Function at 0x10037048
Capabilities:
Query environment variable

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x100599d5
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
push ecx
sub esp, 0x54c
push ebx
push esi
push edi
mov dword [ebp - 0x10], esp
movzx eax, byte [ebp + 8]
test eax, eax
je 0x100394e5
mov eax, dword [ebp + 0x10]
mov dword [ebp - 0x318], eax
mov eax, dword [ebp + 0x20]
mov dword [ebp - 0x3b0], eax
mov eax, dword [ebp + 0x18]
mov dword [ebp - 0x384], eax
lea eax, [ebp + 0x14]
mov dword [ebp - 0x2f8], eax
mov eax, dword [ebp + 0x1c]
mov dword [ebp - 0x3f0], eax
mov eax, dword [ebp + 0xc]
mov dword [ebp - 0x3a0], eax
mov eax, dword [ebp - 0x2f8]
movzx eax, byte [eax]
test eax, eax
je 0x10037124
mov eax, dword [ebp - 0x3a0]
mov dword [ebp - 0x398], eax
mov eax, dword [ebp - 0x3f0]
mov dword [ebp - 0x304], eax
mov eax, dword [ebp - 0x3b0]
mov dword [ebp - 0x308], eax
mov eax, dword [ebp - 0x398]
mov dword [ebp - 0x310], eax
mov eax, dword [ebp - 0x304]
mov dword [ebp - 0x378], eax
mov eax, dword [ebp - 0x308]
mov dword [ebp - 0x388], eax
push dword [ebp - 0x378]
mov ecx, dword [ebp - 0x310]
call fcn.10039be1
mov ecx, dword [ebp - 0x388]
mov ecx, dword [ecx]
mov dword [eax], ecx
jmp 0x100394e3
mov eax, dword [ebp - 0x318]
mov dword [ebp - 0x39c], eax
mov eax, dword [ebp - 0x384]
mov dword [ebp - 0x140], eax
mov dword [ebp - 0x144], 0x224f
mov dword [ebp - 0x328], str.ghb_fimg_qkkeitcis_djce
cmp dword [ebp - 0x144], 0x23d7
jle 0x100371e0
and dword [ebp - 0xbc], 0
jmp 0x10037176
mov eax, dword [ebp - 0xbc]
inc eax
mov dword [ebp - 0xbc], eax
cmp dword [ebp - 0xbc], 0x239
jge 0x100371d8
and dword [ebp - 0xec], 0
jmp 0x10037198
mov eax, dword [ebp - 0xec]
inc eax
mov dword [ebp - 0xec], eax
cmp dword [ebp - 0xec], 0x5ec1
jge 0x100371d6
mov eax, dword [ebp - 0xbc]
imul eax, dword [ebp - 0xec]
cdq
mov dword [ebp - 0x3ac], eax
mov dword [ebp - 0x3a8], edx
push dword [ebp - 0x3a8]
push dword [ebp - 0x3ac]
mov ecx, 0x10073018
call fcn.1000421d
jmp 0x1003718b
jmp 0x10037169
push 0
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
mov dword [ebp - 0x2e8], 0x8f4a8fe2
mov dword [ebp - 0x84], 0x24891023
mov dword [ebp - 0xe0], 0
jmp 0x1003720d
mov eax, dword [ebp - 0xe0]
inc eax
mov dword [ebp - 0xe0], eax
cmp dword [ebp - 0xe0], 1
jge 0x10037226
mov eax, dword [ebp - 0xe0]
mov dword [ebp + eax*4 - 0x48], 0x53b26bdd
jmp 0x10037200
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0x48], 0
jmp 0x1003724b
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x48]
inc eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x48], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x48], 0xe
jle 0x100374b0
mov dword [ebp - 0x13c], 1
mov dword [ebp - 0x1a4], 0x14ef
mov dword [ebp - 0x3d4], str.qbmxdit_abz_unwk_fxlihmp_luwd_juatyotvt_slhc_afnplcbz_rukhsi_ssr_ncmfktw_obkrohm_egvzxkfi_htbkqz
cmp dword [ebp - 0x1a4], 0x1528
jle 0x10037323
call dword [sym.imp.KERNEL32.dll_GetEnvironmentStringsW]
and dword [ebp - 0x7c], 0
jmp 0x1003729d
mov eax, dword [ebp - 0x7c]
inc eax
mov dword [ebp - 0x7c], eax
cmp dword [ebp - 0x7c], 0x52d9
jge 0x10037323
and dword [ebp - 0xe8], 0
jmp 0x100372bc
mov eax, dword [ebp - 0xe8]
inc eax
mov dword [ebp - 0xe8], eax
cmp dword [ebp - 0xe8], 0xbd6
jge 0x1003731e
mov eax, dword [ebp - 0x7c]
mov ecx, dword [ebp - 0xe8]
sar eax, cl
cdq
mov dword [ebp - 0x3b8], eax
mov dword [ebp - 0x3b4], edx
push dword [ebp - 0x3b4]
push dword [ebp - 0x3b8]
lea ecx, [ebp - 0x52c]
call fcn.10001a55
pop ecx
pop ecx
mov dword [ebp - 0x320], eax
mov ecx, dword [ebp - 0x320]
call fcn.100041fd
push eax
call fcn.100402ac
pop ecx
lea ecx, [ebp - 0x52c]
call fcn.100041f3
jmp 0x100372af
jmp 0x10037296
mov dword [ebp - 0x124], 0x5f88e10e
and dword [ebp - 4], 0
cmp dword [ebp - 0x1a4], 0x1308
jge 0x10037349
push dword [ebp - 0x3d4]
call fcn.100402ac
pop ecx
jmp 0x10037365
or dword [ebp - 4], 0xffffffff
jmp 0x1003736f
mov dword [ebp - 0x2d0], 1
mov eax, 0x484beeec
test eax, eax
je 0x10037437
mov eax, dword [ebp - 0x13c]
mov dword [ebp - 0x2e8], eax
mov eax, dword [ebp - 0x2e8]
shl eax, 2
cmp eax, 0x9ef4a042
jae 0x100373ae
mov dword [ebp - 0x2bc], 1
jmp 0x100373b5
and dword [ebp - 0x2bc], 0
mov eax, dword [ebp - 0x2bc]
add eax, 4
mov dword [ebp - 0x124], eax
mov eax, dword [ebp - 0x124]
mov dword [ebp - 0x4b0], eax
mov eax, dword [ebp - 0x84]
mov dword [ebp - 0x4bc], eax
cmp dword [ebp - 0x84], 0
jle 0x100373f1
mov dword [ebp - 0x2b4], 1
jmp 0x100373f8
and dword [ebp - 0x2b4], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x48]
cmp dword [ebp - 0x2b4], eax
jge 0x10037416
mov dword [ebp - 0x12c], 1
jmp 0x1003741d
and dword [ebp - 0x12c], 0
mov eax, dword [ebp - 0x84]
add eax, dword [ebp - 0x12c]
je 0x10037437
mov dword [ebp - 0x2c0], 1
jmp 0x1003743e
and dword [ebp - 0x2c0], 0
cmp dword [ebp - 0x2c0], 0xfffe
je 0x10037456
mov dword [ebp - 0x134], 1
jmp 0x1003745d
and dword [ebp - 0x134], 0
mov eax, dword [ebp - 0x2d0]
cmp dword [ebp - 0x134], eax
jne 0x10037477
mov dword [ebp - 0x2c8], 1
jmp 0x1003747e
and dword [ebp - 0x2c8], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x48]
add eax, dword [ebp - 0x2c8]
imul ecx, dword [ebp - 0x13c], 0
add ecx, eax
mov dword [ebp - 0x2d0], ecx
cmp dword [ebp - 0x84], 0
je 0x100374ab
jmp 0x10037236
jmp 0x10037236
mov dword [ebp - 4], 2
cmp dword [ebp - 0x144], 0x2215
jge 0x100374d3
mov edx, dword [ebp - 0x328]
mov ecx, 0x10073018
call fcn.100065e2
jmp 0x100374ef
or dword [ebp - 4], 0xffffffff
jmp 0x100374f9
lea eax, [ebp - 0x2a0]
push eax
push 0
push 0x3464
push 1
call fcn.100290de
add esp, 0x10
mov dword [ebp - 0x20], 0xac64a684
mov dword [ebp - 0x340], 0
mov dword [ebp - 0x410], 0
mov dword [ebp - 0x40c], 0
mov dword [ebp - 0x408], 0
mov dword [ebp - 0x404], 0
mov dword [ebp - 0xd0], 0
jmp 0x10037563
mov eax, dword [ebp - 0xd0]
inc eax
mov dword [ebp - 0xd0], eax
cmp dword [ebp - 0xd0], 3
jge 0x1003757f
mov eax, dword [ebp - 0xd0]
mov dword [ebp + eax*4 - 0x2f4], 0x99244325
jmp 0x10037556
mov dword [ebp - 0x20], 0xffffffeb
jmp 0x1003758f
mov eax, dword [ebp - 0x20]
inc eax
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 0xfffffffd
jne 0x100375cb
mov byte [ebp - 0x39], 0
push 1
push 0x4d53
push 0x77fb
lea eax, [ebp - 0x39]
push eax
push 0x111
push 0x5115
push 1
push 0
push 0x2c5e
push 0x7d2c
call fcn.10039650
add esp, 0x28
jmp 0x10037588
mov dword [ebp - 0x20], 2
jmp 0x100375db
mov eax, dword [ebp - 0x20]
dec eax
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 0
jl 0x100378a0
mov dword [ebp - 0x468], 0xe4f9dbc9
mov dword [ebp - 0x338], 0xdf860956
mov dword [ebp - 0x394], 0x4a938f73
mov dword [ebp - 0x400], 0x50cf
mov dword [ebp - 0x3fc], 0x50cf
mov dword [ebp - 0x3f8], 0x50cf
mov dword [ebp - 0x3f4], 0x50cf
mov dword [ebp - 0x38c], 0x35ff
mov dword [ebp - 0x170], 0x879a2734
mov eax, dword [ebp - 0x20]
cmp dword [ebp + eax*4 - 0x2f4], 0
je 0x10037668
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x2f4], 0
je 0x10037668
mov dword [ebp - 0x168], 1
jmp 0x1003766f
and dword [ebp - 0x168], 0
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp + eax*4 - 0x2f4]
add eax, 0xb6b
cmp eax, dword [ebp - 0x38c]
jg 0x10037692
mov dword [ebp - 0x330], 1
jmp 0x10037699
and dword [ebp - 0x330], 0
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x400]
inc eax
mov dword [ebp - 0x3bc], eax
push 4
pop eax
shl eax, 1
mov ecx, dword [ebp - 0x3bc]
mov dword [ebp + eax - 0x400], ecx
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x410]
mov dword [ebp - 0x4c4], eax
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x410]
mov dword [ebp - 0x4cc], eax
push 4
pop eax
shl eax, 1
push 4
pop ecx
shl ecx, 0
imul ecx, dword [ebp + ecx - 0x2f4], 0xac8e
cmp ecx, dword [ebp + eax - 0x410]
jge 0x1003770f
mov dword [ebp - 0x2d8], 1
jmp 0x10037716
and dword [ebp - 0x2d8], 0
cmp dword [ebp - 0x2d8], 0xe425
jle 0x1003772e
mov dword [ebp - 0x2e0], 1
jmp 0x10037735
and dword [ebp - 0x2e0], 0
cmp dword [ebp - 0x2e0], 0xd55c
jle 0x1003774d
mov dword [ebp - 0x150], 1
jmp 0x10037754
and dword [ebp - 0x150], 0
mov eax, dword [ebp - 0x338]
cmp dword [ebp - 0x150], eax
jne 0x1003776e
mov dword [ebp - 0x220], 1
jmp 0x10037775
and dword [ebp - 0x220], 0
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x2f4]
cmp dword [ebp - 0x220], eax
jne 0x1003779b
cmp dword [ebp - 0x394], 0
jne 0x1003779b
and dword [ebp - 0x158], 0
jmp 0x100377a5
mov dword [ebp - 0x158], 1
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp + eax*4 - 0x2f4]
cmp eax, dword [ebp - 0x158]
jg 0x100377c3
mov dword [ebp - 0x288], 1
jmp 0x100377ca
and dword [ebp - 0x288], 0
mov eax, dword [ebp - 0x340]
cmp dword [ebp - 0x288], eax
jle 0x100377e4
mov dword [ebp - 0x160], 1
jmp 0x100377eb
and dword [ebp - 0x160], 0
cmp dword [ebp - 0x160], 0
ja 0x10037800
mov dword [ebp - 0x228], 1
jmp 0x10037807
and dword [ebp - 0x228], 0
mov eax, dword [ebp - 0x228]
shl eax, 3
test eax, eax
je 0x1003782f
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0x400], 0
je 0x1003782f
mov dword [ebp - 0x2b8], 1
jmp 0x10037836
and dword [ebp - 0x2b8], 0
mov eax, dword [ebp - 0x168]
imul eax, dword [ebp - 0x2b8]
mov dword [ebp - 0x170], eax
cmp dword [ebp - 0x170], 0
je 0x10037874
push 1
push 0x53f2
push 0x5a90
push 0x7b47
push 0
push 0xc47
call fcn.1002d2a3
add esp, 0x18
jmp 0x1003789b
mov byte [ebp - 0x3a], 0
movzx eax, byte [ebp - 0x3a]
test eax, eax
je 0x1003789b
push 0x554c
push 0x1de1
push 1
push 0x6184
push 0
call fcn.1003644c
add esp, 0x14
jmp 0x100375d4
cmp dword [ebp - 0x2a0], 0
je 0x10038ff7
mov dword [ebp - 0x2c], 0
jmp 0x100378bd
mov eax, dword [ebp - 0x2c]
inc eax
mov dword [ebp - 0x2c], eax
cmp dword [ebp - 0x2c], 1
jge 0x100378d0
mov eax, dword [ebp - 0x2c]
mov dword [ebp + eax*4 - 0x4c], 0xffffffff
jmp 0x100378b6
mov dword [ebp - 0x2c], 0
jmp 0x100378e0
mov eax, dword [ebp - 0x2c]
inc eax
mov dword [ebp - 0x2c], eax
cmp dword [ebp - 0x2c], 3
jge 0x100378f6
mov eax, dword [ebp - 0x2c]
mov dword [ebp + eax*4 - 0x4f8], 1
jmp 0x100378d9
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0x4c], 0
jmp 0x1003791b
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x4c]
inc eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x4c], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x4c], 0x16
jge 0x10037a94
mov dword [ebp - 0x40], 0xffffffff
mov dword [ebp - 0xf0], 0
mov dword [ebp - 0x348], 0xfffffffd
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x4c], 0x59951ea6
jle 0x10037963
mov dword [ebp - 0x238], 1
jmp 0x1003796a
and dword [ebp - 0x238], 0
mov eax, dword [ebp - 0x40]
mov dword [ebp - 0x4e0], eax
imul eax, dword [ebp - 0x40], 0x2184
imul eax, eax, 0xa0f0
cmp eax, 0xfff7
jne 0x10037993
mov dword [ebp - 0x230], 1
jmp 0x1003799a
and dword [ebp - 0x230], 0
cmp dword [ebp - 0x230], 0xffff
jne 0x100379b2
mov dword [ebp - 0x178], 1
jmp 0x100379b9
and dword [ebp - 0x178], 0
mov eax, dword [ebp - 0x178]
sub eax, dword [ebp - 0x40]
sub eax, 0x3a6c3797
cmp eax, 0xfffc
ja 0x100379dd
cmp dword [ebp - 0x40], 0
jne 0x100379dd
and dword [ebp - 0x3ec], 0
jmp 0x100379e7
mov dword [ebp - 0x3ec], 1
cmp dword [ebp - 0x40], 0xfffffff9
jl 0x100379f9
mov dword [ebp - 0x290], 1
jmp 0x10037a00
and dword [ebp - 0x290], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x40]
add ecx, dword [ebp - 0x290]
cmp ecx, dword [ebp + eax - 0x4c]
jge 0x10037a21
mov dword [ebp - 0x180], 1
jmp 0x10037a28
and dword [ebp - 0x180], 0
mov eax, dword [ebp - 0x180]
mov dword [ebp - 0xf0], eax
mov eax, dword [ebp - 0xf0]
mov dword [ebp - 0x188], eax
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x188]
mov dword [ebp + eax - 0x4f8], ecx
mov eax, dword [ebp - 0x238]
cmp eax, dword [ebp - 0x188]
jle 0x10037a6d
mov dword [ebp - 0x2d4], 1
jmp 0x10037a74
and dword [ebp - 0x2d4], 0
mov eax, dword [ebp - 0x2d4]
add eax, 5
jne 0x10037a83
cmp dword [ebp - 0x40], 0
mov eax, dword [ebp - 0xf0]
mov dword [ebp - 0x348], eax
jmp 0x10037906
push dword [ebp - 0x39c]
lea ecx, [ebp - 0x44c]
call fcn.10007198
mov dword [ebp - 4], 4
mov dword [ebp - 0x190], 0x6134
mov dword [ebp - 0x3c8], str.dcaokf_umwx_auwbda_vbriyq_wotedic_kerea_knqa_nylsnjlzk
cmp dword [ebp - 0x190], 0x625a
jle 0x10037bc3
and dword [ebp - 0x8c], 0
jmp 0x10037ae6
mov eax, dword [ebp - 0x8c]
inc eax
mov dword [ebp - 0x8c], eax
cmp dword [ebp - 0x8c], 0x84d
jge 0x10037ba6
and dword [ebp - 0xb8], 0
jmp 0x10037b0c
mov eax, dword [ebp - 0xb8]
inc eax
mov dword [ebp - 0xb8], eax
cmp dword [ebp - 0xb8], 0x5d4b
jge 0x10037ba1
and dword [ebp - 0x94], 0
jmp 0x10037b32
mov eax, dword [ebp - 0x94]
inc eax
mov dword [ebp - 0x94], eax
cmp dword [ebp - 0x94], 0x6be1
jge 0x10037b9c
mov eax, dword [ebp - 0x8c]
imul eax, dword [ebp - 0xb8]
sub eax, dword [ebp - 0x94]
cdq
mov dword [ebp - 0x3c4], eax
mov dword [ebp - 0x3c0], edx
push dword [ebp - 0x3c0]
push dword [ebp - 0x3c4]
lea ecx, [ebp - 0x544]
call fcn.10001a55
pop ecx
pop ecx
mov dword [ebp - 0x350], eax
mov ecx, dword [ebp - 0x350]
call fcn.100041fd
push eax
call fcn.100402ac
pop ecx
lea ecx, [ebp - 0x544]
call fcn.100041f3
jmp 0x10037b25
jmp 0x10037aff
jmp 0x10037ad9
push 0
push 0
push 0
push 0
push 0xa47
push 0
push 0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateProcessA]
mov byte [ebp - 4], 5
cmp dword [ebp - 0x190], 0x5e97
jge 0x10037bdf
push dword [ebp - 0x3c8]
call fcn.100402ac
pop ecx
jmp 0x10037bfb
mov dword [ebp - 4], 4
jmp 0x10037c0b
mov dword [ebp - 0x110], 1
mov dword [ebp - 0x5c], 0xffffffff
mov dword [ebp - 0x358], 0x498d
push 0x46a2
push 0
lea eax, [ebp - 0x110]
push eax
push 0
call fcn.100290de
add esp, 0x10
or eax, 0xffffffff
je 0x10037c58
cmp dword [ebp - 0x110], 0
je 0x10037c58
mov dword [ebp - 0x240], 1
jmp 0x10037c5f
and dword [ebp - 0x240], 0
mov eax, dword [ebp - 0x240]
mov dword [ebp - 0x5c], eax
cmp dword [ebp - 0x5c], 0
je 0x10037ddc
mov dword [ebp - 0x60], 1
mov dword [ebp - 0x74], 0
jmp 0x10037c89
mov eax, dword [ebp - 0x74]
inc eax
mov dword [ebp - 0x74], eax
cmp dword [ebp - 0x74], 1
jge 0x10037c9f
mov eax, dword [ebp - 0x74]
mov dword [ebp + eax*4 - 0x3a4], 0xc3a23fe5
jmp 0x10037c82
cmp dword [ebp - 0x60], 0xf34bdac8
jb 0x10037cb4
mov dword [ebp - 0x198], 1
jmp 0x10037cbb
and dword [ebp - 0x198], 0
mov eax, dword [ebp - 0x198]
sub eax, 0x3628c20e
je 0x10037cdd
cmp dword [ebp - 0x358], 0
je 0x10037cdd
mov dword [ebp - 0x298], 1
jmp 0x10037ce4
and dword [ebp - 0x298], 0
mov eax, dword [ebp - 0x60]
cmp dword [ebp - 0x298], eax
jg 0x10037cfb
mov dword [ebp - 0x1a0], 1
jmp 0x10037d02
and dword [ebp - 0x1a0], 0
mov eax, dword [ebp - 0x60]
cmp eax, dword [ebp - 0x1a0]
je 0x10037d1f
mov eax, 0x4c26
test eax, eax
jne 0x10037d1f
and dword [ebp - 0x248], 0
jmp 0x10037d29
mov dword [ebp - 0x248], 1
mov eax, dword [ebp - 0x60]
cmp dword [ebp - 0x248], eax
jge 0x10037d40
mov dword [ebp - 0x1a8], 1
jmp 0x10037d47
and dword [ebp - 0x1a8], 0
cmp dword [ebp - 0x1a8], 0x6ddcd166
jle 0x10037d5f
mov dword [ebp - 0x1b0], 1
jmp 0x10037d66
and dword [ebp - 0x1b0], 0
mov eax, dword [ebp - 0x110]
mov dword [ebp - 0x2c4], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x2c4]
mov dword [ebp + eax - 0x3a4], ecx
mov eax, dword [ebp - 0x2c4]
cmp eax, dword [ebp - 0x1b0]
jle 0x10037d9f
mov dword [ebp - 0x250], 1
jmp 0x10037da6
and dword [ebp - 0x250], 0
mov dword [ebp - 0x5c], 1
mov eax, dword [ebp - 0x5c]
cmp eax, dword [ebp - 0x250]
jge 0x10037dca
cmp dword [ebp - 0x5c], 0
je 0x10037dca
mov dword [ebp - 0x1b8], 1
jmp 0x10037dd1
and dword [ebp - 0x1b8], 0
mov eax, dword [ebp - 0x1b8]
mov dword [ebp - 0x60], eax
jmp 0x10037ded
push 0x371f
push 1
push 1
call fcn.10028a47
add esp, 0xc
lea eax, [ebp - 0x46c]
push eax
lea ecx, [ebp - 0x44c]
call fcn.10004361
push dword [eax]
lea eax, [ebp - 0x470]
push eax
lea ecx, [ebp - 0x44c]
call fcn.10004375
push dword [eax]
lea eax, [ebp - 0x478]
push eax
lea ecx, [ebp - 0x44c]
call fcn.10004361
push dword [eax]
mov edx, 0x1002899a
lea ecx, [ebp - 0x48c]
call fcn.10039ebc
add esp, 0xc
push 0x7b03
push 0
push 0x502f
push 0x3744
push 0x779b
push 1
push 0x6a6
call fcn.1002945b
add esp, 0x1c
mov eax, dword [ebp - 0x2a0]
mov eax, dword [eax + 0xc]
add eax, 0x14
mov dword [ebp - 0x2e4], eax
mov dword [ebp - 0x9c], 0
jmp 0x10037e8c
mov eax, dword [ebp - 0x9c]
inc eax
mov dword [ebp - 0x9c], eax
cmp dword [ebp - 0x9c], 1
jge 0x10037ea8
mov eax, dword [ebp - 0x9c]
mov dword [ebp + eax*4 - 0x1c0], 3
jmp 0x10037e7f
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x1c0], 0
je 0x10037f71
mov dword [ebp - 0x54], 0xffffffff
mov dword [ebp - 0x434], 0x88e1b61b
mov dword [ebp - 0x430], 0x88e1b61b
mov dword [ebp - 0x42c], 0x88e1b61b
mov dword [ebp - 0x428], 0x88e1b61b
mov dword [ebp - 0x54], 0
jmp 0x10037efb
mov eax, dword [ebp - 0x54]
inc eax
mov dword [ebp - 0x54], eax
cmp dword [ebp - 0x54], 0
jg 0x10037f4d
push 1
push 1
call fcn.10028e7f
pop ecx
pop ecx
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x1c0], 0
jne 0x10037f2e
mov eax, 0xe7e55059
test eax, eax
jne 0x10037f2e
and dword [ebp - 0x258], 0
jmp 0x10037f38
mov dword [ebp - 0x258], 1
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x258]
mov dword [ebp + eax - 0x434], ecx
jmp 0x10037ef4
push 0x132b
push 0
push 0x5ebe
push 1
push 0x537c
lea eax, [ebp - 0x54]
push eax
call fcn.10028ad1
add esp, 0x18
jmp 0x100380f9
mov byte [ebp - 0x42], 0
mov dword [ebp - 0x1c8], 0x3540
mov dword [ebp - 0x360], str.sdjgglgrr_jphzmwlk_sytwlbap_fgppixovz_pdcgi_fxezmcel_oyjwkk_sgw_ryrzaxy_xpxsv
cmp dword [ebp - 0x1c8], 0x379e
jle 0x10038083
and dword [ebp - 0xcc], 0
jmp 0x10037faf
mov eax, dword [ebp - 0xcc]
inc eax
mov dword [ebp - 0xcc], eax
cmp dword [ebp - 0xcc], 0x5ada
jge 0x10038074
and dword [ebp - 0xac], 0
jmp 0x10037fd5
mov eax, dword [ebp - 0xac]
inc eax
mov dword [ebp - 0xac], eax
cmp dword [ebp - 0xac], 0x5f9
jge 0x1003806f
and dword [ebp - 0xc4], 0
jmp 0x10037ffb
mov eax, dword [ebp - 0xc4]
inc eax
mov dword [ebp - 0xc4], eax
cmp dword [ebp - 0xc4], 0x8056
jge 0x1003806a
and dword [ebp - 0xa4], 0
jmp 0x1003801d
mov eax, dword [ebp - 0xa4]
inc eax
mov dword [ebp - 0xa4], eax
cmp dword [ebp - 0xa4], 0x603
jge 0x10038068
mov eax, dword [ebp - 0xc4]
sub eax, dword [ebp - 0xa4]
mov ecx, dword [ebp - 0xcc]
and ecx, dword [ebp - 0xac]
xor eax, ecx
cdq
mov dword [ebp - 0x3d0], eax
mov dword [ebp - 0x3cc], edx
push dword [ebp - 0x3cc]
push dword [ebp - 0x3d0]
mov ecx, 0x10073018
call fcn.1000421d
jmp 0x10038010
jmp 0x10037fee
jmp 0x10037fc8
jmp 0x10037fa2
push 0x2135
push 0
push 0
call dword [sym.imp.KERNEL32.dll_ExpandEnvironmentStringsW]
movzx eax, byte [ebp - 0x42]
test eax, eax
je 0x100380ad
push 0
push 0x386b
push 1
push 0x5832
push 0
push 0x7686
push 0xd91
call fcn.1002d699
add esp, 0x1c
mov byte [ebp - 4], 7
cmp dword [ebp - 0x1c8], 0x3500
jge 0x100380cd
mov edx, dword [ebp - 0x360]
mov ecx, 0x10073018
call fcn.100065e2
jmp 0x100380e9
mov dword [ebp - 4], 4
jmp 0x100380f9
and dword [ebp - 0x108], 0
push 1
push 0x532c
push 0xe0c
push 1
call fcn.10028ffd
add esp, 0x10
mov eax, dword [ebp - 0x2e4]
mov eax, dword [eax]
mov dword [ebp - 0xb4], eax
jmp 0x10038134
mov eax, dword [ebp - 0xb4]
mov eax, dword [eax]
mov dword [ebp - 0xb4], eax
mov eax, dword [ebp - 0xb4]
cmp eax, dword [ebp - 0x2e4]
je 0x10038fe8
mov dword [ebp - 0x1e0], 7
mov dword [ebp - 0x494], 0xc5a3d7f1
mov dword [ebp - 0x368], 0xee49
mov dword [ebp - 0x3e0], 0x6aed1d25
mov dword [ebp - 0x260], 0x51dd2e9
mov dword [ebp - 0x37c], 0xad7494df
mov dword [ebp - 0xd4], 0
jmp 0x1003819b
mov eax, dword [ebp - 0xd4]
inc eax
mov dword [ebp - 0xd4], eax
cmp dword [ebp - 0xd4], 3
jge 0x100381b7
mov eax, dword [ebp - 0xd4]
mov dword [ebp + eax*4 - 0x504], 1
jmp 0x1003818e
push 0x3bad
push 0x6a43
push 1
push 0x5ad3
push 0x5a39
push 0x72da
push 0
push 1
call fcn.10036dfb
add esp, 0x20
push 4
pop eax
shl eax, 1
mov dword [ebp + eax - 0x504], 0
cmp dword [ebp - 0x1e0], 0
jge 0x10038203
mov dword [ebp - 0x1d0], 1
jmp 0x1003820a
and dword [ebp - 0x1d0], 0
mov eax, dword [ebp - 0x1d0]
mov dword [ebp - 0x260], eax
cmp dword [ebp - 0x260], 0x4132
jg 0x1003822e
mov dword [ebp - 0x1d8], 1
jmp 0x10038235
and dword [ebp - 0x1d8], 0
mov eax, dword [ebp - 0x3e0]
cmp dword [ebp - 0x1d8], eax
je 0x1003824f
mov dword [ebp - 0x2a8], 1
jmp 0x10038256
and dword [ebp - 0x2a8], 0
mov eax, dword [ebp - 0x2a8]
sub eax, dword [ebp - 0x368]
sub eax, dword [ebp - 0x1e0]
mov dword [ebp - 0x37c], eax
lea eax, [ebp - 0x108]
push eax
push 0x36f5
push 1
lea eax, [ebp - 0xb4]
push eax
push 0
push 1
call fcn.10039594
add esp, 0x18
mov dword [ebp - 0x14], 0x6ce125d1
mov dword [ebp - 0x50], 0x5a42069
mov dword [ebp - 0x28], 0
jmp 0x100382ad
mov eax, dword [ebp - 0x28]
inc eax
mov dword [ebp - 0x28], eax
cmp dword [ebp - 0x28], 3
jge 0x100382c0
mov eax, dword [ebp - 0x28]
mov dword [ebp + eax*4 - 0x70], 1
jmp 0x100382a6
mov dword [ebp - 0x28], 0
jmp 0x100382d0
mov eax, dword [ebp - 0x28]
inc eax
mov dword [ebp - 0x28], eax
cmp dword [ebp - 0x28], 4
jge 0x100382e6
mov eax, dword [ebp - 0x28]
mov dword [ebp + eax*4 - 0x514], 1
jmp 0x100382c9
mov dword [ebp - 0x14], 0
jmp 0x100382f6
mov eax, dword [ebp - 0x14]
inc eax
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 3
jge 0x10038309
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x70], 0xf251d69f
jmp 0x100382ef
mov dword [ebp - 0x14], 0
jmp 0x10038319
mov eax, dword [ebp - 0x14]
inc eax
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 2
jg 0x1003888f
mov dword [ebp - 0x30c], 0
mov eax, dword [ebp - 0x14]
cmp dword [ebp + eax*4 - 0x70], 0
je 0x100385e4
mov dword [ebp - 0xd8], 0xe9fb
mov dword [ebp - 0xdc], 0
jmp 0x1003835e
mov eax, dword [ebp - 0xdc]
inc eax
mov dword [ebp - 0xdc], eax
cmp dword [ebp - 0xdc], 1
jge 0x1003837a
mov eax, dword [ebp - 0xdc]
mov dword [ebp + eax*4 - 0x300], 0x818264d9
jmp 0x10038351
mov dword [ebp - 0x2b0], 0x781e
mov dword [ebp - 0x2fc], str.dlen_ihvstre_ymepoqp_xkfbmw_uft_jzlzjgw_iktgjunby_btxdlo
cmp dword [ebp - 0x2b0], 0x7be8
jle 0x10038445
and dword [ebp - 0xe4], 0
jmp 0x100383b4
mov eax, dword [ebp - 0xe4]
inc eax
mov dword [ebp - 0xe4], eax
cmp dword [ebp - 0xe4], 0x20dd
jge 0x10038445
and dword [ebp - 0xc0], 0
jmp 0x100383da
mov eax, dword [ebp - 0xc0]
inc eax
mov dword [ebp - 0xc0], eax
cmp dword [ebp - 0xc0], 0x2cc1
jge 0x10038440
mov eax, dword [ebp - 0xe4]
cdq
idiv dword [ebp - 0xc0]
mov eax, edx
cdq
mov dword [ebp - 0x3dc], eax
mov dword [ebp - 0x3d8], edx
push dword [ebp - 0x3d8]
push dword [ebp - 0x3dc]
lea ecx, [ebp - 0x55c]
call fcn.10001a55
pop ecx
pop ecx
mov dword [ebp - 0x370], eax
mov ecx, dword [ebp - 0x370]
call fcn.100041fd
push eax
call fcn.100402ac
pop ecx
lea ecx, [ebp - 0x55c]
call fcn.100041f3
jmp 0x100383cd
jmp 0x100383a7
mov eax, dword [ebp - 0x14]
cmp dword [ebp + eax*4 - 0x70], 0
je 0x10038456
cmp dword [ebp - 0xd8], 1
imul eax, dword [ebp - 0x14], 0
test eax, eax
je 0x10038473
mov eax, 0x58099740
test eax, eax
je 0x10038473
mov dword [ebp - 0x268], 1
jmp 0x1003847a
and dword [ebp - 0x268], 0
cmp dword [ebp - 0x268], 0xffff
jae 0x10038492
mov dword [ebp - 0x1e8], 1
jmp 0x10038499
and dword [ebp - 0x1e8], 0
mov eax, dword [ebp - 0xd8]
cmp dword [ebp - 0x1e8], eax
jge 0x100384b3
mov dword [ebp - 0x380], 1
jmp 0x100384ba
and dword [ebp - 0x380], 0
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp + eax*4 - 0x70]
mov dword [ebp - 0x49c], eax
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp + eax*4 - 0x70]
mov dword [ebp - 0x4d4], eax
mov eax, dword [ebp - 0x14]
push 4
pop ecx
shl ecx, 1
mov ecx, dword [ebp + ecx - 0x70]
cmp ecx, dword [ebp + eax*4 - 0x70]
jge 0x100384fb
cmp dword [ebp - 0xd8], 0
je 0x100384fb
mov dword [ebp - 0x2cc], 1
jmp 0x10038502
and dword [ebp - 0x2cc], 0
mov eax, dword [ebp - 0x2cc]
add eax, 0xfa1
imul eax, eax, 0xb7be
cmp eax, dword [ebp - 0xd8]
jle 0x10038527
mov dword [ebp - 0x1f0], 1
jmp 0x1003852e
and dword [ebp - 0x1f0], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x70]
mov ecx, dword [ebp - 0x1f0]
lea eax, [ecx + eax + 1]
test eax, eax
je 0x1003855b
mov eax, 0xea2f
test eax, eax
je 0x1003855b
mov dword [ebp - 0x270], 1
jmp 0x10038562
and dword [ebp - 0x270], 0
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0x70], 0x7d437f1b
jle 0x1003857d
mov dword [ebp - 0x1f8], 1
jmp 0x10038584
and dword [ebp - 0x1f8], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x1f8]
mov dword [ebp + eax - 0x300], ecx
mov byte [ebp - 4], 9
cmp dword [ebp - 0x2b0], 0x76fe
jge 0x100385b3
push dword [ebp - 0x2fc]
call fcn.100402ac
pop ecx
jmp 0x100385cf
mov dword [ebp - 4], 4
jmp 0x100385df
jmp 0x10038741
mov dword [ebp - 0x118], 0xc3e5f88
mov dword [ebp - 0xc8], 0
jmp 0x10038607
mov eax, dword [ebp - 0xc8]
inc eax
mov dword [ebp - 0xc8], eax
cmp dword [ebp - 0xc8], 2
jge 0x10038623
mov eax, dword [ebp - 0xc8]
mov dword [ebp + eax*4 - 0x424], 0x9025b0d6
jmp 0x100385fa
cmp dword [ebp - 0x118], 0
jne 0x10038695
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x14]
mov ecx, dword [ebp + ecx*4 - 0x70]
cmp ecx, dword [ebp + eax - 0x70]
jl 0x1003864b
mov dword [ebp - 0x200], 1
jmp 0x10038652
and dword [ebp - 0x200], 0
mov eax, dword [ebp - 0x14]
mov dword [ebp - 0x4dc], eax
cmp dword [ebp - 0x200], 0
je 0x10038670
mov dword [ebp - 0x278], 1
jmp 0x10038677
and dword [ebp - 0x278], 0
mov eax, dword [ebp - 0x278]
mov dword [ebp - 0x118], eax
cmp dword [ebp - 0x118], 0
jne 0x10038695
and dword [ebp - 0x208], 0
jmp 0x1003869f
mov dword [ebp - 0x208], 1
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp + eax*4 - 0x70]
cmp dword [ebp - 0x208], eax
jl 0x100386ba
mov dword [ebp - 0x2dc], 1
jmp 0x100386c1
and dword [ebp - 0x2dc], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x70]
cmp dword [ebp - 0x2dc], eax
jne 0x100386df
mov dword [ebp - 0x210], 1
jmp 0x100386e6
and dword [ebp - 0x210], 0
cmp dword [ebp - 0x210], 0
jl 0x100386fb
mov dword [ebp - 0x280], 1
jmp 0x10038702
and dword [ebp - 0x280], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x424]
cmp dword [ebp - 0x280], eax
jge 0x10038723
mov dword [ebp - 0x218], 1
jmp 0x1003872a
and dword [ebp - 0x218], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x424]
imul eax, dword [ebp - 0x218]
mov dword [ebp - 0x50], eax
mov dword [ebp - 0x50], 0
jmp 0x10038751
mov eax, dword [ebp - 0x50]
inc eax
mov dword [ebp - 0x50], eax
cmp dword [ebp - 0x50], 2
jg 0x1003888a
mov dword [ebp - 0x114], 0x1cd05094
mov dword [ebp - 0x314], 2
push 0
lea eax, [ebp - 0x114]
push eax
push 0x3fe1
push 0x2b4a
push 0
push 0x80c
call fcn.1002d2a3
add esp, 0x18
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp + eax*4 - 0x70]
mov dword [ebp - 0x148], eax
mov eax, dword [ebp - 0x14]
mov ecx, dword [ebp - 0x148]
mov dword [ebp + eax*4 - 0x70], ecx
cmp dword [ebp - 0x148], 0
je 0x100387c9
mov eax, 0x5d0c5fd7
test eax, eax
je 0x100387c9
mov dword [ebp - 0x14c], 1
jmp 0x100387d0
and dword [ebp - 0x14c], 0
mov eax, dword [ebp - 0x30c]
cmp dword [ebp - 0x14c], eax
jge 0x100387ea
mov dword [ebp - 0x154], 1
jmp 0x100387f1
and dword [ebp - 0x154], 0
mov eax, dword [ebp - 0x14]
sub eax, dword [ebp - 0x154]
cmp eax, 0x7283
jge 0x1003880d
mov dword [ebp - 0x15c], 1
jmp 0x10038814
and dword [ebp - 0x15c], 0
mov eax, dword [ebp - 0x114]
cmp dword [ebp - 0x15c], eax
jg 0x1003882e
mov dword [ebp - 0x164], 1
jmp 0x10038835
and dword [ebp - 0x164], 0
mov eax, dword [ebp - 0x114]
cmp dword [ebp - 0x164], eax
jle 0x1003884f
mov dword [ebp - 0x174], 1
jmp 0x10038856
and dword [ebp - 0x174], 0
mov eax, dword [ebp - 0x50]
mov dword [ebp - 0x16c], eax
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x16c]
mov dword [ebp + eax - 0x514], ecx
mov eax, dword [ebp - 0x16c]
imul eax, dword [ebp - 0x174]
mov dword [ebp - 0x314], eax
jmp 0x1003874a
jmp 0x10038312
mov eax, dword [ebp - 0x108]
push dword [eax + 0x28]
lea ecx, [ebp - 0x464]
call fcn.10004332
mov byte [ebp - 4], 0xb
mov dword [ebp - 0x24], 0xd3f5047c
mov dword [ebp - 0x64], 0xfffffffc
mov dword [ebp - 0x10c], 0xb243e5ec
mov dword [ebp - 0x58], 0xe289
mov dword [ebp - 0xfc], 0xc5c6a81d
mov dword [ebp - 0x20c], 0x898a8014
mov dword [ebp - 0x78], 0
jmp 0x100388ea
mov eax, dword [ebp - 0x78]
inc eax
mov dword [ebp - 0x78], eax
cmp dword [ebp - 0x78], 2
jge 0x100388fd
mov eax, dword [ebp - 0x78]
mov dword [ebp + eax*4 - 0x34], 0x56915a13
jmp 0x100388e3
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x34], 0
jne 0x10038ac4
push 4
pop eax
imul eax, eax, 0
push 4
pop ecx
imul ecx, ecx, 0
mov ecx, dword [ebp + ecx - 0x34]
cmp ecx, dword [ebp + eax - 0x34]
je 0x10038930
mov dword [ebp - 0x31c], 1
jmp 0x10038937
and dword [ebp - 0x31c], 0
push 4
pop eax
shl eax, 0
push 4
pop ecx
imul ecx, ecx, 0
mov ecx, dword [ebp + ecx - 0x34]
cmp ecx, dword [ebp + eax - 0x34]
je 0x10038959
mov dword [ebp - 0x17c], 1
jmp 0x10038960
and dword [ebp - 0x17c], 0
cmp dword [ebp - 0x17c], 0x6a37d7c8
jl 0x10038978
mov dword [ebp - 0x184], 1
jmp 0x1003897f
and dword [ebp - 0x184], 0
push 4
pop eax
shl eax, 0
push 4
pop ecx
imul ecx, ecx, 0
mov ecx, dword [ebp + ecx - 0x34]
sub ecx, dword [ebp - 0x184]
cmp ecx, dword [ebp + eax - 0x34]
jne 0x100389a7
mov dword [ebp - 0x18c], 1
jmp 0x100389ae
and dword [ebp - 0x18c], 0
mov eax, dword [ebp - 0x18c]
mov dword [ebp - 0x64], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x34]
cmp eax, dword [ebp - 0x64]
jge 0x100389d2
mov dword [ebp - 0x194], 1
jmp 0x100389d9
and dword [ebp - 0x194], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x34]
add eax, dword [ebp - 0x194]
cmp eax, 0x8217c712
jne 0x100389fc
mov dword [ebp - 0x19c], 1
jmp 0x10038a03
and dword [ebp - 0x19c], 0
mov eax, dword [ebp - 0x19c]
mov dword [ebp - 0x10c], eax
push 4
pop eax
shl eax, 0
imul ecx, dword [ebp - 0x10c], 0
cmp ecx, dword [ebp + eax - 0x34]
jge 0x10038a2e
mov dword [ebp - 0x11c], 1
jmp 0x10038a35
and dword [ebp - 0x11c], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x34]
mov dword [ebp - 0x24], eax
mov eax, dword [ebp - 0x24]
sub eax, dword [ebp - 0x11c]
cmp eax, 0xfffffffa
jle 0x10038a5c
mov dword [ebp - 0x1ac], 1
jmp 0x10038a63
and dword [ebp - 0x1ac], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x34]
cmp dword [ebp - 0x1ac], eax
je 0x10038a81
mov dword [ebp - 0x1b4], 1
jmp 0x10038a88
and dword [ebp - 0x1b4], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x34]
cmp dword [ebp - 0x1b4], eax
je 0x10038aa4
cmp dword [ebp - 0x24], 0
jne 0x10038aa4
cmp dword [ebp - 0x64], 0
push 4
pop eax
imul eax, eax, 0
imul eax, dword [ebp + eax - 0x34], 0x37b1
mov dword [ebp - 0x58], eax
cmp dword [ebp - 0x58], 0
jne 0x10038ac4
and dword [ebp - 0x1bc], 0
jmp 0x10038ace
mov dword [ebp - 0x1bc], 1
mov eax, dword [ebp - 0x1bc]
mov dword [ebp - 0xfc], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x34]
cmp eax, dword [ebp - 0x58]
cmp dword [ebp - 0x24], 0xffffffff
jne 0x10038af9
mov dword [ebp - 0x1c4], 1
jmp 0x10038b00
and dword [ebp - 0x1c4], 0
mov eax, dword [ebp - 0x24]
cmp dword [ebp - 0x1c4], eax
je 0x10038b17
mov dword [ebp - 0x1cc], 1
jmp 0x10038b1e
and dword [ebp - 0x1cc], 0
mov eax, dword [ebp - 0x1cc]
add eax, 0x4bab92a1
mov dword [ebp - 0x64], eax
mov eax, dword [ebp - 0x24]
cmp eax, dword [ebp - 0x64]
jge 0x10038b40
mov dword [ebp - 0x1d4], 1
jmp 0x10038b47
and dword [ebp - 0x1d4], 0
mov eax, dword [ebp - 0x1d4]
sub eax, 0xe98c
jne 0x10038b64
push 0xfffffffffffffffe
pop eax
test eax, eax
jne 0x10038b64
and dword [ebp - 0x1dc], 0
jmp 0x10038b6e
mov dword [ebp - 0x1dc], 1
cmp dword [ebp - 0x1dc], 8
jle 0x10038b83
mov dword [ebp - 0x1e4], 1
jmp 0x10038b8a
and dword [ebp - 0x1e4], 0
cmp dword [ebp - 0x1e4], 0x18cc
jg 0x10038ba2
mov dword [ebp - 0x1ec], 1
jmp 0x10038ba9
and dword [ebp - 0x1ec], 0
mov eax, dword [ebp - 0x20c]
cmp dword [ebp - 0x1ec], eax
jne 0x10038bc3
mov dword [ebp - 0x1f4], 1
jmp 0x10038bca
and dword [ebp - 0x1f4], 0
mov eax, dword [ebp - 0x24]
cmp dword [ebp - 0x1f4], eax
jl 0x10038be1
mov dword [ebp - 0x1fc], 1
jmp 0x10038be8
and dword [ebp - 0x1fc], 0
mov eax, dword [ebp - 0xfc]
cmp eax, dword [ebp - 0x1fc]
jge 0x10038c02
mov dword [ebp - 0x204], 1
jmp 0x10038c09
and dword [ebp - 0x204], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x34]
cmp eax, dword [ebp - 0x204]
je 0x10038c27
mov dword [ebp - 0x324], 1
jmp 0x10038c2e
and dword [ebp - 0x324], 0
mov eax, dword [ebp - 0x20c]
mov dword [ebp - 0x4e4], eax
mov eax, dword [ebp - 0x24]
mov dword [ebp - 0x4ec], eax
mov eax, dword [ebp - 0x58]
mov dword [ebp - 0x4b8], eax
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x34], 0
je 0x10038c6b
cmp dword [ebp - 0x58], 0
je 0x10038c6b
mov dword [ebp - 0x214], 1
jmp 0x10038c72
and dword [ebp - 0x214], 0
mov eax, dword [ebp - 0x24]
cmp eax, dword [ebp - 0x214]
je 0x10038c89
mov dword [ebp - 0x21c], 1
jmp 0x10038c90
and dword [ebp - 0x21c], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x34]
cmp dword [ebp - 0x21c], eax
jge 0x10038cae
mov dword [ebp - 0x224], 1
jmp 0x10038cb5
and dword [ebp - 0x224], 0
mov eax, dword [ebp - 0xfc]
cmp dword [ebp - 0x24], 0
jne 0x10038ccd
mov dword [ebp - 0x22c], 1
jmp 0x10038cd4
and dword [ebp - 0x22c], 0
mov eax, dword [ebp - 0x22c]
mov dword [ebp - 0x10c], eax
lea eax, [ebp - 0x4c0]
push eax
lea ecx, [ebp - 0x464]
call fcn.10004361
push dword [eax]
lea eax, [ebp - 0x474]
push eax
lea ecx, [ebp - 0x464]
call fcn.10004375
push dword [eax]
lea eax, [ebp - 0x4d8]
push eax
lea ecx, [ebp - 0x464]
call fcn.10004361
push dword [eax]
mov edx, 0x1002899a
lea ecx, [ebp - 0x47c]
call fcn.10039ebc
add esp, 0xc
mov dword [ebp - 0xf8], 0x4615
mov dword [ebp - 0x234], 0xacde9e84
mov dword [ebp - 0x4c8], 0xf628
mov dword [ebp - 0x100], 0x78ac
mov dword [ebp - 0x26c], 0xfffffffe
mov dword [ebp - 0x334], 0xffffffff
mov dword [ebp - 0x488], 4
mov dword [ebp - 0x264], 0
mov dword [ebp - 0x4e8], 0x642e40c1
mov dword [ebp - 0x104], 0
mov dword [ebp - 0x32c], 0xfffc
mov dword [ebp - 0x80], 0
jmp 0x10038dad
mov eax, dword [ebp - 0x80]
inc eax
mov dword [ebp - 0x80], eax
cmp dword [ebp - 0x80], 3
jge 0x10038dc3
mov eax, dword [ebp - 0x80]
mov dword [ebp + eax*4 - 0x4ac], 1
jmp 0x10038da6
cmp dword [ebp - 0xf8], 0
je 0x10038eec
mov eax, dword [ebp - 0x104]
dec eax
mov dword [ebp - 0x104], eax
jne 0x10038df4
imul eax, dword [ebp - 0x100], 0xfffffff6
cmp eax, 7
ja 0x10038df4
and dword [ebp - 0xf4], 0
jmp 0x10038dfe
mov dword [ebp - 0xf4], 1
mov eax, dword [ebp - 0xf8]
mov dword [ebp - 0x234], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0xf4]
mov dword [ebp + eax - 0x4ac], ecx
mov eax, dword [ebp - 0x234]
cmp eax, dword [ebp - 0xf4]
je 0x10038e37
mov dword [ebp - 0x23c], 1
jmp 0x10038e3e
and dword [ebp - 0x23c], 0
mov eax, dword [ebp - 0xf8]
cmp eax, dword [ebp - 0x23c]
jge 0x10038e50
xor eax, eax
je 0x10038e65
cmp dword [ebp - 0x100], 0
je 0x10038e65
mov dword [ebp - 0x244], 1
jmp 0x10038e6c
and dword [ebp - 0x244], 0
mov eax, dword [ebp - 0x32c]
cmp dword [ebp - 0x244], eax
jge 0x10038e86
mov dword [ebp - 0x24c], 1
jmp 0x10038e8d
and dword [ebp - 0x24c], 0
cmp dword [ebp - 0x24c], 0x4acc
jge 0x10038ea5
mov dword [ebp - 0x254], 1
jmp 0x10038eac
and dword [ebp - 0x254], 0
mov eax, dword [ebp - 0x100]
add eax, dword [ebp - 0x254]
je 0x10038edf
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x4ac], 0
je 0x10038edf
cmp dword [ebp - 0x264], 0
je 0x10038edf
mov dword [ebp - 0x25c], 1
jmp 0x10038ee6
and dword [ebp - 0x25c], 0
mov eax, dword [ebp - 0x26c]
mov eax, dword [ebp - 0x334]
mov dword [ebp - 0x490], eax
mov eax, dword [ebp - 0x264]
mov dword [ebp - 0x4d0], eax
mov dword [ebp - 0x26c], 6
lea edx, [ebp - 0x464]
lea ecx, [ebp - 0x44c]
call fcn.10039f79
movzx eax, al
test eax, eax
je 0x10038fd4
mov dword [ebp - 0x33c], 0xfffb
mov dword [ebp - 0x88], 0
jmp 0x10038f4d
mov eax, dword [ebp - 0x88]
inc eax
mov dword [ebp - 0x88], eax
cmp dword [ebp - 0x88], 2
jge 0x10038f69
mov eax, dword [ebp - 0x88]
mov dword [ebp + eax*4 - 0x484], 0xd59e57ad
jmp 0x10038f40
mov eax, dword [ebp - 0x33c]
push 4
pop ecx
shl ecx, 0
mov dword [ebp + ecx - 0x484], eax
push 1
push 0x2cb7
push 1
push 0
push 0x6f15
push 0x2077
call fcn.1002b5be
add esp, 0x18
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x140]
mov edx, dword [ebp - 0x108]
mov eax, dword [edx + eax + 0x10]
mov dword [ecx], eax
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x464]
call fcn.10004357
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x44c]
call fcn.10004357
jmp 0x100394f3
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x464]
call fcn.10004357
jmp 0x10038126
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x44c]
call fcn.10004357
mov dword [ebp - 0x38], 0x46dd
mov dword [ebp - 0x18], 9
mov dword [ebp - 0x1c], 0x4be3d0e7
mov dword [ebp - 0x35c], 0x8faa83fb
mov dword [ebp - 0x390], 1
mov dword [ebp - 0x90], 0
jmp 0x10039039
mov eax, dword [ebp - 0x90]
inc eax
mov dword [ebp - 0x90], eax
cmp dword [ebp - 0x90], 3
jge 0x10039055
mov eax, dword [ebp - 0x90]
mov dword [ebp + eax*4 - 0x41c], 0xfffffffe
jmp 0x1003902c
cmp dword [ebp - 0x38], 0xad8ea5f3
jb 0x1003906a
mov dword [ebp - 0x344], 1
jmp 0x10039071
and dword [ebp - 0x344], 0
mov eax, dword [ebp - 0x18]
cmp eax, dword [ebp - 0x18]
jg 0x10039088
cmp dword [ebp - 0x18], 0
jne 0x10039088
and dword [ebp - 0x274], 0
jmp 0x10039092
mov dword [ebp - 0x274], 1
mov eax, dword [ebp - 0x18]
cmp dword [ebp - 0x274], eax
jl 0x100390a9
mov dword [ebp - 0x27c], 1
jmp 0x100390b0
and dword [ebp - 0x27c], 0
mov eax, dword [ebp - 0x18]
cmp dword [ebp - 0x27c], eax
jne 0x100390c7
mov dword [ebp - 0x284], 1
jmp 0x100390ce
and dword [ebp - 0x284], 0
cmp dword [ebp - 0x284], 0xbebf
jge 0x100390e9
cmp dword [ebp - 0x18], 0
jne 0x100390e9
and dword [ebp - 0x34c], 0
jmp 0x100390f3
mov dword [ebp - 0x34c], 1
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x498], eax
mov eax, dword [ebp - 0x18]
cmp eax, dword [ebp - 0x1c]
je 0x10039110
mov dword [ebp - 0x28c], 1
jmp 0x10039117
and dword [ebp - 0x28c], 0
mov eax, dword [ebp - 0x28c]
sub eax, 0x18d3cb34
cmp eax, 8
jne 0x10039133
mov dword [ebp - 0x294], 1
jmp 0x1003913a
and dword [ebp - 0x294], 0
cmp dword [ebp - 0x294], 0x9fe9
jne 0x10039155
cmp dword [ebp - 0x18], 0
jne 0x10039155
and dword [ebp - 0x29c], 0
jmp 0x1003915f
mov dword [ebp - 0x29c], 1
mov eax, dword [ebp - 0x38]
cmp eax, dword [ebp - 0x29c]
je 0x10039176
mov dword [ebp - 0x2a4], 1
jmp 0x1003917d
and dword [ebp - 0x2a4], 0
mov eax, dword [ebp - 0x1c]
cmp dword [ebp - 0x2a4], eax
je 0x10039194
mov dword [ebp - 0x354], 1
jmp 0x1003919b
and dword [ebp - 0x354], 0
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0x4b4], eax
mov eax, dword [ebp - 0x38]
mov dword [ebp - 0x4a0], eax
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0x2ac], eax
push 4
pop eax
shl eax, 1
mov ecx, dword [ebp - 0x2ac]
mov dword [ebp + eax - 0x41c], ecx
cmp dword [ebp - 0x2ac], 0
je 0x100391e4
push 7
pop eax
test eax, eax
je 0x100391e4
mov dword [ebp - 0x120], 1
jmp 0x100391eb
and dword [ebp - 0x120], 0
cmp dword [ebp - 0x120], 0x5ad3
jne 0x10039203
mov dword [ebp - 0x128], 1
jmp 0x1003920a
and dword [ebp - 0x128], 0
mov eax, dword [ebp - 0x1c]
cmp dword [ebp - 0x128], eax
jg 0x10039224
cmp dword [ebp - 0x1c], 0
jne 0x10039224
and dword [ebp - 0x130], 0
jmp 0x1003922e
mov dword [ebp - 0x130], 1
mov eax, dword [ebp - 0x35c]
imul eax, dword [ebp - 0x130]
cmp eax, 0x2c21
jge 0x1003943b
mov byte [ebp - 0x3b], 0
movzx eax, byte [ebp - 0x3b]
test eax, eax
je 0x100393bc
mov dword [ebp - 0x138], 0x17dd
mov dword [ebp - 0x364], str.thka_ooucx_yrwuafqqo_nsj_fqvrofe_jsuxz_hjuy_qgrqfrpd_wdogpwb_trcasxsw_kgd_rxqledzhs_skxsjjyc
cmp dword [ebp - 0x138], 0x1987
jle 0x10039358
and dword [ebp - 0xb0], 0
jmp 0x10039290
mov eax, dword [ebp - 0xb0]
inc eax
mov dword [ebp - 0xb0], eax
cmp dword [ebp - 0xb0], 0x704d
jge 0x10039358
and dword [ebp - 0x98], 0
jmp 0x100392b6
mov eax, dword [ebp - 0x98]
inc eax
mov dword [ebp - 0x98], eax
cmp dword [ebp - 0x98], 0x4a94
jge 0x10039353
and dword [ebp - 0xa0], 0
jmp 0x100392dc
mov eax, dword [ebp - 0xa0]
inc eax
mov dword [ebp - 0xa0], eax
cmp dword [ebp - 0xa0], 0x78d9
jge 0x1003934e
and dword [ebp - 0xa8], 0
jmp 0x100392fe
mov eax, dword [ebp - 0xa8]
inc eax
mov dword [ebp - 0xa8], eax
cmp dword [ebp - 0xa8], 0x9eb
jge 0x1003934c
mov eax, dword [ebp - 0x98]
cdq
idiv dword [ebp - 0xa0]
sub edx, dword [ebp - 0xa8]
mov eax, dword [ebp - 0xb0]
mov ecx, edx
sar eax, cl
cdq
mov dword [ebp - 0x3e8], eax
mov dword [ebp - 0x3e4], edx
push dword [ebp - 0x3e4]
push dword [ebp - 0x3e8]
mov ecx, 0x10073018
call fcn.1000421d
jmp 0x100392f1
jmp 0x100392cf
jmp 0x100392a9
jmp 0x10039283
push 0x2358
push 0
push 0x4a69
push 0x1712
push 1
call fcn.1002d444
add esp, 0x14
mov dword [ebp - 4], 0xc
cmp dword [ebp - 0x138], 0x1713
jge 0x10039396
mov edx, dword [ebp - 0x364]
mov ecx, 0x10073018
call fcn.100065e2
jmp 0x100393b2
or dword [ebp - 4], 0xffffffff
jmp 0x100393bc
mov dword [ebp - 0x1c], 0
jmp 0x100393cc
mov eax, dword [ebp - 0x1c]
inc eax
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 2
jg 0x10039436
mov dword [ebp - 0x18], 0
jmp 0x100393e2
mov eax, dword [ebp - 0x18]
inc eax
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 2
jg 0x10039425
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp + eax*4 - 0x41c]
mov ecx, dword [ebp - 0x1c]
mov dword [ebp + ecx*4 - 0x41c], eax
push 0x4fa4
push 0xc4c
push 0
push 0x2071
push 0x6b9a
push 0x3b88
push 1
push 0
call fcn.10036dfb
add esp, 0x20
jmp 0x100393db
mov eax, dword [ebp - 0x1c]
cmp dword [ebp + eax*4 - 0x41c], 0
je 0x10039434
jmp 0x100393c5
jmp 0x100393c5
jmp 0x100394d8
mov dword [ebp - 0x374], 0xfffffff9
mov dword [ebp - 0x38], 0
jmp 0x10039455
mov eax, dword [ebp - 0x38]
inc eax
mov dword [ebp - 0x38], eax
cmp dword [ebp - 0x38], 0x37
jle 0x100394b0
mov dword [ebp - 0x36c], 0xfffffff9
push 1
lea eax, [ebp - 0x36c]
push eax
push 1
push 0x13ef
push 0
push 0x146d
lea eax, [ebp - 0x374]
push eax
call fcn.1002d699
add esp, 0x1c
mov byte [ebp - 0x41], 0
push 0xb14
lea eax, [ebp - 0x41]
push eax
push 0
push 1
push 0x3b06
push 0x4354
call fcn.1002b50c
add esp, 0x18
jmp 0x1003944e
push 0x18c7
lea eax, [ebp - 0x390]
push eax
push 1
push 0x3615
lea eax, [ebp - 0x38]
push eax
push 0x5ff8
push 1
push 0
call fcn.10036dfb
add esp, 0x20
mov eax, dword [ebp - 0x140]
and dword [eax], 0
jmp 0x100394f3
jmp 0x100394f3
push 0x60a3
push 0
call fcn.10039573
pop ecx
pop ecx
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret