Function at 0x10047b13
Capabilities:
Set environment variable

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x10068778
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x2fc
push esi
push edi
mov dword [ebp - 0x30], 0xfffffffc
mov dword [ebp - 0x26c], 4
mov dword [ebp - 0x14], 0
jmp 0x10047b54
mov eax, dword [ebp - 0x14]
inc eax
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 3
jge 0x10047b6a
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x2d0], 2
jmp 0x10047b4d
mov dword [ebp - 0x14], 0
jmp 0x10047b7a
mov eax, dword [ebp - 0x14]
inc eax
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 1
jge 0x10047b90
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x264], 1
jmp 0x10047b73
mov dword [ebp - 0x30], 0
jmp 0x10047ba0
mov eax, dword [ebp - 0x30]
dec eax
mov dword [ebp - 0x30], eax
cmp dword [ebp - 0x30], 0xffffffe5
jl 0x10047db0
mov dword [ebp - 0x1cc], 0
mov dword [ebp - 0x288], 8
mov dword [ebp - 0x290], 0xfffffff6
mov dword [ebp - 0x298], 0x1720d700
mov dword [ebp - 0x29c], 0xdbc1c234
mov dword [ebp - 0x250], 0x722abac8
mov dword [ebp - 0x1d8], 0x4c7ba3f3
mov dword [ebp - 0x2c0], 0x29a2a67f
mov dword [ebp - 0x1e0], 0x83acdd71
mov dword [ebp - 0x258], 0xa5659cde
mov dword [ebp - 0xfc], 0xfffffff7
mov dword [ebp - 0x58], 0
jmp 0x10047c28
mov eax, dword [ebp - 0x58]
inc eax
mov dword [ebp - 0x58], eax
cmp dword [ebp - 0x58], 1
jge 0x10047c3e
mov eax, dword [ebp - 0x58]
mov dword [ebp + eax*4 - 0x154], 0xd2e8
jmp 0x10047c21
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x154]
mov dword [ebp - 0x1e8], eax
mov eax, 0x3f7bf48c
sub eax, 0x3eb60693
jne 0x10047c69
mov dword [ebp - 0x164], 1
jmp 0x10047c70
and dword [ebp - 0x164], 0
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x154], 0x7dcd66a0
jle 0x10047c8f
mov dword [ebp - 0x100], 1
jmp 0x10047c96
and dword [ebp - 0x100], 0
mov eax, dword [ebp - 0x30]
cmp eax, dword [ebp - 0x100]
jle 0x10047caa
mov dword [ebp - 0x80], 1
jmp 0x10047cae
and dword [ebp - 0x80], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x80]
mov dword [ebp + eax - 0x2d0], ecx
mov eax, dword [ebp - 0x164]
sub eax, dword [ebp - 0x80]
cmp eax, 0xfffffff7
je 0x10047d58
mov dword [ebp - 0xc0], 0
mov dword [ebp - 0x294], 0xb79ae4f7
mov dword [ebp - 0x1f0], 0x213072c0
mov dword [ebp - 0x260], 0x4b15d3e9
mov dword [ebp - 0x1f8], 1
mov dword [ebp - 0x2bc], 0xfffffffb
mov dword [ebp - 0x94], 0x6a1c
mov dword [ebp - 0x40], 0
jmp 0x10047d26
mov eax, dword [ebp - 0x40]
inc eax
mov dword [ebp - 0x40], eax
cmp dword [ebp - 0x40], 2
jge 0x10047d3c
mov eax, dword [ebp - 0x40]
mov dword [ebp + eax*4 - 0x2f0], 1
jmp 0x10047d1f
mov eax, dword [ebp - 0xc0]
dec eax
mov dword [ebp - 0xc0], eax
mov eax, dword [ebp - 0x94]
dec eax
mov dword [ebp - 0x94], eax
jmp 0x10047d95
mov dword [ebp - 0x200], 1
mov dword [ebp - 0x5c], 0
jmp 0x10047d72
mov eax, dword [ebp - 0x5c]
inc eax
mov dword [ebp - 0x5c], eax
cmp dword [ebp - 0x5c], 3
jge 0x10047d88
mov eax, dword [ebp - 0x5c]
mov dword [ebp + eax*4 - 0x308], 0xe2efe8e6
jmp 0x10047d6b
mov eax, dword [ebp - 0xfc]
inc eax
mov dword [ebp - 0xfc], eax
mov byte [ebp - 0x25], 0
movzx eax, byte [ebp - 0x25]
test eax, eax
je 0x10047dab
push 0
push 0
call dword [sym.imp.KERNEL32.dll_SetEnvironmentVariableW]
jmp 0x10047b99
mov dword [ebp - 0x20], 0xe8cff0ea
mov dword [ebp - 0x10], 0x47df
mov dword [ebp - 0xb4], 0xac0faab3
mov dword [ebp - 0x268], 0xffffffff
mov eax, dword [ebp - 0x10]
inc eax
mov dword [ebp - 0x10], eax
mov dword [ebp - 0x10], 0xffffffee
jmp 0x10047de9
mov eax, dword [ebp - 0x10]
inc eax
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], 0x30
jg 0x10047fc5
mov dword [ebp - 0x50], 0x9ecf
mov dword [ebp - 0x18c], 0x5610a143
mov dword [ebp - 0x194], 0x5950
mov dword [ebp - 0x1a8], 8
cmp dword [ebp - 0x10], 0xa4ccfd66
ja 0x10047e2d
mov dword [ebp - 0x9c], 1
jmp 0x10047e34
and dword [ebp - 0x9c], 0
mov eax, dword [ebp - 0x10]
cmp dword [ebp - 0x9c], eax
je 0x10047e4b
mov dword [ebp - 0x158], 1
jmp 0x10047e52
and dword [ebp - 0x158], 0
mov eax, 0x13b2
sub eax, dword [ebp - 0x158]
cmp eax, 0xa17d0b0a
jne 0x10047e70
mov dword [ebp - 0xa4], 1
jmp 0x10047e77
and dword [ebp - 0xa4], 0
mov eax, dword [ebp - 0x50]
cmp dword [ebp - 0xa4], eax
jg 0x10047e8e
mov dword [ebp - 0x108], 1
jmp 0x10047e95
and dword [ebp - 0x108], 0
mov eax, dword [ebp - 0x50]
cmp eax, dword [ebp - 0x108]
jl 0x10047eac
mov dword [ebp - 0xac], 1
jmp 0x10047eb3
and dword [ebp - 0xac], 0
mov eax, dword [ebp - 0xac]
add eax, 7
jne 0x10047ecd
cmp dword [ebp - 0x50], 0
jne 0x10047ecd
and dword [ebp - 0x138], 0
jmp 0x10047ed7
mov dword [ebp - 0x138], 1
mov eax, dword [ebp - 0x138]
mov dword [ebp - 0xb4], eax
cmp dword [ebp - 0xb4], 0
jne 0x10047efa
xor eax, eax
inc eax
jne 0x10047efa
and dword [ebp - 0x110], 0
jmp 0x10047f04
mov dword [ebp - 0x110], 1
mov eax, dword [ebp - 0x10]
cmp dword [ebp - 0x110], eax
jle 0x10047f1b
mov dword [ebp - 0xbc], 1
jmp 0x10047f22
and dword [ebp - 0xbc], 0
mov eax, dword [ebp - 0x50]
cmp dword [ebp - 0xbc], eax
jne 0x10047f39
mov dword [ebp - 0x150], 1
jmp 0x10047f40
and dword [ebp - 0x150], 0
cmp dword [ebp - 0x150], 0x9b780f88
je 0x10047f58
mov dword [ebp - 0xc4], 1
jmp 0x10047f5f
and dword [ebp - 0xc4], 0
mov eax, dword [ebp - 0xc4]
sub eax, dword [ebp - 0x10]
cmp eax, 1
jne 0x10047f76
cmp dword [ebp - 0x18c], 0
je 0x10047f7d
cmp dword [ebp - 0x194], 0
cmp dword [ebp - 0x10], 5
jbe 0x10047f8f
mov dword [ebp - 0x118], 1
jmp 0x10047f96
and dword [ebp - 0x118], 0
mov eax, dword [ebp - 0x10]
cmp dword [ebp - 0x118], eax
jle 0x10047fad
mov dword [ebp - 0xcc], 1
jmp 0x10047fb4
and dword [ebp - 0xcc], 0
mov eax, dword [ebp - 0xcc]
mov dword [ebp - 0x1a8], eax
jmp 0x10047de2
mov dword [ebp - 0x48], 1
mov dword [ebp - 0x4c], 0x856cd833
mov dword [ebp - 0x7c], 0x488f4f3
mov dword [ebp - 0x70], 1
mov dword [ebp - 0x74], 0x1b9c6fec
mov dword [ebp - 0x188], 1
mov dword [ebp - 0x90], 1
mov dword [ebp - 0x1a0], 0xffffffff
mov dword [ebp - 0x1c], 0
jmp 0x10048016
mov eax, dword [ebp - 0x1c]
inc eax
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 2
jge 0x10048029
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0x6c], 0x6d44
jmp 0x1004800f
mov dword [ebp - 0x1c], 0
jmp 0x10048039
mov eax, dword [ebp - 0x1c]
inc eax
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 3
jge 0x1004804f
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0x2dc], 0x17ca4e86
jmp 0x10048032
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x6c]
mov dword [ebp - 0x208], eax
imul eax, dword [ebp - 0x70], 0x19f8
mov dword [ebp - 0x140], eax
push 4
pop eax
shl eax, 1
mov ecx, dword [ebp - 0x140]
mov dword [ebp + eax - 0x2dc], ecx
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x6c]
imul eax, dword [ebp - 0x140]
push 4
pop ecx
imul ecx, ecx, 0
cmp eax, dword [ebp + ecx - 0x6c]
je 0x100480a7
mov dword [ebp - 0xd4], 1
jmp 0x100480ae
and dword [ebp - 0xd4], 0
cmp dword [ebp - 0xd4], 0xffffffff
jle 0x100480c3
mov dword [ebp - 0x120], 1
jmp 0x100480ca
and dword [ebp - 0x120], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x6c]
cmp dword [ebp - 0x120], eax
jge 0x100480e8
mov dword [ebp - 0xdc], 1
jmp 0x100480ef
and dword [ebp - 0xdc], 0
mov eax, dword [ebp - 0x7c]
cmp dword [ebp - 0xdc], eax
jne 0x10048106
mov dword [ebp - 0x160], 1
jmp 0x1004810d
and dword [ebp - 0x160], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x6c]
cmp dword [ebp - 0x160], eax
jne 0x1004812b
mov dword [ebp - 0xe4], 1
jmp 0x10048132
and dword [ebp - 0xe4], 0
imul eax, dword [ebp - 0xe4], 0x4309
push 4
pop ecx
imul ecx, ecx, 0
imul eax, dword [ebp + ecx - 0x6c]
push 3
pop ecx
sub ecx, eax
jne 0x10048160
mov eax, 0x869e7721
test eax, eax
jne 0x10048160
and dword [ebp - 0x128], 0
jmp 0x1004816a
mov dword [ebp - 0x128], 1
mov eax, dword [ebp - 0x74]
inc eax
mov dword [ebp - 0x74], eax
mov eax, dword [ebp - 0x74]
cmp eax, dword [ebp - 0x128]
jne 0x10048188
mov dword [ebp - 0xec], 1
jmp 0x1004818f
and dword [ebp - 0xec], 0
imul eax, dword [ebp - 0xec], 0xfa2e
cmp eax, 0xe8a28d88
jne 0x100481ac
mov dword [ebp - 0x148], 1
jmp 0x100481b3
and dword [ebp - 0x148], 0
mov eax, dword [ebp - 0x148]
mov dword [ebp - 0x7c], eax
mov eax, dword [ebp - 0x7c]
mov dword [ebp - 0x274], eax
cmp dword [ebp - 0x188], 0x965da1f7
jae 0x100481dd
mov dword [ebp - 0xf4], 1
jmp 0x100481e4
and dword [ebp - 0xf4], 0
cmp dword [ebp - 0xf4], 0x66ba0539
jge 0x100481fc
mov dword [ebp - 0x130], 1
jmp 0x10048203
and dword [ebp - 0x130], 0
mov eax, dword [ebp - 0x70]
cmp dword [ebp - 0x130], eax
jne 0x1004821a
mov dword [ebp - 0x8c], 1
jmp 0x10048221
and dword [ebp - 0x8c], 0
mov eax, dword [ebp - 0x8c]
mov dword [ebp - 0x90], eax
cmp dword [ebp - 0x90], 0
cmp dword [ebp - 0x70], 0x81f13d46
jb 0x10048249
mov dword [ebp - 0x98], 1
jmp 0x10048250
and dword [ebp - 0x98], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x6c]
cmp eax, dword [ebp - 0x98]
jl 0x1004826e
mov dword [ebp - 0xa0], 1
jmp 0x10048275
and dword [ebp - 0xa0], 0
mov eax, dword [ebp - 0xa0]
mov dword [ebp - 0x1a0], eax
mov dword [ebp - 0x11c], 1
mov dword [ebp - 0x1a4], 0xf5d3cc11
mov dword [ebp - 0x210], 0xd005
mov dword [ebp - 0x20], 0xffffffeb
jmp 0x100482af
mov eax, dword [ebp - 0x20]
inc eax
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 6
je 0x10048584
mov dword [ebp - 0x38], 0x779c63c4
mov dword [ebp - 0x24], 7
mov dword [ebp - 0x34], 6
mov dword [ebp - 0x2c], 5
cmp dword [ebp - 0x38], 0
je 0x100482fa
mov dword [ebp - 0x24], 0xc25b
mov eax, dword [ebp - 0x24]
mov dword [ebp - 0x34], eax
cmp dword [ebp - 0x34], 0
je 0x100482fa
mov dword [ebp - 0xa8], 1
jmp 0x10048301
and dword [ebp - 0xa8], 0
mov eax, dword [ebp - 0xa8]
neg eax
je 0x100483c9
mov eax, dword [ebp - 0x48]
mov dword [ebp - 0x270], eax
cmp dword [ebp - 0x4c], 0xec58
jle 0x1004832d
mov dword [ebp - 0xb0], 1
jmp 0x10048334
and dword [ebp - 0xb0], 0
mov eax, dword [ebp - 0x38]
cmp dword [ebp - 0xb0], eax
jg 0x1004834e
cmp dword [ebp - 0x38], 0
jne 0x1004834e
and dword [ebp - 0xb8], 0
jmp 0x10048358
mov dword [ebp - 0xb8], 1
mov eax, dword [ebp - 0xb8]
mov dword [ebp - 0x4c], eax
cmp dword [ebp - 0x4c], 0xf7bd
jl 0x1004837c
cmp dword [ebp - 0x34], 0
je 0x1004837c
mov dword [ebp - 0x88], 1
jmp 0x10048383
and dword [ebp - 0x88], 0
mov eax, dword [ebp - 0x88]
mov dword [ebp - 0x24], eax
mov eax, dword [ebp - 0x24]
sub eax, 0x335900b
je 0x100483a8
cmp dword [ebp - 0x24], 0
je 0x100483a8
mov dword [ebp - 0xc8], 1
jmp 0x100483af
and dword [ebp - 0xc8], 0
mov eax, dword [ebp - 0xc8]
dec eax
cmp eax, 0xf2f37fc0
ja 0x100483c9
mov dword [ebp - 0xd0], 1
jmp 0x100483d0
and dword [ebp - 0xd0], 0
cmp dword [ebp - 0xd0], 9
jle 0x100483e5
mov dword [ebp - 0xd8], 1
jmp 0x100483ec
and dword [ebp - 0xd8], 0
mov eax, dword [ebp - 0x20]
add eax, dword [ebp - 0xd8]
cmp eax, dword [ebp - 0x38]
jl 0x10048406
mov dword [ebp - 0xe0], 1
jmp 0x1004840d
and dword [ebp - 0xe0], 0
mov eax, dword [ebp - 0x20]
imul eax, dword [ebp - 0xe0]
mov dword [ebp - 0x48], eax
mov eax, dword [ebp - 0x20]
cmp dword [ebp - 0x48], eax
jge 0x1004842e
mov dword [ebp - 0xe8], 1
jmp 0x10048435
and dword [ebp - 0xe8], 0
mov eax, dword [ebp - 0xe8]
mov dword [ebp - 0x2c], eax
mov eax, dword [ebp - 0x2c]
mov dword [ebp - 0x11c], eax
mov dword [ebp - 0x2c], 0
jmp 0x10048457
mov eax, dword [ebp - 0x2c]
dec eax
mov dword [ebp - 0x2c], eax
cmp dword [ebp - 0x2c], 0xffffffee
jl 0x1004857f
mov dword [ebp - 0x190], 0
mov dword [ebp - 0x60], 0
jmp 0x1004847b
mov eax, dword [ebp - 0x60]
inc eax
mov dword [ebp - 0x60], eax
cmp dword [ebp - 0x60], 3
jge 0x10048491
mov eax, dword [ebp - 0x60]
mov dword [ebp + eax*4 - 0x1b4], 1
jmp 0x10048474
mov eax, dword [ebp - 0x24]
mov dword [ebp - 0x24], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x1b4]
mov dword [ebp - 0x218], eax
push 4
pop eax
imul eax, eax, 0
push 4
pop ecx
shl ecx, 1
mov ecx, dword [ebp + ecx - 0x1b4]
cmp dword [ebp + eax - 0x1b4], ecx
jl 0x100484d1
mov dword [ebp - 0xf0], 1
jmp 0x100484d8
and dword [ebp - 0xf0], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x1b4]
cmp eax, dword [ebp - 0xf0]
je 0x100484f9
mov dword [ebp - 0xf8], 1
jmp 0x10048500
and dword [ebp - 0xf8], 0
mov eax, dword [ebp - 0x38]
cmp dword [ebp - 0xf8], eax
jne 0x10048517
mov dword [ebp - 0x104], 1
jmp 0x1004851e
and dword [ebp - 0x104], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x1b4]
imul eax, dword [ebp - 0x104]
test eax, eax
jl 0x10048542
mov dword [ebp - 0x10c], 1
jmp 0x10048549
and dword [ebp - 0x10c], 0
mov eax, dword [ebp - 0x10c]
mov dword [ebp - 0x34], eax
cmp dword [ebp - 0x34], 0x52b3
je 0x10048567
mov dword [ebp - 0x114], 1
jmp 0x1004856e
and dword [ebp - 0x114], 0
mov eax, dword [ebp - 0x114]
mov dword [ebp - 0x190], eax
jmp 0x10048450
jmp 0x100482a8
lea eax, [ebp - 0x1a4]
push eax
lea eax, [ebp - 0x48]
push eax
lea eax, [ebp - 0x4c]
push eax
lea eax, [ebp - 0x20]
push eax
lea eax, [ebp - 0x11c]
push eax
call fcn.10047224
add esp, 0x14
mov dword [ebp - 0x278], 0xfb0b0297
mov dword [ebp - 0x220], 4
mov dword [ebp - 0x280], 0
mov dword [ebp - 0x228], 0xc0aa39ed
mov dword [ebp - 0x27c], 1
mov dword [ebp - 0x230], 0
mov dword [ebp - 0x2c4], 4
mov dword [ebp - 0x238], 0x374b1b05
mov dword [ebp - 0x284], 0xffffffff
mov dword [ebp - 0x240], 0xffffffff
mov dword [ebp - 0x2ac], 0xee21afa9
push 1
lea ecx, [ebp - 0x2a8]
call fcn.100166bf
and dword [ebp - 4], 0
mov dword [ebp - 0x124], 0x25db2b05
mov dword [ebp - 0x54], 0
jmp 0x1004863f
mov eax, dword [ebp - 0x54]
inc eax
mov dword [ebp - 0x54], eax
cmp dword [ebp - 0x54], 1
jge 0x1004865b
push dword [ebp - 0x54]
lea ecx, [ebp - 0x2a8]
call fcn.100167c9
mov dword [eax], 7
jmp 0x10048638
mov eax, dword [ebp - 0x124]
inc eax
mov dword [ebp - 0x124], eax
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x2a8]
call fcn.100167a4
push 1
lea eax, [ebp - 0x2fc]
push eax
xor edx, edx
inc edx
xor ecx, ecx
call fcn.100142ad
pop ecx
pop ecx
mov esi, eax
lea edi, [ebp - 0x2e8]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
lea esi, [ebp - 0x2e8]
lea edi, [ebp - 0x1c0]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
mov dword [ebp - 0x248], 0x47dfa860
mov dword [ebp - 0x28c], 0xfffffffb
mov dword [ebp - 0x1d0], 0xffffffff
mov dword [ebp - 0x1d4], 1
mov dword [ebp - 0x1dc], 0xffffffff
mov dword [ebp - 0x1e4], 0x4ab274bf
mov dword [ebp - 0x1ec], 0xfffffffc
mov dword [ebp - 0x1f4], 0xffffffff
mov dword [ebp - 0x1fc], 9
mov dword [ebp - 0x204], 0
mov dword [ebp - 0x20c], 0x95031536
mov dword [ebp - 0x214], 0x2b21a35c
mov dword [ebp - 0x21c], 0x2a26f3f1
mov dword [ebp - 0x224], 0xfffffff6
mov dword [ebp - 0x22c], 0x4a41637c
mov dword [ebp - 0x234], 0xa32a17d0
mov dword [ebp - 0x23c], 0xfffffffd
mov dword [ebp - 0x244], 0
mov dword [ebp - 0x24c], 0x5d70512a
mov dword [ebp - 0x254], 0xfd66c4a8
push 4
lea ecx, [ebp - 0x2b8]
call fcn.100166bf
mov dword [ebp - 4], 1
mov dword [ebp - 0x12c], 0
mov dword [ebp - 0x134], 8
mov dword [ebp - 0x44], 0
jmp 0x100487a6
mov eax, dword [ebp - 0x44]
inc eax
mov dword [ebp - 0x44], eax
cmp dword [ebp - 0x44], 4
jge 0x100487c2
push dword [ebp - 0x44]
lea ecx, [ebp - 0x2b8]
call fcn.100167c9
mov dword [eax], 0x1448112d
jmp 0x1004879f
mov eax, dword [ebp - 0x12c]
dec eax
mov dword [ebp - 0x12c], eax
mov eax, dword [ebp - 0x134]
dec eax
mov dword [ebp - 0x134], eax
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x2b8]
call fcn.100167a4
mov dword [ebp - 0x180], 0xffffffff
mov dword [ebp - 0x17c], 0xffffffff
mov dword [ebp - 0x178], 0xffffffff
mov dword [ebp - 0x174], 0xffffffff
mov dword [ebp - 0x3c], 0
mov dword [ebp - 0x15c], 0x71b35d56
mov dword [ebp - 0x19c], 0xf0ebf903
push 4
pop eax
imul eax, eax, 3
mov eax, dword [ebp + eax - 0x180]
mov dword [ebp - 0x3c], eax
mov dword [ebp - 0x3c], 0x1c
jmp 0x1004884e
mov eax, dword [ebp - 0x3c]
dec eax
mov dword [ebp - 0x3c], eax
cmp dword [ebp - 0x3c], 0xffffffeb
jge 0x10048936
mov dword [ebp - 0x144], 0xfffffff7
mov dword [ebp - 0x78], 0x97515801
cmp dword [ebp - 0x144], 0
jge 0x1004887e
mov dword [ebp - 0x14c], 1
jmp 0x10048885
and dword [ebp - 0x14c], 0
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x180], 0xfffffff9
jne 0x1004889e
mov eax, 0x4207
test eax, eax
jne 0x100488b6
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0x180], 0
jne 0x100488b6
and dword [ebp - 0x13c], 0
jmp 0x100488c0
mov dword [ebp - 0x13c], 1
mov eax, dword [ebp - 0x13c]
mov dword [ebp - 0x78], eax
cmp dword [ebp - 0x78], 9
jne 0x100488db
mov dword [ebp - 0x198], 1
jmp 0x100488e2
and dword [ebp - 0x198], 0
push 4
pop eax
imul eax, eax, 3
mov eax, dword [ebp + eax - 0x180]
mov dword [ebp - 0x25c], eax
mov eax, dword [ebp - 0x78]
sub eax, dword [ebp - 0x144]
cmp dword [ebp - 0x14c], eax
jne 0x10048912
mov dword [ebp - 0x84], 1
jmp 0x10048919
and dword [ebp - 0x84], 0
mov eax, dword [ebp - 0x84]
mov dword [ebp - 0x15c], eax
mov eax, dword [ebp - 0x15c]
mov dword [ebp - 0x19c], eax
jmp 0x10048847
mov dword [ebp - 0x18], 0
jmp 0x10048946
mov eax, dword [ebp - 0x18]
inc eax
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 2
jge 0x1004895c
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x1c8], 0
jmp 0x1004893f
mov dword [ebp - 0x18], 0
jmp 0x1004896c
mov eax, dword [ebp - 0x18]
inc eax
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 3
jge 0x10048982
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x170], 0x1e87df2f
jmp 0x10048965
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0x170], 1
jmp 0x100489b0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x170]
dec eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x170], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x170], 0
jl 0x10048a20
mov dword [ebp - 0x64], 0xc3eee2fd
mov dword [ebp - 0x184], 0xffffffff
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x170]
push 4
pop ecx
imul ecx, ecx, 0
mov ecx, dword [ebp + ecx - 0x170]
mov eax, dword [ebp + eax*4 - 0x1c8]
mov dword [ebp + ecx*4 - 0x1c8], eax
mov dword [ebp - 0x64], 0
jmp 0x10048a09
mov eax, dword [ebp - 0x64]
dec eax
mov dword [ebp - 0x64], eax
cmp dword [ebp - 0x64], 0xfffffff9
jg 0x10048a1b
mov dword [ebp - 0x184], 0
jmp 0x10048a02
jmp 0x10048995
cmp dword [ebp - 0x1c0], 0
je 0x10048a3d
push 2
push dword [ebp - 0x1b8]
push dword [ebp - 0x1bc]
call dword [ebp - 0x1c0]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
mov esp, ebp
pop ebp
ret