Function at 0x1000cf0c
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x24
mov eax, dword [0x100782d8]
xor eax, ebp
mov dword [ebp - 4], eax
push ebx
xor ebx, ebx
cmp dword [0x1007cb74], ebx
push esi
push edi
je case.0x1000c020.14
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov ecx, dword [0x1006fab0]
mov edx, dword [0x1007a264]
add ecx, edx
cmp ecx, eax
jae case.0x1000c020.14
mov dword [0x1007a264], eax
mov eax, dword [0x1007cb78]
cmp eax, 0x47
ja case.0x1000c020.14
jmp dword [eax*4 + 0x1000db58]
push 6
call fcn.10001020
mov edi, eax
lea eax, [edi - 1]
xor esi, esi
cmp eax, 4
ja case.default.0x1000c03a
jmp dword [eax*4 + 0x1000dc78]
mov esi, 0x35
mov ebx, 0x166
jmp case.default.0x1000c03a
mov esi, 0x87
mov ebx, 0x1a7
jmp case.default.0x1000c03a
mov esi, 0xfc
mov ebx, 0x11a
jmp case.default.0x1000c03a
mov esi, 0xb1
mov ebx, 0xfb
jmp case.default.0x1000c03a
mov esi, 0x66
mov ebx, 0x128
push 0x14
push ebx
push esi
call fcn.10026890
test eax, eax
je 0x1000c0ae
push edi
call fcn.1000bed0
call fcn.1000bf40
mov dword [0x1007cb78], 1
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.1004309b
mov esp, ebp
pop ebp
ret
push ebx
push esi
call fcn.1003d7d0
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.1004309b
mov esp, ebp
pop ebp
ret
push 6
call fcn.10001020
cmp eax, 3
jne 0x1000c0ec
cmp dword [0x1007a260], ebx
jne 0x1000c104
push 0x32
push 0xa8
push 0x47
call fcn.1003d7f0
test eax, eax
je 0x1000c0f8
mov dword [0x1007a260], 1
jmp 0x1000c104
cmp dword [0x1007a260], ebx
je case.0x1000c020.14
push 0x64
push 0x150
push 0xa1
call fcn.10026890
test eax, eax
je 0x1000c173
push 0x32
push 0x150
push 0xa1
call fcn.10026890
test eax, eax
je 0x1000c153
call fcn.1000bf50
call fcn.1000bf60
mov dword [0x1007cb78], 2
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.1004309b
mov esp, ebp
pop ebp
ret
push 0x150
push 0xa1
call fcn.1003d7d0
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.1004309b
mov esp, ebp
pop ebp
ret
push 0x63
push 0x3e
call fcn.10026900
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.1004309b
mov esp, ebp
pop ebp
ret
push 0x32
push 0x53
push 0x42
call fcn.1003d7f0
test eax, eax
je case.0x1000c020.14
mov eax, dword [0x10057cfc]
mov ecx, dword [0x10057d00]
mov dx, word [0x10057d04]
mov dword [0x1007c8e8], eax
mov al, byte [0x10057d06]
mov dword [0x1007c8ec], ecx
mov word [0x1007c8f0], dx
mov byte [0x1007c8f2], al
call fcn.100397e0
mov esi, eax
cmp esi, ebx
je case.0x1000c020.14
push 4
lea edi, [esi + 0x10]
push edi
call dword [sym.imp.KERNEL32.dll_IsBadReadPtr]
test eax, eax
jne case.0x1000c020.14
mov ecx, dword [esi + 0x14]
mov edx, dword [edi]
push 1
push 0x9c7
push ecx
push edx
call fcn.100283b0
mov dword [0x1007cb78], 3
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.1004309b
mov esp, ebp
pop ebp
ret
push 0x64
push 0x17f
push 0xd4
call fcn.10026890
test eax, eax
je 0x1000c293
push 0xa
push 0x17f
push 0xd4
call fcn.10026890
test eax, eax
je 0x1000c273
mov dword [0x1007c5e8], 4
mov dword [0x1007cb78], 0x64
call fcn.1000bfa0
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.1004309b
mov esp, ebp
pop ebp
ret
push 0x17f
push 0xd4
call fcn.1003d7d0
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.1004309b
mov esp, ebp
pop ebp
ret
push 0x64
push 0x6e
call fcn.10026900
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.1004309b
mov esp, ebp
pop ebp
ret
push 0x64
push 0x150
push 0xa1
call fcn.10026890
test eax, eax
je 0x1000c173
push 0x32
push 0x150
push 0xa1
call fcn.10026890
test eax, eax
je 0x1000c153
call fcn.1000bf70
call fcn.1000bf80
mov dword [0x1007cb78], 0x2c
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.1004309b
mov esp, ebp
pop ebp
ret
push 0x32
push 0x66
push 0x30
call fcn.1003d7f0
test eax, eax
je case.0x1000c020.14
push 0xee49
call fcn.10034870
call fcn.1000bf90
push 0x32383636
call fcn.1000bd30
mov dword [0x1007cb78], 6
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.1004309b
mov esp, ebp
pop ebp
ret
push 0x64
push 0x15f
push 0xae
call fcn.10026890
test eax, eax
je 0x1000c3d3
push 0x32
push 0x15f
push 0xae
call fcn.10026890
test eax, eax
je 0x1000c3b3
push 0xebc9
call fcn.10034870
call fcn.1000bfc0
push 0x32383636
call fcn.1000be00
push 0x32383533
call fcn.1000bd30
mov dword [0x1007cb78], 7
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.1004309b
mov esp, ebp
pop ebp
ret
push 0x15f
push 0xae
call fcn.1003d7d0
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.1004309b
mov esp, ebp
pop ebp
ret
push 0x62
push 0x4b
call fcn.10026900
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.1004309b
mov esp, ebp
pop ebp
ret
push 0x64
push 0xf4
push 0x14a
call fcn.10026890
test eax, eax
je 0x1000c46c
push 0xa
push 0xf4
push 0x14a
call fcn.10026890
test eax, eax
je 0x1000c44c
push ebx
call fcn.10038740
call fcn.1000bfc0
mov dword [0x1007c5e8], 6
mov dword [0x1007cb78], 8
call fcn.1000bfa0
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.1004309b
mov esp, ebp
pop ebp
ret
push 0xf4
push 0x14a
call fcn.1003d7d0
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.1004309b
mov esp, ebp
pop ebp
ret
push 0xe6
push 0x64
call fcn.10026900
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.1004309b
mov esp, ebp
pop ebp
ret
push 0x1388
call fcn.10034820
cmp eax, 5
jb case.0x1000c020.14
mov ecx, dword [0x1007d050]
call dword [0x1007d054]
mov dword [0x1007cb78], 9
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.1004309b
mov esp, ebp
pop ebp
ret
push 0xa
push 0x106
push 0x15c
call fcn.10026890
test eax, eax
je 0x1000c502
mov dword [0x1007c5e8], 7
call fcn.1000bfa0
mov dword [0x1007cb78], 0xa
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.1004309b
mov esp, ebp
pop ebp
ret
push 0x106
push 0x15c
call fcn.1003d7d0
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.1004309b
mov esp, ebp
pop ebp
ret
push 0x1389
call fcn.10034820
cmp eax, 3
jb case.0x1000c020.14
mov ecx, dword [0x1007d050]
call dword [0x1007d054]
push 0x9c7
mov dword [0x1007cb78], 0xb
call fcn.10034870
call fcn.1000bfc0
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.1004309b
mov esp, ebp
pop ebp
ret
push 0x64
push 0x140
push 0x91
call fcn.10026890
test eax, eax
je 0x1000c5e4
push 0x32
push 0x140
push 0x91
call fcn.10026890
test eax, eax
je 0x1000c5c4
push 0x32383533
call fcn.1000be00
push 0x32383534
call fcn.1000bd30
mov dword [0x1007cb78], 0x2d
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.1004309b
mov esp, ebp
pop ebp
ret
push 0x140
push 0x91
call fcn.1003d7d0
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.1004309b
mov esp, ebp
pop ebp
ret
push 0x64
push 0x2e
call fcn.10026900
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.1004309b
mov esp, ebp
pop ebp
ret
push 0x64
push 0x18e
push 0x12e
call fcn.10026890
test eax, eax
je 0x1000c65b
push 0x32
push 0x18e
push 0x12e
call fcn.10026890
test eax, eax
je 0x1000c723
push 0x32383534
call fcn.1000be00
push 0x32383535
call fcn.1000bd30
mov dword [0x1007cb78], 0xd
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.1004309b
mov esp, ebp
pop ebp
ret
push 0x8a
push 0xa2
call fcn.10026900
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.1004309b
mov esp, ebp
pop ebp
ret
push 0xa
push 0x1a5
push 0x139
call fcn.10026890
test eax, eax
je 0x1000c6bf
call fcn.1000bfc0
mov dword [0x1007c5e8], 8
call fcn.1000bfa0
mov dword [0x1007cb78], 0x65
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.1004309b
mov esp, ebp
pop ebp
ret
push 0x1a5
push 0x139
call fcn.1003d7d0
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.1004309b
mov esp, ebp
pop ebp
ret
push 0x32
push 0x18e
push 0x12e
call fcn.10026890
test eax, eax
je 0x1000c723
push 0x32383535
call fcn.1000be00
push 0x32383536
call fcn.1000bd30
mov dword [0x1007cb78], 0x10
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.1004309b
mov esp, ebp
pop ebp
ret
push 0x18e
push 0x12e
call fcn.1003d7d0
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.1004309b
mov esp, ebp
pop ebp
ret
push 0x64
push 0x206
push 0x110
call fcn.10026890
test eax, eax
je 0x1000c7b7
push 0xa
push 0x206
push 0x110
call fcn.10026890
test eax, eax
je 0x1000c797
mov dword [0x1007c5e8], 9
call fcn.1000bfa0
mov dword [0x1007cb78], 0x11
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.1004309b
mov esp, ebp
pop ebp
ret
push 0x206
push 0x110
call fcn.1003d7d0
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.1004309b
mov esp, ebp
pop ebp
ret
push 0x40
push 0xd0
call fcn.10026900
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.1004309b
mov esp, ebp
pop ebp
ret
push 0x138d
call fcn.10034820
cmp eax, 5
jb case.0x1000c020.14
mov ecx, dword [0x1007d050]
call dword [0x1007d054]
push 0x9c7
call fcn.10034870
call fcn.1000bfc0
mov dword [0x1007cb78], 0x12
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.1004309b
mov esp, ebp
pop ebp
ret
push 0x64
push 0x140
push 0x91
call fcn.10026890
test eax, eax
je 0x1000c5e4
push 0x32
push 0x140
push 0x91
call fcn.10026890
test eax, eax
je 0x1000c5c4
push 0x32383536
call fcn.1000be00
push 0x32383537
call fcn.1000bd30
mov dword [0x1007cb78], 0x13
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.1004309b
mov esp, ebp
pop ebp
ret
push 0x32
push 0x150
push 0xa3
call fcn.10026890
test eax, eax
je 0x1000c8c2
push 0x32383537
call fcn.1000be00
push 0x32383538
call fcn.1000bd30
mov dword [0x1007cb78], 0x2e
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.1004309b
mov esp, ebp
pop ebp
ret
push 0x150
push 0xa3
call fcn.1003d7d0
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.1004309b
mov esp, ebp
pop ebp
ret
push 0x64
push 0x95
push 0x1d2
call fcn.10026890
test eax, eax
je 0x1000c95b
push 0x32
push 0x95
push 0x1d2
call fcn.10026890
test eax, eax
je 0x1000c93b
push 0x32383538
call fcn.1000be00
push 0x32383539
call fcn.1000bd30
mov dword [0x1007cb78], 0x15
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.1004309b
mov esp, ebp
pop ebp
ret
push 0x95
push 0x1d2
call fcn.1003d7d0
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.1004309b
mov esp, ebp
pop ebp
ret
push 0x15a
push 0x78
call fcn.10026900
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.1004309b
mov esp, ebp
pop ebp
ret
push 0x64
push 0xdf
push 0x1bc
call fcn.10026890
test eax, eax
je 0x1000c9f1
push 0xa
push 0xdf
push 0x1bc
call fcn.10026890
test eax, eax
je 0x1000c9d1
call fcn.1000bfc0
mov dword [0x1007c5e8], 0xa
call fcn.1000bfa0
mov dword [0x1007cb78], 0x66
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.1004309b
mov esp, ebp
pop ebp
ret
push 0xdf
push 0x1bc
call fcn.1003d7d0
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.1004309b
mov esp, ebp
pop ebp
ret
push 0x129
push 0x92
call fcn.10026900
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.1004309b
mov esp, ebp
pop ebp
ret
push 0x3ed
call fcn.10001020
cmp eax, 0x1518
jbe case.0x1000c020.14
push 4
call fcn.10001020
cmp eax, 0xd
jne case.0x1000c020.14
mov ecx, dword [0x1007d050]
call dword [0x1007d054]
call fcn.1000bfc0
mov dword [0x1007cb78], 0x17
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.1004309b
mov esp, ebp
pop ebp
ret
push 0x64
push 0x95
push 0x1d2
call fcn.10026890
test eax, eax
je 0x1000c95b
push 0x32
push 0x95
push 0x1d2
call fcn.10026890
test eax, eax
je 0x1000c93b
push 0x32383539
call fcn.1000be00
push 0x32363200
call fcn.1000bd30
mov dword [0x1007cb78], 0x18
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.1004309b
mov esp, ebp
pop ebp
ret
push 0x13
lea eax, [ebp - 0x1c]
push eax
call fcn.10034910
mov edi, 0x10057460
lea esi, [ebp - 0x1c]
mov ecx, 7
xor edx, edx
repe cmpsb byte [esi], byte es:[edi]
jne case.0x1000c020.14
push 0x32363200
call fcn.1000be00
push 0x158
push 0x98
call fcn.10026900
mov dword [0x1007cb78], 0x19
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.1004309b
mov esp, ebp
pop ebp
ret
push 0x9c7
call fcn.10034870
call fcn.1000bfc0
mov dword [0x1007cb78], 0x1a
push 0x64
push 0x14c
push 0x1f0
call fcn.10026890
test eax, eax
je 0x1000cc26
push 0x32
push 0x14c
push 0x1f0
call fcn.10026890
test eax, eax
je 0x1000cc06
push 0x32393932
call fcn.1000be00
mov al, 0x61
mov byte [ebp - 0x1b], al
mov byte [ebp - 0x18], al
mov byte [ebp - 0x15], al
mov al, 0x30
mov cl, 0x69
mov byte [ebp - 0xa], al
mov byte [ebp - 9], al
mov byte [ebp - 8], al
mov dl, 0x6e
push 0x1f
lea eax, [ebp - 0x24]
push eax
mov byte [ebp - 0x24], 5
mov byte [ebp - 0x23], bl
mov byte [ebp - 0x22], 9
mov byte [ebp - 0x21], bl
mov byte [ebp - 0x20], bl
mov byte [ebp - 0x1f], bl
mov byte [ebp - 0x1e], 0x43
mov byte [ebp - 0x1d], 0x51
mov byte [ebp - 0x1c], cl
mov byte [ebp - 0x1a], dl
mov byte [ebp - 0x19], 0x42
mov byte [ebp - 0x17], cl
mov byte [ebp - 0x16], 0x57
mov byte [ebp - 0x14], dl
mov byte [ebp - 0x13], 0x47
mov byte [ebp - 0x12], cl
mov byte [ebp - 0x11], 0x66
mov byte [ebp - 0x10], 0x74
mov byte [ebp - 0xf], bl
mov byte [ebp - 0xe], 1
mov byte [ebp - 0xd], 0x31
mov byte [ebp - 0xc], bl
mov byte [ebp - 0xb], 0x31
mov byte [ebp - 7], 0x35
mov byte [ebp - 6], bl
call fcn.10001270
mov dword [0x1007cb78], 0x1b
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.1004309b
mov esp, ebp
pop ebp
ret
push 0x14c
push 0x1f0
call fcn.1003d7d0
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.1004309b
mov esp, ebp
pop ebp
ret
push 0x158
push 0x98
call fcn.10026900
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.1004309b
mov esp, ebp
pop ebp
ret
push 0x32
push 0x11a
push 0xac
call fcn.1003d7f0
test eax, eax
je case.0x1000c020.14
push 0x32393931
call fcn.1000be00
mov dword [0x1007cb78], 0x1c
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.1004309b
mov esp, ebp
pop ebp
ret
push 0x32
push 0x163
push 0xb0
call fcn.1003d7f0
test eax, eax
je case.0x1000c020.14
push 0x32393936
call fcn.1000be00
push 0x32393932
call fcn.1000bd30
mov dword [0x1007cb78], 0x1d
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.1004309b
mov esp, ebp
pop ebp
ret
push 0x32
push 0x158
push 0x98
call fcn.1003d7f0
test eax, eax
je case.0x1000c020.14
push 0x32393932
call fcn.1000be00
mov cl, 0x69
mov al, 0x61
mov byte [ebp - 0x1c], cl
mov byte [ebp - 0x17], cl
mov byte [ebp - 0x12], cl
mov byte [ebp - 0x1b], al
mov dl, 0x6e
mov byte [ebp - 0x18], al
mov byte [ebp - 0x15], al
mov al, 0x30
push 0x1f
lea ecx, [ebp - 0x24]
push ecx
mov byte [ebp - 0x24], 5
mov byte [ebp - 0x23], bl
mov byte [ebp - 0x22], 9
mov byte [ebp - 0x21], bl
mov byte [ebp - 0x20], bl
mov byte [ebp - 0x1f], bl
mov byte [ebp - 0x1e], 0x43
mov byte [ebp - 0x1d], 0x51
mov byte [ebp - 0x1a], dl
mov byte [ebp - 0x19], 0x42
mov byte [ebp - 0x16], 0x57
mov byte [ebp - 0x14], dl
mov byte [ebp - 0x13], 0x47
mov byte [ebp - 0x11], 0x66
mov byte [ebp - 0x10], 0x74
mov byte [ebp - 0xf], bl
mov byte [ebp - 0xe], 1
mov byte [ebp - 0xd], 0x31
mov byte [ebp - 0xc], bl
mov byte [ebp - 0xb], 0x31
mov byte [ebp - 0xa], al
mov byte [ebp - 9], al
mov byte [ebp - 8], al
mov byte [ebp - 7], 0x35
mov byte [ebp - 6], bl
call fcn.10001270
mov dword [0x1007cb78], 0x1e
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.1004309b
mov esp, ebp
pop ebp
ret
cmp dword [0x1007a25c], ebx
push 0x32
jne 0x1000cde9
push 0x14b
push 0x8f
call fcn.1003d7f0
test eax, eax
je case.0x1000c020.14
call fcn.1003af60
test eax, eax
je case.0x1000c020.14
push 6
push 0x10058838
push 0x10057cf0
call fcn.10032410
test eax, eax
je case.0x1000c020.14
mov dword [0x1007a25c], 1
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.1004309b
mov esp, ebp
pop ebp
ret
push 0x99
push 0xe8
call fcn.1003d7f0
test eax, eax
je case.0x1000c020.14
push 0x32393935
call fcn.1000be00
push 0x9c7
call fcn.10034870
mov dword [0x1007cb78], 0x1f
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.1004309b
mov esp, ebp
pop ebp
ret
push 5
push 0x10058830
call fcn.10004050
test eax, eax
je case.0x1000c020.14
mov dword [0x1007cb78], 0x20
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.1004309b
mov esp, ebp
pop ebp
ret
push 0x32
push 0x14
push 0xe
call fcn.1003d7f0
test eax, eax
je case.0x1000c020.14
push 0x32393933
call fcn.1000be00
mov dword [0x1007cb78], 0x21
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.1004309b
mov esp, ebp
pop ebp
ret
push 0xa
push 0xa
push 8
call fcn.1003d7f0
test eax, eax
je case.0x1000c020.14
push 0x32393934
call fcn.1000be00
push 0x32393932
call fcn.1000bd30
push 0x9c7
call fcn.10034870
mov dword [0x1007cb78], 0x22
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.1004309b
mov esp, ebp
pop ebp
ret
push 0x9c7
call fcn.10034870
call fcn.1000bfc0
mov dword [0x1007cb78], 0x23
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.1004309b
mov esp, ebp
pop ebp
ret
push 0x32
push 0x158
push 0x98
call fcn.1003d7f0
test eax, eax
je case.0x1000c020.14
push 0x32393932
call fcn.1000be00
mov al, 0x61
mov dl, 0x6e
mov cl, 0x69
mov byte [ebp - 0x1a], dl
mov byte [ebp - 0x14], dl
mov byte [ebp - 0x1b], al
mov byte [ebp - 0x18], al
mov byte [ebp - 0x15], al
mov al, 0x30
push 0x1f
lea edx, [ebp - 0x24]
push edx
mov byte [ebp - 0x24], 5
mov byte [ebp - 0x23], bl
mov byte [ebp - 0x22], 9
mov byte [ebp - 0x21], bl
mov byte [ebp - 0x20], bl
mov byte [ebp - 0x1f], bl
mov byte [ebp - 0x1e], 0x43
mov byte [ebp - 0x1d], 0x51
mov byte [ebp - 0x1c], cl
mov byte [ebp - 0x19], 0x42
mov byte [ebp - 0x17], cl
mov byte [ebp - 0x16], 0x57
mov byte [ebp - 0x13], 0x47
mov byte [ebp - 0x12], cl
mov byte [ebp - 0x11], 0x66
mov byte [ebp - 0x10], 0x74
mov byte [ebp - 0xf], bl
mov byte [ebp - 0xe], 1
mov byte [ebp - 0xd], 0x31
mov byte [ebp - 0xc], bl
mov byte [ebp - 0xb], 0x31
mov byte [ebp - 0xa], al
mov byte [ebp - 9], al
mov byte [ebp - 8], al
mov byte [ebp - 7], 0x35
mov byte [ebp - 6], bl
call fcn.10001270
mov dword [0x1007cb78], 0x32
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.1004309b
mov esp, ebp
pop ebp
ret
push 0x13
lea eax, [ebp - 0x1c]
push eax
call fcn.10034910
push 4
lea ecx, [ebp - 0x1c]
push 0x100573d8
push ecx
call fcn.10042c2a
add esp, 0xc
test eax, eax
jne 0x1000d004
mov dword [0x1007cb78], 0x3a
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.1004309b
mov esp, ebp
pop ebp
ret
push 0x32
push 0x14b
push 0x8f
call fcn.1003d7f0
test eax, eax
je case.0x1000c020.14
call fcn.1003af60
test eax, eax
je case.0x1000c020.14
push 5
push 0x100573d8
push 0x10057cf0
call fcn.10032410
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.1004309b
mov esp, ebp
pop ebp
ret
push 0x32
push 0x5f
push 0x3b
call fcn.1003d7f0
test eax, eax
je case.0x1000c020.14
mov edx, dword [0x10058824]
mov eax, dword [0x10058828]
mov cx, word [0x1005882c]
mov dword [0x1007c8e8], edx
mov dl, byte [0x1005882e]
mov dword [0x1007c8ec], eax
mov word [0x1007c8f0], cx
mov byte [0x1007c8f2], dl
mov dword [0x1007c91c], ebx
mov dword [0x1007c8dc], 1
mov dword [0x1006fab0], 0x3a98
mov dword [0x1007cb78], 0x26
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.1004309b
mov esp, ebp
pop ebp
ret
mov eax, dword [0x10058814]
mov ecx, dword [0x10058818]
mov edx, dword [0x1005881c]
push 0x32
mov dword [0x1007c8e8], eax
mov al, byte [0x10058820]
push 0x52
push 0x3b
mov dword [0x1007c8dc], ebx
mov dword [0x1007c8ec], ecx
mov dword [0x1007c8f0], edx
mov byte [0x1007c8f4], al
mov dword [0x1007c91c], ebx
call fcn.1003d7f0
test eax, eax
je case.0x1000c020.14
mov dword [0x1007c8d4], 1
mov dword [0x1006fab0], 0x4e20
mov dword [0x1007cb78], 0x27
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.1004309b
mov esp, ebp
pop ebp
ret
push 5
push 0x10057460
mov dword [0x1006fab0], 0x5dc
mov dword [0x1007c8d4], ebx
call fcn.10004050
test eax, eax
je case.0x1000c020.14
mov dword [0x1007cb78], 0x28
mov dword [0x1006fab0], 0x1388
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.1004309b
mov esp, ebp
pop ebp
ret
call fcn.1000bfc0
mov dword [0x1007cb78], 0x29
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.1004309b
mov esp, ebp
pop ebp
ret
mov ecx, dword [0x10058808]
mov edx, dword [0x1005880c]
mov al, byte [0x10058810]
push 0x32
push 0x13d
push 0xee
mov dword [0x1007c8e8], ecx
mov dword [0x1007c8ec], edx
mov byte [0x1007c8f0], al
call fcn.1003d7f0
test eax, eax
je case.0x1000c020.14
mov dword [0x1007c91c], ebx
mov dword [0x1007c8d8], 1
mov dword [0x1006fab0], 0x4e20
mov dword [0x1007cb78], 0x2a
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.1004309b
mov esp, ebp
pop ebp
ret
mov ecx, dword [0x100587fc]
mov edx, dword [0x10058800]
mov al, byte [0x10058804]
mov dword [0x1007c8e8], ecx
mov dword [0x1007c8ec], edx
mov byte [0x1007c8f0], al
mov dword [0x1006fab0], 0x2710
mov dword [0x1007c8d8], ebx
mov dword [0x1007c91c], ebx
mov dword [0x1007c8e0], 1
mov dword [0x1007cb78], 0x2b
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.1004309b
mov esp, ebp
pop ebp
ret
mov dword [0x1006fab0], 0x7d0
mov dword [0x1007c91c], ebx
mov dword [0x1007c8e0], ebx
mov dword [0x1007cb78], 0x2f
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.1004309b
mov esp, ebp
pop ebp
ret
push 0x32
push 0x53
push 0x42
call fcn.1003d7f0
test eax, eax
je case.0x1000c020.14
mov ecx, dword [0x10057cfc]
mov edx, dword [0x10057d00]
mov ax, word [0x10057d04]
mov dword [0x1007c8e8], ecx
mov cl, byte [0x10057d06]
mov dword [0x1007c8ec], edx
mov word [0x1007c8f0], ax
mov byte [0x1007c8f2], cl
call fcn.100397e0
mov esi, eax
cmp esi, ebx
je case.0x1000c020.14
push 4
lea edi, [esi + 0x10]
push edi
call dword [sym.imp.KERNEL32.dll_IsBadReadPtr]
test eax, eax
jne case.0x1000c020.14
mov edx, dword [esi + 0x14]
mov eax, dword [edi]
push 1
push 0x9c7
push edx
push eax
call fcn.100283b0
mov dword [0x1007cb78], 5
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.1004309b
mov esp, ebp
pop ebp
ret
push 0x32
push 0x53
push 0x42
call fcn.1003d7f0
test eax, eax
je case.0x1000c020.14
mov ecx, dword [0x10057cfc]
mov edx, dword [0x10057d00]
mov ax, word [0x10057d04]
mov dword [0x1007c8e8], ecx
mov cl, byte [0x10057d06]
mov dword [0x1007c8ec], edx
mov word [0x1007c8f0], ax
mov byte [0x1007c8f2], cl
call fcn.100397e0
mov esi, eax
cmp esi, ebx
je case.0x1000c020.14
push 4
lea edi, [esi + 0x10]
push edi
call dword [sym.imp.KERNEL32.dll_IsBadReadPtr]
test eax, eax
jne case.0x1000c020.14
mov edx, dword [esi + 0x14]
mov eax, dword [edi]
push 2
push 0x9c7
push edx
push eax
call fcn.100283b0
mov dword [0x1007cb78], 0xc
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.1004309b
mov esp, ebp
pop ebp
ret
push 0x32
push 0x53
push 0x42
call fcn.1003d7f0
test eax, eax
je case.0x1000c020.14
mov ecx, dword [0x10057cfc]
mov edx, dword [0x10057d00]
mov ax, word [0x10057d04]
mov dword [0x1007c8e8], ecx
mov cl, byte [0x10057d06]
mov dword [0x1007c8ec], edx
mov word [0x1007c8f0], ax
mov byte [0x1007c8f2], cl
call fcn.100397e0
mov esi, eax
cmp esi, ebx
je case.0x1000c020.14
push 4
lea edi, [esi + 0x10]
push edi
call dword [sym.imp.KERNEL32.dll_IsBadReadPtr]
test eax, eax
jne case.0x1000c020.14
mov edx, dword [esi + 0x14]
mov eax, dword [edi]
push 0xa
push 0x9c7
push edx
push eax
call fcn.100283b0
mov dword [0x1007cb78], 0x14
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.1004309b
mov esp, ebp
pop ebp
ret
push 1
push 0x100587f0
call fcn.10001160
mov esi, dword [sym.imp.USER32.dll_MessageBeep]
push 0x40
call esi
push 0x40
call esi
push 0x40
call esi
mov dword [0x1007cb78], ebx
mov dword [0x1007c8d8], ebx
mov dword [0x1007cb74], ebx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.1004309b
mov esp, ebp
pop ebp
ret
push 0x37
push 0x32
mov dword [0x1006fab0], 0xc8
call fcn.100271d0
mov dword [0x1007cb78], 0x33
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.1004309b
mov esp, ebp
pop ebp
ret
push 0x36
push 0x32
call fcn.100271d0
push 0x36
push 0x32
call fcn.10027100
mov eax, dword [0x1007a258]
add eax, 1
cmp eax, 0xa
mov dword [0x1007a258], eax
jne case.0x1000c020.14
mov dword [0x1007cb78], 0x34
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.1004309b
mov esp, ebp
pop ebp
ret
push 0x30
push 0x38
mov dword [0x1006fab0], 0xc8
call fcn.100271d0
mov dword [0x1007cb78], 0x35
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.1004309b
mov esp, ebp
pop ebp
ret
push 0x31
push 0x38
call fcn.100271d0
push 0x31
push 0x38
call fcn.10027100
mov eax, dword [0x1007a254]
add eax, 1
cmp eax, 0xf
mov dword [0x1007a254], eax
jne case.0x1000c020.14
mov dword [0x1007cb78], 0x36
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.1004309b
mov esp, ebp
pop ebp
ret
push 0x37
push 0x35
mov dword [0x1006fab0], 0xc8
call fcn.100271d0
mov dword [0x1007cb78], 0x37
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.1004309b
mov esp, ebp
pop ebp
ret
push 0x38
push 0x35
call fcn.100271d0
push 0x38
push 0x35
call fcn.10027100
mov eax, dword [0x1007a250]
add eax, 1
cmp eax, 0xa
mov dword [0x1007a250], eax
jne case.0x1000c020.14
mov dword [0x1007cb78], 0x38
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.1004309b
mov esp, ebp
pop ebp
ret
push 0x39
push 0x34
mov dword [0x1006fab0], 0xc8
call fcn.100271d0
mov dword [0x1007cb78], 0x39
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.1004309b
mov esp, ebp
pop ebp
ret
push 0x38
push 0x34
call fcn.100271d0
push 0x38
push 0x34
call fcn.10027100
mov eax, dword [0x1007a24c]
add eax, 1
cmp eax, 0xa
mov dword [0x1007a24c], eax
jne case.0x1000c020.14
mov ecx, dword [0x10058824]
mov edx, dword [0x10058828]
mov ax, word [0x1005882c]
mov dword [0x1007c8e8], ecx
mov cl, byte [0x1005882e]
mov dword [0x1006fab0], 0x7d0
mov dword [0x1007cb78], 0x24
mov dword [0x1007c8ec], edx
mov word [0x1007c8f0], ax
mov byte [0x1007c8f2], cl
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.1004309b
mov esp, ebp
pop ebp
ret
push 0x32
push 0x5f
push 0x3b
call fcn.1003d7f0
test eax, eax
je case.0x1000c020.14
push ebx
push 0x100587e4
push 0x10058824
call fcn.10032410
test eax, eax
je case.0x1000c020.59
mov dword [0x1007cb78], 0x3b
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.1004309b
mov esp, ebp
pop ebp
ret
push ebx
push 0x100587d4
push 0x10058824
call fcn.10032410
test eax, eax
je 0x1000d71b
mov dword [0x1006fab0], 0xc8
mov dword [0x1007cb78], 0x3c
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.1004309b
mov esp, ebp
pop ebp
ret
call fcn.100397e0
cmp eax, ebx
je case.0x1000c020.14
push eax
call fcn.10001a40
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.1004309b
mov esp, ebp
pop ebp
ret
push 0x36
push 0x32
call fcn.100271d0
push 0x36
push 0x32
call fcn.10027100
mov eax, dword [0x1007a248]
add eax, 1
cmp eax, 0xa
mov dword [0x1007a248], eax
jne case.0x1000c020.14
mov edx, dword [0x10058814]
mov eax, dword [0x10058818]
mov ecx, dword [0x1005881c]
mov dword [0x1007c8e8], edx
mov dl, byte [0x10058820]
mov dword [0x1006fab0], 0x7d0
mov dword [0x1007cb78], 0x3d
mov dword [0x1007c8ec], eax
mov dword [0x1007c8f0], ecx
mov byte [0x1007c8f4], dl
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.1004309b
mov esp, ebp
pop ebp
ret
push 0x32
push 0x52
push 0x3b
call fcn.1003d7f0
test eax, eax
je case.0x1000c020.14
push ebx
push 0x100587e4
push 0x10058814
call fcn.10032410
test eax, eax
je case.0x1000c020.62
mov dword [0x1007cb78], 0x3e
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.1004309b
mov esp, ebp
pop ebp
ret
push ebx
push 0x100587d4
push 0x10058814
call fcn.10032410
test eax, eax
je 0x1000d71b
mov dword [0x1006fab0], 0xc8
mov dword [0x1007cb78], 0x3f
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.1004309b
mov esp, ebp
pop ebp
ret
push 0x31
push 0x38
call fcn.100271d0
push 0x31
push 0x38
call fcn.10027100
mov eax, dword [0x1007a244]
add eax, 1
cmp eax, 0xf
mov dword [0x1007a244], eax
jne case.0x1000c020.14
mov eax, dword [0x10058808]
mov ecx, dword [0x1005880c]
mov dl, byte [0x10058810]
mov dword [0x1006fab0], 0x7d0
mov dword [0x1007cb78], 0x40
mov dword [0x1007c8e8], eax
mov dword [0x1007c8ec], ecx
mov byte [0x1007c8f0], dl
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.1004309b
mov esp, ebp
pop ebp
ret
push 5
push 0x10057460
call fcn.10004050
test eax, eax
je case.0x1000c020.14
mov dword [0x1007cb78], 0x41
mov dword [0x1006fab0], 0x1388
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.1004309b
mov esp, ebp
pop ebp
ret
push 0x32
push 0x13d
push 0xee
mov dword [0x1006fab0], 0x7d0
call fcn.1003d7f0
test eax, eax
je case.0x1000c020.14
push ebx
push 0x100587e4
push 0x10058808
call fcn.10032410
test eax, eax
je 0x1000d71b
mov dword [0x1007cb78], 0x42
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.1004309b
mov esp, ebp
pop ebp
ret
push ebx
push 0x100587d4
push 0x10058808
call fcn.10032410
test eax, eax
je 0x1000d71b
mov dword [0x1006fab0], 0xc8
mov dword [0x1007cb78], 0x43
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.1004309b
mov esp, ebp
pop ebp
ret
push 0x38
push 0x35
call fcn.100271d0
push 0x38
push 0x35
call fcn.10027100
mov eax, dword [0x1007a240]
add eax, 1
cmp eax, 0xa
mov dword [0x1007a240], eax
jne case.0x1000c020.14
mov eax, dword [0x100587fc]
mov ecx, dword [0x10058800]
mov dl, byte [0x10058804]
mov dword [0x1006fab0], 0x7d0
mov dword [0x1007cb78], 0x44
mov dword [0x1007c8e8], eax
mov dword [0x1007c8ec], ecx
mov byte [0x1007c8f0], dl
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.1004309b
mov esp, ebp
pop ebp
ret
push 0x32
push 0xe1
push 0xb8
call fcn.1003d7f0
test eax, eax
je case.0x1000c020.14
push ebx
push 0x100587e4
push 0x100587fc
call fcn.10032410
test eax, eax
je 0x1000d71b
mov dword [0x1007cb78], 0x45
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.1004309b
mov esp, ebp
pop ebp
ret
push ebx
push 0x100587d4
push 0x100587fc
call fcn.10032410
test eax, eax
je 0x1000d71b
mov dword [0x1006fab0], 0xc8
mov dword [0x1007cb78], 0x46
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.1004309b
mov esp, ebp
pop ebp
ret
push 0x38
push 0x34
call fcn.100271d0
push 0x38
push 0x34
call fcn.10027100
mov eax, dword [0x1007a23c]
add eax, 1
cmp eax, 0xa
mov dword [0x1007a23c], eax
jne case.0x1000c020.14
mov dword [0x1007cb78], 0x31
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.1004309b
mov esp, ebp
pop ebp
ret
mov eax, dword [0x1007a238]
cmp eax, 5
mov dword [0x1006fab0], 0x1f4
mov dword [ebp - 0x1c], 0x32393931
mov dword [ebp - 0x18], 0x32393936
mov dword [ebp - 0x14], 0x32393935
mov dword [ebp - 0x10], 0x32393933
mov dword [ebp - 0xc], 0x32393934
jae 0x1000db09
mov ecx, dword [ebp + eax*4 - 0x1c]
add eax, 1
push ecx
mov dword [0x1007a238], eax
call fcn.1000bd30
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.1004309b
mov esp, ebp
pop ebp
ret
push 4
call fcn.10001020
cmp eax, 0x17
jbe 0x1000db21
mov dword [0x1007cb78], 0x32
jmp 0x1000db3a
push 4
call fcn.10001020
mov ecx, 0xd
cmp ecx, eax
sbb edx, edx
and edx, 0x1a
mov dword [0x1007cb78], edx
mov dword [0x1006fab0], 0x5dc
mov ecx, dword [ebp - 4]
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.1004309b
mov esp, ebp
pop ebp
ret