Function at 0x100059d8
Capabilities:
Check os version
Encode data using xor
Encrypt data using speck

Disassembly:
mov eax, 0x1005dc3a
call fcn.1005d528
sub esp, 0x858
mov dword [ebp - 0x24], 7
push ebx
mov dword [ebp - 0x18], 0x6f8f9ed0
xor ebx, ebx
mov dword [ebp - 0x30], 0x534a2c93
push esi
mov dword [ebp - 0x40], 7
push edi
mov dword [ebp - 0x38], 0xb72b416c
mov dword [ebp - 0x10], esp
mov dword [ebp - 0x24], 0xffffffea
cmp dword [ebp - 0x24], 0x12
jl 0x10005b02
push 0x6711
lea eax, [ebp - 0xe0]
mov dword [ebp - 0xf4], 0xfffc
push eax
lea eax, [ebp - 0xf4]
mov dword [ebp - 0xe0], 0x7fd1e814
push eax
push ecx
mov dword [ebp - 0x20], ebx
xor cl, cl
call fcn.100021f3
mov eax, dword [ebp - 0xf4]
add esp, 0x10
mov eax, dword [ebp - 0xe0]
cmp dword [ebp - 0xf4], ebx
je 0x10005a8e
mov eax, dword [ebp - 0x20]
xor ecx, ecx
cmp eax, 0x2092
setge cl
mov dword [ebp - 0x18], ecx
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0xf4]
dec eax
je 0x10005a8e
xor eax, eax
inc eax
jmp 0x10005a90
mov eax, ebx
cmp eax, dword [ebp - 0x24]
je 0x10005a9b
mov eax, dword [ebp - 0xe0]
mov eax, dword [ebp - 0x20]
sub eax, dword [ebp - 0x24]
je 0x10005aad
cmp dword [ebp - 0x18], ebx
je 0x10005aad
xor eax, eax
inc eax
jmp 0x10005aaf
mov eax, ebx
mov dword [ebp - 0x30], eax
mov eax, dword [ebp - 0x30]
mov dword [ebp - 0x40], eax
mov eax, dword [ebp - 0x40]
mov eax, dword [ebp - 0xe0]
mov ecx, dword [ebp - 0x20]
mov eax, dword [ebp - 0xe0]
sub ecx, 0xdedc87a9
neg ecx
sbb ecx, ecx
add eax, 0x688
inc ecx
xor edx, edx
add ecx, eax
mov eax, dword [ebp - 0x20]
cmp ecx, eax
setne dl
cmp edx, dword [ebp - 0x20]
jl 0x10005af5
cmp dword [ebp - 0x30], ebx
je 0x10005af5
xor esi, esi
inc esi
jmp 0x10005af7
mov esi, ebx
mov dword [ebp - 0x38], esi
inc dword [ebp - 0x24]
jmp 0x10005a1a
push 0x8bb
push 0x14b2
xor cl, cl
call fcn.1000358c
mov eax, dword [0x1007d468]
pop ecx
pop ecx
xor ecx, ecx
inc ecx
test cl, al
jne 0x10005b53
or eax, ecx
mov dword [0x1007d468], eax
mov dword [ebp - 4], ebx
mov dword [0x1007d46c], ebx
mov dword [0x1007d470], ebx
call fcn.1000c824
push 0x1005ef9c
mov dword [0x1007d46c], eax
call fcn.10046aa2
or dword [ebp - 4], 0xffffffff
pop ecx
xor ecx, ecx
inc ecx
mov dword [ebp - 0x24], 0x9519
mov dword [ebp - 0x20], 0xffffffff
mov dword [ebp - 0x1c], 0x3b2c57e7
push 2
mov dword [ebp - 0x38], 0x18144871
mov dword [ebp - 0x20], ebx
pop edi
jmp 0x10005b88
mov eax, dword [ebp - 0x20]
mov dword [ebp + eax*4 - 0x1ac], 0x2b441a62
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], edi
jl 0x10005b77
mov eax, dword [ebp - 0x24]
mov dword [ebp - 0x20], eax
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0x1a8], eax
test eax, eax
je 0x10005bc1
mov eax, dword [ebp - 0x24]
mov dword [ebp - 0x1a8], 0x6840eb44
mov eax, ecx
mov dword [ebp - 0x1c], 0x6840eb44
cmp dword [ebp - 0x1c], ebx
jne 0x10005bc3
mov eax, ebx
xor ecx, ecx
cmp eax, 0x56c37fc0
mov eax, dword [ebp - 0x24]
setle cl
xor edx, edx
cmp ecx, eax
push 0
setl dl
add edx, dword [ebp - 0x24]
neg edx
sbb edx, edx
xor eax, eax
neg edx
cmp edx, 0xfffffff6
setg al
xor ecx, ecx
cmp eax, 0xffffffff
mov eax, dword [ebp - 0x24]
setge cl
xor edx, edx
cmp ecx, eax
pop eax
setl dl
sub edx, 0x193208af
neg edx
sbb edx, edx
inc edx
setns al
sub eax, 0x68906353
cmp eax, 0xfffc
jae 0x10005c53
mov dword [ebp - 0x18], 0xfffffffb
cmp dword [ebp - 0x18], ebx
jne 0x10005c29
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0x1a8]
xor ecx, ecx
mov dword [ebp - 0x1ac], eax
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x18]
cmp eax, 0x5e60d1f
mov eax, dword [ebp - 0x38]
setne cl
inc eax
add eax, ecx
mov dword [ebp - 0x20], eax
jmp 0x10005c87
mov dword [ebp - 0x38], 0x11e745c5
mov dword [ebp - 0x1c], ebx
jmp 0x10005c81
mov dword [ebp - 0x2c], 0xdbc8b697
mov edx, dword [ebp - 0x38]
mov eax, dword [ebp - 0x1ac]
neg edx
sbb edx, edx
xor ecx, ecx
inc edx
cmp eax, edx
setle cl
mov dword [ebp - 0x2c], ecx
dec dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 0xffffffe8
je 0x10005c5f
cmp byte [0x1007a438], 0
jne 0x10008dab
push 0x5583
push 0xd83
push 0x7e88
push 0x2936
xor eax, eax
mov edx, 0xe73
inc eax
mov ecx, 0x3365
push eax
push 0x7fb5
push eax
push ebx
push 0x6233
mov byte [0x1007a438], al
call fcn.1000319d
mov dword [ebp - 0xe4], 0x100755e0
add esp, 0x24
mov dword [ebp - 0x140], ebx
mov dword [ebp - 0xa0], 0xfffffffd
mov dword [ebp - 0xa0], 8
jmp 0x10005d78
push 0x46af
push 0x79c1
push ebx
lea eax, [ebp - 0x230]
mov dword [ebp - 0x270], 0xfffffffc
push eax
lea eax, [ebp - 0x270]
mov dword [ebp - 0x230], 0xd2d1a4e6
push eax
lea ecx, [ebp - 0xa0]
call fcn.10002ccf
mov byte [ebp - 0x39], bl
add esp, 0x14
cmp byte [ebp - 0x39], 0
je 0x10005d72
push 0x3451
push 0x396e
push 0x483c
push 0x4843
xor eax, eax
mov edx, 0x3253
inc eax
mov ecx, 0x111
push eax
push 0x107
push eax
push eax
push 0x710f
call fcn.1000319d
add esp, 0x24
dec dword [ebp - 0xa0]
cmp dword [ebp - 0xa0], 0xffffffed
jge 0x10005cf8
push 0xc
xor esi, esi
pop edx
inc esi
mov dword [ebp - 0x110], edx
cmp edx, 0xe0
jge 0x100064cb
push ecx
lea eax, [ebp - 0x8d]
mov dword [ebp - 0x30], 0xf6af1124
push eax
push ecx
push esi
mov byte [ebp - 0x8d], bl
mov edx, 0x719e
push 0x7785
call fcn.100032f1
mov dword [ebp - 0x30], ebx
add esp, 0x14
cmp dword [ebp - 0x30], 0x16
jl 0x10005f5f
push dword [ebp - 0x13c]
movdqa xmm0, xmmword [0x1006c2c0]
lea eax, [ebp - 0x4cc]
push eax
lea eax, [ebp - 0x4dc]
mov dword [ebp - 0x24], 0xfff8
push eax
push ebx
lea ecx, [ebp - 0x300]
mov dword [ebp - 0x300], ebx
movdqu xmmword [ebp - 0x4dc], xmm0
mov dword [ebp - 0x2fc], ebx
mov dword [ebp - 0x2f8], ebx
call fcn.1000d2d6
mov dword [ebp - 4], 1
mov dword [ebp - 0x24], ebx
mov dword [ebp - 0x24], 0xffffffea
jmp 0x10005f36
mov dword [ebp - 0x1c], 1
mov dword [ebp - 0x1c], 0x18
jmp 0x10005e70
mov byte [ebp - 0x39], bl
cmp byte [ebp - 0x39], 0
je 0x10005e6d
push 0x5917
push 1
push 0x7cf5
push 0xed7
push 0x69c2
xor dl, dl
mov cl, 1
call fcn.10005060
add esp, 0x14
dec dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 0xfffffff4
jg 0x10005e42
mov dword [ebp - 0x1c], 0xf
cmp dword [ebp - 0x1c], 0xffffffe6
jle 0x10005f33
push 3
pop esi
mov dword [ebp - 0x20], ebx
jmp 0x10005ea0
mov eax, dword [ebp - 0x20]
mov dword [ebp + eax*4 - 0x1c0], 0xbb6bc3ec
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], edi
jl 0x10005e8f
mov dword [ebp - 0x1bc], ebx
jmp 0x10005f1e
mov dword [ebp - 0x28], 0x4f98cafa
mov dword [ebp - 0x28], esi
cmp dword [ebp - 0x28], ebx
jl 0x10005ef6
mov dword [ebp - 0x18], 1
mov dword [ebp - 0x18], esi
cmp dword [ebp - 0x18], ebx
jl 0x10005ef1
push ecx
push 1
mov byte [ebp - 0x89], bl
lea ecx, [ebp - 0x89]
push 0x35fc
mov edx, 0x14e5
call fcn.10003353
add esp, 0xc
dec dword [ebp - 0x18]
jns 0x10005ecb
dec dword [ebp - 0x28]
jns 0x10005ebc
mov dword [ebp - 0x28], esi
cmp dword [ebp - 0x28], ebx
jl 0x10005f18
push ebx
mov dword [ebp - 0x280], ebx
lea edx, [ebp - 0x280]
push ecx
call fcn.1000350e
dec dword [ebp - 0x28]
pop ecx
pop ecx
jns 0x10005efe
inc dword [ebp - 0x1bc]
cmp dword [ebp - 0x1bc], esi
jle 0x10005ead
dec dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 0xffffffe6
jg 0x10005e8a
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], 0xc
jge 0x10005e32
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x300]
call fcn.1000a787
inc dword [ebp - 0x30]
cmp dword [ebp - 0x30], 0x16
jge 0x10005dd3
xor esi, esi
inc esi
mov ecx, dword [ebp - 0xe4]
mov edx, dword [ebp - 0x110]
mov al, byte [ecx]
cmp al, byte [edx + ecx]
jne 0x100064e7
mov dword [ebp - 0x20], 0x24fb
cmp dword [ebp - 0x20], 0x2694
jle 0x10005fee
mov ecx, ebx
mov dword [ebp - 0x18], ebx
mov edi, ebx
mov dword [ebp - 0x40], ebx
mov esi, ebx
add edi, esi
mov dword [ebp - 0x38], ebx
add edi, ecx
mov eax, edi
mov ecx, 0x100792f8
xor eax, ebx
cdq
push edx
push eax
call fcn.1000a4ec
inc ebx
cmp ebx, 0x314
jl 0x10005f99
mov edi, dword [ebp - 0x40]
inc esi
mov ecx, dword [ebp - 0x18]
push 0
pop ebx
cmp esi, 0x35ab
jl 0x10005f92
inc edi
mov dword [ebp - 0x40], edi
cmp edi, 0x75a9
jl 0x10005f90
inc ecx
mov dword [ebp - 0x18], ecx
cmp ecx, 0x3d0d
jl 0x10005f8b
push ebx
push ebx
push ebx
push 0x2702
call dword [sym.imp.GDI32.dll_CreateEnhMetaFileW]
push 2
pop edi
mov dword [ebp - 0x28], 0x6af1124f
mov dword [ebp - 4], edi
cmp dword [ebp - 0x20], 0x2119
jge 0x1000602e
mov edx, str.ntiw_povwglaey_prokgojk_mgpf_ypwk
mov ecx, 0x100792f8
call fcn.1000c8f5
jmp 0x1000602e
or dword [ebp - 4], 0xffffffff
xor eax, eax
mov dword [ebp - 0x40], 0x76fbfcc0
inc eax
mov dword [ebp - 0x28], ebx
cmp dword [ebp - 0x28], 0xfffffff3
jne 0x100061ef
mov edi, 0x31c0a9c5
jmp 0x10006053
xor eax, eax
inc eax
push eax
lea ecx, [ebp - 0x454]
call fcn.1000a704
push ecx
lea eax, [ebp - 0xb4]
mov dword [ebp - 4], 4
xor esi, esi
mov dword [ebp - 0x1c], 6
push eax
inc esi
lea ecx, [ebp - 0x454]
push esi
call fcn.10003476
xor ecx, ecx
mov dword [ebp - 0xb4], ebx
add esp, 0xc
inc ecx
jmp 0x100060a9
mov eax, dword [ebp - 0xb4]
mov dword [ebp + eax*4 - 0xf0], 0x3ec3
inc dword [ebp - 0xb4]
cmp dword [ebp - 0xb4], ecx
jl 0x10006092
mov dword [ebp - 0x1c], ebx
cmp dword [ebp - 0x1c], ebx
jg 0x100061b8
jmp 0x100060c2
xor ecx, ecx
inc ecx
mov dword [ebp - 0x20], 0x9c9fb37b
mov dword [ebp - 0x24], 0x92e6c0b3
push ecx
call fcn.100034bf
mov dword [ebp - 0x20], ebx
pop ecx
cmp dword [ebp - 0x20], ebx
jl 0x100061ac
push ecx
mov dword [ebp - 0x30], 0xffffffff
xor cl, cl
call fcn.100034bf
mov dword [ebp - 0x30], ebx
pop ecx
cmp dword [ebp - 0x30], ebx
jl 0x100061a3
mov dword [ebp - 0x18], 3
mov dword [ebp - 0xf0], 0x989226c3
mov dword [ebp - 0x18], ebx
jmp 0x10006191
mov eax, dword [ebp - 0x1c]
cmp dword [ebp - 0x28], ebx
je 0x10006153
cmp dword [ebp - 0xf0], ebx
jne 0x1000613c
cmp dword [ebp - 0x20], ebx
jne 0x1000613c
mov eax, dword [ebp - 0x30]
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x1c]
cmp dword [ebp - 0x24], ebx
jne 0x1000613c
mov edx, ebx
jmp 0x1000613f
xor edx, edx
inc edx
mov eax, dword [ebp - 0x28]
xor ecx, ecx
cmp edx, eax
setge cl
cmp ecx, 5
jne 0x10006153
xor eax, eax
inc eax
jmp 0x10006155
mov eax, ebx
mov dword [ebp - 0x40], eax
mov dword [ebp - 0x24], ebx
jmp 0x10006189
mov dword [ebp - 0x418], edi
mov dword [ebp - 0x414], edi
mov dword [ebp - 0x410], edi
mov dword [ebp - 0x40c], edi
cmp dword [ebp - 0x30], ebx
jne 0x1000618e
mov eax, dword [ebp - 0xf0]
mov dword [ebp - 0x40c], eax
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], ebx
jle 0x1000615d
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], ebx
jle 0x10006115
dec dword [ebp - 0x30]
jns 0x100060ff
dec dword [ebp - 0x20]
jns 0x100060e3
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], ebx
jle 0x100060bf
mov ecx, dword [ebp - 0x40]
xor edx, edx
mov eax, dword [ebp - 0x28]
cmp ecx, eax
lea ecx, [ebp - 0x454]
setle dl
sub edx, dword [ebp - 0xf0]
neg edx
sbb edx, edx
inc edx
mov dword [ebp - 0x1c], edx
or dword [ebp - 4], 0xffffffff
call fcn.1000a787
dec dword [ebp - 0x28]
cmp dword [ebp - 0x28], 0xfffffff3
je 0x10006050
xor esi, esi
mov byte [ebp - 0x39], bl
inc esi
cmp byte [ebp - 0x39], 0
je 0x10006209
push esi
push ecx
mov edx, 0x3964
call fcn.1000350e
pop ecx
pop ecx
lea eax, [ebp - 0x110]
push eax
push ecx
push 0x44e6
push 0x4a3a
push esi
lea ecx, [ebp - 0x140]
call fcn.10001d57
movdqa xmm0, xmmword [0x1006c2b0]
lea eax, [ebp - 0x4dc]
add esp, 0x14
mov dword [ebp - 0x2a4], ebx
lea ecx, [ebp - 0x2a4]
mov dword [ebp - 0x2a0], ebx
movdqu xmmword [ebp - 0x4ec], xmm0
mov dword [ebp - 0x29c], ebx
push dword [ebp - 0x13c]
push eax
lea eax, [ebp - 0x4ec]
push eax
push ebx
call fcn.1000d2d6
mov dword [ebp - 4], 5
lea ecx, [ebp - 0x294]
mov dword [ebp - 0x1b8], 0x39924432
mov dword [ebp - 0x1b0], 0x43c4ab2
push esi
call fcn.1000a704
mov byte [ebp - 4], 6
mov dword [ebp - 0x38], 0x140b
cmp dword [ebp - 0x38], 0x7c1
jge 0x1000639f
lea eax, [ebp - 0xf8]
push eax
push 0x10066a18
call fcn.100467cb
pop ecx
pop ecx
jmp 0x10006387
push 0x1007a440
dec eax
push 0x1007a444
push str._d_d
mov dword [ebp - 0xf8], eax
call fcn.100467cb
mov eax, dword [0x1007a444]
add esp, 0xc
mov edx, ebx
mov dword [ebp - 0x40], edx
test eax, eax
jle 0x1000632e
mov ecx, dword [0x1007a440]
mov edi, 0x1007a660
mov esi, ebx
test ecx, ecx
jle 0x10006323
lea eax, [edi + esi]
push eax
push 0x10066a18
call fcn.100467cb
pop ecx
pop ecx
mov ecx, dword [0x1007a440]
inc esi
cmp esi, ecx
jl 0x10006300
mov eax, dword [0x1007a444]
mov edx, dword [ebp - 0x40]
inc edx
add edi, 0x68
mov dword [ebp - 0x40], edx
cmp edx, eax
jl 0x100062fa
push 0x1a0
push 0xffffffffffffffff
push 0x1007a450
call fcn.1003303b
add esp, 0xc
mov edi, ebx
cmp dword [0x1007a444], 0
mov esi, ebx
jle 0x10006374
push 0x68
push ebx
push 0x1007a5f0
call fcn.1003303b
add esp, 0xc
mov ecx, esi
call fcn.10005929
test al, al
je 0x1000636b
inc edi
inc esi
cmp esi, dword [0x1007a444]
jl 0x1000634f
mov esi, dword [ebp - 0x18]
push edi
push esi
push str.Case__d:_a_maximum_of__d_nuts_and_bolts_can_be_fitted_together_n
call fcn.10046acc
add esp, 0xc
inc esi
mov eax, dword [ebp - 0xf8]
mov dword [ebp - 0x18], esi
test eax, eax
jne 0x100062c3
dec eax
mov dword [ebp - 0xf8], eax
push ebx
push ecx
push ecx
lea eax, [ebp - 0x294]
push eax
lea ecx, [ebp - 0x43c]
call fcn.10004ba0
lea eax, [ebp - 0x1b0]
xor dl, dl
push eax
xor eax, eax
lea ecx, [ebp - 0x294]
inc eax
push eax
push 0x4969
push ecx
lea ecx, [ebp - 0x1b8]
push ecx
push 0x181e
push eax
lea ecx, [ebp - 0x2a4]
call fcn.100052db
mov eax, dword [ebp - 0x294]
add esp, 0x2c
cmp dword [eax], ebx
je 0x10006435
push 0x4a3c
push ecx
push ecx
push ebx
push ecx
xor esi, esi
mov dword [ebp - 0x218], 0xa17d
push ecx
lea eax, [ebp - 0x218]
inc esi
mov dword [ebp - 0x464], esi
lea ecx, [ebp - 0x22c]
push eax
mov edx, 0x2f36
mov dword [ebp - 0x22c], 0x4ccfd66c
call fcn.10002287
add esp, 0x1c
jmp 0x100064ae
push 4
lea ecx, [ebp - 0x3ac]
mov dword [ebp - 0x234], 0x44ed
call fcn.1000a704
lea eax, [ebp - 0x474]
mov byte [ebp - 4], 7
push eax
lea eax, [ebp - 0x3ac]
mov cl, 1
push eax
call fcn.1000358c
pop ecx
pop ecx
push 0x33bf
lea eax, [ebp - 0x3ac]
push eax
push ecx
lea eax, [ebp - 0x1b8]
push eax
push 0x114c
lea eax, [ebp - 0x1b0]
push eax
push ecx
push 0x3297
lea eax, [ebp - 0x294]
push ebx
push eax
lea ecx, [ebp - 0x234]
call fcn.100022d1
add esp, 0x28
lea ecx, [ebp - 0x3ac]
call fcn.1000a787
lea ecx, [ebp - 0x294]
call fcn.1000a787
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x2a4]
call fcn.1000a787
push 2
pop edi
push 6
mov dword [ebp - 0x24], 0x53b26bdd
pop ecx
mov dword [ebp - 0x1c], 0xfffffff8
mov dword [ebp - 0x44], ecx
mov dword [ebp - 0x24], ebx
jmp 0x1000668e
inc edx
jmp 0x10005d8b
mov dword [ebp - 0x60], 0xffffffff
mov dword [ebp - 0x18], ebx
jmp 0x1000650a
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x180], 0xee28
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], edi
jl 0x100064f9
mov eax, dword [ebp - 0x17c]
cmp ecx, eax
sbb eax, eax
neg eax
imul eax, eax, 0x88146cdf
neg eax
sbb eax, eax
neg eax
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0x60], eax
mov eax, dword [ebp - 0x17c]
imul eax, dword [ebp - 0x60]
test eax, eax
je 0x10006639
mov dword [ebp - 0x28], ebx
lea ecx, [ebp - 0x3dc]
push 3
call fcn.1000a704
push ebx
push 1
lea eax, [ebp - 0x3dc]
mov dword [ebp - 4], 8
push eax
lea eax, [ebp - 0x460]
mov dword [ebp - 0x20], 0x3b5b0d69
push eax
push 0x2ec6
push ebx
mov edx, 0x5c34
mov ecx, 0x3c17
call fcn.100055c6
mov eax, dword [ebp - 0x1c]
add esp, 0x18
neg eax
sbb eax, eax
inc eax
mov dword [ebp - 0x28], eax
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0x17c]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x28]
cmp eax, dword [ebp - 0x24]
jle 0x100065bd
cmp dword [ebp - 0x60], ebx
jne 0x100065bd
mov ecx, ebx
jmp 0x100065c0
xor ecx, ecx
inc ecx
mov eax, dword [ebp - 0x3dc]
xor edx, edx
cmp ecx, dword [eax + 8]
mov eax, dword [ebp - 0x180]
setg dl
xor ecx, ecx
cmp edx, eax
sete cl
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 0x20], 0xfffffff6
cmp dword [ebp - 0x20], 3
jl 0x10006628
xor ecx, ecx
inc ecx
mov dword [ebp - 0x1c], ecx
cmp dword [ebp - 0x1c], ebx
jl 0x1000661f
mov dword [ebp - 0x28], edi
cmp dword [ebp - 0x28], ebx
jl 0x1000661a
mov dword [ebp - 0x60], ebx
jmp 0x10006610
mov eax, dword [ebp - 0x60]
mov dword [ebp + eax*4 - 0x180], ecx
inc dword [ebp - 0x60]
cmp dword [ebp - 0x60], edi
jl 0x10006603
dec dword [ebp - 0x28]
jns 0x100065fe
dec dword [ebp - 0x1c]
jns 0x100065f6
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], 3
jge 0x100065ee
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x3dc]
call fcn.1000a787
jmp 0x10006673
push 0x4c40
push 0x3577
push ebx
xor eax, eax
lea ecx, [ebp - 0x60]
inc eax
mov edx, 0x5d05
push eax
push 0x671c
push ecx
push 0x79db
push eax
push 0x717e
push 0x487e
mov ecx, 0x6d9a
call fcn.1000541e
add esp, 0x28
push ecx
mov byte [ebp - 0x8b], bl
lea edx, [ebp - 0x8b]
mov cl, 1
call fcn.10004d5e
dec dword [ebp - 0x24]
pop ecx
push 6
pop ecx
cmp dword [ebp - 0x24], 0xfffffffa
jle 0x100064ed
push 3
mov dword [ebp - 0x2ec], 4
pop esi
mov dword [ebp - 0x54], 0xfffffffb
mov dword [ebp - 0x23c], esi
push 0xa
mov dword [ebp - 0x120], 9
mov dword [ebp - 0x54], ebx
pop edi
jmp 0x100068af
mov dword [ebp - 0x94], 0x2d14
lea ecx, [ebp - 0x1d4]
push esi
call fcn.1000a704
lea eax, [ebp - 0x4ac]
mov dword [ebp - 4], 9
push eax
push 0x6114
push ecx
lea edx, [ebp - 0x1d4]
xor cl, cl
call fcn.1000415e
add esp, 0xc
cmp dword [ebp - 0x94], ebx
je 0x10006805
mov dword [ebp - 0x20], 0xffffffff
xor edx, edx
mov dword [ebp - 0x18], 0xce96f8f9
inc edx
mov dword [ebp - 0x80], ebx
mov dword [ebp - 0x18], ebx
jmp 0x10006737
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x118], 0xfffffffe
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], edx
jl 0x10006726
mov eax, dword [ebp - 0x54]
mov dword [ebp - 0x20], 0xc8d4675
mov eax, dword [ebp - 0x54]
mov eax, dword [ebp - 0x54]
mov eax, dword [ebp - 0x94]
mov dword [ebp - 0x18], eax
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x94]
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x54]
mov ecx, dword [ebp - 0x118]
sub ecx, 6
neg ecx
sbb ecx, ecx
xor eax, eax
inc ecx
cmp ecx, 7
setne al
mov dword [ebp - 0x118], eax
test eax, eax
je 0x1000678b
mov eax, edx
cmp dword [ebp - 0x18], ebx
jne 0x1000678d
mov eax, ebx
xor ecx, ecx
cmp eax, 0x3a34
setge cl
xor eax, eax
cmp ecx, 0x3de8
setle al
cmp dword [ebp - 0x54], eax
je 0x100067ae
mov eax, edx
cmp dword [ebp - 0x20], ebx
jne 0x100067b0
mov eax, ebx
mov dword [ebp - 0x80], eax
mov eax, dword [ebp - 0x94]
mov eax, dword [ebp - 0x94]
mov eax, dword [ebp - 0x1d4]
mov dword [eax + 8], edx
mov dword [ebp - 0x80], ebx
jmp 0x100067fd
push 0x38ea
push 0x1634
push ebx
sub esp, 0x1c
lea eax, [ebp - 0x80]
lea edx, [ebp - 0x1d4]
push eax
push ecx
call fcn.10002826
add esp, 0x30
cmp dword [ebp - 0x118], ebx
jne 0x1000687d
inc dword [ebp - 0x80]
cmp dword [ebp - 0x80], 2
jle 0x100067cd
jmp 0x1000687d
lea eax, [ebp - 0x1d4]
mov dword [ebp - 0x1a4], 0xffffffff
push eax
lea eax, [ebp - 0x23c]
push eax
push 0x5a7f
lea eax, [ebp - 0x120]
push eax
xor eax, eax
lea ecx, [ebp - 0x1a4]
inc eax
lea edx, [ebp - 0x94]
push eax
push ecx
push ebx
push eax
push 0x6e86
lea ecx, [ebp - 0x54]
call fcn.1000319d
add esp, 0x24
lea eax, [ebp - 0x120]
mov edx, 0x5cfb
lea ecx, [ebp - 0x1a4]
push eax
lea eax, [ebp - 0x1d4]
push eax
push 0x47e9
xor eax, eax
push ebx
inc eax
push eax
push eax
push 0x7053
call fcn.1000378a
add esp, 0x1c
lea eax, [ebp - 0x94]
push eax
push ecx
lea eax, [ebp - 0x1d4]
push eax
lea edx, [ebp - 0x54]
lea ecx, [ebp - 0x120]
call fcn.10001e92
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x1d4]
add esp, 0xc
call fcn.1000a787
inc dword [ebp - 0x54]
cmp dword [ebp - 0x54], edi
jl 0x100066c7
mov al, byte [0x100756c0]
lea ecx, [ebp - 0x330]
push 1
mov dword [ebp - 0x100], 0x100756c0
mov byte [ebp - 0x45], al
call fcn.1000a704
push 0x4d91
lea ecx, [ebp - 0x330]
mov dword [ebp - 4], edi
push ecx
lea ecx, [ebp - 0xac]
xor eax, eax
push ecx
inc eax
mov edx, 0x14eb
push ecx
mov dword [ebp - 0x68], eax
push ecx
mov dword [ebp - 0x58], 0xffffffff
mov dword [ebp - 0x27c], 0x64e4
mov dword [ebp - 0x274], 0xb132dc1b
push eax
call fcn.10001f0f
xor edx, edx
mov dword [ebp - 0xac], ebx
add esp, 0x18
inc edx
jmp 0x10006940
mov eax, dword [ebp - 0xac]
mov dword [ebp + eax*4 - 0x1b4], 0x24b2e809
inc dword [ebp - 0xac]
cmp dword [ebp - 0xac], edx
jl 0x10006929
mov dword [ebp - 0x68], ebx
cmp dword [ebp - 0x68], ebx
jl 0x10006a85
mov dword [ebp - 0x2dc], 0xb296ad98
mov dword [ebp - 0x284], 0x3f559cde
mov ecx, dword [ebp - 0x68]
mov eax, dword [ebp - 0x330]
cmp dword [eax + ecx*4], ebx
je 0x100069ae
push 0x1e90
push 0x8ee
push 0x5911
push edx
push ebx
push edx
lea eax, [ebp - 0x244]
mov dword [ebp - 0x244], 0x1fc3eee2
push eax
lea edx, [ebp - 0x58]
mov ecx, 0x3682
call fcn.1000378a
add esp, 0x1c
jmp 0x10006a79
mov dword [ebp - 0x128], 0x70ab227d
mov dword [ebp - 0x26c], 0xeabf554
mov dword [ebp - 0x264], ebx
mov dword [ebp - 0x58], ebx
jmp 0x10006a2d
mov dword [ebp - 0x18], ebx
mov eax, dword [ebp - 0x58]
mov eax, dword [ebp - 0x128]
mov eax, dword [ebp - 0x58]
mov ecx, dword [ebp - 0x68]
mov edx, dword [ebp - 0x68]
mov eax, dword [ebp - 0x330]
mov ecx, dword [eax + ecx*4]
sub ecx, dword [eax + edx*4]
mov dword [ebp - 0x18], ecx
xor ecx, ecx
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x58]
mov eax, dword [ebp - 0x58]
mov eax, dword [ebp - 0x58]
mov eax, dword [ebp - 0x58]
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x1b4], eax
mov eax, dword [ebp - 0x128]
cmp eax, 0xa8db
setne cl
xor eax, eax
cmp ecx, 0x2803
setne al
mov dword [ebp - 0x1b4], eax
inc dword [ebp - 0x58]
cmp dword [ebp - 0x58], ebx
jle 0x100069cd
push ecx
lea eax, [ebp - 0x264]
xor dl, dl
push eax
lea eax, [ebp - 0x68]
push eax
lea eax, [ebp - 0x128]
push eax
push ecx
push ecx
lea eax, [ebp - 0x26c]
push eax
push 0x30d7
push ecx
lea eax, [ebp - 0x274]
push eax
lea eax, [ebp - 0x27c]
push eax
lea eax, [ebp - 0x284]
push eax
lea ecx, [ebp - 0x2dc]
call fcn.10004288
add esp, 0x30
dec dword [ebp - 0x68]
push 1
pop edx
jns 0x10006954
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x330]
call fcn.1000a787
mov eax, dword [ebp - 0xe4]
mov cl, byte [0x100756c0]
mov dl, byte [eax]
call fcn.1000cacc
mov byte [0x100756c0], al
lea ecx, [ebp - 0x3c4]
mov dword [ebp - 0x30], 0x5b9b55bb
push 2
call fcn.1000a704
mov dword [ebp - 4], 0xb
mov dword [ebp - 0x40], 0xfffffff6
mov dword [ebp - 0x18], ebx
jmp 0x10006ae3
mov ecx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x3c4]
or dword [eax + ecx*4], 0xffffffff
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 2
jl 0x10006ad3
mov dword [ebp - 0x30], 0x16
jmp 0x10006b8f
mov dword [ebp - 0x20], 1
mov dword [ebp - 0x20], 1
cmp dword [ebp - 0x20], ebx
jl 0x10006b8c
mov dword [ebp - 0x24], 8
mov dword [ebp - 0x40], 1
mov dword [ebp - 0x40], 0x6652d0da
mov dword [ebp - 0x18], ebx
jmp 0x10006b37
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x51c], 0xffffffff
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], esi
jl 0x10006b26
mov eax, dword [ebp - 0x3c4]
xor ecx, ecx
push 0x4aa3
cmp dword [eax], 0xfffe
setne cl
xor dl, dl
mov dword [ebp - 0x40], ecx
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0x40]
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x24]
mov dword [ebp - 0x40], eax
mov eax, dword [ebp - 0x40]
mov dword [ebp - 0x40], eax
mov eax, dword [ebp - 0x40]
mov eax, dword [ebp - 0x20]
push ecx
push ecx
mov dword [ebp - 0x51c], eax
push 0x445
call fcn.10004ca5
add esp, 0x10
dec dword [ebp - 0x20]
jns 0x10006b0c
inc dword [ebp - 0x30]
cmp dword [ebp - 0x30], 0x18
jle 0x10006af5
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x3c4]
call fcn.1000a787
xor ecx, ecx
inc ecx
mov esi, ecx
mov dword [ebp - 0x24], ecx
cmp esi, 4
jge 0x10006f04
mov dword [ebp - 0x18], 0x5b57fd54
mov dword [ebp - 0x18], ebx
jmp 0x10006c10
mov dword [ebp - 0x38], 0xc7c8a6b9
mov dword [ebp - 0x408], ecx
mov dword [ebp - 0x404], ecx
mov dword [ebp - 0x400], ecx
mov dword [ebp - 0x3fc], ecx
mov eax, dword [ebp - 0x38]
mov dword [ebp - 0x408], eax
mov byte [ebp - 0x39], bl
cmp byte [ebp - 0x39], 0
je 0x10006c0d
push 0x6b44
push ecx
push ecx
mov edx, 0x6e49
call fcn.10003602
xor ecx, ecx
add esp, 0xc
inc ecx
dec dword [ebp - 0x18]
cmp dword [ebp - 0x18], 0xffffffea
jne 0x10006bc5
mov edi, dword [ebp - 0x100]
mov al, byte [esi + edi]
mov dword [ebp - 0x20], 0x9519
mov dword [ebp - 0x30], 0xffffffff
mov dword [ebp - 0x1c], 0x3b2c57e7
mov dword [ebp - 0x38], 0x18144871
mov byte [ebp - 0x39], al
mov dword [ebp - 0x18], ebx
jmp 0x10006c54
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x18c], 0x2b441a62
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 2
jl 0x10006c43
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x30], eax
mov eax, dword [ebp - 0x30]
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0x188], eax
test eax, eax
je 0x10006c8e
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x188], 0x6840eb44
mov eax, ecx
mov dword [ebp - 0x1c], 0x6840eb44
cmp dword [ebp - 0x1c], ebx
jne 0x10006c90
mov eax, ebx
xor ecx, ecx
cmp eax, 0x56c37fc0
mov eax, dword [ebp - 0x20]
setle cl
xor edx, edx
cmp ecx, eax
push 0
setl dl
add edx, dword [ebp - 0x20]
neg edx
sbb edx, edx
xor eax, eax
neg edx
cmp edx, 0xfffffff6
setg al
xor ecx, ecx
cmp eax, 0xffffffff
mov eax, dword [ebp - 0x20]
setge cl
xor edx, edx
cmp ecx, eax
pop eax
setl dl
sub edx, 0x193208af
neg edx
sbb edx, edx
inc edx
setns al
sub eax, 0x68906353
cmp eax, 0xfffc
jae 0x10006d20
mov dword [ebp - 0x18], 0xfffffffb
cmp dword [ebp - 0x18], ebx
jne 0x10006cf6
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x188]
xor ecx, ecx
mov dword [ebp - 0x18c], eax
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x30]
mov eax, dword [ebp - 0x18]
cmp eax, 0x5e60d1f
mov eax, dword [ebp - 0x38]
setne cl
inc eax
add eax, ecx
mov dword [ebp - 0x30], eax
jmp 0x10006d54
mov dword [ebp - 0x38], 0x11e745c5
mov dword [ebp - 0x1c], ebx
jmp 0x10006d4e
mov dword [ebp - 0x2c], 0xdbc8b697
mov edx, dword [ebp - 0x38]
mov eax, dword [ebp - 0x18c]
neg edx
sbb edx, edx
xor ecx, ecx
inc edx
cmp eax, edx
setle cl
mov dword [ebp - 0x2c], ecx
dec dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 0xffffffe8
je 0x10006d2c
mov eax, esi
mov cl, byte [ebp - 0x39]
cdq
idiv dword [ebp - 0x140]
mov esi, edx
mov dl, byte [ebp - 0x45]
call fcn.1000cacc
mov ecx, dword [ebp - 0xe4]
mov dl, byte [esi + ecx]
mov cl, al
call fcn.1000cacc
mov ecx, dword [ebp - 0x24]
mov byte [ecx + edi], al
mov dword [ebp - 0x18], ebx
jmp 0x10006d96
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x1dc], 0xa48bbca6
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 2
jl 0x10006d85
mov dword [ebp - 0x1dc], 0xfffffff3
cmp dword [ebp - 0x1dc], 0xb
jge 0x10006ec0
mov dword [ebp - 0x20], 7
mov dword [ebp - 0x40], 0x284a
cmp dword [ebp - 0x40], 0x2a2f
jle 0x10006e2e
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_FileTimeToLocalFileTime]
mov eax, ebx
mov dword [ebp - 0x18], ebx
mov edi, ebx
mov esi, ebx
add eax, edi
mov ecx, esi
sar eax, cl
lea ecx, [ebp - 0x654]
cdq
push edx
push eax
call fcn.10001a6a
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x10006df9
mov eax, dword [eax]
push eax
call fcn.10046acc
pop ecx
push ebx
push 1
lea ecx, [ebp - 0x654]
call fcn.1000aac7
mov eax, dword [ebp - 0x18]
inc esi
cmp esi, 0x1252
jl 0x10006ddb
inc edi
cmp edi, 0x54c5
jl 0x10006dd9
inc eax
mov dword [ebp - 0x18], eax
cmp eax, 0x6ef8
jl 0x10006dd7
mov dword [ebp - 0x44], 0x418a5273
cmp dword [ebp - 0x40], 0x24b6
jge 0x10006e49
push str.wcmkpcc_sknvy_ybkmdaxcm_jrw_aqt_opt_fxltjjp_ygzjxgr_mdgsye_xcbhuquh
call fcn.10046acc
pop ecx
or dword [ebp - 4], 0xffffffff
mov dword [ebp - 0x20], ebx
jmp 0x10006eaf
mov dword [ebp - 0x18], 0xae77ab39
mov dword [ebp - 0x18], ebx
jmp 0x10006ea6
mov dword [ebp - 0x2e4], 0xdfe4d9ed
mov byte [ebp - 0x31], bl
cmp byte [ebp - 0x31], 0
je 0x10006e86
push ecx
push 0x74d2
push 0x5198
mov dl, 1
call fcn.10003b13
add esp, 0xc
push ecx
push 1
push ecx
lea eax, [ebp - 0x2e4]
mov edx, 0x7737
push 0x3bb5
push eax
call fcn.100021a8
add esp, 0x14
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 0x17
jle 0x10006e5e
dec dword [ebp - 0x20]
cmp dword [ebp - 0x20], 0xffffffed
jne 0x10006e52
inc dword [ebp - 0x1dc]
jmp 0x10006da6
lea eax, [ebp - 0x95]
mov byte [ebp - 0x95], bl
push eax
push ecx
push 0xd11
push ecx
push 1
push 0x7974
push ecx
push ecx
mov edx, 0x379
mov ecx, 0x437b
call fcn.10003653
mov esi, dword [ebp - 0x24]
add esp, 0x20
mov al, byte [ebp - 0x39]
inc esi
xor ecx, ecx
mov byte [ebp - 0x45], al
mov dword [ebp - 0x24], esi
inc ecx
jmp 0x10006bb0
mov eax, dword [ebp - 0x100]
push 3
pop edi
mov eax, dword [eax]
mov dword [ebp - 0x124], eax
mov dword [ebp - 0x24], 0xffffffff
mov dword [ebp - 0x44], ebx
mov dword [ebp - 0x18], 0xa7ad11e7
mov dword [ebp - 0x1c], 0xffffffff
mov dword [ebp - 0x1c], ebx
jmp 0x10006f43
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0x2b4], 0xffff
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], edi
jl 0x10006f32
mov dword [ebp - 0x1c], ebx
jmp 0x10006f5a
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0x448], ecx
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 2
jl 0x10006f4d
mov dword [ebp - 0x24], 0xc
jmp 0x10007055
mov dword [ebp - 0x28], 7
mov dword [ebp - 0x44], 5
mov dword [ebp - 0x38], 0xb81fdf20
mov dword [ebp - 0x28], ebx
jmp 0x10007048
mov eax, dword [ebp - 0x28]
xor edx, edx
mov esi, dword [ebp + eax*4 - 0x2b4]
mov eax, dword [ebp - 0x28]
mov dword [ebp + eax*4 - 0x2b4], esi
mov eax, dword [ebp - 0x24]
cmp eax, 0x1e6e2bfb
mov eax, dword [ebp - 0x28]
setl dl
xor ecx, ecx
cmp eax, edx
setl cl
xor eax, eax
cmp ecx, 0xcf5a
setg al
xor ecx, ecx
cmp ecx, eax
mov eax, dword [ebp - 0x24]
sbb edx, edx
inc edx
cmp esi, eax
mov eax, 0x9ec4
setl cl
sub eax, ecx
cmp eax, edx
jge 0x10007005
xor eax, eax
mov byte [ebp - 0x77], bl
inc eax
lea ecx, [ebp - 0x77]
push eax
push 0x2969
push 0xf8f
push 0x66ab
push ecx
push ebx
mov dl, al
mov ecx, 0x6c9
call fcn.10003f4f
add esp, 0x18
jmp 0x1000702a
mov dword [ebp - 0x40], ebx
mov dword [ebp - 0x44], 1
mov eax, dword [ebp - 0x28]
inc eax
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x40]
mov ecx, dword [ebp - 0x1c]
sub ecx, eax
sub ecx, dword [ebp - 0x40]
add ecx, dword [ebp - 0x2ac]
mov dword [ebp - 0x38], ecx
mov dword [ebp - 0x1c], ebx
jmp 0x10007040
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0x2b4], 0xffff
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], edi
jl 0x1000702f
inc dword [ebp - 0x28]
cmp dword [ebp - 0x28], 2
jle 0x10006f89
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], 0x1a
jg 0x10006f6c
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0x444]
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x2ac]
mov dword [ebp - 0x18], eax
mov eax, dword [ebp - 0x124]
dec eax
cmp eax, 0x312c
ja 0x10008dab
mov eax, 0x49fe387
mov dword [ebp - 0x370], eax
mov dword [ebp - 0x36c], eax
mov dword [ebp - 0x368], eax
mov dword [ebp - 0x364], eax
mov dword [ebp - 0x28], 0xc2db2212
mov dword [ebp - 0x144], 0xfffffff9
mov dword [ebp - 0x28], edi
cmp dword [ebp - 0x28], ebx
jl 0x100071f4
mov dword [ebp - 0x1c], ebx
mov dword [ebp - 0x38], 0xb8d8131d
mov dword [ebp - 0x1c], edi
cmp dword [ebp - 0x1c], ebx
jl 0x100071e9
mov dword [ebp - 0x18], 0x350d8af
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp + eax*4 - 0x370]
mov eax, dword [ebp - 0x28]
mov dword [ebp + eax*4 - 0x370], ecx
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0x144], eax
mov eax, dword [ebp - 0x144]
mov dword [ebp - 0x38], eax
mov dword [ebp - 0x40], 0x54e4
cmp dword [ebp - 0x40], 0x5646
jle 0x100071aa
mov ecx, ebx
mov dword [ebp - 0x18], ebx
mov edi, ebx
mov esi, ebx
mov eax, esi
xor eax, edi
xor eax, ecx
lea ecx, [ebp - 0x60c]
cdq
push edx
push eax
call fcn.10001a6a
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x1000715e
mov eax, dword [eax]
push eax
call fcn.10046acc
pop ecx
push ebx
push 1
lea ecx, [ebp - 0x60c]
call fcn.1000aac7
mov ecx, dword [ebp - 0x18]
inc esi
cmp esi, 0x5dc9
jl 0x10007140
inc edi
cmp edi, 0x939
jl 0x1000713e
inc ecx
mov dword [ebp - 0x18], ecx
cmp ecx, 0x749a
jl 0x1000713c
push 0xb37
push ebx
push 0xf50
push 0x1ca4
call dword [sym.imp.USER32.dll_SystemParametersInfoA]
mov byte [ebp - 0x31], bl
cmp byte [ebp - 0x31], 0
je 0x100071c9
push 1
push ecx
push ecx
push 0x2d3c
mov ecx, 0x5894
call fcn.10004ba0
add esp, 0x10
cmp dword [ebp - 0x40], 0x5474
jge 0x100071dd
push str.dxa_mqcrztzl_ovaigab_wdkxryxm_agjzykti_dlka_hfzgyn
call fcn.10046acc
pop ecx
or dword [ebp - 4], 0xffffffff
dec dword [ebp - 0x1c]
jmp 0x100070d3
dec dword [ebp - 0x28]
push 3
pop edi
jmp 0x100070bd
push 0x18b8
push 0x31f1
lea eax, [ebp - 0x144]
mov edx, 0x259d
push eax
xor eax, eax
mov ecx, 0x334b
inc eax
push eax
push eax
push eax
push 0x6642
call fcn.1000378a
add esp, 0x1c
lea eax, [ebp - 0x100]
push eax
push 0x55be
lea eax, [ebp - 0x124]
push eax
lea eax, [ebp - 0xe4]
push eax
push ebx
push 0x2ff4
lea eax, [ebp - 0x2ec]
push eax
push ecx
lea eax, [ebp - 0x140]
push eax
lea ecx, [ebp - 0x45]
call fcn.10004f2e
mov dword [ebp - 0x28], 8
add esp, 0x24
mov dword [ebp - 0x20], 0xfffffff7
mov dword [ebp - 0x2f4], 0x9532955f
mov dword [ebp - 0x44], 2
mov dword [ebp - 0x1c], ebx
jmp 0x10007291
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0x1f4], 0xfffffffe
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], edi
jl 0x10007280
xor ecx, ecx
mov dword [ebp - 0x1c], ebx
inc ecx
jmp 0x100072af
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0x214], 0xaea381e1
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], ecx
jl 0x1000729e
mov dword [ebp - 0x28], ebx
jmp 0x100072f3
mov dword [ebp - 0x18], 0x71d976ff
mov dword [ebp - 0x18], ebx
cmp dword [ebp - 0x18], 2
jg 0x100072f0
push 0x638a
push ecx
push 0x5ff
push ecx
push ecx
mov byte [ebp - 0x78], bl
lea ecx, [ebp - 0x78]
call fcn.10003992
add esp, 0x14
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 2
push 1
pop ecx
jle 0x100072c9
inc dword [ebp - 0x28]
cmp dword [ebp - 0x28], 2
jle 0x100072b9
mov dword [ebp - 0x28], 0xfffffffd
cmp dword [ebp - 0x28], 0xe
jle 0x10007447
mov esi, 0xba5e0b2f
mov dword [ebp - 0x1c], 0x79c4185a
mov dword [ebp - 0x428], esi
mov dword [ebp - 0x424], esi
mov dword [ebp - 0x420], esi
mov dword [ebp - 0x41c], esi
mov dword [ebp - 0x1c], 2
cmp dword [ebp - 0x1c], ebx
jl 0x100073f1
mov dword [ebp - 0x44], ebx
mov dword [ebp - 0x44], 0xffffffff
mov dword [ebp - 0x44], 0xffffffff
mov eax, dword [ebp - 0x1c]
cmp dword [ebp + eax*4 - 0x1f4], ebx
je 0x10007361
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x1c]
mov edx, 0x7db
push ecx
push 0x27a8
push 0x63ab
mov eax, dword [ebp + eax*4 - 0x1f4]
mov eax, dword [ebp - 0x1c]
push 0x7b7a
push 0x378f
push 0x613f
mov eax, dword [ebp + eax*4 - 0x1f4]
mov eax, dword [ebp - 0x1ec]
mov eax, dword [ebp - 0x1c]
push 0x38c8
push ebx
push ecx
mov eax, dword [ebp + eax*4 - 0x1f4]
mov ecx, 0x6a4
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x28]
mov dword [ebp - 0x20], eax
lea eax, [ebp - 0x2f4]
push 0x6847
push 0xdea
push eax
call fcn.10002522
add esp, 0x30
dec dword [ebp - 0x1c]
push 1
pop ecx
jns 0x1000733e
cmp dword [ebp - 0x1c], ebx
jne 0x100073f1
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x20]
dec eax
je 0x100073f1
xor eax, eax
inc eax
jmp 0x100073f3
mov eax, ebx
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], ebx
jne 0x10007405
cmp dword [ebp - 0x28], ebx
jne 0x10007405
xor ecx, ecx
inc ecx
jmp 0x10007407
mov ecx, ebx
xor eax, eax
cmp ecx, 0xffffffff
mov ecx, dword [ebp - 0x1c]
setge al
xor edx, edx
sub ecx, eax
mov eax, dword [ebp - 0x428]
cmp eax, ecx
mov eax, dword [ebp - 0x1f0]
setge dl
sub eax, edx
je 0x1000742e
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x20]
xor ecx, ecx
inc ecx
mov dword [ebp - 0x214], ecx
inc dword [ebp - 0x28]
cmp dword [ebp - 0x28], 0xe
jg 0x1000730f
mov dword [ebp - 0x18], 0x62b7
cmp dword [ebp - 0x18], 0x635d
jle 0x10007485
mov esi, ebx
mov dword [ebp - 0x40], ebx
mov edi, esi
mov esi, 0x57aa
mov eax, edi
mov ecx, 0x100792f8
cdq
push edx
push eax
call fcn.1000a4ec
dec edi
dec esi
jne 0x10007463
mov esi, dword [ebp - 0x40]
inc esi
mov dword [ebp - 0x40], esi
cmp esi, 0x4e91
jl 0x1000745c
push 0x1007d46c
push 0x79fb
push 0x4d0e
push ecx
mov cl, 1
call fcn.100021f3
add esp, 0x10
mov dword [ebp - 4], 0x10
cmp dword [ebp - 0x18], 0x60bb
jge 0x100074dc
mov edx, str.fmluelzxu_mmakbkzq_aoddnwewh_oivod_nzpvl_nxqduk_chyc_nmkbc_lirpjfcrm_vynsyfpec_ldscwi
mov ecx, 0x100792f8
call fcn.1000c8f5
jmp 0x100074dc
or dword [ebp - 4], 0xffffffff
xor eax, eax
push 0xfffffffffffffffa
pop esi
push 0x41dd
push 0x2ad1
push ecx
mov dword [ebp - 0x24], 0xffffffff
inc eax
push ecx
mov dword [ebp - 0x174], esi
mov edx, 0xa86
mov dword [ebp - 0x170], esi
mov dword [ebp - 0x16c], esi
push 0x3926
mov dword [ebp - 0x168], esi
push eax
mov dword [ebp - 0x40], 0x3e5ec352
push ecx
mov dword [ebp - 0x38], ebx
lea ecx, [ebp - 0x8c]
mov byte [ebp - 0x8c], bl
call fcn.10003b61
mov dword [ebp - 0x20], 0xc60
add esp, 0x1c
cmp dword [ebp - 0x20], 0xd57
jle 0x10007590
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [ebp - 0x18], ebx
mov esi, ebx
mov edi, ebx
mov ebx, dword [ebp - 0x18]
lea eax, [esi + ebx]
mov ecx, 0x100792f8
or eax, edi
cdq
push edx
push eax
call fcn.1000a4ec
inc edi
cmp edi, 0x1796
jl 0x1000755b
inc esi
push 0
pop ebx
cmp esi, 0x2c8c
jl 0x10007556
mov eax, dword [ebp - 0x18]
inc eax
mov dword [ebp - 0x18], eax
cmp eax, 0x7973
jl 0x10007554
mov eax, dword [ebp - 0x24]
cmp dword [ebp - 0x174], ebx
je 0x100075ad
mov eax, dword [ebp - 0x16c]
mov eax, dword [ebp - 0x174]
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0x170]
mov eax, dword [ebp - 0x174]
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0x168]
inc eax
neg eax
sbb eax, eax
xor edx, edx
inc eax
mov dword [ebp - 0x40], eax
mov ecx, dword [ebp - 0x40]
mov eax, dword [ebp - 0x24]
cmp ecx, eax
setle dl
xor eax, eax
cmp eax, edx
mov eax, dword [ebp - 0x16c]
sbb ecx, ecx
xor edx, edx
neg ecx
imul ecx, eax
mov eax, dword [ebp - 0x16c]
add ecx, eax
mov eax, dword [ebp - 0x24]
cmp ecx, eax
mov eax, dword [ebp - 0x16c]
sete dl
add eax, 0x5a136951
xor ecx, ecx
add eax, edx
cmp eax, 0x3fda37b1
setne cl
mov dword [ebp - 0x38], ecx
mov dword [ebp - 4], 0x12
cmp dword [ebp - 0x20], 0x90e
jge 0x10007637
mov edx, str.pznqbgr_fqseex_iscsqc_qjm_agiqbyewf
mov ecx, 0x100792f8
call fcn.1000c8f5
or dword [ebp - 4], 0xffffffff
push 2
lea ecx, [ebp - 0x33c]
mov dword [ebp - 0xcc], ebx
call fcn.1000a704
push 1
push ebx
push 0x54c4
push 0x1d65
mov dword [ebp - 4], 0x14
lea edx, [ebp - 0x33c]
mov dword [ebp - 0x1a0], 0xfffffffb
lea ecx, [ebp - 0x4c0]
push ebx
call fcn.10004cef
add esp, 0x14
lea eax, [ebp - 0x1a0]
lea edx, [ebp - 0x33c]
push 1
push ecx
push eax
call fcn.10003d25
add esp, 0xc
lea eax, [ebp - 0x33c]
push eax
push ebx
lea eax, [ebp - 0x1a0]
push eax
push ecx
push ecx
mov ecx, 0x38af
call fcn.10003992
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x33c]
add esp, 0x14
call fcn.1000a787
mov eax, dword [ebp - 0x100]
lea ecx, [ebp - 0x318]
add eax, 4
mov dword [ebp - 0x30], 0xf2b29949
mov dword [ebp - 0x24], 0x1878abc1
push 2
mov dword [ebp - 0x40], eax
call fcn.1000a704
mov dword [ebp - 4], 0x15
mov dword [ebp - 0x2c], 0xa7bc
mov dword [ebp - 0x38], 0x4f5c6f0d
mov dword [ebp - 0x44], 0xa2d47e13
mov dword [ebp - 0x24], 0x51b4
cmp dword [ebp - 0x24], 0x557e
jle 0x1000778c
mov dword [ebp - 0x20], ebx
mov edx, ebx
mov dword [ebp - 0x18], ebx
mov edi, ebx
mov esi, ebx
mov ecx, esi
mov eax, edi
shl eax, cl
lea ecx, [ebp - 0x5ac]
xor eax, edx
or eax, dword [ebp - 0x20]
cdq
push edx
push eax
call fcn.10001a6a
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x10007748
mov eax, dword [eax]
push eax
call fcn.10046acc
pop ecx
push ebx
push 1
lea ecx, [ebp - 0x5ac]
call fcn.1000aac7
mov edx, dword [ebp - 0x18]
inc esi
cmp esi, 0x3596
jl 0x10007725
inc edi
cmp edi, 0x6201
jl 0x10007723
inc edx
mov dword [ebp - 0x18], edx
cmp edx, 0xe0
jl 0x10007721
mov eax, dword [ebp - 0x20]
inc eax
mov dword [ebp - 0x20], eax
cmp eax, 0x238f
jl 0x1000771c
cmp dword [ebp - 0x24], 0x5126
jge 0x100077a0
push str.yyisb_kcrdkvgj_dleldh_uct_zcpyqa
call fcn.10046acc
pop ecx
mov dword [ebp - 4], 0x15
mov dword [ebp - 0x20], 0x4fc2
cmp dword [ebp - 0x20], 0x52ef
jle 0x100077de
mov esi, ebx
mov edi, ebx
mov eax, edi
mov ecx, 0x100792f8
or eax, esi
cdq
push edx
push eax
call fcn.1000a4ec
inc edi
cmp edi, 0x6d05
jl 0x100077bb
inc esi
cmp esi, 0x5e7
jl 0x100077b9
mov dword [ebp - 0x18], ebx
cmp dword [ebp - 0x18], 2
jge 0x100077ff
xor esi, esi
inc esi
mov ecx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x318]
mov dword [eax + ecx*4], esi
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 2
jl 0x100077ea
mov byte [ebp - 4], 0x18
cmp dword [ebp - 0x20], 0x4c6d
jge 0x1000785e
mov edx, str.zngpnb_dtoyrf_orealbvor_fgrkxz_nnhnqujb_pfhjuimdu_tscsbq_rejl
mov ecx, 0x100792f8
call fcn.1000c8f5
jmp 0x1000785e
mov dword [ebp - 4], 0x15
xor ecx, ecx
mov eax, dword [ebp - 0x30]
inc ecx
mov eax, dword [ebp - 0x30]
mov eax, dword [ebp - 0x30]
mov dword [ebp - 0x24], 0x5925ef2c
cmp dword [ebp - 0x24], ebx
je 0x1000788f
lea eax, [ebp - 0x79]
mov byte [ebp - 0x79], bl
push eax
call fcn.100043de
pop ecx
jmp 0x1000796e
push ecx
mov dword [ebp - 0x28], 0xffffffff
lea ecx, [ebp - 0x3e8]
call fcn.1000a704
xor edx, edx
mov dword [ebp - 0x1c], ebx
inc edx
jmp 0x100078b7
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0x2cc], edx
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], edx
jl 0x100078aa
mov dword [ebp - 0x1c], ebx
jmp 0x100078d4
mov ecx, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x3e8]
mov dword [eax + ecx*4], 2
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], edx
jl 0x100078c1
cmp dword [ebp - 0x24], ebx
jne 0x10007924
mov dword [ebp - 0x24], 0xca95
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0x318]
cmp dword [eax], ebx
jne 0x100078f9
mov eax, ebx
cmp dword [ebp - 0x24], ebx
je 0x100078fb
mov eax, edx
cmp eax, dword [ebp - 0x28]
jne 0x10007903
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x24]
mov ecx, ebx
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x318]
imul eax, dword [eax], 0xfffffffa
mov dword [ebp - 0x2cc], eax
test eax, eax
jne 0x10007926
mov ecx, edx
mov eax, dword [ebp - 0x2c]
xor edx, edx
cmp ecx, eax
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x28]
setl dl
sub edx, eax
mov eax, dword [ebp - 0x3e8]
imul ecx, edx
mov dword [eax], edx
xor edx, edx
mov eax, dword [ebp - 0x28]
cmp ecx, eax
setle dl
xor ecx, ecx
sub edx, dword [ebp - 0x28]
mov eax, dword [ebp - 0x28]
cmp edx, eax
setle cl
add ecx, 0x1966ba05
mov dword [ebp - 0x38], ecx
lea ecx, [ebp - 0x3e8]
call fcn.1000a787
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x318]
call fcn.1000a787
mov dword [ebp - 0xec], 0x7e17f75
lea ecx, [ebp - 0x6c]
mov dword [ebp - 0x6c], 0x9cec79e6
mov eax, 0x61e4171b
mov dword [ebp - 0x20], 0xffffffff
mov edx, 0x6386
mov dword [ebp - 0x4bc], eax
mov dword [ebp - 0x4b8], eax
mov dword [ebp - 0x4b4], eax
mov dword [ebp - 0x4b0], eax
xor eax, eax
inc eax
mov dword [ebp - 0x44], 3
push eax
push 0xfee
push ecx
push 0x7976
push 0x5d85
push 0xcdc
push 0x73d3
push eax
push ebx
push 0x85c
push 0x1bad
push 0x60af
lea ecx, [ebp - 0xec]
call fcn.10002522
add esp, 0x30
mov dword [ebp - 0x6c], ebx
jmp 0x10007b2c
xor eax, eax
lea ecx, [ebp - 0x494]
inc eax
mov dword [ebp - 0x2c], eax
mov dword [ebp - 0x18], ebx
mov dword [ebp - 0x44], 0xfffffffe
mov dword [ebp - 0x44], 0xfffffffd
mov dword [ebp - 0x44], eax
mov dword [ebp - 0x44], 0xfffffffb
mov dword [ebp - 0x44], 0xffffffff
call fcn.1000a704
mov dword [ebp - 4], 0x1a
xor ecx, ecx
mov dword [ebp - 0x44], 2
inc ecx
mov dword [ebp - 0x2d4], 0xfffffffd
mov dword [ebp - 0x9c], ebx
jmp 0x10007a73
mov eax, dword [ebp - 0x9c]
mov dword [ebp + eax*4 - 0xe8], 0x39f4802d
inc dword [ebp - 0x9c]
cmp dword [ebp - 0x9c], ecx
jl 0x10007a5c
lea eax, [ebp - 0x494]
push eax
push ecx
push ecx
push ecx
push ecx
push ecx
push 0x51b8
lea edx, [ebp - 0x9c]
mov ecx, 0x4341
call fcn.10002287
mov eax, dword [ebp - 0x2c]
xor ecx, ecx
mov eax, dword [ebp - 0xec]
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0xec]
mov edx, dword [ebp - 0xe8]
mov eax, dword [ebp - 0xe8]
sub edx, eax
mov eax, dword [ebp - 0x2c]
cmp edx, eax
setge cl
xor eax, eax
cmp ecx, 0x45be
setle al
xor ecx, ecx
cmp eax, 0x2aeafd71
setg cl
xor eax, eax
cmp ecx, 0x1b870004
lea ecx, [ebp - 0x2d4]
setle al
add esp, 0x14
mov dword [ebp - 0x18], eax
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x6c]
mov eax, dword [ebp - 0xe8]
mov eax, dword [ebp - 0xec]
mov eax, dword [ebp - 0xe8]
mov eax, dword [ebp - 0x6c]
mov dword [ebp - 0x20], eax
push 1
call fcn.10003e3e
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x494]
add esp, 0xc
call fcn.1000a787
inc dword [ebp - 0x6c]
cmp dword [ebp - 0x6c], 9
push 3
jle 0x10007a06
mov dword [ebp - 0x74], 0xd509978f
lea ecx, [ebp - 0x2c4]
call fcn.1000a704
push 3
lea ecx, [ebp - 0x388]
mov dword [ebp - 4], 0x1b
call fcn.1000a704
mov byte [ebp - 4], 0x1c
mov dword [ebp - 0x24], 0xf32215f8
mov dword [ebp - 0x130], 0xae264689
mov dword [ebp - 0x2c], 0xc33490c
mov dword [ebp - 0x38], 0x1d1a
cmp dword [ebp - 0x38], 0xf90
jge 0x10007d58
lea eax, [ebp - 0x10c]
push eax
push 0x1007a448
push str._d__d
call fcn.100467cb
add esp, 0xc
jmp 0x10007d4f
cmp dword [0x1007a448], 0
mov edi, ebx
jle 0x10007bdf
lea esi, [ebp - 0x864]
lea esi, [esi + edi*4]
push esi
push 0x10066a18
call fcn.100467cb
mov eax, dword [esi]
mov dword [ebp + edi*4 - 0x75c], eax
inc edi
pop ecx
pop ecx
cmp edi, dword [0x1007a448]
jl 0x10007bb7
push 0x104
push ebx
push 0x1007d0a0
call fcn.1003303b
mov eax, dword [0x1007a448]
lea edx, [ebp - 0x75c]
add esp, 0xc
mov byte [ebp - 0x2e0], bl
lea ecx, [ebp - 0x75c]
lea edx, [edx + eax*4]
push dword [ebp - 0x2e0]
mov eax, edx
sub eax, ecx
sar eax, 2
push eax
call fcn.1000d6ff
mov edx, dword [0x1007a448]
pop ecx
dec edx
pop ecx
mov ecx, ebx
mov dword [ebp - 0x30], edx
mov eax, edx
mov dword [ebp - 0x20], ecx
mov dword [ebp - 0x18], eax
js 0x10007d2b
mov ecx, edx
mov edi, ebx
test ecx, ecx
je 0x10007c72
mov esi, dword [ebp + eax*4 - 0x864]
sub esi, dword [ebp - 0x10c]
lea eax, [ecx + edi]
cdq
sub eax, edx
sar eax, 1
cmp dword [ebp + eax*4 - 0x75c], esi
jge 0x10007c66
lea edi, [eax + 1]
jmp 0x10007c68
mov ecx, eax
cmp edi, ecx
jne 0x10007c50
mov eax, dword [ebp - 0x18]
mov edx, dword [ebp - 0x30]
mov ecx, edx
mov esi, ebx
test ecx, ecx
je 0x10007cac
mov eax, dword [ebp + eax*4 - 0x864]
add eax, dword [ebp - 0x10c]
mov dword [ebp - 0x38], eax
mov ebx, eax
lea eax, [esi + 1]
add eax, ecx
cdq
sub eax, edx
sar eax, 1
cmp dword [ebp + eax*4 - 0x75c], ebx
jle 0x10007ca4
lea ecx, [eax - 1]
jmp 0x10007ca6
mov esi, eax
cmp esi, ecx
jne 0x10007c8c
xor ebx, ebx
lea ecx, [esi + 1]
call fcn.10005986
mov ecx, edi
mov esi, eax
call fcn.10005986
sub esi, eax
jns 0x10007cc4
add esi, 0x41
mov eax, dword [ebp - 0x20]
add eax, esi
mov dword [ebp - 0x20], eax
cmp eax, 0x41
jl 0x10007cd7
sub eax, 0x41
mov dword [ebp - 0x20], eax
mov ecx, dword [ebp - 0x30]
mov edi, ebx
test ecx, ecx
je 0x10007d0d
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp + eax*4 - 0x864]
mov ebx, eax
mov dword [ebp - 0x38], eax
lea eax, [ecx + edi]
cdq
sub eax, edx
sar eax, 1
cmp dword [ebp + eax*4 - 0x75c], ebx
jge 0x10007d05
lea edi, [eax + 1]
jmp 0x10007d07
mov ecx, eax
cmp edi, ecx
jne 0x10007cef
xor ebx, ebx
lea edx, [esi + 1]
lea ecx, [edi + 1]
call fcn.100059a8
mov eax, dword [ebp - 0x18]
mov edx, dword [ebp - 0x30]
dec eax
mov dword [ebp - 0x18], eax
jns 0x10007c3b
mov ecx, dword [ebp - 0x20]
push ecx
push 0x10067d5c
call fcn.10046acc
lea eax, [ebp - 0x10c]
push eax
push 0x1007a448
push str._d__d
call fcn.100467cb
add esp, 0x14
cmp eax, 2
je 0x10007bac
push 0x3aca
lea eax, [ebp - 0x2c4]
mov dl, 1
push eax
sub esp, 0xc
lea ecx, [ebp - 0xbc]
call fcn.1000500e
add esp, 0x14
mov dword [ebp - 0xbc], ebx
jmp 0x10007d98
mov ecx, dword [ebp - 0xbc]
mov eax, dword [ebp - 0x388]
mov dword [eax + ecx*4], 0xfffffff8
inc dword [ebp - 0xbc]
cmp dword [ebp - 0xbc], 3
jl 0x10007d7f
mov esi, dword [ebp - 0x74]
mov eax, dword [ebp - 0x74]
neg esi
mov edx, dword [ebp - 0x74]
mov eax, dword [ebp - 0x74]
sbb esi, esi
neg esi
neg edx
sbb edx, edx
xor ecx, ecx
neg edx
cmp edx, eax
mov eax, dword [ebp - 0x74]
setg cl
xor edx, edx
cmp ecx, eax
mov eax, dword [ebp - 0x74]
setge dl
xor ecx, ecx
cmp esi, eax
setg cl
xor eax, eax
add ecx, 0x22124f84
cmp ecx, edx
setl al
neg eax
cmp eax, 0xd870a326
jae 0x10007f18
xor ecx, ecx
inc ecx
mov dword [ebp - 0xa8], ecx
mov dword [ebp - 0x2c], 0xa81ffde6
mov dword [ebp - 0x1c], ebx
jmp 0x10007e10
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0x52c], ecx
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 4
jl 0x10007e03
mov dword [ebp - 0x1c], ebx
jmp 0x10007e2c
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0x54c], 0x7bb34e4a
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 4
jl 0x10007e1b
sub esp, 0xc
lea eax, [ebp - 0x74]
push 0x2349
push ecx
push eax
push ecx
lea eax, [ebp - 0xa8]
push eax
push ebx
push ecx
lea eax, [ebp - 0x2c4]
push eax
push 0x2ec
call fcn.10004949
mov eax, dword [ebp - 0xa8]
xor ecx, ecx
mov esi, dword [ebp - 0x388]
add esp, 0x30
cmp eax, 0xffffffff
setge cl
xor eax, eax
cmp ecx, dword [esi + 8]
setle al
xor edx, edx
cmp eax, 0x39b3
mov eax, dword [ebp - 0x24]
setl dl
xor ecx, ecx
cmp edx, eax
mov eax, dword [ebp - 0xa8]
setne cl
xor edx, edx
cmp eax, ecx
mov eax, dword [ebp - 0xa8]
setg dl
xor ecx, ecx
cmp edx, eax
mov eax, dword [ebp - 0xa8]
sete cl
xor edx, edx
sub ecx, eax
mov eax, dword [ebp - 0x2c4]
cmp ecx, 0xfe54
mov dword [ebp - 0x524], ecx
setne dl
sub edx, dword [eax + 4]
neg edx
sbb edx, edx
xor eax, eax
inc edx
cmp edx, dword [esi + 8]
setle al
xor edx, edx
cmp eax, 9
mov eax, dword [ebp - 0xa8]
setne dl
xor ecx, ecx
cmp eax, edx
setl cl
mov dword [ebp - 0x130], ecx
xor ecx, ecx
mov eax, dword [ebp - 0x130]
cmp eax, 0x2213
setl cl
mov dword [ebp - 0x2c], ecx
mov eax, dword [ebp - 0x2c]
mov dword [ebp - 0x2c], eax
mov eax, dword [ebp - 0x2c]
mov dword [ebp - 0x544], eax
jmp 0x10007fe8
mov dword [ebp - 0x204], ebx
mov dword [ebp - 0x2c], 0x1248
cmp dword [ebp - 0x2c], 0x131e
jle 0x10007f5e
mov esi, ebx
mov edi, ebx
mov ebx, 0x4d37
mov eax, edi
mov ecx, 0x100792f8
cdq
push edx
push eax
call fcn.1000a4ec
add edi, esi
dec ebx
jne 0x10007f37
inc esi
cmp esi, 0x1ff3
jl 0x10007f30
push ebx
push ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_VirtualQueryEx]
lea eax, [ebp - 0x2c4]
push eax
push 0x58c8
push ecx
push 0x3683
lea eax, [ebp - 0x74]
push eax
push 0xcb
push ecx
lea eax, [ebp - 0x130]
mov ecx, 0x26d2
push eax
push 1
push 0x3fb2
call fcn.100022d1
add esp, 0x28
mov byte [ebp - 4], 0x1d
cmp dword [ebp - 0x2c], 0x1117
jge 0x10007fcf
mov edx, str.ltefjhv_gxmtvwfkp_mnqps_qhbzj_ceygf_hen_odwvujh_gaqyhfjnl_vngwsrac_pwdpb_dzlaeemi_mqkdqzfef
mov ecx, 0x100792f8
call fcn.1000c8f5
jmp 0x10007fcf
xor eax, eax
mov dword [ebp - 4], 0x1c
inc eax
push eax
lea eax, [ebp - 0x204]
push eax
call fcn.100024d3
pop ecx
pop ecx
lea ecx, [ebp - 0x388]
call fcn.1000a787
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x2c4]
call fcn.1000a787
push 0xa
pop eax
mov word [ebp - 0x104], ax
lea ecx, [ebp - 0x434]
mov byte [ebp - 0x12c], bl
mov byte [ebp - 0x12b], 0xf7
mov dword [ebp - 0x64], 0x6b95
mov dword [ebp - 0x88], 0xef9d7865
push 2
call fcn.1000a704
push 2
lea ecx, [ebp - 0x30c]
mov dword [ebp - 4], 0x1f
call fcn.1000a704
push ecx
mov byte [ebp - 4], 0x20
lea eax, [ebp - 0x434]
push ecx
mov dword [ebp - 0x114], 0xc8a81d5f
lea edx, [ebp - 0x288]
push eax
mov dword [ebp - 0x2c], 0x7232
mov dword [ebp - 0x38], 0x9dba5c12
mov dword [ebp - 0x2c], 0xfffffff7
push ebx
call fcn.10002ac8
mov dword [ebp - 0x2c], 0x201d
add esp, 0x10
cmp dword [ebp - 0x2c], 0x2270
jle 0x100080f2
mov ecx, ebx
mov dword [ebp - 0x18], ebx
mov edi, ebx
mov esi, ebx
lea eax, [esi + edi]
and eax, ecx
lea ecx, [ebp - 0x564]
cdq
push edx
push eax
call fcn.10001a6a
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x100080bc
mov eax, dword [eax]
push eax
call fcn.10046acc
pop ecx
push ebx
push 1
lea ecx, [ebp - 0x564]
call fcn.1000aac7
mov ecx, dword [ebp - 0x18]
inc esi
cmp esi, 0x5ef8
jl 0x1000809f
inc edi
cmp edi, 0x76dc
jl 0x1000809d
inc ecx
mov dword [ebp - 0x18], ecx
cmp ecx, 0x2e36
jl 0x1000809b
xor eax, eax
lea ecx, [ebp - 0x30c]
inc eax
push eax
push ecx
push 0x1eb6
lea ecx, [ebp - 0x288]
mov dl, al
push ecx
push 0x31fa
push eax
mov ecx, 0x7cae
call fcn.10003f4f
add esp, 0x18
cmp dword [ebp - 0x2c], 0x1eaf
jge 0x10008132
push str.frmhh_pfo_jfab
call fcn.10046acc
pop ecx
mov dword [ebp - 4], 0x20
xor edx, edx
mov dword [ebp - 0x88], 0xfffffffe
mov eax, dword [ebp - 0x88]
mov eax, dword [ebp - 0x64]
mov eax, dword [ebp - 0x88]
test eax, eax
mov eax, dword [ebp - 0x64]
sets dl
xor ecx, ecx
cmp edx, eax
setl cl
cmp ecx, 0x98ab5457
sbb eax, eax
neg eax
sub eax, 0x12af048
jne 0x10008180
cmp dword [ebp - 0x88], ebx
je 0x10008260
cmp dword [ebp - 0x64], ebx
je 0x10008260
mov dword [ebp - 0x2c], 0x2d3650df
mov dword [ebp - 0x20], 0x9ae65c34
mov dword [ebp - 0x18], 0x417f95e1
mov dword [ebp - 0x18], ebx
jmp 0x100081b4
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x45c], 0xb4322e7c
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 2
jl 0x100081a3
mov dword [ebp - 0x64], 4
cmp dword [ebp - 0x64], 0x35
jge 0x100081ee
push 0x474e
lea eax, [ebp - 0x88]
mov edx, 0x2253
push eax
push ecx
mov cl, 1
call fcn.1000415e
add esp, 0xc
inc dword [ebp - 0x64]
cmp dword [ebp - 0x64], 0x35
jl 0x100081c7
xor ebx, ebx
mov dword [ebp - 0x114], 0xfffffffc
xor edx, edx
mov dword [ebp - 0x18], 0xfffffff9
mov ecx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x114]
cmp eax, ecx
mov eax, dword [ebp - 0x20]
setge dl
xor ecx, ecx
cmp eax, edx
setle cl
mov dword [ebp - 0x2c], ecx
mov eax, dword [ebp - 0x2c]
cmp dword [ebp - 0x38], ebx
je 0x1000822e
cmp dword [ebp - 0x18], ebx
je 0x1000822e
xor ecx, ecx
inc ecx
jmp 0x10008230
mov ecx, ebx
mov eax, dword [ebp - 0x30c]
mov eax, dword [eax]
mov dword [ebp - 0x88], eax
mov eax, dword [ebp - 0x88]
neg eax
sbb eax, eax
inc eax
mov dword [ebp - 0x2c], eax
mov dword [ebp - 0x20], ecx
mov eax, dword [ebp - 0x45c]
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x2c]
mov dword [ebp - 0x2c], ebx
jmp 0x100082b6
lea eax, [ebp - 0x238]
mov dword [ebp - 0x2d0], 0x6bac609e
push eax
lea eax, [ebp - 0x114]
mov dword [ebp - 0x238], 0x573c098b
push eax
xor eax, eax
mov edx, 0x1c55
inc eax
mov ecx, 0x523d
push eax
push eax
lea eax, [ebp - 0x64]
push eax
push 0x219c
lea eax, [ebp - 0x30c]
push eax
push ebx
lea eax, [ebp - 0x2d0]
push 0x509d
push eax
call fcn.1000541e
add esp, 0x28
lea ecx, [ebp - 0x30c]
call fcn.1000a787
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x434]
call fcn.1000a787
mov dword [ebp - 0x28], 0x4d12
cmp dword [ebp - 0x28], 0x50f8
jle 0x1000833d
mov ecx, ebx
mov dword [ebp - 0x18], ebx
mov edi, ebx
mov esi, ebx
mov eax, esi
or eax, edi
or eax, ecx
lea ecx, [ebp - 0x5dc]
cdq
push edx
push eax
call fcn.10001a6a
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x10008307
mov eax, dword [eax]
push eax
call fcn.10046acc
pop ecx
push ebx
push 1
lea ecx, [ebp - 0x5dc]
call fcn.1000aac7
mov ecx, dword [ebp - 0x18]
inc esi
cmp esi, 0xce3
jl 0x100082e9
inc edi
cmp edi, 0x557
jl 0x100082e7
inc ecx
mov dword [ebp - 0x18], ecx
cmp ecx, 0x526
jl 0x100082e5
xor ecx, ecx
mov dword [ebp - 0x30], 0xe1757117
mov dword [ebp - 0x1c], ebx
inc ecx
jmp 0x1000835d
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0x438], 0x3245f1db
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], ecx
jl 0x1000834c
mov dword [ebp - 0x1c], ebx
jmp 0x10008378
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0x240], 0xfffffffd
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], ecx
jl 0x10008367
mov dword [ebp - 0x30], 0xffffffe4
cmp dword [ebp - 0x30], 0xffffffea
jne 0x100084a8
mov dword [ebp - 0x20], 0xd37ad43
mov dword [ebp - 0x20], ebx
cmp dword [ebp - 0x20], ebx
jl 0x1000845a
mov dword [ebp - 0x18], 0xffffffff
mov dword [ebp - 0x18], ebx
cmp dword [ebp - 0x18], ebx
jg 0x10008452
mov dword [ebp - 0x2c], 0x65a2
cmp dword [ebp - 0x2c], 0x68dd
jle 0x10008428
mov eax, ebx
mov dword [ebp - 0x24], ebx
mov esi, ebx
mov ecx, esi
mov edi, ebx
and ecx, eax
mov dword [ebp - 0x38], ecx
mov eax, ecx
lea ecx, [ebp - 0x63c]
xor eax, edi
cdq
push edx
push eax
call fcn.10001a6a
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x100083f0
mov eax, dword [eax]
push eax
call fcn.10046acc
pop ecx
push ebx
push 1
lea ecx, [ebp - 0x63c]
call fcn.1000aac7
mov ecx, dword [ebp - 0x38]
inc edi
cmp edi, 0x36c0
jl 0x100083d4
mov eax, dword [ebp - 0x24]
inc esi
cmp esi, 0x7f03
jl 0x100083cb
inc eax
mov dword [ebp - 0x24], eax
cmp eax, 0x1d87
jl 0x100083c9
mov dword [ebp - 0x240], 0xfba1a4d6
cmp dword [ebp - 0x2c], 0x64af
jge 0x10008446
push str.rnxz_umbsyg_oaenituft_knnhgdrpp_lkv_ouwm_qmntdu_wlfswdfu_otclveao
call fcn.10046acc
pop ecx
or dword [ebp - 4], 0xffffffff
inc dword [ebp - 0x18]
jmp 0x100083ab
dec dword [ebp - 0x20]
jmp 0x10008398
push ecx
push 0x2285
push 0x3d6c
push 0x1777
push ecx
push ecx
push 0x458a
lea eax, [ebp - 0x8a]
mov byte [ebp - 0x8a], bl
push eax
push ecx
push 0x747d
push 0x1a97
push 0x17a6
mov dl, 1
mov ecx, 0x33f7
call fcn.10004288
add esp, 0x30
xor ecx, ecx
inc dword [ebp - 0x30]
inc ecx
jmp 0x10008384
cmp dword [ebp - 0x28], 0x4cca
jge 0x100084bf
push str.pehno_gofxdrvk_kvfz_mwcjjigbz
call fcn.10046acc
pop ecx
xor ecx, ecx
inc ecx
or dword [ebp - 4], 0xffffffff
xor eax, eax
mov word [ebp - 0x102], ax
mov dword [ebp - 0x254], 0xf3c3
mov dword [ebp - 0x248], 0x591b68de
push ecx
mov dword [ebp - 0x298], ebx
mov dword [ebp - 0x2f0], 0x7515
mov dword [ebp - 0x44], ecx
push ecx
call fcn.1000440e
pop ecx
pop ecx
lea eax, [ebp - 0x298]
push eax
lea eax, [ebp - 0x248]
push eax
push ecx
push ecx
lea eax, [ebp - 0x2f0]
push eax
push ebx
push ecx
lea edx, [ebp - 0x254]
mov ecx, 0x3560
call fcn.10003b61
xor eax, eax
mov dword [ebp - 0x38c], 7
add esp, 0x1c
mov word [ebp - 0x3a0], ax
lea eax, [ebp - 0x104]
mov dword [ebp - 0x390], ebx
lea ecx, [ebp - 0x3a0]
push eax
call fcn.1000ad0d
cmp dword [ebp - 0x38c], 8
lea eax, [ebp - 0x3a0]
push ebx
cmovae eax, dword [ebp - 0x3a0]
lea ecx, [ebp - 0x3a0]
push 1
movzx eax, word [eax]
mov dword [ebp - 0x2b8], eax
call fcn.1000ae2f
mov eax, 0xb3ae3556
mov dword [ebp - 0x164], eax
mov dword [ebp - 0x160], eax
mov dword [ebp - 0x15c], eax
mov dword [ebp - 0x158], eax
mov dword [ebp - 0x24], 0x63d62a04
mov dword [ebp - 0x30], 0x1de7
cmp dword [ebp - 0x30], 0x2011
jle 0x10008615
mov edi, ebx
mov dword [ebp - 0x20], ebx
mov esi, ebx
mov dword [ebp - 0x18], ebx
mov eax, edi
mov dword [ebp - 0x38], ebx
cdq
idiv esi
mov dword [ebp - 0x2c], 0x4912
mov esi, ebx
mov dword [ebp - 0x24], edx
mov edi, ebx
mov eax, esi
mov ecx, 0x100792f8
cdq
idiv edi
mov eax, edx
cdq
push edx
push eax
call fcn.1000a4ec
inc edi
cmp edi, 0x22ff
jl 0x100085d2
add esi, dword [ebp - 0x24]
dec dword [ebp - 0x2c]
jne 0x100085d0
mov esi, dword [ebp - 0x18]
mov edi, dword [ebp - 0x20]
inc esi
mov dword [ebp - 0x18], esi
cmp esi, 0x7bf7
jl 0x100085bc
inc edi
mov dword [ebp - 0x20], edi
cmp edi, 0x210
jl 0x100085b7
xor ecx, ecx
inc ecx
mov dword [ebp - 0x28], ecx
mov dword [ebp - 4], 0x27
cmp dword [ebp - 0x30], 0x1cfd
jge 0x1000863d
mov edx, str.ibw_gpgujqzdt_aaqau_aaczxqk_jedcolohx_kwfnrx_avrja_kemm
mov ecx, 0x100792f8
call fcn.1000c8f5
xor ecx, ecx
inc ecx
or dword [ebp - 4], 0xffffffff
mov dword [ebp - 0x18], ebx
jmp 0x1000867c
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x4f8], 0x1213072c
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 3
jl 0x1000866b
mov dword [ebp - 0x24], 0xe8f
cmp dword [ebp - 0x24], 0x113d
jle 0x10008732
push 0x25a8
push ebx
push 0x1f34
push 0xd10
call dword [sym.imp.USER32.dll_GetDlgItemTextA]
mov dword [ebp - 0x20], ebx
mov eax, ebx
mov dword [ebp - 0x18], ebx
mov esi, ebx
mov dword [ebp - 0x2c], ebx
mov ecx, esi
mov edi, ebx
mov esi, dword [ebp - 0x20]
and ecx, eax
mov dword [ebp - 0x38], ecx
mov eax, ecx
lea ecx, [ebp - 0x57c]
xor eax, edi
or eax, esi
cdq
push edx
push eax
call fcn.10001a6a
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x100086e3
mov eax, dword [eax]
push eax
call fcn.10046acc
pop ecx
push ebx
push 1
lea ecx, [ebp - 0x57c]
call fcn.1000aac7
mov ecx, dword [ebp - 0x38]
inc edi
cmp edi, 0x351d
jl 0x100086c5
mov esi, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x18]
inc esi
mov dword [ebp - 0x2c], esi
cmp esi, 0x4439
jl 0x100086b9
inc eax
mov dword [ebp - 0x18], eax
cmp eax, 0x6eb6
jl 0x100086b4
mov eax, dword [ebp - 0x20]
inc eax
mov dword [ebp - 0x20], eax
cmp eax, 0x19be
jl 0x100086af
xor ecx, ecx
inc ecx
mov dword [ebp - 0x160], ebx
jmp 0x1000881e
mov dword [ebp - 0x30], 0xfffffff9
mov dword [ebp - 0x1c], ebx
jmp 0x1000875a
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0x360], 7
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 2
jl 0x10008749
mov dword [ebp - 0x1c], ebx
jmp 0x10008776
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0x53c], 0xde661fbc
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 4
jl 0x10008765
mov dword [ebp - 0x30], ebx
jmp 0x1000880f
mov dword [ebp - 0x20], 0xe8588d0d
mov dword [ebp - 0x20], ecx
cmp dword [ebp - 0x20], ebx
jl 0x1000880c
cmp dword [ebp - 0x30], ecx
jle 0x10008784
dec dword [ebp - 0x160]
cmp dword [ebp - 0x160], 0xffffffeb
jne 0x1000873d
cmp dword [ebp - 0x24], 0xe5c
jge 0x1000883f
push str.bnu_zgmvbnqsl_zcxm_fhfte_fbjg
call fcn.10046acc
pop ecx
or edi, 0xffffffff
xor edx, edx
mov dword [ebp - 4], edi
mov ecx, dword [ebp - 0x160]
mov eax, dword [ebp - 0x164]
cmp ecx, eax
setle dl
xor ecx, ecx
mov dword [ebp - 0x4f8], edx
mov dword [ebp - 0x24], 0x5d3e
mov eax, dword [ebp - 0x24]
cmp edx, eax
setg cl
cmp ecx, dword [ebp - 0x160]
jle 0x100088d0
mov dword [ebp - 0x38], 0x1260
mov dword [ebp - 0x24], 0xd
cmp dword [ebp - 0x24], 8
jne 0x100088f4
mov dword [ebp - 0x2c], 0xfffffffa
mov dword [ebp - 0x18], 1
mov eax, dword [ebp - 0x2c]
mov dword [ebp - 0x18], eax
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x160], eax
mov eax, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0x38]
dec eax
neg eax
sbb eax, eax
inc eax
mov dword [ebp - 0x164], eax
dec dword [ebp - 0x24]
cmp dword [ebp - 0x24], 8
je 0x1000888b
xor ebx, ebx
jmp 0x100088f4
push 0x1084
sub esp, 0xc
mov dword [ebp - 0x2a8], 0xfffe
lea eax, [ebp - 0x2a8]
push eax
push ecx
mov cl, 1
call fcn.10004451
add esp, 0x18
mov esi, ebx
mov dword [ebp - 0x178], 0x6de713a
lea ecx, [ebp - 0x37c]
mov dword [ebp - 0x4c], 0x905d09ea
mov dword [ebp - 0x1c8], 0xfffffffa
mov dword [ebp - 0x134], edi
mov dword [ebp - 0x11c], 0xcbae
push 2
call fcn.1000a704
push ecx
push 0x498
push ecx
lea eax, [ebp - 0x37c]
mov dword [ebp - 4], 0x2b
push ebx
push eax
lea edx, [ebp - 0x480]
call fcn.100032f1
add esp, 0x10
lea eax, [ebp - 0x4c]
push 1
push ecx
push 0x36e
push eax
push ecx
mov ecx, 0x3572
call fcn.10004531
mov eax, dword [ebp - 0x4c]
add esp, 0x18
mov eax, dword [ebp - 0x178]
mov eax, dword [ebp - 0x1c8]
mov eax, dword [ebp - 0x4c]
mov eax, dword [ebp - 0x134]
mov eax, dword [ebp - 0x4c]
cmp edi, eax
mov edx, dword [ebp - 0x4c]
sbb eax, eax
sub edx, 0xac01
neg eax
add edx, eax
mov eax, dword [ebp - 0x178]
neg edx
sbb edx, edx
xor ecx, ecx
inc edx
cmp eax, edx
mov eax, dword [ebp - 0x4c]
setle cl
add eax, ecx
jne 0x100089bd
cmp dword [ebp - 0x4c], ebx
jne 0x100089bd
xor ecx, ecx
mov eax, ebx
inc ecx
jmp 0x100089c2
xor ecx, ecx
inc ecx
mov eax, ecx
mov dword [ebp - 0x11c], eax
mov eax, dword [ebp - 0x11c]
cmp eax, dword [ebp - 0x134]
jne 0x10008a20
lea eax, [ebp - 0x134]
mov dword [ebp - 0x2d8], 0x56d20a2e
push eax
lea eax, [ebp - 0x260]
mov dword [ebp - 0x260], 0xca6d786f
push eax
push ebx
lea eax, [ebp - 0x11c]
push eax
lea eax, [ebp - 0x4c]
push eax
lea eax, [ebp - 0x1c8]
push 0x92a
push eax
lea ecx, [ebp - 0x2d8]
call fcn.10004830
add esp, 0x1c
jmp 0x10008a69
mov dword [ebp - 0x4c], ecx
cmp dword [ebp - 0x4c], ebx
jl 0x10008a69
push 0x41fd
push ecx
push 0xbe7
push ecx
push ecx
lea eax, [ebp - 0x7a]
mov byte [ebp - 0x7a], bl
push eax
push 0xba8
mov edx, 0x7b1b
mov ecx, 0x2f89
call fcn.1000457d
mov ecx, dword [ebp - 0x4c]
add esp, 0x1c
mov eax, dword [ebp - 0x37c]
cmp dword [eax + ecx*4], ebx
jne 0x10008a69
dec dword [ebp - 0x4c]
push 1
pop ecx
jns 0x10008a28
lea ecx, [ebp - 0x37c]
mov dword [ebp - 4], edi
call fcn.1000a787
xor eax, eax
mov word [ebp + esi*2 - 0x104], ax
inc esi
cmp esi, 2
jb 0x100088f6
mov edx, dword [ebp - 0x124]
shr edx, 1
mov dword [ebp - 0x38], edx
mov ecx, dword [ebp - 0xcc]
lea eax, [ecx + 1]
cmp eax, edx
jae 0x10008dab
mov eax, dword [ebp - 0x40]
lea ecx, [eax + ecx*2]
call fcn.10001ac0
push 2
lea ecx, [ebp - 0x3b8]
mov dword [ebp - 0x19c], eax
call fcn.1000a704
push ebx
push ecx
push 0x2d8c
lea eax, [ebp - 0x3b8]
mov dword [ebp - 4], 0x2c
push eax
push ecx
push ecx
mov dword [ebp - 0x1c], 0x1c29000d
lea ecx, [ebp - 0xb0]
mov edx, 0x2321
call fcn.100027e9
add esp, 0x18
mov dword [ebp - 0xb0], ebx
jmp 0x10008b15
cmp dword [ebp - 0xb0], 2
jl 0x10008afe
mov ecx, dword [ebp - 0xc]
mov eax, 0x1007d46c
pop edi
pop esi
mov dword fs:[0], ecx
pop ebx
mov esp, ebp
pop ebp
ret