Function at 0x10001000
Capabilities:
Accept command line arguments
Allocate or change rwx memory
Authenticate hmac

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x2c
mov edx, 0
mov dword [ebp - 0x24], 0x10
mov dword [ebp - 0x20], edx
xor dword [ebp - 0x18], 0xff00ff
add dword [ebp - 0x18], 0x2f
mov ax, 0x41
cmp edx, 0
jne 0x1000104e
mov edx, 0x20
and dword [ebp - 0x18], 0xffffff
mov eax, dword [ebp - 0x20]
mov eax, 0x2f
sub edx, edx
mov dx, 4
add dword [ebp - 0x24], 1
and dword [ebp - 0x18], 0xffffff
sub dword [ebp - 0x18], 0x7a
sub eax, eax
call dword [sym.imp.kernel32.dll_GetCommandLineA]
mov eax, dword [ebp - 0x24]
mov edi, 0xf6
lea edx, [ebp - 0x24]
mov ecx, dword [ebp]
mov di, 0x40
mov esi, 0x1f
lea edi, [ebp]
mov dword [ebp - 0x20], edx
mov cx, 0x7c
lea esi, [ebp]
lea edx, [ebp - 0x1c]
mov eax, dword [esp]
lea edx, [ebp]
mov esi, dword [esp]
mov edi, dword [esp]
lea esi, [ebp - 0x20]
mov eax, dword [ebp]
mov edi, esi
lea edi, [ebp]
mov eax, dword [esp]
mov eax, dword [ebp]
mov di, 0x43
mov esi, dword [esp]
lea edi, [ebp]
mov esi, dword [ebp - 0x20]
mov ecx, eax
lea esi, [ebp - 0x24]
mov edi, dword [ebp]
mov di, 0x80
lea edi, [ebp]
mov edi, edx
lea esi, [ebp]
lea edx, [ebp]
mov edi, esi
lea edi, [esp]
mov ecx, dword [ebp]
mov ecx, edi
mov dword [ebp - 0x1c], edi
mov edx, dword [ebp]
lea edx, [ebp - 0x20]
mov edi, eax
mov esi, edi
mov di, 1
mov dword [ebp - 0x24], esi
lea esi, [esp]
mov esi, dword [esp]
lea eax, [ebp - 0x20]
lea edx, [ebp - 0x24]
lea eax, [ebp]
mov ecx, edi
lea ecx, [ebp]
mov esi, dword [ebp]
lea edi, [ebp - 0x18]
lea edi, [esp]
lea ecx, [ebp - 0x24]
mov edi, dword [esp]
mov eax, 0x80
mov eax, dword [ebp]
mov edx, dword [esp]
mov ecx, esi
mov dword [ebp - 0x18], esi
mov esi, dword [esp]
mov dword [ebp - 0x1c], eax
mov edi, dword [ebp]
lea ecx, [esp]
lea ecx, [ebp - 0x1c]
mov eax, dword [ebp - 0x18]
mov edi, ecx
lea edi, [ebp]
lea edi, [ebp - 0x20]
mov edi, dword [ebp - 0x1c]
mov ecx, dword [esp]
mov edi, 0x3f
mov dword [ebp - 0x1c], edi
mov di, 0x46
mov edx, dword [ebp]
mov eax, dword [esp]
lea edx, [ebp]
mov dword [ebp - 0x18], esi
lea eax, [esp]
lea edi, [esp]
mov dx, 2
lea edx, [esp]
lea esi, [ebp]
mov esi, dword [esp]
mov dword [ebp - 0x24], ecx
lea ecx, [ebp - 0x24]
mov eax, dword [ebp - 0x20]
mov cx, 0x51
lea eax, [ebp]
mov cx, 0xb0
lea ecx, [ebp - 0x24]
mov edi, dword [ebp - 0x24]
lea esi, [esp]
mov dword [ebp - 0x1c], edi
mov edi, dword [ebp]
mov dword [ebp - 0x24], edi
lea edi, [esp]
lea edx, [esp]
mov esi, eax
mov si, 0x3f
mov ecx, 0x96
mov edi, 8
mov dword [ebp - 0x18], edx
lea edi, [ebp]
mov esi, 0xde
lea eax, [ebp]
mov ax, 0xbe
lea ecx, [ebp]
mov dx, 0x20
mov eax, edi
mov edi, dword [ebp - 0x20]
mov esi, 0x2e
lea esi, [esp]
lea edx, [ebp - 0x24]
lea ecx, [ebp]
mov dword [ebp - 0x1c], eax
lea eax, [ebp]
mov dword [ebp - 0x18], edx
mov edx, dword [ebp]
mov edi, edx
lea edi, [ebp - 0x1c]
lea edx, [esp]
mov ecx, dword [esp]
lea esi, [ebp]
mov ecx, dword [esp]
mov edi, ecx
mov edi, dword [esp]
mov dword [ebp - 0x1c], edx
mov edi, dword [ebp - 0x1c]
mov edi, dword [ebp]
mov di, 0xb5
mov edi, 0x3d
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x20]
mov edi, ecx
mov edi, 0x42
mov edx, dword [ebp]
lea edi, [ebp]
mov ecx, edi
lea ecx, [ebp - 0x24]
mov dword [ebp - 0x20], edi
mov ecx, dword [ebp]
lea eax, [ebp - 0x24]
mov esi, dword [ebp]
mov ecx, 0x88
mov edi, 2
mov esi, edx
mov eax, 0x63
mov edi, dword [ebp - 0x24]
mov edi, 0x40
mov esi, 0x50
lea edi, [esp]
lea esi, [ebp - 0x1c]
mov dword [ebp - 0x18], edi
lea eax, [esp]
mov eax, dword [esp]
mov eax, dword [ebp]
mov esi, dword [ebp]
lea edi, [ebp]
mov edi, dword [ebp - 0x20]
lea edi, [ebp - 0x1c]
mov edx, dword [ebp - 0x18]
mov edi, 0x80
mov eax, dword [ebp]
mov eax, dword [esp]
mov esi, 0x80
lea eax, [ebp]
mov edi, dword [ebp]
lea ecx, [esp]
mov si, 0x20
lea eax, [ebp - 0x1c]
mov dword [ebp - 0x1c], ecx
mov edx, dword [esp]
mov edi, 0x40
mov edi, eax
mov eax, dword [ebp]
lea edx, [esp]
mov eax, dword [ebp]
mov edi, 0xf1
mov dword [ebp - 0x24], esi
mov ecx, dword [ebp]
lea edi, [ebp]
mov cx, 0x80
mov ax, 0xc6
mov eax, 0x49
mov edx, edi
lea edi, [ebp]
sub eax, eax
mov eax, 0x36
cmp eax, 0x71
jb 0x100012c9
xor ecx, ecx
cmp ecx, dword [ebp - 0x20]
jb 0x100012cd
lea ecx, [ebp - 0x24]
sub dword [ebp - 0x18], 0x22
mov eax, dword [ebp - 0x1c]
and dword [ebp - 0x24], 0xffff
mov dword [ebp - 0x1c], eax
mov edx, 0
or dword [ebp - 0x18], 0xff00ff
mov eax, 2
or dword [ebp - 0x18], 0xff00ff
mov dx, 0x5b
xor dword [ebp - 0x18], 0xff00ff
call fcn.10002bb9
sub edx, edx
mov edx, 2
and dword [ebp - 0x1c], 0xff00ff
mov ecx, dword [ebp - 0x24]
lea ecx, [ebp - 0x24]
push ecx
call dword [sym.imp.kernel32.dll_GetVersionExA]
mov di, 0x20
lea edi, [ebp]
mov ecx, dword [esp]
mov dword [ebp - 0x18], ecx
lea edx, [ebp - 0x24]
lea edx, [ebp - 0x1c]
mov edi, dword [ebp]
lea edi, [ebp]
mov edx, dword [esp]
mov edi, dword [esp]
mov edi, dword [ebp - 0x1c]
mov edi, eax
lea edx, [esp]
mov dword [ebp - 0x18], ecx
lea edi, [ebp]
lea edi, [ebp]
mov di, 0x20
mov edi, dword [ebp]
mov edi, dword [esp]
mov edx, ecx
mov ecx, dword [ebp]
mov edi, edx
mov edi, dword [ebp]
mov edx, dword [ebp]
mov dx, 0x20
mov eax, dword [ebp]
lea edi, [ebp - 0x18]
mov dword [ebp - 0x18], edi
mov edi, eax
mov ecx, dword [ebp]
mov ecx, dword [ebp]
mov ecx, 1
mov edi, eax
mov edi, eax
lea edx, [esp]
lea eax, [ebp - 0x18]
lea eax, [ebp - 0x1c]
mov dword [ebp - 0x18], edi
mov dword [ebp - 0x1c], edi
lea edi, [ebp]
mov eax, 0xaa
lea edi, [esp]
mov ecx, 2
mov edi, edx
lea esi, [ebp - 0x18]
lea edi, [ebp - 0x18]
mov edx, 0x10
lea edx, [esp]
mov edi, dword [esp]
mov ecx, dword [ebp - 0x24]
mov edi, dword [esp]
mov eax, 0x10
mov eax, edi
lea edi, [esp]
lea edi, [ebp]
mov edi, dword [esp]
mov edi, dword [ebp]
mov edi, dword [ebp]
mov edx, edi
mov esi, edi
mov ecx, 0x20
mov dword [ebp - 0x20], esi
lea edi, [ebp - 0x1c]
mov ecx, dword [esp]
lea edi, [ebp]
mov edx, esi
mov eax, dword [ebp - 0x24]
mov edx, dword [ebp - 0x1c]
mov eax, esi
mov cx, 0xf0
mov edx, dword [esp]
lea edx, [ebp - 0x24]
mov dword [ebp - 0x20], esi
mov edx, 0xfb
mov eax, dword [esp]
mov edi, dword [ebp]
mov edi, 0x3b
mov eax, 0xae
mov edx, dword [esp]
mov esi, dword [esp]
lea edi, [ebp]
mov eax, 0x7a
mov eax, dword [ebp - 0x20]
mov edi, dword [ebp]
mov eax, 0x5e
mov cx, 0x10
lea edx, [esp]
mov dword [ebp - 0x24], ecx
lea edx, [ebp - 0x18]
mov edi, 4
mov si, 0x84
mov edi, dword [ebp - 0x1c]
mov dword [ebp - 0x24], eax
mov dword [ebp - 0x18], edi
mov edi, 0x40
mov edi, dword [ebp - 0x24]
mov dword [ebp - 0x24], edx
lea edx, [esp]
mov edx, dword [ebp - 0x20]
mov esi, dword [ebp]
mov esi, dword [ebp - 0x18]
mov dword [ebp - 0x1c], edi
lea edi, [ebp - 0x20]
mov ax, 2
mov esi, 0x40
mov esi, dword [esp]
lea esi, [ebp - 0x20]
lea ecx, [ebp]
lea edi, [esp]
mov ax, 0x9f
mov cx, 0x68
mov edx, dword [esp]
mov dword [ebp - 0x24], edi
lea edi, [ebp]
lea edi, [esp]
mov eax, dword [ebp]
mov dword [ebp - 0x24], esi
mov esi, edi
lea esi, [ebp]
mov esi, edi
mov ecx, dword [esp]
mov ecx, edi
lea ecx, [ebp - 0x20]
lea edx, [esp]
mov edi, dword [ebp - 0x20]
lea ecx, [ebp]
lea eax, [esp]
mov di, 0x10
mov dword [ebp - 0x18], edx
mov cx, 0x20
mov dword [ebp - 0x1c], eax
mov edi, dword [esp]
mov edi, edx
mov eax, dword [ebp]
mov eax, edi
lea eax, [ebp]
mov edi, dword [ebp - 0x24]
lea edx, [ebp - 0x1c]
mov esi, dword [esp]
mov dword [ebp - 0x18], edi
mov esi, 0x10
mov edx, dword [esp]
mov edx, 1
mov edx, eax
mov cx, 4
mov ecx, dword [ebp]
lea edi, [ebp]
mov edi, esi
lea edi, [esp]
mov edi, 0x40
mov edi, dword [esp]
mov si, 0x40
mov di, 0
lea eax, [ebp]
mov di, 4
mov dword [ebp - 0x24], ecx
lea edi, [ebp - 0x24]
lea edi, [ebp - 0x1c]
mov edx, 0xc4
mov esi, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x24]
mov ecx, edi
mov eax, edi
mov di, 0x2c
lea eax, [ebp - 0x1c]
mov dx, 0x40
lea edi, [ebp - 0x1c]
mov ecx, 0xf0
mov ecx, 0x20
mov edx, dword [ebp - 0x18]
mov edi, 1
mov eax, dword [ebp - 0x18]
lea edx, [ebp - 0x20]
mov edx, dword [ebp - 0x18]
lea ecx, [esp]
mov di, 2
mov dword [ebp - 0x18], edi
lea edx, [ebp - 0x20]
mov edx, edi
mov edi, ecx
mov edx, dword [esp]
mov ecx, 0x26
mov esi, dword [ebp - 0x24]
mov edi, ecx
mov dx, 2
lea edi, [ebp]
sub ecx, ecx
mov dword [ebp - 0x18], 1
sub ecx, ecx
test ecx, ecx
jae 0x1000158f
mov eax, 0x64
mov eax, 4
test ecx, ecx
ja 0x10001593
add dword [ebp - 0x1c], 0x20
lea edx, [ebp - 0x24]
push edx
call dword [sym.imp.kernel32.dll_GetVersionExA]
lea edi, [ebp]
mov dword [ebp - 0x1c], ecx
lea edi, [ebp]
mov eax, dword [ebp]
mov dword [ebp - 0x20], edx
mov ecx, esi
mov edx, 0x3a
mov dword [ebp - 0x18], edi
lea esi, [ebp]
mov esi, dword [ebp]
lea edx, [esp]
mov edx, dword [ebp]
lea edi, [ebp]
lea edi, [ebp]
lea edi, [ebp - 0x20]
mov si, 0xc0
mov edi, dword [ebp - 0x1c]
mov ecx, dword [esp]
lea edi, [ebp - 0x18]
mov edi, 4
lea edi, [ebp]
mov dword [ebp - 0x20], edi
lea edx, [esp]
mov esi, dword [esp]
mov eax, ecx
mov eax, dword [esp]
mov di, 0x13
mov edi, dword [ebp - 0x24]
mov ecx, dword [esp]
mov edx, dword [ebp]
lea ecx, [esp]
mov dword [ebp - 0x24], ecx
mov eax, esi
mov edi, dword [ebp - 0x1c]
mov eax, ecx
mov ax, 8
mov eax, dword [ebp]
mov eax, edi
mov edi, dword [esp]
lea esi, [ebp]
lea esi, [esp]
lea eax, [esp]
mov dword [ebp - 0x1c], edi
mov esi, dword [ebp]
mov edx, dword [ebp - 0x18]
mov edx, dword [esp]
lea esi, [ebp - 0x20]
mov edx, dword [esp]
lea edx, [ebp - 0x1c]
lea esi, [esp]
mov esi, dword [ebp]
mov edx, dword [esp]
mov ax, 0xe6
mov edi, dword [esp]
mov edx, eax
lea edi, [esp]
mov ecx, esi
mov ecx, edx
mov esi, dword [esp]
lea ecx, [ebp - 0x1c]
mov dword [ebp - 0x20], esi
lea edi, [ebp - 0x18]
mov ax, 0x93
lea ecx, [esp]
lea ecx, [ebp - 0x18]
lea esi, [ebp - 0x24]
mov ecx, edi
mov edi, dword [esp]
mov dword [ebp - 0x1c], edx
mov edi, dword [esp]
mov ecx, dword [esp]
mov edx, edi
mov edx, dword [ebp - 0x20]
lea edx, [esp]
mov edi, 0x1a
mov esi, dword [ebp]
mov edi, dword [ebp]
mov dword [ebp - 0x24], edi
mov ax, 0xce
mov edx, dword [esp]
mov eax, edx
mov edi, ecx
mov dword [ebp - 0x20], esi
mov edi, dword [ebp]
mov dword [ebp - 0x20], edi
lea edi, [ebp]
mov esi, eax
mov edi, 0x8a
lea edi, [ebp]
lea eax, [ebp]
mov edi, dword [ebp]
lea ecx, [ebp]
lea eax, [ebp - 0x1c]
mov edx, 0x40
mov eax, dword [ebp - 0x20]
lea eax, [esp]
mov edi, 0x10
mov edx, dword [esp]
mov ecx, dword [ebp]
lea esi, [ebp]
mov dword [ebp - 0x1c], edi
mov dword [ebp - 0x24], edi
mov eax, 2
mov edi, 0x12
lea edi, [esp]
mov ecx, dword [esp]
mov edx, dword [ebp - 0x24]
mov dword [ebp - 0x1c], esi
mov di, 0x47
lea ecx, [ebp]
lea edi, [ebp - 0x1c]
mov dx, 0x19
mov esi, ecx
mov eax, dword [ebp - 0x20]
mov edi, 0x67
mov edi, dword [ebp - 0x1c]
mov ecx, 0x24
mov edi, dword [esp]
mov dword [ebp - 0x20], esi
mov esi, 0xe7
mov ecx, dword [ebp - 0x20]
mov ax, 8
lea edx, [ebp]
lea edi, [esp]
lea edi, [ebp]
lea ecx, [ebp]
mov edx, 0x1d
mov di, 0x40
lea edi, [ebp]
mov edi, dword [esp]
mov esi, dword [ebp - 0x24]
mov cx, 4
lea ecx, [ebp - 0x20]
mov edi, 0xfd
mov esi, dword [esp]
mov dword [ebp - 0x20], edi
mov eax, 0xca
mov ecx, dword [esp]
mov ecx, dword [esp]
mov dx, 0x20
mov ecx, dword [ebp]
mov ecx, dword [esp]
mov edi, ecx
mov edi, 0xf1
lea edi, [esp]
mov edi, dword [esp]
lea ecx, [ebp]
mov di, 0x40
mov edx, edi
mov dword [ebp - 0x20], edi
mov dword [ebp - 0x1c], ecx
mov edx, dword [ebp]
lea eax, [ebp - 0x24]
mov dword [ebp - 0x20], ecx
lea eax, [esp]
mov dword [ebp - 0x20], eax
mov edx, edi
mov dword [ebp - 0x1c], edi
lea eax, [ebp]
mov di, 7
mov edi, ecx
mov edx, dword [ebp - 0x1c]
lea eax, [ebp]
lea esi, [ebp]
mov edi, 0xa2
mov eax, edx
mov dword [ebp - 0x24], edi
mov dword [ebp - 0x18], edx
lea edx, [esp]
lea edi, [ebp - 0x18]
mov esi, dword [esp]
mov eax, dword [ebp]
mov edi, 0xc8
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x24]
sub eax, eax
and dword [ebp - 0x24], 0xffffff
mov edx, 0x12c
xor eax, eax
mov ecx, dword [ebp - 0x20]
xor dword [ebp - 0x1c], 0xffff
cmp dword [ebp - 0x24], ecx
ja 0x100017f0
xor eax, eax
mov dword [ebp - 0x18], eax
cmp ecx, dword [ebp - 0x1c]
jbe 0x100017f7
sub dword [ebp - 0x1c], 0x80
xor ecx, ecx
and dword [ebp - 0x18], 0xffffff
test ecx, ecx
jne 0x1000181a
mov eax, 0x200
and dword [ebp - 0x1c], 0xffffff
mov dword [ebp - 0x1c], eax
cmp ecx, dword [ebp - 0x1c]
jae 0x1000181a
sub ecx, ecx
mov eax, dword [ebp - 0x24]
xor eax, eax
mov ax, 0x40
sub eax, eax
sub edx, edx
add dword [ebp - 0x1c], 0x80
mov eax, 0x64
xor dword [ebp - 0x1c], 0xff00ff
and dword [ebp - 0x1c], 0xffffff
cmp dword [ebp - 0x18], eax
jae 0x1000184e
mov ecx, 0
lea ecx, [ebp - 0x18]
call dword [sym.imp.kernel32.dll_GetCommandLineW]
mov edi, dword [ebp - 0x18]
lea esi, [esp]
mov eax, dword [ebp - 0x1c]
lea ecx, [ebp]
lea edi, [esp]
lea edx, [ebp - 0x1c]
mov ax, 0x72
mov edi, dword [esp]
mov dword [ebp - 0x20], edi
mov edi, dword [ebp - 0x18]
mov edi, ecx
mov edi, dword [ebp - 0x1c]
mov ecx, dword [ebp]
mov esi, dword [ebp]
mov edi, 2
mov dword [ebp - 0x20], edx
mov eax, dword [ebp]
lea edi, [esp]
lea ecx, [ebp]
mov di, 0x80
mov esi, ecx
lea edi, [ebp]
lea eax, [ebp]
mov esi, 0x10
mov esi, edi
lea ecx, [esp]
mov esi, dword [esp]
lea edi, [ebp]
lea edi, [ebp]
mov esi, 0x10
mov edx, dword [ebp - 0x1c]
lea eax, [esp]
mov esi, dword [ebp]
mov edi, dword [ebp]
mov ecx, 0xdf
lea eax, [esp]
mov edi, dword [esp]
lea edx, [esp]
mov di, 0x48
mov eax, dword [ebp - 0x20]
mov edx, dword [ebp]
mov edx, eax
mov edx, edi
mov esi, dword [ebp]
lea edx, [esp]
lea edx, [ebp - 0x20]
lea edi, [ebp - 0x24]
mov ecx, dword [ebp - 0x24]
mov edx, edi
mov edi, esi
lea esi, [esp]
mov dx, 0xc
lea edi, [ebp]
mov eax, dword [ebp - 0x1c]
mov edi, ecx
mov eax, dword [esp]
mov edx, dword [ebp]
mov edx, dword [ebp - 0x20]
mov edi, dword [ebp]
mov dword [ebp - 0x1c], edi
lea esi, [ebp]
mov ecx, 1
mov edi, edx
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x18], ecx
lea edx, [ebp]
mov dword [ebp - 0x20], edi
mov dword [ebp - 0x20], esi
mov dx, 2
mov di, 0x47
mov dword [ebp - 0x20], eax
mov edx, dword [ebp - 0x20]
lea eax, [ebp - 0x20]
mov edi, 0x20
mov edx, 4
lea eax, [ebp]
mov edi, 0x26
mov eax, dword [ebp - 0x24]
mov dword [ebp - 0x18], ecx
mov edi, eax
mov si, 0xe1
lea eax, [esp]
mov dword [ebp - 0x18], edi
mov edi, dword [esp]
mov edx, dword [ebp - 0x20]
lea ecx, [ebp]
lea esi, [ebp]
mov dword [ebp - 0x20], edi
mov edi, dword [esp]
lea ecx, [esp]
mov edi, dword [ebp - 0x20]
lea eax, [ebp]
mov edx, dword [esp]
mov ecx, 0x20
lea eax, [ebp]
mov eax, dword [ebp - 0x20]
lea esi, [ebp - 0x18]
mov edi, 1
mov dword [ebp - 0x1c], edx
mov edx, 0x20
mov edi, esi
mov si, 0x23
lea eax, [esp]
mov dword [ebp - 0x18], edi
lea edi, [ebp - 0x24]
mov edi, dword [ebp - 0x18]
mov dword [ebp - 0x24], ecx
lea eax, [ebp - 0x18]
mov edi, dword [ebp - 0x1c]
lea edi, [ebp]
mov esi, dword [esp]
lea ecx, [ebp - 0x18]
mov eax, dword [ebp - 0x18]
lea eax, [ebp - 0x24]
mov esi, 0xae
lea esi, [ebp]
mov dx, 2
lea eax, [esp]
mov edi, dword [ebp - 0x24]
mov dword [ebp - 0x24], esi
mov ecx, dword [ebp - 0x24]
lea edx, [esp]
lea edi, [ebp]
lea edi, [esp]
lea eax, [esp]
mov dword [ebp - 0x18], edx
lea ecx, [esp]
mov eax, esi
mov edx, dword [ebp]
mov edi, dword [ebp - 0x20]
mov dword [ebp - 0x24], eax
mov si, 0x20
mov ecx, eax
mov eax, dword [ebp]
lea esi, [ebp - 0x18]
lea edi, [ebp]
lea edi, [ebp]
mov edi, dword [esp]
lea esi, [esp]
mov ecx, dword [ebp - 0x24]
mov edi, 0x80
lea edi, [ebp - 0x1c]
mov edx, 0x10
mov ecx, 2
mov ecx, dword [ebp]
mov eax, dword [ebp]
lea eax, [ebp - 0x1c]
lea eax, [esp]
mov edx, esi
mov edx, dword [ebp - 0x20]
mov esi, edx
mov edx, dword [ebp]
lea edx, [esp]
mov edi, ecx
mov edx, dword [ebp]
lea edi, [ebp - 0x18]
lea esi, [ebp - 0x20]
mov esi, dword [ebp - 0x20]
mov eax, ecx
mov esi, dword [ebp - 0x20]
lea ecx, [ebp - 0x18]
mov eax, dword [ebp]
mov dword [ebp - 0x24], edi
mov edi, dword [esp]
mov edi, dword [ebp]
lea edi, [ebp]
lea edi, [esp]
mov dword [ebp - 0x20], edi
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp]
mov edi, dword [ebp]
mov esi, dword [esp]
mov edi, dword [ebp]
mov si, 0x1d
lea edi, [ebp - 0x1c]
mov edi, dword [ebp]
lea eax, [esp]
call dword [sym.imp.kernel32.dll_GetCommandLineA]
lea eax, [esp]
lea edx, [ebp]
lea ecx, [ebp - 0x24]
mov dword [ebp - 0x24], edi
mov eax, ecx
mov si, 0x29
mov eax, dword [ebp]
lea edx, [esp]
lea edi, [ebp - 0x1c]
mov esi, dword [esp]
mov ecx, dword [ebp - 0x20]
mov edi, dword [ebp - 0x18]
mov edi, 0xec
mov ecx, dword [ebp]
mov dword [ebp - 0x20], ecx
mov dx, 0x2b
mov edi, dword [ebp]
lea edi, [ebp]
mov di, 8
mov dword [ebp - 0x1c], edi
mov ecx, dword [ebp]
mov dx, 0x20
mov edi, esi
mov si, 0x10
mov ecx, dword [ebp]
mov ecx, dword [ebp - 0x1c]
lea eax, [esp]
lea esi, [ebp]
mov edx, dword [esp]
mov esi, 4
lea eax, [ebp - 0x18]
lea esi, [ebp - 0x24]
lea edi, [esp]
mov eax, edi
mov eax, edi
mov ecx, eax
mov edi, dword [esp]
mov edx, dword [ebp - 0x24]
lea edi, [esp]
mov esi, dword [esp]
mov edx, eax
lea edx, [ebp - 0x24]
mov edi, dword [ebp - 0x1c]
mov ecx, dword [ebp]
mov ax, 8
mov esi, dword [ebp - 0x24]
mov edx, dword [ebp - 0x1c]
mov edi, 0x40
lea eax, [esp]
mov dx, 0x40
mov eax, 0x20
lea eax, [ebp - 0x24]
mov ecx, dword [ebp]
lea edx, [ebp]
mov eax, dword [ebp - 0x20]
mov edx, dword [ebp]
lea eax, [ebp - 0x20]
mov eax, 0x10
mov edi, dword [ebp]
lea ecx, [ebp - 0x24]
mov edi, dword [ebp - 0x18]
lea ecx, [ebp]
lea edi, [ebp]
mov edx, dword [ebp - 0x18]
mov edi, esi
lea ecx, [ebp - 0x1c]
lea edi, [esp]
mov si, 0x6d
mov ecx, dword [ebp - 0x20]
mov cx, 0x40
lea eax, [ebp - 0x18]
lea edx, [ebp]
mov edi, ecx
mov eax, dword [ebp - 0x20]
mov edi, dword [ebp - 0x24]
mov edx, dword [esp]
mov eax, 0x70
mov dword [ebp - 0x20], edx
lea ecx, [ebp]
mov si, 0x18
mov edi, esi
lea edi, [esp]
mov si, 0x3c
mov edi, edx
mov edi, dword [ebp]
lea edi, [esp]
mov edi, dword [ebp - 0x20]
mov esi, dword [ebp]
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 0x18], eax
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp]
lea edx, [esp]
lea esi, [ebp - 0x1c]
mov esi, dword [esp]
mov eax, dword [ebp]
mov edi, dword [ebp - 0x1c]
mov edx, dword [ebp - 0x24]
mov dword [ebp - 0x20], ecx
mov edi, dword [ebp]
mov esi, eax
mov dword [ebp - 0x20], esi
lea edi, [esp]
mov dword [ebp - 0x18], edi
mov edi, dword [esp]
mov edi, dword [esp]
mov ax, 0xcd
lea ecx, [ebp - 0x20]
mov edx, 0x67
mov edi, dword [ebp - 0x20]
mov esi, dword [esp]
mov edi, 0x79
mov edi, dword [esp]
lea edi, [ebp]
lea esi, [esp]
mov ecx, 0x21
mov edx, 0x2c
mov ecx, dword [ebp]
mov si, 0x40
lea edx, [ebp]
mov ax, 0xc0
lea eax, [ebp]
lea edi, [esp]
lea ecx, [ebp - 0x18]
mov esi, 0xbe
mov edx, dword [ebp]
mov edi, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], edx
mov ecx, eax
mov ecx, eax
lea edi, [ebp]
mov dword [ebp - 0x24], ecx
mov ecx, dword [ebp]
lea edi, [ebp - 0x1c]
mov dword [ebp - 0x18], eax
mov edi, dword [ebp - 0x18]
mov dword [ebp - 0x18], ecx
mov dword [ebp - 0x24], edi
mov edi, eax
lea edi, [ebp - 0x1c]
lea ecx, [esp]
mov eax, 0xf6
mov ecx, 0x40
mov di, 0x80
lea esi, [ebp]
lea edi, [ebp]
lea esi, [esp]
mov edx, edi
lea edi, [ebp - 0x20]
lea edi, [ebp - 0x24]
mov ecx, 0x10
lea edx, [ebp - 0x24]
lea ecx, [ebp - 0x18]
mov edi, ecx
mov esi, 2
mov eax, edx
mov dword [ebp - 0x18], esi
lea ecx, [ebp - 0x20]
lea esi, [ebp]
lea edi, [esp]
mov eax, edi
mov ecx, 0xf1
mov edi, dword [esp]
mov di, 0xcb
mov edi, dword [esp]
lea edi, [ebp - 0x24]
mov si, 0xdf
mov dword [ebp - 0x24], edx
lea esi, [ebp]
mov eax, ecx
mov eax, 0x8f
lea edx, [ebp]
mov dword [ebp - 0x18], eax
mov esi, ecx
xor eax, eax
and dword [ebp - 0x20], 0xff00ff
mov dword [ebp - 0x20], eax
mov dword [ebp - 0x20], eax
mov ax, 3
and dword [ebp - 0x20], 0xff00ff
cmp dword [ebp - 0x20], eax
jbe 0x10001cdb
mov edx, 0xc8
sub dword [ebp - 0x24], 0x20
cmp dword [ebp - 0x24], edx
ja 0x10001cdb
mov eax, 0
or dword [ebp - 0x24], 0xffff
sub esi, esi
mov esi, pe_nt_image_headers32
mov edi, dword [ebp - 0x14]
push 4
push edi
call dword [sym.imp.kernel32.dll_IsBadReadPtr]
test eax, eax
je 0x10001d22
xor edx, edx
xor ecx, ecx
lea ecx, [ebp - 0x18]
cmp edx, 0x67d
jae 0x10001d19
mov ecx, dword [ebp - 0x18]
xor edx, edx
lea edx, [ebp - 0x20]
push dword [ebp - 0x24]
call dword [sym.imp.kernel32.dll_ExitThread]
mov edi, dword [ebp - 0x14]
mov edx, dword [ebp - 0x1c]
xor edx, edx
cmp edx, 0x69f
jne 0x10001d40
sub ecx, ecx
cmp ecx, dword [ebp - 0x24]
jbe 0x10001d40
and dword [ebp - 0x18], 0xff00ff
xor edx, edx
xor ecx, ecx
mov ecx, pe_nt_image_headers32
and dword [ebp - 0x24], 0xffffff
mov dword [ebp - 0x20], 4
lea edx, [ebp - 0x1c]
inc dword [ebp - 0x14]
mov edx, 0x300
sub dword [ebp - 0x18], 2
mov dword [ebp - 0x24], 0x3c
cmp edx, 0
je 0x10001d8a
mov ecx, pe_nt_image_headers32
xor dword [ebp - 0x24], 0xffff
cmp ecx, dword [ebp - 0x18]
jne 0x10001d8a
xor dword [ebp - 0x1c], 0xff
sub eax, eax
xor eax, 0x8758b00
mov edx, pe_nt_image_headers32
xor dword [ebp - 0x20], 0xff00ff
mov dx, 0x20
cmp edx, dword [ebp - 0x1c]
ja 0x10001db5
mov ecx, dword [ebp - 0x24]
or dword [ebp - 0x24], 0xff00ff
test edx, edx
jb 0x10001dbf
and dword [ebp - 0x20], 0xff
mov dword [ebp - 0x24], ecx
xor eax, dword [edi]
je 0x10001e6a
sub edx, edx
xor dword [ebp - 0x18], 0xffffff
mov ecx, dword [ebp - 0x1c]
sub dword [ebp - 0x1c], 2
mov dx, 0x20
mov edx, pe_nt_image_headers32
mov ecx, 0
xor dword [ebp - 0x20], 0xffffff
inc dword [ebp - 0x14]
mov edx, 0x64
sub edx, edx
and dword [ebp - 0x20], 0xff
mov edx, 0x57
and dword [ebp - 0x1c], 0xff
sub edx, edx
mov edx, 0x25
cmp edx, 0x39
jbe 0x10001e21
sub ecx, ecx
or dword [ebp - 0x1c], 0xff
lea edx, [ebp - 0x18]
sub dword [ebp - 0x20], 6
mov ecx, 0x80
sub eax, eax
xor eax, 0x8758b00
sub edx, edx
mov cx, 1
lea ecx, [ebp - 0x18]
sub edx, edx
or dword [ebp - 0x20], 0xffff
cmp edx, 0
jae 0x10001e5c
mov ecx, 0
mov dword [ebp - 0x1c], 4
and dword [ebp - 0x24], 0xffffff
xor eax, dword [edi]
je 0x10001e6a
jne 0x10001cdb
mov ecx, dword [ebp - 0x20]
mov ecx, 0
mov dword [ebp - 0x20], ecx
mov dx, 0x20
cmp ecx, dword [ebp - 0x24]
jb 0x10001e8b
mov ecx, 0x65
mov edx, 0x300
lea edx, [ebp - 0x20]
mov dx, 0x10
mov dx, 0x20
push 8
push 0x2000
push 0xf00
push 0
push 0xffffffffffffffff
call dword [sym.imp.kernel32.dll_VirtualAllocEx]
mov edx, dword [ebp - 0x24]
lea eax, [ebp]
lea edi, [ebp]
mov esi, dword [esp]
lea edi, [ebp - 0x1c]
mov ecx, 8
lea eax, [ebp]
mov edi, dword [ebp]
mov dword [ebp - 0x1c], edx
mov dx, 0x30
mov cx, 0x12
mov eax, 0x20
mov edx, 0x5c
mov esi, dword [ebp]
mov esi, 0x5b
mov edx, dword [ebp]
mov edi, 0x40
mov ax, 2
mov esi, dword [ebp - 0x20]
mov eax, edi
mov edi, ecx
lea edi, [ebp]
mov edi, dword [ebp - 0x20]
mov di, 2
mov cx, 8
mov eax, 1
lea edi, [esp]
mov eax, dword [esp]
mov dword [ebp - 0x24], eax
mov ecx, dword [esp]
mov dword [ebp - 0x18], edi
lea ecx, [esp]
lea edi, [esp]
mov edx, dword [esp]
mov eax, dword [esp]
mov edx, 0xa8
mov edi, 0x40
mov edi, dword [ebp - 0x18]
mov eax, esi
mov edx, dword [esp]
mov esi, 0x40
mov edx, dword [ebp]
mov edi, dword [ebp]
mov edi, edx
mov eax, dword [esp]
mov edi, dword [esp]
lea edi, [ebp - 0x18]
mov edx, dword [esp]
lea edi, [esp]
mov cx, 0x91
mov eax, dword [ebp - 0x24]
mov ecx, eax
lea edi, [ebp - 0x24]
mov ecx, dword [esp]
mov edi, dword [esp]
mov edx, 1
mov ax, 8
mov di, 4
lea edi, [ebp - 0x24]
mov edi, dword [ebp]
lea esi, [ebp - 0x20]
mov ecx, dword [ebp - 0x18]
mov eax, 0x10
mov ecx, dword [esp]
mov edx, dword [esp]
lea esi, [ebp - 0x1c]
mov ecx, dword [ebp]
mov dword [ebp - 0x1c], esi
lea edx, [ebp - 0x18]
mov edi, esi
mov di, 0xb1
mov esi, dword [esp]
lea edx, [ebp - 0x20]
mov di, 1
mov esi, dword [esp]
mov eax, dword [ebp - 0x1c]
mov edx, 2
lea edx, [ebp - 0x18]
mov edi, 8
lea edx, [ebp - 0x24]
lea edi, [esp]
lea edi, [esp]
mov edi, dword [ebp - 0x18]
mov dword [ebp - 0x18], edx
mov edi, dword [esp]
mov ecx, dword [esp]
lea edx, [ebp - 0x1c]
lea edx, [esp]
mov ecx, dword [ebp - 0x1c]
lea edx, [ebp - 0x20]
mov dword [ebp - 0x20], ecx
mov ecx, dword [ebp]
lea edi, [ebp - 0x24]
mov edi, dword [ebp]
mov edi, dword [ebp]
mov ecx, eax
mov edi, 0x20
mov edx, 0x40
mov eax, 0x20
lea eax, [esp]
mov dword [ebp - 0x1c], edx
mov edi, dword [ebp - 0x1c]
mov edi, 8
mov ecx, dword [ebp - 0x20]
mov cx, 0x8e
mov esi, edi
mov eax, dword [ebp - 0x24]
mov ecx, dword [esp]
mov edi, dword [esp]
mov edi, 0x40
mov dx, 2
mov edi, 1
mov di, 0x1d
mov edi, ecx
lea esi, [ebp - 0x20]
mov edi, dword [ebp]
mov esi, edx
mov edx, dword [esp]
mov esi, dword [ebp - 0x24]
mov si, 0x2f
lea edx, [esp]
lea edx, [ebp]
lea edi, [ebp - 0x1c]
lea edi, [esp]
lea esi, [esp]
mov edi, dword [esp]
mov edi, 0xdb
mov ax, 0x85
mov edi, esi
mov edi, dword [ebp - 0x1c]
mov esi, dword [esp]
mov edx, dword [ebp - 0x18]
mov edi, 0x10
mov edi, dword [ebp - 0x24]
lea edx, [ebp - 0x24]
lea ecx, [ebp]
lea edx, [esp]
mov dword [ebp - 0x18], edx
mov eax, dword [esp]
lea edx, [esp]
mov edi, dword [esp]
mov esi, dword [esp]
mov di, 8
lea esi, [ebp]
mov si, 8
mov dword [ebp - 0x1c], ecx
mov edx, dword [esp]
lea eax, [ebp]
lea ecx, [esp]
mov eax, dword [esp]
lea edi, [esp]
lea esi, [ebp - 0x1c]
mov edx, esi
mov edx, dword [ebp]
mov edi, 0x10
mov edx, 0xe3
mov dword [ebp - 0x24], esi
lea ecx, [ebp]
mov dword [ebp - 0x24], ecx
mov edi, dword [esp]
lea edi, [ebp]
lea edi, [esp]
lea eax, [ebp - 0x18]
mov ecx, esi
mov dword [ebp - 0x20], edi
lea eax, [ebp]
mov cx, 0x47
mov ecx, dword [ebp - 0x20]
mov eax, 0x61
mov ecx, dword [ebp - 0x20]
mov dword [ebp - 0x18], edx
mov edx, eax
mov edx, dword [ebp]
mov dword [ebp - 0x20], edi
mov edi, edx
lea ecx, [ebp]
mov di, 0x6e
mov eax, 0x80
mov dword [ebp - 0x1c], edx
mov edi, dword [ebp - 0x1c]
mov eax, 0x20
lea esi, [ebp - 0x24]
mov eax, 0xe4
mov esi, 0x40
mov esi, 0xf9
lea ecx, [ebp]
mov ecx, 0xc8
sub dword [ebp - 0x1c], 8
and dword [ebp - 0x20], 0xff00ff
xor edx, edx
mov edx, 0x80
sub dword [ebp - 0x24], 0x80
and dword [ebp - 0x20], 0xffffff
sub eax, eax
mov dword [ebp - 0x20], 0x18
cmp eax, dword [ebp - 0x18]
je 0x1000216a
sub ecx, ecx
and dword [ebp - 0x18], 0xff
mov ax, 0x7b
sub dword [ebp - 0x1c], 0x20
and dword [ebp - 0x18], 0xffff
lea ecx, [ebp - 0x24]
and dword [ebp - 0x20], 0xff00ff
mov cx, 0x20
call fcn.100069bc
mov edx, 0x300
sub dword [ebp - 0x20], 2
cmp edx, 0
jae 0x1000218b
mov eax, 0x300
cmp edx, dword [ebp - 0x18]
jae 0x1000218b
mov dword [ebp - 0x24], edx
or dword [ebp - 0x24], 0xffff
mov edx, 0x200
cmp edx, 0x9f7
jae 0x100021ae
mov ecx, 0x64
xor edx, edx
mov edx, 0xe
and dword [ebp - 0x18], 0xff00ff
mov eax, 0x12c
add dword [ebp - 0x24], 8
cmp dword [ebp - 0x24], eax
ja 0x100021de
mov ecx, 0x300
xor dword [ebp - 0x18], 0xffffff
lea ecx, [ebp - 0x18]
and dword [ebp - 0x20], 0xffffff
cmp eax, 0
ja 0x100021de
or dword [ebp - 0x18], 0xffffff
mov dword [ebp - 0x18], 0x65
xor edi, edi
and dword [ebp - 0x20], 0xff
and dword [ebp - 0x20], 0xff
mov dword [ebp - 0x1c], 0x10
cmp edi, 0
jne 0x10002226
sub dword [ebp - 0x1c], 0x10
and dword [ebp - 0x18], 0xffffff
sub edi, edi
lea edi, [ebp - 0x1c]
mov di, 0x69
mov edi, 0x68
mov edi, 0x37
push edi
push dword [ebp - 0x1c]
call fcn.10014135
mov eax, dword [ebp - 0x1c]
mov eax, 0x80
xor dword [ebp - 0x1c], 0xff
mov dword [ebp - 0x18], 2
mov ecx, dword [ebp - 0x18]
and dword [ebp - 0x24], 0xff
mov eax, 0x6b
xor edx, edx
xor ecx, ecx
mov cx, 1
mov edx, 0x20
sub dword [ebp - 0x24], 0x40
sub edx, edx
cmp edx, 0x598
je 0x1000227f
mov ecx, dword [ebp - 0x24]
xor ecx, ecx
sub dword [ebp - 0x20], 8
mov dword [ebp - 0x18], edx
mov dx, 4
mov dword [ebp - 0x20], edx
call fcn.1000d608
sub ecx, ecx
sub ecx, ecx
mov cx, 0x16
xor ecx, ecx
sub dword [ebp - 0x24], 0x7b
cmp ecx, 0
je 0x100022a4
mov eax, dword [ebp - 0x1c]
and dword [ebp - 0x24], 0xffff
xor ecx, ecx
mov ecx, 0
xor ecx, ecx
mov dword [ebp - 0x20], 0x77
cmp ecx, 0x5ed
jne 0x100022c3
mov edi, 0x200
sub ecx, ecx
push dword [ebp - 0x1c]
call fcn.10014e17
mov eax, dword [ebp - 0x24]
xor ecx, ecx
xor ecx, ecx
mov ecx, dword [ebp - 0x20]
xor ecx, ecx
cmp ecx, 0
jae 0x100022e9
mov edx, 0x200
cmp ecx, 0x599
jae 0x100022e9
mov dword [ebp - 0x18], ecx
mov edx, dword [ebp - 0x18]
xor edx, edx
xor dword [ebp - 0x20], 0xffff
lea edx, [ebp - 0x1c]
mov dx, 8
test edx, edx
jne 0x1000230b
mov ecx, dword [ebp - 0x24]
cmp edx, dword [ebp - 0x20]
ja 0x1000230b
mov dword [ebp - 0x1c], edx
mov edx, 0x10
call fcn.100069bc
sub edx, edx
sub dword [ebp - 0x1c], 4
xor dword [ebp - 0x18], 0xff
mov cx, 0x72
cmp dword [ebp - 0x18], edx
jbe 0x1000234b
mov ecx, 0
mov ecx, 0x63
mov dx, 0x2d
add dword [ebp - 0x20], 0x4a
xor dword [ebp - 0x20], 0xffff
xor edx, edx
xor ecx, ecx
call fcn.100190be
sub edx, edx
mov ecx, 0x6a
sub edx, edx
or dword [ebp - 0x18], 0xffff
or dword [ebp - 0x1c], 0xff00ff
cmp edx, 0xf6
jbe 0x1000237f
sub ecx, ecx
sub edx, edx
or dword [ebp - 0x20], 0xffff
mov edx, 0x19
mov eax, dword [ebp - 0x20]
lea eax, [ebp - 0x20]
mov ax, 0x7a
cmp eax, dword [ebp - 0x24]
je 0x1000239e
mov ecx, pe_nt_image_headers32
or dword [ebp - 0x1c], 0xff
test eax, eax
jb 0x1000239e
mov edx, dword [ebp - 0x1c]
mov dword [ebp - 0x18], 2
mov dx, 0x6b
mov dx, 1
test edx, edx
ja 0x100023c7
add dword [ebp - 0x20], 0x7c
mov dx, 0x79
sub dword [ebp - 0x1c], 0x36
mov ecx, 0x12c
xor ecx, ecx
mov eax, 0
mov ax, 8
sub eax, eax
sub dword [ebp - 0x20], 0x27
sub dword [ebp - 0x24], 2
cmp dword [ebp - 0x24], eax
je 0x1000240b
or dword [ebp - 0x1c], 0xffffff
and dword [ebp - 0x18], 0xffff
mov eax, dword [ebp - 0x1c]
xor eax, eax
and dword [ebp - 0x18], 0xffff
or dword [ebp - 0x1c], 0xffff
and dword [ebp - 0x24], 0xffffff
mov ax, 0x10
add dword [ebp - 0x18], 0x10
push dword [ebp - 0x18]
push eax
call fcn.10014135
sub edx, edx
cmp edx, 0
ja 0x1000242f
mov eax, 0
cmp eax, dword [ebp - 0x1c]
jne 0x1000242f
mov dword [ebp - 0x18], edx
mov dword [ebp - 0x1c], edx
call fcn.100069bc
sub ecx, ecx
add dword [ebp - 0x20], 1
or dword [ebp - 0x20], 0xffff
mov dword [ebp - 0x18], ecx
test ecx, ecx
jae 0x10002455
mov eax, 0xc8
cmp ecx, 0xaf
jbe 0x10002455
sub esi, esi
and dword [ebp - 0x1c], 0xff00ff
cmp esi, dword [ebp - 0x20]
jbe 0x1000246a
xor esi, esi
mov esi, 2
sub dword [ebp - 0x18], 0x20
sub esi, esi
push esi
push esi
push dword [ebp - 0x1c]
call fcn.10014135
call dword [sym.imp.kernel32.dll_GetCommandLineA]
mov dword [ebp - 0x24], edi
mov ecx, dword [ebp]
mov cx, 0x80
mov di, 0x8f
mov edx, dword [ebp]
lea eax, [ebp]
lea eax, [ebp]
mov ecx, dword [ebp - 0x24]
mov edi, dword [ebp]
mov dword [ebp - 0x20], edx
mov edi, 0x15
mov ecx, edi
mov edx, dword [ebp - 0x24]
mov ecx, 0x10
mov edi, dword [esp]
mov edi, 0x22
mov edi, 1
mov dword [ebp - 0x18], edi
lea edi, [ebp - 0x18]
lea edi, [ebp - 0x1c]
mov eax, esi
mov esi, dword [esp]
lea edi, [ebp - 0x18]
lea edi, [ebp - 0x18]
lea esi, [ebp]
mov ecx, eax
lea edi, [ebp - 0x24]
lea edi, [ebp]
mov eax, dword [ebp]
lea edx, [ebp - 0x1c]
mov edi, dword [ebp]
mov edi, dword [ebp]
mov ecx, dword [ebp]
mov ecx, dword [ebp - 0x18]
mov esi, edi
lea edx, [ebp]
mov edi, dword [ebp]
mov eax, dword [ebp]
mov ecx, dword [esp]
mov ecx, eax
mov eax, dword [ebp]
mov esi, edx
mov edi, dword [ebp]
mov dword [ebp - 0x24], eax
mov cx, 1
mov eax, 2
lea esi, [ebp - 0x24]
mov si, 0x58
lea ecx, [ebp - 0x24]
mov dword [ebp - 0x1c], edi
mov edi, edx
mov edi, dword [ebp - 0x20]
mov eax, dword [ebp]
mov esi, 8
mov dx, 1
lea edi, [ebp]
lea edx, [ebp]
mov edi, esi
lea ecx, [ebp]
lea edx, [esp]
mov eax, dword [esp]
mov eax, dword [esp]
mov eax, 0xdc
mov edx, edi
mov ecx, dword [ebp - 0x18]
mov si, 0x3e
lea esi, [ebp]
lea eax, [ebp - 0x18]
lea edx, [esp]
lea ecx, [ebp - 0x1c]
lea edi, [esp]
lea esi, [esp]
mov dword [ebp - 0x18], eax
mov edx, 0xd6
mov eax, ecx
lea edi, [ebp]
mov esi, 0x57
mov dword [ebp - 0x18], edx
lea eax, [ebp]
mov edi, dword [ebp - 0x20]
mov eax, dword [esp]
mov dx, 0x9d
mov dword [ebp - 0x20], edx
mov edi, dword [esp]
lea edi, [ebp - 0x20]
mov dword [ebp - 0x1c], edx
lea esi, [ebp]
mov eax, dword [ebp - 0x1c]
lea esi, [esp]
mov esi, dword [ebp]
mov dword [ebp - 0x18], ecx
mov dword [ebp - 0x24], esi
mov ax, 2
mov dword [ebp - 0x20], edi
mov ax, 0xb2
mov dword [ebp - 0x24], ecx
mov ecx, 0x40
lea edx, [ebp]
mov edi, dword [ebp]
mov ecx, dword [esp]
lea eax, [ebp - 0x20]
mov edi, dword [esp]
mov ax, 0x83
mov edi, 0x10
mov eax, 0xaa
mov dword [ebp - 0x20], ecx
mov edx, 4
mov edi, dword [ebp - 0x18]
mov esi, edi
mov ecx, edx
mov dword [ebp - 0x1c], edx
mov ecx, dword [esp]
lea ecx, [ebp - 0x1c]
mov edi, dword [esp]
mov ecx, edi
lea edi, [ebp]
lea esi, [ebp - 0x20]
lea eax, [esp]
mov di, 0xd4
lea edx, [ebp]
mov edi, 0x91
lea eax, [ebp - 0x20]
mov edi, dword [esp]
mov edx, dword [ebp]
mov ax, 2
mov edx, dword [esp]
mov eax, 4
mov esi, ecx
mov ecx, dword [esp]
mov dword [ebp - 0x18], edi
mov edi, dword [ebp - 0x18]
lea edx, [ebp - 0x1c]
lea edi, [esp]
lea esi, [ebp]
mov di, 0x40
mov esi, eax
mov edx, ecx
mov cx, 4
mov edi, 1
mov cx, 4
mov esi, 8
lea eax, [esp]
mov dword [ebp - 0x18], ecx
lea esi, [ebp]
mov edi, edx
mov edx, edi
mov dword [ebp - 0x24], ecx
mov eax, dword [esp]
lea edi, [ebp]
lea edi, [esp]
lea edi, [ebp - 0x20]
mov dword [ebp - 0x1c], edx
lea edi, [esp]
mov eax, dword [esp]
mov edi, dword [ebp]
mov edi, 0x48
mov ecx, eax
lea esi, [esp]
mov edx, dword [ebp - 0x1c]
mov esi, dword [esp]
lea esi, [esp]
mov eax, dword [esp]
mov edi, dword [ebp]
mov edi, dword [ebp - 0x1c]
lea edi, [ebp - 0x20]
mov esi, edx
mov di, 2
mov edi, 0xe1
mov si, 0xc9
mov edx, dword [ebp]
mov eax, edx
mov edi, edx
lea edi, [esp]
mov edi, dword [ebp - 0x18]
mov dx, 0x10
mov ecx, dword [esp]
mov eax, dword [ebp]
mov eax, dword [ebp - 0x24]
mov ecx, dword [ebp]
lea edi, [esp]
mov edi, dword [ebp]
lea edi, [ebp - 0x1c]
mov si, 4
lea edi, [esp]
lea eax, [esp]
mov edx, dword [ebp - 0x18]
lea edx, [ebp - 0x20]
sub edx, edx
mov dx, 4
test edx, edx
jbe 0x100026fb
xor eax, eax
xor eax, eax
mov dword [ebp - 0x24], 0x54
mov ax, 0x22
xor dword [ebp - 0x18], 0xff
xor dword [ebp - 0x20], 0xffff
leave
ret