Function at 0x1003a1c9
Capabilities:
Delete file
Enumerate pe sections

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x10069c41
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x23c
push esi
movzx eax, byte [ebp + 0x28]
test eax, eax
je 0x1003a279
mov eax, dword [ebp + 0x24]
mov dword [ebp - 0x154], eax
lea eax, [ebp + 0x20]
mov dword [ebp - 0x15c], eax
mov eax, dword [ebp + 0x14]
mov dword [ebp - 0x1a0], eax
mov eax, dword [ebp - 0x15c]
movzx eax, byte [eax]
test eax, eax
je 0x1003a24b
mov eax, dword [ebp - 0x1a0]
mov dword [ebp - 0x1b4], eax
mov eax, dword [ebp - 0x1b4]
mov dword [ebp - 0x198], eax
mov eax, dword [ebp - 0x198]
movzx eax, byte [eax]
test eax, eax
je 0x1003a249
push 0
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
jmp 0x1003a274
mov eax, dword [ebp - 0x154]
mov dword [ebp - 0x18c], eax
mov eax, dword [ebp - 0x18c]
mov dword [ebp - 0xd8], eax
mov eax, dword [ebp - 0xd8]
mov eax, dword [eax]
inc eax
mov ecx, dword [ebp - 0xd8]
mov dword [ecx], eax
jmp 0x1003b318
mov eax, dword [ebp + 0xc]
mov dword [ebp - 0x17c], eax
lea eax, [ebp + 0x1c]
mov dword [ebp - 0x148], eax
mov eax, dword [ebp + 8]
mov dword [ebp - 0x1c8], eax
mov eax, dword [ebp + 0x18]
mov dword [ebp - 0x174], eax
mov eax, dword [ebp + 0x2c]
mov dword [ebp - 0x164], eax
mov eax, dword [ebp + 0x10]
mov dword [ebp - 0x19c], eax
mov eax, dword [ebp - 0x148]
movzx eax, byte [eax]
test eax, eax
je 0x1003a324
mov eax, dword [ebp - 0x1c8]
mov dword [ebp - 0x194], eax
mov eax, dword [ebp - 0x164]
mov dword [ebp - 0x16c], eax
mov eax, dword [ebp - 0x194]
mov dword [ebp - 0x4c], eax
mov eax, dword [ebp - 0x16c]
mov dword [ebp - 0x1b8], eax
mov eax, dword [ebp - 0x4c]
mov dword [eax], 0
jmp 0x1003a2ff
mov eax, dword [ebp - 0x4c]
mov eax, dword [eax]
inc eax
mov ecx, dword [ebp - 0x4c]
mov dword [ecx], eax
mov eax, dword [ebp - 0x4c]
cmp dword [eax], 4
jge 0x1003a31f
mov eax, dword [ebp - 0x4c]
push dword [eax]
mov ecx, dword [ebp - 0x1b8]
call fcn.1001f9f7
mov dword [eax], 0xfffffff8
jmp 0x1003a2f4
jmp 0x1003b318
mov eax, dword [ebp - 0x174]
mov dword [ebp - 0x188], eax
mov eax, dword [ebp - 0x19c]
mov dword [ebp - 0x180], eax
mov eax, dword [ebp - 0x17c]
mov dword [ebp - 0x7c], eax
mov dword [ebp - 0x1b0], 0xffffffff
mov dword [ebp - 0x1ac], 0xffffffff
mov dword [ebp - 0x1a8], 0xffffffff
mov dword [ebp - 0x1a4], 0xffffffff
mov dword [ebp - 0x1d8], 0x228d
cmp dword [ebp - 0x1d8], 0x6ce
jge 0x1003a47c
lea eax, [ebp - 0x88]
push eax
lea eax, [ebp - 0x60]
push eax
lea eax, [ebp - 0x64]
push eax
push 0x10007e90
call fcn.1005028b
add esp, 0x10
push 4
pop eax
shl eax, 0
push 4
pop ecx
imul ecx, ecx, 0
mov eax, dword [ebp + eax - 0x64]
cmp eax, dword [ebp + ecx - 0x64]
jl 0x1003a3c2
and dword [ebp - 0xa4], 0
jmp 0x1003a3cc
mov dword [ebp - 0xa4], 1
mov eax, dword [ebp - 0xa4]
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x88], 0
jle 0x1003a414
xor eax, eax
inc eax
sub eax, dword [ebp - 0x10]
mov dword [ebp - 0x10], eax
push dword [ebp - 0x10]
push 0x100077e8
call fcn.100504bf
pop ecx
pop ecx
mov eax, dword [ebp - 0x88]
dec eax
mov dword [ebp - 0x88], eax
mov eax, dword [ebp - 0x10]
mov eax, dword [ebp + eax*4 - 0x64]
dec eax
mov ecx, dword [ebp - 0x10]
mov dword [ebp + ecx*4 - 0x64], eax
jmp 0x1003a3d5
mov eax, dword [ebp - 0x10]
cmp dword [ebp + eax*4 - 0x64], 0
je 0x1003a43e
push dword [ebp - 0x10]
push 0x100077e8
call fcn.100504bf
pop ecx
pop ecx
mov eax, dword [ebp - 0x10]
mov eax, dword [ebp + eax*4 - 0x64]
dec eax
mov ecx, dword [ebp - 0x10]
mov dword [ebp + ecx*4 - 0x64], eax
jmp 0x1003a414
xor eax, eax
inc eax
sub eax, dword [ebp - 0x10]
mov dword [ebp - 0x10], eax
mov eax, dword [ebp - 0x10]
cmp dword [ebp + eax*4 - 0x64], 0
je 0x1003a471
push dword [ebp - 0x10]
push 0x100077e8
call fcn.100504bf
pop ecx
pop ecx
mov eax, dword [ebp - 0x10]
mov eax, dword [ebp + eax*4 - 0x64]
dec eax
mov ecx, dword [ebp - 0x10]
mov dword [ebp + ecx*4 - 0x64], eax
jmp 0x1003a447
push 0x10007755
call fcn.10050676
pop ecx
mov dword [ebp - 0x48], 0x7e6aa165
push 4
pop eax
imul eax, eax, 3
cmp dword [ebp + eax - 0x1b0], 0
je 0x1003a666
mov dword [ebp - 0x24], 0xdb22124f
mov dword [ebp - 0xac], 0xfffffff9
mov dword [ebp - 0x24], 0
jmp 0x1003a4b8
mov eax, dword [ebp - 0x24]
inc eax
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 3
jg 0x1003a664
mov dword [ebp - 0x14c], 0xb35d5697
mov eax, dword [ebp - 0x24]
cmp dword [ebp + eax*4 - 0x1b0], 0x3b3f3656
jl 0x1003a4e8
mov dword [ebp - 0xa0], 1
jmp 0x1003a4ef
and dword [ebp - 0xa0], 0
mov eax, dword [ebp - 0x24]
mov dword [ebp - 0x1e8], eax
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp + eax*4 - 0x1b0]
mov dword [ebp - 0x1f4], eax
mov eax, dword [ebp - 0x24]
mov ecx, 0xfc88eb98
sub ecx, dword [ebp + eax*4 - 0x1b0]
cmp ecx, dword [ebp - 0xac]
jne 0x1003a52b
mov dword [ebp - 0x138], 1
jmp 0x1003a532
and dword [ebp - 0x138], 0
mov eax, dword [ebp - 0x138]
mov dword [ebp - 0x48], eax
mov eax, dword [ebp - 0x48]
cmp dword [ebp - 0xa0], eax
jl 0x1003a552
mov dword [ebp - 0x114], 1
jmp 0x1003a559
and dword [ebp - 0x114], 0
cmp dword [ebp - 0x114], 0xf1a9
je 0x1003a5c4
mov dword [ebp - 0x184], 0xfffffffc
cmp dword [ebp - 0x184], 0
jne 0x1003a588
push 4
pop eax
test eax, eax
jne 0x1003a588
and dword [ebp - 0xf4], 0
jmp 0x1003a592
mov dword [ebp - 0xf4], 1
mov eax, dword [ebp - 0xac]
cmp eax, dword [ebp - 0xf4]
jne 0x1003a5ac
mov dword [ebp - 0xb4], 1
jmp 0x1003a5b3
and dword [ebp - 0xb4], 0
mov eax, dword [ebp - 0xb4]
mov dword [ebp - 0x14c], eax
jmp 0x1003a65f
mov dword [ebp - 0x48], 3
jmp 0x1003a5d4
mov eax, dword [ebp - 0x48]
dec eax
mov dword [ebp - 0x48], eax
cmp dword [ebp - 0x48], 0
jl 0x1003a65f
push 0x1fbd
push 0x7f7c
push 0x31d0
push 0x57ed
push 0x301a
push 0x4704
push 1
push 0x588f
push 0xea2
push 0x7c2a
push 0
push 0x466
push 0xf55
push 0x4d51
push 0
push 0x375e
call fcn.10028ef0
add esp, 0x40
mov byte [ebp - 0x27], 0
push 1
push 0x609f
push 0x2c49
push 0x5dc6
push 0
push 0x6342
push 0x3f7a
lea eax, [ebp - 0x27]
push eax
call fcn.1002a7ec
add esp, 0x20
jmp 0x1003a5cd
jmp 0x1003a4b1
jmp 0x1003a68b
push 0x380
push 0
push 0x6565
push 0x1a9
push 0x2d6e
push 0
push 0xdad
call fcn.1003277b
add esp, 0x1c
mov eax, dword [ebp - 0x7c]
mov eax, dword [eax + 4]
mov dword [ebp - 0x130], eax
mov dword [ebp - 0x44], 0xccba
mov dword [ebp - 0x34], 0xfffffff6
mov dword [ebp - 0x2c], 0xe75d5f8d
mov dword [ebp - 0x20], 1
mov dword [ebp - 0x18], 0x53526c71
mov dword [ebp - 0xc8], 6
mov dword [ebp - 0x54], 0xfffffff8
cmp dword [ebp - 0x34], 0
je 0x1003a6e5
mov eax, dword [ebp - 0x34]
cmp dword [ebp - 0x2c], eax
je 0x1003a6e5
mov dword [ebp - 0x134], 1
jmp 0x1003a6ec
and dword [ebp - 0x134], 0
mov eax, dword [ebp - 0x44]
cmp eax, dword [ebp - 0x134]
jne 0x1003a703
mov dword [ebp - 0x150], 1
jmp 0x1003a70a
and dword [ebp - 0x150], 0
mov eax, dword [ebp - 0x34]
mov dword [ebp - 0x208], eax
cmp dword [ebp - 0x20], 0
jb 0x1003a725
mov dword [ebp - 0xbc], 1
jmp 0x1003a72c
and dword [ebp - 0xbc], 0
mov eax, dword [ebp - 0x34]
cmp dword [ebp - 0xbc], eax
jle 0x1003a743
mov dword [ebp - 0xfc], 1
jmp 0x1003a74a
and dword [ebp - 0xfc], 0
mov eax, dword [ebp - 0xfc]
mov dword [ebp - 0x2c], eax
mov eax, dword [ebp - 0x44]
cmp dword [ebp - 0x2c], eax
jg 0x1003a76d
mov eax, 0xbb7a1405
test eax, eax
jne 0x1003a76d
and dword [ebp - 0xc4], 0
jmp 0x1003a777
mov dword [ebp - 0xc4], 1
cmp dword [ebp - 0xc4], 1
jl 0x1003a78f
cmp dword [ebp - 0x34], 0
jne 0x1003a78f
and dword [ebp - 0x11c], 0
jmp 0x1003a799
mov dword [ebp - 0x11c], 1
mov eax, dword [ebp - 0x11c]
mov dword [ebp - 0x18], eax
mov eax, dword [ebp - 0x44]
cmp dword [ebp - 0x18], eax
jl 0x1003a7b6
mov dword [ebp - 0xcc], 1
jmp 0x1003a7bd
and dword [ebp - 0xcc], 0
mov eax, dword [ebp - 0x44]
add eax, dword [ebp - 0xcc]
cmp eax, dword [ebp - 0x34]
jle 0x1003a7d7
mov dword [ebp - 0x158], 1
jmp 0x1003a7de
and dword [ebp - 0x158], 0
mov eax, dword [ebp - 0x44]
mov dword [ebp - 0x210], eax
cmp dword [ebp - 0x44], 0
je 0x1003a9a1
mov dword [ebp - 0x104], 0x951fe511
mov dword [ebp - 0x160], 9
cmp dword [ebp - 0xc8], 0
je 0x1003a81b
cmp dword [ebp - 0x104], 0
jne 0x1003a8be
cmp dword [ebp - 0x54], 0
jne 0x1003a849
mov eax, dword [ebp - 0x2c]
mov dword [ebp - 0x218], eax
mov eax, dword [ebp - 0x104]
mov dword [ebp - 0x220], eax
mov eax, dword [ebp - 0x54]
sub eax, 0x650c6de
jne 0x1003a849
and dword [ebp - 0xd4], 0
jmp 0x1003a853
mov dword [ebp - 0xd4], 1
cmp dword [ebp - 0xd4], 0xfffffffd
jne 0x1003a868
mov dword [ebp - 0x12c], 1
jmp 0x1003a86f
and dword [ebp - 0x12c], 0
cmp dword [ebp - 0x12c], 0xfffffff8
jl 0x1003a884
mov dword [ebp - 0xdc], 1
jmp 0x1003a88b
and dword [ebp - 0xdc], 0
cmp dword [ebp - 0xdc], 0x67bc6200
jge 0x1003a8a3
mov dword [ebp - 0x10c], 1
jmp 0x1003a8aa
and dword [ebp - 0x10c], 0
mov eax, dword [ebp - 0x20]
cmp dword [ebp - 0x10c], eax
jge 0x1003a8be
and dword [ebp - 0xe4], 0
jmp 0x1003a8c8
mov dword [ebp - 0xe4], 1
cmp dword [ebp - 0xe4], 0xb3925b97
jae 0x1003a8e9
mov eax, 0xb9be
test eax, eax
je 0x1003a8e9
mov dword [ebp - 0x124], 1
jmp 0x1003a8f0
and dword [ebp - 0x124], 0
mov eax, dword [ebp - 0x18]
cmp dword [ebp - 0x124], eax
je 0x1003a907
mov dword [ebp - 0xec], 1
jmp 0x1003a90e
and dword [ebp - 0xec], 0
mov eax, dword [ebp - 0xec]
mov dword [ebp - 0x160], eax
mov dword [ebp - 0x18], 0x16
jmp 0x1003a92a
mov eax, dword [ebp - 0x18]
dec eax
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 5
jge 0x1003a99c
mov dword [ebp - 0x20], 0
jmp 0x1003a940
mov eax, dword [ebp - 0x20]
inc eax
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 0x16
jge 0x1003a99a
mov byte [ebp - 0x26], 0
push 0x4060
lea eax, [ebp - 0x26]
push eax
push 0x611b
push 0xde1
push 0x2208
push 0x3b72
push 1
push 0x4840
push 0x60b4
push 0x3b63
push 1
push 0x22be
push 0x62c
push 0x742
push 0
push 0x6743
call fcn.10028ef0
add esp, 0x40
jmp 0x1003a939
jmp 0x1003a923
jmp 0x1003aaf6
mov dword [ebp - 0x78], 0
jmp 0x1003a9b1
mov eax, dword [ebp - 0x78]
inc eax
mov dword [ebp - 0x78], eax
cmp dword [ebp - 0x78], 3
jge 0x1003a9c7
mov eax, dword [ebp - 0x78]
mov dword [ebp + eax*4 - 0x230], 0x37a
jmp 0x1003a9aa
push 0x4b2a
push 0x5225
push 0x3a37
lea eax, [ebp - 0x54]
push eax
push 0x59c6
push 0x4ea7
lea eax, [ebp - 0x2c]
push eax
push 0x5ce7
push 0
push 0x11b7
push 0
push 0x25f3
push 1
push 0x5ead
push 0x5cef
push 0x66cf
call fcn.10033bbd
add esp, 0x40
cmp dword [ebp - 0x54], 2
jne 0x1003aa26
mov dword [ebp - 0xb8], 1
jmp 0x1003aa2d
and dword [ebp - 0xb8], 0
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x230], 0xdd8d
jge 0x1003aa4c
mov dword [ebp - 0x9c], 1
jmp 0x1003aa53
and dword [ebp - 0x9c], 0
mov eax, dword [ebp - 0x20]
cmp dword [ebp - 0x9c], eax
jge 0x1003aa71
push 5
pop eax
test eax, eax
je 0x1003aa71
mov dword [ebp - 0xa8], 1
jmp 0x1003aa78
and dword [ebp - 0xa8], 0
mov eax, dword [ebp - 0x2c]
cmp dword [ebp - 0xa8], eax
jle 0x1003aa8f
mov dword [ebp - 0xb0], 1
jmp 0x1003aa96
and dword [ebp - 0xb0], 0
cmp dword [ebp - 0xb0], 0xc95c8f38
je 0x1003aaae
mov dword [ebp - 0x168], 1
jmp 0x1003aab5
and dword [ebp - 0x168], 0
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x230]
mov dword [ebp - 0x248], eax
mov eax, dword [ebp - 0xb8]
neg eax
imul eax, eax, 0x9e6
cmp eax, dword [ebp - 0x20]
jge 0x1003aae6
mov dword [ebp - 0xc0], 1
jmp 0x1003aaed
and dword [ebp - 0xc0], 0
mov eax, dword [ebp - 0xc0]
mov dword [ebp - 0x18], eax
push 0x3125
push 0
push 0
lea eax, [ebp - 0xc8]
push eax
lea eax, [ebp - 0x2c]
push eax
lea eax, [ebp - 0x34]
push eax
push 0x520f
lea eax, [ebp - 0x54]
push eax
push 0x1730
push 0x54da
lea eax, [ebp - 0x18]
push eax
call fcn.10028815
add esp, 0x2c
push 1
lea ecx, [ebp - 0x144]
call fcn.1001f933
and dword [ebp - 4], 0
mov dword [ebp - 0x5c], 0
jmp 0x1003ab4e
mov eax, dword [ebp - 0x5c]
inc eax
mov dword [ebp - 0x5c], eax
cmp dword [ebp - 0x5c], 1
jge 0x1003ab61
mov eax, dword [ebp - 0x5c]
mov dword [ebp + eax*4 - 0x40], 0x4a6847df
jmp 0x1003ab47
push 0x3b3f
push 0
push 0x4bd6
lea eax, [ebp - 0x144]
push eax
push 0x2fa7
lea eax, [ebp - 0x5c]
push eax
push 0x67a9
call fcn.10032def
add esp, 0x1c
push 0x1077
push 0
push 0x174c
push 0
call fcn.1002f20d
add esp, 0x10
push 0
lea ecx, [ebp - 0x144]
call fcn.1001f9f7
and dword [eax], 0
jmp 0x1003abd6
push 0
lea ecx, [ebp - 0x144]
call fcn.1001f9f7
mov dword [ebp - 0xd0], eax
mov eax, dword [ebp - 0xd0]
mov eax, dword [eax]
inc eax
mov ecx, dword [ebp - 0xd0]
mov dword [ecx], eax
push 0
lea ecx, [ebp - 0x144]
call fcn.1001f9f7
cmp dword [eax], 0
jg 0x1003ad40
mov dword [ebp - 0x68], 0
jmp 0x1003abfc
mov eax, dword [ebp - 0x68]
inc eax
mov dword [ebp - 0x68], eax
cmp dword [ebp - 0x68], 3
jge 0x1003ac12
mov eax, dword [ebp - 0x68]
mov dword [ebp + eax*4 - 0x1c4], 3
jmp 0x1003abf5
push 4
pop eax
shl eax, 0
mov dword [ebp + eax - 0x1c4], 0
jmp 0x1003ac40
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x1c4]
dec eax
push 4
pop ecx
shl ecx, 0
mov dword [ebp + ecx - 0x1c4], eax
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x1c4], 0
jl 0x1003ad29
mov dword [ebp - 0x3c], 0xedcad20
mov dword [ebp - 0x3c], 0
jmp 0x1003ac6b
mov eax, dword [ebp - 0x3c]
dec eax
mov dword [ebp - 0x3c], eax
cmp dword [ebp - 0x3c], 0
jl 0x1003ad09
mov dword [ebp - 0x70], 0xfffffff9
mov dword [ebp - 0x70], 0
jmp 0x1003ac8c
mov eax, dword [ebp - 0x70]
inc eax
mov dword [ebp - 0x70], eax
cmp dword [ebp - 0x70], 0
jg 0x1003acea
mov eax, dword [ebp - 0x3c]
push 4
pop ecx
shl ecx, 0
mov ecx, dword [ebp + ecx - 0x1c4]
mov eax, dword [ebp + eax*4 - 0x40]
mov dword [ebp + ecx*4 - 0x40], eax
mov byte [ebp - 0x25], 0
push 1
push 0x5d29
push 0x3cbe
push 0x7fde
push 0
push 0x36e3
push 0x1a2f
push 0x20b7
push 0x445a
lea eax, [ebp - 0x25]
push eax
push 1
push 0xc61
call fcn.1002ee16
add esp, 0x30
jmp 0x1003ac85
mov esi, dword [ebp - 0x3c]
push 0
lea ecx, [ebp - 0x144]
call fcn.1001f9f7
mov eax, dword [eax]
mov ecx, dword [ebp + esi*4 - 0x40]
mov dword [ebp + eax*4 - 0x40], ecx
jmp 0x1003ac64
push 0
lea ecx, [ebp - 0x144]
call fcn.1001f9f7
mov eax, dword [eax]
cmp dword [ebp + eax*4 - 0x40], 0
je 0x1003ad24
jmp 0x1003ac25
jmp 0x1003ac25
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x40], 0
je 0x1003ad3b
jmp 0x1003abb2
jmp 0x1003abb2
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x144]
call fcn.1001f9b5
mov eax, dword [ebp - 0x7c]
mov eax, dword [eax]
mov ecx, dword [ebp - 0x7c]
mov ecx, dword [ecx]
movzx ecx, word [ecx + 0x14]
lea eax, [eax + ecx + 0x18]
mov dword [ebp - 0x1c], eax
and dword [ebp - 0x94], 0
jmp 0x1003ad83
mov eax, dword [ebp - 0x94]
inc eax
mov dword [ebp - 0x94], eax
mov eax, dword [ebp - 0x1c]
add eax, 0x28
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x7c]
mov eax, dword [eax]
movzx eax, word [eax + 6]
cmp dword [ebp - 0x94], eax
jge 0x1003b318
mov dword [ebp - 0x84], 0xffffffff
push 2
lea ecx, [ebp - 0x1e4]
call fcn.1001f933
mov dword [ebp - 4], 1
lea eax, [ebp - 0x1f0]
push eax
push 0x6dbe
push 1
push 0
lea eax, [ebp - 0x1e4]
push eax
push 0x4422
call fcn.100299a6
add esp, 0x18
mov dword [ebp - 0x84], 0xffffffe2
jmp 0x1003adf3
mov eax, dword [ebp - 0x84]
inc eax
mov dword [ebp - 0x84], eax
cmp dword [ebp - 0x84], 0xe
jl 0x1003aeb2
mov dword [ebp - 0x50], 0xcb457102
push 0x45d2
push 0
push 1
push 0x48c6
push 0x7c8
push 0
call fcn.10030d01
add esp, 0x18
mov dword [ebp - 0x50], 0
jmp 0x1003ae34
mov eax, dword [ebp - 0x50]
dec eax
mov dword [ebp - 0x50], eax
cmp dword [ebp - 0x50], 0xffffffef
jle 0x1003aead
mov dword [ebp - 0x98], 0xffffffff
cmp dword [ebp - 0x98], 0
je 0x1003ae4f
jmp 0x1003aead
lea eax, [ebp - 0x1e4]
push eax
push 0xc74
push 0x450
push 1
push 0x2a1f
lea eax, [ebp - 0x98]
push eax
push 0x4544
push 0x3d93
push 0x1d8d
push 0x7783
push 1
push 0x126b
push 0x39cf
push 0
lea eax, [ebp - 0x50]
push eax
push 0x4d65
push 0x72cf
push 0x2ffd
call fcn.1002fc8a
add esp, 0x48
jmp 0x1003ae2d
jmp 0x1003ade6
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x1e4]
call fcn.1001f9b5
mov eax, dword [ebp - 0x1c]
cmp dword [eax + 0x10], 0
jne 0x1003b1f2
mov dword [ebp - 0x14], 0xfffe
mov dword [ebp - 0x80], 0xfffffff7
push 1
lea ecx, [ebp - 0x1d4]
call fcn.1001f933
mov dword [ebp - 4], 2
mov dword [ebp - 0x178], 0x2955f1bb
push 0x2cfc
push 0x53ca
push 0x6393
push 0x3d82
push 0
push 0x17a7
push 0x18e7
push 0x698
lea eax, [ebp - 0x58]
push eax
push 0x70a7
push 0x2de8
push 0
push 0x744b
push 0x221e
push 0x3975
lea eax, [ebp - 0x1d4]
push eax
call fcn.100283c5
add esp, 0x40
mov dword [ebp - 0x58], 0
jmp 0x1003af5d
mov eax, dword [ebp - 0x58]
inc eax
mov dword [ebp - 0x58], eax
cmp dword [ebp - 0x58], 2
jge 0x1003af73
mov eax, dword [ebp - 0x58]
mov dword [ebp + eax*4 - 0x200], 0x4abf0a64
jmp 0x1003af56
mov eax, dword [ebp - 0x14]
mov dword [ebp - 0x244], eax
mov eax, dword [ebp - 0x14]
cmp dword [ebp - 0x14], eax
jle 0x1003af90
mov dword [ebp - 0xe0], 1
jmp 0x1003af97
and dword [ebp - 0xe0], 0
mov eax, dword [ebp - 0x14]
cmp dword [ebp - 0xe0], eax
jl 0x1003afae
mov dword [ebp - 0xe8], 1
jmp 0x1003afb5
and dword [ebp - 0xe8], 0
mov eax, dword [ebp - 0x14]
add eax, dword [ebp - 0x14]
cmp eax, 9
jb 0x1003afcc
mov dword [ebp - 0xf0], 1
jmp 0x1003afd3
and dword [ebp - 0xf0], 0
mov eax, dword [ebp - 0x14]
cmp dword [ebp - 0xf0], eax
je 0x1003afea
mov dword [ebp - 0xf8], 1
jmp 0x1003aff1
and dword [ebp - 0xf8], 0
mov eax, dword [ebp - 0x14]
cmp dword [ebp - 0xf8], eax
jg 0x1003b008
mov dword [ebp - 0x100], 1
jmp 0x1003b00f
and dword [ebp - 0x100], 0
mov eax, dword [ebp - 0x100]
mov dword [ebp - 0x80], eax
mov eax, dword [ebp - 0x80]
mov dword [ebp - 0x1f8], eax
cmp dword [ebp - 0x80], 0
jne 0x1003b02b
xor eax, eax
je 0x1003b049
push 0
lea ecx, [ebp - 0x1d4]
call fcn.1001f9f7
cmp dword [eax], 0
je 0x1003b049
mov dword [ebp - 0x108], 1
jmp 0x1003b050
and dword [ebp - 0x108], 0
mov eax, dword [ebp - 0x14]
cmp eax, dword [ebp - 0x108]
jg 0x1003b067
mov dword [ebp - 0x170], 1
jmp 0x1003b06e
and dword [ebp - 0x170], 0
mov esi, dword [ebp - 0x80]
push 0
lea ecx, [ebp - 0x1d4]
call fcn.1001f9f7
cmp esi, dword [eax]
je 0x1003b08e
mov dword [ebp - 0x110], 1
jmp 0x1003b095
and dword [ebp - 0x110], 0
mov eax, dword [ebp - 0x14]
add eax, dword [ebp - 0x110]
cmp eax, dword [ebp - 0x178]
jl 0x1003b0b2
mov dword [ebp - 0x118], 1
jmp 0x1003b0b9
and dword [ebp - 0x118], 0
mov eax, dword [ebp - 0x14]
cmp eax, dword [ebp - 0x118]
je 0x1003b0d0
mov dword [ebp - 0x90], 1
jmp 0x1003b0d7
and dword [ebp - 0x90], 0
push 0
lea ecx, [ebp - 0x1d4]
call fcn.1001f9f7
mov ecx, dword [ebp - 0x90]
mov dword [eax], ecx
cmp dword [ebp - 0x90], 0
jne 0x1003b107
mov eax, 0xc47a
test eax, eax
jne 0x1003b107
and dword [ebp - 0x120], 0
jmp 0x1003b111
mov dword [ebp - 0x120], 1
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x120]
mov dword [ebp + eax - 0x200], ecx
mov byte [ebp - 0x2d], 0
push 0
lea eax, [ebp - 0x2d]
push eax
call fcn.100338a3
pop ecx
pop ecx
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x1d4]
call fcn.1001f9b5
push 0
lea eax, [ebp - 0x8c]
push eax
push 0x1ade
push 0x50b0
push 0
lea eax, [ebp - 0x130]
push eax
lea eax, [ebp - 0x180]
push eax
push 0x7876
lea eax, [ebp - 0x1c]
push eax
push 0x7c76
call fcn.100282bc
add esp, 0x28
mov dword [ebp - 0x38], 0x5a136951
mov dword [ebp - 0x74], 0
jmp 0x1003b194
mov eax, dword [ebp - 0x74]
inc eax
mov dword [ebp - 0x74], eax
cmp dword [ebp - 0x74], 1
jge 0x1003b1aa
mov eax, dword [ebp - 0x74]
mov dword [ebp + eax*4 - 0x128], 0x8ec0ae97
jmp 0x1003b18d
mov dword [ebp - 0x38], 0
jmp 0x1003b1ba
mov eax, dword [ebp - 0x38]
inc eax
mov dword [ebp - 0x38], eax
cmp dword [ebp - 0x38], 0
jg 0x1003b1d6
mov eax, dword [ebp - 0x38]
mov ecx, dword [ebp - 0x38]
mov eax, dword [ebp + eax*4 - 0x128]
mov dword [ebp + ecx*4 - 0x128], eax
jmp 0x1003b1b3
mov byte [ebp - 0x28], 0
movzx eax, byte [ebp - 0x28]
test eax, eax
je 0x1003b1ed
push 1
push 0
call fcn.1002c9c5
pop ecx
pop ecx
jmp 0x1003ad6d
push 4
push 0x1000
mov eax, dword [ebp - 0x1c]
push dword [eax + 0x10]
mov eax, dword [ebp - 0x1c]
mov ecx, dword [ebp - 0x130]
add ecx, dword [eax + 0xc]
push ecx
push 0x6cd8
push 0x61f8
call fcn.1001e596
pop ecx
pop ecx
call eax
mov dword [ebp - 0x8c], eax
mov eax, dword [ebp - 0x1c]
push dword [eax + 0x10]
mov eax, dword [ebp - 0x1c]
mov ecx, dword [ebp - 0x188]
add ecx, dword [eax + 0x14]
push ecx
push dword [ebp - 0x8c]
call fcn.1001f0bd
add esp, 0xc
mov dword [ebp - 0x6c], 0xa5d6c05b
mov dword [ebp - 0x21c], 0xffffffff
mov dword [ebp - 0x204], 0
push 1
lea ecx, [ebp - 0x240]
call fcn.1001f933
mov dword [ebp - 4], 3
mov dword [ebp - 0x190], 0x5d72
push 0
lea eax, [ebp - 0x240]
push eax
lea eax, [ebp - 0x234]
push eax
call fcn.1002f2bc
add esp, 0xc
push 1
push 0
call fcn.1002c655
pop ecx
pop ecx
mov dword [ebp - 0x6c], 0
jmp 0x1003b2b2
mov eax, dword [ebp - 0x6c]
dec eax
mov dword [ebp - 0x6c], eax
cmp dword [ebp - 0x6c], 0xfffffffd
jge 0x1003b2f8
mov dword [ebp - 0x20c], 0xfffffff8
mov dword [ebp - 0x224], 0x121f90ef
mov dword [ebp - 0x214], 0xffffffff
mov dword [ebp - 0x1ec], 0x4a75
push 0x71b7
push 0
lea eax, [ebp - 0x190]
push eax
call fcn.1003a196
add esp, 0xc
jmp 0x1003b2ab
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x240]
call fcn.1001f9b5
mov eax, dword [ebp - 0x1c]
mov ecx, dword [ebp - 0x8c]
mov dword [eax + 8], ecx
jmp 0x1003ad6d
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop esi
mov esp, ebp
pop ebp
ret