Function at 0x1003e7a1
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x1006ae8c
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
push ecx
sub esp, 0x34c
push ebx
push esi
push edi
mov dword [ebp - 0x10], esp
and dword [ebp - 0x198], 0
push 1
lea ecx, [ebp - 0x264]
call fcn.100333f7
and dword [ebp - 4], 0
push 3
lea ecx, [ebp - 0x1d8]
call fcn.100333f7
mov byte [ebp - 4], 1
mov dword [ebp - 0x214], 0xf0b1
mov dword [ebp - 0x1f4], 0xab3ae5d5
push 1
lea ecx, [ebp - 0x288]
call fcn.100333f7
mov byte [ebp - 4], 2
mov dword [ebp - 0x30], 0
jmp 0x1003e824
mov eax, dword [ebp - 0x30]
inc eax
mov dword [ebp - 0x30], eax
cmp dword [ebp - 0x30], 1
jge 0x1003e840
push dword [ebp - 0x30]
lea ecx, [ebp - 0x264]
call fcn.10033495
mov dword [eax], 0xfffffffb
jmp 0x1003e81d
lea eax, [ebp - 0x1d8]
push eax
lea eax, [ebp - 0x30]
push eax
call fcn.1003e1da
pop ecx
pop ecx
lea eax, [ebp - 0x288]
push eax
lea eax, [ebp - 0x30]
push eax
call fcn.1003e222
pop ecx
pop ecx
push 1
lea ecx, [ebp - 0x1d8]
call fcn.10033495
and dword [eax], 0
jmp 0x1003e89a
push 1
lea ecx, [ebp - 0x1d8]
call fcn.10033495
mov dword [ebp - 0x180], eax
mov eax, dword [ebp - 0x180]
mov eax, dword [eax]
inc eax
mov ecx, dword [ebp - 0x180]
mov dword [ecx], eax
push 1
lea ecx, [ebp - 0x1d8]
call fcn.10033495
cmp dword [eax], 0
jg 0x1003e944
push 1
lea ecx, [ebp - 0x270]
call fcn.100333f7
mov byte [ebp - 4], 3
mov dword [ebp - 0x1f8], 0x83bc1b0f
mov dword [ebp - 0x74], 0
jmp 0x1003e8db
mov eax, dword [ebp - 0x74]
inc eax
mov dword [ebp - 0x74], eax
cmp dword [ebp - 0x74], 1
jge 0x1003e8f7
push dword [ebp - 0x74]
lea ecx, [ebp - 0x270]
call fcn.10033495
mov dword [eax], 0xa162c9cc
jmp 0x1003e8d4
lea eax, [ebp - 0x1f8]
push eax
lea eax, [ebp - 0x264]
push eax
lea eax, [ebp - 0x1f4]
push eax
lea eax, [ebp - 0x1d8]
push eax
lea eax, [ebp - 0x214]
push eax
lea eax, [ebp - 0x270]
push eax
lea eax, [ebp - 0x288]
push eax
call fcn.1003e26a
add esp, 0x1c
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x270]
call fcn.10033479
jmp 0x1003e876
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x288]
call fcn.10033479
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x1d8]
call fcn.10033479
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x264]
call fcn.10033479
mov byte [ebp - 0x10c], 8
mov byte [ebp - 0x10b], 0xf6
mov byte [ebp - 0x10a], 3
mov byte [ebp - 0x109], 0xd
mov byte [ebp - 0x108], 0x19
mov byte [ebp - 0x107], 0x1e
mov byte [ebp - 0x106], 0xf
mov byte [ebp - 0x105], 0xa
mov byte [ebp - 0x104], 0xa
mov byte [ebp - 0x103], 0x1b
mov byte [ebp - 0x102], 5
mov byte [ebp - 0x101], 0xd
mov byte [ebp - 0x100], 0x10
mov byte [ebp - 0xff], 0x17
mov byte [ebp - 0xfe], 0x11
mov byte [ebp - 0xfd], 3
mov byte [ebp - 0xfc], 0xb
mov byte [ebp - 0xfb], 0x1e
mov byte [ebp - 0xfa], 0x62
mov byte [ebp - 0xf9], 4
mov byte [ebp - 0xf8], 0x59
mov byte [ebp - 0xf7], 0xc4
mov byte [ebp - 0xf6], 0xb4
mov byte [ebp - 0xf5], 0x48
mov byte [ebp - 0xf4], 0xb9
mov byte [ebp - 0xf3], 0x86
mov byte [ebp - 0xf2], 0x88
mov byte [ebp - 0xf1], 0xa7
mov byte [ebp - 0xf0], 0xea
mov byte [ebp - 0xef], 0xd4
mov byte [ebp - 0xee], 0x93
mov byte [ebp - 0xed], 0x5e
mov byte [ebp - 0xec], 0x22
mov byte [ebp - 0xeb], 0x90
mov byte [ebp - 0xea], 0x5f
mov byte [ebp - 0xe9], 0xfc
mov byte [ebp - 0xe8], 0x53
mov byte [ebp - 0xe7], 0x29
mov byte [ebp - 0xe6], 0x95
mov byte [ebp - 0xe5], 0xd9
mov byte [ebp - 0xe4], 0xb7
mov byte [ebp - 0xe3], 0x7b
mov byte [ebp - 0xe2], 0xaf
mov byte [ebp - 0xe1], 0x9a
mov byte [ebp - 0xe0], 0x7f
mov byte [ebp - 0xdf], 0xea
mov byte [ebp - 0xde], 0
mov byte [ebp - 0xdd], 0x95
mov byte [ebp - 0xdc], 0x6e
mov byte [ebp - 0xdb], 0x7a
mov byte [ebp - 0xda], 0xad
mov byte [ebp - 0xd9], 0x82
mov byte [ebp - 0xd8], 0x2e
mov byte [ebp - 0xd7], 0xe
mov byte [ebp - 0xd6], 0xcc
mov byte [ebp - 0xd5], 0xa5
mov byte [ebp - 0xd4], 0x91
mov byte [ebp - 0xd3], 0xd
mov byte [ebp - 0xd2], 0xbb
mov byte [ebp - 0xd1], 0xeb
mov byte [ebp - 0xd0], 0xf
mov byte [ebp - 0xcf], 0x16
mov byte [ebp - 0xce], 0x5c
mov byte [ebp - 0xcd], 0x32
mov byte [ebp - 0xcc], 0xc0
mov byte [ebp - 0xcb], 4
mov byte [ebp - 0xca], 0xd3
mov byte [ebp - 0xc9], 0xa1
mov byte [ebp - 0xc8], 0x1c
mov byte [ebp - 0xc7], 0xe2
mov byte [ebp - 0xc6], 1
mov byte [ebp - 0xc5], 0xde
mov byte [ebp - 0xc4], 0x3b
mov byte [ebp - 0xc3], 0xa0
mov byte [ebp - 0xc2], 0x30
mov byte [ebp - 0xc1], 0xf5
mov byte [ebp - 0xc0], 0xd9
mov byte [ebp - 0xbf], 0x17
mov byte [ebp - 0xbe], 0x58
mov byte [ebp - 0xbd], 0x40
mov byte [ebp - 0xbc], 0x7d
mov byte [ebp - 0xbb], 0xbc
mov byte [ebp - 0xba], 0xd3
mov byte [ebp - 0xb9], 0x39
mov byte [ebp - 0xb8], 0x51
mov byte [ebp - 0xb7], 0xc
mov byte [ebp - 0xb6], 0xf1
mov byte [ebp - 0xb5], 0xe3
mov byte [ebp - 0xb4], 0xae
mov byte [ebp - 0xb3], 6
mov byte [ebp - 0xb2], 0xd1
mov byte [ebp - 0xb1], 0x50
mov byte [ebp - 0xb0], 0x6c
mov byte [ebp - 0xaf], 0xce
mov byte [ebp - 0xae], 0xca
mov byte [ebp - 0xad], 0x62
mov byte [ebp - 0xac], 0xdb
mov byte [ebp - 0xab], 0xc7
mov byte [ebp - 0xaa], 0x77
mov byte [ebp - 0xa9], 0x4e
mov byte [ebp - 0xa8], 0x95
mov byte [ebp - 0xa7], 0x37
mov byte [ebp - 0xa6], 0x11
mov byte [ebp - 0xa5], 0x8a
mov byte [ebp - 0xa4], 0x81
mov byte [ebp - 0xa3], 0x47
mov byte [ebp - 0xa2], 0x35
mov byte [ebp - 0xa1], 0xa1
mov byte [ebp - 0xa0], 0xae
mov byte [ebp - 0x9f], 0x88
mov byte [ebp - 0x9e], 0xc1
mov byte [ebp - 0x9d], 0x16
mov byte [ebp - 0x9c], 0x6f
mov byte [ebp - 0x9b], 0x2c
mov byte [ebp - 0x9a], 0x63
mov byte [ebp - 0x99], 0xd6
mov byte [ebp - 0x98], 0xd4
mov byte [ebp - 0x97], 0xd
mov byte [ebp - 0x96], 2
mov byte [ebp - 0x95], 0
mov byte [ebp - 0x94], 0xf
mov byte [ebp - 0x93], 0xe
mov byte [ebp - 0x92], 0xe
mov byte [ebp - 0x91], 6
mov byte [ebp - 0x90], 8
mov byte [ebp - 0x8f], 0x12
mov byte [ebp - 0x8e], 0x14
mov byte [ebp - 0x8d], 0x16
mov byte [ebp - 0x8c], 4
mov byte [ebp - 0x8b], 0x13
mov byte [ebp - 0x8a], 3
mov byte [ebp - 0x89], 0xc
mov byte [ebp - 0x88], 0x19
mov byte [ebp - 0x87], 9
mov byte [ebp - 0x86], 7
mov byte [ebp - 0x85], 2
mov byte [ebp - 0x84], 9
mov byte [ebp - 0x83], 4
mov byte [ebp - 0x82], 6
mov byte [ebp - 0x81], 0x14
mov byte [ebp - 0x80], 0x10
mov byte [ebp - 0x7f], 0x17
mov byte [ebp - 0x7e], 0xd
mov byte [ebp - 0x7d], 7
mov byte [ebp - 0x7c], 0x10
mov byte [ebp - 0x7b], 1
mov byte [ebp - 0x7a], 0xa
mov byte [ebp - 0x79], 0x18
mov byte [ebp - 0x78], 0x1b
mov byte [ebp - 0x77], 0x15
mov byte [ebp - 0x76], 0xf
push 3
lea ecx, [ebp - 0x1b8]
call fcn.100333f7
mov dword [ebp - 4], 4
mov dword [ebp - 0x1c], 0x8a87013d
mov dword [ebp - 0x24], 0
mov dword [ebp - 0x110], 6
mov dword [ebp - 0x2c], 0x1f6c
lea eax, [ebp - 0x1b8]
push eax
lea eax, [ebp - 0x2b8]
push eax
call fcn.1003e419
pop ecx
pop ecx
mov dword [ebp - 0x1c], 2
jmp 0x1003edc9
mov eax, dword [ebp - 0x1c]
dec eax
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 0
jl 0x1003f14e
mov dword [ebp - 0x1a8], 0x75b0
mov dword [ebp - 0x224], 0x1000acc8
cmp dword [ebp - 0x1a8], 0x78ef
jle 0x1003eece
and dword [ebp - 0x70], 0
jmp 0x1003ee04
mov eax, dword [ebp - 0x70]
inc eax
mov dword [ebp - 0x70], eax
cmp dword [ebp - 0x70], 0x6a3c
jge 0x1003eebf
and dword [ebp - 0x48], 0
jmp 0x1003ee1e
mov eax, dword [ebp - 0x48]
inc eax
mov dword [ebp - 0x48], eax
cmp dword [ebp - 0x48], 0x393b
jge 0x1003eeba
and dword [ebp - 0x5c], 0
jmp 0x1003ee38
mov eax, dword [ebp - 0x5c]
inc eax
mov dword [ebp - 0x5c], eax
cmp dword [ebp - 0x5c], 0x4aaf
jge 0x1003eeb5
and dword [ebp - 0x58], 0
jmp 0x1003ee4e
mov eax, dword [ebp - 0x58]
inc eax
mov dword [ebp - 0x58], eax
cmp dword [ebp - 0x58], 0x21ad
jge 0x1003eeb0
mov eax, dword [ebp - 0x70]
imul eax, dword [ebp - 0x48]
imul eax, dword [ebp - 0x5c]
or eax, dword [ebp - 0x58]
cdq
mov dword [ebp - 0x200], eax
mov dword [ebp - 0x1fc], edx
push dword [ebp - 0x1fc]
push dword [ebp - 0x200]
lea ecx, [ebp - 0x35c]
call fcn.1000d1b0
pop ecx
pop ecx
mov dword [ebp - 0x21c], eax
mov ecx, dword [ebp - 0x21c]
call fcn.100332c2
push eax
call fcn.10054ad6
pop ecx
lea ecx, [ebp - 0x35c]
call fcn.100332b8
jmp 0x1003ee47
jmp 0x1003ee31
jmp 0x1003ee17
jmp 0x1003edfd
push 1
push 0
push 0x921
call dword [0x10617258]
mov dword [ebp - 0x1a0], 0x1d2a6f9a
mov byte [ebp - 4], 5
cmp dword [ebp - 0x1a8], 0x742a
jge 0x1003eef4
push dword [ebp - 0x224]
call fcn.10054ad6
pop ecx
jmp 0x1003ef10
mov dword [ebp - 4], 4
jmp 0x1003ef20
mov dword [ebp - 0x124], 8
mov dword [ebp - 0x19c], 2
mov dword [ebp - 0x1a4], 0xffffffff
lea eax, [ebp - 0x1a0]
push eax
lea eax, [ebp - 0x124]
push eax
lea eax, [ebp - 0x19c]
push eax
lea eax, [ebp - 0x24]
push eax
lea eax, [ebp - 0x1c]
push eax
lea eax, [ebp - 0x1b8]
push eax
lea eax, [ebp - 0x110]
push eax
call fcn.1003e461
add esp, 0x1c
push dword [ebp - 0x1c]
lea ecx, [ebp - 0x1b8]
call fcn.10033495
mov eax, dword [eax]
mov dword [ebp - 0x124], eax
cmp dword [ebp - 0x24], 0x395b915f
jle 0x1003efa2
cmp dword [ebp - 0x1a0], 0
jne 0x1003efa2
and dword [ebp - 0x174], 0
jmp 0x1003efac
mov dword [ebp - 0x174], 1
mov eax, dword [ebp - 0x174]
add eax, 5
cmp eax, 0xffffffff
jg 0x1003efc6
mov dword [ebp - 0x12c], 1
jmp 0x1003efcd
and dword [ebp - 0x12c], 0
mov eax, dword [ebp - 0x12c]
sub eax, dword [ebp - 0x19c]
jne 0x1003efed
mov eax, 0xbc12
test eax, eax
jne 0x1003efed
and dword [ebp - 0x134], 0
jmp 0x1003eff7
mov dword [ebp - 0x134], 1
mov eax, dword [ebp - 0x110]
cmp dword [ebp - 0x134], eax
jl 0x1003f011
mov dword [ebp - 0x17c], 1
jmp 0x1003f018
and dword [ebp - 0x17c], 0
mov eax, dword [ebp - 0x2c]
cmp dword [ebp - 0x17c], eax
jle 0x1003f02f
mov dword [ebp - 0x13c], 1
jmp 0x1003f036
and dword [ebp - 0x13c], 0
mov eax, dword [ebp - 0x1a4]
cmp dword [ebp - 0x13c], eax
jne 0x1003f050
mov dword [ebp - 0x1c0], 1
jmp 0x1003f057
and dword [ebp - 0x1c0], 0
cmp dword [ebp - 0x1c0], 0x9d28
jl 0x1003f06f
mov dword [ebp - 0x144], 1
jmp 0x1003f076
and dword [ebp - 0x144], 0
mov eax, dword [ebp - 0x1c]
cmp dword [ebp - 0x144], eax
jle 0x1003f08d
mov dword [ebp - 0x184], 1
jmp 0x1003f094
and dword [ebp - 0x184], 0
mov eax, dword [ebp - 0x24]
cmp dword [ebp - 0x184], eax
jl 0x1003f0ab
mov dword [ebp - 0x14c], 1
jmp 0x1003f0b2
and dword [ebp - 0x14c], 0
push dword [ebp - 0x1c]
lea ecx, [ebp - 0x1b8]
call fcn.10033495
mov ecx, dword [ebp - 0x14c]
cmp ecx, dword [eax]
jg 0x1003f0d6
mov dword [ebp - 0x23c], 1
jmp 0x1003f0dd
and dword [ebp - 0x23c], 0
push dword [ebp - 0x1c]
lea ecx, [ebp - 0x1b8]
call fcn.10033495
or eax, 0xffffffff
je 0x1003f0f7
push 9
pop eax
test eax, eax
jne 0x1003f10f
cmp dword [ebp - 0x1a4], 0
jne 0x1003f10f
cmp dword [ebp - 0x1c], 0
jne 0x1003f10f
and dword [ebp - 0x154], 0
jmp 0x1003f119
mov dword [ebp - 0x154], 1
mov eax, dword [ebp - 0x1c]
imul eax, dword [ebp - 0x154]
cmp eax, 0x8ea4
jge 0x1003f136
mov dword [ebp - 0x18c], 1
jmp 0x1003f13d
and dword [ebp - 0x18c], 0
mov eax, dword [ebp - 0x18c]
mov dword [ebp - 0x110], eax
jmp 0x1003edc2
mov dword [ebp - 0x1c], 0xffffffe4
jmp 0x1003f15e
mov eax, dword [ebp - 0x1c]
inc eax
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 0xffffffee
jle 0x1003f216
mov dword [ebp - 0x1ec], 0xffffffff
mov byte [ebp - 0x25], 0
movzx eax, byte [ebp - 0x25]
test eax, eax
je 0x1003f1ae
push 0x19
push 0x207f
push 0x648
push 0x520
push 0x259e
push 0x17c3
push 0x1a6c
push 0x713
push 0x1c12
call dword [0x1061704c]
mov dword [ebp - 0x24], 2
jmp 0x1003f1be
mov eax, dword [ebp - 0x24]
dec eax
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 0
jl 0x1003f211
push dword [ebp - 0x24]
lea ecx, [ebp - 0x1b8]
call fcn.10033495
cmp dword [eax], 0
je 0x1003f1d9
jmp 0x1003f211
mov dword [ebp - 0x2c], 2
jmp 0x1003f1e9
mov eax, dword [ebp - 0x2c]
dec eax
mov dword [ebp - 0x2c], eax
cmp dword [ebp - 0x2c], 0
jl 0x1003f20f
lea eax, [ebp - 0x24]
push eax
lea eax, [ebp - 0x2c]
push eax
lea eax, [ebp - 0x1b8]
push eax
lea eax, [ebp - 0x1ec]
push eax
call fcn.1003e64c
add esp, 0x10
jmp 0x1003f1e2
jmp 0x1003f1b7
jmp 0x1003f157
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x1b8]
call fcn.10033479
xor eax, eax
inc eax
shl eax, 0
movzx eax, byte [ebp + eax - 0x10c]
or eax, 0x9f
xor ecx, ecx
inc ecx
shl ecx, 0
movzx ecx, byte [ebp + ecx - 0x10c]
and ecx, 0x9f
sub eax, ecx
xor ecx, ecx
inc ecx
imul ecx, ecx, 0
movzx ecx, byte [ebp + ecx - 0x10c]
mov byte [ebp + ecx - 0x2a4], al
mov dword [ebp - 0x18], 2
and dword [ebp - 0x44], 0
jmp 0x1003f278
mov eax, dword [ebp - 0x18]
inc eax
inc eax
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 0x97
jae 0x1003f34a
xor eax, eax
inc eax
imul eax, eax, 0
movzx eax, byte [ebp + eax - 0x10c]
lea eax, [eax + eax + 2]
cmp dword [ebp - 0x18], eax
jne 0x1003f2c2
mov eax, dword [ebp - 0x18]
movzx eax, byte [ebp + eax - 0x10c]
inc eax
mov dword [ebp - 0x44], eax
mov eax, dword [ebp - 0x18]
movzx eax, byte [ebp + eax - 0x10c]
mov ecx, dword [ebp - 0x18]
lea eax, [ecx + eax - 1]
mov dword [ebp - 0x18], eax
jmp 0x1003f270
mov eax, dword [ebp - 0x18]
movzx eax, byte [ebp + eax - 0x10b]
mov ecx, dword [ebp - 0x18]
sub ecx, dword [ebp - 0x44]
movzx ecx, byte [ebp + ecx - 0x10e]
movsx ecx, byte [ebp + ecx - 0x2a4]
add eax, ecx
mov ecx, dword [ebp - 0x18]
movzx ecx, byte [ebp + ecx - 0x10b]
mov edx, dword [ebp - 0x18]
sub edx, dword [ebp - 0x44]
movzx edx, byte [ebp + edx - 0x10e]
movsx edx, byte [ebp + edx - 0x2a4]
and ecx, edx
sub eax, ecx
mov ecx, dword [ebp - 0x18]
movzx ecx, byte [ebp + ecx - 0x10b]
mov edx, dword [ebp - 0x18]
sub edx, dword [ebp - 0x44]
movzx edx, byte [ebp + edx - 0x10e]
movsx edx, byte [ebp + edx - 0x2a4]
and ecx, edx
sub eax, ecx
mov ecx, dword [ebp - 0x18]
movzx ecx, byte [ebp + ecx - 0x10c]
mov byte [ebp + ecx - 0x2a4], al
and dword [ebp - 0x44], 0
jmp 0x1003f270
xor eax, eax
inc eax
imul eax, eax, 0x1a
mov byte [ebp + eax - 0x2a4], 0
lea eax, [ebp - 0x2a4]
push eax
lea ecx, [ebp - 0x32c]
call fcn.10043df0
mov dword [ebp - 4], 7
push 3
lea ecx, [ebp - 0x1cc]
call fcn.100333f7
mov byte [ebp - 4], 8
mov dword [ebp - 0x68], 0xffffffff
mov dword [ebp - 0x194], 0x4c9d8d92
mov dword [ebp - 0x114], 0x65c3421a
mov dword [ebp - 0x118], 0
mov dword [ebp - 0x128], 0xffffffff
lea eax, [ebp - 0x1cc]
push eax
lea eax, [ebp - 0x3c]
push eax
call fcn.1003e6dd
pop ecx
pop ecx
mov dword [ebp - 0x3c], 0
jmp 0x1003f3d3
mov eax, dword [ebp - 0x3c]
inc eax
mov dword [ebp - 0x3c], eax
cmp dword [ebp - 0x3c], 4
jge 0x1003f3e9
mov eax, dword [ebp - 0x3c]
mov dword [ebp + eax*4 - 0x314], 0x79df9481
jmp 0x1003f3cc
push 0
lea ecx, [ebp - 0x1cc]
call fcn.10033495
mov eax, dword [eax]
mov dword [ebp - 0x68], eax
mov esi, dword [ebp - 0x68]
push 1
lea ecx, [ebp - 0x1cc]
call fcn.10033495
cmp esi, dword [eax]
jl 0x1003f41b
mov dword [ebp - 0x15c], 1
jmp 0x1003f422
and dword [ebp - 0x15c], 0
push 2
lea ecx, [ebp - 0x1cc]
call fcn.10033495
mov eax, dword [eax]
imul eax, dword [ebp - 0x15c]
test eax, eax
je 0x1003f552
push 0
lea ecx, [ebp - 0x1cc]
call fcn.10033495
cmp dword [eax], 0
jne 0x1003f4e3
cmp dword [ebp - 0x68], 0xb947
je 0x1003f46b
mov dword [ebp - 0x1bc], 1
jmp 0x1003f472
and dword [ebp - 0x1bc], 0
mov eax, dword [ebp - 0x118]
imul eax, dword [ebp - 0x1bc]
cmp eax, dword [ebp - 0x118]
jg 0x1003f493
mov dword [ebp - 0x164], 1
jmp 0x1003f49a
and dword [ebp - 0x164], 0
mov eax, dword [ebp - 0x194]
cmp dword [ebp - 0x164], eax
jg 0x1003f4b4
mov dword [ebp - 0x1e8], 1
jmp 0x1003f4bb
and dword [ebp - 0x1e8], 0
mov eax, dword [ebp - 0x118]
mov dword [ebp - 0x2bc], eax
or eax, 0xffffffff
imul eax, eax, 0
test eax, eax
jne 0x1003f4e3
cmp dword [ebp - 0x194], 0
jne 0x1003f4e3
and dword [ebp - 0x16c], 0
jmp 0x1003f4ed
mov dword [ebp - 0x16c], 1
mov eax, dword [ebp - 0x114]
inc eax
mov dword [ebp - 0x114], eax
mov eax, dword [ebp - 0x114]
cmp eax, dword [ebp - 0x16c]
jge 0x1003f514
mov dword [ebp - 0x1ac], 1
jmp 0x1003f51b
and dword [ebp - 0x1ac], 0
push 4
pop eax
imul eax, eax, 3
mov eax, dword [ebp + eax - 0x314]
cmp dword [ebp - 0x1ac], eax
jge 0x1003f53c
mov dword [ebp - 0x120], 1
jmp 0x1003f543
and dword [ebp - 0x120], 0
mov eax, dword [ebp - 0x120]
sub eax, 6
cmp eax, dword [ebp - 0x128]
mov esi, dword [ebp - 0x68]
sub esi, dword [ebp - 0x128]
push 2
lea ecx, [ebp - 0x1cc]
call fcn.10033495
mov dword [eax], esi
mov byte [ebp - 4], 7
lea ecx, [ebp - 0x1cc]
call fcn.10033479
and dword [ebp - 0x60], 0
jmp 0x1003f586
mov eax, dword [ebp - 0x60]
inc eax
mov dword [ebp - 0x60], eax
cmp dword [ebp - 0x60], 0x1b
jae 0x1003f599
mov eax, dword [ebp - 0x60]
mov byte [ebp + eax - 0x2a4], 0
jmp 0x1003f57f
mov dword [ebp - 0x50], 0xffffffff
mov dword [ebp - 0x2ec], 0xb4074dd
mov dword [ebp - 0x50], 0x12
jmp 0x1003f5ba
mov eax, dword [ebp - 0x50]
dec eax
mov dword [ebp - 0x50], eax
cmp dword [ebp - 0x50], 3
jl 0x1003f5d3
mov byte [ebp - 0x26], 0
movzx eax, byte [ebp - 0x26]
test eax, eax
je 0x1003f5d1
call fcn.1003e725
jmp 0x1003f5b3
push 0x100075d9
lea ecx, [ebp - 0x304]
call fcn.10043df0
mov byte [ebp - 4], 9
push 0
push 0x2660
lea eax, [ebp - 0x32c]
push eax
lea eax, [ebp - 0x2c4]
push eax
lea eax, [ebp + 0xc]
push eax
lea eax, [ebp - 0x304]
push eax
call fcn.1003fc8f
add esp, 0x18
mov dword [ebp - 0x40], 0xfffffffa
mov dword [ebp - 0x2d0], 0xffffffff
mov dword [ebp - 0x2cc], 1
mov dword [ebp - 0x2d8], 0
mov dword [ebp - 0x248], 1
mov dword [ebp - 0x2e0], 0xffffffff
mov dword [ebp - 0x2ac], 0x52b3395c
mov dword [ebp - 0x6c], 0xffff
push 1
lea ecx, [ebp - 0x27c]
call fcn.100333f7
mov byte [ebp - 4], 0xa
mov dword [ebp - 0x20], 0
jmp 0x1003f67a
mov eax, dword [ebp - 0x20]
inc eax
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 2
jge 0x1003f68d
mov eax, dword [ebp - 0x20]
mov dword [ebp + eax*4 - 0x38], 0xbef7d651
jmp 0x1003f673
mov dword [ebp - 0x20], 0
jmp 0x1003f69d
mov eax, dword [ebp - 0x20]
inc eax
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 1
jge 0x1003f6b9
push dword [ebp - 0x20]
lea ecx, [ebp - 0x27c]
call fcn.10033495
mov dword [eax], 0x887e
jmp 0x1003f696
mov dword [ebp - 0x40], 0xfffffffd
jmp 0x1003f6c9
mov eax, dword [ebp - 0x40]
dec eax
mov dword [ebp - 0x40], eax
cmp dword [ebp - 0x40], 0xffffffe9
jge 0x1003fbcf
mov dword [ebp - 0x130], 0x5455
mov dword [ebp - 0x1f0], 0x1000ad24
cmp dword [ebp - 0x130], 0x54e3
jle 0x1003f789
and dword [ebp - 0x54], 0
jmp 0x1003f704
mov eax, dword [ebp - 0x54]
inc eax
mov dword [ebp - 0x54], eax
cmp dword [ebp - 0x54], 0x6994
jge 0x1003f777
and dword [ebp - 0x4c], 0
jmp 0x1003f71a
mov eax, dword [ebp - 0x4c]
inc eax
mov dword [ebp - 0x4c], eax
cmp dword [ebp - 0x4c], 0x2c3a
jge 0x1003f775
mov eax, dword [ebp - 0x54]
imul eax, dword [ebp - 0x4c]
cdq
mov dword [ebp - 0x20c], eax
mov dword [ebp - 0x208], edx
push dword [ebp - 0x208]
push dword [ebp - 0x20c]
lea ecx, [ebp - 0x344]
call fcn.1000d1b0
pop ecx
pop ecx
mov dword [ebp - 0x228], eax
mov ecx, dword [ebp - 0x228]
call fcn.100332c2
push eax
call fcn.10054ad6
pop ecx
lea ecx, [ebp - 0x344]
call fcn.100332b8
jmp 0x1003f713
jmp 0x1003f6fd
push 0x1516
push 0x1e31
push 0
call dword [0x10617064]
mov dword [ebp - 0x14], 0xffffffff
mov byte [ebp - 4], 0xb
cmp dword [ebp - 0x130], 0x5143
jge 0x1003f7ac
push dword [ebp - 0x1f0]
call fcn.10054ad6
pop ecx
jmp 0x1003f7c8
mov dword [ebp - 4], 0xa
jmp 0x1003f7d8
mov dword [ebp - 0x1e0], 1
mov dword [ebp - 0x1e4], 0x2a6add33
mov dword [ebp - 0x170], 0x64db2a93
mov dword [ebp - 0x240], 0xba600ac8
cmp dword [ebp - 0x14], 0
je 0x1003f827
mov dword [ebp - 0x244], 0xc3ee
lea eax, [ebp - 0x14]
push eax
lea eax, [ebp - 0x244]
push eax
call fcn.1003e730
pop ecx
pop ecx
jmp 0x1003f9b1
push 1
lea ecx, [ebp - 0x234]
call fcn.100333f7
mov byte [ebp - 4], 0xd
mov dword [ebp - 0x64], 0
jmp 0x1003f848
mov eax, dword [ebp - 0x64]
inc eax
mov dword [ebp - 0x64], eax
cmp dword [ebp - 0x64], 1
jge 0x1003f861
push dword [ebp - 0x64]
lea ecx, [ebp - 0x234]
call fcn.10033495
or dword [eax], 0xffffffff
jmp 0x1003f841
mov dword [ebp - 0x14], 0
jmp 0x1003f871
mov eax, dword [ebp - 0x14]
inc eax
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 1
jg 0x1003f9a2
mov dword [ebp - 0x238], 0x9cee
mov eax, dword [ebp - 0x14]
cmp dword [ebp + eax*4 - 0x38], 0
je 0x1003f977
mov eax, dword [ebp - 0x40]
mov dword [ebp - 0x2b0], eax
push 0
lea ecx, [ebp - 0x234]
call fcn.10033495
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp + eax*4 - 0x38]
mov dword [ebp - 0x2a8], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x38], 0xffffffff
jne 0x1003f8cf
mov dword [ebp - 0x138], 1
jmp 0x1003f8d6
and dword [ebp - 0x138], 0
mov esi, dword [ebp - 0x14]
imul esi, dword [ebp - 0x138]
push 0
lea ecx, [ebp - 0x234]
call fcn.10033495
cmp esi, dword [eax]
jne 0x1003f8fd
mov dword [ebp - 0x1dc], 1
jmp 0x1003f904
and dword [ebp - 0x1dc], 0
mov eax, dword [ebp - 0x14]
mov dword [ebp - 0x2c0], eax
push 0
lea ecx, [ebp - 0x234]
call fcn.10033495
mov ecx, dword [ebp - 0x238]
cmp dword [eax], ecx
je 0x1003f930
mov dword [ebp - 0x140], 1
jmp 0x1003f937
and dword [ebp - 0x140], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x38]
cmp dword [ebp - 0x140], eax
jg 0x1003f955
mov dword [ebp - 0x204], 1
jmp 0x1003f95c
and dword [ebp - 0x204], 0
mov eax, dword [ebp - 0x14]
mov dword [ebp - 0x2c8], eax
cmp dword [ebp - 0x14], 6
je 0x1003f977
mov dword [ebp - 0x148], 1
jmp 0x1003f97e
and dword [ebp - 0x148], 0
mov eax, dword [ebp - 0x14]
mov ecx, dword [ebp - 0x148]
mov dword [ebp + eax*4 - 0x38], ecx
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x38], 0
je 0x1003f99d
jmp 0x1003f86a
jmp 0x1003f86a
mov byte [ebp - 4], 0xa
lea ecx, [ebp - 0x234]
call fcn.10033479
mov dword [ebp - 0x14], 0
jmp 0x1003f9c1
mov eax, dword [ebp - 0x14]
inc eax
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 1
jg 0x1003fbca
mov dword [ebp - 0x150], 0x149cff29
mov dword [ebp - 0x2e8], 0xc3d8d58
mov dword [ebp - 0x24c], 0xffffffff
push 4
lea ecx, [ebp - 0x258]
call fcn.100333f7
mov byte [ebp - 4], 0xe
lea eax, [ebp - 0x258]
push eax
lea eax, [ebp - 0x2d4]
push eax
call fcn.1003e759
pop ecx
pop ecx
cmp dword [ebp - 0x150], 0
jne 0x1003fa2a
cmp dword [ebp - 0x150], 0
jne 0x1003fa2a
and dword [ebp - 0x158], 0
jmp 0x1003fa34
mov dword [ebp - 0x158], 1
mov eax, dword [ebp - 0x14]
mov ecx, dword [ebp - 0x158]
mov dword [ebp + eax*4 - 0x38], ecx
mov eax, dword [ebp - 0x6c]
push 4
pop ecx
shl ecx, 0
mov ecx, dword [ebp + ecx - 0x38]
mov edx, dword [ebp - 0x6c]
dec edx
mov dword [ebp - 0x6c], edx
cmp ecx, eax
jge 0x1003fa6e
cmp dword [ebp - 0x170], 0
je 0x1003fa6e
mov dword [ebp - 0x160], 1
jmp 0x1003fa75
and dword [ebp - 0x160], 0
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x24c]
cmp dword [ebp + eax - 0x38], ecx
je 0x1003fa93
mov dword [ebp - 0x210], 1
jmp 0x1003fa9a
and dword [ebp - 0x210], 0
cmp dword [ebp - 0x160], 0x603f
jne 0x1003fab2
mov dword [ebp - 0x168], 1
jmp 0x1003fab9
and dword [ebp - 0x168], 0
push 0
lea ecx, [ebp - 0x258]
call fcn.10033495
mov ecx, dword [ebp - 0x168]
add ecx, dword [eax]
jne 0x1003fadb
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x38], 0
cmp dword [ebp - 0x240], 0xffff
jbe 0x1003faf3
mov dword [ebp - 0x218], 1
jmp 0x1003fafa
and dword [ebp - 0x218], 0
mov eax, dword [ebp - 0x248]
mov dword [ebp - 0x2e4], eax
push 2
lea ecx, [ebp - 0x258]
call fcn.10033495
mov dword [eax], 0x59018101
mov eax, dword [ebp - 0x170]
mov dword [ebp - 0x2b4], eax
or eax, 0xffffffff
jne 0x1003fb36
mov dword [ebp - 0x220], 1
jmp 0x1003fb3d
and dword [ebp - 0x220], 0
mov eax, dword [ebp - 0x1e0]
mov dword [ebp - 0x2dc], eax
xor eax, eax
jne 0x1003fb5f
cmp dword [ebp - 0x1e4], 0
jne 0x1003fb5f
and dword [ebp - 0x178], 0
jmp 0x1003fb69
mov dword [ebp - 0x178], 1
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp + eax*4 - 0x38]
cmp dword [ebp - 0x178], eax
je 0x1003fb84
mov dword [ebp - 0x11c], 1
jmp 0x1003fb8b
and dword [ebp - 0x11c], 0
mov eax, dword [ebp - 0x6c]
cmp dword [ebp - 0x11c], eax
je 0x1003fba2
mov dword [ebp - 0x188], 1
jmp 0x1003fba9
and dword [ebp - 0x188], 0
mov eax, dword [ebp - 0x14]
mov ecx, dword [ebp - 0x188]
mov dword [ebp + eax*4 - 0x38], ecx
mov byte [ebp - 4], 0xa
lea ecx, [ebp - 0x258]
call fcn.10033479
jmp 0x1003f9ba
jmp 0x1003f6c2
push 0
lea ecx, [ebp - 0x27c]
call fcn.10033495
mov dword [ebp - 0x190], eax
mov eax, dword [ebp - 0x190]
mov eax, dword [eax]
inc eax
mov ecx, dword [ebp - 0x190]
mov dword [ecx], eax
mov byte [ebp - 4], 9
lea ecx, [ebp - 0x27c]
call fcn.10033479
lea eax, [ebp - 0x304]
push eax
mov ecx, dword [ebp + 8]
call fcn.10043e1f
mov eax, dword [ebp - 0x198]
or eax, 1
mov dword [ebp - 0x198], eax
mov byte [ebp - 4], 7
lea ecx, [ebp - 0x304]
call fcn.10043e78
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x32c]
call fcn.10043e78
mov eax, dword [ebp + 8]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret