Function at 0x10051800
Capabilities:
Download url
Encode data using xor
Move file
Receive data
Terminate process

Disassembly:
push ebx
mov ebx, esp
sub esp, 8
and esp, 0xfffffff0
add esp, 4
push ebp
mov ebp, dword [ebx + 4]
mov dword [esp + 4], ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x101b8fec
mov eax, dword fs:[0]
push eax
push ebx
sub esp, 0x328
mov eax, dword [0x1023ebb0]
xor eax, ebp
mov dword [ebp - 0x14], eax
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x30c], ecx
xorps xmm0, xmm0
mov dword [ebp - 0x1a8], 0
xor esi, esi
mov byte [ebp - 0x1a8], 0
mov edi, 0xf
mov dword [ebp - 0x198], esi
movups xmmword [ebp - 0x188], xmm0
mov dword [ebp - 0x194], edi
lea eax, [ebp - 0x188]
mov dword [ebp - 4], esi
push eax
call dword [sym.imp.RPCRT4.dll_UuidCreate]
lea eax, [ebp - 0x304]
mov dword [ebp - 0x304], esi
push eax
lea eax, [ebp - 0x188]
push eax
call dword [sym.imp.RPCRT4.dll_UuidToStringA]
test eax, eax
jne 0x100518df
mov edx, dword [ebp - 0x304]
mov ecx, edx
lea esi, [ecx + 1]
nop
mov al, byte [ecx]
inc ecx
test al, al
jne 0x100518b0
sub ecx, esi
push ecx
push edx
lea ecx, [ebp - 0x1a8]
call fcn.10049bd0
lea eax, [ebp - 0x304]
push eax
call dword [sym.imp.RPCRT4.dll_RpcStringFreeA]
mov edi, dword [ebp - 0x194]
mov esi, dword [ebp - 0x198]
mov ecx, 8
mov dword [ebp - 0x1c0], 0
cmp esi, ecx
mov dword [ebp - 0x1b0], 0
lea eax, [ebp - 0x1a8]
mov dword [ebp - 0x1ac], 0xf
cmovb ecx, esi
cmp edi, 0x10
push ecx
cmovae eax, dword [ebp - 0x1a8]
lea ecx, [ebp - 0x1c0]
push eax
call fcn.10049bd0
mov dword [ebp - 4], 0xffffffff
mov edx, dword [ebp - 0x194]
cmp edx, 0x10
jb 0x10051967
mov ecx, dword [ebp - 0x1a8]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x1005195d
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x1005195d
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push edx
push ecx
call fcn.101b49b5
add esp, 8
mov esi, dword [ebp - 0x30c]
lea eax, [ebp - 0x1c0]
add esi, 0xdc
push eax
mov ecx, esi
call fcn.10059850
mov edx, dword [ebp - 0x1ac]
cmp edx, 0x10
jb 0x100519bb
mov ecx, dword [ebp - 0x1c0]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x100519b1
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10053432
push edx
push ecx
call fcn.101b49b5
add esp, 8
mov edx, esi
lea ecx, [ebp - 0x300]
call fcn.10050040
mov dword [ebp - 4], 1
lea eax, [ebp - 0x300]
movq xmm0, qword [0x1022ebe4]
push eax
mov ax, word [0x1022ebec]
movq qword [ebp - 0x12c], xmm0
mov word [ebp - 0x124], ax
test ah, ah
je 0x10051a3c
xor edx, edx
mov dword [ebp - 0x304], edx
nop
mov eax, 0x2f684bdb
mul edx
mov eax, dword [ebp - 0x304]
sub eax, edx
shr eax, 1
add eax, edx
mov edx, dword [ebp - 0x304]
shr eax, 5
mov cl, dl
movsx eax, al
imul eax, eax, 0x36
sub cl, al
add cl, 0x36
xor byte [ebp + edx - 0x12c], cl
inc edx
mov dword [ebp - 0x304], edx
cmp edx, 0xa
jl 0x10051a00
lea ecx, [ebp - 0x12c]
mov dword [ebp - 0x1f8], 0
mov dword [ebp - 0x1e8], 0
lea edx, [ecx + 1]
mov dword [ebp - 0x1e4], 0xf
mov byte [ebp - 0x1f8], 0
nop word [eax + eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x10051a70
sub ecx, edx
lea eax, [ebp - 0x12c]
push ecx
push eax
lea ecx, [ebp - 0x1f8]
call fcn.10049bd0
mov byte [ebp - 4], 2
lea eax, [ebp - 0x1f8]
cmp dword [ebp - 0x1e4], 0x10
cmovae eax, dword [ebp - 0x1f8]
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x31c], esp
mov dword [ebp - 0x140], eax
push esi
call fcn.10049670
mov esi, dword [ebp - 0x30c]
sub esp, 0x18
mov byte [ebp - 4], 3
mov ecx, esp
mov dword [ebp - 0x318], esp
lea eax, [esi + 0x30]
push eax
mov dword [ebp - 0x1c4], eax
call fcn.10049670
sub esp, 0x18
mov byte [ebp - 4], 4
mov ecx, esp
push esi
call fcn.10049670
lea ecx, [ebp - 0x2b8]
mov byte [ebp - 4], 2
call fcn.10050600
add esp, 0x48
mov dword [ebp - 0x31c], eax
mov byte [ebp - 4], 5
mov eax, 4
cmp byte [0x10230693], 0
movq xmm0, qword [0x10230688]
mov ecx, dword [0x10230690]
mov edi, dword [0x10245758]
lea edx, [eax + 0x1b]
movq qword [ebp - 0x12c], xmm0
mov dword [ebp - 0x124], ecx
je 0x10051c96
xor ecx, ecx
mov dword [ebp - 0x304], ecx
cmp edi, 2
jl 0x10051c60
movaps xmm2, xmmword [0x10230810]
mov ecx, 8
movaps xmm3, xmmword [0x102308b0]
movaps xmm1, xmm2
punpckldq xmm1, xmm2
movaps xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm3
pmuldq xmm1, xmm3
shufps xmm1, xmm0, 0xdd
movd xmm4, eax
psrad xmm1, xmm4
movd xmm5, edx
movaps xmm0, xmm1
mov dword [ebp - 0x304], ecx
psrld xmm0, xmm5
paddd xmm0, xmm1
pmulld xmm0, xmmword [0x10230830]
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
movaps xmm2, xmmword [0x10230820]
pshufhw xmm0, xmm0, 0xd8
pshufd xmm1, xmm0, 0xd8
pand xmm1, xmmword [0x10230890]
movd xmm0, dword [0x10230688]
packuswb xmm1, xmm1
paddb xmm1, xmmword [str.6666666666666666]
pxor xmm1, xmm0
movaps xmm0, xmm2
movd dword [ebp - 0x12c], xmm1
movaps xmm1, xmm2
punpckldq xmm1, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm3
pmuldq xmm1, xmm3
shufps xmm1, xmm0, 0xdd
psrad xmm1, xmm4
movaps xmm0, xmm1
psrld xmm0, xmm5
paddd xmm0, xmm1
pmulld xmm0, xmmword [0x10230830]
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm0, xmm0, 0xd8
pshufd xmm1, xmm0, 0xd8
pand xmm1, xmmword [0x10230890]
movd xmm0, dword [ebp - 0x128]
packuswb xmm1, xmm1
paddb xmm1, xmmword [str.6666666666666666]
pxor xmm1, xmm0
movd dword [ebp - 0x128], xmm1
nop dword [eax + eax]
mov eax, 0x4bda12f7
imul ecx
mov al, 1
sar edx, 4
mov ecx, edx
shr ecx, 0x1f
add ecx, edx
sub al, cl
mov ecx, dword [ebp - 0x304]
movsx eax, al
imul eax, eax, 0x36
add al, cl
xor byte [ebp + ecx - 0x12c], al
inc ecx
mov dword [ebp - 0x304], ecx
cmp ecx, 0xc
jl 0x10051c60
lea ecx, [ebp - 0x12c]
mov dword [ebp - 0x210], 0
mov dword [ebp - 0x200], 0
lea edx, [ecx + 1]
mov dword [ebp - 0x1fc], 0xf
mov byte [ebp - 0x210], 0
mov al, byte [ecx]
inc ecx
test al, al
jne 0x10051cc4
sub ecx, edx
lea eax, [ebp - 0x12c]
push ecx
push eax
lea ecx, [ebp - 0x210]
call fcn.10049bd0
mov byte [ebp - 4], 6
lea eax, [ebp - 0x210]
cmp dword [ebp - 0x1fc], 0x10
lea edx, [esi + 0x18]
lea ecx, [ebp - 0x25c]
cmovae eax, dword [ebp - 0x210]
mov dword [ebp - 0x318], eax
call fcn.100503d0
mov dword [ebp - 0x314], eax
mov byte [ebp - 4], 7
mov ecx, dword [0x102306a4]
movq xmm0, qword [0x1023069c]
mov dword [ebp - 0x180], ecx
mov cx, word [0x102306a8]
movq qword [ebp - 0x188], xmm0
mov word [ebp - 0x17c], cx
test ch, ch
je 0x10051ea6
xor ecx, ecx
mov dword [ebp - 0x304], ecx
cmp edi, 2
jl 0x10051e70
movaps xmm2, xmmword [0x10230810]
mov eax, 4
movaps xmm4, xmmword [0x102308b0]
movaps xmm1, xmm2
punpckldq xmm1, xmm2
movaps xmm0, xmm2
punpckhdq xmm0, xmm2
mov ecx, 8
pmuldq xmm0, xmm4
pmuldq xmm1, xmm4
shufps xmm1, xmm0, 0xdd
movd xmm5, eax
mov eax, 0x1f
psrad xmm1, xmm5
mov dword [ebp - 0x304], ecx
movaps xmm0, xmm1
movd xmm6, eax
mov eax, dword [str.6666666666666666]
psrld xmm0, xmm6
paddd xmm0, xmm1
pmulld xmm0, xmmword [0x10230830]
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
movaps xmm2, xmmword [0x10230820]
pshufhw xmm0, xmm0, 0xd8
pshufd xmm1, xmm0, 0xd8
pand xmm1, xmmword [0x10230890]
packuswb xmm1, xmm1
movd xmm0, eax
paddb xmm1, xmm0
movd xmm0, dword [0x1023069c]
pxor xmm1, xmm0
movaps xmm0, xmm2
movd dword [ebp - 0x188], xmm1
movaps xmm1, xmm2
punpckhdq xmm0, xmm2
punpckldq xmm1, xmm2
pmuldq xmm0, xmm4
pmuldq xmm1, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, xmm5
movaps xmm0, xmm1
psrld xmm0, xmm6
paddd xmm0, xmm1
pmulld xmm0, xmmword [0x10230830]
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm0, xmm0, 0xd8
pshufd xmm1, xmm0, 0xd8
pand xmm1, xmmword [0x10230890]
packuswb xmm1, xmm1
movd xmm0, eax
paddb xmm1, xmm0
movd xmm0, dword [ebp - 0x184]
pxor xmm1, xmm0
movd dword [ebp - 0x184], xmm1
nop
mov eax, 0x4bda12f7
imul ecx
mov al, 1
sar edx, 4
mov ecx, edx
shr ecx, 0x1f
add ecx, edx
sub al, cl
mov ecx, dword [ebp - 0x304]
movsx eax, al
imul eax, eax, 0x36
add al, cl
xor byte [ebp + ecx - 0x188], al
inc ecx
mov dword [ebp - 0x304], ecx
cmp ecx, 0xe
jl 0x10051e70
lea ecx, [ebp - 0x188]
mov dword [ebp - 0x1e0], 0
mov dword [ebp - 0x1d0], 0
lea edx, [ecx + 1]
mov dword [ebp - 0x1cc], 0xf
mov byte [ebp - 0x1e0], 0
mov al, byte [ecx]
inc ecx
test al, al
jne 0x10051ed4
sub ecx, edx
lea eax, [ebp - 0x188]
push ecx
push eax
lea ecx, [ebp - 0x1e0]
call fcn.10049bd0
mov byte [ebp - 4], 8
lea eax, [ebp - 0x1e0]
cmp dword [ebp - 0x1cc], 0x10
cmovae eax, dword [ebp - 0x1e0]
sub esp, 0x18
mov dword [ebp - 0x334], eax
mov ecx, esp
lea eax, [ebp - 0x300]
mov dword [ebp - 0x310], esp
push eax
call fcn.10049670
sub esp, 0x18
mov byte [ebp - 4], 9
lea eax, [esi + 0x30]
mov dword [ebp - 0x304], esp
mov ecx, esp
push eax
call fcn.10049670
sub esp, 0x18
mov byte [ebp - 4], 0xa
mov ecx, esp
push 0xa
push str.initialize
mov dword [ecx], 0
mov dword [ecx + 0x10], 0
mov dword [ecx + 0x14], 0xf
call fcn.10049bd0
lea ecx, [ebp - 0x240]
mov byte [ebp - 4], 8
call fcn.10050600
add esp, 0x48
mov dword [ebp - 0x310], eax
mov byte [ebp - 4], 0xb
cmp byte [0x1022eacf], 0
mov ecx, dword [str.WTLPUU]
mov esi, dword [0x1022eacc]
mov dword [ebp - 0x128], ecx
mov dword [ebp - 0x124], esi
je 0x100520fc
xor edx, edx
mov dword [ebp - 0x304], edx
cmp edi, 2
jl 0x100520c0
movaps xmm2, xmmword [0x10230810]
mov eax, 4
movaps xmm4, xmmword [0x102308b0]
movaps xmm1, xmm2
punpckldq xmm1, xmm2
movaps xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
pmuldq xmm1, xmm4
shufps xmm1, xmm0, 0xdd
movd xmm5, eax
mov eax, 0x1f
psrad xmm1, xmm5
movaps xmm0, xmm1
movd xmm6, eax
mov eax, dword [str.6666666666666666]
psrld xmm0, xmm6
paddd xmm0, xmm1
pmulld xmm0, xmmword [0x10230830]
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
movaps xmm2, xmmword [0x10230820]
pshufhw xmm0, xmm0, 0xd8
pshufd xmm1, xmm0, 0xd8
pand xmm1, xmmword [0x10230890]
packuswb xmm1, xmm1
movd xmm0, eax
paddb xmm1, xmm0
movd xmm0, ecx
pxor xmm1, xmm0
movaps xmm0, xmm2
movd dword [ebp - 0x128], xmm1
movaps xmm1, xmm2
punpckhdq xmm0, xmm2
punpckldq xmm1, xmm2
pmuldq xmm0, xmm4
pmuldq xmm1, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, xmm5
movaps xmm0, xmm1
psrld xmm0, xmm6
paddd xmm0, xmm1
pmulld xmm0, xmmword [0x10230830]
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm0, xmm0, 0xd8
pshufd xmm1, xmm0, 0xd8
pand xmm1, xmmword [0x10230890]
packuswb xmm1, xmm1
movd xmm0, eax
paddb xmm1, xmm0
movd xmm0, esi
pxor xmm1, xmm0
movd dword [ebp - 0x124], xmm1
jmp 0x100520fc
mov eax, 0x2f684bdb
mul edx
mov eax, dword [ebp - 0x304]
sub eax, edx
shr eax, 1
add eax, edx
mov edx, dword [ebp - 0x304]
shr eax, 5
mov cl, dl
movsx eax, al
imul eax, eax, 0x36
sub cl, al
add cl, 0x36
xor byte [ebp + edx - 0x128], cl
inc edx
mov dword [ebp - 0x304], edx
cmp edx, 8
jl 0x100520c0
lea ecx, [ebp - 0x128]
mov dword [ebp - 0x158], 0
mov dword [ebp - 0x148], 0
lea edx, [ecx + 1]
mov dword [ebp - 0x144], 0xf
mov byte [ebp - 0x158], 0
nop word [eax + eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x10052130
sub ecx, edx
lea eax, [ebp - 0x128]
push ecx
push eax
lea ecx, [ebp - 0x158]
call fcn.10049bd0
mov byte [ebp - 4], 0xc
lea esi, [ebp - 0x158]
cmp dword [ebp - 0x144], 0x10
cmovae esi, dword [ebp - 0x158]
mov edx, esi
lea edi, [edx + 1]
nop dword [eax]
mov al, byte [edx]
inc edx
test al, al
jne 0x10052170
mov ecx, dword [ebp - 0x310]
sub edx, edi
push edx
push esi
push 0
call fcn.1004ab40
mov dword [ebp - 0x228], 0
mov dword [ebp - 0x218], 0
mov dword [ebp - 0x214], 0
movups xmm0, xmmword [eax]
movups xmmword [ebp - 0x228], xmm0
movq xmm0, qword [eax + 0x10]
movq qword [ebp - 0x218], xmm0
mov dword [eax + 0x10], 0
mov dword [eax + 0x14], 0xf
mov byte [eax], 0
push dword [ebp - 0x334]
lea ecx, [ebp - 0x228]
mov byte [ebp - 4], 0xd
call fcn.10049570
movups xmm0, xmmword [eax]
movups xmmword [ebp - 0x170], xmm0
movq xmm0, qword [eax + 0x10]
movq qword [ebp - 0x160], xmm0
mov dword [eax + 0x10], 0
mov dword [eax + 0x14], 0xf
mov byte [eax], 0
push dword [ebp - 0x314]
lea eax, [ebp - 0x170]
mov byte [ebp - 4], 0xe
push eax
push dword [ebp - 0x124]
lea ecx, [ebp - 0x2a0]
call fcn.1005c3a0
mov byte [ebp - 4], 0xf
lea ecx, [ebp - 0x2a0]
push dword [ebp - 0x318]
call fcn.10049570
movups xmm0, xmmword [eax]
movups xmmword [ebp - 0x2d0], xmm0
movq xmm0, qword [eax + 0x10]
movq qword [ebp - 0x2c0], xmm0
mov dword [eax + 0x10], 0
mov dword [eax + 0x14], 0xf
mov byte [eax], 0
mov byte [ebp - 4], 0x10
lea eax, [ebp - 0x2d0]
push dword [ebp - 0x31c]
lea ecx, [ebp - 0x1c0]
push eax
push dword [ebp - 0x124]
call fcn.1005c3a0
mov byte [ebp - 4], 0x11
lea ecx, [ebp - 0x1c0]
push dword [ebp - 0x140]
call fcn.10049570
mov dword [ebp - 0x1a8], 0
mov dword [ebp - 0x198], 0
mov dword [ebp - 0x194], 0
movups xmm0, xmmword [eax]
movups xmmword [ebp - 0x1a8], xmm0
movq xmm0, qword [eax + 0x10]
movq qword [ebp - 0x198], xmm0
mov dword [eax + 0x10], 0
mov dword [eax + 0x14], 0xf
mov byte [eax], 0
lea eax, [ebp - 0x1a8]
mov byte [ebp - 4], 0x12
push eax
lea eax, [ebp - 0x2e8]
push eax
call fcn.1004a000
add esp, 0xc
mov byte [ebp - 4], 0x14
mov edx, dword [ebp - 0x194]
cmp edx, 0x10
jb 0x1005233f
mov ecx, dword [ebp - 0x1a8]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x10052335
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x100526d2
push edx
push ecx
call fcn.101b49b5
add esp, 8
mov dword [ebp - 0x198], 0
mov dword [ebp - 0x194], 0xf
mov byte [ebp - 0x1a8], 0
mov byte [ebp - 4], 0x15
mov edx, dword [ebp - 0x1ac]
cmp edx, 0x10
jb 0x10052398
mov ecx, dword [ebp - 0x1c0]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x1005238e
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x100526d2
push edx
push ecx
call fcn.101b49b5
add esp, 8
mov dword [ebp - 0x1b0], 0
mov dword [ebp - 0x1ac], 0xf
mov byte [ebp - 0x1c0], 0
mov byte [ebp - 4], 0x16
mov edx, dword [ebp - 0x2bc]
cmp edx, 0x10
jb 0x100523f1
mov ecx, dword [ebp - 0x2d0]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x100523e7
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x100526d2
push edx
push ecx
call fcn.101b49b5
add esp, 8
mov byte [ebp - 4], 0x17
mov edx, dword [ebp - 0x28c]
cmp edx, 0x10
jb 0x1005242f
mov ecx, dword [ebp - 0x2a0]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x10052425
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x100526d2
push edx
push ecx
call fcn.101b49b5
add esp, 8
mov dword [ebp - 0x290], 0
mov dword [ebp - 0x28c], 0xf
mov byte [ebp - 0x2a0], 0
mov byte [ebp - 4], 0x18
mov edx, dword [ebp - 0x15c]
cmp edx, 0x10
jb 0x10052488
mov ecx, dword [ebp - 0x170]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x1005247e
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x100526d2
push edx
push ecx
call fcn.101b49b5
add esp, 8
mov byte [ebp - 4], 0x19
mov edx, dword [ebp - 0x214]
cmp edx, 0x10
jb 0x100524c6
mov ecx, dword [ebp - 0x228]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x100524bc
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x100526d2
push edx
push ecx
call fcn.101b49b5
add esp, 8
mov dword [ebp - 0x218], 0
mov dword [ebp - 0x214], 0xf
mov byte [ebp - 0x228], 0
mov byte [ebp - 4], 0x1a
mov edx, dword [ebp - 0x144]
cmp edx, 0x10
jb 0x1005251f
mov ecx, dword [ebp - 0x158]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x10052515
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x100526d2
push edx
push ecx
call fcn.101b49b5
add esp, 8
mov byte [ebp - 4], 0x1b
mov edx, dword [ebp - 0x22c]
cmp edx, 0x10
jb 0x1005255d
mov ecx, dword [ebp - 0x240]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x10052553
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x100526d2
push edx
push ecx
call fcn.101b49b5
add esp, 8
mov dword [ebp - 0x230], 0
mov dword [ebp - 0x22c], 0xf
mov byte [ebp - 0x240], 0
mov byte [ebp - 4], 0x1c
mov edx, dword [ebp - 0x1cc]
cmp edx, 0x10
jb 0x100525b6
mov ecx, dword [ebp - 0x1e0]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x100525ac
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x100526d2
push edx
push ecx
call fcn.101b49b5
add esp, 8
mov byte [ebp - 4], 0x1d
mov edx, dword [ebp - 0x248]
cmp edx, 0x10
jb 0x100525f4
mov ecx, dword [ebp - 0x25c]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x100525ea
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x100526d2
push edx
push ecx
call fcn.101b49b5
add esp, 8
mov dword [ebp - 0x24c], 0
mov dword [ebp - 0x248], 0xf
mov byte [ebp - 0x25c], 0
mov byte [ebp - 4], 0x1e
mov edx, dword [ebp - 0x1fc]
cmp edx, 0x10
jb 0x1005264d
mov ecx, dword [ebp - 0x210]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x10052643
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x100526d2
push edx
push ecx
call fcn.101b49b5
add esp, 8
mov byte [ebp - 4], 0x1f
mov edx, dword [ebp - 0x2a4]
cmp edx, 0x10
jb 0x10052687
mov ecx, dword [ebp - 0x2b8]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x1005267d
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x100526d2
push edx
push ecx
call fcn.101b49b5
add esp, 8
mov dword [ebp - 0x2a8], 0
mov dword [ebp - 0x2a4], 0xf
mov byte [ebp - 0x2b8], 0
mov byte [ebp - 4], 0x20
mov edx, dword [ebp - 0x1e4]
cmp edx, 0x10
jb 0x100526e2
mov ecx, dword [ebp - 0x1f8]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x100526d8
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x100526d8
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push edx
push ecx
call fcn.101b49b5
add esp, 8
sub esp, 0x18
lea eax, [ebp - 0x2e8]
mov ecx, esp
mov dword [ebp - 0x124], esp
push eax
call fcn.10049670
mov byte [ebp - 4], 0x21
xor edx, edx
mov eax, dword [str._YQM:]
mov dword [ebp - 0x140], eax
mov al, byte [0x102307bc]
mov byte [ebp - 0x13c], al
mov dword [ebp - 0x304], edx
nop dword [eax + eax]
mov eax, 0x2f684bdb
mul edx
mov eax, dword [ebp - 0x304]
sub eax, edx
shr eax, 1
add eax, edx
mov edx, dword [ebp - 0x304]
shr eax, 5
mov cl, dl
movsx eax, al
imul eax, eax, 0x36
sub cl, al
add cl, 0x36
xor byte [ebp + edx - 0x140], cl
inc edx
mov dword [ebp - 0x304], edx
cmp edx, 5
jl 0x10052720
lea ecx, [ebp - 0x140]
mov dword [ebp - 0x158], 0
mov dword [ebp - 0x148], 0
lea edx, [ecx + 1]
mov dword [ebp - 0x144], 0xf
mov byte [ebp - 0x158], 0
nop word [eax + eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x10052790
sub ecx, edx
lea eax, [ebp - 0x140]
push ecx
push eax
lea ecx, [ebp - 0x158]
call fcn.10049bd0
mov byte [ebp - 4], 0x22
lea edx, [ebp - 0x158]
cmp dword [ebp - 0x144], 0x10
cmovae edx, dword [ebp - 0x158]
sub esp, 0x18
mov esi, esp
mov ecx, edx
mov dword [esi], 0
lea edi, [ecx + 1]
mov dword [esi + 0x10], 0
mov dword [esi + 0x14], 0xf
mov al, byte [ecx]
inc ecx
test al, al
jne 0x100527e2
sub ecx, edi
push ecx
push edx
mov ecx, esi
call fcn.10049bd0
lea ecx, [ebp - 0x288]
mov byte [ebp - 4], 0x23
call fcn.100568d0
add esp, 0x30
mov byte [ebp - 4], 0x25
mov edx, dword [ebp - 0x144]
cmp edx, 0x10
jb 0x10052844
mov ecx, dword [ebp - 0x158]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x1005283a
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10053432
push edx
push ecx
call fcn.101b49b5
add esp, 8
mov eax, dword [0x1022e780]
xor ecx, ecx
cmp dword [0x10245758], 2
movups xmm0, xmmword [str.FEWHZQbZP_2_7e__._J]
mov dword [ebp - 0x128], eax
mov al, byte [0x1022e784]
movups xmmword [ebp - 0x138], xmm0
mov byte [ebp - 0x124], al
mov dword [ebp - 0x304], ecx
jl 0x100529d0
movaps xmm0, xmmword [str.6666666666666666]
mov eax, 4
movaps xmm4, xmmword [0x10230810]
movaps xmm3, xmmword [0x102308b0]
movaps xmm6, xmmword [0x10230830]
movd xmm5, eax
mov eax, 0x1f
movaps xmmword [ebp - 0x190], xmm0
mov edx, dword [ebp - 0x190]
movd xmm7, eax
nop dword [eax + eax]
movd xmm0, ecx
lea eax, [ecx + 4]
pshufd xmm2, xmm0, 0
paddd xmm2, xmm4
movaps xmm1, xmm2
movaps xmm0, xmm2
punpckhdq xmm0, xmm2
punpckldq xmm1, xmm2
pmuldq xmm0, xmm3
pmuldq xmm1, xmm3
shufps xmm1, xmm0, 0xdd
psrad xmm1, xmm5
movaps xmm0, xmm1
psrld xmm0, xmm7
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm0, xmm0, 0xd8
pshufd xmm1, xmm0, 0xd8
pand xmm1, xmmword [0x10230890]
packuswb xmm1, xmm1
movd xmm0, edx
paddb xmm1, xmm0
movd xmm0, dword [ebp + ecx - 0x138]
pxor xmm1, xmm0
movd xmm0, eax
pshufd xmm2, xmm0, 0
movd dword [ebp + ecx - 0x138], xmm1
paddd xmm2, xmm4
movaps xmm1, xmm2
movaps xmm0, xmm2
punpckhdq xmm0, xmm2
punpckldq xmm1, xmm2
pmuldq xmm0, xmm3
pmuldq xmm1, xmm3
shufps xmm1, xmm0, 0xdd
psrad xmm1, xmm5
movaps xmm0, xmm1
psrld xmm0, xmm7
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm0, xmm0, 0xd8
pshufd xmm1, xmm0, 0xd8
pand xmm1, xmmword [0x10230890]
packuswb xmm1, xmm1
movd xmm0, edx
paddb xmm1, xmm0
movd xmm0, dword [ebp + ecx - 0x134]
pxor xmm1, xmm0
movd dword [ebp + ecx - 0x134], xmm1
add ecx, 8
cmp ecx, 0x10
jl 0x100528c0
mov dword [ebp - 0x304], ecx
cmp ecx, 0x15
jge 0x10052a06
nop
mov eax, 0x4bda12f7
imul ecx
mov al, 1
sar edx, 4
mov ecx, edx
shr ecx, 0x1f
add ecx, edx
sub al, cl
mov ecx, dword [ebp - 0x304]
movsx eax, al
imul eax, eax, 0x36
add al, cl
xor byte [ebp + ecx - 0x138], al
inc ecx
mov dword [ebp - 0x304], ecx
cmp ecx, 0x15
jl 0x100529d0
lea ecx, [ebp - 0x138]
mov dword [ebp - 0x1c0], 0
mov dword [ebp - 0x1b0], 0
lea edx, [ecx + 1]
mov dword [ebp - 0x1ac], 0xf
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x10052a30
sub ecx, edx
lea eax, [ebp - 0x138]
push ecx
push eax
lea ecx, [ebp - 0x1c0]
call fcn.10049bd0
mov edi, dword [ebp - 0x1ac]
lea edx, [ebp - 0x1c0]
mov esi, dword [ebp - 0x1c0]
cmp edi, 0x10
cmovae edx, esi
mov ecx, edx
lea eax, [ecx + 1]
mov dword [ebp - 0x140], eax
nop
mov al, byte [ecx]
inc ecx
test al, al
jne 0x10052a70
sub ecx, dword [ebp - 0x140]
lea eax, [ebp - 0x288]
cmp dword [ebp - 0x274], 0x10
push ecx
cmovae eax, dword [ebp - 0x288]
push edx
push dword [ebp - 0x278]
push eax
call fcn.1004b030
add esp, 0x10
mov byte [ebp - 0x305], al
cmp edi, 0x10
jb 0x10052ade
lea ecx, [edi + 1]
mov eax, esi
cmp ecx, 0x1000
jb 0x10052ace
mov esi, dword [esi - 4]
add ecx, 0x23
sub eax, esi
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10053432
push ecx
push esi
call fcn.101b49b5
mov al, byte [ebp - 0x305]
add esp, 8
test al, al
je 0x10052cda
lea eax, [ebp - 0x270]
push eax
call fcn.10054cb0
mov edi, eax
cmp byte [edi + 0x2e], 0
je 0x10052ca4
xor ecx, ecx
cmp dword [0x10245758], 2
mov dword [ebp - 0x304], ecx
jl 0x10052c70
movaps xmm0, xmmword [str.6666666666666666]
mov eax, 4
movaps xmm4, xmmword [0x10230810]
mov esi, 4
movaps xmm3, xmmword [0x102308b0]
mov edx, edi
movaps xmm6, xmmword [0x10230830]
sub esi, edi
movd xmm5, eax
mov eax, 0x1f
movaps xmmword [ebp - 0x190], xmm0
movd xmm7, eax
mov eax, dword [ebp - 0x190]
nop word [eax + eax]
movd xmm0, ecx
add ecx, 8
pshufd xmm2, xmm0, 0
paddd xmm2, xmm4
movaps xmm1, xmm2
movaps xmm0, xmm2
punpckhdq xmm0, xmm2
punpckldq xmm1, xmm2
pmuldq xmm0, xmm3
pmuldq xmm1, xmm3
shufps xmm1, xmm0, 0xdd
psrad xmm1, xmm5
movaps xmm0, xmm1
psrld xmm0, xmm7
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm0, xmm0, 0xd8
pshufd xmm1, xmm0, 0xd8
pand xmm1, xmmword [0x10230890]
packuswb xmm1, xmm1
movd xmm0, eax
lea eax, [esi + edx]
lea edx, [edx + 8]
paddb xmm1, xmm0
movd xmm0, dword [edx - 8]
pxor xmm1, xmm0
movd xmm0, eax
pshufd xmm2, xmm0, 0
movd dword [edx - 8], xmm1
paddd xmm2, xmm4
mov eax, dword [ebp - 0x190]
movaps xmm1, xmm2
punpckldq xmm1, xmm2
movaps xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm3
pmuldq xmm1, xmm3
shufps xmm1, xmm0, 0xdd
psrad xmm1, xmm5
movaps xmm0, xmm1
psrld xmm0, xmm7
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm0, xmm0, 0xd8
pshufd xmm1, xmm0, 0xd8
pand xmm1, xmmword [0x10230890]
packuswb xmm1, xmm1
movd xmm0, eax
paddb xmm1, xmm0
movd xmm0, dword [edx - 4]
pxor xmm1, xmm0
movd dword [edx - 4], xmm1
cmp ecx, 0x28
jl 0x10052b60
mov dword [ebp - 0x304], ecx
cmp ecx, 0x2f
jge 0x10052ca4
nop word [eax + eax]
mov eax, 0x4bda12f7
lea esi, [ecx + edi]
imul ecx
mov al, 1
sar edx, 4
mov ecx, edx
shr ecx, 0x1f
add ecx, edx
sub al, cl
mov ecx, dword [ebp - 0x304]
movsx eax, al
imul eax, eax, 0x36
add al, cl
inc ecx
xor byte [esi], al
mov dword [ebp - 0x304], ecx
cmp ecx, 0x2f
jl 0x10052c70
push edi
lea ecx, [ebp - 0x240]
call fcn.10049630
push 0x10
push str.INFO
mov ecx, eax
call fcn.10049560
push eax
push 0
call dword [sym.imp.USER32.dll_MessageBoxA]
lea ecx, [ebp - 0x240]
call fcn.100495e0
push 0
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
cmp byte [0x1022e79b], 0
movups xmm0, xmmword [str.WTLPUUcYQZ3_6]
mov eax, dword [0x1022e798]
mov dword [ebp - 0x124], eax
movups xmmword [ebp - 0x134], xmm0
je 0x10052e96
xor ecx, ecx
cmp dword [0x10245758], 2
mov dword [ebp - 0x304], ecx
jl 0x10052e60
movaps xmm0, xmmword [str.6666666666666666]
mov eax, 4
movaps xmm4, xmmword [0x10230810]
movaps xmm3, xmmword [0x102308b0]
movaps xmm6, xmmword [0x10230830]
movd xmm5, eax
mov eax, 0x1f
movaps xmmword [ebp - 0x190], xmm0
mov edx, dword [ebp - 0x190]
movd xmm7, eax
movd xmm0, ecx
lea eax, [ecx + 4]
pshufd xmm2, xmm0, 0
paddd xmm2, xmm4
movaps xmm1, xmm2
movaps xmm0, xmm2
punpckhdq xmm0, xmm2
punpckldq xmm1, xmm2
pmuldq xmm0, xmm3
pmuldq xmm1, xmm3
shufps xmm1, xmm0, 0xdd
psrad xmm1, xmm5
movaps xmm0, xmm1
psrld xmm0, xmm7
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm0, xmm0, 0xd8
pshufd xmm1, xmm0, 0xd8
pand xmm1, xmmword [0x10230890]
packuswb xmm1, xmm1
movd xmm0, edx
paddb xmm1, xmm0
movd xmm0, dword [ebp + ecx - 0x134]
pxor xmm1, xmm0
movd xmm0, eax
pshufd xmm2, xmm0, 0
movd dword [ebp + ecx - 0x134], xmm1
paddd xmm2, xmm4
movaps xmm1, xmm2
movaps xmm0, xmm2
punpckhdq xmm0, xmm2
punpckldq xmm1, xmm2
pmuldq xmm0, xmm3
pmuldq xmm1, xmm3
shufps xmm1, xmm0, 0xdd
psrad xmm1, xmm5
movaps xmm0, xmm1
psrld xmm0, xmm7
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm0, xmm0, 0xd8
pshufd xmm1, xmm0, 0xd8
pand xmm1, xmmword [0x10230890]
packuswb xmm1, xmm1
movd xmm0, edx
paddb xmm1, xmm0
movd xmm0, dword [ebp + ecx - 0x130]
pxor xmm1, xmm0
movd dword [ebp + ecx - 0x130], xmm1
add ecx, 8
cmp ecx, 0x10
jl 0x10052d50
mov dword [ebp - 0x304], ecx
cmp ecx, 0x14
jge 0x10052e96
nop
mov eax, 0x4bda12f7
imul ecx
mov al, 1
sar edx, 4
mov ecx, edx
shr ecx, 0x1f
add ecx, edx
sub al, cl
mov ecx, dword [ebp - 0x304]
movsx eax, al
imul eax, eax, 0x36
add al, cl
xor byte [ebp + ecx - 0x134], al
inc ecx
mov dword [ebp - 0x304], ecx
cmp ecx, 0x14
jl 0x10052e60
lea ecx, [ebp - 0x134]
mov dword [ebp - 0x1c0], 0
mov dword [ebp - 0x1b0], 0
lea edx, [ecx + 1]
mov dword [ebp - 0x1ac], 0xf
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x10052ec0
sub ecx, edx
lea eax, [ebp - 0x134]
push ecx
push eax
lea ecx, [ebp - 0x1c0]
call fcn.10049bd0
mov edi, dword [ebp - 0x1ac]
lea edx, [ebp - 0x1c0]
mov esi, dword [ebp - 0x1c0]
cmp edi, 0x10
cmovae edx, esi
mov ecx, edx
lea eax, [ecx + 1]
mov dword [ebp - 0x140], eax
nop
mov al, byte [ecx]
inc ecx
test al, al
jne 0x10052f00
sub ecx, dword [ebp - 0x140]
lea eax, [ebp - 0x288]
cmp dword [ebp - 0x274], 0x10
push ecx
cmovae eax, dword [ebp - 0x288]
push edx
push dword [ebp - 0x278]
push eax
call fcn.1004b030
add esp, 0x10
mov byte [ebp - 0x305], al
cmp edi, 0x10
jb 0x10052f6e
lea ecx, [edi + 1]
mov eax, esi
cmp ecx, 0x1000
jb 0x10052f5e
mov esi, dword [esi - 4]
add ecx, 0x23
sub eax, esi
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10053432
push ecx
push esi
call fcn.101b49b5
mov al, byte [ebp - 0x305]
add esp, 8
test al, al
je 0x10053139
lea eax, [ebp - 0x138]
push eax
call fcn.10054d00
mov edi, eax
cmp byte [edi + 0x14], 0
je 0x10052ca4
xor ecx, ecx
cmp dword [0x10245758], 2
mov dword [ebp - 0x304], ecx
jl 0x10053100
movaps xmm0, xmmword [str.6666666666666666]
mov eax, 4
movaps xmm4, xmmword [0x10230810]
mov esi, 4
movaps xmm3, xmmword [0x102308b0]
mov edx, edi
movaps xmm6, xmmword [0x10230830]
sub esi, edi
movd xmm5, eax
mov eax, 0x1f
movaps xmmword [ebp - 0x190], xmm0
movd xmm7, eax
mov eax, dword [ebp - 0x190]
nop word [eax + eax]
movd xmm0, ecx
add ecx, 8
pshufd xmm2, xmm0, 0
paddd xmm2, xmm4
movaps xmm1, xmm2
movaps xmm0, xmm2
punpckhdq xmm0, xmm2
punpckldq xmm1, xmm2
pmuldq xmm0, xmm3
pmuldq xmm1, xmm3
shufps xmm1, xmm0, 0xdd
psrad xmm1, xmm5
movaps xmm0, xmm1
psrld xmm0, xmm7
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm0, xmm0, 0xd8
pshufd xmm1, xmm0, 0xd8
pand xmm1, xmmword [0x10230890]
packuswb xmm1, xmm1
movd xmm0, eax
lea eax, [esi + edx]
lea edx, [edx + 8]
paddb xmm1, xmm0
movd xmm0, dword [edx - 8]
pxor xmm1, xmm0
movd xmm0, eax
pshufd xmm2, xmm0, 0
movd dword [edx - 8], xmm1
paddd xmm2, xmm4
mov eax, dword [ebp - 0x190]
movaps xmm1, xmm2
punpckldq xmm1, xmm2
movaps xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm3
pmuldq xmm1, xmm3
shufps xmm1, xmm0, 0xdd
psrad xmm1, xmm5
movaps xmm0, xmm1
psrld xmm0, xmm7
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm0, xmm0, 0xd8
pshufd xmm1, xmm0, 0xd8
pand xmm1, xmmword [0x10230890]
packuswb xmm1, xmm1
movd xmm0, eax
paddb xmm1, xmm0
movd xmm0, dword [edx - 4]
pxor xmm1, xmm0
movd dword [edx - 4], xmm1
cmp ecx, 0x10
jl 0x10052ff0
mov dword [ebp - 0x304], ecx
cmp ecx, 0x15
jge 0x10052ca4
nop dword [eax + eax]
mov eax, 0x4bda12f7
lea esi, [ecx + edi]
imul ecx
mov al, 1
sar edx, 4
mov ecx, edx
shr ecx, 0x1f
add ecx, edx
sub al, cl
mov ecx, dword [ebp - 0x304]
movsx eax, al
imul eax, eax, 0x36
add al, cl
inc ecx
xor byte [esi], al
mov dword [ebp - 0x304], ecx
cmp ecx, 0x15
jl 0x10053100
jmp 0x10052ca4
sub esp, 0x18
lea eax, [ebp - 0x300]
mov ecx, esp
mov dword [ebp - 0x124], esp
push eax
call fcn.10049670
sub esp, 0x18
mov byte [ebp - 4], 0x26
mov ecx, esp
mov dword [ebp - 0x140], esp
push dword [ebp - 0x1c4]
call fcn.10049670
sub esp, 0x18
mov byte [ebp - 4], 0x27
lea eax, [ebp - 0x288]
mov ecx, esp
push eax
call fcn.10049670
lea ecx, [ebp - 0x240]
mov byte [ebp - 4], 0x25
call fcn.100508a0
add esp, 0x48
lea ecx, [ebp - 0x288]
push eax
call fcn.10059850
mov edx, dword [ebp - 0x22c]
cmp edx, 0x10
jb 0x100531d9
mov ecx, dword [ebp - 0x240]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x100531cf
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x100531cf
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push edx
push ecx
call fcn.101b49b5
add esp, 8
sub esp, 0x28
lea edx, [ebp - 0x288]
mov eax, esp
lea ecx, [ebp - 0x330]
push 0
push 1
mov dword [eax + 0x24], 0
call fcn.1005b090
add esp, 0x30
mov byte [ebp - 4], 0x28
cmp byte [0x10230773], 0
mov ecx, dword [str.EB_Z_HOzr]
mov esi, dword [0x10230770]
mov edi, dword [0x10245758]
mov dword [ebp - 0x128], ecx
mov dword [ebp - 0x124], esi
je 0x1005337d
xor edx, edx
mov dword [ebp - 0x304], edx
cmp edi, 2
jl 0x10053341
movaps xmm2, xmmword [0x10230810]
mov eax, 4
movaps xmm4, xmmword [0x102308b0]
movaps xmm1, xmm2
punpckldq xmm1, xmm2
movaps xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
pmuldq xmm1, xmm4
shufps xmm1, xmm0, 0xdd
movd xmm5, eax
mov eax, 0x1f
psrad xmm1, xmm5
movaps xmm0, xmm1
movd xmm6, eax
mov eax, dword [str.6666666666666666]
psrld xmm0, xmm6
paddd xmm0, xmm1
pmulld xmm0, xmmword [0x10230830]
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
movaps xmm2, xmmword [0x10230820]
pshufhw xmm0, xmm0, 0xd8
pshufd xmm1, xmm0, 0xd8
pand xmm1, xmmword [0x10230890]
packuswb xmm1, xmm1
movd xmm0, eax
paddb xmm1, xmm0
movd xmm0, ecx
pxor xmm1, xmm0
movaps xmm0, xmm2
movd dword [ebp - 0x128], xmm1
movaps xmm1, xmm2
punpckhdq xmm0, xmm2
punpckldq xmm1, xmm2
pmuldq xmm0, xmm4
pmuldq xmm1, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, xmm5
movaps xmm0, xmm1
psrld xmm0, xmm6
paddd xmm0, xmm1
pmulld xmm0, xmmword [0x10230830]
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm0, xmm0, 0xd8
pshufd xmm1, xmm0, 0xd8
pand xmm1, xmmword [0x10230890]
packuswb xmm1, xmm1
movd xmm0, eax
paddb xmm1, xmm0
movd xmm0, esi
pxor xmm1, xmm0
movd dword [ebp - 0x124], xmm1
jmp 0x1005337d
mov eax, 0x2f684bdb
mul edx
mov eax, dword [ebp - 0x304]
sub eax, edx
shr eax, 1
add eax, edx
mov edx, dword [ebp - 0x304]
shr eax, 5
mov cl, dl
movsx eax, al
imul eax, eax, 0x36
sub cl, al
add cl, 0x36
xor byte [ebp + edx - 0x128], cl
inc edx
mov dword [ebp - 0x304], edx
cmp edx, 8
jl 0x10053341
lea ecx, [ebp - 0x128]
mov dword [ebp - 0x158], 0
mov dword [ebp - 0x148], 0
lea edx, [ecx + 1]
mov dword [ebp - 0x144], 0xf
mov byte [ebp - 0x158], 0
nop dword [eax + eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x100533b0
sub ecx, edx
lea eax, [ebp - 0x128]
push ecx
push eax
lea ecx, [ebp - 0x158]
call fcn.10049bd0
mov byte [ebp - 4], 0x29
lea eax, [ebp - 0x158]
cmp dword [ebp - 0x144], 0x10
lea ecx, [ebp - 0x330]
cmovae eax, dword [ebp - 0x158]
push eax
call fcn.1005b330
mov ecx, eax
call fcn.1005b470
test al, al
mov byte [ebp - 4], 0x28
mov edx, dword [ebp - 0x144]
sete al
mov byte [ebp - 0x305], al
cmp edx, 0x10
jb 0x10053448
mov ecx, dword [ebp - 0x158]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x10053438
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x10053438
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push edx
push ecx
call fcn.101b49b5
mov al, byte [ebp - 0x305]
add esp, 8
test al, al
je 0x1005361a
push 0x10
push str.INFO
lea eax, [ebp - 0x1c8]
push eax
call fcn.10054d30
mov edi, eax
cmp byte [edi + 7], 0
je 0x100535b6
xor ecx, ecx
cmp dword [0x10245758], 2
mov dword [ebp - 0x304], ecx
jl 0x10053582
movaps xmm2, xmmword [0x10230810]
mov eax, 4
movaps xmm4, xmmword [0x102308b0]
movaps xmm1, xmm2
punpckldq xmm1, xmm2
movaps xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
pmuldq xmm1, xmm4
shufps xmm1, xmm0, 0xdd
movd xmm5, eax
mov eax, 0x1f
psrad xmm1, xmm5
movaps xmm0, xmm1
movd xmm6, eax
mov eax, dword [str.6666666666666666]
psrld xmm0, xmm6
paddd xmm0, xmm1
pmulld xmm0, xmmword [0x10230830]
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
movaps xmm2, xmmword [0x10230820]
pshufhw xmm0, xmm0, 0xd8
pshufd xmm1, xmm0, 0xd8
pand xmm1, xmmword [0x10230890]
packuswb xmm1, xmm1
movd xmm0, eax
paddb xmm1, xmm0
movd xmm0, dword [edi]
pxor xmm1, xmm0
movaps xmm0, xmm2
movd dword [edi], xmm1
movaps xmm1, xmm2
punpckhdq xmm0, xmm2
punpckldq xmm1, xmm2
pmuldq xmm0, xmm4
pmuldq xmm1, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, xmm5
movaps xmm0, xmm1
psrld xmm0, xmm6
paddd xmm0, xmm1
pmulld xmm0, xmmword [0x10230830]
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm0, xmm0, 0xd8
pshufd xmm1, xmm0, 0xd8
pand xmm1, xmmword [0x10230890]
packuswb xmm1, xmm1
movd xmm0, eax
paddb xmm1, xmm0
movd xmm0, dword [edi + 4]
pxor xmm1, xmm0
movd dword [edi + 4], xmm1
jmp 0x100535b6
mov eax, 0x2f684bdb
lea esi, [ecx + edi]
mul ecx
mov eax, ecx
sub eax, edx
shr eax, 1
add eax, edx
shr eax, 5
movsx eax, al
imul eax, eax, 0x36
sub cl, al
add cl, 0x36
xor byte [esi], cl
mov ecx, dword [ebp - 0x304]
inc ecx
mov dword [ebp - 0x304], ecx
cmp ecx, 8
jl 0x10053582
push edi
lea ecx, [ebp - 0x25c]
call fcn.10049630
sub esp, 0x18
mov byte [ebp - 4], 0x2a
mov ecx, eax
push esp
call fcn.10049560
push ecx
push eax
lea ecx, [ebp - 0x330]
call fcn.1005b330
add esp, 4
mov ecx, eax
call fcn.1005b510
lea eax, [ebp - 0x240]
push eax
call fcn.10056810
mov ecx, eax
call fcn.10049560
push eax
push 0
call dword [sym.imp.USER32.dll_MessageBoxA]
lea ecx, [ebp - 0x240]
call fcn.100495e0
lea ecx, [ebp - 0x25c]
jmp 0x10052ccd
cmp byte [0x1022ea83], 0
mov ecx, dword [str._RKJ_YD_]
mov esi, dword [0x1022ea80]
mov dword [ebp - 0x128], ecx
mov dword [ebp - 0x124], esi
je 0x1005379c
xor edx, edx
mov dword [ebp - 0x304], edx
cmp edi, 2
jl 0x10053760
movaps xmm2, xmmword [0x10230810]
mov eax, 4
movaps xmm4, xmmword [0x102308b0]
movaps xmm1, xmm2
punpckldq xmm1, xmm2
movaps xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
pmuldq xmm1, xmm4
shufps xmm1, xmm0, 0xdd
movd xmm5, eax
mov eax, 0x1f
psrad xmm1, xmm5
movaps xmm0, xmm1
movd xmm6, eax
mov eax, dword [str.6666666666666666]
psrld xmm0, xmm6
paddd xmm0, xmm1
pmulld xmm0, xmmword [0x10230830]
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
movaps xmm2, xmmword [0x10230820]
pshufhw xmm0, xmm0, 0xd8
pshufd xmm1, xmm0, 0xd8
pand xmm1, xmmword [0x10230890]
packuswb xmm1, xmm1
movd xmm0, eax
paddb xmm1, xmm0
movd xmm0, ecx
pxor xmm1, xmm0
movaps xmm0, xmm2
movd dword [ebp - 0x128], xmm1
movaps xmm1, xmm2
punpckhdq xmm0, xmm2
punpckldq xmm1, xmm2
pmuldq xmm0, xmm4
pmuldq xmm1, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, xmm5
movaps xmm0, xmm1
psrld xmm0, xmm6
paddd xmm0, xmm1
pmulld xmm0, xmmword [0x10230830]
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm0, xmm0, 0xd8
pshufd xmm1, xmm0, 0xd8
pand xmm1, xmmword [0x10230890]
packuswb xmm1, xmm1
movd xmm0, eax
paddb xmm1, xmm0
movd xmm0, esi
pxor xmm1, xmm0
movd dword [ebp - 0x124], xmm1
jmp 0x1005379c
mov eax, 0x2f684bdb
mul edx
mov eax, dword [ebp - 0x304]
sub eax, edx
shr eax, 1
add eax, edx
mov edx, dword [ebp - 0x304]
shr eax, 5
mov cl, dl
movsx eax, al
imul eax, eax, 0x36
sub cl, al
add cl, 0x36
xor byte [ebp + edx - 0x128], cl
inc edx
mov dword [ebp - 0x304], edx
cmp edx, 8
jl 0x10053760
lea ecx, [ebp - 0x128]
mov dword [ebp - 0x158], 0
mov dword [ebp - 0x148], 0
lea edx, [ecx + 1]
mov dword [ebp - 0x144], 0xf
mov byte [ebp - 0x158], 0
nop word [eax + eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x100537d0
sub ecx, edx
lea eax, [ebp - 0x128]
push ecx
push eax
lea ecx, [ebp - 0x158]
call fcn.10049bd0
mov byte [ebp - 4], 0x2b
lea ecx, [ebp - 0x240]
cmp dword [ebp - 0x144], 0x10
lea eax, [ebp - 0x158]
push ecx
cmovae eax, dword [ebp - 0x158]
push ecx
push eax
lea ecx, [ebp - 0x330]
call fcn.1005b330
add esp, 4
mov ecx, eax
call fcn.1005b510
mov byte [ebp - 4], 0x2d
mov edx, dword [ebp - 0x144]
cmp edx, 0x10
jb 0x10053860
mov ecx, dword [ebp - 0x158]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x10053856
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10053a3f
push edx
push ecx
call fcn.101b49b5
add esp, 8
mov ax, word [0x1022ea78]
movq xmm0, qword [str._RJJSTRML_]
movq qword [ebp - 0x12c], xmm0
mov word [ebp - 0x124], ax
test ah, ah
je 0x100538cc
xor edx, edx
mov dword [ebp - 0x304], edx
nop dword [eax]
mov eax, 0x2f684bdb
mul edx
mov eax, dword [ebp - 0x304]
sub eax, edx
shr eax, 1
add eax, edx
mov edx, dword [ebp - 0x304]
shr eax, 5
mov cl, dl
movsx eax, al
imul eax, eax, 0x36
sub cl, al
add cl, 0x36
xor byte [ebp + edx - 0x12c], cl
inc edx
mov dword [ebp - 0x304], edx
cmp edx, 0xa
jl 0x10053890
lea ecx, [ebp - 0x12c]
mov dword [ebp - 0x158], 0
mov dword [ebp - 0x148], 0
lea edx, [ecx + 1]
mov dword [ebp - 0x144], 0xf
mov byte [ebp - 0x158], 0
nop word [eax + eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x10053900
sub ecx, edx
lea eax, [ebp - 0x12c]
push ecx
push eax
lea ecx, [ebp - 0x158]
call fcn.10049bd0
mov byte [ebp - 4], 0x2e
lea ecx, [ebp - 0x1a8]
cmp dword [ebp - 0x144], 0x10
lea eax, [ebp - 0x158]
push ecx
cmovae eax, dword [ebp - 0x158]
push ecx
push eax
lea ecx, [ebp - 0x330]
call fcn.1005b330
add esp, 4
mov ecx, eax
call fcn.1005b510
mov byte [ebp - 4], 0x30
mov edx, dword [ebp - 0x144]
cmp edx, 0x10
jb 0x10053990
mov ecx, dword [ebp - 0x158]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x10053986
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10053a3f
push edx
push ecx
call fcn.101b49b5
add esp, 8
mov ecx, dword [ebp - 0x198]
mov eax, bind
sub eax, ecx
cmp eax, 0x13
jb 0x10054c99
cmp dword [ebp - 0x194], 0x10
lea eax, [ebp - 0x1a8]
push ecx
cmovae eax, dword [ebp - 0x1a8]
push eax
push 0x13
push str.TheresNewUpdate
push ecx
push dword [ebp - 0x124]
lea ecx, [ebp - 0x25c]
call fcn.1004aa50
mov edi, dword [ebp - 0x248]
lea ecx, [ebp - 0x25c]
push dword [ebp - 0x24c]
mov esi, dword [ebp - 0x25c]
lea eax, [ebp - 0x240]
cmp edi, 0x10
cmovae ecx, esi
cmp dword [ebp - 0x22c], 0x10
push ecx
cmovae eax, dword [ebp - 0x240]
push dword [ebp - 0x230]
push eax
call fcn.1004b030
add esp, 0x10
mov byte [ebp - 0x305], al
cmp edi, 0x10
jb 0x10053a55
lea ecx, [edi + 1]
mov eax, esi
cmp ecx, 0x1000
jb 0x10053a45
mov esi, dword [esi - 4]
add ecx, 0x23
sub eax, esi
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x10053a45
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push ecx
push esi
call fcn.101b49b5
mov al, byte [ebp - 0x305]
add esp, 8
test al, al
je 0x100548c9
mov esi, dword [ebp - 0x30c]
lea edx, [ebp - 0x1a8]
mov ecx, esi
call fcn.1005f6b0
test al, al
je 0x1005472a
mov esi, dword [sym.imp.USER32.dll_MessageBoxA]
push 4
push str.INFO
push str.There_is_Update_Want_Update_
push 0
call esi
sub eax, 6
je 0x10053aab
sub eax, 1
jne 0x10054b01
push eax
push eax
push str.Always_Use_Updated_Version____
push eax
call esi
jmp 0x10052cd2
push 0x104
push 0x10245ad0
push 0
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameA]
mov ecx, 0x10245ad0
mov dword [ebp - 0x228], 0
mov dword [ebp - 0x218], 0
mov dword [ebp - 0x214], 0xf
mov byte [ebp - 0x228], 0
lea edx, [ecx + 1]
nop word [eax + eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x10053af0
sub ecx, edx
push ecx
push 0x10245ad0
lea ecx, [ebp - 0x228]
call fcn.10049bd0
mov byte [ebp - 4], 0x31
lea ecx, [ebp - 0x228]
mov esi, dword [ebp - 0x214]
cmp esi, 0x10
mov edi, dword [ebp - 0x228]
mov edx, dword [ebp - 0x218]
cmovae ecx, edi
push 4
sub esp, 8
call fcn.1004a4a0
add esp, 0xc
cmp eax, 0xffffffff
jne 0x10053b5a
push str..exe
lea ecx, [ebp - 0x228]
call fcn.10049570
mov esi, dword [ebp - 0x214]
mov edi, dword [ebp - 0x228]
cmp esi, 0x10
lea eax, [ebp - 0x228]
push str.NganCute_Old.exe
cmovae eax, edi
push eax
call dword [sym.imp.api_ms_win_crt_filesystem_l1_1_0.dll_rename]
add esp, 8
lea eax, [ebp - 0x120]
push 0x104
push eax
push 0
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameA]
lea ecx, [ebp - 0x120]
mov dword [ebp - 0x138], 0
mov dword [ebp - 0x128], 0
lea edx, [ecx + 1]
mov dword [ebp - 0x124], 0xf
mov al, byte [ecx]
inc ecx
test al, al
jne 0x10053bb0
sub ecx, edx
lea eax, [ebp - 0x120]
push ecx
push eax
lea ecx, [ebp - 0x138]
call fcn.10049bd0
push dword [ebp - 0x124]
cmp dword [ebp - 0x124], 0x10
lea ecx, [ebp - 0x138]
mov esi, dword [ebp - 0x138]
mov edx, dword [ebp - 0x128]
cmovae ecx, esi
push 2
sub esp, 8
call fcn.1005b610
mov edi, eax
add esp, 0x10
mov eax, dword [ebp - 0x124]
cmp eax, 0x10
jb 0x10053c33
lea ecx, [eax + 1]
mov eax, esi
cmp ecx, 0x1000
jb 0x10053c29
mov esi, dword [esi - 4]
add ecx, 0x23
sub eax, esi
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10053d23
push ecx
push esi
call fcn.101b49b5
add esp, 8
lea ecx, [ebp - 0x120]
mov dword [ebp - 0x1e0], 0
mov dword [ebp - 0x128], 0
lea edx, [ecx + 1]
mov dword [ebp - 0x124], 0xf
mov byte [ebp - 0x138], 0
mov dword [ebp - 0x1d0], 0
mov dword [ebp - 0x1cc], 0xf
mov byte [ebp - 0x1e0], 0
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x10053c80
sub ecx, edx
lea eax, [ebp - 0x120]
push ecx
push eax
lea ecx, [ebp - 0x1e0]
call fcn.10049bd0
mov byte [ebp - 4], 0x32
lea eax, [ebp - 0x1e0]
cmp dword [ebp - 0x1d0], edi
lea ecx, [ebp - 0x170]
mov dword [ebp - 0x170], 0
cmovb edi, dword [ebp - 0x1d0]
cmp dword [ebp - 0x1cc], 0x10
push edi
cmovae eax, dword [ebp - 0x1e0]
push eax
mov dword [ebp - 0x160], 0
mov dword [ebp - 0x15c], 0xf
mov byte [ebp - 0x170], 0
call fcn.10049bd0
mov byte [ebp - 4], 0x31
mov edx, dword [ebp - 0x1cc]
cmp edx, 0x10
jb 0x10053d33
mov ecx, dword [ebp - 0x1e0]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x10053d29
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x10053d29
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push edx
push ecx
call fcn.101b49b5
add esp, 8
mov byte [ebp - 4], 0x33
lea edx, [ebp - 0x170]
cmp dword [ebp - 0x15c], 0x10
mov dword [ebp - 0x210], 0
cmovae edx, dword [ebp - 0x170]
mov ecx, edx
mov dword [ebp - 0x200], 0
mov dword [ebp - 0x1fc], 0xf
mov byte [ebp - 0x210], 0
lea esi, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x10053d75
sub ecx, esi
push ecx
push edx
lea ecx, [ebp - 0x210]
call fcn.10049bd0
mov byte [ebp - 4], 0x35
mov edx, dword [ebp - 0x15c]
cmp edx, 0x10
jb 0x10053dc9
mov ecx, dword [ebp - 0x170]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x10053dbf
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x100546fc
push edx
push ecx
call fcn.101b49b5
add esp, 8
mov esi, dword [ebp - 0x200]
xor eax, eax
mov dword [ebp - 0x190], 0
mov dword [ebp - 0x180], 0
mov dword [ebp - 0x17c], 7
mov word [ebp - 0x190], ax
cmp esi, 7
ja 0x10053e2d
mov dword [ebp - 0x180], esi
test esi, esi
je 0x10053e1b
mov ecx, esi
lea edi, [ebp - 0x190]
shr ecx, 1
mov eax, 0x200020
rep stosd dword es:[edi], eax
adc ecx, ecx
rep stosw word es:[edi], ax
xor eax, eax
mov word [ebp + esi*2 - 0x190], ax
mov edx, dword [ebp - 0x190]
jmp 0x10053e92
cmp esi, 0x7ffffffe
ja 0x10054c9e
mov edi, esi
lea ecx, [ebp - 0x190]
or edi, 7
cmp edi, 0x7ffffffe
jbe 0x10053e53
mov edi, bind
jmp 0x10053e5d
mov eax, 0xa
cmp edi, eax
cmovb edi, eax
lea eax, [edi + 1]
push eax
call fcn.10047ed0
mov edx, eax
mov dword [ebp - 0x17c], edi
mov ecx, esi
mov dword [ebp - 0x180], esi
shr ecx, 1
mov eax, 0x200020
mov edi, edx
rep stosd dword es:[edi], eax
adc ecx, ecx
rep stosw word es:[edi], ax
xor eax, eax
mov word [edx + esi*2], ax
mov dword [ebp - 0x190], edx
mov byte [ebp - 4], 0x36
lea edi, [ebp - 0x190]
cmp dword [ebp - 0x17c], 8
mov eax, dword [ebp - 0x200]
cmovae edi, edx
cmp dword [ebp - 0x1fc], 0x10
lea edx, [ebp - 0x210]
cmovae edx, dword [ebp - 0x210]
add eax, edx
cmp dword [ebp - 0x1fc], 0x10
lea edx, [ebp - 0x210]
mov dword [ebp - 0x140], eax
cmovae edx, dword [ebp - 0x210]
mov ecx, eax
xor esi, esi
sub ecx, edx
cmp edx, eax
cmova ecx, esi
test ecx, ecx
je 0x10053f63
cmp ecx, 0x20
jb 0x10053f63
lea eax, [edx - 1]
add eax, ecx
cmp edi, eax
ja 0x10053f03
lea eax, [ecx - 1]
lea eax, [edi + eax*2]
cmp eax, edx
jae 0x10053f63
and ecx, 0xffffffe0
nop word [eax + eax]
movq xmm0, qword [edx]
add esi, 0x20
punpcklbw xmm0, xmm0
psraw xmm0, 8
movups xmmword [edi], xmm0
movq xmm0, qword [edx + 8]
punpcklbw xmm0, xmm0
psraw xmm0, 8
movups xmmword [edi + 0x10], xmm0
movq xmm0, qword [edx + 0x10]
punpcklbw xmm0, xmm0
psraw xmm0, 8
movups xmmword [edi + 0x20], xmm0
movq xmm0, qword [edx + 0x18]
add edx, 0x20
punpcklbw xmm0, xmm0
psraw xmm0, 8
movups xmmword [edi + 0x30], xmm0
add edi, 0x40
cmp esi, ecx
jne 0x10053f10
mov ecx, dword [ebp - 0x140]
cmp edx, ecx
je 0x10053f80
nop dword [eax]
movsx ax, byte [edx]
lea edi, [edi + 2]
inc edx
mov word [edi - 2], ax
cmp edx, ecx
jne 0x10053f70
mov ecx, dword [ebp - 0x198]
mov eax, bind
sub eax, ecx
cmp eax, 0x15
jb 0x10054ca3
cmp dword [ebp - 0x194], 0x10
lea eax, [ebp - 0x1a8]
push ecx
cmovae eax, dword [ebp - 0x1a8]
push eax
push 0x15
push str.NganCuteBypass_NEW__
push ecx
push dword [ebp - 0x124]
lea ecx, [ebp - 0x170]
call fcn.1004aa50
push str._.exe
lea ecx, [ebp - 0x170]
mov byte [ebp - 4], 0x37
call fcn.10049570
mov dword [ebp - 0x158], 0
mov dword [ebp - 0x148], 0
mov dword [ebp - 0x144], 0
movups xmm0, xmmword [eax]
movups xmmword [ebp - 0x158], xmm0
movq xmm0, qword [eax + 0x10]
movq qword [ebp - 0x148], xmm0
mov dword [eax + 0x10], 0
mov dword [eax + 0x14], 0xf
mov byte [eax], 0
mov byte [ebp - 4], 0x39
mov edx, dword [ebp - 0x15c]
cmp edx, 0x10
jb 0x1005405f
mov ecx, dword [ebp - 0x170]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x10054055
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x10054055
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push edx
push ecx
call fcn.101b49b5
add esp, 8
lea edx, [ebp - 0x158]
mov dword [ebp - 0x160], 0
lea ecx, [ebp - 0x25c]
mov dword [ebp - 0x15c], 0xf
mov byte [ebp - 0x170], 0
call fcn.100514d0
mov byte [ebp - 4], 0x3a
lea eax, [ebp - 0x190]
cmp dword [ebp - 0x17c], 8
mov edi, dword [ebp - 0x180]
cmovae eax, dword [ebp - 0x190]
mov dword [ebp - 0x1f8], 0
mov dword [ebp - 0x1e8], 0
mov dword [ebp - 0x1e4], 0
mov dword [ebp - 0x1c4], eax
cmp edi, 8
jae 0x100540e8
movups xmm0, xmmword [eax]
mov dword [ebp - 0x1e4], 7
movups xmmword [ebp - 0x1f8], xmm0
jmp 0x10054129
mov esi, edi
lea ecx, [ebp - 0x1f8]
mov eax, bind
or esi, 7
cmp esi, eax
cmova esi, eax
lea eax, [esi + 1]
push eax
call fcn.10047ed0
lea ecx, [edi*2 + 2]
mov dword [ebp - 0x1f8], eax
push ecx
push dword [ebp - 0x1c4]
push eax
call sub.VCRUNTIME140.dll_memcpy
add esp, 0xc
mov dword [ebp - 0x1e4], esi
mov dword [ebp - 0x1e8], edi
lea edx, [ebp - 0x25c]
mov byte [ebp - 4], 0x3b
lea ecx, [ebp - 0x1e0]
call fcn.10051420
mov esi, eax
lea edx, [ebp - 0x1f8]
mov byte [ebp - 4], 0x3c
lea ecx, [ebp - 0x170]
call fcn.10051420
push esi
push eax
mov byte [ebp - 4], 0x3d
lea ecx, [ebp - 0x2b8]
push dword [ebp - 0x124]
call fcn.1005c3a0
mov byte [ebp - 4], 0x3f
mov edx, dword [ebp - 0x15c]
cmp edx, 0x10
jb 0x100541ac
mov ecx, dword [ebp - 0x170]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x100541a2
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x100541f7
push edx
push ecx
call fcn.101b49b5
add esp, 8
mov dword [ebp - 0x160], 0
mov dword [ebp - 0x15c], 0xf
mov byte [ebp - 0x170], 0
mov byte [ebp - 4], 0x40
mov edx, dword [ebp - 0x1cc]
cmp edx, 0x10
jb 0x10054207
mov ecx, dword [ebp - 0x1e0]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x100541fd
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x100541fd
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push edx
push ecx
call fcn.101b49b5
add esp, 8
lea edx, [ebp - 0x2b8]
mov dword [ebp - 0x1d0], 0
lea ecx, [ebp - 0x1c0]
mov dword [ebp - 0x1cc], 0xf
mov byte [ebp - 0x1e0], 0
call fcn.100514d0
mov byte [ebp - 4], 0x41
lea esi, [ebp - 0x1c0]
cmp dword [ebp - 0x1ac], 8
movq xmm0, qword [str.ZVRTKS_]
cmovae esi, dword [ebp - 0x1c0]
xor edx, edx
mov al, byte [0x1022e76c]
movq qword [ebp - 0x12c], xmm0
mov byte [ebp - 0x124], al
mov dword [ebp - 0x304], edx
nop
mov eax, 0x2f684bdb
mul edx
mov eax, dword [ebp - 0x304]
sub eax, edx
shr eax, 1
add eax, edx
mov edx, dword [ebp - 0x304]
shr eax, 5
mov cl, dl
movsx eax, al
imul eax, eax, 0x36
sub cl, al
add cl, 0x36
xor byte [ebp + edx - 0x12c], cl
inc edx
mov dword [ebp - 0x304], edx
cmp edx, 9
jl 0x10054270
lea ecx, [ebp - 0x12c]
mov dword [ebp - 0x170], 0
mov dword [ebp - 0x160], 0
lea edx, [ecx + 1]
mov dword [ebp - 0x15c], 0xf
mov byte [ebp - 0x170], 0
nop word [eax + eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x100542e0
sub ecx, edx
lea eax, [ebp - 0x12c]
push ecx
push eax
lea ecx, [ebp - 0x170]
call fcn.10049bd0
mov byte [ebp - 4], 0x42
lea ecx, [ebp - 0x2d0]
cmp dword [ebp - 0x15c], 0x10
lea eax, [ebp - 0x170]
push ecx
cmovae eax, dword [ebp - 0x170]
push ecx
push eax
lea ecx, [ebp - 0x330]
call fcn.1005b330
add esp, 4
mov ecx, eax
call fcn.1005b510
mov byte [ebp - 4], 0x44
mov edx, dword [ebp - 0x15c]
cmp edx, 0x10
jb 0x10054370
mov ecx, dword [ebp - 0x170]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x10054366
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x100546fc
push edx
push ecx
call fcn.101b49b5
add esp, 8
lea edx, [ebp - 0x2d0]
lea ecx, [ebp - 0x2a0]
call fcn.100514d0
cmp dword [ebp - 0x28c], 8
lea eax, [ebp - 0x2a0]
push 0
cmovae eax, dword [ebp - 0x2a0]
push 0
push esi
push eax
push 0
call dword [sym.imp.urlmon.dll_URLDownloadToFileW]
test eax, eax
js 0x10054711
mov edx, dword [ebp - 0x28c]
cmp edx, 8
jb 0x100543eb
mov ecx, dword [ebp - 0x2a0]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x100543e1
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x100546fc
push edx
push ecx
call fcn.101b49b5
add esp, 8
mov edx, dword [ebp - 0x2bc]
xor eax, eax
mov dword [ebp - 0x290], 0
mov dword [ebp - 0x28c], 7
mov word [ebp - 0x2a0], ax
cmp edx, 0x10
jb 0x10054442
mov ecx, dword [ebp - 0x2d0]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x10054438
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x100546fc
push edx
push ecx
call fcn.101b49b5
add esp, 8
mov edx, dword [ebp - 0x1ac]
mov dword [ebp - 0x2c0], 0
mov dword [ebp - 0x2bc], 0xf
mov byte [ebp - 0x2d0], 0
cmp edx, 8
jb 0x1005449d
mov ecx, dword [ebp - 0x1c0]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x10054493
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x100546fc
push edx
push ecx
call fcn.101b49b5
add esp, 8
mov edx, dword [ebp - 0x2a4]
xor eax, eax
mov dword [ebp - 0x1b0], 0
mov dword [ebp - 0x1ac], 7
mov word [ebp - 0x1c0], ax
cmp edx, 0x10
jb 0x100544f4
mov ecx, dword [ebp - 0x2b8]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x100544ea
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x100546fc
push edx
push ecx
call fcn.101b49b5
add esp, 8
mov edx, dword [ebp - 0x1e4]
mov dword [ebp - 0x2a8], 0
mov dword [ebp - 0x2a4], 0xf
mov byte [ebp - 0x2b8], 0
cmp edx, 8
jb 0x1005454f
mov ecx, dword [ebp - 0x1f8]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x10054545
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x100546fc
push edx
push ecx
call fcn.101b49b5
add esp, 8
mov edx, dword [ebp - 0x248]
xor eax, eax
mov dword [ebp - 0x1e8], 0
mov dword [ebp - 0x1e4], 7
mov word [ebp - 0x1f8], ax
cmp edx, 8
jb 0x100545ac
mov ecx, dword [ebp - 0x25c]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x100545a2
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x100546fc
push edx
push ecx
call fcn.101b49b5
add esp, 8
mov edx, dword [ebp - 0x144]
xor eax, eax
mov dword [ebp - 0x24c], 0
mov dword [ebp - 0x248], 7
mov word [ebp - 0x25c], ax
cmp edx, 0x10
jb 0x10054603
mov ecx, dword [ebp - 0x158]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x100545f9
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x100546fc
push edx
push ecx
call fcn.101b49b5
add esp, 8
mov edx, dword [ebp - 0x17c]
mov dword [ebp - 0x148], 0
mov dword [ebp - 0x144], 0xf
mov byte [ebp - 0x158], 0
cmp edx, 8
jb 0x1005465e
mov ecx, dword [ebp - 0x190]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x10054654
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x100546fc
push edx
push ecx
call fcn.101b49b5
add esp, 8
mov edx, dword [ebp - 0x1fc]
xor eax, eax
mov dword [ebp - 0x180], 0
mov dword [ebp - 0x17c], 7
mov word [ebp - 0x190], ax
cmp edx, 0x10
jb 0x100546b1
mov ecx, dword [ebp - 0x210]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x100546a7
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x100546fc
push edx
push ecx
call fcn.101b49b5
add esp, 8
mov edx, dword [ebp - 0x214]
mov dword [ebp - 0x200], 0
mov dword [ebp - 0x1fc], 0xf
mov byte [ebp - 0x210], 0
cmp edx, 0x10
jb 0x10054b01
mov ecx, dword [ebp - 0x228]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x10054702
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x10054702
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push edx
push ecx
call fcn.101b49b5
add esp, 8
jmp 0x10054b01
push 0
push str.INFO
push str.Failed_To_Download_Update
push 0
call dword [sym.imp.USER32.dll_MessageBoxA]
jmp 0x10052cd2
movq xmm0, qword [str.DRKIUUOX_]
xor edx, edx
mov al, byte [0x1022e760]
movq qword [ebp - 0x12c], xmm0
mov byte [ebp - 0x124], al
mov dword [ebp - 0x304], edx
nop dword [eax]
mov eax, 0x2f684bdb
mul edx
mov eax, dword [ebp - 0x304]
sub eax, edx
shr eax, 1
add eax, edx
mov edx, dword [ebp - 0x304]
shr eax, 5
mov cl, dl
movsx eax, al
imul eax, eax, 0x36
sub cl, al
add cl, 0x36
xor byte [ebp + edx - 0x12c], cl
inc edx
mov dword [ebp - 0x304], edx
cmp edx, 9
jl 0x10054750
lea ecx, [ebp - 0x12c]
mov dword [ebp - 0x170], 0
mov dword [ebp - 0x160], 0
lea edx, [ecx + 1]
mov dword [ebp - 0x15c], 0xf
mov byte [ebp - 0x170], 0
nop word [eax + eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x100547c0
sub ecx, edx
lea eax, [ebp - 0x12c]
push ecx
push eax
lea ecx, [ebp - 0x170]
call fcn.10049bd0
mov byte [ebp - 4], 0x45
lea ecx, [ebp - 0x25c]
cmp dword [ebp - 0x15c], 0x10
lea eax, [ebp - 0x170]
push ecx
cmovae eax, dword [ebp - 0x170]
push ecx
push eax
lea ecx, [ebp - 0x330]
call fcn.1005b330
add esp, 4
mov ecx, eax
call fcn.1005b510
push ecx
lea edx, [ebp - 0x25c]
mov byte [ebp - 4], 0x46
lea ecx, [ebp - 0x184]
call fcn.10050e30
add esp, 4
mov byte [ebp - 4], 0x48
mov edx, dword [ebp - 0x248]
cmp edx, 0x10
jb 0x10054865
mov ecx, dword [ebp - 0x25c]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x1005485b
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x100548b4
push edx
push ecx
call fcn.101b49b5
add esp, 8
mov dword [ebp - 0x24c], 0
mov dword [ebp - 0x248], 0xf
mov byte [ebp - 0x25c], 0
mov byte [ebp - 4], 0x49
mov edx, dword [ebp - 0x15c]
cmp edx, 0x10
jb 0x10054a66
mov ecx, dword [ebp - 0x170]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x100548ba
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x100548ba
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push edx
push ecx
call fcn.101b49b5
add esp, 8
jmp 0x10054a66
movq xmm0, qword [str.DRKIUUOX_]
xor edx, edx
mov al, byte [0x1022e760]
movq qword [ebp - 0x12c], xmm0
mov byte [ebp - 0x124], al
mov dword [ebp - 0x304], edx
nop dword [eax]
mov eax, 0x2f684bdb
mul edx
mov eax, dword [ebp - 0x304]
sub eax, edx
shr eax, 1
add eax, edx
mov edx, dword [ebp - 0x304]
shr eax, 5
mov cl, dl
movsx eax, al
imul eax, eax, 0x36
sub cl, al
add cl, 0x36
xor byte [ebp + edx - 0x12c], cl
inc edx
mov dword [ebp - 0x304], edx
cmp edx, 9
jl 0x100548f0
lea ecx, [ebp - 0x12c]
mov dword [ebp - 0x170], 0
mov dword [ebp - 0x160], 0
lea edx, [ecx + 1]
mov dword [ebp - 0x15c], 0xf
mov byte [ebp - 0x170], 0
nop word [eax + eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x10054960
sub ecx, edx
lea eax, [ebp - 0x12c]
push ecx
push eax
lea ecx, [ebp - 0x170]
call fcn.10049bd0
mov byte [ebp - 4], 0x4a
lea ecx, [ebp - 0x25c]
cmp dword [ebp - 0x15c], 0x10
lea eax, [ebp - 0x170]
push ecx
cmovae eax, dword [ebp - 0x170]
push ecx
push eax
lea ecx, [ebp - 0x330]
call fcn.1005b330
add esp, 4
mov ecx, eax
call fcn.1005b510
push ecx
lea edx, [ebp - 0x25c]
mov byte [ebp - 4], 0x4b
lea ecx, [ebp - 0x184]
call fcn.10050e30
add esp, 4
mov byte [ebp - 4], 0x4d
mov edx, dword [ebp - 0x248]
cmp edx, 0x10
jb 0x10054a05
mov ecx, dword [ebp - 0x25c]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x100549fb
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10054a50
push edx
push ecx
call fcn.101b49b5
add esp, 8
mov dword [ebp - 0x24c], 0
mov dword [ebp - 0x248], 0xf
mov byte [ebp - 0x25c], 0
mov byte [ebp - 4], 0x4e
mov edx, dword [ebp - 0x15c]
cmp edx, 0x10
jb 0x10054a60
mov ecx, dword [ebp - 0x170]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x10054a56
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x10054a56
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push edx
push ecx
call fcn.101b49b5
add esp, 8
mov esi, dword [ebp - 0x30c]
mov eax, dword [ebp - 0x184]
mov byte [esi + 0xc1], 1
cmp dword [eax + 0x2c], 0x10
lea edx, [eax + 0x18]
jb 0x10054a7f
mov edx, dword [eax + 0x18]
mov edi, dword [eax + 0x28]
lea ecx, [esi + 0xdc]
mov eax, dword [ecx + 0x14]
mov esi, dword [ecx + 0x10]
sub eax, esi
cmp edi, eax
ja 0x10054ab5
cmp dword [ecx + 0x14], 0x10
lea eax, [esi + edi]
mov dword [ecx + 0x10], eax
jb 0x10054aa2
mov ecx, dword [ecx]
push edi
add esi, ecx
push edx
push esi
call sub.VCRUNTIME140.dll_memmove
add esp, 0xc
mov byte [edi + esi], 0
jmp 0x10054aca
push edi
push edx
mov byte [ebp - 0x1c4], 0
push dword [ebp - 0x1c4]
push edi
call fcn.1004a6b0
mov eax, dword [ebp - 0x184]
mov ecx, dword [ebp - 0x30c]
add eax, 0x30
add ecx, 0xc4
cmp ecx, eax
je 0x10054af6
cmp dword [eax + 0x14], 0x10
mov edx, eax
jb 0x10054aed
mov edx, dword [eax]
push dword [eax + 0x10]
push edx
call fcn.10049bd0
lea ecx, [ebp - 0x184]
call fcn.10049490
mov edx, dword [ebp - 0x194]
cmp edx, 0x10
jb 0x10054b37
mov ecx, dword [ebp - 0x1a8]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x10054b2d
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10054b7e
push edx
push ecx
call fcn.101b49b5
add esp, 8
mov edx, dword [ebp - 0x22c]
mov dword [ebp - 0x198], 0
mov dword [ebp - 0x194], 0xf
mov byte [ebp - 0x1a8], 0
cmp edx, 0x10
jb 0x10054b8e
mov ecx, dword [ebp - 0x240]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x10054b84
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x10054b84
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push edx
push ecx
call fcn.101b49b5
add esp, 8
lea ecx, [ebp - 0x330]
call fcn.100589e0
mov edx, dword [ebp - 0x274]
cmp edx, 0x10
jb 0x10054bd3
mov ecx, dword [ebp - 0x288]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x10054bc9
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10054c6b
push edx
push ecx
call fcn.101b49b5
add esp, 8
mov edx, dword [ebp - 0x2d4]
mov dword [ebp - 0x278], 0
mov dword [ebp - 0x274], 0xf
mov byte [ebp - 0x288], 0
cmp edx, 0x10
jb 0x10054c24
mov ecx, dword [ebp - 0x2e8]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x10054c1a
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10054c6b
push edx
push ecx
call fcn.101b49b5
add esp, 8
mov edx, dword [ebp - 0x2ec]
mov dword [ebp - 0x2d8], 0
mov dword [ebp - 0x2d4], 0xf
mov byte [ebp - 0x2e8], 0
cmp edx, 0x10
jb 0x10054c7b
mov ecx, dword [ebp - 0x300]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x10054c71
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x10054c71
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push edx
push ecx
call fcn.101b49b5
add esp, 8
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [ebp - 0x14]
xor ecx, ebp
call fcn.101b493a
mov esp, ebp
pop ebp
mov esp, ebx
pop ebx
ret
call fcn.10047d50
call fcn.10047d50
call fcn.10047d50
int3