Function at 0x1004c500
Capabilities:
Contain obfuscated stackstrings
Get file size
Read file on windows
Write file on windows

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x10055ff2
mov eax, dword fs:[0]
push eax
sub esp, 0x12c
mov eax, dword [0x100695e8]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov edi, ecx
mov dword [ebp - 0x11c], edi
mov dword [ebp - 4], 4
mov eax, dword [edi + 8]
cmp dword [eax - 0xc], 0
jne 0x1004c60c
mov byte [ebp - 4], 3
mov edx, dword [ebp + 0x10]
add edx, 0xfffffff0
or ebx, 0xffffffff
lea ecx, [edx + 0xc]
mov eax, ebx
lock xadd dword [ecx], eax
dec eax
test eax, eax
jg 0x1004c56d
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 2
mov edx, dword [ebp + 0x14]
add edx, 0xfffffff0
mov ecx, ebx
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x1004c58d
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 1
mov edx, dword [ebp + 0x18]
add edx, 0xfffffff0
mov ecx, ebx
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x1004c5ad
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 0
mov edx, dword [ebp + 0x1c]
add edx, 0xfffffff0
mov ecx, ebx
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x1004c5cd
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov dword [ebp - 4], 0xffffffff
mov edx, dword [ebp + 0x20]
add edx, 0xfffffff0
lea eax, [edx + 0xc]
lock xadd dword [eax], ebx
dec ebx
test ebx, ebx
jg 0x1004c5ee
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.10026aaf
mov esp, ebp
pop ebp
ret 0x1c
mov eax, dword [0x10069550]
mov ecx, 0x10069550
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0x108], eax
lea eax, [edi + 0x60]
push eax
mov byte [ebp - 4], 5
push dword [edi + 0xc]
lea eax, [ebp - 0x108]
push str._s_s
push eax
call fcn.1000c0d0
mov ebx, dword [ebp - 0x108]
add esp, 0x10
push ebx
call dword [0x1006c918]
test eax, eax
jne 0x1004c65a
push eax
push ebx
call dword [0x1006ca58]
mov eax, dword [0x10069550]
mov ecx, 0x10069550
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0x104], eax
mov byte [ebp - 4], 6
push dword [ebp + 0x10]
lea eax, [ebp - 0x5c]
push ebx
push eax
lea eax, [ebp - 0x104]
push eax
mov dword [ebp - 0x59], 0x782e7325
mov word [ebp - 0x55], 0x6c6d
mov word [ebp - 0x5b], 0x5c73
mov byte [ebp - 0x53], 0
mov byte [ebp - 0x5c], 0x25
call fcn.1000c0d0
mov eax, dword [ebp + 0x18]
add eax, 0xfffffff0
push eax
mov dword [ebp - 0x22], 0x48435241
mov word [ebp - 0x1d], 0x4554
mov word [ebp - 0x24], 0x4553
mov byte [ebp - 0x1e], 0x5f
mov word [ebp - 0x1a], 0x4d
mov byte [ebp - 0x1b], 0x52
mov dword [ebp - 0x34], 0x6165737b
mov dword [ebp - 0x2d], 0x6d726554
mov word [ebp - 0x29], 0x7d73
mov word [ebp - 0x30], 0x6372
mov byte [ebp - 0x2e], 0x68
mov byte [ebp - 0x27], 0
call fcn.1000de10
lea esi, [eax + 0x10]
add esp, 0x14
mov dword [ebp - 0x118], esi
mov byte [ebp - 4], 7
cmp dword [esi - 0xc], 0
jl 0x1004c734
lea eax, [ebp - 0x24]
push eax
push esi
call fcn.10026907
add esp, 8
test eax, eax
je 0x1004c734
sub eax, esi
test eax, eax
jle 0x1004c734
lea eax, [ebp - 0x34]
push eax
lea eax, [ebp - 0x24]
push eax
lea ecx, [ebp - 0x118]
call fcn.1000b6d0
jmp 0x1004c743
lea eax, [ebp - 0x34]
push eax
lea ecx, [ebp - 0x118]
call fcn.10014200
mov eax, dword [ebp + 0x20]
add eax, 0xfffffff0
push eax
call fcn.1000de10
lea esi, [eax + 0x10]
add esp, 4
mov dword [ebp - 0x114], esi
mov byte [ebp - 4], 8
cmp dword [esi - 0xc], 0
jl 0x1004c791
lea eax, [ebp - 0x24]
push eax
push esi
call fcn.10026907
add esp, 8
test eax, eax
je 0x1004c791
sub eax, esi
test eax, eax
jle 0x1004c791
lea eax, [ebp - 0x34]
push eax
lea eax, [ebp - 0x24]
push eax
lea ecx, [ebp - 0x114]
call fcn.1000b6d0
jmp 0x1004c7a0
lea eax, [ebp - 0x34]
push eax
lea ecx, [ebp - 0x114]
call fcn.10014200
mov eax, dword [ebp - 0x118]
add eax, 0xfffffff0
push eax
mov word [ebp - 0x17], 0x6d61
mov word [ebp - 0x14], 0x3b
mov byte [ebp - 0x18], 0x26
mov byte [ebp - 0x15], 0x70
mov dword [ebp - 0x130], eax
call fcn.1000de10
add eax, 0x10
add esp, 4
mov dword [ebp - 0x10c], eax
lea eax, [ebp - 0x18]
push eax
lea eax, [ebp - 0xfc]
mov byte [ebp - 4], 9
push eax
lea ecx, [ebp - 0x10c]
mov word [ebp - 0xfc], 0x26
call fcn.1000b6d0
mov eax, dword [ebp - 0x114]
add eax, 0xfffffff0
push eax
mov dword [ebp - 0x12c], eax
call fcn.1000de10
add eax, 0x10
add esp, 4
mov dword [ebp - 0x110], eax
lea eax, [ebp - 0x18]
push eax
lea eax, [ebp - 0xfc]
push eax
lea ecx, [ebp - 0x110]
mov byte [ebp - 4], 0xa
call fcn.1000b6d0
push dword [ebp + 0x10]
lea eax, [ebp - 0x3c]
lea esi, [edi + 0x910]
push eax
mov ecx, esi
mov dword [ebp - 0x38], 0x7c7472
mov dword [ebp - 0x3c], 0x6f68737c
call fcn.1000b6d0
push dword [ebp + 0x10]
lea eax, [ebp - 0x98]
push eax
mov ecx, esi
mov word [ebp - 0x92], 0x7069
mov word [ebp - 0x98], 0x647c
mov dword [ebp - 0x8f], 0x7c6e6f69
mov word [ebp - 0x95], 0x6373
mov byte [ebp - 0x93], 0x72
mov byte [ebp - 0x96], 0x65
mov byte [ebp - 0x8b], 0
mov byte [ebp - 0x90], 0x74
call fcn.1000b6d0
push dword [ebp - 0x10c]
lea eax, [ebp - 0x78]
push eax
mov ecx, esi
mov dword [ebp - 0x78], 0x6165737c
mov dword [ebp - 0x72], 0x6e696c68
mov word [ebp - 0x6e], 0x7c6b
mov byte [ebp - 0x6c], 0
mov word [ebp - 0x74], 0x6372
call fcn.1000b6d0
push dword [ebp + 0x14]
lea eax, [ebp - 0x50]
push eax
mov ecx, esi
mov dword [ebp - 0x4b], 0x7c6e69
mov dword [ebp - 0x50], 0x6d6f647c
mov byte [ebp - 0x4c], 0x61
call fcn.1000b6d0
push dword [ebp - 0x110]
mov dword [ebp - 0x62], 0x7c6b6e69
mov dword [ebp - 0x68], 0x6775737c
mov word [ebp - 0x64], 0x6c67
mov byte [ebp - 0x5e], 0
lea eax, [ebp - 0x68]
push eax
mov ecx, esi
call fcn.1000b6d0
push dword [ebp + 0x1c]
lea eax, [ebp - 0x88]
push eax
mov ecx, esi
mov dword [ebp - 0x82], 0x69616d6f
mov word [ebp - 0x7e], 0x7c6e
mov dword [ebp - 0x87], 0x67677573
mov byte [ebp - 0x7c], 0
mov byte [ebp - 0x83], 0x64
mov byte [ebp - 0x88], 0x7c
call fcn.1000b6d0
push dword [edi + 0x914]
lea eax, [ebp - 0x44]
push eax
mov ecx, esi
mov dword [ebp - 0x44], 0x616d697c
mov word [ebp - 0x3f], 0x7c65
mov byte [ebp - 0x3d], 0
mov byte [ebp - 0x40], 0x67
call fcn.1000b6d0
push 0
push 0
push 2
push 0
push 0
push 0x40000000
push dword [ebp - 0x104]
call dword [sym.imp.KERNEL32.dll_CreateFileA]
mov ebx, eax
cmp ebx, 0xffffffff
je 0x1004c9c1
mov ecx, dword [esi]
push 0
lea eax, [ebp - 0x124]
push eax
push dword [ecx - 0xc]
push ecx
push ebx
call dword [sym.imp.KERNEL32.dll_WriteFile]
push ebx
call dword [sym.imp.KERNEL32.dll_CloseHandle]
push 0
push 0
push 3
push 0
push 0
push 0x80000000
push dword [edi + 8]
call dword [sym.imp.KERNEL32.dll_CreateFileA]
mov edi, eax
cmp edi, 0xffffffff
je 0x1004ca24
push 0
push edi
mov dword [ebp - 0x134], 0
call dword [sym.imp.KERNEL32.dll_GetFileSize]
mov esi, eax
lea ecx, [esi + 1]
push ecx
call fcn.100243f8
add esp, 4
mov ebx, eax
push 0
lea eax, [ebp - 0x134]
push eax
push esi
push ebx
push edi
mov byte [ebx + esi], 0
call dword [sym.imp.KERNEL32.dll_ReadFile]
test eax, eax
jne 0x1004ca93
push edi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
lea ecx, [ebp - 0x110]
call fcn.1000e030
lea ecx, [ebp - 0x10c]
call fcn.1000e030
lea ecx, [ebp - 0x114]
call fcn.1000e030
lea ecx, [ebp - 0x118]
call fcn.1000e030
lea ecx, [ebp - 0x104]
call fcn.1000e030
lea ecx, [ebp - 0x108]
call fcn.1000e030
lea ecx, [ebp + 0x10]
call fcn.1000e030
lea ecx, [ebp + 0x14]
call fcn.1000e030
lea ecx, [ebp + 0x18]
call fcn.1000e030
lea ecx, [ebp + 0x1c]
call fcn.1000e030
lea ecx, [ebp + 0x20]
call fcn.1000e030
jmp 0x1004c5ee
push 0x10062040
lea ecx, [ebp - 0xe0]
call fcn.1000b510
push ebx
lea eax, [ebp - 0xe0]
push 0x10061d70
push eax
mov byte [ebp - 4], 0xb
call fcn.1000c0d0
push ebx
call fcn.100268a3
add esp, 0x10
push edi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov eax, dword [0x10069550]
mov ecx, 0x10069550
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0xd0], eax
push 0x75
lea ecx, [ebp - 0xd0]
mov byte [ebp - 4], 0xc
call fcn.1000ddb0
push 0x73
lea ecx, [ebp - 0xd0]
call fcn.1000ddb0
push 0x65
lea ecx, [ebp - 0xd0]
call fcn.1000ddb0
push 0x72
lea ecx, [ebp - 0xd0]
call fcn.1000ddb0
push 0x5f
lea ecx, [ebp - 0xd0]
call fcn.1000ddb0
push 0x70
lea ecx, [ebp - 0xd0]
call fcn.1000ddb0
push 0x72
lea ecx, [ebp - 0xd0]
call fcn.1000ddb0
push 0x65
lea ecx, [ebp - 0xd0]
call fcn.1000ddb0
push 0x66
lea ecx, [ebp - 0xd0]
call fcn.1000ddb0
push 0x28
lea ecx, [ebp - 0xd0]
call fcn.1000ddb0
push 0x22
lea ecx, [ebp - 0xd0]
call fcn.1000ddb0
push 0x62
lea ecx, [ebp - 0xd0]
call fcn.1000ddb0
push 0x72
lea ecx, [ebp - 0xd0]
call fcn.1000ddb0
push 0x6f
lea ecx, [ebp - 0xd0]
call fcn.1000ddb0
push 0x77
lea ecx, [ebp - 0xd0]
call fcn.1000ddb0
push 0x73
lea ecx, [ebp - 0xd0]
call fcn.1000ddb0
push 0x65
lea ecx, [ebp - 0xd0]
call fcn.1000ddb0
push 0x72
lea ecx, [ebp - 0xd0]
call fcn.1000ddb0
push 0x2e
lea ecx, [ebp - 0xd0]
call fcn.1000ddb0
push 0x73
lea ecx, [ebp - 0xd0]
call fcn.1000ddb0
push 0x65
lea ecx, [ebp - 0xd0]
call fcn.1000ddb0
push 0x61
lea ecx, [ebp - 0xd0]
call fcn.1000ddb0
push 0x72
lea ecx, [ebp - 0xd0]
call fcn.1000ddb0
push 0x63
lea ecx, [ebp - 0xd0]
call fcn.1000ddb0
push 0x68
lea ecx, [ebp - 0xd0]
call fcn.1000ddb0
push 0x2e
lea ecx, [ebp - 0xd0]
call fcn.1000ddb0
push 0x64
lea ecx, [ebp - 0xd0]
call fcn.1000ddb0
push 0x65
lea ecx, [ebp - 0xd0]
call fcn.1000ddb0
push 0x66
lea ecx, [ebp - 0xd0]
call fcn.1000ddb0
push 0x61
lea ecx, [ebp - 0xd0]
call fcn.1000ddb0
push 0x75
lea ecx, [ebp - 0xd0]
call fcn.1000ddb0
push 0x6c
lea ecx, [ebp - 0xd0]
call fcn.1000ddb0
push 0x74
lea ecx, [ebp - 0xd0]
call fcn.1000ddb0
push 0x65
lea ecx, [ebp - 0xd0]
call fcn.1000ddb0
push 0x6e
lea ecx, [ebp - 0xd0]
call fcn.1000ddb0
push 0x67
lea ecx, [ebp - 0xd0]
call fcn.1000ddb0
push 0x69
lea ecx, [ebp - 0xd0]
call fcn.1000ddb0
push 0x6e
lea ecx, [ebp - 0xd0]
call fcn.1000ddb0
push 0x65
lea ecx, [ebp - 0xd0]
call fcn.1000ddb0
push 0x6e
lea ecx, [ebp - 0xd0]
call fcn.1000ddb0
push 0x61
lea ecx, [ebp - 0xd0]
call fcn.1000ddb0
push 0x6d
lea ecx, [ebp - 0xd0]
call fcn.1000ddb0
push 0x65
lea ecx, [ebp - 0xd0]
call fcn.1000ddb0
push 0x22
lea ecx, [ebp - 0xd0]
call fcn.1000ddb0
push 0x2c
lea ecx, [ebp - 0xd0]
call fcn.1000ddb0
mov eax, dword [0x10069550]
mov ecx, 0x10069550
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0xc8], eax
push 0x75
lea ecx, [ebp - 0xc8]
mov byte [ebp - 4], 0xd
call fcn.1000ddb0
push 0x73
lea ecx, [ebp - 0xc8]
call fcn.1000ddb0
push 0x65
lea ecx, [ebp - 0xc8]
call fcn.1000ddb0
push 0x72
lea ecx, [ebp - 0xc8]
call fcn.1000ddb0
push 0x5f
lea ecx, [ebp - 0xc8]
call fcn.1000ddb0
push 0x70
lea ecx, [ebp - 0xc8]
call fcn.1000ddb0
push 0x72
lea ecx, [ebp - 0xc8]
call fcn.1000ddb0
push 0x65
lea ecx, [ebp - 0xc8]
call fcn.1000ddb0
push 0x66
lea ecx, [ebp - 0xc8]
call fcn.1000ddb0
push 0x28
lea ecx, [ebp - 0xc8]
call fcn.1000ddb0
push 0x22
lea ecx, [ebp - 0xc8]
call fcn.1000ddb0
push 0x62
lea ecx, [ebp - 0xc8]
call fcn.1000ddb0
push 0x72
lea ecx, [ebp - 0xc8]
call fcn.1000ddb0
push 0x6f
lea ecx, [ebp - 0xc8]
call fcn.1000ddb0
push 0x77
lea ecx, [ebp - 0xc8]
call fcn.1000ddb0
push 0x73
lea ecx, [ebp - 0xc8]
call fcn.1000ddb0
push 0x65
lea ecx, [ebp - 0xc8]
call fcn.1000ddb0
push 0x72
lea ecx, [ebp - 0xc8]
call fcn.1000ddb0
push 0x2e
lea ecx, [ebp - 0xc8]
call fcn.1000ddb0
push 0x73
lea ecx, [ebp - 0xc8]
call fcn.1000ddb0
push 0x65
lea ecx, [ebp - 0xc8]
call fcn.1000ddb0
push 0x61
lea ecx, [ebp - 0xc8]
call fcn.1000ddb0
push 0x72
lea ecx, [ebp - 0xc8]
call fcn.1000ddb0
push 0x63
lea ecx, [ebp - 0xc8]
call fcn.1000ddb0
push 0x68
lea ecx, [ebp - 0xc8]
call fcn.1000ddb0
push 0x2e
lea ecx, [ebp - 0xc8]
call fcn.1000ddb0
push 0x64
lea ecx, [ebp - 0xc8]
call fcn.1000ddb0
push 0x65
lea ecx, [ebp - 0xc8]
call fcn.1000ddb0
push 0x66
lea ecx, [ebp - 0xc8]
call fcn.1000ddb0
push 0x61
lea ecx, [ebp - 0xc8]
call fcn.1000ddb0
push 0x75
lea ecx, [ebp - 0xc8]
call fcn.1000ddb0
push 0x6c
lea ecx, [ebp - 0xc8]
call fcn.1000ddb0
push 0x74
lea ecx, [ebp - 0xc8]
call fcn.1000ddb0
push 0x65
lea ecx, [ebp - 0xc8]
call fcn.1000ddb0
push 0x6e
lea ecx, [ebp - 0xc8]
call fcn.1000ddb0
push 0x67
lea ecx, [ebp - 0xc8]
call fcn.1000ddb0
push 0x69
lea ecx, [ebp - 0xc8]
call fcn.1000ddb0
push 0x6e
lea ecx, [ebp - 0xc8]
call fcn.1000ddb0
push 0x65
lea ecx, [ebp - 0xc8]
call fcn.1000ddb0
push 0x6e
lea ecx, [ebp - 0xc8]
call fcn.1000ddb0
push 0x61
lea ecx, [ebp - 0xc8]
call fcn.1000ddb0
push 0x6d
lea ecx, [ebp - 0xc8]
call fcn.1000ddb0
push 0x65
lea ecx, [ebp - 0xc8]
call fcn.1000ddb0
push 0x22
lea ecx, [ebp - 0xc8]
call fcn.1000ddb0
push 0x2c
lea ecx, [ebp - 0xc8]
call fcn.1000ddb0
push 0x20
lea ecx, [ebp - 0xc8]
call fcn.1000ddb0
push 0x22
lea ecx, [ebp - 0xc8]
call fcn.1000ddb0
mov eax, dword [ebp + 0x10]
xor esi, esi
cmp dword [eax - 0xc], esi
jle 0x1004cfd4
push esi
lea ecx, [ebp + 0x10]
call fcn.1000baa0
movzx eax, al
push eax
lea ecx, [ebp - 0xc8]
call fcn.1000ddb0
mov eax, dword [ebp + 0x10]
inc esi
cmp esi, dword [eax - 0xc]
jl 0x1004cfb3
push 0x22
lea ecx, [ebp - 0xc8]
call fcn.1000ddb0
push 0x29
lea ecx, [ebp - 0xc8]
call fcn.1000ddb0
push 0x3b
lea ecx, [ebp - 0xc8]
call fcn.1000ddb0
mov eax, dword [0x10069550]
mov ecx, 0x10069550
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0xf4], eax
push 0x62
lea ecx, [ebp - 0xf4]
mov byte [ebp - 4], 0xe
call fcn.1000ddb0
push 0x72
lea ecx, [ebp - 0xf4]
call fcn.1000ddb0
push 0x6f
lea ecx, [ebp - 0xf4]
call fcn.1000ddb0
push 0x77
lea ecx, [ebp - 0xf4]
call fcn.1000ddb0
push 0x73
lea ecx, [ebp - 0xf4]
call fcn.1000ddb0
push 0x65
lea ecx, [ebp - 0xf4]
call fcn.1000ddb0
push 0x72
lea ecx, [ebp - 0xf4]
call fcn.1000ddb0
push 0x2e
lea ecx, [ebp - 0xf4]
call fcn.1000ddb0
mov eax, dword [0x10069550]
mov ecx, 0x10069550
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0xc4], eax
push 0x75
lea ecx, [ebp - 0xc4]
mov byte [ebp - 4], 0xf
call fcn.1000ddb0
push 0x73
lea ecx, [ebp - 0xc4]
call fcn.1000ddb0
push 0x65
lea ecx, [ebp - 0xc4]
call fcn.1000ddb0
push 0x72
lea ecx, [ebp - 0xc4]
call fcn.1000ddb0
push 0x5f
lea ecx, [ebp - 0xc4]
call fcn.1000ddb0
push 0x70
lea ecx, [ebp - 0xc4]
call fcn.1000ddb0
push 0x72
lea ecx, [ebp - 0xc4]
call fcn.1000ddb0
push 0x65
lea ecx, [ebp - 0xc4]
call fcn.1000ddb0
push 0x66
lea ecx, [ebp - 0xc4]
call fcn.1000ddb0
push 0x28
lea ecx, [ebp - 0xc4]
call fcn.1000ddb0
push 0x22
lea ecx, [ebp - 0xc4]
call fcn.1000ddb0
push 0x62
lea ecx, [ebp - 0xc4]
call fcn.1000ddb0
push 0x72
lea ecx, [ebp - 0xc4]
call fcn.1000ddb0
push 0x6f
lea ecx, [ebp - 0xc4]
call fcn.1000ddb0
push 0x77
lea ecx, [ebp - 0xc4]
call fcn.1000ddb0
push 0x73
lea ecx, [ebp - 0xc4]
call fcn.1000ddb0
push 0x65
lea ecx, [ebp - 0xc4]
call fcn.1000ddb0
push 0x72
lea ecx, [ebp - 0xc4]
call fcn.1000ddb0
push 0x2e
lea ecx, [ebp - 0xc4]
call fcn.1000ddb0
push 0x73
lea ecx, [ebp - 0xc4]
call fcn.1000ddb0
push 0x65
lea ecx, [ebp - 0xc4]
call fcn.1000ddb0
push 0x61
lea ecx, [ebp - 0xc4]
call fcn.1000ddb0
push 0x72
lea ecx, [ebp - 0xc4]
call fcn.1000ddb0
push 0x63
lea ecx, [ebp - 0xc4]
call fcn.1000ddb0
push 0x68
lea ecx, [ebp - 0xc4]
call fcn.1000ddb0
push 0x2e
lea ecx, [ebp - 0xc4]
call fcn.1000ddb0
push 0x64
lea ecx, [ebp - 0xc4]
call fcn.1000ddb0
push 0x65
lea ecx, [ebp - 0xc4]
call fcn.1000ddb0
push 0x66
lea ecx, [ebp - 0xc4]
call fcn.1000ddb0
push 0x61
lea ecx, [ebp - 0xc4]
call fcn.1000ddb0
push 0x75
lea ecx, [ebp - 0xc4]
call fcn.1000ddb0
push 0x6c
lea ecx, [ebp - 0xc4]
call fcn.1000ddb0
push 0x74
lea ecx, [ebp - 0xc4]
call fcn.1000ddb0
push 0x65
lea ecx, [ebp - 0xc4]
call fcn.1000ddb0
push 0x6e
lea ecx, [ebp - 0xc4]
call fcn.1000ddb0
push 0x67
lea ecx, [ebp - 0xc4]
call fcn.1000ddb0
push 0x69
lea ecx, [ebp - 0xc4]
call fcn.1000ddb0
push 0x6e
lea ecx, [ebp - 0xc4]
call fcn.1000ddb0
push 0x65
lea ecx, [ebp - 0xc4]
call fcn.1000ddb0
push 0x6e
lea ecx, [ebp - 0xc4]
call fcn.1000ddb0
push 0x61
lea ecx, [ebp - 0xc4]
call fcn.1000ddb0
push 0x6d
lea ecx, [ebp - 0xc4]
call fcn.1000ddb0
push 0x65
lea ecx, [ebp - 0xc4]
call fcn.1000ddb0
push 0x22
lea ecx, [ebp - 0xc4]
call fcn.1000ddb0
push 0x2c
lea ecx, [ebp - 0xc4]
call fcn.1000ddb0
push 0x20
lea ecx, [ebp - 0xc4]
call fcn.1000ddb0
push 0x22
lea ecx, [ebp - 0xc4]
call fcn.1000ddb0
mov eax, dword [ebp + 0x10]
xor esi, esi
cmp dword [eax - 0xc], esi
jle 0x1004d325
push esi
lea ecx, [ebp + 0x10]
call fcn.1000baa0
movzx eax, al
push eax
lea ecx, [ebp - 0xc4]
call fcn.1000ddb0
mov eax, dword [ebp + 0x10]
inc esi
cmp esi, dword [eax - 0xc]
jl 0x1004d304
push 0x22
lea ecx, [ebp - 0xc4]
call fcn.1000ddb0
push 0x29
lea ecx, [ebp - 0xc4]
call fcn.1000ddb0
push 0x3b
lea ecx, [ebp - 0xc4]
call fcn.1000ddb0
push 0xd
lea ecx, [ebp - 0xc4]
call fcn.1000ddb0
push 0xa
lea ecx, [ebp - 0xc4]
call fcn.1000ddb0
mov ecx, dword [ebp - 0xd0]
mov ebx, dword [ebp - 0xf4]
test ecx, ecx
je 0x1004d3c9
mov eax, dword [ebp - 0xe0]
cmp dword [eax - 0xc], 0
jl 0x1004d3cf
push ecx
push eax
call fcn.10026907
mov esi, eax
add esp, 8
test esi, esi
je 0x1004d3c9
mov eax, dword [ebp - 0xe0]
sub esi, eax
cmp esi, 0xffffffff
je 0x1004d3cf
push esi
push 0x10062df4
lea ecx, [ebp - 0xe0]
call fcn.1000b8d0
sub eax, esi
inc eax
push eax
push esi
lea ecx, [ebp - 0xe0]
call fcn.1000b620
push dword [ebp - 0xc8]
push esi
jmp 0x1004d417
mov eax, dword [ebp - 0xe0]
test ebx, ebx
jne 0x1004d3d8
or eax, 0xffffffff
jmp 0x1004d3fc
cmp dword [eax - 0xc], 0
jge 0x1004d3e3
or eax, 0xffffffff
jmp 0x1004d3fc
push ebx
push eax
call fcn.10026907
add esp, 8
test eax, eax
jne 0x1004d3f6
or eax, 0xffffffff
jmp 0x1004d3fc
sub eax, dword [ebp - 0xe0]
push eax
push 0x10062df8
lea ecx, [ebp - 0xe0]
call fcn.1000b8d0
push dword [ebp - 0xc4]
add eax, 2
push eax
lea ecx, [ebp - 0xe0]
call fcn.10014500
mov eax, dword [0x10069550]
mov ecx, 0x10069550
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0xe4], eax
push 0x75
lea ecx, [ebp - 0xe4]
mov byte [ebp - 4], 0x10
call fcn.1000ddb0
push 0x73
lea ecx, [ebp - 0xe4]
call fcn.1000ddb0
push 0x65
lea ecx, [ebp - 0xe4]
call fcn.1000ddb0
push 0x72
lea ecx, [ebp - 0xe4]
call fcn.1000ddb0
push 0x5f
lea ecx, [ebp - 0xe4]
call fcn.1000ddb0
push 0x70
lea ecx, [ebp - 0xe4]
call fcn.1000ddb0
push 0x72
lea ecx, [ebp - 0xe4]
call fcn.1000ddb0
push 0x65
lea ecx, [ebp - 0xe4]
call fcn.1000ddb0
push 0x66
lea ecx, [ebp - 0xe4]
call fcn.1000ddb0
push 0x28
lea ecx, [ebp - 0xe4]
call fcn.1000ddb0
push 0x22
lea ecx, [ebp - 0xe4]
call fcn.1000ddb0
push 0x62
lea ecx, [ebp - 0xe4]
call fcn.1000ddb0
push 0x72
lea ecx, [ebp - 0xe4]
call fcn.1000ddb0
push 0x6f
lea ecx, [ebp - 0xe4]
call fcn.1000ddb0
push 0x77
lea ecx, [ebp - 0xe4]
call fcn.1000ddb0
push 0x73
lea ecx, [ebp - 0xe4]
call fcn.1000ddb0
push 0x65
lea ecx, [ebp - 0xe4]
call fcn.1000ddb0
push 0x72
lea ecx, [ebp - 0xe4]
call fcn.1000ddb0
push 0x2e
lea ecx, [ebp - 0xe4]
call fcn.1000ddb0
push 0x73
lea ecx, [ebp - 0xe4]
call fcn.1000ddb0
push 0x65
lea ecx, [ebp - 0xe4]
call fcn.1000ddb0
push 0x61
lea ecx, [ebp - 0xe4]
call fcn.1000ddb0
push 0x72
lea ecx, [ebp - 0xe4]
call fcn.1000ddb0
push 0x63
lea ecx, [ebp - 0xe4]
call fcn.1000ddb0
push 0x68
lea ecx, [ebp - 0xe4]
call fcn.1000ddb0
push 0x2e
lea ecx, [ebp - 0xe4]
call fcn.1000ddb0
push 0x6f
lea ecx, [ebp - 0xe4]
call fcn.1000ddb0
push 0x72
lea ecx, [ebp - 0xe4]
call fcn.1000ddb0
push 0x64
lea ecx, [ebp - 0xe4]
call fcn.1000ddb0
push 0x65
lea ecx, [ebp - 0xe4]
call fcn.1000ddb0
push 0x72
lea ecx, [ebp - 0xe4]
call fcn.1000ddb0
push 0x2e
lea ecx, [ebp - 0xe4]
call fcn.1000ddb0
push 0x31
lea ecx, [ebp - 0xe4]
call fcn.1000ddb0
push 0x22
lea ecx, [ebp - 0xe4]
call fcn.1000ddb0
push 0x2c
lea ecx, [ebp - 0xe4]
call fcn.1000ddb0
mov eax, dword [0x10069550]
mov ecx, 0x10069550
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0xdc], eax
push 0x75
lea ecx, [ebp - 0xdc]
mov byte [ebp - 4], 0x11
call fcn.1000ddb0
push 0x73
lea ecx, [ebp - 0xdc]
call fcn.1000ddb0
push 0x65
lea ecx, [ebp - 0xdc]
call fcn.1000ddb0
push 0x72
lea ecx, [ebp - 0xdc]
call fcn.1000ddb0
push 0x5f
lea ecx, [ebp - 0xdc]
call fcn.1000ddb0
push 0x70
lea ecx, [ebp - 0xdc]
call fcn.1000ddb0
push 0x72
lea ecx, [ebp - 0xdc]
call fcn.1000ddb0
push 0x65
lea ecx, [ebp - 0xdc]
call fcn.1000ddb0
push 0x66
lea ecx, [ebp - 0xdc]
call fcn.1000ddb0
push 0x28
lea ecx, [ebp - 0xdc]
call fcn.1000ddb0
push 0x22
lea ecx, [ebp - 0xdc]
call fcn.1000ddb0
push 0x62
lea ecx, [ebp - 0xdc]
call fcn.1000ddb0
push 0x72
lea ecx, [ebp - 0xdc]
call fcn.1000ddb0
push 0x6f
lea ecx, [ebp - 0xdc]
call fcn.1000ddb0
push 0x77
lea ecx, [ebp - 0xdc]
call fcn.1000ddb0
push 0x73
lea ecx, [ebp - 0xdc]
call fcn.1000ddb0
push 0x65
lea ecx, [ebp - 0xdc]
call fcn.1000ddb0
push 0x72
lea ecx, [ebp - 0xdc]
call fcn.1000ddb0
push 0x2e
lea ecx, [ebp - 0xdc]
call fcn.1000ddb0
push 0x73
lea ecx, [ebp - 0xdc]
call fcn.1000ddb0
push 0x65
lea ecx, [ebp - 0xdc]
call fcn.1000ddb0
push 0x61
lea ecx, [ebp - 0xdc]
call fcn.1000ddb0
push 0x72
lea ecx, [ebp - 0xdc]
call fcn.1000ddb0
push 0x63
lea ecx, [ebp - 0xdc]
call fcn.1000ddb0
push 0x68
lea ecx, [ebp - 0xdc]
call fcn.1000ddb0
push 0x2e
lea ecx, [ebp - 0xdc]
call fcn.1000ddb0
push 0x6f
lea ecx, [ebp - 0xdc]
call fcn.1000ddb0
push 0x72
lea ecx, [ebp - 0xdc]
call fcn.1000ddb0
push 0x64
lea ecx, [ebp - 0xdc]
call fcn.1000ddb0
push 0x65
lea ecx, [ebp - 0xdc]
call fcn.1000ddb0
push 0x72
lea ecx, [ebp - 0xdc]
call fcn.1000ddb0
push 0x2e
lea ecx, [ebp - 0xdc]
call fcn.1000ddb0
push 0x31
lea ecx, [ebp - 0xdc]
call fcn.1000ddb0
push 0x22
lea ecx, [ebp - 0xdc]
call fcn.1000ddb0
push 0x2c
lea ecx, [ebp - 0xdc]
call fcn.1000ddb0
push 0x20
lea ecx, [ebp - 0xdc]
call fcn.1000ddb0
push 0x22
lea ecx, [ebp - 0xdc]
call fcn.1000ddb0
mov eax, dword [ebp + 0x10]
xor esi, esi
cmp dword [eax - 0xc], esi
jle 0x1004d831
jmp 0x1004d810
push esi
lea ecx, [ebp + 0x10]
call fcn.1000baa0
movzx eax, al
push eax
lea ecx, [ebp - 0xdc]
call fcn.1000ddb0
mov eax, dword [ebp + 0x10]
inc esi
cmp esi, dword [eax - 0xc]
jl 0x1004d810
push 0x22
lea ecx, [ebp - 0xdc]
call fcn.1000ddb0
push 0x29
lea ecx, [ebp - 0xdc]
call fcn.1000ddb0
push 0x3b
lea ecx, [ebp - 0xdc]
call fcn.1000ddb0
mov eax, dword [0x10069550]
mov ecx, 0x10069550
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0xd4], eax
push 0x75
lea ecx, [ebp - 0xd4]
mov byte [ebp - 4], 0x12
call fcn.1000ddb0
push 0x73
lea ecx, [ebp - 0xd4]
call fcn.1000ddb0
push 0x65
lea ecx, [ebp - 0xd4]
call fcn.1000ddb0
push 0x72
lea ecx, [ebp - 0xd4]
call fcn.1000ddb0
push 0x5f
lea ecx, [ebp - 0xd4]
call fcn.1000ddb0
push 0x70
lea ecx, [ebp - 0xd4]
call fcn.1000ddb0
push 0x72
lea ecx, [ebp - 0xd4]
call fcn.1000ddb0
push 0x65
lea ecx, [ebp - 0xd4]
call fcn.1000ddb0
push 0x66
lea ecx, [ebp - 0xd4]
call fcn.1000ddb0
push 0x28
lea ecx, [ebp - 0xd4]
call fcn.1000ddb0
push 0x22
lea ecx, [ebp - 0xd4]
call fcn.1000ddb0
push 0x62
lea ecx, [ebp - 0xd4]
call fcn.1000ddb0
push 0x72
lea ecx, [ebp - 0xd4]
call fcn.1000ddb0
push 0x6f
lea ecx, [ebp - 0xd4]
call fcn.1000ddb0
push 0x77
lea ecx, [ebp - 0xd4]
call fcn.1000ddb0
push 0x73
lea ecx, [ebp - 0xd4]
call fcn.1000ddb0
push 0x65
lea ecx, [ebp - 0xd4]
call fcn.1000ddb0
push 0x72
lea ecx, [ebp - 0xd4]
call fcn.1000ddb0
push 0x2e
lea ecx, [ebp - 0xd4]
call fcn.1000ddb0
push 0x73
lea ecx, [ebp - 0xd4]
call fcn.1000ddb0
push 0x65
lea ecx, [ebp - 0xd4]
call fcn.1000ddb0
push 0x61
lea ecx, [ebp - 0xd4]
call fcn.1000ddb0
push 0x72
lea ecx, [ebp - 0xd4]
call fcn.1000ddb0
push 0x63
lea ecx, [ebp - 0xd4]
call fcn.1000ddb0
push 0x68
lea ecx, [ebp - 0xd4]
call fcn.1000ddb0
push 0x2e
lea ecx, [ebp - 0xd4]
call fcn.1000ddb0
push 0x6f
lea ecx, [ebp - 0xd4]
call fcn.1000ddb0
push 0x72
lea ecx, [ebp - 0xd4]
call fcn.1000ddb0
push 0x64
lea ecx, [ebp - 0xd4]
call fcn.1000ddb0
push 0x65
lea ecx, [ebp - 0xd4]
call fcn.1000ddb0
push 0x72
lea ecx, [ebp - 0xd4]
call fcn.1000ddb0
push 0x2e
lea ecx, [ebp - 0xd4]
call fcn.1000ddb0
push 0x31
lea ecx, [ebp - 0xd4]
call fcn.1000ddb0
push 0x22
lea ecx, [ebp - 0xd4]
call fcn.1000ddb0
push 0x2c
lea ecx, [ebp - 0xd4]
call fcn.1000ddb0
push 0x20
lea ecx, [ebp - 0xd4]
call fcn.1000ddb0
push 0x22
lea ecx, [ebp - 0xd4]
call fcn.1000ddb0
mov eax, dword [ebp + 0x10]
xor esi, esi
cmp dword [eax - 0xc], esi
jle 0x1004da81
lea ecx, [ecx]
push esi
lea ecx, [ebp + 0x10]
call fcn.1000baa0
movzx eax, al
push eax
lea ecx, [ebp - 0xd4]
call fcn.1000ddb0
mov eax, dword [ebp + 0x10]
inc esi
cmp esi, dword [eax - 0xc]
jl 0x1004da60
push 0x22
lea ecx, [ebp - 0xd4]
call fcn.1000ddb0
push 0x29
lea ecx, [ebp - 0xd4]
call fcn.1000ddb0
push 0x3b
lea ecx, [ebp - 0xd4]
call fcn.1000ddb0
push 0xd
lea ecx, [ebp - 0xd4]
call fcn.1000ddb0
push 0xa
lea ecx, [ebp - 0xd4]
call fcn.1000ddb0
mov ecx, dword [ebp - 0xe4]
test ecx, ecx
je 0x1004db1f
mov eax, dword [ebp - 0xe0]
cmp dword [eax - 0xc], 0
jl 0x1004db25
push ecx
push eax
call fcn.10026907
mov esi, eax
add esp, 8
test esi, esi
je 0x1004db1f
mov eax, dword [ebp - 0xe0]
sub esi, eax
cmp esi, 0xffffffff
je 0x1004db25
push esi
push 0x10062df4
lea ecx, [ebp - 0xe0]
call fcn.1000b8d0
sub eax, esi
inc eax
push eax
push esi
lea ecx, [ebp - 0xe0]
call fcn.1000b620
push dword [ebp - 0xdc]
push esi
jmp 0x1004db6d
mov eax, dword [ebp - 0xe0]
test ebx, ebx
jne 0x1004db2e
or eax, 0xffffffff
jmp 0x1004db52
cmp dword [eax - 0xc], 0
jge 0x1004db39
or eax, 0xffffffff
jmp 0x1004db52
push ebx
push eax
call fcn.10026907
add esp, 8
test eax, eax
jne 0x1004db4c
or eax, 0xffffffff
jmp 0x1004db52
sub eax, dword [ebp - 0xe0]
push eax
push 0x10062df8
lea ecx, [ebp - 0xe0]
call fcn.1000b8d0
push dword [ebp - 0xd4]
add eax, 2
push eax
lea ecx, [ebp - 0xe0]
call fcn.10014500
mov eax, dword [0x10069550]
mov ecx, 0x10069550
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0xd8], eax
push 0x75
lea ecx, [ebp - 0xd8]
mov byte [ebp - 4], 0x13
call fcn.1000ddb0
push 0x73
lea ecx, [ebp - 0xd8]
call fcn.1000ddb0
push 0x65
lea ecx, [ebp - 0xd8]
call fcn.1000ddb0
push 0x72
lea ecx, [ebp - 0xd8]
call fcn.1000ddb0
push 0x5f
lea ecx, [ebp - 0xd8]
call fcn.1000ddb0
push 0x70
lea ecx, [ebp - 0xd8]
call fcn.1000ddb0
push 0x72
lea ecx, [ebp - 0xd8]
call fcn.1000ddb0
push 0x65
lea ecx, [ebp - 0xd8]
call fcn.1000ddb0
push 0x66
lea ecx, [ebp - 0xd8]
call fcn.1000ddb0
push 0x28
lea ecx, [ebp - 0xd8]
call fcn.1000ddb0
push 0x22
lea ecx, [ebp - 0xd8]
call fcn.1000ddb0
push 0x62
lea ecx, [ebp - 0xd8]
call fcn.1000ddb0
push 0x72
lea ecx, [ebp - 0xd8]
call fcn.1000ddb0
push 0x6f
lea ecx, [ebp - 0xd8]
call fcn.1000ddb0
push 0x77
lea ecx, [ebp - 0xd8]
call fcn.1000ddb0
push 0x73
lea ecx, [ebp - 0xd8]
call fcn.1000ddb0
push 0x65
lea ecx, [ebp - 0xd8]
call fcn.1000ddb0
push 0x72
lea ecx, [ebp - 0xd8]
call fcn.1000ddb0
push 0x2e
lea ecx, [ebp - 0xd8]
call fcn.1000ddb0
push 0x73
lea ecx, [ebp - 0xd8]
call fcn.1000ddb0
push 0x65
lea ecx, [ebp - 0xd8]
call fcn.1000ddb0
push 0x61
lea ecx, [ebp - 0xd8]
call fcn.1000ddb0
push 0x72
lea ecx, [ebp - 0xd8]
call fcn.1000ddb0
push 0x63
lea ecx, [ebp - 0xd8]
call fcn.1000ddb0
push 0x68
lea ecx, [ebp - 0xd8]
call fcn.1000ddb0
push 0x2e
lea ecx, [ebp - 0xd8]
call fcn.1000ddb0
push 0x73
lea ecx, [ebp - 0xd8]
call fcn.1000ddb0
push 0x65
lea ecx, [ebp - 0xd8]
call fcn.1000ddb0
push 0x6c
lea ecx, [ebp - 0xd8]
call fcn.1000ddb0
push 0x65
lea ecx, [ebp - 0xd8]
call fcn.1000ddb0
push 0x63
lea ecx, [ebp - 0xd8]
call fcn.1000ddb0
push 0x74
lea ecx, [ebp - 0xd8]
call fcn.1000ddb0
push 0x65
lea ecx, [ebp - 0xd8]
call fcn.1000ddb0
push 0x64
lea ecx, [ebp - 0xd8]
call fcn.1000ddb0
push 0x45
lea ecx, [ebp - 0xd8]
call fcn.1000ddb0
push 0x6e
lea ecx, [ebp - 0xd8]
call fcn.1000ddb0
push 0x67
lea ecx, [ebp - 0xd8]
call fcn.1000ddb0
push 0x69
lea ecx, [ebp - 0xd8]
call fcn.1000ddb0
push 0x6e
lea ecx, [ebp - 0xd8]
call fcn.1000ddb0
push 0x65
lea ecx, [ebp - 0xd8]
call fcn.1000ddb0
push 0x22
lea ecx, [ebp - 0xd8]
call fcn.1000ddb0
push 0x2c
lea ecx, [ebp - 0xd8]
call fcn.1000ddb0
mov eax, dword [0x10069550]
mov ecx, 0x10069550
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0xcc], eax
push 0x75
lea ecx, [ebp - 0xcc]
mov byte [ebp - 4], 0x14
call fcn.1000ddb0
push 0x73
lea ecx, [ebp - 0xcc]
call fcn.1000ddb0
push 0x65
lea ecx, [ebp - 0xcc]
call fcn.1000ddb0
push 0x72
lea ecx, [ebp - 0xcc]
call fcn.1000ddb0
push 0x5f
lea ecx, [ebp - 0xcc]
call fcn.1000ddb0
push 0x70
lea ecx, [ebp - 0xcc]
call fcn.1000ddb0
push 0x72
lea ecx, [ebp - 0xcc]
call fcn.1000ddb0
push 0x65
lea ecx, [ebp - 0xcc]
call fcn.1000ddb0
push 0x66
lea ecx, [ebp - 0xcc]
call fcn.1000ddb0
push 0x28
lea ecx, [ebp - 0xcc]
call fcn.1000ddb0
push 0x22
lea ecx, [ebp - 0xcc]
call fcn.1000ddb0
push 0x62
lea ecx, [ebp - 0xcc]
call fcn.1000ddb0
push 0x72
lea ecx, [ebp - 0xcc]
call fcn.1000ddb0
push 0x6f
lea ecx, [ebp - 0xcc]
call fcn.1000ddb0
push 0x77
lea ecx, [ebp - 0xcc]
call fcn.1000ddb0
push 0x73
lea ecx, [ebp - 0xcc]
call fcn.1000ddb0
push 0x65
lea ecx, [ebp - 0xcc]
call fcn.1000ddb0
push 0x72
lea ecx, [ebp - 0xcc]
call fcn.1000ddb0
push 0x2e
lea ecx, [ebp - 0xcc]
call fcn.1000ddb0
push 0x73
lea ecx, [ebp - 0xcc]
call fcn.1000ddb0
push 0x65
lea ecx, [ebp - 0xcc]
call fcn.1000ddb0
push 0x61
lea ecx, [ebp - 0xcc]
call fcn.1000ddb0
push 0x72
lea ecx, [ebp - 0xcc]
call fcn.1000ddb0
push 0x63
lea ecx, [ebp - 0xcc]
call fcn.1000ddb0
push 0x68
lea ecx, [ebp - 0xcc]
call fcn.1000ddb0
push 0x2e
lea ecx, [ebp - 0xcc]
call fcn.1000ddb0
push 0x73
lea ecx, [ebp - 0xcc]
call fcn.1000ddb0
push 0x65
lea ecx, [ebp - 0xcc]
call fcn.1000ddb0
push 0x6c
lea ecx, [ebp - 0xcc]
call fcn.1000ddb0
push 0x65
lea ecx, [ebp - 0xcc]
call fcn.1000ddb0
push 0x63
lea ecx, [ebp - 0xcc]
call fcn.1000ddb0
push 0x74
lea ecx, [ebp - 0xcc]
call fcn.1000ddb0
push 0x65
lea ecx, [ebp - 0xcc]
call fcn.1000ddb0
push 0x64
lea ecx, [ebp - 0xcc]
call fcn.1000ddb0
push 0x45
lea ecx, [ebp - 0xcc]
call fcn.1000ddb0
push 0x6e
lea ecx, [ebp - 0xcc]
call fcn.1000ddb0
push 0x67
lea ecx, [ebp - 0xcc]
call fcn.1000ddb0
push 0x69
lea ecx, [ebp - 0xcc]
call fcn.1000ddb0
push 0x6e
lea ecx, [ebp - 0xcc]
call fcn.1000ddb0
push 0x65
lea ecx, [ebp - 0xcc]
call fcn.1000ddb0
push 0x22
lea ecx, [ebp - 0xcc]
call fcn.1000ddb0
push 0x2c
lea ecx, [ebp - 0xcc]
call fcn.1000ddb0
push 0x20
lea ecx, [ebp - 0xcc]
call fcn.1000ddb0
push 0x22
lea ecx, [ebp - 0xcc]
call fcn.1000ddb0
mov eax, dword [ebp + 0x10]
xor esi, esi
mov ecx, dword [eax - 0xc]
test ecx, ecx
jle 0x1004e04b
test esi, esi
js 0x1004e36d
cmp esi, ecx
jg 0x1004e36d
mov al, byte [esi + eax]
mov byte [ebp - 0xe8], al
push dword [ebp - 0xe8]
lea ecx, [ebp - 0xcc]
call fcn.1000ddb0
mov eax, dword [ebp + 0x10]
inc esi
mov ecx, dword [eax - 0xc]
cmp esi, ecx
jl 0x1004e016
push 0x22
lea ecx, [ebp - 0xcc]
call fcn.1000ddb0
push 0x29
lea ecx, [ebp - 0xcc]
call fcn.1000ddb0
push 0x3b
lea ecx, [ebp - 0xcc]
call fcn.1000ddb0
mov eax, dword [0x10069550]
mov ecx, 0x10069550
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0xc0], eax
push 0x75
lea ecx, [ebp - 0xc0]
mov byte [ebp - 4], 0x15
call fcn.1000ddb0
push 0x73
lea ecx, [ebp - 0xc0]
call fcn.1000ddb0
push 0x65
lea ecx, [ebp - 0xc0]
call fcn.1000ddb0
push 0x72
lea ecx, [ebp - 0xc0]
call fcn.1000ddb0
push 0x5f
lea ecx, [ebp - 0xc0]
call fcn.1000ddb0
push 0x70
lea ecx, [ebp - 0xc0]
call fcn.1000ddb0
push 0x72
lea ecx, [ebp - 0xc0]
call fcn.1000ddb0
push 0x65
lea ecx, [ebp - 0xc0]
call fcn.1000ddb0
push 0x66
lea ecx, [ebp - 0xc0]
call fcn.1000ddb0
push 0x28
lea ecx, [ebp - 0xc0]
call fcn.1000ddb0
push 0x22
lea ecx, [ebp - 0xc0]
call fcn.1000ddb0
push 0x62
lea ecx, [ebp - 0xc0]
call fcn.1000ddb0
push 0x72
lea ecx, [ebp - 0xc0]
call fcn.1000ddb0
push 0x6f
lea ecx, [ebp - 0xc0]
call fcn.1000ddb0
push 0x77
lea ecx, [ebp - 0xc0]
call fcn.1000ddb0
push 0x73
lea ecx, [ebp - 0xc0]
call fcn.1000ddb0
push 0x65
lea ecx, [ebp - 0xc0]
call fcn.1000ddb0
push 0x72
lea ecx, [ebp - 0xc0]
call fcn.1000ddb0
push 0x2e
lea ecx, [ebp - 0xc0]
call fcn.1000ddb0
push 0x73
lea ecx, [ebp - 0xc0]
call fcn.1000ddb0
push 0x65
lea ecx, [ebp - 0xc0]
call fcn.1000ddb0
push 0x61
lea ecx, [ebp - 0xc0]
call fcn.1000ddb0
push 0x72
lea ecx, [ebp - 0xc0]
call fcn.1000ddb0
push 0x63
lea ecx, [ebp - 0xc0]
call fcn.1000ddb0
push 0x68
lea ecx, [ebp - 0xc0]
call fcn.1000ddb0
push 0x2e
lea ecx, [ebp - 0xc0]
call fcn.1000ddb0
push 0x73
lea ecx, [ebp - 0xc0]
call fcn.1000ddb0
push 0x65
lea ecx, [ebp - 0xc0]
call fcn.1000ddb0
push 0x6c
lea ecx, [ebp - 0xc0]
call fcn.1000ddb0
push 0x65
lea ecx, [ebp - 0xc0]
call fcn.1000ddb0
push 0x63
lea ecx, [ebp - 0xc0]
call fcn.1000ddb0
push 0x74
lea ecx, [ebp - 0xc0]
call fcn.1000ddb0
push 0x65
lea ecx, [ebp - 0xc0]
call fcn.1000ddb0
push 0x64
lea ecx, [ebp - 0xc0]
call fcn.1000ddb0
push 0x45
lea ecx, [ebp - 0xc0]
call fcn.1000ddb0
push 0x6e
lea ecx, [ebp - 0xc0]
call fcn.1000ddb0
push 0x67
lea ecx, [ebp - 0xc0]
call fcn.1000ddb0
push 0x69
lea ecx, [ebp - 0xc0]
call fcn.1000ddb0
push 0x6e
lea ecx, [ebp - 0xc0]
call fcn.1000ddb0
push 0x65
lea ecx, [ebp - 0xc0]
call fcn.1000ddb0
push 0x22
lea ecx, [ebp - 0xc0]
call fcn.1000ddb0
push 0x2c
lea ecx, [ebp - 0xc0]
call fcn.1000ddb0
push 0x20
lea ecx, [ebp - 0xc0]
call fcn.1000ddb0
push 0x22
lea ecx, [ebp - 0xc0]
call fcn.1000ddb0
mov eax, dword [ebp + 0x10]
mov edi, dword [ebp - 0xc0]
mov esi, dword [eax - 0xc]
xor edx, edx
mov dword [ebp - 0xf0], edx
lea ecx, [edx + 1]
test esi, esi
jle 0x1004e35d
test edx, edx
js 0x1004e36d
cmp edx, esi
jg 0x1004e36d
mov al, byte [edx + eax]
mov byte [ebp - 0xfd], al
mov eax, dword [edi - 0xc]
mov dword [ebp - 0xe8], eax
lea esi, [eax + 1]
test esi, esi
js 0x1004e36d
mov eax, dword [edi - 8]
sub ecx, dword [edi - 4]
sub eax, esi
or eax, ecx
jge 0x1004e32c
push esi
lea ecx, [ebp - 0xc0]
call fcn.1000dfc0
mov edi, dword [ebp - 0xc0]
mov edx, dword [ebp - 0xf0]
mov eax, dword [ebp - 0xe8]
mov cl, byte [ebp - 0xfd]
mov byte [eax + edi], cl
cmp esi, dword [edi - 8]
jg 0x1004e36d
mov dword [edi - 0xc], esi
mov byte [esi + edi], 0
mov eax, dword [ebp + 0x10]
inc edx
mov esi, dword [eax - 0xc]
mov dword [ebp - 0xf0], edx
mov ecx, 1
cmp edx, esi
jl 0x1004e2e3
mov eax, dword [edi - 0xc]
mov dword [ebp - 0xe8], eax
lea esi, [eax + 1]
test esi, esi
jns 0x1004e377
push 0x80070057
call fcn.1000e050
mov eax, dword [edi - 8]
sub ecx, dword [edi - 4]
sub eax, esi
or eax, ecx
jge 0x1004e395
push esi
lea ecx, [ebp - 0xc0]
call fcn.1000dfc0
mov edi, dword [ebp - 0xc0]
mov eax, dword [ebp - 0xe8]
mov byte [eax + edi], 0x22
cmp esi, dword [edi - 8]
jg 0x1004e36d
mov dword [edi - 0xc], esi
mov byte [esi + edi], 0
mov eax, dword [edi - 0xc]
mov dword [ebp - 0xe8], eax
lea esi, [eax + 1]
test esi, esi
jns 0x1004e3c5
push 0x80070057
call fcn.1000e050
mov eax, dword [edi - 8]
mov ecx, 1
sub ecx, dword [edi - 4]
sub eax, esi
or eax, ecx
jge 0x1004e3e8
push esi
lea ecx, [ebp - 0xc0]
call fcn.1000dfc0
mov edi, dword [ebp - 0xc0]
mov eax, dword [ebp - 0xe8]
mov byte [eax + edi], 0x29
cmp esi, dword [edi - 8]
jg 0x1004e36d
mov dword [edi - 0xc], esi
mov byte [esi + edi], 0
mov eax, dword [edi - 0xc]
mov dword [ebp - 0xe8], eax
lea esi, [eax + 1]
test esi, esi
jns 0x1004e41c
push 0x80070057
call fcn.1000e050
mov eax, dword [edi - 8]
mov ecx, 1
sub ecx, dword [edi - 4]
sub eax, esi
or eax, ecx
jge 0x1004e43f
push esi
lea ecx, [ebp - 0xc0]
call fcn.1000dfc0
mov edi, dword [ebp - 0xc0]
mov eax, dword [ebp - 0xe8]
mov byte [eax + edi], 0x3b
cmp esi, dword [edi - 8]
jg 0x1004e36d
mov dword [edi - 0xc], esi
mov byte [esi + edi], 0
mov eax, dword [edi - 0xc]
mov dword [ebp - 0xe8], eax
lea esi, [eax + 1]
test esi, esi
jns 0x1004e473
push 0x80070057
call fcn.1000e050
mov eax, dword [edi - 8]
mov ecx, 1
sub ecx, dword [edi - 4]
sub eax, esi
or eax, ecx
jge 0x1004e496
push esi
lea ecx, [ebp - 0xc0]
call fcn.1000dfc0
mov edi, dword [ebp - 0xc0]
mov eax, dword [ebp - 0xe8]
mov byte [eax + edi], 0xd
cmp esi, dword [edi - 8]
jg 0x1004e36d
mov dword [edi - 0xc], esi
mov byte [esi + edi], 0
mov eax, dword [edi - 0xc]
mov dword [ebp - 0xe8], eax
lea esi, [eax + 1]
test esi, esi
jns 0x1004e4ca
push 0x80070057
call fcn.1000e050
mov eax, dword [edi - 8]
mov ecx, 1
sub ecx, dword [edi - 4]
sub eax, esi
or eax, ecx
jge 0x1004e4ed
push esi
lea ecx, [ebp - 0xc0]
call fcn.1000dfc0
mov edi, dword [ebp - 0xc0]
mov eax, dword [ebp - 0xe8]
mov byte [edi + eax], 0xa
cmp esi, dword [edi - 8]
jg 0x1004e36d
mov ecx, dword [ebp - 0xd8]
mov dword [edi - 0xc], esi
mov byte [edi + esi], 0
test ecx, ecx
je 0x1004e57b
mov eax, dword [ebp - 0xe0]
cmp dword [eax - 0xc], 0
jl 0x1004e581
push ecx
push eax
call fcn.10026907
mov esi, eax
add esp, 8
test esi, esi
je 0x1004e57b
mov eax, dword [ebp - 0xe0]
sub esi, eax
cmp esi, 0xffffffff
je 0x1004e581
test esi, esi
js 0x1004e55f
cmp esi, dword [eax - 0xc]
jg 0x1004e55f
add eax, esi
push 0x10062df4
push eax
call fcn.10026907
add esp, 8
test eax, eax
je 0x1004e55f
sub eax, dword [ebp - 0xe0]
jmp 0x1004e562
or eax, 0xffffffff
sub eax, esi
inc eax
push eax
push esi
lea ecx, [ebp - 0xe0]
call fcn.1000b620
push dword [ebp - 0xcc]
push esi
jmp 0x1004e5df
mov eax, dword [ebp - 0xe0]
test ebx, ebx
jne 0x1004e58a
or ecx, 0xffffffff
jmp 0x1004e5b2
cmp dword [eax - 0xc], 0
jge 0x1004e595
or ecx, 0xffffffff
jmp 0x1004e5b2
push ebx
push eax
call fcn.10026907
mov ecx, eax
mov eax, dword [ebp - 0xe0]
add esp, 8
test ecx, ecx
jne 0x1004e5b0
or ecx, 0xffffffff
jmp 0x1004e5b2
sub ecx, eax
test ecx, ecx
js 0x1004e5d7
cmp ecx, dword [eax - 0xc]
jg 0x1004e5d7
add eax, ecx
push 0x10062df8
push eax
call fcn.10026907
add esp, 8
test eax, eax
je 0x1004e5d7
sub eax, dword [ebp - 0xe0]
jmp 0x1004e5da
or eax, 0xffffffff
push edi
add eax, 2
push eax
lea ecx, [ebp - 0xe0]
call fcn.10014500
or esi, 0xffffffff
cmp dword [ebp + 8], 0
je 0x1004f1cb
mov eax, dword [0x10069550]
mov ecx, 0x10069550
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0xb8], eax
mov byte [ebp - 4], 0x16
mov ecx, dword [eax - 0xc]
mov dword [ebp - 0xe8], ecx
inc ecx
mov dword [ebp - 0xbc], ecx
jns 0x1004e62d
push 0x80070057
call fcn.1000e050
mov ecx, dword [eax - 8]
sub ecx, dword [ebp - 0xbc]
mov esi, 1
mov edx, esi
sub edx, dword [eax - 4]
or ecx, edx
jge 0x1004e65b
push dword [ebp - 0xbc]
lea ecx, [ebp - 0xb8]
call fcn.1000dfc0
mov eax, dword [ebp - 0xb8]
mov ecx, dword [ebp - 0xe8]
mov byte [eax + ecx], 0x75
mov ecx, dword [ebp - 0xbc]
cmp ecx, dword [eax - 8]
jg 0x1004e36d
mov dword [eax - 0xc], ecx
mov byte [eax + ecx], 0
mov ecx, dword [eax - 0xc]
mov dword [ebp - 0xe8], ecx
inc ecx
mov dword [ebp - 0xbc], ecx
jns 0x1004e697
push 0x80070057
call fcn.1000e050
mov ecx, dword [eax - 8]
sub ecx, dword [ebp - 0xbc]
mov edx, esi
sub edx, dword [eax - 4]
or ecx, edx
jge 0x1004e6c0
push dword [ebp - 0xbc]
lea ecx, [ebp - 0xb8]
call fcn.1000dfc0
mov eax, dword [ebp - 0xb8]
mov ecx, dword [ebp - 0xe8]
mov byte [eax + ecx], 0x73
mov ecx, dword [ebp - 0xbc]
cmp ecx, dword [eax - 8]
jg 0x1004e36d
mov dword [eax - 0xc], ecx
mov byte [eax + ecx], 0
mov ecx, dword [eax - 0xc]
mov dword [ebp - 0xe8], ecx
inc ecx
mov dword [ebp - 0xbc], ecx
jns 0x1004e6fc
push 0x80070057
call fcn.1000e050
mov ecx, dword [eax - 8]
sub ecx, dword [ebp - 0xbc]
mov edx, esi
sub edx, dword [eax - 4]
or ecx, edx
jge 0x1004e725
push dword [ebp - 0xbc]
lea ecx, [ebp - 0xb8]
call fcn.1000dfc0
mov eax, dword [ebp - 0xb8]
mov ecx, dword [ebp - 0xe8]
mov byte [eax + ecx], 0x65
mov ecx, dword [ebp - 0xbc]
cmp ecx, dword [eax - 8]
jg 0x1004e36d
mov dword [eax - 0xc], ecx
mov byte [eax + ecx], 0
mov ecx, dword [eax - 0xc]
mov dword [ebp - 0xf0], ecx
inc ecx
jns 0x1004e75b
push 0x80070057
call fcn.1000e050
mov ecx, dword [eax - 8]
mov edi, dword [ebp - 0xc0]
mov edx, esi
mov esi, dword [ebp - 0xf0]
sub edx, dword [eax - 4]
inc esi
sub ecx, esi
or ecx, edx
jge 0x1004e788
push esi
lea ecx, [ebp - 0xb8]
call fcn.1000dfc0
mov eax, dword [ebp - 0xb8]
mov ecx, dword [ebp - 0xf0]
mov byte [eax + ecx], 0x72
cmp esi, dword [eax - 8]
jg 0x1004e36d
mov dword [eax - 0xc], esi
push 0x5f
lea ecx, [ebp - 0xb8]
mov byte [eax + esi], 0
call fcn.1000ddb0
push 0x70
lea ecx, [ebp - 0xb8]
call fcn.1000ddb0
push 0x72
lea ecx, [ebp - 0xb8]
call fcn.1000ddb0
push 0x65
lea ecx, [ebp - 0xb8]
call fcn.1000ddb0
push 0x66
lea ecx, [ebp - 0xb8]
call fcn.1000ddb0
push 0x28
lea ecx, [ebp - 0xb8]
call fcn.1000ddb0
push 0x22
lea ecx, [ebp - 0xb8]
call fcn.1000ddb0
push 0x62
lea ecx, [ebp - 0xb8]
call fcn.1000ddb0
push 0x72
lea ecx, [ebp - 0xb8]
call fcn.1000ddb0
push 0x6f
lea ecx, [ebp - 0xb8]
call fcn.1000ddb0
push 0x77
lea ecx, [ebp - 0xb8]
call fcn.1000ddb0
push 0x73
lea ecx, [ebp - 0xb8]
call fcn.1000ddb0
push 0x65
lea ecx, [ebp - 0xb8]
call fcn.1000ddb0
push 0x72
lea ecx, [ebp - 0xb8]
call fcn.1000ddb0
push 0x2e
lea ecx, [ebp - 0xb8]
call fcn.1000ddb0
push 0x73
lea ecx, [ebp - 0xb8]
call fcn.1000ddb0
push 0x65
lea ecx, [ebp - 0xb8]
call fcn.1000ddb0
push 0x73
lea ecx, [ebp - 0xb8]
call fcn.1000ddb0
push 0x73
lea ecx, [ebp - 0xb8]
call fcn.1000ddb0
push 0x69
lea ecx, [ebp - 0xb8]
call fcn.1000ddb0
push 0x6f
lea ecx, [ebp - 0xb8]
call fcn.1000ddb0
push 0x6e
lea ecx, [ebp - 0xb8]
call fcn.1000ddb0
push 0x73
lea ecx, [ebp - 0xb8]
call fcn.1000ddb0
push 0x74
lea ecx, [ebp - 0xb8]
call fcn.1000ddb0
push 0x6f
lea ecx, [ebp - 0xb8]
call fcn.1000ddb0
push 0x72
lea ecx, [ebp - 0xb8]
call fcn.1000ddb0
push 0x65
lea ecx, [ebp - 0xb8]
call fcn.1000ddb0
push 0x2e
lea ecx, [ebp - 0xb8]
call fcn.1000ddb0
push 0x72
lea ecx, [ebp - 0xb8]
call fcn.1000ddb0
push 0x65
lea ecx, [ebp - 0xb8]
call fcn.1000ddb0
push 0x73
lea ecx, [ebp - 0xb8]
call fcn.1000ddb0
push 0x75
lea ecx, [ebp - 0xb8]
call fcn.1000ddb0
push 0x6d
lea ecx, [ebp - 0xb8]
call fcn.1000ddb0
push 0x65
lea ecx, [ebp - 0xb8]
call fcn.1000ddb0
push 0x5f
lea ecx, [ebp - 0xb8]
call fcn.1000ddb0
push 0x73
lea ecx, [ebp - 0xb8]
call fcn.1000ddb0
push 0x65
lea ecx, [ebp - 0xb8]
call fcn.1000ddb0
push 0x73
lea ecx, [ebp - 0xb8]
call fcn.1000ddb0
push 0x73
lea ecx, [ebp - 0xb8]
call fcn.1000ddb0
push 0x69
lea ecx, [ebp - 0xb8]
call fcn.1000ddb0
push 0x6f
lea ecx, [ebp - 0xb8]
call fcn.1000ddb0
push 0x6e
lea ecx, [ebp - 0xb8]
call fcn.1000ddb0
push 0x5f
lea ecx, [ebp - 0xb8]
call fcn.1000ddb0
push 0x6f
lea ecx, [ebp - 0xb8]
call fcn.1000ddb0
push 0x6e
lea ecx, [ebp - 0xb8]
call fcn.1000ddb0
push 0x63
lea ecx, [ebp - 0xb8]
call fcn.1000ddb0
push 0x65
lea ecx, [ebp - 0xb8]
call fcn.1000ddb0
push 0x22
lea ecx, [ebp - 0xb8]
call fcn.1000ddb0
push 0x2c
lea ecx, [ebp - 0xb8]
call fcn.1000ddb0
mov eax, dword [0x10069550]
mov ecx, 0x10069550
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0xbc], eax
push 0x75
lea ecx, [ebp - 0xbc]
mov byte [ebp - 4], 0x17
call fcn.1000ddb0
push 0x73
lea ecx, [ebp - 0xbc]
call fcn.1000ddb0
push 0x65
lea ecx, [ebp - 0xbc]
call fcn.1000ddb0
push 0x72
lea ecx, [ebp - 0xbc]
call fcn.1000ddb0
push 0x5f
lea ecx, [ebp - 0xbc]
call fcn.1000ddb0
push 0x70
lea ecx, [ebp - 0xbc]
call fcn.1000ddb0
push 0x72
lea ecx, [ebp - 0xbc]
call fcn.1000ddb0
push 0x65
lea ecx, [ebp - 0xbc]
call fcn.1000ddb0
push 0x66
lea ecx, [ebp - 0xbc]
call fcn.1000ddb0
push 0x28
lea ecx, [ebp - 0xbc]
call fcn.1000ddb0
push 0x22
lea ecx, [ebp - 0xbc]
call fcn.1000ddb0
push 0x62
lea ecx, [ebp - 0xbc]
call fcn.1000ddb0
push 0x72
lea ecx, [ebp - 0xbc]
call fcn.1000ddb0
push 0x6f
lea ecx, [ebp - 0xbc]
call fcn.1000ddb0
push 0x77
lea ecx, [ebp - 0xbc]
call fcn.1000ddb0
push 0x73
lea ecx, [ebp - 0xbc]
call fcn.1000ddb0
push 0x65
lea ecx, [ebp - 0xbc]
call fcn.1000ddb0
push 0x72
lea ecx, [ebp - 0xbc]
call fcn.1000ddb0
push 0x2e
lea ecx, [ebp - 0xbc]
call fcn.1000ddb0
push 0x73
lea ecx, [ebp - 0xbc]
call fcn.1000ddb0
push 0x65
lea ecx, [ebp - 0xbc]
call fcn.1000ddb0
push 0x73
lea ecx, [ebp - 0xbc]
call fcn.1000ddb0
push 0x73
lea ecx, [ebp - 0xbc]
call fcn.1000ddb0
push 0x69
lea ecx, [ebp - 0xbc]
call fcn.1000ddb0
push 0x6f
lea ecx, [ebp - 0xbc]
call fcn.1000ddb0
push 0x6e
lea ecx, [ebp - 0xbc]
call fcn.1000ddb0
push 0x73
lea ecx, [ebp - 0xbc]
call fcn.1000ddb0
push 0x74
lea ecx, [ebp - 0xbc]
call fcn.1000ddb0
push 0x6f
lea ecx, [ebp - 0xbc]
call fcn.1000ddb0
push 0x72
lea ecx, [ebp - 0xbc]
call fcn.1000ddb0
push 0x65
lea ecx, [ebp - 0xbc]
call fcn.1000ddb0
push 0x2e
lea ecx, [ebp - 0xbc]
call fcn.1000ddb0
push 0x72
lea ecx, [ebp - 0xbc]
call fcn.1000ddb0
push 0x65
lea ecx, [ebp - 0xbc]
call fcn.1000ddb0
push 0x73
lea ecx, [ebp - 0xbc]
call fcn.1000ddb0
push 0x75
lea ecx, [ebp - 0xbc]
call fcn.1000ddb0
push 0x6d
lea ecx, [ebp - 0xbc]
call fcn.1000ddb0
push 0x65
lea ecx, [ebp - 0xbc]
call fcn.1000ddb0
push 0x5f
lea ecx, [ebp - 0xbc]
call fcn.1000ddb0
push 0x73
lea ecx, [ebp - 0xbc]
call fcn.1000ddb0
push 0x65
lea ecx, [ebp - 0xbc]
call fcn.1000ddb0
push 0x73
lea ecx, [ebp - 0xbc]
call fcn.1000ddb0
push 0x73
lea ecx, [ebp - 0xbc]
call fcn.1000ddb0
push 0x69
lea ecx, [ebp - 0xbc]
call fcn.1000ddb0
push 0x6f
lea ecx, [ebp - 0xbc]
call fcn.1000ddb0
push 0x6e
lea ecx, [ebp - 0xbc]
call fcn.1000ddb0
push 0x5f
lea ecx, [ebp - 0xbc]
call fcn.1000ddb0
push 0x6f
lea ecx, [ebp - 0xbc]
call fcn.1000ddb0
push 0x6e
lea ecx, [ebp - 0xbc]
call fcn.1000ddb0
push 0x63
lea ecx, [ebp - 0xbc]
call fcn.1000ddb0
push 0x65
lea ecx, [ebp - 0xbc]
call fcn.1000ddb0
push 0x22
lea ecx, [ebp - 0xbc]
call fcn.1000ddb0
push 0x2c
lea ecx, [ebp - 0xbc]
call fcn.1000ddb0
push 0x20
lea ecx, [ebp - 0xbc]
call fcn.1000ddb0
push 0x74
lea ecx, [ebp - 0xbc]
call fcn.1000ddb0
push 0x72
lea ecx, [ebp - 0xbc]
call fcn.1000ddb0
push 0x75
lea ecx, [ebp - 0xbc]
call fcn.1000ddb0
push 0x65
lea ecx, [ebp - 0xbc]
call fcn.1000ddb0
push 0x29
lea ecx, [ebp - 0xbc]
call fcn.1000ddb0
push 0x3b
lea ecx, [ebp - 0xbc]
call fcn.1000ddb0
mov eax, dword [0x10069550]
mov ecx, 0x10069550
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0xb4], eax
push 0x75
lea ecx, [ebp - 0xb4]
mov byte [ebp - 4], 0x18
call fcn.1000ddb0
push 0x73
lea ecx, [ebp - 0xb4]
call fcn.1000ddb0
push 0x65
lea ecx, [ebp - 0xb4]
call fcn.1000ddb0
push 0x72
lea ecx, [ebp - 0xb4]
call fcn.1000ddb0
push 0x5f
lea ecx, [ebp - 0xb4]
call fcn.1000ddb0
push 0x70
lea ecx, [ebp - 0xb4]
call fcn.1000ddb0
push 0x72
lea ecx, [ebp - 0xb4]
call fcn.1000ddb0
push 0x65
lea ecx, [ebp - 0xb4]
call fcn.1000ddb0
push 0x66
lea ecx, [ebp - 0xb4]
call fcn.1000ddb0
push 0x28
lea ecx, [ebp - 0xb4]
call fcn.1000ddb0
push 0x22
lea ecx, [ebp - 0xb4]
call fcn.1000ddb0
push 0x62
lea ecx, [ebp - 0xb4]
call fcn.1000ddb0
push 0x72
lea ecx, [ebp - 0xb4]
call fcn.1000ddb0
push 0x6f
lea ecx, [ebp - 0xb4]
call fcn.1000ddb0
push 0x77
lea ecx, [ebp - 0xb4]
call fcn.1000ddb0
push 0x73
lea ecx, [ebp - 0xb4]
call fcn.1000ddb0
push 0x65
lea ecx, [ebp - 0xb4]
call fcn.1000ddb0
push 0x72
lea ecx, [ebp - 0xb4]
call fcn.1000ddb0
push 0x2e
lea ecx, [ebp - 0xb4]
call fcn.1000ddb0
push 0x73
lea ecx, [ebp - 0xb4]
call fcn.1000ddb0
push 0x65
lea ecx, [ebp - 0xb4]
call fcn.1000ddb0
push 0x73
lea ecx, [ebp - 0xb4]
call fcn.1000ddb0
push 0x73
lea ecx, [ebp - 0xb4]
call fcn.1000ddb0
push 0x69
lea ecx, [ebp - 0xb4]
call fcn.1000ddb0
push 0x6f
lea ecx, [ebp - 0xb4]
call fcn.1000ddb0
push 0x6e
lea ecx, [ebp - 0xb4]
call fcn.1000ddb0
push 0x73
lea ecx, [ebp - 0xb4]
call fcn.1000ddb0
push 0x74
lea ecx, [ebp - 0xb4]
call fcn.1000ddb0
push 0x6f
lea ecx, [ebp - 0xb4]
call fcn.1000ddb0
push 0x72
lea ecx, [ebp - 0xb4]
call fcn.1000ddb0
push 0x65
lea ecx, [ebp - 0xb4]
call fcn.1000ddb0
push 0x2e
lea ecx, [ebp - 0xb4]
call fcn.1000ddb0
push 0x72
lea ecx, [ebp - 0xb4]
call fcn.1000ddb0
push 0x65
lea ecx, [ebp - 0xb4]
call fcn.1000ddb0
push 0x73
lea ecx, [ebp - 0xb4]
call fcn.1000ddb0
push 0x75
lea ecx, [ebp - 0xb4]
call fcn.1000ddb0
push 0x6d
lea ecx, [ebp - 0xb4]
call fcn.1000ddb0
push 0x65
lea ecx, [ebp - 0xb4]
call fcn.1000ddb0
push 0x5f
lea ecx, [ebp - 0xb4]
call fcn.1000ddb0
push 0x73
lea ecx, [ebp - 0xb4]
call fcn.1000ddb0
push 0x65
lea ecx, [ebp - 0xb4]
call fcn.1000ddb0
push 0x73
lea ecx, [ebp - 0xb4]
call fcn.1000ddb0
push 0x73
lea ecx, [ebp - 0xb4]
call fcn.1000ddb0
push 0x69
lea ecx, [ebp - 0xb4]
call fcn.1000ddb0
push 0x6f
lea ecx, [ebp - 0xb4]
call fcn.1000ddb0
push 0x6e
lea ecx, [ebp - 0xb4]
call fcn.1000ddb0
push 0x5f
lea ecx, [ebp - 0xb4]
call fcn.1000ddb0
push 0x6f
lea ecx, [ebp - 0xb4]
call fcn.1000ddb0
push 0x6e
lea ecx, [ebp - 0xb4]
call fcn.1000ddb0
push 0x63
lea ecx, [ebp - 0xb4]
call fcn.1000ddb0
push 0x65
lea ecx, [ebp - 0xb4]
call fcn.1000ddb0
push 0x22
lea ecx, [ebp - 0xb4]
call fcn.1000ddb0
push 0x2c
lea ecx, [ebp - 0xb4]
call fcn.1000ddb0
push 0x20
lea ecx, [ebp - 0xb4]
call fcn.1000ddb0
push 0x74
lea ecx, [ebp - 0xb4]
call fcn.1000ddb0
push 0x72
lea ecx, [ebp - 0xb4]
call fcn.1000ddb0
push 0x75
lea ecx, [ebp - 0xb4]
call fcn.1000ddb0
push 0x65
lea ecx, [ebp - 0xb4]
call fcn.1000ddb0
push 0x29
lea ecx, [ebp - 0xb4]
call fcn.1000ddb0
push 0x3b
lea ecx, [ebp - 0xb4]
call fcn.1000ddb0
push 0xd
lea ecx, [ebp - 0xb4]
call fcn.1000ddb0
push 0xa
lea ecx, [ebp - 0xb4]
call fcn.1000ddb0
mov esi, dword [ebp - 0xb8]
test esi, esi
je 0x1004f10a
mov eax, dword [ebp - 0xe0]
cmp dword [eax - 0xc], 0
jl 0x1004f110
push esi
push eax
call fcn.10026907
mov ecx, eax
add esp, 8
test ecx, ecx
je 0x1004f10a
mov eax, dword [ebp - 0xe0]
sub ecx, eax
mov dword [ebp - 0xec], ecx
cmp ecx, 0xffffffff
je 0x1004f110
test ecx, ecx
js 0x1004f0e9
cmp ecx, dword [eax - 0xc]
jg 0x1004f0e9
add eax, ecx
push 0x10062df4
push eax
call fcn.10026907
mov ecx, dword [ebp - 0xec]
add esp, 8
test eax, eax
je 0x1004f0e9
sub eax, dword [ebp - 0xe0]
jmp 0x1004f0ec
or eax, 0xffffffff
sub eax, ecx
inc eax
push eax
push ecx
lea ecx, [ebp - 0xe0]
call fcn.1000b620
push dword [ebp - 0xbc]
push dword [ebp - 0xec]
jmp 0x1004f158
mov eax, dword [ebp - 0xe0]
test ebx, ebx
jne 0x1004f119
or eax, 0xffffffff
jmp 0x1004f13d
cmp dword [eax - 0xc], 0
jge 0x1004f124
or eax, 0xffffffff
jmp 0x1004f13d
push ebx
push eax
call fcn.10026907
add esp, 8
test eax, eax
jne 0x1004f137
or eax, 0xffffffff
jmp 0x1004f13d
sub eax, dword [ebp - 0xe0]
push eax
push 0x10062df8
lea ecx, [ebp - 0xe0]
call fcn.1000b8d0
push dword [ebp - 0xb4]
add eax, 2
push eax
lea ecx, [ebp - 0xe0]
call fcn.10014500
mov byte [ebp - 4], 0x17
mov edx, dword [ebp - 0xb4]
add edx, 0xfffffff0
or ecx, 0xffffffff
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x1004f187
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 0x16
mov edx, dword [ebp - 0xbc]
add edx, 0xfffffff0
or ecx, 0xffffffff
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x1004f1ab
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
lea edx, [esi - 0x10]
or esi, 0xffffffff
mov byte [ebp - 4], 0x15
lea eax, [edx + 0xc]
mov ecx, esi
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x1004f1cb
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
lea eax, [ebp - 0xe0]
push eax
call fcn.10053450
mov eax, dword [ebp - 0x11c]
push 0
push 0x80
push 3
push 0
push 0
push 0x40000000
push dword [eax + 8]
call dword [sym.imp.KERNEL32.dll_CreateFileA]
mov ecx, dword [ebp - 0xe0]
push 0
mov edx, dword [ecx - 0xc]
lea ebx, [ebp - 0x120]
push ebx
push edx
push ecx
push eax
mov dword [ebp - 0xf8], eax
mov dword [ebp - 0x120], 0
call dword [0x1006ca54]
mov ebx, dword [ebp - 0xf4]
test eax, eax
jne 0x1004f2a6
call dword [sym.imp.KERNEL32.dll_GetLastError]
push 0
push 0
lea ecx, [ebp - 0xe8]
push ecx
push 0x400
push eax
push 0
push 0x1300
call dword [sym.imp.KERNEL32.dll_FormatMessageA]
mov eax, dword [0x10069550]
mov ecx, 0x10069550
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0xf0], eax
mov byte [ebp - 4], 0x19
push dword [ebp - 0xe8]
lea eax, [ebp - 0xf0]
push 0x10061d70
push eax
call fcn.1000c0d0
mov byte [ebp - 4], 0x15
mov edx, dword [ebp - 0xf0]
add edx, 0xfffffff0
add esp, 0xc
lea eax, [edx + 0xc]
lock xadd dword [eax], esi
dec esi
test esi, esi
jg 0x1004f2a6
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
push dword [ebp - 0xf8]
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov eax, dword [0x10069550]
mov ecx, 0x10069550
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0xf0], eax
mov eax, dword [ebp - 0x11c]
mov byte [ebp - 4], 0x1a
push dword [eax + 0x18]
push dword [eax + 0xc]
lea eax, [ebp - 0xf0]
push str._s_s
push eax
call fcn.1000c0d0
mov eax, dword [ebp + 0x10]
add eax, 0xfffffff0
push eax
call fcn.1000de10
lea esi, [eax + 0x10]
add esp, 0x14
mov dword [ebp - 0xe8], eax
mov dword [ebp - 0x138], esi
mov byte [ebp - 4], 0x1b
mov eax, dword [0x10069550]
mov ecx, 0x10069550
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0xb4], eax
push 0x42
lea ecx, [ebp - 0xb4]
mov byte [ebp - 4], 0x1c
call fcn.1000ddb0
push 0x79
lea ecx, [ebp - 0xb4]
call fcn.1000ddb0
push 0x20
lea ecx, [ebp - 0xb4]
call fcn.1000ddb0
push 0x6d
lea ecx, [ebp - 0xb4]
call fcn.1000ddb0
push 0x6f
lea ecx, [ebp - 0xb4]
call fcn.1000ddb0
push 0x64
lea ecx, [ebp - 0xb4]
call fcn.1000ddb0
push 0x69
lea ecx, [ebp - 0xb4]
call fcn.1000ddb0
push 0x66
lea ecx, [ebp - 0xb4]
call fcn.1000ddb0
push 0x79
lea ecx, [ebp - 0xb4]
call fcn.1000ddb0
push 0x69
lea ecx, [ebp - 0xb4]
call fcn.1000ddb0
push 0x6e
lea ecx, [ebp - 0xb4]
call fcn.1000ddb0
push 0x67
lea ecx, [ebp - 0xb4]
call fcn.1000ddb0
push 0x20
lea ecx, [ebp - 0xb4]
call fcn.1000ddb0
push 0x74
lea ecx, [ebp - 0xb4]
call fcn.1000ddb0
push 0x68
lea ecx, [ebp - 0xb4]
call fcn.1000ddb0
push 0x69
lea ecx, [ebp - 0xb4]
call fcn.1000ddb0
push 0x73
lea ecx, [ebp - 0xb4]
call fcn.1000ddb0
push 0x20
lea ecx, [ebp - 0xb4]
call fcn.1000ddb0
push 0x66
lea ecx, [ebp - 0xb4]
call fcn.1000ddb0
push 0x69
lea ecx, [ebp - 0xb4]
call fcn.1000ddb0
push 0x6c
lea ecx, [ebp - 0xb4]
call fcn.1000ddb0
push 0x65
lea ecx, [ebp - 0xb4]
call fcn.1000ddb0
push 0x2c
lea ecx, [ebp - 0xb4]
call fcn.1000ddb0
push 0x20
lea ecx, [ebp - 0xb4]
call fcn.1000ddb0
push 0x49
lea ecx, [ebp - 0xb4]
call fcn.1000ddb0
push 0x20
lea ecx, [ebp - 0xb4]
call fcn.1000ddb0
push 0x61
lea ecx, [ebp - 0xb4]
call fcn.1000ddb0
push 0x67
lea ecx, [ebp - 0xb4]
call fcn.1000ddb0
push 0x72
lea ecx, [ebp - 0xb4]
call fcn.1000ddb0
push 0x65
lea ecx, [ebp - 0xb4]
call fcn.1000ddb0
push 0x65
lea ecx, [ebp - 0xb4]
call fcn.1000ddb0
push 0x20
lea ecx, [ebp - 0xb4]
call fcn.1000ddb0
push 0x74
lea ecx, [ebp - 0xb4]
call fcn.1000ddb0
push 0x68
lea ecx, [ebp - 0xb4]
call fcn.1000ddb0
push 0x61
lea ecx, [ebp - 0xb4]
call fcn.1000ddb0
push 0x74
lea ecx, [ebp - 0xb4]
call fcn.1000ddb0
push 0x20
lea ecx, [ebp - 0xb4]
call fcn.1000ddb0
push 0x49
lea ecx, [ebp - 0xb4]
call fcn.1000ddb0
push 0x20
lea ecx, [ebp - 0xb4]
call fcn.1000ddb0
push 0x61
lea ecx, [ebp - 0xb4]
call fcn.1000ddb0
push 0x6d
lea ecx, [ebp - 0xb4]
call fcn.1000ddb0
push 0x20
lea ecx, [ebp - 0xb4]
call fcn.1000ddb0
push 0x64
lea ecx, [ebp - 0xb4]
call fcn.1000ddb0
push 0x6f
lea ecx, [ebp - 0xb4]
call fcn.1000ddb0
push 0x69
lea ecx, [ebp - 0xb4]
call fcn.1000ddb0
push 0x6e
lea ecx, [ebp - 0xb4]
call fcn.1000ddb0
push 0x67
lea ecx, [ebp - 0xb4]
call fcn.1000ddb0
push 0x20
lea ecx, [ebp - 0xb4]
call fcn.1000ddb0
push 0x73
lea ecx, [ebp - 0xb4]
call fcn.1000ddb0
push 0x6f
lea ecx, [ebp - 0xb4]
call fcn.1000ddb0
push 0x20
lea ecx, [ebp - 0xb4]
call fcn.1000ddb0
push 0x6f
lea ecx, [ebp - 0xb4]
call fcn.1000ddb0
push 0x6e
lea ecx, [ebp - 0xb4]
call fcn.1000ddb0
push 0x6c
lea ecx, [ebp - 0xb4]
call fcn.1000ddb0
push 0x79
lea ecx, [ebp - 0xb4]
call fcn.1000ddb0
push 0x20
lea ecx, [ebp - 0xb4]
call fcn.1000ddb0
push 0x77
lea ecx, [ebp - 0xb4]
call fcn.1000ddb0
push 0x69
lea ecx, [ebp - 0xb4]
call fcn.1000ddb0
push 0x74
lea ecx, [ebp - 0xb4]
call fcn.1000ddb0
push 0x68
lea ecx, [ebp - 0xb4]
call fcn.1000ddb0
push 0x69
lea ecx, [ebp - 0xb4]
call fcn.1000ddb0
push 0x6e
lea ecx, [ebp - 0xb4]
call fcn.1000ddb0
push 0x20
lea ecx, [ebp - 0xb4]
call fcn.1000ddb0
push 0x46
lea ecx, [ebp - 0xb4]
call fcn.1000ddb0
push 0x69
lea ecx, [ebp - 0xb4]
call fcn.1000ddb0
push 0x72
lea ecx, [ebp - 0xb4]
call fcn.1000ddb0
push 0x65
lea ecx, [ebp - 0xb4]
call fcn.1000ddb0
push 0x66
lea ecx, [ebp - 0xb4]
call fcn.1000ddb0
push 0x6f
lea ecx, [ebp - 0xb4]
call fcn.1000ddb0
push 0x78
lea ecx, [ebp - 0xb4]
call fcn.1000ddb0
push 0x20
lea ecx, [ebp - 0xb4]
call fcn.1000ddb0
push 0x69
lea ecx, [ebp - 0xb4]
call fcn.1000ddb0
push 0x74
lea ecx, [ebp - 0xb4]
call fcn.1000ddb0
push 0x73
lea ecx, [ebp - 0xb4]
call fcn.1000ddb0
push 0x65
lea ecx, [ebp - 0xb4]
call fcn.1000ddb0
push 0x6c
lea ecx, [ebp - 0xb4]
call fcn.1000ddb0
push 0x66
lea ecx, [ebp - 0xb4]
call fcn.1000ddb0
push 0x2c
lea ecx, [ebp - 0xb4]
call fcn.1000ddb0
push 0x20
lea ecx, [ebp - 0xb4]
call fcn.1000ddb0
push 0x75
lea ecx, [ebp - 0xb4]
call fcn.1000ddb0
push 0x73
lea ecx, [ebp - 0xb4]
call fcn.1000ddb0
push 0x69
lea ecx, [ebp - 0xb4]
call fcn.1000ddb0
push 0x6e
lea ecx, [ebp - 0xb4]
call fcn.1000ddb0
push 0x67
lea ecx, [ebp - 0xb4]
call fcn.1000ddb0
push 0x20
lea ecx, [ebp - 0xb4]
call fcn.1000ddb0
push 0x6f
lea ecx, [ebp - 0xb4]
call fcn.1000ddb0
push 0x66
lea ecx, [ebp - 0xb4]
call fcn.1000ddb0
push 0x66
lea ecx, [ebp - 0xb4]
call fcn.1000ddb0
push 0x69
lea ecx, [ebp - 0xb4]
call fcn.1000ddb0
push 0x63
lea ecx, [ebp - 0xb4]
call fcn.1000ddb0
push 0x69
lea ecx, [ebp - 0xb4]
call fcn.1000ddb0
push 0x61
lea ecx, [ebp - 0xb4]
call fcn.1000ddb0
push 0x6c
lea ecx, [ebp - 0xb4]
call fcn.1000ddb0
push 0x2c
lea ecx, [ebp - 0xb4]
call fcn.1000ddb0
push 0x20
lea ecx, [ebp - 0xb4]
call fcn.1000ddb0
push 0x75
lea ecx, [ebp - 0xb4]
call fcn.1000ddb0
push 0x73
lea ecx, [ebp - 0xb4]
call fcn.1000ddb0
push 0x65
lea ecx, [ebp - 0xb4]
call fcn.1000ddb0
push 0x72
lea ecx, [ebp - 0xb4]
call fcn.1000ddb0
push 0x2d
lea ecx, [ebp - 0xb4]
call fcn.1000ddb0
push 0x64
lea ecx, [ebp - 0xb4]
call fcn.1000ddb0
push 0x72
lea ecx, [ebp - 0xb4]
call fcn.1000ddb0
push 0x69
lea ecx, [ebp - 0xb4]
call fcn.1000ddb0
push 0x76
lea ecx, [ebp - 0xb4]
call fcn.1000ddb0
push 0x65
lea ecx, [ebp - 0xb4]
call fcn.1000ddb0
push 0x6e
lea ecx, [ebp - 0xb4]
call fcn.1000ddb0
push 0x20
lea ecx, [ebp - 0xb4]
call fcn.1000ddb0
push 0x73
lea ecx, [ebp - 0xb4]
call fcn.1000ddb0
push 0x65
lea ecx, [ebp - 0xb4]
call fcn.1000ddb0
push 0x61
lea ecx, [ebp - 0xb4]
call fcn.1000ddb0
push 0x72
lea ecx, [ebp - 0xb4]
call fcn.1000ddb0
push 0x63
lea ecx, [ebp - 0xb4]
call fcn.1000ddb0
push 0x68
lea ecx, [ebp - 0xb4]
call fcn.1000ddb0
push 0x20
lea ecx, [ebp - 0xb4]
call fcn.1000ddb0
push 0x65
lea ecx, [ebp - 0xb4]
call fcn.1000ddb0
push 0x6e
lea ecx, [ebp - 0xb4]
call fcn.1000ddb0
push 0x67
lea ecx, [ebp - 0xb4]
call fcn.1000ddb0
push 0x69
lea ecx, [ebp - 0xb4]
call fcn.1000ddb0
push 0x6e
lea ecx, [ebp - 0xb4]
call fcn.1000ddb0
push 0x65
lea ecx, [ebp - 0xb4]
call fcn.1000ddb0
push 0x20
lea ecx, [ebp - 0xb4]
call fcn.1000ddb0
push 0x73
lea ecx, [ebp - 0xb4]
call fcn.1000ddb0
push 0x65
lea ecx, [ebp - 0xb4]
call fcn.1000ddb0
push 0x6c
lea ecx, [ebp - 0xb4]
call fcn.1000ddb0
push 0x65
lea ecx, [ebp - 0xb4]
call fcn.1000ddb0
push 0x63
lea ecx, [ebp - 0xb4]
call fcn.1000ddb0
push 0x74
lea ecx, [ebp - 0xb4]
call fcn.1000ddb0
push 0x69
lea ecx, [ebp - 0xb4]
call fcn.1000ddb0
push 0x6f
lea ecx, [ebp - 0xb4]
call fcn.1000ddb0
push 0x6e
lea ecx, [ebp - 0xb4]
call fcn.1000ddb0
push 0x20
lea ecx, [ebp - 0xb4]
call fcn.1000ddb0
push 0x70
lea ecx, [ebp - 0xb4]
call fcn.1000ddb0
push 0x72
lea ecx, [ebp - 0xb4]
call fcn.1000ddb0
push 0x6f
lea ecx, [ebp - 0xb4]
call fcn.1000ddb0
push 0x63
lea ecx, [ebp - 0xb4]
call fcn.1000ddb0
push 0x65
lea ecx, [ebp - 0xb4]
call fcn.1000ddb0
push 0x73
lea ecx, [ebp - 0xb4]
call fcn.1000ddb0
push 0x73
lea ecx, [ebp - 0xb4]
call fcn.1000ddb0
push 0x65
lea ecx, [ebp - 0xb4]
call fcn.1000ddb0
push 0x73
lea ecx, [ebp - 0xb4]
call fcn.1000ddb0
push 0x2c
lea ecx, [ebp - 0xb4]
call fcn.1000ddb0
push 0x20
lea ecx, [ebp - 0xb4]
call fcn.1000ddb0
push 0x61
lea ecx, [ebp - 0xb4]
call fcn.1000ddb0
push 0x6e
lea ecx, [ebp - 0xb4]
call fcn.1000ddb0
push 0x64
lea ecx, [ebp - 0xb4]
call fcn.1000ddb0
push 0x20
lea ecx, [ebp - 0xb4]
call fcn.1000ddb0
push 0x69
lea ecx, [ebp - 0xb4]
call fcn.1000ddb0
push 0x6e
lea ecx, [ebp - 0xb4]
call fcn.1000ddb0
push 0x20
lea ecx, [ebp - 0xb4]
call fcn.1000ddb0
push 0x61
lea ecx, [ebp - 0xb4]
call fcn.1000ddb0
push 0x20
lea ecx, [ebp - 0xb4]
call fcn.1000ddb0
push 0x77
lea ecx, [ebp - 0xb4]
call fcn.1000ddb0
push 0x61
lea ecx, [ebp - 0xb4]
call fcn.1000ddb0
push 0x79
lea ecx, [ebp - 0xb4]
call fcn.1000ddb0
push 0x20
lea ecx, [ebp - 0xb4]
call fcn.1000ddb0
push 0x77
lea ecx, [ebp - 0xb4]
call fcn.1000ddb0
push 0x68
lea ecx, [ebp - 0xb4]
call fcn.1000ddb0
push 0x69
lea ecx, [ebp - 0xb4]
call fcn.1000ddb0
push 0x63
lea ecx, [ebp - 0xb4]
call fcn.1000ddb0
push 0x68
lea ecx, [ebp - 0xb4]
call fcn.1000ddb0
push 0x20
lea ecx, [ebp - 0xb4]
call fcn.1000ddb0
push 0x64
lea ecx, [ebp - 0xb4]
call fcn.1000ddb0
push 0x6f
lea ecx, [ebp - 0xb4]
call fcn.1000ddb0
push 0x65
lea ecx, [ebp - 0xb4]
call fcn.1000ddb0
push 0x73
lea ecx, [ebp - 0xb4]
call fcn.1000ddb0
push 0x20
lea ecx, [ebp - 0xb4]
call fcn.1000ddb0
push 0x6e
lea ecx, [ebp - 0xb4]
call fcn.1000ddb0
push 0x6f
lea ecx, [ebp - 0xb4]
call fcn.1000ddb0
push 0x74
lea ecx, [ebp - 0xb4]
call fcn.1000ddb0
push 0x20
lea ecx, [ebp - 0xb4]
call fcn.1000ddb0
push 0x63
lea ecx, [ebp - 0xb4]
call fcn.1000ddb0
push 0x69
lea ecx, [ebp - 0xb4]
call fcn.1000ddb0
push 0x72
lea ecx, [ebp - 0xb4]
call fcn.1000ddb0
push 0x63
lea ecx, [ebp - 0xb4]
call fcn.1000ddb0
push 0x75
lea ecx, [ebp - 0xb4]
call fcn.1000ddb0
push 0x6d
lea ecx, [ebp - 0xb4]
call fcn.1000ddb0
push 0x76
lea ecx, [ebp - 0xb4]
call fcn.1000ddb0
push 0x65
lea ecx, [ebp - 0xb4]
call fcn.1000ddb0
push 0x6e
lea ecx, [ebp - 0xb4]
call fcn.1000ddb0
push 0x74
lea ecx, [ebp - 0xb4]
call fcn.1000ddb0
push 0x20
lea ecx, [ebp - 0xb4]
call fcn.1000ddb0
push 0x75
lea ecx, [ebp - 0xb4]
call fcn.1000ddb0
push 0x73
lea ecx, [ebp - 0xb4]
call fcn.1000ddb0
push 0x65
lea ecx, [ebp - 0xb4]
call fcn.1000ddb0
push 0x72
lea ecx, [ebp - 0xb4]
call fcn.1000ddb0
push 0x20
lea ecx, [ebp - 0xb4]
call fcn.1000ddb0
push 0x63
lea ecx, [ebp - 0xb4]
call fcn.1000ddb0
push 0x6f
lea ecx, [ebp - 0xb4]
call fcn.1000ddb0
push 0x6e
lea ecx, [ebp - 0xb4]
call fcn.1000ddb0
push 0x73
lea ecx, [ebp - 0xb4]
call fcn.1000ddb0
push 0x65
lea ecx, [ebp - 0xb4]
call fcn.1000ddb0
push 0x6e
lea ecx, [ebp - 0xb4]
call fcn.1000ddb0
push 0x74
lea ecx, [ebp - 0xb4]
call fcn.1000ddb0
push 0x2e
lea ecx, [ebp - 0xb4]
call fcn.1000ddb0
push 0x20
lea ecx, [ebp - 0xb4]
call fcn.1000ddb0
push 0x49
lea ecx, [ebp - 0xb4]
call fcn.1000ddb0
push 0x20
lea ecx, [ebp - 0xb4]
call fcn.1000ddb0
push 0x61
lea ecx, [ebp - 0xb4]
call fcn.1000ddb0
push 0x63
lea ecx, [ebp - 0xb4]
call fcn.1000ddb0
push 0x6b
lea ecx, [ebp - 0xb4]
call fcn.1000ddb0
push 0x6e
lea ecx, [ebp - 0xb4]
call fcn.1000ddb0
push 0x6f
lea ecx, [ebp - 0xb4]
call fcn.1000ddb0
push 0x77
lea ecx, [ebp - 0xb4]
call fcn.1000ddb0
push 0x6c
lea ecx, [ebp - 0xb4]
call fcn.1000ddb0
push 0x65
lea ecx, [ebp - 0xb4]
call fcn.1000ddb0
push 0x64
lea ecx, [ebp - 0xb4]
call fcn.1000ddb0
push 0x67
lea ecx, [ebp - 0xb4]
call fcn.1000ddb0
push 0x65
lea ecx, [ebp - 0xb4]
call fcn.1000ddb0
push 0x20
lea ecx, [ebp - 0xb4]
call fcn.1000ddb0
push 0x74
lea ecx, [ebp - 0xb4]
call fcn.1000ddb0
push 0x68
lea ecx, [ebp - 0xb4]
call fcn.1000ddb0
push 0x61
lea ecx, [ebp - 0xb4]
call fcn.1000ddb0
push 0x74
lea ecx, [ebp - 0xb4]
call fcn.1000ddb0
push 0x20
lea ecx, [ebp - 0xb4]
call fcn.1000ddb0
push 0x61
lea ecx, [ebp - 0xb4]
call fcn.1000ddb0
push 0x6e
lea ecx, [ebp - 0xb4]
call fcn.1000ddb0
push 0x79
lea ecx, [ebp - 0xb4]
call fcn.1000ddb0
push 0x20
lea ecx, [ebp - 0xb4]
call fcn.1000ddb0
push 0x61
lea ecx, [ebp - 0xb4]
call fcn.1000ddb0
push 0x74
lea ecx, [ebp - 0xb4]
call fcn.1000ddb0
push 0x74
lea ecx, [ebp - 0xb4]
call fcn.1000ddb0
push 0x65
lea ecx, [ebp - 0xb4]
call fcn.1000ddb0
push 0x6d
lea ecx, [ebp - 0xb4]
call fcn.1000ddb0
push 0x70
lea ecx, [ebp - 0xb4]
call fcn.1000ddb0
push 0x74
lea ecx, [ebp - 0xb4]
call fcn.1000ddb0
push 0x20
lea ecx, [ebp - 0xb4]
call fcn.1000ddb0
push 0x74
lea ecx, [ebp - 0xb4]
call fcn.1000ddb0
push 0x6f
lea ecx, [ebp - 0xb4]
call fcn.1000ddb0
push 0x20
lea ecx, [ebp - 0xb4]
call fcn.1000ddb0
push 0x63
lea ecx, [ebp - 0xb4]
call fcn.1000ddb0
push 0x68
lea ecx, [ebp - 0xb4]
call fcn.1000ddb0
push 0x61
lea ecx, [ebp - 0xb4]
call fcn.1000ddb0
push 0x6e
lea ecx, [ebp - 0xb4]
call fcn.1000ddb0
push 0x67
lea ecx, [ebp - 0xb4]
call fcn.1000ddb0
push 0x65
lea ecx, [ebp - 0xb4]
call fcn.1000ddb0
push 0x20
lea ecx, [ebp - 0xb4]
call fcn.1000ddb0
push 0x74
lea ecx, [ebp - 0xb4]
call fcn.1000ddb0
push 0x68
lea ecx, [ebp - 0xb4]
call fcn.1000ddb0
push 0x69
lea ecx, [ebp - 0xb4]
call fcn.1000ddb0
push 0x73
lea ecx, [ebp - 0xb4]
call fcn.1000ddb0
push 0x20
lea ecx, [ebp - 0xb4]
call fcn.1000ddb0
push 0x66
lea ecx, [ebp - 0xb4]
call fcn.1000ddb0
push 0x69
lea ecx, [ebp - 0xb4]
call fcn.1000ddb0
push 0x6c
lea ecx, [ebp - 0xb4]
call fcn.1000ddb0
push 0x65
lea ecx, [ebp - 0xb4]
call fcn.1000ddb0
push 0x20
lea ecx, [ebp - 0xb4]
call fcn.1000ddb0
push 0x66
lea ecx, [ebp - 0xb4]
call fcn.1000ddb0
push 0x72
lea ecx, [ebp - 0xb4]
call fcn.1000ddb0
push 0x6f
lea ecx, [ebp - 0xb4]
call fcn.1000ddb0
push 0x6d
lea ecx, [ebp - 0xb4]
call fcn.1000ddb0
push 0x20
lea ecx, [ebp - 0xb4]
call fcn.1000ddb0
push 0x6f
lea ecx, [ebp - 0xb4]
call fcn.1000ddb0
push 0x75
lea ecx, [ebp - 0xb4]
call fcn.1000ddb0
push 0x74
lea ecx, [ebp - 0xb4]
call fcn.1000ddb0
push 0x73
lea ecx, [ebp - 0xb4]
call fcn.1000ddb0
push 0x69
lea ecx, [ebp - 0xb4]
call fcn.1000ddb0
push 0x64
lea ecx, [ebp - 0xb4]
call fcn.1000ddb0
push 0x65
lea ecx, [ebp - 0xb4]
call fcn.1000ddb0
push 0x20
lea ecx, [ebp - 0xb4]
call fcn.1000ddb0
push 0x6f
lea ecx, [ebp - 0xb4]
call fcn.1000ddb0
push 0x66
lea ecx, [ebp - 0xb4]
call fcn.1000ddb0
push 0x20
lea ecx, [ebp - 0xb4]
call fcn.1000ddb0
push 0x46
lea ecx, [ebp - 0xb4]
call fcn.1000ddb0
push 0x69
lea ecx, [ebp - 0xb4]
call fcn.1000ddb0
push 0x72
lea ecx, [ebp - 0xb4]
call fcn.1000ddb0
push 0x65
lea ecx, [ebp - 0xb4]
call fcn.1000ddb0
push 0x66
lea ecx, [ebp - 0xb4]
call fcn.1000ddb0
push 0x6f
lea ecx, [ebp - 0xb4]
call fcn.1000ddb0
push 0x78
lea ecx, [ebp - 0xb4]
call fcn.1000ddb0
push 0x20
lea ecx, [ebp - 0xb4]
call fcn.1000ddb0
push 0x69
lea ecx, [ebp - 0xb4]
call fcn.1000ddb0
push 0x73
lea ecx, [ebp - 0xb4]
call fcn.1000ddb0
push 0x20
lea ecx, [ebp - 0xb4]
call fcn.1000ddb0
push 0x61
lea ecx, [ebp - 0xb4]
call fcn.1000ddb0
push 0x20
lea ecx, [ebp - 0xb4]
call fcn.1000ddb0
push 0x6d
lea ecx, [ebp - 0xb4]
call fcn.1000ddb0
push 0x61
lea ecx, [ebp - 0xb4]
call fcn.1000ddb0
push 0x6c
lea ecx, [ebp - 0xb4]
call fcn.1000ddb0
push 0x69
lea ecx, [ebp - 0xb4]
call fcn.1000ddb0
push 0x63
lea ecx, [ebp - 0xb4]
call fcn.1000ddb0
push 0x69
lea ecx, [ebp - 0xb4]
call fcn.1000ddb0
push 0x6f
lea ecx, [ebp - 0xb4]
call fcn.1000ddb0
push 0x75
lea ecx, [ebp - 0xb4]
call fcn.1000ddb0
push 0x73
lea ecx, [ebp - 0xb4]
call fcn.1000ddb0
push 0x20
lea ecx, [ebp - 0xb4]
call fcn.1000ddb0
push 0x61
lea ecx, [ebp - 0xb4]
call fcn.1000ddb0
push 0x63
lea ecx, [ebp - 0xb4]
call fcn.1000ddb0
push 0x74
lea ecx, [ebp - 0xb4]
call fcn.1000ddb0
push 0x2c
lea ecx, [ebp - 0xb4]
call fcn.1000ddb0
push 0x20
lea ecx, [ebp - 0xb4]
call fcn.1000ddb0
push 0x61
lea ecx, [ebp - 0xb4]
call fcn.1000ddb0
push 0x6e
lea ecx, [ebp - 0xb4]
call fcn.1000ddb0
push 0x64
lea ecx, [ebp - 0xb4]
call fcn.1000ddb0
push 0x20
lea ecx, [ebp - 0xb4]
call fcn.1000ddb0
push 0x77
lea ecx, [ebp - 0xb4]
call fcn.1000ddb0
push 0x69
lea ecx, [ebp - 0xb4]
call fcn.1000ddb0
push 0x6c
lea ecx, [ebp - 0xb4]
call fcn.1000ddb0
push 0x6c
lea ecx, [ebp - 0xb4]
call fcn.1000ddb0
push 0x20
lea ecx, [ebp - 0xb4]
call fcn.1000ddb0
push 0x62
lea ecx, [ebp - 0xb4]
call fcn.1000ddb0
push 0x65
lea ecx, [ebp - 0xb4]
call fcn.1000ddb0
push 0x20
lea ecx, [ebp - 0xb4]
call fcn.1000ddb0
push 0x72
lea ecx, [ebp - 0xb4]
call fcn.1000ddb0
push 0x65
lea ecx, [ebp - 0xb4]
call fcn.1000ddb0
push 0x73
lea ecx, [ebp - 0xb4]
call fcn.1000ddb0
push 0x70
lea ecx, [ebp - 0xb4]
call fcn.1000ddb0
push 0x6f
lea ecx, [ebp - 0xb4]
call fcn.1000ddb0
push 0x6e
lea ecx, [ebp - 0xb4]
call fcn.1000ddb0
push 0x64
lea ecx, [ebp - 0xb4]
call fcn.1000ddb0
push 0x65
lea ecx, [ebp - 0xb4]
call fcn.1000ddb0
push 0x64
lea ecx, [ebp - 0xb4]
call fcn.1000ddb0
push 0x20
lea ecx, [ebp - 0xb4]
call fcn.1000ddb0
push 0x74
lea ecx, [ebp - 0xb4]
call fcn.1000ddb0
push 0x6f
lea ecx, [ebp - 0xb4]
call fcn.1000ddb0
push 0x20
lea ecx, [ebp - 0xb4]
call fcn.1000ddb0
push 0x61
lea ecx, [ebp - 0xb4]
call fcn.1000ddb0
push 0x63
lea ecx, [ebp - 0xb4]
call fcn.1000ddb0
push 0x63
lea ecx, [ebp - 0xb4]
call fcn.1000ddb0
push 0x6f
lea ecx, [ebp - 0xb4]
call fcn.1000ddb0
push 0x72
lea ecx, [ebp - 0xb4]
call fcn.1000ddb0
push 0x64
lea ecx, [ebp - 0xb4]
call fcn.1000ddb0
push 0x69
lea ecx, [ebp - 0xb4]
call fcn.1000ddb0
push 0x6e
lea ecx, [ebp - 0xb4]
call fcn.1000ddb0
push 0x67
lea ecx, [ebp - 0xb4]
call fcn.1000ddb0
push 0x6c
lea ecx, [ebp - 0xb4]
call fcn.1000ddb0
push 0x79
lea ecx, [ebp - 0xb4]
call fcn.1000ddb0
push 0x2e
lea ecx, [ebp - 0xb4]
call fcn.1000ddb0
mov eax, dword [0x10069550]
mov ecx, 0x10069550
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0xb8], eax
push 0x7b
lea ecx, [ebp - 0xb8]
mov byte [ebp - 4], 0x1d
call fcn.1000ddb0
push 0x22
lea ecx, [ebp - 0xb8]
call fcn.1000ddb0
push 0x5b
lea ecx, [ebp - 0xb8]
call fcn.1000ddb0
push 0x67
lea ecx, [ebp - 0xb8]
call fcn.1000ddb0
push 0x6c
lea ecx, [ebp - 0xb8]
call fcn.1000ddb0
push 0x6f
lea ecx, [ebp - 0xb8]
call fcn.1000ddb0
push 0x62
lea ecx, [ebp - 0xb8]
call fcn.1000ddb0
push 0x61
lea ecx, [ebp - 0xb8]
call fcn.1000ddb0
push 0x6c
lea ecx, [ebp - 0xb8]
call fcn.1000ddb0
push 0x5d
lea ecx, [ebp - 0xb8]
call fcn.1000ddb0
push 0x22
lea ecx, [ebp - 0xb8]
call fcn.1000ddb0
push 0x3a
lea ecx, [ebp - 0xb8]
call fcn.1000ddb0
push 0x7b
lea ecx, [ebp - 0xb8]
call fcn.1000ddb0
push 0x22
lea ecx, [ebp - 0xb8]
call fcn.1000ddb0
push 0x63
lea ecx, [ebp - 0xb8]
call fcn.1000ddb0
push 0x75
lea ecx, [ebp - 0xb8]
call fcn.1000ddb0
push 0x72
lea ecx, [ebp - 0xb8]
call fcn.1000ddb0
push 0x72
lea ecx, [ebp - 0xb8]
call fcn.1000ddb0
push 0x65
lea ecx, [ebp - 0xb8]
call fcn.1000ddb0
push 0x6e
lea ecx, [ebp - 0xb8]
call fcn.1000ddb0
push 0x74
lea ecx, [ebp - 0xb8]
call fcn.1000ddb0
push 0x22
lea ecx, [ebp - 0xb8]
call fcn.1000ddb0
push 0x3a
lea ecx, [ebp - 0xb8]
call fcn.1000ddb0
push 0x22
lea ecx, [ebp - 0xb8]
call fcn.1000ddb0
mov eax, dword [ebp + 0x10]
xor ecx, ecx
mov edx, dword [eax - 0xc]
mov dword [ebp - 0xec], ecx
test edx, edx
jle 0x10050565
test ecx, ecx
js 0x1004e36d
cmp ecx, edx
jg 0x1004e36d
mov al, byte [ecx + eax]
mov byte [ebp - 0xbc], al
push dword [ebp - 0xbc]
lea ecx, [ebp - 0xb8]
call fcn.1000ddb0
mov ecx, dword [ebp - 0xec]
mov eax, dword [ebp + 0x10]
inc ecx
mov edx, dword [eax - 0xc]
mov dword [ebp - 0xec], ecx
cmp ecx, edx
jl 0x10050524
mov eax, dword [ebp - 0xb8]
mov ecx, dword [eax - 0xc]
mov dword [ebp - 0xbc], ecx
inc ecx
mov dword [ebp - 0xec], ecx
jns 0x10050587
push 0x80070057
call fcn.1000e050
mov ecx, dword [eax - 8]
sub ecx, dword [ebp - 0xec]
mov edx, 1
sub edx, dword [eax - 4]
or ecx, edx
jge 0x100505b3
push dword [ebp - 0xec]
lea ecx, [ebp - 0xb8]
call fcn.1000dfc0
mov eax, dword [ebp - 0xb8]
mov ecx, dword [ebp - 0xbc]
mov byte [eax + ecx], 0x22
mov ecx, dword [ebp - 0xec]
cmp ecx, dword [eax - 8]
jg 0x1004e36d
mov dword [eax - 0xc], ecx
mov byte [eax + ecx], 0
mov ecx, dword [eax - 0xc]
mov dword [ebp - 0xbc], ecx
inc ecx
mov dword [ebp - 0xec], ecx
jns 0x100505ef
push 0x80070057
call fcn.1000e050
mov ecx, dword [eax - 8]
sub ecx, dword [ebp - 0xec]
mov edx, 1
sub edx, dword [eax - 4]
or ecx, edx
jge 0x1005061b
push dword [ebp - 0xec]
lea ecx, [ebp - 0xb8]
call fcn.1000dfc0
mov eax, dword [ebp - 0xb8]
mov ecx, dword [ebp - 0xbc]
mov byte [eax + ecx], 0x2c
mov ecx, dword [ebp - 0xec]
cmp ecx, dword [eax - 8]
jg 0x1004e36d
mov dword [eax - 0xc], ecx
mov byte [eax + ecx], 0
mov ecx, dword [eax - 0xc]
mov dword [ebp - 0xbc], ecx
inc ecx
mov dword [ebp - 0xec], ecx
jns 0x10050657
push 0x80070057
call fcn.1000e050
mov ecx, dword [eax - 8]
sub ecx, dword [ebp - 0xec]
mov edx, 1
sub edx, dword [eax - 4]
or ecx, edx
jge 0x10050683
push dword [ebp - 0xec]
lea ecx, [ebp - 0xb8]
call fcn.1000dfc0
mov eax, dword [ebp - 0xb8]
mov ecx, dword [ebp - 0xbc]
mov byte [eax + ecx], 0x22
mov ecx, dword [ebp - 0xec]
cmp ecx, dword [eax - 8]
jg 0x1004e36d
mov dword [eax - 0xc], ecx
mov byte [eax + ecx], 0
push 0x68
lea ecx, [ebp - 0xb8]
call fcn.1000ddb0
push 0x61
lea ecx, [ebp - 0xb8]
call fcn.1000ddb0
push 0x73
lea ecx, [ebp - 0xb8]
call fcn.1000ddb0
push 0x68
lea ecx, [ebp - 0xb8]
call fcn.1000ddb0
push 0x22
lea ecx, [ebp - 0xb8]
call fcn.1000ddb0
push 0x3a
lea ecx, [ebp - 0xb8]
call fcn.1000ddb0
mov eax, dword [0x10069550]
mov ecx, 0x10069550
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0xbc], eax
mov eax, dword [ebp - 0x11c]
mov byte [ebp - 4], 0x1e
push dword [ebp - 0xb4]
push esi
push dword [eax + 0x10]
lea eax, [ebp - 0xbc]
push str._s_s_s
push eax
call fcn.1000c0d0
mov eax, dword [ebp - 0xbc]
push ecx
mov esi, esp
mov dword [esi + 0x14], 0xf
mov dword [esi + 0x10], 0
mov byte [esi], 0
cmp byte [eax], 0
jne 0x1005074f
xor edx, edx
jmp 0x1005076d
mov edx, eax
lea ecx, [edx + 1]
mov dword [ebp - 0xec], ecx
lea ebx, [ebx]
mov cl, byte [edx]
inc edx
test cl, cl
jne 0x10050760
sub edx, dword [ebp - 0xec]
push edx
push eax
mov ecx, esi
call fcn.1000e740
lea ecx, [ebp - 0xb0]
call fcn.1004c430
mov byte [ebp - 4], 0x1f
cmp dword [ebp - 0x9c], 0x10
lea eax, [ebp - 0xb0]
cmovae eax, dword [ebp - 0xb0]
push eax
push dword [ebp - 0xb8]
lea eax, [ebp - 0xe0]
push str._s__s_
push eax
call fcn.1000c0d0
add esp, 0x28
lea ecx, [ebp - 0x128]
push 0x10062040
call fcn.1000b510
mov byte [ebp - 4], 0x20
cmp dword [ebp - 0x9c], 0x10
lea eax, [ebp - 0xb0]
cmovae eax, dword [ebp - 0xb0]
push eax
lea eax, [ebp - 0x128]
push 0x10061d70
push eax
call fcn.1000c0d0
mov esi, dword [ebp - 0xf0]
add esp, 0xc
push esi
call dword [0x1006c918]
push 0
push 0x80
test eax, eax
je 0x10050825
push 5
push 0
push 0
push 0x40000000
push esi
call dword [sym.imp.KERNEL32.dll_CreateFileA]
mov edx, eax
mov dword [ebp - 0xec], edx
jmp 0x1005083f
push 1
push 0
push 0
push 0x40000000
push esi
call dword [sym.imp.KERNEL32.dll_CreateFileA]
mov edx, eax
mov dword [ebp - 0xec], eax
cmp dword [ebp - 0xf8], 0xffffffff
jne 0x10050c2c
mov byte [ebp - 4], 0x1f
mov edx, dword [ebp - 0x128]
add edx, 0xfffffff0
or ecx, 0xffffffff
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x10050870
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
cmp dword [ebp - 0x9c], 0x10
jb 0x10050887
push dword [ebp - 0xb0]
call fcn.1002501c
add esp, 4
mov byte [ebp - 4], 0x1d
mov edx, dword [ebp - 0xbc]
add edx, 0xfffffff0
mov dword [ebp - 0x9c], 0xf
mov dword [ebp - 0xa0], 0
mov byte [ebp - 0xb0], 0
lea eax, [edx + 0xc]
or ecx, 0xffffffff
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x100508c6
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 0x1c
mov edx, dword [ebp - 0xb8]
add edx, 0xfffffff0
or ecx, 0xffffffff
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x100508ea
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 0x1b
mov edx, dword [ebp - 0xb4]
add edx, 0xfffffff0
or ecx, 0xffffffff
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x1005090e
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 0x1a
mov edx, dword [ebp - 0xe8]
or ecx, 0xffffffff
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x1005092f
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
lea edx, [esi - 0x10]
mov byte [ebp - 4], 0x15
or esi, 0xffffffff
mov ecx, esi
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x1005094f
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
add edi, 0xfffffff0
mov ecx, esi
lea eax, [edi + 0xc]
mov byte [ebp - 4], 0x14
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x1005096c
mov ecx, dword [edi]
push edi
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 0x13
mov edx, dword [ebp - 0xcc]
add edx, 0xfffffff0
mov ecx, esi
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x1005098f
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 0x12
mov edx, dword [ebp - 0xd8]
add edx, 0xfffffff0
mov ecx, esi
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x100509b2
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 0x11
mov edx, dword [ebp - 0xd4]
add edx, 0xfffffff0
mov ecx, esi
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x100509d5
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 0x10
mov edx, dword [ebp - 0xdc]
add edx, 0xfffffff0
mov ecx, esi
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x100509f8
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 0xf
mov edx, dword [ebp - 0xe4]
add edx, 0xfffffff0
mov ecx, esi
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x10050a1b
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 0xe
mov edx, dword [ebp - 0xc4]
add edx, 0xfffffff0
mov ecx, esi
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x10050a3e
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
add ebx, 0xfffffff0
mov ecx, esi
lea eax, [ebx + 0xc]
mov byte [ebp - 4], 0xd
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x10050a5b
mov ecx, dword [ebx]
push ebx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 0xc
mov edx, dword [ebp - 0xc8]
add edx, 0xfffffff0
mov ecx, esi
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x10050a7e
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 0xb
mov edx, dword [ebp - 0xd0]
add edx, 0xfffffff0
mov ecx, esi
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x10050aa1
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 0xa
mov edx, dword [ebp - 0xe0]
add edx, 0xfffffff0
mov ecx, esi
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x10050ac4
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 9
mov edx, dword [ebp - 0x110]
add edx, 0xfffffff0
mov ecx, esi
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x10050ae7
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 8
mov edx, dword [ebp - 0x10c]
add edx, 0xfffffff0
mov ecx, esi
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x10050b0a
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp - 0x12c]
mov ecx, esi
lea eax, [edx + 0xc]
mov byte [ebp - 4], 7
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x10050b2a
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp - 0x130]
mov ecx, esi
lea eax, [edx + 0xc]
mov byte [ebp - 4], 6
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x10050b4a
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 5
mov edx, dword [ebp - 0x104]
add edx, 0xfffffff0
mov ecx, esi
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x10050b6d
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 4
mov edx, dword [ebp - 0x108]
add edx, 0xfffffff0
mov ecx, esi
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x10050b90
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 3
mov edx, dword [ebp + 0x10]
add edx, 0xfffffff0
mov ecx, esi
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x10050bb0
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 2
mov edx, dword [ebp + 0x14]
add edx, 0xfffffff0
mov ecx, esi
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x10050bd0
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 1
mov edx, dword [ebp + 0x18]
add edx, 0xfffffff0
mov ecx, esi
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x10050bf0
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 0
mov edx, dword [ebp + 0x1c]
add edx, 0xfffffff0
mov ecx, esi
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x10050c10
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov dword [ebp - 4], 0xffffffff
mov edx, dword [ebp + 0x20]
add edx, 0xfffffff0
lea eax, [edx + 0xc]
lock xadd dword [eax], esi
dec esi
test esi, esi
jmp 0x1004c5e4
mov eax, dword [ebp - 0xe0]
push 0
mov ecx, dword [eax - 0xc]
lea esi, [ebp - 0x120]
push esi
push ecx
push eax
push edx
mov dword [ebp - 0x120], 0
call dword [0x1006ca54]
test eax, eax
jne 0x10050cd1
call dword [sym.imp.KERNEL32.dll_GetLastError]
push 0
push 0
lea ecx, [ebp - 0x124]
push ecx
push 0x400
push eax
push 0
push 0x1300
call dword [sym.imp.KERNEL32.dll_FormatMessageA]
mov eax, dword [0x10069550]
mov ecx, 0x10069550
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0xf8], eax
mov byte [ebp - 4], 0x21
push dword [ebp - 0x124]
lea eax, [ebp - 0xf8]
push 0x10061d70
push eax
call fcn.1000c0d0
mov byte [ebp - 4], 0x20
mov edx, dword [ebp - 0xf8]
add edx, 0xfffffff0
add esp, 0xc
lea eax, [edx + 0xc]
or ecx, 0xffffffff
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x10050cd1
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
push dword [ebp - 0xec]
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov eax, dword [0x10069550]
mov ecx, 0x10069550
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0xf8], eax
mov eax, dword [ebp - 0x11c]
mov byte [ebp - 4], 0x22
push dword [eax + 0x1c]
push dword [eax + 0xc]
lea eax, [ebp - 0xf8]
push str._s_s
push eax
call fcn.1000c0d0
mov esi, dword [ebp - 0xf8]
add esp, 0x10
push esi
call dword [0x1006ca5c]
lea edx, [esi - 0x10]
or esi, 0xffffffff
mov byte [ebp - 4], 0x20
lea eax, [edx + 0xc]
mov ecx, esi
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x10050d44
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 0x1f
mov edx, dword [ebp - 0x128]
add edx, 0xfffffff0
mov ecx, esi
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x10050d67
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
cmp dword [ebp - 0x9c], 0x10
jb 0x10050d7e
push dword [ebp - 0xb0]
call fcn.1002501c
add esp, 4
mov byte [ebp - 4], 0x1d
mov edx, dword [ebp - 0xbc]
add edx, 0xfffffff0
mov dword [ebp - 0x9c], 0xf
mov dword [ebp - 0xa0], 0
mov byte [ebp - 0xb0], 0
lea eax, [edx + 0xc]
mov ecx, esi
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x10050dbc
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 0x1c
mov edx, dword [ebp - 0xb8]
add edx, 0xfffffff0
mov ecx, esi
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x10050ddf
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 0x1b
mov edx, dword [ebp - 0xb4]
add edx, 0xfffffff0
mov ecx, esi
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x10050e02
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 0x1a
mov edx, dword [ebp - 0xe8]
mov ecx, esi
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x10050e22
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 0x15
mov edx, dword [ebp - 0xf0]
add edx, 0xfffffff0
jmp 0x10050939