Function at 0x100041b0
Capabilities:
Authenticate hmac
Contain obfuscated stackstrings
Parse pe header

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
push 0xffffffffffffffff
push 0x10021fb9
mov eax, dword fs:[0]
push eax
sub esp, 0x1d8
mov eax, dword [0x1002f018]
xor eax, esp
mov dword [esp + 0x1d0], eax
push ebx
push esi
push edi
mov eax, dword [0x1002f018]
xor eax, esp
push eax
lea eax, [esp + 0x1e8]
mov dword fs:[0], eax
mov dword [esp + 0x50], 0x44204646
mov word [esp + 0x54], 0x35
mov ecx, 0x10329340
lea eax, [esp + 0x114]
mov dword [esp + 0x1f0], 0
call fcn.1001b430
lea esi, [esp + 0x50]
push esi
push 0
push 0
mov byte [esp + 0x1fc], 1
mov ecx, dword [0x10162524]
mov edx, dword [ecx]
push 0
push 0
push eax
mov eax, dword [edx + 0x18]
call eax
xor eax, eax
mov dword [esp + 0x114], eax
mov dword [esp + 0x118], eax
mov word [esp + 0x11c], ax
mov dword [esp + 0x50], eax
mov word [esp + 0x54], ax
mov dword [esp + 0x184], 0x44204646
mov word [esp + 0x188], 0x35
mov dword [esp + 0x1f0], 2
mov ecx, 7
mov dl, byte [eax + str.Flmxn]
xor dl, cl
inc ecx
and ecx, 0x800000ff
mov byte [esp + eax + 0x94], dl
jns 0x100042a4
dec ecx
or ecx, 0xffffff00
inc ecx
inc eax
cmp eax, 0xf
jl 0x10004284
mov byte [esp + 0xa3], 0
lea edx, [esp + 0x184]
push edx
push 0
push 0
mov byte [esp + 0x1fc], 3
mov ecx, dword [0x10162524]
mov eax, dword [ecx]
mov eax, dword [eax + 0x18]
push 0
push 0
lea edx, [esp + 0xa8]
push edx
call eax
xor eax, eax
mov dword [esp + 0x94], eax
mov dword [esp + 0x98], eax
mov dword [esp + 0x9c], eax
mov dword [esp + 0xa0], eax
mov dword [esp + 0x184], eax
mov word [esp + 0x188], ax
mov ecx, 0x33
mov dl, byte [eax + 0x10027f00]
xor dl, cl
inc ecx
and ecx, 0x800000ff
mov byte [esp + eax + 0x58], dl
jns 0x1000432e
dec ecx
or ecx, 0xffffff00
inc ecx
inc eax
cmp eax, 0x18
jl 0x10004311
mov byte [esp + 0x70], 0
mov dword [esp + 0x1f0], 4
mov ecx, 0x33
xor eax, eax
jmp 0x10004350
mov dl, byte [eax + str.lDc_ROH]
xor dl, cl
inc ecx
and ecx, 0x800000ff
mov byte [esp + eax + 0x114], dl
jns 0x10004370
dec ecx
or ecx, 0xffffff00
inc ecx
inc eax
cmp eax, 0xd
jl 0x10004350
mov byte [esp + 0x121], 0
push 1
lea edx, [esp + 0x5c]
push edx
push 0
push 4
push 0x23
mov byte [esp + 0x204], 5
mov ecx, dword [0x10162524]
mov eax, dword [ecx]
mov eax, dword [eax + 0x14]
push 2
push 8
lea edx, [esp + 0x130]
push edx
call eax
xor eax, eax
mov dword [esp + 0x114], eax
mov dword [esp + 0x118], eax
mov dword [esp + 0x11c], eax
mov word [esp + 0x120], ax
mov dword [esp + 0x58], eax
mov dword [esp + 0x5c], eax
mov dword [esp + 0x60], eax
mov dword [esp + 0x64], eax
mov dword [esp + 0x68], eax
mov dword [esp + 0x6c], eax
mov byte [esp + 0x70], al
mov ecx, 0x1f
lea esp, [esp]
mov dl, byte [eax + 0x10027f2c]
xor dl, cl
inc ecx
and ecx, 0x800000ff
mov byte [esp + eax + 0x14], dl
jns 0x1000440d
dec ecx
or ecx, 0xffffff00
inc ecx
inc eax
cmp eax, 0x35
jl 0x100043f0
mov byte [esp + 0x49], 0
mov dword [esp + 0x1f0], 6
mov ecx, 0x1f
xor eax, eax
lea ebx, [ebx]
mov dl, byte [eax + str._EBPZTQ_ba_GI_EB_]
xor dl, cl
inc ecx
and ecx, 0x800000ff
mov byte [esp + eax + 0x94], dl
jns 0x10004450
dec ecx
or ecx, 0xffffff00
inc ecx
inc eax
cmp eax, 0x10
jl 0x10004430
mov byte [esp + 0xa4], 0
lea edx, [esp + 0x14]
push edx
push 0
push 4
mov byte [esp + 0x1fc], 7
mov ecx, dword [0x10162524]
mov eax, dword [ecx]
mov eax, dword [eax + 0x18]
push 5
push 8
lea edx, [esp + 0xa8]
push edx
call eax
mov dword [esp + 0x1f0], 0xffffffff
call fcn.100035b0
mov ecx, 0xce
xor eax, eax
nop
mov dl, byte [eax + 0x10027f78]
xor dl, cl
inc ecx
and ecx, 0x800000ff
mov byte [esp + eax + 0x14], dl
jns 0x100044bd
dec ecx
or ecx, 0xffffff00
inc ecx
inc eax
cmp eax, 0x38
jl 0x100044a0
mov byte [esp + 0x4c], 0
mov dword [esp + 0x1f0], 8
mov ecx, 0x32
xor eax, eax
lea ebx, [ebx]
mov dl, byte [eax + str._PPNvNXNZN]
xor dl, cl
inc ecx
and ecx, 0x800000ff
mov byte [esp + eax + 0x94], dl
jns 0x10004500
dec ecx
or ecx, 0xffffff00
inc ecx
inc eax
cmp eax, 0x10
jl 0x100044e0
mov byte [esp + 0xa4], 0
lea edx, [esp + 0x14]
push edx
push 0
push 4
mov byte [esp + 0x1fc], 9
mov ecx, dword [0x10162524]
mov eax, dword [ecx]
mov eax, dword [eax + 0x18]
push 2
push 8
lea edx, [esp + 0xa8]
push edx
call eax
xor eax, eax
push 0x39
push eax
lea ecx, [esp + 0x1c]
push ecx
mov dword [esp + 0xa0], eax
mov dword [esp + 0xa4], eax
mov dword [esp + 0xa8], eax
mov dword [esp + 0xac], eax
mov byte [esp + 0xb0], al
call sub.MSVCR100.dll_memset
add esp, 0xc
mov ecx, 3
xor eax, eax
mov dl, byte [eax + str.B5_98_6532.0_1Q4R7:__]
xor dl, cl
inc ecx
and ecx, 0x800000ff
mov byte [esp + eax + 0x58], dl
jns 0x10004591
dec ecx
or ecx, 0xffffff00
inc ecx
inc eax
cmp eax, 0x3b
jl 0x10004574
mov byte [esp + 0x93], 0
mov dword [esp + 0x1f0], 0xa
mov ecx, 0x32
xor eax, eax
mov dl, byte [eax + 0x10028004]
xor dl, cl
inc ecx
and ecx, 0x800000ff
mov byte [esp + eax + 0x114], dl
jns 0x100045d1
dec ecx
or ecx, 0xffffff00
inc ecx
inc eax
cmp eax, 0x14
jl 0x100045b1
mov byte [esp + 0x128], 0
lea edx, [esp + 0x58]
push edx
push 0
push 4
mov byte [esp + 0x1fc], 0xb
mov ecx, dword [0x10162524]
mov eax, dword [ecx]
mov eax, dword [eax + 0x18]
push 1
push 8
lea edx, [esp + 0x128]
push edx
call eax
xor eax, eax
push 0x3c
push eax
lea ecx, [esp + 0x60]
push ecx
mov dword [esp + 0x120], eax
mov dword [esp + 0x124], eax
mov dword [esp + 0x128], eax
mov dword [esp + 0x12c], eax
mov dword [esp + 0x130], eax
mov byte [esp + 0x134], al
call sub.MSVCR100.dll_memset
add esp, 0xc
mov ecx, 6
xor eax, eax
lea esp, [esp]
mov dl, byte [eax + str.0F_9_:L.__1W46_8:___X_]
xor dl, cl
inc ecx
and ecx, 0x800000ff
mov byte [esp + eax + 0xcc], dl
jns 0x10004670
dec ecx
or ecx, 0xffffff00
inc ecx
inc eax
cmp eax, 0x1c
jl 0x10004650
mov byte [esp + 0xe8], 0
mov dword [esp + 0x1f0], 0xc
mov ecx, 6
xor eax, eax
mov dl, byte [eax + str.OA_YH__bgadt_Drv]
xor dl, cl
inc ecx
and ecx, 0x800000ff
mov byte [esp + eax + 0x148], dl
jns 0x100046b0
dec ecx
or ecx, 0xffffff00
inc ecx
inc eax
cmp eax, 0x1d
jl 0x10004690
mov byte [esp + 0x165], 0
lea edx, [esp + 0xcc]
push edx
push 0
push 1
mov byte [esp + 0x1fc], 0xd
mov ecx, dword [0x10162524]
mov eax, dword [ecx]
mov eax, dword [eax + 0x18]
push 0xb
push 8
lea edx, [esp + 0x15c]
push edx
call eax
mov ecx, 0x7e
xor eax, eax
mov dl, byte [eax + 0x1002805c]
xor dl, cl
inc ecx
and ecx, 0x800000ff
mov byte [esp + eax + 0x14], dl
jns 0x1000470f
dec ecx
or ecx, 0xffffff00
inc ecx
inc eax
cmp eax, 0x27
jl 0x100046f2
mov byte [esp + 0x3b], 0
mov ecx, 0x101f9a98
lea eax, [esp + 0x114]
mov dword [esp + 0x1f0], 0xe
call fcn.1001b4b0
push 1
lea esi, [esp + 0x18]
push esi
push 0
push 4
push 8
mov byte [esp + 0x204], 0xf
mov ecx, dword [0x10162524]
mov edx, dword [ecx]
push 0
push 6
push eax
mov eax, dword [edx + 0x14]
call eax
xor eax, eax
mov dword [esp + 0x114], eax
mov dword [esp + 0x118], eax
mov word [esp + 0x11c], ax
mov byte [esp + 0x11e], al
mov dword [esp + 0x14], eax
mov dword [esp + 0x18], eax
mov dword [esp + 0x1c], eax
mov dword [esp + 0x20], eax
mov dword [esp + 0x24], eax
mov dword [esp + 0x28], eax
mov dword [esp + 0x2c], eax
mov dword [esp + 0x30], eax
mov dword [esp + 0x34], eax
mov dword [esp + 0x38], eax
mov ecx, 0x7e
lea esp, [esp]
mov dl, byte [eax + 0x10028090]
xor dl, cl
inc ecx
and ecx, 0x800000ff
mov byte [esp + eax + 0xcc], dl
jns 0x100047d0
dec ecx
or ecx, 0xffffff00
inc ecx
inc eax
cmp eax, 0x28
jl 0x100047b0
mov byte [esp + 0xf4], 0
mov dword [esp + 0x1f0], 0x10
mov ecx, 0xeb
xor eax, eax
mov dl, byte [eax + 0x100280bc]
xor dl, cl
inc ecx
and ecx, 0x800000ff
mov byte [esp + eax + 0x148], dl
jns 0x10004810
dec ecx
or ecx, 0xffffff00
inc ecx
inc eax
cmp eax, 0x29
jl 0x100047f0
mov byte [esp + 0x171], 0
lea edx, [esp + 0xcc]
push edx
push 0
push 4
mov byte [esp + 0x1fc], 0x11
mov ecx, dword [0x10162524]
mov eax, dword [ecx]
mov eax, dword [eax + 0x18]
push 4
push 8
lea edx, [esp + 0x15c]
push edx
call eax
push 0x2a
lea ecx, [esp + 0x14c]
push 0
push ecx
call sub.MSVCR100.dll_memset
add esp, 0xc
push 0x29
lea edx, [esp + 0xd0]
push 0
push edx
call sub.MSVCR100.dll_memset
add esp, 0xc
mov ecx, 0xb1
xor eax, eax
lea ebx, [ebx]
mov dl, byte [eax + 0x100280e8]
xor dl, cl
inc ecx
and ecx, 0x800000ff
mov byte [esp + eax + 0x14], dl
jns 0x1000489d
dec ecx
or ecx, 0xffffff00
inc ecx
inc eax
cmp eax, 0x1f
jl 0x10004880
mov byte [esp + 0x33], 0
mov dword [esp + 0x1f0], 0x12
mov ecx, 0xcb
xor eax, eax
lea ebx, [ebx]
mov dl, byte [eax + 0x10028108]
xor dl, cl
inc ecx
and ecx, 0x800000ff
mov byte [esp + eax + 0x114], dl
jns 0x100048e0
dec ecx
or ecx, 0xffffff00
inc ecx
inc eax
cmp eax, 0xe
jl 0x100048c0
mov byte [esp + 0x122], 0
push 1
lea edx, [esp + 0x18]
push edx
push 0
push 4
push 0xffffffffffffffc1
mov byte [esp + 0x204], 0x13
mov ecx, dword [0x10162524]
mov eax, dword [ecx]
mov eax, dword [eax + 0x14]
push 2
push 8
lea edx, [esp + 0x130]
push edx
call eax
xor eax, eax
mov dword [esp + 0x114], eax
mov dword [esp + 0x118], eax
mov dword [esp + 0x11c], eax
mov word [esp + 0x120], ax
mov byte [esp + 0x122], al
mov dword [esp + 0x14], eax
mov dword [esp + 0x18], eax
mov dword [esp + 0x1c], eax
mov dword [esp + 0x20], eax
mov dword [esp + 0x24], eax
mov dword [esp + 0x28], eax
mov dword [esp + 0x2c], eax
mov dword [esp + 0x30], eax
mov ecx, 0xfa
mov dl, byte [eax + 0x10028118]
xor dl, cl
inc ecx
and ecx, 0x800000ff
mov byte [esp + eax + 0x58], dl
jns 0x10004984
dec ecx
or ecx, 0xffffff00
inc ecx
inc eax
cmp eax, 0x16
jl 0x10004967
mov byte [esp + 0x6e], 0
mov dword [esp + 0x1f0], 0x14
mov ecx, 0xfa
xor eax, eax
mov dl, byte [eax + 0x10028130]
xor dl, cl
inc ecx
and ecx, 0x800000ff
mov byte [esp + eax + 0x94], dl
jns 0x100049c1
dec ecx
or ecx, 0xffffff00
inc ecx
inc eax
cmp eax, 0xe
jl 0x100049a1
mov byte [esp + 0xa2], 0
lea edx, [esp + 0x58]
push edx
push 0
push 4
mov byte [esp + 0x1fc], 0x15
mov ecx, dword [0x10162524]
mov eax, dword [ecx]
mov eax, dword [eax + 0x18]
push 1
push 8
lea edx, [esp + 0xa8]
push edx
call eax
mov ecx, 0x29
xor eax, eax
mov dl, byte [eax + 0x10028140]
xor dl, cl
inc ecx
and ecx, 0x800000ff
mov byte [esp + eax + 0x94], dl
jns 0x10004a20
dec ecx
or ecx, 0xffffff00
inc ecx
inc eax
cmp eax, 0x14
jl 0x10004a00
mov byte [esp + 0xa8], 0
mov dword [esp + 0x1f0], 0x16
mov eax, dword [0x10162524]
mov esi, dword [eax]
call fcn.10017890
mov edx, dword [esi + 0xc]
push eax
push 0
push 0
push 0
lea ecx, [esp + 0xa4]
push ecx
mov ecx, dword [0x10162524]
call edx
xor eax, eax
mov dword [esp + 0x94], eax
mov dword [esp + 0x98], eax
mov dword [esp + 0x9c], eax
mov dword [esp + 0xa0], eax
mov dword [esp + 0xa4], eax
mov byte [esp + 0xa8], al
mov ecx, 0x6c
mov dl, byte [eax + str.YXNW2Q70T_GWMHZNO_KI]
xor dl, cl
inc ecx
and ecx, 0x800000ff
mov byte [esp + eax + 0x14], dl
jns 0x10004aad
dec ecx
or ecx, 0xffffff00
inc ecx
inc eax
cmp eax, 0x2c
jl 0x10004a90
mov byte [esp + 0x40], 0
mov dword [esp + 0x1f0], 0x17
mov ecx, 0x6c
xor eax, eax
lea ebx, [ebx]
mov dl, byte [eax + 0x10028188]
xor dl, cl
inc ecx
and ecx, 0x800000ff
mov byte [esp + eax + 0x58], dl
jns 0x10004aed
dec ecx
or ecx, 0xffffff00
inc ecx
inc eax
cmp eax, 0x18
jl 0x10004ad0
mov byte [esp + 0x70], 0
lea edx, [esp + 0x14]
push edx
push 0
push 0
mov byte [esp + 0x1fc], 0x18
mov ecx, dword [0x10162524]
mov eax, dword [ecx]
mov eax, dword [eax + 0x18]
push 0
push 0
lea edx, [esp + 0x6c]
push edx
call eax
xor eax, eax
push 0x2d
push eax
lea ecx, [esp + 0x1c]
push ecx
mov dword [esp + 0x64], eax
mov dword [esp + 0x68], eax
mov dword [esp + 0x6c], eax
mov dword [esp + 0x70], eax
mov dword [esp + 0x74], eax
mov dword [esp + 0x78], eax
mov byte [esp + 0x7c], al
call sub.MSVCR100.dll_memset
add esp, 0xc
mov ecx, 0xcb
xor eax, eax
mov dl, byte [eax + 0x100281a4]
xor dl, cl
inc ecx
and ecx, 0x800000ff
mov byte [esp + eax + 0x148], dl
jns 0x10004b74
dec ecx
or ecx, 0xffffff00
inc ecx
inc eax
cmp eax, 0x3b
jl 0x10004b54
mov byte [esp + 0x183], 0
mov dword [esp + 0x1f0], 0x19
mov ecx, 0x87
xor eax, eax
mov dl, byte [eax + 0x100281e0]
xor dl, cl
inc ecx
and ecx, 0x800000ff
mov byte [esp + eax + 0xcc], dl
jns 0x10004bb4
dec ecx
or ecx, 0xffffff00
inc ecx
inc eax
cmp eax, 0x1b
jl 0x10004b94
mov byte [esp + 0xe7], 0
lea edx, [esp + 0x148]
push edx
push 0
push 4
mov byte [esp + 0x1fc], 0x1a
mov ecx, dword [0x10162524]
mov eax, dword [ecx]
mov eax, dword [eax + 0x18]
push 8
push 8
lea edx, [esp + 0xe0]
push edx
call eax
xor eax, eax
push 0x3c
push eax
lea ecx, [esp + 0x150]
push ecx
mov dword [esp + 0xd8], eax
mov dword [esp + 0xdc], eax
mov dword [esp + 0xe0], eax
mov dword [esp + 0xe4], eax
mov dword [esp + 0xe8], eax
mov dword [esp + 0xec], eax
mov dword [esp + 0xf0], eax
call sub.MSVCR100.dll_memset
add esp, 0xc
mov ecx, 0x3b
xor eax, eax
lea esp, [esp]
mov dl, byte [eax + 0x100281fc]
xor dl, cl
inc ecx
and ecx, 0x800000ff
mov byte [esp + eax + 0x14], dl
jns 0x10004c5d
dec ecx
or ecx, 0xffffff00
inc ecx
inc eax
cmp eax, 0x35
jl 0x10004c40
mov byte [esp + 0x49], 0
mov dword [esp + 0x1f0], 0x1b
mov ecx, 0x65
xor eax, eax
lea ebx, [ebx]
mov dl, byte [eax + 0x10028234]
xor dl, cl
inc ecx
and ecx, 0x800000ff
mov byte [esp + eax + 0x58], dl
jns 0x10004c9d
dec ecx
or ecx, 0xffffff00
inc ecx
inc eax
cmp eax, 0x18
jl 0x10004c80
mov byte [esp + 0x70], 0
lea edx, [esp + 0x14]
push edx
push 0
push 0
mov byte [esp + 0x1fc], 0x1c
mov ecx, dword [0x10162524]
mov eax, dword [ecx]
mov eax, dword [eax + 0x18]
push 7
push 2
lea edx, [esp + 0x6c]
push edx
call eax
xor eax, eax
push 0x36
push eax
lea ecx, [esp + 0x1c]
push ecx
mov dword [esp + 0x64], eax
mov dword [esp + 0x68], eax
mov dword [esp + 0x6c], eax
mov dword [esp + 0x70], eax
mov dword [esp + 0x74], eax
mov dword [esp + 0x78], eax
mov byte [esp + 0x7c], al
call sub.MSVCR100.dll_memset
add esp, 0xc
mov ecx, 0x65
xor eax, eax
mov dl, byte [eax + 0x10028234]
xor dl, cl
inc ecx
and ecx, 0x800000ff
mov byte [esp + eax + 0x94], dl
jns 0x10004d24
dec ecx
or ecx, 0xffffff00
inc ecx
inc eax
cmp eax, 0x18
jl 0x10004d04
mov byte [esp + 0xac], 0
mov dword [esp + 0x1f0], 0x1d
mov ecx, 0xd
xor eax, eax
mov dl, byte [eax + str.H_kBtwqgFxqwnn3HLHFBPLII]
xor dl, cl
inc ecx
and ecx, 0x800000ff
mov byte [esp + eax + 0xcc], dl
jns 0x10004d64
dec ecx
or ecx, 0xffffff00
inc ecx
inc eax
cmp eax, 0x1b
jl 0x10004d44
mov byte [esp + 0xe7], 0
mov byte [esp + 0x1f0], 0x1e
mov ecx, dword [0x10162524]
mov esi, dword [ecx]
mov eax, dword [esi + 0x28]
lea edx, [esp + 0x94]
push edx
call eax
mov edx, dword [esi + 0xc]
push eax
push 4
push 2
push 8
lea ecx, [esp + 0xdc]
push ecx
mov ecx, dword [0x10162524]
call edx
xor eax, eax
mov dword [esp + 0xcc], eax
mov dword [esp + 0xd0], eax
mov dword [esp + 0xd4], eax
mov dword [esp + 0xd8], eax
mov dword [esp + 0xdc], eax
mov dword [esp + 0xe0], eax
mov dword [esp + 0xe4], eax
mov dword [esp + 0x94], eax
mov dword [esp + 0x98], eax
mov dword [esp + 0x9c], eax
mov dword [esp + 0xa0], eax
mov dword [esp + 0xa4], eax
mov dword [esp + 0xa8], eax
mov byte [esp + 0xac], al
mov ecx, 0xd
mov dl, byte [eax + str.H_kBtwqgFxqwnn3HLHFBPLII]
xor dl, cl
inc ecx
and ecx, 0x800000ff
mov byte [esp + eax + 0x148], dl
jns 0x10004e32
dec ecx
or ecx, 0xffffff00
inc ecx
inc eax
cmp eax, 0x1b
jl 0x10004e12
mov byte [esp + 0x163], 0
mov dword [esp + 0x1f0], 0x1f
mov ecx, dword [0x10162524]
mov eax, dword [ecx]
mov eax, dword [eax + 0x28]
lea edx, [esp + 0x148]
push edx
call eax
cmp eax, 0xcccc
seta al
mov edi, 0x10339763
test al, al
je 0x10004f2c
lea esi, [esp + 0x148]
call fcn.1001b580
mov ebx, eax
mov edi, 0x100ea4a8
lea esi, [esp + 0x94]
mov dword [esp + 0x1f0], 0x20
call fcn.1001b5c0
mov esi, eax
mov byte [esp + 0x1f0], 0x21
mov ecx, dword [0x10162524]
mov edi, dword [ecx]
mov eax, dword [edi + 0x28]
push ebx
call eax
mov ecx, dword [0x10162524]
mov edx, dword [edi + 0xc]
push eax
push 1
push 2
push 8
push esi
call edx
xor eax, eax
mov dword [esp + 0x94], eax
mov dword [esp + 0x98], eax
mov dword [esp + 0x9c], eax
mov dword [esp + 0xa0], eax
mov dword [esp + 0xa4], eax
mov dword [esp + 0xa8], eax
mov dword [esp + 0x148], eax
mov dword [esp + 0x14c], eax
mov dword [esp + 0x150], eax
mov dword [esp + 0x154], eax
mov dword [esp + 0x158], eax
mov dword [esp + 0x15c], eax
mov byte [esp + 0x160], al
jmp 0x10004fde
lea esi, [esp + 0xcc]
call fcn.1001b580
mov ebx, eax
mov edi, 0x100ea4a8
lea esi, [esp + 0x114]
mov dword [esp + 0x1f0], 0x22
call fcn.1001b5c0
mov esi, eax
mov byte [esp + 0x1f0], 0x23
mov ecx, dword [0x10162524]
mov edi, dword [ecx]
mov edx, dword [edi + 0x28]
push ebx
call edx
mov ecx, dword [0x10162524]
push eax
mov eax, dword [edi + 0xc]
push 4
push 2
push 8
push esi
call eax
xor eax, eax
mov dword [esp + 0x114], eax
mov dword [esp + 0x118], eax
mov dword [esp + 0x11c], eax
mov dword [esp + 0x120], eax
mov dword [esp + 0x124], eax
mov dword [esp + 0x128], eax
mov dword [esp + 0xcc], eax
mov dword [esp + 0xd0], eax
mov dword [esp + 0xd4], eax
mov dword [esp + 0xd8], eax
mov dword [esp + 0xdc], eax
mov dword [esp + 0xe0], eax
mov byte [esp + 0xe4], al
mov ecx, 0x65
xor eax, eax
mov dl, byte [eax + 0x10028284]
xor dl, cl
inc ecx
and ecx, 0x800000ff
mov byte [esp + eax + 0x14], dl
jns 0x10005002
dec ecx
or ecx, 0xffffff00
inc ecx
inc eax
cmp eax, 0x1e
jl 0x10004fe5
mov byte [esp + 0x32], 0
mov dword [esp + 0x1f0], 0x24
mov ecx, 0x45
xor eax, eax
nop
mov dl, byte [eax + 0x100282a4]
xor dl, cl
inc ecx
and ecx, 0x800000ff
mov byte [esp + eax + 0x58], dl
jns 0x1000503d
dec ecx
or ecx, 0xffffff00
inc ecx
inc eax
cmp eax, 0x16
jl 0x10005020
mov byte [esp + 0x6e], 0
push 1
lea edx, [esp + 0x18]
push edx
push 0
push 4
push 0x8d
mov byte [esp + 0x204], 0x25
mov ecx, dword [0x10162524]
mov eax, dword [ecx]
mov eax, dword [eax + 0x14]
push 0
push 8
lea edx, [esp + 0x74]
push edx
call eax
xor eax, eax
mov dword [esp + 0x58], eax
mov dword [esp + 0x5c], eax
mov dword [esp + 0x60], eax
mov dword [esp + 0x64], eax
mov dword [esp + 0x68], eax
mov word [esp + 0x6c], ax
mov byte [esp + 0x6e], al
mov dword [esp + 0x14], eax
mov dword [esp + 0x18], eax
mov dword [esp + 0x1c], eax
mov dword [esp + 0x20], eax
mov dword [esp + 0x24], eax
mov dword [esp + 0x28], eax
mov dword [esp + 0x2c], eax
mov word [esp + 0x30], ax
mov byte [esp + 0x32], al
mov ecx, 0x45
nop
mov dl, byte [eax + 0x100282a4]
xor dl, cl
inc ecx
and ecx, 0x800000ff
mov byte [esp + eax + 0x94], dl
jns 0x100050e0
dec ecx
or ecx, 0xffffff00
inc ecx
inc eax
cmp eax, 0x16
jl 0x100050c0
mov byte [esp + 0xaa], 0
mov dword [esp + 0x1f0], 0x26
mov ecx, dword [0x10162524]
mov eax, dword [ecx]
mov eax, dword [eax + 0x28]
lea edx, [esp + 0x94]
push edx
call eax
cmp eax, 0x1000
seta al
mov edi, 0x1030afdb
test al, al
je 0x100051ce
lea esi, [esp + 0x14]
call fcn.1001b600
mov ebx, eax
mov edi, 0x1030b013
lea esi, [esp + 0xcc]
mov dword [esp + 0x1f0], 0x27
call fcn.1001b640
push 1
push ebx
push 0
push 1
push 0x8d
mov byte [esp + 0x204], 0x28
mov ecx, dword [0x10162524]
mov edx, dword [ecx]
push 0
push 8
push eax
mov eax, dword [edx + 0x14]
call eax
xor eax, eax
mov dword [esp + 0xcc], eax
mov dword [esp + 0xd0], eax
mov dword [esp + 0xd4], eax
mov dword [esp + 0xd8], eax
mov dword [esp + 0xdc], eax
mov dword [esp + 0xe0], eax
mov word [esp + 0xe4], ax
mov dword [esp + 0x14], eax
mov dword [esp + 0x18], eax
mov dword [esp + 0x1c], eax
mov dword [esp + 0x20], eax
mov dword [esp + 0x24], eax
mov dword [esp + 0x28], eax
mov dword [esp + 0x2c], eax
mov word [esp + 0x30], ax
mov byte [esp + 0x32], al
jmp 0x10005292
lea esi, [esp + 0x94]
call fcn.1001b600
mov ebx, eax
mov edi, 0x1030b013
lea esi, [esp + 0x148]
mov dword [esp + 0x1f0], 0x29
call fcn.1001b640
push 1
push ebx
push 0
push 4
push 0x8d
mov byte [esp + 0x204], 0x2a
mov ecx, dword [0x10162524]
mov edx, dword [ecx]
push 0
push 8
push eax
mov eax, dword [edx + 0x14]
call eax
xor eax, eax
mov dword [esp + 0x148], eax
mov dword [esp + 0x14c], eax
mov dword [esp + 0x150], eax
mov dword [esp + 0x154], eax
mov dword [esp + 0x158], eax
mov dword [esp + 0x15c], eax
mov word [esp + 0x160], ax
mov dword [esp + 0x94], eax
mov dword [esp + 0x98], eax
mov dword [esp + 0x9c], eax
mov dword [esp + 0xa0], eax
mov dword [esp + 0xa4], eax
mov dword [esp + 0xa8], eax
mov dword [esp + 0xac], eax
mov word [esp + 0xb0], ax
mov byte [esp + 0xb2], al
mov ecx, 0x3c
xor eax, eax
lea esp, [esp]
mov dl, byte [eax + 0x100282d8]
xor dl, cl
inc ecx
and ecx, 0x800000ff
mov byte [esp + eax + 0x114], dl
jns 0x100052c0
dec ecx
or ecx, 0xffffff00
inc ecx
inc eax
cmp eax, 0x20
jl 0x100052a0
mov byte [esp + 0x134], 0
mov dword [esp + 0x1f0], 0x2b
mov ecx, 0xdb
xor eax, eax
mov dl, byte [eax + 0x100282fc]
xor dl, cl
inc ecx
and ecx, 0x800000ff
mov byte [esp + eax + 0x58], dl
jns 0x100052fd
dec ecx
or ecx, 0xffffff00
inc ecx
inc eax
cmp eax, 0x16
jl 0x100052e0
mov byte [esp + 0x6e], 0
lea edx, [esp + 0x114]
push edx
push 0
push 4
mov byte [esp + 0x1fc], 0x2c
mov ecx, dword [0x10162524]
mov eax, dword [ecx]
mov eax, dword [eax + 0x18]
push 0xfffffffffffffffc
push 8
lea edx, [esp + 0x6c]
push edx
call eax
xor eax, eax
mov dword [esp + 0x58], eax
mov dword [esp + 0x5c], eax
mov dword [esp + 0x60], eax
mov dword [esp + 0x64], eax
mov dword [esp + 0x68], eax
mov word [esp + 0x6c], ax
mov byte [esp + 0x6e], al
mov dword [esp + 0x114], eax
mov dword [esp + 0x118], eax
mov dword [esp + 0x11c], eax
mov dword [esp + 0x120], eax
mov dword [esp + 0x124], eax
mov dword [esp + 0x128], eax
mov dword [esp + 0x12c], eax
mov dword [esp + 0x130], eax
mov byte [esp + 0x134], al
mov ecx, 0xdb
mov dl, byte [eax + 0x100282fc]
xor dl, cl
inc ecx
and ecx, 0x800000ff
mov byte [esp + eax + 0x94], dl
jns 0x100053b5
dec ecx
or ecx, 0xffffff00
inc ecx
inc eax
cmp eax, 0x16
jl 0x10005395
mov byte [esp + 0xaa], 0
mov dword [esp + 0x1f0], 0x2d
mov ecx, dword [0x10162524]
mov eax, dword [ecx]
mov eax, dword [eax + 0x28]
lea edx, [esp + 0x94]
push edx
call eax
cmp eax, 0x10000
seta al
mov edi, 0x1008a83c
test al, al
je 0x1000549b
lea esi, [esp + 0x14]
call fcn.1001b680
mov ebx, eax
mov edi, 0x1008a878
lea esi, [esp + 0xcc]
mov dword [esp + 0x1f0], 0x2e
call fcn.1001b6c0
push ebx
push 0
push 1
mov byte [esp + 0x1fc], 0x2f
mov ecx, dword [0x10162524]
mov edx, dword [ecx]
push 0xffffffffffffffff
push 8
push eax
mov eax, dword [edx + 0x18]
call eax
xor eax, eax
mov dword [esp + 0xcc], eax
mov dword [esp + 0xd0], eax
mov dword [esp + 0xd4], eax
mov dword [esp + 0xd8], eax
mov dword [esp + 0xdc], eax
mov dword [esp + 0xe0], eax
mov word [esp + 0xe4], ax
mov dword [esp + 0x14], eax
mov dword [esp + 0x18], eax
mov dword [esp + 0x1c], eax
mov dword [esp + 0x20], eax
mov dword [esp + 0x24], eax
mov dword [esp + 0x28], eax
mov dword [esp + 0x2c], eax
mov dword [esp + 0x30], eax
mov byte [esp + 0x34], al
jmp 0x10005557
lea esi, [esp + 0x114]
call fcn.1001b680
mov ebx, eax
mov edi, 0x1008a878
lea esi, [esp + 0x148]
mov dword [esp + 0x1f0], 0x30
call fcn.1001b6c0
push ebx
push 0
push 4
mov byte [esp + 0x1fc], 0x31
mov ecx, dword [0x10162524]
mov edx, dword [ecx]
push 0xfffffffffffffffc
push 8
push eax
mov eax, dword [edx + 0x18]
call eax
xor eax, eax
mov dword [esp + 0x148], eax
mov dword [esp + 0x14c], eax
mov dword [esp + 0x150], eax
mov dword [esp + 0x154], eax
mov dword [esp + 0x158], eax
mov dword [esp + 0x15c], eax
mov word [esp + 0x160], ax
mov dword [esp + 0x114], eax
mov dword [esp + 0x118], eax
mov dword [esp + 0x11c], eax
mov dword [esp + 0x120], eax
mov dword [esp + 0x124], eax
mov dword [esp + 0x128], eax
mov dword [esp + 0x12c], eax
mov dword [esp + 0x130], eax
mov byte [esp + 0x134], al
mov ecx, 0xe4
xor eax, eax
mov edi, edi
mov dl, byte [eax + 0x10028330]
xor dl, cl
inc ecx
and ecx, 0x800000ff
mov byte [esp + eax + 0x94], dl
jns 0x10005580
dec ecx
or ecx, 0xffffff00
inc ecx
inc eax
cmp eax, 0x18
jl 0x10005560
mov byte [esp + 0xac], 0
mov dword [esp + 0x1f0], 0x32
mov ecx, 0x7f
xor eax, eax
mov dl, byte [eax + 0x1002834c]
xor dl, cl
inc ecx
and ecx, 0x800000ff
mov byte [esp + eax + 0x58], dl
jns 0x100055bd
dec ecx
or ecx, 0xffffff00
inc ecx
inc eax
cmp eax, 0x16
jl 0x100055a0
mov byte [esp + 0x6e], 0
push 1
lea edx, [esp + 0x98]
push edx
push 0
push 4
push 0x8e
mov byte [esp + 0x204], 0x33
mov ecx, dword [0x10162524]
mov eax, dword [ecx]
mov eax, dword [eax + 0x14]
push 0
push 8
lea edx, [esp + 0x74]
push edx
call eax
xor eax, eax
mov dword [esp + 0x58], eax
mov dword [esp + 0x5c], eax
mov dword [esp + 0x60], eax
mov dword [esp + 0x64], eax
mov dword [esp + 0x68], eax
mov word [esp + 0x6c], ax
mov byte [esp + 0x6e], al
mov dword [esp + 0x94], eax
mov dword [esp + 0x98], eax
mov dword [esp + 0x9c], eax
mov dword [esp + 0xa0], eax
mov dword [esp + 0xa4], eax
mov dword [esp + 0xa8], eax
mov byte [esp + 0xac], al
mov ecx, 0xfa
mov edi, edi
mov dl, byte [eax + 0x10028364]
xor dl, cl
inc ecx
and ecx, 0x800000ff
mov byte [esp + eax + 0x14], dl
jns 0x1000566d
dec ecx
or ecx, 0xffffff00
inc ecx
inc eax
cmp eax, 0x21
jl 0x10005650
mov byte [esp + 0x35], 0
mov dword [esp + 0x1f0], 0x34
mov ecx, 0x19
xor eax, eax
lea ebx, [ebx]
mov dl, byte [eax + 0x10028388]
xor dl, cl
inc ecx
and ecx, 0x800000ff
mov byte [esp + eax + 0xcc], dl
jns 0x100056b0
dec ecx
or ecx, 0xffffff00
inc ecx
inc eax
cmp eax, 0x19
jl 0x10005690
mov byte [esp + 0xe5], 0
push 1
lea edx, [esp + 0x18]
push edx
push 0
push 4
push 0x98
mov byte [esp + 0x204], 0x35
mov ecx, dword [0x10162524]
mov eax, dword [ecx]
mov eax, dword [eax + 0x14]
push 0
push 8
lea edx, [esp + 0xe8]
push edx
call eax
xor eax, eax
mov dword [esp + 0xcc], eax
mov dword [esp + 0xd0], eax
mov dword [esp + 0xd4], eax
mov dword [esp + 0xd8], eax
mov dword [esp + 0xdc], eax
mov dword [esp + 0xe0], eax
mov word [esp + 0xe4], ax
mov dword [esp + 0x14], eax
mov dword [esp + 0x18], eax
mov dword [esp + 0x1c], eax
mov dword [esp + 0x20], eax
mov dword [esp + 0x24], eax
mov dword [esp + 0x28], eax
mov dword [esp + 0x2c], eax
mov dword [esp + 0x30], eax
mov word [esp + 0x34], ax
mov ecx, 0x19
lea ecx, [ecx]
mov dl, byte [eax + 0x10028388]
xor dl, cl
inc ecx
and ecx, 0x800000ff
mov byte [esp + eax + 0x148], dl
jns 0x10005770
dec ecx
or ecx, 0xffffff00
inc ecx
inc eax
cmp eax, 0x19
jl 0x10005750
mov byte [esp + 0x161], 0
mov dword [esp + 0x1f0], 0x36
mov ecx, dword [0x10162524]
mov eax, dword [ecx]
mov eax, dword [eax + 0x28]
lea edx, [esp + 0x148]
push edx
call eax
cmp eax, 0x100000
seta al
mov edi, 0x102c9386
test al, al
je 0x1000586a
lea esi, [esp + 0x14]
call fcn.1001b700
mov ebx, eax
mov edi, 0x100283a4
sub edi, 0x16440e0f
lea esi, [esp + 0xcc]
mov dword [esp + 0x1f0], 0x37
call fcn.1001b740
push 1
push ebx
push 0
push 1
push 0x98
mov byte [esp + 0x204], 0x38
mov ecx, dword [0x10162524]
mov edx, dword [ecx]
push 0
push 8
push eax
mov eax, dword [edx + 0x14]
call eax
xor eax, eax
mov dword [esp + 0xcc], eax
mov dword [esp + 0xd0], eax
mov dword [esp + 0xd4], eax
mov dword [esp + 0xd8], eax
mov dword [esp + 0xdc], eax
mov dword [esp + 0xe0], eax
mov dword [esp + 0xe4], eax
mov byte [esp + 0xe8], al
mov dword [esp + 0x14], eax
mov dword [esp + 0x18], eax
mov dword [esp + 0x1c], eax
mov dword [esp + 0x20], eax
mov dword [esp + 0x24], eax
mov dword [esp + 0x28], eax
mov dword [esp + 0x2c], eax
mov dword [esp + 0x30], eax
mov word [esp + 0x34], ax
jmp 0x1000593a
lea esi, [esp + 0x94]
call fcn.1001b700
mov ebx, eax
mov edi, 0x100283a4
sub edi, 0x16440e0f
lea esi, [esp + 0x148]
mov dword [esp + 0x1f0], 0x39
call fcn.1001b740
push 1
push ebx
push 0
push 4
push 0x98
mov byte [esp + 0x204], 0x3a
mov ecx, dword [0x10162524]
mov edx, dword [ecx]
push 0
push 8
push eax
mov eax, dword [edx + 0x14]
call eax
xor eax, eax
mov dword [esp + 0x148], eax
mov dword [esp + 0x14c], eax
mov dword [esp + 0x150], eax
mov dword [esp + 0x154], eax
mov dword [esp + 0x158], eax
mov dword [esp + 0x15c], eax
mov dword [esp + 0x160], eax
mov byte [esp + 0x164], al
mov dword [esp + 0x94], eax
mov dword [esp + 0x98], eax
mov dword [esp + 0x9c], eax
mov dword [esp + 0xa0], eax
mov dword [esp + 0xa4], eax
mov dword [esp + 0xa8], eax
mov dword [esp + 0xac], eax
mov dword [esp + 0xb0], eax
mov word [esp + 0xb4], ax
mov ecx, 0xb0
xor eax, eax
mov dl, byte [eax + 0x100283c8]
xor dl, cl
inc ecx
and ecx, 0x800000ff
mov byte [esp + eax + 0x18c], dl
jns 0x10005961
dec ecx
or ecx, 0xffffff00
inc ecx
inc eax
cmp eax, 0x47
jl 0x10005941
mov byte [esp + 0x1d3], 0
mov dword [esp + 0x1f0], 0x3b
mov ecx, 0x7d
xor eax, eax
mov dl, byte [eax + 0x10028410]
xor dl, cl
inc ecx
and ecx, 0x800000ff
mov byte [esp + eax + 0x58], dl
jns 0x1000599e
dec ecx
or ecx, 0xffffff00
inc ecx
inc eax
cmp eax, 0x14
jl 0x10005981
mov byte [esp + 0x6c], 0
lea edx, [esp + 0x18c]
push edx
push 0
push 4
mov byte [esp + 0x1fc], 0x3c
mov ecx, dword [0x10162524]
mov eax, dword [ecx]
mov eax, dword [eax + 0x18]
push 0x14
push 8
lea edx, [esp + 0x6c]
push edx
call eax
push 1
call dword [sym.imp.KERNEL32.dll_Sleep]
mov ecx, 0x7d
xor eax, eax
mov dl, byte [eax + 0x10028410]
xor dl, cl
inc ecx
and ecx, 0x800000ff
mov byte [esp + eax + 0x58], dl
jns 0x100059ff
dec ecx
or ecx, 0xffffff00
inc ecx
inc eax
cmp eax, 0x14
jl 0x100059e2
mov byte [esp + 0x6c], 0
mov dword [esp + 0x1f0], 0x3d
mov ecx, dword [0x10162524]
mov eax, dword [ecx]
mov eax, dword [eax + 0x28]
lea edx, [esp + 0x58]
push edx
call eax
cmp eax, 0x100000
seta al
mov edi, 0x10178e0c
test al, al
je 0x10005abd
lea esi, [esp + 0x18c]
call fcn.1001b780
mov ebx, eax
mov edi, 0x4cde2adb
lea esi, [esp + 0x94]
mov dword [esp + 0x1f0], 0x3e
call fcn.1001b7c0
push ebx
push 0
push 1
mov byte [esp + 0x1fc], 0x3f
mov ecx, dword [0x10162524]
mov edx, dword [ecx]
push 0x14
push 8
push eax
mov eax, dword [edx + 0x18]
call eax
xor eax, eax
mov dword [esp + 0x94], eax
mov dword [esp + 0x98], eax
mov dword [esp + 0x9c], eax
mov dword [esp + 0xa0], eax
mov dword [esp + 0xa4], eax
mov dword [esp + 0xa8], eax
lea ecx, [esp + 0x18c]
jmp 0x10005b39
lea esi, [esp + 0xcc]
call fcn.1001b780
mov ebx, eax
mov edi, 0x4cde2adb
lea esi, [esp + 0x114]
mov dword [esp + 0x1f0], 0x40
call fcn.1001b7c0
push ebx
push 0
push 4
mov byte [esp + 0x1fc], 0x41
mov ecx, dword [0x10162524]
mov edx, dword [ecx]
push 0x14
push 8
push eax
mov eax, dword [edx + 0x18]
call eax
xor eax, eax
mov dword [esp + 0x114], eax
mov dword [esp + 0x118], eax
mov dword [esp + 0x11c], eax
mov dword [esp + 0x120], eax
mov dword [esp + 0x124], eax
mov dword [esp + 0x128], eax
lea ecx, [esp + 0xcc]
push 0x48
push 0
push ecx
call sub.MSVCR100.dll_memset
add esp, 0xc
mov ecx, 0x72
xor eax, eax
lea ecx, [ecx]
mov dl, byte [eax + str.GFTM4W:ZC__N]
xor dl, cl
inc ecx
and ecx, 0x800000ff
mov byte [esp + eax + 0x14], dl
jns 0x10005b6d
dec ecx
or ecx, 0xffffff00
inc ecx
inc eax
cmp eax, 0x20
jl 0x10005b50
mov byte [esp + 0x34], 0
mov dword [esp + 0x1f0], 0x42
mov ecx, 0xb0
xor eax, eax
lea ebx, [ebx]
mov dl, byte [eax + 0x10028464]
xor dl, cl
inc ecx
and ecx, 0x800000ff
mov byte [esp + eax + 0x58], dl
jns 0x10005bad
dec ecx
or ecx, 0xffffff00
inc ecx
inc eax
cmp eax, 0x16
jl 0x10005b90
mov byte [esp + 0x6e], 0
lea edx, [esp + 0x14]
push edx
push 0
push 4
mov byte [esp + 0x1fc], 0x43
mov ecx, dword [0x10162524]
mov eax, dword [ecx]
mov eax, dword [eax + 0x18]
push 0x10
push 8
lea edx, [esp + 0x6c]
push edx
call eax
xor eax, eax
mov dword [esp + 0x58], eax
mov dword [esp + 0x5c], eax
mov dword [esp + 0x60], eax
mov dword [esp + 0x64], eax
mov dword [esp + 0x68], eax
mov word [esp + 0x6c], ax
mov byte [esp + 0x6e], al
mov dword [esp + 0x14], eax
mov dword [esp + 0x18], eax
mov dword [esp + 0x1c], eax
mov dword [esp + 0x20], eax
mov dword [esp + 0x24], eax
mov dword [esp + 0x28], eax
mov dword [esp + 0x2c], eax
mov dword [esp + 0x30], eax
mov byte [esp + 0x34], al
mov ecx, 0xb0
mov dl, byte [eax + 0x10028464]
xor dl, cl
inc ecx
and ecx, 0x800000ff
mov byte [esp + eax + 0x94], dl
jns 0x10005c47
dec ecx
or ecx, 0xffffff00
inc ecx
inc eax
cmp eax, 0x16
jl 0x10005c27
mov byte [esp + 0xaa], 0
mov dword [esp + 0x1f0], 0x44
mov ecx, dword [0x10162524]
mov eax, dword [ecx]
mov eax, dword [eax + 0x28]
lea edx, [esp + 0x94]
push edx
call eax
cmp eax, 0x10000
seta al
mov edi, 0x100a8ea4
lea esi, [esp + 0x14]
test al, al
je 0x10005db2
call fcn.1001b800
mov ebx, eax
mov edi, 0x349bc288
lea esi, [esp + 0xcc]
mov dword [esp + 0x1f0], 0x45
call fcn.1001b840
push ebx
push 0
push 1
mov byte [esp + 0x1fc], 0x46
mov ecx, dword [0x10162524]
mov edx, dword [ecx]
push 0x10
push 8
push eax
mov eax, dword [edx + 0x18]
call eax
mov edi, 0x100a8ea4
lea esi, [esp + 0x14]
call fcn.1001b800
mov ebx, eax
mov edi, 0x101292d7
lea esi, [esp + 0xcc]
mov dword [esp + 0x1f0], 0x47
call fcn.1001b880
push ebx
push 0
push 1
mov byte [esp + 0x1fc], 0x48
mov ecx, dword [0x10162524]
mov edx, dword [ecx]
push 0x1b
push 8
push eax
mov eax, dword [edx + 0x18]
call eax
mov edi, 0x100a8ea4
lea esi, [esp + 0x58]
call fcn.1001b800
mov ebx, eax
mov edi, 0x101292fb
lea esi, [esp + 0x14]
mov dword [esp + 0x1f0], 0x49
call fcn.1001b880
push ebx
push 0
push 1
mov byte [esp + 0x1fc], 0x4a
mov ecx, dword [0x10162524]
mov edx, dword [ecx]
push 0x1e
push 8
push eax
mov eax, dword [edx + 0x18]
call eax
xor eax, eax
mov dword [esp + 0x14], eax
mov dword [esp + 0x18], eax
mov dword [esp + 0x1c], eax
mov dword [esp + 0x20], eax
mov dword [esp + 0x24], eax
mov dword [esp + 0x28], eax
mov dword [esp + 0x2c], eax
mov dword [esp + 0x30], eax
mov byte [esp + 0x34], al
mov dword [esp + 0x58], eax
mov dword [esp + 0x5c], eax
mov dword [esp + 0x60], eax
mov dword [esp + 0x64], eax
mov dword [esp + 0x68], eax
mov dword [esp + 0x6c], eax
mov dword [esp + 0x70], eax
mov dword [esp + 0x74], eax
mov byte [esp + 0x78], al
jmp 0x10005f0d
call fcn.1001b800
mov ebx, eax
mov edi, 0x349bc288
lea esi, [esp + 0xcc]
mov dword [esp + 0x1f0], 0x4b
call fcn.1001b840
push ebx
push 0
push 4
mov byte [esp + 0x1fc], 0x4c
mov ecx, dword [0x10162524]
mov edx, dword [ecx]
push 0x10
push 8
push eax
mov eax, dword [edx + 0x18]
call eax
mov edi, 0x100a8ea4
lea esi, [esp + 0x14]
call fcn.1001b800
mov ebx, eax
mov edi, 0x101292d7
lea esi, [esp + 0xcc]
mov dword [esp + 0x1f0], 0x4d
call fcn.1001b880
push ebx
push 0
push 1
mov byte [esp + 0x1fc], 0x4e
mov ecx, dword [0x10162524]
mov edx, dword [ecx]
push 0x1e
push 8
push eax
mov eax, dword [edx + 0x18]
call eax
mov edi, 0x100a8ea4
lea esi, [esp + 0x114]
call fcn.1001b800
mov ebx, eax
mov edi, 0x101292fb
lea esi, [esp + 0x94]
mov dword [esp + 0x1f0], 0x4f
call fcn.1001b880
push ebx
push 0
push 1
mov byte [esp + 0x1fc], 0x50
mov ecx, dword [0x10162524]
mov edx, dword [ecx]
push 0x21
push 8
push eax
mov eax, dword [edx + 0x18]
call eax
xor eax, eax
mov dword [esp + 0x94], eax
mov dword [esp + 0x98], eax
mov dword [esp + 0x9c], eax
mov dword [esp + 0xa0], eax
mov dword [esp + 0xa4], eax
mov dword [esp + 0xa8], eax
mov dword [esp + 0xac], eax
mov dword [esp + 0xb0], eax
mov byte [esp + 0xb4], al
mov dword [esp + 0x114], eax
mov dword [esp + 0x118], eax
mov dword [esp + 0x11c], eax
mov dword [esp + 0x120], eax
mov dword [esp + 0x124], eax
mov dword [esp + 0x128], eax
mov dword [esp + 0x12c], eax
mov dword [esp + 0x130], eax
mov byte [esp + 0x134], al
mov ecx, 0x58
xor eax, eax
mov dl, byte [eax + 0x100284e0]
xor dl, cl
inc ecx
and ecx, 0x800000ff
mov byte [esp + eax + 0xcc], dl
jns 0x10005f34
dec ecx
or ecx, 0xffffff00
inc ecx
inc eax
cmp eax, 0x19
jl 0x10005f14
mov byte [esp + 0xe5], 0
mov dword [esp + 0x1f0], 0x51
mov ecx, 0x58
xor eax, eax
mov dl, byte [eax + 0x100284fc]
xor dl, cl
inc ecx
and ecx, 0x800000ff
mov byte [esp + eax + 0x148], dl
jns 0x10005f74
dec ecx
or ecx, 0xffffff00
inc ecx
inc eax
cmp eax, 0x1b
jl 0x10005f54
mov byte [esp + 0x163], 0
push 1
lea edx, [esp + 0xd0]
push edx
push 0
push 4
push 0xffffffffffffffba
mov byte [esp + 0x204], 0x52
mov ecx, dword [0x10162524]
mov eax, dword [ecx]
mov eax, dword [eax + 0x14]
push 0
push 8
lea edx, [esp + 0x164]
push edx
call eax
xor eax, eax
mov dword [esp + 0x148], eax
mov dword [esp + 0x14c], eax
mov dword [esp + 0x150], eax
mov dword [esp + 0x154], eax
mov dword [esp + 0x158], eax
mov dword [esp + 0x15c], eax
mov dword [esp + 0x160], eax
mov dword [esp + 0xcc], eax
mov dword [esp + 0xd0], eax
mov dword [esp + 0xd4], eax
mov dword [esp + 0xd8], eax
mov dword [esp + 0xdc], eax
mov dword [esp + 0xe0], eax
mov word [esp + 0xe4], ax
mov ecx, 0x58
lea ecx, [ecx]
mov dl, byte [eax + 0x10028518]
xor dl, cl
inc ecx
and ecx, 0x800000ff
mov byte [esp + eax + 0x14], dl
jns 0x1000603d
dec ecx
or ecx, 0xffffff00
inc ecx
inc eax
cmp eax, 0x1e
jl 0x10006020
mov byte [esp + 0x32], 0
mov dword [esp + 0x1f0], 0x53
mov ecx, 0x58
xor eax, eax
lea ebx, [ebx]
mov dl, byte [eax + 0x10028538]
xor dl, cl
inc ecx
and ecx, 0x800000ff
mov byte [esp + eax + 0x94], dl
jns 0x10006080
dec ecx
or ecx, 0xffffff00
inc ecx
inc eax
cmp eax, 0x20
jl 0x10006060
mov byte [esp + 0xb4], 0
push 1
lea edx, [esp + 0x18]
push edx
push 0
push 4
push 0xffffffffffffffba
mov byte [esp + 0x204], 0x54
mov ecx, dword [0x10162524]
mov eax, dword [ecx]
mov eax, dword [eax + 0x14]
push 0
push 8
lea edx, [esp + 0xb0]
push edx
call eax
xor eax, eax
mov dword [esp + 0x94], eax
mov dword [esp + 0x98], eax
mov dword [esp + 0x9c], eax
mov dword [esp + 0xa0], eax
mov dword [esp + 0xa4], eax
mov dword [esp + 0xa8], eax
mov dword [esp + 0xac], eax
mov dword [esp + 0xb0], eax
mov byte [esp + 0xb4], al
mov dword [esp + 0x14], eax
mov dword [esp + 0x18], eax
mov dword [esp + 0x1c], eax
mov dword [esp + 0x20], eax
mov dword [esp + 0x24], eax
mov dword [esp + 0x28], eax
mov dword [esp + 0x2c], eax
mov word [esp + 0x30], ax
mov byte [esp + 0x32], al
mov ecx, 0x58
mov dl, byte [eax + 0x1002855c]
xor dl, cl
inc ecx
and ecx, 0x800000ff
mov byte [esp + eax + 0xcc], dl
jns 0x10006147
dec ecx
or ecx, 0xffffff00
inc ecx
inc eax
cmp eax, 0x1b
jl 0x10006127
mov byte [esp + 0xe7], 0
mov dword [esp + 0x1f0], 0x55
mov ecx, 0x58
xor eax, eax
mov dl, byte [eax + 0x10028578]
xor dl, cl
inc ecx
and ecx, 0x800000ff
mov byte [esp + eax + 0x58], dl
jns 0x10006184
dec ecx
or ecx, 0xffffff00
inc ecx
inc eax
cmp eax, 0x1d
jl 0x10006167
mov byte [esp + 0x75], 0
push 1
lea edx, [esp + 0xd0]
push edx
push 0
push 4
push 0xffffffffffffffba
mov byte [esp + 0x204], 0x56
mov ecx, dword [0x10162524]
mov eax, dword [ecx]
mov eax, dword [eax + 0x14]
push 0
push 8
lea edx, [esp + 0x74]
push edx
call eax
xor eax, eax
mov dword [esp + 0x58], eax
mov dword [esp + 0x5c], eax
mov dword [esp + 0x60], eax
mov dword [esp + 0x64], eax
mov dword [esp + 0x68], eax
mov dword [esp + 0x6c], eax
mov dword [esp + 0x70], eax
mov word [esp + 0x74], ax
mov dword [esp + 0xcc], eax
mov dword [esp + 0xd0], eax
mov dword [esp + 0xd4], eax
mov dword [esp + 0xd8], eax
mov dword [esp + 0xdc], eax
mov dword [esp + 0xe0], eax
mov dword [esp + 0xe4], eax
mov ecx, 0x58
mov dl, byte [eax + 0x10028598]
xor dl, cl
inc ecx
and ecx, 0x800000ff
mov byte [esp + eax + 0x14], dl
jns 0x10006233
dec ecx
or ecx, 0xffffff00
inc ecx
inc eax
cmp eax, 0x23
jl 0x10006216
mov byte [esp + 0x37], 0
mov dword [esp + 0x1f0], 0x57
mov ecx, 0xbf
xor eax, eax
mov dl, byte [eax + 0x100285bc]
xor dl, cl
inc ecx
and ecx, 0x800000ff
mov byte [esp + eax + 0x148], dl
jns 0x10006270
dec ecx
or ecx, 0xffffff00
inc ecx
inc eax
cmp eax, 0x1b
jl 0x10006250
mov byte [esp + 0x163], 0
push 1
lea edx, [esp + 0x18]
push edx
push 0
push 4
push 0xffffffffffffffd8
mov byte [esp + 0x204], 0x58
mov ecx, dword [0x10162524]
mov eax, dword [ecx]
mov eax, dword [eax + 0x14]
push 0
push 8
lea edx, [esp + 0x164]
push edx
call eax
push 1
call dword [sym.imp.KERNEL32.dll_Sleep]
mov ecx, 0xbf
xor eax, eax
jmp 0x100062c0
mov dl, byte [eax + 0x100285bc]
xor dl, cl
inc ecx
and ecx, 0x800000ff
mov byte [esp + eax + 0xcc], dl
jns 0x100062e0
dec ecx
or ecx, 0xffffff00
inc ecx
inc eax
cmp eax, 0x1b
jl 0x100062c0
mov byte [esp + 0xe7], 0
mov dword [esp + 0x1f0], 0x59
mov ecx, dword [0x10162524]
mov eax, dword [ecx]
mov eax, dword [eax + 0x28]
lea edx, [esp + 0xcc]
push edx
call eax
cmp eax, 0x478df
seta al
mov edi, 0x1023ace2
test al, al
je 0x100063d1
lea esi, [esp + 0x14]
call fcn.1001b8c0
mov ebx, eax
mov edi, 0x10249424
lea esi, [esp + 0xcc]
mov dword [esp + 0x1f0], 0x5a
call fcn.1001b900
push 1
push ebx
push 0
push 1
push 0xffffffffffffffdb
mov byte [esp + 0x204], 0x5b
mov ecx, dword [0x10162524]
mov edx, dword [ecx]
push 0
push 8
push eax
mov eax, dword [edx + 0x14]
call eax
xor eax, eax
mov dword [esp + 0xcc], eax
mov dword [esp + 0xd0], eax
mov dword [esp + 0xd4], eax
mov dword [esp + 0xd8], eax
mov dword [esp + 0xdc], eax
mov dword [esp + 0xe0], eax
mov dword [esp + 0xe4], eax
mov word [esp + 0xe8], ax
mov dword [esp + 0x14], eax
mov dword [esp + 0x18], eax
mov dword [esp + 0x1c], eax
mov dword [esp + 0x20], eax
mov dword [esp + 0x24], eax
mov dword [esp + 0x28], eax
mov dword [esp + 0x2c], eax
mov dword [esp + 0x30], eax
mov dword [esp + 0x34], eax
jmp 0x10006498
lea esi, [esp + 0x94]
call fcn.1001b8c0
mov ebx, eax
mov edi, 0x10249424
lea esi, [esp + 0x148]
mov dword [esp + 0x1f0], 0x5c
call fcn.1001b900
push 1
push ebx
push 0
push 4
push 0xffffffffffffffd8
mov byte [esp + 0x204], 0x5d
mov ecx, dword [0x10162524]
mov edx, dword [ecx]
push 0
push 8
push eax
mov eax, dword [edx + 0x14]
call eax
xor eax, eax
mov dword [esp + 0x148], eax
mov dword [esp + 0x14c], eax
mov dword [esp + 0x150], eax
mov dword [esp + 0x154], eax
mov dword [esp + 0x158], eax
mov dword [esp + 0x15c], eax
mov dword [esp + 0x160], eax
mov word [esp + 0x164], ax
mov dword [esp + 0x94], eax
mov dword [esp + 0x98], eax
mov dword [esp + 0x9c], eax
mov dword [esp + 0xa0], eax
mov dword [esp + 0xa4], eax
mov dword [esp + 0xa8], eax
mov dword [esp + 0xac], eax
mov dword [esp + 0xb0], eax
mov dword [esp + 0xb4], eax
mov ecx, 0xf7
xor eax, eax
nop
mov dl, byte [eax + 0x100285f8]
xor dl, cl
inc ecx
and ecx, 0x800000ff
mov byte [esp + eax + 0x114], dl
jns 0x100064c0
dec ecx
or ecx, 0xffffff00
inc ecx
inc eax
cmp eax, 0x30
jl 0x100064a0
mov byte [esp + 0x144], 0
mov dword [esp + 0x1f0], 0x5e
mov ecx, 0x58
xor eax, eax
mov dl, byte [eax + 0x1002862c]
xor dl, cl
inc ecx
and ecx, 0x800000ff
mov byte [esp + eax + 0x58], dl
jns 0x100064fd
dec ecx
or ecx, 0xffffff00
inc ecx
inc eax
cmp eax, 0x15
jl 0x100064e0
mov byte [esp + 0x6d], 0
lea edx, [esp + 0x114]
push edx
push 0
push 4
mov byte [esp + 0x1fc], 0x5f
mov ecx, dword [0x10162524]
mov eax, dword [ecx]
mov eax, dword [eax + 0x18]
push 2
push 8
lea edx, [esp + 0x6c]
push edx
call eax
xor eax, eax
push 0x31
push eax
lea ecx, [esp + 0x11c]
push ecx
mov dword [esp + 0x64], eax
mov dword [esp + 0x68], eax
mov dword [esp + 0x6c], eax
mov dword [esp + 0x70], eax
mov dword [esp + 0x74], eax
mov word [esp + 0x78], ax
call sub.MSVCR100.dll_memset
add esp, 0xc
mov ecx, 2
xor eax, eax
mov dl, byte [eax + str._bpqjb_ee]
xor dl, cl
inc ecx
and ecx, 0x800000ff
mov byte [esp + eax + 0xcc], dl
jns 0x10006587
dec ecx
or ecx, 0xffffff00
inc ecx
inc eax
cmp eax, 0x26
jl 0x10006567
mov byte [esp + 0xf2], 0
mov dword [esp + 0x1f0], 0x60
mov ecx, 0x7d
xor eax, eax
mov dl, byte [eax + 0x1002866c]
xor dl, cl
inc ecx
and ecx, 0x800000ff
mov byte [esp + eax + 0x14], dl
jns 0x100065c4
dec ecx
or ecx, 0xffffff00
inc ecx
inc eax
cmp eax, 0x1e
jl 0x100065a7
mov byte [esp + 0x32], 0
push 1
lea edx, [esp + 0xd0]
push edx
push 0
push 4
push 0x91
mov byte [esp + 0x204], 0x61
mov ecx, dword [0x10162524]
mov eax, dword [ecx]
mov eax, dword [eax + 0x14]
push 0
push 8
lea edx, [esp + 0x30]
push edx
call eax
push 1
call dword [sym.imp.KERNEL32.dll_Sleep]
mov ecx, 0x7d
xor eax, eax
nop
mov dl, byte [eax + 0x1002866c]
xor dl, cl
inc ecx
and ecx, 0x800000ff
mov byte [esp + eax + 0x14], dl
jns 0x1000662d
dec ecx
or ecx, 0xffffff00
inc ecx
inc eax
cmp eax, 0x1e
jl 0x10006610
mov byte [esp + 0x32], 0
mov dword [esp + 0x1f0], 0x62
mov ecx, dword [0x10162524]
mov eax, dword [ecx]
mov eax, dword [eax + 0x28]
lea edx, [esp + 0x14]
push edx
call eax
cmp eax, 0x478dff
seta al
mov edi, 0x1034a06e
test al, al
je 0x100066e3
lea esi, [esp + 0x58]
call fcn.1001b940
mov ebx, eax
mov edi, 0x1034a0b6
lea esi, [esp + 0x14]
mov dword [esp + 0x1f0], 0x63
call fcn.1001b980
push 1
push ebx
push 0
push 1
push 0x91
mov byte [esp + 0x204], 0x64
mov ecx, dword [0x10162524]
mov edx, dword [ecx]
push 0
push 8
push eax
mov eax, dword [edx + 0x14]
call eax
xor eax, eax
mov dword [esp + 0x14], eax
mov dword [esp + 0x18], eax
mov dword [esp + 0x1c], eax
mov dword [esp + 0x20], eax
mov dword [esp + 0x24], eax
mov dword [esp + 0x28], eax
mov dword [esp + 0x2c], eax
mov dword [esp + 0x30], eax
mov byte [esp + 0x34], al
lea ecx, [esp + 0x58]
jmp 0x1000677b
lea esi, [esp + 0x94]
call fcn.1001b940
mov ebx, eax
mov edi, 0x1034a0b6
lea esi, [esp + 0x148]
mov dword [esp + 0x1f0], 0x65
call fcn.1001b980
push 1
push ebx
push 0
push 4
push 0x91
mov byte [esp + 0x204], 0x66
mov ecx, dword [0x10162524]
mov edx, dword [ecx]
push 0
push 8
push eax
mov eax, dword [edx + 0x14]
call eax
xor eax, eax
mov dword [esp + 0x148], eax
mov dword [esp + 0x14c], eax
mov dword [esp + 0x150], eax
mov dword [esp + 0x154], eax
mov dword [esp + 0x158], eax
mov dword [esp + 0x15c], eax
mov dword [esp + 0x160], eax
mov dword [esp + 0x164], eax
mov byte [esp + 0x168], al
lea ecx, [esp + 0x94]
push 0x27
push 0
push ecx
call sub.MSVCR100.dll_memset
add esp, 0xc
mov ecx, 0xab
xor eax, eax
nop
mov dl, byte [eax + 0x100286b0]
xor dl, cl
inc ecx
and ecx, 0x800000ff
mov byte [esp + eax + 0x114], dl
jns 0x100067b0