Function at 0x1000ceb8
Capabilities:
Accept command line arguments
Check os version
Create process on windows
Get common file path
Get disk size
Identify system language via api
Parse pe header
Query or enumerate registry key

Disassembly:
mov eax, 0x1007c74d
call fcn.1007b98c
mov eax, 0x146c
call fcn.100776d0
push ebx
push esi
push edi
push 1
mov esi, 0xd6c05baf
mov byte [ebp - 0x61], dl
xor eax, eax
mov dword [ebp - 0x20], esi
pop ebx
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 0xffffffe9
push 0xffffffffffffffff
mov dword [ebp - 0x60], ecx
pop edi
jl 0x1000cf92
mov dword [ebp - 0x44], 0x7543
lea ecx, [ebp - 0x93c]
push 3
call fcn.1000c1f9
xor eax, eax
mov dword [ebp - 4], eax
mov dword [ebp - 0x34], 0x946b43d2
mov dword [ebp - 0x14], eax
jmp 0x1000cf2b
push dword [ebp - 0x14]
lea ecx, [ebp - 0x93c]
call fcn.1000c297
and dword [eax], 0
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], 3
jl 0x1000cf17
mov eax, dword [ebp - 0x44]
xor edx, edx
cmp eax, 0x1188
setle dl
xor ecx, ecx
sub edx, dword [ebp - 0x20]
mov eax, dword [ebp - 0x20]
cmp edx, eax
setg cl
xor eax, eax
cmp ecx, 0x7fa3
setl al
add eax, dword [ebp - 0x44]
jne 0x1000cf70
push eax
lea ecx, [ebp - 0x93c]
call fcn.1000c297
cmp dword [eax], 0
jne 0x1000cf70
xor eax, eax
jmp 0x1000cf72
mov eax, ebx
mov dword [ebp - 0x34], eax
lea ecx, [ebp - 0x93c]
mov dword [ebp - 4], edi
call fcn.1000c27b
dec dword [ebp - 0x20]
cmp dword [ebp - 0x20], 0xffffffe9
jge 0x1000cef2
xor eax, eax
mov dword [ebp - 0x14], 0xcea5d6c0
mov dword [ebp - 0x34], 0x307d7c11
mov dword [ebp - 0x14], 0xfffffff5
jmp 0x1000cfce
mov dword [ebp - 0x34], 0xc5534bf8
cmp dword [ebp - 0x14], eax
jne 0x1000cfbc
mov ecx, eax
cmp dword [ebp - 0x34], eax
je 0x1000cfbe
mov ecx, ebx
xor eax, eax
test ecx, ecx
push 0
sets al
mov dword [ebp - 0x34], eax
dec dword [ebp - 0x14]
pop eax
cmp dword [ebp - 0x14], 0xffffffe4
jle 0x1000cfa9
xor eax, eax
mov byte [ebp - 0x2d], al
cmp byte [ebp - 0x2d], al
je 0x1000cff6
push 0x1f20
push eax
push 0x121a
push 0x17ee
call dword [sym.imp.USER32.dll_SystemParametersInfoA]
xor eax, eax
mov dword [ebp - 0x40], esi
mov dword [ebp - 0x38], 9
mov dword [ebp - 0x44], 0x76d9935f
mov dword [ebp - 0x14], eax
jmp 0x1000d01d
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x2f4], 0xa885
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], ebx
jl 0x1000d00c
mov eax, dword [ebp - 0x38]
mov dword [ebp - 0x38], eax
xor eax, eax
push 0xfffffffffffffffd
mov dword [ebp - 0x38], eax
pop esi
jmp 0x1000d127
mov dword [ebp - 0x28], 0xdba33992
mov dword [ebp - 0x34], esi
mov dword [ebp - 0x44], 0xbee6daba
mov dword [ebp - 0x28], eax
cmp dword [ebp - 0x28], 0xfffffffe
jl 0x1000d124
mov dword [ebp - 0x10], ebx
mov dword [ebp - 0x1c], 0xa4ccfd66
mov dword [ebp - 0x44], edi
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x28]
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x28]
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x34]
cmp dword [ebp - 0x38], edi
jg 0x1000d081
xor eax, eax
cmp dword [ebp - 0x28], eax
je 0x1000d083
mov eax, ebx
mov dword [ebp - 0x44], eax
xor ecx, ecx
mov eax, dword [ebp - 0x44]
mov eax, dword [ebp - 0x10]
test eax, eax
mov eax, dword [ebp - 0x10]
setg cl
xor edx, edx
cmp ecx, 0x604491d0
setl dl
xor ecx, ecx
cmp eax, edx
mov eax, 0xfc4f
setge cl
sub eax, ecx
je 0x1000d0bc
xor eax, eax
cmp dword [ebp - 0x10], eax
je 0x1000d0be
mov eax, ebx
jmp 0x1000d0be
xor eax, eax
mov dword [ebp - 0x44], eax
xor ecx, ecx
mov eax, dword [ebp - 0x44]
cmp eax, edi
setle cl
xor eax, eax
mov dword [ebp - 0x44], ecx
mov dword [ebp - 0x10], eax
jmp 0x1000d110
mov dword [ebp - 0x3c], 0x2658
xor ecx, ecx
mov eax, dword [ebp - 0x10]
mov eax, dword [ebp - 0x3c]
mov eax, dword [ebp - 0x2f4]
cmp eax, 0xbdae1919
mov eax, dword [ebp - 0x10]
setne cl
cmp esi, ecx
mov eax, dword [ebp + eax*4 - 0x2f4]
sbb edx, edx
xor ecx, ecx
inc edx
cmp eax, edx
setge cl
mov dword [ebp - 0x44], ecx
inc dword [ebp - 0x10]
xor eax, eax
cmp dword [ebp - 0x10], eax
jle 0x1000d0d5
dec dword [ebp - 0x28]
cmp dword [ebp - 0x28], 0xfffffffe
jge 0x1000d053
xor eax, eax
inc dword [ebp - 0x38]
cmp dword [ebp - 0x38], 0x19
jle 0x1000d035
mov edi, dword [sym.imp.GDI32.dll_PolyPolyline]
push 2
mov dword [ebp - 0x40], eax
pop esi
jmp 0x1000d3d8
push esi
lea ecx, [ebp - 0x340]
call fcn.1000c1f9
mov dword [ebp - 4], ebx
or eax, 0xffffffff
mov dword [ebp - 0x34], eax
xor eax, eax
mov dword [ebp - 0x3c], 0xaae0
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], esi
jge 0x1000d180
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0x7dc], 0x3a18e418
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], esi
jl 0x1000d168
xor eax, eax
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], esi
jge 0x1000d1a6
push dword [ebp - 0x10]
lea ecx, [ebp - 0x340]
call fcn.1000c297
mov dword [eax], 0xb58e17c1
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], esi
jl 0x1000d188
xor eax, eax
push eax
lea ecx, [ebp - 0x340]
call fcn.1000c297
mov eax, dword [ebp - 0x7d8]
lea ecx, [ebp - 0x340]
mov dword [ebp - 0x7d8], eax
xor eax, eax
push eax
call fcn.1000c297
push ebx
lea ecx, [ebp - 0x340]
call fcn.1000c297
xor eax, eax
lea ecx, [ebp - 0x340]
push eax
call fcn.1000c297
push ebx
lea ecx, [ebp - 0x340]
call fcn.1000c297
mov ecx, dword [ebp - 0x34]
inc ecx
neg ecx
mov dword [eax], ebx
sbb ecx, ecx
xor eax, eax
neg ecx
cmp ecx, ebx
lea ecx, [ebp - 0x340]
sete al
mov dword [ebp - 0x3c], eax
or eax, 0xffffffff
mov dword [ebp - 4], eax
call fcn.1000c27b
mov eax, 0x2d5e48d3
mov dword [ebp - 0x48], 0x7543
mov dword [ebp - 0xbf4], eax
lea ecx, [ebp - 0x6b8]
mov dword [ebp - 0xbf0], eax
mov dword [ebp - 0xbec], eax
mov dword [ebp - 0xbe8], eax
mov dword [ebp - 0x20], 0x52061f6
push esi
call fcn.1000c1f9
xor eax, eax
mov dword [ebp - 4], esi
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], esi
jge 0x1000d27b
push dword [ebp - 0x14]
lea ecx, [ebp - 0x6b8]
call fcn.1000c297
mov dword [eax], 0x5b40194
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], esi
jl 0x1000d25d
xor eax, eax
mov dword [ebp - 0x20], eax
jmp 0x1000d294
call fcn.1000c297
mov ecx, dword [ebp - 0x20]
mov ecx, dword [ebp + ecx*4 - 0xbf4]
mov dword [eax], ecx
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], 3
lea ecx, [ebp - 0x6b8]
push ebx
jle 0x1000d280
call fcn.1000c297
lea ecx, [ebp - 0x6b8]
mov eax, dword [eax]
mov dword [ebp - 0x20], eax
or eax, 0xffffffff
mov dword [ebp - 4], eax
call fcn.1000c27b
push 3
lea ecx, [ebp - 0x8e8]
call fcn.1000c1f9
push 3
pop eax
mov dword [ebp - 4], eax
mov dword [ebp - 0x1c], 0xbc6e5c7a
mov dword [ebp - 0x44], 0xeea53061
mov dword [ebp - 0x44], eax
xor eax, eax
mov dword [ebp - 0x50], 0xec299e88
mov dword [ebp - 0x34], eax
mov byte [ebp - 0x2d], al
cmp byte [ebp - 0x2d], al
je 0x1000d30b
push 0xb13
push eax
push eax
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call edi
mov eax, dword [ebp - 0x1c]
xor edx, edx
mov dword [ebp - 0x44], 0x401d1b98
mov eax, dword [ebp - 0x44]
add eax, 0x1cfae141
mov dword [ebp - 0x44], eax
mov ecx, dword [ebp - 0x44]
add ecx, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x1c]
cmp ecx, eax
mov eax, dword [ebp - 0x1c]
setg dl
xor ecx, ecx
cmp edx, eax
mov eax, 0xb445acee
setge cl
cmp eax, ecx
sbb eax, eax
inc eax
mov dword [ebp - 0x50], eax
mov eax, dword [ebp - 0x50]
cmp dword [ebp - 0x50], 0xf7c629c4
sbb eax, eax
neg eax
mov dword [ebp - 0x34], eax
xor eax, eax
mov dword [ebp - 0x34], 0x946b43d2
mov dword [ebp - 0x14], eax
jmp 0x1000d37a
push dword [ebp - 0x14]
lea ecx, [ebp - 0x8e8]
call fcn.1000c297
and dword [eax], 0
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], 3
jl 0x1000d366
mov eax, dword [ebp - 0x48]
xor edx, edx
cmp eax, 0x1188
setle dl
xor ecx, ecx
sub edx, dword [ebp - 0x40]
mov eax, dword [ebp - 0x40]
cmp edx, eax
setg cl
xor eax, eax
cmp ecx, 0x7fa3
setl al
add eax, dword [ebp - 0x48]
jne 0x1000d3bf
push eax
lea ecx, [ebp - 0x8e8]
call fcn.1000c297
cmp dword [eax], 0
jne 0x1000d3bf
xor eax, eax
jmp 0x1000d3c1
mov eax, ebx
mov dword [ebp - 0x34], eax
lea ecx, [ebp - 0x8e8]
or eax, 0xffffffff
mov dword [ebp - 4], eax
call fcn.1000c27b
dec dword [ebp - 0x40]
cmp dword [ebp - 0x40], 0xffffffe9
jge 0x1000d142
push 3
lea ecx, [ebp - 0xb10]
call fcn.1000c1f9
push 4
pop eax
mov dword [ebp - 4], eax
lea ecx, [ebp - 0x1344]
movdqa xmm0, xmmword [0x10008240]
lea eax, [ebp - 0x1130]
push eax
lea eax, [ebp - 0x1140]
push eax
movdqu xmmword [ebp - 0x1140], xmm0
call fcn.1000c2a9
lea ecx, [ebp - 0x1d1]
mov esi, eax
call fcn.1000c2a6
push eax
push dword [esi + 4]
lea ecx, [ebp - 0x4a0]
push dword [esi]
call fcn.1000c255
push 2
pop esi
push esi
lea ecx, [ebp - 0xe8c]
mov byte [ebp - 4], 5
call fcn.1000c1f9
xor eax, eax
mov byte [ebp - 4], 6
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], 3
jge 0x1000d47d
push dword [ebp - 0x10]
lea ecx, [ebp - 0xb10]
call fcn.1000c297
mov dword [eax], 0xbb2c2135
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], 3
jl 0x1000d45e
xor eax, eax
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], esi
jge 0x1000d4a3
push dword [ebp - 0x10]
lea ecx, [ebp - 0xe8c]
call fcn.1000c297
mov dword [eax], 0xbdbdf7c
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], esi
jl 0x1000d485
xor eax, eax
push eax
lea ecx, [ebp - 0x4a0]
call fcn.1000c297
mov dword [eax], esi
jmp 0x1000d56c
push 3
lea ecx, [ebp - 0x400]
call fcn.1000c1f9
xor eax, eax
mov byte [ebp - 4], 7
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 3
jge 0x1000d4f1
push dword [ebp - 0x14]
lea ecx, [ebp - 0x400]
call fcn.1000c297
mov dword [eax], 0x10f7a73
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], 3
jl 0x1000d4d2
xor eax, eax
push eax
lea ecx, [ebp - 0x400]
call fcn.1000c297
and dword [eax], 0
jmp 0x1000d520
xor eax, eax
mov dword [ebp - 0x34], 0x43ac
push eax
lea ecx, [ebp - 0x400]
mov dword [ebp - 0x34], 0x5021c3a2
call fcn.1000c297
inc dword [eax]
xor eax, eax
lea ecx, [ebp - 0x400]
push eax
call fcn.1000c297
cmp dword [eax], esi
jle 0x1000d502
xor eax, eax
lea ecx, [ebp - 0x4a0]
push eax
call fcn.1000c297
lea ecx, [ebp - 0xb10]
push dword [eax]
call fcn.1000c297
lea ecx, [ebp - 0x400]
mov byte [ebp - 4], 6
call fcn.1000c27b
xor eax, eax
lea ecx, [ebp - 0x4a0]
push eax
call fcn.1000c297
dec dword [eax]
xor eax, eax
lea ecx, [ebp - 0x4a0]
push eax
call fcn.1000c297
cmp dword [eax], 0
jge 0x1000d4b6
lea ecx, [ebp - 0xe8c]
call fcn.1000c27b
lea ecx, [ebp - 0x4a0]
call fcn.1000c27b
or eax, 0xffffffff
lea ecx, [ebp - 0xb10]
mov dword [ebp - 4], eax
call fcn.1000c27b
mov dword [ebp - 0x10], 0x7e2799ac
lea ecx, [ebp - 0xd50]
mov dword [ebp - 0x4c], 0xf59172dd
mov dword [ebp - 0x4c], 0xbbb66efe
mov dword [ebp - 0x4c], 0xe7374489
mov dword [ebp - 0x4c], 0x11b55e97
push ebx
call fcn.1000c1f9
mov dword [ebp - 4], 8
xor eax, eax
mov dword [ebp - 0x54], 0x57cf
mov dword [ebp - 0x14], eax
jmp 0x1000d605
push dword [ebp - 0x14]
lea ecx, [ebp - 0xd50]
call fcn.1000c297
mov dword [eax], 0x8214d2fc
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], ebx
jl 0x1000d5ee
mov dword [ebp - 0x10], 0x1a
jmp 0x1000d6c0
mov dword [ebp - 0x48], 0xb5c6f8b8
xor edx, edx
mov dword [ebp - 0x44], 0xb0bb8bff
mov dword [ebp - 0x34], 0xfffffffa
mov dword [ebp - 0x4c], eax
mov dword [ebp - 0x4c], 0xeab3ae5d
mov dword [ebp - 0x4c], eax
mov ecx, dword [ebp - 0x48]
mov eax, dword [ebp - 0x10]
cmp eax, ecx
setg dl
xor eax, eax
mov dword [ebp - 0x44], edx
cmp dword [ebp - 0x44], eax
je 0x1000d66f
mov eax, dword [ebp - 0x10]
mov eax, dword [ebp - 0x48]
mov eax, dword [ebp - 0x10]
sub eax, dword [ebp - 0x10]
neg eax
sbb eax, eax
inc eax
add eax, esi
jne 0x1000d669
cmp dword [ebp - 0x10], eax
je 0x1000d66d
mov ecx, ebx
jmp 0x1000d671
xor eax, eax
mov ecx, eax
xor eax, eax
cmp ecx, 0xffff
push 0xfffffffffffffffc
sete al
xor ecx, ecx
cmp eax, 0xb44a
mov eax, dword [ebp - 0x10]
setl cl
xor edx, edx
cmp ecx, eax
mov eax, dword [ebp - 0x10]
setg dl
xor ecx, ecx
cmp edx, eax
pop eax
setg cl
cmp eax, ecx
sbb eax, eax
xor ecx, ecx
inc eax
cmp eax, 0xe283
setne cl
xor eax, eax
cmp ecx, 0xcf45
setge al
mov dword [ebp - 0x34], eax
dec dword [ebp - 0x54]
dec dword [ebp - 0x10]
or eax, 0xffffffff
cmp dword [ebp - 0x10], 7
je 0x1000d616
lea ecx, [ebp - 0xd50]
mov dword [ebp - 4], eax
call fcn.1000c27b
xor eax, eax
mov dword [ebp - 0x40], 0xd6c05baf
mov dword [ebp - 0x40], eax
cmp dword [ebp - 0x40], 0xffffffe9
jl 0x1000da6f
mov dword [ebp - 0x54], 0x7543
lea ecx, [ebp - 0x918]
push 3
call fcn.1000c1f9
mov dword [ebp - 4], 9
lea ecx, [ebp - 0x264]
mov dword [ebp - 0x34], 0x946b43d2
push esi
call fcn.1000c1f9
push 0xfffffffffffffffd
pop eax
mov byte [ebp - 4], 0xa
lea ecx, [ebp - 0x900]
mov dword [ebp - 0x20], eax
mov dword [ebp - 0x34], 0xbc6e5c7a
push ebx
call fcn.1000c1f9
xor eax, eax
mov byte [ebp - 4], 0xb
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], esi
jge 0x1000d768
push dword [ebp - 0x10]
lea ecx, [ebp - 0x264]
call fcn.1000c297
mov dword [eax], 0x5c68ec0a
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], esi
jl 0x1000d74a
xor eax, eax
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], ebx
jge 0x1000d78b
push dword [ebp - 0x10]
lea ecx, [ebp - 0x900]
call fcn.1000c297
and dword [eax], 0
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], ebx
jl 0x1000d770
xor eax, eax
push eax
lea ecx, [ebp - 0x264]
call fcn.1000c297
mov dword [eax], 0xfffffffe
jmp 0x1000d7cf
xor eax, eax
mov dword [ebp - 0x44], 0x74aa
mov byte [ebp - 0x2d], al
cmp byte [ebp - 0x2d], al
je 0x1000d7be
push 0x110
push eax
call dword [sym.imp.USER32.dll_CharLowerBuffW]
xor eax, eax
inc dword [ebp - 0x44]
lea ecx, [ebp - 0x264]
push eax
call fcn.1000c297
inc dword [eax]
xor eax, eax
lea ecx, [ebp - 0x264]
push eax
call fcn.1000c297
cmp dword [eax], 0
jge 0x1000d79f
mov dword [ebp - 0x20], 5
cmp dword [ebp - 0x20], 8
jg 0x1000d8de
xor eax, eax
mov dword [ebp - 0x14], 0xcee61780
mov dword [ebp - 0x44], 0x2628217c
lea ecx, [ebp - 0x264]
mov dword [ebp - 0x48], 0xfe44fa3f
push eax
call fcn.1000c297
xor ebx, ebx
cmp dword [eax], ebx
mov eax, dword [ebp - 0x44]
setne bl
xor ecx, ecx
cmp eax, 0x5922
setg cl
xor edx, edx
add ecx, dword [ebp - 0x14]
cmp ecx, 0xfffffff8
setle dl
sub edx, dword [ebp - 0x14]
mov eax, dword [ebp - 0x14]
neg edx
sbb edx, edx
xor ecx, ecx
inc edx
cmp edx, eax
mov eax, dword [ebp - 0x14]
setge cl
cmp ecx, 0xfffd
sbb edx, edx
xor ecx, ecx
inc edx
neg edx
cmp eax, edx
setne cl
xor eax, eax
cmp ecx, dword [ebp - 0x44]
jle 0x1000d86d
cmp dword [ebp - 0x34], eax
je 0x1000d86d
xor edx, edx
inc edx
jmp 0x1000d86f
mov edx, eax
mov eax, dword [ebp - 0x20]
xor ecx, ecx
cmp edx, eax
mov eax, dword [ebp - 0x48]
setle cl
xor edx, edx
cmp ecx, eax
setl dl
sub edx, dword [ebp - 0x48]
mov eax, dword [ebp - 0x14]
neg edx
sbb edx, edx
xor ecx, ecx
inc edx
imul edx, ebx
cmp edx, eax
setle cl
cmp ecx, dword [ebp - 0x20]
jl 0x1000d8b9
xor eax, eax
lea ecx, [ebp - 0x900]
push eax
call fcn.1000c297
cmp dword [eax], 0
je 0x1000d8b9
xor ebx, ebx
inc ebx
xor eax, eax
mov esi, ebx
jmp 0x1000d8c0
xor eax, eax
xor ebx, ebx
mov esi, eax
inc ebx
push eax
lea ecx, [ebp - 0x264]
call fcn.1000c297
mov dword [eax], esi
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], 8
jle 0x1000d7f3
push 2
pop esi
lea ecx, [ebp - 0x900]
call fcn.1000c27b
lea ecx, [ebp - 0x264]
mov byte [ebp - 4], 9
call fcn.1000c27b
xor eax, eax
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 3
jge 0x1000d91f
push dword [ebp - 0x14]
lea ecx, [ebp - 0x918]
call fcn.1000c297
and dword [eax], 0
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], 3
jl 0x1000d903
xor eax, eax
mov dword [ebp - 0x20], 0xe83c7730
mov dword [ebp - 0x34], 0xa5223fa3
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 3
jge 0x1000d94f
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x1260], 0xffff
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], 3
jl 0x1000d936
xor eax, eax
mov dword [ebp - 0x20], esi
cmp dword [ebp - 0x20], eax
jl 0x1000d9fe
jmp 0x1000d95f
xor eax, eax
mov dword [ebp - 0x1c], eax
lea ecx, [ebp - 0xa68]
push 3
call fcn.1000c1f9
xor eax, eax
mov byte [ebp - 4], 0xc
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 3
jge 0x1000d99d
push dword [ebp - 0x14]
lea ecx, [ebp - 0xa68]
call fcn.1000c297
mov dword [eax], 0x580d416d
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], 3
jl 0x1000d97e
xor eax, eax
mov dword [ebp - 0x1c], esi
cmp dword [ebp - 0x1c], eax
jl 0x1000d9e6
mov dword [ebp - 0x14], eax
jmp 0x1000d9b7
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0xda0], esi
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], esi
jl 0x1000d9aa
mov eax, dword [ebp - 0x20]
lea ecx, [ebp - 0xa68]
push 2
mov esi, dword [ebp + eax*4 - 0x1260]
mov dword [ebp - 0xd9c], esi
call fcn.1000c297
push 0
mov dword [eax], esi
dec dword [ebp - 0x1c]
pop eax
push 2
pop esi
jns 0x1000d9a5
lea ecx, [ebp - 0xa68]
mov byte [ebp - 4], 9
call fcn.1000c27b
dec dword [ebp - 0x20]
jns 0x1000d95d
mov dword [ebp - 0x20], 3
xor edx, edx
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x34], eax
mov eax, dword [ebp - 0x54]
cmp eax, 0x1188
setle dl
xor ecx, ecx
sub edx, dword [ebp - 0x40]
mov eax, dword [ebp - 0x40]
cmp edx, eax
setg cl
xor eax, eax
cmp ecx, 0x7fa3
setl al
add eax, dword [ebp - 0x54]
jne 0x1000da4a
push eax
lea ecx, [ebp - 0x918]
call fcn.1000c297
cmp dword [eax], 0
jne 0x1000da4a
xor eax, eax
jmp 0x1000da4c
mov eax, ebx
mov dword [ebp - 0x34], eax
lea ecx, [ebp - 0x918]
or eax, 0xffffffff
mov dword [ebp - 4], eax
call fcn.1000c27b
dec dword [ebp - 0x40]
cmp dword [ebp - 0x40], 0xffffffe9
jge 0x1000d6f1
xor eax, eax
mov dword [ebp - 0x44], 0xc29a3df6
or ecx, 0xffffffff
mov dword [ebp - 0x48], ecx
mov dword [ebp - 0x54], 0x773672d7
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], ebx
jge 0x1000da9f
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0x618], ebx
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], ebx
jl 0x1000da8b
xor eax, eax
mov dword [ebp - 0x10], eax
jmp 0x1000dab5
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0x135c], 0xe0091df8
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], esi
jl 0x1000daa4
mov eax, dword [ebp - 0x44]
lea ecx, [ebp - 0x310]
sub eax, dword [ebp - 0x44]
neg eax
push esi
sbb eax, eax
inc eax
mov dword [ebp - 0x48], eax
mov eax, dword [ebp - 0x48]
mov dword [ebp - 0x618], eax
dec dword [ebp - 0x54]
call fcn.1000c1f9
mov dword [ebp - 4], 0xd
or eax, 0xffffffff
mov dword [ebp - 0x34], eax
xor eax, eax
mov dword [ebp - 0x3c], 0xaae0
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], esi
jge 0x1000db16
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0x89c], 0x3a18e418
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], esi
jl 0x1000dafe
xor eax, eax
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], esi
jge 0x1000db3c
push dword [ebp - 0x10]
lea ecx, [ebp - 0x310]
call fcn.1000c297
mov dword [eax], 0xb58e17c1
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], esi
jl 0x1000db1e
xor eax, eax
push eax
lea ecx, [ebp - 0x310]
call fcn.1000c297
mov eax, dword [ebp - 0x898]
lea ecx, [ebp - 0x310]
mov dword [ebp - 0x898], eax
xor eax, eax
push eax
call fcn.1000c297
push ebx
lea ecx, [ebp - 0x310]
call fcn.1000c297
xor eax, eax
lea ecx, [ebp - 0x310]
push eax
call fcn.1000c297
push ebx
lea ecx, [ebp - 0x310]
call fcn.1000c297
mov ecx, dword [ebp - 0x34]
inc ecx
neg ecx
mov dword [eax], ebx
sbb ecx, ecx
xor eax, eax
neg ecx
cmp ecx, ebx
lea ecx, [ebp - 0x310]
sete al
mov dword [ebp - 0x3c], eax
or eax, 0xffffffff
mov dword [ebp - 4], eax
call fcn.1000c27b
mov eax, 0x2d5e48d3
lea ecx, [ebp - 0x6e8]
mov dword [ebp - 0xc34], eax
mov dword [ebp - 0xc30], eax
mov dword [ebp - 0xc2c], eax
mov dword [ebp - 0xc28], eax
mov dword [ebp - 0x20], 0x52061f6
push esi
call fcn.1000c1f9
xor eax, eax
mov dword [ebp - 4], 0xe
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], esi
jge 0x1000dc0e
push dword [ebp - 0x14]
lea ecx, [ebp - 0x6e8]
call fcn.1000c297
mov dword [eax], 0x5b40194
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], esi
jl 0x1000dbf0
xor eax, eax
push 3
mov dword [ebp - 0x20], eax
pop esi
jmp 0x1000dc2a
call fcn.1000c297
mov ecx, dword [ebp - 0x20]
mov ecx, dword [ebp + ecx*4 - 0xc34]
mov dword [eax], ecx
inc dword [ebp - 0x20]
lea ecx, [ebp - 0x6e8]
push ebx
cmp dword [ebp - 0x20], esi
jle 0x1000dc16
call fcn.1000c297
lea ecx, [ebp - 0x6e8]
mov eax, dword [eax]
mov dword [ebp - 0x20], eax
or eax, 0xffffffff
mov dword [ebp - 4], eax
call fcn.1000c27b
mov dword [ebp - 0x20], ebx
xor eax, eax
mov dword [ebp - 0x1c], 0xbc6e5c7a
mov dword [ebp - 0x44], 0xeea53061
mov dword [ebp - 0x44], esi
mov dword [ebp - 0x50], 0xec299e88
mov dword [ebp - 0x34], eax
mov byte [ebp - 0x2d], al
cmp byte [ebp - 0x2d], al
je 0x1000dc90
push 0xb13
push eax
push eax
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call edi
mov eax, dword [ebp - 0x1c]
xor edx, edx
mov dword [ebp - 0x44], 0x401d1b98
mov eax, dword [ebp - 0x44]
add eax, 0x1cfae141
mov dword [ebp - 0x44], eax
mov ecx, dword [ebp - 0x44]
add ecx, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x1c]
cmp ecx, eax
mov eax, dword [ebp - 0x1c]
setg dl
xor ecx, ecx
cmp edx, eax
mov eax, 0xb445acee
push 4
setge cl
cmp eax, ecx
lea ecx, [ebp - 0xb70]
sbb eax, eax
inc eax
mov dword [ebp - 0x50], eax
mov eax, dword [ebp - 0x50]
cmp dword [ebp - 0x50], 0xf7c629c4
sbb eax, eax
neg eax
mov dword [ebp - 0x34], eax
pop eax
mov dword [ebp - 0x4c], eax
or eax, 0xffffffff
mov dword [ebp - 0x4c], eax
mov dword [ebp - 0x50], 0xddd1d8f8
mov dword [ebp - 0x44], 0x5165352f
push esi
call fcn.1000c1f9
lea eax, [ebp - 0xff0]
mov dword [ebp - 4], 0xf
movdqa xmm0, xmmword [0x10008240]
lea ecx, [ebp - 0x136c]
push eax
lea eax, [ebp - 0x1000]
push eax
movdqu xmmword [ebp - 0x1000], xmm0
call fcn.1000c2a9
lea ecx, [ebp - 0x19c]
mov esi, eax
call fcn.1000c2a6
push eax
push dword [esi + 4]
lea ecx, [ebp - 0x4dc]
push dword [esi]
call fcn.1000c255
push 2
pop edi
push edi
lea ecx, [ebp - 0xf78]
mov byte [ebp - 4], 0x10
call fcn.1000c1f9
xor eax, eax
mov byte [ebp - 4], 0x11
push 3
mov dword [ebp - 0x10], eax
pop esi
cmp dword [ebp - 0x10], esi
jge 0x1000dd93
push dword [ebp - 0x10]
lea ecx, [ebp - 0xb70]
call fcn.1000c297
mov dword [eax], 0xbb2c2135
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], esi
jl 0x1000dd75
xor eax, eax
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], edi
jge 0x1000ddb9
push dword [ebp - 0x10]
lea ecx, [ebp - 0xf78]
call fcn.1000c297
mov dword [eax], 0xbdbdf7c
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], edi
jl 0x1000dd9b
xor eax, eax
push eax
lea ecx, [ebp - 0x4dc]
call fcn.1000c297
mov dword [eax], edi
jmp 0x1000de7f
push esi
lea ecx, [ebp - 0x358]
call fcn.1000c1f9
xor eax, eax
mov byte [ebp - 4], 0x12
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], esi
jge 0x1000de04
push dword [ebp - 0x14]
lea ecx, [ebp - 0x358]
call fcn.1000c297
mov dword [eax], 0x10f7a73
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], esi
jl 0x1000dde6
xor eax, eax
push eax
lea ecx, [ebp - 0x358]
call fcn.1000c297
and dword [eax], 0
jmp 0x1000de33
xor eax, eax
mov dword [ebp - 0x34], 0x43ac
push eax
lea ecx, [ebp - 0x358]
mov dword [ebp - 0x34], 0x5021c3a2
call fcn.1000c297
inc dword [eax]
xor eax, eax
lea ecx, [ebp - 0x358]
push eax
call fcn.1000c297
cmp dword [eax], edi
jle 0x1000de15
xor eax, eax
lea ecx, [ebp - 0x4dc]
push eax
call fcn.1000c297
lea ecx, [ebp - 0xb70]
push dword [eax]
call fcn.1000c297
lea ecx, [ebp - 0x358]
mov byte [ebp - 4], 0x11
call fcn.1000c27b
xor eax, eax
lea ecx, [ebp - 0x4dc]
push eax
call fcn.1000c297
dec dword [eax]
xor eax, eax
lea ecx, [ebp - 0x4dc]
push eax
call fcn.1000c297
cmp dword [eax], 0
jge 0x1000ddcc
lea ecx, [ebp - 0xf78]
call fcn.1000c27b
lea ecx, [ebp - 0x4dc]
call fcn.1000c27b
or eax, 0xffffffff
lea ecx, [ebp - 0xb70]
mov dword [ebp - 4], eax
call fcn.1000c27b
mov dword [ebp - 0x44], 0x516a205b
lea ecx, [ebp - 0xd68]
or eax, 0xffffffff
mov dword [ebp - 0x4c], eax
mov dword [ebp - 0x14], eax
mov dword [ebp - 0x4c], 0x9c3d069f
mov dword [ebp - 0x4c], eax
mov dword [ebp - 0x54], eax
mov dword [ebp - 0x4c], 0x6c21
mov dword [ebp - 0x34], eax
push edi
call fcn.1000c1f9
mov dword [ebp - 4], 0x13
xor eax, eax
mov dword [ebp - 0x2c], eax
or ecx, 0xffffffff
mov dword [ebp - 0x48], 5
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 0x3c], 0x1dc6
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], edi
jge 0x1000df32
push dword [ebp - 0x20]
lea ecx, [ebp - 0xd68]
call fcn.1000c297
mov dword [eax], ebx
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], edi
jl 0x1000df18
xor eax, eax
mov dword [ebp - 0x20], 0x19
jmp 0x1000df6d
mov byte [ebp - 0x2d], al
cmp byte [ebp - 0x2d], 0
je 0x1000df58
push 0x16f8
push eax
push eax
push 0x1f09
call dword [sym.imp.USER32.dll_SetWindowsHookExA]
xor eax, eax
mov byte [ebp - 0x2d], al
cmp byte [ebp - 0x2d], 0
je 0x1000df6a
push eax
call dword [sym.imp.GDI32.dll_DeleteObject]
xor eax, eax
dec dword [ebp - 0x20]
cmp dword [ebp - 0x20], 0xffffffe9
jl 0x1000df3b
mov eax, dword [ebp - 0x48]
mov dword [ebp - 0x44], eax
mov eax, dword [ebp - 0x44]
mov dword [ebp - 0x44], eax
mov eax, dword [ebp - 0x34]
imul eax, dword [ebp - 0x14]
cmp dword [ebp - 0x44], eax
jne 0x1000df97
mov eax, dword [ebp - 0x3c]
cmp dword [ebp - 0x48], eax
je 0x1000df97
mov eax, ebx
jmp 0x1000df99
xor eax, eax
cmp eax, dword [ebp - 0x2c]
jle 0x1000dfa1
mov eax, dword [ebp - 0x54]
inc dword [ebp - 0x1c]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x50]
sub eax, 0x281c3dc7
push 0xfffffffffffffff7
pop ecx
cmp eax, 0xd5eb
je 0x1000dfd6
mov dword [ebp - 0x44], ecx
mov dword [ebp - 0x14], 0x15
jmp 0x1000dfce
mov eax, dword [ebp - 0x44]
mov dword [ebp - 0x44], eax
dec dword [ebp - 0x14]
cmp dword [ebp - 0x14], 0xfffffff3
je 0x1000dfc5
jmp 0x1000dff6
xor eax, eax
mov byte [ebp - 0x2d], al
cmp byte [ebp - 0x2d], al
je 0x1000dff6
push 0x829
push eax
push eax
push eax
push eax
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.SHELL32.dll_ShellExecuteW]
or eax, 0xffffffff
lea ecx, [ebp - 0xd68]
mov dword [ebp - 4], eax
call fcn.1000c27b
mov dword [ebp - 0x40], 0xd6c05baf
mov dword [ebp - 0x14], 0xcea5d6c0
mov dword [ebp - 0x34], 0x307d7c11
mov dword [ebp - 0x14], 0xfffffff5
jmp 0x1000e047
mov dword [ebp - 0x34], 0xc5534bf8
cmp dword [ebp - 0x14], eax
jne 0x1000e038
mov ecx, eax
cmp dword [ebp - 0x34], eax
je 0x1000e03a
mov ecx, ebx
xor eax, eax
test ecx, ecx
sets al
mov dword [ebp - 0x34], eax
dec dword [ebp - 0x14]
xor eax, eax
cmp dword [ebp - 0x14], 0xffffffe4
jle 0x1000e025
mov byte [ebp - 0x2d], al
cmp byte [ebp - 0x2d], al
je 0x1000e06d
push 0x1f20
push eax
push 0x121a
push 0x17ee
call dword [sym.imp.USER32.dll_SystemParametersInfoA]
mov dword [ebp - 0x10], 0x7e2799ac
lea ecx, [ebp - 0xea4]
mov dword [ebp - 0x4c], 0xf59172dd
mov dword [ebp - 0x4c], 0xbbb66efe
mov dword [ebp - 0x4c], 0xe7374489
mov dword [ebp - 0x4c], 0x11b55e97
push ebx
call fcn.1000c1f9
mov dword [ebp - 4], 0x14
xor eax, eax
mov dword [ebp - 0x54], 0x57cf
mov dword [ebp - 0x14], eax
jmp 0x1000e0c8
push dword [ebp - 0x14]
lea ecx, [ebp - 0xea4]
call fcn.1000c297
mov dword [eax], 0x8214d2fc
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], ebx
jl 0x1000e0b1
mov dword [ebp - 0x10], 0x1a
jmp 0x1000e183
mov dword [ebp - 0x48], 0xb5c6f8b8
xor edx, edx
mov dword [ebp - 0x44], 0xb0bb8bff
mov dword [ebp - 0x34], 0xfffffffa
mov dword [ebp - 0x4c], eax
mov dword [ebp - 0x4c], 0xeab3ae5d
mov dword [ebp - 0x4c], eax
mov ecx, dword [ebp - 0x48]
mov eax, dword [ebp - 0x10]
cmp eax, ecx
setg dl
xor eax, eax
mov dword [ebp - 0x44], edx
cmp dword [ebp - 0x44], eax
je 0x1000e132
mov eax, dword [ebp - 0x10]
mov eax, dword [ebp - 0x48]
mov eax, dword [ebp - 0x10]
sub eax, dword [ebp - 0x10]
neg eax
sbb eax, eax
inc eax
add eax, edi
jne 0x1000e12c
cmp dword [ebp - 0x10], eax
je 0x1000e130
mov ecx, ebx
jmp 0x1000e134
xor eax, eax
mov ecx, eax
xor eax, eax
cmp ecx, 0xffff
push 0xfffffffffffffffc
sete al
xor ecx, ecx
cmp eax, 0xb44a
mov eax, dword [ebp - 0x10]
setl cl
xor edx, edx
cmp ecx, eax
mov eax, dword [ebp - 0x10]
setg dl
xor ecx, ecx
cmp edx, eax
pop eax
setg cl
cmp eax, ecx
sbb eax, eax
xor ecx, ecx
inc eax
cmp eax, 0xe283
setne cl
xor eax, eax
cmp ecx, 0xcf45
setge al
mov dword [ebp - 0x34], eax
dec dword [ebp - 0x54]
dec dword [ebp - 0x10]
or eax, 0xffffffff
cmp dword [ebp - 0x10], 7
je 0x1000e0d9
lea ecx, [ebp - 0xea4]
mov dword [ebp - 4], eax
call fcn.1000c27b
mov dword [ebp - 0x38], 9
xor eax, eax
mov dword [ebp - 0x44], 0x76d9935f
mov dword [ebp - 0x14], eax
jmp 0x1000e1c4
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x24c], 0xa885
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], ebx
jl 0x1000e1b3
mov eax, dword [ebp - 0x38]
mov dword [ebp - 0x38], eax
xor eax, eax
mov dword [ebp - 0x38], eax
cmp dword [ebp - 0x38], 0x19
jg 0x1000e2e7
push 0xfffffffffffffffd
pop ecx
mov dword [ebp - 0x28], 0xdba33992
mov dword [ebp - 0x34], ecx
mov dword [ebp - 0x44], 0xbee6daba
mov dword [ebp - 0x28], eax
cmp dword [ebp - 0x28], 0xfffffffe
jl 0x1000e2da
mov dword [ebp - 0x10], ebx
or ecx, 0xffffffff
mov dword [ebp - 0x1c], 0xa4ccfd66
mov dword [ebp - 0x44], ecx
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x28]
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x28]
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x34]
cmp dword [ebp - 0x38], ecx
jg 0x1000e230
xor eax, eax
cmp dword [ebp - 0x28], eax
je 0x1000e232
mov eax, ebx
mov dword [ebp - 0x44], eax
xor ecx, ecx
mov eax, dword [ebp - 0x44]
mov eax, dword [ebp - 0x10]
test eax, eax
mov eax, dword [ebp - 0x10]
setg cl
xor edx, edx
cmp ecx, 0x604491d0
setl dl
xor ecx, ecx
cmp eax, edx
mov eax, 0xfc4f
setge cl
sub eax, ecx
je 0x1000e26b
xor eax, eax
cmp dword [ebp - 0x10], eax
je 0x1000e26d
mov eax, ebx
jmp 0x1000e26d
xor eax, eax
mov dword [ebp - 0x44], eax
xor ecx, ecx
mov eax, dword [ebp - 0x44]
cmp eax, 0xffffffff
setle cl
xor eax, eax
mov dword [ebp - 0x44], ecx
mov dword [ebp - 0x10], eax
jmp 0x1000e2c3
mov dword [ebp - 0x3c], 0x2658
xor ecx, ecx
mov eax, dword [ebp - 0x10]
mov eax, dword [ebp - 0x3c]
mov eax, dword [ebp - 0x24c]
cmp eax, 0xbdae1919
push 0xfffffffffffffffd
setne cl
pop eax
cmp eax, ecx
mov eax, dword [ebp - 0x10]
sbb edx, edx
xor ecx, ecx
inc edx
mov eax, dword [ebp + eax*4 - 0x24c]
cmp eax, edx
setge cl
mov dword [ebp - 0x44], ecx
inc dword [ebp - 0x10]
xor eax, eax
cmp dword [ebp - 0x10], eax
jle 0x1000e285
dec dword [ebp - 0x28]
cmp dword [ebp - 0x28], 0xfffffffe
jge 0x1000e1ff
push 0xfffffffffffffffd
xor eax, eax
pop ecx
inc dword [ebp - 0x38]
cmp dword [ebp - 0x38], 0x19
jle 0x1000e1e1
mov dword [ebp - 0x40], eax
cmp dword [ebp - 0x40], 0xffffffe9
jl 0x1000e984
push edi
lea ecx, [ebp - 0x274]
call fcn.1000c1f9
push 0xfffffffffffffffd
pop eax
mov dword [ebp - 4], 0x15
lea ecx, [ebp - 0x930]
mov dword [ebp - 0x20], eax
mov dword [ebp - 0x34], 0xbc6e5c7a
push ebx
call fcn.1000c1f9
xor eax, eax
mov byte [ebp - 4], 0x16
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], edi
jge 0x1000e34c
push dword [ebp - 0x10]
lea ecx, [ebp - 0x274]
call fcn.1000c297
mov dword [eax], 0x5c68ec0a
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], edi
jl 0x1000e32e
xor eax, eax
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], ebx
jge 0x1000e36f
push dword [ebp - 0x10]
lea ecx, [ebp - 0x930]
call fcn.1000c297
and dword [eax], 0
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], ebx
jl 0x1000e354
xor eax, eax
push eax
lea ecx, [ebp - 0x274]
call fcn.1000c297
mov dword [eax], 0xfffffffe
jmp 0x1000e3b3
xor eax, eax
mov dword [ebp - 0x44], 0x74aa
mov byte [ebp - 0x2d], al
cmp byte [ebp - 0x2d], al
je 0x1000e3a2
push 0x110
push eax
call dword [sym.imp.USER32.dll_CharLowerBuffW]
xor eax, eax
inc dword [ebp - 0x44]
lea ecx, [ebp - 0x274]
push eax
call fcn.1000c297
inc dword [eax]
xor eax, eax
lea ecx, [ebp - 0x274]
push eax
call fcn.1000c297
cmp dword [eax], 0
jge 0x1000e383
mov dword [ebp - 0x20], 5
cmp dword [ebp - 0x20], 8
jg 0x1000e4c2
xor eax, eax
mov dword [ebp - 0x14], 0xcee61780
mov dword [ebp - 0x44], 0x2628217c
lea ecx, [ebp - 0x274]
mov dword [ebp - 0x48], 0xfe44fa3f
push eax
call fcn.1000c297
xor ebx, ebx
cmp dword [eax], ebx
mov eax, dword [ebp - 0x44]
setne bl
xor ecx, ecx
cmp eax, 0x5922
setg cl
xor edx, edx
add ecx, dword [ebp - 0x14]
cmp ecx, 0xfffffff8
setle dl
sub edx, dword [ebp - 0x14]
mov eax, dword [ebp - 0x14]
neg edx
sbb edx, edx
xor ecx, ecx
inc edx
cmp edx, eax
mov eax, dword [ebp - 0x14]
setge cl
cmp ecx, 0xfffd
sbb edx, edx
xor ecx, ecx
inc edx
neg edx
cmp eax, edx
setne cl
xor eax, eax
cmp ecx, dword [ebp - 0x44]
jle 0x1000e451
cmp dword [ebp - 0x34], eax
je 0x1000e451
xor edx, edx
inc edx
jmp 0x1000e453
mov edx, eax
mov eax, dword [ebp - 0x20]
xor ecx, ecx
cmp edx, eax
mov eax, dword [ebp - 0x48]
setle cl
xor edx, edx
cmp ecx, eax
setl dl
sub edx, dword [ebp - 0x48]
mov eax, dword [ebp - 0x14]
neg edx
sbb edx, edx
xor ecx, ecx
inc edx
imul edx, ebx
cmp edx, eax
setle cl
cmp ecx, dword [ebp - 0x20]
jl 0x1000e49d
xor eax, eax
lea ecx, [ebp - 0x930]
push eax
call fcn.1000c297
cmp dword [eax], 0
je 0x1000e49d
xor ebx, ebx
inc ebx
xor eax, eax
mov esi, ebx
jmp 0x1000e4a4
xor eax, eax
xor ebx, ebx
mov esi, eax
inc ebx
push eax
lea ecx, [ebp - 0x274]
call fcn.1000c297
mov dword [eax], esi
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], 8
jle 0x1000e3d7
push 3
pop esi
lea ecx, [ebp - 0x930]
call fcn.1000c27b
or eax, 0xffffffff
lea ecx, [ebp - 0x274]
mov dword [ebp - 4], eax
call fcn.1000c27b
mov dword [ebp - 0x48], 0x7543
xor eax, eax
mov dword [ebp - 0x20], 0xe83c7730
mov dword [ebp - 0x34], 0xa5223fa3
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], esi
jge 0x1000e515
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x1188], 0xffff
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], esi
jl 0x1000e4fd
xor eax, eax
mov dword [ebp - 0x20], edi
cmp dword [ebp - 0x20], eax
jl 0x1000e5c5
jmp 0x1000e525
xor eax, eax
mov dword [ebp - 0x1c], eax
lea ecx, [ebp - 0xa80]
push esi
call fcn.1000c1f9
xor eax, eax
mov dword [ebp - 4], 0x17
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], esi
jge 0x1000e563
push dword [ebp - 0x14]
lea ecx, [ebp - 0xa80]
call fcn.1000c297
mov dword [eax], 0x580d416d
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], esi
jl 0x1000e545
xor eax, eax
mov dword [ebp - 0x1c], edi
cmp dword [ebp - 0x1c], eax
jl 0x1000e5ab
mov dword [ebp - 0x14], eax
jmp 0x1000e57d
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0xe38], edi
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], edi
jl 0x1000e570
mov eax, dword [ebp - 0x20]
lea ecx, [ebp - 0xa80]
push edi
mov esi, dword [ebp + eax*4 - 0x1188]
mov dword [ebp - 0xe34], esi
call fcn.1000c297
push 0
mov dword [eax], esi
dec dword [ebp - 0x1c]
pop eax
jns 0x1000e56b
push 3
pop esi
or eax, 0xffffffff
lea ecx, [ebp - 0xa80]
mov dword [ebp - 4], eax
call fcn.1000c27b
dec dword [ebp - 0x20]
jns 0x1000e523
mov dword [ebp - 0x20], esi
lea ecx, [ebp - 0x948]
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x34], eax
push esi
call fcn.1000c1f9
mov dword [ebp - 4], 0x18
mov dword [ebp - 0x14], 0xcea5d6c0
mov dword [ebp - 0x34], 0x307d7c11
mov dword [ebp - 0x14], 0xfffffff5
jmp 0x1000e61a
mov dword [ebp - 0x34], 0xc5534bf8
cmp dword [ebp - 0x14], eax
jne 0x1000e60b
mov ecx, eax
cmp dword [ebp - 0x34], eax
je 0x1000e60d
mov ecx, ebx
xor eax, eax
test ecx, ecx
sets al
mov dword [ebp - 0x34], eax
dec dword [ebp - 0x14]
xor eax, eax
cmp dword [ebp - 0x14], 0xffffffe4
jle 0x1000e5f8
mov byte [ebp - 0x2d], al
cmp byte [ebp - 0x2d], al
je 0x1000e642
push 0x1f20
push eax
push 0x121a
push 0x17ee
call dword [sym.imp.USER32.dll_SystemParametersInfoA]
xor eax, eax
mov dword [ebp - 0x34], 0x946b43d2
mov dword [ebp - 0x38], 9
mov dword [ebp - 0x44], 0x76d9935f
mov dword [ebp - 0x14], eax
jmp 0x1000e66d
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x2ac], 0xa885
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], ebx
jl 0x1000e65c
mov eax, dword [ebp - 0x38]
mov dword [ebp - 0x38], eax
xor eax, eax
mov dword [ebp - 0x38], eax
cmp dword [ebp - 0x38], 0x19
jg 0x1000e790
push 0xfffffffffffffffd
pop ecx
mov dword [ebp - 0x28], 0xdba33992
mov dword [ebp - 0x34], ecx
mov dword [ebp - 0x44], 0xbee6daba
mov dword [ebp - 0x28], eax
cmp dword [ebp - 0x28], 0xfffffffe
jl 0x1000e783
mov dword [ebp - 0x10], ebx
or ecx, 0xffffffff
mov dword [ebp - 0x1c], 0xa4ccfd66
mov dword [ebp - 0x44], ecx
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x28]
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x28]
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x34]
cmp dword [ebp - 0x38], ecx
jg 0x1000e6d9
xor eax, eax
cmp dword [ebp - 0x28], eax
je 0x1000e6db
mov eax, ebx
mov dword [ebp - 0x44], eax
xor ecx, ecx
mov eax, dword [ebp - 0x44]
mov eax, dword [ebp - 0x10]
test eax, eax
mov eax, dword [ebp - 0x10]
setg cl
xor edx, edx
cmp ecx, 0x604491d0
setl dl
xor ecx, ecx
cmp eax, edx
mov eax, 0xfc4f
setge cl
sub eax, ecx
je 0x1000e714
xor eax, eax
cmp dword [ebp - 0x10], eax
je 0x1000e716
mov eax, ebx
jmp 0x1000e716
xor eax, eax
mov dword [ebp - 0x44], eax
xor ecx, ecx
mov eax, dword [ebp - 0x44]
cmp eax, 0xffffffff
setle cl
xor eax, eax
mov dword [ebp - 0x44], ecx
mov dword [ebp - 0x10], eax
jmp 0x1000e76c
mov dword [ebp - 0x3c], 0x2658
xor ecx, ecx
mov eax, dword [ebp - 0x10]
mov eax, dword [ebp - 0x3c]
mov eax, dword [ebp - 0x2ac]
cmp eax, 0xbdae1919
push 0xfffffffffffffffd
setne cl
pop eax
cmp eax, ecx
mov eax, dword [ebp - 0x10]
sbb edx, edx
xor ecx, ecx
inc edx
mov eax, dword [ebp + eax*4 - 0x2ac]
cmp eax, edx
setge cl
mov dword [ebp - 0x44], ecx
inc dword [ebp - 0x10]
xor eax, eax
cmp dword [ebp - 0x10], eax
jle 0x1000e72e
dec dword [ebp - 0x28]
cmp dword [ebp - 0x28], 0xfffffffe
jge 0x1000e6a8
push 0xfffffffffffffffd
xor eax, eax
pop ecx
inc dword [ebp - 0x38]
cmp dword [ebp - 0x38], 0x19
jle 0x1000e68a
push edi
lea ecx, [ebp - 0x3b8]
call fcn.1000c1f9
mov byte [ebp - 4], 0x19
or eax, 0xffffffff
mov dword [ebp - 0x34], eax
xor eax, eax
mov dword [ebp - 0x3c], 0xaae0
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], edi
jge 0x1000e7cf
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0x7ec], 0x3a18e418
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], edi
jl 0x1000e7b7
xor eax, eax
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], edi
jge 0x1000e7f5
push dword [ebp - 0x10]
lea ecx, [ebp - 0x3b8]
call fcn.1000c297
mov dword [eax], 0xb58e17c1
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], edi
jl 0x1000e7d7
xor eax, eax
push eax
lea ecx, [ebp - 0x3b8]
call fcn.1000c297
mov eax, dword [ebp - 0x7e8]
lea ecx, [ebp - 0x3b8]
mov dword [ebp - 0x7e8], eax
xor eax, eax
push eax
call fcn.1000c297
push ebx
lea ecx, [ebp - 0x3b8]
call fcn.1000c297
xor eax, eax
lea ecx, [ebp - 0x3b8]
push eax
call fcn.1000c297
push ebx
lea ecx, [ebp - 0x3b8]
call fcn.1000c297
mov ecx, dword [ebp - 0x34]
inc ecx
neg ecx
mov dword [eax], ebx
sbb ecx, ecx
xor eax, eax
neg ecx
cmp ecx, ebx
lea ecx, [ebp - 0x3b8]
sete al
mov dword [ebp - 0x3c], eax
mov byte [ebp - 4], 0x18
call fcn.1000c27b
xor eax, eax
mov dword [ebp - 0x14], eax
jmp 0x1000e881
push dword [ebp - 0x14]
lea ecx, [ebp - 0x948]
call fcn.1000c297
and dword [eax], 0
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], esi
jl 0x1000e86d
mov eax, 0x2d5e48d3
lea ecx, [ebp - 0x7a8]
mov dword [ebp - 0xc14], eax
mov dword [ebp - 0xc10], eax
mov dword [ebp - 0xc0c], eax
mov dword [ebp - 0xc08], eax
mov dword [ebp - 0x20], 0x52061f6
push edi
call fcn.1000c1f9
xor eax, eax
mov byte [ebp - 4], 0x1a
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], edi
jge 0x1000e8e2
push dword [ebp - 0x14]
lea ecx, [ebp - 0x7a8]
call fcn.1000c297
mov dword [eax], 0x5b40194
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], edi
jl 0x1000e8c4
xor eax, eax
mov dword [ebp - 0x20], eax
jmp 0x1000e8fb
call fcn.1000c297
mov ecx, dword [ebp - 0x20]
mov ecx, dword [ebp + ecx*4 - 0xc14]
mov dword [eax], ecx
inc dword [ebp - 0x20]
lea ecx, [ebp - 0x7a8]
push ebx
cmp dword [ebp - 0x20], esi
jle 0x1000e8e7
call fcn.1000c297
lea ecx, [ebp - 0x7a8]
mov eax, dword [eax]
mov dword [ebp - 0x20], eax
mov byte [ebp - 4], 0x18
call fcn.1000c27b
mov eax, dword [ebp - 0x48]
xor edx, edx
cmp eax, 0x1188
setle dl
xor ecx, ecx
sub edx, dword [ebp - 0x40]
mov eax, dword [ebp - 0x40]
cmp edx, eax
setg cl
xor eax, eax
cmp ecx, 0x7fa3
setl al
add eax, dword [ebp - 0x48]
jne 0x1000e95f
push eax
lea ecx, [ebp - 0x948]
call fcn.1000c297
cmp dword [eax], 0
jne 0x1000e95f
xor eax, eax
jmp 0x1000e961
mov eax, ebx
mov dword [ebp - 0x34], eax
lea ecx, [ebp - 0x948]
or eax, 0xffffffff
mov dword [ebp - 4], eax
call fcn.1000c27b
dec dword [ebp - 0x40]
cmp dword [ebp - 0x40], 0xffffffe9
jge 0x1000e2f4
xor eax, eax
mov ecx, 0xc29a3df6
mov edx, 0x773672d7
mov dword [ebp - 0x44], ecx
mov dword [ebp - 0x48], 0xffffffff
mov dword [ebp - 0x54], edx
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], ebx
jge 0x1000e9b7
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0x628], ebx
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], ebx
jl 0x1000e9a3
xor eax, eax
mov dword [ebp - 0x10], eax
jmp 0x1000e9cd
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0x129c], 0xe0091df8
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], edi
jl 0x1000e9bc
mov eax, dword [ebp - 0x44]
sub eax, dword [ebp - 0x44]
neg eax
sbb eax, eax
inc eax
mov dword [ebp - 0x48], eax
mov eax, dword [ebp - 0x48]
mov dword [ebp - 0x628], eax
xor eax, eax
dec dword [ebp - 0x54]
mov dword [ebp - 0x44], ecx
or ecx, 0xffffffff
mov dword [ebp - 0x48], ecx
mov dword [ebp - 0x54], edx
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], ebx
jge 0x1000ea16
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0x54c], ebx
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], ebx
jl 0x1000ea02
xor eax, eax
mov dword [ebp - 0x10], eax
jmp 0x1000ea2c
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0x12d4], 0xe0091df8
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], edi
jl 0x1000ea1b
mov eax, dword [ebp - 0x44]
mov esi, 0x5f5c184c
sub eax, dword [ebp - 0x44]
neg eax
push 0xfffffffffffffffd
sbb eax, eax
inc eax
mov dword [ebp - 0x48], eax
mov eax, dword [ebp - 0x48]
mov dword [ebp - 0x54c], eax
dec dword [ebp - 0x54]
mov dword [ebp - 0x1c], esi
mov dword [ebp - 0x44], ebx
mov dword [ebp - 0x34], ecx
pop eax
mov dword [ebp - 0x4c], 0xe5316d00
mov dword [ebp - 0x3c], eax
xor eax, eax
push 4
mov dword [ebp - 0x14], eax
pop ecx
jmp 0x1000ea81
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x1424], 0x50041ac5
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], ecx
jl 0x1000ea70
mov eax, dword [ebp - 0x34]
xor ecx, ecx
mov edi, dword [sym.imp.OLEAUT32.dll_SysStringLen]
neg eax
cmp eax, 0xb545
push 0x12
setne cl
pop eax
sub eax, ecx
add eax, dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], eax
jg 0x1000eabe
xor eax, eax
mov byte [ebp - 0x2d], al
cmp byte [ebp - 0x2d], al
je 0x1000ebaa
push eax
call edi
jmp 0x1000eba8
mov dword [ebp - 0x4c], 0x7f45a323
lea ecx, [ebp - 0xb28]
push ebx
call fcn.1000c1f9
xor eax, eax
mov dword [ebp - 4], 0x1b
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], ebx
jge 0x1000eafa
mov eax, dword [ebp - 0x24]
mov dword [ebp + eax*4 - 0x250], 0x1465ee6d
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], ebx
jl 0x1000eae2
xor eax, eax
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 2
jge 0x1000eb1c
mov eax, dword [ebp - 0x24]
mov dword [ebp + eax*4 - 0xcac], 0xfffffffc
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], 2
jl 0x1000eb03
xor eax, eax
mov dword [ebp - 0x24], eax
jmp 0x1000eb38
push dword [ebp - 0x24]
lea ecx, [ebp - 0xb28]
call fcn.1000c297
mov dword [eax], 9
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], ebx
jl 0x1000eb21
mov eax, dword [ebp - 0x44]
xor edx, edx
cmp eax, ebx
mov eax, dword [ebp - 0x250]
setle dl
xor ecx, ecx
cmp edx, eax
setg cl
cmp ecx, 0x4640
jle 0x1000eb68
xor eax, eax
mov ecx, eax
cmp dword [ebp - 0x250], eax
je 0x1000eb6a
mov ecx, ebx
mov eax, dword [ebp - 0x44]
neg ecx
xor ebx, ebx
cmp ecx, eax
lea ecx, [ebp - 0xb28]
setl bl
xor eax, eax
mov dword [ebp - 0xcac], ebx
push eax
call fcn.1000c297
lea ecx, [ebp - 0xb28]
mov dword [eax], ebx
mov eax, dword [ebp - 0x1c]
add eax, ebx
mov dword [ebp - 0x3c], eax
or eax, 0xffffffff
mov dword [ebp - 4], eax
call fcn.1000c27b
xor ebx, ebx
inc ebx
xor eax, eax
mov dword [ebp - 0x1c], esi
or esi, 0xffffffff
push 0xfffffffffffffffd
mov dword [ebp - 0x44], ebx
pop ecx
mov dword [ebp - 0x34], esi
mov dword [ebp - 0x4c], 0xe5316d00
mov dword [ebp - 0x3c], ecx
push 4
mov dword [ebp - 0x14], eax
pop ecx
jmp 0x1000ebdc
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x1404], 0x50041ac5
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], ecx
jl 0x1000ebcb
mov eax, dword [ebp - 0x34]
xor ecx, ecx
neg eax
cmp eax, 0xb545
push 0x12
setne cl
pop eax
sub eax, ecx
add eax, dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], eax
jg 0x1000ec13
xor eax, eax
mov byte [ebp - 0x2d], al
cmp byte [ebp - 0x2d], al
je 0x1000ecfc
push eax
call edi
jmp 0x1000ecfa
mov dword [ebp - 0x4c], 0x7f45a323
lea ecx, [ebp - 0x960]
push ebx
call fcn.1000c1f9
xor eax, eax
mov dword [ebp - 4], 0x1c
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], ebx
jge 0x1000ec4f
mov eax, dword [ebp - 0x24]
mov dword [ebp + eax*4 - 0x254], 0x1465ee6d
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], ebx
jl 0x1000ec37
xor eax, eax
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 2
jge 0x1000ec71
mov eax, dword [ebp - 0x24]
mov dword [ebp + eax*4 - 0xf68], 0xfffffffc
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], 2
jl 0x1000ec58
xor eax, eax
mov dword [ebp - 0x24], eax
jmp 0x1000ec8d
push dword [ebp - 0x24]
lea ecx, [ebp - 0x960]
call fcn.1000c297
mov dword [eax], 9
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], ebx
jl 0x1000ec76
mov eax, dword [ebp - 0x44]
xor edx, edx
cmp eax, ebx
mov eax, dword [ebp - 0x254]
setle dl
xor ecx, ecx
cmp edx, eax
setg cl
cmp ecx, 0x4640
jle 0x1000ecbd
xor eax, eax
mov ecx, eax
cmp dword [ebp - 0x254], eax
je 0x1000ecbf
mov ecx, ebx
mov eax, dword [ebp - 0x44]
neg ecx
xor ebx, ebx
cmp ecx, eax
lea ecx, [ebp - 0x960]
setl bl
xor eax, eax
mov dword [ebp - 0xf68], ebx
push eax
call fcn.1000c297
lea ecx, [ebp - 0x960]
mov dword [eax], ebx
mov eax, dword [ebp - 0x1c]
add eax, ebx
mov dword [ebp - 0x3c], eax
mov dword [ebp - 4], esi
call fcn.1000c27b
xor ebx, ebx
inc ebx
xor eax, eax
mov dword [ebp - 0x1c], 0xbc6e5c7a
mov dword [ebp - 0x44], 0xeea53061
push 3
pop esi
mov dword [ebp - 0x44], esi
mov dword [ebp - 0x50], 0xec299e88
mov dword [ebp - 0x34], eax
mov byte [ebp - 0x2d], al
cmp byte [ebp - 0x2d], 0
je 0x1000ed3e
push 0xb13
push eax
push eax
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_PolyPolyline]
mov eax, dword [ebp - 0x1c]
xor edx, edx
mov dword [ebp - 0x44], 0x401d1b98
mov eax, dword [ebp - 0x44]
add eax, 0x1cfae141
mov dword [ebp - 0x44], eax
mov ecx, dword [ebp - 0x44]
add ecx, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x1c]
cmp ecx, eax
mov eax, dword [ebp - 0x1c]
setg dl
xor ecx, ecx
cmp edx, eax
mov eax, 0xb445acee
push esi
setge cl
cmp eax, ecx
lea ecx, [ebp - 0xa98]
sbb eax, eax
inc eax
mov dword [ebp - 0x50], eax
mov eax, dword [ebp - 0x50]
cmp dword [ebp - 0x50], 0xf7c629c4
sbb eax, eax
neg eax
mov dword [ebp - 0x34], eax
call fcn.1000c1f9
lea eax, [ebp - 0x10b0]
mov dword [ebp - 4], 0x1d
movdqa xmm0, xmmword [0x10008240]
lea ecx, [ebp - 0x1384]
push eax
lea eax, [ebp - 0x10c0]
push eax
movdqu xmmword [ebp - 0x10c0], xmm0
call fcn.1000c2a9
lea ecx, [ebp - 0x181]
mov esi, eax
call fcn.1000c2a6
push eax
push dword [esi + 4]
lea ecx, [ebp - 0x4f4]
push dword [esi]
call fcn.1000c255
push 2
pop esi
push esi
lea ecx, [ebp - 0xd80]
mov byte [ebp - 4], 0x1e
call fcn.1000c1f9
xor eax, eax
mov byte [ebp - 4], 0x1f
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], 3
jge 0x1000ee26
push dword [ebp - 0x10]
lea ecx, [ebp - 0xa98]
call fcn.1000c297
mov dword [eax], 0xbb2c2135
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], 3
jl 0x1000ee07
xor eax, eax
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], esi
jge 0x1000ee4c
push dword [ebp - 0x10]
lea ecx, [ebp - 0xd80]
call fcn.1000c297
mov dword [eax], 0xbdbdf7c
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], esi
jl 0x1000ee2e
xor eax, eax
push eax
lea ecx, [ebp - 0x4f4]
call fcn.1000c297
mov dword [eax], esi
jmp 0x1000ef15
push 3
lea ecx, [ebp - 0x370]
call fcn.1000c1f9
xor eax, eax
mov byte [ebp - 4], 0x20
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 3
jge 0x1000ee9a
push dword [ebp - 0x14]
lea ecx, [ebp - 0x370]
call fcn.1000c297
mov dword [eax], 0x10f7a73
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], 3
jl 0x1000ee7b
xor eax, eax
push eax
lea ecx, [ebp - 0x370]
call fcn.1000c297
and dword [eax], 0
jmp 0x1000eec9
xor eax, eax
mov dword [ebp - 0x34], 0x43ac
push eax
lea ecx, [ebp - 0x370]
mov dword [ebp - 0x34], 0x5021c3a2
call fcn.1000c297
inc dword [eax]
xor eax, eax
lea ecx, [ebp - 0x370]
push eax
call fcn.1000c297
cmp dword [eax], esi
jle 0x1000eeab
xor eax, eax
lea ecx, [ebp - 0x4f4]
push eax
call fcn.1000c297
lea ecx, [ebp - 0xa98]
push dword [eax]
call fcn.1000c297
lea ecx, [ebp - 0x370]
mov byte [ebp - 4], 0x1f
call fcn.1000c27b
xor eax, eax
lea ecx, [ebp - 0x4f4]
push eax
call fcn.1000c297
dec dword [eax]
xor eax, eax
lea ecx, [ebp - 0x4f4]
push eax
call fcn.1000c297
cmp dword [eax], 0
jge 0x1000ee5f
lea ecx, [ebp - 0xd80]
call fcn.1000c27b
lea ecx, [ebp - 0x4f4]
call fcn.1000c27b
or eax, 0xffffffff
lea ecx, [ebp - 0xa98]
mov dword [ebp - 4], eax
call fcn.1000c27b
mov dword [ebp - 0x54], 0xc29a3df6
or eax, 0xffffffff
mov dword [ebp - 0x10], 0x6ff5
mov dword [ebp - 0x20], 0x6fc6088b
mov dword [ebp - 0x44], eax
xor eax, eax
mov dword [ebp - 0x34], 0x32955f1b
mov dword [ebp - 0x14], eax
jmp 0x1000ef8d
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x5fc], 0xb6ce1a81
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], ebx
jl 0x1000ef7c
mov eax, dword [ebp - 0x10]
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x10]
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x10]
mov edx, dword [ebp - 0x10]
mov eax, dword [ebp - 0x44]
dec edx
neg edx
sbb edx, edx
xor ecx, ecx
inc edx
cmp edx, eax
mov eax, dword [ebp - 0x10]
setge cl
xor edx, edx
cmp ecx, eax
mov eax, dword [ebp - 0x10]
setg dl
xor ecx, ecx
cmp eax, edx
mov eax, dword [ebp - 0x20]
setl cl
xor edx, edx
cmp ecx, eax
mov eax, dword [ebp - 0x10]
setge dl
xor ebx, ebx
cmp edx, eax
mov eax, dword [ebp - 0x10]
setle bl
xor ecx, ecx
cmp eax, 0xb5ca9869
setne cl
imul ebx, ecx
mov dword [ebp - 0x5fc], ebx
mov eax, dword [ebp - 0x10]
add eax, ebx
cmp eax, dword [ebp - 0x20]
jle 0x1000f00b
xor eax, eax
cmp dword [ebp - 0x44], eax
jne 0x1000f00b
xor ebx, ebx
inc ebx
mov eax, ebx
mov dword [ebp - 0x34], eax
xor eax, eax
mov byte [ebp - 0x2d], al
cmp byte [ebp - 0x2d], al
je 0x1000f03c