Function at 0x10004db0
Capabilities:
Query environment variable

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x10060277
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
push ecx
sub esp, 0x4ec
push ebx
push esi
push edi
mov dword [ebp - 0x10], esp
mov dword [ebp - 0x6c], 0xfe0a8eac
mov dword [ebp - 0x118], 0
jmp 0x10004df5
mov eax, dword [ebp - 0x118]
inc eax
mov dword [ebp - 0x118], eax
cmp dword [ebp - 0x118], 2
jge 0x10004e11
mov eax, dword [ebp - 0x118]
mov dword [ebp + eax*4 - 0x144], 5
jmp 0x10004de8
mov dword [ebp - 0x6c], 0
jmp 0x10004e21
mov eax, dword [ebp - 0x6c]
dec eax
mov dword [ebp - 0x6c], eax
cmp dword [ebp - 0x6c], 0xffffffe5
je 0x1000502c
mov dword [ebp - 0x2c], 0xffffffff
mov dword [ebp - 0x54], 0xaf14186e
mov dword [ebp - 0x5c], 0x1dba1dd7
mov dword [ebp - 0x2c], 0
jmp 0x10004e50
mov eax, dword [ebp - 0x2c]
inc eax
mov dword [ebp - 0x2c], eax
cmp dword [ebp - 0x2c], 1
jg 0x10005027
push 4
lea ecx, [ebp - 0x2c0]
call fcn.100022ea
and dword [ebp - 4], 0
mov dword [ebp - 0x100], 0
jmp 0x10004e84
mov eax, dword [ebp - 0x100]
inc eax
mov dword [ebp - 0x100], eax
cmp dword [ebp - 0x100], 4
jge 0x10004ea6
push dword [ebp - 0x100]
lea ecx, [ebp - 0x2c0]
call fcn.10002363
mov dword [eax], 1
jmp 0x10004e77
push 0
lea ecx, [ebp - 0x2c0]
call fcn.10002363
and dword [eax], 0
jmp 0x10004edc
push 0
lea ecx, [ebp - 0x2c0]
call fcn.10002363
mov dword [ebp - 0x170], eax
mov eax, dword [ebp - 0x170]
mov eax, dword [eax]
inc eax
mov ecx, dword [ebp - 0x170]
mov dword [ecx], eax
push 0
lea ecx, [ebp - 0x2c0]
call fcn.10002363
cmp dword [eax], 1
jg 0x10005013
mov eax, dword [ebp - 0x2c]
mov eax, dword [ebp + eax*4 - 0x144]
mov dword [ebp - 0x43c], eax
mov eax, dword [ebp - 0x2c]
cmp dword [ebp + eax*4 - 0x144], 1
jg 0x10004f1b
mov dword [ebp - 0x2a0], 1
jmp 0x10004f22
and dword [ebp - 0x2a0], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x144]
cmp dword [ebp - 0x2a0], eax
je 0x10004f47
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x144], 0
jne 0x10004f5d
mov eax, dword [ebp - 0x2c]
cmp dword [ebp + eax*4 - 0x144], 0
jne 0x10004f5d
and dword [ebp - 0x2a8], 0
jmp 0x10004f67
mov dword [ebp - 0x2a8], 1
mov eax, dword [ebp - 0x2c]
mov eax, dword [ebp + eax*4 - 0x144]
cmp dword [ebp - 0x2a8], eax
jge 0x10004f85
mov dword [ebp - 0x15c], 1
jmp 0x10004f8c
and dword [ebp - 0x15c], 0
push 0
lea ecx, [ebp - 0x2c0]
call fcn.10002363
mov ecx, dword [ebp - 0x15c]
sub ecx, dword [eax]
mov dword [ebp - 0x54], ecx
cmp dword [ebp - 0x54], 0xfffffff6
jae 0x10004fb6
mov dword [ebp - 0x298], 1
jmp 0x10004fbd
and dword [ebp - 0x298], 0
mov eax, dword [ebp - 0x298]
neg eax
neg eax
mov dword [ebp - 0x5c], eax
mov dword [ebp - 0x54], 1
jmp 0x10004fda
mov eax, dword [ebp - 0x54]
dec eax
mov dword [ebp - 0x54], eax
cmp dword [ebp - 0x54], 0
jl 0x1000500e
mov dword [ebp - 0x5c], 0
jmp 0x10004ff0
mov eax, dword [ebp - 0x5c]
inc eax
mov dword [ebp - 0x5c], eax
cmp dword [ebp - 0x5c], 1
jg 0x1000500c
mov byte [ebp - 0x3d], 0
movzx eax, byte [ebp - 0x3d]
test eax, eax
je 0x1000500a
push 0
call dword [sym.imp.KERNEL32.dll_FindClose]
jmp 0x10004fe9
jmp 0x10004fd3
jmp 0x10004eb8
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x2c0]
call fcn.10002347
jmp 0x10004e49
jmp 0x10004e1a
mov byte [ebp - 0x4d], 0
movzx eax, byte [ebp - 0x4d]
test eax, eax
je 0x10005045
push 0
push 0x833
call dword [sym.imp.USER32.dll_TranslateMDISysAccel]
mov dword [ebp - 0x30], 0x1bf2
mov dword [ebp - 0x11c], 0xfffffffd
mov dword [ebp - 0x150], 0x3a33
mov dword [ebp - 0x324], str.nvhiks_hfmmfmeu_gczuodi_zbepe_cxplnx_qeg_fabjzw_lbovnleiv
cmp dword [ebp - 0x150], 0x3c30
jle 0x1000512d
and dword [ebp - 0x7c], 0
jmp 0x10005087
mov eax, dword [ebp - 0x7c]
inc eax
mov dword [ebp - 0x7c], eax
cmp dword [ebp - 0x7c], 0x4b72
jge 0x1000512d
and dword [ebp - 0x74], 0
jmp 0x100050a1
mov eax, dword [ebp - 0x74]
inc eax
mov dword [ebp - 0x74], eax
cmp dword [ebp - 0x74], 0x7537
jge 0x10005128
and dword [ebp - 0xdc], 0
jmp 0x100050c0
mov eax, dword [ebp - 0xdc]
inc eax
mov dword [ebp - 0xdc], eax
cmp dword [ebp - 0xdc], 0x77b
jge 0x10005123
mov eax, dword [ebp - 0x74]
and eax, dword [ebp - 0xdc]
or eax, dword [ebp - 0x7c]
cdq
mov dword [ebp - 0x330], eax
mov dword [ebp - 0x32c], edx
push dword [ebp - 0x32c]
push dword [ebp - 0x330]
lea ecx, [ebp - 0x4e4]
call fcn.10004d43
pop ecx
pop ecx
mov dword [ebp - 0x38c], eax
mov ecx, dword [ebp - 0x38c]
call fcn.10002db1
push eax
call fcn.10047823
pop ecx
lea ecx, [ebp - 0x4e4]
call fcn.10002da7
jmp 0x100050b3
jmp 0x1000509a
jmp 0x10005080
mov dword [ebp - 0x34], 0xffffffff
mov dword [ebp - 4], 1
cmp dword [ebp - 0x150], 0x39a4
jge 0x10005153
push dword [ebp - 0x324]
call fcn.10047823
pop ecx
jmp 0x1000516f
or dword [ebp - 4], 0xffffffff
jmp 0x10005179
mov dword [ebp - 0x130], 0xfffffffc
mov dword [ebp - 0x60], 7
mov dword [ebp - 0x3a4], 0xec7e318b
mov dword [ebp - 0x154], 0x7993
mov dword [ebp - 0x394], str.rzckpizsy_wjozspjd_unoq_fsvyrzo_pszrwu_xiwc_gfcearcdn_wfh_oxnasq_attg_uiwrwicgf_lyy_pwbm
cmp dword [ebp - 0x154], 0x7ac2
jle 0x10005258
and dword [ebp - 0x108], 0
jmp 0x100051ce
mov eax, dword [ebp - 0x108]
inc eax
mov dword [ebp - 0x108], eax
cmp dword [ebp - 0x108], 0x61c0
jge 0x10005258
and dword [ebp - 0x84], 0
jmp 0x100051f0
mov eax, dword [ebp - 0x84]
inc eax
mov dword [ebp - 0x84], eax
cmp dword [ebp - 0x84], 0x11a8
jge 0x10005253
mov eax, dword [ebp - 0x108]
and eax, dword [ebp - 0x84]
cdq
mov dword [ebp - 0x33c], eax
mov dword [ebp - 0x338], edx
push dword [ebp - 0x338]
push dword [ebp - 0x33c]
lea ecx, [ebp - 0x49c]
call fcn.10004d43
pop ecx
pop ecx
mov dword [ebp - 0x2d4], eax
mov ecx, dword [ebp - 0x2d4]
call fcn.10002db1
push eax
call fcn.10047823
pop ecx
lea ecx, [ebp - 0x49c]
call fcn.10002da7
jmp 0x100051e3
jmp 0x100051c1
mov dword [ebp - 0x3b8], 1
mov dword [ebp - 4], 3
cmp dword [ebp - 0x154], 0x761f
jge 0x10005281
push dword [ebp - 0x394]
call fcn.10047823
pop ecx
jmp 0x1000529d
or dword [ebp - 4], 0xffffffff
jmp 0x100052a7
mov dword [ebp - 0x2e0], 0xaaf75d59
mov eax, dword [ebp - 0x30]
mov dword [ebp - 0x11c], eax
cmp dword [ebp - 0x11c], 3
jge 0x100052cf
mov dword [ebp - 0x20c], 1
jmp 0x100052d6
and dword [ebp - 0x20c], 0
cmp dword [ebp - 0x34], 0x9017ca4e
jb 0x100052eb
mov dword [ebp - 0x158], 1
jmp 0x100052f2
and dword [ebp - 0x158], 0
mov eax, dword [ebp - 0x30]
cmp dword [ebp - 0x158], eax
jl 0x10005309
mov dword [ebp - 0x204], 1
jmp 0x10005310
and dword [ebp - 0x204], 0
mov eax, dword [ebp - 0x30]
cmp dword [ebp - 0x204], eax
je 0x10005327
mov dword [ebp - 0x164], 1
jmp 0x1000532e
and dword [ebp - 0x164], 0
mov eax, dword [ebp - 0x34]
imul eax, dword [ebp - 0x164]
cmp dword [ebp - 0x30], eax
jne 0x10005349
mov dword [ebp - 0x39c], 1
jmp 0x10005350
and dword [ebp - 0x39c], 0
mov eax, dword [ebp - 0x30]
mov dword [ebp - 0x3ec], eax
mov dword [ebp - 0x130], 0xffffffff
mov eax, dword [ebp - 0x30]
add eax, dword [ebp - 0x34]
jne 0x10005377
mov dword [ebp - 0x294], 1
jmp 0x1000537e
and dword [ebp - 0x294], 0
mov eax, dword [ebp - 0x34]
cmp dword [ebp - 0x294], eax
jl 0x1000539e
cmp dword [ebp - 0x130], 0
je 0x1000539e
mov dword [ebp - 0x16c], 1
jmp 0x100053a5
and dword [ebp - 0x16c], 0
cmp dword [ebp - 0x16c], 0x7790
jle 0x100053bd
mov dword [ebp - 0x174], 1
jmp 0x100053c4
and dword [ebp - 0x174], 0
mov eax, dword [ebp - 0x20c]
add eax, dword [ebp - 0x174]
cmp eax, dword [ebp - 0x34]
jle 0x100053e1
mov dword [ebp - 0x25c], 1
jmp 0x100053e8
and dword [ebp - 0x25c], 0
cmp dword [ebp - 0x25c], 4
jbe 0x100053fd
mov dword [ebp - 0x17c], 1
jmp 0x10005404
and dword [ebp - 0x17c], 0
mov eax, dword [ebp - 0x17c]
mov dword [ebp - 0x60], eax
cmp dword [ebp - 0x60], 0
je 0x10005417
cmp dword [ebp - 0x30], 0
cmp dword [ebp - 0x60], 0
je 0x1000542b
mov eax, dword [ebp - 0x34]
mov dword [ebp - 0x3a4], eax
jmp 0x100055db
mov dword [ebp - 0x110], 0x24380d33
mov dword [ebp - 0x2a4], 0x231966ba
cmp dword [ebp - 0x110], 0
jne 0x100054f6
mov eax, dword [ebp - 0x30]
mov dword [ebp - 0x448], eax
mov eax, 0xbbfe
test eax, eax
je 0x10005473
cmp dword [ebp - 0x110], 0
je 0x10005473
mov dword [ebp - 0x214], 1
jmp 0x1000547a
and dword [ebp - 0x214], 0
mov eax, dword [ebp - 0x3b8]
mov dword [ebp - 0x3f4], eax
mov eax, dword [ebp - 0x11c]
cmp dword [ebp - 0x214], eax
je 0x100054a0
mov dword [ebp - 0x184], 1
jmp 0x100054a7
and dword [ebp - 0x184], 0
mov eax, dword [ebp - 0x34]
cmp dword [ebp - 0x184], eax
jg 0x100054be
mov dword [ebp - 0x284], 1
jmp 0x100054c5
and dword [ebp - 0x284], 0
cmp dword [ebp - 0x284], 0xf5f
jne 0x100054dd
mov dword [ebp - 0x18c], 1
jmp 0x100054e4
and dword [ebp - 0x18c], 0
cmp dword [ebp - 0x18c], 0
jne 0x100054f6
and dword [ebp - 0x21c], 0
jmp 0x10005500
mov dword [ebp - 0x21c], 1
mov eax, dword [ebp - 0x110]
cmp dword [ebp - 0x21c], eax
jl 0x1000551a
mov dword [ebp - 0x194], 1
jmp 0x10005521
and dword [ebp - 0x194], 0
mov eax, dword [ebp - 0x110]
cmp dword [ebp - 0x194], eax
jl 0x1000553b
mov dword [ebp - 0x264], 1
jmp 0x10005542
and dword [ebp - 0x264], 0
mov eax, dword [ebp - 0x2a4]
cmp dword [ebp - 0x264], eax
jne 0x1000555c
mov dword [ebp - 0x19c], 1
jmp 0x10005563
and dword [ebp - 0x19c], 0
mov eax, dword [ebp - 0x19c]
neg eax
cmp eax, dword [ebp - 0x60]
jge 0x1000557c
mov dword [ebp - 0x31c], 1
jmp 0x10005583
and dword [ebp - 0x31c], 0
mov eax, dword [ebp - 0x130]
mov dword [ebp - 0x428], eax
cmp dword [ebp - 0x60], 0x6409
jne 0x100055a4
mov dword [ebp - 0x224], 1
jmp 0x100055ab
and dword [ebp - 0x224], 0
mov eax, dword [ebp - 0x34]
cmp dword [ebp - 0x224], eax
jge 0x100055c2
mov dword [ebp - 0x1a4], 1
jmp 0x100055c9
and dword [ebp - 0x1a4], 0
mov eax, dword [ebp - 0x1a4]
sub eax, dword [ebp - 0x2a4]
mov dword [ebp - 0x2e0], eax
push 1
lea ecx, [ebp - 0x400]
call fcn.100022ea
mov dword [ebp - 4], 5
mov dword [ebp - 0x8c], 0
jmp 0x10005608
mov eax, dword [ebp - 0x8c]
inc eax
mov dword [ebp - 0x8c], eax
cmp dword [ebp - 0x8c], 1
jge 0x1000562a
push dword [ebp - 0x8c]
lea ecx, [ebp - 0x400]
call fcn.10002363
mov dword [eax], 0x75dc
jmp 0x100055fb
mov byte [ebp - 0x36], 0
movzx eax, byte [ebp - 0x36]
test eax, eax
je 0x10005656
push 0
push 0x1c2a
push 0x206
push 0
push 0x1fbb
push 0x7c2
push 0
call dword [sym.imp.KERNEL32.dll_CreateFileA]
mov byte [ebp - 0x50], 0
movzx eax, byte [ebp - 0x50]
test eax, eax
je 0x10005680
push 0x70d
push 0
push 0x3a8
push 0x1511
push 0
push 0xaee
call dword [sym.imp.GDI32.dll_GetCharacterPlacementW]
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x400]
call fcn.10002347
push 1
lea ecx, [ebp - 0x3b4]
call fcn.100022ea
mov dword [ebp - 4], 6
mov dword [ebp - 0x3c], 0x53d8da8e
mov dword [ebp - 0x1ac], 0x20cf
mov dword [ebp - 0x2e8], str.sfu_nsk_bjmwfd_syqn_iwshlpv
cmp dword [ebp - 0x1ac], 0x23d5
jle 0x100057a5
and dword [ebp - 0x104], 0
jmp 0x100056e4
mov eax, dword [ebp - 0x104]
inc eax
mov dword [ebp - 0x104], eax
cmp dword [ebp - 0x104], 0x4f2e
jge 0x100057a5
and dword [ebp - 0x94], 0
jmp 0x1000570a
mov eax, dword [ebp - 0x94]
inc eax
mov dword [ebp - 0x94], eax
cmp dword [ebp - 0x94], 0x1c74
jge 0x100057a0
and dword [ebp - 0xf4], 0
jmp 0x10005730
mov eax, dword [ebp - 0xf4]
inc eax
mov dword [ebp - 0xf4], eax
cmp dword [ebp - 0xf4], 0x11e
jge 0x1000579b
mov eax, dword [ebp - 0x104]
mov ecx, dword [ebp - 0x94]
sar eax, cl
or eax, dword [ebp - 0xf4]
cdq
mov dword [ebp - 0x348], eax
mov dword [ebp - 0x344], edx
push dword [ebp - 0x344]
push dword [ebp - 0x348]
lea ecx, [ebp - 0x4b4]
call fcn.10004d43
pop ecx
pop ecx
mov dword [ebp - 0x34c], eax
mov ecx, dword [ebp - 0x34c]
call fcn.10002db1
push eax
call fcn.10047823
pop ecx
lea ecx, [ebp - 0x4b4]
call fcn.10002da7
jmp 0x10005723
jmp 0x100056fd
jmp 0x100056d7
mov byte [ebp - 4], 7
cmp dword [ebp - 0x1ac], 0x1e79
jge 0x100057c1
push dword [ebp - 0x2e8]
call fcn.10047823
pop ecx
jmp 0x100057dd
mov dword [ebp - 4], 6
jmp 0x100057ed
mov dword [ebp - 0x64], 0
jmp 0x100057fd
mov eax, dword [ebp - 0x64]
inc eax
mov dword [ebp - 0x64], eax
cmp dword [ebp - 0x64], 1
jge 0x10005819
push dword [ebp - 0x64]
lea ecx, [ebp - 0x3b4]
call fcn.10002363
mov dword [eax], 0x5d6c05ba
jmp 0x100057f6
mov dword [ebp - 0x3c], 0
jmp 0x10005829
mov eax, dword [ebp - 0x3c]
dec eax
mov dword [ebp - 0x3c], eax
cmp dword [ebp - 0x3c], 0
jl 0x10005853
push dword [ebp - 0x3c]
lea ecx, [ebp - 0x3b4]
call fcn.10002363
mov esi, eax
push dword [ebp - 0x3c]
lea ecx, [ebp - 0x3b4]
call fcn.10002363
mov eax, dword [eax]
mov dword [esi], eax
jmp 0x10005822
push 0
lea ecx, [ebp - 0x3b4]
call fcn.10002363
mov eax, dword [eax]
mov dword [ebp - 0x3c], eax
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x3b4]
call fcn.10002347
mov dword [ebp - 0x2f8], 0x7ad95e17
mov dword [ebp - 0x300], 0xf390197f
mov dword [ebp - 0x26c], 0x43e9
push 3
lea ecx, [ebp - 0x3c8]
call fcn.100022ea
mov dword [ebp - 4], 9
mov dword [ebp - 0x14], 0
jmp 0x100058b6
mov eax, dword [ebp - 0x14]
inc eax
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 1
jge 0x100058cc
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x390], 0x4e2db58
jmp 0x100058af
mov dword [ebp - 0x14], 0
jmp 0x100058dc
mov eax, dword [ebp - 0x14]
inc eax
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 3
jge 0x100058f2
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x410], 0xe4438bea
jmp 0x100058d5
mov dword [ebp - 0x14], 0
jmp 0x10005902
mov eax, dword [ebp - 0x14]
inc eax
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 1
jge 0x10005918
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x3a8], 0xc42206dd
jmp 0x100058fb
mov dword [ebp - 0x14], 0
jmp 0x10005928
mov eax, dword [ebp - 0x14]
inc eax
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 3
jge 0x10005941
push dword [ebp - 0x14]
lea ecx, [ebp - 0x3c8]
call fcn.10002363
and dword [eax], 0
jmp 0x10005921
push 0
lea ecx, [ebp - 0x3c8]
call fcn.10002363
mov dword [ebp - 0x22c], eax
mov eax, dword [ebp - 0x22c]
mov eax, dword [eax]
inc eax
mov ecx, dword [ebp - 0x22c]
mov dword [ecx], eax
push 4
pop eax
imul eax, eax, 0
mov esi, dword [ebp + eax - 0x390]
push 1
lea ecx, [ebp - 0x3c8]
call fcn.10002363
mov eax, dword [eax]
sub eax, 0x2ac30bca
cmp eax, esi
jge 0x10005996
mov dword [ebp - 0x2f0], 1
jmp 0x1000599d
and dword [ebp - 0x2f0], 0
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x410], 0
jne 0x100059b9
mov dword [ebp - 0x1b4], 1
jmp 0x100059c0
and dword [ebp - 0x1b4], 0
mov eax, dword [ebp - 0x1b4]
sub eax, dword [ebp - 0x26c]
mov dword [ebp - 0x358], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x358]
mov dword [ebp + eax - 0x410], ecx
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x2f8]
sub ecx, dword [ebp + eax - 0x3a8]
cmp ecx, dword [ebp - 0x26c]
jge 0x10005a0c
mov dword [ebp - 0x1bc], 1
jmp 0x10005a13
and dword [ebp - 0x1bc], 0
cmp dword [ebp - 0x1bc], 0x78029323
je 0x10005a2b
mov dword [ebp - 0x234], 1
jmp 0x10005a32
and dword [ebp - 0x234], 0
mov eax, dword [ebp - 0x234]
mov dword [ebp - 0x300], eax
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x3c8]
call fcn.10002347
movzx eax, byte [0x10080d8c]
test eax, eax
je 0x10005a6b
mov esi, 0x1007cb00
mov edi, dword [ebp + 8]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
mov eax, dword [ebp + 8]
jmp 0x10007022
mov dword [ebp - 0x404], 0x1007cb00
mov dword [ebp - 0xc4], 0xfffffffa
mov dword [ebp - 0x434], 0x6e85fcb4
mov dword [ebp - 0xf0], 0xbbbc254e
mov dword [ebp - 0x124], 0xcf59f89f
mov dword [ebp - 0x134], 0x305aba9a
mov dword [ebp - 0xf8], 0xffffffff
mov dword [ebp - 0x320], 0xfc24489b
mov dword [ebp - 0xe0], 0x2dd8607f
mov dword [ebp - 0x1c4], 0x62a
mov dword [ebp - 0x308], str.qxaqr_iwiwjco_ysnnzhp_mkvbcj_bblwp
cmp dword [ebp - 0x1c4], 0x838
jle 0x10005bfb
and dword [ebp - 0xfc], 0
jmp 0x10005aff
mov eax, dword [ebp - 0xfc]
inc eax
mov dword [ebp - 0xfc], eax
cmp dword [ebp - 0xfc], 0x432b
jge 0x10005bf1
and dword [ebp - 0x114], 0
jmp 0x10005b25
mov eax, dword [ebp - 0x114]
inc eax
mov dword [ebp - 0x114], eax
cmp dword [ebp - 0x114], 0x20d
jge 0x10005bec
and dword [ebp - 0xac], 0
jmp 0x10005b4b
mov eax, dword [ebp - 0xac]
inc eax
mov dword [ebp - 0xac], eax
cmp dword [ebp - 0xac], 0x3417
jge 0x10005be7
and dword [ebp - 0xb4], 0
jmp 0x10005b71
mov eax, dword [ebp - 0xb4]
inc eax
mov dword [ebp - 0xb4], eax
cmp dword [ebp - 0xb4], 0x5d9b
jge 0x10005be2
mov ecx, dword [ebp - 0x114]
add ecx, dword [ebp - 0xac]
mov eax, dword [ebp - 0xfc]
shl eax, cl
or eax, dword [ebp - 0xb4]
cdq
mov dword [ebp - 0x354], eax
mov dword [ebp - 0x350], edx
push dword [ebp - 0x350]
push dword [ebp - 0x354]
lea ecx, [ebp - 0x4cc]
call fcn.10004d43
pop ecx
pop ecx
mov dword [ebp - 0x364], eax
mov ecx, dword [ebp - 0x364]
call fcn.10002db1
push eax
call fcn.10047823
pop ecx
lea ecx, [ebp - 0x4cc]
call fcn.10002da7
jmp 0x10005b64
jmp 0x10005b3e
jmp 0x10005b18
jmp 0x10005af2
push 0
push 0
call dword [sym.imp.USER32.dll_LoadIconA]
mov dword [ebp - 0xcc], 0x48792891
mov dword [ebp - 4], 0xa
cmp dword [ebp - 0x1c4], 0x477
jge 0x10005c24
push dword [ebp - 0x308]
call fcn.10047823
pop ecx
jmp 0x10005c40
or dword [ebp - 4], 0xffffffff
jmp 0x10005c4a
mov dword [ebp - 0x28c], 0x43b7
mov dword [ebp - 0x398], str.obdfwixag_ewremuc_bakiffsd_iffqkkar_ghuhpsuof_mdaymxr_lgfdz_gugz_nazp_phmfrnlth_ssixy
cmp dword [ebp - 0x28c], 0x441a
jle 0x10005ce9
push 0
call dword [sym.imp.KERNEL32.dll_GlobalLock]
and dword [ebp - 0x10c], 0
jmp 0x10005c88
mov eax, dword [ebp - 0x10c]
inc eax
mov dword [ebp - 0x10c], eax
cmp dword [ebp - 0x10c], 0x70c
jge 0x10005ce9
and dword [ebp - 0xbc], 0
jmp 0x10005caa
mov eax, dword [ebp - 0xbc]
inc eax
mov dword [ebp - 0xbc], eax
cmp dword [ebp - 0xbc], 0x4838
jge 0x10005ce7
mov eax, dword [ebp - 0x10c]
and eax, dword [ebp - 0xbc]
cdq
mov dword [ebp - 0x360], eax
mov dword [ebp - 0x35c], edx
push dword [ebp - 0x35c]
push dword [ebp - 0x360]
mov ecx, 0x1007fc58
call fcn.10002dd1
jmp 0x10005c9d
jmp 0x10005c7b
mov dword [ebp - 4], 0xc
cmp dword [ebp - 0x28c], 0x4116
jge 0x10005d0c
mov edx, dword [ebp - 0x398]
mov ecx, 0x1007fc58
call fcn.10004788
jmp 0x10005d28
or dword [ebp - 4], 0xffffffff
jmp 0x10005d32
mov dword [ebp - 0x138], 1
mov dword [ebp - 0x318], 0xfffffffe
mov dword [ebp - 0x20], 0
jmp 0x10005d56
mov eax, dword [ebp - 0x20]
inc eax
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 4
jge 0x10005d6c
mov eax, dword [ebp - 0x20]
mov dword [ebp + eax*4 - 0x2d0], 0x2ff40fc0
jmp 0x10005d4f
mov dword [ebp - 0x20], 0
jmp 0x10005d7c
mov eax, dword [ebp - 0x20]
inc eax
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 1
jge 0x10005d92
mov eax, dword [ebp - 0x20]
mov dword [ebp + eax*4 - 0x1cc], 1
jmp 0x10005d75
push 4
pop eax
imul eax, eax, 3
cmp dword [ebp + eax - 0x2d0], 0
je 0x10006034
mov eax, dword [ebp - 0x138]
dec eax
mov dword [ebp - 0x138], eax
imul eax, dword [ebp - 0xc4], 0x8be7
mov ecx, dword [ebp - 0xe0]
imul ecx, eax
mov eax, dword [ebp - 0x138]
add eax, ecx
mov dword [ebp - 0xe0], eax
je 0x10005deb
cmp dword [ebp - 0xe0], 0
je 0x10005deb
mov dword [ebp - 0x310], 1
jmp 0x10005df2
and dword [ebp - 0x310], 0
mov eax, dword [ebp - 0xcc]
mov dword [ebp - 0x414], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x1cc]
mov dword [ebp - 0x23c], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x23c]
mov dword [ebp + eax - 0x1cc], ecx
cmp dword [ebp - 0x23c], 0x1302
jge 0x10005e3c
mov dword [ebp - 0x1d4], 1
jmp 0x10005e43
and dword [ebp - 0x1d4], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x2d0]
sub eax, dword [ebp - 0x1d4]
cmp eax, 0xfffffff7
jle 0x10005e67
mov dword [ebp - 0x274], 1
jmp 0x10005e6e
and dword [ebp - 0x274], 0
mov eax, dword [ebp - 0xc4]
cmp dword [ebp - 0x274], eax
jge 0x10005e88
mov dword [ebp - 0x1dc], 1
jmp 0x10005e8f
and dword [ebp - 0x1dc], 0
mov eax, dword [ebp - 0x134]
cmp dword [ebp - 0x1dc], eax
jg 0x10005ea9
mov dword [ebp - 0x244], 1
jmp 0x10005eb0
and dword [ebp - 0x244], 0
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x2d0]
cmp eax, dword [ebp - 0x244]
jge 0x10005ed0
mov dword [ebp - 0x1e4], 1
jmp 0x10005ed7
and dword [ebp - 0x1e4], 0
cmp dword [ebp - 0x1e4], 0
ja 0x10005eec
mov dword [ebp - 0x370], 1
jmp 0x10005ef3
and dword [ebp - 0x370], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x2d0]
mov dword [ebp - 0x3d8], eax
mov eax, 0x6d70
sub eax, dword [ebp - 0xf8]
cmp eax, 0xcefc
jle 0x10005f24
mov dword [ebp - 0x29c], 1
jmp 0x10005f2b
and dword [ebp - 0x29c], 0
mov eax, dword [ebp - 0x29c]
mov dword [ebp - 0xc4], eax
mov eax, dword [ebp - 0xc4]
mov dword [ebp - 0x424], eax
mov eax, dword [ebp - 0x124]
mov dword [ebp - 0x444], eax
mov eax, dword [ebp - 0xf0]
mov dword [ebp - 0x44c], eax
mov eax, dword [ebp - 0xf8]
mov dword [ebp - 0x42c], eax
mov eax, dword [ebp - 0xf8]
sub eax, 0x5ad7a4a1
jne 0x10005f84
push 4
pop eax
imul eax, eax, 3
cmp dword [ebp + eax - 0x2d0], 0
je 0x10005f99
cmp dword [ebp - 0x318], 0
je 0x10005f99
mov dword [ebp - 0x3bc], 1
jmp 0x10005fa0
and dword [ebp - 0x3bc], 0
push 4
pop eax
imul eax, eax, 3
mov eax, dword [ebp + eax - 0x2d0]
mov dword [ebp - 0x3dc], eax
push 4
pop eax
imul eax, eax, 3
mov ecx, dword [ebp - 0xf0]
sub ecx, dword [ebp + eax - 0x2d0]
mov dword [ebp - 0x124], ecx
mov eax, dword [ebp - 0x124]
mov dword [ebp - 0x3e0], eax
mov dword [ebp - 0xf0], 0xc86e89be
mov eax, dword [ebp - 0xf0]
mov dword [ebp - 0x134], eax
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x134]
sub ecx, dword [ebp + eax - 0x2d0]
cmp ecx, 0xa718
je 0x10006015
mov dword [ebp - 0x1ec], 1
jmp 0x1000601c
and dword [ebp - 0x1ec], 0
cmp dword [ebp - 0x1ec], 0x9ce
jne 0x10006034
mov dword [ebp - 0x24c], 1
jmp 0x1000603b
and dword [ebp - 0x24c], 0
cmp dword [ebp - 0x24c], 0xb88c8eca
jne 0x10006053
mov dword [ebp - 0x1f4], 1
jmp 0x1000605a
and dword [ebp - 0x1f4], 0
mov eax, dword [ebp - 0x1f4]
neg eax
cmp eax, dword [ebp - 0x320]
jge 0x1000607f
mov eax, 0xd727
test eax, eax
je 0x1000607f
mov dword [ebp - 0x27c], 1
jmp 0x10006086
and dword [ebp - 0x27c], 0
mov eax, dword [ebp - 0x27c]
mov dword [ebp - 0xcc], eax
cmp dword [ebp - 0xcc], 0
je 0x100060b0
cmp dword [ebp - 0xcc], 0
je 0x100060b0
mov dword [ebp - 0x1fc], 1
jmp 0x100060b7
and dword [ebp - 0x1fc], 0
mov eax, dword [ebp - 0x1fc]
mov dword [ebp - 0xf8], eax
mov dword [ebp - 0x254], 0x34af
mov dword [ebp - 0x328], str.rbtpm_wdz_kpdcbtm_ckwxgs_wqrxiuuln_rdmlrup_vgd
cmp dword [ebp - 0x254], 0x360e
jle 0x1000618b
and dword [ebp - 0xd4], 0
jmp 0x100060fd
mov eax, dword [ebp - 0xd4]
inc eax
mov dword [ebp - 0xd4], eax
cmp dword [ebp - 0xd4], 0x5a8
jge 0x10006179
and dword [ebp - 0x68], 0
jmp 0x10006116
mov eax, dword [ebp - 0x68]
inc eax
mov dword [ebp - 0x68], eax
cmp dword [ebp - 0x68], 0x4294
jge 0x10006174
mov eax, dword [ebp - 0xd4]
imul eax, dword [ebp - 0x68]
cdq
mov dword [ebp - 0x36c], eax
mov dword [ebp - 0x368], edx
push dword [ebp - 0x368]
push dword [ebp - 0x36c]
lea ecx, [ebp - 0x4fc]
call fcn.10004d43
pop ecx
pop ecx
mov dword [ebp - 0x37c], eax
mov ecx, dword [ebp - 0x37c]
call fcn.10002db1
push eax
call fcn.10047823
pop ecx
lea ecx, [ebp - 0x4fc]
call fcn.10002da7
jmp 0x1000610f
jmp 0x100060f0
push 0x7ae
push 0x20e3
push 0
call dword [sym.imp.USER32.dll_OffsetRect]
mov dword [ebp - 0x3e8], 0x1007cb04
mov dword [ebp - 4], 0xe
cmp dword [ebp - 0x254], 0x32e2
jge 0x100061b4
push dword [ebp - 0x328]
call fcn.10047823
pop ecx
jmp 0x100061d0
or dword [ebp - 4], 0xffffffff
jmp 0x100061da
push 2
lea ecx, [ebp - 0x420]
call fcn.100022ea
mov dword [ebp - 4], 0x10
mov dword [ebp - 0x78], 0x3532fe22
mov dword [ebp - 0x70], 0
jmp 0x10006205
mov eax, dword [ebp - 0x70]
inc eax
mov dword [ebp - 0x70], eax
cmp dword [ebp - 0x70], 2
jge 0x10006221
push dword [ebp - 0x70]
lea ecx, [ebp - 0x420]
call fcn.10002363
mov dword [eax], 1
jmp 0x100061fe
mov dword [ebp - 0x78], 0
jmp 0x10006231
mov eax, dword [ebp - 0x78]
inc eax
mov dword [ebp - 0x78], eax
cmp dword [ebp - 0x78], 1
jg 0x1000624f
mov byte [ebp - 0x45], 0
movzx eax, byte [ebp - 0x45]
test eax, eax
je 0x1000624d
push 0
push 0
call dword [sym.imp.GDI32.dll_GetNearestPaletteIndex]
jmp 0x1000622a
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x420]
call fcn.10002347
mov byte [0x10080d8c], 1
xor eax, eax
inc eax
imul eax, eax, 0x148
add eax, 0x1007c5f0
mov dword [ebp - 0x210], eax
xor eax, eax
inc eax
imul eax, eax, 0x1c
add eax, 0x1007c5f0
mov dword [ebp - 0x120], eax
push 3
lea ecx, [ebp - 0x2b4]
call fcn.100022ea
mov dword [ebp - 4], 0x11
mov dword [ebp - 0x44], 7
push 3
lea ecx, [ebp - 0x3d4]
call fcn.100022ea
mov byte [ebp - 4], 0x12
mov dword [ebp - 0x18], 0
jmp 0x100062c6
mov eax, dword [ebp - 0x18]
inc eax
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 1
jge 0x100062d9
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x1c], 0xfffffffa
jmp 0x100062bf
mov dword [ebp - 0x18], 0
jmp 0x100062e9
mov eax, dword [ebp - 0x18]
inc eax
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 4
jge 0x100062ff
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x45c], 0xb5d1cb6a
jmp 0x100062e2
mov dword [ebp - 0x18], 0
jmp 0x1000630f
mov eax, dword [ebp - 0x18]
inc eax
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 3
jge 0x10006328
push dword [ebp - 0x18]
lea ecx, [ebp - 0x2b4]
call fcn.10002363
and dword [eax], 0
jmp 0x10006308
mov dword [ebp - 0x18], 0
jmp 0x10006338
mov eax, dword [ebp - 0x18]
inc eax
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 3
jge 0x10006354
push dword [ebp - 0x18]
lea ecx, [ebp - 0x3d4]
call fcn.10002363
mov dword [eax], 9
jmp 0x10006331
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0x1c], 0
jmp 0x10006379
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x1c]
inc eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x1c], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x1c], 0xf
jg 0x10006781
mov dword [ebp - 0x80], 0xe46c
mov dword [ebp - 0x1b8], 0x927db404
mov dword [ebp - 0x28], 0
jmp 0x100063ab
mov eax, dword [ebp - 0x28]
inc eax
mov dword [ebp - 0x28], eax
cmp dword [ebp - 0x28], 1
jge 0x100063c1
mov eax, dword [ebp - 0x28]
mov dword [ebp + eax*4 - 0x13c], 0x37ae9f90
jmp 0x100063a4
mov dword [ebp - 0x28], 0
jmp 0x100063d1
mov eax, dword [ebp - 0x28]
inc eax
mov dword [ebp - 0x28], eax
cmp dword [ebp - 0x28], 3
jge 0x100063e7
mov eax, dword [ebp - 0x28]
mov dword [ebp + eax*4 - 0x468], 0xfc6a3f0b
jmp 0x100063ca
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x1c]
add eax, 0x310c
cmp dword [ebp - 0x80], eax
je 0x10006407
mov dword [ebp - 0x160], 1
jmp 0x1000640e
and dword [ebp - 0x160], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x1c]
cmp eax, dword [ebp - 0x80]
jle 0x10006429
mov dword [ebp - 0x12c], 1
jmp 0x10006430
and dword [ebp - 0x12c], 0
push 4
pop eax
shl eax, 1
mov ecx, dword [ebp - 0x12c]
mov dword [ebp + eax - 0x45c], ecx
cmp dword [ebp - 0x12c], 1
jne 0x10006457
mov dword [ebp - 0x14c], 1
jmp 0x1000645e
and dword [ebp - 0x14c], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x1c]
cmp dword [ebp - 0x14c], eax
jg 0x1000648b
push 0
lea ecx, [ebp - 0x2b4]
call fcn.10002363
cmp dword [eax], 0
jne 0x1000648b
and dword [ebp - 0x3a0], 0
jmp 0x10006495
mov dword [ebp - 0x3a0], 1
push 1
lea ecx, [ebp - 0x2b4]
call fcn.10002363
mov eax, dword [ebp - 0x80]
mov dword [ebp - 0x3f0], eax
push 2
lea ecx, [ebp - 0x2b4]
call fcn.10002363
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x1c]
mov dword [ebp - 0x430], eax
xor eax, eax
inc eax
mov dword [ebp - 0x168], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x168]
mov dword [ebp + eax - 0x13c], ecx
mov eax, dword [ebp - 0x160]
cmp eax, dword [ebp - 0x168]
je 0x10006504
mov eax, 0xd727
test eax, eax
jne 0x10006504
and dword [ebp - 0x148], 0
jmp 0x1000650e
mov dword [ebp - 0x148], 1
mov eax, dword [ebp - 0x80]
cmp dword [ebp - 0x148], eax
jne 0x10006525
mov dword [ebp - 0x178], 1
jmp 0x1000652c
and dword [ebp - 0x178], 0
cmp dword [ebp - 0x178], 0xffffffff
je 0x10006541
mov dword [ebp - 0x180], 1
jmp 0x10006548
and dword [ebp - 0x180], 0
imul eax, dword [ebp - 0x180], 0xbd79
test eax, eax
je 0x10006569
push 8
pop eax
test eax, eax
je 0x10006569
mov dword [ebp - 0x188], 1
jmp 0x10006570
and dword [ebp - 0x188], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x1c]
cmp eax, dword [ebp - 0x188]
jg 0x1000658e
mov dword [ebp - 0x190], 1
jmp 0x10006595
and dword [ebp - 0x190], 0
mov eax, dword [ebp - 0x44]
cmp dword [ebp - 0x190], eax
je 0x100065ac
mov dword [ebp - 0x198], 1
jmp 0x100065b3
and dword [ebp - 0x198], 0
push 0
lea ecx, [ebp - 0x2b4]
call fcn.10002363
mov ecx, dword [ebp - 0x198]
cmp ecx, dword [eax]
jle 0x100065d6
mov dword [ebp - 0x1a0], 1
jmp 0x100065dd
and dword [ebp - 0x1a0], 0
mov esi, dword [ebp - 0x44]
add esi, dword [ebp - 0x1a0]
push 2
lea ecx, [ebp - 0x3d4]
call fcn.10002363
mov dword [eax], esi
mov dword [ebp - 0x44], 0
jmp 0x10006605
mov eax, dword [ebp - 0x44]
inc eax
mov dword [ebp - 0x44], eax
cmp dword [ebp - 0x44], 0x2f
jge 0x1000677c
mov dword [ebp - 0x88], 0x67d3
mov dword [ebp - 0x334], 0xc826ffea
mov esi, dword [ebp - 0x44]
push 1
lea ecx, [ebp - 0x3d4]
call fcn.10002363
mov dword [eax], esi
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x45c]
mov dword [ebp - 0x1a8], eax
push 4
pop eax
shl eax, 1
mov ecx, dword [ebp - 0x1a8]
mov dword [ebp + eax - 0x468], ecx
mov eax, dword [ebp - 0x88]
cmp dword [ebp - 0x1a8], eax
jge 0x10006673
mov dword [ebp - 0x1b0], 1
jmp 0x1000667a
and dword [ebp - 0x1b0], 0
mov eax, dword [ebp - 0x1b0]
mov dword [ebp - 0x1b8], eax
mov eax, dword [ebp - 0x88]
add eax, dword [ebp - 0x1b8]
cmp dword [ebp - 0x88], eax
jge 0x100066a6
mov dword [ebp - 0x1c0], 1
jmp 0x100066ad
and dword [ebp - 0x1c0], 0
push 0
lea ecx, [ebp - 0x2b4]
call fcn.10002363
mov eax, dword [eax]
cmp eax, dword [ebp - 0x1c0]
jle 0x100066d0
mov dword [ebp - 0x1d0], 1
jmp 0x100066d7
and dword [ebp - 0x1d0], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x13c]
mov dword [ebp - 0x1c8], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x1c8]
mov dword [ebp + eax - 0x13c], ecx
mov eax, dword [ebp - 0x1c8]
cmp eax, dword [ebp - 0x1d0]
jl 0x10006717
mov dword [ebp - 0x1d8], 1
jmp 0x1000671e
and dword [ebp - 0x1d8], 0
cmp dword [ebp - 0x1d8], 0x20ba2c16
jne 0x10006736
mov dword [ebp - 0x1e0], 1
jmp 0x1000673d
and dword [ebp - 0x1e0], 0
mov eax, dword [ebp - 0x88]
cmp dword [ebp - 0x1e0], eax
jg 0x10006761
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x1c], 0
jne 0x10006761
and dword [ebp - 0x1e8], 0
jmp 0x1000676b
mov dword [ebp - 0x1e8], 1
mov eax, dword [ebp - 0x1e8]
mov dword [ebp - 0x334], eax
jmp 0x100065fe
jmp 0x10006364
mov byte [ebp - 0x4e], 0
movzx eax, byte [ebp - 0x4e]
test eax, eax
je 0x1000679c
push 0xb19
push 0
push 0
call dword [sym.imp.KERNEL32.dll_ExpandEnvironmentStringsW]
mov byte [ebp - 4], 0x11
lea ecx, [ebp - 0x3d4]
call fcn.10002347
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x2b4]
call fcn.10002347
mov eax, dword [ebp - 0x210]
mov dword [0x1007cb00], eax
mov dword [ebp - 0x440], 0xa6847dfa
mov byte [ebp - 0x4f], 0
movzx eax, byte [ebp - 0x4f]
test eax, eax
je 0x100067e1
call dword [sym.imp.KERNEL32.dll_GetACP]
mov byte [ebp - 0x35], 0
movzx eax, byte [ebp - 0x35]
test eax, eax
je 0x100067fc
push 0
push 0x1dd1
push 0
call dword [sym.imp.GDI32.dll_GetObjectW]
mov eax, dword [ebp - 0x120]
mov dword [0x1007cb04], eax
push 3
lea ecx, [ebp - 0xec]
call fcn.100022ea
mov dword [ebp - 4], 0x13
mov dword [ebp - 0x4c], 0xffffffff
mov dword [ebp - 0x340], 0xffffffff
mov dword [ebp - 0x90], 0
jmp 0x10006845
mov eax, dword [ebp - 0x90]
inc eax
mov dword [ebp - 0x90], eax
cmp dword [ebp - 0x90], 3
jge 0x10006867
push dword [ebp - 0x90]
lea ecx, [ebp - 0xec]
call fcn.10002363
mov dword [eax], 0xfddd3f46
jmp 0x10006838
push 0
lea ecx, [ebp - 0xec]
call fcn.10002363
mov esi, eax
push 0
lea ecx, [ebp - 0xec]
call fcn.10002363
mov eax, dword [eax]
cmp eax, dword [esi]
jle 0x10006895
mov dword [ebp - 0x200], 1
jmp 0x1000689c
and dword [ebp - 0x200], 0
push 0
lea ecx, [ebp - 0xec]
call fcn.10002363
push 0
lea ecx, [ebp - 0xec]
call fcn.10002363
mov eax, dword [eax]
mov dword [ebp - 0x4c], eax
mov eax, dword [ebp - 0x4c]
dec eax
cmp eax, 0x2fd2
jl 0x100068d2
mov dword [ebp - 0x1f0], 1
jmp 0x100068d9
and dword [ebp - 0x1f0], 0
push 0
lea ecx, [ebp - 0xec]
call fcn.10002363
mov ecx, dword [ebp - 0x1f0]
cmp ecx, dword [eax]
jg 0x100068fc
mov dword [ebp - 0x1f8], 1
jmp 0x10006903
and dword [ebp - 0x1f8], 0
push 2
lea ecx, [ebp - 0xec]
call fcn.10002363
mov esi, dword [eax]
sub esi, dword [ebp - 0x1f8]
push 1
lea ecx, [ebp - 0xec]
call fcn.10002363
cmp esi, dword [eax]
jl 0x10006935
mov dword [ebp - 0x388], 1
jmp 0x1000693c
and dword [ebp - 0x388], 0
push 0
lea ecx, [ebp - 0xec]
call fcn.10002363
push 0
lea ecx, [ebp - 0xec]
call fcn.10002363
mov esi, dword [ebp - 0x200]
imul esi, dword [eax]
push 0
lea ecx, [ebp - 0xec]
call fcn.10002363
add esi, dword [eax]
push 0
lea ecx, [ebp - 0xec]
call fcn.10002363
cmp esi, dword [eax]
jne 0x1000698b
mov dword [ebp - 0x208], 1
jmp 0x10006992
and dword [ebp - 0x208], 0
mov eax, dword [ebp - 0x208]
mov dword [ebp - 0x340], eax
mov dword [ebp - 0x4c], 0
jmp 0x100069ae
mov eax, dword [ebp - 0x4c]
inc eax
mov dword [ebp - 0x4c], eax
cmp dword [ebp - 0x4c], 3
jge 0x100069c7
push dword [ebp - 0x4c]
lea ecx, [ebp - 0xec]
call fcn.10002363
or dword [eax], 0xffffffff
jmp 0x100069a7
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xec]
call fcn.10002347
push 4
pop eax
imul eax, eax, 0
push 4
pop ecx
imul ecx, ecx, 0
mov edx, dword [ebp - 0x120]
mov edx, dword [edx + eax]
mov eax, dword [ebp - 0x210]
mov ecx, dword [eax + ecx]
call fcn.10001180
mov dword [ebp - 0x2d8], eax
push dword [ebp - 0x120]
mov edx, 0x1007c9d4
mov ecx, dword [ebp - 0x2d8]
call fcn.10004d7b
pop ecx
push 2
lea ecx, [ebp - 0xa4]
call fcn.100022ea
mov dword [ebp - 4], 0x14
mov dword [ebp - 0x58], 0
mov dword [ebp - 0x218], 0x6fe0
mov dword [ebp - 0x2dc], str.kuyb_kkkmsfz_tlttxuy_blpstzhe_dlarbg
cmp dword [ebp - 0x218], 0x70eb
jle 0x10006ac5
and dword [ebp - 0x98], 0
jmp 0x10006a67
mov eax, dword [ebp - 0x98]
inc eax
mov dword [ebp - 0x98], eax
cmp dword [ebp - 0x98], 0x6e
jge 0x10006ac5
and dword [ebp - 0xa8], 0
jmp 0x10006a86
mov eax, dword [ebp - 0xa8]
inc eax
mov dword [ebp - 0xa8], eax
cmp dword [ebp - 0xa8], 0x5681
jge 0x10006ac3
mov eax, dword [ebp - 0x98]
sub eax, dword [ebp - 0xa8]
cdq
mov dword [ebp - 0x378], eax
mov dword [ebp - 0x374], edx
push dword [ebp - 0x374]
push dword [ebp - 0x378]
mov ecx, 0x1007fc58
call fcn.10002dd1
jmp 0x10006a79
jmp 0x10006a5a
mov dword [ebp - 0xd8], 6
mov byte [ebp - 4], 0x15
cmp dword [ebp - 0x218], 0x6d4a
jge 0x10006aef
mov edx, dword [ebp - 0x2dc]
mov ecx, 0x1007fc58
call fcn.10004788
jmp 0x10006b0b
mov dword [ebp - 4], 0x14
jmp 0x10006b1b
mov dword [ebp - 0xb0], 0
jmp 0x10006b34
mov eax, dword [ebp - 0xb0]
inc eax
mov dword [ebp - 0xb0], eax
cmp dword [ebp - 0xb0], 2
jge 0x10006b56
push dword [ebp - 0xb0]
lea ecx, [ebp - 0xa4]
call fcn.10002363
mov dword [eax], 6
jmp 0x10006b27
push 0
lea ecx, [ebp - 0xa4]
call fcn.10002363
mov esi, eax
push 1
lea ecx, [ebp - 0xa4]
call fcn.10002363
mov eax, dword [eax]
cmp eax, dword [esi]
jg 0x10006b84
mov dword [ebp - 0x220], 1
jmp 0x10006b8b
and dword [ebp - 0x220], 0
push 0
lea ecx, [ebp - 0xa4]
call fcn.10002363
mov ecx, dword [ebp - 0x220]
cmp ecx, dword [eax]
jle 0x10006bae
mov dword [ebp - 0x228], 1
jmp 0x10006bb5
and dword [ebp - 0x228], 0
push 0
lea ecx, [ebp - 0xa4]
call fcn.10002363
mov ecx, dword [ebp - 0x228]
cmp ecx, dword [eax]
jg 0x10006bd8
mov dword [ebp - 0x2e4], 1
jmp 0x10006bdf
and dword [ebp - 0x2e4], 0
push 0
lea ecx, [ebp - 0xa4]
call fcn.10002363
push 0
lea ecx, [ebp - 0xa4]
call fcn.10002363
cmp dword [eax], 0x4df6
jne 0x10006c0d
mov dword [ebp - 0x230], 1
jmp 0x10006c14
and dword [ebp - 0x230], 0
mov eax, dword [ebp - 0x230]
mov dword [ebp - 0x58], eax
mov eax, dword [ebp - 0x58]
sub eax, 0x2c32
je 0x10006fa3
mov dword [ebp - 0x3e4], 0xfffffffe
mov dword [ebp - 0x2f4], 0
mov dword [ebp - 0x238], 0x2710
mov dword [ebp - 0x2ec], str.obglj_qdfxrhqm_bdlgrkqvk_wiqltycea_hryeu_wvecabs_acjk
cmp dword [ebp - 0x238], 0x28cb
jle 0x10006d0e
and dword [ebp - 0xb8], 0
jmp 0x10006c79
mov eax, dword [ebp - 0xb8]
inc eax
mov dword [ebp - 0xb8], eax
cmp dword [ebp - 0xb8], 0x53a7
jge 0x10006d0e
and dword [ebp - 0xc0], 0
jmp 0x10006c9f
mov eax, dword [ebp - 0xc0]
inc eax
mov dword [ebp - 0xc0], eax
cmp dword [ebp - 0xc0], 0x443
jge 0x10006d09
and dword [ebp - 0xc8], 0
jmp 0x10006cc1
mov eax, dword [ebp - 0xc8]
inc eax
mov dword [ebp - 0xc8], eax
cmp dword [ebp - 0xc8], 0x66d9
jge 0x10006d07
mov eax, dword [ebp - 0xb8]
cdq
idiv dword [ebp - 0xc0]
add edx, dword [ebp - 0xc8]
mov eax, edx
cdq
mov dword [ebp - 0x384], eax
mov dword [ebp - 0x380], edx
push dword [ebp - 0x380]
push dword [ebp - 0x384]
mov ecx, 0x1007fc58
call fcn.10002dd1
jmp 0x10006cb4
jmp 0x10006c92
jmp 0x10006c6c
mov dword [ebp - 0x250], 0
mov byte [ebp - 4], 0x17
cmp dword [ebp - 0x238], 0x23bb
jge 0x10006d38
mov edx, dword [ebp - 0x2ec]
mov ecx, 0x1007fc58
call fcn.10004788
jmp 0x10006d54
mov dword [ebp - 4], 0x14
jmp 0x10006d64
mov dword [ebp - 0x304], 0x65e4bc79
mov dword [ebp - 0x438], 0
mov dword [ebp - 0xd0], 0x3e1fe01a
mov dword [ebp - 0x280], 0x3b8cd6c3
mov dword [ebp - 0x24], 0
jmp 0x10006d9c
mov eax, dword [ebp - 0x24]
inc eax
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 3
jge 0x10006db2
mov eax, dword [ebp - 0x24]
mov dword [ebp + eax*4 - 0x474], 0xffffffff
jmp 0x10006d95
mov dword [ebp - 0x24], 0
jmp 0x10006dc2
mov eax, dword [ebp - 0x24]
inc eax
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 4
jge 0x10006dd8
mov eax, dword [ebp - 0x24]
mov dword [ebp + eax*4 - 0x484], 0x6ae4d7d9
jmp 0x10006dbb
mov eax, dword [ebp - 0xd8]
inc eax
mov dword [ebp - 0xd8], eax
mov eax, dword [ebp - 0xd0]
mov ecx, dword [ebp - 0xd0]
inc ecx
mov dword [ebp - 0xd0], ecx
test eax, eax
je 0x10006f87
cmp dword [ebp - 0xd0], 1
jne 0x10006e15
mov dword [ebp - 0x240], 1
jmp 0x10006e1c
and dword [ebp - 0x240], 0
mov eax, dword [ebp - 0x240]
sub eax, dword [ebp - 0xd8]
mov dword [ebp - 0x2f4], eax
cmp dword [ebp - 0x58], 0xc87c
jne 0x10006e52
mov eax, 0x1dbc
test eax, eax
je 0x10006e52
mov eax, 0x28b
test eax, eax
je 0x10006e52
and dword [ebp - 0x248], 0
jmp 0x10006e5c
mov dword [ebp - 0x248], 1
mov eax, dword [ebp - 0x58]
cmp dword [ebp - 0x248], eax
jg 0x10006e73
mov dword [ebp - 0x2fc], 1
jmp 0x10006e7a
and dword [ebp - 0x2fc], 0
push 0
lea ecx, [ebp - 0xa4]
call fcn.10002363
mov eax, dword [ebp - 0xd8]
imul eax, dword [ebp - 0x58]
mov dword [ebp - 0x250], eax
push 4
pop eax
imul eax, eax, 3
mov eax, dword [ebp + eax - 0x484]
cmp eax, dword [ebp - 0x250]
jne 0x10006eb8
mov dword [ebp - 0x258], 1
jmp 0x10006ebf
and dword [ebp - 0x258], 0
push 1
lea ecx, [ebp - 0xa4]
call fcn.10002363
mov eax, dword [eax]
cmp eax, dword [ebp - 0x258]
jle 0x10006ee2
mov dword [ebp - 0x260], 1
jmp 0x10006ee9
and dword [ebp - 0x260], 0
push 0
lea ecx, [ebp - 0xa4]
call fcn.10002363
mov ecx, dword [ebp - 0x260]
cmp ecx, dword [eax]
jge 0x10006f0c
and dword [ebp - 0x288], 0
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x288]
mov dword [ebp + eax - 0x474], ecx
jmp 0x10007005
mov dword [ebp - 0x128], 0xc4f4
push 0
lea ecx, [ebp - 0xa4]
call fcn.10002363
mov eax, dword [eax]
mov dword [ebp - 0x30c], eax
mov eax, dword [ebp - 0x128]
mov dword [ebp - 0x314], eax
mov eax, dword [ebp - 0x128]
inc eax
mov dword [ebp - 0x128], eax
mov eax, dword [ebp - 0x30c]
cmp eax, dword [ebp - 0x314]
jle 0x10006ff5
mov dword [ebp - 0x290], 1
jmp 0x10006ffc
and dword [ebp - 0x290], 0
mov eax, dword [ebp - 0x290]
mov dword [ebp - 0x58], eax
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xa4]
call fcn.10002347
mov esi, 0x1007cb00
mov edi, dword [ebp + 8]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
mov eax, dword [ebp + 8]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret