Function at 0x1003e320
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x10071544
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x4ac
push esi
movzx eax, byte [ebp + 0xc]
test eax, eax
je 0x10040283
mov eax, dword [ebp + 0x10]
mov dword [ebp - 0x250], eax
lea eax, [ebp + 0x14]
mov dword [ebp - 0x254], eax
mov eax, dword [ebp + 0x1c]
mov dword [ebp - 0x270], eax
mov eax, dword [ebp + 0x18]
mov dword [ebp - 0x278], eax
mov eax, dword [ebp - 0x254]
movzx eax, byte [eax]
test eax, eax
je 0x10040258
mov eax, dword [ebp - 0x270]
mov dword [ebp - 0x158], eax
mov eax, dword [ebp - 0x278]
mov dword [ebp - 0x1f8], eax
mov dword [ebp - 0xcc], 1
mov dword [ebp - 0x44], 0xceafd94f
mov dword [ebp - 0x294], 0x7865e1b
mov dword [ebp - 0x2b4], 0xbd76df3e
mov dword [ebp - 0x344], 0xfffffff7
mov dword [ebp - 0x340], 0xfffffff7
mov dword [ebp - 0x33c], 0xfffffff7
mov dword [ebp - 0x338], 0xfffffff7
lea ecx, [ebp - 0xed]
call fcn.10017a09
push eax
lea eax, [ebp - 0x334]
push eax
lea eax, [ebp - 0x344]
push eax
lea ecx, [ebp - 0x4a0]
call fcn.10017a0c
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0x3e4]
call fcn.100179b8
and dword [ebp - 4], 0
mov eax, dword [ebp - 0xcc]
mov dword [ebp - 0x418], eax
mov dword [ebp - 0x44], 0xf506
cmp dword [ebp - 0x44], 0
jne 0x1003e507
cmp dword [ebp - 0x44], 0xffffffff
jge 0x1003e44d
mov dword [ebp - 0x160], 1
jmp 0x1003e454
and dword [ebp - 0x160], 0
mov eax, dword [ebp - 0x44]
cmp dword [ebp - 0x160], eax
jge 0x1003e46b
mov dword [ebp - 0x218], 1
jmp 0x1003e472
and dword [ebp - 0x218], 0
mov eax, dword [ebp - 0x218]
sub eax, 0x7dd34c5d
cmp eax, 0xfffffff6
jle 0x1003e48e
mov dword [ebp - 0x104], 1
jmp 0x1003e495
and dword [ebp - 0x104], 0
mov eax, dword [ebp - 0xcc]
cmp dword [ebp - 0x104], eax
je 0x1003e4af
mov dword [ebp - 0x208], 1
jmp 0x1003e4b6
and dword [ebp - 0x208], 0
mov eax, dword [ebp - 0x44]
cmp eax, dword [ebp - 0x208]
jne 0x1003e4cd
mov dword [ebp - 0x204], 1
jmp 0x1003e4d4
and dword [ebp - 0x204], 0
mov eax, dword [ebp - 0x44]
cmp dword [ebp - 0x204], eax
jge 0x1003e4eb
mov dword [ebp - 0x10c], 1
jmp 0x1003e4f2
and dword [ebp - 0x10c], 0
cmp dword [ebp - 0x10c], 0xed45b0e8
jae 0x1003e507
and dword [ebp - 0x19c], 0
jmp 0x1003e511
mov dword [ebp - 0x19c], 1
mov eax, dword [ebp - 0xcc]
add eax, dword [ebp - 0x19c]
je 0x1003e55d
mov byte [ebp - 0x36], 0
push 0x52e8
push 0x36a6
push 1
push 0x187e
push 0x2576
push 0x60a1
push 0x1505
push 0x6347
push 1
push 0x4dd7
lea eax, [ebp - 0x36]
push eax
call fcn.1003d361
add esp, 0x2c
jmp 0x1003e5ab
mov dword [ebp - 0x2d0], 0xfffffff7
push 1
push 0x2b30
lea eax, [ebp - 0x2d0]
push eax
push 1
push 0x61f5
lea eax, [ebp - 0xcc]
push eax
push 0x20a5
lea eax, [ebp - 0x294]
push eax
push 1
lea eax, [ebp - 0x3e4]
push eax
lea eax, [ebp - 0x2b4]
push eax
lea eax, [ebp - 0x44]
push eax
call fcn.1003c4f5
add esp, 0x30
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x3e4]
call fcn.100179de
mov eax, dword [0x10927320]
and eax, 1
jne 0x1003e5f1
mov eax, dword [0x10927320]
or eax, 1
mov dword [0x10927320], eax
mov dword [ebp - 4], 1
mov ecx, 0x1092734c
call fcn.10017a20
push 0x10071c6a
call fcn.100580df
pop ecx
or dword [ebp - 4], 0xffffffff
mov dword [ebp - 0xe0], 0xfffffffb
mov dword [ebp - 0x114], 0
mov dword [ebp - 0x1e4], 0x106ec6e5
mov dword [ebp - 0x24], 0x96f377cc
push 2
lea ecx, [ebp - 0x2f0]
call fcn.1001795c
mov dword [ebp - 4], 2
mov dword [ebp - 0x7c], 1
mov dword [ebp - 0x1b4], 0xffffffff
push 1
lea ecx, [ebp - 0x390]
call fcn.1001795c
mov byte [ebp - 4], 3
mov dword [ebp - 0x144], 0x2d14b432
mov dword [ebp - 0x248], 0
push 0x626c
push 1
push 1
lea eax, [ebp - 0x2f0]
push eax
push 0x7997
push 1
lea eax, [ebp - 0x60]
push eax
call fcn.1003d481
add esp, 0x1c
mov dword [ebp - 0x60], 0
jmp 0x1003e693
mov eax, dword [ebp - 0x60]
inc eax
mov dword [ebp - 0x60], eax
cmp dword [ebp - 0x60], 3
jge 0x1003e6a9
mov eax, dword [ebp - 0x60]
mov dword [ebp + eax*4 - 0x3f0], 0xffb9
jmp 0x1003e68c
lea eax, [ebp - 0x60]
push eax
push 1
lea eax, [ebp - 0x390]
push eax
push 0x2fae
push 1
call fcn.1003d569
add esp, 0x14
mov eax, dword [ebp - 0xe0]
mov ecx, dword [ebp - 0xe0]
inc ecx
mov dword [ebp - 0xe0], ecx
test eax, eax
je 0x1003e709
mov eax, dword [ebp - 0xe0]
mov dword [ebp - 0x114], eax
mov eax, dword [ebp - 0x114]
mov dword [ebp - 0x1e4], eax
cmp dword [ebp - 0x1e4], 0
je 0x1003e709
mov dword [ebp - 0x1ec], 1
jmp 0x1003e710
and dword [ebp - 0x1ec], 0
cmp dword [ebp - 0x24], 0
je 0x1003e851
push 1
lea ecx, [ebp - 0x2f0]
call fcn.100179fa
mov dword [ebp - 0x11c], eax
push 1
lea ecx, [ebp - 0x2f0]
call fcn.100179fa
mov ecx, dword [ebp - 0x11c]
mov eax, dword [eax]
mov dword [ecx], eax
mov eax, dword [ebp - 0x24]
mov ecx, dword [ebp - 0x11c]
cmp eax, dword [ecx]
je 0x1003e75d
mov dword [ebp - 0x1a4], 1
jmp 0x1003e764
and dword [ebp - 0x1a4], 0
imul eax, dword [ebp - 0x1a4], 0x7dd9
test eax, eax
jne 0x1003e77e
mov dword [ebp - 0x124], 1
jmp 0x1003e785
and dword [ebp - 0x124], 0
mov eax, dword [ebp - 0x24]
imul eax, dword [ebp - 0x124]
cmp eax, dword [ebp - 0x24]
jge 0x1003e7a0
mov dword [ebp - 0x210], 1
jmp 0x1003e7a7
and dword [ebp - 0x210], 0
mov eax, dword [ebp - 0x24]
cmp dword [ebp - 0x210], eax
jl 0x1003e7be
mov dword [ebp - 0x1ac], 1
jmp 0x1003e7c5
and dword [ebp - 0x1ac], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x3f0]
inc eax
mov dword [ebp - 0x12c], eax
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x12c]
mov dword [ebp + eax - 0x3f0], ecx
mov eax, dword [ebp - 0x12c]
sub eax, dword [ebp - 0x1ac]
cmp eax, dword [ebp - 0x24]
jl 0x1003e809
mov dword [ebp - 0x134], 1
jmp 0x1003e810
and dword [ebp - 0x134], 0
mov eax, dword [ebp - 0x24]
cmp dword [ebp - 0x134], eax
je 0x1003e827
mov dword [ebp - 0x268], 1
jmp 0x1003e82e
and dword [ebp - 0x268], 0
mov eax, dword [ebp - 0x24]
mov dword [ebp - 0x408], eax
mov eax, dword [ebp - 0x7c]
mov dword [ebp - 0x24], eax
mov eax, dword [ebp - 0x7c]
cmp dword [ebp - 0x24], eax
jne 0x1003e851
mov dword [ebp - 0x13c], 1
jmp 0x1003e858
and dword [ebp - 0x13c], 0
mov eax, dword [ebp - 0x1ec]
add eax, dword [ebp - 0x13c]
mov dword [ebp - 0x1b4], eax
mov eax, dword [ebp - 0x7c]
cmp dword [ebp - 0x1b4], eax
jle 0x1003e881
mov dword [ebp - 0xec], 1
jmp 0x1003e888
and dword [ebp - 0xec], 0
push 0
lea ecx, [ebp - 0x390]
call fcn.100179fa
mov ecx, dword [ebp - 0xec]
mov dword [eax], ecx
mov eax, dword [ebp - 0xec]
mov dword [ebp - 0x144], eax
mov eax, dword [ebp - 0x7c]
cmp dword [ebp - 0x144], eax
jge 0x1003e8c0
mov dword [ebp - 0x20c], 1
jmp 0x1003e8c7
and dword [ebp - 0x20c], 0
imul eax, dword [ebp - 0x20c], 0x3090
test eax, eax
jne 0x1003e8e3
xor eax, eax
inc eax
jne 0x1003e8e3
and dword [ebp - 0x14c], 0
jmp 0x1003e8ed
mov dword [ebp - 0x14c], 1
mov eax, dword [ebp - 0x7c]
cmp dword [ebp - 0x14c], eax
jle 0x1003e904
mov dword [ebp - 0x1bc], 1
jmp 0x1003e90b
and dword [ebp - 0x1bc], 0
mov eax, dword [ebp - 0x1bc]
mov dword [ebp - 0x248], eax
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x390]
call fcn.100179de
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x2f0]
call fcn.100179de
push dword [ebp - 0x158]
lea ecx, [ebp - 0x330]
call fcn.10017757
mov dword [ebp - 4], 4
lea eax, [ebp - 0x3f4]
push eax
lea ecx, [ebp - 0x330]
call fcn.100181fe
push dword [eax]
lea eax, [ebp - 0x424]
push eax
lea ecx, [ebp - 0x330]
call fcn.10018212
push dword [eax]
lea eax, [ebp - 0x404]
push eax
lea ecx, [ebp - 0x330]
call fcn.100181fe
push dword [eax]
mov edx, 0x1003be86
lea ecx, [ebp - 0x44c]
call fcn.100519af
add esp, 0xc
lea ecx, [ebp - 0x330]
call fcn.1003be11
mov dword [ebp - 0x180], eax
mov dword [ebp - 0x78], 0x5d6c05ba
mov dword [ebp - 0x290], 0xb653b1da
mov dword [ebp - 0x78], 0x16
jmp 0x1003e9ce
mov eax, dword [ebp - 0x78]
dec eax
mov dword [ebp - 0x78], eax
cmp dword [ebp - 0x78], 0xd
je 0x1003ea7b
mov dword [ebp - 0xc4], 0
jmp 0x1003e9f1
mov eax, dword [ebp - 0xc4]
inc eax
mov dword [ebp - 0xc4], eax
cmp dword [ebp - 0xc4], 3
jge 0x1003ea0d
mov eax, dword [ebp - 0xc4]
mov dword [ebp + eax*4 - 0x308], 0xffffffff
jmp 0x1003e9e4
push 4
pop eax
shl eax, 1
mov dword [ebp + eax - 0x308], 0
jmp 0x1003ea38
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x308]
dec eax
push 4
pop ecx
shl ecx, 1
mov dword [ebp + ecx - 0x308], eax
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0x308], 0xfffffff9
jne 0x1003ea76
mov dword [ebp - 0x25c], 0x7249aaed
lea eax, [ebp - 0x290]
push eax
push 1
lea eax, [ebp - 0x25c]
push eax
lea eax, [ebp - 0x78]
push eax
push 1
push 0x69dc
call fcn.1003c788
add esp, 0x18
jmp 0x1003ea1f
jmp 0x1003e9c7
push 0x1c00
push 0x6e
push 1
push 0x137e
push 0
push 1
call fcn.1003e320
add esp, 0x18
movzx eax, byte [0x109271f5]
test eax, eax
je 0x1003eb6e
mov ecx, 0x1092734c
call fcn.100517aa
movzx eax, al
test eax, eax
jne 0x1003eb6e
lea eax, [ebp - 0x180]
push eax
lea eax, [ebp - 0x154]
push eax
mov ecx, 0x1092734c
call fcn.10017ae5
mov dword [ebp - 0x40c], 1
mov byte [ebp - 0x3e], 0
movzx eax, byte [ebp - 0x3e]
test eax, eax
je 0x1003eb07
push 0x5cfc
push 0x23c0
push 0x207f
push 0x689f
push 0
push 1
call fcn.1003dddb
add esp, 0x18
mov byte [ebp - 0x3a], 0
push 0
push 0x1b0f
push 1
lea eax, [ebp - 0x3a]
push eax
call fcn.1004dca4
add esp, 0x10
lea eax, [ebp - 0x42c]
push eax
mov ecx, 0x1092734c
call fcn.10017ad7
push eax
lea ecx, [ebp - 0x154]
call fcn.10017afa
movzx eax, al
test eax, eax
je 0x1003eb6e
lea ecx, [ebp - 0x154]
call fcn.100517b3
mov ecx, dword [ebp - 0x1f8]
mov eax, dword [eax + 4]
mov dword [ecx], eax
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x330]
call fcn.100177ef
jmp 0x100402ca
mov dword [ebp - 0x30], 0x5596960f
mov dword [ebp - 0x358], 0x35c0de45
mov dword [ebp - 0x354], 0x35c0de45
mov dword [ebp - 0x350], 0x35c0de45
mov dword [ebp - 0x34c], 0x35c0de45
lea ecx, [ebp - 0xf5]
call fcn.10017a09
push eax
lea eax, [ebp - 0x348]
push eax
lea eax, [ebp - 0x358]
push eax
lea ecx, [ebp - 0x478]
call fcn.10017a0c
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0x3d8]
call fcn.100179b8
mov byte [ebp - 4], 5
mov dword [ebp - 0x2c], 0
jmp 0x1003ebe6
mov eax, dword [ebp - 0x2c]
inc eax
mov dword [ebp - 0x2c], eax
cmp dword [ebp - 0x2c], 3
jge 0x1003ebfc
mov eax, dword [ebp - 0x2c]
mov dword [ebp + eax*4 - 0x400], 0xfffffff9
jmp 0x1003ebdf
mov dword [ebp - 0x2c], 0
jmp 0x1003ec0c
mov eax, dword [ebp - 0x2c]
inc eax
mov dword [ebp - 0x2c], eax
cmp dword [ebp - 0x2c], 2
jge 0x1003ec22
mov eax, dword [ebp - 0x2c]
mov dword [ebp + eax*4 - 0x448], 1
jmp 0x1003ec05
mov dword [ebp - 0x30], 2
jmp 0x1003ec32
mov eax, dword [ebp - 0x30]
dec eax
mov dword [ebp - 0x30], eax
cmp dword [ebp - 0x30], 0
jl 0x1003ed67
mov dword [ebp - 0x58], 0xc3c39ba0
mov dword [ebp - 0x1f4], 0xdc53
mov dword [ebp - 0x264], 0x3a60
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x58]
mov dword [ebp + eax - 0x400], ecx
xor eax, eax
jne 0x1003ec72
cmp dword [ebp - 0x1f4], 0xffffffff
cmp dword [ebp - 0x58], 0
jne 0x1003ec84
mov dword [ebp - 0x15c], 1
jmp 0x1003ec8b
and dword [ebp - 0x15c], 0
mov eax, dword [ebp - 0x1f4]
cmp dword [ebp - 0x15c], eax
jle 0x1003ecab
cmp dword [ebp - 0x30], 0
je 0x1003ecab
mov dword [ebp - 0x1c4], 1
jmp 0x1003ecb2
and dword [ebp - 0x1c4], 0
mov eax, dword [ebp - 0x30]
imul eax, dword [ebp - 0x1c4]
cmp eax, 0xcdf11bbb
jne 0x1003eccf
mov dword [ebp - 0x298], 1
jmp 0x1003ecd6
and dword [ebp - 0x298], 0
mov eax, dword [ebp - 0x30]
mov dword [ebp - 0x414], eax
push 3
lea ecx, [ebp - 0x3d8]
call fcn.100179fa
imul eax, dword [eax], 9
test eax, eax
jne 0x1003ed05
cmp dword [ebp - 0x264], 0
jne 0x1003ed05
and dword [ebp - 0x164], 0
jmp 0x1003ed0f
mov dword [ebp - 0x164], 1
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x164]
mov dword [ebp + eax - 0x448], ecx
mov dword [ebp - 0x58], 0
jmp 0x1003ed32
mov eax, dword [ebp - 0x58]
inc eax
mov dword [ebp - 0x58], eax
cmp dword [ebp - 0x58], 0x14
jne 0x1003ed62
mov byte [ebp - 0x4d], 0
push 0
lea eax, [ebp - 0x4d]
push eax
push 1
push 0x2dda
call fcn.1003da0b
add esp, 0x10
mov eax, dword [ebp - 0x30]
cmp dword [ebp + eax*4 - 0x400], 0
je 0x1003ed60
jmp 0x1003ed2b
jmp 0x1003ed2b
jmp 0x1003ec2b
mov byte [ebp - 0x3c], 0
movzx eax, byte [ebp - 0x3c]
test eax, eax
je 0x1003eda4
push 0x619e
push 0x5201
push 0x7076
push 1
push 0x7b3e
push 0x4053
push 0x8a5
push 0x399
push 1
push 1
call fcn.1003d63b
add esp, 0x28
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x3d8]
call fcn.100179de
and dword [ebp - 0x68], 0
lea eax, [ebp - 0x330]
push eax
call fcn.1003c48d
pop ecx
mov dword [ebp - 0x68], eax
cmp dword [ebp - 0x68], 0
jne 0x1003fcc7
mov dword [ebp - 0x5c], 0xd4e06482
mov dword [ebp - 0x318], 1
mov dword [ebp - 0x314], 1
mov dword [ebp - 0x310], 1
mov dword [ebp - 0x30c], 1
push 1
push 0x14eb
lea eax, [ebp - 0x5c]
push eax
push 1
push 0x619a
call fcn.1003d85c
add esp, 0x14
mov dword [ebp - 0x5c], 0xffffffe8
jmp 0x1003ee2a
mov eax, dword [ebp - 0x5c]
inc eax
mov dword [ebp - 0x5c], eax
cmp dword [ebp - 0x5c], 0xf
jne 0x1003efa9
mov dword [ebp - 0x440], 0
mov dword [ebp - 0x28], 0xffffffff
mov dword [ebp - 0xdc], 0
jmp 0x1003ee5e
mov eax, dword [ebp - 0xdc]
inc eax
mov dword [ebp - 0xdc], eax
cmp dword [ebp - 0xdc], 3
jge 0x1003ee7a
mov eax, dword [ebp - 0xdc]
mov dword [ebp + eax*4 - 0x2fc], 0xba07e4fc
jmp 0x1003ee51
push 4
pop eax
shl eax, 0
mov dword [ebp + eax - 0x2fc], 0
jmp 0x1003eea8
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x2fc]
inc eax
push 4
pop ecx
shl ecx, 0
mov dword [ebp + ecx - 0x2fc], eax
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x2fc], 0x18
jl 0x1003efa4
mov dword [ebp - 0x74], 0
cmp dword [ebp - 0x5c], 0
je 0x1003ef6d
mov dword [ebp - 0x41c], 0
lea eax, [ebp - 0x74]
push eax
push 1
push 1
call fcn.1003cb62
add esp, 0xc
mov dword [ebp - 0x74], 0
jmp 0x1003eef7
mov eax, dword [ebp - 0x74]
inc eax
mov dword [ebp - 0x74], eax
cmp dword [ebp - 0x74], 0x26
jge 0x1003ef6b
mov dword [ebp - 0x28], 0
jmp 0x1003ef0d
mov eax, dword [ebp - 0x28]
inc eax
mov dword [ebp - 0x28], eax
cmp dword [ebp - 0x28], 4
jge 0x1003ef23
mov eax, dword [ebp - 0x28]
mov dword [ebp + eax*4 - 0x318], 0x9725
jmp 0x1003ef06
mov byte [ebp - 0x35], 0
push 0xff2
push 0x6f39
push 1
push 0x1da3
push 1
push 0x11fa
push 0x5379
push 0x6a6
push 0x31fc
push 0x7984
push 0xc6
lea eax, [ebp - 0x35]
push eax
push 0x2c30
call fcn.1003dadb
add esp, 0x34
jmp 0x1003eef0
jmp 0x1003ef9f
mov dword [ebp - 0x28], 0
jmp 0x1003ef7d
mov eax, dword [ebp - 0x28]
inc eax
mov dword [ebp - 0x28], eax
cmp dword [ebp - 0x28], 3
jg 0x1003ef9f
mov dword [ebp - 0x2a0], 0xfffffffe
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp + eax*4 - 0x318]
mov dword [ebp - 0x2a0], eax
jmp 0x1003ef76
jmp 0x1003ee8d
jmp 0x1003ee23
cmp dword [0x109271fc], 0
jne 0x1003fafe
mov dword [ebp - 0x34], 0x47dc
mov dword [ebp - 0x54], 8
mov dword [ebp - 0x2e4], 9
mov dword [ebp - 0x2e0], 9
mov dword [ebp - 0x2dc], 9
mov dword [ebp - 0x2d8], 9
mov dword [ebp - 0x26c], 0xf3813bf5
mov eax, dword [ebp - 0x34]
mov dword [ebp - 0x54], eax
cmp dword [ebp - 0x34], 0
je 0x1003f00e
mov dword [ebp - 0x214], 1
jmp 0x1003f015
and dword [ebp - 0x214], 0
mov eax, dword [ebp - 0x34]
add eax, dword [ebp - 0x214]
cmp eax, dword [ebp - 0x34]
jge 0x1003f02f
mov dword [ebp - 0x16c], 1
jmp 0x1003f036
and dword [ebp - 0x16c], 0
mov eax, dword [ebp - 0x54]
cmp dword [ebp - 0x16c], eax
jl 0x1003f04d
mov dword [ebp - 0x1cc], 1
jmp 0x1003f054
and dword [ebp - 0x1cc], 0
mov eax, dword [ebp - 0x34]
add eax, dword [ebp - 0x1cc]
mov dword [ebp - 0x54], eax
mov eax, dword [ebp - 0x54]
neg eax
je 0x1003f088
cmp dword [ebp - 0x54], 0
je 0x1003f088
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0x2e4], 0
je 0x1003f088
mov dword [ebp - 0x174], 1
jmp 0x1003f08f
and dword [ebp - 0x174], 0
mov eax, dword [ebp - 0x34]
imul eax, dword [ebp - 0x174]
cmp eax, 0x132d7af2
je 0x1003f0af
cmp dword [ebp - 0x54], 0
jne 0x1003f0af
and dword [ebp - 0x1fc], 0
jmp 0x1003f0b9
mov dword [ebp - 0x1fc], 1
cmp dword [ebp - 0x1fc], 0xdfddae97
jne 0x1003f0e6
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0x2e4], 0
je 0x1003f0e6
cmp dword [ebp - 0x34], 0
je 0x1003f0e6
mov dword [ebp - 0x17c], 1
jmp 0x1003f0ed
and dword [ebp - 0x17c], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x17c]
sub ecx, dword [ebp + eax - 0x2e4]
mov dword [ebp - 0x26c], ecx
mov byte [ebp - 0x37], 0
movzx eax, byte [ebp - 0x37]
test eax, eax
je 0x1003f137
push 0x503b
push 0x7c80
push 0x2a52
push 0
push 0x7146
push 0x78a7
push 1
call fcn.1005134c
add esp, 0x1c
mov dword [ebp - 0x64], 0xbe9fb1c0
mov dword [ebp - 0x4c], 0x33356370
mov dword [ebp - 0x194], 0xffffffff
mov dword [ebp - 0x84], 0xfffffffd
mov dword [ebp - 0x3ac], 0xffffffff
mov dword [ebp - 0x3a8], 0xffffffff
mov dword [ebp - 0x3a4], 0xffffffff
mov dword [ebp - 0x3a0], 0xffffffff
cmp dword [ebp - 0x64], 1
jl 0x1003f193
mov dword [ebp - 0x1d4], 1
jmp 0x1003f19a
and dword [ebp - 0x1d4], 0
mov dword [ebp - 0x4c], 0x2b000cd8
mov eax, dword [ebp - 0x4c]
imul eax, dword [ebp - 0x1d4]
test eax, eax
jne 0x1003f1be
cmp dword [ebp - 0x64], 0
jne 0x1003f1be
and dword [ebp - 0x184], 0
jmp 0x1003f1c8
mov dword [ebp - 0x184], 1
cmp dword [ebp - 0x184], 0x8e55
je 0x1003f1e0
mov dword [ebp - 0x21c], 1
jmp 0x1003f1e7
and dword [ebp - 0x21c], 0
mov eax, dword [ebp - 0x64]
cmp dword [ebp - 0x21c], eax
je 0x1003f1fe
mov dword [ebp - 0x18c], 1
jmp 0x1003f205
and dword [ebp - 0x18c], 0
mov eax, dword [ebp - 0x64]
cmp dword [ebp - 0x18c], eax
jg 0x1003f222
cmp dword [ebp - 0x64], 0
je 0x1003f222
mov dword [ebp - 0x1dc], 1
jmp 0x1003f229
and dword [ebp - 0x1dc], 0
mov eax, dword [ebp - 0x1dc]
mov dword [ebp - 0x194], eax
cmp dword [ebp - 0x194], 0
je 0x1003f24e
xor eax, eax
je 0x1003f24e
mov dword [ebp - 0x100], 1
jmp 0x1003f255
and dword [ebp - 0x100], 0
mov eax, dword [ebp - 0x64]
mov ecx, dword [ebp - 0x100]
lea eax, [ecx + eax + 0x392715ee]
mov dword [ebp - 0x84], eax
mov dword [ebp - 0x84], 0
jmp 0x1003f284
mov eax, dword [ebp - 0x84]
dec eax
mov dword [ebp - 0x84], eax
cmp dword [ebp - 0x84], 0xffffffec
jle 0x1003f2b5
mov dword [ebp - 0x4c], 0
jmp 0x1003f29d
mov eax, dword [ebp - 0x4c]
inc eax
mov dword [ebp - 0x4c], eax
cmp dword [ebp - 0x4c], 4
jge 0x1003f2b3
mov eax, dword [ebp - 0x4c]
mov dword [ebp + eax*4 - 0x3ac], 0xd4782549
jmp 0x1003f296
jmp 0x1003f277
mov byte [ebp - 0xc0], 1
mov byte [ebp - 0xbf], 0xb8
mov byte [ebp - 0xbe], 8
mov byte [ebp - 0xbd], 0x4b
mov byte [ebp - 0xbc], 4
mov byte [ebp - 0xbb], 0xde
mov byte [ebp - 0xba], 0xc5
mov byte [ebp - 0xb9], 0xa1
mov byte [ebp - 0xb8], 0x42
mov byte [ebp - 0xb7], 3
mov byte [ebp - 0xb6], 0x40
mov byte [ebp - 0xb5], 6
mov byte [ebp - 0xb4], 0x5d
mov byte [ebp - 0xb3], 0xa
mov byte [ebp - 0xb2], 0x5f
mov byte [ebp - 0xb1], 9
mov byte [ebp - 0xb0], 8
mov byte [ebp - 0xaf], 4
mov byte [ebp - 0xae], 1
mov byte [ebp - 0xad], 2
mov byte [ebp - 0xac], 0x17
mov byte [ebp - 0xab], 7
mov byte [ebp - 0xaa], 0x40
mov byte [ebp - 0xa9], 0
mov byte [ebp - 0xa8], 0x79
mov byte [ebp - 0xa7], 5
mov byte [ebp - 0xa6], 0x27
mov byte [ebp - 0xa5], 0xb
mov byte [ebp - 0xa4], 0
xor eax, eax
inc eax
shl eax, 0
movzx eax, byte [ebp + eax - 0xc0]
or eax, 0xdd
xor ecx, ecx
inc ecx
shl ecx, 0
movzx ecx, byte [ebp + ecx - 0xc0]
and ecx, 0xdd
sub eax, ecx
xor ecx, ecx
inc ecx
imul ecx, ecx, 0
movzx ecx, byte [ebp + ecx - 0xc0]
mov word [ebp + ecx*2 - 0x3c8], ax
mov dword [ebp - 0x18], 2
and dword [ebp - 0x70], 0
jmp 0x1003f3d4
mov eax, dword [ebp - 0x18]
inc eax
inc eax
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 0x1d
jae 0x1003f4a4
xor eax, eax
inc eax
imul eax, eax, 0
movzx eax, byte [ebp + eax - 0xc0]
lea eax, [eax + eax + 2]
cmp dword [ebp - 0x18], eax
jne 0x1003f41b
mov eax, dword [ebp - 0x18]
movzx eax, byte [ebp + eax - 0xc0]
inc eax
mov dword [ebp - 0x70], eax
mov eax, dword [ebp - 0x18]
movzx eax, byte [ebp + eax - 0xc0]
mov ecx, dword [ebp - 0x18]
lea eax, [ecx + eax - 1]
mov dword [ebp - 0x18], eax
jmp 0x1003f3cc
mov eax, dword [ebp - 0x18]
movzx eax, byte [ebp + eax - 0xbf]
mov ecx, dword [ebp - 0x18]
sub ecx, dword [ebp - 0x70]
movzx ecx, byte [ebp + ecx - 0xc2]
movzx ecx, word [ebp + ecx*2 - 0x3c8]
add eax, ecx
mov ecx, dword [ebp - 0x18]
movzx ecx, byte [ebp + ecx - 0xbf]
mov edx, dword [ebp - 0x18]
sub edx, dword [ebp - 0x70]
movzx edx, byte [ebp + edx - 0xc2]
movzx edx, word [ebp + edx*2 - 0x3c8]
and ecx, edx
sub eax, ecx
mov ecx, dword [ebp - 0x18]
movzx ecx, byte [ebp + ecx - 0xbf]
mov edx, dword [ebp - 0x18]
sub edx, dword [ebp - 0x70]
movzx edx, byte [ebp + edx - 0xc2]
movzx edx, word [ebp + edx*2 - 0x3c8]
and ecx, edx
sub eax, ecx
mov ecx, dword [ebp - 0x18]
movzx ecx, byte [ebp + ecx - 0xc0]
mov word [ebp + ecx*2 - 0x3c8], ax
and dword [ebp - 0x70], 0
jmp 0x1003f3cc
push 2
pop eax
imul eax, eax, 0xc
xor ecx, ecx
mov word [ebp + eax - 0x3c8], cx
mov dword [ebp - 0x1c], 0x92f644a
push 1
lea ecx, [ebp - 0x228]
call fcn.1001795c
mov byte [ebp - 4], 6
mov dword [ebp - 0x29c], 0xfffffff9
push 0
push 0x7822
push 0
lea eax, [ebp - 0x228]
push eax
lea eax, [ebp - 0x410]
push eax
call fcn.10040305
add esp, 0x14
mov eax, dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], eax
jg 0x1003f509
mov dword [ebp - 0x108], 1
jmp 0x1003f510
and dword [ebp - 0x108], 0
mov eax, dword [ebp - 0x1c]
cmp dword [ebp - 0x108], eax
jge 0x1003f527
mov dword [ebp - 0x110], 1
jmp 0x1003f52e
and dword [ebp - 0x110], 0
mov eax, dword [ebp - 0x1c]
cmp eax, dword [ebp - 0x110]
jne 0x1003f545
mov dword [ebp - 0x120], 1
jmp 0x1003f54c
and dword [ebp - 0x120], 0
cmp dword [ebp - 0x1c], 0x2e65251c
jne 0x1003f561
mov dword [ebp - 0x118], 1
jmp 0x1003f568
and dword [ebp - 0x118], 0
mov eax, dword [ebp - 0x1c]
imul eax, dword [ebp - 0x118]
cmp eax, dword [ebp - 0x1c]
jg 0x1003f583
mov dword [ebp - 0x128], 1
jmp 0x1003f58a
and dword [ebp - 0x128], 0
mov eax, dword [ebp - 0x120]
sub eax, dword [ebp - 0x128]
cmp eax, dword [ebp - 0x1c]
jl 0x1003f5a7
mov dword [ebp - 0x130], 1
jmp 0x1003f5ae
and dword [ebp - 0x130], 0
mov eax, dword [ebp - 0x130]
sub eax, 0x2d7bc352
mov dword [ebp - 0x138], eax
push 0
lea ecx, [ebp - 0x228]
call fcn.100179fa
mov ecx, dword [ebp - 0x138]
mov dword [eax], ecx
cmp dword [ebp - 0x138], 0
jne 0x1003f5f1
or eax, 0xffffffff
jne 0x1003f5f1
cmp dword [ebp - 0x1c], 0
jne 0x1003f5f1
and dword [ebp - 0x2a8], 0
jmp 0x1003f5fb
mov dword [ebp - 0x2a8], 1
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0x3cc], eax
push 0
lea ecx, [ebp - 0x228]
call fcn.100179fa
mov ecx, dword [ebp - 0x1c]
cmp dword [eax], ecx
je 0x1003f636
push 0
lea ecx, [ebp - 0x228]
call fcn.100179fa
cmp dword [eax], 0
je 0x1003f636
mov dword [ebp - 0x140], 1
jmp 0x1003f63d
and dword [ebp - 0x140], 0
mov eax, dword [ebp - 0x1c]
cmp dword [ebp - 0x140], eax
jge 0x1003f7b4
mov dword [ebp - 0x20], 0x46cd
mov dword [ebp - 0x2b8], 0
mov dword [ebp - 0x2c0], 0xfffffff8
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 0
je 0x1003f74f
mov dword [ebp - 0x274], 0x8185f187
mov dword [ebp - 0x27c], 2
mov dword [ebp - 0x20], 0xffffffec
jmp 0x1003f69b
mov eax, dword [ebp - 0x20]
inc eax
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 0xd
jle 0x1003f710
mov dword [ebp - 0x2b0], 0xefce
mov byte [ebp - 0x39], 0
movzx eax, byte [ebp - 0x39]
test eax, eax
je 0x1003f6d7
push 1
push 1
push 0x7d21
push 0x749f
push 0x2978
push 0x759
call fcn.1003dbf5
add esp, 0x18
lea eax, [ebp - 0x20]
push eax
lea eax, [ebp - 0x274]
push eax
lea eax, [ebp - 0x1c]
push eax
push 0
lea eax, [ebp - 0x228]
push eax
lea eax, [ebp - 0x2b0]
push eax
push 0xda4
lea eax, [ebp - 0x27c]
push eax
push 1
push 1
call fcn.1003d63b
add esp, 0x28
jmp 0x1003f694
mov dword [ebp - 0x20], 0
jmp 0x1003f720
mov eax, dword [ebp - 0x20]
inc eax
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 0
jg 0x1003f74d
push 0x5a3e
push 0x4592
push 0x403b
push 0x516
push 0
push 1
push 0x1bac
call fcn.1004d9c2
add esp, 0x1c
jmp 0x1003f719
jmp 0x1003f7b2
mov dword [ebp - 0x2c8], 0
mov dword [ebp - 0x2d4], 0x466e1a5
mov dword [ebp - 0x28c], 0xfffffff9
push 1
lea eax, [ebp - 0x2b8]
push eax
lea eax, [ebp - 0x28c]
push eax
lea eax, [ebp - 0x20]
push eax
push 1
lea eax, [ebp - 0x1c]
push eax
lea eax, [ebp - 0x2c0]
push eax
lea eax, [ebp - 0x228]
push eax
lea eax, [ebp - 0x2c8]
push eax
lea eax, [ebp - 0x2d4]
push eax
lea eax, [ebp - 0x29c]
push eax
call fcn.1003cc17
add esp, 0x2c
jmp 0x1003f7cf
push 0
push 0x3aad
push 1
push 0x70b1
push 0x10de
call fcn.10040305
add esp, 0x14
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x228]
call fcn.100179de
lea eax, [ebp - 0x3c8]
push eax
lea ecx, [ebp - 0x4b8]
call fcn.10051739
mov dword [ebp - 0x2bc], eax
mov eax, dword [ebp - 0x2bc]
mov dword [ebp - 0x2a4], eax
mov byte [ebp - 4], 7
push dword [ebp - 0x2a4]
call fcn.1003c48d
pop ecx
mov dword [ebp - 0x148], eax
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x4b8]
call fcn.100177ef
push 0x4776
push 0
push 1
push 0x323a
push 1
push 0x56f3
push 0x962
call fcn.1004eedb
add esp, 0x1c
and dword [ebp - 0xd4], 0
jmp 0x1003f85f
mov eax, dword [ebp - 0xd4]
inc eax
mov dword [ebp - 0xd4], eax
cmp dword [ebp - 0xd4], 0xd
jae 0x1003f87a
xor eax, eax
mov ecx, dword [ebp - 0xd4]
mov word [ebp + ecx*2 - 0x3c8], ax
jmp 0x1003f852
cmp dword [ebp - 0x148], 0
je 0x1003fafe
mov byte [ebp - 0xa0], 2
mov byte [ebp - 0x9f], 0xd6
mov byte [ebp - 0x9e], 0xb
mov byte [ebp - 0x9d], 0x36
mov byte [ebp - 0x9c], 6
mov byte [ebp - 0x9b], 0x35
mov byte [ebp - 0x9a], 3
mov byte [ebp - 0x99], 0x34
mov byte [ebp - 0x98], 0x90
mov byte [ebp - 0x97], 0x8c
mov byte [ebp - 0x96], 5
mov byte [ebp - 0x95], 0xb
mov byte [ebp - 0x94], 1
mov byte [ebp - 0x93], 6
mov byte [ebp - 0x92], 8
mov byte [ebp - 0x91], 0xe
mov byte [ebp - 0x90], 7
mov byte [ebp - 0x8f], 0x13
mov byte [ebp - 0x8e], 4
mov byte [ebp - 0x8d], 0x3e
mov byte [ebp - 0x8c], 3
mov byte [ebp - 0x8b], 0x28
mov byte [ebp - 0x8a], 9
mov byte [ebp - 0x89], 0x16
mov byte [ebp - 0x88], 0
mov byte [ebp - 0x87], 0x3e
mov byte [ebp - 0x86], 0xa
mov byte [ebp - 0x85], 0x35
xor eax, eax
inc eax
shl eax, 0
movzx eax, byte [ebp + eax - 0xa0]
or eax, 0xb7
xor ecx, ecx
inc ecx
shl ecx, 0
movzx ecx, byte [ebp + ecx - 0xa0]
and ecx, 0xb7
sub eax, ecx
xor ecx, ecx
inc ecx
imul ecx, ecx, 0
movzx ecx, byte [ebp + ecx - 0xa0]
mov byte [ebp + ecx - 0x238], al
mov dword [ebp - 0x14], 2
and dword [ebp - 0x80], 0
jmp 0x1003f99e
mov eax, dword [ebp - 0x14]
inc eax
inc eax
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 0x1c
jae 0x1003fa7e
xor eax, eax
inc eax
imul eax, eax, 0
movzx eax, byte [ebp + eax - 0xa0]
lea eax, [eax + eax + 2]
cmp dword [ebp - 0x14], eax
jne 0x1003f9e5
mov eax, dword [ebp - 0x14]
movzx eax, byte [ebp + eax - 0xa0]
inc eax
mov dword [ebp - 0x80], eax
mov eax, dword [ebp - 0x14]
movzx eax, byte [ebp + eax - 0xa0]
mov ecx, dword [ebp - 0x14]
lea eax, [ecx + eax - 1]
mov dword [ebp - 0x14], eax
jmp 0x1003f996
mov eax, dword [ebp - 0x14]
movzx eax, byte [ebp + eax - 0x9f]
mov ecx, dword [ebp - 0x14]
sub ecx, dword [ebp - 0x80]
movzx ecx, byte [ebp + ecx - 0xa2]
movsx ecx, byte [ebp + ecx - 0x238]
add eax, ecx
mov ecx, dword [ebp - 0x14]
movzx ecx, byte [ebp + ecx - 0x9f]
mov edx, dword [ebp - 0x14]
sub edx, dword [ebp - 0x80]
movzx edx, byte [ebp + edx - 0xa2]
movsx edx, byte [ebp + edx - 0x238]
and ecx, edx
sub eax, ecx
mov ecx, dword [ebp - 0x14]
movzx ecx, byte [ebp + ecx - 0x9f]
mov edx, dword [ebp - 0x14]
sub edx, dword [ebp - 0x80]
movzx edx, byte [ebp + edx - 0xa2]
movsx edx, byte [ebp + edx - 0x238]
and ecx, edx
sub eax, ecx
mov ecx, dword [ebp - 0x14]
movzx ecx, byte [ebp + ecx - 0xa0]
mov byte [ebp + ecx - 0x238], al
push 0x4ae0
lea eax, [ebp - 0x80]
push eax
push 1
push 0
call fcn.1003d173
add esp, 0x10
jmp 0x1003f996
xor eax, eax
inc eax
imul eax, eax, 0xc
mov byte [ebp + eax - 0x238], 0
lea eax, [ebp - 0x238]
push eax
lea ecx, [ebp - 0x498]
call fcn.1003aedf
mov byte [ebp - 4], 8
and dword [ebp - 0xd8], 0
jmp 0x1003fab8
mov eax, dword [ebp - 0xd8]
inc eax
mov dword [ebp - 0xd8], eax
cmp dword [ebp - 0xd8], 0xd
jae 0x1003fad1
mov eax, dword [ebp - 0xd8]
mov byte [ebp + eax - 0x238], 0
jmp 0x1003faab
push 0
push 0
lea eax, [ebp - 0x498]
push eax
push dword [ebp - 0x148]
call fcn.1004566f
add esp, 0x10
mov dword [0x109271fc], eax
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x498]
call fcn.100178c9
mov dword [ebp - 0xd0], 0xfffffff9
mov dword [ebp - 0xc8], 0
jmp 0x1003fb21
mov eax, dword [ebp - 0xc8]
inc eax
mov dword [ebp - 0xc8], eax
cmp dword [ebp - 0xc8], 2
jge 0x1003fb3d
mov eax, dword [ebp - 0xc8]
mov dword [ebp + eax*4 - 0x454], 0xd7f8
jmp 0x1003fb14
mov byte [ebp - 0x3b], 0
push 0xd34
push 0x4eff
lea eax, [ebp - 0x3b]
push eax
push 0x2184
push 1
push 1
call fcn.1003dddb
add esp, 0x18
mov dword [ebp - 0xd0], 0
jmp 0x1003fb79
mov eax, dword [ebp - 0xd0]
inc eax
mov dword [ebp - 0xd0], eax
cmp dword [ebp - 0xd0], 1
jg 0x1003fca9
mov dword [ebp - 0x36c], 0x2304b25b
mov dword [ebp - 0x368], 0x2304b25b
mov dword [ebp - 0x364], 0x2304b25b
mov dword [ebp - 0x360], 0x2304b25b
lea ecx, [ebp - 0xe1]
call fcn.10017a09
push eax
lea eax, [ebp - 0x35c]
push eax
lea eax, [ebp - 0x36c]
push eax
lea ecx, [ebp - 0x480]
call fcn.10017a0c
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0x244]
call fcn.100179b8
mov byte [ebp - 4], 9
mov byte [ebp - 0x3d], 0
push 1
lea eax, [ebp - 0x3d]
push eax
push 1
call fcn.1003de72
add esp, 0xc
mov byte [ebp - 0x4e], 0
push 0x65dc
push 1
push 0x7a6d
lea eax, [ebp - 0x4e]
push eax
push 1
call fcn.1003e0a3
add esp, 0x14
push 0
lea ecx, [ebp - 0x244]
call fcn.100179fa
mov dword [eax], 1
jmp 0x1003fc52
push 0
lea ecx, [ebp - 0x244]
call fcn.100179fa
mov dword [ebp - 0x150], eax
mov eax, dword [ebp - 0x150]
mov eax, dword [eax]
dec eax
mov ecx, dword [ebp - 0x150]
mov dword [ecx], eax
push 0
lea ecx, [ebp - 0x244]
call fcn.100179fa
cmp dword [eax], 0
jl 0x1003fc95
push 0
lea ecx, [ebp - 0x244]
call fcn.100179fa
mov eax, dword [eax]
cmp dword [ebp + eax*4 - 0x454], 0
je 0x1003fc7f
jmp 0x1003fc95
push 0
lea ecx, [ebp - 0x244]
call fcn.100179fa
cmp dword [eax], 0
je 0x1003fc93
jmp 0x1003fc95
jmp 0x1003fc2e
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x244]
call fcn.100179de
jmp 0x1003fb6c
cmp dword [0x109271fc], 0
je 0x1003fcc7
mov ecx, dword [ebp - 0x158]
call fcn.1001784e
push eax
call dword [0x109271fc]
mov dword [ebp - 0x68], eax
push 4
lea ecx, [ebp - 0x288]
call fcn.1001795c
mov byte [ebp - 4], 0xa
mov dword [ebp - 0x10], 0
jmp 0x1003fce8
mov eax, dword [ebp - 0x10]
inc eax
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], 4
jge 0x1003fd04
push dword [ebp - 0x10]
lea ecx, [ebp - 0x288]
call fcn.100179fa
mov dword [eax], 3
jmp 0x1003fce1
mov dword [ebp - 0x10], 0
jmp 0x1003fd14
mov eax, dword [ebp - 0x10]
inc eax
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], 3
jge 0x1003fd2a
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0x378], 0xf47a6d
jmp 0x1003fd0d
mov dword [ebp - 0x10], 0
jmp 0x1003fd3a
mov eax, dword [ebp - 0x10]
inc eax
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], 4
jge 0x1003fd50
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0x470], 4
jmp 0x1003fd33
mov dword [ebp - 0x10], 0
jmp 0x1003fd60
mov eax, dword [ebp - 0x10]
inc eax
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], 2
jge 0x1003fd76
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0x438], 0x9cd4431f
jmp 0x1003fd59
mov dword [ebp - 0x10], 0
jmp 0x1003fd86
mov eax, dword [ebp - 0x10]
inc eax
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], 3
jge 0x1003fd9c
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0x460], 0xa7b445ac
jmp 0x1003fd7f
push 2
lea ecx, [ebp - 0x288]
call fcn.100179fa
push 4
pop ecx
sub ecx, dword [eax]
mov dword [ebp - 0xfc], ecx
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0xfc]
mov dword [ebp + eax - 0x378], ecx
cmp dword [ebp - 0xfc], 0
jne 0x1003fe92
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x378], 0
jne 0x1003fe34
push 4
pop eax
shl eax, 1
mov esi, dword [ebp + eax - 0x378]
push 2
lea ecx, [ebp - 0x288]
call fcn.100179fa
cmp esi, dword [eax]
je 0x1003fe0d
mov dword [ebp - 0x168], 1
jmp 0x1003fe14
and dword [ebp - 0x168], 0
push 2
lea ecx, [ebp - 0x288]
call fcn.100179fa
mov eax, dword [eax]
add eax, dword [ebp - 0x168]
jne 0x1003fe34
and dword [ebp - 0xf4], 0
jmp 0x1003fe3e
mov dword [ebp - 0xf4], 1
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0xf4]
mov dword [ebp + eax - 0x470], ecx
imul eax, dword [ebp - 0xf4], 0xfffe
push 4
pop ecx
shl ecx, 0
cmp eax, dword [ebp + ecx - 0x438]
je 0x1003fe76
mov dword [ebp - 0x170], 1
jmp 0x1003fe7d
and dword [ebp - 0x170], 0
cmp dword [ebp - 0x170], 0x393e75cb
jl 0x1003fe92
and dword [ebp - 0x178], 0
jmp 0x1003fe9c
mov dword [ebp - 0x178], 1
imul eax, dword [ebp - 0x178], 0xafa0
push 4
pop ecx
shl ecx, 0
mov dword [ebp + ecx - 0x460], eax
push 1
push 1
call fcn.1003e13f
pop ecx
pop ecx
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x288]
call fcn.100179de
cmp dword [ebp - 0x68], 0
je 0x1003ff1b
movzx eax, byte [0x109271f5]
test eax, eax
je 0x1003feef
mov ecx, 0x1092734c
call fcn.100517aa
movzx eax, al
test eax, eax
jne 0x1003ff1b
lea eax, [ebp - 0x180]
push eax
mov ecx, 0x1092734c
call fcn.1005176c
mov ecx, dword [ebp - 0x68]
mov dword [eax], ecx
push 0x109271f5
push 0x49fb
push 1
push 1
call fcn.1003d173
add esp, 0x10
mov dword [ebp - 0x188], 0xffffffff
push 2
lea ecx, [ebp - 0x39c]
call fcn.1001795c
mov byte [ebp - 4], 0xb
mov dword [ebp - 0x1f0], 0x3e8e1b88
mov dword [ebp - 0x420], 0xd9bacc5d
mov dword [ebp - 0x2ac], 0xf934f545
mov dword [ebp - 0x428], 1
mov dword [ebp - 0x1a0], 2
mov dword [ebp - 0x430], 0xcfce2949
mov dword [ebp - 0x43c], 0xffffffff
mov dword [ebp - 0x1b0], 0xffffffff
mov dword [ebp - 0x24c], 0xffffffff
push 2
lea ecx, [ebp - 0x384]
call fcn.1001795c
mov byte [ebp - 4], 0xc
mov dword [ebp - 0xe8], 0x6a76
mov dword [ebp - 0x2cc], 0xa2ef
push 0
push 0x2608
push 0x4709
push 0x502c
lea eax, [ebp - 0x39c]
push eax
lea eax, [ebp - 0x6c]
push eax
call fcn.1004db8f
add esp, 0x18
mov dword [ebp - 0x6c], 0
jmp 0x1003ffe9
mov eax, dword [ebp - 0x6c]
inc eax
mov dword [ebp - 0x6c], eax
cmp dword [ebp - 0x6c], 1
jge 0x1003ffff
mov eax, dword [ebp - 0x6c]
mov dword [ebp + eax*4 - 0x190], 1
jmp 0x1003ffe2
push 1
push 1
push 0x7974
push 0x1a87
lea eax, [ebp - 0x6c]
push eax
lea eax, [ebp - 0x384]
push eax
call fcn.1003e1d9
add esp, 0x18
cmp dword [ebp - 0x188], 0
jne 0x10040050
cmp dword [ebp - 0x188], 0
je 0x10040047
push 1
lea ecx, [ebp - 0x39c]
call fcn.100179fa
or dword [eax], 0xffffffff
or eax, 0xffffffff
jne 0x10040050
and dword [ebp - 0x1d0], 0
jmp 0x1004005a
mov dword [ebp - 0x1d0], 1
push 4
pop eax
imul eax, eax, 0
push 4
pop ecx
imul ecx, ecx, 0
mov ecx, dword [ebp + ecx - 0x190]
cmp dword [ebp + eax - 0x190], ecx
jne 0x10040082
mov dword [ebp - 0x198], 1
jmp 0x10040089
and dword [ebp - 0x198], 0
mov eax, dword [ebp - 0x198]
mov dword [ebp - 0x1a0], eax
cmp dword [ebp - 0x1a0], 0
jne 0x100400b0
cmp dword [ebp - 0x2cc], 0
jne 0x100400b0
and dword [ebp - 0x1a8], 0
jmp 0x100400ba
mov dword [ebp - 0x1a8], 1
mov eax, dword [ebp - 0x1b0]
cmp dword [ebp - 0x1a8], eax
jle 0x100400d4
mov dword [ebp - 0x1b8], 1
jmp 0x100400db
and dword [ebp - 0x1b8], 0
mov eax, dword [ebp - 0x1b0]
cmp dword [ebp - 0x1b8], eax
jl 0x100400f5
mov dword [ebp - 0x1c0], 1
jmp 0x100400fc
and dword [ebp - 0x1c0], 0
push 0
lea ecx, [ebp - 0x384]
call fcn.100179fa
mov ecx, dword [ebp - 0x1c0]
cmp ecx, dword [eax]
je 0x10040128
cmp dword [ebp - 0x2ac], 0
je 0x10040128
mov dword [ebp - 0x2c4], 1
jmp 0x1004012f
and dword [ebp - 0x2c4], 0
imul eax, dword [ebp - 0x1f0], 0x4b58
cmp eax, dword [ebp - 0x24c]
jl 0x1004014d
mov dword [ebp - 0x1c8], 1
jmp 0x10040154
and dword [ebp - 0x1c8], 0
cmp dword [ebp - 0x1c8], 1
jbe 0x10040169
mov dword [ebp - 0x1d8], 1
jmp 0x10040170
and dword [ebp - 0x1d8], 0
mov eax, dword [ebp - 0xe8]
inc eax
mov dword [ebp - 0xe8], eax
mov eax, dword [ebp - 0xe8]
add eax, dword [ebp - 0x1d0]
cmp eax, dword [ebp - 0x1d8]
jl 0x1004019d
mov dword [ebp - 0x1e0], 1
jmp 0x100401a4
and dword [ebp - 0x1e0], 0
cmp dword [ebp - 0x1e0], 0xfffffffa
jb 0x100401b9
mov dword [ebp - 0x1e8], 1
jmp 0x100401c0
and dword [ebp - 0x1e8], 0
mov eax, dword [ebp - 0x1e8]
mov dword [ebp - 0x1f0], eax
mov byte [ebp - 0x45], 0
push 0x62a3
push 0x5228
lea eax, [ebp - 0x45]
push eax
push 0x2d32
push 0x5519
push 1
push 0xa1d
push 0x6b9e
push 0x226d
push 0x3868
push 0
push 1
call fcn.1004f5ff
add esp, 0x30
mov byte [ebp - 4], 0xb
lea ecx, [ebp - 0x384]
call fcn.100179de
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x39c]
call fcn.100179de
mov eax, dword [ebp - 0x1f8]
mov ecx, dword [ebp - 0x68]
mov dword [eax], ecx
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x330]
call fcn.100177ef
jmp 0x100402ca
mov eax, dword [ebp - 0x250]
mov dword [ebp - 0x258], eax
mov eax, dword [ebp - 0x258]
mov dword [ebp - 0x200], eax
mov eax, dword [ebp - 0x200]
mov eax, dword [eax]
dec eax
mov ecx, dword [ebp - 0x200]
mov dword [ecx], eax
jmp 0x100402ca
lea eax, [ebp + 8]
mov dword [ebp - 0x260], eax
mov eax, dword [ebp - 0x260]
movzx eax, byte [eax]
test eax, eax
je 0x100402b8
mov byte [ebp - 0x38], 0
movzx eax, byte [ebp - 0x38]
test eax, eax
je 0x100402b6
push 0x1a0c
push 1
push 0
call fcn.1003cb62
add esp, 0xc
jmp 0x100402ca
push 0xa8b
push 0x1235
push 0
call dword [sym.imp.USER32.dll_CheckMenuItem]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop esi
mov esp, ebp
pop ebp
ret