Function at 0x10010c40
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x10066ddf
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x3dc
push esi
and dword [ebp - 0x138], 0
push 2
lea ecx, [ebp - 0x2d0]
call fcn.100165ef
and dword [ebp - 4], 0
mov dword [ebp - 0x4c], 0x2f4a8b10
mov dword [ebp - 0x60], 0
jmp 0x10010c8e
mov eax, dword [ebp - 0x60]
inc eax
mov dword [ebp - 0x60], eax
cmp dword [ebp - 0x60], 2
jge 0x10010caa
push dword [ebp - 0x60]
lea ecx, [ebp - 0x2d0]
call fcn.100166d5
mov dword [eax], 0x5c96
jmp 0x10010c87
push 1
lea ecx, [ebp - 0x2d0]
call fcn.100166d5
mov eax, dword [eax]
mov dword [ebp - 0x4c], eax
mov dword [ebp - 0x4c], 0
jmp 0x10010ccc
mov eax, dword [ebp - 0x4c]
inc eax
mov dword [ebp - 0x4c], eax
cmp dword [ebp - 0x4c], 0x13
jge 0x10010e8e
mov dword [ebp - 0x98], 0x3eee2fde
mov dword [ebp - 0x98], 0
jmp 0x10010cf9
mov eax, dword [ebp - 0x98]
dec eax
mov dword [ebp - 0x98], eax
cmp dword [ebp - 0x98], 0xfffffff9
jg 0x10010e89
mov dword [ebp - 0x68], 0x99d94b4b
mov dword [ebp - 0x68], 0x11
jmp 0x10010d1d
mov eax, dword [ebp - 0x68]
dec eax
mov dword [ebp - 0x68], eax
cmp dword [ebp - 0x68], 0xfffffff8
jle 0x10010e84
push 2
lea ecx, [ebp - 0x33c]
call fcn.100165ef
mov byte [ebp - 4], 1
mov dword [ebp - 0x44], 0
jmp 0x10010d48
mov eax, dword [ebp - 0x44]
inc eax
mov dword [ebp - 0x44], eax
cmp dword [ebp - 0x44], 1
jge 0x10010d5b
mov eax, dword [ebp - 0x44]
mov dword [ebp + eax*4 - 0x54], 0xc17e5c28
jmp 0x10010d41
lea eax, [ebp - 0x33c]
push eax
lea eax, [ebp - 0x44]
push eax
call fcn.100109bb
pop ecx
pop ecx
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0x54], 0
jmp 0x10010d92
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x54]
inc eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x54], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x54], 1
jg 0x10010e70
mov dword [ebp - 0x70], 0xffffffff
mov dword [ebp - 0x374], 0xffffffff
mov dword [ebp - 0x70], 0
jmp 0x10010dc4
mov eax, dword [ebp - 0x70]
inc eax
mov dword [ebp - 0x70], eax
cmp dword [ebp - 0x70], 1
jg 0x10010e6b
mov dword [ebp - 0x360], 7
mov dword [ebp - 0xa0], 0
jmp 0x10010df1
mov eax, dword [ebp - 0xa0]
inc eax
mov dword [ebp - 0xa0], eax
cmp dword [ebp - 0xa0], 1
jge 0x10010e0a
mov eax, dword [ebp - 0xa0]
mov dword [ebp + eax*4 - 0x78], 0x874b28e
jmp 0x10010de4
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0x78], 0
jmp 0x10010e2f
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x78]
inc eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x78], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x78], 1
jg 0x10010e66
mov dword [ebp - 0x22c], 0x4957
lea eax, [ebp - 0x22c]
push eax
call fcn.10010a03
pop ecx
mov byte [ebp - 0x30], 0
movzx eax, byte [ebp - 0x30]
test eax, eax
je 0x10010e64
call fcn.10010a1c
jmp 0x10010e1a
jmp 0x10010dbd
jmp 0x10010d7d
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x33c]
call fcn.10016651
jmp 0x10010d16
jmp 0x10010cec
jmp 0x10010cc5
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x2d0]
call fcn.10016651
mov byte [ebp - 0xe4], 5
mov byte [ebp - 0xe3], 0x2a
mov byte [ebp - 0xe2], 0xf
mov byte [ebp - 0xe1], 0x16
mov byte [ebp - 0xe0], 6
mov byte [ebp - 0xdf], 0x17
mov byte [ebp - 0xde], 0x12
mov byte [ebp - 0xdd], 0x14
mov byte [ebp - 0xdc], 7
mov byte [ebp - 0xdb], 0x1b
mov byte [ebp - 0xda], 0x15
mov byte [ebp - 0xd9], 0x1e
mov byte [ebp - 0xd8], 1
mov byte [ebp - 0xd7], 0x30
mov byte [ebp - 0xd6], 0x17
mov byte [ebp - 0xd5], 0xe
mov byte [ebp - 0xd4], 0x16
mov byte [ebp - 0xd3], 0xf
mov byte [ebp - 0xd2], 4
mov byte [ebp - 0xd1], 0x12
mov byte [ebp - 0xd0], 0xc
mov byte [ebp - 0xcf], 8
mov byte [ebp - 0xce], 0x10
mov byte [ebp - 0xcd], 0x1c
mov byte [ebp - 0xcc], 8
mov byte [ebp - 0xcb], 0x18
mov byte [ebp - 0xca], 0x18
mov byte [ebp - 0xc9], 0x10
mov byte [ebp - 0xc8], 0
mov byte [ebp - 0xc7], 0x18
mov byte [ebp - 0xc6], 0xb
mov byte [ebp - 0xc5], 0xd
mov byte [ebp - 0xc4], 0xe
mov byte [ebp - 0xc3], 3
mov byte [ebp - 0xc2], 2
mov byte [ebp - 0xc1], 0xc
mov byte [ebp - 0xc0], 0x14
mov byte [ebp - 0xbf], 0x16
mov byte [ebp - 0xbe], 3
mov byte [ebp - 0xbd], 0x11
mov byte [ebp - 0xbc], 0x19
mov byte [ebp - 0xbb], 0x1e
mov byte [ebp - 0xba], 0xd
mov byte [ebp - 0xb9], 0x14
mov byte [ebp - 0xb8], 0x11
mov byte [ebp - 0xb7], 0x1c
mov byte [ebp - 0xb6], 0xa
mov byte [ebp - 0xb5], 0x19
mov byte [ebp - 0xb4], 0x13
mov byte [ebp - 0xb3], 0x1f
mov byte [ebp - 0xb2], 9
mov byte [ebp - 0xb1], 0x1e
mov byte [ebp - 0xb0], 1
mov byte [ebp - 0xaf], 8
xor eax, eax
inc eax
shl eax, 0
movzx eax, byte [ebp + eax - 0xe4]
or eax, 0x4c
xor ecx, ecx
inc ecx
shl ecx, 0
movzx ecx, byte [ebp + ecx - 0xe4]
and ecx, 0x4c
sub eax, ecx
xor ecx, ecx
inc ecx
imul ecx, ecx, 0
movzx ecx, byte [ebp + ecx - 0xe4]
mov byte [ebp + ecx - 0x310], al
mov dword [ebp - 0x14], 2
and dword [ebp - 0x3c], 0
jmp 0x10011065
mov eax, dword [ebp - 0x14]
inc eax
inc eax
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 0x36
jae 0x10011134
xor eax, eax
inc eax
imul eax, eax, 0
movzx eax, byte [ebp + eax - 0xe4]
lea eax, [eax + eax + 2]
cmp dword [ebp - 0x14], eax
jne 0x100110ac
mov eax, dword [ebp - 0x14]
movzx eax, byte [ebp + eax - 0xe4]
inc eax
mov dword [ebp - 0x3c], eax
mov eax, dword [ebp - 0x14]
movzx eax, byte [ebp + eax - 0xe4]
mov ecx, dword [ebp - 0x14]
lea eax, [ecx + eax - 1]
mov dword [ebp - 0x14], eax
jmp 0x1001105d
mov eax, dword [ebp - 0x14]
movzx eax, byte [ebp + eax - 0xe3]
mov ecx, dword [ebp - 0x14]
sub ecx, dword [ebp - 0x3c]
movzx ecx, byte [ebp + ecx - 0xe6]
movsx ecx, byte [ebp + ecx - 0x310]
add eax, ecx
mov ecx, dword [ebp - 0x14]
movzx ecx, byte [ebp + ecx - 0xe3]
mov edx, dword [ebp - 0x14]
sub edx, dword [ebp - 0x3c]
movzx edx, byte [ebp + edx - 0xe6]
movsx edx, byte [ebp + edx - 0x310]
and ecx, edx
sub eax, ecx
mov ecx, dword [ebp - 0x14]
movzx ecx, byte [ebp + ecx - 0xe3]
mov edx, dword [ebp - 0x14]
sub edx, dword [ebp - 0x3c]
movzx edx, byte [ebp + edx - 0xe6]
movsx edx, byte [ebp + edx - 0x310]
and ecx, edx
sub eax, ecx
mov ecx, dword [ebp - 0x14]
movzx ecx, byte [ebp + ecx - 0xe4]
mov byte [ebp + ecx - 0x310], al
and dword [ebp - 0x3c], 0
jmp 0x1001105d
xor eax, eax
inc eax
imul eax, eax, 0x1a
mov byte [ebp + eax - 0x310], 0
mov dword [ebp - 0x10], 0xfffffffc
mov dword [ebp - 0x24], 0xffffffff
mov dword [ebp - 0x1c], 0xfffe
mov dword [ebp - 0x20], 0x11589a45
mov dword [ebp - 0xa4], 0x88558b04
mov dword [ebp - 0x38], 0
mov dword [ebp - 0x2b0], 1
mov dword [ebp - 0x2ac], 1
mov dword [ebp - 0x2a8], 1
mov dword [ebp - 0x2a4], 1
lea ecx, [ebp - 0xf6]
call fcn.10016739
push eax
lea eax, [ebp - 0x2a0]
push eax
lea eax, [ebp - 0x2b0]
push eax
lea ecx, [ebp - 0x3e8]
call fcn.1001673c
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0x268]
call fcn.1001662b
mov dword [ebp - 4], 2
mov dword [ebp - 0x1e4], 0xffffffff
mov dword [ebp - 0x104], 0
cmp dword [ebp - 0x10], 0
je 0x100115f4
cmp dword [ebp - 0x10], 0
jne 0x10011203
mov dword [ebp - 0x1f0], 1
jmp 0x1001120a
and dword [ebp - 0x1f0], 0
cmp dword [ebp - 0x10], 1
jne 0x1001121c
mov dword [ebp - 0x1a4], 1
jmp 0x10011223
and dword [ebp - 0x1a4], 0
cmp dword [ebp - 0x1a4], 0xd4c3f121
ja 0x1001123b
mov dword [ebp - 0x228], 1
jmp 0x10011242
and dword [ebp - 0x228], 0
cmp dword [ebp - 0x228], 0
jle 0x10011257
mov dword [ebp - 0x144], 1
jmp 0x1001125e
and dword [ebp - 0x144], 0
mov eax, dword [ebp - 0x10]
cmp dword [ebp - 0x144], eax
jge 0x10011275
mov dword [ebp - 0x234], 1
jmp 0x1001127c
and dword [ebp - 0x234], 0
mov eax, dword [ebp - 0x10]
mov dword [ebp - 0x318], eax
mov eax, dword [ebp - 0x10]
mov dword [ebp - 0x31c], eax
mov eax, dword [ebp - 0x10]
mov dword [ebp - 0x324], eax
mov eax, dword [ebp - 0x10]
cmp dword [ebp - 0x10], eax
jge 0x100112ae
cmp dword [ebp - 0x10], 0
jne 0x100112ae
and dword [ebp - 0x10c], 0
jmp 0x100112b8
mov dword [ebp - 0x10c], 1
mov eax, dword [ebp - 0x10c]
mov dword [ebp - 0x24], eax
mov eax, dword [ebp - 0x10]
cmp dword [ebp - 0x24], eax
jle 0x100112d5
mov dword [ebp - 0x1e8], 1
jmp 0x100112dc
and dword [ebp - 0x1e8], 0
mov eax, dword [ebp - 0x10]
cmp dword [ebp - 0x1e8], eax
jne 0x100112f3
mov dword [ebp - 0x114], 1
jmp 0x100112fa
and dword [ebp - 0x114], 0
mov eax, dword [ebp - 0x10]
cmp dword [ebp - 0x114], eax
jl 0x10011311
mov dword [ebp - 0x11c], 1
jmp 0x10011318
and dword [ebp - 0x11c], 0
mov eax, dword [ebp - 0x1f0]
cmp eax, dword [ebp - 0x11c]
jne 0x10011332
mov dword [ebp - 0x1f8], 1
jmp 0x10011339
and dword [ebp - 0x1f8], 0
mov eax, dword [ebp - 0x10]
cmp dword [ebp - 0x1f8], eax
jne 0x10011350
mov dword [ebp - 0x254], 1
jmp 0x10011357
and dword [ebp - 0x254], 0
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0x32c], eax
mov eax, dword [ebp - 0x10]
cmp dword [ebp - 0x24], eax
jne 0x10011374
mov dword [ebp - 0x230], 1
jmp 0x1001137b
and dword [ebp - 0x230], 0
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x368], eax
mov eax, dword [ebp - 0x24]
mov dword [ebp - 0x370], eax
mov eax, dword [ebp - 0x10]
cmp dword [ebp - 0x24], eax
jl 0x100113a1
mov dword [ebp - 0x124], 1
jmp 0x100113a8
and dword [ebp - 0x124], 0
cmp dword [ebp - 0x124], 0
jl 0x100113b7
cmp dword [ebp - 0x1c], 0
je 0x100113be
push 2
pop eax
test eax, eax
jne 0x100113d3
cmp dword [ebp - 0x24], 0
jne 0x100113d3
cmp dword [ebp - 0x10], 0
jne 0x100113d3
and dword [ebp - 0x200], 0
jmp 0x100113dd
mov dword [ebp - 0x200], 1
mov eax, dword [ebp - 0x20]
cmp dword [ebp - 0x200], eax
jg 0x100113f4
mov dword [ebp - 0x12c], 1
jmp 0x100113fb
and dword [ebp - 0x12c], 0
mov eax, dword [ebp - 0x10]
cmp dword [ebp - 0x12c], eax
jle 0x10011418
mov eax, 0xfce9
test eax, eax
jne 0x10011418
and dword [ebp - 0x208], 0
jmp 0x10011422
mov dword [ebp - 0x208], 1
mov eax, dword [ebp - 0x10]
sub eax, dword [ebp - 0x208]
mov dword [ebp - 0x134], 1
jmp 0x1001143e
mov eax, dword [ebp - 0x1c]
add eax, dword [ebp - 0x134]
cmp eax, dword [ebp - 0x1c]
jne 0x10011458
mov dword [ebp - 0x210], 1
jmp 0x1001145f
and dword [ebp - 0x210], 0
mov eax, dword [ebp - 0x210]
sub eax, dword [ebp - 0x1c]
add eax, 0xa
mov dword [ebp - 0xa4], eax
mov eax, dword [ebp - 0x1c]
cmp dword [ebp - 0xa4], eax
jge 0x10011488
mov dword [ebp - 0x13c], 1
jmp 0x1001148f
and dword [ebp - 0x13c], 0
mov eax, dword [ebp - 0x13c]
add eax, 0x3d55f422
jne 0x100114ab
cmp dword [ebp - 0x20], 0
jne 0x100114ab
and dword [ebp - 0x218], 0
jmp 0x100114b5
mov dword [ebp - 0x218], 1
mov eax, dword [ebp - 0x1c]
cmp dword [ebp - 0x218], eax
je 0x100114cc
mov dword [ebp - 0x220], 1
jmp 0x100114d3
and dword [ebp - 0x220], 0
mov eax, dword [ebp - 0x20]
cmp dword [ebp - 0x220], eax
jne 0x100114ea
mov dword [ebp - 0x20c], 1
jmp 0x100114f1
and dword [ebp - 0x20c], 0
mov eax, dword [ebp - 0x10]
cmp dword [ebp - 0x20c], eax
jge 0x10011508
mov dword [ebp - 0x14c], 1
jmp 0x1001150f
and dword [ebp - 0x14c], 0
mov eax, dword [ebp - 0x1c]
imul eax, dword [ebp - 0x14c]
cmp eax, dword [ebp - 0x10]
jl 0x1001152a
mov dword [ebp - 0x1bc], 1
jmp 0x10011531
and dword [ebp - 0x1bc], 0
cmp dword [ebp - 0x1bc], 2
jae 0x10011546
mov dword [ebp - 0x154], 1
jmp 0x1001154d
and dword [ebp - 0x154], 0
mov eax, dword [ebp - 0x154]
mov dword [ebp - 0x38], eax
cmp dword [ebp - 0x38], 0
je 0x1001156f
push 8
pop eax
test eax, eax
je 0x1001156f
mov dword [ebp - 0x1f4], 1
jmp 0x10011576
and dword [ebp - 0x1f4], 0
mov eax, dword [ebp - 0x1c]
cmp dword [ebp - 0x1f4], eax
jle 0x1001158d
mov dword [ebp - 0x238], 1
jmp 0x10011594
and dword [ebp - 0x238], 0
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0x378], eax
mov eax, dword [ebp - 0x24]
mov dword [ebp - 0x380], eax
cmp dword [ebp - 0x10], 0xffffffff
je 0x100115b8
mov dword [ebp - 0x15c], 1
jmp 0x100115bf
and dword [ebp - 0x15c], 0
mov eax, dword [ebp - 0x1c]
cmp dword [ebp - 0x15c], eax
jle 0x100115d6
mov dword [ebp - 0x1c4], 1
jmp 0x100115dd
and dword [ebp - 0x1c4], 0
mov eax, dword [ebp - 0x1c4]
sub eax, dword [ebp - 0x1c]
je 0x100115f4
mov dword [ebp - 0x164], 1
jmp 0x100115fb
and dword [ebp - 0x164], 0
mov eax, dword [ebp - 0x20]
imul eax, dword [ebp - 0x164]
cmp eax, dword [ebp - 0x20]
jl 0x10011616
mov dword [ebp - 0xe8], 1
jmp 0x1001161d
and dword [ebp - 0xe8], 0
push 2
lea ecx, [ebp - 0x268]
call fcn.100166d5
mov ecx, dword [ebp - 0xe8]
mov dword [eax], ecx
mov eax, dword [ebp - 0x20]
add eax, dword [ebp - 0xe8]
cmp eax, dword [ebp - 0x1c]
jge 0x10011685
mov dword [ebp - 0x25c], 0
mov dword [ebp - 0x20], 0
jmp 0x1001165a
mov eax, dword [ebp - 0x20]
inc eax
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 0x15
jle 0x1001166f
lea eax, [ebp - 0x25c]
push eax
call fcn.10010a2b
pop ecx
jmp 0x10011653
mov byte [ebp - 0x31], 0
movzx eax, byte [ebp - 0x31]
test eax, eax
je 0x10011680
call fcn.10010a44
jmp 0x100119b4
mov dword [ebp - 0x80], 0xe89e
mov dword [ebp - 0x240], 0xe340cfce
mov dword [ebp - 0xa8], 0xb14a51e2
mov dword [ebp - 0xac], 0
mov dword [ebp - 0x18c], 8
push 2
lea ecx, [ebp - 0x2f4]
call fcn.100165ef
mov byte [ebp - 4], 3
lea eax, [ebp - 0x2f4]
push eax
lea eax, [ebp - 0x388]
push eax
call fcn.10010a57
pop ecx
pop ecx
cmp dword [ebp - 0x80], 0
jne 0x100116f2
mov eax, 0xf7cc8272
test eax, eax
jne 0x100116f2
and dword [ebp - 0x21c], 0
jmp 0x100116fc
mov dword [ebp - 0x21c], 1
mov eax, dword [ebp - 0x21c]
sub eax, dword [ebp - 0x80]
mov dword [ebp - 0x240], eax
cmp dword [ebp - 0xa8], 0xec4
je 0x10011723
mov dword [ebp - 0x16c], 1
jmp 0x1001172a
and dword [ebp - 0x16c], 0
mov eax, dword [ebp - 0xa8]
cmp dword [ebp - 0x16c], eax
je 0x10011744
mov dword [ebp - 0x1cc], 1
jmp 0x1001174b
and dword [ebp - 0x1cc], 0
mov dword [ebp - 0x24], 0x93cdb7cf
mov eax, dword [ebp - 0x1cc]
add eax, 8
cmp dword [ebp - 0x24], eax
jle 0x1001176c
mov dword [ebp - 0x174], 1
jmp 0x10011773
and dword [ebp - 0x174], 0
mov eax, dword [ebp - 0x20]
cmp eax, dword [ebp - 0x174]
jg 0x1001178a
mov dword [ebp - 0x1fc], 1
jmp 0x10011791
and dword [ebp - 0x1fc], 0
push 2
lea ecx, [ebp - 0x268]
call fcn.100166d5
mov eax, dword [eax]
sub eax, dword [ebp - 0x1fc]
mov dword [ebp - 0xac], eax
cmp dword [ebp - 0xac], 0x31225765
jg 0x100117c4
mov dword [ebp - 0x17c], 1
jmp 0x100117cb
and dword [ebp - 0x17c], 0
mov eax, dword [ebp - 0x80]
add eax, dword [ebp - 0x17c]
je 0x10011860
cmp dword [ebp - 0x18c], 0
jne 0x10011843
cmp dword [ebp - 0xa8], 0
jne 0x10011801
cmp dword [ebp - 0xac], 0x9818ef2a
je 0x10011801
and dword [ebp - 0x1d4], 0
jmp 0x1001180b
mov dword [ebp - 0x1d4], 1
push 3
pop eax
sub eax, dword [ebp - 0x1d4]
cmp eax, dword [ebp - 0xa8]
jl 0x10011828
mov dword [ebp - 0x184], 1
jmp 0x1001182f
and dword [ebp - 0x184], 0
imul eax, dword [ebp - 0x184], 0
test eax, eax
jne 0x10011843
and dword [ebp - 0x214], 0
jmp 0x1001184d
mov dword [ebp - 0x214], 1
mov eax, dword [ebp - 0x214]
neg eax
add eax, dword [ebp - 0x10]
mov dword [ebp - 0x24], eax
jmp 0x100119a5
mov dword [ebp - 0x284], 0x626c4802
mov dword [ebp - 0x280], 0x626c4802
mov dword [ebp - 0x27c], 0x626c4802
mov dword [ebp - 0x278], 0x626c4802
lea eax, [ebp - 0x80]
push eax
lea eax, [ebp - 0x2f4]
push eax
call fcn.10010a9c
pop ecx
pop ecx
mov dword [ebp - 0x38], 0
jmp 0x100118aa
mov eax, dword [ebp - 0x38]
dec eax
mov dword [ebp - 0x38], eax
cmp dword [ebp - 0x38], 0xfffffffd
jl 0x100119a5
mov dword [ebp - 0x88], 0xfc02
cmp dword [ebp - 0x88], 0
je 0x100118f2
mov eax, dword [ebp - 0xa4]
push 4
pop ecx
shl ecx, 1
mov ecx, dword [ebp + ecx - 0x284]
add ecx, dword [ebp - 0x1e4]
imul eax, ecx
test eax, eax
je 0x100118f2
mov dword [ebp - 0x1dc], 1
jmp 0x100118f9
and dword [ebp - 0x1dc], 0
mov eax, dword [ebp - 0x18c]
cmp dword [ebp - 0x1dc], eax
je 0x10011913
mov dword [ebp - 0x194], 1
jmp 0x1001191a
and dword [ebp - 0x194], 0
mov eax, dword [ebp - 0x88]
cmp dword [ebp - 0x194], eax
je 0x10011934
mov dword [ebp - 0x250], 1
jmp 0x1001193b
and dword [ebp - 0x250], 0
push 4
pop eax
shl eax, 1
mov ecx, dword [ebp - 0xac]
cmp dword [ebp + eax - 0x284], ecx
jg 0x10011961
cmp dword [ebp - 0x88], 0
jne 0x10011961
and dword [ebp - 0x204], 0
jmp 0x1001196b
mov dword [ebp - 0x204], 1
cmp dword [ebp - 0x204], 0x871cfee8
jb 0x10011983
mov dword [ebp - 0x19c], 1
jmp 0x1001198a
and dword [ebp - 0x19c], 0
mov eax, dword [ebp - 0x88]
imul eax, dword [ebp - 0x19c]
imul eax, eax, 0
mov dword [ebp - 0x104], eax
jmp 0x100118a3
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x2f4]
call fcn.10016651
lea eax, [ebp - 0x24]
push eax
lea eax, [ebp - 0x1c]
push eax
lea eax, [ebp - 0x1e4]
push eax
lea eax, [ebp - 0x104]
push eax
lea eax, [ebp - 0x20]
push eax
lea eax, [ebp - 0xa4]
push eax
lea eax, [ebp - 0x268]
push eax
call fcn.10010ac4
add esp, 0x1c
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x268]
call fcn.10016651
lea eax, [ebp - 0x310]
push eax
lea ecx, [ebp - 0x3d0]
call fcn.100164bf
mov dword [ebp - 4], 4
mov dword [ebp - 0x158], 0x64fd9e2a
mov dword [ebp - 0x40], 1
mov dword [ebp - 0x5c], 1
mov dword [ebp - 0x148], 0xfffffffc
mov dword [ebp - 0x58], 0x7ea4c57
mov dword [ebp - 0x178], 0xf30b91ee
mov dword [ebp - 0xec], 0xfff8
mov dword [ebp - 0xf4], 1
mov dword [ebp - 0x248], 1
mov dword [ebp - 0x90], 0
jmp 0x10011a76
mov eax, dword [ebp - 0x90]
inc eax
mov dword [ebp - 0x90], eax
cmp dword [ebp - 0x90], 2
jge 0x10011a92
mov eax, dword [ebp - 0x90]
mov dword [ebp + eax*4 - 0x100], 1
jmp 0x10011a69
mov eax, dword [ebp - 0x158]
mov dword [ebp - 0x224], eax
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x224]
mov dword [ebp + eax - 0x100], ecx
cmp dword [ebp - 0x224], 0
jne 0x10011b44
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x100]
add eax, 0x6b2f0b0d
mov dword [ebp - 0x1ac], eax
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x1ac]
mov dword [ebp + eax - 0x100], ecx
cmp dword [ebp - 0x1ac], 0x839e071a
jne 0x10011b01
mov dword [ebp - 0x1ec], 1
jmp 0x10011b08
and dword [ebp - 0x1ec], 0
mov eax, dword [ebp - 0x1ec]
mov dword [ebp - 0x5c], eax
mov eax, dword [ebp - 0x40]
cmp dword [ebp - 0x5c], eax
jge 0x10011b25
mov dword [ebp - 0x1b4], 1
jmp 0x10011b2c
and dword [ebp - 0x1b4], 0
mov eax, dword [ebp - 0x40]
imul eax, dword [ebp - 0x1b4]
cmp eax, 2
je 0x10011b44
and dword [ebp - 0x140], 0
jmp 0x10011b4e
mov dword [ebp - 0x140], 1
mov eax, dword [ebp - 0x140]
mov dword [ebp - 0x148], eax
mov eax, dword [ebp - 0x40]
cmp dword [ebp - 0x148], eax
jg 0x10011b71
mov dword [ebp - 0x150], 1
jmp 0x10011b78
and dword [ebp - 0x150], 0
mov eax, dword [ebp - 0x150]
sub eax, dword [ebp - 0x158]
cmp eax, 5
jne 0x10011b95
mov dword [ebp - 0x160], 1
jmp 0x10011b9c
and dword [ebp - 0x160], 0
mov eax, dword [ebp - 0x40]
cmp dword [ebp - 0x160], eax
jle 0x10011bb3
mov dword [ebp - 0x168], 1
jmp 0x10011bba
and dword [ebp - 0x168], 0
mov eax, dword [ebp - 0x40]
add eax, dword [ebp - 0x168]
mov dword [ebp - 0x58], eax
jne 0x10011bda
mov eax, 0x3799
test eax, eax
jne 0x10011bda
and dword [ebp - 0x170], 0
jmp 0x10011be4
mov dword [ebp - 0x170], 1
mov eax, dword [ebp - 0x170]
mov dword [ebp - 0x178], eax
mov eax, dword [ebp - 0x178]
mov dword [ebp - 0x390], eax
mov eax, dword [ebp - 0xec]
mov dword [ebp - 0x38c], eax
mov dword [ebp - 0xf4], 0xbcabebf3
cmp dword [ebp - 0xec], 0
jne 0x10011c34
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x100], 0
jne 0x10011c34
and dword [ebp - 0x180], 0
jmp 0x10011c3e
mov dword [ebp - 0x180], 1
mov eax, dword [ebp - 0xf4]
cmp dword [ebp - 0x180], eax
jg 0x10011c58
mov dword [ebp - 0x198], 1
jmp 0x10011c5f
and dword [ebp - 0x198], 0
mov dword [ebp - 0x58], 0
mov eax, dword [ebp - 0x58]
mov dword [ebp - 0x36c], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x100]
mov dword [ebp - 0x320], eax
xor eax, eax
inc eax
je 0x10011c9c
mov eax, 0xb209
test eax, eax
je 0x10011c9c
mov dword [ebp - 0x188], 1
jmp 0x10011ca3
and dword [ebp - 0x188], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x100]
cmp dword [ebp - 0x188], eax
jl 0x10011cd6
cmp dword [ebp - 0xf4], 0
je 0x10011cd6
mov eax, 0xf205
test eax, eax
je 0x10011cd6
mov dword [ebp - 0x190], 1
jmp 0x10011cdd
and dword [ebp - 0x190], 0
mov eax, dword [ebp - 0x5c]
cmp dword [ebp - 0x190], eax
jne 0x10011cf4
mov dword [ebp - 0x1a0], 1
jmp 0x10011cfb
and dword [ebp - 0x1a0], 0
mov eax, dword [ebp - 0x198]
add eax, dword [ebp - 0x1a0]
je 0x10011d17
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x100], 0
cmp dword [ebp - 0xec], 8
jb 0x10011d2c
mov dword [ebp - 0x1a8], 1
jmp 0x10011d33
and dword [ebp - 0x1a8], 0
mov eax, dword [ebp - 0x5c]
add eax, dword [ebp - 0x1a8]
mov dword [ebp - 0x248], eax
and dword [ebp - 0x64], 0
jmp 0x10011d4f
mov eax, dword [ebp - 0x64]
inc eax
mov dword [ebp - 0x64], eax
cmp dword [ebp - 0x64], 0x1b
jae 0x10011d62
mov eax, dword [ebp - 0x64]
mov byte [ebp + eax - 0x310], 0
jmp 0x10011d48
mov dword [ebp - 0x18], 0xe56f9b2c
mov dword [ebp - 0xf0], 0
mov dword [ebp - 0x6c], 0xffffffff
push 1
lea ecx, [ebp - 0x274]
call fcn.100165ef
mov byte [ebp - 4], 5
mov dword [ebp - 0x118], 0xffffffff
mov dword [ebp - 0x384], 0xffffffff
lea eax, [ebp - 0x274]
push eax
lea eax, [ebp - 0x48]
push eax
call fcn.10010b96
pop ecx
pop ecx
mov dword [ebp - 0x48], 0
jmp 0x10011dc1
mov eax, dword [ebp - 0x48]
inc eax
mov dword [ebp - 0x48], eax
cmp dword [ebp - 0x48], 2
jge 0x10011dd7
mov eax, dword [ebp - 0x48]
mov dword [ebp + eax*4 - 0x3e0], 4
jmp 0x10011dba
cmp dword [ebp - 0x18], 0
je 0x10011e1d
cmp dword [ebp - 0x18], 0x8e1b8814
jne 0x10011df2
mov dword [ebp - 0x258], 1
jmp 0x10011df9
and dword [ebp - 0x258], 0
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x328], eax
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x314], eax
cmp dword [ebp - 0x18], 0
je 0x10011e1d
mov dword [ebp - 0x1b0], 1
jmp 0x10011e24
and dword [ebp - 0x1b0], 0
mov eax, dword [ebp - 0x1b0]
mov dword [ebp - 0xf0], eax
mov eax, dword [ebp - 0xf0]
mov dword [ebp - 0x6c], eax
cmp dword [ebp - 0x6c], 0
je 0x10011f86
mov dword [ebp - 0x1b8], 0xabc24891
mov dword [ebp - 0x1c8], 0xfffffff6
mov dword [ebp - 0x108], 1
mov dword [ebp - 0x18], 0
jmp 0x10011e71
mov eax, dword [ebp - 0x18]
dec eax
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 0
jl 0x10011ea5
mov byte [ebp - 0x2d], 0
movzx eax, byte [ebp - 0x2d]
test eax, eax
je 0x10011e92
push 0
push 0xdd7
push 0
call dword [sym.imp.GDI32.dll_GetObjectW]
mov byte [ebp - 0x2f], 0
movzx eax, byte [ebp - 0x2f]
test eax, eax
je 0x10011ea3
call fcn.10010bde
jmp 0x10011e6a
mov eax, dword [ebp - 0xf0]
mov dword [ebp - 0x1b8], eax
mov eax, dword [ebp - 0x1c8]
cmp dword [ebp - 0x1b8], eax
jg 0x10011ecb
mov dword [ebp - 0x1c0], 1
jmp 0x10011ed2
and dword [ebp - 0x1c0], 0
cmp dword [ebp - 0x1c0], 0x43260389
je 0x10011eea
mov dword [ebp - 0x1d0], 1
jmp 0x10011ef1
and dword [ebp - 0x1d0], 0
mov eax, dword [ebp - 0x1c8]
cmp dword [ebp - 0x1d0], eax
jg 0x10011f0b
mov dword [ebp - 0x1d8], 1
jmp 0x10011f12
and dword [ebp - 0x1d8], 0
mov eax, dword [ebp - 0x18]
cmp dword [ebp - 0x1d8], eax
jg 0x10011f2c
cmp dword [ebp - 0x6c], 0
jne 0x10011f2c
and dword [ebp - 0x1e0], 0
jmp 0x10011f36
mov dword [ebp - 0x1e0], 1
mov eax, dword [ebp - 0x1e0]
mov dword [ebp - 0x108], eax
mov esi, dword [ebp - 0x108]
push 0
lea ecx, [ebp - 0x274]
call fcn.100166d5
cmp esi, dword [eax]
jle 0x10011f65
mov dword [ebp - 0x110], 1
jmp 0x10011f6c
and dword [ebp - 0x110], 0
mov eax, dword [ebp - 0x110]
mov dword [ebp - 0x118], eax
mov eax, dword [ebp - 0x118]
mov dword [ebp - 0x6c], eax
jmp 0x100120bb
push 3
lea ecx, [ebp - 0x34c]
call fcn.100165ef
mov byte [ebp - 4], 6
mov dword [ebp - 0x2c4], 0x2455f992
mov dword [ebp - 0x2c0], 0x2455f992
mov dword [ebp - 0x2bc], 0x2455f992
mov dword [ebp - 0x2b8], 0x2455f992
lea ecx, [ebp - 0xf5]
call fcn.10016739
push eax
lea eax, [ebp - 0x2b4]
push eax
lea eax, [ebp - 0x2c4]
push eax
lea ecx, [ebp - 0x3d8]
call fcn.1001673c
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0x3b8]
call fcn.1001662b
mov byte [ebp - 4], 7
mov dword [ebp - 0x23c], 0xa67606e8
mov dword [ebp - 0x120], 0xb0d6
mov dword [ebp - 0x28], 0
jmp 0x1001201c
mov eax, dword [ebp - 0x28]
inc eax
mov dword [ebp - 0x28], eax
cmp dword [ebp - 0x28], 3
jge 0x10012038
push dword [ebp - 0x28]
lea ecx, [ebp - 0x34c]
call fcn.100166d5
mov dword [eax], 0xcce3
jmp 0x10012015
mov dword [ebp - 0x28], 0
jmp 0x10012048
mov eax, dword [ebp - 0x28]
inc eax
mov dword [ebp - 0x28], eax
cmp dword [ebp - 0x28], 1
jge 0x1001205e
mov eax, dword [ebp - 0x28]
mov dword [ebp + eax*4 - 0x330], 7
jmp 0x10012041
mov eax, dword [ebp - 0x120]
inc eax
mov dword [ebp - 0x120], eax
mov dword [ebp - 0x18], 0
jmp 0x1001207b
mov eax, dword [ebp - 0x18]
dec eax
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 0
jl 0x1001209d
lea eax, [ebp - 0x18]
push eax
lea eax, [ebp - 0x274]
push eax
lea eax, [ebp - 0x23c]
push eax
call fcn.10010be9
add esp, 0xc
jmp 0x10012074
mov byte [ebp - 4], 6
lea ecx, [ebp - 0x3b8]
call fcn.10016651
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x34c]
call fcn.10016651
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x274]
call fcn.10016651
push 0x10007751
lea ecx, [ebp - 0x3ac]
call fcn.100164bf
mov byte [ebp - 4], 8
mov dword [ebp - 0x394], 0xce12
mov dword [ebp - 0x340], 0xd69f
push 2
lea ecx, [ebp - 0x35c]
call fcn.100165ef
mov byte [ebp - 4], 9
mov dword [ebp - 0x244], 0x20da
cmp dword [ebp - 0x244], 0x48d
jge 0x10012343
push 0x10007751
lea ecx, [ebp - 0x2e8]
call fcn.10015ee3
mov byte [ebp - 4], 0xa
lea edx, [ebp - 0x2e8]
mov ecx, 0x10657dd0
call fcn.1001b06e
push 0x10007751
lea ecx, [ebp - 0x29c]
call fcn.10015ee3
mov byte [ebp - 4], 0xb
lea edx, [ebp - 0x29c]
mov ecx, 0x10657dd0
call fcn.1001b06e
push 0
push 0x100078d0
lea ecx, [ebp - 0x2e8]
call fcn.10015f57
mov dword [ebp - 0x50], eax
lea ecx, [ebp - 0x2e8]
call fcn.10015f53
dec eax
sub eax, dword [ebp - 0x50]
mov dword [ebp - 0x128], eax
mov eax, dword [ebp - 0x50]
sub eax, dword [ebp - 0x128]
mov dword [ebp - 0x2c], eax
jns 0x100121a4
imul eax, dword [ebp - 0x2c], 0xffffffff
mov dword [ebp - 0x2c], eax
lea ecx, [ebp - 0x29c]
call fcn.10015f53
cmp dword [ebp - 0x2c], eax
ja 0x100121cd
lea ecx, [ebp - 0x29c]
call fcn.10015f53
sub eax, dword [ebp - 0x2c]
xor edx, edx
push 2
pop ecx
div ecx
test edx, edx
je 0x100121dd
push 0x100078d4
call fcn.1004f8f6
pop ecx
jmp 0x10012325
lea ecx, [ebp - 0x29c]
call fcn.10015f53
sub eax, dword [ebp - 0x2c]
shr eax, 1
mov dword [ebp - 0x8c], eax
mov eax, dword [ebp - 0x50]
cmp eax, dword [ebp - 0x128]
jge 0x1001220d
mov eax, dword [ebp - 0x8c]
add eax, dword [ebp - 0x2c]
mov dword [ebp - 0x8c], eax
and dword [ebp - 0x74], 0
jmp 0x1001221a
mov eax, dword [ebp - 0x74]
inc eax
mov dword [ebp - 0x74], eax
mov eax, dword [ebp - 0x74]
cmp eax, dword [ebp - 0x50]
jge 0x10012242
push dword [ebp - 0x74]
lea ecx, [ebp - 0x2e8]
call fcn.10015f3f
movsx eax, byte [eax]
push eax
push 0x100078e0
call fcn.1004f5a5
pop ecx
pop ecx
jmp 0x10012213
and dword [ebp - 0x7c], 0
jmp 0x1001224f
mov eax, dword [ebp - 0x7c]
inc eax
mov dword [ebp - 0x7c], eax
mov eax, dword [ebp - 0x7c]
cmp eax, dword [ebp - 0x8c]
jge 0x1001227a
push dword [ebp - 0x7c]
lea ecx, [ebp - 0x29c]
call fcn.10015f3f
movsx eax, byte [eax]
push eax
push 0x100078e0
call fcn.1004f5a5
pop ecx
pop ecx
jmp 0x10012248
push 0x100078d0
call fcn.1004f5a5
pop ecx
mov eax, dword [ebp - 0x50]
inc eax
mov dword [ebp - 0x84], eax
jmp 0x1001229e
mov eax, dword [ebp - 0x84]
inc eax
mov dword [ebp - 0x84], eax
lea ecx, [ebp - 0x2e8]
call fcn.10015f53
cmp dword [ebp - 0x84], eax
jae 0x100122d4
push dword [ebp - 0x84]
lea ecx, [ebp - 0x2e8]
call fcn.10015f3f
movsx eax, byte [eax]
push eax
push 0x100078e0
call fcn.1004f5a5
pop ecx
pop ecx
jmp 0x10012291
mov eax, dword [ebp - 0x8c]
mov dword [ebp - 0x94], eax
jmp 0x100122ef
mov eax, dword [ebp - 0x94]
inc eax
mov dword [ebp - 0x94], eax
lea ecx, [ebp - 0x29c]
call fcn.10015f53
cmp dword [ebp - 0x94], eax
jae 0x10012325
push dword [ebp - 0x94]
lea ecx, [ebp - 0x29c]
call fcn.10015f3f
movsx eax, byte [eax]
push eax
push 0x100078e0
call fcn.1004f5a5
pop ecx
pop ecx
jmp 0x100122e2
mov byte [ebp - 4], 0xa
lea ecx, [ebp - 0x29c]
call fcn.10015f35
mov byte [ebp - 4], 9
lea ecx, [ebp - 0x2e8]
call fcn.10015f35
mov dword [ebp - 0x37c], 7
mov dword [ebp - 0x350], 0xbe9f
mov dword [ebp - 0x364], 3
mov dword [ebp - 0x130], 0x732aa61f
mov dword [ebp - 0x9c], 0
jmp 0x10012384
mov eax, dword [ebp - 0x9c]
inc eax
mov dword [ebp - 0x9c], eax
cmp dword [ebp - 0x9c], 2
jge 0x100123a6
push dword [ebp - 0x9c]
lea ecx, [ebp - 0x35c]
call fcn.100166d5
mov dword [eax], 1
jmp 0x10012377
mov byte [ebp - 0x2e], 0
lea eax, [ebp - 0x2e]
push eax
call fcn.10010c19
pop ecx
mov eax, dword [ebp - 0x130]
inc eax
mov dword [ebp - 0x130], eax
mov byte [ebp - 4], 8
lea ecx, [ebp - 0x35c]
call fcn.10016651
lea ecx, [ebp - 0x3ac]
call fcn.10015f53
cmp eax, dword [ebp + 0xc]
je 0x1001243a
call fcn.1004f757
mov esi, eax
lea ecx, [ebp - 0x3d0]
call fcn.10015f53
mov ecx, eax
mov eax, esi
xor edx, edx
div ecx
mov dword [ebp - 0x24c], edx
lea eax, [ebp - 0x3ac]
push eax
push 0x5c47
lea eax, [ebp - 0x24c]
push eax
push 0x1454
lea eax, [ebp - 0x3d0]
push eax
push 0x699d
push 0x2b7
push 0x55b6
push 0
call fcn.10012ba8
add esp, 0x24
jmp 0x100123d0
lea eax, [ebp - 0x3ac]
push eax
mov ecx, dword [ebp + 8]
call fcn.100164ee
mov eax, dword [ebp - 0x138]
or eax, 1
mov dword [ebp - 0x138], eax
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x3ac]
call fcn.10016547
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x3d0]
call fcn.10016547
mov eax, dword [ebp + 8]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop esi
mov esp, ebp
pop ebp
ret