Function at 0x1003a929
Capabilities:
Delete registry value

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x1006aecc
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
mov eax, 0x170c
call fcn.100652e0
push esi
push edi
movzx eax, byte [ebp + 0x38]
test eax, eax
je 0x1004454f
mov eax, dword [ebp + 0x18]
mov dword [ebp - 0xda0], eax
mov eax, dword [ebp + 8]
mov dword [ebp - 0xc90], eax
mov eax, dword [ebp + 0x24]
mov dword [ebp - 0xc78], eax
mov eax, dword [ebp + 0x1c]
mov dword [ebp - 0xc88], eax
mov eax, dword [ebp + 0x30]
mov dword [ebp - 0xc80], eax
mov eax, dword [ebp + 0x34]
mov dword [ebp - 0xdb8], eax
mov eax, dword [ebp + 0x2c]
mov dword [ebp - 0xca0], eax
mov eax, dword [ebp + 0xc]
mov dword [ebp - 0xc98], eax
mov eax, dword [ebp + 0x40]
mov dword [ebp - 0xdb0], eax
lea eax, [ebp + 0x14]
mov dword [ebp - 0xc70], eax
mov eax, dword [ebp + 0x20]
mov dword [ebp - 0xda8], eax
mov eax, dword [ebp - 0xc70]
movzx eax, byte [eax]
test eax, eax
je 0x1003ab7e
mov eax, dword [ebp - 0xc78]
mov dword [ebp - 0xca8], eax
mov eax, dword [ebp - 0xc80]
mov dword [ebp - 0xcb0], eax
mov eax, dword [ebp - 0xc88]
mov dword [ebp - 0xcb8], eax
mov eax, dword [ebp - 0xc90]
mov dword [ebp - 0xcc0], eax
mov eax, dword [ebp - 0xc98]
mov dword [ebp - 0xcc8], eax
mov eax, dword [ebp - 0xca0]
mov dword [ebp - 0xd88], eax
mov eax, dword [ebp - 0xca8]
mov dword [ebp - 0xd98], eax
mov eax, dword [ebp - 0xcb0]
mov dword [ebp - 0xd90], eax
mov eax, dword [ebp - 0xcb8]
mov dword [ebp - 0xa84], eax
mov eax, dword [ebp - 0xcc0]
mov dword [ebp - 0xa7c], eax
mov eax, dword [ebp - 0xcc8]
mov dword [ebp - 0x6d4], eax
mov eax, dword [ebp - 0xd88]
mov dword [ebp - 0xaf0], eax
mov eax, dword [ebp - 0xd90]
cmp dword [eax], 0
jne 0x1003aac2
mov eax, dword [ebp - 0x6d4]
mov ecx, dword [ebp - 0xa7c]
mov ecx, dword [ecx]
mov dword [eax], ecx
mov eax, dword [ebp - 0x6d4]
cmp dword [eax], 9
jl 0x1003aa8f
mov dword [ebp - 0xa8c], 1
jmp 0x1003aa96
and dword [ebp - 0xa8c], 0
mov eax, dword [ebp - 0xa84]
mov ecx, dword [ebp - 0xa7c]
mov ecx, dword [ecx]
mov dword [eax], ecx
mov eax, dword [ebp - 0xa84]
mov eax, dword [eax]
imul eax, dword [ebp - 0xa8c]
test eax, eax
jne 0x1003aac2
and dword [ebp - 0xa9c], 0
jmp 0x1003aacc
mov dword [ebp - 0xa9c], 1
mov eax, dword [ebp - 0xaf0]
cmp dword [eax], 1
jb 0x1003aae3
mov dword [ebp - 0xa94], 1
jmp 0x1003aaea
and dword [ebp - 0xa94], 0
cmp dword [ebp - 0xa94], 1
ja 0x1003aaff
mov dword [ebp - 0xae0], 1
jmp 0x1003ab06
and dword [ebp - 0xae0], 0
mov eax, dword [ebp - 0xa9c]
cmp eax, dword [ebp - 0xae0]
jle 0x1003ab20
mov dword [ebp - 0xae8], 1
jmp 0x1003ab27
and dword [ebp - 0xae8], 0
mov eax, dword [ebp - 0xae8]
inc eax
neg eax
cmp eax, 1
jge 0x1003ab41
mov dword [ebp - 0xaf8], 1
jmp 0x1003ab48
and dword [ebp - 0xaf8], 0
mov eax, dword [ebp - 0xaf0]
mov eax, dword [eax]
cmp dword [ebp - 0xaf8], eax
jne 0x1003ab64
mov dword [ebp - 0xb00], 1
jmp 0x1003ab6b
and dword [ebp - 0xb00], 0
mov eax, dword [ebp - 0xd98]
mov ecx, dword [ebp - 0xb00]
mov dword [eax], ecx
jmp 0x1004454d
mov eax, dword [ebp - 0xda0]
mov dword [ebp - 0xe44], eax
mov eax, dword [ebp - 0xda8]
mov dword [ebp - 0xcb4], eax
mov eax, dword [ebp - 0xdb0]
mov dword [ebp - 0xa6c], eax
mov eax, dword [ebp - 0xdb8]
mov dword [ebp - 0x410], eax
mov dword [ebp - 0x184], 6
mov dword [ebp - 0x141c], 8
mov dword [ebp - 0x260], 0
jmp 0x1003abdb
mov eax, dword [ebp - 0x260]
inc eax
mov dword [ebp - 0x260], eax
cmp dword [ebp - 0x260], 1
jge 0x1003abf7
mov eax, dword [ebp - 0x260]
mov dword [ebp + eax*4 - 0x13f0], 0xa8e
jmp 0x1003abce
mov dword [ebp - 0x184], 0
jmp 0x1003ac10
mov eax, dword [ebp - 0x184]
inc eax
mov dword [ebp - 0x184], eax
cmp dword [ebp - 0x184], 0
jg 0x1003ac44
mov byte [ebp - 0xc6], 0
push 0x6d38
lea eax, [ebp - 0xc6]
push eax
push 0
push 1
push 0x4ee
push 0x466a
call fcn.1002fe5c
add esp, 0x18
jmp 0x1003ac03
push 0x384a
push 0x752d
push 0x6df0
push 0
push 0
push 1
push 0x56b4
push 0x1352
push 0x173a
push 0x11eb
lea eax, [ebp - 0x184]
push eax
push 0x5e24
push 0x71d4
push 0x5422
push 0x2711
call fcn.100446eb
add esp, 0x3c
mov dword [ebp - 0x84], 0xfffffff9
mov dword [ebp - 0xb4], 0xc28cae2f
mov dword [ebp - 0x4c8], 3
mov dword [ebp - 0x84], 0
jmp 0x1003acc7
mov eax, dword [ebp - 0x84]
dec eax
mov dword [ebp - 0x84], eax
cmp dword [ebp - 0x84], 0xffffffec
jle 0x1003b239
mov dword [ebp - 0x3a0], 0x6de713a4
mov dword [ebp - 0x39c], 0x6de713a4
mov dword [ebp - 0x398], 0x6de713a4
mov dword [ebp - 0x394], 0x6de713a4
mov dword [ebp - 0xbc], 1
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0x3a0], 0xfffffffb
jmp 0x1003ad34
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x3a0]
inc eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x3a0], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x3a0], 0xb
je 0x1003b234
mov dword [ebp - 0x1c], 0xf7bf
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x1c]
cmp dword [ebp + eax - 0x3a0], ecx
jne 0x1003ad6d
mov dword [ebp - 0xb20], 1
jmp 0x1003ad74
and dword [ebp - 0xb20], 0
push 4
pop eax
imul eax, eax, 3
mov eax, dword [ebp + eax - 0x3a0]
sub eax, dword [ebp - 0x1c]
imul eax, dword [ebp - 0xb20]
cmp eax, dword [ebp - 0x1c]
jg 0x1003ad9c
mov dword [ebp - 0xaf4], 1
jmp 0x1003ada3
and dword [ebp - 0xaf4], 0
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0x1278], eax
mov eax, dword [ebp - 0xaf4]
mov dword [ebp - 0xb4], eax
mov eax, dword [ebp - 0xb4]
mov dword [ebp - 0x13d8], eax
cmp dword [ebp - 0x1c], 0x698
je 0x1003add9
mov dword [ebp - 0x4a0], 1
jmp 0x1003ade0
and dword [ebp - 0x4a0], 0
mov eax, dword [ebp - 0x1c]
cmp dword [ebp - 0x4a0], eax
jne 0x1003ae03
cmp dword [ebp - 0x1c], 0
jne 0x1003ae03
mov eax, 0x4f78d7cb
test eax, eax
jne 0x1003ae03
and dword [ebp - 0xa74], 0
jmp 0x1003ae0d
mov dword [ebp - 0xa74], 1
mov eax, dword [ebp - 0x1c]
cmp eax, dword [ebp - 0xa74]
je 0x1003af07
mov dword [ebp - 0x4a8], 8
push 4
pop eax
imul eax, eax, 3
mov eax, dword [ebp + eax - 0x3a0]
cmp dword [ebp - 0x84], eax
jl 0x1003ae47
mov dword [ebp - 0x49c], 1
jmp 0x1003ae4e
and dword [ebp - 0x49c], 0
mov eax, dword [ebp - 0x49c]
neg eax
je 0x1003ae74
push 4
pop eax
imul eax, eax, 3
cmp dword [ebp + eax - 0x3a0], 0
je 0x1003ae74
mov dword [ebp - 0x7f0], 1
jmp 0x1003ae7b
and dword [ebp - 0x7f0], 0
mov eax, dword [ebp - 0x4a8]
cmp eax, dword [ebp - 0x7f0]
jl 0x1003ae95
mov dword [ebp - 0x998], 1
jmp 0x1003ae9c
and dword [ebp - 0x998], 0
mov eax, dword [ebp - 0x84]
add eax, dword [ebp - 0x4a8]
imul eax, dword [ebp - 0x1c]
cmp eax, dword [ebp - 0x998]
jg 0x1003aec0
mov dword [ebp - 0x4b0], 1
jmp 0x1003aec7
and dword [ebp - 0x4b0], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x3a0]
imul eax, dword [ebp - 0x4b0]
test eax, eax
jne 0x1003aeec
xor eax, eax
jne 0x1003aeec
and dword [ebp - 0x7f8], 0
jmp 0x1003aef6
mov dword [ebp - 0x7f8], 1
mov eax, dword [ebp - 0x7f8]
mov dword [ebp - 0xbc], eax
jmp 0x1003b056
push 2
lea ecx, [ebp - 0x1080]
call fcn.100177e1
and dword [ebp - 4], 0
push 0
push 0xf4a
push 1
push 0x3b49
push 0x738
lea eax, [ebp - 0x1080]
push eax
push 0x4b29
push 0x1df2
push 0
push 0x39ee
push 0x44f
lea eax, [ebp - 0x1280]
push eax
call fcn.10046110
add esp, 0x30
mov dword [ebp - 0x1c], 0
jmp 0x1003af67
mov eax, dword [ebp - 0x1c]
inc eax
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 1
jg 0x1003afe9
push 0
push 0x19fb
lea eax, [ebp - 0x1080]
push eax
lea eax, [ebp - 0x1c]
push eax
push 0x75ba
lea eax, [ebp - 0xbc]
push eax
push 1
push 0
lea eax, [ebp - 0xb4]
push eax
call fcn.10030a07
add esp, 0x24
mov byte [ebp - 0xa7], 0
movzx eax, byte [ebp - 0xa7]
test eax, eax
je 0x1003afe4
push 0x2d0f
push 0
push 0x2406
push 1
push 0x147d
push 0x796
push 0x376b
push 0x5c56
push 0x4b3c
push 0x3f50
call fcn.1002a535
add esp, 0x28
jmp 0x1003af60
push 0x689d
push 0x4c6a
push 0x1c14
push 0
push 0x583b
push 0x44d1
push 0x2d42
push 0x53db
push 0x36a1
push 0x3ffc
push 0x300e
push 0x7c3e
lea eax, [ebp - 0xbc]
push eax
push 0
push 0x2955
push 0x5686
push 0x4dbe
push 0x7482
call fcn.1003a29d
add esp, 0x48
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x1080]
call fcn.100118e9
mov eax, dword [ebp - 0x1c]
sub eax, 0x5b2dbbfa
push 4
pop ecx
imul ecx, ecx, 0
cmp eax, dword [ebp + ecx - 0x3a0]
jg 0x1003b079
mov dword [ebp - 0x4b8], 1
jmp 0x1003b080
and dword [ebp - 0x4b8], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x3a0]
cmp dword [ebp - 0x4b8], eax
jl 0x1003b0a1
mov dword [ebp - 0xadc], 1
jmp 0x1003b0a8
and dword [ebp - 0xadc], 0
mov eax, dword [ebp - 0xb4]
cmp dword [ebp - 0xadc], eax
je 0x1003b0c2
mov dword [ebp - 0x4c0], 1
jmp 0x1003b0c9
and dword [ebp - 0x4c0], 0
mov eax, dword [ebp - 0xb4]
cmp dword [ebp - 0x4c0], eax
jle 0x1003b0e3
mov dword [ebp - 0x800], 1
jmp 0x1003b0ea
and dword [ebp - 0x800], 0
mov eax, dword [ebp - 0x84]
mov ecx, dword [ebp - 0x800]
lea eax, [ecx + eax - 0xffff]
mov dword [ebp - 0x4c8], eax
mov eax, dword [ebp - 0xbc]
cmp dword [ebp - 0x4c8], eax
jg 0x1003b11d
mov dword [ebp - 0x9a0], 1
jmp 0x1003b124
and dword [ebp - 0x9a0], 0
mov eax, dword [ebp - 0xb4]
cmp dword [ebp - 0x9a0], eax
je 0x1003b13e
mov dword [ebp - 0x4d0], 1
jmp 0x1003b145
and dword [ebp - 0x4d0], 0
mov eax, dword [ebp - 0x84]
sub eax, dword [ebp - 0x1c]
cmp eax, dword [ebp - 0x4d0]
jg 0x1003b162
mov dword [ebp - 0x808], 1
jmp 0x1003b169
and dword [ebp - 0x808], 0
mov eax, dword [ebp - 0xb4]
cmp eax, dword [ebp - 0x808]
jg 0x1003b183
mov dword [ebp - 0x4d8], 1
jmp 0x1003b18a
and dword [ebp - 0x4d8], 0
mov eax, dword [ebp - 0xbc]
cmp dword [ebp - 0x4d8], eax
jle 0x1003b1a4
mov dword [ebp - 0xa70], 1
jmp 0x1003b1ab
and dword [ebp - 0xa70], 0
mov eax, dword [ebp - 0xbc]
cmp dword [ebp - 0xa70], eax
jge 0x1003b1c5
mov dword [ebp - 0x4e0], 1
jmp 0x1003b1cc
and dword [ebp - 0x4e0], 0
cmp dword [ebp - 0x4e0], 0xb4b2
je 0x1003b1e4
mov dword [ebp - 0x810], 1
jmp 0x1003b1eb
and dword [ebp - 0x810], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x3a0]
cmp dword [ebp - 0x810], eax
jl 0x1003b21c
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x3a0], 0
je 0x1003b21c
mov dword [ebp - 0x4e8], 1
jmp 0x1003b223
and dword [ebp - 0x4e8], 0
mov eax, dword [ebp - 0x4e8]
mov dword [ebp - 0xbc], eax
jmp 0x1003ad19
jmp 0x1003acba
push 2
lea ecx, [ebp - 0x111c]
call fcn.100177e1
mov dword [ebp - 4], 1
mov dword [ebp - 0xdd8], 6
mov dword [ebp - 0xdc8], 0x60cbeb96
mov dword [ebp - 0xdc0], 0x594d0357
mov dword [ebp - 0xdd0], 0xf88039d6
mov dword [ebp - 0xde0], 0xffffffff
push 0x6527
lea eax, [ebp - 0x111c]
push eax
push 0x1b7a
push 1
push 0x6ca8
push 0
push 0
lea eax, [ebp - 0x13f8]
push eax
call fcn.10033862
add esp, 0x20
push 0x539
lea eax, [ebp - 0xdc0]
push eax
push 0x6dd2
push 0x3d5
push 0
push 1
lea eax, [ebp - 0xdc8]
push eax
lea eax, [ebp - 0xdd0]
push eax
lea eax, [ebp - 0x111c]
push eax
lea eax, [ebp - 0xdd8]
push eax
lea eax, [ebp - 0xde0]
push eax
call fcn.100340c5
add esp, 0x2c
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x111c]
call fcn.100118e9
mov dword [ebp - 0x9c], 6
mov dword [ebp - 0x1288], 8
mov dword [ebp - 0x10], 0x63f9
mov dword [ebp - 0x488], 0x6bcfb656
mov dword [ebp - 0x9b8], 0x96456cfc
mov dword [ebp - 0x838], 0xfffffff6
push 4
lea ecx, [ebp - 0x1324]
call fcn.100177e1
mov dword [ebp - 4], 2
lea eax, [ebp - 0x13e8]
push eax
lea eax, [ebp - 0x1324]
push eax
push 0
push 0
call fcn.1002f9c8
add esp, 0x10
mov eax, dword [ebp - 0x10]
cmp dword [ebp - 0x10], eax
je 0x1003b379
mov dword [ebp - 0x9a8], 1
jmp 0x1003b380
and dword [ebp - 0x9a8], 0
mov eax, dword [ebp - 0x9a8]
add eax, 0x1a4d
mov ecx, dword [ebp - 0x10]
add ecx, dword [ebp - 0x10]
cmp eax, ecx
jl 0x1003b3a1
mov dword [ebp - 0x4f0], 1
jmp 0x1003b3a8
and dword [ebp - 0x4f0], 0
mov eax, dword [ebp - 0x10]
cmp eax, dword [ebp - 0x4f0]
jg 0x1003b3bf
mov dword [ebp - 0x818], 1
jmp 0x1003b3c6
and dword [ebp - 0x818], 0
mov eax, dword [ebp - 0x10]
cmp dword [ebp - 0x818], eax
jg 0x1003b3dd
mov dword [ebp - 0x4f8], 1
jmp 0x1003b3e4
and dword [ebp - 0x4f8], 0
mov eax, dword [ebp - 0x10]
cmp dword [ebp - 0x4f8], eax
jge 0x1003b3fb
mov dword [ebp - 0xb04], 1
jmp 0x1003b402
and dword [ebp - 0xb04], 0
mov eax, dword [ebp - 0x10]
cmp dword [ebp - 0xb04], eax
jg 0x1003b419
mov dword [ebp - 0x500], 1
jmp 0x1003b420
and dword [ebp - 0x500], 0
mov eax, dword [ebp - 0x500]
sub eax, dword [ebp - 0x10]
cmp eax, dword [ebp - 0x10]
jne 0x1003b7d3
mov dword [ebp - 0x528], 0x3019c36c
mov dword [ebp - 0x490], 0xd5181448
mov dword [ebp - 0x64], 0
jmp 0x1003b456
mov eax, dword [ebp - 0x64]
inc eax
mov dword [ebp - 0x64], eax
cmp dword [ebp - 0x64], 4
jge 0x1003b46c
mov eax, dword [ebp - 0x64]
mov dword [ebp + eax*4 - 0xec0], 0xa31e468a
jmp 0x1003b44f
mov dword [ebp - 0x64], 0
jmp 0x1003b47c
mov eax, dword [ebp - 0x64]
inc eax
mov dword [ebp - 0x64], eax
cmp dword [ebp - 0x64], 2
jge 0x1003b492
mov eax, dword [ebp - 0x64]
mov dword [ebp + eax*4 - 0xaa8], 0x5950169f
jmp 0x1003b475
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0xec0]
mov dword [ebp - 0x1290], eax
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0xec0]
mov dword [ebp - 0x1400], eax
cmp dword [ebp - 0x10], 0xfffffffe
jae 0x1003b4d0
mov eax, 0xb1857497
test eax, eax
jne 0x1003b4d0
and dword [ebp - 0xea0], 0
jmp 0x1003b4da
mov dword [ebp - 0xea0], 1
mov eax, dword [ebp - 0x10]
mov dword [ebp - 0x1298], eax
push 4
pop eax
shl eax, 0
mov dword [ebp + eax - 0xaa8], 0x4286a4a
cmp dword [ebp - 0x10], 0x4286a4a
jge 0x1003b509
mov dword [ebp - 0x820], 1
jmp 0x1003b510
and dword [ebp - 0x820], 0
imul eax, dword [ebp - 0x820], 0
cmp eax, 2
jbe 0x1003b528
mov dword [ebp - 0x508], 1
jmp 0x1003b52f
and dword [ebp - 0x508], 0
mov eax, dword [ebp - 0x10]
cmp dword [ebp - 0x508], eax
jne 0x1003b546
mov dword [ebp - 0x9b0], 1
jmp 0x1003b54d
and dword [ebp - 0x9b0], 0
cmp dword [ebp - 0x9b0], 0xffffffff
jne 0x1003b562
mov dword [ebp - 0x510], 1
jmp 0x1003b569
and dword [ebp - 0x510], 0
mov eax, dword [ebp - 0x10]
cmp dword [ebp - 0x510], eax
jl 0x1003b580
mov dword [ebp - 0x828], 1
jmp 0x1003b587
and dword [ebp - 0x828], 0
mov eax, dword [ebp - 0x10]
cmp dword [ebp - 0x828], eax
jg 0x1003b59e
mov dword [ebp - 0x518], 1
jmp 0x1003b5a5
and dword [ebp - 0x518], 0
push 4
pop eax
imul eax, eax, 3
mov eax, dword [ebp + eax - 0xec0]
cmp eax, dword [ebp - 0x518]
jl 0x1003b5c6
mov dword [ebp - 0xa78], 1
jmp 0x1003b5cd
and dword [ebp - 0xa78], 0
mov eax, dword [ebp - 0x10]
imul eax, dword [ebp - 0xa78]
mov dword [ebp - 0x488], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xec0]
cmp dword [ebp - 0x488], eax
jg 0x1003b5fe
mov dword [ebp - 0x520], 1
jmp 0x1003b605
and dword [ebp - 0x520], 0
push 4
pop eax
imul eax, eax, 3
mov eax, dword [ebp + eax - 0xec0]
cmp dword [ebp - 0x520], eax
jne 0x1003b626
mov dword [ebp - 0x830], 1
jmp 0x1003b62d
and dword [ebp - 0x830], 0
mov eax, dword [ebp - 0x830]
mov dword [ebp - 0x528], eax
mov eax, dword [ebp - 0x528]
mov dword [ebp - 0x490], eax
push 0xfffffffffffffffa
pop eax
test eax, eax
je 0x1003b6c7
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0xaa8]
mov dword [ebp - 0x9b8], eax
cmp dword [ebp - 0x9b8], 0x2a6bc671
jl 0x1003b677
mov dword [ebp - 0x530], 1
jmp 0x1003b67e
and dword [ebp - 0x530], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xaa8]
cmp dword [ebp - 0x530], eax
jge 0x1003b69f
mov dword [ebp - 0xea8], 1
jmp 0x1003b6a6
and dword [ebp - 0xea8], 0
mov eax, dword [ebp - 0x490]
mov dword [ebp - 0x140c], eax
cmp dword [ebp - 0x838], 0
je 0x1003b6c7
mov dword [ebp - 0x538], 1
jmp 0x1003b6ce
and dword [ebp - 0x538], 0
mov eax, dword [ebp - 0x838]
cmp dword [ebp - 0x538], eax
jge 0x1003b6f1
mov eax, 0x965344ff
test eax, eax
je 0x1003b6f1
mov dword [ebp - 0xae4], 1
jmp 0x1003b6f8
and dword [ebp - 0xae4], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xaa8]
cmp dword [ebp - 0xae4], eax
jne 0x1003b719
mov dword [ebp - 0xeb0], 1
jmp 0x1003b720
and dword [ebp - 0xeb0], 0
mov eax, dword [ebp - 0x488]
mov dword [ebp - 0x12a0], eax
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0xec0], 0x8b536e21
ja 0x1003b74b
mov dword [ebp - 0x540], 1
jmp 0x1003b752
and dword [ebp - 0x540], 0
imul eax, dword [ebp - 0x540], 0x4e41
cmp eax, dword [ebp - 0x10]
jne 0x1003b76d
mov dword [ebp - 0xeac], 1
jmp 0x1003b774
and dword [ebp - 0xeac], 0
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0xaa8], 0xcf72
je 0x1003b793
mov dword [ebp - 0x840], 1
jmp 0x1003b79a
and dword [ebp - 0x840], 0
mov eax, dword [ebp - 0x10]
cmp dword [ebp - 0x840], eax
jle 0x1003b7b1
mov dword [ebp - 0x548], 1
jmp 0x1003b7b8
and dword [ebp - 0x548], 0
imul eax, dword [ebp - 0x548], 0x40f
imul eax, eax, 0x72a6
mov dword [ebp - 0x490], eax
jmp 0x1003b8e9
mov dword [ebp - 0x13f4], 0x38aa138a
mov dword [ebp - 0x12a8], 0x4a8f9b1
mov dword [ebp - 0x1450], 1
mov dword [ebp - 0x12b0], 0x819b53b3
mov dword [ebp - 0x13fc], 0xba6c15a2
mov dword [ebp - 0x12b8], 0
mov dword [ebp - 0x1494], 0xa66be80d
mov dword [ebp - 0x12f0], 1
mov dword [ebp - 0x1410], 0x3844478c
mov dword [ebp - 0x1178], 0x1f6a35eb
mov dword [ebp - 0x117c], 0xfffffffb
mov dword [ebp - 0xfa0], 1
mov dword [ebp - 0xf9c], 1
mov dword [ebp - 0xf98], 1
mov dword [ebp - 0xf94], 1
lea ecx, [ebp - 0x3a1]
call fcn.10017948
push eax
lea eax, [ebp - 0xf90]
push eax
lea eax, [ebp - 0xfa0]
push eax
lea ecx, [ebp - 0x153c]
call fcn.1001794b
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0x14d4]
call fcn.10017894
mov byte [ebp - 4], 3
mov dword [ebp - 0xba0], 0x7a53
push 0x72bc
push 0x2cfd
push 0x1831
push 0x4abf
lea eax, [ebp - 0xba0]
push eax
push 1
push 1
push 0xfde
push 0
call fcn.10037ffc
add esp, 0x24
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x14d4]
call fcn.100118e9
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x1324]
call fcn.100118e9
mov dword [ebp - 0x48], 0x770a77c8
mov dword [ebp - 0x578], 0x2fafd11d
mov dword [ebp - 0x3ac], 0x9a20b287
mov dword [ebp - 0x848], 0xa796d402
mov dword [ebp - 0x558], 0x21462ccd
mov dword [ebp - 0xe24], 0xfffffff6
mov dword [ebp - 0x264], 0
jmp 0x1003b94a
mov eax, dword [ebp - 0x264]
inc eax
mov dword [ebp - 0x264], eax
cmp dword [ebp - 0x264], 3
jge 0x1003b966
mov eax, dword [ebp - 0x264]
mov dword [ebp + eax*4 - 0x1504], 0x64d64ea3
jmp 0x1003b93d
mov dword [ebp - 0xbac], 0x1c8d
cmp dword [ebp - 0xbac], 0x616
jge 0x1003ba40
lea eax, [ebp - 0xd74]
push eax
lea eax, [ebp - 0x9c0]
push eax
push 0x10008074
call fcn.1005076b
add esp, 0xc
mov eax, dword [ebp - 0x9c0]
cdq
sub eax, edx
sar eax, 1
mov dword [ebp - 0xc4], eax
mov eax, dword [ebp - 0xc4]
shl eax, 1
mov ecx, dword [ebp - 0x9c0]
sub ecx, eax
mov dword [ebp - 0x130], ecx
cmp dword [ebp - 0xc4], 0
jl 0x1003ba08
cmp dword [ebp - 0x130], 0
jl 0x1003ba08
mov eax, dword [ebp - 0xc4]
add eax, dword [ebp - 0x130]
cdq
idiv dword [ebp - 0xd74]
test edx, edx
je 0x1003ba08
mov eax, dword [ebp - 0xc4]
dec eax
mov dword [ebp - 0xc4], eax
mov eax, dword [ebp - 0x130]
inc eax
inc eax
mov dword [ebp - 0x130], eax
jmp 0x1003b9c2
cmp dword [ebp - 0xc4], 0
jl 0x1003ba1a
cmp dword [ebp - 0x130], 0
jge 0x1003ba27
push 0x10007c14
call fcn.10051176
pop ecx
jmp 0x1003ba40
mov eax, dword [ebp - 0xc4]
add eax, dword [ebp - 0x130]
push eax
push 0x10007b8c
call fcn.10050db3
pop ecx
pop ecx
cmp dword [ebp - 0x48], 0
jae 0x1003ba52
mov dword [ebp - 0xbb4], 1
jmp 0x1003ba59
and dword [ebp - 0xbb4], 0
mov eax, dword [ebp - 0x48]
mov dword [ebp - 0x3ac], eax
mov eax, dword [ebp - 0x3ac]
mov dword [ebp - 0x550], eax
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x550]
mov dword [ebp + eax - 0x1504], ecx
mov eax, dword [ebp - 0x550]
mov dword [ebp - 0x848], eax
mov eax, dword [ebp - 0x848]
mov dword [ebp - 0x558], eax
cmp dword [ebp - 0x558], 0
je 0x1003bab7
cmp dword [ebp - 0x3ac], 0
je 0x1003bab7
mov dword [ebp - 0xa80], 1
jmp 0x1003babe
and dword [ebp - 0xa80], 0
cmp dword [ebp - 0xa80], 0xfffffff8
jne 0x1003bad3
mov dword [ebp - 0x560], 1
jmp 0x1003bada
and dword [ebp - 0x560], 0
mov eax, dword [ebp - 0x48]
imul eax, dword [ebp - 0x560]
cmp eax, dword [ebp - 0x48]
jge 0x1003baf5
mov dword [ebp - 0x850], 1
jmp 0x1003bafc
and dword [ebp - 0x850], 0
cmp dword [ebp - 0x850], 0
jne 0x1003bb11
mov dword [ebp - 0x568], 1
jmp 0x1003bb18
and dword [ebp - 0x568], 0
mov eax, dword [ebp - 0x48]
cmp dword [ebp - 0x568], eax
je 0x1003bb2f
mov dword [ebp - 0x9c8], 1
jmp 0x1003bb36
and dword [ebp - 0x9c8], 0
mov eax, dword [ebp - 0x48]
cmp dword [ebp - 0x9c8], eax
jg 0x1003bb4d
mov dword [ebp - 0x570], 1
jmp 0x1003bb54
and dword [ebp - 0x570], 0
mov eax, dword [ebp - 0x48]
cmp dword [ebp - 0x570], eax
jl 0x1003bb6b
mov dword [ebp - 0x858], 1
jmp 0x1003bb72
and dword [ebp - 0x858], 0
mov eax, dword [ebp - 0x48]
mov ecx, dword [ebp - 0x858]
lea eax, [ecx + eax + 5]
cmp dword [ebp - 0x48], eax
jge 0x1003bb90
mov dword [ebp - 0xb18], 1
jmp 0x1003bb97
and dword [ebp - 0xb18], 0
mov eax, dword [ebp - 0x48]
mov dword [ebp - 0x578], eax
mov eax, dword [ebp - 0x578]
imul eax, dword [ebp - 0xb18]
cmp eax, 0x158d
jl 0x1003bbc0
mov dword [ebp - 0x580], 1
jmp 0x1003bbc7
and dword [ebp - 0x580], 0
mov eax, dword [ebp - 0x48]
imul eax, dword [ebp - 0x580]
cmp eax, dword [ebp - 0x48]
jge 0x1003bbe2
mov dword [ebp - 0x860], 1
jmp 0x1003bbe9
and dword [ebp - 0x860], 0
mov eax, dword [ebp - 0x860]
mov dword [ebp - 0xe24], eax
mov dword [ebp - 0x2e8], 0
jmp 0x1003bc0e
mov eax, dword [ebp - 0x2e8]
inc eax
mov dword [ebp - 0x2e8], eax
cmp dword [ebp - 0x2e8], 1
jge 0x1003bc2a
mov eax, dword [ebp - 0x2e8]
mov dword [ebp + eax*4 - 0x1184], 0xa8e
jmp 0x1003bc01
push 1
lea ecx, [ebp - 0x390]
call fcn.100177e1
mov dword [ebp - 4], 4
mov dword [ebp - 0x30], 0xffffffff
mov dword [ebp - 0xa88], 0x6e6a3735
mov dword [ebp - 0x870], 0
mov dword [ebp - 0x38], 0
jmp 0x1003bc69
mov eax, dword [ebp - 0x38]
inc eax
mov dword [ebp - 0x38], eax
cmp dword [ebp - 0x38], 1
jge 0x1003bc85
push dword [ebp - 0x38]
lea ecx, [ebp - 0x390]
call fcn.10017939
mov dword [eax], 0xa8ea
jmp 0x1003bc62
mov dword [ebp - 0x38], 0
jmp 0x1003bc95
mov eax, dword [ebp - 0x38]
inc eax
mov dword [ebp - 0x38], eax
cmp dword [ebp - 0x38], 3
jge 0x1003bcab
mov eax, dword [ebp - 0x38]
mov dword [ebp + eax*4 - 0x1334], 0x3cc9f196
jmp 0x1003bc8e
mov dword [ebp - 0x38], 0
jmp 0x1003bcbb
mov eax, dword [ebp - 0x38]
inc eax
mov dword [ebp - 0x38], eax
cmp dword [ebp - 0x38], 1
jge 0x1003bcd1
mov eax, dword [ebp - 0x38]
mov dword [ebp + eax*4 - 0xbc4], 0x209a
jmp 0x1003bcb4
mov byte [ebp - 0x115], 0
push 0xd4d
push 0
lea eax, [ebp - 0x115]
push eax
push 0x2a19
push 0x6573
push 0
call fcn.1002ad9e
add esp, 0x18
mov dword [ebp - 0x30], 0
jmp 0x1003bd0a
mov eax, dword [ebp - 0x30]
inc eax
mov dword [ebp - 0x30], eax
cmp dword [ebp - 0x30], 0
jg 0x1003c084
push dword [ebp - 0x30]
lea ecx, [ebp - 0x390]
call fcn.10017939
cmp dword [eax], 0
je 0x1003bd63
mov byte [ebp - 0xa9], 0
movzx eax, byte [ebp - 0xa9]
test eax, eax
je 0x1003bd5e
push 0xb86
push 0x7982
push 0x26c7
push 0
push 0x249e
push 0
push 0x57de
call fcn.10033e35
add esp, 0x1c
jmp 0x1003c07f
mov dword [ebp - 0xbbc], 0xffff
mov dword [ebp - 0x878], 0xfffffffa
push 4
lea ecx, [ebp - 0x10bc]
call fcn.100177e1
mov byte [ebp - 4], 5
push 0x5c4c
push 0x5433
lea eax, [ebp - 0x10bc]
push eax
push 0x6900
push 1
push 0x2122
push 0x5b4f
push 0x6028
push 0
push 0
push 0x7b37
push 0x378c
push 0x1e97
push 0x7331
push 0x3014
lea eax, [ebp - 0x118c]
push eax
push 0xd93
push 0x5fda
call fcn.1003953f
add esp, 0x48
push 0x3d18
push 0
push 0x2036
push 1
push 0x2d2
lea eax, [ebp - 0xbbc]
push eax
push 0x3cce
push 1
push 0xd84
push 0x3ca4
call fcn.1002b999
add esp, 0x28
push dword [ebp - 0x30]
lea ecx, [ebp - 0x390]
call fcn.10017939
mov esi, dword [eax]
inc esi
push 0
lea ecx, [ebp - 0x390]
call fcn.10017939
cmp esi, dword [eax]
jg 0x1003be46
mov dword [ebp - 0x588], 1
jmp 0x1003be4d
and dword [ebp - 0x588], 0
push dword [ebp - 0x30]
lea ecx, [ebp - 0x390]
call fcn.10017939
mov ecx, dword [ebp - 0x588]
imul ecx, dword [eax]
push 4
pop eax
imul eax, eax, 0
cmp ecx, dword [ebp + eax - 0x1334]
jg 0x1003be7f
mov dword [ebp - 0x9d0], 1
jmp 0x1003be86
and dword [ebp - 0x9d0], 0
imul eax, dword [ebp - 0x9d0], 0
test eax, eax
je 0x1003beb0
push dword [ebp - 0x30]
lea ecx, [ebp - 0x390]
call fcn.10017939
cmp dword [eax], 0
je 0x1003beb0
mov dword [ebp - 0x590], 1
jmp 0x1003beb7
and dword [ebp - 0x590], 0
push dword [ebp - 0x30]
lea ecx, [ebp - 0x390]
call fcn.10017939
mov ecx, dword [ebp - 0x590]
cmp ecx, dword [eax]
jg 0x1003bedb
mov dword [ebp - 0x868], 1
jmp 0x1003bee2
and dword [ebp - 0x868], 0
push dword [ebp - 0x30]
lea ecx, [ebp - 0x390]
call fcn.10017939
mov ecx, dword [ebp - 0x868]
cmp ecx, dword [eax]
jge 0x1003bf06
mov dword [ebp - 0x598], 1
jmp 0x1003bf0d
and dword [ebp - 0x598], 0
push dword [ebp - 0x30]
lea ecx, [ebp - 0x390]
call fcn.10017939
mov eax, dword [eax]
cmp eax, dword [ebp - 0x598]
jl 0x1003bf31
mov dword [ebp - 0xd7c], 1
jmp 0x1003bf38
and dword [ebp - 0xd7c], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x30]
cmp dword [ebp + eax - 0xbc4], ecx
jle 0x1003bf56
mov dword [ebp - 0x5a0], 1
jmp 0x1003bf5d
and dword [ebp - 0x5a0], 0
push dword [ebp - 0x30]
lea ecx, [ebp - 0x390]
call fcn.10017939
mov eax, dword [eax]
mov dword [ebp - 0xa88], eax
mov eax, dword [ebp - 0xa88]
cmp eax, dword [ebp - 0x5a0]
jge 0x1003bf96
cmp dword [ebp - 0x870], 0
je 0x1003bf96
mov dword [ebp - 0x5a8], 1
jmp 0x1003bf9d
and dword [ebp - 0x5a8], 0
mov eax, dword [ebp - 0x870]
cmp dword [ebp - 0x5a8], eax
jge 0x1003bfb7
mov dword [ebp - 0x9d8], 1
jmp 0x1003bfbe
and dword [ebp - 0x9d8], 0
cmp dword [ebp - 0x9d8], 0x4cf22a1e
jg 0x1003bfd6
mov dword [ebp - 0x5b0], 1
jmp 0x1003bfdd
and dword [ebp - 0x5b0], 0
mov eax, dword [ebp - 0x5b0]
mov dword [ebp - 0x878], eax
cmp dword [ebp - 0x878], 0xc63
je 0x1003c001
mov dword [ebp - 0x5b8], 1
jmp 0x1003c008
and dword [ebp - 0x5b8], 0
push dword [ebp - 0x30]
lea ecx, [ebp - 0x390]
call fcn.10017939
mov eax, dword [eax]
cmp eax, dword [ebp - 0x5b8]
jne 0x1003c02c
mov dword [ebp - 0xaec], 1
jmp 0x1003c033
and dword [ebp - 0xaec], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x1334]
cmp dword [ebp - 0xaec], eax
je 0x1003c054
mov dword [ebp - 0x5c0], 1
jmp 0x1003c05b
and dword [ebp - 0x5c0], 0
push 0
lea ecx, [ebp - 0x10bc]
call fcn.10017939
mov ecx, dword [ebp - 0x5c0]
mov dword [eax], ecx
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x10bc]
call fcn.100118e9
jmp 0x1003bd03
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x390]
call fcn.100118e9
mov dword [ebp - 0x9c], 0
jmp 0x1003c0ac
mov eax, dword [ebp - 0x9c]
inc eax
mov dword [ebp - 0x9c], eax
cmp dword [ebp - 0x9c], 0
jg 0x1003c9b1
push 2
lea ecx, [ebp - 0xdf0]
call fcn.100177e1
mov dword [ebp - 4], 6
push 2
lea ecx, [ebp - 0x10d4]
call fcn.100177e1
mov byte [ebp - 4], 7
mov dword [ebp - 0x1194], 4
mov dword [ebp - 0x119c], 0xe7528ace
mov dword [ebp - 0x11a4], 0xfffffffe
mov dword [ebp - 0x11ac], 1
mov dword [ebp - 0x11b4], 0xc9d73df2
mov dword [ebp - 0x11bc], 0xe9a07b30
mov dword [ebp - 0xe68], 0xce45d764
push 0xd25
lea eax, [ebp - 0xdf0]
push eax
push 0x65d1
lea eax, [ebp - 0x1e4]
push eax
push 0
push 1
push 0x22f3
call fcn.1003906a
add esp, 0x1c
mov dword [ebp - 0x1e4], 0
jmp 0x1003c166
mov eax, dword [ebp - 0x1e4]
inc eax
mov dword [ebp - 0x1e4], eax
cmp dword [ebp - 0x1e4], 2
jge 0x1003c188
push dword [ebp - 0x1e4]
lea ecx, [ebp - 0x10d4]
call fcn.10017939
mov dword [eax], 1
jmp 0x1003c159
push 0
lea ecx, [ebp - 0xdf0]
call fcn.10017939
and dword [eax], 0
jmp 0x1003c1be
push 0
lea ecx, [ebp - 0xdf0]
call fcn.10017939
mov dword [ebp - 0x880], eax
mov eax, dword [ebp - 0x880]
mov eax, dword [eax]
dec eax
mov ecx, dword [ebp - 0x880]
mov dword [ecx], eax
push 0
lea ecx, [ebp - 0xdf0]
call fcn.10017939
cmp dword [eax], 0xffffffec
jg 0x1003c280
mov dword [ebp - 0xbd4], 0x260417be
mov dword [ebp - 0xbcc], 0xcd16652d
push 4
lea ecx, [ebp - 0x1104]
call fcn.100177e1
mov byte [ebp - 4], 8
mov dword [ebp - 0xd84], 1
lea eax, [ebp - 0x1104]
push eax
lea eax, [ebp - 0x11c4]
push eax
push 0
push 0
push 0x1e56
call fcn.10037be9
add esp, 0x14
lea eax, [ebp - 0xe68]
push eax
lea eax, [ebp - 0xbcc]
push eax
push 0x340c
lea eax, [ebp - 0xd84]
push eax
push 0x587f
lea eax, [ebp - 0x10d4]
push eax
lea eax, [ebp - 0xbd4]
push eax
lea eax, [ebp - 0x1104]
push eax
push 0
push 0x5f5b
push 1
push 0x28d2
call fcn.10032f56
add esp, 0x30
mov byte [ebp - 4], 7
lea ecx, [ebp - 0x1104]
call fcn.100118e9
jmp 0x1003c19a
mov byte [ebp - 4], 6
lea ecx, [ebp - 0x10d4]
call fcn.100118e9
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xdf0]
call fcn.100118e9
mov dword [ebp - 0x40], 0x5b0e446d
mov dword [ebp - 0x218], 0x5db34e6d
mov dword [ebp - 0x18c], 0xffffffff
mov dword [ebp - 0x374], 9
mov dword [ebp - 0x370], 9
mov dword [ebp - 0x36c], 9
mov dword [ebp - 0x368], 9
mov dword [ebp - 0x1f0], 0x52bf390f
mov dword [ebp - 0x50], 0xe0c0
mov dword [ebp - 0x278], 0xffffffff
mov dword [ebp - 0x620], 0x30ea
push 0x3347
push 0x573f
lea eax, [ebp - 0x18c]
push eax
push 0
push 0x12e4
push 0x671a
lea eax, [ebp - 0x218]
push eax
lea eax, [ebp - 0x40]
push eax
call fcn.100460dd
add esp, 0x20
mov dword [ebp - 0x40], 0
jmp 0x1003c346
mov eax, dword [ebp - 0x40]
inc eax
mov dword [ebp - 0x40], eax
cmp dword [ebp - 0x40], 3
jg 0x1003c926
mov dword [ebp - 0x19c], 0xa116
mov dword [ebp - 0xcc], 0xfffa
mov dword [ebp - 0x340], 0
cmp dword [ebp - 0x19c], 0
jne 0x1003c399
cmp dword [ebp - 0xcc], 0
je 0x1003c390
push 4
pop eax
imul eax, eax, 3
cmp dword [ebp + eax - 0x374], 0
jne 0x1003c399
and dword [ebp - 0x9e0], 0
jmp 0x1003c3a3
mov dword [ebp - 0x9e0], 1
mov eax, dword [ebp - 0xcc]
cmp dword [ebp - 0xcc], eax
jne 0x1003c3bd
mov dword [ebp - 0x5c8], 1
jmp 0x1003c3c4
and dword [ebp - 0x5c8], 0
imul eax, dword [ebp - 0x5c8], 5
imul eax, dword [ebp - 0x218]
neg eax
add eax, dword [ebp - 0x18c]
mov dword [ebp - 0x218], eax
mov eax, dword [ebp - 0x218]
sub eax, dword [ebp - 0xcc]
mov dword [ebp - 0x18c], eax
mov eax, dword [ebp - 0x40]
cmp dword [ebp - 0x18c], eax
jle 0x1003c409
mov dword [ebp - 0x5d0], 1
jmp 0x1003c410
and dword [ebp - 0x5d0], 0
mov eax, dword [ebp - 0x9e0]
sub eax, dword [ebp - 0x5d0]
mov dword [ebp - 0x1f0], eax
mov eax, 0x6658
test eax, eax
je 0x1003c440
cmp dword [ebp - 0xcc], 0
je 0x1003c440
mov dword [ebp - 0x888], 1
jmp 0x1003c447
and dword [ebp - 0x888], 0
mov eax, dword [ebp - 0x19c]
mov dword [ebp - 0x340], eax
mov eax, dword [ebp - 0x340]
mov dword [ebp - 0x50], eax
mov eax, dword [ebp - 0x50]
cmp eax, dword [ebp - 0x888]
je 0x1003c473
mov dword [ebp - 0x5e8], 1
jmp 0x1003c47a
and dword [ebp - 0x5e8], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x374]
mov dword [ebp - 0x5d8], eax
mov eax, dword [ebp - 0x40]
mov ecx, dword [ebp - 0x5d8]
mov dword [ebp + eax*4 - 0x374], ecx
imul eax, dword [ebp - 0x19c], 0
cmp dword [ebp - 0x5d8], eax
jle 0x1003c4b8
mov dword [ebp - 0xa90], 1
jmp 0x1003c4bf
and dword [ebp - 0xa90], 0
mov eax, dword [ebp - 0xcc]
cmp dword [ebp - 0xa90], eax
je 0x1003c4d9
mov dword [ebp - 0x5e0], 1
jmp 0x1003c4e0
and dword [ebp - 0x5e0], 0
mov eax, dword [ebp - 0x1f0]
cmp dword [ebp - 0x5e0], eax
jle 0x1003c4fa
mov dword [ebp - 0x890], 1
jmp 0x1003c501
and dword [ebp - 0x890], 0
cmp dword [ebp - 0x890], 8
jb 0x1003c516
mov dword [ebp - 0x9e8], 1
jmp 0x1003c51d
and dword [ebp - 0x9e8], 0
mov eax, dword [ebp - 0x5e8]
add eax, dword [ebp - 0x9e8]
jne 0x1003c53a
cmp dword [ebp - 0x40], 0
jne 0x1003c53a
and dword [ebp - 0x5f0], 0
jmp 0x1003c544
mov dword [ebp - 0x5f0], 1
mov eax, dword [ebp - 0xcc]
cmp dword [ebp - 0x5f0], eax
jge 0x1003c55e
mov dword [ebp - 0x898], 1
jmp 0x1003c565
and dword [ebp - 0x898], 0
mov eax, dword [ebp - 0x1f0]
cmp dword [ebp - 0x898], eax
jne 0x1003c590
mov dword [ebp - 0xe34], 0x1ef4
cmp dword [ebp - 0xe34], 0
je 0x1003c58b
jmp 0x1003c926
jmp 0x1003c921
mov dword [ebp - 0xd8c], 0x4c11
mov dword [ebp - 0xbdc], 8
mov dword [ebp - 0x194], 0x904418f7
mov dword [ebp - 0x50], 0
jmp 0x1003c5be
mov eax, dword [ebp - 0x50]
inc eax
mov dword [ebp - 0x50], eax
cmp dword [ebp - 0x50], 3
jg 0x1003c913
mov dword [ebp - 0x9f0], 0xffffffff
mov dword [ebp - 0x414], 1
mov eax, dword [ebp - 0x194]
inc eax
mov dword [ebp - 0x194], eax
mov eax, dword [ebp - 0x40]
mov eax, dword [ebp + eax*4 - 0x374]
cmp dword [ebp - 0x194], eax
je 0x1003c607
mov dword [ebp - 0x5f8], 1
jmp 0x1003c60e
and dword [ebp - 0x5f8], 0
cmp dword [ebp - 0x5f8], 0xfffa
jb 0x1003c62c
cmp dword [ebp - 0x50], 0
je 0x1003c62c
mov dword [ebp - 0x8a0], 1
jmp 0x1003c633
and dword [ebp - 0x8a0], 0
cmp dword [ebp - 0xbdc], 0
je 0x1003c647
mov eax, dword [ebp - 0x40]
cmp dword [ebp + eax*4 - 0x374], 0
cmp dword [ebp - 0x620], 1
jne 0x1003c65c
mov dword [ebp - 0xb14], 1
jmp 0x1003c663
and dword [ebp - 0xb14], 0
mov eax, dword [ebp - 0xb14]
sub eax, dword [ebp - 0x18c]
mov ecx, dword [ebp - 0x50]
cmp eax, dword [ebp + ecx*4 - 0x374]
jne 0x1003c687
mov dword [ebp - 0x600], 1
jmp 0x1003c68e
and dword [ebp - 0x600], 0
mov eax, dword [ebp - 0x600]
mov dword [ebp - 0x278], eax
mov eax, dword [ebp - 0x278]
mov ecx, dword [ebp - 0x50]
imul eax, dword [ebp + ecx*4 - 0x374]
cmp dword [ebp - 0x8a0], eax
jne 0x1003c6bf
mov dword [ebp - 0x608], 1
jmp 0x1003c6c6
and dword [ebp - 0x608], 0
mov eax, dword [ebp - 0x608]
mov dword [ebp - 0x9f0], eax
mov eax, dword [ebp - 0x40]
mov ecx, dword [ebp - 0x9f0]
imul ecx, dword [ebp - 0x414]
imul ecx, dword [ebp + eax*4 - 0x374]
add ecx, dword [ebp - 0x50]
mov eax, dword [ebp - 0x50]
cmp dword [ebp + eax*4 - 0x374], ecx
jne 0x1003c705
mov dword [ebp - 0x610], 1
jmp 0x1003c70c
and dword [ebp - 0x610], 0
mov eax, dword [ebp - 0x610]
mov dword [ebp - 0x414], eax
mov eax, dword [ebp - 0x19c]
cmp dword [ebp - 0x194], eax
jne 0x1003c732
mov dword [ebp - 0x8a8], 1
jmp 0x1003c739
and dword [ebp - 0x8a8], 0
cmp dword [ebp - 0x8a8], 0x8c45603f
je 0x1003c751
mov dword [ebp - 0x618], 1
jmp 0x1003c758
and dword [ebp - 0x618], 0
mov eax, dword [ebp - 0x340]
cmp dword [ebp - 0x618], eax
jg 0x1003c772
mov dword [ebp - 0xa98], 1
jmp 0x1003c779
and dword [ebp - 0xa98], 0
mov eax, dword [ebp - 0x50]
mov eax, dword [ebp + eax*4 - 0x374]
mov ecx, dword [ebp - 0xa98]
sub ecx, dword [ebp - 0x620]
sub eax, ecx
je 0x1003c7ac
mov eax, dword [ebp - 0x40]
cmp dword [ebp + eax*4 - 0x374], 0
je 0x1003c7ac
mov dword [ebp - 0x8b0], 1
jmp 0x1003c7b3
and dword [ebp - 0x8b0], 0
cmp dword [ebp - 0x8b0], 9
je 0x1003c7c8
mov dword [ebp - 0x628], 1
jmp 0x1003c7cf
and dword [ebp - 0x628], 0
mov eax, dword [ebp - 0x1f0]
cmp dword [ebp - 0x628], eax
jl 0x1003c7e9
mov dword [ebp - 0x9f8], 1
jmp 0x1003c7f0
and dword [ebp - 0x9f8], 0
push 4
pop eax
imul eax, eax, 3
mov eax, dword [ebp + eax - 0x374]
cmp dword [ebp - 0x9f8], eax
jle 0x1003c811
mov dword [ebp - 0x630], 1
jmp 0x1003c818
and dword [ebp - 0x630], 0
mov eax, dword [ebp - 0x414]
cmp dword [ebp - 0x630], eax
jne 0x1003c832
mov dword [ebp - 0x8b8], 1
jmp 0x1003c839
and dword [ebp - 0x8b8], 0
mov eax, dword [ebp - 0xd8c]
cmp dword [ebp - 0x8b8], eax
jle 0x1003c853
mov dword [ebp - 0x638], 1
jmp 0x1003c85a
and dword [ebp - 0x638], 0
mov eax, dword [ebp - 0x218]
cmp dword [ebp - 0x638], eax
jne 0x1003c874
mov dword [ebp - 0xabc], 1
jmp 0x1003c87b
and dword [ebp - 0xabc], 0
mov eax, dword [ebp - 0xabc]
mov dword [ebp - 0x278], eax
mov eax, dword [ebp - 0x40]
mov eax, dword [ebp + eax*4 - 0x374]
cmp eax, dword [ebp - 0x278]
jl 0x1003c8a5
mov dword [ebp - 0x640], 1
jmp 0x1003c8ac
and dword [ebp - 0x640], 0
cmp dword [ebp - 0x640], 0
jne 0x1003c8c7
cmp dword [ebp - 0x194], 0
jne 0x1003c8c7
and dword [ebp - 0x8c0], 0
jmp 0x1003c8d1
mov dword [ebp - 0x8c0], 1
mov eax, dword [ebp - 0x1f0]
cmp eax, dword [ebp - 0x8c0]
jle 0x1003c8f8
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x374], 0
jne 0x1003c8f8
and dword [ebp - 0x648], 0
jmp 0x1003c902
mov dword [ebp - 0x648], 1
mov eax, dword [ebp - 0x648]
mov dword [ebp - 0x340], eax
jmp 0x1003c5b7
cmp dword [ebp - 0x19c], 0
je 0x1003c921
jmp 0x1003c33f
jmp 0x1003c33f
mov byte [ebp - 0x129], 0
movzx eax, byte [ebp - 0x129]
test eax, eax
je 0x1003c9ac
mov dword [ebp - 0x230], 0xfffffff6
mov dword [ebp - 0x230], 0x11
jmp 0x1003c95b
mov eax, dword [ebp - 0x230]
dec eax
mov dword [ebp - 0x230], eax
cmp dword [ebp - 0x230], 0xffffffea
jne 0x1003c99e
cmp dword [ebp - 0x230], 0
je 0x1003c96f
jmp 0x1003c99e
mov byte [ebp - 0xab], 0
movzx eax, byte [ebp - 0xab]
test eax, eax
je 0x1003c99c
push 0xf80
push 0x7f4e
push 0
push 1
push 0x33ad
call fcn.1002bb15
add esp, 0x14
jmp 0x1003c94e
push 0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_WritePrivateProfileStringW]
jmp 0x1003c09f
push 0x96d
push 0x62dd
push 0x7dce
push 0x3140
push 0x44de
push 0
push 0x37d9
push 0x1624
push 0x33b0
push 0x60bb
push 1
push 0
call fcn.1002e077
add esp, 0x30
mov dword [ebp - 0x9c], 7
jmp 0x1003ca05
mov eax, dword [ebp - 0x9c]
dec eax
mov dword [ebp - 0x9c], eax
cmp dword [ebp - 0x9c], 0xffffffff
jl 0x1003cd6d
mov dword [ebp - 0xbe4], 0x238d
cmp dword [ebp - 0xbe4], 0x529
jge 0x1003cc22
and dword [ebp - 0x1718], 0
push 0x144
push 0
lea eax, [ebp - 0x1714]
push eax
call fcn.10050e70
add esp, 0xc
mov dword [ebp - 0xd4], 1
movsd xmm0, qword [0x10008148]
movsd qword [ebp - 0x43c], xmm0
and dword [ebp - 0x280], 0
lea eax, [ebp - 0x280]
push eax
push 0x10007b84
call fcn.1005076b
pop ecx
pop ecx
and dword [ebp - 0x3b4], 0
and dword [ebp - 0x484], 0
and dword [ebp - 0x3bc], 0
and dword [ebp - 0x2f0], 0
mov eax, dword [ebp - 0x280]
mov dword [ebp - 0xe70], eax
mov eax, dword [ebp - 0x280]
dec eax
mov dword [ebp - 0x280], eax
cmp dword [ebp - 0xe70], 0
je 0x1003cc22
lea eax, [ebp - 0x2f0]
push eax
push 0x10007b80
call fcn.1005076b
pop ecx
pop ecx
cmp dword [ebp - 0x2f0], 1
jne 0x1003cb66
lea eax, [ebp - 0x3b4]
push eax
lea eax, [ebp - 0x484]
push eax
push 0x10007bac
call fcn.1005076b
add esp, 0xc
and dword [ebp - 0x1a4], 0
jmp 0x1003cb10
mov eax, dword [ebp - 0x1a4]
inc eax
mov dword [ebp - 0x1a4], eax
mov eax, dword [ebp - 0x1a4]
cmp eax, dword [ebp - 0x484]
jge 0x1003cb40
mov eax, dword [ebp - 0x1a4]
mov eax, dword [ebp + eax*4 - 0x1718]
add eax, dword [ebp - 0x3b4]
mov ecx, dword [ebp - 0x1a4]
mov dword [ebp + ecx*4 - 0x1718], eax
jmp 0x1003cb03
mov eax, dword [ebp - 0x3b4]
imul eax, dword [ebp - 0x484]
cvtsi2sd xmm0, eax
addsd xmm0, qword [ebp - 0x43c]
movsd qword [ebp - 0x43c], xmm0
jmp 0x1003cbf5
cmp dword [ebp - 0x2f0], 2
jne 0x1003cbbc
lea eax, [ebp - 0x3bc]
push eax
push 0x10007b84
call fcn.1005076b
pop ecx
pop ecx
mov eax, dword [ebp - 0xd4]
mov ecx, dword [ebp - 0x3bc]
mov dword [ebp + eax*4 - 0x1718], ecx
mov eax, dword [ebp - 0xd4]
inc eax
mov dword [ebp - 0xd4], eax
cvtsi2sd xmm0, dword [ebp - 0x3bc]
addsd xmm0, qword [ebp - 0x43c]
movsd qword [ebp - 0x43c], xmm0
jmp 0x1003cbf5
cmp dword [ebp - 0x2f0], 3
jne 0x1003cbf5
mov eax, dword [ebp - 0xd4]
dec eax
mov dword [ebp - 0xd4], eax
mov eax, dword [ebp - 0xd4]
cvtsi2sd xmm0, dword [ebp + eax*4 - 0x1718]
movsd xmm1, qword [ebp - 0x43c]
subsd xmm1, xmm0
movsd qword [ebp - 0x43c], xmm1
cvtsi2sd xmm0, dword [ebp - 0xd4]
movsd xmm1, qword [ebp - 0x43c]
divsd xmm1, xmm0
push ecx
push ecx
movsd qword [esp], xmm1
push 0x1000807c
call fcn.10050db3
add esp, 0xc
jmp 0x1003ca99
mov dword [ebp - 0x288], 1
mov dword [ebp - 0x288], 0
jmp 0x1003cc45
mov eax, dword [ebp - 0x288]
dec eax
mov dword [ebp - 0x288], eax
cmp dword [ebp - 0x288], 0xfffffffe
jne 0x1003cc95
mov dword [ebp - 0xbec], 0x22124f84
push 0
push 0x3743
lea eax, [ebp - 0xbec]
push eax
push 0x307b
push 0x716
push 0x46c2
push 0
push 0x415b
push 0x4598
push 0x78b8
push 0x58e7
call fcn.1003a1aa
add esp, 0x2c
jmp 0x1003cc38
mov dword [ebp - 0xbf4], 4
push 2
lea ecx, [ebp - 0x1044]
call fcn.100177e1
mov dword [ebp - 4], 9
mov dword [ebp - 0x328], 0x13532fe2
push 0x6f23
push 0x6e96
push 0x2c1d
push 0x64a8
push 0x2630
push 1
push 0x5988
push 0x6405
lea eax, [ebp - 0x1044]
push eax
lea eax, [ebp - 0x11cc]
push eax
push 0
push 1
call fcn.1002e077
add esp, 0x30
mov dword [ebp - 0x328], 1
jmp 0x1003cd15
mov eax, dword [ebp - 0x328]
dec eax
mov dword [ebp - 0x328], eax
cmp dword [ebp - 0x328], 0
jl 0x1003cd4e
mov dword [ebp - 0xd94], 0x252604
push 0
push 0x3b82
push 0x4084
push 0
lea eax, [ebp - 0x1044]
push eax
lea eax, [ebp - 0xd94]
push eax
call fcn.1002ac62
add esp, 0x18
jmp 0x1003cd08
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x1044]
call fcn.100118e9
cmp dword [ebp - 0xbf4], 0
je 0x1003cd68
jmp 0x1003cd6d
jmp 0x1003c9f8
mov dword [ebp - 0x2f8], 0xffffffff
mov dword [ebp - 0x11d4], 0x4f833fcb
mov dword [ebp - 0x11dc], 0xfffffffb
mov dword [ebp - 0x11e4], 0xffffffff
mov dword [ebp - 0x11ec], 0xfffffffc
mov dword [ebp - 0xa00], 0
mov dword [ebp - 0x290], 0
jmp 0x1003cdc2
mov eax, dword [ebp - 0x290]
inc eax
mov dword [ebp - 0x290], eax
cmp dword [ebp - 0x290], 3
jge 0x1003cdde
mov eax, dword [ebp - 0x290]
mov dword [ebp + eax*4 - 0x15a8], 0x951fe77d
jmp 0x1003cdb5
mov eax, dword [ebp - 0xa00]
inc eax
mov dword [ebp - 0xa00], eax
mov dword [ebp - 0x2f8], 0
jmp 0x1003ce04
mov eax, dword [ebp - 0x2f8]
dec eax
mov dword [ebp - 0x2f8], eax
cmp dword [ebp - 0x2f8], 0xfffffff2
jg 0x1003ce2c
mov byte [ebp - 0x11d], 0
movzx eax, byte [ebp - 0x11d]
test eax, eax
je 0x1003ce2a
push 0
push 0
call fcn.1002e7eb
pop ecx
pop ecx
jmp 0x1003cdf7
mov eax, dword [ebp - 0xe44]
mov eax, dword [eax + 0x38]
mov dword [ebp - 0x408], eax
mov dword [ebp - 0x298], 0x53b26bdd
mov dword [ebp - 0x298], 2
jmp 0x1003ce5e
mov eax, dword [ebp - 0x298]
inc eax
mov dword [ebp - 0x298], eax
cmp dword [ebp - 0x298], 0x1d
jne 0x1003cef0
mov dword [ebp - 0x1f8], 0x318d5816
cmp dword [ebp - 0x1f8], 0
je 0x1003ce80
jmp 0x1003cef0
mov dword [ebp - 0x1f8], 0
jmp 0x1003ce99
mov eax, dword [ebp - 0x1f8]
inc eax
mov dword [ebp - 0x1f8], eax
cmp dword [ebp - 0x1f8], 3
je 0x1003ceeb
mov dword [ebp - 0xbfc], 0x60d00585
cmp dword [ebp - 0xbfc], 0
je 0x1003ceb7
jmp 0x1003ceeb
mov byte [ebp - 0xad], 0
movzx eax, byte [ebp - 0xad]
test eax, eax
je 0x1003cee9
push 0x2364
push 0x7a8a
push 0
push 0
push 0x5324
push 0x4353
call fcn.1002e71c
add esp, 0x18
jmp 0x1003ce8c
jmp 0x1003ce51
mov dword [ebp - 0x310], 0xffffffff
mov dword [ebp - 0x11f4], 0x4f833fcb
push 1
lea ecx, [ebp - 0x1344]
call fcn.100177e1
mov dword [ebp - 4], 0xa
mov dword [ebp - 0x74], 0xfffffffe
mov dword [ebp - 0x11fc], 3
mov dword [ebp - 0xe54], 0xffffffff
mov dword [ebp - 0xc1c], 0xa2b3b7be
mov dword [ebp - 0x1204], 0xa927213e
mov dword [ebp - 0xd9c], 0xd50f82ba
mov dword [ebp - 0x2a0], 0xffffffff
mov dword [ebp - 0xda4], 5
mov dword [ebp - 0xac0], 2
mov dword [ebp - 0xc0c], 1
push 3
lea ecx, [ebp - 0xee4]
call fcn.100177e1
mov byte [ebp - 4], 0xb
mov dword [ebp - 0x660], 0xec6f
mov dword [ebp - 0xc04], 0x523e24b1
mov dword [ebp - 0xdac], 0x84bb
lea eax, [ebp - 0x1ac]
push eax
push 0x35c1
push 0x6369
push 0x4639
push 0x28f4
push 0x2267
push 0
push 0x3395
lea eax, [ebp - 0x1344]
push eax
push 0
call fcn.1002b042
add esp, 0x28
mov dword [ebp - 0x1ac], 0
jmp 0x1003cff9
mov eax, dword [ebp - 0x1ac]
inc eax
mov dword [ebp - 0x1ac], eax
cmp dword [ebp - 0x1ac], 3
jge 0x1003d01b
push dword [ebp - 0x1ac]
lea ecx, [ebp - 0xee4]
call fcn.10017939
mov dword [eax], 5
jmp 0x1003cfec
mov dword [ebp - 0x74], 0
jmp 0x1003d02b
mov eax, dword [ebp - 0x74]
inc eax
mov dword [ebp - 0x74], eax
cmp dword [ebp - 0x74], 0
jg 0x1003d0aa
mov dword [ebp - 0x120c], 0xc3099cfe
mov dword [ebp - 0x1214], 0
mov dword [ebp - 0x121c], 0xffffffff
mov dword [ebp - 0x1224], 0xfffffff6
mov dword [ebp - 0x650], 6
mov dword [ebp - 0x350], 0
jmp 0x1003d07c
mov eax, dword [ebp - 0x350]
inc eax
mov dword [ebp - 0x350], eax
cmp dword [ebp - 0x350], 2
jge 0x1003d098
mov eax, dword [ebp - 0x350]
mov dword [ebp + eax*4 - 0x1524], 1
jmp 0x1003d06f
mov eax, dword [ebp - 0x650]
dec eax
mov dword [ebp - 0x650], eax
jmp 0x1003d024
push 0
lea ecx, [ebp - 0xee4]
call fcn.10017939
cmp dword [eax], 1
je 0x1003d0c8
mov dword [ebp - 0x8c8], 1
jmp 0x1003d0cf
and dword [ebp - 0x8c8], 0
mov eax, dword [ebp - 0xd9c]
cmp eax, dword [ebp - 0x8c8]
jl 0x1003d0e9
mov dword [ebp - 0x658], 1
jmp 0x1003d0f0
and dword [ebp - 0x658], 0
mov eax, dword [ebp - 0x658]
sub eax, dword [ebp - 0x74]
cmp eax, 0x531d
jne 0x1003d10c
mov dword [ebp - 0xaa0], 1
jmp 0x1003d113
and dword [ebp - 0xaa0], 0
mov eax, dword [ebp - 0xaa0]
mov dword [ebp - 0x660], eax
mov eax, dword [ebp - 0x660]
mov dword [ebp - 0x8d0], eax
push 1
lea ecx, [ebp - 0xee4]
call fcn.10017939
mov ecx, dword [ebp - 0x8d0]
mov dword [eax], ecx
mov eax, dword [ebp - 0x74]
cmp eax, dword [ebp - 0x8d0]
jg 0x1003d157
mov dword [ebp - 0x668], 1
jmp 0x1003d15e
and dword [ebp - 0x668], 0
cmp dword [ebp - 0x668], 0x67f5
jge 0x1003d176
mov dword [ebp - 0xa08], 1
jmp 0x1003d17d
and dword [ebp - 0xa08], 0
mov eax, dword [ebp - 0xc04]
cmp dword [ebp - 0xa08], eax
jl 0x1003d197
mov dword [ebp - 0x670], 1
jmp 0x1003d19e
and dword [ebp - 0x670], 0
mov eax, dword [ebp - 0x2a0]
add eax, dword [ebp - 0x670]
cmp eax, 0x67d
jle 0x1003d1bd
mov dword [ebp - 0xe78], 1
jmp 0x1003d1c4
and dword [ebp - 0xe78], 0
mov eax, dword [ebp - 0xc0c]
mov dword [ebp - 0x122c], eax
cmp dword [ebp - 0xda4], 7
jle 0x1003d1e5
mov dword [ebp - 0x8d8], 1
jmp 0x1003d1ec
and dword [ebp - 0x8d8], 0
mov eax, dword [ebp - 0x8d8]
mov dword [ebp - 0x2a0], eax
cmp dword [ebp - 0x2a0], 0xffffffff
jbe 0x1003d20d
mov dword [ebp - 0x678], 1
jmp 0x1003d214
and dword [ebp - 0x678], 0
cmp dword [ebp - 0x678], 0xffffffff
jle 0x1003d229
mov dword [ebp - 0xc14], 1
jmp 0x1003d230
and dword [ebp - 0xc14], 0
mov eax, dword [ebp - 0x74]
mov dword [ebp - 0x1234], eax
mov eax, dword [ebp - 0xe54]
mov dword [ebp - 0x123c], eax
cmp dword [ebp - 0x74], 0
imul eax, dword [ebp - 0x74], 5
test eax, eax
jne 0x1003d25a
cmp dword [ebp - 0xc1c], 0
je 0x1003d261
cmp dword [ebp - 0xdac], 0
mov eax, dword [ebp - 0x2a0]
imul eax, dword [ebp - 0xac0]
mov dword [ebp - 0xac0], eax
mov byte [ebp - 4], 0xa
lea ecx, [ebp - 0xee4]
call fcn.100118e9
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x1344]
call fcn.100118e9
mov dword [ebp - 0x1244], 0xfffffffb
mov dword [ebp - 0x300], 0xffffffff
mov dword [ebp - 0xc24], 0xb8f6c218
mov dword [ebp - 0x300], 0x16
jmp 0x1003d2c9
mov eax, dword [ebp - 0x300]
dec eax
mov dword [ebp - 0x300], eax
cmp dword [ebp - 0x300], 4
jge 0x1003d514
mov dword [ebp - 0x2a8], 0
mov dword [ebp - 0x124c], 0x5165352f
mov dword [ebp - 0x330], 0xffffffff
mov dword [ebp - 0x2a8], 0
jmp 0x1003d30d
mov eax, dword [ebp - 0x2a8]
dec eax
mov dword [ebp - 0x2a8], eax
cmp dword [ebp - 0x2a8], 0xffffffe4
jge 0x1003d504
push 1
lea ecx, [ebp - 0x1354]
call fcn.100177e1
mov dword [ebp - 4], 0xc
mov dword [ebp - 0xe80], 0xe80d
mov dword [ebp - 0x24], 0
jmp 0x1003d348
mov eax, dword [ebp - 0x24]
inc eax
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 1
jge 0x1003d364
push dword [ebp - 0x24]
lea ecx, [ebp - 0x1354]
call fcn.10017939
mov dword [eax], 0xac45
jmp 0x1003d341
mov dword [ebp - 0x24], 0
jmp 0x1003d374
mov eax, dword [ebp - 0x24]
inc eax
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 2
jge 0x1003d38a
mov eax, dword [ebp - 0x24]
mov dword [ebp + eax*4 - 0xb50], 0x3126ff23
jmp 0x1003d36d
mov dword [ebp - 0x24], 0
jmp 0x1003d39a
mov eax, dword [ebp - 0x24]
inc eax
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 1
jge 0x1003d3b0
mov eax, dword [ebp - 0x24]
mov dword [ebp + eax*4 - 0x1254], 0x16a205b2
jmp 0x1003d393
push 4
pop eax
shl eax, 0
mov dword [ebp + eax - 0xb50], 0
jmp 0x1003d3de
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0xb50]
inc eax
push 4
pop ecx
shl ecx, 0
mov dword [ebp + ecx - 0xb50], eax
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0xb50], 0
jg 0x1003d494
push 3
lea ecx, [ebp - 0x105c]
call fcn.100177e1
mov byte [ebp - 4], 0xd
push 0x5c52
push 0x66e4
push 0x7dbb
lea eax, [ebp - 0x125c]
push eax
push 0x1a6d
push 0
push 0x278c
lea eax, [ebp - 0x105c]
push eax
push 0x47d0
push 0x3d2
push 1
push 1
call fcn.1002e077
add esp, 0x30
push 2
lea ecx, [ebp - 0x105c]
call fcn.10017939
mov dword [ebp - 0x680], eax
mov eax, dword [ebp - 0x680]
mov eax, dword [eax]
inc eax
mov ecx, dword [ebp - 0x680]
mov dword [ecx], eax
push 0
lea eax, [ebp - 0xc24]
push eax
push 0x3eb2
push 0
push 1
call fcn.1003a634
add esp, 0x14
mov byte [ebp - 4], 0xc
lea ecx, [ebp - 0x105c]
call fcn.100118e9
jmp 0x1003d3c3
mov dword [ebp - 0x330], 0
jmp 0x1003d4ad
mov eax, dword [ebp - 0x330]
inc eax
mov dword [ebp - 0x330], eax
cmp dword [ebp - 0x330], 1
jne 0x1003d4f0
cmp dword [ebp - 0xe80], 0
je 0x1003d4c1
jmp 0x1003d4f0
mov byte [ebp - 0x12b], 0
movzx eax, byte [ebp - 0x12b]
test eax, eax
je 0x1003d4ee
push 0x54c9
push 0x61ca
push 1
push 0
push 0x69a9
call fcn.10037be9
add esp, 0x14
jmp 0x1003d4a0
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x1354]
call fcn.100118e9
jmp 0x1003d300
push 1
push 0
call fcn.1003869a
pop ecx
pop ecx
jmp 0x1003d2bc
push 2
lea ecx, [ebp - 0x10b0]
call fcn.100177e1
mov dword [ebp - 4], 0xe
mov dword [ebp - 0xc2c], 0x13532fe2
mov dword [ebp - 0x2b0], 0
jmp 0x1003d54b
mov eax, dword [ebp - 0x2b0]
inc eax
mov dword [ebp - 0x2b0], eax
cmp dword [ebp - 0x2b0], 2
jge 0x1003d56d
push dword [ebp - 0x2b0]
lea ecx, [ebp - 0x10b0]
call fcn.10017939
mov dword [eax], 1
jmp 0x1003d53e
push 1
lea eax, [ebp - 0xc2c]
push eax
push 0x226c
push 0
push 0
push 0x5838
lea eax, [ebp - 0x10b0]
push eax
push 0x3ae8
push 0x1bb5
call fcn.1002a62b
add esp, 0x24
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x10b0]
call fcn.100118e9
mov dword [ebp - 0x1264], 0xffffffff
mov dword [ebp - 0x2c], 0xfffffffe
push 3
lea ecx, [ebp - 0xb30]
call fcn.100177e1
mov dword [ebp - 4], 0xf
mov dword [ebp - 0x8f0], 0x79655965
mov dword [ebp - 0xdc], 0xfffffffc
mov dword [ebp - 0xcdc], 4
mov dword [ebp - 0x308], 0
jmp 0x1003d608
mov eax, dword [ebp - 0x308]
inc eax
mov dword [ebp - 0x308], eax
cmp dword [ebp - 0x308], 3
jge 0x1003d62a
push dword [ebp - 0x308]
lea ecx, [ebp - 0xb30]
call fcn.10017939
mov dword [eax], 0xbf889e02
jmp 0x1003d5fb
mov eax, dword [ebp - 0x2c]
mov dword [ebp - 0x126c], eax
cmp dword [ebp - 0x2c], 0
jl 0x1003d645
mov dword [ebp - 0x8e0], 1
jmp 0x1003d64c
and dword [ebp - 0x8e0], 0
mov eax, dword [ebp - 0x8e0]
sub eax, dword [ebp - 0x2c]
imul eax, eax, 0xbf9f
inc eax
inc eax
cmp dword [ebp - 0x2c], eax
jle 0x1003d66e
mov dword [ebp - 0x688], 1
jmp 0x1003d675
and dword [ebp - 0x688], 0
mov eax, dword [ebp - 0x2c]
imul eax, dword [ebp - 0x688]
add eax, dword [ebp - 0x2c]
sub eax, dword [ebp - 0x2c]
cmp eax, dword [ebp - 0x2c]
jg 0x1003d696
mov dword [ebp - 0xa10], 1
jmp 0x1003d69d
and dword [ebp - 0xa10], 0
mov eax, dword [ebp - 0xa10]
mov dword [ebp - 0x2c], eax
cmp dword [ebp - 0x2c], 0
jne 0x1003d6b8
mov dword [ebp - 0x690], 1
jmp 0x1003d6bf
and dword [ebp - 0x690], 0
push 2
lea ecx, [ebp - 0xb30]
call fcn.10017939
mov ecx, dword [ebp - 0x690]
cmp ecx, dword [eax]
jg 0x1003d6e2
mov dword [ebp - 0x8e8], 1
jmp 0x1003d6e9
and dword [ebp - 0x8e8], 0
push 0
lea ecx, [ebp - 0xb30]
call fcn.10017939
mov esi, dword [ebp - 0x8e8]
imul esi, dword [eax]
push 2
lea ecx, [ebp - 0xb30]
call fcn.10017939
cmp esi, dword [eax]
jl 0x1003d854
mov dword [ebp - 0x15c], 0xadc1094d
mov eax, dword [ebp - 0x8f0]
mov dword [ebp - 0x1274], eax
cmp dword [ebp - 0x15c], 0xb1b0cadf
jae 0x1003d742
mov dword [ebp - 0x698], 1
jmp 0x1003d749
and dword [ebp - 0x698], 0
mov eax, dword [ebp - 0xdc]
cmp dword [ebp - 0x698], eax
jle 0x1003d763
mov dword [ebp - 0xaac], 1
jmp 0x1003d76a
and dword [ebp - 0xaac], 0
mov eax, dword [ebp - 0x2c]
cmp eax, dword [ebp - 0xaac]
jge 0x1003d791
mov dword [ebp - 0x6a0], 1
mov eax, dword [ebp - 0x6a0]
dec eax
mov dword [ebp - 0x6a0], eax
jmp 0x1003d84f
mov dword [ebp - 0xdb4], 0xad38
mov dword [ebp - 0xdc], 0
jmp 0x1003d7b4
mov eax, dword [ebp - 0xdc]
inc eax
mov dword [ebp - 0xdc], eax
cmp dword [ebp - 0xdc], 2
jg 0x1003d84f
mov dword [ebp - 0x6a8], 0x7c1b
mov dword [ebp - 0xc34], 0xb5bcdcec
mov dword [ebp - 0x15c], 0
jmp 0x1003d7ee
mov eax, dword [ebp - 0x15c]
inc eax
mov dword [ebp - 0x15c], eax
cmp dword [ebp - 0x15c], 2
jg 0x1003d84a
lea eax, [ebp - 0x6a8]
push eax
push 0x3052
lea eax, [ebp - 0xdc]
push eax
push 1
lea eax, [ebp - 0x8f0]
push eax
lea eax, [ebp - 0xb30]
push eax
lea eax, [ebp - 0xdb4]
push eax
lea eax, [ebp - 0x2c]
push eax
lea eax, [ebp - 0x15c]
push eax
push 0
lea eax, [ebp - 0xc34]
push eax
call fcn.10038c0d
add esp, 0x2c
cmp dword [ebp - 0x6a8], 0
je 0x1003d848
jmp 0x1003d84a
jmp 0x1003d7e1
jmp 0x1003d7a7
jmp 0x1003d96b
mov dword [ebp - 0x8f8], 0xfffffffa
mov dword [ebp - 0x68], 0
jmp 0x1003d86e
mov eax, dword [ebp - 0x68]
inc eax
mov dword [ebp - 0x68], eax
cmp dword [ebp - 0x68], 2
jge 0x1003d884
mov eax, dword [ebp - 0x68]
mov dword [ebp + eax*4 - 0xf34], 0
jmp 0x1003d867
mov dword [ebp - 0x68], 0
jmp 0x1003d894
mov eax, dword [ebp - 0x68]
inc eax
mov dword [ebp - 0x68], eax
cmp dword [ebp - 0x68], 1
jge 0x1003d8aa
mov eax, dword [ebp - 0x68]
mov dword [ebp + eax*4 - 0xc3c], 0xfffffff9
jmp 0x1003d88d
mov eax, 0xf594
test eax, eax
je 0x1003d8cf
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0xf34], 0
je 0x1003d8cf
mov dword [ebp - 0xa18], 1
jmp 0x1003d8d6
and dword [ebp - 0xa18], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xf34]
sub eax, dword [ebp - 0x8f8]
mov dword [ebp - 0x6b0], eax
push 2
lea ecx, [ebp - 0xb30]
call fcn.10017939
mov ecx, dword [ebp - 0x6b0]
mov dword [eax], ecx
mov eax, dword [ebp - 0xcdc]
add eax, dword [ebp - 0xa18]
cmp dword [ebp - 0x6b0], eax
jle 0x1003d924
mov dword [ebp - 0x6b8], 1
jmp 0x1003d92b
and dword [ebp - 0x6b8], 0
mov eax, dword [ebp - 0x8f8]
cmp eax, dword [ebp - 0x6b8]
je 0x1003d945
mov dword [ebp - 0xac8], 1
jmp 0x1003d94c
and dword [ebp - 0xac8], 0
mov eax, dword [ebp - 0xac8]
mov dword [ebp - 0x2c], eax
mov eax, dword [ebp - 0xdc]
sub eax, dword [ebp - 0x2c]
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0xc3c], eax
mov byte [ebp - 0xb5], 0
push 0x104b
push 1
push 0x2608
push 0x3be7
lea eax, [ebp - 0xb5]
push eax
push 0
call fcn.1002ad9e
add esp, 0x18
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xb30]
call fcn.100118e9
mov dword [ebp - 0x127c], 0xfffffffc
mov dword [ebp - 0xce0], 0
push 2
lea ecx, [ebp - 0x10c8]
call fcn.100177e1
mov dword [ebp - 4], 0x10
mov dword [ebp - 0x220], 0xdf1febae
lea eax, [ebp - 0x1284]
push eax
push 0x4d9a
lea eax, [ebp - 0x10c8]
push eax
push 0x7308
push 1
push 0
call fcn.1002a3f1
add esp, 0x18
mov dword [ebp - 0x220], 1
jmp 0x1003da12
mov eax, dword [ebp - 0x220]
dec eax
mov dword [ebp - 0x220], eax
cmp dword [ebp - 0x220], 0
jl 0x1003da7d
mov dword [ebp - 0x2b8], 0
mov dword [ebp - 0x2b8], 0
jmp 0x1003da3e
mov eax, dword [ebp - 0x2b8]
inc eax
mov dword [ebp - 0x2b8], eax
cmp dword [ebp - 0x2b8], 1
jg 0x1003da7b
push dword [ebp - 0x220]
lea ecx, [ebp - 0x10c8]
call fcn.10017939
cmp dword [eax], 0
je 0x1003da5f
jmp 0x1003da7b
mov byte [ebp - 0x128], 0
movzx eax, byte [ebp - 0x128]
test eax, eax
je 0x1003da79
push 0
call dword [sym.imp.GDI32.dll_CreateFontIndirectA]
jmp 0x1003da31
jmp 0x1003da05
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x10c8]
call fcn.100118e9
mov dword [ebp - 0x348], 0
jmp 0x1003daa5
mov eax, dword [ebp - 0x348]
inc eax
mov dword [ebp - 0x348], eax
cmp dword [ebp - 0x348], 3
jge 0x1003dac1
mov eax, dword [ebp - 0x348]
mov dword [ebp + eax*4 - 0x15b4], 0x951fe77d
jmp 0x1003da98
push 0
push 0
lea eax, [ebp - 0xce0]
push eax
push 0x68bb
push 0x6b49
push 0x5266
call fcn.1002b310
add esp, 0x18
mov dword [ebp - 0xe4], 0x1c2a2c7c
mov dword [ebp - 0x6c0], 0xfffffffa
mov dword [ebp - 0x1b4], 3
mov dword [ebp - 0x2c0], 0x955a
mov dword [ebp - 0xc44], 0xfa014801
mov eax, dword [ebp - 0xe4]
mov dword [ebp - 0x6c0], eax
mov eax, dword [ebp - 0xe4]
cmp dword [ebp - 0x6c0], eax
je 0x1003db3b
mov dword [ebp - 0x900], 1
jmp 0x1003db42
and dword [ebp - 0x900], 0
mov eax, dword [ebp - 0x900]
mov dword [ebp - 0x1b4], eax
mov eax, dword [ebp - 0x1b4]
mov dword [ebp - 0x128c], eax
cmp dword [ebp - 0x2c0], 0xfffffffb
jae 0x1003db6f
mov dword [ebp - 0x6c8], 1
jmp 0x1003db76
and dword [ebp - 0x6c8], 0
cmp dword [ebp - 0x6c8], 0
ja 0x1003db94
cmp dword [ebp - 0x1b4], 0
je 0x1003db94
mov dword [ebp - 0xa20], 1
jmp 0x1003db9b
and dword [ebp - 0xa20], 0
cmp dword [ebp - 0xa20], 0
jl 0x1003dbb0
mov dword [ebp - 0x6d0], 1
jmp 0x1003dbb7
and dword [ebp - 0x6d0], 0
mov eax, dword [ebp - 0xe4]
add eax, dword [ebp - 0x6d0]
cmp eax, 6
jne 0x1003dbd4
mov dword [ebp - 0x908], 1
jmp 0x1003dbdb
and dword [ebp - 0x908], 0
mov eax, dword [ebp - 0xe4]
cmp dword [ebp - 0x908], eax
jne 0x1003dbf5
mov dword [ebp - 0x6d8], 1
jmp 0x1003dbfc
and dword [ebp - 0x6d8], 0
cmp dword [ebp - 0x6d8], 0xd92426f3
jne 0x1003dc14
mov dword [ebp - 0xab8], 1
jmp 0x1003dc1b
and dword [ebp - 0xab8], 0
cmp dword [ebp - 0xab8], 0xfffffff7
jb 0x1003dc36
cmp dword [ebp - 0x2c0], 0
jne 0x1003dc36
and dword [ebp - 0x6e0], 0
jmp 0x1003dc40
mov dword [ebp - 0x6e0], 1
mov eax, dword [ebp - 0xc44]
cmp dword [ebp - 0x6e0], eax
jne 0x1003dc5a
mov dword [ebp - 0xce8], 1
jmp 0x1003dc61
and dword [ebp - 0xce8], 0
mov eax, dword [ebp - 0xe4]
mov dword [ebp - 0x1294], eax
mov eax, dword [ebp - 0x2c0]
cmp dword [ebp - 0x1b4], eax
je 0x1003dc87
mov dword [ebp - 0x910], 1
jmp 0x1003dc8e
and dword [ebp - 0x910], 0
mov eax, dword [ebp - 0x910]
mov dword [ebp - 0xe4], eax
push 0
push 0
push 1
lea eax, [ebp - 0x1b4]
push eax
lea eax, [ebp - 0xe4]
push eax
push 0x4795
push 0xf99
lea eax, [ebp - 0x2c0]
push eax
push 0x4678
call fcn.100339a3
add esp, 0x24
mov dword [ebp - 0x310], 0
jmp 0x1003dce5
mov eax, dword [ebp - 0x310]
dec eax
mov dword [ebp - 0x310], eax
cmp dword [ebp - 0x310], 0xfffffff2
jg 0x1003e0a0
mov dword [ebp - 0x3c4], 0x20f89b54
mov dword [ebp - 0xec], 0
push 3
lea ecx, [ebp - 0x1364]
call fcn.100177e1
mov dword [ebp - 4], 0x11
mov dword [ebp - 0xc4c], 0x364d64ea
mov dword [ebp - 0x129c], 0x2da3c3d2
mov dword [ebp - 0x1018], 0xcd204465
mov dword [ebp - 0x1014], 0xcd204465
mov dword [ebp - 0x1010], 0xcd204465
mov dword [ebp - 0x100c], 0xcd204465
lea ecx, [ebp - 0x42d]
call fcn.10017948
push eax
lea eax, [ebp - 0x1008]
push eax
lea eax, [ebp - 0x1018]
push eax
lea ecx, [ebp - 0x1564]
call fcn.1001794b
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0xe00]
call fcn.10017894
mov byte [ebp - 4], 0x12
mov dword [ebp - 0x12a4], 0x56fe
mov dword [ebp - 0x2c8], 0
mov dword [ebp - 0xc54], 0xde47
push 0x1bd9
push 0
push 1
push 0x282c
lea eax, [ebp - 0x200]
push eax
push 0
push 0x245a
push 0x596c
lea eax, [ebp - 0x1364]
push eax
push 0xf06
push 0x254a
call fcn.100336c1
add esp, 0x2c
mov dword [ebp - 0x200], 0
jmp 0x1003de00
mov eax, dword [ebp - 0x200]
inc eax
mov dword [ebp - 0x200], eax
cmp dword [ebp - 0x200], 4
jge 0x1003de1c
mov eax, dword [ebp - 0x200]
mov dword [ebp + eax*4 - 0x14c8], 0x858905b8
jmp 0x1003ddf3
mov eax, dword [ebp - 0x3c4]
mov dword [ebp - 0xec], eax
cmp dword [ebp - 0xec], 1
jge 0x1003de3d
mov dword [ebp - 0x6e8], 1
jmp 0x1003de44
and dword [ebp - 0x6e8], 0
push 1
lea ecx, [ebp - 0xe00]
call fcn.10017939
mov ecx, dword [ebp - 0x6e8]
mov dword [eax], ecx
cmp dword [ebp - 0xec], 1
jge 0x1003df14
mov eax, dword [ebp - 0x2c8]
inc eax
mov dword [ebp - 0x2c8], eax
mov eax, dword [ebp - 0x2c8]
cmp dword [ebp - 0x2c8], eax
je 0x1003de8d
mov dword [ebp - 0x41c], 1
jmp 0x1003de94
and dword [ebp - 0x41c], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x41c]
mov dword [ebp + eax - 0x14c8], ecx
mov esi, dword [ebp - 0xc4c]
mov edi, dword [ebp - 0x3c4]
push 1
lea ecx, [ebp - 0xe00]
call fcn.10017939
mov ecx, dword [ebp - 0x41c]
add ecx, dword [eax]
imul ecx, edi
mov eax, dword [ebp - 0xec]
sub eax, ecx
cmp eax, esi
jle 0x1003dee9
cmp dword [ebp - 0x3c4], 0
jne 0x1003dee9
and dword [ebp - 0xa28], 0
jmp 0x1003def3
mov dword [ebp - 0xa28], 1
mov eax, dword [ebp - 0xa28]
mov dword [ebp - 0xec], eax
cmp dword [ebp - 0xec], 0
je 0x1003df14
mov dword [ebp - 0x6f0], 1
jmp 0x1003df1b
and dword [ebp - 0x6f0], 0
push 1
lea ecx, [ebp - 0xe00]
call fcn.10017939
mov eax, dword [eax]
cmp eax, dword [ebp - 0x6f0]
jl 0x1003df3e
mov dword [ebp - 0xcf0], 1
jmp 0x1003df45
and dword [ebp - 0xcf0], 0
push 2
lea ecx, [ebp - 0xe00]
call fcn.10017939
cmp dword [ebp - 0xec], 0
je 0x1003df6b
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x14c8], 0
jne 0x1003df74
cmp dword [ebp - 0xc54], 0
je 0x1003df8d
mov dword [ebp - 0x918], 0xffffffff
mov eax, dword [ebp - 0x918]
dec eax
mov dword [ebp - 0x918], eax
jmp 0x1003dfae
mov byte [ebp - 0xbd], 0
movzx eax, byte [ebp - 0xbd]
test eax, eax
je 0x1003dfae
push 0xa50
push 0
push 0
call dword [sym.imp.KERNEL32.dll_VirtualQuery]
mov byte [ebp - 4], 0x11
lea ecx, [ebp - 0xe00]
call fcn.100118e9
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x1364]
call fcn.100118e9
mov byte [ebp - 0x120], 0
movzx eax, byte [ebp - 0x120]
test eax, eax
je 0x1003e09b
mov dword [ebp - 0x1bc], 0xb9f9b31
mov dword [ebp - 0xcf8], 4
mov dword [ebp - 0xc64], 0xa6ca0cec
mov dword [ebp - 0x12ac], 0xffffffff
mov dword [ebp - 0x1bc], 0
jmp 0x1003e023
mov eax, dword [ebp - 0x1bc]
dec eax
mov dword [ebp - 0x1bc], eax
cmp dword [ebp - 0x1bc], 0xfffffffe
jne 0x1003e07b
mov dword [ebp - 0xd00], 0xfffffffe
mov dword [ebp - 0xc5c], 0
push 0xcc
push 0xa62
push 1
lea eax, [ebp - 0xcf8]
push eax
lea eax, [ebp - 0xc5c]
push eax
lea eax, [ebp - 0x1bc]
push eax
lea eax, [ebp - 0xd00]
push eax
lea eax, [ebp - 0xc64]
push eax
push 0
call fcn.1003116f
add esp, 0x24
jmp 0x1003e016
push 0x7a59
push 1
push 0
push 0x6d16
push 0x1b7b
push 0x744
call fcn.10031358
add esp, 0x18
jmp 0x1003dcd8
push 3
lea ecx, [ebp - 0x470]
call fcn.100177e1
mov dword [ebp - 4], 0x13
mov dword [ebp - 0x58], 1
mov dword [ebp - 0x1cc], 0xffffffff
mov dword [ebp - 0xff0], 2
mov dword [ebp - 0xfec], 2
mov dword [ebp - 0xfe8], 2
mov dword [ebp - 0xfe4], 2
lea ecx, [ebp - 0x415]
call fcn.10017948
push eax
lea eax, [ebp - 0xfe0]
push eax
lea eax, [ebp - 0xff0]
push eax
lea ecx, [ebp - 0x156c]
call fcn.1001794b
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0x1374]
call fcn.10017894
mov byte [ebp - 4], 0x14
mov dword [ebp - 0x208], 0xe50714ba
mov dword [ebp - 0x240], 0
jmp 0x1003e149
mov eax, dword [ebp - 0x240]
inc eax
mov dword [ebp - 0x240], eax
cmp dword [ebp - 0x240], 3
jge 0x1003e165
mov eax, dword [ebp - 0x240]
mov dword [ebp + eax*4 - 0xe10], 1
jmp 0x1003e13c
push 0
lea eax, [ebp - 0x240]
push eax
push 0
push 0x58ed
push 0x58f7
lea eax, [ebp - 0x470]
push eax
push 0x536
call fcn.1002a7b3
add esp, 0x1c
push 1
lea ecx, [ebp - 0x470]
call fcn.10017939
and dword [eax], 0
jmp 0x1003e1c4
push 1
lea ecx, [ebp - 0x470]
call fcn.10017939
mov dword [ebp - 0x6f8], eax
mov eax, dword [ebp - 0x6f8]
mov eax, dword [eax]
inc eax
mov ecx, dword [ebp - 0x6f8]
mov dword [ecx], eax
push 1
lea ecx, [ebp - 0x470]
call fcn.10017939
cmp dword [eax], 2
jg 0x1003e217
mov dword [ebp - 0x1c4], 0x7555b7ce
mov dword [ebp - 0x1c4], 0
jmp 0x1003e1f9
mov eax, dword [ebp - 0x1c4]
inc eax
mov dword [ebp - 0x1c4], eax
cmp dword [ebp - 0x1c4], 3
jge 0x1003e215
mov eax, dword [ebp - 0x1c4]
mov dword [ebp + eax*4 - 0xe10], 3
jmp 0x1003e1ec
jmp 0x1003e1a0
mov dword [ebp - 0x58], 2
jmp 0x1003e227
mov eax, dword [ebp - 0x58]
dec eax
mov dword [ebp - 0x58], eax
cmp dword [ebp - 0x58], 0
jl 0x1003e4a4
mov dword [ebp - 0x94], 0xe5d5ec7e
mov dword [ebp - 0x13c], 0xffffffff
push dword [ebp - 0x58]
lea ecx, [ebp - 0x470]
call fcn.10017939
push dword [ebp - 0x58]
lea ecx, [ebp - 0x470]
call fcn.10017939
mov dword [ebp - 0xad0], eax
push dword [ebp - 0x58]
lea ecx, [ebp - 0x470]
call fcn.10017939
mov ecx, dword [ebp - 0xad0]
mov eax, dword [eax]
mov dword [ecx], eax
mov eax, dword [ebp - 0xad0]
cmp dword [eax], 0
je 0x1003e305
push dword [ebp - 0x58]
lea ecx, [ebp - 0x470]
call fcn.10017939
cmp dword [eax], 0
jne 0x1003e2a9
mov dword [ebp - 0xd08], 1
jmp 0x1003e2b0
and dword [ebp - 0xd08], 0
push 0
lea ecx, [ebp - 0x470]
call fcn.10017939
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0xe10], 0x74b6046e
je 0x1003e2dc
mov dword [ebp - 0xc6c], 1
jmp 0x1003e2e3
and dword [ebp - 0xc6c], 0
push 2
lea ecx, [ebp - 0x470]
call fcn.10017939
cmp dword [ebp - 0x1cc], 0
je 0x1003e305
mov dword [ebp - 0x700], 1
jmp 0x1003e30c
and dword [ebp - 0x700], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xe10]
cmp dword [ebp - 0x700], eax
jl 0x1003e32d
mov dword [ebp - 0x454], 1
jmp 0x1003e334
and dword [ebp - 0x454], 0
push 2
lea ecx, [ebp - 0x1374]
call fcn.10017939
mov ecx, dword [ebp - 0x454]
mov dword [eax], ecx
mov eax, dword [ebp - 0x454]
mov dword [ebp - 0x94], eax
cmp dword [ebp - 0x94], 0
jne 0x1003e367
cmp dword [ebp - 0x94], 0
je 0x1003e379
cmp dword [ebp - 0x58], 0
je 0x1003e379
mov dword [ebp - 0x920], 1
jmp 0x1003e380
and dword [ebp - 0x920], 0
mov eax, dword [ebp - 0x920]
mov dword [ebp - 0x13c], eax
cmp dword [ebp - 0x13c], 1
jne 0x1003e3a1
mov dword [ebp - 0x708], 1
jmp 0x1003e3a8
and dword [ebp - 0x708], 0
mov eax, dword [ebp - 0x708]
mov dword [ebp - 0x208], eax
mov dword [ebp - 0x13c], 0
jmp 0x1003e3cd
mov eax, dword [ebp - 0x13c]
dec eax
mov dword [ebp - 0x13c], eax
cmp dword [ebp - 0x13c], 0xfffffff7
jge 0x1003e49f
mov dword [ebp - 0x208], 2
jmp 0x1003e3f3
mov eax, dword [ebp - 0x208]
dec eax
mov dword [ebp - 0x208], eax
cmp dword [ebp - 0x208], 0
jl 0x1003e49a
mov eax, dword [ebp - 0x58]
cmp dword [ebp + eax*4 - 0xe10], 0
je 0x1003e425
push 0x1623
push 0
push 0x4e0a
push 0
call fcn.1002f933
add esp, 0x10
jmp 0x1003e495
mov dword [ebp - 0x94], 0
jmp 0x1003e43e
mov eax, dword [ebp - 0x94]
inc eax
mov dword [ebp - 0x94], eax
cmp dword [ebp - 0x94], 2
jg 0x1003e495
mov dword [ebp - 0x1cc], 0
jmp 0x1003e460
mov eax, dword [ebp - 0x1cc]
inc eax
mov dword [ebp - 0x1cc], eax
cmp dword [ebp - 0x1cc], 2
jg 0x1003e493
mov eax, dword [ebp - 0x94]
cmp dword [ebp + eax*4 - 0xe10], 0
je 0x1003e47b
jmp 0x1003e493
push 0x6d1b
push 0x28a0
push 0
push 1
call fcn.1002f9c8
add esp, 0x10
jmp 0x1003e453
jmp 0x1003e431
jmp 0x1003e3e6
jmp 0x1003e3c0
jmp 0x1003e220
mov byte [ebp - 4], 0x13
lea ecx, [ebp - 0x1374]
call fcn.100118e9
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x470]
call fcn.100118e9
cmp dword [ebp - 0x408], 0
jle 0x1004454d
mov dword [ebp - 0xf4], 9
push 1
lea ecx, [ebp - 0xb48]
call fcn.100177e1
mov dword [ebp - 4], 0x15
mov dword [ebp - 0x228], 0x8e045dce
mov dword [ebp - 0x720], 0x8af16de6
mov dword [ebp - 0x3cc], 0x2657
push 0
push 0x7ac2
lea eax, [ebp - 0xb48]
push eax
push 1
push 1
push 0x41e6
push 0x237e
lea eax, [ebp - 0x12b4]
push eax
push 0x524a
call fcn.1002a62b
add esp, 0x24
mov dword [ebp - 0xf4], 0x14
jmp 0x1003e554
mov eax, dword [ebp - 0xf4]
dec eax
mov dword [ebp - 0xf4], eax
cmp dword [ebp - 0xf4], 0xfffffff4
jg 0x1003e964
mov dword [ebp - 0x154], 0
mov dword [ebp - 0x338], 0
jmp 0x1003e584
mov eax, dword [ebp - 0x338]
inc eax
mov dword [ebp - 0x338], eax
cmp dword [ebp - 0x338], 2
jge 0x1003e5a0
mov eax, dword [ebp - 0x338]
mov dword [ebp + eax*4 - 0x24c], 0xffffffff
jmp 0x1003e577
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x24c], 0
jne 0x1003e5fb
push 0
lea ecx, [ebp - 0xb48]
call fcn.10017939
xor ecx, ecx
inc ecx
sub ecx, dword [eax]
cmp ecx, 0x5f9c7104
je 0x1003e5d6
mov dword [ebp - 0xa30], 1
jmp 0x1003e5dd
and dword [ebp - 0xa30], 0
mov eax, dword [ebp - 0xa30]
mov dword [ebp - 0x154], eax
cmp dword [ebp - 0x154], 0
jne 0x1003e5fb
and dword [ebp - 0x710], 0
jmp 0x1003e605
mov dword [ebp - 0x710], 1
push 0
lea ecx, [ebp - 0xb48]
call fcn.10017939
mov ecx, dword [ebp - 0x710]
cmp ecx, dword [eax]
jne 0x1003e629
push 0
lea ecx, [ebp - 0xb48]
call fcn.10017939
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x24c]
mov dword [ebp - 0x228], eax
mov eax, dword [ebp - 0x228]
mov dword [ebp - 0x12bc], eax
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x24c]
mov dword [ebp - 0x12c8], eax
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x24c], 0
jb 0x1003e677
mov dword [ebp - 0x928], 1
jmp 0x1003e67e
and dword [ebp - 0x928], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x928]
mov dword [ebp + eax - 0x24c], ecx
mov eax, dword [ebp - 0xf4]
mov dword [ebp - 0x12d4], eax
cmp dword [ebp - 0xf4], 0x66ef
jg 0x1003e783
push 4
pop eax
shl eax, 0
mov dword [ebp + eax - 0x24c], 1
xor eax, eax
inc eax
cmp eax, 1
jne 0x1003e6d2
mov dword [ebp - 0x718], 1
jmp 0x1003e6d9
and dword [ebp - 0x718], 0
mov eax, dword [ebp - 0x3cc]
cmp dword [ebp - 0x718], eax
jle 0x1003e707
mov eax, dword [ebp - 0x228]
mov dword [ebp - 0x12e0], eax
push 0
lea ecx, [ebp - 0xb48]
call fcn.10017939
imul eax, dword [eax], 6
test eax, eax
je 0x1003e723
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x24c], 0
je 0x1003e723
mov dword [ebp - 0xad8], 1
jmp 0x1003e72a
and dword [ebp - 0xad8], 0
mov eax, dword [ebp - 0x720]
cmp dword [ebp - 0xad8], eax
jl 0x1003e744
mov dword [ebp - 0x930], 1
jmp 0x1003e74b
and dword [ebp - 0x930], 0
mov eax, dword [ebp - 0x720]
cmp eax, dword [ebp - 0x930]
jge 0x1003e765
mov dword [ebp - 0x728], 1
jmp 0x1003e76c
and dword [ebp - 0x728], 0
mov eax, dword [ebp - 0x228]
add eax, dword [ebp - 0x728]
mov dword [ebp - 0x154], eax
jmp 0x1003e95f
mov dword [ebp - 0xd10], 1
mov dword [ebp - 0x748], 0xd45eb447
push 3
lea ecx, [ebp - 0x10e0]
call fcn.100177e1
mov byte [ebp - 4], 0x16
lea eax, [ebp - 0x12ec]
push eax
push 0x6dd0
lea eax, [ebp - 0x10e0]
push eax
push 0x2357
push 0
push 0x1528
push 1
push 0x47b9
call fcn.1002a89c
add esp, 0x20
mov eax, dword [ebp - 0x154]
mov dword [ebp - 0x12f4], eax
mov eax, 0xfffc
sub eax, dword [ebp - 0x154]
jne 0x1003e801
cmp dword [ebp - 0x3cc], 0
jne 0x1003e801
and dword [ebp - 0xa38], 0
jmp 0x1003e80b
mov dword [ebp - 0xa38], 1
push 0
lea ecx, [ebp - 0xb48]
call fcn.10017939
mov ecx, dword [ebp - 0xa38]
cmp ecx, dword [eax]
je 0x1003e82e
mov dword [ebp - 0x730], 1
jmp 0x1003e835
and dword [ebp - 0x730], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x24c]
sub eax, dword [ebp - 0x730]
jns 0x1003e856
mov dword [ebp - 0x938], 1
jmp 0x1003e85d
and dword [ebp - 0x938], 0
mov eax, dword [ebp - 0x3cc]
add eax, dword [ebp - 0x938]
push 4
pop ecx
shl ecx, 0
cmp eax, dword [ebp + ecx - 0x24c]
jle 0x1003e88d
cmp dword [ebp - 0xf4], 0
je 0x1003e88d
mov dword [ebp - 0x738], 1
jmp 0x1003e894
and dword [ebp - 0x738], 0
mov eax, dword [ebp - 0x154]
cmp dword [ebp - 0x738], eax
jne 0x1003e8ae
mov dword [ebp - 0xac4], 1
jmp 0x1003e8b5
and dword [ebp - 0xac4], 0
mov eax, dword [ebp - 0xac4]
imul eax, dword [ebp - 0xd10]
mov dword [ebp - 0x740], eax
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x740]
mov dword [ebp + eax - 0x24c], ecx
cmp dword [ebp - 0x740], 0
jne 0x1003e8f6
mov eax, 0x340c
test eax, eax
jne 0x1003e8f6
and dword [ebp - 0x940], 0
jmp 0x1003e900
mov dword [ebp - 0x940], 1
mov eax, dword [ebp - 0x940]
sub eax, 0x4f4fcf42
mov dword [ebp - 0x748], eax
mov eax, dword [ebp - 0x228]
cmp dword [ebp - 0x748], eax
jne 0x1003e92d
xor eax, eax
inc eax
jne 0x1003e92d
and dword [ebp - 0xa40], 0
jmp 0x1003e937
mov dword [ebp - 0xa40], 1
imul esi, dword [ebp - 0xa40], 0x9b5f
push 1
lea ecx, [ebp - 0x10e0]
call fcn.10017939
mov dword [eax], esi
mov byte [ebp - 4], 0x15
lea ecx, [ebp - 0x10e0]
call fcn.100118e9
jmp 0x1003e547
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xb48]
call fcn.100118e9
push 2
lea ecx, [ebp - 0x1128]
call fcn.100177e1
mov dword [ebp - 4], 0x17
push 4
lea ecx, [ebp - 0x1110]
call fcn.100177e1
mov byte [ebp - 4], 0x18
push 3
lea ecx, [ebp - 0x10f8]
call fcn.100177e1
mov byte [ebp - 4], 0x19
mov dword [ebp - 0xc74], 0x257b
cmp dword [ebp - 0xc74], 0xa3a
jge 0x1003ea37
lea eax, [ebp - 0xd18]
push eax
lea eax, [ebp - 0x424]
push eax
push 0x10007bac
call fcn.1005076b
add esp, 0xc
mov eax, dword [ebp - 0x424]
imul eax, dword [ebp - 0xd18]
add eax, 0x5a
cdq
push 0x5b
pop ecx
idiv ecx
inc eax
inc eax
mov dword [ebp - 0x1d4], eax
cmp dword [ebp - 0x1d4], 3
jge 0x1003ea0b
mov dword [ebp - 0x1d4], 3
mov eax, dword [ebp - 0x1d4]
cmp eax, dword [ebp - 0x424]
jle 0x1003ea25
mov eax, dword [ebp - 0x424]
mov dword [ebp - 0x1d4], eax
push dword [ebp - 0x1d4]
push 0x10008084
call fcn.10050db3
pop ecx
pop ecx
push 0x4345
lea eax, [ebp - 0x750]
push eax
push 0x709d
lea eax, [ebp - 0x1128]
push eax
push 1
push 1
call fcn.1002a3f1
add esp, 0x18
push 1
push 0x3a90
push 0x2869
push 0
push 1
lea eax, [ebp - 0x750]
push eax
push 0x73d
push 0x82c
lea eax, [ebp - 0x1110]
push eax
call fcn.1002a62b
add esp, 0x24
lea eax, [ebp - 0x750]
push eax
lea eax, [ebp - 0x10f8]
push eax
push 0
push 1
push 0x36a6
push 0x138b
push 0
push 0x1e1a
push 0x67fe
call fcn.10038752
add esp, 0x24
push 0x45be
push 0x7f95
lea eax, [ebp - 0x1128]
push eax
lea eax, [ebp - 0x1110]
push eax
push 0
push 0x2041
push 0x12e2
lea eax, [ebp - 0x10f8]
push eax
push 0x242a
push 1
call fcn.10030e0f
add esp, 0x28
mov byte [ebp - 4], 0x18
lea ecx, [ebp - 0x10f8]
call fcn.100118e9
mov byte [ebp - 4], 0x17
lea ecx, [ebp - 0x1110]
call fcn.100118e9
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x1128]
call fcn.100118e9
mov dword [ebp - 0x88], 0
mov dword [ebp - 0x88], 0xffffffef
jmp 0x1003eb45
mov eax, dword [ebp - 0x88]
inc eax
mov dword [ebp - 0x88], eax
cmp dword [ebp - 0x88], 7
jge 0x1003eb79
mov byte [ebp - 0x12a], 0
push 1
lea eax, [ebp - 0x12a]
push eax
push 0x636f
push 0
push 0x482c
push 0x6457
call fcn.1002ac62
add esp, 0x18
jmp 0x1003eb38
mov dword [ebp - 0x88], 0
jmp 0x1003eb92
mov eax, dword [ebp - 0x88]
dec eax
mov dword [ebp - 0x88], eax
cmp dword [ebp - 0x88], 0xffffffe4
jg 0x1003ebc6
mov byte [ebp - 0xc5], 0
push 0
push 1
push 0x5825
push 0x3cec
push 0x258e
lea eax, [ebp - 0xc5]
push eax
call fcn.1002b310
add esp, 0x18
jmp 0x1003eb85
mov dword [ebp - 0x318], 0x53b26bdd
push 2
lea ecx, [ebp - 0x1140]
call fcn.100177e1
mov dword [ebp - 4], 0x1a
mov dword [ebp - 0x2d0], 0x13532fe2
push 0x6917
push 1
push 0x6e7
push 1
lea eax, [ebp - 0x12fc]
push eax
push 0x1de6
push 0x2a85
push 0x6717
lea eax, [ebp - 0x1140]
push eax
push 0x2cac
call fcn.1002a535
add esp, 0x28
mov dword [ebp - 0x2d0], 1
jmp 0x1003ec3f
mov eax, dword [ebp - 0x2d0]
dec eax
mov dword [ebp - 0x2d0], eax
cmp dword [ebp - 0x2d0], 0
jl 0x1003ec76
mov dword [ebp - 0xc7c], 0x252604
push 0x37b4
lea eax, [ebp - 0xc7c]
push eax
push 0
lea eax, [ebp - 0x1140]
push eax
push 0x6503
call fcn.10045b6c
add esp, 0x14
jmp 0x1003ec32
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x1140]
call fcn.100118e9
mov dword [ebp - 0x318], 2
jmp 0x1003ec9e
cmp dword [ebp - 0x318], 0x1d
jne 0x1003f87b
mov dword [ebp - 0x210], 0x318d5816
mov dword [ebp - 0x144], 0x13638ecf
mov dword [ebp - 0x2e0], 0x17b722ba
push 0
push 0x5b7f
push 1
push 0x2d4d
push 0x4d1b
push 0x5a94
lea eax, [ebp - 0x144]
push eax
call fcn.1002a7b3
add esp, 0x1c
cmp dword [ebp - 0x144], 0
je 0x1003ed8b
mov dword [ebp - 0x948], 0x6535
mov eax, dword [ebp - 0x948]
mov dword [ebp - 0x1304], eax
cmp dword [ebp - 0x144], 1
jne 0x1003ed28
mov dword [ebp - 0x758], 1
jmp 0x1003ed2f
and dword [ebp - 0x758], 0
mov eax, dword [ebp - 0x948]
cmp eax, dword [ebp - 0x758]
jle 0x1003ed49
mov dword [ebp - 0xd20], 1
jmp 0x1003ed50
and dword [ebp - 0xd20], 0
mov eax, dword [ebp - 0x144]
mov dword [ebp - 0x130c], eax
cmp dword [ebp - 0x144], 0xfffffffa
je 0x1003ed71
mov dword [ebp - 0xb1c], 1
jmp 0x1003ed78
and dword [ebp - 0xb1c], 0
imul eax, dword [ebp - 0xb1c], 0
inc eax
mov dword [ebp - 0x2e0], eax
jmp 0x1003efdf
mov dword [ebp - 0x250], 0x89b5
mov dword [ebp - 0x90], 0xffffffff
push 2
lea ecx, [ebp - 0xefc]
call fcn.100177e1
mov dword [ebp - 4], 0x1b
mov dword [ebp - 0xd28], 0xa7da828c
mov dword [ebp - 0x2d8], 0
jmp 0x1003edd6
mov eax, dword [ebp - 0x2d8]
inc eax
mov dword [ebp - 0x2d8], eax
cmp dword [ebp - 0x2d8], 2
jge 0x1003edf8
push dword [ebp - 0x2d8]
lea ecx, [ebp - 0xefc]
call fcn.10017939
mov dword [eax], 0x27720104
jmp 0x1003edc9
cmp dword [ebp - 0x250], 0
je 0x1003ee1c
mov dword [ebp - 0xc84], 0xfffffff7
mov eax, dword [ebp - 0x250]
mov dword [ebp - 0xc84], eax
jmp 0x1003efc4
mov dword [ebp - 0x3d4], 0x31966c47
mov dword [ebp - 0x950], 0xf4cc511e
lea eax, [ebp - 0x2e0]
push eax
push 0
lea eax, [ebp - 0x144]
push eax
lea eax, [ebp - 0x3d4]
push eax
lea eax, [ebp - 0x250]
push eax
push 0x74f0
push 0x6de4
lea eax, [ebp - 0x90]
push eax
push 1
lea eax, [ebp - 0x950]
push eax
call fcn.100383c7
add esp, 0x28
mov dword [ebp - 0x90], 0
jmp 0x1003ee89
cmp dword [ebp - 0x90], 1
jg 0x1003efc4
mov dword [ebp - 0x35c], 0
jmp 0x1003eeaf
mov eax, dword [ebp - 0x35c]
inc eax
mov dword [ebp - 0x35c], eax
cmp dword [ebp - 0x35c], 2
jge 0x1003eecb
mov eax, dword [ebp - 0x35c]
mov dword [ebp + eax*4 - 0xf54], 2
jmp 0x1003eea2
push dword [ebp - 0x90]
lea ecx, [ebp - 0xefc]
call fcn.10017939
cmp dword [eax], 0xbb30b137
je 0x1003eef0
mov dword [ebp - 0x760], 1
jmp 0x1003eef7
and dword [ebp - 0x760], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x760]
mov dword [ebp + eax - 0xf54], ecx
mov eax, dword [ebp - 0x90]
cmp dword [ebp - 0x3d4], eax
jge 0x1003ef24
mov dword [ebp - 0x768], 1
jmp 0x1003ef2b
and dword [ebp - 0x768], 0
mov eax, dword [ebp - 0x950]
sub eax, dword [ebp - 0x768]
je 0x1003ef74
mov eax, dword [ebp - 0x2e0]
cmp dword [ebp - 0x3d4], eax
jl 0x1003ef53
and dword [ebp - 0x770], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0xf54]
cmp eax, dword [ebp - 0x770]
jl 0x1003ef9c
mov eax, dword [ebp - 0x2e0]
mov dword [ebp - 0x90], eax
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xefc]
call fcn.100118e9
cmp dword [ebp - 0x210], 0
je 0x1003efed
jmp 0x1003f87b
mov dword [ebp - 0x788], 0xfffffff7
mov dword [ebp - 0x1314], 0x79b38951
mov dword [ebp - 0x3e4], 0xfffffff7
mov dword [ebp - 0x320], 0xb2c57e71
mov dword [ebp - 0x42c], 0xb441a62a
mov dword [ebp - 0x3dc], 0xa4ba31e4
push 4
lea ecx, [ebp - 0xb10]
call fcn.100177e1
mov dword [ebp - 4], 0x1c
mov dword [ebp - 0x474], 0xffffffff
mov dword [ebp - 0xc94], 9
mov dword [ebp - 0x7c], 0
jmp 0x1003f061
mov eax, dword [ebp - 0x7c]
inc eax
mov dword [ebp - 0x7c], eax
cmp dword [ebp - 0x7c], 2
jge 0x1003f077
mov eax, dword [ebp - 0x7c]
mov dword [ebp + eax*4 - 0x12c4], 0xb363
jmp 0x1003f05a
mov dword [ebp - 0x7c], 0
jmp 0x1003f087
cmp dword [ebp - 0x7c], 4
jge 0x1003f0a3
push dword [ebp - 0x7c]
lea ecx, [ebp - 0xb10]
call fcn.10017939
mov dword [eax], 0x694a61bf
jmp 0x1003f080
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0x12c4], 0x2c0d37ad
mov eax, 0x2c0d37ad
test eax, eax
jne 0x1003f0c9
push 4
push 0x1000
push dword [ebp - 0x408]
mov eax, dword [ebp - 0xa6c]
mov ecx, dword [ebp - 0xcb4]
add ecx, dword [eax + 0xc]
push ecx
push 0x86da
push 0x77e0
call fcn.1002904a
pop ecx
pop ecx
call eax
mov ecx, dword [ebp - 0x410]
mov dword [ecx], eax
mov dword [ebp - 0x238], 0x1f2c29a
mov dword [ebp - 0x27c], 0
jmp 0x1003f8d6
mov eax, dword [ebp - 0x27c]
inc eax
mov dword [ebp - 0x27c], eax
cmp dword [ebp - 0x27c], 3
jge 0x1003f8f2
mov eax, dword [ebp - 0x27c]
mov dword [ebp + eax*4 - 0xf14], 1
jmp 0x1003f8c9
mov dword [ebp - 0x238], 0
jmp 0x1003f90b
mov eax, dword [ebp - 0x238]
inc eax
mov dword [ebp - 0x238], eax
cmp dword [ebp - 0x238], 2
jg 0x1003fad8
mov dword [ebp - 0x17c], 0x54fddd3f
mov dword [ebp - 0x17c], 0
jmp 0x1003f93b
mov eax, dword [ebp - 0x17c]
inc eax
mov dword [ebp - 0x17c], eax
cmp dword [ebp - 0x17c], 2
jg 0x1003faa1
mov dword [ebp - 0x180], 1
push 3
lea ecx, [ebp - 0x1384]
call fcn.100177e1
mov dword [ebp - 4], 0x20
mov dword [ebp - 0x284], 0
jmp 0x1003f97f
mov eax, dword [ebp - 0x284]
inc eax
mov dword [ebp - 0x284], eax
cmp dword [ebp - 0x284], 3
jge 0x1003f9a1
push dword [ebp - 0x284]
lea ecx, [ebp - 0x1384]
call fcn.10017939
mov dword [eax], 0x38330377
jmp 0x1003f972
mov dword [ebp - 0x180], 0
jmp 0x1003f9ba
cmp dword [ebp - 0x180], 2
jg 0x1003fa8d
mov dword [ebp - 0x70], 0x8a012e1d
mov dword [ebp - 0x143c], 3
mov dword [ebp - 0x70], 0
jmp 0x1003f9e8
cmp dword [ebp - 0x70], 2
jg 0x1003fa11
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x1384]
call fcn.100118e9
jmp 0x1003f92e
mov byte [ebp - 0xd5], 0
movzx eax, byte [ebp - 0xd5]
test eax, eax
je 0x1003fad3
push 0
push 1
push 0x21de
push 0x2cf3
push 0x5532
push 0x15d5
call fcn.1002b4cf
add esp, 0x18
jmp 0x1003f8fe
mov dword [ebp - 0x34], 0x57ad95e1
mov dword [ebp - 0x29c], 0xfffffffd
mov dword [ebp - 0x2a4], 0
mov dword [ebp - 0x48c], 1
mov dword [ebp - 0x28c], 0
jmp 0x1003fb16
mov eax, dword [ebp - 0x28c]
inc eax
mov dword [ebp - 0x28c], eax
cmp dword [ebp - 0x28c], 1
jge 0x1003fb32
mov eax, dword [ebp - 0x28c]
mov dword [ebp + eax*4 - 0x164], 0x4e2db58
jmp 0x1003fb09
mov byte [ebp - 0xdd], 0
movzx eax, byte [ebp - 0xdd]
test eax, eax
je 0x1003fb70
push 1
push 0x523b
push 0x6db9
push 1
push 1
push 0x8a5
push 0x57fc
push 0x35c
push 0x5c45
call fcn.1002a62b
add esp, 0x24
mov dword [ebp - 0x34], 0
jmp 0x1003fb80
cmp dword [ebp - 0x34], 0
jl 0x10040084
mov dword [ebp - 0x4b4], 0xffffffff
mov dword [ebp - 0x178], 1
mov dword [ebp - 0xd60], 1
mov dword [ebp - 0xcc4], 1
push 3
lea ecx, [ebp - 0x1134]
call fcn.100177e1
mov dword [ebp - 4], 0x21
lea eax, [ebp - 0x1134]
push eax
push 0
push 0x5a20
push 1
push 0x68e7
lea eax, [ebp - 0x1454]
push eax
call fcn.10033524
add esp, 0x18
mov eax, dword [ebp - 0x34]
mov eax, dword [ebp + eax*4 - 0x164]
mov dword [ebp - 0x1490], eax
mov eax, 0xd018
test eax, eax
je 0x1003fc1c
mov eax, dword [ebp - 0x34]
cmp dword [ebp + eax*4 - 0x164], 0
je 0x1003fc1c
mov dword [ebp - 0x7d8], 1
jmp 0x1003fc23
and dword [ebp - 0x7d8], 0
mov eax, dword [ebp - 0x7d8]
mov dword [ebp - 0x29c], eax
mov eax, dword [ebp - 0x29c]
mov ecx, dword [ebp - 0x34]
sub eax, dword [ebp + ecx*4 - 0x164]
cmp eax, 0xbdebf889
jne 0x1003fc52
mov dword [ebp - 0xb24], 1
jmp 0x1003fc59
and dword [ebp - 0xb24], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x164]
cmp dword [ebp - 0xb24], eax
je 0x1003fc7a
push 2
lea ecx, [ebp - 0xb3c]
call fcn.100177e1
mov dword [ebp - 4], 0x22
push 4
lea ecx, [ebp - 0xf2c]
call fcn.100177e1
mov byte [ebp - 4], 0x23
push 3
lea ecx, [ebp - 0x1050]
call fcn.100177e1
mov byte [ebp - 4], 0x24
push 0x791b
push 0x3671
push 1
push 1
push 0x46b
lea eax, [ebp - 0xb3c]
push eax
push 0
lea eax, [ebp - 0x14c]
push eax
push 0x1336
call fcn.10038752
add esp, 0x24
push 0x5d51
push 0x2acf
push 0x31b9
push 0x78f3
push 0x3162
push 0
push 0x5338
push 0x2c64
push 0x622f
push 0x3174
lea eax, [ebp - 0x14c]
push eax
lea eax, [ebp - 0xf2c]
push eax
push 0
call fcn.1002b670
add esp, 0x34
mov dword [ebp - 0x14c], 0
jmp 0x1004014a
cmp dword [ebp - 0x14c], 3
jge 0x1004016c
push dword [ebp - 0x14c]
lea ecx, [ebp - 0x1050]
call fcn.10017939
mov dword [eax], 0x9d6b9c2d
jmp 0x1004013d
push 2
lea ecx, [ebp - 0xf2c]
call fcn.10017939
mov dword [ebp - 0xd68], eax
push 1
lea ecx, [ebp - 0xb3c]
call fcn.10017939
mov ecx, dword [ebp - 0xd68]
mov eax, dword [eax]
mov dword [ecx], eax
push 1
lea ecx, [ebp - 0xf2c]
call fcn.10017939
mov dword [ebp - 0xccc], eax
push 1
lea ecx, [ebp - 0xb3c]
call fcn.10017939
mov ecx, dword [ebp - 0xccc]
mov eax, dword [eax]
mov dword [ecx], eax
push 1
lea ecx, [ebp - 0xb3c]
call fcn.10017939
mov esi, eax
push 1
lea ecx, [ebp - 0xb3c]
call fcn.10017939
mov ecx, dword [esi]
cmp ecx, dword [eax]
jl 0x100401ee
jmp 0x100445cc
mov eax, dword [ebp + 0x3c]
mov dword [ebp - 0xc48], eax
mov eax, dword [ebp + 0x10]
mov dword [ebp - 0xc40], eax
lea eax, [ebp + 0x28]
mov dword [ebp - 0xc38], eax
mov eax, dword [ebp - 0xc38]
movzx eax, byte [eax]
test eax, eax
je 0x100445c2
mov eax, dword [ebp - 0xc40]
mov dword [ebp - 0xc50], eax
mov eax, dword [ebp - 0xc48]
mov dword [ebp - 0xc58], eax
mov eax, dword [ebp - 0xc50]
mov dword [ebp - 0xc68], eax
mov eax, dword [ebp - 0xc58]
mov dword [ebp - 0xc60], eax
mov eax, dword [ebp - 0xc60]
push dword [eax]
mov ecx, dword [ebp - 0xc68]
call fcn.10017939
mov dword [eax], 0xfffffffd
jmp 0x100445cc
push 0
push 0
call dword [sym.imp.ADVAPI32.dll_RegDeleteValueA]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
mov esp, ebp
pop ebp
ret