Function at 0x10026da4
Capabilities:
Check http status code
Create pipe
Encode data using xor
Encrypt data using speck

Disassembly:
mov eax, 0x100638cb
call fcn.100628e0
sub esp, 0x61c
push ebx
push esi
push edi
mov dword [ebp - 0x25c], edx
mov dword [ebp - 0x184], ecx
xor ebx, ebx
mov dword [ebp - 4], ebx
mov dword [ebp - 0x198], ebx
mov dword [ebp - 0x194], ebx
mov dword [ebp - 0x190], ebx
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x2c0]
mov dword [ebp - 0x10], 0x9b55bb2c
push 2
call fcn.1000cdd8
mov byte [ebp - 4], 2
mov dword [ebp - 0x28], 0x36ab
cmp dword [ebp - 0x28], 0x39b9
jle 0x10026e61
mov ecx, ebx
mov dword [ebp - 0x10], ebx
mov edi, ebx
mov dword [ebp - 0x18], ebx
mov esi, ebx
mov eax, edi
mov dword [ebp - 0x24], ebx
cdq
idiv esi
lea edi, [edx + ecx]
mov eax, edi
mov ecx, 0x1007bbb8
or eax, ebx
cdq
push edx
push eax
call fcn.1000cbc0
inc ebx
cmp ebx, 0x7376
jl 0x10026e1d
mov edi, dword [ebp - 0x18]
inc esi
mov ecx, dword [ebp - 0x10]
push 0
pop ebx
cmp esi, 0x6cec
jl 0x10026e12
inc edi
mov dword [ebp - 0x18], edi
cmp edi, 0x5493
jl 0x10026e10
inc ecx
mov dword [ebp - 0x10], ecx
cmp ecx, 0x7bb5
jl 0x10026e0b
lea eax, [ebp - 0x3a0]
mov ecx, 0x1968
push eax
lea eax, [ebp - 0x2c0]
push ebx
push eax
call fcn.10049ecd
add esp, 0xc
cmp dword [ebp - 0x28], 0x35a4
jge 0x10026e95
mov edx, str.odjdkn_rex_vlj_artifv
mov ecx, 0x1007bbb8
call fcn.1000ee07
mov dword [ebp - 0x10], ebx
cmp dword [ebp - 0x10], 0xf
jl 0x10027026
xor ecx, ecx
inc ecx
mov dword [ebp - 0x54], ebx
mov dword [ebp - 0x2c], ebx
mov dword [ebp - 0x2c], ebx
mov dword [ebp - 0x2c], 0xfffffff7
mov dword [ebp - 0x2c], 0x266d8ff8
mov dword [ebp - 0x2c], 0xfffffffb
mov dword [ebp - 0x2c], 0xd764ce34
mov dword [ebp - 0x270], 0xcd95ff7
mov dword [ebp - 0x54], ebx
jmp 0x10027010
mov dword [ebp - 0x14], 0xa73d2d67
mov dword [ebp - 0x2c], ecx
mov dword [ebp - 0x1c], ebx
jmp 0x10026ef8
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0x414], ebx
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 2
jl 0x10026eeb
push ecx
push ecx
push ebx
push 0x2445
push 0x42c
mov edx, 0x227a
mov ecx, 0x25b0
call fcn.1004a4ff
add esp, 0x14
mov dword [ebp - 0x14], ebx
jmp 0x10027001
mov dword [ebp - 0x20], ecx
push ecx
mov dword [ebp - 0x2c], 0xfffffff9
lea ecx, [ebp - 0x340]
mov dword [ebp - 0x2c], 0xf51ae9a0
call fcn.1000cdd8
push ecx
lea eax, [ebp - 0x340]
mov byte [ebp - 4], 3
push eax
push ecx
push ebx
sub esp, 0x14
lea eax, [ebp - 0x22c]
push eax
push ecx
push 0x5b65
mov ecx, 0x234a
call fcn.10049b09
add esp, 0x30
mov dword [ebp - 0x20], ebx
jmp 0x10026fe9
push 2
lea ecx, [ebp - 0x32c]
call fcn.1000cdd8
mov byte [ebp - 4], 4
mov dword [ebp - 0x1c], ebx
jmp 0x10026f9b
mov ecx, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x32c]
mov dword [eax + ecx*4], 0xc2443ac4
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 2
jl 0x10026f88
sub esp, 0xc
lea eax, [ebp - 0x32c]
mov dl, 1
lea ecx, [ebp - 0x54]
push 0x7e04
push eax
lea eax, [ebp - 0x2c0]
push eax
call fcn.1004a43a
push 0x53b6
push ebx
mov dl, 1
lea ecx, [ebp - 0x270]
call fcn.1004aa62
add esp, 0x20
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x32c]
call fcn.1000ce5b
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], 1
jle 0x10026f72
lea ecx, [ebp - 0x340]
mov byte [ebp - 4], 2
call fcn.1000ce5b
inc dword [ebp - 0x14]
xor ecx, ecx
inc ecx
cmp dword [ebp - 0x14], ecx
jle 0x10026f25
inc dword [ebp - 0x54]
cmp dword [ebp - 0x54], ecx
jle 0x10026edc
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], 0xf
jge 0x10026ea5
lea ecx, [ebp - 0x2c0]
mov byte [ebp - 4], 1
call fcn.1000ce5b
mov dword [ebp - 0x1c], 0xffffffff
lea ecx, [ebp - 0x258]
push 2
call fcn.1000cdd8
push 3
lea ecx, [ebp - 0x2cc]
mov byte [ebp - 4], 5
call fcn.1000cdd8
mov byte [ebp - 4], 6
mov dword [ebp - 0x30], 4
mov dword [ebp - 0x3c], ebx
jmp 0x1002707b
mov eax, dword [ebp - 0x3c]
mov dword [ebp + eax*4 - 0x1cc], 0x4c924b54
inc dword [ebp - 0x3c]
cmp dword [ebp - 0x3c], 2
jl 0x1002706a
push ebx
push 1
push ebx
lea eax, [ebp - 0x258]
mov edx, 0x12e2
push eax
lea eax, [ebp - 0x3c]
mov ecx, 0x328
push eax
call fcn.1004a4ff
mov dword [ebp - 0x18], 0x2726
add esp, 0x14
cmp dword [ebp - 0x18], 0x2800
jle 0x10027102
push ebx
call dword [sym.imp.KERNEL32.dll_GetLocalTime]
mov esi, ebx
mov edi, ebx
mov ecx, edi
mov eax, esi
shl eax, cl
lea ecx, [ebp - 0x480]
cdq
push edx
push eax
call fcn.100019c5
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x100270db
mov eax, dword [eax]
push eax
call fcn.1004d87c
pop ecx
push ebx
push 1
lea ecx, [ebp - 0x480]
call fcn.1000d197
inc edi
cmp edi, 0x1fe5
jl 0x100270bd
inc esi
cmp esi, 0x4389
jl 0x100270bb
push ecx
push 0x983
push ecx
push 1
sub esp, 0x14
lea eax, [ebp - 0x3c]
push 0x3235
push ecx
push eax
lea ecx, [ebp - 0x2cc]
call fcn.10049b09
add esp, 0x30
cmp dword [ebp - 0x18], 0x26dc
jge 0x1002713a
push str.pimhgyw_ooqy_lwgbwtr_folj_hwfpv_vhitsgxj_dwtra_rcttgfrro_tchykwvu_ydnvpka_hxyhqnhr
call fcn.1004d87c
pop ecx
mov dword [ebp - 0x1c], 1
jmp 0x10027311
mov dword [ebp - 0x14], 0xf72d4ea6
mov dword [ebp - 0x18], 0x65ac
cmp dword [ebp - 0x18], 0x68fc
jle 0x100271af
push ebx
push ebx
call dword [sym.imp.GDI32.dll_GetBrushOrgEx]
mov edi, ebx
mov esi, ebx
mov eax, edi
lea ecx, [ebp - 0x4f8]
cdq
idiv esi
mov eax, edx
cdq
push edx
push eax
call fcn.100019c5
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x10027188
mov eax, dword [eax]
push eax
call fcn.1004d87c
pop ecx
push ebx
push 1
lea ecx, [ebp - 0x4f8]
call fcn.1000d197
inc esi
cmp esi, 0x54d0
jl 0x10027169
inc edi
cmp edi, 0x1d21
jl 0x10027167
mov dword [ebp - 0x20], 0x7c70ab22
cmp dword [ebp - 0x18], 0x626c
jge 0x100271ca
push str.lceipc_uwy_pvqlc_tsrhnmncw_imrqyvut_tvgg_txb_vlwnb_wctawyejs
call fcn.1004d87c
pop ecx
mov dword [ebp - 0x28], 0x5c9a
cmp dword [ebp - 0x28], 0x602b
jle 0x10027233
push ebx
push ebx
push ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_ReadConsoleW]
mov esi, ebx
mov dword [ebp - 0x18], ebx
mov edi, esi
mov esi, 0x124c
mov eax, edi
lea ecx, [ebp - 0x540]
cdq
push edx
push eax
call fcn.100019c5
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x1002720b
mov eax, dword [eax]
push eax
call fcn.1004d87c
pop ecx
push ebx
push 1
lea ecx, [ebp - 0x540]
call fcn.1000d197
dec edi
dec esi
jne 0x100271f1
mov esi, dword [ebp - 0x18]
inc esi
mov dword [ebp - 0x18], esi
cmp esi, 0x6d32
jl 0x100271ea
mov eax, dword [ebp - 0x14]
cmp eax, dword [ebp - 0x14]
jge 0x10027277
mov dword [ebp - 0x24], 0xfffffffe
xor edx, edx
mov eax, dword [ebp - 0x14]
mov ecx, dword [ebp - 0x24]
mov eax, dword [ebp - 0x14]
cmp eax, ecx
mov eax, dword [ebp - 0x20]
setne dl
imul eax, dword [ebp - 0x1c]
xor ecx, ecx
add edx, eax
mov dword [ebp - 0x1c8], edx
mov eax, dword [ebp - 0x20]
cmp eax, 1
mov eax, dword [ebp - 0x258]
setge cl
mov dword [eax + 4], ecx
jmp 0x1002728e
push ecx
push 1
push ecx
lea edx, [ebp - 0x49]
mov byte [ebp - 0x49], bl
mov ecx, 0x3776
call fcn.1004a956
add esp, 0xc
cmp dword [ebp - 0x28], 0x5992
jge 0x100272a2
push str.jnhn_hwkbrp_clwp_sxewbui_houf_yhrm_trwbqwbs_ncvtmqxfb_lkkenrihn_djnswyw_yjm_uhrygdl_vcdcfemom_fns
call fcn.1004d87c
pop ecx
mov dword [ebp - 0x20], ebx
jmp 0x10027308
mov dword [ebp - 0x14], ebx
jmp 0x100272d2
sub esp, 0xc
mov byte [ebp - 0x46], bl
lea eax, [ebp - 0x46]
xor dl, dl
mov ecx, 0x338b
push eax
push 0x2efe
push 0x3e9d
call fcn.1004a43a
add esp, 0x18
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], 1
jle 0x100272ac
mov dword [ebp - 0x14], ebx
jmp 0x100272ff
push 1
push 1
lea eax, [ebp - 0x3d]
mov byte [ebp - 0x3d], bl
push 1
push eax
mov edx, 0x5921
mov ecx, 0x2c06
call fcn.10049cbe
add esp, 0x10
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], 1
jle 0x100272dd
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], 1
jle 0x100272a7
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 0xd
jg 0x10027146
cmp dword [ebp - 0x1c8], ebx
jne 0x10027361
mov eax, dword [ebp - 0x1c8]
mov eax, dword [ebp - 0x1c8]
mov edx, dword [ebp - 0x258]
cmp dword [edx], 0xa6add33d
sbb eax, eax
xor ecx, ecx
neg eax
cmp eax, 0xfffffffb
mov eax, dword [ebp - 0x2cc]
setg cl
mov eax, dword [eax]
add eax, 2
add eax, ecx
imul eax, dword [edx + 4]
cmp eax, dword [ebp - 0x30]
jle 0x10027361
mov ecx, ebx
jmp 0x10027364
xor ecx, ecx
inc ecx
mov eax, dword [ebp - 0x258]
mov dword [eax], ecx
lea ecx, [ebp - 0x2cc]
call fcn.1000ce5b
lea ecx, [ebp - 0x258]
mov byte [ebp - 4], 1
call fcn.1000ce5b
push 0x42
pop eax
push 0x6c
mov byte [ebp - 0xbd], al
mov ecx, ebx
pop eax
push 2
mov dword [ebp - 0xc4], 0x403140c
mov word [ebp - 0xc0], 0x4505
mov byte [ebp - 0xbe], 7
mov byte [ebp - 0xbc], bl
mov dword [ebp - 0xbb], 0x822012c
mov dword [ebp - 0xb7], 0x22d060f
mov dword [ebp - 0xb3], 0xa0c0b20
mov dword [ebp - 0xaf], 0x917041d
mov dword [ebp - 0xab], 0x30250311
mov byte [ebp - 0xa7], 0xf1
mov word [ebp - 0x3b4], ax
pop esi
mov dword [ebp - 0x16c], ecx
cmp esi, 0x1a
jne 0x10027410
push 4
pop ecx
push 0x1c
mov dword [ebp - 0x16c], ecx
pop esi
jmp 0x10027462
movzx edx, byte [ebp + esi - 0xc3]
mov eax, esi
sub eax, ecx
movzx eax, byte [ebp + eax - 0xc6]
movzx eax, word [ebp + eax*2 - 0x3cc]
mov ecx, eax
and eax, edx
or ecx, edx
sub ecx, eax
movzx eax, byte [ebp + esi - 0xc4]
mov word [ebp + eax*2 - 0x3cc], cx
lea eax, [ebp - 0x16c]
push eax
push ecx
push 0x658f
push ecx
mov cl, 1
call fcn.10049ead
mov ecx, dword [ebp - 0x16c]
add esp, 0x10
add esi, 2
cmp esi, 0x1e
jb 0x100273fd
push dword [ebp - 0x22c]
movdqa xmm0, xmmword [0x10075500]
lea ecx, [ebp - 0x208]
xor eax, eax
mov dword [ebp - 0x208], ebx
mov word [ebp - 0x3b2], ax
lea eax, [ebp - 0x3cc]
push eax
lea eax, [ebp - 0x3dc]
mov dword [ebp - 0x204], ebx
push eax
push ebx
movdqu xmmword [ebp - 0x3dc], xmm0
mov dword [ebp - 0x200], ebx
call fcn.1000f388
mov byte [ebp - 4], 7
xor ecx, ecx
mov dword [ebp - 0x14], 6
inc ecx
mov dword [ebp - 0x20], ecx
mov dword [ebp - 0x10], ecx
mov dword [ebp - 0x18], 5
mov dword [ebp - 0x30], 0x39032f82
mov dword [ebp - 0x10], ebx
jmp 0x100274ed
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0x1c4], 0xce1c
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], ecx
jl 0x100274dc
mov dword [ebp - 0x14], ebx
cmp dword [ebp - 0x14], 3
jg 0x100275fb
mov esi, dword [ebp - 0x208]
mov dword [ebp - 0x24], 0xffffffff
mov eax, dword [ebp - 0x14]
dec eax
neg eax
sbb eax, eax
neg eax
cmp eax, 0xfff8
sbb eax, eax
inc eax
cmp eax, 0xf7e813a3
mov eax, dword [ebp - 0x20]
sbb ecx, ecx
xor edx, edx
neg ecx
cmp eax, ecx
mov eax, dword [ebp - 0x14]
setl dl
xor ecx, ecx
cmp edx, eax
setle cl
xor edx, edx
sub ecx, dword [ebp - 0x20]
cmp dword [esi + 0xc], ecx
mov eax, dword [ebp - 0x20]
setge dl
xor ecx, ecx
cmp edx, eax
setg cl
mov dword [ebp - 0x10], ecx
mov dword [ebp - 0x20], ebx
jmp 0x100275e1
push 2
lea ecx, [ebp - 0x350]
call fcn.1000cdd8
push 0x2abf
push ebx
lea eax, [ebp - 0x350]
mov byte [ebp - 4], 8
push eax
push ecx
lea edx, [ebp - 0x260]
call fcn.1004acc4
mov dword [ebp - 0x10], 3
add esp, 0x10
cmp dword [ebp - 0x10], ebx
jl 0x100275cf
mov eax, dword [ebp - 0x14]
mov edx, 0xffff
mov eax, dword [ebp - 0x1c4]
mov eax, dword [ebp - 0x24]
mov ecx, dword [ebp - 0x14]
mov eax, dword [ebp - 0x208]
cmp edx, dword [eax + ecx*4]
mov eax, dword [ebp - 0x1c4]
sbb edx, edx
xor ecx, ecx
inc edx
cmp edx, eax
setle cl
mov dword [ebp - 0x18], ecx
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x30], eax
dec dword [ebp - 0x10]
jns 0x10027594
lea ecx, [ebp - 0x350]
mov byte [ebp - 4], 7
call fcn.1000ce5b
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], 3
jle 0x1002755b
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], 3
jle 0x10027505
xor ecx, ecx
inc ecx
lea eax, [ebp - 0x45]
mov byte [ebp - 0x45], bl
push eax
push ecx
push ecx
push 0x174b
call fcn.10026b1e
add esp, 0x10
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x208]
call fcn.1000ce5b
mov dword [ebp - 0x18], 0x1974
cmp dword [ebp - 0x18], 0x1ba4
jle 0x10027655
mov esi, ebx
mov edi, esi
mov ebx, 0x2ad4
mov eax, edi
mov ecx, 0x1007bbb8
cdq
push edx
push eax
call fcn.1000cbc0
dec edi
dec ebx
jne 0x10027639
inc esi
cmp esi, 0x40ff
jl 0x10027632
cmp dword [ebp - 0x18], 0x17ee
jge 0x1002766d
mov edx, str.fyfbw_gwsfujypg_yuwnlhgf_irqdxyb_fecwwhatf_wxqvrpi_vbxonlt_cvbmydd
mov ecx, 0x1007bbb8
call fcn.1000ee07
push 2
lea ecx, [ebp - 0x35c]
call fcn.1000cdd8
push ebx
lea eax, [ebp - 0x58]
mov byte [ebp - 4], 9
push eax
push ecx
push ecx
mov dword [ebp - 0x24], 0xfff7
lea ecx, [ebp - 0x35c]
mov edx, 0x4a70
call fcn.10049e6f
add esp, 0x10
mov dword [ebp - 0x58], ebx
jmp 0x100276b5
mov eax, dword [ebp - 0x58]
mov dword [ebp + eax*4 - 0x1c0], 0x9bdba76a
inc dword [ebp - 0x58]
cmp dword [ebp - 0x58], 4
jl 0x100276a4
mov dword [ebp - 0x1b4], ebx
jmp 0x1002774c
mov dword [ebp - 0x1c], 0xffffffff
mov dword [ebp - 0x10], 0x35240ca7
mov edx, dword [ebp - 0x1b4]
mov eax, dword [ebp - 0x1c]
dec edx
neg edx
sbb edx, edx
xor ecx, ecx
inc edx
cmp edx, eax
mov eax, dword [ebp - 0x1b4]
sete cl
xor edx, edx
cmp ecx, eax
mov eax, dword [ebp - 0x1c0]
setne dl
xor ecx, ecx
cmp eax, edx
mov eax, dword [ebp - 0x1b4]
setl cl
sub eax, ecx
je 0x10027711
mov eax, dword [ebp - 0x24]
cmp dword [ebp - 0x1b4], ebx
jne 0x10027722
cmp dword [ebp - 0x1c], ebx
jne 0x10027722
mov eax, ebx
jmp 0x10027725
xor eax, eax
inc eax
mov dword [ebp - 0x10], eax
mov dword [ebp - 0x10], 1
cmp dword [ebp - 0x10], ebx
jl 0x10027746
cmp dword [ebp - 0x1b4], ebx
jne 0x10027746
cmp dword [ebp - 0x1c], ebx
jne 0x10027746
dec dword [ebp - 0x10]
jns 0x10027734
inc dword [ebp - 0x1b4]
cmp dword [ebp - 0x1b4], 1
jle 0x100276c6
lea ecx, [ebp - 0x35c]
mov byte [ebp - 4], 1
call fcn.1000ce5b
push 0x38
pop eax
push 0x6e
mov byte [ebp - 0xa0], al
mov ecx, ebx
pop eax
push 2
mov byte [ebp - 0xa4], bl
mov word [ebp - 0xa3], 0x311
mov byte [ebp - 0xa1], 0xf1
mov dword [ebp - 0x9f], 0x4430225
mov dword [ebp - 0x9b], 0x702034c
mov dword [ebp - 0x97], 0x60a0106
mov word [ebp - 0x93], 0x507
mov byte [ebp - 0x91], 0xb
mov word [ebp - 0x2b4], ax
pop esi
mov dword [ebp - 0x17c], ecx
cmp esi, 2
jne 0x100277dc
push 4
pop ecx
push ecx
mov dword [ebp - 0x17c], ecx
pop esi
jmp 0x1002782d
movzx edx, byte [ebp + esi - 0xa3]
mov eax, esi
sub eax, ecx
movzx eax, byte [ebp + eax - 0xa6]
movzx eax, word [ebp + eax*2 - 0x2b4]
mov ecx, eax
and eax, edx
or ecx, edx
xor dl, dl
sub ecx, eax
movzx eax, byte [ebp + esi - 0xa4]
mov word [ebp + eax*2 - 0x2b4], cx
lea eax, [ebp - 0x17c]
push eax
push 1
mov ecx, 0x141b
call fcn.1004aa62
pop ecx
pop ecx
mov ecx, dword [ebp - 0x17c]
add esi, 2
cmp esi, 0x14
jb 0x100277ca
xor eax, eax
lea ecx, [ebp - 0x280]
push 4
mov word [ebp - 0x2a4], ax
call fcn.1000cdd8
mov byte [ebp - 4], 0xa
lea ecx, [ebp - 0x2fc]
mov eax, 0x74c3
mov dword [ebp - 0x218], eax
mov dword [ebp - 0x214], eax
mov dword [ebp - 0x210], eax
mov dword [ebp - 0x20c], eax
mov dword [ebp - 0x18], 0xfffffffc
mov dword [ebp - 0x18], 0xffffffff
push 4
call fcn.1000cdd8
push 1
push ebx
push 1
push 0x5ba2
push 0x1732
lea edx, [ebp - 0x280]
mov byte [ebp - 4], 0xb
lea ecx, [ebp - 0x24c]
call fcn.1004a4ff
add esp, 0x14
lea eax, [ebp - 0x2fc]
push eax
push ecx
push ecx
push ebx
lea ecx, [ebp - 0x24c]
call fcn.1004acfb
mov eax, dword [ebp - 0x20c]
add esp, 0x10
mov eax, dword [ebp - 0x20c]
mov eax, dword [ebp - 0x280]
cmp dword [eax + 8], ebx
jne 0x100278e9
cmp dword [ebp - 0x20c], ebx
jne 0x100278e9
mov ecx, ebx
jmp 0x100278ec
xor ecx, ecx
inc ecx
mov esi, dword [ebp - 0x280]
mov eax, dword [esi + 4]
imul eax, ecx
test eax, eax
je 0x10027902
mov eax, dword [ebp - 0x210]
mov dword [ebp - 0x18], 0xffffffff
xor edx, edx
mov eax, dword [ebp - 0x18]
mov esi, dword [esi + 4]
mov dword [ebp - 0x18], eax
mov ecx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x218]
cmp ecx, eax
setge dl
cmp edx, 3
sbb eax, eax
xor ecx, ecx
inc eax
cmp eax, esi
mov eax, dword [ebp - 0x2fc]
setge cl
sub esi, ecx
lea ecx, [ebp - 0x2fc]
mov dword [eax], esi
call fcn.1000ce5b
lea ecx, [ebp - 0x280]
mov byte [ebp - 4], 1
call fcn.1000ce5b
xor eax, eax
mov dword [ebp - 0x37c], 7
mov word [ebp - 0x390], ax
lea ecx, [ebp - 0x390]
lea eax, [ebp - 0x2b4]
mov dword [ebp - 0x380], ebx
push eax
call fcn.1000d283
mov byte [ebp - 4], 0xc
lea ecx, [ebp - 0x374]
xor eax, eax
mov dword [ebp - 0x360], 7
mov word [ebp - 0x374], ax
lea eax, [ebp - 0x3cc]
push eax
mov dword [ebp - 0x364], ebx
call fcn.1000d283
lea eax, [ebp - 0x374]
push eax
lea ecx, [ebp - 0x468]
call fcn.1000fa97
lea eax, [ebp - 0x390]
push eax
lea ecx, [ebp - 0x450]
call fcn.1000fa97
push ebx
push 1
lea ecx, [ebp - 0x374]
call fcn.1000d3a5
push ebx
push 1
lea ecx, [ebp - 0x390]
call fcn.1000d3a5
mov byte [ebp - 4], 0xd
lea eax, [ebp - 0x438]
push dword [ebp - 0x260]
lea ecx, [ebp - 0x1a8]
mov dword [ebp - 0x1a8], ebx
push eax
lea eax, [ebp - 0x468]
mov dword [ebp - 0x1a4], ebx
push eax
push ebx
mov dword [ebp - 0x1a0], ebx
call fcn.1002945e
push fcn.10029138
push 1
push 0x30
lea eax, [ebp - 0x468]
mov byte [ebp - 4], 0xf
push eax
call fcn.1004d61b
mov dword [ebp - 0x10], ebx
jmp 0x10027a4f
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0x6c], 0x4fd3df75
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], 1
jl 0x10027a41
push 0x1d
mov dword [ebp - 0x6c], 0x1b
pop esi
jmp 0x10027a70
mov edx, 0x790f
mov cl, 1
call fcn.1004971f
inc dword [ebp - 0x6c]
cmp dword [ebp - 0x6c], esi
jle 0x10027a61
push 7
pop ecx
xor eax, eax
lea edi, [ebp - 0x3cc]
rep stosd dword es:[edi], eax
mov dword [ebp - 0x14], 0x68206240
mov dword [ebp - 0x14], 0xfffffff7
jmp 0x10027ab9
push 0x59d
push 0x2f85
lea eax, [ebp - 0x47]
mov byte [ebp - 0x47], bl
push eax
push 1
push 0x11a7
xor dl, dl
mov cl, 1
call fcn.1004a004
add esp, 0x14
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], esi
jl 0x10027a92
mov dword [ebp - 0x14], ebx
jmp 0x10027adc
push 0x6387
push ecx
push ecx
push 1
mov ecx, 0xef3
call fcn.1004acfb
add esp, 0x10
dec dword [ebp - 0x14]
cmp dword [ebp - 0x14], 0xffffffef
jne 0x10027ac3
mov esi, ebx
mov dword [ebp - 0x20], ebx
mov dword [ebp - 0x1c], 0x57d2
cmp dword [ebp - 0x1c], 0x5846
jle 0x10027b6d
push ebx
push ebx
push ebx
push ebx
push ebx
push ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_CreateNamedPipeA]
mov dword [ebp - 0x10], ebx
mov eax, ebx
mov dword [ebp - 0x28], 0x6c6b
mov dword [ebp - 0x18], eax
mov edi, eax
mov esi, 0x6db8
mov eax, edi
lea ecx, [ebp - 0x498]
cdq
push edx
push eax
call fcn.100019c5
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x10027b35
mov eax, dword [eax]
push eax
call fcn.1004d87c
pop ecx
push ebx
push 1
lea ecx, [ebp - 0x498]
call fcn.1000d197
inc edi
dec esi
jne 0x10027b1b
mov eax, dword [ebp - 0x18]
mov esi, dword [ebp - 0x10]
add eax, esi
dec dword [ebp - 0x28]
mov dword [ebp - 0x18], eax
jne 0x10027b14
inc esi
mov dword [ebp - 0x10], esi
cmp esi, 0x59c3
jl 0x10027b08
mov esi, dword [ebp - 0x20]
xor eax, eax
cmp dword [ebp - 0x1c], 0x57af
mov word [ebp + esi*2 - 0x2b4], ax
jge 0x10027b8b
push str.rxfoun_edwrxltu_vlghg
call fcn.1004d87c
pop ecx
inc esi
mov dword [ebp - 0x20], esi
cmp esi, 9
jb 0x10027ae7
push 1
lea ecx, [ebp - 0x28c]
call fcn.1000cdd8
mov byte [ebp - 4], 0x10
lea ecx, [ebp - 0x1fc]
or edi, 0xffffffff
xor eax, eax
mov dword [ebp - 0x24], edi
inc eax
mov dword [ebp - 0x1c], 0xdd013d0b
mov dword [ebp - 0x14], 0x1355fff
mov dword [ebp - 0x20], 0x71a05132
mov dword [ebp - 0x2c], 0xc9a130df
mov dword [ebp - 0x30], 0x1007b640
mov dword [ebp - 0x30], eax
mov dword [ebp - 0x38], edi
mov dword [ebp - 0x38], 4
mov dword [ebp - 0x10], edi
push eax
call fcn.1000cdd8
lea eax, [ebp - 0x28c]
mov byte [ebp - 4], 0x11
push eax
mov dword [ebp - 0x18], 0xb7dc
mov dl, 1
push ecx
mov dword [ebp - 0x28], 6
lea ecx, [ebp - 0x50]
mov dword [ebp - 0x28], 0x66a4358b
call fcn.10026a3c
pop ecx
pop ecx
mov dword [ebp - 0x50], ebx
jmp 0x10027c34
mov eax, dword [ebp - 0x50]
mov dword [ebp + eax*4 - 0x294], 0x74ca7790
inc dword [ebp - 0x50]
cmp dword [ebp - 0x50], 2
jl 0x10027c23
lea eax, [ebp - 0x1fc]
push eax
push ecx
push 1
push ecx
lea edx, [ebp - 0x50]
mov ecx, 0x30ef
call fcn.100496e6
mov eax, dword [ebp - 0x24]
add esp, 0x10
inc dword [ebp - 0x10]
xor ecx, ecx
mov eax, dword [ebp - 0x30]
mov edx, 0xffff5bef
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x10]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x28c]
mov dword [ebp - 0x290], edx
mov esi, dword [eax]
mov eax, dword [ebp - 0x1fc]
cmp dword [eax], edx
setg cl
xor edx, edx
cmp ecx, esi
setne dl
xor eax, eax
cmp edx, esi
setg al
cmp eax, dword [ebp - 0x18]
jge 0x10027caa
cmp dword [ebp - 0x1c], ebx
je 0x10027caa
xor ecx, ecx
inc ecx
jmp 0x10027cac
mov ecx, ebx
xor eax, eax
cmp ecx, 0xfffffffc
setge al
mov dword [ebp - 0x20], eax
mov eax, dword [ebp - 0x1fc]
cmp dword [eax], ebx
jne 0x10027cd4
mov dword [ebp - 0x28], ebx
mov ecx, dword [ebp - 0x38]
mov eax, dword [ebp - 0x1fc]
cmp ecx, dword [eax]
jne 0x10027cd4
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x20]
xor ecx, ecx
mov eax, dword [ebp - 0x1fc]
mov edx, dword [eax]
mov eax, dword [ebp - 0x14]
cmp edx, eax
mov eax, dword [ebp - 0x28c]
setg cl
cmp ecx, dword [eax]
jge 0x10027cfd
cmp dword [eax], 0
je 0x10027cfd
xor eax, eax
inc eax
jmp 0x10027cff
mov eax, ebx
lea ecx, [edx + 0x1f9d3f58]
xor edx, edx
add ecx, eax
mov eax, dword [ebp - 0x2c]
cmp ecx, eax
mov eax, dword [ebp - 0x294]
setge dl
xor ecx, ecx
sub edx, 0x7c80
cmp edx, eax
setge cl
mov dword [ebp - 0x28], ecx
lea ecx, [ebp - 0x1fc]
call fcn.1000ce5b
lea ecx, [ebp - 0x28c]
mov byte [ebp - 4], 0xf
call fcn.1000ce5b
lea eax, [ebp - 0x1a8]
mov edx, 0x2338
push eax
lea eax, [ebp + 8]
push eax
push 0x7b1a
push ecx
push ecx
push ebx
push 0x5d27
push 0x2d7f
push 0x15a0
push 0x32ef
push 0x4d15
push 0x39
call fcn.100499e1
mov dword [ebp - 0x10], 0x9b55bb2c
add esp, 0x30
mov dword [ebp - 0x10], ebx
jmp 0x10027d99
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0x26c], 0xfff8
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], 1
jl 0x10027d88
mov dword [ebp - 0x10], 0x1b
jmp 0x10027db3
cmp dword [ebp - 0x26c], ebx
jne 0x10027db9
dec dword [ebp - 0x10]
cmp dword [ebp - 0x10], 0xd
jle 0x10027da8
mov dword [ebp - 0x2c], 0xfb023ed1
mov dword [ebp - 0x24], edi
mov dword [ebp - 0x24], ebx
mov dword [ebp - 0x24], 0x8e1b8814
mov dword [ebp - 0x24], 0xfffffff7
mov dword [ebp - 0x24], 0x9b4e94f9
mov dword [ebp - 0x24], 0xee28fdeb
mov dword [ebp - 0x18], 0xdc8
cmp dword [ebp - 0x18], 0x1057
jle 0x10027e34
mov dword [ebp - 0x10], ebx
mov esi, ebx
mov edi, ebx
mov ebx, dword [ebp - 0x10]
mov ecx, edi
mov eax, esi
shl eax, cl
mov ecx, 0x1007bbb8
xor eax, ebx
cdq
push edx
push eax
call fcn.1000cbc0
inc edi
cmp edi, 0x227f
jl 0x10027dfc
inc esi
push 0
pop ebx
cmp esi, 0x149b
jl 0x10027df7
mov eax, dword [ebp - 0x10]
inc eax
mov dword [ebp - 0x10], eax
cmp eax, 0x22a5
jl 0x10027df5
cmp dword [ebp - 0x18], 0xa77
jge 0x10027e4c
mov edx, str.hnbh_qmcs_bxnnhaok_gacole_tjquufxsw_awci_jbwkgaadh_jqn_ktfvh
mov ecx, 0x1007bbb8
call fcn.1000ee07
mov dword [ebp - 0x24], 1
mov dword [ebp - 0x24], 9
mov dword [ebp - 0x1c], 0x426a
mov dword [ebp - 0x10], ebx
jmp 0x10027e77
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0x3fc], 0x8f90a3cf
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], 3
jl 0x10027e66
inc dword [ebp - 0x1c]
mov esi, 0x5f88
mov dword [ebp - 0x3fc], esi
mov ecx, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x1c]
sub ecx, 0xe05d
neg ecx
push 0x65ab
sbb ecx, ecx
xor edx, edx
inc ecx
cmp ecx, eax
lea eax, [ebp - 0x48]
push ebx
setne dl
sub edx, esi
neg edx
push ecx
sbb edx, edx
inc edx
mov dword [ebp - 0x24], edx
mov byte [ebp - 0x48], bl
push eax
call fcn.10026b1e
add esp, 0x10
push ebx
push 0xb2d1
push 0xb6ca
call fcn.1003fb46
pop ecx
pop ecx
call eax
mov dword [ebp - 0x18], 0xfffffffb
mov dword [ebp - 0x20], 0x18101bc
mov dword [ebp - 0x10], ebx
jmp 0x10027ef8
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0x68], 0xe8cff0ea
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], 2
jl 0x10027eea
mov dword [ebp - 0x68], ebx
jmp 0x100281f2
mov dword [ebp - 0x10], 0x7f8c
cmp dword [ebp - 0x10], 0x8079
jle 0x10027f64
mov esi, ebx
mov dword [ebp - 0x28], ebx
mov edi, esi
mov esi, 0x6ba4
mov eax, edi
lea ecx, [ebp - 0x510]
cdq
push edx
push eax
call fcn.100019c5
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x10027f3c
mov eax, dword [eax]
push eax
call fcn.1004d87c
pop ecx
push ebx
push 1
lea ecx, [ebp - 0x510]
call fcn.1000d197
dec edi
dec esi
jne 0x10027f22
mov esi, dword [ebp - 0x28]
inc esi
mov dword [ebp - 0x28], esi
cmp esi, 0x140f
jl 0x10027f1b
mov dword [ebp - 0x14], 1
cmp dword [ebp - 0x10], 0x7d80
jge 0x10027f7f
push str.xkdoaxn_fqbesi_yytars_ncv_jkmuxvhru_vcxuqgc
call fcn.1004d87c
pop ecx
push ecx
push 0x5c8d
push ecx
push ecx
mov dword [ebp - 0x1c], 0x4a6b2c4e
xor dl, dl
mov dword [ebp - 0x30], 0xfffffff9
mov ecx, 0x7726
call fcn.10026a7f
add esp, 0x10
cmp dword [ebp - 0x14], ebx
je 0x10027fbe
mov dword [ebp - 0x2c], 1
cmp dword [ebp - 0x2c], ebx
jne 0x100281fc
jmp 0x100281ef
mov dword [ebp - 0x1c], 0x4115
cmp dword [ebp - 0x1c], 0x44e5
jle 0x1002802d
mov eax, ebx
mov dword [ebp - 0x10], ebx
mov edi, ebx
mov dword [ebp - 0x28], ebx
mov ecx, edi
mov dword [ebp - 0x2c], eax
mov edi, eax
mov esi, ebx
shl edi, cl
mov dword [ebp - 0x2c], ebx
mov ecx, ebx
mov eax, esi
shl eax, cl
mov ecx, 0x1007bbb8
xor eax, edi
cdq
push edx
push eax
call fcn.1000cbc0
inc ebx
cmp ebx, 0x67a5
jl 0x10027fe6
inc esi
push 0
pop ebx
cmp esi, 0x7958
jl 0x10027fe3
mov edi, dword [ebp - 0x28]
mov eax, dword [ebp - 0x10]
inc edi
mov dword [ebp - 0x28], edi
cmp edi, 0x22e2
jl 0x10027fd8
inc eax
mov dword [ebp - 0x10], eax
cmp eax, 0x332d
jl 0x10027fd3
mov dword [ebp - 0x38], 4
cmp dword [ebp - 0x1c], 0x3ef4
jge 0x1002804c
mov edx, str.qimn_yxf_iimgnhyyr_xtybrw_tlqltqsao_jpese_aay_fjw_rwsvgq_evl
mov ecx, 0x1007bbb8
call fcn.1000ee07
push 3
lea ecx, [ebp - 0x2d8]
call fcn.1000cdd8
mov byte [ebp - 4], 0x12
mov dword [ebp - 0x10], ebx
jmp 0x10028075
mov ecx, dword [ebp - 0x10]
mov eax, dword [ebp - 0x2d8]
mov dword [eax + ecx*4], 1
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], 3
jl 0x10028062
mov dword [ebp - 0x14], ebx
cmp dword [ebp - 0x14], 0x18
jne 0x100281e0
mov esi, dword [ebp - 0x2d8]
mov dword [ebp - 0x2c], esi
xor ecx, ecx
mov dword [ebp - 0x28], 9
mov eax, dword [ebp - 0x28]
test eax, eax
mov eax, dword [ebp - 0x38]
setns cl
cmp ecx, 0xfffb
sbb ecx, ecx
xor edx, edx
neg ecx
cmp ecx, eax
mov eax, dword [ebp - 0x14]
setle dl
xor ecx, ecx
cmp edx, eax
setg cl
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
mov dword [esi + 4], eax
test eax, eax
je 0x100280d7
cmp dword [ebp - 0x18], ebx
je 0x100280d7
xor eax, eax
inc eax
jmp 0x100280d9
mov eax, ebx
mov dword [ebp - 0x30], eax
mov eax, dword [ebp - 0x1c]
cmp dword [ebp - 0x68], ebx
je 0x100280fe
push ebx
push ecx
push ecx
mov edx, 0x2573
mov ecx, 0x2753
call fcn.1004a90e
add esp, 0xc
jmp 0x100281d3
mov dword [ebp - 0x10], ebx
jmp 0x10028114
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0x1ac], 0xfffffffc
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], 1
jl 0x10028103
mov dword [ebp - 0x24], 0x6cc2
cmp dword [ebp - 0x24], 0x6dfa
jle 0x1002816a
mov edi, ebx
mov dword [ebp - 0x10], ebx
mov esi, ebx
mov ebx, edi
mov edi, 0x1741
mov eax, ebx
mov ecx, 0x1007bbb8
cdq
push edx
push eax
call fcn.1000cbc0
add ebx, esi
dec edi
jne 0x10028138
mov edi, dword [ebp - 0x10]
inc esi
cmp esi, 0x27cd
jl 0x10028131
inc edi
mov dword [ebp - 0x10], edi
push 0
pop ebx
cmp edi, 0x3fd8
jl 0x1002812f
mov esi, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x1ac]
xor edx, edx
mov eax, dword [ebp - 0x68]
mov eax, dword [ebp - 0x38]
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x28]
mov eax, dword [ebp - 0x14]
cmp eax, ecx
mov eax, dword [ebp - 0x1c]
setge dl
xor ecx, ecx
cmp edx, eax
mov eax, dword [ebp - 0x1ac]
setl cl
mov dword [ebp - 0x28], ecx
xor ecx, ecx
cmp dword [ebp - 0x28], eax
setne cl
imul eax, ecx, 0x9898
test eax, eax
jne 0x100281ae
mov eax, dword [ebp - 0x30]
mov eax, dword [ebp - 0x14]
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x24], 0x6a43
jge 0x100281cc
mov edx, str.rkvicmwhv_dawxvnto_agkbjbe_dmsktkpeb_cxeoq_etblmdhpg
mov ecx, 0x1007bbb8
call fcn.1000ee07
mov dl, 1
call fcn.1004a17b
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], 0x18
je 0x10028091
lea ecx, [ebp - 0x2d8]
mov byte [ebp - 4], 0xf
call fcn.1000ce5b
inc dword [ebp - 0x68]
cmp dword [ebp - 0x68], 3
jle 0x10027f06
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x20], eax
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], ebx
jne 0x10028223
mov eax, dword [ebp - 0x64]
cmp dword [ebp - 0x68], ebx
jne 0x10028223
cmp dword [ebp - 0x20], ebx
jne 0x10028223
cmp dword [ebp - 0x64], ebx
jne 0x10028223
mov edx, ebx
jmp 0x10028226
xor edx, edx
inc edx
mov eax, dword [ebp - 0x64]
xor ecx, ecx
cmp edx, eax
mov eax, dword [ebp - 0x18]
setge cl
xor edx, edx
cmp ecx, eax
mov eax, dword [ebp - 0x18]
setge dl
xor ecx, ecx
cmp edx, eax
mov edx, 0x63f4
setle cl
xor eax, eax
cmp ecx, 0x3c53d173
setne al
sub eax, 0xf302d78b
neg eax
sbb eax, eax
inc eax
mov dword [ebp - 0x64], eax
lea eax, [ebp - 0x3b0]
push eax
push 1
push 0x6e23
push ecx
call fcn.1004acc4
mov dword [ebp - 0x70], 0x9841b3c6
add esp, 0x10
mov dword [ebp - 0x378], 5
mov dword [ebp - 0x344], 1
mov dword [ebp - 0x70], ebx
jmp 0x100283ba
push 3
lea ecx, [ebp - 0x39c]
call fcn.1000cdd8
push 1
mov byte [ebp - 4], 0x13
lea edx, [ebp - 0x334]
push ecx
mov dword [ebp - 0x23c], 0xffffffff
push ecx
mov dword [ebp - 0x274], 7
lea ecx, [ebp - 0x39c]
mov dword [ebp - 0x264], ebx
call fcn.1004a90e
mov dword [ebp - 0x30], 0x5dd8
add esp, 0xc
cmp dword [ebp - 0x30], 0x5fa1
jle 0x1002836c
mov ecx, ebx
mov dword [ebp - 0x10], ebx
mov eax, ebx
mov dword [ebp - 0x18], ebx
mov edi, ebx
mov dword [ebp - 0x24], ebx
cdq
mov esi, ebx
idiv edi
mov edi, edx
and edi, ecx
mov eax, esi
lea ecx, [ebp - 0x528]
xor eax, edi
cdq
push edx
push eax
call fcn.100019c5
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x10028322
mov eax, dword [eax]
push eax
call fcn.1004d87c
pop ecx
push ebx
push 1
lea ecx, [ebp - 0x528]
call fcn.1000d197
inc esi
cmp esi, 0x4b2b
jl 0x10028306
mov edi, dword [ebp - 0x24]
mov eax, dword [ebp - 0x18]
inc edi
mov ecx, dword [ebp - 0x10]
mov dword [ebp - 0x24], edi
cmp edi, 0x5070
jl 0x100282fd
inc eax
mov dword [ebp - 0x18], eax
cmp eax, 0x1951
jl 0x100282f8
inc ecx
mov dword [ebp - 0x10], ecx
cmp ecx, 0x452
jl 0x100282f3
lea eax, [ebp - 0x23c]
push eax
sub esp, 0x10
lea eax, [ebp - 0x264]
push 1
push eax
push ecx
lea eax, [ebp - 0x274]
push eax
push 0x766d
call fcn.10049762
add esp, 0x28
cmp dword [ebp - 0x30], 0x5af1
jge 0x100283a8
push str.lvqml_wqfyus_hsy_hcrvw_poovh_ggnclb_jobltew_erugdcwew_bhdqpbien_htf
call fcn.1004d87c
pop ecx
lea ecx, [ebp - 0x39c]
mov byte [ebp - 4], 0xf
call fcn.1000ce5b
dec dword [ebp - 0x70]
cmp dword [ebp - 0x70], 0xffffffe8
jne 0x1002829b
push 1
push 1
push 1
push 0x718a
push 0x1c85
mov edx, 0x7974
mov ecx, 0x748d
call fcn.1004a4ff
mov dword [ebp - 0x34], ebx
lea ecx, [ebp - 0x2a0]
mov dword [ebp - 0x74], 7
add esp, 0x14
mov dword [ebp - 0x44], 0x4074dd03
mov dword [ebp - 0x5c], 0xf0aa6e6f
mov dword [ebp - 0x90], ebx
mov dword [ebp - 0x78], 9
mov dword [ebp - 0x60], 0xb5cf1c94
push 2
call fcn.1000cdd8
push ecx
lea eax, [ebp - 0x330]
mov byte [ebp - 4], 0x14
push eax
push ecx
push ecx
mov dword [ebp - 0x2c], 0xa7967268
lea ecx, [ebp - 0x2a0]
mov dl, 1
call fcn.10026a7f
add esp, 0xc
lea eax, [ebp - 0x44]
lea edx, [ebp - 0x74]
push eax
push 1
call fcn.1004aa3b
mov dword [ebp - 0x44], 1
xor edx, edx
mov eax, dword [ebp - 0x44]
add esp, 0xc
mov dword [ebp - 0x5c], eax
mov eax, dword [ebp - 0x5c]
mov dword [ebp - 0x90], eax
mov eax, dword [ebp - 0x5c]
imul eax, dword [ebp - 0x44]
mov dword [ebp - 0x5c], eax
mov eax, dword [ebp - 0x5c]
mov eax, dword [ebp - 0x74]
mov eax, dword [ebp - 0x90]
mov ecx, dword [ebp - 0x44]
mov eax, dword [ebp - 0x44]
cmp ecx, eax
mov eax, dword [ebp - 0x90]
setne dl
sub edx, eax
add edx, 0x1188
mov dword [ebp - 0x78], edx
je 0x100284cb
push ecx
push ebx
push ecx
mov edx, 0x7a2f
mov byte [ebp - 0x4a], bl
lea ecx, [ebp - 0x4a]
call fcn.1004a956
push 1
lea edx, [ebp - 0x60]
mov ecx, 0x3d1c
call fcn.10026b57
add esp, 0x10
jmp 0x10028579
mov dword [ebp - 0x268], ebx
mov dword [ebp - 0x21c], 0x97512302
mov dword [ebp - 0x60], ebx
jmp 0x1002856f
push 2
lea ecx, [ebp - 0x320]
call fcn.1000cdd8
push 0x1ecd
lea eax, [ebp - 0x19c]
mov byte [ebp - 4], 0x15
push eax
push 0x202
lea eax, [ebp - 0x320]
mov dl, 1
push ebx
push eax
mov cl, dl
call fcn.1004a004
add esp, 0x14
lea eax, [ebp - 0x268]
lea edx, [ebp - 0x90]
push 0x33b
push 0x4f21
push eax
push ecx
push ecx
push 1
lea eax, [ebp - 0x44]
push eax
lea eax, [ebp - 0x21c]
push eax
lea eax, [ebp - 0x5c]
push eax
lea eax, [ebp - 0x78]
push eax
lea eax, [ebp - 0x320]
push eax
lea eax, [ebp - 0x2a0]
push eax
call fcn.100499e1
add esp, 0x30
mov byte [ebp - 4], 0x14
lea ecx, [ebp - 0x320]
call fcn.1000ce5b
inc dword [ebp - 0x60]
cmp dword [ebp - 0x60], 4
je 0x100284e3
lea ecx, [ebp - 0x2a0]
mov byte [ebp - 4], 0xf
call fcn.1000ce5b
push 1
push 1
push ebx
push 0x75ed
mov edx, 0x3e92
mov ecx, 0x6982
call fcn.10049cbe
add esp, 0x10
mov dword [ebp - 0x168], 0x7c119507
mov dword [ebp - 0x164], 0x924750f
mov ecx, ebx
mov dword [ebp - 0x160], 0x731a7b04
mov dword [ebp - 0x15c], 0x1918041d
push 0x38
pop eax
push 2
mov dword [ebp - 0x158], 0xa5d2502
mov dword [ebp - 0x154], 0x16710119
mov byte [ebp - 0x150], 4
mov byte [ebp - 0x14f], bl
mov dword [ebp - 0x14e], 0x1956093a
mov dword [ebp - 0x14a], 0x601051d
mov dword [ebp - 0x146], 0x21011001
mov dword [ebp - 0x142], 0x20f2207
mov word [ebp - 0x13e], 0x87d
mov byte [ebp - 0x13c], bl
mov dword [ebp - 0x13b], 0x6b1e6913
mov dword [ebp - 0x137], 0x10b7412
mov dword [ebp - 0x133], 0x741b041f
mov dword [ebp - 0x12f], 0x45257b03
mov dword [ebp - 0x12b], 0xd0c4420
mov dword [ebp - 0x127], 0x680e7123
mov dword [ebp - 0x123], 0xd0d1917
mov dword [ebp - 0x11f], 0x11c0815
mov word [ebp - 0x11b], 0x914
mov word [ebp - 0x582], ax
pop esi
cmp esi, 0x10
jne 0x10028699
push 3
pop ecx
push 0x11
pop esi
jmp 0x100286d1
movzx edx, byte [ebp + esi - 0x167]
mov eax, esi
sub eax, ecx
movzx eax, byte [ebp + eax - 0x16a]
movzx ecx, word [ebp + eax*2 - 0x590]
mov eax, ecx
and eax, edx
add eax, eax
sub ecx, eax
movzx eax, byte [ebp + esi - 0x168]
add ecx, edx
mov word [ebp + eax*2 - 0x590], cx
mov ecx, ebx
add esi, 2
cmp esi, 0x4f
jb 0x1002868c
xor eax, eax
mov dword [ebp - 0x300], 7
mov word [ebp - 0x544], ax
lea ecx, [ebp - 0x314]
mov word [ebp - 0x314], ax
lea eax, [ebp - 0x590]
push eax
mov dword [ebp - 0x304], ebx
call fcn.1000d283
mov byte [ebp - 4], 0x16
lea edi, [ebp - 0x590]
push 0x13
pop ecx
xor eax, eax
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
mov dword [ebp - 0x2c], ebx
mov dword [ebp - 0x240], 0xc9d9
mov dword [ebp - 0x10], ebx
jmp 0x10028741
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0x238], 0xfffffff7
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], 3
jl 0x10028730
cmp dword [ebp - 0x234], ebx
je 0x100288d9
mov dword [ebp - 0x28], 0x67f
cmp dword [ebp - 0x28], 0x96b
jle 0x100287e7
mov dword [ebp - 0x38], ebx
mov edx, ebx
mov dword [ebp - 0x30], 0x23be
mov dword [ebp - 0x18], edx
mov edi, ebx
mov dword [ebp - 0x24], ebx
mov ecx, edi
mov esi, ebx
mov edi, edx
sar edi, cl
mov eax, edi
lea ecx, [ebp - 0x4b0]
xor eax, esi
cdq
push edx
push eax
call fcn.100019c5
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x1002879f
mov eax, dword [eax]
push eax
call fcn.1004d87c
pop ecx
push ebx
push 1
lea ecx, [ebp - 0x4b0]
call fcn.1000d197
inc esi
cmp esi, 0x910
jl 0x10028783
mov edi, dword [ebp - 0x24]
mov edx, dword [ebp - 0x18]
inc edi
mov dword [ebp - 0x24], edi
cmp edi, 0x4cd4
jl 0x1002877b
mov eax, dword [ebp - 0x38]
add edx, eax
dec dword [ebp - 0x30]
mov dword [ebp - 0x18], edx
jne 0x10028776
inc eax
mov dword [ebp - 0x38], eax
cmp eax, 0x71b2
jl 0x1002876a
cmp dword [ebp - 0x28], 0x618
jge 0x100287fb
push str.txwxuqsvs_koxqpvto_ixx_apkfegxqa_wwujbu_qfljgnlx_kkmttq_xlwqrdv_ehoiicbk_jgqy_fcbjcr_tqmhyxw
call fcn.1004d87c
pop ecx
mov dword [ebp - 0x2c], 0xfffffff7
mov dword [ebp - 0x24], 0xffffffff
mov dword [ebp - 0x10], ebx
jmp 0x1002881f
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0x88], 0xffffffff
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], 2
jl 0x1002880e
push 0x3dc2
push 1
mov dl, 1
mov ecx, 0x1c1
call fcn.1004aa62
pop ecx
pop ecx
cmp dword [ebp - 0x88], ebx
jne 0x1002886e
mov eax, dword [ebp - 0x84]
xor edx, edx
cmp eax, 0xcc9c
mov eax, dword [ebp - 0x88]
setl dl
xor ecx, ecx
cmp eax, edx
setne cl
mov dword [ebp - 0x2c], ecx
cmp dword [ebp - 0x88], ebx
jne 0x1002886e
mov ecx, ebx
jmp 0x10028871
xor ecx, ecx
inc ecx
mov eax, dword [ebp - 0x230]
xor edx, edx
add eax, ecx
mov dword [ebp - 0x24], eax
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0x88]
mov eax, dword [ebp - 0x234]
mov ecx, dword [ebp - 0x88]
mov eax, dword [ebp - 0x88]
cmp ecx, eax
mov eax, dword [ebp - 0x84]
setl dl
xor ecx, ecx
cmp edx, eax
setl cl
neg ecx
cmp ecx, dword [ebp - 0x88]
je 0x100288bb
mov eax, dword [ebp - 0x234]
mov edx, dword [ebp - 0x88]
mov eax, dword [ebp - 0x238]
dec edx
neg edx
sbb edx, edx
xor ecx, ecx
inc edx
cmp eax, edx
setge cl
mov dword [ebp - 0x2c], ecx
jmp 0x100288fb
push ecx
push ecx
lea eax, [ebp - 0x244]
mov dword [ebp - 0x244], 0xcac31e13
push eax
mov dl, 1
mov ecx, 0x43ac
call fcn.1004a241
add esp, 0xc
push 0x5771
push ecx
lea eax, [ebp - 0x240]
push eax
push ecx
xor cl, cl
call fcn.10049ead
add esp, 0x10
mov dword [ebp - 0x118], 0x721a5114
mov ecx, ebx
mov dword [ebp - 0x114], 0x122731b
mov byte [ebp - 0x110], 0x23
mov byte [ebp - 0x10f], bl
push 0x42
pop eax
push 2
mov dword [ebp - 0x10e], 0x121730f
mov byte [ebp - 0x10a], 0x1c
mov byte [ebp - 0x109], bl
mov dword [ebp - 0x108], 0x750d7606
mov dword [ebp - 0x104], 0x690e7711
mov byte [ebp - 0x100], 0x18
mov byte [ebp - 0xff], bl
mov dword [ebp - 0xfe], 0x71246817
mov word [ebp - 0xfa], 0x507
mov byte [ebp - 0xf8], bl
mov dword [ebp - 0xf7], 0x54c0c4a
mov dword [ebp - 0xf3], 0x8092007
mov dword [ebp - 0xef], 0x354010f
mov dword [ebp - 0xeb], 0x12720272
mov word [ebp - 0xe7], 0x1505
mov byte [ebp - 0xe5], bl
mov dword [ebp - 0xe4], 0x7619751e
mov dword [ebp - 0xe0], 0x8100904
mov dword [ebp - 0xdc], 0x6e0b1c09
mov dword [ebp - 0xd8], 0x721d0501
mov dword [ebp - 0xd4], 0x4f164925
mov word [ebp - 0xd0], 0xb1f
mov byte [ebp - 0xce], 0xa
mov byte [ebp - 0xcd], bl
mov word [ebp - 0xcc], 0x1413
mov word [ebp - 0x5b8], ax
pop esi
mov dword [ebp - 0x180], ecx
cmp esi, 0x2a
jne 0x10028a32
push 2
pop ecx
mov dword [ebp - 0x180], ecx
jmp 0x10028a83
movzx edx, byte [ebp + esi - 0x117]
mov eax, esi
sub eax, ecx
sub esp, 0xc
movzx eax, byte [ebp + eax - 0x11a]
push ebx
movzx eax, word [ebp + eax*2 - 0x5e0]
mov ecx, eax
and eax, edx
or ecx, edx
mov edx, 0x6067
sub ecx, eax
movzx eax, byte [ebp + esi - 0x118]
mov word [ebp + eax*2 - 0x5e0], cx
lea ecx, [ebp - 0x180]
call fcn.10026b57
mov ecx, dword [ebp - 0x180]
add esp, 0x10
add esi, 2
cmp esi, 0x4e
jb 0x10028a22
xor eax, eax
mov dword [ebp - 0x2dc], 7
mov word [ebp - 0x594], ax
lea ecx, [ebp - 0x2f0]
mov word [ebp - 0x2f0], ax
lea eax, [ebp - 0x5e0]
push eax
mov dword [ebp - 0x2e0], ebx
call fcn.1000d283
push 0x13
pop ecx
xor eax, eax
mov byte [ebp - 4], 0x17
cmp dword [ebp - 0x300], 8
lea edi, [ebp - 0x5e0]
rep stosd dword es:[edi], eax
lea ecx, [ebp - 0x438]
mov esi, 0x8f10
push ecx
stosw word es:[edi], ax
lea eax, [ebp - 0x314]
cmovae eax, dword [ebp - 0x314]
mov edi, 0xb2d1
push eax
push edi
push esi
call fcn.1003fb46
pop ecx
pop ecx
call eax
test eax, eax
jne 0x100290cc
cmp dword [ebp - 0x2dc], 8
lea ecx, [ebp - 0x40c]
push ecx
lea eax, [ebp - 0x2f0]
cmovae eax, dword [ebp - 0x2f0]
push eax
push edi
push esi
call fcn.1003fb46
pop ecx
pop ecx
call eax
test eax, eax
jne 0x100290cc
lea eax, [ebp - 0x34]
push eax
lea eax, [ebp - 0x438]
push eax
push 3
push ebx
lea eax, [ebp - 0x40c]
push eax
push edi
push 0x4395
call fcn.1003fb46
pop ecx
pop ecx
call eax
test eax, eax
js 0x100290cc
cmp dword [ebp - 0x34], 0
je 0x100290cc
lea eax, [ebp - 0x3f0]
mov edx, 0x7586
push eax
push 0x4205
push ebx
push ecx
push ecx
call fcn.10026b69
xor eax, eax
mov word [ebp - 0x80], 0xb301
mov word [ebp - 0x3e8], ax
add esp, 0x14
mov byte [ebp - 0x7e], bl
mov dword [ebp - 0x7d], 0x2840122
mov byte [ebp - 0x79], 0x33
mov dword [ebp - 0x24], 0x78a0
cmp dword [ebp - 0x24], 0x7a36
jle 0x10028c3e
mov dword [ebp - 0x18], ebx
mov edx, ebx
mov dword [ebp - 0x10], ebx
mov esi, ebx
mov edi, ebx
mov ecx, edi
mov eax, esi
sar eax, cl
lea ecx, [ebp - 0x4c8]
or eax, edx
or eax, dword [ebp - 0x18]
cdq
push edx
push eax
call fcn.100019c5
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x10028bea
mov eax, dword [eax]
push eax
call fcn.1004d87c
pop ecx
push ebx
push 1
lea ecx, [ebp - 0x4c8]
call fcn.1000d197
mov edx, dword [ebp - 0x10]
inc edi
cmp edi, 0x15f9
jl 0x10028bc7
inc esi
cmp esi, 0x6988
jl 0x10028bc5
inc edx
mov dword [ebp - 0x10], edx
cmp edx, 0x2e2b
jl 0x10028bc3
mov eax, dword [ebp - 0x18]
inc eax
mov dword [ebp - 0x18], eax
cmp eax, 0x5adb
jl 0x10028bbe
push ebx
push ebx
push ebx
push ebx
push ebx
push ebx
push ebx
push ebx
push ebx
push ebx
call dword [sym.imp.USER32.dll_DrawStateW]
cmp dword [ebp - 0x24], 0x7845
push 0x65
pop eax
mov word [ebp - 0x18a], ax
jge 0x10028c5c
push str.wnhk_hnjbxvd_klf_jinctoqxc_bnwhm_negry_gqiindms_oxli_rxalrcys_twvkemqgg_tnbhlslr_hahschucf
call fcn.1004d87c
pop ecx
push 2
mov ecx, ebx
pop esi
mov dword [ebp - 0x174], ecx
cmp esi, 4
jne 0x10028c77
push 2
pop ecx
mov dword [ebp - 0x174], ecx
jmp 0x10028cc2
movzx edx, byte [ebp + esi - 0x7f]
mov eax, esi
sub eax, ecx
movzx eax, byte [ebp + eax - 0x82]
movzx eax, word [ebp + eax*2 - 0x18c]
mov ecx, eax
and eax, edx
or ecx, edx
sub ecx, eax
movzx eax, byte [ebp + esi - 0x80]
push ecx
push ecx
push 0xe94
mov word [ebp + eax*2 - 0x18c], cx
lea ecx, [ebp - 0x174]
push 1
call fcn.1004a385
mov ecx, dword [ebp - 0x174]
add esp, 0x10
add esi, 2
cmp esi, 8
jb 0x10028c67
xor eax, eax
mov dword [ebp - 0x1d0], 7
mov word [ebp - 0x186], ax
lea ecx, [ebp - 0x1e4]
mov word [ebp - 0x1e4], ax
lea eax, [ebp - 0x18c]
push eax
mov dword [ebp - 0x1d4], ebx
call fcn.1000d283
mov byte [ebp - 4], 0x18
lea ecx, [ebp - 0x1e4]
cmp dword [ebp - 0x1d0], 8
mov eax, dword [ebp - 0x1d4]
cmovae ecx, dword [ebp - 0x1e4]
push dword [ebp - 0x19c]
mov dword [ebp - 0x18c], ebx
mov dword [ebp - 0x188], ebx
lea eax, [ecx + eax*2]
mov dword [ebp - 0x228], ebx
lea ecx, [ebp - 0x1e4]
mov dword [ebp - 0x224], ebx
cmovae ecx, dword [ebp - 0x1e4]
push eax
push ecx
lea ecx, [ebp - 0x228]
mov dword [ebp - 0x220], ebx
call fcn.100295fd
lea eax, [ebp - 0x228]
mov byte [ebp - 4], 0x19
push eax
push 0x7dc6
push 0x5a36
mov dl, 1
push 1
push 0x66e7
mov cl, dl
call fcn.1004a004
mov edx, dword [ebp - 0x184]
add esp, 0x14
cmp dword [edx + 0x14], 8
jb 0x10028d93
mov ecx, dword [edx]
jmp 0x10028d95
mov ecx, edx
cmp dword [edx + 0x14], 8
mov eax, dword [edx + 0x10]
lea eax, [ecx + eax*2]
jb 0x10028da3
mov edx, dword [edx]
push dword [ebp - 0x19c]
lea ecx, [ebp - 0x1f0]
mov dword [ebp - 0x1f0], ebx
push eax
push edx
mov dword [ebp - 0x1ec], ebx
mov dword [ebp - 0x1e8], ebx
call fcn.100295fd
lea edx, [ebp - 0x1f0]
mov byte [ebp - 4], 0x1a
xor cl, cl
call fcn.1004971f
cmp dword [ebp - 0x1d0], 8
lea edx, [ebp - 0x1e4]
lea esi, [ebp - 0x3b0]
mov eax, dword [ebp - 0x34]
cmovae edx, dword [ebp - 0x1e4]
sub esp, 0x10
mov edi, esp
sub esp, 0x10
mov ecx, dword [eax]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
mov edi, esp
lea esi, [ebp - 0x3b0]
sub esp, 0x10
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
mov edi, esp
lea esi, [ebp - 0x3f0]
push dword [ebp - 0x1f0]
push edx
movsd dword es:[edi], dword [esi]
push eax
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
call dword [ecx + 0x1c]
test eax, eax
js 0x10029093
mov dword [ebp - 0x178], ebx
mov dword [ebp - 0x30], 0x692b
cmp dword [ebp - 0x30], 0x696b
jle 0x10028ecf
mov edi, ebx
mov dword [ebp - 0x24], ebx
mov esi, ebx
mov dword [ebp - 0x74], ebx
mov edx, edi
mov dword [ebp - 0x184], ebx
mov ecx, esi
mov edi, ebx
shl edx, cl
mov dword [ebp - 0x78], edx
mov esi, ebx
mov eax, esi
lea ecx, [ebp - 0x4e0]
xor eax, edi
or eax, edx
cdq
push edx
push eax
call fcn.100019c5
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x10028e87
mov eax, dword [eax]
push eax
call fcn.1004d87c
pop ecx
push ebx
push 1
lea ecx, [ebp - 0x4e0]
call fcn.1000d197
mov edx, dword [ebp - 0x78]
inc esi
cmp esi, 0x4104
jl 0x10028e69
inc edi
cmp edi, 0x3718
jl 0x10028e67
mov esi, dword [ebp - 0x74]
mov edi, dword [ebp - 0x24]
inc esi
mov dword [ebp - 0x74], esi
cmp esi, 0x7597
jl 0x10028e56
inc edi
mov dword [ebp - 0x24], edi
cmp edi, 0x146d
jl 0x10028e51
cmp dword [ebp - 0x30], 0x6641
jge 0x10028ee3
push str.yqrccbt_pyhvhxd_vgs_vvofsbptg_vqeicrla_ihqawlga_uvqhgx_bchngnlf_uplap
call fcn.1004d87c
pop ecx
mov esi, dword [ebp - 0x1a8]
mov cl, 1
cmp esi, dword [ebp - 0x1a4]
je 0x10028f3d
add esi, 0x18
test cl, cl
je 0x10028f25
cmp dword [esi + 0x14], 8
jb 0x10028f04
mov edi, dword [esi]
jmp 0x10028f06
mov edi, esi
cmp dword [esi - 4], 8
jb 0x10028f11
mov cl, bl
add esi, 0x30
lea eax, [esi - 0x18]
cmp eax, dword [ebp - 0x1a4]
jne 0x10028ef6
test cl, cl
je 0x10029093
mov eax, dword [ebp - 0x34]
lea esi, [ebp - 0x3b0]
sub esp, 0x10
mov edi, esp
mov ecx, dword [eax]
push eax
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
call dword [ecx + 0x2c]
test eax, eax
js 0x10029093
mov eax, dword [ebp - 0x34]
lea edx, [ebp - 0x178]
push edx
push eax
mov ecx, dword [eax]
call dword [ecx + 0x34]
test eax, eax
js 0x10029093
cmp dword [ebp - 0x178], 0x130
je 0x10028f91
mov eax, dword [ebp - 0x34]
push eax
mov ecx, dword [eax]
call dword [ecx + 8]
lea ecx, [ebp - 0x1f0]
mov dword [ebp - 0x34], ebx
call fcn.10024e96
lea ecx, [ebp - 0x228]
call fcn.10024e96
push ebx
push 1
lea ecx, [ebp - 0x1e4]
mov byte [ebp - 4], 0x17
call fcn.1000d3a5
mov edi, 0xb2d1
push edi
push 0x6f48
call fcn.1003fb46
pop ecx
pop ecx
call eax
mov ecx, dword [ebp - 0x25c]
lea eax, [ebp - 0x198]
push eax
call fcn.100292de
push ebx
push 1
lea ecx, [ebp - 0x2f0]
call fcn.1000d3a5
push ebx
push 1
lea ecx, [ebp - 0x314]
call fcn.1000d3a5
lea ecx, [ebp - 0x1a8]
call fcn.10029393
lea ecx, [ebp - 0x198]
call fcn.1002940e
lea ecx, [ebp + 8]
call fcn.10029393
mov ecx, dword [ebp - 0xc]
pop edi
pop esi
mov dword fs:[0], ecx
pop ebx
mov esp, ebp
pop ebp
ret