Function at 0x10019e3e
Capabilities:
Authenticate hmac

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x10065167
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
push ecx
sub esp, 0x544
push ebx
push esi
push edi
mov dword [ebp - 0x10], esp
movzx eax, byte [ebp + 0x14]
test eax, eax
je 0x1001c154
lea eax, [ebp + 8]
mov dword [ebp - 0x2c0], eax
mov eax, dword [ebp + 0x24]
mov dword [ebp - 0x350], eax
mov eax, dword [ebp + 0x18]
mov dword [ebp - 0x330], eax
mov dword [ebp - 0x1dc], 0x7eef
mov dword [ebp - 0x2b8], str.stbfvoj_kveclg_fupkisc_xtoinprga_fdld_xrk_icheb_klru_iuorh_oywjhzayk_bznur
cmp dword [ebp - 0x1dc], 0x7f3f
jle 0x10019fc4
and dword [ebp - 0xe0], 0
jmp 0x10019ec4
mov eax, dword [ebp - 0xe0]
inc eax
mov dword [ebp - 0xe0], eax
cmp dword [ebp - 0xe0], 0xbcb
jge 0x10019fb7
and dword [ebp - 0x9c], 0
jmp 0x10019eea
mov eax, dword [ebp - 0x9c]
inc eax
mov dword [ebp - 0x9c], eax
cmp dword [ebp - 0x9c], 0xa10
jge 0x10019fb2
and dword [ebp - 0xb8], 0
jmp 0x10019f10
mov eax, dword [ebp - 0xb8]
inc eax
mov dword [ebp - 0xb8], eax
cmp dword [ebp - 0xb8], 0x123
jge 0x10019fad
and dword [ebp - 0x94], 0
jmp 0x10019f36
mov eax, dword [ebp - 0x94]
inc eax
mov dword [ebp - 0x94], eax
cmp dword [ebp - 0x94], 0x26f7
jge 0x10019fa8
mov eax, dword [ebp - 0xb8]
cdq
idiv dword [ebp - 0x94]
mov eax, dword [ebp - 0xe0]
sub eax, dword [ebp - 0x9c]
xor eax, edx
cdq
mov dword [ebp - 0x2cc], eax
mov dword [ebp - 0x2c8], edx
push dword [ebp - 0x2c8]
push dword [ebp - 0x2cc]
lea ecx, [ebp - 0x554]
call fcn.10001aa5
pop ecx
pop ecx
mov dword [ebp - 0x368], eax
mov ecx, dword [ebp - 0x368]
call fcn.1000b7cd
push eax
call fcn.1004c12c
pop ecx
lea ecx, [ebp - 0x554]
call fcn.1000b7c3
jmp 0x10019f29
jmp 0x10019f03
jmp 0x10019edd
jmp 0x10019eb7
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetParent]
mov eax, dword [ebp + 0x20]
mov dword [ebp - 0x348], eax
and dword [ebp - 4], 0
cmp dword [ebp - 0x1dc], 0x7d40
jge 0x10019fe9
push dword [ebp - 0x2b8]
call fcn.1004c12c
pop ecx
jmp 0x1001a005
or dword [ebp - 4], 0xffffffff
jmp 0x1001a00f
mov eax, dword [ebp + 0xc]
mov dword [ebp - 0x318], eax
mov eax, dword [ebp - 0x2c0]
movzx eax, byte [eax]
test eax, eax
je 0x1001c0ec
mov eax, dword [ebp - 0x348]
mov dword [ebp - 0x194], eax
mov eax, dword [ebp - 0x350]
mov dword [ebp - 0x204], eax
mov dword [ebp - 0x48], 1
mov dword [ebp - 0x214], 0xffffffff
mov dword [ebp - 0x48], 0
jmp 0x1001a062
mov eax, dword [ebp - 0x48]
dec eax
mov dword [ebp - 0x48], eax
cmp dword [ebp - 0x48], 0xffffffe5
jle 0x1001a37c
mov dword [ebp - 0x120], 0xfa814b11
mov dword [ebp - 0x358], 0xfffffffb
mov dword [ebp - 0xb4], 0
jmp 0x1001a099
mov eax, dword [ebp - 0xb4]
inc eax
mov dword [ebp - 0xb4], eax
cmp dword [ebp - 0xb4], 2
jge 0x1001a0b5
mov eax, dword [ebp - 0xb4]
mov dword [ebp + eax*4 - 0x114], 0x39beb064
jmp 0x1001a08c
push 4
pop eax
shl eax, 0
mov dword [ebp + eax - 0x114], 0
jmp 0x1001a0e3
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x114]
inc eax
push 4
pop ecx
shl ecx, 0
mov dword [ebp + ecx - 0x114], eax
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x114], 0x10
jg 0x1001a369
mov dword [ebp - 0x3d4], 2
mov dword [ebp - 0x3d0], 2
mov dword [ebp - 0x3cc], 2
mov dword [ebp - 0x3c8], 2
lea ecx, [ebp - 0x115]
call fcn.1000bab3
push eax
lea eax, [ebp - 0x3c4]
push eax
lea eax, [ebp - 0x3d4]
push eax
lea ecx, [ebp - 0x4dc]
call fcn.1000bab6
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0x444]
call fcn.1000ba62
mov dword [ebp - 4], 2
mov dword [ebp - 0x240], 0xa0627e80
mov dword [ebp - 0x158], 0xed23c5ad
mov dword [ebp - 0xa4], 0
jmp 0x1001a188
mov eax, dword [ebp - 0xa4]
inc eax
mov dword [ebp - 0xa4], eax
cmp dword [ebp - 0xa4], 2
jge 0x1001a1a4
mov eax, dword [ebp - 0xa4]
mov dword [ebp + eax*4 - 0x3a8], 0xfffffff9
jmp 0x1001a17b
cmp dword [ebp - 0x214], 6
je 0x1001a1b9
mov dword [ebp - 0x148], 1
jmp 0x1001a1c0
and dword [ebp - 0x148], 0
mov eax, dword [ebp - 0x48]
mov dword [ebp - 0x490], eax
cmp dword [ebp - 0x214], 0
jne 0x1001a24f
push 4
pop eax
shl eax, 0
push 4
pop ecx
shl ecx, 0
mov ecx, dword [ebp + ecx - 0x114]
neg ecx
sub ecx, 0x71a05132
sub ecx, dword [ebp + eax - 0x3a8]
jns 0x1001a202
mov dword [ebp - 0x21c], 1
jmp 0x1001a209
and dword [ebp - 0x21c], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x114]
cmp dword [ebp - 0x21c], eax
jle 0x1001a22a
mov dword [ebp - 0x224], 1
jmp 0x1001a231
and dword [ebp - 0x224], 0
mov eax, dword [ebp - 0x224]
mov dword [ebp - 0x120], eax
cmp dword [ebp - 0x120], 0
jne 0x1001a24f
and dword [ebp - 0x230], 0
jmp 0x1001a259
mov dword [ebp - 0x230], 1
cmp dword [ebp - 0x230], 7
jae 0x1001a26e
mov dword [ebp - 0x210], 1
jmp 0x1001a275
and dword [ebp - 0x210], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x114]
cmp dword [ebp - 0x210], eax
jl 0x1001a296
mov dword [ebp - 0x11c], 1
jmp 0x1001a29d
and dword [ebp - 0x11c], 0
push 1
lea ecx, [ebp - 0x444]
call fcn.1000baa4
mov ecx, dword [ebp - 0x11c]
mov dword [eax], ecx
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x114]
imul eax, dword [ebp - 0x11c]
test eax, eax
jne 0x1001a2db
xor eax, eax
inc eax
jne 0x1001a2db
mov dword [ebp - 0x20c], 1
jmp 0x1001a2e2
and dword [ebp - 0x20c], 0
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x20c]
add ecx, 0x7440271d
cmp ecx, dword [ebp + eax - 0x3a8]
je 0x1001a309
mov dword [ebp - 0x1d0], 1
jmp 0x1001a310
and dword [ebp - 0x1d0], 0
mov eax, dword [ebp - 0x148]
cmp eax, dword [ebp - 0x1d0]
jg 0x1001a32a
mov dword [ebp - 0x150], 1
jmp 0x1001a331
and dword [ebp - 0x150], 0
mov eax, dword [ebp - 0x150]
mov dword [ebp - 0x240], eax
mov eax, dword [ebp - 0x240]
mov dword [ebp - 0x158], eax
mov eax, dword [ebp - 0x158]
mov dword [ebp - 0x358], eax
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x444]
call fcn.1000ba88
jmp 0x1001a0c8
cmp dword [ebp - 0x120], 0
je 0x1001a377
jmp 0x1001a05b
jmp 0x1001a05b
push 3
lea ecx, [ebp - 0x138]
call fcn.1000ba05
mov dword [ebp - 4], 3
mov dword [ebp - 0x180], 0
mov dword [ebp - 0x370], 0xce5aba8d
lea eax, [ebp - 0x138]
push eax
lea eax, [ebp - 0x38]
push eax
push 1
push 0x63d0
push 1
push 0x34b6
call fcn.1001471e
add esp, 0x18
mov dword [ebp - 0x38], 0
jmp 0x1001a3d5
mov eax, dword [ebp - 0x38]
inc eax
mov dword [ebp - 0x38], eax
cmp dword [ebp - 0x38], 4
jge 0x1001a3eb
mov eax, dword [ebp - 0x38]
mov dword [ebp + eax*4 - 0x250], 0
jmp 0x1001a3ce
push 4
pop eax
imul eax, eax, 3
mov dword [ebp + eax - 0x250], 2
jmp 0x1001a419
push 4
pop eax
imul eax, eax, 3
mov eax, dword [ebp + eax - 0x250]
dec eax
push 4
pop ecx
imul ecx, ecx, 3
mov dword [ebp + ecx - 0x250], eax
push 4
pop eax
imul eax, eax, 3
cmp dword [ebp + eax - 0x250], 0
jl 0x1001a79e
mov dword [ebp - 0xbc], 1
mov dword [ebp - 0x374], 1
mov dword [ebp - 0x37c], 0xfffffff8
mov dword [ebp - 0xbc], 0
jmp 0x1001a464
mov eax, dword [ebp - 0xbc]
inc eax
mov dword [ebp - 0xbc], eax
cmp dword [ebp - 0xbc], 2
jg 0x1001a799
mov dword [ebp - 0x168], 0x22b60780
mov dword [ebp - 0xac], 0
jmp 0x1001a494
mov eax, dword [ebp - 0xac]
inc eax
mov dword [ebp - 0xac], eax
cmp dword [ebp - 0xac], 2
jge 0x1001a4b0
mov eax, dword [ebp - 0xac]
mov dword [ebp + eax*4 - 0x108], 1
jmp 0x1001a487
push 0
push 1
push 0x7587
push 0x69f3
call fcn.10016002
add esp, 0x10
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0x108], 2
jmp 0x1001a4f4
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x108]
dec eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x108], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x108], 0
jl 0x1001a794
mov dword [ebp - 0x1f0], 0
push 4
pop eax
imul eax, eax, 3
push dword [ebp + eax - 0x250]
lea ecx, [ebp - 0x138]
call fcn.1000baa4
mov eax, dword [eax]
mov dword [ebp - 0x374], eax
push 0
lea ecx, [ebp - 0x138]
call fcn.1000baa4
mov esi, eax
push 4
pop eax
imul eax, eax, 3
push dword [ebp + eax - 0x250]
lea ecx, [ebp - 0x138]
call fcn.1000baa4
mov eax, dword [eax]
cmp eax, dword [esi]
jge 0x1001a56b
mov dword [ebp - 0x1d8], 1
jmp 0x1001a572
and dword [ebp - 0x1d8], 0
cmp dword [ebp - 0x1d8], 1
jg 0x1001a587
mov dword [ebp - 0x160], 1
jmp 0x1001a58e
and dword [ebp - 0x160], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x108]
cmp dword [ebp - 0x160], eax
jl 0x1001a5af
mov dword [ebp - 0x218], 1
jmp 0x1001a5b6
and dword [ebp - 0x218], 0
mov eax, dword [ebp - 0x218]
mov dword [ebp - 0x168], eax
cmp dword [ebp - 0x168], 0x806aa1c3
je 0x1001a5da
mov dword [ebp - 0x1e0], 1
jmp 0x1001a5e1
and dword [ebp - 0x1e0], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x108]
imul eax, dword [ebp - 0x1e0]
cmp eax, 1
jne 0x1001a60f
mov eax, 0x5e4bc795
test eax, eax
je 0x1001a60f
mov dword [ebp - 0x170], 1
jmp 0x1001a616
and dword [ebp - 0x170], 0
push 4
pop eax
imul eax, eax, 3
mov eax, dword [ebp + eax - 0x250]
cmp dword [ebp - 0x170], eax
jle 0x1001a637
mov dword [ebp - 0x238], 1
jmp 0x1001a63e
and dword [ebp - 0x238], 0
push 4
pop eax
shl eax, 0
push 4
pop ecx
imul ecx, ecx, 0
mov ecx, dword [ebp + ecx - 0x108]
add ecx, dword [ebp - 0x238]
imul ecx, dword [ebp - 0x37c]
cmp ecx, dword [ebp + eax - 0x108]
jge 0x1001a673
mov dword [ebp - 0x178], 1
jmp 0x1001a67a
and dword [ebp - 0x178], 0
push 4
pop eax
imul eax, eax, 3
push dword [ebp + eax - 0x250]
lea ecx, [ebp - 0x138]
call fcn.1000baa4
mov ecx, 0xf6f97812
sub ecx, dword [eax]
cmp ecx, dword [ebp - 0x178]
jge 0x1001a6ad
mov dword [ebp - 0x1e8], 1
jmp 0x1001a6b4
and dword [ebp - 0x1e8], 0
mov eax, dword [ebp - 0x1e8]
mov dword [ebp - 0x180], eax
mov eax, dword [ebp - 0x180]
mov dword [ebp - 0x47c], eax
push 4
pop eax
imul eax, eax, 3
push dword [ebp + eax - 0x250]
lea ecx, [ebp - 0x138]
call fcn.1000baa4
cmp dword [eax], 0
jne 0x1001a6f5
mov dword [ebp - 0x220], 1
jmp 0x1001a6fc
and dword [ebp - 0x220], 0
push 4
pop eax
imul eax, eax, 3
push dword [ebp + eax - 0x250]
lea ecx, [ebp - 0x138]
call fcn.1000baa4
mov ecx, dword [ebp - 0x220]
cmp ecx, dword [eax]
je 0x1001a72a
mov dword [ebp - 0x188], 1
jmp 0x1001a731
and dword [ebp - 0x188], 0
mov eax, dword [ebp - 0x188]
mov dword [ebp - 0x1f0], eax
push 4
pop eax
imul eax, eax, 0
mov esi, dword [ebp + eax - 0x108]
mov edi, dword [ebp - 0x1f0]
push 4
pop eax
imul eax, eax, 3
push dword [ebp + eax - 0x250]
lea ecx, [ebp - 0x138]
call fcn.1000baa4
add edi, dword [eax]
cmp edi, esi
jg 0x1001a77a
mov dword [ebp - 0x190], 1
jmp 0x1001a781
and dword [ebp - 0x190], 0
mov eax, dword [ebp - 0x190]
neg eax
mov dword [ebp - 0x370], eax
jmp 0x1001a4d9
jmp 0x1001a457
jmp 0x1001a3fe
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x138]
call fcn.1000ba88
mov eax, dword [0x100840f8]
and eax, 1
jne 0x1001a7e4
mov eax, dword [0x100840f8]
or eax, 1
mov dword [0x100840f8], eax
mov dword [ebp - 4], 4
mov ecx, 0x100840bc
call fcn.100275ef
push 0x100662a1
call fcn.1004c102
pop ecx
or dword [ebp - 4], 0xffffffff
mov dword [ebp - 0x22c], 0x6f3c
mov dword [ebp - 0x354], str.ivlm_zauz_cjcvt
cmp dword [ebp - 0x22c], 0x6ff7
jle 0x1001a87d
and dword [ebp - 0xc4], 0
jmp 0x1001a81a
mov eax, dword [ebp - 0xc4]
inc eax
mov dword [ebp - 0xc4], eax
cmp dword [ebp - 0xc4], 0x231b
jge 0x1001a87d
and dword [ebp - 0x8c], 0
jmp 0x1001a83c
mov eax, dword [ebp - 0x8c]
inc eax
mov dword [ebp - 0x8c], eax
cmp dword [ebp - 0x8c], 0x23a
jge 0x1001a87b
mov eax, dword [ebp - 0xc4]
mov ecx, dword [ebp - 0x8c]
shl eax, cl
cdq
mov dword [ebp - 0x2d8], eax
mov dword [ebp - 0x2d4], edx
push dword [ebp - 0x2d4]
push dword [ebp - 0x2d8]
mov ecx, 0x10080d38
call fcn.1000b7ed
jmp 0x1001a82f
jmp 0x1001a80d
mov dword [ebp - 0x484], 0
mov byte [ebp - 0x20], 0
push 0
push 0x6957
push 1
lea eax, [ebp - 0x20]
push eax
push 1
call fcn.10019487
add esp, 0x14
mov byte [ebp - 0x1f], 0
push 0x24c1
push 0
lea eax, [ebp - 0x1f]
push eax
push 0x3d0b
push 0x5e4b
call fcn.100266b1
add esp, 0x14
mov dword [ebp - 4], 5
cmp dword [ebp - 0x22c], 0x6ec0
jge 0x1001a8e6
mov edx, dword [ebp - 0x354]
mov ecx, 0x10080d38
call fcn.1000da64
jmp 0x1001a902
or dword [ebp - 4], 0xffffffff
jmp 0x1001a90c
push dword [ebp - 0x194]
lea ecx, [ebp - 0x3c0]
call fcn.1000b902
mov dword [ebp - 4], 7
push 2
lea ecx, [ebp - 0x25c]
call fcn.1000ba05
mov byte [ebp - 4], 8
mov dword [ebp - 0x198], 0x273f
mov dword [ebp - 0x2b0], str.xnfpab_sjdetrjys_hcmebf_zpixim_djgdqr_muqxh_yehr_bzjrg_wqbpyv_gckrmovzb_jruljkag_uwxeu_erbncv
cmp dword [ebp - 0x198], 0x27b9
jle 0x1001aa06
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetParent]
and dword [ebp - 0xcc], 0
jmp 0x1001a97c
mov eax, dword [ebp - 0xcc]
inc eax
mov dword [ebp - 0xcc], eax
cmp dword [ebp - 0xcc], 0x444b
jge 0x1001aa06
and dword [ebp - 0xf8], 0
jmp 0x1001a99e
mov eax, dword [ebp - 0xf8]
inc eax
mov dword [ebp - 0xf8], eax
cmp dword [ebp - 0xf8], 0x79b
jge 0x1001aa01
mov eax, dword [ebp - 0xcc]
xor eax, dword [ebp - 0xf8]
cdq
mov dword [ebp - 0x2e4], eax
mov dword [ebp - 0x2e0], edx
push dword [ebp - 0x2e0]
push dword [ebp - 0x2e4]
lea ecx, [ebp - 0x50c]
call fcn.10001aa5
pop ecx
pop ecx
mov dword [ebp - 0x294], eax
mov ecx, dword [ebp - 0x294]
call fcn.1000b7cd
push eax
call fcn.1004c12c
pop ecx
lea ecx, [ebp - 0x50c]
call fcn.1000b7c3
jmp 0x1001a991
jmp 0x1001a96f
push 1
push 0x3ce0
lea eax, [ebp - 0x25c]
push eax
lea eax, [ebp - 0x40]
push eax
push 0
call fcn.10025bed
add esp, 0x14
mov byte [ebp - 4], 9
cmp dword [ebp - 0x198], 0x2713
jge 0x1001aa3e
push dword [ebp - 0x2b0]
call fcn.1004c12c
pop ecx
jmp 0x1001aa5a
mov dword [ebp - 4], 8
jmp 0x1001aa6a
mov dword [ebp - 0x40], 0
jmp 0x1001aa7a
mov eax, dword [ebp - 0x40]
inc eax
mov dword [ebp - 0x40], eax
cmp dword [ebp - 0x40], 4
jge 0x1001aa90
mov eax, dword [ebp - 0x40]
mov dword [ebp + eax*4 - 0x278], 8
jmp 0x1001aa73
push 4
pop eax
shl eax, 1
mov dword [ebp + eax - 0x278], 0
jmp 0x1001aabb
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x278]
inc eax
push 4
pop ecx
shl ecx, 1
mov dword [ebp + ecx - 0x278], eax
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0x278], 1
jg 0x1001ad77
mov dword [ebp - 0x28], 2
mov dword [ebp - 0x228], 0xfff6
mov dword [ebp - 0x1c0], 0
push 0x3e4b
push 0x6605
push 0
push 0xa60
push 0x7789
push 0x1746
push 0x51d
push 0
push 0x3757
push 1
call fcn.10026168
add esp, 0x28
mov dword [ebp - 0x28], 0
jmp 0x1001ab2a
mov eax, dword [ebp - 0x28]
inc eax
mov dword [ebp - 0x28], eax
cmp dword [ebp - 0x28], 1
jg 0x1001ad72
mov dword [ebp - 0x1f8], 1
push 1
lea ecx, [ebp - 0x388]
call fcn.1000ba05
mov byte [ebp - 4], 0xb
mov dword [ebp - 0x234], 0xbc4433ac
mov dword [ebp - 0x23c], 0x8f0bd907
mov dword [ebp - 0x1c8], 5
lea eax, [ebp - 0x388]
push eax
lea eax, [ebp - 0x48c]
push eax
push 0x6f5e
push 1
push 1
call fcn.10013ad7
add esp, 0x14
mov eax, 0x5357f451
test eax, eax
je 0x1001abaa
cmp dword [ebp - 0x228], 0
je 0x1001abaa
mov dword [ebp - 0x1b8], 1
jmp 0x1001abb1
and dword [ebp - 0x1b8], 0
push 4
pop eax
shl eax, 1
mov esi, dword [ebp + eax - 0x278]
push dword [ebp - 0x28]
lea ecx, [ebp - 0x25c]
call fcn.1000baa4
cmp dword [eax], esi
jne 0x1001abdb
mov dword [ebp - 0x35c], 1
jmp 0x1001abe2
and dword [ebp - 0x35c], 0
push 0
lea ecx, [ebp - 0x25c]
call fcn.1000baa4
mov eax, dword [eax]
mov dword [ebp - 0x1f8], eax
cmp dword [ebp - 0x1f8], 0
je 0x1001ac0d
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0x278], 0
mov eax, 0xf446
cmp eax, 2
jl 0x1001ac2a
push 9
pop eax
test eax, eax
je 0x1001ac2a
mov dword [ebp - 0x1a0], 1
jmp 0x1001ac31
and dword [ebp - 0x1a0], 0
mov eax, dword [ebp - 0x1a0]
sub eax, dword [ebp - 0x228]
mov dword [ebp - 0x1a8], eax
push 0
lea ecx, [ebp - 0x388]
call fcn.1000baa4
mov ecx, dword [ebp - 0x1a8]
mov dword [eax], ecx
cmp dword [ebp - 0x1a8], 0
jne 0x1001ac6f
or eax, 0xffffffff
jne 0x1001ac6f
and dword [ebp - 0x200], 0
jmp 0x1001ac79
mov dword [ebp - 0x200], 1
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x278]
cmp dword [ebp - 0x200], eax
jl 0x1001ac99
mov dword [ebp - 0x1b0], 1
jmp 0x1001aca0
and dword [ebp - 0x1b0], 0
mov eax, dword [ebp - 0x1b0]
mov dword [ebp - 0x234], eax
mov eax, dword [ebp - 0x234]
mov ecx, dword [ebp - 0x1b8]
lea eax, [ecx + eax + 0x417612d2]
cmp eax, 0x7d41
je 0x1001acd2
mov dword [ebp - 0x208], 1
jmp 0x1001acd9
and dword [ebp - 0x208], 0
mov eax, dword [ebp - 0x208]
mov dword [ebp - 0x1c0], eax
mov eax, dword [ebp - 0x1c0]
mov dword [ebp - 0x23c], eax
cmp dword [ebp - 0x23c], 0
je 0x1001ad15
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0x278], 0
je 0x1001ad15
mov dword [ebp - 0x29c], 1
jmp 0x1001ad1c
and dword [ebp - 0x29c], 0
push dword [ebp - 0x28]
lea ecx, [ebp - 0x25c]
call fcn.1000baa4
push 1
lea ecx, [ebp - 0x25c]
call fcn.1000baa4
mov dword [ebp - 0x1c8], 0xffffffff
cmp dword [ebp - 0x1c8], 0
je 0x1001ad5e
mov byte [ebp - 4], 8
lea ecx, [ebp - 0x388]
call fcn.1000ba88
jmp 0x1001ab23
mov byte [ebp - 4], 8
lea ecx, [ebp - 0x388]
call fcn.1000ba88
jmp 0x1001ab23
jmp 0x1001aaa2
mov byte [ebp - 4], 7
lea ecx, [ebp - 0x25c]
call fcn.1000ba88
lea eax, [ebp - 0x494]
push eax
lea ecx, [ebp - 0x3c0]
call fcn.1000bf38
push dword [eax]
lea eax, [ebp - 0x49c]
push eax
lea ecx, [ebp - 0x3c0]
call fcn.1000bf4c
push dword [eax]
lea eax, [ebp - 0x4a4]
push eax
lea ecx, [ebp - 0x3c0]
call fcn.1000bf38
push dword [eax]
mov edx, 0x1001315e
lea ecx, [ebp - 0x4ac]
call fcn.10029e8b
add esp, 0xc
lea ecx, [ebp - 0x3c0]
call fcn.100130e9
mov dword [ebp - 0x1ec], eax
movzx eax, byte [0x10083fcd]
test eax, eax
je 0x1001b263
mov ecx, 0x100840bc
call fcn.100276b4
movzx eax, al
test eax, eax
jne 0x1001b263
lea eax, [ebp - 0x1ec]
push eax
lea eax, [ebp - 0x154]
push eax
mov ecx, 0x100840bc
call fcn.100276bd
mov dword [ebp - 0x468], 0x9d221e9c
mov dword [ebp - 0x448], 5
mov dword [ebp - 0x474], 8
mov dword [ebp - 0x4a8], 0xfffffffa
mov dword [ebp - 0x470], 6
mov dword [ebp - 0x438], 1
mov dword [ebp - 0x364], 0xffffffff
mov dword [ebp - 0x2a4], 0x1fbf6859
push 2
lea ecx, [ebp - 0x454]
call fcn.1000ba05
mov byte [ebp - 4], 0xc
mov dword [ebp - 0x478], 0x6c34
mov dword [ebp - 0x4a0], 1
mov dword [ebp - 0x30], 0
jmp 0x1001aea7
mov eax, dword [ebp - 0x30]
inc eax
mov dword [ebp - 0x30], eax
cmp dword [ebp - 0x30], 2
jge 0x1001aebd
mov eax, dword [ebp - 0x30]
mov dword [ebp + eax*4 - 0x4b4], 0xffffffff
jmp 0x1001aea0
lea eax, [ebp - 0x454]
push eax
push 1
lea eax, [ebp - 0x30]
push eax
push 1
call fcn.10015beb
add esp, 0x10
mov dword [ebp - 0x144], 0x484d
mov dword [ebp - 0x2ac], str.bwc_igrfbee_psf_bjnvg_aaksuopup_yaafvcq_nzjqw
cmp dword [ebp - 0x144], 0x4b47
jle 0x1001af98
and dword [ebp - 0xc0], 0
jmp 0x1001af0e
mov eax, dword [ebp - 0xc0]
inc eax
mov dword [ebp - 0xc0], eax
cmp dword [ebp - 0xc0], 0x29cd
jge 0x1001af98
and dword [ebp - 0xe8], 0
jmp 0x1001af30
mov eax, dword [ebp - 0xe8]
inc eax
mov dword [ebp - 0xe8], eax
cmp dword [ebp - 0xe8], 0x5b10
jge 0x1001af93
mov eax, dword [ebp - 0xc0]
add eax, dword [ebp - 0xe8]
cdq
mov dword [ebp - 0x2f0], eax
mov dword [ebp - 0x2ec], edx
push dword [ebp - 0x2ec]
push dword [ebp - 0x2f0]
lea ecx, [ebp - 0x524]
call fcn.10001aa5
pop ecx
pop ecx
mov dword [ebp - 0x334], eax
mov ecx, dword [ebp - 0x334]
call fcn.1000b7cd
push eax
call fcn.1004c12c
pop ecx
lea ecx, [ebp - 0x524]
call fcn.1000b7c3
jmp 0x1001af23
jmp 0x1001af01
xor eax, eax
inc eax
je 0x1001afb6
cmp dword [ebp - 0x2a4], 0
je 0x1001afb6
xor eax, eax
je 0x1001afb6
mov dword [ebp - 0x140], 1
jmp 0x1001afbd
and dword [ebp - 0x140], 0
mov eax, dword [ebp - 0x140]
mov dword [ebp - 0x364], eax
mov byte [ebp - 4], 0xd
cmp dword [ebp - 0x144], 0x446e
jge 0x1001afe5
push dword [ebp - 0x2ac]
call fcn.1004c12c
pop ecx
jmp 0x1001b001
mov dword [ebp - 4], 0xc
jmp 0x1001b011
mov byte [ebp - 4], 7
lea ecx, [ebp - 0x454]
call fcn.1000ba88
lea eax, [ebp - 0x480]
push eax
mov ecx, 0x100840bc
call fcn.100276a6
push eax
lea ecx, [ebp - 0x154]
call fcn.100275ab
movzx eax, al
test eax, eax
je 0x1001b263
mov dword [ebp - 0x28c], 0xfffffffa
mov dword [ebp - 0x344], 0x77c8748a
mov dword [ebp - 0x2bc], 0xd11d962e
mov dword [ebp - 0x36c], 0x14a9bacd
push 1
lea ecx, [ebp - 0x400]
call fcn.1000ba05
mov byte [ebp - 4], 0xf
mov dword [ebp - 0x2b4], 0xab9c279a
mov dword [ebp - 0x14c], 0x28c
mov dword [ebp - 0x33c], str.vbw_tnme_hmcnl_pizxit_uzvktyfd_prxa_sxniq_sioggoi_txs
cmp dword [ebp - 0x14c], 0x42c
jle 0x1001b160
and dword [ebp - 0xc8], 0
jmp 0x1001b0c5
mov eax, dword [ebp - 0xc8]
inc eax
mov dword [ebp - 0xc8], eax
cmp dword [ebp - 0xc8], 0x5c97
jge 0x1001b158
and dword [ebp - 0x10c], 0
jmp 0x1001b0eb
mov eax, dword [ebp - 0x10c]
inc eax
mov dword [ebp - 0x10c], eax
cmp dword [ebp - 0x10c], 0x4c72
jge 0x1001b153
and dword [ebp - 0xd0], 0
jmp 0x1001b10d
mov eax, dword [ebp - 0xd0]
inc eax
mov dword [ebp - 0xd0], eax
cmp dword [ebp - 0xd0], 0x487c
jge 0x1001b151
mov eax, dword [ebp - 0xc8]
imul eax, dword [ebp - 0x10c]
add eax, dword [ebp - 0xd0]
cdq
mov dword [ebp - 0x2fc], eax
mov dword [ebp - 0x2f8], edx
push dword [ebp - 0x2f8]
push dword [ebp - 0x2fc]
mov ecx, 0x10080d38
call fcn.1000b7ed
jmp 0x1001b100
jmp 0x1001b0de
jmp 0x1001b0b8
push 0
call dword [sym.imp.KERNEL32.dll_FindClose]
mov dword [ebp - 0x2d0], 0xfffffff8
mov byte [ebp - 4], 0x10
cmp dword [ebp - 0x14c], 0x174
jge 0x1001b18a
mov edx, dword [ebp - 0x33c]
mov ecx, 0x10080d38
call fcn.1000da64
jmp 0x1001b1a6
mov dword [ebp - 4], 0xf
jmp 0x1001b1b6
mov dword [ebp - 0x2c4], 0xa33a4d1b
push 1
lea eax, [ebp - 0x498]
push eax
push 1
push 0
lea eax, [ebp - 0x400]
push eax
call fcn.10019710
add esp, 0x14
push 1
lea eax, [ebp - 0x400]
push eax
lea eax, [ebp - 0x2b4]
push eax
push 0x2c79
lea eax, [ebp - 0x36c]
push eax
push 0x3649
lea eax, [ebp - 0x2bc]
push eax
push 1
lea eax, [ebp - 0x344]
push eax
lea eax, [ebp - 0x2c4]
push eax
lea eax, [ebp - 0x28c]
push eax
lea eax, [ebp - 0x2d0]
push eax
call fcn.10015c8d
add esp, 0x30
mov byte [ebp - 4], 7
lea ecx, [ebp - 0x400]
call fcn.1000ba88
lea ecx, [ebp - 0x154]
call fcn.100276d2
mov ecx, dword [ebp - 0x204]
mov eax, dword [eax + 4]
mov dword [ecx], eax
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x3c0]
call fcn.1000b962
jmp 0x1001c1fa
and dword [ebp - 0x24], 0
lea eax, [ebp - 0x3c0]
push eax
call fcn.10013ab4
pop ecx
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 0
jne 0x1001b892
cmp dword [0x10083fd8], 0
jne 0x1001b854
mov dword [ebp - 0xf0], 1
mov dword [ebp - 0xf0], 0xfffffff7
jmp 0x1001b2b1
mov eax, dword [ebp - 0xf0]
dec eax
mov dword [ebp - 0xf0], eax
cmp dword [ebp - 0xf0], 0xffffffe7
jle 0x1001b2de
mov dword [ebp - 0x34c], 0xfffffff9
push 1
push 1
push 0x4e08
lea eax, [ebp - 0x34c]
push eax
call fcn.10016002
add esp, 0x10
jmp 0x1001b2a4
push 0x5a72
push 0x2422
push 0x62e6
push 0x7608
push 0x2de7
push 1
push 0x683a
push 0x733b
push 1
push 1
call fcn.100163da
add esp, 0x28
mov byte [ebp - 0x88], 0
mov byte [ebp - 0x87], 0x31
mov byte [ebp - 0x86], 4
mov byte [ebp - 0x85], 0x1d
mov byte [ebp - 0x84], 0x84
mov byte [ebp - 0x83], 0xd5
mov byte [ebp - 0x82], 0x2f
mov byte [ebp - 0x81], 6
mov byte [ebp - 0x80], 0x78
mov byte [ebp - 0x7f], 1
mov byte [ebp - 0x7e], 0x56
mov byte [ebp - 0x7d], 0xb
mov byte [ebp - 0x7c], 9
mov byte [ebp - 0x7b], 3
mov byte [ebp - 0x7a], 2
mov byte [ebp - 0x79], 7
mov byte [ebp - 0x78], 0x5c
mov byte [ebp - 0x77], 2
mov byte [ebp - 0x76], 0x40
mov byte [ebp - 0x75], 4
mov byte [ebp - 0x74], 0x17
mov byte [ebp - 0x73], 9
mov byte [ebp - 0x72], 1
mov byte [ebp - 0x71], 8
mov byte [ebp - 0x70], 0x4a
mov byte [ebp - 0x6f], 0xa
mov byte [ebp - 0x6e], 0x42
mov byte [ebp - 0x6d], 5
mov byte [ebp - 0x6c], 0
xor eax, eax
inc eax
shl eax, 0
movzx eax, byte [ebp + eax - 0x88]
and eax, 0x7a
xor ecx, ecx
inc ecx
shl ecx, 0
movzx ecx, byte [ebp + ecx - 0x88]
or ecx, 0x7a
sub ecx, eax
xor eax, eax
inc eax
imul eax, eax, 0
movzx eax, byte [ebp + eax - 0x88]
mov word [ebp + eax*2 - 0x434], cx
mov dword [ebp - 0x2dc], 0x148b
cmp dword [ebp - 0x2dc], 0x741
jge 0x1001b4cc
lea eax, [ebp - 0x164]
push eax
lea eax, [ebp - 0x378]
push eax
push str._d__d_n
call fcn.1004be2b
add esp, 0xc
and dword [ebp - 0x17c], 0
and dword [ebp - 0x184], 0
mov dword [ebp - 0xd8], 1
jmp 0x1001b431
mov eax, dword [ebp - 0xd8]
inc eax
mov dword [ebp - 0xd8], eax
mov eax, dword [ebp - 0xd8]
cmp eax, dword [ebp - 0x378]
jg 0x1001b4ba
lea eax, [ebp - 0x15c]
push eax
push 0x1006ff54
call fcn.1004be2b
pop ecx
pop ecx
mov eax, dword [ebp - 0x15c]
cdq
idiv dword [ebp - 0x164]
test edx, edx
jle 0x1001b46f
mov dword [ebp - 0x16c], 1
jmp 0x1001b476
and dword [ebp - 0x16c], 0
mov eax, dword [ebp - 0x15c]
cdq
idiv dword [ebp - 0x164]
add eax, dword [ebp - 0x16c]
mov dword [ebp - 0x174], eax
mov eax, dword [ebp - 0x174]
cmp eax, dword [ebp - 0x17c]
jl 0x1001b4b5
mov eax, dword [ebp - 0x174]
mov dword [ebp - 0x17c], eax
mov eax, dword [ebp - 0xd8]
mov dword [ebp - 0x184], eax
jmp 0x1001b424
push dword [ebp - 0x184]
push 0x10070ccc
call fcn.1004c12c
pop ecx
pop ecx
mov dword [ebp - 0x14], 2
and dword [ebp - 0x100], 0
jmp 0x1001b4e4
mov eax, dword [ebp - 0x14]
inc eax
inc eax
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 0x1d
jae 0x1001b5c0
xor eax, eax
inc eax
imul eax, eax, 0
movzx eax, byte [ebp + eax - 0x88]
lea eax, [eax + eax + 2]
cmp dword [ebp - 0x14], eax
jne 0x1001b52e
mov eax, dword [ebp - 0x14]
movzx eax, byte [ebp + eax - 0x88]
inc eax
mov dword [ebp - 0x100], eax
mov eax, dword [ebp - 0x14]
movzx eax, byte [ebp + eax - 0x88]
mov ecx, dword [ebp - 0x14]
lea eax, [ecx + eax - 1]
mov dword [ebp - 0x14], eax
jmp 0x1001b4dc
mov eax, dword [ebp - 0x14]
sub eax, dword [ebp - 0x100]
movzx eax, byte [ebp + eax - 0x8a]
movzx eax, word [ebp + eax*2 - 0x434]
mov ecx, dword [ebp - 0x14]
movzx ecx, byte [ebp + ecx - 0x87]
and ecx, eax
mov eax, dword [ebp - 0x14]
sub eax, dword [ebp - 0x100]
movzx eax, byte [ebp + eax - 0x8a]
movzx eax, word [ebp + eax*2 - 0x434]
mov edx, dword [ebp - 0x14]
movzx edx, byte [ebp + edx - 0x87]
or edx, eax
sub edx, ecx
mov eax, dword [ebp - 0x14]
movzx eax, byte [ebp + eax - 0x88]
mov word [ebp + eax*2 - 0x434], dx
push 0x62db
push 0x1d1
push 1
push 0x6430
push 0x2a67
push 0
push 0xc4
lea eax, [ebp - 0x100]
push eax
call fcn.100197e8
add esp, 0x20
jmp 0x1001b4dc
push 2
pop eax
imul eax, eax, 0xc
xor ecx, ecx
mov word [ebp + eax - 0x434], cx
lea eax, [ebp - 0x434]
push eax
lea ecx, [ebp - 0x4f4]
call fcn.1000b93d
mov dword [ebp - 0x2e8], eax
mov eax, dword [ebp - 0x2e8]
mov dword [ebp - 0x31c], eax
mov byte [ebp - 4], 0x12
push dword [ebp - 0x31c]
call fcn.10013ab4
pop ecx
mov dword [ebp - 0x18c], eax
mov byte [ebp - 4], 7
lea ecx, [ebp - 0x4f4]
call fcn.1000b962
and dword [ebp - 0x90], 0
jmp 0x1001b62f
mov eax, dword [ebp - 0x90]
inc eax
mov dword [ebp - 0x90], eax
cmp dword [ebp - 0x90], 0xd
jae 0x1001b64a
xor eax, eax
mov ecx, dword [ebp - 0x90]
mov word [ebp + ecx*2 - 0x434], ax
jmp 0x1001b622
cmp dword [ebp - 0x18c], 0
je 0x1001b854
mov byte [ebp - 0x68], 6
mov byte [ebp - 0x67], 4
mov byte [ebp - 0x66], 7
mov byte [ebp - 0x65], 0x10
mov byte [ebp - 0x64], 8
mov byte [ebp - 0x63], 0x13
mov byte [ebp - 0x62], 1
mov byte [ebp - 0x61], 0xe
mov byte [ebp - 0x60], 0
mov byte [ebp - 0x5f], 0x23
mov byte [ebp - 0x5e], 0xa
mov byte [ebp - 0x5d], 0x35
mov byte [ebp - 0x5c], 5
mov byte [ebp - 0x5b], 0x10
mov byte [ebp - 0x5a], 3
mov byte [ebp - 0x59], 0xb3
mov byte [ebp - 0x58], 0xc3
mov byte [ebp - 0x57], 0x56
mov byte [ebp - 0x56], 4
mov byte [ebp - 0x55], 0x25
mov byte [ebp - 0x54], 9
mov byte [ebp - 0x53], 0x3e
mov byte [ebp - 0x52], 3
mov byte [ebp - 0x51], 0x16
mov byte [ebp - 0x50], 0xb
mov byte [ebp - 0x4f], 0x33
mov byte [ebp - 0x4e], 2
mov byte [ebp - 0x4d], 0x36
xor eax, eax
inc eax
shl eax, 0
movzx eax, byte [ebp + eax - 0x68]
and eax, 0x66
xor ecx, ecx
inc ecx
shl ecx, 0
movzx ecx, byte [ebp + ecx - 0x68]
or ecx, 0x66
sub ecx, eax
xor eax, eax
inc eax
imul eax, eax, 0
movzx eax, byte [ebp + eax - 0x68]
mov byte [ebp + eax - 0x288], cl
mov dword [ebp - 0x18], 2
and dword [ebp - 0x98], 0
jmp 0x1001b70f
mov eax, dword [ebp - 0x18]
inc eax
inc eax
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 0x1c
jae 0x1001b7d4
xor eax, eax
inc eax
imul eax, eax, 0
movzx eax, byte [ebp + eax - 0x68]
lea eax, [eax + eax + 2]
cmp dword [ebp - 0x18], eax
jne 0x1001b750
mov eax, dword [ebp - 0x18]
movzx eax, byte [ebp + eax - 0x68]
inc eax
mov dword [ebp - 0x98], eax
mov eax, dword [ebp - 0x18]
movzx eax, byte [ebp + eax - 0x68]
mov ecx, dword [ebp - 0x18]
lea eax, [ecx + eax - 1]
mov dword [ebp - 0x18], eax
jmp 0x1001b707
mov eax, dword [ebp - 0x18]
sub eax, dword [ebp - 0x98]
movzx eax, byte [ebp + eax - 0x6a]
movsx eax, byte [ebp + eax - 0x288]
mov ecx, dword [ebp - 0x18]
movzx ecx, byte [ebp + ecx - 0x67]
and ecx, eax
mov eax, dword [ebp - 0x18]
sub eax, dword [ebp - 0x98]
movzx eax, byte [ebp + eax - 0x6a]
movsx eax, byte [ebp + eax - 0x288]
mov edx, dword [ebp - 0x18]
movzx edx, byte [ebp + edx - 0x67]
or edx, eax
sub edx, ecx
mov eax, dword [ebp - 0x18]
movzx eax, byte [ebp + eax - 0x68]
mov byte [ebp + eax - 0x288], dl
push 0x6cb6
push 0x3df5
push 0x2fa7
push 1
lea eax, [ebp - 0x98]
push eax
push 0x4461
push 0x5a5
push 1
push 1
call fcn.10013d41
add esp, 0x24
jmp 0x1001b707
xor eax, eax
inc eax
imul eax, eax, 0xc
mov byte [ebp + eax - 0x288], 0
lea eax, [ebp - 0x288]
push eax
lea ecx, [ebp - 0x4d4]
call fcn.1002751f
mov byte [ebp - 4], 0x13
and dword [ebp - 0xa0], 0
jmp 0x1001b80e
mov eax, dword [ebp - 0xa0]
inc eax
mov dword [ebp - 0xa0], eax
cmp dword [ebp - 0xa0], 0xd
jae 0x1001b827
mov eax, dword [ebp - 0xa0]
mov byte [ebp + eax - 0x288], 0
jmp 0x1001b801
push 0
push 0
lea eax, [ebp - 0x4d4]
push eax
push dword [ebp - 0x18c]
call fcn.10022256
add esp, 0x10
mov dword [0x10083fd8], eax
mov byte [ebp - 4], 7
lea ecx, [ebp - 0x4d4]
call fcn.1002754e
push 0x2b7a
push 1
push 0x6201
push 1
push 0x20b4
push 0x61c6
call fcn.10018e73
add esp, 0x18
cmp dword [0x10083fd8], 0
je 0x1001b892
mov ecx, dword [ebp - 0x194]
call fcn.1000b9c1
push eax
call dword [0x10083fd8]
mov dword [ebp - 0x24], eax
mov dword [ebp - 0x2c], 0xb11accba
mov dword [ebp - 0x13c], 9
mov dword [ebp - 0x1e4], 0xffffffff
mov dword [ebp - 0x300], 0x949f0dc4
mov dword [ebp - 0xa8], 0
jmp 0x1001b8d0
mov eax, dword [ebp - 0xa8]
inc eax
mov dword [ebp - 0xa8], eax
cmp dword [ebp - 0xa8], 3
jge 0x1001b8ec
mov eax, dword [ebp - 0xa8]
mov dword [ebp + eax*4 - 0x3a0], 0x4f37831e
jmp 0x1001b8c3
mov dword [ebp - 0x2c], 1
mov dword [ebp - 0x2c], 2
jmp 0x1001b903
mov eax, dword [ebp - 0x2c]
dec eax
mov dword [ebp - 0x2c], eax
cmp dword [ebp - 0x2c], 0
jl 0x1001be03
mov dword [ebp - 0x19c], 0x2e2
mov dword [ebp - 0x2f4], str.hog_jsrc_isqqy_knfhm_pzwwnqeme_kfbef_pdyli_wug
cmp dword [ebp - 0x19c], 0x393
jle 0x1001b9da
and dword [ebp - 0xdc], 0
jmp 0x1001b947
mov eax, dword [ebp - 0xdc]
inc eax
mov dword [ebp - 0xdc], eax
cmp dword [ebp - 0xdc], 0x201c
jge 0x1001b9da
and dword [ebp - 0xb0], 0
jmp 0x1001b96d
mov eax, dword [ebp - 0xb0]
inc eax
mov dword [ebp - 0xb0], eax
cmp dword [ebp - 0xb0], 0x7290
jge 0x1001b9d5
and dword [ebp - 0xd4], 0
jmp 0x1001b98f
mov eax, dword [ebp - 0xd4]
inc eax
mov dword [ebp - 0xd4], eax
cmp dword [ebp - 0xd4], 0x609b
jge 0x1001b9d3
mov eax, dword [ebp - 0xb0]
imul eax, dword [ebp - 0xd4]
add eax, dword [ebp - 0xdc]
cdq
mov dword [ebp - 0x308], eax
mov dword [ebp - 0x304], edx
push dword [ebp - 0x304]
push dword [ebp - 0x308]
mov ecx, 0x10080d38
call fcn.1000b7ed
jmp 0x1001b982
jmp 0x1001b960
jmp 0x1001b93a
push 3
lea ecx, [ebp - 0x268]
call fcn.1000ba05
mov byte [ebp - 4], 0x14
mov byte [ebp - 4], 0x15
cmp dword [ebp - 0x19c], 0x1b0
jge 0x1001ba0b
mov edx, dword [ebp - 0x2f4]
mov ecx, 0x10080d38
call fcn.1000da64
jmp 0x1001ba27
mov dword [ebp - 4], 0x14
jmp 0x1001ba37
push 1
lea ecx, [ebp - 0x418]
call fcn.1000ba05
mov byte [ebp - 4], 0x17
push 1
push 0x22e0
push 1
lea eax, [ebp - 0x320]
push eax
lea eax, [ebp - 0x268]
push eax
call fcn.10014489
add esp, 0x14
push 0
lea eax, [ebp - 0x418]
push eax
push 0x2e79
push 0x2141
push 0
lea eax, [ebp - 0x320]
push eax
call fcn.1001ca77
add esp, 0x18
mov byte [ebp - 0x1e], 0
push 1
lea eax, [ebp - 0x1e]
push eax
push 1
push 0x530d
push 1
call fcn.10019487
add esp, 0x14
push 0
lea ecx, [ebp - 0x268]
call fcn.1000baa4
mov dword [eax], 2
jmp 0x1001badf
push 0
lea ecx, [ebp - 0x268]
call fcn.1000baa4
mov dword [ebp - 0x1a4], eax
mov eax, dword [ebp - 0x1a4]
mov eax, dword [eax]
dec eax
mov ecx, dword [ebp - 0x1a4]
mov dword [ecx], eax
push 0
lea ecx, [ebp - 0x268]
call fcn.1000baa4
cmp dword [eax], 0
jl 0x1001bde0
mov dword [ebp - 0x1c], 1
mov dword [ebp - 0xe4], 0
jmp 0x1001bb15
mov eax, dword [ebp - 0xe4]
inc eax
mov dword [ebp - 0xe4], eax
cmp dword [ebp - 0xe4], 2
jge 0x1001bb31
mov eax, dword [ebp - 0xe4]
mov dword [ebp + eax*4 - 0x45c], 0xffffffff
jmp 0x1001bb08
mov dword [ebp - 0x1c], 0
jmp 0x1001bb41
mov eax, dword [ebp - 0x1c]
inc eax
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 2
jg 0x1001bdcd
mov dword [ebp - 0x44], 0xd42ca8cd
mov dword [ebp - 0xec], 1
mov dword [ebp - 0x1bc], 0x3b16aac8
mov dword [ebp - 0x1b4], 0
mov dword [ebp - 0x44], 0
jmp 0x1001bb80
mov eax, dword [ebp - 0x44]
inc eax
mov dword [ebp - 0x44], eax
cmp dword [ebp - 0x44], 2
jg 0x1001bda4
and dword [ebp - 0x3e8], 0
and dword [ebp - 0x3e4], 0
and dword [ebp - 0x3e0], 0
and dword [ebp - 0x3dc], 0
lea ecx, [ebp - 0x121]
call fcn.1000bab3
push eax
lea eax, [ebp - 0x3d8]
push eax
lea eax, [ebp - 0x3e8]
push eax
lea ecx, [ebp - 0x4bc]
call fcn.1000bab6
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0x3f4]
call fcn.1000ba62
mov byte [ebp - 4], 0x18
mov dword [ebp - 0xec], 0x9cc099a5
cmp dword [ebp - 0xec], 0
push 0
lea ecx, [ebp - 0x268]
call fcn.1000baa4
mov eax, dword [ebp - 0x1c]
push 4
pop ecx
shl ecx, 1
mov ecx, dword [ebp + ecx - 0x3a0]
cmp ecx, dword [ebp + eax*4 - 0x3a0]
jge 0x1001bc21
mov dword [ebp - 0x128], 1
jmp 0x1001bc28
and dword [ebp - 0x128], 0
push 0
lea ecx, [ebp - 0x3f4]
call fcn.1000baa4
mov ecx, dword [ebp - 0x128]
mov dword [eax], ecx
mov eax, dword [ebp - 0x2c]
cmp dword [ebp - 0x128], eax
jge 0x1001bc54
mov dword [ebp - 0x1ac], 1
jmp 0x1001bc5b
and dword [ebp - 0x1ac], 0
mov eax, dword [ebp - 0x1ac]
mov dword [ebp - 0x1b4], eax
cmp dword [ebp - 0x1b4], 0
je 0x1001bc8b
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0x3a0], 0
je 0x1001bc8b
mov dword [ebp - 0x1c4], 1
jmp 0x1001bc92
and dword [ebp - 0x1c4], 0
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0xec], eax
mov eax, dword [ebp - 0xec]
mov dword [ebp - 0x1bc], eax
mov eax, dword [ebp - 0x1bc]
cmp eax, dword [ebp - 0x1c4]
jl 0x1001bcc1
mov dword [ebp - 0x12c], 1
jmp 0x1001bcc8
and dword [ebp - 0x12c], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x12c]
mov dword [ebp + eax - 0x45c], ecx
mov eax, dword [ebp - 0x44]
cmp dword [ebp - 0x12c], eax
je 0x1001bd04
push 0
lea ecx, [ebp - 0x3f4]
call fcn.1000baa4
cmp dword [eax], 0
je 0x1001bd04
mov dword [ebp - 0x1cc], 1
jmp 0x1001bd0b
and dword [ebp - 0x1cc], 0
mov eax, dword [ebp - 0x1c]
cmp dword [ebp - 0x1cc], eax
jg 0x1001bd22
mov dword [ebp - 0x1d4], 1
jmp 0x1001bd29
and dword [ebp - 0x1d4], 0
mov eax, dword [ebp - 0x1d4]
mov dword [ebp - 0x13c], eax
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp + eax*4 - 0x3a0]
mov dword [ebp - 0x488], eax
mov eax, dword [ebp - 0x13c]
mov dword [ebp - 0x464], eax
mov dword [ebp - 0x1e4], 0xd40a7fcc
mov esi, dword [ebp - 0x1e4]
push 0
lea ecx, [ebp - 0x418]
call fcn.1000baa4
mov dword [eax], esi
push 1
push 0x3c1d
push 0x195
push 0xdcb
push 0
push 0x511d
call fcn.1001ca77
add esp, 0x18
mov byte [ebp - 4], 0x17
lea ecx, [ebp - 0x3f4]
call fcn.1000ba88
jmp 0x1001bb79
mov byte [ebp - 0x1d], 0
movzx eax, byte [ebp - 0x1d]
test eax, eax
je 0x1001bdc8
push 1
push 0x59b6
push 1
push 1
push 0x3352
call fcn.10019710
add esp, 0x14
jmp 0x1001bb3a
cmp dword [ebp - 0x300], 0
je 0x1001bddb
jmp 0x1001babb
jmp 0x1001babb
mov byte [ebp - 4], 0x14
lea ecx, [ebp - 0x418]
call fcn.1000ba88
mov byte [ebp - 4], 7
lea ecx, [ebp - 0x268]
call fcn.1000ba88
jmp 0x1001b8fc
cmp dword [ebp - 0x24], 0
je 0x1001be57
movzx eax, byte [0x10083fcd]
test eax, eax
je 0x1001be25
mov ecx, 0x100840bc
call fcn.100276b4
movzx eax, al
test eax, eax
jne 0x1001be57
lea eax, [ebp - 0x24]
push eax
lea eax, [ebp - 0x1ec]
push eax
push 1
push 0x75c
push 0x3b3a
push 1
push 0x100840bc
push 0x5b33
call fcn.100197e8
add esp, 0x20
mov byte [0x10083fcd], 1
push 3
lea ecx, [ebp - 0x40c]
call fcn.1000ba05
mov byte [ebp - 4], 0x19
mov dword [ebp - 0x34], 0x2a276893
mov dword [ebp - 0x1fc], 0xffffffff
push 0x2845
push 0x5f60
push 0x69e5
push 1
lea eax, [ebp - 0x46c]
push eax
push 1
push 0x773e
lea eax, [ebp - 0x40c]
push eax
push 0
call fcn.10019e3e
add esp, 0x24
mov dword [ebp - 0x34], 2
jmp 0x1001beb9
mov eax, dword [ebp - 0x34]
dec eax
mov dword [ebp - 0x34], eax
cmp dword [ebp - 0x34], 0
jl 0x1001c0ad
push 4
lea ecx, [ebp - 0x394]
call fcn.1000ba05
mov byte [ebp - 4], 0x1a
push 1
lea eax, [ebp - 0x460]
push eax
push 0x1270
push 0x21fd
lea eax, [ebp - 0x394]
push eax
push 1
call fcn.100199e1
add esp, 0x18
mov dword [ebp - 0x1f4], 0x4bc5
mov dword [ebp - 0x30c], str.gqfxg_vilso_hdqfgjsgx_lfspm_ublfd
cmp dword [ebp - 0x1f4], 0x4ecd
jle 0x1001bff1
push 0
push 0xe9e
push 0x205e
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_SetViewportExtEx]
and dword [ebp - 0xf4], 0
jmp 0x1001bf52
mov eax, dword [ebp - 0xf4]
inc eax
mov dword [ebp - 0xf4], eax
cmp dword [ebp - 0xf4], 0x536a
jge 0x1001bfdc
and dword [ebp - 0xfc], 0
jmp 0x1001bf74
mov eax, dword [ebp - 0xfc]
inc eax
mov dword [ebp - 0xfc], eax
cmp dword [ebp - 0xfc], 0x1a32
jge 0x1001bfd7
mov eax, dword [ebp - 0xf4]
xor eax, dword [ebp - 0xfc]
cdq
mov dword [ebp - 0x314], eax
mov dword [ebp - 0x310], edx
push dword [ebp - 0x310]
push dword [ebp - 0x314]
lea ecx, [ebp - 0x53c]
call fcn.10001aa5
pop ecx
pop ecx
mov dword [ebp - 0x328], eax
mov ecx, dword [ebp - 0x328]
call fcn.1000b7cd
push eax
call fcn.1004c12c
pop ecx
lea ecx, [ebp - 0x53c]
call fcn.1000b7c3
jmp 0x1001bf67
jmp 0x1001bf45
push 0
push 0
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
push 0
push 0
call dword [sym.imp.USER32.dll_CreateDialogParamA]
mov byte [ebp - 4], 0x1b
cmp dword [ebp - 0x1f4], 0x47e4
jge 0x1001c00d
push dword [ebp - 0x30c]
call fcn.1004c12c
pop ecx
jmp 0x1001c029
mov dword [ebp - 4], 0x1a
jmp 0x1001c039
lea eax, [ebp - 0x34]
push eax
lea eax, [ebp - 0x40c]
push eax
push 0
lea eax, [ebp - 0x1fc]
push eax
push 0xb40
push 0xd73
push 0x5031
lea eax, [ebp - 0x394]
push eax
call fcn.100267c2
add esp, 0x20
push 1
push 1
push 0x22be
push 0x2bcb
lea eax, [ebp - 0x1fc]
push eax
lea eax, [ebp - 0x394]
push eax
push 0x57b2
push 0x7541
call fcn.10019c0e
add esp, 0x20
mov byte [ebp - 4], 0x19
lea ecx, [ebp - 0x394]
call fcn.1000ba88
jmp 0x1001beb2
mov byte [ebp - 4], 7
lea ecx, [ebp - 0x40c]
call fcn.1000ba88
mov eax, dword [ebp - 0x204]
mov ecx, dword [ebp - 0x24]
mov dword [eax], ecx
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x3c0]
call fcn.1000b962
jmp 0x1001c1fa
mov eax, dword [ebp - 0x330]
mov dword [ebp - 0x338], eax
mov eax, dword [ebp - 0x318]
mov dword [ebp - 0x340], eax
mov eax, dword [ebp - 0x338]
mov dword [ebp - 0x3c], eax
mov eax, dword [ebp - 0x340]
mov dword [ebp - 0x324], eax
mov eax, dword [ebp - 0x3c]
mov dword [eax], 0
jmp 0x1001c12f
mov eax, dword [ebp - 0x3c]
mov eax, dword [eax]
inc eax
mov ecx, dword [ebp - 0x3c]
mov dword [ecx], eax
mov eax, dword [ebp - 0x3c]
cmp dword [eax], 3
jge 0x1001c14f
mov eax, dword [ebp - 0x3c]
push dword [eax]
mov ecx, dword [ebp - 0x324]
call fcn.1000baa4
mov dword [eax], 0xbb2c2135
jmp 0x1001c124
jmp 0x1001c1fa
mov eax, dword [ebp + 0x10]
mov dword [ebp - 0x290], eax
mov eax, dword [ebp + 0x28]
mov dword [ebp - 0x32c], eax
lea eax, [ebp + 0x1c]
mov dword [ebp - 0x360], eax
mov eax, dword [ebp - 0x360]
movzx eax, byte [eax]
test eax, eax
je 0x1001c1e1
mov eax, dword [ebp - 0x32c]
mov dword [ebp - 0x298], eax
mov eax, dword [ebp - 0x290]
mov dword [ebp - 0x2a0], eax
mov eax, dword [ebp - 0x298]
mov dword [ebp - 0x4c], eax
mov eax, dword [ebp - 0x2a0]
mov dword [ebp - 0x2a8], eax
mov eax, dword [ebp - 0x4c]
mov dword [eax], 0
jmp 0x1001c1bf
mov eax, dword [ebp - 0x4c]
mov eax, dword [eax]
inc eax
mov ecx, dword [ebp - 0x4c]
mov dword [ecx], eax
mov eax, dword [ebp - 0x4c]
cmp dword [eax], 3
jge 0x1001c1df
mov eax, dword [ebp - 0x4c]
push dword [eax]
mov ecx, dword [ebp - 0x2a8]
call fcn.1000baa4
mov dword [eax], 0xfdf99ff6
jmp 0x1001c1b4
jmp 0x1001c1fa
push 0x22ce
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_SetTextAlign]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret