Function at 0x1003fe50
Capabilities:
Check if file exists
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x1010dccc
mov eax, dword fs:[0]
push eax
sub esp, 0x2e0
mov eax, dword [0x10137920]
xor eax, ebp
mov dword [ebp - 0x14], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov eax, dword [ebp + 8]
xor edi, edi
mov dword [ebp - 0x2c4], eax
mov dword [ebp - 0x2d0], ecx
mov dword [ebp - 0x2d8], edx
cmp dword [eax + 0x14], edi
je 0x10040c64
cmp dword [eax + 0x30], edi
je 0x10040c64
lea esi, [eax + 0x20]
mov dword [ebp - 0x2cc], esi
lea ebx, [edi + 8]
cmp dword [esi + 0x10], edi
je 0x1003fed3
cmp dword [esi + 0x14], ebx
jb 0x1003fec1
mov eax, dword [esi]
jmp 0x1003fec3
mov eax, esi
push eax
call dword [sym.imp.SHLWAPI.dll_PathFileExistsW]
test eax, eax
setne al
test al, al
jne 0x1003fedc
push esi
call fcn.1000d470
add esp, 4
mov dword [ebp - 0x2e8], edi
mov dword [ebp - 0x2e4], edi
mov dword [ebp - 0x2e0], edi
mov dword [ebp - 4], edi
push edi
xor eax, eax
push 0x101134e8
lea ecx, [ebp - 0xf4]
mov dword [ebp - 0xe0], 7
mov dword [ebp - 0xe4], edi
mov word [ebp - 0xf4], ax
call fcn.1000abb0
lea esi, [ebp - 0x110]
mov byte [ebp - 4], 1
call fcn.1004cac0
push eax
lea edx, [ebp - 0xf4]
lea ecx, [ebp - 0x2e8]
mov byte [ebp - 4], 2
call fcn.100166c0
add esp, 4
mov byte [ebp - 0x2bd], al
cmp dword [ebp - 0xfc], ebx
jb 0x1003ff60
mov ecx, dword [ebp - 0x110]
push ecx
call fcn.10065453
add esp, 4
xor edx, edx
mov byte [ebp - 4], dl
mov dword [ebp - 0xfc], 7
mov dword [ebp - 0x100], edi
mov word [ebp - 0x110], dx
cmp dword [ebp - 0xe0], ebx
jb 0x1003ff93
mov eax, dword [ebp - 0xf4]
push eax
call fcn.10065453
add esp, 4
cmp byte [ebp - 0x2bd], 0
je 0x1003ffb2
cmp byte [ebp + 0x10], 0
je 0x1003ffb2
lea esi, [ebp - 0x2e8]
call fcn.1001b690
jmp 0x10040c64
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x2d4], esp
push edi
xor edx, edx
mov dword [ecx + 0x14], 7
mov dword [ecx + 0x10], edi
push 0x101134e8
mov word [ecx], dx
call fcn.1000abb0
lea esi, [ebp - 0xbc]
mov byte [ebp - 4], 3
call fcn.1004cac0
mov byte [ebp - 4], 4
mov esi, eax
mov byte [ebp - 4], 5
call fcn.1004e6b0
mov byte [ebp - 4], 0
mov byte [ebp - 0x2d4], al
cmp dword [ebp - 0xa8], ebx
jb 0x10040016
mov eax, dword [ebp - 0xbc]
push eax
call fcn.10065453
add esp, 4
lea esi, [ebp - 0x164]
call fcn.1004c850
mov dword [ebp - 0x2c8], eax
lea esi, [ebp - 0xf4]
mov byte [ebp - 4], 6
call fcn.1004c820
mov ecx, eax
mov eax, dword [ebp - 0x2d0]
lea esi, [ebp - 0x110]
mov byte [ebp - 4], 7
call fcn.100103b0
mov byte [ebp - 4], bl
mov ecx, dword [ebp - 0x2c8]
push ecx
push eax
lea edx, [ebp - 0x12c]
push edx
call fcn.10010440
add esp, 0xc
cmp dword [ebp - 0xfc], ebx
jb 0x1004007e
mov eax, dword [ebp - 0x110]
push eax
call fcn.10065453
add esp, 4
mov esi, 7
xor ecx, ecx
mov dword [ebp - 0xfc], esi
mov dword [ebp - 0x100], edi
mov word [ebp - 0x110], cx
cmp dword [ebp - 0xe0], ebx
jb 0x100400af
mov edx, dword [ebp - 0xf4]
push edx
call fcn.10065453
add esp, 4
xor eax, eax
mov dword [ebp - 0xe0], esi
mov dword [ebp - 0xe4], edi
mov word [ebp - 0xf4], ax
mov byte [ebp - 4], 0xc
cmp dword [ebp - 0x150], ebx
jb 0x100400df
mov ecx, dword [ebp - 0x164]
push ecx
call fcn.10065453
add esp, 4
xor edx, edx
mov dword [ebp - 0x150], esi
mov dword [ebp - 0x154], edi
mov word [ebp - 0x164], dx
call fcn.10042520
mov dword [ebp - 0x2c8], eax
cmp eax, 0x25
jge 0x100402f1
lea esi, [ebp - 0xbc]
call fcn.1004d090
push eax
mov eax, dword [ebp + 0xc]
push eax
lea ecx, [ebp - 0x12c]
mov byte [ebp - 4], 0xd
push ecx
mov ecx, dword [ebp - 0x2c4]
lea edx, [ecx + 4]
call fcn.1004d7e0
mov byte [ebp - 4], 0xc
cmp dword [ebp - 0xa8], ebx
jb 0x1004014c
mov edx, dword [ebp - 0xbc]
push edx
call fcn.10065453
add esp, 4
lea esi, [ebp - 0xbc]
call fcn.1004d090
mov esi, eax
mov byte [ebp - 4], 0xe
mov eax, dword [ebp - 0x2cc]
push 0x1012329c
push eax
lea ecx, [ebp - 0x4c]
push ecx
call fcn.10010100
add esp, 0xc
push esi
push eax
lea edx, [ebp - 0xd8]
push edx
mov byte [ebp - 4], 0xf
call fcn.10010440
add esp, 0xc
push eax
mov byte [ebp - 4], 0x10
call fcn.1000d470
add esp, 4
cmp dword [ebp - 0xc4], ebx
jb 0x100401ae
mov eax, dword [ebp - 0xd8]
push eax
call fcn.10065453
add esp, 4
xor ecx, ecx
mov esi, 7
mov dword [ebp - 0xc4], esi
mov dword [ebp - 0xc8], edi
mov word [ebp - 0xd8], cx
cmp dword [ebp - 0x38], ebx
jb 0x100401d9
mov edx, dword [ebp - 0x4c]
push edx
call fcn.10065453
add esp, 4
xor eax, eax
mov byte [ebp - 4], 0xc
mov dword [ebp - 0x38], esi
mov dword [ebp - 0x3c], edi
mov word [ebp - 0x4c], ax
cmp dword [ebp - 0xa8], ebx
jb 0x10040200
mov ecx, dword [ebp - 0xbc]
push ecx
call fcn.10065453
add esp, 4
lea esi, [ebp - 0xbc]
call fcn.1004d060
mov dword [ebp - 0x2c4], eax
lea esi, [ebp - 0x68]
mov byte [ebp - 4], 0x11
call fcn.1004c820
mov ecx, eax
mov eax, dword [ebp - 0x2d0]
lea esi, [ebp - 0xd8]
mov byte [ebp - 4], 0x12
call fcn.100103b0
push 0x10127478
push eax
lea edx, [ebp - 0x4c]
push edx
mov byte [ebp - 4], 0x13
call fcn.100102a0
add esp, 0xc
mov byte [ebp - 4], 0x14
mov ecx, dword [ebp - 0x2c4]
mov edx, dword [ebp - 0x2cc]
push ecx
mov ecx, eax
call fcn.1004dca0
cmp dword [ebp - 0x38], ebx
jb 0x10040273
mov edx, dword [ebp - 0x4c]
push edx
call fcn.10065453
add esp, 4
xor eax, eax
mov esi, 7
mov dword [ebp - 0x38], esi
mov dword [ebp - 0x3c], edi
mov word [ebp - 0x4c], ax
cmp dword [ebp - 0xc4], ebx
jb 0x1004029b
mov ecx, dword [ebp - 0xd8]
push ecx
call fcn.10065453
add esp, 4
xor edx, edx
mov dword [ebp - 0xc4], esi
mov dword [ebp - 0xc8], edi
mov word [ebp - 0xd8], dx
cmp dword [ebp - 0x54], ebx
jb 0x100402c1
mov eax, dword [ebp - 0x68]
push eax
call fcn.10065453
add esp, 4
xor ecx, ecx
mov byte [ebp - 4], 0xc
mov dword [ebp - 0x54], esi
mov dword [ebp - 0x58], edi
mov word [ebp - 0x68], cx
cmp dword [ebp - 0xa8], ebx
jb 0x10040b40
mov edx, dword [ebp - 0xbc]
push edx
call fcn.10065453
add esp, 4
jmp 0x10040b40
lea esi, [ebp - 0x30]
call fcn.1004cf70
mov dword [ebp - 0x2c4], eax
lea esi, [ebp - 0x84]
mov byte [ebp - 4], 0x15
call fcn.1004cfd0
mov esi, eax
mov eax, dword [ebp - 0x2d0]
push 0x1012329c
push eax
lea ecx, [ebp - 0xd8]
push ecx
mov byte [ebp - 4], 0x16
call fcn.10010100
add esp, 0xc
push esi
push eax
lea edx, [ebp - 0x4c]
push edx
mov byte [ebp - 4], 0x17
call fcn.10010440
add esp, 0xc
push 0x1012329c
push eax
lea eax, [ebp - 0x68]
push eax
mov byte [ebp - 4], 0x18
call fcn.100102a0
add esp, 0xc
mov byte [ebp - 4], 0x19
mov ecx, dword [ebp - 0x2c4]
push ecx
push eax
lea edx, [ebp - 0xbc]
push edx
call fcn.10010440
add esp, 0xc
cmp dword [ebp - 0x54], ebx
jb 0x10040383
mov eax, dword [ebp - 0x68]
push eax
call fcn.10065453
add esp, 4
mov esi, 7
xor ecx, ecx
mov dword [ebp - 0x54], esi
mov dword [ebp - 0x58], edi
mov word [ebp - 0x68], cx
cmp dword [ebp - 0x38], ebx
jb 0x100403a5
mov edx, dword [ebp - 0x4c]
push edx
call fcn.10065453
add esp, 4
xor eax, eax
mov dword [ebp - 0x38], esi
mov dword [ebp - 0x3c], edi
mov word [ebp - 0x4c], ax
cmp dword [ebp - 0xc4], ebx
jb 0x100403c8
mov ecx, dword [ebp - 0xd8]
push ecx
call fcn.10065453
add esp, 4
xor edx, edx
mov dword [ebp - 0xc4], esi
mov dword [ebp - 0xc8], edi
mov word [ebp - 0xd8], dx
cmp dword [ebp - 0x70], ebx
jb 0x100403f1
mov eax, dword [ebp - 0x84]
push eax
call fcn.10065453
add esp, 4
xor ecx, ecx
mov dword [ebp - 0x70], esi
mov dword [ebp - 0x74], edi
mov word [ebp - 0x84], cx
mov byte [ebp - 4], 0x1f
cmp dword [ebp - 0x1c], ebx
jb 0x10040415
mov edx, dword [ebp - 0x30]
push edx
call fcn.10065453
add esp, 4
xor eax, eax
lea esi, [ebp - 0xa0]
mov dword [ebp - 0x1c], 7
mov dword [ebp - 0x20], edi
mov word [ebp - 0x30], ax
call fcn.1004cf40
lea edx, [ebp - 0xbc]
mov ecx, eax
mov byte [ebp - 4], 0x20
call fcn.10042df0
cmp dword [ebp - 0x8c], ebx
jb 0x10040458
mov ecx, dword [ebp - 0xa0]
push ecx
call fcn.10065453
add esp, 4
lea eax, [ebp - 0x2bc]
call fcn.100533d0
mov edx, dword [ebp + 0xc]
mov byte [ebp - 4], 0x21
mov eax, dword [ebp - 0x2c8]
push edx
push eax
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x2c4], esp
push ecx
call fcn.10041390
sub esp, 0x18
mov byte [ebp - 4], 0x22
mov esi, esp
mov dword [ebp - 0x2c8], esp
call fcn.1004d090
sub esp, 0x1c
mov ecx, esp
mov byte [ebp - 4], 0x23
mov dword [ebp - 0x2cc], esp
push 0xffffffffffffffff
push edi
lea eax, [ebp - 0x12c]
xor edx, edx
mov dword [ecx + 0x14], 7
mov dword [ecx + 0x10], edi
push eax
mov word [ecx], dx
call fcn.1000b050
lea ecx, [ebp - 0x2bc]
mov byte [ebp - 4], 0x21
call fcn.100545c0
lea ecx, [ebp - 0xa0]
push ecx
call fcn.10041b50
add esp, 4
push str.Default
push eax
lea edx, [ebp - 0x30]
push edx
mov byte [ebp - 4], 0x24
call fcn.100102a0
add esp, 0xc
push 0xffffffffffffffff
push edi
push eax
lea ecx, [ebp - 0x1d8]
mov byte [ebp - 4], 0x25
call fcn.1000b050
cmp dword [ebp - 0x1c], ebx
jb 0x1004051c
mov eax, dword [ebp - 0x30]
push eax
call fcn.10065453
add esp, 4
xor ecx, ecx
mov byte [ebp - 4], 0x21
mov dword [ebp - 0x1c], 7
mov dword [ebp - 0x20], edi
mov word [ebp - 0x30], cx
cmp dword [ebp - 0x8c], ebx
jb 0x10040547
mov edx, dword [ebp - 0xa0]
push edx
call fcn.10065453
add esp, 4
lea esi, [ebp - 0xa0]
call fcn.1004c790
mov dword [ebp - 0x2c8], eax
lea esi, [ebp - 0x4c]
mov byte [ebp - 4], 0x26
call fcn.1004c9d0
mov dword [ebp - 0x2c4], eax
mov bl, 0x27
mov byte [ebp - 4], bl
mov eax, dword [0x1013ba54]
cmp eax, edi
jne 0x100405a6
push 0x138
call fcn.100656b5
add esp, 4
mov dword [ebp - 0x2cc], eax
mov byte [ebp - 4], 0x28
cmp eax, edi
je 0x1004059c
mov esi, eax
call fcn.10011610
jmp 0x1004059e
xor eax, eax
mov byte [ebp - 4], bl
mov dword [0x1013ba54], eax
lea ebx, [ebp - 0x68]
mov edi, eax
call fcn.10011900
mov byte [ebp - 4], 0x29
mov ecx, dword [ebp - 0x2c4]
push ecx
push eax
lea edx, [ebp - 0x84]
push edx
call fcn.10010440
add esp, 0xc
mov byte [ebp - 4], 0x2a
mov ecx, dword [ebp - 0x2c8]
push ecx
push eax
lea edx, [ebp - 0x30]
push edx
call fcn.10010440
add esp, 0xc
push 0xffffffffffffffff
xor ebx, ebx
push ebx
push eax
lea ecx, [ebp - 0x210]
mov byte [ebp - 4], 0x2b
call fcn.1000b050
mov esi, 8
cmp dword [ebp - 0x1c], esi
jb 0x1004060e
mov eax, dword [ebp - 0x30]
push eax
call fcn.10065453
add esp, 4
xor ecx, ecx
mov edi, 7
mov dword [ebp - 0x1c], edi
mov dword [ebp - 0x20], ebx
mov word [ebp - 0x30], cx
cmp dword [ebp - 0x70], esi
jb 0x10040633
mov edx, dword [ebp - 0x84]
push edx
call fcn.10065453
add esp, 4
xor eax, eax
mov dword [ebp - 0x70], edi
mov dword [ebp - 0x74], ebx
mov word [ebp - 0x84], ax
cmp dword [ebp - 0x54], esi
jb 0x10040653
mov ecx, dword [ebp - 0x68]
push ecx
call fcn.10065453
add esp, 4
xor edx, edx
mov dword [ebp - 0x54], edi
mov dword [ebp - 0x58], ebx
mov word [ebp - 0x68], dx
cmp dword [ebp - 0x38], esi
jb 0x10040670
mov eax, dword [ebp - 0x4c]
push eax
call fcn.10065453
add esp, 4
xor ecx, ecx
mov byte [ebp - 4], 0x21
mov dword [ebp - 0x38], edi
mov dword [ebp - 0x3c], ebx
mov word [ebp - 0x4c], cx
cmp dword [ebp - 0x8c], esi
jb 0x10040697
mov edx, dword [ebp - 0xa0]
push edx
call fcn.10065453
add esp, 4
lea esi, [ebp - 0xa0]
call fcn.1004c7c0
mov dword [ebp - 0x2c8], eax
lea esi, [ebp - 0x4c]
mov byte [ebp - 4], 0x2c
call fcn.1004c9d0
mov dword [ebp - 0x2c4], eax
mov byte [ebp - 4], 0x2d
mov edi, dword [0x1013ba54]
cmp edi, ebx
jne 0x100406fa
push 0x138
call fcn.100656b5
add esp, 4
mov dword [ebp - 0x2cc], eax
mov byte [ebp - 4], 0x2e
cmp eax, ebx
je 0x100406ec
mov esi, eax
call fcn.10011610
jmp 0x100406ee
xor eax, eax
mov edi, eax
mov byte [ebp - 4], 0x2d
mov dword [0x1013ba54], edi
lea ebx, [ebp - 0x68]
call fcn.10011900
mov byte [ebp - 4], 0x2f
mov ecx, dword [ebp - 0x2c4]
push ecx
push eax
lea edx, [ebp - 0x84]
push edx
call fcn.10010440
add esp, 0xc
mov byte [ebp - 4], 0x30
mov ecx, dword [ebp - 0x2c8]
push ecx
push eax
lea edx, [ebp - 0x30]
push edx
call fcn.10010440
add esp, 0xc
push 0xffffffffffffffff
xor ebx, ebx
push ebx
push eax
lea ecx, [ebp - 0x22c]
mov byte [ebp - 4], 0x31
call fcn.1000b050
mov esi, 8
cmp dword [ebp - 0x1c], esi
jb 0x10040760
mov eax, dword [ebp - 0x30]
push eax
call fcn.10065453
add esp, 4
xor ecx, ecx
mov edi, 7
mov dword [ebp - 0x1c], edi
mov dword [ebp - 0x20], ebx
mov word [ebp - 0x30], cx
cmp dword [ebp - 0x70], esi
jb 0x10040785
mov edx, dword [ebp - 0x84]
push edx
call fcn.10065453
add esp, 4
xor eax, eax
mov dword [ebp - 0x70], edi
mov dword [ebp - 0x74], ebx
mov word [ebp - 0x84], ax
cmp dword [ebp - 0x54], esi
jb 0x100407a5
mov ecx, dword [ebp - 0x68]
push ecx
call fcn.10065453
add esp, 4
xor edx, edx
mov dword [ebp - 0x54], edi
mov dword [ebp - 0x58], ebx
mov word [ebp - 0x68], dx
cmp dword [ebp - 0x38], esi
jb 0x100407c2
mov eax, dword [ebp - 0x4c]
push eax
call fcn.10065453
add esp, 4
xor ecx, ecx
mov byte [ebp - 4], 0x21
mov dword [ebp - 0x38], edi
mov dword [ebp - 0x3c], ebx
mov word [ebp - 0x4c], cx
cmp dword [ebp - 0x8c], esi
jb 0x100407e9
mov edx, dword [ebp - 0xa0]
push edx
call fcn.10065453
add esp, 4
lea esi, [ebp - 0xa0]
call fcn.1004c8b0
mov dword [ebp - 0x2c8], eax
lea esi, [ebp - 0x4c]
mov byte [ebp - 4], 0x32
call fcn.1004c9d0
mov dword [ebp - 0x2c4], eax
mov byte [ebp - 4], 0x33
mov edi, dword [0x1013ba54]
cmp edi, ebx
jne 0x1004084c
push 0x138
call fcn.100656b5
add esp, 4
mov dword [ebp - 0x2cc], eax
mov byte [ebp - 4], 0x34
cmp eax, ebx
je 0x1004083e
mov esi, eax
call fcn.10011610
jmp 0x10040840
xor eax, eax
mov edi, eax
mov byte [ebp - 4], 0x33
mov dword [0x1013ba54], edi
lea ebx, [ebp - 0x68]
call fcn.10011900
mov byte [ebp - 4], 0x35
mov ecx, dword [ebp - 0x2c4]
push ecx
push eax
lea edx, [ebp - 0x84]
push edx
call fcn.10010440
add esp, 0xc
mov byte [ebp - 4], 0x36
mov ecx, dword [ebp - 0x2c8]
push ecx
push eax
lea edx, [ebp - 0x30]
push edx
call fcn.10010440
add esp, 0xc
push 0xffffffffffffffff
xor ebx, ebx
push ebx
push eax
lea ecx, [ebp - 0x1f4]
mov byte [ebp - 4], 0x37
call fcn.1000b050
mov esi, 8
cmp dword [ebp - 0x1c], esi
jb 0x100408b2
mov eax, dword [ebp - 0x30]
push eax
call fcn.10065453
add esp, 4
xor ecx, ecx
mov edi, 7
mov dword [ebp - 0x1c], edi
mov dword [ebp - 0x20], ebx
mov word [ebp - 0x30], cx
cmp dword [ebp - 0x70], esi
jb 0x100408d7
mov edx, dword [ebp - 0x84]
push edx
call fcn.10065453
add esp, 4
xor eax, eax
mov dword [ebp - 0x70], edi
mov dword [ebp - 0x74], ebx
mov word [ebp - 0x84], ax
cmp dword [ebp - 0x54], esi
jb 0x100408f7
mov ecx, dword [ebp - 0x68]
push ecx
call fcn.10065453
add esp, 4
xor edx, edx
mov dword [ebp - 0x54], edi
mov dword [ebp - 0x58], ebx
mov word [ebp - 0x68], dx
cmp dword [ebp - 0x38], esi
jb 0x10040914
mov eax, dword [ebp - 0x4c]
push eax
call fcn.10065453
add esp, 4
xor ecx, ecx
mov byte [ebp - 4], 0x21
mov dword [ebp - 0x38], edi
mov dword [ebp - 0x3c], ebx
mov word [ebp - 0x4c], cx
cmp dword [ebp - 0x8c], esi
jb 0x1004093b
mov edx, dword [ebp - 0xa0]
push edx
call fcn.10065453
add esp, 4
lea eax, [ebp - 0xa0]
push eax
call fcn.10041610
add esp, 4
push eax
lea ecx, [ebp - 0x30]
push ecx
mov byte [ebp - 4], 0x38
call fcn.1000b1b0
add esp, 8
push eax
lea ecx, [ebp - 0x2bc]
mov byte [ebp - 4], 0x39
call fcn.10054280
cmp dword [ebp - 0x1c], 0x10
mov byte [ebp - 0x2bd], al
jb 0x10040983
mov edx, dword [ebp - 0x30]
push edx
call fcn.10065453
add esp, 4
mov byte [ebp - 4], 0x21
mov dword [ebp - 0x1c], 0xf
mov dword [ebp - 0x20], ebx
mov byte [ebp - 0x30], bl
cmp dword [ebp - 0x8c], esi
jb 0x100409ab
mov eax, dword [ebp - 0xa0]
push eax
call fcn.10065453
add esp, 4
cmp byte [ebp - 0x2bd], bl
je 0x10040b15
lea ecx, [ebp - 0x30]
push ecx
call fcn.10041b50
add esp, 4
mov byte [ebp - 4], 0x3a
cmp dword [ebp - 0x20], ebx
jne 0x100409f3
lea ecx, [ebp - 0x30]
call fcn.1000b180
lea eax, [ebp - 0x2bc]
call fcn.100534e0
lea ecx, [ebp - 0xbc]
mov byte [ebp - 4], 0xc
call fcn.1000b180
jmp 0x10040b3b
lea esi, [ebp - 0x4c]
call fcn.1004c820
mov ecx, eax
mov eax, dword [ebp - 0x2d0]
lea esi, [ebp - 0x68]
mov byte [ebp - 4], 0x3b
call fcn.100103b0
push 0x10127478
push eax
lea edx, [ebp - 0x84]
push edx
mov byte [ebp - 4], 0x3c
call fcn.100102a0
add esp, 0xc
mov ecx, esi
call fcn.1000b180
lea ecx, [ebp - 0x4c]
mov byte [ebp - 4], 0x3f
call fcn.1000b180
lea esi, [ebp - 0x180]
call fcn.1004d090
mov edi, eax
lea esi, [ebp - 0x19c]
mov byte [ebp - 4], 0x40
call fcn.1004c7f0
mov ecx, eax
lea eax, [ebp - 0x30]
lea esi, [ebp - 0x1b8]
mov byte [ebp - 4], 0x41
call fcn.100103b0
push 0x1012329c
push eax
lea eax, [ebp - 0xd8]
push eax
mov byte [ebp - 4], 0x42
call fcn.100102a0
add esp, 0xc
push edi
push eax
lea ecx, [ebp - 0xa0]
push ecx
mov byte [ebp - 4], 0x43
call fcn.10010440
add esp, 0xc
lea ecx, [ebp - 0xd8]
call fcn.1000b180
mov ecx, esi
call fcn.1000b180
lea ecx, [ebp - 0x19c]
call fcn.1000b180
lea ecx, [ebp - 0x180]
mov byte [ebp - 4], 0x48
call fcn.1000b180
lea edx, [ebp - 0xa0]
push edx
lea eax, [ebp - 0x84]
push eax
call fcn.1000e0c0
add esp, 8
lea ecx, [ebp - 0xa0]
call fcn.1000b180
lea ecx, [ebp - 0x84]
call fcn.1000b180
lea ecx, [ebp - 0x30]
call fcn.1000b180
lea eax, [ebp - 0x2bc]
call fcn.100534e0
lea ecx, [ebp - 0xbc]
mov byte [ebp - 4], 0xc
call fcn.1000b180
jmp 0x10040b3b
lea eax, [ebp - 0x2bc]
call fcn.100534e0
mov byte [ebp - 4], 0xc
cmp dword [ebp - 0xa8], esi
jb 0x10040b3b
mov ecx, dword [ebp - 0xbc]
push ecx
call fcn.10065453
add esp, 4
mov ebx, 8
mov ecx, dword [ebp - 0x2d8]
push 5
push str.ch1
call fcn.10009ff0
lea edx, [ebp - 0x148]
push edx
call fcn.10041610
add esp, 4
lea esi, [ebp - 0xa0]
mov byte [ebp - 4], 0x49
call fcn.1004cac0
mov esi, eax
lea edi, [ebp - 0xbc]
mov byte [ebp - 4], 0x4a
call fcn.10043500
push 0xffffffffffffffff
push 0
push eax
lea ecx, [ebp - 0x148]
mov byte [ebp - 4], 0x4b
call fcn.1000a320
cmp dword [ebp - 0xa8], ebx
jb 0x10040bac
mov eax, dword [ebp - 0xbc]
push eax
call fcn.10065453
add esp, 4
xor esi, esi
xor ecx, ecx
mov byte [ebp - 4], 0x49
mov dword [ebp - 0xa8], 7
mov dword [ebp - 0xac], esi
mov word [ebp - 0xbc], cx
cmp dword [ebp - 0x8c], ebx
jb 0x10040be2
mov edx, dword [ebp - 0xa0]
push edx
call fcn.10065453
add esp, 4
mov eax, dword [ebp - 0x2d4]
push eax
lea edi, [ebp - 0x148]
call fcn.1004e7c0
cmp dword [ebp - 0x134], ebx
jb 0x10040c0b
mov ecx, dword [ebp - 0x148]
push ecx
call fcn.10065453
add esp, 4
xor edx, edx
mov edi, 7
mov dword [ebp - 0x134], edi
mov dword [ebp - 0x138], esi
mov word [ebp - 0x148], dx
cmp dword [ebp - 0x118], ebx
jb 0x10040c3c
mov eax, dword [ebp - 0x12c]
push eax
call fcn.10065453
add esp, 4
mov eax, dword [ebp - 0x2e8]
xor ecx, ecx
mov dword [ebp - 0x118], edi
mov dword [ebp - 0x11c], esi
mov word [ebp - 0x12c], cx
cmp eax, esi
je 0x10040c64
push eax
call fcn.10065453
add esp, 4
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x14]
xor ecx, ebp
call fcn.1006656c
mov esp, ebp
pop ebp
ret 0xc