Function at 0x1001f044
Capabilities:
Encode data using base64
Encode data using xor
Get file size
Query environment variable

Disassembly:
mov eax, 0x10061de6
call fcn.10060f20
sub esp, 0x6d8
push ebx
push esi
push edi
mov dword [ebp - 0x10], esp
mov dword [ebp - 0x1c], 0xe9323d1b
xor edx, edx
mov dword [ebp - 0x34], 9
inc edx
mov dword [ebp - 0x48], 0xae28de6
xor ecx, ecx
mov dword [ebp - 0x4c], 0x510afbd1
mov dword [ebp - 0x68], edx
mov dword [ebp - 0x20], 0x4679f786
mov eax, dword [ebp - 0x34]
cmp eax, 0x837a
setne cl
xor eax, eax
add ecx, 0xb0e8
cmp ecx, edx
setle al
xor ecx, ecx
mov dword [ebp - 0x48], eax
mov eax, dword [ebp - 0x48]
mov dword [ebp - 0x4c], eax
mov eax, dword [ebp - 0x4c]
add eax, 0x5378470e
cmp eax, edx
mov eax, dword [ebp - 0x34]
setg cl
xor ebx, ebx
cmp ecx, eax
mov ecx, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x1c]
setle bl
xor edx, edx
cmp ecx, eax
setge dl
imul edx, dword [ebp - 0x1c]
cmp edx, ebx
je 0x1001f0d7
mov eax, dword [ebp - 0x48]
mov eax, dword [ebp - 0x1c]
xor ebx, ebx
mov eax, dword [ebp - 0x48]
mov dword [ebp - 0x2c], 0x19b885b3
mov dword [ebp - 0x24], 0xd6158f8
mov dword [ebp - 0x18], 0x1c73
cmp dword [ebp - 0x18], 0x1d4c
jle 0x1001f161
push ebx
push ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_EnumResourceNamesW]
mov esi, ebx
mov edi, ebx
mov eax, edi
mov ecx, 0x1007cc18
xor eax, esi
cdq
push edx
push eax
call fcn.10013d0a
inc edi
cmp edi, 0x5731
jl 0x1001f10b
inc esi
cmp esi, 0x2bb
jl 0x1001f109
push 0x11bc
push 0xc31
push 0x1ac2
push 0xf01
push 0x1a10
push 0x24c3
push 0x537
push 0x1b1e
push 0x12f7
call dword [sym.imp.GDI32.dll_Arc]
mov dword [ebp - 0x28], 0x5aca64a9
mov dword [ebp - 4], ebx
cmp dword [ebp - 0x18], 0x1a8d
jge 0x1001f183
mov edx, str.uwifa_hchmnx_evzbveyl_gydipscj_sazevavcl_vnvb_lvd_dwfizo_qqxcqvda_lephcyuqq_hkwo
mov ecx, 0x1007cc18
call fcn.1001875a
or dword [ebp - 4], 0xffffffff
push 3
mov dword [ebp - 0x18], ebx
pop edi
jmp 0x1001f1c2
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x16c], 1
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], edi
jl 0x1001f1b1
mov eax, dword [ebp - 0x34]
mov eax, dword [ebp - 0x16c]
mov ecx, dword [ebp - 0x2c]
sub ecx, eax
cmp ecx, dword [ebp - 0x48]
jl 0x1001f1e0
mov eax, dword [ebp - 0x16c]
mov ecx, dword [ebp - 0x4c]
sub ecx, dword [ebp - 0x48]
mov eax, dword [ebp - 0x24]
neg ecx
sbb ecx, ecx
xor edx, edx
add ecx, 2
cmp ecx, eax
mov eax, dword [ebp - 0x48]
setle dl
xor ecx, ecx
add edx, 0x2b0a94fe
cmp edx, eax
setl cl
sub ecx, dword [ebp - 0x2c]
je 0x1001f25e
mov dword [ebp - 0x3c], 0xffffffff
xor edx, edx
mov dword [ebp - 0x44], ebx
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0x34]
mov dword [ebp - 0x4c], 0x93632cac
mov eax, 0x89e7675d
mov dword [ebp - 0x168], eax
mov dword [ebp - 0x48], eax
mov ecx, dword [ebp - 0x4c]
mov eax, dword [ebp - 0x48]
cmp ecx, eax
mov eax, dword [ebp - 0x24]
setne dl
xor ecx, ecx
cmp edx, eax
mov eax, dword [ebp - 0x3c]
setg cl
mov dword [ebp - 0x44], ecx
xor ecx, ecx
cmp dword [ebp - 0x44], eax
setg cl
mov dword [ebp - 0x44], ecx
jmp 0x1001f3cc
mov dword [ebp - 0x18], 6
mov dword [ebp - 0x2c], 0xed5c0eb
mov dword [ebp - 0x38], 1
mov dword [ebp - 0x2c], ebx
jmp 0x1001f289
mov eax, dword [ebp - 0x2c]
mov dword [ebp + eax*4 - 0x104], 0xfb40acb4
inc dword [ebp - 0x2c]
cmp dword [ebp - 0x2c], 1
jl 0x1001f278
mov dword [ebp - 0x1c], ebx
cmp dword [ebp - 0x1c], 2
jg 0x1001f3ae
push 7
pop esi
push 4
mov dword [ebp - 0x3c], 0x62155b9
mov eax, dword [ebp - 0x24]
pop ecx
sub ecx, eax
je 0x1001f2cf
mov eax, dword [ebp - 0x34]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp + eax*4 - 0x16c]
mov eax, dword [ebp - 0x18]
cmp dword [ebp - 0x28], ebx
jne 0x1001f2ca
cmp dword [ebp - 0x18], ebx
je 0x1001f2cf
xor edx, edx
inc edx
jmp 0x1001f2d1
mov edx, ebx
mov eax, dword [ebp - 0x18]
xor ecx, ecx
cmp edx, eax
setge cl
xor edx, edx
mov dword [ebp - 0x2c], ecx
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp + eax*4 - 0x16c]
mov eax, dword [ebp - 0x34]
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x104], 0xffffffff
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp + eax*4 - 0x16c]
mov eax, dword [ebp - 0x1c]
mov ecx, dword [ebp + eax*4 - 0x16c]
mov eax, dword [ebp - 0x4c]
cmp ecx, eax
mov eax, dword [ebp - 0x48]
setl dl
xor ecx, ecx
cmp edx, eax
mov eax, dword [ebp - 0x1c]
setle cl
xor edx, edx
cmp ecx, 0xedf4
setle dl
xor ecx, ecx
mov dword [ebp + eax*4 - 0x16c], edx
mov dword [ebp - 0x44], edx
mov edx, dword [ebp - 0x3c]
add edx, dword [ebp - 0x44]
imul edx, dword [ebp - 0x48]
mov eax, dword [ebp - 0x28]
cmp eax, edx
setne cl
mov dword [ebp - 0x4c], ecx
mov eax, dword [ebp - 0x4c]
mov eax, dword [ebp - 0x68]
mov eax, dword [ebp - 0x2c]
mov dword [ebp - 0x104], eax
mov eax, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x104]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x48]
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x48]
mov eax, dword [ebp - 0x48]
mov eax, dword [ebp - 0x38]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x104]
cmp esi, eax
mov eax, dword [ebp - 0x20]
sbb edx, edx
xor ecx, ecx
neg edx
cmp edx, eax
sete cl
mov dword [ebp - 0x2c], ecx
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 2
jle 0x1001f29f
push ecx
push ecx
lea eax, [ebp - 0x99]
mov byte [ebp - 0x99], bl
push eax
push 0x4e93
mov dl, 1
call fcn.1001b68d
add esp, 0x10
mov eax, dword [0x1007de60]
test al, 1
jne 0x1001f409
or eax, 1
mov dword [0x1007de60], eax
mov dword [ebp - 4], 2
mov dword [0x1007de3c], ebx
mov dword [0x1007de40], ebx
call fcn.10023bc9
push 0x10062c0d
mov dword [0x1007de3c], eax
call fcn.1004a729
or dword [ebp - 4], 0xffffffff
pop ecx
mov dword [ebp - 0x230], 0xea5d6c05
mov byte [ebp - 0x2d], bl
cmp byte [ebp - 0x2d], 0
je 0x1001f432
push ecx
push ecx
push 1
mov edx, 0xb6e
mov ecx, 0x6ee
call fcn.1001a0e2
add esp, 0xc
push ecx
push ecx
push 0x7be1
push 1
sub esp, 0xc
lea eax, [ebp - 0x230]
mov edx, 0x7817
push eax
push 0x49e6
push 0x764f
push ecx
mov ecx, 0x37f6
call fcn.1001b752
add esp, 0x2c
cmp byte [0x1007dd54], 0
je 0x1001f7e4
mov dword [ebp - 0x8c], 0xb3ae3556
mov dword [ebp - 0x2c], ebx
mov dword [ebp - 0x8c], ebx
cmp dword [ebp - 0x8c], 0xd
jge 0x1001f7bb
mov dword [ebp - 0x1c], ebx
mov dword [ebp - 0x18], 0x31eb
cmp dword [ebp - 0x18], 0x324c
jle 0x1001f544
push 0x865
push 0x1f13
push 0x1389
push 0xb50
push 0x33b
push 0x2521
call dword [sym.imp.GDI32.dll_PatBlt]
mov edi, ebx
mov dword [ebp - 0x24], ebx
mov esi, ebx
mov dword [ebp - 0x28], ebx
mov eax, edi
mov dword [ebp - 0x20], 0x3b7f
cdq
idiv esi
mov esi, edx
mov edi, ebx
mov ecx, edi
mov eax, esi
shl eax, cl
lea ecx, [ebp - 0x614]
cdq
push edx
push eax
call fcn.10002bac
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x1001f502
mov eax, dword [eax]
push eax
call fcn.1004a753
pop ecx
push ebx
push 1
lea ecx, [ebp - 0x614]
call fcn.10014850
inc edi
cmp edi, 0x42c5
jl 0x1001f4e4
inc esi
dec dword [ebp - 0x20]
jne 0x1001f4e2
mov esi, dword [ebp - 0x28]
mov edi, dword [ebp - 0x24]
inc esi
mov dword [ebp - 0x28], esi
cmp esi, 0x122d
jl 0x1001f4d4
inc edi
mov dword [ebp - 0x24], edi
cmp edi, 0x4e03
jl 0x1001f4cf
mov dword [ebp - 0x38], ebx
cmp dword [ebp - 0x18], 0x2f4b
jge 0x1001f55b
push str.ggva_dgocrv_cvyogbgxh
call fcn.1004a753
pop ecx
or dword [ebp - 4], 0xffffffff
mov dword [ebp - 0x18], 0x131b3b3
mov dword [ebp - 0x34], ebx
jmp 0x1001f57c
mov eax, dword [ebp - 0x34]
mov dword [ebp + eax*4 - 0x138], 0x73eb905d
inc dword [ebp - 0x34]
cmp dword [ebp - 0x34], 2
jl 0x1001f56b
mov dword [ebp - 0x1c], 1
cmp dword [ebp - 0x1c], ebx
jl 0x1001f78b
mov dword [ebp - 0x20], 0xa57461d0
mov eax, dword [ebp - 0x1c]
cmp dword [ebp + eax*4 - 0x138], ebx
jne 0x1001f5ae
cmp dword [ebp - 0x1c], ebx
jne 0x1001f5ae
mov eax, ebx
jmp 0x1001f5b1
xor eax, eax
inc eax
xor ecx, ecx
test eax, eax
mov eax, dword [ebp - 0x2c]
setle cl
sub eax, ecx
xor ecx, ecx
cmp eax, 1
mov eax, dword [ebp - 0x1c]
setle cl
xor edx, edx
cmp ecx, eax
mov eax, dword [ebp - 0x1c]
setne dl
sub edx, 0x15e8
neg edx
sbb edx, edx
xor ecx, ecx
inc edx
cmp edx, 0xfffffff7
setne cl
cmp dword [ebp + eax*4 - 0x138], ecx
jge 0x1001f641
mov dword [ebp - 0x248], 0x4ac0198a
mov dword [ebp - 0x2c], 0xfffffff8
jmp 0x1001f636
push 0x4c01
lea eax, [ebp - 0x248]
mov dword [ebp - 0x26c], 0xffffffff
push eax
push ecx
lea eax, [ebp - 0x26c]
mov dl, 1
push 0x7fab
push eax
mov ecx, 0x27d6
call fcn.1001b806
add esp, 0x14
inc dword [ebp - 0x2c]
cmp dword [ebp - 0x2c], 0x18
jne 0x1001f601
jmp 0x1001f783
mov dword [ebp - 0x24], 0xbac89d73
mov dword [ebp - 0x28], 0x3fed
cmp dword [ebp - 0x28], 0x4273
jle 0x1001f6cb
mov edx, ebx
mov dword [ebp - 0x34], ebx
mov edi, ebx
mov esi, ebx
mov ecx, ebx
mov dword [ebp - 0x20], ebx
mov eax, esi
sar eax, cl
lea ecx, [ebp - 0x5e4]
xor eax, edi
or eax, edx
cdq
push edx
push eax
call fcn.10002bac
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x1001f686
mov eax, dword [eax]
push eax
call fcn.1004a753
pop ecx
push ebx
push 1
lea ecx, [ebp - 0x5e4]
call fcn.10014850
mov ecx, dword [ebp - 0x20]
mov edx, dword [ebp - 0x34]
inc ecx
mov dword [ebp - 0x20], ecx
cmp ecx, 0x4f4b
jl 0x1001f666
inc esi
cmp esi, 0x6acf
jl 0x1001f661
inc edi
cmp edi, 0x32f7
jl 0x1001f65f
inc edx
mov dword [ebp - 0x34], edx
cmp edx, 0x5a9e
jl 0x1001f65d
mov dword [ebp - 0x20], 0xb7228d0
cmp dword [ebp - 0x28], 0x3e89
jge 0x1001f6e6
push str.lsaoyxs_der_kfa_kpoioj_icdae_lql_tqadvw_ctk_xjgjwhf_plavaaas_ocersgfqn
call fcn.1004a753
pop ecx
or dword [ebp - 4], 0xffffffff
xor edx, edx
mov dword [ebp - 0x68], 0x9622cfb6
mov eax, dword [ebp - 0x1c]
mov ecx, dword [ebp + eax*4 - 0x138]
mov eax, dword [ebp - 0x8c]
add ecx, eax
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp + eax*4 - 0x138]
cmp ecx, eax
setg dl
xor ecx, ecx
cmp edx, 0xd4fe9304
setne cl
xor edx, edx
add ecx, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x138]
cmp eax, 0x6d20a2e7
mov eax, dword [ebp - 0x38]
setle dl
sub edx, ecx
neg edx
sbb edx, edx
inc edx
imul eax, edx
cmp eax, dword [ebp - 0x1c]
jg 0x1001f74d
cmp dword [ebp - 0x24], ebx
jne 0x1001f74d
mov eax, ebx
jmp 0x1001f750
xor eax, eax
inc eax
mov dword [ebp - 0x20], eax
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x20], eax
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x8c]
mov eax, dword [ebp - 0x2c]
cmp dword [ebp - 0x1c], ebx
jne 0x1001f773
cmp dword [ebp - 0x18], ebx
jne 0x1001f773
mov ecx, ebx
jmp 0x1001f776
xor ecx, ecx
inc ecx
mov eax, dword [ebp - 0x24]
sub eax, ecx
neg eax
sbb eax, eax
inc eax
mov dword [ebp - 0x68], eax
dec dword [ebp - 0x1c]
jmp 0x1001f589
mov dword [ebp - 0x18], ebx
jmp 0x1001f7aa
push ecx
push ebx
mov byte [ebp - 0x92], bl
lea edx, [ebp - 0x92]
push ecx
call fcn.1001b17e
add esp, 0xc
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 1
jle 0x1001f790
inc dword [ebp - 0x8c]
jmp 0x1001f482
lea eax, [ebp - 0x8c]
mov dl, 1
push eax
push ecx
push ecx
call fcn.1001a631
add esp, 0xc
mov ecx, dword [ebp - 0xc]
mov eax, 0x1007de3c
pop edi
pop esi
mov dword fs:[0], ecx
pop ebx
mov esp, ebp
pop ebp
ret
mov dword [ebp - 0x18], 1
mov dword [ebp - 0x18], ebx
jmp 0x1001f801
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x4b0], 0x624039b
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 1
jl 0x1001f7f0
mov dword [ebp - 0x18], ebx
jmp 0x1001f842
push ebx
push 0x60e4
push 1
push 0x28e2
push 0x62f6
lea eax, [ebp - 0x9a]
mov byte [ebp - 0x9a], bl
push eax
push 1
mov edx, 0xc48
mov ecx, 0x376c
call fcn.1001d423
add esp, 0x1c
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], ebx
jle 0x1001f80c
push 1
push ecx
push ecx
mov edx, 0x319a
mov ecx, 0x5f32
call fcn.1001c19b
add esp, 0xc
mov edx, 0x6acd
push ebx
push ecx
push ecx
push 0x179
mov ecx, 0x1007dd54
call fcn.1001e1ca
mov dword [ebp - 0x18], 0x69fdf99f
add esp, 0x10
mov dword [ebp - 0x274], 1
mov dword [ebp - 0x18], ebx
jmp 0x1001f89e
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x130], 0xbacd7953
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 1
jl 0x1001f88d
mov dword [ebp - 0x18], 0x14
jmp 0x1001f8ed
mov dword [ebp - 0x2c], 0x85bf25cb
mov dword [ebp - 0x2c], ebx
jmp 0x1001f8d0
mov eax, dword [ebp - 0x2c]
mov ecx, dword [ebp + eax*4 - 0x130]
mov eax, dword [ebp - 0x2c]
mov dword [ebp + eax*4 - 0x130], ecx
inc dword [ebp - 0x2c]
cmp dword [ebp - 0x2c], ebx
jle 0x1001f8b9
push 0x14e
push ecx
lea edx, [ebp - 0x274]
xor cl, cl
call fcn.1001c753
dec dword [ebp - 0x18]
pop ecx
pop ecx
cmp dword [ebp - 0x18], 0xffffffea
jl 0x1001f8ad
mov dword [ebp - 0xfc], 0x10079ad0
mov dword [ebp - 0x18], ebx
jmp 0x1001f913
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x3e0], 0xfffffffe
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 4
jl 0x1001f902
mov dword [ebp - 0x3d8], ebx
jmp 0x1001f92e
mov cl, 1
call fcn.1001c348
inc dword [ebp - 0x3d8]
cmp dword [ebp - 0x3d8], 0xf
je 0x1001f921
push 0xc
mov dword [ebp - 0x108], ebx
pop edx
mov dword [ebp - 0x110], edx
cmp edx, 0xe0
jge 0x1001fe93
mov dword [ebp - 0x4c], 0x5b2d
cmp dword [ebp - 0x4c], 0x5d12
jle 0x1001f9de
mov dword [ebp - 0x18], ebx
mov eax, ebx
mov dword [ebp - 0x24], 0x2a69
mov dword [ebp - 0x28], eax
mov esi, ebx
mov dword [ebp - 0x20], ebx
cdq
idiv esi
mov esi, 0x2c18
mov edi, edx
mov eax, edi
lea ecx, [ebp - 0x644]
cdq
push edx
push eax
call fcn.10002bac
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x1001f99a
mov eax, dword [eax]
push eax
call fcn.1004a753
pop ecx
push ebx
push 1
lea ecx, [ebp - 0x644]
call fcn.10014850
inc edi
dec esi
jne 0x1001f980
mov esi, dword [ebp - 0x20]
mov eax, dword [ebp - 0x28]
inc esi
mov dword [ebp - 0x20], esi
cmp esi, 0x4f00
jl 0x1001f976
mov edi, dword [ebp - 0x18]
add eax, edi
dec dword [ebp - 0x24]
mov dword [ebp - 0x28], eax
jne 0x1001f971
inc edi
mov dword [ebp - 0x18], edi
cmp edi, 0x7d2
jl 0x1001f965
mov dword [ebp - 0x20], 0x5910
cmp dword [ebp - 0x20], 0x5ce2
jle 0x1001fa37
mov edi, ebx
mov esi, ebx
mov ecx, esi
mov eax, edi
shl eax, cl
lea ecx, [ebp - 0x6a4]
cdq
push edx
push eax
call fcn.10002bac
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x1001fa10
mov eax, dword [eax]
push eax
call fcn.1004a753
pop ecx
push ebx
push 1
lea ecx, [ebp - 0x6a4]
call fcn.10014850
inc esi
cmp esi, 0x4d9d
jl 0x1001f9f2
inc edi
cmp edi, 0x2be0
jl 0x1001f9f0
mov dword [ebp - 0x2c], 1
cmp dword [ebp - 0x20], 0x5898
jge 0x1001fa52
push str.zsiulb_lxzmt_udlpremo_glglkxdkh_thvsxoszy_aznwtm_ncbepp_fyeflqmu_wio_jokpww_pvyb_qvpfss_zomwe_oazqk
call fcn.1004a753
pop ecx
or dword [ebp - 4], 0xffffffff
mov dword [ebp - 0x20], 0x1e0bec03
mov dword [ebp - 0x18], ebx
jmp 0x1001fa73
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x27c], 5
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 1
jl 0x1001fa62
mov dword [ebp - 0x2c], ebx
cmp dword [ebp - 0x2c], 0xd
jg 0x1001fbd1
mov dword [ebp - 0x34], 0xc76d7be7
mov dword [ebp - 0x20], 0x56ebf4d
mov dword [ebp - 0x18], ebx
jmp 0x1001faa6
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x19c], ebx
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 2
jl 0x1001fa99
cmp dword [ebp - 0x2c], ebx
je 0x1001fb4d
mov byte [ebp - 0x93], bl
mov dword [ebp - 0x20], 0x88
cmp dword [ebp - 0x20], 0x285
jle 0x1001fb1a
mov edi, ebx
mov esi, ebx
mov ecx, esi
mov eax, edi
sar eax, cl
lea ecx, [ebp - 0x674]
cdq
push edx
push eax
call fcn.10002bac
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x1001faed
mov eax, dword [eax]
push eax
call fcn.1004a753
pop ecx
push ebx
push 1
lea ecx, [ebp - 0x674]
call fcn.10014850
inc esi
cmp esi, 0x13ee
jl 0x1001facf
inc edi
cmp edi, 0x6fa4
jl 0x1001facd
call dword [sym.imp.KERNEL32.dll_GetACP]
push ecx
lea eax, [ebp - 0x93]
mov dl, 1
push 0x5d8b
push eax
mov ecx, 0x3f57
call fcn.1001c387
add esp, 0xc
cmp dword [ebp - 0x20], 0x25
jge 0x1001fb47
push str.rvgn_ykedlv_iqh
call fcn.1004a753
pop ecx
or dword [ebp - 4], 0xffffffff
jmp 0x1001fb53
dec dword [ebp - 0x19c]
mov dword [ebp - 0x34], ebx
jmp 0x1001fbc3
mov dword [ebp - 0x38], 0xfffffff6
mov dword [ebp - 0x18], ebx
jmp 0x1001fb75
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x520], 0x923c
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 2
jl 0x1001fb64
cmp dword [ebp - 0x2c], ebx
jne 0x1001fbc9
mov ecx, dword [ebp - 0x19c]
mov dword [ebp - 0x51c], ecx
mov eax, dword [ebp - 0x38]
sub ecx, eax
mov dword [ebp - 0x20], ecx
mov edx, dword [ebp - 0x20]
mov eax, dword [ebp - 0x19c]
neg edx
sbb edx, edx
xor ecx, ecx
neg edx
cmp eax, edx
setg cl
xor edx, edx
mov dword [ebp - 0x20], ecx
mov ecx, dword [ebp - 0x20]
mov eax, dword [ebp - 0x2c]
cmp ecx, eax
setge dl
mov dword [ebp - 0x27c], edx
inc dword [ebp - 0x34]
cmp dword [ebp - 0x34], 0x17
jge 0x1001fb58
inc dword [ebp - 0x2c]
jmp 0x1001fa7c
cmp dword [ebp - 0x4c], 0x597c
jge 0x1001fbe5
push str.kfh_idbes_obivyopb_qraygozz_mnekte_dinbfx_cic_zzl_oxmxh_knaraozin
call fcn.1004a753
pop ecx
or dword [ebp - 4], 0xffffffff
mov ecx, dword [ebp - 0xfc]
mov edx, dword [ebp - 0x110]
mov al, byte [ecx]
cmp al, byte [edx + ecx]
je 0x1001fc02
inc edx
jmp 0x1001f940
push 3
pop edi
mov dword [ebp - 0xc4], 0x42eb90da
mov dword [ebp - 0xc4], edi
jmp 0x1001fc76
mov dword [ebp - 0x34], 0xed23b618
mov dword [ebp - 0x18], ebx
jmp 0x1001fc34
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x534], 8
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 2
jl 0x1001fc23
mov dword [ebp - 0x34], 0xffffffec
jmp 0x1001fc6a
mov dword [ebp - 0x18], 0xddd1d8f8
mov dword [ebp - 0x18], 1
cmp dword [ebp - 0x18], ebx
jl 0x1001fc67
mov eax, dword [ebp - 0x18]
cmp dword [ebp + eax*4 - 0x534], ebx
jne 0x1001fc67
dec dword [ebp - 0x18]
jns 0x1001fc56
inc dword [ebp - 0x34]
cmp dword [ebp - 0x34], 4
je 0x1001fc43
dec dword [ebp - 0xc4]
cmp dword [ebp - 0xc4], 0xfffffff3
je 0x1001fc17
lea eax, [ebp - 0xc4]
mov edx, 0x1ec3
push eax
push ebx
call fcn.1001e945
pop ecx
pop ecx
push 0x4d2f
push 0x63c0
push ecx
lea eax, [ebp - 0x110]
push eax
push 0x210e
push 0x1229
push ecx
lea edx, [ebp - 0x108]
mov cl, 1
call fcn.1001a117
add esp, 0x1c
lea ecx, [ebp - 0x390]
push edi
call fcn.100021e9
push 0x3e9d
push ebx
push ecx
mov dword [ebp - 4], 0xd
lea eax, [ebp - 0x390]
push 0x62e5
push ecx
mov dword [ebp - 0xa8], 0xcecb4571
mov edx, 0x3386
push eax
mov dword [ebp - 0x118], 0xcd53
lea eax, [ebp - 0xa4]
mov dword [ebp - 0x320], 0x27283a38
push ecx
mov dword [ebp - 0x28c], 0xffffffff
mov ecx, 0xde8
mov dword [ebp - 0x40], 0x1b4bc71f
mov dword [ebp - 0x40], 0x52f52174
push eax
call fcn.1001dea1
add esp, 0x20
mov dword [ebp - 0xa4], ebx
jmp 0x1001fd52
mov eax, dword [ebp - 0xa4]
mov dword [ebp + eax*4 - 0x4c4], ebx
inc dword [ebp - 0xa4]
cmp dword [ebp - 0xa4], 1
jl 0x1001fd3f
mov dword [ebp - 0xa8], 2
cmp dword [ebp - 0xa8], ebx
jl 0x1001fe2f
push ecx
lea eax, [ebp - 0x390]
mov dword [ebp - 0x284], 0xfffffffa
push eax
push 1
push ecx
lea eax, [ebp - 0x284]
mov dword [ebp - 0x318], ebx
push eax
lea eax, [ebp - 0x2c0]
mov dword [ebp - 0x2c0], 0x6982b35
push eax
lea eax, [ebp - 0x2c8]
mov dword [ebp - 0x2d0], 0x1ca4b38b
push eax
lea eax, [ebp - 0x140]
mov dword [ebp - 0x140], 1
push eax
push ecx
lea eax, [ebp - 0x2d0]
mov dword [ebp - 0x2c8], 0x2e0c2805
push eax
lea eax, [ebp - 0xa8]
push eax
lea edx, [ebp - 0x318]
lea ecx, [ebp - 0x118]
call fcn.1001abfe
add esp, 0x2c
lea eax, [ebp - 0x390]
lea edx, [ebp - 0x320]
push eax
lea eax, [ebp - 0x118]
push eax
push 0x7f32
push ecx
lea eax, [ebp - 0x140]
push eax
push ebx
push ecx
mov ecx, 0x25e0
call fcn.1001d5cf
add esp, 0x1c
dec dword [ebp - 0xa8]
jns 0x1001fd71
push 0x7bca
push 0x568d
push 0xbf8
lea eax, [ebp - 0x28c]
mov edx, 0x1afb
push eax
push 0x5a1c
lea eax, [ebp - 0x118]
push eax
push ebx
push 0x3ae8
push 0x5e49
push 1
push 1
push 0x3075
push 0x60cf
push 0xef7
lea ecx, [ebp - 0xa8]
call fcn.1001d79e
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x390]
add esp, 0x38
call fcn.10002246
jmp 0x1001fe96
push 3
pop edi
push 2
lea ecx, [ebp - 0x3a8]
call fcn.100021e9
push 1
mov dword [ebp - 4], 0xe
lea eax, [ebp - 0x64]
push 0x741f
mov dword [ebp - 0x20], 0xfffffff7
mov edx, 0xa87
push 0x46f5
push eax
mov dword [ebp - 0x18], 0xbb0f55f5
lea eax, [ebp - 0x3a8]
mov dword [ebp - 0x24], 0xa280505b
mov cl, 1
mov dword [ebp - 0x20], 0xe72b4cd9
push ebx
mov dword [ebp - 0x20], 0xdda3982a
mov dword [ebp - 0x38], ebx
push eax
call fcn.1001e41e
add esp, 0x18
mov dword [ebp - 0x64], ebx
jmp 0x1001ff0a
mov eax, dword [ebp - 0x64]
mov dword [ebp + eax*4 - 0x7c], 0x278b7212
inc dword [ebp - 0x64]
cmp dword [ebp - 0x64], 1
jl 0x1001fefc
mov dword [ebp - 0x64], ebx
jmp 0x1001ff26
mov eax, dword [ebp - 0x64]
mov dword [ebp + eax*4 - 0x59c], 0xb43b78c3
inc dword [ebp - 0x64]
cmp dword [ebp - 0x64], 4
jl 0x1001ff15
mov eax, dword [ebp - 0x7c]
mov esi, dword [ebp - 0x3a8]
mov eax, dword [ebp - 0x7c]
mov dword [esi + 4], ebx
mov dword [ebp - 0x20], eax
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x24]
cmp dword [ebp - 0x18], ebx
jne 0x1001ff55
cmp dword [ebp - 0x24], ebx
jne 0x1001ff55
mov ecx, ebx
jmp 0x1001ff58
xor ecx, ecx
inc ecx
mov eax, dword [ebp - 0x3a8]
xor edx, edx
cmp ecx, dword [eax]
mov eax, dword [ebp - 0x7c]
setle dl
xor ecx, ecx
cmp edx, eax
setne cl
cmp ecx, 1
sbb eax, eax
xor ecx, ecx
inc eax
mov dword [ebp - 0x24], eax
mov eax, dword [ebp - 0x24]
mov dword [ebp - 0x18], eax
mov eax, dword [ebp - 0x18]
cmp eax, dword [esi + 4]
setge cl
mov dword [ebp - 0x59c], ecx
mov eax, dword [ebp - 0x7c]
mov edx, dword [esi + 4]
xor eax, eax
test edx, edx
setne al
xor ecx, ecx
cmp eax, edx
setge cl
sub ecx, 0x71eb
neg ecx
sbb ecx, ecx
xor eax, eax
inc ecx
cmp ecx, edx
setne al
xor edx, edx
imul ecx, eax, 0x5619
mov eax, dword [ebp - 0x7c]
cmp ecx, eax
mov eax, dword [ebp - 0x7c]
mov ecx, 0xa11ad519
setg dl
sub edx, 0x491
neg edx
sbb edx, edx
inc edx
mov dword [esi + 4], edx
mov dword [ebp - 0x20], 1
mov eax, dword [ebp - 0x20]
cmp ecx, eax
mov ecx, 0xacb588f4
sbb eax, eax
neg eax
mov dword [ebp - 0x20], eax
mov eax, dword [ebp - 0x20]
cmp ecx, eax
mov eax, dword [ebp - 0x7c]
sbb ecx, ecx
xor edx, edx
inc ecx
add ecx, eax
mov eax, dword [ebp - 0x7c]
cmp eax, ecx
mov eax, 0xf90bf567
setge dl
cmp eax, edx
sbb eax, eax
xor edx, edx
inc eax
cmp eax, 2
mov eax, dword [ebp - 0x7c]
setne dl
xor ecx, ecx
sub edx, edi
cmp edx, eax
setne cl
mov dword [ebp - 0x38], ecx
lea ecx, [ebp - 0x3a8]
or dword [ebp - 4], 0xffffffff
call fcn.10002246
mov dword [ebp - 0x1e0], 4
mov dword [ebp - 0x78], 5
mov dword [ebp - 0x28], 0x901516ea
xor ecx, ecx
inc ecx
mov dword [ebp - 0x24], ecx
mov dword [ebp - 0x34], 0x9c2d
mov dword [ebp - 0x38], 0xfffa
mov dword [ebp - 0x18], ebx
jmp 0x1002007c
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x150], 0x41b3c692
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], edi
jl 0x1002006b
mov dword [ebp - 0x78], 2
cmp dword [ebp - 0x78], ebx
jl 0x10020169
jmp 0x10020096
xor ecx, ecx
inc ecx
mov dword [ebp - 0x120], ecx
mov dword [ebp - 0x214], 0xfffffffd
mov eax, dword [ebp - 0x78]
cmp dword [ebp + eax*4 - 0x150], ebx
je 0x10020114
mov dword [ebp - 0x20], 0xacf25792
xor edx, edx
mov dword [ebp - 0x18], 0xa652065c
mov eax, dword [ebp - 0x148]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x120]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x150]
mov eax, dword [ebp - 0x78]
mov dword [ebp - 0x20], ebx
mov ecx, dword [ebp - 0x18]
add ecx, dword [ebp - 0x20]
mov eax, dword [ebp - 0x120]
neg ecx
cmp ecx, eax
mov ecx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x78]
setne dl
add ecx, edx
xor edx, edx
cmp ecx, eax
mov eax, dword [ebp - 0x150]
setl dl
xor ecx, ecx
cmp edx, eax
setle cl
mov dword [ebp - 0x18], ecx
jmp 0x10020150
push 0x1f3d
push ecx
lea eax, [ebp - 0x264]
mov dword [ebp - 0x264], ecx
push eax
push ecx
push ecx
push 0x45be
lea eax, [ebp - 0x78]
mov edx, 0x39d5
push eax
lea eax, [ebp - 0x120]
mov ecx, 0x3d52
push 0x284e
push eax
call fcn.1001c615
add esp, 0x24
lea eax, [ebp - 0x214]
push eax
push 1
call fcn.1001a237
dec dword [ebp - 0x78]
pop ecx
pop ecx
jns 0x10020093
mov eax, dword [ebp - 0x24]
neg eax
push 2
sbb eax, eax
inc eax
mov dword [ebp - 0x78], eax
mov eax, dword [ebp - 0x78]
mov eax, dword [ebp - 0x148]
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x38]
mov eax, dword [ebp - 0x148]
mov eax, dword [ebp - 0x148]
mov eax, dword [ebp - 0x34]
mov edx, dword [ebp - 0x24]
mov ecx, dword [ebp - 0x150]
inc edx
mov eax, dword [ebp - 0x34]
neg edx
mov dword [ebp - 0xdc], 0x10079bb0
sbb edx, edx
add ecx, 0x31381660
neg edx
add eax, edx
add eax, ecx
lea ecx, [ebp - 0x3c0]
neg eax
sbb eax, eax
inc eax
mov dword [ebp - 0x28], eax
mov al, byte [0x10079bb0]
mov byte [ebp - 0x4d], al
call fcn.100021e9
mov dword [ebp - 4], 0xf
lea ecx, [ebp - 0x44c]
mov dword [ebp - 0x28], ebx
mov dword [ebp - 0xb0], 0x2263126f
push edi
call fcn.100021e9
lea ecx, [ebp - 0x3c0]
mov byte [ebp - 4], 0x10
push ecx
lea ecx, [ebp - 0x5c]
xor eax, eax
push ecx
push ecx
inc eax
mov dword [ebp - 0x20], eax
mov dword [ebp - 0x24], 0x4b79a97a
push ecx
mov dword [ebp - 0x3f8], 0xfffffff7
mov dword [ebp - 0x3f4], 0xfffffff7
push 0x19e2
mov dword [ebp - 0x3f0], 0xfffffff7
mov dword [ebp - 0x3ec], 0xfffffff7
push eax
call fcn.1001aae1
add esp, 0x18
mov dword [ebp - 0x5c], ebx
jmp 0x10020263
mov eax, dword [ebp - 0x5c]
mov dword [ebp + eax*4 - 0xf0], 0x9aed23b6
inc dword [ebp - 0x5c]
cmp dword [ebp - 0x5c], 1
jl 0x10020252
push 0x626b
push 1
lea eax, [ebp - 0x5c]
xor dl, dl
push eax
push 0x4af0
lea eax, [ebp - 0x44c]
mov cl, 1
push 0x675a
push eax
call fcn.1001c6ee
add esp, 0x18
mov dword [ebp - 0x5c], ebx
jmp 0x100202a7
mov eax, dword [ebp - 0x5c]
mov dword [ebp + eax*4 - 0x5ac], 0x1ca72764
inc dword [ebp - 0x5c]
cmp dword [ebp - 0x5c], 4
jl 0x10020296
push ecx
lea eax, [ebp - 0xb0]
mov ecx, 0x11a0
push eax
push 1
call fcn.1001c6a6
add esp, 0xc
cmp dword [ebp - 0xf0], ebx
jne 0x10020380
mov eax, dword [ebp - 0xb0]
mov eax, dword [ebp - 0xb0]
mov eax, dword [ebp - 0xb0]
mov esi, dword [ebp - 0x3c0]
cmp dword [esi + 4], 0xbf7c
jl 0x100202f4
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0xf0]
xor edx, edx
cmp eax, 0x1ebc
mov eax, dword [ebp - 0xf0]
setne dl
sub edx, dword [esi + 4]
neg edx
sbb edx, edx
xor ecx, ecx
inc edx
cmp edx, eax
setge cl
xor eax, eax
cmp ecx, 0xe01afec1
mov ecx, dword [ebp - 0x28]
setne al
imul ecx, eax
mov eax, dword [ebp - 0xf0]
neg ecx
sbb ecx, ecx
neg ecx
lea eax, [ecx + 1]
xor ecx, ecx
cmp eax, dword [esi + 4]
setge cl
mov dword [ebp - 0x28], ecx
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0x44c]
mov ecx, dword [ebp - 0x20]
dec dword [eax + 4]
mov eax, dword [ebp - 0x3c0]
mov dword [ebp - 0xf0], ecx
mov eax, dword [eax]
imul eax, ecx
mov dword [ebp - 0x3f0], eax
mov eax, dword [ebp - 0xb0]
cmp dword [esi + 4], 0xd7e3c239
jne 0x10020380
mov edx, ebx
jmp 0x10020383
xor edx, edx
inc edx
mov eax, dword [ebp - 0x24]
xor ecx, ecx
cmp edx, eax
setge cl
cmp ecx, dword [ebp - 0xb0]
je 0x100203a2
cmp dword [ebp - 0x3f0], ebx
je 0x100203a2
xor eax, eax
inc eax
jmp 0x100203a4
mov eax, ebx
lea ecx, [ebp - 0x44c]
mov dword [ebp - 0x5a0], eax
call fcn.10002246
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x3c0]
call fcn.10002246
mov eax, dword [ebp - 0xfc]
mov cl, byte [0x10079bb0]
mov dl, byte [eax]
call fcn.10023bf4
xor edi, edi
mov byte [0x10079bb0], al
inc edi
mov dword [ebp - 0x24], edi
cmp edi, 4
jge 0x10020875
mov dword [ebp - 0x20], 0x1db3
cmp dword [ebp - 0x20], 0x2122
jle 0x1002044f
mov dword [ebp - 0x28], ebx
mov edi, ebx
mov esi, ebx
mov dword [ebp - 0x38], ebx
mov eax, esi
cdq
idiv ebx
mov eax, edi
mov ecx, edx
shl eax, cl
mov ecx, 0x1007cc18
or eax, dword [ebp - 0x28]
cdq
push edx
push eax
call fcn.10013d0a
inc ebx
cmp ebx, 0x517f
jl 0x10020405
inc esi
push 0
pop ebx
cmp esi, 0x3df7
jl 0x10020402
inc edi
cmp edi, 0x1f7c
jl 0x10020400
mov eax, dword [ebp - 0x28]
inc eax
mov dword [ebp - 0x28], eax
cmp eax, 0x170a
jl 0x100203fe
mov edi, dword [ebp - 0x24]
mov eax, dword [ebp - 0xdc]
mov al, byte [edi + eax]
mov dword [ebp - 4], 0x11
cmp dword [ebp - 0x20], 0x1d24
mov byte [ebp - 0x2d], al
jge 0x1002047a
mov edx, str.begukxtm_uazpflfp_goxm_qnshuhak_hkzdgtfb_ykbhca
mov ecx, 0x1007cc18
call fcn.1001875a
or dword [ebp - 4], 0xffffffff
mov dword [ebp - 0x48], 0xfffffff7
lea ecx, [ebp - 0x4d0]
mov dword [ebp - 0x38], 0xffffffff
push 4
call fcn.100021e9
push ebx
push 1
lea eax, [ebp - 0x24c]
mov dword [ebp - 4], 0x13
push eax
lea eax, [ebp - 0x4d0]
mov edx, 0x66c8
push eax
xor cl, cl
call fcn.1001e626
add esp, 0x10
mov dword [ebp - 0x48], 0x12
cmp dword [ebp - 0x48], 0xffffffe2
jl 0x1002070e
mov dword [ebp - 0x40], 0xfffffffc
mov dword [ebp - 0x1c], ebx
jmp 0x10020513
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0x554], 0xfffffffc
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 4
jl 0x10020502
mov dword [ebp - 0x1c], ebx
jmp 0x1002052b
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0xb8], ebx
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 1
jl 0x1002051e
mov dword [ebp - 0xb8], ebx
cmp dword [ebp - 0xb8], 3
jg 0x10020706
mov dword [ebp - 0x20], 0x5e32
cmp dword [ebp - 0x20], 0x5fcb
jle 0x100205ac
push ebx
call dword [sym.imp.KERNEL32.dll_HeapDestroy]
mov edi, ebx
mov esi, ebx
mov ecx, esi
mov eax, edi
sar eax, cl
lea ecx, [ebp - 0x5fc]
cdq
push edx
push eax
call fcn.10002bac
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x1002057d
mov eax, dword [eax]
push eax
call fcn.1004a753
pop ecx
push ebx
push 1
lea ecx, [ebp - 0x5fc]
call fcn.10014850
inc esi
cmp esi, 0x28d6
jl 0x1002055f
inc edi
cmp edi, 0x42cf
jl 0x1002055d
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_GetFileSize]
push dword [ebp - 0x24c]
movdqa xmm0, xmmword [0x1006fed0]
lea eax, [ebp - 0x534]
push eax
lea eax, [ebp - 0x544]
mov dword [ebp - 0x2e0], ebx
push eax
push ebx
lea ecx, [ebp - 0x2e0]
mov dword [ebp - 0x2dc], ebx
movdqu xmmword [ebp - 0x544], xmm0
mov dword [ebp - 0x2d8], ebx
call fcn.10019555
cmp dword [ebp - 0x20], 0x5bfd
jge 0x10020602
push str.rstobe_haxoj_nbzth_fuk_fmwk_dvf_ydlhczhug_qectn_ykqt_gfgr_glocrw_cpwzzwkbl_jwavte
call fcn.1004a753
pop ecx
mov dword [ebp - 4], 0x14
lea ecx, [ebp - 0x47c]
mov dword [ebp - 0x68], 7
push 2
mov dword [ebp - 0x1e4], 0xffffffff
call fcn.100021e9
lea eax, [ebp - 0x47c]
mov byte [ebp - 4], 0x17
push eax
push 0x63b7
push ecx
push 1
push ecx
push 0x351
push ecx
lea edx, [ebp - 0x4f8]
call fcn.1001a2bc
mov esi, dword [ebp - 0x2e0]
add esp, 0x1c
mov edi, dword [ebp - 0x47c]
mov dword [esi + 0xc], 3
mov dword [ebp - 0x20], 0x21e1
mov edx, 0xcf5
inc dword [ebp - 0x20]
xor ecx, ecx
mov eax, dword [ebp - 0x38]
sub edx, eax
mov eax, dword [ebp - 0xb8]
mov dword [edi + 4], edx
mov eax, dword [ebp + eax*4 - 0x554]
sub eax, 0x18bd
cmp eax, edx
mov eax, dword [ebp - 0xb8]
setl cl
xor edx, edx
cmp ecx, 1
mov eax, dword [ebp + eax*4 - 0x554]
setge dl
imul eax, edx
neg eax
sbb eax, eax
neg eax
dec dword [esi + 0xc]
mov dword [ebp - 0x68], eax
jns 0x10020662
push 0x411f
push 1
push 0x4da2
lea eax, [ebp - 0x1e4]
mov dl, 1
push eax
push 0x5da3
push 0x54e9
mov cl, dl
call fcn.1001c6ee
add esp, 0x18
lea ecx, [ebp - 0x47c]
call fcn.10002246
lea ecx, [ebp - 0x2e0]
mov byte [ebp - 4], 0x13
call fcn.10002246
inc dword [ebp - 0xb8]
jmp 0x10020537
dec dword [ebp - 0x48]
jmp 0x100204c7
mov dword [ebp - 0x48], 0x1b
jmp 0x10020763
push 1
lea ecx, [ebp - 0x384]
call fcn.100021e9
sub esp, 0xc
mov byte [ebp - 4], 0x18
lea eax, [ebp - 0x384]
mov ecx, 0x3c2b
lea edx, [ebp - 0x4b4]
push eax
push 1
call fcn.1001ad9b
mov eax, dword [ebp - 0x384]
lea ecx, [ebp - 0x384]
add esp, 0x14
cmp dword [eax], ebx
jne 0x1002076b
mov byte [ebp - 4], 0x13
call fcn.10002246
dec dword [ebp - 0x48]
cmp dword [ebp - 0x48], 0xfffffff0
jg 0x10020717
jmp 0x10020770
call fcn.10002246
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x4d0]
call fcn.10002246
mov edi, dword [ebp - 0x24]
mov eax, edi
cdq
idiv dword [ebp - 0x108]
mov cl, byte [ebp - 0x2d]
mov esi, edx
mov dl, byte [ebp - 0x4d]
call fcn.10023bf4
mov ecx, dword [ebp - 0xfc]
mov dl, byte [esi + ecx]
mov cl, al
call fcn.10023bf4
mov ecx, dword [ebp - 0xdc]
push 2
mov byte [edi + ecx], al
lea ecx, [ebp - 0x2f0]
call fcn.100021e9
xor edx, edx
mov dword [ebp - 0x20], 0x3700168a
inc edx
mov dword [ebp - 0x38], edx
mov dword [ebp - 0x1c], ebx
jmp 0x100207e1
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0x354], 0xfffffffa
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 3
jl 0x100207d0
mov dword [ebp - 0x1c], ebx
jmp 0x100207ff
mov ecx, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x2f0]
mov dword [eax + ecx*4], 0x125d16df
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 2
jl 0x100207ec
mov esi, dword [ebp - 0x2f0]
mov dword [esi], 2
mov eax, dword [esi]
mov ecx, dword [ebp + eax*4 - 0x354]
mov esi, dword [ebp - 0x2f0]
mov eax, dword [esi]
dec dword [esi]
mov dword [ebp + eax*4 - 0x354], ecx
jns 0x10020811
mov eax, dword [esi + 4]
xor ecx, ecx
add eax, dword [esi]
mov dword [ebp - 0x20], eax
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x2f0]
cmp dword [eax], edx
mov eax, dword [ebp - 0x354]
setle cl
sub ecx, eax
je 0x10020855
mov eax, dword [ebp - 0x34c]
cmp dword [ebp - 0x38], edx
lea ecx, [ebp - 0x2f0]
sbb eax, eax
inc eax
mov dword [esi + 4], eax
call fcn.10002246
mov al, byte [ebp - 0x2d]
inc edi
mov byte [ebp - 0x4d], al
jmp 0x100203df
sub esp, 0x18
mov dl, 1
call fcn.1001c78b
mov eax, dword [ebp - 0xdc]
lea ecx, [ebp - 0x3b4]
add esp, 0x18
mov esi, dword [eax]
push 3
mov dword [ebp - 0x11c], esi
call fcn.100021e9
push 0x6eb5
push 0x4f76
push 1
push 0x760c
push 0x304c
push 0x1050
lea eax, [ebp - 0x3b4]
mov dword [ebp - 4], 0x19
push ebx
push eax
lea edx, [ebp - 0x50c]
mov cl, 1
call fcn.1001caee
mov eax, dword [ebp - 0x3b4]
add esp, 0x20
add eax, 8
mov dword [eax], ebx
cmp dword [eax], 0xfffffff0
jge 0x100209dc
mov dword [ebp - 0x24], 1
mov dword [ebp - 0x38], ebx
mov dword [ebp - 0x24], 9
cmp dword [ebp - 0x24], 0x11
jge 0x100209c6
mov dword [ebp - 0x20], 0x608c
cmp dword [ebp - 0x20], 0x609d
jle 0x10020958
mov dword [ebp - 0x28], ebx
mov esi, ebx
mov edi, ebx
mov ebx, dword [ebp - 0x28]
mov ecx, edi
mov eax, esi
shl eax, cl
mov ecx, 0x1007cc18
or eax, ebx
cdq
push edx
push eax
call fcn.10013d0a
inc edi
cmp edi, 0x6f73
jl 0x10020920
inc esi
push 0
pop ebx
cmp esi, 0x24bc
jl 0x1002091b
mov eax, dword [ebp - 0x28]
inc eax
mov dword [ebp - 0x28], eax
cmp eax, 0x3af1
jl 0x10020919
mov byte [ebp - 4], 0x1a
cmp dword [ebp - 0x20], 0x6056
jge 0x10020992
mov edx, str.ydepkr_tpaxpua_qcfsze_xvrhbbu
mov ecx, 0x1007cc18
call fcn.1001875a
jmp 0x10020992
mov dword [ebp - 4], 0x19
mov dword [ebp - 0x18], ebx
jmp 0x100209af
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x580], 0xfffffffc
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 3
jl 0x1002099e
mov eax, dword [ebp - 0x578]
mov dword [ebp - 0x38], eax
inc dword [ebp - 0x24]
jmp 0x100208fc
mov eax, dword [ebp - 0x3b4]
mov esi, dword [ebp - 0x11c]
add eax, 8
dec dword [eax]
jmp 0x100208e2
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x3b4]
call fcn.10002246
test esi, esi
jle 0x1002264c
cmp esi, 0x2a7c
jae 0x1002264c
mov eax, 0xdd1e1e87
lea ecx, [ebp - 0x518]
mov dword [ebp - 0x1bc], eax
mov dword [ebp - 0x1b8], eax
mov dword [ebp - 0x1b4], eax
mov dword [ebp - 0x1b0], eax
push 3
call fcn.100021e9
mov dword [ebp - 4], 0x1c
mov dword [ebp - 0x10c], ebx
mov dword [ebp - 0xc0], ebx
jmp 0x10020a51
mov eax, dword [ebp - 0xc0]
mov dword [ebp + eax*4 - 0x58c], ebx
inc dword [ebp - 0xc0]
cmp dword [ebp - 0xc0], 3
jl 0x10020a3e
push ecx
lea eax, [ebp - 0x518]
push eax
push ecx
push 0x3bbe
push 0xdf
lea edx, [ebp - 0xc0]
mov cl, 1
call fcn.1001cd55
mov dword [ebp - 0x24], 0x3141
add esp, 0x14
cmp dword [ebp - 0x24], 0x322f
jle 0x10020aea
mov eax, ebx
mov dword [ebp - 0x28], ebx
mov edi, ebx
mov dword [ebp - 0x20], ebx
cdq
mov esi, ebx
idiv edi
mov dword [ebp - 0x38], edx
mov edi, ebx
mov ebx, dword [ebp - 0x38]
lea ecx, [edi + esi]
mov eax, ebx
shl eax, cl
mov ecx, 0x1007cc18
cdq
push edx
push eax
call fcn.10013d0a
inc edi
cmp edi, 0x6614
jl 0x10020aa4
inc esi
push 0
pop ebx
cmp esi, 0x333
jl 0x10020a9f
mov edi, dword [ebp - 0x20]
mov eax, dword [ebp - 0x28]
inc edi
mov dword [ebp - 0x20], edi
cmp edi, 0x4159
jl 0x10020a97
inc eax
mov dword [ebp - 0x28], eax
cmp eax, 0x3769
jl 0x10020a92
mov byte [ebp - 4], 0x1d
cmp dword [ebp - 0x24], 0x2f93
jge 0x10020b24
mov edx, str.vruftz_qvbn_hazirljyg_rkj_iggdzoozj_cgrzm_rcjwi_fmetbw_kgsqc_lduz_jnnzwjf
mov ecx, 0x1007cc18
call fcn.1001875a
jmp 0x10020b24
mov dword [ebp - 4], 0x1c
mov dword [ebp - 0x1b0], ebx
jmp 0x10020b4c
dec dword [ebp - 0x10c]
mov eax, dword [ebp - 0x1b0]
mov eax, dword [ebp + eax*4 - 0x58c]
inc dword [ebp - 0x1b0]
cmp dword [ebp - 0x1b0], 2
jle 0x10020b33
push 0x6a71
push 0x2ca
lea eax, [ebp - 0x10c]
mov dl, 1
push eax
push 1
mov cl, dl
call fcn.1001c8f8
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x518]
add esp, 0x10
call fcn.10002246
push ecx
push ecx
lea eax, [ebp - 0x108]
push eax
lea eax, [ebp - 0xdc]
push eax
lea eax, [ebp - 0x11c]
push eax
lea eax, [ebp - 0x1e0]
push eax
push ebx
push ecx
lea eax, [ebp - 0x4d]
mov ecx, 0x7dc9
push eax
lea edx, [ebp - 0xfc]
call fcn.1001aaab
add esp, 0x24
lea ecx, [ebp - 0x4f0]
push 2
call fcn.100021e9
mov dword [ebp - 4], 0x1f
lea ecx, [ebp - 0x508]
mov dword [ebp - 0x18], 0x5c8094a
mov dword [ebp - 0x40], 0xe3869393
mov dword [ebp - 0x40], 0xaad9ddce
mov dword [ebp - 0x40], 0x4456
mov dword [ebp - 0x1f0], 0x837aced4
mov dword [ebp - 0x40], 0x510afbd1
push 3
call fcn.100021e9
lea eax, [ebp - 0x4f0]
mov byte [ebp - 4], 0x20
push eax
push ecx
push ecx
xor dl, dl
lea ecx, [ebp - 0x2b8]
call fcn.1001afb0
add esp, 0xc
lea eax, [ebp - 0x508]
mov edx, 0x5561
mov ecx, 0x3386
push 0x42bf
push eax
push ebx
push 0x5147
push 0x177
lea eax, [ebp - 0x2b8]
push eax
push 0x4e25
push 0x55aa
push ebx
push 1
push 0x1a8d
push 0x6e46
push 0x400f
call fcn.1001d283
add esp, 0x34
mov dword [ebp - 0x18], 1
cmp dword [ebp - 0x18], ebx
jl 0x10020ed1
mov dword [ebp - 0x40], ebx
mov dword [ebp - 0x294], 0xfc0233fd
mov dword [ebp - 0x1e8], 0xa37bd55f
mov dword [ebp - 0x34], ebx
jmp 0x10020cae
mov eax, dword [ebp - 0x34]
mov dword [ebp + eax*4 - 0x4bc], 7
inc dword [ebp - 0x34]
cmp dword [ebp - 0x34], 1
jl 0x10020c9d
mov eax, dword [ebp - 0x18]
cmp dword [ebp - 0x18], ebx
je 0x10020d1f
push 1
lea ecx, [ebp - 0x41c]
call fcn.100021e9
push 0x3ef5
push 0x7678
push ecx
push 0x159
push 1
push 0x4cc4
push ecx
lea edx, [ebp - 0x41c]
mov byte [ebp - 4], 0x21
lea ecx, [ebp - 0x4c0]
call fcn.1001c99e
add esp, 0x1c
lea edx, [ebp - 0x41c]
xor cl, cl
push 1
push 1
push 0x3070
push 0x4ff6
call fcn.1001e626
lea ecx, [ebp - 0x41c]
jmp 0x10020ebd
mov dword [ebp - 0x34], 0x747e
cmp dword [ebp - 0x34], 0x77d4
jle 0x10020dab
mov eax, ebx
mov dword [ebp - 0x28], ebx
mov edi, ebx
mov dword [ebp - 0x24], ebx
mov ecx, edi
mov dword [ebp - 0x38], ebx
shl eax, cl
mov edi, ebx
mov dword [ebp - 0x20], eax
mov esi, ebx
lea ecx, [esi + edi]
sar eax, cl
lea ecx, [ebp - 0x62c]
cdq
push edx
push eax
call fcn.10002bac
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x10020d64
mov eax, dword [eax]
push eax
call fcn.1004a753
pop ecx
push ebx
push 1
lea ecx, [ebp - 0x62c]
call fcn.10014850
mov eax, dword [ebp - 0x20]
inc esi
cmp esi, 0x5df3
jl 0x10020d47
inc edi
cmp edi, 0x4e23
jl 0x10020d45
mov edi, dword [ebp - 0x24]
mov eax, dword [ebp - 0x28]
inc edi
mov dword [ebp - 0x24], edi
cmp edi, 0x1135
jl 0x10020d39
inc eax
mov dword [ebp - 0x28], eax
cmp eax, 0x2434
jl 0x10020d34
cmp dword [ebp - 0x34], 0x7192
jge 0x10020dbf
push str.gwshuuh_cnbxvkh_jagzmqz
call fcn.1004a753
pop ecx
mov dword [ebp - 4], 0x20
lea ecx, [ebp - 0x4e0]
mov dword [ebp - 0x2f4], 0x9822cb3a
mov dword [ebp - 0x40], ebx
push 2
call fcn.100021e9
mov byte [ebp - 4], 0x24
mov dword [ebp - 0xc8], ebx
jmp 0x10020e03
mov eax, dword [ebp - 0xc8]
mov dword [ebp + eax*4 - 0x3d0], 0x1bca9d69
inc dword [ebp - 0xc8]
cmp dword [ebp - 0xc8], 4
jl 0x10020dec
push 0x13a1
push 0x6c6
push 1
push 0x6ee8
lea eax, [ebp - 0x4e0]
mov edx, 0x2d50
push eax
lea eax, [ebp - 0xc8]
mov cl, 1
push eax
push 1
push 0x6236
call fcn.1001caee
add esp, 0x20
mov dword [ebp - 0x3c4], ebx
jmp 0x10020e92
lea eax, [ebp - 0x1e8]
mov edx, 0x4c0b
push eax
push 0x6a1
push ebx
push 0x255e
push 0x5afa
push 0x3d27
push 1
push 0x1749
xor cl, cl
call fcn.1001caee
add esp, 0x20
push 0x1ec7
push ecx
push ecx
mov cl, 1
call fcn.1001cc35
add esp, 0xc
inc dword [ebp - 0x3c4]
cmp dword [ebp - 0x3c4], 1
jle 0x10020e49
push 1
lea eax, [ebp - 0x2f4]
push eax
lea eax, [ebp - 0x1f0]
push eax
lea eax, [ebp - 0x294]
push eax
call fcn.1001cc8b
lea ecx, [ebp - 0x4e0]
add esp, 0x10
mov byte [ebp - 4], 0x20
call fcn.10002246
dec dword [ebp - 0x18]
jmp 0x10020c78
lea ecx, [ebp - 0x508]
call fcn.10002246
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x4f0]
call fcn.10002246
push 1
push ecx
push ecx
push 0x6cfa
push 0x5e5c
mov edx, 0x1007de3c
call fcn.1001cdc3
add esp, 0x10
mov dword [ebp - 0xd4], ebx
mov dword [ebp - 0x84], 0x328f6c74
lea eax, [ebp - 0x84]
mov dword [ebp - 0x160], 4
lea ecx, [ebp - 0x160]
mov dword [ebp - 0x1f8], 0xf5fdfda8
xor dl, dl
push eax
mov dword [ebp - 0x2cc], ebx
push 0x4449
call fcn.1001c387
add esp, 0xc
mov dword [ebp - 0x84], 0xffffffe5
jmp 0x10020fd1
lea eax, [ebp - 0x158]
mov dword [ebp - 0x158], 3
push eax
lea eax, [ebp - 0x160]
mov dword [ebp - 0x200], 6
push eax
push 1
push ecx
lea eax, [ebp - 0x1f8]
mov dword [ebp - 0x29c], 0x2b805d31
push eax
lea eax, [ebp - 0x2cc]
push eax
lea edx, [ebp - 0x84]
call fcn.1001a82c
lea eax, [ebp - 0x84]
mov edx, 0x7e94
push eax
push 1
lea eax, [ebp - 0x200]
push eax
lea eax, [ebp - 0x29c]
push eax
lea eax, [ebp - 0x158]
push eax
call fcn.1001a980
add esp, 0x2c
inc dword [ebp - 0x84]
cmp dword [ebp - 0x84], 0xffffffe8
jne 0x10020f58
mov eax, dword [ebp - 0xdc]
mov dword [ebp - 0x34], ebx
add eax, 4
mov dword [ebp - 0x40], 0xee7d214c
mov dword [ebp - 0x48], eax
mov dword [ebp - 0x34], ebx
jmp 0x1002101e
mov dword [ebp - 0x18], ebx
jmp 0x1002100f
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x128], 0xffffffff
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 1
jl 0x10020ffe
dec dword [ebp - 0x128]
inc dword [ebp - 0x34]
cmp dword [ebp - 0x34], 0x13
jne 0x10020ff9
push ebx
push 0xfa
push 0xeea
push 0x5dc7
call fcn.1001cc8b
mov dword [ebp - 0x314], 7
lea ecx, [ebp - 0x428]
mov dword [ebp - 0x2ac], 0x28fbc781
add esp, 0x10
mov dword [ebp - 0x210], 0x95196ee4
mov dword [ebp - 0x40], 0x373b2c57
mov dword [ebp - 0x40], ebx
mov dword [ebp - 0x40], 4
mov dword [ebp - 0x2a4], 0xffffffff
mov dword [ebp - 0x228], 6
mov dword [ebp - 0x2d4], 0x94a61bf0
mov dword [ebp - 0x40], 0x4495231f
mov dword [ebp - 0x220], 0xfffffff9
mov dword [ebp - 0x40], 0xfffffff7
mov dword [ebp - 0x40], 0xffffffff
mov dword [ebp - 0x40], 0xffffffff
push 1
call fcn.100021e9
push 1
lea eax, [ebp - 0x428]
mov dword [ebp - 4], 0x25
push eax
push ecx
mov dword [ebp - 0x40], 0x9d3388a0
lea ecx, [ebp - 0x254]
mov dword [ebp - 0x218], 0x66b
mov edx, 0x3c6a
push 0x3d2a
mov dword [ebp - 0x208], 0xfffffffa
call fcn.1001ce12
add esp, 0x10
lea eax, [ebp - 0x208]
lea edx, [ebp - 0x2ac]
push eax
lea eax, [ebp - 0x314]
push eax
lea eax, [ebp - 0x428]
push eax
lea eax, [ebp - 0x210]
push eax
push ecx
push ebx
lea eax, [ebp - 0x2a4]
push eax
push 0x2738
push ecx
push ecx
lea eax, [ebp - 0x218]
push eax
lea eax, [ebp - 0x2d4]
push eax
lea eax, [ebp - 0x220]
push eax
lea ecx, [ebp - 0x228]
call fcn.1001cefd
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x428]
add esp, 0x34
call fcn.10002246
push dword [ebp - 0x254]
movdqa xmm0, xmmword [0x1006feb0]
lea eax, [ebp - 0x564]
push eax
lea eax, [ebp - 0x574]
mov dword [ebp - 0x1c8], ebx
push eax
push ebx
lea ecx, [ebp - 0x1c8]
mov dword [ebp - 0x1c4], ebx
movdqu xmmword [ebp - 0x574], xmm0
mov dword [ebp - 0x1c0], ebx
call fcn.10019555
mov dword [ebp - 4], 0x26
push 3
lea ecx, [ebp - 0x440]
call fcn.100021e9
push ecx
push ecx
lea eax, [ebp - 0x440]
mov byte [ebp - 4], 0x27
push eax
lea edx, [ebp - 0x4d4]
xor cl, cl
call fcn.1001ea74
mov dword [ebp - 0x20], 0x24b0
add esp, 0xc
cmp dword [ebp - 0x20], 0x279f
jle 0x1002125d
call dword [sym.imp.KERNEL32.dll_GetSystemDefaultLangID]
mov edx, ebx
mov dword [ebp - 0x18], ebx
mov edi, ebx
mov esi, ebx
mov dword [ebp - 0x38], ebx
mov ecx, ebx
mov eax, esi
shl eax, cl
lea ecx, [edi + edx]
and eax, ecx
mov ecx, 0x1007cc18
cdq
push edx
push eax
call fcn.10013d0a
mov edx, dword [ebp - 0x18]
inc ebx
cmp ebx, 0x2596
jl 0x100211f9
inc esi
push 0
pop ebx
cmp esi, 0x57a5
jl 0x100211f6
inc edi
cmp edi, 0x30f0
jl 0x100211f4
inc edx
mov dword [ebp - 0x18], edx
cmp edx, 0x4f3e
jl 0x100211f2
push 0x1615
push 0x1d90
push 0x1155
push 0x11a7
push 0x22bc
call dword [sym.imp.GDI32.dll_Rectangle]
mov byte [ebp - 4], 0x28
cmp dword [ebp - 0x20], 0x220f
jge 0x10021297
mov edx, str.syqirzvy_ruh_hhfdb_hgrqp_dgeiuqbu_qeu_fitncr
mov ecx, 0x1007cc18
call fcn.1001875a
jmp 0x10021297
mov dword [ebp - 4], 0x27
mov esi, dword [ebp - 0x1c8]
mov dword [esi], 0xffffffeb
push 0x7cd5
push 0x1a20
push 0x7376
push 0x2688
push ecx
push 1
push 0x2b09
lea eax, [ebp - 0x304]
mov dword [ebp - 0x304], 4
push eax
push ecx
push ecx
push 0x7ec8
push 0x1885
push 0x4b79
mov edx, 0x1ccb
mov ecx, 0x4443
call fcn.1001cefd
add esp, 0x34
inc dword [esi]
cmp dword [esi], 0xfffffffa
jle 0x100212aa
lea eax, [ebp - 0x440]
mov dl, 1
push eax
lea eax, [ebp - 0x1c8]
push eax
call fcn.1001d044
pop ecx
pop ecx
lea ecx, [ebp - 0x440]
call fcn.10002246
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x1c8]
call fcn.10002246
mov byte [ebp - 0x80], bl
mov word [ebp - 0x7f], 0x197
mov byte [ebp - 0x7d], 0x7e
mov dword [ebp - 0x1c], 0x102071b1
mov dword [ebp - 0x38], 0xfeea3821
cmp dword [ebp - 0x1c], ebx
je 0x100213f7
mov dword [ebp - 0x28], 0xdbf0cf86
mov dword [ebp - 0x24], ebx
mov dword [ebp - 0x18], ebx
jmp 0x10021376
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x300], 0x3765
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 3
jl 0x10021365
cmp dword [ebp - 0x1c], ebx
jne 0x100213c7
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0x28], eax
cmp dword [ebp - 0x24], 0xffff
mov ecx, dword [ebp - 0x28]
sbb eax, eax
neg eax
sub eax, 3
sub ecx, eax
mov eax, 0xca335c22
neg ecx
sbb ecx, ecx
inc ecx
cmp eax, ecx
sbb eax, eax
inc eax
imul eax, eax, 0x859
mov dword [ebp - 0x24], eax
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x300]
mov eax, dword [ebp - 0x300]
mov eax, dword [ebp - 0x300]
mov eax, dword [ebp - 0x300]
mov eax, dword [ebp - 0x300]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x1c]
imul eax, dword [ebp - 0x24], 0xae56
mov dword [ebp - 0x38], eax
jmp 0x10021404
sub esp, 0x18
xor dl, dl
call fcn.1001c78b
add esp, 0x18
push 0xa
pop eax
push 2
mov ecx, ebx
mov word [ebp - 0xe4], ax
pop esi
mov dword [ebp - 0x114], ecx
mov edi, 0x22ba3946
mov dword [ebp - 0x3c], esi
mov dword [ebp - 0x34], esi
cmp esi, 4
jae 0x100219e1
movzx eax, byte [ebp - 0x80]
lea eax, [eax*2 + 2]
cmp esi, eax
jne 0x1002193e
movzx eax, byte [ebp + esi - 0x80]
lea ecx, [ebp - 0x458]
inc eax
mov dword [ebp - 0x114], eax
mov dword [ebp - 0x17c], edi
mov dword [ebp - 0x178], edi
mov dword [ebp - 0x174], edi
mov dword [ebp - 0x170], edi
push 2
call fcn.100021e9
mov dword [ebp - 4], 0x2a
mov dword [ebp - 0x1c], ebx
jmp 0x1002148e
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0x12c], 5
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 1
jl 0x1002147d
mov dword [ebp - 0x18], 0x286c
cmp dword [ebp - 0x18], 0x29a9
jle 0x1002151f
mov eax, ebx
mov dword [ebp - 0x28], ebx
mov ecx, ebx
mov dword [ebp - 0x24], ebx
cdq
mov edi, ebx
idiv ecx
mov dword [ebp - 0x20], edx
mov esi, ebx
mov ecx, esi
mov eax, edi
sar eax, cl
lea ecx, [ebp - 0x65c]
and eax, edx
cdq
push edx
push eax
call fcn.10002bac
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x100214d8
mov eax, dword [eax]
push eax
call fcn.1004a753
pop ecx
push ebx
push 1
lea ecx, [ebp - 0x65c]
call fcn.10014850
mov edx, dword [ebp - 0x20]
inc esi
cmp esi, 0x7b64
jl 0x100214b8
inc edi
cmp edi, 0x530b
jl 0x100214b6
mov ecx, dword [ebp - 0x24]
mov eax, dword [ebp - 0x28]
inc ecx
mov dword [ebp - 0x24], ecx
cmp ecx, 0x7812
jl 0x100214ae
inc eax
mov dword [ebp - 0x28], eax
cmp eax, 0x608b
jl 0x100214a9
mov dword [ebp - 0x1c], ebx
jmp 0x10021537
mov ecx, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x458]
mov dword [eax + ecx*4], 0x9e62b560
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 2
jl 0x10021524
cmp dword [ebp - 0x18], 0x24fb
jge 0x10021551
push str.mqru_grqvqqiw_xksz_zceelgeoi_ebzpl_sui_pdfqep_swin_botrgt_cpswji_bpvpnfzq_dnukb
call fcn.1004a753
pop ecx
mov dword [ebp - 4], 0x2a
mov dword [ebp - 0x174], ebx
cmp dword [ebp - 0x174], ebx
jl 0x1002178e
mov dword [ebp - 0x2c], 7
mov dword [ebp - 0x1c], 0xfffffffc
mov dword [ebp - 0x18], 0xfffffff7
mov dword [ebp - 0x18], ebx
jmp 0x10021595
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x1ac], 0xfffffff9
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 4
jl 0x10021584
mov dword [ebp - 0x1a0], ebx
cmp dword [ebp - 0x1a0], ebx
jl 0x10021723
push 1
lea ecx, [ebp - 0x36c]
call fcn.100021e9
push ebx
push 0x7a5a
push ecx
lea eax, [ebp - 0x4e4]
mov byte [ebp - 4], 0x2d
push eax
lea edx, [ebp - 0x36c]
mov dword [ebp - 0x18], 6
mov ecx, 0x5f43
call fcn.1001ce12
mov eax, dword [ebp - 0x36c]
add esp, 0x10
mov dword [eax], ebx
mov eax, dword [eax]
xor ecx, ecx
mov eax, dword [ebp + eax*4 - 0x12c]
test eax, eax
mov eax, dword [ebp - 0x36c]
setne cl
mov dword [ebp - 0x18], ecx
dec dword [eax]
jns 0x100215ee
mov dword [ebp - 0x4c], 0x14dd
cmp dword [ebp - 0x4c], 0x1562
jle 0x10021674
mov eax, ebx
mov dword [ebp - 0x28], ebx
mov edi, ebx
mov edx, eax
mov ecx, edi
sar edx, cl
mov esi, ebx
mov dword [ebp - 0x24], edx
mov eax, ebx
mov dword [ebp - 0x20], ebx
add eax, esi
mov ecx, 0x1007cc18
and eax, edx
cdq
push edx
push eax
call fcn.10013d0a
mov eax, dword [ebp - 0x20]
mov edx, dword [ebp - 0x24]
inc eax
mov dword [ebp - 0x20], eax
cmp eax, 0x5cb8
jl 0x10021632
inc esi
cmp esi, 0x4c6b
jl 0x1002162d
mov eax, dword [ebp - 0x28]
inc edi
cmp edi, 0x372c
jl 0x10021622
inc eax
mov dword [ebp - 0x28], eax
cmp eax, 0x399
jl 0x10021620
mov eax, dword [ebp - 0x174]
mov eax, dword [ebp - 0x1a0]
mov eax, dword [ebp - 0x1ac]
mov eax, dword [ebp - 0x1ac]
add eax, dword [ebp - 0x174]
mov dword [ebp - 0x2c], eax
mov eax, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x1a0]
mov eax, dword [ebp - 0x17c]
mov dword [ebp - 0x1c], 1
mov ecx, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x458]
mov dword [eax], ecx
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x1a0]
mov dword [ebp - 0x18], eax
mov byte [ebp - 4], 0x2e
cmp dword [ebp - 0x4c], 0x115d
jge 0x10021702
mov edx, str.msswux_nlbhwfapi_sem_fahw_vnnkhi_feebfls_acur_iuejpg_edmwuhm_erxqy_hcmudlqf
mov ecx, 0x1007cc18
call fcn.1001875a
jmp 0x10021702
mov dword [ebp - 4], 0x2d
lea ecx, [ebp - 0x36c]
mov byte [ebp - 4], 0x2a
call fcn.10002246
dec dword [ebp - 0x1a0]
jmp 0x100215a1
mov dword [ebp - 0x1c], ebx
cmp dword [ebp - 0x1c], ebx
jl 0x10021750
mov byte [ebp - 0x2d], bl
cmp byte [ebp - 0x2d], 0
je 0x1002174b
push 0x1f49
push 0x532c
sub esp, 0xc
xor dl, dl
call fcn.1001ef14
add esp, 0x14
dec dword [ebp - 0x1c]
jns 0x1002172b
mov dword [ebp - 0x1c], ebx
jmp 0x1002177e
mov dword [ebp - 0x2c], ebx
cmp dword [ebp - 0x2c], ebx
jl 0x1002177b
mov dword [ebp - 0x18], ebx
jmp 0x10021771
mov eax, dword [ebp - 0x2c]
cmp dword [ebp + eax*4 - 0x12c], ebx
jne 0x10021776
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], ebx
jle 0x10021762
dec dword [ebp - 0x2c]
jns 0x1002175d
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], ebx
jle 0x10021755
dec dword [ebp - 0x174]
jmp 0x1002155e
or edi, 0xffffffff
lea ecx, [ebp - 0x458]
mov dword [ebp - 4], edi
call fcn.10002246
mov esi, dword [ebp - 0x34]
movzx eax, byte [ebp + esi - 0x80]
dec esi
mov dword [ebp - 0x28], 7
add esi, eax
mov dword [ebp - 0x24], 0x3938dd44
mov dword [ebp - 0x2c], 9
mov dword [ebp - 0x40], edi
mov dword [ebp - 0x3c], ebx
mov dword [ebp - 0x68], edi
mov dword [ebp - 0x38], 0x6dad
mov dword [ebp - 0x4c], 0xd850270f
mov dword [ebp - 0x1c], 6
mov dword [ebp - 0x38], edi
mov dword [ebp - 0x38], edi
mov dword [ebp - 0x38], edi
mov dword [ebp - 0x44], 0x7df5
cmp dword [ebp - 0x44], 0x7e22
mov dword [ebp - 0x34], esi
jle 0x1002186d
push ebx
push ebx
push ebx
push 0xc9b
call dword [sym.imp.GDI32.dll_CreateEnhMetaFileW]
mov edi, ebx
mov dword [ebp - 0x18], ebx
mov dword [ebp - 0x38], edi
mov dword [ebp - 0x20], 0x3614
mov esi, ebx
mov eax, esi
lea ecx, [ebp - 0x68c]
and eax, edi
cdq
push edx
push eax
call fcn.10002bac
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x10021834
mov eax, dword [eax]
push eax
call fcn.1004a753
pop ecx
push ebx
push 1
lea ecx, [ebp - 0x68c]
call fcn.10014850
inc esi
cmp esi, 0x68fb
jl 0x10021818
dec edi
dec dword [ebp - 0x20]
jne 0x10021816
mov edi, dword [ebp - 0x18]
inc edi
mov dword [ebp - 0x18], edi
cmp edi, 0x2379
jl 0x1002180c
mov esi, dword [ebp - 0x34]
or edi, 0xffffffff
mov dword [ebp - 0x38], 0xd707
cmp dword [ebp - 0x44], 0x7dbb
jge 0x10021888
push str.mbslpvgm_oclu_rqsazvoqe_ryyhgkd_catep_wyhpsoj_muqlxk_dukqqkzpf
call fcn.1004a753
pop ecx
mov dword [ebp - 4], edi
mov dword [ebp - 0x2b4], 0xfffffffd
mov dword [ebp - 0x38], 0xce01153a
mov dword [ebp - 0x18], ebx
jmp 0x100218b2
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x5bc], 0x752f67d5
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 4
jl 0x100218a1
mov eax, dword [ebp - 0x2c]
xor edx, edx
mov eax, dword [ebp - 0x68]
inc dword [ebp - 0x28]
mov eax, dword [ebp - 0x24]
imul eax, dword [ebp - 0x24]
push 0x3a5a
push 1
mov dword [ebp - 0x24], eax
dec dword [ebp - 0x4c]
dec dword [ebp - 0x1c]
mov ecx, dword [ebp - 0x40]
add ecx, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x3c]
cmp eax, ecx
mov eax, dword [ebp - 0x5b0]
setg dl
xor ecx, ecx
cmp edx, eax
setl cl
xor edx, edx
mov dword [ebp - 0x40], ecx
mov ecx, dword [ebp - 0x24]
imul ecx, dword [ebp - 0x28]
mov eax, dword [ebp - 0x2c]
cmp ecx, eax
mov eax, dword [ebp - 0x4c]
setle dl
xor ecx, ecx
cmp edx, eax
mov eax, dword [ebp - 0x1c]
setl cl
xor edx, edx
cmp ecx, eax
setne dl
sub edx, dword [ebp - 0x40]
neg edx
sbb edx, edx
inc edx
mov dword [ebp - 0x3c], edx
lea edx, [ebp - 0x2b4]
call fcn.1001e945
pop ecx
mov edi, 0x22ba3946
jmp 0x100219d2
movzx edx, byte [ebp + esi - 0x7f]
mov eax, esi
sub eax, ecx
movzx eax, byte [ebp + eax - 0x82]
movzx eax, word [ebp + eax*2 - 0xe4]
mov ecx, eax
and eax, edx
or ecx, edx
sub ecx, eax
movzx eax, byte [ebp + esi - 0x80]
mov word [ebp + eax*2 - 0xe4], cx
mov dword [ebp - 0x18], 0xb110c93b
mov dword [ebp - 0x18], ebx
jmp 0x10021989
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x6e4], 0xbb4e
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 4
jl 0x10021978
mov dword [ebp - 0x18], ebx
jmp 0x100219c1
lea eax, [ebp - 0x238]
mov dword [ebp - 0x2e4], ebx
push eax
push ecx
lea eax, [ebp - 0x2e4]
mov dword [ebp - 0x238], 5
push eax
push ecx
mov cl, 1
call fcn.1001d21b
add esp, 0x10
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], ebx
jle 0x10021994
push ebx
lea ecx, [ebp - 0x114]
call fcn.1001bfb2
pop ecx
mov ecx, dword [ebp - 0x114]
add esi, 2
jmp 0x1002141e
push 2
lea ecx, [ebp - 0x464]
call fcn.100021e9
mov dword [ebp - 4], 0x32
lea ecx, [ebp - 0x470]
mov dword [ebp - 0x24], 1
mov dword [ebp - 0xe8], 0x3c407858
mov dword [ebp - 0x240], 0x145714ff
push 2
call fcn.100021e9
push 0x5f70
lea eax, [ebp - 0x464]
mov byte [ebp - 4], 0x33
push eax
push 1
lea eax, [ebp - 0xd0]
mov edx, 0x1168
push eax
push 0x5213
push 0x5fa3
push 1
push 0x1331
xor cl, cl
call fcn.1001caee
add esp, 0x20
mov dword [ebp - 0xd0], ebx
jmp 0x10021a73
mov ecx, dword [ebp - 0xd0]
mov eax, dword [ebp - 0x470]
mov dword [eax + ecx*4], ebx
inc dword [ebp - 0xd0]
cmp dword [ebp - 0xd0], 2
jl 0x10021a5e
mov dword [ebp - 0x24], 1
cmp dword [ebp - 0x24], ebx
jl 0x10021b85
push 0x3f40
lea eax, [ebp - 0xe8]
mov dword [ebp - 0x2bc], ebx
push eax
push 1
push ecx
push 0x6db
lea eax, [ebp - 0x240]
mov dword [ebp - 0x1cc], 0xfffffffa
push eax
push ecx
lea eax, [ebp - 0x470]
push eax
lea eax, [ebp - 0x2bc]
push eax
lea eax, [ebp - 0x1cc]
push eax
lea ecx, [ebp - 0x464]
call fcn.1001a9f6
add esp, 0x28
mov dword [ebp - 0xe8], 1
cmp dword [ebp - 0xe8], ebx
jl 0x10021b7c
push 0x119b
push 0x7ed4
push 1
push 0x1d26
push 0x463d
push 0x37ff
push 0x6740
push 0x57a8
push 1
push 1
push 0x73bd
push 0x3866
push 0x49c5
mov edx, 0x36ae
mov ecx, 0x436d
call fcn.1001d283
mov byte [ebp - 0x2d], bl
add esp, 0x34
cmp byte [ebp - 0x2d], 0
je 0x10021b70
push 1
push 0x533d
push 1
push 0x60a
push 0x5e0c
push 0x7587
push 1
mov edx, 0x7f49
mov ecx, 0x6527
call fcn.1001d423
add esp, 0x1c
dec dword [ebp - 0xe8]
jns 0x10021af1
dec dword [ebp - 0x24]
jns 0x10021a8c
lea ecx, [ebp - 0x470]
call fcn.10002246
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x464]
call fcn.10002246
xor eax, eax
mov word [ebp - 0xe2], ax
mov dword [ebp - 0x24], ebx
mov dword [ebp - 0x3c], 9
mov dword [ebp - 0x18], 0x55e9
cmp dword [ebp - 0x18], 0x57d1
jle 0x10021c18
mov dword [ebp - 0x20], ebx
mov dword [ebp - 0x28], ebx
mov dword [ebp - 0x44], 0x3571
mov esi, ebx
mov edi, ebx
mov dword [ebp - 0x3c], 0x1fbc
mov ebx, dword [ebp - 0x28]
mov eax, ebx
mov ecx, 0x1007cc18
or eax, edi
cdq
push edx
push eax
call fcn.10013d0a
add edi, esi
dec dword [ebp - 0x3c]
jne 0x10021bdd
inc esi
push 0
pop ebx
cmp esi, 0x6d41
jl 0x10021bd1
mov edi, dword [ebp - 0x20]
add dword [ebp - 0x28], edi
dec dword [ebp - 0x44]
jne 0x10021bcf
inc edi
mov dword [ebp - 0x20], edi
cmp edi, 0x70cb
jl 0x10021bc5
xor ecx, ecx
inc ecx
mov dword [ebp - 0x498], ecx
mov dword [ebp - 0x494], ecx
mov dword [ebp - 0x490], ecx
mov dword [ebp - 0x48c], ecx
mov dword [ebp - 4], 0x34
cmp dword [ebp - 0x18], 0x5262
jge 0x10021c55
mov edx, str.csnfznix_twjg_ewjuytg_ubajtim_jiwi_bskju_ivkwrg_bfnyh_zdtrm_zkmuo_pnfnfvdza
mov ecx, 0x1007cc18
call fcn.1001875a
xor ecx, ecx
inc ecx
or dword [ebp - 4], 0xffffffff
mov dword [ebp - 0x40], 0x24307a32
mov dword [ebp - 0x38], 0xffffffff
mov eax, dword [ebp - 0x24]
mov dword [ebp - 0x3c], ecx
mov eax, dword [ebp - 0x3c]
mov dword [ebp - 0x494], eax
sub eax, 0x15256ee9
mov edx, dword [ebp - 0x24]
add edx, eax
neg edx
push 0x5d64
sbb edx, edx
xor ecx, ecx
inc edx
cmp edx, 1
push 0x75a
setg cl
xor edx, edx
imul ecx, dword [ebp - 0x40]
mov eax, dword [ebp - 0x24]
push 1
push 0x4006
push 0x3a85
cmp ecx, eax
setne dl
sub edx, 0xfff6
neg edx
sbb edx, edx
xor eax, eax
inc edx
cmp edx, 0xfffffff6
mov dl, 1
mov cl, dl
setg al
mov dword [ebp - 0x38], eax
call fcn.1001d4ad
xor eax, eax
mov dword [ebp - 0x3fc], 7
add esp, 0x14
mov word [ebp - 0x410], ax
lea eax, [ebp - 0xe4]
mov dword [ebp - 0x400], ebx
lea ecx, [ebp - 0x410]
push eax
call fcn.10023986
cmp dword [ebp - 0x3fc], 8
lea eax, [ebp - 0x410]
push ebx
cmovae eax, dword [ebp - 0x410]
lea ecx, [ebp - 0x410]
push 1
movzx eax, word [eax]
mov dword [ebp - 0x68], eax
call fcn.10014b87
xor ecx, ecx
inc ecx
mov dword [ebp - 0x40], ecx
mov dword [ebp - 0x18], ebx
jmp 0x10021d66
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0xe0], ecx
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], ecx
jl 0x10021d59
mov dword [ebp - 0xe0], 7
jmp 0x10021da7
mov byte [ebp - 0x2d], bl
cmp byte [ebp - 0x2d], 0
je 0x10021d9a
sub esp, 0xc
push 0x3544
push ecx
push 0xccb
push ecx
call fcn.1001aa71
xor ecx, ecx
add esp, 0x1c
inc ecx
mov dword [ebp - 0x40], 0xfffffffa
dec dword [ebp - 0xe0]
cmp dword [ebp - 0xe0], 0xffffffe2
jne 0x10021d77
mov esi, ebx
mov dword [ebp - 0x20], ebx
cmp esi, 2
jae 0x100220d2
mov dword [ebp - 0x58], 0xfffffffd
lea ecx, [ebp - 0x188]
mov dword [ebp - 0x74], 0xfffffffa
push 4
call fcn.100021e9
push 0x746b
push 0x6b12
lea eax, [ebp - 0x188]
mov dword [ebp - 4], 0x36
push eax
push ecx
push 0x2707
push 1
push ecx
mov dword [ebp - 0x288], 0x762be970
lea ecx, [ebp - 0x4f4]
mov edx, 0x21cc
call fcn.1001d5cf
mov ecx, dword [ebp - 0x58]
xor edx, edx
mov eax, dword [ebp - 0x58]
add esp, 0x1c
cmp ecx, eax
setle dl
cmp edx, dword [ebp - 0x74]
je 0x10021ff6
mov dword [ebp - 0x31c], 0xfffffffd
mov dword [ebp - 0x124], 0x4c38d679
mov dword [ebp - 0x58], ebx
cmp dword [ebp - 0x58], 3
jg 0x10021fd7
mov dword [ebp - 0x13c], 0x7df7dc23
mov dword [ebp - 0x44], 0x4fea
cmp dword [ebp - 0x44], 0x5382
jle 0x10021ed3
push 0x86e
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_ExpandEnvironmentStringsW]
mov dword [ebp - 0x24], ebx
mov eax, ebx
mov dword [ebp - 0x28], ebx
mov edi, ebx
mov esi, eax
mov ecx, edi
mov edx, ebx
sar esi, cl
and esi, dword [ebp - 0x24]
mov dword [ebp - 0x3c], edx
mov eax, esi
mov ecx, 0x1007cc18
xor eax, edx
cdq
push edx
push eax
call fcn.10013d0a
mov edx, dword [ebp - 0x3c]
inc edx
mov dword [ebp - 0x3c], edx
cmp edx, 0x3c45
jl 0x10021e8d
mov eax, dword [ebp - 0x28]
inc edi
cmp edi, 0x4de1
jl 0x10021e7f
inc eax
mov dword [ebp - 0x28], eax
cmp eax, 0x7550
jl 0x10021e7d
mov ecx, dword [ebp - 0x24]
inc ecx
mov dword [ebp - 0x24], ecx
cmp ecx, 0x7336
jl 0x10021e78
mov byte [ebp - 4], 0x37
cmp dword [ebp - 0x44], 0x4d38
jge 0x10021f0d
mov edx, str.rzssfm_fisy_juosf_wnfxf_cmgl_qyorfkt_glu_rbm_hkcjbnc
mov ecx, 0x1007cc18
call fcn.1001875a
jmp 0x10021f0d
mov dword [ebp - 4], 0x36
mov ecx, dword [ebp - 0x58]
mov eax, dword [ebp - 0x188]
cmp dword [eax + ecx*4], ebx
jne 0x10021fd7
mov dword [ebp - 0x74], ebx
jmp 0x10021fc5
lea eax, [ebp - 0x58]
mov dword [ebp - 0x144], 0xffffffff
push eax
lea eax, [ebp - 0x144]
mov dword [ebp - 0x250], 0xfffffffb
push eax
lea eax, [ebp - 0x74]
mov ecx, 0x5c5
push eax
push 0x1584
push 0x6081
push 0x4d56
push 1
push 0x1eb0
lea eax, [ebp - 0x31c]
push eax
push 1
push 1
lea eax, [ebp - 0x124]
push eax
lea eax, [ebp - 0x250]
push eax
lea eax, [ebp - 0x13c]
push eax
lea edx, [ebp - 0x188]
call fcn.1001d79e
add esp, 0x38
lea eax, [ebp - 0x144]
lea edx, [ebp - 0x188]
push eax
push ecx
push 1
lea eax, [ebp - 0x13c]
push eax
push ecx
push ecx
lea eax, [ebp - 0x74]
push eax
lea ecx, [ebp - 0x58]
call fcn.1001dcc7
add esp, 0x1c
inc dword [ebp - 0x74]
cmp dword [ebp - 0x74], 3
jle 0x10021f2e
inc dword [ebp - 0x58]
jmp 0x10021e44
sub esp, 0xc
lea eax, [ebp - 0x124]
lea edx, [ebp - 0x74]
xor cl, cl
push eax
call fcn.1001dd1c
mov esi, dword [ebp - 0x20]
add esp, 0x10
jmp 0x1002208e
mov dword [ebp - 0x15c], 1
mov dword [ebp - 0x2c4], 0x81db3aac
mov dword [ebp - 0x58], 0x18
jmp 0x10022088
lea eax, [ebp - 0x74]
mov dword [ebp - 0x258], 0xffffffff
push eax
push 0x679c
push 1
sub esp, 0xc
lea eax, [ebp - 0x15c]
push 0x2d6f
push ecx
push ecx
push 0x783c
sub esp, 0xc
push 0x58f2
push 0x2e1e
push ecx
push eax
call fcn.1001dd71
add esp, 0x44
lea eax, [ebp - 0x2c4]
lea edx, [ebp - 0x258]
push eax
push 1
push ecx
lea eax, [ebp - 0x15c]
push eax
push ecx
push 0x670b
push ecx
push 0x598b
lea ecx, [ebp - 0x188]
call fcn.1001dea1
add esp, 0x20
dec dword [ebp - 0x58]
cmp dword [ebp - 0x58], 0xffffffec
jg 0x10022013
push 1
lea eax, [ebp - 0x188]
push eax
lea eax, [ebp - 0x288]
push eax
push ecx
push 0x2ed1
push ecx
lea edx, [ebp - 0x58]
call fcn.1001abba
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x188]
add esp, 0x18
call fcn.10002246
xor eax, eax
mov word [ebp + esi*2 - 0xe4], ax
inc esi
mov dword [ebp - 0x20], esi
jmp 0x10021db5
push 2
lea ecx, [ebp - 0x434]
call fcn.100021e9
push 1
push 0x67fe
mov dword [ebp - 4], 0x39
lea edx, [ebp - 0x434]
push ebx
mov dword [ebp - 0xec], 0x838a1f94
lea ecx, [ebp - 0xd8]
push 0x4f76
mov dword [ebp - 0x2b0], 0x82baef6e
push 0x1caa
mov dword [ebp - 0x270], 0xffffffff
mov dword [ebp - 0x268], 0x6bc657e3
push 0x1fc0
mov dword [ebp - 0x280], 0xffff
mov dword [ebp - 0x2a8], 0x90538e0e
push 1
call fcn.1001d423
add esp, 0x1c
mov dword [ebp - 0xd8], ebx
jmp 0x1002216e
mov eax, dword [ebp - 0xd8]
mov dword [ebp + eax*4 - 0x5c4], 0x6917ab6d
inc dword [ebp - 0xd8]
cmp dword [ebp - 0xd8], 2
jl 0x10022157
mov dword [ebp - 0xec], 1
cmp dword [ebp - 0xec], ebx
jl 0x10022229
lea eax, [ebp - 0x260]
mov dword [ebp - 0x260], 0xffffffff
push eax
push ecx
lea eax, [ebp - 0x290]
mov dword [ebp - 0x298], 0xb0d193e0
push eax
lea eax, [ebp - 0x434]
mov dword [ebp - 0x278], 0xffffffff
push eax
push ecx
lea eax, [ebp - 0x268]
mov dword [ebp - 0x2a0], 0x3718bd85
push eax
push ecx
lea eax, [ebp - 0x298]
mov dword [ebp - 0x290], 1
push eax
lea eax, [ebp - 0x270]
push eax
lea eax, [ebp - 0xec]
push eax
lea eax, [ebp - 0x2a0]
push eax
push ecx
lea eax, [ebp - 0x278]
push eax
lea eax, [ebp - 0x2a8]
push eax
lea edx, [ebp - 0x280]
lea ecx, [ebp - 0x2b0]
call fcn.1001deed
add esp, 0x38
dec dword [ebp - 0xec]
jns 0x1002218d
mov byte [ebp - 0x2d], bl
cmp byte [ebp - 0x2d], 0
je 0x10022254
push 0x329
push 0x2106
push 0x7216
push 1
push 1
mov dl, 1
mov ecx, 0x3dac
call fcn.1001e0c8
add esp, 0x14
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x434]
call fcn.10002246
mov eax, dword [ebp - 0x11c]
shr eax, 1
mov dword [ebp - 0x40], eax
mov eax, dword [ebp - 0xd4]
inc eax
cmp eax, dword [ebp - 0x40]
jae 0x1002264c
mov dword [ebp - 0x24], 0xffffffff
mov dword [ebp - 0x18], ebx
jmp 0x1002229b
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x3e8], 1
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 2
jl 0x1002228a
mov dword [ebp - 0x24], ebx
cmp dword [ebp - 0x24], 0x11
je 0x1002238b
mov dword [ebp - 0x1c], 3
mov dword [ebp - 0x1c], ebx
jmp 0x100222c9
mov eax, dword [ebp - 0x1c]
cmp dword [ebp + eax*4 - 0x3e8], ebx
jne 0x100222cf
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 1
jle 0x100222ba
mov dword [ebp - 0x1c], ebx
cmp dword [ebp - 0x1c], 2
jge 0x10022383
mov dword [ebp - 0x20], 0x6c4b
cmp dword [ebp - 0x20], 0x6f89
jle 0x10022328
mov edi, ebx
mov esi, ebx
mov eax, edi
mov dword [ebp - 0x44], 0x23f
mov dword [ebp - 0x3c], eax
cdq
mov ecx, 0x1007cc18
push edx
push eax
call fcn.10013d0a
mov eax, dword [ebp - 0x3c]
add eax, esi
dec dword [ebp - 0x44]
mov dword [ebp - 0x3c], eax
jne 0x100222fc
dec esi
cmp esi, 0xffffb507
jg 0x100222f0
inc edi
cmp edi, 0xe0b
jl 0x100222ee
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0x3e8], 9
mov dword [ebp - 4], 0x3a
cmp dword [ebp - 0x20], 0x6bc0
jge 0x10022355
mov edx, str.zqwi_ckf_ckiy_qvgw_ndxicmgvn_zquxzj_obotb_atlb_ngxlenv
mov ecx, 0x1007cc18
call fcn.1001875a
or dword [ebp - 4], 0xffffffff
inc dword [ebp - 0x1c]
jmp 0x100222d2
inc dword [ebp - 0x24]
jmp 0x100222a4
mov eax, dword [ebp - 0x48]
mov ecx, dword [ebp - 0xd4]
lea ecx, [eax + ecx*2]
call fcn.10019e24
mov dword [ebp - 0xf8], eax
lea ecx, [ebp - 0x52c]
mov dword [ebp - 0x1d8], ebx
mov dword [ebp - 0x1dc], 0x7fd8
push 3
call fcn.100021e9
mov dword [ebp - 4], 0x3c
mov dword [ebp - 0x18], ebx
jmp 0x100223de
mov ecx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x52c]
mov dword [eax + ecx*4], 0xad2b
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 3
jl 0x100223cb
push 1
push ecx
push ecx
lea eax, [ebp - 0x1d8]
mov ecx, 0x33f3
push eax
lea edx, [ebp - 0x1dc]
call fcn.1001e1ca
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x52c]
add esp, 0x10
call fcn.10002246
mov eax, dword [ebp - 0x48]
mov ecx, dword [ebp - 0xd4]
add eax, 4
lea ecx, [eax + ecx*2]
call fcn.10019e24
mov dword [ebp - 0x100], eax
mov dword [ebp - 0x1c], ebx
jmp 0x10022441
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0x5cc], 0x62fd41e5
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 2
jl 0x10022430
mov dword [ebp - 0x1c], ebx
jmp 0x1002245d
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0x4a8], 0xa7c20398
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 4
jl 0x1002244c
xor eax, eax
inc eax
mov dword [ebp - 0x4a4], eax
cmp dword [ebp - 0x4a4], ebx
jl 0x10022482
mov dword [ebp - 0x38], eax
mov dword [ebp - 0x38], ebx
dec dword [ebp - 0x4a4]
jns 0x10022474
cmp dword [ebp - 0xf8], 0xffffffff
jne 0x10022896
cmp dword [ebp - 0x100], 0
jne 0x10022896
mov dword [ebp - 0x54], 0xf9c2
lea ecx, [ebp - 0x194]
mov dword [ebp - 0xac], 0x9d29be1d
push 2
call fcn.100021e9
lea eax, [ebp - 0x194]
mov dword [ebp - 4], 0x3d
push eax
push 0x5be5
lea eax, [ebp - 0x4fc]
mov dword [ebp - 0x3c], 0xffffffff
push eax
push 0x26d2
push ecx
mov dword [ebp - 0x28], 0x5d0bc5de
mov cl, 1
call fcn.1001ad1b
add esp, 0x10
lea edx, [ebp - 0x54]
push 1
push ecx
push ecx
lea ecx, [ebp - 0xac]
call fcn.1001ad72
add esp, 0x10
mov dword [ebp - 0x54], ebx
jmp 0x10022887
mov dword [ebp - 0x18], 0x3acb6d6
lea ecx, [ebp - 0x33c]
push 2
call fcn.100021e9
mov byte [ebp - 4], 0x3e
xor ecx, ecx
mov dword [ebp - 0x40], 0x7ece519c
inc ecx
mov dword [ebp - 0x24], 0xffffffff
mov dword [ebp - 0xcc], ebx
jmp 0x10022554
mov eax, dword [ebp - 0xcc]
mov dword [ebp + eax*4 - 0x70], 0x7d8c
inc dword [ebp - 0xcc]
cmp dword [ebp - 0xcc], ecx
jl 0x10022540
push ecx
push 0x65ba
lea eax, [ebp - 0x33c]
push eax
push 0x3161
push ecx
push 0x4e6c
lea edx, [ebp - 0xcc]
call fcn.1001e41e
mov ecx, dword [ebp - 0x54]
add esp, 0x18
mov eax, dword [ebp - 0x194]
cmp dword [eax + ecx*4], ebx
je 0x1002270c
cmp dword [ebp - 0x70], ebx
je 0x100225fb
mov ecx, dword [ebp - 0x70]
mov eax, dword [ebp - 0x194]
mov dword [eax + 4], ecx
test ecx, ecx
jne 0x100225d4
mov ecx, dword [ebp - 0x54]
mov eax, dword [ebp - 0x194]
cmp dword [eax + ecx*4], ebx
je 0x100225c4
cmp dword [ebp - 0xac], ebx
je 0x100225c4
mov eax, ebx
cmp eax, dword [ebp - 0x18]
jle 0x100225d4
xor eax, eax
inc eax
imul eax, eax, 9
mov dword [ebp - 0xac], eax
mov eax, dword [ebp - 0xac]
mov eax, dword [ebp - 0x3c]
mov eax, dword [ebp - 0x54]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x70]
mov eax, dword [ebp - 0x70]
mov eax, dword [ebp - 0x54]
mov eax, dword [ebp - 0x70]
mov eax, dword [ebp - 0x3c]
xor edx, edx
mov ecx, dword [ebp - 0x54]
mov eax, dword [ebp - 0x194]
add ecx, dword [eax]
mov eax, dword [ebp - 0x70]
cmp eax, ecx
mov eax, dword [ebp - 0x54]
setge dl
imul eax, edx
cmp eax, dword [ebp - 0x18]
jge 0x1002270c
mov dword [ebp - 0x40], 0xf69a
cmp dword [ebp - 0x40], ebx
je 0x10022875
lea ecx, [ebp - 0x33c]
call fcn.10002246
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x194]
call fcn.10002246
mov dword [ebp - 0xbc], 0xfffffff9
lea edx, [ebp - 0xbc]
mov dword [ebp - 0x244], 8
mov dword [ebp - 0x234], 0xb1f356d9
push 1
call fcn.1001e05c
pop ecx
mov dword [ebp - 0xbc], 0x12
cmp dword [ebp - 0xbc], 0xb
jg 0x1001f7ce
push 1
lea ecx, [ebp - 0x378]
call fcn.100021e9
lea eax, [ebp - 0x4ac]
mov dword [ebp - 4], 0x47
push eax
lea eax, [ebp - 0x378]
mov dword [ebp - 0xf4], 0xffffffff
push eax
mov dl, 1
mov dword [ebp - 0x23c], 0xfa18394d
push 0x4479
push 1
mov cl, dl
call fcn.1001b20f
add esp, 0x10
mov dword [ebp - 0xf4], ebx
cmp dword [ebp - 0xf4], ebx
jg 0x100231c3
mov dword [ebp - 0x24], 0xe45bbbde
mov dword [ebp - 0x24], ebx
cmp dword [ebp - 0x24], ebx
jl 0x100231b8
mov dword [ebp - 0x18], 1
mov dword [ebp - 0x18], ebx
jmp 0x100230e2
mov dword [ebp - 0x44], 0xfffffff7
lea ecx, [ebp - 0x39c]
mov dword [ebp - 0x38], 0x253d5ab8
mov dword [ebp - 0x68], 0x26ffea1e
mov dword [ebp - 0x20], 0xf09d89c1
mov dword [ebp - 0x34], 0x889b05f6
mov dword [ebp - 0x40], 0xffffffff
push 3
call fcn.100021e9
push 0xc39
push 1
push 0x814
push ebx
push 1
push 0x24f8
push 0xdf6
lea eax, [ebp - 0x25c]
mov byte [ebp - 4], 0x3f
push eax
push 0x3eb2
lea edx, [ebp - 0x39c]
mov ecx, 0x325
call fcn.1001c615
add esp, 0x24
dec dword [ebp - 0x24]
mov ecx, dword [ebp - 0x28]
mov eax, dword [ebp - 0x33c]
mov dword [eax + 4], ecx
cmp dword [ebp - 0x40], ebx
je 0x10022798
cmp dword [ebp - 0x24], ebx
jne 0x1002279e
mov eax, dword [ebp - 0xac]
mov eax, dword [ebp - 0x70]
mov ecx, dword [ebp - 0x20]
mov eax, dword [ebp - 0x70]
add eax, ecx
mov ecx, dword [ebp - 0x54]
imul ecx, eax
cmp ecx, dword [ebp - 0x38]
jge 0x100227bd
cmp dword [ebp - 0x24], ebx
jne 0x100227bd
mov edx, ebx
jmp 0x100227c0
xor edx, edx
inc edx
mov eax, dword [ebp - 0x68]
xor ecx, ecx
cmp edx, eax
setg cl
cmp ecx, 0xfff7
jne 0x100227d7
cmp dword [ebp - 0x18], ebx
jne 0x100227da
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x34]
cmp dword [ebp - 0x44], 0xfd5b
jge 0x100227f9
lea ecx, [ebp - 0x33c]
mov byte [ebp - 4], 0x3d
call fcn.10002246
inc dword [ebp - 0x54]
cmp dword [ebp - 0x54], 1
jle 0x1002250f
jmp 0x1002263d
mov dword [ebp - 0x2c], 0xffffffff
lea ecx, [ebp - 0x488]
push eax
call fcn.100021e9
mov dword [ebp - 4], 0x40
mov dword [ebp - 0x60], ebx
jmp 0x100228c6
mov eax, dword [ebp - 0x60]
mov dword [ebp + eax*4 - 0x348], 0xffff
inc dword [ebp - 0x60]
cmp dword [ebp - 0x60], 3
jl 0x100228b5
lea eax, [ebp - 0x488]
mov dl, 1
push eax
lea eax, [ebp - 0x60]
push eax
call fcn.1001ae51
pop ecx
pop ecx
mov dword [ebp - 0x60], ebx
jmp 0x100228f6
mov eax, dword [ebp - 0x60]
mov dword [ebp + eax*4 - 0x1d4], 0x76fb
inc dword [ebp - 0x60]
cmp dword [ebp - 0x60], 1
jl 0x100228e5
mov eax, dword [ebp - 0x2c]
xor edx, edx
mov eax, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x340]
mov eax, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x348]
mov eax, dword [ebp - 0x340]
mov ecx, dword [ebp - 0x348]
mov eax, dword [ebp - 0x488]
cmp ecx, dword [eax]
lea ecx, [ebp - 0x488]
setle dl
xor eax, eax
cmp edx, 0x7684
setle al
mov dword [ebp - 0x1d4], eax
or dword [ebp - 4], 0xffffffff
call fcn.10002246
sub esp, 0xc
lea ecx, [ebp - 0xd4]
mov dl, 1
call fcn.1001e6a2
add esp, 8
mov dword [ebp - 0x90], 2
mov dword [ebp - 0x1f4], ebx
lea edx, [ebp - 0x90]
mov cl, 1
push 0x6e33
call fcn.1001e6d7
pop ecx
pop ecx
mov dword [ebp - 0x90], ebx
jmp 0x100229f1
mov dword [ebp - 0xa0], 0xa5c62e08
mov dword [ebp - 0xa0], 0xfffffffd
jmp 0x100229e2
mov dword [ebp - 0x1ec], 0xfffffff8
cmp dword [ebp - 0x90], ebx
jne 0x100229eb
cmp dword [ebp - 0xa0], 0xfffffff2
jge 0x100229ab
inc dword [ebp - 0x90]
cmp dword [ebp - 0x90], 0xc
jge 0x10022995
cmp dword [ebp - 0x100], 0
jle 0x10022fc7
mov dword [ebp - 0x88], 0x17571177
mov dword [ebp - 0x20c], 1
mov dword [ebp - 0x88], ebx
jmp 0x10022a76
cmp dword [ebp - 0x88], 0xffffffe6
jl 0x10022a23
push ecx
push 1
push ecx
mov dword [ebp - 0xb4], 0xea5d6c05
mov ecx, 0x7990
call fcn.1001ebd2
add esp, 0xc
mov dword [ebp - 0xb4], 0xffffffe8
jmp 0x1002303d
cmp dword [ebp - 0xb4], 0x11
jg 0x10022fee
mov dword [ebp - 0x6c], 1
mov dword [ebp - 0x6c], ebx
cmp dword [ebp - 0x6c], ebx
jl 0x100230a7
lea eax, [ebp - 0x22c]
mov dword [ebp - 0x22c], 0xc80ae7b1
push eax
lea eax, [ebp - 0x6c]
mov dl, 1
push eax
sub esp, 0xc
call fcn.1001ef14
add esp, 0x14
dec dword [ebp - 0x6c]
jns 0x10023080
mov dword [ebp - 0x6c], ebx
cmp dword [ebp - 0x6c], ebx
jl 0x100230df
mov ecx, dword [ebp - 0x6c]
mov eax, dword [ebp - 0x378]
cmp dword [eax + ecx*4], ebx
jne 0x100230df
push 1
push 0x4c89
push 1
push 0x6dbf
mov edx, 0x38d6
mov cl, 1
call fcn.1001b29e
add esp, 0x10
dec dword [ebp - 0x6c]
jns 0x100230af
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], ebx
jle 0x10023071
mov dword [ebp - 0x44], 0x5f36
cmp dword [ebp - 0x44], 0x5f9c
jle 0x10023180
mov edx, ebx
mov dword [ebp - 0x18], ebx
mov edi, ebx
mov esi, ebx
mov eax, ebx
mov dword [ebp - 0x28], edi
mov ecx, esi
mov dword [ebp - 0x3c], eax
shl dword [ebp - 0x28], cl
and eax, dword [ebp - 0x28]
lea ecx, [ebp - 0x6d4]
or eax, edx
cdq
push edx
push eax
call fcn.10002bac
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x1002312e
mov eax, dword [eax]
push eax
call fcn.1004a753
pop ecx
push ebx
push 1
lea ecx, [ebp - 0x6d4]
call fcn.10014850
mov eax, dword [ebp - 0x3c]
mov edx, dword [ebp - 0x18]
inc eax
mov dword [ebp - 0x3c], eax
cmp eax, 0x1a61
jl 0x10023111
inc esi
cmp esi, 0x3b28
jl 0x10023104
inc edi
cmp edi, 0x7d22
jl 0x10023102
inc edx
mov dword [ebp - 0x18], edx
cmp edx, 0xcf5
jl 0x10023100
push ebx
push 0x2378
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_VerSetConditionMask]
push 1
push ecx
push 0x762
mov edx, 0x20d0
call fcn.1001b3c4
add esp, 0xc
cmp dword [ebp - 0x44], 0x5e66
jge 0x100231a9
push str.tkxpi_ayl_qytbb_mvwsrbf_fpabj_bdmtri_rsaw
call fcn.1004a753
pop ecx
mov dword [ebp - 4], 0x47
dec dword [ebp - 0x24]
jmp 0x100226f4
inc dword [ebp - 0xf4]
jmp 0x100226de
push ecx
lea eax, [ebp - 0x234]
mov cl, 1
push eax
lea eax, [ebp - 0x23c]
push eax
lea eax, [ebp - 0x244]
push eax
lea eax, [ebp - 0x378]
push eax
lea eax, [ebp - 0xf4]
push eax
lea edx, [ebp - 0xbc]
call fcn.1001b564
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x378]
add esp, 0x18
call fcn.10002246
dec dword [ebp - 0xbc]
jmp 0x10022682