Function at 0x1001cc4d
Capabilities:
Contain obfuscated stackstrings
Enumerate pe sections
Parse pe header
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x1006f65f
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x2dc
push esi
and dword [ebp - 0x18], 0
movzx eax, byte [ebp + 0x18]
test eax, eax
je 0x1001de9e
mov eax, dword [ebp + 0x30]
mov dword [ebp - 0x200], eax
mov eax, dword [ebp + 0x34]
mov dword [ebp - 0x188], eax
mov eax, dword [ebp + 0x2c]
mov dword [ebp - 0x1e0], eax
lea eax, [ebp + 0x20]
mov dword [ebp - 0x168], eax
mov eax, dword [ebp + 0x1c]
mov dword [ebp - 0x190], eax
mov eax, dword [ebp + 0x14]
mov dword [ebp - 0x1c4], eax
mov eax, dword [ebp + 0xc]
mov dword [ebp - 0x198], eax
mov eax, dword [ebp - 0x168]
movzx eax, byte [eax]
test eax, eax
je 0x1001ddf0
mov eax, dword [ebp - 0x1c4]
mov dword [ebp - 0x20], eax
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x124], eax
mov eax, dword [ebp - 0x124]
movzx eax, word [eax]
cmp eax, 0x5a4d
je 0x1001ccf3
jmp 0x1001df98
mov eax, dword [ebp - 0x124]
mov ecx, dword [ebp - 0x20]
add ecx, dword [eax + 0x3c]
mov dword [ebp - 0x48], ecx
mov eax, dword [ebp - 0x48]
cmp dword [eax], 0x4550
je 0x1001cd12
jmp 0x1001df98
push 8
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x48]
lea eax, [ecx + eax + 0x78]
mov dword [ebp - 0x34], eax
mov eax, dword [ebp - 0x34]
cmp dword [eax + 4], 0
jne 0x1001cd30
jmp 0x1001df98
and dword [ebp - 0x24], 0
mov eax, dword [ebp - 0x48]
movzx eax, word [eax + 0x14]
mov ecx, dword [ebp - 0x48]
lea eax, [ecx + eax + 0x18]
mov dword [ebp - 0x38], eax
and dword [ebp - 0x100], 0
jmp 0x1001cd64
mov eax, dword [ebp - 0x100]
inc eax
mov dword [ebp - 0x100], eax
mov eax, dword [ebp - 0x38]
add eax, 0x28
mov dword [ebp - 0x38], eax
mov eax, dword [ebp - 0x48]
movzx eax, word [eax + 6]
cmp dword [ebp - 0x100], eax
jge 0x1001ce06
mov eax, dword [ebp - 0x38]
mov eax, dword [eax + 0xc]
mov dword [ebp - 0x110], eax
mov eax, dword [ebp - 0x34]
mov eax, dword [eax]
cmp eax, dword [ebp - 0x110]
jb 0x1001ce01
mov eax, dword [ebp - 0x48]
push dword [eax + 0x38]
mov eax, dword [ebp - 0x38]
push dword [eax + 8]
call fcn.1001bfeb
pop ecx
pop ecx
add eax, dword [ebp - 0x110]
mov dword [ebp - 0x1cc], eax
mov eax, dword [ebp - 0x34]
mov eax, dword [eax]
cmp eax, dword [ebp - 0x1cc]
jae 0x1001ce01
push 0x6dc1
push 0x6e1f
push 0x6963
push 0x4433
push 0x747a
push 0
lea eax, [ebp - 0x38]
push eax
push 1
push 0x4744
push 0
push 0x31d3
push 0x4406
push 0x777f
lea eax, [ebp - 0x24]
push eax
call fcn.1001cc4d
add esp, 0x38
jmp 0x1001ce06
jmp 0x1001cd4e
cmp dword [ebp - 0x24], 0
jne 0x1001ce11
jmp 0x1001df98
mov eax, dword [ebp - 0x34]
mov ecx, dword [ebp - 0x24]
add ecx, dword [eax]
add ecx, dword [ebp - 0x20]
mov dword [ebp - 0x14], ecx
xor ecx, ecx
call fcn.100134d1
push eax
call fcn.1005718d
pop ecx
mov byte [ebp - 0xf4], 2
mov byte [ebp - 0xf3], 6
mov byte [ebp - 0xf2], 5
mov byte [ebp - 0xf1], 6
mov byte [ebp - 0xf0], 7
mov byte [ebp - 0xef], 7
mov byte [ebp - 0xee], 0x3f
mov byte [ebp - 0xed], 0xf3
mov byte [ebp - 0xec], 0xcd
mov byte [ebp - 0xeb], 0x5f
mov byte [ebp - 0xea], 0
mov byte [ebp - 0xe9], 0xb8
mov byte [ebp - 0xe8], 0xa4
mov byte [ebp - 0xe7], 0xb6
mov byte [ebp - 0xe6], 0x79
mov byte [ebp - 0xe5], 0x13
mov byte [ebp - 0xe4], 0x83
mov byte [ebp - 0xe3], 0x91
mov byte [ebp - 0xe2], 0xba
mov byte [ebp - 0xe1], 0x29
mov byte [ebp - 0xe0], 0xb4
mov byte [ebp - 0xdf], 0x9b
mov byte [ebp - 0xde], 0xe2
mov byte [ebp - 0xdd], 0x8a
mov byte [ebp - 0xdc], 8
mov byte [ebp - 0xdb], 0x24
mov byte [ebp - 0xda], 0x88
mov byte [ebp - 0xd9], 0x17
mov byte [ebp - 0xd8], 0xb7
mov byte [ebp - 0xd7], 0xb6
mov byte [ebp - 0xd6], 0x12
mov byte [ebp - 0xd5], 0x46
mov byte [ebp - 0xd4], 0x14
mov byte [ebp - 0xd3], 0x70
mov byte [ebp - 0xd2], 0xbb
mov byte [ebp - 0xd1], pe_nt_image_headers32
mov byte [ebp - 0xd0], 0x5e
mov byte [ebp - 0xcf], 0x42
mov byte [ebp - 0xce], 0xe2
mov byte [ebp - 0xcd], 0x96
mov byte [ebp - 0xcc], 5
mov byte [ebp - 0xcb], 0
mov byte [ebp - 0xca], pe_nt_image_headers32
mov byte [ebp - 0xc9], 0xd3
mov byte [ebp - 0xc8], 0x3f
mov byte [ebp - 0xc7], 0xe2
mov byte [ebp - 0xc6], 0xbe
mov byte [ebp - 0xc5], 0x39
mov byte [ebp - 0xc4], 0x39
mov byte [ebp - 0xc3], 0x5a
mov byte [ebp - 0xc2], 0x7b
mov byte [ebp - 0xc1], 0xe
mov byte [ebp - 0xc0], 0xbd
mov byte [ebp - 0xbf], 0x5f
mov byte [ebp - 0xbe], 0xf9
mov byte [ebp - 0xbd], 0xb2
mov byte [ebp - 0xbc], 0x13
mov byte [ebp - 0xbb], 0x9d
mov byte [ebp - 0xba], 0x67
mov byte [ebp - 0xb9], 0x4c
mov byte [ebp - 0xb8], 0x8c
mov byte [ebp - 0xb7], 0x22
mov byte [ebp - 0xb6], 0x4c
mov byte [ebp - 0xb5], 0xf7
mov byte [ebp - 0xb4], 0xf0
mov byte [ebp - 0xb3], 0x6e
mov byte [ebp - 0xb2], 0x60
mov byte [ebp - 0xb1], 0x16
mov byte [ebp - 0xb0], 0xb9
mov byte [ebp - 0xaf], 0x11
mov byte [ebp - 0xae], 3
mov byte [ebp - 0xad], 1
mov byte [ebp - 0xac], 9
mov byte [ebp - 0xab], 7
mov byte [ebp - 0xaa], 8
mov byte [ebp - 0xa9], 0
mov byte [ebp - 0xa8], 6
mov byte [ebp - 0xa7], 1
mov byte [ebp - 0xa6], 0
mov byte [ebp - 0xa5], 0
mov byte [ebp - 0xa4], 4
mov byte [ebp - 0xa3], 9
mov byte [ebp - 0xa2], 1
mov byte [ebp - 0xa1], 0xd
xor eax, eax
inc eax
shl eax, 0
movzx eax, byte [ebp + eax - 0xf4]
or eax, 0x31
xor ecx, ecx
inc ecx
shl ecx, 0
movzx ecx, byte [ebp + ecx - 0xf4]
and ecx, 0x31
sub eax, ecx
xor ecx, ecx
inc ecx
imul ecx, ecx, 0
movzx ecx, byte [ebp + ecx - 0xf4]
mov byte [ebp + ecx - 0x13c], al
mov dword [ebp - 0x1c], 2
and dword [ebp - 0x60], 0
jmp 0x1001d0c7
mov eax, dword [ebp - 0x1c]
inc eax
inc eax
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 0x54
jae 0x1001d27d
mov dword [ebp - 0x1d4], 0x18b3
cmp dword [ebp - 0x1d4], 0xb0d
jge 0x1001d1b5
lea eax, [ebp - 0x210]
push eax
lea eax, [ebp - 0x104]
push eax
mov ecx, 0x10663e50
call fcn.1000ed89
mov ecx, eax
call fcn.1000ed89
mov eax, dword [ebp - 0x104]
mov dword [ebp - 0x1dc], eax
mov eax, dword [ebp - 0x104]
dec eax
mov dword [ebp - 0x104], eax
cmp dword [ebp - 0x1dc], 0
je 0x1001d19a
and dword [ebp - 0xfc], 0
jmp 0x1001d142
mov eax, dword [ebp - 0xfc]
inc eax
mov dword [ebp - 0xfc], eax
mov eax, dword [ebp - 0xfc]
cmp eax, dword [ebp - 0x210]
jge 0x1001d195
lea edx, [ebp - 0x29]
mov ecx, 0x10663e50
call fcn.10020e0a
movsx eax, byte [ebp - 0x29]
cmp eax, 0x43
je 0x1001d178
movsx eax, byte [ebp - 0x29]
cmp eax, 0x4d
je 0x1001d178
movsx eax, byte [ebp - 0x29]
cmp eax, 0x59
jne 0x1001d193
push fcn.10012ad7
mov edx, 0x1000cd08
mov ecx, 0x10663d98
call fcn.10012900
mov ecx, eax
call fcn.1000ef78
jmp 0x1001d135
jmp 0x1001d10a
push fcn.10012ad7
mov edx, 0x1000cd10
mov ecx, 0x10663d98
call fcn.10012900
mov ecx, eax
call fcn.1000ef78
xor eax, eax
inc eax
imul eax, eax, 0
movzx eax, byte [ebp + eax - 0xf4]
lea eax, [eax + eax + 2]
cmp dword [ebp - 0x1c], eax
jne 0x1001d1f5
mov eax, dword [ebp - 0x1c]
movzx eax, byte [ebp + eax - 0xf4]
inc eax
mov dword [ebp - 0x60], eax
mov eax, dword [ebp - 0x1c]
movzx eax, byte [ebp + eax - 0xf4]
mov ecx, dword [ebp - 0x1c]
lea eax, [ecx + eax - 1]
mov dword [ebp - 0x1c], eax
jmp 0x1001d0bf
mov eax, dword [ebp - 0x1c]
movzx eax, byte [ebp + eax - 0xf3]
mov ecx, dword [ebp - 0x1c]
sub ecx, dword [ebp - 0x60]
movzx ecx, byte [ebp + ecx - 0xf6]
movsx ecx, byte [ebp + ecx - 0x13c]
add eax, ecx
mov ecx, dword [ebp - 0x1c]
movzx ecx, byte [ebp + ecx - 0xf3]
mov edx, dword [ebp - 0x1c]
sub edx, dword [ebp - 0x60]
movzx edx, byte [ebp + edx - 0xf6]
movsx edx, byte [ebp + edx - 0x13c]
and ecx, edx
sub eax, ecx
mov ecx, dword [ebp - 0x1c]
movzx ecx, byte [ebp + ecx - 0xf3]
mov edx, dword [ebp - 0x1c]
sub edx, dword [ebp - 0x60]
movzx edx, byte [ebp + edx - 0xf6]
movsx edx, byte [ebp + edx - 0x13c]
and ecx, edx
sub eax, ecx
mov ecx, dword [ebp - 0x1c]
movzx ecx, byte [ebp + ecx - 0xf4]
mov byte [ebp + ecx - 0x13c], al
and dword [ebp - 0x60], 0
jmp 0x1001d0bf
xor eax, eax
inc eax
imul eax, eax, 0xa
mov byte [ebp + eax - 0x13c], 0
lea eax, [ebp - 0x13c]
push eax
lea ecx, [ebp - 0x2a0]
call fcn.1001fd02
mov dword [ebp - 0x1fc], eax
mov eax, dword [ebp - 0x1fc]
mov dword [ebp - 0x1e4], eax
and dword [ebp - 4], 0
push 0xa
xor edx, edx
mov ecx, dword [ebp - 0x1e4]
call fcn.10013491
pop ecx
mov dword [ebp - 0x1e8], eax
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x2a0]
call fcn.1001fd8a
and dword [ebp - 0xa0], 0
jmp 0x1001d2ee
mov eax, dword [ebp - 0xa0]
inc eax
mov dword [ebp - 0xa0], eax
cmp dword [ebp - 0xa0], 0xb
jae 0x1001d307
mov eax, dword [ebp - 0xa0]
mov byte [ebp + eax - 0x13c], 0
jmp 0x1001d2e1
mov byte [ebp - 0x88], 9
mov byte [ebp - 0x87], 0x6c
mov byte [ebp - 0x86], 7
mov byte [ebp - 0x85], 6
mov byte [ebp - 0x84], 5
mov byte [ebp - 0x83], 7
mov byte [ebp - 0x82], 2
mov byte [ebp - 0x81], 6
mov byte [ebp - 0x80], 3
mov byte [ebp - 0x7f], 5
mov byte [ebp - 0x7e], 8
mov byte [ebp - 0x7d], 2
mov byte [ebp - 0x7c], 4
mov byte [ebp - 0x7b], 4
mov byte [ebp - 0x7a], 0
mov byte [ebp - 0x79], 5
mov byte [ebp - 0x78], 6
mov byte [ebp - 0x77], 8
mov byte [ebp - 0x76], 1
mov byte [ebp - 0x75], 0xf
mov byte [ebp - 0x74], 4
mov byte [ebp - 0x73], 0xa3
mov byte [ebp - 0x72], 0x1a
mov byte [ebp - 0x71], 0x62
mov byte [ebp - 0x70], 0x23
xor eax, eax
inc eax
shl eax, 0
movzx eax, byte [ebp + eax - 0x88]
or eax, 0x5c
xor ecx, ecx
inc ecx
shl ecx, 0
movzx ecx, byte [ebp + ecx - 0x88]
and ecx, 0x5c
sub eax, ecx
xor ecx, ecx
inc ecx
imul ecx, ecx, 0
movzx ecx, byte [ebp + ecx - 0x88]
mov byte [ebp + ecx - 0x148], al
mov dword [ebp - 0x30], 2
and dword [ebp - 0x94], 0
jmp 0x1001d3d4
mov eax, dword [ebp - 0x30]
inc eax
inc eax
mov dword [ebp - 0x30], eax
cmp dword [ebp - 0x30], 0x19
jae 0x1001d48a
xor eax, eax
inc eax
imul eax, eax, 0
movzx eax, byte [ebp + eax - 0x88]
lea eax, [eax + eax + 2]
cmp dword [ebp - 0x30], eax
jne 0x1001d41e
mov eax, dword [ebp - 0x30]
movzx eax, byte [ebp + eax - 0x88]
inc eax
mov dword [ebp - 0x94], eax
mov eax, dword [ebp - 0x30]
movzx eax, byte [ebp + eax - 0x88]
mov ecx, dword [ebp - 0x30]
lea eax, [ecx + eax - 1]
mov dword [ebp - 0x30], eax
jmp 0x1001d3cc
mov eax, dword [ebp - 0x30]
movzx eax, byte [ebp + eax - 0x87]
mov ecx, dword [ebp - 0x30]
sub ecx, dword [ebp - 0x94]
movzx ecx, byte [ebp + ecx - 0x8a]
movsx ecx, byte [ebp + ecx - 0x148]
or eax, ecx
mov ecx, dword [ebp - 0x30]
movzx ecx, byte [ebp + ecx - 0x87]
mov edx, dword [ebp - 0x30]
sub edx, dword [ebp - 0x94]
movzx edx, byte [ebp + edx - 0x8a]
movsx edx, byte [ebp + edx - 0x148]
and ecx, edx
sub eax, ecx
mov ecx, dword [ebp - 0x30]
movzx ecx, byte [ebp + ecx - 0x88]
mov byte [ebp + ecx - 0x148], al
and dword [ebp - 0x94], 0
jmp 0x1001d3cc
xor eax, eax
inc eax
imul eax, eax, 0xa
mov byte [ebp + eax - 0x148], 0
lea eax, [ebp - 0x148]
push eax
lea ecx, [ebp - 0x2b8]
call fcn.1001fd02
mov dword [ebp - 0x158], eax
mov eax, dword [ebp - 0x158]
mov dword [ebp - 0x1c8], eax
mov dword [ebp - 4], 1
push 0xa
xor edx, edx
mov ecx, dword [ebp - 0x1c8]
call fcn.10013491
pop ecx
mov dword [ebp - 0x160], eax
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x2b8]
call fcn.1001fd8a
and dword [ebp - 0x90], 0
jmp 0x1001d4fe
mov eax, dword [ebp - 0x90]
inc eax
mov dword [ebp - 0x90], eax
cmp dword [ebp - 0x90], 0xb
jae 0x1001d517
mov eax, dword [ebp - 0x90]
mov byte [ebp + eax - 0x148], 0
jmp 0x1001d4f1
push dword [ebp - 0x160]
push dword [ebp - 0x1e8]
call fcn.1001abcd
pop ecx
pop ecx
mov dword [ebp - 0x118], eax
mov eax, dword [ebp - 0x48]
mov ecx, dword [ebp - 0x118]
mov dword [eax + 8], ecx
push 0x1c2a
push 1
push 0x29df
push 0
lea eax, [ebp - 0x118]
push eax
lea eax, [ebp - 0x14]
push eax
push 0x4c38
push 0x3e63
push 0x47a4
push 0x1053
push 0x77b6
call fcn.1001c01a
add esp, 0x2c
and dword [ebp - 0x68], 0
mov eax, dword [ebp - 0x14]
cmp dword [eax + 0x18], 0
jbe 0x1001d5ba
lea eax, [ebp - 0x68]
push eax
push 0x312b
push 1
push 0x7c68
push 0x105f
lea eax, [ebp - 0x14]
push eax
push 0x7d80
push 0x149d
push 0x4cc7
push 0
push 0x6308
call fcn.1001c724
add esp, 0x2c
mov eax, dword [ebp - 0x14]
mov eax, dword [eax + 0x1c]
mov dword [ebp - 0x10], eax
mov eax, dword [ebp - 0x14]
mov eax, dword [eax + 0x14]
sub eax, dword [ebp - 0x68]
mov dword [ebp - 0x4c], eax
and dword [ebp - 0x6c], 0
jmp 0x1001d5dc
mov eax, dword [ebp - 0x6c]
inc eax
mov dword [ebp - 0x6c], eax
mov eax, dword [ebp - 0x6c]
cmp eax, dword [ebp - 0x4c]
jge 0x1001d69d
mov eax, dword [ebp - 0x14]
mov ecx, dword [ebp - 0x14]
mov eax, dword [eax + 0x14]
sub eax, dword [ecx + 0x18]
cmp dword [ebp - 0x6c], eax
jae 0x1001d63e
push 0x7c43
push 0x3a7c
lea eax, [ebp - 0x130]
push eax
lea eax, [ebp - 0x14]
push eax
lea eax, [ebp - 0x20]
push eax
push 1
push 0x5cb4
push 0
lea eax, [ebp - 0x24]
push eax
push 1
push 0x5e13
push 0x2c2
lea eax, [ebp - 0x6c]
push eax
push 0x7f45
call fcn.1001cc4d
add esp, 0x38
jmp 0x1001d65e
mov eax, dword [ebp - 0x38]
mov eax, dword [eax + 0x14]
mov ecx, dword [ebp - 0x38]
add eax, dword [ecx + 0x10]
push eax
mov eax, dword [ebp - 0x38]
push dword [eax + 0x14]
call fcn.1001abcd
pop ecx
pop ecx
mov dword [ebp - 0x130], eax
push 0
push 0x161a
lea eax, [ebp - 0x130]
push eax
lea eax, [ebp - 0x24]
push eax
push 0x722c
push 0x27a4
push 0x6224
lea eax, [ebp - 0x20]
push eax
lea eax, [ebp - 0x10]
push eax
call fcn.1001cbaa
add esp, 0x24
mov eax, dword [ebp - 0x10]
add eax, 4
mov dword [ebp - 0x10], eax
jmp 0x1001d5d5
mov eax, dword [ebp - 0x14]
mov eax, dword [eax + 0x14]
sub eax, dword [ebp - 0x68]
mov ecx, dword [ebp - 0x14]
mov dword [ecx + 0x14], eax
mov eax, dword [ebp - 0x14]
mov eax, dword [eax + 0x18]
sub eax, dword [ebp - 0x68]
mov dword [ebp - 0x4c], eax
and dword [ebp - 0xf8], 0
jmp 0x1001d6ce
mov eax, dword [ebp - 0xf8]
inc eax
mov dword [ebp - 0xf8], eax
mov eax, dword [ebp - 0xf8]
cmp eax, dword [ebp - 0x4c]
jge 0x1001d70c
mov eax, dword [ebp - 0x24]
add eax, dword [ebp - 0x10]
mov ecx, dword [ebp - 0x20]
and dword [ecx + eax], 0
push 0x7056
push 1
lea eax, [ebp - 0x10]
push eax
push 0x451d
push 0x526
push 0
push 0x7887
call fcn.1001c134
add esp, 0x1c
jmp 0x1001d6c1
lea eax, [ebp - 0x4c]
push eax
push 1
push 0x332f
push 1
push 0x133f
push 0x3a1b
lea eax, [ebp - 0x10]
push eax
lea eax, [ebp - 0x14]
push eax
push 0x64c8
push 0x3efc
push 0x4c28
call fcn.1001c01a
add esp, 0x2c
push 0x2199
lea eax, [ebp - 0x14]
push eax
push 0
lea eax, [ebp - 0x68]
push eax
push 0x6368
push 0x1cc1
push 1
push 0x2a1f
push 0x60f7
push 0
push 0x3964
push 0x22e5
call fcn.1001c5cc
add esp, 0x30
and dword [ebp - 0x8c], 0
jmp 0x1001d791
mov eax, dword [ebp - 0x8c]
inc eax
mov dword [ebp - 0x8c], eax
mov eax, dword [ebp - 0x8c]
cmp eax, dword [ebp - 0x4c]
jge 0x1001d7fe
mov eax, dword [ebp - 0x14]
mov ecx, dword [ebp - 0x24]
add ecx, dword [eax + 0x24]
mov eax, dword [ebp - 0x8c]
lea eax, [ecx + eax*2]
mov ecx, dword [ebp - 0x24]
add ecx, dword [ebp - 0x10]
mov edx, dword [ebp - 0x20]
mov esi, dword [ebp - 0x20]
mov ax, word [esi + eax]
mov word [edx + ecx], ax
push 0x176e
push 0x70f6
push 1
push 0x70bd
lea eax, [ebp - 0x10]
push eax
push 0x18c3
push 0
push 0x1717
push 0x6e59
push 1
push 0x7089
push 0x51d8
call fcn.1001c5cc
add esp, 0x30
jmp 0x1001d784
lea eax, [ebp - 0x4c]
push eax
lea eax, [ebp - 0x10]
push eax
push 0x723a
push 0x2d61
push 0x3e9c
push 1
push 0x4b24
push 1
push 0x3752
push 0
push 0xfd
lea eax, [ebp - 0x14]
push eax
push 0x6edb
push 0x70dc
call fcn.1001cc4d
add esp, 0x38
mov eax, dword [ebp - 0x14]
mov ecx, dword [ebp - 0x24]
add ecx, dword [eax + 0xc]
add ecx, dword [ebp - 0x20]
push ecx
lea ecx, [ebp - 0x240]
call fcn.1001fd02
mov dword [ebp - 4], 2
lea ecx, [ebp - 0x240]
call fcn.1000f4c7
mov dword [ebp - 0x10c], eax
push dword [ebp - 0x10c]
mov eax, dword [ebp - 0x10c]
shr eax, 1
push eax
call fcn.1001abcd
pop ecx
pop ecx
mov dword [ebp - 0x64], eax
mov byte [ebp - 0x44], 1
mov byte [ebp - 0x43], 0xd8
mov byte [ebp - 0x42], 3
mov byte [ebp - 0x41], 8
mov byte [ebp - 0x40], 3
mov byte [ebp - 0x3f], 0x40
mov byte [ebp - 0x3e], 0x75
mov byte [ebp - 0x3d], 0x71
mov byte [ebp - 0x3c], 2
mov byte [ebp - 0x3b], 0
mov byte [ebp - 0x3a], 0
mov byte [ebp - 0x39], 0x42
xor eax, eax
inc eax
shl eax, 0
movzx eax, byte [ebp + eax - 0x44]
or eax, 0xbc
xor ecx, ecx
inc ecx
shl ecx, 0
movzx ecx, byte [ebp + ecx - 0x44]
and ecx, 0xbc
sub eax, ecx
xor ecx, ecx
inc ecx
imul ecx, ecx, 0
movzx ecx, byte [ebp + ecx - 0x44]
mov byte [ebp + ecx - 0x54], al
mov dword [ebp - 0x28], 2
and dword [ebp - 0x58], 0
jmp 0x1001d900
mov eax, dword [ebp - 0x28]
inc eax
inc eax
mov dword [ebp - 0x28], eax
cmp dword [ebp - 0x28], 0xc
jae 0x1001d9db
xor eax, eax
inc eax
imul eax, eax, 0
movzx eax, byte [ebp + eax - 0x44]
lea eax, [eax + eax + 2]
cmp dword [ebp - 0x28], eax
jne 0x1001d93e
mov eax, dword [ebp - 0x28]
movzx eax, byte [ebp + eax - 0x44]
inc eax
mov dword [ebp - 0x58], eax
mov eax, dword [ebp - 0x28]
movzx eax, byte [ebp + eax - 0x44]
mov ecx, dword [ebp - 0x28]
lea eax, [ecx + eax - 1]
mov dword [ebp - 0x28], eax
jmp 0x1001d8f8
mov eax, dword [ebp - 0x28]
movzx eax, byte [ebp + eax - 0x43]
mov ecx, dword [ebp - 0x28]
sub ecx, dword [ebp - 0x58]
movzx ecx, byte [ebp + ecx - 0x46]
movsx ecx, byte [ebp + ecx - 0x54]
add eax, ecx
mov ecx, dword [ebp - 0x28]
movzx ecx, byte [ebp + ecx - 0x43]
mov edx, dword [ebp - 0x28]
sub edx, dword [ebp - 0x58]
movzx edx, byte [ebp + edx - 0x46]
movsx edx, byte [ebp + edx - 0x54]
and ecx, edx
sub eax, ecx
mov ecx, dword [ebp - 0x28]
movzx ecx, byte [ebp + ecx - 0x43]
mov edx, dword [ebp - 0x28]
sub edx, dword [ebp - 0x58]
movzx edx, byte [ebp + edx - 0x46]
movsx edx, byte [ebp + edx - 0x54]
and ecx, edx
sub eax, ecx
mov ecx, dword [ebp - 0x28]
movzx ecx, byte [ebp + ecx - 0x44]
mov byte [ebp + ecx - 0x54], al
push 0x6b47
push 0x16cf
push 1
push 0x61f2
push 0x58d3
push 0x3bc8
push 1
push 0xaeb
lea eax, [ebp - 0x58]
push eax
push 0
push 0x10e6
push 0x1d85
call fcn.1001c5cc
add esp, 0x30
jmp 0x1001d8f8
xor eax, eax
inc eax
shl eax, 2
mov byte [ebp + eax - 0x54], 0
cmp dword [ebp - 0x64], 4
jle 0x1001da9d
lea eax, [ebp - 0x54]
push eax
lea ecx, [ebp - 0x288]
call fcn.1001fd02
mov dword [ebp - 0x14c], eax
mov eax, dword [ebp - 0x14c]
mov dword [ebp - 0x170], eax
mov byte [ebp - 4], 3
mov eax, dword [ebp - 0x18]
or eax, 1
mov dword [ebp - 0x18], eax
mov eax, dword [ebp - 0x64]
sub eax, 4
push eax
lea eax, [ebp - 0x2d0]
push eax
call fcn.1001b1e9
pop ecx
pop ecx
mov dword [ebp - 0x1d0], eax
mov eax, dword [ebp - 0x1d0]
mov dword [ebp - 0x1f0], eax
mov dword [ebp - 4], 4
mov eax, dword [ebp - 0x18]
or eax, 2
mov dword [ebp - 0x18], eax
push dword [ebp - 0x170]
mov edx, dword [ebp - 0x1f0]
lea ecx, [ebp - 0x270]
call fcn.10020f55
pop ecx
mov dword [ebp - 0x178], eax
mov eax, dword [ebp - 0x178]
mov dword [ebp - 0x1d8], eax
mov dword [ebp - 4], 5
mov eax, dword [ebp - 0x18]
or eax, 4
mov dword [ebp - 0x18], eax
mov eax, dword [ebp - 0x1d8]
mov dword [ebp - 0x114], eax
jmp 0x1001dac9
push dword [ebp - 0x64]
lea eax, [ebp - 0x2e8]
push eax
call fcn.1001b1e9
pop ecx
pop ecx
mov dword [ebp - 0x180], eax
mov eax, dword [ebp - 0x18]
or eax, 8
mov dword [ebp - 0x18], eax
mov eax, dword [ebp - 0x180]
mov dword [ebp - 0x114], eax
mov eax, dword [ebp - 0x114]
mov dword [ebp - 0x1f8], eax
push dword [ebp - 0x1f8]
lea ecx, [ebp - 0x258]
call fcn.1001fd31
mov dword [ebp - 4], 6
mov eax, dword [ebp - 0x18]
and eax, 8
je 0x1001db04
and dword [ebp - 0x18], 0xfffffff7
lea ecx, [ebp - 0x2e8]
call fcn.1001fd8a
mov byte [ebp - 4], 7
mov eax, dword [ebp - 0x18]
and eax, 4
je 0x1001db1f
and dword [ebp - 0x18], 0xfffffffb
lea ecx, [ebp - 0x270]
call fcn.1001fd8a
mov byte [ebp - 4], 8
mov eax, dword [ebp - 0x18]
and eax, 2
je 0x1001db3a
and dword [ebp - 0x18], 0xfffffffd
lea ecx, [ebp - 0x2d0]
call fcn.1001fd8a
mov byte [ebp - 4], 9
mov eax, dword [ebp - 0x18]
and eax, 1
je 0x1001db55
and dword [ebp - 0x18], 0xfffffffe
lea ecx, [ebp - 0x288]
call fcn.1001fd8a
and dword [ebp - 0x98], 0
jmp 0x1001db6b
mov eax, dword [ebp - 0x98]
inc eax
mov dword [ebp - 0x98], eax
cmp dword [ebp - 0x98], 5
jae 0x1001db81
mov eax, dword [ebp - 0x98]
mov byte [ebp + eax - 0x54], 0
jmp 0x1001db5e
push 0x3943
push 1
push 0x73a3
push 0x7fce
lea eax, [ebp - 0x10]
push eax
push 1
lea eax, [ebp - 0x14]
push eax
call fcn.1001c134
add esp, 0x1c
push 1
push 0x3d81
lea eax, [ebp - 0x14]
push eax
push 0x1a06
push 0x4148
push 0x4c24
lea eax, [ebp - 0x24]
push eax
lea eax, [ebp - 0x20]
push eax
lea eax, [ebp - 0x64]
push eax
lea eax, [ebp - 0x258]
push eax
push 1
call fcn.1001c42e
add esp, 0x2c
mov eax, dword [ebp - 0x10]
add eax, dword [ebp - 0x64]
mov dword [ebp - 0x10], eax
mov eax, dword [ebp - 0x24]
add eax, dword [ebp - 0x10]
mov ecx, dword [ebp - 0x20]
mov byte [ecx + eax], 0
mov eax, dword [ebp - 0x10]
inc eax
mov dword [ebp - 0x10], eax
mov eax, dword [ebp - 0x14]
cmp dword [eax + 0x18], 0
jbe 0x1001dc56
mov eax, dword [ebp - 0x34]
mov ecx, dword [ebp - 0x10]
sub ecx, dword [eax]
mov eax, dword [ebp - 0x34]
mov eax, dword [eax + 4]
sub eax, ecx
mov ecx, dword [ebp - 0x14]
xor edx, edx
div dword [ecx + 0x18]
cmp eax, 0xc
jbe 0x1001dc2a
mov dword [ebp - 0x12c], 0xc
jmp 0x1001dc48
mov eax, dword [ebp - 0x34]
mov ecx, dword [ebp - 0x10]
sub ecx, dword [eax]
mov eax, dword [ebp - 0x34]
mov eax, dword [eax + 4]
sub eax, ecx
mov ecx, dword [ebp - 0x14]
xor edx, edx
div dword [ecx + 0x18]
mov dword [ebp - 0x12c], eax
mov eax, dword [ebp - 0x12c]
mov dword [ebp - 0x11c], eax
jmp 0x1001dc5d
and dword [ebp - 0x11c], 0
mov eax, dword [ebp - 0x11c]
mov dword [ebp - 0x120], eax
and dword [ebp - 0x9c], 0
jmp 0x1001dc7f
mov eax, dword [ebp - 0x9c]
inc eax
mov dword [ebp - 0x9c], eax
mov eax, dword [ebp - 0x14]
mov ecx, dword [ebp - 0x9c]
cmp ecx, dword [eax + 0x18]
jae 0x1001dd6c
push dword [ebp - 0x120]
mov eax, dword [ebp - 0x120]
cdq
sub eax, edx
sar eax, 1
push eax
call fcn.1001abcd
pop ecx
pop ecx
mov dword [ebp - 0x108], eax
push dword [ebp - 0x108]
lea eax, [ebp - 0x228]
push eax
call fcn.1001b1e9
pop ecx
pop ecx
mov byte [ebp - 4], 0xa
lea eax, [ebp - 0x24]
push eax
push 0x2046
push 1
push 0x16c2
push 0x4f98
lea eax, [ebp - 0x20]
push eax
push 1
lea eax, [ebp - 0x10]
push eax
push 0x642b
push 1
lea eax, [ebp - 0x9c]
push eax
lea eax, [ebp - 0x14]
push eax
call fcn.1001c5cc
add esp, 0x30
push 0x89
lea eax, [ebp - 0x10]
push eax
push 1
lea eax, [ebp - 0x24]
push eax
lea eax, [ebp - 0x108]
push eax
push 0x30de
lea eax, [ebp - 0x20]
push eax
push 0x4e
lea eax, [ebp - 0x228]
push eax
push 1
push 0x729e
call fcn.1001c724
add esp, 0x2c
mov eax, dword [ebp - 0x10]
add eax, dword [ebp - 0x108]
mov dword [ebp - 0x10], eax
mov eax, dword [ebp - 0x24]
add eax, dword [ebp - 0x10]
mov ecx, dword [ebp - 0x20]
mov byte [ecx + eax], 0
mov eax, dword [ebp - 0x10]
inc eax
mov dword [ebp - 0x10], eax
mov byte [ebp - 4], 9
lea ecx, [ebp - 0x228]
call fcn.1001fd8a
jmp 0x1001dc72
and dword [ebp - 0x5c], 0
jmp 0x1001dd79
mov eax, dword [ebp - 0x5c]
inc eax
mov dword [ebp - 0x5c], eax
mov eax, dword [ebp - 0x34]
mov ecx, dword [ebp - 0x10]
sub ecx, dword [eax]
mov eax, dword [ebp - 0x34]
mov eax, dword [eax + 4]
sub eax, ecx
cmp dword [ebp - 0x5c], eax
jae 0x1001ddbe
push 1
lea eax, [ebp - 0x20]
push eax
push 0x2e75
push 0x146a
lea eax, [ebp - 0x24]
push eax
lea eax, [ebp - 0x10]
push eax
lea eax, [ebp - 0x5c]
push eax
push 0x47b
push 0x7b83
call fcn.1001cbaa
add esp, 0x24
jmp 0x1001dd72
mov eax, dword [ebp - 0x34]
mov eax, dword [eax + 4]
sub eax, dword [ebp - 0x5c]
mov ecx, dword [ebp - 0x34]
mov dword [ecx + 4], eax
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x258]
call fcn.1001fd8a
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x240]
call fcn.1001fd8a
jmp 0x1001de99
mov eax, dword [ebp - 0x188]
mov dword [ebp - 0x208], eax
mov eax, dword [ebp - 0x1e0]
mov dword [ebp - 0x1a0], eax
mov eax, dword [ebp - 0x190]
mov dword [ebp - 0x1ec], eax
mov eax, dword [ebp - 0x200]
mov dword [ebp - 0x1a8], eax
mov eax, dword [ebp - 0x198]
mov dword [ebp - 0x20c], eax
mov eax, dword [ebp - 0x208]
mov dword [ebp - 0x1c0], eax
mov eax, dword [ebp - 0x1a0]
mov dword [ebp - 0x204], eax
mov eax, dword [ebp - 0x1ec]
mov dword [ebp - 0x1f4], eax
mov eax, dword [ebp - 0x1a8]
mov dword [ebp - 0x1b0], eax
mov eax, dword [ebp - 0x20c]
mov dword [ebp - 0x1b8], eax
mov eax, dword [ebp - 0x1b0]
mov eax, dword [eax]
mov ecx, dword [ebp - 0x1f4]
mov ecx, dword [ecx]
add ecx, dword [eax + 0x1c]
mov eax, dword [ebp - 0x1b8]
mov eax, dword [eax]
lea eax, [ecx + eax*4]
mov ecx, dword [ebp - 0x204]
mov ecx, dword [ecx]
mov edx, dword [ebp - 0x1c0]
mov eax, dword [ecx + eax]
mov dword [edx], eax
jmp 0x1001df98
mov eax, dword [ebp + 0x38]
mov dword [ebp - 0x15c], eax
mov eax, dword [ebp + 0x24]
mov dword [ebp - 0x1a4], eax
mov eax, dword [ebp + 0x3c]
mov dword [ebp - 0x164], eax
lea eax, [ebp + 0x28]
mov dword [ebp - 0x150], eax
mov eax, dword [ebp + 8]
mov dword [ebp - 0x19c], eax
mov eax, dword [ebp + 0x10]
mov dword [ebp - 0x154], eax
mov eax, dword [ebp - 0x150]
movzx eax, byte [eax]
test eax, eax
je 0x1001df4a
mov eax, dword [ebp - 0x154]
mov dword [ebp - 0x16c], eax
mov eax, dword [ebp - 0x15c]
mov dword [ebp - 0x174], eax
mov eax, dword [ebp - 0x164]
mov dword [ebp - 0x17c], eax
mov eax, dword [ebp - 0x16c]
mov dword [ebp - 0x194], eax
mov eax, dword [ebp - 0x174]
mov dword [ebp - 0x18c], eax
mov eax, dword [ebp - 0x17c]
mov dword [ebp - 0x184], eax
mov eax, dword [ebp - 0x184]
mov eax, dword [eax]
shl eax, 1
mov ecx, dword [ebp - 0x18c]
mov ecx, dword [ecx]
sub ecx, eax
mov eax, dword [ebp - 0x194]
mov eax, dword [eax]
mov dword [eax + 0x24], ecx
jmp 0x1001df98
mov eax, dword [ebp - 0x19c]
mov dword [ebp - 0x1ac], eax
mov eax, dword [ebp - 0x1a4]
mov dword [ebp - 0x1b4], eax
mov eax, dword [ebp - 0x1ac]
mov dword [ebp - 0x1bc], eax
mov eax, dword [ebp - 0x1b4]
mov dword [ebp - 0x128], eax
mov eax, dword [ebp - 0x128]
mov eax, dword [eax]
mov ecx, dword [ebp - 0x128]
mov ecx, dword [ecx]
mov eax, dword [eax + 0x14]
sub eax, dword [ecx + 0xc]
mov ecx, dword [ebp - 0x1bc]
mov dword [ecx], eax
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop esi
mov esp, ebp
pop ebp
ret