Function at 0x100386c8
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x2c0
push edi
mov dword [ebp - 0xac], 0
mov dword [ebp - 0x10], 0
mov dword [ebp - 0xc], 2
mov eax, dword [0x1012a2e0]
mov dword [ebp - 0x180], eax
mov cl, byte [0x1012a2e4]
mov byte [ebp - 0x17c], cl
xor edx, edx
mov dword [ebp - 0x17b], edx
mov byte [ebp - 0x177], dl
mov ax, word [0x1012a2e8]
mov word [ebp - 0xa8], ax
xor ecx, ecx
mov word [ebp - 0xa6], cx
mov byte [ebp - 0xa4], cl
mov dx, word [0x1012a2ec]
mov word [ebp - 0x18c], dx
xor eax, eax
mov word [ebp - 0x18a], ax
mov byte [ebp - 0x188], al
mov byte [ebp - 0x210], 0
mov byte [ebp - 0x214], 0
mov byte [ebp - 0x9c], 0
mov byte [ebp - 0x184], 0
mov byte [ebp - 0xa0], 0
mov cl, byte [0x1017f6b8]
mov byte [ebp - 0x160], cl
mov ecx, 0x1f
xor eax, eax
lea edi, [ebp - 0x15f]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
mov dl, byte [0x1017f6bc]
mov byte [ebp - 0x20c], dl
mov ecx, 0x1f
xor eax, eax
lea edi, [ebp - 0x20b]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
mov al, byte [0x1017f6c0]
mov byte [ebp - 0x174], al
xor ecx, ecx
mov dword [ebp - 0x173], ecx
mov dword [ebp - 0x16f], ecx
mov dword [ebp - 0x16b], ecx
mov word [ebp - 0x167], cx
mov dl, byte [0x1017f6c4]
mov byte [ebp - 0x98], dl
mov ecx, 0x1f
xor eax, eax
lea edi, [ebp - 0x97]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
mov al, byte [0x1017f6c8]
mov byte [ebp - 0xe0], al
mov ecx, 0xc
xor eax, eax
lea edi, [ebp - 0xdf]
rep stosd dword es:[edi], eax
stosb byte es:[edi], al
mov ecx, dword [ebp + 0xc]
mov edx, dword [ecx]
mov eax, dword [ebp + 0x10]
mov cl, byte [edx + eax + 1]
mov byte [ebp - 0x9c], cl
mov dl, byte [ebp - 0x9c]
shr dl, 3
mov byte [ebp - 0x9c], dl
mov al, byte [ebp - 0x9c]
and al, 7
mov byte [ebp - 0x9c], al
mov ecx, dword [ebp + 0xc]
mov edx, dword [ecx]
mov eax, dword [ebp + 0x10]
xor ecx, ecx
mov cl, byte [edx + eax + 1]
sar ecx, 6
mov byte [ebp - 0x184], cl
mov edx, dword [ebp + 0xc]
mov eax, dword [edx]
mov ecx, dword [ebp + 0x10]
xor edx, edx
mov dl, byte [eax + ecx]
mov dword [ebp - 0x274], edx
cmp dword [ebp - 0x274], 0xfe
ja case.0x1003887d.36
mov ecx, dword [ebp - 0x274]
xor eax, eax
mov al, byte [ecx + 0x1003dcfc]
jmp dword [eax*4 + 0x1003dc68]
mov byte [ebp + 0x30], 0
mov byte [ebp + 0x34], 1
mov edx, dword [str.Word]
push edx
lea eax, [ebp - 0x180]
push eax
call sub.MSVCRT.dll_strcpy
add esp, 8
jmp case.0x1003887d.36
mov byte [ebp + 0x30], 0
mov byte [ebp + 0x34], 1
mov ecx, dword [ebp - 0x9c]
and ecx, 0xff
mov dword [ebp - 0x278], ecx
cmp dword [ebp - 0x278], 7
ja case.default.0x100388d0
mov edx, dword [ebp - 0x278]
jmp dword [edx*4 + 0x1003ddfb]
mov eax, dword [str.Fword]
push eax
lea ecx, [ebp - 0x180]
push ecx
call sub.MSVCRT.dll_strcpy
add esp, 8
jmp case.default.0x100388d0
mov edx, dword [str.Word]
push edx
lea eax, [ebp - 0x180]
push eax
call sub.MSVCRT.dll_strcpy
add esp, 8
jmp case.default.0x100388d0
mov ecx, dword [0x10127820]
push ecx
lea edx, [ebp - 0x180]
push edx
call sub.MSVCRT.dll_strcpy
add esp, 8
jmp case.0x1003887d.36
mov byte [ebp + 0x30], 1
mov byte [ebp + 0x34], 1
mov eax, dword [str.Dword]
push eax
lea ecx, [ebp - 0x180]
push ecx
call sub.MSVCRT.dll_strcpy
add esp, 8
jmp case.0x1003887d.36
mov byte [ebp + 0x30], 1
mov byte [ebp + 0x34], 1
mov edx, dword [str.Qword]
push edx
lea eax, [ebp - 0x180]
push eax
call sub.MSVCRT.dll_strcpy
add esp, 8
jmp case.0x1003887d.36
mov byte [ebp + 0x30], 1
mov byte [ebp + 0x34], 1
mov ecx, dword [str.DQword]
push ecx
lea edx, [ebp - 0x180]
push edx
call sub.MSVCRT.dll_strcpy
add esp, 8
jmp case.0x1003887d.36
mov byte [ebp + 0x30], 0
mov byte [ebp + 0x34], 1
mov eax, dword [str.DQword]
push eax
lea ecx, [ebp - 0x180]
push ecx
call sub.MSVCRT.dll_strcpy
add esp, 8
jmp case.0x1003887d.36
mov byte [ebp + 0x30], 1
mov byte [ebp + 0x34], 1
mov edx, dword [str.Qword]
push edx
lea eax, [ebp - 0x180]
push eax
call sub.MSVCRT.dll_strcpy
add esp, 8
jmp case.0x1003887d.36
mov byte [ebp + 0x30], 0
mov byte [ebp + 0x34], 1
mov ecx, dword [str.Qword]
push ecx
lea edx, [ebp - 0x180]
push edx
call sub.MSVCRT.dll_strcpy
add esp, 8
jmp case.0x1003887d.36
mov byte [ebp + 0x30], 1
mov byte [ebp + 0x34], 1
mov eax, dword [str.DQword]
push eax
lea ecx, [ebp - 0x180]
push ecx
call sub.MSVCRT.dll_strcpy
add esp, 8
jmp case.0x1003887d.36
mov byte [ebp + 0x30], 1
mov byte [ebp + 0x34], 1
mov edx, dword [str.Qword]
push edx
lea eax, [ebp - 0x180]
push eax
call sub.MSVCRT.dll_strcpy
add esp, 8
jmp case.0x1003887d.36
mov byte [ebp + 0x30], 1
mov byte [ebp + 0x34], 1
mov ecx, dword [str.DQword]
push ecx
lea edx, [ebp - 0x180]
push edx
call sub.MSVCRT.dll_strcpy
add esp, 8
jmp case.0x1003887d.36
mov byte [ebp + 0x30], 0
mov byte [ebp + 0x34], 1
mov eax, dword [str.DQword]
push eax
lea ecx, [ebp - 0x180]
push ecx
call sub.MSVCRT.dll_strcpy
add esp, 8
jmp case.0x1003887d.36
mov byte [ebp + 0x30], 1
mov byte [ebp + 0x34], 1
mov edx, dword [ebp + 0x20]
and edx, 0xff
and edx, 0xf
sub edx, 8
mov dword [ebp - 0x27c], edx
mov eax, dword [ebp - 0x27c]
sub eax, 2
mov dword [ebp - 0x27c], eax
cmp dword [ebp - 0x27c], 5
ja case.0x10038ab6.1
mov ecx, dword [ebp - 0x27c]
jmp dword [ecx*4 + 0x1003de1b]
mov edx, dword [str.Qword]
push edx
lea eax, [ebp - 0x180]
push eax
call sub.MSVCRT.dll_strcpy
add esp, 8
jmp case.0x10038ab6.1
mov ecx, dword [str.DQword]
push ecx
lea edx, [ebp - 0x180]
push edx
call sub.MSVCRT.dll_strcpy
add esp, 8
jmp case.0x10038ab6.1
mov eax, dword [str.Dword]
push eax
lea ecx, [ebp - 0x180]
push ecx
call sub.MSVCRT.dll_strcpy
add esp, 8
jmp case.0x1003887d.36
mov byte [ebp + 0x30], 1
mov byte [ebp + 0x34], 1
mov edx, dword [str.Dword]
push edx
lea eax, [ebp - 0x180]
push eax
call sub.MSVCRT.dll_strcpy
add esp, 8
jmp case.0x1003887d.36
mov byte [ebp + 0x30], 1
mov byte [ebp + 0x34], 1
mov ecx, dword [str.DQword]
push ecx
lea edx, [ebp - 0x180]
push edx
call sub.MSVCRT.dll_strcpy
add esp, 8
jmp case.0x1003887d.36
mov byte [ebp + 0x30], 1
mov byte [ebp + 0x34], 1
mov eax, dword [ebp + 0x20]
and eax, 0xff
and eax, 0xf
cmp eax, 0xe
jne 0x10038b7d
mov ecx, dword [str.Dword]
push ecx
lea edx, [ebp - 0x180]
push edx
call sub.MSVCRT.dll_strcpy
add esp, 8
jmp 0x10038b92
mov eax, dword [str.Qword]
push eax
lea ecx, [ebp - 0x180]
push ecx
call sub.MSVCRT.dll_strcpy
add esp, 8
jmp case.0x1003887d.36
mov byte [ebp + 0x30], 1
mov byte [ebp + 0x34], 1
mov edx, dword [str.Qword]
push edx
lea eax, [ebp - 0x180]
push eax
call sub.MSVCRT.dll_strcpy
add esp, 8
jmp case.0x1003887d.36
mov byte [ebp + 0x30], 0
mov byte [ebp + 0x34], 1
mov ecx, dword [str.Dword]
push ecx
lea edx, [ebp - 0x180]
push edx
call sub.MSVCRT.dll_strcpy
add esp, 8
jmp case.0x1003887d.36
mov byte [ebp + 0x30], 0
mov byte [ebp + 0x34], 1
mov eax, dword [str.Qword]
push eax
lea ecx, [ebp - 0x180]
push ecx
call sub.MSVCRT.dll_strcpy
add esp, 8
jmp case.0x1003887d.36
mov byte [ebp + 0x30], 1
mov byte [ebp + 0x34], 1
mov edx, dword [0x10127820]
push edx
lea eax, [ebp - 0x180]
push eax
call sub.MSVCRT.dll_strcpy
add esp, 8
jmp case.0x1003887d.36
mov byte [ebp + 0x30], 0
mov byte [ebp + 0x34], 1
mov ecx, dword [str.Dword]
push ecx
lea edx, [ebp - 0x180]
push edx
call sub.MSVCRT.dll_strcpy
add esp, 8
jmp case.0x1003887d.36
mov byte [ebp + 0x30], 1
mov byte [ebp + 0x34], 1
mov eax, dword [ebp - 0x9c]
and eax, 0xff
cmp eax, 2
jge 0x10038c75
mov ecx, dword [str._512_Byte]
push ecx
lea edx, [ebp - 0x180]
push edx
call sub.MSVCRT.dll_strcpy
add esp, 8
jmp 0x10038c8a
mov eax, dword [str.Dword]
push eax
lea ecx, [ebp - 0x180]
push ecx
call sub.MSVCRT.dll_strcpy
add esp, 8
jmp case.0x1003887d.36
mov byte [ebp + 0x30], 1
mov byte [ebp + 0x34], 1
mov edx, dword [str.Dword]
push edx
lea eax, [ebp - 0x180]
push eax
call sub.MSVCRT.dll_strcpy
add esp, 8
jmp case.0x1003887d.36
mov byte [ebp + 0x30], 0
mov byte [ebp + 0x34], 1
mov ecx, dword [0x10127820]
push ecx
lea edx, [ebp - 0x180]
push edx
call sub.MSVCRT.dll_strcpy
add esp, 8
jmp case.0x1003887d.36
mov byte [ebp + 0x30], 0
mov byte [ebp + 0x34], 1
mov eax, dword [str.Dword]
push eax
lea ecx, [ebp - 0x180]
push ecx
call sub.MSVCRT.dll_strcpy
add esp, 8
jmp case.0x1003887d.36
mov byte [ebp + 0x30], 1
mov byte [ebp + 0x34], 1
mov edx, dword [str.Fword]
push edx
lea eax, [ebp - 0x180]
push eax
call sub.MSVCRT.dll_strcpy
add esp, 8
jmp case.0x1003887d.36
mov byte [ebp + 0x30], 1
mov byte [ebp + 0x34], 1
mov ecx, dword [0x10127820]
push ecx
lea edx, [ebp - 0x180]
push edx
call sub.MSVCRT.dll_strcpy
add esp, 8
jmp case.0x1003887d.36
mov byte [ebp + 0x30], 1
mov byte [ebp + 0x34], 1
mov eax, dword [str.Word]
push eax
lea ecx, [ebp - 0x180]
push ecx
call sub.MSVCRT.dll_strcpy
add esp, 8
jmp case.0x1003887d.36
mov byte [ebp + 0x30], 1
mov byte [ebp + 0x34], 1
mov edx, dword [str.Dword]
push edx
lea eax, [ebp - 0x180]
push eax
call sub.MSVCRT.dll_strcpy
add esp, 8
jmp case.0x1003887d.36
mov byte [ebp + 0x30], 0
mov byte [ebp + 0x34], 1
mov ecx, dword [0x10127820]
push ecx
lea edx, [ebp - 0x180]
push edx
call sub.MSVCRT.dll_strcpy
add esp, 8
jmp case.0x1003887d.36
mov byte [ebp + 0x30], 0
mov byte [ebp + 0x34], 1
mov eax, dword [str.Dword]
push eax
lea ecx, [ebp - 0x180]
push ecx
call sub.MSVCRT.dll_strcpy
add esp, 8
jmp case.0x1003887d.36
mov byte [ebp + 0x30], 1
mov byte [ebp + 0x34], 1
mov edx, dword [str.DQword]
push edx
lea eax, [ebp - 0x180]
push eax
call sub.MSVCRT.dll_strcpy
add esp, 8
jmp case.0x1003887d.36
mov byte [ebp + 0x30], 1
mov byte [ebp + 0x34], 1
mov ecx, dword [str.Word]
push ecx
lea edx, [ebp - 0x180]
push edx
call sub.MSVCRT.dll_strcpy
add esp, 8
jmp case.0x1003887d.36
mov byte [ebp + 0x30], 1
mov byte [ebp + 0x34], 1
mov eax, dword [str.Qword]
push eax
lea ecx, [ebp - 0x180]
push ecx
call sub.MSVCRT.dll_strcpy
add esp, 8
jmp case.0x1003887d.36
mov byte [ebp + 0x30], 1
mov byte [ebp + 0x34], 1
mov edx, dword [str.Qword]
push edx
lea eax, [ebp - 0x180]
push eax
call sub.MSVCRT.dll_strcpy
add esp, 8
jmp case.0x1003887d.36
mov byte [ebp + 0x30], 0
mov byte [ebp + 0x34], 1
mov ecx, dword [str.Qword]
push ecx
lea edx, [ebp - 0x180]
push edx
call sub.MSVCRT.dll_strcpy
add esp, 8
mov eax, dword [ebp + 0x34]
and eax, 0xff
cmp eax, 1
jne 0x10038e7b
mov dword [ebp - 0xac], 2
mov ecx, dword [ebp + 0x24]
and ecx, 0xff
cmp ecx, 1
jne 0x10038fe4
mov byte [ebp - 0x238], 2
mov byte [ebp - 0x237], 3
mov byte [ebp - 0x236], 0x2e
mov byte [ebp - 0x235], 0x2f
mov byte [ebp - 0x234], 0x6e
mov byte [ebp - 0x233], 0x7e
mov byte [ebp - 0x232], 0xa3
mov byte [ebp - 0x231], 0xa4
mov byte [ebp - 0x230], 0xa5
mov byte [ebp - 0x22f], 0xab
mov byte [ebp - 0x22e], 0xac
mov byte [ebp - 0x22d], 0xad
mov byte [ebp - 0x22c], 0xaf
mov byte [ebp - 0x22b], 0xb1
mov byte [ebp - 0x22a], 0xb3
mov byte [ebp - 0x229], 0xbb
mov byte [ebp - 0x228], 0xbc
mov byte [ebp - 0x227], 0xbd
mov byte [ebp - 0x226], 0xc1
mov byte [ebp - 0x225], 0x40
mov byte [ebp - 0x224], 0x41
mov byte [ebp - 0x223], 0x42
mov byte [ebp - 0x222], 0x43
mov byte [ebp - 0x221], 0x44
mov byte [ebp - 0x220], 0x45
mov byte [ebp - 0x21f], 0x46
mov byte [ebp - 0x21e], 0x47
mov byte [ebp - 0x21d], 0x48
mov byte [ebp - 0x21c], 0x49
mov byte [ebp - 0x21b], 0x4a
mov byte [ebp - 0x21a], 0x4b
mov byte [ebp - 0x219], 0x4c
mov byte [ebp - 0x218], 0x4d
mov byte [ebp - 0x217], 0x4e
mov byte [ebp - 0x216], 0x4f
mov dword [ebp - 0x23c], 0
jmp 0x10038f9d
mov edx, dword [ebp - 0x23c]
add edx, 1
mov dword [ebp - 0x23c], edx
cmp dword [ebp - 0x23c], 0x23
jge 0x10038fe4
mov eax, dword [ebp + 0x20]
and eax, 0xff
mov ecx, dword [ebp - 0x23c]
xor edx, edx
mov dl, byte [ebp + ecx - 0x238]
cmp eax, edx
jne 0x10038fe2
mov dword [ebp - 0xac], 1
mov eax, dword [str.Word]
push eax
lea ecx, [ebp - 0x180]
push ecx
call sub.MSVCRT.dll_strcpy
add esp, 8
jmp 0x10038fe4
jmp 0x10038f8e
mov edx, dword [ebp + 0x38]
and edx, 0xff
cmp edx, 1
jne 0x10039007
mov eax, dword [str.Dword]
push eax
lea ecx, [ebp - 0x180]
push ecx
call sub.MSVCRT.dll_strcpy
add esp, 8
mov edx, dword [ebp + 0xc]
mov eax, dword [edx]
mov ecx, dword [ebp + 0x10]
xor edx, edx
mov dl, byte [eax + ecx + 1]
and edx, 7
mov dword [ebp - 0x14], edx
mov eax, dword [ebp + 0x2c]
and eax, 0xff
cmp eax, 1
jne 0x1003a894
mov ecx, dword [ebp + 0xc]
mov edx, dword [ecx]
mov eax, dword [ebp + 0x10]
xor ecx, ecx
mov cl, byte [edx + eax + 1]
and ecx, 0xf
mov byte [ebp - 0xa0], cl
mov edx, dword [ebp + 0xc]
mov eax, dword [edx]
mov ecx, dword [ebp + 0x10]
xor edx, edx
mov dl, byte [eax + ecx + 1]
and edx, 0x38
sar edx, 3
mov byte [ebp - 0x210], dl
mov eax, dword [ebp - 0xa0]
and eax, 0xff
mov dword [ebp - 0x280], eax
cmp dword [ebp - 0x280], 0xf
ja case.default.0x10039081
mov ecx, dword [ebp - 0x280]
jmp dword [ecx*4 + 0x1003de33]
mov edx, dword [str.BXSI]
push edx
push 0x1012a2f0
lea eax, [ebp - 0x174]
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0xc
mov dword [ebp + 0x18], 3
jmp case.default.0x10039081
mov ecx, dword [str.BXDI]
push ecx
push 0x1012a2f4
lea edx, [ebp - 0x174]
push edx
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0xc
mov dword [ebp + 0x18], 3
jmp case.default.0x10039081
mov eax, dword [str.BPSI]
push eax
push 0x1012a2f8
lea ecx, [ebp - 0x174]
push ecx
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0xc
mov dword [ebp + 0x18], 2
jmp case.default.0x10039081
mov edx, dword [str.BPDI]
push edx
push 0x1012a2fc
lea eax, [ebp - 0x174]
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0xc
mov dword [ebp + 0x18], 2
jmp case.default.0x10039081
mov ecx, dword [0x10127880]
push ecx
push 0x1012a300
lea edx, [ebp - 0x174]
push edx
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0xc
mov dword [ebp + 0x18], 3
jmp case.default.0x10039081
mov eax, dword [0x10127884]
push eax
push 0x1012a304
lea ecx, [ebp - 0x174]
push ecx
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0xc
mov dword [ebp + 0x18], 3
jmp case.default.0x10039081
mov edx, dword [ebp - 0x184]
and edx, 0xff
test edx, edx
jne 0x100391de
mov dword [ebp + 0x18], 3
lea eax, [ebp - 8]
push eax
lea ecx, [ebp - 0x164]
push ecx
mov edx, dword [ebp + 0xc]
mov eax, dword [edx]
mov ecx, dword [ebp + 0x10]
lea edx, [eax + ecx + 2]
push edx
call fcn.1003e63e
add esp, 0xc
mov eax, dword [ebp - 8]
and eax, 0xffff
push eax
push 0x1012a308
lea ecx, [ebp - 0x174]
push ecx
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0xc
mov edx, dword [ebp + 0x1c]
mov eax, dword [edx]
mov ecx, dword [eax]
add ecx, 2
mov edx, dword [ebp + 0x1c]
mov eax, dword [edx]
mov dword [eax], ecx
jmp 0x10039201
mov dword [ebp + 0x18], 2
mov ecx, dword [0x1012788c]
push ecx
push 0x1012a310
lea edx, [ebp - 0x174]
push edx
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0xc
jmp case.default.0x10039081
mov eax, dword [0x10127888]
push eax
push 0x1012a314
lea ecx, [ebp - 0x174]
push ecx
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0xc
mov dword [ebp + 0x18], 3
mov dl, byte [ebp - 0x184]
mov byte [ebp - 0x284], dl
cmp byte [ebp - 0x284], 0
je 0x10039259
cmp byte [ebp - 0x284], 1
je 0x10039386
cmp byte [ebp - 0x284], 2
je 0x100394bc
jmp 0x10039594
lea eax, [ebp - 0x174]
push eax
mov ecx, dword [ebp + 0x18]
mov edx, dword [ecx*4 + 0x1012783c]
push edx
lea eax, [ebp - 0x180]
push eax
push 0x1012a318
lea ecx, [ebp - 0x20c]
push ecx
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0x14
lea edx, [ebp - 8]
push edx
lea eax, [ebp - 0x164]
push eax
mov ecx, dword [ebp + 0xc]
mov edx, dword [ecx]
add edx, dword [ebp + 0x10]
push edx
call fcn.1003e63e
add esp, 0xc
lea eax, [ebp - 4]
push eax
lea ecx, [ebp - 0x18]
push ecx
mov edx, dword [ebp + 0xc]
mov eax, dword [edx]
mov ecx, dword [ebp + 0x10]
lea edx, [eax + ecx + 2]
push edx
call fcn.1003e679
add esp, 0xc
mov eax, dword [ebp - 0x164]
and eax, 0xffff
and eax, 0xff
and eax, 0xf
cmp eax, 6
jne 0x1003932a
mov ecx, dword [ebp - 0x18]
push ecx
push 0x1012a328
lea edx, [ebp - 0x160]
push edx
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0xc
mov eax, dword [ebp + 8]
mov ecx, dword [eax]
mov byte [ecx + 0x240], 4
lea edx, [ebp - 0x160]
push edx
mov eax, dword [ebp + 8]
mov ecx, dword [eax]
add ecx, 0x200
push ecx
call dword [sym.imp.KERNEL32.dll_lstrcatA]
mov edx, dword [ebp + 0xc]
mov eax, dword [edx]
mov ecx, dword [ebp + 0x10]
mov dl, byte [eax + ecx + 4]
mov byte [ebp - 0xa0], dl
jmp 0x10039381
mov eax, dword [ebp - 0x164]
and eax, 0xffff
push eax
push 0x1012a330
lea ecx, [ebp - 0x160]
push ecx
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0xc
mov edx, dword [ebp + 8]
mov eax, dword [edx]
mov byte [eax + 0x240], 2
lea ecx, [ebp - 0x160]
push ecx
mov edx, dword [ebp + 8]
mov eax, dword [edx]
add eax, 0x200
push eax
call dword [sym.imp.KERNEL32.dll_lstrcatA]
mov ecx, dword [ebp + 0xc]
mov edx, dword [ecx]
mov eax, dword [ebp + 0x10]
mov cl, byte [edx + eax + 2]
mov byte [ebp - 0xa0], cl
jmp 0x10039594
lea edx, [ebp - 8]
push edx
lea eax, [ebp - 0x164]
push eax
mov ecx, dword [ebp + 0xc]
mov edx, dword [ecx]
mov eax, dword [ebp + 0x10]
lea ecx, [edx + eax + 1]
push ecx
call fcn.1003e63e
add esp, 0xc
mov edx, dword [ebp - 0x164]
and edx, 0xffff
and edx, 0xff
mov byte [ebp - 0xa0], dl
mov eax, dword [ebp - 0xa0]
and eax, 0xff
cmp eax, 0x7f
jle 0x10039402
mov ecx, dword [0x1012785c]
push ecx
push 0x1012a338
lea edx, [ebp - 0xa8]
push edx
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0xc
mov eax, dword [ebp - 0xa0]
and eax, 0xff
mov ecx, pe_nt_image_headers32
sub ecx, eax
mov byte [ebp - 0xa0], cl
mov edx, dword [ebp - 0x164]
and edx, 0xffff
push edx
mov eax, dword [ebp + 0x20]
and eax, 0xff
push eax
push 0x1012a33c
lea ecx, [ebp - 0x160]
push ecx
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0x10
lea edx, [ebp - 0x160]
push edx
mov eax, dword [ebp + 8]
mov ecx, dword [eax]
add ecx, 0x200
push ecx
call dword [sym.imp.KERNEL32.dll_lstrcatA]
mov edx, dword [ebp - 0xa0]
and edx, 0xff
push edx
lea eax, [ebp - 0xa8]
push eax
lea ecx, [ebp - 0x174]
push ecx
mov edx, dword [ebp + 0x18]
mov eax, dword [edx*4 + 0x1012783c]
push eax
lea ecx, [ebp - 0x180]
push ecx
push 0x1012a348
lea edx, [ebp - 0x20c]
push edx
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0x1c
mov eax, dword [ebp + 0x1c]
mov ecx, dword [eax]
mov edx, dword [ecx]
add edx, 1
mov eax, dword [ebp + 0x1c]
mov ecx, dword [eax]
mov dword [ecx], edx
mov edx, dword [ebp + 8]
mov eax, dword [edx]
mov byte [eax + 0x240], 3
mov ecx, dword [ebp + 0xc]
mov edx, dword [ecx]
mov eax, dword [ebp + 0x10]
mov cl, byte [edx + eax + 3]
mov byte [ebp - 0xa0], cl
jmp 0x10039594
lea edx, [ebp - 4]
push edx
lea eax, [ebp - 0x18]
push eax
mov ecx, dword [ebp + 0xc]
mov edx, dword [ecx]
add edx, dword [ebp + 0x10]
push edx
call fcn.1003e679
add esp, 0xc
lea eax, [ebp - 8]
push eax
lea ecx, [ebp - 0x164]
push ecx
mov edx, dword [ebp + 0xc]
mov eax, dword [edx]
mov ecx, dword [ebp + 0x10]
lea edx, [eax + ecx + 2]
push edx
call fcn.1003e63e
add esp, 0xc
mov eax, dword [ebp - 0x18]
push eax
push 0x1012a360
lea ecx, [ebp - 0x160]
push ecx
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0xc
mov edx, dword [ebp + 8]
mov eax, dword [edx]
mov byte [eax + 0x240], 4
lea ecx, [ebp - 0x160]
push ecx
mov edx, dword [ebp + 8]
mov eax, dword [edx]
add eax, 0x200
push eax
call dword [sym.imp.KERNEL32.dll_lstrcatA]
mov ecx, dword [ebp - 8]
and ecx, 0xffff
push ecx
lea edx, [ebp - 0xa8]
push edx
lea eax, [ebp - 0x174]
push eax
mov ecx, dword [ebp + 0x18]
mov edx, dword [ecx*4 + 0x1012783c]
push edx
lea eax, [ebp - 0x180]
push eax
push str._s_ptr__s:__s_s_04X_
lea ecx, [ebp - 0x20c]
push ecx
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0x1c
mov edx, dword [ebp + 0x1c]
mov eax, dword [edx]
mov ecx, dword [eax]
add ecx, 2
mov edx, dword [ebp + 0x1c]
mov eax, dword [edx]
mov dword [eax], ecx
mov ecx, dword [ebp + 0xc]
mov edx, dword [ecx]
mov eax, dword [ebp + 0x10]
mov cl, byte [edx + eax + 4]
mov byte [ebp - 0xa0], cl
mov dl, byte [ebp + 0x30]
mov byte [ebp - 0x288], dl
cmp byte [ebp - 0x288], 0
je 0x100395b8
cmp byte [ebp - 0x288], 1
je 0x10039ad3
jmp 0x1003a87e
mov eax, dword [ebp + 0x20]
and eax, 0xff
mov dword [ebp - 0x28c], eax
cmp dword [ebp - 0x28c], 0xe7
ja case.0x100395e4.14
mov edx, dword [ebp - 0x28c]
xor ecx, ecx
mov cl, byte [edx + 0x1003deaf]
jmp dword [ecx*4 + 0x1003de73]
lea eax, [ebp - 0x20c]
push eax
mov ecx, dword [ebp - 0x9c]
and ecx, 0xff
mov edx, dword [ecx*4 + 0x10127a50]
push edx
push 0x1012a380
lea eax, [ebp - 0x98]
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0x10
mov ecx, dword [ebp - 0x9c]
and ecx, 0xff
cmp ecx, 5
jle 0x10039642
push 0x1012a388
mov edx, dword [ebp + 8]
mov eax, dword [edx]
add eax, 0x100
push eax
call dword [sym.imp.KERNEL32.dll_lstrcatA]
jmp case.0x100395e4.14
lea ecx, [ebp - 0x20c]
push ecx
mov edx, dword [ebp - 0x9c]
and edx, 0xff
mov eax, dword [edx*4 + 0x10127a70]
push eax
push 0x1012a39c
lea ecx, [ebp - 0x98]
push ecx
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0x10
mov edx, dword [ebp - 0x9c]
and edx, 0xff
cmp edx, 5
jne 0x1003969f
push 0x1012a3a4
mov eax, dword [ebp + 8]
mov ecx, dword [eax]
add ecx, 0x100
push ecx
call dword [sym.imp.KERNEL32.dll_lstrcatA]
jmp case.0x100395e4.14
mov edx, dword [ebp + 0x38]
and edx, 0xff
cmp edx, 1
jne 0x1003970f
mov eax, dword [ebp - 0x9c]
and eax, 0xff
mov ecx, dword [eax*4 + 0x10127a30]
push ecx
lea edx, [ebp - 0x20c]
push edx
push 0x1012a3b8
lea eax, [ebp - 0x98]
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0x10
push 0x1017f6cc
mov ecx, dword [ebp + 8]
mov edx, dword [ecx]
push edx
call sub.MSVCRT.dll_strcpy
add esp, 8
mov eax, dword [ebp + 8]
mov ecx, dword [eax]
mov dl, byte [ecx + 0x240]
add dl, 1
mov eax, dword [ebp + 8]
mov ecx, dword [eax]
mov byte [ecx + 0x240], dl
jmp 0x1003973f
mov edx, dword [ebp - 0x9c]
and edx, 0xff
mov eax, dword [edx*4 + 0x10127a30]
push eax
lea ecx, [ebp - 0x20c]
push ecx
push 0x1012a3c4
lea edx, [ebp - 0x98]
push edx
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0x10
jmp case.0x100395e4.14
mov eax, dword [ebp - 0x9c]
and eax, 0xff
mov ecx, dword [eax*4 + 0x10127a30]
push ecx
lea edx, [ebp - 0x20c]
push edx
push 0x1012a3d4
lea eax, [ebp - 0x98]
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0x10
jmp case.0x100395e4.14
mov ecx, dword [ebp - 0x9c]
and ecx, 0xff
mov edx, dword [ecx*4 + 0x10127a30]
push edx
lea eax, [ebp - 0x20c]
push eax
push 0x1012a3e4
lea ecx, [ebp - 0x98]
push ecx
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0x10
jmp case.0x100395e4.14
mov edx, dword [ebp - 0x9c]
and edx, 0xff
mov eax, dword [edx*4 + 0x10127a30]
push eax
lea ecx, [ebp - 0x20c]
push ecx
push 0x1012a3f4
lea edx, [ebp - 0x98]
push edx
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0x10
jmp case.0x100395e4.14
mov eax, dword [ebp - 0x9c]
and eax, 0xff
mov ecx, dword [eax*4 + 0x10127a10]
push ecx
lea edx, [ebp - 0x20c]
push edx
mov eax, dword [ebp + 0x20]
and eax, 0xff
and eax, 0xf
mov ecx, dword [eax*4 + 0x10127b90]
push ecx
push 0x1012a404
lea edx, [ebp - 0x98]
push edx
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0x14
jmp case.0x100395e4.14
mov eax, dword [ebp - 0xac]
imul eax, eax, 0x24
mov ecx, dword [ebp - 0x9c]
and ecx, 0xff
mov edx, dword [eax + ecx*4 + 0x101277a8]
push edx
lea eax, [ebp - 0x20c]
push eax
mov ecx, dword [ebp + 0x20]
and ecx, 0xff
and ecx, 0xf
mov edx, dword [ecx*4 + 0x10127c30]
push edx
push 0x1012a410
lea eax, [ebp - 0x98]
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0x14
jmp case.0x100395e4.14
mov ecx, dword [ebp - 0xa0]
and ecx, 0xff
push ecx
mov edx, dword [ebp - 0xac]
imul edx, edx, 0x24
mov eax, dword [ebp - 0x9c]
and eax, 0xff
mov ecx, dword [edx + eax*4 + 0x101277a8]
push ecx
lea edx, [ebp - 0x20c]
push edx
mov eax, dword [ebp + 0x20]
and eax, 0xff
and eax, 0xf
mov ecx, dword [eax*4 + 0x10127c30]
push ecx
push 0x1012a41c
lea edx, [ebp - 0x98]
push edx
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0x18
mov eax, dword [ebp - 0xa0]
and eax, 0xff
push eax
push 0x1012a42c
lea ecx, [ebp - 0x160]
push ecx
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0xc
lea edx, [ebp - 0x160]
push edx
mov eax, dword [ebp + 8]
mov ecx, dword [eax]
add ecx, 0x200
push ecx
call dword [sym.imp.KERNEL32.dll_lstrcatA]
mov edx, dword [ebp + 8]
mov eax, dword [edx]
mov cl, byte [eax + 0x240]
add cl, 1
mov edx, dword [ebp + 8]
mov eax, dword [edx]
mov byte [eax + 0x240], cl
mov ecx, dword [ebp + 0x1c]
mov edx, dword [ecx]
mov eax, dword [edx]
add eax, 1
mov ecx, dword [ebp + 0x1c]
mov edx, dword [ecx]
mov dword [edx], eax
jmp case.0x100395e4.14
mov eax, dword [ebp - 0xac]
imul eax, eax, 0x24
mov ecx, dword [ebp - 0x9c]
and ecx, 0xff
mov edx, dword [eax + ecx*4 + 0x101277a8]
push edx
lea eax, [ebp - 0x20c]
push eax
mov ecx, dword [ebp + 0x20]
and ecx, 0xff
and ecx, 0xf
mov edx, dword [ecx*4 + 0x10127c30]
push edx
push 0x1012a434
lea eax, [ebp - 0x98]
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0x14
jmp case.0x100395e4.14
mov ecx, dword [ebp + 0x20]
and ecx, 0xff
and ecx, 0xf
test ecx, ecx
jne 0x100399a8
mov dword [ebp - 0xac], 0
mov edx, dword [ebp - 0xac]
imul edx, edx, 0x24
mov eax, dword [ebp - 0x9c]
and eax, 0xff
mov ecx, dword [edx + eax*4 + 0x101277a8]
push ecx
lea edx, [ebp - 0x20c]
push edx
mov eax, dword [ebp + 0x20]
and eax, 0xff
and eax, 0xf
mov ecx, dword [eax*4 + 0x10127c90]
push ecx
push 0x1012a440
lea edx, [ebp - 0x98]
push edx
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0x14
jmp case.0x100395e4.14
mov dword [ebp - 0xac], 0
mov eax, dword [ebp - 0xac]
imul eax, eax, 0x24
mov ecx, dword [ebp - 0x9c]
and ecx, 0xff
mov edx, dword [eax + ecx*4 + 0x101277a8]
push edx
lea eax, [ebp - 0x20c]
push eax
push 0x1012a44c
lea ecx, [ebp - 0x98]
push ecx
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0x10
jmp case.0x100395e4.14
mov edx, dword [ebp - 0xac]
imul edx, edx, 0x24
mov eax, dword [ebp - 0x9c]
and eax, 0xff
mov ecx, dword [edx + eax*4 + 0x101277a8]
push ecx
lea edx, [ebp - 0x20c]
push edx
push 0x1012a458
lea eax, [ebp - 0x98]
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0x10
jmp case.0x100395e4.14
mov ecx, dword [ebp - 0x9c]
and ecx, 0xff
mov edx, dword [ecx*4 + 0x10127a10]
push edx
lea eax, [ebp - 0x20c]
push eax
mov ecx, dword [ebp + 0x20]
and ecx, 0xff
and ecx, 7
mov edx, dword [ecx*4 + 0x10127d50]
push edx
push 0x1012a464
lea eax, [ebp - 0x98]
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0x14
lea ecx, [ebp - 0x98]
push ecx
mov edx, dword [ebp + 8]
mov eax, dword [edx]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcatA]
jmp 0x1003a87e
mov ecx, dword [ebp + 0x20]
and ecx, 0xff
mov dword [ebp - 0x290], ecx
mov edx, dword [ebp - 0x290]
sub edx, 2
mov dword [ebp - 0x290], edx
cmp dword [ebp - 0x290], 0xfc
ja case.0x10039b0f.27
mov ecx, dword [ebp - 0x290]
xor eax, eax
mov al, byte [ecx + 0x1003e007]
jmp dword [eax*4 + 0x1003df97]
lea edx, [ebp - 0x20c]
push edx
mov eax, dword [ebp - 0xac]
imul eax, eax, 0x24
mov ecx, dword [ebp - 0x9c]
and ecx, 0xff
mov edx, dword [eax + ecx*4 + 0x101277a8]
push edx
push 0x1012a470
lea eax, [ebp - 0x98]
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0x10
jmp case.0x10039b0f.27
lea ecx, [ebp - 0x20c]
push ecx
mov edx, dword [ebp - 0xac]
imul edx, edx, 0x24
mov eax, dword [ebp - 0x9c]
and eax, 0xff
mov ecx, dword [edx + eax*4 + 0x101277a8]
push ecx
push 0x1012a47c
lea edx, [ebp - 0x98]
push edx
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0x10
jmp case.0x10039b0f.27
mov eax, dword [ebp + 0x38]
and eax, 0xff
cmp eax, 1
jne 0x10039bfb
lea ecx, [ebp - 0x20c]
push ecx
mov edx, dword [ebp - 0x9c]
and edx, 0xff
mov eax, dword [edx*4 + 0x10127a30]
push eax
push 0x1012a488
lea ecx, [ebp - 0x98]
push ecx
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0x10
push 0x1017f6d0
mov edx, dword [ebp + 8]
mov eax, dword [edx]
push eax
call sub.MSVCRT.dll_strcpy
add esp, 8
mov ecx, dword [ebp + 8]
mov edx, dword [ecx]
mov al, byte [edx + 0x240]
add al, 1
mov ecx, dword [ebp + 8]
mov edx, dword [ecx]
mov byte [edx + 0x240], al
jmp 0x10039c2b
lea eax, [ebp - 0x20c]
push eax
mov ecx, dword [ebp - 0x9c]
and ecx, 0xff
mov edx, dword [ecx*4 + 0x10127a30]
push edx
push 0x1012a494
lea eax, [ebp - 0x98]
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0x10
jmp case.0x10039b0f.27
lea ecx, [ebp - 0x20c]
push ecx
mov edx, dword [ebp - 0x9c]
and edx, 0xff
mov eax, dword [edx*4 + 0x10127a30]
push eax
push 0x1012a4a4
lea ecx, [ebp - 0x98]
push ecx
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0x10
jmp case.0x10039b0f.27
lea edx, [ebp - 0x20c]
push edx
mov eax, dword [ebp - 0x9c]
and eax, 0xff
mov ecx, dword [eax*4 + 0x10127a30]
push ecx
push 0x1012a4b4
lea edx, [ebp - 0x98]
push edx
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0x10
jmp case.0x10039b0f.27
lea eax, [ebp - 0x20c]
push eax
mov ecx, dword [ebp - 0x9c]
and ecx, 0xff
mov edx, dword [ecx*4 + 0x10127a30]
push edx
push 0x1012a4c4
lea eax, [ebp - 0x98]
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0x10
jmp case.0x10039b0f.27
lea ecx, [ebp - 0x20c]
push ecx
mov edx, dword [ebp - 0x9c]
and edx, 0xff
mov eax, dword [edx*4 + 0x10127a30]
push eax
push 0x1012a4d4
lea ecx, [ebp - 0x98]
push ecx
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0x10
jmp case.0x10039b0f.27
lea edx, [ebp - 0x20c]
push edx
mov eax, dword [ebp - 0x9c]
and eax, 0xff
mov ecx, dword [eax*4 + 0x10127a90]
push ecx
push 0x1012a4e4
lea edx, [ebp - 0x98]
push edx
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0x10
mov eax, dword [ebp - 0x9c]
and eax, 0xff
cmp eax, 3
jle 0x10039d59
push 0x1012a4ec
mov ecx, dword [ebp + 8]
mov edx, dword [ecx]
add edx, 0x100
push edx
call dword [sym.imp.KERNEL32.dll_lstrcatA]
jmp case.0x10039b0f.27
lea eax, [ebp - 0x20c]
push eax
mov ecx, dword [ebp - 0x9c]
and ecx, 0xff
mov edx, dword [ecx*4 + 0x10127a30]
push edx
push 0x1012a500
lea eax, [ebp - 0x98]
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0x10
jmp case.0x10039b0f.27
mov ecx, dword [ebp + 0x20]
and ecx, 0xff
and ecx, 0xf
sub ecx, 8
mov byte [ebp - 0x240], cl
mov edx, dword [ebp - 0x240]
and edx, 0xff
cmp edx, 4
je 0x10039dc9
mov eax, dword [ebp - 0x240]
and eax, 0xff
cmp eax, 5
jne 0x10039df4
mov ecx, dword [ebp - 0x9c]
and ecx, 0xff
mov edx, dword [ecx*4 + 0x10127a10]
push edx
push 0x1012a510
lea eax, [ebp - 0xe0]
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0xc
jmp 0x10039e1d
mov ecx, dword [ebp - 0x9c]
and ecx, 0xff
mov edx, dword [ecx*4 + 0x10127a30]
push edx
push 0x1012a514
lea eax, [ebp - 0xe0]
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0xc
mov ecx, dword [ebp + 0x38]
and ecx, 0xff
cmp ecx, 1
jne 0x10039f82
mov edx, dword [ebp + 0x20]
and edx, 0xff
cmp edx, 0x2a
je 0x10039e5c
mov eax, dword [ebp + 0x20]
and eax, 0xff
cmp eax, 0x2c
je 0x10039e5c
mov ecx, dword [ebp + 0x20]
and ecx, 0xff
cmp ecx, 0x2d
jne 0x10039f80
mov dl, byte [ebp + 0x20]
mov byte [ebp - 0x294], dl
cmp byte [ebp - 0x294], 0x2a
je 0x10039e85
cmp byte [ebp - 0x294], 0x2c
je 0x10039e9e
cmp byte [ebp - 0x294], 0x2d
je 0x10039ee5
jmp 0x10039f2b
push 0x1012a518
lea eax, [ebp - 0x160]
push eax
call sub.MSVCRT.dll_strcpy
add esp, 8
jmp 0x10039f2b
push 0x1012a524
lea ecx, [ebp - 0x160]
push ecx
call sub.MSVCRT.dll_strcpy
add esp, 8
mov edx, dword [ebp - 0xac]
imul edx, edx, 0x24
mov eax, dword [ebp - 0x9c]
and eax, 0xff
mov ecx, dword [edx + eax*4 + 0x101277a8]
push ecx
push 0x1012a530
lea edx, [ebp - 0xe0]
push edx
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0xc
jmp 0x10039f2b
push 0x1012a534
lea eax, [ebp - 0x160]
push eax
call sub.MSVCRT.dll_strcpy
add esp, 8
mov ecx, dword [ebp - 0xac]
imul ecx, ecx, 0x24
mov edx, dword [ebp - 0x9c]
and edx, 0xff
mov eax, dword [ecx + edx*4 + 0x101277a8]
push eax
push 0x1012a540
lea ecx, [ebp - 0xe0]
push ecx
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0xc
push 0x1017f6d4
mov edx, dword [ebp + 8]
mov eax, dword [edx]
push eax
call sub.MSVCRT.dll_strcpy
add esp, 8
mov ecx, dword [ebp + 8]
mov edx, dword [ecx]
mov al, byte [edx + 0x240]
add al, 1
mov ecx, dword [ebp + 8]
mov edx, dword [ecx]
mov byte [edx + 0x240], al
lea eax, [ebp - 0x20c]
push eax
lea ecx, [ebp - 0xe0]
push ecx
lea edx, [ebp - 0x160]
push edx
push 0x1012a544
lea eax, [ebp - 0x98]
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0x14
jmp 0x10039fb8
lea ecx, [ebp - 0x20c]
push ecx
lea edx, [ebp - 0xe0]
push edx
mov eax, dword [ebp + 0x20]
and eax, 0xff
and eax, 0xf
mov ecx, dword [eax*4 + 0x10127a90]
push ecx
push 0x1012a550
lea edx, [ebp - 0x98]
push edx
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0x14
jmp case.0x10039b0f.27
lea eax, [ebp - 0x20c]
push eax
mov ecx, dword [ebp - 0xac]
imul ecx, ecx, 0x24
mov edx, dword [ebp - 0x9c]
and edx, 0xff
mov eax, dword [ecx + edx*4 + 0x101277a8]
push eax
mov ecx, dword [ebp + 0x20]
and ecx, 0xff
and ecx, 0xf
mov edx, dword [ecx*4 + 0x10127ad0]
push edx
push 0x1012a55c
lea eax, [ebp - 0x98]
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0x14
jmp case.0x10039b0f.27
mov ecx, dword [ebp + 0x38]
and ecx, 0xff
cmp ecx, 1
jne 0x1003a08d
lea edx, [ebp - 0x20c]
push edx
mov eax, dword [ebp - 0x214]
and eax, 0xff
mov ecx, dword [eax*4 + 0x10127a30]
push ecx
mov edx, dword [ebp + 0x20]
and edx, 0xff
and edx, 0xf
mov eax, dword [edx*4 + 0x10127b50]
push eax
push 0x1012a568
lea ecx, [ebp - 0x98]
push ecx
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0x14
push 0x1017f6d8
mov edx, dword [ebp + 8]
mov eax, dword [edx]
push eax
call sub.MSVCRT.dll_strcpy
add esp, 8
mov ecx, dword [ebp + 8]
mov edx, dword [ecx]
mov al, byte [edx + 0x240]
add al, 1
mov ecx, dword [ebp + 8]
mov edx, dword [ecx]
mov byte [edx + 0x240], al
jmp 0x1003a0d0
lea eax, [ebp - 0x20c]
push eax
mov ecx, dword [ebp - 0x9c]
and ecx, 0xff
mov edx, dword [ecx*4 + 0x10127a30]
push edx
mov eax, dword [ebp + 0x20]
and eax, 0xff
and eax, 0xf
mov ecx, dword [eax*4 + 0x10127b10]
push ecx
push 0x1012a574
lea edx, [ebp - 0x98]
push edx
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0x14
jmp case.0x10039b0f.27
lea eax, [ebp - 0x20c]
push eax
mov ecx, dword [ebp - 0x9c]
and ecx, 0xff
mov edx, dword [ecx*4 + 0x10127a10]
push edx
mov eax, dword [ebp + 0x20]
and eax, 0xff
and eax, 0xf
mov ecx, dword [eax*4 + 0x10127b90]
push ecx
push 0x1012a580
lea edx, [ebp - 0x98]
push edx
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0x14
jmp case.0x10039b0f.27
mov eax, dword [ebp - 0xa0]
and eax, 0xff
push eax
lea ecx, [ebp - 0x20c]
push ecx
mov edx, dword [ebp - 0x214]
and edx, 0xff
mov eax, dword [edx*4 + 0x10127a10]
push eax
mov ecx, dword [ebp + 0x20]
and ecx, 0xff
and ecx, 0xf
mov edx, dword [ecx*4 + 0x10127bd0]
push edx
push 0x1012a58c
lea eax, [ebp - 0x98]
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0x18
mov ecx, dword [ebp - 0xa0]
and ecx, 0xff
push ecx
push 0x1012a59c
lea edx, [ebp - 0x160]
push edx
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0xc
lea eax, [ebp - 0x160]
push eax
mov ecx, dword [ebp + 8]
mov edx, dword [ecx]
add edx, 0x200
push edx
call dword [sym.imp.KERNEL32.dll_lstrcatA]
mov eax, dword [ebp + 8]
mov ecx, dword [eax]
mov dl, byte [ecx + 0x240]
add dl, 1
mov eax, dword [ebp + 8]
mov ecx, dword [eax]
mov byte [ecx + 0x240], dl
mov edx, dword [ebp + 0x1c]
mov eax, dword [edx]
mov ecx, dword [eax]
add ecx, 1
mov edx, dword [ebp + 0x1c]
mov eax, dword [edx]
mov dword [eax], ecx
jmp case.0x10039b0f.27
lea ecx, [ebp - 0x20c]
push ecx
mov edx, dword [ebp - 0x9c]
and edx, 0xff
mov eax, dword [edx*4 + 0x10127a10]
push eax
mov ecx, dword [ebp + 0x20]
and ecx, 0xff
and ecx, 0xf
mov edx, dword [ecx*4 + 0x10127bd0]
push edx
push 0x1012a5a4
lea eax, [ebp - 0x98]
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0x14
jmp case.0x10039b0f.27
lea ecx, [ebp - 0x20c]
push ecx
mov edx, dword [ebp + 0x20]
and edx, 0xff
and edx, 0xf
mov eax, dword [edx*4 + 0x10127bf0]
push eax
push 0x1012a5b0
lea ecx, [ebp - 0x98]
push ecx
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0x10
jmp case.0x10039b0f.27
lea edx, [ebp - 0x20c]
push edx
mov eax, dword [ebp - 0x9c]
and eax, 0xff
mov ecx, dword [eax*4 + 0x10127c70]
push ecx
push 0x1012a5b8
lea edx, [ebp - 0x98]
push edx
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0x10
mov eax, dword [ebp - 0x9c]
and eax, 0xff
cmp eax, 3
jle 0x1003a2ab
push 0x1012a5c0
mov ecx, dword [ebp + 8]
mov edx, dword [ecx]
add edx, 0x100
push edx
call dword [sym.imp.KERNEL32.dll_lstrcatA]
jmp case.0x10039b0f.27
lea eax, [ebp - 0x20c]
push eax
mov ecx, dword [ebp - 0xac]
imul ecx, ecx, 0x24
mov edx, dword [ebp - 0x9c]
and edx, 0xff
mov eax, dword [ecx + edx*4 + 0x101277a8]
push eax
mov ecx, dword [ebp + 0x20]
and ecx, 0xff
and ecx, 0xf
mov edx, dword [ecx*4 + 0x10127c30]
push edx
push 0x1012a5d4
lea eax, [ebp - 0x98]
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0x14
jmp case.0x10039b0f.27
lea ecx, [ebp - 0x20c]
push ecx
mov edx, dword [ebp - 0xac]
imul edx, edx, 0x24
mov eax, dword [ebp - 0x9c]
and eax, 0xff
mov ecx, dword [edx + eax*4 + 0x101277a8]
push ecx
mov edx, dword [ebp + 0x20]
and edx, 0xff
and edx, 0xf
mov eax, dword [edx*4 + 0x10127c90]
push eax
push 0x1012a5e0
lea ecx, [ebp - 0x98]
push ecx
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0x14
jmp case.0x10039b0f.27
mov edx, dword [ebp - 0xa0]
and edx, 0xff
cmp edx, 8
jge 0x1003a42f
mov eax, dword [ebp + 0x38]
and eax, 0xff
cmp eax, 1
jne 0x1003a3e7
lea ecx, [ebp - 0x20c]
push ecx
mov edx, dword [ebp - 0x9c]
and edx, 0xff
mov eax, dword [edx*4 + 0x10127a30]
push eax
mov ecx, dword [ebp - 0xa0]
and ecx, 0xff
mov edx, dword [ecx*4 + 0x10127cf0]
push edx
push 0x1012a5ec
lea eax, [ebp - 0x98]
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0x14
push 0x1017f6dc
mov ecx, dword [ebp + 8]
mov edx, dword [ecx]
push edx
call sub.MSVCRT.dll_strcpy
add esp, 8
mov eax, dword [ebp + 8]
mov ecx, dword [eax]
mov dl, byte [ecx + 0x240]
add dl, 1
mov eax, dword [ebp + 8]
mov ecx, dword [eax]
mov byte [ecx + 0x240], dl
jmp 0x1003a42a
lea edx, [ebp - 0x20c]
push edx
mov eax, dword [ebp - 0x9c]
and eax, 0xff
mov ecx, dword [eax*4 + 0x10127a30]
push ecx
mov edx, dword [ebp - 0xa0]
and edx, 0xff
mov eax, dword [edx*4 + 0x10127cd0]
push eax
push 0x1012a5f8
lea ecx, [ebp - 0x98]
push ecx
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0x14
jmp 0x1003a4e2
mov edx, dword [ebp + 0x38]
and edx, 0xff
cmp edx, 1
jne 0x1003a4a6
mov eax, dword [ebp - 0xa0]
and eax, 0xff
push eax
lea ecx, [ebp - 0x20c]
push ecx
mov edx, dword [ebp - 0x9c]
and edx, 0xff
mov eax, dword [edx*4 + 0x10127a30]
push eax
push 0x1012a604
lea ecx, [ebp - 0x98]
push ecx
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0x14
push 0x1017f6e0
mov edx, dword [ebp + 8]
mov eax, dword [edx]
push eax
call sub.MSVCRT.dll_strcpy
add esp, 8
mov ecx, dword [ebp + 8]
mov edx, dword [ecx]
mov al, byte [edx + 0x240]
add al, 1
mov ecx, dword [ebp + 8]
mov edx, dword [ecx]
mov byte [edx + 0x240], al
jmp 0x1003a4e2
mov eax, dword [ebp - 0xa0]
and eax, 0xff
push eax
lea ecx, [ebp - 0x20c]
push ecx
mov edx, dword [ebp - 0x9c]
and edx, 0xff
mov eax, dword [edx*4 + 0x10127a30]
push eax
push 0x1012a618
lea ecx, [ebp - 0x98]
push ecx
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0x14
mov edx, dword [ebp - 0xa0]
and edx, 0xff
push edx
push 0x1012a62c
lea eax, [ebp - 0x160]
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0xc
lea ecx, [ebp - 0x160]
push ecx
mov edx, dword [ebp + 8]
mov eax, dword [edx]
add eax, 0x200
push eax
call dword [sym.imp.KERNEL32.dll_lstrcatA]
mov ecx, dword [ebp + 8]
mov edx, dword [ecx]
mov al, byte [edx + 0x240]
add al, 1
mov ecx, dword [ebp + 8]
mov edx, dword [ecx]
mov byte [edx + 0x240], al
mov eax, dword [ebp + 0x1c]
mov ecx, dword [eax]
mov edx, dword [ecx]
add edx, 1
mov eax, dword [ebp + 0x1c]
mov ecx, dword [eax]
mov dword [ecx], edx
jmp case.0x10039b0f.27
mov edx, dword [ebp - 0xa0]
and edx, 0xff
push edx
lea eax, [ebp - 0x20c]
push eax
mov ecx, dword [ebp - 0x9c]
and ecx, 0xff
mov edx, dword [ecx*4 + 0x10127a10]
push edx
push 0x1012a634
lea eax, [ebp - 0x98]
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0x14
mov ecx, dword [ebp - 0xa0]
and ecx, 0xff
push ecx
push 0x1012a648
lea edx, [ebp - 0x160]
push edx
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0xc
lea eax, [ebp - 0x160]
push eax
mov ecx, dword [ebp + 8]
mov edx, dword [ecx]
add edx, 0x200
push edx
call dword [sym.imp.KERNEL32.dll_lstrcatA]
mov eax, dword [ebp + 8]
mov ecx, dword [eax]
mov dl, byte [ecx + 0x240]
add dl, 1
mov eax, dword [ebp + 8]
mov ecx, dword [eax]
mov byte [ecx + 0x240], dl
mov edx, dword [ebp + 0x1c]
mov eax, dword [edx]
mov ecx, dword [eax]
add ecx, 1
mov edx, dword [ebp + 0x1c]
mov eax, dword [edx]
mov dword [eax], ecx
jmp case.0x10039b0f.27
mov ecx, dword [ebp - 0xa0]
and ecx, 0xff
push ecx
lea edx, [ebp - 0x20c]
push edx
mov eax, dword [ebp - 0xac]
imul eax, eax, 0x24
mov ecx, dword [ebp - 0x9c]
and ecx, 0xff
mov edx, dword [eax + ecx*4 + 0x101277a8]
push edx
push 0x1012a650
lea eax, [ebp - 0x98]
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0x14
mov ecx, dword [ebp - 0xa0]
and ecx, 0xff
push ecx
push 0x1012a664
lea edx, [ebp - 0x160]
push edx
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0xc
lea eax, [ebp - 0x160]
push eax
mov ecx, dword [ebp + 8]
mov edx, dword [ecx]
add edx, 0x200
push edx
call dword [sym.imp.KERNEL32.dll_lstrcatA]
mov eax, dword [ebp + 8]
mov ecx, dword [eax]
mov dl, byte [ecx + 0x240]
add dl, 1
mov eax, dword [ebp + 8]
mov ecx, dword [eax]
mov byte [ecx + 0x240], dl
mov edx, dword [ebp + 0x1c]
mov eax, dword [edx]
mov ecx, dword [eax]
add ecx, 1
mov edx, dword [ebp + 0x1c]
mov eax, dword [edx]
mov dword [eax], ecx
jmp case.0x10039b0f.27
mov ecx, dword [ebp - 0xa0]
and ecx, 0xff
push ecx
lea edx, [ebp - 0x20c]
push edx
mov eax, dword [ebp - 0x9c]
and eax, 0xff
mov ecx, dword [eax*4 + 0x10127a30]
push ecx
push 0x1012a66c
lea edx, [ebp - 0x98]
push edx
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0x14
mov eax, dword [ebp - 0xa0]
and eax, 0xff
push eax
push 0x1012a680
lea ecx, [ebp - 0x160]
push ecx
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0xc
lea edx, [ebp - 0x160]
push edx
mov eax, dword [ebp + 8]
mov ecx, dword [eax]
add ecx, 0x200
push ecx
call dword [sym.imp.KERNEL32.dll_lstrcatA]
mov edx, dword [ebp + 8]
mov eax, dword [edx]
mov cl, byte [eax + 0x240]
add cl, 1
mov edx, dword [ebp + 8]
mov eax, dword [edx]
mov byte [eax + 0x240], cl
mov ecx, dword [ebp + 0x1c]
mov edx, dword [ecx]
mov eax, dword [edx]
add eax, 1
mov ecx, dword [ebp + 0x1c]
mov edx, dword [ecx]
mov dword [edx], eax
jmp case.0x10039b0f.27
lea eax, [ebp - 0x20c]
push eax
mov ecx, dword [ebp - 0xac]
imul ecx, ecx, 0x24
mov edx, dword [ebp - 0x9c]
and edx, 0xff
mov eax, dword [ecx + edx*4 + 0x101277a8]
push eax
mov ecx, dword [ebp + 0x20]
and ecx, 0xff
and ecx, 0xf
mov edx, dword [ecx*4 + 0x10127d10]
push edx
push 0x1012a688
lea eax, [ebp - 0x98]
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0x14
jmp case.0x10039b0f.27
lea ecx, [ebp - 0x20c]
push ecx
mov edx, dword [ebp - 0x9c]
and edx, 0xff
mov eax, dword [edx*4 + 0x10127a10]
push eax
mov ecx, dword [ebp + 0x20]
and ecx, 0xff
and ecx, 0xf
mov edx, dword [ecx*4 + 0x10127d10]
push edx
push 0x1012a694
lea eax, [ebp - 0x98]
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0x14
jmp case.0x10039b0f.27
lea ecx, [ebp - 0x20c]
push ecx
mov edx, dword [ebp - 0x9c]
and edx, 0xff
mov eax, dword [edx*4 + 0x10127a10]
push eax
mov ecx, dword [ebp + 0x20]
and ecx, 0xff
and ecx, 0xf
mov edx, dword [ecx*4 + 0x10127d50]
push edx
push 0x1012a6a0
lea eax, [ebp - 0x98]
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0x14
jmp case.0x10039b0f.27
lea ecx, [ebp - 0x20c]
push ecx
mov edx, dword [ebp - 0x9c]
and edx, 0xff
mov eax, dword [edx*4 + 0x10127a10]
push eax
mov ecx, dword [ebp + 0x20]
and ecx, 0xff
and ecx, 0xf
mov edx, dword [ecx*4 + 0x10127d90]
push edx
push 0x1012a6ac
lea eax, [ebp - 0x98]
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0x14
lea ecx, [ebp - 0x98]
push ecx
mov edx, dword [ebp + 8]
mov eax, dword [edx]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcatA]
mov ecx, dword [ebp + 0x1c]
mov edx, dword [ecx]
mov eax, dword [edx]
add eax, 1
mov ecx, dword [ebp + 0x1c]
mov edx, dword [ecx]
mov dword [edx], eax
jmp 0x1003dc63
cmp dword [ebp - 0x14], 4
je 0x1003c153
mov eax, dword [ebp + 0xc]
mov ecx, dword [eax]
mov edx, dword [ebp + 0x10]
xor eax, eax
mov al, byte [ecx + edx + 1]
and eax, 7
mov byte [ebp - 0x210], al
mov ecx, dword [ebp + 0xc]
mov edx, dword [ecx]
mov eax, dword [ebp + 0x10]
xor ecx, ecx
mov cl, byte [edx + eax + 1]
and ecx, 0x38
sar ecx, 3
mov byte [ebp - 0x214], cl
mov dl, byte [ebp - 0x184]
mov byte [ebp - 0x298], dl
cmp byte [ebp - 0x298], 0
je 0x1003a903
cmp byte [ebp - 0x298], 1
je 0x1003aad3
cmp byte [ebp - 0x298], 2
je 0x1003ac3b
jmp 0x1003ad67
mov eax, dword [ebp - 0x210]
and eax, 0xff
cmp eax, 5
jne 0x1003aa09
lea ecx, [ebp - 4]
push ecx
lea edx, [ebp - 0x18]
push edx
mov eax, dword [ebp + 0xc]
mov ecx, dword [eax]
mov edx, dword [ebp + 0x10]
lea eax, [ecx + edx + 2]
push eax
call fcn.1003e679
add esp, 0xc
lea ecx, [ebp - 8]
push ecx
lea edx, [ebp - 0x164]
push edx
mov eax, dword [ebp + 0xc]
mov ecx, dword [eax]
add ecx, dword [ebp + 0x10]
push ecx
call fcn.1003e63e
add esp, 0xc
mov edx, dword [ebp - 0x18]
push edx
mov eax, dword [ebp - 0x164]
and eax, 0xffff
push eax
push str._04X_08X
lea ecx, [ebp - 0x160]
push ecx
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0x10
lea edx, [ebp - 0x160]
push edx
mov eax, dword [ebp + 8]
mov ecx, dword [eax]
add ecx, 0x200
push ecx
call dword [sym.imp.KERNEL32.dll_lstrcatA]
mov edx, dword [ebp - 4]
push edx
push 0x1012a6c4
lea eax, [ebp - 0xe0]
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0xc
lea ecx, [ebp - 0xe0]
push ecx
mov edx, dword [ebp + 0x18]
mov eax, dword [edx*4 + 0x1012783c]
push eax
lea ecx, [ebp - 0x180]
push ecx
push 0x1012a6cc
lea edx, [ebp - 0x160]
push edx
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0x14
mov eax, dword [ebp + 8]
mov ecx, dword [eax]
mov byte [ecx + 0x240], 6
mov edx, dword [ebp + 0x1c]
mov eax, dword [edx]
mov ecx, dword [eax]
add ecx, 5
mov edx, dword [ebp + 0x1c]
mov eax, dword [edx]
mov dword [eax], ecx
mov ecx, dword [ebp + 0xc]
mov edx, dword [ecx]
mov eax, dword [ebp + 0x10]
mov cl, byte [edx + eax + 6]
mov byte [ebp - 0xa0], cl
jmp 0x1003aace
lea edx, [ebp - 8]
push edx
lea eax, [ebp - 0x164]
push eax
mov ecx, dword [ebp + 0xc]
mov edx, dword [ecx]
add edx, dword [ebp + 0x10]
push edx
call fcn.1003e63e
add esp, 0xc
mov eax, dword [ebp - 0x164]
and eax, 0xffff
push eax
push str._04X
lea ecx, [ebp - 0x160]
push ecx
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0xc
lea edx, [ebp - 0x160]
push edx
mov eax, dword [ebp + 8]
mov ecx, dword [eax]
add ecx, 0x200
push ecx
call dword [sym.imp.KERNEL32.dll_lstrcatA]
mov edx, dword [ebp - 0xc]
imul edx, edx, 0x24
mov eax, dword [ebp - 0x210]
and eax, 0xff
mov ecx, dword [edx + eax*4 + 0x101277a8]
push ecx
mov edx, dword [ebp + 0x18]
mov eax, dword [edx*4 + 0x1012783c]
push eax
lea ecx, [ebp - 0x180]
push ecx
push 0x1012a6e4
lea edx, [ebp - 0x160]
push edx
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0x14
mov eax, dword [ebp + 0x1c]
mov ecx, dword [eax]
mov edx, dword [ecx]
add edx, 1
mov eax, dword [ebp + 0x1c]
mov ecx, dword [eax]
mov dword [ecx], edx
mov edx, dword [ebp + 8]
mov eax, dword [edx]
mov byte [eax + 0x240], 2
mov ecx, dword [ebp + 0xc]
mov edx, dword [ecx]
mov eax, dword [ebp + 0x10]
mov cl, byte [edx + eax + 2]
mov byte [ebp - 0xa0], cl
jmp 0x1003ad67
mov edx, dword [ebp + 0xc]
mov eax, dword [edx]
mov ecx, dword [ebp + 0x10]
mov dl, byte [eax + ecx + 2]
mov byte [ebp - 0xa0], dl
lea eax, [ebp - 8]
push eax
lea ecx, [ebp - 0x164]
push ecx
mov edx, dword [ebp + 0xc]
mov eax, dword [edx]
add eax, dword [ebp + 0x10]
push eax
call fcn.1003e63e
add esp, 0xc
mov ecx, dword [ebp - 0xa0]
and ecx, 0xff
push ecx
mov edx, dword [ebp - 0x164]
and edx, 0xffff
push edx
push str._04X_02X
lea eax, [ebp - 0x160]
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0x10
lea ecx, [ebp - 0x160]
push ecx
mov edx, dword [ebp + 8]
mov eax, dword [edx]
add eax, 0x200
push eax
call dword [sym.imp.KERNEL32.dll_lstrcatA]
mov ecx, dword [ebp - 0xa0]
and ecx, 0xff
cmp ecx, 0x7f
jle 0x1003ab8e
mov edx, dword [0x1012785c]
push edx
push 0x1012a700
lea eax, [ebp - 0xa8]
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0xc
mov ecx, dword [ebp - 0xa0]
and ecx, 0xff
mov edx, pe_nt_image_headers32
sub edx, ecx
mov byte [ebp - 0xa0], dl
mov eax, dword [ebp - 0x210]
and eax, 0xff
cmp eax, 5
jne 0x1003abb2
mov ecx, dword [ebp + 0x28]
and ecx, 0xff
test ecx, ecx
jne 0x1003abb2
mov dword [ebp + 0x18], 2
mov edx, dword [ebp - 0xa0]
and edx, 0xff
push edx
lea eax, [ebp - 0xa8]
push eax
mov ecx, dword [ebp - 0xc]
imul ecx, ecx, 0x24
mov edx, dword [ebp - 0x210]
and edx, 0xff
mov eax, dword [ecx + edx*4 + 0x101277a8]
push eax
mov ecx, dword [ebp + 0x18]
mov edx, dword [ecx*4 + 0x1012783c]
push edx
lea eax, [ebp - 0x180]
push eax
push 0x1012a704
lea ecx, [ebp - 0x160]
push ecx
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0x1c
mov edx, dword [ebp + 0x1c]
mov eax, dword [edx]
mov ecx, dword [eax]
add ecx, 2
mov edx, dword [ebp + 0x1c]
mov eax, dword [edx]
mov dword [eax], ecx
mov ecx, dword [ebp + 8]
mov edx, dword [ecx]
mov byte [edx + 0x240], 3
mov eax, dword [ebp + 0xc]
mov ecx, dword [eax]
mov edx, dword [ebp + 0x10]
mov al, byte [ecx + edx + 3]
mov byte [ebp - 0xa0], al
jmp 0x1003ad67
mov ecx, dword [ebp - 0x210]
and ecx, 0xff
cmp ecx, 5
jne 0x1003ac60
mov edx, dword [ebp + 0x28]
and edx, 0xff
test edx, edx
jne 0x1003ac60
mov dword [ebp + 0x18], 2
lea eax, [ebp - 4]
push eax
lea ecx, [ebp - 0x18]
push ecx
mov edx, dword [ebp + 0xc]
mov eax, dword [edx]
mov ecx, dword [ebp + 0x10]
lea edx, [eax + ecx + 2]
push edx
call fcn.1003e679
add esp, 0xc
lea eax, [ebp - 8]
push eax
lea ecx, [ebp - 0x164]
push ecx
mov edx, dword [ebp + 0xc]
mov eax, dword [edx]
add eax, dword [ebp + 0x10]
push eax
call fcn.1003e63e
add esp, 0xc
mov ecx, dword [ebp - 0x18]
push ecx
mov edx, dword [ebp - 0x164]
and edx, 0xffff
push edx
push str._04X__08X
lea eax, [ebp - 0x160]
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0x10
lea ecx, [ebp - 0x160]
push ecx
mov edx, dword [ebp + 8]
mov eax, dword [edx]
add eax, 0x200
push eax
call dword [sym.imp.KERNEL32.dll_lstrcatA]
mov ecx, dword [ebp - 4]
push ecx
push 0x1012a728
lea edx, [ebp - 0xe0]
push edx
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0xc
lea eax, [ebp - 0xe0]
push eax
mov ecx, dword [ebp - 0xc]
imul ecx, ecx, 0x24
mov edx, dword [ebp - 0x210]
and edx, 0xff
mov eax, dword [ecx + edx*4 + 0x101277a8]
push eax
mov ecx, dword [ebp + 0x18]
mov edx, dword [ecx*4 + 0x1012783c]
push edx
lea eax, [ebp - 0x180]
push eax
push str._s_ptr__s:__s_s_
lea ecx, [ebp - 0x160]
push ecx
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0x18
mov edx, dword [ebp + 0x1c]
mov eax, dword [edx]
mov ecx, dword [eax]
add ecx, 5
mov edx, dword [ebp + 0x1c]
mov eax, dword [edx]
mov dword [eax], ecx
mov ecx, dword [ebp + 8]
mov edx, dword [ecx]
mov byte [edx + 0x240], 6
mov eax, dword [ebp + 0xc]
mov ecx, dword [eax]
mov edx, dword [ebp + 0x10]
mov al, byte [ecx + edx + 6]
mov byte [ebp - 0xa0], al
mov cl, byte [ebp + 0x30]
mov byte [ebp - 0x29c], cl
cmp byte [ebp - 0x29c], 0
je 0x1003ad8b
cmp byte [ebp - 0x29c], 1
je 0x1003b2a3
jmp 0x1003c14e
mov edx, dword [ebp + 0x20]
and edx, 0xff
mov dword [ebp - 0x2a0], edx
cmp dword [ebp - 0x2a0], 0xe7
ja case.0x1003adb8.14
mov ecx, dword [ebp - 0x2a0]
xor eax, eax
mov al, byte [ecx + 0x1003e140]
jmp dword [eax*4 + 0x1003e104]
lea edx, [ebp - 0x160]
push edx
mov eax, dword [ebp - 0x9c]
and eax, 0xff
mov ecx, dword [eax*4 + 0x10127a50]
push ecx
push 0x1012a744
lea edx, [ebp - 0x20c]
push edx
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0x10
mov eax, dword [ebp - 0x9c]
and eax, 0xff
cmp eax, 5
jle 0x1003ae15
push 0x1012a74c
mov ecx, dword [ebp + 8]
mov edx, dword [ecx]
add edx, 0x100
push edx
call dword [sym.imp.KERNEL32.dll_lstrcatA]
jmp case.0x1003adb8.14
lea eax, [ebp - 0x160]
push eax
mov ecx, dword [ebp - 0x9c]
and ecx, 0xff
mov edx, dword [ecx*4 + 0x10127a70]
push edx
push 0x1012a760
lea eax, [ebp - 0x20c]
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0x10
mov ecx, dword [ebp - 0x9c]
and ecx, 0xff
cmp ecx, 5
jne 0x1003ae71
push 0x1012a768
mov edx, dword [ebp + 8]
mov eax, dword [edx]
add eax, 0x100
push eax
call dword [sym.imp.KERNEL32.dll_lstrcatA]
jmp case.0x1003adb8.14
mov ecx, dword [ebp + 0x38]
and ecx, 0xff
cmp ecx, 1
jne 0x1003aee2
mov edx, dword [ebp - 0x214]
and edx, 0xff
mov eax, dword [edx*4 + 0x10127a30]
push eax
lea ecx, [ebp - 0x160]
push ecx
push 0x1012a77c
lea edx, [ebp - 0x20c]
push edx
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0x10
push 0x1017f6e4
mov eax, dword [ebp + 8]
mov ecx, dword [eax]
push ecx
call sub.MSVCRT.dll_strcpy
add esp, 8
mov edx, dword [ebp + 8]
mov eax, dword [edx]
mov cl, byte [eax + 0x240]
add cl, 1
mov edx, dword [ebp + 8]
mov eax, dword [edx]
mov byte [eax + 0x240], cl
jmp 0x1003af12
mov ecx, dword [ebp - 0x214]
and ecx, 0xff
mov edx, dword [ecx*4 + 0x10127a30]
push edx
lea eax, [ebp - 0x160]
push eax
push 0x1012a788
lea ecx, [ebp - 0x20c]
push ecx
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0x10
jmp case.0x1003adb8.14
mov edx, dword [ebp - 0x214]
and edx, 0xff
mov eax, dword [edx*4 + 0x10127a30]
push eax
lea ecx, [ebp - 0x160]
push ecx
push 0x1012a798
lea edx, [ebp - 0x20c]
push edx
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0x10
jmp case.0x1003adb8.14
mov eax, dword [ebp - 0x214]
and eax, 0xff
mov ecx, dword [eax*4 + 0x10127a30]
push ecx
lea edx, [ebp - 0x160]
push edx
push 0x1012a7a8
lea eax, [ebp - 0x20c]
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0x10
jmp case.0x1003adb8.14
mov ecx, dword [ebp - 0x214]
and ecx, 0xff
mov edx, dword [ecx*4 + 0x10127a30]
push edx
lea eax, [ebp - 0x160]
push eax
push 0x1012a7b8
lea ecx, [ebp - 0x20c]
push ecx
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0x10
jmp case.0x1003adb8.14
mov edx, dword [ebp - 0x214]
and edx, 0xff
mov eax, dword [edx*4 + 0x10127a10]
push eax
lea ecx, [ebp - 0x160]
push ecx
mov edx, dword [ebp + 0x20]
and edx, 0xff
and edx, 0xf
mov eax, dword [edx*4 + 0x10127b90]
push eax
push 0x1012a7c8
lea ecx, [ebp - 0x20c]
push ecx
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0x14
jmp case.0x1003adb8.14
mov edx, dword [ebp - 0xac]
imul edx, edx, 0x24
mov eax, dword [ebp - 0x214]
and eax, 0xff
mov ecx, dword [edx + eax*4 + 0x101277a8]
push ecx
lea edx, [ebp - 0x160]
push edx
mov eax, dword [ebp + 0x20]
and eax, 0xff
and eax, 0xf
mov ecx, dword [eax*4 + 0x10127c30]
push ecx
push 0x1012a7d4
lea edx, [ebp - 0x20c]
push edx
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0x14
jmp case.0x1003adb8.14
mov eax, dword [ebp - 0xa0]
and eax, 0xff
push eax
mov ecx, dword [ebp - 0xac]
imul ecx, ecx, 0x24
mov edx, dword [ebp - 0x214]
and edx, 0xff
mov eax, dword [ecx + edx*4 + 0x101277a8]
push eax
lea ecx, [ebp - 0x160]
push ecx
mov edx, dword [ebp + 0x20]
and edx, 0xff
and edx, 0xf
mov eax, dword [edx*4 + 0x10127c30]
push eax
push 0x1012a7e0
lea ecx, [ebp - 0x20c]
push ecx
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0x18
mov edx, dword [ebp - 0xa0]
and edx, 0xff
push edx
push 0x1012a7f0
lea eax, [ebp - 0x160]
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0xc
lea ecx, [ebp - 0x160]
push ecx
mov edx, dword [ebp + 8]
mov eax, dword [edx]
add eax, 0x200
push eax
call dword [sym.imp.KERNEL32.dll_lstrcatA]
mov ecx, dword [ebp + 8]
mov edx, dword [ecx]
mov al, byte [edx + 0x240]
add al, 1
mov ecx, dword [ebp + 8]
mov edx, dword [ecx]
mov byte [edx + 0x240], al
mov eax, dword [ebp + 0x1c]
mov ecx, dword [eax]
mov edx, dword [ecx]
add edx, 1
mov eax, dword [ebp + 0x1c]
mov ecx, dword [eax]
mov dword [ecx], edx
jmp case.0x1003adb8.14
mov edx, dword [ebp - 0xac]
imul edx, edx, 0x24
mov eax, dword [ebp - 0x214]
and eax, 0xff
mov ecx, dword [edx + eax*4 + 0x101277a8]
push ecx
lea edx, [ebp - 0x160]
push edx
mov eax, dword [ebp + 0x20]
and eax, 0xff
and eax, 0xf
mov ecx, dword [eax*4 + 0x10127c30]
push ecx
push 0x1012a7f8
lea edx, [ebp - 0x20c]
push edx
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0x14
jmp case.0x1003adb8.14
mov eax, dword [ebp + 0x20]
and eax, 0xff
and eax, 0xf
test eax, eax
jne 0x1003b178
mov dword [ebp - 0xac], 0
mov ecx, dword [ebp - 0xac]
imul ecx, ecx, 0x24
mov edx, dword [ebp - 0x214]
and edx, 0xff
mov eax, dword [ecx + edx*4 + 0x101277a8]
push eax
lea ecx, [ebp - 0x160]
push ecx
mov edx, dword [ebp + 0x20]
and edx, 0xff
and edx, 0xf
mov eax, dword [edx*4 + 0x10127c90]
push eax
push 0x1012a804
lea ecx, [ebp - 0x20c]
push ecx
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0x14
jmp case.0x1003adb8.14
mov dword [ebp - 0xac], 0
mov edx, dword [ebp - 0xac]
imul edx, edx, 0x24
mov eax, dword [ebp - 0x214]
and eax, 0xff
mov ecx, dword [edx + eax*4 + 0x101277a8]
push ecx
lea edx, [ebp - 0x160]
push edx
push 0x1012a810
lea eax, [ebp - 0x20c]
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0x10
jmp case.0x1003adb8.14
mov ecx, dword [ebp - 0xac]
imul ecx, ecx, 0x24
mov edx, dword [ebp - 0x214]
and edx, 0xff
mov eax, dword [ecx + edx*4 + 0x101277a8]
push eax
lea ecx, [ebp - 0x160]
push ecx
push 0x1012a81c
lea edx, [ebp - 0x20c]
push edx
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0x10
jmp case.0x1003adb8.14
mov eax, dword [ebp - 0x214]
and eax, 0xff
mov ecx, dword [eax*4 + 0x10127a10]
push ecx
lea edx, [ebp - 0x160]
push edx
mov eax, dword [ebp + 0x20]
and eax, 0xff
and eax, 7
mov ecx, dword [eax*4 + 0x10127d50]
push ecx
push 0x1012a828
lea edx, [ebp - 0x20c]
push edx
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0x14
lea eax, [ebp - 0x20c]
push eax
mov ecx, dword [ebp + 8]
mov edx, dword [ecx]
push edx
call dword [sym.imp.KERNEL32.dll_lstrcatA]
jmp 0x1003c14e
mov eax, dword [ebp + 0x20]
and eax, 0xff
mov dword [ebp - 0x2a4], eax
mov ecx, dword [ebp - 0x2a4]
sub ecx, 2
mov dword [ebp - 0x2a4], ecx
cmp dword [ebp - 0x2a4], 0xfc
ja case.0x1003b2de.29
mov eax, dword [ebp - 0x2a4]
xor edx, edx
mov dl, byte [eax + 0x1003e2a0]
jmp dword [edx*4 + 0x1003e228]
lea ecx, [ebp - 0x160]
push ecx
mov edx, dword [ebp - 0xac]
imul edx, edx, 0x24
mov eax, dword [ebp - 0x214]
and eax, 0xff
mov ecx, dword [edx + eax*4 + 0x101277a8]
push ecx
push 0x1012a834
lea edx, [ebp - 0x20c]
push edx
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0x10
jmp case.0x1003b2de.29
lea eax, [ebp - 0x160]
push eax
mov ecx, dword [ebp - 0xac]
imul ecx, ecx, 0x24
mov edx, dword [ebp - 0x214]
and edx, 0xff
mov eax, dword [ecx + edx*4 + 0x101277a8]
push eax
push 0x1012a840
lea ecx, [ebp - 0x20c]
push ecx
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0x10
jmp case.0x1003b2de.29
mov edx, dword [ebp + 0xc]
mov eax, dword [edx]
mov ecx, dword [ebp + 0x10]
mov dl, byte [eax + ecx + 1]
mov byte [ebp - 0xa0], dl
mov eax, dword [ebp - 0xa0]
and eax, 0xff
test eax, eax
jl 0x1003b392
mov ecx, dword [ebp - 0xa0]
and ecx, 0xff
cmp ecx, 0xf
jle 0x1003b3db
mov edx, dword [ebp - 0xa0]
and edx, 0xff
cmp edx, 0x40
jl 0x1003b3b3
mov eax, dword [ebp - 0xa0]
and eax, 0xff
cmp eax, 0x4f
jle 0x1003b3db
mov ecx, dword [ebp - 0xa0]
and ecx, 0xff
cmp ecx, 0x80
jl 0x1003b42a
mov edx, dword [ebp - 0xa0]
and edx, 0xff
cmp edx, 0x8f
jg 0x1003b42a
mov eax, dword [ebp - 0xa0]
and eax, 0xff
and eax, 0xf
cmp eax, 7
jg 0x1003b40c
lea ecx, [ebp - 0x160]
push ecx
push str.prefetcht__s
lea edx, [ebp - 0x20c]
push edx
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0xc
jmp 0x1003b428
lea eax, [ebp - 0x160]
push eax
push str.prefetchtW__s
lea ecx, [ebp - 0x20c]
push ecx
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0xc
jmp 0x1003b43e
push 0x1012a86c
lea edx, [ebp - 0x20c]
push edx
call sub.MSVCRT.dll_strcpy
add esp, 8
jmp case.0x1003b2de.29
mov eax, dword [ebp + 0x38]
and eax, 0xff
cmp eax, 1
jne 0x1003b4ad
push 0x1017f6e8
mov ecx, dword [ebp + 8]
mov edx, dword [ecx]
push edx
call sub.MSVCRT.dll_strcpy
add esp, 8
mov eax, dword [ebp + 8]
mov ecx, dword [eax]
mov dl, byte [ecx + 0x240]
add dl, 1
mov eax, dword [ebp + 8]
mov ecx, dword [eax]
mov byte [ecx + 0x240], dl
lea edx, [ebp - 0x160]
push edx
mov eax, dword [ebp - 0x214]
and eax, 0xff
mov ecx, dword [eax*4 + 0x10127a30]
push ecx
push 0x1012a870
lea edx, [ebp - 0x20c]
push edx
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0x10
jmp 0x1003b4dd
lea eax, [ebp - 0x160]
push eax
mov ecx, dword [ebp - 0x214]
and ecx, 0xff
mov edx, dword [ecx*4 + 0x10127a30]
push edx
push 0x1012a87c
lea eax, [ebp - 0x20c]
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0x10
jmp case.0x1003b2de.29
lea ecx, [ebp - 0x160]
push ecx
mov edx, dword [ebp - 0x214]
and edx, 0xff
mov eax, dword [edx*4 + 0x10127a30]
push eax
push 0x1012a88c
lea ecx, [ebp - 0x20c]
push ecx
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0x10
jmp case.0x1003b2de.29
lea edx, [ebp - 0x160]
push edx
mov eax, dword [ebp - 0x214]
and eax, 0xff
mov ecx, dword [eax*4 + 0x10127a30]
push ecx
push 0x1012a89c
lea edx, [ebp - 0x20c]
push edx
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0x10
jmp case.0x1003b2de.29
lea eax, [ebp - 0x160]
push eax
mov ecx, dword [ebp - 0x214]
and ecx, 0xff
mov edx, dword [ecx*4 + 0x10127a30]
push edx
push 0x1012a8ac
lea eax, [ebp - 0x20c]
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0x10
jmp case.0x1003b2de.29
lea ecx, [ebp - 0x160]
push ecx
mov edx, dword [ebp - 0x214]
and edx, 0xff
mov eax, dword [edx*4 + 0x10127a30]
push eax
push 0x1012a8bc
lea ecx, [ebp - 0x20c]
push ecx
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0x10
jmp case.0x1003b2de.29
lea edx, [ebp - 0x160]
push edx
mov eax, dword [ebp - 0x9c]
and eax, 0xff
mov ecx, dword [eax*4 + 0x10127a90]
push ecx
push 0x1012a8cc
lea edx, [ebp - 0x20c]
push edx
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0x10
mov eax, dword [ebp - 0x9c]
and eax, 0xff
cmp eax, 3
jle 0x1003b60b
push 0x1012a8d4
mov ecx, dword [ebp + 8]
mov edx, dword [ecx]
add edx, 0x100
push edx
call dword [sym.imp.KERNEL32.dll_lstrcatA]
jmp case.0x1003b2de.29
lea eax, [ebp - 0x160]
push eax
mov ecx, dword [ebp - 0x214]
and ecx, 0xff
mov edx, dword [ecx*4 + 0x10127a30]
push edx
push 0x1012a8e8
lea eax, [ebp - 0x20c]
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0x10
jmp case.0x1003b2de.29
mov ecx, dword [ebp + 0x20]
and ecx, 0xff
and ecx, 0xf
sub ecx, 8
mov byte [ebp - 0x244], cl
mov edx, dword [ebp - 0x244]
and edx, 0xff
cmp edx, 4
je 0x1003b67b
mov eax, dword [ebp - 0x244]
and eax, 0xff
cmp eax, 5
jne 0x1003b6a6
mov ecx, dword [ebp - 0x214]
and ecx, 0xff
mov edx, dword [ecx*4 + 0x10127a10]
push edx
push 0x1012a8f8
lea eax, [ebp - 0x98]
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0xc
jmp 0x1003b6cf
mov ecx, dword [ebp - 0x214]
and ecx, 0xff
mov edx, dword [ecx*4 + 0x10127a30]
push edx
push 0x1012a8fc
lea eax, [ebp - 0x98]
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0xc
mov ecx, dword [ebp + 0x38]
and ecx, 0xff
cmp ecx, 1
jne 0x1003b835
mov edx, dword [ebp + 0x20]
and edx, 0xff
cmp edx, 0x2a
je 0x1003b70e
mov eax, dword [ebp + 0x20]
and eax, 0xff
cmp eax, 0x2c
je 0x1003b70e
mov ecx, dword [ebp + 0x20]
and ecx, 0xff
cmp ecx, 0x2d
jne 0x1003b833
mov dl, byte [ebp + 0x20]
mov byte [ebp - 0x2a8], dl
cmp byte [ebp - 0x2a8], 0x2a
je 0x1003b737
cmp byte [ebp - 0x2a8], 0x2c
je 0x1003b750
cmp byte [ebp - 0x2a8], 0x2d
je 0x1003b798
jmp 0x1003b7de
push 0x1012a900
lea eax, [ebp - 0x258]
push eax
call sub.MSVCRT.dll_strcpy
add esp, 8
jmp 0x1003b7de
mov ecx, dword [ebp - 0xac]
imul ecx, ecx, 0x24
mov edx, dword [ebp - 0x214]
and edx, 0xff
mov eax, dword [ecx + edx*4 + 0x101277a8]
push eax
push 0x1012a90c
lea ecx, [ebp - 0x98]
push ecx
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0xc
push 0x1012a910
lea edx, [ebp - 0x258]
push edx
call sub.MSVCRT.dll_strcpy
add esp, 8
jmp 0x1003b7de
mov eax, dword [ebp - 0xac]
imul eax, eax, 0x24
mov ecx, dword [ebp - 0x214]
and ecx, 0xff
mov edx, dword [eax + ecx*4 + 0x101277a8]
push edx
push 0x1012a91c
lea eax, [ebp - 0x98]
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0xc
push 0x1012a920
lea ecx, [ebp - 0x258]
push ecx
call sub.MSVCRT.dll_strcpy
add esp, 8
push 0x1017f6ec
mov edx, dword [ebp + 8]
mov eax, dword [edx]
push eax
call sub.MSVCRT.dll_strcpy
add esp, 8
mov ecx, dword [ebp + 8]
mov edx, dword [ecx]
mov al, byte [edx + 0x240]
add al, 1
mov ecx, dword [ebp + 8]
mov edx, dword [ecx]
mov byte [edx + 0x240], al
lea eax, [ebp - 0x160]
push eax
lea ecx, [ebp - 0x98]
push ecx
lea edx, [ebp - 0x258]
push edx
push 0x1012a92c
lea eax, [ebp - 0x20c]
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0x14
jmp 0x1003b86b
lea ecx, [ebp - 0x160]
push ecx
lea edx, [ebp - 0x98]
push edx
mov eax, dword [ebp + 0x20]
and eax, 0xff
and eax, 0xf
mov ecx, dword [eax*4 + 0x10127a90]
push ecx
push 0x1012a938
lea edx, [ebp - 0x20c]
push edx
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0x14
jmp case.0x1003b2de.29
lea eax, [ebp - 0x160]
push eax
mov ecx, dword [ebp - 0xac]
imul ecx, ecx, 0x24
mov edx, dword [ebp - 0x214]
and edx, 0xff
mov eax, dword [ecx + edx*4 + 0x101277a8]
push eax
mov ecx, dword [ebp + 0x20]
and ecx, 0xff
and ecx, 0xf
mov edx, dword [ecx*4 + 0x10127ad0]
push edx
push 0x1012a944
lea eax, [ebp - 0x20c]
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0x14
jmp case.0x1003b2de.29
mov ecx, dword [ebp + 0x38]
and ecx, 0xff
cmp ecx, 1
jne 0x1003b940
lea edx, [ebp - 0x160]
push edx
mov eax, dword [ebp - 0x214]
and eax, 0xff
mov ecx, dword [eax*4 + 0x10127a30]
push ecx
mov edx, dword [ebp + 0x20]
and edx, 0xff
and edx, 0xf
mov eax, dword [edx*4 + 0x10127b50]
push eax
push 0x1012a950
lea ecx, [ebp - 0x20c]
push ecx
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0x14
push 0x1017f6f0
mov edx, dword [ebp + 8]
mov eax, dword [edx]
push eax
call sub.MSVCRT.dll_strcpy
add esp, 8
mov ecx, dword [ebp + 8]
mov edx, dword [ecx]
mov al, byte [edx + 0x240]
add al, 1
mov ecx, dword [ebp + 8]
mov edx, dword [ecx]
mov byte [edx + 0x240], al
jmp 0x1003b983
lea eax, [ebp - 0x160]
push eax
mov ecx, dword [ebp - 0x214]
and ecx, 0xff
mov edx, dword [ecx*4 + 0x10127a30]
push edx
mov eax, dword [ebp + 0x20]
and eax, 0xff
and eax, 0xf
mov ecx, dword [eax*4 + 0x10127b10]
push ecx
push 0x1012a95c
lea edx, [ebp - 0x20c]
push edx
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0x14
jmp case.0x1003b2de.29
lea eax, [ebp - 0x160]
push eax
mov ecx, dword [ebp - 0x214]
and ecx, 0xff
mov edx, dword [ecx*4 + 0x10127a10]
push edx
mov eax, dword [ebp + 0x20]
and eax, 0xff
and eax, 0xf
mov ecx, dword [eax*4 + 0x10127b90]
push ecx
push 0x1012a968
lea edx, [ebp - 0x20c]
push edx
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0x14
jmp case.0x1003b2de.29
mov eax, dword [ebp - 0xa0]
and eax, 0xff
push eax
lea ecx, [ebp - 0x160]
push ecx
mov edx, dword [ebp - 0x214]
and edx, 0xff
mov eax, dword [edx*4 + 0x10127a10]
push eax
mov ecx, dword [ebp + 0x20]
and ecx, 0xff
and ecx, 0xf
mov edx, dword [ecx*4 + 0x10127bd0]
push edx
push 0x1012a974
lea eax, [ebp - 0x20c]
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0x18
mov ecx, dword [ebp - 0xa0]
and ecx, 0xff
push ecx
push 0x1012a984
lea edx, [ebp - 0x160]
push edx
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0xc
lea eax, [ebp - 0x160]
push eax
mov ecx, dword [ebp + 8]
mov edx, dword [ecx]
add edx, 0x200
push edx
call dword [sym.imp.KERNEL32.dll_lstrcatA]
mov eax, dword [ebp + 8]
mov ecx, dword [eax]
mov dl, byte [ecx + 0x240]
add dl, 1
mov eax, dword [ebp + 8]
mov ecx, dword [eax]
mov byte [ecx + 0x240], dl
mov edx, dword [ebp + 0x1c]
mov eax, dword [edx]
mov ecx, dword [eax]
add ecx, 1
mov edx, dword [ebp + 0x1c]
mov eax, dword [edx]
mov dword [eax], ecx
jmp case.0x1003b2de.29
lea ecx, [ebp - 0x160]
push ecx
mov edx, dword [ebp - 0x214]
and edx, 0xff
mov eax, dword [edx*4 + 0x10127a10]
push eax
mov ecx, dword [ebp + 0x20]
and ecx, 0xff
and ecx, 0xf
mov edx, dword [ecx*4 + 0x10127bd0]
push edx
push 0x1012a98c
lea eax, [ebp - 0x20c]
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0x14
jmp case.0x1003b2de.29
lea ecx, [ebp - 0x160]
push ecx
mov edx, dword [ebp + 0x20]
and edx, 0xff
and edx, 0xf
mov eax, dword [edx*4 + 0x10127bf0]
push eax
push 0x1012a998
lea ecx, [ebp - 0x20c]
push ecx
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0x10
jmp case.0x1003b2de.29
lea edx, [ebp - 0x160]
push edx
mov eax, dword [ebp - 0x9c]
and eax, 0xff
mov ecx, dword [eax*4 + 0x10127c70]
push ecx
push 0x1012a9a0
lea edx, [ebp - 0x20c]
push edx
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0x10
mov eax, dword [ebp - 0x9c]
and eax, 0xff
cmp eax, 3
jle 0x1003bb5e
push 0x1012a9a8
mov ecx, dword [ebp + 8]
mov edx, dword [ecx]
add edx, 0x100
push edx
call dword [sym.imp.KERNEL32.dll_lstrcatA]
jmp case.0x1003b2de.29
lea eax, [ebp - 0x160]
push eax
mov ecx, dword [ebp - 0xac]
imul ecx, ecx, 0x24
mov edx, dword [ebp - 0x214]
and edx, 0xff
mov eax, dword [ecx + edx*4 + 0x101277a8]
push eax
mov ecx, dword [ebp + 0x20]
and ecx, 0xff
and ecx, 0xf
mov edx, dword [ecx*4 + 0x10127c30]
push edx
push 0x1012a9bc
lea eax, [ebp - 0x20c]
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0x14
jmp case.0x1003b2de.29
lea ecx, [ebp - 0x160]
push ecx
mov edx, dword [ebp - 0xac]
imul edx, edx, 0x24
mov eax, dword [ebp - 0x214]
and eax, 0xff
mov ecx, dword [edx + eax*4 + 0x101277a8]
push ecx
mov edx, dword [ebp + 0x20]
and edx, 0xff
and edx, 0xf
mov eax, dword [edx*4 + 0x10127c90]
push eax
push 0x1012a9c8
lea ecx, [ebp - 0x20c]
push ecx
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0x14
jmp case.0x1003b2de.29
mov edx, dword [ebp - 0xa0]
and edx, 0xff
cmp edx, 8
jge 0x1003bce2
mov eax, dword [ebp + 0x38]
and eax, 0xff
cmp eax, 1
jne 0x1003bc9a
lea ecx, [ebp - 0x160]
push ecx
mov edx, dword [ebp - 0x214]
and edx, 0xff
mov eax, dword [edx*4 + 0x10127a30]
push eax
mov ecx, dword [ebp - 0xa0]
and ecx, 0xff
mov edx, dword [ecx*4 + 0x10127cf0]
push edx
push 0x1012a9d4
lea eax, [ebp - 0x20c]
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0x14
push 0x1017f6f4
mov ecx, dword [ebp + 8]
mov edx, dword [ecx]
push edx
call sub.MSVCRT.dll_strcpy
add esp, 8
mov eax, dword [ebp + 8]
mov ecx, dword [eax]
mov dl, byte [ecx + 0x240]
add dl, 1
mov eax, dword [ebp + 8]
mov ecx, dword [eax]
mov byte [ecx + 0x240], dl
jmp 0x1003bcdd
lea edx, [ebp - 0x160]
push edx
mov eax, dword [ebp - 0x214]
and eax, 0xff
mov ecx, dword [eax*4 + 0x10127a30]
push ecx
mov edx, dword [ebp - 0xa0]
and edx, 0xff
mov eax, dword [edx*4 + 0x10127cd0]
push eax
push 0x1012a9e0
lea ecx, [ebp - 0x20c]
push ecx
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0x14
jmp 0x1003bd95
mov edx, dword [ebp + 0x38]
and edx, 0xff
cmp edx, 1
jne 0x1003bd59
mov eax, dword [ebp - 0xa0]
and eax, 0xff
push eax
lea ecx, [ebp - 0x160]
push ecx
mov edx, dword [ebp - 0x214]
and edx, 0xff
mov eax, dword [edx*4 + 0x10127a30]
push eax
push 0x1012a9ec
lea ecx, [ebp - 0x20c]
push ecx
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0x14
push 0x1017f6f8
mov edx, dword [ebp + 8]
mov eax, dword [edx]
push eax
call sub.MSVCRT.dll_strcpy
add esp, 8
mov ecx, dword [ebp + 8]
mov edx, dword [ecx]
mov al, byte [edx + 0x240]
add al, 1
mov ecx, dword [ebp + 8]
mov edx, dword [ecx]
mov byte [edx + 0x240], al
jmp 0x1003bd95
mov eax, dword [ebp - 0xa0]
and eax, 0xff
push eax
lea ecx, [ebp - 0x160]
push ecx
mov edx, dword [ebp - 0x214]
and edx, 0xff
mov eax, dword [edx*4 + 0x10127a30]
push eax
push 0x1012aa00
lea ecx, [ebp - 0x20c]
push ecx
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0x14
mov edx, dword [ebp - 0xa0]
and edx, 0xff
push edx
push 0x1012aa14
lea eax, [ebp - 0x160]
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0xc
lea ecx, [ebp - 0x160]
push ecx
mov edx, dword [ebp + 8]
mov eax, dword [edx]
add eax, 0x200
push eax
call dword [sym.imp.KERNEL32.dll_lstrcatA]
mov ecx, dword [ebp + 8]
mov edx, dword [ecx]
mov al, byte [edx + 0x240]
add al, 1
mov ecx, dword [ebp + 8]
mov edx, dword [ecx]
mov byte [edx + 0x240], al
mov eax, dword [ebp + 0x1c]
mov ecx, dword [eax]
mov edx, dword [ecx]
add edx, 1
mov eax, dword [ebp + 0x1c]
mov ecx, dword [eax]
mov dword [ecx], edx
jmp case.0x1003b2de.29
mov edx, dword [ebp - 0xa0]
and edx, 0xff
push edx
lea eax, [ebp - 0x160]
push eax
mov ecx, dword [ebp - 0x214]
and ecx, 0xff
mov edx, dword [ecx*4 + 0x10127a10]
push edx
push 0x1012aa1c
lea eax, [ebp - 0x20c]
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0x14
mov ecx, dword [ebp - 0xa0]
and ecx, 0xff
push ecx
push 0x1012aa30
lea edx, [ebp - 0x160]
push edx
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0xc
lea eax, [ebp - 0x160]
push eax
mov ecx, dword [ebp + 8]
mov edx, dword [ecx]
add edx, 0x200
push edx
call dword [sym.imp.KERNEL32.dll_lstrcatA]
mov eax, dword [ebp + 8]
mov ecx, dword [eax]
mov dl, byte [ecx + 0x240]
add dl, 1
mov eax, dword [ebp + 8]
mov ecx, dword [eax]
mov byte [ecx + 0x240], dl
mov edx, dword [ebp + 0x1c]
mov eax, dword [edx]
mov ecx, dword [eax]
add ecx, 1
mov edx, dword [ebp + 0x1c]
mov eax, dword [edx]
mov dword [eax], ecx
jmp case.0x1003b2de.29
mov ecx, dword [ebp - 0xa0]
and ecx, 0xff
push ecx
lea edx, [ebp - 0x160]
push edx
mov eax, dword [ebp - 0xac]
imul eax, eax, 0x24
mov ecx, dword [ebp - 0x214]
and ecx, 0xff
mov edx, dword [eax + ecx*4 + 0x101277a8]
push edx
push 0x1012aa38
lea eax, [ebp - 0x20c]
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0x14
mov ecx, dword [ebp - 0xa0]
and ecx, 0xff
push ecx
push 0x1012aa4c
lea edx, [ebp - 0x160]
push edx
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0xc
lea eax, [ebp - 0x160]
push eax
mov ecx, dword [ebp + 8]
mov edx, dword [ecx]
add edx, 0x200
push edx
call dword [sym.imp.KERNEL32.dll_lstrcatA]
mov eax, dword [ebp + 8]
mov ecx, dword [eax]
mov dl, byte [ecx + 0x240]
add dl, 1
mov eax, dword [ebp + 8]
mov ecx, dword [eax]
mov byte [ecx + 0x240], dl
mov edx, dword [ebp + 0x1c]
mov eax, dword [edx]
mov ecx, dword [eax]
add ecx, 1
mov edx, dword [ebp + 0x1c]
mov eax, dword [edx]
mov dword [eax], ecx
jmp case.0x1003b2de.29
mov ecx, dword [ebp - 0xa0]
and ecx, 0xff
push ecx
lea edx, [ebp - 0x160]
push edx
mov eax, dword [ebp - 0x214]
and eax, 0xff
mov ecx, dword [eax*4 + 0x10127a30]
push ecx
push 0x1012aa54
lea edx, [ebp - 0x20c]
push edx
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0x14
mov eax, dword [ebp - 0xa0]
and eax, 0xff
push eax
push 0x1012aa68
lea ecx, [ebp - 0x160]
push ecx
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0xc
lea edx, [ebp - 0x160]
push edx
mov eax, dword [ebp + 8]
mov ecx, dword [eax]
add ecx, 0x200
push ecx
call dword [sym.imp.KERNEL32.dll_lstrcatA]
mov edx, dword [ebp + 8]
mov eax, dword [edx]
mov cl, byte [eax + 0x240]
add cl, 1
mov edx, dword [ebp + 8]
mov eax, dword [edx]
mov byte [eax + 0x240], cl
mov ecx, dword [ebp + 0x1c]
mov edx, dword [ecx]
mov eax, dword [edx]
add eax, 1
mov ecx, dword [ebp + 0x1c]
mov edx, dword [ecx]
mov dword [edx], eax
jmp case.0x1003b2de.29
lea eax, [ebp - 0x160]
push eax
push str.cmpxchg8b__s
lea ecx, [ebp - 0x20c]
push ecx
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0xc
jmp case.0x1003b2de.29
lea edx, [ebp - 0x160]
push edx
mov eax, dword [ebp - 0xac]
imul eax, eax, 0x24
mov ecx, dword [ebp - 0x214]
and ecx, 0xff
mov edx, dword [eax + ecx*4 + 0x101277a8]
push edx
mov eax, dword [ebp + 0x20]
and eax, 0xff
and eax, 0xf
mov ecx, dword [eax*4 + 0x10127d10]
push ecx
push 0x1012aa80
lea edx, [ebp - 0x20c]
push edx
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0x14
jmp case.0x1003b2de.29
lea eax, [ebp - 0x160]
push eax
mov ecx, dword [ebp - 0x214]
and ecx, 0xff
mov edx, dword [ecx*4 + 0x10127a10]
push edx
mov eax, dword [ebp + 0x20]
and eax, 0xff
and eax, 0xf
mov ecx, dword [eax*4 + 0x10127d10]
push ecx
push 0x1012aa8c
lea edx, [ebp - 0x20c]
push edx
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0x14
jmp case.0x1003b2de.29
lea eax, [ebp - 0x160]
push eax
mov ecx, dword [ebp - 0x214]
and ecx, 0xff
mov edx, dword [ecx*4 + 0x10127a10]
push edx
mov eax, dword [ebp + 0x20]
and eax, 0xff
and eax, 0xf
mov ecx, dword [eax*4 + 0x10127d50]
push ecx
push 0x1012aa98
lea edx, [ebp - 0x20c]
push edx
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0x14
jmp case.0x1003b2de.29
lea eax, [ebp - 0x160]
push eax
mov ecx, dword [ebp - 0x214]
and ecx, 0xff
mov edx, dword [ecx*4 + 0x10127a10]
push edx
mov eax, dword [ebp + 0x20]
and eax, 0xff
and eax, 0xf
mov ecx, dword [eax*4 + 0x10127d90]
push ecx
push 0x1012aaa4
lea edx, [ebp - 0x20c]
push edx
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0x14
lea eax, [ebp - 0x20c]
push eax
mov ecx, dword [ebp + 8]
mov edx, dword [ecx]
push edx
call dword [sym.imp.KERNEL32.dll_lstrcatA]
jmp 0x1003dc63
cmp dword [ebp - 0x14], 4
jne 0x1003dc63
mov eax, dword [ebp + 0xc]
mov ecx, dword [eax]
mov edx, dword [ebp + 0x10]
xor eax, eax
mov al, byte [ecx + edx + 2]
and eax, 0x38
sar eax, 3
mov byte [ebp - 0x210], al
mov ecx, dword [ebp + 0xc]
mov edx, dword [ecx]
mov eax, dword [ebp + 0x10]
xor ecx, ecx
mov cl, byte [edx + eax + 2]
and ecx, 7
mov byte [ebp - 0x214], cl
mov edx, dword [ebp + 0xc]
mov eax, dword [edx]
mov ecx, dword [ebp + 0x10]
xor edx, edx
mov dl, byte [eax + ecx + 2]
and edx, 0xc0
sar edx, 6
mov dword [ebp - 0x10], edx
mov eax, dword [ebp - 0x10]
mov dword [ebp - 0x2ac], eax
cmp dword [ebp - 0x2ac], 3
ja case.default.0x1003c1c4
mov ecx, dword [ebp - 0x2ac]
jmp dword [ecx*4 + 0x1003e39d]
mov edx, dword [0x10127860]
push edx
push 0x1012aab0
lea eax, [ebp - 0xa8]
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0xc
jmp case.default.0x1003c1c4
mov ecx, dword [0x10127864]
push ecx
push 0x1012aab4
lea edx, [ebp - 0xa8]
push edx
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0xc
jmp case.default.0x1003c1c4
mov eax, dword [0x10127868]
push eax
push 0x1012aab8
lea ecx, [ebp - 0xa8]
push ecx
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0xc
jmp case.default.0x1003c1c4
mov edx, dword [0x1012786c]
push edx
push 0x1012aabc
lea eax, [ebp - 0xa8]
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0xc
mov cl, byte [ebp - 0x184]
mov byte [ebp - 0x2b0], cl
cmp byte [ebp - 0x2b0], 0
je 0x1003c274
cmp byte [ebp - 0x2b0], 1
je 0x1003c5ea
cmp byte [ebp - 0x2b0], 2
je 0x1003c7c9
jmp 0x1003c978
lea edx, [ebp - 8]
push edx
lea eax, [ebp - 0x164]
push eax
mov ecx, dword [ebp + 0xc]
mov edx, dword [ecx]
mov eax, dword [ebp + 0x10]
lea ecx, [edx + eax + 1]
push ecx
call fcn.1003e63e
add esp, 0xc
lea edx, [ebp - 4]
push edx
lea eax, [ebp - 0x18]
push eax
mov ecx, dword [ebp + 0xc]
mov edx, dword [ecx]
mov eax, dword [ebp + 0x10]
lea ecx, [edx + eax + 3]
push ecx
call fcn.1003e679
add esp, 0xc
mov edx, dword [ebp - 0x210]
and edx, 0xff
cmp edx, 4
jne 0x1003c3aa
mov eax, dword [ebp - 0x214]
and eax, 0xff
cmp eax, 5
je 0x1003c3aa
mov ecx, dword [ebp - 0x214]
and ecx, 0xff
cmp ecx, 4
jne 0x1003c2f2
mov dword [ebp + 0x18], 2
mov edx, dword [ebp - 0x164]
and edx, 0xffff
push edx
mov eax, dword [ebp + 0x20]
and eax, 0xff
push eax
push 0x1012aac0
lea ecx, [ebp - 0x160]
push ecx
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0x10
lea edx, [ebp - 0x160]
push edx
mov eax, dword [ebp + 8]
mov ecx, dword [eax]
add ecx, 0x200
push ecx
call dword [sym.imp.KERNEL32.dll_lstrcatA]
mov edx, dword [ebp - 0xc]
imul edx, edx, 0x24
mov eax, dword [ebp - 0x214]
and eax, 0xff
mov ecx, dword [edx + eax*4 + 0x101277a8]
push ecx
mov edx, dword [ebp + 0x18]
mov eax, dword [edx*4 + 0x1012783c]
push eax
lea ecx, [ebp - 0x180]
push ecx
push str._s_ptr__s:__s_
lea edx, [ebp - 0x160]
push edx
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0x14
mov eax, dword [ebp + 0x1c]
mov ecx, dword [eax]
mov edx, dword [ecx]
add edx, 2
mov eax, dword [ebp + 0x1c]
mov ecx, dword [eax]
mov dword [ecx], edx
mov edx, dword [ebp + 8]
mov eax, dword [edx]
mov byte [eax + 0x240], 3
mov ecx, dword [ebp + 0xc]
mov edx, dword [ecx]
mov eax, dword [ebp + 0x10]
mov cl, byte [edx + eax + 3]
mov byte [ebp - 0xa0], cl
jmp 0x1003c5e5
mov edx, dword [ebp - 0x214]
and edx, 0xff
cmp edx, 5
je 0x1003c4af
mov eax, dword [ebp - 0x214]
and eax, 0xff
cmp eax, 4
jne 0x1003c3d6
mov dword [ebp + 0x18], 2
mov ecx, dword [ebp - 0x164]
and ecx, 0xffff
push ecx
mov edx, dword [ebp + 0x20]
and edx, 0xff
push edx
push str._02X_04X
lea eax, [ebp - 0x160]
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0x10
lea ecx, [ebp - 0x160]
push ecx
mov edx, dword [ebp + 8]
mov eax, dword [edx]
add eax, 0x200
push eax
call dword [sym.imp.KERNEL32.dll_lstrcatA]
mov ecx, dword [ebp - 0xc]
imul ecx, ecx, 0x24
mov edx, dword [ebp - 0x214]
and edx, 0xff
mov eax, dword [ecx + edx*4 + 0x101277a8]
push eax
lea ecx, [ebp - 0xa8]
push ecx
mov edx, dword [ebp - 0xc]
imul edx, edx, 0x24
mov eax, dword [ebp - 0x210]
and eax, 0xff
mov ecx, dword [edx + eax*4 + 0x101277a8]
push ecx
mov edx, dword [ebp + 0x18]
mov eax, dword [edx*4 + 0x1012783c]
push eax
lea ecx, [ebp - 0x180]
push ecx
push str._s_ptr__s:__s_s_s_
lea edx, [ebp - 0x160]
push edx
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0x1c
mov eax, dword [ebp + 0x1c]
mov ecx, dword [eax]
mov edx, dword [ecx]
add edx, 2
mov eax, dword [ebp + 0x1c]
mov ecx, dword [eax]
mov dword [ecx], edx
mov edx, dword [ebp + 8]
mov eax, dword [edx]
mov byte [eax + 0x240], 3
mov ecx, dword [ebp + 0xc]
mov edx, dword [ecx]
mov eax, dword [ebp + 0x10]
mov cl, byte [edx + eax + 3]
mov byte [ebp - 0xa0], cl
jmp 0x1003c5e5
mov edx, dword [ebp - 0x214]
and edx, 0xff
cmp edx, 5
jne 0x1003c5e5
mov eax, dword [ebp - 0x18]
push eax
mov ecx, dword [ebp - 0x164]
and ecx, 0xffff
push ecx
mov edx, dword [ebp + 0x20]
and edx, 0xff
push edx
push 0x1012aafc
lea eax, [ebp - 0x160]
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0x14
lea ecx, [ebp - 0x160]
push ecx
mov edx, dword [ebp + 8]
mov eax, dword [edx]
add eax, 0x200
push eax
call dword [sym.imp.KERNEL32.dll_lstrcatA]
mov ecx, dword [ebp - 0x210]
and ecx, 0xff
cmp ecx, 4
jne 0x1003c547
push 0x1017f6fc
lea edx, [ebp - 0x98]
push edx
call sub.MSVCRT.dll_strcpy
add esp, 8
push 0x1017f700
lea eax, [ebp - 0xa8]
push eax
call sub.MSVCRT.dll_strcpy
add esp, 8
jmp 0x1003c576
mov ecx, dword [ebp - 0xc]
imul ecx, ecx, 0x24
mov edx, dword [ebp - 0x210]
and edx, 0xff
mov eax, dword [ecx + edx*4 + 0x101277a8]
push eax
push 0x1012ab0c
lea ecx, [ebp - 0x98]
push ecx
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0xc
mov edx, dword [ebp - 4]
push edx
lea eax, [ebp - 0xa8]
push eax
lea ecx, [ebp - 0x98]
push ecx
mov edx, dword [ebp + 0x18]
mov eax, dword [edx*4 + 0x1012783c]
push eax
lea ecx, [ebp - 0x180]
push ecx
push 0x1012ab10
lea edx, [ebp - 0x160]
push edx
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0x1c
mov byte [ebp - 0x184], 2
mov eax, dword [ebp + 0x1c]
mov ecx, dword [eax]
mov edx, dword [ecx]
add edx, 6
mov eax, dword [ebp + 0x1c]
mov ecx, dword [eax]
mov dword [ecx], edx
mov edx, dword [ebp + 8]
mov eax, dword [edx]
mov byte [eax + 0x240], 7
mov ecx, dword [ebp + 0xc]
mov edx, dword [ecx]
mov eax, dword [ebp + 0x10]
mov cl, byte [edx + eax + 6]
mov byte [ebp - 0xa0], cl
jmp 0x1003c978
mov edx, dword [ebp + 0xc]
mov eax, dword [edx]
mov ecx, dword [ebp + 0x10]
mov dl, byte [eax + ecx + 3]
mov byte [ebp - 0xa0], dl
mov eax, dword [ebp - 0xa0]
and eax, 0xff
cmp eax, 0x7f
jle 0x1003c640
mov ecx, dword [0x1012785c]
push ecx
push 0x1012ab28
lea edx, [ebp - 0x18c]
push edx
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0xc
mov eax, dword [ebp - 0xa0]
and eax, 0xff
mov ecx, pe_nt_image_headers32
sub ecx, eax
mov byte [ebp - 0xa0], cl
mov edx, dword [ebp - 0x214]
and edx, 0xff
cmp edx, 5
je 0x1003c661
mov eax, dword [ebp - 0x210]
and eax, 0xff
cmp eax, 4
jne 0x1003c6bf
mov dword [ebp + 0x18], 2
mov ecx, dword [ebp - 0xa0]
and ecx, 0xff
push ecx
lea edx, [ebp - 0x18c]
push edx
mov eax, dword [ebp - 0xc]
imul eax, eax, 0x24
mov ecx, dword [ebp - 0x214]
and ecx, 0xff
mov edx, dword [eax + ecx*4 + 0x101277a8]
push edx
mov eax, dword [ebp + 0x18]
mov ecx, dword [eax*4 + 0x1012783c]
push ecx
lea edx, [ebp - 0x180]
push edx
push str._s_ptr__s:__s_s_02X_
lea eax, [ebp - 0x20c]
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0x1c
jmp 0x1003c735
mov ecx, dword [ebp - 0xa0]
and ecx, 0xff
push ecx
lea edx, [ebp - 0x18c]
push edx
mov eax, dword [ebp - 0xc]
imul eax, eax, 0x24
mov ecx, dword [ebp - 0x214]
and ecx, 0xff
mov edx, dword [eax + ecx*4 + 0x101277a8]
push edx
lea eax, [ebp - 0xa8]
push eax
mov ecx, dword [ebp - 0xc]
imul ecx, ecx, 0x24
mov edx, dword [ebp - 0x210]
and edx, 0xff
mov eax, dword [ecx + edx*4 + 0x101277a8]
push eax
mov ecx, dword [ebp + 0x18]
mov edx, dword [ecx*4 + 0x1012783c]
push edx
lea eax, [ebp - 0x180]
push eax
push str._s_ptr__s:__s_s_s_s_02X_
lea ecx, [ebp - 0x20c]
push ecx
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0x24
mov edx, dword [ebp + 0x1c]
mov eax, dword [edx]
mov ecx, dword [eax]
add ecx, 3
mov edx, dword [ebp + 0x1c]
mov eax, dword [edx]
mov dword [eax], ecx
lea ecx, [ebp - 4]
push ecx
lea edx, [ebp - 0x18]
push edx
mov eax, dword [ebp + 0xc]
mov ecx, dword [eax]
add ecx, dword [ebp + 0x10]
push ecx
call fcn.1003e679
add esp, 0xc
mov edx, dword [ebp - 0x18]
push edx
push str._08X
lea eax, [ebp - 0x160]
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0xc
lea ecx, [ebp - 0x160]
push ecx
mov edx, dword [ebp + 8]
mov eax, dword [edx]
add eax, 0x200
push eax
call dword [sym.imp.KERNEL32.dll_lstrcatA]
mov ecx, dword [ebp + 8]
mov edx, dword [ecx]
mov byte [edx + 0x240], 4
lea eax, [ebp - 0x20c]
push eax
lea ecx, [ebp - 0x160]
push ecx
call sub.MSVCRT.dll_strcpy
add esp, 8
mov edx, dword [ebp + 0xc]
mov eax, dword [edx]
mov ecx, dword [ebp + 0x10]
mov dl, byte [eax + ecx + 4]
mov byte [ebp - 0xa0], dl
jmp 0x1003c978
lea eax, [ebp - 4]
push eax
lea ecx, [ebp - 0x18]
push ecx
mov edx, dword [ebp + 0xc]
mov eax, dword [edx]
mov ecx, dword [ebp + 0x10]
lea edx, [eax + ecx + 3]
push edx
call fcn.1003e679
add esp, 0xc
lea eax, [ebp - 8]
push eax
lea ecx, [ebp - 0x164]
push ecx
mov edx, dword [ebp + 0xc]
mov eax, dword [edx]
mov ecx, dword [ebp + 0x10]
lea edx, [eax + ecx + 3]
push edx
call fcn.1003e63e
add esp, 0xc
mov eax, dword [ebp - 0x210]
and eax, 0xff
cmp eax, 4
je 0x1003c8a0
mov ecx, dword [ebp - 0x214]
and ecx, 0xff
cmp ecx, 5
jne 0x1003c832
mov dword [ebp + 0x18], 2
mov edx, dword [ebp - 4]
push edx
lea eax, [ebp - 0x18c]
push eax
mov ecx, dword [ebp - 0xc]
imul ecx, ecx, 0x24
mov edx, dword [ebp - 0x214]
and edx, 0xff
mov eax, dword [ecx + edx*4 + 0x101277a8]
push eax
lea ecx, [ebp - 0xa8]
push ecx
mov edx, dword [ebp - 0xc]
imul edx, edx, 0x24
mov eax, dword [ebp - 0x210]
and eax, 0xff
mov ecx, dword [edx + eax*4 + 0x101277a8]
push ecx
mov edx, dword [ebp + 0x18]
mov eax, dword [edx*4 + 0x1012783c]
push eax
lea ecx, [ebp - 0x180]
push ecx
push str._s_ptr__s:__s_s_s_s_08X_
lea edx, [ebp - 0x20c]
push edx
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0x24
jmp 0x1003c8eb
mov eax, dword [ebp - 4]
push eax
lea ecx, [ebp - 0x18c]
push ecx
mov edx, dword [ebp - 0xc]
imul edx, edx, 0x24
mov eax, dword [ebp - 0x214]
and eax, 0xff
mov ecx, dword [edx + eax*4 + 0x101277a8]
push ecx
mov edx, dword [ebp + 0x18]
mov eax, dword [edx*4 + 0x1012783c]
push eax
lea ecx, [ebp - 0x180]
push ecx
push str._s_ptr__s:__s_s_08X_
lea edx, [ebp - 0x20c]
push edx
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0x1c
mov eax, dword [ebp - 0x18]
push eax
mov ecx, dword [ebp - 0x164]
and ecx, 0xffff
push ecx
mov edx, dword [ebp + 0x20]
and edx, 0xff
push edx
push str._02X_04X__08X
lea eax, [ebp - 0x160]
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0x14
lea ecx, [ebp - 0x160]
push ecx
mov edx, dword [ebp + 8]
mov eax, dword [edx]
add eax, 0x200
push eax
call dword [sym.imp.KERNEL32.dll_lstrcatA]
mov ecx, dword [ebp + 0x1c]
mov edx, dword [ecx]
mov eax, dword [edx]
add eax, 6
mov ecx, dword [ebp + 0x1c]
mov edx, dword [ecx]
mov dword [edx], eax
mov eax, dword [ebp + 8]
mov ecx, dword [eax]
mov byte [ecx + 0x240], 7
lea edx, [ebp - 0x20c]
push edx
lea eax, [ebp - 0x160]
push eax
call sub.MSVCRT.dll_strcpy
add esp, 8
mov ecx, dword [ebp + 0xc]
mov edx, dword [ecx]
mov eax, dword [ebp + 0x10]
mov cl, byte [edx + eax + 7]
mov byte [ebp - 0xa0], cl
mov dl, byte [ebp + 0x30]
mov byte [ebp - 0x2b4], dl
cmp byte [ebp - 0x2b4], 0
je 0x1003c99c
cmp byte [ebp - 0x2b4], 1
je 0x1003ceb7
jmp 0x1003dc63
mov eax, dword [ebp + 0x20]
and eax, 0xff
mov dword [ebp - 0x2b8], eax
cmp dword [ebp - 0x2b8], 0xe7
ja case.0x1003c9c8.14
mov edx, dword [ebp - 0x2b8]
xor ecx, ecx
mov cl, byte [edx + 0x1003e3e9]
jmp dword [ecx*4 + 0x1003e3ad]
lea eax, [ebp - 0x160]
push eax
mov ecx, dword [ebp - 0x9c]
and ecx, 0xff
mov edx, dword [ecx*4 + 0x10127a50]
push edx
push 0x1012abac
lea eax, [ebp - 0x20c]
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0x10
mov ecx, dword [ebp - 0x9c]
and ecx, 0xff
cmp ecx, 5
jle 0x1003ca26
push 0x1012abb4
mov edx, dword [ebp + 8]
mov eax, dword [edx]
add eax, 0x100
push eax
call dword [sym.imp.KERNEL32.dll_lstrcatA]
jmp case.0x1003c9c8.14
lea ecx, [ebp - 0x160]
push ecx
mov edx, dword [ebp - 0x9c]
and edx, 0xff
mov eax, dword [edx*4 + 0x10127a70]
push eax
push 0x1012abc8
lea ecx, [ebp - 0x20c]
push ecx
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0x10
mov edx, dword [ebp - 0x9c]
and edx, 0xff
cmp edx, 5
jne 0x1003ca83
push 0x1012abd0
mov eax, dword [ebp + 8]
mov ecx, dword [eax]
add ecx, 0x100
push ecx
call dword [sym.imp.KERNEL32.dll_lstrcatA]
jmp case.0x1003c9c8.14
mov edx, dword [ebp + 0x38]
and edx, 0xff
cmp edx, 1
jne 0x1003caf3
mov eax, dword [ebp - 0x9c]
and eax, 0xff
mov ecx, dword [eax*4 + 0x10127a30]
push ecx
lea edx, [ebp - 0x160]
push edx
push 0x1012abe4
lea eax, [ebp - 0x20c]
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0x10
push 0x1017f704
mov ecx, dword [ebp + 8]
mov edx, dword [ecx]
push edx
call sub.MSVCRT.dll_strcpy
add esp, 8
mov eax, dword [ebp + 8]
mov ecx, dword [eax]
mov dl, byte [ecx + 0x240]
add dl, 1
mov eax, dword [ebp + 8]
mov ecx, dword [eax]
mov byte [ecx + 0x240], dl
jmp 0x1003cb23
mov edx, dword [ebp - 0x9c]
and edx, 0xff
mov eax, dword [edx*4 + 0x10127a30]
push eax
lea ecx, [ebp - 0x160]
push ecx
push 0x1012abf0
lea edx, [ebp - 0x20c]
push edx
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0x10
jmp case.0x1003c9c8.14
mov eax, dword [ebp - 0x9c]
and eax, 0xff
mov ecx, dword [eax*4 + 0x10127a30]
push ecx
lea edx, [ebp - 0x160]
push edx
push 0x1012ac00
lea eax, [ebp - 0x20c]
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0x10
jmp case.0x1003c9c8.14
mov ecx, dword [ebp - 0x9c]
and ecx, 0xff
mov edx, dword [ecx*4 + 0x10127a30]
push edx
lea eax, [ebp - 0x160]
push eax
push 0x1012ac10
lea ecx, [ebp - 0x20c]
push ecx
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0x10
jmp case.0x1003c9c8.14
mov edx, dword [ebp - 0x9c]
and edx, 0xff
mov eax, dword [edx*4 + 0x10127a30]
push eax
lea ecx, [ebp - 0x160]
push ecx
push 0x1012ac20
lea edx, [ebp - 0x20c]
push edx
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0x10
jmp case.0x1003c9c8.14
mov eax, dword [ebp - 0x9c]
and eax, 0xff
mov ecx, dword [eax*4 + 0x10127a10]
push ecx
lea edx, [ebp - 0x160]
push edx
mov eax, dword [ebp + 0x20]
and eax, 0xff
and eax, 0xf
mov ecx, dword [eax*4 + 0x10127b90]
push ecx
push 0x1012ac30
lea edx, [ebp - 0x20c]
push edx
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0x14
jmp case.0x1003c9c8.14
mov eax, dword [ebp - 0xac]
imul eax, eax, 0x24
mov ecx, dword [ebp - 0x9c]
and ecx, 0xff
mov edx, dword [eax + ecx*4 + 0x101277a8]
push edx
lea eax, [ebp - 0x160]
push eax
mov ecx, dword [ebp + 0x20]
and ecx, 0xff
and ecx, 0xf
mov edx, dword [ecx*4 + 0x10127c30]
push edx
push 0x1012ac3c
lea eax, [ebp - 0x20c]
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0x14
jmp case.0x1003c9c8.14
mov ecx, dword [ebp - 0xa0]
and ecx, 0xff
push ecx
mov edx, dword [ebp - 0xac]
imul edx, edx, 0x24
mov eax, dword [ebp - 0x9c]
and eax, 0xff
mov ecx, dword [edx + eax*4 + 0x101277a8]
push ecx
lea edx, [ebp - 0x160]
push edx
mov eax, dword [ebp + 0x20]
and eax, 0xff
and eax, 0xf
mov ecx, dword [eax*4 + 0x10127c30]
push ecx
push 0x1012ac48
lea edx, [ebp - 0x20c]
push edx
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0x18
mov eax, dword [ebp - 0xa0]
and eax, 0xff
push eax
push 0x1012ac58
lea ecx, [ebp - 0x160]
push ecx
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0xc
lea edx, [ebp - 0x160]
push edx
mov eax, dword [ebp + 8]
mov ecx, dword [eax]
add ecx, 0x200
push ecx
call dword [sym.imp.KERNEL32.dll_lstrcatA]
mov edx, dword [ebp + 8]
mov eax, dword [edx]
mov cl, byte [eax + 0x240]
add cl, 1
mov edx, dword [ebp + 8]
mov eax, dword [edx]
mov byte [eax + 0x240], cl
mov ecx, dword [ebp + 0x1c]
mov edx, dword [ecx]
mov eax, dword [edx]
add eax, 1
mov ecx, dword [ebp + 0x1c]
mov edx, dword [ecx]
mov dword [edx], eax
jmp case.0x1003c9c8.14
mov eax, dword [ebp - 0xac]
imul eax, eax, 0x24
mov ecx, dword [ebp - 0x9c]
and ecx, 0xff
mov edx, dword [eax + ecx*4 + 0x101277a8]
push edx
lea eax, [ebp - 0x160]
push eax
mov ecx, dword [ebp + 0x20]
and ecx, 0xff
and ecx, 0xf
mov edx, dword [ecx*4 + 0x10127c30]
push edx
push str._s__s__s_cl
lea eax, [ebp - 0x20c]
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0x14
jmp case.0x1003c9c8.14
mov ecx, dword [ebp + 0x20]
and ecx, 0xff
and ecx, 0xf
test ecx, ecx
jne 0x1003cd8c
mov dword [ebp - 0xac], 0
mov edx, dword [ebp - 0xac]
imul edx, edx, 0x24
mov eax, dword [ebp - 0x9c]
and eax, 0xff
mov ecx, dword [edx + eax*4 + 0x101277a8]
push ecx
lea edx, [ebp - 0x160]
push edx
mov eax, dword [ebp + 0x20]
and eax, 0xff
and eax, 0xf
mov ecx, dword [eax*4 + 0x10127c90]
push ecx
push 0x1012ac6c
lea edx, [ebp - 0x20c]
push edx
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0x14
jmp case.0x1003c9c8.14
mov dword [ebp - 0xac], 0
mov eax, dword [ebp - 0xac]
imul eax, eax, 0x24
mov ecx, dword [ebp - 0x9c]
and ecx, 0xff
mov edx, dword [eax + ecx*4 + 0x101277a8]
push edx
lea eax, [ebp - 0x160]
push eax
push 0x1012ac78
lea ecx, [ebp - 0x20c]
push ecx
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0x10
jmp case.0x1003c9c8.14
mov edx, dword [ebp - 0xac]
imul edx, edx, 0x24
mov eax, dword [ebp - 0x9c]
and eax, 0xff
mov ecx, dword [edx + eax*4 + 0x101277a8]
push ecx
lea edx, [ebp - 0x160]
push edx
push str.xadd__s__s
lea eax, [ebp - 0x20c]
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0x10
jmp case.0x1003c9c8.14
mov ecx, dword [ebp - 0x9c]
and ecx, 0xff
mov edx, dword [ecx*4 + 0x10127a10]
push edx
lea eax, [ebp - 0x160]
push eax
mov ecx, dword [ebp + 0x20]
and ecx, 0xff
and ecx, 7
mov edx, dword [ecx*4 + 0x10127d50]
push edx
push 0x1012ac90
lea eax, [ebp - 0x20c]
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0x14
lea ecx, [ebp - 0x20c]
push ecx
mov edx, dword [ebp + 8]
mov eax, dword [edx]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcatA]
jmp 0x1003dc63
mov ecx, dword [ebp + 0x20]
and ecx, 0xff
mov dword [ebp - 0x2bc], ecx
mov edx, dword [ebp - 0x2bc]
sub edx, 2
mov dword [ebp - 0x2bc], edx
cmp dword [ebp - 0x2bc], 0xfc
ja case.0x1003cef3.27
mov ecx, dword [ebp - 0x2bc]
xor eax, eax
mov al, byte [ecx + 0x1003e541]
jmp dword [eax*4 + 0x1003e4d1]
lea edx, [ebp - 0x160]
push edx
mov eax, dword [ebp - 0xac]
imul eax, eax, 0x24
mov ecx, dword [ebp - 0x9c]
and ecx, 0xff
mov edx, dword [eax + ecx*4 + 0x101277a8]
push edx
push str.lar__s__s
lea eax, [ebp - 0x20c]
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0x10
jmp case.0x1003cef3.27
lea ecx, [ebp - 0x160]
push ecx
mov edx, dword [ebp - 0xac]
imul edx, edx, 0x24
mov eax, dword [ebp - 0x9c]
and eax, 0xff
mov ecx, dword [edx + eax*4 + 0x101277a8]
push ecx
push str.lsl__s__s
lea edx, [ebp - 0x20c]
push edx
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0x10
jmp case.0x1003cef3.27
mov eax, dword [ebp + 0x38]
and eax, 0xff
cmp eax, 1
jne 0x1003cfdf
push 0x1017f708
mov ecx, dword [ebp + 8]
mov edx, dword [ecx]
push edx
call sub.MSVCRT.dll_strcpy
add esp, 8
mov eax, dword [ebp + 8]
mov ecx, dword [eax]
mov dl, byte [ecx + 0x240]
add dl, 1
mov eax, dword [ebp + 8]
mov ecx, dword [eax]
mov byte [ecx + 0x240], dl
lea edx, [ebp - 0x160]
push edx
mov eax, dword [ebp - 0x9c]
and eax, 0xff
mov ecx, dword [eax*4 + 0x10127a30]
push ecx
push str.movss__s__s
lea edx, [ebp - 0x20c]
push edx
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0x10
jmp 0x1003d00f
lea eax, [ebp - 0x160]
push eax
mov ecx, dword [ebp - 0x9c]
and ecx, 0xff
mov edx, dword [ecx*4 + 0x10127a30]
push edx
push str.movups__s__s
lea eax, [ebp - 0x20c]
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0x10
jmp case.0x1003cef3.27
lea ecx, [ebp - 0x160]
push ecx
mov edx, dword [ebp - 0x9c]
and edx, 0xff
mov eax, dword [edx*4 + 0x10127a30]
push eax
push str.movlps__s__s
lea ecx, [ebp - 0x20c]
push ecx
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0x10
jmp case.0x1003cef3.27
lea edx, [ebp - 0x160]
push edx
mov eax, dword [ebp - 0x9c]
and eax, 0xff
mov ecx, dword [eax*4 + 0x10127a30]
push ecx
push str.unpcklps__s__s
lea edx, [ebp - 0x20c]
push edx
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0x10
jmp case.0x1003cef3.27
lea eax, [ebp - 0x160]
push eax
mov ecx, dword [ebp - 0x9c]
and ecx, 0xff
mov edx, dword [ecx*4 + 0x10127a30]
push edx
push str.unpckhps__s__s
lea eax, [ebp - 0x20c]
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0x10
jmp case.0x1003cef3.27
lea ecx, [ebp - 0x160]
push ecx
mov edx, dword [ebp - 0x9c]
and edx, 0xff
mov eax, dword [edx*4 + 0x10127a30]
push eax
push str.movhps__s__s
lea ecx, [ebp - 0x20c]
push ecx
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0x10
jmp case.0x1003cef3.27
lea edx, [ebp - 0x160]
push edx
mov eax, dword [ebp - 0x9c]
and eax, 0xff
mov ecx, dword [eax*4 + 0x10127a90]
push ecx
push 0x1012ad10
lea edx, [ebp - 0x20c]
push edx
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0x10
mov eax, dword [ebp - 0x9c]
and eax, 0xff
cmp eax, 3
jle 0x1003d13d
push str.Invalid_instruction
mov ecx, dword [ebp + 8]
mov edx, dword [ecx]
add edx, 0x100
push edx
call dword [sym.imp.KERNEL32.dll_lstrcatA]
jmp case.0x1003cef3.27
lea eax, [ebp - 0x160]
push eax
mov ecx, dword [ebp - 0x9c]
and ecx, 0xff
mov edx, dword [ecx*4 + 0x10127a30]
push edx
push str.movaps__s__s
lea eax, [ebp - 0x20c]
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0x10
jmp case.0x1003cef3.27
mov ecx, dword [ebp + 0x20]
and ecx, 0xff
and ecx, 0xf
sub ecx, 8
mov byte [ebp - 0x25c], cl
mov edx, dword [ebp - 0x25c]
and edx, 0xff
cmp edx, 4
je 0x1003d1ad
mov eax, dword [ebp - 0x25c]
and eax, 0xff
cmp eax, 5
jne 0x1003d1d8
mov ecx, dword [ebp - 0x9c]
and ecx, 0xff
mov edx, dword [ecx*4 + 0x10127a10]
push edx
push 0x1012ad3c
lea eax, [ebp - 0x98]
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0xc
jmp 0x1003d201
mov ecx, dword [ebp - 0x9c]
and ecx, 0xff
mov edx, dword [ecx*4 + 0x10127a30]
push edx
push 0x1012ad40
lea eax, [ebp - 0x98]
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0xc
mov ecx, dword [ebp + 0x38]
and ecx, 0xff
cmp ecx, 1
jne 0x1003d367
mov edx, dword [ebp + 0x20]
and edx, 0xff
cmp edx, 0x2a
je 0x1003d240
mov eax, dword [ebp + 0x20]
and eax, 0xff
cmp eax, 0x2c
je 0x1003d240
mov ecx, dword [ebp + 0x20]
and ecx, 0xff
cmp ecx, 0x2d
jne 0x1003d365
mov dl, byte [ebp + 0x20]
mov byte [ebp - 0x2c0], dl
cmp byte [ebp - 0x2c0], 0x2a
je 0x1003d269
cmp byte [ebp - 0x2c0], 0x2c
je 0x1003d282
cmp byte [ebp - 0x2c0], 0x2d
je 0x1003d2ca
jmp 0x1003d310
push 0x1012ad44
lea eax, [ebp - 0x270]
push eax
call sub.MSVCRT.dll_strcpy
add esp, 8
jmp 0x1003d310
mov ecx, dword [ebp - 0xac]
imul ecx, ecx, 0x24
mov edx, dword [ebp - 0x9c]
and edx, 0xff
mov eax, dword [ecx + edx*4 + 0x101277a8]
push eax
push 0x1012ad50
lea ecx, [ebp - 0x98]
push ecx
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0xc
push 0x1012ad54
lea edx, [ebp - 0x270]
push edx
call sub.MSVCRT.dll_strcpy
add esp, 8
jmp 0x1003d310
mov eax, dword [ebp - 0xac]
imul eax, eax, 0x24
mov ecx, dword [ebp - 0x9c]
and ecx, 0xff
mov edx, dword [eax + ecx*4 + 0x101277a8]
push edx
push 0x1012ad60
lea eax, [ebp - 0x98]
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0xc
push 0x1012ad64
lea ecx, [ebp - 0x270]
push ecx
call sub.MSVCRT.dll_strcpy
add esp, 8
push 0x1017f70c
mov edx, dword [ebp + 8]
mov eax, dword [edx]
push eax
call sub.MSVCRT.dll_strcpy
add esp, 8
mov ecx, dword [ebp + 8]
mov edx, dword [ecx]
mov al, byte [edx + 0x240]
add al, 1
mov ecx, dword [ebp + 8]
mov edx, dword [ecx]
mov byte [edx + 0x240], al
lea eax, [ebp - 0x160]
push eax
lea ecx, [ebp - 0x98]
push ecx
lea edx, [ebp - 0x270]
push edx
push 0x1012ad70
lea eax, [ebp - 0x20c]
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0x14
jmp 0x1003d39d
lea ecx, [ebp - 0x160]
push ecx
lea edx, [ebp - 0x98]
push edx
mov eax, dword [ebp + 0x20]
and eax, 0xff
and eax, 0xf
mov ecx, dword [eax*4 + 0x10127a90]
push ecx
push 0x1012ad7c
lea edx, [ebp - 0x20c]
push edx
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0x14
jmp case.0x1003cef3.27
lea eax, [ebp - 0x160]
push eax
mov ecx, dword [ebp - 0xac]
imul ecx, ecx, 0x24
mov edx, dword [ebp - 0x9c]
and edx, 0xff
mov eax, dword [ecx + edx*4 + 0x101277a8]
push eax
mov ecx, dword [ebp + 0x20]
and ecx, 0xff
and ecx, 0xf
mov edx, dword [ecx*4 + 0x10127ad0]
push edx
push 0x1012ad88
lea eax, [ebp - 0x20c]
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0x14
jmp case.0x1003cef3.27
mov ecx, dword [ebp + 0x38]
and ecx, 0xff
cmp ecx, 1
jne 0x1003d472
lea edx, [ebp - 0x160]
push edx
mov eax, dword [ebp - 0x214]
and eax, 0xff
mov ecx, dword [eax*4 + 0x10127a30]
push ecx
mov edx, dword [ebp + 0x20]
and edx, 0xff
and edx, 0xf
mov eax, dword [edx*4 + 0x10127b50]
push eax
push 0x1012ad94
lea ecx, [ebp - 0x20c]
push ecx
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0x14
push 0x1017f710
mov edx, dword [ebp + 8]
mov eax, dword [edx]
push eax
call sub.MSVCRT.dll_strcpy
add esp, 8
mov ecx, dword [ebp + 8]
mov edx, dword [ecx]
mov al, byte [edx + 0x240]
add al, 1
mov ecx, dword [ebp + 8]
mov edx, dword [ecx]
mov byte [edx + 0x240], al
jmp 0x1003d4b5
lea eax, [ebp - 0x160]
push eax
mov ecx, dword [ebp - 0x9c]
and ecx, 0xff
mov edx, dword [ecx*4 + 0x10127a30]
push edx
mov eax, dword [ebp + 0x20]
and eax, 0xff
and eax, 0xf
mov ecx, dword [eax*4 + 0x10127b10]
push ecx
push 0x1012ada0
lea edx, [ebp - 0x20c]
push edx
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0x14
jmp case.0x1003cef3.27
lea eax, [ebp - 0x160]
push eax
mov ecx, dword [ebp - 0x9c]
and ecx, 0xff
mov edx, dword [ecx*4 + 0x10127a10]
push edx
mov eax, dword [ebp + 0x20]
and eax, 0xff
and eax, 0xf
mov ecx, dword [eax*4 + 0x10127b90]
push ecx
push 0x1012adac
lea edx, [ebp - 0x20c]
push edx
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0x14
jmp case.0x1003cef3.27
mov eax, dword [ebp - 0xa0]
and eax, 0xff
push eax
lea ecx, [ebp - 0x160]
push ecx
mov edx, dword [ebp - 0x9c]
and edx, 0xff
mov eax, dword [edx*4 + 0x10127a10]
push eax
mov ecx, dword [ebp + 0x20]
and ecx, 0xff
and ecx, 0xf
mov edx, dword [ecx*4 + 0x10127bd0]
push edx
push str._s__s__s__02X
lea eax, [ebp - 0x20c]
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0x18
mov ecx, dword [ebp - 0xa0]
and ecx, 0xff
push ecx
push 0x1012adc8
lea edx, [ebp - 0x160]
push edx
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0xc
lea eax, [ebp - 0x160]
push eax
mov ecx, dword [ebp + 8]
mov edx, dword [ecx]
add edx, 0x200
push edx
call dword [sym.imp.KERNEL32.dll_lstrcatA]
mov eax, dword [ebp + 8]
mov ecx, dword [eax]
mov dl, byte [ecx + 0x240]
add dl, 1
mov eax, dword [ebp + 8]
mov ecx, dword [eax]
mov byte [ecx + 0x240], dl
mov edx, dword [ebp + 0x1c]
mov eax, dword [edx]
mov ecx, dword [eax]
add ecx, 1
mov edx, dword [ebp + 0x1c]
mov eax, dword [edx]
mov dword [eax], ecx
jmp case.0x1003cef3.27
lea ecx, [ebp - 0x160]
push ecx
mov edx, dword [ebp - 0x9c]
and edx, 0xff
mov eax, dword [edx*4 + 0x10127a10]
push eax
mov ecx, dword [ebp + 0x20]
and ecx, 0xff
and ecx, 0xf
mov edx, dword [ecx*4 + 0x10127bd0]
push edx
push 0x1012add0
lea eax, [ebp - 0x20c]
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0x14
jmp case.0x1003cef3.27
lea ecx, [ebp - 0x160]
push ecx
mov edx, dword [ebp + 0x20]
and edx, 0xff
and edx, 0xf
mov eax, dword [edx*4 + 0x10127bf0]
push eax
push 0x1012addc
lea ecx, [ebp - 0x20c]
push ecx
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0x10
jmp case.0x1003cef3.27
lea edx, [ebp - 0x160]
push edx
mov eax, dword [ebp - 0x9c]
and eax, 0xff
mov ecx, dword [eax*4 + 0x10127c70]
push ecx
push str._s__s
lea edx, [ebp - 0x20c]
push edx
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0x10
mov eax, dword [ebp - 0x9c]
and eax, 0xff
cmp eax, 3
jle 0x1003d690
push str.Invalid_Instruction
mov ecx, dword [ebp + 8]
mov edx, dword [ecx]
add edx, 0x100
push edx
call dword [sym.imp.KERNEL32.dll_lstrcatA]
jmp case.0x1003cef3.27
lea eax, [ebp - 0x160]
push eax
mov ecx, dword [ebp - 0xac]
imul ecx, ecx, 0x24
mov edx, dword [ebp - 0x9c]
and edx, 0xff
mov eax, dword [ecx + edx*4 + 0x101277a8]
push eax
mov ecx, dword [ebp + 0x20]
and ecx, 0xff
and ecx, 0xf
mov edx, dword [ecx*4 + 0x10127c30]
push edx
push 0x1012ae00
lea eax, [ebp - 0x20c]
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0x14
jmp case.0x1003cef3.27
lea ecx, [ebp - 0x160]
push ecx
mov edx, dword [ebp - 0xac]
imul edx, edx, 0x24
mov eax, dword [ebp - 0x9c]
and eax, 0xff
mov ecx, dword [edx + eax*4 + 0x101277a8]
push ecx
mov edx, dword [ebp + 0x20]
and edx, 0xff
and edx, 0xf
mov eax, dword [edx*4 + 0x10127c90]
push eax
push 0x1012ae0c
lea ecx, [ebp - 0x20c]
push ecx
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0x14
jmp case.0x1003cef3.27
mov edx, dword [ebp - 0xa0]
and edx, 0xff
cmp edx, 8
jge 0x1003d814
mov eax, dword [ebp + 0x38]
and eax, 0xff
cmp eax, 1
jne 0x1003d7cc
lea ecx, [ebp - 0x160]
push ecx
mov edx, dword [ebp - 0x9c]
and edx, 0xff
mov eax, dword [edx*4 + 0x10127a30]
push eax
mov ecx, dword [ebp - 0xa0]
and ecx, 0xff
mov edx, dword [ecx*4 + 0x10127cf0]
push edx
push 0x1012ae18
lea eax, [ebp - 0x20c]
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0x14
push 0x1017f714
mov ecx, dword [ebp + 8]
mov edx, dword [ecx]
push edx
call sub.MSVCRT.dll_strcpy
add esp, 8
mov eax, dword [ebp + 8]
mov ecx, dword [eax]
mov dl, byte [ecx + 0x240]
add dl, 1
mov eax, dword [ebp + 8]
mov ecx, dword [eax]
mov byte [ecx + 0x240], dl
jmp 0x1003d80f
lea edx, [ebp - 0x160]
push edx
mov eax, dword [ebp - 0x9c]
and eax, 0xff
mov ecx, dword [eax*4 + 0x10127a30]
push ecx
mov edx, dword [ebp - 0xa0]
and edx, 0xff
mov eax, dword [edx*4 + 0x10127cd0]
push eax
push 0x1012ae24
lea ecx, [ebp - 0x20c]
push ecx
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0x14
jmp 0x1003d8c7
mov edx, dword [ebp + 0x38]
and edx, 0xff
cmp edx, 1
jne 0x1003d88b
mov eax, dword [ebp - 0xa0]
and eax, 0xff
push eax
lea ecx, [ebp - 0x160]
push ecx
mov edx, dword [ebp - 0x9c]
and edx, 0xff
mov eax, dword [edx*4 + 0x10127a30]
push eax
push str.cmpss__s__s__02X
lea ecx, [ebp - 0x20c]
push ecx
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0x14
push 0x1017f718
mov edx, dword [ebp + 8]
mov eax, dword [edx]
push eax
call sub.MSVCRT.dll_strcpy
add esp, 8
mov ecx, dword [ebp + 8]
mov edx, dword [ecx]
mov al, byte [edx + 0x240]
add al, 1
mov ecx, dword [ebp + 8]
mov edx, dword [ecx]
mov byte [edx + 0x240], al
jmp 0x1003d8c7
mov eax, dword [ebp - 0xa0]
and eax, 0xff
push eax
lea ecx, [ebp - 0x160]
push ecx
mov edx, dword [ebp - 0x9c]
and edx, 0xff
mov eax, dword [edx*4 + 0x10127a30]
push eax
push str.cmpps__s__s__02X
lea ecx, [ebp - 0x20c]
push ecx
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0x14
mov edx, dword [ebp - 0xa0]
and edx, 0xff
push edx
push 0x1012ae58
lea eax, [ebp - 0x160]
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0xc
lea ecx, [ebp - 0x160]
push ecx
mov edx, dword [ebp + 8]
mov eax, dword [edx]
add eax, 0x200
push eax
call dword [sym.imp.KERNEL32.dll_lstrcatA]
mov ecx, dword [ebp + 8]
mov edx, dword [ecx]
mov al, byte [edx + 0x240]
add al, 1
mov ecx, dword [ebp + 8]
mov edx, dword [ecx]
mov byte [edx + 0x240], al
mov eax, dword [ebp + 0x1c]
mov ecx, dword [eax]
mov edx, dword [ecx]
add edx, 1
mov eax, dword [ebp + 0x1c]
mov ecx, dword [eax]
mov dword [ecx], edx
jmp case.0x1003cef3.27
mov edx, dword [ebp - 0xa0]
and edx, 0xff
push edx
lea eax, [ebp - 0x160]
push eax
mov ecx, dword [ebp - 0x9c]
and ecx, 0xff
mov edx, dword [ecx*4 + 0x10127a10]
push edx
push str.pinsrw__s__s__02X
lea eax, [ebp - 0x20c]
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0x14
mov ecx, dword [ebp - 0xa0]
and ecx, 0xff
push ecx
push 0x1012ae74
lea edx, [ebp - 0x160]
push edx
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0xc
lea eax, [ebp - 0x160]
push eax
mov ecx, dword [ebp + 8]
mov edx, dword [ecx]
add edx, 0x200
push edx
call dword [sym.imp.KERNEL32.dll_lstrcatA]
mov eax, dword [ebp + 8]
mov ecx, dword [eax]
mov dl, byte [ecx + 0x240]
add dl, 1
mov eax, dword [ebp + 8]
mov ecx, dword [eax]
mov byte [ecx + 0x240], dl
mov edx, dword [ebp + 0x1c]
mov eax, dword [edx]
mov ecx, dword [eax]
add ecx, 1
mov edx, dword [ebp + 0x1c]
mov eax, dword [edx]
mov dword [eax], ecx
jmp case.0x1003cef3.27
mov ecx, dword [ebp - 0xa0]
and ecx, 0xff
push ecx
lea edx, [ebp - 0x160]
push edx
mov eax, dword [ebp - 0xac]
imul eax, eax, 0x24
mov ecx, dword [ebp - 0x9c]
and ecx, 0xff
mov edx, dword [eax + ecx*4 + 0x101277a8]
push edx
push str.pextrw__s__s__02X
lea eax, [ebp - 0x20c]
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0x14
mov ecx, dword [ebp - 0xa0]
and ecx, 0xff
push ecx
push 0x1012ae90
lea edx, [ebp - 0x160]
push edx
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0xc
lea eax, [ebp - 0x160]
push eax
mov ecx, dword [ebp + 8]
mov edx, dword [ecx]
add edx, 0x200
push edx
call dword [sym.imp.KERNEL32.dll_lstrcatA]
mov eax, dword [ebp + 8]
mov ecx, dword [eax]
mov dl, byte [ecx + 0x240]
add dl, 1
mov eax, dword [ebp + 8]
mov ecx, dword [eax]
mov byte [ecx + 0x240], dl
mov edx, dword [ebp + 0x1c]
mov eax, dword [edx]
mov ecx, dword [eax]
add ecx, 1
mov edx, dword [ebp + 0x1c]
mov eax, dword [edx]
mov dword [eax], ecx
jmp case.0x1003cef3.27
mov ecx, dword [ebp - 0xa0]
and ecx, 0xff
push ecx
lea edx, [ebp - 0x160]
push edx
mov eax, dword [ebp - 0x9c]
and eax, 0xff
mov ecx, dword [eax*4 + 0x10127a30]
push ecx
push str.shufps__s__s__02X
lea edx, [ebp - 0x20c]
push edx
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0x14
mov eax, dword [ebp - 0xa0]
and eax, 0xff
push eax
push str.__02X
lea ecx, [ebp - 0x160]
push ecx
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0xc
lea edx, [ebp - 0x160]
push edx
mov eax, dword [ebp + 8]
mov ecx, dword [eax]
add ecx, 0x200
push ecx
call dword [sym.imp.KERNEL32.dll_lstrcatA]
mov edx, dword [ebp + 8]
mov eax, dword [edx]
mov cl, byte [eax + 0x240]
add cl, 1
mov edx, dword [ebp + 8]
mov eax, dword [edx]
mov byte [eax + 0x240], cl
mov ecx, dword [ebp + 0x1c]
mov edx, dword [ecx]
mov eax, dword [edx]
add eax, 1
mov ecx, dword [ebp + 0x1c]
mov edx, dword [ecx]
mov dword [edx], eax
jmp case.0x1003cef3.27
lea eax, [ebp - 0x160]
push eax
mov ecx, dword [ebp - 0xac]
imul ecx, ecx, 0x24
mov edx, dword [ebp - 0x9c]
and edx, 0xff
mov eax, dword [ecx + edx*4 + 0x101277a8]
push eax
mov ecx, dword [ebp + 0x20]
and ecx, 0xff
and ecx, 0xf
mov edx, dword [ecx*4 + 0x10127d10]
push edx
push 0x1012aeb4
lea eax, [ebp - 0x20c]
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0x14
jmp case.0x1003cef3.27
lea ecx, [ebp - 0x160]
push ecx
mov edx, dword [ebp - 0x9c]
and edx, 0xff
mov eax, dword [edx*4 + 0x10127a10]
push eax
mov ecx, dword [ebp + 0x20]
and ecx, 0xff
and ecx, 0xf
mov edx, dword [ecx*4 + 0x10127d10]
push edx
push 0x1012aec0
lea eax, [ebp - 0x20c]
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0x14
jmp case.0x1003cef3.27
lea ecx, [ebp - 0x160]
push ecx
mov edx, dword [ebp - 0x9c]
and edx, 0xff
mov eax, dword [edx*4 + 0x10127a10]
push eax
mov ecx, dword [ebp + 0x20]
and ecx, 0xff
and ecx, 0xf
mov edx, dword [ecx*4 + 0x10127d50]
push edx
push 0x1012aecc
lea eax, [ebp - 0x20c]
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0x14
jmp case.0x1003cef3.27
lea ecx, [ebp - 0x160]
push ecx
mov edx, dword [ebp - 0x9c]
and edx, 0xff
mov eax, dword [edx*4 + 0x10127a10]
push eax
mov ecx, dword [ebp + 0x20]
and ecx, 0xff
and ecx, 0xf
mov edx, dword [ecx*4 + 0x10127d90]
push edx
push str._s__s__s
lea eax, [ebp - 0x20c]
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0x14
lea ecx, [ebp - 0x20c]
push ecx
mov edx, dword [ebp + 8]
mov eax, dword [edx]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcatA]
pop edi
mov esp, ebp
pop ebp
ret