp - 0x9d8]
mov dword [ebp - 0x7d0], eax
mov eax, dword [ebp - 0x7d0]
mov eax, dword [eax]
inc eax
mov ecx, dword [ebp - 0x7d0]
mov dword [ecx], eax
jmp 0x10036ead
mov eax, dword [ebp + 0x10]
mov dword [ebp - 0x9e8], eax
mov eax, dword [ebp + 0x14]
mov dword [ebp - 0x9e0], eax
push 0x200b
push 0x4d5d
push dword [ebp - 0x9e0]
push dword [ebp - 0x9e8]
push 1
call fcn.1002f54e
add esp, 0x14
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret