Function at 0x10038c42
Capabilities:
Check for software breakpoints
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x1006b520
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x32c
push esi
and dword [ebp - 0x104], 0
mov dword [ebp - 0x2c4], 0xffffffff
push 1
lea ecx, [ebp - 0x2b8]
call fcn.1000d3e3
and dword [ebp - 4], 0
mov dword [ebp - 0x2d8], 0x43046b6e
mov dword [ebp - 0x1d0], 1
mov dword [ebp - 0x20], 0
jmp 0x10038ca7
mov eax, dword [ebp - 0x20]
inc eax
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 3
jge 0x10038cbd
mov eax, dword [ebp - 0x20]
mov dword [ebp + eax*4 - 0x338], 0xffffffff
jmp 0x10038ca0
mov dword [ebp - 0x20], 0
jmp 0x10038ccd
mov eax, dword [ebp - 0x20]
inc eax
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 1
jge 0x10038ce9
push dword [ebp - 0x20]
lea ecx, [ebp - 0x2b8]
call fcn.1000d4c0
mov dword [eax], 0x49febb67
jmp 0x10038cc6
mov byte [ebp - 0x3f], 0
lea eax, [ebp - 0x3f]
push eax
call fcn.10038937
pop ecx
lea eax, [ebp - 0x1d0]
push eax
call fcn.1002c2fd
pop ecx
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x2b8]
call fcn.1000d445
mov byte [ebp - 0xd8], 7
mov byte [ebp - 0xd7], 0x75
mov byte [ebp - 0xd6], 0xe
mov byte [ebp - 0xd5], 7
mov byte [ebp - 0xd4], 0x14
mov byte [ebp - 0xd3], 0x1a
mov byte [ebp - 0xd2], 0x16
mov byte [ebp - 0xd1], 2
mov byte [ebp - 0xd0], 9
mov byte [ebp - 0xcf], 0x1d
mov byte [ebp - 0xce], 0x15
mov byte [ebp - 0xcd], 0x1c
mov byte [ebp - 0xcc], 6
mov byte [ebp - 0xcb], 0x11
mov byte [ebp - 0xca], 4
mov byte [ebp - 0xc9], 2
mov byte [ebp - 0xc8], 0x2d
mov byte [ebp - 0xc7], 0xa1
mov byte [ebp - 0xc6], 0xc0
mov byte [ebp - 0xc5], 0xe1
mov byte [ebp - 0xc4], 0xad
mov byte [ebp - 0xc3], 0xf2
mov byte [ebp - 0xc2], 0x53
mov byte [ebp - 0xc1], 0x6c
mov byte [ebp - 0xc0], 0x46
mov byte [ebp - 0xbf], 0x7e
mov byte [ebp - 0xbe], 0xaf
mov byte [ebp - 0xbd], 0xd4
mov byte [ebp - 0xbc], 0x33
mov byte [ebp - 0xbb], 0xe
mov byte [ebp - 0xba], 0xb4
mov byte [ebp - 0xb9], 2
mov byte [ebp - 0xb8], 0x53
mov byte [ebp - 0xb7], 0x73
mov byte [ebp - 0xb6], 0x5b
mov byte [ebp - 0xb5], 0x8c
mov byte [ebp - 0xb4], 0xb8
mov byte [ebp - 0xb3], 0x40
mov byte [ebp - 0xb2], 0xdc
mov byte [ebp - 0xb1], 0x38
mov byte [ebp - 0xb0], 0x71
mov byte [ebp - 0xaf], 0x76
mov byte [ebp - 0xae], 0x6f
mov byte [ebp - 0xad], 0xeb
mov byte [ebp - 0xac], 0xfd
mov byte [ebp - 0xab], 0x33
mov byte [ebp - 0xaa], 0x1d
mov byte [ebp - 0xa9], 0xa6
mov byte [ebp - 0xa8], 0xbe
mov byte [ebp - 0xa7], 0xf6
mov byte [ebp - 0xa6], 0x33
mov byte [ebp - 0xa5], 0x4d
mov byte [ebp - 0xa4], 0x59
mov byte [ebp - 0xa3], 0x8f
mov byte [ebp - 0xa2], 0xdc
mov byte [ebp - 0xa1], 0x6b
mov byte [ebp - 0xa0], 0xd3
mov byte [ebp - 0x9f], 0xca
mov byte [ebp - 0x9e], 0x54
mov byte [ebp - 0x9d], 0x25
mov byte [ebp - 0x9c], 0x72
mov byte [ebp - 0x9b], 0x6b
mov byte [ebp - 0x9a], 0x11
mov byte [ebp - 0x99], 0x17
mov byte [ebp - 0x98], 8
mov byte [ebp - 0x97], 0x1b
mov byte [ebp - 0x96], 5
mov byte [ebp - 0x95], 0xf
mov byte [ebp - 0x94], 2
mov byte [ebp - 0x93], 5
mov byte [ebp - 0x92], 0x10
mov byte [ebp - 0x91], 0x12
mov byte [ebp - 0x90], 0
mov byte [ebp - 0x8f], 0x10
mov byte [ebp - 0x8e], 0xb
mov byte [ebp - 0x8d], 0xd
mov byte [ebp - 0x8c], 1
mov byte [ebp - 0x8b], 0xe
mov byte [ebp - 0x8a], 0xa
mov byte [ebp - 0x89], 9
mov byte [ebp - 0x88], 0x18
mov byte [ebp - 0x87], 0x12
mov byte [ebp - 0x86], 0xf
mov byte [ebp - 0x85], 9
mov byte [ebp - 0x84], 0x17
mov byte [ebp - 0x83], 8
mov byte [ebp - 0x82], 0xc
mov byte [ebp - 0x81], 0x15
mov byte [ebp - 0x80], 0x19
mov byte [ebp - 0x7f], 0x17
mov byte [ebp - 0x7e], 3
mov byte [ebp - 0x7d], 0x1e
mov byte [ebp - 0x7c], 0xd
mov byte [ebp - 0x7b], 0xa
mov byte [ebp - 0x7a], 0x12
mov byte [ebp - 0x79], 0x1d
mov byte [ebp - 0x78], 0x13
mov byte [ebp - 0x77], 7
xor eax, eax
inc eax
shl eax, 0
movzx eax, byte [ebp + eax - 0xd8]
or eax, 0x1d
xor ecx, ecx
inc ecx
shl ecx, 0
movzx ecx, byte [ebp + ecx - 0xd8]
and ecx, 0x1d
sub eax, ecx
xor ecx, ecx
inc ecx
imul ecx, ecx, 0
movzx ecx, byte [ebp + ecx - 0xd8]
mov byte [ebp + ecx - 0x2a8], al
mov dword [ebp - 0x10], 2
and dword [ebp - 0x48], 0
jmp 0x10038ff1
mov eax, dword [ebp - 0x10]
inc eax
inc eax
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], 0x62
jae 0x100396ba
mov dword [ebp - 0x5c], 0xffffffff
push 2
lea ecx, [ebp - 0x234]
call fcn.1000d3e3
mov dword [ebp - 4], 1
mov dword [ebp - 0x100], 0xeb9e9d60
mov dword [ebp - 0x21c], 0x26a7609f
mov dword [ebp - 0x1f8], 0xfffffffa
mov dword [ebp - 0x28], 0
jmp 0x10039044
mov eax, dword [ebp - 0x28]
inc eax
mov dword [ebp - 0x28], eax
cmp dword [ebp - 0x28], 2
jge 0x1003905a
mov eax, dword [ebp - 0x28]
mov dword [ebp + eax*4 - 0x258], 0x63e8e1b8
jmp 0x1003903d
mov dword [ebp - 0x28], 0
jmp 0x1003906a
mov eax, dword [ebp - 0x28]
inc eax
mov dword [ebp - 0x28], eax
cmp dword [ebp - 0x28], 2
jge 0x10039083
push dword [ebp - 0x28]
lea ecx, [ebp - 0x234]
call fcn.1000d4c0
and dword [eax], 0
jmp 0x10039063
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0x258], 0xfffffff6
mov eax, dword [ebp - 0x5c]
mov dword [ebp - 0x2c8], eax
push 1
lea ecx, [ebp - 0x234]
call fcn.1000d4c0
cmp dword [eax], 0
je 0x100390cd
push 1
lea ecx, [ebp - 0x234]
call fcn.1000d4c0
cmp dword [eax], 0
je 0x100390cd
mov dword [ebp - 0x124], 1
jmp 0x100390d4
and dword [ebp - 0x124], 0
mov eax, dword [ebp - 0x5c]
mov dword [ebp - 0x110], eax
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x110]
mov dword [ebp + eax - 0x258], ecx
mov eax, dword [ebp - 0x124]
neg eax
cmp dword [ebp - 0x110], eax
jg 0x1003910c
mov dword [ebp - 0x1b4], 1
jmp 0x10039113
and dword [ebp - 0x1b4], 0
mov eax, dword [ebp - 0x1b4]
mov dword [ebp - 0x100], eax
mov esi, dword [ebp - 0x100]
push 1
lea ecx, [ebp - 0x234]
call fcn.1000d4c0
cmp esi, dword [eax]
jne 0x10039142
mov dword [ebp - 0x1bc], 1
jmp 0x10039149
and dword [ebp - 0x1bc], 0
mov eax, dword [ebp - 0x5c]
push 0xfffffffffffffff7
pop ecx
sub ecx, dword [ebp - 0x1bc]
imul ecx, dword [ebp - 0x5c]
imul eax, ecx
cmp eax, 0x48f4
jle 0x1003916f
mov dword [ebp - 0x108], 1
jmp 0x10039176
and dword [ebp - 0x108], 0
mov eax, dword [ebp - 0x21c]
cmp dword [ebp - 0x108], eax
jge 0x10039190
mov dword [ebp - 0x1c4], 1
jmp 0x10039197
and dword [ebp - 0x1c4], 0
mov eax, dword [ebp - 0x1c4]
mov dword [ebp - 0x1f8], eax
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x234]
call fcn.1000d445
xor eax, eax
inc eax
imul eax, eax, 0
movzx eax, byte [ebp + eax - 0xd8]
lea eax, [eax + eax + 2]
cmp dword [ebp - 0x10], eax
jne 0x100391f2
mov eax, dword [ebp - 0x10]
movzx eax, byte [ebp + eax - 0xd8]
inc eax
mov dword [ebp - 0x48], eax
mov eax, dword [ebp - 0x10]
movzx eax, byte [ebp + eax - 0xd8]
mov ecx, dword [ebp - 0x10]
lea eax, [ecx + eax - 1]
mov dword [ebp - 0x10], eax
jmp 0x10038fe9
mov dword [ebp - 0x1dc], 0x26fe
cmp dword [ebp - 0x1dc], 0xe40
mov dword [ebp - 0x34], 0xfffffffa
mov dword [ebp - 0x28c], 0x979c
mov dword [ebp - 0x288], 0x979c
mov dword [ebp - 0x284], 0x979c
mov dword [ebp - 0x280], 0x979c
mov dword [ebp - 0x128], 0
mov dword [ebp - 0x1e4], 0x7223b16a
mov dword [ebp - 0x74], 0
jmp 0x10039259
mov eax, dword [ebp - 0x74]
inc eax
mov dword [ebp - 0x74], eax
cmp dword [ebp - 0x74], 1
jge 0x1003926f
mov eax, dword [ebp - 0x74]
mov dword [ebp + eax*4 - 0x210], 0x82c4475e
jmp 0x10039252
mov eax, 0x3d9532bb
test eax, eax
je 0x1003935d
cmp dword [ebp - 0x34], 0xffffffff
jle 0x1003928e
mov dword [ebp - 0x1cc], 1
jmp 0x10039295
and dword [ebp - 0x1cc], 0
mov eax, dword [ebp - 0x34]
cmp dword [ebp - 0x1cc], eax
je 0x100392ac
mov dword [ebp - 0x170], 1
jmp 0x100392b3
and dword [ebp - 0x170], 0
imul eax, dword [ebp - 0x170], 0x2ba2
cmp eax, dword [ebp - 0x34]
jl 0x100392ce
mov dword [ebp - 0x118], 1
jmp 0x100392d5
and dword [ebp - 0x118], 0
mov eax, dword [ebp - 0x34]
sub eax, dword [ebp - 0x118]
mov dword [ebp - 0x1a0], eax
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x1a0]
mov dword [ebp + eax - 0x28c], ecx
mov eax, dword [ebp - 0x1a0]
imul eax, dword [ebp - 0x34]
mov dword [ebp - 0x120], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x120]
mov dword [ebp + eax - 0x210], ecx
imul eax, dword [ebp - 0x120], 0xd416
cmp dword [ebp - 0x34], eax
jle 0x10039335
mov dword [ebp - 0x178], 1
jmp 0x1003933c
and dword [ebp - 0x178], 0
mov eax, dword [ebp - 0x178]
mov dword [ebp - 0x128], eax
cmp dword [ebp - 0x128], 0
jne 0x1003935d
mov dword [ebp - 0x1b8], 1
jmp 0x10039364
and dword [ebp - 0x1b8], 0
mov eax, dword [ebp - 0x1b8]
sub eax, 4
cmp eax, dword [ebp - 0x34]
jne 0x1003937e
mov dword [ebp - 0x130], 1
jmp 0x10039385
and dword [ebp - 0x130], 0
mov eax, dword [ebp - 0x34]
cmp dword [ebp - 0x130], eax
je 0x1003939c
mov dword [ebp - 0x180], 1
jmp 0x100393a3
and dword [ebp - 0x180], 0
mov eax, dword [ebp - 0x180]
mov dword [ebp - 0x1e4], eax
call fcn.1003895e
mov eax, dword [ebp - 0x10]
movzx eax, byte [ebp + eax - 0xd7]
mov ecx, dword [ebp - 0x10]
sub ecx, dword [ebp - 0x48]
movzx ecx, byte [ebp + ecx - 0xda]
movsx ecx, byte [ebp + ecx - 0x2a8]
add eax, ecx
mov ecx, dword [ebp - 0x10]
movzx ecx, byte [ebp + ecx - 0xd7]
mov edx, dword [ebp - 0x10]
sub edx, dword [ebp - 0x48]
movzx edx, byte [ebp + edx - 0xda]
movsx edx, byte [ebp + edx - 0x2a8]
and ecx, edx
sub eax, ecx
mov ecx, dword [ebp - 0x10]
movzx ecx, byte [ebp + ecx - 0xd7]
mov edx, dword [ebp - 0x10]
sub edx, dword [ebp - 0x48]
movzx edx, byte [ebp + edx - 0xda]
movsx edx, byte [ebp + edx - 0x2a8]
and ecx, edx
sub eax, ecx
mov ecx, dword [ebp - 0x10]
movzx ecx, byte [ebp + ecx - 0xd8]
mov byte [ebp + ecx - 0x2a8], al
mov dword [ebp - 0x24], 0xa5eafb5d
mov dword [ebp - 0x218], 0x276ac116
mov dword [ebp - 0x54], 0
jmp 0x10039454
mov eax, dword [ebp - 0x54]
inc eax
mov dword [ebp - 0x54], eax
cmp dword [ebp - 0x54], 1
jge 0x10039467
mov eax, dword [ebp - 0x54]
mov dword [ebp + eax*4 - 0x30], 2
jmp 0x1003944d
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0x30], 0
jmp 0x1003948c
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x30]
inc eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x30], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x30], 7
je 0x100395f5
mov dword [ebp - 0x140], 0xfffffffe
mov dword [ebp - 0x70], 0xd2466e9f
mov dword [ebp - 0x68], 0
jmp 0x100394be
mov eax, dword [ebp - 0x68]
inc eax
mov dword [ebp - 0x68], eax
cmp dword [ebp - 0x68], 4
jge 0x100394d4
mov eax, dword [ebp - 0x68]
mov dword [ebp + eax*4 - 0x27c], 0xe662
jmp 0x100394b7
mov eax, 0x4f2887cf
test eax, eax
je 0x100394f6
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x30], 0
je 0x100394f6
mov dword [ebp - 0x148], 1
jmp 0x100394fd
and dword [ebp - 0x148], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x27c]
mov dword [ebp - 0x2e8], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x30]
sub eax, 0xfffc
push 4
pop ecx
shl ecx, 0
cmp eax, dword [ebp + ecx - 0x27c]
jle 0x1003953a
mov dword [ebp - 0x138], 1
jmp 0x10039541
and dword [ebp - 0x138], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x27c]
cmp dword [ebp - 0x138], eax
jl 0x10039562
mov dword [ebp - 0x1a8], 1
jmp 0x10039569
and dword [ebp - 0x1a8], 0
mov eax, dword [ebp - 0x1a8]
mov dword [ebp - 0x140], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x30]
cmp dword [ebp - 0x140], eax
jle 0x10039593
mov dword [ebp - 0x188], 1
jmp 0x1003959a
and dword [ebp - 0x188], 0
mov eax, dword [ebp - 0x188]
mov dword [ebp - 0x70], eax
cmp dword [ebp - 0x70], 0
jne 0x100395b4
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x30], 0
mov eax, dword [ebp - 0x70]
cmp dword [ebp - 0x148], eax
jl 0x100395d1
cmp dword [ebp - 0x70], 0
je 0x100395d1
mov dword [ebp - 0x1c8], 1
jmp 0x100395d8
and dword [ebp - 0x1c8], 0
mov eax, dword [ebp - 0x1c8]
mov dword [ebp - 0x24], eax
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x27c]
mov dword [ebp - 0x24], eax
jmp 0x10039477
mov eax, 0x6d64bda9
test eax, eax
je 0x10039610
cmp dword [ebp - 0x24], 0
je 0x10039610
mov dword [ebp - 0x150], 1
jmp 0x10039617
and dword [ebp - 0x150], 0
imul eax, dword [ebp - 0x24], 0x6cc7
sub eax, 0xc6f0c43
imul eax, eax, 0x122
cmp eax, dword [ebp - 0x24]
jg 0x1003963a
mov dword [ebp - 0x190], 1
jmp 0x10039641
and dword [ebp - 0x190], 0
mov eax, dword [ebp - 0x150]
cmp eax, dword [ebp - 0x190]
jg 0x1003965b
mov dword [ebp - 0x158], 1
jmp 0x10039662
and dword [ebp - 0x158], 0
mov eax, dword [ebp - 0x24]
mov dword [ebp - 0x1b0], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x1b0]
mov dword [ebp + eax - 0x30], ecx
mov eax, dword [ebp - 0x158]
sub eax, dword [ebp - 0x24]
cmp dword [ebp - 0x1b0], eax
jne 0x10039698
mov dword [ebp - 0x160], 1
jmp 0x1003969f
and dword [ebp - 0x160], 0
mov eax, dword [ebp - 0x160]
mov dword [ebp - 0x24], eax
mov eax, dword [ebp - 0x24]
mov dword [ebp - 0x218], eax
and dword [ebp - 0x48], 0
jmp 0x10038fe9
xor eax, eax
inc eax
imul eax, eax, 0x1a
mov byte [ebp + eax - 0x2a8], 0
lea eax, [ebp - 0x2a8]
push eax
lea ecx, [ebp - 0x324]
call fcn.1003e3c2
mov dword [ebp - 4], 2
and dword [ebp - 0x64], 0
jmp 0x100396ee
mov eax, dword [ebp - 0x64]
inc eax
mov dword [ebp - 0x64], eax
cmp dword [ebp - 0x64], 0x1b
jae 0x10039701
mov eax, dword [ebp - 0x64]
mov byte [ebp + eax - 0x2a8], 0
jmp 0x100396e7
mov dword [ebp - 0x2c], 0x6ce125d
mov dword [ebp - 0x2d0], 0xaa8e55a4
mov dword [ebp - 0x2ac], 0xfffffffd
mov dword [ebp - 0x2cc], 0xe5809974
mov dword [ebp - 0x2d4], 1
cmp dword [ebp - 0x2c], 0
je 0x10039800
mov dword [ebp - 0x1ec], 0x250db856
mov dword [ebp - 0x1f4], 0xfdb69689
mov dword [ebp - 0x204], 0xfffffffb
mov byte [ebp - 0x41], 0
movzx eax, byte [ebp - 0x41]
test eax, eax
je 0x10039769
call fcn.10038989
mov eax, dword [ebp - 0x2c]
mov dword [ebp - 0x2dc], eax
cmp dword [ebp - 0x2c], 0xcd
jle 0x10039787
mov dword [ebp - 0x198], 1
jmp 0x1003978e
and dword [ebp - 0x198], 0
mov eax, dword [ebp - 0x1ec]
cmp eax, dword [ebp - 0x198]
jl 0x100397a8
mov dword [ebp - 0x168], 1
jmp 0x100397af
and dword [ebp - 0x168], 0
mov eax, dword [ebp - 0x2c]
cmp dword [ebp - 0x168], eax
jge 0x100397c6
mov dword [ebp - 0x1c0], 1
jmp 0x100397cd
and dword [ebp - 0x1c0], 0
cmp dword [ebp - 0x1c0], 0xaa810d21
ja 0x100397eb
cmp dword [ebp - 0x2c], 0
je 0x100397eb
mov dword [ebp - 0x200], 1
jmp 0x100397f2
and dword [ebp - 0x200], 0
mov eax, dword [ebp - 0x1f4]
mov dword [ebp - 0x204], eax
jmp 0x10039839
mov dword [ebp - 0x10c], 0xfffffffb
mov dword [ebp - 0x2c], 0xb
jmp 0x1003981a
mov eax, dword [ebp - 0x2c]
inc eax
mov dword [ebp - 0x2c], eax
cmp dword [ebp - 0x2c], 0x12
jle 0x10039839
mov dword [ebp - 0x2e4], 0x8b4dfecb
mov eax, dword [ebp - 0x10c]
inc eax
mov dword [ebp - 0x10c], eax
jmp 0x10039813
push 0x1000b0d9
lea ecx, [ebp - 0x300]
call fcn.1003e3c2
mov byte [ebp - 4], 3
mov dword [ebp - 0x14], 0xffffffff
mov dword [ebp - 0x3c], 0xd2cc9105
mov dword [ebp - 0x50], 0x6b719d87
mov dword [ebp - 0x38], 0xb9338886
call fcn.10038996
cmp dword [ebp - 0x14], 1
jne 0x10039880
mov dword [ebp - 0x144], 1
jmp 0x10039887
and dword [ebp - 0x144], 0
mov eax, dword [ebp - 0x14]
mov dword [ebp - 0x2e0], eax
mov eax, dword [ebp - 0x14]
add eax, dword [ebp - 0x14]
cmp dword [ebp - 0x14], 0xfffffffb
je 0x100398a8
mov dword [ebp - 0x114], 1
jmp 0x100398af
and dword [ebp - 0x114], 0
mov eax, dword [ebp - 0x14]
cmp dword [ebp - 0x114], eax
jge 0x100398c6
mov dword [ebp - 0x11c], 1
jmp 0x100398cd
and dword [ebp - 0x11c], 0
mov eax, dword [ebp - 0x14]
mov ecx, dword [ebp - 0x11c]
lea eax, [ecx + eax - 0xa5bc]
mov dword [ebp - 0x3c], eax
cmp dword [ebp - 0x3c], 1
jne 0x100398f2
mov dword [ebp - 0xf4], 1
jmp 0x100398f9
and dword [ebp - 0xf4], 0
mov eax, dword [ebp - 0x14]
cmp dword [ebp - 0xf4], eax
jge 0x10039910
mov dword [ebp - 0x12c], 1
jmp 0x10039917
and dword [ebp - 0x12c], 0
mov eax, dword [ebp - 0x12c]
mov dword [ebp - 0x50], eax
cmp dword [ebp - 0x50], 0xa6d0811
jle 0x10039935
mov dword [ebp - 0x134], 1
jmp 0x1003993c
and dword [ebp - 0x134], 0
cmp dword [ebp - 0x134], 1
jge 0x10039957
cmp dword [ebp - 0x50], 0
je 0x10039957
mov dword [ebp - 0x13c], 1
jmp 0x1003995e
and dword [ebp - 0x13c], 0
mov eax, dword [ebp - 0x13c]
mov dword [ebp - 0x38], eax
mov eax, dword [ebp - 0x14]
add eax, dword [ebp - 0x38]
cmp eax, dword [ebp - 0x14]
jle 0x1003997e
mov dword [ebp - 0x14c], 1
jmp 0x10039985
and dword [ebp - 0x14c], 0
mov eax, dword [ebp - 0x144]
cmp eax, dword [ebp - 0x14c]
jne 0x1003999f
mov dword [ebp - 0x154], 1
jmp 0x100399a6
and dword [ebp - 0x154], 0
mov eax, dword [ebp - 0x14]
cmp dword [ebp - 0x154], eax
je 0x10039c30
mov dword [ebp - 0x26c], 9
mov dword [ebp - 0x268], 9
mov dword [ebp - 0x264], 9
mov dword [ebp - 0x260], 9
lea ecx, [ebp - 0xed]
call fcn.1000d4cf
push eax
lea eax, [ebp - 0x25c]
push eax
lea eax, [ebp - 0x26c]
push eax
lea ecx, [ebp - 0x32c]
call fcn.1000d4d2
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0x228]
call fcn.1000d41f
mov byte [ebp - 4], 4
mov dword [ebp - 0x14], 0
jmp 0x10039a26
mov eax, dword [ebp - 0x14]
inc eax
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 0
je 0x10039c0b
mov dword [ebp - 0x1fc], 0x3268dd2a
push 1
lea ecx, [ebp - 0x250]
call fcn.1000d3e3
mov byte [ebp - 4], 5
mov dword [ebp - 0xec], 0x18394d25
mov dword [ebp - 0x244], 2
mov dword [ebp - 0x240], 2
mov dword [ebp - 0x23c], 2
mov dword [ebp - 0x238], 2
mov dword [ebp - 0x6c], 0
jmp 0x10039a8d
mov eax, dword [ebp - 0x6c]
inc eax
mov dword [ebp - 0x6c], eax
cmp dword [ebp - 0x6c], 1
jge 0x10039aa9
push dword [ebp - 0x6c]
lea ecx, [ebp - 0x250]
call fcn.1000d4c0
mov dword [eax], 0xfffffffe
jmp 0x10039a86
cmp dword [ebp - 0x1fc], 0
je 0x10039ac4
cmp dword [ebp - 0x38], 0
je 0x10039ac4
mov dword [ebp - 0x15c], 1
jmp 0x10039acb
and dword [ebp - 0x15c], 0
cmp dword [ebp - 0x15c], 0xa26c
jge 0x10039ae3
mov dword [ebp - 0x20c], 1
jmp 0x10039aea
and dword [ebp - 0x20c], 0
push 0
lea ecx, [ebp - 0x250]
call fcn.1000d4c0
mov dword [eax], 0x8c6dcff2
mov dword [ebp - 0xec], 0x8c6dcff2
cmp dword [ebp - 0xec], 0xffffffff
jb 0x10039b24
cmp dword [ebp - 0x50], 0
je 0x10039b24
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x244], 0
mov eax, dword [ebp - 0xec]
mov dword [ebp - 0x2bc], eax
push 3
pop eax
test eax, eax
jne 0x10039b55
push 1
lea ecx, [ebp - 0x228]
call fcn.1000d4c0
cmp dword [eax], 0
je 0x10039b55
mov dword [ebp - 0x164], 1
jmp 0x10039b5c
and dword [ebp - 0x164], 0
push 3
lea ecx, [ebp - 0x228]
call fcn.1000d4c0
mov ecx, dword [ebp - 0x164]
cmp ecx, dword [eax]
jge 0x10039b7f
mov dword [ebp - 0x16c], 1
jmp 0x10039b86
and dword [ebp - 0x16c], 0
push 0
lea ecx, [ebp - 0x228]
call fcn.1000d4c0
mov ecx, dword [ebp - 0x16c]
imul ecx, dword [eax]
push 4
pop eax
imul eax, eax, 0
cmp ecx, dword [ebp + eax - 0x244]
jne 0x10039bb7
mov dword [ebp - 0x174], 1
jmp 0x10039bbe
and dword [ebp - 0x174], 0
push 0
lea ecx, [ebp - 0x228]
call fcn.1000d4c0
mov ecx, dword [ebp - 0x174]
mov dword [eax], ecx
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x244], 0
je 0x10039bf7
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x250]
call fcn.1000d445
jmp 0x10039a1f
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x250]
call fcn.1000d445
jmp 0x10039a1f
mov byte [ebp - 0x3e], 0
movzx eax, byte [ebp - 0x3e]
test eax, eax
je 0x10039c1c
call fcn.100389c3
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x228]
call fcn.1000d445
jmp 0x10039cc6
mov dword [ebp - 0x208], 1
mov dword [ebp - 0x4c], 0
mov dword [ebp - 0x214], 0xfffffffe
lea eax, [ebp - 0x214]
push eax
lea eax, [ebp - 0x50]
push eax
lea eax, [ebp - 0x3c]
push eax
lea eax, [ebp - 0x208]
push eax
lea eax, [ebp - 0x4c]
push eax
call fcn.100389d4
add esp, 0x14
mov dword [ebp - 0x3c], 0
jmp 0x10039c7d
mov eax, dword [ebp - 0x3c]
dec eax
mov dword [ebp - 0x3c], eax
cmp dword [ebp - 0x3c], 0xffffffe8
je 0x10039cc6
mov dword [ebp - 0x38], 0
jmp 0x10039c93
mov eax, dword [ebp - 0x38]
dec eax
mov dword [ebp - 0x38], eax
cmp dword [ebp - 0x38], 0xfffffff8
je 0x10039cc4
mov dword [ebp - 0x4c], 0x12
jmp 0x10039ca9
mov eax, dword [ebp - 0x4c]
inc eax
mov dword [ebp - 0x4c], eax
cmp dword [ebp - 0x4c], 0x13
jl 0x10039cc2
mov byte [ebp - 0x3d], 0
movzx eax, byte [ebp - 0x3d]
test eax, eax
je 0x10039cc0
call fcn.10038a7e
jmp 0x10039ca2
jmp 0x10039c8c
jmp 0x10039c76
mov dword [ebp - 0x1c], 0x6e5c7a00
mov dword [ebp - 0x1a4], 0
mov dword [ebp - 0x1e8], 0x29a275ff
mov dword [ebp - 0x1d4], 0x2014
cmp dword [ebp - 0x1d4], 0x4f8
jge 0x10039e4e
lea eax, [ebp - 0xe4]
push eax
push 0x1000b220
call fcn.100527da
pop ecx
pop ecx
mov eax, dword [ebp - 0xe4]
mov dword [ebp - 0x1d8], eax
mov eax, dword [ebp - 0xe4]
dec eax
mov dword [ebp - 0xe4], eax
cmp dword [ebp - 0x1d8], 0
je 0x10039e4e
lea eax, [ebp - 0xdc]
push eax
push 0x1000b220
call fcn.100527da
pop ecx
pop ecx
and dword [ebp - 0x58], 0
and dword [ebp - 0xe0], 0
mov eax, dword [ebp - 0xdc]
mov dword [ebp - 0x1e0], eax
mov eax, dword [ebp - 0xdc]
dec eax
mov dword [ebp - 0xdc], eax
cmp dword [ebp - 0x1e0], 0
je 0x10039de2
lea eax, [ebp - 0x184]
push eax
push 0x1000b220
call fcn.100527da
pop ecx
pop ecx
cmp dword [ebp - 0x184], 1
jne 0x10039d9c
mov dword [ebp - 0x17c], 1
jmp 0x10039da3
and dword [ebp - 0x17c], 0
mov eax, dword [ebp - 0x58]
add eax, dword [ebp - 0x17c]
mov dword [ebp - 0x58], eax
cmp dword [ebp - 0x184], 2
jne 0x10039dc4
mov dword [ebp - 0x18c], 1
jmp 0x10039dcb
and dword [ebp - 0x18c], 0
mov eax, dword [ebp - 0xe0]
add eax, dword [ebp - 0x18c]
mov dword [ebp - 0xe0], eax
jmp 0x10039d52
mov byte [ebp - 0x15], 1
mov eax, dword [ebp - 0x58]
and eax, 0x80000001
jns 0x10039df5
dec eax
or eax, 0xfffffffe
inc eax
test eax, eax
je 0x10039dff
mov byte [ebp - 0x15], 0
jmp 0x10039e1f
cmp dword [ebp - 0x58], 0
jne 0x10039e1f
mov eax, dword [ebp - 0xe0]
and eax, 0x80000001
jns 0x10039e17
dec eax
or eax, 0xfffffffe
inc eax
test eax, eax
je 0x10039e1f
mov byte [ebp - 0x15], 0
movzx eax, byte [ebp - 0x15]
test eax, eax
je 0x10039e33
mov dword [ebp - 0x194], 0x1000b2ac
jmp 0x10039e3d
mov dword [ebp - 0x194], 0x1000b2b0
push dword [ebp - 0x194]
call fcn.10052df3
pop ecx
jmp 0x10039d0e
mov dword [ebp - 0x60], 0
jmp 0x10039e5e
mov eax, dword [ebp - 0x60]
inc eax
mov dword [ebp - 0x60], eax
cmp dword [ebp - 0x60], 3
jge 0x10039e74
mov eax, dword [ebp - 0x60]
mov dword [ebp + eax*4 - 0x30c], 0
jmp 0x10039e57
cmp dword [ebp - 0x1c], 0
jne 0x10039e89
cmp dword [ebp - 0x1c], 0
jne 0x10039e89
and dword [ebp - 0x19c], 0
jmp 0x10039e93
mov dword [ebp - 0x19c], 1
mov eax, dword [ebp - 0x1c]
imul eax, dword [ebp - 0x19c]
test eax, eax
je 0x10039ea7
cmp dword [ebp - 0x1c], 0
jne 0x10039eb5
or eax, 0xffffffff
jne 0x10039eb5
and dword [ebp - 0xe8], 0
jmp 0x10039ebf
mov dword [ebp - 0xe8], 1
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0xe8]
mov dword [ebp + eax - 0x30c], ecx
mov eax, dword [ebp - 0xe8]
mov dword [ebp - 0x1a4], eax
mov eax, dword [ebp - 0x1c]
cmp dword [ebp - 0x1a4], eax
jg 0x10039ef3
cmp dword [ebp - 0x1c], 0
je 0x10039ef3
cmp dword [ebp - 0x1c], 0
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0x2c0], eax
mov eax, 0x4aa0d722
dec eax
cmp eax, 0x7d7c
jg 0x10039f15
mov dword [ebp - 0x1ac], 1
jmp 0x10039f1c
and dword [ebp - 0x1ac], 0
or eax, 0xffffffff
sub eax, dword [ebp - 0x1c]
sub eax, 0xfffc
cmp eax, dword [ebp - 0x1ac]
jg 0x10039f3b
mov dword [ebp - 0xf8], 1
jmp 0x10039f42
and dword [ebp - 0xf8], 0
mov eax, dword [ebp - 0x1c]
cmp dword [ebp - 0xf8], eax
jg 0x10039f59
mov dword [ebp - 0xfc], 1
jmp 0x10039f60
and dword [ebp - 0xfc], 0
mov eax, dword [ebp - 0xfc]
mov dword [ebp - 0x1e8], eax
mov byte [ebp - 0x40], 0
movzx eax, byte [ebp - 0x40]
test eax, eax
je 0x10039f7d
call fcn.10038a90
lea ecx, [ebp - 0x300]
call fcn.1000d735
cmp eax, dword [ebp + 0xc]
je 0x10039fe2
call fcn.10053759
mov esi, eax
lea ecx, [ebp - 0x324]
call fcn.1000d735
mov ecx, eax
mov eax, esi
xor edx, edx
div ecx
mov dword [ebp - 0x1f0], edx
call fcn.10038aab
lea eax, [ebp - 0x300]
push eax
push 0
push 0x40da
lea eax, [ebp - 0x324]
push eax
push 0x6f8c
lea eax, [ebp - 0x1f0]
push eax
push 0x1ab2
call fcn.1003a092
add esp, 0x1c
jmp 0x10039f7d
lea eax, [ebp - 0x300]
push eax
mov ecx, dword [ebp + 8]
call fcn.1003e3f1
mov eax, dword [ebp - 0x104]
or eax, 1
mov dword [ebp - 0x104], eax
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x300]
call fcn.1003e44a
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x324]
call fcn.1003e44a
mov eax, dword [ebp + 8]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop esi
mov esp, ebp
pop ebp
ret