Function at 0x1004a8e0
Capabilities:
Accept command line arguments
Authenticate hmac
Check for time delay via gettickcount
Encode data using base64
Encode data using xor
Parse credit card information
Query environment variable

Disassembly:
push ebp
mov ebp, esp
mov eax, 0x2898
call fcn.100737a0
push ebx
push esi
push edi
mov eax, 0x251
cdq
xor eax, edx
sub eax, edx
mov dword [0x100a5bfc], eax
mov dword [ebp - 0x26b0], 0xb2
mov eax, dword [0x100a5120]
mov ecx, dword [0x100a5124]
mov dword [ebp - 0x26b4], ecx
mov byte [ebp - 2], al
mov dword [ebp - 0x30], 0x1035e339
mov dx, word [0x100a50f8]
mov word [ebp - 0xc], dx
mov eax, 0xd5
mov word [ebp - 0x1c], ax
mov cx, word [0x100a510c]
mov word [ebp - 0x20], cx
mov edx, dword [0x100a5108]
mov byte [ebp - 3], dl
movsx eax, word [0x100a5134]
cdq
mov dword [ebp - 0x44], eax
mov dword [ebp - 0x40], edx
mov dword [ebp - 0x3c], 0x3ce4
mov byte [ebp - 4], 0x31
mov eax, 0xa987
mov word [ebp - 0x18], ax
mov cx, word [0x100a510c]
mov byte [ebp - 5], cl
mov edx, 0x1dce
mov word [ebp - 0x10], dx
mov dword [ebp - 0x24], 0xcf7b7f45
mov dword [ebp - 0x38], 0xd47ce838
mov dword [ebp - 0x34], 0x3871
mov byte [ebp - 1], 0x6b
mov eax, dword [0x100a50e8]
cdq
mov dword [ebp - 0x50], eax
mov dword [ebp - 0x4c], edx
mov eax, 0x45e9
mov word [ebp - 0x14], ax
xor ecx, ecx
mov dword [ebp - 0x2c], 0x5522
mov dword [ebp - 0x28], ecx
movzx edx, byte [0x100a503b]
mov dword [ebp - 0x48], edx
mov eax, 0x5f4f
mov word [ebp - 0x12c4], ax
mov ecx, dword [0x100a5118]
mov edx, dword [0x100a511c]
mov dword [ebp - 0x26b8], edx
mov byte [ebp - 0x159], cl
mov byte [ebp - 0x14f], 0x71
mov eax, 0xba74
mov word [ebp - 0x12c8], ax
mov ecx, 0x92
mov word [ebp - 0x12cc], cx
mov edx, 0xffff9fd1
mov word [ebp - 0x12d0], dx
mov dword [ebp - 0x21fc], 0x2de83c7b
mov dword [ebp - 0x2200], 0x8645a068
mov al, byte [0x100a50e0]
mov byte [ebp - 0x14d], al
mov dword [ebp - 0x2204], 0xcf9b1dd5
mov ecx, dword [0x100a5150]
mov edx, dword [0x100a5154]
mov dword [ebp - 0x2664], ecx
mov dword [ebp - 0x2660], edx
mov eax, dword [0x100a5158]
mov dword [ebp - 0x2208], eax
mov eax, dword [0x100a50e8]
cdq
mov dword [ebp - 0x266c], eax
mov dword [ebp - 0x2668], edx
mov dword [ebp - 0x220c], 0xdf555d08
movsx ecx, word [0x100a5134]
mov dword [ebp - 0x2210], ecx
movzx edx, word [0x100a5148]
mov dword [ebp - 0x2214], edx
mov eax, 0x2de5
mov word [ebp - 0x12d4], ax
mov ecx, dword [0x100a5108]
mov byte [ebp - 0x14e], cl
mov edx, dword [0x100a5bfc]
mov dword [ebp - 0x160], edx
mov eax, dword [0x100a50f0]
mov ecx, dword [0x100a50f4]
push 0xd1b56
push 0x7dd8d2df
push ecx
push eax
call fcn.10073670
mov ecx, eax
movzx eax, word [0x100a5148]
cdq
add eax, ecx
mov word [0x100a5148], ax
mov edx, dword [0x100a5150]
sub edx, 1
mov eax, dword [0x100a5154]
sbb eax, 0
mov dword [0x100a5150], edx
mov dword [0x100a5154], eax
movsx eax, byte [ebp - 3]
cdq
mov ecx, dword [ebp - 0x2c]
mov esi, dword [ebp - 0x28]
push edx
push eax
push esi
push ecx
call fcn.10073670
mov ecx, dword [ebp - 0x2c]
mov esi, dword [ebp - 0x28]
sub ecx, eax
sbb esi, edx
mov dword [ebp - 0x2c], ecx
mov dword [ebp - 0x28], esi
mov eax, dword [ebp - 0x24]
add eax, 0xd056
cdq
mov dword [ebp - 0x44], eax
mov dword [ebp - 0x40], edx
movzx edx, word [0x100a5128]
imul eax, edx, 0xfb
cdq
mov dword [0x100a5120], eax
mov dword [0x100a5124], edx
mov eax, dword [ebp - 0x160]
add eax, 0x54c
mov dword [ebp - 0x2218], eax
movzx ecx, word [ebp - 0x18]
cmp ecx, dword [ebp - 0x38]
je 0x1004ab76
mov dword [ebp - 0x2d0], 1
jmp 0x1004ab80
mov dword [ebp - 0x2d0], 0
movzx edx, word [ebp - 0x18]
cmp edx, 1
je 0x1004ab95
mov dword [ebp - 0x2d4], 1
jmp 0x1004ab9f
mov dword [ebp - 0x2d4], 0
mov eax, dword [ebp - 0x2d0]
cmp eax, dword [ebp - 0x2d4]
jge 0x1004aea0
movsx ecx, byte [ebp - 4]
test ecx, ecx
jne 0x1004abc5
mov dword [ebp - 0x2d8], 1
jmp 0x1004abcf
mov dword [ebp - 0x2d8], 0
movsx edx, word [0x100a5134]
cmp edx, dword [ebp - 0x2d8]
jle 0x1004abea
mov dword [ebp - 0x2e0], 1
jmp 0x1004abf4
mov dword [ebp - 0x2e0], 0
movzx eax, word [ebp - 0x20]
test eax, eax
jne 0x1004ac0e
cmp dword [ebp - 0x30], 0
jne 0x1004ac0e
mov dword [ebp - 0x2dc], 0
jmp 0x1004ac18
mov dword [ebp - 0x2dc], 1
mov ecx, dword [ebp - 0x2dc]
not ecx
cmp dword [ebp - 0x2e0], ecx
jg 0x1004ac3c
xor edx, edx
mov dword [ebp - 0xec4], 1
mov dword [ebp - 0xec0], edx
jmp 0x1004ac47
xorps xmm0, xmm0
movlpd qword [ebp - 0xec4], xmm0
movsx eax, word [0x100a5140]
cdq
mov dword [ebp - 0x1348], eax
mov dword [ebp - 0x1344], edx
cmp dword [ebp - 0x1344], 0xfff2a258
jl 0x1004ac81
jg 0x1004ac75
cmp dword [ebp - 0x1348], 0xfd04413e
jbe 0x1004ac81
mov dword [ebp - 0x2e4], 1
jmp 0x1004ac8b
mov dword [ebp - 0x2e4], 0
mov eax, dword [ebp - 0x2e4]
not eax
cdq
mov ecx, dword [ebp - 0x50]
sub ecx, eax
mov eax, dword [ebp - 0x4c]
sbb eax, edx
mov dword [ebp - 0x1350], ecx
mov dword [ebp - 0x134c], eax
mov ecx, dword [ebp - 0xec4]
cmp ecx, dword [ebp - 0x1350]
jne 0x1004acca
mov edx, dword [ebp - 0xec0]
cmp edx, dword [ebp - 0x134c]
je 0x1004ad5e
mov eax, dword [ebp - 0x50]
push eax
call dword [sym.imp.USER32.dll_IsZoomed]
mov word [ebp - 0x14], ax
movsx ecx, word [ebp - 0x14]
test ecx, ecx
je 0x1004aceb
call dword [sym.imp.KERNEL32.dll_GetCommandLineW]
mov byte [ebp - 2], al
jmp 0x1004ad59
movsx edx, word [0x100a513c]
movzx eax, word [ebp - 0x20]
imul edx, eax
movsx ecx, word [0x100a513c]
and ecx, edx
mov word [0x100a513c], cx
movsx edx, word [0x100a5134]
add edx, 0x15ec94be
mov word [0x100a5130], dx
movzx eax, word [0x100a5128]
sub eax, dword [ebp - 0x34]
mov word [0x100a5128], ax
mov ecx, 1
imul edx, ecx, 0x7fec
movzx eax, byte [edx + 0x100f52d8]
movzx ecx, word [ebp - 0xc]
add ecx, eax
mov word [ebp - 0xc], cx
mov eax, dword [ebp - 0x44]
mov edx, dword [ebp - 0x40]
mov cl, 7
call fcn.100736b0
mov byte [ebp - 5], al
jmp 0x1004ae9e
cmp dword [ebp - 0x38], 0
je 0x1004adbf
mov edx, dword [ebp - 0x38]
add edx, 0x79
mov dword [0x100a5108], edx
mov eax, dword [0x100a50f8]
cdq
mov ecx, eax
mov edx, dword [0x100a5118]
mov eax, dword [0x100a511c]
mov dword [ebp - 0x221c], eax
sub ecx, edx
mov eax, dword [0x100a50f8]
cdq
xor eax, ecx
mov dword [0x100a50f8], eax
mov eax, dword [ebp - 0x38]
cdq
push 0xb957b
push 0x36cde834
push edx
push eax
call fcn.10073670
mov word [ebp - 0xc], ax
mov cl, byte [0x100a5bfc]
mov byte [ebp - 4], cl
jmp 0x1004ae9e
movsx edx, word [ebp - 0x14]
movsx eax, word [ebp - 0x10]
cmp edx, eax
jge 0x1004add7
mov dword [ebp - 0x2e8], 1
jmp 0x1004ade1
mov dword [ebp - 0x2e8], 0
movzx ecx, word [0x100a512c]
cmp dword [ebp - 0x2e8], ecx
jg 0x1004ae44
movsx edx, byte [0x100a504b]
add edx, 0x88
movsx eax, word [ebp - 0x1c]
imul eax, edx
mov word [ebp - 0x1c], ax
movsx eax, word [ebp - 0x10]
cdq
add eax, 0x96d31b9c
mov byte [ebp - 4], al
mov ecx, 4
imul edx, ecx, 0x33ae
mov ax, word [edx + 0x10136688]
mov word [ebp - 0x10], ax
movsx ecx, word [ebp - 0x14]
movzx edx, word [0x100a510c]
sub ecx, edx
movsx eax, word [ebp - 0x14]
add eax, ecx
mov word [ebp - 0x14], ax
jmp 0x1004ae9e
movsx ecx, word [0x100a5134]
test ecx, ecx
je 0x1004ae9e
movsx eax, word [0x100a5134]
cdq
add eax, 0x29762648
mov edx, dword [0x100a5120]
mov ecx, dword [0x100a5124]
mov dword [ebp - 0x2220], ecx
add edx, eax
mov dword [ebp - 0x48], edx
movsx edx, byte [0x100a504b]
movsx eax, word [ebp - 0x14]
add edx, eax
mov byte [0x100a504b], dl
movsx ecx, word [0x100a50ec]
mov edx, 4
imul eax, edx, 0x535c
mov dword [eax + 0x10300130], ecx
jmp 0x1004aef7
mov byte [ebp - 1], 9
push 0
push 0x49
mov ecx, dword [ebp - 0x40]
push ecx
mov edx, dword [ebp - 0x44]
push edx
call fcn.10073670
mov ecx, eax
movsx eax, word [ebp - 0x14]
cdq
and eax, ecx
mov word [ebp - 0x14], ax
mov edx, 2
imul eax, edx, 0x70
mov cx, word [0x100a513c]
mov word [eax + 0x100fd620], cx
mov edx, dword [0x100a5144]
xor eax, eax
add edx, dword [0x100a50e0]
adc eax, dword [0x100a50e4]
mov dword [0x100a50e0], edx
mov dword [0x100a50e4], eax
mov ecx, dword [ebp - 0x160]
add ecx, 0x314
mov dword [ebp - 0x300], ecx
movzx edx, word [ebp - 0x18]
movsx eax, word [ebp - 0x10]
cmp edx, eax
jge 0x1004af21
mov dword [ebp - 0x2ec], 1
jmp 0x1004af2b
mov dword [ebp - 0x2ec], 0
movzx ecx, word [ebp - 0x18]
cmp ecx, 0x4c
jge 0x1004af40
mov dword [ebp - 0x2f0], 1
jmp 0x1004af4a
mov dword [ebp - 0x2f0], 0
mov edx, dword [ebp - 0x2ec]
cmp edx, dword [ebp - 0x2f0]
jne 0x1004af6b
movsx eax, word [ebp - 0x14]
push eax
call dword [sym.imp.USER32.dll_IsWindowVisible]
mov byte [ebp - 4], al
jmp 0x1004b26e
movzx ecx, word [0x100a5148]
test ecx, ecx
je 0x1004b098
mov edx, dword [ebp - 0x34]
xor eax, eax
mov ecx, dword [ebp - 0x40]
push ecx
mov ecx, dword [ebp - 0x44]
push ecx
push eax
push edx
call fcn.10073670
mov dword [ebp - 0x34], eax
movzx edx, byte [0x100a503b]
test edx, edx
jne 0x1004afb0
xor eax, eax
mov dword [ebp - 0xecc], 1
mov dword [ebp - 0xec8], eax
jmp 0x1004afbb
xorps xmm0, xmm0
movlpd qword [ebp - 0xecc], xmm0
movzx eax, word [0x100a510c]
cdq
movsx ecx, byte [ebp - 2]
sub ecx, dword [ebp - 0x30]
xor esi, esi
mov edi, dword [ebp - 0x44]
add edi, dword [ebp - 0xecc]
mov ebx, dword [ebp - 0x40]
adc ebx, dword [ebp - 0xec8]
sub ecx, edi
sbb esi, ebx
xor eax, ecx
xor edx, esi
mov dword [ebp - 0x1358], eax
mov dword [ebp - 0x1354], edx
mov edx, dword [ebp - 0x1358]
or edx, dword [ebp - 0x1354]
jne 0x1004b00e
mov eax, 1
mov word [ebp - 0xb2], ax
jmp 0x1004b017
xor ecx, ecx
mov word [ebp - 0xb2], cx
mov dx, word [ebp - 0xb2]
mov word [0x100a5140], dx
mov eax, dword [0x100a5118]
mov ecx, dword [0x100a511c]
mov dword [ebp - 0x2224], ecx
add eax, 0x7f1a
mov dword [ebp - 0x34], eax
movsx edx, word [0x100a515c]
add edx, 0x7860bacb
xor eax, eax
mov dword [ebp - 0x44], edx
mov dword [ebp - 0x40], eax
movzx eax, word [0x100a5130]
cdq
add eax, dword [0x100a5150]
adc edx, dword [0x100a5154]
add eax, dword [0x100a5150]
adc edx, dword [0x100a5154]
mov dword [0x100a5150], eax
mov dword [0x100a5154], edx
mov ecx, 1
imul edx, ecx, 0x25f4
movzx eax, byte [edx + 0x100fee98]
mov dword [ebp - 0x38], eax
jmp 0x1004b26e
cmp dword [ebp - 0x34], 0
jne 0x1004b0b2
movsx ecx, word [ebp - 0x10]
test ecx, ecx
jne 0x1004b0b2
mov dword [ebp - 0x2f4], 0
jmp 0x1004b0bc
mov dword [ebp - 0x2f4], 1
movsx edx, word [0x100a513c]
cmp dword [ebp - 0x2f4], edx
jg 0x1004b173
push 0xd5b9c
push 0xcaaf265d
mov eax, dword [0x100a50e4]
push eax
mov ecx, dword [0x100a50e0]
push ecx
call fcn.10073670
mov ecx, eax
movsx eax, byte [0x100a5026]
cdq
add eax, ecx
mov byte [0x100a5026], al
mov edx, dword [0x100a5158]
xor eax, eax
mov ecx, dword [0x100a5100]
mov esi, dword [0x100a5104]
push eax
push edx
push esi
push ecx
call fcn.10073670
mov word [0x100a5128], ax
movsx edx, word [0x100a5140]
test edx, edx
je 0x1004b13e
mov eax, dword [ebp - 0x44]
mov ecx, dword [ebp - 0x40]
mov dword [ebp - 0xed4], eax
mov dword [ebp - 0xed0], ecx
jmp 0x1004b14f
movzx eax, word [ebp - 0x18]
cdq
mov dword [ebp - 0xed4], eax
mov dword [ebp - 0xed0], edx
mov edx, dword [ebp - 0xed4]
mov dword [0x100a50f8], edx
mov ax, word [ebp - 0x18]
mov ecx, 2
imul edx, ecx, 0x62
mov word [edx + 0x1012c880], ax
jmp 0x1004b26e
movsx eax, word [0x100a513c]
movsx ecx, byte [ebp - 5]
not ecx
cmp eax, ecx
jge 0x1004b198
xor edx, edx
mov dword [ebp - 0xedc], 1
mov dword [ebp - 0xed8], edx
jmp 0x1004b1a3
xorps xmm0, xmm0
movlpd qword [ebp - 0xedc], xmm0
mov eax, dword [0x100a5110]
mov ecx, dword [0x100a5114]
not eax
not ecx
mov dword [ebp - 0x1360], eax
mov dword [ebp - 0x135c], ecx
mov edx, dword [ebp - 0xedc]
cmp edx, dword [ebp - 0x1360]
jne 0x1004b1de
mov eax, dword [ebp - 0xed8]
cmp eax, dword [ebp - 0x135c]
je 0x1004b26e
mov ecx, dword [0x100a5100]
mov edx, dword [0x100a5104]
push 0xd9100
push 0xf9a54ed9
push edx
push ecx
call fcn.10073670
mov word [0x100a510c], ax
movzx eax, byte [str._NgcSignWithUserIdK]
add eax, dword [ebp - 0x48]
movzx ecx, byte [str._NgcSignWithUserIdK]
xor ecx, eax
mov byte [str._NgcSignWithUserIdK], cl
movzx eax, word [0x100a5130]
cdq
mov dword [ebp - 0x44], eax
mov dword [ebp - 0x40], edx
mov dx, word [0x100a5bfc]
mov word [0x100a50fc], dx
mov eax, dword [ebp - 0x34]
mov ecx, dword [0x100a5120]
mov edx, dword [0x100a5124]
mov dword [ebp - 0x2228], edx
sub ecx, eax
mov word [0x100a515c], cx
mov eax, 2
imul ecx, eax, 0x216e
movzx edx, word [ecx + 0x101e5e90]
mov eax, dword [ebp - 0x30]
sub eax, edx
mov dword [ebp - 0x30], eax
mov ecx, dword [ebp - 0x160]
add ecx, 0x5bb
mov dword [ebp - 0x304], ecx
xor edx, edx
mov dword [0x100a50e0], 0xd5423029
mov dword [0x100a50e4], edx
movsx eax, word [0x100a515c]
sub eax, 0x44154779
mov word [ebp - 0xc], ax
movzx ecx, word [ebp - 0x20]
add ecx, 0xe
mov dword [ebp - 0x3c], ecx
movsx edx, byte [ebp - 3]
mov dword [ebp - 0x30], edx
movsx eax, word [0x100a50dc]
cdq
mov ecx, dword [ebp - 0x30]
xor esi, esi
add ecx, dword [0x100a50e0]
adc esi, dword [0x100a50e4]
mov dword [ebp - 0x1368], eax
mov dword [ebp - 0x1364], edx
mov dword [ebp - 0x1370], ecx
mov dword [ebp - 0x136c], esi
mov edx, dword [ebp - 0x1368]
cmp edx, dword [ebp - 0x1370]
jne 0x1004b633
mov eax, dword [ebp - 0x1364]
cmp eax, dword [ebp - 0x136c]
jne 0x1004b633
call dword [sym.imp.USER32.dll_GetMessagePos]
xor ecx, ecx
mov dword [0x100a5150], eax
mov dword [0x100a5154], ecx
mov edx, 1
mov word [ebp - 0x10], dx
imul eax, dword [ebp - 0x3c], 0x7a8b
xor ecx, ecx
mov dword [ebp - 0x50], eax
mov dword [ebp - 0x4c], ecx
movsx edx, word [ebp - 0x1c]
imul eax, edx, 0x8f26b306
add eax, dword [ebp - 0x30]
mov dword [ebp - 0x30], eax
movsx eax, word [ebp - 0x10]
add eax, 0x64
cdq
mov dword [ebp - 0x50], eax
mov dword [ebp - 0x4c], edx
imul eax, dword [ebp - 0x24], 0xc56d
cdq
mov dword [0x100a50f0], eax
mov dword [0x100a50f4], edx
movsx ecx, byte [0x100a504b]
movsx edx, word [0x100a50dc]
sub ecx, edx
movsx eax, byte [0x100a504b]
add eax, ecx
mov byte [0x100a504b], al
movsx ecx, word [ebp - 0x10]
mov dword [ebp - 0x2f8], ecx
cmp dword [ebp - 0x2f8], 0
je 0x1004b3a3
cmp dword [ebp - 0x2f8], 1
je 0x1004b3f9
jmp 0x1004b46f
mov dword [ebp - 0x34], 0x26bbd764
movsx edx, word [0x100a50fc]
xor edx, 0x870721ab
mov byte [ebp - 3], dl
movzx eax, word [0x100a5128]
xor eax, dword [ebp - 0x34]
mov dword [0x100a50f8], eax
mov ecx, dword [0x100a5144]
mov edx, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x28]
mov dword [ebp - 0x222c], eax
sub ecx, edx
not ecx
mov word [0x100a510c], cx
mov eax, dword [ebp - 0x2c]
mov edx, dword [ebp - 0x28]
mov cl, 6
call fcn.100736b0
mov word [ebp - 0x10], ax
jmp 0x1004b46f
movsx eax, byte [ebp - 4]
cdq
mov ecx, eax
mov esi, edx
add ecx, dword [ebp - 0x44]
adc esi, dword [ebp - 0x40]
movsx eax, byte [ebp - 4]
cdq
push esi
push ecx
push edx
push eax
call fcn.10073670
mov byte [ebp - 4], al
movzx edx, word [0x100a5128]
movsx eax, byte [ebp - 4]
sub edx, eax
mov word [0x100a5128], dx
movsx eax, word [0x100a5140]
shl eax, 6
cdq
mov dword [0x100a5120], eax
mov dword [0x100a5124], edx
movzx ecx, byte [0x100a503b]
test ecx, ecx
je 0x1004b45d
movzx edx, word [0x100a510c]
mov dword [ebp - 0x2fc], edx
jmp 0x1004b466
mov eax, dword [ebp - 0x48]
mov dword [ebp - 0x2fc], eax
mov ecx, dword [ebp - 0x2fc]
mov dword [ebp - 0x30], ecx
movzx edx, byte [0x100a503b]
movzx eax, word [ebp - 0x20]
sub eax, 0x1870705c
cmp edx, eax
jne 0x1004b633
mov dword [ebp - 0x164], 0x36
mov ecx, dword [ebp - 0x24]
and ecx, dword [ebp - 0x48]
mov edx, dword [ebp - 0x24]
sub edx, ecx
mov dword [ebp - 0x24], edx
mov eax, dword [ebp - 0x2c]
mov ecx, dword [ebp - 0x28]
mov edx, dword [0x100a50e4]
push edx
mov edx, dword [0x100a50e0]
push edx
push ecx
push eax
call fcn.10073670
mov dword [ebp - 0x2c], eax
mov dword [ebp - 0x28], edx
mov eax, dword [ebp - 0x38]
cdq
mov ecx, dword [0x100a5120]
mov esi, dword [0x100a5124]
push edx
push eax
push esi
push ecx
call fcn.10073670
mov ecx, dword [0x100a5120]
mov esi, dword [0x100a5124]
sub ecx, eax
sbb esi, edx
mov dword [0x100a5120], ecx
mov dword [0x100a5124], esi
mov edx, dword [0x100a5120]
mov eax, dword [0x100a5124]
mov ecx, dword [ebp - 0x40]
push ecx
mov ecx, dword [ebp - 0x44]
push ecx
push eax
push edx
call fcn.10073670
mov ecx, dword [0x100a5120]
mov esi, dword [0x100a5124]
push edx
push eax
push esi
push ecx
call fcn.10073670
mov dword [0x100a5120], eax
mov dword [0x100a5124], edx
movsx eax, word [0x100a5138]
cdq
mov edx, dword [0x100a50e0]
add edx, 0x91a6f59c
xor eax, edx
xor ecx, ecx
sub ecx, eax
not ecx
mov dword [0x100a5108], ecx
movsx edx, byte [ebp - 5]
mov eax, dword [ebp - 0x24]
sub eax, edx
mov dword [ebp - 0x24], eax
movsx ecx, word [0x100a5134]
movsx edx, word [ebp - 0x14]
movsx eax, word [0x100a513c]
sub edx, eax
sub ecx, edx
mov word [0x100a515c], cx
movzx ecx, word [0x100a512c]
sar ecx, 8
mov dword [ebp - 0x24], ecx
movsx edx, byte [0x100a504b]
add edx, 0x436a3cb3
movsx eax, word [0x100a50fc]
sub eax, edx
mov word [0x100a50fc], ax
mov ecx, dword [ebp - 0x164]
add ecx, 1
mov dword [ebp - 0x164], ecx
cmp dword [ebp - 0x164], 0x2027
jl 0x1004b551
jmp 0x1004b280
mov ecx, dword [0x100a5100]
mov edx, dword [0x100a5104]
and ecx, 0xd8fbc78b
and edx, 0
mov dword [ebp - 0x44], ecx
mov dword [ebp - 0x40], edx
movsx eax, word [0x100a50fc]
cdq
add eax, 0xd2e3992c
mov word [0x100a5148], ax
mov eax, 4
imul ecx, eax, 0xc07
xor edx, edx
mov eax, dword [0x100a50e0]
sub eax, dword [ecx + 0x10243ff0]
mov ecx, dword [0x100a50e4]
sbb ecx, edx
mov dword [0x100a50e0], eax
mov dword [0x100a50e4], ecx
mov edx, dword [ebp - 0x304]
sub edx, dword [ebp - 0x300]
mov eax, dword [ebp - 0x300]
sub eax, dword [ebp - 0x304]
cmp edx, eax
je 0x100715ff
call dword [sym.imp.USER32.dll_GetFocus]
mov dword [ebp - 0x308], eax
cmp dword [ebp - 0x308], 0
je 0x1004b6e0
mov ecx, dword [ebp - 0x308]
push ecx
call dword [sym.imp.USER32.dll_GetMenu]
mov dword [ebp - 0x2230], eax
call dword [sym.imp.USER32.dll_EndMenu]
mov dword [ebp - 0x2234], eax
movsx eax, byte [ebp - 5]
cdq
mov ecx, dword [0x100a50f0]
mov esi, dword [0x100a50f4]
push esi
push ecx
push edx
push eax
call fcn.10073670
mov byte [ebp - 5], al
movzx eax, word [0x100a512c]
sub eax, 0xec
cdq
mov dword [0x100a50f0], eax
mov dword [0x100a50f4], edx
mov edx, 2
mov word [0x100a5138], dx
mov eax, dword [ebp - 0x34]
add eax, dword [ebp - 0x34]
mov ecx, dword [ebp - 0x34]
sub ecx, eax
mov dword [ebp - 0x34], ecx
mov edx, dword [ebp - 0x44]
mov eax, 4
imul ecx, eax, 0x1d6c
mov dword [ecx + 0x10105810], edx
mov edx, dword [0x100a5bfc]
mov dword [ebp - 0x168], edx
movsx eax, word [0x100a50ec]
test eax, eax
je 0x1004b7d3
mov byte [ebp - 3], 2
movzx eax, byte [0x100a503b]
cdq
sub eax, 0x574046c7
sbb edx, 0x1c8bf
mov ecx, dword [0x100a5100]
mov esi, dword [0x100a5104]
sub ecx, eax
sbb esi, edx
mov dword [0x100a5100], ecx
mov dword [0x100a5104], esi
movsx edx, word [ebp - 0x1c]
imul eax, edx, 0x4c
mov byte [ebp - 1], al
movzx ecx, word [ebp - 0xc]
imul eax, ecx, 0x74450610
cdq
mov ecx, dword [0x100a5100]
mov esi, dword [0x100a5104]
sub ecx, eax
sbb esi, edx
mov dword [0x100a5100], ecx
mov dword [0x100a5104], esi
movsx edx, word [0x100a513c]
imul eax, edx, 0xff4e
mov word [0x100a5140], ax
jmp 0x1004b83d
mov ecx, dword [0x100a5118]
mov edx, dword [0x100a511c]
push 0x92d91
push 0x3bca4a4c
push edx
push ecx
call fcn.10073670
mov byte [ebp - 1], al
movsx eax, word [0x100a50ec]
mov ecx, dword [0x100a5144]
sub ecx, eax
mov edx, dword [0x100a5144]
xor edx, ecx
mov dword [0x100a5144], edx
movsx eax, word [ebp - 0x14]
imul ecx, eax, 0xc5e3
mov word [0x100a5128], cx
mov edx, 0x6ff
mov word [ebp - 0x14], dx
movsx eax, word [ebp - 0x14]
sar eax, 6
mov byte [ebp - 5], al
mov ecx, dword [0x100a5bfc]
mov dword [ebp - 0x48], ecx
mov edx, dword [ebp - 0x168]
add edx, 0x431
mov dword [ebp - 0x2238], edx
call dword [sym.imp.USER32.dll_IsWow64Message]
mov word [ebp - 0x10], ax
mov eax, dword [ebp - 0x168]
add eax, 0x59b
mov dword [ebp - 0x223c], eax
xor ecx, ecx
mov word [0x100a50fc], cx
imul edx, dword [ebp - 0x48], 3
mov word [ebp - 0x1c], dx
mov ax, word [ebp - 0x14]
mov word [0x100a513c], ax
mov ecx, 0x2d41
mov word [ebp - 0x10], cx
mov dx, word [ebp - 0x44]
mov word [ebp - 0x18], dx
movsx eax, word [0x100a50fc]
mov dword [ebp - 0x12d8], eax
cmp dword [ebp - 0x12d8], 0
je 0x1004b8b1
jmp 0x1004b98c
mov ecx, dword [0x100a5150]
add ecx, 0xfbc8521e
mov word [0x100a5138], cx
mov edx, dword [0x100a5110]
mov eax, dword [0x100a5114]
push 0
push 0x615c11c
push eax
push edx
call fcn.10073670
mov dword [ebp - 0x30], eax
movzx ecx, word [0x100a5128]
imul edx, ecx, 0xf544a406
movsx eax, word [0x100a50dc]
sub eax, edx
mov word [0x100a50dc], ax
mov ecx, 1
imul edx, ecx, 5
movsx eax, byte [edx + 0x10277e38]
movsx ecx, byte [0x100a504b]
add ecx, eax
mov byte [0x100a504b], cl
movzx edx, word [ebp - 0x20]
sub edx, dword [0x100a5158]
jne 0x1004b93a
xor eax, eax
mov dword [ebp - 0x1378], 1
mov dword [ebp - 0x1374], eax
jmp 0x1004b945
xorps xmm0, xmm0
movlpd qword [ebp - 0x1378], xmm0
movsx eax, word [0x100a5134]
cdq
mov ecx, dword [ebp - 0x2c]
mov edx, dword [ebp - 0x28]
mov dword [ebp - 0x2240], edx
sub ecx, eax
sub ecx, dword [ebp - 0x1378]
movzx eax, byte [ebp - 1]
cdq
mov esi, eax
add esi, dword [ebp - 0x44]
not esi
movzx eax, byte [0x100a503b]
not eax
movzx edx, word [0x100a5148]
sub eax, edx
cdq
sub esi, eax
or ecx, esi
not ecx
mov dword [0x100a5144], ecx
mov eax, dword [ebp - 0x168]
add eax, 0x3de
mov dword [ebp - 0x2244], eax
movsx ecx, word [ebp - 0x1c]
cmp dword [0x100a5158], ecx
jae 0x1004b9bf
mov edx, dword [0x100a5158]
push edx
call dword [sym.imp.USER32.dll_GetTopWindow]
mov word [ebp - 0x1c], ax
jmp 0x1004ba6a
movsx eax, word [0x100a50fc]
mov dword [ebp - 0x34], eax
movsx ecx, word [0x100a50dc]
movzx edx, word [0x100a5148]
add ecx, edx
movzx eax, word [0x100a512c]
movzx edx, word [ebp - 0xc]
imul eax, edx
mov edx, dword [0x100a50f8]
sub edx, dword [0x100a50e8]
imul eax, edx
xor ecx, eax
mov byte [ebp - 1], cl
movsx eax, byte [ebp - 5]
not eax
mov word [0x100a5148], ax
cmp dword [ebp - 0x48], 0
jne 0x1004ba19
mov dword [ebp - 0x30c], 1
jmp 0x1004ba23
mov dword [ebp - 0x30c], 0
movsx eax, word [0x100a5138]
movsx ecx, byte [ebp - 2]
mov edx, dword [ebp - 0x30c]
sub edx, ecx
add eax, edx
cdq
mov ecx, eax
mov esi, edx
mov edi, dword [0x100a50f0]
mov ebx, dword [0x100a50f4]
add edi, 0x9f
adc ebx, 0
movzx eax, byte [ebp - 1]
cdq
add edi, eax
adc ebx, edx
push ebx
push edi
push esi
push ecx
call fcn.10073670
not eax
mov word [ebp - 0xc], ax
mov edx, dword [0x100a5bfc]
mov dword [ebp - 0x170], edx
mov eax, dword [0x100a5150]
push eax
call dword [sym.imp.USER32.dll_IsWindowVisible]
mov dword [ebp - 0x38], eax
cmp dword [ebp - 0x38], 0
jne 0x1004bb07
mov byte [ebp - 1], 2
movsx ecx, byte [0x100a504b]
sub ecx, dword [ebp - 0x34]
mov dword [0x100a5144], ecx
mov edx, dword [0x100a5118]
mov eax, dword [0x100a511c]
mov ecx, dword [0x100a5104]
add edx, dword [0x100a5100]
adc eax, ecx
mov ecx, dword [0x100a5118]
mov esi, dword [0x100a511c]
sub ecx, edx
sbb esi, eax
mov dword [0x100a5118], ecx
mov dword [0x100a511c], esi
movsx edx, word [ebp - 0x14]
shl edx, 8
mov word [0x100a5128], dx
movzx eax, word [0x100a5130]
mov ecx, dword [ebp - 0x24]
add ecx, eax
mov dword [ebp - 0x24], ecx
imul edx, dword [0x100a50e8], 0xf9
mov eax, dword [0x100a5108]
add eax, edx
mov dword [0x100a5108], eax
mov ecx, dword [ebp - 0x170]
add ecx, 0x2fc
mov dword [ebp - 0x2248], ecx
movsx edx, word [0x100a5134]
movzx eax, word [ebp - 0x18]
cmp edx, eax
je 0x1004bb34
mov dword [ebp - 0x310], 1
jmp 0x1004bb3e
mov dword [ebp - 0x310], 0
movsx ecx, word [0x100a5134]
cmp ecx, 0x4a
je 0x1004bb56
mov dword [ebp - 0x314], 1
jmp 0x1004bb60
mov dword [ebp - 0x314], 0
mov edx, dword [ebp - 0x310]
cmp edx, dword [ebp - 0x314]
jl 0x1004bc00
mov byte [0x100a504b], 0xef
movzx eax, byte [str._NgcSignWithUserIdK]
cdq
mov ecx, dword [ebp - 0x40]
push ecx
mov ecx, dword [ebp - 0x44]
push ecx
push edx
push eax
call fcn.10073670
mov ecx, eax
movzx eax, byte [str._NgcSignWithUserIdK]
cdq
add eax, ecx
mov byte [str._NgcSignWithUserIdK], al
mov dl, byte [ebp - 5]
add dl, 1
mov byte [ebp - 5], dl
movzx eax, byte [0x100a503b]
test eax, eax
je 0x1004bbcf
mov ecx, dword [0x100a5110]
mov edx, dword [0x100a5114]
mov dword [ebp - 0xee4], ecx
mov dword [ebp - 0xee0], edx
jmp 0x1004bbe0
mov eax, dword [ebp - 0x30]
xor ecx, ecx
mov dword [ebp - 0xee4], eax
mov dword [ebp - 0xee0], ecx
mov edx, dword [ebp - 0xee4]
mov dword [0x100a5144], edx
mov eax, 0xf359
mov dword [0x100a5150], 0x12b4dc27
mov dword [0x100a5154], eax
mov ecx, dword [ebp - 0x170]
add ecx, 0x535
mov dword [ebp - 0x224c], ecx
mov dword [ebp - 0x48], 2
mov dx, word [0x100a5bfc]
mov word [ebp - 0x18], dx
cmp dword [ebp - 0x30], 0
je 0x1004bc3c
mov eax, dword [ebp - 0x24]
cdq
mov dword [ebp - 0xeec], eax
mov dword [ebp - 0xee8], edx
jmp 0x1004bc53
mov eax, dword [0x100a50e0]
mov ecx, dword [0x100a50e4]
mov dword [ebp - 0xeec], eax
mov dword [ebp - 0xee8], ecx
mov edx, dword [ebp - 0xeec]
mov dword [ebp - 0x38], edx
mov eax, dword [ebp - 0x50]
or eax, dword [ebp - 0x4c]
jne 0x1004bc70
mov dword [ebp - 0x318], 1
jmp 0x1004bc7a
mov dword [ebp - 0x318], 0
movsx ecx, byte [0x100a504b]
mov eax, dword [ebp - 0x318]
sub eax, ecx
cdq
add eax, 0xf60898ee
not eax
mov word [ebp - 0x14], ax
movsx edx, byte [ebp - 5]
mov eax, dword [0x100a5144]
imul eax, edx
mov ecx, dword [0x100a5144]
and ecx, eax
mov dword [0x100a5144], ecx
movsx edx, word [ebp - 0x10]
xor edx, 0xc657
mov word [ebp - 0x20], dx
mov eax, dword [ebp - 0x48]
mov dword [ebp - 0x16c], eax
cmp dword [ebp - 0x16c], 0
je 0x1004bcee
cmp dword [ebp - 0x16c], 1
je 0x1004bd85
cmp dword [ebp - 0x16c], 2
je 0x1004bdf6
jmp 0x1004be67
movsx ecx, word [ebp - 0x10]
add ecx, 0xa4
mov byte [ebp - 1], cl
mov dl, byte [ebp - 0x1c]
mov byte [ebp - 2], dl
movzx eax, word [0x100a5130]
movzx ecx, word [0x100a5128]
imul eax, ecx
movzx edx, word [0x100a5130]
add edx, eax
mov word [0x100a5130], dx
movzx eax, word [0x100a5130]
cdq
mov ecx, eax
sub ecx, 0x9be1de13
movsx eax, word [0x100a5140]
cdq
add eax, ecx
mov word [0x100a5140], ax
movzx eax, byte [str._NgcSignWithUserIdK]
cdq
mov ecx, eax
add ecx, 0xa3abb18
movsx eax, word [0x100a50dc]
cdq
and eax, ecx
mov word [0x100a50dc], ax
movsx eax, word [0x100a5140]
cdq
add eax, 0x2c31ec43
adc edx, 0xd3f6e
mov dword [0x100a50f0], eax
mov dword [0x100a50f4], edx
jmp 0x1004be67
mov eax, dword [ebp - 0x2c]
mov edx, dword [ebp - 0x28]
mov cl, 4
call fcn.100736b0
mov dword [ebp - 0x2c], eax
mov dword [ebp - 0x28], edx
movsx edx, word [0x100a515c]
add edx, 0x40fa44b2
xor eax, eax
mov dword [0x100a5150], edx
mov dword [0x100a5154], eax
movzx cx, byte [0x100a503b]
mov edx, 2
imul eax, edx, 0x4e68
mov word [eax + 0x101e5e90], cx
movsx ecx, word [0x100a50fc]
movzx edx, byte [0x100a503b]
sub ecx, edx
movsx eax, word [0x100a50fc]
sub eax, ecx
mov word [0x100a50fc], ax
mov ecx, dword [ebp - 0x48]
sub ecx, 1
mov dword [ebp - 0x48], ecx
jmp 0x1004be67
movzx eax, word [ebp - 0xc]
cdq
push 0xc3d1c
push 0x4294e1b5
push edx
push eax
call fcn.10073670
mov ecx, eax
movsx eax, byte [ebp - 2]
cdq
add eax, ecx
mov byte [ebp - 2], al
movsx edx, word [0x100a5134]
shl edx, 2
mov word [ebp - 0x1c], dx
mov eax, dword [ebp - 0x3c]
sub eax, 0xa3
mov dword [0x100a5158], eax
mov eax, dword [ebp - 0x24]
cdq
add eax, dword [ebp - 0x50]
adc edx, dword [ebp - 0x4c]
push edx
push eax
mov ecx, dword [ebp - 0x4c]
push ecx
mov edx, dword [ebp - 0x50]
push edx
call fcn.10073670
mov dword [ebp - 0x50], eax
mov dword [ebp - 0x4c], edx
mov eax, dword [0x100a5150]
sub eax, 0xb
mov word [0x100a50dc], ax
mov dword [ebp - 0x34], 0x8a85c7bf
mov ecx, dword [ebp - 0x170]
add ecx, 0x4f1
mov dword [ebp - 0x2250], ecx
mov dword [0x100a50e8], 0x64
mov edx, dword [ebp - 0x30]
add edx, 0x64
cmp dword [0x100a50e8], edx
jne 0x1004bfab
movsx eax, word [0x100a50fc]
cdq
mov ecx, dword [ebp - 0x30]
xor esi, esi
add ecx, 0x749b4814
adc esi, 0xff03f
mov dword [ebp - 0x1380], eax
mov dword [ebp - 0x137c], edx
mov dword [ebp - 0x1388], ecx
mov dword [ebp - 0x1384], esi
mov edx, dword [ebp - 0x1380]
cmp edx, dword [ebp - 0x1388]
jne 0x1004bfab
mov eax, dword [ebp - 0x137c]
cmp eax, dword [ebp - 0x1384]
jne 0x1004bfab
movsx ecx, byte [ebp - 2]
mov dword [ebp - 0x30], ecx
movsx edx, byte [ebp - 2]
mov eax, dword [0x100a5144]
sub eax, edx
mov dword [0x100a5144], eax
mov dword [0x100a50e8], 0x47
mov ecx, dword [0x100a5150]
sub ecx, 0xb6afb18d
mov word [0x100a513c], cx
mov eax, dword [0x100a50f0]
mov edx, dword [0x100a50f4]
mov cl, 4
call fcn.100736b0
mov word [0x100a50fc], ax
movsx eax, word [ebp - 0x14]
cdq
sub eax, 0xa1d5ca53
mov word [0x100a513c], ax
jmp 0x1004bfab
mov dword [0x100a50e8], 0x64
movzx edx, word [0x100a512c]
movzx eax, byte [0x100a503b]
sub edx, eax
mov word [0x100a5148], dx
movzx ecx, byte [0x100a503b]
sub ecx, dword [ebp - 0x24]
mov byte [0x100a503b], cl
movzx edx, word [0x100a5128]
xor edx, 0xdd77
mov byte [0x100a504b], dl
movzx eax, word [ebp - 0x20]
cdq
mov dword [0x100a50f0], eax
mov dword [0x100a50f4], edx
mov esi, dword [ebp - 0x3c]
mov eax, dword [0x100a50f0]
mov ecx, dword [0x100a50f4]
mov dword [ebp - 0x2258], ecx
sub esi, eax
movsx eax, word [ebp - 0x10]
movzx edx, byte [str._NgcSignWithUserIdK]
or eax, edx
cdq
add esi, eax
mov eax, dword [0x100a5100]
mov ecx, dword [0x100a5104]
mov edx, dword [0x100a50e4]
push edx
mov edx, dword [0x100a50e0]
push edx
push ecx
push eax
call fcn.10073670
push 0x46ee7
push 0x6bcd73d8
push edx
push eax
call fcn.10073670
sub esi, eax
mov word [ebp - 0x10], si
movzx eax, word [0x100a510c]
imul ecx, eax, 0xc2
mov word [ebp - 0x18], cx
mov edx, dword [ebp - 0x30]
sub edx, 0x5785
mov dword [ebp - 0x30], edx
mov eax, dword [0x100a5144]
xor ecx, ecx
push 0xb815e
push 0x848b4adb
push ecx
push eax
call fcn.10073670
mov ecx, eax
movsx eax, byte [ebp - 4]
cdq
add eax, ecx
mov byte [ebp - 4], al
mov edx, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x28]
sub edx, 0xb3bf73f7
sbb eax, 0
mov dword [0x100a5150], edx
mov dword [0x100a5154], eax
mov ecx, dword [0x100a50f0]
mov edx, dword [0x100a50f4]
mov eax, dword [ebp - 0x4c]
push eax
mov eax, dword [ebp - 0x50]
push eax
push edx
push ecx
call fcn.10073670
mov ecx, dword [0x100a50f0]
mov esi, dword [0x100a50f4]
sub ecx, eax
sbb esi, edx
mov dword [0x100a50f0], ecx
mov dword [0x100a50f4], esi
movsx edx, word [0x100a515c]
movsx eax, word [0x100a5134]
imul edx, eax
movsx ecx, word [0x100a515c]
sub ecx, edx
mov word [0x100a515c], cx
movsx edx, byte [ebp - 3]
sub edx, 0x6571
mov dword [ebp - 0x38], edx
mov eax, dword [0x100a5bfc]
mov dword [ebp - 0x174], eax
movsx ecx, byte [ebp - 2]
test ecx, ecx
je 0x1004c23b
movzx edx, word [0x100a5148]
movsx eax, byte [0x100a5026]
cmp edx, eax
jge 0x1004c151
mov dword [ebp - 0x31c], 1
jmp 0x1004c15b
mov dword [ebp - 0x31c], 0
movzx ecx, word [0x100a5148]
cmp ecx, 0x26
jge 0x1004c173
mov dword [ebp - 0x320], 1
jmp 0x1004c17d
mov dword [ebp - 0x320], 0
mov edx, dword [ebp - 0x31c]
cmp edx, dword [ebp - 0x320]
jl 0x1004c1d2
mov eax, dword [0x100a5120]
mov edx, dword [0x100a5124]
mov cl, 4
call fcn.100736b0
mov word [0x100a5140], ax
mov eax, dword [0x100a5158]
mov ecx, dword [ebp - 0x2c]
mov edx, dword [ebp - 0x28]
mov dword [ebp - 0x225c], edx
and eax, ecx
mov word [0x100a513c], ax
movzx eax, word [0x100a5128]
imul ecx, eax, 0x95
mov word [0x100a513c], cx
jmp 0x1004c236
mov dx, word [0x100a5bfc]
mov word [ebp - 0x10], dx
movsx eax, byte [ebp - 3]
imul ecx, eax, 0x48
mov dword [0x100a5144], ecx
movzx edx, word [0x100a510c]
imul eax, edx, 0x1e
mov dword [ebp - 0x24], eax
mov ecx, dword [ebp - 0x50]
or ecx, dword [ebp - 0x4c]
je 0x1004c20e
movzx edx, word [0x100a5130]
mov dword [ebp - 0x324], edx
jmp 0x1004c21b
movsx eax, byte [0x100a5026]
mov dword [ebp - 0x324], eax
mov cx, word [ebp - 0x324]
mov word [ebp - 0x18], cx
mov edx, dword [ebp - 0x30]
sub edx, 0x3ea79cb5
mov word [0x100a5148], dx
jmp 0x1004c2ed
mov eax, dword [0x100a5110]
mov ecx, dword [0x100a5114]
mov dword [ebp - 0x1390], eax
mov dword [ebp - 0x138c], ecx
mov edx, dword [ebp - 0x1390]
or edx, dword [ebp - 0x138c]
je 0x1004c2ed
cmp dword [0x100a5144], 0
je 0x1004c286
mov eax, dword [0x100a5120]
mov ecx, dword [0x100a5124]
mov dword [ebp - 0xef4], eax
mov dword [ebp - 0xef0], ecx
jmp 0x1004c297
movsx eax, word [ebp - 0x1c]
cdq
mov dword [ebp - 0xef4], eax
mov dword [ebp - 0xef0], edx
mov edx, dword [ebp - 0xef4]
mov dword [ebp - 0x34], edx
movzx eax, word [ebp - 0x18]
movsx ecx, word [0x100a50fc]
add eax, ecx
movzx edx, word [ebp - 0x18]
or edx, eax
mov word [ebp - 0x18], dx
xor eax, eax
mov dword [ebp - 0x44], 0x19
mov dword [ebp - 0x40], eax
mov ecx, dword [0x100a50f0]
mov edx, dword [0x100a50f4]
mov dword [ebp - 0x2260], edx
sub ecx, 0xe9
mov word [0x100a513c], cx
mov eax, 0x8595
mov word [0x100a510c], ax
mov ecx, dword [ebp - 0x174]
add ecx, 0x5b5
mov dword [ebp - 0x2264], ecx
mov dword [ebp - 0x48], 4
mov dx, word [0x100a513c]
add dx, 1
mov word [0x100a513c], dx
mov eax, dword [0x100a5120]
mov ecx, dword [0x100a5124]
mov dword [ebp - 0x2268], ecx
sub eax, 0x89f7
mov word [0x100a512c], ax
mov edx, dword [0x100a5144]
add edx, 0x4d
xor eax, eax
mov dword [0x100a5118], edx
mov dword [0x100a511c], eax
movzx ecx, word [0x100a5128]
add ecx, 0x262d
mov dword [ebp - 0x48], ecx
mov edx, dword [ebp - 0x3c]
xor eax, eax
sub edx, dword [0x100a50e0]
sbb eax, dword [0x100a50e4]
mov ecx, dword [ebp - 0x3c]
xor esi, esi
push eax
push edx
push esi
push ecx
call fcn.10073670
mov dword [ebp - 0x3c], eax
mov edx, dword [ebp - 0x174]
add edx, 0x555
mov dword [ebp - 0x328], edx
mov eax, dword [str.NgcSignWithUserIdK]
mov dword [ebp - 0x212c], eax
mov ecx, dword [0x100867cc]
mov dword [ebp - 0x2128], ecx
mov edx, dword [0x100867d0]
mov dword [ebp - 0x2124], edx
mov eax, dword [0x100867d4]
mov dword [ebp - 0x2120], eax
mov cx, word [0x100867d8]
mov word [ebp - 0x211c], cx
mov dl, byte [0x100867da]
mov byte [ebp - 0x211a], dl
lea eax, [ebp - 0x212c]
push eax
call dword [sym.imp.KERNEL32.dll_lstrlenA]
mov dword [0x100a5158], eax
mov ecx, dword [ebp - 0x174]
add ecx, 0x5ba
mov dword [ebp - 0x12dc], ecx
mov edx, dword [ebp - 0x328]
sub edx, 0x16
mov eax, dword [ebp - 0x12dc]
add eax, dword [ebp - 0x328]
cmp edx, eax
je 0x100715ff
movzx ecx, word [0x100a512c]
movsx edx, byte [ebp - 4]
cmp ecx, edx
jle 0x1004c432
mov dword [ebp - 0x32c], 1
jmp 0x1004c43c
mov dword [ebp - 0x32c], 0
movzx eax, word [0x100a512c]
cmp eax, 0x57
jle 0x1004c454
mov dword [ebp - 0x330], 1
jmp 0x1004c45e
mov dword [ebp - 0x330], 0
mov ecx, dword [ebp - 0x32c]
cmp ecx, dword [ebp - 0x330]
jl 0x1004c520
movsx edx, byte [ebp - 4]
mov eax, dword [0x100a5108]
and eax, edx
mov dword [0x100a5108], eax
movsx ecx, byte [ebp - 2]
test ecx, ecx
jne 0x1004c494
mov dword [ebp - 0x334], 1
jmp 0x1004c49e
mov dword [ebp - 0x334], 0
movzx edx, byte [str._NgcSignWithUserIdK]
not edx
and edx, dword [ebp - 0x334]
mov word [0x100a50ec], dx
mov eax, 1
imul ecx, eax, 0x89
movzx edx, byte [ecx + 0x10259240]
mov eax, dword [ebp - 0x48]
add eax, edx
mov dword [ebp - 0x48], eax
movzx eax, word [0x100a5130]
cdq
mov ecx, dword [0x100a5100]
mov edx, dword [0x100a5104]
mov dword [ebp - 0x226c], edx
add ecx, eax
mov eax, dword [0x100a5100]
mov edx, dword [0x100a5104]
call fcn.10073780
mov dword [0x100a5100], eax
mov dword [0x100a5104], edx
movsx eax, word [0x100a5140]
shl eax, 7
cdq
mov dword [0x100a5118], eax
mov dword [0x100a511c], edx
jmp 0x1004c5ee
movsx eax, byte [ebp - 3]
movzx ecx, byte [str._NgcSignWithUserIdK]
imul eax, ecx
movsx edx, byte [ebp - 3]
and edx, eax
mov byte [ebp - 3], dl
cmp dword [ebp - 0x48], 0
jne 0x1004c549
mov dword [ebp - 0x338], 1
jmp 0x1004c553
mov dword [ebp - 0x338], 0
movzx eax, word [ebp - 0x20]
mov ecx, dword [ebp - 0x338]
sub ecx, eax
jne 0x1004c56d
mov dword [ebp - 0x33c], 1
jmp 0x1004c577
mov dword [ebp - 0x33c], 0
movsx edx, word [0x100a513c]
mov eax, dword [0x100a5144]
imul eax, edx
not eax
add eax, dword [ebp - 0x33c]
mov dword [0x100a5108], eax
movsx eax, byte [0x100a5026]
sub eax, 0x46281b16
cdq
mov dword [ebp - 0x2c], eax
mov dword [ebp - 0x28], edx
movsx ecx, word [0x100a513c]
movzx edx, byte [ebp - 1]
add ecx, edx
movsx eax, word [0x100a513c]
add eax, ecx
mov word [0x100a513c], ax
movsx eax, word [0x100a50ec]
cdq
push 0xc2c1b
push 0xb3477d9c
push edx
push eax
call fcn.10073670
mov dword [ebp - 0x30], eax
movsx ecx, byte [ebp - 5]
add ecx, dword [ebp - 0x34]
movsx edx, byte [ebp - 5]
add edx, ecx
mov byte [ebp - 5], dl
mov dword [ebp - 0x12e0], 1
mov eax, dword [ebp - 0x12e0]
push eax
call dword [sym.imp.USER32.dll_BeginDeferWindowPos]
mov dword [ebp - 0x12e4], eax
mov ecx, dword [ebp - 0x12e4]
push ecx
call dword [sym.imp.USER32.dll_EndDeferWindowPos]
mov dword [ebp - 0x2270], eax
mov edx, dword [ebp - 0x50]
or edx, dword [ebp - 0x4c]
jne 0x1004c632
mov dword [ebp - 0x340], 1
jmp 0x1004c63c
mov dword [ebp - 0x340], 0
cmp dword [ebp - 0x50], 0x25
jne 0x1004c654
cmp dword [ebp - 0x4c], 0
jne 0x1004c654
mov dword [ebp - 0x344], 1
jmp 0x1004c65e
mov dword [ebp - 0x344], 0
mov eax, dword [ebp - 0x340]
cmp eax, dword [ebp - 0x344]
jge 0x1004c7ca
mov ecx, dword [0x100a5120]
mov edx, dword [0x100a5124]
mov dword [ebp - 0x1398], ecx
mov dword [ebp - 0x1394], edx
mov eax, dword [ebp - 0x1398]
or eax, dword [ebp - 0x1394]
je 0x1004c70e
movzx ecx, byte [ebp - 1]
movsx edx, word [ebp - 0x14]
imul ecx, edx
mov al, byte [ebp - 1]
shl al, cl
mov byte [ebp - 1], al
imul ecx, dword [ebp - 0x34], 0x48d7
xor edx, edx
mov dword [0x100a5100], ecx
mov dword [0x100a5104], edx
movsx eax, word [0x100a515c]
movsx ecx, word [ebp - 0x14]
sub eax, ecx
movsx edx, word [0x100a515c]
add edx, eax
mov word [0x100a515c], dx
movsx eax, word [0x100a513c]
add eax, dword [ebp - 0x38]
mov word [0x100a513c], ax
movsx ecx, byte [ebp - 5]
imul edx, ecx, 0x1c
mov eax, dword [ebp - 0x48]
sub eax, edx
mov dword [ebp - 0x48], eax
movzx ecx, word [ebp - 0x20]
movzx edx, word [ebp - 0x20]
imul ecx, edx
mov word [ebp - 0x10], cx
jmp 0x1004c7ca
cmp dword [ebp - 0x38], 0
je 0x1004c72b
movzx eax, word [0x100a5130]
test eax, eax
je 0x1004c72b
mov dword [ebp - 0x348], 0
jmp 0x1004c735
mov dword [ebp - 0x348], 1
movsx ecx, word [0x100a5138]
cmp dword [ebp - 0x348], ecx
jne 0x1004c798
movsx edx, word [ebp - 0x10]
sub edx, 0x8dc
mov dword [0x100a5158], edx
movzx eax, byte [ebp - 1]
test eax, eax
jne 0x1004c76a
mov ecx, 1
mov word [ebp - 0xb4], cx
jmp 0x1004c773
xor edx, edx
mov word [ebp - 0xb4], dx
mov ax, word [ebp - 0xb4]
mov word [ebp - 0x20], ax
mov ecx, dword [ebp - 0x38]
sar ecx, 1
mov byte [ebp - 2], cl
mov edx, dword [ebp - 0x34]
sub edx, 0x2944e7b4
mov word [0x100a513c], dx
jmp 0x1004c7ca
movsx eax, word [ebp - 0x14]
cmp eax, 0xf233
jle 0x1004c7ca
movsx ecx, word [0x100a50dc]
add ecx, 0x2f
mov word [0x100a513c], cx
mov edx, dword [ebp - 0x34]
not edx
movzx eax, byte [0x100a503b]
add edx, eax
xor ecx, ecx
mov dword [ebp - 0x50], edx
mov dword [ebp - 0x4c], ecx
mov edx, 0x31
mov word [ebp - 0x130], dx
xor eax, eax
mov word [ebp - 0x12e], ax
mov ecx, 0x5f
mov word [0x100a513c], cx
movsx eax, byte [ebp - 5]
cdq
sub eax, 0xfacd3be3
mov word [0x100a510c], ax
movsx edx, word [0x100a5138]
test edx, edx
jne 0x1004c812
mov dword [ebp - 0x34c], 1
jmp 0x1004c81c
mov dword [ebp - 0x34c], 0
mov eax, dword [ebp - 0x24]
imul eax, dword [ebp - 0x34c]
movsx ecx, word [0x100a513c]
add ecx, dword [0x100a5108]
add eax, ecx
mov word [0x100a5128], ax
mov edx, 0x317
mov word [0x100a5138], dx
mov eax, dword [ebp - 0x24]
cdq
mov esi, eax
mov edi, edx
mov ecx, dword [ebp - 0x44]
not ecx
mov ebx, dword [ebp - 0x40]
not ebx
movsx eax, word [0x100a5140]
movzx edx, word [0x100a5148]
sub eax, edx
cdq
push edx
push eax
push ebx
push ecx
call fcn.10073670
add esi, eax
adc edi, edx
not esi
not edi
mov dword [ebp - 0x44], esi
mov dword [ebp - 0x40], edi
movsx eax, word [0x100a513c]
movsx ecx, word [ebp - 0x1c]
add ecx, 1
cmp eax, ecx
jne 0x1004cb9c
xorps xmm0, xmm0
movlpd qword [0x100a5118], xmm0
movsx edx, word [ebp - 0x1c]
add edx, dword [0x100a50f8]
xor edx, dword [0x100a50f8]
mov dword [0x100a50f8], edx
mov eax, dword [0x100a5120]
mov ecx, dword [0x100a5124]
add eax, 0xac8e3fc6
adc ecx, 0
mov edx, dword [0x100a5118]
mov esi, dword [0x100a511c]
add edx, eax
adc esi, ecx
mov dword [0x100a5118], edx
mov dword [0x100a511c], esi
movzx eax, word [0x100a5130]
sub eax, 0x5dac2901
mov word [0x100a5130], ax
mov ecx, dword [0x100a5118]
mov edx, dword [0x100a511c]
mov dword [ebp - 0x13a0], ecx
mov dword [ebp - 0x139c], edx
mov eax, dword [ebp - 0x13a0]
or eax, dword [ebp - 0x139c]
je 0x1004c921
jmp 0x1004c93d
movzx ecx, word [ebp - 0xc]
add ecx, 0x6767
mov word [0x100a5130], cx
mov dx, word [ebp - 0xc]
mov word [0x100a5140], dx
movsx eax, word [0x100a50fc]
movsx ecx, word [0x100a5140]
cmp eax, ecx
jne 0x1004c9b8
mov dx, word [0x100a5bfc]
mov word [ebp - 0x1c], dx
movsx eax, word [0x100a50dc]
mov ecx, dword [0x100a5108]
add ecx, eax
not ecx
movzx edx, byte [str._NgcSignWithUserIdK]
movsx eax, word [0x100a5138]
xor edx, eax
add ecx, edx
movsx edx, word [0x100a515c]
not edx
xor ecx, edx
mov word [0x100a50dc], cx
cmp dword [ebp - 0x30], 0
je 0x1004c9a1
movsx eax, byte [ebp - 4]
mov dword [ebp - 0x350], eax
jmp 0x1004c9aa
mov ecx, dword [ebp - 0x48]
mov dword [ebp - 0x350], ecx
mov edx, dword [ebp - 0x350]
mov dword [ebp - 0x48], edx
jmp 0x1004cad4
mov eax, 0x8bea1e42
or eax, 0x52bf5
je 0x1004ca59
movsx ecx, word [ebp - 0x10]
not ecx
mov edx, dword [0x100a50f8]
not edx
add ecx, edx
jne 0x1004c9e0
mov byte [ebp - 0x5c], 1
jmp 0x1004c9e4
mov byte [ebp - 0x5c], 0
mov al, byte [ebp - 0x5c]
mov byte [ebp - 4], al
movzx ecx, word [0x100a5148]
imul eax, ecx, 0x11
cdq
push edx
push eax
mov edx, dword [0x100a50e4]
push edx
mov eax, dword [0x100a50e0]
push eax
call fcn.10073670
mov dword [0x100a50e0], eax
mov dword [0x100a50e4], edx
movsx ecx, byte [ebp - 5]
movsx edx, byte [0x100a5026]
add ecx, edx
movsx eax, byte [ebp - 5]
and eax, ecx
mov byte [ebp - 5], al
movsx ecx, byte [ebp - 5]
xor ecx, dword [0x100a50e8]
or ecx, dword [0x100a50e8]
mov dword [0x100a50e8], ecx
movsx edx, word [0x100a5138]
movzx eax, word [0x100a5130]
xor edx, eax
mov word [0x100a5138], dx
jmp 0x1004cad4
movzx ecx, word [0x100a5128]
test ecx, ecx
je 0x1004cad4
movsx edx, word [ebp - 0x10]
sub edx, 0x160d
imul eax, edx, 0x2987fa7e
test eax, eax
jne 0x1004ca7e
mov byte [ebp - 0x5b], 1
jmp 0x1004ca82
mov byte [ebp - 0x5b], 0
mov cl, byte [ebp - 0x5b]
mov byte [ebp - 4], cl
mov eax, dword [ebp - 0x24]
cdq
mov ecx, dword [ebp - 0x2c]
mov esi, dword [ebp - 0x28]
push edx
push eax
push esi
push ecx
call fcn.10073670
mov byte [ebp - 2], al
movzx edx, word [ebp - 0xc]
add edx, 0x2e4b
mov word [0x100a513c], dx
mov eax, dword [ebp - 0x48]
xor eax, dword [ebp - 0x3c]
mov ecx, dword [ebp - 0x48]
sub ecx, eax
mov dword [ebp - 0x48], ecx
mov eax, dword [0x100a50f0]
mov edx, dword [0x100a50f4]
mov cl, 6
call fcn.100736d0
mov byte [str._NgcSignWithUserIdK], al
movzx edx, byte [str._NgcSignWithUserIdK]
cmp edx, 1
jne 0x1004cb9c
movzx eax, word [ebp - 0xc]
imul eax, dword [ebp - 0x24]
mov byte [ebp - 5], al
mov ecx, dword [ebp - 0x50]
add ecx, 0xc9
movsx eax, word [ebp - 0x14]
cdq
add eax, ecx
mov word [ebp - 0x14], ax
mov edx, dword [ebp - 0x34]
add edx, 0x8c
mov byte [ebp - 1], dl
jmp 0x1004cb9c
mov edx, 0x5f
mov word [0x100a513c], dx
movzx eax, word [0x100a5128]
movzx ecx, word [ebp - 0x20]
not ecx
add eax, ecx
movsx edx, word [ebp - 0x14]
add eax, edx
mov word [ebp - 0x20], ax
mov al, byte [ebp - 3]
sub al, 1
mov byte [ebp - 3], al
mov ecx, dword [0x100a5100]
mov edx, dword [0x100a5104]
mov dword [ebp - 0x13a8], ecx
mov dword [ebp - 0x13a4], edx
mov eax, dword [ebp - 0x13a8]
or eax, dword [ebp - 0x13a4]
je 0x1004cbfd
mov ecx, dword [0x100a50e8]
mov dword [ebp - 0x358], ecx
jmp 0x1004cc06
mov edx, dword [ebp - 0x48]
mov dword [ebp - 0x358], edx
mov al, byte [ebp - 0x358]
mov byte [0x100a503b], al
movsx eax, word [ebp - 0x1c]
cdq
mov ecx, dword [ebp - 0x2c]
mov esi, dword [ebp - 0x28]
sub ecx, eax
sbb esi, edx
mov dword [ebp - 0x2c], ecx
mov dword [ebp - 0x28], esi
mov edx, 0xffffdba3
mov word [0x100a5138], dx
movzx eax, word [ebp - 0x18]
test eax, eax
je 0x1004cc92
movzx ecx, word [ebp - 0x20]
mov dword [ebp - 0x34], ecx
movzx edx, word [ebp - 0xc]
mov eax, 4
imul ecx, eax, 0x3df0
mov dword [ecx + 0x102593b0], edx
mov edx, dword [ebp - 0x3c]
and edx, 0x39c8
xor eax, eax
mov dword [0x100a5110], edx
mov dword [0x100a5114], eax
movzx ecx, word [0x100a510c]
add ecx, 0x73844434
mov word [0x100a50dc], cx
movzx edx, word [0x100a5130]
imul edx, dword [ebp - 0x48]
not edx
mov dword [ebp - 0x3c], edx
jmp 0x1004cd07
movzx eax, word [0x100a512c]
test eax, eax
je 0x1004cd07
mov ecx, dword [0x100a50f8]
sar ecx, 8
mov word [0x100a5128], cx
movzx eax, byte [ebp - 1]
cdq
and eax, 0x709b7afa
mov byte [ebp - 4], al
mov edx, dword [0x100a5110]
mov eax, dword [0x100a5114]
mov dword [ebp - 0x2274], eax
add edx, 0x579028cd
mov dword [0x100a5144], edx
movsx ecx, byte [ebp - 4]
imul eax, ecx, 0x9f2f
cdq
push edx
push eax
mov edx, dword [ebp - 0x4c]
push edx
mov eax, dword [ebp - 0x50]
push eax
call fcn.10073670
mov dword [ebp - 0x50], eax
mov dword [ebp - 0x4c], edx
movzx ecx, word [0x100a5130]
add ecx, 0x4170077d
mov dword [ebp - 0x38], ecx
mov dword [ebp - 0x94], 0
mov dword [ebp - 0x12c], 0
jmp 0x1004cd2c
mov edx, dword [ebp - 0x94]
add edx, 1
mov dword [ebp - 0x94], edx
cmp dword [ebp - 0x94], 1
jae 0x1004ce82
mov eax, dword [0x100a5118]
mov ecx, dword [0x100a511c]
mov dword [ebp - 0x2278], ecx
and eax, 0xaf
mov word [ebp - 0x18], ax
movsx edx, byte [ebp - 5]
imul eax, edx, 0xfbc9
mov byte [0x100a504b], al
movzx eax, word [ebp - 0x20]
not eax
cdq
add eax, 0x47de5ca4
xor eax, 0x7e84c7e2
mov byte [0x100a503b], al
mov ecx, 9
mov esi, str.ds_ext_aad_aadclou
lea edi, [ebp - 0x26e0]
rep movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
lea ecx, [ebp - 0x26e0]
push ecx
call dword [sym.imp.KERNEL32.dll_lstrlenW]
mov byte [ebp - 4], al
mov edx, dword [ebp - 0x94]
movzx eax, word [ebp + edx*2 - 0x130]
mov dword [ebp - 0x12c], eax
cmp dword [ebp - 0x30], 0
jne 0x1004cdca
xor ecx, ecx
mov dword [ebp - 0x13b0], 1
mov dword [ebp - 0x13ac], ecx
jmp 0x1004cdd5
xorps xmm0, xmm0
movlpd qword [ebp - 0x13b0], xmm0
mov edx, dword [ebp - 0x3c]
xor eax, eax
push 0xdb921
push 0xba3e6343
push eax
push edx
call fcn.10073670
add eax, dword [ebp - 0x13b0]
mov byte [ebp - 5], al
movsx ecx, word [0x100a5140]
sub ecx, 0x4740
mov word [0x100a5128], cx
movzx eax, word [ebp - 0x20]
movsx edx, byte [ebp - 5]
add eax, edx
movsx ecx, word [0x100a50ec]
movsx edx, word [0x100a5138]
sub ecx, edx
xor eax, ecx
cdq
mov ecx, dword [ebp - 0x3c]
not ecx
add ecx, dword [0x100a50f8]
xor esi, esi
add ecx, dword [ebp - 0x44]
adc esi, dword [ebp - 0x40]
push esi
push ecx
push edx
push eax
call fcn.10073670
mov byte [0x100a503b], al
mov edx, dword [ebp - 0x12c]
add edx, dword [ebp - 0x94]
mov dword [ebp - 0x12c], edx
push 0x10086804
call dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
mov dword [0x100a5144], eax
mov eax, dword [ebp - 0x94]
mov cx, word [ebp - 0x12c]
mov word [ebp + eax*2 - 0x130], cx
jmp 0x1004cd1d
mov edx, 0x402c
mov word [0x100a515c], dx
mov byte [ebp - 2], 0x5c
movsx eax, byte [ebp - 3]
mov ecx, 4
imul edx, ecx, 0x2cd5
mov dword [edx + 0x10136688], eax
mov al, byte [0x100a5bfc]
mov byte [ebp - 2], al
movsx ecx, word [0x100a515c]
movsx edx, byte [ebp - 2]
add edx, 0x402c
cmp ecx, edx
jne 0x1004d037
movsx eax, word [0x100a50fc]
movzx ecx, word [ebp - 0xc]
add ecx, 0x2850
cmp eax, ecx
jne 0x1004d037
movsx edx, word [ebp - 0x14]
movsx eax, byte [0x100a504b]
sub edx, eax
movsx ecx, word [ebp - 0x14]
add ecx, edx
mov word [ebp - 0x14], cx
mov edx, dword [0x100a5120]
mov eax, dword [0x100a5124]
add edx, 1
adc eax, 0
mov dword [0x100a5120], edx
mov dword [0x100a5124], eax
mov ecx, 0xbd
mov word [ebp - 0x14], cx
movzx edx, byte [str._NgcSignWithUserIdK]
test edx, edx
je 0x1004cf37
mov ax, word [0x100a5140]
mov word [ebp - 0xb6], ax
jmp 0x1004cf45
mov cx, word [0x100a50fc]
mov word [ebp - 0xb6], cx
movsx edx, word [ebp - 0xb6]
mov dword [ebp - 0x30], edx
movsx eax, word [0x100a515c]
cdq
mov ecx, dword [0x100a5118]
mov esi, dword [0x100a511c]
push esi
push ecx
push edx
push eax
call fcn.10073670
and eax, dword [ebp - 0x3c]
mov byte [ebp - 3], al
movzx edx, word [ebp - 0x18]
movsx eax, word [0x100a5140]
sub edx, eax
movzx ecx, word [ebp - 0x18]
sub ecx, edx
mov word [ebp - 0x18], cx
jmp 0x1004d037
mov ecx, 0x402c
mov word [0x100a515c], cx
mov ecx, dword [0x100a5150]
sub ecx, 0xe7da54e7
movsx eax, word [0x100a50fc]
cdq
sub eax, ecx
mov word [0x100a50fc], ax
mov edx, dword [0x100a5100]
mov eax, dword [0x100a5104]
mov ecx, dword [0x100a511c]
sub edx, dword [0x100a5118]
sbb eax, ecx
mov ecx, dword [0x100a5100]
mov esi, dword [0x100a5104]
add ecx, edx
adc esi, eax
mov dword [0x100a5100], ecx
mov dword [0x100a5104], esi
mov edx, dword [ebp - 0x38]
add edx, 0xf6
mov word [0x100a5140], dx
movzx eax, byte [ebp - 1]
cdq
mov ecx, eax
add ecx, 0xb72a400c
mov eax, dword [0x100a50f8]
cdq
sub eax, ecx
mov dword [0x100a50f8], eax
movsx edx, byte [0x100a504b]
mov eax, dword [ebp - 0x34]
add eax, edx
mov word [0x100a50ec], ax
movsx ecx, word [ebp - 0x14]
imul ecx, dword [ebp - 0x48]
movsx edx, word [ebp - 0x14]
add edx, ecx
mov word [ebp - 0x14], dx
movzx eax, word [ebp - 0xc]
movzx ecx, word [0x100a5148]
sub eax, ecx
movzx edx, word [ebp - 0xc]
imul edx, eax
mov word [ebp - 0xc], dx
mov eax, 0x7f
mov word [ebp - 0x14], ax
mov ecx, dword [0x100a5108]
shl ecx, 1
mov word [0x100a5140], cx
mov edx, 2
shl edx, 0
xor eax, eax
mov word [ebp + edx - 0x130], ax
mov ecx, 9
mov esi, str.Subject_dont_matc
lea edi, [ebp - 0x2708]
rep movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
lea ecx, [ebp - 0x2708]
push ecx
call dword [sym.imp.KERNEL32.dll_lstrlenW]
cdq
mov dword [ebp - 0x2c], eax
mov dword [ebp - 0x28], edx
mov edx, 0xab
mov word [ebp - 0x134], dx
xor eax, eax
mov word [ebp - 0x132], ax
movzx ecx, word [ebp - 0xc]
movzx edx, word [ebp - 0x20]
cmp ecx, edx
je 0x1004d1ce
mov eax, 0xde
mov word [0x100a50fc], ax
mov cx, word [0x100a510c]
mov word [0x100a513c], cx
movzx eax, word [ebp - 0xc]
cdq
and eax, dword [ebp - 0x44]
and edx, dword [ebp - 0x40]
mov dword [ebp - 0x44], eax
mov dword [ebp - 0x40], edx
mov edx, dword [ebp - 0x24]
sub edx, dword [ebp - 0x24]
mov eax, dword [ebp - 0x24]
sub eax, edx
mov dword [ebp - 0x24], eax
movsx ecx, word [0x100a5138]
imul eax, ecx, 0x7cfd
cdq
mov dword [0x100a5120], eax
mov dword [0x100a5124], edx
movzx edx, word [ebp - 0x18]
add edx, 0xf9
mov word [ebp - 0x18], dx
jmp 0x1004d1f6
movsx eax, word [0x100a5134]
shl eax, 4
mov word [ebp - 0x1c], ax
mov ecx, 0xfe2e
mov word [0x100a5148], cx
movzx edx, word [ebp - 0xc]
sub edx, 0xf66f
mov word [ebp - 0x20], dx
mov dword [ebp - 0x10c], 0
mov dword [ebp - 0xa0], 0
jmp 0x1004d21b
mov eax, dword [ebp - 0x10c]
add eax, 1
mov dword [ebp - 0x10c], eax
cmp dword [ebp - 0x10c], 1
jae 0x1004da7d
movsx ecx, byte [ebp - 2]
push ecx
call dword [sym.imp.USER32.dll_IsZoomed]
mov word [0x100a5128], ax
xor edx, edx
mov dword [0x100a5100], 0x5f
mov dword [0x100a5104], edx
movzx eax, word [ebp - 0x20]
movsx ecx, word [0x100a50dc]
cmp eax, ecx
je 0x1004d296
movsx edx, word [0x100a50ec]
mov eax, dword [ebp - 0x30]
lea ecx, [eax + edx - 0x4a]
mov dword [ebp - 0x30], ecx
mov edx, dword [ebp - 0x44]
add edx, 0xc602
mov byte [0x100a504b], dl
movsx eax, word [0x100a5140]
movzx ecx, byte [str._NgcSignWithUserIdK]
imul eax, ecx
mov word [0x100a5140], ax
jmp 0x1004d38e
movzx edx, byte [ebp - 1]
movzx eax, word [ebp - 0x18]
not eax
cmp edx, eax
jne 0x1004d30a
movsx eax, byte [0x100a5026]
sar eax, 8
cdq
mov dword [ebp - 0x2c], eax
mov dword [ebp - 0x28], edx
mov ecx, dword [ebp - 0x30]
add ecx, 0xe1b91b18
mov byte [0x100a504b], cl
movsx eax, byte [ebp - 5]
cdq
mov esi, eax
mov edi, edx
push 0
push 0
mov edx, dword [0x100a5154]
push edx
mov eax, dword [0x100a5150]
push eax
call fcn.10073670
push edx
push eax
push edi
push esi
call fcn.10073670
mov ecx, eax
movsx eax, word [ebp - 0x1c]
movzx edx, byte [ebp - 1]
imul eax, edx
movsx edx, byte [ebp - 5]
xor eax, edx
cdq
and ecx, eax
mov dword [ebp - 0x38], ecx
jmp 0x1004d38e
movzx eax, byte [str._NgcSignWithUserIdK]
test eax, eax
jne 0x1004d321
mov dword [ebp - 0x35c], 1
jmp 0x1004d32b
mov dword [ebp - 0x35c], 0
movzx ecx, word [ebp - 0xc]
cmp ecx, dword [0x100a5144]
je 0x1004d343
mov dword [ebp - 0x360], 1
jmp 0x1004d34d
mov dword [ebp - 0x360], 0
movsx edx, word [0x100a513c]
xor edx, dword [ebp - 0x35c]
cmp edx, dword [ebp - 0x360]
jl 0x1004d38e
mov eax, dword [ebp - 0x2c]
mov ecx, dword [ebp - 0x28]
push 0
push 0xbc9e
push ecx
push eax
call fcn.10073670
mov dword [0x100a5118], eax
mov dword [0x100a511c], edx
movsx edx, byte [ebp - 5]
sar edx, 4
mov dword [0x100a5144], edx
mov ecx, dword [0x100a5120]
mov esi, dword [0x100a5124]
movzx eax, word [ebp - 0x20]
cdq
add eax, 0x13cfeea4
adc edx, 0x52760
mov dword [ebp - 0x13b8], ecx
mov dword [ebp - 0x13b4], esi
mov dword [ebp - 0x13c0], eax
mov dword [ebp - 0x13bc], edx
mov edx, dword [ebp - 0x13b8]
cmp edx, dword [ebp - 0x13c0]
jne 0x1004d644
mov eax, dword [ebp - 0x13b4]
cmp eax, dword [ebp - 0x13bc]
jne 0x1004d644
movsx ecx, byte [ebp - 2]
add ecx, dword [0x100a50f8]
cmp ecx, 1
jne 0x1004d644
movsx edx, word [0x100a5134]
cmp dword [ebp - 0x38], edx
jle 0x1004d4e8
mov eax, dword [ebp - 0x34]
add eax, dword [ebp - 0x30]
xor ecx, ecx
push 0x58dd8
push 0xf68f5ea1
push ecx
push eax
call fcn.10073670
mov dword [ebp - 0x13c8], eax
mov dword [ebp - 0x13c4], edx
mov edx, dword [ebp - 0x13c8]
or edx, dword [ebp - 0x13c4]
jne 0x1004d448
mov dword [ebp - 0x36c], 1
jmp 0x1004d452
mov dword [ebp - 0x36c], 0
movzx eax, word [ebp - 0xc]
test eax, eax
jne 0x1004d466
mov dword [ebp - 0x364], 1
jmp 0x1004d470
mov dword [ebp - 0x364], 0
movzx ecx, word [0x100a510c]
not ecx
xor ecx, 0xffffec0f
jne 0x1004d48d
mov dword [ebp - 0x368], 1
jmp 0x1004d497
mov dword [ebp - 0x368], 0
mov edx, dword [0x100a5108]
add edx, dword [ebp - 0x364]
not edx
sub edx, dword [ebp - 0x368]
add edx, dword [ebp - 0x36c]
mov dword [0x100a5108], edx
movsx eax, word [0x100a513c]
imul eax, dword [ebp - 0x24]
mov dword [ebp - 0x38], eax
movsx eax, word [ebp - 0x1c]
cdq
mov dword [0x100a5150], eax
mov dword [0x100a5154], edx
mov eax, dword [0x100a50e8]
sar eax, 1
cdq
mov dword [ebp - 0x2c], eax
mov dword [ebp - 0x28], edx
jmp 0x1004d58f
movsx ecx, word [ebp - 0x1c]
test ecx, ecx
je 0x1004d58f
mov edx, dword [0x100a5158]
xor edx, 0x7e6fe4b1
mov byte [0x100a504b], dl
movsx eax, word [0x100a5140]
imul eax, eax, 0xb1
cdq
mov dword [0x100a50e0], eax
mov dword [0x100a50e4], edx
movzx eax, byte [0x100a503b]
cdq
push edx
push eax
mov ecx, dword [ebp - 0x4c]
push ecx
mov edx, dword [ebp - 0x50]
push edx
call fcn.10073670
and eax, dword [ebp - 0x50]
and edx, dword [ebp - 0x4c]
mov dword [ebp - 0x50], eax
mov dword [ebp - 0x4c], edx
cmp dword [ebp - 0x24], 0
jne 0x1004d554
mov dword [ebp - 0x370], 1
jmp 0x1004d55e
mov dword [ebp - 0x370], 0
movsx eax, word [0x100a5138]
movzx ecx, byte [str._NgcSignWithUserIdK]
add eax, ecx
xor eax, dword [ebp - 0x38]
movsx edx, word [0x100a50fc]
not edx
and edx, dword [ebp - 0x370]
movzx ecx, word [ebp - 0x20]
not ecx
lea edx, [edx + ecx + 0x7f]
add eax, edx
mov dword [ebp - 0x24], eax
jmp 0x1004d239
movsx ecx, word [0x100a5134]
cmp ecx, dword [ebp - 0x24]
je 0x1004d776
movzx eax, word [ebp - 0x18]
cdq
mov ecx, dword [ebp - 0x2c]
mov esi, dword [ebp - 0x28]
mov dword [ebp - 0x13d0], eax
mov dword [ebp - 0x13cc], edx
mov dword [ebp - 0x13d8], ecx
mov dword [ebp - 0x13d4], esi
mov edx, dword [ebp - 0x13cc]
cmp edx, dword [ebp - 0x13d4]
jl 0x1004d771
jg 0x1004d69d
mov eax, dword [ebp - 0x13d0]
cmp eax, dword [ebp - 0x13d8]
jb 0x1004d771
mov ecx, dword [0x100a5118]
mov edx, dword [0x100a511c]
mov dword [ebp - 0x13e0], ecx
mov dword [ebp - 0x13dc], edx
mov eax, dword [ebp - 0x13e0]
or eax, dword [ebp - 0x13dc]
jne 0x1004d6d7
xor ecx, ecx
mov dword [ebp - 0x13e8], 1
mov dword [ebp - 0x13e4], ecx
jmp 0x1004d6e2
xorps xmm0, xmm0
movlpd qword [ebp - 0x13e8], xmm0
movzx edx, word [0x100a5130]
movsx eax, byte [ebp - 4]
sub edx, eax
jne 0x1004d6fd
mov dword [ebp - 0x378], 1
jmp 0x1004d707
mov dword [ebp - 0x378], 0
movsx eax, word [0x100a50fc]
cdq
mov ecx, eax
mov edx, dword [0x100a50f0]
mov eax, dword [0x100a50f4]
mov dword [ebp - 0x2284], eax
add edx, dword [ebp - 0x13e8]
add ecx, edx
mov eax, dword [ebp - 0x38]
add eax, dword [ebp - 0x378]
cdq
xor ecx, eax
mov word [0x100a512c], cx
mov ecx, dword [0x100a5118]
mov edx, dword [0x100a511c]
mov dword [ebp - 0x2288], edx
add ecx, 0xf4d1cec4
mov word [ebp - 0xc], cx
movsx eax, byte [0x100a5026]
mov ecx, 4
imul edx, ecx, 0x2590
mov dword [edx + 0x102d9458], eax
jmp 0x1004d886
movsx eax, word [0x100a513c]
sub eax, dword [ebp - 0x48]
movsx ecx, word [0x100a513c]
add ecx, eax
mov word [0x100a513c], cx
mov dword [ebp - 0x34], 0xbe
mov edx, dword [0x100a50e0]
add edx, 0x9a296872
mov eax, dword [0x100a50e4]
adc eax, 0
mov dword [0x100a5100], edx
mov dword [0x100a5104], eax
mov ecx, dword [ebp - 0x50]
not ecx
mov esi, dword [ebp - 0x4c]
not esi
movsx eax, byte [0x100a5026]
cdq
push edx
push eax
push esi
push ecx
call fcn.10073670
mov dword [ebp - 0x13f0], eax
mov dword [ebp - 0x13ec], edx
mov edx, dword [ebp - 0x13f0]
or edx, dword [ebp - 0x13ec]
jne 0x1004d7ff
xor eax, eax
mov dword [ebp - 0xefc], 1
mov dword [ebp - 0xef8], eax
jmp 0x1004d80a
xorps xmm0, xmm0
movlpd qword [ebp - 0xefc], xmm0
mov ecx, dword [ebp - 0x44]
not ecx
mov esi, dword [ebp - 0x40]
not esi
mov eax, dword [ebp - 0x38]
cdq
push edx
push eax
push esi
push ecx
call fcn.10073670
xor eax, dword [ebp - 0xefc]
xor edx, dword [ebp - 0xef8]
sub eax, 0x64
sbb edx, 0
mov dword [ebp - 0x13f8], eax
mov dword [ebp - 0x13f4], edx
mov edx, dword [ebp - 0x13f8]
or edx, dword [ebp - 0x13f4]
jne 0x1004d859
mov dword [ebp - 0x37c], 1
jmp 0x1004d863
mov dword [ebp - 0x37c], 0
mov eax, dword [ebp - 0x37c]
mov dword [0x100a5108], eax
mov ecx, dword [ebp - 0x2c]
mov edx, dword [ebp - 0x28]
mov dword [ebp - 0x228c], edx
sub ecx, 0xe342
mov dword [0x100a50e8], ecx
mov eax, dword [ebp - 0x10c]
movzx ecx, word [ebp + eax*2 - 0x134]
mov dword [ebp - 0xa0], ecx
call dword [sym.imp.USER32.dll_GetFocus]
mov word [ebp - 0x10], ax
movsx edx, word [ebp - 0x10]
test edx, edx
jg 0x1004d8b8
mov dword [ebp - 0x380], 1
jmp 0x1004d8c2
mov dword [ebp - 0x380], 0
movsx eax, word [ebp - 0x10]
cmp eax, 0x41
jg 0x1004d8d7
mov dword [ebp - 0x384], 1
jmp 0x1004d8e1
mov dword [ebp - 0x384], 0
mov edx, dword [ebp - 0xa0]
sub edx, 0x9c
mov dword [ebp - 0xa0], edx
movsx eax, byte [ebp - 5]
movzx ecx, word [ebp - 0x18]
add eax, ecx
mov byte [ebp - 5], al
mov edx, dword [ebp - 0x50]
sub edx, 0x5727
mov byte [ebp - 5], dl
movzx eax, byte [ebp - 1]
test eax, eax
je 0x1004d92e
mov ecx, dword [0x100a5118]
mov edx, dword [0x100a511c]
mov dword [ebp - 0xf04], ecx
mov dword [ebp - 0xf00], edx
jmp 0x1004d93f
mov eax, dword [ebp - 0x30]
xor ecx, ecx
mov dword [ebp - 0xf04], eax
mov dword [ebp - 0xf00], ecx
mov edx, dword [ebp - 0xf04]
mov dword [ebp - 0x48], edx
movsx eax, byte [ebp - 4]
cdq
mov ecx, dword [ebp - 0x2c]
mov esi, dword [ebp - 0x28]
add ecx, eax
adc esi, edx
mov edx, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x28]
sub edx, ecx
sbb eax, esi
mov dword [ebp - 0x2c], edx
mov dword [ebp - 0x28], eax
mov ecx, dword [ebp - 0x50]
sub ecx, 0xdc18
mov word [0x100a50ec], cx
mov edx, dword [ebp - 0xa0]
xor edx, 0x3e
mov dword [ebp - 0xa0], edx
mov eax, dword [0x100a50e8]
sar eax, 1
cdq
mov dword [0x100a50e0], eax
mov dword [0x100a50e4], edx
movsx eax, word [0x100a50ec]
cdq
sub eax, 0x56e6ffc4
mov dword [0x100a5108], eax
movzx eax, word [0x100a510c]
and eax, dword [ebp - 0x3c]
movzx ecx, word [0x100a510c]
sub ecx, eax
mov word [0x100a510c], cx
mov dx, word [0x100a5bfc]
mov word [0x100a5134], dx
movsx eax, byte [ebp - 5]
test eax, eax
jne 0x1004d9e7
mov dword [ebp - 0x388], 1
jmp 0x1004d9f1
mov dword [ebp - 0x388], 0
movsx ecx, word [ebp - 0x1c]
sub ecx, dword [0x100a5108]
mov edx, dword [ebp - 0x388]
lea eax, [edx + ecx + 0xb147]
mov esi, eax
xor edi, edi
movzx eax, byte [ebp - 1]
not eax
cdq
mov ecx, dword [ebp - 0x2c]
mov ebx, dword [ebp - 0x28]
push ebx
push ecx
push edx
push eax
call fcn.10073670
mov ecx, eax
mov ebx, edx
movzx eax, word [ebp - 0x18]
cdq
add eax, dword [0x100a50e0]
adc edx, dword [0x100a50e4]
sub ecx, eax
sbb ebx, edx
add esi, ecx
adc edi, ebx
mov dword [0x100a5100], esi
mov dword [0x100a5104], edi
movzx eax, byte [str._NgcSignWithUserIdK]
cdq
mov ecx, dword [ebp - 0x50]
sub ecx, eax
mov eax, dword [ebp - 0x4c]
sbb eax, edx
mov dword [ebp - 0x50], ecx
mov dword [ebp - 0x4c], eax
mov ecx, dword [ebp - 0x10c]
mov dx, word [ebp - 0xa0]
mov word [ebp + ecx*2 - 0x134], dx
jmp 0x1004d20c
movsx eax, byte [0x100a5026]
push eax
call dword [sym.imp.KERNEL32.dll_IsValidCodePage]
mov byte [0x100a5026], al
mov ecx, 2
shl ecx, 0
xor edx, edx
mov word [ebp + ecx - 0x134], dx
movsx eax, word [0x100a5138]
sub eax, 0x6c7d
cdq
mov dword [ebp - 0x2c], eax
mov dword [ebp - 0x28], edx
xor eax, eax
mov dword [0x100a5100], 0xb
mov dword [0x100a5104], eax
cmp dword [ebp - 0x48], 0
je 0x1004dae6
mov ecx, dword [0x100a5110]
mov edx, dword [0x100a5114]
mov dword [ebp - 0xe54], ecx
mov dword [ebp - 0xe50], edx
jmp 0x1004daf9
mov eax, dword [0x100a5108]
xor ecx, ecx
mov dword [ebp - 0xe54], eax
mov dword [ebp - 0xe50], ecx
mov edx, dword [ebp - 0xe54]
mov eax, dword [ebp - 0xe50]
mov dword [0x100a5110], edx
mov dword [0x100a5114], eax
movsx ecx, byte [ebp - 2]
add ecx, dword [0x100a50e8]
mov dword [0x100a50e8], ecx
movsx edx, word [0x100a50fc]
xor edx, 0x1966
movsx eax, byte [0x100a5026]
add eax, edx
mov byte [0x100a5026], al
movzx ecx, byte [str._NgcSignWithUserIdK]
sub ecx, 0x4d
movsx edx, word [0x100a50dc]
xor edx, ecx
mov word [0x100a50dc], dx
mov eax, 0x31
mov word [ebp - 0x13c], ax
xor ecx, ecx
mov word [ebp - 0x13a], cx
mov dword [ebp - 0x38], 2
mov edx, 4
shl edx, 5
movzx eax, word [ebp - 0x20]
sub eax, dword [edx + 0x100db7f8]
mov word [ebp - 0x20], ax
movsx eax, word [0x100a50dc]
cdq
mov ecx, dword [0x100a5100]
mov esi, dword [0x100a5104]
xor ecx, eax
xor esi, edx
not ecx
not esi
movsx edx, byte [ebp - 4]
mov eax, dword [ebp - 0x24]
add eax, edx
cdq
xor ecx, eax
xor esi, edx
mov dword [ebp - 0x1400], ecx
mov dword [ebp - 0x13fc], esi
mov eax, dword [ebp - 0x1400]
or eax, dword [ebp - 0x13fc]
jne 0x1004dbd7
mov dword [ebp - 0x390], 1
jmp 0x1004dbe1
mov dword [ebp - 0x390], 0
movzx ecx, word [0x100a512c]
test ecx, ecx
jne 0x1004dbf8
mov dword [ebp - 0x38c], 1
jmp 0x1004dc02
mov dword [ebp - 0x38c], 0
movsx edx, byte [ebp - 2]
add edx, dword [ebp - 0x38c]
movzx eax, word [ebp - 0x20]
movsx ecx, byte [0x100a5026]
add eax, ecx
and edx, eax
imul edx, dword [ebp - 0x390]
not edx
mov word [0x100a5138], dx
mov dword [0x100a50f8], 0xc0
movzx edx, byte [str._NgcSignWithUserIdK]
imul edx, dword [0x100a5158]
movzx eax, byte [str._NgcSignWithUserIdK]
and eax, edx
mov byte [str._NgcSignWithUserIdK], al
movsx ecx, word [ebp - 0x14]
test ecx, ecx
jne 0x1004dc65
mov dword [ebp - 0x394], 1
jmp 0x1004dc6f
mov dword [ebp - 0x394], 0
movsx edx, byte [ebp - 4]
movsx eax, byte [ebp - 4]
sub eax, dword [ebp - 0x394]
not eax
add edx, eax
mov word [0x100a50dc], dx
mov ecx, dword [ebp - 0x38]
mov dword [ebp - 0x178], ecx
cmp dword [ebp - 0x178], 0
je 0x1004dcb9
cmp dword [ebp - 0x178], 1
je 0x1004dd2c
cmp dword [ebp - 0x178], 2
je 0x1004dd6c
jmp 0x1004de31
movsx edx, word [ebp - 0x1c]
add edx, 0x39
mov eax, dword [ebp - 0x3c]
add eax, edx
mov dword [ebp - 0x3c], eax
mov ecx, dword [0x100a5100]
mov edx, dword [0x100a5104]
add ecx, 0x7f
adc edx, 0
mov dword [ebp - 0x2c], ecx
mov dword [ebp - 0x28], edx
movsx eax, byte [ebp - 3]
cdq
mov ecx, eax
sub ecx, 0x63018b2
movzx eax, word [ebp - 0x18]
cdq
sub eax, ecx
mov word [ebp - 0x18], ax
movzx eax, word [0x100a5128]
cdq
mov ecx, eax
mov esi, edx
sub ecx, dword [0x100a5150]
sbb esi, dword [0x100a5154]
movzx eax, word [0x100a5128]
cdq
push esi
push ecx
push edx
push eax
call fcn.10073670
mov word [0x100a5128], ax
jmp 0x1004de31
mov edx, dword [0x100a5108]
xor eax, eax
mov ecx, dword [0x100a5118]
mov esi, dword [0x100a511c]
push esi
push ecx
push eax
push edx
call fcn.10073670
mov dword [ebp - 0x30], eax
movzx edx, word [ebp - 0x18]
add edx, 0xd1
mov word [ebp - 0xc], dx
movzx eax, word [0x100a510c]
add eax, 0x6b
mov byte [ebp - 5], al
jmp 0x1004de31
push 0
push 0x559e3f7a
mov ecx, dword [0x100a50e4]
push ecx
mov edx, dword [0x100a50e0]
push edx
call fcn.10073670
mov dword [0x100a5108], eax
movsx eax, word [0x100a50fc]
imul eax, eax, 0xb5b7
cdq
mov dword [ebp - 0x2c], eax
mov dword [ebp - 0x28], edx
mov ecx, dword [0x100a5100]
mov edx, dword [0x100a5104]
mov dword [ebp - 0x2290], edx
sub ecx, 0x708c18ee
mov word [0x100a512c], cx
mov ax, word [ebp - 0x10]
mov ecx, 2
imul edx, ecx, 0x1ab5
mov word [edx + 0x102024e0], ax
movzx eax, word [ebp - 0xc]
test eax, eax
jne 0x1004dde8
mov dword [ebp - 0x398], 1
jmp 0x1004ddf2
mov dword [ebp - 0x398], 0
movsx ecx, word [0x100a513c]
movzx edx, byte [0x100a503b]
imul ecx, edx
mov eax, dword [ebp - 0x34]
not eax
add eax, dword [ebp - 0x398]
imul ecx, eax
movzx edx, byte [str._NgcSignWithUserIdK]
movsx eax, word [0x100a50dc]
sub eax, dword [0x100a5158]
not eax
add edx, eax
not edx
xor ecx, edx
mov word [ebp - 0xc], cx
mov dword [ebp - 0x110], 0
mov dword [ebp - 0x138], 0
jmp 0x1004de56
mov ecx, dword [ebp - 0x110]
add ecx, 1
mov dword [ebp - 0x110], ecx
cmp dword [ebp - 0x110], 1
jae 0x1004ef7c
mov edx, 3
mov word [0x100a512c], dx
movzx eax, byte [ebp - 1]
cdq
mov ecx, eax
mov esi, edx
mov eax, dword [ebp - 0x24]
cdq
mov edi, dword [0x100a5150]
sub edi, eax
mov eax, dword [0x100a5154]
sbb eax, edx
add ecx, edi
adc esi, eax
mov dword [ebp - 0x1408], ecx
mov dword [ebp - 0x1404], esi
mov ecx, dword [ebp - 0x1408]
or ecx, dword [ebp - 0x1404]
jne 0x1004deb7
mov edx, 1
mov word [ebp - 0xb8], dx
jmp 0x1004dec0
xor eax, eax
mov word [ebp - 0xb8], ax
mov cx, word [ebp - 0xb8]
mov word [0x100a50fc], cx
mov edx, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x28]
mov dword [ebp - 0x1410], edx
mov dword [ebp - 0x140c], eax
mov ecx, dword [ebp - 0x1410]
or ecx, dword [ebp - 0x140c]
je 0x1004defc
mov edx, dword [0x100a5108]
mov dword [ebp - 0x39c], edx
jmp 0x1004df06
movsx eax, byte [ebp - 3]
mov dword [ebp - 0x39c], eax
mov cx, word [ebp - 0x39c]
mov word [0x100a5148], cx
mov eax, dword [0x100a50e8]
cdq
mov ecx, dword [ebp - 0x2c]
mov esi, dword [ebp - 0x28]
push esi
push ecx
push edx
push eax
call fcn.10073670
mov ecx, eax
mov esi, edx
movsx eax, byte [ebp - 4]
movsx edx, byte [0x100a5026]
not edx
add eax, edx
cdq
sub ecx, eax
sbb esi, edx
movsx eax, word [0x100a515c]
add eax, dword [ebp - 0x24]
not eax
movzx edx, word [0x100a5128]
sub edx, dword [ebp - 0x38]
and eax, edx
cdq
push edx
push eax
push esi
push ecx
call fcn.10073670
mov dword [ebp - 0x1418], eax
mov dword [ebp - 0x1414], edx
mov eax, dword [ebp - 0x1418]
or eax, dword [ebp - 0x1414]
jne 0x1004df89
mov dword [ebp - 0x3a0], 1
jmp 0x1004df93
mov dword [ebp - 0x3a0], 0
mov ecx, dword [ebp - 0x3a0]
mov dword [ebp - 0x3c], ecx
mov edx, dword [ebp - 0x34]
not edx
movzx eax, word [ebp - 0xc]
and eax, 0x3e
xor edx, eax
mov word [0x100a50dc], dx
mov eax, dword [ebp - 0x24]
cdq
sub eax, 0x57a523a7
mov ecx, dword [ebp - 0x3c]
add ecx, eax
mov dword [ebp - 0x3c], ecx
movzx edx, word [0x100a512c]
mov dword [ebp - 0x3a4], edx
cmp dword [ebp - 0x3a4], 3
ja case.default.0x1004dfe2
mov eax, dword [ebp - 0x3a4]
jmp dword [eax*4 + 0x10071608]
movsx ecx, word [ebp - 0x1c]
mov edx, dword [ebp - 0x38]
imul edx, ecx
mov dword [ebp - 0x38], edx
mov eax, dword [0x100a5144]
add eax, dword [0x100a5158]
movsx ecx, byte [0x100a504b]
not ecx
mov edx, 0xf03e
sub edx, ecx
add eax, edx
jne 0x1004e021
mov dword [ebp - 0x3a8], 1
jmp 0x1004e02b
mov dword [ebp - 0x3a8], 0
mov eax, dword [ebp - 0x3a8]
mov dword [0x100a5108], eax
mov dword [0x100a50e8], 0x46
mov ecx, dword [0x100a50e0]
mov edx, 4
imul eax, edx, 0x23f
mov dword [eax + 0x10126b28], ecx
mov ecx, dword [ebp - 0x34]
xor esi, esi
sub ecx, 0xba990f7
sbb esi, 0x4f7e0
movsx eax, word [0x100a50ec]
cdq
push esi
push ecx
push edx
push eax
call fcn.10073670
mov word [0x100a50ec], ax
movsx dx, byte [0x100a504b]
mov word [ebp - 0x20], dx
jmp case.default.0x1004dfe2
movsx eax, byte [0x100a504b]
test eax, eax
je 0x1004e0af
mov ecx, dword [ebp - 0x2c]
mov edx, dword [ebp - 0x28]
mov dword [ebp - 0xf0c], ecx
mov dword [ebp - 0xf08], edx
jmp 0x1004e0c3
movsx eax, word [0x100a5138]
cdq
mov dword [ebp - 0xf0c], eax
mov dword [ebp - 0xf08], edx
mov ax, word [ebp - 0xf0c]
mov word [ebp - 0x14], ax
movsx ecx, byte [ebp - 2]
movzx edx, byte [ebp - 1]
add ecx, edx
mov byte [ebp - 2], cl
mov eax, dword [ebp - 0x24]
cdq
sub eax, 0x80eda319
mov byte [ebp - 2], al
movsx eax, word [0x100a515c]
movsx ecx, word [ebp - 0x10]
imul eax, ecx
mov word [0x100a515c], ax
jmp case.default.0x1004dfe2
movzx edx, word [ebp - 0x20]
mov eax, dword [ebp - 0x34]
not eax
movzx ecx, word [ebp - 0x18]
or eax, ecx
movsx ecx, byte [ebp - 3]
add eax, ecx
not eax
sub edx, eax
mov dword [ebp - 0x48], edx
mov edx, dword [0x100a5158]
add edx, 4
mov eax, dword [0x100a5108]
sub eax, edx
mov dword [0x100a5108], eax
cmp dword [ebp - 0x3c], 0
jne 0x1004e14b
xor ecx, ecx
mov dword [ebp - 0x1420], 1
mov dword [ebp - 0x141c], ecx
jmp 0x1004e156
xorps xmm0, xmm0
movlpd qword [ebp - 0x1420], xmm0
mov ecx, dword [ebp - 0x2c]
mov edx, dword [ebp - 0x28]
mov dword [ebp - 0x2294], edx
or ecx, dword [ebp - 0x1420]
mov esi, dword [0x100a5118]
mov eax, dword [0x100a511c]
mov dword [ebp - 0x2298], eax
not esi
movsx eax, byte [ebp - 2]
cdq
xor esi, eax
sub ecx, esi
mov word [0x100a5128], cx
movsx ecx, word [0x100a50fc]
movsx edx, word [0x100a513c]
sub ecx, edx
mov word [0x100a50fc], cx
jmp case.default.0x1004dfe2
mov eax, dword [0x100a5bfc]
xor ecx, ecx
mov dword [ebp - 0x2c], eax
mov dword [ebp - 0x28], ecx
mov edx, dword [ebp - 0x3c]
mov word [0x100a5148], dx
mov eax, dword [ebp - 0x30]
sub eax, 0xa1
movzx ecx, word [0x100a510c]
and ecx, eax
mov word [0x100a510c], cx
movsx eax, byte [ebp - 4]
add eax, 0xfa51
cdq
mov dword [0x100a5100], eax
mov dword [0x100a5104], edx
movsx edx, byte [ebp - 3]
imul eax, edx, 0xd8c
mov dword [ebp - 0x3c], eax
mov byte [0x100a504b], 0x5f
movsx ecx, word [0x100a515c]
test ecx, ecx
je 0x1004e216
movsx edx, word [0x100a50dc]
mov dword [ebp - 0x3ac], edx
jmp 0x1004e221
mov eax, dword [0x100a5108]
mov dword [ebp - 0x3ac], eax
mov cx, word [ebp - 0x3ac]
mov word [0x100a5130], cx
mov ecx, dword [0x100a5120]
mov esi, dword [0x100a5124]
movsx eax, word [ebp - 0x1c]
cdq
add eax, 0xa98332e0
adc edx, 0x80af
mov dword [ebp - 0x1428], ecx
mov dword [ebp - 0x1424], esi
mov dword [ebp - 0x1430], eax
mov dword [ebp - 0x142c], edx
mov edx, dword [ebp - 0x1428]
cmp edx, dword [ebp - 0x1430]
jne 0x1004e5b4
mov eax, dword [ebp - 0x1424]
cmp eax, dword [ebp - 0x142c]
jne 0x1004e5b4
movzx ecx, word [0x100a512c]
movsx edx, word [ebp - 0x1c]
add ecx, edx
cmp ecx, 1
jne 0x1004e5b4
mov eax, dword [0x100a5150]
or eax, dword [0x100a5154]
je 0x1004e422
movzx ecx, word [ebp - 0x20]
movsx edx, byte [ebp - 4]
cmp ecx, edx
jne 0x1004e2c6
mov dword [ebp - 0x3b0], 1
jmp 0x1004e2d0
mov dword [ebp - 0x3b0], 0
movzx eax, word [ebp - 0x20]
cmp eax, 0x29
jne 0x1004e2e5
mov dword [ebp - 0x3b4], 1
jmp 0x1004e2ef
mov dword [ebp - 0x3b4], 0
mov ecx, dword [ebp - 0x3b0]
cmp ecx, dword [ebp - 0x3b4]
jle 0x1004e365
movzx edx, word [ebp - 0x18]
test edx, edx
je 0x1004e314
movzx eax, word [0x100a5130]
mov dword [ebp - 0x3b8], eax
jmp 0x1004e321
movzx ecx, byte [str._NgcSignWithUserIdK]
mov dword [ebp - 0x3b8], ecx
mov dx, word [ebp - 0x3b8]
mov word [ebp - 0xc], dx
movsx eax, byte [ebp - 4]
cdq
mov ecx, eax
mov esi, edx
and ecx, 0xcd454b47
and esi, 0xdbf99
movsx eax, byte [ebp - 5]
cdq
xor ecx, eax
xor esi, edx
mov dword [0x100a5110], ecx
mov dword [0x100a5114], esi
mov dword [0x100a50e8], 0x32
jmp 0x1004e41d
movsx eax, byte [0x100a504b]
cdq
mov dword [ebp - 0x1438], eax
mov dword [ebp - 0x1434], edx
mov edx, dword [ebp - 0x4c]
cmp edx, dword [ebp - 0x1434]
ja 0x1004e39d
jb 0x1004e391
mov eax, dword [ebp - 0x50]
cmp eax, dword [ebp - 0x1438]
ja 0x1004e39d
mov dword [ebp - 0x3bc], 1
jmp 0x1004e3a7
mov dword [ebp - 0x3bc], 0
movsx ecx, word [0x100a515c]
cmp ecx, dword [ebp - 0x3bc]
jg 0x1004e3c2
mov dword [ebp - 0x3c0], 1
jmp 0x1004e3cc
mov dword [ebp - 0x3c0], 0
mov edx, dword [ebp - 0x3c0]
not edx
test edx, edx
je 0x1004e41d
mov eax, dword [0x100a50e8]
cdq
mov ecx, dword [0x100a50f0]
mov esi, dword [0x100a50f4]
sub ecx, eax
sbb esi, edx
mov dword [0x100a50f0], ecx
mov dword [0x100a50f4], esi
mov edx, dword [ebp - 0x44]
add edx, 0xb518
mov word [0x100a512c], dx
movsx eax, byte [0x100a504b]
cdq
mov ecx, dword [0x100a5150]
sub ecx, eax
mov dword [ebp - 0x34], ecx
jmp 0x1004e52c
movsx edx, byte [0x100a5026]
test edx, edx
jne 0x1004e439
mov dword [ebp - 0x3c4], 1
jmp 0x1004e443
mov dword [ebp - 0x3c4], 0
movsx eax, word [0x100a515c]
imul eax, dword [0x100a50e8]
movsx ecx, word [0x100a50dc]
not ecx
mov edx, dword [ebp - 0x3c4]
sub edx, ecx
sub eax, edx
movsx ecx, word [ebp - 0x10]
movsx edx, byte [ebp - 2]
movsx esi, word [ebp - 0x10]
add edx, esi
sub ecx, edx
sub eax, ecx
mov byte [0x100a5026], al
movzx eax, word [0x100a512c]
test eax, eax
jne 0x1004e492
mov dword [ebp - 0x3c8], 1
jmp 0x1004e49c
mov dword [ebp - 0x3c8], 0
mov ecx, dword [ebp - 0x44]
or ecx, dword [ebp - 0x40]
jne 0x1004e4b0
mov dword [ebp - 0x3cc], 1
jmp 0x1004e4ba
mov dword [ebp - 0x3cc], 0
movsx edx, word [0x100a515c]
mov eax, dword [ebp - 0x3c8]
sub eax, edx
add eax, dword [ebp - 0x3cc]
not eax
cdq
mov dword [0x100a5120], eax
mov dword [0x100a5124], edx
imul eax, dword [0x100a5144], 0x81adf1c2
mov word [0x100a50dc], ax
movsx ecx, word [ebp - 0x14]
movsx edx, byte [0x100a5026]
sub ecx, edx
movsx eax, word [ebp - 0x14]
and eax, ecx
mov word [ebp - 0x14], ax
movsx ecx, byte [0x100a5026]
mov edx, dword [0x100a5108]
sub edx, ecx
mov dword [0x100a5108], edx
movsx eax, word [ebp - 0x1c]
cdq
mov ecx, 0xe7c310e8
sub ecx, eax
mov word [0x100a515c], cx
jmp case.default.0x1004dfe2
movsx edx, word [0x100a515c]
test edx, edx
je 0x1004e631
mov ecx, dword [0x100a5100]
mov edx, dword [0x100a5104]
mov dword [ebp - 0x22a0], edx
sub ecx, 0x51
movsx eax, word [0x100a50dc]
cdq
sub eax, ecx
mov word [0x100a50dc], ax
movsx eax, byte [ebp - 2]
test eax, eax
je 0x1004e5ff
movzx eax, word [ebp - 0x20]
cdq
mov dword [ebp - 0xf14], eax
mov dword [ebp - 0xf10], edx
jmp 0x1004e611
mov ecx, dword [ebp - 0x2c]
mov edx, dword [ebp - 0x28]
mov dword [ebp - 0xf14], ecx
mov dword [ebp - 0xf10], edx
mov eax, dword [ebp - 0xf14]
mov dword [0x100a5158], eax
movzx ecx, byte [str._NgcSignWithUserIdK]
sub ecx, 0xe03a
mov edx, dword [ebp - 0x34]
add edx, ecx
mov dword [ebp - 0x34], edx
mov eax, dword [ebp - 0x110]
movzx ecx, word [ebp + eax*2 - 0x13c]
mov dword [ebp - 0x138], ecx
movzx edx, byte [ebp - 1]
test edx, edx
je 0x1004e684
call dword [sym.imp.USER32.dll_GetCursor]
mov dword [ebp - 0x12e8], eax
mov dword [ebp - 0x12ec], 0
cmp dword [ebp - 0x12e8], 0
je 0x1004e67f
mov eax, dword [ebp - 0x12ec]
push eax
call dword [sym.imp.USER32.dll_GetCursorPos]
mov dword [ebp - 0x22a4], eax
jmp 0x1004e71d
cmp dword [ebp - 0x38], 0
jne 0x1004e71d
mov ecx, dword [ebp - 0x30]
xor edx, edx
push 0x8354b
push 0xccb20f92
push edx
push ecx
call fcn.10073670
mov dword [ebp - 0x3c], eax
mov eax, dword [ebp - 0x2c]
mov ecx, dword [ebp - 0x28]
push 0
push 0x7a3b
push ecx
push eax
call fcn.10073670
mov byte [ebp - 5], al
movzx edx, word [ebp - 0xc]
movzx eax, word [ebp - 0x18]
xor edx, eax
mov word [0x100a510c], dx
movsx eax, byte [ebp - 3]
cdq
add eax, 0xa3619870
adc edx, 0x653fa
mov dword [0x100a5110], eax
mov dword [0x100a5114], edx
mov dword [0x100a5158], 2
mov ecx, dword [ebp - 0x2c]
mov edx, dword [ebp - 0x28]
mov dword [ebp - 0x22a8], edx
mov esi, dword [0x100a5150]
sub esi, ecx
movzx eax, byte [str._NgcSignWithUserIdK]
sub eax, 0xd7
cdq
sub esi, eax
mov dword [0x100a50e8], esi
mov eax, dword [ebp - 0x138]
add eax, 1
mov dword [ebp - 0x138], eax
mov byte [0x100a504b], 0xfa
movsx ecx, word [0x100a5138]
movsx edx, word [0x100a50fc]
cmp ecx, edx
je 0x1004e751
mov dword [ebp - 0x3d0], 1
jmp 0x1004e75b
mov dword [ebp - 0x3d0], 0
movsx eax, word [0x100a5138]
cmp eax, 0x4f
je 0x1004e773
mov dword [ebp - 0x3d4], 1
jmp 0x1004e77d
mov dword [ebp - 0x3d4], 0
mov ecx, dword [ebp - 0x3d0]
cmp ecx, dword [ebp - 0x3d4]
jne 0x1004ea72
cmp dword [0x100a5144], 0
jne 0x1004e7ae
movsx edx, word [ebp - 0x1c]
not edx
test edx, edx
je 0x1004e7ae
mov dword [ebp - 0x3e0], 1
jmp 0x1004e7b8
mov dword [ebp - 0x3e0], 0
movsx eax, byte [ebp - 4]
cmp eax, 0xe67ffdc8
jb 0x1004e7cf
mov dword [ebp - 0x3d8], 1
jmp 0x1004e7d9
mov dword [ebp - 0x3d8], 0
movsx eax, word [0x100a5134]
not eax
cdq
mov ecx, dword [0x100a5120]
mov esi, dword [0x100a5124]
mov dword [ebp - 0x1440], eax
mov dword [ebp - 0x143c], edx
mov dword [ebp - 0x1448], ecx
mov dword [ebp - 0x1444], esi
mov edx, dword [ebp - 0x143c]
cmp edx, dword [ebp - 0x1444]
jb 0x1004e831
ja 0x1004e825
mov eax, dword [ebp - 0x1440]
cmp eax, dword [ebp - 0x1448]
jb 0x1004e831
mov dword [ebp - 0x3dc], 1
jmp 0x1004e83b
mov dword [ebp - 0x3dc], 0
mov ecx, dword [ebp - 0x3d8]
cmp ecx, dword [ebp - 0x3dc]
jg 0x1004e855
mov dword [ebp - 0x3e4], 1
jmp 0x1004e85f
mov dword [ebp - 0x3e4], 0
mov edx, dword [ebp - 0x3e0]
not edx
movsx eax, byte [ebp - 3]
not eax
sub edx, eax
cmp edx, dword [ebp - 0x3e4]
jne 0x1004e922
mov ecx, dword [ebp - 0x50]
or ecx, dword [ebp - 0x4c]
je 0x1004e888
jmp 0x1004e91d
xor edx, edx
je 0x1004e8d0
movsx eax, word [ebp - 0x1c]
imul ecx, eax, 0x66
mov word [0x100a510c], cx
movsx edx, word [ebp - 0x1c]
movzx eax, word [0x100a5128]
sub edx, eax
movsx ecx, word [ebp - 0x1c]
and ecx, edx
mov word [ebp - 0x1c], cx
movsx edx, byte [ebp - 5]
movzx eax, word [0x100a510c]
sub edx, eax
movsx ecx, byte [ebp - 5]
add ecx, edx
mov byte [ebp - 5], cl
mov dword [ebp - 0x30], 1
jmp 0x1004e91d
xor edx, edx
je 0x1004e91d
movzx eax, byte [0x100a503b]
mov ecx, dword [ebp - 0x34]
add ecx, eax
mov edx, dword [ebp - 0x34]
imul edx, ecx
mov dword [ebp - 0x34], edx
mov al, byte [0x100a5bfc]
mov byte [ebp - 5], al
movzx ecx, word [0x100a510c]
movzx edx, byte [ebp - 1]
imul ecx, edx
mov dword [ebp - 0x24], ecx
movzx eax, word [0x100a5128]
imul eax, dword [ebp - 0x24]
movzx ecx, word [0x100a5128]
add ecx, eax
mov word [0x100a5128], cx
jmp 0x1004ea6d
movzx edx, word [0x100a5148]
test edx, edx
je 0x1004e941
mov eax, dword [ebp - 0x44]
or eax, dword [ebp - 0x40]
je 0x1004e941
mov dword [ebp - 0x3e8], 1
jmp 0x1004e94b
mov dword [ebp - 0x3e8], 0
movzx ecx, word [ebp - 0xc]
cmp dword [ebp - 0x3e8], ecx
jl 0x1004e963
mov dword [ebp - 0x3ec], 1
jmp 0x1004e96d
mov dword [ebp - 0x3ec], 0
mov edx, dword [ebp - 0x3ec]
not edx
test edx, edx
je 0x1004ea6d
mov eax, 0xffffaed7
mov word [0x100a513c], ax
movzx eax, word [ebp - 0x18]
cdq
mov ecx, dword [0x100a50f4]
sub eax, dword [0x100a50f0]
sbb edx, ecx
mov dword [ebp - 0x1450], eax
mov dword [ebp - 0x144c], edx
mov edx, dword [ebp - 0x1450]
or edx, dword [ebp - 0x144c]
jne 0x1004e9c1
mov dword [ebp - 0x3f0], 1
jmp 0x1004e9cb
mov dword [ebp - 0x3f0], 0
movzx eax, word [ebp - 0x20]
add eax, dword [0x100a5158]
mov ecx, eax
movzx eax, word [0x100a5148]
cdq
mov edx, 0x428dadd8
sub edx, eax
xor ecx, edx
mov eax, dword [ebp - 0x48]
add eax, dword [ebp - 0x3f0]
not eax
cdq
add ecx, eax
not ecx
mov word [ebp - 0x18], cx
mov eax, dword [ebp - 0x2c]
mov ecx, dword [ebp - 0x28]
mov dword [ebp - 0x1458], eax
mov dword [ebp - 0x1454], ecx
mov edx, dword [ebp - 0x1458]
or edx, dword [ebp - 0x1454]
jne 0x1004ea28
mov dword [ebp - 0x3f4], 1
jmp 0x1004ea32
mov dword [ebp - 0x3f4], 0
mov eax, dword [ebp - 0x48]
add eax, dword [ebp - 0x3f4]
mov word [ebp - 0x1c], ax
movzx ecx, word [0x100a5148]
movzx edx, word [ebp - 0x18]
add ecx, edx
movzx eax, word [0x100a5148]
sub eax, ecx
mov word [0x100a5148], ax
mov ecx, dword [0x100a5108]
add ecx, 0x501fff25
mov byte [0x100a5026], cl
jmp 0x1004eb4e
mov edx, dword [ebp - 0x50]
or edx, dword [ebp - 0x4c]
je 0x1004eb4e
movzx eax, word [0x100a5130]
add eax, 0x408d15f5
mov word [ebp - 0x18], ax
mov ecx, dword [0x100a5120]
mov edx, dword [0x100a5124]
mov dword [ebp - 0x1460], ecx
mov dword [ebp - 0x145c], edx
mov eax, dword [ebp - 0x1460]
or eax, dword [ebp - 0x145c]
jne 0x1004eac0
mov dword [ebp - 0x3f8], 1
jmp 0x1004eaca
mov dword [ebp - 0x3f8], 0
movzx eax, word [0x100a512c]
cdq
mov ecx, eax
mov edx, dword [0x100a50f0]
mov eax, dword [0x100a50f4]
mov dword [ebp - 0x22ac], eax
add ecx, edx
not ecx
movsx eax, byte [ebp - 4]
and eax, dword [ebp - 0x3f8]
cdq
add ecx, eax
mov byte [str._NgcSignWithUserIdK], cl
movzx ecx, byte [ebp - 1]
sub ecx, dword [ebp - 0x38]
movzx edx, byte [ebp - 1]
sub edx, ecx
mov byte [ebp - 1], dl
mov eax, dword [ebp - 0x44]
sub eax, 0x48569c5e
mov ecx, dword [ebp - 0x40]
sbb ecx, 0xa492c
mov dword [ebp - 0x44], eax
mov dword [ebp - 0x40], ecx
movsx eax, byte [ebp - 2]
cdq
add eax, dword [0x100a5150]
adc edx, dword [0x100a5154]
mov ecx, dword [0x100a5150]
sub ecx, eax
mov eax, dword [0x100a5154]
sbb eax, edx
mov dword [0x100a5150], ecx
mov dword [0x100a5154], eax
movzx ecx, word [0x100a5130]
movsx edx, byte [0x100a504b]
movsx eax, byte [ebp - 2]
add edx, eax
cmp ecx, edx
jne 0x1004eeea
movzx ecx, word [0x100a512c]
test ecx, ecx
jne 0x1004eb81
mov dword [ebp - 0x3fc], 1
jmp 0x1004eb8b
mov dword [ebp - 0x3fc], 0
movsx edx, word [0x100a50fc]
imul edx, dword [ebp - 0x3fc]
mov word [ebp - 0x20], dx
mov eax, dword [0x100a5150]
xor eax, 0x89
mov word [0x100a50dc], ax
movzx ecx, word [0x100a5148]
sub ecx, 0x11
mov word [0x100a5138], cx
movzx edx, byte [0x100a503b]
test edx, edx
jne 0x1004ebd5
mov dword [ebp - 0x400], 1
jmp 0x1004ebdf
mov dword [ebp - 0x400], 0
movzx eax, byte [ebp - 1]
add eax, dword [ebp - 0x400]
cdq
mov ecx, dword [ebp - 0x2c]
mov edx, dword [ebp - 0x28]
mov dword [ebp - 0x22b0], edx
add ecx, 0xa6
sub eax, ecx
not eax
mov ecx, dword [ebp - 0x2c]
mov edx, dword [ebp - 0x28]
mov dword [ebp - 0x22b4], edx
xor eax, ecx
not eax
mov byte [ebp - 3], al
mov eax, dword [0x100a5120]
mov ecx, dword [0x100a5124]
mov dword [ebp - 0x1468], eax
mov dword [ebp - 0x1464], ecx
mov edx, dword [ebp - 0x1468]
or edx, dword [ebp - 0x1464]
jne 0x1004ec44
mov dword [ebp - 0x404], 1
jmp 0x1004ec4e
mov dword [ebp - 0x404], 0
movsx eax, word [0x100a5138]
add eax, dword [ebp - 0x404]
movzx ecx, byte [0x100a503b]
movsx edx, byte [ebp - 4]
imul ecx, edx
add eax, ecx
mov dword [ebp - 0x48], eax
movzx eax, word [ebp - 0x18]
mov dword [ebp - 0x30], eax
mov ecx, dword [0x100a50f8]
sub ecx, dword [ebp - 0x24]
add ecx, dword [0x100a50f8]
mov dword [0x100a50f8], ecx
movzx edx, word [0x100a510c]
sub edx, 0x5fec92b6
mov byte [0x100a503b], dl
movsx eax, word [0x100a50fc]
cdq
mov ecx, eax
mov esi, edx
movzx eax, word [ebp - 0xc]
cdq
add eax, 0xa98332e0
adc edx, 0x80af
mov dword [ebp - 0x1470], ecx
mov dword [ebp - 0x146c], esi
mov dword [ebp - 0x1478], eax
mov dword [ebp - 0x1474], edx
mov edx, dword [ebp - 0x1470]
cmp edx, dword [ebp - 0x1478]
jne 0x1004eeea
mov eax, dword [ebp - 0x146c]
cmp eax, dword [ebp - 0x1474]
jne 0x1004eeea
movsx eax, word [ebp - 0x14]
cdq
mov dword [ebp - 0x1480], eax
mov dword [ebp - 0x147c], edx
mov ecx, dword [ebp - 0x4c]
cmp ecx, dword [ebp - 0x147c]
jb 0x1004ed2a
ja 0x1004ed1e
mov edx, dword [ebp - 0x50]
cmp edx, dword [ebp - 0x1480]
jb 0x1004ed2a
mov dword [ebp - 0x408], 1
jmp 0x1004ed34
mov dword [ebp - 0x408], 0
cmp dword [ebp - 0x4c], 0
ja 0x1004ed40
cmp dword [ebp - 0x50], 3
jb 0x1004ed4c
mov dword [ebp - 0x40c], 1
jmp 0x1004ed56
mov dword [ebp - 0x40c], 0
mov eax, dword [ebp - 0x408]
cmp eax, dword [ebp - 0x40c]
jge 0x1004edf3
movzx ecx, word [ebp - 0x20]
sar ecx, 1
mov word [0x100a5130], cx
movsx edx, byte [0x100a5026]
mov eax, dword [ebp - 0x24]
sub eax, edx
mov ecx, dword [ebp - 0x24]
sub ecx, eax
mov dword [ebp - 0x24], ecx
movsx edx, byte [ebp - 2]
movsx eax, byte [ebp - 4]
imul edx, eax
movsx ecx, byte [ebp - 2]
sub ecx, edx
mov byte [ebp - 2], cl
mov edx, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x28]
mov dword [ebp - 0x1488], edx
mov dword [ebp - 0x1484], eax
mov ecx, dword [ebp - 0x1488]
or ecx, dword [ebp - 0x1484]
je 0x1004edcc
movsx edx, word [0x100a50ec]
mov dword [ebp - 0x410], edx
jmp 0x1004edd6
movsx eax, byte [ebp - 5]
mov dword [ebp - 0x410], eax
mov cl, byte [ebp - 0x410]
mov byte [0x100a5026], cl
mov edx, dword [0x100a5108]
shl edx, 3
mov dword [ebp - 0x38], edx
jmp 0x1004ee94
mov eax, dword [0x100a5118]
mov ecx, dword [0x100a511c]
mov dword [ebp - 0x1490], eax
mov dword [ebp - 0x148c], ecx
mov edx, dword [ebp - 0x1490]
or edx, dword [ebp - 0x148c]
je 0x1004ee94
movsx eax, word [0x100a50ec]
test eax, eax
jne 0x1004ee2f
mov dword [ebp - 0x414], 1
jmp 0x1004ee39
mov dword [ebp - 0x414], 0
movsx eax, byte [ebp - 2]
add eax, dword [ebp - 0x414]
cdq
mov dword [ebp - 0x44], eax
mov dword [ebp - 0x40], edx
movsx ecx, byte [ebp - 5]
movzx edx, byte [str._NgcSignWithUserIdK]
sub ecx, edx
movsx eax, byte [ebp - 5]
sub eax, ecx
mov byte [ebp - 5], al
movsx ecx, word [0x100a50fc]
movzx edx, word [0x100a510c]
add ecx, edx
movsx eax, word [0x100a50fc]
sub eax, ecx
mov word [0x100a50fc], ax
mov dword [ebp - 0x48], 0x3d052576
movzx ecx, byte [ebp - 1]
imul edx, ecx, 0xc56b
mov word [ebp - 0x14], dx
jmp 0x1004e72c
mov edx, dword [ebp - 0x44]
not edx
mov word [0x100a50dc], dx
movzx eax, byte [str._NgcSignWithUserIdK]
shl eax, 6
mov dword [ebp - 0x24], eax
movsx ecx, byte [0x100a5026]
movzx edx, byte [str._NgcSignWithUserIdK]
add ecx, edx
mov byte [0x100a5026], cl
mov ax, word [0x100a5bfc]
mov word [0x100a5138], ax
movsx eax, word [0x100a5138]
sub eax, 0x446f1fc5
cdq
mov ecx, dword [0x100a5120]
mov esi, dword [0x100a5124]
or ecx, eax
or esi, edx
mov dword [0x100a5120], ecx
mov dword [0x100a5124], esi
mov edx, 4
imul eax, edx, 0x1a
mov ecx, dword [0x100a50f8]
mov dword [eax + 0x100db7f8], ecx
mov edx, dword [ebp - 0x110]
mov ax, word [ebp - 0x138]
mov word [ebp + edx*2 - 0x13c], ax
jmp 0x1004de47
mov ecx, 2
shl ecx, 0
xor edx, edx
mov word [ebp + ecx - 0x13c], dx
mov al, byte [ebp - 1]
mov ecx, 1
imul edx, ecx, 0x45
mov byte [edx + 0x10259240], al
mov eax, dword [ebp - 0x3c]
sub eax, 0xfbed119e
mov dword [0x100a50e8], eax
movsx ecx, word [ebp - 0x10]
mov edx, dword [0x100a5108]
imul edx, ecx
mov dword [0x100a5108], edx
movsx eax, word [0x100a50dc]
cdq
add eax, dword [0x100a5150]
adc edx, dword [0x100a5154]
mov dword [0x100a5150], eax
mov dword [0x100a5154], edx
mov eax, 0x31
mov word [ebp - 0x140], ax
xor ecx, ecx
mov word [ebp - 0x13e], cx
mov byte [0x100a504b], 0x53
movzx eax, byte [ebp - 1]
cdq
mov dword [ebp - 0x1498], eax
mov dword [ebp - 0x1494], edx
mov edx, dword [ebp - 0x1498]
cmp edx, dword [0x100a5150]
jne 0x1004f02b
mov eax, dword [ebp - 0x1494]
cmp eax, dword [0x100a5154]
je 0x1004f0ed
mov dword [ebp - 0x17c], 0
jmp 0x1004f046
mov ecx, dword [ebp - 0x17c]
add ecx, 2
mov dword [ebp - 0x17c], ecx
cmp dword [ebp - 0x17c], 0x385
jge 0x1004f0eb
mov edx, dword [ebp - 0x34]
add edx, dword [0x100a50e8]
jne 0x1004f075
xor eax, eax
mov dword [ebp - 0xf1c], 1
mov dword [ebp - 0xf18], eax
jmp 0x1004f080
xorps xmm0, xmm0
movlpd qword [ebp - 0xf1c], xmm0
mov ecx, dword [ebp - 0xf1c]
mov edx, dword [ebp - 0xf18]
mov dword [ebp - 0x44], ecx
mov dword [ebp - 0x40], edx
movsx eax, word [ebp - 0x1c]
movsx ecx, word [0x100a513c]
sub eax, ecx
movsx edx, word [ebp - 0x1c]
imul edx, eax
mov word [ebp - 0x1c], dx
mov eax, dword [ebp - 0x24]
sub eax, dword [0x100a5108]
xor eax, dword [0x100a50f8]
mov word [ebp - 0xc], ax
movsx ecx, byte [ebp - 4]
movsx edx, byte [0x100a504b]
imul ecx, edx
movsx eax, byte [ebp - 4]
add eax, ecx
mov byte [ebp - 4], al
mov cx, word [0x100a5138]
add cx, 1
mov word [0x100a5138], cx
jmp 0x1004f037
jmp 0x1004f155
mov eax, dword [0x100a50f8]
cdq
mov ecx, eax
mov edx, dword [0x100a5118]
mov eax, dword [0x100a511c]
mov dword [ebp - 0x22b8], eax
sub ecx, edx
mov eax, dword [0x100a50f8]
cdq
sub eax, ecx
mov dword [0x100a50f8], eax
movsx ecx, word [0x100a515c]
movzx edx, byte [ebp - 1]
imul ecx, edx
movsx eax, word [0x100a515c]
imul eax, ecx
mov word [0x100a515c], ax
mov ecx, dword [0x100a5100]
mov edx, dword [0x100a5104]
push 0
push 0x4b
push edx
push ecx
call fcn.10073670
mov byte [str._NgcSignWithUserIdK], al
mov al, byte [ebp - 3]
mov byte [ebp - 1], al
movsx eax, byte [0x100a504b]
cdq
mov ecx, eax
mov esi, edx
movzx eax, word [ebp - 0xc]
cdq
add eax, 0x22bb0c53
adc edx, 0x7f2ad
mov dword [ebp - 0x14a0], ecx
mov dword [ebp - 0x149c], esi
mov dword [ebp - 0x14a8], eax
mov dword [ebp - 0x14a4], edx
mov edx, dword [ebp - 0x14a0]
cmp edx, dword [ebp - 0x14a8]
jne 0x1004f34d
mov eax, dword [ebp - 0x149c]
cmp eax, dword [ebp - 0x14a4]
jne 0x1004f34d
mov ecx, dword [0x100a5144]
xor esi, esi
movzx eax, word [ebp - 0x20]
cdq
add eax, 0xe0a65bcb
adc edx, 0xc334d
mov dword [ebp - 0x14b0], ecx
mov dword [ebp - 0x14ac], esi
mov dword [ebp - 0x14b8], eax
mov dword [ebp - 0x14b4], edx
mov edx, dword [ebp - 0x14b0]
cmp edx, dword [ebp - 0x14b8]
jne 0x1004f34d
mov eax, dword [ebp - 0x14ac]
cmp eax, dword [ebp - 0x14b4]
jne 0x1004f34d
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov byte [ebp - 2], al
movsx ecx, byte [ebp - 2]
test ecx, ecx
je 0x1004f260
movzx edx, word [ebp - 0x18]
sub edx, dword [ebp - 0x30]
mov word [ebp - 0x18], dx
movsx eax, word [ebp - 0x10]
mov ecx, dword [ebp - 0x38]
sub ecx, eax
mov dword [ebp - 0x38], ecx
mov edx, dword [0x100a50e8]
sub edx, 0x48a28934
mov word [0x100a5140], dx
mov eax, dword [ebp - 0x24]
add eax, 0xb292
mov word [0x100a5130], ax
mov cl, byte [ebp - 3]
mov edx, 1
imul eax, edx, 0x21
mov byte [eax + 0x100fd578], cl
jmp 0x1004f325
mov ecx, dword [ebp - 0x30]
sub ecx, 1
mov dword [ebp - 0x30], ecx
movsx edx, word [ebp - 0x1c]
shl edx, 1
mov dword [ebp - 0x30], edx
movsx eax, word [0x100a515c]
cdq
mov ecx, dword [ebp - 0x2c]
mov esi, dword [ebp - 0x28]
push edx
push eax
push esi
push ecx
call fcn.10073670
mov esi, eax
movsx eax, word [0x100a5138]
cdq
push 0x88fb9
push 0x8edda147
push edx
push eax
call fcn.10073670
add esi, eax
not esi
mov word [0x100a513c], si
movsx eax, word [0x100a50fc]
movsx edx, word [0x100a515c]
sub eax, edx
movsx ecx, byte [ebp - 3]
imul eax, ecx
cdq
mov esi, eax
movzx eax, byte [ebp - 1]
movzx edx, word [ebp - 0xc]
add eax, edx
cdq
mov edi, eax
mov eax, dword [0x100a5158]
not eax
xor ecx, ecx
push ecx
push eax
mov edx, dword [ebp - 0x40]
push edx
mov eax, dword [ebp - 0x44]
push eax
call fcn.10073670
add edi, eax
sub esi, edi
mov word [ebp - 0x18], si
mov ecx, dword [ebp - 0x3c]
xor edx, edx
push 0x2045
push 0xbd0153d
push edx
push ecx
call fcn.10073670
mov byte [ebp - 1], al
movsx eax, byte [ebp - 4]
sub eax, dword [ebp - 0x3c]
not eax
mov ecx, dword [ebp - 0x50]
not ecx
and eax, ecx
mov word [0x100a515c], ax
jmp 0x1004f34d
mov byte [0x100a504b], 0x53
movsx edx, word [ebp - 0x10]
movzx eax, word [0x100a512c]
imul edx, eax
test edx, edx
jne 0x1004f372
mov dword [ebp - 0x418], 1
jmp 0x1004f37c
mov dword [ebp - 0x418], 0
movsx eax, word [0x100a515c]
cdq
sub eax, dword [0x100a5150]
sbb edx, dword [0x100a5154]
mov dword [ebp - 0x14c0], eax
mov dword [ebp - 0x14bc], edx
mov ecx, dword [ebp - 0x14c0]
or ecx, dword [ebp - 0x14bc]
jne 0x1004f3b6
mov dword [ebp - 0x41c], 1
jmp 0x1004f3c0
mov dword [ebp - 0x41c], 0
movsx edx, byte [0x100a504b]
imul eax, edx, 0xae24f00d
add eax, dword [ebp - 0x418]
not eax
movsx ecx, byte [ebp - 2]
movzx edx, byte [ebp - 1]
sub ecx, edx
add eax, dword [ebp - 0x41c]
add ecx, eax
jne 0x1004f3f7
mov eax, 1
mov word [ebp - 0xba], ax
jmp 0x1004f400
xor ecx, ecx
mov word [ebp - 0xba], cx
mov dx, word [ebp - 0xba]
mov word [0x100a5148], dx
mov ax, word [ebp - 0x1c]
sub ax, 1
mov word [ebp - 0x1c], ax
mov cl, byte [0x100a5150]
mov byte [str._NgcSignWithUserIdK], cl
movzx edx, word [0x100a5148]
add edx, 0xfdb0ce9
mov dword [ebp - 0x30], edx
mov eax, dword [0x100a5bfc]
mov dword [ebp - 0x38], eax
movsx ecx, word [0x100a5140]
and ecx, 0x1a1c
mov word [0x100a510c], cx
mov edx, dword [0x100a5158]
xor eax, eax
mov ecx, dword [0x100a5104]
add edx, dword [0x100a5100]
adc eax, ecx
mov dword [ebp - 0x14c8], edx
mov dword [ebp - 0x14c4], eax
mov edx, dword [ebp - 0x14c8]
or edx, dword [ebp - 0x14c4]
jne 0x1004f496
xor eax, eax
mov dword [ebp - 0xf24], 1
mov dword [ebp - 0xf20], eax
jmp 0x1004f4a1
xorps xmm0, xmm0
movlpd qword [ebp - 0xf24], xmm0
mov ecx, dword [ebp - 0xf24]
mov edx, dword [ebp - 0xf20]
mov dword [0x100a5110], ecx
mov dword [0x100a5114], edx
mov dword [ebp - 0x88], 0
mov dword [ebp - 0x7c], 0
jmp 0x1004f4db
mov eax, dword [ebp - 0x88]
add eax, 1
mov dword [ebp - 0x88], eax
cmp dword [ebp - 0x88], 1
jae 0x10050268
mov cx, word [ebp - 0xc]
add cx, 1
mov word [ebp - 0xc], cx
movsx edx, word [0x100a5138]
sub edx, 0x4b
mov word [0x100a515c], dx
movsx eax, byte [ebp - 5]
add eax, dword [ebp - 0x30]
mov dword [ebp - 0x30], eax
mov dword [ebp - 0x48], 0x8a450037
movsx ecx, byte [ebp - 4]
not ecx
add ecx, dword [ebp - 0x38]
movzx edx, byte [0x100a503b]
movzx eax, word [ebp - 0xc]
add edx, eax
add ecx, edx
mov word [0x100a512c], cx
mov ecx, 0x9d
mov word [0x100a50dc], cx
mov edx, 0x5f
mov word [0x100a513c], dx
movsx eax, word [0x100a50dc]
push eax
call dword [sym.imp.USER32.dll_GetTopWindow]
mov word [0x100a50dc], ax
movsx ecx, word [0x100a50dc]
test ecx, ecx
je 0x1004f658
mov edx, dword [0x100a50e0]
or edx, dword [0x100a50e4]
je 0x1004f656
movsx eax, word [ebp - 0x10]
movzx ecx, word [0x100a512c]
sub eax, ecx
movsx edx, word [ebp - 0x10]
imul edx, eax
mov word [ebp - 0x10], dx
movsx eax, byte [ebp - 3]
sub eax, 0xac4d703
mov word [0x100a513c], ax
movsx ecx, word [0x100a50dc]
movsx edx, word [0x100a515c]
imul ecx, edx
movsx eax, word [0x100a50dc]
sub eax, ecx
mov word [0x100a50dc], ax
movsx ecx, word [0x100a5134]
test ecx, ecx
jne 0x1004f5e0
mov dword [ebp - 0x420], 1
jmp 0x1004f5ea
mov dword [ebp - 0x420], 0
movsx edx, byte [0x100a504b]
xor edx, dword [ebp - 0x420]
jne 0x1004f605
mov dword [ebp - 0x424], 1
jmp 0x1004f60f
mov dword [ebp - 0x424], 0
movsx eax, word [ebp - 0x1c]
imul eax, eax, 0
add eax, dword [ebp - 0x424]
cdq
mov ecx, dword [ebp - 0x2c]
mov edx, dword [ebp - 0x28]
mov dword [ebp - 0x22bc], edx
and eax, ecx
mov dword [ebp - 0x48], eax
mov eax, dword [0x100a5100]
mov ecx, dword [0x100a5104]
push 0
push 4
push ecx
push eax
call fcn.10073670
mov ecx, eax
movzx eax, word [0x100a5128]
cdq
sub eax, ecx
mov word [0x100a5128], ax
jmp 0x1004f698
mov edx, dword [ebp - 0x24]
add edx, 0xd
movsx eax, word [0x100a5138]
sub eax, edx
mov word [0x100a5138], ax
mov ecx, 8
mov word [ebp - 0x18], cx
mov edx, dword [ebp - 0x50]
xor edx, 0x1f0be3fa
mov byte [0x100a503b], dl
movsx eax, word [0x100a50fc]
movsx ecx, byte [ebp - 2]
add eax, ecx
mov word [0x100a50fc], ax
movsx edx, word [0x100a513c]
movsx eax, byte [ebp - 2]
add eax, 0x5f
cmp edx, eax
jne 0x1004f77a
movsx ecx, byte [0x100a504b]
movzx edx, word [ebp - 0xc]
add edx, 0x3c1d
cmp ecx, edx
jne 0x1004f77a
movsx eax, byte [0x100a504b]
cdq
add eax, 0xf42d12f5
mov word [0x100a5138], ax
mov eax, dword [ebp - 0x34]
sub eax, 0x3c769b48
mov word [0x100a50fc], ax
movsx ecx, byte [ebp - 2]
sub ecx, 0x2bdaa850
mov dword [0x100a5144], ecx
mov dword [ebp - 0x24], 0x62
movsx edx, byte [ebp - 2]
imul eax, edx, 0x1c6a
mov word [ebp - 0xc], ax
movzx ecx, byte [ebp - 1]
sub ecx, 0x541d0569
mov dword [0x100a50f8], ecx
jmp 0x1004f77a
mov edx, 0x5f
mov word [0x100a513c], dx
movsx eax, word [0x100a513c]
sub eax, 0x67acb4e7
xor ecx, ecx
mov dword [ebp - 0x50], eax
mov dword [ebp - 0x4c], ecx
mov edx, dword [0x100a5158]
xor eax, eax
mov ecx, dword [ebp - 0x2c]
mov esi, dword [ebp - 0x28]
push esi
push ecx
push eax
push edx
call fcn.10073670
mov edx, dword [0x100a5158]
sub edx, eax
mov dword [0x100a5158], edx
movsx eax, word [ebp - 0x10]
cdq
mov ecx, eax
mov edx, dword [0x100a5150]
not edx
sub ecx, edx
movzx eax, word [ebp - 0x18]
xor eax, dword [ebp - 0x30]
sub ecx, eax
movzx eax, word [0x100a512c]
cdq
mov esi, eax
add esi, dword [ebp - 0x50]
movsx eax, word [0x100a5134]
not eax
imul eax, dword [0x100a50e8]
not eax
cdq
add esi, eax
add ecx, esi
mov word [0x100a515c], cx
mov ecx, dword [0x100a50f0]
mov edx, dword [0x100a50f4]
push 0xf46e5
push 0x73abfb9b
push edx
push ecx
call fcn.10073670
mov ecx, eax
movsx eax, byte [ebp - 3]
cdq
and eax, ecx
mov byte [ebp - 3], al
mov edx, 0x2850
mov word [0x100a515c], dx
cmp dword [ebp - 0x48], 0
je 0x1004f870
mov eax, dword [0x100a5110]
mov ecx, dword [0x100a5114]
mov dword [ebp - 0x14d0], eax
mov dword [ebp - 0x14cc], ecx
mov edx, dword [ebp - 0x14d0]
or edx, dword [ebp - 0x14cc]
je 0x1004f870
mov dword [ebp - 0x428], 1
jmp 0x1004f87a
mov dword [ebp - 0x428], 0
movsx eax, word [0x100a50fc]
or eax, dword [ebp - 0x428]
je 0x1004f897
call dword [sym.imp.KERNEL32.dll_GetACP]
mov byte [ebp - 5], al
jmp 0x1004f941
mov ecx, dword [0x100a5120]
mov edx, dword [0x100a5124]
mov eax, dword [ebp - 0x50]
not eax
mov esi, dword [ebp - 0x4c]
not esi
mov dword [ebp - 0x14d8], ecx
mov dword [ebp - 0x14d4], edx
mov dword [ebp - 0x14e0], eax
mov dword [ebp - 0x14dc], esi
mov ecx, dword [ebp - 0x14d4]
cmp ecx, dword [ebp - 0x14dc]
ja 0x1004f941
jb 0x1004f8e3
mov edx, dword [ebp - 0x14d8]
cmp edx, dword [ebp - 0x14e0]
jae 0x1004f941
mov eax, 1
imul ecx, eax, 0xa
movzx edx, byte [ecx + 0x100f5290]
and edx, dword [0x100a5158]
mov dword [0x100a5158], edx
movsx eax, byte [ebp - 4]
imul ecx, eax, 0x1e894e4c
mov word [ebp - 0x10], cx
imul eax, dword [ebp - 0x38], 0x631b343b
cdq
mov dword [0x100a5110], eax
mov dword [0x100a5114], edx
movzx eax, word [0x100a512c]
cdq
mov edx, dword [0x100a50f0]
mov ecx, dword [0x100a50f4]
mov dword [ebp - 0x22c0], ecx
add eax, edx
mov word [0x100a512c], ax
movsx edx, word [0x100a5140]
movsx eax, word [ebp - 0x1c]
add eax, 0x2e02
cmp edx, eax
jne 0x1004faf8
movzx ecx, word [ebp - 0xc]
add ecx, dword [0x100a5158]
cmp ecx, 1
jne 0x1004faf8
movzx eax, word [0x100a512c]
cdq
mov dword [ebp - 0x14e8], eax
mov dword [ebp - 0x14e4], edx
mov edx, dword [ebp - 0x50]
cmp edx, dword [ebp - 0x14e8]
jne 0x1004f996
mov eax, dword [ebp - 0x4c]
cmp eax, dword [ebp - 0x14e4]
je 0x1004f9a2
mov dword [ebp - 0x42c], 1
jmp 0x1004f9ac
mov dword [ebp - 0x42c], 0
cmp dword [ebp - 0x50], 0x2f
jne 0x1004f9b8
cmp dword [ebp - 0x4c], 0
je 0x1004f9c4
mov dword [ebp - 0x430], 1
jmp 0x1004f9ce
mov dword [ebp - 0x430], 0
mov ecx, dword [ebp - 0x42c]
cmp ecx, dword [ebp - 0x430]
jge 0x1004fa21
movzx eax, byte [ebp - 1]
cdq
add eax, 0x3ce1c4c1
mov word [0x100a5140], ax
movsx eax, byte [ebp - 3]
cdq
mov edx, dword [0x100a50f0]
mov ecx, dword [0x100a50f4]
mov dword [ebp - 0x22c4], ecx
add eax, edx
mov byte [ebp - 3], al
mov edx, 4
imul eax, edx, 0x1854
mov ecx, dword [ebp - 0x48]
and ecx, dword [eax + 0x102593b0]
mov dword [ebp - 0x48], ecx
jmp 0x1004fa53
movsx edx, byte [ebp - 4]
add edx, dword [0x100a50f8]
imul edx, dword [0x100a50f8]
mov dword [0x100a50f8], edx
push 0
push 0x4e
mov eax, dword [0x100a50e4]
push eax
mov ecx, dword [0x100a50e0]
push ecx
call fcn.10073670
mov byte [0x100a5026], al
jmp 0x1004f82d
mov dl, byte [0x100a504b]
add dl, 1
mov byte [0x100a504b], dl
movsx eax, word [0x100a50fc]
shl eax, 5
mov word [ebp - 0x14], ax
movsx ecx, word [0x100a515c]
mov edx, dword [ebp - 0x38]
add edx, ecx
mov eax, dword [0x100a5144]
and eax, edx
xor ecx, ecx
mov dword [ebp - 0x44], eax
mov dword [ebp - 0x40], ecx
movzx edx, word [ebp - 0xc]
movzx eax, word [0x100a510c]
imul edx, eax
mov word [ebp - 0xc], dx
mov ecx, dword [ebp - 0x88]
movzx edx, word [ebp + ecx*2 - 0x140]
mov dword [ebp - 0x7c], edx
movsx eax, byte [0x100a504b]
cmp eax, dword [ebp - 0x34]
ja 0x1004fb6b
mov dword [ebp - 0x43c], 1
jmp 0x1004fb75
mov dword [ebp - 0x43c], 0
mov ecx, dword [0x100a5118]
mov edx, dword [0x100a511c]
mov dword [ebp - 0x14f0], ecx
mov dword [ebp - 0x14ec], edx
mov eax, dword [ebp - 0x14f0]
or eax, dword [ebp - 0x14ec]
jne 0x1004fbaf
xor ecx, ecx
mov dword [ebp - 0xf2c], 1
mov dword [ebp - 0xf28], ecx
jmp 0x1004fbba
xorps xmm0, xmm0
movlpd qword [ebp - 0xf2c], xmm0
mov edx, dword [0x100a5100]
mov eax, dword [0x100a5104]
mov dword [ebp - 0x14f8], edx
mov dword [ebp - 0x14f4], eax
mov ecx, dword [ebp - 0xf28]
cmp ecx, dword [ebp - 0x14f4]
jb 0x1004fbfb
ja 0x1004fbef
mov edx, dword [ebp - 0xf2c]
cmp edx, dword [ebp - 0x14f8]
jb 0x1004fbfb
mov dword [ebp - 0x440], 1
jmp 0x1004fc05
mov dword [ebp - 0x440], 0
mov eax, dword [ebp - 0x43c]
sub eax, dword [ebp - 0x440]
jne 0x1004fc4a
movsx ecx, word [0x100a50fc]
mov edx, dword [ebp - 0x34]
imul edx, ecx
mov dword [ebp - 0x34], edx
movsx eax, byte [ebp - 3]
sub eax, dword [ebp - 0x30]
movsx ecx, byte [ebp - 3]
imul ecx, eax
mov byte [ebp - 3], cl
movsx edx, word [0x100a5138]
and edx, 0x84b904aa
mov word [0x100a512c], dx
jmp 0x1004fc97
mov eax, dword [0x100a5120]
mov ecx, dword [0x100a5124]
mov dword [ebp - 0x22c8], ecx
sub eax, 0x69b0bda5
mov word [ebp - 0x20], ax
movzx edx, word [ebp - 0x20]
movsx eax, word [0x100a50ec]
sub edx, eax
movzx ecx, word [ebp - 0x20]
sub ecx, edx
mov word [ebp - 0x20], cx
movsx edx, word [0x100a5134]
movsx eax, word [0x100a50fc]
lea ecx, [eax + edx + 0x92]
mov word [0x100a50fc], cx
mov edx, dword [ebp - 0x7c]
add edx, 1
mov dword [ebp - 0x7c], edx
mov ecx, dword [0x100a5120]
mov esi, dword [0x100a5124]
mov eax, dword [0x100a50f8]
cdq
mov dword [ebp - 0x1500], ecx
mov dword [ebp - 0x14fc], esi
mov dword [ebp - 0x1508], eax
mov dword [ebp - 0x1504], edx
mov edx, dword [ebp - 0x1500]
cmp edx, dword [ebp - 0x1508]
jne 0x1004fcf2
mov eax, dword [ebp - 0x14fc]
cmp eax, dword [ebp - 0x1504]
jne 0x1004fcf2
mov dword [ebp - 0x444], 1
jmp 0x1004fcfc
mov dword [ebp - 0x444], 0
mov ecx, dword [0x100a5120]
mov edx, dword [0x100a5124]
mov dword [ebp - 0x1510], ecx
mov dword [ebp - 0x150c], edx
cmp dword [ebp - 0x1510], 0x60
jne 0x1004fd32
cmp dword [ebp - 0x150c], 0
jne 0x1004fd32
mov dword [ebp - 0x448], 1
jmp 0x1004fd3c
mov dword [ebp - 0x448], 0
mov eax, dword [ebp - 0x444]
cmp eax, dword [ebp - 0x448]
jne 0x1004fe30
mov ecx, dword [0x100a50e8]
push ecx
call dword [sym.imp.KERNEL32.dll_IsValidCodePage]
mov word [0x100a50ec], ax
movsx edx, byte [0x100a5026]
test edx, edx
je 0x1004fe2b
mov eax, dword [ebp - 0x2c]
mov ecx, dword [ebp - 0x28]
mov edx, dword [ebp - 0x2c]
mov esi, dword [ebp - 0x28]
push esi
push edx
push ecx
push eax
call fcn.10073670
mov ecx, dword [ebp - 0x2c]
mov esi, dword [ebp - 0x28]
sub ecx, eax
sbb esi, edx
mov dword [ebp - 0x2c], ecx
mov dword [ebp - 0x28], esi
movsx eax, word [ebp - 0x1c]
cdq
mov ecx, eax
add ecx, 0x2a7b9d76
movzx eax, byte [str._NgcSignWithUserIdK]
cdq
mov esi, dword [ebp - 0x50]
sub esi, eax
movzx eax, word [0x100a510c]
mov edx, dword [0x100a50e8]
not edx
add eax, edx
cdq
sub esi, eax
sub ecx, esi
not ecx
mov word [ebp - 0x14], cx
mov eax, dword [ebp - 0x3c]
add eax, dword [ebp - 0x34]
mov esi, eax
mov ecx, dword [0x100a5150]
sub ecx, 0xcf1053da
add esi, ecx
not esi
mov edx, dword [0x100a5118]
mov eax, dword [0x100a511c]
push 0
push 0x72c
push eax
push edx
call fcn.10073670
mov ecx, eax
movsx eax, word [ebp - 0x14]
cdq
mov edx, dword [0x100a5100]
mov edi, dword [0x100a5104]
mov dword [ebp - 0x22cc], edi
add edx, eax
add ecx, edx
not ecx
sub esi, ecx
mov word [ebp - 0x20], si
mov dword [0x100a50e8], 0xb6586c22
jmp 0x1004ff62
movzx eax, word [0x100a5148]
test eax, eax
je 0x1004fef4
push 0
push 0xc23a
mov ecx, dword [ebp - 0x4c]
push ecx
mov edx, dword [ebp - 0x50]
push edx
call fcn.10073670
mov word [0x100a512c], ax
movzx eax, word [ebp - 0xc]
movzx ecx, byte [ebp - 1]
imul eax, ecx
movzx edx, word [ebp - 0xc]
sub edx, eax
mov word [ebp - 0xc], dx
movzx eax, word [ebp - 0x18]
test eax, eax
je 0x1004fe82
movzx ecx, word [ebp - 0xc]
mov dword [ebp - 0x44c], ecx
jmp 0x1004fe8f
movsx edx, word [0x100a513c]
mov dword [ebp - 0x44c], edx
mov al, byte [ebp - 0x44c]
mov byte [0x100a5026], al
movsx ecx, byte [0x100a504b]
imul edx, ecx, 0x518495cb
mov dword [ebp - 0x48], edx
movsx eax, word [0x100a50dc]
test eax, eax
jne 0x1004fec9
xor ecx, ecx
mov dword [ebp - 0xf34], 1
mov dword [ebp - 0xf30], ecx
jmp 0x1004fed4
xorps xmm0, xmm0
movlpd qword [ebp - 0xf34], xmm0
mov edx, dword [ebp - 0xf34]
mov eax, dword [ebp - 0xf30]
mov dword [ebp - 0x2c], edx
mov dword [ebp - 0x28], eax
mov ecx, dword [ebp - 0x3c]
sub ecx, 0x322fc95b
mov dword [ebp - 0x38], ecx
jmp 0x1004ff62
movsx edx, word [0x100a50fc]
movzx eax, word [0x100a5128]
cmp edx, eax
jle 0x1004ff12
mov dword [ebp - 0x450], 1
jmp 0x1004ff1c
mov dword [ebp - 0x450], 0
mov ecx, dword [ebp - 0x450]
cmp ecx, dword [0x100a50e8]
jg 0x1004ff62
mov dword [0x100a5144], 0xa5bad9b8
imul edx, dword [0x100a50f8], 0xb3
mov word [0x100a5138], dx
movsx eax, byte [ebp - 2]
imul ecx, eax, 0x6cb3
mov dword [ebp - 0x3c], ecx
mov edx, dword [ebp - 0x34]
add edx, 1
mov dword [ebp - 0x34], edx
mov dword [ebp - 0x30], 2
mov eax, dword [ebp - 0x7c]
add eax, dword [ebp - 0x88]
mov dword [ebp - 0x7c], eax
movzx ecx, word [ebp - 0xc]
cmp dword [ebp - 0x24], ecx
jne 0x1004ff83
mov dword [ebp - 0x454], 1
jmp 0x1004ff8d
mov dword [ebp - 0x454], 0
cmp dword [ebp - 0x24], 0xe
jne 0x1004ff9f
mov dword [ebp - 0x458], 1
jmp 0x1004ffa9
mov dword [ebp - 0x458], 0
mov edx, dword [ebp - 0x454]
cmp edx, dword [ebp - 0x458]
jg 0x10050128
movzx eax, word [ebp - 0x20]
test eax, eax
je 0x1004ffda
movzx ecx, byte [0x100a503b]
test ecx, ecx
je 0x1004ffda
mov dword [ebp - 0x460], 1
jmp 0x1004ffe4
mov dword [ebp - 0x460], 0
cmp dword [0x100a5144], 0
jne 0x1004fff9
mov dword [ebp - 0x45c], 1
jmp 0x10050003
mov dword [ebp - 0x45c], 0
movzx edx, word [ebp - 0xc]
cmp dword [ebp - 0x45c], edx
jle 0x1005001b
mov dword [ebp - 0x464], 1
jmp 0x10050025
mov dword [ebp - 0x464], 0
mov eax, dword [ebp - 0x460]
not eax
cmp eax, dword [ebp - 0x464]
je 0x10050043
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessorNumber]
mov byte [ebp - 3], al
jmp 0x10050123
movsx ecx, byte [ebp - 2]
test ecx, ecx
je 0x10050062
movzx edx, word [0x100a5128]
test edx, edx
je 0x10050062
mov dword [ebp - 0x468], 1
jmp 0x1005006c
mov dword [ebp - 0x468], 0
movsx eax, byte [ebp - 5]
movsx ecx, byte [ebp - 3]
cmp eax, ecx
jg 0x10050084
mov dword [ebp - 0x46c], 1
jmp 0x1005008e
mov dword [ebp - 0x46c], 0
mov edx, dword [ebp - 0x468]
cmp edx, dword [ebp - 0x46c]
je 0x10050123
movsx eax, byte [ebp - 5]
movzx ecx, word [ebp - 0xc]
add eax, ecx
xor eax, dword [0x100a50f8]
mov dword [ebp - 0x24], eax
push 0
push 0xb81d15d9
mov edx, dword [0x100a5154]
push edx
mov eax, dword [0x100a5150]
push eax
call fcn.10073670
mov dword [ebp - 0x3c], eax
mov ecx, dword [0x100a5110]
mov edx, dword [0x100a5114]
mov dword [ebp - 0x22d0], edx
add ecx, 0x2f53311b
mov eax, dword [0x100a50f0]
mov edx, dword [0x100a50f4]
mov dword [ebp - 0x22d4], edx
xor eax, ecx
mov word [ebp - 0xc], ax
movsx eax, word [ebp - 0x14]
not eax
movzx ecx, word [0x100a5128]
sub eax, ecx
mov dword [0x100a5144], eax
movzx edx, word [ebp - 0xc]
sub edx, dword [ebp - 0x24]
movzx eax, word [ebp - 0xc]
sub eax, edx
mov word [ebp - 0xc], ax
jmp 0x10050236
movsx ecx, word [ebp - 0x14]
movsx edx, byte [0x100a504b]
cmp ecx, edx
jge 0x100501e0
mov eax, dword [ebp - 0x48]
and eax, 0x278eeb4
mov word [0x100a5138], ax
mov ecx, dword [0x100a5120]
mov edx, dword [0x100a5124]
mov dword [ebp - 0x1518], ecx
mov dword [ebp - 0x1514], edx
mov eax, dword [ebp - 0x1518]
or eax, dword [ebp - 0x1514]
je 0x10050183
mov ecx, dword [ebp - 0x50]
mov edx, dword [ebp - 0x4c]
mov dword [ebp - 0xf3c], ecx
mov dword [ebp - 0xf38], edx
jmp 0x10050194
mov eax, dword [ebp - 0x34]
xor ecx, ecx
mov dword [ebp - 0xf3c], eax
mov dword [ebp - 0xf38], ecx
mov edx, dword [ebp - 0xf3c]
mov dword [0x100a5144], edx
mov eax, dword [0x100a50f0]
mov ecx, dword [0x100a50f4]
mov dword [ebp - 0x22d8], ecx
add eax, 0xc60c7b32
mov word [ebp - 0x1c], ax
movzx eax, byte [ebp - 1]
cdq
mov ecx, dword [ebp - 0x2c]
mov esi, dword [ebp - 0x28]
push edx
push eax
push esi
push ecx
call fcn.10073670
mov ecx, dword [ebp - 0x2c]
mov esi, dword [ebp - 0x28]
add ecx, eax
adc esi, edx
mov dword [ebp - 0x2c], ecx
mov dword [ebp - 0x28], esi
jmp 0x10050236
movsx edx, word [ebp - 0x1c]
test edx, edx
je 0x10050236
mov eax, 0xeef
test eax, eax
je 0x10050236
movzx ecx, byte [ebp - 1]
add ecx, dword [0x100a5108]
mov byte [0x100a504b], cl
movsx edx, byte [ebp - 2]
sub edx, 0x55ded210
mov word [ebp - 0x14], dx
mov eax, 0xffff99f2
mov word [0x100a50dc], ax
movsx ecx, word [ebp - 0x10]
movsx edx, word [ebp - 0x14]
sub edx, 0x78c709de
not edx
imul ecx, edx
not ecx
mov word [0x100a513c], cx
mov eax, dword [ebp - 0x7c]
xor eax, dword [ebp - 0x88]
mov dword [ebp - 0x7c], eax
call dword [sym.imp.KERNEL32.dll_GetSystemDefaultLangID]
movzx ecx, ax
mov dword [0x100a5108], ecx
mov edx, dword [ebp - 0x88]
mov ax, word [ebp - 0x7c]
mov word [ebp + edx*2 - 0x140], ax
jmp 0x1004f4cc
mov ecx, 0x285d
mov word [0x100a512c], cx
mov dword [ebp - 0x180], 0x3c
movsx eax, word [0x100a515c]
cdq
mov ecx, eax
add ecx, 0x1d62e0ac
mov eax, dword [0x100a50f8]
cdq
add eax, ecx
mov dword [0x100a50f8], eax
movsx edx, word [ebp - 0x10]
add edx, 0x5a31e1a4
movsx eax, byte [ebp - 5]
sub eax, edx
mov byte [ebp - 5], al
movsx ecx, byte [ebp - 5]
sub ecx, 0x4164c82b
mov word [ebp - 0x18], cx
movzx edx, word [ebp - 0x18]
movzx eax, word [0x100a5130]
add edx, eax
movzx ecx, word [ebp - 0x18]
sub ecx, edx
mov word [ebp - 0x18], cx
mov dl, byte [ebp - 0x30]
mov byte [ebp - 1], dl
mov eax, dword [ebp - 0x38]
add eax, 1
mov dword [ebp - 0x38], eax
movsx ecx, byte [ebp - 5]
not ecx
mov dword [ebp - 0x24], ecx
mov edx, dword [0x100a50e0]
add edx, 0xd37c
mov word [0x100a5148], dx
mov eax, dword [ebp - 0x180]
add eax, 1
mov dword [ebp - 0x180], eax
cmp dword [ebp - 0x180], 0x100
jl 0x100502ae
movzx ecx, byte [str._NgcSignWithUserIdK]
movzx edx, word [0x100a512c]
movzx eax, word [ebp - 0x20]
add edx, eax
cmp ecx, edx
jne 0x10050628
movsx ecx, byte [ebp - 4]
test ecx, ecx
je 0x100503cc
mov edx, 0xfffffff3
mov word [0x100a5140], dx
mov eax, dword [ebp - 0x2c]
mov ecx, dword [ebp - 0x28]
mov dword [ebp - 0x1520], eax
mov dword [ebp - 0x151c], ecx
mov edx, dword [ebp - 0x1520]
or edx, dword [ebp - 0x151c]
jne 0x10050379
mov dword [ebp - 0x470], 1
jmp 0x10050383
mov dword [ebp - 0x470], 0
movsx eax, word [0x100a50dc]
add eax, dword [ebp - 0x470]
mov word [ebp - 0x14], ax
mov ecx, dword [ebp - 0x24]
shl ecx, 3
mov word [0x100a513c], cx
mov ecx, dword [0x100a5110]
mov edx, dword [0x100a5114]
mov dword [ebp - 0x22dc], edx
sub ecx, 0x37
movzx eax, byte [ebp - 1]
cdq
xor eax, ecx
mov byte [ebp - 1], al
mov byte [str._NgcSignWithUserIdK], 2
jmp 0x10050507
cmp dword [0x100a5108], 0
je 0x10050423
movsx eax, word [0x100a513c]
mov ecx, 4
imul edx, ecx, 0xf
mov dword [edx + 0x100db7f8], eax
mov eax, dword [ebp - 0x34]
sub eax, 0xbe53
mov word [0x100a50fc], ax
mov dword [0x100a5108], 0xa30be0e1
movzx ecx, word [0x100a512c]
movzx edx, word [ebp - 0x18]
add ecx, edx
movzx eax, word [0x100a512c]
and eax, ecx
mov word [0x100a512c], ax
jmp 0x10050507
cmp dword [0x100a5144], 0x6f93854e
jae 0x1005043b
mov dword [ebp - 0x474], 1
jmp 0x10050445
mov dword [ebp - 0x474], 0
movsx ecx, word [ebp - 0x1c]
imul ecx, dword [ebp - 0x474]
test ecx, ecx
je 0x10050507
movsx eax, word [0x100a50fc]
cdq
mov dword [0x100a5120], eax
mov dword [0x100a5124], edx
movsx edx, byte [0x100a504b]
and edx, 0x3f19df97
movsx eax, byte [ebp - 2]
xor eax, edx
mov byte [ebp - 2], al
mov ecx, 0xffffe0db
mov word [0x100a50fc], cx
movsx eax, word [0x100a50fc]
cdq
mov ecx, eax
mov esi, edx
sub ecx, dword [0x100a50e0]
sbb esi, dword [0x100a50e4]
movsx eax, word [0x100a50fc]
cdq
push esi
push ecx
push edx
push eax
call fcn.10073670
mov word [0x100a50fc], ax
movsx eax, byte [ebp - 5]
cdq
sub eax, 0xc3042b87
mov word [0x100a5138], ax
mov eax, dword [0x100a50e8]
cdq
mov ecx, dword [0x100a5110]
mov esi, dword [0x100a5114]
push edx
push eax
push esi
push ecx
call fcn.10073670
mov ecx, dword [0x100a5110]
mov esi, dword [0x100a5114]
push edx
push eax
push esi
push ecx
call fcn.10073670
mov dword [0x100a5110], eax
mov dword [0x100a5114], edx
movsx eax, word [0x100a50dc]
cdq
mov ecx, dword [ebp - 0x30]
xor esi, esi
add ecx, 0x11d27aed
adc esi, 0x722ed
mov dword [ebp - 0x1528], eax
mov dword [ebp - 0x1524], edx
mov dword [ebp - 0x1530], ecx
mov dword [ebp - 0x152c], esi
mov edx, dword [ebp - 0x1528]
cmp edx, dword [ebp - 0x1530]
jne 0x10050628
mov eax, dword [ebp - 0x1524]
cmp eax, dword [ebp - 0x152c]
jne 0x10050628
mov dword [ebp - 0x48], 0x9185
mov cl, byte [str._NgcSignWithUserIdK]
mov byte [str._NgcSignWithUserIdK], cl
mov eax, dword [0x100a5118]
mov edx, dword [0x100a511c]
mov cl, 8
call fcn.10073780
mov dword [ebp - 0x24], eax
movzx edx, word [0x100a512c]
movsx eax, word [0x100a50fc]
imul edx, eax
not edx
mov ecx, dword [0x100a5108]
sub ecx, edx
mov word [0x100a510c], cx
mov edx, dword [0x100a5120]
mov eax, dword [0x100a5124]
mov dword [ebp - 0x22e0], eax
add edx, 0xab
mov word [ebp - 0x10], dx
jmp 0x10050268
mov ecx, 2
shl ecx, 0
xor edx, edx
mov word [ebp + ecx - 0x140], dx
mov eax, dword [0x100a5bfc]
mov dword [ebp - 0x184], eax
mov ecx, dword [0x100a5120]
mov edx, dword [0x100a5124]
mov dword [ebp - 0x1538], ecx
mov dword [ebp - 0x1534], edx
mov eax, dword [ebp - 0x1538]
or eax, dword [ebp - 0x1534]
je 0x1005069e
mov ecx, dword [ebp - 0x3c]
mov dword [ebp - 0x24], ecx
push 0xeb24e
push 0xb881732a
mov edx, dword [ebp - 0x40]
push edx
mov eax, dword [ebp - 0x44]
push eax
call fcn.10073670
mov dword [ebp - 0x3c], eax
mov ecx, dword [ebp - 0x3c]
sub ecx, 0xf2d3d895
mov edx, dword [ebp - 0x3c]
or edx, ecx
mov dword [ebp - 0x3c], edx
jmp 0x100506f6
movsx eax, word [0x100a5138]
add eax, dword [0x100a50f8]
movsx ecx, word [0x100a5138]
sub ecx, eax
mov word [0x100a5138], cx
movsx edx, word [ebp - 0x1c]
movzx eax, word [ebp - 0xc]
sub edx, eax
mov word [ebp - 0x1c], dx
movzx ecx, word [0x100a512c]
add ecx, dword [0x100a5158]
add ecx, dword [0x100a5158]
mov dword [0x100a5158], ecx
movsx edx, word [0x100a5140]
xor edx, 0xe7a8
mov word [0x100a50dc], dx
mov eax, dword [ebp - 0x184]
add eax, 0x435
mov dword [ebp - 0x12f8], eax
movsx ecx, word [0x100a515c]
movsx edx, word [ebp - 0x1c]
cmp ecx, edx
jl 0x10050722
mov dword [ebp - 0x478], 1
jmp 0x1005072c
mov dword [ebp - 0x478], 0
movsx eax, word [0x100a515c]
cmp eax, 0xe
jl 0x10050744
mov dword [ebp - 0x47c], 1
jmp 0x1005074e
mov dword [ebp - 0x47c], 0
mov ecx, dword [ebp - 0x478]
cmp ecx, dword [ebp - 0x47c]
jge 0x100509ab
movzx eax, word [0x100a510c]
cdq
mov dword [ebp - 0x1540], eax
mov dword [ebp - 0x153c], edx
mov edx, dword [ebp - 0x153c]
cmp edx, dword [ebp - 0x40]
jl 0x10050798
jg 0x1005078c
mov eax, dword [ebp - 0x1540]
cmp eax, dword [ebp - 0x44]
jbe 0x10050798
mov dword [ebp - 0x480], 1
jmp 0x100507a2
mov dword [ebp - 0x480], 0
movzx ecx, word [0x100a510c]
cmp ecx, 0x4e
jle 0x100507ba
mov dword [ebp - 0x484], 1
jmp 0x100507c4
mov dword [ebp - 0x484], 0
mov edx, dword [ebp - 0x480]
cmp edx, dword [ebp - 0x484]
jge 0x10050910
movsx eax, byte [ebp - 5]
test eax, eax
je 0x10050850
mov ecx, dword [0x100a5118]
mov edx, dword [0x100a511c]
sub ecx, 0x9ed7
sbb edx, 0
mov dword [0x100a50f0], ecx
mov dword [0x100a50f4], edx
movzx eax, word [ebp - 0xc]
imul eax, eax, 0x8e
cdq
mov dword [0x100a50f0], eax
mov dword [0x100a50f4], edx
movzx ecx, byte [0x100a503b]
movzx edx, word [ebp - 0x18]
and ecx, edx
movzx eax, byte [0x100a503b]
imul eax, ecx
mov byte [0x100a503b], al
mov eax, dword [ebp - 0x38]
cdq
sub eax, 0x4669759a
mov byte [ebp - 4], al
movzx ecx, byte [str._NgcSignWithUserIdK]
shl ecx, 3
mov word [ebp - 0xc], cx
jmp 0x1005090b
movsx edx, word [0x100a513c]
movsx eax, word [ebp - 0x14]
sub edx, eax
movsx ecx, word [0x100a513c]
imul ecx, edx
mov word [0x100a513c], cx
mov edx, dword [ebp - 0x34]
sub edx, 0xb5d3
mov eax, dword [0x100a5108]
sub eax, edx
mov dword [0x100a5108], eax
movsx eax, word [ebp - 0x10]
cdq
mov ecx, dword [ebp - 0x3c]
xor esi, esi
mov edi, dword [0x100a5114]
add ecx, dword [0x100a5110]
adc esi, edi
push esi
push ecx
push edx
push eax
call fcn.10073670
mov dword [ebp - 0x1548], eax
mov dword [ebp - 0x1544], edx
mov edx, dword [ebp - 0x1548]
or edx, dword [ebp - 0x1544]
jne 0x100508d2
xor eax, eax
mov dword [ebp - 0x1550], 1
mov dword [ebp - 0x154c], eax
jmp 0x100508dd
xorps xmm0, xmm0
movlpd qword [ebp - 0x1550], xmm0
movsx eax, byte [ebp - 5]
cdq
add eax, dword [ebp - 0x50]
mov ecx, dword [ebp - 0x1550]
sub ecx, eax
mov word [ebp - 0x1c], cx
mov edx, 0x89fb
mov word [0x100a512c], dx
mov eax, dword [ebp - 0x24]
sub eax, dword [ebp - 0x34]
mov ecx, dword [ebp - 0x24]
sub ecx, eax
mov dword [ebp - 0x24], ecx
jmp 0x100509a6
movsx edx, word [ebp - 0x10]
test edx, edx
je 0x100509a6
movsx eax, byte [0x100a5026]
xor eax, 0x54d3
mov word [0x100a510c], ax
mov ecx, dword [ebp - 0x34]
imul ecx, dword [ebp - 0x34]
mov edx, dword [ebp - 0x34]
sub edx, ecx
mov dword [ebp - 0x34], edx
mov eax, dword [0x100a5118]
mov ecx, dword [0x100a511c]
mov dword [ebp - 0x1558], eax
mov dword [ebp - 0x1554], ecx
mov edx, dword [ebp - 0x1558]
or edx, dword [ebp - 0x1554]
je 0x1005096f
mov eax, dword [0x100a5108]
mov dword [ebp - 0x488], eax
jmp 0x10050979
movsx ecx, byte [ebp - 2]
mov dword [ebp - 0x488], ecx
mov edx, dword [ebp - 0x488]
xor eax, eax
mov dword [0x100a50f0], edx
mov dword [0x100a50f4], eax
movzx ecx, word [0x100a5128]
add ecx, dword [ebp - 0x48]
movzx edx, word [0x100a5128]
or edx, ecx
mov word [0x100a5128], dx
jmp 0x10050b01
movzx eax, word [ebp - 0x18]
test eax, eax
jne 0x100509bf
mov dword [ebp - 0x48c], 1
jmp 0x100509c9
mov dword [ebp - 0x48c], 0
mov ecx, dword [ebp - 0x38]
cmp ecx, dword [ebp - 0x48c]
jle 0x100509e0
mov dword [ebp - 0x490], 1
jmp 0x100509ea
mov dword [ebp - 0x490], 0
mov edx, dword [ebp - 0x24]
cmp edx, dword [ebp - 0x490]
jl 0x10050a5e
mov dword [0x100a5144], 0xe2fe45bd
movzx eax, word [ebp - 0x20]
imul eax, dword [0x100a5158]
movzx ecx, word [ebp - 0x20]
imul ecx, eax
mov word [ebp - 0x20], cx
movsx eax, byte [ebp - 5]
cdq
push 0xd03dc
push 0xb0af60cf
push edx
push eax
call fcn.10073670
mov ecx, dword [0x100a5118]
mov esi, dword [0x100a511c]
add ecx, eax
adc esi, edx
mov dword [0x100a5118], ecx
mov dword [0x100a511c], esi
movzx eax, byte [0x100a503b]
cdq
and eax, 0x2eaf7d7e
mov byte [0x100a504b], al
jmp 0x10050b01
mov edx, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x28]
mov dword [ebp - 0x1560], edx
mov dword [ebp - 0x155c], eax
mov ecx, dword [ebp - 0x155c]
cmp ecx, dword [ebp - 0x40]
jl 0x10050a94
jg 0x10050a88
mov edx, dword [ebp - 0x1560]
cmp edx, dword [ebp - 0x44]
jb 0x10050a94
mov dword [ebp - 0x494], 1
jmp 0x10050a9e
mov dword [ebp - 0x494], 0
mov eax, dword [ebp - 0x494]
not eax
test eax, eax
je 0x10050b01
movzx ecx, word [0x100a5148]
movzx edx, word [ebp - 0xc]
lea eax, [edx + ecx + 0x6f65]
mov word [ebp - 0xc], ax
movzx ecx, word [0x100a5128]
test ecx, ecx
je 0x10050ad6
mov edx, dword [ebp - 0x34]
mov dword [ebp - 0x498], edx
jmp 0x10050adf
mov eax, dword [ebp - 0x30]
mov dword [ebp - 0x498], eax
mov cx, word [ebp - 0x498]
mov word [0x100a50fc], cx
mov eax, dword [ebp - 0x38]
cdq
mov ecx, dword [ebp - 0x2c]
mov esi, dword [ebp - 0x28]
sub ecx, eax
sbb esi, edx
mov dword [ebp - 0x2c], ecx
mov dword [ebp - 0x28], esi
mov edx, dword [ebp - 0x184]
add edx, 0x3a1
mov dword [ebp - 0x12f0], edx
mov dword [ebp - 0x38], 3
movzx eax, byte [ebp - 1]
cdq
push 0x8e377
push 0xbdc8c19e
push edx
push eax
call fcn.10073670
mov dword [ebp - 0x3c], eax
mov eax, dword [ebp - 0x44]
mov edx, dword [ebp - 0x40]
mov cl, 3
call fcn.100736d0
mov word [0x100a5148], ax
mov eax, dword [ebp - 0x38]
cdq
mov ecx, eax
add ecx, dword [ebp - 0x44]
movzx eax, word [0x100a512c]
cdq
add ecx, eax
mov word [ebp - 0x1c], cx
mov eax, dword [ebp - 0x48]
shl eax, 5
cdq
mov dword [ebp - 0x44], eax
mov dword [ebp - 0x40], edx
mov edx, dword [ebp - 0x38]
mov dword [ebp - 0x49c], edx
cmp dword [ebp - 0x49c], 3
ja case.default.0x10050b86
mov eax, dword [ebp - 0x49c]
jmp dword [eax*4 + 0x10071618]
movsx eax, byte [ebp - 4]
cdq
mov ecx, dword [ebp - 0x2c]
mov esi, dword [ebp - 0x28]
add ecx, eax
adc esi, edx
mov edx, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x28]
push esi
push ecx
push eax
push edx
call fcn.10073670
mov dword [ebp - 0x2c], eax
mov dword [ebp - 0x28], edx
imul ecx, dword [ebp - 0x34], 0xd928
movzx edx, byte [0x100a503b]
sub edx, ecx
mov byte [0x100a503b], dl
mov eax, 4
imul ecx, eax, 0x3f16
movsx edx, word [0x100a5134]
sub edx, dword [ecx + 0x10243ff0]
mov word [0x100a5134], dx
mov eax, dword [ebp - 0x34]
add eax, 0xdac4a6d3
mov word [0x100a515c], ax
mov ecx, 4
imul edx, ecx, 0x4ad
mov eax, dword [edx + 0x10126b28]
cdq
mov ecx, dword [ebp - 0x2c]
mov esi, dword [ebp - 0x28]
sub ecx, eax
sbb esi, edx
mov dword [ebp - 0x2c], ecx
mov dword [ebp - 0x28], esi
jmp case.default.0x10050b86
movsx edx, word [0x100a50fc]
not edx
mov word [0x100a513c], dx
movsx eax, byte [ebp - 3]
movsx ecx, byte [0x100a5026]
and eax, ecx
mov byte [ebp - 3], al
cmp dword [ebp - 0x30], 0
je 0x10050c55
mov edx, dword [ebp - 0x50]
mov eax, dword [ebp - 0x4c]
mov dword [ebp - 0xe5c], edx
mov dword [ebp - 0xe58], eax
jmp 0x10050c65
mov eax, dword [ebp - 0x38]
cdq
mov dword [ebp - 0xe5c], eax
mov dword [ebp - 0xe58], edx
mov ecx, dword [ebp - 0xe5c]
mov edx, dword [ebp - 0xe58]
mov dword [ebp - 0x2c], ecx
mov dword [ebp - 0x28], edx
jmp case.default.0x10050b86
movzx eax, word [0x100a5128]
xor eax, dword [0x100a5144]
movzx ecx, word [0x100a5128]
add ecx, eax
mov word [0x100a5128], cx
mov edx, dword [ebp - 0x30]
sub edx, 0x3f593445
xor eax, eax
mov dword [0x100a5118], edx
mov dword [0x100a511c], eax
movsx ecx, byte [0x100a5026]
add ecx, 0x5eca9b1b
mov byte [ebp - 5], cl
jmp case.default.0x10050b86
cmp dword [ebp - 0x38], 0
jne 0x10050cd6
mov dword [ebp - 0x4a0], 1
jmp 0x10050ce0
mov dword [ebp - 0x4a0], 0
movsx edx, byte [ebp - 2]
test edx, edx
jne 0x10050cf4
mov dword [ebp - 0x4a4], 1
jmp 0x10050cfe
mov dword [ebp - 0x4a4], 0
movsx eax, word [0x100a513c]
imul eax, dword [ebp - 0x4a0]
not eax
movzx ecx, byte [ebp - 1]
not ecx
mov edx, dword [ebp - 0x34]
imul edx, ecx
imul eax, edx
movsx ecx, byte [0x100a504b]
movzx edx, word [0x100a5128]
add ecx, edx
mov edx, dword [ebp - 0x48]
add edx, dword [ebp - 0x4a4]
not edx
add ecx, edx
not ecx
add eax, ecx
mov byte [ebp - 3], al
mov eax, dword [0x100a5110]
mov ecx, dword [0x100a5114]
push ecx
push eax
mov edx, dword [ebp - 0x40]
push edx
mov eax, dword [ebp - 0x44]
push eax
call fcn.10073670
mov ecx, eax
movzx eax, byte [ebp - 1]
sub eax, dword [ebp - 0x48]
cdq
add ecx, eax
mov dword [ebp - 0x3c], ecx
mov edx, dword [0x100a5158]
xor eax, eax
push eax
push edx
mov ecx, dword [ebp - 0x4c]
push ecx
mov edx, dword [ebp - 0x50]
push edx
call fcn.10073670
mov ecx, eax
mov eax, dword [ebp - 0x50]
mov edx, dword [ebp - 0x4c]
call fcn.100736b0
mov dword [ebp - 0x50], eax
mov dword [ebp - 0x4c], edx
mov edx, dword [ebp - 0x184]
add edx, 0x585
mov dword [ebp - 0x12f4], edx
mov eax, dword [str.iso_8859_6]
mov dword [ebp - 0x21d0], eax
mov ecx, dword [0x10086838]
mov dword [ebp - 0x21cc], ecx
mov edx, dword [0x1008683c]
mov dword [ebp - 0x21c8], edx
mov eax, dword [0x10086840]
mov dword [ebp - 0x21c4], eax
mov ecx, dword [0x10086844]
mov dword [ebp - 0x21c0], ecx
mov dx, word [0x10086848]
mov word [ebp - 0x21bc], dx
lea eax, [ebp - 0x21d0]
push eax
call dword [sym.imp.KERNEL32.dll_lstrlenW]
mov word [ebp - 0x14], ax
mov ecx, dword [0x100a5bfc]
mov dword [ebp - 0x188], ecx
mov edx, dword [ebp - 0x44]
or edx, dword [ebp - 0x40]
je 0x10050f37
movsx eax, word [ebp - 0x10]
movsx ecx, word [0x100a50fc]
cmp eax, ecx
jg 0x10050e32
mov dword [ebp - 0x4a8], 1
jmp 0x10050e3c
mov dword [ebp - 0x4a8], 0
movsx edx, word [0x100a50dc]
not edx
cmp edx, dword [ebp - 0x4a8]
jl 0x10050e52
jmp 0x10050f32
movsx eax, word [ebp - 0x1c]
test eax, eax
je 0x10050e6c
movsx ecx, word [0x100a50dc]
xor ecx, 2
mov dword [ebp - 0x3c], ecx
jmp 0x10050f32
mov ecx, dword [ebp - 0x2c]
mov esi, dword [ebp - 0x28]
movzx eax, word [0x100a5128]
cdq
mov dword [ebp - 0x1568], ecx
mov dword [ebp - 0x1564], esi
mov dword [ebp - 0x1570], eax
mov dword [ebp - 0x156c], edx
mov edx, dword [ebp - 0x1564]
cmp edx, dword [ebp - 0x156c]
jl 0x10050eb8
jg 0x10050eb0
mov eax, dword [ebp - 0x1568]
cmp eax, dword [ebp - 0x1570]
jbe 0x10050eb8
movsx ecx, word [ebp - 0x10]
test ecx, ecx
jne 0x10050f32
movsx eax, word [0x100a5134]
cdq
mov ecx, eax
mov edx, dword [0x100a5118]
mov eax, dword [0x100a511c]
mov dword [ebp - 0x22e4], eax
sub ecx, edx
movsx eax, word [0x100a5134]
cdq
add eax, ecx
mov word [0x100a5134], ax
movzx eax, word [0x100a5148]
cdq
mov ecx, dword [0x100a5118]
mov esi, dword [0x100a511c]
push edx
push eax
push esi
push ecx
call fcn.10073670
mov dword [0x100a5118], eax
mov dword [0x100a511c], edx
mov dx, word [0x100a5bfc]
mov word [0x100a5134], dx
push 0
push 0x47
mov eax, dword [ebp - 0x4c]
push eax
mov ecx, dword [ebp - 0x50]
push ecx
call fcn.10073670
mov word [0x100a512c], ax
jmp 0x10050ffc
movzx edx, byte [0x100a503b]
test edx, edx
je 0x10050ffc
movzx eax, word [ebp - 0x20]
test eax, eax
je 0x10050ffc
movsx ecx, byte [0x100a504b]
test ecx, ecx
jne 0x10050f71
xor edx, edx
mov dword [ebp - 0x1578], 1
mov dword [ebp - 0x1574], edx
jmp 0x10050f7c
xorps xmm0, xmm0
movlpd qword [ebp - 0x1578], xmm0
movsx eax, word [ebp - 0x1c]
movsx ecx, word [0x100a513c]
sub eax, ecx
movzx edx, word [ebp - 0x20]
sub eax, edx
cdq
mov ecx, eax
mov esi, dword [0x100a5110]
mov edx, dword [0x100a5114]
mov dword [ebp - 0x22e8], edx
add esi, dword [ebp - 0x1578]
movsx eax, byte [ebp - 3]
movsx edx, byte [0x100a5026]
not edx
add eax, edx
cdq
add esi, eax
add ecx, esi
not ecx
mov byte [str._NgcSignWithUserIdK], cl
mov eax, dword [0x100a50e8]
mov dword [ebp - 0x24], eax
mov ecx, dword [0x100a5bfc]
xor edx, edx
mov dword [ebp - 0x50], ecx
mov dword [ebp - 0x4c], edx
movsx eax, word [0x100a515c]
movsx ecx, word [0x100a5138]
sub eax, ecx
movsx edx, word [0x100a515c]
sub edx, eax
mov word [0x100a515c], dx
mov eax, dword [ebp - 0x188]
add eax, 0x370
mov dword [ebp - 0x22ec], eax
mov ecx, dword [ebp - 0x44]
or ecx, dword [ebp - 0x40]
je 0x1005106c
mov edx, 0x51ee
mov word [0x100a515c], dx
mov al, byte [0x100a503b]
add al, 1
mov byte [0x100a503b], al
movsx eax, byte [ebp - 5]
not eax
cdq
mov esi, dword [0x100a50f0]
mov edi, dword [0x100a50f4]
sub esi, eax
sbb edi, edx
movsx eax, byte [ebp - 2]
not eax
cdq
push 0xf8a74
push 0xb8f97997
push edx
push eax
call fcn.10073670
push edx
push eax
push edi
push esi
call fcn.10073670
mov dword [0x100a5158], eax
jmp 0x100510b8
mov ecx, dword [0x100a5158]
sub ecx, 0x799b2e1
mov word [0x100a512c], cx
movsx edx, byte [ebp - 2]
mov dword [0x100a50f8], edx
movzx eax, word [0x100a5130]
cdq
mov ecx, eax
mov esi, edx
add ecx, 0xda674957
adc esi, 0x6e3d7
movsx eax, word [0x100a5134]
cdq
push esi
push ecx
push edx
push eax
call fcn.10073670
mov word [0x100a5134], ax
mov edx, dword [ebp - 0x188]
add edx, 0x2fc
mov dword [ebp - 0x133c], edx
mov eax, 1
mov word [0x100a5140], ax
mov ecx, dword [0x100a50f0]
mov edx, dword [0x100a50f4]
mov dword [ebp - 0x1580], ecx
mov dword [ebp - 0x157c], edx
mov eax, dword [ebp - 0x1580]
or eax, dword [ebp - 0x157c]
jne 0x1005110f
xor ecx, ecx
mov dword [ebp - 0xf44], 1
mov dword [ebp - 0xf40], ecx
jmp 0x1005111a
xorps xmm0, xmm0
movlpd qword [ebp - 0xf44], xmm0
mov ecx, dword [0x100a5120]
mov esi, dword [0x100a5124]
add ecx, dword [ebp - 0xf44]
adc esi, dword [ebp - 0xf40]
movsx eax, word [0x100a50fc]
cdq
xor eax, dword [0x100a5100]
xor edx, dword [0x100a5104]
push edx
push eax
push esi
push ecx
call fcn.10073670
mov word [0x100a5128], ax
movsx eax, word [0x100a50dc]
cdq
push edx
push eax
mov edx, dword [0x100a50e4]
push edx
mov eax, dword [0x100a50e0]
push eax
call fcn.10073670
mov dword [0x100a50e0], eax
mov dword [0x100a50e4], edx
mov ecx, 1
imul edx, ecx, 0xb9
movsx eax, byte [edx + 0x10277e38]
cdq
mov dword [ebp - 0x44], eax
mov dword [ebp - 0x40], edx
mov eax, dword [ebp - 0x44]
add eax, 0x40
mov word [ebp - 0x14], ax
movsx eax, word [ebp - 0x1c]
cdq
mov dword [0x100a5110], eax
mov dword [0x100a5114], edx
movsx ecx, word [0x100a5140]
mov dword [ebp - 0x4ac], ecx
cmp dword [ebp - 0x4ac], 0
je 0x100511d3
cmp dword [ebp - 0x4ac], 1
je 0x1005123c
jmp 0x1005127f
movsx edx, byte [ebp - 2]
movsx eax, word [ebp - 0x14]
add edx, eax
mov byte [ebp - 2], dl
movsx eax, word [0x100a5134]
cdq
add eax, 0x684ffcab
mov word [0x100a510c], ax
movsx ecx, byte [ebp - 5]
movzx edx, byte [ebp - 1]
and ecx, edx
movsx eax, byte [ebp - 5]
sub eax, ecx
mov byte [ebp - 5], al
mov ecx, dword [ebp - 0x30]
mov edx, dword [0x100a5100]
mov eax, dword [0x100a5104]
mov dword [ebp - 0x22f0], eax
add ecx, edx
mov dword [ebp - 0x30], ecx
mov cl, byte [str._NgcSignWithUserIdK]
add cl, 1
mov byte [str._NgcSignWithUserIdK], cl
mov edx, 0x55c0
mov word [0x100a50dc], dx
jmp 0x1005127f
movsx eax, word [ebp - 0x1c]
cdq
add eax, dword [0x100a5150]
mov word [ebp - 0x1c], ax
movsx eax, byte [ebp - 5]
movzx ecx, byte [str._NgcSignWithUserIdK]
imul eax, ecx
mov byte [0x100a5026], al
movzx edx, byte [ebp - 1]
imul eax, edx, 0x9d
movsx ecx, word [0x100a5138]
add ecx, eax
mov word [0x100a5138], cx
movsx edx, byte [ebp - 2]
mov dword [ebp - 0x48], edx
mov eax, dword [ebp - 0x188]
add eax, 0x321
mov dword [ebp - 0x22f4], eax
mov ecx, 0xc334d
mov dword [0x100a5100], 0xe0a65bcb
mov dword [0x100a5104], ecx
imul edx, dword [0x100a50f8], 0xd7c4
mov byte [0x100a5026], dl
movzx eax, word [0x100a510c]
add eax, 0x4b76c77d
mov word [0x100a50fc], ax
mov eax, dword [ebp - 0x24]
cdq
mov ecx, dword [0x100a5118]
mov edx, dword [0x100a511c]
mov dword [ebp - 0x22f8], edx
sub eax, ecx
mov dword [ebp - 0x24], eax
mov eax, dword [ebp - 0x3c]
add eax, 0x4f2d6911
mov word [0x100a5130], ax
movzx eax, byte [0x100a503b]
cdq
mov ecx, eax
mov esi, edx
movzx eax, word [ebp - 0xc]
cdq
mov edi, dword [0x100a5100]
mov ebx, dword [0x100a5104]
add edi, eax
adc ebx, edx
mov dword [ebp - 0x1588], ecx
mov dword [ebp - 0x1584], esi
mov dword [ebp - 0x1590], edi
mov dword [ebp - 0x158c], ebx
mov edx, dword [ebp - 0x1588]
cmp edx, dword [ebp - 0x1590]
jne 0x1005198e
mov eax, dword [ebp - 0x1584]
cmp eax, dword [ebp - 0x158c]
jne 0x1005198e
movzx ecx, word [ebp - 0x18]
cmp dword [ebp - 0x48], ecx
jg 0x1005149a
mov edx, dword [ebp - 0x3c]
xor eax, eax
or edx, dword [0x100a5150]
or eax, dword [0x100a5154]
mov dword [ebp - 0x1598], edx
mov dword [ebp - 0x1594], eax
mov ecx, dword [ebp - 0x1598]
or ecx, dword [ebp - 0x1594]
jne 0x10051391
mov dword [ebp - 0x4b0], 1
jmp 0x1005139b
mov dword [ebp - 0x4b0], 0
mov edx, dword [ebp - 0x4b0]
imul edx, dword [0x100a50f8]
mov word [ebp - 0x10], dx
movsx eax, word [ebp - 0x10]
cdq
mov ecx, dword [0x100a5120]
mov edx, dword [0x100a5124]
mov dword [ebp - 0x22fc], edx
add ecx, eax
mov dword [ebp - 0x30], ecx
movzx eax, word [ebp - 0x18]
test eax, eax
jne 0x100513e4
xor ecx, ecx
mov dword [ebp - 0xf4c], 1
mov dword [ebp - 0xf48], ecx
jmp 0x100513ef
xorps xmm0, xmm0
movlpd qword [ebp - 0xf4c], xmm0
mov edx, dword [ebp - 0xf4c]
add edx, 0xa9781d20
mov eax, dword [ebp - 0xf48]
adc eax, 0x7e07
mov dword [ebp - 0x15a0], edx
mov dword [ebp - 0x159c], eax
mov ecx, dword [ebp - 0x15a0]
or ecx, dword [ebp - 0x159c]
jne 0x10051434
xor edx, edx
mov dword [ebp - 0xf54], 1
mov dword [ebp - 0xf50], edx
jmp 0x1005143f
xorps xmm0, xmm0
movlpd qword [ebp - 0xf54], xmm0
mov eax, dword [ebp - 0xf54]
mov ecx, dword [ebp - 0xf50]
mov dword [0x100a50f0], eax
mov dword [0x100a50f4], ecx
mov edx, dword [ebp - 0x44]
sub edx, 0x34964048
mov eax, dword [ebp - 0x40]
sbb eax, 0
mov ecx, dword [ebp - 0x2c]
mov esi, dword [ebp - 0x28]
push eax
push edx
push esi
push ecx
call fcn.10073670
mov dword [ebp - 0x2c], eax
mov dword [ebp - 0x28], edx
movsx eax, word [0x100a515c]
cdq
push 0x75892
push 0x1c03027b
push edx
push eax
call fcn.10073670
mov dword [0x100a5158], eax
jmp 0x100514c1
movsx edx, byte [0x100a504b]
test edx, edx
je 0x100514c1
movzx eax, byte [0x100a503b]
movsx ecx, byte [ebp - 4]
add eax, ecx
mov byte [0x100a503b], al
imul edx, dword [ebp - 0x30], 0x846bc2c4
mov dword [ebp - 0x34], edx
mov eax, dword [ebp - 0x3c]
shl eax, 6
mov word [ebp - 0x18], ax
movsx ecx, word [ebp - 0x10]
test ecx, ecx
jne 0x100514e7
xor edx, edx
mov dword [ebp - 0xf5c], 1
mov dword [ebp - 0xf58], edx
jmp 0x100514f2
xorps xmm0, xmm0
movlpd qword [ebp - 0xf5c], xmm0
mov eax, dword [ebp - 0x34]
sub eax, dword [ebp - 0x38]
not eax
xor ecx, ecx
mov edx, dword [0x100a5100]
mov esi, dword [0x100a5104]
not edx
not esi
add edx, dword [ebp - 0xf5c]
adc esi, dword [ebp - 0xf58]
push esi
push edx
push ecx
push eax
call fcn.10073670
not eax
mov word [0x100a5140], ax
movzx eax, word [0x100a5128]
cdq
add eax, 0xe0665cdd
adc edx, 0xc9151
mov dword [0x100a5100], eax
mov dword [0x100a5104], edx
movzx eax, word [0x100a512c]
movsx ecx, byte [ebp - 3]
sub ecx, 0x88
imul eax, ecx
test eax, eax
jne 0x1005156b
mov dword [ebp - 0x4b4], 1
jmp 0x10051575
mov dword [ebp - 0x4b4], 0
mov edx, dword [ebp - 0x4b4]
mov dword [0x100a5108], edx
movsx eax, byte [0x100a5026]
cdq
mov ecx, eax
mov esi, edx
movzx eax, word [ebp - 0xc]
cdq
add eax, 0x13cfeea4
adc edx, 0x52760
mov dword [ebp - 0x15a8], ecx
mov dword [ebp - 0x15a4], esi
mov dword [ebp - 0x15b0], eax
mov dword [ebp - 0x15ac], edx
mov edx, dword [ebp - 0x15a8]
cmp edx, dword [ebp - 0x15b0]
jne 0x1005198e
mov eax, dword [ebp - 0x15a4]
cmp eax, dword [ebp - 0x15ac]
jne 0x1005198e
mov byte [0x100a5026], 3
movzx ecx, byte [ebp - 1]
add ecx, 0x98f7
mov word [0x100a50dc], cx
mov ecx, dword [0x100a5100]
mov edx, dword [0x100a5104]
mov dword [ebp - 0x2300], edx
sub ecx, 0x927863d7
movsx eax, word [0x100a513c]
cdq
sub eax, ecx
mov word [0x100a513c], ax
mov eax, 0xc70b
sub eax, dword [0x100a50f8]
mov word [0x100a5140], ax
movzx ecx, byte [ebp - 1]
imul edx, ecx, 0x30cb
mov byte [0x100a5026], dl
movsx eax, byte [0x100a5026]
mov dword [ebp - 0x4b8], eax
cmp dword [ebp - 0x4b8], 3
ja case.default.0x1005165a
mov ecx, dword [ebp - 0x4b8]
jmp dword [ecx*4 + 0x10071628]
movsx eax, word [0x100a5140]
cdq
mov ecx, dword [0x100a5110]
mov esi, dword [0x100a5114]
add ecx, eax
adc esi, edx
mov dword [0x100a5110], ecx
mov dword [0x100a5114], esi
movsx edx, word [0x100a5134]
imul edx, dword [0x100a5144]
movsx eax, word [0x100a5134]
xor eax, edx
mov word [0x100a5134], ax
mov ecx, 0x3d8
mov word [0x100a510c], cx
jmp case.default.0x1005165a
movsx dx, byte [0x100a5026]
mov word [0x100a50fc], dx
movsx eax, byte [ebp - 4]
cdq
xor eax, 0x30f554d4
mov word [ebp - 0x18], ax
movsx eax, byte [ebp - 2]
movsx ecx, byte [ebp - 2]
sub eax, ecx
movzx edx, word [ebp - 0x20]
movzx ecx, byte [0x100a503b]
sub edx, ecx
imul eax, edx
mov byte [ebp - 4], al
movzx edx, word [0x100a5130]
add edx, dword [ebp - 0x30]
mov word [0x100a5140], dx
movsx eax, word [0x100a5134]
movsx ecx, word [ebp - 0x14]
sub eax, ecx
movzx edx, word [ebp - 0xc]
movsx ecx, word [0x100a515c]
sub edx, ecx
sub eax, edx
movsx edx, byte [0x100a5026]
sub eax, edx
mov word [0x100a513c], ax
mov eax, dword [0x100a50e8]
xor eax, 0xad
mov word [0x100a5140], ax
jmp case.default.0x1005165a
movsx ecx, word [0x100a5140]
test ecx, ecx
jne 0x10051755
mov dword [ebp - 0x4bc], 1
jmp 0x1005175f
mov dword [ebp - 0x4bc], 0
mov edx, dword [ebp - 0x4bc]
sub edx, dword [ebp - 0x48]
jne 0x10051776
mov dword [ebp - 0x4c0], 1
jmp 0x10051780
mov dword [ebp - 0x4c0], 0
mov ecx, dword [ebp - 0x4c0]
add ecx, 0x83533b
xor esi, esi
mov eax, dword [ebp - 0x24]
cdq
mov edi, dword [0x100a50e0]
sub edi, eax
mov eax, dword [0x100a50e4]
sbb eax, edx
mov edx, dword [ebp - 0x3c]
imul edx, dword [0x100a5158]
xor ebx, ebx
sub edi, edx
sbb eax, ebx
push eax
push edi
push esi
push ecx
call fcn.10073670
mov dword [ebp - 0x15b8], eax
mov dword [ebp - 0x15b4], edx
mov eax, dword [ebp - 0x15b8]
or eax, dword [ebp - 0x15b4]
jne 0x100517e2
mov ecx, 1
mov word [ebp - 0xbc], cx
jmp 0x100517eb
xor edx, edx
mov word [ebp - 0xbc], dx
mov ax, word [ebp - 0xbc]
mov word [0x100a513c], ax
mov ecx, dword [0x100a5110]
mov edx, dword [0x100a5114]
mov dword [ebp - 0x2304], edx
sub ecx, 0x23886042
mov word [0x100a5130], cx
movsx eax, word [ebp - 0x10]
cdq
sub eax, dword [ebp - 0x50]
mov word [ebp - 0x10], ax
mov eax, 4
imul ecx, eax, 0xf2
movzx edx, byte [ebp - 1]
add edx, dword [ecx + 0x102d9070]
mov byte [ebp - 1], dl
movzx eax, word [ebp - 0xc]
movsx ecx, byte [ebp - 3]
add eax, ecx
movzx edx, word [ebp - 0xc]
add edx, eax
mov word [ebp - 0xc], dx
jmp case.default.0x1005165a
movsx eax, byte [0x100a504b]
imul eax, dword [ebp - 0x48]
mov byte [0x100a504b], al
mov ecx, 0x63da
mov word [0x100a50fc], cx
movsx edx, word [0x100a5138]
sub edx, 0x45
movsx eax, word [0x100a50dc]
or eax, edx
mov word [0x100a50dc], ax
cmp dword [0x100a5108], 0
jne 0x1005189e
mov dword [ebp - 0x4c4], 1
jmp 0x100518a8
mov dword [ebp - 0x4c4], 0
movsx eax, word [0x100a5140]
movsx ecx, word [0x100a5140]
imul ecx, dword [ebp - 0x4c4]
imul eax, ecx
cdq
mov dword [0x100a5110], eax
mov dword [0x100a5114], edx
mov edx, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x28]
add edx, 1
adc eax, 0
mov dword [ebp - 0x2c], edx
mov dword [ebp - 0x28], eax
mov ecx, 0xeec3
mov word [ebp - 0x18], cx
jmp 0x10051290
movsx ecx, byte [ebp - 3]
push ecx
call dword [sym.imp.KERNEL32.dll_SetLastError]
cmp dword [ebp - 0x4c], 0
ja 0x100519b3
jb 0x100519a7
cmp dword [ebp - 0x50], 0
jae 0x100519b3
mov dword [ebp - 0x4d0], 1
jmp 0x100519bd
mov dword [ebp - 0x4d0], 0
cmp dword [ebp - 0x4c], 0
ja 0x100519d7
jb 0x100519cb
cmp dword [ebp - 0x50], 0x31
jae 0x100519d7
mov dword [ebp - 0x4d4], 1
jmp 0x100519e1
mov dword [ebp - 0x4d4], 0
mov edx, dword [ebp - 0x4d0]
cmp edx, dword [ebp - 0x4d4]
jge 0x10051a57
movzx eax, word [ebp - 0xc]
add eax, 0xdb
movsx ecx, word [ebp - 0x14]
sub ecx, eax
mov word [ebp - 0x14], cx
mov dx, word [0x100a5bfc]
mov word [0x100a50fc], dx
movsx eax, word [0x100a50ec]
test eax, eax
je 0x10051a31
movzx eax, word [0x100a512c]
cdq
mov dword [ebp - 0xf64], eax
mov dword [ebp - 0xf60], edx
jmp 0x10051a49
mov ecx, dword [0x100a5100]
mov edx, dword [0x100a5104]
mov dword [ebp - 0xf64], ecx
mov dword [ebp - 0xf60], edx
mov al, byte [ebp - 0xf64]
mov byte [ebp - 3], al
jmp 0x10051b4e
mov ecx, dword [0x100a50f0]
mov edx, dword [0x100a50f4]
mov dword [ebp - 0x15c8], ecx
mov dword [ebp - 0x15c4], edx
mov eax, dword [ebp - 0x15c8]
or eax, dword [ebp - 0x15c4]
jne 0x10051a92
cmp dword [0x100a50e8], 0
jne 0x10051a92
mov dword [ebp - 0x4d8], 0
jmp 0x10051a9c
mov dword [ebp - 0x4d8], 1
mov ecx, dword [ebp - 0x4d8]
not ecx
test ecx, ecx
je 0x10051af6
mov edx, dword [ebp - 0x44]
sub edx, dword [0x100a5150]
movsx eax, byte [ebp - 4]
imul eax, dword [ebp - 0x3c]
add edx, eax
mov word [0x100a513c], dx
mov ecx, dword [0x100a5158]
shl ecx, 8
mov byte [ebp - 1], cl
mov dx, word [0x100a5bfc]
mov word [0x100a5148], dx
mov eax, dword [0x100a5100]
mov ecx, dword [0x100a5104]
mov dword [ebp - 0x2308], ecx
sub eax, dword [ebp - 0x50]
mov word [ebp - 0x10], ax
jmp 0x10051b4e
movsx edx, byte [ebp - 2]
test edx, edx
je 0x10051b4e
mov eax, dword [0x100a5120]
mov ecx, dword [0x100a5124]
mov dword [ebp - 0x230c], ecx
sub eax, 0xbcd6
mov word [0x100a5138], ax
mov edx, 1
imul eax, edx, 0x693a
mov cl, byte [0x100a5128]
mov byte [eax + 0x1012c978], cl
movzx edx, byte [ebp - 1]
sar edx, 1
mov word [ebp - 0xc], dx
imul eax, dword [ebp - 0x38], 0xf389
cdq
mov dword [0x100a5150], eax
mov dword [0x100a5154], edx
mov dword [ebp - 0x18c], 0x1598
movsx eax, word [0x100a50fc]
imul eax, dword [ebp - 0x48]
mov word [0x100a50fc], ax
movzx eax, word [ebp - 0xc]
cdq
mov ecx, dword [0x100a50e4]
push ecx
mov ecx, dword [0x100a50e0]
push ecx
push edx
push eax
call fcn.10073670
mov ecx, eax
movzx eax, word [ebp - 0xc]
cdq
add eax, ecx
mov word [ebp - 0xc], ax
mov edx, dword [ebp - 0x50]
not edx
mov dword [ebp - 0x24], edx
movzx eax, word [ebp - 0xc]
mov ecx, 0x552
sub ecx, eax
mov word [ebp - 0xc], cx
cmp dword [ebp - 0x18c], 0x1421
jle 0x10051bce
call dword [sym.imp.KERNEL32.dll_GetSystemDefaultLangID]
mov word [ebp - 0x20], ax
mov edx, dword [ebp - 0x18c]
sub edx, 1
mov dword [ebp - 0x18c], edx
jmp 0x10051ba7
call fcn.100083b0
movzx eax, al
test eax, eax
jne 0x100533b6
movsx ecx, byte [0x100a5026]
imul edx, ecx, 0x81a34254
mov word [ebp - 0x14], dx
movsx eax, byte [ebp - 3]
add eax, dword [ebp - 0x38]
movsx ecx, byte [ebp - 3]
sub ecx, eax
mov byte [ebp - 3], cl
movsx eax, word [0x100a50dc]
cdq
push 0xf0359
push 0x7ab56424
push edx
push eax
call fcn.10073670
mov dword [ebp - 0x44], eax
mov dword [ebp - 0x40], edx
movsx eax, byte [ebp - 4]
cdq
mov ecx, dword [0x100a5118]
mov esi, dword [0x100a511c]
and ecx, eax
and esi, edx
mov edx, dword [0x100a5118]
mov eax, dword [0x100a511c]
or edx, ecx
or eax, esi
mov dword [0x100a5118], edx
mov dword [0x100a511c], eax
movsx ecx, word [0x100a5138]
xor ecx, dword [ebp - 0x30]
mov word [0x100a5138], cx
movsx edx, word [0x100a50ec]
add edx, 0x48
mov eax, dword [0x100a50e8]
sub eax, edx
mov dword [0x100a50e8], eax
mov ecx, 0x4814
mov word [0x100a513c], cx
mov dx, word [ebp - 0x10]
sub dx, 1
mov word [ebp - 0x10], dx
movsx eax, byte [ebp - 5]
not eax
cdq
mov ecx, dword [0x100a5120]
mov edx, dword [0x100a5124]
mov dword [ebp - 0x2310], edx
sub ecx, eax
mov byte [0x100a504b], cl
movsx eax, byte [ebp - 4]
sub eax, 0x283551d0
cdq
mov dword [0x100a5118], eax
mov dword [0x100a511c], edx
movsx eax, word [0x100a513c]
cdq
mov ecx, dword [ebp - 0x30]
xor esi, esi
add ecx, 0x749b4814
adc esi, 0xff03f
mov dword [ebp - 0x15d0], eax
mov dword [ebp - 0x15cc], edx
mov dword [ebp - 0x15d8], ecx
mov dword [ebp - 0x15d4], esi
mov edx, dword [ebp - 0x15d0]
cmp edx, dword [ebp - 0x15d8]
jne 0x10051e1f
mov eax, dword [ebp - 0x15cc]
cmp eax, dword [ebp - 0x15d4]
jne 0x10051e1f
movzx eax, word [0x100a510c]
cdq
mov ecx, eax
mov esi, edx
movsx eax, word [ebp - 0x1c]
cdq
add eax, 0x4b2ce6e5
adc edx, 0x5cc23
mov dword [ebp - 0x15e0], ecx
mov dword [ebp - 0x15dc], esi
mov dword [ebp - 0x15e8], eax
mov dword [ebp - 0x15e4], edx
mov edx, dword [ebp - 0x15e0]
cmp edx, dword [ebp - 0x15e8]
jne 0x10051e1f
mov eax, dword [ebp - 0x15dc]
cmp eax, dword [ebp - 0x15e4]
jne 0x10051e1f
mov ecx, dword [ebp - 0x34]
mov edx, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x28]
mov dword [ebp - 0x2314], eax
sub ecx, edx
mov dword [ebp - 0x34], ecx
movsx eax, byte [0x100a504b]
cdq
mov ecx, dword [0x100a50f0]
mov esi, dword [0x100a50f4]
sub ecx, eax
sbb esi, edx
mov edx, dword [0x100a50f0]
mov eax, dword [0x100a50f4]
push esi
push ecx
push eax
push edx
call fcn.10073670
mov dword [0x100a50f0], eax
mov dword [0x100a50f4], edx
jmp 0x10051e1f
mov eax, 0x4814
mov word [0x100a513c], ax
mov ecx, dword [0x100a5100]
mov edx, dword [0x100a5104]
mov dword [ebp - 0x2318], edx
sub ecx, 0x77acb798
mov byte [0x100a504b], cl
imul eax, dword [ebp - 0x30], 0xf0
mov dword [0x100a50f8], eax
mov ecx, 1
imul edx, ecx, 0x14
movsx eax, byte [edx + 0x10277e38]
mov dword [0x100a5158], eax
movsx ecx, word [ebp - 0x14]
test ecx, ecx
jne 0x10051e7c
mov dword [ebp - 0x4dc], 1
jmp 0x10051e86
mov dword [ebp - 0x4dc], 0
mov edx, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x28]
mov dword [ebp - 0x15f0], edx
mov dword [ebp - 0x15ec], eax
mov ecx, dword [ebp - 0x15f0]
or ecx, dword [ebp - 0x15ec]
jne 0x10051eb2
mov dword [ebp - 0x4e0], 1
jmp 0x10051ebc
mov dword [ebp - 0x4e0], 0
mov edx, dword [ebp - 0x4dc]
xor edx, dword [ebp - 0x4e0]
mov word [ebp - 0x20], dx
movsx eax, word [ebp - 0x14]
mov ecx, dword [ebp - 0x34]
sub ecx, eax
jne 0x10051eeb
xor edx, edx
mov dword [ebp - 0x15f8], 1
mov dword [ebp - 0x15f4], edx
jmp 0x10051ef6
xorps xmm0, xmm0
movlpd qword [ebp - 0x15f8], xmm0
movsx eax, word [ebp - 0x1c]
imul ecx, eax, 0xa8
test ecx, ecx
jne 0x10051f18
xor edx, edx
mov dword [ebp - 0x1600], 1
mov dword [ebp - 0x15fc], edx
jmp 0x10051f23
xorps xmm0, xmm0
movlpd qword [ebp - 0x1600], xmm0
mov esi, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x28]
mov dword [ebp - 0x231c], eax
sub esi, dword [ebp - 0x50]
and esi, dword [ebp - 0x15f8]
mov ecx, dword [ebp - 0x34]
xor edx, edx
mov eax, dword [0x100a5118]
mov edi, dword [0x100a511c]
push edx
push ecx
push edi
push eax
call fcn.10073670
mov ecx, dword [ebp - 0x1600]
sub ecx, eax
sub esi, ecx
mov dword [ebp - 0x24], esi
imul edx, dword [ebp - 0x3c], 0x699be30a
mov word [ebp - 0x20], dx
mov ax, word [0x100a5bfc]
mov word [0x100a50dc], ax
movzx eax, word [ebp - 0x18]
cdq
sub eax, 0xf418cc08
mov dword [ebp - 0x24], eax
movsx eax, byte [ebp - 4]
cdq
mov ecx, dword [0x100a5154]
push ecx
mov ecx, dword [0x100a5150]
push ecx
push edx
push eax
call fcn.10073670
mov ecx, eax
movsx eax, byte [ebp - 4]
cdq
sub eax, ecx
mov byte [ebp - 4], al
mov edx, dword [0x100a5bfc]
mov dword [ebp - 0x190], edx
movzx eax, word [0x100a512c]
cdq
mov ecx, dword [0x100a50f0]
mov esi, dword [0x100a50f4]
mov dword [ebp - 0x1608], eax
mov dword [ebp - 0x1604], edx
mov dword [ebp - 0x1610], ecx
mov dword [ebp - 0x160c], esi
mov edx, dword [ebp - 0x1608]
cmp edx, dword [ebp - 0x1610]
jne 0x10052072
mov eax, dword [ebp - 0x1604]
cmp eax, dword [ebp - 0x160c]
jne 0x10052072
movzx ecx, word [ebp - 0x20]
cmp ecx, dword [0x100a50e8]
jl 0x1005206d
mov edx, dword [str.no_message]
mov dword [ebp - 0x21e8], edx
mov eax, dword [0x10086850]
mov dword [ebp - 0x21e4], eax
mov ecx, dword [0x10086854]
mov dword [ebp - 0x21e0], ecx
mov edx, dword [0x10086858]
mov dword [ebp - 0x21dc], edx
mov eax, dword [0x1008685c]
mov dword [ebp - 0x21d8], eax
mov cx, word [0x10086860]
mov word [ebp - 0x21d4], cx
lea edx, [ebp - 0x21e8]
push edx
call dword [sym.imp.KERNEL32.dll_lstrlenW]
cdq
mov dword [0x100a5118], eax
mov dword [0x100a511c], edx
jmp 0x1005210a
cmp dword [0x100a5108], 0
je 0x1005210a
mov eax, dword [ebp - 0x3c]
sub eax, dword [ebp - 0x30]
mov dword [ebp - 0x3c], eax
mov cx, word [0x100a5150]
mov edx, 2
imul eax, edx, 0x7cb
mov word [eax + 0x100fd620], cx
movzx ecx, byte [0x100a503b]
add ecx, 0x21b87c38
mov word [0x100a512c], cx
movzx eax, word [0x100a5130]
cdq
mov ecx, eax
mov edx, dword [0x100a5120]
mov eax, dword [0x100a5124]
mov dword [ebp - 0x2320], eax
sub ecx, edx
movzx eax, word [0x100a5130]
cdq
xor eax, ecx
mov word [0x100a5130], ax
movsx ecx, word [0x100a50dc]
movsx edx, word [0x100a513c]
add ecx, edx
movsx eax, word [0x100a50dc]
sub eax, ecx
mov word [0x100a50dc], ax
mov ecx, 0x24d0
mov word [ebp - 0xc], cx
mov edx, dword [ebp - 0x190]
add edx, 0x4e2
mov dword [ebp - 0x2324], edx
movsx eax, word [0x100a515c]
cmp eax, dword [0x100a50e8]
jge 0x10052190
movzx ecx, word [ebp - 0x20]
imul edx, ecx, 0x53ee18c7
mov eax, dword [0x100a50e8]
sub eax, edx
mov dword [0x100a50e8], eax
movsx ecx, word [ebp - 0x10]
add ecx, 0x44bcdb5b
movsx edx, byte [ebp - 5]
sub edx, ecx
mov byte [ebp - 5], dl
mov eax, dword [0x100a5bfc]
xor ecx, ecx
mov dword [0x100a5150], eax
mov dword [0x100a5154], ecx
mov byte [str._NgcSignWithUserIdK], 0x84
mov edx, dword [ebp - 0x48]
add edx, 0xce96
mov dword [0x100a5108], edx
movsx eax, word [ebp - 0x1c]
cdq
sub eax, dword [0x100a5150]
mov word [ebp - 0x1c], ax
jmp 0x10052322
mov eax, dword [ebp - 0x2c]
mov ecx, dword [ebp - 0x28]
xor eax, dword [0x100a50f0]
xor ecx, dword [0x100a50f4]
mov dword [ebp - 0x1618], eax
mov dword [ebp - 0x1614], ecx
mov edx, dword [ebp - 0x1618]
or edx, dword [ebp - 0x1614]
je 0x10052219
mov eax, dword [ebp - 0x44]
xor eax, 0xcf
mov word [ebp - 0x18], ax
mov ecx, dword [0x100a5bfc]
xor edx, edx
mov dword [ebp - 0x44], ecx
mov dword [ebp - 0x40], edx
mov eax, 0xf127
mov word [0x100a5130], ax
movzx eax, word [ebp - 0x20]
movsx ecx, byte [ebp - 3]
sub eax, ecx
cdq
mov dword [0x100a5120], eax
mov dword [0x100a5124], edx
movzx edx, word [ebp - 0xc]
movsx eax, word [ebp - 0x1c]
xor edx, eax
mov word [ebp - 0xc], dx
mov cl, byte [0x100a504b]
sub cl, 1
mov byte [0x100a504b], cl
jmp 0x10052322
mov edx, 0xfffffffe
test edx, edx
je 0x1005226a
mov ax, word [0x100a5134]
mov byte [0x100a5026], al
movzx ecx, byte [0x100a503b]
sub ecx, dword [0x100a50e8]
mov word [0x100a515c], cx
movsx eax, byte [ebp - 5]
xor eax, 0x11f22b9d
cdq
mov dword [0x100a50e0], eax
mov dword [0x100a50e4], edx
mov edx, dword [0x100a50f8]
add edx, 1
mov dword [0x100a50f8], edx
jmp 0x10052322
mov eax, dword [0x100a5110]
mov ecx, dword [0x100a5114]
not eax
not ecx
mov dword [ebp - 0x1620], eax
mov dword [ebp - 0x161c], ecx
mov edx, dword [ebp - 0x1620]
or edx, dword [ebp - 0x161c]
je 0x10052322
movsx eax, word [ebp - 0x1c]
sub eax, dword [0x100a5144]
movsx ecx, word [ebp - 0x1c]
sub ecx, eax
mov word [ebp - 0x1c], cx
movzx eax, word [0x100a510c]
cdq
mov ecx, eax
mov edx, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x28]
mov dword [ebp - 0x2328], eax
sub ecx, edx
movzx eax, word [0x100a510c]
cdq
sub eax, ecx
mov word [0x100a510c], ax
movsx ecx, byte [ebp - 4]
add ecx, dword [ebp - 0x38]
movsx edx, byte [ebp - 4]
sub edx, ecx
mov byte [ebp - 4], dl
movsx eax, word [0x100a50fc]
cdq
mov ecx, dword [0x100a5100]
mov esi, dword [0x100a5104]
push esi
push ecx
push edx
push eax
call fcn.10073670
mov word [0x100a50fc], ax
mov edx, 2
mov word [0x100a50ec], dx
movzx eax, word [ebp - 0x20]
imul ecx, eax, 0xa4d4
mov dword [0x100a50f8], ecx
mov edx, dword [ebp - 0x190]
add edx, 0x517
mov dword [ebp - 0x4f4], edx
movsx eax, word [0x100a513c]
test eax, eax
je 0x10052344
jmp 0x100523f0
mov ecx, dword [ebp - 0x50]
or ecx, dword [ebp - 0x4c]
jne 0x10052358
mov dword [ebp - 0x4e4], 1
jmp 0x10052362
mov dword [ebp - 0x4e4], 0
movzx edx, word [0x100a5130]
cmp dword [ebp - 0x4e4], edx
jne 0x1005237d
mov dword [ebp - 0x4e8], 1
jmp 0x10052387
mov dword [ebp - 0x4e8], 0
movsx eax, byte [0x100a5026]
mov ecx, 0xe6d8
sub ecx, eax
mov edx, dword [ebp - 0x4e8]
sub edx, ecx
je 0x100523f0
xor eax, eax
mov ecx, dword [0x100a5110]
mov edx, dword [0x100a5114]
add ecx, dword [ebp - 0x3c]
adc edx, eax
mov dword [0x100a5110], ecx
mov dword [0x100a5114], edx
xor eax, eax
mov ecx, dword [0x100a50e0]
sub ecx, dword [ebp - 0x30]
mov edx, dword [0x100a50e4]
sbb edx, eax
mov dword [0x100a50e0], ecx
mov dword [0x100a50e4], edx
movzx eax, byte [ebp - 1]
movsx ecx, byte [ebp - 2]
add eax, ecx
movzx edx, byte [ebp - 1]
add edx, eax
mov byte [ebp - 1], dl
mov eax, dword [ebp - 0x190]
add eax, 0x5f9
mov dword [ebp - 0x232c], eax
mov byte [ebp - 1], 2
mov dword [0x100a5144], 0xc2ebc882
movsx ecx, word [ebp - 0x10]
test ecx, ecx
je 0x10052430
mov edx, dword [0x100a50e0]
mov eax, dword [0x100a50e4]
mov dword [ebp - 0xf6c], edx
mov dword [ebp - 0xf68], eax
jmp 0x10052440
mov eax, dword [ebp - 0x38]
cdq
mov dword [ebp - 0xf6c], eax
mov dword [ebp - 0xf68], edx
mov cl, byte [ebp - 0xf6c]
mov byte [0x100a504b], cl
movzx edx, word [ebp - 0x18]
sar edx, 1
mov byte [0x100a503b], dl
mov eax, 2
mov word [0x100a510c], ax
mov cl, byte [ebp - 1]
mov byte [ebp - 0x194], cl
cmp byte [ebp - 0x194], 0
je 0x10052494
cmp byte [ebp - 0x194], 1
je 0x10052589
cmp byte [ebp - 0x194], 2
je 0x100525d1
jmp 0x10052627
movzx edx, word [0x100a5130]
imul eax, edx, 0xf50de2fd
mov dword [ebp - 0x38], eax
movsx ecx, word [ebp - 0x14]
sub ecx, dword [ebp - 0x24]
mov word [ebp - 0x14], cx
movsx edx, byte [ebp - 3]
test edx, edx
jne 0x100524c3
mov dword [ebp - 0x4ec], 1
jmp 0x100524cd
mov dword [ebp - 0x4ec], 0
mov eax, dword [ebp - 0x34]
xor eax, dword [ebp - 0x4ec]
jne 0x100524ec
xor ecx, ecx
mov dword [ebp - 0xf74], 1
mov dword [ebp - 0xf70], ecx
jmp 0x100524f7
xorps xmm0, xmm0
movlpd qword [ebp - 0xf74], xmm0
movzx eax, byte [ebp - 1]
cdq
mov ecx, dword [0x100a5100]
mov esi, dword [0x100a5104]
push esi
push ecx
push edx
push eax
call fcn.10073670
mov ecx, dword [ebp - 0xf74]
sub ecx, eax
mov eax, dword [ebp - 0xf70]
sbb eax, edx
mov dword [ebp - 0x1628], ecx
mov dword [ebp - 0x1624], eax
mov ecx, dword [ebp - 0x1628]
or ecx, dword [ebp - 0x1624]
jne 0x10052547
mov dword [ebp - 0x4f0], 1
jmp 0x10052551
mov dword [ebp - 0x4f0], 0
movsx edx, byte [ebp - 4]
movzx eax, word [ebp - 0x20]
lea ecx, [edx + eax + 0xc2]
imul ecx, dword [ebp - 0x4f0]
mov word [0x100a5130], cx
mov byte [ebp - 1], 0x34
mov dx, word [ebp - 0x30]
mov word [0x100a5130], dx
movzx eax, word [ebp - 0x18]
mov dword [ebp - 0x48], eax
jmp 0x10052627
movsx eax, byte [ebp - 4]
cdq
mov dword [0x100a50f0], eax
mov dword [0x100a50f4], edx
movsx eax, byte [0x100a5026]
cdq
mov ecx, eax
sub ecx, dword [0x100a50e0]
movsx eax, byte [0x100a5026]
cdq
add eax, ecx
mov byte [0x100a5026], al
mov edx, 1
imul eax, edx, 0x28de
mov cl, byte [0x100a5138]
mov byte [eax + 0x100fee98], cl
jmp 0x10052627
movsx eax, word [0x100a5134]
cdq
add eax, 0xe1c589d3
mov byte [ebp - 4], al
mov edx, 0x696a
mov word [0x100a512c], dx
mov al, byte [ebp - 5]
add al, 1
mov byte [ebp - 5], al
movzx eax, word [0x100a5130]
cdq
mov ecx, dword [0x100a5110]
mov esi, dword [0x100a5114]
xor ecx, eax
xor esi, edx
mov edx, dword [0x100a5110]
mov eax, dword [0x100a5114]
add edx, ecx
adc eax, esi
mov dword [0x100a5110], edx
mov dword [0x100a5114], eax
mov ecx, dword [ebp - 0x4f4]
cmp dword [ebp - 0x4f4], ecx
jne 0x100533b6
mov eax, dword [0x100a50e8]
cdq
mov ecx, dword [ebp - 0x2c]
mov esi, dword [ebp - 0x28]
mov dword [ebp - 0x1630], eax
mov dword [ebp - 0x162c], edx
mov dword [ebp - 0x1638], ecx
mov dword [ebp - 0x1634], esi
mov edx, dword [ebp - 0x1630]
cmp edx, dword [ebp - 0x1638]
jne 0x100527c6
mov eax, dword [ebp - 0x162c]
cmp eax, dword [ebp - 0x1634]
jne 0x100527c6
movsx ecx, byte [ebp - 4]
test ecx, ecx
jne 0x10052695
mov dword [ebp - 0x4f8], 1
jmp 0x1005269f
mov dword [ebp - 0x4f8], 0
movzx edx, word [ebp - 0xc]
cmp edx, dword [ebp - 0x4f8]
jle 0x100526bf
xor eax, eax
mov dword [ebp - 0xf7c], 1
mov dword [ebp - 0xf78], eax
jmp 0x100526ca
xorps xmm0, xmm0
movlpd qword [ebp - 0xf7c], xmm0
mov ecx, dword [0x100a50f0]
mov edx, dword [0x100a50f4]
xor ecx, dword [ebp - 0xf7c]
xor edx, dword [ebp - 0xf78]
mov dword [ebp - 0x1640], ecx
mov dword [ebp - 0x163c], edx
mov eax, dword [ebp - 0x1640]
or eax, dword [ebp - 0x163c]
je 0x10052725
mov ecx, 9
mov esi, str.invalid_stored_blo
lea edi, [ebp - 0x2730]
rep movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
lea ecx, [ebp - 0x2730]
push ecx
call dword [sym.imp.KERNEL32.dll_lstrlenW]
mov byte [ebp - 1], al
jmp 0x100527c6
movzx edx, word [0x100a5148]
test edx, edx
jne 0x1005273c
mov dword [ebp - 0x4fc], 1
jmp 0x10052746
mov dword [ebp - 0x4fc], 0
movsx eax, byte [ebp - 3]
cmp eax, dword [ebp - 0x4fc]
jle 0x1005275e
mov dword [ebp - 0x500], 1
jmp 0x10052768
mov dword [ebp - 0x500], 0
movsx ecx, word [0x100a5140]
not ecx
mov edx, dword [ebp - 0x500]
sub edx, ecx
je 0x100527c6
mov al, byte [0x100a5bfc]
mov byte [0x100a503b], al
mov ecx, dword [ebp - 0x34]
mov word [ebp - 0x14], cx
movzx edx, byte [str._NgcSignWithUserIdK]
imul eax, edx, 0x59
movzx ecx, word [ebp - 0x20]
sub ecx, eax
mov word [ebp - 0x20], cx
movsx edx, byte [ebp - 5]
sub edx, 0xf9ae
mov byte [0x100a503b], dl
movsx eax, word [0x100a5134]
movzx ecx, byte [0x100a503b]
sub eax, ecx
mov word [0x100a5134], ax
xor edx, edx
mov dword [0x100a50e0], 0x2850
mov dword [0x100a50e4], edx
cmp dword [ebp - 0x48], 0x7dfac5de
jle 0x100527f6
mov eax, dword [ebp - 0x3c]
push eax
call dword [sym.imp.KERNEL32.dll_IsValidCodePage]
mov word [0x100a50dc], ax
jmp 0x100528eb
movsx ecx, byte [ebp - 4]
test ecx, ecx
je 0x100528eb
cmp dword [ebp - 0x24], 0
jne 0x10052814
mov dword [ebp - 0x504], 1
jmp 0x1005281e
mov dword [ebp - 0x504], 0
movsx eax, byte [ebp - 3]
movsx edx, byte [ebp - 2]
and eax, edx
movsx ecx, word [0x100a5138]
not ecx
mov edx, dword [ebp - 0x504]
add edx, dword [0x100a50f8]
sub ecx, edx
not ecx
and eax, ecx
cdq
mov dword [0x100a5120], eax
mov dword [0x100a5124], edx
movsx eax, word [0x100a5134]
imul eax, dword [ebp - 0x24]
mov word [0x100a5134], ax
mov cl, byte [0x100a504b]
add cl, 1
mov byte [0x100a504b], cl
movzx edx, word [ebp - 0x20]
movzx eax, word [ebp - 0x20]
sub edx, eax
movzx ecx, word [ebp - 0x20]
add ecx, edx
mov word [ebp - 0x20], cx
movsx edx, word [0x100a5140]
sub edx, 0x6600e805
mov word [ebp - 0x14], dx
movzx eax, word [ebp - 0xc]
cdq
mov ecx, dword [0x100a5100]
mov esi, dword [0x100a5104]
not ecx
not esi
push esi
push ecx
push edx
push eax
call fcn.10073670
mov dword [ebp - 0x1648], eax
mov dword [ebp - 0x1644], edx
mov edx, dword [ebp - 0x1648]
or edx, dword [ebp - 0x1644]
jne 0x100528d8
mov dword [ebp - 0x508], 1
jmp 0x100528e2
mov dword [ebp - 0x508], 0
mov eax, dword [ebp - 0x508]
mov dword [ebp - 0x30], eax
mov ecx, dword [ebp - 0x30]
add ecx, 1
xor edx, edx
mov dword [ebp - 0x1650], ecx
mov dword [ebp - 0x164c], edx
mov eax, dword [0x100a50e0]
cmp eax, dword [ebp - 0x1650]
jne 0x10052c41
mov ecx, dword [0x100a50e4]
cmp ecx, dword [ebp - 0x164c]
jne 0x10052c41
movsx edx, byte [ebp - 2]
imul eax, edx, 0x86
mov word [0x100a513c], ax
movsx eax, byte [ebp - 4]
cdq
mov ecx, dword [ebp - 0x2c]
mov edx, dword [ebp - 0x28]
mov dword [ebp - 0x2330], edx
sub ecx, eax
movsx eax, byte [ebp - 4]
movzx edx, word [ebp - 0x20]
imul eax, edx
cdq
add ecx, eax
mov dword [ebp - 0x30], ecx
movzx eax, word [0x100a510c]
movsx ecx, byte [ebp - 3]
sub eax, ecx
mov word [0x100a510c], ax
movsx eax, word [0x100a50ec]
cdq
mov dword [ebp - 0x1658], eax
mov dword [ebp - 0x1654], edx
mov edx, dword [0x100a5154]
cmp edx, dword [ebp - 0x1654]
jb 0x10052b07
ja 0x100529a2
mov eax, dword [0x100a5150]
cmp eax, dword [ebp - 0x1658]
jbe 0x10052b07
mov eax, dword [ebp - 0x48]
cdq
mov ecx, dword [ebp - 0x2c]
mov esi, dword [ebp - 0x28]
mov dword [ebp - 0x1660], eax
mov dword [ebp - 0x165c], edx
mov dword [ebp - 0x1668], ecx
mov dword [ebp - 0x1664], esi
mov edx, dword [ebp - 0x1660]
cmp edx, dword [ebp - 0x1668]
jne 0x10052a87
mov eax, dword [ebp - 0x165c]
cmp eax, dword [ebp - 0x1664]
jne 0x10052a87
mov dword [ebp - 0x198], 0x17
movsx eax, byte [ebp - 2]
cdq
mov ecx, eax
sub ecx, 0x7188296b
movzx eax, byte [str._NgcSignWithUserIdK]
cdq
and eax, ecx
mov byte [str._NgcSignWithUserIdK], al
movsx edx, word [0x100a50ec]
add edx, 4
mov dword [ebp - 0x24], edx
imul eax, dword [ebp - 0x24], 0xee77
mov word [ebp - 0x10], ax
movsx ecx, byte [0x100a5026]
movsx edx, word [ebp - 0x1c]
sub ecx, edx
mov byte [0x100a5026], cl
movzx eax, word [0x100a5128]
add eax, 0xc387
mov word [ebp - 0x14], ax
movsx ecx, word [0x100a5140]
movsx edx, word [0x100a5140]
mov eax, dword [ebp - 0x30]
sub eax, edx
add ecx, dword [0x100a50f8]
add eax, ecx
mov dword [ebp - 0x3c], eax
mov ecx, dword [ebp - 0x198]
add ecx, 1
mov dword [ebp - 0x198], ecx
cmp dword [ebp - 0x198], 0x1885
jl 0x10052a26
jmp 0x10052b07
movsx edx, byte [ebp - 2]
test edx, edx
jne 0x10052b07
mov eax, 0x8c6f
mov word [0x100a512c], ax
movzx ecx, word [0x100a5130]
test ecx, ecx
je 0x10052abe
mov edx, dword [0x100a5118]
mov eax, dword [0x100a511c]
mov dword [ebp - 0xf84], edx
mov dword [ebp - 0xf80], eax
jmp 0x10052ad2
movsx eax, word [0x100a5140]
cdq
mov dword [ebp - 0xf84], eax
mov dword [ebp - 0xf80], edx
mov ecx, dword [ebp - 0xf84]
mov dword [0x100a50f8], ecx
mov edx, 1
imul eax, edx, 0x53bb
movsx eax, byte [eax + 0x100db8c8]
cdq
mov dword [ebp - 0x2c], eax
mov dword [ebp - 0x28], edx
movsx eax, byte [0x100a5026]
cdq
add eax, 0x1e409bb2
mov dword [ebp - 0x3c], eax
movsx ecx, word [0x100a50fc]
cmp ecx, 1
jne 0x10052c41
movzx edx, word [ebp - 0xc]
movsx eax, word [ebp - 0x10]
movzx ecx, word [ebp - 0xc]
add eax, ecx
imul edx, eax
not edx
mov word [0x100a5148], dx
movsx edx, word [0x100a515c]
imul edx, dword [0x100a5158]
or edx, dword [0x100a5158]
mov dword [0x100a5158], edx
movzx eax, word [0x100a5148]
imul ecx, eax, 0xd2
mov dword [ebp - 0x24], ecx
movsx edx, word [ebp - 0x10]
add edx, 0x4660c1bc
mov word [0x100a50fc], dx
mov eax, dword [0x100a5110]
mov ecx, dword [0x100a5114]
push 0
push 0x6840
push ecx
push eax
call fcn.10073670
mov dword [0x100a5108], eax
movsx edx, word [0x100a515c]
test edx, edx
jne 0x10052ba9
xor eax, eax
mov dword [ebp - 0x1670], 1
mov dword [ebp - 0x166c], eax
jmp 0x10052bb4
xorps xmm0, xmm0
movlpd qword [ebp - 0x1670], xmm0
movsx eax, word [0x100a50fc]
cdq
mov ecx, eax
add ecx, dword [ebp - 0x50]
movsx eax, word [ebp - 0x1c]
movsx edx, word [0x100a50dc]
xor eax, edx
cdq
add ecx, eax
add ecx, dword [ebp - 0x1670]
mov word [0x100a50fc], cx
jmp 0x10052c41
xor edx, edx
mov dword [0x100a50e0], 0x2850
mov dword [0x100a50e4], edx
movzx eax, word [ebp - 0xc]
sub eax, 0xe0
cdq
mov ecx, dword [ebp - 0x2c]
mov esi, dword [ebp - 0x28]
add ecx, eax
adc esi, edx
mov dword [ebp - 0x2c], ecx
mov dword [ebp - 0x28], esi
mov edx, dword [0x100a50f8]
xor edx, 0xa
mov word [0x100a5128], dx
mov eax, dword [ebp - 0x34]
add eax, 0x2c92
mov byte [0x100a5026], al
mov byte [ebp - 5], 0xfd
movsx eax, byte [ebp - 2]
cdq
mov ecx, eax
mov edx, dword [0x100a5120]
mov eax, dword [0x100a5124]
mov dword [ebp - 0x2334], eax
sub ecx, edx
movsx eax, byte [ebp - 2]
cdq
add eax, ecx
mov byte [ebp - 2], al
mov ecx, 0xde962
mov dword [0x100a50e0], 0x829a1590
mov dword [0x100a50e4], ecx
movsx edx, byte [ebp - 2]
test edx, edx
je 0x10052d6f
mov byte [0x100a504b], 0x31
mov eax, dword [ebp - 0x38]
mov ecx, 2
imul edx, ecx, 0x6037
mov word [edx + 0x102024e0], ax
movsx eax, byte [ebp - 5]
imul eax, dword [ebp - 0x38]
movsx ecx, byte [ebp - 5]
or ecx, eax
mov byte [ebp - 5], cl
movsx edx, byte [0x100a5026]
xor edx, 0xf13d999a
mov word [0x100a5134], dx
movsx eax, byte [ebp - 4]
cdq
push 0x12bae
push 0x14f34537
push edx
push eax
call fcn.10073670
mov byte [ebp - 1], al
cmp dword [ebp - 0x38], 0
je 0x10052d47
mov eax, dword [ebp - 0x44]
mov ecx, dword [ebp - 0x40]
mov dword [ebp - 0xe64], eax
mov dword [ebp - 0xe60], ecx
jmp 0x10052d58
movsx eax, word [ebp - 0x10]
cdq
mov dword [ebp - 0xe64], eax
mov dword [ebp - 0xe60], edx
mov edx, dword [ebp - 0xe64]
mov eax, dword [ebp - 0xe60]
mov dword [ebp - 0x50], edx
mov dword [ebp - 0x4c], eax
jmp 0x10052e29
mov ecx, dword [0x100a5118]
mov edx, dword [0x100a511c]
mov dword [ebp - 0x1678], ecx
mov dword [ebp - 0x1674], edx
mov eax, dword [ebp - 0x1678]
or eax, dword [ebp - 0x1674]
je 0x10052dab
movsx eax, word [0x100a50fc]
cdq
mov dword [ebp - 0xf8c], eax
mov dword [ebp - 0xf88], edx
jmp 0x10052dc3
mov ecx, dword [0x100a5150]
mov edx, dword [0x100a5154]
mov dword [ebp - 0xf8c], ecx
mov dword [ebp - 0xf88], edx
mov eax, dword [ebp - 0xf8c]
mov dword [ebp - 0x24], eax
mov ecx, dword [ebp - 0x34]
add ecx, dword [ebp - 0x34]
movsx edx, byte [ebp - 5]
not edx
movsx eax, word [0x100a50ec]
add edx, eax
add ecx, edx
mov dword [ebp - 0x30], ecx
mov ecx, 4
imul edx, ecx, 0x1417
mov eax, dword [edx + 0x10126b28]
mov dword [0x100a5158], eax
movsx ecx, word [ebp - 0x14]
mov edx, dword [ebp - 0x30]
lea eax, [ecx + edx - 0x128f15b9]
mov word [ebp - 0x14], ax
movsx ecx, byte [ebp - 4]
add ecx, 0xba
movsx edx, word [0x100a5138]
imul edx, ecx
mov word [0x100a5138], dx
movsx eax, word [0x100a50ec]
cdq
mov ecx, eax
mov esi, edx
movzx eax, word [ebp - 0xc]
cdq
add eax, dword [0x100a50e0]
adc edx, dword [0x100a50e4]
mov dword [ebp - 0x1680], ecx
mov dword [ebp - 0x167c], esi
mov dword [ebp - 0x1688], eax
mov dword [ebp - 0x1684], edx
mov edx, dword [ebp - 0x1680]
cmp edx, dword [ebp - 0x1688]
jne 0x100531ce
mov eax, dword [ebp - 0x167c]
cmp eax, dword [ebp - 0x1684]
jne 0x100531ce
movzx ecx, word [0x100a512c]
imul edx, ecx, 0x4919
mov dword [ebp - 0x3c], edx
movsx eax, byte [ebp - 2]
imul ecx, eax, 0x6675e03a
movsx edx, word [ebp - 0x10]
sub edx, ecx
mov word [ebp - 0x10], dx
movsx eax, byte [ebp - 4]
cdq
add eax, 0xa050771a
mov word [0x100a5138], ax
mov eax, dword [ebp - 0x44]
add eax, dword [ebp - 0x44]
mov ecx, dword [ebp - 0x40]
adc ecx, dword [ebp - 0x40]
mov edx, dword [ebp - 0x44]
sub edx, eax
mov eax, dword [ebp - 0x40]
sbb eax, ecx
mov dword [ebp - 0x44], edx
mov dword [ebp - 0x40], eax
movsx ecx, word [0x100a513c]
cmp dword [ebp - 0x24], ecx
jge 0x10052eea
mov dword [ebp - 0x510], 1
jmp 0x10052ef4
mov dword [ebp - 0x510], 0
cmp dword [ebp - 0x24], 0x2c
jge 0x10052f06
mov dword [ebp - 0x514], 1
jmp 0x10052f10
mov dword [ebp - 0x514], 0
mov edx, dword [ebp - 0x510]
cmp edx, dword [ebp - 0x514]
jle 0x1005301a
movzx eax, word [0x100a5128]
cdq
mov dword [ebp - 0x16a8], eax
mov dword [ebp - 0x16a4], edx
mov eax, dword [ebp - 0x16a4]
cmp eax, dword [0x100a5154]
ja 0x1005320c
jb 0x10053200
mov ecx, dword [ebp - 0x16a8]
cmp ecx, dword [0x100a5150]
jae 0x1005320c
mov dword [ebp - 0x524], 1
jmp 0x10053216
mov dword [ebp - 0x524], 0
movzx edx, word [0x100a5128]
cmp edx, 0x41
jge 0x1005322e
mov dword [ebp - 0x528], 1
jmp 0x10053238
mov dword [ebp - 0x528], 0
mov eax, dword [ebp - 0x524]
cmp eax, dword [ebp - 0x528]
jl 0x10053282
movzx eax, byte [ebp - 1]
cdq
sub eax, 0x3d1b07e0
sbb edx, 0x5e3ba
mov dword [ebp - 0x44], eax
mov dword [ebp - 0x40], edx
movzx eax, word [ebp - 0xc]
cdq
mov ecx, dword [0x100a5110]
mov esi, dword [0x100a5114]
add ecx, eax
adc esi, edx
mov dword [0x100a5110], ecx
mov dword [0x100a5114], esi
jmp 0x100533ac
xor edx, edx
je 0x100532d5
movsx ecx, word [0x100a513c]
movsx edx, byte [ebp - 4]
cmp ecx, edx
jge 0x100533dc
movsx eax, word [0x100a515c]
test eax, eax
jne 0x100533dc
mov dword [ebp - 0x52c], 1
jmp 0x100533e6
mov dword [ebp - 0x52c], 0
movzx ecx, word [0x100a5128]
cmp dword [ebp - 0x3c], ecx
ja 0x10053406
xor edx, edx
mov dword [ebp - 0xfa4], 1
mov dword [ebp - 0xfa0], edx
jmp 0x10053411
xorps xmm0, xmm0
movlpd qword [ebp - 0xfa4], xmm0
movsx eax, word [ebp - 0x10]
cdq
mov ecx, dword [ebp - 0x2c]
mov esi, dword [ebp - 0x28]
push esi
push ecx
push edx
push eax
call fcn.10073670
mov dword [ebp - 0x16b8], eax
mov dword [ebp - 0x16b4], edx
mov edx, dword [ebp - 0x16b8]
cmp edx, dword [ebp - 0xfa4]
jne 0x1005344d
mov eax, dword [ebp - 0x16b4]
cmp eax, dword [ebp - 0xfa0]
je 0x10053459
mov dword [ebp - 0x530], 1
jmp 0x10053463
mov dword [ebp - 0x530], 0
mov ecx, dword [ebp - 0x52c]
cmp ecx, dword [ebp - 0x530]
jl 0x1005352e
cmp dword [0x100a5158], 0
jne 0x1005348a
mov dword [ebp - 0x534], 1
jmp 0x10053494
mov dword [ebp - 0x534], 0
mov edx, dword [ebp - 0x50]
or edx, dword [ebp - 0x4c]
jne 0x100534a8
mov dword [ebp - 0x538], 1
jmp 0x100534b2
mov dword [ebp - 0x538], 0
movzx eax, word [0x100a5148]
xor eax, dword [ebp - 0x534]
cdq
mov esi, eax
movsx eax, word [ebp - 0x10]
sub eax, dword [ebp - 0x538]
cdq
mov ecx, dword [ebp - 0x2c]
mov edi, dword [ebp - 0x28]
push edi
push ecx
push edx
push eax
call fcn.10073670
not eax
xor esi, eax
not esi
mov word [ebp - 0x1c], si
movzx edx, word [0x100a512c]
imul eax, edx, 0x284b
mov dword [ebp - 0x34], eax
mov ecx, dword [ebp - 0x2c]
mov edx, dword [ebp - 0x28]
sub ecx, 0xdf
sbb edx, 0
mov dword [0x100a50f0], ecx
mov dword [0x100a50f4], edx
mov eax, 0xfffff8cd
mov word [0x100a50ec], ax
mov ecx, dword [ebp - 0x3c]
add ecx, 0x1a89ac75
mov word [0x100a50dc], cx
jmp 0x100535ad
imul edx, dword [0x100a50f8], 0x8a
mov byte [str._NgcSignWithUserIdK], dl
movzx eax, byte [str._NgcSignWithUserIdK]
sar eax, 8
mov dword [ebp - 0x24], eax
mov cx, word [0x100a5bfc]
mov word [0x100a50ec], cx
mov esi, dword [0x100a5158]
xor edi, edi
movzx eax, word [0x100a512c]
not eax
cdq
push 0x95c64
push 0x2f02ff9e
push edx
push eax
call fcn.10073670
mov ecx, eax
mov ebx, edx
movsx eax, byte [ebp - 2]
cdq
push edx
push eax
push ebx
push ecx
call fcn.10073670
push edx
push eax
push edi
push esi
call fcn.10073670
mov byte [str._NgcSignWithUserIdK], al
movsx edx, byte [0x100a5026]
sub edx, 0x2a
mov word [0x100a5128], dx
movsx eax, word [ebp - 0x14]
test eax, eax
je 0x100535c4
movzx ecx, byte [str._NgcSignWithUserIdK]
mov dword [ebp - 0x53c], ecx
jmp 0x100535ce
movsx edx, byte [ebp - 4]
mov dword [ebp - 0x53c], edx
mov eax, dword [ebp - 0x53c]
mov dword [ebp - 0x24], eax
mov ecx, 0x2b83
mov word [0x100a513c], cx
movsx eax, word [0x100a50ec]
cdq
push edx
push eax
mov edx, dword [0x100a5154]
push edx
mov eax, dword [0x100a5150]
push eax
call fcn.10073670
xor eax, dword [0x100a5150]
xor edx, dword [0x100a5154]
mov dword [0x100a5150], eax
mov dword [0x100a5154], edx
mov ecx, dword [ebp - 0x3c]
not ecx
mov edx, dword [0x100a50f8]
not edx
add ecx, edx
movsx eax, word [0x100a50ec]
not eax
add ecx, eax
mov word [ebp - 0xc], cx
movzx eax, word [ebp - 0x20]
sub eax, 0x31f34c68
cdq
xor eax, dword [ebp - 0x44]
xor edx, dword [ebp - 0x40]
mov dword [ebp - 0x44], eax
mov dword [ebp - 0x40], edx
mov ecx, dword [ebp - 0x12f0]
sub ecx, dword [ebp - 0x12f4]
mov edx, dword [ebp - 0x12f8]
add edx, 0x1dc
cmp ecx, edx
je 0x10070fa5
movsx eax, byte [ebp - 3]
test eax, eax
jne 0x1005367e
mov dword [ebp - 0x540], 1
jmp 0x10053688
mov dword [ebp - 0x540], 0
movzx ecx, word [0x100a510c]
movzx edx, byte [str._NgcSignWithUserIdK]
imul ecx, edx
not ecx
mov eax, dword [0x100a5108]
xor eax, dword [ebp - 0x540]
cmp ecx, eax
jae 0x100536b6
mov dword [ebp - 0x548], 1
jmp 0x100536c0
mov dword [ebp - 0x548], 0
mov ecx, dword [ebp - 0x2c]
mov esi, dword [ebp - 0x28]
movsx eax, byte [ebp - 3]
not eax
cdq
mov dword [ebp - 0x16c0], ecx
mov dword [ebp - 0x16bc], esi
mov dword [ebp - 0x16c8], eax
mov dword [ebp - 0x16c4], edx
mov edx, dword [ebp - 0x16bc]
cmp edx, dword [ebp - 0x16c4]
jl 0x1005370f
jg 0x10053703
mov eax, dword [ebp - 0x16c0]
cmp eax, dword [ebp - 0x16c8]
jbe 0x1005370f
mov dword [ebp - 0x544], 1
jmp 0x10053719
mov dword [ebp - 0x544], 0
movsx ecx, byte [0x100a5026]
cmp dword [ebp - 0x544], ecx
jne 0x10053734
mov dword [ebp - 0x54c], 1
jmp 0x1005373e
mov dword [ebp - 0x54c], 0
mov edx, dword [ebp - 0x548]
cmp edx, dword [ebp - 0x54c]
jge 0x1005385d
movsx eax, byte [0x100a5026]
movsx ecx, byte [ebp - 3]
cmp eax, ecx
jg 0x1005376b
mov dword [ebp - 0x550], 1
jmp 0x10053775
mov dword [ebp - 0x550], 0
movsx edx, byte [0x100a5026]
cmp edx, 0x5a
jg 0x1005378d
mov dword [ebp - 0x554], 1
jmp 0x10053797
mov dword [ebp - 0x554], 0
mov eax, dword [ebp - 0x550]
cmp eax, dword [ebp - 0x554]
jne 0x1005383d
movsx eax, word [0x100a50ec]
cdq
mov ecx, eax
mov esi, edx
and ecx, dword [0x100a50f0]
and esi, dword [0x100a50f4]
movsx eax, word [0x100a50ec]
cdq
push esi
push ecx
push edx
push eax
call fcn.10073670
mov word [0x100a50ec], ax
mov edx, dword [ebp - 0x3c]
xor eax, eax
push 0x2d9fe
push 0xeba96913
push eax
push edx
call fcn.10073670
mov byte [0x100a5026], al
movzx ecx, word [0x100a5130]
add ecx, 0x52
mov byte [ebp - 3], cl
movsx edx, word [0x100a513c]
test edx, edx
je 0x10053813
mov al, byte [ebp - 4]
mov byte [ebp - 0x5d], al
jmp 0x1005381c
mov cl, byte [0x100a504b]
mov byte [ebp - 0x5d], cl
mov dl, byte [ebp - 0x5d]
mov byte [ebp - 3], dl
xor eax, eax
mov dword [ebp - 0x50], 0x62
mov dword [ebp - 0x4c], eax
movzx ecx, word [ebp - 0x18]
add ecx, 0xe1
mov byte [ebp - 3], cl
jmp 0x10053858
movzx eax, byte [ebp - 1]
cdq
and eax, 0x95a8165b
mov word [ebp - 0x10], ax
mov edx, dword [ebp - 0x30]
add edx, 0x6f1a9002
mov word [ebp - 0x18], dx
jmp 0x1005396a
cmp dword [ebp - 0x48], 0
je 0x10053891
mov eax, dword [0x100a5bfc]
xor ecx, ecx
mov dword [0x100a50f0], eax
mov dword [0x100a50f4], ecx
mov edx, dword [0x100a5bfc]
xor eax, eax
mov dword [0x100a5150], edx
mov dword [0x100a5154], eax
mov byte [ebp - 4], 2
jmp 0x1005396a
movsx ecx, word [0x100a5138]
test ecx, ecx
jne 0x1005396a
movsx edx, byte [0x100a504b]
test edx, edx
jne 0x100538b7
mov dword [ebp - 0x558], 1
jmp 0x100538c1
mov dword [ebp - 0x558], 0
movsx eax, word [ebp - 0x1c]
mov ecx, dword [ebp - 0x34]
not ecx
imul eax, ecx
mov edx, dword [ebp - 0x3c]
add edx, eax
jne 0x100538e0
mov dword [ebp - 0x55c], 1
jmp 0x100538ea
mov dword [ebp - 0x55c], 0
movzx eax, word [ebp - 0xc]
movzx ecx, byte [0x100a503b]
add ecx, dword [ebp - 0x558]
add eax, dword [ebp - 0x55c]
add ecx, eax
mov dword [0x100a50f8], ecx
mov edx, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x28]
mov dword [ebp - 0x233c], eax
add edx, 0xa374592b
mov word [ebp - 0xc], dx
movzx ecx, byte [ebp - 1]
not ecx
movsx edx, word [0x100a50ec]
and ecx, edx
mov dword [0x100a5144], ecx
mov byte [ebp - 2], 2
mov eax, dword [ebp - 0x38]
add eax, 0xc262
imul ecx, eax, 0xddad0810
xor edx, edx
mov dword [0x100a5150], ecx
mov dword [0x100a5154], edx
mov eax, dword [0x100a5150]
add eax, 0xd
mov ecx, dword [0x100a5158]
xor ecx, eax
mov dword [0x100a5158], ecx
mov edx, 0xc53
mov word [0x100a50ec], dx
mov eax, 8
mov word [0x100a5138], ax
movzx eax, word [0x100a5148]
cdq
push 0x48f40
push 0x1f8f9469
push edx
push eax
call fcn.10073670
mov byte [ebp - 2], al
xor ecx, ecx
mov dword [0x100a5120], 0x7554
mov dword [0x100a5124], ecx
movzx edx, word [ebp - 0x18]
test edx, edx
je 0x100539c2
mov eax, dword [ebp - 0x30]
mov dword [ebp - 0x560], eax
jmp 0x100539cc
movzx ecx, word [ebp - 0x18]
mov dword [ebp - 0x560], ecx
mov edx, dword [ebp - 0x560]
mov dword [0x100a5158], edx
mov eax, dword [ebp - 0x48]
mov ecx, 1
imul edx, ecx, 0x2c
mov byte [edx + 0x100fee58], al
movsx eax, word [ebp - 0x1c]
cdq
mov ecx, dword [0x100a5120]
mov esi, dword [0x100a5124]
and ecx, eax
and esi, edx
mov dword [0x100a5120], ecx
mov dword [0x100a5124], esi
movsx edx, word [0x100a50ec]
movsx eax, word [ebp - 0x1c]
add edx, eax
cmp dword [0x100a50e8], edx
jne 0x10053f6e
mov ecx, 0x8172
mov word [ebp - 0x20], cx
movzx eax, word [0x100a510c]
cdq
mov dword [ebp - 0x44], eax
mov dword [ebp - 0x40], edx
movsx edx, byte [ebp - 5]
imul eax, edx, 0xff
mov dword [0x100a5158], eax
mov eax, dword [0x100a50f8]
cdq
mov ecx, dword [0x100a50f0]
mov esi, dword [0x100a50f4]
mov dword [ebp - 0x16d0], eax
mov dword [ebp - 0x16cc], edx
mov dword [ebp - 0x16d8], ecx
mov dword [ebp - 0x16d4], esi
mov edx, dword [ebp - 0x16cc]
cmp edx, dword [ebp - 0x16d4]
jl 0x10053a9d
jg 0x10053a91
mov eax, dword [ebp - 0x16d0]
cmp eax, dword [ebp - 0x16d8]
jbe 0x10053a9d
mov dword [ebp - 0x564], 1
jmp 0x10053aa7
mov dword [ebp - 0x564], 0
cmp dword [0x100a50f8], 0x3e
jle 0x10053abc
mov dword [ebp - 0x568], 1
jmp 0x10053ac6
mov dword [ebp - 0x568], 0
mov ecx, dword [ebp - 0x564]
cmp ecx, dword [ebp - 0x568]
jne 0x10053caa
movsx edx, word [0x100a5138]
push edx
call dword [sym.imp.USER32.dll_GetTopWindow]
xor ecx, ecx
mov dword [ebp - 0x2c], eax
mov dword [ebp - 0x28], ecx
mov edx, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x28]
mov dword [ebp - 0x16e0], edx
mov dword [ebp - 0x16dc], eax
cmp dword [ebp - 0x16dc], 0
jg 0x10053b20
jl 0x10053b14
cmp dword [ebp - 0x16e0], 0
ja 0x10053b20
mov dword [ebp - 0x56c], 1
jmp 0x10053b2a
mov dword [ebp - 0x56c], 0
mov ecx, dword [ebp - 0x2c]
mov edx, dword [ebp - 0x28]
mov dword [ebp - 0x16e8], ecx
mov dword [ebp - 0x16e4], edx
cmp dword [ebp - 0x16e4], 0
jg 0x10053b5c
jl 0x10053b50
cmp dword [ebp - 0x16e8], 0x5d
ja 0x10053b5c
mov dword [ebp - 0x570], 1
jmp 0x10053b66
mov dword [ebp - 0x570], 0
mov eax, dword [ebp - 0x56c]
cmp eax, dword [ebp - 0x570]
jle 0x10053c35
movzx eax, word [0x100a5128]
cdq
mov dword [ebp - 0x16f0], eax
mov dword [ebp - 0x16ec], edx
mov ecx, dword [ebp - 0x16f0]
cmp ecx, dword [0x100a5150]
jne 0x10053c33
mov edx, dword [ebp - 0x16ec]
cmp edx, dword [0x100a5154]
jne 0x10053c33
mov eax, 0xd61
mov word [ebp - 0x20], ax
movzx eax, word [0x100a510c]
cdq
push 0x1d2db
push 0x16594226
push edx
push eax
call fcn.10073670
mov ecx, eax
mov esi, edx
movsx eax, word [0x100a5138]
cdq
push esi
push ecx
push edx
push eax
call fcn.10073670
mov word [0x100a5138], ax
mov edx, dword [ebp - 0x48]
xor edx, 0x5e
mov byte [ebp - 5], dl
mov eax, dword [0x100a5100]
mov ecx, dword [0x100a5104]
push 0
push 0x8a
push ecx
push eax
call fcn.10073670
mov word [ebp - 0x1c], ax
movsx edx, word [0x100a515c]
movsx eax, word [0x100a515c]
add edx, eax
movsx ecx, word [0x100a515c]
sub ecx, edx
mov word [0x100a515c], cx
jmp 0x10053caa
movsx edx, byte [ebp - 2]
test edx, edx
jne 0x10053c45
movsx eax, word [ebp - 0x14]
test eax, eax
je 0x10053caa
mov ecx, dword [0x100a5bfc]
mov dword [ebp - 0x3c], ecx
movsx eax, byte [ebp - 2]
not eax
movsx edx, byte [ebp - 3]
sub eax, edx
cdq
mov dword [ebp - 0x44], eax
mov dword [ebp - 0x40], edx
movzx eax, word [ebp - 0xc]
mov ecx, dword [ebp - 0x48]
add ecx, eax
jne 0x10053c7a
mov edx, 1
mov word [ebp - 0xbe], dx
jmp 0x10053c83
xor eax, eax
mov word [ebp - 0xbe], ax
mov cx, word [ebp - 0xbe]
mov word [0x100a515c], cx
mov edx, 4
imul eax, edx, 0x1c64
movsx ecx, word [ebp - 0x10]
add ecx, dword [eax + 0x100e1ea0]
mov word [ebp - 0x10], cx
movsx eax, word [0x100a5134]
cdq
mov ecx, eax
mov esi, edx
movsx eax, byte [ebp - 2]
cdq
add eax, 0x829a1590
adc edx, 0xde962
mov dword [ebp - 0x16f8], ecx
mov dword [ebp - 0x16f4], esi
mov dword [ebp - 0x1700], eax
mov dword [ebp - 0x16fc], edx
mov edx, dword [ebp - 0x16f8]
cmp edx, dword [ebp - 0x1700]
jne 0x10053f6e
mov eax, dword [ebp - 0x16f4]
cmp eax, dword [ebp - 0x16fc]
jne 0x10053f6e
mov ecx, dword [0x100a50f8]
cmp ecx, dword [ebp - 0x30]
je 0x10053d19
mov dword [ebp - 0x578], 1
jmp 0x10053d23
mov dword [ebp - 0x578], 0
mov edx, dword [0x100a50f0]
mov eax, dword [0x100a50f4]
mov dword [ebp - 0x1708], edx
mov dword [ebp - 0x1704], eax
mov ecx, dword [ebp - 0x1708]
or ecx, dword [ebp - 0x1704]
jne 0x10053d54
mov dword [ebp - 0x574], 1
jmp 0x10053d5e
mov dword [ebp - 0x574], 0
movsx edx, byte [ebp - 5]
cmp dword [ebp - 0x574], edx
jne 0x10053d76
mov dword [ebp - 0x57c], 1
jmp 0x10053d80
mov dword [ebp - 0x57c], 0
mov eax, dword [ebp - 0x578]
cmp eax, dword [ebp - 0x57c]
je 0x10053e3c
movsx ecx, byte [ebp - 5]
cmp dword [ebp - 0x24], ecx
jge 0x10053da7
mov dword [ebp - 0x580], 1
jmp 0x10053db1
mov dword [ebp - 0x580], 0
cmp dword [ebp - 0x24], 8
jge 0x10053dc3
mov dword [ebp - 0x584], 1
jmp 0x10053dcd
mov dword [ebp - 0x584], 0
mov edx, dword [ebp - 0x580]
cmp edx, dword [ebp - 0x584]
jg 0x10053ddd
jmp 0x10053e37
mov eax, 0x6f49
test eax, eax
je 0x10053e37
movsx eax, word [ebp - 0x14]
cdq
add eax, 0xd6ec6c1
adc edx, 0xfd691
mov dword [ebp - 0x50], eax
mov dword [ebp - 0x4c], edx
mov ecx, 2
imul edx, ecx, 0xad
movzx eax, word [edx + 0x101e5d10]
mov dword [0x100a5158], eax
mov ecx, 1
imul edx, ecx, 0x67
mov al, byte [0x100a5128]
mov byte [edx + 0x10259240], al
mov ecx, dword [ebp - 0x3c]
xor edx, edx
mov dword [0x100a50f0], ecx
mov dword [0x100a50f4], edx
jmp 0x10053ecd
mov eax, dword [ebp - 0x2c]
mov ecx, dword [ebp - 0x28]
push 0
push 0x8ded
push ecx
push eax
call fcn.10073670
mov dword [0x100a50e0], eax
mov dword [0x100a50e4], edx
mov edx, dword [0x100a5bfc]
xor eax, eax
mov dword [0x100a50f0], edx
mov dword [0x100a50f4], eax
movsx ecx, byte [0x100a504b]
movsx edx, byte [ebp - 5]
add ecx, edx
jne 0x10053e8b
mov eax, 1
mov word [ebp - 0xc0], ax
jmp 0x10053e94
xor ecx, ecx
mov word [ebp - 0xc0], cx
mov dx, word [ebp - 0xc0]
mov word [ebp - 0x10], dx
mov dword [0x100a5158], 0x8ebe
movsx eax, word [ebp - 0x1c]
xor eax, 0x7d
cdq
mov ecx, dword [0x100a5100]
mov esi, dword [0x100a5104]
add ecx, eax
adc esi, edx
mov dword [0x100a5100], ecx
mov dword [0x100a5104], esi
jmp 0x1005396a
mov eax, dword [ebp - 0x24]
cdq
push edx
push eax
mov eax, dword [ebp - 0x40]
push eax
mov ecx, dword [ebp - 0x44]
push ecx
call fcn.10073670
mov ecx, eax
mov eax, dword [ebp - 0x44]
mov edx, dword [ebp - 0x40]
call fcn.100736b0
mov dword [ebp - 0x44], eax
mov dword [ebp - 0x40], edx
movzx edx, word [ebp - 0xc]
xor edx, dword [ebp - 0x34]
movzx eax, word [ebp - 0xc]
add eax, edx
mov word [ebp - 0xc], ax
movsx eax, word [0x100a50ec]
shl eax, 4
cdq
mov dword [0x100a5110], eax
mov dword [0x100a5114], edx
call fcn.1003cb50
test eax, eax
je 0x1005cf35
mov dword [ebp - 0x19c], 0x101d
mov dword [0x100a50e8], 0xbb
mov cx, word [0x100a5bfc]
mov word [ebp - 0xc], cx
mov edx, dword [0x100a5bfc]
mov dword [ebp - 0x34], edx
cmp dword [ebp - 0x19c], 0xe47
jle 0x1005433c
xor eax, eax
mov dword [0x100a5120], 3
mov dword [0x100a5124], eax
movzx ecx, word [0x100a5148]
imul edx, ecx, 0xe
movsx eax, word [0x100a5134]
sub eax, edx
mov word [0x100a5134], ax
movzx ecx, word [0x100a5130]
movzx edx, word [0x100a5130]
imul ecx, edx
movzx eax, word [0x100a5130]
sub eax, ecx
mov word [0x100a5130], ax
xor ecx, ecx
mov dword [ebp - 0x50], 0x2f
mov dword [ebp - 0x4c], ecx
mov edx, dword [0x100a5144]
xor eax, eax
mov ecx, dword [0x100a5120]
mov esi, dword [0x100a5124]
push esi
push ecx
push eax
push edx
call fcn.10073670
mov dword [0x100a5144], eax
movzx eax, word [ebp - 0x20]
cdq
add eax, 0xed428e6f
adc edx, 0xcc213
mov dword [ebp - 0x2c], eax
mov dword [ebp - 0x28], edx
mov edx, dword [0x100a5120]
mov eax, dword [0x100a5124]
mov dword [ebp - 0xfac], edx
mov dword [ebp - 0xfa8], eax
cmp dword [ebp - 0xfa8], 0
ja 0x10054328
jb 0x100540c1
cmp dword [ebp - 0xfac], 3
ja 0x10054328
mov ecx, dword [ebp - 0xfac]
mov dword [ebp - 0x2674], ecx
mov edx, dword [ebp - 0x2674]
jmp dword [edx*4 + 0x10071638]
mov ecx, dword [ebp - 0x19c]
sub ecx, 1
mov dword [ebp - 0x19c], ecx
jmp 0x10053ff0
movzx eax, byte [ebp - 1]
cdq
mov dword [ebp - 0x1718], eax
mov dword [ebp - 0x1714], edx
mov edx, dword [0x100a5154]
cmp edx, dword [ebp - 0x1714]
ja 0x10054376
jb 0x1005436a
mov eax, dword [0x100a5150]
cmp eax, dword [ebp - 0x1718]
ja 0x10054376
mov dword [ebp - 0x590], 1
jmp 0x10054380
mov dword [ebp - 0x590], 0
cmp dword [0x100a5154], 0
ja 0x100543a0
jb 0x10054394
cmp dword [0x100a5150], 0x53
ja 0x100543a0
mov dword [ebp - 0x594], 1
jmp 0x100543aa
mov dword [ebp - 0x594], 0
mov ecx, dword [ebp - 0x590]
cmp ecx, dword [ebp - 0x594]
jle 0x100543f3
mov byte [ebp - 1], 0xf5
movzx eax, byte [str._NgcSignWithUserIdK]
sub eax, 0xb1de
cdq
mov dword [ebp - 0x44], eax
mov dword [ebp - 0x40], edx
imul edx, dword [0x100a50e8], 0x2e
mov dword [ebp - 0x24], edx
mov dword [ebp - 0x24], 0xe5e6c180
movsx eax, byte [ebp - 4]
imul eax, eax, 0x5c76
cdq
mov dword [ebp - 0x44], eax
mov dword [ebp - 0x40], edx
jmp 0x1005445c
cmp dword [ebp - 0x34], 0
je 0x1005445c
mov ecx, dword [ebp - 0x3c]
xor ecx, dword [ebp - 0x34]
mov dword [ebp - 0x3c], ecx
cmp dword [ebp - 0x48], 0
jne 0x10054414
mov dword [ebp - 0x598], 1
jmp 0x1005441e
mov dword [ebp - 0x598], 0
movzx edx, word [ebp - 0xc]
mov eax, dword [ebp - 0x598]
sub eax, edx
not eax
movzx ecx, word [0x100a512c]
movsx edx, word [0x100a50fc]
add ecx, edx
sub eax, ecx
jne 0x10054446
mov byte [ebp - 0x5f], 1
jmp 0x1005444a
mov byte [ebp - 0x5f], 0
mov al, byte [ebp - 0x5f]
mov byte [ebp - 2], al
mov ecx, dword [0x100a5bfc]
mov dword [0x100a5144], ecx
mov edx, dword [0x100a5bfc]
mov dword [ebp - 0x1a0], edx
movzx eax, word [ebp - 0x18]
movzx ecx, word [0x100a5148]
add eax, ecx
mov word [ebp - 0x18], ax
mov edx, 4
imul eax, edx, 0xe
mov ecx, dword [0x100a50f8]
imul ecx, dword [eax + 0x10277cb8]
mov dword [0x100a50f8], ecx
movzx edx, word [ebp - 0x20]
mov eax, 0xdd52f2d8
sub eax, edx
movzx ecx, word [ebp - 0xc]
sub eax, ecx
mov dword [ebp - 0x38], eax
mov edx, dword [ebp - 0x4c]
push edx
mov eax, dword [ebp - 0x50]
push eax
mov ecx, dword [ebp - 0x40]
push ecx
mov edx, dword [ebp - 0x44]
push edx
call fcn.10073670
push edx
push eax
mov eax, dword [ebp - 0x40]
push eax
mov ecx, dword [ebp - 0x44]
push ecx
call fcn.10073670
mov dword [ebp - 0x44], eax
mov dword [ebp - 0x40], edx
mov edx, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x28]
mov dword [ebp - 0x2344], eax
sub edx, 0x5fd6
mov word [ebp - 0x20], dx
mov ecx, dword [ebp - 0x1a0]
add ecx, 0x5f7
mov dword [ebp - 0x1300], ecx
mov edx, dword [str.TargetName]
mov dword [ebp - 0x2104], edx
mov eax, dword [0x10086890]
mov dword [ebp - 0x2100], eax
mov cx, word [0x10086894]
mov word [ebp - 0x20fc], cx
mov dl, byte [0x10086896]
mov byte [ebp - 0x20fa], dl
lea eax, [ebp - 0x2104]
push eax
call dword [sym.imp.KERNEL32.dll_lstrlenA]
cdq
mov dword [0x100a5110], eax
mov dword [0x100a5114], edx
mov ecx, dword [ebp - 0x1a0]
add ecx, 0x26f
mov dword [ebp - 0x1304], ecx
movzx edx, byte [0x100a503b]
cmp edx, dword [ebp - 0x38]
jl 0x100545cf
mov eax, dword [ebp - 0x50]
or eax, dword [ebp - 0x4c]
jne 0x10054576
mov dword [ebp - 0x59c], 1
jmp 0x10054580
mov dword [ebp - 0x59c], 0
movzx ecx, word [0x100a5130]
sub ecx, dword [ebp - 0x48]
and ecx, dword [ebp - 0x59c]
mov dword [ebp - 0x34], ecx
mov edx, dword [ebp - 0x3c]
shl edx, 4
xor eax, eax
mov dword [0x100a5118], edx
mov dword [0x100a511c], eax
mov ecx, dword [0x100a5bfc]
xor edx, edx
mov dword [0x100a5118], ecx
mov dword [0x100a511c], edx
movsx eax, word [0x100a515c]
xor eax, 0xec
cdq
mov dword [ebp - 0x44], eax
mov dword [ebp - 0x40], edx
jmp 0x10054625
movzx eax, word [ebp - 0x18]
not eax
test eax, eax
je 0x10054625
movsx ecx, word [0x100a50dc]
mov edx, dword [ebp - 0x48]
imul edx, ecx
mov dword [ebp - 0x48], edx
mov eax, dword [ebp - 0x50]
add eax, 0x7f0e
mov dword [ebp - 0x30], eax
mov cx, word [ebp - 0x20]
add cx, 1
mov word [ebp - 0x20], cx
movsx edx, byte [ebp - 2]
add edx, 0x1432
movsx eax, word [ebp - 0x10]
or eax, edx
mov word [ebp - 0x10], ax
movsx ecx, byte [ebp - 4]
sub ecx, 0xe2
mov word [0x100a5134], cx
mov edx, dword [ebp - 0x1a0]
add edx, 0x318
mov dword [ebp - 0x12fc], edx
mov eax, dword [ebp - 0x12fc]
sub eax, dword [ebp - 0x1300]
mov ecx, dword [ebp - 0x1304]
add ecx, 0x236
cmp eax, ecx
je 0x1005cf30
mov edx, dword [0x100a5bfc]
mov dword [0x100a5144], edx
mov eax, dword [0x100a50f0]
mov ecx, dword [0x100a50f4]
mov edx, 8
shl edx, 2
mov dword [edx + 0x102024a0], eax
mov dword [edx + 0x102024a4], ecx
mov eax, dword [ebp - 0x38]
cdq
sub eax, 0xee6a311d
mov word [0x100a515c], ax
mov eax, dword [0x100a50e8]
xor eax, 0xffff8050
jne 0x100546b1
xor ecx, ecx
mov dword [ebp - 0x1720], 1
mov dword [ebp - 0x171c], ecx
jmp 0x100546bc
xorps xmm0, xmm0
movlpd qword [ebp - 0x1720], xmm0
mov edx, dword [0x100a5100]
mov eax, dword [0x100a5104]
mov dword [ebp - 0x2348], eax
add edx, dword [ebp - 0x1720]
not edx
mov dword [0x100a5108], edx
mov ecx, dword [ebp - 0x2c]
mov edx, dword [ebp - 0x28]
add ecx, dword [0x100a50e0]
adc edx, dword [0x100a50e4]
add ecx, dword [0x100a50e0]
adc edx, dword [0x100a50e4]
mov dword [0x100a50e0], ecx
mov dword [0x100a50e4], edx
xor eax, eax
mov word [0x100a512c], ax
mov ecx, dword [0x100a5118]
mov edx, dword [0x100a511c]
mov eax, dword [0x100a50e4]
push eax
mov eax, dword [0x100a50e0]
push eax
push edx
push ecx
call fcn.10073670
mov ecx, dword [0x100a5118]
mov esi, dword [0x100a511c]
add ecx, eax
adc esi, edx
mov dword [0x100a5118], ecx
mov dword [0x100a511c], esi
mov edx, 1
imul eax, edx, 0x7e
movsx cx, byte [eax + 0x100fd578]
mov dx, word [ebp - 0x1c]
shl dx, cl
mov word [ebp - 0x1c], dx
mov eax, dword [ebp - 0x30]
imul eax, dword [0x100a50e8]
mov dword [ebp - 0x30], eax
movsx eax, byte [ebp - 2]
cdq
sub eax, 0xc2df3df1
mov word [ebp - 0x14], ax
movsx ecx, byte [ebp - 3]
mov edx, dword [0x100a5144]
imul edx, ecx
mov dword [0x100a5144], edx
movzx eax, word [0x100a512c]
mov dword [ebp - 0x1308], eax
cmp dword [ebp - 0x1308], 0
je 0x100547a9
jmp 0x100547f0
movzx ecx, word [ebp - 0xc]
add ecx, dword [ebp - 0x34]
movzx edx, word [ebp - 0xc]
add edx, ecx
mov word [ebp - 0xc], dx
mov eax, 0xda2
mov word [ebp - 0x14], ax
movsx ecx, word [ebp - 0x10]
test ecx, ecx
jne 0x100547d7
mov dword [ebp - 0x5a0], 1
jmp 0x100547e1
mov dword [ebp - 0x5a0], 0
movsx edx, byte [ebp - 5]
mov eax, dword [ebp - 0x5a0]
sub eax, edx
mov byte [ebp - 1], al
mov ecx, dword [0x100a5bfc]
mov dword [ebp - 0x1a4], ecx
movsx eax, byte [ebp - 3]
cdq
mov dword [ebp - 0x1728], eax
mov dword [ebp - 0x1724], edx
mov edx, dword [ebp - 0x1724]
cmp edx, dword [ebp - 0x4c]
ja 0x10054888
jb 0x10054825
mov eax, dword [ebp - 0x1728]
cmp eax, dword [ebp - 0x50]
ja 0x10054888
movsx ecx, byte [ebp - 3]
and ecx, 0x23e5
mov dword [ebp - 0x34], ecx
movsx edx, word [0x100a513c]
imul eax, edx, 0x693a
movsx ecx, word [ebp - 0x1c]
sub ecx, eax
mov word [ebp - 0x1c], cx
mov edx, 0xf6
mov word [0x100a512c], dx
movsx eax, byte [ebp - 5]
mov ecx, dword [0x100a50f8]
sub ecx, eax
mov dword [0x100a50f8], ecx
movsx edx, word [ebp - 0x14]
sub edx, 0x5f8360c9
mov word [0x100a5148], dx
mov eax, 4
mov word [0x100a5148], ax
jmp 0x1005491b
movzx ecx, word [ebp - 0x20]
movsx edx, byte [ebp - 2]
sub ecx, edx
cmp ecx, dword [ebp - 0x24]
jl 0x1005491b
mov eax, dword [ebp - 0x30]
xor ecx, ecx
mov edx, dword [0x100a50f4]
add eax, dword [0x100a50f0]
adc ecx, edx
mov edx, dword [ebp - 0x30]
xor esi, esi
push ecx
push eax
push esi
push edx
call fcn.10073670
mov dword [ebp - 0x30], eax
push 0
push 0xdf1e
mov eax, dword [0x100a5154]
push eax
mov ecx, dword [0x100a5150]
push ecx
call fcn.10073670
add eax, 0x986d50bd
mov word [ebp - 0x20], ax
movsx eax, word [0x100a5138]
shl eax, 4
cdq
mov dword [ebp - 0x2c], eax
mov dword [ebp - 0x28], edx
mov edx, dword [0x100a5120]
mov eax, dword [0x100a5124]
push 0
push 0x755f
push eax
push edx
call fcn.10073670
mov ecx, dword [ebp - 0x2c]
mov esi, dword [ebp - 0x28]
add ecx, eax
adc esi, edx
mov dword [ebp - 0x2c], ecx
mov dword [ebp - 0x28], esi
mov edx, dword [ebp - 0x1a4]
add edx, 0x5bc
mov dword [ebp - 0x234c], edx
movzx eax, word [0x100a5148]
shl eax, 4
mov byte [ebp - 2], al
mov ecx, dword [ebp - 0x1a4]
add ecx, 0x5f7
mov dword [ebp - 0x2350], ecx
movzx edx, word [0x100a510c]
shl edx, 2
mov word [ebp - 0xc], dx
movsx eax, word [0x100a5134]
add eax, dword [ebp - 0x30]
mov word [0x100a5134], ax
mov ecx, dword [0x100a5110]
mov edx, dword [0x100a5114]
mov dword [ebp - 0x2354], edx
sub ecx, 0xebdc3129
mov dword [ebp - 0x3c], ecx
movsx eax, word [0x100a513c]
imul eax, dword [ebp - 0x30]
mov dword [ebp - 0x30], eax
mov ecx, 0x4a
mov word [0x100a5138], cx
mov edx, dword [ebp - 0x1a4]
add edx, 0x456
mov dword [ebp - 0x2358], edx
mov eax, dword [0x100a5bfc]
mov dword [ebp - 0x1ac], eax
movzx ecx, byte [0x100a503b]
movzx edx, word [0x100a512c]
cmp ecx, edx
jne 0x10054a67
imul eax, dword [ebp - 0x34], 0xcb48946
mov dword [ebp - 0x3c], eax
movsx ecx, word [0x100a50ec]
imul edx, ecx, 7
movsx eax, word [0x100a50fc]
add eax, edx
mov word [0x100a50fc], ax
movsx ecx, word [0x100a5134]
test ecx, ecx
jne 0x10054a0c
mov dword [ebp - 0x5a4], 1
jmp 0x10054a16
mov dword [ebp - 0x5a4], 0
movzx edx, word [ebp - 0x18]
and edx, dword [ebp - 0x5a4]
mov byte [ebp - 4], dl
movsx eax, word [ebp - 0x10]
sub eax, dword [0x100a5144]
movsx ecx, word [ebp - 0x10]
add ecx, eax
mov word [ebp - 0x10], cx
movzx eax, word [0x100a512c]
cdq
add eax, 0x660d3f63
adc edx, 0xd6610
mov dword [0x100a50f0], eax
mov dword [0x100a50f4], edx
movzx edx, byte [0x100a503b]
sub edx, 0x5aea621b
mov byte [ebp - 1], dl
jmp 0x10054ad0
mov eax, 0x97
test eax, eax
je 0x10054ad0
movsx eax, byte [ebp - 4]
sub eax, 0x31fe6e50
cdq
add eax, dword [ebp - 0x44]
adc edx, dword [ebp - 0x40]
mov dword [ebp - 0x44], eax
mov dword [ebp - 0x40], edx
movsx ecx, word [ebp - 0x14]
movsx edx, word [0x100a50ec]
sub ecx, edx
movsx eax, word [ebp - 0x14]
imul eax, ecx
mov word [ebp - 0x14], ax
mov cx, word [0x100a515c]
mov byte [0x100a503b], cl
mov dword [ebp - 0x24], 0xb0a01ad8
mov edx, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x28]
add edx, dword [ebp - 0x2c]
adc eax, ecx
mov ecx, dword [ebp - 0x2c]
mov esi, dword [ebp - 0x28]
add ecx, edx
adc esi, eax
mov dword [ebp - 0x2c], ecx
mov dword [ebp - 0x28], esi
mov edx, dword [ebp - 0x1ac]
add edx, 0x44a
mov dword [ebp - 0x5dc], edx
mov eax, dword [ebp - 0x48]
push eax
call dword [sym.imp.USER32.dll_GetWindowTextLengthA]
xor ecx, ecx
mov dword [ebp - 0x2c], eax
mov dword [ebp - 0x28], ecx
mov edx, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x28]
mov dword [ebp - 0x1730], edx
mov dword [ebp - 0x172c], eax
cmp dword [ebp - 0x172c], 0
jg 0x10054eb3
jmp 0x10070fa5
push str.comdlg32
call dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
mov word [ebp - 0x14], ax
movsx ecx, byte [0x100a5026]
test ecx, ecx
je 0x1005cf54
jmp 0x1005d0f8
movsx eax, word [0x100a515c]
test eax, eax
je 0x1005cf74
cmp dword [0x100a5108], 0
je 0x1005cf74
mov dword [ebp - 0x7a4], 1
jmp 0x1005cf7e
mov dword [ebp - 0x7a4], 0
mov ecx, dword [ebp - 0x7a4]
not ecx
cmp dword [ebp - 0x3c], ecx
ja 0x1005cfb1
mov edx, dword [ebp - 0x24]
sub edx, 0x1f3d9918
mov word [ebp - 0xc], dx
movsx eax, byte [0x100a5026]
mov ecx, dword [ebp - 0x3c]
add ecx, eax
mov edx, dword [ebp - 0x3c]
sub edx, ecx
mov dword [ebp - 0x3c], edx
jmp 0x1005d0f8
movsx eax, word [0x100a50ec]
cmp eax, 0xa1
jl 0x1005cfe9
mov ecx, dword [0x100a5120]
mov edx, dword [0x100a5124]
mov dword [ebp - 0x1a28], ecx
mov dword [ebp - 0x1a24], edx
mov eax, dword [ebp - 0x1a28]
or eax, dword [ebp - 0x1a24]
je 0x1005d0f8
movzx ecx, word [ebp - 0x20]
imul ecx, dword [0x100a5144]
mov word [ebp - 0x20], cx
mov edx, dword [0x100a50f0]
mov eax, dword [0x100a50f4]
add edx, 0x52db066b
adc eax, 0xd0691
mov dword [0x100a5118], edx
mov dword [0x100a511c], eax
movsx ecx, byte [0x100a504b]
sub ecx, 0xfe2a
movsx edx, word [0x100a5134]
sub edx, ecx
mov word [0x100a5134], dx
mov eax, dword [0x100a50f0]
mov ecx, dword [0x100a50f4]
mov dword [ebp - 0x1a30], eax
mov dword [ebp - 0x1a2c], ecx
mov edx, dword [ebp - 0x1a30]
or edx, dword [ebp - 0x1a2c]
jne 0x1005d067
mov dword [ebp - 0x7a8], 1
jmp 0x1005d071
mov dword [ebp - 0x7a8], 0
movzx eax, word [0x100a5130]
test eax, eax
jne 0x1005d088
mov dword [ebp - 0x7ac], 1
jmp 0x1005d092
mov dword [ebp - 0x7ac], 0
mov ecx, dword [0x100a5158]
add ecx, dword [ebp - 0x44]
movsx eax, word [0x100a5138]
movzx edx, word [0x100a512c]
add eax, edx
cdq
sub ecx, eax
mov eax, dword [ebp - 0x7a8]
imul eax, dword [ebp - 0x7ac]
not eax
movsx edx, word [0x100a5134]
not edx
not edx
add eax, edx
cdq
add ecx, eax
mov word [0x100a50ec], cx
mov eax, dword [ebp - 0x48]
cdq
mov ecx, dword [0x100a5100]
mov esi, dword [0x100a5104]
push edx
push eax
push esi
push ecx
call fcn.10073670
mov dword [0x100a5100], eax
mov dword [0x100a5104], edx
mov edx, dword [0x100a5bfc]
mov dword [ebp - 0x1fc], edx
mov eax, dword [ebp - 0x3c]
cmp dword [ebp - 0x24], eax
ja 0x1005d1be
movsx ecx, byte [ebp - 3]
test ecx, ecx
je 0x1005d168
mov byte [ebp - 3], 0xeb
movzx eax, word [ebp - 0x20]
cdq
mov edx, dword [0x100a5120]
mov ecx, dword [0x100a5124]
mov dword [ebp - 0x244c], ecx
sub eax, edx
mov word [ebp - 0x20], ax
mov edx, dword [ebp - 0x48]
sub edx, 0x8f
mov word [0x100a515c], dx
mov eax, dword [ebp - 0x44]
add eax, 0x451bcc5d
mov word [ebp - 0x1c], ax
movsx eax, word [0x100a513c]
cdq
sub eax, dword [ebp - 0x44]
mov word [0x100a513c], ax
jmp 0x1005d1bc
mov ecx, dword [0x100a5bfc]
mov dword [ebp - 0x38], ecx
movzx edx, word [ebp - 0x18]
test edx, edx
je 0x1005d184
mov eax, dword [ebp - 0x38]
mov dword [ebp - 0x7b0], eax
jmp 0x1005d18d
mov ecx, dword [ebp - 0x24]
mov dword [ebp - 0x7b0], ecx
mov dx, word [ebp - 0x7b0]
mov word [0x100a50dc], dx
movzx eax, word [ebp - 0x18]
sub eax, 0x46
mov word [0x100a515c], ax
movzx ecx, word [0x100a5128]
movzx edx, word [ebp - 0xc]
sub ecx, edx
mov word [0x100a5128], cx
jmp 0x1005d232
mov eax, 4
imul ecx, eax, 0x2185
movsx edx, word [ebp - 0x14]
add edx, dword [ecx + 0x100e1ea0]
mov word [ebp - 0x14], dx
movzx eax, word [0x100a5128]
add eax, dword [0x100a50f8]
movzx ecx, word [0x100a5128]
imul ecx, eax
mov word [0x100a5128], cx
mov edx, dword [ebp - 0x30]
sub edx, 0xfcc98066
mov word [0x100a5134], dx
mov byte [ebp - 2], 0xea
mov eax, dword [0x100a5100]
mov ecx, dword [0x100a5104]
mov edx, 8
imul edx, edx, 0x3b7f
mov dword [edx + 0x10277f10], eax
mov dword [edx + 0x10277f14], ecx
movzx eax, word [ebp - 0x20]
mov dword [ebp - 0x24], eax
mov ecx, dword [ebp - 0x1fc]
add ecx, 0x62d
mov dword [ebp - 0x1340], ecx
movsx edx, byte [0x100a5026]
movsx eax, byte [ebp - 3]
cmp edx, eax
je 0x1005d2a1
mov ecx, dword [ebp - 0x38]
sub ecx, 0x832
mov word [0x100a5148], cx
mov edx, dword [0x100a50f0]
mov eax, dword [0x100a50f4]
add edx, 0xe7e40207
adc eax, 0xd1039
mov dword [ebp - 0x50], edx
mov dword [ebp - 0x4c], eax
imul ecx, dword [0x100a50f8], 0x62ea85a
mov word [0x100a5128], cx
mov dx, word [0x100a5bfc]
mov word [ebp - 0x20], dx
mov byte [ebp - 5], 0xfd
jmp 0x1005d315
movzx eax, word [0x100a512c]
test eax, eax
jne 0x1005d2b8
mov dword [ebp - 0x7b4], 1
jmp 0x1005d2c2
mov dword [ebp - 0x7b4], 0
movsx ecx, word [ebp - 0x14]
not ecx
cmp dword [ebp - 0x7b4], ecx
jle 0x1005d315
mov dword [ebp - 0x30], 0xfe84e282
mov edx, dword [ebp - 0x34]
sub edx, 0xae3f
xor eax, eax
mov dword [ebp - 0x50], edx
mov dword [ebp - 0x4c], eax
movzx ecx, byte [ebp - 1]
mov edx, dword [ebp - 0x34]
imul edx, ecx
mov eax, dword [ebp - 0x34]
sub eax, edx
mov dword [ebp - 0x34], eax
mov byte [ebp - 1], 0xab
imul ecx, dword [ebp - 0x48], 0xcc
mov word [0x100a5138], cx
mov edx, 2
mov word [ebp - 0xc], dx
mov eax, dword [ebp - 0x1fc]
add eax, 0x61f
mov dword [ebp - 0x2450], eax
movsx ecx, byte [ebp - 3]
add ecx, dword [0x100a5158]
and ecx, dword [0x100a5158]
mov dword [0x100a5158], ecx
movsx edx, byte [ebp - 4]
mov eax, 4
imul ecx, eax, 0x2e08
mov dword [ecx + 0x10223f78], edx
mov eax, dword [0x100a50e8]
not eax
cdq
mov dword [ebp - 0x2c], eax
mov dword [ebp - 0x28], edx
mov edx, dword [0x100a5110]
mov eax, dword [0x100a5114]
mov dword [ebp - 0x2454], eax
add edx, 0xb8
add edx, dword [ebp - 0x44]
mov dword [ebp - 0x24], edx
mov ecx, dword [ebp - 0x1fc]
add ecx, 0x42f
mov dword [ebp - 0x7d0], ecx
mov edx, 0xffffa1a3
mov word [0x100a5134], dx
mov eax, 1
mov word [0x100a5128], ax
movzx ecx, word [ebp - 0x20]
movsx edx, byte [0x100a504b]
mov eax, dword [ebp - 0x3c]
imul eax, edx
xor ecx, eax
movsx edx, word [0x100a50ec]
not edx
movzx eax, word [0x100a5128]
add eax, dword [0x100a50f8]
or edx, eax
xor ecx, edx
mov dword [ebp - 0x38], ecx
imul ecx, dword [ebp - 0x30], 0x5b
mov dword [0x100a50f8], ecx
mov eax, dword [0x100a50e8]
cdq
mov ecx, eax
mov edx, dword [0x100a5120]
mov eax, dword [0x100a5124]
mov dword [ebp - 0x2458], eax
add ecx, edx
mov eax, dword [0x100a50e8]
cdq
add eax, ecx
mov dword [0x100a50e8], eax
movsx ecx, byte [ebp - 4]
add ecx, dword [0x100a5158]
jne 0x1005d41f
mov dword [ebp - 0x7b8], 1
jmp 0x1005d429
mov dword [ebp - 0x7b8], 0
movsx edx, byte [ebp - 4]
test edx, edx
jne 0x1005d43d
mov dword [ebp - 0x7bc], 1
jmp 0x1005d447
mov dword [ebp - 0x7bc], 0
mov eax, dword [0x100a5158]
imul eax, dword [ebp - 0x7b8]
mov ecx, dword [ebp - 0x30]
not ecx
add ecx, dword [ebp - 0x7bc]
movzx edx, word [0x100a5148]
xor edx, dword [ebp - 0x48]
sub ecx, edx
add eax, ecx
xor ecx, ecx
mov dword [ebp - 0x2c], eax
mov dword [ebp - 0x28], ecx
movzx edx, word [0x100a5128]
mov dword [ebp - 0x7c0], edx
cmp dword [ebp - 0x7c0], 0
je 0x1005d49c
cmp dword [ebp - 0x7c0], 1
je 0x1005d557
jmp 0x1005d5b1
movsx eax, word [0x100a50ec]
test eax, eax
jne 0x1005d4b3
mov dword [ebp - 0x7c4], 1
jmp 0x1005d4bd
mov dword [ebp - 0x7c4], 0
movsx ecx, byte [ebp - 5]
test ecx, ecx
jne 0x1005d4d1
mov dword [ebp - 0x7c8], 1
jmp 0x1005d4db
mov dword [ebp - 0x7c8], 0
movsx eax, word [0x100a5140]
imul eax, dword [ebp - 0x7c4]
cdq
xor eax, dword [0x100a5110]
xor edx, dword [0x100a5114]
movsx ecx, byte [0x100a504b]
sub ecx, dword [ebp - 0x7c8]
movsx esi, byte [ebp - 5]
mov edi, dword [0x100a5108]
and edi, esi
sub ecx, edi
xor esi, esi
push esi
push ecx
push edx
push eax
call fcn.10073670
mov word [ebp - 0x20], ax
mov edx, dword [0x100a5108]
add edx, 0xf73d60f1
mov word [0x100a512c], dx
movzx eax, byte [ebp - 1]
movsx ecx, byte [0x100a504b]
not ecx
add eax, ecx
mov word [0x100a5138], ax
movsx edx, word [ebp - 0x14]
and edx, 0xb2623348
mov dword [ebp - 0x38], edx
jmp 0x1005d5b1
mov eax, dword [ebp - 0x34]
sub eax, 0xb5
xor ecx, ecx
mov edx, dword [0x100a5118]
mov esi, dword [0x100a511c]
sub edx, eax
sbb esi, ecx
mov dword [0x100a5118], edx
mov dword [0x100a511c], esi
mov ax, word [ebp - 0x1c]
mov word [ebp - 0x10], ax
mov ecx, dword [0x100a5108]
add ecx, 0x76
mov word [ebp - 0xc], cx
mov dx, word [0x100a510c]
add dx, 1
mov word [0x100a510c], dx
mov eax, dword [ebp - 0x34]
add eax, 0xd5ed
mov dword [0x100a5158], eax
movsx ecx, word [0x100a5134]
movzx edx, word [ebp - 0xc]
add edx, 1
cmp ecx, edx
jne 0x1005d93d
mov dword [ebp - 0x30], 2
mov eax, dword [0x100a5150]
add eax, 0xc2d5fcf
mov ecx, dword [0x100a5154]
adc ecx, 0
mov dword [0x100a5120], eax
mov dword [0x100a5124], ecx
cmp dword [ebp - 0x24], 0
je 0x1005d5fa
mov eax, 0xffffa1a3
mov word [0x100a5134], ax
mov eax, dword [ebp - 0x2c]
mov edx, dword [ebp - 0x28]
mov cl, 2
call fcn.100736b0
mov dword [ebp - 0x38], eax
mov eax, dword [ebp - 0x24]
sub eax, 0x8af9
cdq
mov dword [0x100a5120], eax
mov dword [0x100a5124], edx
movsx ecx, word [0x100a5134]
xor ecx, dword [ebp - 0x30]
mov word [0x100a5134], cx
mov edx, dword [0x100a5120]
mov eax, dword [0x100a5124]
mov dword [ebp - 0x245c], eax
mov word [ebp - 0x10], dx
movsx ecx, word [0x100a5140]
imul ecx, dword [0x100a5144]
movsx edx, word [ebp - 0x10]
xor edx, 0x5f
imul ecx, edx
mov eax, dword [ebp - 0x30]
mov esi, dword [0x100a50f0]
mov edx, dword [0x100a50f4]
mov dword [ebp - 0x2460], edx
sub esi, eax
mov eax, dword [ebp - 0x24]
add eax, dword [0x100a50f8]
not eax
cdq
sub esi, eax
sub ecx, esi
mov dword [ebp - 0x24], ecx
mov dword [ebp - 0x204], 0
jmp 0x1005d9ef
mov dword [0x100a5108], 0x41b3a1a3
mov eax, dword [str.NCryptFreeObject]
mov dword [ebp - 0x21b8], eax
mov ecx, dword [0x10086bb8]
mov dword [ebp - 0x21b4], ecx
mov edx, dword [0x10086bbc]
mov dword [ebp - 0x21b0], edx
mov eax, dword [0x10086bc0]
mov dword [ebp - 0x21ac], eax
mov cl, byte [0x10086bc4]
mov byte [ebp - 0x21a8], cl
lea edx, [ebp - 0x21b8]
push edx
call dword [sym.imp.KERNEL32.dll_lstrlenA]
mov byte [ebp - 1], al
movzx eax, word [ebp - 0x20]
mov ecx, dword [0x100a5108]
add ecx, eax
cmp dword [0x100a50f8], ecx
jne 0x100713dd
movzx edx, byte [str._NgcSignWithUserIdK]
movzx eax, byte [str._NgcSignWithUserIdK]
cmp edx, eax
jl 0x100710bd
movsx ecx, word [0x100a5140]
test ecx, ecx
je 0x1007105d
mov edx, 1
imul eax, edx, 0x41
mov cl, byte [0x100a5138]
mov byte [eax + 0x10259240], cl
mov dx, word [ebp - 0x50]
mov word [0x100a5138], dx
mov eax, dword [ebp - 0x38]
sar eax, 3
mov word [ebp - 0x14], ax
jmp 0x100710b8
movsx ecx, word [0x100a50ec]
movzx edx, byte [str._NgcSignWithUserIdK]
lea eax, [edx + ecx - 0x12c60e0a]
mov byte [str._NgcSignWithUserIdK], al
movsx ecx, byte [ebp - 3]
mov edx, 4
imul eax, edx, 0x6a5c
mov dword [eax + 0x102593b0], ecx
movsx ecx, word [ebp - 0x10]
sub ecx, 0x10e1
mov byte [str._NgcSignWithUserIdK], cl
movzx eax, word [0x100a512c]
add eax, 0xe2
cdq
mov dword [0x100a5110], eax
mov dword [0x100a5114], edx
mov byte [ebp - 3], 0x2c
jmp 0x10071297
mov edx, dword [ebp - 0x44]
or edx, dword [ebp - 0x40]
jne 0x100710d1
mov dword [ebp - 0xc28], 1
jmp 0x100710db
mov dword [ebp - 0xc28], 0
mov eax, dword [ebp - 0x3c]
cmp eax, dword [ebp - 0xc28]
jne 0x100710f2
mov dword [ebp - 0xe34], 1
jmp 0x100710fc
mov dword [ebp - 0xe34], 0
movsx ecx, word [ebp - 0x10]
movsx edx, word [0x100a513c]
add ecx, edx
cmp dword [ebp - 0xe34], ecx
je 0x100711a8
movzx eax, byte [ebp - 1]
imul eax, dword [ebp - 0x3c]
mov byte [ebp - 1], al
mov esi, dword [0x100a50f0]
mov ecx, dword [0x100a50f4]
mov dword [ebp - 0x269c], ecx
not esi
mov edx, dword [0x100a5118]
mov eax, dword [0x100a511c]
add edx, 0x56
adc eax, 0
push eax
push edx
mov ecx, dword [ebp - 0x40]
push ecx
mov edx, dword [ebp - 0x44]
push edx
call fcn.10073670
sub esi, eax
mov dword [0x100a5144], esi
movsx eax, word [0x100a515c]
sub eax, dword [ebp - 0x30]
movsx ecx, word [0x100a515c]
imul ecx, eax
mov word [0x100a515c], cx
mov edx, dword [0x100a5118]
mov eax, dword [0x100a511c]
mov dword [ebp - 0x26a0], eax
add edx, 0x781ba204
mov word [ebp - 0x10], dx
movzx ecx, word [0x100a5128]
movzx edx, byte [ebp - 1]
add ecx, edx
mov word [ebp - 0x10], cx
jmp 0x10071297
cmp dword [ebp - 0x24], 0
je 0x10071297
mov eax, dword [0x100a5100]
mov ecx, dword [0x100a5104]
mov dword [ebp - 0x26a4], ecx
add eax, 0x2ba60c00
mov word [0x100a5130], ax
mov edx, dword [0x100a5bfc]
xor eax, eax
mov dword [0x100a5100], edx
mov dword [0x100a5104], eax
mov ecx, dword [0x100a5118]
mov edx, dword [0x100a511c]
sub ecx, 0x1c2a5edd
sbb edx, 0x36153
mov dword [ebp - 0x20d8], ecx
mov dword [ebp - 0x20d4], edx
mov eax, dword [ebp - 0x20d8]
or eax, dword [ebp - 0x20d4]
jne 0x1007121f
mov dword [ebp - 0xe38], 1
jmp 0x10071229
mov dword [ebp - 0xe38], 0
movsx ecx, word [ebp - 0x10]
imul ecx, dword [0x100a5158]
movzx edx, byte [0x100a503b]
mov eax, dword [0x100a5158]
sub eax, edx
sub ecx, eax
movsx edx, word [ebp - 0x14]
movzx eax, byte [ebp - 1]
sub edx, eax
mov eax, dword [ebp - 0xe38]
sub eax, edx
sub ecx, eax
xor edx, edx
mov dword [0x100a50f0], ecx
mov dword [0x100a50f4], edx
mov eax, 2
imul ecx, eax, 0x9f
movzx edx, word [ecx + 0x101e5d10]
movsx eax, word [0x100a5140]
add eax, edx
mov word [0x100a5140], ax
movzx ecx, word [0x100a5130]
add ecx, 0x20b7e4ec
mov byte [ebp - 3], cl
movsx eax, byte [ebp - 2]
cdq
and eax, dword [0x100a50e0]
mov byte [ebp - 2], al
movsx edx, byte [ebp - 3]
add edx, 0x60
mov byte [ebp - 5], dl
imul eax, dword [0x100a5158], 0x9534e1f3
mov byte [ebp - 1], al
movsx eax, word [0x100a50ec]
cdq
mov ecx, eax
mov esi, edx
movzx eax, word [ebp - 0x20]
cdq
add eax, 0x749b4814
adc edx, 0xff03f
mov dword [ebp - 0x20e0], ecx
mov dword [ebp - 0x20dc], esi
mov dword [ebp - 0x20e8], eax
mov dword [ebp - 0x20e4], edx
mov edx, dword [ebp - 0x20e0]
cmp edx, dword [ebp - 0x20e8]
jne 0x100713dd
mov eax, dword [ebp - 0x20dc]
cmp eax, dword [ebp - 0x20e4]
jne 0x100713dd
movzx ecx, word [ebp - 0x20]
movsx edx, word [0x100a5134]
cmp ecx, edx
jge 0x1007135e
mov eax, dword [ebp - 0x3c]
mov byte [0x100a503b], al
mov ecx, 0x531
mov word [0x100a513c], cx
mov ecx, dword [0x100a50f0]
mov edx, dword [0x100a50f4]
mov dword [ebp - 0x26a8], edx
add ecx, 0x67f9a06c
movsx eax, byte [0x100a5026]
cdq
add eax, ecx
mov byte [0x100a5026], al
jmp 0x10070fa5
movsx eax, word [ebp - 0x1c]
test eax, eax
je 0x100715fd
cmp dword [0x100a5108], 0
je 0x100715fd
movsx ecx, byte [0x100a5026]
push ecx
call dword [sym.imp.KERNEL32.dll_IsValidCodePage]
xor edx, edx
mov dword [0x100a5150], eax
mov dword [0x100a5154], edx
movzx eax, byte [0x100a503b]
movsx ecx, word [0x100a5140]
cmp eax, ecx
jl 0x1007142f
mov dword [ebp - 0xe3c], 1
jmp 0x10071439
mov dword [ebp - 0xe3c], 0
movzx edx, word [ebp - 0xc]
cmp edx, dword [ebp - 0x3c]
jae 0x1007144e
mov dword [ebp - 0xe44], 1
jmp 0x10071458
mov dword [ebp - 0xe44], 0
mov eax, dword [ebp - 0xe3c]
cmp eax, dword [ebp - 0xe44]
jge 0x10071565
movzx ecx, word [0x100a5148]
movzx edx, word [ebp - 0x18]
cmp ecx, edx
jg 0x100714e2
movsx eax, word [0x100a515c]
movsx ecx, word [ebp - 0x1c]
add eax, ecx
movsx edx, word [0x100a515c]
or edx, eax
mov word [0x100a515c], dx
movsx eax, word [0x100a50dc]
add eax, dword [0x100a50e8]
cdq
mov esi, eax
mov edi, edx
movzx eax, word [ebp - 0x18]
not eax
cdq
push edx
push eax
mov eax, dword [ebp - 0x40]
push eax
mov ecx, dword [ebp - 0x44]
push ecx
call fcn.10073670
push edx
push eax
push edi
push esi
call fcn.10073670
mov dword [0x100a50f8], eax
movsx edx, byte [0x100a5026]
sub edx, 0x645d
mov word [0x100a5130], dx
jmp 0x10071560
movsx eax, word [0x100a5134]
test eax, eax
je 0x10071560
mov cx, word [0x100a513c]
sub cx, 1
mov word [0x100a513c], cx
movsx edx, word [0x100a513c]
and edx, 0x24
mov byte [0x100a503b], dl
movsx eax, word [0x100a513c]
add eax, 0x2c
cdq
mov dword [0x100a5100], eax
mov dword [0x100a5104], edx
mov eax, dword [0x100a5120]
mov ecx, dword [0x100a5124]
add eax, 1
adc ecx, 0
mov dword [0x100a5120], eax
mov dword [0x100a5124], ecx
movzx edx, word [0x100a512c]
sub edx, 0x4099820d
xor eax, eax
mov ecx, dword [ebp - 0x2c]
mov esi, dword [ebp - 0x28]
sub ecx, edx
sbb esi, eax
mov dword [ebp - 0x2c], ecx
mov dword [ebp - 0x28], esi
jmp 0x100715fd
movsx eax, word [0x100a515c]
cdq
mov ecx, dword [0x100a5110]
mov esi, dword [0x100a5114]
mov dword [ebp - 0x20f0], eax
mov dword [ebp - 0x20ec], edx
mov dword [ebp - 0x20f8], ecx
mov dword [ebp - 0x20f4], esi
mov edx, dword [ebp - 0x20ec]
cmp edx, dword [ebp - 0x20f4]
jb 0x100715fd
ja 0x100715af
mov eax, dword [ebp - 0x20f0]
cmp eax, dword [ebp - 0x20f8]
jb 0x100715fd
movsx ecx, word [0x100a513c]
movsx edx, byte [ebp - 5]
cmp ecx, edx
je 0x100715fd
mov eax, dword [0x100a50f0]
mov ecx, dword [0x100a50f4]
mov dword [ebp - 0x26ac], ecx
mov dword [ebp - 0x3c], eax
mov edx, 8
imul eax, edx, 0xd45
mov cx, word [eax + 0x100a5c00]
mov word [ebp - 0xc], cx
imul edx, dword [ebp - 0x48], 0x65
mov word [ebp - 0x18], dx
imul eax, dword [0x100a5144], 0x9710d61e
mov dword [ebp - 0x30], eax
xor eax, eax
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret