Function at 0x1003e5e4
Capabilities:
Accept command line arguments

Disassembly:
mov eax, 0x1005f8d6
call fcn.1005dc80
sub esp, 0x328
cmp byte [ebp + 8], 0
push ebx
push esi
push edi
mov esi, ecx
mov dword [ebp - 0x10], esp
mov byte [ebp - 0x94], dl
mov dword [ebp - 0x28], esi
je 0x1003e839
cmp byte [ebp + 0x14], 0
je 0x1003e65a
mov edi, dword [ebp + 0xc]
mov esi, dword [edi + 4]
cmp dword [edi], esi
je 0x1003ff1d
mov ebx, dword [ebp + 0x2c]
push 0x18
pop ecx
sub esi, dword [edi]
mov eax, dword [ebx + 4]
sub eax, dword [ebx]
cdq
idiv ecx
push 0x18
mov ecx, eax
mov eax, esi
cdq
pop esi
idiv esi
cmp eax, ecx
jne 0x1003ff1d
push edi
push ebx
push ecx
mov ecx, dword [ebp + 0x24]
push 1
call fcn.1003e296
add esp, 0x10
jmp 0x1003ff1d
mov dword [ebp + 8], 0x2440
cmp dword [ebp + 8], 0x24a2
jle 0x1003e6ef
push 0x108a
push 0x1934
push 0xf5e
push 0x2358
push 0x2199
call dword [sym.imp.GDI32.dll_Rectangle]
xor ebx, ebx
mov esi, 0x10079ad8
mov dword [ebp - 0x20], ebx
mov dword [ebp + 8], ebx
mov dword [ebp - 0x14], 0x41cc
mov edi, dword [ebp + 8]
mov dword [ebp - 0x18], ebx
mov dword [ebp - 0x18], edi
mov dword [ebp - 0x24], 0x1e13
mov eax, edi
mov ecx, esi
cdq
push edx
push eax
call fcn.1000fde8
add edi, ebx
dec dword [ebp - 0x24]
jne 0x1003e6b1
mov edi, dword [ebp + 8]
dec ebx
cmp ebx, 0xffffee37
jg 0x1003e6a7
mov edi, dword [ebp - 0x20]
add dword [ebp + 8], edi
dec dword [ebp - 0x14]
push 0
pop ebx
jne 0x1003e6a1
inc edi
mov dword [ebp - 0x20], edi
cmp edi, 0x28e9
jl 0x1003e697
mov esi, dword [ebp - 0x28]
jmp 0x1003e6f1
xor ebx, ebx
sub esp, 0x18
mov ecx, esp
push dword [ebp + 0x20]
call fcn.1000fefd
lea ecx, [ebp - 0x104]
call fcn.1003ce4c
add esp, 0x18
mov dword [ebp - 4], ebx
mov eax, dword [ebp - 0x100]
cmp dword [ebp - 0x104], eax
je 0x1003e832
push dword [ebp + 8]
xor ecx, ecx
mov dword [ebp - 0x1e4], 7
push eax
push dword [ebp - 0x104]
mov word [ebp - 0x1f8], cx
lea ecx, [ebp - 0x1f8]
mov dword [ebp - 0x1e8], ebx
call fcn.1003b4a4
lea edx, [ebp - 0x1f8]
mov byte [ebp - 4], 1
mov ecx, esi
call fcn.1003d822
test eax, eax
jns 0x1003e824
mov dword [ebp + 8], 0x5566
cmp dword [ebp + 8], 0x583a
jle 0x1003e800
mov esi, ebx
mov dword [ebp - 0x40], ebx
mov edi, ebx
mov dword [ebp - 0x48], ebx
mov ecx, ebx
mov dword [ebp + 8], ebx
mov eax, edi
mov dword [ebp - 0x68], ebx
cdq
mov edi, esi
idiv ecx
mov esi, ebx
sub edi, edx
mov eax, edi
lea ecx, [ebp - 0x31c]
and eax, esi
cdq
push edx
push eax
call fcn.10001b3f
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x1003e7b5
mov eax, dword [eax]
push eax
call fcn.10047293
pop ecx
push ebx
push 1
lea ecx, [ebp - 0x31c]
call fcn.1001084f
inc esi
cmp esi, 0x11d2
jl 0x1003e799
mov ecx, dword [ebp + 8]
mov esi, dword [ebp - 0x40]
inc ecx
mov edi, dword [ebp - 0x48]
mov dword [ebp + 8], ecx
cmp ecx, 0x353b
jl 0x1003e78b
inc edi
mov dword [ebp - 0x48], edi
cmp edi, 0x6d8b
jl 0x1003e786
inc esi
mov dword [ebp - 0x40], esi
cmp esi, 0x2f6f
jl 0x1003e781
mov eax, dword [ebp + 0x28]
lea ecx, [ebp - 0x1f8]
push ebx
push 1
mov byte [eax], 1
call fcn.10010a23
lea ecx, [ebp - 0x104]
call fcn.10026d37
jmp 0x1003ff1d
push ebx
push 1
lea ecx, [ebp - 0x1f8]
call fcn.10010a23
mov eax, dword [ebp + 0x28]
mov byte [eax], bl
jmp 0x1003e814
test dl, dl
je 0x1003ef5a
mov edi, dword [ebp + 0x18]
xor ebx, ebx
mov dword [ebp + 8], 0x2e39
mov esi, 0x10079ad8
cmp dword [ebp + 8], 0x2ecb
mov dword [ebp - 0x14], edi
jle 0x1003e891
mov edi, ebx
mov dword [ebp - 0x18], ebx
mov ecx, ebx
mov eax, edi
sar eax, cl
mov ecx, esi
cdq
push edx
push eax
call fcn.1000fde8
inc ebx
cmp ebx, 0x7d00
jl 0x1003e863
inc edi
push 0
pop ebx
cmp edi, 0x2490
jl 0x1003e860
call dword [sym.imp.KERNEL32.dll_GetCommandLineA]
mov edi, dword [ebp + 0x18]
mov ecx, dword [ebp + 0x30]
mov eax, dword [ecx]
cmp eax, dword [ecx + 4]
je 0x1003ef14
lea eax, [ebp - 0x90]
mov dword [ebp - 0x90], ebx
push eax
push 0x1000
lea ecx, [ebp - 0xa8]
mov dword [ebp - 0xa8], ebx
mov dword [ebp - 0xa4], ebx
mov dword [ebp - 0xa0], ebx
call fcn.10010c71
mov dword [ebp - 4], 6
mov edi, 0x2ee7
mov eax, dword [ebp - 0xa4]
sub eax, dword [ebp - 0xa8]
push dword [ebp - 0xa8]
sar eax, 1
push eax
push edi
push 0x387f
call fcn.10039052
pop ecx
pop ecx
call eax
push dword [ebp - 0xa8]
lea ecx, [ebp - 0x168]
call fcn.1001d3bd
push 0x28e8
mov byte [ebp - 4], 7
call fcn.1000fc1f
movzx eax, ax
pop ecx
mov dword [ebp - 0xb0], eax
lea eax, [ebp - 0xb0]
push eax
push 1
sub esp, 0x10
lea eax, [ebp - 0x168]
push 0x18e6
push eax
call fcn.1003de32
lea eax, [ebp - 0x168]
push eax
push 1
push 0x3d57
call fcn.1003da0e
add esp, 0x2c
lea eax, [ebp - 0x168]
cmp dword [ebp - 0x154], 8
cmovae eax, dword [ebp - 0x168]
push ebx
push eax
push edi
push 0x39b2
call fcn.10039052
pop ecx
pop ecx
call eax
push ecx
push 0x2967
lea eax, [ebp - 0x168]
mov dl, 1
push eax
push 0x123e
push 0x1999
push ecx
push ecx
lea ecx, [ebp - 0xb0]
call fcn.1003df1e
lea eax, [ebp - 0xac]
mov dword [ebp - 0xac], ebx
push eax
mov eax, dword [ebp + 0x30]
mov ecx, dword [eax + 4]
sub ecx, dword [eax]
mov edx, dword [eax]
call fcn.10040b96
add esp, 0x20
mov byte [ebp - 0x35], bl
mov eax, ebx
mov dword [ebp - 0x24], ebx
cmp eax, 0x12c
jae 0x1003ef09
lea eax, [ebp - 0x168]
push eax
lea ecx, [ebp - 0x198]
call fcn.1000fefd
push 0x10
pop edx
lea ecx, [ebp - 0x2cc]
mov byte [ebp - 4], 8
call fcn.1001fab7
push ecx
push ecx
lea eax, [ebp - 0x2cc]
mov byte [ebp - 4], 9
push eax
lea ecx, [ebp - 0x198]
call fcn.1002355d
push 0x65
pop eax
push 2
mov word [ebp - 0x58], 0x8901
mov byte [ebp - 0x56], bl
mov dword [ebp - 0x55], 0x356024b
mov byte [ebp - 0x51], 0x1d
mov word [ebp - 0xc2], ax
pop edi
movzx eax, byte [ebp + edi - 0x5a]
movzx ecx, byte [ebp + edi - 0x57]
movzx eax, word [ebp + eax*2 - 0xc4]
mov edx, eax
and eax, ecx
or edx, ecx
sub edx, eax
movzx eax, byte [ebp + edi - 0x58]
add edi, 2
mov word [ebp + eax*2 - 0xc4], dx
cmp edi, 8
jb 0x1003ea34
xor eax, eax
mov dword [ebp - 0x240], 7
mov word [ebp - 0xbc], ax
lea ecx, [ebp - 0x254]
mov word [ebp - 0x254], ax
lea eax, [ebp - 0xc4]
push eax
mov dword [ebp - 0x244], ebx
call fcn.1001d578
push ecx
push ecx
lea eax, [ebp - 0x254]
mov byte [ebp - 4], 0xa
push eax
lea ecx, [ebp - 0x198]
call fcn.1002355d
push ebx
push 1
lea ecx, [ebp - 0x254]
mov byte [ebp - 4], 9
call fcn.10010a23
xor eax, eax
lea edi, [ebp - 0xc4]
cmp dword [ebp - 0x184], 8
stosd dword es:[edi], eax
push ebx
push 0x80
push 2
stosd dword es:[edi], eax
push ebx
push ebx
push 0x40000000
stosw word es:[edi], ax
lea eax, [ebp - 0x198]
cmovae eax, dword [ebp - 0x198]
push eax
push 0x2ee7
push 0x507b
call fcn.10039052
pop ecx
pop ecx
call eax
mov edi, eax
mov dword [ebp - 0x18], edi
cmp edi, 0xffffffff
je 0x1003eedd
mov dword [ebp + 8], 0x648a
cmp dword [ebp + 8], 0x6611
jle 0x1003eb78
mov edi, ebx
mov esi, ebx
mov ecx, esi
mov eax, edi
shl eax, cl
lea ecx, [ebp - 0x2ec]
cdq
push edx
push eax
call fcn.10001b3f
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x1003eb42
mov eax, dword [eax]
push eax
call fcn.10047293
pop ecx
push ebx
push 1
lea ecx, [ebp - 0x2ec]
call fcn.1001084f
inc esi
cmp esi, 0x3149
jl 0x1003eb24
inc edi
cmp edi, 0x6659
jl 0x1003eb22
push ebx
mov esi, 0x10079ad8
call dword [sym.imp.ole32.dll_CoInitialize]
mov edi, dword [ebp - 0x18]
cmp dword [ebp + 8], 0x6378
jge 0x1003eb8c
push str.ytldnp_tjm_utgixtevp
call fcn.10047293
pop ecx
push ebx
lea eax, [ebp - 0x258]
mov dword [ebp - 4], 9
push eax
push dword [ebp - 0xac]
mov eax, dword [ebp + 0x30]
push dword [eax]
push edi
push 0x2ee7
push 0x51ae
call fcn.10039052
pop ecx
pop ecx
call eax
push edi
test eax, eax
push 0x2ee7
push 0x3ae5
setne byte [ebp + 0xb]
call fcn.10039052
pop ecx
pop ecx
call eax
cmp byte [ebp + 0xb], 0
je 0x1003eedd
push 0x22
pop eax
mov word [ebp - 0x9c], ax
xor eax, eax
mov byte [ebp - 0x8c], bl
mov byte [ebp - 0x8b], 0xb4
mov word [ebp - 0x9a], ax
mov dword [ebp + 8], 0x5809
cmp dword [ebp + 8], 0x590c
jle 0x1003ec3e
push ebx
push ebx
call dword [sym.imp.SHELL32.dll_CommandLineToArgvW]
mov edi, ebx
mov dword [ebp - 0x18], ebx
mov eax, ebx
mov ecx, esi
or eax, edi
cdq
push edx
push eax
call fcn.1000fde8
inc ebx
cmp ebx, 0x507
jl 0x1003ec1b
inc edi
push 0
pop ebx
cmp edi, 0x3b3f
jl 0x1003ec18
xor eax, eax
mov dword [ebp - 0x1c0], 7
mov word [ebp - 0x1d4], ax
lea ecx, [ebp - 0x1d4]
lea eax, [ebp - 0x9c]
mov dword [ebp - 0x1c4], ebx
push eax
call fcn.1001d578
mov byte [ebp - 4], 0xe
cmp dword [ebp + 8], 0x5670
jge 0x1003eca5
mov edx, str.xxfujjyzz_hpje_rainjud_dbkx_eclawxnu_pjzjw_vngz_csu_bzwaem
mov ecx, esi
call fcn.10012b8c
jmp 0x1003eca5
push ecx
lea eax, [ebp - 0x1d4]
mov dword [ebp - 4], 0xd
push eax
push ecx
push 0x16b
push 1
push ecx
lea edx, [ebp - 0x198]
mov dword [ebp - 0x9c], ebx
mov ecx, 0x4965
call fcn.1003df72
add esp, 0x18
mov dword [ebp + 8], 0x286d
cmp dword [ebp + 8], 0x2aae
jle 0x1003ed20
push ebx
push 0x56e
call dword [sym.imp.USER32.dll_BeginPaint]
mov edi, ebx
mov dword [ebp - 0x90], ebx
mov eax, edi
mov ecx, esi
cdq
idiv ebx
mov eax, edx
cdq
push edx
push eax
call fcn.1000fde8
inc ebx
cmp ebx, 0x3379
jl 0x1003ecfa
inc edi
push 0
pop ebx
cmp edi, 0x6350
jl 0x1003ecf4
push 0x53
pop eax
push 2
mov word [ebp - 0x7c], 0xf503
mov ecx, ebx
mov byte [ebp - 0x7a], bl
mov dword [ebp - 0x79], 0x10d0271
mov dword [ebp - 0x75], 0x77ae040f
mov word [ebp - 0x71], 0x254a
mov word [ebp - 0xca], ax
pop edi
cmp edi, 8
jne 0x1003ed59
push 5
pop ecx
push 0xb
pop edi
jmp 0x1003ed86
movzx edx, byte [ebp + edi - 0x7b]
mov eax, edi
sub eax, ecx
movzx eax, byte [ebp + eax - 0x7e]
movzx eax, word [ebp + eax*2 - 0xd0]
mov ecx, eax
and eax, edx
or ecx, edx
sub ecx, eax
movzx eax, byte [ebp + edi - 0x7c]
mov word [ebp + eax*2 - 0xd0], cx
mov ecx, ebx
add edi, 2
cmp edi, 0xd
jb 0x1003ed4c
xor eax, eax
mov byte [ebp - 4], 0x10
cmp dword [ebp + 8], 0x25e7
mov word [ebp - 0xc8], ax
jge 0x1003edce
mov edx, str.dfdl_jaoz_rvlc_mrasmre_yvefy_fpor_fgthj_oxyreq_air_czfbwzu
mov ecx, esi
call fcn.10012b8c
jmp 0x1003edce
mov dword [ebp - 4], 0xd
lea ecx, [ebp - 0x270]
xor eax, eax
mov dword [ebp - 0x25c], 7
mov word [ebp - 0x270], ax
lea eax, [ebp - 0xd0]
push eax
mov dword [ebp - 0x260], ebx
call fcn.1001d578
push ecx
push ecx
lea eax, [ebp - 0x270]
mov byte [ebp - 4], 0x12
push eax
lea ecx, [ebp - 0x1d4]
call fcn.1002355d
push ebx
push 1
lea ecx, [ebp - 0x270]
mov byte [ebp - 4], 0xd
call fcn.10010a23
xor eax, eax
lea edi, [ebp - 0xd0]
stosd dword es:[edi], eax
mov edx, 0x1843
push 0x4731
mov ecx, 0x53dc
stosd dword es:[edi], eax
stosw word es:[edi], ax
lea eax, [ebp - 0x35]
push eax
push 0x3561
push 1
push 1
push 0x5b5d
push 0x67d5
push 0x5e58
push 1
push 0x4f2d
push 0x6ab6
push 0x5350
push 0x6c7a
call fcn.1003dc30
add esp, 0x34
lea edx, [ebp - 0x168]
lea ecx, [ebp - 0x1d4]
call fcn.1003cedb
mov ecx, dword [ebp - 0x14]
push ebx
push 1
mov dword [ecx], eax
lea ecx, [ebp - 0x1d4]
call fcn.10010a23
push ebx
push 1
lea ecx, [ebp - 0x2cc]
call fcn.10010a23
push ebx
push 1
lea ecx, [ebp - 0x198]
call fcn.10010a23
push ebx
push 1
lea ecx, [ebp - 0x168]
call fcn.10010a23
lea ecx, [ebp - 0xa8]
call fcn.10010cf8
jmp 0x1003ff1d
push ebx
push 1
lea ecx, [ebp - 0x2cc]
call fcn.10010a23
push ebx
push 1
lea ecx, [ebp - 0x198]
mov byte [ebp - 4], 7
call fcn.10010a23
mov eax, dword [ebp - 0x24]
inc eax
mov dword [ebp - 0x24], eax
jmp 0x1003e9cc
mov ecx, dword [ebp + 0x18]
mov dword [ecx], 2
jmp 0x1003eebf
mov dword [ebp - 4], 0x13
cmp dword [ebp + 8], 0x2d92
jge 0x1003ef4f
mov edx, str.byqs_kqgkkrfg_jnxj_qoqlyq_ybqqos
mov ecx, esi
call fcn.10012b8c
jmp 0x1003ef4f
mov dword [edi], 1
jmp 0x1003ff1d
mov eax, dword [ebp + 0x1c]
lea ecx, [ebp - 0x1e0]
mov dword [ebp - 0x4c], eax
mov eax, dword [ebp + 0x10]
push 3
mov dword [ebp - 0xec], eax
call fcn.100100c6
mov dword [ebp - 4], 0x15
lea ecx, [ebp - 0x174]
xor ebx, ebx
inc ebx
mov dword [ebp - 0x14c], ebx
mov dword [ebp - 0x148], ebx
mov dword [ebp - 0x144], ebx
mov dword [ebp - 0x140], ebx
push ebx
call fcn.100100c6
push ecx
push ecx
lea eax, [ebp - 0x1e0]
mov byte [ebp - 4], 0x16
push ebx
push eax
lea ecx, [ebp - 0x30]
call fcn.1003b7cd
add esp, 0x10
xor ebx, ebx
mov dword [ebp - 0x30], ebx
jmp 0x1003efd5
mov eax, dword [ebp - 0x30]
mov dword [ebp + eax*4 - 0x2d4], 4
inc dword [ebp - 0x30]
cmp dword [ebp - 0x30], 2
jl 0x1003efc4
mov dword [ebp - 0x30], ebx
jmp 0x1003eff3
mov ecx, dword [ebp - 0x30]
mov eax, dword [ebp - 0x174]
mov dword [eax + ecx*4], 5
inc dword [ebp - 0x30]
cmp dword [ebp - 0x30], 1
jl 0x1003efe0
mov dword [ebp - 0x144], ebx
mov esi, 0x10079ad8
cmp dword [ebp - 0x144], 2
jg 0x1003f145
push 2
lea ecx, [ebp - 0x208]
call fcn.100100c6
push 0x2f28
push 1
push ecx
push 0x7877
lea eax, [ebp - 0x23c]
mov byte [ebp - 4], 0x17
push eax
lea eax, [ebp - 0x208]
mov dword [ebp - 0xf4], 0xfffffff7
push eax
push ecx
push 0x3126
push 0x7e2c
mov edx, 0x350b
call fcn.1003b808
mov dword [ebp - 0x28], 0x3c80
add esp, 0x24
cmp dword [ebp - 0x28], 0x3d08
jle 0x1003f0d7
mov eax, ebx
mov dword [ebp + 8], ebx
mov edi, ebx
mov dword [ebp - 0x1c], ebx
mov dword [ebp - 0x18], edi
xor edi, eax
mov dword [ebp - 0x20], ebx
mov ecx, ebx
mov dword [ebp - 0x14], 0x26f5
mov ebx, dword [ebp - 0x20]
mov dword [ebp - 0x24], ecx
mov eax, edi
or eax, ecx
mov ecx, esi
cdq
push edx
push eax
call fcn.1000fde8
mov ecx, dword [ebp - 0x24]
add ecx, ebx
dec dword [ebp - 0x14]
mov dword [ebp - 0x24], ecx
jne 0x1003f090
inc ebx
push 0
mov dword [ebp - 0x20], ebx
cmp ebx, 0x24a
pop ebx
jl 0x1003f081
mov edi, dword [ebp - 0x1c]
mov eax, dword [ebp + 8]
inc edi
mov dword [ebp - 0x1c], edi
cmp edi, 0x4b91
jl 0x1003f079
inc eax
mov dword [ebp + 8], eax
cmp eax, 0x265a
jl 0x1003f074
mov byte [ebp - 4], 0x18
cmp dword [ebp - 0x28], 0x3ade
jge 0x1003f113
mov edx, str.jgcvlhv_hjipird_egfo_jncycrfdy_jnovxhwbd_cndlqz_ltaz
mov ecx, esi
call fcn.10012b8c
jmp 0x1003f113
push ecx
push ecx
xor dl, dl
mov dword [ebp - 4], 0x17
lea ecx, [ebp - 0xf4]
call fcn.1003ba06
pop ecx
pop ecx
lea ecx, [ebp - 0x208]
mov byte [ebp - 4], 0x16
call fcn.10010128
inc dword [ebp - 0x144]
jmp 0x1003f004
mov dword [ebp - 0x14], 0x36bd
cmp dword [ebp - 0x14], 0x3948
mov dword [ebp - 0x18], str.xrp_mlaeqzdb_idhtafjr_nhkvgytf_tqtsp
jle 0x1003f1c6
mov dword [ebp - 0x24], ebx
mov eax, ebx
mov dword [ebp - 0x28], 0x60e9
mov dword [ebp + 8], eax
mov esi, eax
mov edi, 0xf9b
mov eax, esi
lea ecx, [ebp - 0x304]
cdq
push edx
push eax
call fcn.10001b3f
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x1003f18c
mov eax, dword [eax]
push eax
call fcn.10047293
pop ecx
push ebx
push 1
lea ecx, [ebp - 0x304]
call fcn.1001084f
dec esi
dec edi
jne 0x1003f172
mov eax, dword [ebp + 8]
mov edi, dword [ebp - 0x24]
add eax, edi
dec dword [ebp - 0x28]
mov dword [ebp + 8], eax
jne 0x1003f16b
inc edi
mov dword [ebp - 0x24], edi
cmp edi, 0x7d74
jl 0x1003f15f
mov esi, 0x10079ad8
mov eax, dword [ebp - 0x174]
mov dword [eax], 2
cmp dword [eax], ebx
jl 0x1003f33d
push 3
lea ecx, [ebp - 0x238]
call fcn.100100c6
push 4
lea ecx, [ebp - 0x214]
mov byte [ebp - 4], 0x1a
call fcn.100100c6
mov byte [ebp - 4], 0x1b
mov dword [ebp - 0x34], 0xfffffff6
mov dword [ebp - 0x24], 0x3c3
cmp dword [ebp - 0x24], 0x4f5
jle 0x1003f259
mov dword [ebp + 8], ebx
mov edi, ebx
mov ecx, ebx
mov ebx, dword [ebp + 8]
mov dword [ebp - 0x28], ecx
mov eax, edi
sar eax, cl
mov ecx, esi
xor eax, ebx
cdq
push edx
push eax
call fcn.1000fde8
mov ecx, dword [ebp - 0x28]
inc ecx
mov dword [ebp - 0x28], ecx
cmp ecx, 0x1cba
jl 0x1003f220
inc edi
push 0
pop ebx
cmp edi, 0x62c8
jl 0x1003f218
mov eax, dword [ebp + 8]
inc eax
mov dword [ebp + 8], eax
cmp eax, 0x2817
jl 0x1003f216
push ecx
push 0x61bb
push ecx
lea eax, [ebp - 0x238]
mov edx, 0x12d7
push eax
push ebx
push ecx
lea ecx, [ebp - 0x134]
call fcn.1003df72
add esp, 0x18
mov byte [ebp - 4], 0x1c
cmp dword [ebp - 0x24], 0x226
jge 0x1003f2b8
mov edx, str.irqknms_fdtugsh_svo_hrshyqrjw_cwpzszmd
mov ecx, esi
call fcn.10012b8c
jmp 0x1003f2b8
push ecx
lea eax, [ebp - 0x214]
mov dword [ebp - 4], 0x1b
push eax
push 1
push ecx
lea eax, [ebp - 0x134]
push eax
call fcn.1003e242
add esp, 0x14
dec dword [ebp - 0x34]
mov dword [ebp - 0x34], ebx
jmp 0x1003f310
push ecx
push ecx
mov dl, 1
mov ecx, 0x10c
call fcn.1003ba06
push 1
lea eax, [ebp - 0x1e0]
push eax
push 0x1f27
push 0x6764
lea ecx, [ebp - 0x34]
call fcn.1003ba33
add esp, 0x18
inc dword [ebp - 0x34]
cmp dword [ebp - 0x34], 2
jle 0x1003f2e1
lea ecx, [ebp - 0x214]
call fcn.10010128
lea ecx, [ebp - 0x238]
mov byte [ebp - 4], 0x16
call fcn.10010128
mov eax, dword [ebp - 0x174]
dec dword [eax]
jmp 0x1003f1d2
cmp dword [ebp - 0x14], 0x362e
jge 0x1003f34f
push dword [ebp - 0x18]
call fcn.10047293
pop ecx
lea ecx, [ebp - 0x174]
call fcn.10010128
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x1e0]
call fcn.10010128
push 1
lea ecx, [ebp - 0x1b0]
call fcn.100100c6
sub esp, 0xc
mov dword [ebp - 4], 0x20
xor eax, eax
mov dword [ebp - 0x118], 6
inc eax
lea ecx, [ebp - 0x1b0]
mov dword [ebp - 0x12c], eax
mov edx, 0x246f
push ecx
mov dword [ebp - 0x108], eax
mov ecx, 0x2d71
push 0x7040
push eax
mov dword [ebp - 0xb4], 0xfffffffe
mov dword [ebp - 0x13c], eax
lea eax, [ebp - 0x1fc]
push eax
call fcn.1003ddab
lea eax, [ebp - 0x108]
mov ecx, 0x1cc7
push eax
push 0x7df9
push 0x1f9d
push 1
push ebx
push 0x69ee
lea eax, [ebp - 0x13c]
push eax
lea eax, [ebp - 0x118]
push eax
push ebx
lea eax, [ebp - 0x1b0]
push eax
push 0x2165
lea eax, [ebp - 0x12c]
push eax
push 0x2385
lea edx, [ebp - 0xb4]
call fcn.1003dc30
add esp, 0x50
lea eax, [ebp - 0xb4]
push 1
push eax
push ecx
push 0x4af7
mov ecx, 0x5570
call fcn.1003e034
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x1b0]
add esp, 0x10
call fcn.10010128
push 0x7c
pop eax
mov byte [ebp - 0x3c], bl
mov word [ebp - 0x3b], 0x1cc
mov byte [ebp - 0x39], 0xfd
mov word [ebp - 0x50], ax
mov dword [ebp - 0x18], 0x415c
cmp dword [ebp - 0x18], 0x4301
jle 0x1003f49e
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_SystemTimeToFileTime]
mov edi, ebx
mov dword [ebp + 8], ebx
mov eax, ebx
mov ecx, esi
xor eax, edi
cdq
push edx
push eax
call fcn.1000fde8
inc ebx
cmp ebx, 0x7aae
jl 0x1003f47b
inc edi
push 0
pop ebx
cmp edi, 0xccf
jl 0x1003f478
push 7
pop eax
mov dword [ebp - 0x1c], eax
mov dword [ebp + 8], eax
mov dword [ebp - 0x20], 0x7221ebc5
mov dword [ebp - 0x24], 0x705618d7
mov dword [ebp - 0x28], ebx
mov dword [ebp - 0x128], 6
mov dword [ebp - 0x28], 1
mov dword [ebp - 0x14], ebx
jmp 0x1003f4df
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0xb8], 0x90f6dae1
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], 1
jl 0x1003f4ce
cmp dword [ebp + 8], ebx
jne 0x1003f564
mov ecx, dword [ebp + 8]
xor edx, edx
mov eax, dword [ebp + 8]
cmp ecx, eax
mov eax, dword [ebp + 8]
setne dl
xor ecx, ecx
add edx, 0x37b30477
cmp edx, eax
setle cl
xor eax, eax
cmp eax, ecx
sbb eax, eax
inc eax
imul eax, dword [ebp + 8]
neg eax
jne 0x1003f51f
cmp dword [ebp + 8], ebx
jne 0x1003f51f
mov ecx, ebx
jmp 0x1003f522
xor ecx, ecx
inc ecx
mov eax, dword [ebp + 8]
cmp ecx, 3
sbb eax, eax
inc eax
cmp eax, 0xd065835a
mov eax, dword [ebp + 8]
sbb ecx, ecx
xor edx, edx
neg ecx
cmp ecx, eax
setge dl
xor eax, eax
cmp edx, 0xffffffff
mov edx, dword [ebp + 8]
setle al
xor ecx, ecx
sub edx, eax
mov eax, dword [ebp + 8]
cmp edx, eax
setne cl
mov dword [ebp - 0x20], ecx
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp + 8]
mov eax, dword [ebp + 8]
mov eax, dword [ebp + 8]
mov eax, dword [ebp + 8]
xor ecx, ecx
dec dword [ebp - 0x1c]
mov edx, dword [ebp - 0x24]
imul edx, dword [ebp - 0x24]
imul edx, dword [ebp - 0x20]
mov eax, dword [ebp - 0x1c]
add edx, 0x7e09128d
cmp eax, edx
mov eax, dword [ebp + 8]
setle cl
xor edx, edx
cmp ecx, eax
setl dl
sub edx, 0x63126ff2
neg edx
sbb edx, edx
inc edx
mov dword [ebp - 0x28], edx
xor edx, edx
mov ecx, dword [ebp - 0x128]
mov eax, dword [ebp - 0x28]
cmp eax, ecx
mov eax, dword [ebp - 0xb8]
setge dl
xor ecx, ecx
cmp edx, eax
mov eax, dword [ebp - 0x24]
setle cl
xor edx, edx
sub ecx, eax
mov eax, dword [ebp + 8]
cmp ecx, eax
mov eax, dword [ebp - 0xb8]
setge dl
xor ecx, ecx
cmp edx, eax
setle cl
mov dword [ebp + 8], ecx
mov dword [ebp - 4], 0x21
cmp dword [ebp - 0x18], 0x3fd6
jge 0x1003f5f5
mov edx, str.swrlx_nddne_xhpzdxky_uddbck_brlvj_musuioep_afryczz_kskm_dsemntto
mov ecx, esi
call fcn.10012b8c
or dword [ebp - 4], 0xffffffff
push 2
mov ecx, ebx
pop edi
mov dword [ebp - 0x98], ecx
cmp edi, 2
jne 0x1003f645
movzx eax, byte [ebp - 0x3a]
lea ecx, [eax + 1]
mov dword [ebp - 0x98], ecx
lea edi, [eax + 1]
jmp 0x1003f6a4
movzx edx, byte [ebp + edi - 0x3b]
mov eax, edi
sub eax, ecx
push 1
push 0x5e4c
push 0x2b17
movzx eax, byte [ebp + eax - 0x3e]
movzx ecx, word [ebp + eax*2 - 0x50]
mov eax, ecx
and eax, edx
add eax, eax
sub ecx, eax
movzx eax, byte [ebp + edi - 0x3c]
add ecx, edx
mov dl, 1
mov word [ebp + eax*2 - 0x50], cx
lea eax, [ebp - 0x98]
push eax
push 0x73b
push ebx
push 0x10c2
push 0x3a85
mov ecx, 0x2d5f
call fcn.1003c0a6
mov ecx, dword [ebp - 0x98]
add esp, 0x20
add edi, 2
cmp edi, 4
jb 0x1003f604
xor eax, eax
mov word [ebp - 0x4e], ax
mov dword [ebp - 0x44], 0x3ae35568
mov dword [ebp - 0x68], 0xffffffff
mov dword [ebp - 0xf0], 0x81720d70
mov dword [ebp - 0x44], ebx
jmp 0x1003f70e
push ebx
push ecx
push 0x7cdf
lea eax, [ebp - 0x44]
mov dword [ebp - 0x130], 0x720
push eax
push 0x325
lea eax, [ebp - 0x130]
push eax
push ecx
push ecx
lea eax, [ebp - 0xf0]
push eax
lea ecx, [ebp - 0x68]
call fcn.1003c896
mov eax, dword [ebp - 0x68]
add esp, 0x24
dec dword [ebp - 0x44]
cmp dword [ebp - 0x44], 0xffffffee
jle 0x1003f6d3
xor eax, eax
mov dword [ebp - 0x280], 7
mov word [ebp - 0x294], ax
lea ecx, [ebp - 0x294]
lea eax, [ebp - 0x50]
mov dword [ebp - 0x284], ebx
push eax
call fcn.1001d578
mov edx, dword [ebp - 0x4c]
lea eax, [ebp - 0x294]
push eax
lea ecx, [ebp - 0x124]
mov dword [ebp - 4], 0x23
call fcn.1003b734
pop ecx
push ebx
push 1
lea ecx, [ebp - 0x294]
mov byte [ebp - 4], 0x25
call fcn.10010a23
mov dword [ebp + 8], 0x22fc
cmp dword [ebp + 8], 0x25eb
jle 0x1003f7b8
push 0x84d
push 0xbac
push 0xa14
call dword [sym.imp.GDI32.dll_GetPixel]
mov edi, ebx
mov dword [ebp - 0x4c], ebx
mov eax, ebx
mov ecx, esi
or eax, edi
cdq
push edx
push eax
call fcn.1000fde8
inc ebx
cmp ebx, 0xa90
jl 0x1003f795
inc edi
push 0
pop ebx
cmp edi, 0x3fe
jl 0x1003f792
mov byte [ebp - 4], 0x26
cmp dword [ebp + 8], 0x2213
mov dword [ebp - 0x50], ebx
jge 0x1003f7f7
mov edx, str.rlp_ddlq_bzswy_thja_lxyqapjg_xqu_egr
mov ecx, esi
call fcn.10012b8c
jmp 0x1003f7f7
mov dword [ebp - 4], 0x25
lea ecx, [ebp - 0x180]
mov dword [ebp - 0x14], 1
push 3
call fcn.100100c6
mov byte [ebp - 4], 0x28
mov dword [ebp - 0x18], 0x89c
cmp dword [ebp - 0x18], 0xaa0
jle 0x1003f88b
mov ecx, ebx
mov dword [ebp + 8], ebx
mov edi, ebx
mov esi, ebx
mov eax, edi
cdq
idiv esi
mov eax, ecx
lea ecx, [ebp - 0x334]
sub eax, edx
cdq
push edx
push eax
call fcn.10001b3f
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x1003f850
mov eax, dword [eax]
push eax
call fcn.10047293
pop ecx
push ebx
push 1
lea ecx, [ebp - 0x334]
call fcn.1001084f
mov ecx, dword [ebp + 8]
inc esi
cmp esi, 0x75dc
jl 0x1003f82f
inc edi
cmp edi, 0x5953
jl 0x1003f82d
inc ecx
mov dword [ebp + 8], ecx
cmp ecx, 0x2385
jl 0x1003f82b
mov esi, 0x10079ad8
push 4
lea ecx, [ebp - 0x1a4]
call fcn.100100c6
cmp dword [ebp - 0x18], 0x5cb
jge 0x1003f8ac
push str.exxorqutd_vmkjap_qogrebnpm_lbrv_bghuw_zrim_ijavelsll_olqgolgd_ahbim_zoczgn_ghh_ziulpty_tcdc
call fcn.10047293
pop ecx
push ecx
push ebx
push ecx
push 0x4fc9
lea eax, [ebp - 0x2c]
mov dword [ebp - 4], 0x29
push 0x96c
push eax
lea edx, [ebp - 0x180]
call fcn.1003d864
add esp, 0x18
mov dword [ebp - 0x2c], ebx
jmp 0x1003f8e5
mov eax, dword [ebp - 0x2c]
mov dword [ebp + eax*4 - 0x6c], 0xffffffff
inc dword [ebp - 0x2c]
cmp dword [ebp - 0x2c], 1
jl 0x1003f8d7
mov dword [ebp - 0x2c], ebx
jmp 0x1003f903
mov ecx, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x1a4]
mov dword [eax + ecx*4], 0x49175055
inc dword [ebp - 0x2c]
cmp dword [ebp - 0x2c], 4
jl 0x1003f8f0
mov dword [ebp - 0x18], 0x214
cmp dword [ebp - 0x18], 0x348
jle 0x1003f941
mov edi, ebx
mov dword [ebp + 8], ebx
mov eax, ebx
mov ecx, esi
or eax, edi
cdq
push edx
push eax
call fcn.1000fde8
inc ebx
cmp ebx, 0x4a97
jl 0x1003f91e
inc edi
push 0
pop ebx
cmp edi, 0x46ae
jl 0x1003f91b
mov dword [ebp - 0x14], 0x12
jmp 0x1003fb42
push dword [ebp + 8]
movdqa xmm0, xmmword [0x1006caf0]
lea eax, [ebp - 0x294]
push eax
lea eax, [ebp - 0x2a4]
mov dword [ebp - 0x1c], 0x4fc37f20
push eax
push ebx
lea ecx, [ebp - 0x114]
mov dword [ebp - 0x114], ebx
movdqu xmmword [ebp - 0x2a4], xmm0
mov dword [ebp - 0x110], ebx
mov dword [ebp - 0x10c], ebx
call fcn.10013562
mov dword [ebp + 8], ebx
jmp 0x1003f9a9
mov eax, dword [ebp + 8]
mov dword [ebp + eax*4 - 0x88], 0x7ad95e17
inc dword [ebp + 8]
cmp dword [ebp + 8], 3
jl 0x1003f998
mov dword [ebp - 0x88], ebx
jmp 0x1003fa73
mov dword [ebp + 8], 0xffffffff
mov dword [ebp - 0x4c], 0xfffffff9
mov dword [ebp + 8], 0xfffffff0
cmp dword [ebp + 8], 4
je 0x1003fa6d
mov edi, dword [ebp - 0x180]
mov dword [ebp - 0x20], ebx
xor ecx, ecx
mov eax, dword [ebp - 0x80]
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp + 8]
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp + 8]
mov eax, dword [ebp - 0x20]
mov edx, dword [ebp + 8]
imul edx, dword [ebp - 0x1c]
mov eax, dword [ebp + 8]
cmp edx, eax
setg cl
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x88]
mov eax, dword [ebp - 0x88]
cmp eax, dword [ebp - 0x20]
jl 0x1003fa25
mov eax, dword [ebp + 8]
mov eax, dword [ebp - 0x84]
xor edx, edx
mov eax, dword [ebp - 0x80]
mov eax, dword [ebp + 8]
mov eax, dword [ebp + 8]
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp + 8]
mov eax, dword [ebp - 0x80]
mov eax, dword [ebp - 0x1c]
cmp eax, 0xbf9f
mov eax, dword [ebp - 0x4c]
setne dl
xor ecx, ecx
cmp edx, eax
mov dword [edi + 8], edx
sete cl
mov dword [ebp - 0x6c], ecx
mov eax, dword [ebp - 0x20]
inc dword [ebp + 8]
cmp dword [ebp + 8], 4
jne 0x1003f9df
inc dword [ebp - 0x88]
cmp dword [ebp - 0x88], 5
jle 0x1003f9ba
mov dword [ebp - 0x1c], ebx
cmp dword [ebp - 0x1c], ebx
jl 0x1003fb34
mov edi, dword [ebp - 0x180]
mov eax, dword [ebp - 0x1c]
xor ecx, ecx
mov eax, dword [ebp + eax*4 - 0x6c]
test eax, eax
mov eax, dword [ebp - 0x88]
mov eax, dword [ebp - 0x114]
setne cl
mov dword [ebp + 8], ecx
cmp dword [eax], ebx
jne 0x1003fabc
cmp dword [ebp - 0x1c], ebx
jne 0x1003fabc
mov eax, ebx
jmp 0x1003fabf
xor eax, eax
inc eax
cmp eax, 0xfffffffd
mov eax, dword [ebp - 0x14]
sbb ecx, ecx
xor edx, edx
neg ecx
neg ecx
cmp eax, ecx
mov eax, dword [ebp - 0x88]
setle dl
xor ecx, ecx
cmp edx, eax
mov eax, dword [ebp - 0x1c]
setg cl
xor edx, edx
cmp ecx, dword [edi + 8]
mov eax, dword [ebp + eax*4 - 0x6c]
setle dl
xor ecx, ecx
cmp edx, eax
setl cl
sub ecx, 0x780915d2
neg ecx
sbb ecx, ecx
inc ecx
imul eax, ecx, 0x6db7
test eax, eax
je 0x1003fb1a
mov eax, dword [ebp - 0x1a4]
cmp dword [eax + 0xc], ebx
je 0x1003fb1a
xor eax, eax
inc eax
jmp 0x1003fb1c
mov eax, ebx
xor ecx, ecx
cmp dword [ebp + 8], eax
mov eax, dword [ebp - 0x1c]
setl cl
mov dword [ebp + eax*4 - 0x6c], ecx
dec dword [ebp - 0x1c]
jns 0x1003fa92
lea ecx, [ebp - 0x114]
call fcn.10010128
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], 0x1c
jl 0x1003f94d
mov byte [ebp - 4], 0x2c
cmp dword [ebp - 0x18], 0xfffffe58
jge 0x1003fb83
mov edx, str.sblkcxt_nvoluyj_kouf_ubjegnp_ncqi_wobpeaygj_fluvmjg_vbua
mov ecx, esi
call fcn.10012b8c
jmp 0x1003fb83
lea ecx, [ebp - 0x1a4]
mov dword [ebp - 4], 0x29
call fcn.10010128
lea ecx, [ebp - 0x180]
mov byte [ebp - 4], 0x25
call fcn.10010128
push 0xa
pop eax
push 2
mov ecx, ebx
mov dword [ebp - 0x64], 0x2a037102
mov byte [ebp - 0x60], bl
mov dword [ebp - 0x5f], 0xeac00229
mov word [ebp - 0x5b], 0x401
mov word [ebp - 0xd8], ax
pop esi
mov dword [ebp - 0x40], ecx
cmp esi, 6
jne 0x1003fbdd
push 3
pop ecx
push 7
mov dword [ebp - 0x40], ecx
pop esi
jmp 0x1003fc1d
movzx edx, byte [ebp + esi - 0x63]
mov eax, esi
sub eax, ecx
push 0x7c86
push ebx
movzx eax, byte [ebp + eax - 0x66]
movzx eax, word [ebp + eax*2 - 0xdc]
mov ecx, eax
and eax, edx
or ecx, edx
sub ecx, eax
movzx eax, byte [ebp + esi - 0x64]
mov word [ebp + eax*2 - 0xdc], cx
lea eax, [ebp - 0x40]
push eax
call fcn.1003da0e
mov ecx, dword [ebp - 0x40]
add esp, 0xc
add esi, 2
cmp esi, 0xb
jb 0x1003fbcd
xor eax, eax
lea ecx, [ebp - 0x27c]
mov word [ebp - 0xd4], ax
mov dword [ebp - 0x150], 0xbac64a68
mov dword [ebp + 8], 8
push 3
call fcn.100100c6
mov byte [ebp - 4], 0x2e
mov dword [ebp - 0x138], 0xbfc4f27d
mov dword [ebp + 8], ebx
jmp 0x1003fc72
mov ecx, dword [ebp + 8]
mov eax, dword [ebp - 0x27c]
mov dword [eax + ecx*4], 8
inc dword [ebp + 8]
cmp dword [ebp + 8], 3
jl 0x1003fc5f
push 0x3bfb
push ebx
lea eax, [ebp - 0x150]
mov edx, 0x7353
push eax
push 1
push 0x7be3
push 0x2363
push 0x8b
push 0x147a
mov cl, 1
call fcn.1003d0b7
add esp, 0x20
lea eax, [ebp - 0x138]
mov edx, 0x6e37
push 0x3a4
push 0x1791
push 0x7eae
push eax
push 0x15c2
push ecx
push 0x5c60
push 0x2800
push ebx
push 0x6876
push 1
mov cl, 1
call fcn.1003e0e3
add esp, 0x2c
mov byte [ebp - 4], 0x25
lea ecx, [ebp - 0x27c]
call fcn.10010128
xor eax, eax
mov dword [ebp - 0x218], 7
mov word [ebp - 0x22c], ax
lea ecx, [ebp - 0x22c]
lea eax, [ebp - 0xdc]
mov dword [ebp - 0x21c], ebx
push eax
call fcn.1001d578
push ecx
mov byte [ebp - 4], 0x2f
lea eax, [ebp - 0x37]
mov dword [ebp + 8], 0xffffffff
xor cl, cl
mov byte [ebp - 0x37], bl
push eax
call fcn.1003bb40
pop ecx
pop ecx
push 0x6174
push ebx
sub esp, 0x10
mov byte [ebp - 0x36], bl
lea eax, [ebp - 0x36]
push eax
push 0x4728
call fcn.1003de32
xor eax, eax
mov dword [ebp - 0x48], ebx
lea edi, [ebp - 0xdc]
add esp, 0x20
stosd dword es:[edi], eax
push 0x18
stosd dword es:[edi], eax
pop esi
stosw word es:[edi], ax
mov eax, dword [ebp - 0x120]
sub eax, dword [ebp - 0x124]
cdq
idiv esi
mov esi, eax
test esi, esi
je 0x1003fdb5
push ecx
lea eax, [ebp - 0x48]
xor dl, dl
push eax
push 0x3122
lea eax, [ebp - 0x22c]
push eax
lea eax, [ebp - 0x124]
push eax
push ecx
push ecx
mov ecx, 0x21b0
call fcn.1003df1e
mov eax, dword [ebp - 0x48]
add esp, 0x1c
inc eax
mov dword [ebp - 0x48], eax
cmp eax, esi
jb 0x1003fd81
push 4
lea ecx, [ebp - 0x1bc]
call fcn.100100c6
mov byte [ebp - 4], 0x30
lea eax, [ebp - 0x2a4]
push dword [ebp + 8]
movdqa xmm0, xmmword [0x1006cae0]
lea ecx, [ebp - 0xe8]
push eax
lea eax, [ebp - 0x2b4]
mov dword [ebp - 0xe8], ebx
push eax
push ebx
movdqu xmmword [ebp - 0x2b4], xmm0
mov dword [ebp - 0xe4], ebx
mov dword [ebp - 0xe0], ebx
call fcn.10013562
mov byte [ebp - 4], 0x31
mov dword [ebp + 8], ebx
jmp 0x1003fe21
mov ecx, dword [ebp + 8]
mov eax, dword [ebp - 0x1bc]
mov dword [eax + ecx*4], 0xf75dcec3
inc dword [ebp + 8]
cmp dword [ebp + 8], 4
jl 0x1003fe0e
mov esi, dword [ebp - 0xe8]
mov dword [esi + 8], ebx
mov dword [ebp + 8], 6
mov dword [ebp + 8], 0xfffffffd
mov dword [ebp + 8], ebx
mov dword [ebp + 8], ebx
jmp 0x1003fe57
mov eax, dword [ebp + 8]
mov dword [ebp + eax*4 - 0xf8], 0xf42c
inc dword [ebp + 8]
cmp dword [ebp + 8], 1
jl 0x1003fe46
mov edx, dword [ebp - 0x1bc]
mov eax, dword [esi + 8]
mov ecx, dword [esi + 8]
mov eax, dword [edx + eax*4]
mov dword [ebp + 8], eax
mov eax, dword [ebp + 8]
cmp dword [edx + ecx*4], eax
jne 0x1003fe8b
mov eax, dword [ebp - 0xe8]
mov ecx, 0x11023dcd
sub ecx, dword [eax]
jne 0x1003fe8b
cmp dword [ebp + 8], ebx
je 0x1003fe98
cmp dword [ebp - 0xf8], ebx
je 0x1003fe98
xor eax, eax
inc eax
jmp 0x1003fe9a
mov eax, ebx
mov ecx, 0xad67a4be
cmp ecx, eax
sbb eax, eax
inc eax
imul eax, eax, 0xad72
mov dword [ebp + 8], eax
mov eax, dword [ebp + 8]
mov dword [ebp + 8], eax
mov byte [ebp + 0xb], bl
cmp byte [ebp + 0xb], 0
je 0x1003fecb
push ecx
push 0x2075
mov cl, 1
call fcn.1003bb40
pop ecx
pop ecx
inc dword [esi + 8]
cmp dword [esi + 8], 3
jle 0x1003fe30
lea ecx, [ebp - 0xe8]
call fcn.10010128
lea ecx, [ebp - 0x1bc]
mov byte [ebp - 4], 0x2f
call fcn.10010128
mov ecx, dword [ebp - 0xec]
lea eax, [ebp - 0x124]
push eax
call fcn.100402ed
push ebx
push 1
lea ecx, [ebp - 0x22c]
call fcn.10010a23
lea ecx, [ebp - 0x124]
call fcn.100406a4
mov ecx, dword [ebp - 0xc]
pop edi
pop esi
mov dword fs:[0], ecx
pop ebx
mov esp, ebp
pop ebp
ret