Function at 0x1000bf7b
Capabilities:
Create pipe
Get common file path

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x1005a54b
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
push ecx
sub esp, 0x45c
push ebx
push esi
push edi
mov dword [ebp - 0x10], esp
movzx eax, byte [ebp + 0x10]
test eax, eax
je 0x1000de23
lea eax, [ebp + 0xc]
mov dword [ebp - 0x270], eax
mov eax, dword [ebp + 0x18]
mov dword [ebp - 0x27c], eax
mov eax, dword [ebp + 8]
mov dword [ebp - 0x314], eax
mov eax, dword [ebp + 0x1c]
mov dword [ebp - 0x2bc], eax
mov eax, dword [ebp + 0x14]
mov dword [ebp - 0x284], eax
mov eax, dword [ebp - 0x270]
movzx eax, byte [eax]
test eax, eax
je 0x1000dde1
mov eax, dword [ebp - 0x2bc]
mov dword [ebp - 0x1fc], eax
mov eax, dword [ebp - 0x314]
mov dword [ebp - 0x20c], eax
mov eax, dword [0x10075440]
and eax, 1
jne 0x1000c036
mov eax, dword [0x10075440]
or eax, 1
mov dword [0x10075440], eax
and dword [ebp - 4], 0
mov ecx, 0x100754d8
call fcn.10019979
push 0x1005b219
call fcn.100419dc
pop ecx
or dword [ebp - 4], 0xffffffff
push dword [ebp - 0x1fc]
lea ecx, [ebp - 0x34c]
call fcn.10007d45
mov dword [ebp - 4], 1
lea eax, [ebp - 0x3cc]
push eax
lea ecx, [ebp - 0x34c]
call fcn.10006c0b
push dword [eax]
lea eax, [ebp - 0x3bc]
push eax
lea ecx, [ebp - 0x34c]
call fcn.10006c1f
push dword [eax]
lea eax, [ebp - 0x418]
push eax
lea ecx, [ebp - 0x34c]
call fcn.10006c0b
push dword [eax]
mov edx, 0x100080d2
lea ecx, [ebp - 0x384]
call fcn.1001c0ee
add esp, 0xc
mov dword [ebp - 0x31c], 0x26df
cmp dword [ebp - 0x31c], 0xcf2
jge 0x1000c2c3
push str._30_QWERTYUIOP__ASDFGHJKL_ZXCVBNM_._
lea ecx, [ebp - 0x364]
call fcn.10001a90
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x364]
call fcn.10001e4d
mov dword [ebp - 0xf8], eax
lea ecx, [ebp - 0x234]
call fcn.10019a5c
mov byte [ebp - 4], 3
mov dword [ebp - 0x28], 1
jmp 0x1000c0fb
mov eax, dword [ebp - 0x28]
inc eax
mov dword [ebp - 0x28], eax
mov eax, dword [ebp - 0x28]
cmp eax, dword [ebp - 0xf8]
jge 0x1000c17d
push dword [ebp - 0x28]
lea ecx, [ebp - 0x364]
call fcn.100027fe
movsx eax, byte [eax]
cmp eax, 0x51
je 0x1000c178
push dword [ebp - 0x28]
lea ecx, [ebp - 0x364]
call fcn.100027fe
movsx eax, byte [eax]
cmp eax, 0x41
je 0x1000c178
push dword [ebp - 0x28]
lea ecx, [ebp - 0x364]
call fcn.100027fe
movsx eax, byte [eax]
cmp eax, 0x5a
je 0x1000c178
push dword [ebp - 0x28]
lea ecx, [ebp - 0x364]
call fcn.100027fe
push eax
lea ecx, [ebp - 0x234]
call fcn.10019a71
mov esi, eax
mov eax, dword [ebp - 0x28]
dec eax
push eax
lea ecx, [ebp - 0x364]
call fcn.100027fe
mov al, byte [eax]
mov byte [esi], al
jmp 0x1000c0f4
lea ecx, [ebp - 0x40c]
call fcn.10001a7f
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x108]
call fcn.10019afc
lea edx, [ebp - 0x40c]
mov ecx, 0x10073f58
call fcn.1001c1cd
mov dword [ebp - 0x19c], eax
mov eax, dword [ebp - 0x19c]
mov eax, dword [eax]
mov ecx, dword [ebp - 0x19c]
add ecx, dword [eax + 4]
call fcn.10007e9a
movzx eax, al
test eax, eax
je 0x1000c296
lea ecx, [ebp - 0x40c]
call fcn.10001e4d
mov dword [ebp - 0xf8], eax
and dword [ebp - 0x70], 0
jmp 0x1000c1ec
mov eax, dword [ebp - 0x70]
inc eax
mov dword [ebp - 0x70], eax
mov eax, dword [ebp - 0x70]
cmp eax, dword [ebp - 0xf8]
jge 0x1000c282
push dword [ebp - 0x70]
lea ecx, [ebp - 0x40c]
call fcn.100027fe
push eax
lea eax, [ebp - 0x3ec]
push eax
lea ecx, [ebp - 0x234]
call fcn.10019ac2
mov eax, dword [eax]
mov dword [ebp - 0x108], eax
lea eax, [ebp - 0x3d4]
push eax
lea ecx, [ebp - 0x234]
call fcn.10019a30
push eax
lea ecx, [ebp - 0x108]
call fcn.10019800
movzx eax, al
test eax, eax
je 0x1000c263
lea ecx, [ebp - 0x108]
call fcn.10019b02
mov dl, byte [eax + 1]
mov ecx, 0x10073e38
call fcn.1001c1f2
jmp 0x1000c27d
push dword [ebp - 0x70]
lea ecx, [ebp - 0x40c]
call fcn.100027fe
mov dl, byte [eax]
mov ecx, 0x10073e38
call fcn.1001c1f2
jmp 0x1000c1e5
push fcn.1001c19b
mov ecx, 0x10073e38
call fcn.10019432
jmp 0x1000c197
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x40c]
call fcn.10001abf
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x234]
call fcn.10019846
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x364]
call fcn.10001abf
mov dword [ebp - 0x34], 0xfffffffe
mov dword [ebp - 0x250], 0x9b76eea5
mov dword [ebp - 0x214], 0xffffffff
mov dword [ebp - 0x44], 0xd68c
mov dword [ebp - 0xfc], 0x7f45b6d4
mov dword [ebp - 0x104], 0xa6575e0a
mov dword [ebp - 0x2f8], 0x6636227f
mov dword [ebp - 0x34], 0
jmp 0x1000c313
mov eax, dword [ebp - 0x34]
inc eax
mov dword [ebp - 0x34], eax
cmp dword [ebp - 0x34], 6
jle 0x1000c8ee
mov dword [ebp - 0x22c], 0x72d0
mov dword [ebp - 0x300], str.hogiipoy_eyvesvn_fapkj_ozi_ksshk
cmp dword [ebp - 0x22c], 0x7624
jle 0x1000c429
and dword [ebp - 0xac], 0
jmp 0x1000c357
mov eax, dword [ebp - 0xac]
inc eax
mov dword [ebp - 0xac], eax
cmp dword [ebp - 0xac], 0x468a
jge 0x1000c41c
and dword [ebp - 0xf4], 0
jmp 0x1000c37d
mov eax, dword [ebp - 0xf4]
inc eax
mov dword [ebp - 0xf4], eax
cmp dword [ebp - 0xf4], 0x79b
jge 0x1000c417
and dword [ebp - 0xe0], 0
jmp 0x1000c3a3
mov eax, dword [ebp - 0xe0]
inc eax
mov dword [ebp - 0xe0], eax
cmp dword [ebp - 0xe0], 0x4ee
jge 0x1000c412
and dword [ebp - 0xe8], 0
jmp 0x1000c3c5
mov eax, dword [ebp - 0xe8]
inc eax
mov dword [ebp - 0xe8], eax
cmp dword [ebp - 0xe8], 0x1511
jge 0x1000c410
mov eax, dword [ebp - 0xac]
imul eax, dword [ebp - 0xf4]
imul eax, dword [ebp - 0xe0]
sub eax, dword [ebp - 0xe8]
cdq
mov dword [ebp - 0x2c8], eax
mov dword [ebp - 0x2c4], edx
push dword [ebp - 0x2c4]
push dword [ebp - 0x2c8]
mov ecx, 0x10073e38
call fcn.10001ae9
jmp 0x1000c3b8
jmp 0x1000c396
jmp 0x1000c370
jmp 0x1000c34a
push 0xfca
push 0
call dword [sym.imp.KERNEL32.dll_GetWindowsDirectoryA]
mov dword [ebp - 0x110], 0xfffffff7
mov byte [ebp - 4], 5
cmp dword [ebp - 0x22c], 0x710a
jge 0x1000c453
mov edx, dword [ebp - 0x300]
mov ecx, 0x10073e38
call fcn.100034b8
jmp 0x1000c46f
mov dword [ebp - 4], 1
jmp 0x1000c47f
mov dword [ebp - 0x74], 0xffffffff
mov dword [ebp - 0x130], 0
mov dword [ebp - 0x10c], 0
mov dword [ebp - 0x2c0], 0xffffffff
push 0x2499
lea eax, [ebp - 0x130]
push eax
push 0x21e3
lea eax, [ebp - 0x74]
push eax
lea eax, [ebp - 0x250]
push eax
lea eax, [ebp - 0x110]
push eax
lea eax, [ebp - 0x10c]
push eax
lea eax, [ebp - 0xfc]
push eax
lea eax, [ebp - 0x34]
push eax
push 0x41f9
push 0x3c47
push 0x575e
push 1
lea eax, [ebp - 0x44]
push eax
push 1
push 0x14c9
lea eax, [ebp - 0x214]
push eax
call fcn.1000a478
add esp, 0x44
mov dword [ebp - 0x74], 0
jmp 0x1000c514
mov eax, dword [ebp - 0x74]
inc eax
mov dword [ebp - 0x74], eax
cmp dword [ebp - 0x74], 0x2e
je 0x1000c8e9
mov dword [ebp - 0x114], 0xffffffff
mov dword [ebp - 0x258], 0xffffffff
mov dword [ebp - 0x1f8], 0x694a98a1
mov dword [ebp - 0x220], 0xa78
mov dword [ebp - 0x2b8], str.oihw_seozj_xvfjeoulr_yuvcukio_ecw_fbgiig_mzf_mnpabah_lgyf_jun_gzk_vgmxit_syjunhnjy
cmp dword [ebp - 0x220], 0xb79
jle 0x1000c696
push 0
push 0x246
push 0x1a7a
push 0x8ed
push 0xd1c
push 0x16de
push 0x1a8c
push 0
call dword [sym.imp.KERNEL32.dll_CreateNamedPipeA]
and dword [ebp - 0xa4], 0
jmp 0x1000c59e
mov eax, dword [ebp - 0xa4]
inc eax
mov dword [ebp - 0xa4], eax
cmp dword [ebp - 0xa4], 0x41dc
jge 0x1000c696
and dword [ebp - 0xc8], 0
jmp 0x1000c5c4
mov eax, dword [ebp - 0xc8]
inc eax
mov dword [ebp - 0xc8], eax
cmp dword [ebp - 0xc8], 0x519f
jge 0x1000c691
and dword [ebp - 0x98], 0
jmp 0x1000c5ea
mov eax, dword [ebp - 0x98]
inc eax
mov dword [ebp - 0x98], eax
cmp dword [ebp - 0x98], 0x729c
jge 0x1000c68c
and dword [ebp - 0xcc], 0
jmp 0x1000c610
mov eax, dword [ebp - 0xcc]
inc eax
mov dword [ebp - 0xcc], eax
cmp dword [ebp - 0xcc], 0x29c3
jge 0x1000c687
mov eax, dword [ebp - 0xa4]
cdq
idiv dword [ebp - 0xc8]
add edx, dword [ebp - 0x98]
mov ecx, dword [ebp - 0xcc]
sar edx, cl
mov eax, edx
cdq
mov dword [ebp - 0x2d4], eax
mov dword [ebp - 0x2d0], edx
push dword [ebp - 0x2d0]
push dword [ebp - 0x2d4]
lea ecx, [ebp - 0x454]
call fcn.10001a21
pop ecx
pop ecx
mov dword [ebp - 0x2b4], eax
mov ecx, dword [ebp - 0x2b4]
call fcn.10001ac9
push eax
call fcn.10041a06
pop ecx
lea ecx, [ebp - 0x454]
call fcn.10001abf
jmp 0x1000c603
jmp 0x1000c5dd
jmp 0x1000c5b7
jmp 0x1000c591
mov dword [ebp - 0xb4], 0
jmp 0x1000c6af
mov eax, dword [ebp - 0xb4]
inc eax
mov dword [ebp - 0xb4], eax
cmp dword [ebp - 0xb4], 2
jge 0x1000c6cb
mov eax, dword [ebp - 0xb4]
mov dword [ebp + eax*4 - 0x324], 0x669d
jmp 0x1000c6a2
mov byte [ebp - 4], 7
cmp dword [ebp - 0x220], 0x7ac
jge 0x1000c6e7
push dword [ebp - 0x2b8]
call fcn.10041a06
pop ecx
jmp 0x1000c703
mov dword [ebp - 4], 1
jmp 0x1000c713
lea eax, [ebp - 0x10c]
push eax
lea eax, [ebp - 0xfc]
push eax
lea eax, [ebp - 0x130]
push eax
lea eax, [ebp - 0x1f8]
push eax
lea eax, [ebp - 0x34]
push eax
push 0x5777
push 0x3550
push 0x176e
lea eax, [ebp - 0x258]
push eax
push 1
push 0x2dfa
lea eax, [ebp - 0x104]
push eax
push 0x56f1
push 1
lea eax, [ebp - 0x214]
push eax
lea eax, [ebp - 0x114]
push eax
lea eax, [ebp - 0x110]
push eax
push 0
call fcn.100184c3
add esp, 0x48
cmp dword [ebp - 0x110], 0x634c5d19
jl 0x1000c795
mov dword [ebp - 0x1b8], 1
jmp 0x1000c79c
and dword [ebp - 0x1b8], 0
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x324], 0
jne 0x1000c7be
cmp dword [ebp - 0x10c], 0
jne 0x1000c7be
and dword [ebp - 0x228], 0
jmp 0x1000c7c8
mov dword [ebp - 0x228], 1
mov eax, dword [ebp - 0x44]
imul eax, dword [ebp - 0x228]
test eax, eax
jne 0x1000c7e4
xor eax, eax
inc eax
jne 0x1000c7e4
and dword [ebp - 0x138], 0
jmp 0x1000c7ee
mov dword [ebp - 0x138], 1
mov eax, dword [ebp - 0x114]
cmp dword [ebp - 0x138], eax
jl 0x1000c808
mov dword [ebp - 0x140], 1
jmp 0x1000c80f
and dword [ebp - 0x140], 0
mov eax, dword [ebp - 0x1b8]
cmp eax, dword [ebp - 0x140]
jle 0x1000c82f
cmp dword [ebp - 0x1f8], 0
jne 0x1000c82f
and dword [ebp - 0x148], 0
jmp 0x1000c839
mov dword [ebp - 0x148], 1
cmp dword [ebp - 0x148], 0xccb1
jle 0x1000c851
mov dword [ebp - 0x1c0], 1
jmp 0x1000c858
and dword [ebp - 0x1c0], 0
cmp dword [ebp - 0x1c0], 0x2b1956a7
jle 0x1000c870
mov dword [ebp - 0x150], 1
jmp 0x1000c877
and dword [ebp - 0x150], 0
mov eax, dword [ebp - 0x104]
cmp dword [ebp - 0x150], eax
jle 0x1000c891
mov dword [ebp - 0x218], 1
jmp 0x1000c898
and dword [ebp - 0x218], 0
mov eax, dword [ebp - 0x2f8]
cmp dword [ebp - 0x218], eax
jle 0x1000c8b2
mov dword [ebp - 0x260], 1
jmp 0x1000c8b9
and dword [ebp - 0x260], 0
mov eax, dword [ebp - 0x104]
mov dword [ebp - 0x3a8], eax
mov eax, dword [ebp - 0x114]
mov dword [ebp - 0x3d0], eax
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x324]
mov dword [ebp - 0x2c0], eax
jmp 0x1000c50d
jmp 0x1000c30c
mov dword [ebp - 0x44], 0xfffffffc
jmp 0x1000c8fe
mov eax, dword [ebp - 0x44]
inc eax
mov dword [ebp - 0x44], eax
cmp dword [ebp - 0x44], 0x21
jg 0x1000c959
mov dword [ebp - 0x268], 0
mov byte [ebp - 0x39], 0
lea eax, [ebp - 0x39]
push eax
push 0x3f1e
push 0
push 0x2390
push 0x7aa1
call fcn.1000deb1
add esp, 0x14
lea eax, [ebp - 0xfc]
push eax
lea eax, [ebp - 0x268]
push eax
lea eax, [ebp - 0x34]
push eax
push 0x2b17
push 1
push 0x7655
push 0
call fcn.1000f1e8
add esp, 0x1c
jmp 0x1000c8f7
lea ecx, [ebp - 0x34c]
call fcn.1000805d
mov dword [ebp - 0x204], eax
movzx eax, byte [0x10074f86]
test eax, eax
je 0x1000cd2f
mov ecx, 0x100754d8
call fcn.10019a3e
movzx eax, al
test eax, eax
jne 0x1000cd2f
mov dword [ebp - 0x1c], 0xb4ffb87
mov dword [ebp - 0x21c], 0xfffffffa
mov dword [ebp - 0x1d8], 0
mov dword [ebp - 0xd4], 0
jmp 0x1000c9c2
mov eax, dword [ebp - 0xd4]
inc eax
mov dword [ebp - 0xd4], eax
cmp dword [ebp - 0xd4], 1
jge 0x1000c9db
mov eax, dword [ebp - 0xd4]
mov dword [ebp + eax*4 - 0x48], 8
jmp 0x1000c9b5
mov byte [ebp - 0x38], 0
lea eax, [ebp - 0x38]
push eax
push 0
push 0x6a0f
push 0x43ec
push 0x3c5
call fcn.1001846c
add esp, 0x14
mov dword [ebp - 0x1c], 0
jmp 0x1000ca0c
mov eax, dword [ebp - 0x1c]
inc eax
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 0
jg 0x1000cc27
mov dword [ebp - 0x30], 0
mov dword [ebp - 0x2cc], 0xfffffffe
mov dword [ebp - 0x30], 0
jmp 0x1000ca37
mov eax, dword [ebp - 0x30]
dec eax
mov dword [ebp - 0x30], eax
cmp dword [ebp - 0x30], 0
jl 0x1000cc22
mov dword [ebp - 0x168], 0x401dbdae
mov dword [ebp - 0x248], 1
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp + eax*4 - 0x48]
cmp eax, dword [ebp - 0x30]
jl 0x1000ca6d
mov dword [ebp - 0x158], 1
jmp 0x1000ca74
and dword [ebp - 0x158], 0
cmp dword [ebp - 0x158], 0x3531
jl 0x1000ca8c
mov dword [ebp - 0x1c8], 1
jmp 0x1000ca93
and dword [ebp - 0x1c8], 0
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp + eax*4 - 0x48]
cmp eax, dword [ebp - 0x1c8]
jg 0x1000caae
mov dword [ebp - 0x310], 1
jmp 0x1000cab5
and dword [ebp - 0x310], 0
cmp dword [ebp - 0x1c], 0
jl 0x1000cac7
mov dword [ebp - 0x160], 1
jmp 0x1000cace
and dword [ebp - 0x160], 0
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp + eax*4 - 0x48]
cmp dword [ebp - 0x160], eax
je 0x1000cae9
mov dword [ebp - 0x200], 1
jmp 0x1000caf0
and dword [ebp - 0x200], 0
mov eax, dword [ebp - 0x200]
mov dword [ebp - 0x168], eax
cmp dword [ebp - 0x168], 0xbc9b780f
jae 0x1000cb14
mov dword [ebp - 0x1d0], 1
jmp 0x1000cb1b
and dword [ebp - 0x1d0], 0
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp + eax*4 - 0x48]
imul eax, dword [ebp - 0x1d0]
cmp eax, dword [ebp - 0x30]
jle 0x1000cb3a
mov dword [ebp - 0x170], 1
jmp 0x1000cb41
and dword [ebp - 0x170], 0
mov eax, dword [ebp - 0x170]
mov dword [ebp - 0x21c], eax
mov eax, dword [ebp - 0x21c]
mov dword [ebp - 0x3d8], eax
xor eax, eax
add eax, 0xfffffffb
jne 0x1000cb72
mov eax, 0x938f
test eax, eax
jne 0x1000cb72
and dword [ebp - 0x178], 0
jmp 0x1000cb7c
mov dword [ebp - 0x178], 1
mov eax, dword [ebp - 0x178]
mov dword [ebp - 0x1d8], eax
mov eax, dword [ebp - 0x1d8]
sub eax, 6
cmp eax, dword [ebp - 0x30]
jle 0x1000cba2
mov dword [ebp - 0x180], 1
jmp 0x1000cba9
and dword [ebp - 0x180], 0
mov eax, dword [ebp - 0x1c]
imul ecx, dword [ebp - 0x180], 0xfffa
cmp ecx, dword [ebp + eax*4 - 0x48]
je 0x1000cbc8
mov dword [ebp - 0x208], 1
jmp 0x1000cbcf
and dword [ebp - 0x208], 0
mov eax, dword [ebp - 0x30]
cmp dword [ebp - 0x208], eax
jle 0x1000cbe6
mov dword [ebp - 0x188], 1
jmp 0x1000cbed
and dword [ebp - 0x188], 0
mov eax, dword [ebp - 0x1c]
cmp dword [ebp - 0x188], eax
jle 0x1000cc04
mov dword [ebp - 0x1e0], 1
jmp 0x1000cc0b
and dword [ebp - 0x1e0], 0
mov eax, dword [ebp - 0x248]
add eax, dword [ebp - 0x1e0]
mov dword [ebp - 0x2cc], eax
jmp 0x1000ca30
jmp 0x1000ca05
lea eax, [ebp - 0x204]
push eax
lea eax, [ebp - 0x190]
push eax
mov ecx, 0x100754d8
call fcn.10019a47
lea eax, [ebp - 0x3e0]
push eax
mov ecx, 0x100754d8
call fcn.10019a30
push eax
lea ecx, [ebp - 0x190]
call fcn.10019800
movzx eax, al
test eax, eax
je 0x1000cd2f
mov dword [ebp - 0x2d8], 0x9570a50b
mov dword [ebp - 0x280], 0x78e0
mov dword [ebp - 0x278], 0xe2cf4565
mov dword [ebp - 0x2e8], 0xfffffffa
mov dword [ebp - 0x288], 0
mov dword [ebp - 0x3e8], 9
push 0x6581
push 0
lea eax, [ebp - 0x278]
push eax
push 0x5be6
lea eax, [ebp - 0x2e8]
push eax
lea eax, [ebp - 0x280]
push eax
push 0x3257
push 1
lea eax, [ebp - 0x2d8]
push eax
lea eax, [ebp - 0x288]
push eax
push 0x61b0
call fcn.1000acd0
add esp, 0x2c
mov byte [ebp - 0x35], 0
movzx eax, byte [ebp - 0x35]
test eax, eax
je 0x1000cd05
push 1
push 1
push 1
push 0x65a2
call fcn.1000b28e
add esp, 0x10
lea ecx, [ebp - 0x190]
call fcn.10019b08
mov ecx, dword [ebp - 0x20c]
mov eax, dword [eax + 4]
mov dword [ecx], eax
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x34c]
call fcn.10006c01
jmp 0x1000de6f
mov dword [ebp - 0x1a8], 0xfffffff6
mov dword [ebp - 0x12c], 0xe125d16d
mov dword [ebp - 0x2ec], 0x9f4288a1
mov dword [ebp - 0x210], 0xf782a183
mov dword [ebp - 0x3f0], 0xffffffff
mov dword [ebp - 0x414], 0x1dfe4b28
mov dword [ebp - 0x41c], 0xffffffff
mov dword [ebp - 0x2e4], 0xcb61d225
mov dword [ebp - 0x198], 0
mov dword [ebp - 0x290], 0xdfec
mov dword [ebp - 0xbc], 0
jmp 0x1000cdac
mov eax, dword [ebp - 0xbc]
inc eax
mov dword [ebp - 0xbc], eax
cmp dword [ebp - 0xbc], 3
jge 0x1000cdc8
mov eax, dword [ebp - 0xbc]
mov dword [ebp + eax*4 - 0x3b8], 0xfffffffe
jmp 0x1000cd9f
push 1
lea eax, [ebp - 0x198]
push eax
push 0x6aa8
push 1
push 0x20ee
push 0x62fc
call fcn.1000aa51
add esp, 0x18
cmp dword [ebp - 0x2ec], 0
jne 0x1000ceab
mov eax, dword [ebp - 0x290]
cmp eax, dword [ebp - 0x1a8]
je 0x1000ce11
mov dword [ebp - 0x224], 1
jmp 0x1000ce18
and dword [ebp - 0x224], 0
mov eax, dword [ebp - 0x224]
add eax, 3
imul eax, dword [ebp - 0x198]
cmp eax, 0x3927
je 0x1000ce3b
mov dword [ebp - 0x1e8], 1
jmp 0x1000ce42
and dword [ebp - 0x1e8], 0
mov eax, dword [ebp - 0x12c]
cmp eax, dword [ebp - 0x1e8]
jl 0x1000ce5c
mov dword [ebp - 0x1a0], 1
jmp 0x1000ce63
and dword [ebp - 0x1a0], 0
mov eax, dword [ebp - 0x1a0]
mov dword [ebp - 0x210], eax
cmp dword [ebp - 0x210], 0
jne 0x1000ce8a
cmp dword [ebp - 0x2e4], 0
jne 0x1000ce8a
and dword [ebp - 0x1f0], 0
jmp 0x1000ce94
mov dword [ebp - 0x1f0], 1
mov eax, dword [ebp - 0x1a8]
cmp eax, dword [ebp - 0x1f0]
jge 0x1000ceab
and dword [ebp - 0x1b0], 0
jmp 0x1000ceb5
mov dword [ebp - 0x1b0], 1
cmp dword [ebp - 0x1b0], 0xfffe
je 0x1000cecd
mov dword [ebp - 0x134], 1
jmp 0x1000ced4
and dword [ebp - 0x134], 0
mov eax, dword [ebp - 0x12c]
cmp dword [ebp - 0x134], eax
je 0x1000ceee
mov dword [ebp - 0x13c], 1
jmp 0x1000cef5
and dword [ebp - 0x13c], 0
mov eax, dword [ebp - 0x13c]
add eax, 7
push 4
pop ecx
shl ecx, 1
mov dword [ebp + ecx - 0x3b8], eax
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0x3b8], 0
je 0x1000cfd4
mov dword [ebp - 0x2f4], 0xfffffff6
mov dword [ebp - 0x298], 1
push 1
push 0x4192
lea eax, [ebp - 0x298]
push eax
lea eax, [ebp - 0x2f4]
push eax
push 1
push 0
push 0x64f5
call fcn.1000bf7b
add esp, 0x1c
mov dword [ebp - 0x2a0], 0x19f4
cmp dword [ebp - 0x2a0], 0x1243
jge 0x1000cfd2
lea eax, [ebp - 0x2fc]
push eax
mov ecx, 0x10073f58
call fcn.1001912e
mov dword [ebp - 0xdc], 1
jmp 0x1000cf97
mov eax, dword [ebp - 0xdc]
inc eax
mov dword [ebp - 0xdc], eax
mov eax, dword [ebp - 0xdc]
cmp eax, dword [ebp - 0x2fc]
jg 0x1000cfc3
push dword [ebp - 0xdc]
mov ecx, 0x10073e38
call fcn.1001943e
mov edx, 0x10063888
mov ecx, eax
call fcn.100034b8
jmp 0x1000cf8a
push fcn.1001c19b
mov ecx, 0x10073e38
call fcn.10019432
jmp 0x1000d026
mov dword [ebp - 0x2a8], 5
mov dword [ebp - 0xc4], 0
jmp 0x1000cff7
mov eax, dword [ebp - 0xc4]
inc eax
mov dword [ebp - 0xc4], eax
cmp dword [ebp - 0xc4], 2
jge 0x1000d013
mov eax, dword [ebp - 0xc4]
mov dword [ebp + eax*4 - 0x38c], 0xb6f
jmp 0x1000cfea
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x38c]
mov dword [ebp - 0x2a8], eax
and dword [ebp - 0x40], 0
mov dword [ebp - 0x2f0], 0xffffffff
mov dword [ebp - 0x390], 0
mov dword [ebp - 0x3a0], 7
push 0x5c4c
lea eax, [ebp - 0x2f0]
push eax
push 0
call fcn.100181ec
add esp, 0xc
lea eax, [ebp - 0x34c]
push eax
call fcn.1000a40d
pop ecx
mov dword [ebp - 0x40], eax
cmp dword [ebp - 0x40], 0
jne 0x1000dc28
mov dword [ebp - 0x20], 0x81c2900
mov dword [ebp - 0x2c], 4
cmp dword [ebp - 0x20], 0
jne 0x1000d09e
mov eax, 0x52bf3388
test eax, eax
jne 0x1000d09e
and dword [ebp - 0x144], 0
jmp 0x1000d0a8
mov dword [ebp - 0x144], 1
cmp dword [ebp - 0x144], 0xffffffff
jg 0x1000d0bd
mov dword [ebp - 0x14c], 1
jmp 0x1000d0c4
and dword [ebp - 0x14c], 0
mov eax, dword [ebp - 0x20]
cmp dword [ebp - 0x14c], eax
je 0x1000d0db
mov dword [ebp - 0x154], 1
jmp 0x1000d0e2
and dword [ebp - 0x154], 0
cmp dword [ebp - 0x154], 0x23cc
jle 0x1000d0fa
mov dword [ebp - 0x15c], 1
jmp 0x1000d101
and dword [ebp - 0x15c], 0
cmp dword [ebp - 0x15c], 0
jne 0x1000d116
mov dword [ebp - 0x164], 1
jmp 0x1000d11d
and dword [ebp - 0x164], 0
mov eax, dword [ebp - 0x20]
sub eax, dword [ebp - 0x164]
cmp eax, dword [ebp - 0x20]
jl 0x1000d137
mov dword [ebp - 0x16c], 1
jmp 0x1000d13e
and dword [ebp - 0x16c], 0
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x16c]
lea eax, [eax + ecx - 1]
cmp dword [ebp - 0x20], eax
jg 0x1000d15c
mov dword [ebp - 0x2b0], 1
jmp 0x1000d163
and dword [ebp - 0x2b0], 0
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x410], eax
mov eax, dword [ebp - 0x2c]
mov dword [ebp - 0x2c], eax
cmp dword [ebp - 0x2c], 0
je 0x1000d31f
mov dword [ebp - 0x174], 0xfffffffc
mov dword [ebp - 0xe4], 0
jmp 0x1000d19f
mov eax, dword [ebp - 0xe4]
inc eax
mov dword [ebp - 0xe4], eax
cmp dword [ebp - 0xe4], 3
jge 0x1000d1bb
mov eax, dword [ebp - 0xe4]
mov dword [ebp + eax*4 - 0x30c], 0xffffffff
jmp 0x1000d192
mov dword [ebp - 0x20], 0
jmp 0x1000d1cb
mov eax, dword [ebp - 0x20]
inc eax
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 2
jg 0x1000d31a
mov dword [ebp - 0x18c], 0xfffffffc
mov dword [ebp - 0x318], 0xffff
mov dword [ebp - 0xec], 0
jmp 0x1000d202
mov eax, dword [ebp - 0xec]
inc eax
mov dword [ebp - 0xec], eax
cmp dword [ebp - 0xec], 2
jge 0x1000d21e
mov eax, dword [ebp - 0xec]
mov dword [ebp + eax*4 - 0x398], 1
jmp 0x1000d1f5
mov byte [ebp - 0x36], 0
push 0x32d7
push 0x7126
lea eax, [ebp - 0x36]
push eax
push 0x32b7
push 0x122e
push 0
call fcn.1000f092
add esp, 0x18
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x30c]
mov dword [ebp - 0x39c], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x398]
mov dword [ebp - 0x174], eax
cmp dword [ebp - 0x174], 0
jne 0x1000d28c
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x30c], 0
jne 0x1000d28c
and dword [ebp - 0x17c], 0
jmp 0x1000d296
mov dword [ebp - 0x17c], 1
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x30c], 1
jne 0x1000d2b5
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0x30c], 0
jne 0x1000d2ce
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x30c], 0
jne 0x1000d2ce
and dword [ebp - 0x184], 0
jmp 0x1000d2d8
mov dword [ebp - 0x184], 1
mov eax, dword [ebp - 0x17c]
add eax, dword [ebp - 0x184]
mov dword [ebp - 0x18c], eax
cmp dword [ebp - 0x18c], 0x2452a2c7
jg 0x1000d302
mov dword [ebp - 0x194], 1
jmp 0x1000d309
and dword [ebp - 0x194], 0
mov eax, dword [ebp - 0x194]
mov dword [ebp - 0x318], eax
jmp 0x1000d1c4
jmp 0x1000d3de
mov dword [ebp - 0x100], 7
mov dword [ebp - 0xd0], 0
jmp 0x1000d342
mov eax, dword [ebp - 0xd0]
inc eax
mov dword [ebp - 0xd0], eax
cmp dword [ebp - 0xd0], 2
jge 0x1000d35e
mov eax, dword [ebp - 0xd0]
mov dword [ebp + eax*4 - 0x424], 0x7b6a
jmp 0x1000d335
cmp dword [ebp - 0x100], 0
jne 0x1000d370
cmp dword [ebp - 0x100], 0
je 0x1000d3a5
mov dword [ebp - 0x2c], 0
jmp 0x1000d380
mov eax, dword [ebp - 0x2c]
inc eax
mov dword [ebp - 0x2c], eax
cmp dword [ebp - 0x2c], 1
jg 0x1000d3a3
push 1
push 1
push 0x5049
push 0x5975
push 0x1c0f
call fcn.1000b4ab
add esp, 0x14
jmp 0x1000d379
jmp 0x1000d3c2
push 1
push 1
push 0x1406
push 0x2b82
push 1
push 0x44f8
call fcn.1000b562
add esp, 0x18
push 0
push 1
lea eax, [ebp - 0x100]
push eax
push 0x451
lea eax, [ebp - 0x2c]
push eax
call fcn.1000b4ab
add esp, 0x14
cmp dword [0x10074f80], 0
jne 0x1000d85e
mov byte [ebp - 0x94], 1
mov byte [ebp - 0x93], 0xfa
mov byte [ebp - 0x92], 5
mov byte [ebp - 0x91], 9
mov byte [ebp - 0x90], 4
mov byte [ebp - 0x8f], 0x91
mov byte [ebp - 0x8e], 0xb1
mov byte [ebp - 0x8d], 0xd0
mov byte [ebp - 0x8c], 0x91
mov byte [ebp - 0x8b], 8
mov byte [ebp - 0x8a], 0x42
mov byte [ebp - 0x89], 7
mov byte [ebp - 0x88], 0x1c
mov byte [ebp - 0x87], 6
mov byte [ebp - 0x86], 1
mov byte [ebp - 0x85], 2
mov byte [ebp - 0x84], 0x41
mov byte [ebp - 0x83], 0
mov byte [ebp - 0x82], 0x39
mov byte [ebp - 0x81], 0xb
mov byte [ebp - 0x80], 0x27
mov byte [ebp - 0x7f], 9
mov byte [ebp - 0x7e], 8
mov byte [ebp - 0x7d], 3
mov byte [ebp - 0x7c], 0xa
mov byte [ebp - 0x7b], 0xa
mov byte [ebp - 0x7a], 2
mov byte [ebp - 0x79], 4
mov byte [ebp - 0x78], 9
xor eax, eax
inc eax
shl eax, 0
movzx eax, byte [ebp + eax - 0x94]
and eax, 0x9f
xor ecx, ecx
inc ecx
shl ecx, 0
movzx ecx, byte [ebp + ecx - 0x94]
or ecx, 0x9f
sub ecx, eax
xor eax, eax
inc eax
imul eax, eax, 0
movzx eax, byte [ebp + eax - 0x94]
mov word [ebp + eax*2 - 0x380], cx
mov dword [ebp - 0x18], 2
and dword [ebp - 0xf0], 0
jmp 0x1000d4f2
mov eax, dword [ebp - 0x18]
inc eax
inc eax
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 0x1d
jae 0x1000d5dd
xor eax, eax
inc eax
imul eax, eax, 0
movzx eax, byte [ebp + eax - 0x94]
lea eax, [eax + eax + 2]
cmp dword [ebp - 0x18], eax
jne 0x1000d53c
mov eax, dword [ebp - 0x18]
movzx eax, byte [ebp + eax - 0x94]
inc eax
mov dword [ebp - 0xf0], eax
mov eax, dword [ebp - 0x18]
movzx eax, byte [ebp + eax - 0x94]
mov ecx, dword [ebp - 0x18]
lea eax, [ecx + eax - 1]
mov dword [ebp - 0x18], eax
jmp 0x1000d4ea
mov eax, dword [ebp - 0x18]
sub eax, dword [ebp - 0xf0]
movzx eax, byte [ebp + eax - 0x96]
movzx eax, word [ebp + eax*2 - 0x380]
mov ecx, dword [ebp - 0x18]
movzx ecx, byte [ebp + ecx - 0x93]
and ecx, eax
mov eax, dword [ebp - 0x18]
sub eax, dword [ebp - 0xf0]
movzx eax, byte [ebp + eax - 0x96]
movzx eax, word [ebp + eax*2 - 0x380]
mov edx, dword [ebp - 0x18]
movzx edx, byte [ebp + edx - 0x93]
or edx, eax
sub edx, ecx
mov eax, dword [ebp - 0x18]
movzx eax, byte [ebp + eax - 0x94]
mov word [ebp + eax*2 - 0x380], dx
push 0x6770
push 1
push 0x6030
push 0x3250
push 0x6867
push 0x28df
push 0x42e2
push 1
push 0x6dc1
push 0x5b37
lea eax, [ebp - 0xf0]
push eax
call fcn.1000acd0
add esp, 0x2c
jmp 0x1000d4ea
push 2
pop eax
imul eax, eax, 0xc
xor ecx, ecx
mov word [ebp + eax - 0x380], cx
lea eax, [ebp - 0x380]
push eax
lea ecx, [ebp - 0x46c]
call fcn.10006bdc
mov dword [ebp - 0x24c], eax
mov eax, dword [ebp - 0x24c]
mov dword [ebp - 0x254], eax
mov byte [ebp - 4], 9
push dword [ebp - 0x254]
call fcn.1000a40d
pop ecx
mov dword [ebp - 0x128], eax
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x46c]
call fcn.10006c01
and dword [ebp - 0xd8], 0
jmp 0x1000d64c
mov eax, dword [ebp - 0xd8]
inc eax
mov dword [ebp - 0xd8], eax
cmp dword [ebp - 0xd8], 0xd
jae 0x1000d667
xor eax, eax
mov ecx, dword [ebp - 0xd8]
mov word [ebp + ecx*2 - 0x380], ax
jmp 0x1000d63f
cmp dword [ebp - 0x128], 0
je 0x1000d85e
mov byte [ebp - 0x6c], 2
mov byte [ebp - 0x6b], 0x5f
mov byte [ebp - 0x6a], 9
mov byte [ebp - 0x69], 0x13
mov byte [ebp - 0x68], 7
mov byte [ebp - 0x67], 0
mov byte [ebp - 0x66], 1
mov byte [ebp - 0x65], 0xbb
mov byte [ebp - 0x64], 1
mov byte [ebp - 0x63], 0x1d
mov byte [ebp - 0x62], 0
mov byte [ebp - 0x61], 0x23
mov byte [ebp - 0x60], 0xa
mov byte [ebp - 0x5f], 0x35
mov byte [ebp - 0x5e], 5
mov byte [ebp - 0x5d], 0x10
mov byte [ebp - 0x5c], 3
mov byte [ebp - 0x5b], 0xd
mov byte [ebp - 0x5a], 8
mov byte [ebp - 0x59], 5
mov byte [ebp - 0x58], 4
mov byte [ebp - 0x57], 0x2d
mov byte [ebp - 0x56], 0xb
mov byte [ebp - 0x55], 0x1b
mov byte [ebp - 0x54], 6
mov byte [ebp - 0x53], 0x35
xor eax, eax
inc eax
shl eax, 0
movzx eax, byte [ebp + eax - 0x6c]
and eax, 0x3e
xor ecx, ecx
inc ecx
shl ecx, 0
movzx ecx, byte [ebp + ecx - 0x6c]
or ecx, 0x3e
sub ecx, eax
xor eax, eax
inc eax
imul eax, eax, 0
movzx eax, byte [ebp + eax - 0x6c]
mov byte [ebp + eax - 0x244], cl
mov dword [ebp - 0x14], 2
and dword [ebp - 0x4c], 0
jmp 0x1000d721
mov eax, dword [ebp - 0x14]
inc eax
inc eax
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 0x1a
jae 0x1000d7de
xor eax, eax
inc eax
imul eax, eax, 0
movzx eax, byte [ebp + eax - 0x6c]
lea eax, [eax + eax + 2]
cmp dword [ebp - 0x14], eax
jne 0x1000d75f
mov eax, dword [ebp - 0x14]
movzx eax, byte [ebp + eax - 0x6c]
inc eax
mov dword [ebp - 0x4c], eax
mov eax, dword [ebp - 0x14]
movzx eax, byte [ebp + eax - 0x6c]
mov ecx, dword [ebp - 0x14]
lea eax, [ecx + eax - 1]
mov dword [ebp - 0x14], eax
jmp 0x1000d719
mov eax, dword [ebp - 0x14]
sub eax, dword [ebp - 0x4c]
movzx eax, byte [ebp + eax - 0x6e]
movsx eax, byte [ebp + eax - 0x244]
mov ecx, dword [ebp - 0x14]
movzx ecx, byte [ebp + ecx - 0x6b]
and ecx, eax
mov eax, dword [ebp - 0x14]
sub eax, dword [ebp - 0x4c]
movzx eax, byte [ebp + eax - 0x6e]
movsx eax, byte [ebp + eax - 0x244]
mov edx, dword [ebp - 0x14]
movzx edx, byte [ebp + edx - 0x6b]
and edx, eax
mov eax, dword [ebp - 0x14]
sub eax, dword [ebp - 0x4c]
movzx eax, byte [ebp + eax - 0x6e]
movsx eax, byte [ebp + eax - 0x244]
mov esi, dword [ebp - 0x14]
movzx ebx, byte [ebp + esi - 0x6b]
add ebx, eax
sub ebx, edx
sub ebx, ecx
mov eax, dword [ebp - 0x14]
movzx eax, byte [ebp + eax - 0x6c]
mov byte [ebp + eax - 0x244], bl
push 0
push 1
lea eax, [ebp - 0x4c]
push eax
call fcn.1000b309
add esp, 0xc
jmp 0x1000d719
xor eax, eax
inc eax
imul eax, eax, 0xc
mov byte [ebp + eax - 0x244], 0
lea eax, [ebp - 0x244]
push eax
lea ecx, [ebp - 0x43c]
call fcn.10019774
mov byte [ebp - 4], 0xa
and dword [ebp - 0x9c], 0
jmp 0x1000d818
mov eax, dword [ebp - 0x9c]
inc eax
mov dword [ebp - 0x9c], eax
cmp dword [ebp - 0x9c], 0xd
jae 0x1000d831
mov eax, dword [ebp - 0x9c]
mov byte [ebp + eax - 0x244], 0
jmp 0x1000d80b
push 0
push 0
lea eax, [ebp - 0x43c]
push eax
push dword [ebp - 0x128]
call fcn.10016d90
add esp, 0x10
mov dword [0x10074f80], eax
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x43c]
call fcn.100197a3
mov dword [ebp - 0x124], 0xffffffff
mov dword [ebp - 0x120], 0xffffffff
mov dword [ebp - 0x11c], 0xffffffff
mov dword [ebp - 0x118], 0xffffffff
mov dword [ebp - 0x1ac], 0xfffffff9
mov dword [ebp - 0x1ec], 1
mov dword [ebp - 0x26c], 0xd9c7279c
mov dword [ebp - 0x3dc], 0xfffffffa
mov dword [ebp - 0x24], 0
jmp 0x1000d8be
mov eax, dword [ebp - 0x24]
inc eax
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 3
jge 0x1000d8d4
mov eax, dword [ebp - 0x24]
mov dword [ebp + eax*4 - 0x3c8], 0x5849968c
jmp 0x1000d8b7
mov dword [ebp - 0x24], 0
jmp 0x1000d8e4
mov eax, dword [ebp - 0x24]
inc eax
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 1
jge 0x1000d8fa
mov eax, dword [ebp - 0x24]
mov dword [ebp + eax*4 - 0x264], 0xfffffffb
jmp 0x1000d8dd
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x124]
mov dword [ebp - 0x3a4], eax
push 0xfffffffffffffffa
pop eax
test eax, eax
je 0x1000da76
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x124]
mov dword [ebp - 0x3f4], eax
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x124], 0xfffc
jbe 0x1000d94a
mov dword [ebp - 0x1a4], 1
jmp 0x1000d951
and dword [ebp - 0x1a4], 0
mov eax, dword [ebp - 0x1a4]
mov dword [ebp - 0x1ac], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x1ac]
cmp ecx, dword [ebp + eax - 0x124]
jne 0x1000d97e
mov dword [ebp - 0x1b4], 1
jmp 0x1000d985
and dword [ebp - 0x1b4], 0
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x124]
imul eax, dword [ebp - 0x1b4]
test eax, eax
jne 0x1000d9a9
xor eax, eax
jne 0x1000d9a9
and dword [ebp - 0x1bc], 0
jmp 0x1000d9b3
mov dword [ebp - 0x1bc], 1
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x124]
cmp dword [ebp - 0x1bc], eax
jge 0x1000d9d4
mov dword [ebp - 0x1c4], 1
jmp 0x1000d9db
and dword [ebp - 0x1c4], 0
cmp dword [ebp - 0x1c4], 0x1860
je 0x1000d9f3
mov dword [ebp - 0x1cc], 1
jmp 0x1000d9fa
and dword [ebp - 0x1cc], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x124]
cmp dword [ebp - 0x1cc], eax
jge 0x1000da1b
mov dword [ebp - 0x1d4], 1
jmp 0x1000da22
and dword [ebp - 0x1d4], 0
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x1d4]
mov dword [ebp + eax - 0x3c8], ecx
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x124]
mov dword [ebp - 0x3ac], eax
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x3c8], 0x734cb441
jg 0x1000da76
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0x124], 0
je 0x1000da76
mov dword [ebp - 0x1dc], 1
jmp 0x1000da7d
and dword [ebp - 0x1dc], 0
push 4
pop eax
imul eax, eax, 3
mov eax, dword [ebp + eax - 0x124]
cmp dword [ebp - 0x1dc], eax
jne 0x1000daab
push 9
pop eax
test eax, eax
jne 0x1000daab
mov eax, 0x512dc6d0
test eax, eax
jne 0x1000daab
and dword [ebp - 0x1e4], 0
jmp 0x1000dab5
mov dword [ebp - 0x1e4], 1
mov eax, dword [ebp - 0x1e4]
mov dword [ebp - 0x1ec], eax
mov eax, dword [ebp - 0x1ec]
mov dword [ebp - 0x25c], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x25c]
mov dword [ebp + eax - 0x264], ecx
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x124]
mov dword [ebp - 0x3e4], eax
mov dword [ebp - 0x26c], 0xffffffff
mov byte [ebp - 0x3a], 0
mov dword [ebp - 0x1f4], 0x4090
mov dword [ebp - 0x274], str.fyawmokfn_kwyd_rgpiv_onsuwc_tejesjozg
cmp dword [ebp - 0x1f4], 0x430c
jle 0x1000db98
and dword [ebp - 0xa0], 0
jmp 0x1000db37
mov eax, dword [ebp - 0xa0]
inc eax
mov dword [ebp - 0xa0], eax
cmp dword [ebp - 0xa0], 0x3409
jge 0x1000db98
and dword [ebp - 0xa8], 0
jmp 0x1000db59
mov eax, dword [ebp - 0xa8]
inc eax
mov dword [ebp - 0xa8], eax
cmp dword [ebp - 0xa8], 0x6d0b
jge 0x1000db96
mov eax, dword [ebp - 0xa0]
add eax, dword [ebp - 0xa8]
cdq
mov dword [ebp - 0x2e0], eax
mov dword [ebp - 0x2dc], edx
push dword [ebp - 0x2dc]
push dword [ebp - 0x2e0]
mov ecx, 0x10073e38
call fcn.10001ae9
jmp 0x1000db4c
jmp 0x1000db2a
push 1
push 1
lea eax, [ebp - 0x3a]
push eax
push 0x532a
push 0x2b00
push 0x50c0
push 0x7c8b
push 1
call fcn.1000bc2e
add esp, 0x20
mov byte [ebp - 4], 0xb
cmp dword [ebp - 0x1f4], 0x3d30
jge 0x1000dbde
mov edx, dword [ebp - 0x274]
mov ecx, 0x10073e38
call fcn.100034b8
jmp 0x1000dbfa
mov dword [ebp - 4], 1
jmp 0x1000dc0a
cmp dword [0x10074f80], 0
je 0x1000dc28
mov ecx, dword [ebp - 0x1fc]
call fcn.10006c3d
push eax
call dword [0x10074f80]
mov dword [ebp - 0x40], eax
mov dword [ebp - 0xb0], 0x97f6af11
mov dword [ebp - 0xb0], 0xfffffffe
jmp 0x1000dc4b
mov eax, dword [ebp - 0xb0]
dec eax
mov dword [ebp - 0xb0], eax
cmp dword [ebp - 0xb0], 0xffffffed
jne 0x1000dd38
mov dword [ebp - 0x334], 0xffffffff
mov dword [ebp - 0x330], 0xffffffff
mov dword [ebp - 0x32c], 0xffffffff
mov dword [ebp - 0x328], 0xffffffff
mov dword [ebp - 0xb8], 0
jmp 0x1000dc99
mov eax, dword [ebp - 0xb8]
inc eax
mov dword [ebp - 0xb8], eax
cmp dword [ebp - 0xb8], 1
jge 0x1000dcb5
mov eax, dword [ebp - 0xb8]
mov dword [ebp + eax*4 - 0xc0], 0x1e29ea41
jmp 0x1000dc8c
push 4
pop eax
shl eax, 0
mov dword [ebp + eax - 0x334], 0xfffffffd
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0xc0], 0
jmp 0x1000dcf4
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xc0]
inc eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0xc0], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0xc0], 0xd
je 0x1000dd33
mov dword [ebp - 0x50], 0x1dfe0091
mov dword [ebp - 0x50], 0
jmp 0x1000dd1b
mov eax, dword [ebp - 0x50]
inc eax
mov dword [ebp - 0x50], eax
cmp dword [ebp - 0x50], 4
jge 0x1000dd31
mov eax, dword [ebp - 0x50]
mov dword [ebp + eax*4 - 0x334], 0xfffffffc
jmp 0x1000dd14
jmp 0x1000dcd9
jmp 0x1000dc3e
cmp dword [ebp - 0x40], 0
je 0x1000ddb1
movzx eax, byte [0x10074f86]
test eax, eax
je 0x1000dd5a
mov ecx, 0x100754d8
call fcn.10019a3e
movzx eax, al
test eax, eax
jne 0x1000ddb1
push 0x1bb3
push 0x68d5
push 0xcc5
lea eax, [ebp - 0x204]
push eax
push 0x3151
push 0
push 0x100754d8
push 1
lea eax, [ebp - 0x40]
push eax
push 1
push 0x4662
push 0x53c9
call fcn.10018a40
add esp, 0x30
push 1
push 0x197e
push 1
push 0xacb
push 0x10074f86
call fcn.1000bdf0
add esp, 0x14
mov eax, dword [ebp - 0x20c]
mov ecx, dword [ebp - 0x40]
mov dword [eax], ecx
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x34c]
call fcn.10006c01
jmp 0x1000de6f
mov eax, dword [ebp - 0x27c]
mov dword [ebp - 0x28c], eax
mov eax, dword [ebp - 0x284]
mov dword [ebp - 0x294], eax
mov eax, dword [ebp - 0x28c]
mov dword [ebp - 0x29c], eax
mov eax, dword [ebp - 0x294]
mov dword [ebp - 0x2a4], eax
mov eax, dword [ebp - 0x29c]
mov ecx, dword [ebp - 0x2a4]
mov ecx, dword [ecx]
mov dword [eax], ecx
jmp 0x1000de6f
lea eax, [ebp + 0x20]
mov dword [ebp - 0x2ac], eax
mov eax, dword [ebp - 0x2ac]
movzx eax, byte [eax]
test eax, eax
je 0x1000de4f
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_EndPage]
jmp 0x1000de6f
mov byte [ebp - 0x37], 0
movzx eax, byte [ebp - 0x37]
test eax, eax
je 0x1000de6f
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_EndDoc]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret