Function at 0x10037cea
Capabilities:
Enumerate pe sections

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x1006c76f
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x86c
push esi
movzx eax, byte [ebp + 0x20]
test eax, eax
je 0x1003b6f7
mov eax, dword [ebp + 0xc]
mov dword [ebp - 0x4c0], eax
lea eax, [ebp + 8]
mov dword [ebp - 0x454], eax
mov eax, dword [ebp + 0x1c]
mov dword [ebp - 0x400], eax
mov eax, dword [ebp + 0x10]
mov dword [ebp - 0x3f0], eax
mov eax, dword [ebp + 0x24]
mov dword [ebp - 0x460], eax
mov eax, dword [ebp + 0x28]
mov dword [ebp - 0x3e8], eax
mov eax, dword [ebp + 0x2c]
mov dword [ebp - 0x3f8], eax
mov eax, dword [ebp + 0x18]
mov dword [ebp - 0x4b8], eax
mov eax, dword [ebp + 0x14]
mov dword [ebp - 0x408], eax
mov eax, dword [ebp - 0x454]
movzx eax, byte [eax]
test eax, eax
je 0x1003b4fc
mov eax, dword [ebp - 0x460]
mov dword [ebp - 0x3d0], eax
mov eax, dword [ebp - 0x4b8]
mov dword [ebp - 0x4cc], eax
mov eax, dword [ebp - 0x4c0]
mov dword [ebp - 0x114], eax
mov dword [ebp - 0x328], 0x36b1
push 3
lea ecx, [ebp - 0x610]
call fcn.1000e5bc
and dword [ebp - 4], 0
mov dword [ebp - 0x4d0], 0xfffffffc
push 2
lea ecx, [ebp - 0x5ec]
call fcn.1000e5bc
mov byte [ebp - 4], 1
mov dword [ebp - 0x4c8], 0xfffffff8
push 1
lea ecx, [ebp - 0x720]
call fcn.1000e5bc
mov byte [ebp - 4], 2
mov dword [ebp - 0x84], 0
jmp 0x10037e05
mov eax, dword [ebp - 0x84]
inc eax
mov dword [ebp - 0x84], eax
cmp dword [ebp - 0x84], 3
jge 0x10037e24
push dword [ebp - 0x84]
lea ecx, [ebp - 0x610]
call fcn.1000e623
or dword [eax], 0xffffffff
jmp 0x10037df8
push 0x50a5
push 1
lea eax, [ebp - 0x84]
push eax
push 0x6507
lea eax, [ebp - 0x5ec]
push eax
push 0x18f8
push 1
push 0x535e
call fcn.1002b9aa
add esp, 0x20
push 1
lea eax, [ebp - 0x84]
push eax
push 0x26b8
lea eax, [ebp - 0x720]
push eax
push 0x79d1
push 0x6cd6
push 0x4f1
push 0x4ac4
push 1
call fcn.1002baac
add esp, 0x24
lea eax, [ebp - 0x328]
push eax
lea eax, [ebp - 0x5ec]
push eax
push 0
push 0x6b47
push 1
lea eax, [ebp - 0x610]
push eax
lea eax, [ebp - 0x4c8]
push eax
lea eax, [ebp - 0x4d0]
push eax
call fcn.100379cc
add esp, 0x20
lea eax, [ebp - 0x328]
push eax
push 0x613b
push 0x37bf
push 0
call fcn.1003ed28
add esp, 0x10
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x720]
call fcn.1000e61e
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x5ec]
call fcn.1000e61e
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x610]
call fcn.1000e61e
push 3
lea ecx, [ebp - 0x138]
call fcn.1000e5bc
mov dword [ebp - 4], 3
mov dword [ebp - 0x1c], 1
mov dword [ebp - 0xe8], 0x6efa
mov dword [ebp - 0x4e0], 0x1ca4b38b
mov dword [ebp - 0x178], 0xffffffff
mov dword [ebp - 0x458], 9
mov dword [ebp - 0x38], 0
jmp 0x10037f54
mov eax, dword [ebp - 0x38]
inc eax
mov dword [ebp - 0x38], eax
cmp dword [ebp - 0x38], 3
jge 0x10037f6a
mov eax, dword [ebp - 0x38]
mov dword [ebp + eax*4 - 0x4f0], 0x41b3c692
jmp 0x10037f4d
mov dword [ebp - 0x38], 0
jmp 0x10037f7a
mov eax, dword [ebp - 0x38]
inc eax
mov dword [ebp - 0x38], eax
cmp dword [ebp - 0x38], 1
jge 0x10037f8d
mov eax, dword [ebp - 0x38]
mov dword [ebp + eax*4 - 0x54], 0
jmp 0x10037f73
mov dword [ebp - 0x1c], 0
jmp 0x10037f9d
mov eax, dword [ebp - 0x1c]
inc eax
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 2
jg 0x10038039
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0x4f0], 0xf69f7fd1
cmp dword [ebp - 0x1c], 0x9acf
jge 0x10037fca
mov dword [ebp - 0x380], 1
jmp 0x10037fd1
and dword [ebp - 0x380], 0
mov dword [ebp - 0xe8], 0xeaa2
mov eax, dword [ebp - 0xe8]
cmp eax, dword [ebp - 0x380]
jne 0x10037ff5
mov dword [ebp - 0x388], 1
jmp 0x10037ffc
and dword [ebp - 0x388], 0
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp + eax*4 - 0x4f0]
cmp dword [ebp - 0x388], eax
je 0x1003801a
mov dword [ebp - 0x390], 1
jmp 0x10038021
and dword [ebp - 0x390], 0
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x390]
mov dword [ebp + eax - 0x4f0], ecx
jmp 0x10037f96
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x4f0], 0
je 0x10038170
push 4
pop eax
shl eax, 1
mov dword [ebp + eax - 0x4f0], 0x930f
mov dword [ebp - 0x1c], 0x930f
cmp dword [ebp - 0x1c], 0xf069
je 0x10038083
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x54], 0
jne 0x10038083
and dword [ebp - 0x4d8], 0
jmp 0x1003808d
mov dword [ebp - 0x4d8], 1
mov eax, dword [ebp - 0xe8]
mov dword [ebp - 0x6e8], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x54]
mov dword [ebp - 0x6d8], eax
mov eax, dword [ebp - 0xe8]
push 4
pop ecx
imul ecx, ecx, 0
sub eax, dword [ebp + ecx - 0x54]
imul eax, eax, 0x4306
cmp eax, 0xffffffff
jne 0x100380d0
mov dword [ebp - 0x378], 1
jmp 0x100380d7
and dword [ebp - 0x378], 0
mov eax, dword [ebp - 0x4e0]
cmp dword [ebp - 0x378], eax
je 0x100380f1
mov dword [ebp - 0x1bc], 1
jmp 0x100380f8
and dword [ebp - 0x1bc], 0
mov eax, dword [ebp - 0x178]
cmp dword [ebp - 0x1bc], eax
je 0x10038112
mov dword [ebp - 0x1c0], 1
jmp 0x10038119
and dword [ebp - 0x1c0], 0
mov eax, dword [ebp - 0x458]
imul eax, dword [ebp - 0x1c0]
cmp eax, 0x404d4644
jg 0x10038139
mov dword [ebp - 0x2a8], 1
jmp 0x10038140
and dword [ebp - 0x2a8], 0
mov eax, dword [ebp - 0x2a8]
add eax, 0x99b9
mov ecx, 0xfffb
sub ecx, eax
push 4
pop eax
imul eax, eax, 0
cmp ecx, dword [ebp + eax - 0x54]
jge 0x10038170
cmp dword [ebp - 0x1c], 0
je 0x10038170
mov dword [ebp - 0x1c8], 1
jmp 0x10038177
and dword [ebp - 0x1c8], 0
mov eax, dword [ebp - 0x1c8]
mov dword [ebp - 0x178], eax
cmp dword [ebp - 0x178], 0
je 0x100381a5
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x54], 0
je 0x100381a5
mov dword [ebp - 0x3c4], 1
jmp 0x100381ac
and dword [ebp - 0x3c4], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x54]
mov dword [ebp - 0x6f8], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x54]
cmp dword [ebp - 0x1c], eax
jl 0x100381d7
mov dword [ebp - 0x318], 1
jmp 0x100381de
and dword [ebp - 0x318], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x54]
cmp dword [ebp - 0x318], eax
jle 0x100381ff
cmp dword [ebp - 0x1c], 0
jne 0x100381ff
and dword [ebp - 0x1d0], 0
jmp 0x10038209
mov dword [ebp - 0x1d0], 1
cmp dword [ebp - 0x1d0], 0xe871
jle 0x10038237
mov byte [ebp - 0x57], 0
movzx eax, byte [ebp - 0x57]
test eax, eax
je 0x10038235
push 0x4c99
push 0
push 0x7f9b
call fcn.1004554b
add esp, 0xc
jmp 0x10038254
mov dword [ebp - 0x2b0], 0xfffffff9
mov dword [ebp - 0x2b0], 0
mov eax, dword [ebp - 0x2b0]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x4d4], 0x1ded
cmp dword [ebp - 0x4d4], 0x1342
jge 0x1003840d
mov dword [ebp - 0x6e0], 0xa0
lea eax, [ebp - 0x494]
push eax
push 0x100077ac
call fcn.100528eb
pop ecx
pop ecx
and dword [ebp - 0x3cc], 0
lea eax, [ebp - 0x3cc]
push eax
push 0xa1
lea ecx, [ebp - 0x500]
call fcn.10022aba
mov byte [ebp - 4], 4
and dword [ebp - 0x150], 0
jmp 0x100382c3
mov eax, dword [ebp - 0x150]
inc eax
mov dword [ebp - 0x150], eax
mov eax, dword [ebp - 0x150]
cmp eax, dword [ebp - 0x494]
jge 0x1003830e
lea eax, [ebp - 0x3d4]
push eax
push 0x1000775c
call fcn.100528eb
pop ecx
pop ecx
push dword [ebp - 0x3d4]
lea ecx, [ebp - 0x500]
call fcn.1000e623
mov dword [ebp - 0x1d8], eax
mov eax, dword [ebp - 0x1d8]
mov eax, dword [eax]
inc eax
mov ecx, dword [ebp - 0x1d8]
mov dword [ecx], eax
jmp 0x100382b6
mov dword [ebp - 0x9c], 1
jmp 0x10038327
mov eax, dword [ebp - 0x9c]
inc eax
mov dword [ebp - 0x9c], eax
cmp dword [ebp - 0x9c], 0xa0
jg 0x10038371
push dword [ebp - 0x9c]
lea ecx, [ebp - 0x500]
call fcn.1000e623
mov dword [ebp - 0x35c], eax
mov eax, dword [ebp - 0x9c]
dec eax
push eax
lea ecx, [ebp - 0x500]
call fcn.1000e623
mov ecx, dword [ebp - 0x35c]
mov ecx, dword [ecx]
add ecx, dword [eax]
mov eax, dword [ebp - 0x35c]
mov dword [eax], ecx
jmp 0x1003831a
lea eax, [ebp - 0x190]
push eax
push 0x100077ac
call fcn.100528eb
pop ecx
pop ecx
mov eax, dword [ebp - 0x190]
mov dword [ebp - 0x534], eax
mov eax, dword [ebp - 0x190]
dec eax
mov dword [ebp - 0x190], eax
cmp dword [ebp - 0x534], 0
je 0x100383fe
lea eax, [ebp - 0x1e0]
push eax
push 0x100077ac
call fcn.100528eb
pop ecx
pop ecx
cmp dword [ebp - 0x1e0], 0xa0
jg 0x100383d3
mov eax, dword [ebp - 0x1e0]
mov dword [ebp - 0x2b8], eax
jmp 0x100383dd
mov dword [ebp - 0x2b8], 0xa0
push dword [ebp - 0x2b8]
lea ecx, [ebp - 0x500]
call fcn.1000e623
push dword [eax]
push 0x100077ac
call fcn.10052b06
pop ecx
pop ecx
jmp 0x10038384
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x500]
call fcn.1000e61e
mov dword [ebp - 0xac], 0x66e58d02
mov dword [ebp - 0x20], 0x7e2799ac
mov dword [ebp - 0x40], 0xf0b101aa
mov dword [ebp - 0x1f8], 0xfffffff9
mov dword [ebp - 0x20], 0
jmp 0x1003843f
mov eax, dword [ebp - 0x20]
inc eax
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 6
jg 0x10038968
push 3
lea ecx, [ebp - 0x1a0]
call fcn.1000e5bc
mov byte [ebp - 4], 5
mov dword [ebp - 0x128], 0
jmp 0x10038473
mov eax, dword [ebp - 0x128]
inc eax
mov dword [ebp - 0x128], eax
cmp dword [ebp - 0x128], 3
jge 0x10038492
push dword [ebp - 0x128]
lea ecx, [ebp - 0x1a0]
call fcn.1000e623
and dword [eax], 0
jmp 0x10038466
mov byte [ebp - 0x56], 0
movzx eax, byte [ebp - 0x56]
test eax, eax
je 0x100384b1
push 0
push 1
push 0x278f
push 1
call fcn.1002bc86
add esp, 0x10
push 0
lea ecx, [ebp - 0x1a0]
call fcn.1000e623
mov dword [eax], 0xffffffef
jmp 0x100384ea
push 0
lea ecx, [ebp - 0x1a0]
call fcn.1000e623
mov dword [ebp - 0x1e8], eax
mov eax, dword [ebp - 0x1e8]
mov eax, dword [eax]
inc eax
mov ecx, dword [ebp - 0x1e8]
mov dword [ecx], eax
push 0
lea ecx, [ebp - 0x1a0]
call fcn.1000e623
cmp dword [eax], 0xfffffff2
je 0x10038954
mov dword [ebp - 0x588], 0x4a6e
mov dword [ebp - 0x584], 0x4a6e
mov dword [ebp - 0x580], 0x4a6e
mov dword [ebp - 0x57c], 0x4a6e
lea ecx, [ebp - 0x145]
call fcn.1000e632
push eax
lea eax, [ebp - 0x578]
push eax
lea eax, [ebp - 0x588]
push eax
lea ecx, [ebp - 0x858]
call fcn.1000e635
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0x628]
call fcn.1000e5f8
mov byte [ebp - 4], 6
mov dword [ebp - 0x4dc], 0x48aee511
mov dword [ebp - 0xc4], 0xe9b8a514
mov dword [ebp - 0xf0], 0
jmp 0x1003858e
mov eax, dword [ebp - 0xf0]
inc eax
mov dword [ebp - 0xf0], eax
cmp dword [ebp - 0xf0], 3
jge 0x100385aa
mov eax, dword [ebp - 0xf0]
mov dword [ebp + eax*4 - 0x3b4], 0xa9d19ac1
jmp 0x10038581
push 4
pop eax
shl eax, 0
mov dword [ebp + eax - 0x3b4], 0xffffffe2
jmp 0x100385d8
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x3b4]
inc eax
push 4
pop ecx
shl ecx, 0
mov dword [ebp + ecx - 0x3b4], eax
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x3b4], 0xffffffef
jle 0x1003860c
cmp dword [ebp - 0x20], 5
jle 0x100385fa
mov dword [ebp - 0x32c], 1
jmp 0x10038601
and dword [ebp - 0x32c], 0
mov eax, dword [ebp - 0x32c]
mov dword [ebp - 0x40], eax
jmp 0x100385bd
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x3b4]
mov dword [ebp - 0x700], eax
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x40], eax
cmp dword [ebp - 0x40], 0
je 0x10038787
mov dword [ebp - 0x158], 0xec7e011b
mov dword [ebp - 0x3ec], 1
push 0
lea ecx, [ebp - 0x1a0]
call fcn.1000e623
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x6f4], eax
mov eax, 0xe280bfe7
cmp eax, 0xfffffffe
jbe 0x1003866f
mov dword [ebp - 0x3dc], 1
jmp 0x10038676
and dword [ebp - 0x3dc], 0
push 3
lea ecx, [ebp - 0x628]
call fcn.1000e623
push 2
lea ecx, [ebp - 0x1a0]
call fcn.1000e623
mov eax, dword [ebp - 0x158]
mov dword [ebp - 0x648], eax
mov eax, dword [ebp - 0x158]
cmp dword [ebp - 0x40], eax
je 0x100386b3
mov dword [ebp - 0x49c], 1
jmp 0x100386ba
and dword [ebp - 0x49c], 0
push 0
lea ecx, [ebp - 0x1a0]
call fcn.1000e623
mov eax, dword [ebp - 0x40]
mov dword [ebp - 0x1f0], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x1f0]
mov dword [ebp + eax - 0x3b4], ecx
cmp dword [ebp - 0x1f0], 1
jge 0x100386f8
mov dword [ebp - 0x3e4], 1
jmp 0x100386ff
and dword [ebp - 0x3e4], 0
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x64c], eax
push 1
lea ecx, [ebp - 0x1a0]
call fcn.1000e623
mov eax, dword [ebp - 0x158]
add eax, 0x6232c2a4
mov dword [ebp - 0x40], eax
mov eax, dword [ebp - 0x40]
mov dword [ebp - 0x4dc], eax
push 0xfffffffffffffffc
pop eax
test eax, eax
jne 0x10038745
cmp dword [ebp - 0x3ec], 0
jne 0x10038745
and dword [ebp - 0x2c0], 0
jmp 0x1003874f
mov dword [ebp - 0x2c0], 1
mov eax, dword [ebp - 0x2c0]
mov dword [ebp - 0xc4], eax
mov byte [ebp - 0x58], 0
movzx eax, byte [ebp - 0x58]
test eax, eax
je 0x10038782
push 1
push 0x2704
push 0x64c5
push 0x762e
push 1
call fcn.1002bbba
add esp, 0x14
jmp 0x10038940
mov dword [ebp - 0x160], 0x57de
mov dword [ebp - 0x180], 0x5799d45e
mov dword [ebp - 0xc4], 0
jmp 0x100387b4
mov eax, dword [ebp - 0xc4]
dec eax
mov dword [ebp - 0xc4], eax
cmp dword [ebp - 0xc4], 0xfffffffe
je 0x10038940
mov dword [ebp - 0x334], 0x94fc7bc0
mov dword [ebp - 0x110], 0
jmp 0x100387e4
mov eax, dword [ebp - 0x110]
inc eax
mov dword [ebp - 0x110], eax
cmp dword [ebp - 0x110], 3
jge 0x10038800
mov eax, dword [ebp - 0x110]
mov dword [ebp + eax*4 - 0x80c], 0xfffffffb
jmp 0x100387d7
push 0xfffffffffffffffe
pop eax
test eax, eax
je 0x1003881c
cmp dword [ebp - 0x160], 0
je 0x1003881c
mov dword [ebp - 0x384], 1
jmp 0x10038823
and dword [ebp - 0x384], 0
mov esi, dword [ebp - 0x20]
push 2
lea ecx, [ebp - 0x1a0]
call fcn.1000e623
sub esi, dword [eax]
mov dword [ebp - 0x1f8], esi
mov eax, dword [ebp - 0x1f8]
mov dword [ebp - 0x180], eax
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x80c]
mov dword [ebp - 0x654], eax
push 0
lea ecx, [ebp - 0x1a0]
call fcn.1000e623
mov eax, dword [ebp - 0x180]
imul eax, dword [ebp - 0x160]
cmp dword [ebp - 0x384], eax
jg 0x10038888
mov dword [ebp - 0x200], 1
jmp 0x1003888f
and dword [ebp - 0x200], 0
cmp dword [ebp - 0x200], 0xffff
jb 0x100388ad
mov eax, 0x714e
test eax, eax
jne 0x100388ad
and dword [ebp - 0x2c8], 0
jmp 0x100388b7
mov dword [ebp - 0x2c8], 1
cmp dword [ebp - 0x2c8], 1
je 0x100388cc
mov dword [ebp - 0x208], 1
jmp 0x100388d3
and dword [ebp - 0x208], 0
mov eax, dword [ebp - 0x40]
cmp eax, dword [ebp - 0x208]
jle 0x100388ea
mov dword [ebp - 0x4a4], 1
jmp 0x100388f1
and dword [ebp - 0x4a4], 0
mov eax, dword [ebp - 0x180]
mov dword [ebp - 0x334], eax
mov esi, dword [ebp - 0x334]
push 3
lea ecx, [ebp - 0x628]
call fcn.1000e623
sub esi, dword [eax]
neg esi
cmp esi, dword [ebp - 0x20]
jl 0x10038925
mov dword [ebp - 0x210], 1
jmp 0x1003892c
and dword [ebp - 0x210], 0
mov eax, dword [ebp - 0x160]
add eax, dword [ebp - 0x210]
mov dword [ebp - 0x40], eax
jmp 0x100387a7
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x628]
call fcn.1000e61e
jmp 0x100384c6
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x1a0]
call fcn.1000e61e
jmp 0x10038438
mov byte [ebp - 0x5a], 0
movzx eax, byte [ebp - 0x5a]
test eax, eax
je 0x100389ad
push 0x6c62
push 1
push 0x5835
push 0x39fa
push 0x4352
push 0x6f63
push 0
push 0x4025
push 0x1a9f
push 0x3ba3
push 0x1d9a
call fcn.1003bb0c
add esp, 0x2c
push 3
lea ecx, [ebp - 0x730]
call fcn.1000e5bc
mov byte [ebp - 4], 7
mov dword [ebp - 0x65c], 0xe6bacd79
mov dword [ebp - 0x5b0], 0xfffffff7
mov dword [ebp - 0x5ac], 0xfffffff7
mov dword [ebp - 0x5a8], 0xfffffff7
mov dword [ebp - 0x5a4], 0xfffffff7
lea ecx, [ebp - 0x191]
call fcn.1000e632
push eax
lea eax, [ebp - 0x5a0]
push eax
lea eax, [ebp - 0x5b0]
push eax
lea ecx, [ebp - 0x838]
call fcn.1000e635
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0x824]
call fcn.1000e5f8
mov byte [ebp - 4], 8
push 1
lea ecx, [ebp - 0x640]
call fcn.1000e5bc
mov byte [ebp - 4], 9
push 0
push 1
push 0x2a65
lea eax, [ebp - 0xa4]
push eax
lea eax, [ebp - 0x730]
push eax
push 0x7ccf
call fcn.1002c1cf
add esp, 0x18
mov dword [ebp - 0xa4], 0
jmp 0x10038a77
mov eax, dword [ebp - 0xa4]
inc eax
mov dword [ebp - 0xa4], eax
cmp dword [ebp - 0xa4], 1
jge 0x10038a99
push dword [ebp - 0xa4]
lea ecx, [ebp - 0x640]
call fcn.1000e623
mov dword [eax], 0x13f1
jmp 0x10038a6a
push 0
push 0xcb
lea eax, [ebp - 0x640]
push eax
push 0x174a
push 0x2957
call fcn.1003f236
add esp, 0x14
mov byte [ebp - 4], 8
lea ecx, [ebp - 0x640]
call fcn.1000e61e
mov byte [ebp - 4], 7
lea ecx, [ebp - 0x824]
call fcn.1000e61e
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x730]
call fcn.1000e61e
mov dword [ebp - 0x3fc], 0xd2a6f9a4
push 0x39fb
push 1
push 0xd35
push 0
push 0x1084
push 0x1040
lea eax, [ebp - 0xbc]
push eax
push 0x42a6
lea eax, [ebp - 0x138]
push eax
push 1
push 0x67a
push 0x46ae
call fcn.1003ed63
add esp, 0x30
mov dword [ebp - 0xbc], 0
jmp 0x10038b48
mov eax, dword [ebp - 0xbc]
inc eax
mov dword [ebp - 0xbc], eax
cmp dword [ebp - 0xbc], 1
jge 0x10038b64
mov eax, dword [ebp - 0xbc]
mov dword [ebp + eax*4 - 0x514], 0x69919c44
jmp 0x10038b3b
mov dword [ebp - 0x7c4], 0xfffffff9
mov dword [ebp - 0x7c0], 0xfffffff9
mov dword [ebp - 0x7bc], 0xfffffff9
mov dword [ebp - 0x7b8], 0xfffffff9
mov byte [ebp - 0x5c], 0
movzx eax, byte [ebp - 0x5c]
test eax, eax
je 0x10038ba0
push 0
call fcn.1003baf0
pop ecx
push 1
push 1
push 0xd4
push 1
call fcn.1002bc86
add esp, 0x10
push 1
lea ecx, [ebp - 0x138]
call fcn.1000e623
mov eax, dword [eax]
mov dword [ebp - 0xac], eax
imul eax, dword [ebp - 0xac], 3
test eax, eax
jne 0x10038cf6
push 1
lea ecx, [ebp - 0x138]
call fcn.1000e623
cmp dword [eax], 0
je 0x10038cf6
push 0
lea ecx, [ebp - 0x138]
call fcn.1000e623
mov esi, eax
push 1
lea ecx, [ebp - 0x138]
call fcn.1000e623
mov ecx, dword [esi]
cmp ecx, dword [eax]
jle 0x10038c1b
mov dword [ebp - 0x2d0], 1
jmp 0x10038c22
and dword [ebp - 0x2d0], 0
cmp dword [ebp - 0x2d0], 0xf5ebec5
jg 0x10038c3a
mov dword [ebp - 0x218], 1
jmp 0x10038c41
and dword [ebp - 0x218], 0
push 1
lea ecx, [ebp - 0x138]
call fcn.1000e623
mov ecx, dword [ebp - 0x218]
add ecx, dword [eax]
jns 0x10038c6d
cmp dword [ebp - 0xac], 0
je 0x10038c6d
mov dword [ebp - 0x364], 1
jmp 0x10038c74
and dword [ebp - 0x364], 0
push 1
lea ecx, [ebp - 0x138]
call fcn.1000e623
mov eax, dword [eax]
cmp eax, dword [ebp - 0x364]
jle 0x10038c97
mov dword [ebp - 0x220], 1
jmp 0x10038c9e
and dword [ebp - 0x220], 0
mov eax, dword [ebp - 0x220]
sub eax, dword [ebp - 0xac]
jne 0x10038cb8
mov dword [ebp - 0x2d8], 1
jmp 0x10038cbf
and dword [ebp - 0x2d8], 0
cmp dword [ebp - 0x2d8], 8
jg 0x10038cdd
cmp dword [ebp - 0xac], 0
je 0x10038cdd
mov dword [ebp - 0x228], 1
jmp 0x10038ce4
and dword [ebp - 0x228], 0
cmp dword [ebp - 0x228], 0
je 0x10038cf6
and dword [ebp - 0x3f4], 0
jmp 0x10038d00
mov dword [ebp - 0x3f4], 1
push 1
lea ecx, [ebp - 0x138]
call fcn.1000e623
push 4
pop eax
imul eax, eax, 0
lea eax, [ebp + eax - 0x514]
mov dword [ebp - 0x33c], eax
push 2
lea ecx, [ebp - 0x138]
call fcn.1000e623
mov ecx, dword [ebp - 0x33c]
mov eax, dword [eax]
mov dword [ecx], eax
push 1
lea ecx, [ebp - 0x138]
call fcn.1000e623
mov ecx, dword [ebp - 0x33c]
mov ecx, dword [ecx]
cmp ecx, dword [eax]
jge 0x10038d5c
mov dword [ebp - 0x230], 1
jmp 0x10038d63
and dword [ebp - 0x230], 0
mov eax, dword [ebp - 0x230]
mov dword [ebp - 0x3fc], eax
push 2
lea ecx, [ebp - 0x740]
call fcn.1000e5bc
mov byte [ebp - 4], 0xa
mov dword [ebp - 0x120], 0xc08901f2
mov dword [ebp - 0xf8], 0
jmp 0x10038da3
mov eax, dword [ebp - 0xf8]
inc eax
mov dword [ebp - 0xf8], eax
cmp dword [ebp - 0xf8], 2
jge 0x10038dc5
push dword [ebp - 0xf8]
lea ecx, [ebp - 0x740]
call fcn.1000e623
mov dword [eax], 1
jmp 0x10038d96
mov dword [ebp - 0x120], 1
jmp 0x10038dde
mov eax, dword [ebp - 0x120]
dec eax
mov dword [ebp - 0x120], eax
cmp dword [ebp - 0x120], 0
jl 0x10038e3e
mov byte [ebp - 0x55], 0
movzx eax, byte [ebp - 0x55]
test eax, eax
je 0x10038e2e
push 0x791b
push 0x6f15
push 0
push 1
push 0x4642
push 1
push 0x5b45
push 0x1b5f
push 0x4fc7
push 0x5935
push 0x7bb7
push 0xfbf
call fcn.1002c6ce
add esp, 0x30
push 0
push 0x6e6f
call fcn.1003bf2d
pop ecx
pop ecx
jmp 0x10038dd1
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x740]
call fcn.1000e61e
mov byte [ebp - 0x6d], 0
push 3
lea ecx, [ebp - 0x750]
call fcn.1000e5bc
mov byte [ebp - 4], 0xb
mov dword [ebp - 0xcc], 0x2971c1e
push 0x2887
push 0
lea eax, [ebp - 0x664]
push eax
push 1
lea eax, [ebp - 0x750]
push eax
call fcn.1002bd54
add esp, 0x14
lea eax, [ebp - 0xcc]
push eax
push 1
push 0x4d05
push 1
push 0x1823
call fcn.1002bd54
add esp, 0x14
mov dword [ebp - 0xcc], 0
jmp 0x10038ec1
mov eax, dword [ebp - 0xcc]
inc eax
mov dword [ebp - 0xcc], eax
cmp dword [ebp - 0xcc], 0xb
jne 0x10039116
mov dword [ebp - 0x4ac], 0xa3b3f365
cmp dword [ebp - 0x4ac], 0
je 0x10038ee6
jmp 0x10039116
mov byte [ebp - 0x7f], 0
mov dword [ebp - 0x404], 0x1448
cmp dword [ebp - 0x404], 0x4b3
jge 0x100390e4
lea eax, [ebp - 0x2e0]
push eax
mov ecx, 0x1065c150
call fcn.1000e075
mov dword [ebp - 0x100], 1
jmp 0x10038f2e
mov eax, dword [ebp - 0x100]
inc eax
mov dword [ebp - 0x100], eax
mov eax, dword [ebp - 0x100]
cmp eax, dword [ebp - 0x2e0]
jg 0x10038f56
mov eax, dword [ebp - 0x100]
lea eax, [eax*4 + 0x10b2f278]
push eax
mov ecx, 0x1065c150
call fcn.1000e075
jmp 0x10038f21
lea ecx, [ebp - 0x7f4]
call fcn.1000e016
mov byte [ebp - 4], 0xc
lea edx, [ebp - 0x7f4]
mov ecx, 0x1065c150
call fcn.10023d94
push 4
pop eax
imul eax, eax, 0
and dword [eax + 0x10bf2780], 0
mov dword [ebp - 0x88], 1
jmp 0x10038f9b
mov eax, dword [ebp - 0x88]
inc eax
mov dword [ebp - 0x88], eax
lea ecx, [ebp - 0x7f4]
call fcn.1000eb6c
cmp dword [ebp - 0x88], eax
ja 0x10038fe4
mov eax, dword [ebp - 0x88]
dec eax
push eax
lea ecx, [ebp - 0x7f4]
call fcn.100104b2
movsx eax, byte [eax]
mov ecx, dword [ebp - 0x88]
mov ecx, dword [ecx*4 + 0x10bf277c]
lea eax, [eax + ecx - 0x30]
mov ecx, dword [ebp - 0x88]
mov dword [ecx*4 + 0x10bf2780], eax
jmp 0x10038f8e
mov dword [ebp - 0x10], 1
jmp 0x10038ff4
mov eax, dword [ebp - 0x10]
inc eax
mov dword [ebp - 0x10], eax
mov eax, dword [ebp - 0x10]
cmp eax, dword [ebp - 0x2e0]
jg 0x100390ba
mov eax, dword [ebp - 0x10]
mov eax, dword [eax*4 + 0x10b2f278]
cmp eax, dword [ebp - 0x10]
je 0x100390b5
mov eax, dword [ebp - 0x10]
mov eax, dword [eax*4 + 0x10b2f278]
cmp eax, dword [ebp - 0x10]
jge 0x1003906e
mov eax, dword [ebp - 0x10]
mov ecx, dword [ebp - 0x10]
sub ecx, dword [eax*4 + 0x10b2f278]
mov eax, dword [ebp - 0x10]
mov eax, dword [eax*4 + 0x10b2f278]
mov edx, dword [ebp - 0x10]
mov edx, dword [edx*4 + 0x10bf277c]
sub edx, dword [eax*4 + 0x10bf277c]
cmp ecx, edx
je 0x1003906c
push fcn.10012c7f
mov edx, 0x100078f0
mov ecx, 0x1065c098
call fcn.100128f2
mov ecx, eax
call fcn.1000e264
jmp 0x100390b5
mov eax, dword [ebp - 0x10]
mov eax, dword [eax*4 + 0x10b2f278]
sub eax, dword [ebp - 0x10]
mov ecx, dword [ebp - 0x10]
mov ecx, dword [ecx*4 + 0x10b2f278]
mov edx, dword [ebp - 0x10]
mov ecx, dword [ecx*4 + 0x10bf277c]
sub ecx, dword [edx*4 + 0x10bf277c]
cmp eax, ecx
je 0x100390b5
push fcn.10012c7f
mov edx, 0x100078f0
mov ecx, 0x1065c098
call fcn.100128f2
mov ecx, eax
call fcn.1000e264
jmp 0x10038fed
push fcn.10012c7f
mov edx, 0x100078ec
mov ecx, 0x1065c098
call fcn.100128f2
mov ecx, eax
call fcn.1000e264
mov byte [ebp - 4], 0xb
lea ecx, [ebp - 0x7f4]
call fcn.1000e056
movzx eax, byte [ebp - 0x7f]
test eax, eax
je 0x10039111
push 0x3dae
push 0
push 0x5aba
push 0x23fe
push 0x1550
push 0x6074
push 1
call fcn.10047c00
add esp, 0x1c
jmp 0x10038eb4
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x750]
call fcn.1000e61e
movzx eax, byte [ebp - 0x6d]
test eax, eax
je 0x10039143
push 1
push 0x4c9b
push 0x333e
push 1
call fcn.1002c130
add esp, 0x10
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x138]
call fcn.1000e61e
push 3
lea ecx, [ebp - 0x39c]
call fcn.1000e5bc
mov dword [ebp - 4], 0xd
push 3
lea ecx, [ebp - 0x54c]
call fcn.1000e5bc
mov byte [ebp - 4], 0xe
mov dword [ebp - 0xec], 0x141c5ab2
mov dword [ebp - 0x2c], 0
jmp 0x10039191
mov eax, dword [ebp - 0x2c]
inc eax
mov dword [ebp - 0x2c], eax
cmp dword [ebp - 0x2c], 3
jge 0x100391ad
push dword [ebp - 0x2c]
lea ecx, [ebp - 0x39c]
call fcn.1000e623
mov dword [eax], 9
jmp 0x1003918a
mov dword [ebp - 0x2c], 0
jmp 0x100391bd
mov eax, dword [ebp - 0x2c]
inc eax
mov dword [ebp - 0x2c], eax
cmp dword [ebp - 0x2c], 2
jge 0x100391d3
mov eax, dword [ebp - 0x2c]
mov dword [ebp + eax*4 - 0x46c], 0x50b5f0b1
jmp 0x100391b6
push 0x7e4
lea eax, [ebp - 0x54c]
push eax
push 0x4006
push 0x552d
push 0
lea eax, [ebp - 0x2c]
push eax
push 0x13bc
push 0x553b
push 1
push 0x3a84
push 0x6977
push 0x655e
call fcn.10047ff9
add esp, 0x30
mov dword [ebp - 0x4e4], 0x1c6e
cmp dword [ebp - 0x4e4], 0x4e2
jge 0x10039363
push 0x10cb5fdc
push 0x10cb6238
push 0x100078d4
call fcn.100528eb
add esp, 0xc
cmp eax, 0xffffffff
je 0x10039363
mov ecx, 0x11087310
call fcn.1004b62a
push dword [0x10cb5fdc]
mov ecx, 0x11087310
call fcn.1004b59b
and dword [ebp - 0x118], 0
jmp 0x1003927c
mov eax, dword [ebp - 0x118]
inc eax
mov dword [ebp - 0x118], eax
mov eax, dword [ebp - 0x118]
cmp eax, dword [0x10cb5fdc]
jge 0x100392a9
push dword [ebp - 0x118]
mov ecx, 0x11087310
call fcn.1000e623
push eax
push 0x10007758
call fcn.100528eb
pop ecx
pop ecx
jmp 0x1003926f
and dword [0x1075a0d8], 0
mov eax, dword [0x1075a0d8]
mov dword [0x1075deac], eax
mov ecx, 0x11087340
call fcn.1004b62a
mov ecx, 0x11087358
call fcn.1004b62a
push 0
call fcn.10037c17
pop ecx
and dword [ebp - 0x94], 0
jmp 0x100392ec
mov eax, dword [ebp - 0x94]
inc eax
mov dword [ebp - 0x94], eax
mov ecx, 0x11087340
call fcn.100139a0
cmp dword [ebp - 0x94], eax
jae 0x10039344
cmp dword [ebp - 0x94], 0
je 0x10039313
mov dword [ebp - 0x238], 0x10007968
jmp 0x1003931d
mov dword [ebp - 0x238], 0x100076c5
push dword [ebp - 0x94]
mov ecx, 0x11087340
call fcn.1000e623
push dword [eax]
push dword [ebp - 0x238]
push 0x10007c64
call fcn.10052b06
add esp, 0xc
jmp 0x100392df
push dword [0x1075deac]
push 0x10007c6c
call fcn.10052b06
pop ecx
pop ecx
push 0xa
call fcn.100551db
pop ecx
jmp 0x1003922c
push 1
lea ecx, [ebp - 0x39c]
call fcn.1000e623
and dword [eax], 0
jmp 0x10039399
push 1
lea ecx, [ebp - 0x39c]
call fcn.1000e623
mov dword [ebp - 0x37c], eax
mov eax, dword [ebp - 0x37c]
mov eax, dword [eax]
dec eax
mov ecx, dword [ebp - 0x37c]
mov dword [ecx], eax
push 1
lea ecx, [ebp - 0x39c]
call fcn.1000e623
cmp dword [eax], 0xffffffe2
je 0x100398bb
push 4
lea ecx, [ebp - 0x324]
call fcn.1000e5bc
mov byte [ebp - 4], 0xf
mov dword [ebp - 0x28], 8
mov dword [ebp - 0x30], 0
jmp 0x100393d7
mov eax, dword [ebp - 0x30]
inc eax
mov dword [ebp - 0x30], eax
cmp dword [ebp - 0x30], 4
jge 0x100393f3
push dword [ebp - 0x30]
lea ecx, [ebp - 0x324]
call fcn.1000e623
mov dword [eax], 5
jmp 0x100393d0
mov dword [ebp - 0x30], 0
jmp 0x10039403
mov eax, dword [ebp - 0x30]
inc eax
mov dword [ebp - 0x30], eax
cmp dword [ebp - 0x30], 1
jge 0x10039419
mov eax, dword [ebp - 0x30]
mov dword [ebp + eax*4 - 0x170], 0x4173bf38
jmp 0x100393fc
mov dword [ebp - 0x28], 3
jmp 0x10039429
mov eax, dword [ebp - 0x28]
dec eax
mov dword [ebp - 0x28], eax
cmp dword [ebp - 0x28], 0
jl 0x10039886
mov dword [ebp - 0x168], 0xa5f9c710
mov dword [ebp - 0x414], 0xa9d01274
mov dword [ebp - 0xe0], 0
jmp 0x10039460
mov eax, dword [ebp - 0xe0]
inc eax
mov dword [ebp - 0xe0], eax
cmp dword [ebp - 0xe0], 3
jge 0x1003947c
mov eax, dword [ebp - 0xe0]
mov dword [ebp + eax*4 - 0x800], 0xd744d028
jmp 0x10039453
push dword [ebp - 0x28]
lea ecx, [ebp - 0x324]
call fcn.1000e623
cmp dword [eax], 9
jae 0x100395d6
push 4
pop eax
shl eax, 0
mov dword [ebp + eax - 0x800], 0xcd1b7e28
push 0xfffffffffffffffa
pop eax
add eax, 0xcd1b7e28
cmp eax, 1
je 0x100394bd
mov dword [ebp - 0x240], 1
jmp 0x100394c4
and dword [ebp - 0x240], 0
push 3
lea ecx, [ebp - 0x324]
call fcn.1000e623
mov eax, dword [eax]
cmp eax, dword [ebp - 0x240]
jg 0x100394e7
mov dword [ebp - 0x2e8], 1
jmp 0x100394ee
and dword [ebp - 0x2e8], 0
cmp dword [ebp - 0x2e8], 0xffff
ja 0x10039506
mov dword [ebp - 0x248], 1
jmp 0x1003950d
and dword [ebp - 0x248], 0
cmp dword [ebp - 0x248], 0
jb 0x10039522
mov dword [ebp - 0x40c], 1
jmp 0x10039529
and dword [ebp - 0x40c], 0
mov eax, dword [ebp - 0x28]
mov dword [ebp - 0x66c], eax
push dword [ebp - 0x28]
lea ecx, [ebp - 0x324]
call fcn.1000e623
cmp dword [eax], 0xffffffff
jge 0x10039551
mov dword [ebp - 0x1a4], 1
jmp 0x10039558
and dword [ebp - 0x1a4], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x1a4]
mov dword [ebp + eax - 0x46c], ecx
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x170]
cmp dword [ebp - 0x1a4], eax
jle 0x1003958c
mov dword [ebp - 0x4b4], 1
jmp 0x10039593
and dword [ebp - 0x4b4], 0
push 1
lea ecx, [ebp - 0x39c]
call fcn.1000e623
mov eax, dword [ebp - 0x414]
mov dword [ebp - 0x344], eax
push 2
lea ecx, [ebp - 0x54c]
call fcn.1000e623
mov ecx, dword [ebp - 0x344]
mov dword [eax], ecx
cmp dword [ebp - 0x344], 0
je 0x100395d6
mov dword [ebp - 0x250], 1
jmp 0x100395dd
and dword [ebp - 0x250], 0
cmp dword [ebp - 0x250], 4
jge 0x100395f2
mov dword [ebp - 0x2f0], 1
jmp 0x100395f9
and dword [ebp - 0x2f0], 0
mov eax, dword [ebp - 0x168]
mov dword [ebp - 0x524], eax
mov eax, dword [ebp - 0x2f0]
mov dword [ebp - 0x41c], eax
mov eax, dword [ebp - 0x168]
inc eax
mov dword [ebp - 0x168], eax
mov eax, dword [ebp - 0x524]
cmp eax, dword [ebp - 0x41c]
jle 0x10039817
mov dword [ebp - 0x4bc], 0x63d2c82f
mov dword [ebp - 0x188], 0xf884
push 4
pop eax
imul eax, eax, 0
mov esi, dword [ebp + eax - 0x46c]
push 1
lea ecx, [ebp - 0x324]
call fcn.1000e623
cmp esi, dword [eax]
je 0x1003966e
mov dword [ebp - 0x2f8], 1
jmp 0x10039675
and dword [ebp - 0x2f8], 0
mov eax, dword [ebp - 0x4bc]
mov dword [ebp - 0x674], eax
mov eax, 0x76a
test eax, eax
je 0x1003969f
mov eax, 0xc9a
test eax, eax
je 0x1003969f
mov dword [ebp - 0x258], 1
jmp 0x100396a6
and dword [ebp - 0x258], 0
mov eax, dword [ebp - 0x258]
mov dword [ebp - 0x188], eax
cmp dword [ebp - 0x188], 0
jne 0x100396cd
mov eax, 0xffff
test eax, eax
jne 0x100396cd
and dword [ebp - 0x36c], 0
jmp 0x100396d7
mov dword [ebp - 0x36c], 1
mov eax, dword [ebp - 0x28]
cmp eax, dword [ebp - 0x36c]
je 0x100396ee
mov dword [ebp - 0x260], 1
jmp 0x100396f5
and dword [ebp - 0x260], 0
imul eax, dword [ebp - 0x260], 0xfff7
cmp dword [ebp - 0x2f8], eax
je 0x10039713
mov dword [ebp - 0x268], 1
jmp 0x1003971a
and dword [ebp - 0x268], 0
cmp dword [ebp - 0x268], 0x79a9257d
je 0x10039732
mov dword [ebp - 0x34c], 1
jmp 0x10039739
and dword [ebp - 0x34c], 0
push dword [ebp - 0x28]
lea ecx, [ebp - 0x324]
call fcn.1000e623
cmp dword [ebp - 0x188], 0
je 0x10039761
xor eax, eax
inc eax
je 0x10039761
mov dword [ebp - 0x270], 1
jmp 0x10039768
and dword [ebp - 0x270], 0
push 0
lea ecx, [ebp - 0x39c]
call fcn.1000e623
mov ecx, dword [ebp - 0x270]
cmp ecx, dword [eax]
jge 0x1003978b
mov dword [ebp - 0x300], 1
jmp 0x10039792
and dword [ebp - 0x300], 0
mov eax, dword [ebp - 0x28]
cmp dword [ebp - 0x300], eax
jg 0x100397a9
mov dword [ebp - 0x278], 1
jmp 0x100397b0
and dword [ebp - 0x278], 0
push 2
lea ecx, [ebp - 0x54c]
call fcn.1000e623
mov ecx, dword [ebp - 0x278]
cmp ecx, dword [eax]
jne 0x100397d3
mov dword [ebp - 0x38c], 1
jmp 0x100397da
and dword [ebp - 0x38c], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x170]
cmp dword [ebp - 0x38c], eax
jge 0x100397fb
mov dword [ebp - 0x280], 1
jmp 0x10039802
and dword [ebp - 0x280], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x280]
mov dword [ebp + eax - 0x46c], ecx
jmp 0x10039865
mov dword [ebp - 0xe4], 0
jmp 0x10039830
mov eax, dword [ebp - 0xe4]
inc eax
mov dword [ebp - 0xe4], eax
cmp dword [ebp - 0xe4], 3
jge 0x1003984c
mov eax, dword [ebp - 0xe4]
mov dword [ebp + eax*4 - 0x760], 0x35df961d
jmp 0x10039823
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x760]
dec eax
push 4
pop ecx
shl ecx, 1
mov dword [ebp + ecx - 0x760], eax
mov byte [ebp - 0x59], 0
lea eax, [ebp - 0x59]
push eax
push 0x1d76
push 0x45ee
push 0
call fcn.1003bc77
add esp, 0x10
jmp 0x10039422
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x170], 0
je 0x100398a7
mov byte [ebp - 4], 0xe
lea ecx, [ebp - 0x324]
call fcn.1000e61e
jmp 0x100398bb
mov byte [ebp - 4], 0xe
lea ecx, [ebp - 0x324]
call fcn.1000e61e
jmp 0x10039375
mov dword [ebp - 0xec], 0
jmp 0x100398d4
mov eax, dword [ebp - 0xec]
dec eax
mov dword [ebp - 0xec], eax
cmp dword [ebp - 0xec], 0xfffffffa
jle 0x100398e7
push 0
call fcn.1003f4df
pop ecx
jmp 0x100398c7
mov byte [ebp - 4], 0xd
lea ecx, [ebp - 0x54c]
call fcn.1000e61e
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x39c]
call fcn.1000e61e
mov eax, dword [ebp - 0x114]
mov eax, dword [eax + 4]
mov dword [ebp - 0x314], eax
mov dword [ebp - 0x64], 0xbdba
push 3
lea ecx, [ebp - 0x5d4]
call fcn.1000e5bc
mov dword [ebp - 4], 0x10
mov dword [ebp - 0x424], 0
mov dword [ebp - 0x4c4], 0
push 0x292a
push 1
push 0x4abb
push 0x10cf
lea eax, [ebp - 0x5d4]
push eax
push 0x404a
push 0x6d38
push 1
lea eax, [ebp - 0x67c]
push eax
push 0x38b3
call fcn.1002c399
add esp, 0x28
mov eax, dword [ebp - 0x64]
cmp dword [ebp - 0x64], eax
jg 0x100399a9
mov byte [ebp - 0x5b], 0
movzx eax, byte [ebp - 0x5b]
test eax, eax
je 0x100399a4
push 0x2f9
push 0x264f
push 0x26f8
call dword [sym.imp.GDI32.dll_CreateCompatibleBitmap]
jmp 0x10039aaa
mov dword [ebp - 0x13c], 0xec4f
mov dword [ebp - 0x4f4], 0x105a83d8
mov dword [ebp - 0x64], 2
jmp 0x100399cd
mov eax, dword [ebp - 0x64]
dec eax
mov dword [ebp - 0x64], eax
cmp dword [ebp - 0x64], 0
jl 0x10039aaa
mov dword [ebp - 0xa0], 0xefa20bd0
mov dword [ebp - 0x684], 0x52835357
mov dword [ebp - 0xa0], 2
jmp 0x10039a04
mov eax, dword [ebp - 0xa0]
dec eax
mov dword [ebp - 0xa0], eax
cmp dword [ebp - 0xa0], 0
jl 0x10039aa5
mov dword [ebp - 0x98], 0xffffffff
mov dword [ebp - 0x42c], 0x86fa66fa
mov dword [ebp - 0x98], 2
jmp 0x10039a3e
mov eax, dword [ebp - 0x98]
dec eax
mov dword [ebp - 0x98], eax
cmp dword [ebp - 0x98], 0
jl 0x10039aa0
mov eax, dword [ebp - 0x13c]
dec eax
mov dword [ebp - 0x13c], eax
lea eax, [ebp - 0x424]
push eax
lea eax, [ebp - 0x13c]
push eax
push 1
push 1
lea eax, [ebp - 0x4f4]
push eax
push 1
lea eax, [ebp - 0x98]
push eax
lea eax, [ebp - 0x42c]
push eax
lea eax, [ebp - 0x5d4]
push eax
lea eax, [ebp - 0x4c4]
push eax
lea eax, [ebp - 0x64]
push eax
lea eax, [ebp - 0xa0]
push eax
call fcn.1002c6ce
add esp, 0x30
jmp 0x10039a31
jmp 0x100399f7
jmp 0x100399c6
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x5d4]
call fcn.1000e61e
push 1
lea ecx, [ebp - 0x3a8]
call fcn.1000e5bc
mov dword [ebp - 4], 0x11
mov dword [ebp - 0x24], 0xd8143836
mov dword [ebp - 0x59c], 0x56cd
mov dword [ebp - 0x598], 0x56cd
mov dword [ebp - 0x594], 0x56cd
mov dword [ebp - 0x590], 0x56cd
lea ecx, [ebp - 0x13d]
call fcn.1000e632
push eax
lea eax, [ebp - 0x58c]
push eax
lea eax, [ebp - 0x59c]
push eax
lea ecx, [ebp - 0x850]
call fcn.1000e635
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0x770]
call fcn.1000e5f8
mov byte [ebp - 4], 0x12
mov dword [ebp - 0xf4], 1
mov dword [ebp - 0x90], 1
mov dword [ebp - 0x44], 0
jmp 0x10039b59
mov eax, dword [ebp - 0x44]
inc eax
mov dword [ebp - 0x44], eax
cmp dword [ebp - 0x44], 2
jge 0x10039b6f
mov eax, dword [ebp - 0x44]
mov dword [ebp + eax*4 - 0x1ac], 0xeee2
jmp 0x10039b52
mov dword [ebp - 0x44], 0
jmp 0x10039b7f
mov eax, dword [ebp - 0x44]
inc eax
mov dword [ebp - 0x44], eax
cmp dword [ebp - 0x44], 1
jge 0x10039b9b
push dword [ebp - 0x44]
lea ecx, [ebp - 0x3a8]
call fcn.1000e623
mov dword [eax], 0x1d26
jmp 0x10039b78
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x1ac]
mov dword [ebp - 0x68c], eax
push 0
lea ecx, [ebp - 0x3a8]
call fcn.1000e623
cmp dword [eax], 0
jne 0x10039c48
push 0
lea ecx, [ebp - 0x3a8]
call fcn.1000e623
mov esi, eax
push 0
lea ecx, [ebp - 0x3a8]
call fcn.1000e623
mov ecx, dword [esi]
cmp ecx, dword [eax]
je 0x10039bf2
mov dword [ebp - 0x308], 1
jmp 0x10039bf9
and dword [ebp - 0x308], 0
push 4
pop eax
shl eax, 0
push 4
pop ecx
shl ecx, 0
mov ecx, dword [ebp + ecx - 0x1ac]
add ecx, dword [ebp - 0x308]
cmp dword [ebp + eax - 0x1ac], ecx
je 0x10039c27
mov dword [ebp - 0x434], 1
jmp 0x10039c2e
and dword [ebp - 0x434], 0
mov dword [ebp - 0x24], 0xfffffff6
mov eax, dword [ebp - 0x24]
neg eax
cmp eax, 0xfffffffd
jl 0x10039c48
and dword [ebp - 0x474], 0
jmp 0x10039c52
mov dword [ebp - 0x474], 1
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x1ac]
mov dword [ebp - 0x694], eax
push 0
lea ecx, [ebp - 0x3a8]
call fcn.1000e623
mov eax, 0xde57413
dec eax
cmp eax, 0xfffffff6
jl 0x10039c89
mov dword [ebp - 0x288], 1
jmp 0x10039c90
and dword [ebp - 0x288], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x1ac]
cmp dword [ebp - 0x288], eax
je 0x10039cb1
mov dword [ebp - 0x354], 1
jmp 0x10039cb8
and dword [ebp - 0x354], 0
push 0
lea ecx, [ebp - 0x770]
call fcn.1000e623
mov ecx, dword [ebp - 0x354]
cmp ecx, dword [eax]
jle 0x10039ce2
push 0xfffffffffffffffd
pop eax
test eax, eax
je 0x10039ce2
mov dword [ebp - 0x290], 1
jmp 0x10039ce9
and dword [ebp - 0x290], 0
mov eax, dword [ebp - 0x290]
mov dword [ebp - 0xf4], eax
cmp dword [ebp - 0xf4], 0
je 0x10039e23
mov dword [ebp - 0x374], 0x2f37
mov dword [ebp - 0x144], 1
push 4
lea ecx, [ebp - 0x634]
call fcn.1000e5bc
mov byte [ebp - 4], 0x13
lea eax, [ebp - 0x69c]
push eax
lea eax, [ebp - 0x634]
push eax
push 0
push 0x1d6
push 1
call fcn.1002cd55
add esp, 0x14
mov eax, dword [ebp - 0x144]
cmp dword [ebp - 0x90], eax
jle 0x10039d60
mov dword [ebp - 0x310], 1
jmp 0x10039d67
and dword [ebp - 0x310], 0
cmp dword [ebp - 0x310], 0x6717b38e
jge 0x10039d7f
mov dword [ebp - 0x298], 1
jmp 0x10039d86
and dword [ebp - 0x298], 0
mov eax, dword [ebp - 0x298]
mov dword [ebp - 0xf4], eax
mov eax, dword [ebp - 0x24]
cmp dword [ebp - 0xf4], eax
jl 0x10039da9
mov dword [ebp - 0x2a0], 1
jmp 0x10039db0
and dword [ebp - 0x2a0], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x1ac]
sub eax, 0x846b
mov dword [ebp - 0x374], eax
mov eax, dword [ebp - 0x374]
add eax, 0x336
cmp eax, dword [ebp - 0x2a0]
jg 0x10039de7
mov dword [ebp - 0x1b8], 1
jmp 0x10039dee
and dword [ebp - 0x1b8], 0
mov eax, dword [ebp - 0x1b8]
mov dword [ebp - 0x144], eax
mov esi, dword [ebp - 0x144]
push 0
lea ecx, [ebp - 0x634]
call fcn.1000e623
mov dword [eax], esi
mov byte [ebp - 4], 0x12
lea ecx, [ebp - 0x634]
call fcn.1000e61e
jmp 0x10039ec5
mov dword [ebp - 0x1b4], 0
mov dword [ebp - 0xfc], 0
jmp 0x10039e46
mov eax, dword [ebp - 0xfc]
inc eax
mov dword [ebp - 0xfc], eax
cmp dword [ebp - 0xfc], 2
jge 0x10039e62
mov eax, dword [ebp - 0xfc]
mov dword [ebp + eax*4 - 0x560], 0xffffffff
jmp 0x10039e39
mov dword [ebp - 0x90], 0x14
jmp 0x10039e7b
mov eax, dword [ebp - 0x90]
inc eax
mov dword [ebp - 0x90], eax
cmp dword [ebp - 0x90], 0x23
jg 0x10039eb5
mov dword [ebp - 0x43c], 0xc553
mov eax, dword [ebp - 0x43c]
mov dword [ebp - 0x24], eax
mov eax, dword [ebp - 0x24]
mov dword [ebp - 0x1b4], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x1b4]
mov dword [ebp + eax - 0x560], ecx
jmp 0x10039e6e
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x24]
mov dword [ebp + eax - 0x560], ecx
mov dword [ebp - 0x24], 0
jmp 0x10039ed5
mov eax, dword [ebp - 0x24]
dec eax
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 0xffffffe9
jle 0x10039f08
mov dword [ebp - 0x478], 0x9e520c3d
push 0x2a65
push 0x34c3
push 0
push 1
call fcn.1003e746
add esp, 0x10
cmp dword [ebp - 0x478], 0
je 0x10039f06
jmp 0x10039f08
jmp 0x10039ece
mov byte [ebp - 4], 0x11
lea ecx, [ebp - 0x770]
call fcn.1000e61e
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x3a8]
call fcn.1000e61e
mov dword [ebp - 0xa8], 0xdc85f70a
mov dword [ebp - 0x444], 0x5c6a3f15
mov dword [ebp - 0x480], 0xf7cf8fb6
mov dword [ebp - 0xa8], 0
jmp 0x10039f5d
mov eax, dword [ebp - 0xa8]
dec eax
mov dword [ebp - 0xa8], eax
cmp dword [ebp - 0xa8], 0xfffffffc
jl 0x10039fba
mov dword [ebp - 0x488], 0
mov dword [ebp - 0x44c], 0x796d402d
lea eax, [ebp - 0x444]
push eax
lea eax, [ebp - 0x480]
push eax
push 0x5600
push 1
lea eax, [ebp - 0x44c]
push eax
push 0x2d0f
lea eax, [ebp - 0xa8]
push eax
lea eax, [ebp - 0x488]
push eax
push 0x2ad1
push 0
call fcn.10037cea
add esp, 0x28
jmp 0x10039f50
mov byte [ebp - 0x75], 0
movzx eax, byte [ebp - 0x75]
test eax, eax
je 0x10039fda
push 0
push 0x2da7
push 0x1339
call fcn.100467d1
add esp, 0xc
push 3
lea ecx, [ebp - 0x780]
call fcn.1000e5bc
mov dword [ebp - 4], 0x14
mov dword [ebp - 0x6a4], 0xe6bacd79
mov dword [ebp - 0x574], 0xfffffff7
mov dword [ebp - 0x570], 0xfffffff7
mov dword [ebp - 0x56c], 0xfffffff7
mov dword [ebp - 0x568], 0xfffffff7
lea ecx, [ebp - 0x192]
call fcn.1000e632
push eax
lea eax, [ebp - 0x564]
push eax
lea eax, [ebp - 0x574]
push eax
lea ecx, [ebp - 0x848]
call fcn.1000e635
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0x818]
call fcn.1000e5f8
mov byte [ebp - 4], 0x15
push 1
lea ecx, [ebp - 0x5bc]
call fcn.1000e5bc
mov byte [ebp - 4], 0x16
lea eax, [ebp - 0x780]
push eax
push 0
lea eax, [ebp - 0xb0]
push eax
push 0x685c
call fcn.1003bda5
add esp, 0x10
mov dword [ebp - 0xb0], 0
jmp 0x1003a0a0
mov eax, dword [ebp - 0xb0]
inc eax
mov dword [ebp - 0xb0], eax
cmp dword [ebp - 0xb0], 1
jge 0x1003a0c2
push dword [ebp - 0xb0]
lea ecx, [ebp - 0x5bc]
call fcn.1000e623
mov dword [eax], 0x13f1
jmp 0x1003a093
push 0
lea ecx, [ebp - 0x5bc]
call fcn.1000e623
mov dword [ebp - 0x1c4], eax
mov eax, dword [ebp - 0x1c4]
mov eax, dword [eax]
dec eax
mov ecx, dword [ebp - 0x1c4]
mov dword [ecx], eax
mov byte [ebp - 4], 0x15
lea ecx, [ebp - 0x5bc]
call fcn.1000e61e
mov byte [ebp - 4], 0x14
lea ecx, [ebp - 0x818]
call fcn.1000e61e
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x780]
call fcn.1000e61e
mov dword [ebp - 0xd4], 0
jmp 0x1003a12c
mov eax, dword [ebp - 0xd4]
inc eax
mov dword [ebp - 0xd4], eax
cmp dword [ebp - 0xd4], 3
jge 0x1003a148
mov eax, dword [ebp - 0xd4]
mov dword [ebp + eax*4 - 0x558], 0x69fdf99f
jmp 0x1003a11f
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0x558], 0x13
jmp 0x1003a176
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x558]
dec eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x558], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x558], 5
jle 0x1003a1b3
mov byte [ebp - 0x5d], 0
push 0
push 0x1284
push 0x57c5
push 0x13e3
lea eax, [ebp - 0x5d]
push eax
push 0x7934
push 0xe1
call fcn.1003bd4b
add esp, 0x1c
jmp 0x1003a15b
mov eax, dword [ebp - 0x114]
mov eax, dword [eax]
mov ecx, dword [ebp - 0x114]
mov ecx, dword [ecx]
movzx ecx, word [ecx + 0x14]
lea eax, [eax + ecx + 0x18]
mov dword [ebp - 0x48], eax
mov dword [ebp - 0x14c], 0xbf5cd53b
mov dword [ebp - 0x50], 4
mov dword [ebp - 0x1e4], 0x44401d1b
mov dword [ebp - 0x490], 0xffffffff
push 2
lea ecx, [ebp - 0x61c]
call fcn.1000e5bc
mov dword [ebp - 4], 0x17
lea eax, [ebp - 0x61c]
push eax
push 0x60a5
push 0x4aa2
push 0x4290
push 1
push 1
push 0x3016
push 1
push 0x106a
push 0x66c3
lea eax, [ebp - 0x6ac]
push eax
call fcn.1002ca57
add esp, 0x2c
cmp dword [ebp - 0x14c], 0xffffffff
jne 0x1003a256
mov dword [ebp - 0x3b8], 1
jmp 0x1003a25d
and dword [ebp - 0x3b8], 0
mov eax, dword [ebp - 0x50]
mov dword [ebp - 0x6b4], eax
imul eax, dword [ebp - 0x50], 0
test eax, eax
jne 0x1003a27a
mov dword [ebp - 0x1cc], 1
jmp 0x1003a281
and dword [ebp - 0x1cc], 0
mov eax, dword [ebp - 0x50]
add eax, dword [ebp - 0x1cc]
cmp eax, 0xfffffffe
jae 0x1003a29b
mov dword [ebp - 0x1d4], 1
jmp 0x1003a2a2
and dword [ebp - 0x1d4], 0
cmp dword [ebp - 0x1d4], 0x8f6c
jge 0x1003a2ba
mov dword [ebp - 0x1dc], 1
jmp 0x1003a2c1
and dword [ebp - 0x1dc], 0
mov eax, dword [ebp - 0x1dc]
mov dword [ebp - 0x1e4], eax
mov eax, dword [ebp - 0x1e4]
mov dword [ebp - 0x6bc], eax
mov eax, dword [ebp - 0x14c]
imul eax, dword [ebp - 0x14c]
mov dword [ebp - 0x490], eax
mov dword [ebp - 0x50], 1
jmp 0x1003a2fc
mov eax, dword [ebp - 0x50]
dec eax
mov dword [ebp - 0x50], eax
cmp dword [ebp - 0x50], 0
jl 0x1003a32f
mov dword [ebp - 0x45c], 0xffffffff
lea eax, [ebp - 0x61c]
push eax
push 0x4b95
lea eax, [ebp - 0x45c]
push eax
lea eax, [ebp - 0x50]
push eax
push 0
call fcn.1004658d
add esp, 0x14
jmp 0x1003a2f5
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x61c]
call fcn.1000e61e
mov dword [ebp - 0x10c], 0x42eb90da
mov dword [ebp - 0x498], 0xfffffff8
mov dword [ebp - 0x104], 0
jmp 0x1003a36b
mov eax, dword [ebp - 0x104]
inc eax
mov dword [ebp - 0x104], eax
cmp dword [ebp - 0x104], 2
jge 0x1003a387
mov eax, dword [ebp - 0x104]
mov dword [ebp + eax*4 - 0x840], 0xfffffffd
jmp 0x1003a35e
mov dword [ebp - 0x10c], 0
jmp 0x1003a3a0
mov eax, dword [ebp - 0x10c]
inc eax
mov dword [ebp - 0x10c], eax
cmp dword [ebp - 0x10c], 3
je 0x1003a442
push 3
lea ecx, [ebp - 0x604]
call fcn.1000e5bc
mov dword [ebp - 4], 0x18
lea eax, [ebp - 0x604]
push eax
lea eax, [ebp - 0x6c4]
push eax
push 0
push 1
push 0x9b4
push 1
call fcn.1003e80a
add esp, 0x18
push 0
lea eax, [ebp - 0x604]
push eax
call fcn.10042eec
pop ecx
pop ecx
mov byte [ebp - 0x7e], 0
push 0x7032
push 0x3650
lea eax, [ebp - 0x7e]
push eax
push 0
push 0x576
push 0x6dcf
push 1
push 0x2f62
push 0x20c4
push 0x6b2f
push 0x6f34
call fcn.100370e0
add esp, 0x2c
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x604]
call fcn.1000e61e
jmp 0x1003a393
lea eax, [ebp - 0x498]
push eax
push 0x78f9
push 0x7bf5
push 1
push 0x670d
push 0x5192
push 1
push 1
push 0x7166
push 0x12e7
call fcn.1002d2ee
add esp, 0x28
and dword [ebp - 0x154], 0
jmp 0x1003a494
mov eax, dword [ebp - 0x154]
inc eax
mov dword [ebp - 0x154], eax
mov eax, dword [ebp - 0x48]
add eax, 0x28
mov dword [ebp - 0x48], eax
mov eax, dword [ebp - 0x114]
mov eax, dword [eax]
movzx eax, word [eax + 6]
cmp dword [ebp - 0x154], eax
jge 0x1003b4f7
push 3
lea ecx, [ebp - 0x510]
call fcn.1000e5bc
mov dword [ebp - 4], 0x19
mov dword [ebp - 0xb8], 0
jmp 0x1003a4d9
mov eax, dword [ebp - 0xb8]
inc eax
mov dword [ebp - 0xb8], eax
cmp dword [ebp - 0xb8], 4
jge 0x1003a4f5
mov eax, dword [ebp - 0xb8]
mov dword [ebp + eax*4 - 0x878], 0xc85f70ad
jmp 0x1003a4cc
push 0x43fc
push 1
push 1
lea eax, [ebp - 0xb8]
push eax
lea eax, [ebp - 0x510]
push eax
push 0x78eb
push 0x75b2
push 0x368d
call fcn.10036dc4
add esp, 0x20
push 1
lea ecx, [ebp - 0x510]
call fcn.1000e623
and dword [eax], 0
jmp 0x1003a559
push 1
lea ecx, [ebp - 0x510]
call fcn.1000e623
mov dword [ebp - 0x1ec], eax
mov eax, dword [ebp - 0x1ec]
mov eax, dword [eax]
inc eax
mov ecx, dword [ebp - 0x1ec]
mov dword [ecx], eax
push 1
lea ecx, [ebp - 0x510]
call fcn.1000e623
cmp dword [eax], 3
jg 0x1003a5d4
mov dword [ebp - 0x464], 1
mov byte [ebp - 0x65], 0
movzx eax, byte [ebp - 0x65]
test eax, eax
je 0x1003a5b2
push 0x766f
push 0x5662
push 0
push 0xb16
push 0x439a
push 1
push 0x10b7
push 0x202b
push 1
push 0x2d92
call fcn.10037787
add esp, 0x28
push 0x781
push 0
push 0x2a06
push 1
lea eax, [ebp - 0x464]
push eax
call fcn.1003e8dc
add esp, 0x14
jmp 0x1003a535
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x510]
call fcn.1000e61e
mov eax, dword [ebp - 0x48]
cmp dword [eax + 0x10], 0
jne 0x1003ad20
push 2
lea ecx, [ebp - 0x520]
call fcn.1000e5bc
mov dword [ebp - 4], 0x1a
mov dword [ebp - 0x204], 0x4a61bf07
mov dword [ebp - 0x6cc], 0xcb27f08e
mov dword [ebp - 0x6d4], 0x1bb35b68
mov dword [ebp - 0x6dc], 0x7e06985b
mov dword [ebp - 0x4a8], 0xfffffff8
mov dword [ebp - 0x6e4], 0xffffffff
push 1
lea ecx, [ebp - 0x790]
call fcn.1000e5bc
mov byte [ebp - 4], 0x1b
push 0x14a7
push 0x708f
lea eax, [ebp - 0x4a0]
push eax
push 1
lea eax, [ebp - 0x520]
push eax
push 1
call fcn.10036f26
add esp, 0x18
push 1
push 0xd90
push 1
lea eax, [ebp - 0x4a0]
push eax
lea eax, [ebp - 0x790]
push eax
call fcn.10036ff7
add esp, 0x14
push 1
lea ecx, [ebp - 0x520]
call fcn.1000e623
mov dword [eax], 2
jmp 0x1003a6cd
push 1
lea ecx, [ebp - 0x520]
call fcn.1000e623
mov dword [ebp - 0x1f4], eax
mov eax, dword [ebp - 0x1f4]
mov eax, dword [eax]
inc eax
mov ecx, dword [ebp - 0x1f4]
mov dword [ecx], eax
push 1
lea ecx, [ebp - 0x520]
call fcn.1000e623
cmp dword [eax], 4
je 0x1003a94e
mov dword [ebp - 0xc0], 0x3245f1db
mov dword [ebp - 0x34], 0xf147909b
mov dword [ebp - 0x47c], 0xb489f7a9
mov dword [ebp - 0x21c], 0xf0bb9a67
mov dword [ebp - 0x644], 0x9843c6bc
mov dword [ebp - 0x708], 0x7ad46d23
mov dword [ebp - 0x710], 0xffffffff
mov dword [ebp - 0x15c], 0x18144871
mov dword [ebp - 0xc0], 2
jmp 0x1003a749
mov eax, dword [ebp - 0xc0]
inc eax
mov dword [ebp - 0xc0], eax
cmp dword [ebp - 0xc0], 0xa
jle 0x1003a949
mov dword [ebp - 0x470], 0xffffffff
mov dword [ebp - 0x7cc], 0xc37fc054
mov dword [ebp - 0x7d4], 0x9d3388a0
mov dword [ebp - 0x7dc], 1
mov dword [ebp - 0x7a4], 0xfffffffe
mov dword [ebp - 0x764], 0xd21b1857
mov dword [ebp - 0x650], 0xa4abff1e
mov dword [ebp - 0x6fc], 0x50169ff9
mov dword [ebp - 0x658], 0
mov dword [ebp - 0x7d8], 0xfffffff6
mov dword [ebp - 0x660], 0x19c36c1
mov dword [ebp - 0x4b0], 0xffff
mov dword [ebp - 0x11c], 0
jmp 0x1003a7e7
mov eax, dword [ebp - 0x11c]
inc eax
mov dword [ebp - 0x11c], eax
cmp dword [ebp - 0x11c], 1
jge 0x1003a803
mov eax, dword [ebp - 0x11c]
mov dword [ebp + eax*4 - 0xc8], 6
jmp 0x1003a7da
mov eax, dword [ebp - 0x470]
mov dword [ebp - 0x34], eax
mov dword [ebp - 0x34], 0
jmp 0x1003a81c
mov eax, dword [ebp - 0x34]
dec eax
mov dword [ebp - 0x34], eax
cmp dword [ebp - 0x34], 0
jl 0x1003a944
mov dword [ebp - 0x704], 1
mov dword [ebp - 0x668], 0
mov dword [ebp - 0x774], 5
mov dword [ebp - 0x670], 0x8fed6c34
mov dword [ebp - 0x70c], 0x4fb7d476
mov eax, dword [ebp - 0x34]
mov ecx, dword [ebp - 0x34]
mov eax, dword [ebp + eax*4 - 0xc8]
mov dword [ebp + ecx*4 - 0xc8], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0xc8], 0
jne 0x1003a8ef
mov eax, dword [ebp - 0x34]
mov eax, dword [ebp + eax*4 - 0xc8]
mov dword [ebp - 0x678], eax
mov eax, dword [ebp - 0x15c]
dec eax
mov dword [ebp - 0x15c], eax
mov eax, dword [ebp - 0x15c]
mov dword [ebp - 0x7b4], eax
cmp dword [ebp - 0x4a8], 0xffffffff
jae 0x1003a8ba
mov dword [ebp - 0x1fc], 1
jmp 0x1003a8c1
and dword [ebp - 0x1fc], 0
mov dword [ebp - 0x204], 0x1e46
imul eax, dword [ebp - 0x1fc], 0x24a
cmp dword [ebp - 0x204], eax
jl 0x1003a8ef
cmp dword [ebp - 0xc0], 0
jne 0x1003a8ef
and dword [ebp - 0x20c], 0
jmp 0x1003a8f9
mov dword [ebp - 0x20c], 1
mov eax, dword [ebp - 0x34]
mov eax, dword [ebp + eax*4 - 0xc8]
sub eax, dword [ebp - 0x20c]
imul eax, eax, 0xfffffffe
cmp eax, dword [ebp - 0x4b0]
jg 0x1003a920
mov dword [ebp - 0x214], 1
jmp 0x1003a927
and dword [ebp - 0x214], 0
mov eax, dword [ebp - 0x214]
mov dword [ebp - 0x21c], eax
mov eax, dword [ebp - 0x21c]
mov dword [ebp - 0x47c], eax
jmp 0x1003a815
jmp 0x1003a73c
jmp 0x1003a6a9
mov byte [ebp - 4], 0x1a
lea ecx, [ebp - 0x790]
call fcn.1000e61e
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x520]
call fcn.1000e61e
push 0x7595
push dword [ebp - 0x4cc]
push dword [ebp - 0x314]
push 1
lea eax, [ebp - 0x184]
push eax
push 0x3940
push 0
push 1
push 0x4dee
push dword [ebp - 0x48]
call fcn.1002d2ee
add esp, 0x28
mov dword [ebp - 0x6c], 5
mov dword [ebp - 0x164], 9
mov dword [ebp - 0xb4], 0xa2c39d5b
mov dword [ebp - 0x174], 0x3090707e
push 3
lea ecx, [ebp - 0x5c8]
call fcn.1000e5bc
mov dword [ebp - 4], 0x1c
mov dword [ebp - 0x124], 0
jmp 0x1003a9f1
mov eax, dword [ebp - 0x124]
inc eax
mov dword [ebp - 0x124], eax
cmp dword [ebp - 0x124], 3
jge 0x1003aa13
push dword [ebp - 0x124]
lea ecx, [ebp - 0x5c8]
call fcn.1000e623
mov dword [eax], 0xb8642e5f
jmp 0x1003a9e4
mov dword [ebp - 0x6c], 0x10
jmp 0x1003aa23
mov eax, dword [ebp - 0x6c]
dec eax
mov dword [ebp - 0x6c], eax
cmp dword [ebp - 0x6c], 0xffffffe4
je 0x1003ad0c
mov dword [ebp - 0xd0], 8
push 2
lea ecx, [ebp - 0x530]
call fcn.1000e5bc
mov byte [ebp - 4], 0x1d
mov dword [ebp - 0x264], 0x5b0d69b4
mov dword [ebp - 0x48c], 0x4826422f
mov dword [ebp - 0x12c], 0
jmp 0x1003aa75
mov eax, dword [ebp - 0x12c]
inc eax
mov dword [ebp - 0x12c], eax
cmp dword [ebp - 0x12c], 2
jge 0x1003aa97
push dword [ebp - 0x12c]
lea ecx, [ebp - 0x530]
call fcn.1000e623
mov dword [eax], 0x291920b2
jmp 0x1003aa68
mov dword [ebp - 0x164], 0x9fa85f88
cmp dword [ebp - 0x164], 0
jne 0x1003aabc
cmp dword [ebp - 0x164], 0
jne 0x1003aabc
and dword [ebp - 0x484], 0
jmp 0x1003aac6
mov dword [ebp - 0x484], 1
cmp dword [ebp - 0xd0], 0xfffffff6
jb 0x1003aadb
mov dword [ebp - 0x504], 1
jmp 0x1003aae2
and dword [ebp - 0x504], 0
cmp dword [ebp - 0xb4], 0
jge 0x1003aaf7
mov dword [ebp - 0x224], 1
jmp 0x1003aafe
and dword [ebp - 0x224], 0
mov eax, dword [ebp - 0x224]
add eax, 0x14a15d74
cmp eax, dword [ebp - 0xd0]
jle 0x1003ab1d
mov dword [ebp - 0x22c], 1
jmp 0x1003ab24
and dword [ebp - 0x22c], 0
mov eax, dword [ebp - 0xd0]
cmp dword [ebp - 0x22c], eax
jne 0x1003ab3e
mov dword [ebp - 0x234], 1
jmp 0x1003ab45
and dword [ebp - 0x234], 0
mov eax, dword [ebp - 0xd0]
cmp dword [ebp - 0x234], eax
jne 0x1003ab65
cmp dword [ebp - 0xd0], 0
jne 0x1003ab65
and dword [ebp - 0x23c], 0
jmp 0x1003ab6f
mov dword [ebp - 0x23c], 1
mov eax, dword [ebp - 0xb4]
cmp dword [ebp - 0x23c], eax
jle 0x1003ab89
mov dword [ebp - 0x16c], 1
jmp 0x1003ab90
and dword [ebp - 0x16c], 0
push 1
lea ecx, [ebp - 0x530]
call fcn.1000e623
mov ecx, dword [ebp - 0x16c]
mov dword [eax], ecx
mov eax, dword [ebp - 0xb4]
cmp dword [ebp - 0x16c], eax
je 0x1003abbf
mov dword [ebp - 0x244], 1
jmp 0x1003abc6
and dword [ebp - 0x244], 0
mov eax, dword [ebp - 0x244]
mov dword [ebp - 0xb4], eax
mov eax, dword [ebp - 0xb4]
mov dword [ebp - 0x174], eax
cmp dword [ebp - 0x174], 0
push 0
lea ecx, [ebp - 0x530]
call fcn.1000e623
cmp dword [eax], 0x6a9b03be
jle 0x1003ac06
mov dword [ebp - 0x24c], 1
jmp 0x1003ac0d
and dword [ebp - 0x24c], 0
mov esi, dword [ebp - 0x6c]
add esi, dword [ebp - 0x24c]
push 2
lea ecx, [ebp - 0x5c8]
call fcn.1000e623
mov dword [eax], esi
push 1
lea ecx, [ebp - 0x530]
call fcn.1000e623
mov eax, dword [eax]
sub eax, dword [ebp - 0x6c]
sub eax, dword [ebp - 0x6c]
je 0x1003ac51
cmp dword [ebp - 0x264], 0
je 0x1003ac51
mov dword [ebp - 0x254], 1
jmp 0x1003ac58
and dword [ebp - 0x254], 0
cmp dword [ebp - 0x254], 4
jne 0x1003ac6d
mov dword [ebp - 0x25c], 1
jmp 0x1003ac74
and dword [ebp - 0x25c], 0
mov eax, dword [ebp - 0x25c]
mov dword [ebp - 0x48c], eax
cmp dword [ebp - 0x174], 0
je 0x1003acb7
push 1
lea eax, [ebp - 0x264]
push eax
push 0x5b7b
push 0x5e38
push 0x7066
push 0x21a
push 0xd11
push 0
call fcn.10042a9a
add esp, 0x20
jmp 0x1003acf8
mov dword [ebp - 0x26c], 0xfffb
mov dword [ebp - 0x3bc], 0x34d89bb6
mov eax, dword [ebp - 0x26c]
cmp dword [ebp - 0x26c], eax
jge 0x1003ace5
mov dword [ebp - 0x274], 1
jmp 0x1003acec
and dword [ebp - 0x274], 0
mov eax, dword [ebp - 0x274]
mov dword [ebp - 0x3bc], eax
mov byte [ebp - 4], 0x1c
lea ecx, [ebp - 0x530]
call fcn.1000e61e
jmp 0x1003aa1c
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x5c8]
call fcn.1000e61e
jmp 0x1003a47e
mov dword [ebp - 0x18], 0xfffffff9
mov dword [ebp - 0x4c], 0xfffffffd
push 3
lea ecx, [ebp - 0x5e0]
call fcn.1000e5bc
mov dword [ebp - 4], 0x1e
mov dword [ebp - 0x304], 0xffffffff
push 1
lea ecx, [ebp - 0x540]
call fcn.1000e5bc
mov byte [ebp - 4], 0x1f
mov dword [ebp - 0x3c], 0
jmp 0x1003ad6d
mov eax, dword [ebp - 0x3c]
inc eax
mov dword [ebp - 0x3c], eax
cmp dword [ebp - 0x3c], 3
jge 0x1003ad86
push dword [ebp - 0x3c]
lea ecx, [ebp - 0x5e0]
call fcn.1000e623
and dword [eax], 0
jmp 0x1003ad66
mov dword [ebp - 0x3c], 0
jmp 0x1003ad96
mov eax, dword [ebp - 0x3c]
inc eax
mov dword [ebp - 0x3c], eax
cmp dword [ebp - 0x3c], 1
jge 0x1003adb2
push dword [ebp - 0x3c]
lea ecx, [ebp - 0x540]
call fcn.1000e623
mov dword [eax], 6
jmp 0x1003ad8f
push 0x13b7
push 0x14a7
lea eax, [ebp - 0x18]
push eax
push 0x40cd
lea eax, [ebp - 0x4c]
push eax
push 0x6249
push 0
call fcn.1003f0ce
add esp, 0x1c
cmp dword [ebp - 0x18], 0
jne 0x1003aded
cmp dword [ebp - 0x18], 0
jne 0x1003aded
and dword [ebp - 0x294], 0
jmp 0x1003adf7
mov dword [ebp - 0x294], 1
mov eax, dword [ebp - 0x18]
add eax, 0x2fb32fdf
cmp eax, 0x2910
jg 0x1003ae12
mov dword [ebp - 0x27c], 1
jmp 0x1003ae19
and dword [ebp - 0x27c], 0
mov eax, dword [ebp - 0x4c]
cmp dword [ebp - 0x27c], eax
jg 0x1003ae30
mov dword [ebp - 0x284], 1
jmp 0x1003ae37
and dword [ebp - 0x284], 0
mov eax, dword [ebp - 0x18]
cmp dword [ebp - 0x284], eax
jl 0x1003ae4e
mov dword [ebp - 0x28c], 1
jmp 0x1003ae55
and dword [ebp - 0x28c], 0
mov eax, dword [ebp - 0x18]
sub eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x28c]
add ecx, 0x8f0e
imul ecx, dword [ebp - 0x18]
cmp eax, ecx
jl 0x1003ae7b
mov dword [ebp - 0x29c], 1
jmp 0x1003ae82
and dword [ebp - 0x29c], 0
mov eax, dword [ebp - 0x294]
cmp eax, dword [ebp - 0x29c]
jl 0x1003ae9c
mov dword [ebp - 0x2a4], 1
jmp 0x1003aea3
and dword [ebp - 0x2a4], 0
mov eax, dword [ebp - 0x4c]
mov ecx, dword [ebp - 0x2a4]
lea eax, [eax + ecx*4]
mov dword [ebp - 0x4c], eax
mov eax, dword [ebp - 0x18]
cmp dword [ebp - 0x4c], eax
je 0x1003b095
mov dword [ebp - 0x74], 0xfffffffa
mov dword [ebp - 0x2fc], 0
mov dword [ebp - 0x3c8], 0xd6813f8
mov eax, dword [ebp - 0x74]
mov dword [ebp - 0x680], eax
cmp dword [ebp - 0x18], 0
je 0x1003aefa
cmp dword [ebp - 0x74], 0
je 0x1003aefa
mov dword [ebp - 0x2ac], 1
jmp 0x1003af01
and dword [ebp - 0x2ac], 0
cmp dword [ebp - 0x2ac], 1
jg 0x1003af16
mov dword [ebp - 0x2b4], 1
jmp 0x1003af1d
and dword [ebp - 0x2b4], 0
mov eax, dword [ebp - 0x74]
cmp dword [ebp - 0x2b4], eax
jge 0x1003af34
mov dword [ebp - 0x2bc], 1
jmp 0x1003af3b
and dword [ebp - 0x2bc], 0
cmp dword [ebp - 0x2bc], 0xefd52276
ja 0x1003af53
mov dword [ebp - 0x2c4], 1
jmp 0x1003af5a
and dword [ebp - 0x2c4], 0
mov eax, dword [ebp - 0x4c]
sub eax, dword [ebp - 0x18]
cmp eax, dword [ebp - 0x2c4]
jl 0x1003af74
mov dword [ebp - 0x2cc], 1
jmp 0x1003af7b
and dword [ebp - 0x2cc], 0
mov eax, dword [ebp - 0x74]
cmp dword [ebp - 0x2cc], eax
je 0x1003af92
mov dword [ebp - 0x2d4], 1
jmp 0x1003af99
and dword [ebp - 0x2d4], 0
cmp dword [ebp - 0x2d4], 0x2bc9
jge 0x1003afb1
mov dword [ebp - 0x3c0], 1
jmp 0x1003afb8
and dword [ebp - 0x3c0], 0
cmp dword [ebp - 0x74], 0
je 0x1003afd0
cmp dword [ebp - 0x74], 0
je 0x1003afd0
mov dword [ebp - 0x2dc], 1
jmp 0x1003afd7
and dword [ebp - 0x2dc], 0
mov eax, dword [ebp - 0x4c]
cmp eax, dword [ebp - 0x2dc]
jne 0x1003afee
mov dword [ebp - 0x2e4], 1
jmp 0x1003aff5
and dword [ebp - 0x2e4], 0
cmp dword [ebp - 0x2e4], 0xede048ff
ja 0x1003b013
cmp dword [ebp - 0x4c], 0
je 0x1003b013
mov dword [ebp - 0x2ec], 1
jmp 0x1003b01a
and dword [ebp - 0x2ec], 0
mov eax, dword [ebp - 0x74]
cmp dword [ebp - 0x2ec], eax
jg 0x1003b037
cmp dword [ebp - 0x18], 0
je 0x1003b037
mov dword [ebp - 0x2f4], 1
jmp 0x1003b03e
and dword [ebp - 0x2f4], 0
mov eax, dword [ebp - 0x2f4]
mov dword [ebp - 0x2fc], eax
mov eax, dword [ebp - 0x2fc]
mov dword [ebp - 0x3c8], eax
mov byte [ebp - 0x7d], 0
movzx eax, byte [ebp - 0x7d]
test eax, eax
je 0x1003b093
push 0x138a
push 0x418d
push 1
push 0x407e
push 0x2e7c
push 1
push 0x6833
push 0x1d3a
push 0
push 0x52e7
call fcn.10037787
add esp, 0x28
jmp 0x1003b109
mov dword [ebp - 0x30c], 0x243c00ee
lea eax, [ebp - 0x304]
push eax
lea eax, [ebp - 0x5e0]
push eax
push 0x6897
push 1
lea eax, [ebp - 0x4c]
push eax
lea eax, [ebp - 0x18]
push eax
push 1
push 0x1f0c
lea eax, [ebp - 0x540]
push eax
lea eax, [ebp - 0x30c]
push eax
push 0x5509
call fcn.100370e0
add esp, 0x2c
lea eax, [ebp - 0x304]
push eax
push 0x59cb
push 0x12e6
push 1
lea eax, [ebp - 0x540]
push eax
push 1
lea eax, [ebp - 0x30c]
push eax
call fcn.1003729f
add esp, 0x1c
mov byte [ebp - 4], 0x1e
lea ecx, [ebp - 0x540]
call fcn.1000e61e
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x5e0]
call fcn.1000e61e
push 4
push 0x1000
mov eax, dword [ebp - 0x48]
push dword [eax + 0x10]
mov eax, dword [ebp - 0x48]
mov ecx, dword [ebp - 0x314]
add ecx, dword [eax + 0xc]
push ecx
push 0x47a1
push 0x525d
call fcn.1002a9d0
pop ecx
pop ecx
call eax
mov dword [ebp - 0x184], eax
mov eax, dword [ebp - 0x48]
push dword [eax + 0x10]
mov eax, dword [ebp - 0x48]
mov ecx, dword [ebp - 0x3d0]
add ecx, dword [eax + 0x14]
push ecx
push dword [ebp - 0x184]
call fcn.1002a9f2
add esp, 0xc
push 1
lea ecx, [ebp - 0x5f8]
call fcn.1000e5bc
mov dword [ebp - 4], 0x20
mov dword [ebp - 0x8c], 0xfffffffd
mov dword [ebp - 0x714], 0x35e1f6f0
mov dword [ebp - 0x3d8], 0x1863
cmp dword [ebp - 0x3d8], 0xc6b
jge 0x1003b24f
mov dword [ebp - 0x688], 8
lea eax, [ebp - 0x108]
push eax
push 0x1000775c
call fcn.100528eb
pop ecx
pop ecx
and dword [ebp - 0x17c], 0
cmp dword [ebp - 0x108], 0
jle 0x1003b23d
mov eax, dword [ebp - 0x108]
and eax, 0x80000007
jns 0x1003b1fc
dec eax
or eax, 0xfffffff8
inc eax
cmp eax, 1
jne 0x1003b20d
mov dword [ebp - 0x1b0], 1
jmp 0x1003b214
and dword [ebp - 0x1b0], 0
mov eax, dword [ebp - 0x17c]
add eax, dword [ebp - 0x1b0]
mov dword [ebp - 0x17c], eax
mov eax, dword [ebp - 0x108]
cdq
and edx, 7
add eax, edx
sar eax, 3
mov dword [ebp - 0x108], eax
jmp 0x1003b1e1
push dword [ebp - 0x17c]
push 0x100077f8
call fcn.10052b06
pop ecx
pop ecx
mov dword [ebp - 0x784], 0xbeb96916
mov dword [ebp - 0x690], 0x4902314a
mov dword [ebp - 0x724], 0xc86992f1
mov dword [ebp - 0x698], 0x2b4b5a9c
mov dword [ebp - 0x7d0], 0xccedb775
mov dword [ebp - 0x6a0], 0x2b79dc86
mov dword [ebp - 0x14], 0
jmp 0x1003b29b
mov eax, dword [ebp - 0x14]
inc eax
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 1
jge 0x1003b2b7
push dword [ebp - 0x14]
lea ecx, [ebp - 0x5f8]
call fcn.1000e623
mov dword [eax], 0xfffffffe
jmp 0x1003b294
mov dword [ebp - 0x14], 0
jmp 0x1003b2c7
mov eax, dword [ebp - 0x14]
inc eax
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 4
jge 0x1003b2dd
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x868], 0
jmp 0x1003b2c0
mov dword [ebp - 0x14], 0
jmp 0x1003b2ed
mov eax, dword [ebp - 0x14]
inc eax
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 3
jge 0x1003b303
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x7b0], 0x3c8a0c09
jmp 0x1003b2e6
push 0
lea ecx, [ebp - 0x5f8]
call fcn.1000e623
cmp dword [eax], 0xffffffff
jl 0x1003b321
mov dword [ebp - 0x330], 1
jmp 0x1003b328
and dword [ebp - 0x330], 0
mov eax, dword [ebp - 0x330]
mov dword [ebp - 0x8c], eax
cmp dword [ebp - 0x8c], 0
je 0x1003b39e
mov dword [ebp - 0x338], 0xc0272a72
mov dword [ebp - 0xd8], 0
jmp 0x1003b360
mov eax, dword [ebp - 0xd8]
inc eax
mov dword [ebp - 0xd8], eax
cmp dword [ebp - 0xd8], 3
jge 0x1003b37c
mov eax, dword [ebp - 0xd8]
mov dword [ebp + eax*4 - 0x830], 0xffffffff
jmp 0x1003b353
mov dword [ebp - 0x338], 0xda4d073f
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x338]
mov dword [ebp + eax - 0x830], ecx
jmp 0x1003b4be
mov dword [ebp - 0x734], 0xffffffff
mov dword [ebp - 0x6a8], 0xd018d303
mov dword [ebp - 0x794], 0xd6b9c2d6
mov dword [ebp - 0x6b0], 0xa945cb81
push 1
lea ecx, [ebp - 0x7a0]
call fcn.1000e5bc
mov byte [ebp - 4], 0x21
mov dword [ebp - 0x3e0], 0x489be67e
push 0x5c1
lea eax, [ebp - 0x744]
push eax
push 1
push 0x2753
lea eax, [ebp - 0x7a0]
push eax
push 1
push 0x62f5
push 0x3e4c
push 1
push 0x15b5
call fcn.10037787
add esp, 0x28
mov dword [ebp - 0x8c], 0xfffffffe
jmp 0x1003b42f
mov eax, dword [ebp - 0x8c]
inc eax
mov dword [ebp - 0x8c], eax
cmp dword [ebp - 0x8c], 9
jl 0x1003b4af
mov dword [ebp - 0x6b8], 0x41a9c213
mov dword [ebp - 0x7c8], 0xfffffff9
mov dword [ebp - 0x6c0], 0xcca69919
mov dword [ebp - 0x754], 0xd2a6f9a4
mov dword [ebp - 0x6c8], 0xe7f13bcf
mov dword [ebp - 0x6ec], 0
mov dword [ebp - 0x6d0], 6
push 0x2a0e
push 0x7f4f
push 1
lea eax, [ebp - 0x3e0]
push eax
push 1
push 0x2db2
push 0x51d9
push 0x4a87
call fcn.100379cc
add esp, 0x20
jmp 0x1003b422
mov byte [ebp - 4], 0x20
lea ecx, [ebp - 0x7a0]
call fcn.1000e61e
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x7b0]
inc eax
push 4
pop ecx
shl ecx, 1
mov dword [ebp + ecx - 0x7b0], eax
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x5f8]
call fcn.1000e61e
mov eax, dword [ebp - 0x48]
mov ecx, dword [ebp - 0x184]
mov dword [eax + 8], ecx
jmp 0x1003a47e
jmp 0x1003b6f5
mov eax, dword [ebp - 0x3e8]
mov dword [ebp - 0x410], eax
mov eax, dword [ebp - 0x3f0]
mov dword [ebp - 0x418], eax
mov eax, dword [ebp - 0x3f8]
mov dword [ebp - 0x420], eax
mov eax, dword [ebp - 0x400]
mov dword [ebp - 0x428], eax
mov eax, dword [ebp - 0x408]
mov dword [ebp - 0x430], eax
mov eax, dword [ebp - 0x410]
mov dword [ebp - 0x450], eax
mov eax, dword [ebp - 0x418]
mov dword [ebp - 0x7c], eax
mov eax, dword [ebp - 0x420]
mov dword [ebp - 0x358], eax
mov eax, dword [ebp - 0x428]
mov dword [ebp - 0x438], eax
mov eax, dword [ebp - 0x430]
mov dword [ebp - 0xdc], eax
mov eax, dword [ebp - 0x7c]
mov eax, dword [eax]
mov dword [ebp - 0x6f0], eax
mov eax, dword [ebp - 0x438]
mov dword [eax], 1
mov eax, dword [ebp - 0xdc]
mov eax, dword [eax]
inc eax
inc eax
jne 0x1003b5a6
mov eax, 0xf0442e11
test eax, eax
jne 0x1003b5a6
and dword [ebp - 0x18c], 0
jmp 0x1003b5b0
mov dword [ebp - 0x18c], 1
mov eax, dword [ebp - 0x358]
mov ecx, dword [ebp - 0x18c]
mov dword [eax], ecx
mov eax, dword [ebp - 0x18c]
sub eax, 0xd459
cmp eax, 0xe712
jg 0x1003b5dc
mov dword [ebp - 0x340], 1
jmp 0x1003b5e3
and dword [ebp - 0x340], 0
mov eax, dword [ebp - 0x7c]
mov eax, dword [eax]
cmp eax, dword [ebp - 0x340]
jl 0x1003b5fc
mov dword [ebp - 0x440], 1
jmp 0x1003b603
and dword [ebp - 0x440], 0
mov eax, dword [ebp - 0x7c]
cmp dword [eax], 0
je 0x1003b620
mov eax, 0xffff
test eax, eax
je 0x1003b620
mov dword [ebp - 0x348], 1
jmp 0x1003b627
and dword [ebp - 0x348], 0
mov eax, dword [ebp - 0x348]
neg eax
cmp eax, 0x3334adc6
jg 0x1003b642
mov dword [ebp - 0x350], 1
jmp 0x1003b649
and dword [ebp - 0x350], 0
mov eax, dword [ebp - 0x7c]
mov eax, dword [eax]
cmp dword [ebp - 0x350], eax
jle 0x1003b66d
mov eax, dword [ebp - 0xdc]
cmp dword [eax], 0
je 0x1003b66d
mov dword [ebp - 0x448], 1
jmp 0x1003b674
and dword [ebp - 0x448], 0
mov eax, dword [ebp - 0x7c]
mov ecx, dword [ebp - 0x358]
mov ecx, dword [ecx]
cmp dword [eax], ecx
jl 0x1003b68f
mov dword [ebp - 0x360], 1
jmp 0x1003b696
and dword [ebp - 0x360], 0
imul eax, dword [ebp - 0x360], 0xfffffffe
mov ecx, dword [ebp - 0xdc]
cmp eax, dword [ecx]
jl 0x1003b6b3
mov dword [ebp - 0x368], 1
jmp 0x1003b6ba
and dword [ebp - 0x368], 0
mov eax, dword [ebp - 0xdc]
mov ecx, dword [ebp - 0x368]
sub ecx, dword [eax]
mov eax, dword [ebp - 0x7c]
cmp ecx, dword [eax]
je 0x1003b6db
mov dword [ebp - 0x370], 1
jmp 0x1003b6e2
and dword [ebp - 0x370], 0
mov eax, dword [ebp - 0x7c]
mov ecx, dword [ebp - 0x370]
sub ecx, dword [eax]
mov eax, dword [ebp - 0x450]
mov dword [eax], ecx
jmp 0x1003b6ff
push 0
call fcn.1002c114
pop ecx
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop esi
mov esp, ebp
pop ebp
ret