Function at 0x10039b80
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x10067cad
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x2d8
push esi
and dword [ebp - 0x168], 0
mov dword [ebp - 0x5c], 0xf5540d7f
push 1
lea ecx, [ebp - 0x1c0]
call fcn.10026bf9
and dword [ebp - 4], 0
mov dword [ebp - 0x1ac], 0
lea eax, [ebp - 0x1c0]
push eax
lea eax, [ebp - 0x264]
push eax
call fcn.10039464
pop ecx
pop ecx
mov dword [ebp - 0x5c], 0
jmp 0x10039bed
mov eax, dword [ebp - 0x5c]
dec eax
mov dword [ebp - 0x5c], eax
cmp dword [ebp - 0x5c], 0xfffffff0
je 0x10039d4d
mov dword [ebp - 0x24], 0x4b25b3b
mov dword [ebp - 0x154], 0xffffffff
mov dword [ebp - 0x24], 0
jmp 0x10039c18
mov eax, dword [ebp - 0x24]
inc eax
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 0
jg 0x10039d48
mov dword [ebp - 0x124], 0xfffffffb
mov dword [ebp - 0x6c], 0
jmp 0x10039c3c
mov eax, dword [ebp - 0x6c]
inc eax
mov dword [ebp - 0x6c], eax
cmp dword [ebp - 0x6c], 3
jge 0x10039c52
mov eax, dword [ebp - 0x6c]
mov dword [ebp + eax*4 - 0x254], 0xf0f5ebec
jmp 0x10039c35
mov eax, dword [ebp - 0x24]
mov dword [ebp - 0x238], eax
mov eax, dword [ebp - 0x24]
cmp dword [ebp - 0x5c], eax
jl 0x10039c6f
mov dword [ebp - 0x144], 1
jmp 0x10039c76
and dword [ebp - 0x144], 0
mov eax, dword [ebp - 0x124]
cmp eax, dword [ebp - 0x144]
jne 0x10039c90
mov dword [ebp - 0x178], 1
jmp 0x10039c97
and dword [ebp - 0x178], 0
mov eax, dword [ebp - 0x178]
sub eax, dword [ebp - 0x24]
mov dword [ebp - 0x154], eax
mov esi, dword [ebp - 0x154]
push dword [ebp - 0x24]
lea ecx, [ebp - 0x1c0]
call fcn.10026d01
cmp esi, dword [eax]
je 0x10039cca
mov dword [ebp - 0x170], 1
jmp 0x10039cd1
and dword [ebp - 0x170], 0
push 0
lea ecx, [ebp - 0x1c0]
call fcn.10026d01
mov ecx, dword [ebp - 0x170]
sub ecx, dword [eax]
jne 0x10039d03
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0x254], 0
jne 0x10039d03
mov dword [ebp - 0xfc], 1
jmp 0x10039d0a
and dword [ebp - 0xfc], 0
push 4
pop eax
shl eax, 1
mov ecx, dword [ebp - 0xfc]
mov dword [ebp + eax - 0x254], ecx
push dword [ebp - 0x24]
lea ecx, [ebp - 0x1c0]
call fcn.10026d01
mov eax, dword [eax]
sub eax, dword [ebp - 0xfc]
mov dword [ebp - 0x1ac], eax
cmp dword [ebp - 0x124], 0
je 0x10039d43
jmp 0x10039d48
jmp 0x10039c11
jmp 0x10039be6
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x1c0]
call fcn.10026c7d
mov dword [ebp - 0x3c], 0xf7e2799a
mov dword [ebp - 0x1a0], 1
mov dword [ebp - 0x3c], 0
jmp 0x10039d7d
mov eax, dword [ebp - 0x3c]
dec eax
mov dword [ebp - 0x3c], eax
cmp dword [ebp - 0x3c], 0xffffffe9
jge 0x10039e28
push 4
lea ecx, [ebp - 0x200]
call fcn.10026bf9
mov dword [ebp - 4], 1
mov dword [ebp - 0x74], 0x2edc7555
mov dword [ebp - 0x84], 0
jmp 0x10039dbb
mov eax, dword [ebp - 0x84]
inc eax
mov dword [ebp - 0x84], eax
cmp dword [ebp - 0x84], 4
jge 0x10039ddd
push dword [ebp - 0x84]
lea ecx, [ebp - 0x200]
call fcn.10026d01
mov dword [eax], 1
jmp 0x10039dae
mov dword [ebp - 0x74], 3
jmp 0x10039ded
mov eax, dword [ebp - 0x74]
dec eax
mov dword [ebp - 0x74], eax
cmp dword [ebp - 0x74], 0
jl 0x10039dfa
call fcn.100394ac
jmp 0x10039de6
cmp dword [ebp - 0x3c], 0
je 0x10039e14
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x200]
call fcn.10026c7d
jmp 0x10039d76
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x200]
call fcn.10026c7d
jmp 0x10039d76
lea eax, [ebp - 0x1a0]
push eax
lea eax, [ebp - 0x3c]
push eax
call fcn.1003974d
pop ecx
pop ecx
mov byte [ebp - 0xec], 0x12
mov byte [ebp - 0xeb], 0x54
mov byte [ebp - 0xea], 0xa
mov byte [ebp - 0xe9], 0x18
mov byte [ebp - 0xe8], 2
mov byte [ebp - 0xe7], 8
mov byte [ebp - 0xe6], 0
mov byte [ebp - 0xe5], 2
mov byte [ebp - 0xe4], 0xd
mov byte [ebp - 0xe3], 0xf
mov byte [ebp - 0xe2], 0xf
mov byte [ebp - 0xe1], 0x1e
mov byte [ebp - 0xe0], 7
mov byte [ebp - 0xdf], 0x18
mov byte [ebp - 0xde], 8
mov byte [ebp - 0xdd], 1
mov byte [ebp - 0xdc], 0xc
mov byte [ebp - 0xdb], 4
mov byte [ebp - 0xda], 0x17
mov byte [ebp - 0xd9], 0x15
mov byte [ebp - 0xd8], 0x13
mov byte [ebp - 0xd7], 0xc
mov byte [ebp - 0xd6], 6
mov byte [ebp - 0xd5], 0x13
mov byte [ebp - 0xd4], 4
mov byte [ebp - 0xd3], 2
mov byte [ebp - 0xd2], 9
mov byte [ebp - 0xd1], 0xf
mov byte [ebp - 0xd0], 1
mov byte [ebp - 0xcf], 8
mov byte [ebp - 0xce], 0x14
mov byte [ebp - 0xcd], 0x17
mov byte [ebp - 0xcc], 0x16
mov byte [ebp - 0xcb], 2
mov byte [ebp - 0xca], 0xb
mov byte [ebp - 0xc9], 0x1b
mov byte [ebp - 0xc8], 5
mov byte [ebp - 0xc7], 0xa
mov byte [ebp - 0xc6], 0x2a
mov byte [ebp - 0xc5], 0xaf
mov byte [ebp - 0xc4], 3
mov byte [ebp - 0xc3], 0x37
mov byte [ebp - 0xc2], 0x6c
mov byte [ebp - 0xc1], 0x85
mov byte [ebp - 0xc0], 0x4d
mov byte [ebp - 0xbf], 0x35
mov byte [ebp - 0xbe], 0x95
mov byte [ebp - 0xbd], 0x7a
mov byte [ebp - 0xbc], 0x2c
mov byte [ebp - 0xbb], 0xde
mov byte [ebp - 0xba], 0x65
mov byte [ebp - 0xb9], 0xc6
mov byte [ebp - 0xb8], 0x10
mov byte [ebp - 0xb7], 0xbc
mov byte [ebp - 0xb6], 0x6d
mov byte [ebp - 0xb5], 0x83
mov byte [ebp - 0xb4], 0x2c
mov byte [ebp - 0xb3], 0x15
mov byte [ebp - 0xb2], 0x83
mov byte [ebp - 0xb1], 0xf5
mov byte [ebp - 0xb0], 0x85
mov byte [ebp - 0xaf], 9
mov byte [ebp - 0xae], 0x74
mov byte [ebp - 0xad], 0xdc
mov byte [ebp - 0xac], 0xb1
mov byte [ebp - 0xab], 0x22
mov byte [ebp - 0xaa], 0xf7
mov byte [ebp - 0xa9], 0x63
mov byte [ebp - 0xa8], 7
mov byte [ebp - 0xa7], 0x26
mov byte [ebp - 0xa6], 0xb7
mov byte [ebp - 0xa5], 0x51
mov byte [ebp - 0xa4], 0x95
mov byte [ebp - 0xa3], 0x61
mov byte [ebp - 0xa2], 0x88
mov byte [ebp - 0xa1], 0x35
mov byte [ebp - 0xa0], 0x3e
mov byte [ebp - 0x9f], 0x43
mov byte [ebp - 0x9e], 0x24
mov byte [ebp - 0x9d], 0x12
mov byte [ebp - 0x9c], 0xc5
mov byte [ebp - 0x9b], 0x15
mov byte [ebp - 0x9a], 0x10
mov byte [ebp - 0x99], 0x19
mov byte [ebp - 0x98], 0xc
mov byte [ebp - 0x97], 0x18
mov byte [ebp - 0x96], 3
mov byte [ebp - 0x95], 0x10
mov byte [ebp - 0x94], 8
mov byte [ebp - 0x93], 3
mov byte [ebp - 0x92], 0x15
mov byte [ebp - 0x91], 0x11
mov byte [ebp - 0x90], 0x16
mov byte [ebp - 0x8f], 0xe
mov byte [ebp - 0x8e], 0x1d
xor eax, eax
inc eax
shl eax, 0
movzx eax, byte [ebp + eax - 0xec]
or eax, 0x27
xor ecx, ecx
inc ecx
shl ecx, 0
movzx ecx, byte [ebp + ecx - 0xec]
and ecx, 0x27
sub eax, ecx
xor ecx, ecx
inc ecx
imul ecx, ecx, 0
movzx ecx, byte [ebp + ecx - 0xec]
mov byte [ebp + ecx - 0x234], al
mov dword [ebp - 0x10], 2
and dword [ebp - 0x54], 0
jmp 0x1003a121
mov eax, dword [ebp - 0x10]
inc eax
inc eax
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], 0x5f
jae 0x1003a1f0
xor eax, eax
inc eax
imul eax, eax, 0
movzx eax, byte [ebp + eax - 0xec]
lea eax, [eax + eax + 2]
cmp dword [ebp - 0x10], eax
jne 0x1003a168
mov eax, dword [ebp - 0x10]
movzx eax, byte [ebp + eax - 0xec]
inc eax
mov dword [ebp - 0x54], eax
mov eax, dword [ebp - 0x10]
movzx eax, byte [ebp + eax - 0xec]
mov ecx, dword [ebp - 0x10]
lea eax, [ecx + eax - 1]
mov dword [ebp - 0x10], eax
jmp 0x1003a119
mov eax, dword [ebp - 0x10]
movzx eax, byte [ebp + eax - 0xeb]
mov ecx, dword [ebp - 0x10]
sub ecx, dword [ebp - 0x54]
movzx ecx, byte [ebp + ecx - 0xee]
movsx ecx, byte [ebp + ecx - 0x234]
add eax, ecx
mov ecx, dword [ebp - 0x10]
movzx ecx, byte [ebp + ecx - 0xeb]
mov edx, dword [ebp - 0x10]
sub edx, dword [ebp - 0x54]
movzx edx, byte [ebp + edx - 0xee]
movsx edx, byte [ebp + edx - 0x234]
and ecx, edx
sub eax, ecx
mov ecx, dword [ebp - 0x10]
movzx ecx, byte [ebp + ecx - 0xeb]
mov edx, dword [ebp - 0x10]
sub edx, dword [ebp - 0x54]
movzx edx, byte [ebp + edx - 0xee]
movsx edx, byte [ebp + edx - 0x234]
and ecx, edx
sub eax, ecx
mov ecx, dword [ebp - 0x10]
movzx ecx, byte [ebp + ecx - 0xec]
mov byte [ebp + ecx - 0x234], al
and dword [ebp - 0x54], 0
jmp 0x1003a119
xor eax, eax
inc eax
imul eax, eax, 0x1a
mov byte [ebp + eax - 0x234], 0
mov dword [ebp - 0x8c], 1
mov dword [ebp - 0x8c], 0xffffffed
jmp 0x1003a221
mov eax, dword [ebp - 0x8c]
inc eax
mov dword [ebp - 0x8c], eax
cmp dword [ebp - 0x8c], 0xf
je 0x1003a242
mov byte [ebp - 0x35], 0
movzx eax, byte [ebp - 0x35]
test eax, eax
je 0x1003a23b
call fcn.10039780
call fcn.10039794
jmp 0x1003a214
lea eax, [ebp - 0x234]
push eax
lea ecx, [ebp - 0x2dc]
call fcn.1003e600
mov dword [ebp - 4], 2
and dword [ebp - 0x88], 0
jmp 0x1003a271
mov eax, dword [ebp - 0x88]
inc eax
mov dword [ebp - 0x88], eax
cmp dword [ebp - 0x88], 0x1b
jae 0x1003a28a
mov eax, dword [ebp - 0x88]
mov byte [ebp + eax - 0x234], 0
jmp 0x1003a264
push 0x100077cd
lea ecx, [ebp - 0x2c4]
call fcn.1003e600
mov byte [ebp - 4], 3
mov dword [ebp - 0x1c], 6
mov dword [ebp - 0x40], 0xc15d0d65
mov dword [ebp - 0x20], 0xffffffff
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0x258], eax
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0x40], eax
cmp dword [ebp - 0x40], 0
jne 0x1003a2da
cmp dword [ebp - 0x1c], 9
jne 0x1003a2da
mov dword [ebp - 0x17c], 1
jmp 0x1003a2e1
and dword [ebp - 0x17c], 0
mov eax, dword [ebp - 0x1c]
imul eax, dword [ebp - 0x17c]
cmp eax, dword [ebp - 0x1c]
jne 0x1003a2fc
mov dword [ebp - 0x12c], 1
jmp 0x1003a303
and dword [ebp - 0x12c], 0
mov eax, dword [ebp - 0x1c]
cmp eax, dword [ebp - 0x12c]
jle 0x1003a31a
mov dword [ebp - 0x15c], 1
jmp 0x1003a321
and dword [ebp - 0x15c], 0
mov eax, dword [ebp - 0x1c]
cmp dword [ebp - 0x15c], eax
jle 0x1003a338
mov dword [ebp - 0x134], 1
jmp 0x1003a33f
and dword [ebp - 0x134], 0
mov eax, dword [ebp - 0x1c]
imul eax, dword [ebp - 0x134]
mov dword [ebp - 0x20], eax
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x26c], eax
cmp dword [ebp - 0x20], 0xeda8ed40
je 0x1003a4f5
push 1
lea ecx, [ebp - 0x198]
call fcn.10026bf9
mov byte [ebp - 4], 4
mov dword [ebp - 0x2c], 0x423cb8e0
mov dword [ebp - 0x14c], 0xff84
mov dword [ebp - 0x64], 0
jmp 0x1003a394
mov eax, dword [ebp - 0x64]
inc eax
mov dword [ebp - 0x64], eax
cmp dword [ebp - 0x64], 1
jge 0x1003a3ad
push dword [ebp - 0x64]
lea ecx, [ebp - 0x198]
call fcn.10026d01
and dword [eax], 0
jmp 0x1003a38d
push 0
lea ecx, [ebp - 0x198]
call fcn.10026d01
cmp dword [eax], 0
jne 0x1003a46c
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0x270], eax
cmp dword [ebp - 0x2c], 0xffff
jae 0x1003a3e1
mov dword [ebp - 0x174], 1
jmp 0x1003a3e8
and dword [ebp - 0x174], 0
mov eax, dword [ebp - 0x2c]
cmp dword [ebp - 0x174], eax
jl 0x1003a3ff
mov dword [ebp - 0x1a8], 1
jmp 0x1003a406
and dword [ebp - 0x1a8], 0
push 0
lea ecx, [ebp - 0x198]
call fcn.10026d01
mov eax, dword [ebp - 0x40]
imul eax, dword [ebp - 0x2c]
test eax, eax
jne 0x1003a433
mov eax, 0x3c9e
test eax, eax
jne 0x1003a433
mov dword [ebp - 0x13c], 1
jmp 0x1003a43a
and dword [ebp - 0x13c], 0
mov esi, dword [ebp - 0x13c]
neg esi
imul esi, dword [ebp - 0x14c]
push 0
lea ecx, [ebp - 0x198]
call fcn.10026d01
add esi, dword [eax]
add esi, dword [ebp - 0x20]
je 0x1003a463
cmp dword [ebp - 0x2c], 0
jne 0x1003a46c
and dword [ebp - 0x164], 0
jmp 0x1003a476
mov dword [ebp - 0x164], 1
push 0
lea ecx, [ebp - 0x198]
call fcn.10026d01
mov ecx, dword [ebp - 0x164]
cmp ecx, dword [eax]
jge 0x1003a499
mov dword [ebp - 0x118], 1
jmp 0x1003a4a0
and dword [ebp - 0x118], 0
mov eax, dword [ebp - 0x2c]
cmp dword [ebp - 0x118], eax
jl 0x1003a4b7
mov dword [ebp - 0x18c], 1
jmp 0x1003a4be
and dword [ebp - 0x18c], 0
mov eax, dword [ebp - 0x18c]
mov dword [ebp - 0x2c], eax
cmp dword [ebp - 0x2c], 0
je 0x1003a4de
mov eax, dword [ebp - 0x14c]
mov dword [ebp - 0x40], eax
mov eax, dword [ebp - 0x40]
mov dword [ebp - 0x20], eax
jmp 0x1003a4e4
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x40], eax
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x198]
call fcn.10026c7d
jmp 0x1003a506
mov byte [ebp - 0x37], 0
movzx eax, byte [ebp - 0x37]
test eax, eax
je 0x1003a506
call fcn.100397b9
mov dword [ebp - 0x20], 0x14
jmp 0x1003a516
mov eax, dword [ebp - 0x20]
dec eax
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 0xffffffe2
je 0x1003a597
push 1
lea ecx, [ebp - 0x20c]
call fcn.10026bf9
mov byte [ebp - 4], 5
mov dword [ebp - 0x80], 0
jmp 0x1003a53d
mov eax, dword [ebp - 0x80]
inc eax
mov dword [ebp - 0x80], eax
cmp dword [ebp - 0x80], 1
jge 0x1003a559
push dword [ebp - 0x80]
lea ecx, [ebp - 0x20c]
call fcn.10026d01
mov dword [eax], 0xf9aa2aaf
jmp 0x1003a536
mov dword [ebp - 0x1c], 0
jmp 0x1003a569
mov eax, dword [ebp - 0x1c]
inc eax
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 1
jge 0x1003a583
lea eax, [ebp - 0x1c]
push eax
lea eax, [ebp - 0x20c]
push eax
call fcn.100397cb
pop ecx
pop ecx
jmp 0x1003a562
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x20c]
call fcn.10026c7d
jmp 0x1003a50f
mov dword [ebp - 0x1b0], 0x1cbd
cmp dword [ebp - 0x1b0], 0x10bf
jge 0x1003a70a
lea eax, [ebp - 0x16c]
push eax
mov ecx, 0x10658730
call fcn.100266b5
lea ecx, [ebp - 0x2ac]
call fcn.100265eb
mov byte [ebp - 4], 6
lea edx, [ebp - 0x2ac]
mov ecx, 0x10658730
call fcn.1002b3df
lea ecx, [ebp - 0x1d0]
call fcn.10026bec
mov byte [ebp - 4], 7
mov dword [ebp - 0x4c], 1
jmp 0x1003a600
mov eax, dword [ebp - 0x4c]
inc eax
mov dword [ebp - 0x4c], eax
mov eax, dword [ebp - 0x4c]
cmp eax, dword [ebp - 0x16c]
jg 0x1003a62a
mov eax, dword [ebp - 0x16c]
cdq
idiv dword [ebp - 0x4c]
test edx, edx
jne 0x1003a628
lea eax, [ebp - 0x4c]
push eax
lea ecx, [ebp - 0x1d0]
call fcn.10026d10
jmp 0x1003a5f9
lea eax, [ebp - 0x2ac]
push eax
lea ecx, [ebp - 0x288]
call fcn.100265c5
mov byte [ebp - 4], 8
and dword [ebp - 0x50], 0
jmp 0x1003a64d
mov eax, dword [ebp - 0x50]
inc eax
mov dword [ebp - 0x50], eax
lea ecx, [ebp - 0x1d0]
call fcn.10026cf8
cmp dword [ebp - 0x50], eax
jae 0x1003a6c1
and dword [ebp - 0x48], 0
jmp 0x1003a66a
mov eax, dword [ebp - 0x48]
inc eax
mov dword [ebp - 0x48], eax
push dword [ebp - 0x50]
lea ecx, [ebp - 0x1d0]
call fcn.10026d01
mov eax, dword [eax]
cdq
sub eax, edx
sar eax, 1
cmp dword [ebp - 0x48], eax
jge 0x1003a6bf
push dword [ebp - 0x50]
lea ecx, [ebp - 0x1d0]
call fcn.10026d01
mov eax, dword [eax]
dec eax
sub eax, dword [ebp - 0x48]
push eax
lea ecx, [ebp - 0x288]
call fcn.10026658
mov esi, eax
push dword [ebp - 0x48]
lea ecx, [ebp - 0x288]
call fcn.10026658
mov edx, esi
mov ecx, eax
call fcn.1002ba80
jmp 0x1003a663
jmp 0x1003a646
push fcn.1002afd5
lea edx, [ebp - 0x288]
mov ecx, 0x10658678
call fcn.1002b46e
mov ecx, eax
call fcn.10026ace
mov byte [ebp - 4], 7
lea ecx, [ebp - 0x288]
call fcn.1002664e
mov byte [ebp - 4], 6
lea ecx, [ebp - 0x1d0]
call fcn.10026c7d
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x2ac]
call fcn.1002664e
push 2
lea ecx, [ebp - 0x218]
call fcn.10026bf9
mov byte [ebp - 4], 9
mov dword [ebp - 0x60], 0x44401d1b
mov dword [ebp - 0x58], 0
mov dword [ebp - 0x1f4], 0x1320f2d6
mov dword [ebp - 0x1f0], 0x1320f2d6
mov dword [ebp - 0x1ec], 0x1320f2d6
mov dword [ebp - 0x1e8], 0x1320f2d6
lea ecx, [ebp - 0x109]
call fcn.10026d6b
push eax
lea eax, [ebp - 0x1e4]
push eax
lea eax, [ebp - 0x1f4]
push eax
lea ecx, [ebp - 0x2e4]
call fcn.10026d6e
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0x244]
call fcn.10026c57
mov byte [ebp - 4], 0xa
lea eax, [ebp - 0x218]
push eax
lea eax, [ebp - 0x25c]
push eax
call fcn.100397f0
pop ecx
pop ecx
lea eax, [ebp - 0x60]
push eax
lea eax, [ebp - 0x58]
push eax
lea eax, [ebp - 0x218]
push eax
call fcn.10039838
add esp, 0xc
mov dword [ebp - 0x58], 0
jmp 0x1003a7c6
mov eax, dword [ebp - 0x58]
inc eax
mov dword [ebp - 0x58], eax
cmp dword [ebp - 0x58], 1
jg 0x1003a818
mov dword [ebp - 0x60], 0
jmp 0x1003a7dc
mov eax, dword [ebp - 0x60]
inc eax
mov dword [ebp - 0x60], eax
cmp dword [ebp - 0x60], 1
jg 0x1003a802
call fcn.1003996c
mov byte [ebp - 0x36], 0
movzx eax, byte [ebp - 0x36]
test eax, eax
je 0x1003a800
push 0
push 0xebc
call dword [sym.imp.KERNEL32.dll_GetCPInfo]
jmp 0x1003a7d5
push 3
lea ecx, [ebp - 0x244]
call fcn.10026d01
cmp dword [eax], 0
je 0x1003a816
jmp 0x1003a818
jmp 0x1003a7bf
mov byte [ebp - 4], 9
lea ecx, [ebp - 0x244]
call fcn.10026c7d
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x218]
call fcn.10026c7d
lea eax, [ebp - 0x268]
push eax
lea eax, [ebp - 0x2dc]
push eax
lea eax, [ebp + 0xc]
push eax
lea eax, [ebp - 0x2c4]
push eax
call fcn.1003998d
add esp, 0x10
push 4
lea ecx, [ebp - 0x188]
call fcn.10026bf9
mov byte [ebp - 4], 0xb
mov dword [ebp - 0x34], 0xdada439b
mov dword [ebp - 0x19c], 0xd0f4f230
mov dword [ebp - 0x100], 1
mov dword [ebp - 0x1b4], 0x526954eb
mov dword [ebp - 0x1c4], 0xaf8d98c6
lea eax, [ebp - 0x188]
push eax
lea eax, [ebp - 0x260]
push eax
call fcn.10039a0b
pop ecx
pop ecx
mov dword [ebp - 0x34], 3
jmp 0x1003a8bc
mov eax, dword [ebp - 0x34]
dec eax
mov dword [ebp - 0x34], eax
cmp dword [ebp - 0x34], 0
jl 0x1003ada5
mov dword [ebp - 0x14], 0x4cdb8faa
mov dword [ebp - 0x104], 0x627e80a
mov dword [ebp - 0x148], 7
mov dword [ebp - 0x1dc], 0x14fd
cmp dword [ebp - 0x1dc], 0xf39
jge 0x1003ab3a
lea eax, [ebp - 0x114]
push eax
push 0x10007864
call fcn.1004df4b
pop ecx
pop ecx
mov eax, dword [ebp - 0x114]
mov dword [ebp - 0x1a4], eax
mov eax, dword [ebp - 0x114]
dec eax
mov dword [ebp - 0x114], eax
cmp dword [ebp - 0x1a4], 0
je 0x1003ab3a
lea eax, [ebp - 0x30]
push eax
push 0x10007864
call fcn.1004df4b
pop ecx
pop ecx
lea ecx, [ebp - 0xf8]
call fcn.10026bec
mov byte [ebp - 4], 0xc
mov eax, dword [ebp - 0x30]
mov dword [ebp - 0x1d8], eax
mov dword [ebp - 0x28], 2
jmp 0x1003a96c
mov eax, dword [ebp - 0x28]
inc eax
mov dword [ebp - 0x28], eax
mov eax, dword [ebp - 0x28]
imul eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x1d8]
add ecx, 0xa
cmp eax, ecx
jg 0x1003a9b5
mov eax, dword [ebp - 0x30]
cdq
idiv dword [ebp - 0x28]
test edx, edx
je 0x1003a98d
jmp 0x1003a965
mov eax, dword [ebp - 0x30]
cdq
idiv dword [ebp - 0x28]
test edx, edx
jne 0x1003a9b3
lea eax, [ebp - 0x28]
push eax
lea ecx, [ebp - 0xf8]
call fcn.10026e29
mov eax, dword [ebp - 0x30]
cdq
idiv dword [ebp - 0x28]
mov dword [ebp - 0x30], eax
jmp 0x1003a98d
jmp 0x1003a965
cmp dword [ebp - 0x30], 1
jle 0x1003a9ca
lea eax, [ebp - 0x30]
push eax
lea ecx, [ebp - 0xf8]
call fcn.10026e29
lea ecx, [ebp - 0xf8]
call fcn.10026cf8
cmp eax, 3
jb 0x1003a9e6
mov dword [ebp - 0x11c], 1
jmp 0x1003a9ed
and dword [ebp - 0x11c], 0
mov al, byte [ebp - 0x11c]
mov byte [ebp - 0x15], al
mov dword [ebp - 0x108], 1
mov dword [ebp - 0x7c], 1
mov dword [ebp - 0x44], 1
movzx eax, byte [ebp - 0x15]
test eax, eax
je 0x1003aaf8
push 0
lea ecx, [ebp - 0xf8]
call fcn.10026d01
mov eax, dword [eax]
mov dword [ebp - 0x108], eax
mov dword [ebp - 0x110], 2
push 0
lea ecx, [ebp - 0xf8]
call fcn.10026d01
mov esi, eax
push 1
lea ecx, [ebp - 0xf8]
call fcn.10026d01
mov ecx, dword [esi]
cmp ecx, dword [eax]
jne 0x1003aa8e
push 1
lea ecx, [ebp - 0xf8]
call fcn.10026d01
mov esi, eax
push 2
lea ecx, [ebp - 0xf8]
call fcn.10026d01
mov ecx, dword [esi]
imul ecx, dword [eax]
mov dword [ebp - 0x7c], ecx
mov eax, dword [ebp - 0x110]
inc eax
mov dword [ebp - 0x110], eax
jmp 0x1003aaa0
push 1
lea ecx, [ebp - 0xf8]
call fcn.10026d01
mov eax, dword [eax]
mov dword [ebp - 0x7c], eax
mov eax, dword [ebp - 0x110]
mov dword [ebp - 0x78], eax
jmp 0x1003aab2
mov eax, dword [ebp - 0x78]
inc eax
mov dword [ebp - 0x78], eax
lea ecx, [ebp - 0xf8]
call fcn.10026cf8
cmp dword [ebp - 0x78], eax
jae 0x1003aadb
push dword [ebp - 0x78]
lea ecx, [ebp - 0xf8]
call fcn.10026d01
mov ecx, dword [ebp - 0x44]
imul ecx, dword [eax]
mov dword [ebp - 0x44], ecx
jmp 0x1003aaab
cmp dword [ebp - 0x44], 1
jle 0x1003aaf4
mov eax, dword [ebp - 0x44]
cmp eax, dword [ebp - 0x108]
je 0x1003aaf4
mov eax, dword [ebp - 0x44]
cmp eax, dword [ebp - 0x7c]
jne 0x1003aaf8
mov byte [ebp - 0x15], 0
movzx eax, byte [ebp - 0x15]
test eax, eax
je 0x1003ab1b
push dword [ebp - 0x44]
push dword [ebp - 0x7c]
push dword [ebp - 0x108]
push 0x10007c0c
call fcn.1004e3a9
add esp, 0x10
jmp 0x1003ab26
push 0x10007880
call fcn.1004e792
pop ecx
mov byte [ebp - 4], 0xb
lea ecx, [ebp - 0xf8]
call fcn.10026c7d
jmp 0x1003a90e
mov dword [ebp - 0x1d4], 0xff51885a
mov dword [ebp - 0x68], 0
jmp 0x1003ab54
mov eax, dword [ebp - 0x68]
inc eax
mov dword [ebp - 0x68], eax
cmp dword [ebp - 0x68], 1
jge 0x1003ab6a
mov eax, dword [ebp - 0x68]
mov dword [ebp + eax*4 - 0x1e0], 0xbd65bdf5
jmp 0x1003ab4d
mov dword [ebp - 0x14], 0
jmp 0x1003ab7a
mov eax, dword [ebp - 0x14]
inc eax
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 3
jg 0x1003acd9
mov dword [ebp - 0x70], 0
jmp 0x1003ab94
mov eax, dword [ebp - 0x70]
inc eax
mov dword [ebp - 0x70], eax
cmp dword [ebp - 0x70], 3
jge 0x1003abaa
mov eax, dword [ebp - 0x70]
mov dword [ebp + eax*4 - 0x294], 0x4ca77904
jmp 0x1003ab8d
push dword [ebp - 0x14]
lea ecx, [ebp - 0x188]
call fcn.10026d01
mov eax, dword [ebp - 0x14]
mov dword [ebp - 0x248], eax
push 2
lea ecx, [ebp - 0x188]
call fcn.10026d01
cmp dword [eax], 0x383c67ee
je 0x1003abe2
mov dword [ebp - 0x120], 1
jmp 0x1003abe9
and dword [ebp - 0x120], 0
mov eax, dword [ebp - 0x14]
cmp eax, dword [ebp - 0x120]
jl 0x1003ac00
mov dword [ebp - 0x128], 1
jmp 0x1003ac07
and dword [ebp - 0x128], 0
mov eax, dword [ebp - 0x128]
sub eax, 0xaa32
cmp eax, dword [ebp - 0x19c]
je 0x1003ac26
mov dword [ebp - 0x130], 1
jmp 0x1003ac2d
and dword [ebp - 0x130], 0
push dword [ebp - 0x14]
lea ecx, [ebp - 0x188]
call fcn.10026d01
mov ecx, dword [ebp - 0x130]
imul ecx, dword [eax]
cmp ecx, 0xffffffff
jbe 0x1003ac55
mov dword [ebp - 0x138], 1
jmp 0x1003ac5c
and dword [ebp - 0x138], 0
push dword [ebp - 0x34]
lea ecx, [ebp - 0x188]
call fcn.10026d01
mov eax, dword [eax]
cmp eax, dword [ebp - 0x138]
jge 0x1003ac86
mov eax, 0x7af2
test eax, eax
jne 0x1003ac86
and dword [ebp - 0x140], 0
jmp 0x1003ac90
mov dword [ebp - 0x140], 1
mov eax, dword [ebp - 0x140]
mov dword [ebp - 0x100], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x100]
mov dword [ebp + eax - 0x294], ecx
lea eax, [ebp - 0x34]
push eax
lea eax, [ebp - 0x188]
push eax
lea eax, [ebp - 0x104]
push eax
lea eax, [ebp - 0x14]
push eax
lea eax, [ebp - 0x148]
push eax
call fcn.10039a50
add esp, 0x14
jmp 0x1003ab73
mov dword [ebp - 0x14], 0
jmp 0x1003ace9
mov eax, dword [ebp - 0x14]
inc eax
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 3
jg 0x1003ada0
lea eax, [ebp - 0x100]
push eax
lea eax, [ebp - 0x34]
push eax
lea eax, [ebp - 0x1d4]
push eax
lea eax, [ebp - 0x148]
push eax
lea eax, [ebp - 0x1b4]
push eax
lea eax, [ebp - 0x14]
push eax
lea eax, [ebp - 0x188]
push eax
lea eax, [ebp - 0x104]
push eax
call fcn.10039aef
add esp, 0x20
mov eax, dword [ebp - 0x104]
cmp dword [ebp - 0x14], eax
je 0x1003ad44
mov dword [ebp - 0x150], 1
jmp 0x1003ad4b
and dword [ebp - 0x150], 0
cmp dword [ebp - 0x150], 1
jg 0x1003ad60
mov dword [ebp - 0x158], 1
jmp 0x1003ad67
and dword [ebp - 0x158], 0
cmp dword [ebp - 0x158], 0
jb 0x1003ad7c
mov dword [ebp - 0x160], 1
jmp 0x1003ad83
and dword [ebp - 0x160], 0
mov eax, dword [ebp - 0x160]
sub eax, 0xa26b
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x1e0], eax
jmp 0x1003ace2
jmp 0x1003a8b5
lea eax, [ebp - 0x1c4]
push eax
call fcn.10039b32
pop ecx
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x188]
call fcn.10026c7d
lea eax, [ebp - 0x2c4]
push eax
mov ecx, dword [ebp + 8]
call fcn.10031207
mov eax, dword [ebp - 0x168]
or eax, 1
mov dword [ebp - 0x168], eax
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x2c4]
call fcn.10031260
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x2dc]
call fcn.10031260
mov eax, dword [ebp + 8]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop esi
mov esp, ebp
pop ebp
ret