Function at 0x1003c8b8
Capabilities:
Encode data using xor
Query environment variable

Disassembly:
mov eax, 0x100618f4
call fcn.1005fb28
sub esp, 0x7a8
push ebx
xor ecx, ecx
mov dword [ebp - 0x178], 0x8c45cdbe
push esi
inc ecx
push edi
mov dword [ebp - 0x3e0], ecx
or edi, 0xffffffff
mov dword [ebp - 0x3d4], edi
xor ebx, ebx
mov dword [ebp - 0x2e4], ecx
mov dword [ebp - 0x10], esp
mov dword [ebp - 0x18], ebx
jmp 0x1003c908
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x604], 0xe46552de
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 2
jl 0x1003c8f7
push ecx
push ecx
push ecx
lea eax, [ebp - 0x3e0]
mov dword [ebp - 0x178], ecx
push eax
lea eax, [ebp - 0x178]
mov edx, 0x34a0
push eax
push ecx
lea eax, [ebp - 0x2e4]
push eax
lea ecx, [ebp - 0x3d4]
call fcn.100388e2
add esp, 0x1c
lea ecx, [ebp - 0x224]
push 3
pop esi
push esi
call fcn.100138f8
mov dword [ebp - 4], ebx
lea ecx, [ebp - 0x218]
mov dword [ebp - 0x378], 0xfffffff8
mov dword [ebp - 0x388], esi
push 1
call fcn.100138f8
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x1d0]
mov dword [ebp - 0x380], 0x925f321e
mov dword [ebp - 0x3f8], ebx
push 2
mov dword [ebp - 0x3c0], ebx
call fcn.100138f8
lea eax, [ebp - 0x224]
mov byte [ebp - 4], 2
push eax
push ecx
xor dl, dl
lea ecx, [ebp - 0x140]
call fcn.10037902
pop ecx
push ebx
lea eax, [ebp - 0x218]
mov edx, 0x6d3c
push eax
push ecx
lea eax, [ebp - 0x140]
push eax
call fcn.10038d99
add esp, 0x14
lea eax, [ebp - 0x1d0]
lea edx, [ebp - 0x140]
push 0x32cb
push 0x7d5
push 0x40bc
push 0x69f0
push 0x7159
push eax
push 0x11c3
push 0x5799
push 0x7b50
push 1
call fcn.10038a7b
lea eax, [ebp - 0x224]
push eax
lea eax, [ebp - 0x1d0]
push eax
lea eax, [ebp - 0x378]
push eax
lea eax, [ebp - 0x3f8]
push eax
lea eax, [ebp - 0x380]
push eax
push 0x448a
lea eax, [ebp - 0x3c0]
push eax
lea eax, [ebp - 0x218]
push eax
lea eax, [ebp - 0x388]
mov edx, 0x5d00
push eax
push ebx
call fcn.10038a7b
add esp, 0x50
cmp dword [ebp - 0x1d0], 0
je 0x1003ca7b
push dword [ebp - 0x1d0]
call fcn.10047697
pop ecx
mov dword [ebp - 0x1d0], ebx
mov dword [ebp - 0x1cc], ebx
mov dword [ebp - 0x1c8], ebx
cmp dword [ebp - 0x218], 0
je 0x1003caa2
push dword [ebp - 0x218]
call fcn.10047697
pop ecx
mov dword [ebp - 0x218], ebx
mov dword [ebp - 0x214], ebx
mov dword [ebp - 0x210], ebx
mov dword [ebp - 4], edi
cmp dword [ebp - 0x224], 0
je 0x1003cacc
push dword [ebp - 0x224]
call fcn.10047697
pop ecx
mov dword [ebp - 0x224], ebx
mov dword [ebp - 0x220], ebx
mov dword [ebp - 0x21c], ebx
mov dword [ebp - 0x38], 0x6be4
cmp dword [ebp - 0x38], 0x6f23
jle 0x1003cb29
push 0x287
push ebx
push ebx
push ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_GetDateFormatW]
mov edi, ebx
mov esi, ebx
mov dword [ebp - 0x24], ebx
lea eax, [ebx + esi]
mov ecx, 0x1007d058
xor eax, edi
cdq
push edx
push eax
call fcn.100136b0
inc ebx
cmp ebx, 0x4aad
jl 0x1003caf3
inc esi
push 0
pop ebx
cmp esi, 0x7e0c
jl 0x1003caf0
inc edi
cmp edi, 0x48ef
jl 0x1003caee
push 3
or edi, 0xffffffff
pop esi
mov dword [ebp - 4], esi
cmp dword [ebp - 0x38], 0x68d3
jge 0x1003cb65
mov edx, str.hsehnt_rrjlpo_sbq_uytjtoxzh_fojnu_gqvahjlf_rpgb_yfb
mov ecx, 0x1007d058
call fcn.100160b3
jmp 0x1003cb65
mov dword [ebp - 4], edi
mov eax, 0xac70
mov dword [ebp - 0x244], eax
mov dword [ebp - 0x240], eax
mov dword [ebp - 0x23c], eax
mov dword [ebp - 0x238], eax
mov dword [ebp - 0x18], edi
mov dword [ebp - 0x38], 0x6b2b
cmp dword [ebp - 0x38], 0x6bdc
jle 0x1003cbd2
push 0x1333
push 0x26f1
push ebx
call dword [sym.imp.USER32.dll_CheckMenuItem]
mov esi, ebx
mov edi, ebx
mov ebx, 0x2c35
mov eax, edi
mov ecx, 0x1007d058
cdq
push edx
push eax
call fcn.100136b0
add edi, esi
dec ebx
jne 0x1003cbb2
inc esi
cmp esi, 0x8036
jl 0x1003cbab
or edi, 0xffffffff
mov dword [ebp - 4], 5
cmp dword [ebp - 0x38], 0x6ae1
jge 0x1003cbf1
mov edx, str.ntd_kzpl_eqlsxbjx_dmzkym_ifiz_dwqb_zncgsa_jaa_qiqifprd_kzvzdf_srvbr_qbu_lalh_miat
mov ecx, 0x1007d058
call fcn.100160b3
xor ecx, ecx
inc ecx
push 3
mov dword [ebp - 4], edi
pop esi
mov dword [ebp - 0x18], ebx
jmp 0x1003cc30
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x2e0], edi
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], esi
jl 0x1003cc23
mov dword [ebp - 0x2e0], 0xffffffe4
cmp dword [ebp - 0x2e0], ecx
jge 0x1003ce87
mov dword [ebp - 0x1c], 0xb1658084
mov dword [ebp - 0x28], 0xd089
mov dword [ebp - 0x20], edi
mov dword [ebp - 0x1c], ebx
cmp dword [ebp - 0x1c], esi
jg 0x1003ce7c
mov dword [ebp - 0x30], ebx
mov eax, dword [ebp - 0x1c]
cmp dword [ebp + eax*4 - 0x244], ebx
je 0x1003ccad
cmp dword [ebp - 0x28], ebx
je 0x1003ccaa
mov eax, dword [ebp - 0x28]
mov edx, dword [ebp - 0x28]
mov eax, dword [ebp - 0x20]
neg edx
sbb edx, edx
xor ecx, ecx
inc edx
cmp edx, eax
setg cl
xor eax, eax
cmp ecx, 0x2d5f
setg al
xor ecx, ecx
mov dword [ebp - 0x30], eax
inc ecx
cmp dword [ebp - 0x30], ebx
jne 0x1003ccaa
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x2d8]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp + eax*4 - 0x244]
mov eax, dword [ebp - 0x1c]
cmp dword [ebp + eax*4 - 0x244], ecx
ja 0x1003ccd4
mov dword [ebp - 0x38], ebx
cmp dword [ebp - 0x244], ebx
je 0x1003ccd7
mov dword [ebp - 0x38], ecx
mov eax, dword [ebp - 0x1c]
xor ecx, ecx
mov edx, dword [ebp + eax*4 - 0x244]
mov eax, dword [ebp - 0x1c]
cmp dword [ebp - 0x38], eax
sete cl
xor eax, eax
cmp ecx, edx
setne al
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], ebx
je 0x1003cdff
mov dword [ebp - 0x24], 0x5549
cmp dword [ebp - 0x24], 0x5833
jle 0x1003cd9a
mov edi, ebx
mov dword [ebp - 0x30], ebx
mov esi, ebx
mov dword [ebp - 0x18], ebx
mov eax, edi
mov dword [ebp - 0x38], ebx
cdq
mov edi, ebx
idiv esi
mov esi, edx
mov eax, ebx
mov dword [ebp - 0x38], ebx
and eax, edi
lea ecx, [ebp - 0x698]
or eax, esi
cdq
push edx
push eax
call fcn.10001ade
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x1003cd4a
mov eax, dword [eax]
push eax
call fcn.1004752f
pop ecx
push ebx
push 1
lea ecx, [ebp - 0x698]
call fcn.10013e9b
mov eax, dword [ebp - 0x38]
inc eax
mov dword [ebp - 0x38], eax
cmp eax, 0x66be
jl 0x1003cd2e
inc edi
cmp edi, 0x1d41
jl 0x1003cd29
mov esi, dword [ebp - 0x18]
mov edi, dword [ebp - 0x30]
inc esi
mov dword [ebp - 0x18], esi
cmp esi, 0x2c38
jl 0x1003cd1d
inc edi
mov dword [ebp - 0x30], edi
cmp edi, 0x4af1
jl 0x1003cd18
push 3
or edi, 0xffffffff
pop esi
mov dword [ebp - 0x28], ebx
jmp 0x1003cde1
mov dword [ebp - 0x18], ebx
jmp 0x1003cdd9
mov dword [ebp - 0x30], ebx
jmp 0x1003cdb9
mov byte [ebp - 0x7e], bl
lea ecx, [ebp - 0x7e]
push ebx
call fcn.1003b96c
inc dword [ebp - 0x30]
pop ecx
cmp dword [ebp - 0x30], esi
jle 0x1003cda9
mov dword [ebp - 0x20], ebx
jmp 0x1003cdd0
mov eax, dword [ebp - 0x20]
mov dword [ebp + eax*4 - 0x244], ebx
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], 4
jl 0x1003cdc3
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], esi
jle 0x1003cda4
inc dword [ebp - 0x28]
cmp dword [ebp - 0x28], esi
jle 0x1003cd9f
cmp dword [ebp - 0x24], 0x54b5
jge 0x1003cdfa
push str.rqyjdvx_rhdkphm_abyejczg_gkwupg_xab_gpqppn_irwgtc
call fcn.1004752f
pop ecx
mov dword [ebp - 4], edi
jmp 0x1003ce71
push 0x7884
push 0x4520
push ebx
push 1
push 0x6bf5
push ebx
push 0x3079
push 0x5956
push 0x381d
push 0x42b5
mov edx, 0x2f7
mov byte [ebp - 0x75], bl
lea ecx, [ebp - 0x75]
call fcn.1003a9c3
push 0x192
push 0x7b04
push ebx
xor eax, eax
mov edx, 0x3470
inc eax
mov ecx, 0x2d8
push eax
push 0x3054
push eax
push 0xc2b
push 0x3582
push 0x1af5
push 0x6355
call fcn.1003a9c3
add esp, 0x50
inc dword [ebp - 0x1c]
xor ecx, ecx
inc ecx
jmp 0x1003cc5f
inc dword [ebp - 0x2e0]
jmp 0x1003cc3f
mov eax, dword [0x1418c728]
test cl, al
jne 0x1003cec2
or eax, ecx
mov dword [0x1418c728], eax
mov dword [ebp - 4], 9
mov dword [0x1418c72c], ebx
mov dword [0x1418c730], ebx
call fcn.100410dd
push 0x10061bda
mov dword [0x1418c72c], eax
call fcn.10047505
pop ecx
mov dword [ebp - 4], edi
mov dword [ebp - 0x20], ebx
lea ecx, [ebp - 0x1f4]
push esi
call fcn.100138f8
sub esp, 0xc
mov dword [ebp - 4], 0xa
lea eax, [ebp - 0x584]
xor dl, dl
lea ecx, [ebp - 0x1f4]
push eax
push 0x59c0
call fcn.10037ded
mov dword [ebp - 0x38], 0x1ddb
add esp, 0x14
cmp dword [ebp - 0x38], 0x1fd0
jle 0x1003cf67
mov dword [ebp - 0x18], ebx
mov edi, ebx
mov esi, ebx
mov ecx, ebx
mov ebx, dword [ebp - 0x18]
mov dword [ebp - 0x24], ecx
mov eax, esi
cdq
idiv ecx
mov eax, ebx
lea ecx, [edi + edx]
sar eax, cl
mov ecx, 0x1007d058
cdq
push edx
push eax
call fcn.100136b0
mov ecx, dword [ebp - 0x24]
inc ecx
mov dword [ebp - 0x24], ecx
cmp ecx, 0x7e16
jl 0x1003cf16
inc esi
push 0
pop ebx
cmp esi, 0x2f49
jl 0x1003cf0e
inc edi
cmp edi, 0x82c
jl 0x1003cf0c
mov eax, dword [ebp - 0x18]
inc eax
mov dword [ebp - 0x18], eax
cmp eax, 0x7198
jl 0x1003cf0a
push 3
or edi, 0xffffffff
pop esi
mov byte [ebp - 4], 0xb
cmp dword [ebp - 0x38], 0x1cc8
jge 0x1003cf83
mov edx, str.qofzu_lvquo_hpu_unxeqz_idioenlm_gobiytx_mhjbk_djyvqaisd
mov ecx, 0x1007d058
call fcn.100160b3
push 0xa
pop eax
mov dword [ebp - 4], eax
xor eax, eax
inc eax
mov dword [ebp - 0x20], ebx
cmp dword [ebp - 0x20], 0xffffffe9
jl 0x1003d037
jmp 0x1003cfcc
xor eax, eax
inc eax
lea ecx, [ebp - 0x86]
mov dword [ebp - 0x18], eax
push ecx
push ecx
mov byte [ebp - 0x86], bl
mov cl, al
call fcn.1003b1f0
pop ecx
pop ecx
mov dword [ebp - 0x18], ebx
jmp 0x1003d028
mov eax, dword [ebp - 0x1f4]
cmp dword [eax], ebx
jne 0x1003d02e
mov byte [ebp - 0x31], bl
cmp byte [ebp - 0x31], 0
je 0x1003d025
push 0x6af4
xor eax, eax
mov edx, 0x6982
inc eax
mov ecx, 0x3999
push eax
push 0x6852
push ebx
push 0x81c
push eax
call fcn.100398df
add esp, 0x18
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 2
jle 0x1003cfeb
dec dword [ebp - 0x20]
cmp dword [ebp - 0x20], 0xffffffe9
jge 0x1003cfc9
mov dword [ebp - 4], edi
cmp dword [ebp - 0x1f4], 0
je 0x1003d061
push dword [ebp - 0x1f4]
call fcn.10047697
pop ecx
mov dword [ebp - 0x1f4], ebx
mov dword [ebp - 0x1f0], ebx
mov dword [ebp - 0x1ec], ebx
cmp byte [0x1418b1d1], 0
je 0x1003d2b7
push 2
lea ecx, [ebp - 0x300]
call fcn.100138f8
mov dword [ebp - 4], 0xd
lea ecx, [ebp - 0x2f0]
mov dword [ebp - 0x28], 0xc08901f2
push esi
call fcn.100138f8
mov byte [ebp - 4], 0xe
mov dword [ebp - 0x174], 0xfffffffb
mov dword [ebp - 0xac], ebx
jmp 0x1003d0c4
mov ecx, dword [ebp - 0xac]
mov eax, dword [ebp - 0x300]
mov dword [eax + ecx*4], 0xfffffffc
inc dword [ebp - 0xac]
cmp dword [ebp - 0xac], 2
jl 0x1003d0ab
push 0x132d
push 0xf91
lea eax, [ebp - 0x2f0]
mov dl, 1
push eax
push 0x1f4b
push 0x37bf
push ebx
push ebx
lea ecx, [ebp - 0xac]
call fcn.1003b33e
add esp, 0x1c
mov dword [ebp - 0x28], ebx
xor eax, eax
inc eax
cmp dword [ebp - 0x28], eax
jg 0x1003d23e
mov dword [ebp - 0x18], 0x654fddd3
mov dword [ebp - 0x2c], 0x5467
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], ebx
jl 0x1003d13f
push ecx
push ecx
push 0x2716
push ecx
push 1
push ecx
push ecx
mov ecx, 0x48fd
call fcn.10038c7a
add esp, 0x1c
dec dword [ebp - 0x18]
jns 0x1003d11f
xor ebx, ebx
mov dword [ebp - 0x30], 0x3573
cmp dword [ebp - 0x30], 0x3620
jle 0x1003d1d4
mov edi, ebx
mov dword [ebp - 0x20], ebx
mov esi, ebx
mov dword [ebp - 0x38], ebx
mov eax, edi
mov dword [ebp - 0x1c], ebx
cdq
idiv esi
mov esi, ebx
mov dword [ebp - 0x24], edx
mov edi, ebx
mov ecx, edi
mov eax, esi
shl eax, cl
lea ecx, [ebp - 0x71c]
or eax, edx
cdq
push edx
push eax
call fcn.10001ade
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x1003d18c
mov eax, dword [eax]
push eax
call fcn.1004752f
pop ecx
push ebx
push 1
lea ecx, [ebp - 0x71c]
call fcn.10013e9b
mov edx, dword [ebp - 0x24]
inc edi
cmp edi, 0x478b
jl 0x1003d16c
inc esi
cmp esi, 0x6990
jl 0x1003d16a
mov esi, dword [ebp - 0x38]
mov edi, dword [ebp - 0x20]
inc esi
mov dword [ebp - 0x38], esi
cmp esi, 0x68e
jl 0x1003d15d
inc edi
mov dword [ebp - 0x20], edi
cmp edi, 0x47bb
jl 0x1003d158
mov eax, dword [ebp - 0x18]
xor ecx, ecx
mov edx, dword [ebp - 0x28]
mov eax, dword [ebp - 0x2f0]
push 0
cmp dword [eax + 8], 1
mov eax, dword [ebp - 0x300]
setne cl
cmp ecx, dword [eax + edx*4]
mov eax, dword [ebp - 0x174]
pop ecx
setle cl
xor edx, edx
cmp ecx, eax
mov eax, dword [ebp - 0x2c]
setne dl
xor ecx, ecx
sub edx, eax
cmp edx, 0xfffffff9
setg cl
xor eax, eax
cmp ecx, 6
setle al
cmp eax, 7
ja 0x1003d222
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x300]
cmp dword [eax], ebx
je 0x1003d28d
mov dword [ebp - 0x2c], 0xfffffffa
cmp dword [ebp - 0x2c], ebx
je 0x1003d294
push ecx
push 0x633a
lea eax, [ebp - 0x174]
push eax
push ebx
lea edx, [ebp - 0x2f0]
call fcn.10038f21
add esp, 0x10
cmp dword [ebp - 0x2f0], 0
je 0x1003d26f
push dword [ebp - 0x2f0]
call fcn.10047697
pop ecx
cmp dword [ebp - 0x300], 0
je 0x10040e46
push dword [ebp - 0x300]
call fcn.10047697
pop ecx
jmp 0x10040e46
mov dword [ebp - 0x18], 0xfffffff6
cmp dword [ebp - 0x30], 0x33da
jge 0x1003d2a8
push str.eatoo_bim_vagc_rxhwnzfik_mykpz_tdhrtiu
call fcn.1004752f
pop ecx
mov dword [ebp - 4], 0xe
inc dword [ebp - 0x28]
jmp 0x1003d0fd
mov dword [ebp - 0x24], 0x6f76
cmp dword [ebp - 0x24], 0x734e
jle 0x1003d340
mov dword [ebp - 0x20], ebx
mov ecx, ebx
mov dword [ebp - 0x18], ebx
mov esi, ebx
mov edi, ebx
mov eax, esi
cdq
idiv edi
lea eax, [ecx + edx]
and eax, dword [ebp - 0x20]
lea ecx, [ebp - 0x62c]
cdq
push edx
push eax
call fcn.10001ade
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x1003d2f6
mov eax, dword [eax]
push eax
call fcn.1004752f
pop ecx
push ebx
push 1
lea ecx, [ebp - 0x62c]
call fcn.10013e9b
mov ecx, dword [ebp - 0x18]
inc edi
cmp edi, 0x599e
jl 0x1003d2d3
inc esi
cmp esi, 0x3c4d
jl 0x1003d2d1
inc ecx
mov dword [ebp - 0x18], ecx
cmp ecx, 0x2567
jl 0x1003d2cf
mov eax, dword [ebp - 0x20]
inc eax
mov dword [ebp - 0x20], eax
cmp eax, 0x3c0b
jl 0x1003d2ca
push 3
or edi, 0xffffffff
pop esi
cmp dword [ebp - 0x24], 0x6bfb
jge 0x1003d354
push str.vab_wmtnrhi_ibuooen_biix_uwjhuk_zbpsrxru
call fcn.1004752f
pop ecx
mov dword [ebp - 4], edi
push 2
pop ecx
mov dword [ebp - 0x3c], ecx
mov dword [ebp - 0x3c], 0x67b8
mov dword [ebp - 0x18], 0xfffffff7
mov dword [ebp - 0x20], ebx
mov dword [ebp - 0x2c], 0x9d88
mov dword [ebp - 0x24], 0xe213
mov dword [ebp - 0x1c], ebx
jmp 0x1003d392
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0x5ec], 0xdb50
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], esi
jl 0x1003d381
mov dword [ebp - 0x1c], ebx
jmp 0x1003d3ad
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0x5f4], 0x8bac04ee
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], ecx
jl 0x1003d39c
mov dword [ebp - 0x1c], ebx
jmp 0x1003d3c8
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0x5d4], 0xfffffffe
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], esi
jl 0x1003d3b7
mov eax, dword [ebp - 0x5e8]
xor edx, edx
mov eax, dword [ebp - 0x5cc]
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x18], eax
mov ecx, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x18]
cmp ecx, eax
mov eax, dword [ebp - 0x20]
setl dl
inc dword [ebp - 0x20]
cmp eax, edx
jne 0x1003d3fb
xor eax, eax
inc eax
jmp 0x1003d3fd
mov eax, ebx
push 0x72f0
push ebx
push 0x775d
push 0x10b8
push ecx
push 0x6df8
push 0x5761
push ecx
mov dword [ebp - 0x24], eax
mov ecx, 0x7973
push 0x1418b1d1
call fcn.100395f8
mov dword [ebp - 0x20], 0xfd3df75d
add esp, 0x24
mov dword [ebp - 0x20], ebx
jmp 0x1003d472
xor ecx, ecx
mov dword [ebp - 0x18], ebx
inc ecx
jmp 0x1003d453
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x390], 0x394a2a4f
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], ecx
jl 0x1003d442
push 0x4a8a
push ecx
xor dl, dl
xor cl, cl
call fcn.10038e4f
mov eax, dword [ebp - 0x390]
dec dword [ebp - 0x20]
pop ecx
pop ecx
cmp dword [ebp - 0x20], 0xfffffffc
jl 0x1003d43a
mov dword [ebp - 0x150], 0x10079b10
mov dword [ebp - 0x100], ebx
mov dword [ebp - 0x18], ebx
jmp 0x1003d49e
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x310], 0x25b9b55b
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], esi
jl 0x1003d48d
mov dword [ebp - 0x30c], 0x17
jmp 0x1003d4c7
push ecx
push 0x4608
push ebx
sub esp, 0x10
call fcn.1003a862
add esp, 0x1c
inc dword [ebp - 0x30c]
cmp dword [ebp - 0x30c], 0x1d
je 0x1003d4af
mov dword [ebp - 0x108], 0xc
mov dword [ebp - 0x28], ebx
mov dword [ebp - 0x2c], 0x7758b39d
mov dword [ebp - 0x3c], 0xca69919c
mov dword [ebp - 0x1c], ebx
jmp 0x1003d501
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0x614], 0xc62bb2c5
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 4
jl 0x1003d4f0
xor ecx, ecx
mov dword [ebp - 0x1c], ebx
inc ecx
jmp 0x1003d51c
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0x3c8], ecx
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], ecx
jl 0x1003d50f
mov eax, dword [ebp - 0x28]
xor ecx, ecx
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x28]
test eax, eax
mov edx, dword [ebp - 0x28]
mov eax, dword [ebp - 0x28]
setle cl
sub edx, ecx
xor ecx, ecx
cmp edx, eax
setge cl
xor edx, edx
sub ecx, dword [ebp - 0x28]
mov eax, dword [ebp - 0x28]
cmp ecx, 0x3a0f
setle dl
xor ecx, ecx
cmp edx, eax
setge cl
cmp ecx, 0xcea445a8
mov dword [ebp - 0x60c], ecx
mov dword [ebp - 0x3c8], ecx
mov ecx, dword [ebp - 0x108]
sbb eax, eax
neg eax
mov dword [ebp - 0x2c], eax
mov al, byte [0x10079b10]
cmp al, byte [ecx + 0x10079b10]
je 0x1003d59f
inc ecx
mov dword [ebp - 0x108], ecx
cmp ecx, 0xe0
jl 0x1003d4da
jmp 0x1003d7ed
push esi
lea ecx, [ebp - 0x1dc]
call fcn.100138f8
mov dword [ebp - 4], 0x13
lea ecx, [ebp - 0x1e8]
mov dword [ebp - 0x3d0], 0xfffffff8
mov dword [ebp - 0x3f0], esi
push 1
call fcn.100138f8
mov byte [ebp - 4], 0x14
lea ecx, [ebp - 0x200]
mov dword [ebp - 0x3a0], 0x925f321e
mov dword [ebp - 0x3a8], ebx
push 2
mov dword [ebp - 0x398], ebx
call fcn.100138f8
lea eax, [ebp - 0x1dc]
mov byte [ebp - 4], 0x15
push eax
push ecx
push ecx
lea eax, [ebp - 0x180]
mov cl, 1
push eax
call fcn.10038cf9
lea eax, [ebp - 0x1e8]
mov edx, 0x1a9d
push eax
push ebx
lea eax, [ebp - 0x180]
mov ecx, 0xa07
push eax
xor eax, eax
inc eax
push eax
push 0x20f
push eax
call fcn.1003bf72
add esp, 0x28
lea eax, [ebp - 0x180]
mov dl, 1
push eax
push ecx
lea eax, [ebp - 0x200]
mov ecx, 0x6155
push 0x5b86
push eax
call fcn.10038d41
lea eax, [ebp - 0x1dc]
xor cl, cl
push eax
lea eax, [ebp - 0x1e8]
push eax
lea eax, [ebp - 0x398]
push eax
lea eax, [ebp - 0x3f0]
push eax
lea eax, [ebp - 0x3a0]
push eax
lea eax, [ebp - 0x200]
push eax
lea eax, [ebp - 0x3d0]
push eax
lea eax, [ebp - 0x3a8]
push eax
call fcn.10038b84
add esp, 0x30
cmp dword [ebp - 0x200], 0
je 0x1003d6c5
push dword [ebp - 0x200]
call fcn.10047697
pop ecx
mov dword [ebp - 0x200], ebx
mov dword [ebp - 0x1fc], ebx
mov dword [ebp - 0x1f8], ebx
cmp dword [ebp - 0x1e8], 0
je 0x1003d6ec
push dword [ebp - 0x1e8]
call fcn.10047697
pop ecx
mov dword [ebp - 0x1e8], ebx
mov dword [ebp - 0x1e4], ebx
mov dword [ebp - 0x1e0], ebx
mov dword [ebp - 4], edi
cmp dword [ebp - 0x1dc], 0
je 0x1003d716
push dword [ebp - 0x1dc]
call fcn.10047697
pop ecx
mov dword [ebp - 0x1dc], ebx
mov dword [ebp - 0x1d8], ebx
mov dword [ebp - 0x1d4], ebx
push 0x8d5
push ecx
push ecx
lea eax, [ebp - 0x100]
xor cl, cl
push eax
lea eax, [ebp - 0x108]
push eax
call fcn.1003870a
add esp, 0x14
mov dword [ebp - 0x28], 0xe2bbef7d
lea ecx, [ebp - 0x268]
push 4
call fcn.100138f8
xor edx, edx
mov dword [ebp - 0x24], 0xc57f39ce
mov dword [ebp - 0x1c], ebx
inc edx
jmp 0x1003d769
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0x110], 0xfffc
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], edx
jl 0x1003d758
mov dword [ebp - 0x1c], ebx
jmp 0x1003d782
mov ecx, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x268]
mov dword [eax + ecx*4], edx
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 4
jl 0x1003d773
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x268]
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x28]
mov dword [ecx + 4], edi
mov dword [ebp - 0x24], edx
mov eax, dword [ebp - 0x24]
imul eax, dword [ebp - 0x28]
test eax, eax
je 0x1003d7bc
cmp dword [ecx + 4], ebx
jne 0x1003d7be
mov edx, ebx
inc dword [ebp - 0x110]
mov eax, dword [ebp - 0x110]
push dword [ebp - 0x268]
sub eax, edx
mov dword [ebp - 0x28], eax
call fcn.10047697
pop ecx
mov dword [ebp - 0x268], ebx
mov dword [ebp - 0x264], ebx
mov dword [ebp - 0x260], ebx
mov dword [ebp - 0xe0], 0xe125d16d
lea ecx, [ebp - 0x13c]
mov dword [ebp - 0x188], edi
push 1
call fcn.100138f8
lea eax, [ebp - 0x13c]
mov dword [ebp - 4], 0x16
push eax
push ecx
push ecx
lea eax, [ebp - 0x594]
mov dword [ebp - 0x540], 0xfffffffb
push eax
mov dword [ebp - 0x57c], edi
xor dl, dl
mov dword [ebp - 0x580], edi
mov ecx, 0x7813
push 0x54e9
call fcn.10039292
mov eax, dword [ebp - 0xe0]
add esp, 0x14
cmp eax, dword [ebp - 0xe0]
jg 0x1003d8d1
push ecx
push 1
push 0x2787
push ecx
mov dword [ebp - 0x3e8], 0x9d010789
lea edx, [ebp - 0x7d]
mov dword [ebp - 0x3b0], 0xbe92e3f9
push 0x58eb
mov byte [ebp - 0x7d], bl
call fcn.10038d99
add esp, 0x14
lea eax, [ebp - 0x3e8]
lea edx, [ebp - 0xe0]
push 0x3e03
push 0x63a5
push eax
push ecx
lea eax, [ebp - 0x188]
push eax
lea eax, [ebp - 0x13c]
push eax
push 0x7604
lea eax, [ebp - 0x3b0]
push eax
push 0x5f82
push ecx
push ebx
mov ecx, 0x4f49
call fcn.10037c6c
add esp, 0x2c
jmp 0x1003d917
lea eax, [ebp - 0x2a0]
mov dword [ebp - 0x2a0], 0xf1bd53d2
push eax
push 0x752e
push ecx
lea eax, [ebp - 0xe0]
mov dword [ebp - 0x2a8], 0xfffffffb
push eax
lea eax, [ebp - 0x188]
mov cl, 1
push eax
lea eax, [ebp - 0x2a8]
push eax
lea edx, [ebp - 0x13c]
call fcn.1003c3b6
add esp, 0x18
sub esp, 0x10
lea eax, [ebp - 0x13c]
mov edx, 0x472b
xor cl, cl
push 0x561
push eax
sub esp, 0xc
call fcn.100392ea
add esp, 0x24
mov dword [ebp - 4], edi
cmp dword [ebp - 0x13c], 0
je 0x1003d962
push dword [ebp - 0x13c]
call fcn.10047697
pop ecx
mov dword [ebp - 0x13c], ebx
mov dword [ebp - 0x138], ebx
mov dword [ebp - 0x134], ebx
mov dword [ebp - 0x37c], 4
mov dword [ebp - 0x18], 0xcea5d6c0
mov dword [ebp - 0x18], 0xd
jmp 0x1003d9b4
push 0x70f0
lea eax, [ebp - 0x2b0]
mov dword [ebp - 0x2b0], 0xeede0b40
push eax
push ecx
push 0x603f
push 0x4fdf
push 0x5a94
mov edx, 0x6b65
xor cl, cl
call fcn.1003c3b6
add esp, 0x18
dec dword [ebp - 0x18]
cmp dword [ebp - 0x18], 0xffffffec
jge 0x1003d97c
xor eax, eax
inc eax
push 0x3969
push eax
mov dl, al
mov cl, al
call fcn.10038e4f
mov dword [ebp - 0xdc], 0x10079bf0
mov dword [ebp - 0x3c], ebx
mov dword [ebp - 0x3c], 0xd8da8e97
mov dword [ebp - 0x3c], 0xfffffffa
mov dword [ebp - 0x3c], 0x66f5a9c4
mov dword [ebp - 0x3c], ebx
mov dword [ebp - 0x3c], 0x8f0aa6e6
mov dword [ebp - 0x2b8], edi
mov dword [ebp - 0x30], 0x2df4
cmp dword [ebp - 0x30], 0x31cc
pop ecx
pop ecx
jle 0x1003da95
mov ecx, ebx
mov dword [ebp - 0x18], ebx
mov eax, ebx
mov dword [ebp - 0x20], ebx
mov edi, ebx
mov edx, eax
mov dword [ebp - 0x38], 0x68a8
mov dword [ebp - 0x24], edx
mov eax, ecx
mov ecx, edx
sar eax, cl
lea ecx, [ebp - 0x77c]
cdq
push edx
push eax
call fcn.10001ade
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x1003da4a
mov eax, dword [eax]
push eax
call fcn.1004752f
pop ecx
push ebx
push 1
lea ecx, [ebp - 0x77c]
call fcn.10013e9b
mov edx, dword [ebp - 0x24]
mov ecx, dword [ebp - 0x18]
add edx, edi
dec dword [ebp - 0x38]
mov dword [ebp - 0x24], edx
jne 0x1003da2c
mov eax, dword [ebp - 0x20]
inc edi
cmp edi, 0x6a4a
jl 0x1003da20
inc eax
mov dword [ebp - 0x20], eax
cmp eax, 0x5882
jl 0x1003da1e
inc ecx
mov dword [ebp - 0x18], ecx
cmp ecx, 0x8029
jl 0x1003da19
or edi, 0xffffffff
push esi
lea ecx, [ebp - 0x20c]
call fcn.100138f8
cmp dword [ebp - 0x30], 0x2d84
jge 0x1003dab5
push str.iukdw_mfjwy_ikwynznq_tix_bbevpcx_fjozkt_lmrfph_iucivqj_ayn_kfpl_axopfefhp_wvbkjpjcl
call fcn.1004752f
pop ecx
push ecx
push ecx
push 1
push ecx
lea edx, [ebp - 0x50]
mov dword [ebp - 4], 0x17
lea ecx, [ebp - 0x20c]
call fcn.100375c5
add esp, 0x10
mov dword [ebp - 0x50], ebx
jmp 0x1003dae4
mov eax, dword [ebp - 0x50]
mov dword [ebp + eax*4 - 0x668], esi
inc dword [ebp - 0x50]
cmp dword [ebp - 0x50], esi
jl 0x1003dad7
mov dword [ebp - 0x50], ebx
jmp 0x1003daff
mov eax, dword [ebp - 0x50]
mov dword [ebp + eax*4 - 0x490], 0xdfad5bef
inc dword [ebp - 0x50]
cmp dword [ebp - 0x50], 2
jl 0x1003daee
dec dword [ebp - 0x490]
lea eax, [ebp - 0x20c]
push eax
push 0x72c6
lea eax, [ebp - 0x2b8]
mov ecx, 0x4109
push eax
push 1
call fcn.10038eae
add esp, 0x10
mov dword [ebp - 4], edi
cmp dword [ebp - 0x20c], 0
je 0x1003db57
push dword [ebp - 0x20c]
call fcn.10047697
pop ecx
mov dword [ebp - 0x20c], ebx
mov dword [ebp - 0x208], ebx
mov dword [ebp - 0x204], ebx
mov cl, byte [0x10079bf0]
mov dl, byte [0x10079b10]
mov byte [ebp - 0x41], cl
call fcn.10041108
mov byte [0x10079bf0], al
xor eax, eax
inc eax
mov dword [ebp - 0x20], eax
cmp eax, 4
jge 0x1003e16d
mov dword [ebp - 0x38], 0x2c2d
cmp dword [ebp - 0x38], 0x2d77
jle 0x1003dc1e
mov dword [ebp - 0x30], ebx
mov eax, ebx
mov dword [ebp - 0x18], ebx
mov ecx, ebx
mov dword [ebp - 0x24], ebx
cdq
mov edi, ebx
idiv ecx
mov eax, edx
mov dword [ebp - 0x2c], eax
cdq
lea ecx, [ebp - 0x6ec]
idiv edi
mov eax, dword [ebp - 0x30]
sub eax, edx
cdq
push edx
push eax
call fcn.10001ade
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x1003dbca
mov eax, dword [eax]
push eax
call fcn.1004752f
pop ecx
push ebx
push 1
lea ecx, [ebp - 0x6ec]
call fcn.10013e9b
mov eax, dword [ebp - 0x2c]
inc edi
cmp edi, 0x769c
jl 0x1003dbaa
mov ecx, dword [ebp - 0x24]
mov eax, dword [ebp - 0x18]
inc ecx
mov dword [ebp - 0x24], ecx
cmp ecx, 0x2d9e
jl 0x1003dba0
inc eax
mov dword [ebp - 0x18], eax
cmp eax, 0x78c8
jl 0x1003db9b
mov ecx, dword [ebp - 0x30]
inc ecx
mov dword [ebp - 0x30], ecx
cmp ecx, 0x1e43
jl 0x1003db96
or edi, 0xffffffff
cmp dword [ebp - 0x38], 0x2baa
jge 0x1003dc32
push str.qlbivvjig_ugayb_smqbt_iis_oqcl_puhmys_fcpbbi_xpzygkibt_nnlcafjb_kia_agtztin_duuppyqoh_mxr
call fcn.1004752f
pop ecx
mov dword [ebp - 4], edi
lea ecx, [ebp - 0xf8]
mov dword [ebp - 0x60], ebx
push esi
call fcn.100138f8
push ecx
push ecx
push 0x6d40
mov dword [ebp - 4], 0x1c
lea eax, [ebp - 0xf8]
push 0x5f67
mov dword [ebp - 0x84], ebx
lea edx, [ebp - 0x370]
push ebx
mov dword [ebp - 0x190], 0xfffffff6
mov dword [ebp - 0x2c8], 0x7c8
push eax
call fcn.1003c71f
add esp, 0x18
mov dword [ebp - 0x60], ebx
cmp dword [ebp - 0x60], 0xe
jge 0x1003df4e
mov dword [ebp - 0x48], 9
mov dword [ebp - 0x4c], 0xcd430964
mov dword [ebp - 0x3e4], ebx
mov dword [ebp - 0x2d0], 0x30cd947e
mov dword [ebp - 0x48], ebx
cmp dword [ebp - 0x48], 2
jg 0x1003df46
mov dword [ebp - 0x1a4], edi
mov ecx, dword [ebp - 0x48]
mov eax, dword [ebp - 0xf8]
cmp dword [eax + ecx*4], ebx
je 0x1003deb5
mov eax, dword [ebp - 0x48]
xor edx, edx
mov dword [ebp - 0x4c], edi
xor ecx, ecx
mov eax, dword [ebp - 0x4c]
inc edx
cmp eax, edx
setg cl
cmp ecx, dword [ebp - 0x48]
jne 0x1003dcf4
cmp dword [ebp - 0x60], ebx
jne 0x1003dcf6
mov edx, ebx
mov eax, dword [ebp - 0x48]
xor ecx, ecx
mov esi, dword [ebp - 0xf8]
cmp edx, dword [esi + eax*4]
mov edx, 0xfd03b15a
setge cl
xor eax, eax
cmp ecx, dword [esi + 8]
setge al
dec eax
mov dword [ebp - 0x84], eax
mov ecx, dword [ebp - 0x48]
mov eax, dword [ebp - 0xf8]
cmp edx, dword [eax + ecx*4]
mov eax, dword [ebp - 0x60]
sbb edx, edx
inc edx
imul edx, dword [esi + 8]
sub edx, 0xfffe
neg edx
sbb edx, edx
xor ecx, ecx
inc edx
cmp edx, eax
mov eax, dword [ebp - 0x48]
setge cl
sub ecx, eax
mov eax, dword [ebp - 0x48]
add eax, ecx
cmp eax, dword [ebp - 0x60]
jl 0x1003dd5b
cmp dword [esi + 8], ebx
je 0x1003deb5
mov dword [ebp - 0x2c0], 0xfffffffa
mov dword [ebp - 0x4c], ebx
cmp dword [ebp - 0x4c], 2
jg 0x1003de7a
push ebx
push ecx
lea eax, [ebp - 0xf8]
push eax
lea edx, [ebp - 0x48]
call fcn.10039353
add esp, 0xc
mov dword [ebp - 0x84], ebx
cmp dword [ebp - 0x84], 2
jg 0x1003de72
mov dword [ebp - 0x18], ebx
mov dword [ebp - 0x24], 0x67a9
cmp dword [ebp - 0x24], 0x6b56
jle 0x1003de12
mov ecx, ebx
mov dword [ebp - 0x18], ebx
mov eax, ebx
mov dword [ebp - 0x30], ebx
mov esi, ebx
cdq
idiv esi
and edx, ecx
lea ecx, [ebp - 0x644]
mov eax, edx
cdq
push edx
push eax
call fcn.10001ade
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x1003ddd7
mov eax, dword [eax]
push eax
call fcn.1004752f
pop ecx
push ebx
push 1
lea ecx, [ebp - 0x644]
call fcn.10013e9b
mov eax, dword [ebp - 0x30]
inc esi
mov ecx, dword [ebp - 0x18]
cmp esi, 0x5cad
jl 0x1003ddb8
inc eax
mov dword [ebp - 0x30], eax
cmp eax, 0x5ee5
jl 0x1003ddb6
inc ecx
mov dword [ebp - 0x18], ecx
cmp ecx, 0x4ed9
jl 0x1003ddb1
mov dword [ebp - 0x18], 2
cmp dword [ebp - 0x18], ebx
jl 0x1003de31
mov ecx, dword [ebp - 0x4c]
mov eax, dword [ebp - 0xf8]
cmp dword [eax + ecx*4], ebx
jne 0x1003de31
dec dword [ebp - 0x18]
jns 0x1003de1e
cmp dword [ebp - 0x24], 0x6482
jge 0x1003de45
push str.chsno_owbripcle_ucqb
call fcn.1004752f
pop ecx
push ecx
lea eax, [ebp - 0x190]
mov dword [ebp - 4], 0x1c
push eax
lea eax, [ebp - 0x60]
mov ecx, 0x982
push eax
push 1
call fcn.10037f6f
add esp, 0x10
inc dword [ebp - 0x84]
jmp 0x1003dd8c
inc dword [ebp - 0x4c]
jmp 0x1003dd68
lea eax, [ebp - 0x84]
push eax
lea eax, [ebp - 0x1a4]
push eax
push ecx
push ecx
push 0x22bd
push ecx
lea eax, [ebp - 0x2c0]
push eax
push ecx
lea eax, [ebp - 0x48]
push eax
lea eax, [ebp - 0x4c]
push 1
push eax
lea edx, [ebp - 0x190]
lea ecx, [ebp - 0x60]
call fcn.100376dc
add esp, 0x2c
jmp 0x1003dedc
mov byte [ebp - 0x31], bl
cmp byte [ebp - 0x31], 0
je 0x1003dedc
push 0xc82
xor eax, eax
mov edx, 0x2e69
inc eax
push ebx
push eax
push 0x1a7
mov cl, al
call fcn.1003b2e3
add esp, 0x10
mov dword [ebp - 0x4c], ebx
jmp 0x1003df38
lea eax, [ebp - 0x1a4]
mov dword [ebp - 0x3ec], 0x642fc308
push eax
lea eax, [ebp - 0x2c8]
push eax
push 0x100a
push ecx
lea eax, [ebp - 0x48]
push eax
lea eax, [ebp - 0x2d0]
push eax
push ecx
lea eax, [ebp - 0x3e4]
push eax
lea eax, [ebp - 0xf8]
push eax
lea eax, [ebp - 0x3ec]
push eax
push ebx
push 0x3f6c
push ecx
lea ecx, [ebp - 0x84]
call fcn.10039cb2
add esp, 0x34
inc dword [ebp - 0x4c]
cmp dword [ebp - 0x4c], 2
jle 0x1003dee1
inc dword [ebp - 0x48]
jmp 0x1003dcb5
inc dword [ebp - 0x60]
jmp 0x1003dc8a
mov dword [ebp - 4], edi
cmp dword [ebp - 0xf8], 0
je 0x1003df78
push dword [ebp - 0xf8]
call fcn.10047697
pop ecx
mov dword [ebp - 0xf8], ebx
mov dword [ebp - 0xf4], ebx
mov dword [ebp - 0xf0], ebx
mov eax, dword [ebp - 0xdc]
mov esi, dword [ebp - 0x20]
mov dword [ebp - 0x2c], eax
mov al, byte [esi + eax]
mov dword [ebp - 0x1c0], 0xca0029bf
mov byte [ebp - 0x31], al
mov dword [ebp - 0x18], ebx
jmp 0x1003dfaa
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x564], 1
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 2
jl 0x1003df99
mov eax, dword [ebp - 0x560]
mov edx, 0x5328
mov dword [ebp - 0x1c0], eax
lea eax, [ebp - 0x1c0]
push ecx
push eax
push 0x533e
push 1
call fcn.10038f21
mov eax, esi
mov cl, byte [ebp - 0x31]
cdq
add esp, 0x10
idiv dword [ebp - 0x100]
mov esi, edx
mov dl, byte [ebp - 0x41]
call fcn.10041108
mov ecx, dword [ebp - 0x150]
mov dl, byte [esi + ecx]
mov cl, al
call fcn.10041108
mov ecx, dword [ebp - 0x2c]
mov edx, dword [ebp - 0x20]
push dword [ebp - 0x370]
movdqa xmm0, xmmword [0x1006f270]
movdqu xmmword [ebp - 0x5a8], xmm0
mov byte [edx + ecx], al
lea eax, [ebp - 0x598]
push eax
lea eax, [ebp - 0x5a8]
mov dword [ebp - 0xb4], 0xfffffffe
push eax
mov dword [ebp - 0x3d8], 6
lea ecx, [ebp - 0x14c]
mov dword [ebp - 0x368], 0xfde2bbef
push ebx
mov dword [ebp - 0x14c], ebx
mov dword [ebp - 0x148], ebx
mov dword [ebp - 0x144], ebx
call fcn.10016a68
mov dword [ebp - 4], 0x1f
mov dword [ebp - 0x2a4], ebx
mov dword [ebp - 0x3f4], 0xe5741311
mov dword [ebp - 0x2ac], 0xdad4f6c5
mov dword [ebp - 0xb4], 0x15
jmp 0x1003e0f8
mov dword [ebp - 0x18], 0xfffffff7
xor ecx, ecx
mov dword [ebp - 0x3c], ebx
inc ecx
mov dword [ebp - 0x3c], 0x6ec17e5c
mov dword [ebp - 0x3c], ecx
mov dword [ebp - 0x18], ebx
jmp 0x1003e0bd
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x3b8], ebx
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], ecx
jl 0x1003e0b0
mov dword [ebp - 0x18], ebx
cmp dword [ebp - 0x18], ebx
jl 0x1003e0d7
call fcn.10039028
dec dword [ebp - 0x18]
push 1
pop ecx
jns 0x1003e0ca
push ebx
push ecx
push 0x16f9
push ecx
mov edx, 0x6dab
lea ecx, [ebp - 0x3f4]
call fcn.1003c823
add esp, 0x10
inc dword [ebp - 0xb4]
cmp dword [ebp - 0xb4], 0x15
jl 0x1003e094
lea eax, [ebp - 0x3d8]
push eax
push 0x4b05
push ebx
lea eax, [ebp - 0x2a4]
push eax
lea eax, [ebp - 0xb4]
push eax
push ecx
lea edx, [ebp - 0x368]
lea ecx, [ebp - 0x2ac]
call fcn.10039417
add esp, 0x18
mov dword [ebp - 4], edi
cmp dword [ebp - 0x14c], 0
je 0x1003e15b
push dword [ebp - 0x14c]
call fcn.10047697
pop ecx
mov dword [ebp - 0x14c], ebx
mov dword [ebp - 0x148], ebx
mov dword [ebp - 0x144], ebx
mov al, byte [ebp - 0x31]
mov byte [ebp - 0x41], al
mov eax, dword [ebp - 0x20]
push 3
inc eax
pop esi
jmp 0x1003db73
push 1
lea ecx, [ebp - 0x28c]
call fcn.100138f8
mov dword [ebp - 4], 0x20
lea ecx, [ebp - 0x298]
mov dword [ebp - 0x3c], 8
push esi
call fcn.100138f8
push 1
lea eax, [ebp - 0x70]
mov byte [ebp - 4], 0x21
push eax
lea eax, [ebp - 0x28c]
mov dword [ebp - 0x3c], 0xcf427579
push eax
mov dword [ebp - 0x2b4], 0x714e288a
xor dl, dl
mov dword [ebp - 0x374], 0x37692afb
xor cl, cl
mov dword [ebp - 0x3c], 0xedb9d72f
push 0x21d8
call fcn.1003c49c
mov dword [ebp - 0x20], 0x1bc5
add esp, 0x10
cmp dword [ebp - 0x20], 0x1e63
jle 0x1003e29e
call dword [sym.imp.KERNEL32.dll_GetThreadLocale]
mov edx, ebx
mov dword [ebp - 0x18], ebx
mov ecx, ebx
mov dword [ebp - 0x38], ebx
mov eax, ebx
sar edx, cl
mov dword [ebp - 0x24], eax
mov dword [ebp - 0x30], edx
mov ecx, edx
mov edi, ebx
and ecx, eax
mov dword [ebp - 0x2c], ecx
mov eax, ecx
lea ecx, [ebp - 0x65c]
xor eax, edi
cdq
push edx
push eax
call fcn.10001ade
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x1003e22b
mov eax, dword [eax]
push eax
call fcn.1004752f
pop ecx
push ebx
push 1
lea ecx, [ebp - 0x65c]
call fcn.10013e9b
mov ecx, dword [ebp - 0x2c]
inc edi
cmp edi, 0x42f8
jl 0x1003e20f
mov eax, dword [ebp - 0x24]
mov edx, dword [ebp - 0x30]
inc eax
mov dword [ebp - 0x24], eax
cmp eax, 0x6b9c
jl 0x1003e206
mov ecx, dword [ebp - 0x38]
mov edx, dword [ebp - 0x18]
inc ecx
mov dword [ebp - 0x38], ecx
cmp ecx, 0x7121
jl 0x1003e1fc
inc edx
mov dword [ebp - 0x18], edx
cmp edx, 0x532a
jl 0x1003e1f7
push 0x839
push 0x3b3
push ebx
push ebx
push 0x19ec
push 0x1951
call dword [sym.imp.USER32.dll_ToUnicode]
or edi, 0xffffffff
mov dword [ebp - 0x70], ebx
jmp 0x1003e2b4
mov eax, dword [ebp - 0x70]
mov dword [ebp + eax*4 - 0x6bc], 0x72ba75a5
inc dword [ebp - 0x70]
cmp dword [ebp - 0x70], esi
jl 0x1003e2a3
cmp dword [ebp - 0x20], 0x18e0
jge 0x1003e2cd
push str.azdnenhb_qqphxaec_ukyfm_muzxr_jlp_thfn_tcy_jigyoctu_wmc
call fcn.1004752f
pop ecx
push ecx
lea eax, [ebp - 0x298]
mov dword [ebp - 4], 0x21
push eax
sub esp, 0x10
lea eax, [ebp - 0x70]
push eax
push ecx
push 0x44f7
push ecx
push ecx
push 1
sub esp, 0x18
call fcn.10039201
mov esi, dword [ebp - 0x28c]
add esp, 0x48
mov dword [esi], 0xe
cmp dword [esi], edi
jge 0x1003e5bd
push dword [ebp - 0x3b8]
movdqa xmm0, xmmword [0x1006f280]
lea ecx, [ebp - 0x15c]
xor eax, eax
mov dword [ebp - 0x15c], ebx
inc eax
mov dword [ebp - 0x158], ebx
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x3c], edi
mov dword [ebp - 0x3c], ebx
mov dword [ebp - 0x3c], 0xa5f9
mov dword [ebp - 0x3c], eax
lea eax, [ebp - 0x5b8]
push eax
lea eax, [ebp - 0x5c8]
mov dword [ebp - 0x3c], 0x41b44adc
push eax
mov dword [ebp - 0x3c], 5
push ebx
movdqu xmmword [ebp - 0x5c8], xmm0
mov dword [ebp - 0x154], ebx
call fcn.10016a68
mov byte [ebp - 4], 0x24
lea ecx, [ebp - 0x280]
mov dword [ebp - 0x3c], 2
mov dword [ebp - 0x3c], 0x3c076a5d
push 1
call fcn.100138f8
mov byte [ebp - 4], 0x25
xor ecx, ecx
mov dword [ebp - 0x36c], 9
inc ecx
mov dword [ebp - 0x3c], edi
mov dword [ebp - 0x3c], 0xccbd95d6
mov dword [ebp - 0x3c], ecx
mov dword [ebp - 0x38], 4
mov dword [ebp - 0xbc], ebx
jmp 0x1003e3d5
mov eax, dword [ebp - 0xbc]
mov dword [ebp + eax*4 - 0x5fc], 0xd491
inc dword [ebp - 0xbc]
cmp dword [ebp - 0xbc], 2
jl 0x1003e3be
push ecx
lea eax, [ebp - 0x280]
push eax
lea eax, [ebp - 0xbc]
push eax
call fcn.1003924e
add esp, 0xc
mov dword [ebp - 0x18], ebx
xor eax, eax
inc eax
cmp dword [ebp - 0x18], eax
jg 0x1003e55b
mov dword [ebp - 0x3c], ebx
lea ecx, [ebp - 0x250]
mov dword [ebp - 0x3c], edi
mov dword [ebp - 0x3c], 0x819570a5
mov dword [ebp - 0x3c], eax
mov dword [ebp - 0x3c], 0x733e34b6
mov dword [ebp - 0x3c], 0xb8ae505b
mov dword [ebp - 0x3c], 0xd3ecf04
mov dword [ebp - 0x3c], eax
mov dword [ebp - 0x1a0], 0xcefbde28
mov dword [ebp - 0x19c], 0xcefbde28
mov dword [ebp - 0x198], 0xcefbde28
mov dword [ebp - 0x194], 0xcefbde28
push 3
call fcn.100138f8
mov byte [ebp - 4], 0x26
mov dword [ebp - 0x24], 0x5be1
cmp dword [ebp - 0x24], 0x5d37
jle 0x1003e49e
mov esi, ebx
mov edi, ebx
lea eax, [edi + esi]
mov ecx, 0x1007d058
cdq
push edx
push eax
call fcn.100136b0
inc edi
cmp edi, 0x4e27
jl 0x1003e479
inc esi
cmp esi, 0x1a8c
jl 0x1003e477
or edi, 0xffffffff
mov byte [ebp - 4], 0x27
cmp dword [ebp - 0x24], 0x599b
jge 0x1003e4ba
mov edx, str.mloos_orchhib_iflj_lpe_lvkr_nvti_rnfao_xcxyfezwh_uxom_gjr_huxzwvt_qjiytqf_kgh_nbqgum
mov ecx, 0x1007d058
call fcn.100160b3
xor eax, eax
inc eax
push 0x22a3
push ecx
push ecx
lea ecx, [ebp - 0x250]
mov dword [ebp - 4], 0x26
push 0x2c80
push ecx
mov dl, al
lea ecx, [ebp - 0x598]
call fcn.10039292
pop ecx
pop ecx
lea eax, [ebp - 0x36c]
mov dl, 1
push 0xef
push eax
mov ecx, 0x62f8
call fcn.10037ded
add esp, 0x14
mov byte [ebp - 4], 0x25
cmp dword [ebp - 0x250], 0
je 0x1003e52c
push dword [ebp - 0x250]
call fcn.10047697
pop ecx
mov dword [ebp - 0x250], ebx
mov dword [ebp - 0x24c], ebx
mov dword [ebp - 0x248], ebx
inc dword [ebp - 0x18]
jmp 0x1003e3f8
dec dword [ebp - 0x38]
cmp dword [ebp - 0x280], 0
je 0x1003e585
push dword [ebp - 0x280]
call fcn.10047697
pop ecx
mov dword [ebp - 0x280], ebx
mov dword [ebp - 0x27c], ebx
mov dword [ebp - 0x278], ebx
mov byte [ebp - 4], 0x21
cmp dword [ebp - 0x15c], 0
je 0x1003e5b0
push dword [ebp - 0x15c]
call fcn.10047697
pop ecx
mov dword [ebp - 0x15c], ebx
mov dword [ebp - 0x158], ebx
mov dword [ebp - 0x154], ebx
mov esi, dword [ebp - 0x28c]
dec dword [esi]
jmp 0x1003e304
push ecx
lea eax, [ebp - 0x2b4]
push eax
push 0x3bdb
push ebx
lea ecx, [ebp - 0x374]
call fcn.10038ccb
add esp, 0x10
cmp dword [ebp - 0x298], 0
je 0x1003e600
push dword [ebp - 0x298]
call fcn.10047697
pop ecx
mov dword [ebp - 0x298], ebx
mov dword [ebp - 0x294], ebx
mov dword [ebp - 0x290], ebx
push esi
mov dword [ebp - 4], edi
call fcn.10047697
mov eax, dword [ebp - 0xdc]
pop ecx
mov dword [ebp - 0x28c], ebx
mov dword [ebp - 0x288], ebx
mov eax, dword [eax]
mov dword [ebp - 0x284], ebx
mov dword [ebp - 0x114], eax
push 3
mov dword [ebp - 0x30], 1
mov dword [ebp - 0x30], ebx
pop esi
cmp dword [ebp - 0x30], 0xfffffffe
jle 0x1003e74a
push esi
lea ecx, [ebp - 0x574]
call fcn.100138f8
push 0x4ece
push 0x2d68
push 0x1378
xor eax, eax
mov dword [ebp - 4], 0x29
inc eax
mov dword [ebp - 0x98], 9
push eax
push 0x177b
push 0x187a
lea ecx, [ebp - 0x588]
mov dl, al
push ecx
push 0x4615
push 0x5d24
push ebx
lea ecx, [ebp - 0x574]
push ecx
push 0x1d66
push 0x1f8f
mov ecx, 0x57d2
call fcn.1003b03a
add esp, 0x34
mov dword [ebp - 0x98], ebx
jmp 0x1003e700
mov dword [ebp - 0x20], 0x887cf2e5
mov dword [ebp - 0x20], ebx
jmp 0x1003e6f4
mov dword [ebp - 0x18], 0x285faafe
mov dword [ebp - 0x18], ebx
cmp dword [ebp - 0x18], 2
jg 0x1003e6f1
push 1
push ecx
push 0x1640
mov edx, 0x6d6a
call fcn.10039353
add esp, 0xc
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 2
jle 0x1003e6d1
xor ebx, ebx
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], 2
jle 0x1003e6c1
inc dword [ebp - 0x98]
cmp dword [ebp - 0x98], 2
jle 0x1003e6b5
push 0x3d35
lea eax, [ebp - 0x98]
mov edx, 0x2ad7
push eax
push 1
push 0x6a73
push 0x6e6a
push ecx
mov ecx, 0x2031
call fcn.10039417
add esp, 0x18
mov dword [ebp - 4], edi
lea ecx, [ebp - 0x574]
call fcn.10013aaa
dec dword [ebp - 0x30]
jmp 0x1003e637
mov eax, dword [ebp - 0x114]
dec eax
cmp eax, 0x2e83
ja 0x1004072e
mov dword [ebp - 0x64], edi
lea ecx, [ebp - 0x274]
push esi
call fcn.100138f8
mov dword [ebp - 4], 0x2a
mov dword [ebp - 0x6c], 0x963ab194
mov dword [ebp - 0xcc], ebx
mov dword [ebp - 0x18], 0xa1e1
mov dword [ebp - 0x30], 0xd25bb086
mov dword [ebp - 0xfc], 0xfffffffd
mov dword [ebp - 0x24], ebx
mov dword [ebp - 0x2bc], 0x6553ecf3
mov dword [ebp - 0x20], 0x4e8b
cmp dword [ebp - 0x20], 0x502c
jle 0x1003e809
mov edi, ebx
mov dword [ebp - 0x38], ebx
mov eax, ebx
mov dword [ebp - 0x24], ebx
mov dword [ebp - 0x2c], ebx
mov ecx, eax
mov ebx, edi
mov edi, dword [ebp - 0x2c]
shl ebx, cl
mov ecx, edi
mov eax, ebx
sar eax, cl
mov ecx, 0x1007d058
cdq
push edx
push eax
call fcn.100136b0
inc edi
cmp edi, 0x76fe
jl 0x1003e7ca
mov eax, dword [ebp - 0x24]
mov edi, dword [ebp - 0x38]
inc eax
mov dword [ebp - 0x24], eax
push 0
pop ebx
cmp eax, 0x72e1
jl 0x1003e7be
inc edi
mov dword [ebp - 0x38], edi
cmp edi, 0x2231
jl 0x1003e7b9
or edi, 0xffffffff
mov byte [ebp - 4], 0x2b
cmp dword [ebp - 0x20], 0x4ca5
jge 0x1003e825
mov edx, str.kcmgahc_alsddxtfw_odpx_srffsky_rhr_hahocqgxw_rfsmuv_ymcr_zkmtorlb_bqnubiyx_slzuniyr_cczeplko
mov ecx, 0x1007d058
call fcn.100160b3
xor edx, edx
inc edx
mov dword [ebp - 4], 0x2a
mov dword [ebp - 0x20], ebx
jmp 0x1003e86a
mov ecx, dword [ebp - 0x20]
mov eax, dword [ebp - 0x274]
mov dword [eax + ecx*4], ebx
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], esi
jl 0x1003e85b
dec dword [ebp - 0xfc]
je 0x1003e87f
mov dword [ebp - 0x24], edx
cmp dword [ebp - 0x64], ebx
jne 0x1003e882
mov dword [ebp - 0x24], ebx
mov eax, dword [ebp - 0x30]
mov dword [ebp - 0x6c], eax
mov ecx, dword [ebp - 0x6c]
mov eax, dword [ebp - 0x274]
add ecx, dword [eax]
neg ecx
sbb ecx, ecx
neg ecx
mov dword [eax], ecx
cmp dword [ebp - 0x6c], ebx
je 0x1003e8a3
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x64]
mov eax, dword [ebp - 0x24]
mov dword [ebp - 0xcc], eax
mov eax, dword [ebp - 0x64]
mov eax, dword [ebp - 0xcc]
mov dword [ebp - 0x30], edx
mov eax, dword [ebp - 0x30]
mov dword [ebp - 0x64], eax
mov eax, dword [ebp - 0x64]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x18]
cmp dword [ebp - 0x64], eax
jge 0x1003e8ef
lea eax, [ebp - 0x64]
push eax
push ebx
push 0x302d
lea ecx, [ebp - 0x6c]
call fcn.1003b58c
add esp, 0xc
jmp 0x1003e9a7
mov dword [ebp - 0x24], edx
mov dword [ebp - 0x20], ebx
jmp 0x1003e908
mov eax, dword [ebp - 0x20]
mov dword [ebp + eax*4 - 0x478], 0xa6cb
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], 4
jl 0x1003e8f7
mov eax, dword [ebp - 0x274]
mov eax, dword [eax]
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 0x4f412f3a
jg 0x1003e92e
mov eax, dword [ebp - 0x274]
mov ecx, edx
cmp dword [eax], ebx
jne 0x1003e930
mov ecx, ebx
mov eax, dword [ebp - 0x46c]
mov eax, dword [ebp - 0x6c]
mov eax, dword [ebp - 0x478]
lea eax, [ecx - 2]
mov dword [ebp - 0x24], eax
mov eax, dword [ebp - 0x24]
cmp edx, eax
mov eax, dword [ebp - 0x18]
sbb ecx, ecx
xor edx, edx
neg ecx
cmp ecx, eax
mov eax, dword [ebp - 0xcc]
setne dl
xor ecx, ecx
cmp edx, eax
mov eax, dword [ebp - 0x46c]
setl cl
mov dword [ebp - 0x2c], ecx
xor ecx, ecx
cmp dword [ebp - 0x2c], eax
mov eax, dword [ebp - 0x46c]
setl cl
xor edx, edx
add ecx, 0x1a33
cmp ecx, eax
mov eax, dword [ebp - 0x46c]
setg dl
xor ecx, ecx
cmp edx, eax
mov eax, dword [ebp - 0x6c]
setne cl
mov dword [ebp - 0x2c], ecx
xor ecx, ecx
cmp dword [ebp - 0x2c], eax
setg cl
mov dword [ebp - 0x30], ecx
push ecx
lea eax, [ebp - 0x274]
xor dl, dl
push eax
lea eax, [ebp - 0x2bc]
push eax
push ecx
lea eax, [ebp - 0x64]
push eax
lea eax, [ebp - 0x6c]
push eax
push ecx
lea eax, [ebp - 0xcc]
push eax
lea ecx, [ebp - 0xfc]
call fcn.1003b5b2
add esp, 0x20
mov dword [ebp - 4], edi
lea ecx, [ebp - 0x274]
call fcn.10013aaa
lea eax, [ebp - 0x37c]
push eax
push 1
lea eax, [ebp - 0x150]
push eax
lea eax, [ebp - 0xdc]
push eax
push ecx
lea eax, [ebp - 0x114]
push eax
lea eax, [ebp - 0x41]
push eax
push ecx
push 0x5d5b
lea ecx, [ebp - 0x100]
call fcn.100395f8
add esp, 0x24
lea ecx, [ebp - 0x444]
push 2
call fcn.100138f8
mov dword [ebp - 4], 0x2d
lea ecx, [ebp - 0x414]
mov dword [ebp - 0x28], 0xc08901f2
push esi
call fcn.100138f8
mov byte [ebp - 4], 0x2e
mov dword [ebp - 0x18], 0xfffffffb
mov dword [ebp - 0x1c], ebx
jmp 0x1003ea66
mov ecx, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x444]
mov dword [eax + ecx*4], 0xfffffffc
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 2
jl 0x1003ea53
mov dword [ebp - 0x1c], ebx
jmp 0x1003ea84
mov ecx, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x414]
mov dword [eax + ecx*4], 0x326874be
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], esi
jl 0x1003ea71
xor eax, eax
mov dword [ebp - 0x28], ebx
inc eax
cmp dword [ebp - 0x28], eax
jg 0x1003eb55
mov ecx, dword [ebp - 0x414]
mov dword [ebp - 0x2c], ecx
mov dword [ebp - 0x9c], 0x654fddd3
mov dword [ebp - 0x24], 0x5467
mov dword [ebp - 0x9c], eax
cmp dword [ebp - 0x9c], ebx
jl 0x1003eacd
call fcn.1003780d
dec dword [ebp - 0x9c]
jns 0x1003eac0
mov eax, dword [ebp - 0x9c]
xor ecx, ecx
mov edx, dword [ebp - 0x28]
mov eax, dword [ebp - 0x2c]
push 0
cmp dword [eax + 8], 1
mov eax, dword [ebp - 0x444]
setne cl
cmp ecx, dword [eax + edx*4]
mov eax, dword [ebp - 0x18]
pop edx
setle dl
xor ecx, ecx
cmp edx, eax
setne cl
xor edx, edx
sub ecx, dword [ebp - 0x24]
cmp ecx, 0xfffffff9
setg dl
xor eax, eax
cmp edx, 6
setle al
cmp eax, 7
ja 0x1003eb16
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x444]
cmp dword [eax], ebx
je 0x1003eb34
mov dword [ebp - 0x24], 0xfffffffa
cmp dword [ebp - 0x24], ebx
jne 0x1003eb55
jmp 0x1003eb46
sub esp, 0xc
lea eax, [ebp - 0x9c]
push eax
call fcn.100398a5
add esp, 0x10
inc dword [ebp - 0x28]
xor eax, eax
inc eax
cmp dword [ebp - 0x28], eax
jle 0x1003eaa1
mov eax, dword [ebp - 0x414]
mov ecx, dword [ebp - 0x18]
sub ecx, dword [eax + 8]
neg ecx
sbb ecx, ecx
inc ecx
mov dword [ebp - 0x18], ecx
lea ecx, [ebp - 0x414]
call fcn.10013aaa
lea ecx, [ebp - 0x444]
mov dword [ebp - 4], edi
call fcn.10013aaa
mov ecx, 0x1418c72c
call fcn.10040fc1
mov dword [ebp - 0xd4], ebx
mov dword [ebp - 0x128], ebx
mov dword [ebp - 0x124], ebx
mov dword [ebp - 0x120], ebx
mov dword [ebp - 0x11c], ebx
mov dword [ebp - 0x2c], ebx
mov dword [ebp - 0x18], ebx
jmp 0x1003ebc3
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x320], 2
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], esi
jl 0x1003ebb2
mov dword [ebp - 0x128], ebx
jmp 0x1003ebef
mov eax, dword [ebp - 0x128]
mov dword [ebp + eax*4 - 0x320], 0x250e6da5
cmp dword [ebp - 0x128], ebx
jne 0x1003ebf8
inc dword [ebp - 0x128]
cmp dword [ebp - 0x128], 2
jle 0x1003ebd0
cmp dword [ebp - 0x128], 0xffff
jne 0x1003ec10
cmp dword [ebp - 0x128], ebx
jne 0x1003ec10
mov ecx, ebx
jmp 0x1003ec13
xor ecx, ecx
inc ecx
mov eax, dword [ebp - 0x318]
add eax, dword [ebp - 0x318]
imul eax, ecx
cmp eax, 0x8586
jle 0x1003ec2f
mov eax, dword [ebp - 0x318]
mov eax, dword [ebp - 0x128]
add eax, dword [ebp - 0x320]
imul ecx, eax, 0x12de
mov eax, dword [ebp - 0x124]
sub ecx, eax
mov eax, dword [ebp - 0xdc]
mov dword [ebp - 0x2c], ecx
add eax, 4
mov dword [ebp - 0x30], 0x4a92
cmp dword [ebp - 0x30], 0x4d9c
mov dword [ebp - 0x38], eax
jle 0x1003ecbb
mov eax, ebx
mov dword [ebp - 0x18], ebx
mov edi, ebx
cdq
lea ecx, [ebp - 0x680]
idiv edi
mov eax, edx
cdq
push edx
push eax
call fcn.10001ade
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x1003ec8c
mov eax, dword [eax]
push eax
call fcn.1004752f
pop ecx
push ebx
push 1
lea ecx, [ebp - 0x680]
call fcn.10013e9b
mov eax, dword [ebp - 0x18]
inc edi
cmp edi, 0x5191
jl 0x1003ec6f
inc eax
mov dword [ebp - 0x18], eax
cmp eax, 0x5f2f
jl 0x1003ec6d
or edi, 0xffffffff
push 0xfffffffffffffff6
pop eax
mov dword [ebp - 0x408], eax
lea ecx, [ebp - 0x42c]
mov dword [ebp - 0x404], eax
mov dword [ebp - 0x400], eax
mov dword [ebp - 0x3fc], eax
push 4
call fcn.100138f8
mov dword [ebp - 4], 0x2f
lea ecx, [ebp - 0x4fc]
xor eax, eax
mov dword [ebp - 0x24], 0x3d4e7030
inc eax
mov dword [ebp - 0x18], 0xfffffffc
mov dword [ebp - 0x20], eax
mov dword [ebp - 0x28], 0x56e6
push eax
call fcn.100138f8
mov byte [ebp - 4], 0x30
xor edx, edx
mov dword [ebp - 0x2c], 0xdf890ba5
inc edx
mov dword [ebp - 0x54], ebx
cmp dword [ebp - 0x54], 4
jge 0x1003ed39
mov ecx, dword [ebp - 0x54]
mov eax, dword [ebp - 0x42c]
mov dword [eax + ecx*4], edx
inc dword [ebp - 0x54]
jmp 0x1003ed22
mov dword [ebp - 0x54], ebx
jmp 0x1003ed4f
mov eax, dword [ebp - 0x54]
mov dword [ebp + eax*4 - 0x480], 0xd8ef068c
inc dword [ebp - 0x54]
cmp dword [ebp - 0x54], 2
jl 0x1003ed3e
push 0x19bf
push edx
push 0x7524
push ebx
lea eax, [ebp - 0x4fc]
push eax
push edx
mov edx, 0x63cc
lea ecx, [ebp - 0x54]
call fcn.1003bf72
mov dword [ebp - 0x18], 0xfffffffd
add esp, 0x18
inc dword [ebp - 0x404]
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0x24]
mov ecx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x42c]
mov dword [eax + 8], ecx
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x4fc]
mov dword [ebp - 0x47c], eax
mov eax, dword [ebp - 0x42c]
mov edx, dword [ecx]
dec edx
mov dword [ecx], edx
mov dword [eax + 0xc], edx
je 0x1003edd7
mov eax, dword [ebp - 0x404]
mov eax, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x404]
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x28]
xor eax, eax
mov dword [ebp - 0x480], edx
inc eax
jmp 0x1003edd9
mov eax, ebx
mov dword [ebp - 0x18], eax
lea ecx, [ebp - 0x4fc]
call fcn.10013aaa
lea ecx, [ebp - 0x42c]
call fcn.10013aaa
cmp dword [ebp - 0x30], 0x4883
jge 0x1003ee06
push str.wzrfrg_swht_pevrhbfs
call fcn.1004752f
pop ecx
mov dword [ebp - 4], edi
mov dword [ebp - 0x18], ebx
push 2
mov dword [ebp - 0x20], 0xfffffff6
pop ecx
mov dword [ebp - 0x24], ecx
mov dword [ebp - 0x2c], 0xfaf14186
mov dword [ebp - 0x20], ebx
jmp 0x1003ee36
mov eax, dword [ebp - 0x20]
mov dword [ebp + eax*4 - 0xec], 1
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], ecx
jl 0x1003ee25
cmp dword [ebp - 0x18], ebx
je 0x1003ee4e
mov eax, dword [ebp - 0x18]
xor ecx, ecx
mov eax, dword [ebp - 0xec]
inc ecx
jmp 0x1003ee50
mov ecx, ebx
mov eax, dword [ebp - 0xec]
sub ecx, eax
cmp ecx, edi
sbb eax, eax
neg eax
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x18], ebx
je 0x1003eec3
mov eax, dword [ebp - 0x18]
xor edx, edx
mov eax, dword [ebp - 0xe8]
mov eax, dword [ebp - 0xe8]
mov dword [ebp - 0x20], eax
mov ecx, dword [ebp - 0xec]
mov eax, dword [ebp - 0xec]
sub ecx, eax
mov eax, dword [ebp - 0xec]
add eax, ecx
mov ecx, dword [ebp - 0x20]
add ecx, eax
mov eax, dword [ebp - 0x18]
cmp ecx, 1
setle dl
xor ecx, ecx
cmp edx, eax
setl cl
sub ecx, dword [ebp - 0x18]
neg ecx
sbb ecx, ecx
xor eax, eax
add ecx, 2
cmp eax, ecx
sbb eax, eax
inc eax
sub eax, dword [ebp - 0xe8]
je 0x1003eec3
xor eax, eax
inc eax
jmp 0x1003eec5
mov eax, ebx
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 1
mov ecx, dword [ebp - 0x18]
sbb eax, eax
neg eax
sub ecx, eax
neg ecx
push 4
sbb ecx, ecx
inc ecx
mov dword [ebp - 0x2c], ecx
lea ecx, [ebp - 0x514]
call fcn.100138f8
mov dword [ebp - 4], 0x33
mov dword [ebp - 0x1c], ebx
jmp 0x1003ef05
mov ecx, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x514]
mov dword [eax + ecx*4], edi
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 4
jl 0x1003eef6
mov dword [ebp - 0x24], 0x3c31
cmp dword [ebp - 0x24], 0x3eec
jle 0x1003ef6e
mov ecx, ebx
mov dword [ebp - 0x18], ebx
mov edi, ebx
mov eax, edi
and eax, ecx
lea ecx, [ebp - 0x6b0]
cdq
push edx
push eax
call fcn.10001ade
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x1003ef3e
mov dword [ebp - 0x1c], ebx
jmp 0x1003ef84
mov dword [ebp - 0x18], 0x22e4
cmp dword [ebp - 0x18], 0x24a3
jle 0x100407b1
mov edi, ebx
mov dword [ebp - 0x38], ebx
mov esi, ebx
mov dword [ebp - 0x24], ebx
mov ecx, esi
mov dword [ebp - 0x3c], edi
mov esi, edi
mov dword [ebp - 0x2c], ebx
sar esi, cl
mov edi, ebx
mov eax, esi
lea ecx, [ebp - 0x74c]
or eax, edi
cdq
push edx
push eax
call fcn.10001ade
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x10040772
mov eax, dword [eax]
push eax
call fcn.1004752f
pop ecx
push ebx
push 1
lea ecx, [ebp - 0x74c]
call fcn.10013e9b
inc edi
cmp edi, 0x17db
jl 0x10040756
mov esi, dword [ebp - 0x24]
mov edi, dword [ebp - 0x38]
inc esi
mov dword [ebp - 0x24], esi
cmp esi, 0x79c
jl 0x10040748
inc edi
mov dword [ebp - 0x38], edi
cmp edi, 0x410d
jl 0x10040743
or edi, 0xffffffff
cmp dword [ebp - 0x18], 0x1feb
jge 0x100407c5
push str.jfp_lvdvjcq_mnvogr_dgdldl_kwzz_hymxzqlea_qkn_xkex_zqqvwjtem_fyceztt_mbcerfz_irzlcsd_vvw
call fcn.1004752f
pop ecx
mov dword [ebp - 4], edi
mov eax, 0xdf60
mov dword [ebp - 0x20], ebx
mov dword [ebp - 0x1a0], eax
mov dword [ebp - 0x19c], eax
mov dword [ebp - 0x198], eax
mov dword [ebp - 0x194], eax
mov dword [ebp - 0x3dc], 4
mov dword [ebp - 0x20], 0xfffffff8
cmp dword [ebp - 0x20], 0x10
jg 0x10040e46
push 3
mov eax, 0x356a0b34
pop esi
mov dword [ebp - 0x1c], 0x54fddd3f
mov dword [ebp - 0x1a0], eax
mov dword [ebp - 0x19c], eax
mov dword [ebp - 0x198], eax
mov dword [ebp - 0x194], eax
mov dword [ebp - 0x1c], esi
cmp dword [ebp - 0x1c], ebx
jl 0x10040e39
mov dword [ebp - 0xc4], 0xb048
mov dword [ebp - 0x3c], 0x86aeba4d
mov dword [ebp - 0x3c], edi
mov dword [ebp - 0x18], ebx
jmp 0x10040cfd
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x7b4], 2
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 4
jl 0x10040cec
xor eax, eax
lea edx, [ebp - 0xc4]
inc eax
mov ecx, 0x1113
push eax
push eax
push 0x45db
push eax
call fcn.1003c823
add esp, 0x10
mov dword [ebp - 0xc4], esi
cmp dword [ebp - 0xc4], ebx
jl 0x10040e2b
mov dword [ebp - 0x28], edi
lea ecx, [ebp - 0x54c]
push 1
call fcn.100138f8
xor edx, edx
mov dword [ebp - 4], 0x5a
mov dword [ebp - 0x18], ebx
inc edx
jmp 0x10040d65
mov ecx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x54c]
mov dword [eax + ecx*4], 0xb6478c38
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], edx
jl 0x10040d52
mov dword [ebp - 0x28], esi
cmp dword [ebp - 0x28], ebx
jl 0x10040e11
mov dword [ebp - 0x30], 0xfbb6bc3e
mov dword [ebp - 0x3c], edx
mov dword [ebp - 0x3c], edx
mov dword [ebp - 0x30], esi
cmp dword [ebp - 0x30], ebx
jl 0x10040e08
push 0x16d6
push 0x5f37
mov dword [ebp - 0x18], edx
mov ecx, 0x2e57
mov dword [ebp - 0x3c], ebx
push edx
call fcn.1003c865
add esp, 0xc
mov dword [ebp - 0x18], ebx
jmp 0x10040dfb
push 2
lea ecx, [ebp - 0x53c]
call fcn.100138f8
push ecx
lea eax, [ebp - 0x578]
mov byte [ebp - 4], 0x5b
push eax
push 1
push ecx
lea ecx, [ebp - 0x53c]
call fcn.1003887a
push ebx
push 0xca4
lea ecx, [ebp - 0x3dc]
call fcn.1003c0a2
add esp, 0x18
mov byte [ebp - 4], 0x5a
lea ecx, [ebp - 0x53c]
call fcn.10013aaa
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], esi
jle 0x10040dae
dec dword [ebp - 0x30]
push 1
pop edx
jns 0x10040d8b
dec dword [ebp - 0x28]
jns 0x10040d76
lea ecx, [ebp - 0x54c]
mov dword [ebp - 4], edi
call fcn.10013aaa
dec dword [ebp - 0xc4]
jns 0x10040d33
dec dword [ebp - 0x1c]
jns 0x10040836
mov eax, 0x356a0b34
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], 0x10
jle 0x1004080b
mov ecx, dword [ebp - 0xc]
mov eax, 0x1418c72c
pop edi
pop esi
mov dword fs:[0], ecx
pop ebx
mov esp, ebp
pop ebp
ret