Function at 0x1001d0b6
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x10072723
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x3a8
push esi
push edi
and dword [ebp - 0x1d8], 0
push 2
lea ecx, [ebp - 0x68]
call fcn.10010e51
and dword [ebp - 4], 0
mov dword [ebp - 0x1e0], 1
push 3
lea ecx, [ebp - 0x2e0]
call fcn.10010e51
mov byte [ebp - 4], 1
mov dword [ebp - 0x20], 0
jmp 0x1001d116
mov eax, dword [ebp - 0x20]
inc eax
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 3
jge 0x1001d12c
mov eax, dword [ebp - 0x20]
mov dword [ebp + eax*4 - 0x214], 0xfffffffb
jmp 0x1001d10f
lea eax, [ebp - 0x68]
push eax
lea eax, [ebp - 0x20]
push eax
call fcn.1001cce9
pop ecx
pop ecx
lea eax, [ebp - 0x2e0]
push eax
lea eax, [ebp - 0x20]
push eax
call fcn.1001cd31
pop ecx
pop ecx
mov dword [ebp - 0x20], 0
jmp 0x1001d15d
mov eax, dword [ebp - 0x20]
inc eax
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 3
jge 0x1001d173
mov eax, dword [ebp - 0x20]
mov dword [ebp + eax*4 - 0x380], 1
jmp 0x1001d156
push 0
lea ecx, [ebp - 0x68]
call fcn.10010f08
mov dword [eax], 2
jmp 0x1001d1a6
push 0
lea ecx, [ebp - 0x68]
call fcn.10010f08
mov dword [ebp - 0x138], eax
mov eax, dword [ebp - 0x138]
mov eax, dword [eax]
dec eax
mov ecx, dword [ebp - 0x138]
mov dword [ecx], eax
push 0
lea ecx, [ebp - 0x68]
call fcn.10010f08
cmp dword [eax], 0
jl 0x1001d382
push 0
lea ecx, [ebp - 0x68]
call fcn.10010f08
mov eax, dword [eax]
mov eax, dword [ebp + eax*4 - 0x214]
mov dword [ebp - 0x350], eax
push 0
lea ecx, [ebp - 0x68]
call fcn.10010f08
push 0
lea ecx, [ebp - 0x68]
call fcn.10010f08
mov eax, dword [eax]
cmp dword [ebp + eax*4 - 0x214], 0x2db785b6
jne 0x1001d201
mov dword [ebp - 0x1e8], 1
jmp 0x1001d208
and dword [ebp - 0x1e8], 0
push 0
lea ecx, [ebp - 0x68]
call fcn.10010f08
mov ecx, dword [ebp - 0x1e8]
cmp ecx, dword [eax]
jle 0x1001d228
mov dword [ebp - 0x1f0], 1
jmp 0x1001d22f
and dword [ebp - 0x1f0], 0
push 0
lea ecx, [ebp - 0x68]
call fcn.10010f08
mov eax, dword [eax]
mov eax, dword [ebp + eax*4 - 0x214]
cmp dword [ebp - 0x1f0], eax
jl 0x1001d256
mov dword [ebp - 0x26c], 1
jmp 0x1001d25d
and dword [ebp - 0x26c], 0
push 0
lea ecx, [ebp - 0x68]
call fcn.10010f08
mov eax, dword [eax]
mov eax, dword [ebp + eax*4 - 0x214]
mov dword [ebp - 0x328], eax
push 0
lea ecx, [ebp - 0x68]
call fcn.10010f08
mov esi, eax
push 0
lea ecx, [ebp - 0x68]
call fcn.10010f08
mov esi, dword [esi]
imul esi, dword [eax]
push 0
lea ecx, [ebp - 0x68]
call fcn.10010f08
cmp esi, dword [eax]
jne 0x1001d2ab
mov dword [ebp - 0x194], 1
jmp 0x1001d2b2
and dword [ebp - 0x194], 0
mov eax, dword [ebp - 0x194]
mov dword [ebp - 0x1e0], eax
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x214]
cmp eax, dword [ebp - 0x1e0]
jge 0x1001d2df
mov dword [ebp - 0x124], 1
jmp 0x1001d2e6
and dword [ebp - 0x124], 0
cmp dword [ebp - 0x124], 0x78d8
jg 0x1001d30d
push 0
lea ecx, [ebp - 0x68]
call fcn.10010f08
cmp dword [eax], 0
je 0x1001d30d
mov dword [ebp - 0x1ec], 1
jmp 0x1001d314
and dword [ebp - 0x1ec], 0
push 0
lea ecx, [ebp - 0x68]
call fcn.10010f08
mov eax, dword [eax]
mov eax, dword [ebp + eax*4 - 0x214]
cmp dword [ebp - 0x1ec], eax
jg 0x1001d33b
mov dword [ebp - 0xe8], 1
jmp 0x1001d342
and dword [ebp - 0xe8], 0
push 0
lea ecx, [ebp - 0x2e0]
call fcn.10010f08
mov ecx, dword [ebp - 0xe8]
mov dword [eax], ecx
push 0
lea ecx, [ebp - 0x68]
call fcn.10010f08
mov eax, dword [eax]
mov eax, dword [ebp + eax*4 - 0x214]
sub eax, dword [ebp - 0xe8]
push 4
pop ecx
shl ecx, 0
mov dword [ebp + ecx - 0x380], eax
jmp 0x1001d185
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x2e0]
call fcn.10010e8d
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x68]
call fcn.10010e8d
mov dword [ebp - 0xf0], 0x20e83c77
mov dword [ebp - 0x78], 0xbad86e52
mov dword [ebp - 0x19c], 0x15cc48b1
mov dword [ebp - 0x100], 0xad64
mov dword [ebp - 0x144], 0
mov dword [ebp - 0x18c], 0xffffffff
mov dword [ebp - 0x238], 0x4db9bec7
mov dword [ebp - 0x24c], 0x8e20b458
mov dword [ebp - 0x33c], 0xa6f4dad2
mov dword [ebp - 0x338], 0xb460d54b
mov dword [ebp - 0x1bc], 0x18e188a7
mov dword [ebp - 0x340], 0x13309e69
mov dword [ebp - 0x348], 0xfffffff6
mov dword [ebp - 0x290], 0xffffffff
mov dword [ebp - 0x284], 0x9f00f3b
push 4
lea ecx, [ebp - 0x334]
call fcn.10010e51
mov dword [ebp - 4], 2
mov dword [ebp - 0x248], 0x72defe8e
mov dword [ebp - 0x84], 0
jmp 0x1001d467
mov eax, dword [ebp - 0x84]
inc eax
mov dword [ebp - 0x84], eax
cmp dword [ebp - 0x84], 2
jge 0x1001d483
mov eax, dword [ebp - 0x84]
mov dword [ebp + eax*4 - 0x3ac], 0xe75d5f8
jmp 0x1001d45a
lea eax, [ebp - 0x334]
push eax
lea eax, [ebp - 0x84]
push eax
call fcn.1001cd79
pop ecx
pop ecx
lea eax, [ebp - 0xf0]
push eax
lea eax, [ebp - 0x78]
push eax
call fcn.1001cdc1
pop ecx
pop ecx
mov dword [ebp - 0x254], 0x14a2
cmp dword [ebp - 0x254], 0xd4d
jge 0x1001d7a0
call fcn.100590fc
push 0x20
pop ecx
imul ecx, ecx, 0
add eax, ecx
push eax
push 0x1000de6c
push 0x1000de70
call fcn.1005963c
add esp, 0xc
call fcn.100590fc
push 0x20
pop ecx
shl ecx, 0
add eax, ecx
push eax
push 0x1000de78
push 0x1000de7c
call fcn.1005963c
add esp, 0xc
lea ecx, [ebp - 0x22c]
call fcn.100109b8
mov byte [ebp - 4], 3
lea edx, [ebp - 0x22c]
mov ecx, 0x10662d10
call fcn.10023f23
mov dword [ebp - 0x12c], eax
mov eax, dword [ebp - 0x12c]
mov eax, dword [eax]
mov ecx, dword [ebp - 0x12c]
add ecx, dword [eax + 4]
call fcn.1000f851
movzx eax, al
test eax, eax
je 0x1001d791
mov edx, 0x1000de84
lea ecx, [ebp - 0x22c]
call fcn.10023f4a
movzx eax, al
test eax, eax
je 0x1001d566
jmp 0x1001d791
xor eax, eax
mov word [ebp - 0x14], ax
and dword [ebp - 0x10], 0
push dword [ebp - 0x10]
lea ecx, [ebp - 0x22c]
call fcn.100126c9
movsx eax, byte [eax]
cmp eax, 0x2f
je 0x1001d5e8
push dword [ebp - 0x10]
lea ecx, [ebp - 0x22c]
call fcn.100126c9
mov al, byte [eax]
movzx eax, al
push eax
call section..rybzx
pop ecx
movzx eax, al
test eax, eax
je 0x1001d5df
mov ax, word [ebp - 0x14]
add ax, 1
mov word [ebp - 0x14], ax
push dword [ebp - 0x10]
lea ecx, [ebp - 0x22c]
call fcn.100126c9
mov al, byte [eax]
movzx eax, al
push eax
call section..rybzx
pop ecx
movzx eax, al
test eax, eax
je 0x1001d5dd
mov eax, dword [ebp - 0x10]
inc eax
mov dword [ebp - 0x10], eax
jmp 0x1001d5b3
jmp 0x1001d570
mov eax, dword [ebp - 0x10]
inc eax
mov dword [ebp - 0x10], eax
jmp 0x1001d570
mov eax, dword [ebp - 0x10]
inc eax
mov dword [ebp - 0x10], eax
movsx eax, word [ebp - 0x14]
cmp eax, 5
je 0x1001d615
push fcn.100145fe
push 1
mov ecx, 0x10662c58
call fcn.10010c1d
mov ecx, eax
call fcn.10010c11
jmp 0x1001d513
xor eax, eax
mov word [ebp - 0x14], ax
push dword [ebp - 0x10]
lea ecx, [ebp - 0x22c]
call fcn.100126c9
movsx eax, byte [eax]
cmp eax, 0x2f
je 0x1001d693
push dword [ebp - 0x10]
lea ecx, [ebp - 0x22c]
call fcn.100126c9
mov al, byte [eax]
movzx eax, al
push eax
call section..rybzx
pop ecx
movzx eax, al
test eax, eax
je 0x1001d68a
mov ax, word [ebp - 0x14]
add ax, 1
mov word [ebp - 0x14], ax
push dword [ebp - 0x10]
lea ecx, [ebp - 0x22c]
call fcn.100126c9
mov al, byte [eax]
movzx eax, al
push eax
call section..rybzx
pop ecx
movzx eax, al
test eax, eax
je 0x1001d688
mov eax, dword [ebp - 0x10]
inc eax
mov dword [ebp - 0x10], eax
jmp 0x1001d65e
jmp 0x1001d61b
mov eax, dword [ebp - 0x10]
inc eax
mov dword [ebp - 0x10], eax
jmp 0x1001d61b
mov eax, dword [ebp - 0x10]
inc eax
mov dword [ebp - 0x10], eax
movsx eax, word [ebp - 0x14]
cmp eax, 7
je 0x1001d6c0
push fcn.100145fe
push 2
mov ecx, 0x10662c58
call fcn.10010c1d
mov ecx, eax
call fcn.10010c11
jmp 0x1001d513
xor eax, eax
mov word [ebp - 0x14], ax
lea ecx, [ebp - 0x22c]
call fcn.100111e5
cmp dword [ebp - 0x10], eax
jae 0x1001d74b
push dword [ebp - 0x10]
lea ecx, [ebp - 0x22c]
call fcn.100126c9
mov al, byte [eax]
movzx eax, al
push eax
call section..rybzx
pop ecx
movzx eax, al
test eax, eax
je 0x1001d73f
mov ax, word [ebp - 0x14]
add ax, 1
mov word [ebp - 0x14], ax
push dword [ebp - 0x10]
lea ecx, [ebp - 0x22c]
call fcn.100126c9
mov al, byte [eax]
movzx eax, al
push eax
call section..rybzx
pop ecx
movzx eax, al
test eax, eax
je 0x1001d73d
lea ecx, [ebp - 0x22c]
call fcn.100111e5
cmp dword [ebp - 0x10], eax
jae 0x1001d73d
mov eax, dword [ebp - 0x10]
inc eax
mov dword [ebp - 0x10], eax
jmp 0x1001d703
jmp 0x1001d6c6
mov eax, dword [ebp - 0x10]
inc eax
mov dword [ebp - 0x10], eax
jmp 0x1001d6c6
movsx eax, word [ebp - 0x14]
cmp eax, 5
je 0x1001d771
push fcn.100145fe
push 3
mov ecx, 0x10662c58
call fcn.10010c1d
mov ecx, eax
call fcn.10010c11
jmp 0x1001d513
push fcn.100145fe
mov edx, 0x1000de8c
mov ecx, 0x10662c58
call fcn.10014630
mov ecx, eax
call fcn.10010c11
jmp 0x1001d513
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x22c]
call fcn.100109f8
mov dword [ebp - 0x78], 0x1a
jmp 0x1001d7b0
mov eax, dword [ebp - 0x78]
dec eax
mov dword [ebp - 0x78], eax
cmp dword [ebp - 0x78], 8
je 0x1001dd4a
mov dword [ebp - 0xf8], 0xba29
mov dword [ebp - 0x40], 0xbdb979cd
push 1
lea ecx, [ebp - 0x114]
call fcn.10010e51
mov byte [ebp - 4], 4
push 4
lea ecx, [ebp - 0x29c]
call fcn.10010e51
mov byte [ebp - 4], 5
mov dword [ebp - 0x250], 0x513aa7a4
lea eax, [ebp - 0x114]
push eax
lea eax, [ebp - 0x28]
push eax
call fcn.1001ce04
pop ecx
pop ecx
mov dword [ebp - 0x28], 0
jmp 0x1001d819
mov eax, dword [ebp - 0x28]
inc eax
mov dword [ebp - 0x28], eax
cmp dword [ebp - 0x28], 4
jge 0x1001d835
push dword [ebp - 0x28]
lea ecx, [ebp - 0x29c]
call fcn.10010f08
mov dword [eax], 1
jmp 0x1001d812
mov dword [ebp - 0x28], 0
jmp 0x1001d845
mov eax, dword [ebp - 0x28]
inc eax
mov dword [ebp - 0x28], eax
cmp dword [ebp - 0x28], 3
jge 0x1001d85b
mov eax, dword [ebp - 0x28]
mov dword [ebp + eax*4 - 0x324], 0x6f80
jmp 0x1001d83e
mov dword [ebp - 0x19c], 0
cmp dword [ebp - 0x19c], 0x7c2c9ebf
jl 0x1001d87d
mov dword [ebp - 0x134], 1
jmp 0x1001d884
and dword [ebp - 0x134], 0
push 2
lea ecx, [ebp - 0x29c]
call fcn.10010f08
mov dword [ebp - 0x104], eax
mov eax, dword [ebp - 0x134]
mov dword [ebp - 0x25c], eax
mov eax, dword [ebp - 0x104]
mov eax, dword [eax]
mov dword [ebp - 0x264], eax
mov eax, dword [ebp - 0x104]
mov eax, dword [eax]
dec eax
mov ecx, dword [ebp - 0x104]
mov dword [ecx], eax
mov eax, dword [ebp - 0x25c]
cmp eax, dword [ebp - 0x264]
jg 0x1001d8dc
mov dword [ebp - 0x14c], 1
jmp 0x1001d8e3
and dword [ebp - 0x14c], 0
push 0
lea ecx, [ebp - 0x114]
call fcn.10010f08
cmp dword [eax], 0
je 0x1001d925
mov eax, dword [ebp - 0x100]
mov dword [ebp - 0x344], eax
push 0
lea ecx, [ebp - 0x114]
call fcn.10010f08
cmp dword [eax], 0
je 0x1001d925
push 0
lea ecx, [ebp - 0x114]
call fcn.10010f08
cmp dword [eax], 0
jne 0x1001d937
mov eax, 0xd38951fe
test eax, eax
jne 0x1001d937
and dword [ebp - 0x1d4], 0
jmp 0x1001d941
mov dword [ebp - 0x1d4], 1
push 0
lea ecx, [ebp - 0x114]
call fcn.10010f08
mov ecx, dword [ebp - 0x1d4]
imul ecx, dword [eax]
mov dword [ebp - 0x13c], ecx
push 4
pop eax
shl eax, 1
mov ecx, dword [ebp - 0x13c]
mov dword [ebp + eax - 0x324], ecx
cmp dword [ebp - 0x13c], 0x24067bc6
jge 0x1001d987
mov dword [ebp - 0x1a4], 1
jmp 0x1001d98e
and dword [ebp - 0x1a4], 0
mov eax, dword [ebp - 0x1a4]
mov dword [ebp - 0x144], eax
mov eax, dword [ebp - 0xf0]
cmp dword [ebp - 0x144], eax
jl 0x1001d9b4
mov dword [ebp - 0x204], 1
jmp 0x1001d9bb
and dword [ebp - 0x204], 0
push 0
lea ecx, [ebp - 0x114]
call fcn.10010f08
mov ecx, dword [ebp - 0x204]
sub ecx, dword [eax]
je 0x1001d9e7
cmp dword [ebp - 0x100], 0
je 0x1001d9e7
mov dword [ebp - 0x1ac], 1
jmp 0x1001d9ee
and dword [ebp - 0x1ac], 0
mov eax, dword [ebp - 0x14c]
mov dword [ebp - 0x40], eax
mov eax, dword [ebp - 0x40]
add eax, dword [ebp - 0x1ac]
mov esi, dword [ebp - 0xf0]
sub esi, eax
push 0
lea ecx, [ebp - 0x114]
call fcn.10010f08
mov dword [eax], esi
mov dword [ebp - 0x40], 0
jmp 0x1001da27
mov eax, dword [ebp - 0x40]
dec eax
mov dword [ebp - 0x40], eax
cmp dword [ebp - 0x40], 0xfffffff6
je 0x1001dd27
mov dword [ebp - 0x304], 0xfffffffb
mov dword [ebp - 0x70], 0xf207e879
mov dword [ebp - 0x8c], 0
jmp 0x1001da5b
mov eax, dword [ebp - 0x8c]
inc eax
mov dword [ebp - 0x8c], eax
cmp dword [ebp - 0x8c], 1
jge 0x1001da77
mov eax, dword [ebp - 0x8c]
mov dword [ebp + eax*4 - 0x108], 0xfffffff7
jmp 0x1001da4e
mov eax, dword [ebp - 0x70]
inc eax
mov dword [ebp - 0x70], eax
jne 0x1001da90
push 0xfffffffffffffffe
pop eax
test eax, eax
jne 0x1001da90
and dword [ebp - 0x230], 0
jmp 0x1001da9a
mov dword [ebp - 0x230], 1
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x108]
mov dword [ebp - 0x30c], eax
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x284]
cmp dword [ebp + eax - 0x324], ecx
je 0x1001dace
mov dword [ebp - 0x154], 1
jmp 0x1001dad5
and dword [ebp - 0x154], 0
mov eax, dword [ebp - 0x238]
cmp dword [ebp - 0x154], eax
jg 0x1001daef
mov dword [ebp - 0x1dc], 1
jmp 0x1001daf6
and dword [ebp - 0x1dc], 0
cmp dword [ebp - 0x1dc], 0xcfeb
jne 0x1001db0e
mov dword [ebp - 0x15c], 1
jmp 0x1001db15
and dword [ebp - 0x15c], 0
cmp dword [ebp - 0x15c], 0x9541
jge 0x1001db2d
mov dword [ebp - 0x1b4], 1
jmp 0x1001db34
and dword [ebp - 0x1b4], 0
mov eax, dword [ebp - 0x100]
cmp dword [ebp - 0x1b4], eax
jge 0x1001db4e
mov dword [ebp - 0x164], 1
jmp 0x1001db55
and dword [ebp - 0x164], 0
push 2
lea ecx, [ebp - 0x29c]
call fcn.10010f08
mov ecx, dword [ebp - 0x164]
cmp ecx, dword [eax]
je 0x1001db78
mov dword [ebp - 0x1f4], 1
jmp 0x1001db7f
and dword [ebp - 0x1f4], 0
cmp dword [ebp - 0x1f4], 0xcaf8
jne 0x1001db97
mov dword [ebp - 0x16c], 1
jmp 0x1001db9e
and dword [ebp - 0x16c], 0
mov eax, dword [ebp - 0x24c]
cmp dword [ebp - 0x16c], eax
jge 0x1001dbb8
mov dword [ebp - 0x174], 1
jmp 0x1001dbbf
and dword [ebp - 0x174], 0
mov dword [ebp - 0x1bc], 0
mov esi, dword [ebp - 0x1bc]
sub esi, dword [ebp - 0x174]
push 0
lea ecx, [ebp - 0x114]
call fcn.10010f08
add esi, dword [eax]
cmp dword [ebp - 0xf8], esi
jl 0x1001dbf8
mov dword [ebp - 0x288], 1
jmp 0x1001dbff
and dword [ebp - 0x288], 0
mov eax, dword [ebp - 0x40]
cmp dword [ebp - 0xf8], eax
jg 0x1001dc16
mov dword [ebp - 0x1e4], 1
jmp 0x1001dc1d
and dword [ebp - 0x1e4], 0
cmp dword [ebp - 0x1e4], 0x6159332c
je 0x1001dc35
mov dword [ebp - 0x240], 1
jmp 0x1001dc3c
and dword [ebp - 0x240], 0
mov eax, dword [ebp - 0x290]
imul eax, dword [ebp - 0xf8]
test eax, eax
je 0x1001dd15
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x108], 0
je 0x1001dd15
mov dword [ebp - 0x27c], 0x21d01231
cmp dword [ebp - 0x70], 0x2e32
jl 0x1001dc84
mov dword [ebp - 0x1c4], 1
jmp 0x1001dc8b
and dword [ebp - 0x1c4], 0
mov eax, dword [ebp - 0x70]
mov dword [ebp - 0x17c], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x17c]
mov dword [ebp + eax - 0x108], ecx
mov eax, dword [ebp - 0x17c]
cmp eax, dword [ebp - 0x1c4]
jl 0x1001dcc1
mov dword [ebp - 0x184], 1
jmp 0x1001dcc8
and dword [ebp - 0x184], 0
mov esi, dword [ebp - 0x248]
imul edi, dword [ebp - 0x184], 0xfffffffa
push 0
lea ecx, [ebp - 0x114]
call fcn.10010f08
add edi, dword [eax]
cmp esi, edi
je 0x1001dcf4
mov dword [ebp - 0x208], 1
jmp 0x1001dcfb
and dword [ebp - 0x208], 0
mov eax, dword [ebp - 0x208]
mov dword [ebp - 0x18c], eax
mov eax, dword [ebp - 0x18c]
mov dword [ebp - 0x27c], eax
jmp 0x1001dd22
lea eax, [ebp - 0x250]
push eax
call fcn.1001ce4c
pop ecx
jmp 0x1001da20
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x29c]
call fcn.10010e8d
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x114]
call fcn.10010e8d
jmp 0x1001d7a9
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x334]
call fcn.10010e8d
mov byte [ebp - 0xe4], 7
mov byte [ebp - 0xe3], 0x78
mov byte [ebp - 0xe2], 9
mov byte [ebp - 0xe1], 2
mov byte [ebp - 0xe0], 0x13
mov byte [ebp - 0xdf], 0x1e
mov byte [ebp - 0xde], 8
mov byte [ebp - 0xdd], 0x1d
mov byte [ebp - 0xdc], 0xb
mov byte [ebp - 0xdb], 5
mov byte [ebp - 0xda], 2
mov byte [ebp - 0xd9], 0xf
mov byte [ebp - 0xd8], 0xe
mov byte [ebp - 0xd7], 0xc
mov byte [ebp - 0xd6], 0x17
mov byte [ebp - 0xd5], 0x17
mov byte [ebp - 0xd4], 2
mov byte [ebp - 0xd3], 0x87
mov byte [ebp - 0xd2], 0x1c
mov byte [ebp - 0xd1], 0x14
mov byte [ebp - 0xd0], 0xd
mov byte [ebp - 0xcf], 1
mov byte [ebp - 0xce], 0x17
mov byte [ebp - 0xcd], 0x19
mov byte [ebp - 0xcc], 0x18
mov byte [ebp - 0xcb], 3
mov byte [ebp - 0xca], 0x1e
mov byte [ebp - 0xc9], 0x18
mov byte [ebp - 0xc8], 0x1d
mov byte [ebp - 0xc7], 0xa
mov byte [ebp - 0xc6], 0x12
mov byte [ebp - 0xc5], 5
mov byte [ebp - 0xc4], 0xd
mov byte [ebp - 0xc3], 0xf
mov byte [ebp - 0xc2], 0x16
mov byte [ebp - 0xc1], 0x11
mov byte [ebp - 0xc0], 2
mov byte [ebp - 0xbf], 0xc
mov byte [ebp - 0xbe], 0x1f
mov byte [ebp - 0xbd], 0x12
mov byte [ebp - 0xbc], 0x1e
mov byte [ebp - 0xbb], 4
mov byte [ebp - 0xba], 0x16
mov byte [ebp - 0xb9], 0xd
mov byte [ebp - 0xb8], 0xb
mov byte [ebp - 0xb7], 6
mov byte [ebp - 0xb6], 9
mov byte [ebp - 0xb5], 0x15
mov byte [ebp - 0xb4], 0x11
mov byte [ebp - 0xb3], 0x10
mov byte [ebp - 0xb2], 7
mov byte [ebp - 0xb1], 0x16
mov byte [ebp - 0xb0], 6
mov byte [ebp - 0xaf], 0
mov byte [ebp - 0xae], 0x16
xor eax, eax
inc eax
shl eax, 0
movzx eax, byte [ebp + eax - 0xe4]
or eax, 0x10
xor ecx, ecx
inc ecx
shl ecx, 0
movzx ecx, byte [ebp + ecx - 0xe4]
and ecx, 0x10
sub eax, ecx
xor ecx, ecx
inc ecx
imul ecx, ecx, 0
movzx ecx, byte [ebp + ecx - 0xe4]
mov byte [ebp + ecx - 0x2fc], al
mov dword [ebp - 0x1c], 2
and dword [ebp - 0x58], 0
jmp 0x1001df28
mov eax, dword [ebp - 0x1c]
inc eax
inc eax
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 0x37
jae 0x1001e5a0
mov dword [ebp - 0x2c8], 0xfffd
mov dword [ebp - 0x2c4], 0xfffd
mov dword [ebp - 0x2c0], 0xfffd
mov dword [ebp - 0x2bc], 0xfffd
lea ecx, [ebp - 0xf9]
call fcn.10011449
push eax
lea eax, [ebp - 0x2b8]
push eax
lea eax, [ebp - 0x2c8]
push eax
lea ecx, [ebp - 0x3b4]
call fcn.10022da4
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0x2b4]
call fcn.10022d7e
mov dword [ebp - 4], 6
mov dword [ebp - 0x48], 0x81c2900
mov dword [ebp - 0x50], 0x9d98
mov dword [ebp - 0x24], 0xc5c2f002
mov dword [ebp - 0x48], 3
jmp 0x1001dfbb
mov eax, dword [ebp - 0x48]
dec eax
mov dword [ebp - 0x48], eax
cmp dword [ebp - 0x48], 0
jl 0x1001e3c2
mov dword [ebp - 0x3c], 0x62751c76
mov dword [ebp - 0x2c], 0x8f0ed693
mov dword [ebp - 0x90], 0
jmp 0x1001dfec
mov eax, dword [ebp - 0x90]
inc eax
mov dword [ebp - 0x90], eax
cmp dword [ebp - 0x90], 1
jge 0x1001e008
mov eax, dword [ebp - 0x90]
mov dword [ebp + eax*4 - 0xec], 0xfffffff9
jmp 0x1001dfdf
mov dword [ebp - 0x3c], 3
jmp 0x1001e018
mov eax, dword [ebp - 0x3c]
dec eax
mov dword [ebp - 0x3c], eax
cmp dword [ebp - 0x3c], 0
jl 0x1001e3bd
push 2
lea ecx, [ebp - 0x200]
call fcn.10010e51
mov byte [ebp - 4], 7
mov dword [ebp - 0xa0], 0
jmp 0x1001e04c
mov eax, dword [ebp - 0xa0]
inc eax
mov dword [ebp - 0xa0], eax
cmp dword [ebp - 0xa0], 2
jge 0x1001e06e
push dword [ebp - 0xa0]
lea ecx, [ebp - 0x200]
call fcn.10010f08
mov dword [eax], 0x5c22c920
jmp 0x1001e03f
push dword [ebp - 0x3c]
lea ecx, [ebp - 0x2b4]
call fcn.10010f08
push dword [ebp - 0x48]
lea ecx, [ebp - 0x2b4]
call fcn.10010f08
mov dword [ebp - 0x1cc], eax
push dword [ebp - 0x3c]
lea ecx, [ebp - 0x2b4]
call fcn.10010f08
mov ecx, dword [ebp - 0x1cc]
mov eax, dword [eax]
mov dword [ecx], eax
mov eax, dword [ebp - 0x1cc]
cmp dword [eax], 0x4c38b6b0
je 0x1001e0c2
mov dword [ebp - 0x28c], 1
jmp 0x1001e0c9
and dword [ebp - 0x28c], 0
mov eax, dword [ebp - 0x50]
mov dword [ebp - 0x314], eax
push 1
lea ecx, [ebp - 0x200]
call fcn.10010f08
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xec]
mov dword [ebp - 0x300], eax
push 9
pop eax
cmp eax, 0xc9b6
jg 0x1001e108
mov dword [ebp - 0x11c], 1
jmp 0x1001e10f
and dword [ebp - 0x11c], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xec]
cmp dword [ebp - 0x11c], eax
jge 0x1001e130
mov dword [ebp - 0x258], 1
jmp 0x1001e137
and dword [ebp - 0x258], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xec]
mov dword [ebp - 0x358], eax
mov dword [ebp - 0x2c], 0
cmp dword [ebp - 0x2c], 0x22452a2c
jl 0x1001e166
mov dword [ebp - 0x120], 1
jmp 0x1001e16d
and dword [ebp - 0x120], 0
mov eax, dword [ebp - 0x48]
cmp dword [ebp - 0x120], eax
jne 0x1001e184
mov dword [ebp - 0x128], 1
jmp 0x1001e18b
and dword [ebp - 0x128], 0
push 1
lea ecx, [ebp - 0x200]
call fcn.10010f08
mov ecx, dword [ebp - 0x128]
add ecx, dword [eax]
cmp ecx, 5
jle 0x1001e1b1
mov dword [ebp - 0x130], 1
jmp 0x1001e1b8
and dword [ebp - 0x130], 0
cmp dword [ebp - 0x130], 0xfffffffa
je 0x1001e1cd
mov dword [ebp - 0x118], 1
jmp 0x1001e1d4
and dword [ebp - 0x118], 0
push 1
lea ecx, [ebp - 0x200]
call fcn.10010f08
mov ecx, dword [ebp - 0x118]
cmp ecx, dword [eax]
jge 0x1001e206
push 0
lea ecx, [ebp - 0x200]
call fcn.10010f08
cmp dword [eax], 0
jne 0x1001e206
and dword [ebp - 0x140], 0
jmp 0x1001e210
mov dword [ebp - 0x140], 1
cmp dword [ebp - 0x140], 0xd08e
je 0x1001e228
mov dword [ebp - 0x274], 1
jmp 0x1001e22f
and dword [ebp - 0x274], 0
mov eax, dword [ebp - 0x50]
sub eax, dword [ebp - 0x3c]
jne 0x1001e249
mov eax, 0x5685e9d0
test eax, eax
jne 0x1001e249
and dword [ebp - 0x148], 0
jmp 0x1001e253
mov dword [ebp - 0x148], 1
push 0
lea ecx, [ebp - 0x200]
call fcn.10010f08
mov ecx, dword [ebp - 0x148]
sub ecx, dword [eax]
cmp ecx, 0xfffffffb
jne 0x1001e279
mov dword [ebp - 0x150], 1
jmp 0x1001e280
and dword [ebp - 0x150], 0
mov eax, dword [ebp - 0x150]
mov dword [ebp - 0x24], eax
mov dword [ebp - 0x50], 0
jmp 0x1001e299
mov eax, dword [ebp - 0x50]
dec eax
mov dword [ebp - 0x50], eax
cmp dword [ebp - 0x50], 0xffffffea
jle 0x1001e3a9
mov dword [ebp - 0x24], 3
jmp 0x1001e2b3
mov eax, dword [ebp - 0x24]
dec eax
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 0
jl 0x1001e32c
push 1
lea ecx, [ebp - 0x2d4]
call fcn.10010e51
mov byte [ebp - 4], 8
lea eax, [ebp - 0x2d4]
push eax
lea eax, [ebp - 0x35c]
push eax
call fcn.1001ce65
pop ecx
pop ecx
mov dword [ebp - 0x2c], 0
jmp 0x1001e2ef
mov eax, dword [ebp - 0x2c]
inc eax
mov dword [ebp - 0x2c], eax
cmp dword [ebp - 0x2c], 3
jg 0x1001e31b
push 0
lea ecx, [ebp - 0x2d4]
call fcn.10010f08
mov dword [ebp - 0x158], eax
mov eax, dword [ebp - 0x158]
mov eax, dword [eax]
inc eax
mov ecx, dword [ebp - 0x158]
mov dword [ecx], eax
jmp 0x1001e2e8
mov byte [ebp - 4], 7
lea ecx, [ebp - 0x2d4]
call fcn.10010e8d
jmp 0x1001e2ac
mov dword [ebp - 0x24], 0
jmp 0x1001e33c
mov eax, dword [ebp - 0x24]
inc eax
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 1
jg 0x1001e3a4
mov dword [ebp - 0x2c], 0
jmp 0x1001e352
mov eax, dword [ebp - 0x2c]
inc eax
mov dword [ebp - 0x2c], eax
cmp dword [ebp - 0x2c], 1
jg 0x1001e3a2
mov dword [ebp - 0x80], 0x3adfe1d
mov byte [ebp - 0x42], 0
movzx eax, byte [ebp - 0x42]
test eax, eax
je 0x1001e371
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov dword [ebp - 0x80], 0
jmp 0x1001e381
mov eax, dword [ebp - 0x80]
inc eax
mov dword [ebp - 0x80], eax
cmp dword [ebp - 0x80], 1
jg 0x1001e3a0
lea eax, [ebp - 0x24]
push eax
lea eax, [ebp - 0x80]
push eax
lea eax, [ebp - 0x200]
push eax
call fcn.1001cead
add esp, 0xc
jmp 0x1001e37a
jmp 0x1001e34b
jmp 0x1001e335
jmp 0x1001e292
mov byte [ebp - 4], 6
lea ecx, [ebp - 0x200]
call fcn.10010e8d
jmp 0x1001e011
jmp 0x1001dfb4
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x2b4]
call fcn.10010e8d
xor eax, eax
inc eax
imul eax, eax, 0
movzx eax, byte [ebp + eax - 0xe4]
lea eax, [eax + eax + 2]
cmp dword [ebp - 0x1c], eax
jne 0x1001e411
mov eax, dword [ebp - 0x1c]
movzx eax, byte [ebp + eax - 0xe4]
inc eax
mov dword [ebp - 0x58], eax
mov eax, dword [ebp - 0x1c]
movzx eax, byte [ebp + eax - 0xe4]
mov ecx, dword [ebp - 0x1c]
lea eax, [ecx + eax - 1]
mov dword [ebp - 0x1c], eax
jmp 0x1001df20
mov eax, dword [ebp - 0x1c]
movzx eax, byte [ebp + eax - 0xe3]
mov ecx, dword [ebp - 0x1c]
sub ecx, dword [ebp - 0x58]
movzx ecx, byte [ebp + ecx - 0xe6]
movsx ecx, byte [ebp + ecx - 0x2fc]
add eax, ecx
mov ecx, dword [ebp - 0x1c]
movzx ecx, byte [ebp + ecx - 0xe3]
mov edx, dword [ebp - 0x1c]
sub edx, dword [ebp - 0x58]
movzx edx, byte [ebp + edx - 0xe6]
movsx edx, byte [ebp + edx - 0x2fc]
and ecx, edx
sub eax, ecx
mov ecx, dword [ebp - 0x1c]
movzx ecx, byte [ebp + ecx - 0xe3]
mov edx, dword [ebp - 0x1c]
sub edx, dword [ebp - 0x58]
movzx edx, byte [ebp + edx - 0xe6]
movsx edx, byte [ebp + edx - 0x2fc]
and ecx, edx
sub eax, ecx
mov ecx, dword [ebp - 0x1c]
movzx ecx, byte [ebp + ecx - 0xe4]
mov byte [ebp + ecx - 0x2fc], al
push 0x258f
push 0x606
push 0
push 0x7e7c
push 0x3d76
lea eax, [ebp - 0x58]
push eax
push 0x55dd
call fcn.1001ecb3
add esp, 0x1c
mov dword [ebp - 0x5c], 5
mov dword [ebp - 0x5c], 0x14
jmp 0x1001e4ce
mov eax, dword [ebp - 0x5c]
dec eax
mov dword [ebp - 0x5c], eax
cmp dword [ebp - 0x5c], 0xffffffec
jl 0x1001e59b
mov dword [ebp - 0xa8], 0x29a3df60
mov dword [ebp - 0x98], 0
jmp 0x1001e4fb
mov eax, dword [ebp - 0x98]
inc eax
mov dword [ebp - 0x98], eax
cmp dword [ebp - 0x98], 3
jge 0x1001e517
mov eax, dword [ebp - 0x98]
mov dword [ebp + eax*4 - 0x3a4], 0
jmp 0x1001e4ee
mov dword [ebp - 0xa8], 0xffffffed
jmp 0x1001e530
mov eax, dword [ebp - 0xa8]
inc eax
mov dword [ebp - 0xa8], eax
cmp dword [ebp - 0xa8], 8
jl 0x1001e596
mov dword [ebp - 0x6c], 2
lea eax, [ebp - 0x5c]
push eax
lea eax, [ebp - 0x6c]
push eax
call fcn.1001ceeb
pop ecx
pop ecx
mov dword [ebp - 0x6c], 0
jmp 0x1001e55f
mov eax, dword [ebp - 0x6c]
inc eax
mov dword [ebp - 0x6c], eax
cmp dword [ebp - 0x6c], 0x38
jl 0x1001e594
mov dword [ebp - 0x74], 0xf82d83d7
mov dword [ebp - 0x74], 0
jmp 0x1001e57c
mov eax, dword [ebp - 0x74]
inc eax
mov dword [ebp - 0x74], eax
cmp dword [ebp - 0x74], 3
jge 0x1001e592
mov eax, dword [ebp - 0x74]
mov dword [ebp + eax*4 - 0x3a4], 0xfffffff6
jmp 0x1001e575
jmp 0x1001e558
jmp 0x1001e523
jmp 0x1001e4c7
jmp 0x1001df20
xor eax, eax
inc eax
imul eax, eax, 0x1a
mov byte [ebp + eax - 0x2fc], 0
lea eax, [ebp - 0x2fc]
push eax
lea ecx, [ebp - 0x398]
call fcn.10022af4
mov dword [ebp - 4], 9
and dword [ebp - 0x88], 0
jmp 0x1001e5dd
mov eax, dword [ebp - 0x88]
inc eax
mov dword [ebp - 0x88], eax
cmp dword [ebp - 0x88], 0x1b
jae 0x1001e5f6
mov eax, dword [ebp - 0x88]
mov byte [ebp + eax - 0x2fc], 0
jmp 0x1001e5d0
push 0x1000daa5
lea ecx, [ebp - 0x374]
call fcn.10022af4
mov byte [ebp - 4], 0xa
lea ecx, [ebp - 0x374]
call fcn.100111e5
cmp eax, dword [ebp + 0xc]
je 0x1001e89d
push 0
push 0xa0
push 0x101e
push 0x7ed5
lea eax, [ebp - 0x270]
push eax
push 0x1973
lea eax, [ebp - 0x398]
push eax
push 0x1be9
call fcn.1001ee1e
add esp, 0x20
mov dword [ebp - 0x4c], 0x862fd41e
mov dword [ebp - 0x38], 0
mov dword [ebp - 0x180], 0xb64d07dd
mov dword [ebp - 0x278], 0x2e255bb5
mov dword [ebp - 0x4c], 0
jmp 0x1001e681
mov eax, dword [ebp - 0x4c]
inc eax
mov dword [ebp - 0x4c], eax
cmp dword [ebp - 0x4c], 3
jg 0x1001e87b
mov dword [ebp - 0x9c], 1
mov dword [ebp - 0x7c], 0x4c8f
mov dword [ebp - 0x268], 0xda3bb1d4
mov dword [ebp - 0x280], 0
mov byte [ebp - 0x41], 0
movzx eax, byte [ebp - 0x41]
test eax, eax
je 0x1001e6d2
push 0x266e
push 0
push 0
push 0x24e7
push 0
call dword [sym.imp.SHELL32.dll_ExtractIconExW]
cmp dword [ebp - 0x9c], 0
jne 0x1001e6e6
push 5
pop eax
test eax, eax
je 0x1001e7b3
mov dword [ebp - 0x260], 0xffffffff
cmp dword [ebp - 0x4c], 0
jne 0x1001e791
mov dword [ebp - 0x38], 0
mov eax, dword [ebp - 0x38]
mov dword [ebp - 0x34c], eax
mov eax, dword [ebp - 0x7c]
imul eax, dword [ebp - 0x7c]
cmp eax, dword [ebp - 0x7c]
jle 0x1001e71c
cmp dword [ebp - 0x38], 0
jne 0x1001e72a
xor eax, eax
inc eax
jne 0x1001e72a
and dword [ebp - 0x160], 0
jmp 0x1001e734
mov dword [ebp - 0x160], 1
cmp dword [ebp - 0x160], 0x3d6c1dfe
jl 0x1001e74c
mov dword [ebp - 0x168], 1
jmp 0x1001e753
and dword [ebp - 0x168], 0
mov eax, dword [ebp - 0x7c]
cmp eax, dword [ebp - 0x168]
jle 0x1001e770
cmp dword [ebp - 0x9c], 0
jne 0x1001e770
and dword [ebp - 0x170], 0
jmp 0x1001e77a
mov dword [ebp - 0x170], 1
mov eax, dword [ebp - 0x260]
cmp dword [ebp - 0x170], eax
jge 0x1001e791
and dword [ebp - 0x178], 0
jmp 0x1001e79b
mov dword [ebp - 0x178], 1
mov eax, dword [ebp - 0x9c]
imul eax, dword [ebp - 0x178]
mov dword [ebp - 0x180], eax
jmp 0x1001e876
push 2
lea ecx, [ebp - 0x2a8]
call fcn.10010e51
mov byte [ebp - 4], 0xb
mov dword [ebp - 0x94], 0
jmp 0x1001e7dd
mov eax, dword [ebp - 0x94]
inc eax
mov dword [ebp - 0x94], eax
cmp dword [ebp - 0x94], 2
jge 0x1001e7ff
push dword [ebp - 0x94]
lea ecx, [ebp - 0x2a8]
call fcn.10010f08
mov dword [eax], 0xcd908fbd
jmp 0x1001e7d0
lea eax, [ebp - 0x2a8]
push eax
lea eax, [ebp - 0x4c]
push eax
lea eax, [ebp - 0x180]
push eax
lea eax, [ebp - 0x38]
push eax
lea eax, [ebp - 0x7c]
push eax
lea eax, [ebp - 0x278]
push eax
lea eax, [ebp - 0x9c]
push eax
lea eax, [ebp - 0x268]
push eax
lea eax, [ebp - 0x280]
push eax
call fcn.1001cf1e
add esp, 0x24
mov dword [ebp - 0x38], 0
jmp 0x1001e84d
mov eax, dword [ebp - 0x38]
inc eax
mov dword [ebp - 0x38], eax
cmp dword [ebp - 0x38], 2
jge 0x1001e867
lea eax, [ebp - 0x38]
push eax
lea eax, [ebp - 0x2a8]
push eax
call fcn.1001d01c
pop ecx
pop ecx
jmp 0x1001e846
mov byte [ebp - 4], 0xa
lea ecx, [ebp - 0x2a8]
call fcn.10010e8d
jmp 0x1001e67a
lea eax, [ebp - 0x270]
push eax
lea eax, [ebp - 0x398]
push eax
lea eax, [ebp - 0x374]
push eax
call fcn.1001d044
add esp, 0xc
jmp 0x1001e60a
mov dword [ebp - 0x54], 6
mov dword [ebp - 0xa4], 0
jmp 0x1001e8bd
mov eax, dword [ebp - 0xa4]
inc eax
mov dword [ebp - 0xa4], eax
cmp dword [ebp - 0xa4], 1
jge 0x1001e8d6
mov eax, dword [ebp - 0xa4]
mov dword [ebp + eax*4 - 0x30], 0xfffffff8
jmp 0x1001e8b0
mov dword [ebp - 0x54], 5
jmp 0x1001e8e6
mov eax, dword [ebp - 0x54]
inc eax
mov dword [ebp - 0x54], eax
cmp dword [ebp - 0x54], 0x16
jle 0x1001eb7c
mov dword [ebp - 0x18], 0x3c69aed2
mov dword [ebp - 0x1b0], 0xffffffff
mov dword [ebp - 0xf4], 0xfffffff6
mov dword [ebp - 0x244], 9
mov dword [ebp - 0x18], 0
jmp 0x1001e925
mov eax, dword [ebp - 0x18]
inc eax
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 0
jg 0x1001eae0
mov dword [ebp - 0x34], 0xffffffff
mov dword [ebp - 0xac], 0
jmp 0x1001e94f
mov eax, dword [ebp - 0xac]
inc eax
mov dword [ebp - 0xac], eax
cmp dword [ebp - 0xac], 1
jge 0x1001e96b
mov eax, dword [ebp - 0xac]
mov dword [ebp + eax*4 - 0x23c], 0xdf8e3bf1
jmp 0x1001e942
mov dword [ebp - 0x34], 0
jmp 0x1001e97b
mov eax, dword [ebp - 0x34]
inc eax
mov dword [ebp - 0x34], eax
cmp dword [ebp - 0x34], 0
jg 0x1001ea99
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp + eax*4 - 0x30]
mov dword [ebp - 0x308], eax
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x354], eax
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp + eax*4 - 0x30]
mov dword [ebp - 0x310], eax
cmp dword [ebp - 0x34], 0xe80d68f9
jbe 0x1001e9bd
mov dword [ebp - 0x188], 1
jmp 0x1001e9c4
and dword [ebp - 0x188], 0
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp + eax*4 - 0x30]
cmp dword [ebp - 0x188], eax
je 0x1001e9df
mov dword [ebp - 0x190], 1
jmp 0x1001e9e6
and dword [ebp - 0x190], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x30]
add eax, dword [ebp - 0x190]
mov ecx, dword [ebp - 0x18]
add eax, dword [ebp + ecx*4 - 0x30]
je 0x1001ea15
mov eax, dword [ebp - 0x18]
cmp dword [ebp + eax*4 - 0x30], 0
je 0x1001ea15
mov dword [ebp - 0x198], 1
jmp 0x1001ea1c
and dword [ebp - 0x198], 0
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp + eax*4 - 0x30]
cmp dword [ebp - 0x198], eax
je 0x1001ea37
mov dword [ebp - 0x234], 1
jmp 0x1001ea3e
and dword [ebp - 0x234], 0
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x318], eax
mov eax, dword [ebp - 0x34]
cmp dword [ebp - 0x18], eax
jle 0x1001ea64
mov eax, 0x2ff1
test eax, eax
je 0x1001ea64
mov dword [ebp - 0x1a0], 1
jmp 0x1001ea6b
and dword [ebp - 0x1a0], 0
cmp dword [ebp - 0x1a0], 7
jb 0x1001ea80
mov dword [ebp - 0x1a8], 1
jmp 0x1001ea87
and dword [ebp - 0x1a8], 0
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x1a8]
mov dword [ebp + eax*4 - 0x30], ecx
jmp 0x1001e974
mov dword [ebp - 0x34], 0
jmp 0x1001eaa9
mov eax, dword [ebp - 0x34]
dec eax
mov dword [ebp - 0x34], eax
cmp dword [ebp - 0x34], 0
jl 0x1001eadb
mov eax, dword [ebp - 0x18]
push 4
pop ecx
imul ecx, ecx, 0
mov eax, dword [ebp + eax*4 - 0x30]
mov dword [ebp + ecx - 0x23c], eax
mov dword [ebp - 0x1b0], 0xfffffffa
mov eax, dword [ebp - 0x1b0]
mov dword [ebp - 0xf4], eax
jmp 0x1001eaa2
jmp 0x1001e91e
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x30], 0xfffffff9
jl 0x1001eaf9
mov dword [ebp - 0x1b8], 1
jmp 0x1001eb00
and dword [ebp - 0x1b8], 0
mov eax, dword [ebp - 0x1b8]
mov dword [ebp - 0xf4], eax
mov eax, dword [ebp - 0xf4]
cmp dword [ebp - 0x18], eax
jg 0x1001eb23
mov dword [ebp - 0x1c0], 1
jmp 0x1001eb2a
and dword [ebp - 0x1c0], 0
mov eax, dword [ebp - 0x54]
cmp dword [ebp - 0x1c0], eax
je 0x1001eb41
mov dword [ebp - 0x1c8], 1
jmp 0x1001eb48
and dword [ebp - 0x1c8], 0
cmp dword [ebp - 0x1c8], 0x6082f4e5
jle 0x1001eb60
mov dword [ebp - 0x1d0], 1
jmp 0x1001eb67
and dword [ebp - 0x1d0], 0
mov eax, dword [ebp - 0x54]
imul eax, dword [ebp - 0x1d0]
mov dword [ebp - 0x244], eax
jmp 0x1001e8df
lea eax, [ebp - 0x374]
push eax
mov ecx, dword [ebp + 8]
call fcn.10022b23
mov eax, dword [ebp - 0x1d8]
or eax, 1
mov dword [ebp - 0x1d8], eax
mov byte [ebp - 4], 9
lea ecx, [ebp - 0x374]
call fcn.10022b7c
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x398]
call fcn.10022b7c
mov eax, dword [ebp + 8]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
mov esp, ebp
pop ebp
ret