Function at 0x1003bb29
Capabilities:
Parse pe header

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x1006ba19
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
push ecx
sub esp, 0xa2c
push ebx
push esi
push edi
mov dword [ebp - 0x10], esp
movzx eax, byte [ebp + 0xc]
test eax, eax
je 0x100400f0
mov eax, dword [ebp + 0x14]
mov dword [ebp - 0x55c], eax
mov eax, dword [ebp + 0x10]
mov dword [ebp - 0x598], eax
lea eax, [ebp + 8]
mov dword [ebp - 0x5bc], eax
mov eax, dword [ebp - 0x5bc]
movzx eax, byte [eax]
test eax, eax
je 0x100400e1
mov eax, dword [ebp - 0x55c]
mov dword [ebp - 0x1d0], eax
mov eax, dword [ebp - 0x598]
mov dword [ebp - 0x68], eax
mov dword [ebp - 0x48], 0
mov dword [ebp - 0x1a8], 0x8067e307
mov dword [ebp - 0x50], 0xb597857
mov dword [ebp - 0x49c], 0x42c512dc
mov dword [ebp - 0x17c], 4
mov dword [ebp - 0x374], 0xffffffff
mov dword [ebp - 0xec], 0
jmp 0x1003bbea
mov eax, dword [ebp - 0xec]
inc eax
mov dword [ebp - 0xec], eax
cmp dword [ebp - 0xec], 4
jge 0x1003bc06
mov eax, dword [ebp - 0xec]
mov dword [ebp + eax*4 - 0x648], 0xe9ab5c29
jmp 0x1003bbdd
mov byte [ebp - 0x3e], 0
push 0x3123
push 0x6a34
push 0x2ddb
lea eax, [ebp - 0x3e]
push eax
push 1
push 0
call fcn.1003ba5e
add esp, 0x18
mov eax, dword [ebp - 0x48]
mov dword [ebp - 0x7b4], eax
mov eax, dword [ebp - 0x48]
cmp eax, dword [ebp - 0x48]
je 0x1003bc46
mov dword [ebp - 0x3a8], 1
jmp 0x1003bc4d
and dword [ebp - 0x3a8], 0
mov eax, dword [ebp - 0x48]
cmp eax, dword [ebp - 0x3a8]
jle 0x1003bc64
mov dword [ebp - 0x48c], 1
jmp 0x1003bc6b
and dword [ebp - 0x48c], 0
mov eax, dword [ebp - 0x48c]
add eax, 0x46dd7f9c
add eax, dword [ebp - 0x48]
mov dword [ebp - 0x494], eax
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x494]
mov dword [ebp + eax - 0x648], ecx
cmp dword [ebp - 0x494], 0
jne 0x1003bcb4
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x648], 0
jne 0x1003bcb4
and dword [ebp - 0x5a0], 0
jmp 0x1003bcbe
mov dword [ebp - 0x5a0], 1
mov eax, dword [ebp - 0x50]
mov dword [ebp - 0x758], eax
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x648]
sub eax, dword [ebp - 0x48]
mov dword [ebp - 0x49c], eax
je 0x1003bcf3
cmp dword [ebp - 0x17c], 0
je 0x1003bcf3
mov dword [ebp - 0x414], 1
jmp 0x1003bcfa
and dword [ebp - 0x414], 0
cmp dword [ebp - 0x414], 0xce1a812c
jae 0x1003bd12
mov dword [ebp - 0x478], 1
jmp 0x1003bd19
and dword [ebp - 0x478], 0
mov eax, dword [ebp - 0x17c]
cmp dword [ebp - 0x478], eax
jge 0x1003bd33
mov dword [ebp - 0x23c], 1
jmp 0x1003bd3a
and dword [ebp - 0x23c], 0
mov eax, dword [ebp - 0x48]
mov dword [ebp - 0x1a8], eax
mov eax, dword [ebp - 0x23c]
mov dword [ebp - 0x374], eax
mov eax, dword [ebp - 0x1a8]
cmp eax, dword [ebp - 0x374]
jg 0x1003bd69
mov dword [ebp - 0x244], 1
jmp 0x1003bd70
and dword [ebp - 0x244], 0
mov eax, dword [ebp - 0x17c]
imul eax, dword [ebp - 0x244]
cmp eax, dword [ebp - 0x50]
jle 0x1003bd8e
mov dword [ebp - 0x418], 1
jmp 0x1003bd95
and dword [ebp - 0x418], 0
cmp dword [ebp - 0x418], 2
jb 0x1003bda7
cmp dword [ebp - 0x17c], 0
je 0x1003bdcf
mov dword [ebp - 0x50], 0
jmp 0x1003bdb7
mov eax, dword [ebp - 0x50]
inc eax
mov dword [ebp - 0x50], eax
cmp dword [ebp - 0x50], 4
jge 0x1003bdcd
mov eax, dword [ebp - 0x50]
mov dword [ebp + eax*4 - 0x648], 5
jmp 0x1003bdb0
jmp 0x1003bde2
mov eax, dword [ebp - 0x1a8]
push 4
pop ecx
shl ecx, 0
mov dword [ebp + ecx - 0x648], eax
and dword [ebp - 0x30], 0
mov dword [ebp - 0xf4], 0x1f7e2799
mov dword [ebp - 0x5a8], 0x62c9cc14
mov dword [ebp - 0x760], 0
mov dword [ebp - 0xf4], 0
jmp 0x1003be1d
mov eax, dword [ebp - 0xf4]
inc eax
mov dword [ebp - 0xf4], eax
cmp dword [ebp - 0xf4], 0x12
jl 0x1003be74
mov dword [ebp - 0x5b0], 0xfffffffd
mov byte [ebp - 0x51], 0
lea eax, [ebp - 0x51]
push eax
push 0x404
push 0x4c0c
push 0x5b84
push 0x5be7
push 1
push 0
call fcn.1003a83a
add esp, 0x1c
lea eax, [ebp - 0x5a8]
push eax
push 1
push 1
lea eax, [ebp - 0x5b0]
push eax
call fcn.10038dc1
add esp, 0x10
jmp 0x1003be10
push 1
push 0x2a4c
push 0x4629
push 1
push 1
push 0x1e88
call fcn.10038e8f
add esp, 0x18
mov dword [ebp - 0x1c], 0xffffffff
mov dword [ebp - 0x58], 0x8d58
mov dword [ebp - 0xfc], 0xfffffffc
push 1
lea ecx, [ebp - 0xd8]
call fcn.100131db
and dword [ebp - 4], 0
mov dword [ebp - 0x144], 0xb5486b6f
mov dword [ebp - 0x208], 0xa058a13c
mov dword [ebp - 0x28c], 1
push 0x8c8
lea eax, [ebp - 0xd8]
push eax
push 1
lea eax, [ebp - 0x768]
push eax
push 1
push 0x76bc
push 0xa46
push 0x35b1
call fcn.1003904b
add esp, 0x20
mov eax, dword [ebp - 0x1c]
cmp eax, dword [ebp - 0x58]
je 0x1003bf1a
mov dword [ebp - 0x294], 1
jmp 0x1003bf21
and dword [ebp - 0x294], 0
push 0
lea ecx, [ebp - 0xd8]
call fcn.10013282
mov esi, eax
push 0
lea ecx, [ebp - 0xd8]
call fcn.10013282
mov eax, dword [eax]
cmp eax, dword [esi]
je 0x1003bf4f
mov dword [ebp - 0x24c], 1
jmp 0x1003bf56
and dword [ebp - 0x24c], 0
mov eax, dword [ebp - 0x24c]
mov dword [ebp - 0xfc], eax
mov eax, dword [ebp - 0xfc]
cmp eax, dword [ebp - 0x58]
jle 0x1003bf79
mov dword [ebp - 0x37c], 1
jmp 0x1003bf80
and dword [ebp - 0x37c], 0
push 0
lea ecx, [ebp - 0xd8]
call fcn.10013282
mov ecx, dword [ebp - 0x37c]
cmp ecx, dword [eax]
jg 0x1003bfa3
mov dword [ebp - 0x254], 1
jmp 0x1003bfaa
and dword [ebp - 0x254], 0
push 0
lea ecx, [ebp - 0xd8]
call fcn.10013282
mov ecx, dword [ebp - 0x254]
cmp ecx, dword [eax]
jge 0x1003bfcd
mov dword [ebp - 0x410], 1
jmp 0x1003bfd4
and dword [ebp - 0x410], 0
push 0
lea ecx, [ebp - 0xd8]
call fcn.10013282
mov eax, dword [eax]
cmp eax, dword [ebp - 0x410]
jg 0x1003bff7
mov dword [ebp - 0x25c], 1
jmp 0x1003bffe
and dword [ebp - 0x25c], 0
push 0
lea ecx, [ebp - 0xd8]
call fcn.10013282
mov ecx, dword [ebp - 0x25c]
cmp ecx, dword [eax]
je 0x1003c021
mov dword [ebp - 0x384], 1
jmp 0x1003c028
and dword [ebp - 0x384], 0
mov eax, dword [ebp - 0x1c]
cmp dword [ebp - 0x384], eax
jge 0x1003c03f
mov dword [ebp - 0x264], 1
jmp 0x1003c046
and dword [ebp - 0x264], 0
cmp dword [ebp - 0x264], 0xf0e77da1
ja 0x1003c05e
mov dword [ebp - 0x498], 1
jmp 0x1003c065
and dword [ebp - 0x498], 0
cmp dword [ebp - 0x498], 0xa67606e8
ja 0x1003c07d
mov dword [ebp - 0x26c], 1
jmp 0x1003c084
and dword [ebp - 0x26c], 0
push 0
lea ecx, [ebp - 0xd8]
call fcn.10013282
mov ecx, dword [ebp - 0x26c]
cmp ecx, dword [eax]
jne 0x1003c09f
cmp dword [ebp - 0x58], 0
cmp dword [ebp - 0x1c], 0
jne 0x1003c0c0
push 0
lea ecx, [ebp - 0xd8]
call fcn.10013282
cmp dword [eax], 0
jne 0x1003c0c0
and dword [ebp - 0x38c], 0
jmp 0x1003c0ca
mov dword [ebp - 0x38c], 1
push 0
lea ecx, [ebp - 0xd8]
call fcn.10013282
mov ecx, dword [ebp - 0x38c]
mov dword [eax], ecx
cmp dword [ebp - 0x1c], 0
jne 0x1003c0f4
cmp dword [ebp - 0x1c], 0
jne 0x1003c0f4
and dword [ebp - 0x274], 0
jmp 0x1003c0fe
mov dword [ebp - 0x274], 1
mov eax, dword [ebp - 0x58]
cmp dword [ebp - 0x274], eax
jg 0x1003c115
mov dword [ebp - 0x41c], 1
jmp 0x1003c11c
and dword [ebp - 0x41c], 0
mov eax, dword [ebp - 0x41c]
mov dword [ebp - 0x208], eax
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0x770], eax
mov eax, dword [ebp - 0x208]
mov dword [ebp - 0x778], eax
mov eax, dword [ebp - 0xfc]
mov dword [ebp - 0x780], eax
mov eax, dword [ebp - 0x58]
mov dword [ebp - 0x788], eax
push 0
lea ecx, [ebp - 0xd8]
call fcn.10013282
cmp dword [eax], 0
jne 0x1003c173
cmp dword [ebp - 0x58], 0
jne 0x1003c173
and dword [ebp - 0x5b8], 0
jmp 0x1003c17d
mov dword [ebp - 0x5b8], 1
mov eax, dword [ebp - 0x58]
mov dword [ebp - 0x7c4], eax
mov eax, dword [ebp - 0x144]
inc eax
mov dword [ebp - 0x144], eax
mov eax, dword [ebp - 0x144]
cmp eax, dword [ebp - 0x28c]
jle 0x1003c1c8
cmp dword [ebp - 0x144], 0
je 0x1003c1c8
push 0
lea ecx, [ebp - 0xd8]
call fcn.10013282
cmp dword [eax], 0
je 0x1003c1c8
mov dword [ebp - 0x27c], 1
jmp 0x1003c1cf
and dword [ebp - 0x27c], 0
cmp dword [ebp - 0x27c], 0x160c
je 0x1003c1e7
mov dword [ebp - 0x394], 1
jmp 0x1003c1ee
and dword [ebp - 0x394], 0
cmp dword [ebp - 0x394], 0x704bae91
jg 0x1003c206
mov dword [ebp - 0x284], 1
jmp 0x1003c20d
and dword [ebp - 0x284], 0
cmp dword [ebp - 0x284], 0x7b2c
jl 0x1003c225
mov dword [ebp - 0x45c], 1
jmp 0x1003c22c
and dword [ebp - 0x45c], 0
cmp dword [ebp - 0x45c], 0xfff9
jbe 0x1003c248
xor eax, eax
je 0x1003c248
mov dword [ebp - 0x39c], 1
jmp 0x1003c24f
and dword [ebp - 0x39c], 0
mov eax, dword [ebp - 0x28c]
cmp dword [ebp - 0x39c], eax
jne 0x1003c269
mov dword [ebp - 0x424], 1
jmp 0x1003c270
and dword [ebp - 0x424], 0
mov eax, dword [ebp - 0x294]
cmp eax, dword [ebp - 0x424]
jle 0x1003c2f8
mov dword [ebp - 0x554], 0x9bdd1892
mov dword [ebp - 0x5c0], 0x189efa4e
mov dword [ebp - 0x5d0], 0xb46dff61
mov dword [ebp - 0x5c8], 0x6e3f992c
lea eax, [ebp - 0xd8]
push eax
lea eax, [ebp - 0x5c0]
push eax
push 0
lea eax, [ebp - 0x5c8]
push eax
push 1
push 0x4e12
lea eax, [ebp - 0x5d0]
push eax
lea eax, [ebp - 0x1c]
push eax
lea eax, [ebp - 0x554]
push eax
push 0x9a7
lea eax, [ebp - 0xfc]
push eax
push 0x5b68
lea eax, [ebp - 0x208]
push eax
call fcn.10040d75
add esp, 0x34
jmp 0x1003c340
mov dword [ebp - 0x1c], 0
jmp 0x1003c308
mov eax, dword [ebp - 0x1c]
dec eax
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 0
jl 0x1003c340
push 0x7bea
push 0
push 0x5a1d
push 1
call fcn.10037bf1
add esp, 0x10
lea eax, [ebp - 0xd8]
push eax
push 0x5a2
lea eax, [ebp - 0x1c]
push eax
push 0
call fcn.10043051
add esp, 0x10
jmp 0x1003c301
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xd8]
call fcn.1001325d
mov dword [ebp - 0xa8], 0xbac64a68
mov dword [ebp - 0x4e0], 0x708bee6d
mov dword [ebp - 0xa8], 0x1d
jmp 0x1003c37c
mov eax, dword [ebp - 0xa8]
dec eax
mov dword [ebp - 0xa8], eax
cmp dword [ebp - 0xa8], 0xfffffffb
jl 0x1003c4e4
mov dword [ebp - 0x84], 1
mov dword [ebp - 0x16c], 0
jmp 0x1003c3ac
mov eax, dword [ebp - 0x16c]
inc eax
mov dword [ebp - 0x16c], eax
cmp dword [ebp - 0x16c], 3
jge 0x1003c3c8
mov eax, dword [ebp - 0x16c]
mov dword [ebp + eax*4 - 0x9c4], 0xfaab39e
jmp 0x1003c39f
mov dword [ebp - 0x84], 0
jmp 0x1003c3e1
mov eax, dword [ebp - 0x84]
inc eax
mov dword [ebp - 0x84], eax
cmp dword [ebp - 0x84], 0x13
jg 0x1003c4df
mov dword [ebp - 0x1b0], 0xe58b
mov dword [ebp - 0x38], 6
cmp dword [ebp - 0x1b0], 0
jne 0x1003c414
mov dword [ebp - 0x29c], 1
jmp 0x1003c41b
and dword [ebp - 0x29c], 0
mov eax, dword [ebp - 0x29c]
mov dword [ebp - 0x38], eax
mov eax, dword [ebp - 0x38]
mov dword [ebp - 0x7cc], eax
mov eax, dword [ebp - 0x84]
mov dword [ebp - 0x7d4], eax
cmp dword [ebp - 0x1b0], 0xffffffff
ja 0x1003c44e
mov dword [ebp - 0x3a4], 1
jmp 0x1003c455
and dword [ebp - 0x3a4], 0
mov eax, dword [ebp - 0x84]
imul eax, dword [ebp - 0x3a4]
test eax, eax
je 0x1003c48e
mov dword [ebp - 0x38], 0
jmp 0x1003c476
mov eax, dword [ebp - 0x38]
inc eax
mov dword [ebp - 0x38], eax
cmp dword [ebp - 0x38], 3
jge 0x1003c48c
mov eax, dword [ebp - 0x38]
mov dword [ebp + eax*4 - 0x9c4], 0xffffffff
jmp 0x1003c46f
jmp 0x1003c4da
mov dword [ebp - 0x50c], 0x25ec5604
push 0x1e57
push 0x306b
push 0x456b
lea eax, [ebp - 0x1b0]
push eax
lea eax, [ebp - 0xa8]
push eax
lea eax, [ebp - 0x50c]
push eax
push 0x4acb
push 0
push 1
lea eax, [ebp - 0x38]
push eax
push 0
lea eax, [ebp - 0x4e0]
push eax
call fcn.1003a940
add esp, 0x30
jmp 0x1003c3d4
jmp 0x1003c36f
mov byte [ebp - 0x40], 0
movzx eax, byte [ebp - 0x40]
test eax, eax
je 0x1003c4fd
push 0
push 0x3f2
call dword [sym.imp.USER32.dll_GetWindowThreadProcessId]
mov eax, dword [ebp - 0x1d0]
mov dword [ebp - 0x210], eax
push 1
push 1
push 0x2669
push 1
push 0x2a3e
call fcn.10035fe2
add esp, 0x14
mov eax, dword [ebp - 0x210]
movzx eax, word [eax]
cmp eax, 0x5a4d
je 0x1003c53c
mov eax, dword [ebp - 0x68]
and dword [eax], 0
jmp 0x10040104
mov dword [ebp - 0x7dc], 0
mov dword [ebp - 0x7e4], 0x3f4f46db
mov dword [ebp - 0x7ec], 0x1f665683
mov dword [ebp - 0x88], 0xffffffff
mov dword [ebp - 0x7f4], 0xffffffff
mov dword [ebp - 0x7fc], 0x40194ddb
mov dword [ebp - 0x94], 0x9f30cc2f
mov dword [ebp - 0x104], 0
jmp 0x1003c59b
mov eax, dword [ebp - 0x104]
inc eax
mov dword [ebp - 0x104], eax
cmp dword [ebp - 0x104], 3
jge 0x1003c5b7
mov eax, dword [ebp - 0x104]
mov dword [ebp + eax*4 - 0x87c], 4
jmp 0x1003c58e
push 0x7934
push 0x2e33
push 0
push 0x4e58
push 1
push 0x6f11
lea eax, [ebp - 0x94]
push eax
push 0x22e9
call fcn.1003904b
add esp, 0x20
mov dword [ebp - 0x88], 2
jmp 0x1003c5fc
mov eax, dword [ebp - 0x88]
dec eax
mov dword [ebp - 0x88], eax
cmp dword [ebp - 0x88], 0
jl 0x1003c6a2
mov eax, dword [ebp - 0x88]
cmp dword [ebp + eax*4 - 0x87c], 0
je 0x1003c61e
jmp 0x1003c6a2
mov dword [ebp - 0x94], 0
jmp 0x1003c637
mov eax, dword [ebp - 0x94]
inc eax
mov dword [ebp - 0x94], eax
cmp dword [ebp - 0x94], 2
jg 0x1003c69d
mov dword [ebp - 0x584], 0xfffffffe
mov eax, dword [ebp - 0x584]
mov ecx, dword [ebp - 0x88]
mov dword [ebp + ecx*4 - 0x87c], eax
mov byte [ebp - 0x61], 0
movzx eax, byte [ebp - 0x61]
test eax, eax
je 0x1003c69b
push 0xf6e
push 0x2a49
push 0xc41
push 0x423f
push 0x5a2f
push 0x76c3
push 0
push 0x2257
push 0x860
call fcn.100406cb
add esp, 0x24
jmp 0x1003c62a
jmp 0x1003c5ef
mov eax, dword [ebp - 0x210]
mov ecx, dword [ebp - 0x1d0]
add ecx, dword [eax + 0x3c]
mov dword [ebp - 0xb0], ecx
mov dword [ebp - 0xdc], 0x70ad6f2e
mov dword [ebp - 0x6c4], 0xffab8c3a
mov dword [ebp - 0x6c0], 0xffab8c3a
mov dword [ebp - 0x6bc], 0xffab8c3a
mov dword [ebp - 0x6b8], 0xffab8c3a
lea ecx, [ebp - 0x191]
call fcn.100132e4
push eax
lea eax, [ebp - 0x6b4]
push eax
lea eax, [ebp - 0x6c4]
push eax
lea ecx, [ebp - 0x9e4]
call fcn.100132e7
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0x6e4]
call fcn.10013237
mov dword [ebp - 4], 1
mov dword [ebp - 0x804], 0xe60d743c
mov dword [ebp - 0x688], 0x43334adc
mov dword [ebp - 0x684], 0x43334adc
mov dword [ebp - 0x680], 0x43334adc
mov dword [ebp - 0x67c], 0x43334adc
lea ecx, [ebp - 0x1a1]
call fcn.100132e4
push eax
lea eax, [ebp - 0x678]
push eax
lea eax, [ebp - 0x688]
push eax
lea ecx, [ebp - 0xa0c]
call fcn.100132e7
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0x9dc]
call fcn.10013237
mov byte [ebp - 4], 2
mov dword [ebp - 0x14c], 0
jmp 0x1003c7a9
mov eax, dword [ebp - 0x14c]
inc eax
mov dword [ebp - 0x14c], eax
cmp dword [ebp - 0x14c], 2
jge 0x1003c7c5
mov eax, dword [ebp - 0x14c]
mov dword [ebp + eax*4 - 0x658], 0x8fab8d23
jmp 0x1003c79c
mov dword [ebp - 0xdc], 0
jmp 0x1003c7de
mov eax, dword [ebp - 0xdc]
inc eax
mov dword [ebp - 0xdc], eax
cmp dword [ebp - 0xdc], 0x1d
jne 0x1003cb01
mov dword [ebp - 0xc0], 1
mov dword [ebp - 0xc0], 0
jmp 0x1003c80e
mov eax, dword [ebp - 0xc0]
inc eax
mov dword [ebp - 0xc0], eax
cmp dword [ebp - 0xc0], 3
jg 0x1003cafc
mov dword [ebp - 0x34], 0
mov dword [ebp - 0x5c4], 0xee1d4595
mov dword [ebp - 0x34], 3
jmp 0x1003c83c
mov eax, dword [ebp - 0x34]
dec eax
mov dword [ebp - 0x34], eax
cmp dword [ebp - 0x34], 0
jl 0x1003c859
push dword [ebp - 0x34]
lea ecx, [ebp - 0x6e4]
call fcn.10013282
cmp dword [eax], 0
je 0x1003c857
jmp 0x1003c859
jmp 0x1003c835
mov dword [ebp - 0x34], 0
jmp 0x1003c869
mov eax, dword [ebp - 0x34]
inc eax
mov dword [ebp - 0x34], eax
cmp dword [ebp - 0x34], 3
jg 0x1003caf7
push 3
lea ecx, [ebp - 0x4c0]
call fcn.100131db
mov byte [ebp - 4], 3
mov dword [ebp - 0x580], 0xffffffff
push 1
push 0x245
lea eax, [ebp - 0x80c]
push eax
push 0x7097
push 0x574e
push 1
lea eax, [ebp - 0x4c0]
push eax
push 0
push 0x26a0
call fcn.10037a6d
add esp, 0x24
mov byte [ebp - 0x42], 0
push 0x7f65
push 1
lea eax, [ebp - 0x42]
push eax
push 0x6c4f
push 0x3a2c
call fcn.100360c7
add esp, 0x14
mov dword [ebp - 0x47c], 0x790e
mov dword [ebp - 0x4f8], 0x100087fc
cmp dword [ebp - 0x47c], 0x79f3
jle 0x1003c9da
and dword [ebp - 0x10c], 0
jmp 0x1003c919
mov eax, dword [ebp - 0x10c]
inc eax
mov dword [ebp - 0x10c], eax
cmp dword [ebp - 0x10c], 0x6d9
jge 0x1003c9da
and dword [ebp - 0x18c], 0
jmp 0x1003c93f
mov eax, dword [ebp - 0x18c]
inc eax
mov dword [ebp - 0x18c], eax
cmp dword [ebp - 0x18c], 0x35b3
jge 0x1003c9d5
and dword [ebp - 0x114], 0
jmp 0x1003c965
mov eax, dword [ebp - 0x114]
inc eax
mov dword [ebp - 0x114], eax
cmp dword [ebp - 0x114], 0x42da
jge 0x1003c9d0
mov eax, dword [ebp - 0x10c]
mov ecx, dword [ebp - 0x18c]
sar eax, cl
xor eax, dword [ebp - 0x114]
cdq
mov dword [ebp - 0x568], eax
mov dword [ebp - 0x564], edx
push dword [ebp - 0x564]
push dword [ebp - 0x568]
lea ecx, [ebp - 0xa24]
call fcn.1000a74e
pop ecx
pop ecx
mov dword [ebp - 0x4e8], eax
mov ecx, dword [ebp - 0x4e8]
call fcn.10012ea5
push eax
call fcn.100537c3
pop ecx
lea ecx, [ebp - 0xa24]
call fcn.10012e9b
jmp 0x1003c958
jmp 0x1003c932
jmp 0x1003c90c
push 1
lea ecx, [ebp - 0x4c0]
call fcn.10013282
and dword [eax], 0
jmp 0x1003ca10
push 1
lea ecx, [ebp - 0x4c0]
call fcn.10013282
mov dword [ebp - 0x2a4], eax
mov eax, dword [ebp - 0x2a4]
mov eax, dword [eax]
inc eax
mov ecx, dword [ebp - 0x2a4]
mov dword [ecx], eax
push 1
lea ecx, [ebp - 0x4c0]
call fcn.10013282
cmp dword [eax], 3
jg 0x1003ca9b
mov dword [ebp - 0x4f0], 0x8ab9c279
lea eax, [ebp - 0x580]
push eax
push 0x1ae3
lea eax, [ebp - 0x4f0]
push eax
lea eax, [ebp - 0x4c0]
push eax
lea eax, [ebp - 0x5c4]
push eax
lea eax, [ebp - 0xc0]
push eax
push 1
push 1
lea eax, [ebp - 0x6e4]
push eax
push 0x50df
push 0x72f2
push 0x16c8
push 0x6961
call fcn.10036159
add esp, 0x34
push 1
push 1
push 0x57b2
push 0x601b
push 0x23de
call fcn.10039350
add esp, 0x14
jmp 0x1003c9ec
mov byte [ebp - 4], 4
cmp dword [ebp - 0x47c], 0x7573
jge 0x1003cab7
push dword [ebp - 0x4f8]
call fcn.100537c3
pop ecx
jmp 0x1003cad3
mov dword [ebp - 4], 3
jmp 0x1003cae3
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x4c0]
call fcn.1001325d
jmp 0x1003c862
jmp 0x1003c801
jmp 0x1003c7d1
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x658]
dec eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x658], eax
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x9dc]
call fcn.1001325d
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x6e4]
call fcn.1001325d
mov eax, dword [ebp - 0xb0]
cmp dword [eax], 0x4550
je 0x1003d249
mov dword [ebp - 0x154], 0xfffffffa
mov dword [ebp - 0x2ac], 0x1e19e95d
push 2
lea ecx, [ebp - 0x6fc]
call fcn.100131db
mov dword [ebp - 4], 6
mov dword [ebp - 0x2c], 0
jmp 0x1003cb84
mov eax, dword [ebp - 0x2c]
inc eax
mov dword [ebp - 0x2c], eax
cmp dword [ebp - 0x2c], 3
jge 0x1003cb9a
mov eax, dword [ebp - 0x2c]
mov dword [ebp + eax*4 - 0x88c], 0xb5c6eff3
jmp 0x1003cb7d
push 0
lea eax, [ebp - 0x2c]
push eax
push 0x539
lea eax, [ebp - 0x6fc]
push eax
call fcn.100415ae
add esp, 0x10
mov dword [ebp - 0x2c], 0
jmp 0x1003cbc4
mov eax, dword [ebp - 0x2c]
inc eax
mov dword [ebp - 0x2c], eax
cmp dword [ebp - 0x2c], 2
jge 0x1003cbda
mov eax, dword [ebp - 0x2c]
mov dword [ebp + eax*4 - 0x794], 0x8787d636
jmp 0x1003cbbd
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0x88c], 0
mov dword [ebp - 0x154], 0
push 3
pop eax
test eax, eax
je 0x1003cc25
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x88c]
mov dword [ebp - 0x154], eax
mov eax, dword [ebp - 0x154]
neg eax
je 0x1003cc25
mov dword [ebp - 0x588], 1
jmp 0x1003cc2c
and dword [ebp - 0x588], 0
mov eax, dword [ebp - 0x2ac]
mov dword [ebp - 0x500], eax
push 1
lea ecx, [ebp - 0x6fc]
call fcn.10013282
mov ecx, dword [ebp - 0x500]
mov dword [eax], ecx
mov eax, dword [ebp - 0x154]
sub eax, dword [ebp - 0x2ac]
cmp eax, 0x21cd4309
jle 0x1003cc6c
mov dword [ebp - 0x3ac], 1
jmp 0x1003cc73
and dword [ebp - 0x3ac], 0
cmp dword [ebp - 0x3ac], 0
jl 0x1003cc88
mov dword [ebp - 0x2b4], 1
jmp 0x1003cc8f
and dword [ebp - 0x2b4], 0
cmp dword [ebp - 0x2b4], 0x9c27
je 0x1003cca7
mov dword [ebp - 0x42c], 1
jmp 0x1003ccae
and dword [ebp - 0x42c], 0
cmp dword [ebp - 0x42c], 0xf2ee76f5
jb 0x1003ccc6
mov dword [ebp - 0x2bc], 1
jmp 0x1003cccd
and dword [ebp - 0x2bc], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x2bc]
mov dword [ebp + eax - 0x794], ecx
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x6fc]
call fcn.1001325d
push 4
lea ecx, [ebp - 0x1e0]
call fcn.100131db
mov dword [ebp - 4], 7
mov dword [ebp - 0x20], 0xfffffffb
mov dword [ebp - 0x124], 0xffffffff
mov dword [ebp - 0x174], 0
push 1
lea ecx, [ebp - 0x5e0]
call fcn.100131db
mov byte [ebp - 4], 8
mov dword [ebp - 0x594], 0x23579942
mov dword [ebp - 0x510], 0xa000c971
lea eax, [ebp - 0x1e0]
push eax
lea eax, [ebp - 0x5f4]
push eax
push 1
push 1
call fcn.10036ea8
add esp, 0x10
lea eax, [ebp - 0x5f4]
push eax
lea eax, [ebp - 0x5e0]
push eax
push 0x3aac
push 1
push 0
push 0x2ec2
call fcn.10037ea5
add esp, 0x18
mov dword [ebp - 0x20], 0
jmp 0x1003cd91
mov eax, dword [ebp - 0x20]
inc eax
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 3
jg 0x1003d1fe
mov dword [ebp - 0x7c], 0xfffb
mov dword [ebp - 0x1b8], 0x3ec3e1b8
mov dword [ebp - 0x814], 0xf4aedf2f
mov dword [ebp - 0x81c], 0xffffffff
mov dword [ebp - 0x824], 1
mov dword [ebp - 0x82c], 0xffffffff
mov dword [ebp - 0x834], 0x28d0d4a4
mov dword [ebp - 0x984], 0xe333b8fb
mov dword [ebp - 0x980], 0xe333b8fb
mov dword [ebp - 0x97c], 0xe333b8fb
mov dword [ebp - 0x978], 0xe333b8fb
mov dword [ebp - 0x11c], 0
jmp 0x1003ce1f
mov eax, dword [ebp - 0x11c]
inc eax
mov dword [ebp - 0x11c], eax
cmp dword [ebp - 0x11c], 2
jge 0x1003ce3b
mov eax, dword [ebp - 0x11c]
mov dword [ebp + eax*4 - 0x650], 0xffffffff
jmp 0x1003ce12
lea eax, [ebp - 0x7c]
push eax
push 1
push 0x2518
push 0
push 0x6f24
lea eax, [ebp - 0x20]
push eax
lea eax, [ebp - 0x1e0]
push eax
lea eax, [ebp - 0x124]
push eax
push 0x3b62
call fcn.10039bb4
add esp, 0x24
push 0
lea ecx, [ebp - 0x1e0]
call fcn.10013282
mov esi, eax
push 3
lea ecx, [ebp - 0x1e0]
call fcn.10013282
mov eax, dword [eax]
cmp eax, dword [esi]
jle 0x1003ce9a
mov dword [ebp - 0x2cc], 1
jmp 0x1003cea1
and dword [ebp - 0x2cc], 0
push dword [ebp - 0x20]
lea ecx, [ebp - 0x1e0]
call fcn.10013282
mov eax, dword [ebp - 0x7c]
mov dword [ebp - 0x83c], eax
mov eax, dword [ebp - 0x174]
mov dword [ebp - 0x844], eax
push 0
lea ecx, [ebp - 0x5e0]
call fcn.10013282
mov esi, eax
push dword [ebp - 0x20]
lea ecx, [ebp - 0x1e0]
call fcn.10013282
mov eax, dword [eax]
cmp eax, dword [esi]
jg 0x1003cef3
mov dword [ebp - 0x3b4], 1
jmp 0x1003cefa
and dword [ebp - 0x3b4], 0
cmp dword [ebp - 0x3b4], 0xfffffffe
jne 0x1003cf0f
mov dword [ebp - 0x1e8], 1
jmp 0x1003cf16
and dword [ebp - 0x1e8], 0
push 0
lea ecx, [ebp - 0x5e0]
call fcn.10013282
mov ecx, dword [ebp - 0x1e8]
mov dword [eax], ecx
mov eax, dword [ebp - 0x7c]
cmp dword [ebp - 0x1e8], eax
jg 0x1003cf42
mov dword [ebp - 0x2c4], 1
jmp 0x1003cf49
and dword [ebp - 0x2c4], 0
push dword [ebp - 0x20]
lea ecx, [ebp - 0x1e0]
call fcn.10013282
mov eax, dword [eax]
cmp eax, dword [ebp - 0x2c4]
jle 0x1003cf7d
push dword [ebp - 0x20]
lea ecx, [ebp - 0x1e0]
call fcn.10013282
cmp dword [eax], 0
jne 0x1003cf7d
and dword [ebp - 0x464], 0
jmp 0x1003cf87
mov dword [ebp - 0x464], 1
mov eax, dword [ebp - 0x464]
mov dword [ebp - 0x1b8], eax
mov eax, dword [ebp - 0x1b8]
cmp eax, dword [ebp - 0x174]
jl 0x1003cfad
mov dword [ebp - 0x3bc], 1
jmp 0x1003cfb4
and dword [ebp - 0x3bc], 0
mov eax, dword [ebp - 0x2cc]
cmp eax, dword [ebp - 0x3bc]
jne 0x1003cfce
mov dword [ebp - 0x2d4], 1
jmp 0x1003cfd5
and dword [ebp - 0x2d4], 0
mov eax, dword [ebp - 0x20]
cmp dword [ebp - 0x2d4], eax
jle 0x1003cff5
cmp dword [ebp - 0x174], 0
je 0x1003cff5
mov dword [ebp - 0x508], 1
jmp 0x1003cffc
and dword [ebp - 0x508], 0
mov eax, dword [ebp - 0x594]
mov dword [ebp - 0x84c], eax
mov eax, 0xffff
cmp eax, 0x7911
jb 0x1003d020
mov dword [ebp - 0x434], 1
jmp 0x1003d027
and dword [ebp - 0x434], 0
mov eax, dword [ebp - 0x124]
sub eax, dword [ebp - 0x434]
jne 0x1003d03c
cmp dword [ebp - 0x1b8], 0
mov eax, dword [ebp - 0x7c]
cmp eax, dword [ebp - 0x124]
je 0x1003d053
mov dword [ebp - 0x2dc], 1
jmp 0x1003d05a
and dword [ebp - 0x2dc], 0
push dword [ebp - 0x20]
lea ecx, [ebp - 0x1e0]
call fcn.10013282
mov ecx, dword [ebp - 0x2dc]
cmp ecx, dword [eax]
jge 0x1003d07e
mov dword [ebp - 0x3c4], 1
jmp 0x1003d085
and dword [ebp - 0x3c4], 0
mov eax, dword [ebp - 0x7c]
cmp dword [ebp - 0x3c4], eax
jg 0x1003d09c
mov dword [ebp - 0x2e4], 1
jmp 0x1003d0a3
and dword [ebp - 0x2e4], 0
push 0
lea ecx, [ebp - 0x1e0]
call fcn.10013282
mov ecx, dword [ebp - 0x2e4]
cmp ecx, dword [eax]
jg 0x1003d0c6
mov dword [ebp - 0x490], 1
jmp 0x1003d0cd
and dword [ebp - 0x490], 0
mov eax, dword [ebp - 0x7c]
imul eax, dword [ebp - 0x490]
cmp eax, 0x3cfebdab
jle 0x1003d1d0
push 1
lea ecx, [ebp - 0x8ac]
call fcn.100131db
mov byte [ebp - 4], 9
mov dword [ebp - 0x854], 1
mov dword [ebp - 0x85c], 3
push 4
lea ecx, [ebp - 0x89c]
call fcn.100131db
mov byte [ebp - 4], 0xa
mov dword [ebp - 0x864], 0x9e13a3a1
mov dword [ebp - 0x86c], 0x6a6c3430
mov dword [ebp - 0x9c], 0
jmp 0x1003d145
mov eax, dword [ebp - 0x9c]
inc eax
mov dword [ebp - 0x9c], eax
cmp dword [ebp - 0x9c], 1
jge 0x1003d167
push dword [ebp - 0x9c]
lea ecx, [ebp - 0x8ac]
call fcn.10013282
mov dword [eax], 0xa6f32215
jmp 0x1003d138
push 0x3c58
push 0
lea eax, [ebp - 0x89c]
push eax
lea eax, [ebp - 0x9c]
push eax
push 0x1a70
push 0xcc0
push 0x73b8
push 0
call fcn.10044416
add esp, 0x20
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x650]
dec eax
push 4
pop ecx
shl ecx, 0
mov dword [ebp + ecx - 0x650], eax
mov byte [ebp - 4], 9
lea ecx, [ebp - 0x89c]
call fcn.1001325d
mov byte [ebp - 4], 8
lea ecx, [ebp - 0x8ac]
call fcn.1001325d
jmp 0x1003d1f9
push 0x4072
push 0x78c8
push 0
lea eax, [ebp - 0x510]
push eax
lea eax, [ebp - 0x174]
push eax
lea eax, [ebp - 0x5e0]
push eax
call fcn.100402cf
add esp, 0x18
jmp 0x1003cd8a
lea eax, [ebp - 0x124]
push eax
push 1
push 0x6ef6
push 0
push 0x3f7e
push 0x1cc9
call fcn.10037695
add esp, 0x18
mov byte [ebp - 4], 7
lea ecx, [ebp - 0x5e0]
call fcn.1001325d
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x1e0]
call fcn.1001325d
mov eax, dword [ebp - 0x68]
and dword [eax], 0
jmp 0x10040104
push 0x67fa
push 0x1eac
push 0
lea eax, [ebp - 0x148]
push eax
lea eax, [ebp - 0xb0]
push eax
push 1
push 0x6ed9
push 1
call fcn.1003a5f8
add esp, 0x20
mov dword [ebp - 0x968], 1
push 0x53f8
push 1
push 1
push 0x5f8e
call fcn.10039563
add esp, 0x10
mov byte [ebp - 0x59], 0
movzx eax, byte [ebp - 0x59]
test eax, eax
je 0x1003d2cf
push 1
push 0x7fa
push 0x2d7a
push 0x2c76
push 1
push 0x72fe
push 0x5dbf
push 0x5f1f
push 0x7dfa
call fcn.10037269
add esp, 0x24
cmp dword [ebp - 0x148], 0
jne 0x1003d88c
mov dword [ebp - 0x14], 1
mov dword [ebp - 0x6b0], 0x537c
mov dword [ebp - 0x6ac], 0x537c
mov dword [ebp - 0x6a8], 0x537c
mov dword [ebp - 0x6a4], 0x537c
lea ecx, [ebp - 0x1a2]
call fcn.100132e4
push eax
lea eax, [ebp - 0x6a0]
push eax
lea eax, [ebp - 0x6b0]
push eax
lea ecx, [ebp - 0xa04]
call fcn.100132e7
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0x5f0]
call fcn.10013237
mov dword [ebp - 4], 0xb
mov dword [ebp - 0x1c0], 0xfffffffe
mov dword [ebp - 0x15c], 0
jmp 0x1003d36a
mov eax, dword [ebp - 0x15c]
inc eax
mov dword [ebp - 0x15c], eax
cmp dword [ebp - 0x15c], 1
jge 0x1003d386
mov eax, dword [ebp - 0x15c]
mov dword [ebp + eax*4 - 0x1f0], 1
jmp 0x1003d35d
mov eax, dword [ebp - 0x14]
mov dword [ebp - 0x970], eax
cmp dword [ebp - 0x14], 9
jb 0x1003d3a1
mov dword [ebp - 0x2ec], 1
jmp 0x1003d3a8
and dword [ebp - 0x2ec], 0
mov eax, dword [ebp - 0x14]
cmp dword [ebp - 0x2ec], eax
je 0x1003d3bf
mov dword [ebp - 0x3cc], 1
jmp 0x1003d3c6
and dword [ebp - 0x3cc], 0
mov eax, dword [ebp - 0x14]
cmp dword [ebp - 0x3cc], eax
je 0x1003d3dd
mov dword [ebp - 0x2f4], 1
jmp 0x1003d3e4
and dword [ebp - 0x2f4], 0
cmp dword [ebp - 0x2f4], 0xfffffffb
jge 0x1003d3f9
mov dword [ebp - 0x5cc], 1
jmp 0x1003d400
and dword [ebp - 0x5cc], 0
mov eax, dword [ebp - 0x14]
mov dword [ebp - 0x9a0], eax
cmp dword [ebp - 0x14], 0
jne 0x1003d421
mov eax, 0x67457993
test eax, eax
jne 0x1003d421
and dword [ebp - 0x43c], 0
jmp 0x1003d42b
mov dword [ebp - 0x43c], 1
mov eax, dword [ebp - 0x14]
cmp dword [ebp - 0x43c], eax
je 0x1003d442
mov dword [ebp - 0x2fc], 1
jmp 0x1003d449
and dword [ebp - 0x2fc], 0
cmp dword [ebp - 0x2fc], 0x5761
jg 0x1003d46a
mov eax, 0x360d
test eax, eax
je 0x1003d46a
mov dword [ebp - 0x3d4], 1
jmp 0x1003d471
and dword [ebp - 0x3d4], 0
cmp dword [ebp - 0x3d4], 0xffff
jb 0x1003d489
mov dword [ebp - 0x304], 1
jmp 0x1003d490
and dword [ebp - 0x304], 0
cmp dword [ebp - 0x304], 0x11e2
jge 0x1003d4a8
mov dword [ebp - 0x518], 1
jmp 0x1003d4af
and dword [ebp - 0x518], 0
mov eax, dword [ebp - 0x14]
mov dword [ebp - 0x9a8], eax
mov eax, 0x1fc3eee
sub eax, dword [ebp - 0x14]
je 0x1003d4ce
mov dword [ebp - 0x59c], 1
jmp 0x1003d4d5
and dword [ebp - 0x59c], 0
mov eax, dword [ebp - 0x14]
mov dword [ebp - 0x9b0], eax
cmp dword [ebp - 0x14], 0
je 0x1003d5ea
mov dword [ebp - 0x520], 0
mov dword [ebp - 0x14], 3
jmp 0x1003d502
mov eax, dword [ebp - 0x14]
dec eax
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 0
jl 0x1003d5b0
mov dword [ebp - 0xb8], 1
mov dword [ebp - 0xb8], 0
jmp 0x1003d52f
mov eax, dword [ebp - 0xb8]
inc eax
mov dword [ebp - 0xb8], eax
cmp dword [ebp - 0xb8], 3
jg 0x1003d56f
push dword [ebp - 0x14]
lea ecx, [ebp - 0x5f0]
call fcn.10013282
cmp dword [eax], 0
je 0x1003d54d
jmp 0x1003d56f
push 0x65a3
push 0
push 0x43a1
lea eax, [ebp - 0x520]
push eax
push 0x31a1
call fcn.100444dd
add esp, 0x14
jmp 0x1003d522
lea eax, [ebp - 0x5f0]
push eax
push 1
push 0x7681
push 1
push 0x6c4d
push 0x36be
push 0x4d9f
push 0x56
push 0x41b8
push 0x2d7
push 1
lea eax, [ebp - 0xb8]
push eax
call fcn.1003973f
add esp, 0x30
jmp 0x1003d4fb
lea eax, [ebp - 0x1c0]
push eax
push 0x5c19
push 0x18bb
lea eax, [ebp - 0x14]
push eax
push 0x5210
push 0x6d54
push 0x39a5
push 1
push 1
push 0x3a9b
call fcn.1003759b
add esp, 0x28
jmp 0x1003d84d
push 1
lea ecx, [ebp - 0x714]
call fcn.100131db
mov byte [ebp - 4], 0xc
mov dword [ebp - 0x1c8], 0xfffffff8
mov dword [ebp - 0x8c], 0x95921ba5
mov dword [ebp - 0xa4], 0x4e48c0c8
mov dword [ebp - 0x184], 0x16590181
mov dword [ebp - 0x12c], 0x42ee1e3c
push 0
lea eax, [ebp - 0x9b8]
push eax
push 1
push 0x1a62
push 0x5172
push 0x2d36
push 1
lea eax, [ebp - 0x714]
push eax
call fcn.1003884e
add esp, 0x20
cmp dword [ebp - 0xa4], 0
jne 0x1003d668
cmp dword [ebp - 0x8c], 0
mov eax, dword [ebp - 0xa4]
add eax, 0x32dc1b2d
cmp dword [ebp - 0x8c], eax
jge 0x1003d687
mov dword [ebp - 0x608], 1
jmp 0x1003d68e
and dword [ebp - 0x608], 0
mov eax, dword [ebp - 0xa4]
mov dword [ebp - 0x988], eax
mov eax, dword [ebp - 0xa4]
add eax, 8
cmp eax, dword [ebp - 0x14]
jne 0x1003d6b4
mov dword [ebp - 0x46c], 1
jmp 0x1003d6bb
and dword [ebp - 0x46c], 0
push 0
lea ecx, [ebp - 0x714]
call fcn.10013282
mov dword [ebp - 0x200], eax
mov eax, dword [ebp - 0x200]
mov eax, dword [eax]
inc eax
mov ecx, dword [ebp - 0x200]
mov dword [ecx], eax
mov eax, dword [ebp - 0x200]
mov eax, dword [eax]
mov dword [ebp - 0x1c8], eax
mov eax, dword [ebp - 0x8c]
sub eax, dword [ebp - 0x46c]
mov dword [ebp - 0x14], eax
mov eax, dword [ebp - 0x14]
mov dword [ebp - 0x8c], eax
mov eax, dword [ebp - 0x1c8]
sub eax, dword [ebp - 0x8c]
mov dword [ebp - 0x1c0], eax
mov eax, dword [ebp - 0x1c0]
mov dword [ebp - 0x184], eax
mov eax, dword [ebp - 0x184]
mov dword [ebp - 0x12c], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x12c]
cmp ecx, dword [ebp + eax - 0x1f0]
je 0x1003d750
mov dword [ebp - 0x30c], 1
jmp 0x1003d757
and dword [ebp - 0x30c], 0
cmp dword [ebp - 0x30c], 0x8f302d78
jne 0x1003d76f
mov dword [ebp - 0x3dc], 1
jmp 0x1003d776
and dword [ebp - 0x3dc], 0
push 0
lea ecx, [ebp - 0x5f0]
call fcn.10013282
mov ecx, dword [ebp - 0x3dc]
cmp ecx, dword [eax]
jle 0x1003d7a2
cmp dword [ebp - 0x12c], 0
je 0x1003d7a2
mov dword [ebp - 0x314], 1
jmp 0x1003d7a9
and dword [ebp - 0x314], 0
mov eax, dword [ebp - 0x314]
inc eax
jne 0x1003d7c4
cmp dword [ebp - 0x12c], 0
jne 0x1003d7c4
and dword [ebp - 0x444], 0
jmp 0x1003d7ce
mov dword [ebp - 0x444], 1
push 3
lea ecx, [ebp - 0x5f0]
call fcn.10013282
mov eax, 0xe5c5
test eax, eax
je 0x1003d7f9
mov eax, 0xcf48
test eax, eax
je 0x1003d7f9
mov dword [ebp - 0x31c], 1
jmp 0x1003d800
and dword [ebp - 0x31c], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x31c]
mov dword [ebp + eax - 0x1f0], ecx
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x1f0]
mov dword [ebp - 0x7a0], eax
mov eax, dword [ebp - 0xa4]
mov dword [ebp - 0x184], eax
mov eax, dword [ebp - 0x184]
mov dword [ebp - 0x1c8], eax
mov byte [ebp - 4], 0xb
lea ecx, [ebp - 0x714]
call fcn.1001325d
push 0x1272
push 0x4f70
push 1
push 1
push 0x2e53
push 0x5f8f
push 0x60b3
call fcn.100398c4
add esp, 0x1c
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x5f0]
call fcn.1001325d
mov eax, dword [ebp - 0x68]
and dword [eax], 0
jmp 0x10040104
push 0x31e
push dword [ebp - 0x210]
push 0x7aa4
lea eax, [ebp - 0x30]
push eax
push 0x59
push 0x5a26
push 0xe51
push 0x4b1e
push 0x7fa9
push 0x447d
lea eax, [ebp - 0x920]
push eax
push 0x33d2
push 1
push 0x6f10
push 0x6612
push 0x2ce8
push dword [ebp - 0xb0]
push 1
lea eax, [ebp - 0x148]
push eax
push 0x4ec7
push 0x7b15
push 1
push 0x46b6
call fcn.10034d2c
add esp, 0x5c
push 4
lea ecx, [ebp - 0x614]
call fcn.100131db
mov dword [ebp - 4], 0xd
mov dword [ebp - 0xc8], 0xffffffff
mov dword [ebp - 0x73c], 0x8e17c109
mov dword [ebp - 0x738], 0x8e17c109
mov dword [ebp - 0x734], 0x8e17c109
mov dword [ebp - 0x730], 0x8e17c109
mov dword [ebp - 0x5a4], 1
mov dword [ebp - 0x74c], 0
lea eax, [ebp - 0x858]
push eax
push 0x5a42
push 0x26a2
push 1
push 0x21a8
push 0
lea eax, [ebp - 0x614]
push eax
call fcn.1003b98c
add esp, 0x1c
mov dword [ebp - 0xc8], 0
jmp 0x1003d99c
mov eax, dword [ebp - 0xc8]
inc eax
mov dword [ebp - 0xc8], eax
cmp dword [ebp - 0xc8], 3
jg 0x1003da78
mov dword [ebp - 0x70], 0xe1265ab3
mov dword [ebp - 0x70], 3
jmp 0x1003d9c0
mov eax, dword [ebp - 0x70]
dec eax
mov dword [ebp - 0x70], eax
cmp dword [ebp - 0x70], 0
jl 0x1003da73
mov dword [ebp - 0x528], 0
push dword [ebp - 0xc8]
lea ecx, [ebp - 0x614]
call fcn.10013282
mov eax, dword [eax]
mov dword [ebp - 0x528], eax
push 1
lea ecx, [ebp - 0x614]
call fcn.10013282
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0x73c], 0xfffffffa
push 0xfffffffffffffffa
pop eax
cmp eax, 4
jbe 0x1003da1f
mov dword [ebp - 0x3e4], 1
jmp 0x1003da26
and dword [ebp - 0x3e4], 0
mov eax, dword [ebp - 0x70]
cmp eax, dword [ebp - 0x3e4]
jl 0x1003da3d
mov dword [ebp - 0x324], 1
jmp 0x1003da44
and dword [ebp - 0x324], 0
mov eax, dword [ebp - 0x70]
cmp dword [ebp - 0x324], eax
jg 0x1003da5b
mov dword [ebp - 0x488], 1
jmp 0x1003da62
and dword [ebp - 0x488], 0
mov eax, dword [ebp - 0x488]
mov dword [ebp - 0x5a4], eax
jmp 0x1003d9b9
jmp 0x1003d98f
push 0x1038
push 0x358c
push 0x6fff
push 0
push 0x2943
push 1
call fcn.1003b509
add esp, 0x18
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x614]
call fcn.1001325d
push 0x378
push 0x2837
push 0x4e4e
push 0x3c95
push 0x519a
push 0x2f3c
push 1
lea eax, [ebp - 0x1d0]
push eax
push 0x387
push 0x2d8f
push 1
lea eax, [ebp - 0x30]
push eax
lea eax, [ebp - 0xb0]
push eax
push 0x4fd7
push 0x3a17
call fcn.10039a91
add esp, 0x3c
mov dword [ebp - 0x1f8], 0x55b7cefa
mov dword [ebp - 0x5d4], 1
mov dword [ebp - 0x32c], 0x266d
mov dword [ebp - 0x530], 0x10008858
cmp dword [ebp - 0x32c], 0x28a0
jle 0x1003dc12
and dword [ebp - 0xe4], 0
jmp 0x1003db45
mov eax, dword [ebp - 0xe4]
inc eax
mov dword [ebp - 0xe4], eax
cmp dword [ebp - 0xe4], 0x354f
jge 0x1003dc0a
and dword [ebp - 0xe8], 0
jmp 0x1003db6b
mov eax, dword [ebp - 0xe8]
inc eax
mov dword [ebp - 0xe8], eax
cmp dword [ebp - 0xe8], 0xc3a
jge 0x1003dc05
and dword [ebp - 0x134], 0
jmp 0x1003db91
mov eax, dword [ebp - 0x134]
inc eax
mov dword [ebp - 0x134], eax
cmp dword [ebp - 0x134], 0x6385
jge 0x1003dc00
and dword [ebp - 0x164], 0
jmp 0x1003dbb3
mov eax, dword [ebp - 0x164]
inc eax
mov dword [ebp - 0x164], eax
cmp dword [ebp - 0x164], 0x1632
jge 0x1003dbfe
mov ecx, dword [ebp - 0x134]
sub ecx, dword [ebp - 0x164]
mov eax, dword [ebp - 0xe4]
add eax, dword [ebp - 0xe8]
sar eax, cl
cdq
mov dword [ebp - 0x574], eax
mov dword [ebp - 0x570], edx
push dword [ebp - 0x570]
push dword [ebp - 0x574]
mov ecx, 0x106128d8
call fcn.10012ec5
jmp 0x1003dba6
jmp 0x1003db84
jmp 0x1003db5e
jmp 0x1003db38
push 0
call dword [sym.imp.KERNEL32.dll_InitializeSListHead]
push 1
lea ecx, [ebp - 0x6f0]
call fcn.100131db
mov dword [ebp - 4], 0xe
mov byte [ebp - 4], 0xf
cmp dword [ebp - 0x32c], 0x2495
jge 0x1003dc46
mov edx, dword [ebp - 0x530]
mov ecx, 0x106128d8
call fcn.10015cdf
jmp 0x1003dc62
mov dword [ebp - 4], 0xe
jmp 0x1003dc72
mov dword [ebp - 0x344], 0x8e045dce
mov dword [ebp - 0x198], 0x574b
push 3
lea ecx, [ebp - 0x620]
call fcn.100131db
mov byte [ebp - 4], 0x11
push 0x47dd
push 1
push 0x6cf3
push 1
lea eax, [ebp - 0x6f0]
push eax
push 0x582a
push 0x5fb2
push 0x7a90
lea eax, [ebp - 0x24]
push eax
call fcn.10039bb4
add esp, 0x24
mov dword [ebp - 0x24], 0
jmp 0x1003dcd7
mov eax, dword [ebp - 0x24]
inc eax
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 2
jge 0x1003dced
mov eax, dword [ebp - 0x24]
mov dword [ebp + eax*4 - 0x660], 2
jmp 0x1003dcd0
mov dword [ebp - 0x24], 0
jmp 0x1003dcfd
mov eax, dword [ebp - 0x24]
inc eax
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 3
jge 0x1003dd16
push dword [ebp - 0x24]
lea ecx, [ebp - 0x620]
call fcn.10013282
or dword [eax], 0xffffffff
jmp 0x1003dcf6
mov eax, dword [ebp - 0x1f8]
mov dword [ebp - 0x754], eax
mov eax, dword [ebp - 0x1f8]
mov dword [ebp - 0x974], eax
push 0
lea ecx, [ebp - 0x620]
call fcn.10013282
cmp dword [eax], 0
je 0x1003ddc5
mov eax, dword [ebp - 0x344]
cmp eax, dword [ebp - 0x5d4]
jne 0x1003dd5e
mov dword [ebp - 0x3ec], 1
jmp 0x1003dd65
and dword [ebp - 0x3ec], 0
push 1
lea ecx, [ebp - 0x620]
call fcn.10013282
mov ecx, dword [ebp - 0x3ec]
cmp ecx, dword [eax]
jne 0x1003dd88
mov dword [ebp - 0x334], 1
jmp 0x1003dd8f
and dword [ebp - 0x334], 0
mov eax, dword [ebp - 0x1f8]
cmp eax, dword [ebp - 0x334]
jne 0x1003dda9
mov dword [ebp - 0x44c], 1
jmp 0x1003ddb0
and dword [ebp - 0x44c], 0
cmp dword [ebp - 0x44c], 5
jl 0x1003ddc5
mov dword [ebp - 0x33c], 1
jmp 0x1003ddcc
and dword [ebp - 0x33c], 0
mov eax, dword [ebp - 0x198]
mov dword [ebp - 0x538], eax
imul eax, dword [ebp - 0x33c], 0
mov dword [ebp - 0x5ac], eax
mov eax, dword [ebp - 0x198]
dec eax
mov dword [ebp - 0x198], eax
mov eax, dword [ebp - 0x538]
cmp eax, dword [ebp - 0x5ac]
jne 0x1003de0c
mov dword [ebp - 0x3f4], 1
jmp 0x1003de13
and dword [ebp - 0x3f4], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x660]
cmp dword [ebp - 0x3f4], eax
jge 0x1003de34
mov dword [ebp - 0x474], 1
jmp 0x1003de3b
and dword [ebp - 0x474], 0
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x344]
imul ecx, dword [ebp - 0x474]
sub ecx, dword [ebp + eax - 0x660]
cmp ecx, 0x57cf
jge 0x1003de69
mov dword [ebp - 0x34c], 1
jmp 0x1003de70
and dword [ebp - 0x34c], 0
push 0
lea ecx, [ebp - 0x6f0]
call fcn.10013282
mov ecx, dword [ebp - 0x34c]
mov dword [eax], ecx
mov byte [ebp - 4], 0xe
lea ecx, [ebp - 0x620]
call fcn.1001325d
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x6f0]
call fcn.1001325d
lea eax, [ebp - 0xb0]
push eax
lea eax, [ebp - 0x35c]
push eax
push 0
push 1
push 0x232a
push 0x24eb
lea eax, [ebp - 0x148]
push eax
call fcn.100398c4
add esp, 0x1c
mov dword [ebp - 0x60], 0
mov dword [ebp - 0x90], 0
mov dword [ebp - 0x60], 0
jmp 0x1003deef
mov eax, dword [ebp - 0x60]
dec eax
mov dword [ebp - 0x60], eax
cmp dword [ebp - 0x60], 0xffffffec
jne 0x1003df12
push 0x1755
push 0x2144
push 0x3a0e
push 1
push 1
call fcn.10039d8c
add esp, 0x14
jmp 0x1003dee8
mov eax, dword [ebp - 0x90]
cmp eax, dword [ebp - 0x90]
jge 0x1003df2c
mov dword [ebp - 0x3fc], 1
jmp 0x1003df33
and dword [ebp - 0x3fc], 0
mov eax, dword [ebp - 0x60]
mov dword [ebp - 0x60], eax
mov eax, dword [ebp - 0x60]
cmp eax, dword [ebp - 0x3fc]
je 0x1003df50
mov dword [ebp - 0x354], 1
jmp 0x1003df57
and dword [ebp - 0x354], 0
mov eax, dword [ebp - 0x90]
cmp dword [ebp - 0x354], eax
jne 0x1003df71
mov dword [ebp - 0x454], 1
jmp 0x1003df78
and dword [ebp - 0x454], 0
mov eax, dword [ebp - 0x90]
imul eax, dword [ebp - 0x454]
mov dword [ebp - 0x90], eax
cmp dword [ebp - 0x35c], 0
je 0x1003dfbf
push 0
push 0x3e35
lea eax, [ebp - 0x35c]
push eax
push 0x1c35
push 1
lea eax, [ebp - 0x30]
push eax
push 0xc4f
push 0x1322
call fcn.10039440
add esp, 0x20
mov dword [ebp - 0xf8], 0
mov dword [ebp - 0x75c], 0x7e6aa165
push 1
lea ecx, [ebp - 0x8ec]
call fcn.100131db
mov dword [ebp - 4], 0x12
mov dword [ebp - 0xf0], 0
jmp 0x1003e000
mov eax, dword [ebp - 0xf0]
inc eax
mov dword [ebp - 0xf0], eax
cmp dword [ebp - 0xf0], 1
jge 0x1003e022
push dword [ebp - 0xf0]
lea ecx, [ebp - 0x8ec]
call fcn.10013282
mov dword [eax], 3
jmp 0x1003dff3
mov dword [ebp - 0xf8], 0xffffffe6
jmp 0x1003e03b
mov eax, dword [ebp - 0xf8]
inc eax
mov dword [ebp - 0xf8], eax
cmp dword [ebp - 0xf8], 0xfffffffe
je 0x1003e3c8
mov dword [ebp - 0x100], 1
mov dword [ebp - 0x860], 6
push 2
lea ecx, [ebp - 0x8dc]
call fcn.100131db
mov byte [ebp - 4], 0x13
mov dword [ebp - 0x998], 0xeb61943e
mov dword [ebp - 0x994], 0xeb61943e
mov dword [ebp - 0x990], 0xeb61943e
mov dword [ebp - 0x98c], 0xeb61943e
lea eax, [ebp - 0x8dc]
push eax
lea eax, [ebp - 0x764]
push eax
push 0
push 0x3c45
push 0x2282
call fcn.10043a15
add esp, 0x14
mov dword [ebp - 0x100], 0
jmp 0x1003e0d0
mov eax, dword [ebp - 0x100]
dec eax
mov dword [ebp - 0x100], eax
cmp dword [ebp - 0x100], 0xfffffff0
jge 0x1003e3b4
mov dword [ebp - 0x930], 0x4fda7ef5
mov dword [ebp - 0x76c], 0
push 2
lea ecx, [ebp - 0x8cc]
call fcn.100131db
mov byte [ebp - 4], 0x14
mov dword [ebp - 0x6d8], 0x9448
mov dword [ebp - 0x6d4], 0x9448
mov dword [ebp - 0x6d0], 0x9448
mov dword [ebp - 0x6cc], 0x9448
lea ecx, [ebp - 0x199]
call fcn.100132e4
push eax
lea eax, [ebp - 0x6c8]
push eax
lea eax, [ebp - 0x6d8]
push eax
lea ecx, [ebp - 0x9ec]
call fcn.100132e7
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0x9d0]
call fcn.10013237
mov byte [ebp - 4], 0x15
mov dword [ebp - 0x540], 0x34bd47cd
mov dword [ebp - 0x98], 0
jmp 0x1003e186
mov eax, dword [ebp - 0x98]
inc eax
mov dword [ebp - 0x98], eax
cmp dword [ebp - 0x98], 2
jge 0x1003e1a2
mov eax, dword [ebp - 0x98]
mov dword [ebp + eax*4 - 0x484], 0x80c170c
jmp 0x1003e179
push 0x467d
push 0x6150
push 0x4969
push 0x728a
push 0x4c36
push 1
lea eax, [ebp - 0x98]
push eax
push 1
lea eax, [ebp - 0x8cc]
push eax
push 0x61e4
push 0x6f71
push 0x5269
call fcn.10037850
add esp, 0x30
push 4
pop eax
shl eax, 0
mov dword [ebp + eax - 0x484], 0
jmp 0x1003e212
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x484]
inc eax
push 4
pop ecx
shl ecx, 0
mov dword [ebp + ecx - 0x484], eax
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x484], 2
jl 0x1003e391
push 1
lea ecx, [ebp - 0x708]
call fcn.100131db
mov byte [ebp - 4], 0x16
mov dword [ebp - 0x868], 0
mov dword [ebp - 0x774], 0x52509e71
mov dword [ebp - 0x9a4], 0x5b3847d2
mov dword [ebp - 0x77c], 1
mov dword [ebp - 0x79c], 0xffffffff
mov dword [ebp - 0x784], 0xa5d732ad
mov dword [ebp - 0x7a4], 0xffffffff
mov dword [ebp - 0x78c], 0xc0ec0dce
mov dword [ebp - 0x7ac], 0xd58e7ea1
push 2
lea ecx, [ebp - 0x8bc]
call fcn.100131db
mov byte [ebp - 4], 0x17
push 0xf6c
push 0x5062
push 0x7630
push 0xeae
lea eax, [ebp - 0xa0]
push eax
push 0
push 1
lea eax, [ebp - 0x708]
push eax
call fcn.1003b2de
add esp, 0x20
mov dword [ebp - 0xa0], 0
jmp 0x1003e2e9
mov eax, dword [ebp - 0xa0]
inc eax
mov dword [ebp - 0xa0], eax
cmp dword [ebp - 0xa0], 2
jge 0x1003e30b
push dword [ebp - 0xa0]
lea ecx, [ebp - 0x8bc]
call fcn.10013282
mov dword [eax], 3
jmp 0x1003e2dc
push 0xfffffffffffffffb
pop eax
test eax, eax
je 0x1003e330
push 4
pop eax
shl eax, 0
push 0xfffffffffffffffd
pop ecx
sub ecx, dword [ebp + eax - 0x484]
je 0x1003e330
mov dword [ebp - 0x404], 1
jmp 0x1003e337
and dword [ebp - 0x404], 0
push 0
lea ecx, [ebp - 0x708]
call fcn.10013282
mov ecx, dword [ebp - 0x404]
mov dword [eax], ecx
lea eax, [ebp - 0x540]
push eax
push 0
push 1
push 0x1b29
push 0x613
push 0x3f62
call fcn.1003879a
add esp, 0x18
mov byte [ebp - 4], 0x16
lea ecx, [ebp - 0x8bc]
call fcn.1001325d
mov byte [ebp - 4], 0x15
lea ecx, [ebp - 0x708]
call fcn.1001325d
jmp 0x1003e1f7
mov byte [ebp - 4], 0x14
lea ecx, [ebp - 0x9d0]
call fcn.1001325d
mov byte [ebp - 4], 0x13
lea ecx, [ebp - 0x8cc]
call fcn.1001325d
jmp 0x1003e0c3
mov byte [ebp - 4], 0x12
lea ecx, [ebp - 0x8dc]
call fcn.1001325d
jmp 0x1003e02e
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x8ec]
call fcn.1001325d
push dword [ebp - 0x30]
call fcn.100331bc
pop ecx
test eax, eax
jne 0x1003e9de
mov dword [ebp - 0x120], 0x5c68ec0a
mov dword [ebp - 0x548], 0xffffffff
mov dword [ebp - 0x108], 0
mov dword [ebp - 0x110], 7
mov dword [ebp - 0x1cc], 0
mov dword [ebp - 0x260], 0xfffffff9
mov dword [ebp - 0x558], 0xc509ca4f
mov dword [ebp - 0x248], 0x63372585
push 4
lea ecx, [ebp - 0x4cc]
call fcn.100131db
mov dword [ebp - 4], 0x18
mov dword [ebp - 0x1a0], 0xffffffff
push 1
lea ecx, [ebp - 0x4a8]
call fcn.100131db
mov byte [ebp - 4], 0x19
mov dword [ebp - 0x550], 0xd5fca44b
push 0x560a
push 0x38d
push 0x1494
push 1
push 0x4c7d
push 1
push 0xf8e
push 0x3553
push 0x2ba9
push 0x2dd6
push 0x1c5
push 0x6f00
lea eax, [ebp - 0x4cc]
push eax
push 0x1f98
push 0x523f
lea eax, [ebp - 0x604]
push eax
push 0x33a
call fcn.10039e6e
add esp, 0x44
push 1
push 0x83c
push 0x12ab
push 0x50b2
lea eax, [ebp - 0x604]
push eax
push 1
push 0x4dd9
push 1
lea eax, [ebp - 0x4a8]
push eax
call fcn.10037a6d
add esp, 0x24
push 1
lea eax, [ebp - 0x548]
push eax
push 1
push 0x5e7
push 0x1748
push 0x657f
push 0x4d5b
lea eax, [ebp - 0x108]
push eax
lea eax, [ebp - 0x120]
push eax
push 1
call fcn.1003a0f7
add esp, 0x28
mov eax, dword [ebp - 0x1a0]
dec eax
mov dword [ebp - 0x1a0], eax
push 0
lea ecx, [ebp - 0x4a8]
call fcn.10013282
cmp dword [eax], 0xffffffff
je 0x1003e55e
mov dword [ebp - 0x5b4], 1
jmp 0x1003e565
and dword [ebp - 0x5b4], 0
imul eax, dword [ebp - 0x260], 0xae7
test eax, eax
jl 0x1003e57f
mov dword [ebp - 0x364], 1
jmp 0x1003e586
and dword [ebp - 0x364], 0
mov eax, dword [ebp - 0x550]
cmp dword [ebp - 0x364], eax
je 0x1003e5a0
mov dword [ebp - 0x40c], 1
jmp 0x1003e5a7
and dword [ebp - 0x40c], 0
mov esi, dword [ebp - 0x108]
push 0
lea ecx, [ebp - 0x4a8]
call fcn.10013282
mov eax, dword [eax]
add eax, dword [ebp - 0x40c]
imul eax, eax, 0x2a1d
cmp eax, esi
jge 0x1003e5d8
mov dword [ebp - 0x36c], 1
jmp 0x1003e5df
and dword [ebp - 0x36c], 0
mov eax, dword [ebp - 0x36c]
add eax, 8
mov dword [ebp - 0x108], eax
mov esi, dword [ebp - 0x108]
push 0
lea ecx, [ebp - 0x4a8]
call fcn.10013282
add esi, dword [eax]
cmp esi, 0xfffffffa
jle 0x1003e614
mov dword [ebp - 0x234], 1
jmp 0x1003e61b
and dword [ebp - 0x234], 0
push 3
lea ecx, [ebp - 0x4cc]
call fcn.10013282
mov eax, dword [eax]
cmp eax, dword [ebp - 0x234]
jge 0x1003e63e
mov dword [ebp - 0x5e4], 1
jmp 0x1003e645
and dword [ebp - 0x5e4], 0
cmp dword [ebp - 0x248], 0
je 0x1003e663
cmp dword [ebp - 0x1a0], 0
je 0x1003e663
mov dword [ebp - 0x238], 1
jmp 0x1003e66a
and dword [ebp - 0x238], 0
cmp dword [ebp - 0x238], 0x17898a80
jne 0x1003e682
mov dword [ebp - 0x240], 1
jmp 0x1003e689
and dword [ebp - 0x240], 0
mov eax, dword [ebp - 0x110]
mov eax, dword [ebp - 0x248]
mov dword [ebp - 0x798], eax
mov eax, dword [ebp - 0x120]
mov dword [ebp - 0x740], eax
push 0
lea ecx, [ebp - 0x4a8]
call fcn.10013282
cmp dword [eax], 3
jbe 0x1003e6c5
mov dword [ebp - 0x250], 1
jmp 0x1003e6cc
and dword [ebp - 0x250], 0
mov eax, dword [ebp - 0x558]
cmp dword [ebp - 0x250], eax
jl 0x1003e6e6
mov dword [ebp - 0x1ac], 1
jmp 0x1003e6ed
and dword [ebp - 0x1ac], 0
push 3
lea ecx, [ebp - 0x4cc]
call fcn.10013282
mov ecx, dword [ebp - 0x1ac]
mov dword [eax], ecx
mov eax, dword [ebp - 0x110]
cmp dword [ebp - 0x1ac], eax
jle 0x1003e71c
mov dword [ebp - 0x4d0], 1
jmp 0x1003e723
and dword [ebp - 0x4d0], 0
push 0
lea ecx, [ebp - 0x4a8]
call fcn.10013282
cmp dword [ebp - 0x1cc], 0
ja 0x1003e745
mov dword [ebp - 0x258], 1
jmp 0x1003e74c
and dword [ebp - 0x258], 0
mov eax, dword [ebp - 0x258]
mov dword [ebp - 0x110], eax
cmp dword [ebp - 0x110], 0
jne 0x1003e768
cmp dword [ebp - 0x120], 0
mov eax, dword [ebp - 0x260]
cmp eax, dword [ebp - 0x1cc]
jg 0x1003e7a5
mov eax, 0x1956
test eax, eax
je 0x1003e7a5
mov dword [ebp - 0x7bc], 0xdfa8
mov dword [ebp - 0x268], 0xfffffff6
mov eax, dword [ebp - 0x268]
inc eax
mov dword [ebp - 0x268], eax
jmp 0x1003e9b5
mov dword [ebp - 0x1c4], 8
mov dword [ebp - 0x1bc], 0xffff
mov dword [ebp - 0x2a0], 4
mov dword [ebp - 0x118], 0
jmp 0x1003e7dc
mov eax, dword [ebp - 0x118]
inc eax
mov dword [ebp - 0x118], eax
cmp dword [ebp - 0x118], 3
jge 0x1003e7f8
mov eax, dword [ebp - 0x118]
mov dword [ebp + eax*4 - 0x8fc], 0xe546ec70
jmp 0x1003e7cf
cmp dword [ebp - 0x1c4], 0
je 0x1003e90a
push 3
lea ecx, [ebp - 0x4cc]
call fcn.10013282
cmp dword [eax], 0
je 0x1003e82c
cmp dword [ebp - 0x120], 0
je 0x1003e82c
mov dword [ebp - 0x288], 1
jmp 0x1003e833
and dword [ebp - 0x288], 0
cmp dword [ebp - 0x1bc], 0x5d46
jle 0x1003e84b
mov dword [ebp - 0x270], 1
jmp 0x1003e852
and dword [ebp - 0x270], 0
mov eax, dword [ebp - 0x1bc]
cmp dword [ebp - 0x270], eax
jl 0x1003e86c
mov dword [ebp - 0x278], 1
jmp 0x1003e873
and dword [ebp - 0x278], 0
cmp dword [ebp - 0x278], 0xffffffff
jae 0x1003e888
mov dword [ebp - 0x1b4], 1
jmp 0x1003e88f
and dword [ebp - 0x1b4], 0
push 4
pop eax
shl eax, 1
mov ecx, dword [ebp - 0x1b4]
mov dword [ebp + eax - 0x8fc], ecx
cmp dword [ebp - 0x1b4], 0
je 0x1003e8c8
push 3
lea ecx, [ebp - 0x4cc]
call fcn.10013282
cmp dword [eax], 0
je 0x1003e8c8
mov dword [ebp - 0x280], 1
jmp 0x1003e8cf
and dword [ebp - 0x280], 0
mov eax, dword [ebp - 0x1c4]
cmp dword [ebp - 0x280], eax
jge 0x1003e8e9
mov dword [ebp - 0x290], 1
jmp 0x1003e8f0
and dword [ebp - 0x290], 0
mov eax, dword [ebp - 0x288]
cmp eax, dword [ebp - 0x290]
jg 0x1003e90a
mov dword [ebp - 0x298], 1
jmp 0x1003e911
and dword [ebp - 0x298], 0
mov eax, dword [ebp - 0x298]
mov dword [ebp - 0x2a0], eax
cmp dword [ebp - 0x2a0], 0xfffc
jb 0x1003e935
mov dword [ebp - 0x2a8], 1
jmp 0x1003e93c
and dword [ebp - 0x2a8], 0
mov eax, dword [ebp - 0x1bc]
cmp dword [ebp - 0x2a8], eax
jle 0x1003e956
mov dword [ebp - 0x2b0], 1
jmp 0x1003e95d
and dword [ebp - 0x2b0], 0
mov eax, dword [ebp - 0x1c4]
cmp dword [ebp - 0x2b0], eax
jge 0x1003e983
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0x8fc], 0
jne 0x1003e983
and dword [ebp - 0x2b8], 0
jmp 0x1003e98d
mov dword [ebp - 0x2b8], 1
cmp dword [ebp - 0x2b8], 3
jge 0x1003e9a2
mov dword [ebp - 0x2c0], 1
jmp 0x1003e9a9
and dword [ebp - 0x2c0], 0
mov eax, dword [ebp - 0x2c0]
mov dword [ebp - 0x1cc], eax
mov byte [ebp - 4], 0x18
lea ecx, [ebp - 0x4a8]
call fcn.1001325d
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x4cc]
call fcn.1001325d
mov eax, dword [ebp - 0x68]
and dword [eax], 0
jmp 0x10040104
push 2
lea ecx, [ebp - 0x22c]
call fcn.100131db
mov dword [ebp - 4], 0x1a
mov dword [ebp - 0x1d4], 0
push 2
lea ecx, [ebp - 0x4b4]
call fcn.100131db
mov byte [ebp - 4], 0x1b
mov dword [ebp - 0x348], 0x98cbdb62
mov dword [ebp - 0x318], 0x2633933b
mov dword [ebp - 0x74], 0
jmp 0x1003ea31
mov eax, dword [ebp - 0x74]
inc eax
mov dword [ebp - 0x74], eax
cmp dword [ebp - 0x74], 1
jge 0x1003ea47
mov eax, dword [ebp - 0x74]
mov dword [ebp + eax*4 - 0x1e4], 9
jmp 0x1003ea2a
lea eax, [ebp - 0x74]
push eax
push 1
lea eax, [ebp - 0x22c]
push eax
push 1
call fcn.10037bf1
add esp, 0x10
push 1
push 1
lea eax, [ebp - 0x4b4]
push eax
lea eax, [ebp - 0x74]
push eax
push 0x6787
push 0x35d7
call fcn.10037cb1
add esp, 0x18
push 1
lea ecx, [ebp - 0x22c]
call fcn.10013282
and dword [eax], 0
jmp 0x1003eab5
push 1
lea ecx, [ebp - 0x22c]
call fcn.10013282
mov dword [ebp - 0x2c8], eax
mov eax, dword [ebp - 0x2c8]
mov eax, dword [eax]
dec eax
mov ecx, dword [ebp - 0x2c8]
mov dword [ecx], eax
push 1
lea ecx, [ebp - 0x22c]
call fcn.10013282
cmp dword [eax], 0
jl 0x1003eae4
push 1
lea ecx, [ebp - 0x22c]
call fcn.10013282
mov eax, dword [eax]
cmp dword [ebp + eax*4 - 0x1e4], 0
je 0x1003eae2
jmp 0x1003eae4
jmp 0x1003ea91
cmp dword [ebp - 0x1d4], 0
je 0x1003eb0d
push 1
push 0x3958
push 0
push 0x50ff
push 0x5e3c
call fcn.10042fb9
add esp, 0x14
jmp 0x1003edf5
mov dword [ebp - 0x2e8], 8
mov dword [ebp - 0x128], 0xfffffffa
mov dword [ebp - 0xac], 0
push 1
lea ecx, [ebp - 0x22c]
call fcn.10013282
cmp dword [eax], 0
je 0x1003eb59
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x1e4], 0
je 0x1003eb59
mov dword [ebp - 0x2d0], 1
jmp 0x1003eb60
and dword [ebp - 0x2d0], 0
cmp dword [ebp - 0x2d0], 0
je 0x1003eb75
mov dword [ebp - 0x2d8], 1
jmp 0x1003eb7c
and dword [ebp - 0x2d8], 0
push 0
lea ecx, [ebp - 0x4b4]
call fcn.10013282
mov esi, dword [ebp - 0x2d8]
imul esi, dword [eax]
push 0
lea ecx, [ebp - 0x4b4]
call fcn.10013282
cmp esi, dword [eax]
jge 0x1003ebbe
push 0
lea ecx, [ebp - 0x22c]
call fcn.10013282
cmp dword [eax], 0
jne 0x1003ebbe
and dword [ebp - 0x2e0], 0
jmp 0x1003ebc8
mov dword [ebp - 0x2e0], 1
mov eax, 0x3813
sub eax, dword [ebp - 0x2e0]
cmp eax, dword [ebp - 0x128]
jl 0x1003ebe7
mov dword [ebp - 0x2f0], 1
jmp 0x1003ebee
and dword [ebp - 0x2f0], 0
push 0
lea ecx, [ebp - 0x4b4]
call fcn.10013282
mov eax, dword [eax]
mov dword [ebp - 0x2e8], eax
mov eax, dword [ebp - 0x2e8]
cmp eax, dword [ebp - 0x2f0]
je 0x1003ec1d
mov dword [ebp - 0x2f8], 1
jmp 0x1003ec24
and dword [ebp - 0x2f8], 0
mov eax, dword [ebp - 0x2f8]
sub eax, dword [ebp - 0x1d4]
cmp eax, dword [ebp - 0x348]
jg 0x1003ec44
mov dword [ebp - 0x300], 1
jmp 0x1003ec4b
and dword [ebp - 0x300], 0
mov eax, dword [ebp - 0x300]
mov dword [ebp - 0x128], eax
mov eax, dword [ebp - 0x128]
cmp eax, dword [ebp - 0xac]
jg 0x1003ec71
mov dword [ebp - 0x308], 1
jmp 0x1003ec78
and dword [ebp - 0x308], 0
cmp dword [ebp - 0x308], 0xf3f6085e
jae 0x1003ec90
mov dword [ebp - 0x310], 1
jmp 0x1003ec97
and dword [ebp - 0x310], 0
mov eax, dword [ebp - 0x310]
mov dword [ebp - 0x318], eax
cmp dword [ebp - 0x318], 0
je 0x1003ecbd
xor eax, eax
inc eax
je 0x1003ecbd
mov dword [ebp - 0x560], 1
jmp 0x1003ecc4
and dword [ebp - 0x560], 0
mov eax, dword [ebp - 0x128]
imul eax, dword [ebp - 0xac]
cmp eax, dword [ebp - 0x1d4]
je 0x1003ece5
mov dword [ebp - 0x320], 1
jmp 0x1003ecec
and dword [ebp - 0x320], 0
mov eax, dword [ebp - 0xac]
cmp dword [ebp - 0x320], eax
jge 0x1003ed0c
cmp dword [ebp - 0xac], 0
jne 0x1003ed0c
and dword [ebp - 0x328], 0
jmp 0x1003ed16
mov dword [ebp - 0x328], 1
push 0
lea ecx, [ebp - 0x22c]
call fcn.10013282
mov ecx, dword [ebp - 0x328]
cmp ecx, dword [eax]
jg 0x1003ed39
mov dword [ebp - 0x330], 1
jmp 0x1003ed40
and dword [ebp - 0x330], 0
cmp dword [ebp - 0x330], 0x97e6
jl 0x1003ed58
mov dword [ebp - 0x338], 1
jmp 0x1003ed5f
and dword [ebp - 0x338], 0
push 1
lea ecx, [ebp - 0x22c]
call fcn.10013282
mov ecx, dword [ebp - 0x338]
cmp ecx, dword [eax]
jl 0x1003ed82
mov dword [ebp - 0x340], 1
jmp 0x1003ed89
and dword [ebp - 0x340], 0
cmp dword [ebp - 0x340], 0xfffd
jbe 0x1003edb1
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x1e4], 0
je 0x1003edb1
mov dword [ebp - 0x350], 1
jmp 0x1003edb8
and dword [ebp - 0x350], 0
mov eax, dword [ebp - 0x348]
cmp dword [ebp - 0x350], eax
jne 0x1003edd2
mov dword [ebp - 0x358], 1
jmp 0x1003edd9
and dword [ebp - 0x358], 0
push 0
lea ecx, [ebp - 0x4b4]
call fcn.10013282
mov ecx, dword [ebp - 0x358]
imul ecx, dword [eax]
mov dword [ebp - 0xac], ecx
mov byte [ebp - 4], 0x1a
lea ecx, [ebp - 0x4b4]
call fcn.1001325d
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x22c]
call fcn.1001325d
lea eax, [ebp - 0x30]
push eax
push 0x58f2
push 0
push 0x1813
push 1
call fcn.1003b6d1
add esp, 0x14
push 2
lea ecx, [ebp - 0x90c]
call fcn.100131db
mov dword [ebp - 4], 0x1c
mov dword [ebp - 0x138], 0xdf1febae
mov dword [ebp - 0x870], 0xffffffff
mov dword [ebp - 0x130], 0
jmp 0x1003ee6e
mov eax, dword [ebp - 0x130]
inc eax
mov dword [ebp - 0x130], eax
cmp dword [ebp - 0x130], 2
jge 0x1003ee90
push dword [ebp - 0x130]
lea ecx, [ebp - 0x90c]
call fcn.10013282
mov dword [eax], 0xfff7
jmp 0x1003ee61
mov dword [ebp - 0x138], 0
jmp 0x1003eea9
mov eax, dword [ebp - 0x138]
inc eax
mov dword [ebp - 0x138], eax
cmp dword [ebp - 0x138], 1
jg 0x1003ef04
mov dword [ebp - 0x140], 0xcce1e2c0
mov dword [ebp - 0x140], 0
jmp 0x1003eed5
mov eax, dword [ebp - 0x140]
inc eax
mov dword [ebp - 0x140], eax
cmp dword [ebp - 0x140], 1
jg 0x1003ef02
mov byte [ebp - 0x49], 0
movzx eax, byte [ebp - 0x49]
test eax, eax
je 0x1003ef00
push 0x32f7
push 1
push 0
push 0x42a0
call fcn.100389b5
add esp, 0x10
jmp 0x1003eec8
jmp 0x1003ee9c
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x90c]
call fcn.1001325d
mov eax, dword [ebp - 0x30]
mov eax, dword [eax]
cmp dword [eax + 0x28], 0
je 0x1003ffba
mov eax, dword [ebp - 0x30]
mov eax, dword [eax]
mov ecx, dword [ebp - 0x148]
add ecx, dword [eax + 0x28]
mov dword [ebp - 0x390], ecx
mov dword [ebp - 0x7a8], 0
mov dword [ebp - 0x4d8], 0x8ee85ec4
mov dword [ebp - 0x940], 1
mov dword [ebp - 0x7b0], 0x64f6b903
mov dword [ebp - 0x880], 0xfcc9f71d
mov dword [ebp - 0x370], 1
mov dword [ebp - 0x56c], 0xfffffff8
mov dword [ebp - 0x578], 0x50e16ffa
mov dword [ebp - 0x4dc], 6
mov dword [ebp - 0x7b8], 9
mov dword [ebp - 0x954], 0x260e9608
mov dword [ebp - 0x7c0], 0xfffffffc
mov dword [ebp - 0x890], 0xa10d52c8
mov dword [ebp - 0x7c8], 7
mov dword [ebp - 0x950], 0xfffffff9
mov dword [ebp - 0x7d0], 0xea5f7267
mov dword [ebp - 0x8a0], 0xffffffff
mov dword [ebp - 0x7d8], 0x8b70e9af
mov dword [ebp - 0x378], 0xfff6
mov dword [ebp - 0x958], 0xffff
cmp dword [ebp - 0x370], 1
jge 0x1003f013
mov dword [ebp - 0x360], 1
jmp 0x1003f01a
and dword [ebp - 0x360], 0
mov eax, dword [ebp - 0x578]
cmp dword [ebp - 0x360], eax
jne 0x1003f034
mov dword [ebp - 0x368], 1
jmp 0x1003f03b
and dword [ebp - 0x368], 0
cmp dword [ebp - 0x368], 0x5dce
jl 0x1003f107
mov dword [ebp - 0x57c], 1
push 2
lea ecx, [ebp - 0x91c]
call fcn.100131db
mov dword [ebp - 4], 0x1d
push 0x3f1c
push 0x3e67
lea eax, [ebp - 0x91c]
push eax
push 1
push 0
lea eax, [ebp - 0x7e0]
push eax
push 0x146
push 0x1cf9
push 1
push 0x432e
push 0x754a
call fcn.10041416
add esp, 0x2c
lea eax, [ebp - 0x56c]
push eax
push 1
lea eax, [ebp - 0x57c]
push eax
push 1
lea eax, [ebp - 0x370]
push eax
push 0x70c3
lea eax, [ebp - 0x4d8]
push eax
push 0x46db
lea eax, [ebp - 0x4dc]
push eax
call fcn.10038058
add esp, 0x24
push 0x3791
push 1
push 1
push 1
lea eax, [ebp - 0x378]
push eax
call fcn.10038543
add esp, 0x14
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x91c]
call fcn.1001325d
jmp 0x1003f11d
mov dword [ebp - 0x4e4], 0xf8ccaa7
mov eax, dword [ebp - 0x378]
mov dword [ebp - 0x4e4], eax
cmp dword [ebp - 0x390], 0
jne 0x1003f3ef
push 4
lea ecx, [ebp - 0x93c]
call fcn.100131db
mov dword [ebp - 4], 0x1e
mov dword [ebp - 0x8b0], 0x9e57ad95
mov dword [ebp - 0x7e8], 0x29bf390
mov dword [ebp - 0x960], 0xfffffff7
mov dword [ebp - 0x7f0], 4
mov dword [ebp - 0x8c0], 0xffffffff
mov dword [ebp - 0x7f8], 0xb8ee41b
mov dword [ebp - 0x95c], 7
mov dword [ebp - 0x800], 0xfffffffa
mov dword [ebp - 0x8d0], 0
mov dword [ebp - 0x808], 0x3948b081
mov dword [ebp - 0x9b4], 0x8ea38884
mov dword [ebp - 0x810], 0x8dfba22e
mov dword [ebp - 0x8e0], 0x74952f34
mov dword [ebp - 0x818], 0x8753e1e0
mov dword [ebp - 0x964], 0x2b90f998
mov dword [ebp - 0x820], 0xbbdebf88
push 2
lea ecx, [ebp - 0x92c]
call fcn.100131db
mov byte [ebp - 4], 0x1f
mov dword [ebp - 0x4ec], 0x90ae
mov dword [ebp - 0xb4], 0
jmp 0x1003f212
mov eax, dword [ebp - 0xb4]
inc eax
mov dword [ebp - 0xb4], eax
cmp dword [ebp - 0xb4], 4
jge 0x1003f234
push dword [ebp - 0xb4]
lea ecx, [ebp - 0x93c]
call fcn.10013282
mov dword [eax], 8
jmp 0x1003f205
lea eax, [ebp - 0x92c]
push eax
lea eax, [ebp - 0xb4]
push eax
push 1
push 0x6da
push 0xafa
push 1
push 0x32eb
push 1
call fcn.1003a5f8
add esp, 0x20
mov byte [ebp - 0x69], 0
movzx eax, byte [ebp - 0x69]
test eax, eax
je 0x1003f281
push 0x7056
push 0x6c90
push 1
push 0
call fcn.10039cdb
add esp, 0x10
push 0x354e
push 1
push 0x59a2
push 0x2297
push 0x8fe
lea eax, [ebp - 0x4ec]
push eax
push 0x3a7
push 0
call fcn.10044416
add esp, 0x20
mov byte [ebp - 4], 0x1e
lea ecx, [ebp - 0x92c]
call fcn.1001325d
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x93c]
call fcn.1001325d
mov dword [ebp - 0xbc], 0x4a8c6a53
push 1
lea ecx, [ebp - 0x720]
call fcn.100131db
mov dword [ebp - 4], 0x20
mov dword [ebp - 0x8f0], 0x7be9fb1c
push 0x71d5
push 0x1821
lea eax, [ebp - 0x828]
push eax
push 0x1be1
lea eax, [ebp - 0x720]
push eax
push 1
push 1
call fcn.1003a83a
add esp, 0x1c
push 1
push 0x673a
push 0x14ba
push 0x47
push 1
call fcn.100386ce
add esp, 0x14
mov dword [ebp - 0xbc], 0
jmp 0x1003f34d
mov eax, dword [ebp - 0xbc]
dec eax
mov dword [ebp - 0xbc], eax
cmp dword [ebp - 0xbc], 0xffffffe2
jge 0x1003f3d5
mov dword [ebp - 0x4f4], 0
mov dword [ebp - 0x4fc], 0
push 0x6486
push 0x7c17
push 0x2fec
push 0x705d
push 0x1395
push 0x2b9
lea eax, [ebp - 0x4f4]
push eax
push 1
push 1
push 0x167c
push 1
push 0x26a2
call fcn.1003a940
add esp, 0x30
push 0x6fe2
lea eax, [ebp - 0xbc]
push eax
lea eax, [ebp - 0x4fc]
push eax
lea eax, [ebp - 0x720]
push eax
push 0x489f
push 0
call fcn.10041e0e
add esp, 0x18
jmp 0x1003f340
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x720]
call fcn.1001325d
mov eax, dword [ebp - 0x68]
and dword [eax], 0
jmp 0x10040104
mov dword [ebp - 0x28], 1
mov dword [ebp - 0x380], 0x567b
mov dword [ebp - 0x4d4], 0x10008898
cmp dword [ebp - 0x380], 0x577b
jle 0x1003f4f4
and dword [ebp - 0xe0], 0
jmp 0x1003f430
mov eax, dword [ebp - 0xe0]
inc eax
mov dword [ebp - 0xe0], eax
cmp dword [ebp - 0xe0], 0x1f8a
jge 0x1003f4f4
and dword [ebp - 0x150], 0
jmp 0x1003f456
mov eax, dword [ebp - 0x150]
inc eax
mov dword [ebp - 0x150], eax
cmp dword [ebp - 0x150], 0x6329
jge 0x1003f4ef
and dword [ebp - 0x158], 0
jmp 0x1003f47c
mov eax, dword [ebp - 0x158]
inc eax
mov dword [ebp - 0x158], eax
cmp dword [ebp - 0x158], 0x4cca
jge 0x1003f4ea
mov eax, dword [ebp - 0xe0]
cdq
idiv dword [ebp - 0x150]
mov ecx, dword [ebp - 0x158]
sar edx, cl
mov eax, edx
cdq
mov dword [ebp - 0x590], eax
mov dword [ebp - 0x58c], edx
push dword [ebp - 0x58c]
push dword [ebp - 0x590]
lea ecx, [ebp - 0xa3c]
call fcn.1000a74e
pop ecx
pop ecx
mov dword [ebp - 0x504], eax
mov ecx, dword [ebp - 0x504]
call fcn.10012ea5
push eax
call fcn.100537c3
pop ecx
lea ecx, [ebp - 0xa3c]
call fcn.10012e9b
jmp 0x1003f46f
jmp 0x1003f449
jmp 0x1003f423
mov dword [ebp - 0x160], 0
jmp 0x1003f50d
mov eax, dword [ebp - 0x160]
inc eax
mov dword [ebp - 0x160], eax
cmp dword [ebp - 0x160], 1
jge 0x1003f529
mov eax, dword [ebp - 0x160]
mov dword [ebp + eax*4 - 0x388], 7
jmp 0x1003f500
mov dword [ebp - 4], 0x21
cmp dword [ebp - 0x380], 0x5627
jge 0x1003f548
push dword [ebp - 0x4d4]
call fcn.100537c3
pop ecx
jmp 0x1003f564
or dword [ebp - 4], 0xffffffff
jmp 0x1003f56e
mov dword [ebp - 0x28], 0
jmp 0x1003f57e
mov eax, dword [ebp - 0x28]
inc eax
mov dword [ebp - 0x28], eax
cmp dword [ebp - 0x28], 0
jg 0x1003f59a
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp + eax*4 - 0x388]
mov ecx, dword [ebp - 0x28]
mov dword [ebp + ecx*4 - 0x388], eax
jmp 0x1003f577
mov dword [ebp - 0x28], 0
jmp 0x1003f5aa
mov eax, dword [ebp - 0x28]
inc eax
mov dword [ebp - 0x28], eax
cmp dword [ebp - 0x28], 0x16
jne 0x1003f5d5
mov byte [ebp - 0x3d], 0
push 1
lea eax, [ebp - 0x3d]
push eax
push 1
push 0x6b2e
push 0x2247
push 0x1792
call fcn.1003b20e
add esp, 0x18
jmp 0x1003f5a3
push 0
push 1
push 0xdeadbeef
call dword [ebp - 0x390]
mov dword [ebp - 0x53c], eax
mov dword [ebp - 0x18], 1
mov dword [ebp - 0x69c], 0x537c
mov dword [ebp - 0x698], 0x537c
mov dword [ebp - 0x694], 0x537c
mov dword [ebp - 0x690], 0x537c
lea ecx, [ebp - 0x209]
call fcn.100132e4
push eax
lea eax, [ebp - 0x68c]
push eax
lea eax, [ebp - 0x69c]
push eax
lea ecx, [ebp - 0x9fc]
call fcn.100132e7
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0x600]
call fcn.10013237
mov dword [ebp - 4], 0x23
mov dword [ebp - 0x1f4], 0xfffffffe
mov dword [ebp - 0x168], 0
jmp 0x1003f678
mov eax, dword [ebp - 0x168]
inc eax
mov dword [ebp - 0x168], eax
cmp dword [ebp - 0x168], 1
jge 0x1003f694
mov eax, dword [ebp - 0x168]
mov dword [ebp + eax*4 - 0x1fc], 1
jmp 0x1003f66b
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x99c], eax
cmp dword [ebp - 0x18], 9
jb 0x1003f6af
mov dword [ebp - 0x398], 1
jmp 0x1003f6b6
and dword [ebp - 0x398], 0
mov eax, dword [ebp - 0x18]
cmp dword [ebp - 0x398], eax
je 0x1003f6cd
mov dword [ebp - 0x3a0], 1
jmp 0x1003f6d4
and dword [ebp - 0x3a0], 0
mov eax, dword [ebp - 0x18]
cmp dword [ebp - 0x3a0], eax
je 0x1003f6eb
mov dword [ebp - 0x230], 1
jmp 0x1003f6f2
and dword [ebp - 0x230], 0
cmp dword [ebp - 0x230], 0xfffffffb
jge 0x1003f707
mov dword [ebp - 0x514], 1
jmp 0x1003f70e
and dword [ebp - 0x514], 0
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x830], eax
cmp dword [ebp - 0x18], 0
jne 0x1003f72f
mov dword [ebp - 0x9ac], 0
mov dword [ebp - 0x850], 0x3f4f46db
mov dword [ebp - 0x744], 0x1f665683
mov dword [ebp - 0x80], 0xffffffff
mov dword [ebp - 0x748], 0xffffffff
mov dword [ebp - 0x750], 0x40194ddb
mov dword [ebp - 0x78], 0x9f30cc2f
mov dword [ebp - 0x13c], 0
jmp 0x10040013
mov eax, dword [ebp - 0x13c]
inc eax
mov dword [ebp - 0x13c], eax
cmp dword [ebp - 0x13c], 3
jge 0x1004002f
mov eax, dword [ebp - 0x13c]
mov dword [ebp + eax*4 - 0x94c], 4
jmp 0x10040006
mov eax, dword [ebp - 0x78]
inc eax
mov dword [ebp - 0x78], eax
mov dword [ebp - 0x80], 2
jmp 0x10040046
mov eax, dword [ebp - 0x80]
dec eax
mov dword [ebp - 0x80], eax
cmp dword [ebp - 0x80], 0
jl 0x100400b7
mov eax, dword [ebp - 0x80]
cmp dword [ebp + eax*4 - 0x94c], 0
je 0x1004005b
jmp 0x100400b7
mov dword [ebp - 0x78], 0
jmp 0x1004006b
mov eax, dword [ebp - 0x78]
inc eax
mov dword [ebp - 0x78], eax
cmp dword [ebp - 0x78], 2
jg 0x100400b5
mov dword [ebp - 0x54c], 0xfffffffe
mov eax, dword [ebp - 0x54c]
mov ecx, dword [ebp - 0x80]
mov dword [ebp + ecx*4 - 0x94c], eax
mov byte [ebp - 0x6a], 0
push 0x1138
push 0x48ff
lea eax, [ebp - 0x6a]
push eax
push 1
push 0x4390
push 1
push 0x682
call fcn.1003b98c
add esp, 0x1c
jmp 0x10040064
jmp 0x1004003f
mov eax, dword [ebp - 0x30]
cmp dword [eax + 0x10], 0
je 0x100400cb
mov eax, dword [ebp - 0x30]
mov dword [ebp - 0x470], eax
jmp 0x100400d2
and dword [ebp - 0x470], 0
mov eax, dword [ebp - 0x68]
mov ecx, dword [ebp - 0x470]
mov dword [eax], ecx
jmp 0x10040104
push 0
push 0x3f2
call dword [sym.imp.USER32.dll_GetWindowThreadProcessId]
jmp 0x10040104
push 0
push 0x44d6
push 0x5379
call fcn.10043f09
add esp, 0xc
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret