Function at 0x1003bd3f
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x10062302
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x404
push esi
and dword [ebp - 0x154], 0
mov dword [ebp - 0x290], 0x1b72
cmp dword [ebp - 0x290], 0x102b
jge 0x1003c05c
lea eax, [ebp - 0x2b0]
push eax
lea eax, [ebp - 0x58]
push eax
push 0x10007a5c
call fcn.1004833b
add esp, 0xc
mov eax, dword [ebp - 0x58]
inc eax
push eax
lea ecx, [ebp - 0x2e0]
call fcn.1000b4e9
and dword [ebp - 4], 0
mov eax, dword [ebp - 0x58]
inc eax
push eax
lea ecx, [ebp - 0x144]
call fcn.1000b4e9
mov byte [ebp - 4], 1
mov eax, dword [ebp - 0x58]
inc eax
push eax
lea ecx, [ebp - 0x28c]
call fcn.1000b4e9
mov byte [ebp - 4], 2
mov eax, dword [ebp - 0x58]
inc eax
push eax
lea ecx, [ebp - 0x280]
call fcn.1000b4e9
mov byte [ebp - 4], 3
mov dword [ebp - 0x24], 1
jmp 0x1003bdf7
mov eax, dword [ebp - 0x24]
inc eax
mov dword [ebp - 0x24], eax
mov eax, dword [ebp - 0x24]
cmp eax, dword [ebp - 0x58]
jg 0x1003be4d
push dword [ebp - 0x24]
lea ecx, [ebp - 0x144]
call fcn.1000b52a
mov ecx, dword [ebp - 0x24]
mov dword [eax], ecx
push dword [ebp - 0x24]
lea ecx, [ebp - 0x2e0]
call fcn.1000b52a
mov ecx, dword [ebp - 0x24]
mov dword [eax], ecx
push dword [ebp - 0x24]
lea ecx, [ebp - 0x280]
call fcn.1000b52a
mov ecx, dword [ebp - 0x24]
mov dword [eax], ecx
push dword [ebp - 0x24]
lea ecx, [ebp - 0x28c]
call fcn.1000b52a
mov ecx, dword [ebp - 0x24]
mov dword [eax], ecx
jmp 0x1003bdf0
and dword [ebp - 0x120], 0
jmp 0x1003be63
mov eax, dword [ebp - 0x120]
inc eax
mov dword [ebp - 0x120], eax
mov eax, dword [ebp - 0x120]
cmp eax, dword [ebp - 0x2b0]
jge 0x1003bfd9
lea eax, [ebp - 0x3c]
push eax
push 0x10007788
call fcn.1004833b
pop ecx
pop ecx
push dword [ebp - 0x3c]
lea ecx, [ebp - 0x144]
call fcn.1000b52a
mov eax, dword [eax]
mov dword [ebp - 0x54], eax
cmp dword [ebp - 0x54], 1
jg 0x1003bea0
jmp 0x1003be56
mov eax, dword [ebp - 0x54]
dec eax
push eax
lea ecx, [ebp - 0x2e0]
call fcn.1000b52a
mov eax, dword [eax]
mov dword [ebp - 0x44], eax
mov esi, dword [ebp - 0x54]
dec esi
push dword [ebp - 0x3c]
lea ecx, [ebp - 0x144]
call fcn.1000b52a
mov dword [eax], esi
mov eax, dword [ebp - 0x54]
dec eax
push eax
lea ecx, [ebp - 0x2e0]
call fcn.1000b52a
mov ecx, dword [ebp - 0x3c]
mov dword [eax], ecx
push dword [ebp - 0x44]
lea ecx, [ebp - 0x144]
call fcn.1000b52a
mov ecx, dword [ebp - 0x54]
mov dword [eax], ecx
push dword [ebp - 0x54]
lea ecx, [ebp - 0x2e0]
call fcn.1000b52a
mov ecx, dword [ebp - 0x44]
mov dword [eax], ecx
push dword [ebp - 0x3c]
lea ecx, [ebp - 0x28c]
call fcn.1000b52a
mov esi, eax
push dword [ebp - 0x3c]
lea ecx, [ebp - 0x144]
call fcn.1000b52a
mov ecx, dword [esi]
cmp ecx, dword [eax]
jge 0x1003bf40
push dword [ebp - 0x3c]
lea ecx, [ebp - 0x28c]
call fcn.1000b52a
mov eax, dword [eax]
mov dword [ebp - 0x17c], eax
jmp 0x1003bf56
push dword [ebp - 0x3c]
lea ecx, [ebp - 0x144]
call fcn.1000b52a
mov eax, dword [eax]
mov dword [ebp - 0x17c], eax
push dword [ebp - 0x3c]
lea ecx, [ebp - 0x28c]
call fcn.1000b52a
mov ecx, dword [ebp - 0x17c]
mov dword [eax], ecx
push dword [ebp - 0x44]
lea ecx, [ebp - 0x280]
call fcn.1000b52a
mov esi, eax
push dword [ebp - 0x44]
lea ecx, [ebp - 0x144]
call fcn.1000b52a
mov ecx, dword [esi]
cmp ecx, dword [eax]
jle 0x1003bfa8
push dword [ebp - 0x44]
lea ecx, [ebp - 0x280]
call fcn.1000b52a
mov eax, dword [eax]
mov dword [ebp - 0x254], eax
jmp 0x1003bfbe
push dword [ebp - 0x44]
lea ecx, [ebp - 0x144]
call fcn.1000b52a
mov eax, dword [eax]
mov dword [ebp - 0x254], eax
push dword [ebp - 0x44]
lea ecx, [ebp - 0x280]
call fcn.1000b52a
mov ecx, dword [ebp - 0x254]
mov dword [eax], ecx
jmp 0x1003be56
mov dword [ebp - 0x68], 1
jmp 0x1003bfe9
mov eax, dword [ebp - 0x68]
inc eax
mov dword [ebp - 0x68], eax
mov eax, dword [ebp - 0x68]
cmp eax, dword [ebp - 0x58]
jg 0x1003c020
push dword [ebp - 0x68]
lea ecx, [ebp - 0x280]
call fcn.1000b52a
push dword [eax]
push dword [ebp - 0x68]
lea ecx, [ebp - 0x28c]
call fcn.1000b52a
push dword [eax]
push 0x10007a94
call fcn.10048556
add esp, 0xc
jmp 0x1003bfe2
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x280]
call fcn.1000b525
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x28c]
call fcn.1000b525
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x144]
call fcn.1000b525
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x2e0]
call fcn.1000b525
mov dword [ebp - 0x4c], 0x73838a1f
mov dword [ebp - 0x98], 0
jmp 0x1003c07c
mov eax, dword [ebp - 0x98]
inc eax
mov dword [ebp - 0x98], eax
cmp dword [ebp - 0x98], 3
jge 0x1003c098
mov eax, dword [ebp - 0x98]
mov dword [ebp + eax*4 - 0x308], 0xffffffff
jmp 0x1003c06f
mov dword [ebp - 0x4c], 2
jmp 0x1003c0a8
mov eax, dword [ebp - 0x4c]
dec eax
mov dword [ebp - 0x4c], eax
cmp dword [ebp - 0x4c], 0
jl 0x1003c10c
mov eax, dword [ebp - 0x4c]
cmp dword [ebp + eax*4 - 0x308], 0
jne 0x1003c0f0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x308]
mov dword [ebp - 0x394], eax
mov eax, dword [ebp - 0x4c]
mov eax, dword [ebp + eax*4 - 0x308]
mov dword [ebp - 0x3ac], eax
xor eax, eax
cmp eax, 0xedb5
jl 0x1003c0f0
and dword [ebp - 0x25c], 0
jmp 0x1003c0fa
mov dword [ebp - 0x25c], 1
mov eax, dword [ebp - 0x4c]
mov ecx, dword [ebp - 0x25c]
mov dword [ebp + eax*4 - 0x308], ecx
jmp 0x1003c0a1
mov byte [ebp - 0x3e], 0
lea eax, [ebp - 0x3e]
push eax
call fcn.1003bbf1
pop ecx
mov byte [ebp - 0x11c], 0x11
mov byte [ebp - 0x11b], 0x32
mov byte [ebp - 0x11a], 0xd
mov byte [ebp - 0x119], 0x1c
mov byte [ebp - 0x118], 0x13
mov byte [ebp - 0x117], 0x1a
mov byte [ebp - 0x116], 0x14
mov byte [ebp - 0x115], 1
mov byte [ebp - 0x114], 7
mov byte [ebp - 0x113], 0x1d
mov byte [ebp - 0x112], 0x18
mov byte [ebp - 0x111], 0x11
mov byte [ebp - 0x110], 0xe
mov byte [ebp - 0x10f], 0x16
mov byte [ebp - 0x10e], 0
mov byte [ebp - 0x10d], 0xe
mov byte [ebp - 0x10c], 8
mov byte [ebp - 0x10b], 8
mov byte [ebp - 0x10a], 0xf
mov byte [ebp - 0x109], 0x19
mov byte [ebp - 0x108], 0x12
mov byte [ebp - 0x107], 3
mov byte [ebp - 0x106], 6
mov byte [ebp - 0x105], 0x14
mov byte [ebp - 0x104], 0xc
mov byte [ebp - 0x103], 0xa
mov byte [ebp - 0x102], 3
mov byte [ebp - 0x101], 9
mov byte [ebp - 0x100], 1
mov byte [ebp - 0xff], 6
mov byte [ebp - 0xfe], 2
mov byte [ebp - 0xfd], 1
mov byte [ebp - 0xfc], 4
mov byte [ebp - 0xfb], 6
mov byte [ebp - 0xfa], 9
mov byte [ebp - 0xf9], 0xf
mov byte [ebp - 0xf8], 0x41
mov byte [ebp - 0xf7], 0x5f
mov byte [ebp - 0xf6], 0x1f
mov byte [ebp - 0xf5], 0x89
mov byte [ebp - 0xf4], 0x11
mov byte [ebp - 0xf3], 0x26
mov byte [ebp - 0xf2], 0xa3
mov byte [ebp - 0xf1], 0x6d
mov byte [ebp - 0xf0], 0x19
mov byte [ebp - 0xef], 0xcc
mov byte [ebp - 0xee], 0x54
mov byte [ebp - 0xed], 0x3a
mov byte [ebp - 0xec], 0xa0
mov byte [ebp - 0xeb], 0x3e
mov byte [ebp - 0xea], 0x77
mov byte [ebp - 0xe9], 0xd6
mov byte [ebp - 0xe8], 0x14
mov byte [ebp - 0xe7], 0x11
mov byte [ebp - 0xe6], 0xe5
mov byte [ebp - 0xe5], 0xe
mov byte [ebp - 0xe4], 0xb4
mov byte [ebp - 0xe3], 0x53
mov byte [ebp - 0xe2], 0xc2
mov byte [ebp - 0xe1], 0x56
mov byte [ebp - 0xe0], 0x5c
mov byte [ebp - 0xdf], 0x88
mov byte [ebp - 0xde], 0x8e
mov byte [ebp - 0xdd], 0x4c
mov byte [ebp - 0xdc], 0x93
mov byte [ebp - 0xdb], 0xbb
mov byte [ebp - 0xda], 0x85
mov byte [ebp - 0xd9], 0xf1
mov byte [ebp - 0xd8], 0xe9
mov byte [ebp - 0xd7], 0x43
mov byte [ebp - 0xd6], 0x51
mov byte [ebp - 0xd5], 0x6d
mov byte [ebp - 0xd4], 0x3e
mov byte [ebp - 0xd3], 0xb2
mov byte [ebp - 0xd2], 0xdd
mov byte [ebp - 0xd1], 0xd7
mov byte [ebp - 0xd0], 0x7d
mov byte [ebp - 0xcf], 0xfb
mov byte [ebp - 0xce], 0xee
mov byte [ebp - 0xcd], 0xc6
mov byte [ebp - 0xcc], 0xf2
mov byte [ebp - 0xcb], 0x44
mov byte [ebp - 0xca], 0xc6
mov byte [ebp - 0xc9], 0xb7
mov byte [ebp - 0xc8], 0xb2
mov byte [ebp - 0xc7], 0xf5
mov byte [ebp - 0xc6], 0x68
mov byte [ebp - 0xc5], 0x7f
mov byte [ebp - 0xc4], 0x47
mov byte [ebp - 0xc3], 0x8b
mov byte [ebp - 0xc2], 0x60
mov byte [ebp - 0xc1], 0xdc
mov byte [ebp - 0xc0], 0x1b
mov byte [ebp - 0xbf], 0x1f
mov byte [ebp - 0xbe], 0x8d
mov byte [ebp - 0xbd], 0x5b
mov byte [ebp - 0xbc], 0x4d
mov byte [ebp - 0xbb], 0xbc
mov byte [ebp - 0xba], 0xcd
mov byte [ebp - 0xb9], 0x20
mov byte [ebp - 0xb8], 0xed
mov byte [ebp - 0xb7], 0x83
mov byte [ebp - 0xb6], 5
mov byte [ebp - 0xb5], 0xc
mov byte [ebp - 0xb4], 0x17
mov byte [ebp - 0xb3], 0x1e
mov byte [ebp - 0xb2], 0x10
mov byte [ebp - 0xb1], 9
mov byte [ebp - 0xb0], 0xa
mov byte [ebp - 0xaf], 0x1a
mov byte [ebp - 0xae], 0x19
mov byte [ebp - 0xad], 0x11
mov byte [ebp - 0xac], 0x15
mov byte [ebp - 0xab], 0xc
mov byte [ebp - 0xaa], 0x16
mov byte [ebp - 0xa9], 1
mov byte [ebp - 0xa8], 0xb
mov byte [ebp - 0xa7], 0x1b
mov dword [ebp - 0x38], 0xcd53
push 2
lea ecx, [ebp - 0x344]
call fcn.1000b4e9
mov dword [ebp - 4], 4
mov dword [ebp - 0x244], 0x2afa0177
lea eax, [ebp - 0x344]
push eax
lea eax, [ebp - 0x6c]
push eax
call fcn.1003bc18
pop ecx
pop ecx
mov dword [ebp - 0x6c], 0
jmp 0x1003c49b
mov eax, dword [ebp - 0x6c]
inc eax
mov dword [ebp - 0x6c], eax
cmp dword [ebp - 0x6c], 1
jge 0x1003c4b1
mov eax, dword [ebp - 0x6c]
mov dword [ebp + eax*4 - 0x2b8], 0
jmp 0x1003c494
lea eax, [ebp - 0x38]
push eax
call fcn.1003bc60
pop ecx
cmp dword [ebp - 0x38], 0
jne 0x1003c531
push 1
lea ecx, [ebp - 0x344]
call fcn.1000b52a
mov dword [eax], 0x49b7
imul eax, dword [ebp - 0x38], 0x49b7
cmp eax, dword [ebp - 0x38]
je 0x1003c4f2
mov eax, 0x1fad
test eax, eax
jne 0x1003c4f2
and dword [ebp - 0x160], 0
jmp 0x1003c4fc
mov dword [ebp - 0x160], 1
mov eax, dword [ebp - 0x38]
add eax, dword [ebp - 0x160]
cmp dword [ebp - 0x38], eax
jl 0x1003c516
mov dword [ebp - 0x150], 1
jmp 0x1003c51d
and dword [ebp - 0x150], 0
mov eax, dword [ebp - 0x150]
sub eax, dword [ebp - 0x38]
jne 0x1003c531
and dword [ebp - 0x23c], 0
jmp 0x1003c53b
mov dword [ebp - 0x23c], 1
mov eax, dword [ebp - 0x38]
cmp dword [ebp - 0x23c], eax
jg 0x1003c552
mov dword [ebp - 0x158], 1
jmp 0x1003c559
and dword [ebp - 0x158], 0
mov eax, dword [ebp - 0x158]
mov dword [ebp - 0x244], eax
imul eax, dword [ebp - 0x244], 0
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x2b8], eax
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x344]
call fcn.1000b525
xor eax, eax
inc eax
shl eax, 0
movzx eax, byte [ebp + eax - 0x11c]
or eax, 0x40
xor ecx, ecx
inc ecx
shl ecx, 0
movzx ecx, byte [ebp + ecx - 0x11c]
and ecx, 0x40
sub eax, ecx
xor ecx, ecx
inc ecx
imul ecx, ecx, 0
movzx ecx, byte [ebp + ecx - 0x11c]
mov byte [ebp + ecx - 0x360], al
mov dword [ebp - 0x20], 0xffffffff
mov dword [ebp - 0x2a8], 0xfffffffe
mov dword [ebp - 0xa4], 0xae54fd57
mov dword [ebp - 0x390], 0x62b336fd
mov dword [ebp - 0x3bc], 0xfffffff9
mov dword [ebp - 0x34], 0
jmp 0x1003c600
mov eax, dword [ebp - 0x34]
inc eax
mov dword [ebp - 0x34], eax
cmp dword [ebp - 0x34], 3
jge 0x1003c616
mov eax, dword [ebp - 0x34]
mov dword [ebp + eax*4 - 0x32c], 2
jmp 0x1003c5f9
mov dword [ebp - 0x34], 0
jmp 0x1003c626
mov eax, dword [ebp - 0x34]
inc eax
mov dword [ebp - 0x34], eax
cmp dword [ebp - 0x34], 3
jge 0x1003c63c
mov eax, dword [ebp - 0x34]
mov dword [ebp + eax*4 - 0x3e0], 0x9a5ce765
jmp 0x1003c61f
mov dword [ebp - 0x20], 0
jmp 0x1003c64c
mov eax, dword [ebp - 0x20]
dec eax
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 0xfffffffe
jge 0x1003cde6
push 1
lea ecx, [ebp - 0x78]
call fcn.1000b4e9
mov dword [ebp - 4], 5
mov dword [ebp - 0x18], 0x3e75cb55
mov dword [ebp - 0x134], 0xc74e
mov dword [ebp - 0x398], 1
mov dword [ebp - 0x12c], 0xfffffff9
mov dword [ebp - 0x2c], 0
jmp 0x1003c69c
mov eax, dword [ebp - 0x2c]
inc eax
mov dword [ebp - 0x2c], eax
cmp dword [ebp - 0x2c], 1
jge 0x1003c6b2
push dword [ebp - 0x2c]
lea ecx, [ebp - 0x78]
call fcn.1000b52a
or dword [eax], 0xffffffff
jmp 0x1003c695
mov dword [ebp - 0x2c], 0
jmp 0x1003c6c2
mov eax, dword [ebp - 0x2c]
inc eax
mov dword [ebp - 0x2c], eax
cmp dword [ebp - 0x2c], 1
jge 0x1003c6d8
mov eax, dword [ebp - 0x2c]
mov dword [ebp + eax*4 - 0x368], 0x53a6575
jmp 0x1003c6bb
cmp dword [ebp - 0x20], 0
je 0x1003c6f0
cmp dword [ebp - 0x20], 0
je 0x1003c6f0
mov dword [ebp - 0x2c0], 1
jmp 0x1003c6f7
and dword [ebp - 0x2c0], 0
mov eax, 0x7d0fa516
sub eax, 9
cmp eax, 0x9849b76e
jb 0x1003c712
mov dword [ebp - 0x24c], 1
jmp 0x1003c719
and dword [ebp - 0x24c], 0
cmp dword [ebp - 0x24c], 0x5306
jle 0x1003c731
mov dword [ebp - 0x230], 1
jmp 0x1003c738
and dword [ebp - 0x230], 0
mov eax, dword [ebp - 0x20]
cmp eax, dword [ebp - 0x230]
je 0x1003c74f
mov dword [ebp - 0x168], 1
jmp 0x1003c756
and dword [ebp - 0x168], 0
push 0
lea ecx, [ebp - 0x78]
call fcn.1000b52a
mov ecx, dword [ebp - 0x168]
cmp ecx, dword [eax]
jge 0x1003c776
mov dword [ebp - 0x1f0], 1
jmp 0x1003c77d
and dword [ebp - 0x1f0], 0
mov eax, dword [ebp - 0x20]
cmp dword [ebp - 0x1f0], eax
jle 0x1003c794
mov dword [ebp - 0x170], 1
jmp 0x1003c79b
and dword [ebp - 0x170], 0
cmp dword [ebp - 0x170], 0x386c
jl 0x1003c7b3
mov dword [ebp - 0x268], 1
jmp 0x1003c7ba
and dword [ebp - 0x268], 0
mov eax, dword [ebp - 0x268]
mov dword [ebp - 0x18], eax
mov eax, dword [ebp - 0x18]
imul eax, dword [ebp - 0x20]
test eax, eax
je 0x1003c7e0
cmp dword [ebp - 0x18], 0
je 0x1003c7e0
mov dword [ebp - 0x178], 1
jmp 0x1003c7e7
and dword [ebp - 0x178], 0
mov esi, dword [ebp - 0x20]
sub esi, dword [ebp - 0x178]
push 0
lea ecx, [ebp - 0x78]
call fcn.1000b52a
imul esi, dword [eax]
cmp esi, dword [ebp - 0x20]
jne 0x1003c80e
mov dword [ebp - 0x1f8], 1
jmp 0x1003c815
and dword [ebp - 0x1f8], 0
push 0
lea ecx, [ebp - 0x78]
call fcn.1000b52a
mov eax, dword [eax]
cmp eax, dword [ebp - 0x1f8]
jge 0x1003c835
mov dword [ebp - 0x180], 1
jmp 0x1003c83c
and dword [ebp - 0x180], 0
cmp dword [ebp - 0x180], 0xffffffff
jg 0x1003c851
mov dword [ebp - 0x238], 1
jmp 0x1003c858
and dword [ebp - 0x238], 0
push 0
lea ecx, [ebp - 0x78]
call fcn.1000b52a
mov ecx, dword [ebp - 0x238]
cmp ecx, dword [eax]
jg 0x1003c878
mov dword [ebp - 0x188], 1
jmp 0x1003c87f
and dword [ebp - 0x188], 0
cmp dword [ebp - 0x188], 0x44fa3fda
jge 0x1003c897
mov dword [ebp - 0x200], 1
jmp 0x1003c89e
and dword [ebp - 0x200], 0
mov eax, dword [ebp - 0x18]
cmp eax, dword [ebp - 0x200]
jg 0x1003c900
mov dword [ebp - 0x2c8], 0x6c7a88ff
cmp dword [ebp - 0x18], 0
je 0x1003c8ca
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x78]
call fcn.1000b525
jmp 0x1003cde6
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x18]
cmp dword [ebp + eax - 0x32c], ecx
jl 0x1003c8e8
mov dword [ebp - 0x190], 1
jmp 0x1003c8ef
and dword [ebp - 0x190], 0
mov eax, dword [ebp - 0x190]
mov dword [ebp - 0x2c8], eax
jmp 0x1003cdd5
mov dword [ebp - 0x2d0], 0x21fd
cmp dword [ebp - 0x2d0], 0xdaa
jge 0x1003ca95
lea eax, [ebp - 0x28]
push eax
lea eax, [ebp - 0x2d4]
push eax
mov ecx, 0x10652fb0
call fcn.1000b1d9
mov ecx, eax
call fcn.1000b1d9
lea eax, [ebp - 0x28]
push eax
mov ecx, 0x118201fc
call fcn.1003650b
mov eax, dword [ebp - 0x2d4]
cmp eax, dword [ebp - 0x28]
je 0x1003c9ce
mov eax, dword [ebp - 0x28]
and eax, 0x80000001
jns 0x1003c95e
dec eax
or eax, 0xfffffffe
inc eax
test eax, eax
jne 0x1003c97d
mov eax, dword [ebp - 0x28]
cdq
sub eax, edx
sar eax, 1
mov dword [ebp - 0x28], eax
lea eax, [ebp - 0x28]
push eax
mov ecx, 0x118201fc
call fcn.1003650b
jmp 0x1003c9c9
mov eax, dword [ebp - 0x28]
dec eax
cdq
push 0xa
pop ecx
idiv ecx
test edx, edx
jne 0x1003c9ae
mov eax, dword [ebp - 0x28]
dec eax
je 0x1003c9ae
mov eax, dword [ebp - 0x28]
dec eax
cdq
push 0xa
pop ecx
idiv ecx
mov dword [ebp - 0x28], eax
lea eax, [ebp - 0x28]
push eax
mov ecx, 0x118201fc
call fcn.1003650b
jmp 0x1003c9c9
push fcn.1000ea73
mov edx, 0x10007a44
mov ecx, 0x10652ef8
call fcn.1000eaa5
mov ecx, eax
call fcn.1000b3c8
jmp 0x1003c944
push fcn.1000ea73
mov edx, 0x10007a40
mov ecx, 0x10652ef8
call fcn.1000eaa5
mov ecx, eax
call fcn.1000b3c8
push fcn.1000ea73
mov ecx, 0x118201fc
call fcn.1001481f
push eax
mov ecx, 0x10652ef8
call fcn.100363f9
mov ecx, eax
call fcn.1000b3c8
lea eax, [ebp - 0x36c]
push eax
mov ecx, 0x118201fc
call fcn.1000b569
push dword [eax]
lea eax, [ebp - 0x374]
push eax
mov ecx, 0x118201fc
call fcn.1000b55b
push dword [eax]
call fcn.100420ce
pop ecx
pop ecx
and dword [ebp - 0x84], 0
jmp 0x1003ca4d
mov eax, dword [ebp - 0x84]
inc eax
mov dword [ebp - 0x84], eax
mov ecx, 0x118201fc
call fcn.1001481f
cmp dword [ebp - 0x84], eax
jae 0x1003ca86
push dword [ebp - 0x84]
mov ecx, 0x118201fc
call fcn.1000b52a
push dword [eax]
mov ecx, 0x10652ef8
call fcn.100144c1
mov dl, 0x20
mov ecx, eax
call fcn.10036dba
jmp 0x1003ca40
push fcn.1000ea73
mov ecx, 0x10652ef8
call fcn.1000b3c8
mov dword [ebp - 0x5c], 0xadb5d230
mov dword [ebp - 0x2a4], 4
push 0
lea ecx, [ebp - 0x78]
call fcn.1000b52a
mov eax, dword [ebp - 0x134]
mov dword [ebp - 0x37c], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x32c], 0xfffffff9
je 0x1003cad8
mov dword [ebp - 0x258], 1
jmp 0x1003cadf
and dword [ebp - 0x258], 0
push 0
lea ecx, [ebp - 0x78]
call fcn.1000b52a
mov eax, dword [eax]
cmp eax, dword [ebp - 0x258]
jle 0x1003caff
mov dword [ebp - 0x198], 1
jmp 0x1003cb06
and dword [ebp - 0x198], 0
cmp dword [ebp - 0x198], 6
jge 0x1003cb1b
mov dword [ebp - 0x208], 1
jmp 0x1003cb22
and dword [ebp - 0x208], 0
cmp dword [ebp - 0x208], 0xffffffff
jle 0x1003cb37
mov dword [ebp - 0x1a0], 1
jmp 0x1003cb3e
and dword [ebp - 0x1a0], 0
mov eax, dword [ebp - 0x1a0]
sub eax, dword [ebp - 0x5c]
jne 0x1003cb56
mov eax, 0x6311140a
test eax, eax
jne 0x1003cb56
cmp dword [ebp - 0x20], 0
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x32c], 0x27815014
jne 0x1003cb75
mov dword [ebp - 0x240], 1
jmp 0x1003cb7c
and dword [ebp - 0x240], 0
mov eax, dword [ebp - 0x134]
imul eax, dword [ebp - 0x240]
test eax, eax
jle 0x1003cb99
mov dword [ebp - 0x1a8], 1
jmp 0x1003cba0
and dword [ebp - 0x1a8], 0
push 0
lea ecx, [ebp - 0x78]
call fcn.1000b52a
mov ecx, dword [ebp - 0x1a8]
cmp ecx, dword [eax]
jle 0x1003cbc0
mov dword [ebp - 0x210], 1
jmp 0x1003cbc7
and dword [ebp - 0x210], 0
mov eax, dword [ebp - 0x210]
sub eax, dword [ebp - 0x2a8]
mov dword [ebp - 0xa4], eax
cmp dword [ebp - 0xa4], 0xa51c18cc
jae 0x1003cbf1
mov dword [ebp - 0x1b0], 1
jmp 0x1003cbf8
and dword [ebp - 0x1b0], 0
cmp dword [ebp - 0x1b0], 0
jle 0x1003cc0d
mov dword [ebp - 0x264], 1
jmp 0x1003cc14
and dword [ebp - 0x264], 0
mov eax, dword [ebp - 0x264]
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x18], 0
jmp 0x1003cc2d
mov eax, dword [ebp - 0x18]
inc eax
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 0
jg 0x1003cdd5
mov dword [ebp - 0x1b8], 0xb3dad933
mov eax, dword [ebp - 0x5c]
mov dword [ebp - 0x384], eax
mov dword [ebp - 0x1b8], 0x9d599618
mov eax, dword [ebp - 0x1b8]
inc eax
push 4
pop ecx
shl ecx, 1
cmp eax, dword [ebp + ecx - 0x3e0]
jge 0x1003cc75
mov dword [ebp - 0x218], 1
jmp 0x1003cc7c
and dword [ebp - 0x218], 0
push 0
lea ecx, [ebp - 0x78]
call fcn.1000b52a
mov eax, dword [eax]
cmp eax, dword [ebp - 0x218]
jle 0x1003cc9c
mov dword [ebp - 0x1c0], 1
jmp 0x1003cca3
and dword [ebp - 0x1c0], 0
push 0
lea ecx, [ebp - 0x78]
call fcn.1000b52a
mov eax, dword [eax]
cmp eax, dword [ebp - 0x1c0]
jl 0x1003ccc3
mov dword [ebp - 0x248], 1
jmp 0x1003ccca
and dword [ebp - 0x248], 0
mov eax, dword [ebp - 0x5c]
cmp dword [ebp - 0x248], eax
jle 0x1003cce1
mov dword [ebp - 0x1c8], 1
jmp 0x1003cce8
and dword [ebp - 0x1c8], 0
mov eax, dword [ebp - 0x5c]
cmp dword [ebp - 0x1c8], eax
jg 0x1003ccff
mov dword [ebp - 0x220], 1
jmp 0x1003cd06
and dword [ebp - 0x220], 0
mov eax, dword [ebp - 0x220]
sub eax, 9
cmp eax, dword [ebp - 0x5c]
jge 0x1003cd20
mov dword [ebp - 0x1d0], 1
jmp 0x1003cd27
and dword [ebp - 0x1d0], 0
mov eax, dword [ebp - 0x1d0]
mov dword [ebp - 0xa4], eax
mov esi, dword [ebp - 0xa4]
push dword [ebp - 0x18]
lea ecx, [ebp - 0x78]
call fcn.1000b52a
cmp esi, dword [eax]
je 0x1003cd54
mov dword [ebp - 0x29c], 1
jmp 0x1003cd5b
and dword [ebp - 0x29c], 0
push dword [ebp - 0x18]
lea ecx, [ebp - 0x78]
call fcn.1000b52a
mov eax, dword [ebp - 0x12c]
inc eax
mov dword [ebp - 0x12c], eax
mov eax, dword [ebp - 0x12c]
imul eax, dword [ebp - 0x18]
test eax, eax
je 0x1003cd96
cmp dword [ebp - 0x134], 0
je 0x1003cd96
mov dword [ebp - 0x2f4], 1
jmp 0x1003cd9d
and dword [ebp - 0x2f4], 0
push dword [ebp - 0x18]
lea ecx, [ebp - 0x78]
call fcn.1000b52a
cmp dword [ebp - 0x20], 0x546ec709
je 0x1003cdbd
mov dword [ebp - 0x260], 1
jmp 0x1003cdc4
and dword [ebp - 0x260], 0
mov eax, dword [ebp - 0x260]
mov dword [ebp - 0x2a4], eax
jmp 0x1003cc26
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x78]
call fcn.1000b525
jmp 0x1003c645
mov byte [ebp - 0x45], 0
movzx eax, byte [ebp - 0x45]
test eax, eax
je 0x1003cf31
call fcn.1003bc77
mov dword [ebp - 0x2e4], 0x19dc
cmp dword [ebp - 0x2e4], 0x1122
jge 0x1003cf31
lea eax, [ebp - 0x90]
push eax
push 0x10007788
call fcn.1004833b
pop ecx
pop ecx
push dword [ebp - 0x90]
lea ecx, [ebp - 0x314]
call fcn.1000b4e9
mov dword [ebp - 4], 6
and dword [ebp - 0x88], 0
jmp 0x1003ce56
mov eax, dword [ebp - 0x88]
inc eax
mov dword [ebp - 0x88], eax
mov eax, dword [ebp - 0x88]
cmp eax, dword [ebp - 0x90]
jge 0x1003ce84
push dword [ebp - 0x88]
lea ecx, [ebp - 0x314]
call fcn.1000b52a
push eax
push 0x10007784
call fcn.1004833b
pop ecx
pop ecx
jmp 0x1003ce49
and dword [ebp - 0x64], 0
and dword [ebp - 0xa0], 0
and dword [ebp - 0x8c], 0
jmp 0x1003cea5
mov eax, dword [ebp - 0x8c]
inc eax
mov dword [ebp - 0x8c], eax
mov eax, dword [ebp - 0x90]
shl eax, 1
cmp dword [ebp - 0x8c], eax
jge 0x1003cf10
mov eax, dword [ebp - 0x8c]
cdq
idiv dword [ebp - 0x90]
push edx
lea ecx, [ebp - 0x314]
call fcn.1000b52a
cmp dword [eax], 0
je 0x1003cf0a
mov eax, dword [ebp - 0x64]
inc eax
mov dword [ebp - 0x64], eax
mov eax, dword [ebp - 0xa0]
cmp eax, dword [ebp - 0x64]
jle 0x1003cef3
mov eax, dword [ebp - 0xa0]
mov dword [ebp - 0x1d8], eax
jmp 0x1003cefc
mov eax, dword [ebp - 0x64]
mov dword [ebp - 0x1d8], eax
mov eax, dword [ebp - 0x1d8]
mov dword [ebp - 0xa0], eax
jmp 0x1003cf0e
and dword [ebp - 0x64], 0
jmp 0x1003ce98
push dword [ebp - 0xa0]
push 0x10007794
call fcn.10048556
pop ecx
pop ecx
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x314]
call fcn.1000b525
mov dword [ebp - 0x14], 2
and dword [ebp - 0x60], 0
jmp 0x1003cf46
mov eax, dword [ebp - 0x14]
inc eax
inc eax
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 0x76
jae 0x1003d543
xor eax, eax
inc eax
imul eax, eax, 0
movzx eax, byte [ebp + eax - 0x11c]
lea eax, [eax + eax + 2]
cmp dword [ebp - 0x14], eax
jne 0x1003d3ac
mov dword [ebp - 0x228], 1
mov dword [ebp - 0x1e0], 0x5a136951
mov dword [ebp - 0x2ac], 0xfffffff9
mov eax, dword [ebp - 0x228]
mov dword [ebp - 0x1e0], eax
lea eax, [ebp - 0x228]
push eax
lea eax, [ebp - 0x2ac]
push eax
lea eax, [ebp - 0x1e0]
push eax
call fcn.1000fbaa
add esp, 0xc
mov eax, dword [ebp - 0x14]
movzx eax, byte [ebp + eax - 0x11c]
inc eax
mov dword [ebp - 0x60], eax
mov eax, dword [ebp - 0x14]
movzx eax, byte [ebp + eax - 0x11c]
mov ecx, dword [ebp - 0x14]
lea eax, [ecx + eax - 1]
mov dword [ebp - 0x14], eax
mov dword [ebp - 0x10], 0
mov dword [ebp - 0x80], 1
mov dword [ebp - 0x1bc], 0x5f27a412
mov dword [ebp - 0x138], 0xedb5
mov dword [ebp - 0x2f0], 0x9aa6f576
cmp dword [ebp - 0x10], 0
jne 0x1003d017
cmp dword [ebp - 0x10], 0
jne 0x1003d017
and dword [ebp - 0x1e8], 0
jmp 0x1003d021
mov dword [ebp - 0x1e8], 1
mov eax, dword [ebp - 0x10]
cmp dword [ebp - 0x10], eax
jg 0x1003d035
mov dword [ebp - 0x250], 1
jmp 0x1003d03c
and dword [ebp - 0x250], 0
mov eax, dword [ebp - 0x10]
imul eax, dword [ebp - 0x250]
add eax, dword [ebp - 0x10]
cmp eax, dword [ebp - 0x10]
jle 0x1003d05a
mov dword [ebp - 0x15c], 1
jmp 0x1003d061
and dword [ebp - 0x15c], 0
mov eax, dword [ebp - 0x10]
mov ecx, dword [ebp - 0x1e8]
neg ecx
sub eax, ecx
sub eax, dword [ebp - 0x10]
imul eax, dword [ebp - 0x15c]
test eax, eax
jne 0x1003d08b
cmp dword [ebp - 0x10], 0
jne 0x1003d08b
and dword [ebp - 0x164], 0
jmp 0x1003d095
mov dword [ebp - 0x164], 1
mov eax, dword [ebp - 0x10]
cmp dword [ebp - 0x164], eax
jge 0x1003d0ac
mov dword [ebp - 0x16c], 1
jmp 0x1003d0b3
and dword [ebp - 0x16c], 0
mov eax, dword [ebp - 0x10]
imul eax, dword [ebp - 0x16c]
cmp eax, dword [ebp - 0x10]
jg 0x1003d0da
mov dword [ebp - 0x2fc], 0
mov eax, dword [ebp - 0x2fc]
mov dword [ebp - 0x80], eax
jmp 0x1003d396
mov dword [ebp - 0x1c4], 0xfffffffc
push 2
lea ecx, [ebp - 0x274]
call fcn.1000b4e9
mov dword [ebp - 4], 7
mov dword [ebp - 0x2f8], 0
mov dword [ebp - 0x30], 0
jmp 0x1003d112
mov eax, dword [ebp - 0x30]
inc eax
mov dword [ebp - 0x30], eax
cmp dword [ebp - 0x30], 2
jge 0x1003d12e
push dword [ebp - 0x30]
lea ecx, [ebp - 0x274]
call fcn.1000b52a
mov dword [eax], 1
jmp 0x1003d10b
mov dword [ebp - 0x30], 0
jmp 0x1003d13e
mov eax, dword [ebp - 0x30]
inc eax
mov dword [ebp - 0x30], eax
cmp dword [ebp - 0x30], 3
jge 0x1003d154
mov eax, dword [ebp - 0x30]
mov dword [ebp + eax*4 - 0x320], 0xa0997736
jmp 0x1003d137
mov byte [ebp - 0x4d], 0
movzx eax, byte [ebp - 0x4d]
test eax, eax
je 0x1003d165
call fcn.1003bc87
push 0
lea ecx, [ebp - 0x274]
call fcn.1000b52a
cmp dword [eax], 1
jg 0x1003d183
mov dword [ebp - 0x174], 1
jmp 0x1003d18a
and dword [ebp - 0x174], 0
cmp dword [ebp - 0x174], 0xbc5f93be
jne 0x1003d1a5
cmp dword [ebp - 0x80], 0
jne 0x1003d1a5
and dword [ebp - 0x148], 0
jmp 0x1003d1af
mov dword [ebp - 0x148], 1
push 7
pop esi
sub esi, dword [ebp - 0x148]
push 0
lea ecx, [ebp - 0x274]
call fcn.1000b52a
imul esi, dword [eax]
mov dword [ebp - 0x2b4], esi
push 4
pop eax
shl eax, 1
mov ecx, dword [ebp - 0x2b4]
mov dword [ebp + eax - 0x320], ecx
mov eax, dword [ebp - 0x138]
mov dword [ebp - 0x38c], eax
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x320]
add eax, dword [ebp - 0x10]
cmp eax, 0xb79a
jl 0x1003d20f
mov dword [ebp - 0x184], 1
jmp 0x1003d216
and dword [ebp - 0x184], 0
mov eax, dword [ebp - 0x10]
cmp dword [ebp - 0x184], eax
jne 0x1003d22d
mov dword [ebp - 0x18c], 1
jmp 0x1003d234
and dword [ebp - 0x18c], 0
push 0
lea ecx, [ebp - 0x274]
call fcn.1000b52a
mov eax, dword [eax]
cmp eax, dword [ebp - 0x18c]
jle 0x1003d257
mov dword [ebp - 0x128], 1
jmp 0x1003d25e
and dword [ebp - 0x128], 0
push 0
lea ecx, [ebp - 0x274]
call fcn.1000b52a
mov ecx, dword [ebp - 0x128]
mov dword [eax], ecx
cmp dword [ebp - 0x128], 0
jne 0x1003d297
push 0
lea ecx, [ebp - 0x274]
call fcn.1000b52a
cmp dword [eax], 0
jne 0x1003d297
and dword [ebp - 0x194], 0
jmp 0x1003d2a1
mov dword [ebp - 0x194], 1
cmp dword [ebp - 0x194], 0
jae 0x1003d2b6
mov dword [ebp - 0x19c], 1
jmp 0x1003d2bd
and dword [ebp - 0x19c], 0
cmp dword [ebp - 0x19c], 0xdc630de2
ja 0x1003d2d5
mov dword [ebp - 0x1a4], 1
jmp 0x1003d2dc
and dword [ebp - 0x1a4], 0
mov eax, dword [ebp - 0x2f8]
cmp dword [ebp - 0x1a4], eax
jne 0x1003d2f6
mov dword [ebp - 0x1ac], 1
jmp 0x1003d2fd
and dword [ebp - 0x1ac], 0
mov eax, dword [ebp - 0x1bc]
cmp dword [ebp - 0x1ac], eax
jne 0x1003d317
mov dword [ebp - 0x1b4], 1
jmp 0x1003d31e
and dword [ebp - 0x1b4], 0
mov eax, dword [ebp - 0x1b4]
add eax, 0x54c3
mov dword [ebp - 0x80], eax
jne 0x1003d340
mov eax, 0x2391
test eax, eax
jne 0x1003d340
and dword [ebp - 0x2bc], 0
jmp 0x1003d34a
mov dword [ebp - 0x2bc], 1
mov eax, dword [ebp - 0x1bc]
mov dword [ebp - 0x1c4], eax
mov eax, dword [ebp - 0x1c4]
mov dword [ebp - 0x364], eax
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x320]
mov dword [ebp - 0x39c], eax
mov eax, dword [ebp - 0x138]
imul eax, dword [ebp - 0x138]
mov dword [ebp - 0x2f0], eax
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x274]
call fcn.1000b525
mov byte [ebp - 0x4e], 0
movzx eax, byte [ebp - 0x4e]
test eax, eax
je 0x1003d3a7
call fcn.1003bc9b
jmp 0x1003cf3e
mov eax, dword [ebp - 0x14]
movzx eax, byte [ebp + eax - 0x11b]
mov ecx, dword [ebp - 0x14]
sub ecx, dword [ebp - 0x60]
movzx ecx, byte [ebp + ecx - 0x11e]
movsx ecx, byte [ebp + ecx - 0x360]
add eax, ecx
mov ecx, dword [ebp - 0x14]
movzx ecx, byte [ebp + ecx - 0x11b]
mov edx, dword [ebp - 0x14]
sub edx, dword [ebp - 0x60]
movzx edx, byte [ebp + edx - 0x11e]
movsx edx, byte [ebp + edx - 0x360]
and ecx, edx
sub eax, ecx
mov ecx, dword [ebp - 0x14]
movzx ecx, byte [ebp + ecx - 0x11b]
mov edx, dword [ebp - 0x14]
sub edx, dword [ebp - 0x60]
movzx edx, byte [ebp + edx - 0x11e]
movsx edx, byte [ebp + edx - 0x360]
and ecx, edx
sub eax, ecx
mov ecx, dword [ebp - 0x14]
movzx ecx, byte [ebp + ecx - 0x11c]
mov byte [ebp + ecx - 0x360], al
mov dword [ebp - 0x1dc], 0xab8c3ad3
mov dword [ebp - 0x3b8], 0xd697e780
mov dword [ebp - 0x2c4], 0xd19c9214
mov dword [ebp - 0x3b4], 0x9e843631
mov dword [ebp - 0x1cc], 0xffffffff
push 2
lea ecx, [ebp - 0x338]
call fcn.1000b4e9
mov dword [ebp - 4], 8
mov dword [ebp - 0x7c], 0xe712c519
lea eax, [ebp - 0x338]
push eax
lea eax, [ebp - 0x3a4]
push eax
call fcn.1003bca8
pop ecx
pop ecx
mov eax, dword [ebp - 0x7c]
inc eax
mov dword [ebp - 0x7c], eax
mov eax, dword [ebp - 0x7c]
mov dword [ebp - 0x370], eax
mov eax, dword [ebp - 0x1cc]
mov dword [ebp - 0x3a0], eax
mov eax, dword [ebp - 0x2c4]
mov dword [ebp - 0x378], eax
mov eax, dword [ebp - 0x1cc]
mov dword [ebp - 0x3a8], eax
mov eax, 0xef87
cmp eax, 0xef6f
jne 0x1003d4d9
mov dword [ebp - 0x1d4], 1
jmp 0x1003d4e0
and dword [ebp - 0x1d4], 0
mov eax, dword [ebp - 0x1dc]
sub eax, dword [ebp - 0x1d4]
imul eax, dword [ebp - 0x1dc]
test eax, eax
jne 0x1003d506
cmp dword [ebp - 0x7c], 0
jne 0x1003d506
and dword [ebp - 0x1e4], 0
jmp 0x1003d510
mov dword [ebp - 0x1e4], 1
push 1
lea ecx, [ebp - 0x338]
call fcn.1000b52a
mov ecx, dword [ebp - 0x1e4]
mov dword [eax], ecx
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x338]
call fcn.1000b525
lea eax, [ebp - 0x60]
push eax
call fcn.10011086
pop ecx
jmp 0x1003cf3e
xor eax, eax
inc eax
imul eax, eax, 0x1a
mov byte [ebp + eax - 0x360], 0
lea eax, [ebp - 0x360]
push eax
lea ecx, [ebp - 0x3f8]
call fcn.10014667
mov dword [ebp - 4], 9
and dword [ebp - 0x94], 0
jmp 0x1003d580
mov eax, dword [ebp - 0x94]
inc eax
mov dword [ebp - 0x94], eax
cmp dword [ebp - 0x94], 0x1b
jae 0x1003d599
mov eax, dword [ebp - 0x94]
mov byte [ebp + eax - 0x360], 0
jmp 0x1003d573
push 0x100076f1
lea ecx, [ebp - 0x3d4]
call fcn.10014667
mov byte [ebp - 4], 0xa
mov dword [ebp - 0x1c], 0x5540d7f8
mov dword [ebp - 0x1c], 0x13
jmp 0x1003d5c4
mov eax, dword [ebp - 0x1c]
dec eax
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 0
jg 0x1003d7c9
mov dword [ebp - 0x130], 0xf3d4
mov dword [ebp - 0x1fc], 0x3c86992f
mov dword [ebp - 0x214], 0x78cca699
mov dword [ebp - 0x2ec], 0x84365721
mov dword [ebp - 0x9c], 0
jmp 0x1003d60f
mov eax, dword [ebp - 0x9c]
inc eax
mov dword [ebp - 0x9c], eax
cmp dword [ebp - 0x9c], 1
jge 0x1003d62b
mov eax, dword [ebp - 0x9c]
mov dword [ebp + eax*4 - 0x2cc], 0x6e85fcb
jmp 0x1003d602
mov eax, dword [ebp - 0x130]
mov dword [ebp - 0x380], eax
cmp dword [ebp - 0x1c], 0
je 0x1003d6b2
cmp dword [ebp - 0x1c], 0xffffffff
je 0x1003d64f
mov dword [ebp - 0x1ec], 1
jmp 0x1003d656
and dword [ebp - 0x1ec], 0
mov eax, dword [ebp - 0x1c]
cmp dword [ebp - 0x1ec], eax
jle 0x1003d66d
mov dword [ebp - 0x1f4], 1
jmp 0x1003d674
and dword [ebp - 0x1f4], 0
mov eax, dword [ebp - 0x1c]
sub eax, dword [ebp - 0x1fc]
jne 0x1003d68e
cmp dword [ebp - 0x1c], 0
jne 0x1003d68e
and dword [ebp - 0x204], 0
jmp 0x1003d698
mov dword [ebp - 0x204], 1
mov eax, dword [ebp - 0x1fc]
cmp dword [ebp - 0x204], eax
jge 0x1003d6b2
mov dword [ebp - 0x20c], 1
jmp 0x1003d6b9
and dword [ebp - 0x20c], 0
mov eax, dword [ebp - 0x214]
cmp dword [ebp - 0x20c], eax
jl 0x1003d6d9
cmp dword [ebp - 0x130], 0
jne 0x1003d6d9
and dword [ebp - 0x2e8], 0
jmp 0x1003d6e3
mov dword [ebp - 0x2e8], 1
mov eax, dword [ebp - 0x130]
mov dword [ebp - 0x3b0], eax
cmp dword [ebp - 0x214], 0x6f9a
jle 0x1003d707
mov dword [ebp - 0x124], 1
jmp 0x1003d70e
and dword [ebp - 0x124], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x124]
mov dword [ebp + eax - 0x2cc], ecx
mov eax, dword [ebp - 0x1c]
cmp dword [ebp - 0x124], eax
jge 0x1003d738
mov dword [ebp - 0x21c], 1
jmp 0x1003d73f
and dword [ebp - 0x21c], 0
mov eax, dword [ebp - 0x1c]
cmp dword [ebp - 0x21c], eax
jle 0x1003d756
mov dword [ebp - 0x224], 1
jmp 0x1003d75d
and dword [ebp - 0x224], 0
cmp dword [ebp - 0x224], 0xf13bcf59
jne 0x1003d775
mov dword [ebp - 0x22c], 1
jmp 0x1003d77c
and dword [ebp - 0x22c], 0
mov eax, dword [ebp - 0x1c]
cmp dword [ebp - 0x22c], eax
jne 0x1003d793
mov dword [ebp - 0x234], 1
jmp 0x1003d79a
and dword [ebp - 0x234], 0
mov eax, dword [ebp - 0x1c]
cmp dword [ebp - 0x234], eax
jne 0x1003d7b1
mov dword [ebp - 0x14c], 1
jmp 0x1003d7b8
and dword [ebp - 0x14c], 0
mov eax, dword [ebp - 0x14c]
mov dword [ebp - 0x2ec], eax
jmp 0x1003d5bd
mov dword [ebp - 0x388], 1
call fcn.1003bcf0
mov byte [ebp - 0x3d], 0
movzx eax, byte [ebp - 0x3d]
test eax, eax
je 0x1003d7f0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_GetSystemTimeAdjustment]
lea ecx, [ebp - 0x3d4]
call fcn.1000b840
cmp eax, dword [ebp + 0xc]
je 0x1003d867
lea eax, [ebp - 0x3f8]
push eax
lea eax, [ebp - 0x294]
push eax
call fcn.1003bd0c
pop ecx
pop ecx
push 1
push dword [ebp - 0x294]
lea eax, [ebp - 0x410]
push eax
lea ecx, [ebp - 0x3f8]
call fcn.10041aea
mov dword [ebp - 0x298], eax
mov eax, dword [ebp - 0x298]
mov dword [ebp - 0x2a0], eax
mov byte [ebp - 4], 0xb
push dword [ebp - 0x2a0]
lea ecx, [ebp - 0x3d4]
call fcn.100146a0
mov byte [ebp - 4], 0xa
lea ecx, [ebp - 0x410]
call fcn.10014696
jmp 0x1003d7f0
lea eax, [ebp - 0x3d4]
push eax
mov ecx, dword [ebp + 8]
call fcn.1003ade3
mov eax, dword [ebp - 0x154]
or eax, 1
mov dword [ebp - 0x154], eax
mov byte [ebp - 4], 9
lea ecx, [ebp - 0x3d4]
call fcn.10014696
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x3f8]
call fcn.10014696
mov eax, dword [ebp + 8]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop esi
mov esp, ebp
pop ebp
ret