Function at 0x100365fe
Capabilities:
Query environment variable

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x100621c8
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
push ecx
sub esp, 0x2c4
push ebx
push esi
push edi
mov dword [ebp - 0x10], esp
movzx eax, byte [ebp + 0x18]
test eax, eax
je 0x1003770b
lea eax, [ebp + 0x24]
mov dword [ebp - 0x1b4], eax
mov eax, dword [ebp + 0x1c]
mov dword [ebp - 0x118], eax
lea eax, [ebp + 8]
mov dword [ebp - 0x15c], eax
mov eax, dword [ebp + 0x14]
mov dword [ebp - 0x1ac], eax
mov eax, dword [ebp + 0xc]
mov dword [ebp - 0x11c], eax
mov eax, dword [ebp - 0x1b4]
movzx eax, byte [eax]
test eax, eax
je 0x100376c6
mov eax, dword [ebp - 0x15c]
mov dword [ebp - 0x28], eax
mov eax, dword [ebp - 0x1ac]
mov dword [ebp - 0xe4], eax
mov dword [ebp - 0xec], 0x1f68
mov dword [ebp - 0x154], str.lxhzw_mqcdnla_nqttrs_utmwb_dtpav_anynwjbo_fotdvste_tntidyk_tlisf_lgmqrr
cmp dword [ebp - 0xec], 0x2252
jle 0x1003677f
and dword [ebp - 0x84], 0
jmp 0x100366bc
mov eax, dword [ebp - 0x84]
inc eax
mov dword [ebp - 0x84], eax
cmp dword [ebp - 0x84], 0x50ba
jge 0x1003677f
and dword [ebp - 0x4c], 0
jmp 0x100366d9
mov eax, dword [ebp - 0x4c]
inc eax
mov dword [ebp - 0x4c], eax
cmp dword [ebp - 0x4c], 0x7343
jge 0x1003677a
and dword [ebp - 0x64], 0
jmp 0x100366f3
mov eax, dword [ebp - 0x64]
inc eax
mov dword [ebp - 0x64], eax
cmp dword [ebp - 0x64], 0x6bcd
jge 0x10036775
and dword [ebp - 0x44], 0
jmp 0x10036709
mov eax, dword [ebp - 0x44]
inc eax
mov dword [ebp - 0x44], eax
cmp dword [ebp - 0x44], 0x96e
jge 0x10036770
mov eax, dword [ebp - 0x64]
cdq
idiv dword [ebp - 0x44]
mov eax, dword [ebp - 0x84]
imul eax, dword [ebp - 0x4c]
sub eax, edx
cdq
mov dword [ebp - 0x174], eax
mov dword [ebp - 0x170], edx
push dword [ebp - 0x170]
push dword [ebp - 0x174]
lea ecx, [ebp - 0x298]
call fcn.10001a94
pop ecx
pop ecx
mov dword [ebp - 0x110], eax
mov ecx, dword [ebp - 0x110]
call fcn.10003344
push eax
call fcn.1004840f
pop ecx
lea ecx, [ebp - 0x298]
call fcn.1000333a
jmp 0x10036702
jmp 0x100366ec
jmp 0x100366d2
jmp 0x100366af
and dword [ebp - 4], 0
cmp dword [ebp - 0xec], 0x1cae
jge 0x1003679b
push dword [ebp - 0x154]
call fcn.1004840f
pop ecx
jmp 0x100367b7
or dword [ebp - 4], 0xffffffff
jmp 0x100367c1
mov dword [ebp - 0x6c], 3
mov dword [ebp - 0x1f8], 0xf759609c
mov dword [ebp - 0x1f4], 0xf759609c
mov dword [ebp - 0x1f0], 0xf759609c
mov dword [ebp - 0x1ec], 0xf759609c
lea ecx, [ebp - 0x8d]
call fcn.10003589
push eax
lea eax, [ebp - 0x1e8]
push eax
lea eax, [ebp - 0x1f8]
push eax
lea ecx, [ebp - 0x278]
call fcn.1000358c
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0x1d0]
call fcn.10003538
mov dword [ebp - 4], 2
mov dword [ebp - 0x6c], 0xffffffe6
jmp 0x1003683c
mov eax, dword [ebp - 0x6c]
inc eax
mov dword [ebp - 0x6c], eax
cmp dword [ebp - 0x6c], 0x12
je 0x10036a2f
mov dword [ebp - 0x1c], 0
push 0x29d2
lea eax, [ebp - 0x1c]
push eax
push 0x576e
push 0
push 0x481f
lea eax, [ebp - 0x1d0]
push eax
push 0x1681
call fcn.10037b1e
add esp, 0x1c
mov dword [ebp - 0x1c], 3
jmp 0x10036886
mov eax, dword [ebp - 0x1c]
dec eax
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 0
jl 0x10036a2a
push dword [ebp - 0x1c]
lea ecx, [ebp - 0x1d0]
call fcn.1000357a
push 0xfffffffffffffff6
pop eax
test eax, eax
je 0x100369d5
mov dword [ebp - 0x1e4], 0xc0bf90a2
mov dword [ebp - 0x1e0], 0xc0bf90a2
mov dword [ebp - 0x1dc], 0xc0bf90a2
mov dword [ebp - 0x1d8], 0xc0bf90a2
lea ecx, [ebp - 0xa1]
call fcn.10003589
push eax
lea eax, [ebp - 0x1d4]
push eax
lea eax, [ebp - 0x1e4]
push eax
lea ecx, [ebp - 0x280]
call fcn.1000358c
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0x1c4]
call fcn.10003538
mov byte [ebp - 4], 3
push 3
lea ecx, [ebp - 0x1c4]
call fcn.1000357a
mov dword [eax], 3
jmp 0x10036943
push 3
lea ecx, [ebp - 0x1c4]
call fcn.1000357a
mov dword [ebp - 0xf0], eax
mov eax, dword [ebp - 0xf0]
mov eax, dword [eax]
dec eax
mov ecx, dword [ebp - 0xf0]
mov dword [ecx], eax
push 3
lea ecx, [ebp - 0x1c4]
call fcn.1000357a
cmp dword [eax], 0
jl 0x10036998
mov dword [ebp - 0x124], 0xc9cd49fc
lea eax, [ebp - 0x1c4]
push eax
lea eax, [ebp - 0x124]
push eax
lea eax, [ebp - 0x1d0]
push eax
lea eax, [ebp - 0x1c]
push eax
push 0
call fcn.1003bdd9
add esp, 0x14
push 0
push 0x4deb
push 0x4e8a
call fcn.1003e845
add esp, 0xc
jmp 0x1003691f
mov byte [ebp - 0x1e], 0
movzx eax, byte [ebp - 0x1e]
test eax, eax
je 0x100369c4
push 0x2267
push 0
push 0xa98
push 0x2aa5
push 1
push 0x2ecd
call fcn.10037d4f
add esp, 0x18
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x1c4]
call fcn.1000355e
jmp 0x10036a25
mov dword [ebp - 0x54], 1
mov dword [ebp - 0x54], 0
jmp 0x100369ec
mov eax, dword [ebp - 0x54]
inc eax
mov dword [ebp - 0x54], eax
cmp dword [ebp - 0x54], 3
jg 0x10036a25
mov dword [ebp - 0x120], 0xed40a165
push 0x783
push 0x4615
push 0
lea eax, [ebp - 0x120]
push eax
push 0x3a66
push 0
push 0x4e66
call fcn.10036516
add esp, 0x1c
jmp 0x100369e5
jmp 0x1003687f
jmp 0x10036835
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x1d0]
call fcn.1000355e
mov eax, dword [0x102f913c]
and eax, 1
jne 0x10036a75
mov eax, dword [0x102f913c]
or eax, 1
mov dword [0x102f913c], eax
mov dword [ebp - 4], 4
mov ecx, 0x102f9164
call fcn.100413f0
push 0x100627fd
call fcn.100483e5
pop ecx
or dword [ebp - 4], 0xffffffff
mov dword [ebp - 0x38], 0xba33
mov dword [ebp - 0x2c], 0
push 3
lea ecx, [ebp - 0x16c]
call fcn.100034db
mov dword [ebp - 4], 5
mov dword [ebp - 0xa0], 0xfdadf860
push 0x6ebd
push 0x1784
push 0x4383
push 0x4b83
lea eax, [ebp - 0x224]
push eax
push 0x5179
push 0x2ac8
push 0x6a8b
push 0
push 0x5fbf
lea eax, [ebp - 0x16c]
push eax
call fcn.1003a408
add esp, 0x2c
imul eax, dword [ebp - 0x38], 0xbf0b
imul eax, dword [ebp - 0x38]
test eax, eax
je 0x10036ca3
mov dword [ebp - 0x128], 0xfffffff7
mov dword [ebp - 0x19c], 0
push 4
lea ecx, [ebp - 0x210]
call fcn.100034db
mov byte [ebp - 4], 6
mov dword [ebp - 0x160], 8
push 0x31bf
push 0
push 0x16e7
lea eax, [ebp - 0x228]
push eax
lea eax, [ebp - 0x210]
push eax
call fcn.100383e9
add esp, 0x14
push 0x7066
lea eax, [ebp - 0x2c]
push eax
push 0x4147
lea eax, [ebp - 0x160]
push eax
lea eax, [ebp - 0xa0]
push eax
lea eax, [ebp - 0x16c]
push eax
lea eax, [ebp - 0x128]
push eax
lea eax, [ebp - 0x210]
push eax
push 0
lea eax, [ebp - 0x19c]
push eax
push 0x3ab8
lea eax, [ebp - 0x38]
push eax
call fcn.1003d72f
add esp, 0x30
mov dword [ebp - 0xb0], 0x7076
mov dword [ebp - 0x130], str.amsita_pmi_trsb_sprzacr_cwkgagyf_kswkrw_twesvpnba_rvqgzhlr_apadkr_klxgaxds_avi_xcqn_sltgd
cmp dword [ebp - 0xb0], 0x71e1
jle 0x10036c46
push 0
push 0xcd7
push 0
push 0
push 0x554
push 0x337
call dword [sym.imp.USER32.dll_ToAsciiEx]
and dword [ebp - 0x74], 0
jmp 0x10036bdc
mov eax, dword [ebp - 0x74]
inc eax
mov dword [ebp - 0x74], eax
cmp dword [ebp - 0x74], 0x16e8
jge 0x10036c46
and dword [ebp - 0x7c], 0
jmp 0x10036bf2
mov eax, dword [ebp - 0x7c]
inc eax
mov dword [ebp - 0x7c], eax
cmp dword [ebp - 0x7c], 0x4b4
jge 0x10036c44
and dword [ebp - 0x5c], 0
jmp 0x10036c08
mov eax, dword [ebp - 0x5c]
inc eax
mov dword [ebp - 0x5c], eax
cmp dword [ebp - 0x5c], 0x5997
jge 0x10036c42
mov ecx, dword [ebp - 0x7c]
imul ecx, dword [ebp - 0x5c]
mov eax, dword [ebp - 0x74]
sar eax, cl
cdq
mov dword [ebp - 0x180], eax
mov dword [ebp - 0x17c], edx
push dword [ebp - 0x17c]
push dword [ebp - 0x180]
mov ecx, 0x1007be38
call fcn.10003364
jmp 0x10036c01
jmp 0x10036beb
jmp 0x10036bd5
mov byte [ebp - 4], 7
cmp dword [ebp - 0xb0], 0x702a
jge 0x10036c66
mov edx, dword [ebp - 0x130]
mov ecx, 0x1007be38
call fcn.100055b2
jmp 0x10036c82
mov dword [ebp - 4], 6
jmp 0x10036c92
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x210]
call fcn.1000355e
jmp 0x10036cdd
mov dword [ebp - 0x2c], 0xffffffeb
jmp 0x10036cb3
mov eax, dword [ebp - 0x2c]
inc eax
mov dword [ebp - 0x2c], eax
cmp dword [ebp - 0x2c], 0xb
jne 0x10036cdd
push 0x7baa
lea eax, [ebp - 0xa0]
push eax
push 0
lea eax, [ebp - 0x16c]
push eax
push 0x539a
call fcn.1003830f
add esp, 0x14
jmp 0x10036cac
push 0xba7
push 0
lea eax, [ebp - 0xa0]
push eax
lea eax, [ebp - 0x16c]
push eax
push 0x5c07
lea eax, [ebp - 0x38]
push eax
call fcn.1003be0b
add esp, 0x18
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x16c]
call fcn.1000355e
mov eax, dword [ebp - 0x28]
mov ecx, dword [eax]
call fcn.100363c0
mov dword [ebp - 0x9c], eax
cmp dword [ebp - 0x9c], 3
jae 0x10036d9b
mov eax, dword [ebp - 0x28]
mov eax, dword [eax]
mov dword [ebp - 0x178], eax
lea eax, [ebp - 0x218]
push eax
mov ecx, 0x102f9164
call fcn.10020c5c
push eax
lea eax, [ebp - 0x178]
push eax
lea eax, [ebp - 0x214]
push eax
mov ecx, 0x102f9164
call fcn.10020c73
mov ecx, eax
call fcn.10020b92
movzx eax, al
test eax, eax
je 0x10036d9b
mov eax, dword [ebp - 0x28]
mov eax, dword [eax]
mov dword [ebp - 0x138], eax
lea eax, [ebp - 0x138]
push eax
mov ecx, 0x102f9164
call fcn.10041444
push eax
mov ecx, dword [ebp - 0xe4]
call fcn.10008b6f
jmp 0x10037738
mov dword [ebp - 0x24], 9
mov dword [ebp - 0x8c], 0x13a3dbc5
mov dword [ebp - 0x24], 0
jmp 0x10036dbc
mov eax, dword [ebp - 0x24]
dec eax
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 0xfffffff7
je 0x1003706f
mov dword [ebp - 0x18], 2
mov dword [ebp - 0xc0], 0xfffffffa
mov dword [ebp - 0x184], 0xffffffff
mov dword [ebp - 0x18], 0
jmp 0x10036df1
mov eax, dword [ebp - 0x18]
dec eax
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 0xffffffe4
jge 0x1003704f
mov dword [ebp - 0xd8], 0x4c2
mov dword [ebp - 0x140], str.yxigj_haqrkve_uubth_fmyjxvq_hmaarb_umcsgac_tbnsqevfj_pegcc_bwwg_lxx_btbeu
cmp dword [ebp - 0xd8], 0x809
jle 0x10036ef6
push 0x87e
push 0
push 0
call dword [sym.imp.KERNEL32.dll_ExpandEnvironmentStringsA]
and dword [ebp - 0x50], 0
jmp 0x10036e3b
mov eax, dword [ebp - 0x50]
inc eax
mov dword [ebp - 0x50], eax
cmp dword [ebp - 0x50], 0x1ef4
jge 0x10036ef6
and dword [ebp - 0x58], 0
jmp 0x10036e55
mov eax, dword [ebp - 0x58]
inc eax
mov dword [ebp - 0x58], eax
cmp dword [ebp - 0x58], 0x20b7
jge 0x10036ef1
and dword [ebp - 0x40], 0
jmp 0x10036e6f
mov eax, dword [ebp - 0x40]
inc eax
mov dword [ebp - 0x40], eax
cmp dword [ebp - 0x40], 0x61ba
jge 0x10036eec
and dword [ebp - 0x48], 0
jmp 0x10036e85
mov eax, dword [ebp - 0x48]
inc eax
mov dword [ebp - 0x48], eax
cmp dword [ebp - 0x48], 0x18b7
jge 0x10036ee7
mov ecx, dword [ebp - 0x40]
add ecx, dword [ebp - 0x48]
mov eax, dword [ebp - 0x50]
add eax, dword [ebp - 0x58]
shl eax, cl
cdq
mov dword [ebp - 0x18c], eax
mov dword [ebp - 0x188], edx
push dword [ebp - 0x188]
push dword [ebp - 0x18c]
lea ecx, [ebp - 0x2b0]
call fcn.10001a94
pop ecx
pop ecx
mov dword [ebp - 0x1b0], eax
mov ecx, dword [ebp - 0x1b0]
call fcn.10003344
push eax
call fcn.1004840f
pop ecx
lea ecx, [ebp - 0x2b0]
call fcn.1000333a
jmp 0x10036e7e
jmp 0x10036e68
jmp 0x10036e4e
jmp 0x10036e34
mov dword [ebp - 4], 9
cmp dword [ebp - 0xd8], 0x2bf
jge 0x10036f15
push dword [ebp - 0x140]
call fcn.1004840f
pop ecx
jmp 0x10036f31
or dword [ebp - 4], 0xffffffff
jmp 0x10036f3b
mov dword [ebp - 0x60], 0
jmp 0x10036f4b
mov eax, dword [ebp - 0x60]
inc eax
mov dword [ebp - 0x60], eax
cmp dword [ebp - 0x60], 3
jge 0x10036f61
mov eax, dword [ebp - 0x60]
mov dword [ebp + eax*4 - 0x258], 0
jmp 0x10036f44
mov eax, dword [ebp - 0x18]
imul eax, dword [ebp - 0x18]
mov ecx, 0xffff
sub ecx, eax
jne 0x10036f80
cmp dword [ebp - 0x24], 0
jne 0x10036f80
and dword [ebp - 0xb8], 0
jmp 0x10036f8a
mov dword [ebp - 0xb8], 1
cmp dword [ebp - 0xb8], 7
jle 0x10036f9f
mov dword [ebp - 0xf4], 1
jmp 0x10036fa6
and dword [ebp - 0xf4], 0
mov eax, dword [ebp - 0xf4]
mov dword [ebp - 0xc0], eax
mov eax, dword [ebp - 0xc0]
mov dword [ebp - 0x8c], eax
mov eax, dword [ebp - 0x18]
cmp eax, dword [ebp - 0x8c]
jge 0x10036fd5
mov dword [ebp - 0xe0], 1
jmp 0x10036fdc
and dword [ebp - 0xe0], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x258]
cmp dword [ebp - 0xe0], eax
jg 0x10036ffd
mov dword [ebp - 0xc8], 1
jmp 0x10037004
and dword [ebp - 0xc8], 0
mov eax, dword [ebp - 0x24]
cmp dword [ebp - 0xc8], eax
jg 0x1003701b
mov dword [ebp - 0xa8], 1
jmp 0x10037022
and dword [ebp - 0xa8], 0
cmp dword [ebp - 0xa8], 0
jne 0x10037037
mov dword [ebp - 0xd0], 1
jmp 0x1003703e
and dword [ebp - 0xd0], 0
mov eax, dword [ebp - 0xd0]
mov dword [ebp - 0x184], eax
jmp 0x10036dea
push 0x6f4e
push 0x13d5
push 0
lea eax, [ebp - 0x8c]
push eax
call fcn.100377f0
add esp, 0x10
jmp 0x10036db5
lea eax, [ebp - 0x2bc]
push eax
call fcn.100345b9
pop ecx
mov esi, eax
lea edi, [ebp - 0x264]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
lea esi, [ebp - 0x264]
lea edi, [ebp - 0x270]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
push 2
lea ecx, [ebp - 0x100]
call fcn.100034db
mov dword [ebp - 4], 0xb
mov dword [ebp - 0x148], 0
mov dword [ebp - 0x22c], 0xd37a5b7d
lea eax, [ebp - 0x100]
push eax
push 0
lea eax, [ebp - 0x234]
push eax
call fcn.1003822b
add esp, 0xc
push 0
lea ecx, [ebp - 0x100]
call fcn.1000357a
and dword [eax], 0
jmp 0x1003710c
push 0
lea ecx, [ebp - 0x100]
call fcn.1000357a
mov dword [ebp - 0xe8], eax
mov eax, dword [ebp - 0xe8]
mov eax, dword [eax]
inc eax
mov ecx, dword [ebp - 0xe8]
mov dword [ecx], eax
push 0
lea ecx, [ebp - 0x100]
call fcn.1000357a
cmp dword [eax], 0xa
jle 0x100371ff
push 4
lea ecx, [ebp - 0x10c]
call fcn.100034db
mov byte [ebp - 4], 0xc
push 0x5f66
push 0
lea eax, [ebp - 0x10c]
push eax
lea eax, [ebp - 0x220]
push eax
call fcn.1003df92
add esp, 0x10
push 1
lea ecx, [ebp - 0x10c]
call fcn.1000357a
mov dword [eax], 0x1d
jmp 0x10037189
push 1
lea ecx, [ebp - 0x10c]
call fcn.1000357a
mov dword [ebp - 0xac], eax
mov eax, dword [ebp - 0xac]
mov eax, dword [eax]
dec eax
mov ecx, dword [ebp - 0xac]
mov dword [ecx], eax
push 1
lea ecx, [ebp - 0x10c]
call fcn.1000357a
cmp dword [eax], 0xffffffed
jne 0x100371c5
mov byte [ebp - 0x1d], 0
push 0x16d6
push 0x2fd0
push 1
push 0x6654
lea eax, [ebp - 0x1d]
push eax
push 0
push 0x39b7
call fcn.10036516
add esp, 0x1c
jmp 0x10037165
push 0
lea ecx, [ebp - 0x100]
call fcn.1000357a
cmp dword [eax], 0
je 0x100371eb
mov byte [ebp - 4], 0xb
lea ecx, [ebp - 0x10c]
call fcn.1000355e
jmp 0x100370e8
mov byte [ebp - 4], 0xb
lea ecx, [ebp - 0x10c]
call fcn.1000355e
jmp 0x100370e8
push 0
push 0x2711
push 0x45c0
push 0x4719
push 1
push 0x631e
push 0x62f6
push 0x7895
push 0x1042
lea eax, [ebp - 0x148]
push eax
push 0x190b
push 0xd4d
push 0x3a7
push 0x3b5e
call fcn.1003d054
add esp, 0x38
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x100]
call fcn.1000355e
mov eax, dword [ebp - 0x28]
mov ecx, dword [eax]
call fcn.100363df
mov dword [ebp - 0x1a8], eax
lea eax, [ebp - 0x270]
push eax
push dword [ebp - 0x1a8]
push dword [ebp - 0x9c]
lea eax, [ebp - 0x24c]
push eax
call fcn.1003641f
add esp, 0x10
mov dword [ebp - 4], 0xd
cmp dword [ebp - 0x9c], 3
jae 0x100372bd
push 0x3353
push 0x102f9164
lea eax, [ebp - 0x24c]
push eax
push 0x7f6f
push dword [ebp - 0x28]
push 0
call fcn.10037ad0
add esp, 0x18
mov dword [ebp - 0xdc], 0x4455
mov dword [ebp - 0x1b8], str.sgjsrcua_xnz_mqukrj_xznunjobq
cmp dword [ebp - 0xdc], 0x476a
jle 0x1003737b
and dword [ebp - 0x78], 0
jmp 0x100372ee
mov eax, dword [ebp - 0x78]
inc eax
mov dword [ebp - 0x78], eax
cmp dword [ebp - 0x78], 0x5ea6
jge 0x1003737b
and dword [ebp - 0x68], 0
jmp 0x10037308
mov eax, dword [ebp - 0x68]
inc eax
mov dword [ebp - 0x68], eax
cmp dword [ebp - 0x68], 0x5187
jge 0x10037376
and dword [ebp - 0x70], 0
jmp 0x1003731e
mov eax, dword [ebp - 0x70]
inc eax
mov dword [ebp - 0x70], eax
cmp dword [ebp - 0x70], 0x39a7
jge 0x10037374
and dword [ebp - 0x34], 0
jmp 0x10037334
mov eax, dword [ebp - 0x34]
inc eax
mov dword [ebp - 0x34], eax
cmp dword [ebp - 0x34], 0x63b3
jge 0x10037372
mov ecx, dword [ebp - 0x68]
add ecx, dword [ebp - 0x70]
mov eax, dword [ebp - 0x78]
shl eax, cl
mov ecx, dword [ebp - 0x34]
sar eax, cl
cdq
mov dword [ebp - 0x198], eax
mov dword [ebp - 0x194], edx
push dword [ebp - 0x194]
push dword [ebp - 0x198]
mov ecx, 0x1007be38
call fcn.10003364
jmp 0x1003732d
jmp 0x10037317
jmp 0x10037301
jmp 0x100372e7
mov dword [ebp - 0x14], 0x5d6c05ba
mov dword [ebp - 0x3c], 0x48c66f5a
push 4
lea ecx, [ebp - 0x204]
call fcn.100034db
mov byte [ebp - 4], 0xe
mov dword [ebp - 0x21c], 0xf4039ee4
mov dword [ebp - 0x30], 0
jmp 0x100373b4
mov eax, dword [ebp - 0x30]
inc eax
mov dword [ebp - 0x30], eax
cmp dword [ebp - 0x30], 2
jge 0x100373ca
mov eax, dword [ebp - 0x30]
mov dword [ebp + eax*4 - 0x98], 0xffffffff
jmp 0x100373ad
push 0x12d9
push 0x3555
push 0
lea eax, [ebp - 0x30]
push eax
push 0x6106
lea eax, [ebp - 0x204]
push eax
push 0x6128
push 0x7078
push 0x482
push 0x6ea5
push 0x4c92
call fcn.1003d3be
add esp, 0x2c
mov dword [ebp - 0xb4], 0x7098
mov dword [ebp - 0x190], str.cfqaiawbt_wqw_zatjnvl
cmp dword [ebp - 0xb4], 0x71ea
jle 0x100374bc
and dword [ebp - 0x80], 0
jmp 0x10037438
mov eax, dword [ebp - 0x80]
inc eax
mov dword [ebp - 0x80], eax
cmp dword [ebp - 0x80], 0xd79
jge 0x100374bc
and dword [ebp - 0x88], 0
jmp 0x10037457
mov eax, dword [ebp - 0x88]
inc eax
mov dword [ebp - 0x88], eax
cmp dword [ebp - 0x88], 0x12c7
jge 0x100374b7
mov eax, dword [ebp - 0x80]
or eax, dword [ebp - 0x88]
cdq
mov dword [ebp - 0x1a4], eax
mov dword [ebp - 0x1a0], edx
push dword [ebp - 0x1a0]
push dword [ebp - 0x1a4]
lea ecx, [ebp - 0x2d4]
call fcn.10001a94
pop ecx
pop ecx
mov dword [ebp - 0x150], eax
mov ecx, dword [ebp - 0x150]
call fcn.10003344
push eax
call fcn.1004840f
pop ecx
lea ecx, [ebp - 0x2d4]
call fcn.1000333a
jmp 0x1003744a
jmp 0x10037431
mov dword [ebp - 0x14], 0x16
jmp 0x100374cc
mov eax, dword [ebp - 0x14]
dec eax
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 0xd
je 0x100374ea
mov eax, dword [ebp - 0x14]
mov dword [ebp - 0x3c], eax
mov eax, dword [ebp - 0x3c]
push 4
pop ecx
shl ecx, 0
mov dword [ebp + ecx - 0x98], eax
jmp 0x100374c5
mov byte [ebp - 4], 0xf
cmp dword [ebp - 0xb4], 0x7035
jge 0x10037506
push dword [ebp - 0x190]
call fcn.1004840f
pop ecx
jmp 0x10037522
mov dword [ebp - 4], 0xe
jmp 0x10037532
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x98], 0
jne 0x10037557
mov eax, dword [ebp - 0x14]
mov dword [ebp - 0x3c], eax
cmp dword [ebp - 0x3c], 0
jne 0x10037557
and dword [ebp - 0xbc], 0
jmp 0x10037561
mov dword [ebp - 0xbc], 1
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x98]
add eax, dword [ebp - 0xbc]
cmp eax, 0xab19
jne 0x10037587
mov dword [ebp - 0xc4], 1
jmp 0x1003758e
and dword [ebp - 0xc4], 0
mov eax, dword [ebp - 0xc4]
mov dword [ebp - 0x14], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x14]
cmp ecx, dword [ebp + eax - 0x98]
jg 0x100375b5
mov dword [ebp - 0xcc], 1
jmp 0x100375bc
and dword [ebp - 0xcc], 0
cmp dword [ebp - 0xcc], 0xffffffff
jne 0x100375d1
mov dword [ebp - 0x158], 1
jmp 0x100375d8
and dword [ebp - 0x158], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x98]
mov dword [ebp - 0x230], eax
push 4
pop eax
shl eax, 0
mov esi, dword [ebp + eax - 0x98]
push 1
lea ecx, [ebp - 0x204]
call fcn.1000357a
cmp esi, dword [eax]
jne 0x10037615
mov dword [ebp - 0xd4], 1
jmp 0x1003761c
and dword [ebp - 0xd4], 0
mov eax, dword [ebp - 0xd4]
sub eax, 0x40dede1
push 4
pop ecx
shl ecx, 0
mov dword [ebp + ecx - 0x98], eax
mov byte [ebp - 4], 0xd
lea ecx, [ebp - 0x204]
call fcn.1000355e
mov byte [ebp - 4], 0x11
cmp dword [ebp - 0xdc], 0x40b0
jge 0x10037663
mov edx, dword [ebp - 0x1b8]
mov ecx, 0x1007be38
call fcn.100055b2
jmp 0x1003767f
mov dword [ebp - 4], 0xd
jmp 0x1003768f
lea eax, [ebp - 0x24c]
push eax
mov ecx, dword [ebp - 0xe4]
call fcn.10008b6f
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x24c]
call fcn.10008b65
jmp 0x10037738
mov eax, dword [ebp - 0x118]
mov dword [ebp - 0x114], eax
mov eax, dword [ebp - 0x11c]
mov dword [ebp - 0x12c], eax
mov eax, dword [ebp - 0x114]
mov dword [ebp - 0x13c], eax
mov eax, dword [ebp - 0x12c]
mov dword [ebp - 0x134], eax
mov eax, dword [ebp - 0x134]
push dword [eax]
mov ecx, dword [ebp - 0x13c]
call fcn.10008bc1
jmp 0x10037738
mov eax, dword [ebp + 0x10]
mov dword [ebp - 0x144], eax
mov eax, dword [ebp + 0x20]
mov dword [ebp - 0x14c], eax
push dword [ebp - 0x144]
push 0
push dword [ebp - 0x14c]
push 0x5891
call fcn.10037ed9
add esp, 0x10
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret