Function at 0x1003192d
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x10067905
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x504
push esi
mov dword [ebp - 0x2fc], 0x1da4
cmp dword [ebp - 0x2fc], 0xa64
jge 0x10031a7a
push 0x1084f3dc
mov ecx, 0x10657b50
call fcn.1000fee8
and dword [ebp - 0x11c], 0
jmp 0x1003198b
mov eax, dword [ebp - 0x11c]
inc eax
mov dword [ebp - 0x11c], eax
mov eax, dword [ebp - 0x11c]
cmp eax, dword [0x1084f3dc]
jge 0x10031a7a
push 0x10d1dba0
push 0x1084b4ac
mov ecx, 0x10657b50
call fcn.1000fee8
mov ecx, eax
call fcn.1000fee8
mov eax, dword [0x10d1dba0]
cmp eax, dword [0x1084b4ac]
jle 0x100319e5
push fcn.10014d0c
mov edx, 0x1000951c
mov ecx, 0x10657a98
call fcn.10021f1c
mov ecx, eax
call fcn.100101ec
jmp 0x10031a75
mov eax, dword [0x1084b4ac]
and eax, 0x80000001
jns 0x100319f6
dec eax
or eax, 0xfffffffe
inc eax
mov ecx, dword [0x10d1dba0]
and ecx, 0x80000001
jns 0x10031a09
dec ecx
or ecx, 0xfffffffe
inc ecx
cmp eax, ecx
je 0x10031a2a
push fcn.10014d0c
mov edx, 0x1000951c
mov ecx, 0x10657a98
call fcn.10021f1c
mov ecx, eax
call fcn.100101ec
jmp 0x10031a75
push fcn.10014d0c
mov eax, dword [0x1084b4ac]
sub eax, dword [0x10d1dba0]
cdq
sub eax, edx
sar eax, 1
push eax
mov eax, dword [0x1084b4ac]
add eax, dword [0x10d1dba0]
cdq
sub eax, edx
sar eax, 1
push eax
mov ecx, 0x10657a98
call fcn.100101f8
mov edx, 0x100094f4
mov ecx, eax
call fcn.10021f1c
mov ecx, eax
call fcn.100101f8
mov ecx, eax
call fcn.100101ec
jmp 0x1003197e
mov dword [ebp - 0xa4], 1
mov eax, dword [ebp + 8]
mov eax, dword [eax + 4]
mov dword [ebp - 0xac], eax
push 2
lea ecx, [ebp - 0x23c]
call fcn.10010424
and dword [ebp - 4], 0
mov dword [ebp - 0x2d8], 0x7439cb61
mov dword [ebp - 0x380], 1
mov dword [ebp - 0x3a4], 0x2da8afc1
mov dword [ebp - 0x3cc], 0xf5fa3187
mov dword [ebp - 0x3d4], 1
mov dword [ebp - 0x2c0], 0xd34caa8e
mov dword [ebp - 0x3dc], 0
push 1
lea ecx, [ebp - 0x310]
call fcn.10010424
mov byte [ebp - 4], 1
mov dword [ebp - 0x3e4], 0xae055a24
mov dword [ebp - 0x1fc], 0xffff
mov dword [ebp - 0x2c], 0
jmp 0x10031b1c
mov eax, dword [ebp - 0x2c]
inc eax
mov dword [ebp - 0x2c], eax
cmp dword [ebp - 0x2c], 1
jge 0x10031b32
mov eax, dword [ebp - 0x2c]
mov dword [ebp + eax*4 - 0x3ec], 0
jmp 0x10031b15
push 0
push 0x6507
push 0x7d6b
lea eax, [ebp - 0x23c]
push eax
lea eax, [ebp - 0x2c]
push eax
call fcn.10040347
add esp, 0x14
mov dword [ebp - 0x2c8], 0x1b3a
cmp dword [ebp - 0x2c8], 0x66e
jge 0x10031c5f
and dword [ebp - 0xb4], 0
and dword [ebp - 0x1c8], 0
lea eax, [ebp - 0x1c8]
push eax
lea eax, [ebp - 0xb4]
push eax
push 0x10009060
call fcn.1004d47b
add esp, 0xc
and dword [ebp - 0x2d0], 0
lea eax, [ebp - 0x2d0]
push eax
push dword [ebp - 0xb4]
lea ecx, [ebp - 0x2e8]
call fcn.100104b1
mov byte [ebp - 4], 2
and dword [ebp - 0xd0], 0
jmp 0x10031bcd
mov eax, dword [ebp - 0xd0]
inc eax
mov dword [ebp - 0xd0], eax
mov eax, dword [ebp - 0xd0]
cmp eax, dword [ebp - 0xb4]
jge 0x10031bfb
push dword [ebp - 0xd0]
lea ecx, [ebp - 0x2e8]
call fcn.1001048b
push eax
push 0x1000903c
call fcn.1004d47b
pop ecx
pop ecx
jmp 0x10031bc0
lea eax, [ebp - 0x3f4]
push eax
lea ecx, [ebp - 0x2e8]
call fcn.10021a64
push dword [eax]
lea eax, [ebp - 0x3fc]
push eax
lea ecx, [ebp - 0x2e8]
call fcn.100108a7
push dword [eax]
call fcn.10046223
pop ecx
pop ecx
mov eax, dword [ebp - 0xb4]
sub eax, dword [ebp - 0x1c8]
push eax
lea ecx, [ebp - 0x2e8]
call fcn.1001048b
push dword [eax]
push 0x10009050
call fcn.1004d6af
pop ecx
pop ecx
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x2e8]
call fcn.10010486
lea eax, [ebp - 0x310]
push eax
lea eax, [ebp - 0x2c]
push eax
call fcn.10031382
pop ecx
pop ecx
mov dword [ebp - 0x2c], 0
jmp 0x10031c81
mov eax, dword [ebp - 0x2c]
inc eax
mov dword [ebp - 0x2c], eax
cmp dword [ebp - 0x2c], 3
jge 0x10031c97
mov eax, dword [ebp - 0x2c]
mov dword [ebp + eax*4 - 0x4e8], 0x67b4
jmp 0x10031c7a
push 1
lea ecx, [ebp - 0x23c]
call fcn.1001048b
and dword [eax], 0
jmp 0x10031ccd
push 1
lea ecx, [ebp - 0x23c]
call fcn.1001048b
mov dword [ebp - 0x230], eax
mov eax, dword [ebp - 0x230]
mov eax, dword [eax]
dec eax
mov ecx, dword [ebp - 0x230]
mov dword [ecx], eax
push 1
lea ecx, [ebp - 0x23c]
call fcn.1001048b
cmp dword [eax], 0
jl 0x10031d63
mov dword [ebp - 0x404], 0x836ccb03
mov dword [ebp - 0x414], 6
mov dword [ebp - 0x46c], 0xb283066c
mov dword [ebp - 0x470], 7
push 2
lea ecx, [ebp - 0x424]
call fcn.10010424
mov byte [ebp - 4], 3
lea eax, [ebp - 0x424]
push eax
lea eax, [ebp - 0x3e8]
push eax
call fcn.100313ca
pop ecx
pop ecx
mov byte [ebp - 0x51], 0
push 0
lea eax, [ebp - 0x51]
push eax
call fcn.1003c606
pop ecx
pop ecx
mov eax, dword [ebp - 0x1fc]
dec eax
mov dword [ebp - 0x1fc], eax
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x424]
call fcn.10010486
jmp 0x10031ca9
push 0
lea ecx, [ebp - 0x310]
call fcn.1001048b
cmp dword [eax], 0
je 0x10031de5
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x4e8]
mov dword [ebp - 0x370], eax
cmp dword [ebp - 0x2d8], 0
jne 0x10031da4
xor eax, eax
inc eax
jne 0x10031da4
or eax, 0xffffffff
jne 0x10031da4
and dword [ebp - 0x228], 0
jmp 0x10031dae
mov dword [ebp - 0x228], 1
mov eax, dword [ebp - 0x228]
inc eax
mov dword [ebp - 0x12c], eax
push 0
lea ecx, [ebp - 0x310]
call fcn.1001048b
mov ecx, dword [ebp - 0x12c]
mov dword [eax], ecx
cmp dword [ebp - 0x12c], 0
je 0x10031de5
mov dword [ebp - 0x300], 1
jmp 0x10031dec
and dword [ebp - 0x300], 0
push 1
lea ecx, [ebp - 0x23c]
call fcn.1001048b
mov eax, dword [eax]
mov dword [ebp - 0x2c0], eax
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x310]
call fcn.10010486
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x23c]
call fcn.10010486
mov eax, dword [ebp + 8]
mov eax, dword [eax]
push 8
pop ecx
shl ecx, 0
lea eax, [eax + ecx + 0x78]
mov dword [ebp - 0x13c], eax
mov dword [ebp - 0x88], 0xfffffffa
mov dword [ebp - 0x88], 0x1c
jmp 0x10031e57
mov eax, dword [ebp - 0x88]
dec eax
mov dword [ebp - 0x88], eax
cmp dword [ebp - 0x88], 0xfffffffa
jge 0x10032013
mov dword [ebp - 0x90], 0xf951fe77
mov dword [ebp - 0x90], 0xfffffffb
jmp 0x10031e87
mov eax, dword [ebp - 0x90]
dec eax
mov dword [ebp - 0x90], eax
cmp dword [ebp - 0x90], 0xfffffff4
jge 0x1003200e
mov dword [ebp - 0x44], 1
mov dword [ebp - 0x44], 0xffffffe5
jmp 0x10031eab
mov eax, dword [ebp - 0x44]
inc eax
mov dword [ebp - 0x44], eax
cmp dword [ebp - 0x44], 0xfffffff0
jl 0x10032009
mov eax, dword [ebp - 0x88]
cmp dword [ebp - 0x90], eax
jl 0x10031ecf
mov dword [ebp - 0x1b4], 1
jmp 0x10031ed6
and dword [ebp - 0x1b4], 0
mov eax, dword [ebp - 0x44]
mov dword [ebp - 0x428], eax
mov eax, dword [ebp - 0x1b4]
add eax, 0xa373
je 0x10031f01
mov eax, 0x47d2
test eax, eax
je 0x10031f01
mov dword [ebp - 0x134], 1
jmp 0x10031f08
and dword [ebp - 0x134], 0
mov eax, dword [ebp - 0x44]
cmp dword [ebp - 0x134], eax
jl 0x10031f1f
mov dword [ebp - 0x1f4], 1
jmp 0x10031f26
and dword [ebp - 0x1f4], 0
mov eax, dword [ebp - 0x44]
sub eax, dword [ebp - 0x1f4]
je 0x10031ff7
push 3
lea ecx, [ebp - 0x434]
call fcn.10010424
mov dword [ebp - 4], 4
mov dword [ebp - 0xd8], 1
push 0x1225
push 1
lea eax, [ebp - 0x434]
push eax
lea eax, [ebp - 0x378]
push eax
push 0x60e6
push 0xaac
push 1
push 0x481b
call fcn.1002f341
add esp, 0x20
mov dword [ebp - 0xd8], 2
jmp 0x10031f9a
mov eax, dword [ebp - 0xd8]
dec eax
mov dword [ebp - 0xd8], eax
cmp dword [ebp - 0xd8], 0
jl 0x10031fe6
mov dword [ebp - 0xbc], 1
call fcn.10031412
mov dword [ebp - 0xbc], 2
jmp 0x10031fcb
mov eax, dword [ebp - 0xbc]
dec eax
mov dword [ebp - 0xbc], eax
cmp dword [ebp - 0xbc], 0
jl 0x10031fe4
mov byte [ebp - 0x57], 0
lea eax, [ebp - 0x57]
push eax
call fcn.10031438
pop ecx
jmp 0x10031fbe
jmp 0x10031f8d
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x434]
call fcn.10010486
jmp 0x10031fff
cmp dword [ebp - 0x44], 0
je 0x10031fff
jmp 0x10032009
call fcn.10031470
jmp 0x10031ea4
jmp 0x10031e7a
jmp 0x10031e4a
mov eax, dword [ebp - 0x13c]
cmp dword [eax + 4], 0
jbe 0x1003374f
mov dword [ebp - 0xe0], 0
jmp 0x1003203c
mov eax, dword [ebp - 0xe0]
inc eax
mov dword [ebp - 0xe0], eax
cmp dword [ebp - 0xe0], 3
jge 0x10032058
mov eax, dword [ebp - 0xe0]
mov dword [ebp + eax*4 - 0x340], 0
jmp 0x1003202f
push 4
pop eax
shl eax, 1
mov dword [ebp + eax - 0x340], 0x1a
jmp 0x10032083
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x340]
dec eax
push 4
pop ecx
shl ecx, 1
mov dword [ebp + ecx - 0x340], eax
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0x340], 0xfffffff1
je 0x100320c7
mov dword [ebp - 0xa8], 0xffffffff
mov dword [ebp - 0xa8], 0
jmp 0x100320b5
mov eax, dword [ebp - 0xa8]
dec eax
mov dword [ebp - 0xa8], eax
cmp dword [ebp - 0xa8], 0xffffffe3
jg 0x100320c5
call fcn.100314b1
jmp 0x100320a8
jmp 0x1003206a
mov byte [ebp - 0x53], 0
lea eax, [ebp - 0x53]
push eax
call fcn.100314d7
pop ecx
mov eax, dword [ebp - 0x13c]
mov ecx, dword [ebp - 0xac]
add ecx, dword [eax]
mov dword [ebp - 0x7c], ecx
jmp 0x100320f1
mov eax, dword [ebp - 0x7c]
add eax, 0x14
mov dword [ebp - 0x7c], eax
push dword [ebp - 0x7c]
call fcn.1002f050
pop ecx
movzx eax, al
test eax, eax
jne 0x1003374f
mov eax, dword [ebp - 0x7c]
cmp dword [eax + 0xc], 0
je 0x1003374f
mov dword [ebp - 0x18], 0xad313dd3
mov dword [ebp - 0xec], 0
jmp 0x10032132
mov eax, dword [ebp - 0xec]
inc eax
mov dword [ebp - 0xec], eax
cmp dword [ebp - 0xec], 4
jge 0x1003214e
mov eax, dword [ebp - 0xec]
mov dword [ebp + eax*4 - 0x500], 0xfffffffe
jmp 0x10032125
mov dword [ebp - 0x18], 0xffffffe8
jmp 0x1003215e
mov eax, dword [ebp - 0x18]
inc eax
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 0xffffffea
jge 0x10032379
mov dword [ebp - 0x48], 0xfffffff7
mov dword [ebp - 0x25c], 0
mov byte [ebp - 0x55], 0
movzx eax, byte [ebp - 0x55]
test eax, eax
je 0x100321a5
push 0x4621
push 0x44eb
push 0x1876
push 1
push 0
push 0x3371
call fcn.1003c542
add esp, 0x18
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x3f0], eax
mov eax, dword [ebp - 0x48]
mov dword [ebp - 0x364], eax
cmp dword [ebp - 0x18], 0
jne 0x10032262
cmp dword [ebp - 0x48], 0
jbe 0x100321d3
mov dword [ebp - 0x1bc], 1
jmp 0x100321da
and dword [ebp - 0x1bc], 0
mov eax, dword [ebp - 0x18]
cmp dword [ebp - 0x1bc], eax
jle 0x100321f1
mov dword [ebp - 0x144], 1
jmp 0x100321f8
and dword [ebp - 0x144], 0
cmp dword [ebp - 0x144], 0xbc4aee50
jne 0x10032210
mov dword [ebp - 0x1f8], 1
jmp 0x10032217
and dword [ebp - 0x1f8], 0
mov eax, dword [ebp - 0x48]
cmp dword [ebp - 0x1f8], eax
jg 0x1003222e
mov dword [ebp - 0x14c], 1
jmp 0x10032235
and dword [ebp - 0x14c], 0
mov eax, dword [ebp - 0x18]
cmp dword [ebp - 0x14c], eax
jne 0x1003224c
mov dword [ebp - 0x1c4], 1
jmp 0x10032253
and dword [ebp - 0x1c4], 0
mov eax, dword [ebp - 0x48]
cmp dword [ebp - 0x1c4], eax
jl 0x10032262
cmp dword [ebp - 0x18], 0
mov eax, dword [ebp - 0x18]
cmp dword [ebp - 0x48], eax
jle 0x10032276
mov dword [ebp - 0x154], 1
jmp 0x1003227d
and dword [ebp - 0x154], 0
mov eax, dword [ebp - 0x48]
cmp dword [ebp - 0x154], eax
jl 0x10032294
mov dword [ebp - 0x224], 1
jmp 0x1003229b
and dword [ebp - 0x224], 0
mov eax, dword [ebp - 0x48]
cmp dword [ebp - 0x224], eax
jge 0x100322b2
mov dword [ebp - 0x15c], 1
jmp 0x100322b9
and dword [ebp - 0x15c], 0
cmp dword [ebp - 0x15c], 0x451d
jle 0x100322d7
cmp dword [ebp - 0x48], 0
je 0x100322d7
mov dword [ebp - 0x1cc], 1
jmp 0x100322de
and dword [ebp - 0x1cc], 0
mov eax, dword [ebp - 0x18]
cmp dword [ebp - 0x1cc], eax
jl 0x100322fb
cmp dword [ebp - 0x18], 0
je 0x100322fb
mov dword [ebp - 0x100], 1
jmp 0x10032302
and dword [ebp - 0x100], 0
push 4
pop eax
shl eax, 1
mov ecx, dword [ebp - 0x100]
mov dword [ebp + eax - 0x500], ecx
mov eax, dword [ebp - 0x100]
sub eax, dword [ebp - 0x18]
sub eax, 0x29ed
je 0x10032339
mov eax, 0x413053bf
test eax, eax
je 0x10032339
mov dword [ebp - 0x164], 1
jmp 0x10032340
and dword [ebp - 0x164], 0
cmp dword [ebp - 0x164], 0xa928f0bd
jae 0x10032361
mov eax, 0x7c4e
test eax, eax
je 0x10032361
mov dword [ebp - 0x204], 1
jmp 0x10032368
and dword [ebp - 0x204], 0
mov eax, dword [ebp - 0x204]
mov dword [ebp - 0x25c], eax
jmp 0x10032157
mov eax, dword [ebp - 0x7c]
mov ecx, dword [ebp - 0xac]
add ecx, dword [eax + 0xc]
push ecx
push 0x159f
push 0x1c1a
call fcn.1000fba8
pop ecx
pop ecx
call eax
mov dword [ebp - 0x10c], eax
mov dword [ebp - 0x2bc], 1
mov dword [ebp - 0x458], 0xffffffff
mov dword [ebp - 0x388], 0xca3c0bf9
mov dword [ebp - 0x3f8], 0x1247adf1
mov dword [ebp - 0x2c4], 1
mov dword [ebp - 0x390], 0xd658edf
mov dword [ebp - 0x438], 0xfffffffe
mov dword [ebp - 0x398], 0xffffffff
mov dword [ebp - 0xcc], 0
jmp 0x10032408
mov eax, dword [ebp - 0xcc]
inc eax
mov dword [ebp - 0xcc], eax
cmp dword [ebp - 0xcc], 2
jge 0x10032424
mov eax, dword [ebp - 0xcc]
mov dword [ebp + eax*4 - 0x3b0], 0xcf592758
jmp 0x100323fb
mov byte [ebp - 0x59], 0
push 0
push 0x4df3
push 0x369b
push 0x7e98
push 0x2876
push 0x5d33
push 0x5299
push 0x69fe
push 0x6c6d
push 1
lea eax, [ebp - 0x59]
push eax
call fcn.1003eaf0
add esp, 0x2c
cmp dword [ebp - 0x2bc], 0
je 0x10032877
mov dword [ebp - 0x400], 0xfffffff8
mov dword [ebp - 0x3a0], 0x3efc07e1
mov dword [ebp - 0x408], 0x9c3fbb4
mov dword [ebp - 0x3a8], 0xfffffff6
mov dword [ebp - 0x3b8], 0x22a149ce
mov dword [ebp - 0x3b4], 0
mov dword [ebp - 0x3bc], 7
mov dword [ebp - 0x3c4], 0xf13e13a6
mov dword [ebp - 0x3c0], 0xcfbce008
mov dword [ebp - 0x40c], 1
mov dword [ebp - 0x3c8], 0xa7a81a82
push 3
lea ecx, [ebp - 0x454]
call fcn.10010424
mov dword [ebp - 4], 5
push 2
lea ecx, [ebp - 0x444]
call fcn.10010424
mov byte [ebp - 4], 6
mov dword [ebp - 0x410], 0xff846c8
mov dword [ebp - 0x3d0], 0x31e3
mov dword [ebp - 0x26c], 2
push 0
lea eax, [ebp - 0x454]
push eax
push 1
push 0x144b
lea eax, [ebp - 0x264]
push eax
push 0x2483
push 0x7c18
push 1
push 0x43bf
push 0x1fc8
call fcn.100342b9
add esp, 0x28
lea eax, [ebp - 0x444]
push eax
lea eax, [ebp - 0x264]
push eax
push 0x1561
push 1
push 1
push 0x7e46
call fcn.1003031e
add esp, 0x18
mov dword [ebp - 0x304], 0x2125
cmp dword [ebp - 0x304], 0x53f
jge 0x1003283a
xor eax, eax
inc eax
je 0x1003283a
lea eax, [ebp - 0x4dc]
push eax
push 0x10009528
call fcn.1004d47b
pop ecx
pop ecx
xor eax, eax
inc eax
imul eax, eax, 0
movsx eax, byte [ebp + eax - 0x4dc]
cmp eax, 0x23
jne 0x100325c5
jmp 0x1003283a
lea eax, [ebp - 0x4dc]
push eax
call fcn.1004d3f0
pop ecx
mov dword [ebp - 0xdc], eax
and dword [ebp - 0x24], 0
and dword [ebp - 0x34], 0
jmp 0x100325e9
mov eax, dword [ebp - 0x34]
inc eax
mov dword [ebp - 0x34], eax
mov eax, dword [ebp - 0x34]
cmp eax, dword [ebp - 0xdc]
jge 0x100327fc
mov eax, dword [ebp - 0x34]
movsx eax, byte [ebp + eax - 0x4dc]
cmp eax, 0x2e
jne 0x10032615
mov eax, dword [ebp - 0x24]
inc eax
inc eax
mov dword [ebp - 0x24], eax
jmp 0x100327f7
mov eax, dword [ebp - 0x34]
movsx eax, byte [ebp + eax - 0x4dc]
cmp eax, 0x2f
jne 0x10032691
mov eax, dword [ebp - 0x34]
dec eax
mov dword [ebp - 0x80], eax
mov byte [ebp - 0x25], 0
xor eax, eax
inc eax
je 0x1003267c
cmp dword [ebp - 0x80], 0xffffffff
je 0x1003264b
mov eax, dword [ebp - 0x80]
movsx eax, byte [ebp + eax - 0x4dc]
cmp eax, 0x2e
jne 0x10032651
mov byte [ebp - 0x25], 1
jmp 0x1003267c
mov eax, dword [ebp - 0x80]
movsx eax, byte [ebp + eax - 0x4dc]
cmp eax, 0x7c
je 0x10032671
mov eax, dword [ebp - 0x80]
movsx eax, byte [ebp + eax - 0x4dc]
cmp eax, 0x5c
jne 0x10032673
jmp 0x1003267c
mov eax, dword [ebp - 0x80]
dec eax
mov dword [ebp - 0x80], eax
jmp 0x10032630
movzx eax, byte [ebp - 0x25]
test eax, eax
je 0x1003268c
mov eax, dword [ebp - 0x24]
inc eax
inc eax
mov dword [ebp - 0x24], eax
jmp 0x100327f7
mov eax, dword [ebp - 0x34]
movsx eax, byte [ebp + eax - 0x4dc]
cmp eax, 0x5c
jne 0x10032712
mov eax, dword [ebp - 0x34]
inc eax
mov dword [ebp - 0x78], eax
mov byte [ebp - 0x2d], 0
xor eax, eax
inc eax
je 0x100326fd
mov eax, dword [ebp - 0x78]
cmp eax, dword [ebp - 0xdc]
je 0x100326cc
mov eax, dword [ebp - 0x78]
movsx eax, byte [ebp + eax - 0x4dc]
cmp eax, 0x2e
jne 0x100326d2
mov byte [ebp - 0x2d], 1
jmp 0x100326fd
mov eax, dword [ebp - 0x78]
movsx eax, byte [ebp + eax - 0x4dc]
cmp eax, 0x7c
je 0x100326f2
mov eax, dword [ebp - 0x78]
movsx eax, byte [ebp + eax - 0x4dc]
cmp eax, 0x2f
jne 0x100326f4
jmp 0x100326fd
mov eax, dword [ebp - 0x78]
inc eax
mov dword [ebp - 0x78], eax
jmp 0x100326ac
movzx eax, byte [ebp - 0x2d]
test eax, eax
je 0x1003270d
mov eax, dword [ebp - 0x24]
inc eax
inc eax
mov dword [ebp - 0x24], eax
jmp 0x100327f7
mov eax, dword [ebp - 0x34]
movsx eax, byte [ebp + eax - 0x4dc]
cmp eax, 0x7c
jne 0x100327f7
mov eax, dword [ebp - 0x34]
dec eax
mov dword [ebp - 0x1c], eax
mov byte [ebp - 0xd], 0
xor eax, eax
inc eax
je 0x1003277d
cmp dword [ebp - 0x1c], 0xffffffff
je 0x1003274c
mov eax, dword [ebp - 0x1c]
movsx eax, byte [ebp + eax - 0x4dc]
cmp eax, 0x2e
jne 0x10032752
mov byte [ebp - 0xd], 1
jmp 0x1003277d
mov eax, dword [ebp - 0x1c]
movsx eax, byte [ebp + eax - 0x4dc]
cmp eax, 0x7c
je 0x10032772
mov eax, dword [ebp - 0x1c]
movsx eax, byte [ebp + eax - 0x4dc]
cmp eax, 0x5c
jne 0x10032774
jmp 0x1003277d
mov eax, dword [ebp - 0x1c]
dec eax
mov dword [ebp - 0x1c], eax
jmp 0x10032731
movzx eax, byte [ebp - 0xd]
test eax, eax
je 0x1003278c
mov eax, dword [ebp - 0x24]
inc eax
mov dword [ebp - 0x24], eax
mov byte [ebp - 0xd], 0
mov eax, dword [ebp - 0x34]
inc eax
mov dword [ebp - 0x1c], eax
xor eax, eax
inc eax
je 0x100327e8
mov eax, dword [ebp - 0x1c]
cmp eax, dword [ebp - 0xdc]
je 0x100327b7
mov eax, dword [ebp - 0x1c]
movsx eax, byte [ebp + eax - 0x4dc]
cmp eax, 0x2e
jne 0x100327bd
mov byte [ebp - 0xd], 1
jmp 0x100327e8
mov eax, dword [ebp - 0x1c]
movsx eax, byte [ebp + eax - 0x4dc]
cmp eax, 0x7c
je 0x100327dd
mov eax, dword [ebp - 0x1c]
movsx eax, byte [ebp + eax - 0x4dc]
cmp eax, 0x2f
jne 0x100327df
jmp 0x100327e8
mov eax, dword [ebp - 0x1c]
inc eax
mov dword [ebp - 0x1c], eax
jmp 0x10032797
movzx eax, byte [ebp - 0xd]
test eax, eax
je 0x100327f7
mov eax, dword [ebp - 0x24]
inc eax
mov dword [ebp - 0x24], eax
jmp 0x100325e2
cvtsi2sd xmm0, dword [ebp - 0x24]
mulsd xmm0, qword [0x10009608]
cvtsi2sd xmm1, dword [ebp - 0xdc]
divsd xmm0, xmm1
push ecx
push ecx
movsd qword [esp], xmm0
call fcn.1004e510
pop ecx
pop ecx
push ecx
push ecx
fstp qword [esp]
push 0x1000952c
call fcn.1004d6af
add esp, 0xc
jmp 0x10032591
push 1
push pe_nt_image_headers32
lea eax, [ebp - 0x26c]
push eax
push 0x3394
push 1
call fcn.100303f6
add esp, 0x14
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x444]
call fcn.10010486
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x454]
call fcn.10010486
jmp 0x1003288a
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x2c4]
mov dword [ebp + eax - 0x3b0], ecx
cmp dword [ebp - 0x10c], 0
jne 0x10032c9f
mov dword [ebp - 0x20], 0
mov dword [ebp - 0x3c], 0x621e
mov dword [ebp - 0x74], 0x200
mov dword [ebp - 0x40], 0
jmp 0x100328bc
mov eax, dword [ebp - 0x40]
inc eax
mov dword [ebp - 0x40], eax
cmp dword [ebp - 0x40], 2
jge 0x100328d2
mov eax, dword [ebp - 0x40]
mov dword [ebp + eax*4 - 0xe8], 1
jmp 0x100328b5
mov dword [ebp - 0x40], 0
jmp 0x100328e2
mov eax, dword [ebp - 0x40]
inc eax
mov dword [ebp - 0x40], eax
cmp dword [ebp - 0x40], 1
jge 0x100328f5
mov eax, dword [ebp - 0x40]
mov dword [ebp + eax*4 - 0x70], 0xffffffff
jmp 0x100328db
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0xe8]
mov dword [ebp - 0x448], eax
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0xe8]
mov dword [ebp - 0x3d8], eax
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0xe8]
add eax, 0x1a9c
mov dword [ebp - 0x16c], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x16c]
mov dword [ebp + eax - 0x70], ecx
cmp dword [ebp - 0x16c], 0x6916
jge 0x10032961
mov eax, 0x594d
test eax, eax
jne 0x10032961
and dword [ebp - 0x1d4], 0
jmp 0x1003296b
mov dword [ebp - 0x1d4], 1
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x1d4]
sub ecx, dword [ebp + eax - 0xe8]
jne 0x10032999
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0xe8], 0
jne 0x10032999
and dword [ebp - 0x174], 0
jmp 0x100329a3
mov dword [ebp - 0x174], 1
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0xe8]
push 4
pop ecx
shl ecx, 0
add eax, dword [ebp + ecx - 0xe8]
mov dword [ebp - 0x20], eax
mov eax, dword [ebp - 0x20]
cmp eax, dword [ebp - 0x174]
jg 0x100329d7
mov dword [ebp - 0x274], 1
jmp 0x100329de
and dword [ebp - 0x274], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xe8]
mov dword [ebp - 0x418], eax
cmp dword [ebp - 0x3c], 0
je 0x10032b21
cmp dword [ebp - 0x20], 0
je 0x10032b21
mov dword [ebp - 0x18c], 8
mov dword [ebp - 0x21c], 0x78cca699
mov dword [ebp - 0x1e4], 0x4448110c
mov dword [ebp - 0x480], 9
mov dword [ebp - 0x47c], 9
mov dword [ebp - 0x478], 9
mov dword [ebp - 0x474], 9
mov dword [ebp - 0x21c], 0xccedb775
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x70]
cmp eax, dword [ebp - 0x21c]
jg 0x10032a73
mov dword [ebp - 0x17c], 1
jmp 0x10032a7a
and dword [ebp - 0x17c], 0
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x20], eax
mov eax, dword [ebp - 0x20]
cmp dword [ebp - 0x17c], eax
jg 0x10032a97
mov dword [ebp - 0x1dc], 1
jmp 0x10032a9e
and dword [ebp - 0x1dc], 0
mov eax, dword [ebp - 0x18c]
cmp dword [ebp - 0x1dc], eax
jg 0x10032ab8
mov dword [ebp - 0x184], 1
jmp 0x10032abf
and dword [ebp - 0x184], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0xe8]
imul eax, dword [ebp - 0x184]
push 4
pop ecx
imul ecx, ecx, 0
cmp eax, dword [ebp + ecx - 0x70]
jle 0x10032aeb
mov dword [ebp - 0x20c], 1
jmp 0x10032af2
and dword [ebp - 0x20c], 0
mov eax, dword [ebp - 0x20c]
mov dword [ebp - 0x1e4], eax
mov eax, dword [ebp - 0x18c]
imul eax, dword [ebp - 0x1e4]
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x70], eax
lea eax, [ebp - 0x74]
push eax
call fcn.10031534
pop ecx
jmp 0x10032b5b
mov dword [ebp - 0x3c], 0
jmp 0x10032b31
mov eax, dword [ebp - 0x3c]
dec eax
mov dword [ebp - 0x3c], eax
cmp dword [ebp - 0x3c], 0xffffffec
jg 0x10032b5b
mov dword [ebp - 0x2f8], 0xffff
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x20]
mov dword [ebp + eax - 0x70], ecx
cmp dword [ebp - 0x2f8], 0
je 0x10032b59
jmp 0x10032b2a
jmp 0x10032b2a
mov dword [ebp - 0x74], 0
jmp 0x10032b6b
mov eax, dword [ebp - 0x74]
inc eax
mov dword [ebp - 0x74], eax
cmp dword [ebp - 0x74], 0x1f
je 0x10032bb6
mov dword [ebp - 0x3c], 4
jmp 0x10032b81
mov eax, dword [ebp - 0x3c]
inc eax
mov dword [ebp - 0x3c], eax
cmp dword [ebp - 0x3c], 6
jge 0x10032bb4
mov dword [ebp - 0x20], 0
jmp 0x10032b97
mov eax, dword [ebp - 0x20]
inc eax
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 1
jge 0x10032baa
mov eax, dword [ebp - 0x20]
mov dword [ebp + eax*4 - 0x70], 0xfffffffc
jmp 0x10032b90
cmp dword [ebp - 0x74], 0
je 0x10032bb2
jmp 0x10032b7a
jmp 0x10032b7a
jmp 0x10032b64
push 1
push 0x26b5
push 0x15b4
push 0x406c
push 0x5aa7
lea eax, [ebp - 0xa4]
push eax
push 1
call fcn.10030571
add esp, 0x1c
mov dword [ebp - 0xa0], 2
push 2
lea ecx, [ebp - 0x360]
call fcn.10010424
mov dword [ebp - 4], 7
push 0x4cca
push 1
push 1
push 0x7057
push 0x2172
push 0x62cc
push 0x574f
lea eax, [ebp - 0x3e0]
push eax
push 1
push 0x6cb
push 0x65a6
push 0x3ba5
push 0x4e16
lea eax, [ebp - 0x360]
push eax
call fcn.10030628
add esp, 0x38
mov dword [ebp - 0xa0], 0xffffffea
jmp 0x10032c5d
mov eax, dword [ebp - 0xa0]
inc eax
mov dword [ebp - 0xa0], eax
cmp dword [ebp - 0xa0], 0
jge 0x10032c76
mov byte [ebp - 0x58], 0
lea eax, [ebp - 0x58]
push eax
call fcn.1003154d
pop ecx
jmp 0x10032c50
lea eax, [ebp - 0x360]
push eax
lea eax, [ebp - 0xa0]
push eax
call fcn.10031576
pop ecx
pop ecx
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x360]
call fcn.10010486
jmp 0x1003374f
mov eax, dword [ebp + 8]
mov eax, dword [eax + 0xc]
lea eax, [eax*4 + 4]
push eax
mov eax, dword [ebp + 8]
push dword [eax + 8]
call fcn.1004e72a
pop ecx
pop ecx
mov ecx, dword [ebp + 8]
mov dword [ecx + 8], eax
push 1
lea ecx, [ebp - 0x464]
call fcn.10010424
mov dword [ebp - 4], 8
lea eax, [ebp - 0x464]
push eax
lea eax, [ebp - 0x468]
push eax
call fcn.100315e3
pop ecx
pop ecx
mov byte [ebp - 0x54], 0
lea eax, [ebp - 0x54]
push eax
call fcn.1003162b
pop ecx
push 0
call fcn.1003d6a5
pop ecx
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x464]
call fcn.10010486
mov eax, dword [ebp + 8]
cmp dword [eax + 8], 0
jne 0x10033393
mov dword [ebp - 0x38], 0xffffffff
mov dword [ebp - 0x98], 0xffffffff
mov dword [ebp - 0x118], 0x84bf4d80
mov dword [ebp - 0x28c], 0x14c5bddf
mov dword [ebp - 0xd4], 0
jmp 0x10032d59
mov eax, dword [ebp - 0xd4]
inc eax
mov dword [ebp - 0xd4], eax
cmp dword [ebp - 0xd4], 1
jge 0x10032d75
mov eax, dword [ebp - 0xd4]
mov dword [ebp + eax*4 - 0x108], 0xffffffff
jmp 0x10032d4c
mov dword [ebp - 0x38], 0
jmp 0x10032d85
mov eax, dword [ebp - 0x38]
dec eax
mov dword [ebp - 0x38], eax
cmp dword [ebp - 0x38], 0
jl 0x10032fee
mov dword [ebp - 0x4c], 0
mov dword [ebp - 0x110], 0xffffffff
mov dword [ebp - 0x4c], 0
jmp 0x10032db0
mov eax, dword [ebp - 0x4c]
inc eax
mov dword [ebp - 0x4c], eax
cmp dword [ebp - 0x4c], 0
jg 0x10032fe9
mov dword [ebp - 0x50], 0x708ef6b8
mov dword [ebp - 0x128], 0xffffffff
mov byte [ebp - 0x61], 0
movzx eax, byte [ebp - 0x61]
test eax, eax
je 0x10032deb
push 0
push 0x18fa
push 0x6389
call fcn.10040d03
add esp, 0xc
mov dword [ebp - 0x50], 0
jmp 0x10032dfb
mov eax, dword [ebp - 0x50]
inc eax
mov dword [ebp - 0x50], eax
cmp dword [ebp - 0x50], 0
jg 0x10032fe4
mov dword [ebp - 0x19c], 0xfffd
cmp dword [ebp - 0x50], 0
je 0x10032f9f
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x108]
cmp dword [ebp - 0x4c], eax
jne 0x10032e37
mov dword [ebp - 0x27c], 1
jmp 0x10032e3e
and dword [ebp - 0x27c], 0
cmp dword [ebp - 0x38], 0x6e6c
jle 0x10032e53
mov dword [ebp - 0x194], 1
jmp 0x10032e5a
and dword [ebp - 0x194], 0
mov eax, dword [ebp - 0x50]
cmp dword [ebp - 0x194], eax
jle 0x10032e71
mov dword [ebp - 0x22c], 1
jmp 0x10032e78
and dword [ebp - 0x22c], 0
mov eax, dword [ebp - 0x19c]
cmp dword [ebp - 0x22c], eax
je 0x10032e92
mov dword [ebp - 0x2cc], 1
jmp 0x10032e99
and dword [ebp - 0x2cc], 0
mov eax, dword [ebp - 0x4c]
mov dword [ebp - 0x368], eax
cmp dword [ebp - 0x4c], 0
jne 0x10032eb4
mov dword [ebp - 0x1ec], 1
jmp 0x10032ebb
and dword [ebp - 0x1ec], 0
mov eax, dword [ebp - 0x19c]
cmp dword [ebp - 0x1ec], eax
jl 0x10032ed5
mov dword [ebp - 0x1a4], 1
jmp 0x10032edc
and dword [ebp - 0x1a4], 0
imul eax, dword [ebp - 0x1a4], 0xef23
test eax, eax
je 0x10032f03
cmp dword [ebp - 0x50], 0
je 0x10032f03
push 3
pop eax
test eax, eax
je 0x10032f03
mov dword [ebp - 0x214], 1
jmp 0x10032f0a
and dword [ebp - 0x214], 0
mov eax, dword [ebp - 0x50]
cmp dword [ebp - 0x214], eax
jne 0x10032f21
mov dword [ebp - 0x1ac], 1
jmp 0x10032f28
and dword [ebp - 0x1ac], 0
mov eax, dword [ebp - 0x4c]
cmp dword [ebp - 0x1ac], eax
jl 0x10032f3f
mov dword [ebp - 0x124], 1
jmp 0x10032f46
and dword [ebp - 0x124], 0
mov eax, dword [ebp - 0x124]
mov dword [ebp - 0x128], eax
mov eax, dword [ebp - 0x128]
mov dword [ebp - 0x110], eax
cmp dword [ebp - 0x110], 0
je 0x10032f7c
cmp dword [ebp - 0x110], 0
je 0x10032f7c
mov dword [ebp - 0x284], 1
jmp 0x10032f83
and dword [ebp - 0x284], 0
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x108], 0xfffffff6
jne 0x10032f9f
mov dword [ebp - 0x130], 1
jmp 0x10032fa6
and dword [ebp - 0x130], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x108]
cmp dword [ebp - 0x130], eax
jge 0x10032fc7
mov dword [ebp - 0x138], 1
jmp 0x10032fce
and dword [ebp - 0x138], 0
mov eax, 0x29cf3083
sub eax, dword [ebp - 0x138]
mov dword [ebp - 0x98], eax
jmp 0x10032df4
jmp 0x10032da9
jmp 0x10032d7e
mov dword [ebp - 0x38], 0
jmp 0x10032ffe
mov eax, dword [ebp - 0x38]
dec eax
mov dword [ebp - 0x38], eax
cmp dword [ebp - 0x38], 0xffffffe7
jle 0x1003325b
mov dword [ebp - 0x6c], 0xd1ad702c
mov dword [ebp - 0x36c], 0xffffffff
mov dword [ebp - 0x294], 0x97fbcb15
mov dword [ebp - 0x98], 0
jmp 0x1003303c
mov eax, dword [ebp - 0x98]
inc eax
mov dword [ebp - 0x98], eax
cmp dword [ebp - 0x98], 0x1b
je 0x10033225
mov dword [ebp - 0x2d4], 0x64a48c55
mov dword [ebp - 0xc4], 0
jmp 0x1003306c
mov eax, dword [ebp - 0xc4]
inc eax
mov dword [ebp - 0xc4], eax
cmp dword [ebp - 0xc4], 3
jge 0x10033088
mov eax, dword [ebp - 0xc4]
mov dword [ebp + eax*4 - 0x334], 0xc87e1771
jmp 0x1003305f
mov eax, dword [ebp - 0x6c]
mov dword [ebp - 0x374], eax
cmp dword [ebp - 0x6c], 0
je 0x10033102
xor eax, eax
inc eax
je 0x100330ae
cmp dword [ebp - 0x6c], 0
je 0x100330ae
mov dword [ebp - 0x140], 1
jmp 0x100330b5
and dword [ebp - 0x140], 0
mov eax, dword [ebp - 0x6c]
cmp dword [ebp - 0x140], eax
jge 0x100330cc
mov dword [ebp - 0x148], 1
jmp 0x100330d3
and dword [ebp - 0x148], 0
cmp dword [ebp - 0x148], 0xfffffff8
je 0x100330e8
mov dword [ebp - 0x150], 1
jmp 0x100330ef
and dword [ebp - 0x150], 0
mov eax, dword [ebp - 0x150]
mov dword [ebp - 0x118], eax
cmp dword [ebp - 0x118], 0
mov eax, dword [ebp - 0x38]
mov dword [ebp - 0x37c], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x334]
mov dword [ebp - 0x384], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x334], 1
jb 0x1003313a
mov dword [ebp - 0x158], 1
jmp 0x10033141
and dword [ebp - 0x158], 0
mov eax, dword [ebp - 0x6c]
cmp dword [ebp - 0x158], eax
jne 0x10033158
mov dword [ebp - 0x160], 1
jmp 0x1003315f
and dword [ebp - 0x160], 0
cmp dword [ebp - 0x160], 0xfffffff6
jne 0x10033174
mov dword [ebp - 0x2f0], 1
jmp 0x1003317b
and dword [ebp - 0x2f0], 0
cmp dword [ebp - 0x118], 0
mov eax, 0x170a2c9e
test eax, eax
jne 0x1003319d
mov eax, 0xf9f6d65d
test eax, eax
jne 0x1003319d
and dword [ebp - 0x168], 0
jmp 0x100331a7
mov dword [ebp - 0x168], 1
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x334]
imul eax, dword [ebp - 0x168]
push 4
pop ecx
imul ecx, ecx, 0
imul eax, dword [ebp + ecx - 0x334]
cmp eax, 0xe5840947
jae 0x100331dc
mov dword [ebp - 0x170], 1
jmp 0x100331e3
and dword [ebp - 0x170], 0
mov eax, dword [ebp - 0x6c]
cmp dword [ebp - 0x170], eax
jge 0x100331fa
mov dword [ebp - 0x178], 1
jmp 0x10033201
and dword [ebp - 0x178], 0
mov eax, dword [ebp - 0x178]
mov dword [ebp - 0x28c], eax
push 1
push 1
lea eax, [ebp - 0x2d4]
push eax
call fcn.10030a0d
add esp, 0xc
jmp 0x1003302f
push 0x3194
push 1
push 0x9cb
lea eax, [ebp - 0x294]
push eax
push 0x76eb
push 0x63f5
push 0x4056
push 0xa6f
push 1
call fcn.10030b21
add esp, 0x24
jmp 0x10032ff7
and dword [ebp - 0xa4], 0
mov dword [ebp - 0x24c], 0x462d5e48
mov dword [ebp - 0x248], 0x462d5e48
mov dword [ebp - 0x244], 0x462d5e48
mov dword [ebp - 0x240], 0x462d5e48
mov dword [ebp - 0xc8], 0x86ba47c9
push 4
pop eax
imul eax, eax, 3
mov dword [ebp + eax - 0x24c], 0xffffffee
jmp 0x100332c2
push 4
pop eax
imul eax, eax, 3
mov eax, dword [ebp + eax - 0x24c]
inc eax
push 4
pop ecx
imul ecx, ecx, 3
mov dword [ebp + ecx - 0x24c], eax
push 4
pop eax
imul eax, eax, 3
cmp dword [ebp + eax - 0x24c], 0x17
jle 0x10033365
mov dword [ebp - 0x8c], 0x58bac04e
mov dword [ebp - 0x8c], 0
jmp 0x100332f9
mov eax, dword [ebp - 0x8c]
dec eax
mov dword [ebp - 0x8c], eax
cmp dword [ebp - 0x8c], 0xfffffff9
je 0x10033360
mov dword [ebp - 0x2f4], 0xffffffff
cmp dword [ebp - 0x8c], 0
je 0x10033331
push 4
pop eax
imul eax, eax, 3
cmp dword [ebp + eax - 0x24c], 0
je 0x10033331
mov dword [ebp - 0x180], 1
jmp 0x10033338
and dword [ebp - 0x180], 0
mov eax, dword [ebp - 0x180]
mov dword [ebp - 0x2f4], eax
mov byte [ebp - 0x56], 0
movzx eax, byte [ebp - 0x56]
test eax, eax
je 0x1003335e
push 0
push 0x17cb
call fcn.1003caf3
pop ecx
pop ecx
jmp 0x100332ec
jmp 0x100332a7
mov dword [ebp - 0xc8], 3
jmp 0x1003337e
mov eax, dword [ebp - 0xc8]
dec eax
mov dword [ebp - 0xc8], eax
cmp dword [ebp - 0xc8], 0
jl 0x1003338e
call fcn.1003165e
jmp 0x10033371
jmp 0x1003374f
lea eax, [ebp - 0x250]
push eax
lea eax, [ebp - 0x2ac]
push eax
push dword [ebp - 0xac]
push dword [ebp - 0x7c]
lea eax, [ebp - 0x10c]
push eax
push dword [ebp + 8]
call fcn.1002f1eb
add esp, 0x18
mov dword [ebp - 0x60], 0xad313dd3
mov dword [ebp - 0x104], 0
mov dword [ebp - 0x2a4], 1
mov dword [ebp - 0x60], 0x18
jmp 0x100333e7
mov eax, dword [ebp - 0x60]
dec eax
mov dword [ebp - 0x60], eax
cmp dword [ebp - 0x60], 0xa
jne 0x1003356d
mov dword [ebp - 0x84], 0
mov dword [ebp - 0xfc], 0xbd035c57
mov dword [ebp - 0x1a0], 0xc2f1fcc1
mov byte [ebp - 0x5a], 0
lea eax, [ebp - 0x5a]
push eax
call fcn.1003167d
pop ecx
mov eax, dword [ebp - 0xfc]
cmp dword [ebp - 0x84], eax
jge 0x10033534
cmp dword [ebp - 0x84], 0
je 0x1003344d
cmp dword [ebp - 0x84], 0
je 0x1003344d
mov dword [ebp - 0x188], 1
jmp 0x10033454
and dword [ebp - 0x188], 0
mov eax, dword [ebp - 0x84]
imul eax, dword [ebp - 0x188]
test eax, eax
jne 0x10033477
mov eax, 0xc105
test eax, eax
jne 0x10033477
and dword [ebp - 0x190], 0
jmp 0x10033481
mov dword [ebp - 0x190], 1
mov eax, dword [ebp - 0x104]
mov dword [ebp - 0xfc], eax
mov eax, dword [ebp - 0xfc]
mov ecx, dword [ebp - 0x84]
add ecx, dword [ebp - 0x190]
imul ecx, dword [ebp - 0x60]
add ecx, 0x770
sub eax, ecx
sub eax, 0xb365
mov dword [ebp - 0x29c], eax
mov eax, dword [ebp - 0x84]
mov dword [ebp - 0x2dc], eax
mov eax, dword [ebp - 0x104]
inc eax
mov dword [ebp - 0x104], eax
mov eax, dword [ebp - 0x29c]
cmp eax, dword [ebp - 0x2dc]
jl 0x100334e9
mov dword [ebp - 0x198], 1
jmp 0x100334f0
and dword [ebp - 0x198], 0
mov eax, dword [ebp - 0x1a0]
imul eax, dword [ebp - 0x198]
test eax, eax
je 0x10033516
cmp dword [ebp - 0x1a0], 0
je 0x10033516
mov dword [ebp - 0x1a8], 1
jmp 0x1003351d
and dword [ebp - 0x1a8], 0
mov eax, dword [ebp - 0x60]
imul eax, dword [ebp - 0x1a8]
test eax, eax
jne 0x10033534
and dword [ebp - 0x1b0], 0
jmp 0x1003353e
mov dword [ebp - 0x1b0], 1
mov eax, dword [ebp - 0x60]
cmp eax, dword [ebp - 0x1b0]
je 0x10033555
mov dword [ebp - 0x1b8], 1
jmp 0x1003355c
and dword [ebp - 0x1b8], 0
mov eax, dword [ebp - 0x1b8]
mov dword [ebp - 0x2a4], eax
jmp 0x100333e0
lea eax, [ebp - 0xa4]
push eax
lea eax, [ebp - 0x250]
push eax
lea eax, [ebp - 0x2ac]
push eax
push dword [ebp - 0xac]
lea eax, [ebp - 0x10c]
push eax
call fcn.1002f262
add esp, 0x14
mov dword [ebp - 0x9c], 0xe1757117
mov dword [ebp - 0x270], 1
mov dword [ebp - 0x260], 0xffffffff
mov dword [ebp - 0x258], 0
mov dword [ebp - 0x268], 0x7d4763c6
mov dword [ebp - 0x9c], 0
jmp 0x100335e2
mov eax, dword [ebp - 0x9c]
dec eax
mov dword [ebp - 0x9c], eax
cmp dword [ebp - 0x9c], 0xffffffe8
jge 0x1003373f
push 2
lea ecx, [ebp - 0x328]
call fcn.10010424
mov dword [ebp - 4], 9
mov dword [ebp - 0x2b4], 0x34f1d4b0
mov dword [ebp - 0x254], 0xfffffff8
mov dword [ebp - 0x2ec], 0xffffffff
push 1
lea ecx, [ebp - 0x31c]
call fcn.10010424
mov byte [ebp - 4], 0xa
mov dword [ebp - 0x278], 0
lea eax, [ebp - 0x328]
push eax
lea eax, [ebp - 0x94]
push eax
push 1
push 0x7c64
push 0
push 0x6ba4
push 0x1496
push 0x1888
call fcn.1004046a
add esp, 0x20
mov dword [ebp - 0x94], 0
jmp 0x10033683
mov eax, dword [ebp - 0x94]
inc eax
mov dword [ebp - 0x94], eax
cmp dword [ebp - 0x94], 1
jge 0x100336a5
push dword [ebp - 0x94]
lea ecx, [ebp - 0x31c]
call fcn.1001048b
mov dword [eax], 0xfffffffd
jmp 0x10033676
lea eax, [ebp - 0x2ec]
push eax
lea eax, [ebp - 0x9c]
push eax
lea eax, [ebp - 0x2b4]
push eax
lea eax, [ebp - 0x254]
push eax
lea eax, [ebp - 0x258]
push eax
lea eax, [ebp - 0x260]
push eax
lea eax, [ebp - 0x268]
push eax
lea eax, [ebp - 0x270]
push eax
lea eax, [ebp - 0x328]
push eax
lea eax, [ebp - 0x31c]
push eax
call fcn.100316b2
add esp, 0x28
cmp dword [ebp - 0x278], 0
je 0x1003371c
mov byte [ebp - 4], 9
lea ecx, [ebp - 0x31c]
call fcn.10010486
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x328]
call fcn.10010486
jmp 0x1003373f
mov byte [ebp - 4], 9
lea ecx, [ebp - 0x31c]
call fcn.10010486
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x328]
call fcn.10010486
jmp 0x100335d5
cmp dword [ebp - 0xa4], 0
jne 0x1003374a
jmp 0x1003374f
jmp 0x100320e8
mov dword [ebp - 0x14], 0x3eca
mov dword [ebp - 0x354], 0xa0e6
mov dword [ebp - 0x350], 0xa0e6
mov dword [ebp - 0x34c], 0xa0e6
mov dword [ebp - 0x348], 0xa0e6
lea ecx, [ebp - 0x111]
call fcn.1001049a
push eax
lea eax, [ebp - 0x344]
push eax
lea eax, [ebp - 0x354]
push eax
lea ecx, [ebp - 0x4f0]
call fcn.1001049d
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0xf8]
call fcn.10010460
mov dword [ebp - 4], 0xb
mov dword [ebp - 0x220], 0xfffffffc
push 1
push 1
push 0x5afe
lea eax, [ebp - 0x14]
push eax
push 0x76cd
call fcn.10031139
add esp, 0x14
mov dword [ebp - 0x14], 0
jmp 0x100337ee
mov eax, dword [ebp - 0x14]
inc eax
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 3
jg 0x10033bcf
mov dword [ebp - 0xc0], 7
push dword [ebp - 0x14]
lea ecx, [ebp - 0xf8]
call fcn.1001048b
cmp dword [eax], 0
je 0x10033a3f
push 2
lea ecx, [ebp - 0xf8]
call fcn.1001048b
cmp dword [eax], 0
je 0x10033a3f
mov dword [ebp - 0xb8], 0
mov dword [ebp - 0x120], 1
mov dword [ebp - 0x298], 0xfffffff8
mov dword [ebp - 0xb0], 0
jmp 0x10033866
mov eax, dword [ebp - 0xb0]
inc eax
mov dword [ebp - 0xb0], eax
cmp dword [ebp - 0xb0], 4
jge 0x10033882
mov eax, dword [ebp - 0xb0]
mov dword [ebp + eax*4 - 0x510], 0x4d9a54e5
jmp 0x10033859
push dword [ebp - 0x14]
lea ecx, [ebp - 0xf8]
call fcn.1001048b
cmp dword [eax], 0
je 0x1003389c
cmp dword [ebp - 0xb8], 0
push 4
pop eax
shl eax, 0
mov dword [ebp + eax - 0x510], 0xffff0002
mov eax, 0xffff0002
test eax, eax
jne 0x100338c8
cmp dword [ebp - 0xb8], 0
jne 0x100338c8
and dword [ebp - 0x1c0], 0
jmp 0x100338d2
mov dword [ebp - 0x1c0], 1
cmp dword [ebp - 0x1c0], 0x9403132d
jb 0x100338ea
mov dword [ebp - 0x280], 1
jmp 0x100338f1
and dword [ebp - 0x280], 0
mov eax, dword [ebp - 0xb8]
mov dword [ebp - 0x38c], eax
push dword [ebp - 0x14]
lea ecx, [ebp - 0xf8]
call fcn.1001048b
mov ecx, dword [ebp - 0x14]
cmp dword [eax], ecx
jg 0x1003391e
mov dword [ebp - 0x288], 1
jmp 0x10033925
and dword [ebp - 0x288], 0
push dword [ebp - 0x14]
lea ecx, [ebp - 0xf8]
call fcn.1001048b
mov esi, dword [eax]
add esi, dword [ebp - 0xb8]
push dword [ebp - 0x14]
lea ecx, [ebp - 0xf8]
call fcn.1001048b
imul esi, dword [eax]
cmp esi, 0xfffffff9
jbe 0x1003395d
mov dword [ebp - 0x290], 1
jmp 0x10033964
and dword [ebp - 0x290], 0
mov eax, dword [ebp - 0x14]
mov dword [ebp - 0x394], eax
mov eax, dword [ebp - 0x14]
mov dword [ebp - 0x39c], eax
mov eax, 0x782e
test eax, eax
jne 0x1003398c
cmp dword [ebp - 0xc0], 0
jne 0x1003398c
cmp dword [ebp - 0x14], 0
mov dword [ebp - 0x120], 0x3c17a3f0
mov esi, dword [ebp - 0x120]
push 2
lea ecx, [ebp - 0xf8]
call fcn.1001048b
cmp esi, dword [eax]
jl 0x100339bf
cmp dword [ebp - 0xc0], 0
jne 0x100339bf
and dword [ebp - 0x1d0], 0
jmp 0x100339c9
mov dword [ebp - 0x1d0], 1
cmp dword [ebp - 0x1d0], 0xa61e
jge 0x100339e1
mov dword [ebp - 0x1d8], 1
jmp 0x100339e8
and dword [ebp - 0x1d8], 0
cmp dword [ebp - 0x1d8], 0xffffffff
jne 0x100339fd
mov dword [ebp - 0x1e0], 1
jmp 0x10033a04
and dword [ebp - 0x1e0], 0
push 1
lea ecx, [ebp - 0xf8]
call fcn.1001048b
mov ecx, dword [ebp - 0x1e0]
cmp ecx, dword [eax]
je 0x10033a27
mov dword [ebp - 0x1e8], 1
jmp 0x10033a2e
and dword [ebp - 0x1e8], 0
mov eax, dword [ebp - 0x1e8]
mov dword [ebp - 0x298], eax
jmp 0x10033bb9
mov dword [ebp - 0x208], 8
mov dword [ebp - 0x68], 7
mov dword [ebp - 0x2b8], 0xffffffff
cmp dword [ebp - 0xc0], 1
jg 0x10033a6f
mov dword [ebp - 0x1f0], 1
jmp 0x10033a76
and dword [ebp - 0x1f0], 0
mov eax, dword [ebp - 0x208]
add eax, dword [ebp - 0x1f0]
cmp eax, 0x184b
jge 0x10033a95
mov dword [ebp - 0x200], 1
jmp 0x10033a9c
and dword [ebp - 0x200], 0
push 2
lea ecx, [ebp - 0xf8]
call fcn.1001048b
mov esi, eax
push dword [ebp - 0x14]
lea ecx, [ebp - 0xf8]
call fcn.1001048b
mov ecx, dword [ebp - 0x200]
imul ecx, dword [eax]
cmp dword [esi], ecx
je 0x10033ad8
cmp dword [ebp - 0x208], 0
jne 0x10033ad8
and dword [ebp - 0x210], 0
jmp 0x10033ae2
mov dword [ebp - 0x210], 1
mov eax, dword [ebp - 0x210]
mov dword [ebp - 0x68], eax
mov eax, dword [ebp - 0x68]
inc eax
je 0x10033b06
cmp dword [ebp - 0xc0], 0
je 0x10033b06
mov dword [ebp - 0x218], 1
jmp 0x10033b0d
and dword [ebp - 0x218], 0
push dword [ebp - 0x14]
lea ecx, [ebp - 0xf8]
call fcn.1001048b
mov ecx, dword [ebp - 0x218]
cmp ecx, dword [eax]
jne 0x10033b4b
mov dword [ebp - 0x2a0], 0x6770d28c
lea eax, [ebp - 0x2a0]
push eax
lea eax, [ebp - 0x14]
push eax
lea eax, [ebp - 0x220]
push eax
call fcn.100318d9
add esp, 0xc
jmp 0x10033bb9
mov dword [ebp - 0x2a8], 0xffb3
mov dword [ebp - 0x68], 3
jmp 0x10033b65
mov eax, dword [ebp - 0x68]
dec eax
mov dword [ebp - 0x68], eax
cmp dword [ebp - 0x68], 0
jl 0x10033bb9
mov dword [ebp - 0x2b0], 0xf79f6133
push 1
push 0x6fdb
lea eax, [ebp - 0x2a8]
push eax
lea eax, [ebp - 0x68]
push eax
lea eax, [ebp - 0x2b0]
push eax
push 1
push 0x61f1
lea eax, [ebp - 0xf8]
push eax
lea eax, [ebp - 0x2b8]
push eax
lea eax, [ebp - 0x220]
push eax
push 0x1f06
call fcn.100311dd
add esp, 0x2c
jmp 0x10033b5e
mov byte [ebp - 0x52], 0
movzx eax, byte [ebp - 0x52]
test eax, eax
je 0x10033bca
call fcn.10031916
jmp 0x100337e7
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xf8]
call fcn.10010486
mov eax, dword [ebp - 0xa4]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop esi
mov esp, ebp
pop ebp
ret