Function at 0x10038257
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x100668ec
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x20c
push esi
and dword [ebp - 0xf8], 0
mov dword [ebp - 0x14c], 0x1d99
cmp dword [ebp - 0x14c], 0x111d
jge 0x10038364
and dword [ebp - 0x3c], 0
lea eax, [ebp - 0x3c]
push eax
push 0x1000774c
call fcn.1004e57b
pop ecx
pop ecx
mov eax, dword [ebp - 0x3c]
imul eax, dword [ebp - 0x3c]
mov dword [ebp - 0x158], eax
and dword [ebp - 0x94], 0
mov dword [ebp - 0x2c], 1
jmp 0x100382cf
mov eax, dword [ebp - 0x2c]
inc eax
mov dword [ebp - 0x2c], eax
mov eax, dword [ebp - 0x2c]
cmp eax, dword [ebp - 0x3c]
jge 0x10038352
mov eax, dword [ebp - 0x2c]
mov dword [ebp - 0x34], eax
jmp 0x100382e6
mov eax, dword [ebp - 0x34]
inc eax
mov dword [ebp - 0x34], eax
mov eax, dword [ebp - 0x34]
cmp eax, dword [ebp - 0x3c]
jge 0x1003834d
mov eax, dword [ebp - 0x2c]
imul eax, dword [ebp - 0x2c]
mov ecx, dword [ebp - 0x34]
imul ecx, dword [ebp - 0x34]
add eax, ecx
mov dword [ebp - 0xa8], eax
mov eax, dword [ebp - 0xa8]
cmp eax, dword [ebp - 0x158]
jle 0x10038314
jmp 0x1003834d
mov ecx, dword [ebp - 0xa8]
call fcn.10028acb
cvttsd2si eax, xmm0
mov dword [ebp - 0xe4], eax
mov eax, dword [ebp - 0xe4]
imul eax, dword [ebp - 0xe4]
cmp eax, dword [ebp - 0xa8]
jne 0x1003834b
mov eax, dword [ebp - 0x94]
inc eax
mov dword [ebp - 0x94], eax
jmp 0x100382df
jmp 0x100382c8
push dword [ebp - 0x94]
push 0x10007750
call fcn.1004eb95
pop ecx
pop ecx
mov dword [ebp - 0xec], 0xe42a43d9
mov dword [ebp - 0xa0], 0xffffffff
mov dword [ebp - 0x148], 0x9f58382b
push 3
lea ecx, [ebp - 0x18c]
call fcn.100243cd
and dword [ebp - 4], 0
mov dword [ebp - 0x154], 0xa1405524
mov dword [ebp - 0x1b8], 0xaac8
mov dword [ebp - 0x20], 0
jmp 0x100383b7
mov eax, dword [ebp - 0x20]
inc eax
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 3
jge 0x100383cd
mov eax, dword [ebp - 0x20]
mov dword [ebp + eax*4 - 0x1e0], 0xc48b1647
jmp 0x100383b0
mov dword [ebp - 0x20], 0
jmp 0x100383dd
mov eax, dword [ebp - 0x20]
inc eax
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 3
jge 0x100383f9
push dword [ebp - 0x20]
lea ecx, [ebp - 0x18c]
call fcn.100244e6
mov dword [eax], 0x20f746e3
jmp 0x100383d6
mov eax, dword [ebp - 0xec]
mov dword [ebp - 0xa0], eax
cmp dword [ebp - 0xa0], 0x80d416db
ja 0x1003841d
mov dword [ebp - 0x124], 1
jmp 0x10038424
and dword [ebp - 0x124], 0
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0x1e0], 0xae7b79f6
cmp dword [ebp - 0x148], 0xae7b79f6
jl 0x1003844d
mov dword [ebp - 0x100], 1
jmp 0x10038454
and dword [ebp - 0x100], 0
mov eax, dword [ebp - 0xec]
cmp dword [ebp - 0x100], eax
jne 0x1003846e
mov dword [ebp - 0xbc], 1
jmp 0x10038475
and dword [ebp - 0xbc], 0
mov eax, dword [ebp - 0xbc]
sub eax, dword [ebp - 0xa0]
mov ecx, dword [ebp - 0x124]
lea eax, [ecx + eax - 0x7af5af8b]
cmp eax, 0xa2b82c44
jb 0x100384a1
mov dword [ebp - 0x98], 1
jmp 0x100384a8
and dword [ebp - 0x98], 0
push 1
lea ecx, [ebp - 0x18c]
call fcn.100244e6
mov ecx, dword [ebp - 0x98]
mov dword [eax], ecx
cmp dword [ebp - 0x98], 0
jb 0x100384d2
mov dword [ebp - 0xc4], 1
jmp 0x100384d9
and dword [ebp - 0xc4], 0
cmp dword [ebp - 0xc4], 0x6718e503
je 0x100384f1
mov dword [ebp - 0xf4], 1
jmp 0x100384f8
and dword [ebp - 0xf4], 0
mov eax, dword [ebp - 0xf4]
mov dword [ebp - 0x154], eax
mov byte [ebp - 0x25], 0
movzx eax, byte [ebp - 0x25]
test eax, eax
je 0x1003853d
push 0x134
push 0
push 0x336
push 0x116a
push 0x1021
push 0
push 0x509
push 0x1812
push 0x20c6
call dword [sym.imp.USER32.dll_DrawIconEx]
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x18c]
call fcn.100244a4
mov byte [ebp - 0x90], 0x10
mov byte [ebp - 0x8f], 0x7d
mov byte [ebp - 0x8e], 1
mov byte [ebp - 0x8d], 0x13
mov byte [ebp - 0x8c], 7
mov byte [ebp - 0x8b], 0xa
mov byte [ebp - 0x8a], 0x13
mov byte [ebp - 0x89], 0x1c
mov byte [ebp - 0x88], 0x19
mov byte [ebp - 0x87], 0xe
mov byte [ebp - 0x86], 2
mov byte [ebp - 0x85], 0x19
mov byte [ebp - 0x84], 3
mov byte [ebp - 0x83], 7
mov byte [ebp - 0x82], 0xc
mov byte [ebp - 0x81], 9
mov byte [ebp - 0x80], 9
mov byte [ebp - 0x7f], 7
mov byte [ebp - 0x7e], 0x14
mov byte [ebp - 0x7d], 0x1f
mov byte [ebp - 0x7c], 0xd
mov byte [ebp - 0x7b], 0x1b
mov byte [ebp - 0x7a], 5
mov byte [ebp - 0x79], 8
mov byte [ebp - 0x78], 6
mov byte [ebp - 0x77], 1
mov byte [ebp - 0x76], 8
mov byte [ebp - 0x75], 0xe
mov byte [ebp - 0x74], 0x16
mov byte [ebp - 0x73], 0x1e
mov byte [ebp - 0x72], 0xe
mov byte [ebp - 0x71], 0x18
mov byte [ebp - 0x70], 0x17
mov byte [ebp - 0x6f], 0x17
mov byte [ebp - 0x6e], 0xb
mov byte [ebp - 0x6d], 0xf5
mov byte [ebp - 0x6c], 0xa6
mov byte [ebp - 0x6b], 0x45
mov byte [ebp - 0x6a], 0xe
mov byte [ebp - 0x69], 0x5f
mov byte [ebp - 0x68], 0xeb
mov byte [ebp - 0x67], 0x71
mov byte [ebp - 0x66], 0x8c
mov byte [ebp - 0x65], 0xf3
mov byte [ebp - 0x64], 0x26
mov byte [ebp - 0x63], 0xe0
mov byte [ebp - 0x62], 0xb
mov byte [ebp - 0x61], 0x14
mov byte [ebp - 0x60], 0x18
mov byte [ebp - 0x5f], 0x15
mov byte [ebp - 0x5e], 0x15
mov byte [ebp - 0x5d], 0xf
mov byte [ebp - 0x5c], 0x12
mov byte [ebp - 0x5b], 5
mov byte [ebp - 0x5a], 0xf
mov byte [ebp - 0x59], 3
mov byte [ebp - 0x58], 0x11
mov byte [ebp - 0x57], 2
mov byte [ebp - 0x56], 4
mov byte [ebp - 0x55], 0x17
mov byte [ebp - 0x54], 0xa
mov byte [ebp - 0x53], 0xe
mov byte [ebp - 0x52], 0
mov byte [ebp - 0x51], 0xa
xor eax, eax
inc eax
shl eax, 0
movzx eax, byte [ebp + eax - 0x90]
or eax, 0xc
xor ecx, ecx
inc ecx
shl ecx, 0
movzx ecx, byte [ebp + ecx - 0x90]
and ecx, 0xc
sub eax, ecx
xor ecx, ecx
inc ecx
imul ecx, ecx, 0
movzx ecx, byte [ebp + ecx - 0x90]
mov byte [ebp + ecx - 0x1a8], al
mov dword [ebp - 0x18], 2
and dword [ebp - 0x38], 0
jmp 0x100386ca
mov eax, dword [ebp - 0x18]
inc eax
inc eax
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 0x40
jae 0x1003879f
xor eax, eax
inc eax
imul eax, eax, 0
movzx eax, byte [ebp + eax - 0x90]
lea eax, [eax + eax + 2]
cmp dword [ebp - 0x18], eax
jne 0x10038711
mov eax, dword [ebp - 0x18]
movzx eax, byte [ebp + eax - 0x90]
inc eax
mov dword [ebp - 0x38], eax
mov eax, dword [ebp - 0x18]
movzx eax, byte [ebp + eax - 0x90]
mov ecx, dword [ebp - 0x18]
lea eax, [ecx + eax - 1]
mov dword [ebp - 0x18], eax
jmp 0x100386c2
mov eax, dword [ebp - 0x18]
movzx eax, byte [ebp + eax - 0x8f]
mov ecx, dword [ebp - 0x18]
sub ecx, dword [ebp - 0x38]
movzx ecx, byte [ebp + ecx - 0x92]
movsx ecx, byte [ebp + ecx - 0x1a8]
add eax, ecx
mov ecx, dword [ebp - 0x18]
movzx ecx, byte [ebp + ecx - 0x8f]
mov edx, dword [ebp - 0x18]
sub edx, dword [ebp - 0x38]
movzx edx, byte [ebp + edx - 0x92]
movsx edx, byte [ebp + edx - 0x1a8]
and ecx, edx
sub eax, ecx
mov ecx, dword [ebp - 0x18]
movzx ecx, byte [ebp + ecx - 0x8f]
mov edx, dword [ebp - 0x18]
sub edx, dword [ebp - 0x38]
movzx edx, byte [ebp + edx - 0x92]
movsx edx, byte [ebp + edx - 0x1a8]
and ecx, edx
sub eax, ecx
mov ecx, dword [ebp - 0x18]
movzx ecx, byte [ebp + ecx - 0x90]
mov byte [ebp + ecx - 0x1a8], al
lea eax, [ebp - 0x38]
push eax
call fcn.1000f6b8
pop ecx
jmp 0x100386c2
xor eax, eax
inc eax
imul eax, eax, 0x1a
mov byte [ebp + eax - 0x1a8], 0
mov dword [ebp - 0x174], 0xbac64a68
mov dword [ebp - 0x170], 0xbac64a68
mov dword [ebp - 0x16c], 0xbac64a68
mov dword [ebp - 0x168], 0xbac64a68
lea ecx, [ebp - 0xa9]
call fcn.100244fb
push eax
lea eax, [ebp - 0x164]
push eax
lea eax, [ebp - 0x174]
push eax
lea ecx, [ebp - 0x218]
call fcn.100244fe
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0x120]
call fcn.1002447e
mov dword [ebp - 4], 1
mov dword [ebp - 0x1ac], 0xfffffffc
mov dword [ebp - 0x160], 0
push 0
lea ecx, [ebp - 0x120]
call fcn.100244e6
and dword [eax], 0
jmp 0x1003885b
push 0
lea ecx, [ebp - 0x120]
call fcn.100244e6
mov dword [ebp - 0xcc], eax
mov eax, dword [ebp - 0xcc]
mov eax, dword [eax]
dec eax
mov ecx, dword [ebp - 0xcc]
mov dword [ecx], eax
push 0
lea ecx, [ebp - 0x120]
call fcn.100244e6
cmp dword [eax], 0xffffffe6
je 0x10038b7e
push 3
lea ecx, [ebp - 0x110]
call fcn.100243cd
mov byte [ebp - 4], 2
mov dword [ebp - 0x24], 0x5043c4ab
lea eax, [ebp - 0x110]
push eax
lea eax, [ebp - 0x1c4]
push eax
call fcn.100380ba
pop ecx
pop ecx
mov dword [ebp - 0x24], 2
jmp 0x100388ae
mov eax, dword [ebp - 0x24]
dec eax
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 0
jl 0x10038b6a
mov dword [ebp - 0x138], 0xbd085c9e
mov dword [ebp - 0x134], 0xbd085c9e
mov dword [ebp - 0x130], 0xbd085c9e
mov dword [ebp - 0x12c], 0xbd085c9e
mov dword [ebp - 0x40], 0xc4a87fce
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0x138], 2
jmp 0x10038915
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x138]
dec eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x138], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x138], 0
jl 0x100389e5
push dword [ebp - 0x24]
lea ecx, [ebp - 0x110]
call fcn.100244e6
cmp dword [eax], 0
jne 0x10038969
push 0
lea ecx, [ebp - 0x120]
call fcn.100244e6
mov esi, eax
push dword [ebp - 0x24]
lea ecx, [ebp - 0x110]
call fcn.100244e6
imul eax, dword [eax], 9
cmp dword [esi], eax
jne 0x10038969
and dword [ebp - 0x114], 0
jmp 0x10038973
mov dword [ebp - 0x114], 1
cmp dword [ebp - 0x114], 0xfffffffe
je 0x10038988
mov dword [ebp - 0xd4], 1
jmp 0x1003898f
and dword [ebp - 0xd4], 0
cmp dword [ebp - 0xd4], 0x1f145ba1
jle 0x100389a7
mov dword [ebp - 0xfc], 1
jmp 0x100389ae
and dword [ebp - 0xfc], 0
push 4
pop eax
imul eax, eax, 0
push dword [ebp + eax - 0x138]
lea ecx, [ebp - 0x110]
call fcn.100244e6
mov ecx, dword [ebp - 0xfc]
mov dword [eax], ecx
lea eax, [ebp - 0x24]
push eax
lea eax, [ebp - 0x110]
push eax
call fcn.10038102
pop ecx
pop ecx
jmp 0x100388fa
mov dword [ebp - 0x40], 0
jmp 0x100389f5
mov eax, dword [ebp - 0x40]
inc eax
mov dword [ebp - 0x40], eax
cmp dword [ebp - 0x40], 3
jg 0x10038b65
mov eax, 0x4a93
test eax, eax
je 0x10038a26
push 1
lea ecx, [ebp - 0x110]
call fcn.100244e6
cmp dword [eax], 0
je 0x10038a26
mov dword [ebp - 0xb0], 1
jmp 0x10038a2d
and dword [ebp - 0xb0], 0
push 0
lea ecx, [ebp - 0x120]
call fcn.100244e6
mov esi, eax
push 2
lea ecx, [ebp - 0x120]
call fcn.100244e6
mov ecx, dword [esi]
cmp ecx, dword [eax]
jle 0x10038a5b
mov dword [ebp - 0xdc], 1
jmp 0x10038a62
and dword [ebp - 0xdc], 0
cmp dword [ebp - 0xdc], 0x1d976d9
je 0x10038a7a
mov dword [ebp - 0x128], 1
jmp 0x10038a81
and dword [ebp - 0x128], 0
push 0
lea ecx, [ebp - 0x120]
call fcn.100244e6
mov eax, dword [eax]
cmp eax, dword [ebp - 0x128]
jle 0x10038aa4
mov dword [ebp - 0x104], 1
jmp 0x10038aab
and dword [ebp - 0x104], 0
mov eax, dword [ebp - 0xb0]
cmp eax, dword [ebp - 0x104]
jne 0x10038ac5
mov dword [ebp - 0xb4], 1
jmp 0x10038acc
and dword [ebp - 0xb4], 0
mov eax, dword [ebp - 0x24]
cmp dword [ebp - 0xb4], eax
je 0x10038aec
mov eax, 0xe708
test eax, eax
je 0x10038aec
mov dword [ebp - 0xb8], 1
jmp 0x10038af3
and dword [ebp - 0xb8], 0
mov eax, dword [ebp - 0x40]
mov eax, dword [ebp + eax*4 - 0x138]
cmp eax, dword [ebp - 0xb8]
jle 0x10038b11
mov dword [ebp - 0xc0], 1
jmp 0x10038b18
and dword [ebp - 0xc0], 0
mov eax, dword [ebp - 0xc0]
neg eax
inc eax
cmp eax, 0xac8e
jle 0x10038b34
mov dword [ebp - 0x9c], 1
jmp 0x10038b3b
and dword [ebp - 0x9c], 0
mov eax, dword [ebp - 0x24]
mov ecx, dword [ebp - 0x9c]
mov dword [ebp + eax*4 - 0x134], ecx
push 0
lea ecx, [ebp - 0x110]
call fcn.100244e6
mov ecx, dword [ebp - 0x9c]
mov dword [eax], ecx
jmp 0x100389ee
jmp 0x100388a7
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x110]
call fcn.100244a4
jmp 0x10038837
lea eax, [ebp - 0x160]
push eax
call fcn.1003812f
pop ecx
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x120]
call fcn.100244a4
mov dword [ebp - 0x15c], 0x13e9
cmp dword [ebp - 0x15c], 0xbb9
jge 0x10038d27
mov dword [ebp - 0x1b4], 0x30d47
lea eax, [ebp - 0xa4]
push eax
push 0x10007754
call fcn.1004e57b
pop ecx
pop ecx
and dword [ebp - 0x150], 0
lea eax, [ebp - 0x150]
push eax
push 0x30d47
lea ecx, [ebp - 0x144]
call fcn.10024409
mov dword [ebp - 4], 3
lea eax, [ebp - 0x30]
push eax
lea eax, [ebp - 0xd]
push eax
push 0x10007a78
call fcn.1004e57b
add esp, 0xc
push dword [ebp - 0x30]
lea ecx, [ebp - 0x144]
call fcn.100244e6
and dword [eax], 0
or dword [ebp - 0x50], 0xffffffff
mov dword [ebp - 0x48], 1
mov eax, dword [ebp - 0xa4]
dec eax
mov dword [ebp - 0xa4], eax
je 0x10038d18
lea eax, [ebp - 0x30]
push eax
lea eax, [ebp - 0xd]
push eax
push 0x10007a78
call fcn.1004e57b
add esp, 0xc
movsx eax, byte [ebp - 0xd]
cmp eax, 0x4c
jne 0x10038c77
push dword [ebp - 0x30]
lea ecx, [ebp - 0x144]
call fcn.100244e6
mov ecx, dword [ebp - 0x50]
mov dword [eax], ecx
mov eax, dword [ebp - 0x50]
dec eax
mov dword [ebp - 0x50], eax
jmp 0x10038d13
movsx eax, byte [ebp - 0xd]
cmp eax, 0x52
jne 0x10038c9c
push dword [ebp - 0x30]
lea ecx, [ebp - 0x144]
call fcn.100244e6
mov ecx, dword [ebp - 0x48]
mov dword [eax], ecx
mov eax, dword [ebp - 0x48]
inc eax
mov dword [ebp - 0x48], eax
jmp 0x10038d13
movsx eax, byte [ebp - 0xd]
cmp eax, 0x3f
jne 0x10038d13
push dword [ebp - 0x30]
lea ecx, [ebp - 0x144]
call fcn.100244e6
mov eax, dword [eax]
dec eax
sub eax, dword [ebp - 0x50]
mov dword [ebp - 0xc8], eax
mov esi, dword [ebp - 0x48]
dec esi
push dword [ebp - 0x30]
lea ecx, [ebp - 0x144]
call fcn.100244e6
sub esi, dword [eax]
mov dword [ebp - 0xd0], esi
mov eax, dword [ebp - 0xc8]
cmp eax, dword [ebp - 0xd0]
jge 0x10038cf5
mov eax, dword [ebp - 0xc8]
mov dword [ebp - 0xd8], eax
jmp 0x10038d01
mov eax, dword [ebp - 0xd0]
mov dword [ebp - 0xd8], eax
push dword [ebp - 0xd8]
push 0x10007754
call fcn.1004eb95
pop ecx
pop ecx
jmp 0x10038c27
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x144]
call fcn.10024565
lea eax, [ebp - 0x1a8]
push eax
lea ecx, [ebp - 0x210]
call fcn.1003e341
mov dword [ebp - 4], 4
mov dword [ebp - 0x1c], 0xf94
mov dword [ebp - 0x14], 0x382bdb97
mov dword [ebp - 0x4c], 0
jmp 0x10038d5e
mov eax, dword [ebp - 0x4c]
inc eax
mov dword [ebp - 0x4c], eax
cmp dword [ebp - 0x4c], 3
jge 0x10038d74
mov eax, dword [ebp - 0x4c]
mov dword [ebp + eax*4 - 0x1d4], 0xe075257
jmp 0x10038d57
mov byte [ebp - 0x27], 0
lea eax, [ebp - 0x27]
push eax
call fcn.10038148
pop ecx
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0x1bc], eax
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0x1b0], eax
or eax, 0xffffffff
sub eax, dword [ebp - 0x1c]
jne 0x10038da8
mov dword [ebp - 0xe0], 1
jmp 0x10038daf
and dword [ebp - 0xe0], 0
mov eax, dword [ebp - 0x14]
add eax, dword [ebp - 0xe0]
mov dword [ebp - 0x14], eax
je 0x10038dcd
xor eax, eax
je 0x10038dcd
mov dword [ebp - 0xe8], 1
jmp 0x10038dd4
and dword [ebp - 0xe8], 0
mov eax, dword [ebp - 0x1c]
cmp dword [ebp - 0xe8], eax
jge 0x10038deb
mov dword [ebp - 0xf0], 1
jmp 0x10038df2
and dword [ebp - 0xf0], 0
mov eax, dword [ebp - 0x1c]
add eax, dword [ebp - 0xf0]
je 0x10038eae
push 2
lea ecx, [ebp - 0x180]
call fcn.100243cd
mov byte [ebp - 4], 5
lea eax, [ebp - 0x180]
push eax
lea eax, [ebp - 0x1c0]
push eax
call fcn.1003816b
pop ecx
pop ecx
mov dword [ebp - 0x14], 0x1a
jmp 0x10038e37
mov eax, dword [ebp - 0x14]
dec eax
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 0xfffffffb
jg 0x10038e50
mov byte [ebp - 0x26], 0
movzx eax, byte [ebp - 0x26]
test eax, eax
je 0x10038e4e
call fcn.100381b0
jmp 0x10038e30
mov dword [ebp - 0x1c], 0xd
jmp 0x10038e60
mov eax, dword [ebp - 0x1c]
dec eax
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 0xffffffee
jle 0x10038e9d
mov dword [ebp - 0x14], 1
jmp 0x10038e76
mov eax, dword [ebp - 0x14]
dec eax
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 0
jl 0x10038e93
push dword [ebp - 0x14]
lea ecx, [ebp - 0x180]
call fcn.100244e6
cmp dword [eax], 0
je 0x10038e91
jmp 0x10038e93
jmp 0x10038e6f
cmp dword [ebp - 0x1c], 0
je 0x10038e9b
jmp 0x10038e9d
jmp 0x10038e59
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x180]
call fcn.100244a4
jmp 0x10038ef2
mov dword [ebp - 0x14], 0xfffffffb
jmp 0x10038ebe
mov eax, dword [ebp - 0x14]
dec eax
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 0xffffffe4
jne 0x10038ef2
mov dword [ebp - 0x1c], 2
jmp 0x10038ed4
mov eax, dword [ebp - 0x1c]
dec eax
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 0
jl 0x10038eeb
mov eax, dword [ebp - 0x1c]
cmp dword [ebp + eax*4 - 0x1d4], 0
je 0x10038ee9
jmp 0x10038eeb
jmp 0x10038ecd
call fcn.100381bd
jmp 0x10038eb7
and dword [ebp - 0x44], 0
jmp 0x10038eff
mov eax, dword [ebp - 0x44]
inc eax
mov dword [ebp - 0x44], eax
cmp dword [ebp - 0x44], 0x1b
jae 0x10038f12
mov eax, dword [ebp - 0x44]
mov byte [ebp + eax - 0x1a8], 0
jmp 0x10038ef8
push 0x100076b5
lea ecx, [ebp - 0x1f8]
call fcn.1003e341
mov byte [ebp - 4], 6
lea eax, [ebp - 0x1c8]
push eax
lea eax, [ebp - 0x210]
push eax
lea eax, [ebp + 0xc]
push eax
lea eax, [ebp - 0x1f8]
push eax
call fcn.100381ed
add esp, 0x10
lea eax, [ebp - 0x1f8]
push eax
mov ecx, dword [ebp + 8]
call fcn.1002f324
mov eax, dword [ebp - 0xf8]
or eax, 1
mov dword [ebp - 0xf8], eax
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x1f8]
call fcn.1002f37d
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x210]
call fcn.1002f37d
mov eax, dword [ebp + 8]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop esi
mov esp, ebp
pop ebp
ret