Function at 0x10011c0c
Capabilities:
Get session user name

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x1007de1c
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x354
push esi
push edi
and dword [ebp - 0x74], 0
mov dword [ebp - 0x234], 0xfffffff6
mov dword [ebp - 0x22c], 0x23b6182e
mov dword [ebp - 0x244], 0x516a205b
mov dword [ebp - 0x224], 5
mov dword [ebp - 0x23c], 0xfffffffc
lea eax, [ebp - 0x224]
push eax
lea eax, [ebp - 0x22c]
push eax
push 0x181
push 0x559d
push 1
lea eax, [ebp - 0x234]
push eax
lea eax, [ebp - 0x23c]
push eax
lea eax, [ebp - 0x244]
push eax
call fcn.100116e4
add esp, 0x20
mov byte [ebp - 0x4f], 0
movzx eax, byte [ebp - 0x4f]
test eax, eax
je 0x10011cad
push 0
call fcn.10011b9a
pop ecx
mov eax, dword [0x10670a54]
and eax, 1
jne 0x10011ce1
mov eax, dword [0x10670a54]
or eax, 1
mov dword [0x10670a54], eax
and dword [ebp - 4], 0
mov ecx, 0x10670a58
call fcn.10017e5f
push 0x1007fe10
call fcn.10064966
pop ecx
or dword [ebp - 4], 0xffffffff
mov dword [ebp - 0x54], 0
mov dword [ebp - 0x60], 0xe9934b0b
mov dword [ebp - 0x274], 0xb17b722b
mov dword [ebp - 0x270], 0xb17b722b
mov dword [ebp - 0x26c], 0xb17b722b
mov dword [ebp - 0x268], 0xb17b722b
lea ecx, [ebp - 0x9d]
call fcn.10008dc3
push eax
lea eax, [ebp - 0x264]
push eax
lea eax, [ebp - 0x274]
push eax
lea ecx, [ebp - 0x354]
call fcn.10017e4b
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0x2d8]
call fcn.10017dfa
mov dword [ebp - 4], 1
mov dword [ebp - 0x1d0], 0xff18c9a0
cmp dword [ebp - 0x54], 0
je 0x10011e1f
push 4
lea ecx, [ebp - 0x260]
call fcn.10017d9e
mov byte [ebp - 4], 2
push 0x49f
push 0x3b24
push 0xe26
lea eax, [ebp - 0x260]
push eax
push 0
push 0x58bd
lea eax, [ebp - 0x2b4]
push eax
call fcn.10017982
add esp, 0x1c
lea eax, [ebp - 0x260]
push eax
push 1
call fcn.10011831
pop ecx
pop ecx
mov dword [ebp - 0x54], 0
jmp 0x10011dc4
mov eax, dword [ebp - 0x54]
inc eax
mov dword [ebp - 0x54], eax
cmp dword [ebp - 0x54], 3
jg 0x10011e0e
mov dword [ebp - 0x1f4], 0xfffffffb
lea eax, [ebp - 0x60]
push eax
lea eax, [ebp - 0x260]
push eax
lea eax, [ebp - 0x1d0]
push eax
push 0x4493
push 0
push 0x3330
lea eax, [ebp - 0x2d8]
push eax
lea eax, [ebp - 0x54]
push eax
lea eax, [ebp - 0x1f4]
push eax
call fcn.100137db
add esp, 0x24
jmp 0x10011dbd
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x260]
call fcn.10017e20
jmp 0x10011e8c
mov dword [ebp - 0x240], 0xe3bf118c
push 0
call fcn.100177f5
pop ecx
mov dword [ebp - 0x60], 0
jmp 0x10011e41
mov eax, dword [ebp - 0x60]
inc eax
mov dword [ebp - 0x60], eax
cmp dword [ebp - 0x60], 0x17
jne 0x10011e8c
mov dword [ebp - 0x1dc], 0x1966
mov byte [ebp - 0x3b], 0
push 0x60d2
push 0x65cb
lea eax, [ebp - 0x3b]
push eax
push 0
push 0x7c57
call fcn.10011b29
add esp, 0x14
push 0
lea eax, [ebp - 0x1dc]
push eax
lea eax, [ebp - 0x240]
push eax
call fcn.100132e8
add esp, 0xc
jmp 0x10011e3a
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x2d8]
call fcn.10017e20
mov ecx, dword [ebp + 0xc]
call fcn.1001073f
mov dword [ebp - 0xa4], eax
push 1
lea ecx, [ebp - 0x28c]
call fcn.10017d9e
mov dword [ebp - 4], 3
mov dword [ebp - 0x68], 0x3606de71
mov dword [ebp - 0x78], 0
jmp 0x10011ed4
mov eax, dword [ebp - 0x78]
inc eax
mov dword [ebp - 0x78], eax
cmp dword [ebp - 0x78], 1
jge 0x10011eed
push dword [ebp - 0x78]
lea ecx, [ebp - 0x28c]
call fcn.10017e3c
and dword [eax], 0
jmp 0x10011ecd
mov byte [ebp - 0x45], 0
movzx eax, byte [ebp - 0x45]
test eax, eax
je 0x10011f06
push 0
push 0x762
call dword [sym.imp.KERNEL32.dll_IsDBCSLeadByteEx]
mov dword [ebp - 0x68], 0
jmp 0x10011f16
mov eax, dword [ebp - 0x68]
dec eax
mov dword [ebp - 0x68], eax
cmp dword [ebp - 0x68], 0
jl 0x10011f44
mov dword [ebp - 0x1f0], 0x1738ab65
lea eax, [ebp - 0x68]
push eax
push 0
lea eax, [ebp - 0x1f0]
push eax
lea eax, [ebp - 0x28c]
push eax
call fcn.1001615c
add esp, 0x10
jmp 0x10011f0f
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x28c]
call fcn.10017e20
cmp dword [ebp - 0xa4], 3
jae 0x1001212c
mov eax, dword [ebp + 0xc]
mov dword [ebp - 0x220], eax
lea eax, [ebp - 0x2dc]
push eax
mov ecx, 0x10670a58
call fcn.10017f16
push eax
lea eax, [ebp - 0x220]
push eax
lea eax, [ebp - 0x2f0]
push eax
mov ecx, 0x10670a58
call fcn.10017f24
mov ecx, eax
call fcn.10017f39
movzx eax, al
test eax, eax
je 0x1001212c
mov dword [ebp - 0x44], 0x914d2edc
mov dword [ebp - 0x154], 8
mov dword [ebp - 0x238], 0xb44adca1
mov dword [ebp - 0x94], 0
jmp 0x10011fd9
mov eax, dword [ebp - 0x94]
inc eax
mov dword [ebp - 0x94], eax
cmp dword [ebp - 0x94], 3
jge 0x10011ff5
mov eax, dword [ebp - 0x94]
mov dword [ebp + eax*4 - 0x31c], 5
jmp 0x10011fcc
mov byte [ebp - 0x3d], 0
movzx eax, byte [ebp - 0x3d]
test eax, eax
je 0x10012009
push 0
call fcn.10011bd0
pop ecx
mov eax, dword [ebp - 0x44]
mov dword [ebp - 0x2ec], eax
mov eax, dword [ebp - 0x44]
mov dword [ebp - 0x2f8], eax
cmp dword [ebp - 0x44], 0x33e3
je 0x10012030
mov dword [ebp - 0xf8], 1
jmp 0x10012037
and dword [ebp - 0xf8], 0
cmp dword [ebp - 0xf8], 1
jne 0x1001204c
mov dword [ebp - 0x1b8], 1
jmp 0x10012053
and dword [ebp - 0x1b8], 0
cmp dword [ebp - 0x1b8], 0x8bffbefa
jb 0x1001206b
mov dword [ebp - 0x1f8], 1
jmp 0x10012072
and dword [ebp - 0x1f8], 0
mov eax, dword [ebp - 0x44]
mov dword [ebp - 0x300], eax
cmp dword [ebp - 0x44], 0xffffffff
ja 0x1001208d
mov dword [ebp - 0x1c0], 1
jmp 0x10012094
and dword [ebp - 0x1c0], 0
mov eax, dword [ebp - 0x44]
cmp eax, dword [ebp - 0x1c0]
jge 0x100120ab
mov dword [ebp - 0x1b0], 1
jmp 0x100120b2
and dword [ebp - 0x1b0], 0
cmp dword [ebp - 0x1b0], 0xd3ecf04
jg 0x100120ca
mov dword [ebp - 0xd8], 1
jmp 0x100120d1
and dword [ebp - 0xd8], 0
mov eax, dword [ebp - 0x44]
sub eax, dword [ebp - 0xd8]
mov dword [ebp - 0x154], eax
mov eax, dword [ebp - 0x154]
push 4
pop ecx
shl ecx, 1
sub eax, dword [ebp + ecx - 0x31c]
mov dword [ebp - 0x238], eax
mov eax, dword [ebp + 0xc]
mov dword [ebp - 0x200], eax
lea eax, [ebp - 0x200]
push eax
mov ecx, 0x10670a58
call fcn.10017eb3
push eax
mov ecx, dword [ebp + 8]
call fcn.10017c70
mov eax, dword [ebp - 0x74]
or eax, 1
mov dword [ebp - 0x74], eax
mov eax, dword [ebp + 8]
jmp 0x100132d8
push 2
lea ecx, [ebp - 0x254]
call fcn.10017d9e
mov dword [ebp - 4], 4
mov dword [ebp - 0x24], 0
jmp 0x10012150
mov eax, dword [ebp - 0x24]
inc eax
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 1
jge 0x10012166
mov eax, dword [ebp - 0x24]
mov dword [ebp + eax*4 - 0x304], 1
jmp 0x10012149
mov dword [ebp - 0x24], 0
jmp 0x10012176
mov eax, dword [ebp - 0x24]
inc eax
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 2
jge 0x1001218f
push dword [ebp - 0x24]
lea ecx, [ebp - 0x254]
call fcn.10017e3c
or dword [eax], 0xffffffff
jmp 0x1001216f
push 1
lea ecx, [ebp - 0x254]
call fcn.10017e3c
and dword [eax], 0
jmp 0x100121c5
push 1
lea ecx, [ebp - 0x254]
call fcn.10017e3c
mov dword [ebp - 0xec], eax
mov eax, dword [ebp - 0xec]
mov eax, dword [eax]
inc eax
mov ecx, dword [ebp - 0xec]
mov dword [ecx], eax
push 1
lea ecx, [ebp - 0x254]
call fcn.10017e3c
cmp dword [eax], 0
jg 0x100121f5
mov byte [ebp - 0x35], 0
lea eax, [ebp - 0x35]
push eax
push 0x13d7
push 0x3d3d
push 1
call fcn.1001187b
add esp, 0x10
jmp 0x100121a1
mov byte [ebp - 0x36], 0
movzx eax, byte [ebp - 0x36]
test eax, eax
je 0x1001220b
push 0
push 0
call dword [sym.imp.ADVAPI32.dll_GetUserNameA]
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x254]
call fcn.10017e20
lea eax, [ebp - 0x360]
push eax
call fcn.10008f79
pop ecx
mov esi, eax
lea edi, [ebp - 0x328]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
lea esi, [ebp - 0x328]
lea edi, [ebp - 0x334]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
mov dword [ebp - 0x18], 0x13dd33a4
push 1
lea ecx, [ebp - 0xe4]
call fcn.10017d9e
mov dword [ebp - 4], 5
mov dword [ebp - 0x114], 0x2674
mov dword [ebp - 0x134], 0x9ff40b36
push 2
lea ecx, [ebp - 0x280]
call fcn.10017d9e
mov byte [ebp - 4], 6
mov dword [ebp - 0x20], 0
jmp 0x10012291
mov eax, dword [ebp - 0x20]
inc eax
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 1
jge 0x100122ad
push dword [ebp - 0x20]
lea ecx, [ebp - 0xe4]
call fcn.10017e3c
mov dword [eax], 0xfffffffe
jmp 0x1001228a
mov dword [ebp - 0x20], 0
jmp 0x100122bd
mov eax, dword [ebp - 0x20]
inc eax
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 2
jge 0x100122d9
push dword [ebp - 0x20]
lea ecx, [ebp - 0x280]
call fcn.10017e3c
mov dword [eax], 0xfffffff8
jmp 0x100122b6
mov dword [ebp - 0x18], 0
jmp 0x100122e9
mov eax, dword [ebp - 0x18]
dec eax
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 0xffffffef
jl 0x1001233a
mov dword [ebp - 0x228], 0x1d89
mov dword [ebp - 0x208], 0x5efa20bd
push 0x1783
push 0xc45
push 0x131c
push 0x39c3
push 0xe3a
lea eax, [ebp - 0x18]
push eax
push 1
lea eax, [ebp - 0x228]
push eax
lea eax, [ebp - 0x208]
push eax
call fcn.100118ff
add esp, 0x24
jmp 0x100122e2
mov dword [ebp - 0x18], 0xd
jmp 0x1001234a
mov eax, dword [ebp - 0x18]
dec eax
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 0xfffffff9
je 0x10012736
mov dword [ebp - 0x10], 0x51d52aa0
mov dword [ebp - 0x90], 0xffffffff
mov eax, dword [ebp - 0x18]
imul ecx, dword [ebp - 0x10], 0xca7
add eax, ecx
cmp eax, 8
jbe 0x10012382
mov dword [ebp - 0x18c], 1
jmp 0x10012389
and dword [ebp - 0x18c], 0
mov eax, dword [ebp - 0x10]
imul eax, dword [ebp - 0x18c]
test eax, eax
jne 0x100123a6
cmp dword [ebp - 0x10], 0
jne 0x100123a6
and dword [ebp - 0xf4], 0
jmp 0x100123b0
mov dword [ebp - 0xf4], 1
mov eax, 0xfff7
sub eax, dword [ebp - 0x10]
imul eax, dword [ebp - 0xf4]
test eax, eax
je 0x100124d5
mov dword [ebp - 0x15c], 0xd29ed7d4
mov dword [ebp - 0x80], 0
jmp 0x100123e1
mov eax, dword [ebp - 0x80]
inc eax
mov dword [ebp - 0x80], eax
cmp dword [ebp - 0x80], 3
jge 0x100123f7
mov eax, dword [ebp - 0x80]
mov dword [ebp + eax*4 - 0x2e8], 0x451d77f1
jmp 0x100123da
mov dword [ebp - 0x10], 0
jmp 0x10012407
mov eax, dword [ebp - 0x10]
inc eax
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], 0
jg 0x10012423
mov byte [ebp - 0x38], 0
movzx eax, byte [ebp - 0x38]
test eax, eax
je 0x10012421
push 0
call fcn.1001775e
pop ecx
jmp 0x10012400
mov dword [ebp - 0x10], 0
jmp 0x10012433
mov eax, dword [ebp - 0x10]
inc eax
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], 0
jg 0x100124d0
mov dword [ebp - 0x248], 1
push dword [ebp - 0x10]
lea ecx, [ebp - 0xe4]
call fcn.10017e3c
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x2e8]
mov dword [ebp - 0x15c], eax
mov eax, dword [ebp - 0x15c]
cmp dword [ebp - 0x10], eax
jne 0x1001247f
mov dword [ebp - 0xfc], 1
jmp 0x10012486
and dword [ebp - 0xfc], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x2e8]
cmp eax, dword [ebp - 0xfc]
jl 0x100124a7
mov dword [ebp - 0x1b4], 1
jmp 0x100124ae
and dword [ebp - 0x1b4], 0
push dword [ebp - 0x10]
lea ecx, [ebp - 0xe4]
call fcn.10017e3c
mov eax, dword [eax]
imul eax, dword [ebp - 0x1b4]
mov dword [ebp - 0x248], eax
jmp 0x1001242c
jmp 0x10012731
mov dword [ebp - 0x98], 0xffffffff
mov dword [ebp - 0x174], 0x8636eebc
mov dword [ebp - 0x10c], 0xefce06df
mov dword [ebp - 0x17c], 0xbbb785aa
mov dword [ebp - 0x230], 0xfffffffe
mov esi, dword [ebp - 0x98]
push 0
lea ecx, [ebp - 0xe4]
call fcn.10017e3c
mov ecx, dword [ebp - 0x98]
imul ecx, dword [eax]
cmp esi, ecx
jne 0x10012533
mov dword [ebp - 0x104], 1
jmp 0x1001253a
and dword [ebp - 0x104], 0
push 0
lea ecx, [ebp - 0xe4]
call fcn.10017e3c
mov ecx, dword [ebp - 0x104]
cmp ecx, dword [eax]
je 0x1001255d
mov dword [ebp - 0x210], 1
jmp 0x10012564
and dword [ebp - 0x210], 0
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x2b0], eax
mov eax, 0xffff
test eax, eax
je 0x1001258b
cmp dword [ebp - 0x98], 0
je 0x1001258b
mov dword [ebp - 0x164], 1
jmp 0x10012592
and dword [ebp - 0x164], 0
mov eax, dword [ebp - 0x164]
sub eax, dword [ebp - 0x174]
mov dword [ebp - 0x10c], eax
mov eax, dword [ebp - 0x10c]
sub eax, 0xa
je 0x100125c0
xor eax, eax
inc eax
je 0x100125c0
mov dword [ebp - 0x194], 1
jmp 0x100125c7
and dword [ebp - 0x194], 0
mov eax, dword [ebp - 0x194]
mov dword [ebp - 0x90], eax
cmp dword [ebp - 0x114], 0
jge 0x100125e8
mov dword [ebp - 0x19c], 1
jmp 0x100125ef
and dword [ebp - 0x19c], 0
mov eax, dword [ebp - 0x90]
mov dword [ebp - 0x2bc], eax
mov eax, dword [ebp - 0x90]
dec eax
cmp eax, dword [ebp - 0x114]
jge 0x10012616
mov dword [ebp - 0x16c], 1
jmp 0x1001261d
and dword [ebp - 0x16c], 0
push 0
lea ecx, [ebp - 0xe4]
call fcn.10017e3c
mov ecx, dword [ebp - 0x16c]
cmp ecx, dword [eax]
jg 0x10012640
mov dword [ebp - 0x11c], 1
jmp 0x10012647
and dword [ebp - 0x11c], 0
cmp dword [ebp - 0x11c], 0xfff6
je 0x1001265f
mov dword [ebp - 0x1ac], 1
jmp 0x10012666
and dword [ebp - 0x1ac], 0
push 0
lea ecx, [ebp - 0xe4]
call fcn.10017e3c
mov ecx, dword [ebp - 0x1ac]
cmp ecx, dword [eax]
jge 0x10012689
mov dword [ebp - 0x124], 1
jmp 0x10012690
and dword [ebp - 0x124], 0
cmp dword [ebp - 0x124], 0
jne 0x100126ab
cmp dword [ebp - 0x90], 0
jne 0x100126ab
and dword [ebp - 0x12c], 0
jmp 0x100126b5
mov dword [ebp - 0x12c], 1
mov eax, dword [ebp - 0x174]
cmp dword [ebp - 0x12c], eax
jge 0x100126cf
mov dword [ebp - 0x13c], 1
jmp 0x100126d6
and dword [ebp - 0x13c], 0
imul eax, dword [ebp - 0x19c], 0xfffffffd
mov dword [ebp - 0x134], eax
mov eax, dword [ebp - 0x134]
mov dword [ebp - 0x17c], eax
mov eax, dword [ebp - 0x17c]
cmp eax, dword [ebp - 0x13c]
jne 0x10012709
mov dword [ebp - 0xb0], 1
jmp 0x10012710
and dword [ebp - 0xb0], 0
push 0
lea ecx, [ebp - 0x280]
call fcn.10017e3c
mov ecx, dword [ebp - 0xb0]
mov dword [eax], ecx
mov eax, dword [ebp - 0xb0]
mov dword [ebp - 0x230], eax
jmp 0x10012343
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x280]
call fcn.10017e20
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xe4]
call fcn.10017e20
mov ecx, dword [ebp + 0xc]
call fcn.10010818
mov dword [ebp - 0x204], eax
mov dword [ebp - 0x2c], 6
push 3
lea ecx, [ebp - 0xcc]
call fcn.10017d9e
mov dword [ebp - 4], 7
mov dword [ebp - 0x5c], 0xecf04b06
mov dword [ebp - 0x1a4], 5
mov dword [ebp - 0xe8], 0
push 0x4117
push 0x6ad7
push 0
lea eax, [ebp - 0xcc]
push eax
push 0x64a9
push 0x66b6
lea eax, [ebp - 0x2c4]
push eax
push 0x309e
call fcn.10013330
add esp, 0x20
mov byte [ebp - 0x3a], 0
lea eax, [ebp - 0x3a]
push eax
push 0x2c73
push 0
call fcn.100161e0
add esp, 0xc
mov eax, dword [ebp - 0x2c]
mov dword [ebp - 0x1bc], eax
push 2
lea ecx, [ebp - 0xcc]
call fcn.10017e3c
mov ecx, dword [ebp - 0x1bc]
mov dword [eax], ecx
cmp dword [ebp - 0x1bc], 0
je 0x10012951
mov dword [ebp - 0x58], 6
mov dword [ebp - 0x14c], 6
mov dword [ebp - 0x1ec], 0xb0fe2cf4
mov dword [ebp - 0x2c], 9
jmp 0x10012836
mov eax, dword [ebp - 0x2c]
inc eax
mov dword [ebp - 0x2c], eax
cmp dword [ebp - 0x2c], 0x1c
jne 0x1001286e
mov byte [ebp - 0x3c], 0
lea eax, [ebp - 0x3c]
push eax
push 0x703d
push 0
push 0x26ae
call fcn.10011a76
add esp, 0x10
mov byte [ebp - 0x3e], 0
movzx eax, byte [ebp - 0x3e]
test eax, eax
je 0x1001286c
push 0
call fcn.100134bf
pop ecx
jmp 0x1001282f
cmp dword [ebp - 0x58], 9
jb 0x10012880
mov dword [ebp - 0x218], 1
jmp 0x10012887
and dword [ebp - 0x218], 0
mov eax, dword [ebp - 0x58]
mov dword [ebp - 0x308], eax
mov esi, dword [ebp - 0x58]
push 2
lea ecx, [ebp - 0xcc]
call fcn.10017e3c
add esi, dword [eax]
cmp esi, dword [ebp - 0x58]
jle 0x100128b3
mov dword [ebp - 0x144], 1
jmp 0x100128ba
and dword [ebp - 0x144], 0
mov eax, dword [ebp - 0x58]
cmp dword [ebp - 0x144], eax
jle 0x100128d1
mov dword [ebp - 0x184], 1
jmp 0x100128d8
and dword [ebp - 0x184], 0
mov eax, dword [ebp - 0x184]
mov dword [ebp - 0x5c], eax
mov esi, dword [ebp - 0x5c]
push 2
lea ecx, [ebp - 0xcc]
call fcn.10017e3c
cmp dword [eax], esi
jle 0x100128fc
cmp dword [ebp - 0x14c], 0
push 0
lea ecx, [ebp - 0xcc]
call fcn.10017e3c
imul esi, dword [eax], 0xffff
push 0
lea ecx, [ebp - 0xcc]
call fcn.10017e3c
cmp esi, dword [eax]
je 0x1001292c
mov dword [ebp - 0x1d8], 1
jmp 0x10012933
and dword [ebp - 0x1d8], 0
push 2
lea ecx, [ebp - 0xcc]
call fcn.10017e3c
mov eax, dword [ebp - 0x14c]
mov dword [ebp - 0x1ec], eax
jmp 0x10012aff
mov dword [ebp - 0xb4], 0xc3ae5071
mov dword [ebp - 0x88], 0xfffffff7
mov dword [ebp - 0xa8], 0xfffffffe
mov dword [ebp - 0x1fc], 0
push 0
push 0x3c3f
push 0xeca
lea eax, [ebp - 0xb4]
push eax
lea eax, [ebp - 0xcc]
push eax
push 0x75ba
push 0x1735
push 0x834
lea eax, [ebp - 0x88]
push eax
lea eax, [ebp - 0x5c]
push eax
push 0x5d46
lea eax, [ebp - 0x2c]
push eax
call fcn.100134f0
add esp, 0x30
mov dword [ebp - 0x1a4], 0x7ee8c4b0
cmp dword [ebp - 0x1a4], 0
je 0x100129e6
cmp dword [ebp - 0xa8], 0
je 0x100129e6
mov dword [ebp - 0xd4], 1
jmp 0x100129ed
and dword [ebp - 0xd4], 0
mov eax, dword [ebp - 0xd4]
mov dword [ebp - 0xe8], eax
mov eax, dword [ebp - 0x2c]
imul eax, dword [ebp - 0x2c]
cmp dword [ebp - 0xe8], eax
je 0x10012a1a
mov eax, 0xb447
test eax, eax
jne 0x10012a1a
and dword [ebp - 0xf0], 0
jmp 0x10012a24
mov dword [ebp - 0xf0], 1
mov eax, dword [ebp - 0xa8]
imul eax, dword [ebp - 0xf0]
cmp dword [ebp - 0xb4], eax
jge 0x10012a45
mov dword [ebp - 0xd0], 1
jmp 0x10012a4c
and dword [ebp - 0xd0], 0
mov eax, dword [ebp - 0x2c]
cmp dword [ebp - 0xd0], eax
jne 0x10012a69
mov eax, 0xfff6
test eax, eax
jne 0x10012a69
and dword [ebp - 0x108], 0
jmp 0x10012a73
mov dword [ebp - 0x108], 1
mov dword [ebp - 0x88], 0xfffffff9
mov eax, dword [ebp - 0x88]
mov dword [ebp - 0x100], eax
push 2
lea ecx, [ebp - 0xcc]
call fcn.10017e3c
mov ecx, dword [ebp - 0x100]
mov dword [eax], ecx
mov eax, dword [ebp - 0x100]
mov dword [ebp - 0x5c], eax
mov eax, dword [ebp - 0x5c]
cmp eax, dword [ebp - 0x108]
jne 0x10012abe
mov dword [ebp - 0x110], 1
jmp 0x10012ac5
and dword [ebp - 0x110], 0
mov eax, dword [ebp - 0xa8]
cmp dword [ebp - 0x110], eax
jge 0x10012ae8
cmp dword [ebp - 0x88], 0
je 0x10012ae8
mov dword [ebp - 0x1d4], 1
jmp 0x10012aef
and dword [ebp - 0x1d4], 0
imul eax, dword [ebp - 0xb4], 0x85aa
mov dword [ebp - 0x1fc], eax
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xcc]
call fcn.10017e20
lea eax, [ebp - 0x334]
push eax
push dword [ebp - 0x204]
push dword [ebp - 0xa4]
lea eax, [ebp - 0x34c]
push eax
call fcn.1001084e
add esp, 0x10
mov dword [ebp - 4], 8
mov dword [ebp - 0x64], 0x951ad386
mov dword [ebp - 0x29c], 0xffffffff
mov dword [ebp - 0x298], 0xffffffff
mov dword [ebp - 0x294], 0xffffffff
mov dword [ebp - 0x290], 0xffffffff
mov dword [ebp - 0x9c], 0x8217
mov dword [ebp - 0x310], 0
mov dword [ebp - 0x7c], 0
jmp 0x10012b8a
mov eax, dword [ebp - 0x7c]
inc eax
mov dword [ebp - 0x7c], eax
cmp dword [ebp - 0x7c], 3
jge 0x10012ba0
mov eax, dword [ebp - 0x7c]
mov dword [ebp + eax*4 - 0x1cc], 0xffff
jmp 0x10012b83
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x1cc]
mov dword [ebp - 0x64], eax
mov dword [ebp - 0x64], 0
jmp 0x10012bbf
mov eax, dword [ebp - 0x64]
inc eax
mov dword [ebp - 0x64], eax
cmp dword [ebp - 0x64], 2
jg 0x10012ec4
mov dword [ebp - 0x14], 0xfffffffc
mov dword [ebp - 0x178], 0xfffffffe
mov dword [ebp - 0x14], 2
jmp 0x10012bea
mov eax, dword [ebp - 0x14]
dec eax
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 0
jl 0x10012ebf
push 2
lea ecx, [ebp - 0xc0]
call fcn.10017d9e
mov byte [ebp - 4], 9
push 0x54b3
lea eax, [ebp - 0x2f4]
push eax
push 1
lea eax, [ebp - 0xc0]
push eax
call fcn.10011a76
add esp, 0x10
push 4
pop eax
shl eax, 1
mov dword [ebp + eax - 0x29c], 1
push 1
lea ecx, [ebp - 0xc0]
call fcn.10017e3c
and dword [eax], 0
jmp 0x10012c68
push 1
lea ecx, [ebp - 0xc0]
call fcn.10017e3c
mov dword [ebp - 0x118], eax
mov eax, dword [ebp - 0x118]
mov eax, dword [eax]
inc eax
mov ecx, dword [ebp - 0x118]
mov dword [ecx], eax
push 1
lea ecx, [ebp - 0xc0]
call fcn.10017e3c
cmp dword [eax], 2
jg 0x10012eab
mov dword [ebp - 0x150], 1
mov dword [ebp - 0x168], 0xffffffff
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp + eax*4 - 0x1cc]
mov dword [ebp - 0x2b8], eax
push 1
lea ecx, [ebp - 0xc0]
call fcn.10017e3c
mov esi, eax
mov edi, dword [ebp - 0x14]
push 1
lea ecx, [ebp - 0xc0]
call fcn.10017e3c
imul edi, dword [eax]
imul edi, dword [esi]
cmp edi, dword [ebp - 0x9c]
je 0x10012cdb
mov dword [ebp - 0x120], 1
jmp 0x10012ce2
and dword [ebp - 0x120], 0
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp + eax*4 - 0x1cc]
cmp dword [ebp - 0x120], eax
jg 0x10012d00
mov dword [ebp - 0x128], 1
jmp 0x10012d07
and dword [ebp - 0x128], 0
mov eax, dword [ebp - 0x128]
add eax, 0x1780eec2
je 0x10012d29
mov eax, 0x3e5ec352
test eax, eax
je 0x10012d29
mov dword [ebp - 0x130], 1
jmp 0x10012d30
and dword [ebp - 0x130], 0
mov eax, dword [ebp - 0x14]
cmp dword [ebp - 0x130], eax
jg 0x10012d47
mov dword [ebp - 0x138], 1
jmp 0x10012d4e
and dword [ebp - 0x138], 0
cmp dword [ebp - 0x138], 0xfafb
jle 0x10012d66
mov dword [ebp - 0x140], 1
jmp 0x10012d6d
and dword [ebp - 0x140], 0
cmp dword [ebp - 0x140], 0xfffffffb
je 0x10012d82
mov dword [ebp - 0x20c], 1
jmp 0x10012d89
and dword [ebp - 0x20c], 0
mov eax, dword [ebp - 0x14]
mov dword [ebp - 0x2fc], eax
imul eax, dword [ebp - 0x14], 0xbc69
imul eax, dword [ebp - 0x9c]
cmp eax, dword [ebp - 0x150]
jle 0x10012db4
mov dword [ebp - 0x148], 1
jmp 0x10012dbb
and dword [ebp - 0x148], 0
mov esi, dword [ebp - 0x14]
add esi, dword [ebp - 0x148]
push 1
lea ecx, [ebp - 0xc0]
call fcn.10017e3c
cmp esi, dword [eax]
je 0x10012e3e
mov eax, dword [ebp - 0x150]
cmp dword [ebp - 0x9c], eax
jne 0x10012def
mov dword [ebp - 0x158], 1
jmp 0x10012df6
and dword [ebp - 0x158], 0
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp + eax*4 - 0x1cc]
mov dword [ebp - 0x160], eax
mov eax, dword [ebp - 0x14]
mov ecx, dword [ebp - 0x160]
mov dword [ebp + eax*4 - 0x1cc], ecx
mov eax, dword [ebp - 0x158]
sub eax, dword [ebp - 0x160]
mov dword [ebp - 0x178], eax
mov byte [ebp - 0x4e], 0
movzx eax, byte [ebp - 0x4e]
test eax, eax
je 0x10012e3c
push 1
call fcn.10011af3
pop ecx
jmp 0x10012ea6
mov dword [ebp - 0x214], 0xfffffff7
mov esi, dword [ebp - 0x214]
push 4
pop eax
shl eax, 1
sub esi, dword [ebp + eax - 0x1cc]
push 1
lea ecx, [ebp - 0xc0]
call fcn.10017e3c
imul esi, dword [eax]
mov dword [ebp - 0x168], esi
mov esi, dword [ebp - 0x168]
push 1
lea ecx, [ebp - 0xc0]
call fcn.10017e3c
cmp esi, dword [eax]
jg 0x10012e93
mov dword [ebp - 0x170], 1
jmp 0x10012e9a
and dword [ebp - 0x170], 0
mov eax, dword [ebp - 0x170]
mov dword [ebp - 0x178], eax
jmp 0x10012c44
mov byte [ebp - 4], 8
lea ecx, [ebp - 0xc0]
call fcn.10017e20
jmp 0x10012be3
jmp 0x10012bb8
cmp dword [ebp - 0xa4], 3
jae 0x1001320e
mov dword [ebp - 0x4c], 0xffffffff
mov dword [ebp - 0x34], 0xfffffff9
mov dword [ebp - 0x28], 0
jmp 0x10012eef
mov eax, dword [ebp - 0x28]
inc eax
mov dword [ebp - 0x28], eax
cmp dword [ebp - 0x28], 1
jge 0x10012f02
mov eax, dword [ebp - 0x28]
mov dword [ebp + eax*4 - 0x1c], 0xffff
jmp 0x10012ee8
mov dword [ebp - 0x28], 0
jmp 0x10012f12
mov eax, dword [ebp - 0x28]
inc eax
mov dword [ebp - 0x28], eax
cmp dword [ebp - 0x28], 2
jge 0x10012f28
mov eax, dword [ebp - 0x28]
mov dword [ebp + eax*4 - 0x2cc], 0x33c2251
jmp 0x10012f0b
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x1c]
mov dword [ebp - 0x2c0], eax
push 4
pop eax
imul eax, eax, 0
push 4
pop ecx
imul ecx, ecx, 0
mov ecx, dword [ebp + ecx - 0x1c]
cmp dword [ebp + eax - 0x1c], ecx
jne 0x10012f5a
mov dword [ebp - 0x180], 1
jmp 0x10012f61
and dword [ebp - 0x180], 0
cmp dword [ebp - 0x180], 1
jne 0x10012f76
mov dword [ebp - 0x188], 1
jmp 0x10012f7d
and dword [ebp - 0x188], 0
mov eax, dword [ebp - 0x188]
mov dword [ebp - 0x34], eax
mov eax, dword [ebp - 0x34]
push 4
pop ecx
imul ecx, ecx, 0
add eax, dword [ebp + ecx - 0x1c]
jne 0x10012fa4
cmp dword [ebp - 0x34], 0
jne 0x10012fa4
and dword [ebp - 0xac], 0
jmp 0x10012fae
mov dword [ebp - 0xac], 1
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0xac]
mov dword [ebp + eax - 0x2cc], ecx
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x1c]
add eax, dword [ebp - 0xac]
je 0x100131e0
mov dword [ebp - 0x4c], 0
jmp 0x10012fe7
mov eax, dword [ebp - 0x4c]
inc eax
mov dword [ebp - 0x4c], eax
cmp dword [ebp - 0x4c], 0
jg 0x100131de
push 1
lea ecx, [ebp - 0x1e8]
call fcn.10017d9e
mov byte [ebp - 4], 0xa
mov dword [ebp - 0x2ac], 1
mov dword [ebp - 0x2a8], 1
mov dword [ebp - 0x2a4], 1
mov dword [ebp - 0x2a0], 1
mov dword [ebp - 0x1a8], 0xffffffff
mov dword [ebp - 0x70], 0
jmp 0x10013044
mov eax, dword [ebp - 0x70]
inc eax
mov dword [ebp - 0x70], eax
cmp dword [ebp - 0x70], 1
jge 0x10013060
push dword [ebp - 0x70]
lea ecx, [ebp - 0x1e8]
call fcn.10017e3c
mov dword [eax], 0x1aa8
jmp 0x1001303d
mov dword [ebp - 0x34], 0
jmp 0x10013070
mov eax, dword [ebp - 0x34]
dec eax
mov dword [ebp - 0x34], eax
cmp dword [ebp - 0x34], 0
jl 0x100131ca
mov dword [ebp - 0x21c], 1
mov eax, dword [ebp - 0x4c]
mov esi, dword [ebp + eax*4 - 0x1c]
push 4
pop eax
imul eax, eax, 0
mov edi, dword [ebp + eax - 0x1c]
push 0
lea ecx, [ebp - 0x1e8]
call fcn.10017e3c
mov eax, dword [eax]
sub eax, 0x62b994b7
sub edi, eax
cmp esi, edi
jne 0x100130bb
mov dword [ebp - 0x190], 1
jmp 0x100130c2
and dword [ebp - 0x190], 0
mov eax, dword [ebp - 0x4c]
mov eax, dword [ebp + eax*4 - 0x1c]
imul eax, dword [ebp - 0x190]
test eax, eax
je 0x10013129
mov dword [ebp - 0x84], 0x75da2ca3
mov dword [ebp - 0x84], 0
jmp 0x100130f7
mov eax, dword [ebp - 0x84]
inc eax
mov dword [ebp - 0x84], eax
cmp dword [ebp - 0x84], 0
jg 0x10013124
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x4c]
mov eax, dword [ebp + eax - 0x1c]
mov dword [ebp + ecx*4 - 0x1c], eax
mov byte [ebp - 0x37], 0
lea eax, [ebp - 0x37]
push eax
push 0
call fcn.10014b73
pop ecx
pop ecx
jmp 0x100130ea
jmp 0x100131c5
mov dword [ebp - 0x6c], 0xd7d2a7e9
mov dword [ebp - 0x6c], 0
jmp 0x10013140
mov eax, dword [ebp - 0x6c]
inc eax
mov dword [ebp - 0x6c], eax
cmp dword [ebp - 0x6c], 0
jg 0x100131a1
push dword [ebp - 0x6c]
lea ecx, [ebp - 0x1e8]
call fcn.10017e3c
mov eax, dword [eax]
sub eax, 0xf0ed
je 0x1001316d
xor eax, eax
je 0x1001316d
mov dword [ebp - 0x198], 1
jmp 0x10013174
and dword [ebp - 0x198], 0
mov eax, dword [ebp - 0x198]
dec eax
mov dword [ebp - 0x1a0], eax
push 4
pop eax
shl eax, 1
mov ecx, dword [ebp - 0x1a0]
mov dword [ebp + eax - 0x2ac], ecx
mov eax, dword [ebp - 0x1a0]
mov dword [ebp - 0x1a8], eax
jmp 0x10013139
lea eax, [ebp - 0x1e8]
push eax
lea eax, [ebp - 0x1a8]
push eax
push 0x690b
push 1
lea eax, [ebp - 0x21c]
push eax
call fcn.10011b29
add esp, 0x14
jmp 0x10013069
mov byte [ebp - 4], 8
lea ecx, [ebp - 0x1e8]
call fcn.10017e20
jmp 0x10012fe0
jmp 0x100131f4
mov byte [ebp - 0x3f], 0
movzx eax, byte [ebp - 0x3f]
test eax, eax
je 0x100131f4
push 1
call fcn.10011b9a
pop ecx
push 0x10670a58
lea eax, [ebp + 0xc]
push eax
push 0
lea eax, [ebp - 0x34c]
push eax
call fcn.1001605b
add esp, 0x10
mov dword [ebp - 0x30], 0x42c70bb7
mov dword [ebp - 0x8c], 0
jmp 0x1001322e
mov eax, dword [ebp - 0x8c]
inc eax
mov dword [ebp - 0x8c], eax
cmp dword [ebp - 0x8c], 1
jge 0x1001324a
mov eax, dword [ebp - 0x8c]
mov dword [ebp + eax*4 - 0x30c], 4
jmp 0x10013221
mov dword [ebp - 0x30], 0
jmp 0x1001325a
mov eax, dword [ebp - 0x30]
inc eax
mov dword [ebp - 0x30], eax
cmp dword [ebp - 0x30], 0
jg 0x10013276
mov byte [ebp - 0x39], 0
movzx eax, byte [ebp - 0x39]
test eax, eax
je 0x10013274
push 1
call fcn.10011bd0
pop ecx
jmp 0x10013253
mov dword [ebp - 0x30], 3
jmp 0x10013286
mov eax, dword [ebp - 0x30]
dec eax
mov dword [ebp - 0x30], eax
cmp dword [ebp - 0x30], 1
jle 0x100132ae
mov byte [ebp - 0x4d], 0
movzx eax, byte [ebp - 0x4d]
test eax, eax
je 0x100132ac
push 0x7e4c
push 0x742f
push 0
call fcn.1001778c
add esp, 0xc
jmp 0x1001327f
lea eax, [ebp - 0x34c]
push eax
mov ecx, dword [ebp + 8]
call fcn.10017ca7
mov eax, dword [ebp - 0x74]
or eax, 1
mov dword [ebp - 0x74], eax
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x34c]
call fcn.10017d00
mov eax, dword [ebp + 8]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
mov esp, ebp
pop ebp
ret