Function at 0x1003d9e8
Capabilities:
Check os version
Delete directory

Disassembly:
mov eax, 0x10061b4b
call fcn.10060104
sub esp, 0x538
movdqa xmm0, xmmword [0x1006e9d0]
lea eax, [ebp - 0x450]
push ebx
push esi
push edi
mov dword [ebp - 0x10], esp
lea ecx, [ebp - 0x244]
push dword [ebp - 0x110]
xor ebx, ebx
push eax
lea eax, [ebp - 0x460]
mov dword [ebp - 0x244], ebx
push eax
push ebx
movdqu xmmword [ebp - 0x460], xmm0
mov dword [ebp - 0x240], ebx
mov dword [ebp - 0x23c], ebx
call fcn.100096b7
mov dword [ebp - 0x1c], 0xe5ccc90a
mov dword [ebp - 0x3c], 0xfffffffc
mov dword [ebp - 0x1c], 3
push 2
pop edi
cmp dword [ebp - 0x1c], ebx
jl 0x1003db00
mov esi, dword [ebp - 0x244]
xor ecx, ecx
inc ecx
mov dword [ebp - 0x18], 0xfff9
mov dword [ebp - 0x20], ebx
jmp 0x1003da85
mov eax, dword [ebp - 0x20]
mov dword [ebp + eax*4 - 0x41c], ebx
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], edi
jl 0x1003da78
mov dword [ebp - 0x20], ebx
jmp 0x1003da9c
mov eax, dword [ebp - 0x20]
mov dword [ebp + eax*4 - 0x3fc], ecx
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], edi
jl 0x1003da8f
mov eax, dword [ebp - 0x18]
sub eax, dword [ebp - 0x18]
neg eax
push 1
sbb eax, eax
xor edx, edx
inc eax
mov dword [ebp - 0x418], eax
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x18]
mov dword [esi + 8], eax
lea ecx, [eax - 1]
mov eax, dword [ebp - 0x18]
cmp ecx, eax
mov eax, dword [ebp - 0x1c]
pop ecx
setg dl
sub eax, edx
neg eax
sbb eax, eax
add eax, 0xfe3e
mov dword [ebp - 0x3fc], eax
mov dword [ebp - 0x3c], eax
dec dword [ebp - 0x1c]
jns 0x1003da6c
lea ecx, [ebp - 0x244]
call fcn.10006788
mov dword [ebp - 0x20], 0x5020f89b
mov dword [ebp - 0x18], 0xa20b2878
mov dword [ebp - 0x28], ebx
mov dword [ebp - 0x3c], 0xfffffffa
mov dword [ebp - 0x1c], ebx
jmp 0x1003db39
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0x164], 0xffffffff
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], edi
jl 0x1003db28
mov dword [ebp - 0x1c], ebx
jmp 0x1003db54
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0x1a4], 9
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], edi
jl 0x1003db43
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x20]
mov edx, dword [ebp - 0x20]
neg ecx
sbb ecx, ecx
xor eax, eax
neg ecx
cmp ecx, 8
sete al
sub edx, eax
mov eax, dword [ebp - 0x20]
neg edx
sbb edx, edx
xor ecx, ecx
inc edx
cmp eax, edx
setne cl
mov dword [ebp - 0x20], ecx
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x20]
sub ecx, eax
imul ecx, dword [ebp - 0x18]
neg ecx
sbb ecx, ecx
xor edx, edx
inc ecx
mov dword [ebp - 0x18], ecx
mov ecx, dword [ebp - 0x164]
mov eax, dword [ebp - 0x18]
add ecx, eax
mov eax, dword [ebp - 0x160]
cmp ecx, eax
mov eax, dword [ebp - 0x1a0]
setle dl
xor ecx, ecx
cmp edx, eax
mov eax, dword [ebp - 0x164]
setg cl
xor edx, edx
cmp ecx, eax
mov eax, dword [ebp - 0x1a0]
sete dl
sub edx, eax
jne 0x1003dbe7
cmp dword [ebp - 0x160], ebx
jne 0x1003dbe7
mov eax, ebx
inc edx
jmp 0x1003dbec
xor edx, edx
inc edx
mov eax, edx
mov dword [ebp - 0x28], eax
mov eax, dword [ebp - 0x1a0]
mov ecx, dword [ebp - 0x28]
sub ecx, eax
mov eax, dword [0x100aedf4]
mov dword [ebp - 0x3c], ecx
test dl, al
jne 0x1003dc38
or eax, edx
mov dword [0x100aedf4], eax
mov dword [ebp - 4], ebx
mov dword [0x100aedec], ebx
mov dword [0x100aedf0], ebx
call fcn.10041645
push 0x10061e63
mov dword [0x100aedec], eax
call fcn.10048213
or dword [ebp - 4], 0xffffffff
xor edx, edx
pop ecx
inc edx
cmp byte [0x100ad8a4], 0
je 0x1003dd57
mov dword [ebp - 0x18], 0xfffffff6
mov dword [ebp - 0x30], 0x2c39
cmp dword [ebp - 0x30], 0x2fbc
jle 0x1003dcb7
mov edi, ebx
mov eax, ebx
mov dword [ebp - 0x34], ebx
mov ecx, ebx
mov dword [ebp - 0x28], ebx
mov esi, eax
mov dword [ebp - 0x3c], ebx
sar esi, cl
and esi, edi
mov eax, esi
mov ecx, 0x1007b9d8
or eax, ebx
cdq
push edx
push eax
call fcn.1000616a
inc ebx
cmp ebx, 0x3061
jl 0x1003dc71
mov ecx, dword [ebp - 0x28]
mov eax, dword [ebp - 0x34]
inc ecx
mov dword [ebp - 0x28], ecx
push 0
pop ebx
cmp ecx, 0x6acd
jl 0x1003dc68
inc eax
mov dword [ebp - 0x34], eax
cmp eax, 0x2183
jl 0x1003dc63
inc edi
cmp edi, 0x1eff
jl 0x1003dc5e
push 2
pop edi
xor eax, eax
mov dword [ebp - 0x1c4], 0x71865425
inc eax
mov dword [ebp - 4], eax
cmp dword [ebp - 0x30], 0x2a15
jge 0x1003dce2
mov edx, str.rbsljonj_jflkhj_ktrnaif_gtdgpp_hswceukfa_iyzyvxvq_rgdyhqvbk_sfk_olxkcldas_mddqtx_sxuqeffvh_fdhqg_bigz
mov ecx, 0x1007b9d8
call fcn.10008de6
xor eax, eax
inc eax
or dword [ebp - 4], 0xffffffff
push ecx
push ecx
mov byte [ebp - 0x78], bl
lea ecx, [ebp - 0x78]
push eax
call fcn.10039c21
add esp, 0xc
mov dword [ebp - 0x18], edi
jmp 0x1003dd4c
lea ecx, [ebp - 0x1c4]
xor eax, eax
push ecx
sub esp, 0xc
lea ecx, [ebp - 0x1ac]
inc eax
mov dword [ebp - 0x1ac], eax
mov dl, al
push ecx
push ecx
call fcn.10039d7e
add esp, 0x18
dec dword [ebp - 0x18]
cmp dword [ebp - 0x18], 0xfffffff0
je 0x1003dd24
jmp 0x10040c49
mov dword [ebp - 0x48], 0xf9c2
mov dword [ebp - 0x20], 0xd29be1d9
mov dword [ebp - 0x44], 0x872d
mov dword [ebp - 0x1c], ebx
mov dword [ebp - 0x30], 0x4709ba87
mov dword [ebp - 0x3c], 0xfffffff6
mov eax, dword [ebp - 0x48]
mov dword [ebp - 0x20], eax
mov ecx, dword [ebp - 0x44]
mov eax, dword [ebp - 0x20]
imul ecx, eax
mov eax, dword [ebp - 0x48]
inc dword [ebp - 0x44]
cmp eax, ecx
mov eax, edx
cmovne eax, ebx
cmp dword [ebp - 0x48], eax
jg 0x1003df8e
mov dword [ebp - 0x20], edx
mov eax, dword [ebp - 0x44]
mov ecx, dword [ebp - 0x20]
sub ecx, eax
jne 0x1003ddb6
cmp dword [ebp - 0x20], ebx
jne 0x1003ddb6
mov edx, ebx
mov dword [ebp - 0x1c], edx
xor edx, edx
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x44]
mov eax, dword [ebp - 0x48]
mov dword [ebp - 0x30], 0x1600d549
mov ecx, dword [ebp - 0x30]
mov eax, dword [ebp - 0x44]
cmp ecx, eax
setg dl
neg edx
cmp edx, 0xfffffffa
jg 0x1003dde6
cmp dword [ebp - 0x44], ebx
jne 0x1003df8e
mov dword [ebp - 0x28], 0x6b3b
cmp dword [ebp - 0x28], 0x6c1c
jle 0x1003de27
push ebx
call dword [sym.imp.KERNEL32.dll_GetVersionExW]
mov esi, ebx
mov dword [ebp - 0x3c], ebx
lea eax, [ebx + esi]
mov ecx, 0x1007b9d8
cdq
push edx
push eax
call fcn.1000616a
inc ebx
cmp ebx, 0x286e
jl 0x1003de02
inc esi
push 0
pop ebx
cmp esi, 0x7560
jl 0x1003ddff
push edi
lea ecx, [ebp - 0x380]
call fcn.10006705
mov dword [ebp - 4], 5
mov byte [ebp - 4], 6
cmp dword [ebp - 0x28], 0x67ca
jge 0x1003de77
mov edx, str.rgyo_qvt_njripepa_bqhmqb_virckrkg
mov ecx, 0x1007b9d8
call fcn.10008de6
jmp 0x1003de77
xor eax, eax
mov dword [ebp - 4], 5
inc eax
mov dword [ebp - 0x3d0], 0xd7547197
push eax
push 0x45f5
lea ecx, [ebp - 0x414]
mov dword [ebp - 0x3e0], 0xaa30d26b
push ecx
push 0x77d4
push 0x4ae0
push 0x3527
push eax
lea ecx, [ebp - 0x380]
mov edx, 0x15b3
push 0x6766
push ecx
mov cl, al
call fcn.10039fb7
add esp, 0x24
mov dword [ebp - 0x44], ebx
jmp 0x1003defb
push ecx
push ecx
lea ecx, [ebp - 0x380]
mov dword [ebp - 0x1b0], ebx
push ecx
sub esp, 0x10
lea ecx, [ebp - 0x44]
push ecx
push 0x7d5
push ecx
mov cl, al
call fcn.1003c6f9
add esp, 0x28
inc dword [ebp - 0x44]
xor eax, eax
inc eax
cmp dword [ebp - 0x44], eax
jle 0x1003ded2
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x380]
call fcn.10006788
push 1
push ecx
push ecx
push 0x100ad8a4
mov ecx, 0x343
call fcn.1003afd6
movdqa xmm0, xmmword [0x1006e990]
lea eax, [ebp - 0x430]
add esp, 0x10
mov dword [ebp - 0x1c], 0xd313dd33
lea ecx, [ebp - 0x170]
mov dword [ebp - 0x170], ebx
movdqu xmmword [ebp - 0x440], xmm0
mov dword [ebp - 0x16c], ebx
push dword [ebp - 0x1b0]
mov dword [ebp - 0x168], ebx
push eax
lea eax, [ebp - 0x440]
push eax
push ebx
call fcn.100096b7
mov dword [ebp - 4], 8
mov dword [ebp - 0x30], 0x3758
mov dword [ebp - 0x3c], 0xc369029e
mov dword [ebp - 0x18], ebx
jmp 0x1003e1c3
mov dword [ebp - 0x34], 1
mov dword [ebp - 0x24], 0x37ec
mov dword [ebp - 0x18], ebx
jmp 0x1003dfb2
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x29c], 0xe2bf
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 4
jl 0x1003dfa1
mov dword [ebp - 0x20], ebx
cmp dword [ebp - 0x20], 3
jg 0x1003df12
mov dword [ebp - 0x38], 0xd5ab883e
mov dword [ebp - 0x38], 1
mov dword [ebp - 0x38], 0x812
cmp dword [ebp - 0x38], 0xbf7
jle 0x1003e02a
mov esi, ebx
mov dword [ebp - 0x28], ebx
mov dword [ebp - 0x18], 0x4d4b
mov edi, ebx
mov ebx, dword [ebp - 0x28]
mov eax, ebx
mov ecx, 0x1007b9d8
cdq
idiv edi
mov eax, edx
cdq
push edx
push eax
call fcn.1000616a
inc edi
cmp edi, 0xa6a
jl 0x1003dff4
add ebx, esi
dec dword [ebp - 0x18]
push 0
mov dword [ebp - 0x28], ebx
pop ebx
jne 0x1003dfef
inc esi
cmp esi, 0x290a
jl 0x1003dfe5
push 2
pop edi
mov dword [ebp - 4], 3
cmp dword [ebp - 0x38], 0x7b9
jge 0x1003e06a
mov edx, str.ylpsroe_ruwqz_slc_xmrpgqivr_uwpt_qopavdxei_hsamse_jspyu_sdtp_diemp_tpgtdtqd
mov ecx, 0x1007b9d8
call fcn.10008de6
jmp 0x1003e06a
or dword [ebp - 4], 0xffffffff
xor edx, edx
inc edx
mov dword [ebp - 0x18], ebx
jmp 0x1003e087
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x9c], 0xffff
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], edx
jl 0x1003e076
mov dword [ebp - 0x48], ebx
jmp 0x1003e171
mov dword [ebp - 0x28], 0xffffffff
mov eax, dword [ebp - 0x48]
mov ecx, dword [ebp + eax*4 - 0x29c]
mov eax, dword [ebp - 0x48]
mov dword [ebp + eax*4 - 0x29c], ecx
xor ecx, ecx
mov eax, dword [ebp - 0x9c]
mov eax, dword [ebp - 0x20]
mov esi, dword [ebp + eax*4 - 0x29c]
mov eax, dword [ebp - 0x20]
mov dword [ebp + eax*4 - 0x29c], esi
mov eax, dword [ebp - 0x48]
cmp eax, edx
mov edx, dword [ebp - 0x9c]
mov eax, dword [ebp - 0x28]
setg cl
imul edx, ecx
xor ecx, ecx
cmp edx, eax
setge cl
xor edx, edx
sub ecx, dword [ebp - 0x3c]
mov dword [ebp - 0x38], ecx
mov ecx, dword [ebp - 0x38]
mov eax, dword [ebp - 0x34]
cmp ecx, eax
mov eax, dword [ebp - 0x28]
setge dl
xor ecx, ecx
add edx, esi
cmp edx, eax
setge cl
sub ecx, 0x1c50
jne 0x1003e110
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x34]
mov ecx, dword [ebp - 0x48]
sub ecx, eax
mov eax, dword [ebp - 0x34]
sub ecx, eax
jne 0x1003e122
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x44]
xor ecx, ecx
mov eax, dword [ebp - 0x29c]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x9c]
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0x30]
mov edx, dword [ebp - 0x9c]
mov eax, dword [ebp - 0x24]
imul edx, eax
mov eax, dword [ebp - 0x9c]
push 1
cmp edx, eax
mov eax, dword [ebp - 0x9c]
sete cl
xor edx, edx
cmp ecx, 0xfffffffb
setg dl
xor ecx, ecx
cmp edx, eax
pop edx
setl cl
mov dword [ebp - 0x38], ecx
inc dword [ebp - 0x48]
cmp dword [ebp - 0x48], 3
jle 0x1003e094
push 0x3c05
push 0x660c
push 0x4a9e
lea eax, [ebp - 0x79]
mov byte [ebp - 0x79], bl
push eax
push ebx
push 0x26cd
push ecx
push 0x4bb7
mov ecx, 0x2ef4
call fcn.10038d4e
add esp, 0x20
inc dword [ebp - 0x20]
jmp 0x1003dfbb
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x410], 0x3ac25417
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], edi
jl 0x1003e1b2
mov dword [ebp - 0x1c], ebx
cmp dword [ebp - 0x1c], 0xfffffff6
jle 0x1003e2ab
mov esi, dword [ebp - 0x170]
xor eax, eax
mov dword [ebp - 0xd4], 0xe8c9
inc eax
mov dword [ebp - 0x24], 0x2d7bc352
push eax
push 0x655b
push 0x612b
push 0x5f0
push 0x7b76
push 0x60a5
lea ecx, [ebp - 0xd4]
mov dword [ebp - 0x34], 0xcd5fec46
push ebx
push ecx
mov dword [ebp - 0x24], 0x6b586fa6
mov edx, 0x6329
push 0x3994
mov cl, al
call fcn.10039fb7
mov eax, dword [ebp - 0xd4]
add esp, 0x24
mov dword [ebp - 0x24], eax
mov eax, dword [ebp - 0xd4]
mov eax, dword [ebp - 0x24]
cmp dword [ebp - 0x34], 3
sbb ecx, ecx
xor edx, edx
inc ecx
add ecx, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x170]
mov dword [eax], ecx
mov dword [ebp - 0x24], 1
mov eax, dword [ebp - 0x24]
mov dword [ebp - 0x410], eax
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x34]
mov eax, dword [ebp - 0x30]
cmp eax, 0xe55459ee
mov eax, dword [ebp - 0x30]
setne dl
xor ecx, ecx
cmp edx, eax
setg cl
add ecx, dword [ebp - 0x1c]
cmp ecx, 0x2f82
jl 0x1003e295
mov eax, dword [ebp - 0x30]
mov eax, dword [ebp - 0x34]
mov eax, dword [esi + 8]
mov dword [ebp - 0x3c], eax
dec dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 0xfffffff6
jg 0x1003e1db
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x170]
call fcn.10006788
mov eax, str.b___r
mov dword [ebp - 0x100], ebx
mov dword [ebp - 0xec], eax
mov edx, 0x471b
xor eax, eax
mov dword [ebp - 0x3c], 6
inc eax
mov ecx, 0x66ef
push eax
push eax
push eax
call fcn.1003a128
add esp, 0xc
mov byte [ebp - 0x76], bl
lea eax, [ebp - 0x76]
mov edx, 0x6ba8
push eax
push ebx
call fcn.1003b0c6
pop ecx
pop ecx
push 0xc
pop esi
mov dword [ebp - 0x12c], esi
cmp esi, 0xe0
jge 0x1003e507
push ecx
push ecx
mov dl, 1
call fcn.1003a191
pop ecx
pop ecx
mov ecx, str.b___r
mov al, byte [ecx]
cmp al, byte [esi + ecx]
jne 0x1003e5f1
mov dword [ebp - 0x74], 0xfd3df75d
lea ecx, [ebp - 0x2d8]
push edi
call fcn.10006705
lea eax, [ebp - 0x408]
mov dword [ebp - 4], 9
push eax
push 0x1ee1
push 0x66fe
xor eax, eax
lea ecx, [ebp - 0x2d8]
inc eax
mov edx, 0x6b3d
push eax
push 0x225e
push 0x86b
push 0x7034
push ecx
push eax
mov cl, al
call fcn.10038a4b
add esp, 0x24
mov dword [ebp - 0x74], 0xfffffffc
jmp 0x1003e3d2
lea eax, [ebp - 0x2d8]
mov dword [ebp - 0x1c8], 0xf889a278
push eax
lea eax, [ebp - 0x74]
mov dword [ebp - 0x1c0], ebx
push eax
push ecx
push 1
lea eax, [ebp - 0x1c0]
mov edx, 0x61ab
push eax
lea eax, [ebp - 0x1c8]
mov ecx, 0x15b9
push eax
call fcn.1003a38a
add esp, 0x18
cmp dword [ebp - 0x74], ebx
jne 0x1003e3d8
dec dword [ebp - 0x74]
cmp dword [ebp - 0x74], 0xffffffe6
jge 0x1003e38c
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x2d8]
call fcn.10006788
lea eax, [ebp - 0x100]
mov ecx, 0x1116
push eax
lea eax, [ebp - 0x12c]
push ebx
push eax
call fcn.1003d929
add esp, 0xc
push 3
pop ecx
mov dword [ebp - 0x20], ecx
mov dword [ebp - 0x30], 0xc0549ec7
mov dword [ebp - 0x18], ebx
jmp 0x1003e422
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x47c], ebx
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], ecx
jl 0x1003e415
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x20]
mov edx, dword [ebp - 0x20]
sub edx, dword [ebp - 0x20]
mov eax, dword [ebp - 0x20]
neg edx
sbb edx, edx
add edx, 0xffffce06
neg edx
sbb edx, edx
xor ecx, ecx
inc edx
cmp edx, eax
setl cl
imul ecx, dword [ebp - 0x30]
mov dword [ebp - 0x30], ecx
xor ecx, ecx
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x30]
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x20]
cmp eax, 1
setg cl
xor edx, edx
mov dword [ebp - 0x47c], ecx
mov eax, dword [ebp - 0x20]
cmp eax, 0x616d21b1
mov eax, dword [ebp - 0x20]
setg dl
xor ecx, ecx
cmp edx, eax
setg cl
add ecx, dword [ebp - 0x20]
je 0x1003e5d2
mov dword [ebp - 0x24], 0x3b14
cmp dword [ebp - 0x24], 0x3ca0
jle 0x1003e4ce
mov esi, ebx
mov dword [ebp - 0x3c], ebx
mov eax, ebx
mov ecx, 0x1007b9d8
xor eax, esi
cdq
push edx
push eax
call fcn.1000616a
inc ebx
cmp ebx, 0x582b
jl 0x1003e4a8
inc esi
push 0
pop ebx
cmp esi, 0x2a8e
jl 0x1003e4a5
push 0x1e2f
push ecx
push ecx
push 0x3409
xor cl, cl
call fcn.10038b2b
add esp, 0x10
mov dword [ebp - 4], 0xa
cmp dword [ebp - 0x24], 0x3821
jge 0x1003e503
mov edx, str.uneyrlcsj_yfxkjpe_knc_nswpzxk_ymhnqaj_egywxvmjt
mov ecx, 0x1007b9d8
call fcn.10008de6
or dword [ebp - 4], 0xffffffff
mov dword [ebp - 0x28], 0x5186
cmp dword [ebp - 0x28], 0x541f
jle 0x1003e57f
push ebx
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov dword [ebp - 0x38], ebx
mov edi, ebx
mov dword [ebp - 0x24], 0x7ad8
mov esi, ebx
mov eax, edi
lea ecx, [ebp - 0x528]
or eax, esi
cdq
push edx
push eax
call fcn.10001a84
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x1003e548
mov eax, dword [eax]
push eax
call fcn.1004823d
pop ecx
push ebx
push 1
lea ecx, [ebp - 0x528]
call fcn.10006cdf
inc esi
cmp esi, 0x3f4d
jl 0x1003e52c
mov esi, dword [ebp - 0x38]
add edi, esi
dec dword [ebp - 0x24]
jne 0x1003e52a
inc esi
mov dword [ebp - 0x38], esi
cmp esi, 0x2631
jl 0x1003e521
push 2
pop edi
mov dword [ebp - 0x18], 0x1b3c692b
cmp dword [ebp - 0x28], 0x4ece
jge 0x1003e59a
push str.kmb_rxs_dbj_qwo_vkxuttji_qbt_dgrmljlz_aijvckg_hfcvbiggb_sfphfjwx_yfnhmsc_elvgqfk_xnaeytk
call fcn.1004823d
pop ecx
or dword [ebp - 4], 0xffffffff
mov dword [ebp - 0x3c], 0x6748f69f
mov dword [ebp - 0x18], ebx
jmp 0x1003e604
push 1
push 0x7fc1
push 0x4df8
lea ecx, [ebp - 0x7b]
mov byte [ebp - 0x7b], bl
call fcn.1003d098
add esp, 0xc
jmp 0x1003e507
inc esi
jmp 0x1003e301
push ecx
push 1
call fcn.1003a4d5
inc dword [ebp - 0x18]
pop ecx
pop ecx
cmp dword [ebp - 0x18], 8
jl 0x1003e5f7
push 3
lea ecx, [ebp - 0x338]
mov dword [ebp - 0x1f4], 4
call fcn.10006705
push 0x763
lea eax, [ebp - 0x1b8]
mov dword [ebp - 4], 0xe
push eax
lea eax, [ebp - 0x338]
mov dword [ebp - 0xa4], 0xad95e17c
push eax
mov dword [ebp - 0x1d0], 0x3b0a6d08
mov edx, 0x203
push ebx
call fcn.10038fc9
mov byte [ebp - 0x29], bl
add esp, 0x10
cmp byte [ebp - 0x29], 0
je 0x1003e66f
push ecx
push ebx
call fcn.1003a4d5
pop ecx
pop ecx
mov dword [ebp - 0xa4], edi
cmp dword [ebp - 0xa4], ebx
jl 0x1003e7cc
push 1
lea ecx, [ebp - 0x254]
call fcn.10006705
mov byte [ebp - 4], 0xf
xor edx, edx
mov dword [ebp - 0x88], 0x90aec51
inc edx
mov dword [ebp - 0x18], ebx
jmp 0x1003e6b3
mov ecx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x254]
mov dword [eax + ecx*4], edx
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], edx
jl 0x1003e6a4
mov eax, dword [ebp - 0x254]
mov dword [eax], edi
mov dword [ebp - 0x94], edx
mov dword [ebp - 0x8c], 0xbbde
mov dword [ebp - 0x1d8], ebx
mov dword [ebp - 0x94], ebx
cmp dword [ebp - 0x94], edi
jg 0x1003e74f
push ecx
push 0x5c0e
lea eax, [ebp - 0xa4]
push eax
push edx
lea eax, [ebp - 0x8c]
push eax
lea eax, [ebp - 0x94]
push eax
push edx
push 0x7143
push edx
lea edx, [ebp - 0x1d0]
call fcn.1003a5b3
add esp, 0x24
mov dword [ebp - 0x8c], ebx
jmp 0x1003e736
sub esp, 0x18
lea eax, [ebp - 0x1d8]
push eax
push ebx
call fcn.10039820
add esp, 0x20
inc dword [ebp - 0x8c]
cmp dword [ebp - 0x8c], edi
jle 0x1003e71d
inc dword [ebp - 0x94]
push 1
pop edx
cmp dword [ebp - 0x94], edi
jle 0x1003e6e4
mov dword [ebp - 0x88], ebx
jmp 0x1003e788
push 0x7e44
push ecx
push 0xbf3
push 0x3b79
push edx
sub esp, 0xc
lea edx, [ebp - 0x88]
lea ecx, [ebp - 0x338]
call fcn.1003a6eb
add esp, 0x20
inc dword [ebp - 0x88]
push 1
pop edx
cmp dword [ebp - 0x88], 3
jl 0x1003e757
mov eax, dword [ebp - 0x254]
push 1
pop edx
dec dword [eax]
jns 0x1003e6c0
lea ecx, [ebp - 0x254]
cmp dword [ebp - 0xa4], ebx
jne 0x1003e7c7
mov byte [ebp - 4], 0xe
call fcn.10006788
dec dword [ebp - 0xa4]
jns 0x1003e681
jmp 0x1003e7cc
call fcn.10006788
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x338]
call fcn.10006788
mov eax, dword [ebp - 0xec]
mov cl, byte [0x10078be0]
mov dword [ebp - 0xbc], 0x10078be0
mov byte [ebp - 0x3d], cl
mov dl, byte [eax]
call fcn.10041670
mov byte [0x10078be0], al
mov dword [ebp - 0x28], 0x34dc
cmp dword [ebp - 0x28], 0x37f7
jle 0x1003e83b
mov esi, ebx
mov dword [ebp - 0x3c], ebx
mov eax, ebx
mov ecx, 0x1007b9d8
and eax, esi
cdq
push edx
push eax
call fcn.1000616a
inc ebx
cmp ebx, 0x3208
jl 0x1003e815
inc esi
push 0
pop ebx
cmp esi, 0x36db
jl 0x1003e812
mov dword [ebp - 0x50], 0xffffffff
mov dword [ebp - 0x138], 0xe81d534a
mov dword [ebp - 0x50], ebx
cmp dword [ebp - 0x50], 0xa
jge 0x1003ead6
mov dword [ebp - 0x5c], 0xecb45710
lea ecx, [ebp - 0x280]
push 4
call fcn.10006705
mov dword [ebp - 4], 0x10
lea eax, [ebp - 0x440]
push dword [ebp - 0x1b8]
movdqa xmm0, xmmword [0x1006e9b0]
lea ecx, [ebp - 0x270]
push eax
lea eax, [ebp - 0x450]
mov dword [ebp - 0x14c], 0xfffffffc
push eax
push ebx
movdqu xmmword [ebp - 0x450], xmm0
mov dword [ebp - 0x270], ebx
mov dword [ebp - 0x26c], ebx
mov dword [ebp - 0x268], ebx
call fcn.100096b7
push 1
push 0x3947
lea eax, [ebp - 0x118]
mov byte [ebp - 4], 0x11
push eax
push 0x1d9b
push ebx
push 0x5c38
xor dl, dl
lea ecx, [ebp - 0x280]
call fcn.1003d518
add esp, 0x18
mov dword [ebp - 0x5c], ebx
cmp dword [ebp - 0x5c], 0xffffffef
je 0x1003e9dc
push ecx
mov dword [ebp - 0x1e0], 0x63384304
lea ecx, [ebp - 0x1e0]
xor dl, dl
call fcn.100397d2
mov dword [ebp - 0x38], 0x2b57
cmp dword [ebp - 0x38], 0x2f2b
pop ecx
jle 0x1003e991
mov eax, ebx
mov dword [ebp - 0x30], ebx
mov esi, ebx
mov dword [ebp - 0x24], ebx
mov ecx, esi
mov dword [ebp - 0x3c], eax
mov esi, eax
mov edi, ebx
sar esi, cl
mov ecx, edi
mov eax, esi
sar eax, cl
lea ecx, [ebp - 0x4e0]
cdq
push edx
push eax
call fcn.10001a84
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x1003e956
mov eax, dword [eax]
push eax
call fcn.1004823d
pop ecx
push ebx
push 1
lea ecx, [ebp - 0x4e0]
call fcn.10006cdf
inc edi
cmp edi, 0x5bb5
jl 0x1003e938
mov esi, dword [ebp - 0x24]
mov eax, dword [ebp - 0x30]
inc esi
mov dword [ebp - 0x24], esi
cmp esi, 0x1486
jl 0x1003e92d
inc eax
mov dword [ebp - 0x30], eax
cmp eax, 0x180e
jl 0x1003e928
xor eax, eax
xor dl, dl
inc eax
mov ecx, 0x33ad
push eax
push 0x12a4
push 0x1a55
push 0x4542
push eax
push 0x45e
call fcn.1003d518
add esp, 0x18
cmp dword [ebp - 0x38], 0x27a6
jge 0x1003e9cd
push str.vhkux_hpk_lwatante_apq_cupsqx_mlts_benld
call fcn.1004823d
pop ecx
mov dword [ebp - 4], 0x11
dec dword [ebp - 0x5c]
jmp 0x1003e8f0
cmp dword [ebp - 0x5c], ebx
je 0x1003ea5a
push ebx
lea eax, [ebp - 0x5c]
mov dword [ebp - 0x3c], 0x2092
push eax
lea eax, [ebp - 0x280]
mov ecx, 0x49f1
push eax
call fcn.1003d098
mov eax, dword [ebp - 0x3c]
add esp, 0xc
add eax, dword [ebp - 0x50]
jne 0x1003ea11
cmp dword [ebp - 0x14c], ebx
je 0x1003ea14
mov eax, dword [ebp - 0x50]
mov eax, dword [ebp - 0x50]
mov edx, dword [ebp - 0x50]
mov eax, dword [ebp - 0x50]
neg edx
sbb edx, edx
xor ecx, ecx
neg edx
sub edx, eax
mov eax, dword [ebp - 0x5c]
cmp edx, eax
mov eax, 0xf2fdad5a
setg cl
cmp eax, ecx
sbb eax, eax
inc eax
mov dword [ebp - 0x5c], eax
mov eax, dword [ebp - 0x5c]
mov eax, dword [ebp - 0x280]
mov ecx, dword [eax + 0xc]
mov eax, dword [ebp - 0x270]
inc ecx
mov dword [eax + 4], ecx
mov dword [ebp - 0x138], ecx
jmp 0x1003eab4
push ecx
push 0x6dba
push 0x45ac
push 1
push ecx
push 0x1124
lea eax, [ebp - 0x50]
mov dword [ebp - 0x20c], 0x12bad479
push eax
lea eax, [ebp - 0x138]
mov dword [ebp - 0x19c], 0x2e8b5a47
push eax
push 0x851
lea eax, [ebp - 0x19c]
push eax
lea eax, [ebp - 0x20c]
push eax
push ecx
lea edx, [ebp - 0x14c]
lea ecx, [ebp - 0x280]
call fcn.1003a718
add esp, 0x30
lea ecx, [ebp - 0x270]
call fcn.10006788
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x280]
call fcn.10006788
inc dword [ebp - 0x50]
jmp 0x1003e84f
mov dword [ebp - 4], 0x14
cmp dword [ebp - 0x28], 0x338b
push 2
pop edi
jge 0x1003eb19
mov edx, str.cfdmrx_tmbpqz_uacjggpfa_nzwbt_pynvir_xuihn_doqnznpnv_nmxtnmfzt_zqyn_kuvgwn_spmfnj_qzoywvc_goglodtgl
mov ecx, 0x1007b9d8
call fcn.10008de6
jmp 0x1003eb19
or dword [ebp - 4], 0xffffffff
xor eax, eax
mov ch, byte [ebp - 0x3d]
inc eax
mov edi, eax
mov eax, dword [ebp - 0xbc]
mov cl, byte [edi + eax]
mov eax, edi
cdq
idiv dword [ebp - 0x100]
mov byte [ebp - 0x29], cl
mov esi, edx
mov dl, ch
call fcn.10041670
mov ecx, dword [ebp - 0xec]
mov dl, byte [esi + ecx]
mov cl, al
call fcn.10041670
mov ecx, dword [ebp - 0xbc]
mov edx, 0x2b49
push 0x98a
push 0x2835
push ebx
push 0x5409
push 0x7765
push 0x24b1
mov byte [edi + ecx], al
xor eax, eax
push 0x2d04
inc eax
push 0x5caf
push eax
push 0x38e8
mov cl, al
call fcn.1003d727
mov ch, byte [ebp - 0x29]
add esp, 0x28
inc edi
cmp edi, 4
jl 0x1003eb25
mov byte [ebp - 0x3d], ch
push 3
pop ecx
mov dword [ebp - 0x20], ecx
push 2
mov dword [ebp - 0x30], 0xc0549ec7
mov dword [ebp - 0x18], ebx
pop edi
jmp 0x1003ebc6
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x4b8], ebx
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], ecx
jl 0x1003ebb9
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x20]
mov edx, dword [ebp - 0x20]
sub edx, dword [ebp - 0x20]
mov eax, dword [ebp - 0x20]
neg edx
sbb edx, edx
add edx, 0xffffce06
neg edx
sbb edx, edx
xor ecx, ecx
inc edx
cmp edx, eax
setl cl
imul ecx, dword [ebp - 0x30]
mov dword [ebp - 0x30], ecx
xor ecx, ecx
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x30]
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x20]
cmp eax, 1
setg cl
xor edx, edx
mov dword [ebp - 0x4b8], ecx
mov eax, dword [ebp - 0x20]
cmp eax, 0x616d21b1
mov eax, dword [ebp - 0x20]
setg dl
xor ecx, ecx
cmp edx, eax
mov dl, 1
setg cl
add ecx, dword [ebp - 0x20]
je 0x1003ec51
lea eax, [ebp - 0x77]
mov byte [ebp - 0x77], bl
push eax
push 0x5a97
push ecx
mov ecx, 0x60da
call fcn.1003a851
add esp, 0xc
jmp 0x1003ec5e
push 0x4628
push ecx
call fcn.1003d906
pop ecx
pop ecx
mov eax, dword [ebp - 0xbc]
mov eax, dword [eax]
mov dword [ebp - 0xd8], eax
mov dword [ebp - 0x6c], 1
mov dword [ebp - 0x120], 0x37ddc4ea
mov dword [ebp - 0x38], ebx
mov dword [ebp - 0x204], 0x3d8e
mov dword [ebp - 0x20], 0xa83adab8
mov dword [ebp - 0x18], ebx
jmp 0x1003eca7
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x134], 0xfffffffe
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], edi
jl 0x1003ec96
mov byte [ebp - 0x29], bl
cmp byte [ebp - 0x29], 0
je 0x1003ecc5
push ecx
push ecx
push ebx
mov ecx, 0xa75
call fcn.10039c21
add esp, 0xc
mov dword [ebp - 0x6c], ebx
or esi, 0xffffffff
cmp dword [ebp - 0x6c], 0xb
jne 0x1003f08d
mov dword [ebp - 0x4c], 0x167fa5c6
mov dword [ebp - 0xdc], ebx
mov dword [ebp - 0x234], 0xfffffff8
mov dword [ebp - 0x214], esi
mov dword [ebp - 0x4c], 1
cmp dword [ebp - 0x4c], ebx
jl 0x1003f085
mov dword [ebp - 0x24], 0x3863
cmp dword [ebp - 0x24], 0x3b2b
jle 0x1003ed86
mov edx, ebx
mov dword [ebp - 0x18], ebx
mov eax, ebx
mov dword [ebp - 0x30], ebx
mov edi, ebx
mov ecx, edi
shl eax, cl
lea ecx, [ebp - 0x4f8]
and eax, edx
cdq
push edx
push eax
call fcn.10001a84
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x1003ed3c
mov eax, dword [eax]
push eax
call fcn.1004823d
pop ecx
push ebx
push 1
lea ecx, [ebp - 0x4f8]
call fcn.10006cdf
mov eax, dword [ebp - 0x30]
inc edi
mov edx, dword [ebp - 0x18]
cmp edi, 0x7fe3
jl 0x1003ed1e
inc eax
mov dword [ebp - 0x30], eax
cmp eax, 0x2e53
jl 0x1003ed1c
inc edx
mov dword [ebp - 0x18], edx
cmp edx, 0x5e57
jl 0x1003ed17
push ebx
push 0x597
push ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov dword [ebp - 0x1c], 0x367f5ed9
cmp dword [ebp - 0x24], 0x3605
jge 0x1003eda1
push str.qldcdez_aqzlelcu_sflh_divjjh_uirrmxze_suuhch
call fcn.1004823d
pop ecx
mov dword [ebp - 4], esi
mov dword [ebp - 0x24], 0xa000286f
mov dword [ebp - 0x22c], 0xbbd88186
mov dword [ebp - 0x128], 0x4e3e
mov dword [ebp - 0x1c], 1
cmp dword [ebp - 0x1c], ebx
jl 0x1003efd2
push dword [ebp - 0x118]
movdqa xmm0, xmmword [0x1006e9a0]
lea eax, [ebp - 0x460]
push eax
lea eax, [ebp - 0x470]
mov dword [ebp - 0x20], 0xba095a97
push eax
mov dword [ebp - 0x30], esi
lea ecx, [ebp - 0x194]
push ebx
movdqu xmmword [ebp - 0x470], xmm0
mov dword [ebp - 0x194], ebx
mov dword [ebp - 0x190], ebx
mov dword [ebp - 0x18c], ebx
call fcn.100096b7
xor ecx, ecx
mov dword [ebp - 4], 0x18
mov dword [ebp - 0x20], ebx
inc ecx
cmp dword [ebp - 0x20], ecx
jg 0x1003ef15
mov eax, dword [ebp - 0x194]
mov dword [ebp - 0x3c], eax
push dword [ebp - 0x118]
movdqa xmm0, xmmword [0x1006e9c0]
lea eax, [ebp - 0x420]
push eax
lea eax, [ebp - 0x430]
mov dword [ebp - 0x17c], ebx
push eax
push ebx
lea ecx, [ebp - 0x17c]
mov dword [ebp - 0x178], ebx
movdqu xmmword [ebp - 0x430], xmm0
mov dword [ebp - 0x174], ebx
call fcn.100096b7
push ecx
push 1
mov ecx, 0x4635
mov byte [ebp - 4], 0x19
call fcn.1003afb0
mov edi, dword [ebp - 0x17c]
xor edx, edx
pop ecx
pop ecx
inc edx
mov dword [edi + 4], ebx
mov dword [ebp - 0x24], 0xb64d
xor ecx, ecx
mov dword [ebp - 0x24], edx
mov eax, dword [ebp - 0x24]
mov eax, dword [edi + 4]
mov eax, dword [ebp + eax*4 - 0x134]
mov eax, dword [ebp - 0x17c]
cmp dword [eax], edx
setg cl
xor eax, eax
cmp ecx, dword [edi + 4]
setg al
cmp eax, 4
sbb eax, eax
inc eax
neg eax
mov dword [ebp - 0x30], eax
mov eax, dword [ebp - 0x6c]
cmp dword [ebp - 0x4c], ebx
je 0x1003eedd
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x4c]
mov eax, dword [ebp - 0x4c]
mov ecx, dword [ebp - 0x3c]
xor eax, eax
cmp dword [edi + 4], ebx
setne al
mov dword [ecx + 0xc], eax
inc dword [edi + 4]
cmp dword [edi + 4], edx
jle 0x1003ee9b
lea ecx, [ebp - 0x17c]
mov byte [ebp - 4], 0x18
call fcn.10006788
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], 1
jle 0x1003ee3a
mov eax, dword [ebp - 0x1c]
cmp dword [ebp + eax*4 - 0x134], ebx
je 0x1003ef95
mov eax, dword [ebp - 0x4c]
xor edx, edx
mov eax, dword [ebp - 0x6c]
mov dword [ebp - 0x30], eax
mov eax, dword [ebp - 0x30]
cmp eax, 0x14e
mov eax, dword [ebp - 0x134]
setl dl
xor ecx, ecx
cmp edx, eax
setg cl
neg ecx
mov dword [ebp - 0x120], ecx
je 0x1003ef51
mov eax, dword [ebp - 0x4c]
mov ecx, dword [ebp - 0x38]
mov eax, dword [ebp - 0x4c]
dec ecx
neg ecx
sbb ecx, ecx
xor edx, edx
inc ecx
cmp ecx, eax
mov eax, dword [ebp - 0x1c]
setl dl
xor ecx, ecx
inc ecx
mov eax, dword [ebp + eax*4 - 0x134]
sub edx, eax
mov dword [ebp - 0x20], edx
mov dword [ebp - 0x20], ecx
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0x134], 0xfffffffc
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], ebx
jne 0x1003ef97
mov ecx, ebx
mov eax, dword [ebp - 0x6c]
xor edx, edx
sub ecx, eax
mov eax, dword [ebp - 0x194]
cmp ecx, 0x27df
setg dl
xor ecx, ecx
cmp edx, dword [eax + 0xc]
setle cl
mov dword [ebp - 0xdc], ecx
lea ecx, [ebp - 0x194]
mov dword [ebp - 4], esi
call fcn.10006788
dec dword [ebp - 0x1c]
jns 0x1003edcf
mov dword [ebp - 0x20], ebx
cmp dword [ebp - 0x20], 0xffffffe9
jl 0x1003f07d
push ecx
lea eax, [ebp - 0x214]
mov dword [ebp - 0x21c], 0xfffffffe
push eax
lea eax, [ebp - 0x21c]
push eax
lea eax, [ebp - 0x120]
push eax
lea eax, [ebp - 0xdc]
push eax
push 0x1e4a
lea eax, [ebp - 0x128]
push eax
push ecx
push 0x7add
lea eax, [ebp - 0x22c]
push eax
push ecx
lea eax, [ebp - 0x6c]
push eax
push 1
push 0x16c8
push 0x6d79
push ecx
push 0x62c2
lea eax, [ebp - 0x234]
push eax
lea eax, [ebp - 0x204]
push eax
push ecx
push 0x55c
push 0x14a6
push ecx
push ecx
lea eax, [ebp - 0x4c]
mov ecx, 0x2e82
push eax
call fcn.1003b111
mov eax, dword [ebp - 0x128]
add esp, 0x64
mov dword [ebp - 0xdc], eax
dec dword [ebp - 0x20]
cmp dword [ebp - 0x20], 0xffffffe9
jge 0x1003efdf
xor ebx, ebx
dec dword [ebp - 0x4c]
jmp 0x1003ecf9
inc dword [ebp - 0x6c]
jmp 0x1003eccb
mov eax, dword [ebp - 0xd8]
dec eax
push 2
pop edi
cmp eax, 0x281d
ja 0x10040bbc
mov dword [ebp - 0x68], esi
lea ecx, [ebp - 0x28c]
mov dword [ebp - 0x34], ebx
push 4
call fcn.10006705
mov dword [ebp - 4], 0x1a
mov dword [ebp - 0x1c], 0xf906d8bc
mov dword [ebp - 0x3c], 0x401dbdae
mov dword [ebp - 0x24], 0xfffffffa
mov dword [ebp - 0x30], esi
mov dword [ebp - 0x18], ebx
jmp 0x1003f0ec
mov ecx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x28c]
mov dword [eax + ecx*4], 0xfffffff8
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 4
jl 0x1003f0d9
mov eax, dword [ebp - 0x68]
cmp dword [ebp - 0x68], ebx
jne 0x1003f112
mov ecx, dword [ebp - 0x68]
xor edx, edx
mov eax, dword [ebp - 0x68]
cmp ecx, eax
setle dl
xor ecx, ecx
inc ecx
cmp edx, ecx
ja 0x1003f115
mov edx, ebx
jmp 0x1003f117
xor ecx, ecx
inc ecx
mov edx, ecx
mov eax, dword [ebp - 0x68]
mov dword [ebp - 0x34], eax
mov eax, dword [ebp - 0x28c]
mov dword [ebp - 0x38], eax
mov eax, dword [ebp - 0x34]
sub eax, edx
mov edx, dword [ebp - 0x38]
neg eax
sbb eax, eax
inc eax
mov dword [edx + 0xc], eax
mov eax, dword [ebp - 0x68]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x3c]
cmp dword [ebp - 0x1c], ebx
je 0x1003f2e1
mov dword [ebp - 0x114], 0x95610a14
lea ecx, [ebp - 0x264]
mov dword [ebp - 0x24], 0x5ff57440
mov dword [ebp - 0x3c], 0xa885c82f
mov dword [ebp - 0x28], 7
mov dword [ebp - 0x24], ebx
mov dword [ebp - 0x18], 0x7854c3eb
mov dword [ebp - 0x24], 0xb9cbadbe
mov dword [ebp - 0x20], 0x24d8f3b
push edi
call fcn.10006705
xor ecx, ecx
mov byte [ebp - 4], 0x1b
inc ecx
mov dword [ebp - 0x24], ecx
mov dword [ebp - 0xac], ebx
jmp 0x1003f1b4
mov eax, dword [ebp - 0xac]
mov dword [ebp + eax*4 - 0x3a0], 0xb1aa435c
inc dword [ebp - 0xac]
cmp dword [ebp - 0xac], 3
jl 0x1003f19d
lea eax, [ebp - 0x264]
push eax
push ecx
push ecx
lea eax, [ebp - 0xac]
push eax
call fcn.10038b2b
lea eax, [ebp - 0x68]
push eax
push 0x56a1
push 0x5427
xor eax, eax
lea ecx, [ebp - 0x114]
push ebx
inc eax
push eax
push ecx
push 0x37b
mov dl, al
mov ecx, 0x4159
call fcn.10039880
add esp, 0x2c
dec dword [ebp - 0x30]
je 0x1003f21b
mov eax, dword [ebp - 0x30]
xor ecx, ecx
mov eax, dword [ebp - 0x264]
cmp dword [eax], esi
setge cl
mov dword [ebp - 0x24], ecx
mov eax, dword [ebp - 0x24]
mov ecx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x398]
mov edx, dword [ebp - 0x34]
add eax, ecx
add edx, eax
xor ecx, ecx
mov eax, dword [ebp - 0x114]
cmp eax, edx
setge cl
mov dword [ebp - 0x24], ecx
mov eax, dword [ebp - 0x24]
mov dword [ebp - 0x18], eax
mov eax, dword [ebp - 0x18]
mov edx, dword [ebp - 0x28]
mov eax, dword [ebp - 0x264]
neg edx
sbb edx, edx
xor ecx, ecx
neg edx
imul edx, dword [eax + 4]
mov eax, dword [ebp - 0x1c]
cmp edx, eax
mov eax, dword [ebp - 0x264]
mov edx, dword [ebp - 0x38]
setg cl
mov dword [eax], ecx
xor eax, eax
cmp ecx, dword [edx + 0xc]
setge al
xor edx, edx
mov dword [ebp - 0x24], eax
mov ecx, dword [ebp - 0x28]
mov eax, dword [ebp - 0x24]
cmp eax, ecx
mov eax, dword [ebp - 0x39c]
setne dl
imul edx, edx, 0x6d0b
neg edx
sbb edx, edx
xor ecx, ecx
neg edx
cmp eax, edx
mov eax, dword [ebp - 0x20]
setg cl
imul eax, ecx
add eax, dword [ebp - 0x68]
imul ecx, eax, 0x183
mov eax, dword [ebp - 0x68]
inc dword [ebp - 0x20]
cmp ecx, eax
jge 0x1003f2bb
xor ecx, ecx
inc ecx
jmp 0x1003f2bd
mov ecx, ebx
mov eax, dword [ebp - 0x3c]
xor edx, edx
cmp ecx, eax
mov eax, dword [ebp - 0x28]
setg dl
xor ecx, ecx
cmp edx, eax
setg cl
mov dword [ebp - 0x24], ecx
lea ecx, [ebp - 0x264]
call fcn.10006788
jmp 0x1003f30d
lea eax, [ebp - 0x28c]
mov dword [ebp - 0x1a8], 0x9589ab98
push eax
push ecx
push ecx
push ecx
push 0x666c
mov edx, 0x3237
lea ecx, [ebp - 0x1a8]
call fcn.1003aff9
add esp, 0x14
lea ecx, [ebp - 0x28c]
mov dword [ebp - 4], esi
call fcn.10006788
lea eax, [ebp - 0x3d]
push eax
lea eax, [ebp - 0xbc]
push eax
lea eax, [ebp - 0xec]
push eax
push 0x5090
push 1
lea eax, [ebp - 0x1f4]
push eax
push ecx
lea eax, [ebp - 0xd8]
push eax
lea ecx, [ebp - 0x100]
call fcn.10038d4e
mov dword [ebp - 0x18], 0x7a4a12b5
add esp, 0x20
mov dword [ebp - 0x18], ebx
jmp 0x1003f36e
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x4c8], 0xe2799ac7
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], edi
jl 0x1003f35d
mov dword [ebp - 0x18], 1
cmp dword [ebp - 0x18], ebx
jl 0x1003f398
push 0x39d9
mov byte [ebp - 0x7c], bl
lea edx, [ebp - 0x7c]
push 1
call fcn.1003b0c6
dec dword [ebp - 0x18]
pop ecx
pop ecx
jns 0x1003f37f
push 0x6da9
push 0x6af1
push 0x5502
push 0x745f
push 0x1c73
push 0x7d0a
push 0x100aedec
push 0x57b9
push 1
push ebx
xor dl, dl
mov ecx, 0x1ac9
call fcn.1003b959
mov dword [ebp - 0xb8], ebx
xor ecx, ecx
mov dword [ebp - 0x64], 0xfffffffd
add esp, 0x28
mov dword [ebp - 0x58], 0x43cdf98a
mov dword [ebp - 0x1c], 0xec79e672
mov dword [ebp - 0x70], 0x758e92ed
mov dword [ebp - 0x3c], 4
mov eax, dword [ebp - 0x64]
mov eax, dword [ebp - 0x64]
mov eax, dword [ebp - 0x64]
mov eax, dword [ebp - 0x64]
mov dword [ebp - 0x58], eax
mov eax, dword [ebp - 0x64]
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x64]
mov eax, dword [ebp - 0x1c]
cmp eax, 1
mov eax, dword [ebp - 0x64]
setg cl
xor edx, edx
test ecx, ecx
setle dl
xor ecx, ecx
sub edx, eax
mov eax, dword [ebp - 0x64]
cmp eax, edx
setne cl
mov dword [ebp - 0x70], ecx
mov eax, dword [ebp - 0x70]
cmp dword [ebp - 0x58], eax
jne 0x1003f509
push 1
lea ecx, [ebp - 0x2f0]
call fcn.10006705
lea eax, [ebp - 0x2f0]
mov dword [ebp - 4], 0x1c
push eax
xor eax, eax
lea ecx, [ebp - 0x420]
inc eax
push eax
push 0x25e5
push 0x2793
push eax
push 0x1295
push 0x408
push 0xdd4
push 0x452c
mov dl, al
call fcn.10038e30
add esp, 0x24
mov dword [ebp - 0x1c], edi
jmp 0x1003f4f3
mov dword [ebp - 0x1b4], 0xb45beac3
mov dword [ebp - 0x1fc], 0xfffffffe
mov dword [ebp - 0x58], esi
jmp 0x1003f4ea
lea eax, [ebp - 0x1fc]
mov dword [ebp - 0x208], ebx
push eax
lea eax, [ebp - 0x1b4]
push eax
push ecx
lea eax, [ebp - 0x2f0]
xor cl, cl
push eax
lea eax, [ebp - 0x64]
push eax
lea eax, [ebp - 0x70]
push eax
lea eax, [ebp - 0x58]
push eax
lea edx, [ebp - 0x208]
call fcn.1003d0e7
add esp, 0x1c
inc dword [ebp - 0x58]
cmp dword [ebp - 0x58], 0xe
je 0x1003f4af
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 6
jl 0x1003f496
lea ecx, [ebp - 0x2f0]
mov dword [ebp - 4], esi
call fcn.10006788
jmp 0x1003f546
mov dword [ebp - 0x18], ebx
jmp 0x1003f51f
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x494], 0x5cec
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 3
jl 0x1003f50e
mov dword [ebp - 0x70], 0x19
jmp 0x1003f540
mov eax, dword [ebp - 0x490]
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0x58], eax
dec dword [ebp - 0x70]
cmp dword [ebp - 0x70], 0xfffffff6
jge 0x1003f52e
mov eax, dword [ebp - 0xbc]
xor dl, dl
push ecx
add eax, 4
push ecx
mov dword [ebp - 0x3c], eax
call fcn.1003a191
pop ecx
pop ecx
mov dword [ebp - 0x1bc], 0x57fd5464
lea ecx, [ebp - 0x368]
push 4
call fcn.10006705
lea eax, [ebp - 0x400]
mov dword [ebp - 4], 0x1d
push eax
push 0x1cd
push 0x5be6
push 1
lea edx, [ebp - 0x368]
call fcn.10038fc9
add esp, 0xc
lea eax, [ebp - 0x1bc]
push 0x5548
push ecx
push eax
push ecx
push 0x4d66
push ecx
lea eax, [ebp - 0x368]
push eax
push ecx
mov cl, 1
call fcn.1003b2b1
add esp, 0x24
mov dword [ebp - 4], esi
lea ecx, [ebp - 0x368]
call fcn.10006788
mov dword [ebp - 0x238], 0xe568
mov dword [ebp - 0x1c], ebx
jmp 0x1003f5f0
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0x394], 0x75c96dd1
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], edi
jl 0x1003f5df
mov dword [ebp - 0x1c], ebx
jmp 0x1003f60b
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0x3f0], 0xa8b108f8
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], edi
jl 0x1003f5fa
mov eax, dword [ebp - 0x390]
push ecx
push ebx
push ecx
mov dword [ebp - 0x3ec], eax
lea ecx, [ebp - 0x238]
call fcn.10039801
mov byte [ebp - 0x84], bl
add esp, 0xc
mov dword [ebp - 0x83], 0x782b04b3
mov word [ebp - 0x7f], 0x2918
mov dword [ebp - 0x1c], 0x24a8c6a5
mov dword [ebp - 0x18], esi
mov dword [ebp - 0x1c], ebx
jmp 0x1003f77d
mov dword [ebp - 0x20], 0x1891f782
mov dword [ebp - 0x24], ebx
mov dword [ebp - 0x20], ebx
jmp 0x1003f671
mov eax, dword [ebp - 0x20]
mov dword [ebp + eax*4 - 0x188], ebx
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], 3
jl 0x1003f664
mov dword [ebp - 0x20], ebx
jmp 0x1003f771
mov dword [ebp - 0x24], 0xf8b4dfec
lea ecx, [ebp - 0x308]
push edi
call fcn.10006705
push ecx
push ebx
push ecx
push ecx
lea eax, [ebp - 0x308]
mov dword [ebp - 4], 0x1e
push 0xe6e
push eax
lea edx, [ebp - 0x404]
mov ecx, 0x7f47
call fcn.10039beb
mov eax, dword [ebp - 0x20]
xor ecx, ecx
add esp, 0x18
mov eax, dword [ebp + eax*4 - 0x188]
cmp eax, 0xf5fa3187
mov eax, dword [ebp - 0x20]
sete cl
xor edx, edx
imul ecx, ecx, 0x5890
mov eax, dword [ebp + eax*4 - 0x188]
cmp ecx, eax
mov eax, dword [ebp - 0x20]
setge dl
mov dword [ebp - 0x24], edx
xor edx, edx
mov eax, dword [ebp + eax*4 - 0x188]
cmp dword [ebp - 0x24], eax
mov eax, dword [ebp - 0x18]
setl dl
xor ecx, ecx
cmp edx, eax
mov eax, 0xa2d34caa
setl cl
cmp eax, ecx
sbb eax, eax
xor edx, edx
inc eax
neg eax
mov dword [ebp - 0x24], eax
mov eax, dword [ebp - 0x20]
mov esi, dword [ebp + eax*4 - 0x188]
mov ecx, dword [ebp - 0x24]
mov eax, dword [ebp - 0x20]
cmp ecx, eax
setge dl
xor eax, eax
cmp esi, edx
setl al
xor ecx, ecx
mov dword [ebp - 0x24], eax
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp + eax*4 - 0x188]
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp + eax*4 - 0x188]
cmp eax, 1
mov eax, dword [ebp - 0x308]
setg cl
or esi, 0xffffffff
mov dword [ebp - 4], esi
mov dword [eax], ecx
lea ecx, [ebp - 0x308]
call fcn.10006788
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], edi
jle 0x1003f67f
dec dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 0xfffffff3
je 0x1003f655
mov dword [ebp - 0x1c], 0xffffffe8
jmp 0x1003f7f7
mov dword [ebp - 0x18], esi
jmp 0x1003f7ee
mov dword [ebp - 0x20], ebx
jmp 0x1003f7ab
mov eax, dword [ebp - 0x20]
mov dword [ebp + eax*4 - 0x140], 0xfffffffb
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], edi
jl 0x1003f79a
push ecx
mov dl, 1
mov ecx, 0x5378
call fcn.100397d2
pop ecx
mov dword [ebp - 0x140], esi
jmp 0x1003f7e2
push 0x4c8f
push ecx
push ecx
mov edx, 0x8ca
mov cl, 1
call fcn.1003d49c
add esp, 0xc
dec dword [ebp - 0x140]
cmp dword [ebp - 0x140], 0xfffffffa
jne 0x1003f7c6
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 0x18
je 0x1003f795
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 4
jl 0x1003f790
push 0xa
pop eax
mov word [ebp - 0xc8], ax
mov dword [ebp - 0x20], esi
mov dword [ebp - 0x20], ebx
cmp dword [ebp - 0x20], ebx
jl 0x1003f89e
mov dword [ebp - 0x18], 0xcd66a075
mov dword [ebp - 0x1c], ebx
jmp 0x1003f833
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0x4ac], 0xfff9
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 3
jl 0x1003f822
mov dword [ebp - 0x1c], ebx
jmp 0x1003f84b
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0x488], edi
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 3
jl 0x1003f83e
cmp dword [ebp - 0x18], ebx
je 0x1003f882
mov eax, dword [ebp - 0x20]
xor ecx, ecx
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x18]
cmp eax, 0xfff9
setne cl
imul ecx, dword [ebp - 0x20]
imul eax, ecx, 0x8ab7
mov dword [ebp - 0x4ac], eax
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x480], 0x3fde7504
dec dword [ebp - 0x20]
jns 0x1003f816
mov ecx, edi
mov dword [ebp - 0xe8], ebx
mov dword [ebp - 0x1c], ecx
cmp ecx, 7
jae 0x10040334
mov dword [ebp - 0xc4], 0x97f6af11
lea ecx, [ebp - 0x2cc]
mov dword [ebp - 0x210], 0xfffffff8
push 4
call fcn.10006705
push edi
lea ecx, [ebp - 0x2c0]
mov dword [ebp - 4], 0x1f
call fcn.10006705
mov byte [ebp - 4], 0x20
lea ecx, [ebp - 0x320]
mov dword [ebp - 0x1cc], 4
push 1
call fcn.10006705
xor eax, eax
mov byte [ebp - 4], 0x21
inc eax
lea ecx, [ebp - 0x2cc]
push eax
push ebx
push 0x91d
push ecx
mov dl, al
lea ecx, [ebp - 0x144]
call fcn.1003c3d6
add esp, 0xc
lea eax, [ebp - 0x144]
lea edx, [ebp - 0x2c0]
mov cl, 1
push 0x7297
push eax
push 0x57fc
call fcn.10039846
add esp, 0x10
lea eax, [ebp - 0x320]
lea edx, [ebp - 0x144]
push eax
push ecx
push ecx
xor cl, cl
call fcn.1003d49c
add esp, 0xc
mov dword [ebp - 0xc4], ebx
cmp dword [ebp - 0xc4], 0xffffffe2
je 0x1003fb33
push 3
lea ecx, [ebp - 0x350]
call fcn.10006705
mov byte [ebp - 4], 0x22
mov dword [ebp - 0x1d4], 1
mov dword [ebp - 0x258], 0x6d8f
mov dword [ebp - 0x198], 0x129ec6ea
mov dword [ebp - 0x24], 0x1f33
cmp dword [ebp - 0x24], 0x22b7
jle 0x1003fa01
mov eax, ebx
mov dword [ebp - 0x28], ebx
mov edi, ebx
mov ecx, edi
shl eax, cl
lea ecx, [ebp - 0x510]
cdq
push edx
push eax
call fcn.10001a84
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x1003f9d5
mov eax, dword [eax]
push eax
call fcn.1004823d
pop ecx
push ebx
push 1
lea ecx, [ebp - 0x510]
call fcn.10006cdf
mov eax, dword [ebp - 0x28]
inc edi
cmp edi, 0x18c1
jl 0x1003f9b9
inc eax
mov dword [ebp - 0x28], eax
cmp eax, 0x7178
jl 0x1003f9b7
mov dword [ebp - 0x38], 0x5de2caea
cmp dword [ebp - 0x24], 0x1ee2
jge 0x1003fa1c
push str.siunh_vxkdkr_kerdpqfsj_bvwmmhlm
call fcn.1004823d
pop ecx
push 1
lea ecx, [ebp - 0x3ac]
mov dword [ebp - 4], 0x22
call fcn.10006705
push 1
push ecx
lea eax, [ebp - 0xb4]
mov byte [ebp - 4], 0x25
push eax
push 0x4c7c
push ecx
push ecx
mov dword [ebp - 0x24], 0xcaaf7cc7
lea ecx, [ebp - 0x350]
mov edx, 0x6377
call fcn.1003b681
xor edx, edx
mov dword [ebp - 0xb4], ebx
add esp, 0x18
inc edx
jmp 0x1003fa83
mov ecx, dword [ebp - 0xb4]
mov eax, dword [ebp - 0x3ac]
mov dword [eax + ecx*4], 0x9f41adf8
inc dword [ebp - 0xb4]
cmp dword [ebp - 0xb4], edx
jl 0x1003fa6a
push ecx
lea eax, [ebp - 0x2cc]
push eax
push ecx
lea eax, [ebp - 0x198]
push eax
lea eax, [ebp - 0xc4]
push eax
lea eax, [ebp - 0x350]
push eax
sub esp, 0xc
lea eax, [ebp - 0x210]
push edx
push ecx
push eax
push ecx
lea eax, [ebp - 0x1cc]
push eax
push ecx
lea eax, [ebp - 0x2c0]
push eax
push ecx
lea edx, [ebp - 0x258]
lea ecx, [ebp - 0x1d4]
call fcn.1003b6cd
add esp, 0x44
lea ecx, [ebp - 0x320]
xor eax, eax
inc eax
mov dl, al
push 0x61b9
push 0x56e8
push 0x2475
push ebx
push 0x3a63
push eax
push 0x5545
push ecx
mov ecx, 0x3f32
call fcn.1003c16c
add esp, 0x20
lea ecx, [ebp - 0x3ac]
call fcn.10006788
lea ecx, [ebp - 0x350]
mov byte [ebp - 4], 0x21
call fcn.10006788
dec dword [ebp - 0xc4]
jmp 0x1003f966
lea ecx, [ebp - 0x320]
call fcn.10006788
lea ecx, [ebp - 0x2c0]
call fcn.10006788
lea ecx, [ebp - 0x2cc]
mov dword [ebp - 4], esi
call fcn.10006788
movzx eax, byte [ebp - 0x84]
push 2
pop edi
lea eax, [eax*2 + 2]
cmp dword [ebp - 0x1c], eax
jne 0x10040294
mov dword [ebp - 0x54], edi
lea ecx, [ebp - 0x2fc]
mov dword [ebp - 0xf4], ebx
mov dword [ebp - 0xe4], 1
mov dword [ebp - 0x11c], ebx
mov dword [ebp - 0x218], esi
push edi
call fcn.10006705
mov dword [ebp - 4], 0x26
mov dword [ebp - 0x18], ebx
jmp 0x1003fbbb
mov ecx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x2fc]
mov dword [eax + ecx*4], 0xeab
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], edi
jl 0x1003fba8
mov dword [ebp - 0x54], 0xfffffff1
cmp dword [ebp - 0x54], 5
jle 0x1003fd7b
mov dword [ebp - 0x20], esi
lea ecx, [ebp - 0x2e4]
mov dword [ebp - 0x24], esi
push 1
call fcn.10006705
push 0x4d10
push 0x52be
push 0x6c59
xor eax, eax
mov byte [ebp - 4], 0x27
inc eax
mov dword [ebp - 0x30], 9
push eax
push 0x787c
push ebx
lea ecx, [ebp - 0x90]
mov dword [ebp - 0x34], 0x3ecdc0f1
push ecx
push 0x3cb8
mov dl, al
lea ecx, [ebp - 0x2e4]
call fcn.1003c16c
add esp, 0x20
mov dword [ebp - 0x90], ebx
jmp 0x1003fc4a
mov eax, dword [ebp - 0x90]
mov dword [ebp + eax*4 - 0x3bc], 5
inc dword [ebp - 0x90]
cmp dword [ebp - 0x90], 3
jl 0x1003fc33
push 0x832
push 0x61ad
push 0x5cf8
push 0x2811
push 0x2c26
push 0x4de4
push 0x6029
xor eax, eax
mov ecx, 0x62e0
inc eax
push 0x7816
push eax
push eax
mov dl, al
call fcn.1003b959
mov dword [ebp - 0x18], 0x1527
add esp, 0x28
cmp dword [ebp - 0x18], 0x18d6
jle 0x1003fcee
mov dword [ebp - 0x28], ebx
mov edi, ebx
mov ecx, ebx
mov dword [ebp - 0x38], 0x7f24
mov ebx, dword [ebp - 0x28]
mov dword [ebp - 0x24], ecx
mov eax, ebx
sar eax, cl
mov ecx, 0x1007b9d8
cdq
push edx
push eax
call fcn.1000616a
mov ecx, dword [ebp - 0x24]
add ecx, edi
dec dword [ebp - 0x38]
mov dword [ebp - 0x24], ecx
jne 0x1003fcb3
inc edi
push 0
pop ebx
cmp edi, 0x60fa
jl 0x1003fca4
mov eax, dword [ebp - 0x28]
inc eax
mov dword [ebp - 0x28], eax
cmp eax, 0xd54
jl 0x1003fca2
push 2
pop edi
cmp dword [ebp - 0x20], ebx
jne 0x1003fcf7
mov ecx, ebx
jmp 0x1003fcfa
xor ecx, ecx
inc ecx
mov eax, dword [ebp - 0x54]
mov dword [ebp - 0x3bc], ecx
mov eax, dword [ebp - 0x34]
cmp dword [ebp - 0x30], ebx
jne 0x1003fd14
cmp dword [ebp - 0x34], ebx
jne 0x1003fd14
mov eax, ebx
jmp 0x1003fd17
xor eax, eax
inc eax
mov dword [ebp - 0x11c], eax
mov byte [ebp - 4], 0x28
cmp dword [ebp - 0x18], 0x130f
jge 0x1003fd5d
mov edx, str.xti_zmoipge_ndvk
mov ecx, 0x1007b9d8
call fcn.10008de6
jmp 0x1003fd5d
mov dword [ebp - 4], 0x27
lea ecx, [ebp - 0x2e4]
mov byte [ebp - 4], 0x26
call fcn.10006788
inc dword [ebp - 0x54]
jmp 0x1003fbc7
lea eax, [ebp - 0xf4]
push eax
lea eax, [ebp - 0x2fc]
push eax
push 0x507d
lea eax, [ebp - 0x218]
push eax
push 0x7664
lea eax, [ebp - 0xe4]
push eax
push 0x269f
lea eax, [ebp - 0x54]
push eax
xor eax, eax
lea ecx, [ebp - 0x11c]
inc eax
push eax
push ebx
mov dl, al
call fcn.1003b959
add esp, 0x28
mov dword [ebp - 4], esi
lea ecx, [ebp - 0x2fc]
call fcn.10006788
mov edx, dword [ebp - 0x1c]
lea ecx, [ebp - 0x32c]
push edi
movzx eax, byte [ebp + edx - 0x84]
inc eax
mov dword [ebp - 0xe8], eax
mov dword [ebp - 0x60], edi
mov dword [ebp - 0xf0], ebx
mov dword [ebp - 0xe0], 1
mov dword [ebp - 0x10c], ebx
mov dword [ebp - 0x1dc], esi
call fcn.10006705
lea eax, [ebp - 0x3e8]
mov dword [ebp - 4], 0x2a
push eax
push ecx
push 0x14d0
push 0xb91
push 1
push 0x4244
lea ecx, [ebp - 0x32c]
call fcn.1003ba68
add esp, 0x18
mov dword [ebp - 0x60], 0xfffffff1
cmp dword [ebp - 0x60], 5
jle 0x1003ffda
mov dword [ebp - 0x20], esi
mov dword [ebp - 0x24], esi
mov dword [ebp - 0x28], 0x5819
cmp dword [ebp - 0x28], 0x5897
jle 0x1003fea3
mov edi, ebx
mov eax, ebx
mov dword [ebp - 0x38], ebx
mov ebx, eax
mov dword [ebp - 0x24], 0x50f0
mov eax, ebx
mov ecx, 0x1007b9d8
or eax, edi
cdq
push edx
push eax
call fcn.1000616a
dec ebx
dec dword [ebp - 0x24]
jne 0x1003fe6f
mov eax, dword [ebp - 0x38]
inc eax
mov dword [ebp - 0x38], eax
cmp eax, 0x69a8
jl 0x1003fe66
inc edi
push 0
pop ebx
cmp edi, 0x8055
jl 0x1003fe61
push 2
pop edi
push 1
lea ecx, [ebp - 0x314]
call fcn.10006705
mov byte [ebp - 4], 0x2c
cmp dword [ebp - 0x28], 0x576e
jge 0x1003fecc
mov edx, str.twj_dqr_cawaulm_simdmfv_ggfktxkn_qunzignw_ivxjzzocw_wuafnwoc_ersusemw_razprlzb_qtgsls
mov ecx, 0x1007b9d8
call fcn.10008de6
xor eax, eax
inc eax
push 0x6077
push 0x775d
lea ecx, [ebp - 0x314]
mov dword [ebp - 4], 0x2b
push ecx
push 0x2269
lea ecx, [ebp - 0xa0]
mov dword [ebp - 0x28], 9
push ecx
push 0x3e9f
push 0x2582
push 0x4ec5
push ebx
mov dword [ebp - 0x38], 0x3ecdc0f1
mov dl, al
push eax
mov ecx, 0x6cb4
call fcn.1003b959
add esp, 0x28
mov dword [ebp - 0xa0], ebx
jmp 0x1003ff6a
mov eax, dword [ebp - 0xa0]
mov dword [ebp + eax*4 - 0x3cc], 5
inc dword [ebp - 0xa0]
cmp dword [ebp - 0xa0], 3
jl 0x1003ff53
push 0xe15
lea eax, [ebp - 0x75]
mov byte [ebp - 0x75], bl
push eax
push 0x333f
push ecx
push 0x5201
mov dl, 1
call fcn.1003bbc9
add esp, 0x14
cmp dword [ebp - 0x20], ebx
jne 0x1003ff9d
mov ecx, ebx
jmp 0x1003ffa0
xor ecx, ecx
inc ecx
mov eax, dword [ebp - 0x60]
mov dword [ebp - 0x3cc], ecx
mov eax, dword [ebp - 0x38]
cmp dword [ebp - 0x28], ebx
jne 0x1003ffba
cmp dword [ebp - 0x38], ebx
jne 0x1003ffba
mov eax, ebx
jmp 0x1003ffbd
xor eax, eax
inc eax
mov dword [ebp - 0x10c], eax
lea ecx, [ebp - 0x314]
mov byte [ebp - 4], 0x2a
call fcn.10006788
inc dword [ebp - 0x60]
jmp 0x1003fe3f
push 0x299c
push 1
push 0x5367
lea eax, [ebp - 0xe0]
push eax
lea eax, [ebp - 0xf0]
push eax
push 0x7ce6
push ecx
push 0x24ce
lea eax, [ebp - 0x1dc]
push eax
push ecx
lea eax, [ebp - 0x10c]
push eax
lea eax, [ebp - 0x32c]
push eax
lea edx, [ebp - 0x60]
call fcn.1003c0c5
add esp, 0x30
mov dword [ebp - 4], esi
lea ecx, [ebp - 0x32c]
call fcn.10006788
mov ecx, dword [ebp - 0x1c]
movzx eax, byte [ebp + ecx - 0x84]
dec ecx
mov dword [ebp - 0x20], 5
add ecx, eax
mov dword [ebp - 0xb0], 0x727cad7d
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 0x18], ebx
jmp 0x10040062
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x344], esi
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 3
jl 0x10040055
mov dword [ebp - 0x20], 5
cmp dword [ebp - 0x20], 0xffffffef
jl 0x1004032a
mov dword [ebp - 0x18], 0xd72d7671
mov dword [ebp - 0xc0], 0xfffffffe
mov dword [ebp - 0x34], 0xfffffffd
mov dword [ebp - 0x24], 0xfff7
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0xb0], eax
mov eax, dword [ebp - 0x18]
imul eax, dword [ebp - 0xb0]
test eax, eax
je 0x100400ca
mov eax, dword [ebp - 0xb0]
mov dword [ebp - 0xc0], eax
mov eax, dword [ebp - 0xc0]
mov dword [ebp - 0x34], eax
mov eax, dword [ebp - 0x34]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x24]
sub eax, dword [ebp - 0x20]
neg eax
sbb eax, eax
inc eax
neg eax
cmp eax, dword [ebp - 0x33c]
je 0x100401fa
lea eax, [ebp - 0xb0]
push eax
push 0x643f
push 0x144f
xor eax, eax
lea ecx, [ebp - 0xc0]
inc eax
push eax
push ecx
push eax
push 0x328c
push 0x21a2
mov dl, al
mov ecx, 0x3fde
call fcn.1003c16c
mov dword [ebp - 0x18], 0x5b57
add esp, 0x20
cmp dword [ebp - 0x18], 0x5e74
jle 0x100401a9
push 0x1183
call dword [sym.imp.KERNEL32.dll_IsValidCodePage]
mov eax, ebx
mov dword [ebp - 0x34], ebx
mov edi, eax
mov dword [ebp - 0x30], 0x3185
mov eax, ebx
mov dword [ebp - 0x38], ebx
mov ecx, eax
mov dword [ebp - 0x28], edi
mov eax, edi
mov edx, ebx
sar eax, cl
mov dword [ebp - 0x24], edx
mov dword [ebp - 0x28], eax
mov ecx, edx
sar eax, cl
mov ecx, 0x1007b9d8
cdq
push edx
push eax
call fcn.1000616a
mov edx, dword [ebp - 0x24]
mov eax, dword [ebp - 0x28]
inc edx
mov dword [ebp - 0x24], edx
cmp edx, 0x3afe
jl 0x10040161
mov eax, dword [ebp - 0x38]
inc eax
mov dword [ebp - 0x38], eax
cmp eax, 0x55c2
jl 0x10040150
dec edi
dec dword [ebp - 0x30]
jne 0x1004014b
mov eax, dword [ebp - 0x34]
inc eax
mov dword [ebp - 0x34], eax
cmp eax, 0x2176
jl 0x10040142
push 2
pop edi
mov dword [ebp - 4], 0x2e
cmp dword [ebp - 0x18], 0x5aec
jge 0x100401c8
mov edx, str.dlllgv_yvctgi_zcfmd_htpw
mov ecx, 0x1007b9d8
call fcn.10008de6
mov dword [ebp - 4], esi
jmp 0x1004028c
push 3
lea ecx, [ebp - 0x228]
call fcn.10006705
push ecx
push ecx
lea eax, [ebp - 0x228]
mov dword [ebp - 4], 0x30
push eax
push 1
lea edx, [ebp - 0x3b0]
call fcn.1003c28d
add esp, 0x10
mov dword [ebp - 0xc0], 4
cmp dword [ebp - 0xc0], ebx
jne 0x10040242
mov eax, dword [ebp - 0xb0]
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x24]
xor edx, edx
mov eax, dword [ebp - 0x228]
cmp dword [eax], ecx
setl dl
mov dword [ebp - 0x34], edx
mov eax, dword [ebp - 0x34]
mov ecx, dword [ebp - 0x228]
cmp eax, dword [ecx]
jge 0x1004026e
mov eax, dword [ebp - 0x340]
mov ecx, dword [ebp - 0x228]
mov eax, dword [ebp - 0x33c]
imul eax, dword [ecx + 8]
lea ecx, [ebp - 0x228]
mov dword [ebp - 0xb0], eax
mov dword [ebp - 4], esi
call fcn.10006788
dec dword [ebp - 0x20]
jmp 0x1004006f
push ecx
push 0x5deb
mov dword [ebp - 0x24], 0xd5e48d32
push 1
call fcn.1003c2d5
add esp, 0xc
mov byte [ebp - 0x7a], bl
xor eax, eax
lea ecx, [ebp - 0x7a]
inc eax
mov dl, al
push eax
push eax
push ecx
push 0x11ea
mov ecx, 0x6d65
call fcn.1003c3d6
mov eax, dword [ebp - 0x1c]
push 0x6568
push ebx
movzx edx, byte [ebp + eax - 0x83]
sub eax, dword [ebp - 0xe8]
movzx eax, byte [ebp + eax - 0x86]
movzx ecx, word [ebp + eax*2 - 0xc8]
mov eax, ecx
and eax, edx
add eax, eax
sub ecx, eax
add ecx, edx
mov edx, dword [ebp - 0x1c]
movzx eax, byte [ebp + edx - 0x84]
mov edx, 0x4aa0
mov word [ebp + eax*2 - 0xc8], cx
xor eax, eax
inc eax
mov ecx, 0x78ed
push eax
push eax
lea eax, [ebp - 0xe8]
push eax
call fcn.1003aff9
add esp, 0x24
mov ecx, dword [ebp - 0x1c]
add ecx, edi
jmp 0x1003f8a6
push 0x44f7
push 1
call fcn.1003c5d4
xor eax, eax
mov dword [ebp - 0x2a0], 7
pop ecx
pop ecx
mov word [ebp - 0xc6], ax
lea ecx, [ebp - 0x2b4]
mov word [ebp - 0x2b4], ax
lea eax, [ebp - 0xc8]
push eax
mov dword [ebp - 0x2a4], ebx
call fcn.10006e7d
cmp dword [ebp - 0x2a0], 8
lea eax, [ebp - 0x2b4]
push ebx
cmovae eax, dword [ebp - 0x2b4]
lea ecx, [ebp - 0x2b4]
push 1
movzx eax, word [eax]
mov dword [ebp - 0x20], eax
call fcn.10006fda
mov dword [ebp - 0x1c], 0x15747814
xor ecx, ecx
mov dword [ebp - 0xfc], ebx
inc ecx
mov dword [ebp - 0x124], ecx
mov dword [ebp - 0x18], ecx
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0xfc], eax
cmp dword [ebp - 0x1c], ecx
jg 0x100403ca
mov edx, ebx
cmp dword [ebp - 0x1c], ebx
je 0x100403cc
mov edx, ecx
mov eax, dword [ebp - 0x1c]
add eax, edx
mov dword [ebp - 0x124], eax
mov eax, dword [ebp - 0x18]
imul eax, dword [ebp - 0xfc]
test eax, eax
jne 0x100403ec
cmp dword [ebp - 0x1c], ebx
jne 0x100403ec
mov ecx, ebx
mov eax, dword [ebp - 0x1c]
xor edx, edx
imul eax, ecx
cmp eax, 0x51acae7b
setle dl
xor ecx, ecx
add edx, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x18]
cmp edx, eax
mov eax, dword [ebp - 0x18]
setle cl
xor edx, edx
cmp ecx, 0xf394a2a4
setne dl
xor ecx, ecx
cmp edx, eax
setne cl
xor eax, eax
cmp ecx, 0x9c08
setne al
cmp eax, dword [ebp - 0x18]
jle 0x10040473
push 1
push ecx
mov dword [ebp - 0x150], 9
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x150], eax
lea eax, [ebp - 0xfc]
push 0x2da4
push eax
lea eax, [ebp - 0x124]
push eax
lea eax, [ebp - 0x150]
push eax
push 0x33d9
push ecx
mov ecx, 0x4ca0
call fcn.1003c820
add esp, 0x20
jmp 0x1004047e
push ecx
push ecx
mov cl, 1
call fcn.1003d04c
pop ecx
pop ecx
mov eax, ebx
mov dword [ebp - 0x1c], ebx
cmp eax, edi
jae 0x100405c8
mov dword [ebp - 0x34], 0xd5a
cmp dword [ebp - 0x34], 0xdfc
jle 0x1004050a
push ebx
call dword [sym.imp.KERNEL32.dll_RemoveDirectoryW]
mov eax, ebx
mov dword [ebp - 0x30], ebx
mov ecx, eax
mov dword [ebp - 0x38], 0x1f05
mov dword [ebp - 0x28], ecx
mov eax, ebx
mov dword [ebp - 0x24], ebx
mov edi, ebx
mov ebx, ecx
mov ecx, eax
sar ebx, cl
mov ecx, edi
mov eax, ebx
sar eax, cl
mov ecx, 0x1007b9d8
cdq
push edx
push eax
call fcn.1000616a
inc edi
cmp edi, 0x12c4
jl 0x100404c0
mov eax, dword [ebp - 0x24]
mov ecx, dword [ebp - 0x28]
inc eax
mov dword [ebp - 0x24], eax
push 0
pop ebx
cmp eax, 0x4621
jl 0x100404b8
dec ecx
dec dword [ebp - 0x38]
mov dword [ebp - 0x28], ecx
jne 0x100404b3
mov eax, dword [ebp - 0x30]
inc eax
mov dword [ebp - 0x30], eax
cmp eax, 0x35ec
jl 0x100404a7
push 2
pop edi
mov dword [ebp - 4], 0x31
cmp dword [ebp - 0x34], 0xc64
jge 0x1004054d
mov edx, str.qnnr_uuktesgy_cjcl_jqrw_heth_ozfvm_lsjqbusk_izqbm_dhmmgfx_dlukbmnv_nkajoa
mov ecx, 0x1007b9d8
call fcn.10008de6
jmp 0x1004054d
mov dword [ebp - 4], esi
xor ecx, ecx
mov dword [ebp - 0x34], 0x7a4a12b5
inc ecx
mov dword [ebp - 0x18], ebx
jmp 0x10040570
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x4c0], 0xe2799ac7
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], edi
jl 0x1004055f
mov dword [ebp - 0x34], ecx
cmp dword [ebp - 0x34], ebx
jl 0x100405b2
push 0x5e94
push 0x55c5
push ecx
push 0x5ea3
push 0x3df9
push 0x43f8
push 0x5414
mov edx, 0x2dbf
mov cl, 1
call fcn.1003d0e7
add esp, 0x1c
dec dword [ebp - 0x34]
jns 0x1004057d
xor ebx, ebx
mov eax, dword [ebp - 0x1c]
xor ecx, ecx
mov word [ebp + eax*2 - 0xc8], cx
inc eax
mov dword [ebp - 0x1c], eax
jmp 0x10040483
mov edx, dword [ebp - 0xd8]
shr edx, 1
mov dword [ebp - 0x28], edx
mov ecx, dword [ebp - 0xb8]
mov dword [ebp - 0x24], ecx
lea eax, [ecx + 1]
cmp eax, edx
jae 0x10040bbc
mov esi, dword [ebp - 0x3c]
lea ecx, [esi + ecx*2]
call fcn.10038826
sub esp, 0x18
mov dword [ebp - 0x148], eax
mov dword [ebp - 0x38], 0x2799
xor cl, cl
call fcn.1003d1fd
add esp, 0x14
mov edx, 0x3b67
push 0x66a0
push ecx
push 0x3f79
push 0x7f00
push 0x57b2
sub esp, 0xc
push ebx
push ecx
push 0x4286
push ecx
push 0x784b
push ecx
push 0x351b
push ecx
mov ecx, 0x27e3
call fcn.1003b6cd
mov eax, dword [ebp - 0x24]
add esp, 0x44
add eax, 2
lea ecx, [esi + eax*2]
call fcn.10038826
push 3
lea ecx, [ebp - 0x35c]
mov dword [ebp - 0xd0], eax
call fcn.10006705
mov dword [ebp - 4], 0x33
or esi, 0xffffffff
mov dword [ebp - 0x98], esi
mov dword [ebp - 0x1c], ebx
jmp 0x10040693
mov ecx, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x35c]
mov dword [eax + ecx*4], 0x9807
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 3
jl 0x10040680
xor ecx, ecx
mov dword [ebp - 0x1c], ebx
inc ecx
jmp 0x100406b2
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0x3f4], 0xfc3
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], ecx
jl 0x100406a1
push ecx
lea eax, [ebp - 0x98]
push eax
lea eax, [ebp - 0x35c]
push eax
push ecx
push ecx
push ecx
mov ecx, 0x2316
call fcn.10039a53
add esp, 0x18
mov dword [ebp - 0x98], ebx
jmp 0x100406fa
mov byte [ebp - 0x29], bl
cmp byte [ebp - 0x29], 0
je 0x100406f4
sub esp, 0x18
mov cl, 1
call fcn.1003d1fd
add esp, 0x18
dec dword [ebp - 0x98]
cmp dword [ebp - 0x98], 0xfffffffe
je 0x100406de
lea ecx, [ebp - 0x35c]
mov dword [ebp - 4], esi
call fcn.10006788
cmp dword [ebp - 0x148], esi
jne 0x10040726
cmp dword [ebp - 0xd0], 0
je 0x10040bbc
mov dword [ebp - 0x248], 0x57fd5464
lea ecx, [ebp - 0x374]
push 4
call fcn.10006705
push 1
sub esp, 0xc
mov dword [ebp - 4], 0x34
lea edx, [ebp - 0x3c0]
lea ecx, [ebp - 0x374]
call fcn.1003d23c
add esp, 0x10
lea eax, [ebp - 0x374]
push eax
push ecx
push ecx
push 1
push ecx
push ecx
lea ecx, [ebp - 0x248]
call fcn.1003d28f
add esp, 0x18
mov dword [ebp - 4], esi
lea ecx, [ebp - 0x374]
call fcn.10006788
add dword [ebp - 0xb8], 4
mov dword [ebp - 0x1f0], 0xd14cd495
mov dword [ebp - 0x1ec], 0x53b1dab5
mov dword [ebp - 0x1e4], 0xfffffff7
mov dword [ebp - 0x1e8], 0x6966ef3b
mov dword [ebp - 0x274], 0x12f8ba79
mov byte [ebp - 0x29], bl
cmp byte [ebp - 0x29], 0
je 0x100407de
push 0x12b7
push ecx
push ecx
mov dl, 1
mov ecx, 0x1407
call fcn.1003d3a4
add esp, 0xc
xor eax, eax
lea ecx, [ebp - 0x1e4]
inc eax
lea edx, [ebp - 0x274]
push eax
push ecx
push 0x67bc
lea ecx, [ebp - 0x1e8]
push ecx
lea ecx, [ebp - 0x1ec]
push ecx
lea ecx, [ebp - 0x1f0]
push ecx
push eax
push 0x26f6
push 0x3a42
xor cl, cl
call fcn.10039fb7
add esp, 0x24
cmp dword [ebp - 0xd0], 0
jle 0x10040b90
mov dword [ebp - 0x230], 0xaac89535
mov dword [ebp - 0x1c], ebx
jmp 0x1004084b
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0x4a0], 0xec2e0cf5
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 3
jl 0x1004083a
mov dword [ebp - 0x1c], ebx
jmp 0x10040867
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0x108], 0xfffffffa
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], edi
jl 0x10040856
mov dword [ebp - 0x104], ebx
jmp 0x100408e4
mov dword [ebp - 0x34], esi
mov eax, dword [ebp - 0x104]
mov dword [ebp + eax*4 - 0x4a0], 0xfffffffc
mov dword [ebp - 0x34], edi
cmp dword [ebp - 0x34], ebx
jl 0x100408de
mov dword [ebp - 0x18], 0x5a80e358
mov dword [ebp - 0x18], ebx
cmp dword [ebp - 0x18], edi
jg 0x100408d9
xor ebx, ebx
inc ebx
push ebx
push 0x7e49
push 0x55d8
push 0x3ed9
lea eax, [ebp - 0x1f8]
mov dword [ebp - 0x1f8], esi
push ebx
push eax
mov dl, bl
mov ecx, 0x26f6
call fcn.1003d518
add esp, 0x18
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], edi
jle 0x100408a2
xor ebx, ebx
dec dword [ebp - 0x34]
jns 0x10040890
inc dword [ebp - 0x104]
cmp dword [ebp - 0x104], edi
jle 0x10040874
lea eax, [ebp - 0x230]
xor dl, dl
push eax
push ecx
call fcn.1003d906
mov ecx, dword [ebp - 0xb8]
add esp, 4
mov eax, dword [ebp - 0x3c]
push 1
lea esi, [eax + ecx*2]
mov dword [ebp - 0x110], esi
mov dword [ebp - 0xf8], ebx
call fcn.1003d61f
pop ecx
push ebx
call fcn.1003d61f
mov eax, dword [ebp - 0xd0]
pop ecx
pop ecx
lea ecx, [esi + eax*2]
mov dword [ebp - 0xf8], ecx
add ecx, 0xfffffffe
call fcn.100387fb
cmp ax, word [ebp - 0x20]
jne 0x10040ae3
push 4
lea ecx, [ebp - 0x3dc]
call fcn.10006705
mov dword [ebp - 4], 0x35
xor ecx, ecx
mov dword [ebp - 0x38], 0x4f16
inc ecx
mov dword [ebp - 0xa8], ebx
jmp 0x10040984
mov eax, dword [ebp - 0xa8]
mov dword [ebp + eax*4 - 0xcc], 7
inc dword [ebp - 0xa8]
cmp dword [ebp - 0xa8], ecx
jl 0x1004096d
push 0x4e7f
push 0x571
push ecx
push 0x5936
push 0x47d3
lea eax, [ebp - 0xa8]
mov edx, 0x7a8b
push eax
push 0x64cb
push 0x182
push ecx
lea eax, [ebp - 0x3dc]
push eax
call fcn.1003d727
add esp, 0x28
mov dword [ebp - 0xcc], 1
cmp dword [ebp - 0xcc], 0xffffffee
jge 0x10040ab3
mov dword [ebp - 0x18], ebx
mov dword [ebp - 0x24], 0x2e10
cmp dword [ebp - 0x24], 0x2f0c
jle 0x10040a50
mov edx, ebx
mov dword [ebp - 0x34], ebx
mov esi, ebx
mov edi, ebx
mov ecx, edi
mov eax, esi
sar eax, cl
lea ecx, [ebp - 0x540]
or eax, edx
cdq
push edx
push eax
call fcn.10001a84
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x10040a1a
mov eax, dword [eax]
push eax
call fcn.1004823d
pop ecx
push ebx
push 1
lea ecx, [ebp - 0x540]
call fcn.10006cdf
mov edx, dword [ebp - 0x34]
inc edi
cmp edi, 0x4b15
jl 0x100409fa
inc esi
cmp esi, 0xcde
jl 0x100409f8
inc edx
mov dword [ebp - 0x34], edx
cmp edx, 0x6d10
jl 0x100409f6
mov dword [ebp - 0x30], 0x6b9dd952
cmp dword [ebp - 0x24], 0x2df8
jge 0x10040a6b
push str.dxmmt_pla_pgf
call fcn.1004823d
pop ecx
mov dword [ebp - 4], 0x35
mov dword [ebp - 0x18], ebx
jmp 0x10040aa2
mov byte [ebp - 0x29], bl
cmp byte [ebp - 0x29], 0
je 0x10040a9c
push ecx
push ecx
push 0x3e4f
push ecx
push 0x4acf
push 0x7c85
mov dl, 1
call fcn.1003d820
add esp, 0x18
dec dword [ebp - 0x38]
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 3
jle 0x10040a77
dec dword [ebp - 0xcc]
jmp 0x100409d1
or esi, 0xffffffff
lea ecx, [ebp - 0x3dc]
mov dword [ebp - 4], esi
call fcn.10006788
push 0x4899
push 1
push 0x76a3
lea ecx, [ebp - 0xf8]
call fcn.1003d929
add esp, 0xc
push 2
pop edi
jmp 0x10040ae6
or esi, 0xffffffff
push 3
lea ecx, [ebp - 0x38c]
call fcn.10006705
push ecx
push 0x70ad
push 1
mov dword [ebp - 4], 0x38
lea edx, [ebp - 0x3e4]
push 0x5b8b
lea ecx, [ebp - 0x38c]
mov dword [ebp - 0x200], 0x2667a876
call fcn.1003b926
add esp, 0x10
lea eax, [ebp - 0x200]
xor dl, dl
push eax
push ecx
push ecx
lea ecx, [ebp - 0x38c]
call fcn.1003d3a4
add esp, 0xc
mov dword [ebp - 4], esi
lea ecx, [ebp - 0x38c]
call fcn.10006788
push ecx
lea eax, [ebp - 0x110]
mov edx, 0x61e0
push eax
lea eax, [ebp - 0x148]
push eax
push ebx
push ecx
lea eax, [ebp - 0xf8]
push eax
push 0x4074
push 0x6056
push 0x100aedec
push 0x110d
push 0x7d94
push ecx
mov ecx, 0x207
call fcn.1003a718
add esp, 0x30
push ecx
push 1
push ecx
push ecx
lea eax, [ebp - 0xd0]
mov edx, 0x4aad
push eax
push 0x38d2
lea ecx, [ebp - 0xb8]
call fcn.10039beb
mov edx, dword [ebp - 0x28]
add esp, 0x18
jmp 0x100405d3
mov dword [ebp - 0x1c], 0x9dada439
mov dword [ebp - 0x18], ebx
jmp 0x10040bd5
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x15c], esi
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 3
jl 0x10040bc8
mov dword [ebp - 0x1c], edi
cmp dword [ebp - 0x1c], ebx
jl 0x10040c49
mov dword [ebp - 0x3c], ebx
mov eax, dword [ebp - 0x1c]
cmp dword [ebp + eax*4 - 0x15c], ebx
jne 0x10040c49
mov eax, dword [ebp - 0x1c]
xor edx, edx
mov esi, 0xd680
mov eax, dword [ebp + eax*4 - 0x15c]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp + eax*4 - 0x15c]
mov eax, dword [ebp - 0x1c]
mov ecx, dword [ebp + eax*4 - 0x15c]
mov eax, dword [ebp - 0x15c]
cmp ecx, eax
mov eax, dword [ebp - 0x1c]
setg dl
sub esi, edx
xor edx, edx
mov eax, dword [ebp + eax*4 - 0x15c]
sub esi, eax
mov eax, dword [ebp - 0x1c]
mov ecx, dword [ebp + eax*4 - 0x15c]
cmp esi, ecx
setl dl
mov dword [ebp - 0x3c], edx
dec dword [ebp - 0x1c]
jns 0x10040be3
mov ecx, dword [ebp - 0xc]
mov eax, 0x100aedec
pop edi
pop esi
mov dword fs:[0], ecx
pop ebx
mov esp, ebp
pop ebp
ret