Function at 0x10005e12
Capabilities:
Get file attributes

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x1006150c
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
push ecx
sub esp, 0x540
push ebx
push esi
push edi
mov dword [ebp - 0x10], esp
movzx eax, byte [ebp + 0x10]
test eax, eax
je 0x10005fca
lea eax, [ebp + 0xc]
mov dword [ebp - 0x2fc], eax
mov eax, dword [ebp + 0x14]
mov dword [ebp - 0x370], eax
mov eax, dword [ebp - 0x2fc]
movzx eax, byte [eax]
test eax, eax
je 0x10005fb1
mov dword [ebp - 0x234], 0x363c
mov dword [ebp - 0x3d8], str.xqxdq_lci_gxkpptdk_qmytsrwii_lcfzty_njufezerj_yaw_nlpvhgxk_wklo
cmp dword [ebp - 0x234], 0x3739
jle 0x10005f2a
and dword [ebp - 0x104], 0
jmp 0x10005ea0
mov eax, dword [ebp - 0x104]
inc eax
mov dword [ebp - 0x104], eax
cmp dword [ebp - 0x104], 0x12a9
jge 0x10005f2a
and dword [ebp - 0x100], 0
jmp 0x10005ec2
mov eax, dword [ebp - 0x100]
inc eax
mov dword [ebp - 0x100], eax
cmp dword [ebp - 0x100], 0x55c7
jge 0x10005f25
mov eax, dword [ebp - 0x104]
and eax, dword [ebp - 0x100]
cdq
mov dword [ebp - 0x37c], eax
mov dword [ebp - 0x378], edx
push dword [ebp - 0x378]
push dword [ebp - 0x37c]
lea ecx, [ebp - 0x4e4]
call fcn.10002bac
pop ecx
pop ecx
mov dword [ebp - 0x368], eax
mov ecx, dword [ebp - 0x368]
call fcn.100139de
push eax
call fcn.1004a753
pop ecx
lea ecx, [ebp - 0x4e4]
call fcn.100139d4
jmp 0x10005eb5
jmp 0x10005e93
mov eax, dword [ebp - 0x370]
mov dword [ebp - 0x3e0], eax
and dword [ebp - 4], 0
cmp dword [ebp - 0x234], 0x3405
jge 0x10005f52
push dword [ebp - 0x3d8]
call fcn.1004a753
pop ecx
jmp 0x10005f6e
or dword [ebp - 4], 0xffffffff
jmp 0x10005f78
mov eax, dword [ebp - 0x3e0]
mov dword [ebp - 0x3e8], eax
mov eax, dword [ebp - 0x3e8]
movzx eax, byte [eax]
test eax, eax
je 0x10005faf
push 0x44d6
push 0
push 0x13b1
push 0x4199
push 0xe12
call fcn.1000fd70
add esp, 0x14
jmp 0x10005fc5
push 0xf08
push 0
push 0x1b79
push 0
call dword [sym.imp.USER32.dll_LoadStringA]
jmp 0x1000843d
lea eax, [ebp + 8]
mov dword [ebp - 0x60], eax
mov eax, dword [ebp + 0x18]
mov dword [ebp - 0x170], eax
mov dword [ebp - 0x2f0], 0x4f1b
mov dword [ebp - 0x318], str.jlfvo_hqfxe_udektbxc_cdtj_pkcmaedz_mloqg_bgbymaqi
cmp dword [ebp - 0x2f0], 0x5154
jle 0x10006113
push 0
call dword [sym.imp.KERNEL32.dll_GetFileAttributesW]
and dword [ebp - 0xf4], 0
jmp 0x1000601b
mov eax, dword [ebp - 0xf4]
inc eax
mov dword [ebp - 0xf4], eax
cmp dword [ebp - 0xf4], 0x571b
jge 0x100060fc
and dword [ebp - 0x7c], 0
jmp 0x10006038
mov eax, dword [ebp - 0x7c]
inc eax
mov dword [ebp - 0x7c], eax
cmp dword [ebp - 0x7c], 0x767d
jge 0x100060f7
and dword [ebp - 0xd4], 0
jmp 0x1000605b
mov eax, dword [ebp - 0xd4]
inc eax
mov dword [ebp - 0xd4], eax
cmp dword [ebp - 0xd4], 0x5325
jge 0x100060f2
and dword [ebp - 0x84], 0
jmp 0x10006081
mov eax, dword [ebp - 0x84]
inc eax
mov dword [ebp - 0x84], eax
cmp dword [ebp - 0x84], 0x63f8
jge 0x100060ed
mov eax, dword [ebp - 0x7c]
add eax, dword [ebp - 0xd4]
and eax, dword [ebp - 0x84]
xor eax, dword [ebp - 0xf4]
cdq
mov dword [ebp - 0x388], eax
mov dword [ebp - 0x384], edx
push dword [ebp - 0x384]
push dword [ebp - 0x388]
lea ecx, [ebp - 0x538]
call fcn.10002bac
pop ecx
pop ecx
mov dword [ebp - 0x360], eax
mov ecx, dword [ebp - 0x360]
call fcn.100139de
push eax
call fcn.1004a753
pop ecx
lea ecx, [ebp - 0x538]
call fcn.100139d4
jmp 0x10006074
jmp 0x1000604e
jmp 0x10006031
jmp 0x1000600e
push 0
push 0x1db5
push 0x1d88
push 0x88f
call dword [sym.imp.GDI32.dll_GetCharABCWidthsFloatA]
push 2
lea ecx, [ebp - 0x48]
call fcn.100021e9
mov dword [ebp - 4], 2
mov byte [ebp - 4], 3
cmp dword [ebp - 0x2f0], 0x4be6
jge 0x10006140
push dword [ebp - 0x318]
call fcn.1004a753
pop ecx
jmp 0x1000615c
mov dword [ebp - 4], 2
jmp 0x1000616c
mov dword [ebp - 0x54], 0xfffffff7
mov dword [ebp - 0x64], 0xbb0f55f5
mov dword [ebp - 0xe8], 0xa280505b
mov dword [ebp - 0x264], 0xe72b4cd9
mov dword [ebp - 0x2ac], 0xdda3982a
mov dword [ebp - 0x2ec], 0x5a1b
mov dword [ebp - 0x308], str.wgycrdw_jwismj_zgdxfubw_eosinzmqe_irsl_blo_sfltus_ceagzzcn_caqkpobk_gnja_rtlqamr_zfaakg
cmp dword [ebp - 0x2ec], 0x5d8a
jle 0x10006297
and dword [ebp - 0x8c], 0
jmp 0x100061d2
mov eax, dword [ebp - 0x8c]
inc eax
mov dword [ebp - 0x8c], eax
cmp dword [ebp - 0x8c], 0x44b5
jge 0x10006297
and dword [ebp - 0xdc], 0
jmp 0x100061f8
mov eax, dword [ebp - 0xdc]
inc eax
mov dword [ebp - 0xdc], eax
cmp dword [ebp - 0xdc], 0x51c7
jge 0x10006292
and dword [ebp - 0x94], 0
jmp 0x1000621e
mov eax, dword [ebp - 0x94]
inc eax
mov dword [ebp - 0x94], eax
cmp dword [ebp - 0x94], 0x616d
jge 0x1000628d
and dword [ebp - 0xfc], 0
jmp 0x10006240
mov eax, dword [ebp - 0xfc]
inc eax
mov dword [ebp - 0xfc], eax
cmp dword [ebp - 0xfc], 0x735a
jge 0x1000628b
mov eax, dword [ebp - 0x8c]
mov ecx, dword [ebp - 0xdc]
shl eax, cl
and eax, dword [ebp - 0x94]
xor eax, dword [ebp - 0xfc]
cdq
mov dword [ebp - 0x394], eax
mov dword [ebp - 0x390], edx
push dword [ebp - 0x390]
push dword [ebp - 0x394]
mov ecx, 0x1007cc18
call fcn.10013d0a
jmp 0x10006233
jmp 0x10006211
jmp 0x100061eb
jmp 0x100061c5
mov dword [ebp - 0x32c], 0
mov byte [ebp - 4], 5
cmp dword [ebp - 0x2ec], 0x5a04
jge 0x100062c1
mov edx, dword [ebp - 0x308]
mov ecx, 0x1007cc18
call fcn.1001875a
jmp 0x100062dd
mov dword [ebp - 4], 2
jmp 0x100062ed
lea eax, [ebp - 0x20]
push eax
lea eax, [ebp - 0x48]
push eax
push 0x3dbb
push 0
call fcn.1000597c
add esp, 0x10
mov dword [ebp - 0x13c], 0x1f4d
mov dword [ebp - 0x31c], str.dubq_novyfcxi_ipox_yfpgtjhoi_qyjlbyin_oswbgpvy
cmp dword [ebp - 0x13c], 0x1f92
jle 0x100063f2
and dword [ebp - 0x9c], 0
jmp 0x1000633e
mov eax, dword [ebp - 0x9c]
inc eax
mov dword [ebp - 0x9c], eax
cmp dword [ebp - 0x9c], 0x10d3
jge 0x100063f2
and dword [ebp - 0x74], 0
jmp 0x1000635b
mov eax, dword [ebp - 0x74]
inc eax
mov dword [ebp - 0x74], eax
cmp dword [ebp - 0x74], 0x5fd0
jge 0x100063ed
and dword [ebp - 0xa4], 0
jmp 0x1000637e
mov eax, dword [ebp - 0xa4]
inc eax
mov dword [ebp - 0xa4], eax
cmp dword [ebp - 0xa4], 0x55ce
jge 0x100063e8
mov eax, dword [ebp - 0x9c]
mov ecx, dword [ebp - 0x74]
sar eax, cl
mov ecx, dword [ebp - 0xa4]
sar eax, cl
cdq
mov dword [ebp - 0x3a0], eax
mov dword [ebp - 0x39c], edx
push dword [ebp - 0x39c]
push dword [ebp - 0x3a0]
lea ecx, [ebp - 0x4fc]
call fcn.10002bac
pop ecx
pop ecx
mov dword [ebp - 0x374], eax
mov ecx, dword [ebp - 0x374]
call fcn.100139de
push eax
call fcn.1004a753
pop ecx
lea ecx, [ebp - 0x4fc]
call fcn.100139d4
jmp 0x10006371
jmp 0x10006354
jmp 0x10006331
mov byte [ebp - 4], 7
cmp dword [ebp - 0x13c], 0x1f0d
jge 0x1000640e
push dword [ebp - 0x31c]
call fcn.1004a753
pop ecx
jmp 0x1000642a
mov dword [ebp - 4], 2
jmp 0x1000643a
mov dword [ebp - 0x20], 0
jmp 0x1000644a
mov eax, dword [ebp - 0x20]
inc eax
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 1
jge 0x1000645d
mov eax, dword [ebp - 0x20]
mov dword [ebp + eax*4 - 0x24], 0x278b7212
jmp 0x10006443
mov dword [ebp - 0x20], 0
jmp 0x1000646d
mov eax, dword [ebp - 0x20]
inc eax
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 4
jge 0x10006483
mov eax, dword [ebp - 0x20]
mov dword [ebp + eax*4 - 0x4bc], 0xb43b78c3
jmp 0x10006466
push 1
lea ecx, [ebp - 0x48]
call fcn.10002262
and dword [eax], 0
jmp 0x100064b3
push 1
lea ecx, [ebp - 0x48]
call fcn.10002262
mov dword [ebp - 0x290], eax
mov eax, dword [ebp - 0x290]
mov eax, dword [eax]
inc eax
mov ecx, dword [ebp - 0x290]
mov dword [ecx], eax
push 1
lea ecx, [ebp - 0x48]
call fcn.10002262
cmp dword [eax], 0x1d
jle 0x100067de
mov dword [ebp - 0x18], 0xfffffffa
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x46c], eax
push 1
lea ecx, [ebp - 0x48]
call fcn.10002262
mov esi, dword [ebp - 0x18]
push 1
lea ecx, [ebp - 0x48]
call fcn.10002262
cmp dword [eax], esi
jge 0x100064fd
mov dword [ebp - 0x144], 1
jmp 0x10006504
and dword [ebp - 0x144], 0
mov eax, dword [ebp - 0x18]
cmp dword [ebp - 0x144], eax
jg 0x1000651b
mov dword [ebp - 0x298], 1
jmp 0x10006522
and dword [ebp - 0x298], 0
push 1
lea ecx, [ebp - 0x48]
call fcn.10002262
mov ecx, dword [ebp - 0x298]
cmp ecx, dword [eax]
jge 0x10006542
mov dword [ebp - 0x14c], 1
jmp 0x10006549
and dword [ebp - 0x14c], 0
mov eax, dword [ebp - 0x18]
cmp dword [ebp - 0x14c], eax
jg 0x10006569
mov eax, 0xfff8
test eax, eax
je 0x10006569
mov dword [ebp - 0x2a0], 1
jmp 0x10006570
and dword [ebp - 0x2a0], 0
mov eax, dword [ebp - 0x18]
cmp eax, dword [ebp - 0x2a0]
jne 0x10006587
mov dword [ebp - 0x154], 1
jmp 0x1000658e
and dword [ebp - 0x154], 0
push 1
lea ecx, [ebp - 0x48]
call fcn.10002262
mov ecx, dword [ebp - 0x154]
sub ecx, dword [eax]
cmp ecx, 0x907c4e7c
jbe 0x100065b4
mov dword [ebp - 0x2a8], 1
jmp 0x100065bb
and dword [ebp - 0x2a8], 0
mov eax, dword [ebp - 0x18]
cmp dword [ebp - 0x2a8], eax
jl 0x100065d2
mov dword [ebp - 0x15c], 1
jmp 0x100065d9
and dword [ebp - 0x15c], 0
mov eax, dword [ebp - 0x18]
cmp dword [ebp - 0x15c], eax
jle 0x100065f0
mov dword [ebp - 0x2b0], 1
jmp 0x100065f7
and dword [ebp - 0x2b0], 0
mov eax, dword [ebp - 0x18]
cmp dword [ebp - 0x2b0], eax
jle 0x1000660e
mov dword [ebp - 0x164], 1
jmp 0x10006615
and dword [ebp - 0x164], 0
mov eax, dword [ebp - 0x18]
cmp dword [ebp - 0x164], eax
jl 0x1000662c
mov dword [ebp - 0x2b8], 1
jmp 0x10006633
and dword [ebp - 0x2b8], 0
mov eax, dword [ebp - 0x18]
cmp dword [ebp - 0x2b8], eax
jl 0x1000664a
mov dword [ebp - 0x16c], 1
jmp 0x10006651
and dword [ebp - 0x16c], 0
cmp dword [ebp - 0x16c], 0x23758185
jne 0x10006669
mov dword [ebp - 0x2c0], 1
jmp 0x10006670
and dword [ebp - 0x2c0], 0
push 1
lea ecx, [ebp - 0x48]
call fcn.10002262
mov ecx, dword [ebp - 0x2c0]
cmp ecx, dword [eax]
jg 0x10006690
mov dword [ebp - 0x174], 1
jmp 0x10006697
and dword [ebp - 0x174], 0
push 1
lea ecx, [ebp - 0x48]
call fcn.10002262
mov ecx, dword [ebp - 0x174]
cmp ecx, dword [eax]
je 0x100066b7
mov dword [ebp - 0x2c8], 1
jmp 0x100066be
and dword [ebp - 0x2c8], 0
push 1
lea ecx, [ebp - 0x48]
call fcn.10002262
mov eax, dword [eax]
cmp eax, dword [ebp - 0x2c8]
jg 0x100066de
mov dword [ebp - 0x2d0], 1
jmp 0x100066e5
and dword [ebp - 0x2d0], 0
mov eax, dword [ebp - 0x18]
cmp dword [ebp - 0x2d0], eax
jl 0x100066fc
mov dword [ebp - 0x23c], 1
jmp 0x10006703
and dword [ebp - 0x23c], 0
mov eax, dword [ebp - 0x23c]
mov dword [ebp - 0x54], eax
cmp dword [ebp - 0x54], 0
jne 0x10006729
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x24], 0
jne 0x10006729
cmp dword [ebp - 0x54], 0
jne 0x10006729
cmp dword [ebp - 0x54], 0
mov esi, dword [ebp - 0x18]
push 0
lea ecx, [ebp - 0x48]
call fcn.10002262
imul eax, dword [eax], 0xffffffff
cmp eax, esi
jge 0x10006749
mov dword [ebp - 0x18c], 1
jmp 0x10006750
and dword [ebp - 0x18c], 0
mov eax, dword [ebp - 0x18c]
neg eax
cmp eax, 0xe88636ee
jbe 0x10006771
mov eax, 0xb1743e62
test eax, eax
jne 0x10006771
and dword [ebp - 0x2c4], 0
jmp 0x1000677b
mov dword [ebp - 0x2c4], 1
cmp dword [ebp - 0x2c4], 0xacefce0
jl 0x10006793
mov dword [ebp - 0x194], 1
jmp 0x1000679a
and dword [ebp - 0x194], 0
cmp dword [ebp - 0x194], 0xce4ec6f9
ja 0x100067b2
mov dword [ebp - 0x244], 1
jmp 0x100067b9
and dword [ebp - 0x244], 0
mov eax, dword [ebp - 0x244]
mov dword [ebp - 0x64], eax
mov byte [ebp - 0x35], 0
push 0x3b88
push 0
lea eax, [ebp - 0x35]
push eax
call fcn.1000a8a0
add esp, 0xc
jmp 0x10006492
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x24]
mov dword [ebp - 0x54], eax
cmp dword [ebp - 0x54], 0
jne 0x100067fd
mov dword [ebp - 0x3bc], 1
jmp 0x10006804
and dword [ebp - 0x3bc], 0
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x24], 0
jne 0x10006823
mov eax, 0xfffc
test eax, eax
jne 0x10006823
and dword [ebp - 0x19c], 0
jmp 0x1000682d
mov dword [ebp - 0x19c], 1
mov eax, dword [ebp - 0x64]
cmp dword [ebp - 0x19c], eax
jge 0x10006844
mov dword [ebp - 0x29c], 1
jmp 0x1000684b
and dword [ebp - 0x29c], 0
cmp dword [ebp - 0x29c], 0xc96f
jl 0x10006863
mov dword [ebp - 0x1a4], 1
jmp 0x1000686a
and dword [ebp - 0x1a4], 0
imul eax, dword [ebp - 0x1a4], 0
cmp eax, dword [ebp - 0xe8]
jg 0x10006885
mov dword [ebp - 0x24c], 1
jmp 0x1000688c
and dword [ebp - 0x24c], 0
push 0
lea ecx, [ebp - 0x48]
call fcn.10002262
mov ecx, dword [ebp - 0x24c]
cmp ecx, dword [eax]
jle 0x100068ac
mov dword [ebp - 0x324], 1
jmp 0x100068b3
and dword [ebp - 0x324], 0
cmp dword [ebp - 0x64], 0
jne 0x100068cb
cmp dword [ebp - 0xe8], 0
jne 0x100068cb
and dword [ebp - 0x1ac], 0
jmp 0x100068d5
mov dword [ebp - 0x1ac], 1
push 0
lea ecx, [ebp - 0x48]
call fcn.10002262
mov ecx, dword [ebp - 0x1ac]
cmp ecx, dword [eax]
jg 0x100068f5
mov dword [ebp - 0x2e0], 1
jmp 0x100068fc
and dword [ebp - 0x2e0], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x24]
cmp dword [ebp - 0x2e0], eax
je 0x1000691a
mov dword [ebp - 0x1b4], 1
jmp 0x10006921
and dword [ebp - 0x1b4], 0
cmp dword [ebp - 0x1b4], 1
jb 0x10006936
mov dword [ebp - 0x254], 1
jmp 0x1000693d
and dword [ebp - 0x254], 0
mov eax, dword [ebp - 0x254]
mov dword [ebp - 0xe8], eax
mov eax, dword [ebp - 0xe8]
mov dword [ebp - 0x64], eax
mov esi, dword [ebp - 0x64]
push 1
lea ecx, [ebp - 0x48]
call fcn.10002262
cmp esi, dword [eax]
jl 0x1000696f
mov dword [ebp - 0x108], 1
jmp 0x10006976
and dword [ebp - 0x108], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x108]
mov dword [ebp + eax - 0x4bc], ecx
cmp dword [ebp - 0x108], 0
je 0x10006999
push 0xfffffffffffffffa
pop eax
test eax, eax
jne 0x100069ab
mov eax, 0x7dc4cae1
test eax, eax
jne 0x100069ab
and dword [ebp - 0x1bc], 0
jmp 0x100069b5
mov dword [ebp - 0x1bc], 1
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x1bc]
sub ecx, 0xa
cmp ecx, dword [ebp + eax - 0x24]
jl 0x100069d6
mov dword [ebp - 0x380], 1
jmp 0x100069dd
and dword [ebp - 0x380], 0
push 1
lea ecx, [ebp - 0x48]
call fcn.10002262
mov eax, 0x61f3
test eax, eax
je 0x10006a0b
push 1
lea ecx, [ebp - 0x48]
call fcn.10002262
cmp dword [eax], 0
je 0x10006a0b
mov dword [ebp - 0x2a4], 1
jmp 0x10006a12
and dword [ebp - 0x2a4], 0
push 1
lea ecx, [ebp - 0x48]
call fcn.10002262
mov ecx, dword [ebp - 0x2a4]
cmp ecx, dword [eax]
jl 0x10006a32
mov dword [ebp - 0x1c4], 1
jmp 0x10006a39
and dword [ebp - 0x1c4], 0
cmp dword [ebp - 0x1c4], 0x71eb
jne 0x10006a51
mov dword [ebp - 0x25c], 1
jmp 0x10006a58
and dword [ebp - 0x25c], 0
push 1
lea ecx, [ebp - 0x48]
call fcn.10002262
mov ecx, dword [ebp - 0x25c]
cmp ecx, dword [eax]
je 0x10006a78
mov dword [ebp - 0x1cc], 1
jmp 0x10006a7f
and dword [ebp - 0x1cc], 0
push 4
pop eax
imul eax, eax, 0
imul ecx, dword [ebp - 0x1cc], 0x5619
cmp ecx, dword [ebp + eax - 0x24]
jle 0x10006aa1
mov dword [ebp - 0x2cc], 1
jmp 0x10006aa8
and dword [ebp - 0x2cc], 0
cmp dword [ebp - 0x2cc], 0x491
jne 0x10006ac0
mov dword [ebp - 0x120], 1
jmp 0x10006ac7
and dword [ebp - 0x120], 0
push 1
lea ecx, [ebp - 0x48]
call fcn.10002262
mov ecx, dword [ebp - 0x120]
mov dword [eax], ecx
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x24]
cmp dword [ebp - 0x120], eax
jl 0x10006afd
mov eax, 0xb7ea8d29
test eax, eax
jne 0x10006afd
and dword [ebp - 0x1d4], 0
jmp 0x10006b07
mov dword [ebp - 0x1d4], 1
mov eax, dword [ebp - 0x1d4]
mov dword [ebp - 0x264], eax
cmp dword [ebp - 0x264], 0xa11ad519
jbe 0x10006b2b
mov dword [ebp - 0x1dc], 1
jmp 0x10006b32
and dword [ebp - 0x1dc], 0
mov eax, dword [ebp - 0x1dc]
mov dword [ebp - 0x2ac], eax
cmp dword [ebp - 0x2ac], 0xacb588f4
ja 0x10006b56
mov dword [ebp - 0x1e4], 1
jmp 0x10006b5d
and dword [ebp - 0x1e4], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x24]
add eax, dword [ebp - 0x1e4]
push 4
pop ecx
imul ecx, ecx, 0
cmp dword [ebp + ecx - 0x24], eax
jl 0x10006b8e
mov eax, 0xa1d0942d
test eax, eax
je 0x10006b8e
mov dword [ebp - 0x26c], 1
jmp 0x10006b95
and dword [ebp - 0x26c], 0
cmp dword [ebp - 0x26c], 0xf90bf567
ja 0x10006bad
mov dword [ebp - 0x1ec], 1
jmp 0x10006bb4
and dword [ebp - 0x1ec], 0
cmp dword [ebp - 0x1ec], 2
je 0x10006bc9
mov dword [ebp - 0x2e4], 1
jmp 0x10006bd0
and dword [ebp - 0x2e4], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x2e4]
sub ecx, 3
cmp ecx, dword [ebp + eax - 0x24]
je 0x10006bf1
mov dword [ebp - 0x1f4], 1
jmp 0x10006bf8
and dword [ebp - 0x1f4], 0
mov eax, dword [ebp - 0x1f4]
mov dword [ebp - 0x32c], eax
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x48]
call fcn.10002246
mov eax, dword [0x1007ddcc]
and eax, 1
jne 0x10006c47
mov eax, dword [0x1007ddcc]
or eax, 1
mov dword [0x1007ddcc], eax
mov dword [ebp - 4], 9
mov ecx, 0x1007ddac
call fcn.10014100
push 0x10062bb0
call fcn.1004a729
pop ecx
or dword [ebp - 4], 0xffffffff
mov dword [ebp - 0x2c], 5
mov dword [ebp - 0x114], 0x901516ea
mov dword [ebp - 0x284], 1
mov dword [ebp - 0x2bc], 0x9c2d
mov dword [ebp - 0x398], 0xfffa
mov dword [ebp - 0xac], 0
jmp 0x10006c8f
mov eax, dword [ebp - 0xac]
inc eax
mov dword [ebp - 0xac], eax
cmp dword [ebp - 0xac], 3
jge 0x10006cab
mov eax, dword [ebp - 0xac]
mov dword [ebp + eax*4 - 0x184], 0x41b3c692
jmp 0x10006c82
mov dword [ebp - 0x2c], 2
jmp 0x10006cbb
mov eax, dword [ebp - 0x2c]
dec eax
mov dword [ebp - 0x2c], eax
cmp dword [ebp - 0x2c], 0
jl 0x10006f40
mov dword [ebp - 0x11c], 1
mov dword [ebp - 0x33c], 0xfffffffd
mov eax, dword [ebp - 0x2c]
cmp dword [ebp + eax*4 - 0x184], 0
je 0x10006eeb
mov dword [ebp - 0x1fc], 0xacf25792
mov dword [ebp - 0x274], 0x6b1e
mov dword [ebp - 0x3dc], str.oydmvh_mdk_txyt
cmp dword [ebp - 0x274], 0x6b28
jle 0x10006dc8
call dword [sym.imp.KERNEL32.dll_GetTickCount]
and dword [ebp - 0xf8], 0
jmp 0x10006d34
mov eax, dword [ebp - 0xf8]
inc eax
mov dword [ebp - 0xf8], eax
cmp dword [ebp - 0xf8], 0x16f1
jge 0x10006dc8
and dword [ebp - 0xb4], 0
jmp 0x10006d5a
mov eax, dword [ebp - 0xb4]
inc eax
mov dword [ebp - 0xb4], eax
cmp dword [ebp - 0xb4], 0x6a8e
jge 0x10006dc3
and dword [ebp - 0xf0], 0
jmp 0x10006d7c
mov eax, dword [ebp - 0xf0]
inc eax
mov dword [ebp - 0xf0], eax
cmp dword [ebp - 0xf0], 0x6ae4
jge 0x10006dc1
mov eax, dword [ebp - 0xf8]
add eax, dword [ebp - 0xb4]
mov ecx, dword [ebp - 0xf0]
shl eax, cl
cdq
mov dword [ebp - 0x3ac], eax
mov dword [ebp - 0x3a8], edx
push dword [ebp - 0x3a8]
push dword [ebp - 0x3ac]
mov ecx, 0x1007cc18
call fcn.10013d0a
jmp 0x10006d6f
jmp 0x10006d4d
jmp 0x10006d27
mov dword [ebp - 0x70], 0xa652065c
mov dword [ebp - 4], 0xa
cmp dword [ebp - 0x274], 0x6aae
jge 0x10006df2
mov edx, dword [ebp - 0x3dc]
mov ecx, 0x1007cc18
call fcn.1001875a
jmp 0x10006e0e
or dword [ebp - 4], 0xffffffff
jmp 0x10006e18
mov eax, dword [ebp - 0x70]
sub eax, dword [ebp - 0x11c]
push 4
pop ecx
shl ecx, 1
cmp dword [ebp + ecx - 0x184], eax
jg 0x10006e3b
mov dword [ebp - 0x334], 1
jmp 0x10006e42
and dword [ebp - 0x334], 0
mov eax, dword [ebp - 0x70]
mov dword [ebp - 0x448], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x184]
mov dword [ebp - 0x454], eax
mov eax, dword [ebp - 0x2c]
mov dword [ebp - 0x45c], eax
mov dword [ebp - 0x1fc], 0
mov eax, dword [ebp - 0x1fc]
add eax, dword [ebp - 0x70]
neg eax
cmp eax, dword [ebp - 0x11c]
je 0x10006e90
mov dword [ebp - 0x2b4], 1
jmp 0x10006e97
and dword [ebp - 0x2b4], 0
mov eax, dword [ebp - 0x70]
add eax, dword [ebp - 0x2b4]
cmp eax, dword [ebp - 0x2c]
jge 0x10006eb1
mov dword [ebp - 0x204], 1
jmp 0x10006eb8
and dword [ebp - 0x204], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x184]
cmp dword [ebp - 0x204], eax
jg 0x10006ed9
mov dword [ebp - 0x27c], 1
jmp 0x10006ee0
and dword [ebp - 0x27c], 0
mov eax, dword [ebp - 0x27c]
mov dword [ebp - 0x70], eax
jmp 0x10006f25
mov dword [ebp - 0x38c], 1
push 0x4d1b
push 0x1308
lea eax, [ebp - 0x38c]
push eax
push 0x65d6
lea eax, [ebp - 0x2c]
push eax
push 0x30d7
lea eax, [ebp - 0x11c]
push eax
push 0
call fcn.1000c5cf
add esp, 0x20
push 0x75a0
lea eax, [ebp - 0x33c]
push eax
push 0
call fcn.1000cbef
add esp, 0xc
jmp 0x10006cb4
xor eax, eax
inc eax
je 0x1000702b
cmp dword [ebp - 0x284], 0
jne 0x10006f5e
mov dword [ebp - 0x20c], 1
jmp 0x10006f65
and dword [ebp - 0x20c], 0
mov eax, dword [ebp - 0x20c]
mov dword [ebp - 0x2c], eax
push 4
pop eax
shl eax, 1
mov ecx, dword [ebp - 0x2c]
neg ecx
cmp ecx, dword [ebp + eax - 0x184]
jg 0x10006f8d
mov dword [ebp - 0x3c8], 1
jmp 0x10006f94
and dword [ebp - 0x3c8], 0
mov eax, dword [ebp - 0x114]
add eax, dword [ebp - 0x114]
cmp eax, 0x1119
jne 0x10006fb3
mov dword [ebp - 0x344], 1
jmp 0x10006fba
and dword [ebp - 0x344], 0
push 4
pop eax
shl eax, 1
mov ecx, dword [ebp - 0x2bc]
cmp ecx, dword [ebp + eax - 0x184]
je 0x10006fda
mov dword [ebp - 0x2d4], 1
jmp 0x10006fe1
and dword [ebp - 0x2d4], 0
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x184]
cmp dword [ebp - 0x2d4], eax
jl 0x10007001
mov dword [ebp - 0x214], 1
jmp 0x10007008
and dword [ebp - 0x214], 0
mov eax, dword [ebp - 0x398]
cmp dword [ebp - 0x214], eax
jle 0x1000701f
mov eax, 0xffff
test eax, eax
je 0x1000702b
mov dword [ebp - 0x21c], 1
jmp 0x10007032
and dword [ebp - 0x21c], 0
mov eax, dword [ebp - 0x284]
add eax, dword [ebp - 0x21c]
je 0x10007055
mov eax, 0x7d63
test eax, eax
je 0x10007055
mov dword [ebp - 0x224], 1
jmp 0x1000705c
and dword [ebp - 0x224], 0
mov eax, dword [ebp - 0x2bc]
push 4
pop ecx
imul ecx, ecx, 0
mov ecx, dword [ebp + ecx - 0x184]
add ecx, dword [ebp - 0x224]
lea eax, [ecx + eax + 0x31381660]
test eax, eax
jne 0x1000708c
mov dword [ebp - 0x28c], 1
jmp 0x10007093
and dword [ebp - 0x28c], 0
mov eax, dword [ebp - 0x28c]
mov dword [ebp - 0x114], eax
mov eax, dword [ebp - 0x60]
mov ecx, dword [eax]
call fcn.10004bac
mov dword [ebp - 0x118], eax
cmp dword [ebp - 0x118], 3
jae 0x1000753b
mov eax, dword [ebp - 0x60]
mov eax, dword [eax]
mov dword [ebp - 0x34c], eax
lea eax, [ebp - 0x434]
push eax
mov ecx, 0x1007ddac
call fcn.100141b7
push eax
lea eax, [ebp - 0x34c]
push eax
lea eax, [ebp - 0x430]
push eax
mov ecx, 0x1007ddac
call fcn.100141c5
mov ecx, eax
call fcn.100141da
movzx eax, al
test eax, eax
je 0x1000753b
mov dword [ebp - 0x34], 0xb3ae3556
mov dword [ebp - 0x50], 0
mov dword [ebp - 0x34], 0
jmp 0x10007121
mov eax, dword [ebp - 0x34]
inc eax
mov dword [ebp - 0x34], eax
cmp dword [ebp - 0x34], 0xd
jge 0x10007501
mov dword [ebp - 0x14], 0
mov dword [ebp - 0x3ec], 0
mov dword [ebp - 0x58], 0x131b3b3
mov dword [ebp - 0xbc], 0
jmp 0x1000715c
mov eax, dword [ebp - 0xbc]
inc eax
mov dword [ebp - 0xbc], eax
cmp dword [ebp - 0xbc], 2
jge 0x10007178
mov eax, dword [ebp - 0xbc]
mov dword [ebp + eax*4 - 0x2dc], 0x73eb905d
jmp 0x1000714f
mov dword [ebp - 0x14], 1
jmp 0x10007188
mov eax, dword [ebp - 0x14]
dec eax
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 0
jl 0x100074a3
mov dword [ebp - 0x1b8], 0xa57461d0
mov eax, dword [ebp - 0x14]
cmp dword [ebp + eax*4 - 0x2dc], 0
jne 0x100071b8
cmp dword [ebp - 0x14], 0
jne 0x100071b8
and dword [ebp - 0x22c], 0
jmp 0x100071c2
mov dword [ebp - 0x22c], 1
cmp dword [ebp - 0x22c], 0
jg 0x100071d7
mov dword [ebp - 0x2e8], 1
jmp 0x100071de
and dword [ebp - 0x2e8], 0
mov eax, dword [ebp - 0x50]
sub eax, dword [ebp - 0x2e8]
cmp eax, 1
jg 0x100071f8
mov dword [ebp - 0x134], 1
jmp 0x100071ff
and dword [ebp - 0x134], 0
mov eax, dword [ebp - 0x14]
cmp dword [ebp - 0x134], eax
je 0x10007216
mov dword [ebp - 0x294], 1
jmp 0x1000721d
and dword [ebp - 0x294], 0
cmp dword [ebp - 0x294], 0x15e8
jne 0x10007235
mov dword [ebp - 0x178], 1
jmp 0x1000723c
and dword [ebp - 0x178], 0
cmp dword [ebp - 0x178], 0xfffffff7
je 0x10007251
mov dword [ebp - 0x188], 1
jmp 0x10007258
and dword [ebp - 0x188], 0
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp + eax*4 - 0x2dc]
cmp eax, dword [ebp - 0x188]
jge 0x10007332
mov dword [ebp - 0x124], 0x4ac0198a
mov dword [ebp - 0x50], 0xfffffff8
jmp 0x10007288
mov eax, dword [ebp - 0x50]
inc eax
mov dword [ebp - 0x50], eax
cmp dword [ebp - 0x50], 0x18
je 0x1000732d
mov dword [ebp - 0x6c], 0xffffffff
mov dword [ebp - 0x6c], 0x15
jmp 0x100072a9
mov eax, dword [ebp - 0x6c]
dec eax
mov dword [ebp - 0x6c], eax
cmp dword [ebp - 0x6c], 0xa
jne 0x10007328
push 1
lea ecx, [ebp - 0x420]
call fcn.100021e9
mov dword [ebp - 4], 0xc
lea eax, [ebp - 0x438]
push eax
push 0
lea eax, [ebp - 0x420]
push eax
call fcn.10005af6
add esp, 0xc
mov dword [ebp - 0x124], 7
mov esi, dword [ebp - 0x124]
push 0
lea ecx, [ebp - 0x420]
call fcn.10002262
mov dword [eax], esi
lea eax, [ebp - 0x6c]
push eax
push 0x57d0
push 0
lea eax, [ebp - 0x124]
push eax
call fcn.1000f8d0
add esp, 0x10
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x420]
call fcn.10002246
jmp 0x100072a2
jmp 0x10007281
jmp 0x1000749e
mov dword [ebp - 0x1c8], 0xbac89d73
mov dword [ebp - 0x1c0], 0xb7228d0
mov dword [ebp - 0x3a4], 0x9622cfb6
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x2dc], 0x6d20a2e7
jg 0x1000736f
mov dword [ebp - 0x1a0], 1
jmp 0x10007376
and dword [ebp - 0x1a0], 0
mov eax, dword [ebp - 0x14]
mov ecx, dword [ebp - 0x14]
mov edx, dword [ebp - 0x34]
add edx, dword [ebp + ecx*4 - 0x2dc]
cmp edx, dword [ebp + eax*4 - 0x2dc]
jle 0x1000739b
mov dword [ebp - 0x190], 1
jmp 0x100073a2
and dword [ebp - 0x190], 0
cmp dword [ebp - 0x190], 0xd4fe9304
je 0x100073ba
mov dword [ebp - 0x198], 1
jmp 0x100073c1
and dword [ebp - 0x198], 0
mov eax, dword [ebp - 0x14]
add eax, dword [ebp - 0x198]
cmp dword [ebp - 0x1a0], eax
jne 0x100073de
mov dword [ebp - 0x1a8], 1
jmp 0x100073e5
and dword [ebp - 0x1a8], 0
mov eax, dword [ebp - 0x3ec]
imul eax, dword [ebp - 0x1a8]
cmp eax, dword [ebp - 0x14]
jg 0x10007409
cmp dword [ebp - 0x1c8], 0
jne 0x10007409
and dword [ebp - 0x1b0], 0
jmp 0x10007413
mov dword [ebp - 0x1b0], 1
mov eax, dword [ebp - 0x1b0]
mov dword [ebp - 0x1b8], eax
mov eax, dword [ebp - 0x1b8]
mov dword [ebp - 0x1c0], eax
mov eax, dword [ebp - 0x1c0]
cmp eax, dword [ebp - 0x34]
je 0x10007442
mov dword [ebp - 0x354], 1
jmp 0x10007449
and dword [ebp - 0x354], 0
mov eax, dword [ebp - 0x50]
mov dword [ebp - 0x464], eax
cmp dword [ebp - 0x14], 0
jne 0x10007467
cmp dword [ebp - 0x58], 0
jne 0x10007467
and dword [ebp - 0x1d0], 0
jmp 0x10007471
mov dword [ebp - 0x1d0], 1
mov eax, dword [ebp - 0x1c8]
cmp eax, dword [ebp - 0x1d0]
jne 0x1000748b
mov dword [ebp - 0x1d8], 1
jmp 0x10007492
and dword [ebp - 0x1d8], 0
mov eax, dword [ebp - 0x1d8]
mov dword [ebp - 0x3a4], eax
jmp 0x10007181
mov dword [ebp - 0x58], 0
jmp 0x100074b3
mov eax, dword [ebp - 0x58]
inc eax
mov dword [ebp - 0x58], eax
cmp dword [ebp - 0x58], 1
jg 0x100074fc
mov byte [ebp - 0x36], 0
push 0x3913
push 0x819
push 0x6b05
lea eax, [ebp - 0x36]
push eax
push 0x12e2
push 0xf68
push 0x7baa
push 1
push 0x5889
push 0x23ce
push 0x28cb
push 1
call fcn.10005251
add esp, 0x30
jmp 0x100074ac
jmp 0x1000711a
lea eax, [ebp - 0x34]
push eax
push 0
call fcn.10005a5c
pop ecx
pop ecx
mov eax, dword [ebp - 0x60]
mov eax, dword [eax]
mov dword [ebp - 0x35c], eax
lea eax, [ebp - 0x35c]
push eax
mov ecx, 0x1007ddac
call fcn.10014154
push eax
mov ecx, dword [ebp - 0x170]
call fcn.10013f63
jmp 0x1000843d
push 2
lea ecx, [ebp - 0x130]
call fcn.100021e9
mov dword [ebp - 4], 0xd
mov dword [ebp - 0x10c], 0
mov dword [ebp - 0x30], 0x2263126f
push 3
lea ecx, [ebp - 0x42c]
call fcn.100021e9
mov byte [ebp - 4], 0xe
mov dword [ebp - 0x210], 1
mov dword [ebp - 0x238], 0x4b79a97a
mov dword [ebp - 0x414], 0xfffffff7
mov dword [ebp - 0x410], 0xfffffff7
mov dword [ebp - 0x40c], 0xfffffff7
mov dword [ebp - 0x408], 0xfffffff7
lea eax, [ebp - 0x1c]
push eax
lea eax, [ebp - 0x130]
push eax
push 1
push 1
push 0x2dd
push 1
push 0x1180
call fcn.10004e0c
add esp, 0x1c
mov dword [ebp - 0x1c], 0
jmp 0x100075e0
mov eax, dword [ebp - 0x1c]
inc eax
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 1
jge 0x100075f3
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0x5c], 0x9aed23b6
jmp 0x100075d9
push 0x794
push 0
lea eax, [ebp - 0x1c]
push eax
lea eax, [ebp - 0x42c]
push eax
call fcn.1000bca4
add esp, 0x10
mov dword [ebp - 0x1c], 0
jmp 0x1000761d
mov eax, dword [ebp - 0x1c]
inc eax
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 4
jge 0x10007633
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0x4cc], 0x1ca72764
jmp 0x10007616
mov eax, dword [ebp - 0x30]
dec eax
mov dword [ebp - 0x30], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x5c], 0
jne 0x100078b2
mov esi, dword [ebp - 0x30]
push 1
lea ecx, [ebp - 0x130]
call fcn.10002262
cmp dword [eax], esi
jne 0x1000766b
mov dword [ebp - 0x3d4], 1
jmp 0x10007672
and dword [ebp - 0x3d4], 0
mov eax, dword [ebp - 0x30]
mov dword [ebp - 0x470], eax
mov eax, dword [ebp - 0x30]
mov dword [ebp - 0x444], eax
push 1
lea ecx, [ebp - 0x130]
call fcn.10002262
cmp dword [eax], 0xbf7c
jl 0x100076a0
cmp dword [ebp - 0x210], 0
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x5c], 0x1ebc
je 0x100076bc
mov dword [ebp - 0x1e0], 1
jmp 0x100076c3
and dword [ebp - 0x1e0], 0
push 1
lea ecx, [ebp - 0x130]
call fcn.10002262
mov ecx, dword [ebp - 0x1e0]
cmp ecx, dword [eax]
jne 0x100076e6
mov dword [ebp - 0x1e8], 1
jmp 0x100076ed
and dword [ebp - 0x1e8], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x5c]
cmp dword [ebp - 0x1e8], eax
jl 0x1000770b
mov dword [ebp - 0x1f0], 1
jmp 0x10007712
and dword [ebp - 0x1f0], 0
cmp dword [ebp - 0x1f0], 0xe01afec1
je 0x1000772a
mov dword [ebp - 0x1f8], 1
jmp 0x10007731
and dword [ebp - 0x1f8], 0
mov eax, dword [ebp - 0x10c]
imul eax, dword [ebp - 0x1f8]
test eax, eax
je 0x10007753
xor eax, eax
inc eax
je 0x10007753
mov dword [ebp - 0x200], 1
jmp 0x1000775a
and dword [ebp - 0x200], 0
mov esi, dword [ebp - 0x200]
inc esi
push 1
lea ecx, [ebp - 0x130]
call fcn.10002262
cmp esi, dword [eax]
jl 0x1000777e
mov dword [ebp - 0x208], 1
jmp 0x10007785
and dword [ebp - 0x208], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x5c]
mov dword [ebp - 0x460], eax
mov eax, dword [ebp - 0x208]
mov dword [ebp - 0x10c], eax
mov eax, dword [ebp - 0x10c]
mov dword [ebp - 0x468], eax
mov eax, dword [ebp - 0x238]
mov dword [ebp - 0x458], eax
mov eax, dword [ebp - 0x210]
mov dword [ebp - 0x218], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x218]
mov dword [ebp + eax - 0x5c], ecx
push 0
lea ecx, [ebp - 0x130]
call fcn.10002262
mov ecx, dword [ebp - 0x218]
imul ecx, dword [eax]
mov dword [ebp - 0x220], ecx
push 4
pop eax
shl eax, 1
mov ecx, dword [ebp - 0x220]
mov dword [ebp + eax - 0x414], ecx
cmp dword [ebp - 0x220], 0xd17ba7da
jne 0x1000781b
mov dword [ebp - 0x228], 1
jmp 0x10007822
and dword [ebp - 0x228], 0
mov eax, dword [ebp - 0x30]
cmp dword [ebp - 0x228], eax
jg 0x10007839
mov dword [ebp - 0x230], 1
jmp 0x10007840
and dword [ebp - 0x230], 0
push 1
lea ecx, [ebp - 0x42c]
call fcn.10002262
mov dword [ebp - 0x110], eax
mov eax, dword [ebp - 0x110]
mov eax, dword [eax]
dec eax
mov ecx, dword [ebp - 0x110]
mov dword [ecx], eax
mov eax, dword [ebp - 0x110]
mov eax, dword [eax]
cmp eax, dword [ebp - 0x230]
jg 0x10007880
mov dword [ebp - 0x364], 1
jmp 0x10007887
and dword [ebp - 0x364], 0
push 0
lea ecx, [ebp - 0x130]
call fcn.10002262
push 1
lea ecx, [ebp - 0x130]
call fcn.10002262
cmp dword [eax], 0xd7e3c239
jne 0x100078b2
and dword [ebp - 0x240], 0
jmp 0x100078bc
mov dword [ebp - 0x240], 1
mov eax, dword [ebp - 0x238]
cmp dword [ebp - 0x240], eax
jl 0x100078d6
mov dword [ebp - 0x248], 1
jmp 0x100078dd
and dword [ebp - 0x248], 0
mov eax, dword [ebp - 0x30]
cmp dword [ebp - 0x248], eax
je 0x10007903
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0x414], 0
je 0x10007903
mov dword [ebp - 0x250], 1
jmp 0x1000790a
and dword [ebp - 0x250], 0
push 4
pop eax
imul eax, eax, 3
mov ecx, dword [ebp - 0x250]
mov dword [ebp + eax - 0x4cc], ecx
mov byte [ebp - 4], 0xd
lea ecx, [ebp - 0x42c]
call fcn.10002246
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x130]
call fcn.10002246
lea eax, [ebp - 0x508]
push eax
call fcn.10002c19
pop ecx
mov esi, eax
lea edi, [ebp - 0x494]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
lea esi, [ebp - 0x494]
lea edi, [ebp - 0x4ac]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
mov eax, dword [ebp - 0x60]
mov ecx, dword [eax]
call fcn.10004bd0
mov dword [ebp - 0x304], eax
mov dword [ebp - 0x280], 0x1894
mov dword [ebp - 0x3e4], str.zhdlfmid_wsdow_hmemjbf
cmp dword [ebp - 0x280], 0x1b27
jle 0x10007a82
push 0
push 0x2192
call dword [sym.imp.USER32.dll_GetWindowThreadProcessId]
and dword [ebp - 0xe4], 0
jmp 0x100079b9
mov eax, dword [ebp - 0xe4]
inc eax
mov dword [ebp - 0xe4], eax
cmp dword [ebp - 0xe4], 0x969
jge 0x10007a7a
and dword [ebp - 0xe0], 0
jmp 0x100079df
mov eax, dword [ebp - 0xe0]
inc eax
mov dword [ebp - 0xe0], eax
cmp dword [ebp - 0xe0], 0x1dae
jge 0x10007a75
and dword [ebp - 0xc4], 0
jmp 0x10007a05
mov eax, dword [ebp - 0xc4]
inc eax
mov dword [ebp - 0xc4], eax
cmp dword [ebp - 0xc4], 0x5ee2
jge 0x10007a70
mov ecx, dword [ebp - 0xe0]
sub ecx, dword [ebp - 0xc4]
mov eax, dword [ebp - 0xe4]
sar eax, cl
cdq
mov dword [ebp - 0x3b8], eax
mov dword [ebp - 0x3b4], edx
push dword [ebp - 0x3b4]
push dword [ebp - 0x3b8]
lea ecx, [ebp - 0x520]
call fcn.10002bac
pop ecx
pop ecx
mov dword [ebp - 0x3b0], eax
mov ecx, dword [ebp - 0x3b0]
call fcn.100139de
push eax
call fcn.1004a753
pop ecx
lea ecx, [ebp - 0x520]
call fcn.100139d4
jmp 0x100079f8
jmp 0x100079d2
jmp 0x100079ac
push 0
call dword [sym.imp.KERNEL32.dll_GetFileAttributesW]
mov dword [ebp - 0x260], 0xc70c
mov dword [ebp - 0x258], 0x2600
mov dword [ebp - 0x36c], str.hqjt_iansdny_deg_bhht_mtywxfk_gzy_yyju_rfxg_tkxmvnf_wftfdd_ibt_rti_emlokp
cmp dword [ebp - 0x258], 0x2996
jle 0x10007b74
push 0
push 0xc11
call dword [sym.imp.GDI32.dll_CreateHatchBrush]
and dword [ebp - 0x80], 0
jmp 0x10007aca
mov eax, dword [ebp - 0x80]
inc eax
mov dword [ebp - 0x80], eax
cmp dword [ebp - 0x80], 0x5ed5
jge 0x10007b74
and dword [ebp - 0xcc], 0
jmp 0x10007aed
mov eax, dword [ebp - 0xcc]
inc eax
mov dword [ebp - 0xcc], eax
cmp dword [ebp - 0xcc], 0x53d1
jge 0x10007b6f
and dword [ebp - 0xec], 0
jmp 0x10007b0f
mov eax, dword [ebp - 0xec]
inc eax
mov dword [ebp - 0xec], eax
cmp dword [ebp - 0xec], 0x14a2
jge 0x10007b6a
and dword [ebp - 0x78], 0
jmp 0x10007b28
mov eax, dword [ebp - 0x78]
inc eax
mov dword [ebp - 0x78], eax
cmp dword [ebp - 0x78], 0x6e11
jge 0x10007b68
mov eax, dword [ebp - 0xcc]
sub eax, dword [ebp - 0xec]
xor eax, dword [ebp - 0x78]
or eax, dword [ebp - 0x80]
cdq
mov dword [ebp - 0x3c4], eax
mov dword [ebp - 0x3c0], edx
push dword [ebp - 0x3c0]
push dword [ebp - 0x3c4]
mov ecx, 0x1007cc18
call fcn.10013d0a
jmp 0x10007b21
jmp 0x10007b02
jmp 0x10007ae0
jmp 0x10007ac3
mov dword [ebp - 0x278], 0xffffffff
mov dword [ebp - 4], 0xf
cmp dword [ebp - 0x258], 0x2393
jge 0x10007ba1
mov edx, dword [ebp - 0x36c]
mov ecx, 0x1007cc18
call fcn.1001875a
jmp 0x10007bbd
or dword [ebp - 4], 0xffffffff
jmp 0x10007bc7
mov dword [ebp - 0x270], 0x849f845d
push 4
lea ecx, [ebp - 0x404]
call fcn.100021e9
mov dword [ebp - 4], 0x11
mov dword [ebp - 0x268], 0xffffffff
push 0x5770
push 0xf56
push 0
push 0x1bc2
lea eax, [ebp - 0x404]
push eax
lea eax, [ebp - 0x43c]
push eax
push 0x79d6
call fcn.10009957
add esp, 0x1c
lea eax, [ebp - 0x270]
push eax
lea eax, [ebp - 0x278]
push eax
push 0
lea eax, [ebp - 0x260]
push eax
push 0x271a
lea eax, [ebp - 0x404]
push eax
lea eax, [ebp - 0x268]
push eax
call fcn.1000b161
add esp, 0x1c
lea eax, [ebp - 0x260]
push eax
lea eax, [ebp - 0x268]
push eax
push 1
lea eax, [ebp - 0x404]
push eax
push 1
lea eax, [ebp - 0x270]
push eax
push 0
push 0x223f
lea eax, [ebp - 0x278]
push eax
push 0x51d3
call fcn.1000a8d3
add esp, 0x28
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x404]
call fcn.10002246
mov dword [ebp - 4], 0x12
cmp dword [ebp - 0x280], 0x179a
jge 0x10007cb6
push dword [ebp - 0x3e4]
call fcn.1004a753
pop ecx
jmp 0x10007cd2
or dword [ebp - 4], 0xffffffff
jmp 0x10007cdc
lea eax, [ebp - 0x4ac]
push eax
push dword [ebp - 0x304]
push dword [ebp - 0x118]
lea eax, [ebp - 0x488]
push eax
call fcn.10004c23
add esp, 0x10
mov dword [ebp - 4], 0x14
push 3
lea ecx, [ebp - 0x3f8]
call fcn.100021e9
mov byte [ebp - 4], 0x15
lea eax, [ebp - 0x440]
push eax
push 0x1067
lea eax, [ebp - 0x3f8]
push eax
push 0
call fcn.10009295
add esp, 0x10
push 2
lea ecx, [ebp - 0x3f8]
call fcn.10002262
and dword [eax], 0
jmp 0x10007d69
push 2
lea ecx, [ebp - 0x3f8]
call fcn.10002262
mov dword [ebp - 0x288], eax
mov eax, dword [ebp - 0x288]
mov eax, dword [eax]
dec eax
mov ecx, dword [ebp - 0x288]
mov dword [ecx], eax
push 2
lea ecx, [ebp - 0x3f8]
call fcn.10002262
cmp dword [eax], 0xfffffff0
jge 0x10007e03
mov dword [ebp - 0x88], 1
mov dword [ebp - 0x300], 0
mov dword [ebp - 0x88], 9
jmp 0x10007dac
mov eax, dword [ebp - 0x88]
inc eax
mov dword [ebp - 0x88], eax
cmp dword [ebp - 0x88], 0x11
jge 0x10007dfe
mov dword [ebp - 0x90], 0
jmp 0x10007dce
mov eax, dword [ebp - 0x90]
inc eax
mov dword [ebp - 0x90], eax
cmp dword [ebp - 0x90], 3
jge 0x10007dea
mov eax, dword [ebp - 0x90]
mov dword [ebp + eax*4 - 0x4a0], 0xfffffffc
jmp 0x10007dc1
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x4a0]
mov dword [ebp - 0x300], eax
jmp 0x10007d9f
jmp 0x10007d45
mov byte [ebp - 4], 0x14
lea ecx, [ebp - 0x3f8]
call fcn.10002246
cmp dword [ebp - 0x118], 3
jae 0x10008071
mov dword [ebp - 0x3c], 1
mov dword [ebp - 0x140], 0x1e0bec03
mov dword [ebp - 0x98], 0
jmp 0x10007e49
mov eax, dword [ebp - 0x98]
inc eax
mov dword [ebp - 0x98], eax
cmp dword [ebp - 0x98], 1
jge 0x10007e65
mov eax, dword [ebp - 0x98]
mov dword [ebp + eax*4 - 0x328], 5
jmp 0x10007e3c
mov dword [ebp - 0x3c], 0
jmp 0x10007e75
mov eax, dword [ebp - 0x3c]
inc eax
mov dword [ebp - 0x3c], eax
cmp dword [ebp - 0x3c], 0xd
jg 0x1000803b
mov dword [ebp - 0xa8], 0xc76d7be7
mov dword [ebp - 0x158], 0x56ebf4d
mov dword [ebp - 0xa0], 0
jmp 0x10007eac
mov eax, dword [ebp - 0xa0]
inc eax
mov dword [ebp - 0xa0], eax
cmp dword [ebp - 0xa0], 2
jge 0x10007ec8
mov eax, dword [ebp - 0xa0]
mov dword [ebp + eax*4 - 0x2f8], 0
jmp 0x10007e9f
cmp dword [ebp - 0x3c], 0
je 0x10007eed
push 1
push 0
push 0x127
push 1
push 0x549a
push 0x2db7
call fcn.1000ad97
add esp, 0x18
jmp 0x10007f08
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x2f8]
dec eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x2f8], eax
mov dword [ebp - 0xa8], 0
jmp 0x10007f21
mov eax, dword [ebp - 0xa8]
inc eax
mov dword [ebp - 0xa8], eax
cmp dword [ebp - 0xa8], 0x17
jl 0x10008036
mov dword [ebp - 0x320], 0xfffffff6
mov dword [ebp - 0xb0], 0
jmp 0x10007f51
mov eax, dword [ebp - 0xb0]
inc eax
mov dword [ebp - 0xb0], eax
cmp dword [ebp - 0xb0], 2
jge 0x10007f6d
mov eax, dword [ebp - 0xb0]
mov dword [ebp + eax*4 - 0x450], 0x923c
jmp 0x10007f44
cmp dword [ebp - 0x3c], 0
je 0x10007f78
jmp 0x10008036
push 2
pop eax
test eax, eax
je 0x10007fed
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x2f8]
mov dword [ebp - 0x138], eax
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x138]
mov dword [ebp + eax - 0x450], ecx
mov eax, dword [ebp - 0x138]
sub eax, dword [ebp - 0x320]
mov dword [ebp - 0x140], eax
je 0x10007fc5
mov dword [ebp - 0x148], 1
jmp 0x10007fcc
and dword [ebp - 0x148], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x2f8]
cmp eax, dword [ebp - 0x148]
jle 0x10007fed
mov dword [ebp - 0x150], 1
jmp 0x10007ff4
and dword [ebp - 0x150], 0
mov eax, dword [ebp - 0x150]
mov dword [ebp - 0x158], eax
mov eax, dword [ebp - 0x158]
cmp eax, dword [ebp - 0x3c]
jl 0x10008017
mov dword [ebp - 0x160], 1
jmp 0x1000801e
and dword [ebp - 0x160], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x160]
mov dword [ebp + eax - 0x328], ecx
jmp 0x10007f14
jmp 0x10007e6e
push 0x24fe
push dword [ebp - 0x60]
push 0
push 0
push 1
push 0x1007ddac
push 0x3445
lea eax, [ebp - 0x488]
push eax
push 0x7110
push 0x4400
push 0x3f6
call fcn.1000d5d0
add esp, 0x2c
mov dword [ebp - 0x168], 0x58ab
mov dword [ebp - 0x358], str.ywxlrdmxq_lgoraoaug_vpvn_xcp_wurdiouq_rrv_pyjnplfco
cmp dword [ebp - 0x168], 0x5c4d
jle 0x10008135
and dword [ebp - 0xb8], 0
jmp 0x100080ab
mov eax, dword [ebp - 0xb8]
inc eax
mov dword [ebp - 0xb8], eax
cmp dword [ebp - 0xb8], 0x334f
jge 0x10008135
and dword [ebp - 0xc0], 0
jmp 0x100080cd
mov eax, dword [ebp - 0xc0]
inc eax
mov dword [ebp - 0xc0], eax
cmp dword [ebp - 0xc0], 0x32a0
jge 0x10008130
mov eax, dword [ebp - 0xb8]
and eax, dword [ebp - 0xc0]
cdq
mov dword [ebp - 0x3d0], eax
mov dword [ebp - 0x3cc], edx
push dword [ebp - 0x3cc]
push dword [ebp - 0x3d0]
lea ecx, [ebp - 0x550]
call fcn.10002bac
pop ecx
pop ecx
mov dword [ebp - 0x330], eax
mov ecx, dword [ebp - 0x330]
call fcn.100139de
push eax
call fcn.1004a753
pop ecx
lea ecx, [ebp - 0x550]
call fcn.100139d4
jmp 0x100080c0
jmp 0x1000809e
mov dword [ebp - 0x4c], 0xfffffff9
mov dword [ebp - 0x350], 8
mov dword [ebp - 0x348], 0xb1f356d9
lea eax, [ebp - 0x4c]
push eax
push 0x901
push 1
push 0
push 1
push 0x71e
push 0x7073
push 0x3a72
push 0x6e24
push 0x2d7
push 0x3e86
call fcn.1000d5d0
add esp, 0x2c
mov dword [ebp - 0x4c], 0x12
jmp 0x10008195
mov eax, dword [ebp - 0x4c]
dec eax
mov dword [ebp - 0x4c], eax
cmp dword [ebp - 0x4c], 0xb
jg 0x100083c3
push 1
lea ecx, [ebp - 0x314]
call fcn.100021e9
mov byte [ebp - 4], 0x16
mov dword [ebp - 0x68], 0xffffffff
mov dword [ebp - 0x340], 0xfa18394d
mov dword [ebp - 0xc8], 0
jmp 0x100081da
mov eax, dword [ebp - 0xc8]
inc eax
mov dword [ebp - 0xc8], eax
cmp dword [ebp - 0xc8], 1
jge 0x100081fc
push dword [ebp - 0xc8]
lea ecx, [ebp - 0x314]
call fcn.10002262
mov dword [eax], 0x52f34111
jmp 0x100081cd
mov dword [ebp - 0x68], 0
jmp 0x1000820c
mov eax, dword [ebp - 0x68]
inc eax
mov dword [ebp - 0x68], eax
cmp dword [ebp - 0x68], 0
jg 0x10008369
mov dword [ebp - 0xd0], 0xe45bbbde
mov dword [ebp - 0xd0], 0
jmp 0x10008239
mov eax, dword [ebp - 0xd0]
dec eax
mov dword [ebp - 0xd0], eax
cmp dword [ebp - 0xd0], 0
jl 0x10008364
mov dword [ebp - 0xd8], 1
mov dword [ebp - 0xd8], 0
jmp 0x10008269
mov eax, dword [ebp - 0xd8]
inc eax
mov dword [ebp - 0xd8], eax
cmp dword [ebp - 0xd8], 0
jg 0x10008348
mov dword [ebp - 0x28], 1
mov dword [ebp - 0x28], 0
jmp 0x1000828d
mov eax, dword [ebp - 0x28]
dec eax
mov dword [ebp - 0x28], eax
cmp dword [ebp - 0x28], 0
jl 0x100082d3
mov dword [ebp - 0x338], 0xc80ae7b1
lea eax, [ebp - 0x314]
push eax
push 0
push 0x118b
lea eax, [ebp - 0x338]
push eax
push 1
push 0x2dfb
push 1
lea eax, [ebp - 0x28]
push eax
push 0x6a67
push 0x361b
call fcn.10005b29
add esp, 0x28
jmp 0x10008286
mov dword [ebp - 0x28], 0
jmp 0x100082e3
mov eax, dword [ebp - 0x28]
dec eax
mov dword [ebp - 0x28], eax
cmp dword [ebp - 0x28], 0
jl 0x10008343
push dword [ebp - 0x28]
lea ecx, [ebp - 0x314]
call fcn.10002262
cmp dword [eax], 0
je 0x100082fe
jmp 0x10008343
push 0x2f36
push 1
push 0x2eb2
push 0x3e48
push 0x2164
push 0x6d34
push 0x24e
push 0x470e
push 0x3a40
push 0x59ce
push 1
push 0x3bbc
push 0x441c
call fcn.1000560b
add esp, 0x34
jmp 0x100082dc
jmp 0x1000825c
mov byte [ebp - 0x37], 0
push 0x2268
push 0
lea eax, [ebp - 0x37]
push eax
call fcn.1000595a
add esp, 0xc
jmp 0x1000822c
jmp 0x10008205
push 0x4d78
push 0x4db3
lea eax, [ebp - 0x68]
push eax
push 0
push 0x26b3
lea eax, [ebp - 0x340]
push eax
lea eax, [ebp - 0x348]
push eax
push 1
push 0x7be1
push 1
lea eax, [ebp - 0x4c]
push eax
lea eax, [ebp - 0x350]
push eax
lea eax, [ebp - 0x314]
push eax
call fcn.1000ccfa
add esp, 0x34
mov byte [ebp - 4], 0x14
lea ecx, [ebp - 0x314]
call fcn.10002246
jmp 0x1000818e
mov byte [ebp - 4], 0x17
cmp dword [ebp - 0x168], 0x55bf
jge 0x100083df
push dword [ebp - 0x358]
call fcn.1004a753
pop ecx
jmp 0x100083fb
mov dword [ebp - 4], 0x14
jmp 0x1000840b
lea eax, [ebp - 0x488]
push eax
mov ecx, dword [ebp - 0x170]
call fcn.10013f63
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x488]
call fcn.10013f59
jmp 0x1000843d
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret