Function at 0x1003a1cc
Capabilities:
Check os version
Enumerate pe sections
Read .ini file

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x1006c6d9
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0xa04
push esi
push edi
movzx eax, byte [ebp + 0xc]
test eax, eax
je 0x1003e9d1
mov eax, dword [ebp + 0x20]
mov dword [ebp - 0x5e0], eax
mov eax, dword [ebp + 8]
mov dword [ebp - 0x5f8], eax
mov eax, dword [ebp + 0x28]
mov dword [ebp - 0x610], eax
mov eax, dword [ebp + 0x24]
mov dword [ebp - 0x618], eax
lea eax, [ebp + 0x1c]
mov dword [ebp - 0x550], eax
mov eax, dword [ebp - 0x550]
movzx eax, byte [eax]
test eax, eax
je 0x1003a25b
mov eax, dword [ebp - 0x5e0]
mov dword [ebp - 0x5e8], eax
mov eax, dword [ebp - 0x5e8]
mov dword [ebp - 0x5f0], eax
mov eax, dword [ebp - 0x5f0]
mov dword [eax], 0xc196a162
jmp 0x1003e9cf
mov eax, dword [ebp - 0x5f8]
mov dword [ebp - 0x534], eax
mov eax, dword [ebp - 0x610]
mov dword [ebp - 0x4b8], eax
mov eax, dword [ebp - 0x618]
mov dword [ebp - 0x190], eax
mov dword [ebp - 0x18], 0xfff6
mov dword [ebp - 0x34], 1
push 3
lea ecx, [ebp - 0x740]
call fcn.100126dc
and dword [ebp - 4], 0
lea eax, [ebp - 0x740]
push eax
push 0
lea eax, [ebp - 0x8dc]
push eax
push 0x6365
push 1
call fcn.100347a4
add esp, 0x14
mov eax, dword [ebp - 0x18]
sub eax, 0xffff
mov dword [ebp - 0x34], eax
jne 0x1003a2e6
mov eax, dword [ebp - 0x18]
add eax, dword [ebp - 0x34]
cmp eax, dword [ebp - 0x18]
mov eax, 0x38dc5336
sub eax, dword [ebp - 0x18]
jne 0x1003a2e6
and dword [ebp - 0x348], 0
jmp 0x1003a2f0
mov dword [ebp - 0x348], 1
mov eax, dword [ebp - 0x18]
cmp eax, dword [ebp - 0x348]
je 0x1003a307
mov dword [ebp - 0x468], 1
jmp 0x1003a30e
and dword [ebp - 0x468], 0
mov eax, dword [ebp - 0x18]
cmp eax, dword [ebp - 0x468]
je 0x1003a325
mov dword [ebp - 0x470], 1
jmp 0x1003a32c
and dword [ebp - 0x470], 0
mov eax, dword [ebp - 0x18]
cmp dword [ebp - 0x470], eax
jg 0x1003a3a0
mov dword [ebp - 0x18], 0x1b
jmp 0x1003a347
mov eax, dword [ebp - 0x18]
inc eax
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 0x2c
jne 0x1003a39b
push 0
push 0
push 1
push 0x54e8
push 0x91f
call fcn.1004054f
add esp, 0x14
mov byte [ebp - 0xaf], 0
movzx eax, byte [ebp - 0xaf]
test eax, eax
je 0x1003a399
push 0
push 0x60e1
push 0x5cee
push 1
push 1
push 0x51c2
push 0x705a
call fcn.10035505
add esp, 0x1c
jmp 0x1003a340
jmp 0x1003a696
push 1
lea ecx, [ebp - 0x688]
call fcn.100126dc
mov byte [ebp - 4], 1
lea eax, [ebp - 0x688]
push eax
lea eax, [ebp - 0x86c]
push eax
push 0
push 0x7fb4
push 1
push 0x2fef
call fcn.1003594e
add esp, 0x18
mov dword [ebp - 0x34], 0
jmp 0x1003a3e5
mov eax, dword [ebp - 0x34]
dec eax
mov dword [ebp - 0x34], eax
cmp dword [ebp - 0x34], 0
jl 0x1003a687
mov dword [ebp - 0x180], 0
jmp 0x1003a408
mov eax, dword [ebp - 0x180]
inc eax
mov dword [ebp - 0x180], eax
cmp dword [ebp - 0x180], 2
jge 0x1003a424
mov eax, dword [ebp - 0x180]
mov dword [ebp + eax*4 - 0x590], 0xfffffffd
jmp 0x1003a3fb
mov dword [ebp - 0x18], 0
jmp 0x1003a434
mov eax, dword [ebp - 0x18]
inc eax
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 0
jg 0x1003a62c
push 2
lea ecx, [ebp - 0x628]
call fcn.100126dc
mov byte [ebp - 4], 2
lea eax, [ebp - 0x628]
push eax
push 0x3ac7
push 0
push 0x23bc
lea eax, [ebp - 0x840]
push eax
push 0
call fcn.1002e7e1
add esp, 0x18
push 1
lea ecx, [ebp - 0x628]
call fcn.10012743
and dword [eax], 0
jmp 0x1003a4a9
push 1
lea ecx, [ebp - 0x628]
call fcn.10012743
mov dword [ebp - 0x264], eax
mov eax, dword [ebp - 0x264]
mov eax, dword [eax]
inc eax
mov ecx, dword [ebp - 0x264]
mov dword [ecx], eax
push 1
lea ecx, [ebp - 0x628]
call fcn.10012743
cmp dword [eax], 0
jg 0x1003a618
mov dword [ebp - 0x66c], 0x2624
cmp dword [ebp - 0x66c], 0x9b5
jge 0x1003a58f
mov dword [ebp - 0x1e8], 1
lea eax, [ebp - 0x1e0]
push eax
mov ecx, 0x1065cfb8
call fcn.10011ec8
mov dword [ebp - 0x460], eax
mov eax, dword [ebp - 0x460]
mov eax, dword [eax]
mov ecx, dword [ebp - 0x460]
add ecx, dword [eax + 4]
call fcn.1001cffd
movzx eax, al
test eax, eax
je 0x1003a58f
cmp dword [ebp - 0x1e0], 0
je 0x1003a58f
mov eax, dword [ebp - 0x1e0]
and eax, 0x80000001
jns 0x1003a532
dec eax
or eax, 0xfffffffe
inc eax
test eax, eax
jne 0x1003a542
mov dword [ebp - 0x37c], 0x1000e1d0
jmp 0x1003a54c
mov dword [ebp - 0x37c], 0x1000e1d8
mov eax, dword [ebp - 0x1e8]
mov dword [ebp - 0x584], eax
mov eax, dword [ebp - 0x1e0]
cdq
sub eax, edx
sar eax, 1
push eax
push dword [ebp - 0x37c]
push dword [ebp - 0x584]
push 0x1000e1dc
call fcn.10050c2e
add esp, 0x10
mov eax, dword [ebp - 0x1e8]
inc eax
mov dword [ebp - 0x1e8], eax
jmp 0x1003a4e3
mov dword [ebp - 0x4c0], 0xbd18
push dword [ebp - 0x34]
lea ecx, [ebp - 0x688]
call fcn.10012743
cmp dword [eax], 0x4d07
je 0x1003a5bb
mov dword [ebp - 0x26c], 1
jmp 0x1003a5c2
and dword [ebp - 0x26c], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x26c]
mov dword [ebp + eax - 0x590], ecx
push dword [ebp - 0x34]
lea ecx, [ebp - 0x688]
call fcn.10012743
push 4
pop ecx
shl ecx, 0
mov ecx, dword [ebp + ecx - 0x590]
cmp dword [eax], ecx
jl 0x1003a600
mov dword [ebp - 0x44c], 1
jmp 0x1003a607
and dword [ebp - 0x44c], 0
mov eax, dword [ebp - 0x44c]
mov dword [ebp - 0x4c0], eax
jmp 0x1003a485
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x628]
call fcn.1001273e
jmp 0x1003a42d
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x590]
cmp dword [ebp - 0x34], eax
jge 0x1003a64a
mov dword [ebp - 0x274], 1
jmp 0x1003a651
and dword [ebp - 0x274], 0
cmp dword [ebp - 0x274], 7
ja 0x1003a666
mov dword [ebp - 0x384], 1
jmp 0x1003a66d
and dword [ebp - 0x384], 0
push 1
lea ecx, [ebp - 0x740]
call fcn.10012743
mov ecx, dword [ebp - 0x384]
mov dword [eax], ecx
jmp 0x1003a3de
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x688]
call fcn.1001273e
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x740]
call fcn.1001273e
mov dword [ebp - 0x114], 0
push 3
lea ecx, [ebp - 0x81c]
call fcn.100126dc
mov dword [ebp - 4], 3
mov dword [ebp - 0x138], 0
jmp 0x1003a6dc
mov eax, dword [ebp - 0x138]
inc eax
mov dword [ebp - 0x138], eax
cmp dword [ebp - 0x138], 3
jge 0x1003a6fb
push dword [ebp - 0x138]
lea ecx, [ebp - 0x81c]
call fcn.10012743
and dword [eax], 0
jmp 0x1003a6cf
push 0
lea eax, [ebp - 0x114]
push eax
push 0
push 0x52f7
call fcn.10045727
add esp, 0x10
mov dword [ebp - 0x114], 0
jmp 0x1003a72c
mov eax, dword [ebp - 0x114]
inc eax
mov dword [ebp - 0x114], eax
cmp dword [ebp - 0x114], 2
jg 0x1003a74c
mov dword [ebp - 0x5ac], 0x4f28
cmp dword [ebp - 0x5ac], 0
je 0x1003a74a
jmp 0x1003a74c
jmp 0x1003a71f
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x81c]
call fcn.1001273e
mov dword [ebp - 0x40], 7
mov dword [ebp - 0x40c], 0x14a5ea96
mov dword [ebp - 0x4c8], 0x1bf6
cmp dword [ebp - 0x4c8], 0x7fc
jge 0x1003a857
lea eax, [ebp - 0x218]
push eax
push 0x1000dbe8
call fcn.1005030b
pop ecx
pop ecx
mov eax, dword [ebp - 0x218]
mov dword [ebp - 0x608], eax
mov eax, dword [ebp - 0x218]
dec eax
mov dword [ebp - 0x218], eax
cmp dword [ebp - 0x608], 0
je 0x1003a857
lea eax, [ebp - 0x4d0]
push eax
push 0x1000dbe8
call fcn.1005030b
pop ecx
pop ecx
and dword [ebp - 0x230], 0
and dword [ebp - 0x1f0], 0
jmp 0x1003a7ef
mov eax, dword [ebp - 0x1f0]
inc eax
mov dword [ebp - 0x1f0], eax
mov eax, dword [ebp - 0x1f0]
cmp eax, dword [ebp - 0x4d0]
jge 0x1003a840
lea eax, [ebp - 0x5b4]
push eax
push 0x1000dbe8
call fcn.1005030b
pop ecx
pop ecx
cmp dword [ebp - 0x5b4], 2
je 0x1003a825
mov dword [ebp - 0x27c], 1
jmp 0x1003a82c
and dword [ebp - 0x27c], 0
mov eax, dword [ebp - 0x230]
add eax, dword [ebp - 0x27c]
mov dword [ebp - 0x230], eax
jmp 0x1003a7e2
push dword [ebp - 0x230]
push 0x1000df90
call fcn.10050c2e
pop ecx
pop ecx
jmp 0x1003a799
mov dword [ebp - 0x194], 0
jmp 0x1003a870
mov eax, dword [ebp - 0x194]
inc eax
mov dword [ebp - 0x194], eax
cmp dword [ebp - 0x194], 2
jge 0x1003a88c
mov eax, dword [ebp - 0x194]
mov dword [ebp + eax*4 - 0x854], 0
jmp 0x1003a863
cmp dword [ebp - 0x40], 0
je 0x1003a8c6
mov eax, dword [ebp - 0x40]
mov dword [ebp - 0x874], eax
mov eax, dword [ebp - 0x40]
mov dword [ebp - 0x888], eax
mov eax, dword [ebp - 0x40]
mov dword [ebp - 0x778], eax
mov eax, dword [ebp - 0x40]
add eax, 0x616a2e3b
cmp eax, 1
jbe 0x1003a8c6
mov dword [ebp - 0x4d8], 1
jmp 0x1003a8cd
and dword [ebp - 0x4d8], 0
mov eax, dword [ebp - 0x40]
mov dword [ebp - 0x77c], eax
mov eax, dword [ebp - 0x40c]
cmp dword [ebp - 0x40], eax
jl 0x1003a8ed
mov dword [ebp - 0x604], 1
jmp 0x1003a8f4
and dword [ebp - 0x604], 0
mov eax, dword [ebp - 0x40]
mov dword [ebp - 0x784], eax
imul eax, dword [ebp - 0x40], 0xfffffff6
cmp eax, dword [ebp - 0x40c]
jne 0x1003a918
cmp dword [ebp - 0x40], 0
jne 0x1003a918
and dword [ebp - 0x284], 0
jmp 0x1003a922
mov dword [ebp - 0x284], 1
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x284]
mov dword [ebp + eax - 0x854], ecx
mov byte [ebp - 0x7a], 0
push 1
lea eax, [ebp - 0x7a]
push eax
push 0
call fcn.1002ad9c
add esp, 0xc
mov dword [ebp - 0x19c], 0x1928c176
mov dword [ebp - 0x4e0], 0xffffffff
mov dword [ebp - 0x80], 0x633efc07
mov dword [ebp - 0x140], 0
jmp 0x1003a97d
mov eax, dword [ebp - 0x140]
inc eax
mov dword [ebp - 0x140], eax
cmp dword [ebp - 0x140], 4
jge 0x1003a999
mov eax, dword [ebp - 0x140]
mov dword [ebp + eax*4 - 0x990], 1
jmp 0x1003a970
cmp dword [ebp - 0x4e0], 0
je 0x1003a9e1
mov dword [ebp - 0x5bc], 0x43cdf98a
mov eax, dword [ebp - 0x5bc]
mov dword [ebp - 0x80], eax
mov byte [ebp - 0xb3], 0
movzx eax, byte [ebp - 0xb3]
test eax, eax
je 0x1003a9df
push 1
push 0
push 1
push 0x3780
push 0x703c
call fcn.1004054f
add esp, 0x14
jmp 0x1003aa56
push 1
push 0
lea eax, [ebp - 0x80]
push eax
push 0x3c9b
call fcn.10044e87
add esp, 0x10
mov dword [ebp - 0x80], 3
jmp 0x1003aa06
mov eax, dword [ebp - 0x80]
dec eax
mov dword [ebp - 0x80], eax
cmp dword [ebp - 0x80], 0
jl 0x1003aa56
mov dword [ebp - 0x4e8], 6
mov eax, dword [ebp - 0x80]
mov eax, dword [ebp + eax*4 - 0x990]
mov dword [ebp - 0x4e8], eax
mov byte [ebp - 0x7c], 0
movzx eax, byte [ebp - 0x7c]
test eax, eax
je 0x1003aa54
push 1
push 0xd7d
push 0x7e4f
push 1
push 0
push 0x4e3
push 0x3fae
call fcn.10034d94
add esp, 0x1c
jmp 0x1003a9ff
mov dword [ebp - 0x19c], 0
jmp 0x1003aa6f
mov eax, dword [ebp - 0x19c]
dec eax
mov dword [ebp - 0x19c], eax
cmp dword [ebp - 0x19c], 0xfffffffe
je 0x1003b6c0
mov dword [ebp - 0x62c], 0xffffffff
mov dword [ebp - 0x88], 0x633efc07
mov dword [ebp - 0x148], 0
jmp 0x1003aaa9
mov eax, dword [ebp - 0x148]
inc eax
mov dword [ebp - 0x148], eax
cmp dword [ebp - 0x148], 4
jge 0x1003aac5
mov eax, dword [ebp - 0x148]
mov dword [ebp + eax*4 - 0x9a0], 1
jmp 0x1003aa9c
cmp dword [ebp - 0x62c], 0
je 0x1003ab0c
mov dword [ebp - 0x4f0], 0x43cdf98a
mov eax, dword [ebp - 0x4f0]
mov dword [ebp - 0x88], eax
mov byte [ebp - 0x81], 0
push 1
push 0x4609
push 0x170f
push 0
push 0
lea eax, [ebp - 0x81]
push eax
call fcn.10045176
add esp, 0x18
jmp 0x1003ab82
push 0x6c22
push 0x377d
push 0
lea eax, [ebp - 0x88]
push eax
call fcn.10040c41
add esp, 0x10
mov dword [ebp - 0x88], 3
jmp 0x1003ab40
mov eax, dword [ebp - 0x88]
dec eax
mov dword [ebp - 0x88], eax
cmp dword [ebp - 0x88], 0
jl 0x1003ab82
mov dword [ebp - 0x5c4], 6
mov eax, dword [ebp - 0x88]
mov eax, dword [ebp + eax*4 - 0x9a0]
mov dword [ebp - 0x5c4], eax
mov byte [ebp - 0xae], 0
movzx eax, byte [ebp - 0xae]
test eax, eax
je 0x1003ab80
push 0
call fcn.1004062f
pop ecx
jmp 0x1003ab33
mov dword [ebp - 0xbc], 0xcfe04822
mov dword [ebp - 0x1a4], 0x61928c17
mov dword [ebp - 0x1a4], 0x11
jmp 0x1003abaf
mov eax, dword [ebp - 0x1a4]
dec eax
mov dword [ebp - 0x1a4], eax
cmp dword [ebp - 0x1a4], 0xffffffe2
jl 0x1003abdf
mov dword [ebp - 0x4f8], 4
push 0
push 0x2b1d
lea eax, [ebp - 0x4f8]
push eax
push 0x270f
call fcn.10040ed6
add esp, 0x10
jmp 0x1003aba2
mov dword [ebp - 0x64c], 3
mov dword [ebp - 0x508], 0
mov dword [ebp - 0x60c], 0x1cb9
cmp dword [ebp - 0x60c], 0x11ef
jge 0x1003ac85
lea eax, [ebp - 0x1f8]
push eax
push 0x1000dbe8
call fcn.1005030b
pop ecx
pop ecx
mov eax, dword [ebp - 0x1f8]
mov dword [ebp - 0x500], eax
mov eax, dword [ebp - 0x1f8]
dec eax
mov dword [ebp - 0x1f8], eax
cmp dword [ebp - 0x500], 0
je 0x1003ac85
lea eax, [ebp - 0x38c]
push eax
push 0x1000dbe8
call fcn.1005030b
pop ecx
pop ecx
cmp dword [ebp - 0x38c], 2
jle 0x1003ac6a
mov eax, dword [ebp - 0x38c]
dec eax
dec eax
mov dword [ebp - 0x28c], eax
jmp 0x1003ac71
and dword [ebp - 0x28c], 0
push dword [ebp - 0x28c]
push 0x1000df90
call fcn.10050c2e
pop ecx
pop ecx
jmp 0x1003ac1c
mov dword [ebp - 0x510], 0
mov dword [ebp - 0x5cc], 0xffffffff
push 0
push 0x752c
push 0x6860
push 1
lea eax, [ebp - 0x5cc]
push eax
lea eax, [ebp - 0x508]
push eax
push 1
lea eax, [ebp - 0x64c]
push eax
lea eax, [ebp - 0x510]
push eax
call fcn.1002a020
add esp, 0x24
mov byte [ebp - 0xaa], 0
movzx eax, byte [ebp - 0xaa]
test eax, eax
je 0x1003ad0b
push 0x4944
push 0x2e52
push 0
push 0x3da9
push 0x6eb2
push 0xd8e
push 1
push 0x247c
push 1
call fcn.10039fe7
add esp, 0x24
mov dword [ebp - 0x150], 0
jmp 0x1003ad24
mov eax, dword [ebp - 0x150]
inc eax
mov dword [ebp - 0x150], eax
cmp dword [ebp - 0x150], 4
jge 0x1003ad40
mov eax, dword [ebp - 0x150]
mov dword [ebp + eax*4 - 0x95c], 0xfffffff8
jmp 0x1003ad17
mov dword [ebp - 0x90], 0x256915a
mov dword [ebp - 0x208], 0
mov dword [ebp - 0x294], 0xcd7d393e
mov dword [ebp - 0x750], 0x1152
mov dword [ebp - 0x74c], 0x1152
mov dword [ebp - 0x748], 0x1152
mov dword [ebp - 0x744], 0x1152
mov dword [ebp - 0x78c], 0x7c5c6a81
mov dword [ebp - 0x158], 0x673ed132
mov dword [ebp - 0x50], 0
jmp 0x1003adaa
mov eax, dword [ebp - 0x50]
inc eax
mov dword [ebp - 0x50], eax
cmp dword [ebp - 0x50], 1
jge 0x1003adc0
mov eax, dword [ebp - 0x50]
mov dword [ebp + eax*4 - 0x3a4], 8
jmp 0x1003ada3
mov dword [ebp - 0x50], 0
jmp 0x1003add0
mov eax, dword [ebp - 0x50]
inc eax
mov dword [ebp - 0x50], eax
cmp dword [ebp - 0x50], 4
jge 0x1003ade6
mov eax, dword [ebp - 0x50]
mov dword [ebp + eax*4 - 0x93c], 0xfffffff8
jmp 0x1003adc9
mov dword [ebp - 0x90], 0
jmp 0x1003adff
mov eax, dword [ebp - 0x90]
inc eax
mov dword [ebp - 0x90], eax
cmp dword [ebp - 0x90], 0
jg 0x1003b1c9
mov dword [ebp - 0x614], 0xeea53061
mov dword [ebp - 0x5d4], 0x25ad
cmp dword [ebp - 0x5d4], 0xd3f
jge 0x1003afa9
lea eax, [ebp - 0x48c]
push eax
mov ecx, 0x1065cfb8
call fcn.10011ec8
cmp dword [ebp - 0x48c], 1
jne 0x1003aebf
lea eax, [ebp - 0x200]
push eax
mov ecx, 0x1065cfb8
call fcn.10011ec8
cmp dword [ebp - 0x200], 0xf
jne 0x1003ae81
push fcn.10016a49
mov edx, 0x1000e1e8
mov ecx, 0x1065cf10
call fcn.10016a7b
mov ecx, eax
call fcn.100124a9
jmp 0x1003aebf
cmp dword [ebp - 0x200], 0
jne 0x1003aea7
push fcn.10016a49
mov edx, 0x1000e1f0
mov ecx, 0x1065cf10
call fcn.10016a7b
mov ecx, eax
call fcn.100124a9
jmp 0x1003aebf
push fcn.10016a49
push 0xffffffffffffffff
mov ecx, 0x1065cf10
call fcn.100124b5
mov ecx, eax
call fcn.100124a9
and dword [ebp - 0x220], 0
jmp 0x1003aed5
mov eax, dword [ebp - 0x220]
inc eax
mov dword [ebp - 0x220], eax
mov eax, dword [ebp - 0x48c]
dec eax
dec eax
cmp dword [ebp - 0x220], eax
jge 0x1003aef8
lea eax, [ebp - 0x200]
push eax
mov ecx, 0x1065cfb8
call fcn.10011ec8
jmp 0x1003aec8
lea eax, [ebp - 0x23c]
push eax
lea eax, [ebp - 0x518]
push eax
mov ecx, 0x1065cfb8
call fcn.10011ec8
mov ecx, eax
call fcn.10011ec8
cmp dword [ebp - 0x23c], 0xf
jne 0x1003af3d
push fcn.10016a49
mov edx, 0x1000e1e8
mov ecx, 0x1065cf10
call fcn.10016a7b
mov ecx, eax
call fcn.100124a9
jmp 0x1003afa9
cmp dword [ebp - 0x23c], 0
jne 0x1003af63
push fcn.10016a49
mov edx, 0x1000e1f0
mov ecx, 0x1065cf10
call fcn.10016a7b
mov ecx, eax
call fcn.100124a9
jmp 0x1003afa9
mov eax, dword [ebp - 0x518]
cmp eax, dword [ebp - 0x23c]
jle 0x1003af8e
push fcn.10016a49
mov edx, 0x1000e1e8
mov ecx, 0x1065cf10
call fcn.10016a7b
mov ecx, eax
call fcn.100124a9
jmp 0x1003afa9
push fcn.10016a49
mov edx, 0x1000e1f0
mov ecx, 0x1065cf10
call fcn.10016a7b
mov ecx, eax
call fcn.100124a9
mov dword [ebp - 0x520], 0xdd9cd443
mov dword [ebp - 0x794], 0x5f19
mov dword [ebp - 0x1ac], 0
jmp 0x1003afd6
mov eax, dword [ebp - 0x1ac]
inc eax
mov dword [ebp - 0x1ac], eax
cmp dword [ebp - 0x1ac], 4
jge 0x1003aff2
mov eax, dword [ebp - 0x1ac]
mov dword [ebp + eax*4 - 0x94c], 0
jmp 0x1003afc9
mov eax, dword [ebp - 0x158]
dec eax
mov dword [ebp - 0x158], eax
jne 0x1003b026
mov eax, dword [ebp - 0x90]
mov eax, dword [ebp + eax*4 - 0x3a4]
mov dword [ebp - 0x208], eax
cmp dword [ebp - 0x208], 0
jne 0x1003b026
and dword [ebp - 0x394], 0
jmp 0x1003b030
mov dword [ebp - 0x394], 1
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x94c]
mov dword [ebp - 0x294], eax
mov eax, dword [ebp - 0x294]
cmp dword [ebp - 0x394], eax
jl 0x1003b05d
mov dword [ebp - 0x39c], 1
jmp 0x1003b064
and dword [ebp - 0x39c], 0
push 4
pop eax
imul eax, eax, 3
cmp dword [ebp + eax - 0x750], 0
je 0x1003b090
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x93c], 0
je 0x1003b090
mov dword [ebp - 0x29c], 1
jmp 0x1003b097
and dword [ebp - 0x29c], 0
mov eax, dword [ebp - 0x90]
cmp dword [ebp - 0x29c], eax
jle 0x1003b0b1
mov dword [ebp - 0x414], 1
jmp 0x1003b0b8
and dword [ebp - 0x414], 0
mov eax, dword [ebp - 0x414]
inc eax
cmp eax, 0x59af2c67
jl 0x1003b0d2
mov dword [ebp - 0x2a4], 1
jmp 0x1003b0d9
and dword [ebp - 0x2a4], 0
mov eax, dword [ebp - 0x2a4]
neg eax
cmp dword [ebp - 0x39c], eax
jg 0x1003b0f5
mov dword [ebp - 0x2ac], 1
jmp 0x1003b0fc
and dword [ebp - 0x2ac], 0
mov eax, dword [ebp - 0x614]
cmp dword [ebp - 0x2ac], eax
jg 0x1003b122
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0x93c], 0
jne 0x1003b122
and dword [ebp - 0x454], 0
jmp 0x1003b12c
mov dword [ebp - 0x454], 1
cmp dword [ebp - 0x454], 0xfffffff9
jb 0x1003b141
mov dword [ebp - 0x2b4], 1
jmp 0x1003b148
and dword [ebp - 0x2b4], 0
cmp dword [ebp - 0x2b4], 2
jbe 0x1003b15d
mov dword [ebp - 0x2bc], 1
jmp 0x1003b164
and dword [ebp - 0x2bc], 0
mov eax, dword [ebp - 0x90]
mov eax, dword [ebp + eax*4 - 0x3a4]
cmp eax, dword [ebp - 0x2bc]
jge 0x1003b185
mov dword [ebp - 0x41c], 1
jmp 0x1003b18c
and dword [ebp - 0x41c], 0
mov eax, dword [ebp - 0x520]
imul eax, dword [ebp - 0x41c]
cmp eax, 2
jge 0x1003b1aa
mov dword [ebp - 0x2c4], 1
jmp 0x1003b1b1
and dword [ebp - 0x2c4], 0
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x2c4]
mov dword [ebp + eax - 0x94c], ecx
jmp 0x1003adf2
push 0
lea eax, [ebp - 0x208]
push eax
push 0x633a
push 1
push 0x859
push 0x2a84
push 0x3cf
lea eax, [ebp - 0x158]
push eax
push 0
call fcn.1003ea6f
add esp, 0x24
mov dword [ebp - 0xbc], 3
jmp 0x1003b212
mov eax, dword [ebp - 0xbc]
dec eax
mov dword [ebp - 0xbc], eax
cmp dword [ebp - 0xbc], 0
jl 0x1003b6bb
mov dword [ebp - 0x160], 0xfffffffe
mov dword [ebp - 0x28], 0
mov dword [ebp - 0x24c], 0xffffffff
mov dword [ebp - 0x248], 0xffffffff
mov dword [ebp - 0x244], 0xffffffff
mov dword [ebp - 0x240], 0xffffffff
mov dword [ebp - 0x100], 0
mov dword [ebp - 0x2e4], 0x4ba09a16
mov dword [ebp - 0x1b4], 0
jmp 0x1003b285
mov eax, dword [ebp - 0x1b4]
inc eax
mov dword [ebp - 0x1b4], eax
cmp dword [ebp - 0x1b4], 4
jge 0x1003b2a1
mov eax, dword [ebp - 0x1b4]
mov dword [ebp + eax*4 - 0x9b0], 0x1e9a9d01
jmp 0x1003b278
mov eax, dword [ebp - 0x160]
mov dword [ebp - 0x28], eax
mov dword [ebp - 0x28], 0
jmp 0x1003b2ba
mov eax, dword [ebp - 0x28]
inc eax
mov dword [ebp - 0x28], eax
cmp dword [ebp - 0x28], 3
jg 0x1003b4ce
mov dword [ebp - 0x1bc], 0xddb74a71
push 0x262c
push 1
lea eax, [ebp - 0x100]
push eax
push 0
call fcn.10029ab5
add esp, 0x10
mov eax, dword [ebp - 0x28]
cmp dword [ebp + eax*4 - 0x24c], 0
je 0x1003b3db
mov eax, dword [ebp - 0x160]
mov ecx, dword [ebp - 0x28]
add eax, dword [ebp + ecx*4 - 0x24c]
imul eax, dword [ebp - 0x100]
test eax, eax
jne 0x1003b32a
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0x24c], 0
jne 0x1003b32a
and dword [ebp - 0x3ac], 0
jmp 0x1003b334
mov dword [ebp - 0x3ac], 1
mov eax, dword [ebp - 0x3ac]
mov dword [ebp - 0x1bc], eax
cmp dword [ebp - 0x1bc], 0
jne 0x1003b362
push 4
pop eax
imul eax, eax, 3
cmp dword [ebp + eax - 0x24c], 0
jne 0x1003b362
and dword [ebp - 0x2cc], 0
jmp 0x1003b36c
mov dword [ebp - 0x2cc], 1
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp + eax*4 - 0x24c]
imul eax, dword [ebp - 0x2cc]
cmp eax, dword [ebp - 0x160]
jg 0x1003b391
mov dword [ebp - 0x474], 1
jmp 0x1003b398
and dword [ebp - 0x474], 0
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp + eax*4 - 0x24c]
cmp dword [ebp - 0x474], eax
je 0x1003b3b6
mov dword [ebp - 0x2d4], 1
jmp 0x1003b3bd
and dword [ebp - 0x2d4], 0
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp + eax*4 - 0x24c]
add eax, dword [ebp - 0x2d4]
je 0x1003b3db
mov dword [ebp - 0x3b4], 1
jmp 0x1003b3e2
and dword [ebp - 0x3b4], 0
mov eax, dword [ebp - 0x3b4]
sub eax, dword [ebp - 0x160]
cmp eax, 8
jl 0x1003b3ff
mov dword [ebp - 0x5dc], 1
jmp 0x1003b406
and dword [ebp - 0x5dc], 0
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp + eax*4 - 0x24c]
mov dword [ebp - 0x79c], eax
mov eax, dword [ebp - 0x1bc]
mov dword [ebp - 0x7a4], eax
cmp dword [ebp - 0x1bc], 1
jle 0x1003b437
mov dword [ebp - 0x2dc], 1
jmp 0x1003b43e
and dword [ebp - 0x2dc], 0
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp + eax*4 - 0x24c]
imul ecx, dword [ebp - 0x2dc], 0x33e3
add eax, ecx
cmp eax, dword [ebp - 0x100]
jge 0x1003b468
mov dword [ebp - 0x424], 1
jmp 0x1003b46f
and dword [ebp - 0x424], 0
mov eax, dword [ebp - 0x424]
mov dword [ebp - 0x100], eax
mov eax, dword [ebp - 0x100]
mov dword [ebp - 0x2e4], eax
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp + eax*4 - 0x24c]
cmp dword [ebp - 0x2e4], eax
jne 0x1003b4a5
mov dword [ebp - 0x3bc], 1
jmp 0x1003b4ac
and dword [ebp - 0x3bc], 0
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x3bc]
sub ecx, dword [ebp + eax*4 - 0x24c]
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0x9b0], ecx
jmp 0x1003b2b3
mov eax, dword [ebp - 0xbc]
mov ecx, dword [ebp - 0xbc]
mov eax, dword [ebp + eax*4 - 0x95c]
mov dword [ebp + ecx*4 - 0x95c], eax
mov dword [ebp - 0xc4], 0
mov dword [ebp - 0x168], 0
jmp 0x1003b50b
mov eax, dword [ebp - 0x168]
inc eax
mov dword [ebp - 0x168], eax
cmp dword [ebp - 0x168], 1
jge 0x1003b527
mov eax, dword [ebp - 0x168]
mov dword [ebp + eax*4 - 0x2ec], 0xffffffff
jmp 0x1003b4fe
mov byte [ebp - 0xac], 0
movzx eax, byte [ebp - 0xac]
test eax, eax
je 0x1003b565
push 0x4106
push 1
push 1
push 0x10cf
push 0x183b
push 0x4ee0
push 0x6fca
push 0
push 0xfc2
call fcn.10035b0f
add esp, 0x24
mov dword [ebp - 0xc4], 0
jmp 0x1003b57e
mov eax, dword [ebp - 0xc4]
dec eax
mov dword [ebp - 0xc4], eax
cmp dword [ebp - 0xc4], 0
jl 0x1003b5c6
mov byte [ebp - 0x89], 0
movzx eax, byte [ebp - 0x89]
test eax, eax
je 0x1003b5aa
push 1
push 0x6ab9
push 0
call fcn.100398c7
add esp, 0xc
mov eax, dword [ebp - 0xc4]
mov ecx, dword [ebp - 0xc4]
mov eax, dword [ebp + eax*4 - 0x2ec]
mov dword [ebp + ecx*4 - 0x2ec], eax
jmp 0x1003b571
mov byte [ebp - 0xb0], 0
mov dword [ebp - 0x170], 0x62d5e48d
mov dword [ebp - 0x7ac], 0x83c8fc55
mov dword [ebp - 0x7b4], 3
push 1
lea ecx, [ebp - 0x82c]
call fcn.100126dc
mov dword [ebp - 4], 4
mov dword [ebp - 0x528], 0
mov dword [ebp - 0x1c4], 0
jmp 0x1003b622
mov eax, dword [ebp - 0x1c4]
inc eax
mov dword [ebp - 0x1c4], eax
cmp dword [ebp - 0x1c4], 1
jge 0x1003b641
push dword [ebp - 0x1c4]
lea ecx, [ebp - 0x82c]
call fcn.10012743
and dword [eax], 0
jmp 0x1003b615
mov dword [ebp - 0x170], 0
jmp 0x1003b65a
mov eax, dword [ebp - 0x170]
inc eax
mov dword [ebp - 0x170], eax
cmp dword [ebp - 0x170], 0x10
jg 0x1003b687
mov dword [ebp - 0x7bc], 0x2e6e7f73
push 0x2880
push 1
lea eax, [ebp - 0x528]
push eax
push 0
call fcn.1003a11c
add esp, 0x10
jmp 0x1003b64d
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x82c]
call fcn.1001273e
movzx eax, byte [ebp - 0xb0]
test eax, eax
je 0x1003b6b6
push 0
push 0x71f
push 0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringW]
jmp 0x1003b205
jmp 0x1003aa62
mov eax, dword [ebp - 0x190]
mov eax, dword [eax + 4]
mov dword [ebp - 0x3f0], eax
mov dword [ebp - 0x58], 0xac204e2d
mov dword [ebp - 0x58], 0xfffffff7
jmp 0x1003b6e6
mov eax, dword [ebp - 0x58]
inc eax
mov dword [ebp - 0x58], eax
cmp dword [ebp - 0x58], 0xfffffffa
jle 0x1003b724
mov dword [ebp - 0x63c], 0xffffffff
mov byte [ebp - 0x71], 0
movzx eax, byte [ebp - 0x71]
test eax, eax
je 0x1003b718
push 0x5f50
push 1
push 0x20d1
push 1
call fcn.10029ab5
add esp, 0x10
mov dword [ebp - 0x63c], 0x7ca0029b
jmp 0x1003b6df
mov dword [ebp - 0x58], 0x10
jmp 0x1003b734
mov eax, dword [ebp - 0x58]
dec eax
mov dword [ebp - 0x58], eax
cmp dword [ebp - 0x58], 0xffffffe2
jge 0x1003b7ee
mov dword [ebp - 0x178], 4
mov dword [ebp - 0x1cc], 0
jmp 0x1003b761
mov eax, dword [ebp - 0x1cc]
inc eax
mov dword [ebp - 0x1cc], eax
cmp dword [ebp - 0x1cc], 4
jge 0x1003b77d
mov eax, dword [ebp - 0x1cc]
mov dword [ebp + eax*4 - 0xa10], 0xffff
jmp 0x1003b754
mov dword [ebp - 0x178], 3
jmp 0x1003b796
mov eax, dword [ebp - 0x178]
dec eax
mov dword [ebp - 0x178], eax
cmp dword [ebp - 0x178], 0
jl 0x1003b7e9
mov dword [ebp - 0x1d4], 0
mov dword [ebp - 0x530], 0x884515fd
mov dword [ebp - 0x1d4], 3
jmp 0x1003b7cc
mov eax, dword [ebp - 0x1d4]
dec eax
mov dword [ebp - 0x1d4], eax
cmp dword [ebp - 0x1d4], 0
jl 0x1003b7e7
lea eax, [ebp - 0x530]
push eax
push 0
call fcn.1003ec2d
pop ecx
pop ecx
jmp 0x1003b7bf
jmp 0x1003b789
jmp 0x1003b72d
mov dword [ebp - 0x30], 2
mov dword [ebp - 0x538], 0x8169b2b2
mov dword [ebp - 0x920], 0x2bd68e48
mov dword [ebp - 0x91c], 0x2bd68e48
mov dword [ebp - 0x918], 0x2bd68e48
mov dword [ebp - 0x914], 0x2bd68e48
mov dword [ebp - 0x61c], 1
cmp dword [ebp - 0x30], 0
je 0x1003bce4
push 3
lea ecx, [ebp - 0x480]
call fcn.100126dc
mov dword [ebp - 4], 5
mov dword [ebp - 0x5e4], 0x7a0585c2
mov dword [ebp - 0x7c4], 0x48a24e22
mov dword [ebp - 0x7cc], 0xee0456bb
push 1
lea ecx, [ebp - 0x83c]
call fcn.100126dc
mov byte [ebp - 4], 6
mov dword [ebp - 0xf4], 0
jmp 0x1003b897
mov eax, dword [ebp - 0xf4]
inc eax
mov dword [ebp - 0xf4], eax
cmp dword [ebp - 0xf4], 3
jge 0x1003b8b9
push dword [ebp - 0xf4]
lea ecx, [ebp - 0x480]
call fcn.10012743
mov dword [eax], 0xf9b6917a
jmp 0x1003b88a
push 1
push 0
lea eax, [ebp - 0x83c]
push eax
lea eax, [ebp - 0xf4]
push eax
call fcn.1002eca1
add esp, 0x10
mov dword [ebp - 0x30], 0
jmp 0x1003b8e3
mov eax, dword [ebp - 0x30]
dec eax
mov dword [ebp - 0x30], eax
cmp dword [ebp - 0x30], 0xffffffe2
jl 0x1003bc9d
push 3
lea ecx, [ebp - 0x638]
call fcn.100126dc
mov byte [ebp - 4], 7
mov dword [ebp - 0x1dc], 0xf9e3d3b0
mov dword [ebp - 0x228], 0xbf7c2f5a
lea eax, [ebp - 0x638]
push eax
push 0
push 0x2694
lea eax, [ebp - 0x7d4]
push eax
call fcn.1004213e
add esp, 0x10
mov byte [ebp - 0x99], 0
movzx eax, byte [ebp - 0x99]
test eax, eax
je 0x1003b966
push 0x2aba
push 0x94e
push 0x7c7a
push 0
push 0x7166
push 1
push 0xc1c
call fcn.1003993e
add esp, 0x1c
push 2
lea ecx, [ebp - 0x638]
call fcn.10012743
cmp dword [eax], 0
je 0x1003ba86
push 0
lea ecx, [ebp - 0x638]
call fcn.10012743
push 1
lea ecx, [ebp - 0x480]
call fcn.10012743
mov dword [ebp - 0x1dc], 0
mov eax, dword [ebp - 0x1dc]
cmp dword [ebp - 0x30], eax
je 0x1003b9b7
mov dword [ebp - 0x45c], 1
jmp 0x1003b9be
and dword [ebp - 0x45c], 0
cmp dword [ebp - 0x45c], 0
jne 0x1003b9d4
push 0
lea ecx, [ebp - 0x638]
call fcn.10012743
mov eax, dword [ebp - 0x30]
add eax, 0x6721f7d
cmp eax, dword [ebp - 0x30]
jge 0x1003b9ff
push 1
lea ecx, [ebp - 0x480]
call fcn.10012743
cmp dword [eax], 0
je 0x1003b9ff
mov dword [ebp - 0x2f4], 1
jmp 0x1003ba06
and dword [ebp - 0x2f4], 0
push 1
lea ecx, [ebp - 0x480]
call fcn.10012743
mov ecx, dword [ebp - 0x2f4]
cmp ecx, dword [eax]
jge 0x1003ba2b
or eax, 0xffffffff
jne 0x1003ba2b
and dword [ebp - 0x3c4], 0
jmp 0x1003ba35
mov dword [ebp - 0x3c4], 1
mov eax, dword [ebp - 0x30]
cmp dword [ebp - 0x3c4], eax
je 0x1003ba4c
mov dword [ebp - 0x2fc], 1
jmp 0x1003ba53
and dword [ebp - 0x2fc], 0
mov eax, dword [ebp - 0x2fc]
mov dword [ebp - 0x228], eax
cmp dword [ebp - 0x228], 0xffffffff
jle 0x1003ba7a
push 1
lea ecx, [ebp - 0x480]
call fcn.10012743
cmp dword [eax], 0
je 0x1003ba86
mov dword [ebp - 0x42c], 1
jmp 0x1003ba8d
and dword [ebp - 0x42c], 0
cmp dword [ebp - 0x42c], 0xfe9f
jle 0x1003baa5
mov dword [ebp - 0x304], 1
jmp 0x1003baac
and dword [ebp - 0x304], 0
mov eax, dword [ebp - 0x30]
cmp dword [ebp - 0x304], eax
jge 0x1003bac3
mov dword [ebp - 0x3cc], 1
jmp 0x1003baca
and dword [ebp - 0x3cc], 0
cmp dword [ebp - 0x3cc], 0x8dac
je 0x1003bc71
mov dword [ebp - 0x110], 0xffffffff
mov byte [ebp - 0x91], 0
movzx eax, byte [ebp - 0x91]
test eax, eax
je 0x1003bb36
push 0x5561
push 1
push 0xbdd
push 0x374f
push 0x71a7
push 0x2076
push 0x8f9
push 0
push 0x7505
push 0x7304
push 0x5ac9
push 0x242f
push 1
call fcn.1002e8b8
add esp, 0x34
cmp dword [ebp - 0x30], 0
jne 0x1003bc1c
cmp dword [ebp - 0x228], 0
je 0x1003bb9d
cmp dword [ebp - 0x110], 0xe7ba
jge 0x1003bb61
mov dword [ebp - 0x30c], 1
jmp 0x1003bb68
and dword [ebp - 0x30c], 0
mov eax, dword [ebp - 0x110]
mov dword [ebp - 0x7dc], eax
mov eax, dword [ebp - 0x110]
mov dword [ebp - 0x7e4], eax
mov eax, dword [ebp - 0x110]
sub eax, dword [ebp - 0x30]
cmp dword [ebp - 0x30c], eax
jne 0x1003bb9d
mov dword [ebp - 0x488], 1
jmp 0x1003bba4
and dword [ebp - 0x488], 0
mov eax, dword [ebp - 0x488]
dec eax
jne 0x1003bbb9
mov dword [ebp - 0x314], 1
jmp 0x1003bbc0
and dword [ebp - 0x314], 0
mov eax, dword [ebp - 0x110]
add eax, dword [ebp - 0x314]
mov dword [ebp - 0x1dc], eax
mov eax, dword [ebp - 0x1dc]
mov dword [ebp - 0x7ec], eax
push 1
lea ecx, [ebp - 0x480]
call fcn.10012743
xor eax, eax
jne 0x1003bbf8
mov eax, 0x1209
test eax, eax
je 0x1003bc05
push 0
lea ecx, [ebp - 0x480]
call fcn.10012743
mov eax, 0xe198
neg eax
cmp eax, 0x1846e972
je 0x1003bc1c
and dword [ebp - 0x3d4], 0
jmp 0x1003bc26
mov dword [ebp - 0x3d4], 1
mov eax, dword [ebp - 0x30]
cmp dword [ebp - 0x3d4], eax
jle 0x1003bc3d
mov dword [ebp - 0x31c], 1
jmp 0x1003bc44
and dword [ebp - 0x31c], 0
cmp dword [ebp - 0x31c], 0x2db60270
jle 0x1003bc5c
mov dword [ebp - 0x434], 1
jmp 0x1003bc63
and dword [ebp - 0x434], 0
mov eax, dword [ebp - 0x434]
mov dword [ebp - 0x5e4], eax
jmp 0x1003bc89
push 1
push 0x2d65
push 0
lea eax, [ebp - 0x538]
push eax
call fcn.10029d6d
add esp, 0x10
mov byte [ebp - 4], 6
lea ecx, [ebp - 0x638]
call fcn.1001273e
jmp 0x1003b8dc
push 0xbef
lea eax, [ebp - 0x61c]
push eax
push 0x4ba0
push 1
push 0
push 0x1f7b
push 0xcf2
call fcn.10029f63
add esp, 0x1c
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x83c]
call fcn.1001273e
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x480]
call fcn.1001273e
jmp 0x1003bd0c
mov byte [ebp - 0xb2], 0
movzx eax, byte [ebp - 0xb2]
test eax, eax
je 0x1003bd0c
push 0x7160
push 0x34dd
push 1
push 0
call fcn.10034a8c
add esp, 0x10
mov eax, dword [ebp - 0x190]
mov eax, dword [eax]
mov ecx, dword [ebp - 0x190]
mov ecx, dword [ecx]
movzx ecx, word [ecx + 0x14]
lea eax, [eax + ecx + 0x18]
mov dword [ebp - 0x44], eax
mov dword [ebp - 0x188], 0
mov dword [ebp - 0x1b0], 0
jmp 0x1003bd4a
mov eax, dword [ebp - 0x1b0]
inc eax
mov dword [ebp - 0x1b0], eax
cmp dword [ebp - 0x1b0], 1
jge 0x1003bd66
mov eax, dword [ebp - 0x1b0]
mov dword [ebp + eax*4 - 0x540], 0x4a8c6a53
jmp 0x1003bd3d
mov dword [ebp - 0x188], 0
jmp 0x1003bd7f
mov eax, dword [ebp - 0x188]
dec eax
mov dword [ebp - 0x188], eax
cmp dword [ebp - 0x188], 0
jl 0x1003be53
push 3
lea ecx, [ebp - 0x4b0]
call fcn.100126dc
mov dword [ebp - 4], 8
mov dword [ebp - 0x1c8], 0
jmp 0x1003bdb9
mov eax, dword [ebp - 0x1c8]
inc eax
mov dword [ebp - 0x1c8], eax
cmp dword [ebp - 0x1c8], 3
jge 0x1003bddb
push dword [ebp - 0x1c8]
lea ecx, [ebp - 0x4b0]
call fcn.10012743
mov dword [eax], 0xb1891f78
jmp 0x1003bdac
push 1
lea ecx, [ebp - 0x4b0]
call fcn.10012743
and dword [eax], 0
jmp 0x1003be11
push 1
lea ecx, [ebp - 0x4b0]
call fcn.10012743
mov dword [ebp - 0x324], eax
mov eax, dword [ebp - 0x324]
mov eax, dword [eax]
inc eax
mov ecx, dword [ebp - 0x324]
mov dword [ecx], eax
push 1
lea ecx, [ebp - 0x4b0]
call fcn.10012743
cmp dword [eax], 1
jge 0x1003be3f
push 1
lea ecx, [ebp - 0x4b0]
call fcn.10012743
mov eax, dword [eax]
mov dword [ebp + eax*4 - 0x540], 0xcb03629a
jmp 0x1003bded
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x4b0]
call fcn.1001273e
jmp 0x1003bd72
mov byte [ebp - 0xa1], 0
movzx eax, byte [ebp - 0xa1]
test eax, eax
je 0x1003be85
push 0x3828
push 1
push 0x6612
push 0x29fb
push 0
push 0x54c4
call fcn.10039830
add esp, 0x18
and dword [ebp - 0x210], 0
jmp 0x1003bea4
mov eax, dword [ebp - 0x210]
inc eax
mov dword [ebp - 0x210], eax
mov eax, dword [ebp - 0x44]
add eax, 0x28
mov dword [ebp - 0x44], eax
mov eax, dword [ebp - 0x190]
mov eax, dword [eax]
movzx eax, word [eax + 6]
cmp dword [ebp - 0x210], eax
jge 0x1003e9cf
mov dword [ebp - 0x1b8], 1
mov dword [ebp - 0x238], 0xff40
mov dword [ebp - 0x5ec], 0x72759951
mov dword [ebp - 0x1b8], 0xffffffee
jmp 0x1003bef3
mov eax, dword [ebp - 0x1b8]
inc eax
mov dword [ebp - 0x1b8], eax
cmp dword [ebp - 0x1b8], 0xfffffff6
jg 0x1003bf6a
mov dword [ebp - 0x198], 1
mov dword [ebp - 0x198], 0
jmp 0x1003bf1f
mov eax, dword [ebp - 0x198]
dec eax
mov dword [ebp - 0x198], eax
cmp dword [ebp - 0x198], 0xfffffff2
jl 0x1003bf5a
mov dword [ebp - 0x238], 0x3b9da4d0
mov eax, dword [ebp - 0x238]
mov dword [ebp - 0x5ec], eax
mov byte [ebp - 0xb4], 0
movzx eax, byte [ebp - 0xb4]
test eax, eax
je 0x1003bf58
push 0
call fcn.10040a97
pop ecx
jmp 0x1003bf12
cmp dword [ebp - 0x238], 0
je 0x1003bf65
jmp 0x1003bf6a
jmp 0x1003bee6
mov eax, dword [ebp - 0x44]
cmp dword [eax + 0x10], 0
jne 0x1003dee8
mov dword [ebp - 0x14], 4
mov dword [ebp - 0x6cc], 0x80be39e3
mov dword [ebp - 0x6c8], 0x80be39e3
mov dword [ebp - 0x6c4], 0x80be39e3
mov dword [ebp - 0x6c0], 0x80be39e3
lea ecx, [ebp - 0x231]
call fcn.10012752
push eax
lea eax, [ebp - 0x6bc]
push eax
lea eax, [ebp - 0x6cc]
push eax
lea ecx, [ebp - 0x970]
call fcn.10012755
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0x84c]
call fcn.10012718
mov dword [ebp - 4], 9
mov dword [ebp - 0x3ec], 0x6ce1
mov dword [ebp - 0x1d8], 0
jmp 0x1003c005
mov eax, dword [ebp - 0x1d8]
inc eax
mov dword [ebp - 0x1d8], eax
cmp dword [ebp - 0x1d8], 3
jge 0x1003c021
mov eax, dword [ebp - 0x1d8]
mov dword [ebp + eax*4 - 0x258], 1
jmp 0x1003bff8
mov dword [ebp - 0x14], 2
jmp 0x1003c031
mov eax, dword [ebp - 0x14]
dec eax
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 0
jl 0x1003c1e5
mov dword [ebp - 0x33c], 0xfffffff8
mov dword [ebp - 0x548], 0xffffffff
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp + eax*4 - 0x258]
add eax, dword [ebp - 0x14]
jne 0x1003c067
mov eax, 0x7f5aee0c
test eax, eax
je 0x1003c074
mov eax, dword [ebp - 0x14]
cmp dword [ebp + eax*4 - 0x258], 0
jne 0x1003c08a
mov eax, dword [ebp - 0x14]
cmp dword [ebp + eax*4 - 0x258], 0
jne 0x1003c08a
and dword [ebp - 0x3dc], 0
jmp 0x1003c094
mov dword [ebp - 0x3dc], 1
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x3dc]
sub ecx, dword [ebp + eax - 0x258]
push 4
pop eax
shl eax, 0
sub ecx, dword [ebp + eax - 0x258]
jne 0x1003c0c5
cmp dword [ebp - 0x14], 0
jne 0x1003c0c5
and dword [ebp - 0x32c], 0
jmp 0x1003c0cf
mov dword [ebp - 0x32c], 1
cmp dword [ebp - 0x32c], 0xfffffffb
jb 0x1003c0e4
mov dword [ebp - 0x464], 1
jmp 0x1003c0eb
and dword [ebp - 0x464], 0
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp + eax*4 - 0x258]
cmp dword [ebp - 0x464], eax
jle 0x1003c109
mov dword [ebp - 0x334], 1
jmp 0x1003c110
and dword [ebp - 0x334], 0
mov eax, dword [ebp - 0x334]
sub eax, dword [ebp - 0x3ec]
sub eax, 0x5d
cmp eax, 0xb060
jl 0x1003c132
mov dword [ebp - 0x3e4], 1
jmp 0x1003c139
and dword [ebp - 0x3e4], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x258]
cmp dword [ebp - 0x3e4], eax
jne 0x1003c15a
mov dword [ebp - 0x43c], 1
jmp 0x1003c161
and dword [ebp - 0x43c], 0
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp + eax*4 - 0x258]
mov dword [ebp - 0x344], eax
push 2
lea ecx, [ebp - 0x84c]
call fcn.10012743
mov ecx, dword [ebp - 0x344]
mov dword [eax], ecx
mov dword [ebp - 0x33c], 1
mov eax, dword [ebp - 0x14]
mov ecx, dword [ebp - 0x33c]
sub ecx, dword [ebp - 0x43c]
imul ecx, dword [ebp - 0x344]
sub ecx, dword [ebp + eax*4 - 0x258]
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp + eax*4 - 0x258]
sub eax, ecx
cmp eax, dword [ebp - 0x3ec]
jl 0x1003c1cd
mov dword [ebp - 0x34c], 1
jmp 0x1003c1d4
and dword [ebp - 0x34c], 0
mov eax, dword [ebp - 0x34c]
mov dword [ebp - 0x548], eax
jmp 0x1003c02a
mov dword [ebp - 0x14], 0xfffffffd
jmp 0x1003c1f5
mov eax, dword [ebp - 0x14]
inc eax
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 0xe
jle 0x1003c24f
mov byte [ebp - 0xa9], 0
movzx eax, byte [ebp - 0xa9]
test eax, eax
je 0x1003c24d
push 0x4d3e
push 0x5f30
push 1
push 0x431c
push 0x847
push 0x2298
push 0x264
push 0x5262
push 0x5183
push 0x2915
push 0x4b77
push 0
push 1
call fcn.1002dde1
add esp, 0x34
jmp 0x1003c1ee
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x84c]
call fcn.1001273e
push 1
lea ecx, [ebp - 0x4a4]
call fcn.100126dc
mov dword [ebp - 4], 0xa
mov dword [ebp - 0x484], 0xad2086bd
mov dword [ebp - 0x354], 0xfffffff9
mov dword [ebp - 0x444], 0
push 2
lea ecx, [ebp - 0x6a0]
call fcn.100126dc
mov byte [ebp - 4], 0xb
mov dword [ebp - 0x558], 0xc4a87fce
push 0
push 0xedd
push 1
push 1
push 0x24c5
lea eax, [ebp - 0x4a4]
push eax
push 0x3353
push 0x4055
push 0x25e8
lea eax, [ebp - 0xdc]
push eax
push 0x6753
call fcn.1002b2fa
add esp, 0x2c
mov dword [ebp - 0xdc], 0
jmp 0x1003c2fe
mov eax, dword [ebp - 0xdc]
inc eax
mov dword [ebp - 0xdc], eax
cmp dword [ebp - 0xdc], 2
jge 0x1003c31a
mov eax, dword [ebp - 0xdc]
mov dword [ebp + eax*4 - 0x6a8], 0xffffffff
jmp 0x1003c2f1
push 1
push 0x510a
push 0
lea eax, [ebp - 0x6a0]
push eax
push 0x3f9e
push 0
push 0x6db1
lea eax, [ebp - 0xdc]
push eax
call fcn.10040824
add esp, 0x20
mov byte [ebp - 0xb6], 0
movzx eax, byte [ebp - 0xb6]
test eax, eax
je 0x1003c614
mov dword [ebp - 0x5fc], 0x18d5
cmp dword [ebp - 0x5fc], 0x41a
jge 0x1003c5e8
call fcn.1005019b
push 0x20
pop ecx
imul ecx, ecx, 0
add eax, ecx
push eax
push 0x1000e040
push 0x1000e044
call fcn.10051cdd
add esp, 0xc
call fcn.1005019b
push 0x20
pop ecx
shl ecx, 0
add eax, ecx
push eax
push 0x1000dc14
push 0x1000e04c
call fcn.10051cdd
add esp, 0xc
lea ecx, [ebp - 0x498]
call fcn.1001ba39
mov byte [ebp - 4], 0xc
push 0x35
push 1
lea eax, [ebp - 0x9e8]
push eax
call fcn.1001b868
add esp, 0xc
mov dword [ebp - 0x4b4], 2
lea eax, [ebp - 0x4b4]
push eax
lea ecx, [ebp - 0x498]
call fcn.1001ba46
xor eax, eax
inc eax
shl eax, 0
mov byte [ebp + eax - 0x9e8], 0
xor eax, eax
inc eax
imul eax, eax, 0
mov byte [ebp + eax - 0x9e8], 0
xor eax, eax
inc eax
shl eax, 1
mov byte [ebp + eax - 0x9e8], 1
mov dword [ebp - 0x98], 3
jmp 0x1003c436
mov eax, dword [ebp - 0x98]
inc eax
inc eax
mov dword [ebp - 0x98], eax
cmp dword [ebp - 0x98], 0x35
jge 0x1003c4a7
mov eax, dword [ebp - 0x98]
movzx eax, byte [ebp + eax - 0x9e8]
test eax, eax
je 0x1003c4a5
lea eax, [ebp - 0x98]
push eax
lea ecx, [ebp - 0x498]
call fcn.1001ba46
mov dword [ebp - 0x1a0], 2
jmp 0x1003c47c
mov eax, dword [ebp - 0x1a0]
inc eax
mov dword [ebp - 0x1a0], eax
mov eax, dword [ebp - 0x1a0]
imul eax, dword [ebp - 0x98]
cmp eax, 0x35
jge 0x1003c4a5
mov eax, dword [ebp - 0x98]
imul eax, dword [ebp - 0x1a0]
mov byte [ebp + eax - 0x9e8], 0
jmp 0x1003c46f
jmp 0x1003c428
xor eax, eax
inc eax
je 0x1003c5d9
lea eax, [ebp - 0x64]
push eax
mov ecx, 0x1065cfb8
call fcn.10011ec8
cmp dword [ebp - 0x64], 0
jne 0x1003c4c9
jmp 0x1003c5d9
and dword [ebp - 0x108], 0
mov eax, dword [ebp - 0x64]
mov dword [ebp - 0x5f4], eax
and dword [ebp - 0xcc], 0
jmp 0x1003c4ef
mov eax, dword [ebp - 0xcc]
inc eax
mov dword [ebp - 0xcc], eax
push dword [ebp - 0xcc]
lea ecx, [ebp - 0x498]
call fcn.10012743
cvtsi2sd xmm0, dword [eax]
mov ecx, dword [ebp - 0x64]
movsd qword [ebp - 0x880], xmm0
call fcn.1004642c
movsd xmm1, qword [ebp - 0x880]
comisd xmm0, xmm1
jb 0x1003c58c
push dword [ebp - 0xcc]
lea ecx, [ebp - 0x498]
call fcn.10012743
mov ecx, eax
mov eax, dword [ebp - 0x64]
cdq
idiv dword [ecx]
test edx, edx
jne 0x1003c587
push dword [ebp - 0xcc]
lea ecx, [ebp - 0x498]
call fcn.10012743
mov ecx, eax
mov eax, dword [ebp - 0x64]
cdq
idiv dword [ecx]
test edx, edx
jne 0x1003c57a
push dword [ebp - 0xcc]
lea ecx, [ebp - 0x498]
call fcn.10012743
mov ecx, eax
mov eax, dword [ebp - 0x64]
cdq
idiv dword [ecx]
mov dword [ebp - 0x64], eax
jmp 0x1003c53f
mov eax, dword [ebp - 0x108]
inc eax
mov dword [ebp - 0x108], eax
jmp 0x1003c4e2
cmp dword [ebp - 0x64], 1
je 0x1003c59f
mov eax, dword [ebp - 0x108]
inc eax
mov dword [ebp - 0x108], eax
push fcn.10016a49
push dword [ebp - 0x108]
push dword [ebp - 0x5f4]
mov ecx, 0x1065cf10
call fcn.100124b5
mov edx, 0x1000e1f4
mov ecx, eax
call fcn.10016a7b
mov ecx, eax
call fcn.100124b5
mov ecx, eax
call fcn.100124a9
jmp 0x1003c4a7
mov byte [ebp - 4], 0xb
lea ecx, [ebp - 0x498]
call fcn.1001273e
push 1
push 0x7099
push 0x3ee2
push 0
push 0x2a3d
push 0x2c93
push 1
push 0x5ecb
push 0x5945
call fcn.1002a020
add esp, 0x24
push 0
lea ecx, [ebp - 0x4a4]
call fcn.10012743
mov eax, dword [eax]
mov dword [ebp - 0x484], eax
mov eax, dword [ebp - 0x484]
mov dword [ebp - 0x3f4], eax
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x3f4]
mov dword [ebp + eax - 0x6a8], ecx
mov dword [ebp - 0x354], 0xd2703d9b
mov eax, dword [ebp - 0x354]
cmp dword [ebp - 0x3f4], eax
jl 0x1003c66c
mov dword [ebp - 0x35c], 1
jmp 0x1003c673
and dword [ebp - 0x35c], 0
push 0
lea ecx, [ebp - 0x4a4]
call fcn.10012743
cmp dword [eax], 0
jne 0x1003c6ad
push 0
lea ecx, [ebp - 0x4a4]
call fcn.10012743
push 0
lea ecx, [ebp - 0x4a4]
call fcn.10012743
cmp dword [eax], 0
jne 0x1003c6ad
and dword [ebp - 0x364], 0
jmp 0x1003c6b7
mov dword [ebp - 0x364], 1
mov eax, dword [ebp - 0x35c]
mov dword [ebp - 0x444], eax
mov esi, dword [ebp - 0x444]
push 0
lea ecx, [ebp - 0x4a4]
call fcn.10012743
imul esi, dword [eax]
cmp esi, dword [ebp - 0x364]
je 0x1003c6ef
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x6a8], 0
push 1
lea ecx, [ebp - 0x6a0]
call fcn.10012743
mov esi, eax
push 0
lea ecx, [ebp - 0x6a0]
call fcn.10012743
mov ecx, dword [esi]
cmp ecx, dword [eax]
jge 0x1003c71d
mov dword [ebp - 0x3fc], 1
jmp 0x1003c724
and dword [ebp - 0x3fc], 0
mov eax, dword [ebp - 0x3fc]
mov dword [ebp - 0x558], eax
mov byte [ebp - 4], 0xa
lea ecx, [ebp - 0x6a0]
call fcn.1001273e
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x4a4]
call fcn.1001273e
mov dword [ebp - 0xf8], 1
mov dword [ebp - 0x5a0], 0x2f9d
push 4
lea ecx, [ebp - 0x860]
call fcn.100126dc
mov dword [ebp - 4], 0xd
push 1
lea eax, [ebp - 0x860]
push eax
push 0x7447
push 0
lea eax, [ebp - 0x7f4]
push eax
call fcn.1002a3b4
add esp, 0x14
mov dword [ebp - 0x600], 0x21cd
cmp dword [ebp - 0x600], 0x4ed
jge 0x1003c8cd
and dword [ebp - 0x1ec], 0
lea eax, [ebp - 0x1ec]
push eax
push 0x1000df8c
call fcn.1005030b
pop ecx
pop ecx
mov byte [ebp - 0x19], 1
cmp dword [ebp - 0x1ec], 5
jne 0x1003c8ad
mov byte [ebp - 0x19], 0
and dword [ebp - 0x6e0], 0
xor eax, eax
lea edi, [ebp - 0x6dc]
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
and dword [ebp - 0x1e4], 0
jmp 0x1003c807
mov eax, dword [ebp - 0x1e4]
inc eax
mov dword [ebp - 0x1e4], eax
mov eax, dword [ebp - 0x1e4]
cmp eax, dword [ebp - 0x1ec]
jge 0x1003c876
and dword [ebp - 0x1f4], 0
and dword [ebp - 0x1fc], 0
lea eax, [ebp - 0x1fc]
push eax
lea eax, [ebp - 0x1f4]
push eax
push 0x1000dfbc
call fcn.1005030b
add esp, 0xc
mov eax, dword [ebp - 0x1f4]
mov eax, dword [ebp + eax*4 - 0x6e4]
inc eax
mov ecx, dword [ebp - 0x1f4]
mov dword [ebp + ecx*4 - 0x6e4], eax
mov eax, dword [ebp - 0x1fc]
mov eax, dword [ebp + eax*4 - 0x6e4]
inc eax
mov ecx, dword [ebp - 0x1fc]
mov dword [ebp + ecx*4 - 0x6e4], eax
jmp 0x1003c7fa
and dword [ebp - 0x130], 0
jmp 0x1003c88c
mov eax, dword [ebp - 0x130]
inc eax
mov dword [ebp - 0x130], eax
cmp dword [ebp - 0x130], 5
jge 0x1003c8ad
mov eax, dword [ebp - 0x130]
cmp dword [ebp + eax*4 - 0x6e0], 2
je 0x1003c8ab
mov byte [ebp - 0x19], 1
jmp 0x1003c8ad
jmp 0x1003c87f
movzx eax, byte [ebp - 0x19]
test eax, eax
je 0x1003c8c2
push 0x1000e1f8
call fcn.10051226
pop ecx
jmp 0x1003c8cd
push 0x1000e1fc
call fcn.10051226
pop ecx
push 1
push 0
push 0x3044
push 0x688f
call fcn.10034b1d
add esp, 0x10
mov byte [ebp - 0xab], 0
push 1
lea eax, [ebp - 0xab]
push eax
push 0x5cd3
push 0x7ea
push 0
call fcn.1002e5ec
add esp, 0x14
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x860]
call fcn.1001273e
mov dword [ebp - 0x5d8], 0x4ccfd66c
mov dword [ebp - 0x1c0], 0
jmp 0x1003c939
mov eax, dword [ebp - 0x1c0]
inc eax
mov dword [ebp - 0x1c0], eax
cmp dword [ebp - 0x1c0], 3
jge 0x1003c955
mov eax, dword [ebp - 0x1c0]
mov dword [ebp + eax*4 - 0xa00], 0
jmp 0x1003c92c
push 1
lea ecx, [ebp - 0x648]
call fcn.100126dc
mov dword [ebp - 4], 0xe
mov dword [ebp - 0x5c], 0
mov dword [ebp - 0x36c], 0x3607a988
mov dword [ebp - 0x5a4], 0
mov dword [ebp - 0x11c], 0xafbd13d
lea eax, [ebp - 0x648]
push eax
push 0x75d4
push 0x273a
push 1
lea eax, [ebp - 0x7fc]
push eax
push 0x1630
push 0x29c8
push 0x2c69
push 1
call fcn.10029bf3
add esp, 0x24
mov dword [ebp - 0x5c], 0
jmp 0x1003c9d1
mov eax, dword [ebp - 0x5c]
dec eax
mov dword [ebp - 0x5c], eax
cmp dword [ebp - 0x5c], 0
jl 0x1003cae4
mov dword [ebp - 0x36c], 0xfffffffe
mov eax, dword [ebp - 0x36c]
cmp dword [ebp - 0x5c], eax
jl 0x1003c9fc
mov dword [ebp - 0x560], 1
jmp 0x1003ca03
and dword [ebp - 0x560], 0
push dword [ebp - 0x5c]
lea ecx, [ebp - 0x648]
call fcn.10012743
push dword [ebp - 0x5c]
lea ecx, [ebp - 0x648]
call fcn.10012743
cmp dword [eax], 0xcef9
je 0x1003ca3c
cmp dword [ebp - 0x5a4], 0
je 0x1003ca3c
mov dword [ebp - 0x46c], 1
jmp 0x1003ca43
and dword [ebp - 0x46c], 0
push dword [ebp - 0x5c]
lea ecx, [ebp - 0x648]
call fcn.10012743
mov ecx, dword [ebp - 0x46c]
cmp ecx, dword [eax]
je 0x1003ca67
mov dword [ebp - 0x568], 1
jmp 0x1003ca6e
and dword [ebp - 0x568], 0
xor eax, eax
cmp eax, 1
jne 0x1003ca81
mov dword [ebp - 0x374], 1
jmp 0x1003ca88
and dword [ebp - 0x374], 0
mov eax, dword [ebp - 0x374]
mov dword [ebp - 0x11c], eax
mov dword [ebp - 0x11c], 0
jmp 0x1003caad
mov eax, dword [ebp - 0x11c]
inc eax
mov dword [ebp - 0x11c], eax
cmp dword [ebp - 0x11c], 0
jg 0x1003cadf
mov byte [ebp - 0x72], 0
movzx eax, byte [ebp - 0x72]
test eax, eax
je 0x1003cadd
push 1
push 0x51b9
push 0x3db5
push 0
push 0x5c9d
call fcn.1002a2f5
add esp, 0x14
jmp 0x1003caa0
jmp 0x1003c9ca
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x648]
call fcn.1001273e
mov dword [ebp - 0xf8], 0
jmp 0x1003cb0c
mov eax, dword [ebp - 0xf8]
inc eax
mov dword [ebp - 0xf8], eax
cmp dword [ebp - 0xf8], 2
jg 0x1003d7e2
mov dword [ebp - 0x184], 0xb51dba33
mov dword [ebp - 0x20], 0xfff6
mov dword [ebp - 0x38], 1
push 3
lea ecx, [ebp - 0x6ec]
call fcn.100126dc
mov dword [ebp - 4], 0xf
mov dword [ebp - 0x1a8], 0
jmp 0x1003cb5e
mov eax, dword [ebp - 0x1a8]
inc eax
mov dword [ebp - 0x1a8], eax
cmp dword [ebp - 0x1a8], 3
jge 0x1003cb80
push dword [ebp - 0x1a8]
lea ecx, [ebp - 0x6ec]
call fcn.10012743
mov dword [eax], 0x638299fa
jmp 0x1003cb51
mov eax, dword [ebp - 0x20]
sub eax, 0xffff
mov dword [ebp - 0x38], eax
jne 0x1003cba9
mov eax, dword [ebp - 0x20]
add eax, dword [ebp - 0x38]
cmp eax, dword [ebp - 0x20]
mov eax, 0x38dc5336
sub eax, dword [ebp - 0x20]
jne 0x1003cba9
and dword [ebp - 0x404], 0
jmp 0x1003cbb3
mov dword [ebp - 0x404], 1
mov eax, dword [ebp - 0x20]
cmp eax, dword [ebp - 0x404]
je 0x1003cbca
mov dword [ebp - 0x260], 1
jmp 0x1003cbd1
and dword [ebp - 0x260], 0
mov eax, dword [ebp - 0x20]
cmp eax, dword [ebp - 0x260]
je 0x1003cbe8
mov dword [ebp - 0x268], 1
jmp 0x1003cbef
and dword [ebp - 0x268], 0
mov eax, dword [ebp - 0x20]
cmp dword [ebp - 0x268], eax
jg 0x1003cc71
mov dword [ebp - 0x20], 0x1b
jmp 0x1003cc0a
mov eax, dword [ebp - 0x20]
inc eax
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 0x2c
jne 0x1003cc6c
mov byte [ebp - 0x73], 0
movzx eax, byte [ebp - 0x73]
test eax, eax
je 0x1003cc48
push 0x41a3
push 0
push 0
push 0x1be3
push 0x729f
push 0x3279
push 0x1207
push 1
push 0x545a
call fcn.10035b0f
add esp, 0x24
mov byte [ebp - 0x75], 0
movzx eax, byte [ebp - 0x75]
test eax, eax
je 0x1003cc6a
push 0x3777
push 0x79f9
push 0
push 0
call fcn.100344fc
add esp, 0x10
jmp 0x1003cc03
jmp 0x1003ceae
push 1
lea ecx, [ebp - 0x694]
call fcn.100126dc
mov byte [ebp - 4], 0x10
mov dword [ebp - 0x1d0], 0
jmp 0x1003cc9b
mov eax, dword [ebp - 0x1d0]
inc eax
mov dword [ebp - 0x1d0], eax
cmp dword [ebp - 0x1d0], 1
jge 0x1003ccbd
push dword [ebp - 0x1d0]
lea ecx, [ebp - 0x694]
call fcn.10012743
mov dword [eax], 0xffff
jmp 0x1003cc8e
mov dword [ebp - 0x38], 0
jmp 0x1003cccd
mov eax, dword [ebp - 0x38]
dec eax
mov dword [ebp - 0x38], eax
cmp dword [ebp - 0x38], 0
jl 0x1003ce9f
mov dword [ebp - 0x17c], 0
jmp 0x1003ccf0
mov eax, dword [ebp - 0x17c]
inc eax
mov dword [ebp - 0x17c], eax
cmp dword [ebp - 0x17c], 2
jge 0x1003cd0c
mov eax, dword [ebp - 0x17c]
mov dword [ebp + eax*4 - 0x59c], 0xfffffffd
jmp 0x1003cce3
mov dword [ebp - 0x20], 0
jmp 0x1003cd1c
mov eax, dword [ebp - 0x20]
inc eax
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 0
jg 0x1003ce44
push 2
lea ecx, [ebp - 0x658]
call fcn.100126dc
mov byte [ebp - 4], 0x11
lea eax, [ebp - 0x804]
push eax
push 0x2ae1
push 0
push 0x1978
lea eax, [ebp - 0x658]
push eax
push 0
call fcn.10034855
add esp, 0x18
push 1
lea ecx, [ebp - 0x658]
call fcn.10012743
and dword [eax], 0
jmp 0x1003cd91
push 1
lea ecx, [ebp - 0x658]
call fcn.10012743
mov dword [ebp - 0x270], eax
mov eax, dword [ebp - 0x270]
mov eax, dword [eax]
inc eax
mov ecx, dword [ebp - 0x270]
mov dword [ecx], eax
push 1
lea ecx, [ebp - 0x658]
call fcn.10012743
cmp dword [eax], 0
jg 0x1003ce30
mov dword [ebp - 0x5a8], 0xbd18
push dword [ebp - 0x38]
lea ecx, [ebp - 0x694]
call fcn.10012743
cmp dword [eax], 0x4d07
je 0x1003cdd3
mov dword [ebp - 0x278], 1
jmp 0x1003cdda
and dword [ebp - 0x278], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x278]
mov dword [ebp + eax - 0x59c], ecx
push dword [ebp - 0x38]
lea ecx, [ebp - 0x694]
call fcn.10012743
push 4
pop ecx
shl ecx, 0
mov ecx, dword [ebp + ecx - 0x59c]
cmp dword [eax], ecx
jl 0x1003ce18
mov dword [ebp - 0x280], 1
jmp 0x1003ce1f
and dword [ebp - 0x280], 0
mov eax, dword [ebp - 0x280]
mov dword [ebp - 0x5a8], eax
jmp 0x1003cd6d
mov byte [ebp - 4], 0x10
lea ecx, [ebp - 0x658]
call fcn.1001273e
jmp 0x1003cd15
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x59c]
cmp dword [ebp - 0x38], eax
jge 0x1003ce62
mov dword [ebp - 0x288], 1
jmp 0x1003ce69
and dword [ebp - 0x288], 0
cmp dword [ebp - 0x288], 7
ja 0x1003ce7e
mov dword [ebp - 0x290], 1
jmp 0x1003ce85
and dword [ebp - 0x290], 0
push 1
lea ecx, [ebp - 0x6ec]
call fcn.10012743
mov ecx, dword [ebp - 0x290]
mov dword [eax], ecx
jmp 0x1003ccc6
mov byte [ebp - 4], 0xf
lea ecx, [ebp - 0x694]
call fcn.1001273e
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x6ec]
call fcn.1001273e
mov dword [ebp - 0x184], 0
jmp 0x1003ced6
mov eax, dword [ebp - 0x184]
inc eax
mov dword [ebp - 0x184], eax
cmp dword [ebp - 0x184], 2
jg 0x1003d7dd
push 2
lea ecx, [ebp - 0x12c]
call fcn.100126dc
mov dword [ebp - 4], 0x12
mov dword [ebp - 0x204], 0xda862840
mov dword [ebp - 0x80c], 0x23cb8e00
mov dword [ebp - 0x774], 0x3c3fa3c
push 3
lea ecx, [ebp - 0x898]
call fcn.100126dc
mov byte [ebp - 4], 0x13
mov dword [ebp - 0x134], 0x5296947a
mov dword [ebp - 0x2e8], 1
mov dword [ebp - 0x10], 0
jmp 0x1003cf4a
mov eax, dword [ebp - 0x10]
inc eax
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], 4
jge 0x1003cf60
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0x770], 0xc93b4e1
jmp 0x1003cf43
mov dword [ebp - 0x10], 0
jmp 0x1003cf70
mov eax, dword [ebp - 0x10]
inc eax
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], 2
jge 0x1003cf8c
push dword [ebp - 0x10]
lea ecx, [ebp - 0x12c]
call fcn.10012743
mov dword [eax], 0x643cdf98
jmp 0x1003cf69
mov dword [ebp - 0x10], 0
jmp 0x1003cf9c
mov eax, dword [ebp - 0x10]
inc eax
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], 1
jge 0x1003cfb2
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0x2f0], 0x5e45db0f
jmp 0x1003cf95
mov dword [ebp - 0x10], 0
jmp 0x1003cfc2
mov eax, dword [ebp - 0x10]
inc eax
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], 3
jge 0x1003cfde
push dword [ebp - 0x10]
lea ecx, [ebp - 0x898]
call fcn.10012743
mov dword [eax], 0xb60f9aa2
jmp 0x1003cfbb
push 1
lea ecx, [ebp - 0x12c]
call fcn.10012743
mov dword [eax], 3
jmp 0x1003d017
push 1
lea ecx, [ebp - 0x12c]
call fcn.10012743
mov dword [ebp - 0x298], eax
mov eax, dword [ebp - 0x298]
mov eax, dword [eax]
dec eax
mov ecx, dword [ebp - 0x298]
mov dword [ecx], eax
push 1
lea ecx, [ebp - 0x12c]
call fcn.10012743
cmp dword [eax], 0
jl 0x1003d361
mov dword [ebp - 0xa0], 0x2d91509c
mov dword [ebp - 0x8e4], 0x656540f2
mov dword [ebp - 0x2d0], 0xfffffff8
mov dword [ebp - 0x8ec], 0xffffffff
mov dword [ebp - 0x580], 6
push 3
lea ecx, [ebp - 0x728]
call fcn.100126dc
mov byte [ebp - 4], 0x14
mov dword [ebp - 0x18c], 0
jmp 0x1003d089
mov eax, dword [ebp - 0x18c]
inc eax
mov dword [ebp - 0x18c], eax
cmp dword [ebp - 0x18c], 3
jge 0x1003d0ab
push dword [ebp - 0x18c]
lea ecx, [ebp - 0x728]
call fcn.10012743
mov dword [eax], 0x1131e34f
jmp 0x1003d07c
push 1
lea ecx, [ebp - 0x12c]
call fcn.10012743
mov eax, dword [eax]
mov eax, dword [ebp + eax*4 - 0x770]
mov dword [ebp - 0x2a0], eax
push 1
lea ecx, [ebp - 0x12c]
call fcn.10012743
mov eax, dword [eax]
mov ecx, dword [ebp - 0x2a0]
mov dword [ebp + eax*4 - 0x770], ecx
mov eax, dword [ebp - 0xa0]
cmp dword [ebp - 0x2a0], eax
jle 0x1003d0fd
mov dword [ebp - 0x2a8], 1
jmp 0x1003d104
and dword [ebp - 0x2a8], 0
mov eax, dword [ebp - 0xa0]
cmp dword [ebp - 0x2a8], eax
jle 0x1003d11e
mov dword [ebp - 0x570], 1
jmp 0x1003d125
and dword [ebp - 0x570], 0
push 1
lea ecx, [ebp - 0x12c]
call fcn.10012743
mov eax, dword [ebp - 0xa0]
mov dword [ebp - 0x8f4], eax
push 1
lea ecx, [ebp - 0x12c]
call fcn.10012743
mov esi, eax
push 0
lea ecx, [ebp - 0x12c]
call fcn.10012743
mov ecx, dword [esi]
cmp ecx, dword [eax]
jge 0x1003d16c
mov dword [ebp - 0x2b0], 1
jmp 0x1003d173
and dword [ebp - 0x2b0], 0
mov eax, dword [ebp - 0xa0]
cmp dword [ebp - 0x2b0], eax
jge 0x1003d18d
mov dword [ebp - 0x2b8], 1
jmp 0x1003d194
and dword [ebp - 0x2b8], 0
mov eax, 0x63e31551
sub eax, dword [ebp - 0x2b8]
mov dword [ebp - 0x204], eax
push 0
lea ecx, [ebp - 0x12c]
call fcn.10012743
cmp dword [eax], 0
jne 0x1003d311
cmp dword [ebp - 0x2d0], 0x83ce7179
je 0x1003d1d3
mov dword [ebp - 0x2c0], 1
jmp 0x1003d1da
and dword [ebp - 0x2c0], 0
mov eax, dword [ebp - 0x134]
mov dword [ebp - 0x5b0], eax
mov eax, dword [ebp - 0x2c0]
mov dword [ebp - 0x578], eax
mov eax, dword [ebp - 0x134]
dec eax
mov dword [ebp - 0x134], eax
mov eax, dword [ebp - 0x5b0]
cmp eax, dword [ebp - 0x578]
jle 0x1003d219
mov dword [ebp - 0x2c8], 1
jmp 0x1003d220
and dword [ebp - 0x2c8], 0
push 1
lea ecx, [ebp - 0x12c]
call fcn.10012743
mov eax, dword [eax]
mov eax, dword [ebp + eax*4 - 0x770]
cmp dword [ebp - 0x2c8], eax
jle 0x1003d24a
mov dword [ebp - 0x5b8], 1
jmp 0x1003d251
and dword [ebp - 0x5b8], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x2f0]
mov dword [ebp - 0x8fc], eax
mov eax, dword [ebp - 0x2d0]
cmp dword [ebp - 0xa0], eax
je 0x1003d27e
mov dword [ebp - 0x2d8], 1
jmp 0x1003d285
and dword [ebp - 0x2d8], 0
mov eax, dword [ebp - 0xa0]
mov dword [ebp - 0x204], eax
mov eax, dword [ebp - 0x204]
mov ecx, dword [ebp - 0x580]
imul ecx, dword [ebp - 0x2d8]
sub eax, ecx
cmp eax, dword [ebp - 0xa0]
jle 0x1003d2c3
cmp dword [ebp - 0x134], 0
je 0x1003d2c3
mov dword [ebp - 0x5c0], 1
jmp 0x1003d2ca
and dword [ebp - 0x5c0], 0
push 1
lea ecx, [ebp - 0x12c]
call fcn.10012743
mov eax, dword [eax]
mov eax, dword [ebp + eax*4 - 0x770]
mov dword [ebp - 0x904], eax
push 0
lea ecx, [ebp - 0x728]
call fcn.10012743
mov esi, eax
push 1
lea ecx, [ebp - 0x12c]
call fcn.10012743
mov ecx, dword [esi]
cmp ecx, dword [eax]
jl 0x1003d311
and dword [ebp - 0x2e0], 0
jmp 0x1003d31b
mov dword [ebp - 0x2e0], 1
imul esi, dword [ebp - 0x2e0], 0xf970
push 1
lea ecx, [ebp - 0x12c]
call fcn.10012743
add esi, dword [eax]
mov dword [ebp - 0x2e8], esi
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x2e8]
mov dword [ebp + eax - 0x2f0], ecx
mov byte [ebp - 4], 0x13
lea ecx, [ebp - 0x728]
call fcn.1001273e
jmp 0x1003cff3
mov byte [ebp - 4], 0x12
lea ecx, [ebp - 0x898]
call fcn.1001273e
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x12c]
call fcn.1001273e
mov byte [ebp - 0xb1], 0
mov dword [ebp - 0x60], 0xfff7
mov dword [ebp - 0x6b8], 0xfffffffa
mov dword [ebp - 0x6b4], 0xfffffffa
mov dword [ebp - 0x6b0], 0xfffffffa
mov dword [ebp - 0x6ac], 0xfffffffa
mov dword [ebp - 0x308], 0x335c0de4
mov dword [ebp - 0xd4], 0xfffffff9
mov dword [ebp - 0xec], 1
mov dword [ebp - 0x90c], 0
mov eax, dword [ebp - 0x60]
neg eax
cmp eax, dword [ebp - 0x60]
jg 0x1003d3f3
mov dword [ebp - 0x2f8], 1
jmp 0x1003d3fa
and dword [ebp - 0x2f8], 0
mov eax, dword [ebp - 0x60]
cmp eax, dword [ebp - 0x2f8]
je 0x1003d411
mov dword [ebp - 0x318], 1
jmp 0x1003d418
and dword [ebp - 0x318], 0
cmp dword [ebp - 0x60], 1
jg 0x1003d42a
mov dword [ebp - 0x300], 1
jmp 0x1003d431
and dword [ebp - 0x300], 0
imul eax, dword [ebp - 0x300], 0xfffffffb
cmp eax, 0x5ac3d6c1
jl 0x1003d457
cmp dword [ebp - 0x60], 0
je 0x1003d457
cmp dword [ebp - 0x60], 0
je 0x1003d457
mov dword [ebp - 0x588], 1
jmp 0x1003d45e
and dword [ebp - 0x588], 0
mov eax, dword [ebp - 0x308]
mov dword [ebp - 0x900], eax
mov eax, dword [ebp - 0xd4]
mov dword [ebp - 0x868], eax
cmp dword [ebp - 0x308], 0xfffffffc
jge 0x1003d48b
mov dword [ebp - 0x310], 1
jmp 0x1003d492
and dword [ebp - 0x310], 0
cmp dword [ebp - 0x310], 1
ja 0x1003d4a7
mov dword [ebp - 0x5c8], 1
jmp 0x1003d4ae
and dword [ebp - 0x5c8], 0
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x318]
mov dword [ebp + eax - 0x6b8], ecx
mov eax, dword [ebp - 0x60]
mov dword [ebp - 0x8e0], eax
cmp dword [ebp - 0xec], 0
jne 0x1003d4e2
cmp dword [ebp - 0x60], 0
jne 0x1003d4e2
and dword [ebp - 0x320], 0
jmp 0x1003d4ec
mov dword [ebp - 0x320], 1
mov eax, dword [ebp - 0xec]
cmp dword [ebp - 0x320], eax
je 0x1003d506
mov dword [ebp - 0x328], 1
jmp 0x1003d50d
and dword [ebp - 0x328], 0
cmp dword [ebp - 0x328], 1
jg 0x1003d6a9
push 1
lea ecx, [ebp - 0x704]
call fcn.100126dc
mov dword [ebp - 4], 0x15
push 0x3f64
push 0x6ddf
push 1
push 0x4cc0
push 0x3966
lea eax, [ebp - 0x704]
push eax
push 0x24e1
push 0
push 0x7859
lea eax, [ebp - 0x780]
push eax
push 0x6a8b
push 0x2dea
push 0x6c10
push 0x72
call fcn.1003418f
add esp, 0x38
mov byte [ebp - 0x77], 0
movzx eax, byte [ebp - 0x77]
test eax, eax
je 0x1003d59b
push 0
push 1
push 0xd7f
push 0x3168
push 1
call fcn.10039f5b
add esp, 0x14
mov dword [ebp - 0xec], 0
jmp 0x1003d5b4
mov eax, dword [ebp - 0xec]
inc eax
mov dword [ebp - 0xec], eax
cmp dword [ebp - 0xec], 0x13
jne 0x1003d698
mov dword [ebp - 0x760], 0xffffffff
mov dword [ebp - 0x75c], 0xffffffff
mov dword [ebp - 0x758], 0xffffffff
mov dword [ebp - 0x754], 0xffffffff
mov dword [ebp - 0x5d0], 0xfffffff7
push 4
pop eax
imul eax, eax, 3
cmp dword [ebp + eax - 0x760], 0
je 0x1003d647
mov dword [ebp - 0x594], 0xe96b
push 1
lea eax, [ebp - 0x594]
push eax
push 0x6063
push 1
push 0x4625
push 0x275b
push 1
push 0x4e00
push 0x52d
call fcn.1002a020
add esp, 0x24
mov dword [ebp - 0x5d0], 1
jmp 0x1003d693
mov dword [ebp - 0xd4], 0
jmp 0x1003d660
mov eax, dword [ebp - 0xd4]
inc eax
mov dword [ebp - 0xd4], eax
cmp dword [ebp - 0xd4], 4
jge 0x1003d67c
mov eax, dword [ebp - 0xd4]
mov dword [ebp + eax*4 - 0x6b8], 0xa5c1b09c
jmp 0x1003d653
push 0
lea ecx, [ebp - 0x704]
call fcn.10012743
cmp dword [eax], 0
je 0x1003d693
jmp 0x1003d5a7
jmp 0x1003d5a7
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x704]
call fcn.1001273e
jmp 0x1003d6c9
mov byte [ebp - 0x79], 0
movzx eax, byte [ebp - 0x79]
test eax, eax
je 0x1003d6c9
push 0x433d
push 0x31dc
push 0
call fcn.100407fb
add esp, 0xc
mov byte [ebp - 0x7b], 0
push 0
push 0x7ccf
lea eax, [ebp - 0x7b]
push eax
call fcn.10040e19
add esp, 0xc
movzx eax, byte [ebp - 0xb1]
test eax, eax
je 0x1003d7d8
push 4
lea ecx, [ebp - 0x8a8]
call fcn.100126dc
mov dword [ebp - 4], 0x16
mov dword [ebp - 0x13c], 0
jmp 0x1003d71c
mov eax, dword [ebp - 0x13c]
inc eax
mov dword [ebp - 0x13c], eax
cmp dword [ebp - 0x13c], 4
jge 0x1003d73e
push dword [ebp - 0x13c]
lea ecx, [ebp - 0x8a8]
call fcn.10012743
mov dword [eax], 0x76b0
jmp 0x1003d70f
mov byte [ebp - 0x74], 0
movzx eax, byte [ebp - 0x74]
test eax, eax
je 0x1003d767
push 0x240d
push 0
push 0
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_PolyPolyline]
push 0x2d2a
push 1
push 0x16d6
push 0
push 0x7ea5
push 0x6109
push 0x4908
push 0x704
push 0
push 0x5cca
push 0x1f5f
call fcn.10042174
add esp, 0x2c
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x8a8]
call fcn.1001273e
push 1
push 0x609b
push 0x5a05
push 0x7728
push 1
push 0x1b7b
push 0
push 0x2e5c
push 0x4f1
call fcn.1002a466
add esp, 0x24
jmp 0x1003cec9
jmp 0x1003caff
push 1
push 0x65da
lea eax, [ebp - 0x5a0]
push eax
push 0x65cd
lea eax, [ebp - 0x5d8]
push eax
push 0
lea eax, [ebp - 0xf8]
push eax
call fcn.1004093b
add esp, 0x1c
push 0x7d69
push dword [ebp - 0x44]
push 0
push 1
push 0x3cd5
push 0x7d28
lea eax, [ebp - 0x22c]
push eax
push dword [ebp - 0x3f0]
push dword [ebp - 0x4b8]
call fcn.1002ed80
add esp, 0x24
mov dword [ebp - 0x870], 0xfffffff6
mov dword [ebp - 0x788], 0
mov dword [ebp - 0x908], 9
mov dword [ebp - 0x790], 0xffffffff
mov dword [ebp - 0x878], 0x999fb023
mov dword [ebp - 0x798], 0x5dae5a6
mov dword [ebp - 0x8e8], 0
mov dword [ebp - 0x7a0], 0xfffffffe
mov dword [ebp - 0x884], 0
mov dword [ebp - 0x7a8], 0xdead9bac
mov dword [ebp - 0x92c], 0xfffffff6
mov dword [ebp - 0x7b0], 0x45ee28fd
mov dword [ebp - 0x88c], 4
mov dword [ebp - 0x4bc], 0xffff
push 1
push 0x40f
lea eax, [ebp - 0x4bc]
push eax
push 1
push 0x2b0a
call fcn.1002a3b4
add esp, 0x14
mov dword [ebp - 0xe4], 0
mov dword [ebp - 0x7b8], 0x24015fb2
mov dword [ebp - 0xe4], 0
jmp 0x1003d914
mov eax, dword [ebp - 0xe4]
dec eax
mov dword [ebp - 0xe4], eax
cmp dword [ebp - 0xe4], 0xffffffe4
jge 0x1003d9da
mov dword [ebp - 0xfc], 0xe56f9b2c
mov dword [ebp - 0x4cc], 0xffffffff
mov dword [ebp - 0xfc], 0xfffffff1
jmp 0x1003d94e
mov eax, dword [ebp - 0xfc]
dec eax
mov dword [ebp - 0xfc], eax
cmp dword [ebp - 0xfc], 0xffffffe4
jl 0x1003d9d5
mov dword [ebp - 0x104], 0x23ed15de
cmp dword [ebp - 0xe4], 0
je 0x1003d96c
jmp 0x1003d9d5
mov dword [ebp - 0x104], 0
jmp 0x1003d985
mov eax, dword [ebp - 0x104]
dec eax
mov dword [ebp - 0x104], eax
cmp dword [ebp - 0x104], 0xfffffffb
jg 0x1003d9d0
mov dword [ebp - 0x4c4], 0xfffffffd
push 1
lea eax, [ebp - 0xfc]
push eax
lea eax, [ebp - 0x4c4]
push eax
lea eax, [ebp - 0xe4]
push eax
push 1
lea eax, [ebp - 0x4cc]
push eax
push 1
lea eax, [ebp - 0x104]
push eax
push 0x52f8
call fcn.1002a466
add esp, 0x24
jmp 0x1003d978
jmp 0x1003d941
jmp 0x1003d907
push 1
lea ecx, [ebp - 0x71c]
call fcn.100126dc
mov dword [ebp - 4], 0x17
mov dword [ebp - 0x3c], 0
mov dword [ebp - 0x144], 0
jmp 0x1003da0e
mov eax, dword [ebp - 0x144]
inc eax
mov dword [ebp - 0x144], eax
cmp dword [ebp - 0x144], 3
jge 0x1003da2a
mov eax, dword [ebp - 0x144]
mov dword [ebp + eax*4 - 0x734], 8
jmp 0x1003da01
mov dword [ebp - 0x3c], 2
jmp 0x1003da3a
mov eax, dword [ebp - 0x3c]
dec eax
mov dword [ebp - 0x3c], eax
cmp dword [ebp - 0x3c], 0
jl 0x1003da56
mov eax, dword [ebp - 0x3c]
mov ecx, dword [ebp - 0x3c]
mov eax, dword [ebp + eax*4 - 0x734]
mov dword [ebp + ecx*4 - 0x734], eax
jmp 0x1003da33
cmp dword [ebp - 0x3c], 0
je 0x1003dabf
mov dword [ebp - 0x4dc], 0xfffffff7
mov dword [ebp - 0x14c], 0
jmp 0x1003da7f
mov eax, dword [ebp - 0x14c]
inc eax
mov dword [ebp - 0x14c], eax
cmp dword [ebp - 0x14c], 1
jge 0x1003da9b
mov eax, dword [ebp - 0x14c]
mov dword [ebp + eax*4 - 0x4d4], 0x1c0f
jmp 0x1003da72
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x4d4]
mov dword [ebp - 0x3c], eax
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x734]
mov dword [ebp - 0x4dc], eax
jmp 0x1003dac5
mov eax, dword [ebp - 0x3c]
mov dword [ebp - 0x3c], eax
push 1
lea ecx, [ebp - 0x6f8]
call fcn.100126dc
mov byte [ebp - 4], 0x18
mov dword [ebp - 0x668], 0
mov dword [ebp - 0x664], 0
mov dword [ebp - 0x660], 0
mov dword [ebp - 0x65c], 0
mov dword [ebp - 0x24], 1
mov dword [ebp - 0x338], 1
mov dword [ebp - 0x360], 0xa5d732ad
mov dword [ebp - 0x370], 0
mov dword [ebp - 0x24], 0
jmp 0x1003db33
mov eax, dword [ebp - 0x24]
inc eax
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 3
jg 0x1003dcca
mov dword [ebp - 0xc0], 0xffffffff
mov dword [ebp - 0x4fc], 0x8d08f492
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp + eax*4 - 0x668]
mov dword [ebp - 0x4e4], eax
mov eax, dword [ebp - 0x24]
mov ecx, dword [ebp - 0x4e4]
mov dword [ebp + eax*4 - 0x668], ecx
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp + eax*4 - 0x668]
mov dword [ebp - 0x330], eax
mov eax, dword [ebp - 0x24]
mov ecx, dword [ebp - 0x330]
mov dword [ebp + eax*4 - 0x668], ecx
mov eax, dword [ebp - 0xc0]
imul eax, dword [ebp - 0x24]
add eax, dword [ebp - 0xc0]
imul eax, dword [ebp - 0x330]
mov dword [ebp - 0x338], eax
mov eax, dword [ebp - 0x338]
sub eax, dword [ebp - 0xc0]
cmp eax, dword [ebp - 0xc0]
jl 0x1003dbce
mov dword [ebp - 0x340], 1
jmp 0x1003dbd5
and dword [ebp - 0x340], 0
imul eax, dword [ebp - 0x340], 0xc654
sub eax, dword [ebp - 0xc0]
je 0x1003dbfc
cmp dword [ebp - 0xc0], 0
je 0x1003dbfc
mov dword [ebp - 0x25c], 1
jmp 0x1003dc03
and dword [ebp - 0x25c], 0
cmp dword [ebp - 0x25c], 0x207647f1
jle 0x1003dc1b
mov dword [ebp - 0x350], 1
jmp 0x1003dc22
and dword [ebp - 0x350], 0
mov eax, dword [ebp - 0x24]
cmp dword [ebp - 0x350], eax
jg 0x1003dc39
mov dword [ebp - 0x358], 1
jmp 0x1003dc40
and dword [ebp - 0x358], 0
mov eax, dword [ebp - 0x358]
mov dword [ebp - 0x360], eax
mov eax, dword [ebp - 0x24]
cmp dword [ebp - 0x360], eax
jle 0x1003dc63
mov dword [ebp - 0x368], 1
jmp 0x1003dc6a
and dword [ebp - 0x368], 0
mov eax, dword [ebp - 0x24]
cmp dword [ebp - 0x368], eax
jne 0x1003dc87
mov eax, 0xfff6
test eax, eax
jne 0x1003dc87
and dword [ebp - 0x4ec], 0
jmp 0x1003dc91
mov dword [ebp - 0x4ec], 1
or eax, 0xffffffff
sub eax, dword [ebp - 0x24]
cmp eax, dword [ebp - 0x24]
jge 0x1003dca8
mov dword [ebp - 0x4f4], 1
jmp 0x1003dcaf
and dword [ebp - 0x4f4], 0
mov dword [ebp - 0x370], 0xfffffff9
mov eax, dword [ebp - 0x370]
mov dword [ebp - 0x4fc], eax
jmp 0x1003db2c
mov dword [ebp - 0x390], 1
mov dword [ebp - 0x2c], 0x71c1ec2d
mov dword [ebp - 0x8f0], 0xd228
mov dword [ebp - 0x7c0], 0xf4a7d2ae
mov dword [ebp - 0x89c], 0xfffffffe
mov dword [ebp - 0x50c], 0x3a64e785
mov dword [ebp - 0x154], 0
jmp 0x1003dd1c
mov eax, dword [ebp - 0x154]
inc eax
mov dword [ebp - 0x154], eax
cmp dword [ebp - 0x154], 3
jge 0x1003dd38
mov eax, dword [ebp - 0x154]
mov dword [ebp + eax*4 - 0x968], 3
jmp 0x1003dd0f
mov eax, dword [ebp - 0x2c]
mov dword [ebp - 0x7c8], eax
xor eax, eax
je 0x1003dde9
cmp dword [ebp - 0x2c], 0
jne 0x1003dd55
cmp dword [ebp - 0x2c], 0
je 0x1003dd67
cmp dword [ebp - 0x2c], 0
je 0x1003dd67
mov dword [ebp - 0x378], 1
jmp 0x1003dd6e
and dword [ebp - 0x378], 0
mov eax, dword [ebp - 0x2c]
cmp dword [ebp - 0x378], eax
jg 0x1003dd85
mov dword [ebp - 0x380], 1
jmp 0x1003dd8c
and dword [ebp - 0x380], 0
mov eax, dword [ebp - 0x2c]
sub eax, dword [ebp - 0x380]
sub eax, dword [ebp - 0x2c]
je 0x1003ddac
cmp dword [ebp - 0x2c], 0
je 0x1003ddac
mov dword [ebp - 0x504], 1
jmp 0x1003ddb3
and dword [ebp - 0x504], 0
mov eax, dword [ebp - 0x2c]
mov dword [ebp - 0x910], eax
mov eax, dword [ebp - 0x2c]
mov dword [ebp - 0x7d0], eax
mov eax, dword [ebp - 0x2c]
mov dword [ebp - 0x8ac], eax
mov eax, dword [ebp - 0x2c]
mov dword [ebp - 0x7d8], eax
cmp dword [ebp - 0x2c], 0
je 0x1003dde9
mov dword [ebp - 0x388], 1
jmp 0x1003ddf0
and dword [ebp - 0x388], 0
push 4
pop eax
shl eax, 1
mov ecx, dword [ebp - 0x388]
mov dword [ebp + eax - 0x968], ecx
lea eax, [ebp - 0x50c]
push eax
push 0
push 1
call fcn.100411c4
add esp, 0xc
mov dword [ebp - 0x10c], 0
jmp 0x1003de2e
mov eax, dword [ebp - 0x10c]
inc eax
mov dword [ebp - 0x10c], eax
cmp dword [ebp - 0x10c], 1
jge 0x1003de50
push dword [ebp - 0x10c]
lea ecx, [ebp - 0x71c]
call fcn.10012743
mov dword [eax], 0xda11525
jmp 0x1003de21
push 0x5958
push 0
lea eax, [ebp - 0x6f8]
push eax
push 0x5bfe
push 0x3ae9
push 0
push 0x1145
push 0x2bde
push 0x3b79
lea eax, [ebp - 0x10c]
push eax
push 0x46a9
push 0x6e05
call fcn.100452be
add esp, 0x30
push 0
lea ecx, [ebp - 0x71c]
call fcn.10012743
push 0
lea ecx, [ebp - 0x6f8]
call fcn.10012743
mov eax, dword [eax]
inc eax
mov dword [ebp - 0x390], eax
push 0
lea eax, [ebp - 0x390]
push eax
call fcn.100410cb
pop ecx
pop ecx
mov byte [ebp - 4], 0x17
lea ecx, [ebp - 0x6f8]
call fcn.1001273e
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x71c]
call fcn.1001273e
jmp 0x1003be8e
mov dword [ebp - 0x20c], 0xfffffffd
mov dword [ebp - 0xa8], 5
mov dword [ebp - 0xc8], 0x95e3b372
mov dword [ebp - 0x118], 0x8d9a2b82
mov dword [ebp - 0x524], 0
cmp dword [ebp - 0x20c], 0
jne 0x1003df46
mov eax, dword [ebp - 0xa8]
mov dword [ebp - 0x8f8], eax
imul eax, dword [ebp - 0xa8], 0xcda2
test eax, eax
jne 0x1003df46
and dword [ebp - 0x398], 0
jmp 0x1003df50
mov dword [ebp - 0x398], 1
mov eax, dword [ebp - 0xc8]
cmp dword [ebp - 0x398], eax
jg 0x1003df6a
mov dword [ebp - 0x3a0], 1
jmp 0x1003df71
and dword [ebp - 0x3a0], 0
cmp dword [ebp - 0x3a0], 0x25a80e35
jg 0x1003df89
mov dword [ebp - 0x3a8], 1
jmp 0x1003df90
and dword [ebp - 0x3a8], 0
mov eax, dword [ebp - 0x3a8]
dec eax
cmp eax, dword [ebp - 0x20c]
je 0x1003dfab
mov dword [ebp - 0x3b0], 1
jmp 0x1003dfb2
and dword [ebp - 0x3b0], 0
mov eax, dword [ebp - 0x20c]
mov ecx, dword [ebp - 0x3b0]
lea eax, [eax + ecx - 1]
test eax, eax
je 0x1003dfdb
cmp dword [ebp - 0xa8], 0
je 0x1003dfdb
mov dword [ebp - 0x3b8], 1
jmp 0x1003dfe2
and dword [ebp - 0x3b8], 0
cmp dword [ebp - 0x3b8], 0xe83
jle 0x1003dffa
mov dword [ebp - 0x3c0], 1
jmp 0x1003e001
and dword [ebp - 0x3c0], 0
mov eax, dword [ebp - 0x3c0]
mov dword [ebp - 0x118], eax
mov dword [ebp - 0x118], 0
jmp 0x1003e026
mov eax, dword [ebp - 0x118]
inc eax
mov dword [ebp - 0x118], eax
cmp dword [ebp - 0x118], 0x14
jne 0x1003e100
mov dword [ebp - 0x514], 0
mov byte [ebp - 0xad], 0
movzx eax, byte [ebp - 0xad]
test eax, eax
je 0x1003e065
push 0
push 0x6b6d
push 1
push 0x11ab
call fcn.1002ace5
add esp, 0x10
mov dword [ebp - 0xa8], 0
jmp 0x1003e07e
mov eax, dword [ebp - 0xa8]
dec eax
mov dword [ebp - 0xa8], eax
cmp dword [ebp - 0xa8], 0xfffffffc
jg 0x1003e0fb
mov dword [ebp - 0x51c], 1
push 0
lea eax, [ebp - 0x514]
push eax
push 0x3db9
push 0x7f30
push 1
push 0x5321
lea eax, [ebp - 0x51c]
push eax
call fcn.1002abe7
add esp, 0x1c
mov dword [ebp - 0xc8], 0
jmp 0x1003e0d3
mov eax, dword [ebp - 0xc8]
inc eax
mov dword [ebp - 0xc8], eax
cmp dword [ebp - 0xc8], 0x2d
jg 0x1003e0f6
lea eax, [ebp - 0xc8]
push eax
push 0
lea eax, [ebp - 0x524]
push eax
call fcn.10041231
add esp, 0xc
jmp 0x1003e0c6
jmp 0x1003e071
jmp 0x1003e019
mov dword [ebp - 0xd0], 3
mov dword [ebp - 0x15c], 0
mov dword [ebp - 0x3d0], 0
mov dword [ebp - 0x52c], 0xffffffff
mov eax, dword [ebp - 0xd0]
mov dword [ebp - 0x7e0], eax
cmp dword [ebp - 0x15c], 0
jne 0x1003e144
cmp dword [ebp - 0x15c], 0
mov eax, dword [ebp - 0x15c]
mov ecx, dword [ebp - 0xd0]
sub ecx, 0xd303
sub ecx, dword [ebp - 0xd0]
sub eax, ecx
cmp dword [ebp - 0xd0], eax
je 0x1003e172
mov dword [ebp - 0x3c8], 1
jmp 0x1003e179
and dword [ebp - 0x3c8], 0
mov eax, dword [ebp - 0x3c8]
mov dword [ebp - 0x3d0], eax
imul eax, dword [ebp - 0x3d0], 0xc218
imul eax, eax, 0xa945
cmp eax, dword [ebp - 0x15c]
je 0x1003e1b2
mov eax, 0xfffa
test eax, eax
je 0x1003e1b2
mov dword [ebp - 0x3d8], 1
jmp 0x1003e1b9
and dword [ebp - 0x3d8], 0
mov eax, dword [ebp - 0xd0]
cmp eax, dword [ebp - 0x3d8]
jge 0x1003e1d3
mov dword [ebp - 0x3e0], 1
jmp 0x1003e1da
and dword [ebp - 0x3e0], 0
mov eax, dword [ebp - 0xd0]
cmp dword [ebp - 0x3e0], eax
jl 0x1003e1f4
mov dword [ebp - 0x3e8], 1
jmp 0x1003e1fb
and dword [ebp - 0x3e8], 0
mov eax, dword [ebp - 0x3e8]
mov dword [ebp - 0x52c], eax
mov byte [ebp - 0x76], 0
movzx eax, byte [ebp - 0x76]
test eax, eax
je 0x1003e219
call dword [sym.imp.KERNEL32.dll_GetVersion]
push 4
push 0x1000
mov eax, dword [ebp - 0x44]
push dword [eax + 0x10]
mov eax, dword [ebp - 0x44]
mov ecx, dword [ebp - 0x3f0]
add ecx, dword [eax + 0xc]
push ecx
push 0x882b
push 0x913d
call fcn.1001b6be
pop ecx
pop ecx
call eax
mov dword [ebp - 0x22c], eax
mov eax, dword [ebp - 0x44]
push dword [eax + 0x10]
mov eax, dword [ebp - 0x44]
mov ecx, dword [ebp - 0x534]
add ecx, dword [eax + 0x14]
push ecx
push dword [ebp - 0x22c]
call fcn.1001b7bd
add esp, 0xc
mov dword [ebp - 0xe0], 0
push 4
lea ecx, [ebp - 0x710]
call fcn.100126dc
mov dword [ebp - 4], 0x19
push 1
lea eax, [ebp - 0x710]
push eax
lea eax, [ebp - 0x8bc]
push eax
push 1
push 0
push 0x699a
call fcn.10045176
add esp, 0x18
mov dword [ebp - 0xe0], 0xfffffff8
jmp 0x1003e2c5
mov eax, dword [ebp - 0xe0]
inc eax
mov dword [ebp - 0xe0], eax
cmp dword [ebp - 0xe0], 0x10
jg 0x1003e577
mov dword [ebp - 0x120], 0xfffffff7
mov dword [ebp - 0xd8], 0
mov dword [ebp - 0x7e8], 0x188b9abc
push 2
lea ecx, [ebp - 0x8b8]
call fcn.100126dc
mov byte [ebp - 4], 0x1a
mov dword [ebp - 0x48], 0
jmp 0x1003e311
mov eax, dword [ebp - 0x48]
inc eax
mov dword [ebp - 0x48], eax
cmp dword [ebp - 0x48], 2
jge 0x1003e32d
push dword [ebp - 0x48]
lea ecx, [ebp - 0x8b8]
call fcn.10012743
mov dword [eax], 0xe8f88485
jmp 0x1003e30a
mov dword [ebp - 0x48], 0
jmp 0x1003e33d
mov eax, dword [ebp - 0x48]
inc eax
mov dword [ebp - 0x48], eax
cmp dword [ebp - 0x48], 4
jge 0x1003e353
mov eax, dword [ebp - 0x48]
mov dword [ebp + eax*4 - 0x980], 0xfffffff7
jmp 0x1003e336
mov dword [ebp - 0x120], 3
jmp 0x1003e36c
mov eax, dword [ebp - 0x120]
dec eax
mov dword [ebp - 0x120], eax
cmp dword [ebp - 0x120], 0
jl 0x1003e563
mov dword [ebp - 0x214], 0xe5ab
lea eax, [ebp - 0x120]
push eax
lea eax, [ebp - 0x710]
push eax
push 0
lea eax, [ebp - 0xd8]
push eax
push 0x3eb9
call fcn.10040fe3
add esp, 0x14
mov dword [ebp - 0xd8], 3
jmp 0x1003e3c0
mov eax, dword [ebp - 0xd8]
dec eax
mov dword [ebp - 0xd8], eax
cmp dword [ebp - 0xd8], 0
jl 0x1003e55e
mov dword [ebp - 0xe8], 0x89a69576
mov dword [ebp - 0xe8], 3
jmp 0x1003e3f0
mov eax, dword [ebp - 0xe8]
dec eax
mov dword [ebp - 0xe8], eax
cmp dword [ebp - 0xe8], 0
jl 0x1003e4df
mov dword [ebp - 0x68], 0xfffffffe
mov dword [ebp - 0x68], 0
jmp 0x1003e414
mov eax, dword [ebp - 0x68]
inc eax
mov dword [ebp - 0x68], eax
cmp dword [ebp - 0x68], 3
jg 0x1003e491
mov dword [ebp - 0x164], 0xf8b8ae50
mov dword [ebp - 0x164], 3
jmp 0x1003e43d
mov eax, dword [ebp - 0x164]
dec eax
mov dword [ebp - 0x164], eax
cmp dword [ebp - 0x164], 0
jl 0x1003e48c
mov byte [ebp - 0xb5], 0
movzx eax, byte [ebp - 0xb5]
test eax, eax
je 0x1003e473
push 0x101c
push 1
push 0xdb6
push 0x9a8
push 0
call fcn.1003560f
add esp, 0x14
mov byte [ebp - 0x78], 0
movzx eax, byte [ebp - 0x78]
test eax, eax
je 0x1003e48a
push 1
push 1
call fcn.1002a738
pop ecx
pop ecx
jmp 0x1003e430
jmp 0x1003e40d
mov dword [ebp - 0x68], 3
jmp 0x1003e4a1
mov eax, dword [ebp - 0x68]
dec eax
mov dword [ebp - 0x68], eax
cmp dword [ebp - 0x68], 0
jl 0x1003e4da
mov dword [ebp - 0x928], 0xfffffffd
mov dword [ebp - 0x7f0], 0xfffffffe
push 0x697e
push 0
push 1
push 0x4cb5
lea eax, [ebp - 0x214]
push eax
call fcn.10041921
add esp, 0x14
jmp 0x1003e49a
jmp 0x1003e3e3
cmp dword [ebp - 0xe8], 1
jge 0x1003e4f4
mov dword [ebp - 0x53c], 1
jmp 0x1003e4fb
and dword [ebp - 0x53c], 0
mov eax, dword [ebp - 0x214]
mov dword [ebp - 0x8cc], eax
mov eax, dword [ebp - 0xd8]
mov dword [ebp - 0x7f8], eax
mov eax, dword [ebp - 0x214]
mov dword [ebp - 0x8d0], eax
mov eax, dword [ebp - 0xe0]
cmp dword [ebp - 0xe0], eax
jg 0x1003e539
mov dword [ebp - 0x3f8], 1
jmp 0x1003e540
and dword [ebp - 0x3f8], 0
mov eax, dword [ebp - 0xe8]
add eax, dword [ebp - 0x3f8]
push 4
pop ecx
imul ecx, ecx, 3
mov dword [ebp + ecx - 0x980], eax
jmp 0x1003e3b3
jmp 0x1003e35f
mov byte [ebp - 4], 0x19
lea ecx, [ebp - 0x8b8]
call fcn.1001273e
jmp 0x1003e2b8
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x710]
call fcn.1001273e
mov dword [ebp - 0x70], 0xffffffff
mov dword [ebp - 0x21c], 0xfffffff7
mov dword [ebp - 0x420], 0xc2e9378f
mov dword [ebp - 0x544], 0x5a9390df
mov dword [ebp - 0x16c], 0
jmp 0x1003e5c4
mov eax, dword [ebp - 0x16c]
inc eax
mov dword [ebp - 0x16c], eax
cmp dword [ebp - 0x16c], 3
jge 0x1003e5e0
mov eax, dword [ebp - 0x16c]
mov dword [ebp + eax*4 - 0x9f4], 0xfffffffc
jmp 0x1003e5b7
mov dword [ebp - 0x70], 0
jmp 0x1003e5f0
mov eax, dword [ebp - 0x70]
dec eax
mov dword [ebp - 0x70], eax
cmp dword [ebp - 0x70], 0xfffffff3
jg 0x1003e748
mov dword [ebp - 0xf0], 0xb7161ab6
mov dword [ebp - 0x800], 0x7e0d1b71
mov dword [ebp - 0x8d4], 0
mov dword [ebp - 0x808], 0xa60915bb
push 2
lea ecx, [ebp - 0x8c8]
call fcn.100126dc
mov dword [ebp - 4], 0x1b
push 0x3ca
lea eax, [ebp - 0x8c8]
push eax
push 0
lea eax, [ebp - 0x8d8]
push eax
push 0x4684
push 1
call fcn.10034855
add esp, 0x18
mov eax, dword [ebp - 0x70]
mov dword [ebp - 0x810], eax
mov eax, dword [ebp - 0xf0]
mov dword [ebp - 0x924], eax
mov eax, dword [ebp - 0xf0]
cmp dword [ebp - 0xf0], eax
jl 0x1003e68c
cmp dword [ebp - 0x70], 0
jne 0x1003e68c
and dword [ebp - 0x400], 0
jmp 0x1003e696
mov dword [ebp - 0x400], 1
mov eax, dword [ebp - 0xf0]
cmp eax, dword [ebp - 0x400]
jl 0x1003e6b0
mov dword [ebp - 0x408], 1
jmp 0x1003e6b7
and dword [ebp - 0x408], 0
mov eax, dword [ebp - 0x408]
add eax, 6
je 0x1003e6c6
cmp dword [ebp - 0x70], 0
mov eax, dword [ebp - 0xf0]
mov dword [ebp - 0x21c], eax
imul eax, dword [ebp - 0x21c], 0xe1d8
cmp eax, dword [ebp - 0xf0]
jne 0x1003e6f0
mov dword [ebp - 0x410], 1
jmp 0x1003e6f7
and dword [ebp - 0x410], 0
mov eax, dword [ebp - 0x70]
cmp dword [ebp - 0x410], eax
jge 0x1003e70e
mov dword [ebp - 0x418], 1
jmp 0x1003e715
and dword [ebp - 0x418], 0
mov eax, dword [ebp - 0x418]
mov dword [ebp - 0x420], eax
push 1
lea eax, [ebp - 0x544]
push eax
push 1
call fcn.1002a7bf
add esp, 0xc
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x8c8]
call fcn.1001273e
jmp 0x1003e5e9
lea eax, [ebp - 0x21c]
push eax
push 0x382d
push 0
push 0
lea eax, [ebp - 0x420]
push eax
call fcn.100403cf
add esp, 0x14
mov dword [ebp - 0x54], 0xfe1ca296
mov dword [ebp - 0x224], 0xe6e4
mov dword [ebp - 0x174], 0x2f67ab6c
mov dword [ebp - 0x67c], 0xc4ce10b4
mov dword [ebp - 0x678], 0xc4ce10b4
mov dword [ebp - 0x674], 0xc4ce10b4
mov dword [ebp - 0x670], 0xc4ce10b4
mov dword [ebp - 0x820], 0x7697ab83
mov dword [ebp - 0x4c], 0
jmp 0x1003e7c4
mov eax, dword [ebp - 0x4c]
inc eax
mov dword [ebp - 0x4c], eax
cmp dword [ebp - 0x4c], 1
jge 0x1003e7d7
mov eax, dword [ebp - 0x4c]
mov dword [ebp + eax*4 - 0x6c], 0x8b92
jmp 0x1003e7bd
mov dword [ebp - 0x4c], 0
jmp 0x1003e7e7
mov eax, dword [ebp - 0x4c]
inc eax
mov dword [ebp - 0x4c], eax
cmp dword [ebp - 0x4c], 1
jge 0x1003e7fd
mov eax, dword [ebp - 0x4c]
mov dword [ebp + eax*4 - 0x554], 0x955f1bb1
jmp 0x1003e7e0
mov eax, dword [ebp - 0x54]
mov dword [ebp - 0x864], eax
cmp dword [ebp - 0x54], 0
je 0x1003e821
mov eax, 0x176df7e
test eax, eax
je 0x1003e821
mov dword [ebp - 0x428], 1
jmp 0x1003e828
and dword [ebp - 0x428], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x428]
sub ecx, dword [ebp + eax - 0x6c]
je 0x1003e83e
cmp dword [ebp - 0x54], 0
push 4
pop eax
imul eax, eax, 0
push 4
pop ecx
imul ecx, ecx, 0
mov ecx, dword [ebp + ecx - 0x6c]
cmp dword [ebp + eax - 0x6c], ecx
jge 0x1003e860
mov dword [ebp - 0x54c], 1
jmp 0x1003e867
and dword [ebp - 0x54c], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x6c]
mov dword [ebp - 0x830], eax
mov eax, dword [ebp - 0x54]
cmp dword [ebp - 0x54], eax
je 0x1003e898
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x6c], 0
je 0x1003e898
mov dword [ebp - 0x430], 1
jmp 0x1003e89f
and dword [ebp - 0x430], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x6c]
cmp dword [ebp - 0x430], eax
jg 0x1003e8c0
cmp dword [ebp - 0x54], 0
jne 0x1003e8c0
and dword [ebp - 0x438], 0
jmp 0x1003e8ca
mov dword [ebp - 0x438], 1
mov eax, dword [ebp - 0x438]
mov dword [ebp - 0x224], eax
mov eax, dword [ebp - 0x224]
push 4
pop ecx
imul ecx, ecx, 0
sub eax, dword [ebp + ecx - 0x6c]
cmp eax, 1
jle 0x1003e8f7
mov dword [ebp - 0x440], 1
jmp 0x1003e8fe
and dword [ebp - 0x440], 0
mov eax, dword [ebp - 0x54]
cmp dword [ebp - 0x440], eax
je 0x1003e915
mov dword [ebp - 0x448], 1
jmp 0x1003e91c
and dword [ebp - 0x448], 0
mov eax, dword [ebp - 0x54]
add eax, dword [ebp - 0x54]
cmp eax, dword [ebp - 0x448]
jl 0x1003e936
mov dword [ebp - 0x450], 1
jmp 0x1003e93d
and dword [ebp - 0x450], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x6c]
cmp dword [ebp - 0x450], eax
jle 0x1003e961
cmp dword [ebp - 0x224], 0
jne 0x1003e961
and dword [ebp - 0x458], 0
jmp 0x1003e96b
mov dword [ebp - 0x458], 1
mov eax, dword [ebp - 0x458]
mov dword [ebp - 0x174], eax
mov eax, dword [ebp - 0x174]
mov dword [ebp - 0x174], eax
mov eax, dword [ebp - 0x174]
push 4
pop ecx
shl ecx, 0
add eax, dword [ebp + ecx - 0x67c]
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x554], eax
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x67c]
dec eax
push 4
pop ecx
shl ecx, 0
mov dword [ebp + ecx - 0x67c], eax
mov eax, dword [ebp - 0x44]
mov ecx, dword [ebp - 0x22c]
mov dword [eax + 8], ecx
jmp 0x1003be8e
jmp 0x1003ea31
mov eax, dword [ebp + 0x18]
mov dword [ebp - 0x564], eax
lea eax, [ebp + 0x14]
mov dword [ebp - 0x57c], eax
lea eax, [ebp + 0x10]
mov dword [ebp - 0x55c], eax
lea eax, [ebp + 0x30]
mov dword [ebp - 0x574], eax
mov eax, dword [ebp + 0x2c]
mov dword [ebp - 0x56c], eax
mov eax, dword [ebp - 0x55c]
push dword [eax]
push dword [ebp - 0x564]
push 0
push dword [ebp - 0x56c]
mov eax, dword [ebp - 0x574]
push dword [eax]
push 0x1dd4
mov eax, dword [ebp - 0x57c]
push dword [eax]
call fcn.10035c20
add esp, 0x1c
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
mov esp, ebp
pop ebp
ret