Function at 0x1000c7c0
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push 0xffffffffffffffff
push 0x10157cd9
mov eax, dword fs:[0]
push eax
sub esp, 0xc88
mov eax, dword [0x101ad3b4]
xor eax, esp
mov dword [esp + 0xc84], eax
push ebx
push ebp
push esi
push edi
mov eax, dword [0x101ad3b4]
xor eax, esp
push eax
lea eax, [esp + 0xc9c]
mov dword fs:[0], eax
mov eax, dword [esp + 0xcb4]
mov edi, 1
xor ebx, ebx
cmp dword [esp + 0xcb8], ebx
mov esi, ecx
mov dword [esp + 0x38], eax
mov dword [esp + 0x5c], edi
lea ebp, [edi + 1]
je 0x1000c823
mov dword [esp + 0x5c], ebp
mov ecx, eax
mov dword [esp + 0x28], ecx
lea ecx, [esp + 0x48]
mov byte [esp + 0x490], 0x65
mov byte [esp + 0x491], 0x6d
mov byte [esp + 0x492], 0x69
mov byte [esp + 0x493], 0x74
mov byte [esp + 0x494], bl
mov byte [esp + 0x488], 0x25
mov byte [esp + 0x489], 0x30
mov byte [esp + 0x48a], 0x32
mov byte [esp + 0x48b], 0x78
mov byte [esp + 0x48c], bl
call fcn.100e7e56
mov dword [esp + 0xca4], ebx
push ebx
lea edx, [esp + 0x4c]
push edx
push 0x101615a8
push esi
call fcn.10048510
add esp, 0x10
mov dword [esp + 0x20], eax
mov dword [esp + 0x2c], ebx
mov dword [esp + 0x30], ebx
mov dword [esp + 0x34], ebx
mov byte [esp + 0xca4], 2
mov dword [esp + 0x3c], ebx
mov dword [esp + 0x40], ebx
mov dword [esp + 0x44], ebx
mov esi, 4
mov byte [esp + 0xca4], 4
mov cl, 0xe3
mov al, 0x6a
mov dl, 0x7a
mov byte [esp + 0x20b], cl
mov byte [esp + 0x21a], cl
mov cl, 0xf
mov byte [esp + 0x1f4], al
mov byte [esp + 0x1f5], 0x6d
mov byte [esp + 0x1f6], 0x70
mov byte [esp + 0x1f7], bl
mov word [esp + 0x1f8], bx
mov byte [esp + 0x1fa], 0xe9
mov byte [esp + 0x1fb], bl
mov dword [esp + 0x1fc], edi
mov dword [esp + 0x200], esi
mov byte [esp + 0x204], al
mov byte [esp + 0x205], 0x63
mov byte [esp + 0x206], 0x78
mov byte [esp + 0x207], dl
mov byte [esp + 0x208], bl
mov byte [esp + 0x209], bl
mov byte [esp + 0x20a], 0x67
mov dword [esp + 0x20c], ebp
mov dword [esp + 0x210], edi
mov byte [esp + 0x214], al
mov byte [esp + 0x215], 0x65
mov byte [esp + 0x216], 0x63
mov byte [esp + 0x217], 0x78
mov byte [esp + 0x218], dl
mov byte [esp + 0x219], bl
mov byte [esp + 0x21b], bl
mov dword [esp + 0x21c], edi
mov dword [esp + 0x220], edi
mov byte [esp + 0x224], al
mov byte [esp + 0x225], 0x65
mov byte [esp + 0x226], bl
mov word [esp + 0x227], bx
mov byte [esp + 0x229], bl
mov byte [esp + 0x22a], cl
mov byte [esp + 0x22b], 0x84
mov dword [esp + 0x22c], ebp
mov dword [esp + 0x230], esi
mov byte [esp + 0x234], al
mov byte [esp + 0x235], 0x6e
mov byte [esp + 0x245], dl
xor edx, edx
mov dword [esp + 0x14], edx
mov word [esp + 0x247], dx
movzx edx, dl
mov byte [esp + 0x249], dl
xor edx, edx
mov dword [esp + 0x14], edx
mov word [esp + 0x267], dx
movzx edx, dl
mov byte [esp + 0x269], dl
mov dl, 0x86
mov byte [esp + 0x27b], dl
mov byte [esp + 0x29b], dl
xor edx, edx
mov dword [esp + 0x14], edx
mov word [esp + 0x2a7], dx
movzx edx, dl
mov byte [esp + 0x2a9], dl
mov dl, 0x82
mov byte [esp + 0x236], 0x65
mov byte [esp + 0x237], bl
mov word [esp + 0x238], bx
mov byte [esp + 0x23a], cl
mov byte [esp + 0x23b], 0x85
mov dword [esp + 0x23c], ebp
mov dword [esp + 0x240], esi
mov byte [esp + 0x244], al
mov byte [esp + 0x246], bl
mov byte [esp + 0x24a], cl
mov byte [esp + 0x24b], 0x84
mov dword [esp + 0x24c], ebp
mov dword [esp + 0x250], esi
mov byte [esp + 0x254], al
mov byte [esp + 0x255], 0x6e
mov byte [esp + 0x256], 0x7a
mov byte [esp + 0x257], bl
mov word [esp + 0x258], bx
mov byte [esp + 0x25a], cl
mov byte [esp + 0x25b], 0x85
mov dword [esp + 0x25c], ebp
mov dword [esp + 0x260], esi
mov byte [esp + 0x264], al
mov byte [esp + 0x265], 0x61
mov byte [esp + 0x266], bl
mov byte [esp + 0x26a], cl
mov byte [esp + 0x26b], 0x87
mov dword [esp + 0x26c], ebp
mov dword [esp + 0x270], esi
mov byte [esp + 0x274], al
mov byte [esp + 0x275], 0x6e
mov byte [esp + 0x276], 0x61
mov byte [esp + 0x277], bl
mov word [esp + 0x278], bx
mov byte [esp + 0x27a], cl
mov dword [esp + 0x27c], ebp
mov dword [esp + 0x280], esi
mov byte [esp + 0x284], al
mov byte [esp + 0x285], 0x6e
mov byte [esp + 0x286], 0x62
mov byte [esp + 0x287], 0x65
mov byte [esp + 0x288], bl
mov byte [esp + 0x289], bl
mov byte [esp + 0x28a], cl
mov byte [esp + 0x28b], 0x87
mov dword [esp + 0x28c], ebp
mov dword [esp + 0x290], esi
mov byte [esp + 0x294], al
mov byte [esp + 0x295], 0x62
mov byte [esp + 0x296], 0x65
mov byte [esp + 0x297], bl
mov word [esp + 0x298], bx
mov byte [esp + 0x29a], cl
mov dword [esp + 0x29c], ebp
mov dword [esp + 0x2a0], esi
mov byte [esp + 0x2a4], al
mov byte [esp + 0x2a5], 0x62
mov byte [esp + 0x2a6], bl
mov byte [esp + 0x2aa], cl
mov byte [esp + 0x2ab], dl
mov dword [esp + 0x2ac], ebp
mov byte [esp + 0x2cb], dl
xor edx, edx
mov dword [esp + 0x14], edx
mov word [esp + 0x2e7], dx
movzx edx, dl
mov byte [esp + 0x2e9], dl
mov dl, 0x8e
mov byte [esp + 0x2fb], dl
mov byte [esp + 0x31b], dl
xor edx, edx
mov dword [esp + 0x14], edx
mov word [esp + 0x327], dx
movzx edx, dl
mov dword [esp + 0x2b0], esi
mov byte [esp + 0x2b4], al
mov byte [esp + 0x2b5], 0x6e
mov byte [esp + 0x2b6], 0x62
mov byte [esp + 0x2b7], bl
mov word [esp + 0x2b8], bx
mov byte [esp + 0x2ba], cl
mov byte [esp + 0x2bb], 0x83
mov dword [esp + 0x2bc], ebp
mov dword [esp + 0x2c0], esi
mov byte [esp + 0x2c4], al
mov byte [esp + 0x2c5], 0x6e
mov byte [esp + 0x2c6], 0x61
mov byte [esp + 0x2c7], 0x65
mov byte [esp + 0x2c8], bl
mov byte [esp + 0x2c9], bl
mov byte [esp + 0x2ca], cl
mov dword [esp + 0x2cc], ebp
mov dword [esp + 0x2d0], esi
mov byte [esp + 0x2d4], al
mov byte [esp + 0x2d5], 0x61
mov byte [esp + 0x2d6], 0x65
mov byte [esp + 0x2d7], bl
mov word [esp + 0x2d8], bx
mov byte [esp + 0x2da], cl
mov byte [esp + 0x2db], 0x83
mov dword [esp + 0x2dc], ebp
mov dword [esp + 0x2e0], esi
mov byte [esp + 0x2e4], al
mov byte [esp + 0x2e5], 0x67
mov byte [esp + 0x2e6], bl
mov byte [esp + 0x2ea], cl
mov byte [esp + 0x2eb], 0x8f
mov dword [esp + 0x2ec], ebp
mov dword [esp + 0x2f0], esi
mov byte [esp + 0x2f4], al
mov byte [esp + 0x2f5], 0x6e
mov byte [esp + 0x2f6], 0x67
mov byte [esp + 0x2f7], bl
mov word [esp + 0x2f8], bx
mov byte [esp + 0x2fa], cl
mov dword [esp + 0x2fc], ebp
mov dword [esp + 0x300], esi
mov byte [esp + 0x304], al
mov byte [esp + 0x305], 0x6e
mov byte [esp + 0x306], 0x6c
mov byte [esp + 0x307], 0x65
mov byte [esp + 0x308], bl
mov byte [esp + 0x309], bl
mov byte [esp + 0x30a], cl
mov byte [esp + 0x30b], 0x8f
mov dword [esp + 0x30c], ebp
mov dword [esp + 0x310], esi
mov byte [esp + 0x314], al
mov byte [esp + 0x315], 0x6c
mov byte [esp + 0x316], 0x65
mov byte [esp + 0x317], bl
mov word [esp + 0x318], bx
mov byte [esp + 0x31a], cl
mov dword [esp + 0x31c], ebp
mov dword [esp + 0x320], esi
mov byte [esp + 0x324], al
mov byte [esp + 0x325], 0x6c
mov byte [esp + 0x326], bl
mov byte [esp + 0x329], dl
mov byte [esp + 0x32a], cl
mov byte [esp + 0x32b], 0x8c
mov dword [esp + 0x32c], ebp
mov dl, 0x8d
mov byte [esp + 0x33b], dl
mov byte [esp + 0x35b], dl
xor edx, edx
mov dword [esp + 0x14], edx
mov word [esp + 0x367], dx
movzx edx, dl
mov byte [esp + 0x369], dl
xor edx, edx
mov dword [esp + 0x14], edx
mov word [esp + 0x387], dx
movzx edx, dl
mov byte [esp + 0x389], dl
xor edx, edx
mov dword [esp + 0x14], edx
mov word [esp + 0x3a7], dx
movzx edx, dl
mov dword [esp + 0x330], esi
mov byte [esp + 0x334], al
mov byte [esp + 0x335], 0x6e
mov byte [esp + 0x336], 0x6c
mov byte [esp + 0x337], bl
mov word [esp + 0x338], bx
mov byte [esp + 0x33a], cl
mov dword [esp + 0x33c], ebp
mov dword [esp + 0x340], esi
mov byte [esp + 0x344], al
mov byte [esp + 0x345], 0x6e
mov byte [esp + 0x346], 0x67
mov byte [esp + 0x347], 0x65
mov byte [esp + 0x348], bl
mov byte [esp + 0x349], bl
mov byte [esp + 0x34a], cl
mov byte [esp + 0x34b], 0x8c
mov dword [esp + 0x34c], ebp
mov dword [esp + 0x350], esi
mov byte [esp + 0x354], al
mov byte [esp + 0x355], 0x67
mov byte [esp + 0x356], 0x65
mov byte [esp + 0x357], bl
mov word [esp + 0x358], bx
mov byte [esp + 0x35a], cl
mov dword [esp + 0x35c], ebp
mov dword [esp + 0x360], esi
mov byte [esp + 0x364], al
mov byte [esp + 0x365], 0x73
mov byte [esp + 0x366], bl
mov byte [esp + 0x36a], cl
mov byte [esp + 0x36b], 0x88
mov dword [esp + 0x36c], ebp
mov dword [esp + 0x370], esi
mov byte [esp + 0x374], al
mov byte [esp + 0x375], 0x6e
mov byte [esp + 0x376], 0x73
mov byte [esp + 0x377], bl
mov word [esp + 0x378], bx
mov byte [esp + 0x37a], cl
mov byte [esp + 0x37b], 0x89
mov dword [esp + 0x37c], ebp
mov dword [esp + 0x380], esi
mov byte [esp + 0x384], al
mov byte [esp + 0x385], 0x63
mov byte [esp + 0x386], bl
mov byte [esp + 0x38a], cl
mov byte [esp + 0x38b], 0x82
mov dword [esp + 0x38c], ebp
mov dword [esp + 0x390], esi
mov byte [esp + 0x394], al
mov byte [esp + 0x395], 0x6e
mov byte [esp + 0x396], 0x63
mov byte [esp + 0x397], bl
mov word [esp + 0x398], bx
mov byte [esp + 0x39a], cl
mov byte [esp + 0x39b], 0x83
mov dword [esp + 0x39c], ebp
mov dword [esp + 0x3a0], esi
mov byte [esp + 0x3a4], al
mov byte [esp + 0x3a5], 0x6f
mov byte [esp + 0x3a6], bl
mov byte [esp + 0x3a9], dl
mov byte [esp + 0x3aa], cl
xor edx, edx
cmp dword [esp + 0x20], ebx
mov dword [esp + 0x14], edx
mov word [esp + 0x3c7], dx
movzx edx, dl
mov byte [esp + 0x3c9], dl
mov dl, 0x70
mov byte [esp + 0x3b4], al
mov byte [esp + 0x3c4], al
mov byte [esp + 0x3d4], al
mov byte [esp + 0x3e4], al
mov byte [esp + 0x3f4], al
mov eax, dword [esp + 0x4c]
mov byte [esp + 0x3ab], 0x80
mov dword [esp + 0x3ac], ebp
mov dword [esp + 0x3b0], esi
mov byte [esp + 0x3b5], 0x6e
mov byte [esp + 0x3b6], 0x6f
mov byte [esp + 0x3b7], bl
mov word [esp + 0x3b8], bx
mov byte [esp + 0x3ba], cl
mov byte [esp + 0x3bb], 0x81
mov dword [esp + 0x3bc], ebp
mov dword [esp + 0x3c0], esi
mov byte [esp + 0x3c5], 0x70
mov byte [esp + 0x3c6], bl
mov byte [esp + 0x3ca], cl
mov byte [esp + 0x3cb], 0x8a
mov dword [esp + 0x3cc], ebp
mov dword [esp + 0x3d0], esi
mov byte [esp + 0x3d5], 0x6e
mov byte [esp + 0x3d6], dl
mov byte [esp + 0x3d7], bl
mov word [esp + 0x3d8], bx
mov byte [esp + 0x3da], cl
mov byte [esp + 0x3db], 0x8b
mov dword [esp + 0x3dc], ebp
mov dword [esp + 0x3e0], esi
mov byte [esp + 0x3e5], dl
mov byte [esp + 0x3e6], 0x65
mov byte [esp + 0x3e7], bl
mov word [esp + 0x3e8], bx
mov byte [esp + 0x3ea], cl
mov byte [esp + 0x3eb], 0x8a
mov dword [esp + 0x3ec], ebp
mov dword [esp + 0x3f0], esi
mov byte [esp + 0x3f5], dl
mov byte [esp + 0x3f6], 0x6f
mov byte [esp + 0x3f7], bl
mov word [esp + 0x3f8], bx
mov byte [esp + 0x3fa], cl
mov byte [esp + 0x3fb], 0x8b
mov dword [esp + 0x3fc], ebp
mov dword [esp + 0x400], esi
mov dword [esp + 0x14], ebx
mov dword [esp + 0x1c], ebx
jle 0x1000d34f
mov ecx, ebx
lea esp, [esp]
cmp ecx, ebx
jl 0x1000d3fa
cmp ecx, dword [esp + 0x50]
jge 0x1000d3fa
mov edx, dword [eax + ecx*4]
cmp dword [edx - 0xc], ebp
jl 0x1000d33f
cmp byte [edx], 0x3a
jne 0x1000d33f
mov ecx, dword [esp + 0x1c]
mov eax, dword [eax + ecx*4]
lea edx, [esp + 0x1b]
push edx
add eax, 1
push eax
lea ecx, [esp + 0x1e4]
call fcn.10009b00
mov byte [esp + 0xca4], 5
mov eax, dword [esp + 0x1ec]
mov ecx, dword [esp + 0x1f0]
mov dword [esp + 0x24], eax
mov esi, eax
sub eax, ecx
push eax
push 0x20
push ecx
call fcn.100f8400
add esp, 0xc
cmp eax, ebx
jne 0x1000d275
mov eax, esi
jmp 0x1000d291
cmp eax, esi
je 0x1000d291
lea ecx, [eax + 1]
cmp ecx, esi
je 0x1000d291
mov dl, byte [ecx]
cmp dl, 0x20
je 0x1000d28b
mov byte [eax], dl
add eax, edi
add ecx, edi
cmp ecx, esi
jne 0x1000d280
mov ecx, dword [esp + 0x24]
mov esi, eax
cmp esi, ecx
je 0x1000d2c2
mov eax, dword [esp + 0x1ec]
sub eax, ecx
add eax, edi
je 0x1000d2b9
push eax
mov eax, ecx
push eax
push esi
call fcn.100f7b50
mov ecx, dword [esp + 0x30]
add esp, 0xc
sub esi, ecx
add dword [esp + 0x1ec], esi
mov eax, dword [esp + 0x1f0]
lea edx, [esp + 0x41c]
sub edx, eax
mov cl, byte [eax]
mov byte [eax + edx], cl
add eax, edi
cmp cl, bl
jne 0x1000d2d2
mov eax, dword [esp + 0x30]
cmp eax, dword [esp + 0x34]
mov dword [esp + 0x43c], ebx
je 0x1000d30a
mov ecx, 9
lea esi, [esp + 0x41c]
mov edi, eax
rep movsd dword es:[edi], dword [esi]
add dword [esp + 0x30], 0x24
mov edi, 1
jmp 0x1000d323
push edi
push edi
lea ecx, [esp + 0x23]
push ecx
lea edx, [esp + 0x428]
push edx
push eax
lea ecx, [esp + 0x40]
call fcn.1000c3f0
mov byte [esp + 0xca4], 4
lea ecx, [esp + 0x1dc]
call fcn.10006310
mov eax, dword [esp + 0x4c]
mov ecx, dword [esp + 0x1c]
add ecx, edi
cmp ecx, dword [esp + 0x20]
mov dword [esp + 0x1c], ecx
jl 0x1000d200
cmp dword [esp + 0x20], ebx
mov dword [esp + 0x1c], ebx
jg 0x1000d404
mov edx, dword [esp + 0x40]
mov ecx, dword [esp + 0x3c]
sub edx, ecx
mov eax, 0x66666667
imul edx
sar edx, 4
mov eax, edx
shr eax, 0x1f
add eax, edx
mov dword [esp + 0x1c], ebx
je 0x1000db0c
mov edi, dword [esp + 0x2c]
mov dword [esp + 0x20], ebx
lea ebx, [ebx]
mov edx, dword [esp + 0x30]
sub edx, edi
mov eax, 0x38e38e39
imul edx
sar edx, 3
mov eax, edx
shr eax, 0x1f
xor esi, esi
add eax, edx
je 0x1000dab6
xor ebp, ebp
mov edx, dword [esp + 0x20]
lea eax, [edi + ebp]
add ecx, edx
push eax
push ecx
call fcn.10109874
add esp, 8
test eax, eax
je 0x1000da5e
mov ecx, dword [esp + 0x30]
mov edi, dword [esp + 0x2c]
sub ecx, edi
mov eax, 0x38e38e39
imul ecx
mov ecx, dword [esp + 0x3c]
sar edx, 3
mov eax, edx
shr eax, 0x1f
add esi, 1
add eax, edx
add ebp, 0x24
cmp esi, eax
jb 0x1000d3b1
jmp 0x1000dab6
jmp fcn.100e4be9
mov eax, dword [esp + 0x4c]
mov edi, dword [esp + 0x1c]
xor ebp, ebp
cmp edi, ebx
mov dword [esp + 0x24], ebp
jl 0x1000d3fa
cmp edi, dword [esp + 0x50]
jge 0x1000d3fa
mov ecx, dword [eax + edi*4]
cmp dword [ecx - 0xc], 4
lea esi, [edi*4]
jl 0x1000d538
push 4
lea edx, [esp + 0x494]
mov eax, ecx
push edx
push eax
call fcn.100fc247
add esp, 0xc
test eax, eax
jne 0x1000d534
cmp edi, dword [esp + 0x50]
jge 0x1000d3fa
mov eax, dword [esp + 0x4c]
mov eax, dword [eax + esi]
lea ecx, [esp + 0x1b]
push ecx
add eax, 4
push eax
lea ecx, [esp + 0x40c]
call fcn.10009b00
mov byte [esp + 0xca4], 6
mov eax, dword [esp + 0x414]
mov ecx, dword [esp + 0x418]
mov edi, eax
mov esi, eax
sub eax, ecx
push eax
push 0x20
push ecx
call fcn.100f8400
add esp, 0xc
cmp eax, ebx
jne 0x1000d49b
mov eax, esi
jmp 0x1000d4b9
cmp eax, esi
je 0x1000d4b9
lea ecx, [eax + 1]
cmp ecx, esi
je 0x1000d4b9
mov dl, byte [ecx]
cmp dl, 0x20
je 0x1000d4b2
mov byte [eax], dl
add eax, 1
add ecx, 1
cmp ecx, esi
jne 0x1000d4a6
mov esi, eax
cmp esi, edi
je 0x1000d4e1
mov eax, dword [esp + 0x414]
sub eax, edi
add eax, 1
je 0x1000d4d8
push eax
push edi
push esi
call fcn.100f7b50
add esp, 0xc
sub esi, edi
add dword [esp + 0x414], esi
mov esi, dword [esp + 0x418]
cmp byte [esi], bl
je 0x1000d51b
mov edi, dword [esp + 0x28]
lea edx, [esp + 0x24]
push edx
lea eax, [esp + 0x48c]
push eax
push esi
mov dword [esp + 0x30], ebx
call fcn.100f86bd
mov cl, byte [esp + 0x30]
mov byte [edi + ebp], cl
add esi, 2
add esp, 0xc
add ebp, 1
cmp byte [esi], bl
jne 0x1000d4f0
mov byte [esp + 0xca4], 4
lea ecx, [esp + 0x404]
call fcn.10006310
jmp 0x1000d86d
mov eax, dword [esp + 0x4c]
cmp edi, dword [esp + 0x50]
jge 0x1000d3fa
mov edx, dword [eax + esi]
cmp dword [edx - 0xc], 2
jl 0x1000d67f
mov ecx, edx
cmp byte [ecx], 0x3a
jne 0x1000d67f
mov eax, ecx
lea ecx, [esp + 0x1b]
push ecx
add eax, 1
push eax
lea ecx, [esp + 0x470]
call fcn.10009b00
mov byte [esp + 0xca4], 7
mov eax, dword [esp + 0x478]
mov ecx, dword [esp + 0x47c]
mov edi, eax
mov esi, eax
sub eax, ecx
push eax
push 0x20
push ecx
call fcn.100f8400
add esp, 0xc
cmp eax, ebx
jne 0x1000d5a1
mov eax, esi
jmp 0x1000d5c3
cmp eax, esi
je 0x1000d5c3
lea ecx, [eax + 1]
cmp ecx, esi
je 0x1000d5c3
lea esp, [esp]
mov dl, byte [ecx]
cmp dl, 0x20
je 0x1000d5bc
mov byte [eax], dl
add eax, 1
add ecx, 1
cmp ecx, esi
jne 0x1000d5b0
mov esi, eax
cmp esi, edi
je 0x1000d5eb
mov eax, dword [esp + 0x478]
sub eax, edi
add eax, 1
je 0x1000d5e2
push eax
push edi
push esi
call fcn.100f7b50
add esp, 0xc
sub esi, edi
add dword [esp + 0x478], esi
mov ecx, dword [esp + 0x30]
mov edi, dword [esp + 0x2c]
sub ecx, edi
mov eax, 0x38e38e39
imul ecx
sar edx, 3
mov eax, edx
shr eax, 0x1f
xor esi, esi
add eax, edx
je 0x1000d666
xor ebp, ebp
lea esp, [esp]
mov ecx, dword [esp + 0x47c]
lea eax, [edi + ebp]
push eax
push ecx
call fcn.10109874
add esp, 8
test eax, eax
je 0x1000d64f
mov ecx, dword [esp + 0x30]
mov edi, dword [esp + 0x2c]
sub ecx, edi
mov eax, 0x38e38e39
imul ecx
sar edx, 3
mov eax, edx
shr eax, 0x1f
add esi, 1
add eax, edx
add ebp, 0x24
cmp esi, eax
jb 0x1000d610
jmp 0x1000d662
mov ecx, dword [esp + 0x28]
sub ecx, dword [esp + 0x38]
mov eax, dword [esp + 0x2c]
lea edx, [esi + esi*8]
mov dword [eax + edx*4 + 0x20], ecx
mov ebp, dword [esp + 0x24]
mov byte [esp + 0xca4], 4
lea ecx, [esp + 0x468]
call fcn.10006310
jmp 0x1000d86d
mov eax, edx
lea ecx, [esp + 0x41c]
push ecx
lea edx, [esp + 0x18]
push edx
push 0x21
lea ecx, [esp + 0x200]
push ecx
push eax
lea edx, [esp + 0x40]
push edx
call fcn.1000bf70
add esp, 0x18
test eax, eax
je 0x1000d75d
mov esi, dword [esp + 0x14]
mov edx, dword [esp + 0x28]
shl esi, 4
mov eax, dword [esp + esi + 0x1fc]
lea edi, [esp + esi + 0x1fc]
push eax
lea ecx, [esp + esi + 0x1fe]
push ecx
push edx
call fcn.100f7fd0
mov esi, dword [esp + esi + 0x20c]
mov edi, dword [edi]
add esp, 0xc
lea ebp, [esi + edi]
xor eax, eax
jmp 0x1000d6f0
mov cl, byte [esp + eax + 0x41c]
mov byte [esp + eax + 0x440], cl
add eax, 1
cmp cl, bl
jne 0x1000d6f0
sub edi, dword [esp + 0x38]
mov dword [esp + 0x464], esi
add edi, dword [esp + 0x28]
mov dword [esp + 0x460], edi
mov edi, dword [esp + 0x40]
cmp edi, dword [esp + 0x44]
je 0x1000d73d
mov ecx, 0xa
lea esi, [esp + 0x440]
rep movsd dword es:[edi], dword [esi]
add dword [esp + 0x40], 0x28
jmp 0x1000d86d
push 1
push 1
lea eax, [esp + 0x23]
push eax
lea ecx, [esp + 0x44c]
push ecx
push edi
lea ecx, [esp + 0x50]
call fcn.1000c4f0
jmp 0x1000d86d
mov edx, dword [esp + 0x5c]
push ebx
push edx
lea ecx, [esp + 0x1e4]
call fcn.100da960
mov ecx, dword [esp + 0xcb0]
mov eax, dword [esp + 0xcac]
mov dword [esp + 0x1e8], ecx
lea ecx, [esp + 0x7c]
mov dword [esp + 0x1e0], ebx
mov dword [esp + 0x1e4], eax
call fcn.100db740
mov byte [esp + 0xca4], 8
lea edx, [esp + 0x1dc]
push edx
lea ecx, [esp + 0x80]
call fcn.100dbb00
lea eax, [esp + 0x7c]
push eax
lea ecx, [esp + 0x140]
call fcn.100d4e00
mov byte [esp + 0xca4], 9
lea ecx, [esp + 0x13c]
push ecx
lea ecx, [esp + 0x64]
call fcn.100dd010
mov byte [esp + 0xca4], 0xa
cmp edi, dword [esp + 0x50]
jge 0x1000d3fa
mov edx, dword [esp + 0x4c]
mov eax, dword [edx + esi]
push 0xffffffffffffffff
push eax
lea ecx, [esp + 0x68]
call fcn.100de380
lea ecx, [esp + 0x7c]
mov esi, eax
call fcn.100db610
cmp esi, ebx
jne 0x1000d89c
mov eax, dword [esp + 0xfc]
mov eax, dword [eax]
mov ebp, dword [eax + 0x38]
mov eax, dword [eax + 0x34]
mov ecx, dword [esp + 0x28]
push ebp
push eax
push ecx
call fcn.100f7fd0
add esp, 0xc
mov byte [esp + 0xca4], 9
lea ecx, [esp + 0x60]
call fcn.100dcc00
mov byte [esp + 0xca4], 8
lea ecx, [esp + 0x13c]
call fcn.100d4e70
mov byte [esp + 0xca4], 4
lea ecx, [esp + 0x7c]
call fcn.100dba60
add dword [esp + 0x28], ebp
mov eax, ebp
cdq
add dword [esp + 0xcac], eax
mov eax, dword [esp + 0x1c]
adc dword [esp + 0xcb0], edx
add eax, 1
cmp eax, dword [esp + 0x20]
mov dword [esp + 0x1c], eax
jl 0x1000d400
jmp 0x1000d35d
push ebx
push ebx
lea ecx, [esp + 0x144]
call fcn.100db420
cmp dword [0x10198460], ebx
je 0x1000d9ec
cmp edi, dword [esp + 0x50]
mov al, 0xce
mov dl, 0xed
mov cl, 0xf3
mov byte [esp + 0x468], 0xd6
mov byte [esp + 0x469], 0xb8
mov byte [esp + 0x46a], 0xc1
mov byte [esp + 0x46b], 0xee
mov byte [esp + 0x46c], 0x5b
mov byte [esp + 0x46d], 0x25
mov byte [esp + 0x46e], 0x73
mov byte [esp + 0x46f], 0x5d
mov byte [esp + 0x470], 0xbd
mov byte [esp + 0x471], 0xe2
mov byte [esp + 0x472], al
mov byte [esp + 0x473], 0xf6
mov byte [esp + 0x474], 0xb4
mov byte [esp + 0x475], dl
mov byte [esp + 0x476], al
mov byte [esp + 0x477], cl
mov byte [esp + 0x478], 0x2c
mov byte [esp + 0x479], 0xb4
mov byte [esp + 0x47a], dl
mov byte [esp + 0x47b], al
mov byte [esp + 0x47c], cl
mov byte [esp + 0x47d], 0xd0
mov byte [esp + 0x47e], 0xc5
mov byte [esp + 0x47f], 0xcf
mov byte [esp + 0x480], 0xa2
mov byte [esp + 0x481], 0x3d
mov byte [esp + 0x482], 0x25
mov byte [esp + 0x483], 0x73
mov byte [esp + 0x484], bl
jge 0x1000d3fa
mov edx, dword [esp + 0x4c]
mov eax, dword [esp + 0x1c]
push esi
lea edi, [edx + eax*4]
call fcn.100dc150
mov ecx, dword [edi]
push eax
push ecx
lea edx, [esp + 0x474]
push edx
lea eax, [esp + 0x4a8]
push eax
call fcn.100f7960
add esp, 0x14
push 0x10010
push 0x10160a44
lea ecx, [esp + 0x4a0]
push ecx
push ebx
call dword [sym.imp.USER32.dll_MessageBoxA]
mov byte [esp + 0xca4], 9
lea ecx, [esp + 0x60]
call fcn.100dcc00
mov byte [esp + 0xca4], 8
lea ecx, [esp + 0x13c]
call fcn.100d4e70
mov byte [esp + 0xca4], 4
lea ecx, [esp + 0x7c]
call fcn.100dba60
mov byte [esp + 0xca4], 2
lea ecx, [esp + 0x3c]
call fcn.1000c360
mov byte [esp + 0xca4], bl
lea ecx, [esp + 0x2c]
call fcn.1000c2d0
mov dword [esp + 0xca4], 0xffffffff
lea ecx, [esp + 0x48]
call fcn.100e819e
xor eax, eax
jmp 0x1000db4b
mov ecx, dword [esp + 0x3c]
mov edx, dword [esp + 0x20]
mov eax, dword [edx + ecx + 0x24]
cmp eax, 1
jne 0x1000da8e
mov eax, dword [esp + 0x2c]
lea ecx, [edx + ecx + 0x20]
lea edx, [esi + esi*8]
mov dl, byte [eax + edx*4 + 0x20]
sub dl, byte [ecx]
mov eax, dword [ecx]
mov ecx, dword [esp + 0x38]
sub dl, 1
mov byte [ecx + eax], dl
jmp 0x1000daae
cmp eax, 4
jne 0x1000dab2
mov ecx, dword [edx + ecx + 0x20]
mov eax, dword [esp + 0x2c]
lea edx, [esi + esi*8]
mov edx, dword [eax + edx*4 + 0x20]
mov eax, dword [esp + 0x38]
sub edx, ecx
sub edx, 4
mov dword [eax + ecx], edx
mov ecx, dword [esp + 0x3c]
mov edi, dword [esp + 0x2c]
mov edx, dword [esp + 0x30]
sub edx, edi
mov eax, 0x38e38e39
imul edx
sar edx, 3
mov eax, edx
shr eax, 0x1f
add eax, edx
cmp esi, eax
jne 0x1000dadd
cmp dword [0x10198460], ebx
jne 0x1000db73
mov edx, dword [esp + 0x40]
mov esi, dword [esp + 0x1c]
add dword [esp + 0x20], 0x28
sub edx, ecx
mov eax, 0x66666667
imul edx
sar edx, 4
mov eax, edx
shr eax, 0x1f
add esi, 1
add eax, edx
cmp esi, eax
mov dword [esp + 0x1c], esi
jb 0x1000d390
mov esi, dword [esp + 0x28]
sub esi, dword [esp + 0x38]
mov byte [esp + 0xca4], 2
lea ecx, [esp + 0x3c]
call fcn.1000c360
mov byte [esp + 0xca4], bl
lea ecx, [esp + 0x2c]
call fcn.1000c2d0
mov dword [esp + 0xca4], 0xffffffff
lea ecx, [esp + 0x48]
call fcn.100e819e
mov eax, esi
mov ecx, dword [esp + 0xc9c]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebp
pop ebx
mov ecx, dword [esp + 0xc84]
xor ecx, esp
call fcn.100f611a
add esp, 0xc94
ret
mov eax, dword [esp + 0x1c]
lea edx, [eax + eax*4]
lea eax, [ecx + edx*8]
push eax
lea ecx, [esp + 0x1e0]
push ecx
lea edx, [esp + 0x4a0]
push edx
mov byte [esp + 0x1e8], 0xce
mov byte [esp + 0x1e9], 0xde
mov byte [esp + 0x1ea], 0xd0
mov byte [esp + 0x1eb], 0xa7
mov byte [esp + 0x1ec], 0xb5
mov byte [esp + 0x1ed], 0xc4
mov byte [esp + 0x1ee], 0xcc
mov byte [esp + 0x1ef], 0xf8
mov byte [esp + 0x1f0], 0xd7
mov byte [esp + 0x1f1], 0xaa
mov byte [esp + 0x1f2], 0x4c
mov byte [esp + 0x1f3], 0x61
mov byte [esp + 0x1f4], 0x62
mov byte [esp + 0x1f5], 0x65
mov byte [esp + 0x1f6], 0x6c
mov byte [esp + 0x1f7], 0x5b
mov byte [esp + 0x1f8], 0x25
mov byte [esp + 0x1f9], 0x73
mov byte [esp + 0x1fa], 0x5d
mov byte [esp + 0x1fb], bl
call fcn.100f7960
add esp, 0xc
push 0x10010
push 0x10160a44
lea eax, [esp + 0x4a0]
push eax
push ebx
call dword [sym.imp.USER32.dll_MessageBoxA]
mov byte [esp + 0xca4], 2
lea ecx, [esp + 0x3c]
call fcn.1000c360
mov byte [esp + 0xca4], bl
lea ecx, [esp + 0x2c]
call fcn.1000c2d0
mov dword [esp + 0xca4], 0xffffffff
lea ecx, [esp + 0x48]
call fcn.100e819e
xor eax, eax
jmp 0x1000db4b