Function at 0x1001a7a0
Capabilities:
Connect pipe
Get disk information
Get thread local storage value
Query or enumerate registry value

Disassembly:
mov eax, 0x100617b0
call fcn.10060810
sub esp, 0x698
push ebx
push esi
push edi
mov dword [ebp - 0x10], esp
lea ecx, [ebp - 0x380]
push 3
pop edi
mov dword [ebp - 0x2c], 0x5568
mov dword [ebp - 0x2c], 0x693
push edi
call fcn.1000f280
xor ebx, ebx
mov dword [ebp - 4], ebx
mov dword [ebp - 0x20], ebx
jmp 0x1001a7ee
mov eax, dword [ebp - 0x20]
mov dword [ebp + eax*4 - 0x6a4], 0xfffffff6
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], 4
jl 0x1001a7dd
mov dword [ebp - 0x20], ebx
jmp 0x1001a808
mov ecx, dword [ebp - 0x20]
mov eax, dword [ebp - 0x380]
mov dword [eax + ecx*4], ebx
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], edi
jl 0x1001a7f9
lea eax, [ebp - 0x380]
xor dl, dl
push eax
push 0x23fc
push 1
push 0x7733
push 0x496f
push 0x1e57
push 0x2662
push ebx
push 0x43ae
mov ecx, 0x2f91
call fcn.100166c9
add esp, 0x24
lea ecx, [ebp - 0x380]
or esi, 0xffffffff
mov dword [ebp - 4], esi
call fcn.1000f303
xor ecx, ecx
inc ecx
mov dword [ebp - 0x24], ecx
mov dword [ebp - 0x3c], ecx
mov dword [ebp - 0x2c], 0xec1fcc8a
mov dword [ebp - 0x1c], ebx
jmp 0x1001a874
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0x58], ecx
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], ecx
jl 0x1001a86a
mov dword [ebp - 0x58], 0xfffffff3
cmp dword [ebp - 0x58], 0x16
jl 0x1001a95b
push edi
lea ecx, [ebp - 0x24c]
call fcn.1000f280
push 0x5b97
push 0x3629
xor eax, eax
lea ecx, [ebp - 0x40c]
push ecx
inc eax
lea ecx, [ebp - 0x24c]
push eax
push 0x95
mov dword [ebp - 4], eax
mov dl, al
push 0x1082
push ecx
mov dword [ebp - 0x24], 5
mov cl, al
mov dword [ebp - 0x24], 0xfffffffd
call fcn.10016dab
mov eax, dword [ebp - 0x58]
xor ecx, ecx
add esp, 0x1c
cmp eax, 0x11330640
setne cl
mov dword [ebp - 0x24], ecx
mov eax, dword [ebp - 0x58]
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0x58]
mov dword [ebp - 0x24], 0xfffffffd
mov ecx, dword [ebp - 0x24]
mov eax, dword [ebp - 0x24c]
mov eax, dword [eax]
sub eax, ecx
xor ecx, ecx
test eax, eax
setg cl
cmp ecx, 9
sbb eax, eax
neg eax
mov dword [ebp - 0x24], eax
mov ecx, dword [ebp - 0x24]
imul ecx, dword [ebp - 0x58]
mov eax, dword [ebp - 0x24c]
sub ecx, dword [eax]
neg ecx
sbb ecx, ecx
inc ecx
sub ecx, 0xee737b5
mov dword [ebp - 0x3c], ecx
lea ecx, [ebp - 0x24c]
mov dword [ebp - 4], esi
jne 0x1001a953
call fcn.1000f303
inc dword [ebp - 0x58]
cmp dword [ebp - 0x58], 0x16
jge 0x1001a88a
jmp 0x1001a958
call fcn.1000f303
xor ecx, ecx
inc ecx
mov eax, dword [0x1008182c]
test cl, al
jne 0x1001a999
or eax, ecx
mov dword [0x1008182c], eax
mov dword [ebp - 4], 2
mov dword [0x10081824], ebx
mov dword [0x10081828], ebx
call fcn.1002055d
push 0x10062a5e
mov dword [0x10081824], eax
call fcn.10049df9
pop ecx
xor ecx, ecx
mov dword [ebp - 4], esi
inc ecx
cmp byte [0x1008175c], 0
je 0x1001ab22
mov dword [ebp - 0x30], ecx
mov dword [ebp - 0x48c], esi
mov dword [ebp - 0x488], esi
mov dword [ebp - 0x484], esi
mov dword [ebp - 0x480], esi
mov dword [ebp - 0x1c], ebx
jmp 0x1001a9d7
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0xa8], 0x2e77e815
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], ecx
jl 0x1001a9c6
push 0x4521
push ecx
push ecx
push 0x56a4
xor dl, dl
mov ecx, 0x46eb
call fcn.1001842e
add esp, 0x10
mov dword [ebp - 0x30], ebx
jmp 0x1001ab13
push ecx
push ebx
mov dword [ebp - 0x20], 0x7adf
mov ecx, 0x1ace
mov dword [ebp - 0x1c], ebx
push 0x5ef8
call fcn.10017f4b
add esp, 0xc
cmp dword [ebp - 0x30], ebx
je 0x1001aa44
mov byte [ebp - 0x35], bl
cmp byte [ebp - 0x35], 0
je 0x1001ab10
push ecx
push ecx
mov edx, 0x1a61
xor cl, cl
call fcn.10016047
pop ecx
pop ecx
jmp 0x1001ab10
mov dword [ebp - 0x18], 2
imul eax, dword [ebp - 0x18], 0xec79
test eax, eax
je 0x1001aa9f
mov eax, dword [ebp - 0x20]
xor edx, edx
mov eax, dword [ebp - 0x30]
mov ecx, dword [ebp - 0x18]
mov eax, dword [ebp - 0xa8]
cmp ecx, eax
setge dl
cmp edx, dword [ebp - 0xa8]
je 0x1001aa79
cmp dword [ebp - 0x20], ebx
je 0x1001aa83
cmp dword [ebp - 0x18], ebx
je 0x1001aa83
xor ecx, ecx
inc ecx
jmp 0x1001aa85
mov ecx, ebx
mov eax, dword [ebp - 0x20]
push 5
pop eax
cmp eax, ecx
sbb eax, eax
inc eax
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0xa8]
mov ecx, dword [ebp - 0xa8]
neg ecx
sbb ecx, ecx
xor eax, eax
neg ecx
cmp ecx, 0x2a41b870
setge al
mov dword [ebp - 0xa8], eax
mov dword [ebp - 0x20], ebx
jmp 0x1001ab0b
mov byte [ebp - 0x35], bl
cmp byte [ebp - 0x35], 0
je 0x1001aae0
push ecx
push 0x2ec3
push ecx
push 1
mov ecx, 0x313f
call fcn.100135bb
add esp, 0x10
mov dword [ebp - 0x1c], ebx
cmp dword [ebp - 0x1c], ebx
jl 0x1001ab08
push 0x1997
push 0x756d
push ecx
mov byte [ebp - 0x78], bl
lea ecx, [ebp - 0x78]
xor dl, dl
call fcn.10017c6d
add esp, 0xc
dec dword [ebp - 0x1c]
jns 0x1001aae8
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], ebx
jle 0x1001aac1
dec dword [ebp - 0x30]
cmp dword [ebp - 0x30], 0xfffffffd
jle 0x1001a9ff
jmp 0x1001e045
mov dword [ebp - 0x20], 0x60b4ffb8
mov dword [ebp - 0x1c], ebx
jmp 0x1001ab3f
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0x138], 8
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], ecx
jl 0x1001ab2e
mov dword [ebp - 0x24], 0x7dcb
cmp dword [ebp - 0x24], 0x7de3
jle 0x1001ab8f
push 0x1e45
call dword [sym.imp.KERNEL32.dll_TlsGetValue]
mov esi, ebx
mov edi, ebx
mov eax, edi
mov ecx, 0x1007d358
and eax, esi
cdq
push edx
push eax
call fcn.1000ef91
inc edi
cmp edi, 0x1003
jl 0x1001ab63
inc esi
cmp esi, 0x58a8
jl 0x1001ab61
xor ecx, ecx
push 3
inc ecx
or esi, 0xffffffff
pop edi
mov dword [ebp - 0x20], ebx
cmp dword [ebp - 0x20], ebx
jl 0x1001aba4
call fcn.10017d5e
dec dword [ebp - 0x20]
push 1
pop ecx
jns 0x1001ab97
mov dword [ebp - 4], edi
cmp dword [ebp - 0x24], 0x7a98
jge 0x1001abbf
mov edx, str.tom_aqb_qgyj_qaptxhgf
mov ecx, 0x1007d358
call fcn.10011e0c
mov dword [ebp - 4], esi
push 5
pop esi
mov dword [ebp - 0x20], 0x11
jmp 0x1001ac2d
mov dword [ebp - 0x1c], ebx
jmp 0x1001ac03
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0x60], 0x4ab274bf
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 1
jl 0x1001abf5
mov dword [ebp - 0x60], ebx
jmp 0x1001ac25
mov eax, dword [ebp - 0x60]
mov ecx, dword [ebp + eax*4 - 0x138]
mov eax, dword [ebp - 0x60]
mov dword [ebp + eax*4 - 0x138], ecx
inc dword [ebp - 0x60]
cmp dword [ebp - 0x60], ebx
jle 0x1001ac0e
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], 0x1c
jle 0x1001abf0
push ebx
mov edx, 0x1008175c
call fcn.100191d7
pop ecx
push 2
lea ecx, [ebp - 0x280]
mov dword [ebp - 0xb4], 0x10079af0
call fcn.1000f280
mov dword [ebp - 4], esi
mov dword [ebp - 0x18], 0x3a1
cmp dword [ebp - 0x18], 0x60a
jle 0x1001acc2
mov edi, ebx
mov dword [ebp - 0x24], ebx
mov esi, ebx
mov eax, esi
mov dword [ebp - 0x3c], ebx
and eax, edi
mov dword [ebp - 0x5c], eax
mov edi, eax
mov eax, edi
mov ecx, 0x1007d358
xor eax, ebx
cdq
push edx
push eax
call fcn.1000ef91
inc ebx
cmp ebx, 0x7fe4
jl 0x1001ac7c
mov edi, dword [ebp - 0x24]
inc esi
push 0
pop ebx
cmp esi, 0x6c04
jl 0x1001ac70
inc edi
mov dword [ebp - 0x24], edi
cmp edi, 0x14b1
jl 0x1001ac6e
push ebx
push ebx
push ebx
push 0x3ce
call dword [sym.imp.GDI32.dll_CreateEnhMetaFileW]
push 5
pop esi
mov dword [ebp - 0x80], 0xeaa32b1c
mov byte [ebp - 4], 6
cmp dword [ebp - 0x18], 0x79
jge 0x1001ad03
mov edx, str.xke_gzhdjvqhr_kcxvube_nbg_jnnfc_bxynixeu_jyeauiaub_yqcvyz_hegl_augwrbz_lnfbyxqkp_tzavlcisa_hbjvczz
mov ecx, 0x1007d358
call fcn.10011e0c
jmp 0x1001ad03
push 0xfffffffffffffff6
mov dword [ebp - 4], esi
lea eax, [ebp - 0x280]
pop esi
push eax
lea eax, [ebp - 0x4a8]
mov dword [ebp - 0x250], 3
push eax
push 0x5ab4
push ecx
push ecx
xor cl, cl
call fcn.100147bb
add esp, 0x14
mov dword [ebp - 0x80], ebx
jmp 0x1001ad9c
push 0x1479
lea eax, [ebp - 0x250]
mov dword [ebp - 0x1bc], 1
push eax
lea eax, [ebp - 0x184]
mov dword [ebp - 0x184], 0x64f16efa
push eax
push ecx
lea eax, [ebp - 0x280]
push eax
push 1
push 0x2fdf
lea ecx, [ebp - 0x1bc]
call fcn.10017def
add esp, 0x1c
lea eax, [ebp - 0x80]
push 0x8d2
push eax
lea eax, [ebp - 0x280]
push eax
push 0x511c
push ebx
call fcn.1001809e
add esp, 0x14
inc dword [ebp - 0x80]
cmp dword [ebp - 0x80], 1
jle 0x1001ad37
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x280]
call fcn.1000f303
mov dword [ebp - 0xec], ebx
lea ecx, [ebp - 0x49c]
mov dword [ebp - 0x22c], 0xd8da8e97
xor eax, eax
mov dword [ebp - 0x188], 0xffffffff
inc eax
mov dword [ebp - 0x8c], 0x98aaf0a9
mov dword [ebp - 0x23c], eax
mov dword [ebp - 0x204], 0xfffffff8
mov dword [ebp - 0x224], 0xfffffffb
mov dword [ebp - 0x25c], 0xfffffffd
push eax
call fcn.1000f280
mov dword [ebp - 4], 8
mov dword [ebp - 0x214], 0xffffffff
mov dword [ebp - 0x20c], 0xaac1
mov dword [ebp - 0x21c], 0xef13550e
mov dword [ebp - 0x234], 0xf54ab100
mov dword [ebp - 0x1c], ebx
jmp 0x1001ae4f
mov ecx, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x49c]
mov dword [eax + ecx*4], 9
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 1
jl 0x1001ae3c
lea eax, [ebp - 0x204]
push eax
push 0x7d4
push ecx
push ecx
lea eax, [ebp - 0x20c]
push eax
push ecx
lea eax, [ebp - 0x214]
push eax
push ecx
lea eax, [ebp - 0x21c]
push eax
push 1
lea eax, [ebp - 0x224]
push eax
lea eax, [ebp - 0x22c]
push eax
lea eax, [ebp - 0x234]
push eax
lea eax, [ebp - 0x8c]
push eax
lea eax, [ebp - 0x23c]
push eax
push ecx
lea edx, [ebp - 0x25c]
lea ecx, [ebp - 0x188]
call fcn.10017e9a
add esp, 0x40
mov dword [ebp - 0x8c], 0xfffffffb
jmp 0x1001aedb
lea eax, [ebp - 0x254]
mov dword [ebp - 0x254], esi
push eax
mov cl, 1
call fcn.10013500
inc dword [ebp - 0x8c]
pop ecx
cmp dword [ebp - 0x8c], 0x17
jne 0x1001aec0
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x49c]
call fcn.1000f303
push 0xc
pop edx
mov dword [ebp - 0xcc], edx
cmp edx, 0xe0
jge 0x1001b21a
mov dword [ebp - 0x2c], 0x185299da
mov dword [ebp - 0x2c], 0xfffffffa
mov dword [ebp - 0x2c], 0x5ab3e90a
mov dword [ebp - 0x24], 0x6ca7
cmp dword [ebp - 0x24], 0x6ff7
jle 0x1001af74
mov edi, ebx
mov esi, ebx
mov eax, esi
lea ecx, [ebp - 0x5e8]
xor eax, edi
cdq
push edx
push eax
call fcn.10001acf
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x1001af4d
mov eax, dword [eax]
push eax
call fcn.10049e23
pop ecx
push ebx
push 1
lea ecx, [ebp - 0x5e8]
call fcn.1000fa8e
inc esi
cmp esi, 0x5e09
jl 0x1001af31
inc edi
cmp edi, 0x6ced
jl 0x1001af2f
mov dword [ebp - 0x2c], 0xffffffff
cmp dword [ebp - 0x24], 0x6ba8
jge 0x1001af8f
push str.zrmg_svndkszzx_xevduhfyi_qltocr_zkty_qulhlfow_iane_nxzfxz
call fcn.10049e23
pop ecx
or dword [ebp - 4], 0xffffffff
mov dword [ebp - 0x1c], 0x3e30
cmp dword [ebp - 0x1c], 0x4028
jle 0x1001b002
mov edi, ebx
mov dword [ebp - 0x18], ebx
mov esi, ebx
mov dword [ebp - 0x3c], edi
mov dword [ebp - 0x24], 0x19d
mov eax, edi
lea ecx, [ebp - 0x63c]
cdq
push edx
push eax
call fcn.10001acf
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x1001afce
mov eax, dword [eax]
push eax
call fcn.10049e23
pop ecx
push ebx
push 1
lea ecx, [ebp - 0x63c]
call fcn.1000fa8e
add edi, esi
dec dword [ebp - 0x24]
jne 0x1001afb4
mov edi, dword [ebp - 0x18]
dec esi
cmp esi, 0xffffbb95
jg 0x1001afaa
inc edi
mov dword [ebp - 0x18], edi
cmp edi, 0x7f5b
jl 0x1001afa8
mov dword [ebp - 0x2c], 0xfffffffd
cmp dword [ebp - 0x1c], 0x3dbb
jge 0x1001b01d
push str.hsmbgn_cdw_rqrlb_pipzg_erdvdb_crkticzs_yxrarp_qxrqui_ryuq
call fcn.10049e23
pop ecx
or dword [ebp - 4], 0xffffffff
xor ecx, ecx
mov dword [ebp - 0x2c], 0xfffffffd
inc ecx
mov dword [ebp - 0x2c], ecx
mov dword [ebp - 0x20], ebx
jmp 0x1001b044
mov eax, dword [ebp - 0x20]
mov dword [ebp + eax*4 - 0x4a0], 4
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], ecx
jl 0x1001b033
mov dword [ebp - 0x20], ebx
jmp 0x1001b05f
mov eax, dword [ebp - 0x20]
mov dword [ebp + eax*4 - 0x530], 0xffffffff
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], 2
jl 0x1001b04e
mov dword [ebp - 0x20], ebx
jmp 0x1001b077
mov eax, dword [ebp - 0x20]
mov dword [ebp + eax*4 - 0x14c], ebx
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], ecx
jl 0x1001b06a
inc dword [ebp - 0x14c]
mov ecx, dword [ebp - 0xb4]
mov edx, dword [ebp - 0xcc]
mov al, byte [ecx]
cmp al, byte [edx + ecx]
je 0x1001b09b
inc edx
jmp 0x1001aef6
push 2
lea ecx, [ebp - 0x428]
call fcn.1000f280
push 0x4e8f
mov dword [ebp - 4], 0xd
lea eax, [ebp - 0x450]
push ebx
mov dword [ebp - 0x1c], 0x4cd4536
lea edx, [ebp - 0x428]
push eax
mov dword [ebp - 0x2c], 0x3111738a
mov ecx, 0x7c29
mov dword [ebp - 0x2c], 0x8d0d3f7b
push 1
mov dword [ebp - 0x2c], 0xeb606930
mov dword [ebp - 0x2c], 0xffffffff
push 1
mov dword [ebp - 0x2c], 0x513c61c7
mov dword [ebp - 0x1f0], 0x66a07563
push 0x2e30
call fcn.10014f46
add esp, 0x18
mov dword [ebp - 0x1c], ebx
jmp 0x1001b16d
lea eax, [ebp - 0x63]
mov dword [ebp - 0x2c], 0xfffffffc
mov byte [ebp - 0x63], bl
push eax
call fcn.1001910a
pop ecx
push 1
push 0x347e
push 0x14d7
push 0x1d32
push 0x17cc
push ebx
push ebx
push 0x39e6
push 0x4804
push 0x6a36
push 0x4cdd
lea eax, [ebp - 0x1f0]
mov ecx, 0x4a7b
push eax
push 0x63d5
call fcn.100168ea
add esp, 0x34
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 1
mov dl, 1
jle 0x1001b111
push 0x2330
push ebx
push 0x424e
push 0x5e03
push 0x372f
mov cl, dl
call fcn.10014e14
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x428]
add esp, 0x14
call fcn.1000f303
push ecx
lea eax, [ebp - 0xec]
push 1
push eax
lea ecx, [ebp - 0xcc]
call fcn.10017f4b
mov dword [ebp - 0x3c], 0x71a3
add esp, 0xc
cmp dword [ebp - 0x3c], 0x71bf
jle 0x1001b21a
mov edi, ebx
mov esi, ebx
mov eax, esi
lea ecx, [ebp - 0x564]
or eax, edi
cdq
push edx
push eax
call fcn.10001acf
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x1001b1eb
mov eax, dword [eax]
push eax
call fcn.10049e23
pop ecx
push ebx
push 1
lea ecx, [ebp - 0x564]
call fcn.1000fa8e
inc esi
cmp esi, 0x1113
jl 0x1001b1cf
inc edi
cmp edi, 0x54b
jl 0x1001b1cd
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_ConnectNamedPipe]
mov dword [ebp - 0x30], 0x121d
cmp dword [ebp - 0x30], 0x1511
jle 0x1001b26c
mov esi, ebx
mov dword [ebp - 0x24], esi
mov dword [ebp - 0x18], 0x215e
mov edi, ebx
mov ebx, dword [ebp - 0x24]
mov ecx, edi
mov eax, ebx
shl eax, cl
mov ecx, 0x1007d358
cdq
push edx
push eax
call fcn.1000ef91
inc edi
cmp edi, 0xd0b
jl 0x1001b23b
dec ebx
dec dword [ebp - 0x18]
push 0
mov dword [ebp - 0x24], ebx
pop ebx
jne 0x1001b236
inc esi
cmp esi, 0x3268
jl 0x1001b22c
push 5
mov dword [ebp - 0x1c], 1
mov dword [ebp - 0x1c], ebx
pop esi
jmp 0x1001b2a1
mov dword [ebp - 0x3c], 2
cmp dword [ebp - 0x3c], ebx
jne 0x1001b2a6
push ecx
push ecx
push 1
mov byte [ebp - 0x65], bl
lea edx, [ebp - 0x65]
push 0x3943
call fcn.10019e15
add esp, 0x10
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], esi
jne 0x1001b27b
mov dword [ebp - 4], 0x10
cmp dword [ebp - 0x30], 0x11cc
jge 0x1001b2c5
mov edx, str.apzank_hqilz_qghdywi_cwccljep_zhvmxra_nyfbbojxt_jjmcm
mov ecx, 0x1007d358
call fcn.10011e0c
or dword [ebp - 4], 0xffffffff
mov dword [ebp - 0x1a0], 4
lea ecx, [ebp - 0x10c]
mov dword [ebp - 0xbc], 0x10079bd0
mov dword [ebp - 0x48], 0x68ec0ae9
push 3
call fcn.1000f280
mov dword [ebp - 4], 0x12
mov dword [ebp - 0x24], 0x35f19716
mov dword [ebp - 0x5c], 0x5c6a81d6
mov dword [ebp - 0x24], 0x1f02
cmp dword [ebp - 0x24], 0x20a2
jle 0x1001b380
mov ecx, ebx
mov dword [ebp - 0x18], ebx
mov edi, ebx
mov esi, ebx
mov eax, esi
and eax, edi
and eax, ecx
lea ecx, [ebp - 0x588]
cdq
push edx
push eax
call fcn.10001acf
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x1001b33d
mov eax, dword [eax]
push eax
call fcn.10049e23
pop ecx
push ebx
push 1
lea ecx, [ebp - 0x588]
call fcn.1000fa8e
mov ecx, dword [ebp - 0x18]
inc esi
cmp esi, 0x5af4
jl 0x1001b31f
inc edi
cmp edi, 0x57e9
jl 0x1001b31d
inc ecx
mov dword [ebp - 0x18], ecx
cmp ecx, 0x4d1a
jl 0x1001b31b
push ebx
push ebx
push 0x1915
call dword [sym.imp.KERNEL32.dll_OpenFileMappingA]
cmp dword [ebp - 0x24], 0x1b65
jge 0x1001b394
push str.wfuggn_nbsunkrit_aijpxly_sax
call fcn.10049e23
pop ecx
lea eax, [ebp - 0x478]
mov dword [ebp - 4], 0x12
push eax
push 0x183b
push 0x233f
lea eax, [ebp - 0x10c]
push eax
push 1
call fcn.1001809e
add esp, 0x14
lea ecx, [ebp - 0x48]
mov dl, 1
push 0x97d
push 0x4dee
push 0x73c4
push 1
push 1
push 0x397b
call fcn.10018141
add esp, 0x18
mov dword [ebp - 0x48], 2
cmp dword [ebp - 0x48], ebx
jl 0x1001b54f
mov eax, dword [ebp - 0x10c]
mov dword [ebp - 0x3c], eax
mov dword [ebp - 0x24], 3
mov dword [ebp - 0x24], 0x629c4ddb
mov dword [ebp - 0x24], ebx
mov dword [ebp - 0x24], 0xffffffff
mov dword [ebp - 0x1c], ebx
jmp 0x1001b44e
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0x4d4], 0xca4f0670
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 3
jl 0x1001b43d
mov ecx, dword [ebp - 0x48]
mov eax, dword [ebp - 0x10c]
mov eax, dword [eax + ecx*4]
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], ebx
je 0x1001b47b
mov ecx, dword [ebp - 0x48]
mov eax, dword [ebp - 0x10c]
cmp dword [eax + ecx*4], ebx
je 0x1001b47b
xor edi, edi
inc edi
jmp 0x1001b47d
mov edi, ebx
mov dword [ebp - 0x24], 0x273d5943
xor edx, edx
mov ecx, dword [ebp - 0x48]
mov eax, dword [ebp - 0x10c]
cmp dword [eax + ecx*4], 1
mov eax, dword [ebp - 0x48]
setg dl
xor ecx, ecx
cmp edx, eax
setl cl
imul eax, ecx, 0xfff7
test eax, eax
jne 0x1001b4b3
cmp dword [ebp - 0x24], ebx
jne 0x1001b4b3
mov eax, ebx
jmp 0x1001b4b6
xor eax, eax
inc eax
mov ecx, dword [ebp - 0x3c]
xor edx, edx
mov esi, dword [ebp - 0x48]
cmp eax, dword [ecx + 4]
mov eax, dword [ebp - 0x10c]
setl dl
xor ecx, ecx
cmp edx, dword [eax + esi*4]
setl cl
mov dword [ebp - 0x24], ecx
cmp dword [ebp - 0x24], ebx
je 0x1001b4e4
cmp dword [ebp - 0x48], ebx
je 0x1001b4e4
xor esi, esi
inc esi
jmp 0x1001b4e6
mov esi, ebx
mov eax, dword [ebp - 0x48]
xor edx, edx
mov ecx, dword [ebp - 0x10c]
cmp dword [ecx + eax*4], esi
setle dl
add edx, dword [ecx]
mov dword [ebp - 0x4d0], edx
mov ecx, dword [ebp - 0x48]
mov eax, dword [ebp - 0x10c]
mov eax, dword [eax + ecx*4]
imul eax, edx
mov dword [ebp - 0x24], eax
mov edx, dword [ebp - 0x48]
mov esi, dword [ebp - 0x48]
mov eax, dword [ebp - 0x10c]
mov ecx, dword [ebp - 0x24]
imul ecx, dword [eax + edx*4]
xor edx, edx
mov eax, dword [ebp - 0x10c]
cmp dword [eax + esi*4], ecx
setg dl
xor eax, eax
cmp edi, edx
setle al
mov dword [ebp - 0x24], eax
imul eax, dword [ebp - 0x24], 0xffff
mov dword [ebp - 0x5c], eax
dec dword [ebp - 0x48]
jns 0x1001b3fb
or esi, 0xffffffff
lea ecx, [ebp - 0x10c]
mov dword [ebp - 4], esi
call fcn.1000f303
mov al, byte [0x10079bd0]
mov byte [ebp - 0x49], al
mov dword [ebp - 0x98], 0xe83c773
mov dword [ebp - 0x1c], ebx
jmp 0x1001b584
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0x4ec], esi
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 3
jl 0x1001b577
mov dword [ebp - 0x98], 2
cmp dword [ebp - 0x98], ebx
jl 0x1001b5b5
mov eax, dword [ebp - 0x98]
mov dword [ebp + eax*4 - 0x4ec], 0x2bb11acc
dec dword [ebp - 0x98]
jns 0x1001b59c
push 0x2001
push 1
push 1
push 0x6324
mov dl, 1
lea ecx, [ebp - 0x98]
call fcn.1001842e
mov eax, dword [ebp - 0xb4]
add esp, 0x10
mov cl, byte [0x10079bd0]
mov dl, byte [eax]
call fcn.100205b3
mov byte [0x10079bd0], al
lea ecx, [ebp - 0x440]
mov dword [ebp - 0x1c], 0xc75b57fd
push 2
call fcn.1000f280
mov dword [ebp - 4], 0x15
mov dword [ebp - 0x2c], 0xa81d5f49
mov dword [ebp - 0x84], ebx
jmp 0x1001b62c
mov eax, dword [ebp - 0x84]
mov dword [ebp + eax*4 - 0x60c], 0xfffffffb
inc dword [ebp - 0x84]
cmp dword [ebp - 0x84], 3
jl 0x1001b615
lea eax, [ebp - 0x84]
push eax
push 0x2c1c
push ecx
lea edx, [ebp - 0x440]
mov cl, 1
call fcn.1001353e
add esp, 0xc
mov dword [ebp - 0x1c], 0xffffffe6
push 0x3c
pop edi
cmp dword [ebp - 0x1c], 0x1c
jge 0x1001ba98
mov dword [ebp - 0x20], 8
mov dword [ebp - 0x2c], ebx
mov dword [ebp - 0x2c], 2
mov dword [ebp - 0x2c], 0xfffffffc
mov dword [ebp - 0x2c], 0xadf2
mov dword [ebp - 0x2c], esi
mov dword [ebp - 0x2c], ebx
mov dword [ebp - 0x2c], 0xfffffff9
mov dword [ebp - 0x2c], 0xdfa0
mov dword [ebp - 0x2c], 0xc7e318b4
mov dword [ebp - 0x2c], esi
mov dword [ebp - 0x2c], 0xd7ba9668
mov dword [ebp - 0x2c], 0xe19f8c51
mov dword [ebp - 0x18], 0x46d8
cmp dword [ebp - 0x18], 0x47b3
jle 0x1001b705
mov eax, ebx
mov dword [ebp - 0x24], ebx
mov esi, ebx
mov edi, ebx
mov ebx, esi
and ebx, eax
mov eax, edi
mov ecx, 0x1007d358
xor eax, ebx
cdq
push edx
push eax
call fcn.1000ef91
inc edi
cmp edi, 0x5d6b
jl 0x1001b6ce
mov eax, dword [ebp - 0x24]
inc esi
push 0
pop ebx
cmp esi, 0x531c
jl 0x1001b6c8
inc eax
mov dword [ebp - 0x24], eax
cmp eax, 0x57ad
jl 0x1001b6c6
push 0x3c
pop edi
mov dword [ebp - 0x2c], 9
mov byte [ebp - 4], 0x16
mov dword [ebp - 0x3c], 0x249a
cmp dword [ebp - 0x3c], 0x8e4
jge 0x1001b777
lea eax, [ebp - 0x190]
push eax
lea eax, [ebp - 0x140]
push eax
lea eax, [ebp - 0x12c]
push eax
push str._ld:_ld_n_ld
call fcn.10049b3b
mov eax, dword [ebp - 0x140]
add eax, dword [ebp - 0x190]
cdq
idiv edi
push 0x18
add eax, dword [ebp - 0x12c]
mov esi, edx
pop ecx
cdq
idiv ecx
push esi
push edx
push str._02ld:_02ld_n
mov dword [ebp - 0x140], esi
mov dword [ebp - 0x12c], edx
call fcn.10049e23
add esp, 0x1c
cmp dword [ebp - 0x18], 0x443f
jge 0x1001b7b0
mov edx, str.mheqzondi_vrxdabeg_ouvvc_xbwiwffip_fjutldhz_vdlgura_satmvyt_opmovvdc_nfgalanb_soqzt_sdkpjinu
mov ecx, 0x1007d358
call fcn.10011e0c
jmp 0x1001b7b0
push 1
lea ecx, [ebp - 0x44c]
mov dword [ebp - 4], 0x15
or esi, 0xffffffff
call fcn.1000f280
mov byte [ebp - 4], 0x18
mov dword [ebp - 0x28], 0x7d31
cmp dword [ebp - 0x28], 0x7d82
jle 0x1001b93b
mov edx, ebx
mov dword [ebp - 0x18], ebx
mov ecx, ebx
mov dword [ebp - 0x44], ebx
mov eax, ebx
shl edx, cl
mov dword [ebp - 0x24], eax
mov dword [ebp - 0x20], edx
mov edi, ebx
mov dword [ebp - 0x30], ebx
mov ecx, edi
mov dword [ebp - 0x3c], 0x14e4
sar eax, cl
or eax, edx
cmp dword [ebp - 0x3c], 0xffe
cdq
mov ecx, edx
mov dword [ebp - 0x5c], eax
mov dword [ebp - 0x34], ecx
jge 0x1001b8c1
lea eax, [ebp - 0xb0]
push eax
push 0x100699fc
call fcn.10049b3b
imul eax, dword [ebp - 0xb0], 3
cdq
sub eax, edx
sar eax, 1
push eax
push str._ld_n
call fcn.10049e23
mov eax, dword [ebp - 0xb0]
add esp, 0x10
push 2
pop edi
cmp eax, edi
jl 0x1001b86d
push edi
push str._ld
call fcn.10049e23
mov eax, dword [ebp - 0xb0]
add edi, 2
pop ecx
pop ecx
cmp edi, eax
jle 0x1001b853
xor edi, edi
inc edi
cmp eax, edi
jl 0x1001b88e
push edi
push str._ld
call fcn.10049e23
mov eax, dword [ebp - 0xb0]
add edi, 2
pop ecx
pop ecx
cmp edi, eax
jle 0x1001b874
push 2
pop edi
cmp eax, edi
jl 0x1001b8ad
push edi
push str._ld
call fcn.10049e23
add edi, 2
pop ecx
pop ecx
cmp edi, dword [ebp - 0xb0]
jle 0x1001b895
push 0x10069965
call fcn.1004a2e7
mov edi, dword [ebp - 0x30]
mov eax, dword [ebp - 0x5c]
pop ecx
mov ecx, dword [ebp - 0x34]
push ecx
push eax
lea ecx, [ebp - 0x5ac]
call fcn.10001acf
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x1001b8d8
mov eax, dword [eax]
push eax
call fcn.10049e23
pop ecx
push ebx
push 1
lea ecx, [ebp - 0x5ac]
call fcn.1000fa8e
mov eax, dword [ebp - 0x24]
inc edi
mov edx, dword [ebp - 0x20]
mov dword [ebp - 0x30], edi
cmp edi, 0x97d
jl 0x1001b7f8
inc eax
mov dword [ebp - 0x24], eax
cmp eax, 0x7998
jl 0x1001b7f3
mov ecx, dword [ebp - 0x44]
mov edx, dword [ebp - 0x18]
inc ecx
mov dword [ebp - 0x44], ecx
cmp ecx, 0x3a75
jl 0x1001b7e9
inc edx
mov dword [ebp - 0x18], edx
cmp edx, 0x36b6
jl 0x1001b7e4
push 0x3c
pop edi
mov dword [ebp - 0x1f8], 0x46bac6
cmp dword [ebp - 0x28], 0x7ce5
jge 0x1001b959
push str.nao_wjxfdhmxa_prpo_othn_esjdl_sklzeb_gjcveque_vqmvq
call fcn.10049e23
pop ecx
mov dword [ebp - 4], 0x18
mov dword [ebp - 0x30], ebx
jmp 0x1001b978
mov ecx, dword [ebp - 0x30]
mov eax, dword [ebp - 0x44c]
mov dword [eax + ecx*4], 0xe29ac92d
inc dword [ebp - 0x30]
cmp dword [ebp - 0x30], 1
jl 0x1001b965
push ecx
lea eax, [ebp - 0x69]
mov byte [ebp - 0x69], bl
push eax
mov dl, 1
call fcn.10013593
pop ecx
pop ecx
mov dword [ebp - 0x20], ebx
jmp 0x1001ba77
push 1
lea ecx, [ebp - 0x274]
call fcn.1000f280
push 3
lea ecx, [ebp - 0x2cc]
mov byte [ebp - 4], 0x1b
call fcn.1000f280
push 0x2cd6
push 1
push ebx
lea eax, [ebp - 0x274]
mov byte [ebp - 4], 0x1c
push eax
lea eax, [ebp - 0x198]
xor dl, dl
push eax
mov ecx, 0xb0b
call fcn.100142b4
add esp, 0x14
lea eax, [ebp - 0x2cc]
mov edx, 0x1492
push 1
push eax
lea eax, [ebp - 0x198]
push 0x631f
push eax
call fcn.1001368e
mov eax, dword [ebp - 0x274]
add esp, 0x10
mov dword [eax], ebx
mov dword [ebp - 0x30], ebx
jmp 0x1001ba1e
mov eax, dword [ebp - 0x30]
mov dword [ebp + eax*4 - 0x510], 0xf5f996f3
inc dword [ebp - 0x30]
cmp dword [ebp - 0x30], 4
jl 0x1001ba0d
cmp dword [ebp - 0x1c], ebx
jne 0x1001ba4d
cmp dword [ebp - 0x510], ebx
jne 0x1001ba35
mov ecx, ebx
jmp 0x1001ba38
xor ecx, ecx
inc ecx
mov eax, dword [ebp - 0x2cc]
mov dword [eax], ecx
mov eax, dword [ebp - 0x274]
inc dword [eax]
cmp dword [eax], 2
jle 0x1001ba08
push ebx
lea edx, [ebp - 0x1f8]
call fcn.10019cc0
pop ecx
lea ecx, [ebp - 0x2cc]
call fcn.1000f303
lea ecx, [ebp - 0x274]
mov byte [ebp - 4], 0x18
call fcn.1000f303
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], 2
jle 0x1001b997
lea ecx, [ebp - 0x44c]
mov byte [ebp - 4], 0x15
call fcn.1000f303
inc dword [ebp - 0x1c]
jmp 0x1001b65c
lea ecx, [ebp - 0x440]
mov dword [ebp - 4], esi
call fcn.1000f303
xor ecx, ecx
inc ecx
mov dword [ebp - 0x18], ecx
mov dword [ebp - 0x20], 0x42c70bb7
mov dword [ebp - 0x1c], ebx
jmp 0x1001bac9
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0x45c], 8
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 3
jl 0x1001bab8
push 2
mov dword [ebp - 0x20], ebx
pop edx
jmp 0x1001baf9
mov dword [ebp - 0x1c], ebx
mov dword [ebp - 0x1c], ebx
jmp 0x1001baf0
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0x45c], 0x55e00fe1
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 3
jl 0x1001badf
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], edx
jle 0x1001bad7
mov dword [ebp - 0x20], ebx
jmp 0x1001bb12
mov eax, dword [ebp - 0x20]
cmp dword [ebp + eax*4 - 0x45c], ebx
jne 0x1001bb17
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], edx
jle 0x1001bb03
mov edi, dword [ebp - 0xbc]
push 1
push 0x609b
push ecx
mov al, byte [ecx + edi]
mov ecx, 0x3bd4
mov byte [ebp - 0x35], al
mov byte [ebp - 0x64], al
call fcn.10018515
mov eax, dword [ebp - 0x18]
add esp, 0xc
cdq
idiv dword [ebp - 0xec]
mov cl, byte [ebp - 0x35]
mov esi, edx
mov dl, byte [ebp - 0x49]
call fcn.100205b3
mov ecx, dword [ebp - 0xb4]
mov dl, byte [esi + ecx]
mov cl, al
call fcn.100205b3
mov ecx, dword [ebp - 0x18]
push 4
mov byte [ecx + edi], al
lea ecx, [ebp - 0x2e4]
call fcn.1000f280
push 1
lea ecx, [ebp - 0x344]
mov dword [ebp - 4], 0x1d
call fcn.1000f280
mov byte [ebp - 4], 0x1e
mov dword [ebp - 0x40], ebx
jmp 0x1001bba3
mov eax, dword [ebp - 0x40]
mov dword [ebp + eax*4 - 0x100], 0x67a8
inc dword [ebp - 0x40]
cmp dword [ebp - 0x40], 3
jl 0x1001bb92
mov dword [ebp - 0x40], ebx
jmp 0x1001bbc1
mov ecx, dword [ebp - 0x40]
mov eax, dword [ebp - 0x2e4]
mov dword [eax + ecx*4], 0x8f4e1c2e
inc dword [ebp - 0x40]
cmp dword [ebp - 0x40], 4
jl 0x1001bbae
lea eax, [ebp - 0x40]
push eax
lea eax, [ebp - 0x344]
push eax
push 1
push ecx
call fcn.10014414
add esp, 0x10
mov dword [ebp - 0x40], ebx
jmp 0x1001bbf3
mov eax, dword [ebp - 0x40]
mov dword [ebp + eax*4 - 0x4e0], 0xfffffffd
inc dword [ebp - 0x40]
cmp dword [ebp - 0x40], 3
jl 0x1001bbe2
mov eax, dword [ebp - 0x100]
cmp dword [ebp - 0xfc], ebx
je 0x1001bc6e
mov eax, dword [ebp - 0x100]
xor edx, edx
mov ecx, dword [ebp - 0xfc]
cmp eax, 1
mov eax, dword [ebp - 0x2e4]
setge dl
add ecx, edx
push 0xfffffffffffffff6
mov dword [eax + 0xc], ecx
xor ecx, ecx
mov eax, dword [ebp - 0xfc]
mov eax, dword [ebp - 0xfc]
mov eax, dword [ebp - 0xfc]
mov eax, dword [ebp - 0xf8]
cmp eax, 1
mov eax, dword [ebp - 0x344]
setg cl
mov dword [eax], ecx
mov eax, dword [ebp - 0xfc]
imul eax, ecx
pop ecx
neg eax
cmp ecx, eax
sbb eax, eax
inc eax
cmp eax, dword [ebp - 0xfc]
jg 0x1001bc6e
xor edx, edx
inc edx
jmp 0x1001bc70
mov edx, ebx
mov eax, dword [ebp - 0xfc]
xor ecx, ecx
cmp eax, edx
setge cl
mov dword [ebp - 0x4dc], ecx
lea ecx, [ebp - 0x344]
call fcn.1000f303
or esi, 0xffffffff
lea ecx, [ebp - 0x2e4]
mov dword [ebp - 4], esi
call fcn.1000f303
push ebx
push 1
push 0x3461
lea eax, [ebp - 0x49]
mov edx, 0x5463
push eax
lea eax, [ebp - 0x64]
mov ecx, 0x77dc
push eax
push 1
call fcn.100143b6
mov ecx, dword [ebp - 0x18]
add esp, 0x18
inc ecx
mov dword [ebp - 0x18], ecx
cmp ecx, 4
jl 0x1001baac
mov dword [ebp - 0x2c], 5
lea ecx, [ebp - 0x474]
mov dword [ebp - 0x2c], 0xe1e87df2
mov dword [ebp - 0x2c], ebx
mov dword [ebp - 0x2c], 0x9ef72d4e
mov dword [ebp - 0x2c], esi
mov dword [ebp - 0x2c], 4
mov dword [ebp - 0x2c], 0x65121ac4
push 1
call fcn.1000f280
mov eax, 0x831d26ec
mov dword [ebp - 4], 0x1f
mov dword [ebp - 0x2a8], eax
mov dl, 1
mov dword [ebp - 0x2a4], eax
mov dword [ebp - 0x2a0], eax
mov dword [ebp - 0x29c], eax
lea eax, [ebp - 0x474]
push eax
lea eax, [ebp - 0x410]
push eax
push ecx
mov ecx, 0x4030
call fcn.10017c6d
add esp, 0xc
lea ecx, [ebp - 0x474]
inc dword [ebp - 0x29c]
mov dword [ebp - 4], esi
call fcn.1000f303
mov dword [ebp - 0x28], 0x7e6c
cmp dword [ebp - 0x28], 0x7f17
jle 0x1001bdc6
push 0x1dd3
call dword [sym.imp.GDI32.dll_GetStockObject]
mov edi, ebx
mov esi, ebx
mov ecx, esi
mov eax, edi
shl eax, cl
lea ecx, [ebp - 0x5d0]
cdq
push edx
push eax
call fcn.10001acf
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x1001bd9c
mov eax, dword [eax]
push eax
call fcn.10049e23
pop ecx
push ebx
push 1
lea ecx, [ebp - 0x5d0]
call fcn.1000fa8e
inc esi
cmp esi, 0x1ea
jl 0x1001bd7e
inc edi
cmp edi, 0x4b35
jl 0x1001bd7c
or esi, 0xffffffff
cmp dword [ebp - 0x28], 0x7e34
mov eax, dword [ebp - 0xbc]
mov eax, dword [eax]
mov dword [ebp - 0xc0], eax
jge 0x1001bde8
push str.ovsrppm_ructgnj_jxoguweei_thmo_kvdsnpi_vyyjw_vpkdlextm_kjinrkd
call fcn.10049e23
pop ecx
mov dword [ebp - 4], esi
cmp dword [ebp - 0xc0], 0
jle 0x1001e02e
cmp dword [ebp - 0xc0], 0x31a3
jae 0x1001e02e
push 0x209
push 0x49b8
push 0x66ed
lea eax, [ebp - 0x1a0]
mov edx, 0x1a9e
push eax
push 0x387f
push ebx
push 0xd20
lea eax, [ebp - 0xb4]
push eax
push 0x6898
push 0x454c
push 0x7dfd
lea eax, [ebp - 0xbc]
push eax
lea eax, [ebp - 0xec]
push eax
push 0x4c16
push 1
push 0x57c6
push 1
lea eax, [ebp - 0x49]
push eax
push 0x7f22
push 0x2a13
push 0x3f57
push 0x3555
push 0x6cee
push 0x1555
push 0x27d9
lea ecx, [ebp - 0xc0]
call fcn.1001943e
add esp, 0x64
lea ecx, [ebp - 0x2fc]
push 4
call fcn.1000f280
push 1
lea ecx, [ebp - 0x3a4]
mov dword [ebp - 4], 0x22
call fcn.1000f280
mov byte [ebp - 4], 0x23
mov dword [ebp - 0x50], ebx
jmp 0x1001bed0
mov eax, dword [ebp - 0x50]
mov dword [ebp + eax*4 - 0xe4], 0x67a8
inc dword [ebp - 0x50]
cmp dword [ebp - 0x50], 3
jl 0x1001bebf
push ebx
lea eax, [ebp - 0x50]
push eax
push 0x3bd2
push ecx
push 0x1568
push ecx
lea edx, [ebp - 0x2fc]
call fcn.10016cb7
lea eax, [ebp - 0x3a4]
xor dl, dl
push eax
push 1
push 1
push 0x3279
push 0x4bfa
lea ecx, [ebp - 0x50]
call fcn.100142b4
add esp, 0x2c
mov dword [ebp - 0x50], ebx
jmp 0x1001bf2a
mov eax, dword [ebp - 0x50]
mov dword [ebp + eax*4 - 0x4f8], 0xfffffffd
inc dword [ebp - 0x50]
cmp dword [ebp - 0x50], 3
jl 0x1001bf19
mov eax, dword [ebp - 0xe4]
cmp dword [ebp - 0xe0], ebx
je 0x1001bfa5
mov eax, dword [ebp - 0xe4]
xor edx, edx
mov ecx, dword [ebp - 0xe0]
cmp eax, 1
mov eax, dword [ebp - 0x2fc]
setge dl
add ecx, edx
push 0xfffffffffffffff6
mov dword [eax + 0xc], ecx
xor ecx, ecx
mov eax, dword [ebp - 0xe0]
mov eax, dword [ebp - 0xe0]
mov eax, dword [ebp - 0xe0]
mov eax, dword [ebp - 0xdc]
cmp eax, 1
mov eax, dword [ebp - 0x3a4]
setg cl
mov dword [eax], ecx
mov eax, dword [ebp - 0xe0]
imul eax, ecx
pop ecx
neg eax
cmp ecx, eax
sbb eax, eax
inc eax
cmp eax, dword [ebp - 0xe0]
jg 0x1001bfa5
xor edx, edx
inc edx
jmp 0x1001bfa7
mov edx, ebx
mov eax, dword [ebp - 0xe0]
xor ecx, ecx
cmp eax, edx
setge cl
mov dword [ebp - 0x4f4], ecx
lea ecx, [ebp - 0x3a4]
call fcn.1000f303
lea ecx, [ebp - 0x2fc]
mov dword [ebp - 4], esi
call fcn.1000f303
push 0x3e44
push 0x7bc3
push 0x10081824
push ecx
push ecx
mov cl, 1
call fcn.100147bb
mov dword [ebp - 0x1c], 0xa4
add esp, 0x14
cmp dword [ebp - 0x1c], 0x228
jle 0x1001c098
push ebx
push 0x10c8
call dword [sym.imp.USER32.dll_TranslateMDISysAccel]
mov eax, ebx
mov dword [ebp - 0x18], ebx
mov dword [ebp - 0x24], eax
mov dword [ebp - 0x44], 0x6b8c
mov edi, ebx
mov dword [ebp - 0x28], ebx
mov ecx, edi
mov dword [ebp - 0x34], ebx
sar eax, cl
mov edi, ebx
mov dword [ebp - 0x3c], eax
mov ecx, edi
sar eax, cl
lea ecx, [ebp - 0x600]
cdq
push edx
push eax
call fcn.10001acf
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x1001c04a
mov eax, dword [eax]
push eax
call fcn.10049e23
pop ecx
push ebx
push 1
lea ecx, [ebp - 0x600]
call fcn.1000fa8e
mov eax, dword [ebp - 0x3c]
inc edi
cmp edi, 0x157f
jl 0x1001c02e
mov edi, dword [ebp - 0x28]
mov eax, dword [ebp - 0x24]
inc edi
mov dword [ebp - 0x28], edi
cmp edi, 0xbbf
jl 0x1001c022
dec eax
dec dword [ebp - 0x44]
mov dword [ebp - 0x24], eax
jne 0x1001c01d
mov eax, dword [ebp - 0x18]
inc eax
mov dword [ebp - 0x18], eax
cmp eax, 0x7a62
jl 0x1001c013
cmp dword [ebp - 0x1c], 0xffffff9f
jge 0x1001c0a9
push str.jfe_vnzt_hfwp_htgs_jcihnrrht_jjkn_glacr
call fcn.10049e23
pop ecx
push ecx
push ecx
push 0x510c
push ecx
mov dword [ebp - 4], esi
lea ecx, [ebp - 0x150]
mov dword [ebp - 0x150], 0x47df
xor dl, dl
call fcn.10018dc9
add esp, 0xc
lea eax, [ebp - 0x150]
mov ecx, 0xf2
push 0x7df4
push eax
push 1
call fcn.10018a06
mov dword [ebp - 0xa4], ebx
xor ecx, ecx
mov dword [ebp - 0x20], 0xe6d4
add esp, 0x10
mov dword [ebp - 0x24], 0xf2e5664d
inc ecx
mov dword [ebp - 0x30], 0xba07e4fc
mov dword [ebp - 0x1c], 0xccd2466e
mov dword [ebp - 0x30], 0xa7f4
mov dword [ebp - 0x18], 4
mov dword [ebp - 0x170], ecx
mov dword [ebp - 0x16c], ecx
mov dword [ebp - 0x168], ecx
mov dword [ebp - 0x164], ecx
mov dword [ebp - 0x1c], ebx
jmp 0x1001c146
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0xd0], esi
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], ecx
jl 0x1001c139
mov eax, dword [ebp - 0x20]
cmp eax, dword [ebp - 0x20]
jne 0x1001c15a
mov eax, ecx
cmp dword [ebp - 0x20], ebx
jne 0x1001c15c
mov eax, ebx
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x30], ecx
mov eax, dword [ebp - 0x30]
mov eax, dword [ebp - 0x18]
imul eax, dword [ebp - 0x20]
mov dword [ebp - 0x170], eax
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x24], eax
mov eax, dword [ebp - 0x24]
mov dword [ebp - 0x30], eax
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x170]
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x30]
cmp dword [ebp - 0x20], ebx
je 0x1001c264
mov dword [ebp - 0x20], 0xef21ddbc
mov dword [ebp - 0x28], ecx
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], ebx
je 0x1001c1e7
mov eax, dword [ebp - 0x20]
xor ecx, ecx
cmp eax, 9
setg cl
xor eax, eax
cmp ecx, 0x8e1c
setl al
xor edx, edx
mov dword [ebp - 0x1c], eax
mov ecx, dword [ebp - 0xd0]
mov eax, dword [ebp - 0x1c]
cmp eax, ecx
setne dl
cmp edx, dword [ebp - 0x18]
jg 0x1001c1e7
xor eax, eax
inc eax
jmp 0x1001c1e9
mov eax, ebx
xor edx, edx
mov dword [ebp - 0x28], eax
mov ecx, dword [ebp - 0x28]
mov eax, dword [ebp - 0x30]
cmp ecx, eax
mov eax, dword [ebp - 0x20]
setl dl
inc edx
neg edx
sbb edx, edx
xor ecx, ecx
inc edx
cmp edx, eax
setge cl
xor edx, edx
cmp ecx, 1
setl dl
add edx, dword [ebp - 0xd0]
mov eax, dword [ebp - 0x24]
sub edx, 0x22d800f4
neg edx
sbb edx, edx
xor ecx, ecx
inc edx
cmp edx, eax
mov eax, dword [ebp - 0x170]
sete cl
xor edx, edx
add ecx, eax
mov eax, dword [ebp - 0x170]
cmp ecx, eax
mov eax, dword [ebp - 0x168]
setle dl
xor ecx, ecx
cmp eax, edx
mov eax, dword [ebp - 0x20]
setne cl
mov dword [ebp - 0x34], ecx
xor ecx, ecx
cmp dword [ebp - 0x34], eax
setge cl
mov dword [ebp - 0x30], ecx
jmp 0x1001c2e9
push ecx
lea ecx, [ebp - 0x35c]
call fcn.1000f280
lea eax, [ebp - 0x47c]
mov dword [ebp - 4], 0x26
push eax
lea eax, [ebp - 0x35c]
push eax
push 1
push ecx
call fcn.10018b11
mov eax, dword [ebp - 0x35c]
add esp, 0x10
dec dword [eax]
mov dword [ebp - 0x30], 0x17
jmp 0x1001c2d5
push 0x1b6a
lea eax, [ebp - 0x61]
mov dword [ebp - 0x34], 0x5de3
push eax
mov dl, 1
mov byte [ebp - 0x61], bl
push ebx
mov cl, dl
call fcn.10013d80
mov eax, dword [ebp - 0xd0]
add esp, 0xc
cmp dword [ebp - 0x18], 7
sbb eax, eax
neg eax
mov dword [ebp - 0x34], eax
dec dword [ebp - 0x30]
cmp dword [ebp - 0x30], 0x12
jg 0x1001c2a1
lea ecx, [ebp - 0x35c]
mov dword [ebp - 4], esi
call fcn.1000f303
mov eax, dword [ebp - 0x170]
mov dword [ebp - 0x24], eax
mov eax, dword [ebp - 0xbc]
add eax, 4
mov dword [ebp - 0x18], 0x12b57e8b
push 2
mov dword [ebp - 0x5c], eax
mov dword [ebp - 0x18], ebx
pop ecx
jmp 0x1001c31a
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x518], ecx
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], ecx
jl 0x1001c30d
mov dword [ebp - 0x18], ebx
jmp 0x1001c33e
push ecx
push ecx
push 0xe58
mov byte [ebp - 0x6b], bl
lea edx, [ebp - 0x6b]
push 1
call fcn.10018bfa
add esp, 0x10
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 1
jle 0x1001c324
mov dword [ebp - 0x28], 0x3a56
cmp dword [ebp - 0x28], 0x3c7f
jle 0x1001c397
mov ecx, ebx
mov dword [ebp - 0x24], ebx
mov edi, ebx
mov dword [ebp - 0x34], ebx
mov eax, edi
cdq
idiv ebx
lea eax, [ecx + edx]
mov ecx, 0x1007d358
cdq
push edx
push eax
call fcn.1000ef91
mov ecx, dword [ebp - 0x24]
inc ebx
cmp ebx, 0x1b45
jl 0x1001c35e
inc edi
push 0
pop ebx
cmp edi, 0x5a6e
jl 0x1001c35b
inc ecx
mov dword [ebp - 0x24], ecx
cmp ecx, 0x2e14
jl 0x1001c359
mov dword [ebp - 4], 0x27
cmp dword [ebp - 0x28], 0x3981
jge 0x1001c3d7
mov edx, str.zdhcjywgm_ylmpnutfn_yfln_cauxw_whcr_yqflayw_zbu_xeb_wqxwzilsr_zgnz_zehmicvj_gulbfoh
mov ecx, 0x1007d358
call fcn.10011e0c
jmp 0x1001c3d7
mov dword [ebp - 4], esi
xor ecx, ecx
mov dword [ebp - 0x20], 0xe6d4
inc ecx
mov dword [ebp - 0x18], 0xf2e5664d
mov dword [ebp - 0x24], 0xba07e4fc
mov dword [ebp - 0x1c], 0xccd2466e
mov dword [ebp - 0x1c], 0xa7f4
mov dword [ebp - 0x30], 4
mov dword [ebp - 0x160], ecx
mov dword [ebp - 0x15c], ecx
mov dword [ebp - 0x158], ecx
mov dword [ebp - 0x154], ecx
mov dword [ebp - 0x18], ebx
jmp 0x1001c431
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0xd8], esi
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], ecx
jl 0x1001c424
mov eax, dword [ebp - 0x20]
cmp eax, dword [ebp - 0x20]
jne 0x1001c445
mov eax, ecx
cmp dword [ebp - 0x20], ebx
jne 0x1001c447
mov eax, ebx
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x30]
imul eax, dword [ebp - 0x20]
mov dword [ebp - 0x160], eax
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x18], eax
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x24], eax
mov eax, dword [ebp - 0x30]
mov eax, dword [ebp - 0x160]
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x24]
cmp dword [ebp - 0x20], ebx
je 0x1001c54f
mov dword [ebp - 0x20], 0xef21ddbc
mov dword [ebp - 0x28], ecx
mov eax, dword [ebp - 0x30]
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], ebx
je 0x1001c4d2
mov eax, dword [ebp - 0x20]
xor ecx, ecx
cmp eax, 9
setg cl
xor eax, eax
cmp ecx, 0x8e1c
setl al
xor edx, edx
mov dword [ebp - 0x1c], eax
mov ecx, dword [ebp - 0xd8]
mov eax, dword [ebp - 0x1c]
cmp eax, ecx
setne dl
cmp edx, dword [ebp - 0x30]
jg 0x1001c4d2
xor eax, eax
inc eax
jmp 0x1001c4d4
mov eax, ebx
xor edx, edx
mov dword [ebp - 0x28], eax
mov ecx, dword [ebp - 0x28]
mov eax, dword [ebp - 0x24]
cmp ecx, eax
mov eax, dword [ebp - 0x20]
setl dl
inc edx
neg edx
sbb edx, edx
xor ecx, ecx
inc edx
cmp edx, eax
setge cl
xor edx, edx
cmp ecx, 1
setl dl
add edx, dword [ebp - 0xd8]
mov eax, dword [ebp - 0x18]
sub edx, 0x22d800f4
neg edx
sbb edx, edx
xor ecx, ecx
inc edx
cmp edx, eax
mov eax, dword [ebp - 0x160]
sete cl
xor edx, edx
add ecx, eax
mov eax, dword [ebp - 0x160]
cmp ecx, eax
mov eax, dword [ebp - 0x158]
setle dl
xor ecx, ecx
cmp eax, edx
mov eax, dword [ebp - 0x20]
setne cl
mov dword [ebp - 0x34], ecx
xor ecx, ecx
cmp dword [ebp - 0x34], eax
setge cl
mov dword [ebp - 0x24], ecx
jmp 0x1001c66e
push ecx
lea ecx, [ebp - 0x314]
call fcn.1000f280
push ecx
push ecx
push 1
push 0x3c48
lea eax, [ebp - 0x314]
mov dword [ebp - 4], 0x29
push 0x6f53
push eax
lea edx, [ebp - 0x1f4]
call fcn.10013d31
lea eax, [ebp - 0x314]
mov dl, 1
push eax
push 0x4dbe
push 1
mov cl, dl
call fcn.10013d80
add esp, 0x24
mov dword [ebp - 0x1c], 0x17
cmp dword [ebp - 0x1c], 0x12
jle 0x1001c65d
mov dword [ebp - 0x34], 0x5de3
xor dl, dl
push 0x3dd1
call fcn.1001910a
mov dword [ebp - 0x28], 0x7624
cmp dword [ebp - 0x28], 0x7797
pop ecx
jle 0x1001c603
push ebx
push ebx
push ebx
push ebx
push ebx
push ebx
call dword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
mov esi, ebx
mov edi, ebx
mov ebx, 0x6ca2
mov eax, edi
mov ecx, 0x1007d358
cdq
push edx
push eax
call fcn.1000ef91
add edi, esi
dec ebx
jne 0x1001c5e6
inc esi
cmp esi, 0x62eb
jl 0x1001c5df
mov eax, dword [ebp - 0xd8]
cmp dword [ebp - 0x30], 7
sbb eax, eax
neg eax
mov dword [ebp - 0x34], eax
mov byte [ebp - 4], 0x2a
cmp dword [ebp - 0x28], 0x73f3
jge 0x1001c64e
mov edx, str.fwcdhgun_jitwk_xpqszjyz_srhuke_mayqc_uvdpg_zjhjsksdf_davecvqxb_nwtmqzm_dlqnhb_uoqi_xhupqr_rahndos
mov ecx, 0x1007d358
call fcn.10011e0c
jmp 0x1001c64e
mov dword [ebp - 4], 0x29
dec dword [ebp - 0x1c]
jmp 0x1001c5a3
or esi, 0xffffffff
lea ecx, [ebp - 0x314]
mov dword [ebp - 4], esi
call fcn.1000f303
mov eax, dword [ebp - 0x160]
push 0xa
mov dword [ebp - 0x18], eax
pop eax
push 2
mov byte [ebp - 0x74], bl
mov dword [ebp - 0x73], 0xae230248
mov word [ebp - 0xa0], ax
pop edi
mov dword [ebp - 0x24], ebx
mov dword [ebp - 0x30], edi
cmp edi, 5
jae 0x1001cc36
push dword [ebp - 0x1f4]
lea eax, [ebp - 0x4a8]
mov dword [ebp - 0x17c], ebx
push eax
lea eax, [ebp - 0x4b8]
mov dword [ebp - 0x178], ebx
push eax
xorps xmm0, xmm0
mov dword [ebp - 0x174], ebx
push ebx
lea ecx, [ebp - 0x17c]
movdqu xmmword [ebp - 0x4b8], xmm0
call fcn.100127e2
mov dword [ebp - 4], 0x2c
mov dword [ebp - 0x1c], 0xd4081c29
mov dword [ebp - 0xd4], 0xbec0351
mov dword [ebp - 0x28], 7
mov dword [ebp - 0x2c], 0x495e0e2b
push 3
mov dword [ebp - 0x1c], ebx
pop ecx
cmp dword [ebp - 0x1c], ecx
jg 0x1001c7fb
mov dword [ebp - 0x20], 1
mov dword [ebp - 0x18], ebx
jmp 0x1001c72c
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x570], 0x582ba8d7
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], ecx
jl 0x1001c71b
mov dword [ebp - 0x20], ecx
cmp dword [ebp - 0x20], ebx
jl 0x1001c7e7
mov dword [ebp - 0x34], 0xfffffffc
mov dword [ebp - 0x2c], 0x4cd021aa
mov eax, dword [ebp - 0x20]
cmp dword [ebp - 0x1c], ebx
jne 0x1001c768
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0xd4], esi
cmp dword [ebp - 0xd4], ebx
jne 0x1001c768
mov edx, ebx
jmp 0x1001c76b
xor edx, edx
inc edx
mov esi, dword [ebp - 0x20]
xor ecx, ecx
mov edi, dword [ebp - 0x20]
cmp edx, 0xfffffffc
mov eax, dword [ebp - 0x20]
setne cl
mov dword [ebp - 0x34], eax
mov eax, dword [ebp - 0x17c]
xor edx, edx
cmp ecx, dword [eax + esi*4]
mov eax, dword [ebp - 0x28]
mov esi, dword [ebp - 0x34]
setl dl
xor ecx, ecx
cmp edx, eax
mov eax, dword [ebp - 0x17c]
sete cl
xor edx, edx
cmp ecx, dword [eax + edi*4]
setl dl
xor ecx, ecx
cmp edx, dword [eax + esi*4]
mov eax, dword [ebp - 0x28]
setl cl
mov dword [ebp - 0x34], ecx
xor ecx, ecx
cmp dword [ebp - 0x34], eax
setge cl
push ecx
push 0x565d
mov dword [ebp - 0x34], ecx
push 1
push ecx
lea ecx, [ebp - 0xd4]
call fcn.10018d49
add esp, 0x10
dec dword [ebp - 0x20]
push 0xffffffffffffffff
pop esi
jns 0x1001c73d
push 3
pop ecx
inc dword [ebp - 0x1c]
push 0xffffffffffffffff
pop esi
cmp dword [ebp - 0x1c], ecx
jle 0x1001c70f
mov edi, dword [ebp - 0x30]
or esi, esi
lea ecx, [ebp - 0x17c]
mov dword [ebp - 4], esi
call fcn.1000f303
movzx eax, byte [ebp - 0x74]
lea eax, [eax*2 + 2]
cmp edi, eax
jne 0x1001cb26
mov eax, 0xdcba86ba
mov dword [ebp - 0x3b4], eax
mov dword [ebp - 0x3b0], eax
mov dword [ebp - 0x3ac], eax
mov dword [ebp - 0x3a8], eax
mov dword [ebp - 0x2c], 0xdade
mov dword [ebp - 0x1a8], 0xcb5af9f7
mov dword [ebp - 0x18], ebx
jmp 0x1001c85c
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x114], ebx
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 2
jl 0x1001c84f
mov dword [ebp - 0x114], 0xfffffff9
jmp 0x1001c941
mov dword [ebp - 0x2c], 0x69
lea ecx, [ebp - 0x3d0]
mov dword [ebp - 0x2c], esi
mov dword [ebp - 0x2c], 0x78213af7
push 2
call fcn.1000f280
push 0x1f91
push ebx
push 0x644b
push 1
push 0x7b71
lea eax, [ebp - 0x3f8]
mov dword [ebp - 4], 0x2d
push eax
push 1
lea eax, [ebp - 0x3d0]
mov edx, 0x2850
push eax
push 0x3c90
mov ecx, 0x543f
call fcn.100149b8
add esp, 0x24
cmp dword [ebp - 0x110], ebx
je 0x1001c91d
mov dword [ebp - 0x228], 0xfffffffe
mov dword [ebp - 0x2c], 0xfffffff7
mov dword [ebp - 0x18], ebx
jmp 0x1001c8fe
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x500], 0xf737a9a9
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 2
jl 0x1001c8ed
lea eax, [ebp - 0x228]
push eax
push ecx
push ebx
lea ecx, [ebp - 0x1a8]
call fcn.10018287
add esp, 0xc
jmp 0x1001c92d
mov dword [ebp - 0x34], 3
mov dword [ebp - 0x3ac], ebx
mov dword [ebp - 0x34], ebx
lea ecx, [ebp - 0x3d0]
mov dword [ebp - 4], esi
call fcn.1000f303
inc dword [ebp - 0x114]
cmp dword [ebp - 0x114], 0x1c
jle 0x1001c871
movzx eax, byte [ebp + edi - 0x74]
dec edi
add edi, eax
mov dword [ebp - 0x20], 1
mov dword [ebp - 0x28], 0x3f5e3d1a
mov dword [ebp - 0x30], edi
lea ecx, [eax + 1]
mov dword [ebp - 0x34], edi
mov dword [ebp - 0x24], ecx
mov dword [ebp - 0x3c], ecx
mov dword [ebp - 0x18], ebx
jmp 0x1001c989
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0xc8], 0x9be1
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 2
jl 0x1001c978
mov dword [ebp - 0x1c], 0x480
cmp dword [ebp - 0x1c], 0x7ea
jle 0x1001c9e8
mov edi, ebx
mov dword [ebp - 0x18], ebx
mov eax, edi
mov dword [ebp - 0x44], 0x2abc
mov dword [ebp - 0x28], eax
mov edi, eax
mov ebx, 0x4ce
mov eax, edi
mov ecx, 0x1007d358
cdq
push edx
push eax
call fcn.1000ef91
dec edi
dec ebx
jne 0x1001c9b7
mov eax, dword [ebp - 0x28]
dec eax
dec dword [ebp - 0x44]
mov dword [ebp - 0x28], eax
jne 0x1001c9b0
mov dword [ebp - 0x20], ebx
jmp 0x1001ca21
cmp dword [ebp - 0x20], 0x10
jl 0x1001c9ed
push 3
lea ecx, [ebp - 0x3e8]
call fcn.1000f280
push 3
lea ecx, [ebp - 0x2b4]
mov dword [ebp - 4], 0x30
call fcn.1000f280
push 2
lea ecx, [ebp - 0x468]
mov byte [ebp - 4], 0x31
call fcn.1000f280
push 1
push 1
lea eax, [ebp - 0x11c]
mov byte [ebp - 4], 0x32
push eax
push 0x2421
push 0x4d72
push 1
lea edx, [ebp - 0x3e8]
mov ecx, 0xc93
call fcn.100143b6
add esp, 0x18
lea eax, [ebp - 0x2b4]
push eax
push ebx
push ecx
lea eax, [ebp - 0x11c]
push eax
push ecx
push ecx
mov ecx, 0x5bdc
call fcn.1001973e
push 0x2200
push ebx
lea eax, [ebp - 0x468]
push eax
push 0x53cb
lea ecx, [ebp - 0x11c]
call fcn.100164f0
add esp, 0x20
lea eax, [ebp - 0x2b4]
mov dl, 1
push eax
push ecx
mov ecx, 0x6af4
call fcn.10018dc9
add esp, 0x10
lea ecx, [ebp - 0x468]
call fcn.1000f303
lea ecx, [ebp - 0x2b4]
call fcn.1000f303
lea ecx, [ebp - 0x3e8]
mov dword [ebp - 4], esi
call fcn.1000f303
movzx edx, byte [ebp + edi - 0x73]
mov eax, edi
sub eax, dword [ebp - 0x24]
mov dword [ebp - 0x24], ebx
movzx eax, byte [ebp + eax - 0x76]
movzx ecx, word [ebp + eax*2 - 0xa0]
mov eax, ecx
and eax, edx
add eax, eax
sub ecx, eax
movzx eax, byte [ebp + edi - 0x74]
add ecx, edx
mov word [ebp + eax*2 - 0xa0], cx
add edi, 2
jmp 0x1001c691
mov dword [ebp - 0x1c], 0xc75b57fd
lea ecx, [ebp - 0x404]
push 2
call fcn.1000f280
mov dword [ebp - 4], 0x33
mov dword [ebp - 0x2c], 0xa81d5f49
mov dword [ebp - 0x88], ebx
jmp 0x1001cc77
mov eax, dword [ebp - 0x88]
mov dword [ebp + eax*4 - 0x54c], 0xfffffffb
inc dword [ebp - 0x88]
cmp dword [ebp - 0x88], 3
jl 0x1001cc60
push 1
lea eax, [ebp - 0x88]
mov cl, 1
push 1
push eax
lea edx, [ebp - 0x404]
call fcn.10018eed
add esp, 0xc
mov dword [ebp - 0x1c], 0xffffffe6
cmp dword [ebp - 0x1c], 0x1c
jge 0x1001cf82
mov dword [ebp - 0x24], 8
lea ecx, [ebp - 0x3f4]
mov dword [ebp - 0x2c], ebx
mov dword [ebp - 0x2c], 2
mov dword [ebp - 0x2c], 0xfffffffc
mov dword [ebp - 0x2c], 0xadf2
mov dword [ebp - 0x2c], esi
mov dword [ebp - 0x2c], ebx
mov dword [ebp - 0x2c], 0xfffffff9
mov dword [ebp - 0x2c], 0xdfa0
mov dword [ebp - 0x2c], 0xc7e318b4
mov dword [ebp - 0x2c], esi
mov dword [ebp - 0x2c], 0xd7ba9668
mov dword [ebp - 0x2c], 0xe19f8c51
mov dword [ebp - 0x2c], 9
push 1
call fcn.1000f280
mov byte [ebp - 4], 0x34
mov dword [ebp - 0x1b0], 0x46bac6
mov dword [ebp - 0x18], ebx
jmp 0x1001cd31
mov ecx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x3f4]
mov dword [eax + ecx*4], 0xe29ac92d
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 1
jl 0x1001cd1e
mov dword [ebp - 0x28], 0x1515
cmp dword [ebp - 0x28], 0x183c
jle 0x1001cd70
mov esi, ebx
mov edi, ebx
mov ecx, edi
mov eax, esi
shl eax, cl
mov ecx, 0x1007d358
cdq
push edx
push eax
call fcn.1000ef91
inc edi
cmp edi, 0x1f6b
jl 0x1001cd4b
inc esi
cmp esi, 0x2ffd
jl 0x1001cd49
push 1
mov edx, 0x1f18
call fcn.100191d7
mov byte [ebp - 4], 0x35
cmp dword [ebp - 0x28], 0x12dc
pop ecx
jge 0x1001cdb7
mov edx, str.fjxht_pqga_pvgxvr_cnb_pjtdyu_lndfngbz_eubdkt_nqhsq_jprz_mpgx_zezcjakkz_jtwgw
mov ecx, 0x1007d358
call fcn.10011e0c
jmp 0x1001cdb7
mov dword [ebp - 4], 0x34
mov dword [ebp - 0x24], ebx
cmp dword [ebp - 0x24], 2
jg 0x1001cf68
push 1
lea ecx, [ebp - 0x298]
call fcn.1000f280
push 3
lea ecx, [ebp - 0x32c]
mov byte [ebp - 4], 0x37
call fcn.1000f280
lea eax, [ebp - 0x298]
mov byte [ebp - 4], 0x38
push eax
lea eax, [ebp - 0x200]
push eax
push 1
call fcn.10019215
add esp, 0xc
lea eax, [ebp - 0x200]
mov dl, 1
mov ecx, 0x765
push 0x6236
push eax
push 1
lea eax, [ebp - 0x32c]
push eax
push 0x3acd
push 1
push 0x78e6
push 0x2362
push 0x17d2
call fcn.100192ff
mov eax, dword [ebp - 0x298]
add esp, 0x24
mov dword [eax], ebx
cmp dword [eax], 2
jg 0x1001cf2e
mov dword [ebp - 0x18], ebx
jmp 0x1001ce66
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x540], 0xf5f996f3
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 4
jl 0x1001ce55
mov dword [ebp - 0x28], 0x1e2d
cmp dword [ebp - 0x28], 0x21da
jle 0x1001cee5
push ecx
push 0x3933
push ecx
lea eax, [ebp - 0x1b0]
mov cl, 1
push eax
call fcn.1001460e
add esp, 0x10
lea ecx, [ebp - 0x32c]
call fcn.1000f303
lea ecx, [ebp - 0x298]
mov byte [ebp - 4], 0x34
call fcn.1000f303
inc dword [ebp - 0x24]
jmp 0x1001cdc1
lea ecx, [ebp - 0x3f4]
mov byte [ebp - 4], 0x33
call fcn.1000f303
inc dword [ebp - 0x1c]
or esi, 0xffffffff
jmp 0x1001cca2
lea ecx, [ebp - 0x404]
mov dword [ebp - 4], esi
call fcn.1000f303
xor eax, eax
lea ecx, [ebp - 0x374]
mov word [ebp - 0x9e], ax
mov dword [ebp - 0x240], 0xe1757117
mov dword [ebp - 0x1b8], 9
push 1
call fcn.1000f280
push ecx
lea eax, [ebp - 0x374]
mov dword [ebp - 4], 0x3b
push eax
push ecx
lea eax, [ebp - 0x4a4]
xor dl, dl
push 0x6517
push eax
call fcn.100196ea
add esp, 0x10
lea eax, [ebp - 0x240]
xor dl, dl
push eax
push 0x4564
push ecx
push 0x32d0
lea eax, [ebp - 0x374]
push eax
push ecx
lea ecx, [ebp - 0x1b8]
call fcn.10019e47
add esp, 0x1c
mov dword [ebp - 4], esi
lea ecx, [ebp - 0x374]
call fcn.1000f303
xor eax, eax
mov dword [ebp - 0x384], 7
mov word [ebp - 0x398], ax
lea ecx, [ebp - 0x398]
lea eax, [ebp - 0xa0]
mov dword [ebp - 0x388], ebx
push eax
call fcn.1001e8ae
cmp dword [ebp - 0x384], 8
lea eax, [ebp - 0x398]
push ebx
cmovae eax, dword [ebp - 0x398]
lea ecx, [ebp - 0x398]
push 1
movzx eax, word [eax]
mov dword [ebp - 0x2c], eax
call fcn.1000fc62
push 0x65d9
push 0x5d2c
lea ecx, [ebp - 0x208]
xor eax, eax
push ecx
push 0x4020
push 0x4829
inc eax
push eax
push 0x3050
push 0x5aec
push 0x4af5
push 0x274e
push 0x78c9
push 0x62a6
push 0x55b7
push 0x4f5b
push eax
push 0x10a5
push eax
push 0x1974
push 0x60a4
push 0x650d
push 0x7983
push 0xd4b
mov dword [ebp - 0x208], eax
push 0x44e6
push 0x5827
push 0x53dc
mov edx, 0xf3b
mov ecx, 0x43c9
call fcn.1001943e
add esp, 0x64
mov dword [ebp - 0x1c], ebx
mov edi, ebx
cmp edi, 2
jae 0x1001d396
mov dword [ebp - 0x18], 0x717c
cmp dword [ebp - 0x18], 0x74e6
jle 0x1001d1ab
mov eax, ebx
mov dword [ebp - 0x24], ebx
mov edi, ebx
mov dword [ebp - 0x44], ebx
mov ecx, edi
mov dword [ebp - 0x34], ebx
mov edx, eax
mov edi, ebx
sar edx, cl
mov dword [ebp - 0x28], edx
mov esi, ebx
mov eax, esi
lea ecx, [ebp - 0x654]
and eax, edi
or eax, edx
cdq
push edx
push eax
call fcn.10001acf
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x1001d153
mov eax, dword [eax]
push eax
call fcn.10049e23
pop ecx
push ebx
push 1
lea ecx, [ebp - 0x654]
call fcn.1000fa8e
mov edx, dword [ebp - 0x28]
inc esi
cmp esi, 0x4766
jl 0x1001d135
inc edi
cmp edi, 0x23ec
jl 0x1001d133
mov edi, dword [ebp - 0x44]
mov eax, dword [ebp - 0x24]
inc edi
mov dword [ebp - 0x44], edi
cmp edi, 0x2846
jl 0x1001d125
inc eax
mov dword [ebp - 0x24], eax
cmp eax, 0x46b6
jl 0x1001d120
push 0x278
call dword [sym.imp.GDI32.dll_SaveDC]
mov edi, dword [ebp - 0x1c]
or esi, 0xffffffff
mov dword [ebp - 0x13c], 0xfffffffb
lea ecx, [ebp - 0x2f0]
mov dword [ebp - 0x230], 0x72c25fcc
mov dword [ebp - 0x1c0], 0x2e1dfe00
push 4
call fcn.1000f280
mov dword [ebp - 4], 0x3c
lea ecx, [ebp - 0x2d8]
mov dword [ebp - 0x128], 0xfd2d1a4e
push 1
call fcn.1000f280
push 1
lea ecx, [ebp - 0x2c0]
mov byte [ebp - 4], 0x3d
call fcn.1000f280
push 0xf7
lea eax, [ebp - 0x2f0]
mov byte [ebp - 4], 0x3e
push eax
push ecx
push 0x1d95
push 1
push 0x721c
push 0x7ac2
push 0x2b0a
push ecx
lea edx, [ebp - 0x120]
mov dword [ebp - 0x1c8], 0x978d8ef0
mov ecx, 0x16d2
call fcn.10018998
add esp, 0x24
lea eax, [ebp - 0x2d8]
mov ecx, 0x4956
push eax
push 1
mov eax, edx
push 0x6200
push eax
call fcn.100164f0
add esp, 0x10
lea eax, [ebp - 0x2c0]
mov edx, 0x2a65
push 1
push ecx
push eax
push ecx
push 0x6745
lea ecx, [ebp - 0x120]
call fcn.10018c57
add esp, 0x14
lea eax, [ebp - 0x128]
push eax
lea eax, [ebp - 0x1c0]
push eax
push 0x3b2e
push 0x33b5
push 0x75d0
push 1
push 0x4f98
push 0x1f12
push 0x5e5c
push 0x6ce0
lea eax, [ebp - 0x2d8]
push eax
push 0x725a
push 0x2be6
push 0x2fd7
push ebx
push 0x7597
push 1
push 0x1347
push 0x24c
lea eax, [ebp - 0x13c]
push eax
lea eax, [ebp - 0x230]
push eax
lea eax, [ebp - 0x1c8]
push eax
push 0x776f
lea eax, [ebp - 0x2c0]
mov ecx, 0x1035
push eax
push 0x6307
lea edx, [ebp - 0x2f0]
call fcn.1001943e
add esp, 0x64
lea eax, [ebp - 0x128]
push eax
push 0x4289
push 0x5cac
push ecx
push 0x46a7
lea eax, [ebp - 0x13c]
mov ecx, 0x5a0b
push ebx
push eax
call fcn.10017def
add esp, 0x1c
lea ecx, [ebp - 0x2c0]
call fcn.1000f303
lea ecx, [ebp - 0x2d8]
call fcn.1000f303
lea ecx, [ebp - 0x2f0]
call fcn.1000f303
cmp dword [ebp - 0x18], 0x6ef9
jge 0x1001d380
push str.pxlwykcrg_yudojqa_fbv_mevmqnkj
call fcn.10049e23
pop ecx
xor eax, eax
mov dword [ebp - 4], esi
mov word [ebp + edi*2 - 0xa0], ax
inc edi
mov dword [ebp - 0x1c], edi
jmp 0x1001d0fe
push 4
lea ecx, [ebp - 0x3dc]
call fcn.1000f280
push ecx
push 0x6988
push 1
push 0x317c
lea eax, [ebp - 0x408]
mov dword [ebp - 4], 0x41
push eax
push ecx
mov dword [ebp - 0x24], ebx
lea ecx, [ebp - 0x3dc]
mov edx, 0x1cb9
call fcn.10015067
mov dword [ebp - 0x24], 3
add esp, 0x18
cmp dword [ebp - 0x24], ebx
jl 0x1001d403
push ecx
push 0x2061
push ecx
lea eax, [ebp - 0x6a]
mov byte [ebp - 0x6a], bl
push eax
push 0xc3a
mov dl, 1
call fcn.100196ea
add esp, 0x14
dec dword [ebp - 0x24]
jns 0x1001d3e1
lea ecx, [ebp - 0x3dc]
mov dword [ebp - 4], esi
call fcn.1000f303
mov ecx, dword [ebp - 0xc0]
shr ecx, 1
mov dword [ebp - 0x3c], ecx
mov eax, dword [ebp - 0xa4]
inc eax
cmp eax, ecx
jae 0x1001e02e
mov dword [ebp - 0x1c], esi
mov dword [ebp - 0x210], esi
mov dword [ebp - 0x1c], 0xfffffffd
jmp 0x1001d50a
mov dword [ebp - 0x18], 0xa18885c6
lea ecx, [ebp - 0x41c]
push 3
call fcn.1000f280
lea eax, [ebp - 0x1fc]
mov dword [ebp - 4], 0x42
push eax
lea eax, [ebp - 0x41c]
mov dl, 1
push eax
push 1
push 0x3280
push ebx
mov ecx, 0x1033
call fcn.100198ff
add esp, 0x14
mov dword [ebp - 0x18], 0xfffffff3
jmp 0x1001d4f3
push 0x6eaf
lea eax, [ebp - 0x210]
mov dword [ebp - 0x258], 0xf36f6dd8
push eax
lea eax, [ebp - 0x1d0]
mov dword [ebp - 0x1d0], 0xda37bb00
push eax
push 1
push 0x7148
push 0x2e93
lea eax, [ebp - 0x258]
mov edx, 0x2e60
push ebx
push eax
mov cl, 1
call fcn.1001a36a
add esp, 0x20
mov byte [ebp - 0x67], bl
push 0xe34
push 1
push ecx
push 0x4e27
push ecx
push ecx
lea ecx, [ebp - 0x67]
call fcn.1001973e
add esp, 0x18
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 1
jge 0x1001d489
lea ecx, [ebp - 0x41c]
mov dword [ebp - 4], esi
call fcn.1000f303
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 9
jle 0x1001d440
mov edi, dword [ebp - 0xa4]
mov esi, dword [ebp - 0x5c]
lea ecx, [esi + edi*2]
call fcn.10013211
lea ecx, [edi + 2]
mov dword [ebp - 0x148], eax
lea ecx, [esi + ecx*2]
call fcn.10013211
or esi, 0xffffffff
mov dword [ebp - 0xf0], eax
cmp dword [ebp - 0x148], esi
jne 0x1001d54f
test eax, eax
je 0x1001e02e
push 0x53f5
add edi, 4
lea ecx, [ebp - 0x75]
mov dword [ebp - 0xa4], edi
sub esp, 0xc
mov dword [ebp - 0x30], 0x845d811f
mov edx, 0x105c
mov dword [ebp - 0x34], 8
mov dword [ebp - 0xf4], 0x3bd5de1f
mov dword [ebp - 0x1c], 0x5f7626a9
mov dword [ebp - 0x28], ebx
mov byte [ebp - 0x75], bl
push 1
call fcn.10019890
mov dword [ebp - 0x24], esi
add esp, 0x14
mov dword [ebp - 0x20], 0x2811
cmp dword [ebp - 0x20], 0x2a7c
jle 0x1001d610
push ebx
push 1
push 0x120e
mov edx, 0x2701
mov cl, 1
call fcn.10018eed
add esp, 0xc
mov ecx, dword [ebp - 0xc]
mov eax, 0x10081824
pop edi
pop esi
mov dword fs:[0], ecx
pop ebx
mov esp, ebp
pop ebp
ret