Function at 0x10004c90
Capabilities:
Accept command line arguments
Authenticate hmac
Encrypt data using speck
Query environment variable

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xba0
push ebx
push esi
push edi
push 0x1007e414
call dword [sym.imp.KERNEL32.dll_lstrlenA]
mov dword [0x1009bc7c], eax
mov byte [ebp - 0x6b], 0xaa
mov eax, dword [0x1009b138]
mov ecx, dword [0x1009b13c]
mov dword [ebp - 0x34], eax
mov dword [ebp - 0x30], ecx
mov edx, dword [0x1009b18c]
mov dword [ebp - 0x40], edx
movsx eax, byte [0x1009b0a7]
cdq
mov dword [ebp - 0x50], eax
mov dword [ebp - 0x4c], edx
mov byte [ebp - 1], 0x8e
mov eax, dword [0x1009b1b0]
mov word [ebp - 0x1c], ax
mov cl, byte [0x1009b0ba]
mov byte [ebp - 4], cl
mov edx, dword [0x1009b168]
mov eax, dword [0x1009b16c]
mov dword [ebp - 0xab0], eax
mov byte [ebp - 2], dl
mov ecx, 0x11
mov word [ebp - 0xc], cx
mov byte [ebp - 5], 0x60
mov edx, dword [0x1009b130]
mov eax, dword [0x1009b134]
mov dword [ebp - 0xaac], eax
mov dword [ebp - 0x2c], edx
mov byte [ebp - 7], 0xba
mov cx, word [0x1009b170]
mov word [ebp - 0x18], cx
movzx eax, byte [0x1009b07f]
cdq
mov dword [ebp - 0x48], eax
mov dword [ebp - 0x44], edx
mov edx, 0xffffb488
mov word [ebp - 0x10], dx
mov dword [ebp - 0x54], 0xff22ca73
xor eax, eax
mov dword [ebp - 0x3c], 0xca99
mov dword [ebp - 0x38], eax
movsx cx, byte [0x1009b0a7]
mov word [ebp - 0x14], cx
mov dl, byte [0x1009b180]
mov byte [ebp - 6], dl
movzx eax, byte [0x1009b07e]
mov dword [ebp - 0x58], eax
xor ecx, ecx
mov dword [ebp - 0x60], 0xf9
mov dword [ebp - 0x5c], ecx
mov dl, byte [0x1009b0ee]
mov byte [ebp - 3], dl
mov dword [ebp - 0x28], 0x1752de79
xor eax, eax
mov dword [ebp - 0x24], 0x20bf8d1a
mov dword [ebp - 0x20], eax
movsx ecx, word [0x1009b180]
mov dword [ebp - 0xaa8], ecx
mov dword [ebp - 0xaa4], 0x75d00920
xor edx, edx
mov dword [ebp - 0xb80], 0x7090
mov dword [ebp - 0xb7c], edx
mov byte [ebp - 0xdc], 0xad
mov dword [ebp - 0xaa0], 0xb99f
movzx eax, word [0x1009b184]
mov dword [ebp - 0xa9c], eax
mov byte [ebp - 0xdb], 0xdc
mov cx, word [0x1009b18c]
mov word [ebp - 0x4fc], cx
xor edx, edx
mov dword [ebp - 0xb88], 0xa8
mov dword [ebp - 0xb84], edx
xor eax, eax
mov dword [ebp - 0xb90], 0x91
mov dword [ebp - 0xb8c], eax
mov byte [ebp - 0xda], 0xa2
mov ecx, dword [0x1009b190]
mov word [ebp - 0x500], cx
mov byte [ebp - 0xd9], 0xf8
xor edx, edx
mov dword [ebp - 0xb98], 0xe6d8
mov dword [ebp - 0xb94], edx
mov eax, 0x9e0
mov word [ebp - 0x504], ax
movsx eax, byte [ebp - 2]
cdq
push edx
push eax
mov ecx, dword [0x1009b17c]
push ecx
mov edx, dword [0x1009b178]
push edx
call fcn.1006c090
mov dword [ebp - 0x554], eax
mov dword [ebp - 0x550], edx
mov eax, dword [ebp - 0x554]
or eax, dword [ebp - 0x550]
jne 0x10004e9c
mov dword [ebp - 0x3d8], 1
jmp 0x10004ea6
mov dword [ebp - 0x3d8], 0
movsx ecx, byte [0x1009b0ba]
test ecx, ecx
jne 0x10004ebd
mov dword [ebp - 0x3dc], 1
jmp 0x10004ec7
mov dword [ebp - 0x3dc], 0
mov edx, dword [0x1009b170]
not edx
movzx eax, byte [ebp - 3]
sub edx, eax
sub edx, dword [ebp - 0x3d8]
mov ecx, dword [0x1009b188]
sub ecx, dword [0x1009b140]
mov eax, dword [0x1009b1a0]
add eax, dword [ebp - 0x3dc]
and ecx, eax
add edx, ecx
mov dword [ebp - 0x28], edx
mov ecx, dword [ebp - 0x2c]
add ecx, dword [0x1009b14c]
mov edx, dword [ebp - 0x2c]
xor edx, ecx
mov dword [ebp - 0x2c], edx
movsx eax, word [ebp - 0x14]
cdq
mov dword [ebp - 0x48], eax
mov dword [ebp - 0x44], edx
mov eax, dword [0x1009bc7c]
mov dword [ebp - 0x78], eax
movzx eax, byte [ebp - 3]
cdq
mov ecx, dword [ebp - 0x24]
mov edx, dword [ebp - 0x20]
mov dword [ebp - 0xa98], edx
sub eax, ecx
mov byte [ebp - 3], al
movzx eax, byte [ebp - 6]
test eax, eax
jne 0x10004f47
mov dword [ebp - 0x3e0], 1
jmp 0x10004f51
mov dword [ebp - 0x3e0], 0
movsx ecx, word [0x1009b180]
movsx edx, word [ebp - 0x10]
sub ecx, edx
mov eax, dword [0x1009b14c]
add ecx, dword [ebp - 0x3e0]
add eax, ecx
mov ecx, dword [ebp - 0x2c]
imul ecx, dword [0x1009b14c]
not ecx
xor ecx, dword [0x1009b1b0]
sub eax, ecx
not eax
mov byte [0x1009b07e], al
mov dl, byte [0x1009b0ee]
mov byte [0x1009b0ef], dl
mov eax, dword [ebp - 0x78]
add eax, 0x2a9
mov dword [ebp - 0x204], eax
mov ecx, dword [ebp - 0x24]
mov edx, dword [ebp - 0x20]
mov dword [ebp - 0xa94], edx
push ecx
call dword [sym.imp.KERNEL32.dll_IsValidCodePage]
mov dword [ebp - 0x58], eax
mov eax, dword [ebp - 0x78]
add eax, 0x3d9
mov dword [ebp - 0xa90], eax
mov ecx, dword [ebp - 0x3c]
mov edx, dword [ebp - 0x38]
mov dword [ebp - 0x55c], ecx
mov dword [ebp - 0x558], edx
mov eax, dword [ebp - 0x55c]
or eax, dword [ebp - 0x558]
jne 0x10004fff
movzx ecx, word [0x1009b184]
test ecx, ecx
jne 0x10004fff
movzx edx, byte [ebp - 4]
cmp edx, 0x9455ff7d
jae 0x10005112
movzx eax, byte [ebp - 3]
cdq
sub eax, 0x476cbd71
sbb edx, 0x38e70
push edx
push eax
mov eax, dword [0x1009b13c]
push eax
mov ecx, dword [0x1009b138]
push ecx
call fcn.1006c090
mov dword [0x1009b138], eax
mov dword [0x1009b13c], edx
mov edx, dword [0x1009b13c]
push edx
mov eax, dword [0x1009b138]
push eax
mov ecx, dword [0x1009b13c]
push ecx
mov edx, dword [0x1009b138]
push edx
call fcn.1006c090
mov ecx, dword [0x1009b138]
sub ecx, eax
mov eax, dword [0x1009b13c]
sbb eax, edx
mov dword [0x1009b138], ecx
mov dword [0x1009b13c], eax
mov ecx, dword [0x1009b160]
or ecx, dword [0x1009b164]
jne 0x10005082
mov dword [ebp - 0x3e4], 1
jmp 0x1000508c
mov dword [ebp - 0x3e4], 0
imul eax, dword [ebp - 0x3e4], 0xeb13
movsx edx, word [ebp - 0x10]
imul eax, edx
cdq
mov esi, eax
mov edi, edx
movzx eax, byte [ebp - 5]
movzx ecx, byte [ebp - 5]
sub eax, ecx
cdq
mov ebx, eax
mov eax, edx
mov edx, dword [0x1009b160]
not edx
mov ecx, dword [0x1009b164]
not ecx
mov dword [ebp - 0x510], edi
mov edi, dword [0x1009b130]
mov dword [ebp - 0x50c], esi
mov esi, dword [0x1009b134]
push ecx
push edx
push esi
push edi
mov dword [ebp - 0x508], eax
call fcn.1006c090
sub ebx, eax
mov esi, dword [ebp - 0x508]
sbb esi, edx
not ebx
not esi
mov edi, dword [ebp - 0x50c]
sub edi, ebx
mov ebx, dword [ebp - 0x510]
sbb ebx, esi
mov dword [0x1009b178], edi
mov dword [0x1009b17c], ebx
mov edx, dword [ebp - 0x78]
add edx, 0x27e
mov dword [ebp - 0x200], edx
call dword [sym.imp.KERNEL32.dll_GetLargePageMinimum]
mov byte [ebp - 5], al
mov eax, dword [0x1009bc7c]
mov dword [ebp - 0x7c], eax
mov ecx, dword [0x1009b1a0]
add ecx, 0x66de
mov word [ebp - 0xc], cx
movsx eax, word [ebp - 0xc]
cdq
mov ecx, dword [0x1009b198]
mov esi, dword [0x1009b19c]
add ecx, eax
adc esi, edx
mov edx, dword [0x1009b198]
mov eax, dword [0x1009b19c]
add edx, ecx
adc eax, esi
mov dword [0x1009b198], edx
mov dword [0x1009b19c], eax
mov eax, dword [ebp - 0x2c]
cdq
mov ecx, dword [ebp - 0x34]
mov esi, dword [ebp - 0x30]
add ecx, eax
adc esi, edx
mov edi, dword [0x1009b138]
sub edi, ecx
mov ecx, dword [0x1009b13c]
sbb ecx, esi
mov esi, dword [ebp - 0x60]
mov ebx, dword [ebp - 0x5c]
not esi
not ebx
mov edx, dword [ebp - 0x2c]
not edx
imul eax, edx, 0x4f
cdq
add esi, eax
adc ebx, edx
push ebx
push esi
push ecx
push edi
call fcn.1006c090
mov byte [ebp - 4], al
mov dword [0x1009b188], 0x43fc63e6
mov eax, dword [ebp - 0x7c]
add eax, 0x105
mov dword [ebp - 0xa8c], eax
movzx eax, byte [ebp - 5]
cdq
mov ecx, dword [0x1009b164]
push ecx
mov ecx, dword [0x1009b160]
push ecx
push edx
push eax
call fcn.1006c090
mov ecx, eax
movzx eax, byte [ebp - 5]
cdq
sub eax, ecx
mov byte [ebp - 5], al
imul edx, dword [ebp - 0x2c], 0x59b27add
movsx eax, byte [ebp - 2]
imul eax, edx
mov byte [ebp - 2], al
xor ecx, ecx
mov dword [0x1009b160], 0x5924
mov dword [0x1009b164], ecx
movzx eax, byte [ebp - 3]
cdq
add eax, 0xba8160ee
mov word [0x1009b180], ax
mov edx, dword [ebp - 0x28]
add edx, 1
mov dword [ebp - 0x28], edx
mov eax, dword [ebp - 0x7c]
add eax, 0x20
mov dword [ebp - 0x53c], eax
movsx ecx, byte [0x1009b0bb]
movzx edx, byte [ebp - 3]
cmp ecx, edx
jle 0x10005253
mov dword [ebp - 0x3e8], 1
jmp 0x1000525d
mov dword [ebp - 0x3e8], 0
mov eax, dword [ebp - 0x2c]
cdq
mov ecx, dword [ebp - 0x34]
mov esi, dword [ebp - 0x30]
mov dword [ebp - 0x564], eax
mov dword [ebp - 0x560], edx
mov dword [ebp - 0x56c], ecx
mov dword [ebp - 0x568], esi
mov edx, dword [ebp - 0x564]
cmp edx, dword [ebp - 0x56c]
jne 0x1000529b
mov eax, dword [ebp - 0x560]
cmp eax, dword [ebp - 0x568]
je 0x100052a7
mov dword [ebp - 0xe4], 1
jmp 0x100052b1
mov dword [ebp - 0xe4], 0
mov ecx, dword [ebp - 0x3e8]
cmp ecx, dword [ebp - 0xe4]
jge 0x100052c1
jmp 0x10005305
mov eax, dword [ebp - 0x28]
cdq
mov ecx, dword [0x1009b1a8]
mov esi, dword [0x1009b1ac]
push esi
push ecx
push edx
push eax
call fcn.1006c090
mov dword [ebp - 0x28], eax
mov edx, 4
imul eax, edx, 0xbe9
mov ecx, dword [eax + 0x1014e400]
xor edx, edx
mov dword [ebp - 0x50], ecx
mov dword [ebp - 0x4c], edx
movsx eax, byte [0x1009b0a7]
not eax
mov word [0x1009b158], ax
mov ecx, dword [ebp - 0x7c]
add ecx, 0x26f
mov dword [ebp - 0xa88], ecx
mov byte [0x1009b0a6], 0x7b
mov dword [ebp - 0x40], 4
mov edx, dword [0x1009b18c]
sub edx, dword [0x1009b138]
mov dword [0x1009b18c], edx
movzx eax, word [0x1009b184]
add eax, dword [ebp - 0x40]
mov word [0x1009b184], ax
movzx ecx, byte [0x1009b0a6]
movsx edx, byte [ebp - 1]
add edx, 0xdf7b
cmp ecx, edx
jne 0x100055a6
movsx eax, byte [0x1009b0ba]
cdq
mov ecx, eax
mov esi, edx
movsx eax, byte [ebp - 1]
cdq
add eax, 0x546079f5
adc edx, 0xe2fbe
mov dword [ebp - 0x574], ecx
mov dword [ebp - 0x570], esi
mov dword [ebp - 0x57c], eax
mov dword [ebp - 0x578], edx
mov edx, dword [ebp - 0x574]
cmp edx, dword [ebp - 0x57c]
jne 0x100055a6
mov eax, dword [ebp - 0x570]
cmp eax, dword [ebp - 0x578]
jne 0x100055a6
call dword [sym.imp.USER32.dll_GetMessageExtraInfo]
mov dword [ebp - 0x40], eax
cmp dword [ebp - 0x40], 0
jle 0x1000545c
movsx ecx, word [ebp - 0x18]
movsx edx, word [ebp - 0x18]
cmp ecx, edx
je 0x100053e0
mov dword [ebp - 0xe8], 1
jmp 0x100053ea
mov dword [ebp - 0xe8], 0
movsx eax, word [ebp - 0x18]
cmp eax, 0x1a
je 0x100053ff
mov dword [ebp - 0xec], 1
jmp 0x10005409
mov dword [ebp - 0xec], 0
mov ecx, dword [ebp - 0xe8]
cmp ecx, dword [ebp - 0xec]
jge 0x10005457
mov eax, dword [ebp - 0x2c]
cdq
mov ecx, dword [ebp - 0x48]
mov esi, dword [ebp - 0x44]
or ecx, dword [ebp - 0x50]
or esi, dword [ebp - 0x4c]
xor eax, ecx
xor edx, esi
mov dword [0x1009b198], eax
mov dword [0x1009b19c], edx
mov edx, 4
imul eax, edx, 0x453a
mov ecx, dword [eax + 0x102b4bf0]
mov dword [ebp - 0x28], ecx
imul edx, dword [ebp - 0x58], 0xba
mov byte [0x1009b01f], dl
jmp 0x10005568
cmp dword [0x1009b190], 0
jne 0x10005471
mov dword [ebp - 0xf0], 1
jmp 0x1000547b
mov dword [ebp - 0xf0], 0
movsx eax, word [0x1009b180]
cmp eax, dword [ebp - 0xf0]
jne 0x10005496
mov dword [ebp - 0xf4], 1
jmp 0x100054a0
mov dword [ebp - 0xf4], 0
mov eax, dword [ebp - 0x40]
cdq
mov ecx, dword [ebp - 0x4c]
push ecx
mov ecx, dword [ebp - 0x50]
push ecx
push edx
push eax
call fcn.1006c090
mov ecx, eax
mov esi, edx
mov eax, dword [ebp - 0xf4]
not eax
cdq
mov dword [ebp - 0x584], ecx
mov dword [ebp - 0x580], esi
mov dword [ebp - 0x58c], eax
mov dword [ebp - 0x588], edx
mov edx, dword [ebp - 0x580]
cmp edx, dword [ebp - 0x588]
jb 0x10005502
ja 0x100054f6
mov eax, dword [ebp - 0x584]
cmp eax, dword [ebp - 0x58c]
jbe 0x10005502
mov dword [ebp - 0xf8], 1
jmp 0x1000550c
mov dword [ebp - 0xf8], 0
mov ecx, dword [ebp - 0xf8]
not ecx
test ecx, ecx
je 0x10005568
movzx eax, word [0x1009b158]
cdq
mov ecx, eax
mov edx, dword [ebp - 0x24]
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0xa84], eax
sub ecx, edx
movzx eax, word [0x1009b158]
cdq
add eax, ecx
mov word [0x1009b158], ax
mov ecx, dword [ebp - 0x24]
mov edx, dword [ebp - 0x20]
mov dword [ebp - 0xa80], edx
sub ecx, 0x3664
movsx eax, byte [0x1009b0a7]
cdq
add eax, ecx
mov byte [0x1009b0a7], al
mov dword [ebp - 0x28], 0x48eb
jmp 0x100055a6
mov byte [0x1009b0a6], 0x7b
mov dword [0x1009b144], 8
movzx ecx, byte [0x1009b01f]
movzx edx, byte [ebp - 5]
xor ecx, edx
movzx eax, byte [0x1009b01f]
imul eax, ecx
mov byte [0x1009b01f], al
mov ecx, dword [0x1009b14c]
sub ecx, 0x5f
mov word [ebp - 0x1c], cx
movsx eax, word [ebp - 0x18]
cdq
mov ecx, eax
mov esi, edx
add ecx, 0x22371a6e
adc esi, 0x31367
movsx eax, byte [ebp - 2]
cdq
push esi
push ecx
push edx
push eax
call fcn.1006c090
mov byte [ebp - 2], al
mov eax, dword [ebp - 0x40]
cdq
sub eax, 0x55109fdf
sbb edx, 0x75562
mov dword [0x1009b160], eax
mov dword [0x1009b164], edx
movzx edx, word [0x1009b184]
cmp edx, dword [ebp - 0x54]
jae 0x10005638
mov dword [ebp - 0xfc], 1
jmp 0x10005642
mov dword [ebp - 0xfc], 0
movzx eax, word [0x1009b184]
cmp eax, 0x10
jge 0x1000565a
mov dword [ebp - 0x100], 1
jmp 0x10005664
mov dword [ebp - 0x100], 0
mov ecx, dword [ebp - 0xfc]
cmp ecx, dword [ebp - 0x100]
jge 0x10005835
xorps xmm0, xmm0
movlpd qword [ebp - 0x34], xmm0
mov dword [0x1009b170], 0x851001d8
movzx edx, byte [0x1009b0ef]
mov eax, dword [0x1009b144]
add eax, dword [0x1009b188]
sub edx, eax
mov byte [0x1009b0ba], dl
xor ecx, ecx
mov dword [0x1009b130], 0x7c
mov dword [0x1009b134], ecx
movsx eax, word [ebp - 0x14]
sub eax, 0x9d70b9e
cdq
mov ecx, dword [0x1009b198]
mov esi, dword [0x1009b19c]
xor ecx, eax
xor esi, edx
mov dword [0x1009b198], ecx
mov dword [0x1009b19c], esi
movsx eax, word [0x1009b180]
cdq
mov ecx, dword [0x1009b190]
xor esi, esi
mov edi, dword [ebp - 0x38]
add ecx, dword [ebp - 0x3c]
adc esi, edi
mov edi, dword [0x1009b160]
and edi, 0xec35e4c
mov ebx, dword [0x1009b164]
and ebx, 0
add ecx, edi
adc esi, ebx
not ecx
not esi
sub eax, ecx
sbb edx, esi
mov dword [ebp - 0x594], eax
mov dword [ebp - 0x590], edx
mov edx, dword [ebp - 0x594]
or edx, dword [ebp - 0x590]
jne 0x10005739
mov dword [ebp - 0x104], 1
jmp 0x10005743
mov dword [ebp - 0x104], 0
mov eax, dword [ebp - 0x104]
mov dword [0x1009b1b0], eax
movzx ecx, byte [0x1009b0a6]
not ecx
mov dword [ebp - 0x2c], ecx
mov edx, dword [ebp - 0x34]
mov eax, dword [ebp - 0x30]
mov dword [ebp - 0x59c], edx
mov dword [ebp - 0x598], eax
mov ecx, dword [ebp - 0x59c]
or ecx, dword [ebp - 0x598]
je 0x1000577f
jmp 0x10005833
movzx edx, byte [0x1009b07e]
add edx, 0x5ef9367
mov byte [0x1009b0a6], dl
movzx eax, byte [0x1009b07f]
cdq
mov ecx, dword [ebp - 0x24]
mov edx, dword [ebp - 0x20]
mov dword [ebp - 0xa7c], edx
sub eax, ecx
mov byte [0x1009b07f], al
mov eax, 0xfb
mov word [0x1009b180], ax
mov byte [0x1009b0a7], 4
movzx ecx, byte [0x1009b07f]
mov edx, 4
imul eax, edx, 0x3869
mov dword [eax + 0x10223810], ecx
movsx ecx, byte [ebp - 2]
mov edx, dword [0x1009b1b0]
sub edx, ecx
jne 0x100057f1
mov dword [ebp - 0x108], 1
jmp 0x100057fb
mov dword [ebp - 0x108], 0
movzx eax, byte [0x1009b0ef]
movsx ecx, byte [0x1009b0a7]
sub eax, ecx
cdq
mov ecx, dword [0x1009b130]
mov esi, dword [0x1009b134]
push edx
push eax
push esi
push ecx
call fcn.1006c090
mov ecx, eax
movsx eax, byte [ebp - 2]
xor eax, dword [ebp - 0x108]
cdq
sub ecx, eax
mov byte [ebp - 3], cl
jmp 0x10005893
mov edx, dword [ebp - 0x58]
add edx, 0x12
movsx eax, word [ebp - 0x18]
xor eax, edx
mov word [ebp - 0x18], ax
mov ecx, dword [ebp - 0x60]
mov edx, dword [ebp - 0x5c]
sub ecx, 1
sbb edx, 0
mov dword [ebp - 0x60], ecx
mov dword [ebp - 0x5c], edx
movzx eax, byte [ebp - 3]
cdq
xor eax, dword [ebp - 0x60]
xor edx, dword [ebp - 0x5c]
movzx ecx, word [0x1009b158]
mov esi, dword [ebp - 0x58]
sub esi, ecx
xor ecx, ecx
push ecx
push esi
push edx
push eax
call fcn.1006c090
mov ecx, eax
mov eax, dword [ebp - 0x40]
cdq
xor ecx, eax
mov dword [ebp - 0x2c], ecx
movzx edx, byte [ebp - 4]
imul eax, edx, 0x7cd78225
mov byte [0x1009b0a7], al
call fcn.1000f0f0
movzx ecx, al
test ecx, ecx
jne 0x10007c9d
movzx edx, word [0x1009b158]
cmp dword [0x1009b170], edx
jne 0x100058be
mov dword [ebp - 0x10c], 1
jmp 0x100058c8
mov dword [ebp - 0x10c], 0
cmp dword [0x1009b170], 0x5f
jne 0x100058dd
mov dword [ebp - 0x110], 1
jmp 0x100058e7
mov dword [ebp - 0x110], 0
mov eax, dword [ebp - 0x10c]
cmp eax, dword [ebp - 0x110]
jne 0x100059e6
xorps xmm0, xmm0
movlpd qword [0x1009b178], xmm0
mov ecx, dword [ebp - 0x60]
mov edx, dword [ebp - 0x5c]
push 0
push 0xc9
push edx
push ecx
call fcn.1006c090
mov ecx, eax
mov esi, edx
movzx eax, byte [ebp - 6]
cdq
push esi
push ecx
push edx
push eax
call fcn.1006c090
mov byte [ebp - 6], al
movsx edx, byte [0x1009b0ba]
imul edx, dword [ebp - 0x58]
mov dword [ebp - 0x58], edx
mov eax, 0xffffcc2b
mov word [ebp - 0x10], ax
mov eax, dword [0x1009b178]
mov edx, dword [0x1009b17c]
mov cl, 7
call fcn.1006c0f0
mov dword [0x1009b18c], eax
mov ecx, dword [0x1009b178]
mov edx, dword [0x1009b17c]
mov dword [ebp - 0x5a4], ecx
mov dword [ebp - 0x5a0], edx
mov eax, dword [ebp - 0x5a4]
or eax, dword [ebp - 0x5a0]
je 0x10005983
jmp 0x100059e1
movsx ecx, word [ebp - 0x18]
imul edx, ecx, 0xfa8eebed
xor eax, eax
mov dword [ebp - 0x50], edx
mov dword [ebp - 0x4c], eax
movzx eax, byte [0x1009b0a6]
movsx ecx, byte [0x1009b0a7]
and eax, ecx
cdq
mov dword [ebp - 0x34], eax
mov dword [ebp - 0x30], edx
movzx dx, byte [0x1009b0ee]
mov word [ebp - 0x18], dx
movzx eax, byte [ebp - 3]
cdq
mov ecx, 8
imul ecx, ecx, 0xe
mov dword [ecx + 0x101c0bc0], eax
mov dword [ecx + 0x101c0bc4], edx
movzx edx, byte [ebp - 5]
add edx, dword [0x1009b18c]
mov dword [0x1009b18c], edx
jmp 0x10005bd8
movzx eax, byte [0x1009b033]
cdq
mov ecx, dword [ebp - 0x48]
mov esi, dword [ebp - 0x44]
mov dword [ebp - 0x5ac], eax
mov dword [ebp - 0x5a8], edx
mov dword [ebp - 0x5b4], ecx
mov dword [ebp - 0x5b0], esi
mov edx, dword [ebp - 0x5a8]
cmp edx, dword [ebp - 0x5b0]
jl 0x10005a36
jg 0x10005a2a
mov eax, dword [ebp - 0x5ac]
cmp eax, dword [ebp - 0x5b4]
jbe 0x10005a36
mov dword [ebp - 0x114], 1
jmp 0x10005a40
mov dword [ebp - 0x114], 0
movzx ecx, word [0x1009b158]
test ecx, ecx
jne 0x10005a57
mov dword [ebp - 0x118], 1
jmp 0x10005a61
mov dword [ebp - 0x118], 0
mov edx, dword [ebp - 0x114]
cmp edx, dword [ebp - 0x118]
jne 0x10005a7b
mov dword [ebp - 0x11c], 1
jmp 0x10005a85
mov dword [ebp - 0x11c], 0
mov eax, dword [ebp - 0x11c]
not eax
test eax, eax
je 0x10005ae0
mov dword [0x1009b140], 0x993602b5
mov eax, dword [ebp - 0x40]
cdq
mov ecx, dword [0x1009b198]
mov esi, dword [0x1009b19c]
push edx
push eax
push esi
push ecx
call fcn.1006c090
mov dword [0x1009b198], eax
mov dword [0x1009b19c], edx
movsx eax, word [ebp - 0x18]
cdq
mov ecx, 8
imul ecx, ecx, 0x5add
mov dword [ecx + 0x10317600], eax
mov dword [ecx + 0x10317604], edx
jmp 0x10005bd8
mov edx, dword [0x1009b178]
or edx, dword [0x1009b17c]
je 0x10005af7
cmp dword [0x1009b1b0], 0
jne 0x10005b49
cmp dword [0x1009b170], 0
jne 0x10005b0c
mov dword [ebp - 0x120], 1
jmp 0x10005b16
mov dword [ebp - 0x120], 0
movzx eax, byte [0x1009b01f]
test eax, eax
jne 0x10005b2d
mov dword [ebp - 0x124], 1
jmp 0x10005b37
mov dword [ebp - 0x124], 0
mov ecx, dword [ebp - 0x120]
cmp ecx, dword [ebp - 0x124]
jle 0x10005bd8
cmp dword [ebp - 0x40], 0
je 0x10005b63
mov edx, dword [ebp - 0x50]
mov eax, dword [ebp - 0x4c]
mov dword [ebp - 0x408], edx
mov dword [ebp - 0x404], eax
jmp 0x10005b7b
mov ecx, dword [0x1009b130]
mov edx, dword [0x1009b134]
mov dword [ebp - 0x408], ecx
mov dword [ebp - 0x404], edx
mov al, byte [ebp - 0x408]
mov byte [0x1009b07e], al
movsx ecx, word [ebp - 0x1c]
mov edx, dword [ebp - 0x2c]
add edx, ecx
mov eax, dword [ebp - 0x2c]
imul eax, edx
mov dword [ebp - 0x2c], eax
movzx ecx, byte [0x1009b07f]
add ecx, 0x70e39b15
xor edx, edx
mov dword [ebp - 0x60], ecx
mov dword [ebp - 0x5c], edx
mov eax, dword [ebp - 0x2c]
cdq
add eax, 0xce716272
mov byte [ebp - 6], al
movsx eax, word [ebp - 0x14]
cdq
mov ecx, dword [ebp - 0x24]
mov esi, dword [ebp - 0x20]
and ecx, eax
and esi, edx
mov edx, dword [ebp - 0x24]
mov eax, dword [ebp - 0x20]
sub edx, ecx
sbb eax, esi
mov dword [ebp - 0x24], edx
mov dword [ebp - 0x20], eax
mov byte [0x1009b0bb], 0xb9
mov ecx, 1
mov word [ebp - 0x1c], cx
movsx edx, word [ebp - 0x10]
add edx, 0x3895aac9
mov byte [ebp - 1], dl
mov eax, dword [0x1009bc7c]
mov dword [0x1009b188], eax
movzx eax, byte [0x1009b0ef]
movsx ecx, byte [ebp - 2]
xor eax, ecx
cdq
mov dword [ebp - 0x48], eax
mov dword [ebp - 0x44], edx
mov edx, dword [0x1009b178]
sub edx, 0x5606a7fc
mov dword [0x1009b190], edx
imul eax, dword [ebp - 0x40], 0x335e3b0d
movzx ecx, byte [0x1009b01f]
or ecx, eax
mov byte [0x1009b01f], cl
movsx edx, word [ebp - 0x1c]
mov dword [ebp - 0x128], edx
cmp dword [ebp - 0x128], 0
je 0x10005c60
cmp dword [ebp - 0x128], 1
je 0x10005d21
jmp 0x10005dd0
imul eax, dword [ebp - 0x54], 0xd957
xor ecx, ecx
mov dword [ebp - 0x34], eax
mov dword [ebp - 0x30], ecx
mov edx, dword [ebp - 0x3c]
mov eax, dword [ebp - 0x38]
sub edx, dword [ebp - 0x50]
sbb eax, dword [ebp - 0x4c]
mov ecx, dword [ebp - 0x3c]
mov esi, dword [ebp - 0x38]
sub ecx, edx
sbb esi, eax
mov dword [ebp - 0x3c], ecx
mov dword [ebp - 0x38], esi
movzx edx, byte [0x1009b033]
movsx eax, word [ebp - 0x18]
imul edx, eax
mov byte [0x1009b033], dl
movsx eax, byte [ebp - 2]
cdq
mov ecx, dword [0x1009b198]
mov esi, dword [0x1009b19c]
push esi
push ecx
push edx
push eax
call fcn.1006c090
mov dword [ebp - 0x5bc], eax
mov dword [ebp - 0x5b8], edx
mov edx, dword [ebp - 0x5bc]
or edx, dword [ebp - 0x5b8]
jne 0x10005cdf
mov dword [ebp - 0x12c], 1
jmp 0x10005ce9
mov dword [ebp - 0x12c], 0
mov eax, dword [0x1009b18c]
not eax
movzx ecx, byte [ebp - 3]
not ecx
imul eax, ecx
mov edx, dword [ebp - 0x12c]
sub edx, eax
mov byte [ebp - 4], dl
mov ecx, dword [ebp - 0x54]
and ecx, 0x99ed53bf
mov ax, word [0x1009b180]
sar ax, cl
mov word [0x1009b180], ax
jmp 0x10005dd0
mov ecx, dword [0x1009b130]
mov edx, dword [0x1009b134]
mov eax, dword [ebp - 0x34]
mov esi, dword [ebp - 0x30]
push esi
push eax
push edx
push ecx
call fcn.1006c090
mov ecx, dword [0x1009b130]
mov esi, dword [0x1009b134]
add ecx, eax
adc esi, edx
mov dword [0x1009b130], ecx
mov dword [0x1009b134], esi
xor edx, edx
mov eax, dword [ebp - 0x24]
mov ecx, dword [ebp - 0x20]
add eax, dword [0x1009b18c]
adc ecx, edx
mov edx, dword [ebp - 0x24]
mov esi, dword [ebp - 0x20]
sub edx, eax
sbb esi, ecx
mov dword [ebp - 0x24], edx
mov dword [ebp - 0x20], esi
movzx eax, byte [ebp - 5]
imul ecx, eax, 0x7f
mov dword [ebp - 0x40], ecx
movsx edx, word [ebp - 0x1c]
test edx, edx
je 0x10005d99
movsx eax, byte [0x1009b0bb]
mov dword [ebp - 0x130], eax
jmp 0x10005da2
mov ecx, dword [ebp - 0x54]
mov dword [ebp - 0x130], ecx
mov dl, byte [ebp - 0x130]
mov byte [ebp - 5], dl
mov eax, dword [0x1009b144]
xor ecx, ecx
mov edx, dword [ebp - 0x20]
sub eax, dword [ebp - 0x24]
sbb ecx, edx
mov edx, dword [0x1009b144]
xor esi, esi
push ecx
push eax
push esi
push edx
call fcn.1006c090
mov dword [0x1009b144], eax
movsx eax, byte [0x1009b0bb]
cdq
mov ecx, dword [ebp - 0x50]
add ecx, 0x2fb9
mov esi, dword [ebp - 0x4c]
adc esi, 0
mov dword [ebp - 0x5c4], eax
mov dword [ebp - 0x5c0], edx
mov dword [ebp - 0x5cc], ecx
mov dword [ebp - 0x5c8], esi
mov edx, dword [ebp - 0x5c4]
cmp edx, dword [ebp - 0x5cc]
jne 0x10006601
mov eax, dword [ebp - 0x5c0]
cmp eax, dword [ebp - 0x5c8]
jne 0x10006601
movsx ecx, byte [ebp - 1]
add ecx, 0x3e6d9284
cmp dword [0x1009b14c], ecx
jne 0x10006601
mov ecx, dword [ebp - 0x24]
mov esi, dword [ebp - 0x20]
movzx eax, byte [0x1009b07f]
cdq
mov dword [ebp - 0x5d4], ecx
mov dword [ebp - 0x5d0], esi
mov dword [ebp - 0x5dc], eax
mov dword [ebp - 0x5d8], edx
mov edx, dword [ebp - 0x5d0]
cmp edx, dword [ebp - 0x5d8]
jb 0x100063c6
ja 0x10005e85
mov eax, dword [ebp - 0x5d4]
cmp eax, dword [ebp - 0x5dc]
jb 0x100063c6
movzx ecx, byte [ebp - 3]
movzx edx, byte [ebp - 3]
cmp ecx, edx
jne 0x10005e9d
mov dword [ebp - 0x134], 1
jmp 0x10005ea7
mov dword [ebp - 0x134], 0
movzx eax, byte [ebp - 3]
cmp eax, 0x26
jne 0x10005ebc
mov dword [ebp - 0x138], 1
jmp 0x10005ec6
mov dword [ebp - 0x138], 0
mov ecx, dword [ebp - 0x134]
cmp ecx, dword [ebp - 0x138]
jle 0x10006340
movzx edx, word [0x1009b158]
cmp dword [0x1009b1a0], edx
ja 0x10005ef3
mov dword [ebp - 0x13c], 1
jmp 0x10005efd
mov dword [ebp - 0x13c], 0
cmp dword [0x1009b1a0], 0xd
ja 0x10005f12
mov dword [ebp - 0x140], 1
jmp 0x10005f1c
mov dword [ebp - 0x140], 0
mov eax, dword [ebp - 0x13c]
cmp eax, dword [ebp - 0x140]
je 0x100061fd
movsx ecx, word [ebp - 0x10]
movzx edx, byte [ebp - 3]
cmp ecx, edx
jge 0x1000617c
xor eax, eax
mov dword [0x1009b198], 2
mov dword [0x1009b19c], eax
mov ecx, dword [0x1009b148]
add ecx, 0xd
mov byte [ebp - 2], cl
mov eax, dword [0x1009b14c]
cdq
mov ecx, eax
mov edx, dword [ebp - 0x34]
mov eax, dword [ebp - 0x30]
mov dword [ebp - 0xa78], eax
sub ecx, edx
mov eax, dword [0x1009b14c]
cdq
sub eax, ecx
mov dword [0x1009b14c], eax
mov ecx, dword [ebp - 0x34]
mov edx, dword [ebp - 0x30]
mov dword [ebp - 0xa70], edx
add ecx, 0xd48aa65a
movsx eax, byte [0x1009b0bb]
cdq
add eax, ecx
mov byte [0x1009b0bb], al
mov eax, dword [0x1009b198]
mov ecx, dword [0x1009b19c]
mov dword [ebp - 0xb4], eax
mov dword [ebp - 0xb0], ecx
mov edx, dword [ebp - 0xb4]
or edx, dword [ebp - 0xb0]
je 0x10005ff5
cmp dword [ebp - 0xb4], 1
jne 0x10005fda
cmp dword [ebp - 0xb0], 0
je 0x1000606c
cmp dword [ebp - 0xb4], 2
jne 0x10005ff0
cmp dword [ebp - 0xb0], 0
je 0x100060c2
jmp 0x1000617a
movsx eax, byte [ebp - 1]
not eax
cdq
mov ecx, dword [ebp - 0x48]
mov esi, dword [ebp - 0x44]
push esi
push ecx
push edx
push eax
call fcn.1006c090
mov word [0x1009b158], ax
movzx edx, byte [0x1009b0a6]
test edx, edx
jne 0x10006030
xor eax, eax
mov dword [ebp - 0x400], 1
mov dword [ebp - 0x3fc], eax
jmp 0x1000603b
xorps xmm0, xmm0
movlpd qword [ebp - 0x400], xmm0
mov ecx, dword [0x1009b150]
mov edx, dword [0x1009b154]
push edx
push ecx
mov eax, dword [ebp - 0x3fc]
push eax
mov ecx, dword [ebp - 0x400]
push ecx
call fcn.1006c090
mov dword [0x1009b150], eax
mov dword [0x1009b154], edx
jmp 0x1000617a
imul edx, dword [0x1009b190], 0xe4
xor eax, eax
mov ecx, dword [ebp - 0x24]
mov esi, dword [ebp - 0x20]
add ecx, edx
adc esi, eax
mov dword [ebp - 0x24], ecx
mov dword [ebp - 0x20], esi
movsx edx, word [ebp - 0x10]
sub edx, 0x6af00c84
xor eax, eax
mov dword [0x1009b130], edx
mov dword [0x1009b134], eax
mov ecx, dword [0x1009b150]
mov edx, dword [0x1009b154]
add ecx, 0xc9f3c3ff
adc edx, 0xbd2d7
mov dword [ebp - 0x48], ecx
mov dword [ebp - 0x44], edx
jmp 0x1000617a
movsx eax, word [ebp - 0x1c]
test eax, eax
jne 0x100060d6
mov dword [ebp - 0x144], 1
jmp 0x100060e0
mov dword [ebp - 0x144], 0
imul ecx, dword [ebp - 0x144], 0xd2cb
movzx edx, byte [0x1009b07f]
add ecx, edx
jne 0x10006109
xor eax, eax
mov dword [ebp - 0x5e4], 1
mov dword [ebp - 0x5e0], eax
jmp 0x10006114
xorps xmm0, xmm0
movlpd qword [ebp - 0x5e4], xmm0
movzx eax, byte [0x1009b07e]
cdq
mov ecx, eax
mov esi, edx
and ecx, dword [ebp - 0x34]
and esi, dword [ebp - 0x30]
movsx eax, word [0x1009b180]
cdq
mov edi, dword [0x1009b160]
sub edi, eax
mov eax, dword [0x1009b164]
sbb eax, edx
push eax
push edi
push esi
push ecx
call fcn.1006c090
xor eax, dword [ebp - 0x5e4]
mov word [ebp - 0xc], ax
xor ecx, ecx
mov dword [ebp - 0x34], 0x45ec4707
mov dword [ebp - 0x30], ecx
mov edx, dword [0x1009b170]
sub edx, 0x196310d1
mov byte [0x1009b0ef], dl
movzx eax, byte [0x1009b07e]
not eax
mov byte [ebp - 2], al
jmp 0x100061f8
mov ecx, dword [0x1009b160]
or ecx, dword [0x1009b164]
je 0x100061f8
movzx edx, word [0x1009b158]
imul eax, edx, 0xde146524
mov dword [0x1009b148], eax
mov eax, dword [ebp - 0x28]
cdq
push 0x1ec29
push 0x9903275d
push edx
push eax
call fcn.1006c090
mov ecx, eax
movsx eax, byte [ebp - 2]
cdq
add eax, ecx
mov byte [ebp - 2], al
movzx edx, byte [ebp - 5]
add edx, 0x507b723f
mov byte [0x1009b0bb], dl
movsx eax, byte [ebp - 2]
movzx ecx, byte [ebp - 3]
add eax, ecx
movsx edx, byte [ebp - 2]
imul edx, eax
mov byte [ebp - 2], dl
mov eax, dword [0x1009b1a0]
sub eax, 0x9f
xor ecx, ecx
mov dword [0x1009b168], eax
mov dword [0x1009b16c], ecx
jmp 0x1000633b
mov edx, dword [0x1009b168]
mov eax, dword [0x1009b16c]
mov dword [ebp - 0x5ec], edx
mov dword [ebp - 0x5e8], eax
mov ecx, dword [ebp - 0x5ec]
or ecx, dword [ebp - 0x5e8]
jne 0x1000633b
movsx edx, word [ebp - 0x14]
imul eax, edx, 0x62
cdq
mov dword [0x1009b160], eax
mov dword [0x1009b164], edx
movzx eax, byte [0x1009b0ee]
imul ecx, eax, 0xfa2f
movsx edx, byte [ebp - 1]
sub edx, ecx
mov byte [ebp - 1], dl
mov eax, dword [ebp - 0x28]
xor eax, dword [0x1009b18c]
mov dword [ebp - 0x28], eax
movsx eax, byte [ebp - 2]
cdq
mov ecx, eax
mov esi, edx
xor ecx, dword [0x1009b138]
xor esi, dword [0x1009b13c]
movzx eax, byte [0x1009b07e]
cdq
add eax, 0x728b770e
adc edx, 0xf14ab
xor ecx, eax
xor esi, edx
mov dword [ebp - 0x5f4], ecx
mov dword [ebp - 0x5f0], esi
mov edx, dword [ebp - 0x5f4]
or edx, dword [ebp - 0x5f0]
jne 0x100062ad
mov dword [ebp - 0x14c], 1
jmp 0x100062b7
mov dword [ebp - 0x14c], 0
movzx eax, byte [0x1009b033]
test eax, eax
jne 0x100062ce
mov dword [ebp - 0x148], 1
jmp 0x100062d8
mov dword [ebp - 0x148], 0
movzx ecx, word [0x1009b158]
mov edx, dword [ebp - 0x148]
sub edx, ecx
movsx eax, byte [0x1009b0ba]
movsx ecx, word [ebp - 0x14]
not ecx
add eax, ecx
add edx, eax
xor edx, dword [ebp - 0x14c]
mov byte [0x1009b033], dl
push 0
push 0x89822bcb
mov edx, dword [0x1009b17c]
push edx
mov eax, dword [0x1009b178]
push eax
call fcn.1006c090
not eax
mov dword [ebp - 0x54], eax
movzx eax, byte [ebp - 3]
cdq
mov ecx, dword [ebp - 0x60]
mov esi, dword [ebp - 0x5c]
push edx
push eax
push esi
push ecx
call fcn.1006c090
mov dword [0x1009b14c], eax
jmp 0x100063c1
mov dl, byte [0x1009b07e]
add dl, 1
mov byte [0x1009b07e], dl
movsx eax, byte [ebp - 2]
cdq
push 0x868e7
push 0xeabf66ad
push edx
push eax
call fcn.1006c090
mov dword [ebp - 0x48], eax
mov dword [ebp - 0x44], edx
movsx eax, byte [ebp - 1]
cdq
mov ecx, dword [ebp - 0x24]
mov esi, dword [ebp - 0x20]
sub ecx, eax
sbb esi, edx
mov dword [ebp - 0x24], ecx
mov dword [ebp - 0x20], esi
movzx edx, byte [ebp - 3]
mov dword [ebp - 0x54], edx
mov eax, dword [ebp - 0x3c]
mov ecx, dword [ebp - 0x38]
push 0
push 0x373b5cdb
push ecx
push eax
call fcn.1006c090
mov dword [0x1009b138], eax
mov dword [0x1009b13c], edx
mov ecx, dword [0x1009b1a0]
sub ecx, 0x8e647be7
movzx eax, byte [0x1009b0a6]
cdq
add eax, ecx
mov byte [0x1009b0a6], al
jmp 0x10006558
movsx edx, word [ebp - 0xc]
test edx, edx
je 0x10006416
movsx eax, word [ebp - 0x1c]
sar eax, 3
mov byte [ebp - 1], al
push 0
push 0x58
mov ecx, dword [0x1009b17c]
push ecx
mov edx, dword [0x1009b178]
push edx
call fcn.1006c090
mov byte [ebp - 6], al
mov eax, dword [ebp - 0x2c]
add eax, 1
mov dword [ebp - 0x2c], eax
mov ecx, dword [ebp - 0x3c]
mov edx, dword [ebp - 0x38]
push 0
push 0x39
push edx
push ecx
call fcn.1006c090
mov byte [0x1009b0ee], al
jmp 0x10006558
cmp dword [0x1009b190], 0
je 0x10006433
movsx eax, byte [ebp - 2]
test eax, eax
jne 0x10006433
movsx ecx, word [ebp - 0x1c]
cmp ecx, dword [0x1009b14c]
jne 0x100064a4
mov edx, 4
imul eax, edx, 0x153e
mov cx, word [eax + 0x10266d40]
mov word [ebp - 0xc], cx
movzx eax, byte [ebp - 4]
cdq
mov ecx, dword [ebp - 0x34]
mov esi, dword [ebp - 0x30]
push edx
push eax
push esi
push ecx
call fcn.1006c090
mov ecx, dword [ebp - 0x34]
mov esi, dword [ebp - 0x30]
push edx
push eax
push esi
push ecx
call fcn.1006c090
mov dword [ebp - 0x34], eax
mov dword [ebp - 0x30], edx
mov dword [ebp - 0x40], 4
mov eax, dword [0x1009b14c]
not eax
cdq
mov edx, dword [ebp - 0x60]
mov ecx, dword [ebp - 0x5c]
mov dword [ebp - 0xa6c], ecx
xor edx, eax
mov eax, dword [0x1009b148]
add eax, dword [ebp - 0x54]
not eax
add edx, eax
mov word [ebp - 0xc], dx
jmp 0x10006558
mov ecx, 0xa1da590f
or ecx, 0xeb9f
je 0x10006558
movsx edx, word [ebp - 0xc]
sub edx, dword [0x1009b18c]
movsx eax, word [ebp - 0xc]
imul eax, edx
mov word [ebp - 0xc], ax
movzx eax, byte [ebp - 4]
add eax, 0x5b8840f
not eax
add eax, dword [0x1009b14c]
cdq
mov esi, eax
movzx eax, byte [0x1009b0ee]
movzx ecx, byte [0x1009b07e]
add eax, ecx
cdq
mov edi, eax
mov edx, dword [0x1009b1b0]
not edx
xor eax, eax
mov ecx, dword [0x1009b150]
mov ebx, dword [0x1009b154]
push eax
push edx
push ebx
push ecx
call fcn.1006c090
not eax
add edi, eax
xor esi, edi
not esi
mov dword [ebp - 0x40], esi
mov dx, word [0x1009bc7c]
mov word [ebp - 0x10], dx
mov byte [ebp - 1], 8
movzx eax, word [0x1009b158]
cdq
add eax, 0x8453382d
adc edx, 0x436b
mov dword [0x1009b138], eax
mov dword [0x1009b13c], edx
movsx eax, byte [ebp - 2]
add eax, 0x7818c4b
cdq
mov dword [ebp - 0x50], eax
mov dword [ebp - 0x4c], edx
jmp 0x10006601
mov byte [0x1009b0bb], 0xb9
movsx eax, word [ebp - 0x14]
cdq
mov ecx, eax
mov edx, dword [0x1009b168]
mov eax, dword [0x1009b16c]
mov dword [ebp - 0xa68], eax
xor ecx, edx
movsx eax, word [ebp - 0x14]
cdq
add eax, ecx
mov word [ebp - 0x14], ax
mov ecx, dword [0x1009b1a0]
add ecx, 0xe190d873
mov word [ebp - 0x1c], cx
movsx edx, byte [0x1009b0bb]
add edx, dword [0x1009b18c]
add edx, dword [0x1009b18c]
mov dword [0x1009b18c], edx
mov eax, dword [ebp - 0x2c]
sub eax, 0x3c91
mov dword [ebp - 0x2c], eax
movzx ecx, word [0x1009b158]
test ecx, ecx
jne 0x10006680
movsx edx, word [ebp - 0x18]
test edx, edx
jne 0x10006680
mov dword [ebp - 0x150], 0
jmp 0x1000668a
mov dword [ebp - 0x150], 1
cmp dword [0x1009b18c], 0
jne 0x1000669f
mov dword [ebp - 0x154], 1
jmp 0x100066a9
mov dword [ebp - 0x154], 0
mov eax, dword [ebp - 0x150]
cmp eax, dword [ebp - 0x154]
jl 0x100066c3
mov dword [ebp - 0x15c], 1
jmp 0x100066cd
mov dword [ebp - 0x15c], 0
mov ecx, dword [ebp - 0x48]
mov edx, dword [ebp - 0x44]
mov eax, dword [0x1009b144]
xor esi, esi
mov dword [ebp - 0x604], ecx
mov dword [ebp - 0x600], edx
mov dword [ebp - 0x60c], eax
mov dword [ebp - 0x608], esi
mov ecx, dword [ebp - 0x604]
cmp ecx, dword [ebp - 0x60c]
jne 0x1000671a
mov edx, dword [ebp - 0x600]
cmp edx, dword [ebp - 0x608]
jne 0x1000671a
mov dword [ebp - 0x158], 1
jmp 0x10006724
mov dword [ebp - 0x158], 0
mov eax, dword [ebp - 0x158]
cmp eax, dword [0x1009b18c]
jbe 0x1000673e
mov dword [ebp - 0x160], 1
jmp 0x10006748
mov dword [ebp - 0x160], 0
mov ecx, dword [ebp - 0x15c]
cmp ecx, dword [ebp - 0x160]
jg 0x10006790
mov dl, byte [0x1009b0a7]
sub dl, 1
mov byte [0x1009b0a7], dl
movsx eax, word [ebp - 0x18]
add eax, 0x48
mov dword [0x1009b1b0], eax
mov ecx, dword [0x1009b190]
xor edx, edx
push 0xad7e7
push 0xe8e3e6e4
push edx
push ecx
call fcn.1006c090
mov word [ebp - 0xc], ax
jmp 0x100067f6
mov eax, dword [ebp - 0x2c]
imul eax, dword [ebp - 0x28]
test eax, eax
je 0x100067f6
movzx eax, byte [0x1009b0a6]
cdq
push 0x6b95f
push 0xbb3ae294
push edx
push eax
call fcn.1006c090
mov dword [0x1009b138], eax
mov dword [0x1009b13c], edx
movzx eax, byte [0x1009b01f]
cdq
and eax, dword [ebp - 0x50]
and edx, dword [ebp - 0x4c]
mov dword [ebp - 0x24], eax
mov dword [ebp - 0x20], edx
movzx ecx, byte [0x1009b033]
imul edx, ecx, 0xe5
mov eax, dword [0x1009b140]
sub eax, edx
mov dword [0x1009b140], eax
mov dword [0x1009b1a0], 0x8766b5d2
mov ecx, dword [0x1009bc7c]
mov dword [ebp - 0x80], ecx
movzx edx, word [0x1009b158]
push edx
call dword [sym.imp.USER32.dll_GetTopWindow]
mov byte [ebp - 1], al
movsx eax, byte [ebp - 1]
test eax, eax
jl 0x10006824
mov dword [ebp - 0x164], 1
jmp 0x1000682e
mov dword [ebp - 0x164], 0
movsx ecx, byte [ebp - 1]
cmp ecx, 1
jl 0x10006843
mov dword [ebp - 0x168], 1
jmp 0x1000684d
mov dword [ebp - 0x168], 0
mov edx, dword [ebp - 0x164]
cmp edx, dword [ebp - 0x168]
jne 0x1000696d
mov ecx, dword [ebp - 0x34]
mov esi, dword [ebp - 0x30]
mov eax, dword [ebp - 0x2c]
cdq
mov dword [ebp - 0x614], ecx
mov dword [ebp - 0x610], esi
mov dword [ebp - 0x61c], eax
mov dword [ebp - 0x618], edx
mov edx, dword [ebp - 0x610]
cmp edx, dword [ebp - 0x618]
ja 0x100068fd
jb 0x1000689f
mov eax, dword [ebp - 0x614]
cmp eax, dword [ebp - 0x61c]
jae 0x100068fd
mov ecx, dword [0x1009b150]
mov edx, dword [0x1009b154]
add ecx, dword [0x1009b138]
adc edx, dword [0x1009b13c]
mov dword [0x1009b150], ecx
mov dword [0x1009b154], edx
mov eax, dword [ebp - 0x2c]
add eax, 0xe9
mov word [ebp - 0x14], ax
movzx ecx, byte [ebp - 7]
add ecx, dword [ebp - 0x58]
mov byte [ebp - 7], cl
movzx edx, byte [ebp - 7]
xor edx, dword [0x1009b1a0]
mov byte [ebp - 7], dl
mov eax, dword [ebp - 0x2c]
add eax, 0x3e311513
xor ecx, ecx
mov dword [0x1009b198], eax
mov dword [0x1009b19c], ecx
jmp 0x1000696b
mov edx, dword [0x1009b160]
sub edx, 0x36
mov byte [ebp - 7], dl
mov eax, dword [0x1009b14c]
cdq
mov ecx, dword [0x1009b1a8]
mov esi, dword [0x1009b1ac]
add ecx, eax
adc esi, edx
mov edx, dword [0x1009b1a8]
mov eax, dword [0x1009b1ac]
add edx, ecx
adc eax, esi
mov dword [0x1009b1a8], edx
mov dword [0x1009b1ac], eax
mov ecx, dword [0x1009b138]
sub ecx, 0xc4ae5ab1
mov word [ebp - 0x1c], cx
movsx eax, byte [ebp - 2]
cdq
and eax, 0xcb20f9a9
mov dword [0x1009b140], eax
mov edx, 2
imul eax, edx, 0x11
mov cx, word [ebp - 0x1c]
mov word [eax + 0x101c0b48], cx
jmp 0x100069d1
movsx edx, word [ebp - 0xc]
test edx, edx
je 0x100069d1
movsx eax, word [ebp - 0x10]
cdq
sub eax, 0xb302f79b
mov word [ebp - 0x10], ax
mov eax, dword [ebp - 0x40]
shl eax, 2
mov byte [ebp - 5], al
xor ecx, ecx
mov edx, dword [0x1009b150]
mov eax, dword [0x1009b154]
add edx, dword [ebp - 0x58]
adc eax, ecx
mov dword [0x1009b150], edx
mov dword [0x1009b154], eax
cmp dword [ebp - 0x40], 0
jne 0x100069bb
mov dword [ebp - 0x16c], 1
jmp 0x100069c5
mov dword [ebp - 0x16c], 0
mov ecx, dword [ebp - 0x16c]
mov dword [0x1009b1b0], ecx
mov edx, dword [ebp - 0x80]
add edx, 0x91
mov dword [ebp - 0x514], edx
call dword [sym.imp.KERNEL32.dll_GetProcessHeap]
mov dword [ebp - 0x58], eax
cmp dword [ebp - 0x58], 0
je 0x10006b0a
mov ecx, dword [ebp - 0x48]
mov esi, dword [ebp - 0x44]
movsx eax, byte [ebp - 1]
cdq
mov dword [ebp - 0x624], ecx
mov dword [ebp - 0x620], esi
mov dword [ebp - 0x62c], eax
mov dword [ebp - 0x628], edx
mov edx, dword [ebp - 0x624]
cmp edx, dword [ebp - 0x62c]
jne 0x10006a3e
mov eax, dword [ebp - 0x620]
cmp eax, dword [ebp - 0x628]
jne 0x10006a3e
mov dword [ebp - 0x170], 1
jmp 0x10006a48
mov dword [ebp - 0x170], 0
mov ecx, dword [ebp - 0x48]
mov edx, dword [ebp - 0x44]
mov dword [ebp - 0x634], ecx
mov dword [ebp - 0x630], edx
cmp dword [ebp - 0x634], 0x21
jne 0x10006a78
cmp dword [ebp - 0x630], 0
jne 0x10006a78
mov dword [ebp - 0x174], 1
jmp 0x10006a82
mov dword [ebp - 0x174], 0
mov eax, dword [ebp - 0x170]
cmp eax, dword [ebp - 0x174]
je 0x10006ac1
mov ecx, 2
imul edx, ecx, 0x2e9
movzx eax, word [edx + 0x1021a340]
mov dword [ebp - 0x28], eax
mov ecx, dword [0x1009b170]
add ecx, 0x4d30
xor edx, edx
mov dword [0x1009b130], ecx
mov dword [0x1009b134], edx
jmp 0x10006b0a
mov eax, 0xffffb4e8
mov word [ebp - 0x1c], ax
mov ecx, dword [0x1009b130]
mov edx, dword [0x1009b134]
push 0x52daf
push 0x641eb96f
push edx
push ecx
call fcn.1006c090
mov byte [ebp - 1], al
movsx eax, byte [ebp - 2]
cdq
mov ecx, dword [ebp - 0x34]
mov esi, dword [ebp - 0x30]
push edx
push eax
push esi
push ecx
call fcn.1006c090
mov dword [0x1009b188], eax
mov dword [ebp - 0x28], 0x918d4034
mov edx, dword [ebp - 0x80]
add edx, 0x322
mov dword [ebp - 0x190], edx
mov ecx, dword [0x1009b168]
mov esi, dword [0x1009b16c]
movsx eax, word [ebp - 0xc]
cdq
mov dword [ebp - 0x63c], ecx
mov dword [ebp - 0x638], esi
mov dword [ebp - 0x644], eax
mov dword [ebp - 0x640], edx
mov edx, dword [ebp - 0x638]
cmp edx, dword [ebp - 0x640]
jl 0x10006c56
jg 0x10006b68
mov eax, dword [ebp - 0x63c]
cmp eax, dword [ebp - 0x644]
jb 0x10006c56
mov ecx, 1
mov word [ebp - 0x10], cx
movsx edx, byte [0x1009b0bb]
add edx, dword [0x1009b144]
mov byte [0x1009b0bb], dl
movzx eax, word [0x1009b158]
add eax, dword [0x1009b148]
jne 0x10006b9f
mov dword [ebp - 0x17c], 1
jmp 0x10006ba9
mov dword [ebp - 0x17c], 0
movsx ecx, word [ebp - 0x14]
test ecx, ecx
jne 0x10006bbd
mov dword [ebp - 0x178], 1
jmp 0x10006bc7
mov dword [ebp - 0x178], 0
movsx edx, byte [ebp - 2]
imul edx, dword [ebp - 0x178]
test edx, edx
jne 0x10006be2
mov dword [ebp - 0x180], 1
jmp 0x10006bec
mov dword [ebp - 0x180], 0
movzx eax, byte [ebp - 3]
cdq
mov ecx, dword [ebp - 0x5c]
add eax, dword [ebp - 0x60]
adc edx, ecx
mov dword [ebp - 0x64c], eax
mov dword [ebp - 0x648], edx
mov edx, dword [ebp - 0x64c]
or edx, dword [ebp - 0x648]
jne 0x10006c1f
mov dword [ebp - 0x184], 1
jmp 0x10006c29
mov dword [ebp - 0x184], 0
movzx eax, byte [0x1009b0ee]
mov ecx, dword [ebp - 0x28]
sub ecx, eax
not ecx
mov edx, dword [ebp - 0x17c]
sub edx, ecx
mov eax, dword [ebp - 0x180]
imul eax, dword [ebp - 0x184]
imul edx, eax
mov word [0x1009b158], dx
mov ecx, dword [ebp - 0x80]
add ecx, 0x1ed
mov dword [ebp - 0xa64], ecx
mov dword [0x1009b140], 0x3e6d9284
movzx edx, byte [0x1009b07f]
movsx eax, byte [0x1009b0bb]
cmp edx, eax
jg 0x10006c8d
mov dword [ebp - 0x188], 1
jmp 0x10006c97
mov dword [ebp - 0x188], 0
movzx ecx, byte [0x1009b07f]
cmp ecx, 0x12
jg 0x10006caf
mov dword [ebp - 0x18c], 1
jmp 0x10006cb9
mov dword [ebp - 0x18c], 0
mov edx, dword [ebp - 0x188]
cmp edx, dword [ebp - 0x18c]
jle 0x10006ce8
mov ax, word [0x1009b18c]
mov word [ebp - 0xc], ax
movzx ecx, byte [ebp - 4]
movsx edx, word [ebp - 0x10]
sub ecx, edx
movzx eax, byte [ebp - 4]
sub eax, ecx
mov byte [ebp - 4], al
mov byte [ebp - 4], 4
movsx ecx, word [ebp - 0x1c]
add ecx, 0x3e6d9284
cmp dword [0x1009b140], ecx
jne 0x10006dd5
mov ecx, dword [0x1009b1a8]
mov esi, dword [0x1009b1ac]
movsx eax, byte [ebp - 1]
add eax, 0x80ce
cdq
mov dword [ebp - 0x654], ecx
mov dword [ebp - 0x650], esi
mov dword [ebp - 0x65c], eax
mov dword [ebp - 0x658], edx
mov edx, dword [ebp - 0x654]
cmp edx, dword [ebp - 0x65c]
jne 0x10006dd5
mov eax, dword [ebp - 0x650]
cmp eax, dword [ebp - 0x658]
jne 0x10006dd5
mov ecx, dword [ebp - 0x24]
mov edx, dword [ebp - 0x20]
not ecx
not edx
mov dword [ebp - 0x3c], ecx
mov dword [ebp - 0x38], edx
movsx eax, word [ebp - 0x10]
movsx ecx, word [ebp - 0x1c]
sub eax, ecx
mov word [ebp - 0x10], ax
movsx edx, byte [ebp - 1]
add edx, dword [0x1009b188]
mov byte [ebp - 1], dl
movzx eax, byte [0x1009b0ef]
sub eax, dword [ebp - 0x28]
cdq
mov ecx, dword [ebp - 0x3c]
mov edx, dword [ebp - 0x38]
mov dword [ebp - 0xa60], edx
add ecx, eax
mov word [0x1009b184], cx
jmp 0x10006dd5
mov dword [0x1009b140], 0x3e6d9284
mov ecx, dword [ebp - 0x34]
mov edx, dword [ebp - 0x30]
push 0x21426
push 0x2a7830b
push edx
push ecx
call fcn.1006c090
mov word [ebp - 0x18], ax
mov eax, dword [ebp - 0x58]
add eax, 0x32
mov byte [0x1009b07e], al
mov ecx, dword [0x1009b160]
sub ecx, 0xaf
mov edx, dword [0x1009b164]
sbb edx, 0
mov dword [ebp - 0x50], ecx
mov dword [ebp - 0x4c], edx
mov ecx, dword [ebp - 0x24]
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0xa5c], eax
mov edx, dword [0x1009b1a8]
mov eax, dword [0x1009b1ac]
mov dword [ebp - 0xa58], eax
and ecx, edx
mov eax, dword [ebp - 0x24]
mov edx, dword [ebp - 0x20]
call fcn.1006c1a0
mov dword [ebp - 0x24], eax
mov dword [ebp - 0x20], edx
mov ecx, 8
imul edx, ecx, 0x3694
mov eax, dword [0x1009b160]
mov ecx, dword [0x1009b164]
mov dword [edx + 0x10317600], eax
mov dword [edx + 0x10317604], ecx
movsx eax, byte [ebp - 1]
cdq
mov ecx, dword [ebp - 0x48]
mov esi, dword [ebp - 0x44]
push edx
push eax
push esi
push ecx
call fcn.1006c090
mov dword [ebp - 0x48], eax
mov dword [ebp - 0x44], edx
mov edx, dword [ebp - 0x514]
add edx, dword [ebp - 0x190]
imul eax, edx, 0x3dc
cmp eax, dword [ebp - 0x190]
je 0x10007c9d
mov ecx, 8
imul ecx, ecx, 0x78
movzx eax, byte [0x1009b0a6]
cdq
add eax, dword [ecx + 0x102f2190]
mov byte [0x1009b0a6], al
mov dx, word [0x1009bc7c]
mov word [ebp - 0x18], dx
movsx eax, word [ebp - 0x10]
movzx ecx, byte [0x1009b033]
add eax, ecx
mov word [ebp - 0x10], ax
movsx edx, word [ebp - 0xc]
movsx eax, word [ebp - 0x10]
imul edx, eax
movsx ecx, word [ebp - 0xc]
add ecx, edx
mov word [ebp - 0xc], cx
mov dword [0x1009b170], 0x88c1ef03
movsx edx, word [ebp - 0xc]
movzx eax, byte [0x1009b0ef]
sub edx, eax
mov dword [0x1009b1a0], edx
mov ecx, dword [0x1009b130]
mov edx, dword [0x1009b134]
mov dword [ebp - 0x664], ecx
mov dword [ebp - 0x660], edx
mov eax, dword [ebp - 0x664]
or eax, dword [ebp - 0x660]
je 0x10006f44
mov ecx, dword [ebp - 0x40]
mov dword [ebp - 0x194], ecx
jmp 0x10006f4e
movzx edx, byte [ebp - 4]
mov dword [ebp - 0x194], edx
mov eax, dword [ebp - 0x194]
mov dword [0x1009b170], eax
movsx ecx, word [ebp - 0x1c]
add ecx, dword [ebp - 0x58]
mov dword [ebp - 0x58], ecx
mov ecx, dword [0x1009b170]
xor esi, esi
movsx eax, byte [ebp - 1]
cdq
add eax, 0x88c1ef03
adc edx, 0x34ae9
mov dword [ebp - 0x66c], ecx
mov dword [ebp - 0x668], esi
mov dword [ebp - 0x674], eax
mov dword [ebp - 0x670], edx
mov edx, dword [ebp - 0x66c]
cmp edx, dword [ebp - 0x674]
jne 0x1000712b
mov eax, dword [ebp - 0x668]
cmp eax, dword [ebp - 0x670]
jne 0x1000712b
mov ecx, dword [0x1009b198]
mov esi, dword [0x1009b19c]
mov eax, dword [ebp - 0x40]
add eax, 0x8349
cdq
mov dword [ebp - 0x67c], ecx
mov dword [ebp - 0x678], esi
mov dword [ebp - 0x684], eax
mov dword [ebp - 0x680], edx
mov edx, dword [ebp - 0x67c]
cmp edx, dword [ebp - 0x684]
jne 0x1000712b
mov eax, dword [ebp - 0x678]
cmp eax, dword [ebp - 0x680]
jne 0x1000712b
movsx ecx, word [ebp - 0x10]
movsx edx, byte [ebp - 2]
imul ecx, edx
imul ecx, dword [0x1009b144]
xor eax, eax
mov dword [0x1009b138], ecx
mov dword [0x1009b13c], eax
mov ecx, dword [0x1009b168]
mov edx, dword [0x1009b16c]
mov dword [ebp - 0xa54], edx
add ecx, 0x156c
mov dword [0x1009b148], ecx
movzx eax, byte [0x1009b07e]
test eax, eax
jne 0x1000705c
mov dword [ebp - 0x198], 1
jmp 0x10007066
mov dword [ebp - 0x198], 0
mov eax, dword [ebp - 0x198]
cdq
mov esi, eax
mov edi, edx
movzx eax, byte [0x1009b07e]
cdq
mov ecx, dword [ebp - 0x60]
mov ebx, dword [ebp - 0x5c]
push edx
push eax
push ebx
push ecx
call fcn.1006c090
not eax
not edx
sub esi, eax
sbb edi, edx
movzx eax, byte [0x1009b0ef]
not eax
cdq
push edx
push eax
mov edx, dword [0x1009b164]
push edx
mov eax, dword [0x1009b160]
push eax
call fcn.1006c090
mov ecx, eax
mov ebx, edx
movsx eax, word [ebp - 0x14]
cdq
add ecx, eax
adc ebx, edx
push ebx
push ecx
push edi
push esi
call fcn.1006c090
mov dword [ebp - 0x60], eax
mov dword [ebp - 0x5c], edx
mov dword [0x1009b1b0], 0xd993701c
jmp 0x1000712b
mov dword [0x1009b170], 0x88c1ef03
cmp dword [0x1009b144], 0
jne 0x10007152
xor ecx, ecx
mov dword [ebp - 0x410], 1
mov dword [ebp - 0x40c], ecx
jmp 0x1000715d
xorps xmm0, xmm0
movlpd qword [ebp - 0x410], xmm0
mov edx, dword [ebp - 0x24]
mov eax, dword [ebp - 0x20]
xor edx, dword [ebp - 0x410]
xor eax, dword [ebp - 0x40c]
push 0
push 0
push eax
push edx
call fcn.1006c090
mov dword [ebp - 0x50], eax
mov dword [ebp - 0x4c], edx
mov ecx, 2
imul edx, ecx, 0x24b4
movzx eax, word [edx + 0x102f2938]
cdq
add eax, dword [0x1009b178]
adc edx, dword [0x1009b17c]
mov dword [0x1009b178], eax
mov dword [0x1009b17c], edx
mov eax, dword [0x1009b170]
sub eax, 0xae01cc7b
mov dword [ebp - 0x54], eax
mov ecx, dword [0x1009b130]
mov edx, dword [0x1009b134]
mov dword [ebp - 0xa4c], edx
mov eax, dword [0x1009b130]
mov edx, dword [0x1009b134]
mov dword [ebp - 0xa48], edx
sub ecx, eax
mov byte [ebp - 1], cl
mov dword [0x1009b170], 0xd81d8cd0
mov eax, 2
mov word [0x1009b184], ax
mov byte [ebp - 1], 1
movzx ecx, byte [0x1009b0a6]
sub ecx, 0x11
mov dword [0x1009b148], ecx
xor edx, edx
mov eax, dword [ebp - 0x3c]
mov ecx, dword [ebp - 0x38]
xor eax, dword [0x1009b18c]
xor ecx, edx
mov edx, dword [ebp - 0x3c]
mov esi, dword [ebp - 0x38]
sub edx, eax
sbb esi, ecx
mov dword [ebp - 0x3c], edx
mov dword [ebp - 0x38], esi
mov eax, dword [ebp - 0x40]
add eax, 1
cmp dword [0x1009b170], eax
jne 0x10007465
cmp dword [ebp - 0x54], 0
je 0x10007256
movsx eax, byte [0x1009b0a7]
cdq
mov dword [ebp - 0x3d4], eax
mov dword [ebp - 0x3d0], edx
jmp 0x10007268
mov ecx, dword [ebp - 0x60]
mov edx, dword [ebp - 0x5c]
mov dword [ebp - 0x3d4], ecx
mov dword [ebp - 0x3d0], edx
mov eax, dword [ebp - 0x3d4]
mov ecx, dword [ebp - 0x3d0]
mov dword [ebp - 0x50], eax
mov dword [ebp - 0x4c], ecx
movzx edx, byte [ebp - 7]
movzx eax, byte [0x1009b07e]
sub edx, eax
mov byte [ebp - 7], dl
imul eax, dword [ebp - 0x40], 0x54
cdq
mov dword [0x1009b198], eax
mov dword [0x1009b19c], edx
mov ecx, dword [0x1009b14c]
add ecx, 0x64df
mov word [ebp - 0x14], cx
mov byte [ebp - 1], 0x66
mov eax, dword [ebp - 0x2c]
cdq
sub eax, dword [ebp - 0x50]
mov dword [ebp - 0x2c], eax
cmp dword [0x1009b140], 0
jne 0x100072cd
mov dword [ebp - 0x19c], 1
jmp 0x100072d7
mov dword [ebp - 0x19c], 0
mov esi, dword [0x1009b18c]
not esi
add esi, dword [ebp - 0x19c]
not esi
xor edi, edi
mov eax, dword [0x1009b140]
imul eax, dword [ebp - 0x28]
not eax
cdq
mov ebx, eax
mov eax, edx
movsx edx, byte [0x1009b0ba]
mov dword [ebp - 0x518], eax
mov eax, edx
cdq
mov ecx, dword [0x1009b160]
not ecx
mov dword [ebp - 0x51c], esi
mov esi, dword [0x1009b164]
not esi
push esi
push ecx
push edx
push eax
call fcn.1006c090
sub ebx, eax
mov esi, dword [ebp - 0x518]
sbb esi, edx
push esi
push ebx
push edi
mov esi, dword [ebp - 0x51c]
push esi
call fcn.1006c090
not eax
mov byte [ebp - 1], al
mov edx, dword [ebp - 0x58]
xor edx, 0xbb
mov ecx, edx
movsx eax, byte [ebp - 1]
cdq
add eax, dword [0x1009b160]
xor ecx, eax
mov dword [ebp - 0x2c], ecx
cmp dword [0x1009b178], 1
jne 0x10007465
cmp dword [0x1009b17c], 0
jne 0x10007465
cmp dword [0x1009b1a0], 0
je 0x1000739a
mov edx, dword [0x1009b148]
xor eax, eax
mov dword [ebp - 0x3cc], edx
mov dword [ebp - 0x3c8], eax
jmp 0x100073b2
mov ecx, dword [0x1009b150]
mov edx, dword [0x1009b154]
mov dword [ebp - 0x3cc], ecx
mov dword [ebp - 0x3c8], edx
mov eax, dword [ebp - 0x3cc]
mov ecx, dword [ebp - 0x3c8]
mov dword [ebp - 0x50], eax
mov dword [ebp - 0x4c], ecx
mov edx, dword [0x1009b188]
add edx, 0x214f
mov byte [0x1009b033], dl
mov eax, 4
imul ecx, eax, 0x2360
mov edx, dword [0x1009b140]
sub edx, dword [ecx + 0x10223810]
mov dword [0x1009b140], edx
jmp 0x10007465
mov dword [0x1009b170], 0xd81d8cd0
movsx eax, word [ebp - 0x10]
cdq
mov ecx, dword [0x1009b168]
mov esi, dword [0x1009b16c]
sub ecx, eax
sbb esi, edx
mov dword [ebp - 0x68c], ecx
mov dword [ebp - 0x688], esi
mov edx, dword [ebp - 0x68c]
or edx, dword [ebp - 0x688]
jne 0x100074aa
mov dword [ebp - 0x1a0], 1
jmp 0x100074b4
mov dword [ebp - 0x1a0], 0
mov eax, dword [0x1009b130]
mov ecx, dword [0x1009b134]
mov dword [ebp - 0x694], eax
mov dword [ebp - 0x690], ecx
mov edx, dword [ebp - 0x694]
or edx, dword [ebp - 0x690]
jne 0x100074e5
mov dword [ebp - 0x1a4], 1
jmp 0x100074ef
mov dword [ebp - 0x1a4], 0
movsx eax, byte [0x1009b0a7]
test eax, eax
jne 0x10007506
mov dword [ebp - 0x1a8], 1
jmp 0x10007510
mov dword [ebp - 0x1a8], 0
mov ecx, dword [ebp - 0x1a0]
add ecx, 0x8121
mov edx, dword [ebp - 0x1a4]
sub edx, dword [ebp - 0x1a8]
movsx eax, byte [ebp - 2]
movsx esi, byte [0x1009b0a7]
sub eax, esi
add edx, eax
imul ecx, edx
not ecx
mov dword [ebp - 0x28], ecx
mov ecx, dword [ebp - 0x44]
mov edx, 0xfca8f2b4
sub edx, dword [ebp - 0x48]
mov eax, 0xba591
sbb eax, ecx
mov ecx, dword [0x1009b168]
mov esi, dword [0x1009b16c]
push eax
push edx
push esi
push ecx
call fcn.1006c090
mov dword [0x1009b160], eax
mov dword [0x1009b164], edx
mov eax, dword [0x1009b140]
cdq
mov esi, eax
mov edx, dword [ebp - 0x24]
mov eax, dword [ebp - 0x20]
not edx
not eax
mov ecx, dword [0x1009b1b0]
xor edi, edi
push edi
push ecx
push eax
push edx
call fcn.1006c090
not eax
sub esi, eax
mov edx, dword [ebp - 0x24]
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0xa44], eax
sub esi, edx
mov dword [ebp - 0x40], esi
movzx eax, byte [0x1009b01f]
cdq
mov ecx, eax
mov esi, edx
mov edx, dword [ebp - 0x20]
sub ecx, dword [ebp - 0x24]
sbb esi, edx
movzx eax, byte [0x1009b01f]
cdq
push esi
push ecx
push edx
push eax
call fcn.1006c090
mov byte [0x1009b01f], al
mov ecx, dword [ebp - 0x60]
mov esi, dword [ebp - 0x5c]
not ecx
not esi
movzx eax, byte [0x1009b0ef]
cdq
mov dword [ebp - 0x69c], ecx
mov dword [ebp - 0x698], esi
mov dword [ebp - 0x6a4], eax
mov dword [ebp - 0x6a0], edx
mov edx, dword [ebp - 0x698]
cmp edx, dword [ebp - 0x6a0]
jb 0x10007627
ja 0x1000761b
mov eax, dword [ebp - 0x69c]
cmp eax, dword [ebp - 0x6a4]
jbe 0x10007627
mov dword [ebp - 0x1ac], 1
jmp 0x10007631
mov dword [ebp - 0x1ac], 0
movsx eax, word [ebp - 0x1c]
cdq
mov ecx, dword [0x1009b178]
not ecx
mov esi, dword [0x1009b17c]
not esi
mov dword [ebp - 0x6ac], eax
mov dword [ebp - 0x6a8], edx
mov dword [ebp - 0x6b4], ecx
mov dword [ebp - 0x6b0], esi
mov edx, dword [ebp - 0x6a8]
cmp edx, dword [ebp - 0x6b0]
jl 0x10007688
jg 0x1000767c
mov eax, dword [ebp - 0x6ac]
cmp eax, dword [ebp - 0x6b4]
jbe 0x10007688
mov dword [ebp - 0x1b0], 1
jmp 0x10007692
mov dword [ebp - 0x1b0], 0
mov ecx, dword [ebp - 0x1ac]
cmp ecx, dword [ebp - 0x1b0]
jl 0x10007b1e
movzx edx, byte [ebp - 5]
cmp edx, dword [0x1009b144]
jb 0x100076bc
mov dword [ebp - 0x1b4], 1
jmp 0x100076c6
mov dword [ebp - 0x1b4], 0
movzx eax, byte [ebp - 5]
cmp eax, 0x2b
jl 0x100076db
mov dword [ebp - 0x1b8], 1
jmp 0x100076e5
mov dword [ebp - 0x1b8], 0
mov ecx, dword [ebp - 0x1b4]
cmp ecx, dword [ebp - 0x1b8]
jle 0x1000795f
movsx edx, byte [0x1009b0bb]
test edx, edx
je 0x1000795a
push 0x1007e440
call dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
mov dword [ebp - 0x58], eax
cmp dword [ebp - 0x58], 0
jae 0x10007726
mov dword [ebp - 0x1bc], 1
jmp 0x10007730
mov dword [ebp - 0x1bc], 0
cmp dword [ebp - 0x58], 0x1f
jae 0x10007742
mov dword [ebp - 0x1c0], 1
jmp 0x1000774c
mov dword [ebp - 0x1c0], 0
mov eax, dword [ebp - 0x1bc]
cmp eax, dword [ebp - 0x1c0]
jne 0x10007833
mov ecx, dword [0x1009b138]
add ecx, 0x39a8d78a
mov edx, dword [0x1009b13c]
adc edx, 0
mov dword [ebp - 0x50], ecx
mov dword [ebp - 0x4c], edx
movsx eax, word [ebp - 0xc]
test eax, eax
je 0x10007789
mov cl, byte [ebp - 5]
mov byte [ebp - 0x61], cl
jmp 0x10007792
mov dl, byte [0x1009b01f]
mov byte [ebp - 0x61], dl
mov al, byte [ebp - 0x61]
mov byte [ebp - 1], al
mov ecx, dword [0x1009b1b0]
add ecx, 1
mov dword [0x1009b1b0], ecx
mov edx, dword [0x1009b130]
mov eax, dword [0x1009b134]
mov ecx, dword [0x1009b168]
mov esi, dword [0x1009b16c]
push esi
push ecx
push eax
push edx
call fcn.1006c090
mov dword [0x1009b130], eax
mov dword [0x1009b134], edx
mov edx, dword [ebp - 0x60]
mov eax, dword [ebp - 0x5c]
mov dword [ebp - 0x6bc], edx
mov dword [ebp - 0x6b8], eax
mov ecx, dword [ebp - 0x6bc]
or ecx, dword [ebp - 0x6b8]
je 0x10007804
mov eax, dword [ebp - 0x2c]
cdq
mov dword [ebp - 0x3c4], eax
mov dword [ebp - 0x3c0], edx
jmp 0x10007816
mov edx, dword [ebp - 0x60]
mov eax, dword [ebp - 0x5c]
mov dword [ebp - 0x3c4], edx
mov dword [ebp - 0x3c0], eax
mov ecx, dword [ebp - 0x3c4]
mov edx, dword [ebp - 0x3c0]
mov dword [0x1009b138], ecx
mov dword [0x1009b13c], edx
jmp 0x1000795a
movzx eax, byte [ebp - 4]
test eax, eax
jne 0x1000784d
cmp dword [ebp - 0x40], 0
je 0x1000784d
mov dword [ebp - 0x1c4], 1
jmp 0x10007857
mov dword [ebp - 0x1c4], 0
movzx eax, byte [ebp - 4]
cdq
mov ecx, dword [0x1009b1a8]
mov esi, dword [0x1009b1ac]
mov dword [ebp - 0x6c4], eax
mov dword [ebp - 0x6c0], edx
mov dword [ebp - 0x6cc], ecx
mov dword [ebp - 0x6c8], esi
mov edx, dword [ebp - 0x6c0]
cmp edx, dword [ebp - 0x6c8]
jl 0x100078aa
jg 0x1000789e
mov eax, dword [ebp - 0x6c4]
cmp eax, dword [ebp - 0x6cc]
jb 0x100078aa
mov dword [ebp - 0x1c8], 1
jmp 0x100078b4
mov dword [ebp - 0x1c8], 0
mov ecx, dword [ebp - 0x1c4]
or ecx, dword [ebp - 0x1c8]
je 0x100078db
movzx edx, byte [ebp - 5]
imul edx, dword [ebp - 0x40]
mov eax, dword [ebp - 0x40]
sub eax, edx
mov dword [ebp - 0x40], eax
mov byte [0x1009b07e], 0xd3
jmp 0x1000795a
movsx ecx, byte [0x1009b0a7]
test ecx, ecx
je 0x10007939
mov dl, byte [0x1009b0a6]
add dl, 1
mov byte [0x1009b0a6], dl
movsx eax, word [ebp - 0x10]
imul ecx, eax, 0xda60b628
mov edx, dword [ebp - 0x54]
sub edx, ecx
mov dword [ebp - 0x54], edx
imul ecx, dword [ebp - 0x28], 0xa3
mov al, byte [ebp - 7]
shl al, cl
mov byte [ebp - 7], al
mov ecx, dword [0x1009bc7c]
mov dword [ebp - 0x40], ecx
movsx edx, word [ebp - 0x10]
movzx eax, byte [0x1009b01f]
imul edx, eax
movsx ecx, word [ebp - 0x10]
add ecx, edx
mov word [ebp - 0x10], cx
jmp 0x1000795a
cmp dword [0x1009b188], 0
je 0x1000795a
movzx edx, byte [ebp - 3]
sub edx, 0x9f
mov dword [ebp - 0x2c], edx
mov byte [0x1009b07f], 0x12
mov byte [ebp - 5], 0xd7
jmp 0x10007b19
movsx eax, byte [ebp - 2]
test eax, eax
je 0x100079d1
mov eax, dword [ebp - 0x2c]
cdq
mov ecx, dword [0x1009b198]
mov edx, dword [0x1009b19c]
mov dword [ebp - 0xa40], edx
add eax, ecx
mov dword [ebp - 0x2c], eax
mov ax, word [0x1009bc7c]
mov word [0x1009b184], ax
mov eax, dword [ebp - 0x3c]
mov edx, dword [ebp - 0x38]
mov cl, 6
call fcn.1006c0d0
mov word [0x1009b184], ax
mov cl, byte [0x1009bc7c]
mov byte [ebp - 6], cl
movsx edx, byte [ebp - 2]
mov eax, dword [0x1009b188]
sub eax, edx
mov dword [0x1009b188], eax
mov eax, dword [ebp - 0x34]
mov edx, dword [ebp - 0x30]
mov cl, 1
call fcn.1006c1a0
mov dword [0x1009b190], eax
jmp 0x10007b19
mov ecx, dword [0x1009b198]
mov edx, dword [0x1009b19c]
mov dword [ebp - 0x6d4], ecx
mov dword [ebp - 0x6d0], edx
mov eax, dword [ebp - 0x6d4]
or eax, dword [ebp - 0x6d0]
je 0x10007a46
mov ecx, dword [0x1009b168]
mov edx, dword [0x1009b16c]
push edx
push ecx
mov eax, dword [0x1009b164]
push eax
mov ecx, dword [0x1009b160]
push ecx
call fcn.1006c090
mov dword [0x1009b160], eax
mov dword [0x1009b164], edx
movzx edx, byte [0x1009b0ef]
add edx, 0x338ace33
mov dword [ebp - 0x54], edx
movzx eax, byte [ebp - 5]
cdq
and eax, 0xf6134334
mov dword [0x1009b1b0], eax
jmp 0x10007b19
movzx eax, byte [ebp - 3]
test eax, eax
je 0x10007b19
mov ecx, dword [0x1009b130]
mov edx, dword [0x1009b134]
mov dword [ebp - 0x6dc], ecx
mov dword [ebp - 0x6d8], edx
mov eax, dword [ebp - 0x6dc]
or eax, dword [ebp - 0x6d8]
je 0x10007a8c
mov ecx, dword [ebp - 0x34]
mov edx, dword [ebp - 0x30]
mov dword [ebp - 0x420], ecx
mov dword [ebp - 0x41c], edx
jmp 0x10007a9d
movzx eax, byte [ebp - 6]
cdq
mov dword [ebp - 0x420], eax
mov dword [ebp - 0x41c], edx
mov al, byte [ebp - 0x420]
mov byte [ebp - 3], al
movzx ecx, byte [0x1009b07e]
sub ecx, 0x344ed75c
movsx edx, word [ebp - 0xc]
imul edx, ecx
mov word [ebp - 0xc], dx
movsx eax, byte [ebp - 2]
cdq
mov ecx, eax
mov edx, dword [0x1009b198]
mov eax, dword [0x1009b19c]
mov dword [ebp - 0xa74], eax
sub ecx, edx
movsx eax, byte [ebp - 2]
cdq
sub eax, ecx
mov byte [ebp - 2], al
movzx eax, byte [ebp - 4]
cdq
add eax, dword [ebp - 0x50]
adc edx, dword [ebp - 0x4c]
add eax, dword [ebp - 0x50]
adc edx, dword [ebp - 0x4c]
mov dword [ebp - 0x50], eax
mov dword [ebp - 0x4c], edx
mov ecx, dword [0x1009b168]
mov edx, dword [0x1009b16c]
push 0xbf65
push 0xc7d47da9
push edx
push ecx
call fcn.1006c090
mov byte [ebp - 3], al
jmp 0x10007c96
mov eax, 0x9e
test eax, eax
je 0x10007b73
imul ecx, dword [0x1009b190], 0xdcad3f9d
xor edx, edx
mov dword [0x1009b198], ecx
mov dword [0x1009b19c], edx
mov ax, word [0x1009bc7c]
mov word [ebp - 0x10], ax
mov dword [0x1009b1a0], 0xa1656fa6
mov ecx, 4
imul edx, ecx, 0x3e71
mov eax, dword [0x1009b14c]
sub eax, dword [edx + 0x102fea60]
mov dword [0x1009b14c], eax
jmp 0x10007c96
cmp dword [ebp - 0x28], 0
jne 0x10007b8d
xor ecx, ecx
mov dword [ebp - 0x3f0], 1
mov dword [ebp - 0x3ec], ecx
jmp 0x10007b98
xorps xmm0, xmm0
movlpd qword [ebp - 0x3f0], xmm0
mov edx, dword [ebp - 0x3c]
mov eax, dword [ebp - 0x38]
mov dword [ebp - 0x6e4], edx
mov dword [ebp - 0x6e0], eax
mov ecx, dword [ebp - 0x3ec]
cmp ecx, dword [ebp - 0x6e0]
jg 0x10007c10
jl 0x10007bc8
mov edx, dword [ebp - 0x3f0]
cmp edx, dword [ebp - 0x6e4]
jae 0x10007c10
movsx eax, byte [ebp - 2]
mov ecx, dword [0x1009b14c]
sub ecx, eax
mov dword [0x1009b14c], ecx
movsx edx, word [ebp - 0x10]
imul eax, edx, 0xd7abc4e8
mov dword [0x1009b188], eax
mov ecx, dword [0x1009b144]
mov edx, 2
imul eax, edx, 0x6077
mov word [eax + 0x10259530], cx
mov dword [0x1009b170], 1
jmp 0x10007c96
mov ecx, dword [ebp - 0x48]
mov edx, dword [ebp - 0x44]
not ecx
not edx
mov eax, dword [ebp - 0x60]
mov esi, dword [ebp - 0x5c]
mov dword [ebp - 0x6ec], ecx
mov dword [ebp - 0x6e8], edx
mov dword [ebp - 0x6f4], eax
mov dword [ebp - 0x6f0], esi
mov ecx, dword [ebp - 0x6e8]
cmp ecx, dword [ebp - 0x6f0]
jb 0x10007c96
ja 0x10007c56
mov edx, dword [ebp - 0x6ec]
cmp edx, dword [ebp - 0x6f4]
jbe 0x10007c96
mov eax, dword [ebp - 0x2c]
cdq
mov ecx, dword [0x1009b13c]
push ecx
mov ecx, dword [0x1009b138]
push ecx
push edx
push eax
call fcn.1006c090
mov dword [ebp - 0x2c], eax
mov edx, dword [0x1009b138]
xor edx, 0x32a15cf3
mov byte [ebp - 6], dl
movzx eax, byte [ebp - 7]
sub eax, 0x71
movsx ecx, word [ebp - 0x14]
or ecx, eax
mov word [ebp - 0x14], cx
mov byte [ebp - 1], 1
xor eax, eax
jmp 0x1000e948
movsx edx, word [ebp - 0x1c]
xor edx, 0x6b37
mov word [ebp - 0x14], dx
mov eax, dword [0x1009b150]
mov ecx, dword [0x1009b154]
mov edx, dword [0x1009b130]
mov esi, dword [0x1009b134]
push esi
push edx
push ecx
push eax
call fcn.1006c090
mov dword [0x1009b150], eax
mov dword [0x1009b154], edx
movsx eax, byte [ebp - 1]
imul eax, eax, 0x8c34340
cdq
mov dword [0x1009b130], eax
mov dword [0x1009b134], edx
xor ecx, ecx
mov dword [ebp - 0x48], 0xa5fd0673
mov dword [ebp - 0x44], ecx
movzx edx, byte [0x1009b0ef]
movsx eax, word [ebp - 0x18]
lea ecx, [eax + edx - 0x4c97]
mov word [ebp - 0x18], cx
call fcn.1003de10
test eax, eax
je 0x10009e1c
mov edx, dword [0x1009b138]
xor edx, 0x5d3a8639
mov word [ebp - 0x18], dx
movzx eax, byte [ebp - 6]
movsx ecx, byte [ebp - 1]
sub eax, ecx
movzx edx, byte [ebp - 6]
or edx, eax
mov byte [ebp - 6], dl
movsx eax, byte [0x1009b0ba]
sub eax, dword [0x1009b170]
jne 0x10007d59
mov dword [ebp - 0x1cc], 1
jmp 0x10007d63
mov dword [ebp - 0x1cc], 0
movsx eax, word [ebp - 0xc]
cdq
mov ecx, dword [0x1009b168]
mov esi, dword [0x1009b16c]
push edx
push eax
push esi
push ecx
call fcn.1006c090
mov ecx, eax
mov esi, edx
mov edx, dword [0x1009b138]
sub edx, 0xe89d
mov eax, dword [0x1009b13c]
sbb eax, 0
not edx
not eax
add ecx, edx
adc esi, eax
movzx eax, byte [ebp - 6]
movsx edx, byte [0x1009b0ba]
and eax, edx
not eax
add eax, dword [ebp - 0x1cc]
cdq
add ecx, eax
adc esi, edx
mov dword [0x1009b1a8], ecx
mov dword [0x1009b1ac], esi
movzx eax, byte [ebp - 7]
cdq
sub eax, 0x832d2502
sbb edx, 0xe5958
mov dword [0x1009b130], eax
mov dword [0x1009b134], edx
mov eax, dword [0x1009b198]
mov ecx, dword [0x1009b19c]
mov dword [ebp - 0xab4], ecx
sub eax, 0x9a0b
mov byte [0x1009b0bb], al
movzx edx, byte [ebp - 6]
test edx, edx
je 0x10007e0e
mov eax, dword [0x1009b144]
mov dword [ebp - 0x1d0], eax
jmp 0x10007e1b
movsx ecx, word [0x1009b180]
mov dword [ebp - 0x1d0], ecx
mov dl, byte [ebp - 0x1d0]
mov byte [0x1009b0ba], dl
cmp dword [ebp - 0x2c], 0
je 0x10007eb5
movzx eax, byte [ebp - 5]
cdq
mov ecx, dword [0x1009b160]
sub ecx, eax
mov eax, dword [0x1009b164]
sbb eax, edx
add ecx, dword [0x1009b160]
adc eax, dword [0x1009b164]
mov dword [0x1009b160], ecx
mov dword [0x1009b164], eax
movzx eax, byte [0x1009b07e]
movzx ecx, byte [0x1009b0ee]
imul eax, ecx
cdq
mov ecx, eax
mov esi, edx
movzx eax, byte [0x1009b0a6]
cdq
mov edi, dword [0x1009b154]
sub eax, dword [0x1009b150]
sbb edx, edi
sub ecx, eax
sbb esi, edx
mov dword [ebp - 0x60], ecx
mov dword [ebp - 0x5c], esi
mov edx, dword [0x1009b160]
sub edx, dword [ebp - 0x54]
mov byte [0x1009b0ee], dl
imul eax, dword [0x1009b190], 7
xor ecx, ecx
mov dword [ebp - 0x60], eax
mov dword [ebp - 0x5c], ecx
jmp 0x10007f4a
movzx edx, byte [0x1009b07f]
test edx, edx
je 0x10007f4a
mov dword [ebp - 0x28], 0x992b4b63
movzx eax, byte [0x1009b033]
movsx ecx, byte [ebp - 2]
not ecx
mov edx, 0x59
sub edx, ecx
sub eax, edx
cdq
mov dword [0x1009b168], eax
mov dword [0x1009b16c], edx
movzx eax, byte [0x1009b0a6]
sub eax, 0x400f
cdq
mov dword [0x1009b160], eax
mov dword [0x1009b164], edx
movzx eax, byte [ebp - 5]
movsx ecx, word [ebp - 0x10]
add ecx, dword [0x1009b190]
or eax, ecx
mov word [ebp - 0x14], ax
mov eax, dword [0x1009b188]
cdq
mov ecx, eax
sub ecx, dword [ebp - 0x50]
mov eax, dword [0x1009b188]
cdq
add eax, ecx
mov dword [0x1009b188], eax
movsx eax, byte [ebp - 2]
cdq
mov edx, dword [ebp - 0x24]
mov ecx, dword [ebp - 0x20]
mov dword [ebp - 0xab8], ecx
add eax, edx
mov word [0x1009b184], ax
mov edx, dword [0x1009bc7c]
mov dword [ebp - 0x84], edx
movsx ecx, word [ebp - 0x18]
movzx eax, byte [ebp - 7]
imul ecx, eax
mov dx, word [ebp - 0x18]
sar dx, cl
mov word [ebp - 0x18], dx
movsx eax, word [0x1009b180]
cdq
sub eax, 0xb8416dd4
sbb edx, 0xfa9cb
mov dword [ebp - 0x3c], eax
mov dword [ebp - 0x38], edx
movzx eax, byte [0x1009b01f]
sar eax, 4
mov byte [0x1009b01f], al
movzx ecx, byte [ebp - 7]
test ecx, ecx
jne 0x10007fb0
xor edx, edx
mov dword [ebp - 0x3f8], 1
mov dword [ebp - 0x3f4], edx
jmp 0x10007fbb
xorps xmm0, xmm0
movlpd qword [ebp - 0x3f8], xmm0
movzx eax, byte [ebp - 4]
test eax, eax
jne 0x10007fd7
xor ecx, ecx
mov dword [ebp - 0x438], 1
mov dword [ebp - 0x434], ecx
jmp 0x10007fe2
xorps xmm0, xmm0
movlpd qword [ebp - 0x438], xmm0
movsx eax, word [ebp - 0x10]
imul eax, dword [ebp - 0x28]
cdq
mov ecx, dword [ebp - 0x50]
not ecx
mov esi, dword [ebp - 0x4c]
not esi
add ecx, dword [ebp - 0x3f8]
adc esi, dword [ebp - 0x3f4]
add eax, ecx
adc edx, esi
or eax, dword [ebp - 0x438]
or edx, dword [ebp - 0x434]
mov dword [0x1009b150], eax
mov dword [0x1009b154], edx
movsx eax, word [0x1009b180]
cdq
mov edx, dword [0x1009b198]
mov ecx, dword [0x1009b19c]
mov dword [ebp - 0xabc], ecx
add eax, edx
mov word [0x1009b180], ax
mov edx, dword [ebp - 0x84]
add edx, 0x29c
mov dword [ebp - 0x520], edx
mov eax, dword [0x1009b178]
push eax
call dword [sym.imp.USER32.dll_IsZoomed]
mov byte [0x1009b0ef], al
movzx ecx, byte [0x1009b0ef]
test ecx, ecx
je 0x1000817c
movzx edx, byte [0x1009b0a6]
cmp edx, 0xe2
jne 0x1000808b
mov dword [ebp - 0x1d4], 1
jmp 0x10008095
mov dword [ebp - 0x1d4], 0
movzx eax, byte [0x1009b033]
cmp eax, dword [ebp - 0x1d4]
jne 0x10008109
movzx ecx, byte [ebp - 6]
add ecx, 0xf7
mov word [ebp - 0x14], cx
mov eax, dword [0x1009b14c]
cdq
mov ecx, dword [0x1009b168]
mov esi, dword [0x1009b16c]
sub ecx, eax
sbb esi, edx
mov edx, dword [0x1009b168]
mov eax, dword [0x1009b16c]
push esi
push ecx
push eax
push edx
call fcn.1006c090
mov dword [0x1009b168], eax
mov dword [0x1009b16c], edx
movzx eax, byte [ebp - 4]
cdq
sub eax, 0xafadfbc0
mov dword [0x1009b1b0], eax
movzx ecx, byte [0x1009b07e]
shl ecx, 2
mov word [0x1009b158], cx
jmp 0x1000817a
movzx edx, byte [0x1009b0a6]
test edx, edx
je 0x1000817a
movsx eax, word [ebp - 0x18]
cdq
push edx
push eax
mov eax, dword [0x1009b164]
push eax
mov ecx, dword [0x1009b160]
push ecx
call fcn.1006c090
mov dword [0x1009b160], eax
mov dword [0x1009b164], edx
mov eax, dword [0x1009b14c]
cdq
mov ecx, dword [0x1009b150]
mov esi, dword [0x1009b154]
sub ecx, eax
sbb esi, edx
mov dword [0x1009b150], ecx
mov dword [0x1009b154], esi
movzx edx, word [0x1009b184]
mov eax, dword [0x1009b14c]
or eax, edx
cdq
mov ecx, dword [0x1009b170]
add ecx, dword [ebp - 0x50]
and eax, ecx
mov word [0x1009b180], ax
jmp 0x100081de
movsx edx, word [ebp - 0xc]
and edx, dword [0x1009b14c]
sub edx, 0x1cd7
mov eax, dword [ebp - 0x28]
not eax
or eax, dword [ebp - 0x58]
xor edx, eax
xor ecx, ecx
mov dword [0x1009b1a8], edx
mov dword [0x1009b1ac], ecx
xor edx, edx
mov eax, dword [0x1009b130]
mov ecx, dword [0x1009b134]
add eax, dword [0x1009b190]
adc ecx, edx
mov dword [0x1009b130], eax
mov dword [0x1009b134], ecx
mov edx, 1
mov word [ebp - 0x14], dx
xor eax, eax
mov dword [0x1009b178], 0x9bd2
mov dword [0x1009b17c], eax
mov ecx, dword [ebp - 0x84]
add ecx, 0x360
mov dword [ebp - 0x1e0], ecx
cmp dword [0x1009b188], 0
je 0x10008262
mov byte [ebp - 5], 2
movsx edx, byte [0x1009b0a7]
mov eax, dword [ebp - 0x28]
xor eax, edx
mov dword [ebp - 0x28], eax
mov cl, byte [0x1009bc7c]
mov byte [0x1009b07e], cl
movsx edx, word [ebp - 0x14]
mov eax, dword [0x1009b1a0]
add eax, 0x3ba76d9c
sub edx, eax
mov ecx, edx
movsx edx, word [ebp - 0x10]
not edx
or edx, dword [0x1009b1a0]
mov esi, edx
movzx eax, byte [0x1009b0ef]
not eax
cdq
sub eax, dword [0x1009b178]
xor esi, eax
xor ecx, esi
mov dword [ebp - 0x40], ecx
movzx eax, byte [ebp - 7]
movzx ecx, byte [ebp - 4]
imul eax, ecx
mov byte [ebp - 7], al
jmp 0x10008340
mov edx, 0x25c2
mov word [ebp - 0x14], dx
movsx eax, byte [ebp - 1]
mov ecx, dword [0x1009b190]
imul ecx, eax
test ecx, ecx
jne 0x10008288
mov dword [ebp - 0x1d8], 1
jmp 0x10008292
mov dword [ebp - 0x1d8], 0
movsx eax, word [ebp - 0x1c]
not eax
cdq
mov ecx, eax
mov esi, edx
mov edx, dword [0x1009b1ac]
add ecx, dword [0x1009b1a8]
adc esi, edx
movzx eax, byte [0x1009b07f]
movsx edx, byte [ebp - 2]
imul eax, edx
not eax
cdq
sub ecx, eax
sbb esi, edx
mov dword [ebp - 0x6fc], ecx
mov dword [ebp - 0x6f8], esi
mov eax, dword [ebp - 0x6fc]
or eax, dword [ebp - 0x6f8]
jne 0x100082e6
mov dword [ebp - 0x1dc], 1
jmp 0x100082f0
mov dword [ebp - 0x1dc], 0
movsx ecx, word [ebp - 0x14]
movsx edx, word [ebp - 0x10]
xor ecx, edx
mov eax, ecx
imul eax, dword [ebp - 0x1d8]
add eax, dword [ebp - 0x1dc]
cdq
mov dword [0x1009b150], eax
mov dword [0x1009b154], edx
mov eax, dword [ebp - 0x54]
mov ecx, dword [ebp - 0x48]
mov edx, dword [ebp - 0x44]
mov dword [ebp - 0xac0], edx
add eax, ecx
mov ecx, dword [ebp - 0x54]
sub ecx, eax
mov dword [ebp - 0x54], ecx
mov edx, dword [0x1009b188]
add edx, dword [0x1009b170]
mov dword [0x1009b188], edx
mov eax, dword [ebp - 0x84]
add eax, 0x22
mov dword [ebp - 0x524], eax
mov dword [ebp - 0x88], 0x2f
mov eax, dword [0x1009b14c]
cdq
mov ecx, dword [0x1009b160]
sub ecx, eax
mov eax, dword [0x1009b164]
sbb eax, edx
mov dword [0x1009b160], ecx
mov dword [0x1009b164], eax
mov ecx, dword [ebp - 0x24]
mov edx, dword [ebp - 0x20]
mov dword [ebp - 0xac4], edx
add ecx, 0x5e
mov eax, dword [ebp - 0x58]
sub eax, ecx
mov dword [ebp - 0x58], eax
mov ecx, dword [ebp - 0x60]
mov edx, dword [ebp - 0x5c]
mov dword [ebp - 0xac8], edx
mov eax, dword [ebp - 0x3c]
mov edx, dword [ebp - 0x38]
mov dword [ebp - 0xacc], edx
sub ecx, eax
add ecx, 0xd6
mov dword [0x1009b170], ecx
mov eax, dword [ebp - 0x48]
mov ecx, dword [ebp - 0x44]
mov dword [ebp - 0xad0], ecx
sub eax, 0x4d6d
mov byte [0x1009b07e], al
movsx edx, byte [ebp - 2]
mov dword [ebp - 0x40], edx
mov eax, dword [ebp - 0x40]
sub eax, dword [0x1009b170]
movzx ecx, word [0x1009b158]
movzx edx, word [0x1009b158]
add ecx, edx
add eax, ecx
mov dword [0x1009b190], eax
movsx eax, word [ebp - 0x1c]
imul ecx, eax, 0x2f
mov byte [ebp - 7], cl
movzx edx, byte [ebp - 5]
movzx eax, byte [ebp - 7]
sub edx, eax
movzx ecx, byte [ebp - 5]
add ecx, edx
mov byte [ebp - 5], cl
mov edx, dword [ebp - 0x88]
add edx, 1
mov dword [ebp - 0x88], edx
cmp dword [ebp - 0x88], 0x1189
jl 0x100083cc
mov eax, dword [ebp - 0x1e0]
mov ecx, dword [ebp - 0x520]
lea edx, [eax + ecx + 0x45d]
mov eax, dword [ebp - 0x524]
sub eax, dword [ebp - 0x1e0]
cmp edx, eax
je 0x10009e17
movzx eax, byte [ebp - 3]
cdq
and eax, 0x69728ecb
and edx, 0x9b217
mov dword [ebp - 0x50], eax
mov dword [ebp - 0x4c], edx
mov ecx, dword [0x1009b130]
mov edx, dword [0x1009b134]
mov dword [ebp - 0x704], ecx
mov dword [ebp - 0x700], edx
mov eax, dword [ebp - 0x704]
or eax, dword [ebp - 0x700]
je 0x100084a2
mov ecx, dword [ebp - 0x24]
mov edx, dword [ebp - 0x20]
mov dword [ebp - 0x430], ecx
mov dword [ebp - 0x42c], edx
jmp 0x100084b5
mov eax, dword [0x1009b18c]
xor ecx, ecx
mov dword [ebp - 0x430], eax
mov dword [ebp - 0x42c], ecx
mov edx, dword [ebp - 0x430]
mov dword [0x1009b170], edx
mov eax, dword [0x1009b1a8]
mov ecx, dword [0x1009b1ac]
add eax, 0x9df8b8ab
adc ecx, 0xff22d
mov edx, dword [ebp - 0x34]
mov esi, dword [ebp - 0x30]
xor edx, eax
xor esi, ecx
mov dword [ebp - 0x34], edx
mov dword [ebp - 0x30], esi
movsx eax, word [ebp - 0x14]
imul eax, dword [0x1009b190]
mov word [ebp - 0x14], ax
mov ecx, dword [0x1009b130]
mov edx, dword [0x1009b134]
not ecx
not edx
xor eax, eax
sub ecx, dword [0x1009b190]
sbb edx, eax
mov dword [ebp - 0x70c], ecx
mov dword [ebp - 0x708], edx
mov ecx, dword [ebp - 0x70c]
or ecx, dword [ebp - 0x708]
jne 0x10008536
mov dword [ebp - 0x1e4], 1
jmp 0x10008540
mov dword [ebp - 0x1e4], 0
movsx edx, byte [ebp - 2]
movsx eax, byte [0x1009b0a7]
imul eax, dword [ebp - 0x40]
not eax
sub edx, eax
imul edx, dword [ebp - 0x1e4]
mov word [0x1009b180], dx
mov ecx, 0xd
mov word [0x1009b158], cx
mov edx, dword [ebp - 0x24]
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x714], edx
mov dword [ebp - 0x710], eax
mov ecx, dword [ebp - 0x714]
or ecx, dword [ebp - 0x710]
jne 0x100085a2
cmp dword [0x1009b1a0], 0
jne 0x100085a2
mov dword [ebp - 0x1ec], 0
jmp 0x100085ac
mov dword [ebp - 0x1ec], 1
movsx edx, word [ebp - 0x10]
movsx eax, word [ebp - 0x14]
not eax
cmp edx, eax
jne 0x100085c6
mov dword [ebp - 0x1e8], 1
jmp 0x100085d0
mov dword [ebp - 0x1e8], 0
mov ecx, dword [ebp - 0x1e8]
not ecx
cmp dword [ebp - 0x1ec], ecx
jl 0x100085f4
xor edx, edx
mov dword [ebp - 0x428], 1
mov dword [ebp - 0x424], edx
jmp 0x100085ff
xorps xmm0, xmm0
movlpd qword [ebp - 0x428], xmm0
mov eax, dword [ebp - 0x60]
mov ecx, dword [ebp - 0x5c]
mov dword [ebp - 0x71c], eax
mov dword [ebp - 0x718], ecx
mov edx, dword [ebp - 0x71c]
cmp edx, dword [ebp - 0x428]
jne 0x10008631
mov eax, dword [ebp - 0x718]
cmp eax, dword [ebp - 0x424]
je 0x100087f0
mov byte [ebp - 5], 3
movzx ecx, word [0x1009b158]
xor ecx, 0x7276
movzx edx, byte [0x1009b01f]
imul edx, ecx
mov byte [0x1009b01f], dl
movzx eax, byte [ebp - 7]
mov ecx, dword [0x1009b1b0]
sub ecx, eax
mov dword [0x1009b1b0], ecx
movsx edx, word [ebp - 0xc]
mov eax, dword [0x1009b1b0]
imul eax, edx
mov dword [0x1009b144], eax
movzx ecx, byte [ebp - 5]
mov dword [ebp - 0x1f0], ecx
cmp dword [ebp - 0x1f0], 3
ja case.default.0x10008692
mov edx, dword [ebp - 0x1f0]
jmp dword [edx*4 + 0x1000e954]
mov eax, dword [0x1009b168]
mov ecx, dword [0x1009b16c]
not eax
not ecx
mov edx, dword [0x1009b154]
sub eax, dword [0x1009b150]
sbb ecx, edx
mov edx, dword [ebp - 0x3c]
mov esi, dword [ebp - 0x38]
sub edx, dword [0x1009b160]
sbb esi, dword [0x1009b164]
push esi
push edx
push ecx
push eax
call fcn.1006c090
mov dword [0x1009b140], eax
mov dword [ebp - 0x54], 0xa61e
jmp case.default.0x10008692
movzx eax, word [0x1009b184]
mov ecx, dword [0x1009b190]
not ecx
xor eax, ecx
mov edx, dword [ebp - 0x60]
mov ecx, dword [ebp - 0x5c]
mov dword [ebp - 0xad4], ecx
mov ecx, dword [0x1009b1a8]
mov esi, dword [0x1009b1ac]
mov dword [ebp - 0xad8], esi
add edx, ecx
xor eax, edx
movzx edx, byte [0x1009b0ee]
sub edx, dword [0x1009b148]
movsx ecx, byte [0x1009b0bb]
add edx, ecx
xor eax, edx
mov dword [ebp - 0x58], eax
mov edx, 0xf2
mov word [ebp - 0x14], dx
mov ax, word [0x1009bc7c]
mov word [ebp - 0x14], ax
jmp case.default.0x10008692
movzx eax, byte [0x1009b07e]
cdq
push 0xc2aff
push 0x7f4136ef
push edx
push eax
call fcn.1006c090
mov dword [0x1009b198], eax
mov dword [0x1009b19c], edx
movsx ecx, byte [0x1009b0ba]
xor ecx, dword [ebp - 0x58]
mov dword [0x1009b1a0], ecx
mov dword [0x1009b140], 0xeb
jmp case.default.0x10008692
mov dl, byte [0x1009b01f]
sub dl, 1
mov byte [0x1009b01f], dl
mov eax, dword [0x1009b188]
cdq
mov esi, dword [ebp - 0x34]
mov ecx, dword [ebp - 0x30]
mov dword [ebp - 0xadc], ecx
add esi, eax
not esi
movsx edx, byte [ebp - 2]
add edx, dword [0x1009b18c]
xor esi, edx
movsx eax, byte [ebp - 1]
cdq
push edx
push eax
mov eax, dword [0x1009b17c]
push eax
mov ecx, dword [0x1009b178]
push ecx
call fcn.1006c090
mov ecx, eax
mov edi, edx
movzx eax, byte [ebp - 7]
cdq
push edx
push eax
push edi
push ecx
call fcn.1006c090
xor esi, eax
not esi
mov dword [ebp - 0x2c], esi
jmp 0x1000888b
mov edx, dword [0x1009bc7c]
mov dword [ebp - 0x28], edx
movzx eax, byte [ebp - 4]
add eax, 0x38
cdq
mov ecx, dword [ebp - 0x3c]
mov esi, dword [ebp - 0x38]
add ecx, eax
adc esi, edx
mov dword [ebp - 0x3c], ecx
mov dword [ebp - 0x38], esi
cmp dword [0x1009b148], 0
jne 0x10008826
mov dword [ebp - 0x1f4], 1
jmp 0x10008830
mov dword [ebp - 0x1f4], 0
mov edx, dword [0x1009b190]
sub edx, dword [ebp - 0x1f4]
jne 0x1000884a
mov dword [ebp - 0x1f8], 1
jmp 0x10008854
mov dword [ebp - 0x1f8], 0
movzx eax, byte [0x1009b0ee]
movsx ecx, word [ebp - 0x14]
xor eax, ecx
add eax, dword [ebp - 0x1f8]
jne 0x10008875
mov dword [ebp - 0x1fc], 1
jmp 0x1000887f
mov dword [ebp - 0x1fc], 0
mov edx, dword [ebp - 0x1fc]
mov dword [0x1009b144], edx
movsx eax, byte [ebp - 1]
add eax, 0x7f
cmp dword [0x1009b144], eax
jne 0x10008a08
movsx eax, word [ebp - 0x1c]
cdq
mov ecx, dword [0x1009b168]
mov esi, dword [0x1009b16c]
add ecx, eax
adc esi, edx
mov dword [ebp - 0x724], ecx
mov dword [ebp - 0x720], esi
cmp dword [ebp - 0x724], 1
jne 0x10008a08
cmp dword [ebp - 0x720], 0
jne 0x10008a08
movzx edx, byte [ebp - 5]
test edx, edx
je 0x10008980
movzx eax, byte [0x1009b0ee]
test eax, eax
je 0x10008904
mov ecx, dword [ebp - 0x50]
mov edx, dword [ebp - 0x4c]
mov dword [ebp - 0x440], ecx
mov dword [ebp - 0x43c], edx
jmp 0x10008918
movzx eax, byte [0x1009b07e]
cdq
mov dword [ebp - 0x440], eax
mov dword [ebp - 0x43c], edx
mov eax, dword [ebp - 0x440]
mov dword [ebp - 0x58], eax
mov ecx, dword [0x1009b168]
mov edx, dword [0x1009b16c]
mov eax, dword [ebp - 0x3c]
mov esi, dword [ebp - 0x38]
push esi
push eax
push edx
push ecx
call fcn.1006c090
mov dword [0x1009b168], eax
mov dword [0x1009b16c], edx
movzx eax, word [0x1009b158]
shl eax, 8
cdq
mov dword [ebp - 0x3c], eax
mov dword [ebp - 0x38], edx
movsx ecx, word [ebp - 0x14]
imul edx, ecx, 0x69
mov dword [0x1009b190], edx
mov eax, dword [0x1009b18c]
xor ecx, ecx
mov edx, 8
imul edx, edx, 5
mov dword [edx + 0x10153c28], eax
mov dword [edx + 0x10153c2c], ecx
jmp 0x10008561
mov edx, dword [0x1009b18c]
not edx
xor edx, dword [0x1009b190]
mov eax, 0xffff3bb0
sub eax, dword [0x1009b1b0]
add edx, eax
jne 0x10008a39
xor ecx, ecx
mov dword [ebp - 0x450], 1
mov dword [ebp - 0x44c], ecx
jmp 0x10008a44
xorps xmm0, xmm0
movlpd qword [ebp - 0x450], xmm0
mov edx, dword [ebp - 0x450]
mov eax, dword [ebp - 0x44c]
mov dword [ebp - 0x24], edx
mov dword [ebp - 0x20], eax
movzx eax, byte [0x1009b0ee]
cdq
add eax, dword [0x1009b138]
adc edx, dword [0x1009b13c]
mov ecx, dword [0x1009b138]
sub ecx, eax
mov eax, dword [0x1009b13c]
sbb eax, edx
mov dword [0x1009b138], ecx
mov dword [0x1009b13c], eax
movsx eax, word [ebp - 0xc]
add eax, 0x6e
cdq
mov dword [ebp - 0x48], eax
mov dword [ebp - 0x44], edx
mov byte [0x1009b0a6], 0xda
mov ecx, dword [ebp - 0x200]
imul ecx, dword [ebp - 0x204]
mov edx, dword [ebp - 0x200]
imul edx, dword [ebp - 0x204]
cmp ecx, edx
jne 0x10009e17
movzx eax, byte [ebp - 5]
not eax
cdq
mov ecx, dword [ebp - 0x24]
mov esi, dword [ebp - 0x20]
push esi
push ecx
push edx
push eax
call fcn.1006c090
mov dword [ebp - 0x72c], eax
mov dword [ebp - 0x728], edx
mov edx, dword [ebp - 0x72c]
or edx, dword [ebp - 0x728]
je 0x10008bf2
xor eax, eax
mov word [ebp - 0x14], ax
mov ecx, dword [0x1009b198]
mov edx, dword [0x1009b19c]
mov dword [ebp - 0xae0], edx
sub ecx, 0x49cc3d67
mov dword [ebp - 0x28], ecx
movzx eax, byte [ebp - 3]
movzx ecx, byte [0x1009b07e]
add eax, ecx
mov dword [ebp - 0x28], eax
movsx edx, byte [0x1009b0a7]
movzx eax, byte [ebp - 5]
xor edx, eax
mov ecx, dword [0x1009b144]
not ecx
movzx eax, byte [0x1009b07e]
xor ecx, eax
xor edx, ecx
mov esi, edx
movsx eax, byte [0x1009b0ba]
cdq
mov ecx, dword [ebp - 0x58]
xor edi, edi
add ecx, dword [0x1009b160]
adc edi, dword [0x1009b164]
push edi
push ecx
push edx
push eax
call fcn.1006c090
sub esi, eax
mov dword [0x1009b148], esi
movzx eax, byte [ebp - 4]
cdq
mov ecx, eax
mov edx, dword [ebp - 0x48]
mov eax, dword [ebp - 0x44]
mov dword [ebp - 0xae4], eax
sub ecx, edx
movzx eax, byte [ebp - 4]
cdq
add eax, ecx
mov byte [ebp - 4], al
movsx ecx, word [ebp - 0x14]
mov dword [ebp - 0x528], ecx
cmp dword [ebp - 0x528], 0
je 0x10008ba0
jmp 0x10008bed
movsx edx, byte [ebp - 2]
test edx, edx
je 0x10008bb7
movsx eax, byte [0x1009b0bb]
mov dword [ebp - 0x208], eax
jmp 0x10008bc0
mov ecx, dword [ebp - 0x2c]
mov dword [ebp - 0x208], ecx
mov dl, byte [ebp - 0x208]
mov byte [0x1009b01f], dl
movzx eax, byte [0x1009b0a6]
imul eax, dword [ebp - 0x40]
and eax, dword [ebp - 0x40]
mov dword [ebp - 0x40], eax
movzx ecx, byte [ebp - 4]
imul edx, ecx, 0xf46ae01b
mov byte [0x1009b07e], dl
jmp 0x10008cbd
mov eax, dword [0x1009b1b0]
add eax, 0x52ec
mov byte [ebp - 1], al
mov cl, byte [0x1009b0a7]
sub cl, 1
mov byte [0x1009b0a7], cl
mov eax, dword [0x1009b188]
cdq
push edx
push eax
mov edx, dword [0x1009b164]
push edx
mov eax, dword [0x1009b160]
push eax
call fcn.1006c090
mov dword [ebp - 0x734], eax
mov dword [ebp - 0x730], edx
mov ecx, dword [ebp - 0x734]
or ecx, dword [ebp - 0x730]
jne 0x10008c4e
mov dword [ebp - 0x20c], 1
jmp 0x10008c58
mov dword [ebp - 0x20c], 0
mov edx, dword [ebp - 0x20c]
mov dword [0x1009b144], edx
mov eax, dword [0x1009b1a8]
mov ecx, dword [0x1009b1ac]
mov edx, dword [ebp - 0x60]
mov esi, dword [ebp - 0x5c]
push esi
push edx
push ecx
push eax
call fcn.1006c090
mov dword [0x1009b1a8], eax
mov dword [0x1009b1ac], edx
movzx eax, byte [0x1009b0ef]
cdq
mov ecx, dword [ebp - 0x24]
mov esi, dword [ebp - 0x20]
and ecx, eax
and esi, edx
mov dword [ebp - 0x24], ecx
mov dword [ebp - 0x20], esi
movzx edx, byte [0x1009b0a6]
movzx eax, byte [ebp - 6]
add edx, eax
movzx ecx, byte [0x1009b0a6]
sub ecx, edx
mov byte [0x1009b0a6], cl
xor edx, edx
mov dword [0x1009b150], 0xdf7b
mov dword [0x1009b154], edx
mov eax, dword [0x1009b148]
xor ecx, ecx
push 0xae524
push 0x350a57f5
push ecx
push eax
call fcn.1006c090
mov dword [0x1009b160], eax
mov dword [0x1009b164], edx
mov dl, byte [ebp - 2]
mov byte [0x1009b0a7], dl
mov ecx, dword [0x1009b168]
mov esi, dword [0x1009b16c]
movsx eax, word [ebp - 0x1c]
cdq
mov edi, dword [0x1009b150]
mov ebx, dword [0x1009b154]
add edi, eax
adc ebx, edx
mov dword [ebp - 0x73c], ecx
mov dword [ebp - 0x738], esi
mov dword [ebp - 0x744], edi
mov dword [ebp - 0x740], ebx
mov edx, dword [ebp - 0x73c]
cmp edx, dword [ebp - 0x744]
jne 0x100090d7
mov eax, dword [ebp - 0x738]
cmp eax, dword [ebp - 0x740]
jne 0x100090d7
call dword [sym.imp.KERNEL32.dll_GetEnvironmentStrings]
mov word [ebp - 0x10], ax
movzx ecx, byte [0x1009b0a6]
movzx edx, byte [ebp - 7]
cmp ecx, edx
jge 0x10008ea0
mov byte [ebp - 3], 1
movsx eax, word [ebp - 0xc]
sub eax, 0x5942012a
mov byte [0x1009b0ee], al
cmp dword [ebp - 0x28], 0
je 0x10008da1
mov ecx, dword [ebp - 0x50]
mov edx, dword [ebp - 0x4c]
mov dword [ebp - 0x458], ecx
mov dword [ebp - 0x454], edx
jmp 0x10008db5
movzx eax, byte [0x1009b0ef]
cdq
mov dword [ebp - 0x458], eax
mov dword [ebp - 0x454], edx
mov ax, word [ebp - 0x458]
mov word [ebp - 0x10], ax
movzx eax, byte [ebp - 6]
cdq
push 0x47c07
push 0x628c7765
push edx
push eax
call fcn.1006c090
mov word [0x1009b184], ax
movsx ecx, word [ebp - 0x1c]
not ecx
mov eax, dword [ebp - 0x28]
and eax, ecx
imul eax, dword [ebp - 0x40]
cdq
mov dword [0x1009b1a8], eax
mov dword [0x1009b1ac], edx
movsx edx, byte [ebp - 2]
imul eax, edx, 0xd1d1
mov byte [ebp - 7], al
mov cl, byte [ebp - 3]
mov byte [ebp - 0x210], cl
cmp byte [ebp - 0x210], 0
je 0x10008e21
cmp byte [ebp - 0x210], 1
je 0x10008e6a
jmp 0x10008e9b
movzx edx, byte [0x1009b0a6]
mov dword [0x1009b1b0], edx
movsx eax, word [ebp - 0x10]
and eax, 0xe9
mov word [ebp - 0xc], ax
mov ecx, dword [0x1009b18c]
not ecx
add ecx, dword [ebp - 0x2c]
mov word [ebp - 0x18], cx
mov edx, dword [0x1009b1a8]
mov eax, dword [0x1009b1ac]
push 0
push 0x8f9
push eax
push edx
call fcn.1006c090
mov dword [0x1009b140], eax
jmp 0x10008e9b
mov cl, byte [0x1009b01f]
sub cl, 1
mov byte [0x1009b01f], cl
movsx edx, byte [ebp - 1]
movzx eax, byte [ebp - 5]
lea ecx, [eax + edx + 0x44d4203]
mov byte [ebp - 5], cl
movzx eax, byte [ebp - 6]
sub eax, 0x6766dc6
cdq
mov dword [ebp - 0x48], eax
mov dword [ebp - 0x44], edx
jmp 0x10008f4f
xor edx, edx
jne 0x10008eb1
movzx eax, byte [ebp - 7]
cmp eax, dword [ebp - 0x40]
je 0x10008f4f
movzx eax, word [0x1009b184]
cdq
mov ecx, dword [0x1009b198]
mov esi, dword [0x1009b19c]
add ecx, eax
adc esi, edx
mov dword [0x1009b198], ecx
mov dword [0x1009b19c], esi
mov eax, dword [ebp - 0x40]
cdq
mov ecx, eax
mov edx, dword [0x1009b198]
mov eax, dword [0x1009b19c]
mov dword [ebp - 0xae8], eax
sub ecx, edx
mov eax, dword [ebp - 0x40]
cdq
sub eax, ecx
mov dword [ebp - 0x40], eax
movsx ecx, word [ebp - 0x1c]
mov dword [0x1009b1a0], ecx
mov edx, dword [0x1009b18c]
xor eax, eax
push 0xb9368
push 0xa3879c4a
push eax
push edx
call fcn.1006c090
mov word [ebp - 0xc], ax
movsx eax, byte [0x1009b0ba]
cdq
mov ecx, dword [ebp - 0x3c]
mov edx, dword [ebp - 0x38]
mov dword [ebp - 0xaec], edx
sub ecx, eax
mov eax, dword [0x1009b18c]
mov edx, dword [ebp - 0x24]
mov esi, dword [ebp - 0x20]
mov dword [ebp - 0xaf0], esi
xor edx, eax
sub ecx, edx
mov byte [0x1009b0a6], cl
mov eax, dword [0x1009b198]
mov ecx, dword [0x1009b19c]
movsx edx, byte [ebp - 1]
sub edx, 0x63215ca7
xor esi, esi
mov dword [ebp - 0x74c], eax
mov dword [ebp - 0x748], ecx
mov dword [ebp - 0x754], edx
mov dword [ebp - 0x750], esi
mov eax, dword [ebp - 0x74c]
cmp eax, dword [ebp - 0x754]
jne 0x100090d7
mov ecx, dword [ebp - 0x748]
cmp ecx, dword [ebp - 0x750]
jne 0x100090d7
mov edx, 2
imul eax, edx, 0x620
mov cx, word [ebp - 0x1c]
mov word [eax + 0x10259530], cx
movsx eax, word [ebp - 0xc]
cdq
push edx
push eax
mov edx, dword [0x1009b164]
push edx
mov eax, dword [0x1009b160]
push eax
call fcn.1006c090
mov dword [0x1009b160], eax
mov dword [0x1009b164], edx
movzx ecx, byte [ebp - 7]
imul ecx, dword [ebp - 0x28]
movzx edx, byte [ebp - 7]
or edx, ecx
mov byte [ebp - 7], dl
mov eax, dword [0x1009b130]
mov ecx, dword [0x1009b134]
mov dword [ebp - 0xaf4], ecx
add eax, 0x9257fdd2
mov edx, dword [0x1009b148]
sub edx, eax
mov dword [0x1009b148], edx
jmp 0x10008cbd
mov byte [0x1009b0bb], 0x4b
mov dword [ebp - 0x8c], 0x15e
jmp 0x100090f9
mov eax, dword [ebp - 0x8c]
sub eax, 1
mov dword [ebp - 0x8c], eax
cmp dword [ebp - 0x8c], 0
jle 0x1000921c
movsx ecx, byte [ebp - 1]
cmp ecx, dword [0x1009b190]
jne 0x10009129
mov edx, dword [ebp - 0x58]
push edx
call dword [sym.imp.KERNEL32.dll_IsValidCodePage]
xor ecx, ecx
mov dword [ebp - 0x50], eax
mov dword [ebp - 0x4c], ecx
jmp 0x100091fb
mov edx, dword [ebp - 0x3c]
mov eax, dword [ebp - 0x38]
mov dword [0x1009b178], edx
mov dword [0x1009b17c], eax
movsx ecx, byte [0x1009b0bb]
test ecx, ecx
jne 0x10009159
xor edx, edx
mov dword [ebp - 0x764], 1
mov dword [ebp - 0x760], edx
jmp 0x10009164
xorps xmm0, xmm0
movlpd qword [ebp - 0x764], xmm0
movzx eax, byte [ebp - 6]
cdq
mov ecx, eax
movsx eax, byte [0x1009b0ba]
cdq
and eax, dword [0x1009b160]
sub ecx, eax
mov edx, dword [ebp - 0x54]
sub edx, 0x1cf8bac
add edx, dword [ebp - 0x764]
add ecx, edx
mov byte [ebp - 5], cl
mov eax, dword [0x1009bc7c]
mov dword [ebp - 0x58], eax
movsx eax, byte [0x1009b0a7]
cdq
push 0x62aff
push 0x34da9f13
push edx
push eax
call fcn.1006c090
mov dword [0x1009b130], eax
mov dword [0x1009b134], edx
cmp dword [0x1009b144], 0
je 0x100091d8
mov ecx, dword [ebp - 0x50]
mov edx, dword [ebp - 0x4c]
mov dword [ebp - 0x3bc], ecx
mov dword [ebp - 0x3b8], edx
jmp 0x100091e9
movsx eax, word [ebp - 0x18]
cdq
mov dword [ebp - 0x3bc], eax
mov dword [ebp - 0x3b8], edx
mov eax, dword [ebp - 0x3bc]
mov ecx, dword [ebp - 0x3b8]
mov dword [ebp - 0x34], eax
mov dword [ebp - 0x30], ecx
mov edx, dword [0x1009b150]
mov eax, dword [0x1009b154]
add edx, 1
adc eax, 0
mov dword [0x1009b150], edx
mov dword [0x1009b154], eax
jmp 0x100090ea
movzx eax, byte [0x1009b01f]
cdq
mov ecx, eax
mov esi, edx
movsx eax, byte [0x1009b0bb]
cdq
mov edi, dword [ebp - 0x30]
add eax, dword [ebp - 0x34]
adc edx, edi
mov dword [ebp - 0x76c], ecx
mov dword [ebp - 0x768], esi
mov dword [ebp - 0x774], eax
mov dword [ebp - 0x770], edx
mov edx, dword [ebp - 0x76c]
cmp edx, dword [ebp - 0x774]
jne 0x100094e6
mov eax, dword [ebp - 0x768]
cmp eax, dword [ebp - 0x770]
jne 0x100094e6
movsx eax, word [ebp - 0x14]
cdq
mov ecx, dword [ebp - 0x3c]
mov esi, dword [ebp - 0x38]
sub ecx, eax
sbb esi, edx
mov dword [ebp - 0x3c], ecx
mov dword [ebp - 0x38], esi
mov edx, 8
imul ecx, edx, 0x14
movsx eax, word [ebp - 0x18]
cdq
add eax, dword [ecx + 0x10153c28]
mov word [ebp - 0x18], ax
movzx edx, byte [ebp - 4]
sub edx, 0xbe9f
mov byte [0x1009b01f], dl
mov eax, dword [ebp - 0x28]
sar eax, 7
mov dword [ebp - 0x54], eax
movzx ecx, byte [ebp - 3]
sub ecx, dword [ebp - 0x54]
mov byte [ebp - 3], cl
movzx eax, byte [0x1009b033]
add eax, dword [ebp - 0x2c]
cdq
mov ecx, eax
movsx eax, word [ebp - 0xc]
cdq
mov edx, dword [0x1009b160]
not edx
add eax, edx
sub ecx, eax
mov word [ebp - 0x14], cx
movzx eax, byte [0x1009b01f]
and eax, 0x407
cdq
mov ecx, dword [0x1009b150]
mov esi, dword [0x1009b154]
and ecx, eax
and esi, edx
mov dword [0x1009b150], ecx
mov dword [0x1009b154], esi
xor edx, edx
mov dword [ebp - 0x3c], 0x7a89aafa
mov dword [ebp - 0x38], edx
movsx eax, word [ebp - 0xc]
not eax
movzx ecx, byte [0x1009b01f]
add eax, ecx
jne 0x10009337
mov dword [ebp - 0x214], 1
jmp 0x10009341
mov dword [ebp - 0x214], 0
mov edx, dword [ebp - 0x214]
mov dword [0x1009b170], edx
mov eax, dword [0x1009b1a8]
mov ecx, dword [0x1009b1ac]
mov edx, dword [ebp - 0x50]
add edx, 0x751a04b5
mov esi, dword [ebp - 0x4c]
adc esi, 0x3957c
mov dword [ebp - 0x77c], eax
mov dword [ebp - 0x778], ecx
mov dword [ebp - 0x784], edx
mov dword [ebp - 0x780], esi
mov eax, dword [ebp - 0x77c]
cmp eax, dword [ebp - 0x784]
jne 0x100094e6
mov ecx, dword [ebp - 0x778]
cmp ecx, dword [ebp - 0x780]
jne 0x100094e6
mov dword [ebp - 0x90], 0x4c
jmp 0x100093c1
mov edx, dword [ebp - 0x90]
sub edx, 1
mov dword [ebp - 0x90], edx
cmp dword [ebp - 0x90], 0
jle 0x10009478
movzx eax, byte [0x1009b07f]
cdq
mov ecx, eax
mov edx, dword [ebp - 0x24]
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0xb00], eax
sub ecx, edx
movzx eax, byte [0x1009b07f]
cdq
sub eax, ecx
mov byte [0x1009b07f], al
mov dword [0x1009b14c], 4
mov ecx, dword [0x1009b138]
or ecx, dword [0x1009b13c]
jne 0x10009419
mov dword [ebp - 0x218], 1
jmp 0x10009423
mov dword [ebp - 0x218], 0
mov edx, dword [0x1009b168]
mov eax, dword [0x1009b16c]
mov ecx, dword [ebp - 0x30]
sub edx, dword [ebp - 0x34]
sbb eax, ecx
mov ecx, dword [0x1009b144]
sub ecx, dword [ebp - 0x218]
xor esi, esi
sub edx, ecx
sbb eax, esi
not edx
not eax
mov dword [0x1009b160], edx
mov dword [0x1009b164], eax
mov edx, dword [0x1009b14c]
sub edx, 0x48
mov byte [0x1009b0bb], dl
mov eax, dword [0x1009b1b0]
add eax, 1
mov dword [0x1009b1b0], eax
jmp 0x100093b2
jmp 0x100090d7
mov ecx, dword [0x1009b18c]
xor edx, edx
mov eax, dword [ebp - 0x60]
mov esi, dword [ebp - 0x5c]
mov dword [ebp - 0x78c], ecx
mov dword [ebp - 0x788], edx
mov dword [ebp - 0x794], eax
mov dword [ebp - 0x790], esi
mov ecx, dword [ebp - 0x788]
cmp ecx, dword [ebp - 0x790]
jb 0x10009536
ja 0x1000952a
mov edx, dword [ebp - 0x78c]
cmp edx, dword [ebp - 0x794]
jbe 0x10009536
mov dword [ebp - 0x21c], 1
jmp 0x10009540
mov dword [ebp - 0x21c], 0
cmp dword [0x1009b18c], 0x5c
jbe 0x10009555
mov dword [ebp - 0x220], 1
jmp 0x1000955f
mov dword [ebp - 0x220], 0
mov eax, dword [ebp - 0x21c]
cmp eax, dword [ebp - 0x220]
jg 0x1000976a
mov ecx, dword [0x1009b1a8]
mov edx, dword [0x1009b1ac]
mov dword [ebp - 0x79c], ecx
mov dword [ebp - 0x798], edx
mov eax, dword [ebp - 0x79c]
or eax, dword [ebp - 0x798]
je 0x100096ac
mov ecx, dword [ebp - 0x34]
mov edx, dword [ebp - 0x30]
mov dword [ebp - 0x7a4], ecx
mov dword [ebp - 0x7a0], edx
mov eax, dword [ebp - 0x7a0]
cmp eax, dword [0x1009b164]
jb 0x100096a7
ja 0x100095d3
mov ecx, dword [ebp - 0x7a4]
cmp ecx, dword [0x1009b160]
jbe 0x100096a7
movzx eax, byte [ebp - 6]
cdq
mov dword [ebp - 0x7ac], eax
mov dword [ebp - 0x7a8], edx
mov edx, dword [0x1009b160]
cmp edx, dword [ebp - 0x7ac]
jne 0x100095ff
mov eax, dword [0x1009b164]
cmp eax, dword [ebp - 0x7a8]
je 0x1000966f
movzx ecx, byte [ebp - 4]
mov edx, dword [0x1009b140]
add edx, ecx
mov dword [0x1009b140], edx
mov eax, dword [ebp - 0x3c]
mov ecx, dword [ebp - 0x38]
push 0
push 0x7544
push ecx
push eax
call fcn.1006c090
mov byte [0x1009b033], al
mov edx, dword [ebp - 0x48]
mov eax, dword [ebp - 0x44]
mov ecx, 8
imul ecx, ecx, 0x28
mov dword [ecx + 0x102f2190], edx
mov dword [ecx + 0x102f2194], eax
cmp dword [0x1009b188], 0
je 0x10009659
movsx edx, word [ebp - 0x18]
mov dword [ebp - 0x224], edx
jmp 0x10009662
mov eax, dword [ebp - 0x54]
mov dword [ebp - 0x224], eax
mov cx, word [ebp - 0x224]
mov word [ebp - 0x1c], cx
jmp 0x100096a7
movzx edx, byte [0x1009b07f]
test edx, edx
je 0x100096a7
mov eax, dword [ebp - 0x48]
mov ecx, dword [ebp - 0x44]
mov dword [ebp - 0xb08], ecx
xor eax, 0x549b2881
mov word [0x1009b180], ax
movsx edx, byte [ebp - 2]
movsx eax, word [0x1009b180]
sub edx, eax
movsx ecx, byte [ebp - 2]
or ecx, edx
mov byte [ebp - 2], cl
jmp 0x10009765
movzx edx, byte [0x1009b0ef]
test edx, edx
jne 0x10009765
cmp dword [ebp - 0x40], 0
jne 0x10009765
movzx eax, word [0x1009b158]
add eax, 0x75f58c67
xor ecx, ecx
mov dword [ebp - 0x48], eax
mov dword [ebp - 0x44], ecx
mov dl, byte [ebp - 0xc]
mov byte [0x1009b01f], dl
movzx eax, byte [0x1009b033]
cdq
sub eax, 0x91a933e
mov word [ebp - 0x14], ax
mov eax, dword [0x1009bc7c]
xor ecx, ecx
mov dword [ebp - 0x48], eax
mov dword [ebp - 0x44], ecx
movsx edx, byte [0x1009b0bb]
test edx, edx
je 0x10009724
mov eax, dword [0x1009b130]
mov ecx, dword [0x1009b134]
mov dword [ebp - 0x3b4], eax
mov dword [ebp - 0x3b0], ecx
jmp 0x10009735
mov edx, dword [ebp - 0x58]
xor eax, eax
mov dword [ebp - 0x3b4], edx
mov dword [ebp - 0x3b0], eax
mov ecx, dword [ebp - 0x3b4]
mov edx, dword [ebp - 0x3b0]
mov dword [0x1009b198], ecx
mov dword [0x1009b19c], edx
mov eax, dword [ebp - 0x24]
mov ecx, dword [ebp - 0x20]
mov dword [ebp - 0xb0c], ecx
not eax
sub eax, 0x5272
mov byte [0x1009b07f], al
jmp 0x10009984
movzx edx, byte [ebp - 4]
cmp edx, dword [ebp - 0x54]
jne 0x1000977f
mov dword [ebp - 0x228], 1
jmp 0x10009789
mov dword [ebp - 0x228], 0
mov eax, dword [ebp - 0x228]
cmp eax, dword [0x1009b1a0]
jae 0x100098a6
imul ecx, dword [ebp - 0x2c], 0x31
mov byte [ebp - 3], cl
movzx edx, byte [0x1009b07e]
add edx, dword [0x1009b190]
jne 0x100097bd
mov dword [ebp - 0x22c], 1
jmp 0x100097c7
mov dword [ebp - 0x22c], 0
mov eax, dword [0x1009b140]
not eax
mov ecx, dword [ebp - 0x22c]
sub ecx, eax
not ecx
mov eax, ecx
cdq
mov dword [ebp - 0x3c], eax
mov dword [ebp - 0x38], edx
movsx edx, word [0x1009b180]
imul edx, dword [0x1009b1a0]
movsx eax, word [0x1009b180]
add eax, edx
mov word [0x1009b180], ax
movsx eax, byte [ebp - 1]
not eax
cdq
mov ecx, dword [0x1009b198]
mov edx, dword [0x1009b19c]
mov dword [ebp - 0xb10], edx
sub ecx, eax
mov byte [0x1009b033], cl
cmp dword [0x1009b140], 0
jne 0x1000983c
xor eax, eax
mov dword [ebp - 0x460], 1
mov dword [ebp - 0x45c], eax
jmp 0x10009847
xorps xmm0, xmm0
movlpd qword [ebp - 0x460], xmm0
movzx ecx, byte [ebp - 3]
test ecx, ecx
jne 0x1000985b
mov dword [ebp - 0x230], 1
jmp 0x10009865
mov dword [ebp - 0x230], 0
xor edx, edx
mov ecx, dword [ebp - 0x3c]
mov esi, dword [ebp - 0x38]
add ecx, dword [0x1009b190]
adc esi, edx
add ecx, dword [ebp - 0x460]
adc esi, dword [ebp - 0x45c]
movsx edx, word [ebp - 0xc]
mov eax, 0x6bc37149
sub eax, edx
mov edx, dword [ebp - 0x230]
sub edx, eax
mov eax, edx
cdq
add ecx, eax
adc esi, edx
mov dword [ebp - 0x48], ecx
mov dword [ebp - 0x44], esi
jmp 0x10009984
mov eax, dword [ebp - 0x50]
or eax, dword [ebp - 0x4c]
jne 0x100098ba
mov dword [ebp - 0x234], 1
jmp 0x100098c4
mov dword [ebp - 0x234], 0
movsx ecx, byte [ebp - 1]
test ecx, ecx
je 0x100098e2
movsx edx, word [ebp - 0x10]
not edx
test edx, edx
je 0x100098e2
mov dword [ebp - 0x238], 1
jmp 0x100098ec
mov dword [ebp - 0x238], 0
mov eax, dword [ebp - 0x234]
cmp eax, dword [ebp - 0x238]
jl 0x10009984
movzx eax, byte [ebp - 5]
cdq
mov ecx, eax
add ecx, 0x21751a9e
movzx eax, byte [0x1009b0a6]
cdq
add eax, ecx
mov byte [0x1009b0a6], al
mov edx, dword [0x1009b160]
sub edx, 1
mov eax, dword [0x1009b164]
sbb eax, 0
mov dword [0x1009b160], edx
mov dword [0x1009b164], eax
mov ecx, dword [0x1009b148]
add ecx, 0xf2e41fe
movzx eax, byte [0x1009b07f]
cdq
add eax, ecx
mov byte [0x1009b07f], al
mov edx, dword [0x1009b170]
mov eax, dword [0x1009b168]
mov ecx, dword [0x1009b16c]
mov dword [ebp - 0xb14], ecx
add edx, eax
mov eax, dword [0x1009b170]
sub eax, edx
mov dword [0x1009b170], eax
mov cx, word [0x1009b138]
mov word [0x1009b158], cx
call fcn.1001c5a0
test eax, eax
jne 0x10009e17
call dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
xor edx, edx
mov dword [ebp - 0x48], eax
mov dword [ebp - 0x44], edx
mov dword [0x1009b170], 0xce
mov dword [ebp - 0x94], 0x844
push 0
push 0xdbebf6f
mov eax, dword [ebp - 0x4c]
push eax
mov ecx, dword [ebp - 0x50]
push ecx
call fcn.1006c090
mov byte [ebp - 5], al
movsx edx, word [ebp - 0xc]
test edx, edx
jne 0x100099e6
xor eax, eax
mov dword [ebp - 0x468], 1
mov dword [ebp - 0x464], eax
jmp 0x100099f1
xorps xmm0, xmm0
movlpd qword [ebp - 0x468], xmm0
movsx ecx, byte [0x1009b0ba]
xor ecx, dword [ebp - 0x54]
xor esi, esi
movsx eax, word [0x1009b180]
cdq
sub eax, dword [0x1009b160]
sbb edx, dword [0x1009b164]
mov edi, dword [ebp - 0x468]
sub edi, dword [ebp - 0x50]
mov ebx, dword [ebp - 0x464]
sbb ebx, dword [ebp - 0x4c]
sub eax, edi
sbb edx, ebx
push edx
push eax
push esi
push ecx
call fcn.1006c090
mov dword [ebp - 0x28], eax
movzx edx, byte [0x1009b07e]
mov dword [0x1009b1b0], edx
xor eax, eax
mov dword [0x1009b1a8], 4
mov dword [0x1009b1ac], eax
mov byte [0x1009b0a7], 0xdd
cmp dword [ebp - 0x94], 0x7d6
jle 0x10009ac4
mov ecx, dword [0x1009b178]
sub ecx, 0x3acb388a
mov byte [ebp - 4], cl
movsx eax, word [ebp - 0x10]
add eax, 0xa0d7
cdq
mov dword [ebp - 0x24], eax
mov dword [ebp - 0x20], edx
movzx eax, byte [0x1009b07e]
cdq
mov dword [0x1009b130], eax
mov dword [0x1009b134], edx
movsx eax, word [0x1009b180]
cdq
mov ecx, dword [ebp - 0x4c]
push ecx
mov ecx, dword [ebp - 0x50]
push ecx
push edx
push eax
call fcn.1006c090
mov word [0x1009b180], ax
mov edx, dword [ebp - 0x94]
sub edx, 1
mov dword [ebp - 0x94], edx
jmp 0x10009a58
mov eax, dword [ebp - 0x40]
add eax, 1
cmp dword [0x1009b170], eax
jne 0x10009d19
mov ecx, dword [0x1009b130]
mov edx, dword [0x1009b134]
mov dword [ebp - 0xb18], edx
push ecx
call dword [sym.imp.KERNEL32.dll_IsValidCodePage]
mov dword [0x1009b14c], eax
cmp dword [0x1009b160], 1
jne 0x10009d19
cmp dword [0x1009b164], 0
jne 0x10009d19
mov eax, dword [ebp - 0x40]
push eax
call dword [sym.imp.KERNEL32.dll_SetLastError]
movsx eax, word [ebp - 0x14]
cdq
mov dword [ebp - 0x4f8], eax
mov dword [ebp - 0x4f4], edx
cmp dword [ebp - 0x4f4], 0x8d361
jl 0x10009b4f
jg 0x10009b43
cmp dword [ebp - 0x4f8], 0x5affc2bb
jb 0x10009b4f
mov dword [ebp - 0x23c], 1
jmp 0x10009b59
mov dword [ebp - 0x23c], 0
cmp dword [ebp - 0x23c], 0x50
jge 0x10009b6e
mov dword [ebp - 0x240], 1
jmp 0x10009b78
mov dword [ebp - 0x240], 0
mov ecx, dword [0x1009b144]
not ecx
cmp ecx, dword [ebp - 0x240]
ja 0x10009c99
movsx eax, word [ebp - 0xc]
cdq
mov dword [ebp - 0x7b4], eax
mov dword [ebp - 0x7b0], edx
mov edx, dword [ebp - 0x7b0]
cmp edx, dword [0x1009b164]
ja 0x10009c2a
jb 0x10009bbb
mov eax, dword [ebp - 0x7b4]
cmp eax, dword [0x1009b160]
ja 0x10009c2a
mov ecx, dword [0x1009b1b0]
xor edx, edx
mov dword [ebp - 0x24], ecx
mov dword [ebp - 0x20], edx
movzx eax, byte [0x1009b033]
movsx ecx, word [ebp - 0x14]
sub eax, ecx
movzx edx, byte [0x1009b033]
add edx, eax
mov byte [0x1009b033], dl
mov eax, dword [0x1009bc7c]
xor ecx, ecx
mov dword [0x1009b160], eax
mov dword [0x1009b164], ecx
mov edx, dword [0x1009b138]
add edx, 0x9dde
mov byte [0x1009b07f], dl
movzx eax, byte [ebp - 3]
cdq
mov ecx, dword [0x1009b138]
sub ecx, eax
mov eax, dword [0x1009b13c]
sbb eax, edx
mov dword [0x1009b138], ecx
mov dword [0x1009b13c], eax
jmp 0x10009c97
mov ecx, dword [0x1009b148]
xor ecx, 0x62b0cc97
mov edx, dword [0x1009b148]
sub edx, ecx
mov dword [0x1009b148], edx
mov eax, dword [0x1009bc7c]
xor ecx, ecx
mov dword [0x1009b198], eax
mov dword [0x1009b19c], ecx
movzx edx, word [0x1009b158]
sub edx, 0x89d5
mov dword [ebp - 0x2c], edx
mov eax, dword [ebp - 0x60]
mov ecx, dword [ebp - 0x5c]
mov dword [ebp - 0xb1c], ecx
sub eax, 0x6940
mov dword [0x1009b1a0], eax
mov edx, dword [ebp - 0x34]
mov eax, dword [ebp - 0x30]
push 0
push 0xee7832d4
push eax
push edx
call fcn.1006c090
mov dword [ebp - 0x28], eax
mov byte [ebp - 3], 0xe3
jmp 0x10009cfb
movzx ecx, word [0x1009b158]
test ecx, ecx
je 0x10009cb3
movzx edx, byte [0x1009b01f]
movsx eax, word [ebp - 0x10]
cmp edx, eax
jle 0x10009cfb
mov dword [0x1009b140], 0xe2
mov eax, dword [ebp - 0x28]
sub eax, 0x3eae
cdq
mov dword [ebp - 0x24], eax
mov dword [ebp - 0x20], edx
movsx ecx, word [ebp - 0x10]
add ecx, 0xa1
mov byte [0x1009b01f], cl
movzx eax, byte [0x1009b07f]
cdq
mov ecx, eax
sub ecx, 0x47766b97
movzx eax, byte [0x1009b07f]
cdq
add eax, ecx
mov byte [0x1009b07f], al
jmp 0x10009d19
mov dword [0x1009b170], 0xce
mov edx, dword [0x1009b198]
mov eax, dword [0x1009b19c]
mov dword [ebp - 0xb20], eax
add edx, 0x1e
mov dword [ebp - 0x2c], edx
movzx ecx, byte [ebp - 7]
add ecx, 0xc7
mov word [ebp - 0x10], cx
mov edx, dword [ebp - 0x24]
mov eax, dword [ebp - 0x20]
push 0
push 0xf8
push eax
push edx
call fcn.1006c090
mov word [0x1009b184], ax
movzx ecx, byte [0x1009b033]
movsx edx, word [ebp - 0x14]
imul ecx, edx
movzx eax, byte [0x1009b033]
sub eax, ecx
mov byte [0x1009b033], al
movsx ecx, byte [ebp - 2]
add ecx, dword [0x1009b190]
movsx edx, byte [ebp - 2]
or edx, ecx
mov byte [ebp - 2], dl
movsx eax, word [ebp - 0x1c]
movzx ecx, byte [ebp - 7]
sub eax, ecx
cdq
push edx
push eax
mov edx, dword [0x1009b13c]
push edx
mov eax, dword [0x1009b138]
push eax
call fcn.1006c090
mov word [0x1009b180], ax
mov ecx, dword [ebp - 0x3c]
mov edx, dword [ebp - 0x38]
mov dword [ebp - 0xb24], edx
add ecx, 0x79712142
mov dword [ebp - 0x2c], ecx
mov eax, 2
imul ecx, eax, 0x1334
mov dl, byte [ecx + 0x10259530]
mov byte [0x1009b0ef], dl
mov eax, dword [0x1009b1a8]
mov ecx, dword [0x1009b1ac]
mov dword [ebp - 0xb28], ecx
not eax
mov edx, dword [0x1009b144]
mov ecx, dword [ebp - 0x24]
mov esi, dword [ebp - 0x20]
mov dword [ebp - 0xb2c], esi
xor edx, ecx
not edx
sub eax, edx
mov byte [ebp - 4], al
xor eax, eax
jmp 0x1000e948
jmp 0x1000e943
xor edx, edx
mov dword [ebp - 0x60], 1
mov dword [ebp - 0x5c], edx
movzx eax, byte [ebp - 6]
movzx ecx, byte [ebp - 5]
and ecx, 0x24
imul eax, ecx
not eax
cdq
mov dword [ebp - 0x34], eax
mov dword [ebp - 0x30], edx
mov eax, dword [ebp - 0x2c]
cdq
push 0xc7090
push 0x5d8aaa15
push edx
push eax
call fcn.1006c090
mov byte [0x1009b0ef], al
movsx edx, word [ebp - 0x18]
mov eax, dword [0x1009b190]
and eax, edx
mov dword [0x1009b190], eax
movzx ecx, byte [0x1009b0ef]
movsx edx, word [ebp - 0x1c]
imul ecx, edx
movzx eax, byte [0x1009b0ef]
or eax, ecx
mov byte [0x1009b0ef], al
mov ecx, dword [ebp - 0x60]
mov edx, dword [ebp - 0x5c]
mov dword [ebp - 0x3ac], ecx
mov dword [ebp - 0x3a8], edx
mov eax, dword [ebp - 0x3ac]
or eax, dword [ebp - 0x3a8]
je 0x10009ec0
cmp dword [ebp - 0x3ac], 1
jne 0x10009ebb
cmp dword [ebp - 0x3a8], 0
je 0x10009f61
jmp 0x10009fb6
movzx ecx, byte [0x1009b0ee]
imul ecx, dword [0x1009b1a0]
movzx edx, byte [0x1009b0ee]
imul edx, ecx
mov byte [0x1009b0ee], dl
mov eax, dword [0x1009b198]
mov ecx, dword [0x1009b19c]
mov dword [ebp - 0x7bc], eax
mov dword [ebp - 0x7b8], ecx
mov edx, dword [ebp - 0x7bc]
or edx, dword [ebp - 0x7b8]
jne 0x10009f0f
mov dword [ebp - 0x244], 1
jmp 0x10009f19
mov dword [ebp - 0x244], 0
movsx eax, byte [0x1009b0a7]
movsx ecx, word [ebp - 0x10]
imul ecx, dword [ebp - 0x244]
and eax, ecx
mov word [ebp - 0x1c], ax
movzx eax, byte [ebp - 3]
cdq
mov ecx, eax
add ecx, dword [ebp - 0x50]
movzx eax, byte [ebp - 3]
cdq
add eax, ecx
mov byte [ebp - 3], al
mov edx, dword [ebp - 0x60]
mov eax, dword [ebp - 0x5c]
mov ecx, 8
imul ecx, ecx, 3
mov dword [ecx + 0x101c0bc0], edx
mov dword [ecx + 0x101c0bc4], eax
jmp 0x10009fb6
movsx eax, byte [ebp - 1]
cdq
add eax, 0x37732d32
mov word [ebp - 0x14], ax
mov edx, dword [0x1009b1a0]
xor eax, eax
mov dword [ebp - 0x60], edx
mov dword [ebp - 0x5c], eax
mov ecx, dword [ebp - 0x34]
mov edx, dword [ebp - 0x30]
mov dword [ebp - 0xb30], edx
sub ecx, 0x7276
mov byte [0x1009b0bb], cl
mov eax, dword [0x1009b144]
xor ecx, ecx
mov dword [0x1009b178], eax
mov dword [0x1009b17c], ecx
movzx edx, byte [ebp - 6]
imul eax, edx, 0x7eb1
mov byte [0x1009b0ef], al
mov ecx, dword [0x1009b130]
mov edx, dword [0x1009b134]
mov dword [ebp - 0x7c4], ecx
mov dword [ebp - 0x7c0], edx
mov eax, dword [ebp - 0x7c4]
or eax, dword [ebp - 0x7c0]
je 0x1000a057
movsx eax, byte [ebp - 2]
cdq
mov ecx, dword [0x1009b198]
mov edx, dword [0x1009b19c]
mov dword [ebp - 0xb34], edx
and ecx, eax
mov byte [0x1009b01f], cl
movzx eax, byte [ebp - 7]
test eax, eax
je 0x1000a00e
mov ecx, dword [ebp - 0x2c]
mov dword [ebp - 0x248], ecx
jmp 0x1000a018
movzx edx, byte [ebp - 7]
mov dword [ebp - 0x248], edx
mov eax, dword [ebp - 0x248]
mov dword [ebp - 0x28], eax
movsx ecx, byte [0x1009b0bb]
mov edx, dword [0x1009b188]
imul edx, ecx
mov eax, dword [0x1009b188]
sub eax, edx
mov dword [0x1009b188], eax
mov ecx, 4
mov word [0x1009b184], cx
mov edx, 0xd15
mov word [ebp - 0x1c], dx
jmp 0x1000a108
movsx eax, word [ebp - 0x18]
test eax, eax
jne 0x1000a06b
mov dword [ebp - 0x24c], 1
jmp 0x1000a075
mov dword [ebp - 0x24c], 0
mov ecx, dword [0x1009b190]
not ecx
add ecx, dword [ebp - 0x24c]
jne 0x1000a091
mov dword [ebp - 0x250], 1
jmp 0x1000a09b
mov dword [ebp - 0x250], 0
cmp dword [ebp - 0x28], 0
jne 0x1000a0ad
mov dword [ebp - 0x254], 1
jmp 0x1000a0b7
mov dword [ebp - 0x254], 0
mov edx, dword [ebp - 0x250]
imul edx, dword [ebp - 0x254]
test edx, edx
jne 0x1000a108
movzx eax, byte [ebp - 3]
sub eax, 0xfe94
cdq
mov dword [0x1009b160], eax
mov dword [0x1009b164], edx
movsx eax, word [ebp - 0x10]
xor eax, dword [0x1009b18c]
mov ecx, dword [0x1009b18c]
sub ecx, eax
mov dword [0x1009b18c], ecx
mov edx, dword [ebp - 0x54]
sub edx, dword [0x1009b144]
not edx
xor eax, eax
mov dword [ebp - 0x3c], edx
mov dword [ebp - 0x38], eax
mov ecx, dword [0x1009bc7c]
mov dword [ebp - 0x98], ecx
movsx edx, word [ebp - 0x10]
add edx, dword [ebp - 0x28]
movsx eax, word [ebp - 0x10]
add eax, edx
mov word [ebp - 0x10], ax
mov ecx, dword [ebp - 0x28]
mov word [0x1009b180], cx
mov eax, dword [0x1009b188]
cdq
mov ecx, eax
mov esi, edx
xor ecx, 0x8a050367
xor esi, 0xfca96
movsx eax, word [ebp - 0x18]
cdq
push esi
push ecx
push edx
push eax
call fcn.1006c090
mov word [ebp - 0x18], ax
mov edx, dword [ebp - 0x98]
add edx, 0x2ed
mov dword [ebp - 0xb38], edx
movzx eax, byte [ebp - 3]
add eax, 0xcc
imul ecx, eax, 0
movzx edx, byte [0x1009b0ee]
sub edx, dword [0x1009b190]
movsx eax, word [ebp - 0x10]
add eax, dword [0x1009b170]
not eax
sub edx, eax
add ecx, edx
not ecx
xor edx, edx
mov dword [ebp - 0x50], ecx
mov dword [ebp - 0x4c], edx
movsx eax, word [ebp - 0x10]
movzx ecx, byte [0x1009b07f]
add eax, ecx
mov word [ebp - 0x10], ax
mov edx, dword [0x1009b198]
mov eax, dword [0x1009b19c]
mov dword [ebp - 0xb3c], eax
mov word [ebp - 0x14], dx
movsx ecx, word [ebp - 0xc]
movzx edx, byte [ebp - 3]
lea eax, [edx + ecx - 0xb1b9]
mov byte [ebp - 3], al
imul ecx, dword [0x1009b190], 0x89f7
movzx edx, byte [0x1009b07f]
sub edx, ecx
mov byte [0x1009b07f], dl
mov eax, dword [ebp - 0x98]
add eax, 0xbd
mov dword [ebp - 0x530], eax
mov ecx, dword [0x1009b150]
mov edx, dword [0x1009b154]
mov dword [ebp - 0x7cc], ecx
mov dword [ebp - 0x7c8], edx
mov eax, dword [ebp - 0x7cc]
or eax, dword [ebp - 0x7c8]
jne 0x1000a250
mov cl, byte [0x1009bc7c]
mov byte [0x1009b0ee], cl
movzx edx, word [0x1009b158]
imul eax, edx, 0x9f9c877d
mov dword [ebp - 0x40], eax
movzx eax, byte [ebp - 3]
add eax, 0x84e0
cdq
mov dword [ebp - 0x50], eax
mov dword [ebp - 0x4c], edx
mov ecx, dword [ebp - 0x98]
add ecx, 0x363
mov dword [ebp - 0xb40], ecx
mov byte [0x1009b07e], 0
mov dl, byte [0x1009b07f]
add dl, 1
mov byte [0x1009b07f], dl
movzx eax, byte [ebp - 3]
movzx ecx, byte [0x1009b0ee]
sub eax, ecx
movzx edx, byte [ebp - 3]
sub edx, eax
mov byte [ebp - 3], dl
mov eax, dword [0x1009b14c]
sub eax, 1
mov dword [0x1009b14c], eax
mov cl, byte [0x1009b07e]
mov byte [ebp - 0x52c], cl
cmp byte [ebp - 0x52c], 0
je 0x1000a2b5
jmp 0x1000a34e
push 0
push 0xec21f704
mov edx, dword [0x1009b17c]
push edx
mov eax, dword [0x1009b178]
push eax
call fcn.1006c090
mov dword [0x1009b18c], eax
movzx ecx, word [0x1009b158]
imul edx, ecx, 0x9a98
mov dword [0x1009b144], edx
movzx eax, byte [0x1009b0ee]
cdq
mov ecx, dword [ebp - 0x24]
mov esi, dword [ebp - 0x20]
push esi
push ecx
push edx
push eax
call fcn.1006c090
mov byte [0x1009b0ee], al
movzx edx, byte [0x1009b0ee]
mov eax, dword [0x1009b1b0]
add eax, edx
mov ecx, dword [0x1009b1b0]
add ecx, eax
mov dword [0x1009b1b0], ecx
mov edx, dword [0x1009b170]
sub edx, 0x4e2b8f5b
xor eax, eax
mov dword [ebp - 0x34], edx
mov dword [ebp - 0x30], eax
mov ecx, dword [0x1009b130]
mov edx, dword [0x1009b134]
mov dword [ebp - 0xb44], edx
xor ecx, 0xf1894536
mov word [ebp - 0xc], cx
mov eax, 0x169
sub eax, dword [ebp - 0x530]
add eax, 0x280
cmp eax, 0x179
je 0x1000e943
mov byte [0x1009b01f], 0xe8
cmp dword [ebp - 0x58], 0
je 0x1000a415
mov ecx, dword [0x1009b160]
or ecx, 0x8a02b23e
mov edx, dword [0x1009b1a0]
mov eax, dword [0x1009b130]
mov esi, dword [0x1009b134]
mov dword [ebp - 0xb48], esi
sub edx, eax
sub ecx, edx
mov word [ebp - 0x1c], cx
mov ecx, dword [ebp - 0x30]
xor edx, edx
sub edx, dword [ebp - 0x34]
mov eax, 0
sbb eax, ecx
mov dword [ebp - 0x7d4], edx
mov dword [ebp - 0x7d0], eax
mov ecx, dword [ebp - 0x7d4]
or ecx, dword [ebp - 0x7d0]
jne 0x1000a3e2
xor edx, edx
mov dword [ebp - 0x7dc], 1
mov dword [ebp - 0x7d8], edx
jmp 0x1000a3ed
xorps xmm0, xmm0
movlpd qword [ebp - 0x7dc], xmm0
mov eax, dword [0x1009b178]
add eax, dword [ebp - 0x7dc]
mov byte [0x1009b033], al
mov ecx, dword [0x1009b188]
sub ecx, 0x6725e06d
mov word [0x1009b180], cx
jmp 0x1000a4a9
mov edx, dword [ebp - 0x3c]
mov eax, dword [ebp - 0x38]
mov ecx, dword [0x1009b170]
xor esi, esi
mov dword [ebp - 0x7e4], edx
mov dword [ebp - 0x7e0], eax
mov dword [ebp - 0x7ec], ecx
mov dword [ebp - 0x7e8], esi
mov edx, dword [ebp - 0x7e0]
cmp edx, dword [ebp - 0x7e8]
jl 0x1000a465
jg 0x1000a459
mov eax, dword [ebp - 0x7e4]
cmp eax, dword [ebp - 0x7ec]
jbe 0x1000a465
mov dword [ebp - 0x258], 1
jmp 0x1000a46f
mov dword [ebp - 0x258], 0
mov ecx, dword [ebp - 0x258]
cmp ecx, dword [0x1009b1a0]
jbe 0x1000a4a9
movzx eax, word [0x1009b158]
cdq
add eax, 0x6062f88e
mov byte [ebp - 2], al
movzx edx, byte [0x1009b07f]
sub edx, dword [ebp - 0x54]
mov byte [0x1009b07f], dl
mov al, byte [0x1009b07e]
sub al, 1
mov byte [0x1009b07e], al
movzx ecx, byte [0x1009b01f]
mov edx, dword [ebp - 0x40]
add edx, 0xd866ce8
cmp ecx, edx
jne 0x1000a537
movzx eax, byte [0x1009b07e]
movsx ecx, byte [ebp - 1]
add ecx, 0x11
cmp eax, ecx
jne 0x1000a537
movsx edx, byte [0x1009b0bb]
imul edx, dword [0x1009b190]
mov byte [0x1009b0bb], dl
mov eax, dword [0x1009b198]
mov ecx, dword [0x1009b19c]
add eax, 0xf17874f8
adc ecx, 0x1d8c9
mov dword [ebp - 0x34], eax
mov dword [ebp - 0x30], ecx
movzx edx, byte [0x1009b0a6]
imul eax, edx, 0xd0
cdq
mov dword [ebp - 0x34], eax
mov dword [ebp - 0x30], edx
jmp 0x1000a537
mov byte [0x1009b01f], 0xe8
imul edx, dword [ebp - 0x58], 0xe3c4
xor eax, eax
mov dword [ebp - 0x48], edx
mov dword [ebp - 0x44], eax
mov ecx, 0xffff8925
mov word [0x1009b180], cx
imul edx, dword [ebp - 0x40], 0xcb
mov word [0x1009b158], dx
movsx eax, word [ebp - 0x18]
cdq
push 0x8dee9
push 0xf60cdabe
push edx
push eax
call fcn.1006c090
mov ecx, eax
mov esi, edx
mov eax, dword [0x1009b188]
cdq
push esi
push ecx
push edx
push eax
call fcn.1006c090
mov dword [0x1009b188], eax
movzx edx, byte [0x1009b0ef]
movzx eax, byte [ebp - 4]
cmp edx, eax
jg 0x1000a5b2
call dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov byte [ebp - 5], al
jmp 0x1000a79c
cmp dword [ebp - 0x54], 0
je 0x1000a696
mov ecx, dword [0x1009b168]
mov edx, dword [0x1009b16c]
xor ecx, 0xae63afe2
xor edx, 0
mov dword [ebp - 0x48], ecx
mov dword [ebp - 0x44], edx
mov byte [0x1009b0a6], 0x1b
movzx eax, word [0x1009b158]
cdq
add eax, 0x9ab3aec7
mov byte [0x1009b0ba], al
mov eax, dword [0x1009b170]
xor ecx, ecx
mov edx, dword [ebp - 0x34]
mov esi, dword [ebp - 0x30]
push esi
push edx
push ecx
push eax
call fcn.1006c090
mov ecx, dword [0x1009b170]
add ecx, eax
mov dword [0x1009b170], ecx
cmp dword [ebp - 0x54], 0
jne 0x1000a626
mov dword [ebp - 0x25c], 1
jmp 0x1000a630
mov dword [ebp - 0x25c], 0
movsx edx, word [ebp - 0x18]
movzx eax, byte [ebp - 4]
sub edx, eax
movzx ecx, byte [0x1009b01f]
mov eax, dword [ebp - 0x25c]
sub eax, ecx
or edx, eax
movzx ecx, byte [0x1009b0ef]
movsx eax, byte [0x1009b0a7]
imul ecx, eax
sub ecx, dword [ebp - 0x2c]
imul edx, ecx
test edx, edx
jne 0x1000a672
mov dword [ebp - 0x260], 1
jmp 0x1000a67c
mov dword [ebp - 0x260], 0
mov ecx, dword [ebp - 0x260]
mov dword [ebp - 0x40], ecx
mov edx, dword [0x1009bc7c]
mov dword [0x1009b144], edx
jmp 0x1000a79c
mov eax, dword [ebp - 0x50]
or eax, dword [ebp - 0x4c]
je 0x1000a744
movzx ecx, byte [0x1009b01f]
movzx edx, word [0x1009b158]
mov eax, dword [ebp - 0x54]
sub eax, edx
lea ecx, [ecx + eax + 0xd70b]
mov byte [0x1009b01f], cl
mov edx, dword [0x1009b160]
or edx, dword [0x1009b164]
je 0x1000a6e4
mov eax, dword [ebp - 0x3c]
mov ecx, dword [ebp - 0x38]
mov dword [ebp - 0x3a4], eax
mov dword [ebp - 0x3a0], ecx
jmp 0x1000a6f5
mov edx, dword [ebp - 0x58]
xor eax, eax
mov dword [ebp - 0x3a4], edx
mov dword [ebp - 0x3a0], eax
mov ecx, dword [ebp - 0x3a4]
mov edx, dword [ebp - 0x3a0]
mov dword [0x1009b150], ecx
mov dword [0x1009b154], edx
mov eax, dword [ebp - 0x54]
add eax, 0xa80a
xor ecx, ecx
mov edx, dword [0x1009b198]
mov esi, dword [0x1009b19c]
sub edx, eax
sbb esi, ecx
mov dword [0x1009b198], edx
mov dword [0x1009b19c], esi
movsx eax, word [ebp - 0x14]
add eax, dword [0x1009b18c]
mov dword [0x1009b18c], eax
jmp 0x1000a79c
movsx ecx, byte [0x1009b0ba]
movsx edx, byte [ebp - 2]
cmp ecx, edx
je 0x1000a79c
mov byte [0x1009b07e], 1
mov al, byte [ebp - 5]
mov byte [0x1009b0ba], al
mov ecx, dword [ebp - 0x2c]
sub ecx, 0x79abf02d
mov byte [0x1009b0ef], cl
push 0
push 0x41
mov edx, dword [ebp - 0x4c]
push edx
mov eax, dword [ebp - 0x50]
push eax
call fcn.1006c090
mov dword [ebp - 0x2c], eax
movsx ecx, word [0x1009b180]
movzx edx, byte [0x1009b0ee]
sub ecx, edx
mov word [0x1009b180], cx
mov eax, dword [0x1009bc7c]
mov dword [ebp - 0x9c], eax
movsx ecx, byte [0x1009b0a7]
mov edx, dword [ebp - 0x54]
add edx, ecx
mov eax, dword [ebp - 0x54]
and eax, edx
mov dword [ebp - 0x54], eax
mov ecx, dword [0x1009b138]
add ecx, 0xab22eea7
mov esi, dword [0x1009b13c]
adc esi, 0
movsx eax, word [ebp - 0x14]
cdq
push edx
push eax
push esi
push ecx
call fcn.1006c090
movsx edx, byte [ebp - 1]
movzx ecx, word [0x1009b158]
add edx, ecx
not edx
add edx, dword [0x1009b18c]
add eax, edx
mov byte [ebp - 7], al
movzx edx, byte [0x1009b07e]
test edx, edx
je 0x1000a80f
movzx eax, byte [ebp - 4]
mov dword [ebp - 0x264], eax
jmp 0x1000a81c
movzx ecx, word [0x1009b158]
mov dword [ebp - 0x264], ecx
mov eax, dword [ebp - 0x264]
cdq
mov dword [ebp - 0x48], eax
mov dword [ebp - 0x44], edx
mov edx, dword [ebp - 0x9c]
add edx, 0x3ae
mov dword [ebp - 0x284], edx
movzx eax, byte [ebp - 7]
movsx ecx, byte [0x1009b0bb]
xor eax, ecx
movzx edx, byte [ebp - 7]
sub edx, eax
mov byte [ebp - 7], dl
mov al, byte [0x1009b0ee]
mov byte [ebp - 6], al
movzx ecx, byte [ebp - 3]
xor ecx, dword [0x1009b140]
movzx edx, byte [ebp - 3]
xor edx, ecx
mov byte [ebp - 3], dl
mov eax, dword [ebp - 0x3c]
mov ecx, dword [ebp - 0x38]
mov dword [ebp - 0xb4c], ecx
mov dword [0x1009b14c], eax
movsx edx, byte [ebp - 2]
test edx, edx
je 0x1000a899
mov eax, dword [0x1009b188]
cdq
mov dword [ebp - 0x470], eax
mov dword [ebp - 0x46c], edx
jmp 0x1000a8ab
mov eax, dword [ebp - 0x50]
mov ecx, dword [ebp - 0x4c]
mov dword [ebp - 0x470], eax
mov dword [ebp - 0x46c], ecx
mov dx, word [ebp - 0x470]
mov word [ebp - 0x18], dx
mov eax, dword [ebp - 0x9c]
add eax, 0x3a4
mov dword [ebp - 0xac], eax
mov eax, dword [ebp - 0x28]
cdq
push 0x8fdf0
push 0x1de4931b
push edx
push eax
call fcn.1006c090
mov dword [0x1009b14c], eax
mov ecx, dword [0x1009b138]
or ecx, dword [0x1009b13c]
jne 0x1000a8fb
mov dword [ebp - 0x268], 1
jmp 0x1000a905
mov dword [ebp - 0x268], 0
movsx edx, word [ebp - 0xc]
mov eax, dword [ebp - 0x268]
sub eax, edx
movzx ecx, byte [ebp - 4]
not ecx
imul eax, ecx
cdq
mov ecx, dword [ebp - 0x34]
mov esi, dword [ebp - 0x30]
add ecx, dword [0x1009b160]
adc esi, dword [0x1009b164]
add ecx, 0xd81b8fd7
adc esi, 0
push esi
push ecx
push edx
push eax
call fcn.1006c090
mov byte [0x1009b0bb], al
mov edx, dword [0x1009b130]
mov eax, dword [0x1009b134]
mov dword [ebp - 0x7f4], edx
mov dword [ebp - 0x7f0], eax
mov ecx, dword [ebp - 0x7f4]
or ecx, dword [ebp - 0x7f0]
jne 0x1000a975
mov dword [ebp - 0x26c], 1
jmp 0x1000a97f
mov dword [ebp - 0x26c], 0
movzx edx, byte [0x1009b01f]
mov eax, dword [ebp - 0x26c]
sub eax, edx
mov byte [ebp - 5], al
mov ecx, dword [ebp - 0x9c]
add ecx, 0x16e
mov dword [ebp - 0xb50], ecx
xor edx, edx
mov dword [0x1009b178], 0xe95ba1aa
mov dword [0x1009b17c], edx
mov dword [ebp - 0x538], 0
mov dword [ebp - 0x534], 0
call dword [sym.imp.USER32.dll_GetFocus]
mov dword [ebp - 0xa0], eax
cmp dword [ebp - 0xa0], 0
je 0x1000aa12
mov eax, dword [ebp - 0x534]
push eax
mov ecx, dword [ebp - 0xa0]
push ecx
call dword [sym.imp.USER32.dll_BeginPaint]
mov dword [ebp - 0xb54], eax
mov edx, dword [ebp - 0x538]
push edx
mov eax, dword [ebp - 0xa0]
push eax
call dword [sym.imp.USER32.dll_EndPaint]
mov dword [ebp - 0xb58], eax
mov ecx, dword [0x1009b1a8]
mov edx, dword [0x1009b1ac]
mov eax, dword [ebp - 0x34]
mov esi, dword [ebp - 0x30]
add eax, 0x97
adc esi, 0
mov dword [ebp - 0x7fc], ecx
mov dword [ebp - 0x7f8], edx
mov dword [ebp - 0x804], eax
mov dword [ebp - 0x800], esi
mov ecx, dword [ebp - 0x7fc]
cmp ecx, dword [ebp - 0x804]
jne 0x1000ac96
mov edx, dword [ebp - 0x7f8]
cmp edx, dword [ebp - 0x800]
jne 0x1000ac96
movsx eax, byte [0x1009b0a7]
movsx ecx, word [ebp - 0x1c]
add eax, ecx
cmp eax, 1
jne 0x1000ac96
xor edx, edx
mov dword [0x1009b1a8], 1
mov dword [0x1009b1ac], edx
mov eax, dword [0x1009bc7c]
mov dword [0x1009b148], eax
mov eax, dword [0x1009b188]
cdq
mov ecx, dword [ebp - 0x3c]
mov edx, dword [ebp - 0x38]
mov dword [ebp - 0xb5c], edx
add eax, ecx
mov dword [0x1009b188], eax
movsx eax, byte [ebp - 1]
imul eax, eax, 0x754182c8
cdq
mov dword [ebp - 0x24], eax
mov dword [ebp - 0x20], edx
movzx ecx, byte [ebp - 7]
xor ecx, dword [ebp - 0x2c]
movzx edx, byte [ebp - 7]
sub edx, ecx
mov byte [ebp - 7], dl
movzx eax, byte [ebp - 3]
imul eax, eax, 0xc29b
cdq
mov dword [ebp - 0x3c], eax
mov dword [ebp - 0x38], edx
movzx ecx, word [0x1009b158]
xor ecx, dword [ebp - 0x58]
mov esi, dword [0x1009b144]
xor esi, ecx
xor ecx, ecx
movzx eax, byte [ebp - 5]
cdq
mov edi, dword [0x1009b178]
not edi
mov ebx, dword [0x1009b17c]
not ebx
sub eax, edi
sbb edx, ebx
push edx
push eax
push ecx
push esi
call fcn.1006c090
mov byte [0x1009b07f], al
mov edx, dword [0x1009b1a8]
mov eax, dword [0x1009b1ac]
mov dword [ebp - 0x39c], edx
mov dword [ebp - 0x398], eax
mov ecx, dword [ebp - 0x39c]
or ecx, dword [ebp - 0x398]
je 0x1000ab5c
cmp dword [ebp - 0x39c], 1
jne 0x1000ab57
cmp dword [ebp - 0x398], 0
je 0x1000abd4
jmp 0x1000ac24
movzx edx, byte [ebp - 6]
imul eax, edx, 0xbe35
mov byte [0x1009b0ef], al
imul ecx, dword [ebp - 0x58], 0x3b2d
xor edx, edx
mov eax, dword [ebp - 0x3c]
mov esi, dword [ebp - 0x38]
sub eax, ecx
sbb esi, edx
mov dword [ebp - 0x3c], eax
mov dword [ebp - 0x38], esi
movsx eax, word [ebp - 0x18]
cdq
push 0x632fb
push 0x57290e4f
push edx
push eax
call fcn.1006c090
mov byte [ebp - 2], al
mov cx, word [ebp - 0x14]
mov word [0x1009b158], cx
mov edx, dword [0x1009b168]
mov eax, dword [0x1009b16c]
mov dword [ebp - 0xb60], eax
mov ecx, dword [0x1009b130]
mov eax, dword [0x1009b134]
mov dword [ebp - 0xb64], eax
xor edx, ecx
mov dword [0x1009b14c], edx
jmp 0x1000ac24
mov ecx, dword [0x1009b1b0]
imul ecx, dword [0x1009b148]
mov dword [0x1009b1b0], ecx
mov eax, dword [ebp - 0x40]
cdq
mov ecx, dword [ebp - 0x48]
mov esi, dword [ebp - 0x44]
push edx
push eax
push esi
push ecx
call fcn.1006c090
mov dword [ebp - 0x48], eax
mov dword [ebp - 0x44], edx
movsx edx, byte [ebp - 1]
sub edx, 0x2298
mov dword [ebp - 0x58], edx
movzx eax, byte [0x1009b033]
cdq
sub eax, 0x2bc9a166
mov dword [ebp - 0x40], eax
movzx eax, byte [ebp - 6]
mov dword [ebp - 0x58], eax
jmp 0x1000a9a3
mov dword [ebp - 0xa4], 0x1a7f
mov byte [ebp - 2], 0x37
imul edx, dword [ebp - 0x40], 0x153bcee
mov word [ebp - 0x1c], dx
movzx eax, byte [0x1009b0a6]
sub eax, 0x67964a39
mov byte [ebp - 6], al
mov ecx, dword [0x1009bc7c]
xor edx, edx
mov dword [ebp - 0x24], ecx
mov dword [ebp - 0x20], edx
movsx eax, byte [0x1009b0bb]
cdq
sub eax, 0x4cc452ab
sbb edx, 0x85cf7
mov dword [ebp - 0x60], eax
mov dword [ebp - 0x5c], edx
cmp dword [ebp - 0xa4], 0x18f3
jle 0x1000ad54
mov eax, dword [0x1009b198]
mov ecx, dword [0x1009b19c]
mov dword [ebp - 0xb68], ecx
add eax, 0x68
mov dword [0x1009b1a0], eax
movzx edx, byte [ebp - 7]
mov eax, 0x7a88613
sub eax, edx
cdq
mov ecx, dword [0x1009b130]
mov esi, dword [0x1009b134]
push edx
push eax
push esi
push ecx
call fcn.1006c090
not eax
mov dword [0x1009b188], eax
movsx eax, byte [0x1009b0bb]
cdq
sub eax, 0xd8b51f5
mov word [ebp - 0x10], ax
mov edx, dword [ebp - 0xa4]
sub edx, 1
mov dword [ebp - 0xa4], edx
jmp 0x1000ace5
mov eax, dword [ebp - 0x53c]
add eax, 0xff
cmp eax, 0x2653d
je 0x1000e943
mov ecx, dword [0x1009b170]
mov edx, dword [ebp - 0x48]
mov eax, dword [ebp - 0x44]
mov dword [ebp - 0xb6c], eax
add ecx, edx
mov edx, dword [0x1009b170]
sub edx, ecx
mov dword [0x1009b170], edx
mov eax, 8
imul ecx, eax, 0x412a
mov dl, byte [ecx + 0x10317600]
mov byte [ebp - 4], dl
mov eax, dword [0x1009b1a8]
mov ecx, dword [0x1009b1ac]
mov dword [ebp - 0xb70], ecx
mov byte [0x1009b0a7], al
cmp dword [0x1009b1b0], 0
jne 0x1000add3
xor edx, edx
mov dword [ebp - 0x478], 1
mov dword [ebp - 0x474], edx
jmp 0x1000adde
xorps xmm0, xmm0
movlpd qword [ebp - 0x478], xmm0
mov ecx, dword [ebp - 0x34]
mov esi, dword [ebp - 0x30]
add ecx, dword [ebp - 0x478]
adc esi, dword [ebp - 0x474]
mov eax, dword [ebp - 0x28]
cdq
mov edi, dword [ebp - 0x30]
add eax, dword [ebp - 0x34]
adc edx, edi
add ecx, eax
adc esi, edx
mov dword [ebp - 0x34], ecx
mov dword [ebp - 0x30], esi
movzx eax, byte [ebp - 6]
cdq
sub eax, 0xe9171a19
sbb edx, 0x3b41
mov dword [0x1009b138], eax
mov dword [0x1009b13c], edx
mov byte [0x1009b0ee], 0x78
movsx edx, word [ebp - 0x14]
test edx, edx
je 0x1000aebb
movzx eax, byte [0x1009b033]
cmp dword [ebp - 0x28], eax
jge 0x1000ae4c
mov dword [ebp - 0x270], 1
jmp 0x1000ae56
mov dword [ebp - 0x270], 0
cmp dword [ebp - 0x28], 0x57
jge 0x1000ae68
mov dword [ebp - 0x274], 1
jmp 0x1000ae72
mov dword [ebp - 0x274], 0
mov ecx, dword [ebp - 0x270]
cmp ecx, dword [ebp - 0x274]
jne 0x1000aebb
call dword [sym.imp.USER32.dll_GetFocus]
mov dword [ebp - 0xa8], eax
cmp dword [ebp - 0xa8], 0
je 0x1000aebb
mov edx, dword [ebp - 0xa8]
push edx
call dword [sym.imp.USER32.dll_IsWindow]
mov dword [ebp - 0xb74], eax
mov eax, dword [ebp - 0xa8]
push eax
call dword [sym.imp.USER32.dll_IsWindowVisible]
mov dword [ebp - 0xb78], eax
mov ecx, dword [0x1009b170]
xor edx, edx
mov eax, dword [ebp - 0x50]
add eax, 0xf9686bb
mov esi, dword [ebp - 0x4c]
adc esi, 0
mov dword [ebp - 0x80c], ecx
mov dword [ebp - 0x808], edx
mov dword [ebp - 0x814], eax
mov dword [ebp - 0x810], esi
mov ecx, dword [ebp - 0x80c]
cmp ecx, dword [ebp - 0x814]
jne 0x1000b183
mov edx, dword [ebp - 0x808]
cmp edx, dword [ebp - 0x810]
jne 0x1000b183
movsx eax, word [ebp - 0x1c]
cdq
add eax, dword [0x1009b178]
adc edx, dword [0x1009b17c]
mov dword [ebp - 0x81c], eax
mov dword [ebp - 0x818], edx
cmp dword [ebp - 0x81c], 1
jne 0x1000b183
cmp dword [ebp - 0x818], 0
jne 0x1000b183
cmp dword [ebp - 0x4c], 0x3f440
ja 0x1000af64
jb 0x1000af58
cmp dword [ebp - 0x50], 0xc2ef2bd8
jae 0x1000af64
mov dword [ebp - 0x278], 1
jmp 0x1000af6e
mov dword [ebp - 0x278], 0
movzx eax, byte [0x1009b07e]
cmp eax, dword [ebp - 0x278]
jg 0x1000af91
xor ecx, ecx
mov dword [ebp - 0x480], 1
mov dword [ebp - 0x47c], ecx
jmp 0x1000af9c
xorps xmm0, xmm0
movlpd qword [ebp - 0x480], xmm0
mov edx, dword [ebp - 0x34]
mov eax, dword [ebp - 0x30]
add edx, dword [ebp - 0x480]
adc eax, dword [ebp - 0x47c]
mov dword [ebp - 0x824], edx
mov dword [ebp - 0x820], eax
mov ecx, dword [ebp - 0x824]
or ecx, dword [ebp - 0x820]
je 0x1000b041
mov edx, dword [0x1009b150]
mov eax, dword [0x1009b154]
mov ecx, dword [0x1009b19c]
add edx, dword [0x1009b198]
adc eax, ecx
mov ecx, dword [0x1009b150]
mov esi, dword [0x1009b154]
add ecx, edx
adc esi, eax
mov dword [0x1009b150], ecx
mov dword [0x1009b154], esi
mov edx, dword [ebp - 0x54]
imul edx, dword [0x1009b18c]
xor eax, eax
mov dword [ebp - 0x34], edx
mov dword [ebp - 0x30], eax
movsx eax, byte [ebp - 2]
cdq
push edx
push eax
mov ecx, dword [ebp - 0x4c]
push ecx
mov edx, dword [ebp - 0x50]
push edx
call fcn.1006c090
mov dword [ebp - 0x50], eax
mov dword [ebp - 0x4c], edx
movzx eax, word [0x1009b158]
movsx ecx, byte [0x1009b0bb]
add eax, ecx
mov word [0x1009b158], ax
jmp 0x1000b0a1
mov edx, dword [ebp - 0x58]
shr edx, 3
mov byte [0x1009b0ee], dl
mov byte [ebp - 7], 0x96
mov eax, dword [ebp - 0x24]
mov ecx, dword [ebp - 0x20]
mov dword [ebp - 0x82c], eax
mov dword [ebp - 0x828], ecx
mov edx, dword [ebp - 0x82c]
or edx, dword [ebp - 0x828]
jne 0x1000b07d
mov dword [ebp - 0x27c], 1
jmp 0x1000b087
mov dword [ebp - 0x27c], 0
movzx eax, byte [ebp - 5]
add eax, dword [ebp - 0x27c]
not eax
mov dword [0x1009b144], eax
mov ecx, dword [0x1009bc7c]
mov dword [ebp - 0x40], ecx
jmp 0x1000ae21
movsx eax, word [ebp - 0x14]
push eax
call dword [sym.imp.USER32.dll_GetWindowTextLengthA]
xor ecx, ecx
mov dword [0x1009b178], eax
mov dword [0x1009b17c], ecx
call fcn.10034790
test eax, eax
je 0x1000cc95
movzx edx, byte [ebp - 6]
movsx eax, word [ebp - 0x10]
add edx, eax
movzx ecx, byte [ebp - 6]
add ecx, edx
mov byte [ebp - 6], cl
mov dl, byte [0x1009b07e]
sub dl, 1
mov byte [0x1009b07e], dl
mov eax, dword [ebp - 0x54]
add eax, 0x5cb
mov ecx, dword [0x1009b150]
mov edx, dword [0x1009b154]
mov dword [ebp - 0x9b8], edx
add ecx, eax
movzx eax, byte [ebp - 6]
mov edx, dword [0x1009b148]
not edx
add eax, edx
mov esi, eax
mov eax, dword [ebp - 0x40]
cdq
or eax, dword [ebp - 0x50]
add esi, eax
xor ecx, esi
mov word [0x1009b180], cx
movzx eax, byte [ebp - 4]
sub eax, 0x391
cdq
mov dword [0x1009b150], eax
mov dword [0x1009b154], edx
mov eax, dword [ebp - 0x24]
mov ecx, dword [ebp - 0x20]
mov dword [ebp - 0x9bc], ecx
mov word [ebp - 0xc], ax
mov ecx, dword [0x1009b148]
sub ecx, 0x977a918f
movsx eax, word [ebp - 0xc]
cdq
sub eax, ecx
mov word [ebp - 0xc], ax
mov byte [ebp - 5], 1
movsx edx, word [0x1009b180]
add edx, dword [0x1009b188]
movsx eax, word [0x1009b180]
or eax, edx
mov word [0x1009b180], ax
mov ecx, dword [0x1009b148]
mov edx, 2
imul eax, edx, 0x36
mov word [eax + 0x101c0c30], cx
mov ecx, dword [ebp - 0x54]
sub ecx, 1
mov dword [ebp - 0x54], ecx
mov edx, dword [0x1009b1a8]
mov eax, dword [0x1009b1ac]
push 0x8c966
push 0xe34ef27f
push eax
push edx
call fcn.1006c090
mov ecx, eax
movsx eax, word [ebp - 0x10]
cdq
sub eax, ecx
mov word [ebp - 0x10], ax
mov edx, dword [ebp - 0xac]
mov eax, dword [ebp - 0xac]
imul eax, dword [ebp - 0x284]
lea ecx, [edx + eax + 0x2c5]
mov edx, dword [ebp - 0xac]
sub edx, dword [ebp - 0x284]
cmp ecx, edx
je 0x1000cc90
movzx eax, byte [0x1009b07e]
movsx ecx, word [0x1009b180]
cmp eax, ecx
jge 0x1000b2f7
mov dword [ebp - 0x288], 1
jmp 0x1000b301
mov dword [ebp - 0x288], 0
movzx edx, byte [0x1009b07e]
cmp edx, 0x38
jge 0x1000b319
mov dword [ebp - 0x28c], 1
jmp 0x1000b323
mov dword [ebp - 0x28c], 0
mov eax, dword [ebp - 0x288]
cmp eax, dword [ebp - 0x28c]
jl 0x1000b3bb
movsx eax, word [ebp - 0x10]
cdq
mov ecx, eax
sub ecx, dword [0x1009b178]
movsx eax, word [ebp - 0x10]
cdq
add eax, ecx
mov word [ebp - 0x10], ax
mov edx, dword [ebp - 0x34]
mov eax, dword [ebp - 0x30]
push 0x12357
push 0x603ea56b
push eax
push edx
call fcn.1006c090
mov dword [ebp - 0x40], eax
xor ecx, ecx
mov edx, dword [ebp - 0x60]
mov eax, dword [ebp - 0x5c]
add edx, dword [0x1009b148]
adc eax, ecx
mov ecx, dword [ebp - 0x60]
mov esi, dword [ebp - 0x5c]
or ecx, edx
or esi, eax
mov dword [ebp - 0x60], ecx
mov dword [ebp - 0x5c], esi
mov edx, dword [0x1009b130]
mov eax, dword [0x1009b134]
mov dword [0x1009b160], edx
mov dword [0x1009b164], eax
imul ecx, dword [ebp - 0x2c], 0x42
mov edx, dword [ebp - 0x54]
add edx, ecx
mov dword [ebp - 0x54], edx
movsx eax, word [0x1009b180]
imul ecx, eax, 0x22daa141
mov byte [ebp - 1], cl
jmp 0x1000b418
movsx edx, byte [ebp - 1]
cmp edx, dword [ebp - 0x40]
je 0x1000b418
mov eax, dword [ebp - 0x24]
mov ecx, dword [ebp - 0x20]
mov dword [ebp - 0x9c0], ecx
mov edx, 4
imul ecx, edx, 0x750f
mov dword [ecx + 0x10223810], eax
mov edx, dword [0x1009b140]
sub edx, 1
mov dword [0x1009b140], edx
movsx eax, word [ebp - 0x10]
sar eax, 7
mov word [0x1009b180], ax
mov eax, dword [ebp - 0x28]
cdq
mov ecx, dword [0x1009b1a8]
mov edx, dword [0x1009b1ac]
mov dword [ebp - 0x9c4], edx
add eax, ecx
mov dword [ebp - 0x40], eax
xor eax, eax
mov dword [0x1009b130], 0x97
mov dword [0x1009b134], eax
mov ecx, dword [0x1009b1a8]
mov edx, dword [0x1009b1ac]
mov dword [ebp - 0x83c], ecx
mov dword [ebp - 0x838], edx
mov eax, dword [ebp - 0x83c]
or eax, dword [ebp - 0x838]
je 0x1000b45b
movsx ecx, word [ebp - 0x14]
mov dword [ebp - 0x290], ecx
jmp 0x1000b468
movzx edx, byte [0x1009b07e]
mov dword [ebp - 0x290], edx
mov eax, dword [ebp - 0x290]
cdq
mov dword [ebp - 0x48], eax
mov dword [ebp - 0x44], edx
or eax, 0xffffffff
mov dword [0x1009b160], 0xffffff95
mov dword [0x1009b164], eax
mov ecx, dword [0x1009b188]
shl ecx, 7
mov dword [ebp - 0x58], ecx
mov ecx, dword [0x1009b130]
mov esi, dword [0x1009b134]
mov eax, dword [ebp - 0x40]
add eax, 1
cdq
mov dword [ebp - 0x844], ecx
mov dword [ebp - 0x840], esi
mov dword [ebp - 0x84c], eax
mov dword [ebp - 0x848], edx
mov edx, dword [ebp - 0x844]
cmp edx, dword [ebp - 0x84c]
jne 0x1000b82f
mov eax, dword [ebp - 0x840]
cmp eax, dword [ebp - 0x848]
jne 0x1000b82f
call dword [sym.imp.USER32.dll_GetFocus]
mov dword [ebp - 0xd0], eax
cmp dword [ebp - 0xd0], 0
je 0x1000b51d
mov ecx, dword [ebp - 0xd0]
push ecx
call dword [sym.imp.USER32.dll_IsWindow]
mov dword [ebp - 0x9c8], eax
mov edx, dword [ebp - 0xd0]
push edx
call dword [sym.imp.USER32.dll_IsWindowVisible]
mov dword [ebp - 0x9cc], eax
movzx eax, byte [ebp - 7]
test eax, eax
jle 0x1000b531
mov dword [ebp - 0x294], 1
jmp 0x1000b53b
mov dword [ebp - 0x294], 0
movzx ecx, byte [ebp - 7]
cmp ecx, 0x59
jle 0x1000b550
mov dword [ebp - 0x298], 1
jmp 0x1000b55a
mov dword [ebp - 0x298], 0
mov edx, dword [ebp - 0x294]
cmp edx, dword [ebp - 0x298]
jle 0x1000b647
mov eax, dword [0x1009b130]
mov ecx, dword [0x1009b134]
push 0
push 0x50a2cc39
push ecx
push eax
call fcn.1006c090
mov edx, dword [0x1009b1b0]
add edx, eax
mov dword [0x1009b1b0], edx
movsx eax, byte [0x1009b0bb]
cdq
mov ecx, eax
xor ecx, 0xa4f4dca
movsx eax, word [ebp - 0xc]
cdq
sub eax, ecx
mov word [ebp - 0xc], ax
movzx edx, byte [ebp - 7]
imul eax, edx, 0x7d810b3e
test eax, eax
jne 0x1000b5c8
mov dword [ebp - 0x29c], 1
jmp 0x1000b5d2
mov dword [ebp - 0x29c], 0
movzx ecx, word [0x1009b184]
movzx edx, byte [0x1009b0ef]
add ecx, edx
movsx eax, word [ebp - 0x1c]
movzx edx, byte [0x1009b07f]
imul eax, edx
or ecx, eax
jne 0x1000b600
mov dword [ebp - 0x2a0], 1
jmp 0x1000b60a
mov dword [ebp - 0x2a0], 0
mov eax, dword [0x1009b140]
add eax, 0x82
xor eax, dword [ebp - 0x29c]
and eax, dword [ebp - 0x2a0]
mov word [0x1009b184], ax
movsx ecx, word [ebp - 0x14]
add ecx, 0x2b2
mov byte [0x1009b07f], cl
mov dl, byte [0x1009b0ef]
sub dl, 1
mov byte [0x1009b0ef], dl
jmp 0x1000b682
cmp dword [ebp - 0x2c], 0
jne 0x1000b655
movsx eax, word [ebp - 0x10]
test eax, eax
je 0x1000b682
mov ecx, 0x520e2
mov dword [ebp - 0x24], 0xffcb6c48
mov dword [ebp - 0x20], ecx
mov edx, dword [0x1009b178]
sub edx, 0x242cab00
mov byte [0x1009b0ee], dl
movsx eax, word [ebp - 0x10]
shl eax, 6
mov byte [0x1009b0a6], al
mov eax, dword [0x1009b14c]
cdq
mov ecx, dword [ebp - 0x34]
mov esi, dword [ebp - 0x30]
push esi
push ecx
push edx
push eax
call fcn.1006c090
mov dword [0x1009b14c], eax
mov edx, dword [0x1009bc7c]
xor eax, eax
mov dword [ebp - 0x60], edx
mov dword [ebp - 0x5c], eax
mov ecx, 1
imul edx, ecx, 0x91
movzx eax, byte [edx + 0x101c09f0]
mov ecx, dword [0x1009b144]
imul ecx, eax
mov dword [0x1009b144], ecx
movzx edx, word [0x1009b184]
movzx eax, byte [ebp - 4]
imul edx, eax
movzx ecx, word [0x1009b184]
imul ecx, edx
mov word [0x1009b184], cx
xor edx, edx
mov dword [ebp - 0x24], 0x2b2b
mov dword [ebp - 0x20], edx
mov eax, dword [0x1009b198]
mov ecx, dword [0x1009b19c]
mov dword [ebp - 0x854], eax
mov dword [ebp - 0x850], ecx
cmp dword [ebp - 0x854], 1
jne 0x1000b82f
cmp dword [ebp - 0x850], 0
jne 0x1000b82f
mov edx, 0xffffad36
mov word [ebp - 0x18], dx
cmp dword [ebp - 0x28], 0
jne 0x1000b742
mov dword [ebp - 0x2a4], 1
jmp 0x1000b74c
mov dword [ebp - 0x2a4], 0
mov eax, dword [ebp - 0x24]
mov ecx, dword [ebp - 0x20]
push ecx
push eax
mov edx, dword [0x1009b17c]
push edx
mov eax, dword [0x1009b178]
push eax
call fcn.1006c090
mov ecx, eax
mov esi, edx
not ecx
not esi
movzx eax, byte [0x1009b01f]
sub eax, dword [ebp - 0x2a4]
cdq
push edx
push eax
push esi
push ecx
call fcn.1006c090
mov ecx, dword [ebp - 0x48]
mov esi, dword [ebp - 0x44]
add ecx, eax
adc esi, edx
mov dword [ebp - 0x24], ecx
mov dword [ebp - 0x20], esi
xor edx, edx
mov dword [0x1009b1a8], 0xb5d297c1
mov dword [0x1009b1ac], edx
movsx eax, byte [ebp - 2]
add eax, 0xc344
cdq
mov dword [0x1009b138], eax
mov dword [0x1009b13c], edx
jmp 0x1000b82f
xor ecx, ecx
mov dword [0x1009b130], 0x97
mov dword [0x1009b134], ecx
mov edx, dword [ebp - 0x34]
mov eax, dword [ebp - 0x30]
mov ecx, dword [0x1009b1ac]
sub edx, dword [0x1009b1a8]
sbb eax, ecx
mov dword [ebp - 0x34], edx
mov dword [ebp - 0x30], eax
movzx eax, byte [ebp - 3]
cdq
add eax, 0x912607c0
mov byte [ebp - 2], al
movsx eax, word [ebp - 0xc]
cdq
sub eax, dword [0x1009b178]
mov word [ebp - 0xc], ax
movzx eax, byte [ebp - 3]
cdq
sub eax, 0xc16de8ed
mov dword [0x1009b190], eax
movzx edx, byte [0x1009b07f]
mov eax, dword [ebp - 0x54]
not eax
sub edx, eax
mov byte [0x1009b0a7], dl
mov ecx, dword [0x1009b178]
and ecx, 0xb19a22d4
movsx eax, word [ebp - 0xc]
cdq
add eax, ecx
mov word [ebp - 0xc], ax
movsx edx, byte [ebp - 1]
movzx eax, byte [ebp - 6]
sub edx, eax
mov byte [ebp - 1], dl
movzx ecx, byte [0x1009b033]
add ecx, dword [0x1009b14c]
movzx edx, byte [0x1009b033]
imul edx, ecx
mov byte [0x1009b033], dl
mov eax, dword [0x1009b1b0]
not eax
movzx ecx, byte [0x1009b07f]
sub eax, ecx
sub eax, dword [0x1009b188]
mov dword [0x1009b140], eax
mov edx, dword [0x1009b138]
add edx, 0x879
mov eax, dword [0x1009b13c]
adc eax, 0
mov dword [0x1009b1a8], edx
mov dword [0x1009b1ac], eax
call fcn.1001c5a0
test eax, eax
jne 0x1000cc90
call dword [sym.imp.USER32.dll_GetCapture]
mov dword [0x1009b190], eax
mov ecx, 0xffffdf7b
mov word [0x1009b180], cx
mov dl, byte [0x1009b0a7]
sub dl, 1
mov byte [0x1009b0a7], dl
mov eax, dword [0x1009b1a8]
mov ecx, dword [0x1009b1ac]
mov dword [ebp - 0x48], eax
mov dword [ebp - 0x44], ecx
mov dl, byte [0x1009b033]
sub dl, 1
mov byte [0x1009b033], dl
movzx eax, byte [0x1009b0ee]
cdq
mov ecx, dword [0x1009b130]
mov esi, dword [0x1009b134]
push edx
push eax
push esi
push ecx
call fcn.1006c090
mov ecx, dword [0x1009b130]
mov esi, dword [0x1009b134]
sub ecx, eax
sbb esi, edx
mov dword [0x1009b130], ecx
mov dword [0x1009b134], esi
movsx eax, word [0x1009b180]
cdq
mov ecx, dword [ebp - 0x34]
mov esi, dword [ebp - 0x30]
add ecx, 0xdf7b
adc esi, 0
mov dword [ebp - 0x85c], eax
mov dword [ebp - 0x858], edx
mov dword [ebp - 0x864], ecx
mov dword [ebp - 0x860], esi
mov edx, dword [ebp - 0x85c]
cmp edx, dword [ebp - 0x864]
jne 0x1000bb39
mov eax, dword [ebp - 0x858]
cmp eax, dword [ebp - 0x860]
jne 0x1000bb39
mov ecx, dword [0x1009b130]
mov esi, dword [0x1009b134]
movsx eax, byte [ebp - 1]
add eax, 0x97
cdq
mov dword [ebp - 0x86c], ecx
mov dword [ebp - 0x868], esi
mov dword [ebp - 0x874], eax
mov dword [ebp - 0x870], edx
mov edx, dword [ebp - 0x86c]
cmp edx, dword [ebp - 0x874]
jne 0x1000bb39
mov eax, dword [ebp - 0x868]
cmp eax, dword [ebp - 0x870]
jne 0x1000bb39
mov dword [ebp - 0xb8], 0
jmp 0x1000ba61
mov ecx, dword [ebp - 0xb8]
add ecx, 1
mov dword [ebp - 0xb8], ecx
cmp dword [ebp - 0xb8], 0x1a
jge 0x1000bac5
mov edx, dword [0x1009b18c]
xor eax, eax
add edx, 0x77bc4201
adc eax, 0xb2945
mov dword [ebp - 0x24], edx
mov dword [ebp - 0x20], eax
mov ecx, dword [0x1009b140]
add ecx, 0xad9d
mov edx, dword [0x1009b140]
add edx, ecx
mov dword [0x1009b140], edx
mov eax, 4
imul ecx, eax, 0x3354
movsx edx, word [ebp - 0x1c]
add edx, dword [ecx + 0x10113008]
mov word [ebp - 0x1c], dx
mov eax, dword [0x1009b140]
add eax, 1
mov dword [0x1009b140], eax
jmp 0x1000ba52
jmp 0x1000bb39
mov edx, 0xffffdf7b
mov word [0x1009b180], dx
movzx eax, byte [0x1009b0ee]
imul eax, dword [ebp - 0x58]
movzx ecx, byte [0x1009b0ee]
or ecx, eax
mov byte [0x1009b0ee], cl
movsx edx, word [ebp - 0x18]
mov eax, 0x38bb
sub eax, edx
jne 0x1000bb80
xor ecx, ecx
mov dword [ebp - 0x884], 1
mov dword [ebp - 0x880], ecx
jmp 0x1000bb8b
xorps xmm0, xmm0
movlpd qword [ebp - 0x884], xmm0
movzx eax, byte [0x1009b07f]
cdq
mov ecx, eax
sub ecx, 0x551f4cc9
movsx eax, byte [ebp - 1]
cdq
add eax, dword [0x1009b138]
not eax
add ecx, eax
xor ecx, dword [ebp - 0x884]
mov byte [0x1009b07f], cl
movsx edx, byte [0x1009b0bb]
movsx eax, word [0x1009b180]
sub edx, eax
movsx ecx, byte [0x1009b0bb]
add ecx, edx
mov byte [0x1009b0bb], cl
mov edx, dword [0x1009bc7c]
xor eax, eax
mov dword [0x1009b168], edx
mov dword [0x1009b16c], eax
movsx ecx, byte [0x1009b0bb]
imul ecx, dword [0x1009b18c]
movsx edx, byte [0x1009b0bb]
add edx, ecx
mov byte [0x1009b0bb], dl
movzx eax, byte [ebp - 4]
cdq
mov ecx, dword [ebp - 0x60]
mov esi, dword [ebp - 0x5c]
mov dword [ebp - 0x88c], eax
mov dword [ebp - 0x888], edx
mov dword [ebp - 0x894], ecx
mov dword [ebp - 0x890], esi
mov edx, dword [ebp - 0x888]
cmp edx, dword [ebp - 0x890]
ja 0x1000bc52
jb 0x1000bc46
mov eax, dword [ebp - 0x88c]
cmp eax, dword [ebp - 0x894]
jae 0x1000bc52
mov dword [ebp - 0x2ac], 1
jmp 0x1000bc5c
mov dword [ebp - 0x2ac], 0
movzx ecx, byte [ebp - 4]
cmp ecx, 0x4c
jge 0x1000bc71
mov dword [ebp - 0x2b0], 1
jmp 0x1000bc7b
mov dword [ebp - 0x2b0], 0
mov edx, dword [ebp - 0x2ac]
cmp edx, dword [ebp - 0x2b0]
jl 0x1000bd38
movzx eax, byte [ebp - 4]
cmp dword [0x1009b170], eax
jae 0x1000bd38
movzx eax, byte [ebp - 4]
cdq
mov ecx, dword [0x1009b150]
mov esi, dword [0x1009b154]
not ecx
not esi
push esi
push ecx
push edx
push eax
call fcn.1006c090
mov dword [0x1009b198], eax
mov dword [0x1009b19c], edx
movzx edx, byte [0x1009b0ee]
test edx, edx
jne 0x1000bce5
xor eax, eax
mov dword [ebp - 0x89c], 1
mov dword [ebp - 0x898], eax
jmp 0x1000bcf0
xorps xmm0, xmm0
movlpd qword [ebp - 0x89c], xmm0
movzx eax, byte [ebp - 6]
cdq
mov ecx, dword [ebp - 0x24]
mov edx, dword [ebp - 0x20]
mov dword [ebp - 0x9d0], edx
not ecx
sub eax, ecx
mov ecx, dword [ebp - 0x89c]
sub ecx, eax
mov dword [0x1009b190], ecx
movzx eax, byte [0x1009b07f]
add eax, 0x95f1
cdq
mov dword [ebp - 0x48], eax
mov dword [ebp - 0x44], edx
mov edx, dword [ebp - 0x3c]
mov eax, dword [ebp - 0x38]
sub edx, 1
sbb eax, 0
mov dword [ebp - 0x3c], edx
mov dword [ebp - 0x38], eax
mov ecx, dword [0x1009bc7c]
mov dword [ebp - 0xbc], ecx
mov edx, 1
mov word [0x1009b158], dx
movsx eax, word [ebp - 0xc]
add eax, 0xc1
or eax, dword [0x1009b18c]
mov dword [0x1009b18c], eax
movzx ecx, byte [0x1009b07e]
movsx edx, byte [ebp - 2]
add ecx, edx
mov byte [0x1009b07f], cl
movzx eax, byte [0x1009b0ee]
sub eax, 0xdd
mov word [0x1009b184], ax
mov ecx, dword [ebp - 0x34]
mov edx, dword [ebp - 0x30]
mov dword [ebp - 0x9d4], edx
add ecx, 0xb23e737a
mov al, byte [ebp - 4]
shr al, cl
mov byte [ebp - 4], al
movzx ecx, word [0x1009b158]
mov dword [ebp - 0x2b4], ecx
cmp dword [ebp - 0x2b4], 0
je 0x1000bdc7
cmp dword [ebp - 0x2b4], 1
je 0x1000be2a
jmp 0x1000bebb
mov edx, dword [0x1009b130]
mov eax, dword [0x1009b134]
mov dword [ebp - 0x9d8], eax
add edx, 0x86f4
mov byte [0x1009b0ef], dl
movzx eax, byte [ebp - 6]
cdq
mov ecx, eax
mov edx, dword [0x1009b198]
mov eax, dword [0x1009b19c]
mov dword [ebp - 0x9dc], eax
add ecx, edx
movzx eax, byte [ebp - 6]
cdq
add eax, ecx
mov byte [ebp - 6], al
movsx ecx, word [ebp - 0xc]
movzx edx, byte [0x1009b033]
sub ecx, edx
mov word [ebp - 0xc], cx
xor eax, eax
mov dword [ebp - 0x24], 0x89f3
mov dword [ebp - 0x20], eax
jmp 0x1000bebb
mov ecx, dword [0x1009b190]
add ecx, 0x2ade
movsx edx, word [ebp - 0x14]
movsx eax, word [ebp - 0x18]
not eax
add edx, eax
not edx
imul ecx, edx
mov edx, dword [ebp - 0x54]
sub edx, dword [0x1009b18c]
movzx eax, byte [ebp - 5]
or edx, eax
sub ecx, edx
xor edx, edx
mov dword [ebp - 0x34], ecx
mov dword [ebp - 0x30], edx
movsx eax, word [ebp - 0x14]
test eax, eax
je 0x1000be7e
mov ecx, dword [0x1009b18c]
xor edx, edx
mov dword [ebp - 0x488], ecx
mov dword [ebp - 0x484], edx
jmp 0x1000be95
mov eax, dword [0x1009b130]
mov ecx, dword [0x1009b134]
mov dword [ebp - 0x488], eax
mov dword [ebp - 0x484], ecx
mov dl, byte [ebp - 0x488]
mov byte [ebp - 4], dl
movzx eax, byte [ebp - 7]
cdq
push edx
push eax
mov eax, dword [0x1009b164]
push eax
mov ecx, dword [0x1009b160]
push ecx
call fcn.1006c090
mov word [ebp - 0x18], ax
mov edx, dword [ebp - 0xbc]
add edx, 0x17d
mov dword [ebp - 0x540], edx
mov eax, dword [0x1009b144]
xor ecx, ecx
mov edx, dword [0x1009b150]
mov esi, dword [0x1009b154]
mov dword [ebp - 0x8a4], eax
mov dword [ebp - 0x8a0], ecx
mov dword [ebp - 0x8ac], edx
mov dword [ebp - 0x8a8], esi
mov eax, dword [ebp - 0x8a0]
cmp eax, dword [ebp - 0x8a8]
jb 0x1000c119
ja 0x1000bf1e
mov ecx, dword [ebp - 0x8a4]
cmp ecx, dword [ebp - 0x8ac]
jbe 0x1000c119
xor edx, edx
mov dword [0x1009b168], 2
mov dword [0x1009b16c], edx
mov eax, dword [0x1009b18c]
sub eax, 0x6a7d
mov dword [ebp - 0x54], eax
mov ecx, dword [ebp - 0x3c]
mov edx, dword [ebp - 0x38]
mov eax, dword [ebp - 0x24]
mov esi, dword [ebp - 0x20]
push esi
push eax
push edx
push ecx
call fcn.1006c090
mov dword [ebp - 0x3c], eax
mov dword [ebp - 0x38], edx
mov byte [0x1009b0bb], 0x1b
mov dword [0x1009b18c], 0x82d39171
mov ecx, dword [0x1009b168]
mov edx, dword [0x1009b16c]
mov dword [ebp - 0x74], ecx
mov dword [ebp - 0x70], edx
mov eax, dword [ebp - 0x74]
or eax, dword [ebp - 0x70]
je 0x1000bfa4
cmp dword [ebp - 0x74], 1
jne 0x1000bf8f
cmp dword [ebp - 0x70], 0
je 0x1000bfe5
cmp dword [ebp - 0x74], 2
jne 0x1000bf9f
cmp dword [ebp - 0x70], 0
je 0x1000c0b4
jmp 0x1000c117
movzx ecx, byte [0x1009b07f]
imul ecx, dword [0x1009b1a0]
xor edx, edx
mov dword [ebp - 0x24], ecx
mov dword [ebp - 0x20], edx
mov dword [ebp - 0x28], 0xdaa959a7
movzx eax, byte [ebp - 4]
imul eax, eax, 0x30d7efbe
cdq
mov dword [ebp - 0x48], eax
mov dword [ebp - 0x44], edx
mov cx, word [0x1009bc7c]
mov word [0x1009b180], cx
jmp 0x1000c117
mov edx, 4
mov word [ebp - 0x18], dx
movzx eax, byte [ebp - 5]
not eax
movzx ecx, byte [ebp - 5]
imul eax, ecx
add eax, 0x41436fa5
jne 0x1000c016
xor edx, edx
mov dword [ebp - 0x490], 1
mov dword [ebp - 0x48c], edx
jmp 0x1000c021
xorps xmm0, xmm0
movlpd qword [ebp - 0x490], xmm0
mov eax, dword [ebp - 0x490]
mov ecx, dword [ebp - 0x48c]
mov dword [0x1009b198], eax
mov dword [0x1009b19c], ecx
mov edx, dword [0x1009b130]
mov eax, dword [0x1009b134]
mov dword [ebp - 0x9e0], eax
add edx, 0xc4f56ac9
mov byte [0x1009b01f], dl
mov ecx, dword [ebp - 0x28]
sub ecx, 1
mov dword [ebp - 0x28], ecx
movzx edx, word [0x1009b184]
mov eax, dword [ebp - 0x54]
sub eax, edx
not eax
mov ecx, eax
movzx eax, byte [0x1009b0ee]
cdq
mov edx, dword [ebp - 0x24]
mov esi, dword [ebp - 0x20]
mov dword [ebp - 0x9e4], esi
xor eax, edx
add ecx, eax
movsx eax, word [ebp - 0x1c]
cdq
mov edx, dword [0x1009b1a8]
mov esi, dword [0x1009b1ac]
mov dword [ebp - 0x9e8], esi
sub edx, eax
add ecx, edx
mov dword [0x1009b14c], ecx
mov eax, dword [ebp - 0x28]
add eax, 0x38198ed6
mov dword [ebp - 0x2c], eax
jmp 0x1000c117
movsx eax, word [0x1009b180]
cdq
push 0x62aa5
push 0x2058b992
push edx
push eax
call fcn.1006c090
mov dword [ebp - 0x58], eax
mov ecx, dword [0x1009bc7c]
mov dword [ebp - 0x2c], ecx
mov edx, dword [ebp - 0x24]
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x9ec], eax
mov dword [ebp - 0x28], edx
movzx ecx, byte [ebp - 7]
add ecx, 0x6d89
mov word [0x1009b180], cx
movsx edx, word [ebp - 0xc]
movsx eax, byte [ebp - 1]
xor edx, eax
movsx ecx, word [ebp - 0xc]
sub ecx, edx
mov word [ebp - 0xc], cx
movsx edx, word [ebp - 0xc]
mov dword [0x1009b14c], edx
jmp 0x1000c15e
cmp dword [ebp - 0x54], 0
je 0x1000c15e
movzx eax, byte [0x1009b0a6]
add eax, 0x69
cdq
mov dword [ebp - 0x50], eax
mov dword [ebp - 0x4c], edx
imul eax, dword [0x1009b144], 0x33
mov word [ebp - 0x18], ax
mov cx, word [0x1009bc7c]
mov word [ebp - 0x14], cx
mov edx, 4
imul eax, edx, 0x2950
mov eax, dword [eax + 0x102fea60]
cdq
mov dword [ebp - 0x50], eax
mov dword [ebp - 0x4c], edx
mov ecx, dword [ebp - 0xbc]
add ecx, 0x3ec
mov dword [ebp - 0x2b8], ecx
mov eax, dword [ebp - 0x28]
cdq
add eax, 0x95f34190
adc edx, 0x89278
mov dword [0x1009b130], eax
mov dword [0x1009b134], edx
mov edx, 8
imul eax, edx, 0x12
mov ecx, dword [ebp - 0x50]
mov edx, dword [ebp - 0x4c]
mov dword [eax + 0x102592e0], ecx
mov dword [eax + 0x102592e4], edx
movsx eax, word [ebp - 0xc]
movsx ecx, word [ebp - 0xc]
imul eax, ecx
movsx edx, word [ebp - 0xc]
sub edx, eax
mov word [ebp - 0xc], dx
mov eax, dword [0x1009bc7c]
xor ecx, ecx
mov dword [ebp - 0x24], eax
mov dword [ebp - 0x20], ecx
mov edx, dword [0x1009b198]
mov eax, dword [0x1009b19c]
sub edx, 0xdf
sbb eax, 0
mov dword [ebp - 0x50], edx
mov dword [ebp - 0x4c], eax
mov ecx, dword [0x1009b138]
sub ecx, 0xea20407a
mov edx, dword [0x1009b13c]
sbb edx, 0x7062d
mov dword [0x1009b138], ecx
mov dword [0x1009b13c], edx
mov eax, dword [ebp - 0xbc]
add eax, 0x380
mov dword [ebp - 0x9f0], eax
movzx ecx, byte [0x1009b07e]
sub ecx, 0x4ed8ad7e
xor edx, edx
mov eax, dword [0x1009b130]
mov esi, dword [0x1009b134]
add eax, ecx
adc esi, edx
mov dword [0x1009b130], eax
mov dword [0x1009b134], esi
movzx eax, byte [0x1009b0ee]
shl eax, 4
cdq
mov dword [ebp - 0x48], eax
mov dword [ebp - 0x44], edx
movzx eax, byte [0x1009b033]
cdq
mov ecx, eax
xor ecx, dword [0x1009b178]
movzx eax, byte [0x1009b033]
cdq
and eax, ecx
mov byte [0x1009b033], al
mov edx, dword [ebp - 0x2b8]
sub edx, dword [ebp - 0x2b8]
mov eax, dword [ebp - 0x540]
add eax, 0x3c3
and eax, 0x1e4
cmp edx, eax
je 0x1000cc90
cmp dword [0x1009b188], 0
je 0x1000c321
mov dword [ebp - 0xc0], 0x1db
jmp 0x1000c2ba
mov ecx, dword [ebp - 0xc0]
sub ecx, 1
mov dword [ebp - 0xc0], ecx
cmp dword [ebp - 0xc0], 0
jle 0x1000c31c
movzx eax, word [0x1009b158]
cdq
mov edx, dword [ebp - 0x3c]
mov ecx, dword [ebp - 0x38]
mov dword [ebp - 0x9f4], ecx
add eax, edx
not eax
mov byte [0x1009b0ba], al
movsx edx, byte [0x1009b0bb]
sub edx, 0x89
mov word [ebp - 0x1c], dx
mov eax, dword [0x1009bc7c]
xor ecx, ecx
mov dword [ebp - 0x48], eax
mov dword [ebp - 0x44], ecx
mov edx, dword [0x1009b148]
sub edx, 0x7b
movsx eax, word [ebp - 0x18]
sub eax, edx
mov word [ebp - 0x18], ax
mov cl, byte [ebp - 4]
add cl, 1
mov byte [ebp - 4], cl
jmp 0x1000c2ab
jmp 0x1000c5fe
movsx edx, word [ebp - 0x14]
movzx eax, word [0x1009b158]
cmp edx, eax
jle 0x1000c4ac
cmp dword [0x1009b14c], 0
jne 0x1000c351
xor ecx, ecx
mov dword [ebp - 0x498], 1
mov dword [ebp - 0x494], ecx
jmp 0x1000c35c
xorps xmm0, xmm0
movlpd qword [ebp - 0x498], xmm0
mov edx, dword [0x1009b190]
sub edx, dword [ebp - 0x58]
jne 0x1000c37b
xor eax, eax
mov dword [ebp - 0x4a0], 1
mov dword [ebp - 0x49c], eax
jmp 0x1000c386
xorps xmm0, xmm0
movlpd qword [ebp - 0x4a0], xmm0
mov ecx, dword [ebp - 0x50]
sub ecx, dword [0x1009b178]
mov edx, dword [ebp - 0x4c]
sbb edx, dword [0x1009b17c]
mov dword [ebp - 0x8b4], ecx
mov dword [ebp - 0x8b0], edx
mov eax, dword [ebp - 0x8b4]
or eax, dword [ebp - 0x8b0]
jne 0x1000c3be
mov dword [ebp - 0x2bc], 1
jmp 0x1000c3c8
mov dword [ebp - 0x2bc], 0
mov ecx, dword [ebp - 0x24]
mov edx, dword [ebp - 0x20]
xor ecx, dword [ebp - 0x498]
xor edx, dword [ebp - 0x494]
mov eax, dword [ebp - 0x49c]
push eax
mov eax, dword [ebp - 0x4a0]
push eax
push edx
push ecx
call fcn.1006c090
mov ecx, eax
mov esi, edx
movsx eax, word [ebp - 0x10]
imul eax, dword [0x1009b14c]
add eax, dword [ebp - 0x2bc]
cdq
sub ecx, eax
sbb esi, edx
mov dword [0x1009b168], ecx
mov dword [0x1009b16c], esi
mov edx, dword [0x1009b150]
mov eax, dword [0x1009b154]
sub edx, 0x91
sbb eax, 0
mov dword [0x1009b1a8], edx
mov dword [0x1009b1ac], eax
movzx eax, byte [0x1009b0ee]
not eax
cdq
mov ecx, dword [0x1009b1a8]
mov edx, dword [0x1009b1ac]
mov dword [ebp - 0x9f8], edx
and ecx, 0xe8ba772d
add eax, ecx
mov word [ebp - 0x10], ax
movsx eax, byte [ebp - 1]
test eax, eax
jne 0x1000c470
mov dword [ebp - 0x2c0], 1
jmp 0x1000c47a
mov dword [ebp - 0x2c0], 0
movzx ecx, byte [ebp - 5]
sub ecx, dword [ebp - 0x2c0]
mov dword [0x1009b18c], ecx
movsx eax, byte [0x1009b0ba]
movzx edx, byte [ebp - 4]
not edx
and eax, edx
not eax
cdq
mov dword [0x1009b168], eax
mov dword [0x1009b16c], edx
jmp 0x1000c5fe
movsx eax, word [ebp - 0x18]
movsx ecx, word [ebp - 0x14]
cmp eax, ecx
jle 0x1000c50e
imul edx, dword [ebp - 0x54], 0xf5
mov word [0x1009b158], dx
cmp dword [0x1009b1a0], 0
jne 0x1000c4db
mov dword [ebp - 0x2c4], 1
jmp 0x1000c4e5
mov dword [ebp - 0x2c4], 0
movzx eax, byte [ebp - 3]
not eax
add eax, dword [ebp - 0x2c4]
mov word [ebp - 0x1c], ax
mov byte [0x1009b0a7], 4
movsx ecx, word [0x1009b180]
xor ecx, 0x28
mov byte [ebp - 2], cl
jmp 0x1000c5fe
movzx edx, byte [ebp - 6]
movzx eax, byte [0x1009b07f]
cmp edx, eax
jle 0x1000c529
mov dword [ebp - 0x2c8], 1
jmp 0x1000c533
mov dword [ebp - 0x2c8], 0
movsx ecx, word [ebp - 0x14]
test ecx, ecx
je 0x1000c54d
cmp dword [ebp - 0x54], 0
je 0x1000c54d
mov dword [ebp - 0x2cc], 1
jmp 0x1000c557
mov dword [ebp - 0x2cc], 0
mov edx, dword [ebp - 0x2c8]
cmp edx, dword [ebp - 0x2cc]
jl 0x1000c5fe
mov eax, dword [0x1009b1b0]
mov ecx, 1
imul edx, ecx, 0x5de
mov byte [edx + 0x102088e8], al
movzx eax, byte [0x1009b0ef]
mov dword [0x1009b170], eax
movzx ecx, word [0x1009b158]
add ecx, 0x78e50bb4
movsx edx, byte [ebp - 1]
imul edx, ecx
mov byte [ebp - 1], dl
movsx eax, byte [0x1009b0a7]
test eax, eax
jne 0x1000c5b9
mov dword [ebp - 0x2d0], 1
jmp 0x1000c5c3
mov dword [ebp - 0x2d0], 0
movsx ecx, byte [ebp - 2]
imul ecx, dword [ebp - 0x58]
movzx edx, byte [0x1009b033]
mov eax, dword [0x1009b188]
xor eax, edx
and ecx, eax
imul ecx, dword [ebp - 0x2d0]
mov byte [ebp - 1], cl
movsx eax, byte [0x1009b0bb]
cdq
mov ecx, dword [ebp - 0x48]
mov edx, dword [ebp - 0x44]
mov dword [ebp - 0x9fc], edx
xor eax, ecx
mov byte [ebp - 1], al
mov eax, 0x11
mov word [0x1009b180], ax
mov dword [ebp - 0xc4], 0x3c7
jmp 0x1000c624
mov ecx, dword [ebp - 0xc4]
sub ecx, 1
mov dword [ebp - 0xc4], ecx
cmp dword [ebp - 0xc4], 0
jle 0x1000c64e
movsx edx, byte [0x1009b0a7]
push edx
call dword [sym.imp.KERNEL32.dll_IsValidCodePage]
mov dword [0x1009b1a0], eax
mov al, byte [0x1009b0a6]
add al, 1
mov byte [0x1009b0a6], al
jmp 0x1000c615
movsx ecx, word [0x1009b180]
add ecx, dword [ebp - 0x40]
cmp dword [0x1009b190], ecx
jne 0x1000cbec
call dword [sym.imp.USER32.dll_GetForegroundWindow]
xor edx, edx
mov dword [0x1009b160], eax
mov dword [0x1009b164], edx
mov ecx, dword [0x1009b150]
mov esi, dword [0x1009b154]
movsx eax, word [0x1009b180]
cdq
mov dword [ebp - 0x8bc], ecx
mov dword [ebp - 0x8b8], esi
mov dword [ebp - 0x8c4], eax
mov dword [ebp - 0x8c0], edx
mov edx, dword [ebp - 0x8b8]
cmp edx, dword [ebp - 0x8c0]
ja 0x1000c6cd
jb 0x1000c6c1
mov eax, dword [ebp - 0x8bc]
cmp eax, dword [ebp - 0x8c4]
ja 0x1000c6cd
mov dword [ebp - 0x2d4], 1
jmp 0x1000c6d7
mov dword [ebp - 0x2d4], 0
mov ecx, dword [0x1009b150]
mov edx, dword [0x1009b154]
mov dword [ebp - 0x8cc], ecx
mov dword [ebp - 0x8c8], edx
cmp dword [ebp - 0x8c8], 0
ja 0x1000c70f
jb 0x1000c703
cmp dword [ebp - 0x8cc], 4
ja 0x1000c70f
mov dword [ebp - 0x2d8], 1
jmp 0x1000c719
mov dword [ebp - 0x2d8], 0
mov eax, dword [ebp - 0x2d4]
cmp eax, dword [ebp - 0x2d8]
jge 0x1000c93c
movzx ecx, byte [0x1009b0ee]
test ecx, ecx
jne 0x1000c742
mov dword [ebp - 0x2dc], 1
jmp 0x1000c74c
mov dword [ebp - 0x2dc], 0
movzx edx, byte [0x1009b033]
movsx eax, word [0x1009b180]
cmp edx, eax
jl 0x1000c76a
mov dword [ebp - 0x2e0], 1
jmp 0x1000c774
mov dword [ebp - 0x2e0], 0
mov ecx, dword [0x1009b14c]
not ecx
imul ecx, dword [ebp - 0x2dc]
cmp ecx, dword [ebp - 0x2e0]
jne 0x1000c797
mov dword [ebp - 0x2e4], 1
jmp 0x1000c7a1
mov dword [ebp - 0x2e4], 0
movsx edx, word [ebp - 0x10]
cmp edx, dword [ebp - 0x2e4]
je 0x1000c8a0
cmp dword [ebp - 0x54], 0
jne 0x1000c7c3
mov dword [ebp - 0x2ec], 1
jmp 0x1000c7cd
mov dword [ebp - 0x2ec], 0
cmp dword [ebp - 0x28], 0
jne 0x1000c7df
mov dword [ebp - 0x2e8], 1
jmp 0x1000c7e9
mov dword [ebp - 0x2e8], 0
mov eax, dword [ebp - 0x2c]
imul eax, dword [ebp - 0x2e8]
movsx ecx, byte [ebp - 1]
movzx edx, byte [0x1009b0ef]
xor ecx, edx
imul eax, ecx
test eax, eax
jne 0x1000c813
mov dword [ebp - 0x2f0], 1
jmp 0x1000c81d
mov dword [ebp - 0x2f0], 0
mov eax, dword [ebp - 0x54]
imul eax, dword [ebp - 0x2ec]
not eax
movsx ecx, byte [0x1009b0bb]
not ecx
sub eax, ecx
imul eax, dword [ebp - 0x2f0]
not eax
mov dword [ebp - 0x2c], eax
movzx edx, byte [ebp - 6]
movzx eax, byte [ebp - 5]
add edx, eax
mov byte [ebp - 6], dl
movzx ecx, byte [0x1009b0ef]
add ecx, dword [0x1009b140]
movzx edx, byte [0x1009b0ef]
xor edx, ecx
mov byte [0x1009b0ef], dl
movzx eax, byte [0x1009b0a6]
cdq
mov ecx, dword [ebp - 0x3c]
mov edx, dword [ebp - 0x38]
mov dword [ebp - 0xa00], edx
add eax, ecx
mov dl, byte [0x1009b0a6]
mov ecx, eax
shr dl, cl
mov byte [0x1009b0a6], dl
xor eax, eax
mov dword [ebp - 0x50], 0xf594b771
mov dword [ebp - 0x4c], eax
jmp 0x1000c93a
mov ecx, dword [ebp - 0x48]
mov edx, dword [ebp - 0x44]
mov dword [ebp - 0x8d4], ecx
mov dword [ebp - 0x8d0], edx
mov eax, dword [ebp - 0x8d4]
or eax, dword [ebp - 0x8d0]
jne 0x1000c93a
mov cl, byte [0x1009bc7c]
mov byte [0x1009b07e], cl
movsx edx, byte [ebp - 1]
movzx eax, byte [0x1009b033]
imul edx, eax
movsx ecx, byte [ebp - 1]
imul ecx, edx
mov byte [ebp - 1], cl
movzx edx, byte [0x1009b0ee]
imul eax, edx, 0x3cab689a
add eax, dword [0x1009b170]
mov dword [0x1009b170], eax
mov ecx, dword [ebp - 0x34]
mov edx, dword [ebp - 0x30]
sub ecx, 0x2d26baed
sbb edx, 0
mov dword [ebp - 0x60], ecx
mov dword [ebp - 0x5c], edx
xor eax, eax
mov ecx, dword [0x1009b138]
sub ecx, dword [0x1009b144]
mov edx, dword [0x1009b13c]
sbb edx, eax
mov dword [0x1009b138], ecx
mov dword [0x1009b13c], edx
mov byte [0x1009b0ee], 0xf5
jmp 0x1000c9af
mov eax, dword [0x1009b144]
and eax, 0x4e
mov word [ebp - 0x14], ax
movsx ecx, word [ebp - 0x1c]
sub ecx, 0x18
mov word [0x1009b184], cx
mov edx, dword [ebp - 0x24]
mov eax, dword [ebp - 0x20]
add edx, 0x7d7c
adc eax, 0
mov dword [0x1009b178], edx
mov dword [0x1009b17c], eax
mov ecx, dword [0x1009bc7c]
mov dword [0x1009b148], ecx
mov edx, dword [0x1009bc7c]
mov dword [ebp - 0x54], edx
mov eax, 2
imul ecx, eax, 0x19
movzx eax, word [ecx + 0x1009bc80]
cdq
mov ecx, dword [0x1009b138]
sub ecx, eax
mov eax, dword [0x1009b13c]
sbb eax, edx
mov dword [0x1009b138], ecx
mov dword [0x1009b13c], eax
mov ecx, dword [ebp - 0x40]
add ecx, 0x8349
cmp dword [0x1009b1b0], ecx
jne 0x1000cbec
movzx eax, byte [0x1009b0a6]
cdq
mov dword [ebp - 0x8dc], eax
mov dword [ebp - 0x8d8], edx
mov edx, dword [0x1009b13c]
cmp edx, dword [ebp - 0x8d8]
jb 0x1000cacb
ja 0x1000c9fd
mov eax, dword [0x1009b138]
cmp eax, dword [ebp - 0x8dc]
jb 0x1000cacb
mov dword [ebp - 0xc8], 0x408
movzx ecx, word [0x1009b184]
sub ecx, dword [ebp - 0x2c]
movzx edx, byte [0x1009b0a6]
not edx
add ecx, edx
mov byte [ebp - 3], cl
movsx eax, byte [ebp - 1]
movsx ecx, word [ebp - 0x18]
add eax, ecx
movsx edx, byte [ebp - 1]
sub edx, eax
mov byte [ebp - 1], dl
mov eax, dword [ebp - 0x40]
cdq
mov ecx, dword [ebp - 0x44]
add eax, dword [ebp - 0x48]
adc edx, ecx
mov dword [0x1009b168], eax
mov dword [0x1009b16c], edx
cmp dword [ebp - 0xc8], 0x312
jle 0x1000cac6
mov edx, dword [ebp - 0x54]
sub edx, dword [ebp - 0x54]
mov dword [ebp - 0x54], edx
movzx eax, byte [ebp - 3]
test eax, eax
jne 0x1000ca72
mov dword [ebp - 0x2f4], 1
jmp 0x1000ca7c
mov dword [ebp - 0x2f4], 0
movzx eax, byte [0x1009b07f]
sub eax, dword [ebp - 0x2f4]
cdq
mov ecx, dword [ebp - 0x3c]
mov edx, dword [ebp - 0x38]
mov dword [ebp - 0xa04], edx
add eax, ecx
mov word [ebp - 0x14], ax
movsx eax, byte [0x1009b0bb]
imul eax, dword [0x1009b18c]
or eax, dword [0x1009b18c]
mov dword [0x1009b18c], eax
mov ecx, dword [ebp - 0xc8]
sub ecx, 1
mov dword [ebp - 0xc8], ecx
jmp 0x1000ca49
jmp 0x1000cb6e
mov edx, dword [0x1009b150]
mov eax, dword [0x1009b154]
not edx
not eax
mov dword [ebp - 0x8e4], edx
mov dword [ebp - 0x8e0], eax
mov ecx, dword [ebp - 0x8e4]
or ecx, dword [ebp - 0x8e0]
je 0x1000cb6e
movsx edx, word [ebp - 0x1c]
add edx, 0xcc08bdf
xor eax, eax
mov dword [0x1009b138], edx
mov dword [0x1009b13c], eax
mov cl, byte [0x1009bc7c]
mov byte [ebp - 2], cl
movzx edx, word [0x1009b184]
movsx eax, word [ebp - 0xc]
not eax
sub edx, eax
mov dword [0x1009b1b0], edx
mov ecx, dword [ebp - 0x34]
mov edx, dword [ebp - 0x30]
add ecx, 1
adc edx, 0
mov dword [ebp - 0x34], ecx
mov dword [ebp - 0x30], edx
push 0x1a04d
push 0x3f1356d
mov eax, dword [ebp - 0x4c]
push eax
mov ecx, dword [ebp - 0x50]
push ecx
call fcn.1006c090
mov dword [0x1009b130], eax
mov dword [0x1009b134], edx
movzx edx, word [0x1009b184]
add edx, 0x79d69c9b
mov word [ebp - 0xc], dx
jmp 0x1000c5fe
mov edx, dword [0x1009b144]
xor eax, eax
sub edx, 0x82045a5
sbb eax, 0xc5d47
mov dword [0x1009b198], edx
mov dword [0x1009b19c], eax
mov eax, dword [ebp - 0x2c]
cdq
mov ecx, dword [ebp - 0x60]
mov esi, dword [ebp - 0x5c]
push edx
push eax
push esi
push ecx
call fcn.1006c090
mov dword [ebp - 0x60], eax
mov dword [ebp - 0x5c], edx
movsx eax, byte [ebp - 1]
cdq
mov ecx, dword [ebp - 0x50]
sub ecx, eax
mov eax, dword [ebp - 0x4c]
sbb eax, edx
add ecx, dword [ebp - 0x50]
adc eax, dword [ebp - 0x4c]
mov dword [ebp - 0x50], ecx
mov dword [ebp - 0x4c], eax
mov ecx, 1
imul edx, ecx, 0xa3
movzx eax, byte [edx + 0x101c09f0]
movzx ecx, byte [ebp - 6]
sub ecx, eax
mov byte [ebp - 6], cl
mov edx, dword [ebp - 0x34]
mov eax, dword [ebp - 0x30]
mov ecx, 8
imul ecx, ecx, 0x21b2
mov dword [ecx + 0x10270080], edx
mov dword [ecx + 0x10270084], eax
movsx edx, word [ebp - 0xc]
imul eax, edx, 0xdef9
movsx ecx, byte [ebp - 2]
add ecx, eax
mov byte [ebp - 2], cl
xor eax, eax
jmp 0x1000e948
jmp 0x1000e943
call dword [sym.imp.USER32.dll_GetFocus]
mov dword [ebp - 0x300], eax
mov dword [ebp - 0x548], 0
cmp dword [ebp - 0x300], 0
je 0x1000ccdf
mov dword [ebp - 0x544], 1
mov edx, dword [ebp - 0x544]
push edx
mov eax, dword [ebp - 0x548]
push eax
mov ecx, dword [ebp - 0x300]
push ecx
call dword [sym.imp.USER32.dll_GetUpdateRect]
mov dword [ebp - 0xa08], eax
movsx edx, word [0x1009b180]
test edx, edx
jge 0x1000cdd8
mov eax, dword [ebp - 0x40]
not eax
movzx ecx, byte [0x1009b07f]
cmp eax, ecx
jg 0x1000cd4a
movsx edx, byte [ebp - 1]
movzx eax, byte [0x1009b0ef]
sub edx, eax
movsx ecx, byte [ebp - 1]
or ecx, edx
mov byte [ebp - 1], cl
mov eax, dword [ebp - 0x50]
mov edx, dword [ebp - 0x4c]
mov cl, 7
call fcn.1006c1a0
mov dword [ebp - 0x58], eax
movzx edx, byte [0x1009b07e]
imul edx, dword [0x1009b144]
mov byte [0x1009b07e], dl
mov eax, dword [ebp - 0x2c]
add eax, 0x74
cdq
mov dword [ebp - 0x24], eax
mov dword [ebp - 0x20], edx
jmp 0x1000cdd6
mov eax, dword [ebp - 0x48]
mov ecx, dword [ebp - 0x44]
mov dword [ebp - 0x8ec], eax
mov dword [ebp - 0x8e8], ecx
mov edx, dword [ebp - 0x8ec]
or edx, dword [ebp - 0x8e8]
je 0x1000cdd6
mov ax, word [0x1009b180]
mov word [ebp - 0x10], ax
movzx eax, byte [0x1009b0ee]
sub eax, 0x3a3e1e3f
cdq
mov ecx, dword [ebp - 0x24]
mov esi, dword [ebp - 0x20]
sub ecx, eax
sbb esi, edx
mov dword [ebp - 0x24], ecx
mov dword [ebp - 0x20], esi
mov edx, dword [ebp - 0x28]
sub edx, 1
mov dword [0x1009b18c], edx
mov eax, dword [0x1009b1b0]
add eax, 0x1956
mov dword [ebp - 0x28], eax
movzx ecx, word [0x1009b184]
test ecx, ecx
je 0x1000cdc0
mov edx, dword [ebp - 0x58]
mov dword [ebp - 0x304], edx
jmp 0x1000cdca
movsx eax, word [ebp - 0x14]
mov dword [ebp - 0x304], eax
mov cl, byte [ebp - 0x304]
mov byte [0x1009b0ef], cl
jmp 0x1000ce45
movzx eax, byte [0x1009b033]
cdq
mov ecx, 8
imul ecx, ecx, 0xa
mov dword [ecx + 0x101c0bc0], eax
mov dword [ecx + 0x101c0bc4], edx
mov dl, byte [0x1009bc7c]
mov byte [ebp - 4], dl
mov eax, dword [ebp - 0x28]
cdq
mov ecx, eax
sub ecx, 0xfc15e1e0
movsx eax, byte [ebp - 1]
cdq
sub eax, ecx
mov byte [ebp - 1], al
mov edx, dword [0x1009b1a0]
xor edx, 0x607b841c
mov dword [0x1009b144], edx
mov eax, dword [0x1009b188]
cdq
mov ecx, dword [ebp - 0x34]
mov esi, dword [ebp - 0x30]
sub ecx, eax
sbb esi, edx
mov edx, dword [ebp - 0x34]
mov eax, dword [ebp - 0x30]
add edx, ecx
adc eax, esi
mov dword [ebp - 0x34], edx
mov dword [ebp - 0x30], eax
mov dword [0x1009b140], 0x8349
movzx ecx, byte [0x1009b07e]
movzx edx, word [0x1009b158]
add ecx, edx
mov byte [0x1009b07e], cl
mov eax, dword [0x1009b150]
mov ecx, dword [0x1009b154]
mov edx, dword [ebp - 0x44]
add eax, dword [ebp - 0x48]
adc ecx, edx
mov edx, dword [0x1009b150]
mov esi, dword [0x1009b154]
sub edx, eax
sbb esi, ecx
mov dword [0x1009b150], edx
mov dword [0x1009b154], esi
xor eax, eax
mov dword [0x1009b130], 0xbd68f879
mov dword [0x1009b134], eax
movsx ecx, word [0x1009b180]
movsx edx, byte [ebp - 1]
mov eax, dword [0x1009b140]
add eax, edx
cmp ecx, eax
jne 0x1000d32e
cmp dword [0x1009b14c], 0
jne 0x1000cedc
xor ecx, ecx
mov dword [ebp - 0x4a8], 1
mov dword [ebp - 0x4a4], ecx
jmp 0x1000cee7
xorps xmm0, xmm0
movlpd qword [ebp - 0x4a8], xmm0
mov edx, dword [0x1009b130]
mov eax, dword [0x1009b134]
add edx, dword [ebp - 0x4a8]
adc eax, dword [ebp - 0x4a4]
mov dword [ebp - 0x8f4], edx
mov dword [ebp - 0x8f0], eax
mov ecx, dword [ebp - 0x8f4]
or ecx, dword [ebp - 0x8f0]
je 0x1000cf69
cmp dword [0x1009b170], 0
jne 0x1000cf2d
mov dword [ebp - 0x308], 1
jmp 0x1000cf37
mov dword [ebp - 0x308], 0
mov edx, dword [ebp - 0x308]
sub edx, dword [0x1009b190]
je 0x1000cf69
movsx eax, byte [ebp - 1]
cmp dword [0x1009b190], eax
ja 0x1000cf64
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessorNumber]
xor ecx, ecx
mov dword [0x1009b138], eax
mov dword [0x1009b13c], ecx
jmp 0x1000d007
movsx eax, word [ebp - 0x1c]
cdq
mov ecx, dword [ebp - 0x48]
mov esi, dword [ebp - 0x44]
sub ecx, eax
sbb esi, edx
movzx eax, byte [ebp - 7]
cdq
mov dword [ebp - 0x8fc], ecx
mov dword [ebp - 0x8f8], esi
mov dword [ebp - 0x904], eax
mov dword [ebp - 0x900], edx
mov edx, dword [ebp - 0x8fc]
cmp edx, dword [ebp - 0x904]
jne 0x1000d007
mov eax, dword [ebp - 0x8f8]
cmp eax, dword [ebp - 0x900]
jne 0x1000d007
mov ecx, dword [ebp - 0x48]
mov edx, dword [ebp - 0x44]
push 0xdc819
push 0x69ee3368
push edx
push ecx
call fcn.1006c090
mov ecx, dword [ebp - 0x34]
mov esi, dword [ebp - 0x30]
add ecx, eax
adc esi, edx
mov dword [ebp - 0x34], ecx
mov dword [ebp - 0x30], esi
xor edx, edx
mov dword [ebp - 0x50], 0xca109678
mov dword [ebp - 0x4c], edx
mov eax, dword [ebp - 0x28]
add eax, 1
mov dword [ebp - 0x28], eax
mov ecx, dword [ebp - 0x58]
xor ecx, 0x906e
xor edx, edx
mov dword [ebp - 0x50], ecx
mov dword [ebp - 0x4c], edx
mov eax, dword [ebp - 0x28]
add eax, 1
mov dword [ebp - 0x28], eax
movsx ecx, word [ebp - 0xc]
cmp ecx, dword [ebp - 0x28]
jle 0x1000d01c
mov dword [ebp - 0x30c], 1
jmp 0x1000d026
mov dword [ebp - 0x30c], 0
movsx edx, word [ebp - 0xc]
cmp edx, 0x3e
jle 0x1000d03b
mov dword [ebp - 0x310], 1
jmp 0x1000d045
mov dword [ebp - 0x310], 0
mov eax, dword [ebp - 0x30c]
cmp eax, dword [ebp - 0x310]
jne 0x1000d126
push 0x1007e490
call dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
xor ecx, ecx
mov dword [0x1009b138], eax
mov dword [0x1009b13c], ecx
mov edx, dword [ebp - 0x2c]
cmp dword [0x1009b1b0], edx
jae 0x1000d086
mov dword [ebp - 0x314], 1
jmp 0x1000d090
mov dword [ebp - 0x314], 0
cmp dword [ebp - 0x314], 0x8df78eb5
je 0x1000d0a8
mov dword [ebp - 0x318], 1
jmp 0x1000d0b2
mov dword [ebp - 0x318], 0
cmp dword [ebp - 0x318], 0xbba61158
jbe 0x1000d0cb
call dword [sym.imp.KERNEL32.dll_GetCommandLineA]
mov byte [0x1009b0bb], al
jmp 0x1000d121
movzx eax, byte [ebp - 4]
not eax
movzx ecx, byte [ebp - 7]
cmp eax, ecx
jge 0x1000d121
mov dword [ebp - 0x58], 0x4a
mov edx, dword [0x1009b178]
add edx, 0xcffe
mov eax, dword [0x1009b17c]
adc eax, 0
mov dword [ebp - 0x24], edx
mov dword [ebp - 0x20], eax
movzx eax, word [0x1009b184]
add eax, 0x9e
cdq
mov ecx, dword [0x1009b178]
sub ecx, eax
mov eax, dword [0x1009b17c]
sbb eax, edx
mov dword [0x1009b178], ecx
mov dword [0x1009b17c], eax
jmp 0x1000d1d5
mov ecx, dword [0x1009b168]
mov edx, dword [0x1009b16c]
mov dword [ebp - 0x90c], ecx
mov dword [ebp - 0x908], edx
mov eax, dword [ebp - 0x90c]
or eax, dword [ebp - 0x908]
jne 0x1000d158
mov dword [ebp - 0x31c], 1
jmp 0x1000d162
mov dword [ebp - 0x31c], 0
mov ecx, dword [ebp - 0x2c]
add ecx, dword [ebp - 0x31c]
mov dword [0x1009b148], ecx
movzx edx, byte [0x1009b01f]
movzx eax, byte [0x1009b07e]
xor edx, eax
movzx ecx, byte [0x1009b01f]
sub ecx, edx
mov byte [0x1009b01f], cl
mov edx, dword [0x1009b190]
add edx, 0x27cfdcc6
xor eax, eax
mov ecx, dword [0x1009b160]
sub ecx, edx
mov edx, dword [0x1009b164]
sbb edx, eax
mov dword [0x1009b160], ecx
mov dword [0x1009b164], edx
movzx eax, byte [ebp - 6]
test eax, eax
jne 0x1000d1c8
mov byte [ebp - 0x62], 1
jmp 0x1000d1cc
mov byte [ebp - 0x62], 0
mov cl, byte [ebp - 0x62]
mov byte [0x1009b0a6], cl
movzx edx, byte [0x1009b0a6]
movsx eax, byte [ebp - 1]
sub eax, 0x6d1fb80a
cmp edx, eax
jne 0x1000d32e
mov ecx, dword [ebp - 0x60]
mov edx, dword [ebp - 0x5c]
mov dword [ebp - 0x914], ecx
mov dword [ebp - 0x910], edx
mov eax, dword [ebp - 0x914]
or eax, dword [ebp - 0x910]
jne 0x1000d219
mov dword [ebp - 0x320], 1
jmp 0x1000d223
mov dword [ebp - 0x320], 0
movzx ecx, word [0x1009b184]
shl ecx, 2
movsx edx, byte [ebp - 2]
not edx
imul edx, dword [ebp - 0x320]
imul ecx, edx
mov byte [0x1009b07f], cl
mov eax, dword [ebp - 0x48]
mov ecx, dword [ebp - 0x44]
mov dword [ebp - 0xa0c], ecx
mov edx, 2
shl edx, 3
mov word [edx + 0x1014e3e8], ax
cmp dword [0x1009b148], 0
jne 0x1000d273
mov dword [ebp - 0x324], 1
jmp 0x1000d27d
mov dword [ebp - 0x324], 0
movzx eax, byte [ebp - 5]
add eax, dword [ebp - 0x324]
mov byte [0x1009b07f], al
jmp 0x1000ce45
mov ecx, dword [ebp - 0x34]
mov edx, dword [ebp - 0x30]
mov dword [ebp - 0x91c], ecx
mov dword [ebp - 0x918], edx
mov eax, dword [ebp - 0x91c]
or eax, dword [ebp - 0x918]
je 0x1000d35b
mov cx, word [0x1009b184]
mov word [ebp - 0x6a], cx
jmp 0x1000d366
mov dx, word [0x1009b158]
mov word [ebp - 0x6a], dx
movzx eax, word [ebp - 0x6a]
mov dword [0x1009b170], eax
mov ecx, dword [ebp - 0x48]
mov edx, dword [ebp - 0x44]
sub ecx, 1
sbb edx, 0
mov dword [ebp - 0x48], ecx
mov dword [ebp - 0x44], edx
movzx eax, byte [ebp - 4]
test eax, eax
je 0x1000d391
mov cl, byte [ebp - 5]
mov byte [ebp - 0x63], cl
jmp 0x1000d39a
mov dl, byte [0x1009b033]
mov byte [ebp - 0x63], dl
movzx eax, byte [ebp - 0x63]
cdq
mov dword [0x1009b178], eax
mov dword [0x1009b17c], edx
mov al, byte [ebp - 2]
mov byte [0x1009b0ee], al
imul ecx, dword [ebp - 0x2c], 0xd6
mov byte [0x1009b0a6], cl
mov edx, dword [ebp - 0x24]
mov eax, dword [ebp - 0x20]
add edx, 0xadd3
adc eax, 0
mov dword [ebp - 0x3c], edx
mov dword [ebp - 0x38], eax
mov ecx, dword [0x1009bc7c]
mov dword [ebp - 0xcc], ecx
mov edx, dword [ebp - 0x3c]
mov eax, dword [ebp - 0x38]
add edx, 0x3c
adc eax, 0
mov dword [ebp - 0x34], edx
mov dword [ebp - 0x30], eax
mov dword [0x1009b148], 0x95
mov ecx, dword [0x1009b178]
or ecx, dword [0x1009b17c]
jne 0x1000d41e
xor edx, edx
mov dword [ebp - 0x4b0], 1
mov dword [ebp - 0x4ac], edx
jmp 0x1000d429
xorps xmm0, xmm0
movlpd qword [ebp - 0x4b0], xmm0
mov ecx, dword [ebp - 0x4b0]
and ecx, dword [0x1009b160]
mov esi, dword [ebp - 0x4ac]
and esi, dword [0x1009b164]
mov eax, dword [0x1009b14c]
cdq
mov edi, dword [0x1009b16c]
add eax, dword [0x1009b168]
adc edx, edi
sub ecx, eax
sbb esi, edx
mov dword [ebp - 0x924], ecx
mov dword [ebp - 0x920], esi
mov edx, dword [ebp - 0x924]
or edx, dword [ebp - 0x920]
jne 0x1000d487
xor eax, eax
mov dword [ebp - 0x92c], 1
mov dword [ebp - 0x928], eax
jmp 0x1000d492
xorps xmm0, xmm0
movlpd qword [ebp - 0x92c], xmm0
mov ecx, dword [ebp - 0x24]
mov edx, dword [ebp - 0x20]
mov eax, dword [ebp - 0x20]
add ecx, dword [ebp - 0x24]
adc edx, eax
mov eax, dword [0x1009b16c]
mov esi, dword [ebp - 0x50]
sub esi, dword [0x1009b168]
mov edi, dword [ebp - 0x4c]
sbb edi, eax
push edi
push esi
push edx
push ecx
call fcn.1006c090
add eax, dword [ebp - 0x92c]
mov byte [0x1009b0ef], al
mov ecx, dword [ebp - 0xcc]
add ecx, 0x12d
mov dword [ebp - 0x4e4], ecx
movzx eax, byte [ebp - 3]
not eax
cdq
mov ecx, dword [ebp - 0x24]
mov esi, dword [ebp - 0x20]
sub ecx, eax
sbb esi, edx
movzx eax, byte [0x1009b07f]
xor eax, 0x44
cdq
xor ecx, eax
xor esi, edx
movzx edx, byte [ebp - 5]
and edx, 0xfb
mov eax, dword [ebp - 0x28]
imul eax, edx
cdq
push edx
push eax
push esi
push ecx
call fcn.1006c090
mov byte [ebp - 3], al
mov eax, dword [ebp - 0x2c]
cdq
add eax, dword [0x1009b160]
mov dword [0x1009b14c], eax
movsx eax, word [ebp - 0x1c]
test eax, eax
jne 0x1000d539
mov dword [ebp - 0x32c], 1
jmp 0x1000d543
mov dword [ebp - 0x32c], 0
movsx ecx, word [ebp - 0x1c]
or ecx, dword [ebp - 0x32c]
movzx edx, byte [0x1009b0a6]
mov eax, dword [0x1009b170]
sub eax, edx
xor ecx, eax
mov dword [ebp - 0x2c], ecx
movsx ecx, byte [ebp - 1]
test ecx, ecx
je 0x1000d576
mov edx, dword [0x1009b148]
mov dword [ebp - 0x330], edx
jmp 0x1000d581
mov eax, dword [0x1009b14c]
mov dword [ebp - 0x330], eax
mov ecx, dword [ebp - 0x330]
xor edx, edx
mov dword [0x1009b138], ecx
mov dword [0x1009b13c], edx
mov eax, dword [ebp - 0xcc]
add eax, 0x24d
mov dword [ebp - 0x4e8], eax
movsx ecx, byte [ebp - 1]
push ecx
call dword [sym.imp.USER32.dll_GetTopWindow]
mov byte [ebp - 1], al
movsx edx, byte [ebp - 1]
test edx, edx
je 0x1000d5fc
mov byte [ebp - 3], 4
mov eax, 0x40
mov word [ebp - 0x14], ax
movsx eax, word [ebp - 0x10]
sub eax, 0xe45
cdq
mov dword [ebp - 0x48], eax
mov dword [ebp - 0x44], edx
movsx ecx, word [ebp - 0x14]
add ecx, 8
mov byte [ebp - 3], cl
movsx edx, word [ebp - 0xc]
movzx eax, byte [ebp - 3]
and edx, eax
movsx ecx, word [ebp - 0xc]
add ecx, edx
mov word [ebp - 0xc], cx
jmp 0x1000d6c3
movsx eax, word [ebp - 0x10]
cdq
mov dword [ebp - 0x934], eax
mov dword [ebp - 0x930], edx
cmp dword [ebp - 0x930], 0x31d7a
jl 0x1000d67a
jg 0x1000d627
cmp dword [ebp - 0x934], 0x9d82f283
jb 0x1000d67a
mov edx, dword [0x1009b138]
or edx, dword [0x1009b13c]
jne 0x1000d641
mov dword [ebp - 0x334], 1
jmp 0x1000d64b
mov dword [ebp - 0x334], 0
mov eax, dword [0x1009b148]
cmp dword [ebp - 0x334], eax
je 0x1000d664
mov dword [ebp - 0x338], 1
jmp 0x1000d66e
mov dword [ebp - 0x338], 0
mov ecx, dword [ebp - 0x338]
not ecx
test ecx, ecx
jne 0x1000d6c3
movzx edx, word [0x1009b184]
movsx eax, word [ebp - 0xc]
sub edx, eax
movzx ecx, word [0x1009b184]
add ecx, edx
mov word [0x1009b184], cx
mov eax, dword [ebp - 0x3c]
mov edx, dword [ebp - 0x38]
mov cl, 1
call fcn.1006c0f0
mov word [0x1009b158], ax
mov edx, dword [0x1009b140]
imul edx, dword [0x1009b170]
mov eax, dword [0x1009b140]
sub eax, edx
mov dword [0x1009b140], eax
mov ecx, dword [ebp - 0xcc]
add ecx, 0xa0
mov dword [ebp - 0x54c], ecx
mov byte [0x1009b0a6], 1
movsx edx, word [ebp - 0x14]
push edx
call dword [sym.imp.KERNEL32.dll_IsValidCodePage]
xor ecx, ecx
mov dword [ebp - 0x24], eax
mov dword [ebp - 0x20], ecx
movzx edx, byte [0x1009b07e]
movzx eax, byte [0x1009b0a6]
movsx ecx, byte [ebp - 1]
add eax, ecx
cmp edx, eax
jne 0x1000db59
xor edx, edx
mov dword [ebp - 0x24], 4
mov dword [ebp - 0x20], edx
movsx eax, byte [0x1009b0ba]
imul eax, eax, 0xcb76
cdq
mov dword [ebp - 0x60], eax
mov dword [ebp - 0x5c], edx
xor ecx, ecx
mov dword [ebp - 0x3c], 0x4bfa
mov dword [ebp - 0x38], ecx
mov edx, dword [ebp - 0x24]
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0xa10], eax
mov ecx, dword [ebp - 0x34]
mov eax, dword [ebp - 0x30]
mov dword [ebp - 0xa14], eax
xor edx, ecx
mov byte [0x1009b0ba], dl
mov ecx, dword [ebp - 0x24]
mov edx, dword [ebp - 0x20]
mov dword [ebp - 0x4b8], ecx
mov dword [ebp - 0x4b4], edx
cmp dword [ebp - 0x4b4], 0
ja 0x1000da10
jb 0x1000d785
cmp dword [ebp - 0x4b8], 4
ja 0x1000da10
mov eax, dword [ebp - 0x4b8]
mov dword [ebp - 0xba0], eax
mov ecx, dword [ebp - 0xba0]
jmp dword [ecx*4 + 0x1000e964]
movzx eax, byte [0x1009b0ee]
movsx ecx, byte [ebp - 1]
add ecx, 0x4878
cmp eax, ecx
jne 0x1000db59
mov edx, dword [ebp - 0x28]
add edx, dword [0x1009b1b0]
mov eax, dword [ebp - 0x28]
add eax, edx
mov dword [ebp - 0x28], eax
mov ecx, dword [ebp - 0x24]
mov edx, dword [ebp - 0x20]
sub ecx, 0xfdbc
sbb edx, 0
add ecx, dword [0x1009b178]
adc edx, dword [0x1009b17c]
mov dword [0x1009b178], ecx
mov dword [0x1009b17c], edx
mov eax, dword [0x1009b150]
mov ecx, dword [0x1009b154]
push 0
push 0x8d4
push ecx
push eax
call fcn.1006c090
mov word [ebp - 0x1c], ax
movzx edx, byte [ebp - 3]
movsx eax, word [ebp - 0xc]
add edx, eax
jne 0x1000da96
mov dword [ebp - 0x33c], 1
jmp 0x1000daa0
mov dword [ebp - 0x33c], 0
movzx ecx, byte [0x1009b033]
add ecx, dword [ebp - 0x33c]
mov dword [0x1009b170], ecx
jmp 0x1000d6d5
mov ecx, 2
imul edx, ecx, 0x7fe8
movzx eax, word [edx + 0x100fded8]
cdq
mov dword [0x1009b1a8], eax
mov dword [0x1009b1ac], edx
movzx eax, byte [ebp - 5]
imul ecx, eax, 0x9d92
mov byte [ebp - 4], cl
mov dx, word [0x1009bc7c]
mov word [ebp - 0x10], dx
mov eax, dword [ebp - 0x54c]
sub eax, 0x99
mov ecx, dword [ebp - 0x4e4]
imul ecx, dword [ebp - 0x4e8]
cmp eax, ecx
je 0x1000e943
mov dword [ebp - 0xe0], 0x326
jmp 0x1000dbca
mov edx, dword [ebp - 0xe0]
sub edx, 1
mov dword [ebp - 0xe0], edx
cmp dword [ebp - 0xe0], 0
jle 0x1000dbdd
mov al, byte [ebp - 6]
add al, 1
mov byte [ebp - 6], al
jmp 0x1000dbbb
movzx ecx, byte [ebp - 6]
cmp ecx, 0x2b
jne 0x1000dbf2
mov dword [ebp - 0x348], 1
jmp 0x1000dbfc
mov dword [ebp - 0x348], 0
cmp dword [0x1009b144], 0
jne 0x1000dc11
mov dword [ebp - 0x344], 1
jmp 0x1000dc1b
mov dword [ebp - 0x344], 0
movzx edx, byte [ebp - 6]
cmp edx, dword [ebp - 0x344]
je 0x1000dc33
mov dword [ebp - 0x34c], 1
jmp 0x1000dc3d
mov dword [ebp - 0x34c], 0
mov eax, dword [ebp - 0x348]
sub eax, dword [ebp - 0x34c]
je 0x1000dcbf
movsx ecx, word [ebp - 0x1c]
cmp dword [0x1009b170], ecx
jae 0x1000dcbf
movsx eax, word [ebp - 0x18]
cdq
add eax, 0x63efcf4f
adc edx, 0x44c8c
mov ecx, dword [0x1009b198]
mov esi, dword [0x1009b19c]
sub ecx, eax
sbb esi, edx
mov dword [0x1009b198], ecx
mov dword [0x1009b19c], esi
movzx edx, byte [0x1009b0ee]
test edx, edx
je 0x1000dc98
mov al, byte [0x1009b033]
mov byte [ebp - 0x64], al
jmp 0x1000dca1
mov cl, byte [0x1009b0ee]
mov byte [ebp - 0x64], cl
mov dl, byte [ebp - 0x64]
mov byte [0x1009b0ba], dl
movzx eax, byte [0x1009b033]
movzx ecx, word [0x1009b184]
add eax, ecx
mov byte [0x1009b033], al
call fcn.1001c5a0
test eax, eax
jne 0x1000e943
movzx eax, byte [ebp - 3]
cdq
mov dword [ebp - 0x944], eax
mov dword [ebp - 0x940], edx
mov edx, dword [0x1009b13c]
cmp edx, dword [ebp - 0x940]
jb 0x1000dd65
ja 0x1000dcfa
mov eax, dword [0x1009b138]
cmp eax, dword [ebp - 0x944]
jbe 0x1000dd65
movzx ecx, word [0x1009b184]
shl ecx, 5
mov byte [0x1009b0bb], cl
movzx eax, byte [ebp - 4]
cdq
mov edx, dword [ebp - 0x60]
mov ecx, dword [ebp - 0x5c]
mov dword [ebp - 0xa2c], ecx
xor eax, edx
mov byte [ebp - 4], al
imul edx, dword [0x1009b1a0], 0x381cc910
mov eax, dword [0x1009b144]
sub eax, edx
mov dword [0x1009b144], eax
mov ecx, dword [ebp - 0x2c]
mov edx, 4
imul eax, edx, 0x1dac
mov dword [eax + 0x1015e570], ecx
mov ecx, dword [ebp - 0x2c]
sub ecx, dword [0x1009b170]
mov dword [ebp - 0x2c], ecx
mov edx, dword [0x1009b14c]
add edx, 1
mov dword [0x1009b14c], edx
mov eax, 0x34ae9
mov dword [0x1009b130], 0x88c1ef03
mov dword [0x1009b134], eax
movsx ecx, word [ebp - 0x18]
test ecx, ecx
je 0x1000ddec
movzx eax, byte [0x1009b0ef]
add eax, 0x90
cdq
mov dword [ebp - 0x3c], eax
mov dword [ebp - 0x38], edx
movzx edx, byte [ebp - 4]
imul eax, edx, 0xe91dfb29
mov dword [0x1009b144], eax
mov ecx, dword [ebp - 0x50]
or ecx, dword [ebp - 0x4c]
jne 0x1000ddbf
xor edx, edx
mov dword [ebp - 0x4c8], 1
mov dword [ebp - 0x4c4], edx
jmp 0x1000ddca
xorps xmm0, xmm0
movlpd qword [ebp - 0x4c8], xmm0
mov eax, dword [ebp - 0x50]
and eax, dword [ebp - 0x4c8]
mov ecx, dword [ebp - 0x4c]
and ecx, dword [ebp - 0x4c4]
mov dword [0x1009b138], eax
mov dword [0x1009b13c], ecx
jmp 0x1000df7b
movsx edx, word [ebp - 0xc]
movsx eax, word [ebp - 0x18]
cmp edx, eax
jg 0x1000de04
mov dword [ebp - 0x350], 1
jmp 0x1000de0e
mov dword [ebp - 0x350], 0
cmp dword [0x1009b148], 0
je 0x1000de2e
movzx ecx, byte [0x1009b0ee]
test ecx, ecx
je 0x1000de2e
mov dword [ebp - 0x354], 1
jmp 0x1000de38
mov dword [ebp - 0x354], 0
mov edx, dword [ebp - 0x350]
or edx, dword [ebp - 0x354]
je 0x1000df7b
movsx eax, word [ebp - 0x1c]
movzx ecx, byte [0x1009b033]
lea edx, [ecx + eax - 0xae2c]
mov byte [0x1009b033], dl
mov byte [ebp - 7], 0xe0
mov eax, dword [0x1009b140]
add eax, 0x2f5c4fba
mov word [ebp - 0x1c], ax
mov ecx, dword [0x1009b198]
mov edx, dword [0x1009b19c]
mov dword [ebp - 0x94c], ecx
mov dword [ebp - 0x948], edx
mov eax, dword [ebp - 0x94c]
or eax, dword [ebp - 0x948]
jne 0x1000dea6
mov dword [ebp - 0x358], 1
jmp 0x1000deb0
mov dword [ebp - 0x358], 0
movsx ecx, byte [ebp - 2]
mov edx, dword [0x1009b148]
add edx, ecx
sub edx, dword [ebp - 0x358]
jne 0x1000ded0
mov dword [ebp - 0x360], 1
jmp 0x1000deda
mov dword [ebp - 0x360], 0
cmp dword [0x1009b190], 0
jne 0x1000deef
mov dword [ebp - 0x35c], 1
jmp 0x1000def9
mov dword [ebp - 0x35c], 0
mov eax, dword [ebp - 0x28]
not eax
imul eax, dword [ebp - 0x35c]
cdq
mov ecx, dword [ebp - 0x24]
mov esi, dword [ebp - 0x20]
sub ecx, eax
sbb esi, edx
mov dword [ebp - 0x954], ecx
mov dword [ebp - 0x950], esi
mov edx, dword [ebp - 0x954]
or edx, dword [ebp - 0x950]
jne 0x1000df36
mov dword [ebp - 0x364], 1
jmp 0x1000df40
mov dword [ebp - 0x364], 0
mov eax, dword [ebp - 0x360]
add eax, dword [ebp - 0x364]
cdq
mov dword [0x1009b1a8], eax
mov dword [0x1009b1ac], edx
mov byte [ebp - 1], 0x40
movzx eax, byte [0x1009b0ee]
movzx ecx, byte [0x1009b0ef]
sub eax, ecx
movzx edx, byte [0x1009b0ee]
add edx, eax
mov byte [0x1009b0ee], dl
mov eax, dword [0x1009b130]
mov ecx, dword [0x1009b134]
mov edx, dword [ebp - 0x50]
add edx, 1
mov esi, dword [ebp - 0x4c]
adc esi, 0
mov dword [ebp - 0x95c], eax
mov dword [ebp - 0x958], ecx
mov dword [ebp - 0x964], edx
mov dword [ebp - 0x960], esi
mov eax, dword [ebp - 0x95c]
cmp eax, dword [ebp - 0x964]
jne 0x1000e4f1
mov ecx, dword [ebp - 0x958]
cmp ecx, dword [ebp - 0x960]
jne 0x1000e4f1
cmp dword [ebp - 0x58], 0
jne 0x1000dfe8
xor edx, edx
mov dword [ebp - 0x96c], 1
mov dword [ebp - 0x968], edx
jmp 0x1000dff3
xorps xmm0, xmm0
movlpd qword [ebp - 0x96c], xmm0
movsx eax, word [ebp - 0x18]
cdq
mov ecx, dword [0x1009b168]
mov edx, dword [0x1009b16c]
mov dword [ebp - 0xa30], edx
add ecx, eax
add ecx, dword [ebp - 0x96c]
mov dword [ebp - 0x54], ecx
movzx eax, byte [ebp - 3]
test eax, eax
je 0x1000e02c
movzx ecx, byte [0x1009b033]
mov dword [ebp - 0x368], ecx
jmp 0x1000e038
mov edx, dword [0x1009b148]
mov dword [ebp - 0x368], edx
mov al, byte [ebp - 0x368]
mov byte [ebp - 5], al
cmp dword [ebp - 0x40], 0
je 0x1000e05b
mov ecx, dword [ebp - 0x34]
mov edx, dword [ebp - 0x30]
mov dword [ebp - 0x4d0], ecx
mov dword [ebp - 0x4cc], edx
jmp 0x1000e06c
movzx eax, byte [ebp - 4]
cdq
mov dword [ebp - 0x4d0], eax
mov dword [ebp - 0x4cc], edx
mov al, byte [ebp - 0x4d0]
mov byte [ebp - 3], al
movsx eax, word [ebp - 0x14]
cdq
push 0xdfafd
push 0x3e7c0d06
push edx
push eax
call fcn.1006c090
mov dword [ebp - 0x28], eax
mov ecx, dword [ebp - 0x2c]
sub ecx, dword [ebp - 0x2c]
mov edx, dword [ebp - 0x2c]
sub edx, ecx
mov dword [ebp - 0x2c], edx
mov dword [ebp - 0xd4], 0
jmp 0x1000e0b7
mov eax, dword [ebp - 0xd4]
add eax, 2
mov dword [ebp - 0xd4], eax
cmp dword [ebp - 0xd4], 0x22d
jge 0x1000e311
movzx eax, byte [0x1009b033]
cdq
mov ecx, dword [0x1009b150]
mov esi, dword [0x1009b154]
mov dword [ebp - 0x974], eax
mov dword [ebp - 0x970], edx
mov dword [ebp - 0x97c], ecx
mov dword [ebp - 0x978], esi
mov edx, dword [ebp - 0x974]
cmp edx, dword [ebp - 0x97c]
jne 0x1000e11b
mov eax, dword [ebp - 0x970]
cmp eax, dword [ebp - 0x978]
jne 0x1000e11b
mov dword [ebp - 0x36c], 1
jmp 0x1000e125
mov dword [ebp - 0x36c], 0
movzx ecx, byte [0x1009b033]
cmp ecx, 0x35
jne 0x1000e13d
mov dword [ebp - 0x370], 1
jmp 0x1000e147
mov dword [ebp - 0x370], 0
mov edx, dword [ebp - 0x36c]
cmp edx, dword [ebp - 0x370]
jl 0x1000e2a6
mov dword [ebp - 0xd8], 0
jmp 0x1000e174
mov eax, dword [ebp - 0xd8]
add eax, 2
mov dword [ebp - 0xd8], eax
cmp dword [ebp - 0xd8], 0x2dc
jge 0x1000e2a4
movzx ecx, byte [0x1009b033]
cmp ecx, dword [0x1009b1a0]
jae 0x1000e19f
mov dword [ebp - 0x374], 1
jmp 0x1000e1a9
mov dword [ebp - 0x374], 0
movzx edx, byte [0x1009b033]
cmp edx, 0x32
jge 0x1000e1c1
mov dword [ebp - 0x378], 1
jmp 0x1000e1cb
mov dword [ebp - 0x378], 0
mov eax, dword [ebp - 0x374]
cmp eax, dword [ebp - 0x378]
jg 0x1000e290
movsx ecx, byte [0x1009b0bb]
add ecx, 0x7bbdaf1f
mov dword [0x1009b1b0], ecx
movsx eax, word [ebp - 0x18]
sub eax, 0xb3
cdq
mov dword [ebp - 0x48], eax
mov dword [ebp - 0x44], edx
movsx edx, byte [ebp - 1]
add edx, dword [ebp - 0x28]
movsx eax, byte [ebp - 1]
imul eax, edx
mov byte [ebp - 1], al
movsx ecx, byte [ebp - 2]
sub ecx, dword [0x1009b190]
movsx edx, byte [ebp - 2]
sub edx, ecx
mov byte [ebp - 2], dl
mov eax, dword [ebp - 0x34]
mov ecx, dword [ebp - 0x30]
mov dword [ebp - 0x984], eax
mov dword [ebp - 0x980], ecx
mov edx, dword [ebp - 0x984]
or edx, dword [ebp - 0x980]
je 0x1000e258
mov eax, dword [ebp - 0x50]
mov ecx, dword [ebp - 0x4c]
mov dword [ebp - 0x38c], eax
mov dword [ebp - 0x388], ecx
jmp 0x1000e26c
mov edx, dword [0x1009b1a0]
xor eax, eax
mov dword [ebp - 0x38c], edx
mov dword [ebp - 0x388], eax
mov ecx, dword [ebp - 0x38c]
mov edx, dword [ebp - 0x388]
mov dword [0x1009b138], ecx
mov dword [0x1009b13c], edx
movzx eax, byte [ebp - 4]
and eax, 0xf88d4270
mov byte [ebp - 6], al
mov cl, byte [0x1009b0a7]
add cl, 1
mov byte [0x1009b0a7], cl
jmp 0x1000e165
jmp 0x1000e2fa
mov edx, dword [0x1009b1a0]
not edx
sub edx, dword [ebp - 0x58]
je 0x1000e2fa
mov dword [0x1009b144], 0x5308e555
movsx eax, word [ebp - 0x1c]
cdq
and eax, dword [0x1009b138]
mov word [ebp - 0x1c], ax
mov eax, dword [0x1009bc7c]
mov dword [ebp - 0x40], eax
mov ecx, dword [0x1009b1a8]
mov edx, dword [0x1009b1ac]
mov dword [ebp - 0xa34], edx
mov byte [ebp - 4], cl
mov eax, dword [0x1009b14c]
xor eax, dword [0x1009b190]
mov word [0x1009b158], ax
mov ecx, dword [ebp - 0x24]
mov edx, dword [ebp - 0x20]
add ecx, 1
adc edx, 0
mov dword [ebp - 0x24], ecx
mov dword [ebp - 0x20], edx
jmp 0x1000e0a8
movzx eax, byte [0x1009b07f]
cmp eax, 1
jne 0x1000e4f1
mov ecx, dword [ebp - 0x34]
mov esi, dword [ebp - 0x30]
movzx eax, byte [ebp - 6]
cdq
mov dword [ebp - 0x98c], ecx
mov dword [ebp - 0x988], esi
mov dword [ebp - 0x994], eax
mov dword [ebp - 0x990], edx
mov edx, dword [ebp - 0x988]
cmp edx, dword [ebp - 0x990]
ja 0x1000e40f
jb 0x1000e36a
mov eax, dword [ebp - 0x98c]
cmp eax, dword [ebp - 0x994]
ja 0x1000e40f
xor ecx, ecx
mov dword [ebp - 0x50], 0x9c
mov dword [ebp - 0x4c], ecx
mov edx, dword [0x1009b18c]
xor eax, eax
push 0xe37f6
push 0x612a40c4
push eax
push edx
call fcn.1006c090
mov dword [0x1009b14c], eax
mov ecx, dword [0x1009b188]
mov dword [ebp - 0x40], ecx
movzx eax, byte [0x1009b07e]
movzx edx, byte [0x1009b0ee]
not edx
imul eax, edx
not eax
cdq
mov esi, eax
mov edi, edx
movsx eax, word [ebp - 0xc]
cdq
mov ecx, dword [ebp - 0x34]
mov ebx, dword [ebp - 0x30]
push ebx
push ecx
push edx
push eax
call fcn.1006c090
mov ecx, eax
mov ebx, edx
movzx eax, byte [0x1009b033]
cdq
mov dword [ebp - 0x4f0], edi
mov edi, dword [ebp - 0x3c]
mov dword [ebp - 0x4ec], esi
mov esi, dword [ebp - 0x38]
add edi, eax
adc esi, edx
xor ecx, edi
xor ebx, esi
mov esi, dword [ebp - 0x4ec]
xor esi, ecx
mov edi, dword [ebp - 0x4f0]
xor edi, ebx
mov dword [0x1009b178], esi
mov dword [0x1009b17c], edi
jmp 0x1000e48b
mov edx, dword [ebp - 0x24]
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x99c], edx
mov dword [ebp - 0x998], eax
mov ecx, dword [ebp - 0x99c]
or ecx, dword [ebp - 0x998]
jne 0x1000e43c
mov edx, 0xc92f8d0c
or edx, 0x5bd51
je 0x1000e48b
mov eax, dword [0x1009b1a8]
mov ecx, dword [0x1009b1ac]
mov dword [ebp - 0x9a4], eax
mov dword [ebp - 0x9a0], ecx
mov edx, dword [ebp - 0x9a4]
or edx, dword [ebp - 0x9a0]
jne 0x1000e467
mov byte [ebp - 0x65], 1
jmp 0x1000e46b
mov byte [ebp - 0x65], 0
mov al, byte [ebp - 0x65]
mov byte [ebp - 5], al
mov dword [0x1009b144], 0x67e188f8
movsx eax, byte [0x1009b0ba]
cdq
and eax, 0xd7b4e377
mov dword [ebp - 0x28], eax
jmp 0x1000e4f1
mov eax, 0x34ae9
mov dword [0x1009b130], 0x88c1ef03
mov dword [0x1009b134], eax
mov ecx, dword [0x1009b150]
mov edx, dword [0x1009b154]
mov dword [ebp - 0x9ac], ecx
mov dword [ebp - 0x9a8], edx
mov eax, dword [ebp - 0x9ac]
or eax, dword [ebp - 0x9a8]
jne 0x1000e537
mov dword [ebp - 0x37c], 1
jmp 0x1000e541
mov dword [ebp - 0x37c], 0
movsx ecx, word [ebp - 0x18]
imul ecx, dword [ebp - 0x37c]
imul ecx, dword [0x1009b1a0]
not ecx
mov dword [ebp - 0x58], ecx
movsx edx, word [ebp - 0x18]
imul eax, edx, 0x2a6e
mov dword [0x1009b188], eax
movzx eax, byte [0x1009b07e]
movsx ecx, byte [0x1009b0a7]
not ecx
and eax, ecx
cdq
mov dword [ebp - 0x48], eax
mov dword [ebp - 0x44], edx
movzx edx, byte [0x1009b0a6]
movzx eax, byte [0x1009b0a6]
sub edx, eax
mov dword [0x1009b144], edx
call dword [sym.imp.KERNEL32.dll_GetCommandLineA]
mov byte [ebp - 2], al
movsx ecx, byte [ebp - 2]
test ecx, ecx
je 0x1000e8ce
mov byte [0x1009b0bb], 3
movsx edx, word [ebp - 0x1c]
sar edx, 3
mov word [0x1009b158], dx
cmp dword [0x1009b188], 0
je 0x1000e5d1
mov al, byte [ebp - 5]
mov byte [ebp - 0x66], al
jmp 0x1000e5da
mov cl, byte [0x1009b033]
mov byte [ebp - 0x66], cl
movzx eax, byte [ebp - 0x66]
cdq
mov dword [ebp - 0x48], eax
mov dword [ebp - 0x44], edx
mov ecx, dword [ebp - 0x60]
mov esi, dword [ebp - 0x5c]
not ecx
not esi
movsx eax, word [ebp - 0xc]
cdq
push edx
push eax
push esi
push ecx
call fcn.1006c090
movzx ecx, byte [ebp - 4]
imul ecx, dword [ebp - 0x58]
xor esi, esi
add eax, ecx
adc edx, esi
mov dword [ebp - 0x48], eax
mov dword [ebp - 0x44], edx
movsx eax, byte [ebp - 1]
cdq
mov ecx, dword [0x1009b1a8]
mov esi, dword [0x1009b1ac]
push edx
push eax
push esi
push ecx
call fcn.1006c090
mov dword [0x1009b1a8], eax
mov dword [0x1009b1ac], edx
mov edx, 2
shl edx, 3
movzx eax, word [edx + 0x1014e3e8]
cdq
mov ecx, dword [0x1009b150]
mov esi, dword [0x1009b154]
add ecx, eax
adc esi, edx
mov dword [0x1009b150], ecx
mov dword [0x1009b154], esi
mov edx, dword [ebp - 0x48]
mov eax, dword [ebp - 0x44]
add edx, 0x8eebc906
adc eax, 0
mov dword [0x1009b198], edx
mov dword [0x1009b19c], eax
movsx ecx, byte [0x1009b0bb]
mov dword [ebp - 0x380], ecx
cmp dword [ebp - 0x380], 3
ja case.default.0x1000e69c
mov edx, dword [ebp - 0x380]
jmp dword [edx*4 + 0x1000e978]
mov eax, dword [0x1009b14c]
cdq
mov dword [ebp - 0x48], eax
mov dword [ebp - 0x44], edx
mov eax, dword [0x1009bc7c]
xor ecx, ecx
mov dword [0x1009b138], eax
mov dword [0x1009b13c], ecx
mov dl, byte [ebp - 6]
sub dl, 1
mov byte [ebp - 6], dl
movsx eax, byte [ebp - 2]
test eax, eax
je 0x1000e6e6
mov ecx, dword [ebp - 0x50]
mov edx, dword [ebp - 0x4c]
mov dword [ebp - 0x4d8], ecx
mov dword [ebp - 0x4d4], edx
jmp 0x1000e6f8
mov eax, dword [0x1009b140]
cdq
mov dword [ebp - 0x4d8], eax
mov dword [ebp - 0x4d4], edx
mov eax, dword [ebp - 0x4d8]
mov dword [0x1009b148], eax
jmp case.default.0x1000e69c
mov ecx, dword [ebp - 0x34]
mov edx, dword [ebp - 0x30]
add ecx, dword [0x1009b138]
adc edx, dword [0x1009b13c]
push edx
push ecx
mov eax, dword [0x1009b13c]
push eax
mov ecx, dword [0x1009b138]
push ecx
call fcn.1006c090
mov dword [0x1009b138], eax
mov dword [0x1009b13c], edx
movzx edx, byte [ebp - 3]
movsx eax, byte [0x1009b0a7]
add edx, eax
mov byte [ebp - 3], dl
movzx eax, byte [0x1009b033]
cdq
mov ecx, 8
imul ecx, ecx, 0x28b
mov dword [ecx + 0x1012a9d0], eax
mov dword [ecx + 0x1012a9d4], edx
mov edx, dword [0x1009bc7c]
xor eax, eax
mov dword [0x1009b150], edx
mov dword [0x1009b154], eax
jmp case.default.0x1000e69c
mov ecx, 1
imul edx, ecx, 6
movsx eax, byte [edx + 0x102237a0]
mov dword [0x1009b190], eax
movsx ecx, word [ebp - 0x14]
mov dword [ebp - 0x58], ecx
cmp dword [0x1009b140], 0
jne 0x1000e7b0
mov dword [ebp - 0x384], 1
jmp 0x1000e7ba
mov dword [ebp - 0x384], 0
mov eax, dword [0x1009b140]
add eax, dword [ebp - 0x384]
cdq
mov ecx, eax
mov edx, dword [ebp - 0x48]
mov eax, dword [ebp - 0x44]
mov dword [ebp - 0xa38], eax
xor edx, dword [0x1009b160]
xor ecx, edx
movsx eax, word [ebp - 0x10]
cdq
mov edx, dword [0x1009b1a8]
mov esi, dword [0x1009b1ac]
mov dword [ebp - 0xa3c], esi
sub edx, eax
mov eax, 0x39669a8e
sub eax, edx
sub ecx, eax
mov byte [ebp - 6], cl
xor ecx, ecx
mov edx, dword [0x1009b150]
mov eax, dword [0x1009b154]
sub edx, dword [0x1009b170]
sbb eax, ecx
mov ecx, dword [ebp - 0x54]
not ecx
xor esi, esi
push esi
push ecx
push eax
push edx
call fcn.1006c090
mov dword [ebp - 0x9b4], eax
mov dword [ebp - 0x9b0], edx
mov edx, dword [ebp - 0x9b4]
or edx, dword [ebp - 0x9b0]
jne 0x1000e854
xor eax, eax
mov dword [ebp - 0x4e0], 1
mov dword [ebp - 0x4dc], eax
jmp 0x1000e85f
xorps xmm0, xmm0
movlpd qword [ebp - 0x4e0], xmm0
movsx eax, word [0x1009b180]
movsx ecx, word [ebp - 0x1c]
imul eax, ecx
cdq
mov esi, eax
mov edi, edx
movzx eax, byte [ebp - 7]
cdq
push 0xf0ba9
push 0xaee965c
push edx
push eax
call fcn.1006c090
xor esi, eax
xor edi, edx
push edi
push esi
mov edx, dword [ebp - 0x4dc]
push edx
mov eax, dword [ebp - 0x4e0]
push eax
call fcn.1006c090
mov dword [0x1009b188], eax
jmp case.default.0x1000e69c
movsx ecx, word [ebp - 0x18]
sub ecx, 0x2f
mov dword [ebp - 0x2c], ecx
mov byte [0x1009b07e], 0x8e
movzx eax, byte [0x1009b0ef]
cdq
mov dword [0x1009b160], eax
mov dword [0x1009b164], edx
jmp 0x1000e93f
movsx edx, word [ebp - 0x18]
cmp edx, dword [0x1009b190]
jne 0x1000e93f
movzx eax, byte [ebp - 7]
mov ecx, dword [ebp - 0x40]
sub ecx, eax
mov dword [ebp - 0x40], ecx
movzx edx, byte [ebp - 5]
mov eax, dword [ebp - 0x54]
xor eax, edx
mov ecx, dword [ebp - 0x54]
add ecx, eax
mov dword [ebp - 0x54], ecx
movzx eax, byte [0x1009b0a6]
cdq
add eax, 0x6c435349
adc edx, 0x1b9e4
mov dword [ebp - 0x3c], eax
mov dword [ebp - 0x38], edx
movsx eax, word [0x1009b180]
cdq
mov ecx, dword [0x1009b17c]
push ecx
mov ecx, dword [0x1009b178]
push ecx
push edx
push eax
call fcn.1006c090
mov ecx, eax
movsx eax, word [0x1009b180]
cdq
sub eax, ecx
mov word [0x1009b180], ax
xor eax, eax
jmp 0x1000e948
mov eax, 1
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0x10