Function at 0x10007505
Capabilities:
Query environment variable

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x1005aa04
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
push ecx
sub esp, 0x36c
push ebx
push esi
push edi
mov dword [ebp - 0x10], esp
movzx eax, byte [ebp + 0x14]
test eax, eax
je 0x1000890c
lea eax, [ebp + 0x10]
mov dword [ebp - 0x1ac], eax
mov eax, dword [ebp + 0xc]
mov dword [ebp - 0x184], eax
lea eax, [ebp + 8]
mov dword [ebp - 0x180], eax
mov eax, dword [ebp + 0x20]
mov dword [ebp - 0x17c], eax
mov eax, dword [ebp + 0x18]
mov dword [ebp - 0x1dc], eax
mov eax, dword [ebp - 0x180]
movzx eax, byte [eax]
test eax, eax
je 0x100075d8
mov eax, dword [ebp - 0x1dc]
mov dword [ebp - 0x1c8], eax
mov eax, dword [ebp - 0x17c]
mov dword [ebp - 0x188], eax
mov eax, dword [ebp - 0x1c8]
mov dword [ebp - 0x4c], eax
mov eax, dword [ebp - 0x188]
mov dword [ebp - 0x178], eax
mov eax, dword [ebp - 0x4c]
mov dword [eax], 0
jmp 0x100075b3
mov eax, dword [ebp - 0x4c]
mov eax, dword [eax]
inc eax
mov ecx, dword [ebp - 0x4c]
mov dword [ecx], eax
mov eax, dword [ebp - 0x4c]
cmp dword [eax], 3
jge 0x100075d3
mov eax, dword [ebp - 0x4c]
push dword [eax]
mov ecx, dword [ebp - 0x178]
call fcn.10001d4d
mov dword [eax], 0x868bb4
jmp 0x100075a8
jmp 0x1000890a
mov eax, dword [ebp - 0x1ac]
mov dword [ebp - 0x48], eax
mov eax, dword [ebp - 0x184]
mov dword [ebp - 0x154], eax
mov dword [ebp - 0x14], 0xb642c70b
mov dword [ebp - 0x1b4], 0xfffffff8
mov dword [ebp - 0x13c], 0
mov dword [ebp - 0x118], 1
mov dword [ebp - 0x194], 0xfffffffe
mov dword [ebp - 0x5c], 0
jmp 0x1000762c
mov eax, dword [ebp - 0x5c]
inc eax
mov dword [ebp - 0x5c], eax
cmp dword [ebp - 0x5c], 1
jge 0x10007642
mov eax, dword [ebp - 0x5c]
mov dword [ebp + eax*4 - 0x15c], 9
jmp 0x10007625
push 1
push 0x7ccb
push 1
push 0x48f1
call fcn.10003fc6
add esp, 0x10
mov eax, dword [ebp - 0x14]
mov dword [ebp - 0x2d0], eax
mov eax, dword [ebp - 0x14]
sub eax, 0x1e6e2bf
cmp eax, dword [ebp - 0x14]
jne 0x1000767a
mov dword [ebp - 0x1c4], 1
jmp 0x10007681
and dword [ebp - 0x1c4], 0
cmp dword [ebp - 0x14], 0x38d927f7
mov eax, dword [ebp - 0x14]
cmp dword [ebp - 0x14], eax
jg 0x1000769c
mov dword [ebp - 0x18c], 1
jmp 0x100076a3
and dword [ebp - 0x18c], 0
mov eax, dword [ebp - 0x14]
mov dword [ebp - 0x29c], eax
mov eax, dword [ebp - 0x14]
mov dword [ebp - 0x2c8], eax
mov eax, 0xb9228064
test eax, eax
je 0x10007722
mov dword [ebp - 0x14], 0
jmp 0x100076ce
mov eax, dword [ebp - 0x14]
dec eax
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 0
jl 0x100076f6
push 0
push 0x6de1
push 0
call fcn.1000458a
add esp, 0xc
mov eax, dword [ebp - 0x14]
cmp dword [ebp + eax*4 - 0x15c], 0
je 0x100076f4
jmp 0x100076f6
jmp 0x100076c7
mov byte [ebp - 0x1f], 0
movzx eax, byte [ebp - 0x1f]
test eax, eax
je 0x1000771d
push 0x73aa
push 1
push 0x58fd
push 0
push 0x290f
call fcn.10004140
add esp, 0x14
jmp 0x100077ea
mov dword [ebp - 0x98], 0xfffffff8
mov eax, dword [ebp - 0x98]
mov dword [ebp - 0x14], eax
mov eax, dword [ebp - 0x14]
mov dword [ebp - 0x13c], eax
mov eax, dword [ebp - 0x98]
cmp dword [ebp - 0x13c], eax
jg 0x10007758
mov dword [ebp - 0xc8], 1
jmp 0x1000775f
and dword [ebp - 0xc8], 0
mov eax, dword [ebp - 0x98]
cmp dword [ebp - 0xc8], eax
jge 0x10007779
mov dword [ebp - 0xc4], 1
jmp 0x10007780
and dword [ebp - 0xc4], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x15c]
cmp eax, dword [ebp - 0xc4]
jne 0x100077a1
mov dword [ebp - 0x138], 1
jmp 0x100077a8
and dword [ebp - 0x138], 0
mov eax, dword [ebp - 0x1b4]
sub eax, dword [ebp - 0x138]
cmp eax, 0xca3c47aa
jbe 0x100077cb
xor eax, eax
je 0x100077cb
mov dword [ebp - 0xd0], 1
jmp 0x100077d2
and dword [ebp - 0xd0], 0
mov eax, dword [ebp - 0xd0]
mov dword [ebp - 0x118], eax
mov eax, dword [ebp - 0x118]
mov dword [ebp - 0x194], eax
mov eax, dword [0x1007d494]
and eax, 1
jne 0x1000781e
mov eax, dword [0x1007d494]
or eax, 1
mov dword [0x1007d494], eax
and dword [ebp - 4], 0
mov ecx, 0x1007d4c8
call fcn.1000e067
push 0x1005bead
call fcn.100413d9
pop ecx
or dword [ebp - 4], 0xffffffff
mov eax, dword [ebp - 0x48]
mov ecx, dword [eax]
call fcn.10003e98
mov dword [ebp - 0xa8], eax
mov dword [ebp - 0x34], 0xffffffff
mov dword [ebp - 0xd8], 0x3998
mov dword [ebp - 0x19c], str.lrwyqlh_fkilwoe_udnqzwx_kxqoazkf_prv_loa_hrdmp_mrreoj_ntrwbl_nwarsrzth_tsfly_aimpmjh_zblanjoki_ykbjzigw
cmp dword [ebp - 0xd8], 0x3b89
jle 0x10007938
and dword [ebp - 0x54], 0
jmp 0x10007866
mov eax, dword [ebp - 0x54]
inc eax
mov dword [ebp - 0x54], eax
cmp dword [ebp - 0x54], 0x4906
jge 0x10007932
and dword [ebp - 0x64], 0
jmp 0x10007880
mov eax, dword [ebp - 0x64]
inc eax
mov dword [ebp - 0x64], eax
cmp dword [ebp - 0x64], 0x3ebc
jge 0x1000792d
and dword [ebp - 0x90], 0
jmp 0x100078a3
mov eax, dword [ebp - 0x90]
inc eax
mov dword [ebp - 0x90], eax
cmp dword [ebp - 0x90], 0x3d19
jge 0x10007928
and dword [ebp - 0x6c], 0
jmp 0x100078bc
mov eax, dword [ebp - 0x6c]
inc eax
mov dword [ebp - 0x6c], eax
cmp dword [ebp - 0x6c], 0x47f6
jge 0x10007923
mov eax, dword [ebp - 0x54]
mov ecx, dword [ebp - 0x64]
sar eax, cl
mov ecx, dword [ebp - 0x90]
shl eax, cl
and eax, dword [ebp - 0x6c]
cdq
mov dword [ebp - 0x1d4], eax
mov dword [ebp - 0x1d0], edx
push dword [ebp - 0x1d0]
push dword [ebp - 0x1d4]
lea ecx, [ebp - 0x36c]
call fcn.100026cb
pop ecx
pop ecx
mov dword [ebp - 0x1d8], eax
mov ecx, dword [ebp - 0x1d8]
call fcn.1000da81
push eax
call fcn.10041403
pop ecx
lea ecx, [ebp - 0x36c]
call fcn.1000da77
jmp 0x100078b5
jmp 0x10007896
jmp 0x10007879
jmp 0x1000785f
call dword [sym.imp.KERNEL32.dll_GetEnvironmentStringsW]
mov dword [ebp - 0x2a8], 0xfffffffb
mov dword [ebp - 4], 1
cmp dword [ebp - 0xd8], 0x3652
jge 0x10007961
push dword [ebp - 0x19c]
call fcn.10041403
pop ecx
jmp 0x1000797d
or dword [ebp - 4], 0xffffffff
jmp 0x10007987
mov dword [ebp - 0x2c0], 1
mov dword [ebp - 0x2e0], 1
mov dword [ebp - 0x2dc], 1
mov dword [ebp - 0x2d8], 1
mov dword [ebp - 0x2d4], 1
mov dword [ebp - 0x1bc], 1
mov dword [ebp - 0x88], 0
jmp 0x100079dc
mov eax, dword [ebp - 0x88]
inc eax
mov dword [ebp - 0x88], eax
cmp dword [ebp - 0x88], 1
jge 0x100079f8
mov eax, dword [ebp - 0x88]
mov dword [ebp + eax*4 - 0xa4], 0x39b
jmp 0x100079cf
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xa4]
inc eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0xa4], eax
mov dword [ebp - 0x34], 0
jmp 0x10007a23
mov eax, dword [ebp - 0x34]
dec eax
mov dword [ebp - 0x34], eax
cmp dword [ebp - 0x34], 0
jl 0x10007b2a
mov dword [ebp - 0x23c], 0xca9869ec
mov dword [ebp - 0x240], 0xfd1f2e96
mov dword [ebp - 0x2c4], 0
push 2
lea ecx, [ebp - 0x224]
call fcn.10001cf5
mov dword [ebp - 4], 3
push 4
lea ecx, [ebp - 0x218]
call fcn.10001cf5
mov byte [ebp - 4], 4
push 0x1048
push 1
push 0
lea eax, [ebp - 0x224]
push eax
lea eax, [ebp - 0x3c]
push eax
call fcn.1000703d
add esp, 0x14
mov dword [ebp - 0x3c], 0
jmp 0x10007a9c
mov eax, dword [ebp - 0x3c]
inc eax
mov dword [ebp - 0x3c], eax
cmp dword [ebp - 0x3c], 4
jge 0x10007ab8
push dword [ebp - 0x3c]
lea ecx, [ebp - 0x218]
call fcn.10001d4d
mov dword [eax], 0xfdbd0176
jmp 0x10007a95
push 0x305c
push 0
push 0x2b40
lea eax, [ebp - 0x1bc]
push eax
push 1
push 0
call fcn.10007104
add esp, 0x18
mov eax, dword [ebp - 0x34]
cmp dword [ebp + eax*4 - 0xa4], 0
je 0x10007b07
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x218]
call fcn.10001d31
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x224]
call fcn.10001d31
jmp 0x10007a1c
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x218]
call fcn.10001d31
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x224]
call fcn.10001d31
jmp 0x10007a1c
cmp dword [ebp - 0xa8], 3
jae 0x10007d1e
mov eax, dword [ebp - 0x48]
mov eax, dword [eax]
mov dword [ebp - 0x1a4], eax
lea eax, [ebp - 0x2cc]
push eax
mov ecx, 0x1007d4c8
call fcn.1000de63
push eax
lea eax, [ebp - 0x1a4]
push eax
lea eax, [ebp - 0x2a0]
push eax
mov ecx, 0x1007d4c8
call fcn.1000de71
mov ecx, eax
call fcn.1000e1d5
movzx eax, al
test eax, eax
je 0x10007d1e
mov dword [ebp - 0x174], 9
mov dword [ebp - 0x16c], 0xd188047d
mov dword [ebp - 0x74], 0
jmp 0x10007ba2
mov eax, dword [ebp - 0x74]
inc eax
mov dword [ebp - 0x74], eax
cmp dword [ebp - 0x74], 3
jge 0x10007bb8
mov eax, dword [ebp - 0x74]
mov dword [ebp + eax*4 - 0x250], 0xb13e
jmp 0x10007b9b
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x250], 0
je 0x10007c97
mov dword [ebp - 0x8c], 0x50bf34fd
mov dword [ebp - 0x1cc], 0x729cf308
mov dword [ebp - 0x8c], 0x1a
jmp 0x10007bf9
mov eax, dword [ebp - 0x8c]
dec eax
mov dword [ebp - 0x8c], eax
cmp dword [ebp - 0x8c], 0xffffffec
jge 0x10007c68
mov dword [ebp - 0x2c], 0x942a1e94
mov dword [ebp - 0x2c], 0
jmp 0x10007c19
mov eax, dword [ebp - 0x2c]
inc eax
mov dword [ebp - 0x2c], eax
cmp dword [ebp - 0x2c], 3
jge 0x10007c2f
mov eax, dword [ebp - 0x2c]
mov dword [ebp + eax*4 - 0x250], 0x8ef
jmp 0x10007c12
push 0x4559
push 0x26c3
lea eax, [ebp - 0x2c]
push eax
push 0x53a4
push 0x53ea
push 0
lea eax, [ebp - 0x1cc]
push eax
push 0
push 1
push 0x1e7f
push 0x4a40
call fcn.1000607d
add esp, 0x2c
jmp 0x10007bec
mov byte [ebp - 0x20], 0
push 0x2c3f
lea eax, [ebp - 0x20]
push eax
push 0
push 0x2c40
push 0x6048
push 0x20ef
push 0x749c
push 1
call fcn.1000523a
add esp, 0x20
jmp 0x10007cf1
mov dword [ebp - 0x7c], 0
jmp 0x10007ca7
mov eax, dword [ebp - 0x7c]
inc eax
mov dword [ebp - 0x7c], eax
cmp dword [ebp - 0x7c], 3
jge 0x10007cbd
mov eax, dword [ebp - 0x7c]
mov dword [ebp + eax*4 - 0x304], 1
jmp 0x10007ca0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x304]
cmp dword [ebp - 0x174], eax
jle 0x10007cde
mov dword [ebp - 0x158], 1
jmp 0x10007ce5
and dword [ebp - 0x158], 0
mov eax, dword [ebp - 0x158]
mov dword [ebp - 0x16c], eax
mov eax, dword [ebp - 0x48]
mov eax, dword [eax]
mov dword [ebp - 0x170], eax
lea eax, [ebp - 0x170]
push eax
mov ecx, 0x1007d4c8
call fcn.1000e0bb
push eax
mov ecx, dword [ebp - 0x154]
call fcn.1000dce9
jmp 0x10008934
lea eax, [ebp - 0x354]
push eax
call fcn.1000288e
pop ecx
mov esi, eax
lea edi, [ebp - 0x328]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
lea esi, [ebp - 0x328]
lea edi, [ebp - 0x310]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
mov eax, dword [ebp - 0x48]
mov ecx, dword [eax]
call fcn.10003ec1
mov dword [ebp - 0x1b0], eax
mov dword [ebp - 0x30], 0x238e486a
mov dword [ebp - 0x84], 0x68c
mov dword [ebp - 0x9c], 0
push 3
lea ecx, [ebp - 0x168]
call fcn.10001cf5
mov dword [ebp - 4], 5
mov dword [ebp - 0x24], 1
mov dword [ebp - 0x1a0], 0x94d23a2c
mov dword [ebp - 0x44], 0
jmp 0x10007da5
mov eax, dword [ebp - 0x44]
inc eax
mov dword [ebp - 0x44], eax
cmp dword [ebp - 0x44], 3
jge 0x10007dbb
mov eax, dword [ebp - 0x44]
mov dword [ebp + eax*4 - 0xb4], 0xb6bc
jmp 0x10007d9e
push 0
push 0x259a
lea eax, [ebp - 0x168]
push eax
push 0x5270
push 0
push 1
lea eax, [ebp - 0x44]
push eax
call fcn.100053b8
add esp, 0x1c
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xb4]
neg eax
push 4
pop ecx
imul ecx, ecx, 0
cmp eax, dword [ebp + ecx - 0xb4]
jge 0x10007e08
mov dword [ebp - 0xf0], 1
jmp 0x10007e0f
and dword [ebp - 0xf0], 0
mov dword [ebp - 0x30], 0x8ec32687
cmp dword [ebp - 0x30], 0x4d3ec93c
jge 0x10007e2b
mov dword [ebp - 0xe0], 1
jmp 0x10007e32
and dword [ebp - 0xe0], 0
mov eax, dword [ebp - 0x84]
cmp dword [ebp - 0xe0], eax
jg 0x10007e4c
mov dword [ebp - 0x120], 1
jmp 0x10007e53
and dword [ebp - 0x120], 0
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0xb4]
cmp dword [ebp - 0x120], eax
jge 0x10007e73
mov dword [ebp - 0xe8], 1
jmp 0x10007e7a
and dword [ebp - 0xe8], 0
push 4
pop eax
imul eax, eax, 0
push 4
pop ecx
imul ecx, ecx, 0
mov ecx, dword [ebp + ecx - 0xb4]
add ecx, dword [ebp - 0xe8]
cmp dword [ebp + eax - 0xb4], ecx
jle 0x10007ea8
mov dword [ebp - 0x140], 1
jmp 0x10007eaf
and dword [ebp - 0x140], 0
mov eax, dword [ebp - 0x140]
mov dword [ebp - 0x9c], eax
mov eax, dword [ebp - 0x9c]
cmp dword [ebp - 0xf0], eax
jge 0x10007ed5
mov dword [ebp - 0x128], 1
jmp 0x10007edc
and dword [ebp - 0x128], 0
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0xb4]
imul eax, dword [ebp - 0x128]
push 4
pop ecx
imul ecx, ecx, 0
imul eax, dword [ebp + ecx - 0xb4]
mov dword [ebp - 0xf8], eax
push 2
lea ecx, [ebp - 0x168]
call fcn.10001d4d
mov ecx, dword [ebp - 0xf8]
mov dword [eax], ecx
mov eax, dword [ebp - 0xf8]
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 0
je 0x10007f3c
mov eax, 0x4593
test eax, eax
je 0x10007f3c
mov dword [ebp - 0x150], 1
jmp 0x10007f43
and dword [ebp - 0x150], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x150]
sub ecx, dword [ebp + eax - 0xb4]
cmp ecx, dword [ebp - 0x84]
jne 0x10007f6a
mov dword [ebp - 0x100], 1
jmp 0x10007f71
and dword [ebp - 0x100], 0
cmp dword [ebp - 0x100], 0xcef3
jge 0x10007f89
mov dword [ebp - 0x130], 1
jmp 0x10007f90
and dword [ebp - 0x130], 0
cmp dword [ebp - 0x130], 0x2002
jl 0x10007fa8
mov dword [ebp - 0x190], 1
jmp 0x10007faf
and dword [ebp - 0x190], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xb4]
mov dword [ebp - 0x2b0], eax
push 1
lea ecx, [ebp - 0x168]
call fcn.10001d4d
push 4
pop ecx
shl ecx, 0
mov ecx, dword [ebp + ecx - 0xb4]
cmp dword [eax], ecx
jne 0x10007ff6
push 2
lea ecx, [ebp - 0x168]
call fcn.10001d4d
cmp dword [eax], 0
je 0x100081ca
mov dword [ebp - 0x108], 0xfffffffd
mov dword [ebp - 0x94], 0
jmp 0x10008019
mov eax, dword [ebp - 0x94]
inc eax
mov dword [ebp - 0x94], eax
cmp dword [ebp - 0x94], 3
jge 0x10008035
mov eax, dword [ebp - 0x94]
mov dword [ebp + eax*4 - 0x20c], 0
jmp 0x1000800c
mov dword [ebp - 0x24], 0xffffffef
jmp 0x10008045
mov eax, dword [ebp - 0x24]
dec eax
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 0xffffffec
jg 0x100081c5
mov dword [ebp - 0x28], 0xfffffff9
push 2
lea ecx, [ebp - 0x168]
call fcn.10001d4d
cmp dword [eax], 0
je 0x10008086
mov eax, dword [ebp - 0x28]
mov dword [ebp - 0x108], eax
cmp dword [ebp - 0x108], 0
je 0x10008086
mov dword [ebp - 0xcc], 1
jmp 0x1000808d
and dword [ebp - 0xcc], 0
cmp dword [ebp - 0x28], 0
je 0x100080d3
mov eax, dword [ebp - 0x9c]
cmp dword [ebp - 0x28], eax
jge 0x100080aa
mov dword [ebp - 0x148], 1
jmp 0x100080b1
and dword [ebp - 0x148], 0
mov eax, dword [ebp - 0x148]
sub eax, dword [ebp - 0x28]
jne 0x100080c9
xor eax, eax
jne 0x100080c9
and dword [ebp - 0x110], 0
jmp 0x100080d3
mov dword [ebp - 0x110], 1
mov esi, dword [ebp - 0x84]
push 2
lea ecx, [ebp - 0x168]
call fcn.10001d4d
cmp esi, dword [eax]
jne 0x100080f6
mov dword [ebp - 0xc0], 1
jmp 0x100080fd
and dword [ebp - 0xc0], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x20c]
cmp dword [ebp - 0xc0], eax
jne 0x1000811e
mov dword [ebp - 0xd4], 1
jmp 0x10008125
and dword [ebp - 0xd4], 0
mov eax, dword [ebp - 0xcc]
cmp eax, dword [ebp - 0xd4]
jle 0x1000813f
mov dword [ebp - 0x198], 1
jmp 0x10008146
and dword [ebp - 0x198], 0
push 0xfffffffffffffffd
pop eax
cmp eax, 0xf5349dda
ja 0x1000815c
mov dword [ebp - 0xdc], 1
jmp 0x10008163
and dword [ebp - 0xdc], 0
mov eax, dword [ebp - 0xdc]
add eax, 0xf12
je 0x10008183
push 6
pop eax
test eax, eax
je 0x10008183
mov dword [ebp - 0xe4], 1
jmp 0x1000818a
and dword [ebp - 0xe4], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x20c]
mov dword [ebp - 0x244], eax
mov eax, dword [ebp - 0xe4]
mov dword [ebp - 0x28], eax
mov eax, dword [ebp - 0x28]
mov dword [ebp - 0x238], eax
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0x20c], 0xfffffff7
jmp 0x1000803e
jmp 0x100082f6
mov dword [ebp - 0x104], 0xf115
mov dword [ebp - 0x30], 0xa
jmp 0x100081e4
mov eax, dword [ebp - 0x30]
dec eax
mov dword [ebp - 0x30], eax
cmp dword [ebp - 0x30], 3
jge 0x100082f6
mov dword [ebp - 0x58], 6
mov eax, dword [ebp - 0x1a0]
mov dword [ebp - 0x254], eax
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0xb4], 0x907b4787
jge 0x10008220
mov dword [ebp - 0xec], 1
jmp 0x10008227
and dword [ebp - 0xec], 0
mov eax, dword [ebp - 0x104]
neg eax
cmp eax, dword [ebp - 0xec]
jne 0x10008243
mov dword [ebp - 0xf4], 1
jmp 0x1000824a
and dword [ebp - 0xf4], 0
mov eax, dword [ebp - 0x84]
cmp dword [ebp - 0xf4], eax
jle 0x10008264
mov dword [ebp - 0x1a8], 1
jmp 0x1000826b
and dword [ebp - 0x1a8], 0
mov eax, dword [ebp - 0x58]
mov dword [ebp - 0x2b8], eax
cmp dword [ebp - 0x58], 0
je 0x1000828c
cmp dword [ebp - 0x58], 0
je 0x1000828c
mov dword [ebp - 0xfc], 1
jmp 0x10008293
and dword [ebp - 0xfc], 0
mov eax, dword [ebp - 0xfc]
inc eax
inc eax
cmp eax, dword [ebp - 0x24]
jne 0x100082ac
mov dword [ebp - 0x10c], 1
jmp 0x100082b3
and dword [ebp - 0x10c], 0
mov eax, dword [ebp - 0x104]
sub eax, dword [ebp - 0x10c]
mov dword [ebp - 0x58], eax
mov byte [ebp - 0x1e], 0
push 0x1969
push 1
push 0
lea eax, [ebp - 0x1e]
push eax
push 0x580d
push 0x5ff1
push 1
push 0x2e4d
push 0x58b0
call fcn.100042f3
add esp, 0x24
jmp 0x100081dd
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x168]
call fcn.10001d31
lea eax, [ebp - 0x310]
push eax
push dword [ebp - 0x1b0]
push dword [ebp - 0xa8]
lea eax, [ebp - 0x2f8]
push eax
call fcn.10003ee5
add esp, 0x10
mov dword [ebp - 4], 6
mov dword [ebp - 0x114], 1
mov dword [ebp - 0xa0], 6
mov dword [ebp - 0x12c], 0x7b04
mov dword [ebp - 0x60], 0
jmp 0x1000835c
mov eax, dword [ebp - 0x60]
inc eax
mov dword [ebp - 0x60], eax
cmp dword [ebp - 0x60], 3
jge 0x10008372
mov eax, dword [ebp - 0x60]
mov dword [ebp + eax*4 - 0x334], 0xfffffffb
jmp 0x10008355
mov dword [ebp - 0x114], 0xdf603fa7
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0x334], 0xfffffffd
cmp dword [ebp - 0x114], 0xfffffffd
jle 0x100083a2
mov dword [ebp - 0x11c], 1
jmp 0x100083a9
and dword [ebp - 0x11c], 0
mov eax, dword [ebp - 0xa0]
cmp dword [ebp - 0x11c], eax
jle 0x100083c3
mov dword [ebp - 0x124], 1
jmp 0x100083ca
and dword [ebp - 0x124], 0
mov eax, dword [ebp - 0x124]
mov dword [ebp - 0x12c], eax
mov eax, dword [ebp - 0x12c]
mov dword [ebp - 0xa0], eax
cmp dword [ebp - 0xa0], 0
je 0x1000847e
push 2
lea ecx, [ebp - 0x260]
call fcn.10001cf5
mov byte [ebp - 4], 7
mov dword [ebp - 0x1ec], 9
mov dword [ebp - 0x1e8], 9
mov dword [ebp - 0x1e4], 9
mov dword [ebp - 0x1e0], 9
mov dword [ebp - 0x68], 0
jmp 0x10008438
mov eax, dword [ebp - 0x68]
inc eax
mov dword [ebp - 0x68], eax
cmp dword [ebp - 0x68], 2
jge 0x10008454
push dword [ebp - 0x68]
lea ecx, [ebp - 0x260]
call fcn.10001d4d
mov dword [eax], 0xfffffff8
jmp 0x10008431
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x1ec]
dec eax
push 4
pop ecx
shl ecx, 1
mov dword [ebp + ecx - 0x1ec], eax
mov byte [ebp - 4], 6
lea ecx, [ebp - 0x260]
call fcn.10001d31
jmp 0x100084e3
mov dword [ebp - 0x134], 8
mov dword [ebp - 0x234], 0xfffffffd
mov dword [ebp - 0x230], 0xfffffffd
mov dword [ebp - 0x22c], 0xfffffffd
mov dword [ebp - 0x228], 0xfffffffd
mov eax, dword [ebp - 0x134]
cmp dword [ebp - 0x134], eax
jne 0x100084ca
mov dword [ebp - 0xbc], 1
jmp 0x100084d1
and dword [ebp - 0xbc], 0
push 4
pop eax
shl eax, 1
mov ecx, dword [ebp - 0xbc]
mov dword [ebp + eax - 0x234], ecx
cmp dword [ebp - 0xa8], 3
jae 0x100087e8
mov dword [ebp - 0x70], 0xd1e1e87d
mov dword [ebp - 0x264], 0x846b51f0
mov dword [ebp - 0x298], 0x36717b38
or dword [ebp - 0x200], 0xffffffff
or dword [ebp - 0x1fc], 0xffffffff
or dword [ebp - 0x1f8], 0xffffffff
or dword [ebp - 0x1f4], 0xffffffff
lea ecx, [ebp - 0xb5]
call fcn.10001da5
push eax
lea eax, [ebp - 0x1f0]
push eax
lea eax, [ebp - 0x200]
push eax
lea ecx, [ebp - 0x348]
call fcn.1000dd98
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0x31c]
call fcn.1000dd72
mov byte [ebp - 4], 8
mov dword [ebp - 0x18], 0
jmp 0x10008570
mov eax, dword [ebp - 0x18]
inc eax
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 3
jge 0x10008586
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x340], 1
jmp 0x10008569
mov dword [ebp - 0x18], 0
jmp 0x10008596
mov eax, dword [ebp - 0x18]
inc eax
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 4
jge 0x100085ac
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x37c], 0xe495761b
jmp 0x1000858f
mov dword [ebp - 0x70], 2
jmp 0x100085bc
mov eax, dword [ebp - 0x70]
dec eax
mov dword [ebp - 0x70], eax
cmp dword [ebp - 0x70], 0
jl 0x100087aa
mov dword [ebp - 0x40], 0xfffffff8
mov dword [ebp - 0x274], 0xbe56890c
mov dword [ebp - 0x2a4], 1
push 2
lea ecx, [ebp - 0x280]
call fcn.10001cf5
mov byte [ebp - 4], 9
mov dword [ebp - 0x144], 0xa4e7
push 0
push 0x5f00
push 0x432
lea eax, [ebp - 0x284]
push eax
lea eax, [ebp - 0x280]
push eax
call fcn.1000d55f
add esp, 0x14
push 1
push 0x2212
push 0x5b4f
push 0x16d4
push 0x2035
push 0x6288
push 0
push 1
call fcn.10004644
add esp, 0x20
mov dword [ebp - 0x40], 2
jmp 0x10008655
mov eax, dword [ebp - 0x40]
dec eax
mov dword [ebp - 0x40], eax
cmp dword [ebp - 0x40], 0
jl 0x10008796
mov dword [ebp - 0x78], 0xbef7d651
mov dword [ebp - 0x2ac], 0x70ab227d
mov dword [ebp - 0x294], 6
push 1
lea ecx, [ebp - 0x270]
call fcn.10001cf5
mov byte [ebp - 4], 0xa
mov dword [ebp - 0x2b4], 0xffffffff
push 0xac
push 1
push 0x40ec
push 0x6986
push 0x6b5d
push 0
lea eax, [ebp - 0x270]
push eax
lea eax, [ebp - 0x38]
push eax
push 1
call fcn.10006651
add esp, 0x24
mov dword [ebp - 0x38], 0
jmp 0x100086d2
mov eax, dword [ebp - 0x38]
inc eax
mov dword [ebp - 0x38], eax
cmp dword [ebp - 0x38], 1
jge 0x100086e8
mov eax, dword [ebp - 0x38]
mov dword [ebp + eax*4 - 0x2bc], 1
jmp 0x100086cb
mov dword [ebp - 0x78], 2
jmp 0x100086f8
mov eax, dword [ebp - 0x78]
dec eax
mov dword [ebp - 0x78], eax
cmp dword [ebp - 0x78], 0
jl 0x10008775
mov dword [ebp - 0x1c], 0x13281d21
mov dword [ebp - 0x1c], 2
jmp 0x10008715
mov eax, dword [ebp - 0x1c]
dec eax
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 0
jl 0x10008749
push 0x401d
push 0
push 0x3f39
push 0x4cc9
push 0x4df9
push 1
push 0x1861
push 0x511f
push 0
call fcn.10006651
add esp, 0x24
jmp 0x1000870e
mov dword [ebp - 0x1c], 2
jmp 0x10008759
mov eax, dword [ebp - 0x1c]
dec eax
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 0
jl 0x10008770
mov eax, dword [ebp - 0x40]
cmp dword [ebp + eax*4 - 0x340], 0
je 0x1000876e
jmp 0x10008770
jmp 0x10008752
jmp 0x100086f1
mov eax, dword [ebp - 0x144]
dec eax
mov dword [ebp - 0x144], eax
mov byte [ebp - 4], 9
lea ecx, [ebp - 0x270]
call fcn.10001d31
jmp 0x1000864e
mov byte [ebp - 4], 8
lea ecx, [ebp - 0x280]
call fcn.10001d31
jmp 0x100085b5
mov byte [ebp - 4], 6
lea ecx, [ebp - 0x31c]
call fcn.10001d31
push 0x4f60
push 0x19cf
push 1
lea eax, [ebp - 0x2f8]
push eax
push 0x7670
push 0x37b3
push 0x1007d4c8
push dword [ebp - 0x48]
push 0
call fcn.10006c03
add esp, 0x24
mov dword [ebp - 0x50], 1
mov byte [ebp - 0x1d], 0
movzx eax, byte [ebp - 0x1d]
test eax, eax
je 0x10008814
push 0
push 0x5ef4
push 0x389b
push 0x175d
call fcn.1000beaf
add esp, 0x10
mov dword [ebp - 0x50], 0
jmp 0x10008824
mov eax, dword [ebp - 0x50]
inc eax
mov dword [ebp - 0x50], eax
cmp dword [ebp - 0x50], 6
jne 0x100088d8
push 3
lea ecx, [ebp - 0x290]
call fcn.10001cf5
mov byte [ebp - 4], 0xb
mov dword [ebp - 0x14c], 0xffffffff
mov dword [ebp - 0x80], 0
jmp 0x10008859
mov eax, dword [ebp - 0x80]
inc eax
mov dword [ebp - 0x80], eax
cmp dword [ebp - 0x80], 3
jge 0x10008875
push dword [ebp - 0x80]
lea ecx, [ebp - 0x290]
call fcn.10001d4d
mov dword [eax], 7
jmp 0x10008852
push 1
lea eax, [ebp - 0x14c]
push eax
push 0x67c5
push 0x2267
push 1
push 0
push 0x7f4c
call fcn.100053b8
add esp, 0x1c
push 0x7ce6
push 0
push 0x32ec
lea eax, [ebp - 0x14c]
push eax
lea eax, [ebp - 0x50]
push eax
push 1
push 0x5f80
push 0x714d
call fcn.10004b32
add esp, 0x20
mov byte [ebp - 4], 6
lea ecx, [ebp - 0x290]
call fcn.10001d31
jmp 0x1000881d
lea eax, [ebp - 0x2f8]
push eax
mov ecx, dword [ebp - 0x154]
call fcn.1000dce9
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x2f8]
call fcn.1000dcdf
jmp 0x10008934
jmp 0x10008934
mov eax, dword [ebp + 0x1c]
mov dword [ebp - 0x1b8], eax
mov eax, dword [ebp + 0x24]
mov dword [ebp - 0x1c0], eax
push dword [ebp - 0x1b8]
push dword [ebp - 0x1c0]
push 1
call fcn.100058ca
add esp, 0xc
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret