Function at 0x1000d490
Capabilities:
Access peb ldr_data
Check for peb beingdebugged flag
Encode data using xor
Get graphical window text

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
sub esp, 0x4a4
mov dword [ebp - 0x54], ecx
mov dword [ebp - 0x1c], esp
mov dword [ebp - 0x10], 0xffffffff
lea eax, [ebp - 0x18]
mov dword [ebp - 0x14], 0x10015710
mov ecx, dword fs:[0]
mov dword [ebp - 0x18], ecx
mov dword fs:[0], eax
mov dword [ebp - 0x10], 0
lea ecx, [ebp - 0x2b0]
call fcn.1000e510
mov ecx, esp
sub esp, 0x1c
mov esi, esp
mov eax, dword [ebp - 0x54]
mov edx, dword [eax + 0x18]
xorps xmm0, xmm0
movups xmmword [esi], xmm0
mov dword [esi + 0x14], 0
mov dword [esi + 0x10], 0
mov edi, dword [eax + 0x10]
cmp dword [eax + 0x14], 0x10
mov ebx, eax
jb 0x1000d503
mov ebx, dword [eax]
test edi, edi
js 0x1000e3e4
cmp edi, 0xf
mov dword [ebp - 0x20], ecx
ja 0x1000d528
mov dword [esi + 0x10], edi
mov dword [esi + 0x14], 0xf
movups xmm0, xmmword [ebx]
movups xmmword [esi], xmm0
jmp 0x1000d5ac
mov dword [ebp - 0x30], ebx
mov dword [ebp - 0x28], edx
mov dword [ebp - 0x24], esi
mov dword [esi + 0x14], 0xf
mov dword [ebp - 0x34], edi
mov eax, edi
or eax, 0xf
cmp eax, 0x17
mov ecx, 0x16
cmovae ecx, eax
cmp ecx, 0xfff
mov dword [ebp - 0x4c], ecx
jb 0x1000d576
lea eax, [ecx + 0x24]
mov dword [ebp - 0x10], 1
push eax
call fcn.10015b56
add esp, 4
mov ecx, eax
add eax, 0x23
and eax, 0xffffffe0
mov dword [eax - 4], ecx
jmp 0x1000d589
lea eax, [ecx + 1]
mov dword [ebp - 0x10], 1
push eax
call fcn.10015b56
add esp, 4
mov esi, dword [ebp - 0x24]
mov ecx, dword [ebp - 0x34]
mov edx, dword [ebp - 0x30]
mov dword [esi], eax
mov dword [esi + 0x10], ecx
mov edi, dword [ebp - 0x4c]
mov dword [esi + 0x14], edi
inc ecx
push ecx
push edx
push eax
call sub.VCRUNTIME140.dll_memcpy
add esp, 0xc
mov edx, dword [ebp - 0x28]
mov dword [esi + 0x18], edx
mov dword [ebp - 0x10], 1
lea ecx, [ebp - 0x2b0]
call section..text
mov esp, dword [ebp - 0x20]
test al, al
je 0x1000e381
xorps xmm0, xmm0
movups xmmword [ebp - 0x64], xmm0
lea eax, [ebp - 0x60]
mov dword [ebp - 0x10], 2
lea ecx, [ebp - 0x2b0]
push eax
call fcn.10001390
test al, al
je 0x1000da23
mov eax, dword [ebp - 0x64]
mov ecx, dword [ebp - 0x60]
mov edx, dword [ebp - 0x5c]
sub edx, ecx
cmp edx, eax
jbe 0x1000e3f6
movzx ebx, byte [ecx + eax]
mov byte [ebp - 0x4c], bl
lea esi, [eax + 1]
mov dword [ebp - 0x64], esi
cmp edx, esi
jbe 0x1000e3fb
movzx ecx, byte [ecx + eax + 1]
mov byte [ebp - 0x29], cl
add eax, 2
mov dword [ebp - 0x64], eax
xorps xmm0, xmm0
movups xmmword [ebp - 0x44], xmm0
mov dword [ebp - 0x70], 5
mov dword [ebp - 0x6c], 0xf
movaps xmm0, xmmword [str.erro]
movups xmmword [ebp - 0x80], xmm0
mov byte [ebp - 0x7c], 0x72
mov dword [ebp - 0x68], 0
mov eax, dword fs:[0x18]
mov eax, dword [eax + 0x30]
mov eax, dword [eax + 0xc]
mov eax, dword [eax + 0x14]
mov eax, dword [eax]
mov eax, dword [eax]
mov ebx, dword [eax + 0x10]
mov byte [ebp - 0x4b0], 0x56
mov dword [ebp - 0x4ac], 5
mov dword [ebp - 0x4a8], 0x79796c15
mov byte [ebp - 0x4a4], 0x56
xor esi, esi
lea edi, [ebp - 0x4b0]
nop word cs:[eax + eax]
movsx eax, byte [ebp + esi - 0x4a8]
mov ecx, edi
push eax
call fcn.1000afe0
mov byte [ebp + esi - 0x4a8], al
inc esi
cmp esi, dword [ebp - 0x4ac]
jb 0x1000d6a0
movaps xmm0, xmmword [0x100170d0]
movups xmmword [ebp - 0x284], xmm0
movaps xmm0, xmmword [0x100170e0]
movups xmmword [ebp - 0x274], xmm0
xor edi, edi
lea esi, [ebp - 0x284]
nop word cs:[eax + eax]
mov ecx, esi
push dword [ebp - 0x284]
push dword [ebp + edi*4 - 0x278]
call fcn.10008fc0
mov dword [ebp + edi*4 - 0x278], eax
inc edi
cmp edi, dword [ebp - 0x280]
jb 0x1000d6f0
mov eax, dword [ebp - 0x27c]
mov eax, dword [ebp + eax*4 - 0x278]
mov dword [ebp - 0x24], ebx
mov edi, dword [eax + ebx]
movaps xmm0, xmmword [0x100170f0]
movups xmmword [ebp - 0x284], xmm0
mov dword [ebp - 0x274], 0x6573b858
xor ebx, ebx
lea esi, [ebp - 0x284]
nop word [eax + eax]
mov ecx, esi
push dword [ebp - 0x284]
push dword [ebp + ebx*4 - 0x278]
call fcn.10008fc0
mov dword [ebp + ebx*4 - 0x278], eax
inc ebx
cmp ebx, dword [ebp - 0x280]
jb 0x1000d750
mov ebx, dword [ebp - 0x24]
add edi, ebx
mov eax, dword [ebp - 0x27c]
mov eax, dword [ebp + eax*4 - 0x278]
mov eax, dword [eax + edi]
mov dword [ebp - 0x28], eax
movaps xmm0, xmmword [0x10017100]
movups xmmword [ebp - 0x284], xmm0
mov dword [ebp - 0x274], 0x7580be35
mov dword [ebp - 0x270], 0x7ada6ad4
xor edi, edi
lea esi, [ebp - 0x284]
nop word cs:[eax + eax]
mov ecx, esi
push dword [ebp - 0x284]
push dword [ebp + edi*4 - 0x278]
call fcn.10008fc0
mov dword [ebp + edi*4 - 0x278], eax
inc edi
cmp edi, dword [ebp - 0x280]
jb 0x1000d7c0
mov ecx, dword [ebp - 0x28]
add ecx, ebx
mov eax, dword [ebp - 0x27c]
mov eax, dword [ebp + eax*4 - 0x278]
mov dword [ebp - 0x28], ecx
mov eax, dword [eax + ecx]
mov dword [ebp - 0x30], eax
movaps xmm0, xmmword [0x10017110]
movups xmmword [ebp - 0x284], xmm0
mov dword [ebp - 0x274], 0x458dc411
mov dword [ebp - 0x270], 0x4ae770b0
mov dword [ebp - 0x26c], 0x50411d4f
xor edi, edi
lea esi, [ebp - 0x284]
nop word cs:[eax + eax]
mov ecx, esi
push dword [ebp - 0x284]
push dword [ebp + edi*4 - 0x278]
call fcn.10008fc0
mov dword [ebp + edi*4 - 0x278], eax
inc edi
cmp edi, dword [ebp - 0x280]
jb 0x1000d840
mov eax, dword [ebp - 0x27c]
mov eax, dword [ebp + eax*4 - 0x278]
mov ecx, dword [ebp - 0x28]
mov eax, dword [eax + ecx]
mov dword [ebp - 0x48], eax
movaps xmm0, xmmword [0x10017120]
movups xmmword [ebp - 0x284], xmm0
movaps xmm0, xmmword [0x10017130]
movups xmmword [ebp - 0x274], xmm0
xor esi, esi
lea edi, [ebp - 0x284]
nop
mov ecx, edi
push dword [ebp - 0x284]
push dword [ebp + esi*4 - 0x278]
call fcn.10008fc0
mov dword [ebp + esi*4 - 0x278], eax
inc esi
cmp esi, dword [ebp - 0x280]
jb 0x1000d8a0
xor ecx, ecx
add dword [ebp - 0x30], ebx
je 0x1000da7c
mov esi, dword [ebp - 0x48]
add esi, ebx
je 0x1000da7c
mov eax, dword [ebp - 0x27c]
mov eax, dword [ebp + eax*4 - 0x278]
mov edx, dword [ebp - 0x28]
mov eax, dword [eax + edx]
add eax, ebx
je 0x1000da7c
mov dword [ebp - 0x50], eax
mov dword [ebp - 0x48], esi
xor edi, edi
jmp 0x1000d912
cmp eax, 0xa9d3be22
mov esi, dword [ebp - 0x24]
je 0x1000da63
mov edi, dword [ebp - 0x20]
inc edi
movaps xmm0, xmmword [0x10017140]
movups xmmword [ebp - 0x284], xmm0
mov dword [ebp - 0x274], 0x65a7cfcb
xor esi, esi
lea ebx, [ebp - 0x284]
nop word cs:[eax + eax]
mov ecx, ebx
push dword [ebp - 0x284]
push dword [ebp + esi*4 - 0x278]
call fcn.10008fc0
mov dword [ebp + esi*4 - 0x278], eax
inc esi
cmp esi, dword [ebp - 0x280]
jb 0x1000d940
mov eax, dword [ebp - 0x27c]
mov eax, dword [ebp + eax*4 - 0x278]
mov ecx, dword [ebp - 0x28]
cmp edi, dword [eax + ecx]
jae 0x1000da5f
mov eax, dword [ebp - 0x30]
mov dword [ebp - 0x20], edi
mov edi, dword [eax + edi*4]
mov esi, dword [ebp - 0x24]
add edi, esi
push edi
call sub.api_ms_win_crt_string_l1_1_0.dll_strlen
add esp, 4
cmp eax, 0xffffffff
je 0x1000d90e
lea ecx, [eax + 1]
mov edx, ecx
and edx, 3
mov dword [ebp - 0x34], edx
cmp eax, 3
jae 0x1000d9c0
mov eax, 0x1d
xor edx, edx
jmp 0x1000d9fe
and ecx, 0xfffffffc
lea esi, [edi + 3]
mov eax, 0x1d
xor edx, edx
nop dword [eax]
movsx ebx, byte [esi + edx - 3]
xor ebx, eax
lea eax, [ebx + ebx*4]
movsx ebx, byte [esi + edx - 2]
xor ebx, eax
lea eax, [ebx + ebx*4]
movsx ebx, byte [esi + edx - 1]
xor ebx, eax
lea eax, [ebx + ebx*4]
movsx ebx, byte [esi + edx]
xor ebx, eax
lea eax, [ebx + ebx*4]
add edx, 4
cmp ecx, edx
jne 0x1000d9d0
mov esi, dword [ebp - 0x34]
test esi, esi
je 0x1000d900
add edi, edx
xor ecx, ecx
nop dword [eax]
movsx edx, byte [edi + ecx]
xor edx, eax
lea eax, [edx + edx*4]
inc ecx
cmp esi, ecx
jne 0x1000da10
jmp 0x1000d900
mov ecx, dword [ebp - 0x60]
test ecx, ecx
je 0x1000e381
mov eax, dword [ebp - 0x58]
sub eax, ecx
cmp eax, 0x1000
jb 0x1000da50
mov edx, dword [ecx - 4]
add ecx, 0xfffffffc
sub ecx, edx
cmp ecx, 0x20
jae 0x1000e3f0
add eax, 0x23
mov ecx, edx
push eax
push ecx
call fcn.10015b8b
add esp, 8
jmp 0x1000e381
xor ecx, ecx
jmp 0x1000da7c
mov eax, dword [ebp - 0x50]
mov ecx, dword [ebp - 0x20]
movzx eax, word [eax + ecx*2]
mov ecx, dword [ebp - 0x48]
add esi, dword [ecx + eax*4]
mov dword [ebp - 0x10], 3
mov ecx, esi
mov dword [ebp - 0x10], 3
sub esp, 0x20
xorps xmm0, xmm0
movups xmmword [esp + 0x10], xmm0
lea eax, [ebp - 0x68]
mov dword [esp + 0xc], eax
lea eax, [ebp - 0x4a8]
mov dword [esp], eax
mov dword [esp + 8], 0
mov dword [esp + 4], 0
call ecx
test al, al
lea eax, [ebp - 0x284]
je 0x1000daec
push dword [ebp - 0x68]
push eax
call fcn.1000e8b0
add esp, 8
movsd xmm0, qword [ebp - 0x274]
movsd qword [ebp - 0x70], xmm0
movups xmm0, xmmword [ebp - 0x284]
movups xmmword [ebp - 0x80], xmm0
mov edx, dword [ebp - 0x70]
cmp dword [ebp - 0x6c], 0x10
jb 0x1000db13
mov esi, dword [ebp - 0x80]
jmp 0x1000db16
mov dword [ebp - 0x24], esp
push eax
sub esp, 0x14
mov ecx, esp
xorps xmm0, xmm0
movups xmmword [ecx], xmm0
mov dword [ecx + 0x14], 0
mov dword [ecx + 0x10], 0
lea esi, [ebp - 0x80]
mov edx, 5
jmp 0x1000db42
lea esi, [ebp - 0x80]
mov eax, esp
push eax
sub esp, 0x14
mov ecx, esp
xorps xmm0, xmm0
movups xmmword [ecx], xmm0
mov dword [ecx + 0x14], 0
mov dword [ecx + 0x10], 0
test edx, edx
js 0x1000e400
cmp edx, 0xf
mov dword [ebp - 0x24], eax
ja 0x1000db59
mov dword [ecx + 0x10], edx
mov dword [ecx + 0x14], 0xf
movups xmm0, xmmword [esi]
movups xmmword [ecx], xmm0
mov dword [ebp - 0x20], ecx
mov eax, ecx
jmp 0x1000dbd6
mov dword [ebp - 0x34], esi
mov dword [ebp - 0x20], ecx
mov dword [ecx + 0x14], 0xf
mov dword [ebp - 0x28], edx
mov eax, edx
or eax, 0xf
cmp eax, 0x17
mov ecx, 0x16
cmovae ecx, eax
cmp ecx, 0xfff
mov dword [ebp - 0x30], ecx
jb 0x1000db9d
lea eax, [ecx + 0x24]
push eax
call fcn.10015b56
add esp, 4
mov ecx, eax
add eax, 0x23
and eax, 0xffffffe0
mov dword [eax - 4], ecx
jmp 0x1000dba9
lea eax, [ecx + 1]
push eax
call fcn.10015b56
add esp, 4
mov esi, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x28]
mov edx, dword [ebp - 0x34]
mov dword [esi], eax
mov dword [esi + 0x10], ecx
mov edi, dword [ebp - 0x30]
mov dword [esi + 0x14], edi
inc ecx
push ecx
push edx
push eax
call sub.VCRUNTIME140.dll_memcpy
add esp, 0xc
cmp dword [esi + 0x14], 0x10
mov eax, esi
jb 0x1000dbd3
mov eax, dword [esi]
mov edx, dword [esi + 0x10]
mov dword [ebp - 0x10], 7
lea ecx, [ebp - 0x44]
push edx
push eax
call fcn.1000e9c0
mov ecx, dword [ebp - 0x20]
mov eax, dword [ecx + 0x14]
cmp eax, 0x10
jb 0x1000dc21
mov ecx, dword [ecx]
lea esi, [eax + 1]
cmp esi, 0x1000
jb 0x1000dc17
mov edx, dword [ecx - 4]
add ecx, 0xfffffffc
sub ecx, edx
cmp ecx, 0x20
jae 0x1000e3f0
add eax, 0x24
mov esi, eax
mov ecx, edx
push esi
push ecx
call fcn.10015b8b
add esp, 8
mov esp, dword [ebp - 0x24]
mov dword [ebp - 0x84], 0x100
mov eax, dword fs:[0x18]
mov eax, dword [eax + 0x30]
mov eax, dword [eax + 0xc]
mov eax, dword [eax + 0x14]
mov eax, dword [eax]
mov eax, dword [eax]
mov eax, dword [eax + 0x10]
mov dword [ebp - 0x24], eax
movaps xmm0, xmmword [0x100170d0]
movups xmmword [ebp - 0x284], xmm0
movaps xmm0, xmmword [0x100170e0]
movups xmmword [ebp - 0x274], xmm0
xor edi, edi
lea esi, [ebp - 0x284]
nop dword [eax + eax]
mov ecx, esi
push dword [ebp - 0x284]
push dword [ebp + edi*4 - 0x278]
call fcn.10008fc0
mov dword [ebp + edi*4 - 0x278], eax
inc edi
cmp edi, dword [ebp - 0x280]
jb 0x1000dc70
mov eax, dword [ebp - 0x27c]
mov eax, dword [ebp + eax*4 - 0x278]
mov ecx, dword [ebp - 0x24]
mov edi, dword [eax + ecx]
movaps xmm0, xmmword [0x100170f0]
movups xmmword [ebp - 0x284], xmm0
mov dword [ebp - 0x274], 0x6573b858
xor ebx, ebx
lea esi, [ebp - 0x284]
nop word [eax + eax]
mov ecx, esi
push dword [ebp - 0x284]
push dword [ebp + ebx*4 - 0x278]
call fcn.10008fc0
mov dword [ebp + ebx*4 - 0x278], eax
inc ebx
cmp ebx, dword [ebp - 0x280]
jb 0x1000dcd0
add edi, dword [ebp - 0x24]
mov eax, dword [ebp - 0x27c]
mov eax, dword [ebp + eax*4 - 0x278]
mov ebx, dword [eax + edi]
movaps xmm0, xmmword [0x10017100]
movups xmmword [ebp - 0x284], xmm0
mov dword [ebp - 0x274], 0x7580be35
mov dword [ebp - 0x270], 0x7ada6ad4
xor edi, edi
lea esi, [ebp - 0x284]
nop word cs:[eax + eax]
mov ecx, esi
push dword [ebp - 0x284]
push dword [ebp + edi*4 - 0x278]
call fcn.10008fc0
mov dword [ebp + edi*4 - 0x278], eax
inc edi
cmp edi, dword [ebp - 0x280]
jb 0x1000dd40
add ebx, dword [ebp - 0x24]
mov eax, dword [ebp - 0x27c]
mov eax, dword [ebp + eax*4 - 0x278]
mov dword [ebp - 0x28], ebx
mov eax, dword [eax + ebx]
mov dword [ebp - 0x30], eax
movaps xmm0, xmmword [0x10017110]
movups xmmword [ebp - 0x284], xmm0
mov dword [ebp - 0x274], 0x458dc411
mov dword [ebp - 0x270], 0x4ae770b0
mov dword [ebp - 0x26c], 0x50411d4f
xor edi, edi
lea esi, [ebp - 0x284]
nop word cs:[eax + eax]
mov ecx, esi
push dword [ebp - 0x284]
push dword [ebp + edi*4 - 0x278]
call fcn.10008fc0
mov dword [ebp + edi*4 - 0x278], eax
inc edi
cmp edi, dword [ebp - 0x280]
jb 0x1000ddc0
mov eax, dword [ebp - 0x27c]
mov eax, dword [ebp + eax*4 - 0x278]
mov ecx, dword [ebp - 0x28]
mov ebx, dword [eax + ecx]
movaps xmm0, xmmword [0x10017120]
movups xmmword [ebp - 0x284], xmm0
movaps xmm0, xmmword [0x10017130]
movups xmmword [ebp - 0x274], xmm0
xor esi, esi
lea edi, [ebp - 0x284]
nop dword [eax + eax]
mov ecx, edi
push dword [ebp - 0x284]
push dword [ebp + esi*4 - 0x278]
call fcn.10008fc0
mov dword [ebp + esi*4 - 0x278], eax
inc esi
cmp esi, dword [ebp - 0x280]
jb 0x1000de20
xor eax, eax
mov edx, dword [ebp - 0x24]
add dword [ebp - 0x30], edx
je 0x1000dfa3
add ebx, edx
je 0x1000dfa3
mov ecx, dword [ebp - 0x27c]
mov ecx, dword [ebp + ecx*4 - 0x278]
mov esi, dword [ebp - 0x28]
mov ecx, dword [ecx + esi]
add ecx, edx
je 0x1000dfa3
mov dword [ebp - 0x50], ecx
mov dword [ebp - 0x48], ebx
xor ebx, ebx
jmp 0x1000de8f
cmp eax, 0x70dc5270
je 0x1000df87
mov ebx, dword [ebp - 0x20]
inc ebx
movaps xmm0, xmmword [0x10017140]
movups xmmword [ebp - 0x284], xmm0
mov dword [ebp - 0x274], 0x65a7cfcb
xor esi, esi
lea edi, [ebp - 0x284]
nop
mov ecx, edi
push dword [ebp - 0x284]
push dword [ebp + esi*4 - 0x278]
call fcn.10008fc0
mov dword [ebp + esi*4 - 0x278], eax
inc esi
cmp esi, dword [ebp - 0x280]
jb 0x1000deb0
mov eax, dword [ebp - 0x27c]
mov eax, dword [ebp + eax*4 - 0x278]
mov ecx, dword [ebp - 0x28]
cmp ebx, dword [eax + ecx]
jae 0x1000df83
mov eax, dword [ebp - 0x30]
mov dword [ebp - 0x20], ebx
mov ebx, dword [eax + ebx*4]
add ebx, dword [ebp - 0x24]
push ebx
call sub.api_ms_win_crt_string_l1_1_0.dll_strlen
add esp, 4
cmp eax, 0xffffffff
je 0x1000de8b
lea ecx, [eax + 1]
mov edx, ecx
and edx, 3
mov dword [ebp - 0x34], edx
cmp eax, 3
jae 0x1000df20
mov eax, 0x1d
xor edx, edx
jmp 0x1000df5e
and ecx, 0xfffffffc
lea esi, [ebx + 3]
mov eax, 0x1d
xor edx, edx
nop dword [eax]
movsx edi, byte [esi + edx - 3]
xor edi, eax
lea eax, [edi + edi*4]
movsx edi, byte [esi + edx - 2]
xor edi, eax
lea eax, [edi + edi*4]
movsx edi, byte [esi + edx - 1]
xor edi, eax
lea eax, [edi + edi*4]
movsx edi, byte [esi + edx]
xor edi, eax
lea eax, [edi + edi*4]
add edx, 4
cmp ecx, edx
jne 0x1000df30
mov esi, dword [ebp - 0x34]
test esi, esi
je 0x1000de80
add ebx, edx
xor ecx, ecx
nop dword [eax]
movsx edx, byte [ebx + ecx]
xor edx, eax
lea eax, [edx + edx*4]
inc ecx
cmp esi, ecx
jne 0x1000df70
jmp 0x1000de80
xor eax, eax
jmp 0x1000dfa3
mov eax, dword [ebp - 0x50]
mov ecx, dword [ebp - 0x20]
movzx eax, word [eax + ecx*2]
mov ecx, dword [ebp - 0x24]
mov edx, dword [ebp - 0x48]
add ecx, dword [edx + eax*4]
mov dword [ebp - 0x10], 3
mov eax, ecx
mov dword [ebp - 0x10], 3
lea ecx, [ebp - 0x84]
push ecx
lea ecx, [ebp - 0x4b0]
push ecx
call eax
mov dword [ebp - 0x24], esp
push eax
sub esp, 0x14
mov edi, esp
xorps xmm0, xmm0
movups xmmword [edi], xmm0
mov dword [edi + 0x14], 0
mov dword [edi + 0x10], 0
lea esi, [ebp - 0x4b0]
push esi
call sub.api_ms_win_crt_string_l1_1_0.dll_wcslen
add esp, 4
mov dword [ebp - 0x20], edi
mov ecx, edi
push eax
push esi
call fcn.1000abb0
mov ecx, dword [ebp - 0x20]
mov eax, dword [ecx + 0x10]
add eax, eax
cmp dword [ecx + 0x14], 8
mov edx, ecx
jb 0x1000e004
mov edx, dword [ecx]
mov dword [ebp - 0x10], 6
lea ecx, [ebp - 0x44]
push eax
push edx
call fcn.1000e9c0
mov ecx, dword [ebp - 0x20]
mov eax, dword [ecx + 0x14]
cmp eax, 8
jb 0x1000e054
mov ecx, dword [ecx]
lea esi, [eax + eax]
add esi, 2
cmp esi, 0x1000
jb 0x1000e04a
mov edx, dword [ecx - 4]
add ecx, 0xfffffffc
sub ecx, edx
cmp ecx, 0x20
jae 0x1000e3f0
add eax, eax
add eax, 0x25
mov esi, eax
mov ecx, edx
push esi
push ecx
call fcn.10015b8b
add esp, 8
mov esp, dword [ebp - 0x24]
push eax
sub esp, 0x14
mov eax, esp
xorps xmm0, xmm0
movups xmmword [eax], xmm0
mov dword [eax + 0x10], 0
mov dword [ebp - 0x20], eax
mov dword [eax + 0x14], 0xf
mov dword [ebp - 0x10], 3
push 0x20
call fcn.10015b56
add esp, 4
mov ecx, dword [ebp - 0x20]
mov dword [ecx], eax
mov dword [ecx + 0x10], 0x12
mov dword [ecx + 0x14], 0x1f
movups xmm0, xmmword [str.sportsfreund___new]
movups xmmword [eax], xmm0
mov word [eax + 0x10], 0x7765
mov byte [eax + 0x12], 0
mov dword [ebp - 0x10], 5
lea ecx, [ebp - 0x44]
push 0x12
mov dword [ebp - 0x28], eax
push eax
call fcn.1000e9c0
push 0x20
push dword [ebp - 0x28]
call fcn.10015b8b
add esp, 8
mov esp, dword [ebp - 0x24]
lea ecx, [ebp - 0x40]
mov byte [ebp - 0x284], 1
mov eax, dword [ebp - 0x3c]
cmp eax, dword [ebp - 0x38]
lea edx, [ebp - 0x284]
je 0x1000e0f5
mov byte [eax], 1
mov eax, dword [ebp - 0x3c]
inc eax
mov dword [ebp - 0x3c], eax
jmp 0x1000e10f
mov dword [ebp - 0x10], 3
push edx
push eax
call fcn.1000c030
mov eax, dword [ebp - 0x3c]
lea edx, [ebp - 0x284]
lea ecx, [ebp - 0x40]
mov byte [ebp - 0x284], 0
cmp eax, dword [ebp - 0x38]
je 0x1000e127
mov byte [eax], 0
mov eax, dword [ebp - 0x3c]
inc eax
mov dword [ebp - 0x3c], eax
jmp 0x1000e141
mov dword [ebp - 0x10], 3
push edx
push eax
call fcn.1000c030
mov eax, dword [ebp - 0x3c]
lea edx, [ebp - 0x284]
lea ecx, [ebp - 0x40]
mov byte [ebp - 0x284], 0
cmp eax, dword [ebp - 0x38]
je 0x1000e159
mov byte [eax], 0
mov eax, dword [ebp - 0x3c]
inc eax
mov dword [ebp - 0x3c], eax
jmp 0x1000e173
mov dword [ebp - 0x10], 3
push edx
push eax
call fcn.1000c030
mov eax, dword [ebp - 0x3c]
lea edx, [ebp - 0x284]
lea ecx, [ebp - 0x40]
mov byte [ebp - 0x284], 0
cmp eax, dword [ebp - 0x38]
je 0x1000e187
mov byte [eax], 0
inc dword [ebp - 0x3c]
jmp 0x1000e195
mov dword [ebp - 0x10], 3
push edx
push eax
call fcn.1000c030
cmp byte [ebp - 0x4c], 0
je 0x1000e1c9
mov byte [ebp - 0x284], 0
mov eax, dword [ebp - 0x3c]
cmp eax, dword [ebp - 0x38]
je 0x1000e1b2
mov byte [eax], 0
inc dword [ebp - 0x3c]
jmp 0x1000e1c9
mov dword [ebp - 0x10], 3
lea ecx, [ebp - 0x40]
lea edx, [ebp - 0x284]
push edx
push eax
call fcn.1000c030
cmp byte [ebp - 0x29], 0
lea esi, [ebp - 0x284]
je 0x1000e2ad
mov dword [ebp - 0x24], esp
push eax
sub esp, 0x14
mov edi, esp
call dword [sym.imp.USER32.dll_GetForegroundWindow]
test eax, eax
mov dword [ebp - 0x20], edi
je 0x1000e23d
push 0x100
push esi
push eax
call dword [sym.imp.USER32.dll_GetWindowTextW]
xorps xmm0, xmm0
movups xmmword [edi], xmm0
mov dword [edi + 0x14], 0
mov dword [edi + 0x10], 0
push esi
call sub.api_ms_win_crt_string_l1_1_0.dll_wcslen
add esp, 4
mov dword [ebp - 0x10], 3
mov ecx, edi
push eax
push esi
call fcn.1000abb0
mov ecx, dword [ebp - 0x20]
mov eax, dword [ecx + 0x10]
cmp dword [ecx + 0x14], 8
mov edi, ecx
jb 0x1000e239
mov edi, dword [ecx]
add eax, eax
jmp 0x1000e25a
xorps xmm0, xmm0
movups xmmword [edi], xmm0
mov dword [edi + 0x10], 0
mov dword [edi + 0x14], 7
mov dword [ebp - 0x10], 4
xor eax, eax
mov dword [ebp - 0x10], 4
lea ecx, [ebp - 0x44]
push eax
push edi
call fcn.1000e9c0
mov ecx, dword [ebp - 0x20]
mov eax, dword [ecx + 0x14]
cmp eax, 8
jb 0x1000e2aa
mov ecx, dword [ecx]
lea esi, [eax + eax]
add esi, 2
cmp esi, 0x1000
jb 0x1000e2a0
mov edx, dword [ecx - 4]
add ecx, 0xfffffffc
sub ecx, edx
cmp ecx, 0x20
jae 0x1000e3f0
add eax, eax
add eax, 0x25
mov esi, eax
mov ecx, edx
push esi
push ecx
call fcn.10015b8b
add esp, 8
mov esp, dword [ebp - 0x24]
mov dword [ebp - 0x10], 3
lea ecx, [ebp - 0x2b0]
lea eax, [ebp - 0x40]
push eax
call fcn.100011f0
movzx eax, byte [ebp - 0x29]
movzx ecx, byte [ebp - 0x4c]
push eax
push ecx
lea eax, [ebp - 0x2b0]
push eax
call fcn.10004660
add esp, 0xc
mov eax, dword [ebp - 0x6c]
cmp eax, 0x10
jb 0x1000e314
mov ecx, dword [ebp - 0x80]
lea esi, [eax + 1]
cmp esi, 0x1000
jb 0x1000e30a
mov edx, dword [ecx - 4]
add ecx, 0xfffffffc
sub ecx, edx
cmp ecx, 0x20
jae 0x1000e3f0
add eax, 0x24
mov esi, eax
mov ecx, edx
push esi
push ecx
call fcn.10015b8b
add esp, 8
mov ecx, dword [ebp - 0x40]
test ecx, ecx
je 0x1000e347
mov eax, dword [ebp - 0x38]
sub eax, ecx
cmp eax, 0x1000
jb 0x1000e33d
mov edx, dword [ecx - 4]
add ecx, 0xfffffffc
sub ecx, edx
cmp ecx, 0x20
jae 0x1000e3f0
add eax, 0x23
mov ecx, edx
push eax
push ecx
call fcn.10015b8b
add esp, 8
mov ecx, dword [ebp - 0x60]
test ecx, ecx
je 0x1000e381
mov eax, dword [ebp - 0x58]
sub eax, ecx
cmp eax, 0x1000
jb 0x1000e370
mov edx, dword [ecx - 4]
add ecx, 0xfffffffc
sub ecx, edx
cmp ecx, 0x20
jae 0x1000e3f0
add eax, 0x23
mov ecx, edx
push eax
push ecx
call fcn.10015b8b
add esp, 8
mov dword [ebp - 0x60], 0
lea ecx, [ebp - 0x2b0]
call fcn.1000e690
mov edi, dword [ebp - 0x54]
mov eax, dword [edi + 0x14]
cmp eax, 0x10
jb 0x1000e3c2
mov ecx, dword [edi]
lea esi, [eax + 1]
cmp esi, 0x1000
jb 0x1000e3b8
mov edx, dword [ecx - 4]
add ecx, 0xfffffffc
sub ecx, edx
cmp ecx, 0x20
jae 0x1000e3f0
add eax, 0x24
mov esi, eax
mov ecx, edx
push esi
push ecx
call fcn.10015b8b
add esp, 8
mov dword [edi + 0x10], 0
mov dword [edi + 0x14], 0xf
mov byte [edi], 0
mov eax, dword [ebp - 0x18]
mov dword fs:[0], eax
lea esp, [ebp - 0xc]
pop esi
pop edi
pop ebx
pop ebp
ret
mov dword [ebp - 0x10], 1
call fcn.10008fe0
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
call fcn.1000c160
call fcn.1000c160
call fcn.10008fe0
nop word cs:[eax + eax]
push ebp
sub esp, 0x20
add ebp, 0xc
lea ecx, [ebp - 0x80]
call fcn.10001190
lea ecx, [ebp - 0x44]
call fcn.10001ca0
add esp, 0x20
pop ebp
ret