Function at 0x1003bd70
Capabilities:
Get geographical location

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x1007305c
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x928
push esi
push edi
movzx eax, byte [ebp + 0x28]
test eax, eax
je 0x1003be84
lea eax, [ebp + 0xc]
mov dword [ebp - 0x694], eax
mov eax, dword [ebp + 0x1c]
mov dword [ebp - 0x608], eax
mov eax, dword [ebp + 0x10]
mov dword [ebp - 0x610], eax
mov eax, dword [ebp + 0x2c]
mov dword [ebp - 0x5f0], eax
mov eax, dword [ebp - 0x694]
movzx eax, byte [eax]
test eax, eax
je 0x1003be0a
mov eax, dword [ebp - 0x5f0]
mov dword [ebp - 0x5f8], eax
mov eax, dword [ebp - 0x5f8]
mov dword [ebp - 0x600], eax
mov eax, dword [ebp - 0x600]
movzx eax, byte [eax]
test eax, eax
je 0x1003be08
push 0x266e
push 0
push 0
push 0x24e7
push 0
call dword [sym.imp.SHELL32.dll_ExtractIconExW]
jmp 0x1003be7f
mov eax, dword [ebp - 0x608]
mov dword [ebp - 0x618], eax
mov eax, dword [ebp - 0x610]
mov dword [ebp - 0x620], eax
mov eax, dword [ebp - 0x618]
mov dword [ebp - 0xd4], eax
mov eax, dword [ebp - 0x620]
mov dword [ebp - 0x65c], eax
mov eax, dword [ebp - 0xd4]
mov dword [eax], 0
jmp 0x1003be59
mov eax, dword [ebp - 0xd4]
mov eax, dword [eax]
inc eax
mov ecx, dword [ebp - 0xd4]
mov dword [ecx], eax
mov eax, dword [ebp - 0xd4]
cmp dword [eax], 1
jge 0x1003be7f
mov eax, dword [ebp - 0xd4]
push dword [eax]
mov ecx, dword [ebp - 0x65c]
call fcn.10010f08
mov dword [eax], 0xfb871c7b
jmp 0x1003be48
jmp 0x100404c1
mov eax, dword [ebp + 0x20]
mov dword [ebp - 0x66c], eax
mov eax, dword [ebp + 0x24]
mov dword [ebp - 0x67c], eax
lea eax, [ebp + 8]
mov dword [ebp - 0x664], eax
mov eax, dword [ebp + 0x14]
mov dword [ebp - 0x684], eax
mov eax, dword [ebp + 0x18]
mov dword [ebp - 0x674], eax
mov eax, dword [ebp - 0x664]
movzx eax, byte [eax]
test eax, eax
je 0x100404b6
mov eax, dword [ebp - 0x66c]
mov dword [ebp - 0x628], eax
mov eax, dword [ebp - 0x674]
mov dword [ebp - 0x5c8], eax
mov eax, dword [ebp - 0x67c]
mov dword [ebp - 0x488], eax
mov eax, dword [ebp - 0x684]
mov dword [ebp - 0x1f0], eax
mov dword [ebp - 0x12c], 6
mov byte [ebp - 0x89], 0
lea eax, [ebp - 0x89]
push eax
push 0x588e
push 0x4d0d
push 0
call fcn.1003adfb
add esp, 0x10
mov dword [ebp - 0x12c], 0x10
jmp 0x1003bf37
mov eax, dword [ebp - 0x12c]
dec eax
mov dword [ebp - 0x12c], eax
cmp dword [ebp - 0x12c], 0xffffffe9
jl 0x1003bf92
mov dword [ebp - 0x1ac], 0
jmp 0x1003bf59
mov eax, dword [ebp - 0x1ac]
inc eax
mov dword [ebp - 0x1ac], eax
cmp dword [ebp - 0x1ac], 2
jge 0x1003bf75
mov eax, dword [ebp - 0x1ac]
mov dword [ebp + eax*4 - 0x748], 0
jmp 0x1003bf4c
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x748]
inc eax
push 4
pop ecx
shl ecx, 0
mov dword [ebp + ecx - 0x748], eax
jmp 0x1003bf2a
mov dword [ebp - 0x1b4], 4
mov dword [ebp - 0x68c], 5
mov dword [ebp - 0x58], 0
jmp 0x1003bfb6
mov eax, dword [ebp - 0x58]
inc eax
mov dword [ebp - 0x58], eax
cmp dword [ebp - 0x58], 2
jge 0x1003bfcc
mov eax, dword [ebp - 0x58]
mov dword [ebp + eax*4 - 0x778], 0x161ab6ec
jmp 0x1003bfaf
mov dword [ebp - 0x58], 0
jmp 0x1003bfdc
mov eax, dword [ebp - 0x58]
inc eax
mov dword [ebp - 0x58], eax
cmp dword [ebp - 0x58], 3
jge 0x1003bff2
mov eax, dword [ebp - 0x58]
mov dword [ebp + eax*4 - 0x8f8], 1
jmp 0x1003bfd5
mov eax, dword [ebp - 0x1b4]
mov dword [ebp - 0x2d0], eax
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x2d0]
mov dword [ebp + eax - 0x778], ecx
mov eax, dword [ebp - 0x1b4]
cmp dword [ebp - 0x2d0], eax
jne 0x1003c038
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x778], 0
jne 0x1003c038
and dword [ebp - 0x224], 0
jmp 0x1003c042
mov dword [ebp - 0x224], 1
push 4
pop eax
shl eax, 1
mov ecx, dword [ebp - 0x224]
mov dword [ebp + eax - 0x8f8], ecx
mov eax, dword [ebp - 0x1b4]
sub eax, dword [ebp - 0x224]
cmp dword [ebp - 0x1b4], eax
jl 0x1003c074
mov dword [ebp - 0x4c0], 1
jmp 0x1003c07b
and dword [ebp - 0x4c0], 0
mov eax, dword [ebp - 0x4c0]
mov dword [ebp - 0x68c], eax
push 2
lea ecx, [ebp - 0x104]
call fcn.10010e51
and dword [ebp - 4], 0
mov dword [ebp - 0x4f4], 1
push 3
lea ecx, [ebp - 0x7bc]
call fcn.10010e51
mov byte [ebp - 4], 1
mov dword [ebp - 0x10], 0
jmp 0x1003c0c3
mov eax, dword [ebp - 0x10]
inc eax
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], 3
jge 0x1003c0d9
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0x538], 0xfffffffb
jmp 0x1003c0bc
mov dword [ebp - 0x10], 0
jmp 0x1003c0e9
mov eax, dword [ebp - 0x10]
inc eax
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], 2
jge 0x1003c105
push dword [ebp - 0x10]
lea ecx, [ebp - 0x104]
call fcn.10010f08
mov dword [eax], 0x1f2c29a
jmp 0x1003c0e2
mov dword [ebp - 0x10], 0
jmp 0x1003c115
mov eax, dword [ebp - 0x10]
inc eax
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], 3
jge 0x1003c131
push dword [ebp - 0x10]
lea ecx, [ebp - 0x7bc]
call fcn.10010f08
mov dword [eax], 1
jmp 0x1003c10e
mov dword [ebp - 0x10], 0
jmp 0x1003c141
mov eax, dword [ebp - 0x10]
inc eax
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], 3
jge 0x1003c157
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0x904], 1
jmp 0x1003c13a
push 0
lea ecx, [ebp - 0x104]
call fcn.10010f08
mov dword [eax], 2
jmp 0x1003c190
push 0
lea ecx, [ebp - 0x104]
call fcn.10010f08
mov dword [ebp - 0x4d4], eax
mov eax, dword [ebp - 0x4d4]
mov eax, dword [eax]
dec eax
mov ecx, dword [ebp - 0x4d4]
mov dword [ecx], eax
push 0
lea ecx, [ebp - 0x104]
call fcn.10010f08
cmp dword [eax], 0
jl 0x1003c393
push 0
lea ecx, [ebp - 0x104]
call fcn.10010f08
mov eax, dword [eax]
mov eax, dword [ebp + eax*4 - 0x538]
mov dword [ebp - 0x7ec], eax
push 0
lea ecx, [ebp - 0x104]
call fcn.10010f08
push 0
lea ecx, [ebp - 0x104]
call fcn.10010f08
mov eax, dword [eax]
cmp dword [ebp + eax*4 - 0x538], 0x2db785b6
jne 0x1003c1f7
mov dword [ebp - 0x4dc], 1
jmp 0x1003c1fe
and dword [ebp - 0x4dc], 0
push 0
lea ecx, [ebp - 0x104]
call fcn.10010f08
mov ecx, dword [ebp - 0x4dc]
cmp ecx, dword [eax]
jle 0x1003c221
mov dword [ebp - 0x4e4], 1
jmp 0x1003c228
and dword [ebp - 0x4e4], 0
push 0
lea ecx, [ebp - 0x104]
call fcn.10010f08
mov eax, dword [eax]
mov eax, dword [ebp + eax*4 - 0x538]
cmp dword [ebp - 0x4e4], eax
jl 0x1003c252
mov dword [ebp - 0x598], 1
jmp 0x1003c259
and dword [ebp - 0x598], 0
push 0
lea ecx, [ebp - 0x104]
call fcn.10010f08
mov eax, dword [eax]
mov eax, dword [ebp + eax*4 - 0x538]
mov dword [ebp - 0x86c], eax
push 0
lea ecx, [ebp - 0x104]
call fcn.10010f08
mov esi, eax
push 0
lea ecx, [ebp - 0x104]
call fcn.10010f08
mov esi, dword [esi]
imul esi, dword [eax]
push 0
lea ecx, [ebp - 0x104]
call fcn.10010f08
cmp esi, dword [eax]
jne 0x1003c2b3
mov dword [ebp - 0x4ec], 1
jmp 0x1003c2ba
and dword [ebp - 0x4ec], 0
mov eax, dword [ebp - 0x4ec]
mov dword [ebp - 0x4f4], eax
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x538]
cmp eax, dword [ebp - 0x4f4]
jge 0x1003c2e7
mov dword [ebp - 0x4fc], 1
jmp 0x1003c2ee
and dword [ebp - 0x4fc], 0
cmp dword [ebp - 0x4fc], 0x78d8
jg 0x1003c318
push 0
lea ecx, [ebp - 0x104]
call fcn.10010f08
cmp dword [eax], 0
je 0x1003c318
mov dword [ebp - 0x504], 1
jmp 0x1003c31f
and dword [ebp - 0x504], 0
push 0
lea ecx, [ebp - 0x104]
call fcn.10010f08
mov eax, dword [eax]
mov eax, dword [ebp + eax*4 - 0x538]
cmp dword [ebp - 0x504], eax
jg 0x1003c349
mov dword [ebp - 0x21c], 1
jmp 0x1003c350
and dword [ebp - 0x21c], 0
push 0
lea ecx, [ebp - 0x7bc]
call fcn.10010f08
mov ecx, dword [ebp - 0x21c]
mov dword [eax], ecx
push 0
lea ecx, [ebp - 0x104]
call fcn.10010f08
mov eax, dword [eax]
mov eax, dword [ebp + eax*4 - 0x538]
sub eax, dword [ebp - 0x21c]
push 4
pop ecx
shl ecx, 0
mov dword [ebp + ecx - 0x904], eax
jmp 0x1003c16c
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x7bc]
call fcn.10010e8d
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x104]
call fcn.10010e8d
mov dword [ebp - 0x168], 6
mov dword [ebp - 0x234], 0x20e83c77
mov dword [ebp - 0xf8], 0xbad86e52
mov dword [ebp - 0x4b8], 0x15cc48b1
mov dword [ebp - 0x1cc], 0xad64
mov dword [ebp - 0x284], 0
mov dword [ebp - 0x2cc], 0xffffffff
mov dword [ebp - 0x6b0], 0x1b1c
cmp dword [ebp - 0x6b0], 0xe44
jge 0x1003c573
lea eax, [ebp - 0x50c]
push eax
lea eax, [ebp - 0x1c4]
push eax
push 0x1000dde8
call fcn.10058fc2
add esp, 0xc
push dword [ebp - 0x1c4]
lea ecx, [ebp - 0x7a4]
call fcn.10010e51
mov dword [ebp - 4], 2
and dword [ebp - 0x138], 0
jmp 0x1003c45a
mov eax, dword [ebp - 0x138]
inc eax
mov dword [ebp - 0x138], eax
mov eax, dword [ebp - 0x138]
cmp eax, dword [ebp - 0x1c4]
jge 0x1003c488
push dword [ebp - 0x138]
lea ecx, [ebp - 0x7a4]
call fcn.10010f08
push eax
push 0x1000ddc4
call fcn.10058fc2
pop ecx
pop ecx
jmp 0x1003c44d
and dword [ebp - 0x134], 0
and dword [ebp - 0x1a4], 0
jmp 0x1003c4a5
mov eax, dword [ebp - 0x1a4]
inc eax
mov dword [ebp - 0x1a4], eax
mov eax, dword [ebp - 0x1a4]
cmp eax, dword [ebp - 0x50c]
jge 0x1003c552
and dword [ebp - 0x78], 0
and dword [ebp - 0xc4], 0
jmp 0x1003c4d1
mov eax, dword [ebp - 0xc4]
inc eax
mov dword [ebp - 0xc4], eax
mov eax, dword [ebp - 0xc4]
cmp eax, dword [ebp - 0x1c4]
jge 0x1003c511
mov eax, dword [ebp - 0xc4]
cdq
idiv dword [ebp - 0x50c]
cmp edx, dword [ebp - 0x1a4]
jne 0x1003c4f6
jmp 0x1003c4c4
push dword [ebp - 0xc4]
lea ecx, [ebp - 0x7a4]
call fcn.10010f08
mov ecx, dword [ebp - 0x78]
add ecx, dword [eax]
mov dword [ebp - 0x78], ecx
jmp 0x1003c4c4
cmp dword [ebp - 0x78], 0
jge 0x1003c51f
mov eax, dword [ebp - 0x78]
neg eax
mov dword [ebp - 0x78], eax
mov eax, dword [ebp - 0x134]
cmp eax, dword [ebp - 0x78]
jle 0x1003c538
mov eax, dword [ebp - 0x134]
mov dword [ebp - 0x514], eax
jmp 0x1003c541
mov eax, dword [ebp - 0x78]
mov dword [ebp - 0x514], eax
mov eax, dword [ebp - 0x514]
mov dword [ebp - 0x134], eax
jmp 0x1003c498
push dword [ebp - 0x134]
push 0x1000ddd4
call fcn.10057526
pop ecx
pop ecx
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x7a4]
call fcn.10010e8d
mov dword [ebp - 0x6d8], 0x4db9bec7
mov dword [ebp - 0x6e0], 0x8e20b458
mov dword [ebp - 0x7f8], 0xa6f4dad2
mov dword [ebp - 0x8c0], 0xb460d54b
mov dword [ebp - 0x49c], 0x18e188a7
mov dword [ebp - 0x800], 0x13309e69
mov dword [ebp - 0x874], 0xfffffff6
mov dword [ebp - 0x5a4], 0xffffffff
mov dword [ebp - 0x6d0], 0x9f00f3b
push 4
lea ecx, [ebp - 0x890]
call fcn.10010e51
mov dword [ebp - 4], 3
mov dword [ebp - 0x6d4], 0x72defe8e
mov dword [ebp - 0x54], 0
jmp 0x1003c5fb
mov eax, dword [ebp - 0x54]
inc eax
mov dword [ebp - 0x54], eax
cmp dword [ebp - 0x54], 2
jge 0x1003c611
mov eax, dword [ebp - 0x54]
mov dword [ebp + eax*4 - 0x92c], 0xe75d5f8
jmp 0x1003c5f4
mov dword [ebp - 0x54], 0
jmp 0x1003c621
mov eax, dword [ebp - 0x54]
inc eax
mov dword [ebp - 0x54], eax
cmp dword [ebp - 0x54], 4
jge 0x1003c63d
push dword [ebp - 0x54]
lea ecx, [ebp - 0x890]
call fcn.10010f08
mov dword [eax], 0xfffffff7
jmp 0x1003c61a
push 0x6d11
lea eax, [ebp - 0xf8]
push eax
push 0
push 0x3fbd
lea eax, [ebp - 0x234]
push eax
call fcn.10035689
add esp, 0x14
mov dword [ebp - 0xf8], 0x1a
jmp 0x1003c678
mov eax, dword [ebp - 0xf8]
dec eax
mov dword [ebp - 0xf8], eax
cmp dword [ebp - 0xf8], 8
je 0x1003cd3f
mov dword [ebp - 0x208], 0xba29
mov dword [ebp - 0x80], 0xbdb979cd
push 1
lea ecx, [ebp - 0x25c]
call fcn.10010e51
mov byte [ebp - 4], 4
push 4
lea ecx, [ebp - 0x740]
call fcn.10010e51
mov byte [ebp - 4], 5
mov dword [ebp - 0x6bc], 0x513aa7a4
push 0
lea eax, [ebp - 0x98]
push eax
push 1
push 0x3bbf
push 0
lea eax, [ebp - 0x25c]
push eax
push 0x6951
push 0x8eb
call fcn.100327a3
add esp, 0x20
lea eax, [ebp - 0x98]
push eax
push 0
lea eax, [ebp - 0x740]
push eax
call fcn.10031c91
add esp, 0xc
mov dword [ebp - 0x98], 0
jmp 0x1003c71e
mov eax, dword [ebp - 0x98]
inc eax
mov dword [ebp - 0x98], eax
cmp dword [ebp - 0x98], 3
jge 0x1003c73a
mov eax, dword [ebp - 0x98]
mov dword [ebp + eax*4 - 0x880], 0x6f80
jmp 0x1003c711
mov dword [ebp - 0x4b8], 0
cmp dword [ebp - 0x4b8], 0x7c2c9ebf
jl 0x1003c75c
mov dword [ebp - 0x274], 1
jmp 0x1003c763
and dword [ebp - 0x274], 0
push 2
lea ecx, [ebp - 0x740]
call fcn.10010f08
mov dword [ebp - 0x22c], eax
mov eax, dword [ebp - 0x274]
mov dword [ebp - 0x6b8], eax
mov eax, dword [ebp - 0x22c]
mov eax, dword [eax]
mov dword [ebp - 0x6c0], eax
mov eax, dword [ebp - 0x22c]
mov eax, dword [eax]
dec eax
mov ecx, dword [ebp - 0x22c]
mov dword [ecx], eax
mov eax, dword [ebp - 0x6b8]
cmp eax, dword [ebp - 0x6c0]
jg 0x1003c7bb
mov dword [ebp - 0x28c], 1
jmp 0x1003c7c2
and dword [ebp - 0x28c], 0
push 0
lea ecx, [ebp - 0x25c]
call fcn.10010f08
cmp dword [eax], 0
je 0x1003c804
mov eax, dword [ebp - 0x1cc]
mov dword [ebp - 0x808], eax
push 0
lea ecx, [ebp - 0x25c]
call fcn.10010f08
cmp dword [eax], 0
je 0x1003c804
push 0
lea ecx, [ebp - 0x25c]
call fcn.10010f08
cmp dword [eax], 0
jne 0x1003c816
mov eax, 0xd38951fe
test eax, eax
jne 0x1003c816
and dword [ebp - 0x3dc], 0
jmp 0x1003c820
mov dword [ebp - 0x3dc], 1
push 0
lea ecx, [ebp - 0x25c]
call fcn.10010f08
mov ecx, dword [ebp - 0x3dc]
imul ecx, dword [eax]
mov dword [ebp - 0x27c], ecx
push 4
pop eax
shl eax, 1
mov ecx, dword [ebp - 0x27c]
mov dword [ebp + eax - 0x880], ecx
cmp dword [ebp - 0x27c], 0x24067bc6
jge 0x1003c866
mov dword [ebp - 0x48c], 1
jmp 0x1003c86d
and dword [ebp - 0x48c], 0
mov eax, dword [ebp - 0x48c]
mov dword [ebp - 0x284], eax
mov eax, dword [ebp - 0x234]
cmp dword [ebp - 0x284], eax
jl 0x1003c893
mov dword [ebp - 0x3e4], 1
jmp 0x1003c89a
and dword [ebp - 0x3e4], 0
push 0
lea ecx, [ebp - 0x25c]
call fcn.10010f08
mov ecx, dword [ebp - 0x3e4]
sub ecx, dword [eax]
je 0x1003c8c6
cmp dword [ebp - 0x1cc], 0
je 0x1003c8c6
mov dword [ebp - 0x4b0], 1
jmp 0x1003c8cd
and dword [ebp - 0x4b0], 0
mov eax, dword [ebp - 0x28c]
mov dword [ebp - 0x80], eax
mov eax, dword [ebp - 0x80]
add eax, dword [ebp - 0x4b0]
mov esi, dword [ebp - 0x234]
sub esi, eax
push 0
lea ecx, [ebp - 0x25c]
call fcn.10010f08
mov dword [eax], esi
mov dword [ebp - 0x80], 0
jmp 0x1003c906
mov eax, dword [ebp - 0x80]
dec eax
mov dword [ebp - 0x80], eax
cmp dword [ebp - 0x80], 0xfffffff6
je 0x1003cd1c
mov dword [ebp - 0x8d0], 0xfffffffb
mov dword [ebp - 0xcc], 0xf207e879
mov dword [ebp - 0x178], 0
jmp 0x1003c93d
mov eax, dword [ebp - 0x178]
inc eax
mov dword [ebp - 0x178], eax
cmp dword [ebp - 0x178], 1
jge 0x1003c959
mov eax, dword [ebp - 0x178]
mov dword [ebp + eax*4 - 0x1d4], 0xfffffff7
jmp 0x1003c930
mov eax, dword [ebp - 0xcc]
inc eax
mov dword [ebp - 0xcc], eax
jne 0x1003c978
push 0xfffffffffffffffe
pop eax
test eax, eax
jne 0x1003c978
and dword [ebp - 0x6c8], 0
jmp 0x1003c982
mov dword [ebp - 0x6c8], 1
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x1d4]
mov dword [ebp - 0x810], eax
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x6d0]
cmp dword [ebp + eax - 0x880], ecx
je 0x1003c9b6
mov dword [ebp - 0x294], 1
jmp 0x1003c9bd
and dword [ebp - 0x294], 0
mov eax, dword [ebp - 0x6d8]
cmp dword [ebp - 0x294], eax
jg 0x1003c9d7
mov dword [ebp - 0x3ec], 1
jmp 0x1003c9de
and dword [ebp - 0x3ec], 0
cmp dword [ebp - 0x3ec], 0xcfeb
jne 0x1003c9f6
mov dword [ebp - 0x29c], 1
jmp 0x1003c9fd
and dword [ebp - 0x29c], 0
cmp dword [ebp - 0x29c], 0x9541
jge 0x1003ca15
mov dword [ebp - 0x4a8], 1
jmp 0x1003ca1c
and dword [ebp - 0x4a8], 0
mov eax, dword [ebp - 0x1cc]
cmp dword [ebp - 0x4a8], eax
jge 0x1003ca36
mov dword [ebp - 0x2a4], 1
jmp 0x1003ca3d
and dword [ebp - 0x2a4], 0
push 2
lea ecx, [ebp - 0x740]
call fcn.10010f08
mov ecx, dword [ebp - 0x2a4]
cmp ecx, dword [eax]
je 0x1003ca60
mov dword [ebp - 0x3f4], 1
jmp 0x1003ca67
and dword [ebp - 0x3f4], 0
cmp dword [ebp - 0x3f4], 0xcaf8
jne 0x1003ca7f
mov dword [ebp - 0x2ac], 1
jmp 0x1003ca86
and dword [ebp - 0x2ac], 0
mov eax, dword [ebp - 0x6e0]
cmp dword [ebp - 0x2ac], eax
jge 0x1003caa0
mov dword [ebp - 0x2b4], 1
jmp 0x1003caa7
and dword [ebp - 0x2b4], 0
mov dword [ebp - 0x49c], 0
mov esi, dword [ebp - 0x49c]
sub esi, dword [ebp - 0x2b4]
push 0
lea ecx, [ebp - 0x25c]
call fcn.10010f08
add esi, dword [eax]
cmp dword [ebp - 0x208], esi
jl 0x1003cae0
mov dword [ebp - 0x69c], 1
jmp 0x1003cae7
and dword [ebp - 0x69c], 0
mov eax, dword [ebp - 0x80]
cmp dword [ebp - 0x208], eax
jg 0x1003cafe
mov dword [ebp - 0x3fc], 1
jmp 0x1003cb05
and dword [ebp - 0x3fc], 0
cmp dword [ebp - 0x3fc], 0x6159332c
je 0x1003cb1d
mov dword [ebp - 0x5e8], 1
jmp 0x1003cb24
and dword [ebp - 0x5e8], 0
mov eax, dword [ebp - 0x5a4]
imul eax, dword [ebp - 0x208]
test eax, eax
je 0x1003cc06
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x1d4], 0
je 0x1003cc06
mov dword [ebp - 0x5ac], 0x21d01231
cmp dword [ebp - 0xcc], 0x2e32
jl 0x1003cb6f
mov dword [ebp - 0x4e0], 1
jmp 0x1003cb76
and dword [ebp - 0x4e0], 0
mov eax, dword [ebp - 0xcc]
mov dword [ebp - 0x2bc], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x2bc]
mov dword [ebp + eax - 0x1d4], ecx
mov eax, dword [ebp - 0x2bc]
cmp eax, dword [ebp - 0x4e0]
jl 0x1003cbaf
mov dword [ebp - 0x2c4], 1
jmp 0x1003cbb6
and dword [ebp - 0x2c4], 0
mov esi, dword [ebp - 0x6d4]
imul edi, dword [ebp - 0x2c4], 0xfffffffa
push 0
lea ecx, [ebp - 0x25c]
call fcn.10010f08
add edi, dword [eax]
cmp esi, edi
je 0x1003cbe2
mov dword [ebp - 0x404], 1
jmp 0x1003cbe9
and dword [ebp - 0x404], 0
mov eax, dword [ebp - 0x404]
mov dword [ebp - 0x2cc], eax
mov eax, dword [ebp - 0x2cc]
mov dword [ebp - 0x5ac], eax
jmp 0x1003cd17
mov dword [ebp - 0x670], 0x208b
cmp dword [ebp - 0x670], 0xc5e
jge 0x1003cd07
lea eax, [ebp - 0x228]
push eax
mov ecx, 0x10662d10
call fcn.10010a22
mov dword [ebp - 0x1dc], 1
jmp 0x1003cc4a
mov eax, dword [ebp - 0x1dc]
inc eax
mov dword [ebp - 0x1dc], eax
mov eax, dword [ebp - 0x228]
mov dword [ebp - 0x5b4], eax
mov eax, dword [ebp - 0x228]
dec eax
mov dword [ebp - 0x228], eax
cmp dword [ebp - 0x5b4], 0
je 0x1003cd07
and dword [ebp - 0x140], 0
jmp 0x1003cc86
mov eax, dword [ebp - 0x140]
inc eax
mov dword [ebp - 0x140], eax
cmp dword [ebp - 0x140], 3
jge 0x1003cca9
mov eax, dword [ebp - 0x140]
lea eax, [ebp + eax*4 - 0x7d8]
push eax
mov ecx, 0x10662d10
call fcn.10010a22
jmp 0x1003cc79
lea edx, [ebp - 0x7cc]
lea ecx, [ebp - 0x7d8]
call fcn.10051204
push fcn.100145fe
push 4
pop eax
shl eax, 0
push dword [ebp + eax - 0x7d8]
push dword [ebp - 0x1dc]
mov edx, 0x1000decc
mov ecx, 0x10662c58
call fcn.10014630
mov ecx, eax
call fcn.10010c1d
mov edx, 0x1000daa8
mov ecx, eax
call fcn.10014630
mov ecx, eax
call fcn.10010c1d
mov ecx, eax
call fcn.10010c11
jmp 0x1003cc3d
push 0
lea eax, [ebp - 0x6bc]
push eax
call fcn.10032233
pop ecx
pop ecx
jmp 0x1003c8ff
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x740]
call fcn.10010e8d
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x25c]
call fcn.10010e8d
jmp 0x1003c66b
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x890]
call fcn.10010e8d
mov byte [ebp - 0x6a], 0
mov dword [ebp - 0x78c], 0xfffd
mov dword [ebp - 0x788], 0xfffd
mov dword [ebp - 0x784], 0xfffd
mov dword [ebp - 0x780], 0xfffd
lea ecx, [ebp - 0x1f5]
call fcn.10011449
push eax
lea eax, [ebp - 0x77c]
push eax
lea eax, [ebp - 0x78c]
push eax
lea ecx, [ebp - 0x924]
call fcn.10022da4
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0x734]
call fcn.10022d7e
mov dword [ebp - 4], 6
mov dword [ebp - 0xac], 0x81c2900
mov dword [ebp - 0xa4], 0x9d98
mov dword [ebp - 0x48], 0xc5c2f002
mov dword [ebp - 0xac], 3
jmp 0x1003cdea
mov eax, dword [ebp - 0xac]
dec eax
mov dword [ebp - 0xac], eax
cmp dword [ebp - 0xac], 0
jl 0x1003d29e
mov dword [ebp - 0x88], 0x62751c76
mov dword [ebp - 0x38], 0x8f0ed693
mov dword [ebp - 0x198], 0
jmp 0x1003ce21
mov eax, dword [ebp - 0x198]
inc eax
mov dword [ebp - 0x198], eax
cmp dword [ebp - 0x198], 1
jge 0x1003ce3d
mov eax, dword [ebp - 0x198]
mov dword [ebp + eax*4 - 0x20c], 0xfffffff9
jmp 0x1003ce14
mov dword [ebp - 0x88], 3
jmp 0x1003ce56
mov eax, dword [ebp - 0x88]
dec eax
mov dword [ebp - 0x88], eax
cmp dword [ebp - 0x88], 0
jl 0x1003d299
push 2
lea ecx, [ebp - 0x52c]
call fcn.10010e51
mov byte [ebp - 4], 7
mov dword [ebp - 0x148], 0
jmp 0x1003ce8d
mov eax, dword [ebp - 0x148]
inc eax
mov dword [ebp - 0x148], eax
cmp dword [ebp - 0x148], 2
jge 0x1003ceaf
push dword [ebp - 0x148]
lea ecx, [ebp - 0x52c]
call fcn.10010f08
mov dword [eax], 0x5c22c920
jmp 0x1003ce80
push dword [ebp - 0x88]
lea ecx, [ebp - 0x734]
call fcn.10010f08
push dword [ebp - 0xac]
lea ecx, [ebp - 0x734]
call fcn.10010f08
mov dword [ebp - 0x4a4], eax
push dword [ebp - 0x88]
lea ecx, [ebp - 0x734]
call fcn.10010f08
mov ecx, dword [ebp - 0x4a4]
mov eax, dword [eax]
mov dword [ecx], eax
mov eax, dword [ebp - 0x4a4]
cmp dword [eax], 0x4c38b6b0
je 0x1003cf0c
mov dword [ebp - 0x5bc], 1
jmp 0x1003cf13
and dword [ebp - 0x5bc], 0
mov eax, dword [ebp - 0xa4]
mov dword [ebp - 0x884], eax
push 1
lea ecx, [ebp - 0x52c]
call fcn.10010f08
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x20c]
mov dword [ebp - 0x818], eax
push 9
pop eax
cmp eax, 0xc9b6
jg 0x1003cf55
mov dword [ebp - 0x2d4], 1
jmp 0x1003cf5c
and dword [ebp - 0x2d4], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x20c]
cmp dword [ebp - 0x2d4], eax
jge 0x1003cf7d
mov dword [ebp - 0x678], 1
jmp 0x1003cf84
and dword [ebp - 0x678], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x20c]
mov dword [ebp - 0x8c8], eax
mov dword [ebp - 0x38], 0
cmp dword [ebp - 0x38], 0x22452a2c
jl 0x1003cfb3
mov dword [ebp - 0x40c], 1
jmp 0x1003cfba
and dword [ebp - 0x40c], 0
mov eax, dword [ebp - 0xac]
cmp dword [ebp - 0x40c], eax
jne 0x1003cfd4
mov dword [ebp - 0x2dc], 1
jmp 0x1003cfdb
and dword [ebp - 0x2dc], 0
push 1
lea ecx, [ebp - 0x52c]
call fcn.10010f08
mov ecx, dword [ebp - 0x2dc]
add ecx, dword [eax]
cmp ecx, 5
jle 0x1003d001
mov dword [ebp - 0x500], 1
jmp 0x1003d008
and dword [ebp - 0x500], 0
cmp dword [ebp - 0x500], 0xfffffffa
je 0x1003d01d
mov dword [ebp - 0x2e4], 1
jmp 0x1003d024
and dword [ebp - 0x2e4], 0
push 1
lea ecx, [ebp - 0x52c]
call fcn.10010f08
mov ecx, dword [ebp - 0x2e4]
cmp ecx, dword [eax]
jge 0x1003d056
push 0
lea ecx, [ebp - 0x52c]
call fcn.10010f08
cmp dword [eax], 0
jne 0x1003d056
and dword [ebp - 0x414], 0
jmp 0x1003d060
mov dword [ebp - 0x414], 1
cmp dword [ebp - 0x414], 0xd08e
je 0x1003d078
mov dword [ebp - 0x5c4], 1
jmp 0x1003d07f
and dword [ebp - 0x5c4], 0
mov eax, dword [ebp - 0xa4]
sub eax, dword [ebp - 0x88]
jne 0x1003d09f
mov eax, 0x5685e9d0
test eax, eax
jne 0x1003d09f
and dword [ebp - 0x2ec], 0
jmp 0x1003d0a9
mov dword [ebp - 0x2ec], 1
push 0
lea ecx, [ebp - 0x52c]
call fcn.10010f08
mov ecx, dword [ebp - 0x2ec]
sub ecx, dword [eax]
cmp ecx, 0xfffffffb
jne 0x1003d0cf
mov dword [ebp - 0x4ac], 1
jmp 0x1003d0d6
and dword [ebp - 0x4ac], 0
mov eax, dword [ebp - 0x4ac]
mov dword [ebp - 0x48], eax
mov dword [ebp - 0xa4], 0
jmp 0x1003d0f8
mov eax, dword [ebp - 0xa4]
dec eax
mov dword [ebp - 0xa4], eax
cmp dword [ebp - 0xa4], 0xffffffea
jle 0x1003d285
mov dword [ebp - 0x48], 3
jmp 0x1003d115
mov eax, dword [ebp - 0x48]
dec eax
mov dword [ebp - 0x48], eax
cmp dword [ebp - 0x48], 0
jl 0x1003d1bb
push 1
lea ecx, [ebp - 0x798]
call fcn.10010e51
mov byte [ebp - 4], 8
mov dword [ebp - 0x180], 0
jmp 0x1003d149
mov eax, dword [ebp - 0x180]
inc eax
mov dword [ebp - 0x180], eax
cmp dword [ebp - 0x180], 1
jge 0x1003d16b
push dword [ebp - 0x180]
lea ecx, [ebp - 0x798]
call fcn.10010f08
mov dword [eax], 0x424acdff
jmp 0x1003d13c
mov dword [ebp - 0x38], 0
jmp 0x1003d17b
mov eax, dword [ebp - 0x38]
inc eax
mov dword [ebp - 0x38], eax
cmp dword [ebp - 0x38], 3
jg 0x1003d1a7
push 0
lea ecx, [ebp - 0x798]
call fcn.10010f08
mov dword [ebp - 0x2f4], eax
mov eax, dword [ebp - 0x2f4]
mov eax, dword [eax]
inc eax
mov ecx, dword [ebp - 0x2f4]
mov dword [ecx], eax
jmp 0x1003d174
mov byte [ebp - 4], 7
lea ecx, [ebp - 0x798]
call fcn.10010e8d
jmp 0x1003d10e
mov dword [ebp - 0x48], 0
jmp 0x1003d1cb
mov eax, dword [ebp - 0x48]
inc eax
mov dword [ebp - 0x48], eax
cmp dword [ebp - 0x48], 1
jg 0x1003d280
mov dword [ebp - 0x38], 0
jmp 0x1003d1e5
mov eax, dword [ebp - 0x38]
inc eax
mov dword [ebp - 0x38], eax
cmp dword [ebp - 0x38], 1
jg 0x1003d27b
mov dword [ebp - 0xec], 0x3adfe1d
mov byte [ebp - 0x68], 0
movzx eax, byte [ebp - 0x68]
test eax, eax
je 0x1003d22c
push 1
push 0x455b
push 1
push 0x1cb
push 0
push 0x45fc
push 0x1cf3
push 0x28f4
call fcn.100327a3
add esp, 0x20
mov dword [ebp - 0xec], 0
jmp 0x1003d245
mov eax, dword [ebp - 0xec]
inc eax
mov dword [ebp - 0xec], eax
cmp dword [ebp - 0xec], 1
jg 0x1003d276
lea eax, [ebp - 0xec]
push eax
push 0x33fa
push 0x21c3
lea eax, [ebp - 0x48]
push eax
lea eax, [ebp - 0x52c]
push eax
push 0
call fcn.100349e6
add esp, 0x18
jmp 0x1003d238
jmp 0x1003d1de
jmp 0x1003d1c4
jmp 0x1003d0eb
mov byte [ebp - 4], 6
lea ecx, [ebp - 0x52c]
call fcn.10010e8d
jmp 0x1003ce49
jmp 0x1003cddd
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x734]
call fcn.10010e8d
movzx eax, byte [ebp - 0x6a]
test eax, eax
je 0x1003d3ff
mov dword [ebp - 0xbc], 5
mov dword [ebp - 0xbc], 0x14
jmp 0x1003d2dc
mov eax, dword [ebp - 0xbc]
dec eax
mov dword [ebp - 0xbc], eax
cmp dword [ebp - 0xbc], 0xffffffec
jl 0x1003d3ed
mov dword [ebp - 0x1a8], 0x29a3df60
mov dword [ebp - 0x150], 0
jmp 0x1003d30c
mov eax, dword [ebp - 0x150]
inc eax
mov dword [ebp - 0x150], eax
cmp dword [ebp - 0x150], 3
jge 0x1003d328
mov eax, dword [ebp - 0x150]
mov dword [ebp + eax*4 - 0x91c], 0
jmp 0x1003d2ff
mov dword [ebp - 0x1a8], 0xffffffed
jmp 0x1003d341
mov eax, dword [ebp - 0x1a8]
inc eax
mov dword [ebp - 0x1a8], eax
cmp dword [ebp - 0x1a8], 8
jl 0x1003d3e8
mov dword [ebp - 0xf0], 2
cmp dword [ebp - 0xbc], 0xffffffff
jae 0x1003d36d
mov dword [ebp - 0x41c], 1
jmp 0x1003d374
and dword [ebp - 0x41c], 0
mov eax, dword [ebp - 0x41c]
mov dword [ebp - 0xf0], eax
mov dword [ebp - 0xf0], 0
jmp 0x1003d399
mov eax, dword [ebp - 0xf0]
inc eax
mov dword [ebp - 0xf0], eax
cmp dword [ebp - 0xf0], 0x38
jl 0x1003d3e3
mov dword [ebp - 0xdc], 0xf82d83d7
mov dword [ebp - 0xdc], 0
jmp 0x1003d3c5
mov eax, dword [ebp - 0xdc]
inc eax
mov dword [ebp - 0xdc], eax
cmp dword [ebp - 0xdc], 3
jge 0x1003d3e1
mov eax, dword [ebp - 0xdc]
mov dword [ebp + eax*4 - 0x91c], 0xfffffff6
jmp 0x1003d3b8
jmp 0x1003d38c
jmp 0x1003d334
jmp 0x1003d2cf
push 0
push 0x1908
push 0x1195
call dword [sym.imp.KERNEL32.dll_GetCPInfoExW]
mov dword [ebp - 0xb4], 6
mov dword [ebp - 0x158], 0
jmp 0x1003d422
mov eax, dword [ebp - 0x158]
inc eax
mov dword [ebp - 0x158], eax
cmp dword [ebp - 0x158], 1
jge 0x1003d43b
mov eax, dword [ebp - 0x158]
mov dword [ebp + eax*4 - 0x34], 0xfffffff8
jmp 0x1003d415
mov dword [ebp - 0xb4], 5
jmp 0x1003d454
mov eax, dword [ebp - 0xb4]
inc eax
mov dword [ebp - 0xb4], eax
cmp dword [ebp - 0xb4], 0x16
jle 0x1003d97b
mov dword [ebp - 0x14], 0x3c69aed2
mov dword [ebp - 0x4b4], 0xffffffff
mov dword [ebp - 0x1e4], 0xfffffff6
mov dword [ebp - 0x6c4], 9
mov dword [ebp - 0x14], 0
jmp 0x1003d496
mov eax, dword [ebp - 0x14]
inc eax
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 0
jg 0x1003d8d9
mov dword [ebp - 0x30], 0xffffffff
mov dword [ebp - 0x6e4], 0x1e66
cmp dword [ebp - 0x6e4], 0xd5b
jge 0x1003d55c
push 0x11108904
push 0x10ffaca4
push 0x1000ddc8
call fcn.10058fc2
add esp, 0xc
and dword [ebp - 0x188], 0
jmp 0x1003d4f9
mov eax, dword [ebp - 0x188]
inc eax
mov dword [ebp - 0x188], eax
push 0x1000daa5
call fcn.10059662
pop ecx
mov eax, dword [ebp - 0x188]
cmp eax, dword [0x10ffaca4]
jge 0x1003d55c
and dword [ebp - 0x160], 0
jmp 0x1003d51d
mov eax, dword [ebp - 0x160]
inc eax
mov dword [ebp - 0x160], eax
mov eax, dword [ebp - 0x160]
cmp eax, dword [0x10ffaca4]
jge 0x1003d55a
mov eax, dword [ebp - 0x188]
cmp eax, dword [ebp - 0x160]
jne 0x1003d54d
push dword [0x11108904]
push 0x1000e198
call fcn.10057526
pop ecx
pop ecx
jmp 0x1003d558
push 0x1000e19c
call fcn.10057526
pop ecx
jmp 0x1003d510
jmp 0x1003d4e1
mov dword [ebp - 0x5cc], 0x1df4
cmp dword [ebp - 0x5cc], 0x3ea
jge 0x1003d72f
lea eax, [ebp - 0x760]
push eax
lea eax, [ebp - 0x264]
push eax
lea eax, [ebp - 0x560]
push eax
mov ecx, 0x10662d10
call fcn.1005066c
mov ecx, eax
call fcn.1005066c
mov ecx, eax
call fcn.1005066c
movsd xmm0, qword [ebp - 0x264]
xorpd xmm0, xmmword [0x1000e2f0]
movsd xmm1, qword [ebp - 0x264]
mulsd xmm1, qword [ebp - 0x264]
movsd xmm2, qword [0x1000e270]
mulsd xmm2, qword [ebp - 0x560]
mulsd xmm2, qword [ebp - 0x760]
subsd xmm1, xmm2
movsd qword [ebp - 0x898], xmm0
movsd xmm0, xmm1
call fcn.10031aae
movsd xmm1, qword [ebp - 0x898]
addsd xmm1, xmm0
divsd xmm1, qword [0x1000e250]
divsd xmm1, qword [ebp - 0x560]
movsd qword [ebp - 0x548], xmm1
movsd xmm0, qword [ebp - 0x264]
xorpd xmm0, xmmword [0x1000e2f0]
movsd xmm1, qword [ebp - 0x264]
mulsd xmm1, qword [ebp - 0x264]
movsd xmm2, qword [0x1000e270]
mulsd xmm2, qword [ebp - 0x560]
mulsd xmm2, qword [ebp - 0x760]
subsd xmm1, xmm2
movsd qword [ebp - 0x82c], xmm0
movsd xmm0, xmm1
call fcn.10031aae
movsd xmm1, qword [ebp - 0x82c]
subsd xmm1, xmm0
divsd xmm1, qword [0x1000e250]
divsd xmm1, qword [ebp - 0x560]
movsd qword [ebp - 0x558], xmm1
movsd xmm0, qword [ebp - 0x558]
comisd xmm0, xmmword [ebp - 0x548]
jbe 0x1003d6c7
movsd xmm0, qword [ebp - 0x548]
movsd qword [ebp - 0x8b0], xmm0
movsd xmm0, qword [ebp - 0x558]
movsd qword [ebp - 0x548], xmm0
movsd xmm0, qword [ebp - 0x8b0]
movsd qword [ebp - 0x558], xmm0
push 0
push 0xf
mov eax, dword [0x10662c58]
mov ecx, dword [eax + 4]
add ecx, 0x10662c58
call fcn.10031acd
push fcn.100145fe
push 0x10031ae8
push fcn.100145fe
push 0x10031ae8
mov ecx, 0x10662c58
call fcn.10050781
movsd xmm1, qword [ebp - 0x548]
mov ecx, eax
call fcn.100507a2
mov ecx, eax
call fcn.10010c11
mov ecx, eax
call fcn.10050781
movsd xmm1, qword [ebp - 0x558]
mov ecx, eax
call fcn.100507a2
mov ecx, eax
call fcn.10010c11
mov dword [ebp - 0x1a0], 0
jmp 0x1003d748
mov eax, dword [ebp - 0x1a0]
inc eax
mov dword [ebp - 0x1a0], eax
cmp dword [ebp - 0x1a0], 1
jge 0x1003d764
mov eax, dword [ebp - 0x1a0]
mov dword [ebp + eax*4 - 0x5d4], 0xdf8e3bf1
jmp 0x1003d73b
mov dword [ebp - 0x30], 0
jmp 0x1003d774
mov eax, dword [ebp - 0x30]
inc eax
mov dword [ebp - 0x30], eax
cmp dword [ebp - 0x30], 0
jg 0x1003d892
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp + eax*4 - 0x34]
mov dword [ebp - 0x820], eax
mov eax, dword [ebp - 0x14]
mov dword [ebp - 0x8a8], eax
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp + eax*4 - 0x34]
mov dword [ebp - 0x84c], eax
cmp dword [ebp - 0x30], 0xe80d68f9
jbe 0x1003d7b6
mov dword [ebp - 0x2fc], 1
jmp 0x1003d7bd
and dword [ebp - 0x2fc], 0
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp + eax*4 - 0x34]
cmp dword [ebp - 0x2fc], eax
je 0x1003d7d8
mov dword [ebp - 0x4e8], 1
jmp 0x1003d7df
and dword [ebp - 0x4e8], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x34]
add eax, dword [ebp - 0x4e8]
mov ecx, dword [ebp - 0x14]
add eax, dword [ebp + ecx*4 - 0x34]
je 0x1003d80e
mov eax, dword [ebp - 0x14]
cmp dword [ebp + eax*4 - 0x34], 0
je 0x1003d80e
mov dword [ebp - 0x304], 1
jmp 0x1003d815
and dword [ebp - 0x304], 0
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp + eax*4 - 0x34]
cmp dword [ebp - 0x304], eax
je 0x1003d830
mov dword [ebp - 0x680], 1
jmp 0x1003d837
and dword [ebp - 0x680], 0
mov eax, dword [ebp - 0x14]
mov dword [ebp - 0x8bc], eax
mov eax, dword [ebp - 0x30]
cmp dword [ebp - 0x14], eax
jle 0x1003d85d
mov eax, 0x2ff1
test eax, eax
je 0x1003d85d
mov dword [ebp - 0x424], 1
jmp 0x1003d864
and dword [ebp - 0x424], 0
cmp dword [ebp - 0x424], 7
jb 0x1003d879
mov dword [ebp - 0x30c], 1
jmp 0x1003d880
and dword [ebp - 0x30c], 0
mov eax, dword [ebp - 0x14]
mov ecx, dword [ebp - 0x30c]
mov dword [ebp + eax*4 - 0x34], ecx
jmp 0x1003d76d
mov dword [ebp - 0x30], 0
jmp 0x1003d8a2
mov eax, dword [ebp - 0x30]
dec eax
mov dword [ebp - 0x30], eax
cmp dword [ebp - 0x30], 0
jl 0x1003d8d4
mov eax, dword [ebp - 0x14]
push 4
pop ecx
imul ecx, ecx, 0
mov eax, dword [ebp + eax*4 - 0x34]
mov dword [ebp + ecx - 0x5d4], eax
mov dword [ebp - 0x4b4], 0xfffffffa
mov eax, dword [ebp - 0x4b4]
mov dword [ebp - 0x1e4], eax
jmp 0x1003d89b
jmp 0x1003d48f
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x34], 0xfffffff9
jl 0x1003d8f2
mov dword [ebp - 0x314], 1
jmp 0x1003d8f9
and dword [ebp - 0x314], 0
mov eax, dword [ebp - 0x314]
mov dword [ebp - 0x1e4], eax
mov eax, dword [ebp - 0x1e4]
cmp dword [ebp - 0x14], eax
jg 0x1003d91c
mov dword [ebp - 0x42c], 1
jmp 0x1003d923
and dword [ebp - 0x42c], 0
mov eax, dword [ebp - 0xb4]
cmp dword [ebp - 0x42c], eax
je 0x1003d93d
mov dword [ebp - 0x31c], 1
jmp 0x1003d944
and dword [ebp - 0x31c], 0
cmp dword [ebp - 0x31c], 0x6082f4e5
jle 0x1003d95c
mov dword [ebp - 0x510], 1
jmp 0x1003d963
and dword [ebp - 0x510], 0
mov eax, dword [ebp - 0xb4]
imul eax, dword [ebp - 0x510]
mov dword [ebp - 0x6c4], eax
jmp 0x1003d447
mov dword [ebp - 0x168], 0x10
jmp 0x1003d994
mov eax, dword [ebp - 0x168]
dec eax
mov dword [ebp - 0x168], eax
cmp dword [ebp - 0x168], 0xffffffe9
jl 0x1003e081
mov dword [ebp - 0x9c], 0x862fd41e
mov dword [ebp - 0x3c], 0
mov dword [ebp - 0x238], 0xb64d07dd
mov dword [ebp - 0x334], 0x2e255bb5
mov dword [ebp - 0x9c], 0
jmp 0x1003d9df
mov eax, dword [ebp - 0x9c]
inc eax
mov dword [ebp - 0x9c], eax
cmp dword [ebp - 0x9c], 3
jg 0x1003dca1
mov dword [ebp - 0x190], 1
mov dword [ebp - 0xf4], 0x4c8f
mov dword [ebp - 0x4f0], 0xda3bb1d4
mov dword [ebp - 0x698], 0
mov byte [ebp - 0x6c], 0
movzx eax, byte [ebp - 0x6c]
test eax, eax
je 0x1003da34
push 0
push 0x3c71
push 0x462d
call fcn.1003510d
add esp, 0xc
cmp dword [ebp - 0x190], 0
jne 0x1003da48
push 5
pop eax
test eax, eax
je 0x1003db24
mov dword [ebp - 0x5dc], 0xffffffff
cmp dword [ebp - 0x9c], 0
jne 0x1003db02
mov dword [ebp - 0x3c], 0
mov eax, dword [ebp - 0x3c]
mov dword [ebp - 0x854], eax
mov eax, dword [ebp - 0xf4]
imul eax, dword [ebp - 0xf4]
cmp eax, dword [ebp - 0xf4]
jle 0x1003da8a
cmp dword [ebp - 0x3c], 0
jne 0x1003da98
xor eax, eax
inc eax
jne 0x1003da98
and dword [ebp - 0x324], 0
jmp 0x1003daa2
mov dword [ebp - 0x324], 1
cmp dword [ebp - 0x324], 0x3d6c1dfe
jl 0x1003daba
mov dword [ebp - 0x434], 1
jmp 0x1003dac1
and dword [ebp - 0x434], 0
mov eax, dword [ebp - 0xf4]
cmp eax, dword [ebp - 0x434]
jle 0x1003dae1
cmp dword [ebp - 0x190], 0
jne 0x1003dae1
and dword [ebp - 0x32c], 0
jmp 0x1003daeb
mov dword [ebp - 0x32c], 1
mov eax, dword [ebp - 0x5dc]
cmp dword [ebp - 0x32c], eax
jge 0x1003db02
and dword [ebp - 0x4bc], 0
jmp 0x1003db0c
mov dword [ebp - 0x4bc], 1
mov eax, dword [ebp - 0x190]
imul eax, dword [ebp - 0x4bc]
mov dword [ebp - 0x238], eax
jmp 0x1003dc9c
push 2
lea ecx, [ebp - 0x6f0]
call fcn.10010e51
mov dword [ebp - 4], 9
push 0x7f76
lea eax, [ebp - 0x8c4]
push eax
lea eax, [ebp - 0x6f0]
push eax
push 0x3c8a
push 0x73a3
push 0x21ba
push 0x61ec
push 0
call fcn.1003247d
add esp, 0x20
mov dword [ebp - 0x238], 1
cmp dword [ebp - 0x238], 0xfffffff6
jbe 0x1003db88
mov dword [ebp - 0x688], 1
jmp 0x1003db8f
and dword [ebp - 0x688], 0
mov dword [ebp - 0x3c], 0x525c
mov eax, dword [ebp - 0xf4]
imul eax, dword [ebp - 0x3c]
mov dword [ebp - 0x334], eax
cmp dword [ebp - 0x334], 0xc1b0
jl 0x1003dbbe
mov dword [ebp - 0x5e4], 1
jmp 0x1003dbc5
and dword [ebp - 0x5e4], 0
mov eax, dword [ebp - 0x9c]
mov dword [ebp - 0x85c], eax
push 0
lea ecx, [ebp - 0x6f0]
call fcn.10010f08
cmp dword [eax], 3
je 0x1003dbef
mov dword [ebp - 0x43c], 1
jmp 0x1003dbf6
and dword [ebp - 0x43c], 0
mov eax, dword [ebp - 0x190]
cmp eax, dword [ebp - 0x43c]
jle 0x1003dc10
mov dword [ebp - 0x33c], 1
jmp 0x1003dc17
and dword [ebp - 0x33c], 0
mov eax, dword [ebp - 0x33c]
mov dword [ebp - 0x4f0], eax
cmp dword [ebp - 0x4f0], 0
jne 0x1003dc47
push 0
lea ecx, [ebp - 0x6f0]
call fcn.10010f08
cmp dword [eax], 0
jne 0x1003dc47
and dword [ebp - 0x344], 0
jmp 0x1003dc51
mov dword [ebp - 0x344], 1
imul eax, dword [ebp - 0x344], 0x27f3
mov dword [ebp - 0x698], eax
mov dword [ebp - 0x3c], 0
jmp 0x1003dc71
mov eax, dword [ebp - 0x3c]
inc eax
mov dword [ebp - 0x3c], eax
cmp dword [ebp - 0x3c], 2
jge 0x1003dc8d
push dword [ebp - 0x3c]
lea ecx, [ebp - 0x6f0]
call fcn.10010f08
mov dword [eax], 0xe2510a74
jmp 0x1003dc6a
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x6f0]
call fcn.10010e8d
jmp 0x1003d9d2
mov dword [ebp - 0x170], 0
jmp 0x1003dcba
mov eax, dword [ebp - 0x170]
inc eax
mov dword [ebp - 0x170], eax
cmp dword [ebp - 0x170], 2
jge 0x1003dcd6
mov eax, dword [ebp - 0x170]
mov dword [ebp + eax*4 - 0x768], 0
jmp 0x1003dcad
push 1
lea ecx, [ebp - 0x128]
call fcn.10010e51
mov dword [ebp - 4], 0xa
mov dword [ebp - 0x758], 0
mov dword [ebp - 0x754], 0
mov dword [ebp - 0x750], 0
mov dword [ebp - 0x74c], 0
mov dword [ebp - 0xe4], 0
jmp 0x1003dd2b
mov eax, dword [ebp - 0xe4]
inc eax
mov dword [ebp - 0xe4], eax
cmp dword [ebp - 0xe4], 3
jge 0x1003dd47
mov eax, dword [ebp - 0xe4]
mov dword [ebp + eax*4 - 0x520], 0x64a6847d
jmp 0x1003dd1e
push 0x131a
lea eax, [ebp - 0x128]
push eax
lea eax, [ebp - 0xe4]
push eax
push 0
call fcn.1003bc6d
add esp, 0x10
mov byte [ebp - 0x6e], 0
movzx eax, byte [ebp - 0x6e]
test eax, eax
je 0x1003dd7e
push 0
push 0x1736
call fcn.100326bb
pop ecx
pop ecx
push 0
lea ecx, [ebp - 0x128]
call fcn.10010f08
and dword [eax], 0
jmp 0x1003ddb4
push 0
lea ecx, [ebp - 0x128]
call fcn.10010f08
mov dword [ebp - 0x444], eax
mov eax, dword [ebp - 0x444]
mov eax, dword [eax]
inc eax
mov ecx, dword [ebp - 0x444]
mov dword [ecx], eax
push 0
lea ecx, [ebp - 0x128]
call fcn.10010f08
cmp dword [eax], 2
jg 0x1003e052
mov byte [ebp - 0x70], 0
movzx eax, byte [ebp - 0x70]
test eax, eax
je 0x1003ddde
push 0
call fcn.100359c6
pop ecx
push 0
lea ecx, [ebp - 0x128]
call fcn.10010f08
mov eax, dword [eax]
mov eax, dword [ebp + eax*4 - 0x520]
mov dword [ebp - 0x8b4], eax
push 0
lea ecx, [ebp - 0x128]
call fcn.10010f08
push 0xfffffffffffffffa
pop eax
test eax, eax
je 0x1003dfd4
mov dword [ebp - 0xa0], 0xfffffffd
mov dword [ebp - 0x690], 7
mov dword [ebp - 0xa0], 0
jmp 0x1003de3f
mov eax, dword [ebp - 0xa0]
inc eax
mov dword [ebp - 0xa0], eax
cmp dword [ebp - 0xa0], 2
jg 0x1003dfd2
push 0
lea ecx, [ebp - 0x128]
call fcn.10010f08
mov eax, dword [eax]
mov eax, dword [ebp + eax*4 - 0x520]
mov dword [ebp - 0x7e0], eax
push 0
lea ecx, [ebp - 0x128]
call fcn.10010f08
mov eax, dword [eax]
mov eax, dword [ebp + eax*4 - 0x520]
sub eax, 0x1ddbfe25
je 0x1003dea0
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0x520], 0
je 0x1003dea0
mov dword [ebp - 0x34c], 1
jmp 0x1003dea7
and dword [ebp - 0x34c], 0
cmp dword [ebp - 0x34c], 4
jle 0x1003debc
mov dword [ebp - 0x4c4], 1
jmp 0x1003dec3
and dword [ebp - 0x4c4], 0
push 0
lea ecx, [ebp - 0x128]
call fcn.10010f08
mov eax, dword [eax]
mov esi, dword [ebp + eax*4 - 0x520]
push 0
lea ecx, [ebp - 0x128]
call fcn.10010f08
mov eax, dword [eax]
mov eax, dword [ebp + eax*4 - 0x520]
mov ecx, dword [ebp - 0xa0]
add ecx, dword [ebp - 0x4c4]
add eax, ecx
cmp esi, eax
je 0x1003df0d
mov dword [ebp - 0x5ec], 1
jmp 0x1003df14
and dword [ebp - 0x5ec], 0
push 0
lea ecx, [ebp - 0x128]
call fcn.10010f08
mov eax, dword [eax]
mov eax, dword [ebp + eax*4 - 0x520]
mov dword [ebp - 0x7e4], eax
push 0
lea ecx, [ebp - 0x128]
call fcn.10010f08
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x758], 0xfffffff6
je 0x1003df59
mov dword [ebp - 0x354], 1
jmp 0x1003df60
and dword [ebp - 0x354], 0
push 0
lea ecx, [ebp - 0x128]
call fcn.10010f08
mov ecx, dword [ebp - 0x354]
cmp ecx, dword [eax]
jl 0x1003df83
mov dword [ebp - 0x44c], 1
jmp 0x1003df8a
and dword [ebp - 0x44c], 0
mov esi, dword [ebp - 0xa0]
add esi, dword [ebp - 0x44c]
push 0
lea ecx, [ebp - 0x128]
call fcn.10010f08
mov eax, dword [eax]
cmp esi, dword [ebp + eax*4 - 0x520]
jne 0x1003dfba
mov dword [ebp - 0x35c], 1
jmp 0x1003dfc1
and dword [ebp - 0x35c], 0
mov eax, dword [ebp - 0x35c]
mov dword [ebp - 0x690], eax
jmp 0x1003de32
jmp 0x1003e04d
mov dword [ebp - 0x5f4], 0x1d97
mov dword [ebp - 0x1b0], 0
jmp 0x1003dff7
mov eax, dword [ebp - 0x1b0]
inc eax
mov dword [ebp - 0x1b0], eax
cmp dword [ebp - 0x1b0], 3
jge 0x1003e013
mov eax, dword [ebp - 0x1b0]
mov dword [ebp + eax*4 - 0x910], 2
jmp 0x1003dfea
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x758]
cmp dword [ebp - 0x5f4], eax
jle 0x1003e034
mov dword [ebp - 0x508], 1
jmp 0x1003e03b
and dword [ebp - 0x508], 0
push 4
pop eax
shl eax, 1
mov ecx, dword [ebp - 0x508]
mov dword [ebp + eax - 0x910], ecx
jmp 0x1003dd90
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x128]
call fcn.10010e8d
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x768]
inc eax
push 4
pop ecx
shl ecx, 0
mov dword [ebp + ecx - 0x768], eax
jmp 0x1003d987
mov dword [ebp - 0x28], 0
mov dword [ebp - 0xa8], 0
mov dword [ebp - 0x50], 0
jmp 0x1003e0a2
mov eax, dword [ebp - 0x50]
inc eax
mov dword [ebp - 0x50], eax
cmp dword [ebp - 0x50], 3
jge 0x1003e0b8
mov eax, dword [ebp - 0x50]
mov dword [ebp + eax*4 - 0x11c], 0xfffffffe
jmp 0x1003e09b
mov dword [ebp - 0x50], 0
jmp 0x1003e0c8
mov eax, dword [ebp - 0x50]
inc eax
mov dword [ebp - 0x50], eax
cmp dword [ebp - 0x50], 2
jge 0x1003e0de
mov eax, dword [ebp - 0x50]
mov dword [ebp + eax*4 - 0x540], 0xfffffffc
jmp 0x1003e0c1
push 4
pop eax
imul eax, eax, 0
push 4
pop ecx
imul ecx, ecx, 0
mov ecx, dword [ebp + ecx - 0x11c]
cmp dword [ebp + eax - 0x11c], ecx
jl 0x1003e106
mov dword [ebp - 0x364], 1
jmp 0x1003e10d
and dword [ebp - 0x364], 0
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x11c]
imul eax, dword [ebp - 0x364]
push 4
pop ecx
shl ecx, 1
imul eax, dword [ebp + ecx - 0x11c]
test eax, eax
jne 0x1003e159
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x11c], 0
jne 0x1003e159
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0x11c], 0
jne 0x1003e159
and dword [ebp - 0x454], 0
jmp 0x1003e163
mov dword [ebp - 0x454], 1
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x11c]
add eax, dword [ebp - 0x454]
cmp eax, 0xda2a
jg 0x1003e189
mov dword [ebp - 0x36c], 1
jmp 0x1003e190
and dword [ebp - 0x36c], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x11c]
cmp dword [ebp - 0x36c], eax
jg 0x1003e1b1
mov dword [ebp - 0x4d0], 1
jmp 0x1003e1b8
and dword [ebp - 0x4d0], 0
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x11c]
add eax, dword [ebp - 0x4d0]
cmp eax, 0xffffffff
je 0x1003e1db
mov dword [ebp - 0x374], 1
jmp 0x1003e1e2
and dword [ebp - 0x374], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x11c]
cmp dword [ebp - 0x374], eax
jge 0x1003e203
mov dword [ebp - 0x45c], 1
jmp 0x1003e20a
and dword [ebp - 0x45c], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x11c]
cmp dword [ebp - 0x45c], eax
jge 0x1003e22b
mov dword [ebp - 0x37c], 1
jmp 0x1003e232
and dword [ebp - 0x37c], 0
mov eax, dword [ebp - 0x28]
cmp dword [ebp - 0x37c], eax
jg 0x1003e249
mov dword [ebp - 0x4f8], 1
jmp 0x1003e250
and dword [ebp - 0x4f8], 0
mov eax, dword [ebp - 0x4f8]
sub eax, dword [ebp - 0x28]
jne 0x1003e26b
push 0xfffffffffffffff8
pop eax
test eax, eax
jne 0x1003e26b
and dword [ebp - 0x384], 0
jmp 0x1003e275
mov dword [ebp - 0x384], 1
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x11c]
cmp dword [ebp - 0x384], eax
je 0x1003e296
mov dword [ebp - 0x6a0], 1
jmp 0x1003e29d
and dword [ebp - 0x6a0], 0
mov eax, dword [ebp - 0x28]
mov dword [ebp - 0x7dc], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x11c]
mov dword [ebp - 0x7f4], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x11c]
mov dword [ebp - 0x5fc], eax
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x5fc]
mov dword [ebp + eax - 0x540], ecx
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x540]
mov dword [ebp - 0xa8], eax
mov eax, dword [ebp - 0x28]
cmp dword [ebp - 0xa8], eax
je 0x1003e309
mov dword [ebp - 0x464], 1
jmp 0x1003e310
and dword [ebp - 0x464], 0
cmp dword [ebp - 0x464], 8
je 0x1003e325
mov dword [ebp - 0x38c], 1
jmp 0x1003e32c
and dword [ebp - 0x38c], 0
cmp dword [ebp - 0x38c], 1
jbe 0x1003e341
mov dword [ebp - 0x4d8], 1
jmp 0x1003e348
and dword [ebp - 0x4d8], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x11c]
imul eax, dword [ebp - 0x4d8]
push 4
pop ecx
imul ecx, ecx, 0
cmp eax, dword [ebp + ecx - 0x11c]
jle 0x1003e380
mov eax, 0xad2c
test eax, eax
je 0x1003e380
mov dword [ebp - 0x394], 1
jmp 0x1003e387
and dword [ebp - 0x394], 0
cmp dword [ebp - 0x394], 0xc1cc
jle 0x1003e39f
mov dword [ebp - 0x46c], 1
jmp 0x1003e3a6
and dword [ebp - 0x46c], 0
mov eax, dword [ebp - 0x28]
cmp dword [ebp - 0x46c], eax
jl 0x1003e3bd
mov dword [ebp - 0x39c], 1
jmp 0x1003e3c4
and dword [ebp - 0x39c], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x11c]
cmp eax, dword [ebp - 0x39c]
je 0x1003e3e5
mov dword [ebp - 0x494], 1
jmp 0x1003e3ec
and dword [ebp - 0x494], 0
mov eax, dword [ebp - 0x28]
cmp dword [ebp - 0x494], eax
jle 0x1003e403
mov dword [ebp - 0x3a4], 1
jmp 0x1003e40a
and dword [ebp - 0x3a4], 0
cmp dword [ebp - 0x3a4], 0xffff
jae 0x1003e422
mov dword [ebp - 0x474], 1
jmp 0x1003e429
and dword [ebp - 0x474], 0
cmp dword [ebp - 0x474], 0x3936
jl 0x1003e493
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0x540], 0xffffffff
mov dword [ebp - 0xa8], 0
jmp 0x1003e45f
mov eax, dword [ebp - 0xa8]
inc eax
mov dword [ebp - 0xa8], eax
cmp dword [ebp - 0xa8], 1
jg 0x1003e491
mov dword [ebp - 0x28], 0
jmp 0x1003e478
mov eax, dword [ebp - 0x28]
inc eax
mov dword [ebp - 0x28], eax
cmp dword [ebp - 0x28], 1
jg 0x1003e48f
mov eax, dword [ebp - 0x28]
cmp dword [ebp + eax*4 - 0x540], 0
je 0x1003e48d
jmp 0x1003e48f
jmp 0x1003e471
jmp 0x1003e452
jmp 0x1003e4ba
mov byte [ebp - 0x67], 0
movzx eax, byte [ebp - 0x67]
test eax, eax
je 0x1003e4ba
push 0x23d1
push 0
push 0xe8d
push 0
push 0x2ec
push 0
call dword [sym.imp.KERNEL32.dll_CompareStringW]
mov eax, dword [ebp - 0x628]
mov eax, dword [eax + 0x38]
mov dword [ebp - 0x1e8], eax
push 3
lea ecx, [ebp - 0x1c0]
call fcn.10010e51
mov dword [ebp - 4], 0xb
mov dword [ebp - 0x24], 3
mov dword [ebp - 0x3d4], 0x457a23a
lea eax, [ebp - 0xc0]
push eax
lea eax, [ebp - 0x1c0]
push eax
push 0
call fcn.10036e95
add esp, 0xc
mov dword [ebp - 0xc0], 0
jmp 0x1003e51f
mov eax, dword [ebp - 0xc0]
inc eax
mov dword [ebp - 0xc0], eax
cmp dword [ebp - 0xc0], 2
jge 0x1003e53b
mov eax, dword [ebp - 0xc0]
mov dword [ebp + eax*4 - 0x770], 0xefc16765
jmp 0x1003e512
mov byte [ebp - 0x71], 0
movzx eax, byte [ebp - 0x71]
test eax, eax
je 0x1003e55b
push 0x2616
push 0x4316
push 0
call fcn.10036c46
add esp, 0xc
mov dword [ebp - 0x24], 0
jmp 0x1003e56b
mov eax, dword [ebp - 0x24]
inc eax
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 2
jg 0x1003e7ca
mov dword [ebp - 0x1ec], 1
push dword [ebp - 0x24]
lea ecx, [ebp - 0x1c0]
call fcn.10010f08
cmp dword [eax], 0
je 0x1003e6f2
push 0
lea ecx, [ebp - 0x1c0]
call fcn.10010f08
cmp dword [eax], 0
je 0x1003e5b8
xor eax, eax
je 0x1003e5b8
mov dword [ebp - 0x3ac], 1
jmp 0x1003e5bf
and dword [ebp - 0x3ac], 0
push 0
lea ecx, [ebp - 0x1c0]
call fcn.10010f08
mov ecx, dword [ebp - 0x3ac]
cmp ecx, dword [eax]
jle 0x1003e5e2
mov dword [ebp - 0x498], 1
jmp 0x1003e5e9
and dword [ebp - 0x498], 0
mov esi, dword [ebp - 0x498]
neg esi
push dword [ebp - 0x24]
lea ecx, [ebp - 0x1c0]
call fcn.10010f08
cmp esi, dword [eax]
jle 0x1003e621
push 0
lea ecx, [ebp - 0x1c0]
call fcn.10010f08
cmp dword [eax], 0
je 0x1003e621
mov dword [ebp - 0x3b4], 1
jmp 0x1003e628
and dword [ebp - 0x3b4], 0
push dword [ebp - 0x24]
lea ecx, [ebp - 0x1c0]
call fcn.10010f08
mov ecx, dword [ebp - 0x3b4]
cmp ecx, dword [eax]
je 0x1003e64c
mov dword [ebp - 0x47c], 1
jmp 0x1003e653
and dword [ebp - 0x47c], 0
mov eax, dword [ebp - 0x24]
cmp dword [ebp - 0x47c], eax
jg 0x1003e679
push 2
lea ecx, [ebp - 0x1c0]
call fcn.10010f08
cmp dword [eax], 0
jne 0x1003e679
and dword [ebp - 0x3bc], 0
jmp 0x1003e683
mov dword [ebp - 0x3bc], 1
mov eax, dword [ebp - 0x24]
cmp dword [ebp - 0x3bc], eax
jg 0x1003e69a
mov dword [ebp - 0x4a0], 1
jmp 0x1003e6a1
and dword [ebp - 0x4a0], 0
imul eax, dword [ebp - 0x4a0], 0xffff
cmp eax, 7
je 0x1003e6bc
mov dword [ebp - 0x3c4], 1
jmp 0x1003e6c3
and dword [ebp - 0x3c4], 0
cmp dword [ebp - 0x3c4], 0xfffffffb
jge 0x1003e6d8
mov dword [ebp - 0x604], 1
jmp 0x1003e6df
and dword [ebp - 0x604], 0
push 6
pop eax
test eax, eax
je 0x1003e6f2
mov dword [ebp - 0x484], 1
jmp 0x1003e6f9
and dword [ebp - 0x484], 0
push dword [ebp - 0x24]
lea ecx, [ebp - 0x1c0]
call fcn.10010f08
mov eax, dword [eax]
imul eax, dword [ebp - 0x484]
mov dword [ebp - 0x1ec], eax
mov eax, dword [ebp - 0x24]
mov dword [ebp - 0x3cc], eax
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x3cc]
mov dword [ebp + eax - 0x770], ecx
cmp dword [ebp - 0x3cc], 0
jne 0x1003e754
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x770], 0
jne 0x1003e754
and dword [ebp - 0x490], 0
jmp 0x1003e75e
mov dword [ebp - 0x490], 1
push 2
lea ecx, [ebp - 0x1c0]
call fcn.10010f08
mov eax, dword [ebp - 0x490]
mov dword [ebp - 0x3d4], eax
mov eax, dword [ebp - 0x3d4]
mov dword [ebp - 0x7fc], eax
push dword [ebp - 0x24]
lea ecx, [ebp - 0x1c0]
call fcn.10010f08
mov ecx, 0xe994
imul ecx, ecx, 0x9d9e
cmp dword [eax], ecx
jne 0x1003e7ac
mov dword [ebp - 0x26c], 1
jmp 0x1003e7b3
and dword [ebp - 0x26c], 0
mov eax, dword [ebp - 0x26c]
sub eax, dword [ebp - 0x1ec]
mov dword [ebp - 0x1ec], eax
jmp 0x1003e564
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x1c0]
call fcn.10010e8d
mov dword [ebp - 0x62c], 0x1bd7
cmp dword [ebp - 0x62c], 0x10ea
jge 0x1003eabc
lea eax, [ebp - 0x230]
push eax
lea eax, [ebp - 0x60c]
push eax
lea eax, [ebp - 0x144]
push eax
push 0x1000dddc
call fcn.10058fc2
add esp, 0x10
push dword [ebp - 0x144]
lea ecx, [ebp - 0x71c]
call fcn.10022cc3
mov dword [ebp - 4], 0xc
and dword [ebp - 0x220], 0
jmp 0x1003e843
mov eax, dword [ebp - 0x220]
inc eax
mov dword [ebp - 0x220], eax
mov eax, dword [ebp - 0x220]
cmp eax, dword [ebp - 0x60c]
jge 0x1003e8c9
lea eax, [ebp - 0x13c]
push eax
lea eax, [ebp - 0x130]
push eax
push 0x1000dde8
call fcn.10058fc2
add esp, 0xc
mov eax, dword [ebp - 0x130]
dec eax
mov dword [ebp - 0x130], eax
mov eax, dword [ebp - 0x13c]
dec eax
mov dword [ebp - 0x13c], eax
lea eax, [ebp - 0x13c]
push eax
push dword [ebp - 0x130]
lea ecx, [ebp - 0x71c]
call fcn.10022d05
mov ecx, eax
call fcn.10022d12
lea eax, [ebp - 0x130]
push eax
push dword [ebp - 0x13c]
lea ecx, [ebp - 0x71c]
call fcn.10022d05
mov ecx, eax
call fcn.10022d12
jmp 0x1003e836
lea ecx, [ebp - 0x250]
call fcn.10010e44
mov byte [ebp - 4], 0xd
mov byte [ebp - 0x69], 0
lea eax, [ebp - 0x69]
push eax
push dword [ebp - 0x144]
lea ecx, [ebp - 0x8ec]
call fcn.10022c0c
mov byte [ebp - 4], 0xe
lea eax, [ebp - 0x250]
push eax
lea eax, [ebp - 0x8ec]
push eax
lea eax, [ebp - 0x71c]
push eax
push 0xffffffffffffffff
push 0
call fcn.1003bc9e
add esp, 0x14
lea ecx, [ebp - 0x250]
call fcn.10050b3a
lea ecx, [ebp - 0x250]
call fcn.10050b3a
mov eax, dword [ebp - 0x144]
shl eax, 1
cdq
idiv dword [ebp - 0x230]
test edx, edx
jle 0x1003e94b
mov dword [ebp - 0x270], 1
jmp 0x1003e952
and dword [ebp - 0x270], 0
mov eax, dword [ebp - 0x144]
shl eax, 1
cdq
idiv dword [ebp - 0x230]
add eax, dword [ebp - 0x270]
mov dword [ebp - 0x200], eax
and dword [ebp - 0x44], 0
and dword [ebp - 0x1f4], 0
jmp 0x1003e987
mov eax, dword [ebp - 0x1f4]
inc eax
mov dword [ebp - 0x1f4], eax
mov eax, dword [ebp - 0x1f4]
cmp eax, dword [ebp - 0x230]
jge 0x1003ea8f
mov esi, dword [ebp - 0x44]
add esi, dword [ebp - 0x200]
lea ecx, [ebp - 0x250]
call fcn.10011391
cmp esi, eax
jae 0x1003ea10
push dword [ebp - 0x200]
push 0x1000ddf0
call fcn.10057526
pop ecx
pop ecx
and dword [ebp - 0x1fc], 0
jmp 0x1003e9d9
mov eax, dword [ebp - 0x1fc]
inc eax
mov dword [ebp - 0x1fc], eax
mov eax, dword [ebp - 0x1fc]
cmp eax, dword [ebp - 0x200]
jge 0x1003ea0e
push dword [ebp - 0x44]
lea ecx, [ebp - 0x250]
call fcn.10010f08
mov eax, dword [eax]
inc eax
push eax
push 0x1000ddf0
call fcn.10057526
pop ecx
pop ecx
mov eax, dword [ebp - 0x44]
inc eax
mov dword [ebp - 0x44], eax
jmp 0x1003e9cc
jmp 0x1003ea7f
lea ecx, [ebp - 0x250]
call fcn.10011391
cmp dword [ebp - 0x44], eax
jne 0x1003ea2d
push 0x1000e1a0
call fcn.10057526
pop ecx
jmp 0x1003ea7f
lea ecx, [ebp - 0x250]
call fcn.10011391
sub eax, dword [ebp - 0x44]
push eax
push 0x1000ddf0
call fcn.10057526
pop ecx
pop ecx
lea ecx, [ebp - 0x250]
call fcn.10011391
cmp dword [ebp - 0x44], eax
jae 0x1003ea7f
push dword [ebp - 0x44]
lea ecx, [ebp - 0x250]
call fcn.10010f08
mov eax, dword [eax]
inc eax
push eax
push 0x1000ddf0
call fcn.10057526
pop ecx
pop ecx
mov eax, dword [ebp - 0x44]
inc eax
mov dword [ebp - 0x44], eax
jmp 0x1003ea48
push 0x1000daa5
call fcn.10059662
pop ecx
jmp 0x1003e97a
mov byte [ebp - 4], 0xd
lea ecx, [ebp - 0x8ec]
call fcn.10022c4a
mov byte [ebp - 4], 0xc
lea ecx, [ebp - 0x250]
call fcn.10010e8d
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x71c]
call fcn.10022d00
mov dword [ebp - 0xb0], 6
mov dword [ebp - 0x634], 0x17dc
cmp dword [ebp - 0x634], 0x88b
jge 0x1003ebb1
lea eax, [ebp - 0x280]
push eax
lea eax, [ebp - 0x61c]
push eax
lea eax, [ebp - 0x204]
push eax
push 0x1000dddc
call fcn.10058fc2
add esp, 0x10
and dword [ebp - 0x1c8], 0
and dword [ebp - 0xc8], 0
mov eax, dword [ebp - 0x204]
mov dword [ebp - 0x614], eax
mov eax, dword [ebp - 0x204]
dec eax
mov dword [ebp - 0x204], eax
cmp dword [ebp - 0x614], 0
je 0x1003eb80
lea eax, [ebp - 0x63c]
push eax
lea eax, [ebp - 0x278]
push eax
push 0x1000dde8
call fcn.10058fc2
add esp, 0xc
mov eax, dword [ebp - 0x278]
sub eax, dword [ebp - 0x1c8]
cdq
idiv dword [ebp - 0x280]
add eax, dword [ebp - 0xc8]
mov dword [ebp - 0xc8], eax
mov eax, dword [ebp - 0x278]
add eax, dword [ebp - 0x63c]
mov dword [ebp - 0x1c8], eax
jmp 0x1003eb10
mov eax, dword [ebp - 0x61c]
sub eax, dword [ebp - 0x1c8]
cdq
idiv dword [ebp - 0x280]
add eax, dword [ebp - 0xc8]
mov dword [ebp - 0xc8], eax
push dword [ebp - 0xc8]
push 0x1000ddd4
call fcn.10057526
pop ecx
pop ecx
mov dword [ebp - 0x14c], 0
jmp 0x1003ebca
mov eax, dword [ebp - 0x14c]
inc eax
mov dword [ebp - 0x14c], eax
cmp dword [ebp - 0x14c], 1
jge 0x1003ebe3
mov eax, dword [ebp - 0x14c]
mov dword [ebp + eax*4 - 0x40], 0xfffffff8
jmp 0x1003ebbd
mov dword [ebp - 0xb0], 5
jmp 0x1003ebfc
mov eax, dword [ebp - 0xb0]
inc eax
mov dword [ebp - 0xb0], eax
cmp dword [ebp - 0xb0], 0x16
jle 0x1003eea2
mov dword [ebp - 0x18], 0x3c69aed2
mov dword [ebp - 0x64c], 0xffffffff
mov dword [ebp - 0x1d0], 0xfffffff6
mov dword [ebp - 0x654], 9
mov dword [ebp - 0x18], 0
jmp 0x1003ec3e
mov eax, dword [ebp - 0x18]
inc eax
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 0
jg 0x1003ee00
mov dword [ebp - 0x4c], 0xffffffff
mov dword [ebp - 0x154], 0
jmp 0x1003ec68
mov eax, dword [ebp - 0x154]
inc eax
mov dword [ebp - 0x154], eax
cmp dword [ebp - 0x154], 1
jge 0x1003ec84
mov eax, dword [ebp - 0x154]
mov dword [ebp + eax*4 - 0x624], 0xdf8e3bf1
jmp 0x1003ec5b
mov dword [ebp - 0x4c], 0
jmp 0x1003ec94
mov eax, dword [ebp - 0x4c]
inc eax
mov dword [ebp - 0x4c], eax
cmp dword [ebp - 0x4c], 0
jg 0x1003edb2
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp + eax*4 - 0x40]
mov dword [ebp - 0x804], eax
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x80c], eax
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp + eax*4 - 0x40]
mov dword [ebp - 0x814], eax
cmp dword [ebp - 0x4c], 0xe80d68f9
jbe 0x1003ecd6
mov dword [ebp - 0x288], 1
jmp 0x1003ecdd
and dword [ebp - 0x288], 0
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp + eax*4 - 0x40]
cmp dword [ebp - 0x288], eax
je 0x1003ecf8
mov dword [ebp - 0x290], 1
jmp 0x1003ecff
and dword [ebp - 0x290], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x40]
add eax, dword [ebp - 0x290]
mov ecx, dword [ebp - 0x18]
add eax, dword [ebp + ecx*4 - 0x40]
je 0x1003ed2e
mov eax, dword [ebp - 0x18]
cmp dword [ebp + eax*4 - 0x40], 0
je 0x1003ed2e
mov dword [ebp - 0x298], 1
jmp 0x1003ed35
and dword [ebp - 0x298], 0
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp + eax*4 - 0x40]
cmp dword [ebp - 0x298], eax
je 0x1003ed50
mov dword [ebp - 0x644], 1
jmp 0x1003ed57
and dword [ebp - 0x644], 0
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x81c], eax
mov eax, dword [ebp - 0x4c]
cmp dword [ebp - 0x18], eax
jle 0x1003ed7d
mov eax, 0x2ff1
test eax, eax
je 0x1003ed7d
mov dword [ebp - 0x2a0], 1
jmp 0x1003ed84
and dword [ebp - 0x2a0], 0
cmp dword [ebp - 0x2a0], 7
jb 0x1003ed99
mov dword [ebp - 0x2a8], 1
jmp 0x1003eda0
and dword [ebp - 0x2a8], 0
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x2a8]
mov dword [ebp + eax*4 - 0x40], ecx
jmp 0x1003ec8d
mov dword [ebp - 0x4c], 0
jmp 0x1003edc2
mov eax, dword [ebp - 0x4c]
dec eax
mov dword [ebp - 0x4c], eax
cmp dword [ebp - 0x4c], 0
jl 0x1003edfb
mov eax, dword [ebp - 0x18]
push 4
pop ecx
imul ecx, ecx, 0
mov eax, dword [ebp + eax*4 - 0x40]
mov dword [ebp + ecx - 0x624], eax
lea eax, [ebp - 0x64c]
push eax
lea eax, [ebp - 0x1d0]
push eax
push 0xee4
push 0
call fcn.10033187
add esp, 0x10
jmp 0x1003edbb
jmp 0x1003ec37
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x40], 0xfffffff9
jl 0x1003ee19
mov dword [ebp - 0x2b0], 1
jmp 0x1003ee20
and dword [ebp - 0x2b0], 0
mov eax, dword [ebp - 0x2b0]
mov dword [ebp - 0x1d0], eax
mov eax, dword [ebp - 0x1d0]
cmp dword [ebp - 0x18], eax
jg 0x1003ee43
mov dword [ebp - 0x2b8], 1
jmp 0x1003ee4a
and dword [ebp - 0x2b8], 0
mov eax, dword [ebp - 0xb0]
cmp dword [ebp - 0x2b8], eax
je 0x1003ee64
mov dword [ebp - 0x2c0], 1
jmp 0x1003ee6b
and dword [ebp - 0x2c0], 0
cmp dword [ebp - 0x2c0], 0x6082f4e5
jle 0x1003ee83
mov dword [ebp - 0x2c8], 1
jmp 0x1003ee8a
and dword [ebp - 0x2c8], 0
mov eax, dword [ebp - 0xb0]
imul eax, dword [ebp - 0x2c8]
mov dword [ebp - 0x654], eax
jmp 0x1003ebef
push 4
lea ecx, [ebp - 0x244]
call fcn.10010e51
mov dword [ebp - 4], 0xf
mov dword [ebp - 0x1c], 1
mov dword [ebp - 0x710], 0xbdd7
mov dword [ebp - 0x70c], 0xbdd7
mov dword [ebp - 0x708], 0xbdd7
mov dword [ebp - 0x704], 0xbdd7
mov dword [ebp - 0x15c], 0xc3997b09
push 1
lea ecx, [ebp - 0x578]
call fcn.10010e51
mov byte [ebp - 4], 0x10
push 1
push 0
lea eax, [ebp - 0x630]
push eax
push 0x4d7
push 0
push 0x7c14
lea eax, [ebp - 0x244]
push eax
push 0xa8
push 0xba3
push 0x390e
push 0x4a8f
call fcn.10033aa4
add esp, 0x2c
push 0
lea eax, [ebp - 0x578]
push eax
push 0x3be5
push 0x2625
push 0x2177
push 0x464
push 0x10f7
push 0x5f0b
push 0x6d14
push 0x7b5f
lea eax, [ebp - 0x630]
push eax
push 0x4acd
call fcn.10031d85
add esp, 0x30
mov dword [ebp - 0x1c], 3
jmp 0x1003ef8f
mov eax, dword [ebp - 0x1c]
dec eax
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 0
jl 0x1003efb5
push 0
push 0x5fa0
push 0x7e05
push 0x423c
push 0x3fe3
call fcn.10032158
add esp, 0x14
jmp 0x1003ef88
mov dword [ebp - 0x1c], 3
jmp 0x1003efc5
mov eax, dword [ebp - 0x1c]
dec eax
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 0
jl 0x1003f338
mov dword [ebp - 0x64], 0xfffffff8
mov dword [ebp - 0x6a8], 0xfffffffe
push 1
lea ecx, [ebp - 0x244]
call fcn.10010f08
cmp dword [eax], 0x4b0b4ef6
jg 0x1003f001
mov dword [ebp - 0x268], 1
jmp 0x1003f008
and dword [ebp - 0x268], 0
push dword [ebp - 0x1c]
lea ecx, [ebp - 0x244]
call fcn.10010f08
mov eax, dword [eax]
cmp eax, dword [ebp - 0x268]
jge 0x1003f076
push dword [ebp - 0x1c]
lea ecx, [ebp - 0x244]
call fcn.10010f08
cmp dword [eax], 1
jge 0x1003f04f
push 4
pop eax
imul eax, eax, 3
cmp dword [ebp + eax - 0x710], 0
je 0x1003f04f
mov dword [ebp - 0x2d8], 1
jmp 0x1003f056
and dword [ebp - 0x2d8], 0
push 1
lea ecx, [ebp - 0x244]
call fcn.10010f08
mov ecx, dword [ebp - 0x2d8]
cmp ecx, dword [eax]
jge 0x1003f076
and dword [ebp - 0x2e0], 0
jmp 0x1003f080
mov dword [ebp - 0x2e0], 1
cmp dword [ebp - 0x2e0], 0
je 0x1003f095
mov dword [ebp - 0x2e8], 1
jmp 0x1003f09c
and dword [ebp - 0x2e8], 0
mov eax, dword [ebp - 0x2e8]
inc eax
jne 0x1003f0c0
push 1
lea ecx, [ebp - 0x244]
call fcn.10010f08
cmp dword [eax], 0
jne 0x1003f0c0
and dword [ebp - 0x2f0], 0
jmp 0x1003f0ca
mov dword [ebp - 0x2f0], 1
cmp dword [ebp - 0x2f0], 0x7dcd
jne 0x1003f0e2
mov dword [ebp - 0x2f8], 1
jmp 0x1003f0e9
and dword [ebp - 0x2f8], 0
mov eax, dword [ebp - 0x2f8]
mov dword [ebp - 0x15c], eax
cmp dword [ebp - 0x15c], 0x8f8f
jle 0x1003f10d
mov dword [ebp - 0x300], 1
jmp 0x1003f114
and dword [ebp - 0x300], 0
mov eax, dword [ebp - 0x300]
mov dword [ebp - 0x64], eax
mov eax, dword [ebp - 0x64]
mov dword [ebp - 0x824], eax
xor eax, eax
neg eax
mov dword [ebp - 0x6a8], eax
mov dword [ebp - 0x64], 0
jmp 0x1003f140
mov eax, dword [ebp - 0x64]
inc eax
mov dword [ebp - 0x64], eax
cmp dword [ebp - 0x64], 3
jg 0x1003f333
push 2
lea ecx, [ebp - 0x7c8]
call fcn.10010e51
mov byte [ebp - 4], 0x11
mov dword [ebp - 0x6dc], 0xffffffff
push 0x54a8
lea eax, [ebp - 0x7c8]
push eax
push 0x75d0
push 0
lea eax, [ebp - 0x830]
push eax
call fcn.10033f33
add esp, 0x14
lea eax, [ebp - 0x578]
push eax
push 0
push 0x7bc5
push 0x32cc
call fcn.10032db4
add esp, 0x10
push dword [ebp - 0x1c]
lea ecx, [ebp - 0x244]
call fcn.10010f08
mov esi, eax
mov edi, dword [ebp - 0x64]
push 3
lea ecx, [ebp - 0x244]
call fcn.10010f08
add edi, dword [eax]
cmp dword [esi], edi
jg 0x1003f1d4
mov dword [ebp - 0x308], 1
jmp 0x1003f1db
and dword [ebp - 0x308], 0
push dword [ebp - 0x1c]
lea ecx, [ebp - 0x244]
call fcn.10010f08
mov ecx, dword [ebp - 0x308]
imul ecx, dword [eax]
mov dword [ebp - 0x310], ecx
push 0
lea ecx, [ebp - 0x7c8]
call fcn.10010f08
mov ecx, dword [ebp - 0x310]
mov dword [eax], ecx
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp + eax*4 - 0x710]
cmp dword [ebp - 0x310], eax
jl 0x1003f22b
mov dword [ebp - 0x318], 1
jmp 0x1003f232
and dword [ebp - 0x318], 0
push dword [ebp - 0x1c]
lea ecx, [ebp - 0x244]
call fcn.10010f08
mov eax, dword [eax]
cmp eax, dword [ebp - 0x318]
jl 0x1003f256
mov dword [ebp - 0x320], 1
jmp 0x1003f25d
and dword [ebp - 0x320], 0
cmp dword [ebp - 0x320], 0xfffffffc
jne 0x1003f272
mov dword [ebp - 0x328], 1
jmp 0x1003f279
and dword [ebp - 0x328], 0
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp + eax*4 - 0x710]
cmp eax, dword [ebp - 0x328]
jge 0x1003f2a0
mov eax, 0xd1d9
test eax, eax
je 0x1003f2a0
mov dword [ebp - 0x638], 1
jmp 0x1003f2a7
and dword [ebp - 0x638], 0
push 0
lea ecx, [ebp - 0x578]
call fcn.10010f08
mov ecx, dword [ebp - 0x64]
cmp dword [eax], ecx
jle 0x1003f2c7
mov dword [ebp - 0x330], 1
jmp 0x1003f2ce
and dword [ebp - 0x330], 0
push 0
lea ecx, [ebp - 0x578]
call fcn.10010f08
mov esi, dword [ebp - 0x330]
sub esi, dword [eax]
push 0
lea ecx, [ebp - 0x578]
call fcn.10010f08
cmp esi, dword [eax]
jg 0x1003f300
mov dword [ebp - 0x338], 1
jmp 0x1003f307
and dword [ebp - 0x338], 0
mov eax, dword [ebp - 0x338]
mov dword [ebp - 0x15c], eax
mov eax, dword [ebp - 0x15c]
mov dword [ebp - 0x6dc], eax
mov byte [ebp - 4], 0x10
lea ecx, [ebp - 0x7c8]
call fcn.10010e8d
jmp 0x1003f139
jmp 0x1003efbe
mov byte [ebp - 4], 0xf
lea ecx, [ebp - 0x578]
call fcn.10010e8d
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x244]
call fcn.10010e8d
mov dword [ebp - 0x2c], 0
mov dword [ebp - 0x640], 0xe08974b6
mov dword [ebp - 0x6a4], 7
mov dword [ebp - 0x164], 0
jmp 0x1003f38a
mov eax, dword [ebp - 0x164]
inc eax
mov dword [ebp - 0x164], eax
cmp dword [ebp - 0x164], 2
jge 0x1003f3a6
mov eax, dword [ebp - 0x164]
mov dword [ebp + eax*4 - 0x4cc], 0x477862fd
jmp 0x1003f37d
push 4
pop eax
shl eax, 0
mov dword [ebp + eax - 0x4cc], 0
jmp 0x1003f3d4
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x4cc]
inc eax
push 4
pop ecx
shl ecx, 0
mov dword [ebp + ecx - 0x4cc], eax
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x4cc], 0xc
je 0x1003f40c
mov byte [ebp - 0x91], 0
movzx eax, byte [ebp - 0x91]
test eax, eax
je 0x1003f40a
push 0x4950
push 0
push 0x2e24
call fcn.10031ebe
add esp, 0xc
jmp 0x1003f3b9
mov eax, dword [ebp - 0x640]
mov dword [ebp - 0x340], eax
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x340]
mov dword [ebp + eax - 0x4cc], ecx
mov eax, dword [ebp - 0x340]
mov dword [ebp - 0x6a4], eax
mov dword [ebp - 0xb8], 0
push 4
lea ecx, [ebp - 0x7b0]
call fcn.10010e51
mov dword [ebp - 4], 0x12
push 1
lea ecx, [ebp - 0x584]
call fcn.10010e51
mov byte [ebp - 4], 0x13
mov dword [ebp - 0x83c], 0xcb8ce3e6
mov dword [ebp - 0x840], 8
mov dword [ebp - 0x848], 1
mov dword [ebp - 0x850], 0x71247adf
mov dword [ebp - 0x858], 1
mov dword [ebp - 0x860], 5
mov dword [ebp - 0x60], 0
jmp 0x1003f4b2
mov eax, dword [ebp - 0x60]
inc eax
mov dword [ebp - 0x60], eax
cmp dword [ebp - 0x60], 4
jge 0x1003f4ce
push dword [ebp - 0x60]
lea ecx, [ebp - 0x7b0]
call fcn.10010f08
mov dword [eax], 6
jmp 0x1003f4ab
mov dword [ebp - 0x60], 0
jmp 0x1003f4de
mov eax, dword [ebp - 0x60]
inc eax
mov dword [ebp - 0x60], eax
cmp dword [ebp - 0x60], 1
jge 0x1003f4fa
push dword [ebp - 0x60]
lea ecx, [ebp - 0x584]
call fcn.10010f08
mov dword [eax], 0x2ba39464
jmp 0x1003f4d7
push 0
lea ecx, [ebp - 0x584]
call fcn.10010f08
mov dword [eax], 3
jmp 0x1003f533
push 0
lea ecx, [ebp - 0x584]
call fcn.10010f08
mov dword [ebp - 0x348], eax
mov eax, dword [ebp - 0x348]
mov eax, dword [eax]
dec eax
mov ecx, dword [ebp - 0x348]
mov dword [ecx], eax
push 0
lea ecx, [ebp - 0x584]
call fcn.10010f08
cmp dword [eax], 0
jl 0x1003f5de
mov dword [ebp - 0x6cc], 0x609c
mov dword [ebp - 0x648], 0x1da622a1
mov dword [ebp - 0x868], 0x40ed3c15
mov dword [ebp - 0x350], 0x8e92eda8
mov dword [ebp - 0x16c], 0
jmp 0x1003f58a
mov eax, dword [ebp - 0x16c]
inc eax
mov dword [ebp - 0x16c], eax
cmp dword [ebp - 0x16c], 2
jge 0x1003f5a6
mov eax, dword [ebp - 0x16c]
mov dword [ebp + eax*4 - 0x934], 0x12d2c87a
jmp 0x1003f57d
mov eax, dword [ebp - 0x350]
dec eax
mov dword [ebp - 0x350], eax
lea eax, [ebp - 0x648]
push eax
lea eax, [ebp - 0x6cc]
push eax
push 0
lea eax, [ebp - 0x584]
push eax
lea eax, [ebp - 0x7b0]
push eax
call fcn.10033268
add esp, 0x14
jmp 0x1003f50f
mov byte [ebp - 0x79], 0
mov dword [ebp - 0x650], 0x249e
cmp dword [ebp - 0x650], 0x10d4
jge 0x1003f6d8
lea eax, [ebp - 0x6ac]
push eax
lea eax, [ebp - 0x358]
push eax
lea eax, [ebp - 0x1d8]
push eax
push 0x1000dddc
call fcn.10058fc2
add esp, 0x10
lea eax, [ebp - 0x658]
push eax
lea eax, [ebp - 0x360]
push eax
lea eax, [ebp - 0x1e0]
push eax
push 0x1000dddc
call fcn.10058fc2
add esp, 0x10
mov eax, dword [ebp - 0x1d8]
cmp eax, dword [ebp - 0x1e0]
jg 0x1003f69e
mov eax, dword [ebp - 0x1d8]
add eax, dword [ebp - 0x358]
mov ecx, dword [ebp - 0x1e0]
add ecx, dword [ebp - 0x360]
cmp eax, ecx
jg 0x1003f69e
mov eax, dword [ebp - 0x1d8]
add eax, dword [ebp - 0x358]
add eax, dword [ebp - 0x6ac]
mov ecx, dword [ebp - 0x1e0]
add ecx, dword [ebp - 0x360]
add ecx, dword [ebp - 0x658]
cmp eax, ecx
jg 0x1003f69e
mov dword [ebp - 0x368], 1
jmp 0x1003f6a5
and dword [ebp - 0x368], 0
mov al, byte [ebp - 0x368]
mov byte [ebp - 0x6b], al
movzx eax, byte [ebp - 0x6b]
test eax, eax
je 0x1003f6c2
mov dword [ebp - 0x370], 0x1000de90
jmp 0x1003f6cc
mov dword [ebp - 0x370], 0x1000de94
push dword [ebp - 0x370]
call fcn.10059662
pop ecx
movzx eax, byte [ebp - 0x79]
test eax, eax
je 0x1003f6f1
push 0xb1c
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_GetLocaleInfoW]
mov byte [ebp - 4], 0x12
lea ecx, [ebp - 0x584]
call fcn.10010e8d
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x7b0]
call fcn.10010e8d
mov dword [ebp - 0x5c], 0
jmp 0x1003f71f
mov eax, dword [ebp - 0x5c]
inc eax
mov dword [ebp - 0x5c], eax
cmp dword [ebp - 0x5c], 3
jge 0x1003f735
mov eax, dword [ebp - 0x5c]
mov dword [ebp + eax*4 - 0x110], 0xfffffffe
jmp 0x1003f718
mov dword [ebp - 0x5c], 0
jmp 0x1003f745
mov eax, dword [ebp - 0x5c]
inc eax
mov dword [ebp - 0x5c], eax
cmp dword [ebp - 0x5c], 2
jge 0x1003f75b
mov eax, dword [ebp - 0x5c]
mov dword [ebp + eax*4 - 0x550], 0xfffffffc
jmp 0x1003f73e
mov dword [ebp - 0xd0], 0xffffffff
mov dword [ebp - 0x174], 0
jmp 0x1003f77e
mov eax, dword [ebp - 0x174]
inc eax
mov dword [ebp - 0x174], eax
cmp dword [ebp - 0x174], 2
jge 0x1003f79a
mov eax, dword [ebp - 0x174]
mov dword [ebp + eax*4 - 0x838], 0xcff0ea75
jmp 0x1003f771
mov dword [ebp - 0xd0], 0
jmp 0x1003f7b3
mov eax, dword [ebp - 0xd0]
inc eax
mov dword [ebp - 0xd0], eax
cmp dword [ebp - 0xd0], 2
jge 0x1003f7cf
mov eax, dword [ebp - 0xd0]
mov dword [ebp + eax*4 - 0x838], 1
jmp 0x1003f7a6
mov byte [ebp - 0x6d], 0
push 0
push 0x5707
lea eax, [ebp - 0x6d]
push eax
push 0x416a
call fcn.10036ec3
add esp, 0x10
push 4
pop eax
imul eax, eax, 0
push 4
pop ecx
imul ecx, ecx, 0
mov ecx, dword [ebp + ecx - 0x110]
cmp dword [ebp + eax - 0x110], ecx
jl 0x1003f813
mov dword [ebp - 0x378], 1
jmp 0x1003f81a
and dword [ebp - 0x378], 0
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x110]
imul eax, dword [ebp - 0x378]
push 4
pop ecx
shl ecx, 1
imul eax, dword [ebp + ecx - 0x110]
test eax, eax
jne 0x1003f866
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x110], 0
jne 0x1003f866
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0x110], 0
jne 0x1003f866
and dword [ebp - 0x380], 0
jmp 0x1003f870
mov dword [ebp - 0x380], 1
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x110]
add eax, dword [ebp - 0x380]
cmp eax, 0xda2a
jg 0x1003f896
mov dword [ebp - 0x388], 1
jmp 0x1003f89d
and dword [ebp - 0x388], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x110]
cmp dword [ebp - 0x388], eax
jg 0x1003f8be
mov dword [ebp - 0x390], 1
jmp 0x1003f8c5
and dword [ebp - 0x390], 0
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x110]
add eax, dword [ebp - 0x390]
cmp eax, 0xffffffff
je 0x1003f8e8
mov dword [ebp - 0x398], 1
jmp 0x1003f8ef
and dword [ebp - 0x398], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x110]
cmp dword [ebp - 0x398], eax
jge 0x1003f910
mov dword [ebp - 0x3a0], 1
jmp 0x1003f917
and dword [ebp - 0x3a0], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x110]
cmp dword [ebp - 0x3a0], eax
jge 0x1003f938
mov dword [ebp - 0x3a8], 1
jmp 0x1003f93f
and dword [ebp - 0x3a8], 0
mov eax, dword [ebp - 0x2c]
cmp dword [ebp - 0x3a8], eax
jg 0x1003f956
mov dword [ebp - 0x3b0], 1
jmp 0x1003f95d
and dword [ebp - 0x3b0], 0
mov eax, dword [ebp - 0x3b0]
sub eax, dword [ebp - 0x2c]
jne 0x1003f978
push 0xfffffffffffffff8
pop eax
test eax, eax
jne 0x1003f978
and dword [ebp - 0x3b8], 0
jmp 0x1003f982
mov dword [ebp - 0x3b8], 1
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x110]
cmp dword [ebp - 0x3b8], eax
je 0x1003f9a3
mov dword [ebp - 0x6f4], 1
jmp 0x1003f9aa
and dword [ebp - 0x6f4], 0
mov eax, dword [ebp - 0x2c]
mov dword [ebp - 0x870], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x110]
mov dword [ebp - 0x8cc], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x110]
mov dword [ebp - 0x660], eax
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x660]
mov dword [ebp + eax - 0x550], ecx
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x550]
mov dword [ebp - 0xb8], eax
mov eax, dword [ebp - 0x2c]
cmp dword [ebp - 0xb8], eax
je 0x1003fa16
mov dword [ebp - 0x3c0], 1
jmp 0x1003fa1d
and dword [ebp - 0x3c0], 0
cmp dword [ebp - 0x3c0], 8
je 0x1003fa32
mov dword [ebp - 0x3c8], 1
jmp 0x1003fa39
and dword [ebp - 0x3c8], 0
cmp dword [ebp - 0x3c8], 1
jbe 0x1003fa4e
mov dword [ebp - 0x3d0], 1
jmp 0x1003fa55
and dword [ebp - 0x3d0], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x110]
imul eax, dword [ebp - 0x3d0]
push 4
pop ecx
imul ecx, ecx, 0
cmp eax, dword [ebp + ecx - 0x110]
jle 0x1003fa8d
mov eax, 0xad2c
test eax, eax
je 0x1003fa8d
mov dword [ebp - 0x3d8], 1
jmp 0x1003fa94
and dword [ebp - 0x3d8], 0
cmp dword [ebp - 0x3d8], 0xc1cc
jle 0x1003faac
mov dword [ebp - 0x3e0], 1
jmp 0x1003fab3
and dword [ebp - 0x3e0], 0
mov eax, dword [ebp - 0x2c]
cmp dword [ebp - 0x3e0], eax
jl 0x1003faca
mov dword [ebp - 0x3e8], 1
jmp 0x1003fad1
and dword [ebp - 0x3e8], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x110]
cmp eax, dword [ebp - 0x3e8]
je 0x1003faf2
mov dword [ebp - 0x3f0], 1
jmp 0x1003faf9
and dword [ebp - 0x3f0], 0
mov eax, dword [ebp - 0x2c]
cmp dword [ebp - 0x3f0], eax
jle 0x1003fb10
mov dword [ebp - 0x3f8], 1
jmp 0x1003fb17
and dword [ebp - 0x3f8], 0
cmp dword [ebp - 0x3f8], 0xffff
jae 0x1003fb2f
mov dword [ebp - 0x400], 1
jmp 0x1003fb36
and dword [ebp - 0x400], 0
cmp dword [ebp - 0x400], 0x3936
jl 0x1003fba3
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0x550], 0xffffffff
mov dword [ebp - 0xb8], 0
jmp 0x1003fb6c
mov eax, dword [ebp - 0xb8]
inc eax
mov dword [ebp - 0xb8], eax
cmp dword [ebp - 0xb8], 1
jg 0x1003fb9e
mov dword [ebp - 0x2c], 0
jmp 0x1003fb85
mov eax, dword [ebp - 0x2c]
inc eax
mov dword [ebp - 0x2c], eax
cmp dword [ebp - 0x2c], 1
jg 0x1003fb9c
mov eax, dword [ebp - 0x2c]
cmp dword [ebp + eax*4 - 0x550], 0
je 0x1003fb9a
jmp 0x1003fb9c
jmp 0x1003fb7e
jmp 0x1003fb5f
jmp 0x100402ff
push 3
lea ecx, [ebp - 0x218]
call fcn.10010e51
mov dword [ebp - 4], 0x14
mov dword [ebp - 0x20], 0x9dada439
mov dword [ebp - 0x428], 1
mov dword [ebp - 0x438], 5
mov dword [ebp - 0xd8], 0xa9634d71
mov dword [ebp - 0x5a0], 0xfffb
mov dword [ebp - 0x8d4], 0x2e7dfe98
push 0
lea eax, [ebp - 0x218]
push eax
lea eax, [ebp - 0x8dc]
push eax
call fcn.10031b26
add esp, 0xc
mov dword [ebp - 0x20], 2
jmp 0x1003fc18
cmp dword [ebp - 0x20], 0
jl 0x1003fe1e
push 2
lea ecx, [ebp - 0x728]
call fcn.10010e51
mov byte [ebp - 4], 0x15
mov dword [ebp - 0x17c], 0
jmp 0x1003fc4c
mov eax, dword [ebp - 0x17c]
inc eax
mov dword [ebp - 0x17c], eax
cmp dword [ebp - 0x17c], 2
jge 0x1003fc6e
push dword [ebp - 0x17c]
lea ecx, [ebp - 0x728]
call fcn.10010f08
mov dword [eax], 0xaae07ea4
jmp 0x1003fc3f
mov byte [ebp - 0x65], 0
movzx eax, byte [ebp - 0x65]
test eax, eax
je 0x1003fc82
push 0
call fcn.10031dc6
pop ecx
push dword [ebp - 0x20]
lea ecx, [ebp - 0x218]
call fcn.10010f08
cmp dword [eax], 0x1355fff8
jne 0x1003fca4
mov dword [ebp - 0x6b4], 1
jmp 0x1003fcab
and dword [ebp - 0x6b4], 0
mov eax, dword [ebp - 0x20]
add eax, 0xe974
jne 0x1003fcca
push 0xfffffffffffffffa
pop eax
test eax, eax
jne 0x1003fcca
push dword [ebp - 0x20]
lea ecx, [ebp - 0x218]
call fcn.10010f08
push 0
lea ecx, [ebp - 0x728]
call fcn.10010f08
and dword [eax], 0
cmp dword [ebp - 0x428], 0
jl 0x1003fcef
mov dword [ebp - 0x408], 1
jmp 0x1003fcf6
and dword [ebp - 0x408], 0
mov eax, dword [ebp - 0x408]
mov dword [ebp - 0x438], eax
push dword [ebp - 0x20]
lea ecx, [ebp - 0x218]
call fcn.10010f08
or eax, 0xffffffff
jae 0x1003fd21
mov dword [ebp - 0x410], 1
jmp 0x1003fd28
and dword [ebp - 0x410], 0
cmp dword [ebp - 0x410], 0xffff
je 0x1003fd40
mov dword [ebp - 0x418], 1
jmp 0x1003fd47
and dword [ebp - 0x418], 0
push dword [ebp - 0x20]
lea ecx, [ebp - 0x218]
call fcn.10010f08
mov ecx, dword [ebp - 0x418]
cmp ecx, dword [eax]
jge 0x1003fd6b
mov dword [ebp - 0x668], 1
jmp 0x1003fd72
and dword [ebp - 0x668], 0
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x8b8], eax
push 0
lea ecx, [ebp - 0x728]
call fcn.10010f08
cmp dword [eax], 0xa7fe
jne 0x1003fd9c
mov dword [ebp - 0x420], 1
jmp 0x1003fda3
and dword [ebp - 0x420], 0
cmp dword [ebp - 0x420], 0
jne 0x1003fdb8
mov dword [ebp - 0xd8], 0xe
jmp 0x1003fe37
mov eax, dword [ebp - 0xd8]
dec eax
mov dword [ebp - 0xd8], eax
cmp dword [ebp - 0xd8], 0xfffffff7
jg 0x1003ffe1
push 2
lea ecx, [ebp - 0x56c]
call fcn.10010e51
mov byte [ebp - 4], 0x16
mov dword [ebp - 0x59c], 0x97e65fb
mov dword [ebp - 0x470], 6
lea eax, [ebp - 0x56c]
push eax
push 0x5752
push 0x7bf5
push 0x363c
push 0
lea eax, [ebp - 0x864]
push eax
push 0x529f
push 0x51c6
call fcn.10031f8a
add esp, 0x20
push 1
lea ecx, [ebp - 0x56c]
call fcn.10010f08
mov esi, dword [ebp - 0x59c]
push 2
lea ecx, [ebp - 0x218]
call fcn.10010f08
cmp esi, dword [eax]
jne 0x1003feca
mov dword [ebp - 0x450], 1
jmp 0x1003fed1
and dword [ebp - 0x450], 0
push 1
lea ecx, [ebp - 0x56c]
call fcn.10010f08
cmp dword [eax], 0
jne 0x1003fefe
push 0
lea ecx, [ebp - 0x56c]
call fcn.10010f08
cmp dword [eax], 0
jne 0x1003fefe
and dword [ebp - 0x440], 0
jmp 0x1003ff08
mov dword [ebp - 0x440], 1
mov eax, dword [ebp - 0x5a0]
cmp eax, dword [ebp - 0x440]
jle 0x1003ff22
mov dword [ebp - 0x448], 1
jmp 0x1003ff29
and dword [ebp - 0x448], 0
cmp dword [ebp - 0x448], 0
je 0x1003ff3e
mov dword [ebp - 0x5a8], 1
jmp 0x1003ff45
and dword [ebp - 0x5a8], 0
mov eax, dword [ebp - 0x20]
cmp dword [ebp - 0x450], eax
jg 0x1003ff5c
mov dword [ebp - 0x458], 1
jmp 0x1003ff63
and dword [ebp - 0x458], 0
push 1
lea ecx, [ebp - 0x56c]
call fcn.10010f08
mov ecx, dword [ebp - 0x458]
cmp ecx, dword [eax]
jl 0x1003ff86
mov dword [ebp - 0x460], 1
jmp 0x1003ff8d
and dword [ebp - 0x460], 0
push 1
lea ecx, [ebp - 0x218]
call fcn.10010f08
mov ecx, dword [ebp - 0x460]
cmp ecx, dword [eax]
jne 0x1003ffb0
mov dword [ebp - 0x468], 1
jmp 0x1003ffb7
and dword [ebp - 0x468], 0
mov eax, dword [ebp - 0x468]
mov dword [ebp - 0x470], eax
mov dword [ebp - 0x470], 8
mov byte [ebp - 4], 0x14
lea ecx, [ebp - 0x56c]
call fcn.10010e8d
jmp 0x1003fe2a
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x218]
call fcn.10010e8d
mov dword [ebp - 0xe0], 0
mov dword [ebp - 0xe0], 0
jmp 0x10040013
mov eax, dword [ebp - 0xe0]
dec eax
mov dword [ebp - 0xe0], eax
cmp dword [ebp - 0xe0], 0xfffffff5
jl 0x1004005e
mov dword [ebp - 0x5b0], 0xb5a5
push 0x1679
lea eax, [ebp - 0x5b0]
push eax
lea eax, [ebp - 0xe0]
push eax
push 0x651
push 0
call fcn.10031e85
add esp, 0x14
mov byte [ebp - 0x6f], 0
movzx eax, byte [ebp - 0x6f]
test eax, eax
je 0x1004005c
push 0
call dword [sym.imp.KERNEL32.dll_GetFileType]
jmp 0x10040006
mov byte [ebp - 0x92], 0
mov dword [ebp - 0x594], 0x469ad59e
mov dword [ebp - 0x590], 0x469ad59e
mov dword [ebp - 0x58c], 0x469ad59e
mov dword [ebp - 0x588], 0x469ad59e
push 1
lea ecx, [ebp - 0x700]
call fcn.10010e51
mov dword [ebp - 4], 0x17
mov dword [ebp - 0x7e8], 0xffffffff
mov dword [ebp - 0x8d8], 0xfffffff6
mov dword [ebp - 0xe8], 0
jmp 0x100400ce
mov eax, dword [ebp - 0xe8]
inc eax
mov dword [ebp - 0xe8], eax
cmp dword [ebp - 0xe8], 1
jge 0x100400ea
mov eax, dword [ebp - 0xe8]
mov dword [ebp + eax*4 - 0x7f0], 0xffffffff
jmp 0x100400c1
push 0x1575
lea eax, [ebp - 0x700]
push eax
push 0x7dff
push 0
push 0x60e0
lea eax, [ebp - 0xe8]
push eax
call fcn.10049060
add esp, 0x18
push 4
pop eax
shl eax, 0
mov dword [ebp + eax - 0x594], 0
jmp 0x1004013f
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x594]
inc eax
push 4
pop ecx
shl ecx, 0
mov dword [ebp + ecx - 0x594], eax
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x594], 0
jg 0x10040165
push 0x5ec1
push 0
push 0x7841
call fcn.10031cae
add esp, 0xc
jmp 0x10040124
push 0
lea ecx, [ebp - 0x700]
call fcn.10010f08
and dword [eax], 0
jmp 0x1004019b
push 0
lea ecx, [ebp - 0x700]
call fcn.10010f08
cmp dword [eax], 3
jg 0x100402ca
push 3
lea ecx, [ebp - 0x8a4]
call fcn.10010e51
mov byte [ebp - 4], 0x18
mov dword [ebp - 0x18c], 0x3c576436
mov dword [ebp - 0x184], 0
jmp 0x100401e5
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x700]
call fcn.10010e8d
movzx eax, byte [ebp - 0x92]
test eax, eax
je 0x100402ff
cmp dword [ebp - 0x1e8], 0
jle 0x100404b4
mov dword [ebp - 0x194], 0x62d5e48d
mov dword [ebp - 0x5c0], 0x822e6e7f
mov dword [ebp - 0x194], 0
jmp 0x10040339
mov eax, dword [ebp - 0x194]
inc eax
mov dword [ebp - 0x194], eax
cmp dword [ebp - 0x194], 0x14
jl 0x10040394
mov dword [ebp - 0x19c], 0x665683c8
mov dword [ebp - 0x19c], 0
jmp 0x10040365
mov eax, dword [ebp - 0x19c]
inc eax
mov dword [ebp - 0x19c], eax
cmp dword [ebp - 0x19c], 0x16
je 0x10040392
mov dword [ebp - 0x5b8], 0xffffffff
push 0
lea eax, [ebp - 0x5b8]
push eax
lea eax, [ebp - 0x5c0]
push eax
call fcn.100333af
add esp, 0xc
jmp 0x10040358
jmp 0x1004032c
push 4
push 0x1000
push dword [ebp - 0x1e8]
mov eax, dword [ebp - 0x488]
mov ecx, dword [ebp - 0x5c8]
add ecx, dword [eax + 0xc]
push ecx
push 0x7f7e
push 0x9a52
call fcn.1002a58c
pop ecx
pop ecx
call eax
mov ecx, dword [ebp - 0x1f0]
mov dword [ecx], eax
mov dword [ebp - 0x90], 0
mov dword [ebp - 0x480], 0
mov eax, dword [ebp - 0x90]
mov ecx, dword [ebp - 0x90]
sub ecx, dword [ebp - 0x90]
sub eax, ecx
mov dword [ebp - 0x480], eax
mov dword [ebp - 0x90], 0xfffffffa
jmp 0x10040413
mov eax, dword [ebp - 0x90]
inc eax
mov dword [ebp - 0x90], eax
cmp dword [ebp - 0x90], 7
jne 0x1004047a
mov dword [ebp - 0x5d0], 0x9edbda7f
mov dword [ebp - 0x5e0], 1
mov dword [ebp - 0x5d8], 0x33582f80
push 1
push 1
push 0x1dd0
lea eax, [ebp - 0x5d0]
push eax
push 0
lea eax, [ebp - 0x5d8]
push eax
push 0x27dc
push 0x19ac
lea eax, [ebp - 0x5e0]
push eax
lea eax, [ebp - 0x480]
push eax
push 0x48a7
call fcn.10033aa4
add esp, 0x2c
jmp 0x10040406
lea eax, [ebp - 0x488]
push eax
push 0
lea eax, [ebp - 0x1f0]
push eax
push 0x64b5
push 0x7336
call fcn.100344f5
add esp, 0x14
push dword [ebp - 0x1e8]
push 0
mov eax, dword [ebp - 0x1f0]
push dword [eax]
call fcn.1002a7c8
add esp, 0xc
jmp 0x100404c1
push 0xace
call dword [sym.imp.USER32.dll_GetSystemMetrics]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
mov esp, ebp
pop ebp
ret