Function at 0x1003d686
Capabilities:
Parse pe header

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x100684b4
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x74c
push esi
mov dword [ebp - 0x6a4], 0xfffffffe
mov dword [ebp - 0x688], 3
mov dword [ebp - 0x624], 0xba1bf2b
mov dword [ebp - 0x460], 4
mov dword [ebp - 0x24], 0
jmp 0x1003d6dd
mov eax, dword [ebp - 0x24]
inc eax
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 2
jge 0x1003d6f3
mov eax, dword [ebp - 0x24]
mov dword [ebp + eax*4 - 0x648], 1
jmp 0x1003d6d6
mov dword [ebp - 0x24], 0
jmp 0x1003d703
mov eax, dword [ebp - 0x24]
inc eax
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 3
jge 0x1003d719
mov eax, dword [ebp - 0x24]
mov dword [ebp + eax*4 - 0x758], 0x7865925e
jmp 0x1003d6fc
mov dword [ebp - 0x24], 0
jmp 0x1003d729
mov eax, dword [ebp - 0x24]
inc eax
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 4
jge 0x1003d73f
mov eax, dword [ebp - 0x24]
mov dword [ebp + eax*4 - 0x6f0], 0x457d
jmp 0x1003d722
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x6f0]
dec eax
push 4
pop ecx
shl ecx, 0
mov dword [ebp + ecx - 0x6f0], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x648]
mov dword [ebp - 0x460], eax
and dword [ebp - 0x40], 0
push 3
lea ecx, [ebp - 0x5a4]
call fcn.100166bf
and dword [ebp - 4], 0
mov dword [ebp - 0x410], 0x96960f57
mov dword [ebp - 0x418], 0
mov dword [ebp - 0x420], 0xffffffff
mov dword [ebp - 0x484], 1
mov dword [ebp - 0x69c], 0xfffffffd
mov dword [ebp - 0x62c], 0xc75daa08
mov dword [ebp - 0x698], 4
mov dword [ebp - 0x634], 0x4c638299
mov dword [ebp - 0x6a0], 0x9f3b06d9
mov dword [ebp - 0x63c], 1
mov dword [ebp - 0x6a8], 0xfffffff6
mov dword [ebp - 0x650], 0xe4ddbb7a
mov dword [ebp - 0x5d0], 0
mov dword [ebp - 0x5d8], 0xa21b78cd
mov dword [ebp - 0x5e0], 0x4b505d01
mov dword [ebp - 0x5e8], 0xfffffff8
mov dword [ebp - 0x5f0], 0xfffffffc
mov dword [ebp - 0x428], 1
mov dword [ebp - 0x5f8], 0xeb6ba8a
push 0x5d8f
push 1
push 0x11b2
push 0x560a
lea eax, [ebp - 0xb0]
push eax
push 1
push 0x7ae
push 0x6a26
push 0x1125
lea eax, [ebp - 0x5a4]
push eax
push 0x3da2
push 0xea1
push 0x41ca
push 0x5bc
push 1
call fcn.1002d893
add esp, 0x3c
mov dword [ebp - 0xb0], 0
jmp 0x1003d8a7
mov eax, dword [ebp - 0xb0]
inc eax
mov dword [ebp - 0xb0], eax
cmp dword [ebp - 0xb0], 1
jge 0x1003d8c3
mov eax, dword [ebp - 0xb0]
mov dword [ebp + eax*4 - 0x600], 2
jmp 0x1003d89a
mov byte [ebp - 0x7d], 0
movzx eax, byte [ebp - 0x7d]
test eax, eax
je 0x1003d8e5
push 0x4f9c
push 0x2aab
push 1
push 1
call fcn.1002dbbb
add esp, 0x10
lea eax, [ebp - 0x410]
push eax
lea eax, [ebp - 0x5a4]
push eax
lea eax, [ebp - 0x418]
push eax
push 0x7ef7
push 0x6e50
lea eax, [ebp - 0x420]
push eax
push 0x6419
lea eax, [ebp - 0x428]
push eax
push 0x6cfa
push 0x7c98
push 1
lea eax, [ebp - 0x484]
push eax
push 1
call fcn.1002dc64
add esp, 0x34
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x5a4]
call fcn.100167a4
mov dword [ebp - 0x48c], 0x1676
cmp dword [ebp - 0x48c], 0x5fa
jge 0x1003dae8
lea eax, [ebp - 0x168]
push eax
push 0x10007724
call fcn.1004edeb
pop ecx
pop ecx
mov eax, dword [ebp - 0x168]
mov dword [ebp - 0x494], eax
mov eax, dword [ebp - 0x168]
dec eax
mov dword [ebp - 0x168], eax
cmp dword [ebp - 0x494], 0
je 0x1003dae8
lea eax, [ebp - 0x49c]
push eax
push 0x10007724
call fcn.1004edeb
pop ecx
pop ecx
lea ecx, [ebp - 0x1dc]
call fcn.100168b8
mov dword [ebp - 4], 1
and dword [ebp - 0x178], 0
and dword [ebp - 0x1d0], 0
jmp 0x1003d9d8
mov eax, dword [ebp - 0x1d0]
inc eax
mov dword [ebp - 0x1d0], eax
mov eax, dword [ebp - 0x1d0]
cmp eax, dword [ebp - 0x49c]
jge 0x1003da2a
lea eax, [ebp - 0x258]
push eax
push 0x10007724
call fcn.1004edeb
pop ecx
pop ecx
mov eax, dword [ebp - 0x258]
and eax, 0x80000001
jns 0x1003da0b
dec eax
or eax, 0xfffffffe
inc eax
test eax, eax
jne 0x1003da28
lea eax, [ebp - 0x258]
push eax
lea eax, [ebp - 0x73c]
push eax
lea ecx, [ebp - 0x1dc]
call fcn.100168cd
jmp 0x1003d9cb
lea ecx, [ebp - 0x1dc]
call fcn.1004157d
test eax, eax
je 0x1003dac2
lea eax, [ebp - 0x608]
push eax
lea ecx, [ebp - 0x1dc]
call fcn.10016969
mov ecx, eax
call fcn.10041615
mov eax, dword [eax]
mov dword [ebp - 0xcc], eax
lea eax, [ebp - 0xcc]
push eax
lea ecx, [ebp - 0x1dc]
call fcn.10041581
mov eax, dword [ebp - 0x178]
inc eax
mov dword [ebp - 0x178], eax
mov eax, dword [ebp - 0xcc]
cdq
sub eax, edx
sar eax, 1
mov dword [ebp - 0xcc], eax
mov eax, dword [ebp - 0xcc]
and eax, 0x80000001
jns 0x1003daa0
dec eax
or eax, 0xfffffffe
inc eax
test eax, eax
jne 0x1003dabd
lea eax, [ebp - 0xcc]
push eax
lea eax, [ebp - 0x724]
push eax
lea ecx, [ebp - 0x1dc]
call fcn.100168cd
jmp 0x1003da2a
push dword [ebp - 0x178]
push 0x10007730
call fcn.1004f4dc
pop ecx
pop ecx
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x1dc]
call fcn.100108c3
jmp 0x1003d970
mov dword [ebp - 0x570], 0xb57fd546
mov dword [ebp - 0x56c], 0xb57fd546
mov dword [ebp - 0x568], 0xb57fd546
mov dword [ebp - 0x564], 0xb57fd546
lea ecx, [ebp - 0x1a9]
call fcn.100167d8
push eax
lea eax, [ebp - 0x560]
push eax
lea eax, [ebp - 0x570]
push eax
lea ecx, [ebp - 0x734]
call fcn.100167db
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0x6fc]
call fcn.1001677e
mov dword [ebp - 4], 2
mov dword [ebp - 0xf8], 0x6d444182
mov dword [ebp - 0xf8], 0
jmp 0x1003db6f
mov eax, dword [ebp - 0xf8]
inc eax
mov dword [ebp - 0xf8], eax
cmp dword [ebp - 0xf8], 3
jg 0x1003db7f
call fcn.1003cc67
jmp 0x1003db62
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x6fc]
call fcn.100167a4
push 2
lea ecx, [ebp - 0x3b4]
call fcn.100166bf
mov dword [ebp - 4], 3
mov dword [ebp - 0x39c], 0x4b11f381
mov dword [ebp - 0x598], 0xea4c5706
mov dword [ebp - 0x594], 0xea4c5706
mov dword [ebp - 0x590], 0xea4c5706
mov dword [ebp - 0x58c], 0xea4c5706
lea ecx, [ebp - 0x1d1]
call fcn.100167d8
push eax
lea eax, [ebp - 0x588]
push eax
lea eax, [ebp - 0x598]
push eax
lea ecx, [ebp - 0x744]
call fcn.100167db
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0x674]
call fcn.1001677e
mov byte [ebp - 4], 4
push 1
lea ecx, [ebp - 0x5b0]
call fcn.100166bf
mov byte [ebp - 4], 5
mov dword [ebp - 0x44], 0
jmp 0x1003dc2e
mov eax, dword [ebp - 0x44]
inc eax
mov dword [ebp - 0x44], eax
cmp dword [ebp - 0x44], 1
jge 0x1003dc44
mov eax, dword [ebp - 0x44]
mov dword [ebp + eax*4 - 0x610], 0xffff
jmp 0x1003dc27
push 0x3416
push 0x129e
push 0x482e
push 0x4bb0
push 1
push 0xc8b
lea eax, [ebp - 0x44]
push eax
push 0x21fa
push 1
push 0x135c
push 0x5c19
push 0x6048
lea eax, [ebp - 0x3b4]
push eax
call fcn.1002df42
add esp, 0x34
mov dword [ebp - 0x44], 0
jmp 0x1003dc98
mov eax, dword [ebp - 0x44]
inc eax
mov dword [ebp - 0x44], eax
cmp dword [ebp - 0x44], 1
jge 0x1003dcb1
push dword [ebp - 0x44]
lea ecx, [ebp - 0x5b0]
call fcn.100167c9
and dword [eax], 0
jmp 0x1003dc91
push 1
lea ecx, [ebp - 0x3b4]
call fcn.100167c9
and dword [eax], 0
jmp 0x1003dce7
push 1
lea ecx, [ebp - 0x3b4]
call fcn.100167c9
mov dword [ebp - 0x37c], eax
mov eax, dword [ebp - 0x37c]
mov eax, dword [eax]
inc eax
mov ecx, dword [ebp - 0x37c]
mov dword [ecx], eax
push 1
lea ecx, [ebp - 0x3b4]
call fcn.100167c9
cmp dword [eax], 0
jg 0x1003e076
mov dword [ebp - 0x404], 0xb4e1265a
mov dword [ebp - 0x400], 0xb4e1265a
mov dword [ebp - 0x3fc], 0xb4e1265a
mov dword [ebp - 0x3f8], 0xb4e1265a
push 4
lea ecx, [ebp - 0x51c]
call fcn.100166bf
mov byte [ebp - 4], 6
mov dword [ebp - 0x4a4], 0xffffffff
push 1
push 0
push 1
lea eax, [ebp - 0x51c]
push eax
lea eax, [ebp - 0x618]
push eax
call fcn.10038bae
add esp, 0x14
push 4
pop eax
imul eax, eax, 3
mov dword [ebp + eax - 0x404], 0
jmp 0x1003dd8a
push 4
pop eax
imul eax, eax, 3
mov eax, dword [ebp + eax - 0x404]
inc eax
push 4
pop ecx
imul ecx, ecx, 3
mov dword [ebp + ecx - 0x404], eax
push 4
pop eax
imul eax, eax, 3
cmp dword [ebp + eax - 0x404], 0
jg 0x1003e062
push 3
lea ecx, [ebp - 0x4ec]
call fcn.100166bf
mov byte [ebp - 4], 7
push 3
lea ecx, [ebp - 0x4dc]
call fcn.100166bf
mov byte [ebp - 4], 8
mov dword [ebp - 0x2dc], 0xf3b8cff2
mov dword [ebp - 0xbc], 0
jmp 0x1003dde3
mov eax, dword [ebp - 0xbc]
inc eax
mov dword [ebp - 0xbc], eax
cmp dword [ebp - 0xbc], 3
jge 0x1003de05
push dword [ebp - 0xbc]
lea ecx, [ebp - 0x4ec]
call fcn.100167c9
mov dword [eax], 0xc4307e
jmp 0x1003ddd6
lea eax, [ebp - 0xbc]
push eax
push 0x3b4c
push 1
push 0x2ddf
lea eax, [ebp - 0x4dc]
push eax
push 0x3451
push 1
call fcn.1002e30b
add esp, 0x1c
push 0
lea ecx, [ebp - 0x4ec]
call fcn.100167c9
cmp dword [eax], 0x17c1
je 0x1003de4f
mov dword [ebp - 0x384], 1
jmp 0x1003de56
and dword [ebp - 0x384], 0
cmp dword [ebp - 0x384], 1
jle 0x1003de6b
mov dword [ebp - 0x1a8], 1
jmp 0x1003de72
and dword [ebp - 0x1a8], 0
push 0
lea ecx, [ebp - 0x4dc]
call fcn.100167c9
mov ecx, dword [ebp - 0x1a8]
mov dword [eax], ecx
cmp dword [ebp - 0x1a8], 0
jne 0x1003df6a
push 4
pop eax
imul eax, eax, 3
mov eax, dword [ebp + eax - 0x404]
sub eax, 0x65ecf203
je 0x1003dec6
push 0
lea ecx, [ebp - 0x4dc]
call fcn.100167c9
cmp dword [eax], 0
je 0x1003dec6
mov dword [ebp - 0x38c], 1
jmp 0x1003decd
and dword [ebp - 0x38c], 0
push 1
lea ecx, [ebp - 0x51c]
call fcn.100167c9
mov ecx, dword [ebp - 0x38c]
cmp ecx, dword [eax]
je 0x1003def0
mov dword [ebp - 0x394], 1
jmp 0x1003def7
and dword [ebp - 0x394], 0
mov eax, dword [ebp - 0x394]
mov dword [ebp - 0x39c], eax
mov eax, dword [ebp - 0x39c]
add eax, 0xbb9
jne 0x1003df2b
push 0
lea ecx, [ebp - 0x3b4]
call fcn.100167c9
cmp dword [eax], 0
jne 0x1003df2b
and dword [ebp - 0x180], 0
jmp 0x1003df35
mov dword [ebp - 0x180], 1
push 3
lea ecx, [ebp - 0x674]
call fcn.100167c9
mov ecx, dword [ebp - 0x180]
mov dword [eax], ecx
push 1
lea ecx, [ebp - 0x4dc]
call fcn.100167c9
mov ecx, dword [ebp - 0x180]
sub ecx, dword [eax]
jne 0x1003df6a
and dword [ebp - 0x358], 0
jmp 0x1003df74
mov dword [ebp - 0x358], 1
push 2
lea ecx, [ebp - 0x4ec]
call fcn.100167c9
mov ecx, dword [ebp - 0x358]
cmp ecx, dword [eax]
jg 0x1003df97
mov dword [ebp - 0x374], 1
jmp 0x1003df9e
and dword [ebp - 0x374], 0
push 1
lea ecx, [ebp - 0x4ec]
call fcn.100167c9
mov esi, dword [ebp - 0x374]
sub esi, dword [eax]
push 1
lea ecx, [ebp - 0x51c]
call fcn.100167c9
cmp esi, dword [eax]
jge 0x1003dfd0
mov dword [ebp - 0x1f4], 1
jmp 0x1003dfd7
and dword [ebp - 0x1f4], 0
mov eax, dword [ebp - 0x1f4]
mov dword [ebp - 0x2dc], eax
mov esi, dword [ebp - 0x2dc]
push 1
lea ecx, [ebp - 0x3b4]
call fcn.100167c9
imul esi, dword [eax]
mov dword [ebp - 0x4a4], esi
push 1
push 0x3d7f
push 0x5a79
push 0x143d
push 0x3a25
push 0xa48
push 0x71dc
push 0x6918
push 0x61ee
push 0x10d0
push 0x1331
push 1
push 1
call fcn.1002e427
add esp, 0x34
mov byte [ebp - 4], 7
lea ecx, [ebp - 0x4dc]
call fcn.100167a4
mov byte [ebp - 4], 6
lea ecx, [ebp - 0x4ec]
call fcn.100167a4
jmp 0x1003dd6f
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x51c]
call fcn.100167a4
jmp 0x1003dcc3
lea eax, [ebp - 0x5b0]
push eax
call fcn.1003cc8c
pop ecx
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x5b0]
call fcn.100167a4
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x674]
call fcn.100167a4
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x3b4]
call fcn.100167a4
mov dword [ebp - 0x188], 1
mov dword [ebp - 0x204], 8
mov dword [ebp - 0x28], 0x5764361a
mov dword [ebp - 0x1c0], 0
mov dword [ebp - 0x620], 0xa0becc33
mov dword [ebp - 0x628], 0x76660b25
mov dword [ebp - 0x304], 0
mov dword [ebp - 0x144], 0
jmp 0x1003e10c
mov eax, dword [ebp - 0x144]
inc eax
mov dword [ebp - 0x144], eax
cmp dword [ebp - 0x144], 3
jge 0x1003e128
mov eax, dword [ebp - 0x144]
mov dword [ebp + eax*4 - 0xec], 5
jmp 0x1003e0ff
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xec]
mov dword [ebp - 0x630], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0xec], 0
jne 0x1003e170
cmp dword [ebp - 0x188], 0
jne 0x1003e166
mov eax, 0x3e45
test eax, eax
jne 0x1003e166
and dword [ebp - 0x1fc], 0
jmp 0x1003e170
mov dword [ebp - 0x1fc], 1
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x188]
cmp dword [ebp + eax - 0xec], ecx
jge 0x1003e191
mov dword [ebp - 0x34c], 1
jmp 0x1003e198
and dword [ebp - 0x34c], 0
mov eax, dword [ebp - 0x34c]
mov dword [ebp - 0x204], eax
mov eax, dword [ebp - 0x28]
cmp dword [ebp - 0x204], eax
jge 0x1003e1bb
mov dword [ebp - 0x2e4], 1
jmp 0x1003e1c2
and dword [ebp - 0x2e4], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xec]
cmp dword [ebp - 0x2e4], eax
jge 0x1003e1f3
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0xec], 0
je 0x1003e1f3
mov dword [ebp - 0x20c], 1
jmp 0x1003e1fa
and dword [ebp - 0x20c], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xec]
cmp dword [ebp - 0x20c], eax
jle 0x1003e21b
mov dword [ebp - 0x350], 1
jmp 0x1003e222
and dword [ebp - 0x350], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xec]
cmp dword [ebp - 0x350], eax
jl 0x1003e243
mov dword [ebp - 0x214], 1
jmp 0x1003e24a
and dword [ebp - 0x214], 0
cmp dword [ebp - 0x214], 0
jne 0x1003e25f
mov dword [ebp - 0x2ec], 1
jmp 0x1003e266
and dword [ebp - 0x2ec], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xec]
neg eax
sub eax, dword [ebp - 0x2ec]
add eax, dword [ebp - 0x1c0]
cmp eax, dword [ebp - 0x1c0]
jne 0x1003e295
mov dword [ebp - 0x21c], 1
jmp 0x1003e29c
and dword [ebp - 0x21c], 0
mov eax, dword [ebp - 0x28]
cmp dword [ebp - 0x21c], eax
jl 0x1003e2b3
mov dword [ebp - 0x36c], 1
jmp 0x1003e2ba
and dword [ebp - 0x36c], 0
mov eax, dword [ebp - 0x28]
cmp dword [ebp - 0x36c], eax
je 0x1003e2d1
mov dword [ebp - 0x224], 1
jmp 0x1003e2d8
and dword [ebp - 0x224], 0
mov eax, dword [ebp - 0x224]
mov dword [ebp - 0x1c0], eax
mov dword [ebp - 0x28], 0
jmp 0x1003e2f4
mov eax, dword [ebp - 0x28]
inc eax
mov dword [ebp - 0x28], eax
cmp dword [ebp - 0x28], 2
jg 0x1003e5cd
mov dword [ebp - 0x90], 0
mov dword [ebp - 0x5c], 0x1494fb38
mov eax, dword [ebp - 0x28]
cmp dword [ebp + eax*4 - 0xec], 0xdb5a
je 0x1003e331
mov eax, 0xee94ccb0
test eax, eax
jne 0x1003e331
and dword [ebp - 0x360], 0
jmp 0x1003e33b
mov dword [ebp - 0x360], 1
mov eax, dword [ebp - 0x28]
mov ecx, 0x31ec
sub ecx, dword [ebp + eax*4 - 0xec]
mov eax, dword [ebp - 0x28]
cmp ecx, dword [ebp + eax*4 - 0xec]
jl 0x1003e362
mov dword [ebp - 0x2f4], 1
jmp 0x1003e369
and dword [ebp - 0x2f4], 0
cmp dword [ebp - 0x2f4], 1
jne 0x1003e37e
mov dword [ebp - 0x22c], 1
jmp 0x1003e385
and dword [ebp - 0x22c], 0
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp + eax*4 - 0xec]
cmp dword [ebp - 0x22c], eax
jge 0x1003e3a3
mov dword [ebp - 0x398], 1
jmp 0x1003e3aa
and dword [ebp - 0x398], 0
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp + eax*4 - 0xec]
cmp eax, dword [ebp - 0x398]
jne 0x1003e3c8
mov dword [ebp - 0x234], 1
jmp 0x1003e3cf
and dword [ebp - 0x234], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xec]
cmp dword [ebp - 0x234], eax
jge 0x1003e3f0
mov dword [ebp - 0x2fc], 1
jmp 0x1003e3f7
and dword [ebp - 0x2fc], 0
mov eax, dword [ebp - 0x2fc]
mov dword [ebp - 0x90], eax
cmp dword [ebp - 0x90], 0xc0f3adc
je 0x1003e424
cmp dword [ebp - 0x188], 0
je 0x1003e424
mov dword [ebp - 0x23c], 1
jmp 0x1003e42b
and dword [ebp - 0x23c], 0
mov eax, dword [ebp - 0x5c]
inc eax
mov dword [ebp - 0x5c], eax
mov eax, dword [ebp - 0x28]
add eax, dword [ebp - 0x23c]
cmp dword [ebp - 0x5c], eax
je 0x1003e44c
mov dword [ebp - 0x244], 1
jmp 0x1003e453
and dword [ebp - 0x244], 0
mov eax, dword [ebp - 0x360]
imul eax, dword [ebp - 0x244]
cmp eax, dword [ebp - 0x304]
jne 0x1003e472
call fcn.1003ccb3
jmp 0x1003e5c8
mov dword [ebp - 0x10c], 0
jmp 0x1003e48b
mov eax, dword [ebp - 0x10c]
inc eax
mov dword [ebp - 0x10c], eax
cmp dword [ebp - 0x10c], 2
jge 0x1003e4a7
mov eax, dword [ebp - 0x10c]
mov dword [ebp + eax*4 - 0x72c], 0xf1497ea9
jmp 0x1003e47e
mov byte [ebp - 0x55], 0
movzx eax, byte [ebp - 0x55]
test eax, eax
je 0x1003e4c4
push 0x5d1f
push 0
push 1
call fcn.100390ca
add esp, 0xc
mov dword [ebp - 0x90], 0
jmp 0x1003e4dd
mov eax, dword [ebp - 0x90]
inc eax
mov dword [ebp - 0x90], eax
cmp dword [ebp - 0x90], 2
jg 0x1003e5c8
mov dword [ebp - 0x4ac], 0x3fa0b5bc
mov dword [ebp - 0x4bc], 0xf713ec2c
mov dword [ebp - 0x5c], 0
jmp 0x1003e50e
mov eax, dword [ebp - 0x5c]
inc eax
mov dword [ebp - 0x5c], eax
cmp dword [ebp - 0x5c], 2
jg 0x1003e5a0
mov dword [ebp - 0x4b4], 0xfffffffc
mov dword [ebp - 0x304], 1
mov eax, dword [ebp - 0x4ac]
mov dword [ebp - 0x24c], eax
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x24c]
mov dword [ebp + eax*4 - 0xec], ecx
mov eax, dword [ebp - 0x4b4]
mov ecx, dword [ebp - 0x24c]
lea eax, [ecx + eax + 1]
cmp eax, 0xfffffff8
jb 0x1003e569
mov dword [ebp - 0x380], 1
jmp 0x1003e570
and dword [ebp - 0x380], 0
cmp dword [ebp - 0x380], 0xd9aeb8ef
ja 0x1003e588
mov dword [ebp - 0x254], 1
jmp 0x1003e58f
and dword [ebp - 0x254], 0
mov eax, dword [ebp - 0x254]
mov dword [ebp - 0x4bc], eax
jmp 0x1003e507
mov byte [ebp - 0x85], 0
movzx eax, byte [ebp - 0x85]
test eax, eax
je 0x1003e5c3
push 0x509f
push 1
push 1
call fcn.1002e868
add esp, 0xc
jmp 0x1003e4d0
jmp 0x1003e2ed
push 1
lea eax, [ebp - 0x17c]
push eax
push 0
lea eax, [ebp + 8]
push eax
call fcn.10039980
add esp, 0x10
push 2
lea ecx, [ebp - 0x3f4]
call fcn.100166bf
mov dword [ebp - 4], 9
mov dword [ebp - 0x638], 0xffffffff
mov dword [ebp - 0x504], 1
mov dword [ebp - 0x26c], 0xedac7a8
mov dword [ebp - 0x124], 0xc12a7b09
push 0x5922
lea eax, [ebp - 0x3f4]
push eax
lea eax, [ebp - 0x640]
push eax
push 1
push 1
push 0x746
call fcn.100382e0
add esp, 0x18
push 1
lea ecx, [ebp - 0x3f4]
call fcn.100167c9
and dword [eax], 0
jmp 0x1003e67a
push 1
lea ecx, [ebp - 0x3f4]
call fcn.100167c9
mov dword [ebp - 0x30c], eax
mov eax, dword [ebp - 0x30c]
mov eax, dword [eax]
dec eax
mov ecx, dword [ebp - 0x30c]
mov dword [ecx], eax
push 1
lea ecx, [ebp - 0x3f4]
call fcn.100167c9
cmp dword [eax], 0xffffffe2
jne 0x1003eabb
or dword [ebp - 0x584], 0xffffffff
or dword [ebp - 0x580], 0xffffffff
or dword [ebp - 0x57c], 0xffffffff
or dword [ebp - 0x578], 0xffffffff
lea ecx, [ebp - 0x1b5]
call fcn.100167d8
push eax
lea eax, [ebp - 0x574]
push eax
lea eax, [ebp - 0x584]
push eax
lea ecx, [ebp - 0x74c]
call fcn.100167db
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0x714]
call fcn.1001677e
mov byte [ebp - 4], 0xa
mov dword [ebp - 0x134], 0
jmp 0x1003e6fe
mov eax, dword [ebp - 0x134]
inc eax
mov dword [ebp - 0x134], eax
cmp dword [ebp - 0x134], 3
jge 0x1003e71a
mov eax, dword [ebp - 0x134]
mov dword [ebp + eax*4 - 0x534], 0xa35f394
jmp 0x1003e6f1
mov dword [ebp - 0x4c4], 0x1728
cmp dword [ebp - 0x4c4], 0xb31
jge 0x1003e834
lea eax, [ebp - 0x4cc]
push eax
push 0x1000774c
call fcn.1004edeb
pop ecx
pop ecx
and dword [ebp - 0x1b0], 0
or dword [ebp - 0x190], 0xffffffff
mov dword [ebp - 0x114], 1
jmp 0x1003e76e
mov eax, dword [ebp - 0x114]
inc eax
mov dword [ebp - 0x114], eax
cmp dword [ebp - 0x114], 0x43
jg 0x1003e822
push dword [ebp - 0x114]
lea eax, [ebp - 0x540]
push eax
call fcn.1003d5da
pop ecx
pop ecx
mov byte [ebp - 4], 0xb
and dword [ebp - 0x154], 0
jmp 0x1003e7a9
mov eax, dword [ebp - 0x154]
inc eax
mov dword [ebp - 0x154], eax
lea ecx, [ebp - 0x540]
call fcn.100167c0
cmp dword [ebp - 0x154], eax
jae 0x1003e7f4
mov eax, dword [ebp - 0x1b0]
inc eax
mov dword [ebp - 0x1b0], eax
mov eax, dword [ebp - 0x1b0]
cmp eax, dword [ebp - 0x4cc]
jl 0x1003e7f2
push dword [ebp - 0x154]
lea ecx, [ebp - 0x540]
call fcn.100167c9
mov eax, dword [eax]
mov dword [ebp - 0x190], eax
jmp 0x1003e7f4
jmp 0x1003e79c
cmp dword [ebp - 0x190], 0
jl 0x1003e80e
mov byte [ebp - 4], 0xa
lea ecx, [ebp - 0x540]
call fcn.100167a4
jmp 0x1003e822
mov byte [ebp - 4], 0xa
lea ecx, [ebp - 0x540]
call fcn.100167a4
jmp 0x1003e761
push dword [ebp - 0x190]
push 0x1000774c
call fcn.1004f4dc
pop ecx
pop ecx
push 4
pop eax
shl eax, 1
mov dword [ebp + eax - 0x534], 0xe
jmp 0x1003e85f
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x534]
dec eax
push 4
pop ecx
shl ecx, 1
mov dword [ebp + ecx - 0x534], eax
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0x534], 0xffffffec
jge 0x1003eaa7
mov dword [ebp - 0xdc], 0xd76715f0
mov dword [ebp - 0x11c], 0
jmp 0x1003e895
mov eax, dword [ebp - 0x11c]
inc eax
mov dword [ebp - 0x11c], eax
cmp dword [ebp - 0x11c], 2
jge 0x1003e8b1
mov eax, dword [ebp - 0x11c]
mov dword [ebp + eax*4 - 0x434], 0
jmp 0x1003e888
mov dword [ebp - 0xdc], 0
jmp 0x1003e8ca
mov eax, dword [ebp - 0xdc]
inc eax
mov dword [ebp - 0xdc], eax
cmp dword [ebp - 0xdc], 1
jg 0x1003ea97
mov dword [ebp - 0x64c], 0x498e64e6
mov dword [ebp - 0x40c], 0
mov dword [ebp - 0x654], 4
mov dword [ebp - 0x64], 0xc097bc8b
lea eax, [ebp - 0x64]
push eax
push 1
push 0x5f0a
push 1
push 0x40ca
call fcn.100385ac
add esp, 0x14
mov dword [ebp - 0x64], 0
jmp 0x1003e926
mov eax, dword [ebp - 0x64]
inc eax
mov dword [ebp - 0x64], eax
cmp dword [ebp - 0x64], 1
jg 0x1003ea92
mov dword [ebp - 0x314], 0x36fc75df
mov eax, dword [ebp - 0x64]
cmp dword [ebp + eax*4 - 0x434], 0
je 0x1003ea4e
mov dword [ebp - 0x414], 0x55126ed4
mov dword [ebp - 0x13c], 0
jmp 0x1003e96e
mov eax, dword [ebp - 0x13c]
inc eax
mov dword [ebp - 0x13c], eax
cmp dword [ebp - 0x13c], 2
jge 0x1003e98a
mov eax, dword [ebp - 0x13c]
mov dword [ebp + eax*4 - 0x548], 1
jmp 0x1003e961
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x548]
cmp dword [ebp - 0x504], eax
je 0x1003e9ab
mov dword [ebp - 0x25c], 1
jmp 0x1003e9b2
and dword [ebp - 0x25c], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x548]
cmp dword [ebp - 0x25c], eax
jne 0x1003e9d3
mov dword [ebp - 0x368], 1
jmp 0x1003e9da
and dword [ebp - 0x368], 0
mov eax, dword [ebp - 0x26c]
add eax, dword [ebp - 0x368]
cmp eax, dword [ebp - 0x40c]
jle 0x1003e9fa
mov dword [ebp - 0x264], 1
jmp 0x1003ea01
and dword [ebp - 0x264], 0
mov esi, dword [ebp - 0x264]
neg esi
push 1
lea ecx, [ebp - 0x3f4]
call fcn.100167c9
cmp esi, dword [eax]
jl 0x1003ea26
mov dword [ebp - 0x1b4], 1
jmp 0x1003ea2d
and dword [ebp - 0x1b4], 0
mov eax, dword [ebp - 0xdc]
mov ecx, dword [ebp - 0x1b4]
mov dword [ebp + eax*4 - 0x434], ecx
mov eax, dword [ebp - 0x1b4]
mov dword [ebp - 0x414], eax
jmp 0x1003ea8d
mov dword [ebp - 0x124], 1
jmp 0x1003ea67
mov eax, dword [ebp - 0x124]
dec eax
mov dword [ebp - 0x124], eax
cmp dword [ebp - 0x124], 0
jl 0x1003ea80
mov eax, dword [ebp - 0x64]
mov dword [ebp + eax*4 - 0x434], 2
jmp 0x1003ea5a
mov eax, dword [ebp - 0x314]
dec eax
mov dword [ebp - 0x314], eax
jmp 0x1003e91f
jmp 0x1003e8bd
cmp dword [ebp - 0x26c], 0
je 0x1003eaa2
jmp 0x1003eaa7
jmp 0x1003e846
mov byte [ebp - 4], 9
lea ecx, [ebp - 0x714]
call fcn.100167a4
jmp 0x1003e656
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x3f4]
call fcn.100167a4
mov eax, dword [ebp - 0x17c]
movzx eax, word [eax]
cmp eax, 0x5a4d
je 0x1003eb6e
push 3
lea ecx, [ebp - 0x684]
call fcn.100166bf
mov dword [ebp - 4], 0xc
lea eax, [ebp - 0x684]
push eax
lea eax, [ebp - 0x65c]
push eax
call fcn.1003ccde
pop ecx
pop ecx
call fcn.1003cd26
mov byte [ebp - 0x5d], 0
movzx eax, byte [ebp - 0x5d]
test eax, eax
je 0x1003eb58
push 1
push 0x72a4
push 0x40ac
push 1
push 0x1b0e
push 0x1856
push 0x401c
push 0x4eb7
push 0x605
push 0x36ad
push 0x2491
push 1
push 0x1012
call fcn.100387dc
add esp, 0x34
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x684]
call fcn.100167a4
xor eax, eax
jmp 0x10040d65
push 2
lea ecx, [ebp - 0x528]
call fcn.100166bf
mov dword [ebp - 4], 0xd
mov dword [ebp - 0xd4], 0x13638ecf
mov dword [ebp - 0x664], 0
mov dword [ebp - 0x50c], 0x22c8
cmp dword [ebp - 0x50c], 0x40e
jge 0x1003ec42
mov dword [ebp - 0x6b0], 8
lea eax, [ebp - 0x14c]
push eax
push 0x10007724
call fcn.1004edeb
pop ecx
pop ecx
and dword [ebp - 0x198], 0
cmp dword [ebp - 0x14c], 0
jle 0x1003ec30
mov eax, dword [ebp - 0x14c]
and eax, 0x80000007
jns 0x1003ebef
dec eax
or eax, 0xfffffff8
inc eax
cmp eax, 1
jne 0x1003ec00
mov dword [ebp - 0x390], 1
jmp 0x1003ec07
and dword [ebp - 0x390], 0
mov eax, dword [ebp - 0x198]
add eax, dword [ebp - 0x390]
mov dword [ebp - 0x198], eax
mov eax, dword [ebp - 0x14c]
cdq
and edx, 7
add eax, edx
sar eax, 3
mov dword [ebp - 0x14c], eax
jmp 0x1003ebd4
push dword [ebp - 0x198]
push 0x1000774c
call fcn.1004f4dc
pop ecx
pop ecx
lea eax, [ebp - 0x528]
push eax
lea eax, [ebp - 0x6b8]
push eax
call fcn.1003cd50
pop ecx
pop ecx
mov dword [ebp - 0xd4], 1
jmp 0x1003ec70
mov eax, dword [ebp - 0xd4]
dec eax
mov dword [ebp - 0xd4], eax
cmp dword [ebp - 0xd4], 0
jl 0x1003eed5
push 1
lea ecx, [ebp - 0x3c0]
call fcn.100166bf
mov byte [ebp - 4], 0xe
mov dword [ebp - 0x41c], 0x1e4e
cmp dword [ebp - 0x41c], 0xa0f
jge 0x1003ede2
xorpd xmm0, xmm0
movlpd qword [ebp - 0x1e4], xmm0
lea eax, [ebp - 0x3e8]
push eax
lea eax, [ebp - 0x3e0]
push eax
push 0x10007994
call fcn.1004edeb
add esp, 0xc
mov dword [ebp - 0xc4], 1
jmp 0x1003ece8
mov eax, dword [ebp - 0xc4]
inc eax
mov dword [ebp - 0xc4], eax
mov eax, dword [ebp - 0xc4]
cdq
mov dword [ebp - 0x440], eax
mov dword [ebp - 0x43c], edx
mov eax, dword [ebp - 0x43c]
cmp eax, dword [ebp - 0x3dc]
jg 0x1003edc9
jl 0x1003ed21
mov eax, dword [ebp - 0x440]
cmp eax, dword [ebp - 0x3e0]
ja 0x1003edc9
mov eax, dword [ebp - 0xc4]
cdq
push edx
push eax
push dword [ebp - 0x3e4]
push dword [ebp - 0x3e8]
call fcn.10067150
mov dword [ebp - 0x44c], eax
mov dword [ebp - 0x448], edx
mov eax, dword [ebp - 0x44c]
or eax, dword [ebp - 0x448]
jne 0x1003edc4
mov eax, dword [ebp - 0xc4]
cdq
push edx
push eax
push dword [ebp - 0x3e4]
push dword [ebp - 0x3e8]
call fcn.100670a0
mov dword [ebp - 0x4a8], eax
mov eax, dword [ebp - 0x4a8]
cdq
mov dword [ebp - 0x458], eax
mov dword [ebp - 0x454], edx
mov eax, dword [ebp - 0x454]
cmp eax, dword [ebp - 0x3dc]
jg 0x1003edc4
jl 0x1003eda6
mov eax, dword [ebp - 0x458]
cmp eax, dword [ebp - 0x3e0]
ja 0x1003edc4
mov eax, dword [ebp - 0x1e4]
add eax, 1
mov ecx, dword [ebp - 0x1e0]
adc ecx, 0
mov dword [ebp - 0x1e4], eax
mov dword [ebp - 0x1e0], ecx
jmp 0x1003ecdb
push dword [ebp - 0x1e0]
push dword [ebp - 0x1e4]
push 0x10007750
call fcn.1004f4dc
add esp, 0xc
lea eax, [ebp - 0x6e0]
push eax
push 0x4c5a
push 0x381b
push 0
lea eax, [ebp - 0x3c0]
push eax
push 0
call fcn.1003c15a
add esp, 0x18
push dword [ebp - 0xd4]
lea ecx, [ebp - 0x528]
call fcn.100167c9
cmp dword [eax], 0
je 0x1003ee30
mov byte [ebp - 4], 0xd
lea ecx, [ebp - 0x3c0]
call fcn.100167a4
jmp 0x1003eed5
push 0
lea ecx, [ebp - 0x3c0]
call fcn.100167c9
mov dword [eax], 1
jmp 0x1003ee69
push 0
lea ecx, [ebp - 0x3c0]
call fcn.100167c9
mov dword [ebp - 0x274], eax
mov eax, dword [ebp - 0x274]
mov eax, dword [eax]
dec eax
mov ecx, dword [ebp - 0x274]
mov dword [ecx], eax
push 0
lea ecx, [ebp - 0x3c0]
call fcn.100167c9
cmp dword [eax], 0
jl 0x1003eec1
mov dword [ebp - 0x424], 0xfffffffa
mov byte [ebp - 0x8a], 0
lea eax, [ebp - 0x8a]
push eax
call fcn.1003cd98
pop ecx
push 1
lea eax, [ebp - 0x424]
push eax
push 0x544
push 1
lea eax, [ebp - 0x528]
push eax
lea eax, [ebp - 0x3c0]
push eax
call fcn.10038e59
add esp, 0x18
jmp 0x1003ee45
mov byte [ebp - 4], 0xd
lea ecx, [ebp - 0x3c0]
call fcn.100167a4
jmp 0x1003ec63
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x528]
call fcn.100167a4
lea eax, [ebp - 0x17c]
push eax
lea eax, [ebp + 8]
push eax
lea eax, [ebp - 0xd8]
push eax
call fcn.1003cdc8
add esp, 0xc
push 2
lea ecx, [ebp - 0x104]
call fcn.100166bf
mov dword [ebp - 4], 0xf
mov dword [ebp - 0x4c], 9
mov dword [ebp - 0x48], 0
jmp 0x1003ef29
mov eax, dword [ebp - 0x48]
inc eax
mov dword [ebp - 0x48], eax
cmp dword [ebp - 0x48], 2
jge 0x1003ef45
push dword [ebp - 0x48]
lea ecx, [ebp - 0x104]
call fcn.100167c9
mov dword [eax], 0x5d6c
jmp 0x1003ef22
mov dword [ebp - 0x48], 0
jmp 0x1003ef55
mov eax, dword [ebp - 0x48]
inc eax
mov dword [ebp - 0x48], eax
cmp dword [ebp - 0x48], 1
jge 0x1003ef68
mov eax, dword [ebp - 0x48]
mov dword [ebp + eax*4 - 0x20], 0x7ce53d8d
jmp 0x1003ef4e
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0x20], 0
jmp 0x1003ef8d
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x20]
inc eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x20], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x20], 1
jg 0x1003f239
mov dword [ebp - 0x294], 0xffffffff
push 4
pop eax
imul eax, eax, 0
push dword [ebp + eax - 0x20]
lea ecx, [ebp - 0x104]
call fcn.100167c9
cmp dword [eax], 0x20b963ab
jge 0x1003f099
push 1
lea ecx, [ebp - 0x104]
call fcn.100167c9
cmp dword [eax], 0
jne 0x1003f07f
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x20], 1
jne 0x1003f012
push 4
pop eax
imul eax, eax, 0
push dword [ebp + eax - 0x20]
lea ecx, [ebp - 0x104]
call fcn.100167c9
cmp dword [eax], 0
je 0x1003f012
mov dword [ebp - 0x31c], 1
jmp 0x1003f019
and dword [ebp - 0x31c], 0
push 4
pop eax
imul eax, eax, 0
push dword [ebp + eax - 0x20]
lea ecx, [ebp - 0x104]
call fcn.100167c9
mov ecx, dword [ebp - 0x31c]
cmp ecx, dword [eax]
jg 0x1003f044
mov dword [ebp - 0x4e0], 1
jmp 0x1003f04b
and dword [ebp - 0x4e0], 0
push 0
lea ecx, [ebp - 0x104]
call fcn.100167c9
push 0
lea ecx, [ebp - 0x104]
call fcn.100167c9
push 4
pop eax
imul eax, eax, 0
push dword [ebp + eax - 0x20]
lea ecx, [ebp - 0x104]
call fcn.100167c9
cmp dword [eax], 0
je 0x1003f099
push 4
pop eax
imul eax, eax, 0
push dword [ebp + eax - 0x20]
lea ecx, [ebp - 0x104]
call fcn.100167c9
cmp dword [eax], 0
jne 0x1003f0bc
push 4
pop eax
imul eax, eax, 0
push dword [ebp + eax - 0x20]
lea ecx, [ebp - 0x104]
call fcn.100167c9
cmp dword [eax], 0
jne 0x1003f0bc
and dword [ebp - 0x27c], 0
jmp 0x1003f0c6
mov dword [ebp - 0x27c], 1
cmp dword [ebp - 0x27c], 0xffffffff
jle 0x1003f0db
mov dword [ebp - 0x370], 1
jmp 0x1003f0e2
and dword [ebp - 0x370], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x20]
cmp dword [ebp - 0x370], eax
jne 0x1003f100
mov dword [ebp - 0x284], 1
jmp 0x1003f107
and dword [ebp - 0x284], 0
push 4
pop eax
imul eax, eax, 0
push dword [ebp + eax - 0x20]
lea ecx, [ebp - 0x104]
call fcn.100167c9
mov ecx, dword [ebp - 0x284]
sub ecx, dword [eax]
je 0x1003f149
push 4
pop eax
imul eax, eax, 0
push dword [ebp + eax - 0x20]
lea ecx, [ebp - 0x104]
call fcn.100167c9
cmp dword [eax], 0
jne 0x1003f149
and dword [ebp - 0x324], 0
jmp 0x1003f153
mov dword [ebp - 0x324], 1
cmp dword [ebp - 0x324], 0
je 0x1003f20c
push 7
pop eax
test eax, eax
je 0x1003f20c
mov dword [ebp - 0x28c], 0x1e0f
lea eax, [ebp - 0x28c]
push eax
call fcn.1003cdf6
pop ecx
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x20]
cmp dword [ebp - 0x28c], eax
je 0x1003f1a0
mov dword [ebp - 0x388], 1
jmp 0x1003f1a7
and dword [ebp - 0x388], 0
mov eax, dword [ebp - 0x388]
neg eax
je 0x1003f1c0
lea eax, [ebp - 0x294]
push eax
call fcn.1003ce0f
pop ecx
jmp 0x1003f20a
mov dword [ebp - 0x4c], 0
jmp 0x1003f1d0
mov eax, dword [ebp - 0x4c]
inc eax
mov dword [ebp - 0x4c], eax
cmp dword [ebp - 0x4c], 2
jge 0x1003f20a
push 1
push 0x2c82
push 0x696d
push 1
push 0x61c2
lea eax, [ebp - 0x4c]
push eax
lea eax, [ebp - 0x104]
push eax
push 0x1ca8
push 0x5e76
push 1
call fcn.10038f8c
add esp, 0x28
jmp 0x1003f1c9
jmp 0x1003f234
lea eax, [ebp - 0x294]
push eax
call fcn.1003ce26
pop ecx
push 0x7c91
push 1
push 0x733c
push 1
push 0x5a17
call fcn.100391d0
add esp, 0x14
jmp 0x1003ef78
mov dword [ebp - 0x4c], 0
jmp 0x1003f249
mov eax, dword [ebp - 0x4c]
dec eax
mov dword [ebp - 0x4c], eax
cmp dword [ebp - 0x4c], 0
jl 0x1003f265
mov byte [ebp - 0x89], 0
lea eax, [ebp - 0x89]
push eax
call fcn.1003d12e
pop ecx
jmp 0x1003f242
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x104]
call fcn.100167a4
mov eax, dword [ebp - 0xd8]
cmp dword [eax], 0x4550
je 0x1003f289
xor eax, eax
jmp 0x10040d65
push 2
lea ecx, [ebp - 0x1cc]
call fcn.100166bf
mov dword [ebp - 4], 0x10
mov dword [ebp - 0x3c], 0xfffffffc
mov dword [ebp - 0x408], 2
mov dword [ebp - 0x42c], 0x1aea
cmp dword [ebp - 0x42c], 0x56b
jge 0x1003f7af
xor eax, eax
inc eax
je 0x1003f7af
lea eax, [ebp - 0x6c]
push eax
lea eax, [ebp - 0x94]
push eax
push 0x10007918
call fcn.1004edeb
add esp, 0xc
cmp dword [ebp - 0x94], 0
jne 0x1003f2f7
jmp 0x1003f7af
and dword [ebp - 0x12c], 0
jmp 0x1003f30d
mov eax, dword [ebp - 0x12c]
inc eax
mov dword [ebp - 0x12c], eax
mov eax, dword [ebp - 0x12c]
cmp eax, dword [ebp - 0x94]
jge 0x1003f336
imul eax, dword [ebp - 0x12c], 0x6a
add eax, 0x10b144e0
push eax
push 0x10007748
call fcn.1004edeb
pop ecx
pop ecx
jmp 0x1003f300
and dword [ebp - 0x2c], 0
jmp 0x1003f343
mov eax, dword [ebp - 0x2c]
inc eax
mov dword [ebp - 0x2c], eax
mov eax, dword [ebp - 0x2c]
cmp eax, dword [ebp - 0x94]
jge 0x1003f4b6
imul eax, dword [ebp - 0x2c], 0x6a
mov ecx, dword [ebp - 0x6c]
movsx eax, byte [eax + ecx + 0x10b144df]
cmp eax, 0x23
jne 0x1003f372
mov dword [ebp - 0x32c], 1
jmp 0x1003f379
and dword [ebp - 0x32c], 0
imul eax, dword [ebp - 0x2c], 0x1a8
mov ecx, dword [ebp - 0x6c]
mov edx, dword [ebp - 0x32c]
mov dword [eax + ecx*4 + 0x10b170c4], edx
mov eax, dword [ebp - 0x6c]
dec eax
dec eax
mov dword [ebp - 0x98], eax
jmp 0x1003f3aa
mov eax, dword [ebp - 0x98]
dec eax
mov dword [ebp - 0x98], eax
cmp dword [ebp - 0x98], 0
jl 0x1003f40a
imul eax, dword [ebp - 0x2c], 0x6a
mov ecx, dword [ebp - 0x98]
movsx eax, byte [eax + ecx + 0x10b144e0]
cmp eax, 0x23
jne 0x1003f3e7
imul eax, dword [ebp - 0x2c], 0x1a8
mov ecx, dword [ebp - 0x98]
mov eax, dword [eax + ecx*4 + 0x10b170cc]
inc eax
mov dword [ebp - 0x29c], eax
jmp 0x1003f3ee
and dword [ebp - 0x29c], 0
imul eax, dword [ebp - 0x2c], 0x1a8
mov ecx, dword [ebp - 0x98]
mov edx, dword [ebp - 0x29c]
mov dword [eax + ecx*4 + 0x10b170c8], edx
jmp 0x1003f39d
imul eax, dword [ebp - 0x2c], 0x6a
xor ecx, ecx
inc ecx
imul ecx, ecx, 0
movsx eax, byte [eax + ecx + 0x10b144e0]
cmp eax, 0x23
jne 0x1003f427
mov byte [ebp - 0x31], 1
jmp 0x1003f42b
mov byte [ebp - 0x31], 0
imul eax, dword [ebp - 0x2c], 0x6a
xor ecx, ecx
inc ecx
imul ecx, ecx, 0
mov dl, byte [ebp - 0x31]
mov byte [eax + ecx + 0x10b3f7d8], dl
mov dword [ebp - 0xa0], 1
jmp 0x1003f458
mov eax, dword [ebp - 0xa0]
inc eax
mov dword [ebp - 0xa0], eax
mov eax, dword [ebp - 0xa0]
cmp eax, dword [ebp - 0x6c]
jge 0x1003f4b1
imul eax, dword [ebp - 0x2c], 0x6a
mov ecx, dword [ebp - 0xa0]
movsx eax, byte [eax + ecx + 0x10b144e0]
cmp eax, 0x23
jne 0x1003f497
imul eax, dword [ebp - 0x2c], 0x6a
mov ecx, dword [ebp - 0xa0]
movsx eax, byte [eax + ecx + 0x10b144df]
cmp eax, 0x2e
jne 0x1003f497
mov byte [ebp - 0x32], 1
jmp 0x1003f49b
mov byte [ebp - 0x32], 0
imul eax, dword [ebp - 0x2c], 0x6a
mov ecx, dword [ebp - 0xa0]
mov dl, byte [ebp - 0x32]
mov byte [eax + ecx + 0x10b3f7d8], dl
jmp 0x1003f44b
jmp 0x1003f33c
and dword [ebp - 0x16c], 0
mov byte [ebp - 0xd], 1
and dword [ebp - 0xac], 0
jmp 0x1003f4d7
mov eax, dword [ebp - 0xac]
inc eax
mov dword [ebp - 0xac], eax
mov eax, dword [ebp - 0xac]
cmp eax, dword [ebp - 0x94]
jge 0x1003f513
mov byte [ebp - 0x75], 0
lea eax, [ebp - 0x75]
push eax
imul eax, dword [ebp - 0xac], 0x6a
mov ecx, dword [ebp - 0x6c]
lea edx, [eax + ecx + 0x10b5fb50]
imul ecx, dword [ebp - 0xac], 0x6a
add ecx, 0x10b5fb50
call fcn.10041abd
pop ecx
jmp 0x1003f4ca
and dword [ebp - 0x14], 0
jmp 0x1003f520
mov eax, dword [ebp - 0x14]
inc eax
mov dword [ebp - 0x14], eax
mov eax, dword [ebp - 0x14]
cmp eax, dword [ebp - 0x94]
jge 0x1003f783
movzx eax, byte [ebp - 0xd]
test eax, eax
je 0x1003f783
and dword [ebp - 0x1c], 0
jmp 0x1003f548
mov eax, dword [ebp - 0x1c]
inc eax
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cmp eax, dword [ebp - 0x6c]
jge 0x1003f77e
movzx eax, byte [ebp - 0xd]
test eax, eax
je 0x1003f77e
imul eax, dword [ebp - 0x14], 0x6a
mov ecx, dword [ebp - 0x1c]
movzx eax, byte [eax + ecx + 0x10b5fb50]
test eax, eax
jne 0x1003f779
imul eax, dword [ebp - 0x14], 0x6a
mov ecx, dword [ebp - 0x1c]
movsx eax, byte [eax + ecx + 0x10b144e0]
cmp eax, 0x23
jne 0x1003f779
mov eax, dword [ebp - 0x16c]
inc eax
mov dword [ebp - 0x16c], eax
imul eax, dword [ebp - 0x14], 0x1a8
mov ecx, dword [ebp - 0x1c]
mov eax, dword [eax + ecx*4 + 0x10b170c8]
mov dword [ebp - 0x1a0], eax
cmp dword [ebp - 0x14], 0
jle 0x1003f5d9
cmp dword [ebp - 0x1c], 0
jle 0x1003f5d9
mov eax, dword [ebp - 0x14]
dec eax
imul eax, eax, 0x6a
mov ecx, dword [ebp - 0x1c]
movzx eax, byte [eax + ecx + 0x10b5fb4f]
test eax, eax
je 0x1003f5d9
mov byte [ebp - 0xd], 0
cmp dword [ebp - 0x14], 0
jle 0x1003f61f
and dword [ebp - 0x1bc], 0
jmp 0x1003f5f5
mov eax, dword [ebp - 0x1bc]
inc eax
mov dword [ebp - 0x1bc], eax
mov eax, dword [ebp - 0x1bc]
cmp eax, dword [ebp - 0x1a0]
jge 0x1003f61f
mov eax, dword [ebp - 0x14]
dec eax
imul eax, eax, 0x6a
mov ecx, dword [ebp - 0x1c]
movzx eax, byte [eax + ecx + 0x10b5fb50]
test eax, eax
je 0x1003f61d
mov byte [ebp - 0xd], 0
jmp 0x1003f5e8
cmp dword [ebp - 0x14], 0
jle 0x1003f648
mov eax, dword [ebp - 0x6c]
dec eax
cmp dword [ebp - 0x1c], eax
jge 0x1003f648
mov eax, dword [ebp - 0x14]
dec eax
imul eax, eax, 0x6a
mov ecx, dword [ebp - 0x1c]
movzx eax, byte [eax + ecx + 0x10b5fb51]
test eax, eax
je 0x1003f648
mov byte [ebp - 0xd], 0
mov dword [ebp - 0x108], 1
mov dword [ebp - 0xf4], 1
jmp 0x1003f66b
mov eax, dword [ebp - 0xf4]
inc eax
mov dword [ebp - 0xf4], eax
mov eax, dword [ebp - 0x14]
add eax, dword [ebp - 0xf4]
cmp eax, dword [ebp - 0x94]
jge 0x1003f6a7
mov eax, dword [ebp - 0x14]
add eax, dword [ebp - 0xf4]
imul eax, eax, 0x6a
mov ecx, dword [ebp - 0x1c]
movsx eax, byte [eax + ecx + 0x10b144e0]
cmp eax, 0x23
jne 0x1003f6a7
mov eax, dword [ebp - 0x108]
inc eax
mov dword [ebp - 0x108], eax
jmp 0x1003f65e
and dword [ebp - 0xb8], 0
jmp 0x1003f6bd
mov eax, dword [ebp - 0xb8]
inc eax
mov dword [ebp - 0xb8], eax
mov eax, dword [ebp - 0xb8]
cmp eax, dword [ebp - 0x108]
jge 0x1003f70d
mov eax, dword [ebp - 0x14]
add eax, dword [ebp - 0xb8]
imul eax, eax, 0x6a
mov ecx, dword [ebp - 0x1c]
movzx eax, byte [eax + ecx + 0x10b3f7d8]
test eax, eax
je 0x1003f707
mov eax, dword [ebp - 0x14]
add eax, dword [ebp - 0xb8]
imul eax, eax, 0x1a8
mov ecx, dword [ebp - 0x1c]
mov eax, dword [eax + ecx*4 + 0x10b170c8]
cmp eax, dword [ebp - 0x1a0]
je 0x1003f70b
mov byte [ebp - 0xd], 0
jmp 0x1003f6b0
and dword [ebp - 0xc0], 0
jmp 0x1003f723
mov eax, dword [ebp - 0xc0]
inc eax
mov dword [ebp - 0xc0], eax
mov eax, dword [ebp - 0xc0]
cmp eax, dword [ebp - 0x108]
jge 0x1003f779
mov byte [ebp - 0x88], 1
lea eax, [ebp - 0x88]
push eax
mov eax, dword [ebp - 0x14]
add eax, dword [ebp - 0xc0]
imul eax, eax, 0x6a
mov ecx, dword [ebp - 0x1c]
lea edx, [eax + ecx + 0x10b5fb50]
add edx, dword [ebp - 0x1a0]
mov eax, dword [ebp - 0x14]
add eax, dword [ebp - 0xc0]
imul eax, eax, 0x6a
mov ecx, dword [ebp - 0x1c]
lea ecx, [eax + ecx + 0x10b5fb50]
call fcn.10041abd
pop ecx
jmp 0x1003f716
jmp 0x1003f541
jmp 0x1003f519
movzx eax, byte [ebp - 0xd]
test eax, eax
jne 0x1003f798
push 0x10007a3c
call fcn.1004f4dc
pop ecx
jmp 0x1003f7aa
push dword [ebp - 0x16c]
push 0x10007a4c
call fcn.1004f4dc
pop ecx
pop ecx
jmp 0x1003f2c8
push 1
lea eax, [ebp - 0x1cc]
push eax
push 0x56e1
push 1
push 0x3aae
lea eax, [ebp - 0xa8]
push eax
call fcn.1003968e
add esp, 0x18
mov dword [ebp - 0xa8], 0
jmp 0x1003f7ec
mov eax, dword [ebp - 0xa8]
inc eax
mov dword [ebp - 0xa8], eax
cmp dword [ebp - 0xa8], 3
jge 0x1003f808
mov eax, dword [ebp - 0xa8]
mov dword [ebp + eax*4 - 0x708], 0
jmp 0x1003f7df
mov dword [ebp - 0x3c], 1
jmp 0x1003f818
mov eax, dword [ebp - 0x3c]
dec eax
mov dword [ebp - 0x3c], eax
cmp dword [ebp - 0x3c], 0
jl 0x1003fbae
mov dword [ebp - 0x18], 0xffffffff
mov dword [ebp - 0x110], 0
jmp 0x1003f842
mov eax, dword [ebp - 0x110]
inc eax
mov dword [ebp - 0x110], eax
cmp dword [ebp - 0x110], 4
jge 0x1003f85e
mov eax, dword [ebp - 0x110]
mov dword [ebp + eax*4 - 0x6cc], 0x1913
jmp 0x1003f835
mov dword [ebp - 0x18], 0
jmp 0x1003f86e
mov eax, dword [ebp - 0x18]
inc eax
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 1
jg 0x1003fa15
mov dword [ebp - 0x354], 0xffffffff
mov dword [ebp - 0x2b4], 0xffffffff
mov dword [ebp - 0x118], 0
jmp 0x1003f8a5
mov eax, dword [ebp - 0x118]
inc eax
mov dword [ebp - 0x118], eax
cmp dword [ebp - 0x118], 1
jge 0x1003f8c1
mov eax, dword [ebp - 0x118]
mov dword [ebp + eax*4 - 0x438], 1
jmp 0x1003f898
push dword [ebp - 0x18]
lea ecx, [ebp - 0x1cc]
call fcn.100167c9
cmp dword [eax], 0
je 0x1003f8d9
jmp 0x1003fa15
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x6dc], eax
mov eax, 0x13a6
test eax, eax
je 0x1003f8f5
mov eax, dword [ebp - 0x18]
sub eax, 0x704f4bb4
jne 0x1003f911
push dword [ebp - 0x18]
lea ecx, [ebp - 0x1cc]
call fcn.100167c9
cmp dword [eax], 0
jne 0x1003f911
and dword [ebp - 0x378], 0
jmp 0x1003f91b
mov dword [ebp - 0x378], 1
mov eax, dword [ebp - 0x18]
add eax, dword [ebp - 0x378]
cmp eax, 0xd658
jle 0x1003f947
push dword [ebp - 0x18]
lea ecx, [ebp - 0x1cc]
call fcn.100167c9
cmp dword [eax], 0
jne 0x1003f947
and dword [ebp - 0x2a4], 0
jmp 0x1003f951
mov dword [ebp - 0x2a4], 1
cmp dword [ebp - 0x2a4], 0xfffffffe
je 0x1003f966
mov dword [ebp - 0x334], 1
jmp 0x1003f96d
and dword [ebp - 0x334], 0
mov eax, dword [ebp - 0x18]
cmp eax, dword [ebp - 0x334]
jg 0x1003f98a
cmp dword [ebp - 0x3c], 0
je 0x1003f98a
mov dword [ebp - 0x4b0], 1
jmp 0x1003f991
and dword [ebp - 0x4b0], 0
push 1
lea ecx, [ebp - 0x1cc]
call fcn.100167c9
mov esi, eax
push dword [ebp - 0x18]
lea ecx, [ebp - 0x1cc]
call fcn.100167c9
mov ecx, dword [esi]
cmp ecx, dword [eax]
jle 0x1003f9c0
mov dword [ebp - 0x2ac], 1
jmp 0x1003f9c7
and dword [ebp - 0x2ac], 0
mov eax, dword [ebp - 0x2ac]
mov dword [ebp - 0x354], eax
mov eax, dword [ebp - 0x354]
mov dword [ebp - 0x2b4], eax
mov eax, dword [ebp - 0x18]
cmp dword [ebp - 0x2b4], eax
jle 0x1003f9f6
mov dword [ebp - 0x33c], 1
jmp 0x1003f9fd
and dword [ebp - 0x33c], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x33c]
mov dword [ebp + eax - 0x438], ecx
jmp 0x1003f867
cmp dword [ebp - 0x408], 0
jne 0x1003fa7c
mov eax, 0x5ab13611
test eax, eax
je 0x1003fa61
mov eax, dword [ebp - 0x3c]
mov dword [ebp - 0x6bc], eax
push 0
lea ecx, [ebp - 0x1cc]
call fcn.100167c9
mov esi, dword [ebp - 0x18]
inc esi
push 0
lea ecx, [ebp - 0x1cc]
call fcn.100167c9
imul esi, dword [eax]
test esi, esi
je 0x1003fa61
mov dword [ebp - 0x2bc], 1
jmp 0x1003fa68
and dword [ebp - 0x2bc], 0
mov eax, dword [ebp - 0x18]
add eax, dword [ebp - 0x2bc]
jne 0x1003fa7c
and dword [ebp - 0x35c], 0
jmp 0x1003fa86
mov dword [ebp - 0x35c], 1
mov eax, dword [ebp - 0x3c]
cmp dword [ebp - 0x35c], eax
jg 0x1003fa9d
mov dword [ebp - 0x2c4], 1
jmp 0x1003faa4
and dword [ebp - 0x2c4], 0
mov esi, dword [ebp - 0x3c]
imul esi, dword [ebp - 0x2c4]
push 0
lea ecx, [ebp - 0x1cc]
call fcn.100167c9
cmp esi, dword [eax]
jl 0x1003fac3
cmp dword [ebp - 0x3c], 0
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x5d4], eax
cmp dword [ebp - 0x3c], 0
jl 0x1003fade
mov dword [ebp - 0x344], 1
jmp 0x1003fae5
and dword [ebp - 0x344], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x6cc]
cmp dword [ebp - 0x344], eax
je 0x1003fb06
mov dword [ebp - 0x2cc], 1
jmp 0x1003fb0d
and dword [ebp - 0x2cc], 0
imul eax, dword [ebp - 0x2cc], 0x14a5
cmp dword [ebp - 0x18], eax
jge 0x1003fb28
mov dword [ebp - 0x364], 1
jmp 0x1003fb2f
and dword [ebp - 0x364], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x364]
mov dword [ebp + eax - 0x708], ecx
push 1
lea ecx, [ebp - 0x1cc]
call fcn.100167c9
push 4
pop eax
imul eax, eax, 3
push 4
pop ecx
imul ecx, ecx, 0
mov ecx, dword [ebp + ecx - 0x6cc]
cmp dword [ebp + eax - 0x6cc], ecx
je 0x1003fb77
mov dword [ebp - 0x2d4], 1
jmp 0x1003fb7e
and dword [ebp - 0x2d4], 0
mov eax, dword [ebp - 0x2d4]
neg eax
cmp eax, 0xfd71
jle 0x1003fb99
mov dword [ebp - 0x1ec], 1
jmp 0x1003fba0
and dword [ebp - 0x1ec], 0
mov eax, dword [ebp - 0x1ec]
mov dword [ebp - 0x18], eax
jmp 0x1003f811
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x1cc]
call fcn.100167a4
push 0xb30
push dword [ebp - 0xd8]
lea eax, [ebp - 0x158]
push eax
push 1
push 0x33e0
push 0
push 1
call fcn.10039cc4
add esp, 0x1c
mov dword [ebp - 0x500], 0xffffffff
mov dword [ebp - 0x4fc], 0xffffffff
mov dword [ebp - 0x4f8], 0xffffffff
mov dword [ebp - 0x4f4], 0xffffffff
mov dword [ebp - 0xc8], 0
mov dword [ebp - 0x210], 0x71b35d56
mov dword [ebp - 0x464], 0xf0ebf903
push 4
pop eax
imul eax, eax, 3
mov eax, dword [ebp + eax - 0x500]
mov dword [ebp - 0xc8], eax
mov dword [ebp - 0xc8], 0x1c
jmp 0x1003fc54
mov eax, dword [ebp - 0xc8]
dec eax
mov dword [ebp - 0xc8], eax
cmp dword [ebp - 0xc8], 0xffffffeb
jge 0x1003fd4b
mov dword [ebp - 0x1f8], 0xfffffff7
mov dword [ebp - 0x174], 0x97515801
cmp dword [ebp - 0x1f8], 0
jge 0x1003fc8a
mov dword [ebp - 0x200], 1
jmp 0x1003fc91
and dword [ebp - 0x200], 0
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x500], 0xfffffff9
jne 0x1003fcaa
mov eax, 0x4207
test eax, eax
jne 0x1003fcc2
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0x500], 0
jne 0x1003fcc2
and dword [ebp - 0x1f0], 0
jmp 0x1003fccc
mov dword [ebp - 0x1f0], 1
mov eax, dword [ebp - 0x1f0]
mov dword [ebp - 0x174], eax
cmp dword [ebp - 0x174], 9
jne 0x1003fced
mov dword [ebp - 0x444], 1
jmp 0x1003fcf4
and dword [ebp - 0x444], 0
push 4
pop eax
imul eax, eax, 3
mov eax, dword [ebp + eax - 0x500]
mov dword [ebp - 0x5cc], eax
mov eax, dword [ebp - 0x174]
sub eax, dword [ebp - 0x1f8]
cmp dword [ebp - 0x200], eax
jne 0x1003fd27
mov dword [ebp - 0x208], 1
jmp 0x1003fd2e
and dword [ebp - 0x208], 0
mov eax, dword [ebp - 0x208]
mov dword [ebp - 0x210], eax
mov eax, dword [ebp - 0x210]
mov dword [ebp - 0x464], eax
jmp 0x1003fc47
cmp dword [ebp - 0x158], 0
jne 0x1003fd5b
xor eax, eax
jmp 0x10040d65
mov dword [ebp - 0x50], 0x13dd33a4
mov dword [ebp - 0x46c], 0x5545
mov dword [ebp - 0x120], 0
jmp 0x1003fd85
mov eax, dword [ebp - 0x120]
inc eax
mov dword [ebp - 0x120], eax
cmp dword [ebp - 0x120], 1
jge 0x1003fda1
mov eax, dword [ebp - 0x120]
mov dword [ebp + eax*4 - 0x6d8], 0xd97a
jmp 0x1003fd78
mov dword [ebp - 0x50], 0xffffffe7
jmp 0x1003fdb1
mov eax, dword [ebp - 0x50]
inc eax
mov dword [ebp - 0x50], eax
cmp dword [ebp - 0x50], 1
jl 0x1003fdd0
mov dword [ebp - 0x450], 0
lea eax, [ebp - 0x450]
push eax
call fcn.1003d15c
pop ecx
jmp 0x1003fdaa
mov dword [ebp - 0x50], 0xffffffff
jmp 0x1003fde0
mov eax, dword [ebp - 0x50]
inc eax
mov dword [ebp - 0x50], eax
cmp dword [ebp - 0x50], 0x10
jne 0x1003fe05
push 1
lea eax, [ebp - 0x46c]
push eax
push 0x53aa
push 1
push 0x234e
call fcn.10039766
add esp, 0x14
jmp 0x1003fdd9
push 0
push 0x7feb
push 0x2d7
push 0x3168
lea eax, [ebp - 0x5dc]
push eax
lea eax, [ebp - 0x158]
push eax
push 0x3bee
push 0x5561
push 0x49e
push dword [ebp - 0x17c]
lea eax, [ebp - 0x40]
push eax
push 1
push dword [ebp - 0xd8]
call fcn.1002eb01
add esp, 0x34
push dword [ebp + 8]
push 0x7904
push dword [ebp - 0xd8]
push dword [ebp - 0x40]
push 0x7817
push 1
push 1
push 0x6220
call fcn.100227d7
add esp, 0x20
mov dword [ebp - 0xd0], 0xc70bb743
mov dword [ebp - 0x47c], 0
mov dword [ebp - 0xf0], 0
jmp 0x1003fea1
mov eax, dword [ebp - 0xf0]
inc eax
mov dword [ebp - 0xf0], eax
cmp dword [ebp - 0xf0], 1
jge 0x1003febd
mov eax, dword [ebp - 0xf0]
mov dword [ebp + eax*4 - 0x130], 0
jmp 0x1003fe94
mov dword [ebp - 0xd0], 0
jmp 0x1003fed6
mov eax, dword [ebp - 0xd0]
inc eax
mov dword [ebp - 0xd0], eax
cmp dword [ebp - 0xd0], 0
jg 0x100400b3
mov dword [ebp - 0x74], 9
mov dword [ebp - 0x38], 0x67e307b5
mov dword [ebp - 0x74], 0
jmp 0x1003ff01
mov eax, dword [ebp - 0x74]
dec eax
mov dword [ebp - 0x74], eax
cmp dword [ebp - 0x74], 0
jl 0x1003ff59
mov dword [ebp - 0x128], 0
jmp 0x1003ff20
mov eax, dword [ebp - 0x128]
inc eax
mov dword [ebp - 0x128], eax
cmp dword [ebp - 0x128], 1
jge 0x1003ff3c
mov eax, dword [ebp - 0x128]
mov dword [ebp + eax*4 - 0x218], 0xc427
jmp 0x1003ff13
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x218]
inc eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x218], eax
jmp 0x1003fefa
mov dword [ebp - 0x38], 0
jmp 0x1003ff69
mov eax, dword [ebp - 0x38]
inc eax
mov dword [ebp - 0x38], eax
cmp dword [ebp - 0x38], 0
jg 0x100400ae
mov dword [ebp - 0x474], 1
mov eax, dword [ebp - 0x38]
cmp dword [ebp + eax*4 - 0x130], 0
jne 0x10040001
mov eax, dword [ebp - 0x38]
add eax, dword [ebp - 0xd0]
cmp eax, 0x2947
jl 0x1003ffa6
mov dword [ebp - 0x220], 1
jmp 0x1003ffad
and dword [ebp - 0x220], 0
mov eax, dword [ebp - 0x38]
cmp dword [ebp + eax*4 - 0x130], 0x9968
jge 0x1003ffc9
mov dword [ebp - 0x228], 1
jmp 0x1003ffd0
and dword [ebp - 0x228], 0
mov eax, dword [ebp - 0x220]
cmp eax, dword [ebp - 0x228]
jne 0x1003ffea
mov dword [ebp - 0x45c], 1
jmp 0x1003fff1
and dword [ebp - 0x45c], 0
mov eax, dword [ebp - 0x38]
mov eax, dword [ebp + eax*4 - 0x130]
mov dword [ebp - 0x658], eax
mov eax, dword [ebp - 0x74]
mov ecx, dword [ebp - 0x38]
sub eax, dword [ebp + ecx*4 - 0x130]
cmp eax, dword [ebp - 0x38]
jg 0x10040028
mov eax, 0xb42c
test eax, eax
je 0x10040028
mov dword [ebp - 0x230], 1
jmp 0x1004002f
and dword [ebp - 0x230], 0
mov eax, dword [ebp - 0x74]
cmp dword [ebp - 0x230], eax
jg 0x10040046
mov dword [ebp - 0x238], 1
jmp 0x1004004d
and dword [ebp - 0x238], 0
mov eax, dword [ebp - 0x238]
sub eax, dword [ebp - 0x38]
cmp eax, dword [ebp - 0x74]
jle 0x10040067
mov dword [ebp - 0x240], 1
jmp 0x1004006e
and dword [ebp - 0x240], 0
mov eax, dword [ebp - 0x474]
cmp dword [ebp - 0x240], eax
jge 0x10040088
mov dword [ebp - 0x248], 1
jmp 0x1004008f
and dword [ebp - 0x248], 0
mov eax, dword [ebp - 0x248]
mov dword [ebp - 0x47c], eax
mov byte [ebp - 0x65], 0
lea eax, [ebp - 0x65]
push eax
call fcn.1003d199
pop ecx
jmp 0x1003ff62
jmp 0x1003fec9
mov byte [ebp - 0x87], 0
lea eax, [ebp - 0x87]
push eax
call fcn.1003d1d1
pop ecx
push 0x7919
push 1
lea eax, [ebp - 0x508]
push eax
push 0x7c43
lea eax, [ebp - 0xd8]
push eax
push 1
lea eax, [ebp - 0x158]
push eax
call fcn.10039baa
add esp, 0x1c
mov dword [ebp - 0x30], 0
push 2
lea ecx, [ebp - 0x164]
call fcn.100166bf
mov dword [ebp - 4], 0x11
mov dword [ebp - 0x54], 0xfffffffa
mov dword [ebp - 0x150], 0x8c84b7b8
mov dword [ebp - 0x470], 0xe41b0ce7
mov dword [ebp - 0x2d0], 1
mov dword [ebp - 0x480], 9
mov dword [ebp - 0x2e8], 0xca5b7f44
lea eax, [ebp - 0x164]
push eax
push 0x7ba7
push 0x3fe9
push 1
lea eax, [ebp - 0x5e4]
push eax
push 1
push 1
call fcn.10039cc4
add esp, 0x1c
mov esi, dword [ebp - 0x30]
push 0
lea ecx, [ebp - 0x164]
call fcn.100167c9
cmp esi, dword [eax]
jge 0x1004018c
mov dword [ebp - 0x250], 1
jmp 0x10040193
and dword [ebp - 0x250], 0
mov eax, dword [ebp - 0x250]
mov dword [ebp - 0x54], eax
push 0
lea ecx, [ebp - 0x164]
call fcn.100167c9
cmp dword [ebp - 0x30], 3
jge 0x100401c4
cmp dword [ebp - 0x150], 0
je 0x100401c4
mov dword [ebp - 0x468], 1
jmp 0x100401cb
and dword [ebp - 0x468], 0
mov eax, dword [ebp - 0x30]
mov dword [ebp - 0x6ac], eax
mov eax, 0x4779d44f
cmp eax, 0xfcc8af95
jae 0x100401ef
cmp dword [ebp - 0x30], 0
jne 0x100401ef
and dword [ebp - 0x4b8], 0
jmp 0x100401f9
mov dword [ebp - 0x4b8], 1
mov eax, dword [ebp - 0x54]
mov dword [ebp - 0x5ec], eax
push 0
lea ecx, [ebp - 0x164]
call fcn.100167c9
mov ecx, dword [ebp - 0x30]
cmp dword [eax], ecx
jle 0x10040222
mov dword [ebp - 0x1e8], 1
jmp 0x10040229
and dword [ebp - 0x1e8], 0
mov esi, dword [ebp - 0x1e8]
sub esi, 9
push 1
lea ecx, [ebp - 0x164]
call fcn.100167c9
cmp esi, dword [eax]
jl 0x10040254
xor eax, eax
inc eax
je 0x10040254
mov dword [ebp - 0x260], 1
jmp 0x1004025b
and dword [ebp - 0x260], 0
mov eax, dword [ebp - 0x54]
cmp dword [ebp - 0x260], eax
jl 0x10040278
cmp dword [ebp - 0x470], 0
jne 0x10040278
and dword [ebp - 0x268], 0
jmp 0x10040282
mov dword [ebp - 0x268], 1
imul eax, dword [ebp - 0x268], 0xbb1b
test eax, eax
jne 0x1004029f
cmp dword [ebp - 0x30], 0
jne 0x1004029f
and dword [ebp - 0x270], 0
jmp 0x100402a9
mov dword [ebp - 0x270], 1
cmp dword [ebp - 0x270], 1
jg 0x100402be
mov dword [ebp - 0x278], 1
jmp 0x100402c5
and dword [ebp - 0x278], 0
imul eax, dword [ebp - 0x278], 0
cmp eax, dword [ebp - 0x54]
jge 0x100402dd
mov dword [ebp - 0x280], 1
jmp 0x100402e4
and dword [ebp - 0x280], 0
cmp dword [ebp - 0x280], 1
jle 0x100402fc
cmp dword [ebp - 0x54], 0
jne 0x100402fc
and dword [ebp - 0x288], 0
jmp 0x10040306
mov dword [ebp - 0x288], 1
mov eax, dword [ebp - 0x150]
cmp dword [ebp - 0x288], eax
jl 0x10040320
mov dword [ebp - 0x290], 1
jmp 0x10040327
and dword [ebp - 0x290], 0
mov eax, dword [ebp - 0x150]
cmp dword [ebp - 0x290], eax
jl 0x10040341
mov dword [ebp - 0x298], 1
jmp 0x10040348
and dword [ebp - 0x298], 0
mov eax, dword [ebp - 0x30]
cmp dword [ebp - 0x298], eax
jl 0x1004035f
mov dword [ebp - 0x2a0], 1
jmp 0x10040366
and dword [ebp - 0x2a0], 0
push 1
lea ecx, [ebp - 0x164]
call fcn.100167c9
mov ecx, dword [ebp - 0x2a0]
cmp ecx, dword [eax]
jg 0x10040389
mov dword [ebp - 0x2a8], 1
jmp 0x10040390
and dword [ebp - 0x2a8], 0
mov eax, dword [ebp - 0x30]
cmp dword [ebp - 0x2a8], eax
jle 0x100403a7
mov dword [ebp - 0x2b0], 1
jmp 0x100403ae
and dword [ebp - 0x2b0], 0
mov eax, dword [ebp - 0x30]
imul eax, dword [ebp - 0x2b0]
cmp eax, 0xfff7
jbe 0x100403cb
mov dword [ebp - 0x2b8], 1
jmp 0x100403d2
and dword [ebp - 0x2b8], 0
push 0
lea ecx, [ebp - 0x164]
call fcn.100167c9
mov ecx, dword [ebp - 0x2b8]
cmp ecx, dword [eax]
jg 0x10040442
mov dword [ebp - 0x4f0], 0x63a4
mov byte [ebp - 0x86], 0
lea eax, [ebp - 0x86]
push eax
call fcn.1003d1ff
pop ecx
lea eax, [ebp - 0x164]
push eax
lea eax, [ebp - 0x4f0]
push eax
push 0x436f
push 1
push 1
lea eax, [ebp - 0x2d0]
push eax
push 0xb3a
push 1
push 0x4047
lea eax, [ebp - 0x30]
push eax
call fcn.10039fbc
add esp, 0x28
jmp 0x100407e3
mov dword [ebp - 0x2e0], 0x49babe4a
mov dword [ebp - 0x2d8], 0x7cf5ee2c
push 3
lea ecx, [ebp - 0x5c8]
call fcn.100166bf
mov byte [ebp - 4], 0x12
mov dword [ebp - 0x478], 0x18d5
cmp dword [ebp - 0x478], 0x7bc
jge 0x100406f9
lea eax, [ebp - 0x4c0]
push eax
push 0x1000774c
call fcn.1004edeb
pop ecx
pop ecx
lea ecx, [ebp - 0x3cc]
call fcn.100166b2
mov byte [ebp - 4], 0x13
lea ecx, [ebp - 0x3d8]
call fcn.100166b2
mov byte [ebp - 4], 0x14
and dword [ebp - 0x184], 0
jmp 0x100404c8
mov eax, dword [ebp - 0x184]
inc eax
mov dword [ebp - 0x184], eax
mov eax, dword [ebp - 0x184]
cmp eax, dword [ebp - 0x4c0]
jge 0x1004052b
lea eax, [ebp - 0x2c8]
push eax
lea eax, [ebp - 0x2c0]
push eax
push 0x100079d0
call fcn.1004edeb
add esp, 0xc
cmp dword [ebp - 0x2c0], 1
jne 0x1004050e
lea eax, [ebp - 0x2c8]
push eax
lea ecx, [ebp - 0x3cc]
call fcn.1001672b
jmp 0x10040529
cmp dword [ebp - 0x2c0], 2
jne 0x10040529
lea eax, [ebp - 0x2c8]
push eax
lea ecx, [ebp - 0x3d8]
call fcn.1001672b
jmp 0x100404bb
lea eax, [ebp - 0x660]
push eax
lea ecx, [ebp - 0x3cc]
call fcn.10016977
push dword [eax]
lea eax, [ebp - 0x5f4]
push eax
lea ecx, [ebp - 0x3cc]
call fcn.10016969
push dword [eax]
call fcn.10041e5e
pop ecx
pop ecx
lea eax, [ebp - 0x6d0]
push eax
lea ecx, [ebp - 0x3d8]
call fcn.10016977
push dword [eax]
lea eax, [ebp - 0x5fc]
push eax
lea ecx, [ebp - 0x3d8]
call fcn.10016969
push dword [eax]
call fcn.10041e5e
pop ecx
pop ecx
mov dword [ebp - 0x18c], 0xa5
and dword [ebp - 0x84], 0
jmp 0x100405a9
mov eax, dword [ebp - 0x84]
inc eax
mov dword [ebp - 0x84], eax
lea ecx, [ebp - 0x3cc]
call fcn.100167c0
cmp dword [ebp - 0x84], eax
ja 0x100406c9
and dword [ebp - 0x7c], 0
jmp 0x100405cd
mov eax, dword [ebp - 0x7c]
inc eax
mov dword [ebp - 0x7c], eax
lea ecx, [ebp - 0x3d8]
call fcn.100167c0
cmp dword [ebp - 0x7c], eax
ja 0x100406c4
and dword [ebp - 0xe0], 0
and dword [ebp - 0x138], 0
jmp 0x100405fe
mov eax, dword [ebp - 0x138]
inc eax
mov dword [ebp - 0x138], eax
lea ecx, [ebp - 0x3cc]
call fcn.100167c0
sub eax, dword [ebp - 0x84]
cmp dword [ebp - 0x138], eax
jae 0x10040638
push dword [ebp - 0x138]
lea ecx, [ebp - 0x3cc]
call fcn.100167c9
mov ecx, dword [ebp - 0xe0]
add ecx, dword [eax]
mov dword [ebp - 0xe0], ecx
jmp 0x100405f1
and dword [ebp - 0x140], 0
jmp 0x1004064e
mov eax, dword [ebp - 0x140]
inc eax
mov dword [ebp - 0x140], eax
lea ecx, [ebp - 0x3d8]
call fcn.100167c0
sub eax, dword [ebp - 0x7c]
cmp dword [ebp - 0x140], eax
jae 0x10040685
push dword [ebp - 0x140]
lea ecx, [ebp - 0x3d8]
call fcn.100167c9
mov ecx, dword [ebp - 0xe0]
add ecx, dword [eax]
mov dword [ebp - 0xe0], ecx
jmp 0x10040641
mov eax, dword [ebp - 0x7c]
mov ecx, dword [ebp - 0x84]
lea eax, [ecx + eax*2]
cmp dword [ebp - 0xe0], eax
jg 0x100406bf
mov eax, dword [ebp - 0x7c]
mov ecx, dword [ebp - 0x84]
lea eax, [ecx + eax*2]
cmp eax, dword [ebp - 0x18c]
jge 0x100406bf
mov eax, dword [ebp - 0x7c]
mov ecx, dword [ebp - 0x84]
lea eax, [ecx + eax*2]
mov dword [ebp - 0x18c], eax
jmp 0x100405c6
jmp 0x1004059c
push dword [ebp - 0x18c]
push 0x1000774c
call fcn.1004f4dc
pop ecx
pop ecx
mov byte [ebp - 4], 0x13
lea ecx, [ebp - 0x3d8]
call fcn.100167a4
mov byte [ebp - 4], 0x12
lea ecx, [ebp - 0x3cc]
call fcn.100167a4
mov dword [ebp - 0x148], 0
jmp 0x10040712
mov eax, dword [ebp - 0x148]
inc eax
mov dword [ebp - 0x148], eax
cmp dword [ebp - 0x148], 3
jge 0x10040734
push dword [ebp - 0x148]
lea ecx, [ebp - 0x5c8]
call fcn.100167c9
mov dword [eax], 0x93538b87
jmp 0x10040705
lea eax, [ebp - 0x30]
push eax
push 1
push 0x583
lea eax, [ebp - 0x164]
push eax
lea eax, [ebp - 0x2e0]
push eax
lea eax, [ebp - 0x54]
push eax
push 0x474b
push 0x51bd
push 1
push 0x7661
push 1
push 0x7dee
lea eax, [ebp - 0x2d8]
push eax
lea eax, [ebp - 0x480]
push eax
lea eax, [ebp - 0x2d0]
push eax
call fcn.1003b3fd
add esp, 0x3c
push 0x58e3
lea eax, [ebp - 0x54]
push eax
lea eax, [ebp - 0x164]
push eax
push 0x5aeb
push 1
lea eax, [ebp - 0x2d8]
push eax
lea eax, [ebp - 0x5c8]
push eax
push 1
lea eax, [ebp - 0x2e8]
push eax
lea eax, [ebp - 0x2e0]
push eax
lea eax, [ebp - 0x150]
push eax
push 0x6f05
push 0x48e9
call fcn.1003b6c3
add esp, 0x34
mov byte [ebp - 4], 0x11
lea ecx, [ebp - 0x5c8]
call fcn.100167a4
push 1
lea eax, [ebp - 0x54]
push eax
push 0x964
push 1
push 0x413a
push 0x2a9b
lea eax, [ebp - 0x30]
push eax
lea eax, [ebp - 0x164]
push eax
lea eax, [ebp - 0x2e8]
push eax
push 1
call fcn.1003b902
add esp, 0x28
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x164]
call fcn.100167a4
lea eax, [ebp - 0x40]
push eax
lea eax, [ebp - 0x508]
push eax
call fcn.1003d24b
pop ecx
pop ecx
push dword [ebp - 0x40]
call fcn.1002b115
pop ecx
test eax, eax
jne 0x1004084b
xor eax, eax
jmp 0x10040d65
mov dword [ebp - 0xa4], 0x7bf5cd53
mov dword [ebp - 0x9c], 0xb59229a2
mov dword [ebp - 0xb4], 1
mov dword [ebp - 0x194], 0x34fd39ef
mov dword [ebp - 0x1a4], 3
mov dword [ebp - 0x668], 0xfffffff8
mov dword [ebp - 0x604], 0
push 1
push 0xab6
lea eax, [ebp - 0xa4]
push eax
push 1
lea eax, [ebp - 0xb4]
push eax
push 1
push 0x7054
lea eax, [ebp - 0x9c]
push eax
push 0x4a98
push 0x2e0b
push 0x2512
call fcn.1003be28
add esp, 0x2c
mov eax, dword [ebp - 0xb4]
mov dword [ebp - 0x6b4], eax
mov eax, dword [ebp - 0x9c]
cmp dword [ebp - 0xa4], eax
jg 0x100408f3
mov dword [ebp - 0x2f0], 1
jmp 0x100408fa
and dword [ebp - 0x2f0], 0
mov eax, dword [ebp - 0x194]
cmp eax, dword [ebp - 0x2f0]
jne 0x10040914
mov dword [ebp - 0x2f8], 1
jmp 0x1004091b
and dword [ebp - 0x2f8], 0
cmp dword [ebp - 0x2f8], 5
je 0x10040930
mov dword [ebp - 0x300], 1
jmp 0x10040937
and dword [ebp - 0x300], 0
mov eax, dword [ebp - 0xa4]
cmp eax, dword [ebp - 0x300]
jle 0x10040951
mov dword [ebp - 0x308], 1
jmp 0x10040958
and dword [ebp - 0x308], 0
mov eax, dword [ebp - 0xb4]
cmp dword [ebp - 0x308], eax
jle 0x10040972
mov dword [ebp - 0x310], 1
jmp 0x10040979
and dword [ebp - 0x310], 0
mov eax, dword [ebp - 0x310]
mov dword [ebp - 0xa4], eax
push 0xfffffffffffffffe
pop eax
cmp eax, 0x969fbc0a
jae 0x1004099b
mov dword [ebp - 0x318], 1
jmp 0x100409a2
and dword [ebp - 0x318], 0
mov eax, dword [ebp - 0x318]
mov dword [ebp - 0x1a4], eax
mov eax, dword [ebp - 0x194]
cmp dword [ebp - 0x1a4], eax
jg 0x100409c8
mov dword [ebp - 0x320], 1
jmp 0x100409cf
and dword [ebp - 0x320], 0
mov eax, dword [ebp - 0x9c]
imul eax, dword [ebp - 0x320]
cmp dword [ebp - 0x9c], eax
je 0x100409f0
mov dword [ebp - 0x328], 1
jmp 0x100409f7
and dword [ebp - 0x328], 0
mov eax, dword [ebp - 0x9c]
imul eax, dword [ebp - 0x328]
test eax, eax
jne 0x10040a1a
cmp dword [ebp - 0x194], 0
jne 0x10040a1a
and dword [ebp - 0x330], 0
jmp 0x10040a24
mov dword [ebp - 0x330], 1
mov eax, dword [ebp - 0xb4]
cmp dword [ebp - 0x330], eax
jg 0x10040bcc
push 1
lea ecx, [ebp - 0x3a8]
call fcn.100166bf
mov dword [ebp - 4], 0x15
mov dword [ebp - 0x19c], 0xa8e8b88b
lea eax, [ebp - 0x3a8]
push eax
lea eax, [ebp - 0x60c]
push eax
call fcn.1003d284
pop ecx
pop ecx
push 0
lea ecx, [ebp - 0x3a8]
call fcn.100167c9
cmp dword [eax], 0
je 0x10040adf
push 0
lea ecx, [ebp - 0x3a8]
call fcn.100167c9
mov ecx, dword [ebp - 0xa4]
mov eax, 0x575434bb
test eax, eax
jne 0x10040ab2
push 0
lea ecx, [ebp - 0x3a8]
call fcn.100167c9
cmp dword [eax], 0
jne 0x10040ab2
and dword [ebp - 0x338], 0
jmp 0x10040abc
mov dword [ebp - 0x338], 1
mov eax, 0x74ab7223
add eax, 0xe21dabee
mov dword [ebp - 0x19c], eax
mov esi, dword [ebp - 0x19c]
push 0
lea ecx, [ebp - 0x3a8]
call fcn.100167c9
cmp dword [ebp - 0x9c], 0
je 0x10040b19
mov byte [ebp - 0x6d], 0
movzx eax, byte [ebp - 0x6d]
test eax, eax
je 0x10040b14
push 0x5699
push 0x2220
push 0x3ae9
push 1
push 0x564e
push 0
call fcn.1003c15a
add esp, 0x18
jmp 0x10040bbb
push 3
lea ecx, [ebp - 0x5bc]
call fcn.100166bf
mov byte [ebp - 4], 0x16
push 0x7fc2
push 0xd17
push 0x724b
push 0x2acf
push 0x346
push 0x6612
push 1
lea eax, [ebp - 0x5bc]
push eax
push 1
lea eax, [ebp - 0x678]
push eax
call fcn.1003c239
add esp, 0x28
lea eax, [ebp - 0xb4]
push eax
push 0x61ee
push 0x27ae
push 0x3a3d
lea eax, [ebp - 0x3a8]
push eax
lea eax, [ebp - 0xa4]
push eax
push 1
push 1
lea eax, [ebp - 0x19c]
push eax
lea eax, [ebp - 0x1a4]
push eax
lea eax, [ebp - 0x5bc]
push eax
push 0x2d49
call fcn.1003c35a
add esp, 0x30
mov byte [ebp - 4], 0x15
lea ecx, [ebp - 0x5bc]
call fcn.100167a4
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x3a8]
call fcn.100167a4
jmp 0x10040c01
mov dword [ebp - 0x614], 0xbf03be97
mov dword [ebp - 0x6d4], 0
mov dword [ebp - 0x61c], 0x7f729b20
mov dword [ebp - 0x488], 0xc904586d
lea eax, [ebp - 0x488]
push eax
call fcn.1003cdf6
pop ecx
lea eax, [ebp - 0x40]
push eax
push 1
push 1
call fcn.1003c90f
add esp, 0xc
call fcn.1003d2cc
mov eax, dword [ebp - 0x40]
mov eax, dword [eax]
cmp dword [eax + 0x28], 0
je 0x10040c6d
mov eax, dword [ebp - 0x40]
mov eax, dword [eax]
mov ecx, dword [ebp - 0x158]
add ecx, dword [eax + 0x28]
mov dword [ebp - 0x340], ecx
jne 0x10040c3e
xor eax, eax
jmp 0x10040d65
push 0
push 1
push 0xdeadbeef
call dword [ebp - 0x340]
mov dword [ebp - 0x4c8], eax
cmp dword [ebp - 0x4c8], 0
jne 0x10040c63
xor eax, eax
jmp 0x10040d65
lea eax, [ebp - 0x40]
push eax
call fcn.1003d357
pop ecx
mov dword [ebp - 0x4a0], 1
mov dword [ebp - 0x490], 0x3062a4b1
mov dword [ebp - 0x510], 0x62a04f77
mov dword [ebp - 0x4d0], 0xc89d73ae
mov dword [ebp - 0x55c], 4
mov dword [ebp - 0x558], 4
mov dword [ebp - 0x554], 4
mov dword [ebp - 0x550], 4
lea ecx, [ebp - 0x16d]
call fcn.100167d8
push eax
lea eax, [ebp - 0x54c]
push eax
lea eax, [ebp - 0x55c]
push eax
lea ecx, [ebp - 0x71c]
call fcn.100167db
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0x694]
call fcn.1001677e
mov dword [ebp - 4], 0x17
mov dword [ebp - 0x498], 1
lea eax, [ebp - 0x490]
push eax
lea eax, [ebp - 0x510]
push eax
lea eax, [ebp - 0x694]
push eax
lea eax, [ebp - 0x498]
push eax
lea eax, [ebp - 0x4d0]
push eax
lea eax, [ebp - 0x4a0]
push eax
call fcn.1003d371
add esp, 0x18
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x694]
call fcn.100167a4
mov eax, dword [ebp - 0x40]
cmp dword [eax + 0x10], 0
je 0x10040d58
mov eax, dword [ebp - 0x40]
mov dword [ebp - 0x348], eax
jmp 0x10040d5f
and dword [ebp - 0x348], 0
mov eax, dword [ebp - 0x348]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop esi
mov esp, ebp
pop ebp
ret