Function at 0x1000dc05
Capabilities:
Get thread local storage value
Parse pe header
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x100577c5
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
push ecx
sub esp, 0x4f4
push ebx
push esi
push edi
mov dword [ebp - 0x10], esp
mov dword [ebp - 0x14], 0
mov dword [ebp - 0x3d0], 0xfff9
mov dword [ebp - 0x3cc], 0xfff9
mov dword [ebp - 0x3c8], 0xfff9
mov dword [ebp - 0x3c4], 0xfff9
lea ecx, [ebp - 0x161]
call fcn.10011cc0
push eax
lea eax, [ebp - 0x3c0]
push eax
lea eax, [ebp - 0x3d0]
push eax
lea ecx, [ebp - 0x498]
call fcn.10011cc3
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0x3dc]
call fcn.10011c13
and dword [ebp - 4], 0
mov dword [ebp - 0x160], 0x2717f403
mov dword [ebp - 0x14], 0xfffffffb
jmp 0x1000dcac
mov eax, dword [ebp - 0x14]
inc eax
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 0xffffffff
jne 0x1000dcbc
cmp dword [ebp - 0x14], 0
je 0x1000dcba
jmp 0x1000dcbc
jmp 0x1000dca5
cmp dword [ebp - 0x14], 0
jne 0x1000de74
cmp dword [ebp - 0x14], 0
jne 0x1000ddc8
mov eax, dword [ebp - 0x14]
cmp eax, dword [ebp - 0x160]
jg 0x1000dce7
mov dword [ebp - 0x210], 1
jmp 0x1000dcee
and dword [ebp - 0x210], 0
mov eax, dword [ebp - 0x210]
sub eax, 3
je 0x1000dd0b
cmp dword [ebp - 0x14], 0
je 0x1000dd0b
mov dword [ebp - 0x2a4], 1
jmp 0x1000dd12
and dword [ebp - 0x2a4], 0
mov eax, dword [ebp - 0x2a4]
neg eax
sub eax, 0xab55
cmp eax, dword [ebp - 0x14]
je 0x1000dd30
mov dword [ebp - 0x2ac], 1
jmp 0x1000dd37
and dword [ebp - 0x2ac], 0
mov eax, dword [ebp - 0x2ac]
mov dword [ebp - 0x160], eax
mov eax, dword [ebp - 0x14]
cmp eax, dword [ebp - 0x160]
jge 0x1000dd5a
mov dword [ebp - 0x298], 1
jmp 0x1000dd61
and dword [ebp - 0x298], 0
mov eax, dword [ebp - 0x14]
cmp dword [ebp - 0x298], eax
jne 0x1000dd7b
cmp dword [ebp - 0x14], 0
jne 0x1000dd7b
and dword [ebp - 0x180], 0
jmp 0x1000dd85
mov dword [ebp - 0x180], 1
mov eax, dword [ebp - 0x14]
cmp dword [ebp - 0x180], eax
jl 0x1000dd9c
mov dword [ebp - 0x28c], 1
jmp 0x1000dda3
and dword [ebp - 0x28c], 0
push 2
lea ecx, [ebp - 0x3dc]
call fcn.10011c5e
mov dword [eax], 8
cmp dword [ebp - 0x28c], 8
jl 0x1000ddc8
and dword [ebp - 0x220], 0
jmp 0x1000ddd2
mov dword [ebp - 0x220], 1
cmp dword [ebp - 0x220], 0x93fe
jge 0x1000ddea
mov dword [ebp - 0x188], 1
jmp 0x1000ddf1
and dword [ebp - 0x188], 0
mov eax, dword [ebp - 0x14]
cmp dword [ebp - 0x188], eax
je 0x1000de08
mov dword [ebp - 0x270], 1
jmp 0x1000de0f
and dword [ebp - 0x270], 0
cmp dword [ebp - 0x270], 0x9e6a
jge 0x1000de39
push 2
lea ecx, [ebp - 0x3dc]
call fcn.10011c5e
cmp dword [eax], 0
je 0x1000de39
mov dword [ebp - 0x190], 1
jmp 0x1000de40
and dword [ebp - 0x190], 0
mov eax, dword [ebp - 0x190]
neg eax
cmp eax, dword [ebp - 0x14]
je 0x1000de59
mov dword [ebp - 0x228], 1
jmp 0x1000de60
and dword [ebp - 0x228], 0
mov eax, dword [ebp - 0x14]
cmp dword [ebp - 0x228], eax
jle 0x1000de74
and dword [ebp - 0x198], 0
jmp 0x1000de7e
mov dword [ebp - 0x198], 1
mov eax, dword [ebp - 0x198]
mov dword [ebp - 0x14], eax
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x3dc]
call fcn.10011c39
cmp dword [ebp + 0x10], 0
jbe 0x1000e03d
movzx eax, byte [ebp + 0x14]
test eax, eax
je 0x1000e03d
mov dword [ebp - 0x80], 0xff40fc02
push 3
lea ecx, [ebp - 0x3b0]
call fcn.10011bd7
mov dword [ebp - 4], 1
mov dword [ebp - 0x14c], 0
jmp 0x1000dee0
mov eax, dword [ebp - 0x14c]
inc eax
mov dword [ebp - 0x14c], eax
cmp dword [ebp - 0x14c], 3
jge 0x1000deff
push dword [ebp - 0x14c]
lea ecx, [ebp - 0x3b0]
call fcn.10011c5e
or dword [eax], 0xffffffff
jmp 0x1000ded3
mov esi, dword [ebp - 0x80]
mov edi, dword [ebp - 0x80]
push 1
lea ecx, [ebp - 0x3b0]
call fcn.10011c5e
mov eax, dword [eax]
neg eax
add eax, edi
mov ecx, dword [ebp - 0x80]
sub ecx, eax
cmp ecx, esi
jle 0x1000df2d
mov dword [ebp - 0x29c], 1
jmp 0x1000df34
and dword [ebp - 0x29c], 0
push 1
lea ecx, [ebp - 0x3b0]
call fcn.10011c5e
mov ecx, dword [ebp - 0x29c]
cmp ecx, dword [eax]
jne 0x1000df5a
cmp dword [ebp - 0x80], 0
jne 0x1000df5a
and dword [ebp - 0x1a0], 0
jmp 0x1000df64
mov dword [ebp - 0x1a0], 1
mov eax, dword [ebp - 0x80]
cmp dword [ebp - 0x1a0], eax
je 0x1000df7b
mov dword [ebp - 0x230], 1
jmp 0x1000df82
and dword [ebp - 0x230], 0
mov eax, dword [ebp - 0x80]
cmp dword [ebp - 0x230], eax
jge 0x1000dfbf
mov byte [ebp - 0x68], 0
movzx eax, byte [ebp - 0x68]
test eax, eax
je 0x1000df9f
call dword [sym.imp.KERNEL32.dll_GetOEMCP]
mov byte [ebp - 0x58], 0
movzx eax, byte [ebp - 0x58]
test eax, eax
je 0x1000dfbd
push 0x20de
push 0x471
push 0
call dword [sym.imp.USER32.dll_CheckMenuItem]
jmp 0x1000e01a
mov byte [ebp - 0x65], 0
movzx eax, byte [ebp - 0x65]
test eax, eax
je 0x1000e01a
push 0x21a9
push 0x2449
push 0x240
push 0x26ba
push 0x234
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
push 0x215b
push 0x23f9
push 0x2fa
push 0xe9a
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_StretchBlt]
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x3b0]
call fcn.10011c39
movzx eax, word [ebp + 0x10]
push eax
push dword [ebp + 8]
call fcn.100081cc
pop ecx
pop ecx
jmp 0x1001014c
cmp dword [ebp + 0x10], 0
jne 0x1000f0f1
mov edx, dword [ebp + 8]
mov ecx, dword [ebp + 0xc]
call fcn.10001d01
mov dword [ebp - 0xfc], eax
mov dword [ebp - 0x1c], 0xac204e2d
mov dword [ebp - 0x28], 0x6a5b5cf0
mov dword [ebp - 0x170], 0x32883e73
mov dword [ebp - 0x1c], 0xffffffef
jmp 0x1000e080
mov eax, dword [ebp - 0x1c]
inc eax
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 0xfffffff2
jge 0x1000e142
mov dword [ebp - 0x90], 0xe17ca002
mov byte [ebp - 0x55], 0
movzx eax, byte [ebp - 0x55]
test eax, eax
je 0x1000e0ab
push 0x1198
call dword [sym.imp.KERNEL32.dll_SetLastError]
mov dword [ebp - 0x90], 5
jmp 0x1000e0c4
mov eax, dword [ebp - 0x90]
dec eax
mov dword [ebp - 0x90], eax
cmp dword [ebp - 0x90], 0xffffffe5
jg 0x1000e13d
mov dword [ebp - 0x88], 0xfffffffe
mov dword [ebp - 0x2e8], 0xfffffff7
mov dword [ebp - 0x88], 0
jmp 0x1000e0fa
mov eax, dword [ebp - 0x88]
dec eax
mov dword [ebp - 0x88], eax
cmp dword [ebp - 0x88], 0xfffffff0
jne 0x1000e138
cmp dword [ebp - 0x88], 0xfffffffd
je 0x1000e118
mov dword [ebp - 0x1a8], 1
jmp 0x1000e11f
and dword [ebp - 0x1a8], 0
mov eax, dword [ebp - 0x1a8]
mov dword [ebp - 0x2e8], eax
cmp dword [ebp - 0x90], 0
je 0x1000e136
jmp 0x1000e138
jmp 0x1000e0ed
jmp 0x1000e0b7
jmp 0x1000e079
cmp dword [ebp - 0x1c], 0
jne 0x1000e154
mov dword [ebp - 0x1b0], 1
jmp 0x1000e15b
and dword [ebp - 0x1b0], 0
mov eax, dword [ebp - 0x28]
cmp eax, dword [ebp - 0x1c]
jl 0x1000e16f
mov dword [ebp - 0x278], 1
jmp 0x1000e176
and dword [ebp - 0x278], 0
mov eax, dword [ebp - 0x28]
cmp dword [ebp - 0x278], eax
jge 0x1000e18d
mov dword [ebp - 0x238], 1
jmp 0x1000e194
and dword [ebp - 0x238], 0
mov eax, dword [ebp - 0x1b0]
cmp eax, dword [ebp - 0x238]
jne 0x1000e1ae
mov dword [ebp - 0x1b8], 1
jmp 0x1000e1b5
and dword [ebp - 0x1b8], 0
mov eax, dword [ebp - 0x1b8]
mov dword [ebp - 0x170], eax
mov eax, dword [ebp - 0x170]
cmp eax, dword [ebp - 0x28]
jl 0x1000e1d8
mov dword [ebp - 0x2a8], 1
jmp 0x1000e1df
and dword [ebp - 0x2a8], 0
cmp dword [ebp - 0x2a8], 0xfffffffb
je 0x1000e1f7
cmp dword [ebp - 0x28], 0
jne 0x1000e1f7
and dword [ebp - 0x1c0], 0
jmp 0x1000e201
mov dword [ebp - 0x1c0], 1
mov eax, dword [ebp - 0x1c]
cmp dword [ebp - 0x1c0], eax
jne 0x1000e218
mov dword [ebp - 0x240], 1
jmp 0x1000e21f
and dword [ebp - 0x240], 0
mov eax, dword [ebp - 0x240]
sub eax, 8
cmp eax, 0xe326
je 0x1000e23b
mov dword [ebp - 0x1c8], 1
jmp 0x1000e242
and dword [ebp - 0x1c8], 0
cmp dword [ebp - 0x1c8], 0xfffffffa
jne 0x1000e25d
cmp dword [ebp - 0x170], 0
jne 0x1000e25d
and dword [ebp - 0x280], 0
jmp 0x1000e267
mov dword [ebp - 0x280], 1
mov eax, dword [ebp - 0x28]
imul eax, dword [ebp - 0x280]
cmp eax, 0x7666
jl 0x1000e284
mov dword [ebp - 0x2d4], 1
jmp 0x1000e28b
and dword [ebp - 0x2d4], 0
mov eax, dword [ebp - 0x28]
mov dword [ebp - 0x40c], eax
cmp dword [ebp - 0x28], 0
jne 0x1000e29e
cmp dword [ebp - 0x28], 0
mov eax, dword [ebp - 0x1c]
cmp eax, dword [ebp - 0x1c]
jne 0x1000e2b2
mov dword [ebp - 0x1d0], 1
jmp 0x1000e2b9
and dword [ebp - 0x1d0], 0
imul eax, dword [ebp - 0x1d0], 0x70d9
cmp eax, dword [ebp - 0x1c]
jne 0x1000e2d4
mov dword [ebp - 0x248], 1
jmp 0x1000e2db
and dword [ebp - 0x248], 0
mov eax, dword [ebp - 0x1c]
cmp dword [ebp - 0x248], eax
jle 0x1000e2f2
mov dword [ebp - 0x1d8], 1
jmp 0x1000e2f9
and dword [ebp - 0x1d8], 0
mov eax, dword [ebp - 0x1c]
cmp eax, dword [ebp - 0x1d8]
jl 0x1000e313
cmp dword [ebp - 0x28], 0
jne 0x1000e313
and dword [ebp - 0x2a0], 0
jmp 0x1000e31d
mov dword [ebp - 0x2a0], 1
mov eax, dword [ebp - 0x28]
cmp dword [ebp - 0x2a0], eax
jne 0x1000e337
cmp dword [ebp - 0x28], 0
jne 0x1000e337
and dword [ebp - 0x1e0], 0
jmp 0x1000e341
mov dword [ebp - 0x1e0], 1
mov eax, dword [ebp - 0x1e0]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x344], 1
push 3
lea ecx, [ebp - 0x3e8]
call fcn.10011bd7
mov dword [ebp - 4], 2
push 1
lea ecx, [ebp - 0x2bc]
call fcn.10011bd7
mov byte [ebp - 4], 3
mov dword [ebp - 0xd8], 1
mov dword [ebp - 0x354], 0xf3b8c105
mov dword [ebp - 0x30], 0
jmp 0x1000e39d
mov eax, dword [ebp - 0x30]
inc eax
mov dword [ebp - 0x30], eax
cmp dword [ebp - 0x30], 3
jge 0x1000e3b9
push dword [ebp - 0x30]
lea ecx, [ebp - 0x3e8]
call fcn.10011c5e
mov dword [eax], 0x1bd97a88
jmp 0x1000e396
mov dword [ebp - 0x30], 0
jmp 0x1000e3c9
mov eax, dword [ebp - 0x30]
inc eax
mov dword [ebp - 0x30], eax
cmp dword [ebp - 0x30], 1
jge 0x1000e3e5
push dword [ebp - 0x30]
lea ecx, [ebp - 0x2bc]
call fcn.10011c5e
mov dword [eax], 0x735e4b78
jmp 0x1000e3c2
mov eax, dword [ebp - 0xd8]
mov ecx, dword [ebp - 0xd8]
inc ecx
mov dword [ebp - 0xd8], ecx
test eax, eax
je 0x1000e4ca
mov eax, dword [ebp - 0xd8]
mov dword [ebp - 0x424], eax
push 0
lea ecx, [ebp - 0x2bc]
call fcn.10011c5e
cmp dword [eax], 0x76f
je 0x1000e42d
mov dword [ebp - 0x250], 1
jmp 0x1000e434
and dword [ebp - 0x250], 0
push 0
lea ecx, [ebp - 0x2bc]
call fcn.10011c5e
mov ecx, dword [ebp - 0x250]
cmp ecx, dword [eax]
jne 0x1000e457
mov dword [ebp - 0x1e8], 1
jmp 0x1000e45e
and dword [ebp - 0x1e8], 0
push 0
lea ecx, [ebp - 0x2bc]
call fcn.10011c5e
mov ecx, dword [ebp - 0x1e8]
cmp ecx, dword [eax]
je 0x1000e481
mov dword [ebp - 0x288], 1
jmp 0x1000e488
and dword [ebp - 0x288], 0
push 0
lea ecx, [ebp - 0x2bc]
call fcn.10011c5e
mov ecx, dword [ebp - 0x288]
cmp ecx, dword [eax]
jl 0x1000e4ab
mov dword [ebp - 0x1f0], 1
jmp 0x1000e4b2
and dword [ebp - 0x1f0], 0
cmp dword [ebp - 0x1f0], 0x52835357
jle 0x1000e4ca
mov dword [ebp - 0x258], 1
jmp 0x1000e4d1
and dword [ebp - 0x258], 0
mov eax, dword [ebp - 0x344]
mov dword [ebp - 0x34c], eax
push 1
lea ecx, [ebp - 0x3e8]
call fcn.10011c5e
mov ecx, dword [ebp - 0x34c]
mov dword [eax], ecx
push 0
lea ecx, [ebp - 0x2bc]
call fcn.10011c5e
mov ecx, dword [ebp - 0x258]
mov dword [eax], ecx
mov dword [ebp - 0x354], 0xffffffff
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x2bc]
call fcn.10011c39
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x3e8]
call fcn.10011c39
mov dword [ebp - 0x3c], 3
push 1
lea ecx, [ebp - 0x3bc]
call fcn.10011bd7
mov dword [ebp - 4], 4
mov dword [ebp - 0x194], 7
mov dword [ebp - 0x1f8], 0x2f44
mov dword [ebp - 0x35c], str.qcb_kxnjbx_nev_tajrlguy_rdb_zwtilf_rixnlhkqg_okxehvsh_mfvaf_jpjue_jyhuh_yni_fhrgvmb_nywwia
cmp dword [ebp - 0x1f8], 0x2f5e
jle 0x1000e605
and dword [ebp - 0x130], 0
jmp 0x1000e58e
mov eax, dword [ebp - 0x130]
inc eax
mov dword [ebp - 0x130], eax
cmp dword [ebp - 0x130], 0x5f9d
jge 0x1000e5ef
and dword [ebp - 0xe0], 0
jmp 0x1000e5b0
mov eax, dword [ebp - 0xe0]
inc eax
mov dword [ebp - 0xe0], eax
cmp dword [ebp - 0xe0], 0x28f4
jge 0x1000e5ed
mov eax, dword [ebp - 0x130]
add eax, dword [ebp - 0xe0]
cdq
mov dword [ebp - 0x2f4], eax
mov dword [ebp - 0x2f0], edx
push dword [ebp - 0x2f0]
push dword [ebp - 0x2f4]
mov ecx, 0x10072d38
call fcn.10011982
jmp 0x1000e5a3
jmp 0x1000e581
push 0
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_SetTextColor]
mov dword [ebp - 0x2ec], 0
mov byte [ebp - 4], 5
cmp dword [ebp - 0x1f8], 0x2d17
jge 0x1000e62f
mov edx, dword [ebp - 0x35c]
mov ecx, 0x10072d38
call fcn.10016228
jmp 0x1000e64b
mov dword [ebp - 4], 4
jmp 0x1000e65b
mov dword [ebp - 0x34], 0
jmp 0x1000e66b
mov eax, dword [ebp - 0x34]
inc eax
mov dword [ebp - 0x34], eax
cmp dword [ebp - 0x34], 1
jge 0x1000e687
push dword [ebp - 0x34]
lea ecx, [ebp - 0x3bc]
call fcn.10011c5e
mov dword [eax], 0xcda7
jmp 0x1000e664
mov dword [ebp - 0x34], 0
jmp 0x1000e697
mov eax, dword [ebp - 0x34]
inc eax
mov dword [ebp - 0x34], eax
cmp dword [ebp - 0x34], 1
jge 0x1000e6ad
mov eax, dword [ebp - 0x34]
mov dword [ebp + eax*4 - 0x2e0], 0xdae1
jmp 0x1000e690
cmp dword [ebp - 0x3c], 0
je 0x1000e7a7
mov dword [ebp - 0x208], 0
mov dword [ebp - 0x200], 1
mov dword [ebp - 0x3f8], 1
mov dword [ebp - 0x3f4], 1
mov dword [ebp - 0x3f0], 1
mov dword [ebp - 0x3ec], 1
mov dword [ebp - 0x174], 0x4ef66b17
cmp dword [ebp - 0x3c], 1
je 0x1000e70f
mov dword [ebp - 0x16c], 1
jmp 0x1000e716
and dword [ebp - 0x16c], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x16c]
mov dword [ebp + eax - 0x3f8], ecx
mov eax, dword [ebp - 0x3c]
cmp dword [ebp - 0x16c], eax
jne 0x1000e740
mov dword [ebp - 0x2b0], 1
jmp 0x1000e747
and dword [ebp - 0x2b0], 0
mov eax, 0xc516
sub eax, dword [ebp - 0x2b0]
cmp eax, dword [ebp - 0x174]
je 0x1000e766
mov dword [ebp - 0x260], 1
jmp 0x1000e76d
and dword [ebp - 0x260], 0
mov eax, dword [ebp - 0x3c]
mov dword [ebp - 0x208], eax
mov dword [ebp - 0x200], 0xfffffff8
mov eax, dword [ebp - 0x200]
sub eax, dword [ebp - 0x260]
mov ecx, dword [ebp - 0x208]
imul ecx, eax
imul ecx, dword [ebp - 0x174]
mov dword [ebp - 0x174], ecx
jmp 0x1000ebb5
push 3
lea ecx, [ebp - 0x2d0]
call fcn.10011bd7
mov byte [ebp - 4], 7
mov dword [ebp - 0x294], 0xffffffff
mov dword [ebp - 0x17c], 0x353ea3a7
mov dword [ebp - 0x364], 0
mov dword [ebp - 0x128], 0
jmp 0x1000e7ef
mov eax, dword [ebp - 0x128]
inc eax
mov dword [ebp - 0x128], eax
cmp dword [ebp - 0x128], 3
jge 0x1000e811
push dword [ebp - 0x128]
lea ecx, [ebp - 0x2d0]
call fcn.10011c5e
mov dword [eax], 0xfffa
jmp 0x1000e7e2
push 1
lea ecx, [ebp - 0x2d0]
call fcn.10011c5e
mov dword [eax], 0x985589b5
mov eax, 0x985589b5
test eax, eax
je 0x1000e96e
mov dword [ebp - 0x290], 1
mov dword [ebp - 0x2dc], 1
mov dword [ebp - 0x3c], 0
jmp 0x1000e855
mov eax, dword [ebp - 0x3c]
inc eax
mov dword [ebp - 0x3c], eax
cmp dword [ebp - 0x3c], 1
jl 0x1000e952
mov dword [ebp - 0x178], 0xffffffff
mov eax, dword [ebp - 0x290]
mov dword [ebp - 0x41c], eax
mov eax, dword [ebp - 0x290]
mov dword [ebp - 0x42c], eax
mov eax, dword [ebp - 0x178]
mov dword [ebp - 0x410], eax
push 2
lea ecx, [ebp - 0x2d0]
call fcn.10011c5e
cmp dword [eax], 0xb30477ae
jne 0x1000e8b1
cmp dword [ebp - 0x3c], 0
jne 0x1000e8b1
and dword [ebp - 0x368], 0
jmp 0x1000e8bb
mov dword [ebp - 0x368], 1
mov eax, dword [ebp - 0x178]
mov dword [ebp - 0x268], eax
push 0
lea ecx, [ebp - 0x3bc]
call fcn.10011c5e
mov ecx, dword [ebp - 0x268]
mov dword [eax], ecx
mov eax, 0x658
dec eax
cmp dword [ebp - 0x268], eax
jne 0x1000e8f6
mov dword [ebp - 0x218], 1
jmp 0x1000e8fd
and dword [ebp - 0x218], 0
mov eax, dword [ebp - 0x218]
mov dword [ebp - 0x294], eax
mov eax, dword [ebp - 0x294]
mov dword [ebp - 0x17c], eax
mov eax, dword [ebp - 0x17c]
mov dword [ebp - 0x2dc], eax
mov byte [ebp - 0x5d], 0
movzx eax, byte [ebp - 0x5d]
test eax, eax
je 0x1000e94d
push 0
push 0x263a
push 0x257a
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_GetCharABCWidthsFloatA]
jmp 0x1000e84e
mov byte [ebp - 0x66], 0
movzx eax, byte [ebp - 0x66]
test eax, eax
je 0x1000e969
push 0x9ca
call dword [sym.imp.KERNEL32.dll_TlsGetValue]
jmp 0x1000eba6
mov dword [ebp - 0xe8], 0x1e183a09
mov dword [ebp - 0x19c], 0xd5ebae88
cmp dword [ebp - 0xe8], 0
je 0x1000ea56
push 4
pop eax
imul eax, eax, 0
lea eax, [ebp + eax - 0x2e0]
mov dword [ebp - 0x184], eax
push 1
lea ecx, [ebp - 0x2d0]
call fcn.10011c5e
mov ecx, dword [ebp - 0x184]
mov eax, dword [eax]
mov dword [ecx], eax
mov eax, dword [ebp - 0xe8]
mov ecx, dword [ebp - 0x184]
cmp eax, dword [ecx]
jne 0x1000e9d5
mov dword [ebp - 0x18c], 1
jmp 0x1000e9dc
and dword [ebp - 0x18c], 0
mov eax, dword [ebp - 0x18c]
mov dword [ebp - 0x194], eax
mov esi, dword [ebp - 0x194]
push 0
lea ecx, [ebp - 0x3bc]
call fcn.10011c5e
cmp esi, dword [eax]
jl 0x1000ea0b
mov dword [ebp - 0x350], 1
jmp 0x1000ea12
and dword [ebp - 0x350], 0
mov eax, dword [ebp - 0xe8]
mov dword [ebp - 0x418], eax
mov esi, dword [ebp - 0xe8]
push 2
lea ecx, [ebp - 0x2d0]
call fcn.10011c5e
cmp dword [eax], esi
jg 0x1000ea41
mov dword [ebp - 0x2e4], 1
jmp 0x1000ea48
and dword [ebp - 0x2e4], 0
mov eax, dword [ebp - 0x19c]
sub eax, dword [ebp - 0x364]
jne 0x1000ea64
or eax, 0xffffffff
jne 0x1000ea64
and dword [ebp - 0x1a4], 0
jmp 0x1000ea6e
mov dword [ebp - 0x1a4], 1
mov eax, dword [ebp - 0x19c]
cmp dword [ebp - 0x1a4], eax
je 0x1000ea88
mov dword [ebp - 0x1ac], 1
jmp 0x1000ea8f
and dword [ebp - 0x1ac], 0
mov eax, dword [ebp - 0x1ac]
mov dword [ebp - 0x2ec], eax
mov dword [ebp - 0x1b4], 0x6e9d
mov dword [ebp - 0x358], str.lnm_yyiu_mihdamysr
cmp dword [ebp - 0x1b4], 0x7249
jle 0x1000eb43
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_DestroyWindow]
and dword [ebp - 0x13c], 0
jmp 0x1000eae2
mov eax, dword [ebp - 0x13c]
inc eax
mov dword [ebp - 0x13c], eax
cmp dword [ebp - 0x13c], 0x5b5b
jge 0x1000eb43
and dword [ebp - 0xf0], 0
jmp 0x1000eb04
mov eax, dword [ebp - 0xf0]
inc eax
mov dword [ebp - 0xf0], eax
cmp dword [ebp - 0xf0], 0x7a8e
jge 0x1000eb41
mov eax, dword [ebp - 0x13c]
or eax, dword [ebp - 0xf0]
cdq
mov dword [ebp - 0x300], eax
mov dword [ebp - 0x2fc], edx
push dword [ebp - 0x2fc]
push dword [ebp - 0x300]
mov ecx, 0x10072d38
call fcn.10011982
jmp 0x1000eaf7
jmp 0x1000ead5
mov byte [ebp - 0x56], 0
mov byte [ebp - 4], 8
cmp dword [ebp - 0x1b4], 0x6e0b
jge 0x1000eb67
mov edx, dword [ebp - 0x358]
mov ecx, 0x10072d38
call fcn.10016228
jmp 0x1000eb83
mov dword [ebp - 4], 7
jmp 0x1000eb93
movzx eax, byte [ebp - 0x56]
test eax, eax
je 0x1000eba6
push 0x15c3
call dword [sym.imp.USER32.dll_BeginDeferWindowPos]
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x2d0]
call fcn.10011c39
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x3bc]
call fcn.10011c39
cmp dword [0x102dbb18], 0
jne 0x1000f0bf
mov dword [ebp - 0x2f8], 0x884a
lea eax, [ebp - 0x2f8]
push eax
call fcn.1000819d
pop ecx
mov dword [ebp - 0x1bc], eax
mov byte [ebp - 0xd4], 4
mov byte [ebp - 0xd3], 0x9c
mov byte [ebp - 0xd2], 6
mov byte [ebp - 0xd1], 0x16
mov byte [ebp - 0xd0], 7
mov byte [ebp - 0xcf], 0x1a
mov byte [ebp - 0xce], 0xb
mov byte [ebp - 0xcd], 0x11
mov byte [ebp - 0xcc], 0xa
mov byte [ebp - 0xcb], 0x3d
mov byte [ebp - 0xca], 3
mov byte [ebp - 0xc9], 0x45
mov byte [ebp - 0xc8], 0xe9
mov byte [ebp - 0xc7], 0x58
mov byte [ebp - 0xc6], 3
mov byte [ebp - 0xc5], 0x13
mov byte [ebp - 0xc4], 0xc
mov byte [ebp - 0xc3], 1
mov byte [ebp - 0xc2], 1
mov byte [ebp - 0xc1], 0x32
mov byte [ebp - 0xc0], 9
mov byte [ebp - 0xbf], 0xb
mov byte [ebp - 0xbe], 8
mov byte [ebp - 0xbd], 1
mov byte [ebp - 0xbc], 5
mov byte [ebp - 0xbb], 0x1d
mov byte [ebp - 0xba], 2
mov byte [ebp - 0xb9], 6
mov byte [ebp - 0xb8], 0
mov byte [ebp - 0xb7], 0x33
xor eax, eax
inc eax
shl eax, 0
movzx eax, byte [ebp + eax - 0xd4]
and eax, 0xf9
xor ecx, ecx
inc ecx
shl ecx, 0
movzx ecx, byte [ebp + ecx - 0xd4]
or ecx, 0xf9
sub ecx, eax
xor eax, eax
inc eax
imul eax, eax, 0
movzx eax, byte [ebp + eax - 0xd4]
mov byte [ebp + eax - 0x390], cl
mov dword [ebp - 0x20], 2
and dword [ebp - 0x144], 0
jmp 0x1000ed16
mov eax, dword [ebp - 0x20]
inc eax
inc eax
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 0x1e
jae 0x1000edcc
xor eax, eax
inc eax
imul eax, eax, 0
movzx eax, byte [ebp + eax - 0xd4]
lea eax, [eax + eax + 2]
cmp dword [ebp - 0x20], eax
jne 0x1000ed60
mov eax, dword [ebp - 0x20]
movzx eax, byte [ebp + eax - 0xd4]
inc eax
mov dword [ebp - 0x144], eax
mov eax, dword [ebp - 0x20]
movzx eax, byte [ebp + eax - 0xd4]
mov ecx, dword [ebp - 0x20]
lea eax, [ecx + eax - 1]
mov dword [ebp - 0x20], eax
jmp 0x1000ed0e
mov eax, dword [ebp - 0x20]
sub eax, dword [ebp - 0x144]
movzx eax, byte [ebp + eax - 0xd6]
movsx eax, byte [ebp + eax - 0x390]
mov ecx, dword [ebp - 0x20]
movzx ecx, byte [ebp + ecx - 0xd3]
and ecx, eax
mov eax, dword [ebp - 0x20]
sub eax, dword [ebp - 0x144]
movzx eax, byte [ebp + eax - 0xd6]
movsx eax, byte [ebp + eax - 0x390]
mov edx, dword [ebp - 0x20]
movzx edx, byte [ebp + edx - 0xd3]
or edx, eax
sub edx, ecx
mov eax, dword [ebp - 0x20]
movzx eax, byte [ebp + eax - 0xd4]
mov byte [ebp + eax - 0x390], dl
and dword [ebp - 0x144], 0
jmp 0x1000ed0e
xor eax, eax
inc eax
imul eax, eax, 0xd
mov byte [ebp + eax - 0x390], 0
lea eax, [ebp - 0x390]
push eax
lea ecx, [ebp - 0x504]
call fcn.10011b2b
mov dword [ebp - 0x36c], eax
mov eax, dword [ebp - 0x36c]
mov dword [ebp - 0x304], eax
mov dword [ebp - 4], 0xa
mov edx, dword [ebp - 0x1bc]
mov ecx, dword [ebp - 0x304]
call fcn.10001d01
mov dword [0x102dbb18], eax
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x504]
call fcn.10011b5a
and dword [ebp - 0xf8], 0
jmp 0x1000ee40
mov eax, dword [ebp - 0xf8]
inc eax
mov dword [ebp - 0xf8], eax
cmp dword [ebp - 0xf8], 0xe
jae 0x1000ee59
mov eax, dword [ebp - 0xf8]
mov byte [ebp + eax - 0x390], 0
jmp 0x1000ee33
mov byte [ebp - 0xb4], 4
mov byte [ebp - 0xb3], 0x28
mov byte [ebp - 0xb2], 0xd
mov byte [ebp - 0xb1], 0x23
mov byte [ebp - 0xb0], 0xc
mov byte [ebp - 0xaf], 0x24
mov byte [ebp - 0xae], 9
mov byte [ebp - 0xad], 0x10
mov byte [ebp - 0xac], 6
mov byte [ebp - 0xab], 0x33
mov byte [ebp - 0xaa], 1
mov byte [ebp - 0xa9], 0x49
mov byte [ebp - 0xa8], 0xb
mov byte [ebp - 0xa7], 0x23
mov byte [ebp - 0xa6], 5
mov byte [ebp - 0xa5], 0x16
mov byte [ebp - 0xa4], 0
mov byte [ebp - 0xa3], 0x26
mov byte [ebp - 0xa2], 0xa
mov byte [ebp - 0xa1], 0x26
mov byte [ebp - 0xa0], 2
mov byte [ebp - 0x9f], 0
mov byte [ebp - 0x9e], 1
mov byte [ebp - 0x9d], 0x17
mov byte [ebp - 0x9c], 7
mov byte [ebp - 0x9b], 0
mov byte [ebp - 0x9a], 8
mov byte [ebp - 0x99], 0x1d
mov byte [ebp - 0x98], 3
mov byte [ebp - 0x97], 0xe
xor eax, eax
inc eax
shl eax, 0
movzx eax, byte [ebp + eax - 0xb4]
and eax, 0x5c
xor ecx, ecx
inc ecx
shl ecx, 0
movzx ecx, byte [ebp + ecx - 0xb4]
or ecx, 0x5c
sub ecx, eax
xor eax, eax
inc eax
imul eax, eax, 0
movzx eax, byte [ebp + eax - 0xb4]
mov byte [ebp + eax - 0x3a4], cl
mov dword [ebp - 0x24], 2
and dword [ebp - 0x150], 0
jmp 0x1000ef7c
mov eax, dword [ebp - 0x24]
inc eax
inc eax
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 0x1e
jae 0x1000f032
xor eax, eax
inc eax
imul eax, eax, 0
movzx eax, byte [ebp + eax - 0xb4]
lea eax, [eax + eax + 2]
cmp dword [ebp - 0x24], eax
jne 0x1000efc6
mov eax, dword [ebp - 0x24]
movzx eax, byte [ebp + eax - 0xb4]
inc eax
mov dword [ebp - 0x150], eax
mov eax, dword [ebp - 0x24]
movzx eax, byte [ebp + eax - 0xb4]
mov ecx, dword [ebp - 0x24]
lea eax, [ecx + eax - 1]
mov dword [ebp - 0x24], eax
jmp 0x1000ef74
mov eax, dword [ebp - 0x24]
sub eax, dword [ebp - 0x150]
movzx eax, byte [ebp + eax - 0xb6]
movsx eax, byte [ebp + eax - 0x3a4]
mov ecx, dword [ebp - 0x24]
movzx ecx, byte [ebp + ecx - 0xb3]
and ecx, eax
mov eax, dword [ebp - 0x24]
sub eax, dword [ebp - 0x150]
movzx eax, byte [ebp + eax - 0xb6]
movsx eax, byte [ebp + eax - 0x3a4]
mov edx, dword [ebp - 0x24]
movzx edx, byte [ebp + edx - 0xb3]
or edx, eax
sub edx, ecx
mov eax, dword [ebp - 0x24]
movzx eax, byte [ebp + eax - 0xb4]
mov byte [ebp + eax - 0x3a4], dl
and dword [ebp - 0x150], 0
jmp 0x1000ef74
xor eax, eax
inc eax
imul eax, eax, 0xe
mov byte [ebp + eax - 0x3a4], 0
lea eax, [ebp - 0x3a4]
push eax
lea ecx, [ebp - 0x4b0]
call fcn.10011b2b
mov dword [ebp - 0x360], eax
mov eax, dword [ebp - 0x360]
mov dword [ebp - 0x310], eax
mov dword [ebp - 4], 0xb
mov edx, dword [ebp - 0x1bc]
mov ecx, dword [ebp - 0x310]
call fcn.10001d01
mov dword [0x102dbbf8], eax
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x4b0]
call fcn.10011b5a
and dword [ebp - 0x100], 0
jmp 0x1000f0a6
mov eax, dword [ebp - 0x100]
inc eax
mov dword [ebp - 0x100], eax
cmp dword [ebp - 0x100], 0xf
jae 0x1000f0bf
mov eax, dword [ebp - 0x100]
mov byte [ebp + eax - 0x3a4], 0
jmp 0x1000f099
mov eax, dword [0x102dbb18]
cmp eax, dword [ebp - 0xfc]
je 0x1000f0d9
mov eax, dword [0x102dbbf8]
cmp eax, dword [ebp - 0xfc]
jne 0x1000f0f1
mov ecx, dword [ebp + 0xc]
call fcn.1001171e
push eax
push dword [ebp + 8]
call fcn.100081cc
pop ecx
pop ecx
jmp 0x1001014c
mov eax, dword [ebp + 8]
mov dword [ebp - 0x120], eax
mov dword [ebp - 0x400], 0xdb34
mov dword [ebp - 0x1c4], 0x4565
mov dword [ebp - 0x374], str.qzuymin_hraoow_zndglrjf_udpyxwdpi_bgedwmsk_fczd
cmp dword [ebp - 0x1c4], 0x4723
jle 0x1000f205
and dword [ebp - 0x148], 0
jmp 0x1000f13e
mov eax, dword [ebp - 0x148]
inc eax
mov dword [ebp - 0x148], eax
cmp dword [ebp - 0x148], 0x5a39
jge 0x1000f205
and dword [ebp - 0x110], 0
jmp 0x1000f164
mov eax, dword [ebp - 0x110]
inc eax
mov dword [ebp - 0x110], eax
cmp dword [ebp - 0x110], 0xfdf
jge 0x1000f200
and dword [ebp - 0x138], 0
jmp 0x1000f18a
mov eax, dword [ebp - 0x138]
inc eax
mov dword [ebp - 0x138], eax
cmp dword [ebp - 0x138], 0x4d51
jge 0x1000f1fb
and dword [ebp - 0x108], 0
jmp 0x1000f1ac
mov eax, dword [ebp - 0x108]
inc eax
mov dword [ebp - 0x108], eax
cmp dword [ebp - 0x108], 0x16fa
jge 0x1000f1f9
mov eax, dword [ebp - 0x138]
mov ecx, dword [ebp - 0x108]
sar eax, cl
mov ecx, dword [ebp - 0x148]
sub ecx, dword [ebp - 0x110]
xor eax, ecx
cdq
mov dword [ebp - 0x30c], eax
mov dword [ebp - 0x308], edx
push dword [ebp - 0x308]
push dword [ebp - 0x30c]
mov ecx, 0x10072d38
call fcn.10011982
jmp 0x1000f19f
jmp 0x1000f17d
jmp 0x1000f157
jmp 0x1000f131
mov dword [ebp - 0x2c], 0
jmp 0x1000f215
mov eax, dword [ebp - 0x2c]
inc eax
mov dword [ebp - 0x2c], eax
cmp dword [ebp - 0x2c], 2
jge 0x1000f22b
mov eax, dword [ebp - 0x2c]
mov dword [ebp + eax*4 - 0x2c4], 0xe0648261
jmp 0x1000f20e
mov dword [ebp - 4], 0xc
cmp dword [ebp - 0x1c4], 0x44ba
jge 0x1000f24e
mov edx, dword [ebp - 0x374]
mov ecx, 0x10072d38
call fcn.10016228
jmp 0x1000f26a
or dword [ebp - 4], 0xffffffff
jmp 0x1000f274
mov dword [ebp - 0x2c], 0
jmp 0x1000f284
mov eax, dword [ebp - 0x2c]
inc eax
mov dword [ebp - 0x2c], eax
cmp dword [ebp - 0x2c], 3
jge 0x1000f29a
mov eax, dword [ebp - 0x2c]
mov dword [ebp + eax*4 - 0x4d4], 0xc9ed9ba0
jmp 0x1000f27d
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0x2c4], 0
jmp 0x1000f2c8
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x2c4]
inc eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x2c4], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x2c4], 7
jne 0x1000f468
mov dword [ebp - 0x6c], 1
mov eax, dword [ebp - 0x6c]
dec eax
mov dword [ebp - 0x6c], eax
mov dword [ebp - 0x6c], 0
jmp 0x1000f2fa
mov eax, dword [ebp - 0x6c]
inc eax
mov dword [ebp - 0x6c], eax
cmp dword [ebp - 0x6c], 2
jg 0x1000f463
mov byte [ebp - 0x57], 0
movzx eax, byte [ebp - 0x57]
test eax, eax
je 0x1000f45e
mov dword [ebp - 0x1cc], 0x6dbe
mov dword [ebp - 0x31c], str.wrxybo_ltwkntx_qajb
cmp dword [ebp - 0x1cc], 0x70b3
jle 0x1000f40d
push 0xf10
push 0x1d3e
push 0x1b30
push 0x22d0
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_IntersectClipRect]
and dword [ebp - 0x12c], 0
jmp 0x1000f376
mov eax, dword [ebp - 0x12c]
inc eax
mov dword [ebp - 0x12c], eax
cmp dword [ebp - 0x12c], 0x471e
jge 0x1000f40d
and dword [ebp - 0x140], 0
jmp 0x1000f39c
mov eax, dword [ebp - 0x140]
inc eax
mov dword [ebp - 0x140], eax
cmp dword [ebp - 0x140], 0x32e3
jge 0x1000f408
and dword [ebp - 0x118], 0
jmp 0x1000f3be
mov eax, dword [ebp - 0x118]
inc eax
mov dword [ebp - 0x118], eax
cmp dword [ebp - 0x118], 0x3b33
jge 0x1000f406
mov eax, dword [ebp - 0x140]
cdq
idiv dword [ebp - 0x118]
mov eax, dword [ebp - 0x12c]
mov ecx, edx
shl eax, cl
cdq
mov dword [ebp - 0x318], eax
mov dword [ebp - 0x314], edx
push dword [ebp - 0x314]
push dword [ebp - 0x318]
mov ecx, 0x10072d38
call fcn.10011982
jmp 0x1000f3b1
jmp 0x1000f38f
jmp 0x1000f369
push 0
call dword [sym.imp.KERNEL32.dll_LocalFree]
mov dword [ebp - 4], 0xe
cmp dword [ebp - 0x1cc], 0x6a6a
jge 0x1000f438
mov edx, dword [ebp - 0x31c]
mov ecx, 0x10072d38
call fcn.10016228
jmp 0x1000f454
or dword [ebp - 4], 0xffffffff
jmp 0x1000f45e
jmp 0x1000f2f3
jmp 0x1000f2ad
mov byte [ebp - 0x67], 0
movzx eax, byte [ebp - 0x67]
test eax, eax
je 0x1000f47c
push 0
call dword [sym.imp.KERNEL32.dll_ResetEvent]
cmp dword [ebp - 0x120], 0
je 0x1000fdbf
mov eax, dword [ebp - 0x120]
movzx eax, word [eax]
cmp eax, 0x5a4d
jne 0x1000fdbf
mov eax, dword [ebp - 0x120]
mov ecx, dword [ebp - 0x120]
add ecx, dword [eax + 0x3c]
mov dword [ebp - 0x94], ecx
mov eax, dword [ebp - 0x94]
cmp dword [eax], 0x4550
jne 0x1000fdbf
mov eax, dword [ebp - 0x94]
cmp dword [eax + 0x74], 0
jbe 0x1000fdbf
push 8
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x94]
cmp dword [ecx + eax + 0x78], 0
je 0x1000fdbf
mov dword [ebp - 0x1d4], 0x47c7
mov dword [ebp - 0x328], str.xhpqo_zbwvdmaf_ubzuy
cmp dword [ebp - 0x1d4], 0x49fd
jle 0x1000f5af
and dword [ebp - 0x134], 0
jmp 0x1000f525
mov eax, dword [ebp - 0x134]
inc eax
mov dword [ebp - 0x134], eax
cmp dword [ebp - 0x134], 0x7f5d
jge 0x1000f5af
and dword [ebp - 0xdc], 0
jmp 0x1000f547
mov eax, dword [ebp - 0xdc]
inc eax
mov dword [ebp - 0xdc], eax
cmp dword [ebp - 0xdc], 0x3dad
jge 0x1000f5aa
mov eax, dword [ebp - 0x134]
or eax, dword [ebp - 0xdc]
cdq
mov dword [ebp - 0x324], eax
mov dword [ebp - 0x320], edx
push dword [ebp - 0x320]
push dword [ebp - 0x324]
lea ecx, [ebp - 0x4ec]
call fcn.10001ba3
pop ecx
pop ecx
mov dword [ebp - 0x37c], eax
mov ecx, dword [ebp - 0x37c]
call fcn.1001171e
push eax
call fcn.100410e1
pop ecx
lea ecx, [ebp - 0x4ec]
call fcn.10011700
jmp 0x1000f53a
jmp 0x1000f518
mov eax, dword [ebp + 8]
mov dword [ebp - 0x70], eax
mov dword [ebp - 4], 0x10
cmp dword [ebp - 0x1d4], 0x463e
jge 0x1000f5d4
push dword [ebp - 0x328]
call fcn.100410e1
pop ecx
jmp 0x1000f5f0
or dword [ebp - 4], 0xffffffff
jmp 0x1000f5fa
push 8
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x94]
mov edx, dword [ebp - 0x70]
add edx, dword [ecx + eax + 0x78]
mov dword [ebp - 0x54], edx
mov eax, 0xffff
mov word [ebp - 0x38], ax
mov dword [ebp - 0x1dc], 0x3ca9
mov dword [ebp - 0x334], str.qtvywe_murgfkvj_uzhrddjj_cmire_ogti_oiuwc_ibesypaa_aqr
cmp dword [ebp - 0x1dc], 0x3f7f
jle 0x1000f715
and dword [ebp - 0xf4], 0
jmp 0x1000f653
mov eax, dword [ebp - 0xf4]
inc eax
mov dword [ebp - 0xf4], eax
cmp dword [ebp - 0xf4], 0x3b13
jge 0x1000f715
and dword [ebp - 0xe4], 0
jmp 0x1000f679
mov eax, dword [ebp - 0xe4]
inc eax
mov dword [ebp - 0xe4], eax
cmp dword [ebp - 0xe4], 0x393c
jge 0x1000f710
and dword [ebp - 0xec], 0
jmp 0x1000f69f
mov eax, dword [ebp - 0xec]
inc eax
mov dword [ebp - 0xec], eax
cmp dword [ebp - 0xec], 0x1074
jge 0x1000f70b
mov eax, dword [ebp - 0xe4]
cdq
idiv dword [ebp - 0xec]
mov eax, dword [ebp - 0xf4]
sub eax, edx
cdq
mov dword [ebp - 0x330], eax
mov dword [ebp - 0x32c], edx
push dword [ebp - 0x32c]
push dword [ebp - 0x330]
lea ecx, [ebp - 0x4c8]
call fcn.10001ba3
pop ecx
pop ecx
mov dword [ebp - 0x394], eax
mov ecx, dword [ebp - 0x394]
call fcn.1001171e
push eax
call fcn.100410e1
pop ecx
lea ecx, [ebp - 0x4c8]
call fcn.10011700
jmp 0x1000f692
jmp 0x1000f66c
jmp 0x1000f646
or dword [ebp - 0x78], 0xffffffff
mov dword [ebp - 4], 0x12
cmp dword [ebp - 0x1dc], 0x3c7e
jge 0x1000f738
push dword [ebp - 0x334]
call fcn.100410e1
pop ecx
jmp 0x1000f754
or dword [ebp - 4], 0xffffffff
jmp 0x1000f75e
cmp dword [ebp + 0x10], 0
jbe 0x1000f77c
mov eax, dword [ebp - 0x54]
mov ecx, dword [ebp + 0x10]
cmp ecx, dword [eax + 0x14]
ja 0x1000f777
mov eax, dword [ebp + 0x10]
dec eax
mov word [ebp - 0x38], ax
jmp 0x1000f92d
mov eax, dword [0x102dbbc4]
and eax, 1
jne 0x1000f7b3
mov eax, dword [0x102dbbc4]
or eax, 1
mov dword [0x102dbbc4], eax
mov dword [ebp - 4], 0x14
mov ecx, 0x102dbc04
call fcn.10011cd7
push 0x10058ae7
call fcn.100410b7
pop ecx
or dword [ebp - 4], 0xffffffff
movzx eax, byte [0x102dbb10]
test eax, eax
je 0x1000f81c
mov ecx, 0x102dbc04
call fcn.10011d9c
movzx eax, al
test eax, eax
jne 0x1000f81c
lea eax, [ebp - 0xfc]
push eax
lea eax, [ebp - 0x1e4]
push eax
mov ecx, 0x102dbc04
call fcn.10011da5
lea eax, [ebp - 0x408]
push eax
mov ecx, 0x102dbc04
call fcn.10011d8e
push eax
lea ecx, [ebp - 0x1e4]
call fcn.10011bb7
movzx eax, al
test eax, eax
je 0x1000f81c
lea ecx, [ebp - 0x1e4]
call fcn.10011dba
mov eax, dword [eax + 4]
mov dword [ebp - 0x78], eax
cmp dword [ebp - 0x78], 0xffffffff
jne 0x1000f92d
mov ecx, 0x102dbc04
call fcn.10011f57
mov ecx, dword [ebp - 0x54]
add eax, dword [ecx + 0x18]
push eax
mov ecx, 0x102dbc04
call fcn.10011f5b
and dword [ebp - 0x84], 0
jmp 0x1000f857
mov eax, dword [ebp - 0x84]
inc eax
mov dword [ebp - 0x84], eax
mov eax, dword [ebp - 0x54]
mov ecx, dword [ebp - 0x84]
cmp ecx, dword [eax + 0x18]
jae 0x1000f92d
mov eax, dword [ebp - 0x54]
mov ecx, dword [ebp - 0x70]
add ecx, dword [eax + 0x20]
mov eax, dword [ebp - 0x84]
lea eax, [ecx + eax*4]
mov dword [ebp - 0x1ec], eax
cmp dword [ebp - 0x1ec], 0
je 0x1000f928
mov eax, dword [ebp - 0x1ec]
mov ecx, dword [ebp - 0x70]
add ecx, dword [eax]
push ecx
lea ecx, [ebp - 0x478]
call fcn.10011b2b
mov dword [ebp - 4], 0x15
mov edx, dword [ebp + 8]
lea ecx, [ebp - 0x478]
call fcn.10001d01
mov dword [ebp - 0x1f4], eax
movzx eax, byte [0x102dbb10]
test eax, eax
je 0x1000f8dc
mov ecx, 0x102dbc04
call fcn.10011d9c
movzx eax, al
test eax, eax
jne 0x1000f8fc
lea eax, [ebp - 0x1f4]
push eax
mov ecx, 0x102dbc04
call fcn.10011f19
mov ecx, dword [ebp - 0x84]
mov dword [eax], ecx
mov byte [0x102dbb10], 1
cmp dword [ebp - 0x78], 0xffffffff
jne 0x1000f919
mov eax, dword [ebp - 0x1f4]
cmp eax, dword [ebp - 0xfc]
jne 0x1000f919
mov eax, dword [ebp - 0x84]
mov dword [ebp - 0x78], eax
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x478]
call fcn.10011b5a
jmp 0x1000f84a
cmp dword [ebp + 0x10], 0
jne 0x1000f94d
cmp dword [ebp - 0x78], 0xffffffff
je 0x1000f94d
mov eax, dword [ebp - 0x54]
mov ecx, dword [ebp - 0x70]
add ecx, dword [eax + 0x24]
mov eax, dword [ebp - 0x78]
mov ax, word [ecx + eax*2]
mov word [ebp - 0x38], ax
movzx eax, word [ebp - 0x38]
cmp eax, 0xffff
je 0x1000fdbf
movzx eax, word [ebp - 0x38]
mov ecx, dword [ebp - 0x54]
mov edx, dword [ebp - 0x70]
add edx, dword [ecx + 0x1c]
lea eax, [edx + eax*4]
mov dword [ebp - 0x370], eax
mov eax, dword [ebp - 0x370]
mov ecx, dword [ebp - 0x70]
add ecx, dword [eax]
mov dword [ebp - 0x50], ecx
mov eax, dword [ebp - 0x50]
cmp eax, dword [ebp - 0x54]
jbe 0x1000fdb7
push 8
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x94]
mov edx, dword [ebp - 0x54]
add edx, dword [ecx + eax + 0x7c]
cmp dword [ebp - 0x50], edx
jae 0x1000fdb7
mov eax, dword [0x102dbbc4]
and eax, 2
jne 0x1000f9da
mov eax, dword [0x102dbbc4]
or eax, 2
mov dword [0x102dbbc4], eax
mov dword [ebp - 4], 0x16
push 0x313b
call fcn.1001e9b9
pop ecx
mov byte [0x102dbb50], al
or dword [ebp - 4], 0xffffffff
mov dword [ebp - 0x1fc], 0x43d5
mov dword [ebp - 0x340], str.eiupslyr_snt_tomizl_qpog_givg_lafz_nslbfwl_lsv_phkp_pjp_paqk_ikplujpyg
cmp dword [ebp - 0x1fc], 0x46d4
jle 0x1000fa73
and dword [ebp - 0x104], 0
jmp 0x1000fa10
mov eax, dword [ebp - 0x104]
inc eax
mov dword [ebp - 0x104], eax
cmp dword [ebp - 0x104], 0x4703
jge 0x1000fa73
and dword [ebp - 0x10c], 0
jmp 0x1000fa32
mov eax, dword [ebp - 0x10c]
inc eax
mov dword [ebp - 0x10c], eax
cmp dword [ebp - 0x10c], 0x52d1
jge 0x1000fa71
mov eax, dword [ebp - 0x104]
mov ecx, dword [ebp - 0x10c]
shl eax, cl
cdq
mov dword [ebp - 0x33c], eax
mov dword [ebp - 0x338], edx
push dword [ebp - 0x338]
push dword [ebp - 0x33c]
mov ecx, 0x10072d38
call fcn.10011982
jmp 0x1000fa25
jmp 0x1000fa03
mov byte [ebp - 0x4c], 1
mov byte [ebp - 0x4b], 0x99
mov byte [ebp - 0x4a], 2
mov byte [ebp - 0x49], 0
mov byte [ebp - 0x48], 2
mov byte [ebp - 0x47], 0x4b
mov byte [ebp - 0x46], 0xa2
mov byte [ebp - 0x45], 0
mov byte [ebp - 0x44], 8
mov dword [ebp - 4], 0x17
cmp dword [ebp - 0x1fc], 0x4026
jge 0x1000faba
mov edx, dword [ebp - 0x340]
mov ecx, 0x10072d38
call fcn.10016228
jmp 0x1000fad6
or dword [ebp - 4], 0xffffffff
jmp 0x1000fae0
xor eax, eax
inc eax
shl eax, 0
movzx eax, byte [ebp + eax - 0x4c]
and eax, 0xf5
xor ecx, ecx
inc ecx
shl ecx, 0
movzx ecx, byte [ebp + ecx - 0x4c]
or ecx, 0xf5
sub ecx, eax
xor eax, eax
inc eax
imul eax, eax, 0
movzx eax, byte [ebp + eax - 0x4c]
mov byte [ebp + eax - 0x5c], cl
mov dword [ebp - 0x18], 2
and dword [ebp - 0x8c], 0
jmp 0x1000fb2a
mov eax, dword [ebp - 0x18]
inc eax
inc eax
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 9
jae 0x1000fbde
xor eax, eax
inc eax
imul eax, eax, 0
movzx eax, byte [ebp + eax - 0x4c]
lea eax, [eax + eax + 2]
cmp dword [ebp - 0x18], eax
jne 0x1000fb6b
mov eax, dword [ebp - 0x18]
movzx eax, byte [ebp + eax - 0x4c]
inc eax
mov dword [ebp - 0x8c], eax
mov eax, dword [ebp - 0x18]
movzx eax, byte [ebp + eax - 0x4c]
mov ecx, dword [ebp - 0x18]
lea eax, [ecx + eax - 1]
mov dword [ebp - 0x18], eax
jmp 0x1000fb22
mov eax, dword [ebp - 0x18]
sub eax, dword [ebp - 0x8c]
movzx eax, byte [ebp + eax - 0x4e]
movsx eax, byte [ebp + eax - 0x5c]
mov ecx, dword [ebp - 0x18]
movzx ecx, byte [ebp + ecx - 0x4b]
and ecx, eax
mov eax, dword [ebp - 0x18]
sub eax, dword [ebp - 0x8c]
movzx eax, byte [ebp + eax - 0x4e]
movsx eax, byte [ebp + eax - 0x5c]
mov edx, dword [ebp - 0x18]
movzx edx, byte [ebp + edx - 0x4b]
and edx, eax
mov eax, dword [ebp - 0x18]
sub eax, dword [ebp - 0x8c]
movzx eax, byte [ebp + eax - 0x4e]
movsx eax, byte [ebp + eax - 0x5c]
mov esi, dword [ebp - 0x18]
movzx ebx, byte [ebp + esi - 0x4b]
add ebx, eax
sub ebx, edx
sub ebx, ecx
mov eax, dword [ebp - 0x18]
movzx eax, byte [ebp + eax - 0x4c]
mov byte [ebp + eax - 0x5c], bl
and dword [ebp - 0x8c], 0
jmp 0x1000fb22
xor eax, eax
inc eax
imul eax, eax, 3
mov byte [ebp + eax - 0x5c], 0
mov eax, dword [0x102dbbc4]
and eax, 4
jne 0x1000fc24
mov eax, dword [0x102dbbc4]
or eax, 4
mov dword [0x102dbbc4], eax
mov dword [ebp - 4], 0x19
lea eax, [ebp - 0x5c]
push eax
mov ecx, 0x102dbbd0
call fcn.10011b2b
push 0x10058ad8
call fcn.100410b7
pop ecx
or dword [ebp - 4], 0xffffffff
and dword [ebp - 0x114], 0
jmp 0x1000fc3a
mov eax, dword [ebp - 0x114]
inc eax
mov dword [ebp - 0x114], eax
cmp dword [ebp - 0x114], 4
jae 0x1000fc50
mov eax, dword [ebp - 0x114]
mov byte [ebp + eax - 0x5c], 0
jmp 0x1000fc2d
mov eax, dword [ebp - 0x50]
mov dword [ebp - 0x64], eax
movsx eax, byte [0x102dbb50]
mov ecx, dword [ebp - 0x64]
movsx ecx, byte [ecx]
cmp ecx, eax
je 0x1000fc70
mov eax, dword [ebp - 0x64]
inc eax
mov dword [ebp - 0x64], eax
jmp 0x1000fc56
mov eax, dword [ebp - 0x64]
inc eax
mov dword [ebp - 0x64], eax
push dword [ebp - 0x64]
push dword [ebp - 0x50]
lea ecx, [ebp - 0x448]
call fcn.1001651b
mov dword [ebp - 4], 0x1a
push 0x102dbbd0
lea ecx, [ebp - 0x448]
call fcn.10011b64
lea eax, [ebp - 0x414]
push eax
lea ecx, [ebp - 0x448]
call fcn.10011b89
push dword [eax]
lea eax, [ebp - 0x404]
push eax
lea ecx, [ebp - 0x448]
call fcn.10011b75
push dword [eax]
lea ecx, [ebp - 0x490]
call fcn.10016544
mov byte [ebp - 4], 0x1b
lea eax, [ebp - 0x490]
push eax
call fcn.100035f6
pop ecx
mov dword [ebp - 0x168], eax
cmp dword [ebp - 0x168], 0
je 0x1000fd66
push dword [ebp - 0x64]
lea ecx, [ebp - 0x460]
call fcn.10011b2b
mov byte [ebp - 4], 0x1c
lea edx, [ebp - 0x380]
lea ecx, [ebp - 0x460]
call fcn.10001e7b
movzx eax, al
test eax, eax
je 0x1000fd39
push 0
push dword [ebp - 0x380]
push 0
push dword [ebp - 0x168]
call fcn.1000dc05
add esp, 0x10
mov dword [ebp - 0x50], eax
jmp 0x1000fd55
push 1
push 0
lea eax, [ebp - 0x460]
push eax
push dword [ebp - 0x168]
call fcn.1000dc05
add esp, 0x10
mov dword [ebp - 0x50], eax
mov byte [ebp - 4], 0x1b
lea ecx, [ebp - 0x460]
call fcn.10011b5a
jmp 0x1000fd99
cmp dword [ebp + 0x10], 0
jne 0x1000fd7c
mov ecx, dword [ebp + 0xc]
call fcn.1001171e
mov dword [ebp - 0x204], eax
jmp 0x1000fd86
movzx eax, word [ebp + 0x10]
mov dword [ebp - 0x204], eax
push dword [ebp - 0x204]
push dword [ebp + 8]
call fcn.100081cc
pop ecx
pop ecx
mov dword [ebp - 0x50], eax
mov byte [ebp - 4], 0x1a
lea ecx, [ebp - 0x490]
call fcn.10011ae4
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x448]
call fcn.10011b5a
mov eax, dword [ebp - 0x50]
jmp 0x1001014c
mov dword [ebp - 0x124], 1
mov dword [ebp - 0x74], 0
mov dword [ebp - 0x7c], 8
mov dword [ebp - 0x40], 0xd2f23d37
mov dword [ebp - 0x274], 8
mov dword [ebp - 0x11c], 0
jmp 0x1000fe01
mov eax, dword [ebp - 0x11c]
inc eax
mov dword [ebp - 0x11c], eax
cmp dword [ebp - 0x11c], 3
jge 0x1000fe1d
mov eax, dword [ebp - 0x11c]
mov dword [ebp + eax*4 - 0x15c], 0xfd9e
jmp 0x1000fdf4
mov eax, dword [ebp - 0x74]
inc eax
mov dword [ebp - 0x74], eax
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x15c]
add eax, dword [ebp - 0x74]
mov dword [ebp - 0x124], eax
mov eax, dword [ebp - 0x124]
mov dword [ebp - 0x7c], eax
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x15c], 0x7904
jle 0x1000fe62
mov dword [ebp - 0x348], 1
jmp 0x1000fe69
and dword [ebp - 0x348], 0
mov eax, dword [ebp - 0x74]
mov dword [ebp - 0x420], eax
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x15c]
add eax, 0x13bf58aa
cmp eax, 0xffff
jbe 0x1000fe97
mov dword [ebp - 0x20c], 1
jmp 0x1000fe9e
and dword [ebp - 0x20c], 0
mov eax, dword [ebp - 0x74]
cmp eax, dword [ebp - 0x20c]
jle 0x1000feb5
mov dword [ebp - 0x214], 1
jmp 0x1000febc
and dword [ebp - 0x214], 0
cmp dword [ebp - 0x214], 0xf15c
jge 0x1000fed4
mov dword [ebp - 0x21c], 1
jmp 0x1000fedb
and dword [ebp - 0x21c], 0
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x15c]
cmp dword [ebp - 0x21c], eax
jl 0x1000fefb
mov dword [ebp - 0x224], 1
jmp 0x1000ff02
and dword [ebp - 0x224], 0
mov eax, dword [ebp - 0x7c]
mov dword [ebp - 0x7c], eax
mov eax, dword [ebp - 0x7c]
cmp eax, dword [ebp - 0x224]
jle 0x1000ff25
cmp dword [ebp - 0x124], 0
jne 0x1000ff25
and dword [ebp - 0x22c], 0
jmp 0x1000ff2f
mov dword [ebp - 0x22c], 1
push 4
pop eax
shl eax, 0
imul ecx, dword [ebp - 0x22c], 0xebf3
imul ecx, dword [ebp + eax - 0x15c]
cmp ecx, 0xfaaa
jle 0x1000ff5b
mov dword [ebp - 0x234], 1
jmp 0x1000ff62
and dword [ebp - 0x234], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x15c]
cmp dword [ebp - 0x234], eax
jle 0x1000ff83
mov dword [ebp - 0x378], 1
jmp 0x1000ff8a
and dword [ebp - 0x378], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x15c]
mov dword [ebp - 0x3fc], eax
cmp dword [ebp - 0x74], 0
je 0x1000ffbf
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x15c], 0
je 0x1000ffbf
mov dword [ebp - 0x23c], 1
jmp 0x1000ffc6
and dword [ebp - 0x23c], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x15c]
cmp dword [ebp - 0x23c], eax
jge 0x1000ffe7
mov dword [ebp - 0x244], 1
jmp 0x1000ffee
and dword [ebp - 0x244], 0
mov eax, dword [ebp - 0x244]
mov dword [ebp - 0x40], eax
mov eax, dword [ebp - 0x40]
mov dword [ebp - 0x274], eax
mov eax, dword [ebp - 0x40]
mov dword [ebp - 0x428], eax
cmp dword [ebp - 0x40], 0
jne 0x100100ed
push 0xfffffffffffffffe
pop eax
test eax, eax
je 0x10010056
mov eax, dword [ebp - 0x40]
cmp eax, dword [ebp - 0x40]
jge 0x1001002e
mov dword [ebp - 0x24c], 1
jmp 0x10010035
and dword [ebp - 0x24c], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x15c]
cmp dword [ebp - 0x24c], eax
jg 0x10010056
mov dword [ebp - 0x254], 1
jmp 0x1001005d
and dword [ebp - 0x254], 0
cmp dword [ebp - 0x254], 0x4060a3b7
jl 0x10010075
mov dword [ebp - 0x25c], 1
jmp 0x1001007c
and dword [ebp - 0x25c], 0
mov eax, dword [ebp - 0x25c]
mov dword [ebp - 0x7c], eax
cmp dword [ebp - 0x7c], 0xf6b4ab19
ja 0x1001009a
mov dword [ebp - 0x264], 1
jmp 0x100100a1
and dword [ebp - 0x264], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x15c]
cmp dword [ebp - 0x264], eax
je 0x100100c8
cmp dword [ebp - 0x40], 0
je 0x100100c8
mov dword [ebp - 0x26c], 1
jmp 0x100100cf
and dword [ebp - 0x26c], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x15c]
cmp dword [ebp - 0x26c], eax
jg 0x100100ed
and dword [ebp - 0x2d8], 0
jmp 0x100100f7
mov dword [ebp - 0x2d8], 1
mov eax, dword [ebp - 0x40]
mov dword [ebp - 0x430], eax
cmp dword [ebp - 0x274], 5
jae 0x10010115
mov dword [ebp - 0x27c], 1
jmp 0x1001011c
and dword [ebp - 0x27c], 0
cmp dword [ebp - 0x27c], 0x2cfb
jne 0x10010134
mov dword [ebp - 0x284], 1
jmp 0x1001013b
and dword [ebp - 0x284], 0
mov eax, dword [ebp - 0x284]
sub eax, dword [ebp - 0x40]
mov dword [ebp - 0x124], eax
xor eax, eax
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret