Function at 0x1001d366
Capabilities:
Get common file path
Get disk size
Terminate process

Disassembly:
mov eax, 0x1005e2df
call fcn.1005d528
sub esp, 0x1e8
push ebx
xor ebx, ebx
mov dword [ebp - 0x3c], 9
mov byte [ebp - 0x15], bl
push esi
mov dword [ebp - 0x38], 0x582a
cmp dword [ebp - 0x38], 0x5a90
push edi
mov dword [ebp - 0x10], esp
mov dword [ebp - 0xbc], edx
mov dword [ebp - 0x64], ecx
mov dword [ebp - 0x14c], ebx
jle 0x1001d3cd
mov esi, ebx
mov edi, ebx
mov ebx, 0x26e6
mov eax, edi
mov ecx, 0x100792f8
cdq
push edx
push eax
call fcn.1000a4ec
add edi, esi
dec ebx
jne 0x1001d3b0
inc esi
cmp esi, 0xe81
jl 0x1001d3a9
cmp byte [ebp - 0x15], 0
je 0x1001d3df
push 0x9a6
push ebx
call dword [sym.imp.KERNEL32.dll_TerminateProcess]
mov dword [ebp - 4], ebx
cmp dword [ebp - 0x38], 0x5672
jge 0x1001d3fa
mov edx, str.bzxpn_rhdygsvh_hnjmmp_dnpdvfgo_qgsyc_plhm_hbg_ewmzw_hep_bkq
mov ecx, 0x100792f8
call fcn.1000c8f5
or esi, 0xffffffff
mov dword [ebp - 4], esi
mov byte [ebp - 0x15], bl
cmp byte [ebp - 0x15], 0
je 0x1001d411
push ebx
push ebx
call dword [sym.imp.USER32.dll_CharUpperBuffW]
mov dword [ebp - 0x60], 0xe01db03
mov word [ebp - 0x5c], 0xd04
mov byte [ebp - 0x5a], bl
mov dword [ebp - 0x59], 0x5b50126
mov dword [ebp - 0x55], 0x230062b
mov byte [ebp - 0x51], 0x33
push 0x62
pop eax
mov word [ebp - 0xf2], ax
mov dword [ebp - 0x24], 0x9519
mov dword [ebp - 0x1c], esi
mov dword [ebp - 0x34], 0x3b2c57e7
mov dword [ebp - 0x30], 0x18144871
mov dword [ebp - 0x1c], ebx
jmp 0x1001d489
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0x80], 0x2b441a62
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 2
jl 0x1001d47b
mov eax, dword [ebp - 0x24]
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0x34], eax
mov eax, dword [ebp - 0x34]
mov dword [ebp - 0x7c], eax
test eax, eax
je 0x1001d4bd
mov eax, dword [ebp - 0x24]
mov eax, 0x6840eb44
mov dword [ebp - 0x7c], eax
mov dword [ebp - 0x34], eax
cmp dword [ebp - 0x34], ebx
je 0x1001d4bd
xor eax, eax
inc eax
jmp 0x1001d4bf
mov eax, ebx
xor ecx, ecx
cmp eax, 0x56c37fc0
mov eax, dword [ebp - 0x24]
setle cl
xor edx, edx
cmp ecx, eax
push 0
setl dl
add edx, dword [ebp - 0x24]
neg edx
sbb edx, edx
xor eax, eax
neg edx
cmp edx, 0xfffffff6
setg al
xor ecx, ecx
cmp eax, esi
mov eax, dword [ebp - 0x24]
setge cl
xor edx, edx
cmp ecx, eax
pop eax
setl dl
sub edx, 0x193208af
neg edx
sbb edx, edx
inc edx
setns al
sub eax, 0x68906353
cmp eax, 0xfffc
jae 0x1001d548
mov dword [ebp - 0x20], 0xfffffffb
cmp dword [ebp - 0x20], ebx
jne 0x1001d524
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0x7c]
xor ecx, ecx
mov dword [ebp - 0x80], eax
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x20]
cmp eax, 0x5e60d1f
mov eax, dword [ebp - 0x30]
setne cl
inc eax
add eax, ecx
mov dword [ebp - 0x1c], eax
jmp 0x1001d579
mov dword [ebp - 0x30], 0x11e745c5
mov dword [ebp - 0x34], ebx
jmp 0x1001d573
mov dword [ebp - 0x38], 0xdbc8b697
mov edx, dword [ebp - 0x30]
mov eax, dword [ebp - 0x80]
neg edx
sbb edx, edx
xor ecx, ecx
inc edx
cmp eax, edx
setle cl
mov dword [ebp - 0x38], ecx
dec dword [ebp - 0x34]
cmp dword [ebp - 0x34], 0xffffffe8
je 0x1001d554
push 2
pop edi
mov dword [ebp - 0x38], ebx
mov dword [ebp - 0x24], edi
mov dword [ebp - 0x20], edi
cmp edi, 0x10
jae 0x1001da71
movzx eax, byte [ebp - 0x60]
lea eax, [eax*2 + 2]
cmp edi, eax
jne 0x1001d936
movzx esi, byte [ebp + edi - 0x60]
mov dword [ebp - 0x24], 0x53b26bdd
mov dword [ebp - 0x34], 0xfffffff8
mov dword [ebp - 0x3c], 6
mov dword [ebp - 0x24], ebx
lea eax, [esi + 1]
cmp dword [ebp - 0x24], 0xfffffffa
mov dword [ebp - 0x30], esi
mov dword [ebp - 0x38], eax
jg 0x1001d739
push 6
pop esi
mov dword [ebp - 0x28], 0xffffffff
mov dword [ebp - 0x1c], ebx
jmp 0x1001d5f1
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0x94], 0xee28
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 2
jl 0x1001d5e0
mov eax, dword [ebp - 0x90]
cmp esi, eax
sbb eax, eax
neg eax
imul eax, eax, 0x88146cdf
neg eax
sbb eax, eax
neg eax
mov dword [ebp - 0x34], eax
mov eax, dword [ebp - 0x34]
mov dword [ebp - 0x28], eax
mov eax, dword [ebp - 0x90]
imul eax, dword [ebp - 0x28]
test eax, eax
je 0x1001d70e
push 3
pop edi
mov dword [ebp - 0x2c], ebx
lea ecx, [ebp - 0x128]
push edi
call fcn.1000a704
mov dword [ebp - 0x1c], 0x3b5b0d69
mov dword [ebp - 0x2c], ebx
jmp 0x1001d65b
mov ecx, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x128]
mov dword [eax + ecx*4], 0x6a9b03be
inc dword [ebp - 0x2c]
cmp dword [ebp - 0x2c], edi
jl 0x1001d648
mov eax, dword [ebp - 0x34]
neg eax
sbb eax, eax
inc eax
mov dword [ebp - 0x2c], eax
mov eax, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0x90]
mov eax, dword [ebp - 0x34]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x2c]
cmp eax, dword [ebp - 0x24]
jle 0x1001d694
cmp dword [ebp - 0x28], ebx
jne 0x1001d694
mov ecx, ebx
jmp 0x1001d697
xor ecx, ecx
inc ecx
mov eax, dword [ebp - 0x128]
xor edx, edx
cmp ecx, dword [eax + 8]
mov eax, dword [ebp - 0x94]
setg dl
xor ecx, ecx
cmp edx, eax
sete cl
mov dword [ebp - 0x34], ecx
mov dword [ebp - 0x1c], 0xfffffff6
cmp dword [ebp - 0x1c], edi
jl 0x1001d701
xor ecx, ecx
push 2
inc ecx
pop edi
mov dword [ebp - 0x34], ecx
cmp dword [ebp - 0x34], ebx
jl 0x1001d6f8
mov dword [ebp - 0x2c], edi
cmp dword [ebp - 0x2c], ebx
jl 0x1001d6f3
mov dword [ebp - 0x28], ebx
jmp 0x1001d6e9
mov eax, dword [ebp - 0x28]
mov dword [ebp + eax*4 - 0x94], ecx
inc dword [ebp - 0x28]
cmp dword [ebp - 0x28], edi
jl 0x1001d6dc
dec dword [ebp - 0x2c]
jns 0x1001d6d7
dec dword [ebp - 0x34]
jns 0x1001d6cf
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 3
jge 0x1001d6c7
lea ecx, [ebp - 0x128]
call fcn.1000a787
jmp 0x1001d715
mov dword [ebp - 0x28], 0x2dcbded6
mov byte [ebp - 0x15], bl
cmp byte [ebp - 0x15], 0
je 0x1001d726
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_GetTempPathW]
dec dword [ebp - 0x24]
cmp dword [ebp - 0x24], 0xfffffffa
jle 0x1001d5d4
mov esi, dword [ebp - 0x30]
mov edi, dword [ebp - 0x20]
mov dword [ebp - 0x28], 0xfffffffb
dec edi
mov dword [ebp - 0x30], 3
add edi, esi
mov dword [ebp - 0x2c], 9
mov dword [ebp - 0x28], ebx
cmp dword [ebp - 0x28], 0xa
mov dword [ebp - 0x20], edi
jge 0x1001da66
push 2
pop edi
mov dword [ebp - 0x34], 0x2d14
lea ecx, [ebp - 0xa0]
push 3
call fcn.1000a704
mov dword [ebp - 0x1c], ebx
jmp 0x1001d78c
mov ecx, dword [ebp - 0x1c]
mov eax, dword [ebp - 0xa0]
mov dword [eax + ecx*4], ebx
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 3
jl 0x1001d77d
cmp dword [ebp - 0x34], ebx
je 0x1001d869
mov dword [ebp - 0x24], 0xffffffff
xor edx, edx
mov dword [ebp - 0x1c], 0xce96f8f9
inc edx
mov dword [ebp - 0x24], ebx
mov dword [ebp - 0x1c], ebx
jmp 0x1001d7c2
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0x68], 0xfffffffe
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], edx
jl 0x1001d7b4
mov eax, dword [ebp - 0x28]
mov dword [ebp - 0x24], 0xc8d4675
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x34]
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x34]
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x68]
sub ecx, 6
neg ecx
sbb ecx, ecx
xor eax, eax
inc ecx
cmp ecx, 7
setne al
mov dword [ebp - 0x68], eax
test eax, eax
je 0x1001d80a
mov eax, edx
cmp dword [ebp - 0x1c], ebx
jne 0x1001d80c
mov eax, ebx
xor ecx, ecx
cmp eax, 0x3a34
setge cl
xor eax, eax
cmp ecx, 0x3de8
setle al
cmp dword [ebp - 0x28], eax
je 0x1001d82d
mov eax, edx
cmp dword [ebp - 0x24], ebx
jne 0x1001d82f
mov eax, ebx
mov dword [ebp - 0x24], eax
mov eax, dword [ebp - 0x34]
mov eax, dword [ebp - 0x34]
mov esi, dword [ebp - 0xa0]
add esi, 8
mov dword [esi], edx
mov dword [ebp - 0x24], ebx
jmp 0x1001d862
mov eax, dword [ebp - 0x24]
mov edx, dword [ebp - 0x24]
mov ecx, dword [ebp - 0xa0]
mov eax, dword [ecx + eax*4]
mov dword [ecx + edx*4], eax
cmp dword [ebp - 0x68], ebx
jne 0x1001d8af
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], edi
jle 0x1001d848
jmp 0x1001d8af
mov dword [ebp - 0x1c], 0xffffffff
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], ebx
jne 0x1001d87e
mov eax, dword [ebp - 0x30]
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x30]
mov ecx, dword [ebp - 0x34]
mov eax, dword [ebp - 0xa0]
mov dword [eax], ecx
lea eax, [ecx + 0x25e1e30e]
mov dword [ebp - 0x2c], eax
mov eax, dword [ebp - 0x1c]
mov esi, dword [ebp - 0xa0]
add esi, 8
mov dword [ebp - 0x2c], eax
mov eax, dword [ebp - 0x2c]
mov dword [esi], eax
mov dword [ebp - 0x2c], edi
cmp dword [ebp - 0x2c], ebx
jl 0x1001d916
mov dword [ebp - 0x1c], ebx
jmp 0x1001d8cd
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0xe8], 0x6f056e99
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], edi
jl 0x1001d8bc
mov eax, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x34]
mov edx, dword [ebp - 0x34]
mov ecx, dword [ebp - 0x2c]
mov eax, dword [ebp - 0xa0]
mov dword [eax + ecx*4], edx
mov ecx, dword [ebp - 0x34]
add ecx, dword [esi]
mov eax, dword [ebp - 0xe4]
imul eax, ecx
cmp eax, 0xbf9cc53a
ja 0x1001d8ff
mov eax, dword [ebp - 0x34]
mov eax, dword [ebp - 0x28]
or ecx, 0xffffffff
cmp ecx, eax
sbb eax, eax
neg eax
mov dword [ebp - 0xe8], eax
dec dword [ebp - 0x2c]
jns 0x1001d8b7
lea ecx, [ebp - 0xa0]
call fcn.1000a787
inc dword [ebp - 0x28]
cmp dword [ebp - 0x28], 0xa
jl 0x1001d764
mov edi, dword [ebp - 0x20]
jmp 0x1001da66
mov dword [ebp - 0x1c], 0x2c1
cmp dword [ebp - 0x1c], 0x62e
jle 0x1001d986
mov esi, ebx
mov edi, esi
mov dword [ebp - 0x30], 0x5155
mov dword [ebp - 0x2c], ebx
mov eax, edi
mov ecx, 0x100792f8
and eax, ebx
cdq
push edx
push eax
call fcn.1000a4ec
inc ebx
cmp ebx, 0x37d1
jl 0x1001d954
dec edi
dec dword [ebp - 0x30]
push 0
pop ebx
jne 0x1001d951
inc esi
cmp esi, 0x60aa
jl 0x1001d948
mov edi, dword [ebp - 0x20]
or esi, 0xffffffff
mov dword [ebp - 4], 2
cmp dword [ebp - 0x1c], 0x233
jge 0x1001d9a5
mov edx, str.xblxlgqsv_mprhlvt_uhdyss
mov ecx, 0x100792f8
call fcn.1000c8f5
mov dword [ebp - 4], esi
mov dword [ebp - 0x2c], 0xfffffffd
mov dword [ebp - 0x2c], 8
jmp 0x1001da2f
mov dword [ebp - 0x20], 0xfffffffc
mov dword [ebp - 0x30], 0xd2d1a4e6
cmp dword [ebp - 0x2c], ebx
je 0x1001da00
mov eax, dword [ebp - 0x20]
sub eax, dword [ebp - 0x2c]
je 0x1001da00
xor esi, esi
inc esi
jmp 0x1001da02
mov esi, ebx
mov eax, dword [ebp - 0x2c]
xor edx, edx
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x20]
mov eax, dword [ebp - 0x2c]
cmp ecx, eax
setle dl
sub esi, edx
mov dword [ebp - 0x30], esi
mov byte [ebp - 0x15], bl
cmp byte [ebp - 0x15], 0
je 0x1001da2c
push ebx
push ebx
push ebx
call dword [sym.imp.ADVAPI32.dll_RegLoadKeyW]
dec dword [ebp - 0x2c]
cmp dword [ebp - 0x2c], 0xffffffed
jge 0x1001d9e0
movzx edx, byte [ebp + edi - 0x5f]
mov eax, edi
sub eax, dword [ebp - 0x38]
mov dword [ebp - 0x38], ebx
movzx eax, byte [ebp + eax - 0x62]
movzx ecx, word [ebp + eax*2 - 0xf8]
mov eax, ecx
and eax, edx
add eax, eax
sub ecx, eax
movzx eax, byte [ebp + edi - 0x60]
add ecx, edx
mov word [ebp + eax*2 - 0xf8], cx
add edi, 2
or esi, 0xffffffff
jmp 0x1001d57f
mov dword [ebp - 0x28], esi
xor esi, esi
mov dword [ebp - 0x30], 0x22f8
inc esi
cmp dword [ebp - 0x30], 0x2632
jle 0x1001dad5
mov eax, ebx
mov dword [ebp - 0x38], eax
mov edi, ebx
mov ecx, edi
sar eax, cl
lea ecx, [ebp - 0x1d8]
cdq
push edx
push eax
call fcn.10001a6a
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x1001daaa
mov eax, dword [eax]
push eax
call fcn.10046acc
pop ecx
push ebx
push esi
lea ecx, [ebp - 0x1d8]
call fcn.1000aac7
mov eax, dword [ebp - 0x38]
inc edi
cmp edi, 0x6381
jl 0x1001da8e
inc eax
mov dword [ebp - 0x38], eax
cmp eax, 0x7a19
jl 0x1001da8c
mov dword [ebp - 0x24], 0xbb002891
cmp dword [ebp - 0x30], 0x1fad
jge 0x1001daf0
push str.hwe_rtozmzxgn_larztiayr_ubluw_kwmus_pci_nicoqzf_bjdvkri_qccj
call fcn.10046acc
pop ecx
or edi, 0xffffffff
mov dword [ebp - 4], edi
mov dword [ebp - 0x30], ebx
mov dword [ebp - 0x30], 0xc68ab8ac
mov dword [ebp - 0x3c], 0xfffe
mov dword [ebp - 0x28], edi
jmp 0x1001dc15
push 3
pop esi
push esi
lea ecx, [ebp - 0x140]
call fcn.1000a704
mov dword [ebp - 0x1c], esi
mov dword [ebp - 0x38], edi
mov dword [ebp - 0x30], 0x800ff68e
mov dword [ebp - 0x20], ebx
jmp 0x1001db43
mov ecx, dword [ebp - 0x20]
mov eax, dword [ebp - 0x140]
mov dword [eax + ecx*4], 0xbfb3a4d
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], esi
jl 0x1001db30
mov esi, dword [ebp - 0x28]
xor edx, edx
mov ecx, dword [ebp - 0x28]
mov eax, dword [ebp - 0x28]
cmp ecx, eax
mov eax, dword [ebp - 0x28]
mov edi, dword [ebp - 0x140]
setne dl
xor ecx, ecx
cmp edx, eax
mov eax, dword [ebp - 0x1c]
setne cl
xor edx, edx
cmp ecx, eax
mov dword [edi + 4], esi
setne dl
xor eax, eax
add edx, dword [ebp - 0x1c]
cmp esi, edx
setg al
sub eax, dword [ebp - 0x28]
jne 0x1001db90
cmp dword [ebp - 0x1c], ebx
jne 0x1001db90
xor esi, esi
mov eax, ebx
inc esi
jmp 0x1001db95
xor esi, esi
inc esi
mov eax, esi
xor edx, edx
test eax, eax
sets dl
xor ecx, ecx
imul edx, dword [ebp - 0x28]
mov eax, dword [ebp - 0x1c]
neg edx
cmp edx, eax
setg cl
cmp ecx, dword [ebp - 0x24]
jl 0x1001dbb4
mov eax, dword [ebp - 0x28]
mov eax, dword [edi + 4]
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x38]
mov eax, dword [ebp - 0x24]
mov dword [ebp - 0x30], eax
mov eax, dword [ebp - 0x30]
cmp dword [ebp - 0x24], ebx
jne 0x1001dbd4
mov dword [ebp - 0x24], esi
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0x28]
xor edx, edx
add eax, 0x13783312
mov dword [ebp - 0x30], eax
mov ecx, dword [ebp - 0x30]
mov eax, dword [ebp - 0x28]
cmp ecx, eax
mov eax, dword [ebp - 0x38]
setne dl
xor ecx, ecx
cmp edx, eax
setle cl
xor eax, eax
cmp ecx, 0x7b400765
lea ecx, [ebp - 0x140]
setl al
mov dword [ebp - 0x30], eax
call fcn.1000a787
dec dword [ebp - 0x28]
push 0xffffffffffffffff
pop edi
cmp dword [ebp - 0x28], 0xffffffe9
jge 0x1001db0f
xor eax, eax
mov dword [ebp - 0x168], 7
mov word [ebp - 0xea], ax
lea ecx, [ebp - 0x17c]
mov word [ebp - 0x17c], ax
lea eax, [ebp - 0xf8]
push eax
mov dword [ebp - 0x16c], ebx
call fcn.1000ad0d
push dword [ebp - 0xbc]
mov dword [ebp - 4], 6
lea edi, [ebp - 0xf8]
xor eax, eax
lea ecx, [ebp - 0x194]
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
call fcn.1000a601
mov byte [ebp - 4], 7
mov dword [ebp - 0x20], 0x1cfa
cmp dword [ebp - 0x20], 0x1d96
jle 0x1001dcea
push 0x714
push 0xb0a
push ebx
call dword [sym.imp.GDI32.dll_CreatePolygonRgn]
mov edi, ebx
mov eax, ebx
mov dword [ebp - 0x38], 0x1ffc
mov dword [ebp - 0x30], eax
cdq
lea ecx, [ebp - 0x1f0]
push edx
push eax
call fcn.10001a6a
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x1001dcc0
mov eax, dword [eax]
push eax
call fcn.10046acc
pop ecx
push ebx
push esi
lea ecx, [ebp - 0x1f0]
call fcn.1000aac7
mov eax, dword [ebp - 0x30]
add eax, edi
dec dword [ebp - 0x38]
mov dword [ebp - 0x30], eax
jne 0x1001dca8
inc edi
cmp edi, 0x5efd
jl 0x1001dc9c
cmp dword [ebp - 0x20], 0x1998
jge 0x1001dcfe
push str.ndf_pfukykzoj_qibgnkq_uneua_sphlavx_hstgam_isf_kjkm_xmowwlgih_omifn_qspqcf_ombkot_qsnupirw_bultmep
call fcn.10046acc
pop ecx
mov dword [ebp - 4], 7
push 0xfffffffffffffffe
mov dword [ebp - 0x1c], 0x61928c17
pop edi
mov dword [ebp - 0x38], edi
mov byte [ebp - 0x15], bl
cmp byte [ebp - 0x15], 0
je 0x1001dd23
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_GetExitCodeThread]
mov dword [ebp - 0x1c], 0xffffffed
jmp 0x1001dd88
mov dword [ebp - 0x30], esi
mov dword [ebp - 0x20], ebx
jmp 0x1001dd45
mov eax, dword [ebp - 0x20]
mov dword [ebp + eax*4 - 0xac], 0xfffffffc
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], 3
jl 0x1001dd34
mov dword [ebp - 0xac], ebx
jmp 0x1001dd7c
mov eax, dword [ebp - 0x30]
add eax, dword [ebp - 0xac]
mov eax, dword [ebp - 0x1c]
push 0
pop edx
setns dl
xor ecx, ecx
cmp edx, eax
setg cl
cmp ecx, 4
sbb eax, eax
neg eax
mov dword [ebp - 0x38], eax
inc dword [ebp - 0xac]
cmp dword [ebp - 0xac], 0x19
je 0x1001dd53
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], edi
jle 0x1001dd2c
push 2
pop edi
push edi
lea ecx, [ebp - 0x134]
call fcn.1000a704
mov dword [ebp - 0x20], 0xdf1febae
mov dword [ebp - 0x20], ebx
jmp 0x1001ddbb
mov ecx, dword [ebp - 0x20]
mov eax, dword [ebp - 0x134]
mov dword [eax + ecx*4], 7
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], edi
jl 0x1001dda8
mov dword [ebp - 0x20], esi
cmp dword [ebp - 0x20], ebx
jl 0x1001dddb
mov ecx, dword [ebp - 0x20]
mov eax, dword [ebp - 0x134]
cmp dword [eax + ecx*4], ebx
jne 0x1001dddb
dec dword [ebp - 0x20]
jns 0x1001ddc8
lea ecx, [ebp - 0x134]
call fcn.1000a787
push esi
lea ecx, [ebp - 0xe0]
call fcn.1000a704
mov dword [ebp - 0x24], 1
or esi, 0xffffffff
mov dword [ebp - 0x28], esi
mov dword [ebp - 0x20], 0x64e4
mov dword [ebp - 0x34], 0xb132dc1b
mov dword [ebp - 0x28], ebx
jmp 0x1001de25
mov ecx, dword [ebp - 0x28]
mov eax, dword [ebp - 0xe0]
mov dword [eax + ecx*4], 0xea7
inc dword [ebp - 0x28]
cmp dword [ebp - 0x28], 1
jl 0x1001de12
mov dword [ebp - 0x28], ebx
jmp 0x1001de41
mov eax, dword [ebp - 0x28]
mov dword [ebp + eax*4 - 0x84], 0x24b2e809
inc dword [ebp - 0x28]
cmp dword [ebp - 0x28], 1
jl 0x1001de30
mov dword [ebp - 0x24], ebx
cmp dword [ebp - 0x24], ebx
jl 0x1001df91
mov dword [ebp - 0x2c], 0xb296ad98
mov dword [ebp - 0x30], 0x3f559cde
mov ecx, dword [ebp - 0x24]
mov eax, dword [ebp - 0xe0]
cmp dword [eax + ecx*4], ebx
je 0x1001de81
mov dword [ebp - 0x30], 0x1fc3eee2
mov eax, dword [ebp - 0x30]
mov dword [ebp - 0x28], eax
jmp 0x1001df88
mov dword [ebp - 0x1c], 0x70ab227d
mov dword [ebp - 0x3c], 0xeabf554
mov dword [ebp - 0x30], ebx
mov dword [ebp - 0x28], ebx
jmp 0x1001def1
mov dword [ebp - 0x38], ebx
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x24]
mov edx, dword [ebp - 0x24]
mov eax, dword [ebp - 0xe0]
mov ecx, dword [eax + ecx*4]
sub ecx, dword [eax + edx*4]
mov dword [ebp - 0x38], ecx
xor ecx, ecx
mov eax, dword [ebp - 0x38]
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x38]
mov dword [ebp - 0x84], eax
mov eax, dword [ebp - 0x1c]
cmp eax, 0xa8db
setne cl
xor eax, eax
cmp ecx, 0x2803
setne al
mov dword [ebp - 0x84], eax
inc dword [ebp - 0x28]
cmp dword [ebp - 0x28], ebx
jle 0x1001de97
cmp dword [ebp - 0x1c], ebx
je 0x1001df71
mov eax, dword [ebp - 0x20]
xor edx, edx
mov eax, dword [ebp - 0x2c]
inc edx
mov eax, dword [ebp - 0x1c]
xor ecx, ecx
sub edx, eax
add edx, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x1c]
cmp edx, eax
setg cl
cmp ecx, dword [ebp - 0x24]
jle 0x1001df25
cmp dword [ebp - 0x2c], ebx
je 0x1001df25
xor eax, eax
inc eax
jmp 0x1001df27
mov eax, ebx
mov ecx, dword [ebp - 0x34]
xor edx, edx
add ecx, eax
mov eax, dword [ebp - 0x2c]
cmp ecx, eax
mov eax, dword [ebp - 0x1c]
setge dl
xor ecx, ecx
cmp edx, eax
setne cl
xor edx, edx
mov dword [ebp - 0x30], ecx
mov ecx, dword [ebp - 0x30]
mov eax, dword [ebp - 0x2c]
cmp ecx, eax
mov eax, dword [ebp - 0x2c]
setne dl
neg edx
neg edx
sbb edx, edx
neg edx
mov dword [ebp - 0x30], edx
xor edx, edx
cmp dword [ebp - 0x30], edi
sete dl
xor ecx, ecx
cmp edx, eax
setg cl
neg ecx
jne 0x1001df7a
cmp dword [ebp - 0x3c], ebx
jne 0x1001df7a
mov ecx, ebx
jmp 0x1001df7d
xor ecx, ecx
inc ecx
xor eax, eax
cmp ecx, 7
sete al
mov dword [ebp - 0x30], eax
dec dword [ebp - 0x24]
jns 0x1001de53
lea ecx, [ebp - 0xe0]
call fcn.1000a787
mov byte [ebp - 0x40], bl
lea ecx, [ebp - 0x11c]
mov word [ebp - 0x3f], 0x1e2
mov byte [ebp - 0x3d], 0xe4
mov dword [ebp - 0x24], 0x5b9b55bb
push edi
call fcn.1000a704
mov dword [ebp - 0x30], 0xfffffff6
mov dword [ebp - 0x20], ebx
jmp 0x1001dfd7
mov ecx, dword [ebp - 0x20]
mov eax, dword [ebp - 0x11c]
mov dword [eax + ecx*4], esi
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], edi
jl 0x1001dfc8
mov dword [ebp - 0x24], 0x16
jmp 0x1001e075
mov dword [ebp - 0x1c], 1
mov dword [ebp - 0x1c], 1
cmp dword [ebp - 0x1c], ebx
jl 0x1001e072
mov dword [ebp - 0x38], 8
mov dword [ebp - 0x30], 1
mov dword [ebp - 0x30], 0x6652d0da
mov dword [ebp - 0x20], ebx
jmp 0x1001e022
mov eax, dword [ebp - 0x20]
mov dword [ebp + eax*4 - 0x1c0], esi
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], 3
jl 0x1001e015
mov eax, dword [ebp - 0x11c]
xor ecx, ecx
cmp dword [eax], 0xfffe
setne cl
mov dword [ebp - 0x30], ecx
mov eax, dword [ebp - 0x38]
mov eax, dword [ebp - 0x30]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x38]
mov dword [ebp - 0x30], eax
mov eax, dword [ebp - 0x30]
mov dword [ebp - 0x30], eax
mov eax, dword [ebp - 0x30]
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0x1c0], eax
mov byte [ebp - 0x15], bl
cmp byte [ebp - 0x15], 0
je 0x1001e06d
push ebx
call dword [sym.imp.GDI32.dll_DeleteObject]
dec dword [ebp - 0x1c]
jns 0x1001dffb
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], 0x18
jle 0x1001dfe8
lea ecx, [ebp - 0x11c]
call fcn.1000a787
push 0x5c
pop eax
mov word [ebp - 0x50], ax
mov dword [ebp - 0x24], esi
mov dword [ebp - 0x3c], ebx
mov dword [ebp - 0x38], 0xa7ad11e7
push 3
mov dword [ebp - 0x34], esi
mov dword [ebp - 0x28], ebx
pop edi
jmp 0x1001e0ba
mov eax, dword [ebp - 0x28]
mov dword [ebp + eax*4 - 0xc8], 0xffff
inc dword [ebp - 0x28]
cmp dword [ebp - 0x28], edi
jl 0x1001e0a9
mov dword [ebp - 0x28], ebx
jmp 0x1001e0d5
mov eax, dword [ebp - 0x28]
mov dword [ebp + eax*4 - 0x148], 1
inc dword [ebp - 0x28]
cmp dword [ebp - 0x28], 2
jl 0x1001e0c4
mov dword [ebp - 0x24], 0xc
jmp 0x1001e1c0
mov dword [ebp - 0x2c], 7
mov dword [ebp - 0x3c], 5
mov dword [ebp - 0x3c], 0xb81fdf20
mov dword [ebp - 0x2c], ebx
jmp 0x1001e1b3
mov eax, dword [ebp - 0x2c]
xor edx, edx
mov esi, dword [ebp + eax*4 - 0xc8]
mov eax, dword [ebp - 0x2c]
mov dword [ebp + eax*4 - 0xc8], esi
mov eax, dword [ebp - 0x24]
cmp eax, 0x1e6e2bfb
mov eax, dword [ebp - 0x2c]
setl dl
xor ecx, ecx
cmp eax, edx
setl cl
xor eax, eax
cmp ecx, 0xcf5a
setg al
xor ecx, ecx
cmp ecx, eax
mov eax, dword [ebp - 0x24]
sbb edx, edx
inc edx
cmp esi, eax
mov eax, 0x9ec4
setl cl
sub eax, ecx
cmp eax, edx
jge 0x1001e170
mov byte [ebp - 0x15], bl
cmp byte [ebp - 0x15], 0
je 0x1001e195
push ebx
push 0xfe4
push 0x11da
call dword [sym.imp.GDI32.dll_CreatePen]
jmp 0x1001e195
mov dword [ebp - 0x30], ebx
mov dword [ebp - 0x3c], 1
mov eax, dword [ebp - 0x2c]
inc eax
mov dword [ebp - 0x34], eax
mov eax, dword [ebp - 0x30]
mov ecx, dword [ebp - 0x34]
sub ecx, eax
sub ecx, dword [ebp - 0x30]
add ecx, dword [ebp - 0xc0]
mov dword [ebp - 0x3c], ecx
mov dword [ebp - 0x34], ebx
jmp 0x1001e1ab
mov eax, dword [ebp - 0x34]
mov dword [ebp + eax*4 - 0xc8], 0xffff
inc dword [ebp - 0x34]
cmp dword [ebp - 0x34], edi
jl 0x1001e19a
inc dword [ebp - 0x2c]
cmp dword [ebp - 0x2c], 2
jle 0x1001e104
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], 0x1a
jg 0x1001e0e7
mov eax, dword [ebp - 0x38]
mov ecx, ebx
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0x144]
mov dword [ebp - 0x34], eax
mov eax, dword [ebp - 0x34]
mov eax, dword [ebp - 0xc0]
push 2
mov dword [ebp - 0x38], eax
pop esi
cmp esi, 2
jne 0x1001e1f3
push esi
pop ecx
jmp 0x1001e21a
movzx edx, byte [ebp + esi - 0x3f]
mov eax, esi
sub eax, ecx
movzx eax, byte [ebp + eax - 0x42]
movzx eax, word [ebp + eax*2 - 0x50]
mov ecx, eax
and eax, edx
or ecx, edx
sub ecx, eax
movzx eax, byte [ebp + esi - 0x40]
mov word [ebp + eax*2 - 0x50], cx
mov ecx, ebx
add esi, 2
cmp esi, 4
jb 0x1001e1ea
mov dword [ebp - 0x2c], 0xf6af1124
mov byte [ebp - 0x15], bl
cmp byte [ebp - 0x15], 0
je 0x1001e23d
push ebx
push ebx
push ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_GetDiskFreeSpaceW]
mov dword [ebp - 0x2c], ebx
cmp dword [ebp - 0x2c], 0x16
jl 0x1001e3db
push 2
pop edi
push dword [ebp - 0x64]
movdqa xmm0, xmmword [0x1006c2c0]
lea eax, [ebp - 0x194]
push eax
lea eax, [ebp - 0x1a4]
mov dword [ebp - 0x1c], 0xfff8
push eax
push ebx
lea ecx, [ebp - 0xd4]
mov dword [ebp - 0xd4], ebx
movdqu xmmword [ebp - 0x1a4], xmm0
mov dword [ebp - 0xd0], ebx
mov dword [ebp - 0xcc], ebx
call fcn.1000d2d6
mov dword [ebp - 0x1c], ebx
mov dword [ebp - 0x1c], 0xffffffea
jmp 0x1001e3b6
mov dword [ebp - 0x34], 1
mov dword [ebp - 0x34], 0x18
jmp 0x1001e2d4
mov byte [ebp - 0x15], bl
cmp byte [ebp - 0x15], 0
je 0x1001e2d1
push ebx
push 0x264b
push 0xe1
push 0x4c1
call dword [sym.imp.GDI32.dll_SetWindowExtEx]
dec dword [ebp - 0x34]
cmp dword [ebp - 0x34], 0xfffffff4
jg 0x1001e2b2
mov dword [ebp - 0x34], 0xf
cmp dword [ebp - 0x34], 0xffffffe6
jle 0x1001e3b3
push 3
pop eax
mov dword [ebp - 0x20], ebx
cmp dword [ebp - 0x20], edi
jge 0x1001e30f
mov eax, dword [ebp - 0x20]
mov dword [ebp + eax*4 - 0x8c], 0xbb6bc3ec
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], edi
jl 0x1001e2f6
push 3
pop eax
mov dword [ebp - 0x88], ebx
jmp 0x1001e39a
mov dword [ebp - 0x24], 0x4f98cafa
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], ebx
jl 0x1001e359
mov dword [ebp - 0x20], 1
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], ebx
jl 0x1001e354
mov byte [ebp - 0x15], bl
cmp byte [ebp - 0x15], 0
je 0x1001e34c
push 0xb34
call dword [sym.imp.USER32.dll_MessageBeep]
dec dword [ebp - 0x20]
jns 0x1001e338
push 3
pop eax
dec dword [ebp - 0x24]
jns 0x1001e329
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], ebx
jl 0x1001e394
mov dword [ebp - 0x20], ebx
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], ebx
jl 0x1001e38f
mov byte [ebp - 0x15], bl
cmp byte [ebp - 0x15], 0
je 0x1001e387
push 0x10ce
push ebx
push ebx
push 0x1b17
call dword [sym.imp.USER32.dll_RedrawWindow]
dec dword [ebp - 0x20]
jns 0x1001e36c
push 3
pop eax
dec dword [ebp - 0x24]
jns 0x1001e361
inc dword [ebp - 0x88]
cmp dword [ebp - 0x88], eax
jle 0x1001e31a
dec dword [ebp - 0x34]
cmp dword [ebp - 0x34], 0xffffffe6
jg 0x1001e2ee
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 0xc
jge 0x1001e2a2
lea ecx, [ebp - 0xd4]
call fcn.1000a787
inc dword [ebp - 0x2c]
cmp dword [ebp - 0x2c], 0x16
jge 0x1001e24d
push 3
pop edi
xor eax, eax
mov word [ebp - 0x4e], ax
mov dword [ebp - 0x3c], 0xbca6
mov byte [ebp - 0x15], bl
cmp byte [ebp - 0x15], al
je 0x1001e3f6
call dword [sym.imp.USER32.dll_GetCapture]
mov byte [ebp - 0x15], bl
cmp byte [ebp - 0x15], 0
je 0x1001e40a
push ebx
push ebx
push 1
push ebx
call dword [sym.imp.KERNEL32.dll_CreateEventW]
xor eax, eax
mov dword [ebp - 0xfc], 7
mov word [ebp - 0x110], ax
lea ecx, [ebp - 0x110]
lea eax, [ebp - 0x50]
mov dword [ebp - 0x100], ebx
push eax
call fcn.1000ad0d
mov byte [ebp - 4], 0xa
lea eax, [ebp - 0x1a4]
push dword [ebp - 0x64]
xorps xmm0, xmm0
mov dword [ebp - 0x50], ebx
push eax
lea eax, [ebp - 0x1b4]
mov dword [ebp - 0xb8], ebx
push eax
push ebx
lea ecx, [ebp - 0xb8]
mov dword [ebp - 0xb4], ebx
movdqu xmmword [ebp - 0x1b4], xmm0
mov dword [ebp - 0xb0], ebx
call fcn.1000d2d6
mov dword [ebp - 0x1c], 0x4a276ac1
mov dword [ebp - 0x3c], ebx
mov dword [ebp - 0x20], ebx
jmp 0x1001e490
mov eax, dword [ebp - 0x20]
mov dword [ebp + eax*4 - 0x78], 0xffffffff
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], 4
jl 0x1001e482
cmp dword [ebp - 0x70], ebx
jne 0x1001e4fe
mov eax, dword [ebp - 0x70]
xor edx, edx
mov ecx, dword [ebp - 0x70]
mov eax, dword [ebp - 0x70]
cmp ecx, eax
mov eax, dword [ebp - 0x70]
setne dl
xor ecx, ecx
imul eax, edx
mov edx, dword [ebp - 0x70]
imul edx, eax
mov eax, dword [ebp - 0xb8]
mov esi, dword [eax + 8]
mov eax, dword [ebp - 0x78]
cmp edx, eax
setl cl
xor eax, eax
cmp ecx, esi
setne al
xor edx, edx
cmp eax, esi
mov eax, dword [ebp - 0x70]
setge dl
xor ecx, ecx
cmp edx, eax
setne cl
cmp dword [ebp - 0x70], ecx
jl 0x1001e4ea
mov eax, dword [ebp - 0x6c]
mov eax, dword [ebp - 0x70]
mov eax, dword [ebp - 0x70]
mov eax, dword [ebp - 0xb8]
cmp dword [eax], ebx
jne 0x1001e4fe
mov ecx, ebx
jmp 0x1001e501
xor ecx, ecx
inc ecx
xor eax, eax
cmp ecx, 0x800f4d4e
setne al
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x6c]
mov dword [ebp - 0x3c], 0xfffffffd
mov dword [ebp - 0x1c], ebx
jmp 0x1001e531
mov dword [ebp - 0x3c], edi
mov dword [ebp - 0x30], 0x5c7d8169
mov eax, dword [ebp - 0x3c]
mov dword [ebp - 0x30], eax
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 0xa
jne 0x1001e51e
lea ecx, [ebp - 0xb8]
call fcn.1000a787
push 0x5f
pop eax
push 2
mov byte [ebp - 0x48], bl
mov ecx, ebx
mov dword [ebp - 0x47], 0x553a0241
mov word [ebp - 0x4c], ax
pop esi
cmp esi, 2
jne 0x1001e563
mov ecx, edi
mov esi, edi
jmp 0x1001e58c
movzx edx, byte [ebp + esi - 0x47]
mov eax, esi
sub eax, ecx
movzx eax, byte [ebp + eax - 0x4a]
movzx ecx, word [ebp + eax*2 - 0x4c]
mov eax, ecx
and eax, edx
add eax, eax
sub ecx, eax
movzx eax, byte [ebp + esi - 0x48]
add ecx, edx
mov word [ebp + eax*2 - 0x4c], cx
mov ecx, ebx
add esi, 2
cmp esi, 5
jb 0x1001e558
xor eax, eax
mov word [ebp - 0x4a], ax
push 7
pop eax
mov dword [ebp - 0x24], eax
mov dword [ebp - 0x38], 0x6f8f9ed0
mov dword [ebp - 0x2c], 0x534a2c93
mov dword [ebp - 0x30], eax
mov dword [ebp - 0x3c], 0xb72b416c
mov dword [ebp - 0x24], 0xffffffea
cmp dword [ebp - 0x24], 0x12
jl 0x1001e67c
mov dword [ebp - 0x2c], 0xfffc
mov dword [ebp - 0x20], 0x7fd1e814
mov dword [ebp - 0x1c], ebx
mov eax, dword [ebp - 0x2c]
mov dword [ebp - 0x20], eax
mov eax, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x20]
cmp dword [ebp - 0x2c], ebx
je 0x1001e609
mov eax, dword [ebp - 0x1c]
xor ecx, ecx
cmp eax, 0x2092
setge cl
mov dword [ebp - 0x38], ecx
mov eax, dword [ebp - 0x38]
mov eax, dword [ebp - 0x2c]
dec eax
je 0x1001e609
xor eax, eax
inc eax
jmp 0x1001e60b
mov eax, ebx
cmp eax, dword [ebp - 0x24]
je 0x1001e613
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x1c]
sub eax, dword [ebp - 0x24]
je 0x1001e625
cmp dword [ebp - 0x38], ebx
je 0x1001e625
xor eax, eax
inc eax
jmp 0x1001e627
mov eax, ebx
mov dword [ebp - 0x2c], eax
mov eax, dword [ebp - 0x2c]
mov dword [ebp - 0x30], eax
mov eax, dword [ebp - 0x30]
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x20]
sub ecx, 0xdedc87a9
neg ecx
sbb ecx, ecx
add eax, 0x688
inc ecx
xor edx, edx
add ecx, eax
mov eax, dword [ebp - 0x1c]
cmp ecx, eax
setne dl
cmp edx, dword [ebp - 0x1c]
jl 0x1001e667
cmp dword [ebp - 0x2c], ebx
je 0x1001e667
xor eax, eax
inc eax
jmp 0x1001e669
mov eax, ebx
mov dword [ebp - 0x3c], eax
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], 0x12
jge 0x1001e5c9
push 7
pop eax
mov dword [ebp - 0x150], eax
lea ecx, [ebp - 0x164]
xor eax, eax
mov dword [ebp - 0x154], ebx
mov word [ebp - 0x164], ax
lea eax, [ebp - 0x4c]
push eax
call fcn.1000ad0d
mov byte [ebp - 4], 0xb
mov dword [ebp - 0x4c], ebx
push dword [ebp - 0x100]
cmp dword [ebp - 0xfc], 8
lea eax, [ebp - 0x110]
push ebx
cmovae eax, dword [ebp - 0x110]
lea ecx, [ebp - 0x194]
push eax
call fcn.1001eaa4
or ecx, 0xffffffff
cmp eax, ecx
je 0x1001e6ee
push ecx
push ebx
lea ecx, [ebp - 0x164]
push ecx
push 1
push eax
lea ecx, [ebp - 0x194]
call fcn.1001c2b6
jmp 0x1001e6a7
mov ecx, dword [ebp - 0x64]
lea eax, [ebp - 0x194]
push eax
lea edx, [ebp - 0x17c]
call fcn.1001eb47
pop ecx
push ebx
push 1
lea ecx, [ebp - 0x164]
call fcn.1000ae2f
push ebx
push 1
lea ecx, [ebp - 0x110]
call fcn.1000ae2f
push ebx
push 1
lea ecx, [ebp - 0x194]
call fcn.1000ae2f
push ebx
push 1
lea ecx, [ebp - 0x17c]
call fcn.1000ae2f
mov eax, dword [ebp - 0x64]
mov ecx, dword [ebp - 0xc]
pop edi
pop esi
mov dword fs:[0], ecx
pop ebx
mov esp, ebp
pop ebp
ret