Function at 0x1003eafd
Capabilities:
Contain obfuscated stackstrings

Disassembly:
add esp, 4
pop edx
mov eax, dword [ebp - 0x500]
sub eax, dword [ebp - 0x74c]
cmp eax, 0xffffffff
jb 0x1003d227
push edi
push edx
add esp, 4
xor edi, 0x135ec
pop edi
push ecx
call 0x1003d20c
add byte [edi], dh
aaa
inc ebx
cmp ecx, dword [edi + 0x3c]
cmp eax, 0x4c48333
and ecx, 0x81f4
and ecx, 0x12de4
jmp 0x1003d221
pop ecx
jmp 0x1003d455
mov dword [ebp - 0xc88], 7
mov ecx, dword [ebp - 0x500]
mov dword [ebp - 0xabc], ecx
push esi
call 0x1003d24d
add byte [edx + 0x37], cl
aas
inc ecx
inc eax
dec edx
dec esi
inc ebx
inc ebp
add esp, 4
pop esi
push edi
call 0x1003d25f
add byte [edx + 0x44], al
inc ecx
dec ebp
inc ebx
inc ecx
cmp eax, 0x8104c483
iretd
push edx
sub edx, 0x17d62
xor edx, 0xd8f8
or edx, 0xa4d3
pop edx
push ecx
push ebx
add esp, 4
and ecx, 0x13ab3
call 0x1003d483
add byte [ebx + 0x36], cl
inc esi
inc ebp
aaa
dec ebp
inc edx
push eax
add esp, 4
pop ecx
mov dword [ebp - 0xab4], 0
push ebx
sub ebx, 0xebcc
xor ebx, 0x1368f
xor ebx, 0x7b76
pop ebx
push edi
push eax
add esp, 4
sub edi, 0xa467
add edi, 0xfacb
sub edi, 0x4a98
or edi, 0xfa32
pop edi
mov byte [ebp - 0x878], 0x45
mov byte [ebp - 0x877], 0x78
mov byte [ebp - 0x876], 0x69
mov byte [ebp - 0x875], 0x74
mov byte [ebp - 0x874], 0x50
mov byte [ebp - 0x873], 0x72
mov byte [ebp - 0x872], 0x6f
mov byte [ebp - 0x871], 0x63
mov byte [ebp - 0x870], 0x65
mov byte [ebp - 0x86f], 0x73
mov byte [ebp - 0x86e], 0x73
mov byte [ebp - 0x86d], 0
push edx
push edx
add esp, 4
add edx, 0x148a8
jmp 0x1003d528
pop edx
push edi
sub edi, 0x1674b
sub edi, 0x406a
pop edi
push edx
push esi
add esp, 4
or edx, 0xe9e4
sub edx, 0x8737
pop edx
mov ecx, 0x6b
mov word [ebp - 0x1734], cx
mov edx, 0x65
mov word [ebp - 0x1732], dx
mov eax, 0x72
mov word [ebp - 0x1730], ax
mov ecx, 0x6e
mov word [ebp - 0x172e], cx
mov edx, 0x65
mov word [ebp - 0x172c], dx
mov eax, 0x6c
mov word [ebp - 0x172a], ax
mov ecx, 0x33
mov word [ebp - 0x1728], cx
mov edx, 0x32
mov word [ebp - 0x1726], dx
mov eax, 0x2e
mov word [ebp - 0x1724], ax
mov ecx, 0x64
mov word [ebp - 0x1722], cx
mov edx, 0x6c
mov word [ebp - 0x1720], dx
mov eax, 0x6c
mov word [ebp - 0x171e], ax
xor ecx, ecx
mov word [ebp - 0x171c], cx
push edx
push esi
add esp, 4
and edx, 0x18507
pop edx
push ecx
sub ecx, 0x6c5e
call 0x1003d603
add byte [edx + 0x40], al
dec esi
dec esp
inc edx
dec ebp
push eax
dec ebx
add esp, 4
add ecx, 0x17c1d
jmp 0x1003d613
pop ecx
push esi
push ecx
add esp, 4
xor esi, 0x1dda
pop esi
push ebx
xor ebx, 0x7d2c
or ebx, 0x154fb
add ebx, 0x3d68
pop ebx
push edi
push ecx
add esp, 4
or edi, 0x4676
xor edi, 0x59da
pop edi
mov edx, dword fs:[0x18]
mov dword [ebp - 0x1ff4], edx
mov eax, dword [ebp - 0x1ff4]
mov ecx, dword [eax + 0x30]
mov dword [ebp - 0x1950], ecx
mov edx, dword [ebp - 0x1950]
mov dword [ebp - 0x159c], edx
push edx
push esi
add esp, 4
jmp 0x1003d679
pop edx
push eax
jmp 0x1003d683
call 0x1003d690
add byte [ecx + 0x41], al
inc edi
inc ecx
cmp eax, 0x4c48334
and eax, 0xdd41
sub eax, 0x1354
pop eax
cmp dword [ebp - 0x159c], 0
jne 0x1003d6b8
mov dword [ebp - 0x318], 0
jmp 0x1003d974
mov eax, dword [ebp - 0x159c]
mov ecx, dword [eax + 0xc]
mov edx, dword [ecx + 0xc]
mov dword [ebp - 0xc98], edx
push ecx
and ecx, 0x108d1
sub ecx, 0x136ba
or ecx, 0xbb3f
pop ecx
push edi
push eax
add esp, 4
jmp 0x1003d6e9
and edi, 0x1238e
add edi, 0x80cf
xor edi, 0xfffd
pop edi
cmp dword [ebp - 0xc98], 0
jne 0x1003d714
mov dword [ebp - 0x318], 0
jmp 0x1003d974
mov eax, dword [ebp - 0xc98]
mov dword [ebp - 0x504], eax
push ecx
push edx
add esp, 4
call 0x1003d734
add byte [esi + 0x3f], cl
aaa
cmp cl, byte [ebx + 0x37]
dec esp
inc edi
cmp eax, 0x8104c483
int1
jmp 0x9103d841
push ecx
push eax
add esp, 4
jmp 0x1003d981
or ecx, 0xf8fc
pop ecx
push edi
xor edi, 0xe9c
pop edi
push edx
jmp 0x1003d999
sub edx, 0x6dfc
and edx, 0x11809
pop edx
cmp dword [ebp - 0x318], 0
jne 0x1003e2bf
mov edx, 0x6b
mov word [ebp - 0x1770], dx
mov eax, 0x65
mov word [ebp - 0x176e], ax
mov ecx, 0x72
mov word [ebp - 0x176c], cx
mov edx, 0x6e
mov word [ebp - 0x176a], dx
mov eax, 0x65
mov word [ebp - 0x1768], ax
mov ecx, 0x6c
mov word [ebp - 0x1766], cx
mov edx, 0x33
mov word [ebp - 0x1764], dx
mov eax, 0x32
mov word [ebp - 0x1762], ax
mov ecx, 0x2e
mov word [ebp - 0x1760], cx
mov edx, 0x64
mov word [ebp - 0x175e], dx
mov eax, 0x6c
mov word [ebp - 0x175c], ax
mov ecx, 0x6c
mov word [ebp - 0x175a], cx
xor edx, edx
mov word [ebp - 0x1758], dx
push edx
or edx, 0xe1fb
pop edx
push eax
sub eax, 0xce22
and eax, 0xc415
pop eax
push esi
and esi, 0x117ad
pop esi
push ecx
sub ecx, 0x12eba
pop ecx
push esi
push ecx
add esp, 4
xor esi, 0x201a
pop esi
mov byte [ebp - 0x894], 0x4c
mov byte [ebp - 0x893], 0x6f
mov byte [ebp - 0x892], 0x61
mov byte [ebp - 0x891], 0x64
mov byte [ebp - 0x890], 0x4c
mov byte [ebp - 0x88f], 0x69
mov byte [ebp - 0x88e], 0x62
mov byte [ebp - 0x88d], 0x72
mov byte [ebp - 0x88c], 0x61
mov byte [ebp - 0x88b], 0x72
mov byte [ebp - 0x88a], 0x79
mov byte [ebp - 0x889], 0x57
mov byte [ebp - 0x888], 0
mov eax, dword fs:[0x18]
mov dword [ebp - 0x1954], eax
mov ecx, dword [ebp - 0x1954]
mov edx, dword [ecx + 0x30]
mov dword [ebp - 0x1958], edx
mov eax, dword [ebp - 0x1958]
mov dword [ebp - 0x15dc], eax
push edi
jmp 0x1003db0a
sub edi, 0x10cd6
jmp 0x1003db19
pop edi
push ebx
push edx
add esp, 4
call 0x1003db2e
add byte [ebx], bh
dec ecx
cmp byte [edx + 0x3e], al
inc ecx
inc edx
dec esp
inc ecx
add esp, 4
pop ebx
cmp dword [ebp - 0x15dc], 0
jne 0x1003db4a
mov dword [ebp - 0x750], 0
jmp 0x1003de06
mov ecx, dword [ebp - 0x15dc]
mov edx, dword [ecx + 0xc]
mov eax, dword [edx + 0xc]
mov dword [ebp - 0xca4], eax
push ecx
push esi
add esp, 4
sub ecx, 0xe0dc
pop ecx
push ebx
sub ebx, 0xc460
xor ebx, 0x296a
xor ebx, 0x741f
and ebx, 0x12855
pop ebx
push eax
push edx
add esp, 4
sub eax, 0xfc3d
pop eax
cmp dword [ebp - 0xca4], 0
jne 0x1003dba6
mov dword [ebp - 0x750], 0
jmp 0x1003de06
mov ecx, dword [ebp - 0xca4]
mov dword [ebp - 0x508], ecx
push edi
add edi, 0xc16a
pop edi
push edx
or edx, 0xf07f
xor edx, 0x15ae9
sub edx, 0x7081
pop edx
push eax
add eax, 0x14ab4
xor eax, 0x10963
pop eax
push edi
xor edi, 0x15c4b
pop edi
lea edx, [ebp - 0x1770]
mov dword [ebp - 0xca0], edx
mov eax, dword [ebp - 0x508]
mov ecx, dword [eax + 0x30]
mov dword [ebp - 0xc9c], ecx
xor edx, edx
mov word [ebp - 0x210], dx
xor eax, eax
mov word [ebp - 0x110], ax
push ecx
push ecx
add esp, 4
or ecx, 0x172a0
add ecx, 0x17c1e
add ecx, 0x2c70
pop ecx
push ecx
sub ecx, 0x3ae
jmp 0x1003dc36
sub ecx, 0x30e2
and ecx, 0x116e2
pop ecx
mov ecx, dword [ebp - 0xc9c]
mov dx, word [ecx]
mov word [ebp - 0x1036], dx
mov eax, dword [ebp - 0xc9c]
add eax, 2
mov dword [ebp - 0xc9c], eax
mov cx, word [ebp - 0x1036]
mov word [ebp - 0x210], cx
mov edx, dword [ebp - 0xca0]
mov ax, word [edx]
mov word [ebp - 0x1038], ax
mov ecx, dword [ebp - 0xca0]
add ecx, 2
mov dword [ebp - 0xca0], ecx
mov dx, word [ebp - 0x1038]
mov word [ebp - 0x110], dx
push ecx
add ecx, 0x7a1d
sub ecx, 0xba50
call 0x1003dcb8
add byte [esi + 0x3f], cl
cmp eax, 0x4532483c
inc edi
add esp, 4
pop ecx
push esi
push esi
add esp, 4
jmp 0x1003dcc8
add esi, 0x2aa
pop esi
movzx eax, word [ebp - 0x110]
test eax, eax
jne 0x1003dcf2
movzx ecx, word [ebp - 0x210]
movzx edx, word [ebp - 0x110]
sub ecx, edx
mov dword [ebp - 0x15e4], ecx
jmp 0x1003dd55
movzx eax, word [ebp - 0x210]
movzx ecx, word [ebp - 0x110]
cmp eax, ecx
je 0x1003dc11
movzx edx, word [ebp - 0x210]
xor edx, 0x20
movzx eax, word [ebp - 0x110]
cmp edx, eax
je 0x1003dc11
movzx ecx, word [ebp - 0x210]
movzx edx, word [ebp - 0x110]
cmp ecx, edx
jge 0x1003dd3f
mov dword [ebp - 0x15e0], 0xffffffff
jmp 0x1003dd49
mov dword [ebp - 0x15e0], 1
mov eax, dword [ebp - 0x15e0]
mov dword [ebp - 0x15e4], eax
cmp dword [ebp - 0x15e4], 0
jne 0x1003dd9e
push esi
push eax
add esp, 4
or esi, 0x6622
pop esi
push eax
push ecx
add esp, 4
sub eax, 0x91a4
pop eax
push ecx
sub ecx, 0x8d03
or ecx, 0x339e
jmp 0x1003dd89
or ecx, 0x15f97
pop ecx
mov ecx, dword [ebp - 0x508]
mov dword [ebp - 0x750], ecx
jmp 0x1003de06
push edx
push eax
add esp, 4
add edx, 0x10b35
add edx, 0x16d84
pop edx
push ecx
sub ecx, 0xc49b
jmp 0x1003ddbd
pop ecx
push edx
push edi
add esp, 4
sub edx, 0x1dfd
sub edx, 0x12c18
pop edx
mov edx, dword [ebp - 0x508]
mov eax, dword [edx]
mov dword [ebp - 0x508], eax
mov ecx, dword [ebp - 0x508]
cmp ecx, dword [ebp - 0xca4]
je 0x1003ddfc
mov edx, dword [ebp - 0x508]
cmp dword [edx + 0x30], 0
jne 0x1003dbb2
mov dword [ebp - 0x750], 0
push esi
push eax
add esp, 4
or esi, 0x4770
add esi, 0xb054
jmp 0x1003de1f
pop esi
push eax
push edx
add esp, 4
or eax, 0x6b8e
or eax, 0x167aa
and eax, 0x10387
pop eax
cmp dword [ebp - 0x750], 0
jne 0x1003de82
push edx
call 0x1003de51
add byte [esi], dh
inc esp
xor eax, 0x37323d49
dec ebp
add esp, 4
pop edx
push ebx
call 0x1003de63
add byte [ecx + 0x47], cl
inc esp
dec eax
dec ebp
inc esp
inc edi
add esp, 4
or ebx, 0x6fb2
and ebx, 0x7c05
pop ebx
mov dword [ebp - 0x79c], 0
jmp 0x1003e9a9
push edx
and edx, 0xb6c
pop edx
push eax
xor eax, 0x97f4
or eax, 0x2d3f
pop eax
push ecx
jmp 0x1003de9e
add ecx, 0x11e17
or ecx, 0xc210
jmp 0x1003deb3
pop ecx
mov eax, dword [ebp - 0x750]
mov ecx, dword [eax + 0x18]
mov dword [ebp - 0x320], ecx
mov dword [ebp - 0x760], 0
mov edx, dword [ebp - 0x320]
mov dword [ebp - 0x15e8], edx
cmp dword [ebp - 0x15e8], 0
jne 0x1003def3
mov eax, dword [ebp - 0x760]
mov dword [ebp - 0x3f0], eax
jmp 0x1003e1e4
mov ecx, dword [ebp - 0x15e8]
mov edx, dword [ebp - 0x320]
add edx, dword [ecx + 0x3c]
mov dword [ebp - 0x15ec], edx
jne 0x1003df1b
mov eax, dword [ebp - 0x760]
mov dword [ebp - 0x3f0], eax
jmp 0x1003e1e4
mov ecx, 8
imul edx, ecx, 0
mov eax, dword [ebp - 0x15ec]
mov ecx, dword [eax + edx + 0x78]
mov dword [ebp - 0x15f0], ecx
cmp dword [ebp - 0x15f0], 0
jne 0x1003df4d
mov edx, dword [ebp - 0x760]
mov dword [ebp - 0x3f0], edx
jmp 0x1003e1e4
mov eax, dword [ebp - 0x320]
add eax, dword [ebp - 0x15f0]
mov dword [ebp - 0x754], eax
jne 0x1003df72
mov ecx, dword [ebp - 0x760]
mov dword [ebp - 0x3f0], ecx
jmp 0x1003e1e4
mov edx, dword [ebp - 0x754]
mov eax, dword [ebp - 0x320]
add eax, dword [edx + 0x20]
mov dword [ebp - 0x195c], eax
mov ecx, dword [ebp - 0x754]
mov edx, dword [ebp - 0x320]
add edx, dword [ecx + 0x24]
mov dword [ebp - 0x1960], edx
mov eax, dword [ebp - 0x754]
mov ecx, dword [ebp - 0x320]
add ecx, dword [eax + 0x1c]
mov dword [ebp - 0x1964], ecx
mov dword [ebp - 0x758], 0
jmp 0x1003dfcc
mov eax, dword [ebp - 0x754]
mov ecx, dword [ebp - 0x758]
cmp ecx, dword [eax + 0x18]
jae 0x1003e1d8
mov edx, dword [ebp - 0x758]
mov eax, dword [ebp - 0x195c]
mov ecx, dword [ebp - 0x320]
add ecx, dword [eax + edx*4]
mov dword [ebp - 0x75c], ecx
mov edx, dword [ebp - 0x758]
mov eax, dword [ebp - 0x1960]
movzx ecx, word [eax + edx*2]
mov edx, dword [ebp - 0x1964]
mov eax, dword [ebp - 0x320]
add eax, dword [edx + ecx*4]
mov dword [ebp - 0x1968], eax
mov dword [ebp - 0x19c], 0
jmp 0x1003e03c
mov ecx, dword [ebp - 0x19c]
add ecx, 1
mov dword [ebp - 0x19c], ecx
mov edx, dword [ebp - 0x75c]
add edx, dword [ebp - 0x19c]
movsx eax, byte [edx]
test eax, eax
je 0x1003e0ee
mov ecx, dword [ebp - 0x19c]
movsx edx, byte [ebp + ecx - 0x894]
test edx, edx
je 0x1003e0ee
push esi
call 0x1003e079
add byte [esp + edi + 0x4a], al
cmp eax, 0x35423538
cmp eax, 0x8104c483
out 0x5d, al
pop edx
add dword [eax], eax
pop esi
push esi
push ecx
add esp, 4
sub esi, 0x15a13
jmp 0x1003e094
xor esi, 0x8805
pop esi
mov eax, dword [ebp - 0x75c]
add eax, dword [ebp - 0x19c]
movsx ecx, byte [eax]
mov edx, dword [ebp - 0x19c]
movsx eax, byte [ebp + edx - 0x894]
cmp ecx, eax
je 0x1003e0e0
mov ecx, dword [ebp - 0x75c]
add ecx, dword [ebp - 0x19c]
movsx edx, byte [ecx]
xor edx, 0x20
mov eax, dword [ebp - 0x19c]
movsx ecx, byte [ebp + eax - 0x894]
cmp edx, ecx
jne 0x1003e0e7
jmp 0x1003e02d
jmp 0x1003e0ee
push edi
and edi, 0x17f40
add edi, 0x174d6
pop edi
push esi
xor esi, 0x12e3b
xor esi, 0x15bfa
call 0x1003e116
add byte [ecx + 0x32], al
push eax
inc ecx
cmp ecx, dword ss:[esi - 0x7d]
les eax, [ecx + eax*4]
invalid
mov edx, dword [ebp - 0x760]
mov dword [ebp - 0x3f0], edx
cmp dword [ebp - 0x3f0], 0
je 0x1003e2bf
push ecx
push ecx
add esp, 4
and ecx, 0xaac8
add ecx, 0x6058
pop ecx
push ebx
push esi
add esp, 4
add ebx, 0x15895
jmp 0x1003e217
pop ebx
push edi
push ecx
add esp, 4
jmp 0x1003e222
pop edi
mov eax, dword [ebp - 0x3f0]
mov dword [ebp - 0x196c], eax
push esi
jmp 0x1003e236
pop esi
push esi
push ebx
add esp, 4
call 0x1003e24b
add byte [eax + 0x3d], cl
inc ebx
dec esi
inc edi
xor al, 0x36
dec edx
inc esi
add esp, 4
and esi, 0x14346
xor esi, 0x96aa
xor esi, 0x1614d
pop esi
mov ecx, dword [ebp - 0x196c]
mov dword [ebp - 0x1970], ecx
lea edx, [ebp - 0x1734]
push edx
call dword [ebp - 0x1970]
test eax, eax
jne 0x1003e2bf
push edi
sub edi, 0xde7e
pop edi
push edx
push ebx
add esp, 4
add edx, 0x1698
pop edx
push ebx
push ebx
add esp, 4
add ebx, 0x6184
pop ebx
push esi
push ecx
add esp, 4
or esi, 0x30c0
and esi, 0xb013
pop esi
mov dword [ebp - 0x79c], 0
jmp 0x1003e9a9
push ebx
push ecx
add esp, 4
add ebx, 0x8816
call 0x1003e2d9
add byte [edi + 0x49], al
xor bh, byte [eax]
dec esp
dec esp
xor al, 0x42
inc esi
add esp, 4
or ebx, 0x8040
xor ebx, 0xa045
pop ebx
push eax
sub eax, 0xba96
pop eax
mov eax, dword fs:[0x18]
mov dword [ebp - 0x1974], eax
mov ecx, dword [ebp - 0x1974]
mov edx, dword [ecx + 0x30]
mov dword [ebp - 0x1978], edx
mov eax, dword [ebp - 0x1978]
mov dword [ebp - 0x15f4], eax
push ebx
push esi
add esp, 4
sub ebx, 0x570f
xor ebx, 0x745a
or ebx, 0x1687e
and ebx, 0xe2d
pop ebx
push edi
push esi
add esp, 4
sub edi, 0x43cf
pop edi
push edx
or edx, 0x17e41
pop edx
cmp dword [ebp - 0x15f4], 0
jne 0x1003e362
mov dword [ebp - 0x318], 0
jmp 0x1003e609
mov ecx, dword [ebp - 0x15f4]
mov edx, dword [ecx + 0xc]
mov eax, dword [edx + 0xc]
mov dword [ebp - 0xcb4], eax
push ebx
push ecx
add esp, 4
add ebx, 0x8ddd
add ebx, 0x9976
and ebx, 0x9497
xor ebx, 0x14b0e
pop ebx
push esi
sub esi, 0xaef6
or esi, 0x1306d
add esi, 0xa513
pop esi
cmp dword [ebp - 0xcb4], 0
jne 0x1003e3be
mov dword [ebp - 0x318], 0
jmp 0x1003e609
mov ecx, dword [ebp - 0xcb4]
mov dword [ebp - 0x50c], ecx
push esi
push eax
add esp, 4
sub esi, 0x721b
and esi, 0x49c6
pop esi
push esi
and esi, 0xa65b
xor esi, 0x1240f
call 0x1003e3f8
add byte [esi + 0x36], al
inc edx
aaa
cmp dh, byte [edx]
cmp eax, 0xc4833c32
add al, 0x5e
lea edx, [ebp - 0x1734]
mov dword [ebp - 0xcb0], edx
mov eax, dword [ebp - 0x50c]
mov ecx, dword [eax + 0x30]
mov dword [ebp - 0xcac], ecx
xor edx, edx
mov word [ebp - 0x214], dx
xor eax, eax
mov word [ebp - 0x34], ax
push eax
push edi
add esp, 4
add eax, 0x7c20
sub eax, 0x2ed9
pop eax
push eax
xor eax, 0x5f46
pop eax
push edx
push edx
add esp, 4
xor edx, 0xc7ad
or edx, 0x2302
sub edx, 0x20fc
pop edx
mov ecx, dword [ebp - 0xcac]
mov dx, word [ecx]
mov word [ebp - 0x103a], dx
mov eax, dword [ebp - 0xcac]
add eax, 2
mov dword [ebp - 0xcac], eax
mov cx, word [ebp - 0x103a]
mov word [ebp - 0x214], cx
mov edx, dword [ebp - 0xcb0]
mov ax, word [edx]
mov word [ebp - 0x103c], ax
mov ecx, dword [ebp - 0xcb0]
add ecx, 2
mov dword [ebp - 0xcb0], ecx
mov dx, word [ebp - 0x103c]
mov word [ebp - 0x34], dx
push ebx
push ecx
add esp, 4
and ebx, 0x14b53
sub ebx, 0x7ad9
sub ebx, 0xaa15
add ebx, 0x3c62
pop ebx
push eax
xor eax, 0x13fb2
and eax, 0x215
and eax, 0x4a1e
pop eax
movzx eax, word [ebp - 0x34]
test eax, eax
jne 0x1003e4fe
movzx ecx, word [ebp - 0x214]
movzx edx, word [ebp - 0x34]
sub ecx, edx
mov dword [ebp - 0x15fc], ecx
jmp 0x1003e558
movzx eax, word [ebp - 0x214]
movzx ecx, word [ebp - 0x34]
cmp eax, ecx
je 0x1003e426
movzx edx, word [ebp - 0x214]
xor edx, 0x20
movzx eax, word [ebp - 0x34]
cmp edx, eax
je 0x1003e426
movzx ecx, word [ebp - 0x214]
movzx edx, word [ebp - 0x34]
cmp ecx, edx
jge 0x1003e542
mov dword [ebp - 0x15f8], 0xffffffff
jmp 0x1003e54c
mov dword [ebp - 0x15f8], 1
mov eax, dword [ebp - 0x15f8]
mov dword [ebp - 0x15fc], eax
cmp dword [ebp - 0x15fc], 0
jne 0x1003e5a1
push eax
push edi
add esp, 4
add eax, 0xec1d
and eax, 0xf81d
add eax, 0x4a14
pop eax
push ecx
xor ecx, 0x4c9d
and ecx, 0x14a
pop ecx
push ebx
push esi
add esp, 4
jmp 0x1003e592
pop ebx
mov ecx, dword [ebp - 0x50c]
mov dword [ebp - 0x318], ecx
jmp 0x1003e609
push ecx
xor ecx, 0xbb66
sub ecx, 0x4e16
and ecx, 0xe5be
pop ecx
push eax
push ecx
add esp, 4
sub eax, 0x14539
sub eax, 0x69d2
sub eax, 0xdee5
add eax, 0xbe2d
pop eax
mov edx, dword [ebp - 0x50c]
mov eax, dword [edx]
mov dword [ebp - 0x50c], eax
mov ecx, dword [ebp - 0x50c]
cmp ecx, dword [ebp - 0xcb4]
je 0x1003e5ff
mov edx, dword [ebp - 0x50c]
cmp dword [edx + 0x30], 0
jne 0x1003e3ca
mov dword [ebp - 0x318], 0
push edx
xor edx, 0x4e57
call 0x1003e61e
add byte [edx], dh
xor dh, byte [0x4b3c3e49]
aaa
add esp, 4
and edx, 0x395b
call 0x1003e637
add byte [edi + edi + 0x32], al
xor dh, byte [esi]
aas
aaa
dec ecx
xor al, 0x48
add esp, 4
pop edx
mov eax, dword [ebp - 0x318]
mov ecx, dword [eax + 0x18]
mov dword [ebp - 0x324], ecx
push eax
push edx
add esp, 4
add eax, 0x125f7
sub eax, 0x7478
pop eax
push esi
push esi
add esp, 4
and esi, 0x1610e
pop esi
push esi
push edx
add esp, 4
jmp 0x1003e675
sub esi, 0x40e2
pop esi
mov dword [ebp - 0x770], 0
mov edx, dword [ebp - 0x324]
mov dword [ebp - 0x1600], edx
cmp dword [ebp - 0x1600], 0
jne 0x1003e6ac
mov eax, dword [ebp - 0x770]
mov dword [ebp - 0x510], eax
jmp 0x1003e99d
mov ecx, dword [ebp - 0x1600]
mov edx, dword [ebp - 0x324]
add edx, dword [ecx + 0x3c]
mov dword [ebp - 0x1604], edx
jne 0x1003e6d4
mov eax, dword [ebp - 0x770]
mov dword [ebp - 0x510], eax
jmp 0x1003e99d
mov ecx, 8
imul edx, ecx, 0
mov eax, dword [ebp - 0x1604]
mov ecx, dword [eax + edx + 0x78]
mov dword [ebp - 0x1608], ecx
cmp dword [ebp - 0x1608], 0
jne 0x1003e706
mov edx, dword [ebp - 0x770]
mov dword [ebp - 0x510], edx
jmp 0x1003e99d
mov eax, dword [ebp - 0x324]
add eax, dword [ebp - 0x1608]
mov dword [ebp - 0x764], eax
jne 0x1003e72b
mov ecx, dword [ebp - 0x770]
mov dword [ebp - 0x510], ecx
jmp 0x1003e99d
mov edx, dword [ebp - 0x764]
mov eax, dword [ebp - 0x324]
add eax, dword [edx + 0x20]
mov dword [ebp - 0x197c], eax
mov ecx, dword [ebp - 0x764]
mov edx, dword [ebp - 0x324]
add edx, dword [ecx + 0x24]
mov dword [ebp - 0x1d04], edx
mov eax, dword [ebp - 0x764]
mov ecx, dword [ebp - 0x324]
add ecx, dword [eax + 0x1c]
mov dword [ebp - 0x1980], ecx
mov dword [ebp - 0x768], 0
jmp 0x1003e785
mov edx, dword [ebp - 0x768]
add edx, 1
mov dword [ebp - 0x768], edx
mov eax, dword [ebp - 0x764]
mov ecx, dword [ebp - 0x768]
cmp ecx, dword [eax + 0x18]
jae 0x1003e991
mov edx, dword [ebp - 0x768]
mov eax, dword [ebp - 0x197c]
mov ecx, dword [ebp - 0x324]
add ecx, dword [eax + edx*4]
mov dword [ebp - 0x76c], ecx
mov edx, dword [ebp - 0x768]
mov eax, dword [ebp - 0x1d04]
movzx ecx, word [eax + edx*2]
mov edx, dword [ebp - 0x1980]
mov eax, dword [ebp - 0x324]
add eax, dword [edx + ecx*4]
mov dword [ebp - 0x1984], eax
mov dword [ebp - 0x1a0], 0
jmp 0x1003e7f5
mov ecx, dword [ebp - 0x1a0]
add ecx, 1
mov dword [ebp - 0x1a0], ecx
mov edx, dword [ebp - 0x76c]
add edx, dword [ebp - 0x1a0]
movsx eax, byte [edx]
test eax, eax
je 0x1003e8a7
mov ecx, dword [ebp - 0x1a0]
movsx edx, byte [ebp + ecx - 0x878]
test edx, edx
je 0x1003e8a7
push eax
sub eax, 0x12089
and eax, 0xeb5e
and eax, 0x16a57
pop eax
push edi
push esi
add esp, 4
sub edi, 0x79b3
add edi, 0x3f9c
add edi, 0xf0be
xor edi, 0xd694
pop edi
mov eax, dword [ebp - 0x76c]
add eax, dword [ebp - 0x1a0]
movsx ecx, byte [eax]
mov edx, dword [ebp - 0x1a0]
movsx eax, byte [ebp + edx - 0x878]
cmp ecx, eax
je 0x1003e899
mov ecx, dword [ebp - 0x76c]
add ecx, dword [ebp - 0x1a0]
movsx edx, byte [ecx]
xor edx, 0x20
mov eax, dword [ebp - 0x1a0]
movsx ecx, byte [ebp + eax - 0x878]
cmp edx, ecx
jne 0x1003e8a0
jmp 0x1003e7e6
jmp 0x1003e8a7
push edx
push ecx
add esp, 4
sub edx, 0xbfe5
sub edx, 0xceda
xor edx, 0x166f6
pop edx
push ecx
xor ecx, 0x11ecb
call 0x1003e8d5
add byte [edi + esi], dh
cmp byte [edx + esi], dh
dec edx
xor edi, dword [edx]
add esp, 4
pop ecx
mov edx, dword [ebp - 0x76c]
add edx, dword [ebp - 0x1a0]
movsx eax, byte [edx]
mov ecx, dword [ebp - 0x1a0]
movsx edx, byte [ebp + ecx - 0x878]
cmp eax, edx
jne 0x1003e906
mov dword [ebp - 0xcb8], 0
jmp 0x1003e975
push edi
xor edi, 0x651f
pop edi
push eax
add eax, 0xa98b
pop eax
push edx
sub edx, 0xb447
pop edx
push edx
add edx, 0x122eb
add edx, 0xd5f4
or edx, 0xc8de
or edx, 0x1703f
pop edx
mov eax, dword [ebp - 0x76c]
add eax, dword [ebp - 0x1a0]
movsx ecx, byte [eax]
or ecx, 0x20
mov edx, dword [ebp - 0x1a0]
movsx eax, byte [ebp + edx - 0x878]
or eax, 0x20
cmp ecx, eax
jge 0x1003e96b
mov dword [ebp - 0xcb8], 0xffffffff
jmp 0x1003e975
mov dword [ebp - 0xcb8], 1
cmp dword [ebp - 0xcb8], 0
jne 0x1003e98c
mov ecx, dword [ebp - 0x1984]
mov dword [ebp - 0x510], ecx
jmp 0x1003e99d
jmp 0x1003e776
mov edx, dword [ebp - 0x770]
mov dword [ebp - 0x510], edx
mov eax, dword [ebp - 0x510]
mov dword [ebp - 0x79c], eax
push edx
call 0x1003e9b6
add byte [esi + 0x33], al
cmp al, 0x49
aas
cmp eax, 0x8104c483
bnd je 0x1003e9d2
add dword [eax], eax
jmp 0x1003e9c8
sub edx, 0xd7ff
pop edx
push esi
push eax
add esp, 4
xor esi, 0x1819f
pop esi
les eax, [ecx + eax*4]
neg byte [edi + 0x5e000181]
mov ecx, dword [ebp - 0x3f8]
add ecx, 0xe
mov dword [ebp - 0x19d4], ecx
push eax
add eax, 0x5130
and eax, 0x15182
add eax, 0x12a45
or eax, 0x7ea7
pop eax
push edi
push ecx
add esp, 4
or edi, 0x155ad
pop edi
push edi
push eax
add esp, 4
or edi, 0x4ef0
pop edi
cmp dword [ebp - 0x3f8], 0
je 0x1003ea2e
cmp dword [ebp - 0xab4], 0
jne 0x1003ea74
push edx
sub edx, 0x37c3
or edx, 0x13cb5
pop edx
push ebx
push eax
add esp, 4
or ebx, 0x12859
and ebx, 0xd1a3
jmp 0x1003ea53
pop ebx
push eax
push eax
add esp, 4
jmp 0x1003ea5f
pop eax
mov edx, dword [ebp - 0x79c]
mov dword [ebp - 0x1988], edx
push 0
call dword [ebp - 0x1988]
mov dword [ebp - 0x2090], 0xa
push edi
jmp 0x1003ea85
jmp 0x1003ea8a
pop edi
push edx
push edx
add esp, 4
call 0x1003eaa0
add byte [ecx + 0x35], cl
inc edi
inc ebx
cmp dword [ebp + 0x43], ecx
inc eax
inc edx
dec ecx
add esp, 4
add edx, 0x161a4
and edx, 0x18531
pop edx
mov eax, dword [ebp - 0x3f8]
mov cl, byte [eax + 0xa]
mov byte [ebp - 0x3ae], cl
mov edx, dword [ebp - 0xab4]
sub edx, dword [ebp - 0x3f8]
mov dword [ebp - 0x168c], edx
mov dword [ebp - 0xce8], 0
push edx
xor edx, 0x94aa
and edx, 0xbb86
or edx, 0xdfcd
call 0x1003eafd
add byte [0x47413a3c], dh
dec edi
inc ecx
aaa
inc esi
add esp, 4
pop edx
push edi
push edi
add esp, 4
or edi, 0xdddf
pop edi
mov byte [ebp - 0x9d4], 0x56
mov byte [ebp - 0x9d3], 0x69
mov byte [ebp - 0x9d2], 0x72
mov byte [ebp - 0x9d1], 0x74
mov byte [ebp - 0x9d0], 0x75
mov byte [ebp - 0x9cf], 0x61
mov byte [ebp - 0x9ce], 0x6c
mov byte [ebp - 0x9cd], 0x50
mov byte [ebp - 0x9cc], 0x72
mov byte [ebp - 0x9cb], 0x6f
mov byte [ebp - 0x9ca], 0x74
mov byte [ebp - 0x9c9], 0x65
mov byte [ebp - 0x9c8], 0x63
mov byte [ebp - 0x9c7], 0x74
mov byte [ebp - 0x9c6], 0
push ebx
push eax
add esp, 4
add ebx, 0xf8d1
call 0x1003eb90
add byte [ebx], bh
cmp eax, 0x49404545
dec ecx
aaa
push eax
add esp, 4
jmp 0x1003eb99
pop ebx
push eax
and eax, 0xd6bd
or eax, 0x15785
pop eax
mov eax, dword fs:[0x18]
mov dword [ebp - 0x198c], eax
mov ecx, dword [ebp - 0x198c]
mov edx, dword [ecx + 0x30]
mov dword [ebp - 0x1990], edx
mov eax, dword [ebp - 0x1990]
mov dword [ebp - 0x160c], eax
push ecx
sub ecx, 0x4fab
pop ecx
push edi
push esi
add esp, 4
and edi, 0x131de
call 0x1003ebf1
add byte [ebx + 0x32], al
aaa
aaa
inc eax
cmp ecx, dword [edi + 0x38]
xor eax, 0x5f04c483
push esi
push eax
add esp, 4
add esi, 0xc37f
pop esi
cmp dword [ebp - 0x160c], 0
jne 0x1003ec19
mov dword [ebp - 0x314], 0
jmp 0x1003eec0
mov ecx, dword [ebp - 0x160c]
mov edx, dword [ecx + 0xc]
mov eax, dword [edx + 0xc]
mov dword [ebp - 0xcc4], eax
push ecx
push ebx
add esp, 4
or ecx, 0x12350
and ecx, 0xeada
or ecx, 0x12460
pop ecx
push ebx
or ebx, 0xa902
or ebx, 0x178d
jmp 0x1003ec56
jmp 0x1003ec5c
pop ebx
cmp dword [ebp - 0xcc4], 0
jne 0x1003ec75
mov dword [ebp - 0x314], 0
jmp 0x1003eec0
mov ecx, dword [ebp - 0xcc4]
mov dword [ebp - 0x514], ecx
push ecx
call 0x1003ec8e
add byte [esi], bh
inc eax
inc ebx
dec ebx
inc ebx
cmp dword [ebx + 0x565904c4], eax
push edi
add esp, 4
call 0x1003eca3
add byte [eax + 0x43], cl
dec ecx
aas
dec ebx
aaa
add esp, 4
xor esi, 0x261
add esi, 0x2af0
pop esi
lea edx, [ebp - 0x1734]
mov dword [ebp - 0xcc0], edx
mov eax, dword [ebp - 0x514]
mov ecx, dword [eax + 0x30]
mov dword [ebp - 0xcbc], ecx
xor edx, edx
mov word [ebp - 0x218], dx
xor eax, eax
mov word [ebp - 0x38], ax
push esi
push esi
add esp, 4
add esi, 0x6a22
sub esi, 0x847e
pop esi
push ebx
push ebx
add esp, 4
and ebx, 0x11def
or ebx, 0x181c
pop ebx
push eax
xor eax, 0x16ad6
add eax, 0x141aa
pop eax
mov ecx, dword [ebp - 0xcbc]
mov dx, word [ecx]
mov word [ebp - 0x103e], dx
mov eax, dword [ebp - 0xcbc]
add eax, 2
mov dword [ebp - 0xcbc], eax
mov cx, word [ebp - 0x103e]
mov word [ebp - 0x218], cx
mov edx, dword [ebp - 0xcc0]
mov ax, word [edx]
mov word [ebp - 0x1040], ax
mov ecx, dword [ebp - 0xcc0]
add ecx, 2
mov dword [ebp - 0xcc0], ecx
mov dx, word [ebp - 0x1040]
mov word [ebp - 0x38], dx
push eax
sub eax, 0xeec5
xor eax, 0x1597e
pop eax
push esi
push edi
add esp, 4
and esi, 0x11e55
or esi, 0xdc7c
call 0x1003ed94
add byte [ebp + eax*2 + 0x41], al
dec eax
xor al, 0x41
dec ebx
inc eax
cmp al, byte [ebx + 0xf5e04c4]
mov bh, 0x45
enter 0xffffffffffffc085, 0x75
adc eax, 0xe88db70f
std
invalid
push edx
call 0x1003eecd
add byte [esi], bh
dec edx
cmp dword [ebp + 0x40], ecx
add esp, 4
jmp 0x1003eed9
xor edx, 0x146f5
add edx, 0x7e9f
pop edx
push edx
push edi
add esp, 4
or edx, 0x646d
pop edx
cmp dword [ebp - 0x314], 0
jne 0x1003f7f7
mov eax, 0x6b
mov word [ebp - 0x178c], ax
mov ecx, 0x65
mov word [ebp - 0x178a], cx
mov edx, 0x72
mov word [ebp - 0x1788], dx
mov eax, 0x6e
mov word [ebp - 0x1786], ax
mov ecx, 0x65
mov word [ebp - 0x1784], cx
mov edx, 0x6c
mov word [ebp - 0x1782], dx
mov eax, 0x33
mov word [ebp - 0x1780], ax
mov ecx, 0x32
mov word [ebp - 0x177e], cx
mov edx, 0x2e
mov word [ebp - 0x177c], dx
mov eax, 0x64
mov word [ebp - 0x177a], ax
mov ecx, 0x6c
mov word [ebp - 0x1778], cx
mov edx, 0x6c
mov word [ebp - 0x1776], dx
xor eax, eax
mov word [ebp - 0x1774], ax
push ecx
jmp 0x1003efa1
pop ecx
push edi
push edi
add esp, 4
add edi, 0x406e
jmp 0x1003efb5
pop edi
push edi
or edi, 0x180bc
sub edi, 0x15c0b
add edi, 0x965e
pop edi
mov byte [ebp - 0x8a4], 0x4c
mov byte [ebp - 0x8a3], 0x6f
mov byte [ebp - 0x8a2], 0x61
mov byte [ebp - 0x8a1], 0x64
mov byte [ebp - 0x8a0], 0x4c
mov byte [ebp - 0x89f], 0x69
mov byte [ebp - 0x89e], 0x62
mov byte [ebp - 0x89d], 0x72
mov byte [ebp - 0x89c], 0x61
mov byte [ebp - 0x89b], 0x72
mov byte [ebp - 0x89a], 0x79
mov byte [ebp - 0x899], 0x57
mov byte [ebp - 0x898], 0
mov ecx, dword fs:[0x18]
mov dword [ebp - 0x1994], ecx
mov edx, dword [ebp - 0x1994]
mov eax, dword [edx + 0x30]
mov dword [ebp - 0x1998], eax
mov ecx, dword [ebp - 0x1998]
mov dword [ebp - 0x1618], ecx
push eax
push eax
add esp, 4
add eax, 0x91f7
or eax, 0x125ef
call 0x1003f06c
add byte [edi], bh
dec ecx
cmp edi, dword [esi]
cmp byte [eax], bh
dec ebp
cmp al, byte [ebx - 0xf7efb3c]
dec eax
test byte [eax], al
add byte [eax + 0x52], bl
jmp 0x1003f07e
pop edx
cmp dword [ebp - 0x1618], 0
jne 0x1003f097
mov dword [ebp - 0x774], 0
jmp 0x1003f33e
mov edx, dword [ebp - 0x1618]
mov eax, dword [edx + 0xc]
mov ecx, dword [eax + 0xc]
mov dword [ebp - 0xcd0], ecx
push edi
xor edi, 0x9573
sub edi, 0x14ca
call 0x1003f0c3
add byte [ebx], bh
xor dh, byte [edi]
xor al, 0x48
dec edx
cmp dword [ebx - 0x187efb3c], eax
pop esp
pop ebx
add dword [eax], eax
pop edi
push eax
xor eax, 0xf562
and eax, 0xd933
pop eax
cmp dword [ebp - 0xcd0], 0
jne 0x1003f0f3
mov dword [ebp - 0x774], 0
jmp 0x1003f33e
mov edx, dword [ebp - 0xcd0]
mov dword [ebp - 0x518], edx
push esi
push eax
add esp, 4
jmp 0x1003f10a
add esi, 0xbc48
or esi, 0x1435
pop esi
push edx
xor edx, 0xa0f5
add edx, 0x12ed0
or edx, 0x5934
sub edx, 0xad4b
pop edx
lea eax, [ebp - 0x178c]
mov dword [ebp - 0xccc], eax
mov ecx, dword [ebp - 0x518]
mov edx, dword [ecx + 0x30]
mov dword [ebp - 0xcc8], edx
xor eax, eax
mov word [ebp - 0x21c], ax
xor ecx, ecx
mov word [ebp - 0x3c], cx
push eax
add eax, 0xbdc5
pop eax
push edi
jmp 0x1003f16d
add edi, 0x14acc
pop edi
push ebx
jmp 0x1003f17d
call 0x1003f189
add byte [esi + 0x43], al
inc esp
cmp dh, byte [esi]
xor eax, 0x5b04c483
mov edx, dword [ebp - 0xcc8]
mov ax, word [edx]
mov word [ebp - 0x1042], ax
mov ecx, dword [ebp - 0xcc8]
add ecx, 2
mov dword [ebp - 0xcc8], ecx
mov dx, word [ebp - 0x1042]
mov word [ebp - 0x21c], dx
mov eax, dword [ebp - 0xccc]
mov cx, word [eax]
mov word [ebp - 0x1044], cx
mov edx, dword [ebp - 0xccc]
add edx, 2
mov dword [ebp - 0xccc], edx
mov ax, word [ebp - 0x1044]
mov word [ebp - 0x3c], ax
push ebx
sub ebx, 0x5b97
add ebx, 0x47c
add ebx, 0xe669
pop ebx
push edx
add edx, 0x13e18
and edx, 0x14e4d
pop edx
push ebx
xor ebx, 0x39ef
jmp 0x1003f215
pop ebx
movzx ecx, word [ebp - 0x3c]
test ecx, ecx
jne 0x1003f233
movzx edx, word [ebp - 0x21c]
movzx eax, word [ebp - 0x3c]
sub edx, eax
mov dword [ebp - 0x1620], edx
jmp 0x1003f28d
movzx ecx, word [ebp - 0x21c]
movzx edx, word [ebp - 0x3c]
cmp ecx, edx
je 0x1003f15b
movzx eax, word [ebp - 0x21c]
xor eax, 0x20
movzx ecx, word [ebp - 0x3c]
cmp eax, ecx
je 0x1003f15b
movzx edx, word [ebp - 0x21c]
movzx eax, word [ebp - 0x3c]
cmp edx, eax
jge 0x1003f277
mov dword [ebp - 0x161c], 0xffffffff
jmp 0x1003f281
mov dword [ebp - 0x161c], 1
mov ecx, dword [ebp - 0x161c]
mov dword [ebp - 0x1620], ecx
cmp dword [ebp - 0x1620], 0
jne 0x1003f2d6
push edi
push ebx
add esp, 4
and edi, 0x92ee
xor edi, 0xe0f5
and edi, 0x3884
add edi, 0xb163
pop edi
push edx
and edx, 0x18459
and edx, 0x4bbc
sub edx, 0xfb14
pop edx
mov edx, dword [ebp - 0x518]
mov dword [ebp - 0x774], edx
jmp 0x1003f33e
push edi
or edi, 0x1079a
or edi, 0x5963
call 0x1003f2f2
add byte [ebx], dh
cmp eax, 0x3b3e4948
inc eax
xor eax, 0x4c4834e
pop edi
push edi
push eax
add esp, 4
sub edi, 0x29b1
sub edi, 0xef23
pop edi
mov eax, dword [ebp - 0x518]
mov ecx, dword [eax]
mov dword [ebp - 0x518], ecx
mov edx, dword [ebp - 0x518]
cmp edx, dword [ebp - 0xcd0]
je 0x1003f334
mov eax, dword [ebp - 0x518]
cmp dword [eax + 0x30], 0
jne 0x1003f0ff
mov dword [ebp - 0x774], 0
push ebx
call 0x1003f34c
add byte [esi + 0x3b], cl
xor al, 0x35
dec esi
dec ebp
inc edi
add esp, 4
sub ebx, 0x30ff
jmp 0x1003f35b
xor ebx, 0x26b3
pop ebx
push esi
and esi, 0x20d3
add esi, 0x5e0d
pop esi
cmp dword [ebp - 0x774], 0
jne 0x1003f3ba
push edi
push edi
add esp, 4
xor edi, 0x24b0
xor edi, 0x5c81
and edi, 0x5f87
pop edi
push ecx
xor ecx, 0x7f5
and ecx, 0xc5f8
sub ecx, 0x10eb1
add ecx, 0x1233e
pop ecx
mov dword [ebp - 0xab0], 0
jmp 0x1003fee2
push eax
push ecx
add esp, 4
jmp 0x1003f3c8
sub eax, 0x5e3d
add eax, 0xb5db
pop eax
push edx
call 0x1003f3e2
add byte [ebp + 0x32], al
inc esp
cmp eax, 0xc4833e4d
add al, 0x81
ljmp 0x8b5a
push edx
push edx
add esp, 4
xor edx, 0x17ab6
and edx, 0xb8f7
and edx, 0x14df1
pop edx
push ecx
xor ecx, 0x11f9b
add ecx, 0x4afd
add ecx, 0x11268
sub ecx, 0x112ca
pop ecx
mov ecx, dword fs:[0x18]
mov dword [ebp - 0x19b4], ecx
mov edx, dword [ebp - 0x19b4]
mov eax, dword [edx + 0x30]
mov dword [ebp - 0x19b8], eax
mov ecx, dword [ebp - 0x19b8]
mov dword [ebp - 0x1674], ecx
push ebx
push ecx
add esp, 4
and ebx, 0x115be
or ebx, 0xca85
and ebx, 0x1088f
pop ebx
push eax
add eax, 0xc6c0
add eax, 0xa188
pop eax
push edx
push edx
add esp, 4
xor edx, 0x14279
pop edx
cmp dword [ebp - 0x1674], 0
jne 0x1003f89b
mov dword [ebp - 0x314], 0
jmp 0x1003fb42
mov edx, dword [ebp - 0x1674]
mov eax, dword [edx + 0xc]
mov ecx, dword [eax + 0xc]
mov dword [ebp - 0xce0], ecx
push edi
and edi, 0xbe27
pop edi
push eax
push esi
add esp, 4
xor eax, 0x14c2f
pop eax
push edx
push edx
add esp, 4
or edx, 0x14f84
add edx, 0x4bf2
add edx, 0x45fe
xor edx, 0x3507
pop edx
cmp dword [ebp - 0xce0], 0
jne 0x1003f8f7
mov dword [ebp - 0x314], 0
jmp 0x1003fb42
mov edx, dword [ebp - 0xce0]
mov dword [ebp - 0x51c], edx
push eax
push edi
add esp, 4
sub eax, 0xaae7
add eax, 0x11fb7
add eax, 0x2c81
xor eax, 0x9f5b
pop eax
push ebx
push ecx
add esp, 4
jmp 0x1003f92e
or ebx, 0x103bd
pop ebx
lea eax, [ebp - 0x1734]
mov dword [ebp - 0xcdc], eax
mov ecx, dword [ebp - 0x51c]
mov edx, dword [ecx + 0x30]
mov dword [ebp - 0xcd8], edx
xor eax, eax
mov word [ebp - 0x220], ax
xor ecx, ecx
mov word [ebp - 0x40], cx
push eax
and eax, 0xfb15
and eax, 0x10c78
and eax, 0x11ee9
pop eax
push eax
push ecx
add esp, 4
or eax, 0x4fe4
and eax, 0xd03f
or eax, 0x4159
and eax, 0xd0
pop eax
mov edx, dword [ebp - 0xcd8]
mov ax, word [edx]
mov word [ebp - 0x1046], ax
mov ecx, dword [ebp - 0xcd8]
add ecx, 2
mov dword [ebp - 0xcd8], ecx
mov dx, word [ebp - 0x1046]
mov word [ebp - 0x220], dx
mov eax, dword [ebp - 0xcdc]
mov cx, word [eax]
mov word [ebp - 0x1048], cx
mov edx, dword [ebp - 0xcdc]
add edx, 2
mov dword [ebp - 0xcdc], edx
mov ax, word [ebp - 0x1048]
mov word [ebp - 0x40], ax
push ebx
push ecx
add esp, 4
add ebx, 0x17905
or ebx, 0x11163
and ebx, 0x12365
pop ebx
push esi
push edi
add esp, 4
and esi, 0xb3e4
or esi, 0x1596a
pop esi
push esi
xor esi, 0x20d2
pop esi
movzx ecx, word [ebp - 0x40]
test ecx, ecx
jne 0x1003fa37
movzx edx, word [ebp - 0x220]
movzx eax, word [ebp - 0x40]
sub edx, eax
mov dword [ebp - 0x167c], edx
jmp 0x1003fa91
movzx ecx, word [ebp - 0x220]
movzx edx, word [ebp - 0x40]
cmp ecx, edx
je 0x1003f95f
movzx eax, word [ebp - 0x220]
xor eax, 0x20
movzx ecx, word [ebp - 0x40]
cmp eax, ecx
je 0x1003f95f
movzx edx, word [ebp - 0x220]
movzx eax, word [ebp - 0x40]
cmp edx, eax
jge 0x1003fa7b
mov dword [ebp - 0x1678], 0xffffffff
jmp 0x1003fa85
mov dword [ebp - 0x1678], 1
mov ecx, dword [ebp - 0x1678]
mov dword [ebp - 0x167c], ecx
cmp dword [ebp - 0x167c], 0
jne 0x1003fada
push esi
push ecx
add esp, 4
jmp 0x1003faa5
or esi, 0x11e9a
and esi, 0x748e
pop esi
push edx
push ecx
add esp, 4
add edx, 0x10e7d
or edx, 0xe040
jmp 0x1003facb
pop edx
mov edx, dword [ebp - 0x51c]
mov dword [ebp - 0x314], edx
jmp 0x1003fb42
push esi
push edi
add esp, 4
xor esi, 0xca8d
xor esi, 0x18d2
xor esi, 0x3795
and esi, 0x16a3a
pop esi
push ecx
push edx
add esp, 4
jmp 0x1003fb05
and ecx, 0x1770f
pop ecx
mov eax, dword [ebp - 0x51c]
mov ecx, dword [eax]
mov dword [ebp - 0x51c], ecx
mov edx, dword [ebp - 0x51c]
cmp edx, dword [ebp - 0xce0]
je 0x1003fb38
mov eax, dword [ebp - 0x51c]
cmp dword [eax + 0x30], 0
jne 0x1003f903
mov dword [ebp - 0x314], 0
push ebx
sub ebx, 0x1757e
and ebx, 0x15922
pop ebx
push edi
push edi
add esp, 4
jmp 0x1003fb5e
pop edi
push edi
jmp 0x1003fb67
sub edi, 0xb54b
sub edi, 0x101db
pop edi
mov ecx, dword [ebp - 0x314]
mov edx, dword [ecx + 0x18]
mov dword [ebp - 0x338], edx
push esi
push eax
add esp, 4
add esi, 0x1295e
pop esi
push ecx
and ecx, 0x14be3
pop ecx
push eax
push ebx
add esp, 4
add eax, 0xfb9f
and eax, 0x15cef
xor eax, 0x13e2e
xor eax, 0x125a
pop eax
mov dword [ebp - 0x794], 0
mov eax, dword [ebp - 0x338]
mov dword [ebp - 0x1680], eax
cmp dword [ebp - 0x1680], 0
jne 0x1003fbe5
mov ecx, dword [ebp - 0x794]
mov dword [ebp - 0x520], ecx
jmp 0x1003fed6
mov edx, dword [ebp - 0x1680]
mov eax, dword [ebp - 0x338]
add eax, dword [edx + 0x3c]
mov dword [ebp - 0x1684], eax
jne 0x1003fc0d
mov ecx, dword [ebp - 0x794]
mov dword [ebp - 0x520], ecx
jmp 0x1003fed6
mov edx, 8
imul eax, edx, 0
mov ecx, dword [ebp - 0x1684]
mov edx, dword [ecx + eax + 0x78]
mov dword [ebp - 0x1688], edx
cmp dword [ebp - 0x1688], 0
jne 0x1003fc3f
mov eax, dword [ebp - 0x794]
mov dword [ebp - 0x520], eax
jmp 0x1003fed6
mov ecx, dword [ebp - 0x338]
add ecx, dword [ebp - 0x1688]
mov dword [ebp - 0x788], ecx
jne 0x1003fc64
mov edx, dword [ebp - 0x794]
mov dword [ebp - 0x520], edx
jmp 0x1003fed6
mov eax, dword [ebp - 0x788]
mov ecx, dword [ebp - 0x338]
add ecx, dword [eax + 0x20]
mov dword [ebp - 0x19bc], ecx
mov edx, dword [ebp - 0x788]
mov eax, dword [ebp - 0x338]
add eax, dword [edx + 0x24]
mov dword [ebp - 0x19c0], eax
mov ecx, dword [ebp - 0x788]
mov edx, dword [ebp - 0x338]
add edx, dword [ecx + 0x1c]
mov dword [ebp - 0x19c4], edx
mov dword [ebp - 0x78c], 0
jmp 0x1003fcbe
mov eax, dword [ebp - 0x78c]
add eax, 1
mov dword [ebp - 0x78c], eax
mov ecx, dword [ebp - 0x788]
mov edx, dword [ebp - 0x78c]
cmp edx, dword [ecx + 0x18]
jae 0x1003feca
mov eax, dword [ebp - 0x78c]
mov ecx, dword [ebp - 0x19bc]
mov edx, dword [ebp - 0x338]
add edx, dword [ecx + eax*4]
mov dword [ebp - 0x790], edx
mov eax, dword [ebp - 0x78c]
mov ecx, dword [ebp - 0x19c0]
movzx edx, word [ecx + eax*2]
mov eax, dword [ebp - 0x19c4]
mov ecx, dword [ebp - 0x338]
add ecx, dword [eax + edx*4]
mov dword [ebp - 0x19c8], ecx
mov dword [ebp - 0x1a8], 0
jmp 0x1003fd2e
mov edx, dword [ebp - 0x1a8]
add edx, 1
mov dword [ebp - 0x1a8], edx
mov eax, dword [ebp - 0x790]
add eax, dword [ebp - 0x1a8]
movsx ecx, byte [eax]
test ecx, ecx
je 0x1003fde0
mov edx, dword [ebp - 0x1a8]
movsx eax, byte [ebp + edx - 0x9d4]
test eax, eax
je 0x1003fde0
push ecx
and ecx, 0x1085c
jmp 0x1003fd69
xor ecx, 0xe69
pop ecx
push ebx
add ebx, 0x1700d
and ebx, 0x1f3a
jmp 0x1003fd86
sub ebx, 0x108d6
pop ebx
mov ecx, dword [ebp - 0x790]
add ecx, dword [ebp - 0x1a8]
movsx edx, byte [ecx]
mov eax, dword [ebp - 0x1a8]
movsx ecx, byte [ebp + eax - 0x9d4]
cmp edx, ecx
je 0x1003fdd2
mov edx, dword [ebp - 0x790]
add edx, dword [ebp - 0x1a8]
movsx eax, byte [edx]
xor eax, 0x20
mov ecx, dword [ebp - 0x1a8]
movsx edx, byte [ebp + ecx - 0x9d4]
cmp eax, edx
jne 0x1003fdd9
jmp 0x1003fd1f
jmp 0x1003fde0
push eax
push eax
add esp, 4
sub eax, 0x1594e
add eax, 0x8999
sub eax, 0x1562a
pop eax
push ecx
push edi
add esp, 4
jmp 0x1003fe05
and ecx, 0x3e8a
and ecx, 0x2ab6
pop ecx
mov eax, dword [ebp - 0x790]
add eax, dword [ebp - 0x1a8]
movsx ecx, byte [eax]
mov edx, dword [ebp - 0x1a8]
movsx eax, byte [ebp + edx - 0x9d4]
cmp ecx, eax
jne 0x1003fe3f
mov dword [ebp - 0xce4], 0
jmp 0x1003feae
push eax
push esi
add esp, 4
or eax, 0x14f6a
jmp 0x1003fe52
pop eax
push ebx
push ebx
add esp, 4
add ebx, 0xbfc5
pop ebx
push eax
push ecx
add esp, 4
sub eax, 0xdcd7
sub eax, 0xb695
pop eax
mov ecx, dword [ebp - 0x790]
add ecx, dword [ebp - 0x1a8]
movsx edx, byte [ecx]
or edx, 0x20
mov eax, dword [ebp - 0x1a8]
movsx ecx, byte [ebp + eax - 0x9d4]
or ecx, 0x20
cmp edx, ecx
jge 0x1003fea4
mov dword [ebp - 0xce4], 0xffffffff
jmp 0x1003feae
mov dword [ebp - 0xce4], 1
cmp dword [ebp - 0xce4], 0
jne 0x1003fec5
mov edx, dword [ebp - 0x19c8]
mov dword [ebp - 0x520], edx
jmp 0x1003fed6
jmp 0x1003fcaf
mov eax, dword [ebp - 0x794]
mov dword [ebp - 0x520], eax
mov ecx, dword [ebp - 0x520]
mov dword [ebp - 0xab0], ecx
push esi
xor esi, 0xa28f
sub esi, 0xb38d
and esi, 0x98fd
call 0x1003ff04
add byte [edi + 0x38], al
xor edx, dword [eax + 0x37]
inc ebx
inc ebp
xor al, 0x46
add esp, 4
pop esi
push edx
push esi
add esp, 4
sub edx, 0xd7d3
pop edx
mov edx, dword [ebp - 0xab0]
mov dword [ebp - 0x19cc], edx
lea eax, [ebp - 0xce8]
push eax
push 0x40
mov ecx, dword [ebp - 0x168c]
push ecx
mov edx, dword [ebp - 0x3f8]
push edx
call dword [ebp - 0x19cc]
test eax, eax
jne 0x1003ff87
push edi
and edi, 0x13da6
jmp 0x1003ff4e
xor edi, 0x13b2b
xor edi, 0xf45f
pop edi
push esi
push ebx
add esp, 4
xor esi, 0x146c7
and esi, 0x6a61
or esi, 0x9a0
pop esi
mov eax, dword [ebp - 0x79c]
mov dword [ebp - 0x19d0], eax
push 0
call dword [ebp - 0x19d0]
mov ecx, dword [ebp - 0x19d4]
mov dword [ebp - 0x798], ecx
jmp 0x1003ffa4
mov edx, dword [ebp - 0x798]
add edx, 1
mov dword [ebp - 0x798], edx
mov eax, dword [ebp - 0x798]
cmp eax, dword [ebp - 0xab4]
jae 0x10040000
push eax
call 0x1003ffbf
add byte [0x3548413f], bh
cmp al, byte [ebx + 0x525804c4]
and edx, 0x11703
pop edx
push edx
push ebx
add esp, 4
jmp 0x1003ffd7
sub edx, 0x14474
sub edx, 0x16d0
pop edx
movzx ecx, byte [ebp - 0x3ae]
mov edx, dword [ebp - 0x798]
movsx eax, byte [edx]
sub eax, ecx
mov ecx, dword [ebp - 0x798]
mov byte [ecx], al
jmp 0x1003ff95
mov edx, dword [ebp - 0xab0]
mov dword [ebp - 0x19d8], edx
lea eax, [ebp - 0xce8]
push eax
mov ecx, dword [ebp - 0xce8]
push ecx
mov edx, dword [ebp - 0x168c]
push edx
mov eax, dword [ebp - 0x3f8]
push eax
call dword [ebp - 0x19d8]
test eax, eax
jne 0x10040078
push ecx
push edi
add esp, 4
sub ecx, 0x1121b
and ecx, 0x661e
pop ecx
push edi
call 0x10040054
add byte [esi], dh
inc esp
inc esp
cmp eax, 0x473b3642
add esp, 4
pop edi
push esi
push esi
add esp, 4
or esi, 0x15a06
pop esi
mov ecx, dword [ebp - 0x79c]
mov dword [ebp - 0x19dc], ecx
push 0
call dword [ebp - 0x19dc]
push eax
push esi
add esp, 4
xor eax, 0xc6bb
or eax, 0x126b5
xor eax, 0x11e47
call 0x1004009e
add byte [0x50423946], bh
dec ebx
xor edi, dword [edi]
dec ecx
add esp, 4
pop eax
push ecx
or ecx, 0x2acb
pop ecx
push edx
mov ecx, 0x10101010
pop edx
push ecx
mov ecx, 0xffff07ff
pop ecx
pop eax
pop eax
mov cl, bl
or ecx, dword [eax + 0x8311be8]
pop es
pushal
pop edx
mov dl, bh
jl 0x1004005d
pop es
pop es
mov dl, dl
rol byte [edi], cl
pop es
bound ebx, qword [ecx - 0x11]
sysret