Function at 0x10018c16
Capabilities:
Encode data using xor
Get disk size
Get file size
Query environment variable

Disassembly:
mov eax, 0x10058cbb
call fcn.100580f4
sub esp, 0x390
push ebx
push esi
xor ebx, ebx
mov dword [ebp - 0x34], 0xd53
cmp dword [ebp - 0x34], 0xe46
push edi
mov dword [ebp - 0x10], esp
mov dword [ebp - 0xd8], edx
mov dword [ebp - 0x80], ecx
mov dword [ebp - 0x1a0], ebx
jle 0x10018c93
mov esi, ebx
mov dword [ebp - 0x2c], ebx
mov edi, ebx
mov ecx, edi
mov dword [ebp - 0x28], esi
mov dword [ebp - 0x38], ebx
shl esi, cl
mov eax, esi
mov ecx, 0x10071a98
xor eax, ebx
cdq
push edx
push eax
call fcn.100046a4
inc ebx
cmp ebx, 0x7ffe
jl 0x10018c5e
mov esi, dword [ebp - 0x2c]
inc edi
push 0
pop ebx
cmp edi, 0x13f8
jl 0x10018c54
inc esi
mov dword [ebp - 0x2c], esi
cmp esi, 0x7943
jl 0x10018c52
mov dword [ebp - 0x28], 0x7fb0
mov dword [ebp - 4], ebx
cmp dword [ebp - 0x34], 0xc43
jge 0x10018cb5
mov edx, str.wytbywsne_auc_rmy_yplpist
mov ecx, 0x10071a98
call fcn.10006c80
or dword [ebp - 4], 0xffffffff
mov dword [ebp - 0x28], 0xc1ec2db2
mov eax, 0xcd509978
push 3
pop ecx
mov dword [ebp - 0x28], ecx
mov dword [ebp - 0x28], 0xaa39ed0
mov dword [ebp - 0x90], eax
mov dword [ebp - 0x8c], eax
mov dword [ebp - 0x88], eax
mov dword [ebp - 0x84], eax
mov dword [ebp - 0x28], 0xb64fda7e
mov dword [ebp - 0x28], 4
mov dword [ebp - 0x28], 0xef99
mov dword [ebp - 0x28], 0x5169ff4c
mov dword [ebp - 0x2c], 0xab83
inc dword [ebp - 0x2c]
mov dword [ebp - 0x24], ebx
jmp 0x10018d48
mov eax, dword [ebp - 0x24]
mov dword [ebp + eax*4 - 0x19c], 0xfffffffc
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], ecx
jl 0x10018d37
mov byte [ebp - 0x15], bl
cmp byte [ebp - 0x15], 0
je 0x10018d61
push 0xeb5
call dword [sym.imp.USER32.dll_IsWindow]
mov eax, dword [ebp - 0x19c]
mov dword [ebp - 0x19c], eax
mov dword [ebp - 0x24], 1
mov byte [ebp - 0x15], bl
cmp byte [ebp - 0x15], 0
je 0x10018d86
push ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_ExpandEnvironmentStringsW]
mov dword [ebp - 0x24], ebx
jmp 0x10018da2
mov byte [ebp - 0x15], bl
cmp byte [ebp - 0x15], 0
je 0x10018d9f
push ebx
push ebx
push ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_GetDiskFreeSpaceW]
dec dword [ebp - 0x24]
cmp dword [ebp - 0x24], 0xffffffe2
jg 0x10018d8b
mov dword [ebp - 0x6c], 0xd04a805
mov dword [ebp - 0x68], 0x3e060303
mov byte [ebp - 0x64], bl
mov dword [ebp - 0x63], 0x228021b
mov dword [ebp - 0x5f], 0x30129ef
mov dword [ebp - 0x30], 0x3ae35568
mov dword [ebp - 0x30], ebx
cmp dword [ebp - 0x30], 0x12
jl 0x10018eed
mov dword [ebp - 0x1c], 0xa9831117
mov dword [ebp - 0x28], 0x1c71bc7d
mov dword [ebp - 0x24], ebx
jmp 0x10018dff
mov eax, dword [ebp - 0x24]
mov dword [ebp + eax*4 - 0x30c], 8
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], 2
jl 0x10018dee
mov dword [ebp - 0x1c], 1
cmp dword [ebp - 0x1c], ebx
jl 0x10018e35
mov byte [ebp - 0x15], bl
cmp byte [ebp - 0x15], 0
je 0x10018e30
push ebx
push 0x123e
push 0x1334
push 0xa56
call dword [sym.imp.GDI32.dll_GetCharABCWidthsFloatA]
dec dword [ebp - 0x1c]
jns 0x10018e11
mov dword [ebp - 0x1c], ebx
cmp dword [ebp - 0x1c], 0x1c
jg 0x10018ee5
mov dword [ebp - 0x2c], 0x4405
cmp dword [ebp - 0x2c], 0x45d1
jle 0x10018e9b
mov esi, ebx
mov edi, ebx
mov ecx, edi
mov eax, esi
sar eax, cl
lea ecx, [ebp - 0x39c]
cdq
push edx
push eax
call fcn.10001a95
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x10018e74
mov eax, dword [eax]
push eax
call fcn.1003fffd
pop ecx
push ebx
push 1
lea ecx, [ebp - 0x39c]
call fcn.10004e55
inc edi
cmp edi, 0x6666
jl 0x10018e56
inc esi
cmp esi, 0x75c1
jl 0x10018e54
mov dword [ebp - 0x28], 1
cmp dword [ebp - 0x2c], 0x43cb
jge 0x10018eb6
push str.afaseloab_kqtgth_tkx_gxnx_ytq_trdrtmsp_jdaw
call fcn.1003fffd
pop ecx
or dword [ebp - 4], 0xffffffff
mov byte [ebp - 0x15], bl
cmp byte [ebp - 0x15], 0
je 0x10018edd
push 0x22a8
push 0xebb
push 0x78c
push 0x25a1
call dword [sym.imp.GDI32.dll_CreateRectRgn]
inc dword [ebp - 0x1c]
jmp 0x10018e38
inc dword [ebp - 0x30]
jmp 0x10018dd1
mov dl, byte [ebp - 0x6b]
movzx esi, byte [ebp - 0x6c]
mov al, dl
or al, 0xc4
add esi, esi
and dl, 0xc4
movzx ecx, al
movzx eax, dl
sub cx, ax
mov dword [ebp - 0x38], esi
mov word [ebp + esi - 0x128], cx
push 3
mov dword [ebp - 0x28], 0x9fe387fb
mov dword [ebp - 0x24], ebx
pop esi
jmp 0x10018f31
mov eax, dword [ebp - 0x24]
mov dword [ebp + eax*4 - 0x258], 0x1ec2db22
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], esi
jl 0x10018f20
mov eax, dword [ebp - 0x28]
mov dword [ebp - 0x258], eax
mov byte [ebp - 0x15], bl
cmp byte [ebp - 0x15], 0
je 0x10018f4e
call dword [sym.imp.USER32.dll_WaitMessage]
mov eax, dword [ebp - 0x38]
push 2
pop edi
mov ecx, edi
mov dword [ebp - 0x34], ebx
add eax, edi
mov dword [ebp - 0x30], ecx
mov dword [ebp - 0x28], eax
cmp ecx, eax
jne 0x10018f75
movzx eax, byte [ebp + ecx - 0x6c]
dec ecx
add ecx, eax
lea edx, [eax + 1]
mov dword [ebp - 0x34], edx
jmp 0x10018faa
movzx edx, byte [ebp + ecx - 0x6b]
mov eax, ecx
sub eax, dword [ebp - 0x34]
mov dword [ebp - 0x34], ebx
movzx eax, byte [ebp + eax - 0x6e]
movzx eax, word [ebp + eax*2 - 0x128]
mov ecx, eax
and eax, edx
or ecx, edx
sub ecx, eax
mov eax, dword [ebp - 0x30]
movzx eax, byte [ebp + eax - 0x6c]
mov word [ebp + eax*2 - 0x128], cx
mov ecx, dword [ebp - 0x30]
mov eax, dword [ebp - 0x28]
add ecx, edi
mov dword [ebp - 0x30], ecx
cmp ecx, 0x11
jb 0x10018f61
xor ecx, ecx
inc ecx
mov dword [ebp - 0x28], ecx
mov dword [ebp - 0x24], ebx
jmp 0x10018fd0
mov eax, dword [ebp - 0x24]
mov dword [ebp + eax*4 - 0x40], 0x4fd3df75
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], ecx
jl 0x10018fc2
mov dword [ebp - 0x40], 0x1b
cmp dword [ebp - 0x40], 0xd
je 0x100191cc
push dword [ebp - 0x70]
movdqa xmm0, xmmword [0x10065890]
lea eax, [ebp - 0x210]
push eax
lea eax, [ebp - 0x220]
mov dword [ebp - 0x7c], ebx
push eax
push ebx
lea ecx, [ebp - 0x7c]
mov dword [ebp - 0x78], ebx
movdqu xmmword [ebp - 0x220], xmm0
mov dword [ebp - 0x74], ebx
call fcn.10007538
mov dword [ebp - 4], 4
xor edx, edx
mov dword [ebp - 0x20], 0xffffffff
inc edx
mov dword [ebp - 0x34], 0xcfcb8f1f
mov dword [ebp - 0x30], 0x55126ed4
mov dword [ebp - 0x2c], 0xbaa6
mov dword [ebp - 0x24], ebx
jmp 0x10019052
mov eax, dword [ebp - 0x24]
mov dword [ebp + eax*4 - 0x70], 0x1e6e836e
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], edx
jl 0x10019044
mov dword [ebp - 0x20], ebx
jmp 0x100191a7
mov dword [ebp - 0x24], 0x6e5dc64f
mov dword [ebp - 0x28], 0xffffffff
mov dword [ebp - 0x34], ebx
mov dword [ebp - 0x1c], edx
mov ecx, dword [ebp - 0x20]
mov eax, dword [ebp - 0x7c]
cmp dword [eax + ecx*4], 0xfffffffe
jl 0x100190f2
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x20]
mov eax, dword [ebp - 0x7c]
mov eax, dword [eax + ecx*4]
mov ecx, 0xffff
dec eax
cmp ecx, eax
sbb eax, eax
neg eax
cmp eax, 0xbc8b421d
ja 0x100190f2
mov ecx, dword [ebp - 0x20]
mov eax, dword [ebp - 0x7c]
cmp dword [eax + ecx*4], ebx
jne 0x100190f2
mov dword [ebp - 0x24], ebx
jmp 0x100190e8
mov dword [ebp - 0x34], esi
cmp dword [ebp - 0x34], ebx
jl 0x100190d6
mov dword [ebp - 0x1c], ebx
jmp 0x100190cc
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0x70], 7
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], edx
jl 0x100190be
dec dword [ebp - 0x34]
jns 0x100190b9
mov ecx, dword [ebp - 0x20]
mov eax, dword [ebp - 0x7c]
cmp dword [eax + ecx*4], ebx
jne 0x10019174
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], esi
jle 0x100190b1
jmp 0x10019174
mov dword [ebp - 0x28], 0xe86f
lea ecx, [ebp - 0x1e8]
mov dword [ebp - 0x38], 0xfc75dfcc
push esi
call fcn.100048ce
mov dword [ebp - 0x38], 0x72a6dfe1
mov dword [ebp - 0x24], ebx
jmp 0x1001912b
mov ecx, dword [ebp - 0x24]
mov eax, dword [ebp - 0x1e8]
mov dword [eax + ecx*4], 0x691704d9
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], esi
jl 0x10019118
mov eax, dword [ebp - 0x40]
xor edx, edx
inc dword [ebp - 0x2c]
mov eax, dword [ebp - 0x40]
mov dword [ebp - 0x34], eax
mov ecx, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x40]
cmp ecx, eax
mov eax, dword [ebp - 0x34]
setg dl
xor ecx, ecx
cmp edx, eax
setle cl
mov dword [ebp - 0x1c], ecx
lea ecx, [ebp - 0x1e8]
mov eax, dword [ebp - 0x30]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x28]
dec eax
neg eax
sbb eax, eax
neg eax
mov dword [ebp - 0x38], eax
call fcn.10004951
mov dword [ebp - 0x30], ebx
cmp dword [ebp - 0x30], ebx
jl 0x100191a1
mov byte [ebp - 0x15], bl
cmp byte [ebp - 0x15], 0
je 0x1001919c
push ebx
push ebx
push 0x13f0
push 0x101
push 0xae8
call dword [sym.imp.USER32.dll_SendDlgItemMessageA]
dec dword [ebp - 0x30]
jns 0x1001917c
inc dword [ebp - 0x20]
push 1
pop edx
cmp dword [ebp - 0x20], esi
jle 0x1001905f
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x7c]
call fcn.10004951
dec dword [ebp - 0x40]
cmp dword [ebp - 0x40], 0xd
jne 0x10018fe6
xor ecx, ecx
inc ecx
xor eax, eax
mov edx, 0xffff
mov word [ebp - 0x11a], ax
mov dword [ebp - 0x24], ebx
mov dword [ebp - 0x2c], 0xdf3d37a5
mov dword [ebp - 0x34], ecx
mov dword [ebp - 0x2c], 0xfd43ddca
mov dword [ebp - 0x28], ebx
mov dword [ebp - 0x30], ebx
jmp 0x10019203
mov eax, dword [ebp - 0x30]
mov dword [ebp + eax*4 - 0xa4], edx
inc dword [ebp - 0x30]
cmp dword [ebp - 0x30], edi
jl 0x100191f6
mov byte [ebp - 0x15], bl
cmp byte [ebp - 0x15], 0
je 0x10019219
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_GetFileSize]
mov eax, dword [ebp - 0xa4]
mov eax, dword [ebp - 0x24]
mov dword [ebp - 0x2c], 0x72d9ee1c
cmp dword [ebp - 0x2c], ebx
jne 0x1001924e
mov ecx, dword [ebp - 0x34]
xor edx, edx
mov eax, dword [ebp - 0x2c]
cmp eax, ecx
mov eax, dword [ebp - 0x34]
setne dl
xor ecx, ecx
cmp edx, eax
setne cl
cmp ecx, dword [ebp - 0x24]
jle 0x1001924e
mov ecx, ebx
jmp 0x10019251
xor ecx, ecx
inc ecx
mov eax, dword [ebp - 0x34]
xor edx, edx
cmp ecx, eax
mov eax, dword [ebp - 0xa4]
setne dl
xor ecx, ecx
cmp eax, edx
setne cl
mov dword [ebp - 0x2c], ecx
cmp dword [ebp - 0x2c], ebx
je 0x10019276
mov eax, dword [ebp - 0xa4]
mov eax, dword [ebp - 0xa4]
lea ecx, [ebp - 0x1dc]
xor eax, eax
mov dword [ebp - 0x28], 1
mov word [ebp - 0x1dc], ax
lea eax, [ebp - 0x128]
push eax
mov dword [ebp - 0x1c8], 7
mov dword [ebp - 0x1cc], ebx
call fcn.10004e99
push 5
pop ecx
mov dword [ebp - 4], ecx
lea edi, [ebp - 0x128]
xor eax, eax
stosd dword es:[edi], eax
push 4
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
mov dword [ebp - 0x20], ecx
lea ecx, [ebp - 0xe8]
call fcn.100048ce
mov byte [ebp - 4], 6
mov dword [ebp - 0x28], 0x68d2
mov dword [ebp - 0x1c], ebx
jmp 0x100192ee
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0x3c], 0x188e17b8
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 1
jl 0x100192e0
mov dword [ebp - 0x1c], ebx
jmp 0x1001930c
mov ecx, dword [ebp - 0x1c]
mov eax, dword [ebp - 0xe8]
mov dword [eax + ecx*4], 0xfffffffd
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 4
jl 0x100192f9
cmp dword [ebp - 0x20], ebx
jne 0x1001931a
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x3c]
imul eax, dword [ebp - 0x20]
test eax, eax
je 0x1001932a
cmp dword [ebp - 0x20], ebx
jne 0x1001932d
mov eax, dword [ebp - 0x3c]
mov eax, dword [ebp - 0x3c]
mov eax, dword [ebp - 0x3c]
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x3c]
mov eax, dword [ebp - 0x3c]
mov ecx, dword [ebp - 0x3c]
mov eax, dword [ebp - 0xe8]
mov dword [eax + 0xc], ecx
mov dword [ebp - 0x20], ebx
cmp dword [ebp - 0x20], ebx
jg 0x10019491
mov dword [ebp - 0x2c], 0x485d
cmp dword [ebp - 0x2c], 0x49c0
jle 0x100193b7
push ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_SystemTimeToTzSpecificLocalTime]
mov esi, ebx
mov edi, ebx
mov eax, edi
lea ecx, [ebp - 0x384]
and eax, esi
cdq
push edx
push eax
call fcn.10001a95
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x10019390
mov eax, dword [eax]
push eax
call fcn.1003fffd
pop ecx
push ebx
push 1
lea ecx, [ebp - 0x384]
call fcn.10004e55
inc edi
cmp edi, 0x41e9
jl 0x10019374
inc esi
cmp esi, 0x60cb
jl 0x10019372
mov dword [ebp - 0x34], 0xfffffff7
cmp dword [ebp - 0x2c], 0x454b
jge 0x100193d2
push str.cur_snl_olkpsrme_aevx_lufagyqa
call fcn.1003fffd
pop ecx
mov dword [ebp - 4], 6
mov dword [ebp - 0x2c], 0xd1b4b1c2
mov dword [ebp - 0x28], 0xffffffff
mov eax, dword [ebp - 0x20]
cmp dword [ebp + eax*4 - 0x3c], ebx
jne 0x10019491
mov eax, dword [ebp - 0x20]
cmp dword [ebp + eax*4 - 0x3c], 0x3a6d7d04
jl 0x10019408
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp + eax*4 - 0x3c]
xor ecx, ecx
inc ecx
mov dword [ebp - 0x34], ecx
mov eax, dword [ebp - 0x34]
mov eax, dword [ebp - 0x3c]
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x20]
cmp dword [ebp + eax*4 - 0x3c], 0xffffffff
jl 0x1001942a
mov eax, dword [ebp - 0x20]
cmp dword [ebp + eax*4 - 0x3c], ebx
jne 0x1001942c
mov ecx, ebx
xor eax, eax
test ecx, ecx
setg al
cmp eax, 0xb10079d6
sbb eax, eax
xor edx, edx
neg eax
mov dword [ebp - 0x2c], eax
mov esi, dword [ebp - 0x20]
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp + eax*4 - 0x3c]
mov ecx, dword [ebp - 0x2c]
sub ecx, eax
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp + eax*4 - 0x3c]
cmp eax, ecx
mov eax, dword [ebp - 0xe8]
setl dl
imul edx, dword [eax + esi*4]
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp + eax*4 - 0x3c]
mov dword [ebp - 0x28], edx
xor edx, edx
cmp dword [ebp - 0x28], eax
mov eax, dword [ebp - 0xe8]
setle dl
xor ecx, ecx
cmp edx, dword [eax + 4]
setne cl
mov dword [ebp - 0x28], ecx
inc dword [ebp - 0x20]
jmp 0x1001934e
lea ecx, [ebp - 0xe8]
mov byte [ebp - 4], 5
call fcn.10004951
push dword [ebp - 0xd8]
lea ecx, [ebp - 0x200]
call fcn.10008035
mov byte [ebp - 4], 9
mov dword [ebp - 0x34], 0x6927
cmp dword [ebp - 0x34], 0x6cfb
jle 0x10019513
mov esi, ebx
mov dword [ebp - 0x2c], ebx
mov edi, esi
mov esi, 0x5150
mov eax, edi
lea ecx, [ebp - 0x36c]
cdq
push edx
push eax
call fcn.10001a95
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x100194eb
mov eax, dword [eax]
push eax
call fcn.1003fffd
pop ecx
push ebx
push 1
lea ecx, [ebp - 0x36c]
call fcn.10004e55
dec edi
dec esi
jne 0x100194d1
mov esi, dword [ebp - 0x2c]
inc esi
mov dword [ebp - 0x2c], esi
cmp esi, 0xd47
jl 0x100194ca
mov dword [ebp - 0x24], 0x399841b3
cmp dword [ebp - 0x34], 0x6596
jge 0x1001952e
push str.knohfhzot_dpzq_cgywgpr_ncmf_ehy_yeiwn_mlezsd_eawtntbo_zboeu_aha_tpvgud_ljfhfhgil_szu_ryws
call fcn.1003fffd
pop ecx
push 3
pop esi
mov dword [ebp - 4], 9
push 2
mov dword [ebp - 0x38], 0x749efede
mov dword [ebp - 0x24], 4
pop edi
cmp dword [ebp - 0x24], esi
jle 0x1001970a
push dword [ebp - 0x70]
movdqa xmm0, xmmword [0x100658a0]
lea eax, [ebp - 0x230]
push eax
lea eax, [ebp - 0x240]
mov dword [ebp - 0x1c], 5
push eax
push ebx
lea ecx, [ebp - 0x9c]
mov dword [ebp - 0x9c], ebx
movdqu xmmword [ebp - 0x240], xmm0
mov dword [ebp - 0x98], ebx
mov dword [ebp - 0x94], ebx
call fcn.10007538
mov byte [ebp - 4], 0xc
mov dword [ebp - 0x28], 1
mov dword [ebp - 0x1c], ebx
cmp dword [ebp - 0x1c], edi
jle 0x100196f3
mov dword [ebp - 0x20], 0x6b9dd952
mov dword [ebp - 0x20], ebx
cmp dword [ebp - 0x20], esi
jg 0x100196da
mov dword [ebp - 0x28], 0x4d26
cmp dword [ebp - 0x28], 0x4f39
jle 0x10019634
mov dword [ebp - 0x30], ebx
mov edx, ebx
mov dword [ebp - 0x34], ebx
mov eax, ebx
mov dword [ebp - 0x2c], ebx
mov ecx, ebx
mov dword [ebp - 0x38], ebx
shl eax, cl
mov ecx, dword [ebp - 0x30]
add ecx, edx
or eax, ecx
mov ecx, 0x10071a98
cdq
push edx
push eax
call fcn.100046a4
mov ecx, dword [ebp - 0x38]
mov eax, dword [ebp - 0x2c]
inc ecx
mov edx, dword [ebp - 0x34]
mov dword [ebp - 0x38], ecx
cmp ecx, 0x5ed7
jl 0x100195e4
inc eax
mov dword [ebp - 0x2c], eax
cmp eax, 0x7682
jl 0x100195df
inc edx
mov dword [ebp - 0x34], edx
cmp edx, 0x6a96
jl 0x100195da
mov eax, dword [ebp - 0x30]
inc eax
mov dword [ebp - 0x30], eax
cmp eax, 0x930
jl 0x100195d5
mov ecx, dword [ebp - 0x20]
mov eax, dword [ebp - 0x9c]
cmp dword [eax + ecx*4], ebx
jne 0x10019669
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x24]
mov ecx, dword [ebp - 0x9c]
mov eax, dword [ecx + 0xc]
cmp eax, dword [ecx]
jl 0x1001967c
cmp dword [ebp - 0x24], ebx
je 0x1001967c
mov ecx, dword [ebp - 0x20]
mov eax, dword [ebp - 0x9c]
cmp dword [eax + ecx*4], ebx
je 0x1001967c
xor eax, eax
inc eax
jmp 0x1001967e
mov eax, ebx
dec eax
cmp eax, 0xf9acf257
sbb eax, eax
neg eax
mov dword [ebp - 0x38], eax
mov byte [ebp - 4], 0xd
cmp dword [ebp - 0x28], 0x4a0c
jge 0x100196cb
mov edx, str.unrbgwfln_lfx_jocjjzqdj_pcpb_mokj_cwejhxy_koqdq_lwd_mvtjkkgzp
mov ecx, 0x10071a98
call fcn.10006c80
jmp 0x100196cb
mov dword [ebp - 4], 0xc
inc dword [ebp - 0x20]
jmp 0x100195b9
mov eax, dword [ebp - 0x9c]
mov eax, dword [eax]
mov dword [ebp - 0x20], eax
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x28], eax
inc dword [ebp - 0x1c]
jmp 0x100195a6
lea ecx, [ebp - 0x9c]
mov byte [ebp - 4], 9
call fcn.10004951
dec dword [ebp - 0x24]
jmp 0x10019549
mov dword [ebp - 0x28], 5
mov dword [ebp - 0x38], 0x765e
cmp dword [ebp - 0x38], 0x776d
jle 0x10019777
mov eax, ebx
mov dword [ebp - 0x2c], ebx
mov ecx, ebx
mov dword [ebp - 0x28], ebx
shl eax, cl
lea ecx, [ebp - 0x354]
cdq
push edx
push eax
call fcn.10001a95
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x10019745
mov eax, dword [eax]
push eax
call fcn.1003fffd
pop ecx
push ebx
push 1
lea ecx, [ebp - 0x354]
call fcn.10004e55
mov ecx, dword [ebp - 0x28]
mov eax, dword [ebp - 0x2c]
inc ecx
mov dword [ebp - 0x28], ecx
cmp ecx, 0x53af
jl 0x1001972b
inc eax
mov dword [ebp - 0x2c], eax
cmp eax, 0x7a61
jl 0x10019726
mov dword [ebp - 0x28], ebx
cmp dword [ebp - 0x38], 0x7366
jge 0x1001978e
push str.wqknj_fzl_eerj
call fcn.1003fffd
pop ecx
mov dword [ebp - 4], 9
lea ecx, [ebp - 0x1c4]
mov dword [ebp - 0x28], esi
push edi
call fcn.100048ce
mov byte [ebp - 4], 0x11
mov dword [ebp - 0x28], 0xe65251c6
mov dword [ebp - 0x28], 0x25062d7b
mov dword [ebp - 0x20], 0x415fb57a
mov dword [ebp - 0x1c], ebx
jmp 0x100197d3
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0xdc], 0xfe01bd97
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 1
jl 0x100197c2
mov dword [ebp - 0x1c], ebx
jmp 0x100197f1
mov ecx, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x1c4]
mov dword [eax + ecx*4], 0xcb24ce55
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], edi
jl 0x100197de
mov dword [ebp - 0x24], 0x5f29
cmp dword [ebp - 0x24], 0x62b4
jle 0x10019857
mov dword [ebp - 0x30], ebx
mov dword [ebp - 0x2c], ebx
mov dword [ebp - 0x34], 0x4f99
mov eax, ebx
mov dword [ebp - 0x38], 0x6076
mov ebx, dword [ebp - 0x2c]
mov dword [ebp - 0x28], eax
cdq
mov ecx, 0x10071a98
push edx
push eax
call fcn.100046a4
mov eax, dword [ebp - 0x28]
add eax, ebx
dec dword [ebp - 0x38]
mov dword [ebp - 0x28], eax
jne 0x10019822
mov eax, dword [ebp - 0x30]
add ebx, eax
dec dword [ebp - 0x34]
push 0
mov dword [ebp - 0x2c], ebx
pop ebx
jne 0x10019813
inc eax
mov dword [ebp - 0x30], eax
cmp eax, 0x5000
jl 0x10019809
mov byte [ebp - 0x15], bl
mov dword [ebp - 0x28], 0x1cdc
cmp dword [ebp - 0x28], 0x6ab
jge 0x10019ae1
call fcn.10041c19
push eax
push 0x100627a4
push str.in.txt
call fcn.10041dc8
add esp, 0xc
call fcn.10041c19
add eax, 0x20
push eax
push 0x100627b0
push str.out.txt
call fcn.10041dc8
add esp, 0xc
mov dword [ebp - 0x2fc], ebx
xor eax, eax
mov dword [ebp - 0x2d8], edi
inc eax
mov dword [ebp - 0x2d0], 8
mov dword [ebp - 0x190], eax
push 4
pop edx
push 9
pop ecx
push 0xf
mov dword [ebp - 0x18c], eax
mov dword [ebp - 0x2ec], eax
mov dword [ebp - 0x2cc], eax
mov dword [ebp - 0x17c], eax
mov dword [ebp - 0x178], eax
mov dword [ebp - 0x28c], eax
mov dword [ebp - 0x26c], eax
pop eax
mov dword [ebp - 0x188], edx
mov dword [ebp - 0x2d4], edx
mov dword [ebp - 0x2dc], 6
mov dword [ebp - 0x184], edx
mov dword [ebp - 0x2c8], esi
mov dword [ebp - 0x2c4], ecx
mov dword [ebp - 0x2c0], 7
mov dword [ebp - 0x180], edi
mov dword [ebp - 0x2b8], edx
mov dword [ebp - 0x2bc], 6
mov dword [ebp - 0x2ac], 5
mov dword [ebp - 0x29c], 6
mov dword [ebp - 0x174], edx
mov dword [ebp - 0x288], 7
mov dword [ebp - 0x284], ecx
mov dword [ebp - 0x280], esi
mov dword [ebp - 0x170], edx
mov dword [ebp - 0x278], 8
mov dword [ebp - 0x274], edx
mov dword [ebp - 0x270], edi
mov dword [ebp - 0x27c], 6
mov dword [ebp - 0x16c], edi
mov dword [ebp - 0x268], ecx
mov dword [ebp - 0xc0], eax
mov dword [ebp - 0xc4], ebx
mov byte [ebp - 0xd4], bl
mov dword [ebp - 0xa8], eax
mov dword [ebp - 0xac], ebx
mov byte [ebp - 0xbc], bl
mov byte [ebp - 4], 0x13
lea edx, [ebp - 0xd4]
mov ecx, 0x10071bb8
call fcn.1001aff9
lea edx, [ebp - 0xbc]
mov ecx, eax
call fcn.1001aff9
lea ecx, [ebp - 0xd4]
call fcn.1001ad6c
test al, al
je 0x10019a04
lea ecx, [ebp - 0xbc]
call fcn.1001ad6c
test al, al
jne 0x10019abf
lea ecx, [ebp - 0xbc]
call fcn.1001ad6c
test al, al
je 0x10019a23
push 1
call fcn.1001a52c
push eax
call fcn.1001adc4
pop ecx
jmp 0x100199c5
push 0x100627bc
call fcn.1003fc70
pop ecx
push eax
push ecx
push ecx
lea ecx, [ebp - 0xbc]
call fcn.1001a64f
cmp dword [ebp - 0xa8], 0x10
lea eax, [ebp - 0xbc]
mov edx, dword [ebp - 0xac]
lea esi, [ebp - 0xbc]
cmovae eax, dword [ebp - 0xbc]
lea edi, [ebp - 0xd4]
cmovae esi, dword [ebp - 0xbc]
movsx eax, byte [eax + edx - 2]
imul ecx, eax, 0xa
movsx eax, byte [esi + edx - 1]
mov esi, dword [ebp - 0xc4]
add eax, 0xfffffdf0
add eax, ecx
cmp dword [ebp - 0xc0], 0x10
lea ecx, [ebp - 0xd4]
cdq
cmovae ecx, dword [ebp - 0xd4]
cmovae edi, dword [ebp - 0xd4]
movsx ecx, byte [ecx + esi - 1]
idiv dword [ebp + ecx*4 - 0x250]
movsx eax, byte [edi + esi - 1]
lea eax, [edx + eax*4]
push dword [ebp + eax*4 - 0x5fc]
jmp 0x10019a15
push ebx
push 1
lea ecx, [ebp - 0xbc]
call fcn.10004e55
push ebx
push 1
lea ecx, [ebp - 0xd4]
call fcn.10004e55
push 3
pop esi
push 2
pop edi
cmp byte [ebp - 0x15], 0
je 0x10019af8
push 0x262c
push 0x1f36
push ebx
call dword [sym.imp.USER32.dll_OffsetRect]
mov byte [ebp - 4], 0x14
cmp dword [ebp - 0x24], 0x5ce9
jge 0x10019b38
mov edx, str.puwo_srvcuo_preejchkz_gvobq_xee_ibrm_aqmk_clm_bxha
mov ecx, 0x10071a98
call fcn.10006c80
jmp 0x10019b38
mov dword [ebp - 4], 0x11
lea ecx, [ebp - 0x1c4]
dec dword [ebp - 0x20]
mov byte [ebp - 4], 9
call fcn.10004951
push esi
lea ecx, [ebp - 0x140]
call fcn.100048ce
mov dword [ebp - 0x30], ebx
jmp 0x10019b75
mov ecx, dword [ebp - 0x30]
mov eax, dword [ebp - 0x140]
mov dword [eax + ecx*4], 0xbeaa
inc dword [ebp - 0x30]
cmp dword [ebp - 0x30], esi
jl 0x10019b62
mov eax, dword [ebp - 0x140]
xor esi, esi
inc esi
inc dword [eax + 8]
mov byte [ebp - 0x15], bl
cmp byte [ebp - 0x15], 0
je 0x10019b9b
push esi
push 0x1f6b
call dword [sym.imp.USER32.dll_FlashWindow]
lea ecx, [ebp - 0x140]
call fcn.10004951
push 0x5c
pop eax
mov word [ebp - 0x44], ax
mov ecx, ebx
mov eax, edi
mov byte [ebp - 0x58], bl
mov dword [ebp - 0x57], 0x717c04ab
mov word [ebp - 0x53], 0xce25
mov dword [ebp - 0x2c], eax
cmp eax, edi
jne 0x10019bcf
push 5
pop ecx
push ecx
pop eax
jmp 0x10019bfc
movzx edx, byte [ebp + eax - 0x57]
sub eax, ecx
movzx eax, byte [ebp + eax - 0x5a]
movzx ecx, word [ebp + eax*2 - 0x44]
mov eax, ecx
and eax, edx
add eax, eax
sub ecx, eax
mov eax, dword [ebp - 0x2c]
add ecx, edx
movzx eax, byte [ebp + eax - 0x58]
mov word [ebp + eax*2 - 0x44], cx
mov ecx, ebx
mov eax, dword [ebp - 0x2c]
add eax, edi
mov dword [ebp - 0x2c], eax
cmp eax, 7
jb 0x10019bc4
xor eax, eax
mov dword [ebp - 0x104], 7
mov word [ebp - 0x42], ax
lea ecx, [ebp - 0x118]
mov word [ebp - 0x118], ax
lea eax, [ebp - 0x44]
push eax
mov dword [ebp - 0x108], ebx
call fcn.10004e99
mov byte [ebp - 4], 0x16
mov ecx, 0x8ecb302a
mov dword [ebp - 0x20], esi
mov dword [ebp - 0x30], 0x1e28
mov dword [ebp - 0x34], 0x96e6c8ca
mov eax, dword [ebp - 0x20]
cmp ecx, eax
sbb eax, eax
xor ecx, ecx
inc eax
cmp eax, 0x63d1
setg cl
cmp ecx, 0x1cf04157
jl 0x10019c69
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x20]
xor edx, edx
mov eax, dword [ebp - 0x30]
mov ecx, dword [ebp - 0x30]
mov eax, dword [ebp - 0x20]
cmp eax, ecx
setne dl
mov dword [ebp - 0x34], edx
cmp dword [ebp - 0x34], ebx
jne 0x10019c8b
mov edx, ebx
cmp dword [ebp - 0x30], ebx
je 0x10019c8d
mov edx, esi
mov eax, dword [ebp - 0x20]
xor ecx, ecx
cmp edx, eax
mov eax, dword [ebp - 0x20]
setg cl
sub eax, ecx
xor ecx, ecx
cmp eax, 0xe60f
setl cl
cmp ecx, dword [ebp - 0x30]
jge 0x10019cd5
mov byte [ebp - 0x15], bl
cmp byte [ebp - 0x15], 0
je 0x10019cbc
push ebx
push ebx
call dword [sym.imp.USER32.dll_LoadIconA]
mov byte [ebp - 0x15], bl
cmp byte [ebp - 0x15], 0
je 0x10019de9
push ebx
call dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
jmp 0x10019de9
push dword [ebp - 0xdc]
movdqa xmm0, xmmword [0x10065860]
lea eax, [ebp - 0x200]
push eax
lea eax, [ebp - 0x210]
mov dword [ebp - 0xf4], ebx
push eax
push ebx
lea ecx, [ebp - 0xf4]
mov dword [ebp - 0xf0], ebx
movdqu xmmword [ebp - 0x210], xmm0
mov dword [ebp - 0xec], ebx
call fcn.10007538
push 8
pop eax
mov byte [ebp - 4], 0x17
lea ecx, [ebp - 0x134]
push 3
mov dword [ebp - 0x168], eax
mov dword [ebp - 0x164], eax
pop edi
mov dword [ebp - 0x160], eax
mov dword [ebp - 0x15c], eax
push edi
call fcn.100048ce
push edi
mov dword [ebp - 0x1c], ebx
pop edx
jmp 0x10019d59
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0x100], edx
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], edx
jl 0x10019d4c
mov dword [ebp - 0x1c], ebx
jmp 0x10019d72
mov ecx, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x134]
mov dword [eax + ecx*4], edx
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], edx
jl 0x10019d63
mov eax, dword [ebp - 0xfc]
xor ecx, ecx
mov eax, dword [ebp - 0x34]
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x30]
mov eax, dword [ebp - 0xfc]
mov edx, dword [ebp - 0xfc]
mov eax, dword [ebp - 0xf4]
mov dword [eax + 8], edx
mov eax, dword [ebp - 0xfc]
cmp eax, esi
mov eax, dword [ebp - 0x34]
setge cl
imul eax, dword [ebp - 0x20]
imul eax, ecx
mov ecx, dword [ebp - 0xf8]
sub ecx, eax
mov eax, dword [ebp - 0x134]
mov dword [ebp - 0x160], ecx
imul ecx, edx
mov dword [eax + 8], ecx
lea ecx, [ebp - 0x134]
call fcn.10004951
lea ecx, [ebp - 0xf4]
mov byte [ebp - 4], 0x16
call fcn.10004951
push 2
pop edi
mov dword [ebp - 0x44], ebx
lea ecx, [ebp - 0x14c]
mov dword [ebp - 0x20], esi
mov dword [ebp - 0x1c], 0x694d2b5f
push edi
call fcn.100048ce
mov dword [ebp - 0x30], ebx
jmp 0x10019e1a
mov ecx, dword [ebp - 0x30]
mov eax, dword [ebp - 0x14c]
mov dword [eax + ecx*4], 0xfffffff6
inc dword [ebp - 0x30]
cmp dword [ebp - 0x30], edi
jl 0x10019e07
cmp dword [ebp - 0x20], ebx
je 0x10019e27
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x20]
xor ecx, ecx
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x20]
cmp eax, 0x864b
setl cl
add ecx, dword [ebp - 0x20]
add ecx, dword [ebp - 0x20]
jne 0x10019e49
mov edx, ebx
cmp dword [ebp - 0x20], ebx
je 0x10019e4b
mov edx, esi
mov eax, dword [ebp - 0x20]
xor ecx, ecx
cmp edx, eax
mov eax, dword [ebp - 0x20]
setle cl
xor edx, edx
cmp ecx, eax
mov eax, dword [ebp - 0x20]
setne dl
xor ecx, ecx
cmp edx, eax
setg cl
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 0x1c], ebx
jmp 0x10019e82
mov ecx, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x14c]
cmp dword [eax + ecx*4], ebx
jne 0x10019e87
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], esi
jle 0x10019e71
lea ecx, [ebp - 0x14c]
call fcn.10004951
push 0x5f
pop eax
mov word [ebp - 0x48], ax
mov ecx, ebx
mov eax, edi
mov byte [ebp - 0x50], bl
mov dword [ebp - 0x4f], 0x3b2a0419
mov word [ebp - 0x4b], 0xe0d2
mov dword [ebp - 0x2c], eax
cmp eax, edi
jne 0x10019ebb
push 5
pop ecx
push ecx
pop eax
jmp 0x10019ee6
movzx edx, byte [ebp + eax - 0x4f]
sub eax, ecx
movzx eax, byte [ebp + eax - 0x52]
movzx eax, word [ebp + eax*2 - 0x48]
mov ecx, eax
and eax, edx
or ecx, edx
sub ecx, eax
mov eax, dword [ebp - 0x2c]
movzx eax, byte [ebp + eax - 0x50]
mov word [ebp + eax*2 - 0x48], cx
mov ecx, ebx
mov eax, dword [ebp - 0x2c]
add eax, edi
mov dword [ebp - 0x2c], eax
cmp eax, 7
jb 0x10019eb0
xor eax, eax
mov dword [ebp - 0x1a4], 7
mov word [ebp - 0x46], ax
lea ecx, [ebp - 0x1b8]
mov word [ebp - 0x1b8], ax
lea eax, [ebp - 0x48]
push eax
mov dword [ebp - 0x1a8], ebx
call fcn.10004e99
mov byte [ebp - 4], 0x18
mov dword [ebp - 0x38], 0x6c7e
cmp dword [ebp - 0x38], 0x7018
jle 0x10019f88
mov eax, ebx
mov dword [ebp - 0x2c], ebx
mov ecx, ebx
mov dword [ebp - 0x28], ebx
cdq
idiv ecx
lea ecx, [ebp - 0x324]
mov eax, edx
cdq
push edx
push eax
call fcn.10001a95
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x10019f57
mov eax, dword [eax]
push eax
call fcn.1003fffd
pop ecx
push ebx
push esi
lea ecx, [ebp - 0x324]
call fcn.10004e55
mov ecx, dword [ebp - 0x28]
mov eax, dword [ebp - 0x2c]
inc ecx
mov dword [ebp - 0x28], ecx
cmp ecx, 0x252b
jl 0x10019f3a
inc eax
mov dword [ebp - 0x2c], eax
cmp eax, 0x129d
jl 0x10019f35
cmp dword [ebp - 0x38], 0x6a60
jge 0x10019f9c
push str.sqvrqdo_uvcokoqso_frezzsqwh_sft_sbsvfcrp_nieoshi_quhqirau
call fcn.1003fffd
pop ecx
mov dword [ebp - 4], 0x18
or eax, 0xffffffff
mov dword [ebp - 0x1c], 0x76f5020f
mov dword [ebp - 0x20], 0xfffffffb
mov dword [ebp - 0x90], eax
mov dword [ebp - 0x8c], eax
mov dword [ebp - 0x88], eax
mov dword [ebp - 0x84], eax
mov dword [ebp - 0x38], 0x310
cmp dword [ebp - 0x38], 0x5d5
jle 0x1001a06e
mov dword [ebp - 0x30], ebx
mov eax, ebx
mov dword [ebp - 0x34], ebx
mov ecx, ebx
mov dword [ebp - 0x28], ebx
cdq
idiv ecx
mov dword [ebp - 0x2c], ebx
mov eax, edx
mov dword [ebp - 0x24], eax
cdq
lea ecx, [ebp - 0x33c]
idiv dword [ebp - 0x2c]
add edx, dword [ebp - 0x30]
mov eax, edx
cdq
push edx
push eax
call fcn.10001a95
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x1001a019
mov eax, dword [eax]
push eax
call fcn.1003fffd
pop ecx
push ebx
push esi
lea ecx, [ebp - 0x33c]
call fcn.10004e55
mov eax, dword [ebp - 0x2c]
inc eax
mov dword [ebp - 0x2c], eax
cmp eax, 0x12e8
mov eax, dword [ebp - 0x24]
jl 0x10019ff8
mov ecx, dword [ebp - 0x28]
mov eax, dword [ebp - 0x34]
inc ecx
mov dword [ebp - 0x28], ecx
cmp ecx, 0x7cd2
jl 0x10019fed
inc eax
mov dword [ebp - 0x34], eax
cmp eax, 0x2230
jl 0x10019fe8
mov ecx, dword [ebp - 0x30]
inc ecx
mov dword [ebp - 0x30], ecx
cmp ecx, 0x6ebd
jl 0x10019fe3
mov dword [ebp - 0x1c], ebx
jmp 0x1001a084
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0x230], 0xfffffffb
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 4
jl 0x1001a073
cmp dword [ebp - 0x38], 0x189
jge 0x1001a09e
push str.oncdeu_atilysods_ugs_yhixnt_uzavoal_dxhmijlir_cvatxxe_hkyxgmrdd_sny_agrbobloo_lamuvf_xyvadfcfy_siwovtg_ilgqa
call fcn.1003fffd
pop ecx
mov dword [ebp - 4], 0x18
mov dword [ebp - 0x1c], ebx
jmp 0x1001a0bb
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0x304], 0x40ee
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], edi
jl 0x1001a0aa
push 3
pop edi
mov dword [ebp - 0x1c], edi
cmp dword [ebp - 0x1c], ebx
jl 0x1001a18c
mov eax, 0xcbedfa90
mov dword [ebp - 0x30], 0xc3ad3b31
mov dword [ebp - 0x2c], esi
mov dword [ebp - 0x28], 0x11a796d4
mov dword [ebp - 0x28], 5
mov dword [ebp - 0x90], eax
mov dword [ebp - 0x8c], eax
mov dword [ebp - 0x88], eax
mov dword [ebp - 0x84], eax
mov dword [ebp - 0x38], 0x6f85a06c
mov dword [ebp - 0x30], edi
cmp dword [ebp - 0x30], ebx
jl 0x1001a180
mov dword [ebp - 0x28], 0xc9214a9b
mov dword [ebp - 0x28], 0x858905b8
mov dword [ebp - 0x28], ebx
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp + eax*4 - 0x230]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp + eax*4 - 0x230]
mov eax, dword [ebp - 0x2c]
inc dword [ebp - 0x2c]
mov dword [ebp - 0x28], 0xfffffffe
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x30]
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0x28], ebx
mov byte [ebp - 0x15], bl
cmp byte [ebp - 0x15], 0
je 0x1001a176
push 0x1fd
push 0x5b7
push ebx
push 0x2191
call dword [sym.imp.USER32.dll_DrawEdge]
dec dword [ebp - 0x30]
jns 0x1001a113
mov eax, 0xcbedfa90
dec dword [ebp - 0x38]
dec dword [ebp - 0x1c]
jns 0x1001a0d4
mov byte [ebp - 0x15], bl
cmp byte [ebp - 0x15], 0
je 0x1001a19b
call dword [sym.imp.KERNEL32.dll_GetACP]
mov dword [ebp - 0x48], ebx
push dword [ebp - 0x108]
cmp dword [ebp - 0x104], 8
lea eax, [ebp - 0x118]
push ebx
cmovae eax, dword [ebp - 0x118]
lea ecx, [ebp - 0x200]
push eax
call fcn.1001ab6d
cmp eax, 0xffffffff
je 0x1001a1e3
push 0xffffffffffffffff
push ebx
lea ecx, [ebp - 0x1b8]
push ecx
push esi
push eax
lea ecx, [ebp - 0x200]
call fcn.1001a879
jmp 0x1001a19e
mov dword [ebp - 0x24], 0x8fc558ba
lea ecx, [ebp - 0x158]
mov dword [ebp - 0x28], 0x7822e6e
mov dword [ebp - 0x38], 0x19adb821
mov dword [ebp - 0x28], 0xca3691f6
push edi
call fcn.100048ce
mov dword [ebp - 0x28], 0x91b76e1e
push 3
mov dword [ebp - 0x2c], 0x20410224
mov dword [ebp - 0x1c], ebx
pop edx
jmp 0x1001a234
mov ecx, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x158]
mov dword [eax + ecx*4], 0x2c40a98c
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], edx
jl 0x1001a221
mov dword [ebp - 0x1c], ebx
jmp 0x1001a24f
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0x24c], 0xffffffff
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], edx
jl 0x1001a23e
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0x24]
neg eax
sbb eax, eax
inc eax
imul eax, dword [ebp - 0x24]
test eax, eax
jne 0x1001a26e
mov ecx, ebx
cmp dword [ebp - 0x38], ebx
je 0x1001a270
mov ecx, esi
mov eax, dword [ebp - 0x24]
xor edx, edx
sub ecx, eax
mov eax, dword [ebp - 0x158]
mov dword [ebp - 0x28], ecx
mov dword [eax + 8], 0xc236
mov dword [ebp - 0x28], 0x5b40194d
mov ecx, dword [ebp - 0x28]
mov eax, dword [ebp - 0x24]
cmp ecx, eax
setl dl
xor ecx, ecx
add edx, dword [ebp - 0x24]
mov eax, dword [ebp - 0x38]
cmp edx, eax
setl cl
mov dword [ebp - 0x28], ecx
mov eax, dword [ebp - 0x2c]
mov ecx, dword [ebp - 0x248]
sub ecx, eax
mov dword [ebp - 0x2c], ecx
lea ecx, [ebp - 0x158]
call fcn.10004951
mov ecx, dword [ebp - 0x80]
lea eax, [ebp - 0x200]
push eax
lea edx, [ebp - 0x1dc]
call fcn.1001adf6
pop ecx
push ebx
push esi
lea ecx, [ebp - 0x1b8]
call fcn.10004f21
push ebx
push esi
lea ecx, [ebp - 0x118]
call fcn.10004f21
push ebx
push esi
lea ecx, [ebp - 0x200]
call fcn.10004f21
push ebx
push esi
lea ecx, [ebp - 0x1dc]
call fcn.10004f21
mov ecx, dword [ebp - 0xc]
mov eax, dword [ebp - 0x80]
pop edi
pop esi
mov dword fs:[0], ecx
pop ebx
mov esp, ebp
pop ebp
ret