Function at 0x1003ddce
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x1006f4ab
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x3c4
push esi
push edi
and dword [ebp - 0x1d4], 0
mov dword [ebp - 0xa0], 4
mov dword [ebp - 0xb4], 0
jmp 0x1003de18
mov eax, dword [ebp - 0xb4]
inc eax
mov dword [ebp - 0xb4], eax
cmp dword [ebp - 0xb4], 2
jge 0x1003de34
mov eax, dword [ebp - 0xb4]
mov dword [ebp + eax*4 - 0x248], 0xffffffff
jmp 0x1003de0b
mov dword [ebp - 0xa0], 8
jmp 0x1003de4d
mov eax, dword [ebp - 0xa0]
dec eax
mov dword [ebp - 0xa0], eax
cmp dword [ebp - 0xa0], 0xffffffea
jle 0x1003decf
mov dword [ebp - 0x68], 0
mov byte [ebp - 0x4a], 0
lea eax, [ebp - 0x4a]
push eax
call fcn.1003d842
pop ecx
mov dword [ebp - 0x68], 1
jmp 0x1003de7b
mov eax, dword [ebp - 0x68]
dec eax
mov dword [ebp - 0x68], eax
cmp dword [ebp - 0x68], 0
jl 0x1003deca
mov dword [ebp - 0x8c], 1
mov dword [ebp - 0x8c], 0
jmp 0x1003dea4
mov eax, dword [ebp - 0x8c]
inc eax
mov dword [ebp - 0x8c], eax
cmp dword [ebp - 0x8c], 1
jg 0x1003dec8
call fcn.1003d87c
mov eax, dword [ebp - 0x68]
mov ecx, dword [ebp - 0x68]
mov eax, dword [ebp + eax*4 - 0x248]
mov dword [ebp + ecx*4 - 0x248], eax
jmp 0x1003de97
jmp 0x1003de74
jmp 0x1003de40
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0x248], 0xfcb143e9
mov byte [ebp - 0x118], 0x18
mov byte [ebp - 0x117], 0xd6
mov byte [ebp - 0x116], 0x10
mov byte [ebp - 0x115], 8
mov byte [ebp - 0x114], 0xd
mov byte [ebp - 0x113], 0x1f
mov byte [ebp - 0x112], 0x15
mov byte [ebp - 0x111], 0x18
mov byte [ebp - 0x110], 4
mov byte [ebp - 0x10f], 0x13
mov byte [ebp - 0x10e], 0
mov byte [ebp - 0x10d], 4
mov byte [ebp - 0x10c], 0xb
mov byte [ebp - 0x10b], 0xd
mov byte [ebp - 0x10a], 7
mov byte [ebp - 0x109], 4
mov byte [ebp - 0x108], 0x16
mov byte [ebp - 0x107], 0x1f
mov byte [ebp - 0x106], 8
mov byte [ebp - 0x105], 0x1e
mov byte [ebp - 0x104], 1
mov byte [ebp - 0x103], 0xb
mov byte [ebp - 0x102], 5
mov byte [ebp - 0x101], 4
mov byte [ebp - 0x100], 0xc
mov byte [ebp - 0xff], 0xb
mov byte [ebp - 0xfe], 0x11
mov byte [ebp - 0xfd], 0x1f
mov byte [ebp - 0xfc], 9
mov byte [ebp - 0xfb], 0x18
mov byte [ebp - 0xfa], 2
mov byte [ebp - 0xf9], 9
mov byte [ebp - 0xf8], 0x14
mov byte [ebp - 0xf7], 0x16
mov byte [ebp - 0xf6], 0x13
mov byte [ebp - 0xf5], 1
mov byte [ebp - 0xf4], 6
mov byte [ebp - 0xf3], 0x13
mov byte [ebp - 0xf2], 0x12
mov byte [ebp - 0xf1], 0x14
mov byte [ebp - 0xf0], 0xa
mov byte [ebp - 0xef], 0x18
mov byte [ebp - 0xee], 0xe
mov byte [ebp - 0xed], 4
mov byte [ebp - 0xec], 3
mov byte [ebp - 0xeb], 0xb
mov byte [ebp - 0xea], 0x17
mov byte [ebp - 0xe9], 0x1c
mov byte [ebp - 0xe8], 0x19
mov byte [ebp - 0xe7], 2
mov byte [ebp - 0xe6], 0x2e
mov byte [ebp - 0xe5], 0xb7
mov byte [ebp - 0xe4], 0
mov byte [ebp - 0xe3], 0xdc
mov byte [ebp - 0xe2], 0xd9
mov byte [ebp - 0xe1], 0xc8
mov byte [ebp - 0xe0], 0xae
mov byte [ebp - 0xdf], 0xf6
mov byte [ebp - 0xde], 0x40
mov byte [ebp - 0xdd], 7
mov byte [ebp - 0xdc], 0xe5
mov byte [ebp - 0xdb], 0xa4
mov byte [ebp - 0xda], 0xb2
mov byte [ebp - 0xd9], 0x55
mov byte [ebp - 0xd8], 0xc1
mov byte [ebp - 0xd7], 0x93
mov byte [ebp - 0xd6], 0x6c
mov byte [ebp - 0xd5], 0xee
mov byte [ebp - 0xd4], 0x8d
mov byte [ebp - 0xd3], 0x1b
mov byte [ebp - 0xd2], 0xfa
mov byte [ebp - 0xd1], 0xbc
mov byte [ebp - 0xd0], 0x24
mov byte [ebp - 0xcf], 0xaf
mov byte [ebp - 0xce], 0x26
mov byte [ebp - 0xcd], 0xa3
mov byte [ebp - 0xcc], 0xc7
mov byte [ebp - 0xcb], 0x70
mov byte [ebp - 0xca], 0xa2
mov byte [ebp - 0xc9], 0x13
mov byte [ebp - 0xc8], 0x54
mov byte [ebp - 0xc7], 0x1c
mov byte [ebp - 0xc6], 0x82
mov byte [ebp - 0xc5], 0x32
mov byte [ebp - 0xc4], 0xf5
mov byte [ebp - 0xc3], 0x7f
mov byte [ebp - 0xc2], 0x35
mov byte [ebp - 0xc1], 0xf7
mov byte [ebp - 0xc0], 0x41
mov byte [ebp - 0xbf], 0xb4
mov byte [ebp - 0xbe], 0x15
mov byte [ebp - 0xbd], 0x8a
mov byte [ebp - 0xbc], 0x59
mov byte [ebp - 0xbb], 0xcb
mov byte [ebp - 0xba], 0xcb
mov byte [ebp - 0xb9], 0xac
mov byte [ebp - 0xb8], 0x7f
mov byte [ebp - 0xb7], 0xf
mov byte [ebp - 0xb6], 0xa
xor eax, eax
inc eax
shl eax, 0
movzx eax, byte [ebp + eax - 0x118]
or eax, 0xaf
xor ecx, ecx
inc ecx
shl ecx, 0
movzx ecx, byte [ebp + ecx - 0x118]
and ecx, 0xaf
sub eax, ecx
xor ecx, ecx
inc ecx
imul ecx, ecx, 0
movzx ecx, byte [ebp + ecx - 0x118]
mov byte [ebp + ecx - 0x2f0], al
mov dword [ebp - 0x1c], 0xa860b4ff
mov dword [ebp - 0x1f0], 0x25ec560
mov dword [ebp - 0x23c], 0xd015b01d
mov dword [ebp - 0x36c], 0xffffffff
mov dword [ebp - 0x24], 0
jmp 0x1003e208
mov eax, dword [ebp - 0x24]
inc eax
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 1
jge 0x1003e21b
mov eax, dword [ebp - 0x24]
mov dword [ebp + eax*4 - 0x6c], 1
jmp 0x1003e201
mov dword [ebp - 0x24], 0
jmp 0x1003e22b
mov eax, dword [ebp - 0x24]
inc eax
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 4
jge 0x1003e241
mov eax, dword [ebp - 0x24]
mov dword [ebp + eax*4 - 0x3b8], 0x5ff57440
jmp 0x1003e224
mov dword [ebp - 0x1c], 0
jmp 0x1003e251
mov eax, dword [ebp - 0x1c]
inc eax
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 1
jge 0x1003e264
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0x6c], 0x71c7
jmp 0x1003e24a
mov dword [ebp - 0x1c], 0
jmp 0x1003e274
mov eax, dword [ebp - 0x1c]
dec eax
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 0xffffffe3
jle 0x1003e7ba
push 3
lea ecx, [ebp - 0x290]
call fcn.1000b098
and dword [ebp - 4], 0
mov dword [ebp - 0x234], 0x5950
mov dword [ebp - 0x1dc], 0xffffffff
mov dword [ebp - 0x74], 0
jmp 0x1003e2b3
mov eax, dword [ebp - 0x74]
inc eax
mov dword [ebp - 0x74], eax
cmp dword [ebp - 0x74], 3
jge 0x1003e2c9
mov eax, dword [ebp - 0x74]
mov dword [ebp + eax*4 - 0x124], 1
jmp 0x1003e2ac
lea eax, [ebp - 0x290]
push eax
lea eax, [ebp - 0x74]
push eax
call fcn.1003d89b
pop ecx
pop ecx
mov dword [ebp - 0x264], 0x1d77
cmp dword [ebp - 0x264], 0xd4c
jge 0x1003e4b6
push 0x10b16900
push 0x10b14430
mov ecx, 0x1065f4f0
call fcn.1002ee68
mov ecx, eax
call fcn.1002ee68
and dword [ebp - 0xac], 0
jmp 0x1003e326
mov eax, dword [ebp - 0xac]
inc eax
mov dword [ebp - 0xac], eax
mov eax, dword [ebp - 0xac]
cdq
mov dword [ebp - 0x254], eax
mov dword [ebp - 0x250], edx
mov eax, dword [ebp - 0x250]
cmp eax, dword [0x10b14434]
jg 0x1003e371
jl 0x1003e357
mov eax, dword [ebp - 0x254]
cmp eax, dword [0x10b14430]
jae 0x1003e371
mov eax, dword [ebp - 0xac]
lea eax, [eax*4 + 0x10bb1388]
push eax
mov ecx, 0x1065f4f0
call fcn.1002ec13
jmp 0x1003e319
and dword [ebp - 0x80], 0
jmp 0x1003e37e
mov eax, dword [ebp - 0x80]
inc eax
mov dword [ebp - 0x80], eax
mov eax, dword [ebp - 0x80]
cdq
mov dword [ebp - 0x260], eax
mov dword [ebp - 0x25c], edx
mov eax, dword [ebp - 0x25c]
cmp eax, dword [0x10b14434]
jg 0x1003e3c3
jl 0x1003e3ac
mov eax, dword [ebp - 0x260]
cmp eax, dword [0x10b14430]
jae 0x1003e3c3
mov eax, dword [ebp - 0x80]
lea eax, [eax*4 + 0x10b16908]
push eax
mov ecx, 0x1065f4f0
call fcn.1002ec13
jmp 0x1003e377
xorpd xmm0, xmm0
movlpd qword [ebp - 0x16c], xmm0
mov dword [ebp - 0x138], 0x77359400
and dword [ebp - 0x134], 0
xorpd xmm0, xmm0
movlpd qword [ebp - 0x218], xmm0
mov eax, dword [ebp - 0x168]
cmp eax, dword [ebp - 0x134]
jg 0x1003e494
jl 0x1003e412
mov eax, dword [ebp - 0x16c]
cmp eax, dword [ebp - 0x138]
ja 0x1003e494
mov eax, dword [ebp - 0x16c]
add eax, dword [ebp - 0x138]
mov ecx, dword [ebp - 0x168]
adc ecx, dword [ebp - 0x134]
push 0
push 2
push ecx
push eax
call fcn.1006df30
mov dword [ebp - 0x90], eax
mov eax, dword [ebp - 0x90]
cdq
push edx
push eax
call fcn.1003db7a
pop ecx
pop ecx
movzx eax, al
test eax, eax
je 0x1003e47b
mov eax, dword [ebp - 0x90]
inc eax
cdq
mov dword [ebp - 0x16c], eax
mov dword [ebp - 0x168], edx
mov eax, dword [ebp - 0x90]
cdq
mov dword [ebp - 0x218], eax
mov dword [ebp - 0x214], edx
jmp 0x1003e48f
mov eax, dword [ebp - 0x90]
dec eax
cdq
mov dword [ebp - 0x138], eax
mov dword [ebp - 0x134], edx
jmp 0x1003e3ec
push fcn.10033585
push dword [ebp - 0x214]
push dword [ebp - 0x218]
mov ecx, 0x1065f438
call fcn.1002f25c
mov ecx, eax
call fcn.1002f02c
push 4
pop eax
shl eax, 1
mov dword [ebp + eax - 0x124], 0
jmp 0x1003e4e1
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x124]
inc eax
push 4
pop ecx
shl ecx, 1
mov dword [ebp + ecx - 0x124], eax
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0x124], 0
jg 0x1003e7a1
push 4
lea ecx, [ebp - 0x350]
call fcn.1000b098
mov byte [ebp - 4], 1
mov dword [ebp - 0x158], 0xffffffff
lea eax, [ebp - 0x350]
push eax
lea eax, [ebp - 0x32c]
push eax
call fcn.1003d8e3
pop ecx
pop ecx
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x124]
mov eax, dword [ebp + eax*4 - 0x6c]
mov dword [ebp - 0x370], eax
mov eax, dword [ebp - 0x158]
inc eax
mov dword [ebp - 0x158], eax
mov eax, dword [ebp - 0x158]
dec eax
push 4
pop ecx
imul ecx, ecx, 3
cmp eax, dword [ebp + ecx - 0x3b8]
jg 0x1003e569
mov dword [ebp - 0x1ac], 1
jmp 0x1003e570
and dword [ebp - 0x1ac], 0
mov eax, dword [ebp - 0x1c]
cmp eax, dword [ebp - 0x1ac]
jne 0x1003e587
mov dword [ebp - 0x1e4], 1
jmp 0x1003e58e
and dword [ebp - 0x1e4], 0
cmp dword [ebp - 0x1e4], 0x5c526587
jle 0x1003e5a6
mov dword [ebp - 0x1ec], 1
jmp 0x1003e5ad
and dword [ebp - 0x1ec], 0
cmp dword [ebp - 0x1ec], 0xffffffff
jae 0x1003e5c2
mov dword [ebp - 0x200], 1
jmp 0x1003e5c9
and dword [ebp - 0x200], 0
mov eax, dword [ebp - 0x200]
neg eax
push 4
pop ecx
shl ecx, 1
mov ecx, dword [ebp + ecx - 0x124]
cmp eax, dword [ebp + ecx*4 - 0x6c]
jge 0x1003e5ef
mov dword [ebp - 0x22c], 1
jmp 0x1003e5f6
and dword [ebp - 0x22c], 0
push 2
lea ecx, [ebp - 0x290]
call fcn.1000b0d9
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x124]
cmp dword [ebp + eax*4 - 0x6c], 0
jne 0x1003e628
cmp dword [ebp - 0x234], 0
jne 0x1003e628
and dword [ebp - 0x208], 0
jmp 0x1003e632
mov dword [ebp - 0x208], 1
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x124]
cmp dword [ebp - 0x208], eax
jge 0x1003e652
mov dword [ebp - 0x210], 1
jmp 0x1003e659
and dword [ebp - 0x210], 0
cmp dword [ebp - 0x210], 0xfff7
jbe 0x1003e671
mov dword [ebp - 0x204], 1
jmp 0x1003e678
and dword [ebp - 0x204], 0
mov eax, dword [ebp - 0x23c]
cmp dword [ebp - 0x204], eax
jne 0x1003e692
mov dword [ebp - 0x178], 1
jmp 0x1003e699
and dword [ebp - 0x178], 0
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x178]
add ecx, 6
cmp dword [ebp + eax - 0x124], ecx
jle 0x1003e6cf
push 1
lea ecx, [ebp - 0x290]
call fcn.1000b0d9
cmp dword [eax], 0
je 0x1003e6cf
mov dword [ebp - 0x268], 1
jmp 0x1003e6d6
and dword [ebp - 0x268], 0
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x124]
mov dword [ebp - 0x334], eax
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x1f0]
cmp dword [ebp + eax - 0x124], ecx
jge 0x1003e709
mov dword [ebp - 0x12c], 1
jmp 0x1003e710
and dword [ebp - 0x12c], 0
push 0
lea ecx, [ebp - 0x290]
call fcn.1000b0d9
mov ecx, dword [ebp - 0x12c]
mov dword [eax], ecx
mov eax, dword [ebp - 0x12c]
mov dword [ebp - 0x1dc], eax
mov eax, dword [ebp - 0x1dc]
sub eax, 0xffff
jne 0x1003e74c
or eax, 0xffffffff
jne 0x1003e74c
and dword [ebp - 0x1c8], 0
jmp 0x1003e756
mov dword [ebp - 0x1c8], 1
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x124]
mov eax, dword [ebp + eax*4 - 0x6c]
cmp dword [ebp - 0x1c8], eax
jge 0x1003e77a
mov dword [ebp - 0x180], 1
jmp 0x1003e781
and dword [ebp - 0x180], 0
mov eax, dword [ebp - 0x180]
mov dword [ebp - 0x1f0], eax
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x350]
call fcn.1000b0d4
jmp 0x1003e4c8
call fcn.1003d92b
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x290]
call fcn.1000b0d4
jmp 0x1003e26d
mov dword [ebp - 0x14], 2
and dword [ebp - 0xb0], 0
jmp 0x1003e7d2
mov eax, dword [ebp - 0x14]
inc eax
inc eax
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 0x63
jae 0x1003e88e
xor eax, eax
inc eax
imul eax, eax, 0
movzx eax, byte [ebp + eax - 0x118]
lea eax, [eax + eax + 2]
cmp dword [ebp - 0x14], eax
jne 0x1003e81c
mov eax, dword [ebp - 0x14]
movzx eax, byte [ebp + eax - 0x118]
inc eax
mov dword [ebp - 0xb0], eax
mov eax, dword [ebp - 0x14]
movzx eax, byte [ebp + eax - 0x118]
mov ecx, dword [ebp - 0x14]
lea eax, [ecx + eax - 1]
mov dword [ebp - 0x14], eax
jmp 0x1003e7ca
mov eax, dword [ebp - 0x14]
movzx eax, byte [ebp + eax - 0x117]
mov ecx, dword [ebp - 0x14]
sub ecx, dword [ebp - 0xb0]
movzx ecx, byte [ebp + ecx - 0x11a]
movsx ecx, byte [ebp + ecx - 0x2f0]
or eax, ecx
mov ecx, dword [ebp - 0x14]
movzx ecx, byte [ebp + ecx - 0x117]
mov edx, dword [ebp - 0x14]
sub edx, dword [ebp - 0xb0]
movzx edx, byte [ebp + edx - 0x11a]
movsx edx, byte [ebp + edx - 0x2f0]
and ecx, edx
sub eax, ecx
mov ecx, dword [ebp - 0x14]
movzx ecx, byte [ebp + ecx - 0x118]
mov byte [ebp + ecx - 0x2f0], al
lea eax, [ebp - 0xb0]
push eax
call fcn.1003d94a
pop ecx
jmp 0x1003e7ca
xor eax, eax
inc eax
imul eax, eax, 0x1a
mov byte [ebp + eax - 0x2f0], 0
lea eax, [ebp - 0x2f0]
push eax
lea ecx, [ebp - 0x3d0]
call fcn.100439d1
mov dword [ebp - 4], 2
push 2
lea ecx, [ebp - 0x34]
call fcn.1000b098
mov byte [ebp - 4], 3
mov dword [ebp - 0x3c], 0xfffffffe
mov dword [ebp - 0x13c], 7
mov dword [ebp - 0x270], 0x196a
cmp dword [ebp - 0x270], 0x1092
jge 0x1003e963
lea eax, [ebp - 0x278]
push eax
push 0x10007a34
call fcn.100550ab
pop ecx
pop ecx
mov dword [ebp - 0x14c], 1
jmp 0x1003e916
mov eax, dword [ebp - 0x14c]
inc eax
mov dword [ebp - 0x14c], eax
mov eax, dword [ebp - 0x14c]
cmp eax, dword [ebp - 0x278]
jg 0x1003e963
lea eax, [ebp - 0x280]
push eax
lea eax, [ebp - 0x2a8]
push eax
push 0x10007af8
call fcn.100550ab
add esp, 0xc
lea eax, [ebp - 0x280]
push eax
lea eax, [ebp - 0x2a8]
push eax
call fcn.1003dc31
pop ecx
pop ecx
push eax
push 0x10007a8c
call fcn.100552a0
pop ecx
pop ecx
jmp 0x1003e909
mov dword [ebp - 0x7c], 0
jmp 0x1003e973
mov eax, dword [ebp - 0x7c]
inc eax
mov dword [ebp - 0x7c], eax
cmp dword [ebp - 0x7c], 1
jge 0x1003e986
mov eax, dword [ebp - 0x7c]
mov dword [ebp + eax*4 - 0x5c], 0
jmp 0x1003e96c
lea eax, [ebp - 0x34]
push eax
lea eax, [ebp - 0x7c]
push eax
call fcn.10028fd1
pop ecx
pop ecx
push 1
lea ecx, [ebp - 0x34]
call fcn.1000b0d9
and dword [eax], 0
jmp 0x1003e9c5
push 1
lea ecx, [ebp - 0x34]
call fcn.1000b0d9
mov dword [ebp - 0x188], eax
mov eax, dword [ebp - 0x188]
mov eax, dword [eax]
inc eax
mov ecx, dword [ebp - 0x188]
mov dword [ecx], eax
push 1
lea ecx, [ebp - 0x34]
call fcn.1000b0d9
cmp dword [eax], 0
jg 0x1003ebb5
mov dword [ebp - 0x50], 1
mov dword [ebp - 0x128], 5
push 1
lea ecx, [ebp - 0x34]
call fcn.1000b0d9
mov esi, eax
push 1
lea ecx, [ebp - 0x34]
call fcn.1000b0d9
mov esi, dword [esi]
add esi, dword [eax]
push 1
lea ecx, [ebp - 0x34]
call fcn.1000b0d9
cmp esi, dword [eax]
jle 0x1003ea1d
mov dword [ebp - 0x1d0], 1
jmp 0x1003ea24
and dword [ebp - 0x1d0], 0
mov eax, dword [ebp - 0x50]
cmp dword [ebp - 0x1d0], eax
jne 0x1003ea3b
mov dword [ebp - 0x224], 1
jmp 0x1003ea42
and dword [ebp - 0x224], 0
mov eax, dword [ebp - 0x50]
mov dword [ebp - 0x378], eax
mov eax, dword [ebp - 0x50]
mov dword [ebp - 0x128], eax
cmp dword [ebp - 0x128], 0
jl 0x1003ea69
mov dword [ebp - 0x190], 1
jmp 0x1003ea70
and dword [ebp - 0x190], 0
push 0
lea ecx, [ebp - 0x34]
call fcn.1000b0d9
mov ecx, dword [ebp - 0x190]
cmp ecx, dword [eax]
jge 0x1003ea90
mov dword [ebp - 0x1f4], 1
jmp 0x1003ea97
and dword [ebp - 0x1f4], 0
push 1
lea ecx, [ebp - 0x34]
call fcn.1000b0d9
mov ecx, dword [ebp - 0x1f4]
cmp ecx, dword [eax]
jl 0x1003eac6
push 0
lea ecx, [ebp - 0x34]
call fcn.1000b0d9
cmp dword [eax], 0
je 0x1003eac6
mov dword [ebp - 0x228], 1
jmp 0x1003eacd
and dword [ebp - 0x228], 0
push 1
lea ecx, [ebp - 0x34]
call fcn.1000b0d9
mov eax, dword [eax]
mov eax, dword [ebp + eax*4 - 0x5c]
mov dword [ebp - 0x274], eax
push 1
lea ecx, [ebp - 0x34]
call fcn.1000b0d9
mov eax, dword [eax]
mov ecx, dword [ebp - 0x274]
mov dword [ebp + eax*4 - 0x5c], ecx
mov eax, dword [ebp - 0x50]
mov dword [ebp - 0x33c], eax
push 1
lea ecx, [ebp - 0x34]
call fcn.1000b0d9
push 1
lea ecx, [ebp - 0x34]
call fcn.1000b0d9
mov eax, dword [eax]
cmp dword [ebp + eax*4 - 0x5c], 5
ja 0x1003eb2b
mov dword [ebp - 0x198], 1
jmp 0x1003eb32
and dword [ebp - 0x198], 0
cmp dword [ebp - 0x198], 0xe3d4
je 0x1003eb4a
mov dword [ebp - 0x1d8], 1
jmp 0x1003eb51
and dword [ebp - 0x1d8], 0
mov eax, dword [ebp - 0x1d8]
neg eax
or ecx, 0xffffffff
sub ecx, eax
cmp ecx, dword [ebp - 0x3c]
jge 0x1003eb75
cmp dword [ebp - 0x50], 0
je 0x1003eb75
mov dword [ebp - 0x230], 1
jmp 0x1003eb7c
and dword [ebp - 0x230], 0
push 0
lea ecx, [ebp - 0x34]
call fcn.1000b0d9
or eax, 0xffffffff
jne 0x1003eba0
cmp dword [ebp - 0x128], 0
jne 0x1003eba0
mov dword [ebp - 0x1a0], 1
jmp 0x1003eba7
and dword [ebp - 0x1a0], 0
mov eax, dword [ebp - 0x1a0]
mov dword [ebp - 0x50], eax
jmp 0x1003e9a4
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x5c], 0
je 0x1003f367
mov dword [ebp - 0x1a8], 1
push 1
lea ecx, [ebp - 0x164]
call fcn.1000b098
mov byte [ebp - 4], 4
mov dword [ebp - 0x130], 8
push 1
lea ecx, [ebp - 0x2bc]
call fcn.1000b098
mov byte [ebp - 4], 5
push 2
lea ecx, [ebp - 0x2d4]
call fcn.1000b098
mov byte [ebp - 4], 6
mov dword [ebp - 0x2a4], 0x1e66
cmp dword [ebp - 0x2a4], 0xd43
jge 0x1003ef6a
lea eax, [ebp - 0x60]
push eax
lea eax, [ebp - 0x64]
push eax
lea eax, [ebp - 0x1f8]
push eax
mov ecx, 0x1065f4f0
call fcn.1002ec13
mov ecx, eax
call fcn.1002ec13
mov ecx, eax
call fcn.1002ec13
mov eax, dword [ebp - 0x64]
cmp eax, dword [ebp - 0x60]
jle 0x1003ec61
lea edx, [ebp - 0x60]
lea ecx, [ebp - 0x64]
call fcn.100333a3
cmp dword [ebp - 0x1f8], 2
jne 0x1003ec85
push fcn.10033585
mov edx, 0x10007e04
mov ecx, 0x1065f438
call fcn.100333ae
mov ecx, eax
call fcn.1002f02c
lea ecx, [ebp - 0x48]
call fcn.1002f371
mov byte [ebp - 4], 7
mov dword [ebp - 0x98], 1
jmp 0x1003ecaa
mov eax, dword [ebp - 0x98]
inc eax
mov dword [ebp - 0x98], eax
mov eax, dword [ebp - 0x98]
cmp eax, dword [ebp - 0x1f8]
jg 0x1003ecc9
lea eax, [ebp - 0x98]
push eax
lea ecx, [ebp - 0x48]
call fcn.1002f3a0
jmp 0x1003ec9d
mov dword [ebp - 0x154], 1
lea ecx, [ebp - 0x48]
call fcn.10043af4
movzx eax, al
test eax, eax
jne 0x1003ef43
lea ecx, [ebp - 0x48]
call fcn.1002f4f5
cmp eax, 2
jne 0x1003ecf8
jmp 0x1003ef43
and dword [ebp - 0x10], 0
jmp 0x1003ed05
mov eax, dword [ebp - 0x10]
inc eax
mov dword [ebp - 0x10], eax
lea ecx, [ebp - 0x48]
call fcn.1002f4f5
cmp dword [ebp - 0x10], eax
jae 0x1003ef31
push dword [ebp - 0x10]
lea ecx, [ebp - 0x48]
call fcn.1000b0d9
mov eax, dword [eax]
cmp eax, dword [ebp - 0x64]
jne 0x1003ed3c
mov eax, dword [ebp - 0x10]
inc eax
push eax
lea ecx, [ebp - 0x48]
call fcn.1000b0d9
mov eax, dword [eax]
cmp eax, dword [ebp - 0x60]
je 0x1003ed62
push dword [ebp - 0x10]
lea ecx, [ebp - 0x48]
call fcn.1000b0d9
mov eax, dword [eax]
cmp eax, dword [ebp - 0x60]
jne 0x1003ed7e
mov eax, dword [ebp - 0x10]
inc eax
push eax
lea ecx, [ebp - 0x48]
call fcn.1000b0d9
mov eax, dword [eax]
cmp eax, dword [ebp - 0x64]
jne 0x1003ed7e
push fcn.10033585
push dword [ebp - 0x154]
mov ecx, 0x1065f438
call fcn.1002f038
mov ecx, eax
call fcn.1002f02c
push dword [ebp - 0x10]
lea ecx, [ebp - 0x48]
call fcn.1000b0d9
mov eax, dword [eax]
cmp eax, dword [ebp - 0x64]
jne 0x1003ede2
push 1
lea eax, [ebp - 0x2f8]
push eax
push dword [ebp - 0x10]
lea eax, [ebp - 0x300]
push eax
lea eax, [ebp - 0x308]
push eax
lea ecx, [ebp - 0x48]
call fcn.1002f41b
mov ecx, eax
call fcn.10034199
mov ecx, eax
call fcn.10034199
mov eax, dword [eax]
mov dword [ebp - 0x238], eax
push dword [ebp - 0x238]
lea eax, [ebp - 0x310]
push eax
lea ecx, [ebp - 0x48]
call fcn.10043aff
jmp 0x1003ef2c
mov eax, dword [ebp - 0x10]
inc eax
push eax
lea ecx, [ebp - 0x48]
call fcn.1000b0d9
mov eax, dword [eax]
cmp eax, dword [ebp - 0x64]
jne 0x1003ee38
push dword [ebp - 0x10]
lea eax, [ebp - 0x318]
push eax
lea eax, [ebp - 0x320]
push eax
lea ecx, [ebp - 0x48]
call fcn.1002f41b
mov ecx, eax
call fcn.10034199
mov eax, dword [eax]
mov dword [ebp - 0x27c], eax
push dword [ebp - 0x27c]
lea eax, [ebp - 0x328]
push eax
lea ecx, [ebp - 0x48]
call fcn.10043aff
jmp 0x1003ef2c
push dword [ebp - 0x10]
lea ecx, [ebp - 0x48]
call fcn.1000b0d9
mov eax, dword [eax]
cmp eax, dword [ebp - 0x60]
jne 0x1003ee9c
push 1
lea eax, [ebp - 0x330]
push eax
push dword [ebp - 0x10]
lea eax, [ebp - 0x338]
push eax
lea eax, [ebp - 0x340]
push eax
lea ecx, [ebp - 0x48]
call fcn.1002f41b
mov ecx, eax
call fcn.10034199
mov ecx, eax
call fcn.10034199
mov eax, dword [eax]
mov dword [ebp - 0x240], eax
push dword [ebp - 0x240]
lea eax, [ebp - 0x380]
push eax
lea ecx, [ebp - 0x48]
call fcn.10043aff
jmp 0x1003ef2c
mov eax, dword [ebp - 0x10]
inc eax
push eax
lea ecx, [ebp - 0x48]
call fcn.1000b0d9
mov eax, dword [eax]
cmp eax, dword [ebp - 0x60]
jne 0x1003eeef
push dword [ebp - 0x10]
lea eax, [ebp - 0x2f4]
push eax
lea eax, [ebp - 0x2fc]
push eax
lea ecx, [ebp - 0x48]
call fcn.1002f41b
mov ecx, eax
call fcn.10034199
mov eax, dword [eax]
mov dword [ebp - 0x2b0], eax
push dword [ebp - 0x2b0]
lea eax, [ebp - 0x37c]
push eax
lea ecx, [ebp - 0x48]
call fcn.10043aff
jmp 0x1003ef2c
push dword [ebp - 0x10]
lea eax, [ebp - 0x304]
push eax
lea eax, [ebp - 0x344]
push eax
lea ecx, [ebp - 0x48]
call fcn.1002f41b
mov ecx, eax
call fcn.10034199
mov eax, dword [eax]
mov dword [ebp - 0x24c], eax
push dword [ebp - 0x24c]
lea eax, [ebp - 0x30c]
push eax
lea ecx, [ebp - 0x48]
call fcn.10043aff
jmp 0x1003ecfe
mov eax, dword [ebp - 0x154]
inc eax
mov dword [ebp - 0x154], eax
jmp 0x1003ecd3
push fcn.10033585
mov edx, 0x10007e04
mov ecx, 0x1065f438
call fcn.100333ae
mov ecx, eax
call fcn.1002f02c
mov byte [ebp - 4], 6
lea ecx, [ebp - 0x48]
call fcn.1000b0d4
lea eax, [ebp - 0x164]
push eax
lea eax, [ebp - 0x18]
push eax
call fcn.1003d95e
pop ecx
pop ecx
lea eax, [ebp - 0x2bc]
push eax
lea eax, [ebp - 0x18]
push eax
call fcn.1001e7c6
pop ecx
pop ecx
mov dword [ebp - 0x18], 0
jmp 0x1003ef9e
mov eax, dword [ebp - 0x18]
inc eax
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 4
jge 0x1003efb4
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x390], 0xffffffff
jmp 0x1003ef97
mov dword [ebp - 0x18], 0
jmp 0x1003efc4
mov eax, dword [ebp - 0x18]
inc eax
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 2
jge 0x1003efe0
push dword [ebp - 0x18]
lea ecx, [ebp - 0x2d4]
call fcn.1000b0d9
mov dword [eax], 0x8d27
jmp 0x1003efbd
mov esi, dword [ebp - 0x1a8]
push 1
lea ecx, [ebp - 0x34]
call fcn.1000b0d9
mov dword [eax], esi
push 9
pop eax
test eax, eax
je 0x1003f02a
mov eax, dword [ebp - 0x3c]
mov dword [ebp - 0x374], eax
push 1
lea ecx, [ebp - 0x34]
call fcn.1000b0d9
cmp dword [ebp - 0x1a8], 0
jne 0x1003f01e
mov eax, 0x6396
test eax, eax
je 0x1003f02a
mov dword [ebp - 0x1e0], 1
jmp 0x1003f031
and dword [ebp - 0x1e0], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x5c]
cmp dword [ebp - 0x1e0], eax
je 0x1003f04f
mov dword [ebp - 0x1b0], 1
jmp 0x1003f056
and dword [ebp - 0x1b0], 0
push 0
lea ecx, [ebp - 0x164]
call fcn.1000b0d9
mov ecx, dword [ebp - 0x1b0]
cmp ecx, dword [eax]
jl 0x1003f079
mov dword [ebp - 0x1fc], 1
jmp 0x1003f080
and dword [ebp - 0x1fc], 0
push 0
lea ecx, [ebp - 0x164]
call fcn.1000b0d9
mov ecx, dword [ebp - 0x1fc]
imul ecx, dword [eax]
test ecx, ecx
jne 0x1003f0ac
push 0
lea ecx, [ebp - 0x164]
call fcn.1000b0d9
cmp dword [eax], 0
je 0x1003f0ca
push 0
lea ecx, [ebp - 0x164]
call fcn.1000b0d9
cmp dword [eax], 0
je 0x1003f0ca
mov dword [ebp - 0x1b8], 1
jmp 0x1003f0d1
and dword [ebp - 0x1b8], 0
mov eax, dword [ebp - 0x130]
cmp dword [ebp - 0x1b8], eax
jge 0x1003f0eb
mov dword [ebp - 0x1e8], 1
jmp 0x1003f0f2
and dword [ebp - 0x1e8], 0
push 1
lea ecx, [ebp - 0x34]
call fcn.1000b0d9
mov ecx, dword [ebp - 0x1e8]
mov dword [eax], ecx
mov eax, dword [ebp - 0x130]
mov dword [ebp - 0x314], eax
mov eax, dword [ebp - 0x3c]
mov dword [ebp - 0x354], eax
mov esi, dword [ebp - 0x3c]
push 0
lea ecx, [ebp - 0x164]
call fcn.1000b0d9
cmp esi, dword [eax]
je 0x1003f139
mov dword [ebp - 0x1c0], 1
jmp 0x1003f140
and dword [ebp - 0x1c0], 0
push 0
lea ecx, [ebp - 0x2bc]
call fcn.1000b0d9
mov ecx, dword [ebp - 0x1c0]
mov dword [eax], ecx
push 0
lea ecx, [ebp - 0x164]
call fcn.1000b0d9
mov ecx, 0xc4a6b1f1
sub ecx, dword [eax]
cmp ecx, 0x5039
jg 0x1003f17d
mov dword [ebp - 0x20c], 1
jmp 0x1003f184
and dword [ebp - 0x20c], 0
imul esi, dword [ebp - 0x20c], 3
push 0
lea ecx, [ebp - 0x164]
call fcn.1000b0d9
sub esi, dword [eax]
push 4
pop eax
imul eax, eax, 3
cmp esi, dword [ebp + eax - 0x390]
jne 0x1003f1bb
mov eax, 0xf31bc463
test eax, eax
jne 0x1003f1bb
and dword [ebp - 0x174], 0
jmp 0x1003f1c5
mov dword [ebp - 0x174], 1
mov eax, dword [ebp - 0x130]
cmp eax, dword [ebp - 0x174]
jge 0x1003f1df
mov dword [ebp - 0x17c], 1
jmp 0x1003f1e6
and dword [ebp - 0x17c], 0
push 1
lea ecx, [ebp - 0x34]
call fcn.1000b0d9
mov ecx, dword [ebp - 0x17c]
cmp ecx, dword [eax]
jle 0x1003f206
mov dword [ebp - 0x184], 1
jmp 0x1003f20d
and dword [ebp - 0x184], 0
cmp dword [ebp - 0x184], 0xbd9f
jle 0x1003f225
mov dword [ebp - 0x18c], 1
jmp 0x1003f22c
and dword [ebp - 0x18c], 0
push 0
lea ecx, [ebp - 0x34]
call fcn.1000b0d9
mov ecx, dword [ebp - 0x18c]
cmp ecx, dword [eax]
jl 0x1003f24c
mov dword [ebp - 0x194], 1
jmp 0x1003f253
and dword [ebp - 0x194], 0
mov eax, dword [ebp - 0x3c]
mov dword [ebp - 0x150], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x150]
mov dword [ebp + eax - 0x5c], ecx
push 0
lea ecx, [ebp - 0x2bc]
call fcn.1000b0d9
mov ecx, dword [ebp - 0x150]
mov dword [eax], ecx
mov eax, dword [ebp - 0x150]
cmp eax, dword [ebp - 0x194]
je 0x1003f2a0
xor eax, eax
inc eax
je 0x1003f2a0
mov dword [ebp - 0x19c], 1
jmp 0x1003f2a7
and dword [ebp - 0x19c], 0
mov eax, dword [ebp - 0x13c]
inc eax
mov dword [ebp - 0x13c], eax
mov esi, dword [ebp - 0x13c]
mov eax, dword [ebp - 0x19c]
sub eax, dword [ebp - 0x3c]
sub esi, eax
push 1
lea ecx, [ebp - 0x34]
call fcn.1000b0d9
cmp esi, dword [eax]
jg 0x1003f2df
mov dword [ebp - 0x1a4], 1
jmp 0x1003f2e6
and dword [ebp - 0x1a4], 0
push 0
lea ecx, [ebp - 0x34]
call fcn.1000b0d9
mov eax, dword [eax]
cmp eax, dword [ebp - 0x1a4]
jl 0x1003f306
mov dword [ebp - 0x284], 1
jmp 0x1003f30d
and dword [ebp - 0x284], 0
push 0
lea ecx, [ebp - 0x164]
call fcn.1000b0d9
push 1
lea ecx, [ebp - 0x2d4]
call fcn.1000b0d9
push 4
pop eax
imul eax, eax, 3
mov dword [ebp + eax - 0x390], 0xfffffff8
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x2d4]
call fcn.1000b0d4
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x2bc]
call fcn.1000b0d4
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x164]
call fcn.1000b0d4
jmp 0x1003f399
mov dword [ebp - 0x258], 0x60b10f65
mov dword [ebp - 0x2ac], 0x5f1f4743
lea eax, [ebp - 0x34]
push eax
lea eax, [ebp - 0x3c]
push eax
lea eax, [ebp - 0x258]
push eax
lea eax, [ebp - 0x2ac]
push eax
call fcn.1003d9a6
add esp, 0x10
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x34]
call fcn.1000b0d4
and dword [ebp - 0xa8], 0
jmp 0x1003f3bb
mov eax, dword [ebp - 0xa8]
inc eax
mov dword [ebp - 0xa8], eax
cmp dword [ebp - 0xa8], 0x1b
jae 0x1003f3d4
mov eax, dword [ebp - 0xa8]
mov byte [ebp + eax - 0x2f0], 0
jmp 0x1003f3ae
push 0x100077d0
lea ecx, [ebp - 0x3a8]
call fcn.100439d1
mov byte [ebp - 4], 8
mov dword [ebp - 0x21c], 0x1bdd
cmp dword [ebp - 0x21c], 0xdaa
jge 0x1003f543
lea eax, [ebp - 0x140]
push eax
push 0x10007818
call fcn.100550ab
pop ecx
pop ecx
mov eax, dword [ebp - 0x140]
mov dword [ebp - 0x294], eax
mov eax, dword [ebp - 0x140]
dec eax
mov dword [ebp - 0x140], eax
cmp dword [ebp - 0x294], 0
je 0x1003f543
lea eax, [ebp - 0x70]
push eax
push 0x10007818
call fcn.100550ab
pop ecx
pop ecx
push dword [ebp - 0x70]
lea ecx, [ebp - 0x2a0]
call fcn.1000b098
mov byte [ebp - 4], 9
and dword [ebp - 0x88], 0
jmp 0x1003f473
mov eax, dword [ebp - 0x88]
inc eax
mov dword [ebp - 0x88], eax
mov eax, dword [ebp - 0x88]
cmp eax, dword [ebp - 0x70]
jge 0x1003f49e
push dword [ebp - 0x88]
lea ecx, [ebp - 0x2a0]
call fcn.1000b0d9
push eax
push 0x10007818
call fcn.100550ab
pop ecx
pop ecx
jmp 0x1003f466
or dword [ebp - 0x144], 0xffffffff
mov dword [ebp - 0x78], 1
jmp 0x1003f4b5
mov eax, dword [ebp - 0x78]
inc eax
mov dword [ebp - 0x78], eax
mov eax, dword [ebp - 0x70]
dec eax
cmp dword [ebp - 0x78], eax
jge 0x1003f503
mov eax, dword [ebp - 0x70]
dec eax
push eax
lea ecx, [ebp - 0x2a0]
call fcn.1000b0d9
mov esi, eax
push 0
lea ecx, [ebp - 0x2a0]
call fcn.1000b0d9
mov edi, eax
push dword [ebp - 0x78]
lea ecx, [ebp - 0x2a0]
call fcn.1000b0d9
mov ecx, dword [edi]
add ecx, dword [eax]
cmp dword [esi], ecx
jl 0x1003f501
mov eax, dword [ebp - 0x78]
inc eax
mov dword [ebp - 0x144], eax
jmp 0x1003f503
jmp 0x1003f4ae
cmp dword [ebp - 0x144], 0
jle 0x1003f524
push dword [ebp - 0x70]
push dword [ebp - 0x144]
push 0x10007e0c
call fcn.100552a0
add esp, 0xc
jmp 0x1003f52f
push 0x10007a4c
call fcn.10055376
pop ecx
mov byte [ebp - 4], 8
lea ecx, [ebp - 0x2a0]
call fcn.1000b0d4
jmp 0x1003f415
mov dword [ebp - 0x28], 1
mov dword [ebp - 0x54], 0x29bf3901
mov dword [ebp - 0x58], 0x764361a6
mov dword [ebp - 0x26c], 0
mov dword [ebp - 0x20], 0
jmp 0x1003f572
mov eax, dword [ebp - 0x20]
inc eax
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 3
jge 0x1003f588
mov eax, dword [ebp - 0x20]
mov dword [ebp + eax*4 - 0x2c8], 0xffffffff
jmp 0x1003f56b
mov dword [ebp - 0x20], 0
jmp 0x1003f598
mov eax, dword [ebp - 0x20]
inc eax
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 1
jge 0x1003f5ae
mov eax, dword [ebp - 0x20]
mov dword [ebp + eax*4 - 0x1bc], 0x8884515f
jmp 0x1003f591
lea eax, [ebp - 0x54]
push eax
lea eax, [ebp - 0x28]
push eax
call fcn.1003da29
pop ecx
pop ecx
mov dword [ebp - 0x54], 0
jmp 0x1003f5cd
mov eax, dword [ebp - 0x54]
inc eax
mov dword [ebp - 0x54], eax
cmp dword [ebp - 0x54], 2
jge 0x1003f712
mov dword [ebp - 0x1cc], 0
mov dword [ebp - 0x28], 2
jmp 0x1003f5f1
mov eax, dword [ebp - 0x28]
dec eax
mov dword [ebp - 0x28], eax
cmp dword [ebp - 0x28], 0
jl 0x1003f70d
mov dword [ebp - 0x148], 0x86a6c65b
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp + eax*4 - 0x2c8]
mov dword [ebp - 0x31c], eax
imul eax, dword [ebp - 0x1cc], 0x7ff7d5f0
mov dword [ebp - 0x58], eax
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp + eax*4 - 0x2c8]
cmp eax, dword [ebp - 0x58]
jg 0x1003f63e
mov eax, 0x63b0
test eax, eax
jne 0x1003f63e
cmp dword [ebp - 0x58], 0
mov eax, dword [ebp - 0x28]
mov dword [ebp - 0x368], eax
mov eax, dword [ebp - 0x58]
mov dword [ebp - 0x324], eax
mov eax, dword [ebp - 0x54]
mov dword [ebp - 0x170], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x170]
mov dword [ebp + eax - 0x1bc], ecx
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x2c8]
cmp dword [ebp - 0x170], eax
jge 0x1003f68d
mov dword [ebp - 0x1b4], 1
jmp 0x1003f694
and dword [ebp - 0x1b4], 0
mov eax, dword [ebp - 0x1b4]
mov dword [ebp - 0x148], eax
mov eax, dword [ebp - 0x148]
inc eax
je 0x1003f6c5
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x1bc], 0
je 0x1003f6c5
mov dword [ebp - 0x1c4], 1
jmp 0x1003f6cc
and dword [ebp - 0x1c4], 0
mov eax, dword [ebp - 0x1c4]
mov dword [ebp - 0x26c], eax
mov eax, dword [ebp - 0x1cc]
mov dword [ebp - 0x58], eax
cmp dword [ebp - 0x58], 0
je 0x1003f6f4
cmp dword [ebp - 0x148], 0
je 0x1003f6f2
jmp 0x1003f70d
jmp 0x1003f708
mov byte [ebp - 0x49], 0
movzx eax, byte [ebp - 0x49]
test eax, eax
je 0x1003f708
push 0
call dword [sym.imp.KERNEL32.dll_SetCommBreak]
jmp 0x1003f5ea
jmp 0x1003f5c6
mov dword [ebp - 0x220], 1
push 1
lea ecx, [ebp - 0x360]
call fcn.1000b098
mov byte [ebp - 4], 0xa
mov dword [ebp - 0x84], 0
jmp 0x1003f746
mov eax, dword [ebp - 0x84]
inc eax
mov dword [ebp - 0x84], eax
cmp dword [ebp - 0x84], 1
jge 0x1003f768
push dword [ebp - 0x84]
lea ecx, [ebp - 0x360]
call fcn.1000b0d9
mov dword [eax], 1
jmp 0x1003f739
lea eax, [ebp - 0x220]
push eax
call fcn.1003da67
pop ecx
mov byte [ebp - 4], 8
lea ecx, [ebp - 0x360]
call fcn.1000b0d4
lea eax, [ebp - 0x3d0]
push eax
lea eax, [ebp - 0x364]
push eax
lea eax, [ebp + 0xc]
push eax
lea eax, [ebp - 0x3a8]
push eax
call fcn.1003daa4
add esp, 0x10
mov dword [ebp - 0x94], 0xfffffffc
mov dword [ebp - 0x94], 0xffffffee
jmp 0x1003f7c8
mov eax, dword [ebp - 0x94]
inc eax
mov dword [ebp - 0x94], eax
cmp dword [ebp - 0x94], 0xfffffff3
je 0x1003f840
mov dword [ebp - 0x9c], 0
mov dword [ebp - 0x9c], 0
jmp 0x1003f7f4
mov eax, dword [ebp - 0x9c]
dec eax
mov dword [ebp - 0x9c], eax
cmp dword [ebp - 0x9c], 0xffffffe2
je 0x1003f83b
mov dword [ebp - 0xa4], 0
mov dword [ebp - 0xa4], 0xa
jmp 0x1003f820
mov eax, dword [ebp - 0xa4]
dec eax
mov dword [ebp - 0xa4], eax
cmp dword [ebp - 0xa4], 7
jl 0x1003f839
mov byte [ebp - 0x35], 0
lea eax, [ebp - 0x35]
push eax
call fcn.1003db4b
pop ecx
jmp 0x1003f813
jmp 0x1003f7e7
jmp 0x1003f7bb
lea eax, [ebp - 0x3a8]
push eax
mov ecx, dword [ebp + 8]
call fcn.10043a00
mov eax, dword [ebp - 0x1d4]
or eax, 1
mov dword [ebp - 0x1d4], eax
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x3a8]
call fcn.10043a59
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x3d0]
call fcn.10043a59
mov eax, dword [ebp + 8]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
mov esp, ebp
pop ebp
ret