Function at 0x1000b1ff
Capabilities:
Get disk information
Get thread local storage value

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x10061e6f
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
push ecx
sub esp, 0x460
push ebx
push esi
push edi
mov dword [ebp - 0x10], esp
movzx eax, byte [ebp + 0x30]
test eax, eax
je 0x1000ce7d
mov eax, dword [ebp + 0x28]
mov dword [ebp - 0x2ac], eax
lea eax, [ebp + 0x18]
mov dword [ebp - 0x2b8], eax
lea eax, [ebp + 8]
mov dword [ebp - 0x274], eax
mov eax, dword [ebp + 0x1c]
mov dword [ebp - 0x314], eax
mov eax, dword [ebp + 0x2c]
mov dword [ebp - 0x324], eax
mov eax, dword [ebp + 0x24]
mov dword [ebp - 0x31c], eax
mov eax, dword [ebp - 0x274]
movzx eax, byte [eax]
test eax, eax
je 0x1000cde9
mov eax, dword [ebp - 0x2b8]
mov dword [ebp - 0x5c], eax
mov eax, dword [ebp - 0x324]
mov dword [ebp - 0x1e8], eax
mov dword [ebp - 0x1f8], 0x324ec2e0
mov dword [ebp - 0x3b4], 0x52d8cb4c
mov dword [ebp - 0x3ac], 0x5425a80e
mov dword [ebp - 0x39c], 0x416db6d0
mov dword [ebp - 0x380], 0xaf5af8b5
mov dword [ebp - 0x330], 0x9dbea522
mov dword [ebp - 0x1a8], 0x5d8c
mov dword [ebp - 0x32c], str.uyco_fts_emi_lzq_asyyizwbr_jmzku_sgguwzrrj_oqnlru
cmp dword [ebp - 0x1a8], 0x5eea
jle 0x1000b35c
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_QueryDosDeviceW]
and dword [ebp - 0xb0], 0
jmp 0x1000b30a
mov eax, dword [ebp - 0xb0]
inc eax
mov dword [ebp - 0xb0], eax
cmp dword [ebp - 0xb0], 0x67d4
jge 0x1000b35c
and dword [ebp - 0x70], 0
jmp 0x1000b323
mov eax, dword [ebp - 0x70]
inc eax
mov dword [ebp - 0x70], eax
cmp dword [ebp - 0x70], 0x416c
jge 0x1000b35a
mov eax, dword [ebp - 0xb0]
add eax, dword [ebp - 0x70]
cdq
mov dword [ebp - 0x2c4], eax
mov dword [ebp - 0x2c0], edx
push dword [ebp - 0x2c0]
push dword [ebp - 0x2c4]
mov ecx, 0x1007fdb8
call fcn.1000e5de
jmp 0x1000b31c
jmp 0x1000b2fd
mov dword [ebp - 0x334], 0xb82c4475
and dword [ebp - 4], 0
cmp dword [ebp - 0x1a8], 0x5be4
jge 0x1000b386
mov edx, dword [ebp - 0x32c]
mov ecx, 0x1007fdb8
call fcn.100113ff
jmp 0x1000b3a2
or dword [ebp - 4], 0xffffffff
jmp 0x1000b3ac
mov dword [ebp - 0xc8], 0
jmp 0x1000b3c5
mov eax, dword [ebp - 0xc8]
inc eax
mov dword [ebp - 0xc8], eax
cmp dword [ebp - 0xc8], 2
jge 0x1000b3e1
mov eax, dword [ebp - 0xc8]
mov dword [ebp + eax*4 - 0x428], 1
jmp 0x1000b3b8
push 1
push 0x4b27
push 1
push 0x2ba6
push 1
lea eax, [ebp - 0x1f8]
push eax
call fcn.10009efb
add esp, 0x18
push 0x792
push 1
push 0x4441
lea eax, [ebp - 0x334]
push eax
lea eax, [ebp - 0x1f8]
push eax
push 0x3e95
lea eax, [ebp - 0x330]
push eax
push 0x14c3
push 0x4992
push 1
push 0x2437
push 0
call fcn.1000b1ff
add esp, 0x30
mov eax, dword [0x101444a0]
and eax, 1
jne 0x1000b478
mov eax, dword [0x101444a0]
or eax, 1
mov dword [0x101444a0], eax
mov dword [ebp - 4], 2
mov ecx, 0x101444b0
call fcn.1000ecba
push 0x10063626
call fcn.10048619
pop ecx
or dword [ebp - 4], 0xffffffff
mov dword [ebp - 0xf0], 0x3b26bdde
mov dword [ebp - 0x108], 0xa8fe
mov dword [ebp - 0x328], 0xe5f0e77d
mov dword [ebp - 0x3a4], 9
push 0x64c
push 0x3e0
push 0x1d05
push 0xb08
push 0x24c5
push 1
push 1
push 0x4f8e
push 0x3e4d
lea eax, [ebp - 0x108]
push eax
push 1
push 0x540c
lea eax, [ebp - 0xf0]
push eax
push 0x383e
push 0x67d6
call fcn.1000a066
add esp, 0x3c
lea eax, [ebp - 0xf0]
push eax
push 0x51a3
lea eax, [ebp - 0x108]
push eax
push 0x6de6
push 0x7456
push 4
push 0x125e
push 1
push 1
lea eax, [ebp - 0x328]
push eax
push 0x7667
push 0xdb2
push 0x7ed5
call fcn.1000629f
add esp, 0x34
mov eax, dword [ebp - 0x5c]
mov ecx, dword [eax]
call fcn.10003282
mov dword [ebp - 0xbc], eax
mov dword [ebp - 0x14], 0x32b1cecb
mov dword [ebp - 0x2c], 0xffffffff
mov dword [ebp - 0x60], 0x657689a5
mov dword [ebp - 0x254], 0xffffffff
mov dword [ebp - 0x3bc], 0
mov dword [ebp - 0x78], 0
jmp 0x1000b57d
mov eax, dword [ebp - 0x78]
inc eax
mov dword [ebp - 0x78], eax
cmp dword [ebp - 0x78], 4
jge 0x1000b593
mov eax, dword [ebp - 0x78]
mov dword [ebp + eax*4 - 0x214], 1
jmp 0x1000b576
mov dword [ebp - 0x14], 3
jmp 0x1000b5a3
mov eax, dword [ebp - 0x14]
dec eax
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 0
jl 0x1000b640
mov eax, dword [ebp - 0x14]
cmp dword [ebp + eax*4 - 0x214], 0
je 0x1000b5bf
jmp 0x1000b640
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp + eax*4 - 0x214]
mov dword [ebp - 0x3c4], eax
mov eax, dword [ebp - 0x14]
imul eax, dword [ebp + eax*4 - 0x214], 0xa29c
test eax, eax
je 0x1000b5f6
mov eax, 0x64f16efa
test eax, eax
je 0x1000b5f6
mov dword [ebp - 0x184], 1
jmp 0x1000b5fd
and dword [ebp - 0x184], 0
mov eax, dword [ebp - 0x14]
mov ecx, dword [ebp - 0x14]
mov ecx, dword [ebp + ecx*4 - 0x214]
sub ecx, dword [ebp + eax*4 - 0x214]
mov dword [ebp - 0x2c], ecx
mov eax, dword [ebp - 0x2c]
cmp dword [ebp - 0x184], eax
jle 0x1000b62b
mov dword [ebp - 0x10c], 1
jmp 0x1000b632
and dword [ebp - 0x10c], 0
mov eax, dword [ebp - 0x10c]
mov dword [ebp - 0x60], eax
jmp 0x1000b59c
mov dword [ebp - 0x2c], 0xfffffff5
jmp 0x1000b650
mov eax, dword [ebp - 0x2c]
inc eax
mov dword [ebp - 0x2c], eax
cmp dword [ebp - 0x2c], 7
jne 0x1000bccb
mov dword [ebp - 0x104], 0xca4b38b4
mov dword [ebp - 0x100], 0xca4b38b4
mov dword [ebp - 0xfc], 0xca4b38b4
mov dword [ebp - 0xf8], 0xca4b38b4
mov dword [ebp - 0x18], 5
mov dword [ebp - 0x17c], 0xe06dcf8e
mov dword [ebp - 0x60], 0xffffffec
jmp 0x1000b6a3
mov eax, dword [ebp - 0x60]
inc eax
mov dword [ebp - 0x60], eax
cmp dword [ebp - 0x60], 0xffffffff
je 0x1000bcc6
mov dword [ebp - 0x50], 3
mov dword [ebp - 0x15c], 9
mov dword [ebp - 0x68], 0
jmp 0x1000b6ce
mov eax, dword [ebp - 0x68]
inc eax
mov dword [ebp - 0x68], eax
cmp dword [ebp - 0x68], 1
jge 0x1000b6e1
mov eax, dword [ebp - 0x68]
mov dword [ebp + eax*4 - 0x44], 0xffffffff
jmp 0x1000b6c7
mov dword [ebp - 0x14], 1
jmp 0x1000b6f1
mov eax, dword [ebp - 0x14]
inc eax
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 6
jg 0x1000bcc1
mov dword [ebp - 0x2c8], 5
push 3
lea ecx, [ebp - 0x344]
call fcn.1000e8c0
mov dword [ebp - 4], 3
mov dword [ebp - 0x34], 0x404d
mov dword [ebp - 0xd8], 0x7e9a
mov dword [ebp - 0x1bc], 1
mov dword [ebp - 0x80], 0
jmp 0x1000b744
mov eax, dword [ebp - 0x80]
inc eax
mov dword [ebp - 0x80], eax
cmp dword [ebp - 0x80], 3
jge 0x1000b75d
push dword [ebp - 0x80]
lea ecx, [ebp - 0x344]
call fcn.1000e95f
and dword [eax], 0
jmp 0x1000b73d
cmp dword [ebp - 0x50], 1
jle 0x1000b76f
mov dword [ebp - 0x1c4], 1
jmp 0x1000b776
and dword [ebp - 0x1c4], 0
mov eax, dword [ebp - 0x1c4]
mov dword [ebp - 0x2b0], eax
mov eax, dword [ebp - 0x34]
mov dword [ebp - 0x24c], eax
mov eax, dword [ebp - 0x34]
inc eax
mov dword [ebp - 0x34], eax
mov eax, dword [ebp - 0x2b0]
cmp eax, dword [ebp - 0x24c]
jl 0x1000b7ac
mov dword [ebp - 0x144], 1
jmp 0x1000b7b3
and dword [ebp - 0x144], 0
push 1
lea ecx, [ebp - 0x344]
call fcn.1000e95f
mov dword [eax], 0x46ac1dea
or eax, 0xffffffff
add eax, 0x46ac1dea
cmp eax, 1
jae 0x1000b7df
mov dword [ebp - 0x114], 1
jmp 0x1000b7e6
and dword [ebp - 0x114], 0
cmp dword [ebp - 0x114], 0xfff9
jne 0x1000b7fe
mov dword [ebp - 0x18c], 1
jmp 0x1000b805
and dword [ebp - 0x18c], 0
mov eax, dword [ebp - 0xd8]
cmp dword [ebp - 0x18c], eax
jge 0x1000b81f
mov dword [ebp - 0x11c], 1
jmp 0x1000b826
and dword [ebp - 0x11c], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x44]
sub eax, dword [ebp - 0x11c]
cmp eax, dword [ebp - 0x14]
jle 0x1000b847
mov dword [ebp - 0x1e4], 1
jmp 0x1000b84e
and dword [ebp - 0x1e4], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x44]
cmp dword [ebp - 0x1e4], eax
jg 0x1000b86c
mov dword [ebp - 0x124], 1
jmp 0x1000b873
and dword [ebp - 0x124], 0
cmp dword [ebp - 0x124], 1
jae 0x1000b888
mov dword [ebp - 0x194], 1
jmp 0x1000b88f
and dword [ebp - 0x194], 0
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x104]
cmp dword [ebp - 0x194], eax
jge 0x1000b8af
mov dword [ebp - 0x12c], 1
jmp 0x1000b8b6
and dword [ebp - 0x12c], 0
mov eax, dword [ebp - 0x12c]
sub eax, dword [ebp - 0x50]
je 0x1000b8dc
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0x104], 0
je 0x1000b8dc
mov dword [ebp - 0x1cc], 1
jmp 0x1000b8e3
and dword [ebp - 0x1cc], 0
mov eax, dword [ebp - 0x1cc]
neg eax
cmp eax, dword [ebp - 0x2c8]
jg 0x1000b8ff
mov dword [ebp - 0x134], 1
jmp 0x1000b906
and dword [ebp - 0x134], 0
push 4
pop eax
imul eax, eax, 0
imul ecx, dword [ebp - 0x134], 0xeab6
cmp ecx, dword [ebp + eax - 0x104]
jge 0x1000b92b
mov dword [ebp - 0x19c], 1
jmp 0x1000b932
and dword [ebp - 0x19c], 0
cmp dword [ebp - 0x19c], 0x56e
jge 0x1000b94a
mov dword [ebp - 0x13c], 1
jmp 0x1000b951
and dword [ebp - 0x13c], 0
cmp dword [ebp - 0x13c], 0xffffffff
jbe 0x1000b966
mov dword [ebp - 0x1f4], 1
jmp 0x1000b96d
and dword [ebp - 0x1f4], 0
mov eax, dword [ebp - 0x18]
cmp dword [ebp - 0x1f4], eax
jge 0x1000b984
mov dword [ebp - 0x1a4], 1
jmp 0x1000b98b
and dword [ebp - 0x1a4], 0
mov eax, dword [ebp - 0x144]
cmp eax, dword [ebp - 0x1a4]
je 0x1000b9a5
mov dword [ebp - 0x14c], 1
jmp 0x1000b9ac
and dword [ebp - 0x14c], 0
mov eax, dword [ebp - 0x14]
cmp dword [ebp - 0x14c], eax
je 0x1000b9c3
mov dword [ebp - 0x1d4], 1
jmp 0x1000b9ca
and dword [ebp - 0x1d4], 0
cmp dword [ebp - 0x1d4], 0x1c91
jl 0x1000b9e1
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x44], 0
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0x104], 0xdf274c11
jae 0x1000b9ff
mov dword [ebp - 0x154], 1
jmp 0x1000ba06
and dword [ebp - 0x154], 0
mov eax, dword [ebp - 0x14]
cmp eax, dword [ebp - 0x154]
jg 0x1000ba1d
mov dword [ebp - 0x1ac], 1
jmp 0x1000ba24
and dword [ebp - 0x1ac], 0
push 4
pop eax
shl eax, 1
imul ecx, dword [ebp - 0x1ac], 7
add ecx, dword [ebp - 0x15c]
imul ecx, dword [ebp - 0xd8]
add ecx, dword [ebp + eax - 0x104]
mov dword [ebp - 0x1bc], ecx
mov dword [ebp - 0x18], 0
jmp 0x1000ba5a
mov eax, dword [ebp - 0x18]
inc eax
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 3
jg 0x1000bcad
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp + eax*4 - 0x214]
mov dword [ebp - 0x3b0], eax
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp + eax*4 - 0x214]
cmp eax, dword [ebp - 0x15c]
je 0x1000ba92
mov dword [ebp - 0x1ec], 1
jmp 0x1000ba99
and dword [ebp - 0x1ec], 0
mov eax, dword [ebp - 0x50]
cmp dword [ebp - 0x1ec], eax
jge 0x1000bab0
mov dword [ebp - 0x164], 1
jmp 0x1000bab7
and dword [ebp - 0x164], 0
mov eax, dword [ebp - 0x164]
mov dword [ebp - 0x50], eax
mov eax, dword [ebp - 0x14]
add eax, dword [ebp - 0x50]
je 0x1000bacc
cmp dword [ebp - 0x2c], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0xd8]
cmp ecx, dword [ebp + eax - 0x44]
je 0x1000baea
mov dword [ebp - 0x1b4], 1
jmp 0x1000baf1
and dword [ebp - 0x1b4], 0
cmp dword [ebp - 0x1b4], 0xa76c
jne 0x1000bb10
push 7
pop eax
test eax, eax
jne 0x1000bb10
mov dword [ebp - 0x16c], 1
jmp 0x1000bb17
and dword [ebp - 0x16c], 0
cmp dword [ebp - 0x16c], 0
jle 0x1000bb2c
mov dword [ebp - 0x1dc], 1
jmp 0x1000bb33
and dword [ebp - 0x1dc], 0
imul eax, dword [ebp - 0x1dc], 0
cmp eax, 0xc891
jne 0x1000bb46
or eax, 0xffffffff
je 0x1000bb8c
mov eax, 0xabf266de
test eax, eax
je 0x1000bb8c
push 4
pop eax
imul eax, eax, 3
cmp dword [ebp + eax - 0x104], 0
je 0x1000bb8c
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0x214], 0
je 0x1000bb8c
push 1
lea ecx, [ebp - 0x344]
call fcn.1000e95f
cmp dword [eax], 0
je 0x1000bb8c
mov dword [ebp - 0x174], 1
jmp 0x1000bb93
and dword [ebp - 0x174], 0
mov eax, dword [ebp - 0x174]
mov dword [ebp - 0x1bc], eax
mov dword [ebp - 0x34], 0
jmp 0x1000bbaf
mov eax, dword [ebp - 0x34]
inc eax
mov dword [ebp - 0x34], eax
cmp dword [ebp - 0x34], 3
jg 0x1000bca8
mov dword [ebp - 0x3c8], 0xe100
mov dword [ebp - 0x17c], 1
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x44]
cmp eax, dword [ebp - 0x17c]
jle 0x1000bbeb
mov dword [ebp - 0x1fc], 1
jmp 0x1000bbf2
and dword [ebp - 0x1fc], 0
push 4
pop eax
imul eax, eax, 3
mov eax, dword [ebp + eax - 0x104]
cmp dword [ebp - 0x1fc], eax
jl 0x1000bc13
mov dword [ebp - 0xf4], 1
jmp 0x1000bc1a
and dword [ebp - 0xf4], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x44]
cmp eax, dword [ebp - 0xf4]
jge 0x1000bc38
mov dword [ebp - 0xec], 1
jmp 0x1000bc3f
and dword [ebp - 0xec], 0
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp + eax*4 - 0x214]
imul eax, dword [ebp - 0xec]
push 4
pop ecx
imul ecx, ecx, 0
cmp dword [ebp + ecx - 0x104], eax
jl 0x1000bc6b
mov dword [ebp - 0x110], 1
jmp 0x1000bc72
and dword [ebp - 0x110], 0
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp + eax*4 - 0x214]
cmp dword [ebp - 0x110], eax
je 0x1000bc90
mov dword [ebp - 0x118], 1
jmp 0x1000bc97
and dword [ebp - 0x118], 0
mov eax, dword [ebp - 0x118]
mov dword [ebp - 0x254], eax
jmp 0x1000bba8
jmp 0x1000ba53
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x344]
call fcn.1000e943
jmp 0x1000b6ea
jmp 0x1000b69c
jmp 0x1000b649
cmp dword [ebp - 0xbc], 6
jae 0x1000bdf0
mov eax, dword [ebp - 0x5c]
mov eax, dword [eax]
mov dword [ebp - 0x318], eax
lea eax, [ebp - 0x3b8]
push eax
mov ecx, 0x101444b0
call fcn.1000ea3c
push eax
lea eax, [ebp - 0x318]
push eax
lea eax, [ebp - 0x3ec]
push eax
mov ecx, 0x101444b0
call fcn.1000ea4a
mov ecx, eax
call fcn.1000ea5f
movzx eax, al
test eax, eax
je 0x1000bdf0
mov dword [ebp - 0x1c], 0
jmp 0x1000bd2f
mov eax, dword [ebp - 0x1c]
inc eax
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 3
jge 0x1000bd45
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0x3fc], 0xae35
jmp 0x1000bd28
mov dword [ebp - 0x1c], 0
jmp 0x1000bd55
mov eax, dword [ebp - 0x1c]
inc eax
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 2
jge 0x1000bd6b
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0x204], 0x4cd45360
jmp 0x1000bd4e
push 4
pop eax
shl eax, 0
mov dword [ebp + eax - 0x204], 0
jmp 0x1000bd99
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x204]
inc eax
push 4
pop ecx
shl ecx, 0
mov dword [ebp + ecx - 0x204], eax
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x204], 3
jge 0x1000bdc3
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x204]
mov dword [ebp + eax*4 - 0x3fc], 0x473e
jmp 0x1000bd7e
mov eax, dword [ebp - 0x5c]
mov eax, dword [eax]
mov dword [ebp - 0x25c], eax
lea eax, [ebp - 0x25c]
push eax
mov ecx, 0x101444b0
call fcn.1000ed0e
push eax
mov ecx, dword [ebp - 0x1e8]
call fcn.1000e75d
jmp 0x1000cf59
mov dword [ebp - 0x120], 0x669
mov dword [ebp - 0x338], str.iculnknai_vzqvhkl_bgtkblgd_iicl_uyempn_dnuqnr_gebbuvvr_bgtecuxh_lobgmz_ccaffve_city_lxuxdpw_gnchkgkia
cmp dword [ebp - 0x120], 0x9b8
jle 0x1000bf1d
and dword [ebp - 0x90], 0
jmp 0x1000be2a
mov eax, dword [ebp - 0x90]
inc eax
mov dword [ebp - 0x90], eax
cmp dword [ebp - 0x90], 0x4e05
jge 0x1000bf1d
and dword [ebp - 0xd4], 0
jmp 0x1000be50
mov eax, dword [ebp - 0xd4]
inc eax
mov dword [ebp - 0xd4], eax
cmp dword [ebp - 0xd4], 0xee0
jge 0x1000bf18
and dword [ebp - 0x88], 0
jmp 0x1000be76
mov eax, dword [ebp - 0x88]
inc eax
mov dword [ebp - 0x88], eax
cmp dword [ebp - 0x88], 0x2f67
jge 0x1000bf13
and dword [ebp - 0xb8], 0
jmp 0x1000be9c
mov eax, dword [ebp - 0xb8]
inc eax
mov dword [ebp - 0xb8], eax
cmp dword [ebp - 0xb8], 0x4879
jge 0x1000bf0e
mov eax, dword [ebp - 0xd4]
cdq
idiv dword [ebp - 0x88]
sub edx, dword [ebp - 0xb8]
and edx, dword [ebp - 0x90]
mov eax, edx
cdq
mov dword [ebp - 0x2d0], eax
mov dword [ebp - 0x2cc], edx
push dword [ebp - 0x2cc]
push dword [ebp - 0x2d0]
lea ecx, [ebp - 0x44c]
call fcn.10001a7f
pop ecx
pop ecx
mov dword [ebp - 0x2d4], eax
mov ecx, dword [ebp - 0x2d4]
call fcn.1000e5be
push eax
call fcn.10048643
pop ecx
lea ecx, [ebp - 0x44c]
call fcn.1000e5b4
jmp 0x1000be8f
jmp 0x1000be69
jmp 0x1000be43
jmp 0x1000be1d
push 2
lea ecx, [ebp - 0x364]
call fcn.1000e8c0
mov dword [ebp - 4], 4
mov dword [ebp - 0x264], 0x6432a276
mov dword [ebp - 0xd0], 0
jmp 0x1000bf54
mov eax, dword [ebp - 0xd0]
inc eax
mov dword [ebp - 0xd0], eax
cmp dword [ebp - 0xd0], 2
jge 0x1000bf76
push dword [ebp - 0xd0]
lea ecx, [ebp - 0x364]
call fcn.1000e95f
mov dword [eax], 0x55bb2c21
jmp 0x1000bf47
push 1
lea eax, [ebp - 0x364]
push eax
push 1
push 0x1cc4
push 0x59d6
lea eax, [ebp - 0x264]
push eax
push 0x224c
push 0x7709
call fcn.1000a57a
add esp, 0x20
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x364]
call fcn.1000e943
mov dword [ebp - 4], 5
cmp dword [ebp - 0x120], 0x46a
jge 0x1000bfd2
push dword [ebp - 0x338]
call fcn.10048643
pop ecx
jmp 0x1000bfee
or dword [ebp - 4], 0xffffffff
jmp 0x1000bff8
lea ecx, [ebp - 0x3e4]
call fcn.1000e71b
mov dword [ebp - 4], 7
push 1
lea ecx, [ebp - 0x37c]
call fcn.1000e8c0
mov byte [ebp - 4], 8
mov dword [ebp - 0x48], 0
jmp 0x1000c02b
mov eax, dword [ebp - 0x48]
inc eax
mov dword [ebp - 0x48], eax
cmp dword [ebp - 0x48], 3
jge 0x1000c041
mov eax, dword [ebp - 0x48]
mov dword [ebp + eax*4 - 0x408], 0xffff
jmp 0x1000c024
lea eax, [ebp - 0x37c]
push eax
lea eax, [ebp - 0x48]
push eax
push 1
push 1
push 1
push 0x34db
call fcn.100075c4
add esp, 0x18
push 4
pop eax
shl eax, 1
mov esi, dword [ebp + eax - 0x408]
push 0
lea ecx, [ebp - 0x37c]
call fcn.1000e95f
mov dword [eax], esi
mov byte [ebp - 0x36], 0
push 1
lea eax, [ebp - 0x36]
push eax
push 0x1d9c
push 1
call fcn.1000a6b6
add esp, 0x10
mov byte [ebp - 4], 7
lea ecx, [ebp - 0x37c]
call fcn.1000e943
mov eax, dword [ebp - 0xbc]
xor edx, edx
push 2
pop ecx
div ecx
test edx, edx
jne 0x1000cdaf
mov dword [ebp - 0x20], 0
mov dword [ebp - 0x58], 0xffffffff
mov dword [ebp - 0x24], 0xfffffffc
mov dword [ebp - 0x140], 0x278c007c
mov dword [ebp - 0xe0], 1
mov dword [ebp - 0x128], 0x4a99
mov dword [ebp - 0x2e0], str.yvdwxc_jyojrgsn_bpyyktp_qhedwgt
cmp dword [ebp - 0x128], 0x4d5e
jle 0x1000c1b8
and dword [ebp - 0x98], 0
jmp 0x1000c11a
mov eax, dword [ebp - 0x98]
inc eax
mov dword [ebp - 0x98], eax
cmp dword [ebp - 0x98], 0x37c3
jge 0x1000c1ab
and dword [ebp - 0xc0], 0
jmp 0x1000c140
mov eax, dword [ebp - 0xc0]
inc eax
mov dword [ebp - 0xc0], eax
cmp dword [ebp - 0xc0], 0x3659
jge 0x1000c1a6
mov eax, dword [ebp - 0x98]
cdq
idiv dword [ebp - 0xc0]
mov eax, edx
cdq
mov dword [ebp - 0x2dc], eax
mov dword [ebp - 0x2d8], edx
push dword [ebp - 0x2d8]
push dword [ebp - 0x2dc]
lea ecx, [ebp - 0x470]
call fcn.10001a7f
pop ecx
pop ecx
mov dword [ebp - 0x26c], eax
mov ecx, dword [ebp - 0x26c]
call fcn.1000e5be
push eax
call fcn.10048643
pop ecx
lea ecx, [ebp - 0x470]
call fcn.1000e5b4
jmp 0x1000c133
jmp 0x1000c10d
push 0
push 0x2292
call dword [sym.imp.USER32.dll_FlashWindow]
mov dword [ebp - 0xdc], 0
mov byte [ebp - 4], 9
cmp dword [ebp - 0x128], 0x4901
jge 0x1000c1de
push dword [ebp - 0x2e0]
call fcn.10048643
pop ecx
jmp 0x1000c1fa
mov dword [ebp - 4], 7
jmp 0x1000c20a
mov dword [ebp - 0xa0], 0
jmp 0x1000c223
mov eax, dword [ebp - 0xa0]
inc eax
mov dword [ebp - 0xa0], eax
cmp dword [ebp - 0xa0], 3
jge 0x1000c23f
mov eax, dword [ebp - 0xa0]
mov dword [ebp + eax*4 - 0x22c], 0xfffffff6
jmp 0x1000c216
mov eax, dword [ebp - 0xe0]
inc eax
mov dword [ebp - 0xe0], eax
mov eax, dword [ebp - 0xe0]
mov dword [ebp - 0x130], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x130]
mov dword [ebp + eax - 0x22c], ecx
cmp dword [ebp - 0x130], 0
je 0x1000c297
mov eax, dword [ebp - 0xdc]
mov ecx, dword [ebp - 0xdc]
inc ecx
mov dword [ebp - 0xdc], ecx
test eax, eax
je 0x1000c297
mov dword [ebp - 0x138], 1
jmp 0x1000c29e
and dword [ebp - 0x138], 0
cmp dword [ebp - 0x138], 0xffffffff
jle 0x1000c2b3
mov dword [ebp - 0x240], 1
jmp 0x1000c2ba
and dword [ebp - 0x240], 0
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x384], eax
mov eax, dword [ebp - 0x20]
imul eax, dword [ebp - 0x24]
mov dword [ebp - 0x58], eax
mov eax, dword [ebp - 0x58]
mov dword [ebp - 0x388], eax
mov eax, dword [ebp - 0x58]
cmp eax, dword [ebp - 0x140]
jne 0x1000c2ed
mov dword [ebp - 0x148], 1
jmp 0x1000c2f4
and dword [ebp - 0x148], 0
mov eax, dword [ebp - 0x140]
cmp dword [ebp - 0x148], eax
jl 0x1000c30e
mov dword [ebp - 0x150], 1
jmp 0x1000c315
and dword [ebp - 0x150], 0
mov eax, dword [ebp - 0x24]
cmp dword [ebp - 0x150], eax
jg 0x1000c3fd
mov dword [ebp - 0x320], 0xfffd
mov dword [ebp - 0x27c], 0xfc75dfcc
push 0
push 0x361e
push 1
lea eax, [ebp - 0x320]
push eax
push 1
push 0x6897
call fcn.10009efb
add esp, 0x18
mov dword [ebp - 0x20], 2
jmp 0x1000c367
mov eax, dword [ebp - 0x20]
dec eax
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 0
jl 0x1000c3f8
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp + eax*4 - 0x22c]
cmp eax, dword [ebp - 0x27c]
jg 0x1000c38f
mov dword [ebp - 0x158], 1
jmp 0x1000c396
and dword [ebp - 0x158], 0
cmp dword [ebp - 0x158], 0x71d69170
jge 0x1000c3ae
mov dword [ebp - 0x160], 1
jmp 0x1000c3b5
and dword [ebp - 0x160], 0
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x160]
mov dword [ebp + eax*4 - 0x22c], ecx
mov byte [ebp - 0x35], 0
movzx eax, byte [ebp - 0x35]
test eax, eax
je 0x1000c3f3
push 0x3ba3
push 1
push 1
push 0
push 0x7d0d
push 0xb6d
push 0x1ced
call fcn.1000de5e
add esp, 0x1c
jmp 0x1000c360
jmp 0x1000c5f3
push 1
lea ecx, [ebp - 0x220]
call fcn.1000e8c0
mov byte [ebp - 4], 0xb
push 4
lea ecx, [ebp - 0x370]
call fcn.1000e8c0
mov byte [ebp - 4], 0xc
push 1
lea eax, [ebp - 0x2ec]
push eax
push 0x7728
push 0x739
push 1
lea eax, [ebp - 0x220]
push eax
call fcn.1000a780
add esp, 0x18
lea eax, [ebp - 0x370]
push eax
push 0x22fd
lea eax, [ebp - 0x2ec]
push eax
push 1
push 1
push 0x1028
push 0x459f
call fcn.100079dc
add esp, 0x1c
mov eax, dword [ebp - 0x58]
mov dword [ebp - 0x58], eax
mov dword [ebp - 0x24], 2
jmp 0x1000c482
mov eax, dword [ebp - 0x24]
dec eax
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 0
jl 0x1000c5d5
mov dword [ebp - 0x23c], 0
mov dword [ebp - 0x238], 0
mov dword [ebp - 0x234], 0
mov dword [ebp - 0x230], 0
push 0
lea ecx, [ebp - 0x220]
call fcn.1000e95f
push 4
pop eax
shl eax, 1
push 4
pop ecx
imul ecx, ecx, 0
mov ecx, dword [ebp + ecx - 0x22c]
cmp ecx, dword [ebp + eax - 0x23c]
jl 0x1000c4e8
mov dword [ebp - 0x284], 1
jmp 0x1000c4ef
and dword [ebp - 0x284], 0
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x390], eax
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x23c]
mov dword [ebp - 0x398], eax
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x23c]
mov dword [ebp - 0x3a0], eax
push 0
lea ecx, [ebp - 0x220]
call fcn.1000e95f
push 0
lea ecx, [ebp - 0x220]
call fcn.1000e95f
xor eax, eax
jne 0x1000c546
mov dword [ebp - 0x168], 1
jmp 0x1000c54d
and dword [ebp - 0x168], 0
mov eax, dword [ebp - 0x24]
cmp eax, dword [ebp - 0x168]
jl 0x1000c564
mov dword [ebp - 0x308], 1
jmp 0x1000c56b
and dword [ebp - 0x308], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x23c]
mov dword [ebp - 0x3cc], eax
push 0
lea ecx, [ebp - 0x220]
call fcn.1000e95f
push 4
pop eax
shl eax, 0
push 4
pop ecx
imul ecx, ecx, 0
mov ecx, dword [ebp + ecx - 0x22c]
add ecx, dword [ebp + eax - 0x23c]
mov dword [ebp - 0x170], ecx
mov eax, dword [ebp - 0x24]
mov ecx, dword [ebp - 0x170]
mov dword [ebp + eax*4 - 0x22c], ecx
push 3
lea ecx, [ebp - 0x370]
call fcn.1000e95f
mov ecx, dword [ebp - 0x170]
mov dword [eax], ecx
jmp 0x1000c47b
mov byte [ebp - 4], 0xb
lea ecx, [ebp - 0x370]
call fcn.1000e943
mov byte [ebp - 4], 7
lea ecx, [ebp - 0x220]
call fcn.1000e943
lea eax, [ebp - 0x458]
push eax
call fcn.10001af4
pop ecx
mov esi, eax
lea edi, [ebp - 0x414]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
lea esi, [ebp - 0x414]
lea edi, [ebp - 0x420]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
mov dword [ebp - 0x178], 0x2ad7
mov dword [ebp - 0x28c], str.xsajokyr_jqzrahj_ctrujvu_jxufoaaks
cmp dword [ebp - 0x178], 0x2cf4
jle 0x1000c6b3
and dword [ebp - 0xcc], 0
jmp 0x1000c650
mov eax, dword [ebp - 0xcc]
inc eax
mov dword [ebp - 0xcc], eax
cmp dword [ebp - 0xcc], 0x552a
jge 0x1000c6b3
and dword [ebp - 0xa8], 0
jmp 0x1000c672
mov eax, dword [ebp - 0xa8]
inc eax
mov dword [ebp - 0xa8], eax
cmp dword [ebp - 0xa8], 0x6383
jge 0x1000c6b1
mov eax, dword [ebp - 0xcc]
mov ecx, dword [ebp - 0xa8]
sar eax, cl
cdq
mov dword [ebp - 0x2e8], eax
mov dword [ebp - 0x2e4], edx
push dword [ebp - 0x2e4]
push dword [ebp - 0x2e8]
mov ecx, 0x1007fdb8
call fcn.1000e5de
jmp 0x1000c665
jmp 0x1000c643
mov dword [ebp - 0x3e8], 0x177e
mov byte [ebp - 4], 0xd
cmp dword [ebp - 0x178], 0x299e
jge 0x1000c6dd
mov edx, dword [ebp - 0x28c]
mov ecx, 0x1007fdb8
call fcn.100113ff
jmp 0x1000c6f9
mov dword [ebp - 4], 7
jmp 0x1000c709
mov dword [ebp - 0x3f0], 0xe00f
push 1
lea ecx, [ebp - 0x358]
call fcn.1000e8c0
mov byte [ebp - 4], 0xf
mov dword [ebp - 0x4c], 0
jmp 0x1000c734
mov eax, dword [ebp - 0x4c]
inc eax
mov dword [ebp - 0x4c], eax
cmp dword [ebp - 0x4c], 3
jge 0x1000c74a
mov eax, dword [ebp - 0x4c]
mov dword [ebp + eax*4 - 0x434], 0xebaeef20
jmp 0x1000c72d
push 1
push 0x3480
push 0
push 0x22bd
lea eax, [ebp - 0x358]
push eax
push 0x4b2
push 0x4337
lea eax, [ebp - 0x4c]
push eax
call fcn.1000a57a
add esp, 0x20
push 0x5864
push 0x2dfe
push 0x786b
push 1
lea eax, [ebp - 0x358]
push eax
push 0x470e
push 0x59b2
push 1
push 0x1582
push 1
push 0x26b8
call fcn.100099b8
add esp, 0x2c
mov byte [ebp - 4], 7
lea ecx, [ebp - 0x358]
call fcn.1000e943
mov dword [ebp - 0x180], 0x78b2
mov dword [ebp - 0x2f8], str.ujkpb_uzctaogq_pkic_vadfutwnc_okryy_jqx_nxsihmg_yedftkegy_sqobr_ikcysqpft
cmp dword [ebp - 0x180], 0x798d
jle 0x1000c88c
and dword [ebp - 0x6c], 0
jmp 0x1000c7ed
mov eax, dword [ebp - 0x6c]
inc eax
mov dword [ebp - 0x6c], eax
cmp dword [ebp - 0x6c], 0x1da9
jge 0x1000c88c
and dword [ebp - 0x74], 0
jmp 0x1000c807
mov eax, dword [ebp - 0x74]
inc eax
mov dword [ebp - 0x74], eax
cmp dword [ebp - 0x74], 0x2b5e
jge 0x1000c887
and dword [ebp - 0x7c], 0
jmp 0x1000c81d
mov eax, dword [ebp - 0x7c]
inc eax
mov dword [ebp - 0x7c], eax
cmp dword [ebp - 0x7c], 0x4aa6
jge 0x1000c882
and dword [ebp - 0x84], 0
jmp 0x1000c83c
mov eax, dword [ebp - 0x84]
inc eax
mov dword [ebp - 0x84], eax
cmp dword [ebp - 0x84], 0x2bc6
jge 0x1000c880
mov eax, dword [ebp - 0x6c]
add eax, dword [ebp - 0x74]
mov ecx, dword [ebp - 0x7c]
sar eax, cl
mov ecx, dword [ebp - 0x84]
shl eax, cl
cdq
mov dword [ebp - 0x2f4], eax
mov dword [ebp - 0x2f0], edx
push dword [ebp - 0x2f0]
push dword [ebp - 0x2f4]
mov ecx, 0x1007fdb8
call fcn.1000e5de
jmp 0x1000c82f
jmp 0x1000c816
jmp 0x1000c800
jmp 0x1000c7e6
mov eax, dword [ebp - 0x5c]
mov ecx, dword [eax]
call fcn.100032a6
mov dword [ebp - 0x304], eax
mov byte [ebp - 4], 0x10
cmp dword [ebp - 0x180], 0x7759
jge 0x1000c8bc
mov edx, dword [ebp - 0x2f8]
mov ecx, 0x1007fdb8
call fcn.100113ff
jmp 0x1000c8d8
mov dword [ebp - 4], 7
jmp 0x1000c8e8
mov dword [ebp - 0x40], 0x39beb064
mov dword [ebp - 0x188], 0x49d2
mov dword [ebp - 0x294], str.camxtwkx_ivtobrjf_yjt_yyxafe_tas_jui_aybjzdajr_pwzczke_lrqiww_pdlmv_wimhhwy_flvbfz
cmp dword [ebp - 0x188], 0x4a4a
jle 0x1000c9ff
and dword [ebp - 0x8c], 0
jmp 0x1000c929
mov eax, dword [ebp - 0x8c]
inc eax
mov dword [ebp - 0x8c], eax
cmp dword [ebp - 0x8c], 0x7572
jge 0x1000c9f7
and dword [ebp - 0x94], 0
jmp 0x1000c94f
mov eax, dword [ebp - 0x94]
inc eax
mov dword [ebp - 0x94], eax
cmp dword [ebp - 0x94], 0x9c6
jge 0x1000c9f2
and dword [ebp - 0x9c], 0
jmp 0x1000c975
mov eax, dword [ebp - 0x9c]
inc eax
mov dword [ebp - 0x9c], eax
cmp dword [ebp - 0x9c], 0x427c
jge 0x1000c9ed
and dword [ebp - 0xa4], 0
jmp 0x1000c997
mov eax, dword [ebp - 0xa4]
inc eax
mov dword [ebp - 0xa4], eax
cmp dword [ebp - 0xa4], 0x3df5
jge 0x1000c9e8
mov eax, dword [ebp - 0x8c]
cdq
idiv dword [ebp - 0x94]
mov eax, edx
cdq
idiv dword [ebp - 0x9c]
mov ecx, dword [ebp - 0xa4]
sar edx, cl
mov eax, edx
cdq
mov dword [ebp - 0x300], eax
mov dword [ebp - 0x2fc], edx
push dword [ebp - 0x2fc]
push dword [ebp - 0x300]
mov ecx, 0x1007fdb8
call fcn.1000e5de
jmp 0x1000c98a
jmp 0x1000c968
jmp 0x1000c942
jmp 0x1000c91c
push 0
call dword [sym.imp.KERNEL32.dll_TlsGetValue]
mov dword [ebp - 0xac], 0
jmp 0x1000ca18
mov eax, dword [ebp - 0xac]
inc eax
mov dword [ebp - 0xac], eax
cmp dword [ebp - 0xac], 2
jge 0x1000ca34
mov eax, dword [ebp - 0xac]
mov dword [ebp + eax*4 - 0x34c], 0xffffffff
jmp 0x1000ca0b
mov byte [ebp - 4], 0x12
cmp dword [ebp - 0x188], 0x48a9
jge 0x1000ca54
mov edx, dword [ebp - 0x294]
mov ecx, 0x1007fdb8
call fcn.100113ff
jmp 0x1000ca70
mov dword [ebp - 4], 7
jmp 0x1000ca80
mov dword [ebp - 0x40], 0
jmp 0x1000ca90
mov eax, dword [ebp - 0x40]
inc eax
mov dword [ebp - 0x40], eax
cmp dword [ebp - 0x40], 1
jg 0x1000caf7
mov dword [ebp - 0x30c], 0xfffffffa
mov dword [ebp - 0x29c], 0xdfe4
mov byte [ebp - 0x2d], 0
push 0x6ed
lea eax, [ebp - 0x2d]
push eax
push 0x51f
push 1
push 0xc0a
push 1
push 0x5d24
call fcn.1000adcf
add esp, 0x1c
mov eax, dword [ebp - 0x40]
mov eax, dword [ebp + eax*4 - 0x34c]
imul eax, dword [ebp - 0x30c]
mov ecx, dword [ebp - 0x40]
mov ecx, dword [ebp + ecx*4 - 0x34c]
add ecx, eax
mov dword [ebp - 0x29c], ecx
jmp 0x1000ca89
lea eax, [ebp - 0x420]
push eax
push 1
lea eax, [ebp - 0xbc]
push eax
push 1
push 0x29ca
lea eax, [ebp - 0x304]
push eax
lea eax, [ebp - 0x3e4]
push eax
push 1
push 0x3011
push 0x1218
call fcn.1000afff
add esp, 0x28
mov dword [ebp - 0x54], 1
mov dword [ebp - 0x54], 0xffffffe2
jmp 0x1000cb47
mov eax, dword [ebp - 0x54]
inc eax
mov dword [ebp - 0x54], eax
cmp dword [ebp - 0x54], 0xfffffff4
jge 0x1000cba9
mov dword [ebp - 0xb4], 0
mov dword [ebp - 0xb4], 0
jmp 0x1000cb70
mov eax, dword [ebp - 0xb4]
inc eax
mov dword [ebp - 0xb4], eax
cmp dword [ebp - 0xb4], 0x1b
jl 0x1000cba7
push 1
push 0x2a28
push 1
push 0x2e37
push 0x67b4
push 0
push 0x7310
push 0x3ed6
push 0x242e
call fcn.1000d1a4
add esp, 0x24
jmp 0x1000cb63
jmp 0x1000cb40
push 1
push 1
lea eax, [ebp - 0x54]
push eax
push 0x5f0d
push 0x71bd
call fcn.1000b14b
add esp, 0x14
cmp dword [ebp - 0xbc], 6
jae 0x1000cdaf
mov dword [ebp - 0x28], 0x3b1a9565
mov dword [ebp - 0x3c], 0x352f
mov dword [ebp - 0x1c0], 1
mov dword [ebp - 0x1c8], 0x55261fc4
mov dword [ebp - 0xc4], 0
jmp 0x1000cc0b
mov eax, dword [ebp - 0xc4]
inc eax
mov dword [ebp - 0xc4], eax
cmp dword [ebp - 0xc4], 1
jge 0x1000cc27
mov eax, dword [ebp - 0xc4]
mov dword [ebp + eax*4 - 0x2a4], 0xfffffffb
jmp 0x1000cbfe
mov eax, dword [ebp - 0x28]
mov dword [ebp - 0x3c0], eax
mov eax, dword [ebp - 0x28]
mov dword [ebp - 0x38c], eax
xor eax, eax
inc eax
cmp eax, 0xe80d
jge 0x1000cc4f
mov dword [ebp - 0x190], 1
jmp 0x1000cc56
and dword [ebp - 0x190], 0
mov eax, dword [ebp - 0x3c]
cmp dword [ebp - 0x190], eax
jg 0x1000cc6d
mov dword [ebp - 0x198], 1
jmp 0x1000cc74
and dword [ebp - 0x198], 0
mov eax, dword [ebp - 0x28]
cmp dword [ebp - 0x198], eax
jne 0x1000cc8b
mov dword [ebp - 0x1a0], 1
jmp 0x1000cc92
and dword [ebp - 0x1a0], 0
mov eax, dword [ebp - 0x1a0]
mov dword [ebp - 0x28], eax
cmp dword [ebp - 0x28], 0
je 0x1000ccb1
xor eax, eax
je 0x1000ccb1
mov dword [ebp - 0xe8], 1
jmp 0x1000ccb8
and dword [ebp - 0xe8], 0
mov eax, dword [ebp - 0x3c]
cmp dword [ebp - 0xe8], eax
jne 0x1000cccf
mov dword [ebp - 0x1b0], 1
jmp 0x1000ccd6
and dword [ebp - 0x1b0], 0
mov eax, dword [ebp - 0x3c]
cmp eax, dword [ebp - 0x1b0]
jne 0x1000cced
mov dword [ebp - 0x1b8], 1
jmp 0x1000ccf4
and dword [ebp - 0x1b8], 0
mov eax, dword [ebp - 0x1b8]
mov dword [ebp - 0x1c0], eax
mov eax, dword [ebp - 0x1c0]
mov dword [ebp - 0x3a8], eax
mov eax, dword [ebp - 0x1c8]
mov dword [ebp - 0x394], eax
mov eax, dword [ebp - 0x3c]
cmp eax, dword [ebp - 0x3c]
jg 0x1000cd32
cmp dword [ebp - 0x28], 0
je 0x1000cd32
mov dword [ebp - 0x1d0], 1
jmp 0x1000cd39
and dword [ebp - 0x1d0], 0
mov eax, dword [ebp - 0x1c8]
cmp dword [ebp - 0x1d0], eax
jge 0x1000cd53
mov dword [ebp - 0x1d8], 1
jmp 0x1000cd5a
and dword [ebp - 0x1d8], 0
mov eax, dword [ebp - 0x3c]
cmp dword [ebp - 0x1d8], eax
jl 0x1000cd71
mov dword [ebp - 0x1e0], 1
jmp 0x1000cd78
and dword [ebp - 0x1e0], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x1e0]
mov dword [ebp + eax - 0x2a4], ecx
mov dword [ebp - 0x28], 6
push dword [ebp - 0x5c]
push 1
push 1
push 0x101444b0
lea eax, [ebp - 0x3e4]
push eax
push 1
call fcn.10009e4d
add esp, 0x18
lea eax, [ebp - 0x3e4]
push eax
mov ecx, dword [ebp - 0x1e8]
call fcn.1000e75d
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x3e4]
call fcn.1000e753
jmp 0x1000cf59
mov eax, dword [ebp - 0x314]
mov dword [ebp - 0x2b4], eax
mov eax, dword [ebp - 0x2ac]
mov dword [ebp - 0x310], eax
mov eax, dword [ebp - 0x31c]
mov dword [ebp - 0x2bc], eax
mov eax, dword [ebp - 0x2b4]
mov dword [ebp - 0x248], eax
mov eax, dword [ebp - 0x310]
mov dword [ebp - 0xe4], eax
mov eax, dword [ebp - 0x2bc]
mov dword [ebp - 0x244], eax
mov eax, dword [ebp - 0xe4]
mov eax, dword [eax]
dec eax
mov ecx, dword [ebp - 0xe4]
mov dword [ecx], eax
mov eax, dword [ebp - 0x244]
xor ecx, ecx
inc ecx
sub ecx, dword [eax]
mov eax, dword [ebp - 0xe4]
cmp dword [eax], ecx
jl 0x1000ce63
mov dword [ebp - 0x1f0], 1
jmp 0x1000ce6a
and dword [ebp - 0x1f0], 0
mov eax, dword [ebp - 0x248]
mov ecx, dword [ebp - 0x1f0]
mov dword [eax], ecx
jmp 0x1000cf59
lea eax, [ebp + 0x10]
mov dword [ebp - 0x250], eax
mov eax, dword [ebp + 0x34]
mov dword [ebp - 0x290], eax
mov eax, dword [ebp + 0x14]
mov dword [ebp - 0x288], eax
mov eax, dword [ebp + 0x20]
mov dword [ebp - 0x260], eax
mov eax, dword [ebp + 0xc]
mov dword [ebp - 0x258], eax
mov eax, dword [ebp - 0x250]
movzx eax, byte [eax]
test eax, eax
je 0x1000cef9
mov eax, dword [ebp - 0x258]
mov dword [ebp - 0x268], eax
mov eax, dword [ebp - 0x260]
mov dword [ebp - 0x270], eax
mov eax, dword [ebp - 0x268]
mov dword [ebp - 0x278], eax
mov eax, dword [ebp - 0x270]
mov dword [ebp - 0x280], eax
mov eax, dword [ebp - 0x278]
mov ecx, dword [ebp - 0x280]
mov ecx, dword [ecx]
mov dword [eax], ecx
jmp 0x1000cf59
mov eax, dword [ebp - 0x288]
mov dword [ebp - 0x298], eax
mov eax, dword [ebp - 0x290]
mov dword [ebp - 0x2a0], eax
mov eax, dword [ebp - 0x298]
mov dword [ebp - 0x64], eax
mov eax, dword [ebp - 0x2a0]
mov dword [ebp - 0x2a8], eax
mov eax, dword [ebp - 0x64]
mov dword [eax], 0
jmp 0x1000cf3c
mov eax, dword [ebp - 0x64]
mov eax, dword [eax]
inc eax
mov ecx, dword [ebp - 0x64]
mov dword [ecx], eax
mov eax, dword [ebp - 0x64]
cmp dword [eax], 2
jge 0x1000cf59
mov eax, dword [ebp - 0x64]
push dword [eax]
mov ecx, dword [ebp - 0x2a8]
call fcn.1000e95f
and dword [eax], 0
jmp 0x1000cf31
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret