Function at 0x1001a61d
Capabilities:
Encrypt data using speck

Disassembly:
mov eax, 0x10056212
call fcn.1005557c
sub esp, 0x4b0
push ebx
push esi
push edi
mov dword [ebp - 0x190], 0xa48bbca6
xor ebx, ebx
mov dword [ebp - 0x1c4], 0xfffffffb
mov dword [ebp - 0x10], esp
mov dword [ebp - 0x30], 0xfffffff7
push 3
mov dword [ebp - 0x30], ebx
pop edi
mov dword [ebp - 0x19c], edi
mov dword [ebp - 0x30], 0x733582f8
mov dword [ebp - 0x24], ebx
jmp 0x1001a679
mov eax, dword [ebp - 0x24]
mov dword [ebp + eax*4 - 0x428], 0x707dfe4d
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], edi
jl 0x1001a668
push 1
push 0x4006
push 1
lea eax, [ebp - 0x1c4]
xor cl, cl
push eax
push 0x654e
lea edx, [ebp - 0x190]
call fcn.1001a4fc
add esp, 0x14
lea eax, [ebp - 0x19c]
mov edx, 0x455e
xor cl, cl
push 1
push 0x524c
push 0x2e6b
push 1
push eax
push 0x79de
call fcn.100188c4
mov dword [ebp - 0x20], 0x7834d8a9
add esp, 0x18
mov dword [ebp - 0x28], edi
mov dword [ebp - 0x24], ebx
jmp 0x1001a6ec
mov eax, dword [ebp - 0x24]
mov dword [ebp + eax*4 - 0x110], 5
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], 2
jl 0x1001a6db
mov dword [ebp - 0x110], ebx
jmp 0x1001a762
mov dword [ebp - 0x24], ebx
jmp 0x1001a710
mov eax, dword [ebp - 0x24]
mov dword [ebp + eax*4 - 0xe8], 0xfe01bd97
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], 1
jl 0x1001a6ff
mov dword [ebp - 0xe8], ebx
jmp 0x1001a753
push ecx
mov dword [ebp - 0x1a4], 0xffffffff
lea ecx, [ebp - 0x1a4]
push 1
call fcn.10018383
add esp, 4
mov byte [ebp - 0x82], bl
lea edx, [ebp - 0x82]
push ebx
call fcn.10018474
inc dword [ebp - 0xe8]
pop ecx
pop ecx
cmp dword [ebp - 0xe8], 0xf
jl 0x1001a71e
dec dword [ebp - 0x110]
cmp dword [ebp - 0x110], 0xffffffe8
jne 0x1001a6fa
xor ecx, ecx
mov dword [ebp - 0x20], ebx
inc ecx
cmp dword [ebp - 0x20], 0xd
jle 0x1001a88c
mov dword [ebp - 0x1c], 0xb24ce554
mov dword [ebp - 0x30], 0xffffffff
mov dword [ebp - 0x18], ebx
jmp 0x1001a79f
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x3d4], 0x46c38250
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], edi
jl 0x1001a78e
mov dword [ebp - 0x18], ebx
jmp 0x1001a7b6
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0xf0], ecx
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], ecx
jl 0x1001a7a9
mov dword [ebp - 0x1c], ebx
jmp 0x1001a87a
mov dword [ebp - 0x24], 0xffffffff
mov dword [ebp - 0x34], ecx
mov dword [ebp - 0x24], ebx
jmp 0x1001a868
mov dword [ebp - 0x2c], 9
dec dword [ebp - 0xf0]
mov dword [ebp - 0x2c], ecx
cmp dword [ebp - 0x2c], ebx
jl 0x1001a865
mov dword [ebp - 0x18], ebx
jmp 0x1001a800
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x1ac], 0xccce
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], ecx
jl 0x1001a7ef
push ecx
push ecx
mov edx, 0x1573
mov ecx, 0x3fcb
call fcn.10018e1e
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x3d0], eax
mov eax, dword [ebp - 0x24]
pop ecx
pop ecx
push 1
mov eax, dword [ebp + eax*4 - 0x110]
mov esi, dword [ebp - 0xf0]
mov eax, dword [ebp - 0x24]
dec esi
neg esi
sbb esi, esi
xor edx, edx
mov ecx, dword [ebp + eax*4 - 0x110]
inc esi
mov eax, dword [ebp - 0x28]
cmp ecx, eax
mov eax, dword [ebp - 0x34]
setl dl
sub esi, eax
sub edx, esi
neg edx
pop ecx
sbb edx, edx
inc edx
mov dword [ebp - 0x1ac], edx
dec dword [ebp - 0x2c]
jns 0x1001a7ea
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], ecx
jle 0x1001a7d5
mov eax, dword [ebp - 0xf0]
dec dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 0xfffffff7
je 0x1001a7c3
inc dword [ebp - 0x20]
jmp 0x1001a771
mov eax, dword [0x1017ea60]
test cl, al
jne 0x1001a8c4
or eax, ecx
mov dword [0x1017ea60], eax
mov dword [ebp - 4], ebx
mov dword [0x1017ea38], ebx
mov dword [0x1017ea3c], ebx
call fcn.100201ad
push 0x10056b1c
mov dword [0x1017ea38], eax
call fcn.100384ac
or dword [ebp - 4], 0xffffffff
pop ecx
mov dword [ebp - 0xb8], 0x477862fd
mov dword [ebp - 0x208], 0xa0d461e3
mov dword [ebp - 0x1e4], ebx
mov dword [ebp - 0x1f0], 0x48bbe26b
mov dword [ebp - 0x1c8], 0x1477a14a
mov dword [ebp - 0x48], 0x284f
cmp dword [ebp - 0x48], 0x296c
jle 0x1001a944
mov edi, ebx
mov esi, ebx
mov dword [ebp - 0x3c], ebx
mov dword [ebp - 0x28], esi
mov dword [ebp - 0x34], 0xa4a
mov ecx, esi
mov eax, edi
shl eax, cl
mov ecx, 0x1006f688
cdq
push edx
push eax
call fcn.10002383
dec esi
dec dword [ebp - 0x34]
jne 0x1001a913
mov esi, dword [ebp - 0x3c]
inc esi
mov dword [ebp - 0x3c], esi
cmp esi, 0x4da
jl 0x1001a909
inc edi
cmp edi, 0x4e6
jl 0x1001a904
mov dword [ebp - 4], 1
cmp dword [ebp - 0x48], 0x26a0
jge 0x1001a963
mov edx, str.asxwgmreq_xinp_bfxehrw_inqalz_ljytso
mov ecx, 0x1006f688
call fcn.10003d52
or dword [ebp - 4], 0xffffffff
mov dword [ebp - 0x18], ebx
jmp 0x1001a99b
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x314], ebx
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 1
jl 0x1001a98e
mov dword [ebp - 0x18], ebx
jmp 0x1001a9b7
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x388], 0xc71010f1
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 4
jl 0x1001a9a6
mov dword [ebp - 0xb8], ebx
jmp 0x1001aa76
mov dword [ebp - 0x1fc], 0x98070ade
mov dword [ebp - 0x200], 9
mov dword [ebp - 0x30], ebx
mov dword [ebp - 0x30], 0xf402be2f
mov dword [ebp - 0x30], 0xf57b17b4
mov dword [ebp - 0x30], 0x7e4ddbb7
mov dword [ebp - 0x30], 0xfb49a5c1
mov dword [ebp - 0x30], 6
mov dword [ebp - 0x30], 1
mov dword [ebp - 0x30], ebx
mov dword [ebp - 0x30], 0xfffffffc
mov dword [ebp - 0x1c], ebx
jmp 0x1001aa29
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0x41c], 0xa932da3b
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 2
jl 0x1001aa18
lea eax, [ebp - 0x1fc]
push eax
lea eax, [ebp - 0x1c8]
push eax
push ecx
lea eax, [ebp - 0xb8]
push eax
lea eax, [ebp - 0x208]
push eax
push ecx
lea eax, [ebp - 0x1e4]
push eax
push 1
lea edx, [ebp - 0x200]
lea ecx, [ebp - 0x1f0]
call fcn.10018118
add esp, 0x20
dec dword [ebp - 0x37c]
dec dword [ebp - 0xb8]
cmp dword [ebp - 0xb8], 0xfffffffb
jg 0x1001a9c8
cmp byte [0x1006f9fa], 0
jne 0x1001dc9b
push 1
mov dl, 1
push 0x1006f9fa
push 0x6f8d
mov cl, dl
call fcn.100181f7
xor ecx, ecx
add esp, 0xc
inc ecx
mov dword [ebp - 0x20], ecx
mov dword [ebp - 0x8c], 0xffffffff
mov dword [ebp - 0x28], 0xfae3c77d
mov dword [ebp - 0x1c], ebx
jmp 0x1001aad2
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0x50], 5
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], ecx
jl 0x1001aac4
lea eax, [ebp - 0x81]
mov byte [ebp - 0x81], bl
push eax
push 0x513c
push ecx
xor dl, dl
call fcn.10019433
add esp, 0xc
mov dword [ebp - 0x20], ebx
jmp 0x1001abde
push ecx
push 0x7e8e
mov dword [ebp - 0x34], 1
lea ecx, [ebp - 0x8c]
push 0x439f
mov dword [ebp - 0x24], 0xb65c
mov dword [ebp - 0x2c], 0x63e87122
push ebx
call fcn.10019058
mov eax, dword [ebp - 0x20]
add esp, 0x10
cmp dword [ebp + eax*4 - 0x50], ebx
jne 0x1001abd5
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp + eax*4 - 0x50]
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp + eax*4 - 0x50]
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0x8c]
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp + eax*4 - 0x50]
mov eax, dword [ebp - 0x8c]
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0x8c]
mov eax, dword [ebp - 0x50]
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp + eax*4 - 0x50]
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0x50]
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp + eax*4 - 0x50]
mov eax, dword [ebp - 0x24]
mov dword [ebp - 0x2c], eax
mov eax, dword [ebp - 0x2c]
mov dword [ebp - 0x8c], eax
mov eax, dword [ebp - 0x20]
mov edx, dword [ebp + eax*4 - 0x50]
mov eax, dword [ebp - 0x8c]
imul edx, eax
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp + eax*4 - 0x50]
mov eax, dword [ebp - 0x20]
imul eax, edx
add ecx, eax
jne 0x1001abb2
mov eax, dword [ebp - 0x8c]
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x34], 4
mov eax, dword [ebp - 0x34]
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp + eax*4 - 0x50]
cmp dword [ebp - 0x24], ebx
jne 0x1001abd5
mov eax, ebx
jmp 0x1001abd8
xor eax, eax
inc eax
mov dword [ebp - 0x28], eax
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], ebx
jle 0x1001aafc
mov dword [ebp - 0x20], 2
mov dword [ebp - 0x18], 0x9141a9c2
mov dword [ebp - 0x3c], 0xec5e
mov dword [ebp - 0x24], 0xc593c869
mov dword [ebp - 0x28], 0xb4b5a9ce
mov dword [ebp - 0x34], 0xccedb775
mov dword [ebp - 0x48], 0xb52d
mov dword [ebp - 0x34], 0x6485
cmp dword [ebp - 0x34], 0x673c
mov dword [ebp - 0x44], 0x1006bad0
jle 0x1001ac76
mov esi, ebx
mov edi, ebx
mov eax, edi
lea ecx, [ebp - 0x44c]
xor eax, esi
cdq
push edx
push eax
call fcn.100042e3
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x1001ac4f
mov eax, dword [eax]
push eax
call fcn.10039f30
pop ecx
push ebx
push 1
lea ecx, [ebp - 0x44c]
call fcn.10002764
inc edi
cmp edi, 0x2cef
jl 0x1001ac33
inc esi
cmp esi, 0x51f4
jl 0x1001ac31
mov dword [ebp - 0x1c], ebx
jmp 0x1001ac8c
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0xc4], 0xd4e2b79d
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 1
jl 0x1001ac7b
cmp dword [ebp - 0x34], 0x60b3
jge 0x1001aca6
push str.moqhvhs_ske_bvns_dxulmt_ylbh
call fcn.10039f30
pop ecx
or dword [ebp - 4], 0xffffffff
cmp dword [ebp - 0x20], ebx
jne 0x1001acc8
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x18], eax
mov ecx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x20]
add eax, 0x2456
add eax, ecx
jne 0x1001acc8
mov ecx, ebx
jmp 0x1001accb
xor ecx, ecx
inc ecx
mov eax, dword [ebp - 0x20]
sub eax, ecx
neg eax
sbb eax, eax
inc eax
cmp eax, 0xffffffff
mov eax, dword [ebp - 0x20]
sbb edx, edx
xor ecx, ecx
neg edx
cmp edx, eax
setge cl
cmp ecx, 0xd018
jg 0x1001acfa
cmp dword [ebp - 0x18], ebx
jne 0x1001acfa
xor edx, edx
mov ecx, ebx
inc edx
jmp 0x1001acff
xor edx, edx
inc edx
mov ecx, edx
mov eax, dword [ebp - 0x20]
add eax, ecx
neg eax
cmp eax, dword [ebp - 0x20]
jne 0x1001ad65
mov dword [ebp - 0x30], 0xfffffff8
mov dword [ebp - 0x30], ebx
inc dword [ebp - 0xc4]
mov dword [ebp - 0x20], ebx
cmp dword [ebp - 0x20], ebx
jl 0x1001ae02
mov dword [ebp - 0x18], ebx
cmp dword [ebp - 0x18], ebx
jl 0x1001ad5b
mov dword [ebp - 0x24], ebx
jmp 0x1001ad45
mov eax, dword [ebp - 0x24]
mov dword [ebp + eax*4 - 0xc4], 0xffffffff
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], edx
jl 0x1001ad34
mov eax, dword [ebp - 0x20]
cmp dword [ebp + eax*4 - 0xc4], ebx
jne 0x1001ad5b
dec dword [ebp - 0x18]
jns 0x1001ad2f
dec dword [ebp - 0x20]
jns 0x1001ad27
jmp 0x1001ae02
mov dword [ebp - 0x20], ebx
mov dword [ebp - 0x34], 0x8be776e9
mov dword [ebp - 0x1c], ebx
jmp 0x1001ad85
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0xf8], 0x1f433c8a
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], edx
jl 0x1001ad74
mov eax, dword [ebp - 0x28]
add eax, dword [ebp - 0x18]
jne 0x1001ad95
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0x20]
xor ecx, ecx
mov eax, dword [ebp - 0xc4]
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x3c]
test eax, eax
mov dword [ebp - 0xf8], eax
setle cl
mov dword [ebp - 0x20], ecx
mov ecx, dword [ebp - 0x20]
mov eax, dword [ebp - 0x48]
inc eax
add eax, ecx
sub eax, dword [ebp - 0x34]
neg eax
sbb eax, eax
inc eax
mov dword [ebp - 0x24], eax
mov eax, dword [ebp - 0xf8]
cmp dword [ebp - 0xc4], ebx
je 0x1001adfd
mov eax, dword [ebp - 0x34]
xor edx, edx
mov ecx, dword [ebp - 0xf8]
mov eax, dword [ebp - 0x3c]
cmp eax, ecx
mov eax, dword [ebp - 0x20]
setg dl
sub eax, edx
neg eax
sbb eax, eax
xor edx, edx
inc eax
inc edx
cmp eax, dword [ebp - 0x20]
mov eax, edx
jg 0x1001adff
mov eax, ebx
mov dword [ebp - 0x34], eax
mov cl, byte [0x1006bad0]
push 0xc
mov dword [ebp - 0x48], ebx
pop eax
cmp cl, byte [eax + 0x1006bad0]
je 0x1001ae23
inc eax
cmp eax, 0xe0
jl 0x1001ae0e
jmp 0x1001af3d
mov dword [ebp - 0x64], 0xffffffff
mov dword [ebp - 0xb4], 0x6bd085c9
mov dword [ebp - 0x28], edx
mov dword [ebp - 0x48], eax
mov dword [ebp - 0x1c], ebx
jmp 0x1001ae4c
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0x174], edx
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 2
jl 0x1001ae3f
mov dword [ebp - 0x64], 0xffffffec
cmp dword [ebp - 0x64], 0xfffffff6
jle 0x1001aea0
lea eax, [ebp - 0x210]
mov dword [ebp - 0x1f8], 0x4ab2
push eax
push ecx
push ecx
lea eax, [ebp - 0xb4]
mov dword [ebp - 0x210], edx
push eax
lea eax, [ebp - 0x1f8]
xor dl, dl
push eax
lea eax, [ebp - 0x64]
push eax
call fcn.10018597
add esp, 0x18
inc dword [ebp - 0x64]
cmp dword [ebp - 0x64], 0xfffffff6
push 1
pop edx
jg 0x1001ae5f
mov dword [ebp - 0xb4], ebx
jmp 0x1001af31
mov dword [ebp - 0x24], 0xfffffffa
mov dword [ebp - 0x2c], 0x25ec5604
mov dword [ebp - 0x64], 0x2daab72b
mov eax, dword [ebp - 0x64]
mov dword [ebp - 0x174], eax
cmp dword [ebp - 0x24], ebx
jne 0x1001aedb
mov eax, dword [ebp - 0x24]
mov esi, ebx
cmp dword [ebp - 0x170], ebx
je 0x1001aedd
mov esi, edx
mov eax, dword [ebp - 0x174]
xor ecx, ecx
cmp esi, eax
sete cl
add ecx, 0x5950
je 0x1001aefc
mov esi, edx
cmp dword [ebp - 0x174], ebx
jne 0x1001aefe
mov esi, ebx
cmp dword [ebp - 0x24], 0xfffffffb
sbb eax, eax
xor ecx, ecx
inc eax
cmp eax, esi
setle cl
mov dword [ebp - 0x2c], ecx
cmp dword [ebp - 0x2c], ebx
je 0x1001af17
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x2c]
sub eax, dword [ebp - 0x64]
neg eax
sbb eax, eax
inc eax
mov dword [ebp - 0x28], eax
inc dword [ebp - 0xb4]
cmp dword [ebp - 0xb4], ebx
jle 0x1001aeab
mov dword [ebp - 0x30], edx
mov dword [ebp - 0x34], 0x905d09ea
mov dword [ebp - 0x1c], ebx
jmp 0x1001af5d
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0x414], 0xfffffffb
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 2
jl 0x1001af4c
dec dword [ebp - 0x34]
sub esp, 0xc
mov cl, dl
call fcn.10016c43
add esp, 0xc
mov dword [ebp - 0x30], 0x862f
lea eax, [ebp - 0x83]
mov byte [ebp - 0x83], bl
push eax
push ecx
xor cl, cl
call fcn.1001782c
add esp, 4
mov byte [ebp - 0x98], bl
push ebx
push ecx
lea ecx, [ebp - 0x98]
call fcn.10018441
xor edx, edx
mov dword [ebp - 0x20], ebx
add esp, 0xc
mov dword [ebp - 0x3c], 0x1006bbb0
inc edx
mov dword [ebp - 0x28], edx
mov dword [ebp - 0x1c], ebx
jmp 0x1001afcb
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0x58], 7
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], edx
jl 0x1001afbd
mov dword [ebp - 0x20], ebx
jmp 0x1001b0e4
mov dword [ebp - 0x34], 0xf7d96711
mov dword [ebp - 0x24], 0xacb3
mov dword [ebp - 0x2c], 0x230b63e9
mov eax, dword [ebp - 0x20]
cmp dword [ebp + eax*4 - 0x58], ebx
je 0x1001b06a
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp + eax*4 - 0x58]
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp + eax*4 - 0x58]
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp + eax*4 - 0x58]
mov eax, dword [ebp - 0x58]
cmp dword [ebp - 0x34], ebx
je 0x1001b019
mov eax, dword [ebp - 0x58]
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp + eax*4 - 0x58]
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp + eax*4 - 0x58]
mov eax, dword [ebp - 0x58]
neg eax
sbb eax, eax
neg eax
imul eax, eax, 0xffff
test eax, eax
je 0x1001b044
mov esi, edx
cmp dword [ebp - 0x34], ebx
jne 0x1001b046
mov esi, ebx
mov eax, dword [ebp - 0x24]
xor ecx, ecx
cmp esi, eax
mov esi, edx
setg cl
mov dword [ebp - 0x2c], ecx
mov eax, dword [ebp - 0x2c]
sub eax, 0xfffffff8
neg eax
sbb eax, eax
inc eax
sub eax, dword [ebp - 0x20]
cmp eax, 0x5520f303
jg 0x1001b06c
mov esi, ebx
mov eax, dword [ebp - 0x24]
xor ecx, ecx
cmp esi, eax
sete cl
xor eax, eax
cmp ecx, 0x6293
mov ecx, 0xfffc
setne al
imul eax, eax, 0x7c1
cmp ecx, eax
sbb eax, eax
inc eax
mov dword [ebp - 0x28], eax
mov dword [ebp - 0x24], ebx
cmp dword [ebp - 0x24], ebx
jg 0x1001b0e1
mov byte [ebp - 0x35], bl
cmp byte [ebp - 0x35], 0
je 0x1001b0d3
push 0x3f5e
push 0x536b
push ecx
push 0x38f7
push 0x1d6a
push ecx
push 0xd2a
push ebx
mov edx, 0x683b
mov ecx, 0x5df7
call fcn.10018118
add esp, 0x20
mov eax, dword [ebp - 0x58]
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], ebx
jle 0x1001b09c
xor edx, edx
inc edx
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], ebx
jle 0x1001afd8
xor cl, cl
call fcn.10019c07
mov al, byte [0x1006bbb0]
mov byte [ebp - 0x114], al
mov dword [ebp - 0x28], 0x35d3
cmp dword [ebp - 0x28], 0x37f1
mov dword [ebp - 0x68], str.syiulvq_ajix_dkfa_uhgankwzm_uat_zpyjtni_sqjjp_kqdtkkg_lfbbrpsj_yyxvkkeg_endoas_rjeus_ksabw
jle 0x1001b16b
mov dword [ebp - 0x24], ebx
mov eax, ebx
mov dword [ebp - 0x1c], 0x59b5
mov dword [ebp - 0x2c], eax
mov esi, ebx
mov edi, ebx
mov dword [ebp - 0x34], 0x7334
xor eax, edi
mov ecx, 0x1006f688
cdq
push edx
push eax
call fcn.10002383
mov eax, dword [ebp - 0x2c]
add edi, esi
dec dword [ebp - 0x34]
jne 0x1001b130
inc esi
cmp esi, 0x4ed3
jl 0x1001b127
mov edi, dword [ebp - 0x24]
add eax, edi
dec dword [ebp - 0x1c]
mov dword [ebp - 0x2c], eax
jne 0x1001b125
inc edi
mov dword [ebp - 0x24], edi
cmp edi, 0x3980
jl 0x1001b119
mov dword [ebp - 0x1c], 0x5b03
cmp dword [ebp - 0x1c], 0x5dc1
jle 0x1001b1cd
mov edi, ebx
mov dword [ebp - 0x2c], ebx
mov esi, ebx
mov dword [ebp - 0x34], ebx
mov ecx, esi
mov dword [ebp - 0x24], edi
mov esi, edi
mov dword [ebp - 0x18], ebx
shl esi, cl
mov edi, ebx
mov ecx, edi
mov eax, esi
sar eax, cl
mov ecx, 0x1006f688
cdq
push edx
push eax
call fcn.10002383
inc edi
cmp edi, 0x4a12
jl 0x1001b193
mov esi, dword [ebp - 0x34]
mov edi, dword [ebp - 0x2c]
inc esi
mov dword [ebp - 0x34], esi
cmp esi, 0x6d83
jl 0x1001b185
inc edi
mov dword [ebp - 0x2c], edi
cmp edi, 0x1067
jl 0x1001b180
mov dword [ebp - 4], 5
cmp dword [ebp - 0x1c], 0x5959
jge 0x1001b1ec
mov edx, str.dra_aqgbwxuf_unc_razxj_ajjyup
mov ecx, 0x1006f688
call fcn.10003d52
or dword [ebp - 4], 0xffffffff
mov dword [ebp - 0x18], 0x3ed15de0
mov dword [ebp - 0x20], ebx
mov dword [ebp - 0x34], 0xf90a
mov dword [ebp - 0x2c], 0xf23e93d0
mov dword [ebp - 0x30], 0x707e294
mov dword [ebp - 0x1c], ebx
jmp 0x1001b247
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0x2b4], 0x8a2b
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 3
jl 0x1001b236
cmp dword [ebp - 0x18], ebx
jne 0x1001b25c
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x18]
mov eax, ebx
jmp 0x1001b25f
xor eax, eax
inc eax
mov dword [ebp - 0x20], eax
mov eax, dword [ebp - 0x20]
cmp dword [ebp - 0x18], eax
je 0x1001b26d
mov eax, dword [ebp - 0x34]
mov dword [ebp - 0x2c], 0xe2949f4f
cmp dword [ebp - 0x2c], ebx
je 0x1001b436
mov dword [ebp - 0x34], 0xf88e10e5
mov dword [ebp - 0x1c], 0xfffffff6
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x20], eax
mov eax, dword [ebp - 0x2c]
mov dword [ebp - 0x34], eax
mov edx, dword [ebp - 0x1c]
sub edx, dword [ebp - 0x1c]
add edx, dword [ebp - 0x34]
mov eax, dword [ebp - 0x1c]
mov ecx, dword [ebp - 0x18]
sub ecx, eax
xor eax, eax
cmp edx, ecx
setg al
cmp eax, dword [ebp - 0x18]
jle 0x1001b3cd
mov dword [ebp - 0x20], ebx
cmp dword [ebp - 0x20], 2
jg 0x1001b406
mov dword [ebp - 0x34], 0x8cdf8abf
mov dword [ebp - 0x24], 0x10ea
cmp dword [ebp - 0x24], 0x11a9
jle 0x1001b33f
push ebx
call dword [sym.imp.USER32.dll_SetCursor]
mov ecx, ebx
mov dword [ebp - 0x1c], ebx
mov edi, ebx
mov esi, ebx
mov edx, ebx
mov dword [ebp - 0x2c], 0xb37
mov dword [ebp - 0x34], edx
mov eax, edi
and eax, edx
xor eax, ecx
mov ecx, 0x1006f688
cdq
push edx
push eax
call fcn.10002383
mov edx, dword [ebp - 0x34]
mov ecx, dword [ebp - 0x1c]
add edx, esi
dec dword [ebp - 0x2c]
mov dword [ebp - 0x34], edx
jne 0x1001b2f8
inc esi
cmp esi, 0x34f
jl 0x1001b2ec
inc edi
cmp edi, 0x4378
jl 0x1001b2ea
inc ecx
mov dword [ebp - 0x1c], ecx
cmp ecx, 0x2f23
jl 0x1001b2e8
call dword [sym.imp.USER32.dll_WaitMessage]
mov eax, dword [ebp - 0x20]
xor ecx, ecx
mov eax, dword [ebp + eax*4 - 0x2b4]
cmp eax, 0xb26c
setg cl
mov dword [ebp - 0x34], ecx
mov dword [ebp - 4], 7
cmp dword [ebp - 0x24], 0xddc
jge 0x1001b375
mov edx, str.ardmlhew_bwawoax_vnrmv_jeexuh_ooyhf_sqegzo
mov ecx, 0x1006f688
call fcn.10003d52
or dword [ebp - 4], 0xffffffff
mov dword [ebp - 0x18], ebx
jmp 0x1001b3bf
push 0x5855
push 1
push ecx
mov byte [ebp - 0xaa], bl
lea ecx, [ebp - 0xaa]
call fcn.10018658
add esp, 0xc
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 2
jle 0x1001b3a0
inc dword [ebp - 0x20]
jmp 0x1001b2bb
push ecx
lea eax, [ebp - 0x99]
mov byte [ebp - 0x99], bl
push eax
mov cl, 1
call fcn.1001835a
pop ecx
pop ecx
mov dword [ebp - 0x20], ebx
jmp 0x1001b400
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp + eax*4 - 0x2b4]
mov eax, dword [ebp - 0x20]
mov dword [ebp + eax*4 - 0x2b4], ecx
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], 2
jle 0x1001b3e9
push 1
lea eax, [ebp - 0x85]
mov byte [ebp - 0x85], bl
push eax
push 0x1404
push ebx
push 0x37ad
push 0x7b73
mov edx, 0x471b
mov cl, 1
call fcn.100188c4
add esp, 0x18
jmp 0x1001b45a
push 1
push ebx
lea eax, [ebp - 0x84]
mov byte [ebp - 0x84], bl
push 1
push eax
mov edx, 0x7dc4
mov ecx, 0x7be2
call fcn.10018742
add esp, 0x10
mov dword [ebp - 4], 9
cmp dword [ebp - 0x28], 0x333b
jge 0x1001b477
mov edx, dword [ebp - 0x68]
mov ecx, 0x1006f688
call fcn.10003d52
or dword [ebp - 4], 0xffffffff
mov eax, dword [ebp - 0x44]
mov esi, dword [ebp - 0x3c]
mov dl, byte [eax]
mov cl, byte [esi]
call fcn.100201d8
mov byte [esi], al
mov dword [ebp - 0x44], 2
mov dword [ebp - 0x1c], ebx
jmp 0x1001b4cb
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0x194], 0x3fcb50bf
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 1
jl 0x1001b4ba
mov eax, dword [ebp - 0x44]
push ecx
push 1
push ecx
mov ecx, 0x1595
mov dword [ebp - 0x194], eax
call fcn.10018441
xor ecx, ecx
add esp, 0xc
inc ecx
mov edi, ecx
mov dword [ebp - 0x18], ecx
cmp edi, 4
jge 0x1001b980
mov al, byte [edi + esi]
mov byte [ebp - 0x51], al
mov dword [ebp - 0x18c], 0x1824a8c6
mov dword [ebp - 0x130], 0xdb856137
mov dword [ebp - 0x148], ecx
mov dword [ebp - 0x30], ebx
mov dword [ebp - 0x68], 0x2e58
mov dword [ebp - 0x30], 0xffffffff
mov dword [ebp - 0x30], 0x42573927
mov dword [ebp - 0x30], ecx
mov dword [ebp - 0x44], 0xed383de4
mov dword [ebp - 0x24], 0x1a8f
mov dword [ebp - 0x30], 0xfffffffe
mov dword [ebp - 0x28], 0x90b1c5ad
mov dword [ebp - 0x30], 0x8a1bab0
mov dword [ebp - 0x20], 0x88592840
mov dword [ebp - 0x30], ebx
mov dword [ebp - 0x30], ecx
mov dword [ebp - 0x30], 0xffffffff
mov dword [ebp - 0x40], 0xffffffff
mov dword [ebp - 0x1c], 0xc0f
cmp dword [ebp - 0x1c], 0xd9e
jle 0x1001b5e2
push 0x1794
push ebx
push 0x480
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDlgItemTextA]
mov dword [ebp - 0x34], ebx
mov dword [ebp - 0x2c], ebx
mov dword [ebp - 0x28], 0x6818
mov esi, dword [ebp - 0x2c]
mov edi, ebx
mov ecx, edi
mov eax, esi
sar eax, cl
mov ecx, 0x1006f688
cdq
push edx
push eax
call fcn.10002383
inc edi
cmp edi, 0x3b65
jl 0x1001b5af
mov esi, dword [ebp - 0x34]
add dword [ebp - 0x2c], esi
dec dword [ebp - 0x28]
jne 0x1001b5aa
inc esi
mov dword [ebp - 0x34], esi
cmp esi, 0x4d22
jl 0x1001b5a0
mov dword [ebp - 0x28], 0xfffffff9
mov dword [ebp - 4], 0xb
cmp dword [ebp - 0x1c], 0x8b3
jge 0x1001b608
mov edx, str.lunpkiefm_zeadasga_jnavpvt_mdxhwa
mov ecx, 0x1006f688
call fcn.10003d52
or dword [ebp - 4], 0xffffffff
mov dword [ebp - 0x28], ebx
mov dword [ebp - 0x28], 0xffffffff
mov dword [ebp - 0x2c], 0x75a8055a
push 8
pop eax
mov dword [ebp - 0x2d0], eax
mov dword [ebp - 0x2cc], eax
mov dword [ebp - 0x2c8], eax
mov dword [ebp - 0x2c4], eax
mov dword [ebp - 0x28], 0x266e
cmp dword [ebp - 0x28], 0x280a
jle 0x1001b69e
mov edi, ebx
mov esi, ebx
mov ecx, esi
mov eax, edi
shl eax, cl
lea ecx, [ebp - 0x470]
cdq
push edx
push eax
call fcn.100042e3
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x1001b66a
mov eax, dword [eax]
push eax
call fcn.10039f30
pop ecx
push ebx
push 1
lea ecx, [ebp - 0x470]
call fcn.10002764
inc esi
cmp esi, 0x1d38
jl 0x1001b64c
inc edi
cmp edi, 0x6bd6
jl 0x1001b64a
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_IsWindow]
mov dword [ebp - 0x34], 0x742e7ff2
cmp dword [ebp - 0x28], 0x24e1
jge 0x1001b6b9
push str.pnqibuai_dggsxwppn_tfl_cdwzup_fyubnnz_lshstwl
call fcn.10039f30
pop ecx
or dword [ebp - 4], 0xffffffff
mov dword [ebp - 0x1c], ebx
jmp 0x1001b6f4
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0x274], ebx
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 2
jl 0x1001b6e7
lea eax, [ebp - 0x148]
push eax
lea eax, [ebp - 0x18c]
push eax
push 0x5a10
lea eax, [ebp - 0x130]
push eax
push ecx
mov cl, 1
call fcn.10017fd8
mov eax, dword [ebp - 0x44]
add esp, 0x14
sub eax, dword [ebp - 0x148]
je 0x1001b768
inc dword [ebp - 0x2c]
xor edx, edx
mov ecx, dword [ebp - 0x270]
mov eax, dword [ebp - 0x274]
add ecx, 0x7a3c4c9d
cmp ecx, eax
mov eax, dword [ebp - 0x2c]
setge dl
xor ecx, ecx
cmp eax, edx
setle cl
mov dword [ebp - 0x28], ecx
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x2c4]
mov eax, dword [ebp - 0x68]
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x130]
inc dword [ebp - 0x24]
mov eax, dword [ebp - 0x40]
mov eax, dword [ebp - 0x30]
mov eax, dword [ebp - 0x24]
mov edi, dword [ebp - 0x18]
dec eax
mov dword [ebp - 0x34], eax
mov eax, edi
cdq
idiv dword [ebp - 0x48]
mov cl, byte [ebp - 0x51]
mov esi, edx
mov dl, byte [ebp - 0x114]
call fcn.100201d8
mov dl, byte [esi + 0x1006bad0]
mov cl, al
call fcn.100201d8
mov byte [edi + 0x1006bbb0], al
xor ecx, ecx
mov dword [ebp - 0x60], 9
inc ecx
mov dword [ebp - 0x28], 0x974a5202
mov dword [ebp - 0x1c], ebx
jmp 0x1001b7c7
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0x35c], ecx
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], ecx
jl 0x1001b7ba
lea eax, [ebp - 0x60]
xor dl, dl
push eax
call fcn.10018e49
pop ecx
mov dword [ebp - 0x60], ebx
jmp 0x1001b954
mov dword [ebp - 0x70], 0x143e95aa
xor edx, edx
mov dword [ebp - 0x30], 0xa2ef703c
mov dword [ebp - 0x30], 0x6b933888
mov dword [ebp - 0x358], 0xfffffff8
mov dword [ebp - 0x354], 0xfffffff8
mov dword [ebp - 0x350], 0xfffffff8
mov dword [ebp - 0x34c], 0xfffffff8
mov ecx, dword [ebp - 0x60]
mov eax, dword [ebp - 0x60]
cmp ecx, eax
mov ecx, 0x8884
setle dl
xor ebx, ebx
sub ecx, edx
mov edx, dword [ebp - 0x70]
add edx, ecx
mov ecx, dword [ebp - 0x70]
mov eax, dword [ebp - 0x60]
cmp eax, ecx
mov eax, dword [ebp - 0x70]
setle bl
xor ecx, ecx
imul ebx, edx
cmp ebx, eax
setl cl
mov dword [ebp - 0x28], ecx
mov eax, dword [ebp - 0x28]
sub eax, 0xc6fe681
je 0x1001b90a
xor ecx, ecx
inc ecx
xor ebx, ebx
mov dword [ebp - 0x24c], ecx
mov dword [ebp - 0x248], ecx
mov dword [ebp - 0x244], ecx
mov dword [ebp - 0x240], ecx
mov dword [ebp - 0x30], 0x1a6b719d
mov dword [ebp - 0x30], 0xa6d0811
mov dword [ebp - 0x30], 0xb0cadfb1
mov dword [ebp - 0x30], 0x7b69c93e
mov dword [ebp - 0x1c], ebx
jmp 0x1001b8b0
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0x330], 0xee94ccb0
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], ecx
jl 0x1001b89f
inc dword [ebp - 0x24c]
mov dword [ebp - 0x70], ebx
cmp dword [ebp - 0x70], 3
jg 0x1001b939
mov dword [ebp - 0x30], 0xcf687292
mov edx, 0x2ab3
mov dword [ebp - 0x30], ecx
push ecx
mov dword [ebp - 0x30], 0xffffffff
mov dword [ebp - 0x1f4], 0x576660b2
push ecx
call fcn.10018474
lea eax, [ebp - 0x1f4]
push eax
push 1
call fcn.1001a0a8
add esp, 0x10
inc dword [ebp - 0x70]
cmp dword [ebp - 0x70], 3
push 1
pop ecx
jle 0x1001b8c4
jmp 0x1001b936
push 0x2d81
push ecx
push ecx
push 0x2fa1
push 0x62b4
mov dword [ebp - 0x28], 0xfffb
mov dl, 1
inc dword [ebp - 0x28]
push 0x1ac6
call fcn.10018597
add esp, 0x18
xor ebx, ebx
xor ecx, ecx
inc ecx
push ecx
push ecx
push ecx
push 0x590
lea edx, [ebp - 0x70]
mov ecx, 0x2e8a
call fcn.10018742
add esp, 0x10
dec dword [ebp - 0x60]
cmp dword [ebp - 0x60], 0xffffffff
jl 0x1001b7e0
lea eax, [ebp - 0x51]
push 1
push eax
lea ecx, [ebp - 0x114]
call fcn.10017744
mov esi, dword [ebp - 0x3c]
inc edi
pop ecx
pop ecx
xor ecx, ecx
mov dword [ebp - 0x18], edi
inc ecx
jmp 0x1001b4f3
mov edi, dword [esi]
mov dword [ebp - 0x34], edi
lea eax, [edi - 1]
cmp eax, 0x271a
ja 0x1001dc12
mov dword [ebp - 0x44], ebx
mov dword [ebp - 0x30], 0x1d4c
mov dword [ebp - 0x24], 0x4914
push 3
mov dword [ebp - 0x40], ecx
mov dword [ebp - 0x20], ebx
pop edx
jmp 0x1001b9c0
mov eax, dword [ebp - 0x20]
mov dword [ebp + eax*4 - 0xd0], 0xffff
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], edx
jl 0x1001b9af
mov dword [ebp - 0x20], ebx
jmp 0x1001b9db
mov eax, dword [ebp - 0x20]
mov dword [ebp + eax*4 - 0x26c], 0xfffffff9
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], 4
jl 0x1001b9ca
mov dword [ebp - 0x20], ebx
jmp 0x1001b9f7
mov eax, dword [ebp - 0x20]
mov dword [ebp + eax*4 - 0x2a8], 0xfffffff6
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], edx
jl 0x1001b9e6
push ebx
push ecx
lea eax, [ebp - 0x86]
mov byte [ebp - 0x86], bl
push eax
push 0x7b4a
mov edx, 0x2f4f
xor cl, cl
call fcn.1001a16c
mov eax, dword [ebp - 0xc8]
add esp, 0x10
mov eax, dword [ebp - 0xc8]
mov eax, dword [ebp - 0xc8]
mov eax, dword [ebp - 0xcc]
mov eax, dword [ebp - 0xc8]
mov eax, dword [ebp - 0xc8]
mov eax, dword [ebp - 0xc8]
mov eax, dword [ebp - 0xd0]
mov eax, dword [ebp - 0xc8]
mov eax, dword [ebp - 0xc8]
mov eax, dword [ebp - 0xcc]
mov ecx, dword [ebp - 0xc8]
sub ecx, eax
mov eax, dword [ebp - 0xc8]
neg ecx
sbb ecx, ecx
xor edx, edx
inc ecx
cmp ecx, eax
mov ecx, dword [ebp - 0xc8]
mov eax, dword [ebp - 0xc8]
setle dl
imul ecx, edx
add eax, ecx
cmp dword [ebp - 0xc8], eax
je 0x1001bb4d
mov dword [ebp - 0x68], 0xf2633933
mov dword [ebp - 0x28], 0xf5bf8160
mov dword [ebp - 0x28], 0xb2811ff
mov dword [ebp - 0x2c], 0xfffffffd
mov dword [ebp - 0x30], 0xfffffffc
mov dword [ebp - 0x40], 1
mov dword [ebp - 0x224], ebx
mov dword [ebp - 0x220], ebx
mov dword [ebp - 0x21c], ebx
mov dword [ebp - 0x218], ebx
xor ebx, ebx
mov dword [ebp - 0x40], 0xca67
mov eax, dword [ebp - 0xc8]
mov eax, dword [ebp - 0x224]
mov eax, dword [ebp - 0x2a8]
mov eax, dword [ebp - 0x30]
mov eax, dword [ebp - 0x40]
sub eax, 9
mov dword [ebp - 0x264], eax
mov ecx, dword [ebp - 0x218]
mov eax, dword [ebp - 0x44]
cmp ecx, eax
mov eax, dword [ebp - 0x2c]
setne bl
xor edx, edx
cmp ebx, eax
mov eax, dword [ebp - 0x68]
setne dl
xor ecx, ecx
cmp edx, eax
setge cl
xor edx, edx
mov dword [ebp - 0x28], ecx
mov eax, dword [ebp - 0x28]
mov dword [ebp - 0x28], 1
mov ecx, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x28]
cmp eax, ecx
setge dl
xor ebx, ebx
mov dword [ebp - 0x21c], edx
jmp 0x1001bc2e
mov dword [ebp - 0x1c], 0x3cdb7cff
mov dword [ebp - 0x2c], 0x8626224f
mov dword [ebp - 0x24], ebx
jmp 0x1001bc1a
imul ecx, dword [ebp - 0x24], 0x5d26
xor edx, edx
mov eax, dword [ebp - 0x2a8]
cmp ecx, eax
mov eax, dword [ebp - 0x1c]
mov ecx, dword [ebp - 0x264]
setne dl
sub edx, eax
mov eax, dword [ebp - 0x1c]
add ecx, edx
xor edx, edx
cmp ecx, eax
setne dl
cmp dword [ebp - 0x30], edx
jg 0x1001bb9c
cmp dword [ebp - 0x1c], ebx
jne 0x1001bb9c
mov eax, ebx
jmp 0x1001bb9f
xor eax, eax
inc eax
xor ecx, ecx
cmp eax, 1
mov eax, dword [ebp - 0x2a4]
setge cl
xor edx, edx
cmp ecx, eax
mov eax, dword [ebp - 0x2c]
setge dl
xor ecx, ecx
cmp edx, eax
mov eax, dword [ebp - 0x260]
setle cl
sub eax, ecx
je 0x1001bbd9
mov eax, dword [ebp - 0x24]
cmp dword [ebp + eax*4 - 0xd0], ebx
je 0x1001bbd9
xor edx, edx
inc edx
jmp 0x1001bbdb
mov edx, ebx
mov eax, dword [ebp - 0x2c]
xor ecx, ecx
cmp edx, eax
setl cl
sub ecx, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x2c]
imul ecx, eax
mov dword [ebp - 0x260], ecx
mov eax, dword [ebp - 0x24]
imul edx, dword [ebp + eax*4 - 0xd0], 0x26b1
lea eax, [ecx + 0x1bdb]
neg edx
sbb edx, edx
xor ecx, ecx
inc edx
cmp edx, eax
setle cl
mov dword [ebp - 0x40], ecx
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], 2
jle 0x1001bb63
mov dword [ebp - 0x260], 0xfffffffe
push dword [ebp - 0x48]
mov edx, edi
push ecx
push dword [ebp - 0x114]
push esi
call fcn.10016be1
add esp, 0x10
xor ecx, ecx
inc ecx
mov dword [ebp - 0x18], ecx
mov dword [ebp - 0x2c], 0x44262821
mov dword [ebp - 0x28], 0xfffffffc
push 3
mov dword [ebp - 0x30], ebx
mov dword [ebp - 0x18], ebx
pop edi
jmp 0x1001bc6f
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x16c], ecx
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], edi
jl 0x1001bc62
push 2
mov dword [ebp - 0x18], ebx
pop edx
jmp 0x1001bc89
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x17c], ecx
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], edx
jl 0x1001bc7c
mov dword [ebp - 0x18], edx
cmp dword [ebp - 0x18], ebx
jl 0x1001bd6b
jmp 0x1001bc9f
xor ecx, ecx
inc ecx
mov dword [ebp - 0x28], 0xd3f5047c
xor edx, edx
mov dword [ebp - 0x30], 0xa017779a
mov dword [ebp - 0x48], ecx
mov eax, dword [ebp - 0x18]
mov esi, dword [ebp + eax*4 - 0x16c]
mov ecx, dword [ebp - 0x30]
mov eax, dword [ebp - 0x18]
cmp ecx, eax
setge dl
cmp edx, esi
jne 0x1001bcdc
mov eax, dword [ebp - 0x18]
cmp dword [ebp + eax*4 - 0x16c], ebx
je 0x1001bcdc
xor eax, eax
inc eax
jmp 0x1001bcde
mov eax, ebx
mov dword [ebp - 0x17c], eax
xor ecx, ecx
cmp eax, 8
mov eax, dword [ebp - 0x18]
setge cl
xor edx, edx
mov eax, dword [ebp + eax*4 - 0x16c]
cmp eax, ecx
mov eax, dword [ebp - 0x18]
setge dl
imul edx, dword [ebp + eax*4 - 0x16c]
mov dword [ebp - 0x28], 0x41fc9a57
mov eax, dword [ebp - 0x28]
neg edx
sbb edx, edx
xor ecx, ecx
neg edx
cmp eax, edx
setge cl
xor edx, edx
cmp ecx, 7
setne dl
add edx, dword [ebp - 0x164]
mov eax, dword [ebp - 0x18]
sub edx, 0xeec54165
neg edx
sbb edx, edx
mov eax, dword [ebp + eax*4 - 0x16c]
inc edx
add eax, edx
sub eax, dword [ebp - 0x2c]
neg eax
sbb eax, eax
inc eax
mov dword [ebp - 0x48], eax
mov dword [ebp - 0x48], 0x211521fa
mov eax, dword [ebp - 0x48]
mov dword [ebp - 0x178], eax
dec dword [ebp - 0x18]
jns 0x1001bc9c
mov esi, dword [ebp - 0x3c]
mov dword [ebp - 0x18], 0x655af779
xor edx, edx
mov ecx, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x18]
cmp ecx, eax
setl dl
mov dword [ebp - 0x28], edx
xor edx, edx
mov ecx, dword [ebp - 0x28]
mov eax, dword [ebp - 0x17c]
cmp eax, ecx
mov eax, dword [ebp - 0x168]
mov ecx, 0x1017ea38
setle dl
add eax, edx
mov dword [ebp - 0x178], eax
mov eax, dword [0x1017ea38]
push dword [eax + 4]
call fcn.1001e626
mov eax, dword [0x1017ea38]
mov dword [eax + 4], eax
mov eax, dword [0x1017ea38]
mov dword [eax], eax
mov eax, dword [0x1017ea38]
mov dword [eax + 8], eax
mov dword [0x1017ea3c], ebx
mov dword [ebp - 0xa0], ebx
mov dword [ebp - 0x198], ebx
mov dword [ebp - 0x1c], ebx
jmp 0x1001bdf1
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0x3ec], 0x4d07
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 4
jl 0x1001bde0
lea eax, [ebp - 0xa0]
mov edx, 0xade
push eax
push ecx
push 1
call fcn.10018869
add esp, 0xc
mov dword [ebp - 0xa0], edi
cmp dword [ebp - 0xa0], ebx
jl 0x1001be62
mov eax, dword [ebp - 0xa0]
cmp dword [ebp + eax*4 - 0x3ec], ebx
jne 0x1001be62
push 0x2bbd
push ebx
push 0x706d
lea eax, [ebp - 0x198]
mov edx, 0x7311
push eax
push 0x25e4
lea eax, [ebp - 0xa0]
mov cl, 1
push eax
push 1
call fcn.10019677
add esp, 0x1c
dec dword [ebp - 0xa0]
jns 0x1001be1c
mov dword [ebp - 0xe0], ebx
lea eax, [esi + 4]
mov dword [ebp - 0x24], 0x7730f94f
mov dword [ebp - 0x48], eax
mov dword [ebp - 0x18], ebx
jmp 0x1001be8b
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x22c], 0xfffffffa
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 2
jl 0x1001be7a
mov dword [ebp - 0x28], 0x6347
cmp dword [ebp - 0x28], 0x655e
jle 0x1001bedf
push 0x2550
push 0x2ee
push ebx
call dword [sym.imp.USER32.dll_RemoveMenu]
mov esi, ebx
mov edi, ebx
mov eax, esi
mov ecx, 0x1006f688
cdq
idiv edi
mov eax, edx
cdq
push edx
push eax
call fcn.10002383
inc edi
cmp edi, 0x7f73
jl 0x1001beb6
inc esi
cmp esi, 0x1c74
jl 0x1001beb4
push 3
pop edi
mov dword [ebp - 0x18], ebx
jmp 0x1001bef5
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x3a4], 0xfa3a92bd
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], edi
jl 0x1001bee4
mov dword [ebp - 4], 0xf
cmp dword [ebp - 0x28], 0x60b2
jge 0x1001bf19
mov edx, str.salsrqzm_xnzdcm_yessc_gsb_kayk_qrlbvvi_upmgl_szwtwkd_vsjdsvvkm_jlaoeuvp
mov ecx, 0x1006f688
call fcn.10003d52
or dword [ebp - 4], 0xffffffff
push 1
push 0x3fdd
lea eax, [ebp - 0x8d]
mov byte [ebp - 0x8d], bl
push eax
push 1
push 0x1020
push 0x21c9
mov edx, 0xf50
mov cl, 1
call fcn.100188c4
add esp, 0x18
mov dword [ebp - 0x24], ebx
jmp 0x1001bfdd
mov dword [ebp - 0x300], 0xc9ebf495
xor ecx, ecx
mov dword [ebp - 0x2fc], 0xc9ebf495
mov dword [ebp - 0x2f8], 0xc9ebf495
mov dword [ebp - 0x2f4], 0xc9ebf495
mov dword [ebp - 0x3a0], 0xb9db
mov eax, dword [ebp - 0x24]
mov edx, dword [ebp + eax*4 - 0x22c]
mov eax, dword [ebp - 0x24]
add edx, 0xb9da
mov eax, dword [ebp + eax*4 - 0x22c]
cmp edx, eax
setne cl
xor eax, eax
cmp ecx, 1
setle al
mov dword [ebp - 0x2f8], eax
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], 1
jle 0x1001bf79
mov dword [ebp - 0x18], 8
mov dword [ebp - 0x28], 0x68aa
mov dword [ebp - 0x18], ebx
jmp 0x1001c0a4
mov dword [ebp - 0xfc], 5
mov dword [ebp - 0x3c], 0x3066c93e
mov dword [ebp - 0x1c], ebx
jmp 0x1001c020
push 0xa
pop esi
cmp dword [ebp - 0x18], esi
jl 0x1001bff9
xor ecx, ecx
mov dword [ebp - 0x7c], 0xc023200
mov byte [ebp - 0x78], 0x32
inc ecx
mov dword [ebp - 0x20], ecx
mov dword [ebp - 0x154], 0xbae0
mov dword [ebp - 0x20], ecx
jmp 0x1001c22c
mov dword [ebp - 0x24], 0x9e57ad95
mov dword [ebp - 0x1c], ebx
jmp 0x1001dc2f
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0x144], 0xc204e2db
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], ecx
jl 0x1001dc1e
lea eax, [ebp - 0xa2]
mov byte [ebp - 0xa2], bl
push eax
push ebx
push 0x6523
call fcn.1001a409
add esp, 0xc
mov dword [ebp - 0x24], ebx
jmp 0x1001dc96
mov dword [ebp - 0x28], 0xa028ea38
mov dword [ebp - 0x30], 0xdfba22e9
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp + eax*4 - 0x144]
mov dword [ebp - 0x28], eax
mov eax, dword [ebp - 0x24]
mov ecx, dword [ebp + eax*4 - 0x144]
cmp dword [ebp - 0x28], 0xfff7
sbb eax, eax
xor edx, edx
neg eax
cmp ecx, eax
setne dl
xor ecx, ecx
inc ecx
sub ecx, edx
mov dword [ebp - 0x30], ecx
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], ebx
jle 0x1001dc54
mov ecx, dword [ebp - 0xc]
mov eax, 0x1017ea38
pop edi
pop esi
mov dword fs:[0], ecx
pop ebx
mov esp, ebp
pop ebp
ret