Function at 0x1001c6f0
Capabilities:
Parse pe header
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x10058069
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
push ecx
sub esp, 0x4cc
push ebx
push esi
push edi
mov dword [ebp - 0x10], esp
cmp dword [ebp + 0x10], 0
jbe 0x1001c737
movzx eax, byte [ebp + 0x14]
test eax, eax
je 0x1001c737
movzx eax, word [ebp + 0x10]
push eax
push dword [ebp + 8]
call fcn.10017a4c
pop ecx
pop ecx
jmp 0x1001ea8f
mov dword [ebp - 0x3d0], 0xfffffffd
mov dword [ebp - 0x3e0], 1
mov dword [ebp - 0x3cc], 0x713a473e
mov dword [ebp - 0x3a8], 0
mov dword [ebp - 0x3c0], 0x738ab659
mov dword [ebp - 0x3b0], 0
mov dword [ebp - 0x39c], 1
mov dword [ebp - 0x398], 1
mov dword [ebp - 0x394], 1
mov dword [ebp - 0x390], 1
lea ecx, [ebp - 0x15d]
call fcn.10004e1e
push eax
lea eax, [ebp - 0x38c]
push eax
lea eax, [ebp - 0x39c]
push eax
lea ecx, [ebp - 0x464]
call fcn.10004e21
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0x414]
call fcn.10004dcd
mov dword [ebp - 0x3b8], 0x8f2ba167
mov dword [ebp - 0x3b4], 0x6d6dbc1c
mov dword [ebp - 0x3dc], 1
mov dword [ebp - 0x20c], 0x5702377d
mov dword [ebp - 0x144], 0
jmp 0x1001c811
mov eax, dword [ebp - 0x144]
inc eax
mov dword [ebp - 0x144], eax
cmp dword [ebp - 0x144], 3
jge 0x1001c82d
mov eax, dword [ebp - 0x144]
mov dword [ebp + eax*4 - 0x4ac], 0x93009ce4
jmp 0x1001c804
mov byte [ebp - 0x60], 0
movzx eax, byte [ebp - 0x60]
test eax, eax
je 0x1001c83f
call dword [sym.imp.KERNEL32.dll_GetCurrentThread]
mov eax, dword [ebp - 0x20c]
dec eax
mov dword [ebp - 0x20c], eax
lea ecx, [ebp - 0x414]
call fcn.10004df3
cmp dword [ebp + 0x10], 0
jne 0x1001df7d
mov edx, dword [ebp + 8]
mov ecx, dword [ebp + 0xc]
call fcn.100130d0
mov dword [ebp - 0xf0], eax
mov dword [ebp - 0x25c], 0x3046
mov dword [ebp - 0x358], str.hywbkfg_yrvnbp_rqjjmas_gqn_zgxgmr_rzcoc_qfiywbxdu_epuuw_rlmte_zqt_hghatdx_yxi_ylshta_zaoftoh
cmp dword [ebp - 0x25c], 0x32a9
jle 0x1001c976
push 0xd8a
call dword [sym.imp.USER32.dll_IsIconic]
and dword [ebp - 0x140], 0
jmp 0x1001c8b7
mov eax, dword [ebp - 0x140]
inc eax
mov dword [ebp - 0x140], eax
cmp dword [ebp - 0x140], 0x4e17
jge 0x1001c976
and dword [ebp - 0x14c], 0
jmp 0x1001c8dd
mov eax, dword [ebp - 0x14c]
inc eax
mov dword [ebp - 0x14c], eax
cmp dword [ebp - 0x14c], 0x7cb9
jge 0x1001c971
and dword [ebp - 0x154], 0
jmp 0x1001c903
mov eax, dword [ebp - 0x154]
inc eax
mov dword [ebp - 0x154], eax
cmp dword [ebp - 0x154], 0x7596
jge 0x1001c96c
mov eax, dword [ebp - 0x14c]
add eax, dword [ebp - 0x154]
and eax, dword [ebp - 0x140]
cdq
mov dword [ebp - 0x2d0], eax
mov dword [ebp - 0x2cc], edx
push dword [ebp - 0x2cc]
push dword [ebp - 0x2d0]
lea ecx, [ebp - 0x4dc]
call fcn.10001a51
pop ecx
pop ecx
mov dword [ebp - 0x318], eax
mov ecx, dword [ebp - 0x318]
call fcn.10001c18
push eax
call fcn.1003fd76
pop ecx
lea ecx, [ebp - 0x4dc]
call fcn.10001c0e
jmp 0x1001c8f6
jmp 0x1001c8d0
jmp 0x1001c8aa
push 3
lea ecx, [ebp - 0x84]
call fcn.10004d70
and dword [ebp - 4], 0
mov dword [ebp - 0x54], 1
mov dword [ebp - 0xf4], 0xc4dd
mov dword [ebp - 0x34], 0
mov dword [ebp - 0x280], 0x63e6
mov dword [ebp - 0x310], str.kxsmbzne_udzpr_pyse
cmp dword [ebp - 0x280], 0x676f
jle 0x1001ca9e
and dword [ebp - 0x124], 0
jmp 0x1001c9d9
mov eax, dword [ebp - 0x124]
inc eax
mov dword [ebp - 0x124], eax
cmp dword [ebp - 0x124], 0x32ab
jge 0x1001ca9e
and dword [ebp - 0xdc], 0
jmp 0x1001c9ff
mov eax, dword [ebp - 0xdc]
inc eax
mov dword [ebp - 0xdc], eax
cmp dword [ebp - 0xdc], 0x3b33
jge 0x1001ca99
and dword [ebp - 0xd0], 0
jmp 0x1001ca25
mov eax, dword [ebp - 0xd0]
inc eax
mov dword [ebp - 0xd0], eax
cmp dword [ebp - 0xd0], 0x2e50
jge 0x1001ca94
and dword [ebp - 0xe4], 0
jmp 0x1001ca47
mov eax, dword [ebp - 0xe4]
inc eax
mov dword [ebp - 0xe4], eax
cmp dword [ebp - 0xe4], 0x480a
jge 0x1001ca92
mov eax, dword [ebp - 0x124]
sub eax, dword [ebp - 0xdc]
sub eax, dword [ebp - 0xd0]
mov ecx, dword [ebp - 0xe4]
sar eax, cl
cdq
mov dword [ebp - 0x2d8], eax
mov dword [ebp - 0x2d4], edx
push dword [ebp - 0x2d4]
push dword [ebp - 0x2d8]
mov ecx, 0x100720b8
call fcn.10001c38
jmp 0x1001ca3a
jmp 0x1001ca18
jmp 0x1001c9f2
jmp 0x1001c9cc
mov dword [ebp - 0x8c], 0
mov byte [ebp - 4], 1
cmp dword [ebp - 0x280], 0x6252
jge 0x1001cac8
mov edx, dword [ebp - 0x310]
mov ecx, 0x100720b8
call fcn.100035ef
jmp 0x1001cae4
and dword [ebp - 4], 0
jmp 0x1001caee
mov dword [ebp - 0x150], 0
mov dword [ebp - 0x1f4], 0xfff6
push 1
lea ecx, [ebp - 0x388]
call fcn.10004d70
mov byte [ebp - 4], 3
mov dword [ebp - 0x24], 0
jmp 0x1001cb23
mov eax, dword [ebp - 0x24]
inc eax
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 3
jge 0x1001cb3f
push dword [ebp - 0x24]
lea ecx, [ebp - 0x84]
call fcn.10004e0f
mov dword [eax], 0x5691
jmp 0x1001cb1c
mov dword [ebp - 0x24], 0
jmp 0x1001cb4f
mov eax, dword [ebp - 0x24]
inc eax
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 1
jge 0x1001cb6b
push dword [ebp - 0x24]
lea ecx, [ebp - 0x388]
call fcn.10004e0f
mov dword [eax], 0xff147090
jmp 0x1001cb48
push 1
lea ecx, [ebp - 0x84]
call fcn.10004e0f
mov dword [eax], 1
mov dword [ebp - 0x54], 0x1328f6c7
mov esi, dword [ebp - 0x54]
push 2
lea ecx, [ebp - 0x84]
call fcn.10004e0f
cmp dword [eax], esi
jl 0x1001cba5
mov dword [ebp - 0x18c], 1
jmp 0x1001cbac
and dword [ebp - 0x18c], 0
mov eax, 0xd7d3
test eax, eax
je 0x1001cbd3
push 1
lea ecx, [ebp - 0x84]
call fcn.10004e0f
cmp dword [eax], 0
je 0x1001cbd3
mov dword [ebp - 0x288], 1
jmp 0x1001cbda
and dword [ebp - 0x288], 0
push 6
pop esi
sub esi, dword [ebp - 0x288]
push 1
lea ecx, [ebp - 0x84]
call fcn.10004e0f
sub esi, dword [eax]
push 1
lea ecx, [ebp - 0x84]
call fcn.10004e0f
imul esi, dword [eax]
push 2
lea ecx, [ebp - 0x84]
call fcn.10004e0f
sub esi, dword [eax]
cmp esi, 0x1b6e
jge 0x1001cc37
push 1
lea ecx, [ebp - 0x84]
call fcn.10004e0f
cmp dword [eax], 0
je 0x1001cc37
mov dword [ebp - 0x290], 1
jmp 0x1001cc3e
and dword [ebp - 0x290], 0
push 2
lea ecx, [ebp - 0x84]
call fcn.10004e0f
mov ecx, dword [ebp - 0x290]
cmp ecx, dword [eax]
jl 0x1001cc73
push 1
lea ecx, [ebp - 0x84]
call fcn.10004e0f
cmp dword [eax], 0
je 0x1001cc73
mov dword [ebp - 0x298], 1
jmp 0x1001cc7a
and dword [ebp - 0x298], 0
xor eax, eax
inc eax
sub eax, dword [ebp - 0x298]
cmp eax, dword [ebp - 0xf4]
jl 0x1001cc97
mov dword [ebp - 0x2a4], 1
jmp 0x1001cc9e
and dword [ebp - 0x2a4], 0
push 1
lea ecx, [ebp - 0x84]
call fcn.10004e0f
mov ecx, dword [ebp - 0x2a4]
cmp ecx, dword [eax]
jl 0x1001ccc1
mov dword [ebp - 0x278], 1
jmp 0x1001ccc8
and dword [ebp - 0x278], 0
mov eax, dword [ebp - 0x18c]
cmp eax, dword [ebp - 0x278]
jl 0x1001cce9
push 6
pop eax
test eax, eax
je 0x1001cce9
mov dword [ebp - 0x28c], 1
jmp 0x1001ccf0
and dword [ebp - 0x28c], 0
push 0
lea ecx, [ebp - 0x84]
call fcn.10004e0f
mov ecx, dword [ebp - 0x28c]
cmp ecx, dword [eax]
jne 0x1001d0a0
mov dword [ebp - 0x44], 0xffffffff
mov dword [ebp - 0x158], 0x1af53c8c
mov dword [ebp - 0x194], 0x17ab
mov dword [ebp - 0x2c8], str.mwrwp_cfgqz_pka_oqlking_vru_zoqejzvk_szc_zedyx_kln_gcz_midylukp_lrht_ooxelacma
cmp dword [ebp - 0x194], 0x1802
jle 0x1001cded
and dword [ebp - 0x130], 0
jmp 0x1001cd56
mov eax, dword [ebp - 0x130]
inc eax
mov dword [ebp - 0x130], eax
cmp dword [ebp - 0x130], 0x3b36
jge 0x1001cded
and dword [ebp - 0x13c], 0
jmp 0x1001cd7c
mov eax, dword [ebp - 0x13c]
inc eax
mov dword [ebp - 0x13c], eax
cmp dword [ebp - 0x13c], 0x5fd9
jge 0x1001cde8
and dword [ebp - 0xec], 0
jmp 0x1001cd9e
mov eax, dword [ebp - 0xec]
inc eax
mov dword [ebp - 0xec], eax
cmp dword [ebp - 0xec], 0x2d3b
jge 0x1001cde6
mov eax, dword [ebp - 0x13c]
imul eax, dword [ebp - 0xec]
mov ecx, dword [ebp - 0x130]
sub ecx, eax
mov eax, ecx
cdq
mov dword [ebp - 0x2e4], eax
mov dword [ebp - 0x2e0], edx
push dword [ebp - 0x2e0]
push dword [ebp - 0x2e4]
mov ecx, 0x100720b8
call fcn.10001c38
jmp 0x1001cd91
jmp 0x1001cd6f
jmp 0x1001cd49
mov dword [ebp - 0x1bc], 0xee07f093
mov byte [ebp - 4], 4
cmp dword [ebp - 0x194], 0x1589
jge 0x1001ce17
mov edx, dword [ebp - 0x2c8]
mov ecx, 0x100720b8
call fcn.100035ef
jmp 0x1001ce33
mov dword [ebp - 4], 3
jmp 0x1001ce43
mov dword [ebp - 0x330], 0x1f9c8520
cmp dword [ebp - 0x44], 0
jne 0x1001cef1
push 0
lea ecx, [ebp - 0x84]
call fcn.10004e0f
mov eax, dword [eax]
mov dword [ebp - 0x54], eax
mov eax, dword [ebp - 0x54]
mov dword [ebp - 0x34], eax
mov eax, dword [ebp - 0xf4]
cmp eax, dword [ebp - 0x34]
jne 0x1001ce86
mov dword [ebp - 0x320], 1
jmp 0x1001ce8d
and dword [ebp - 0x320], 0
cmp dword [ebp - 0x44], 1
je 0x1001ce9f
mov dword [ebp - 0x328], 1
jmp 0x1001cea6
and dword [ebp - 0x328], 0
mov eax, dword [ebp - 0x44]
mov dword [ebp - 0x3bc], eax
push 1
lea ecx, [ebp - 0x84]
call fcn.10004e0f
cmp dword [eax], 0
je 0x1001ced6
mov eax, 0xf407293c
test eax, eax
je 0x1001ced6
mov dword [ebp - 0x224], 1
jmp 0x1001cedd
and dword [ebp - 0x224], 0
mov eax, dword [ebp - 0x224]
sub eax, dword [ebp - 0x44]
jne 0x1001cef1
and dword [ebp - 0x19c], 0
jmp 0x1001cefb
mov dword [ebp - 0x19c], 1
cmp dword [ebp - 0x19c], 0xc767dbf1
je 0x1001cf13
mov dword [ebp - 0x26c], 1
jmp 0x1001cf1a
and dword [ebp - 0x26c], 0
mov eax, dword [ebp - 0x26c]
mov dword [ebp - 0x8c], eax
mov eax, dword [ebp - 0x8c]
mov dword [ebp - 0x3d4], eax
mov eax, dword [ebp - 0x44]
mov dword [ebp - 0x3c4], eax
xor eax, eax
cmp eax, 0xffffffff
jbe 0x1001cf4e
mov dword [ebp - 0x1a4], 1
jmp 0x1001cf55
and dword [ebp - 0x1a4], 0
cmp dword [ebp - 0x1a4], 0xf2c0
jle 0x1001cf6d
mov dword [ebp - 0x22c], 1
jmp 0x1001cf74
and dword [ebp - 0x22c], 0
cmp dword [ebp - 0x22c], 1
jne 0x1001cf81
cmp dword [ebp - 0x44], 0
mov eax, dword [ebp - 0x8c]
cmp eax, dword [ebp - 0x44]
jl 0x1001cf98
mov dword [ebp - 0x1ac], 1
jmp 0x1001cf9f
and dword [ebp - 0x1ac], 0
mov eax, dword [ebp - 0x1ac]
mov dword [ebp - 0x158], eax
mov eax, dword [ebp - 0x158]
mov dword [ebp - 0x34], eax
push 7
pop eax
sub eax, dword [ebp - 0x34]
cmp eax, 0xfffffff8
jbe 0x1001cfcb
mov dword [ebp - 0x2a0], 1
jmp 0x1001cfd2
and dword [ebp - 0x2a0], 0
mov dword [ebp - 0x54], 1
mov eax, dword [ebp - 0x54]
cmp dword [ebp - 0x2a0], eax
je 0x1001cff0
mov dword [ebp - 0x274], 1
jmp 0x1001cff7
and dword [ebp - 0x274], 0
push 1
lea ecx, [ebp - 0x84]
call fcn.10004e0f
cmp dword [eax], 0
jne 0x1001d024
push 1
lea ecx, [ebp - 0x84]
call fcn.10004e0f
cmp dword [eax], 0
jne 0x1001d024
and dword [ebp - 0x1b4], 0
jmp 0x1001d02e
mov dword [ebp - 0x1b4], 1
mov eax, dword [ebp - 0xf4]
cmp dword [ebp - 0x1b4], eax
je 0x1001d048
mov dword [ebp - 0x234], 1
jmp 0x1001d04f
and dword [ebp - 0x234], 0
mov eax, dword [ebp - 0x44]
imul eax, dword [ebp - 0x234]
mov dword [ebp - 0x1bc], eax
mov eax, dword [ebp - 0x1bc]
cmp dword [ebp - 0x274], eax
jge 0x1001d085
cmp dword [ebp - 0x158], 0
jne 0x1001d085
cmp dword [ebp - 0x54], 0
jne 0x1001d085
and dword [ebp - 0x1c4], 0
jmp 0x1001d08f
mov dword [ebp - 0x1c4], 1
mov eax, dword [ebp - 0x1c4]
mov dword [ebp - 0x330], eax
jmp 0x1001d3e5
mov dword [ebp - 0x34], 0xffffffe2
jmp 0x1001d0b0
mov eax, dword [ebp - 0x34]
inc eax
mov dword [ebp - 0x34], eax
cmp dword [ebp - 0x34], 0x18
jl 0x1001d3be
mov dword [ebp - 0x168], 0xfffffff9
push 4
lea ecx, [ebp - 0x37c]
call fcn.10004d70
mov byte [ebp - 4], 6
mov dword [ebp - 0x370], 0x1860f42e
mov dword [ebp - 0x2c], 0
jmp 0x1001d0ef
mov eax, dword [ebp - 0x2c]
inc eax
mov dword [ebp - 0x2c], eax
cmp dword [ebp - 0x2c], 4
jge 0x1001d105
mov eax, dword [ebp - 0x2c]
mov dword [ebp + eax*4 - 0x408], 0xffffffff
jmp 0x1001d0e8
mov dword [ebp - 0x2c], 0
jmp 0x1001d115
mov eax, dword [ebp - 0x2c]
inc eax
mov dword [ebp - 0x2c], eax
cmp dword [ebp - 0x2c], 4
jge 0x1001d131
push dword [ebp - 0x2c]
lea ecx, [ebp - 0x37c]
call fcn.10004e0f
mov dword [eax], 0x15db4c2
jmp 0x1001d10e
mov eax, dword [ebp - 0x150]
dec eax
mov dword [ebp - 0x150], eax
mov eax, dword [ebp - 0x150]
mov dword [ebp - 0x3d8], eax
mov eax, dword [ebp - 0x1f4]
mov dword [ebp - 0x23c], eax
push 4
pop eax
shl eax, 1
mov ecx, dword [ebp - 0x23c]
mov dword [ebp + eax - 0x408], ecx
cmp dword [ebp - 0x23c], 1
jbe 0x1001d17d
mov dword [ebp - 0x1cc], 1
jmp 0x1001d184
and dword [ebp - 0x1cc], 0
mov eax, dword [ebp - 0xf4]
cmp dword [ebp - 0x1cc], eax
je 0x1001d19e
mov dword [ebp - 0x294], 1
jmp 0x1001d1a5
and dword [ebp - 0x294], 0
mov eax, dword [ebp - 0x34]
cmp dword [ebp - 0x294], eax
jge 0x1001d1bc
mov dword [ebp - 0x1d4], 1
jmp 0x1001d1c3
and dword [ebp - 0x1d4], 0
cmp dword [ebp - 0x1d4], 0xffff
jae 0x1001d1db
mov dword [ebp - 0x244], 1
jmp 0x1001d1e2
and dword [ebp - 0x244], 0
mov eax, dword [ebp - 0x168]
dec eax
mov dword [ebp - 0x168], eax
mov eax, dword [ebp - 0x168]
cmp eax, dword [ebp - 0x244]
jge 0x1001d209
mov dword [ebp - 0x1dc], 1
jmp 0x1001d210
and dword [ebp - 0x1dc], 0
push 2
lea ecx, [ebp - 0x37c]
call fcn.10004e0f
mov ecx, dword [ebp - 0x1dc]
cmp ecx, dword [eax]
jle 0x1001d245
push 0
lea ecx, [ebp - 0x84]
call fcn.10004e0f
cmp dword [eax], 0
je 0x1001d245
mov dword [ebp - 0x27c], 1
jmp 0x1001d24c
and dword [ebp - 0x27c], 0
mov eax, dword [ebp - 0x150]
cmp dword [ebp - 0x27c], eax
jl 0x1001d266
mov dword [ebp - 0x1e4], 1
jmp 0x1001d26d
and dword [ebp - 0x1e4], 0
cmp dword [ebp - 0x1e4], 0x7d872568
jle 0x1001d286
push 0
lea ecx, [ebp - 0x388]
call fcn.10004e0f
mov eax, 0x3c4d9805
cmp eax, 0xff636611
jb 0x1001d29e
mov dword [ebp - 0x24c], 1
jmp 0x1001d2a5
and dword [ebp - 0x24c], 0
cmp dword [ebp - 0x24c], 8
jne 0x1001d2ba
mov dword [ebp - 0x1ec], 1
jmp 0x1001d2c1
and dword [ebp - 0x1ec], 0
push 0
lea ecx, [ebp - 0x388]
call fcn.10004e0f
mov ecx, dword [ebp - 0x1ec]
add ecx, dword [eax]
sub ecx, 0xfff6
mov dword [ebp - 0x2a8], ecx
push 2
lea ecx, [ebp - 0x37c]
call fcn.10004e0f
mov ecx, dword [ebp - 0x2a8]
mov dword [eax], ecx
cmp dword [ebp - 0x2a8], 0
je 0x1001d31b
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0x408], 0
je 0x1001d31b
mov dword [ebp - 0x254], 1
jmp 0x1001d322
and dword [ebp - 0x254], 0
mov eax, dword [ebp - 0x1f4]
cmp dword [ebp - 0x254], eax
jge 0x1001d33c
mov dword [ebp - 0x1fc], 1
jmp 0x1001d343
and dword [ebp - 0x1fc], 0
push 1
lea ecx, [ebp - 0x84]
call fcn.10004e0f
mov ecx, dword [ebp - 0x1fc]
cmp ecx, dword [eax]
jl 0x1001d366
mov dword [ebp - 0x284], 1
jmp 0x1001d36d
and dword [ebp - 0x284], 0
mov eax, dword [ebp - 0x284]
mov dword [ebp - 0x8c], eax
cmp dword [ebp - 0x8c], 0
je 0x1001d397
mov eax, 0x372b
test eax, eax
je 0x1001d397
mov dword [ebp - 0x204], 1
jmp 0x1001d39e
and dword [ebp - 0x204], 0
mov eax, dword [ebp - 0x204]
mov dword [ebp - 0x370], eax
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x37c]
call fcn.10004df3
jmp 0x1001d0a9
mov byte [ebp - 0x5d], 0
movzx eax, byte [ebp - 0x5d]
test eax, eax
je 0x1001d3e5
push 0
push 0x221c
push 0
push 0
push 0x1e06
push 0x227d
call dword [sym.imp.USER32.dll_ToAsciiEx]
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x388]
call fcn.10004df3
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x84]
call fcn.10004df3
mov dword [ebp - 4], 7
cmp dword [ebp - 0x25c], 0x2df9
jge 0x1001d422
push dword [ebp - 0x358]
call fcn.1003fd76
pop ecx
jmp 0x1001d43e
or dword [ebp - 4], 0xffffffff
jmp 0x1001d448
push 2
lea ecx, [ebp - 0x340]
call fcn.10004d70
mov dword [ebp - 4], 9
mov dword [ebp - 0x28], 0
jmp 0x1001d46c
mov eax, dword [ebp - 0x28]
inc eax
mov dword [ebp - 0x28], eax
cmp dword [ebp - 0x28], 3
jge 0x1001d482
mov eax, dword [ebp - 0x28]
mov dword [ebp + eax*4 - 0x470], 0xc93b4e1a
jmp 0x1001d465
mov dword [ebp - 0x28], 0
jmp 0x1001d492
mov eax, dword [ebp - 0x28]
inc eax
mov dword [ebp - 0x28], eax
cmp dword [ebp - 0x28], 2
jge 0x1001d4ae
push dword [ebp - 0x28]
lea ecx, [ebp - 0x340]
call fcn.10004e0f
mov dword [eax], 0xfffffffd
jmp 0x1001d48b
push 0
lea ecx, [ebp - 0x340]
call fcn.10004e0f
mov dword [eax], 2
jmp 0x1001d4e7
push 0
lea ecx, [ebp - 0x340]
call fcn.10004e0f
mov dword [ebp - 0x184], eax
mov eax, dword [ebp - 0x184]
mov eax, dword [eax]
dec eax
mov ecx, dword [ebp - 0x184]
mov dword [ecx], eax
push 0
lea ecx, [ebp - 0x340]
call fcn.10004e0f
cmp dword [eax], 0
jl 0x1001d523
mov dword [ebp - 0x350], 0xfffe
mov dword [ebp - 0x350], 0xf759609c
mov byte [ebp - 0x5e], 0
movzx eax, byte [ebp - 0x5e]
test eax, eax
je 0x1001d521
push 0
call dword [sym.imp.KERNEL32.dll_GetStartupInfoW]
jmp 0x1001d4c3
mov byte [ebp - 0x5f], 0
movzx eax, byte [ebp - 0x5f]
test eax, eax
je 0x1001d537
push 0
call dword [sym.imp.KERNEL32.dll_GetFileAttributesA]
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x340]
call fcn.10004df3
push 2
lea ecx, [ebp - 0x2b4]
call fcn.10004d70
mov dword [ebp - 4], 0xa
mov dword [ebp - 0x138], 0xfffffffb
mov dword [ebp - 0x2dc], 0x87a912e
mov dword [ebp - 0xfc], 0
jmp 0x1001d587
mov eax, dword [ebp - 0xfc]
inc eax
mov dword [ebp - 0xfc], eax
cmp dword [ebp - 0xfc], 2
jge 0x1001d5a9
push dword [ebp - 0xfc]
lea ecx, [ebp - 0x2b4]
call fcn.10004e0f
mov dword [eax], 0xd3df
jmp 0x1001d57a
mov dword [ebp - 0x138], 1
jmp 0x1001d5c2
mov eax, dword [ebp - 0x138]
dec eax
mov dword [ebp - 0x138], eax
cmp dword [ebp - 0x138], 0
jl 0x1001d716
mov dword [ebp - 0x78], 0
mov dword [ebp - 0x15c], 2
mov dword [ebp - 0x78], 0
jmp 0x1001d5f0
mov eax, dword [ebp - 0x78]
inc eax
mov dword [ebp - 0x78], eax
cmp dword [ebp - 0x78], 1
jg 0x1001d711
mov dword [ebp - 0x64], 0xffffffff
mov dword [ebp - 0x64], 1
jmp 0x1001d611
mov eax, dword [ebp - 0x64]
dec eax
mov dword [ebp - 0x64], eax
cmp dword [ebp - 0x64], 0
jl 0x1001d701
push dword [ebp - 0x78]
lea ecx, [ebp - 0x2b4]
call fcn.10004e0f
cmp dword [eax], 0xffffffff
je 0x1001d63a
mov dword [ebp - 0x324], 1
jmp 0x1001d641
and dword [ebp - 0x324], 0
push dword [ebp - 0x78]
lea ecx, [ebp - 0x2b4]
call fcn.10004e0f
mov esi, eax
push dword [ebp - 0x64]
lea ecx, [ebp - 0x2b4]
call fcn.10004e0f
mov eax, dword [eax]
cmp eax, dword [esi]
jg 0x1001d671
mov dword [ebp - 0x29c], 1
jmp 0x1001d678
and dword [ebp - 0x29c], 0
push dword [ebp - 0x64]
lea ecx, [ebp - 0x2b4]
call fcn.10004e0f
mov ecx, dword [ebp - 0x29c]
cmp ecx, dword [eax]
jge 0x1001d69c
mov dword [ebp - 0x214], 1
jmp 0x1001d6a3
and dword [ebp - 0x214], 0
mov eax, dword [ebp - 0x214]
inc eax
jns 0x1001d6b8
mov dword [ebp - 0x264], 1
jmp 0x1001d6bf
and dword [ebp - 0x264], 0
mov eax, dword [ebp - 0x264]
mov dword [ebp - 0x15c], eax
cmp dword [ebp - 0x15c], 0
je 0x1001d6e9
mov eax, 0xd2eb2fc2
test eax, eax
je 0x1001d6e9
mov dword [ebp - 0x21c], 1
jmp 0x1001d6f0
and dword [ebp - 0x21c], 0
mov eax, dword [ebp - 0x21c]
mov dword [ebp - 0x2dc], eax
jmp 0x1001d60a
cmp dword [ebp - 0x15c], 0
je 0x1001d70c
jmp 0x1001d711
jmp 0x1001d5e9
jmp 0x1001d5b5
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x2b4]
call fcn.10004df3
cmp dword [0x10073b74], 0
jne 0x1001dbec
mov dword [ebp - 0x32c], 0x2262
lea eax, [ebp - 0x32c]
push eax
call fcn.10017a27
pop ecx
mov dword [ebp - 0x190], eax
mov byte [ebp - 0xcc], 9
mov byte [ebp - 0xcb], 0x4b
mov byte [ebp - 0xca], 8
mov byte [ebp - 0xc9], 1
mov byte [ebp - 0xc8], 0
mov byte [ebp - 0xc7], 0x28
mov byte [ebp - 0xc6], 0xb
mov byte [ebp - 0xc5], 0x3f
mov byte [ebp - 0xc4], 2
mov byte [ebp - 0xc3], 0xc
mov byte [ebp - 0xc2], 4
mov byte [ebp - 0xc1], 0x11
mov byte [ebp - 0xc0], 5
mov byte [ebp - 0xbf], 0x17
mov byte [ebp - 0xbe], 6
mov byte [ebp - 0xbd], 1
mov byte [ebp - 0xbc], 3
mov byte [ebp - 0xbb], 0x25
mov byte [ebp - 0xba], 1
mov byte [ebp - 0xb9], 0x33
mov byte [ebp - 0xb8], 0xa
mov byte [ebp - 0xb7], 0x20
mov byte [ebp - 0xb6], 0xc
mov byte [ebp - 0xb5], 0x12
mov byte [ebp - 0xb4], 7
mov byte [ebp - 0xb3], 0x3e
xor eax, eax
inc eax
shl eax, 0
movzx eax, byte [ebp + eax - 0xcc]
and eax, 0x25
xor ecx, ecx
inc ecx
shl ecx, 0
movzx ecx, byte [ebp + ecx - 0xcc]
or ecx, 0x25
sub ecx, eax
xor eax, eax
inc eax
imul eax, eax, 0
movzx eax, byte [ebp + eax - 0xcc]
mov byte [ebp + eax - 0x368], cl
mov dword [ebp - 0x3c], 2
and dword [ebp - 0x188], 0
jmp 0x1001d856
mov eax, dword [ebp - 0x3c]
inc eax
inc eax
mov dword [ebp - 0x3c], eax
cmp dword [ebp - 0x3c], 0x1a
jae 0x1001d8be
mov eax, dword [ebp - 0x3c]
sub eax, dword [ebp - 0x188]
movzx eax, byte [ebp + eax - 0xce]
movsx eax, byte [ebp + eax - 0x368]
mov ecx, dword [ebp - 0x3c]
movzx ecx, byte [ebp + ecx - 0xcb]
and ecx, eax
mov eax, dword [ebp - 0x3c]
sub eax, dword [ebp - 0x188]
movzx eax, byte [ebp + eax - 0xce]
movsx eax, byte [ebp + eax - 0x368]
mov edx, dword [ebp - 0x3c]
movzx edx, byte [ebp + edx - 0xcb]
or edx, eax
sub edx, ecx
mov eax, dword [ebp - 0x3c]
movzx eax, byte [ebp + eax - 0xcc]
mov byte [ebp + eax - 0x368], dl
jmp 0x1001d84e
xor eax, eax
inc eax
imul eax, eax, 0xd
mov byte [ebp + eax - 0x368], 0
lea eax, [ebp - 0x368]
push eax
lea ecx, [ebp - 0x4a0]
call fcn.1002273a
mov dword [ebp - 0x2e8], eax
mov eax, dword [ebp - 0x2e8]
mov dword [ebp - 0x36c], eax
mov dword [ebp - 4], 0xb
mov edx, dword [ebp - 0x190]
mov ecx, dword [ebp - 0x36c]
call fcn.100130d0
mov dword [0x10073b74], eax
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x4a0]
call fcn.10010f6a
and dword [ebp - 0x104], 0
jmp 0x1001d932
mov eax, dword [ebp - 0x104]
inc eax
mov dword [ebp - 0x104], eax
cmp dword [ebp - 0x104], 0xe
jae 0x1001d94b
mov eax, dword [ebp - 0x104]
mov byte [ebp + eax - 0x368], 0
jmp 0x1001d925
mov byte [ebp - 0xb0], 0xd
mov byte [ebp - 0xaf], 0xd0
mov byte [ebp - 0xae], 6
mov byte [ebp - 0xad], 7
mov byte [ebp - 0xac], 5
mov byte [ebp - 0xab], 0x35
mov byte [ebp - 0xaa], 3
mov byte [ebp - 0xa9], 4
mov byte [ebp - 0xa8], 9
mov byte [ebp - 0xa7], 2
mov byte [ebp - 0xa6], 1
mov byte [ebp - 0xa5], 0x11
mov byte [ebp - 0xa4], 0xb
mov byte [ebp - 0xa3], 1
mov byte [ebp - 0xa2], 2
mov byte [ebp - 0xa1], 0x16
mov byte [ebp - 0xa0], 0xa
mov byte [ebp - 0x9f], 0
mov byte [ebp - 0x9e], 4
mov byte [ebp - 0x9d], 0x11
mov byte [ebp - 0x9c], 8
mov byte [ebp - 0x9b], 0x1b
mov byte [ebp - 0x9a], 0
mov byte [ebp - 0x99], 0x2c
mov byte [ebp - 0x98], 0xc
mov byte [ebp - 0x97], 0x30
mov byte [ebp - 0x96], 7
mov byte [ebp - 0x95], 1
mov byte [ebp - 0x94], 3
mov byte [ebp - 0x93], 6
mov byte [ebp - 0x92], 0x71
mov byte [ebp - 0x91], 0x89
xor eax, eax
inc eax
shl eax, 0
movzx eax, byte [ebp + eax - 0xb0]
and eax, 0x87
xor ecx, ecx
inc ecx
shl ecx, 0
movzx ecx, byte [ebp + ecx - 0xb0]
or ecx, 0x87
sub ecx, eax
xor eax, eax
inc eax
imul eax, eax, 0
movzx eax, byte [ebp + eax - 0xb0]
mov byte [ebp + eax - 0x2c4], cl
mov dword [ebp - 0x14], 2
and dword [ebp - 0x88], 0
jmp 0x1001da81
mov eax, dword [ebp - 0x14]
inc eax
inc eax
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 0x20
jae 0x1001db5f
xor eax, eax
inc eax
imul eax, eax, 0
movzx eax, byte [ebp + eax - 0xb0]
lea eax, [eax + eax + 2]
cmp dword [ebp - 0x14], eax
jne 0x1001dacb
mov eax, dword [ebp - 0x14]
movzx eax, byte [ebp + eax - 0xb0]
inc eax
mov dword [ebp - 0x88], eax
mov eax, dword [ebp - 0x14]
movzx eax, byte [ebp + eax - 0xb0]
mov ecx, dword [ebp - 0x14]
lea eax, [ecx + eax - 1]
mov dword [ebp - 0x14], eax
jmp 0x1001da79
mov eax, dword [ebp - 0x14]
sub eax, dword [ebp - 0x88]
movzx eax, byte [ebp + eax - 0xb2]
movsx eax, byte [ebp + eax - 0x2c4]
mov ecx, dword [ebp - 0x14]
movzx ecx, byte [ebp + ecx - 0xaf]
and ecx, eax
mov eax, dword [ebp - 0x14]
sub eax, dword [ebp - 0x88]
movzx eax, byte [ebp + eax - 0xb2]
movsx eax, byte [ebp + eax - 0x2c4]
mov edx, dword [ebp - 0x14]
movzx edx, byte [ebp + edx - 0xaf]
and edx, eax
mov eax, dword [ebp - 0x14]
sub eax, dword [ebp - 0x88]
movzx eax, byte [ebp + eax - 0xb2]
movsx eax, byte [ebp + eax - 0x2c4]
mov esi, dword [ebp - 0x14]
movzx ebx, byte [ebp + esi - 0xaf]
add ebx, eax
sub ebx, edx
sub ebx, ecx
mov eax, dword [ebp - 0x14]
movzx eax, byte [ebp + eax - 0xb0]
mov byte [ebp + eax - 0x2c4], bl
and dword [ebp - 0x88], 0
jmp 0x1001da79
xor eax, eax
inc eax
imul eax, eax, 0xe
mov byte [ebp + eax - 0x2c4], 0
lea eax, [ebp - 0x2c4]
push eax
lea ecx, [ebp - 0x4c4]
call fcn.1002273a
mov dword [ebp - 0x2f4], eax
mov eax, dword [ebp - 0x2f4]
mov dword [ebp - 0x334], eax
mov dword [ebp - 4], 0xc
mov edx, dword [ebp - 0x190]
mov ecx, dword [ebp - 0x334]
call fcn.100130d0
mov dword [0x10073cec], eax
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x4c4]
call fcn.10010f6a
and dword [ebp - 0x148], 0
jmp 0x1001dbd3
mov eax, dword [ebp - 0x148]
inc eax
mov dword [ebp - 0x148], eax
cmp dword [ebp - 0x148], 0xf
jae 0x1001dbec
mov eax, dword [ebp - 0x148]
mov byte [ebp + eax - 0x2c4], 0
jmp 0x1001dbc6
push 2
lea ecx, [ebp - 0x174]
call fcn.10004d70
mov dword [ebp - 4], 0xd
mov dword [ebp - 0x20], 1
mov dword [ebp - 0x1c8], 0xfffb
mov dword [ebp - 0x10c], 0
jmp 0x1001dc2a
mov eax, dword [ebp - 0x10c]
inc eax
mov dword [ebp - 0x10c], eax
cmp dword [ebp - 0x10c], 2
jge 0x1001dc4c
push dword [ebp - 0x10c]
lea ecx, [ebp - 0x174]
call fcn.10004e0f
mov dword [eax], 0xfffffffe
jmp 0x1001dc1d
mov dword [ebp - 0x20], 1
jmp 0x1001dc5c
mov eax, dword [ebp - 0x20]
dec eax
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 0
jl 0x1001df3c
push 3
lea ecx, [ebp - 0x180]
call fcn.10004d70
mov byte [ebp - 4], 0xe
mov dword [ebp - 0x128], 0
jmp 0x1001dc90
mov eax, dword [ebp - 0x128]
inc eax
mov dword [ebp - 0x128], eax
cmp dword [ebp - 0x128], 3
jge 0x1001dcb2
push dword [ebp - 0x128]
lea ecx, [ebp - 0x180]
call fcn.10004e0f
mov dword [eax], 5
jmp 0x1001dc83
push 1
lea ecx, [ebp - 0x180]
call fcn.10004e0f
and dword [eax], 0
jmp 0x1001dce8
push 1
lea ecx, [ebp - 0x180]
call fcn.10004e0f
mov dword [ebp - 0x198], eax
mov eax, dword [ebp - 0x198]
mov eax, dword [eax]
inc eax
mov ecx, dword [ebp - 0x198]
mov dword [ecx], eax
push 1
lea ecx, [ebp - 0x180]
call fcn.10004e0f
cmp dword [eax], 1
jg 0x1001dd1d
push 1
lea ecx, [ebp - 0x180]
call fcn.10004e0f
push dword [eax]
lea ecx, [ebp - 0x174]
call fcn.10004e0f
cmp dword [eax], 0
je 0x1001dd1b
jmp 0x1001dd1d
jmp 0x1001dcc4
push dword [ebp - 0x20]
lea ecx, [ebp - 0x174]
call fcn.10004e0f
mov esi, eax
push dword [ebp - 0x20]
lea ecx, [ebp - 0x174]
call fcn.10004e0f
mov eax, dword [eax]
cmp eax, dword [esi]
jge 0x1001dd4d
mov dword [ebp - 0x1e0], 1
jmp 0x1001dd54
and dword [ebp - 0x1e0], 0
push 1
lea ecx, [ebp - 0x174]
call fcn.10004e0f
cmp dword [eax], 0x4d1b
jle 0x1001dd75
mov dword [ebp - 0x1a0], 1
jmp 0x1001dd7c
and dword [ebp - 0x1a0], 0
push dword [ebp - 0x20]
lea ecx, [ebp - 0x174]
call fcn.10004e0f
mov ecx, dword [ebp - 0x1a0]
cmp ecx, dword [eax]
je 0x1001dda0
mov dword [ebp - 0x1a8], 1
jmp 0x1001dda7
and dword [ebp - 0x1a8], 0
cmp dword [ebp - 0x1a8], 7
jg 0x1001ddbc
mov dword [ebp - 0x300], 1
jmp 0x1001ddc3
and dword [ebp - 0x300], 0
mov eax, dword [ebp - 0x1c8]
mov dword [ebp - 0x3ac], eax
push 3
pop eax
test eax, eax
je 0x1001ddf4
push 1
lea ecx, [ebp - 0x180]
call fcn.10004e0f
cmp dword [eax], 0
je 0x1001ddf4
mov dword [ebp - 0x1b0], 1
jmp 0x1001ddfb
and dword [ebp - 0x1b0], 0
push 1
lea ecx, [ebp - 0x180]
call fcn.10004e0f
mov ecx, dword [ebp - 0x1b0]
cmp ecx, dword [eax]
jle 0x1001de1e
mov dword [ebp - 0x1b8], 1
jmp 0x1001de25
and dword [ebp - 0x1b8], 0
push dword [ebp - 0x20]
lea ecx, [ebp - 0x174]
call fcn.10004e0f
mov ecx, dword [ebp - 0x1b8]
cmp ecx, dword [eax]
je 0x1001de49
mov dword [ebp - 0x1c0], 1
jmp 0x1001de50
and dword [ebp - 0x1c0], 0
mov eax, 0xdfad
sub eax, dword [ebp - 0x1c0]
je 0x1001de74
xor eax, eax
inc eax
je 0x1001de74
cmp dword [ebp - 0x20], 0
je 0x1001de74
mov dword [ebp - 0x1d0], 1
jmp 0x1001de7b
and dword [ebp - 0x1d0], 0
mov eax, dword [ebp - 0x1c8]
cmp dword [ebp - 0x1d0], eax
jle 0x1001de95
mov dword [ebp - 0x1d8], 1
jmp 0x1001de9c
and dword [ebp - 0x1d8], 0
push 0
lea ecx, [ebp - 0x174]
call fcn.10004e0f
mov eax, dword [eax]
cmp eax, dword [ebp - 0x1d8]
je 0x1001debf
mov dword [ebp - 0x1e8], 1
jmp 0x1001dec6
and dword [ebp - 0x1e8], 0
mov eax, dword [ebp - 0x1e0]
cmp eax, dword [ebp - 0x1e8]
jge 0x1001dee0
mov dword [ebp - 0x1f0], 1
jmp 0x1001dee7
and dword [ebp - 0x1f0], 0
cmp dword [ebp - 0x1f0], 0xffffffff
jne 0x1001defc
mov dword [ebp - 0x1f8], 1
jmp 0x1001df03
and dword [ebp - 0x1f8], 0
push dword [ebp - 0x20]
lea ecx, [ebp - 0x174]
call fcn.10004e0f
mov esi, dword [ebp - 0x1f8]
add esi, dword [eax]
push 2
lea ecx, [ebp - 0x180]
call fcn.10004e0f
mov dword [eax], esi
mov byte [ebp - 4], 0xd
lea ecx, [ebp - 0x180]
call fcn.10004df3
jmp 0x1001dc55
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x174]
call fcn.10004df3
mov eax, dword [0x10073b74]
cmp eax, dword [ebp - 0xf0]
je 0x1001df65
mov eax, dword [0x10073cec]
cmp eax, dword [ebp - 0xf0]
jne 0x1001df7d
mov ecx, dword [ebp + 0xc]
call fcn.10001c18
push eax
push dword [ebp + 8]
call fcn.10017a4c
pop ecx
pop ecx
jmp 0x1001ea8f
mov eax, dword [ebp + 8]
mov dword [ebp - 0x114], eax
cmp dword [ebp - 0x114], 0
je 0x1001e93b
mov eax, dword [ebp - 0x114]
movzx eax, word [eax]
cmp eax, 0x5a4d
jne 0x1001e93b
mov eax, dword [ebp - 0x114]
mov ecx, dword [ebp - 0x114]
add ecx, dword [eax + 0x3c]
mov dword [ebp - 0x90], ecx
mov eax, dword [ebp - 0x90]
cmp dword [eax], 0x4550
jne 0x1001e93b
mov eax, dword [ebp - 0x90]
cmp dword [eax + 0x74], 0
jbe 0x1001e93b
push 8
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x90]
cmp dword [ecx + eax + 0x78], 0
je 0x1001e93b
mov eax, dword [ebp + 8]
mov dword [ebp - 0x68], eax
push 8
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x90]
mov edx, dword [ebp - 0x68]
add edx, dword [ecx + eax + 0x78]
mov dword [ebp - 0x38], edx
mov eax, 0xffff
mov word [ebp - 0x30], ax
or dword [ebp - 0x70], 0xffffffff
cmp dword [ebp + 0x10], 0
jbe 0x1001e03c
mov eax, dword [ebp - 0x38]
mov ecx, dword [ebp + 0x10]
cmp ecx, dword [eax + 0x14]
ja 0x1001e037
mov eax, dword [ebp + 0x10]
dec eax
mov word [ebp - 0x30], ax
jmp 0x1001e45f
mov eax, dword [0x10073c38]
and eax, 1
jne 0x1001e073
mov eax, dword [0x10073c38]
or eax, 1
mov dword [0x10073c38], eax
mov dword [ebp - 4], 0xf
mov ecx, 0x10073cac
call fcn.10010fff
push 0x10058e1c
call fcn.1003fd4c
pop ecx
or dword [ebp - 4], 0xffffffff
movzx eax, byte [0x10073b7a]
test eax, eax
je 0x1001e0dc
mov ecx, 0x10073cac
call fcn.100227c6
movzx eax, al
test eax, eax
jne 0x1001e0dc
lea eax, [ebp - 0xf0]
push eax
lea eax, [ebp - 0x200]
push eax
mov ecx, 0x10073cac
call fcn.100110c4
lea eax, [ebp - 0x3a4]
push eax
mov ecx, 0x10073cac
call fcn.100110b6
push eax
lea ecx, [ebp - 0x200]
call fcn.10011321
movzx eax, al
test eax, eax
je 0x1001e0dc
lea ecx, [ebp - 0x200]
call fcn.10022882
mov eax, dword [eax + 4]
mov dword [ebp - 0x70], eax
cmp dword [ebp - 0x70], 0xffffffff
jne 0x1001e45f
mov ecx, 0x10073cac
call fcn.100228c6
mov ecx, dword [ebp - 0x38]
add eax, dword [ecx + 0x18]
push eax
mov ecx, 0x10073cac
call fcn.100228ca
mov dword [ebp - 0x220], 0x22c2
mov dword [ebp - 0x344], str.adsp_fgu_gjk_tcqmznkv_wjqw_kebcbqvek
cmp dword [ebp - 0x220], 0x25a6
jle 0x1001e1cf
and dword [ebp - 0x12c], 0
jmp 0x1001e13b
mov eax, dword [ebp - 0x12c]
inc eax
mov dword [ebp - 0x12c], eax
cmp dword [ebp - 0x12c], 0x325
jge 0x1001e1cf
and dword [ebp - 0x11c], 0
jmp 0x1001e161
mov eax, dword [ebp - 0x11c]
inc eax
mov dword [ebp - 0x11c], eax
cmp dword [ebp - 0x11c], 0x144c
jge 0x1001e1ca
and dword [ebp - 0x134], 0
jmp 0x1001e183
mov eax, dword [ebp - 0x134]
inc eax
mov dword [ebp - 0x134], eax
cmp dword [ebp - 0x134], 0x5e2d
jge 0x1001e1c8
mov eax, dword [ebp - 0x12c]
mov ecx, dword [ebp - 0x11c]
sar eax, cl
or eax, dword [ebp - 0x134]
cdq
mov dword [ebp - 0x2f0], eax
mov dword [ebp - 0x2ec], edx
push dword [ebp - 0x2ec]
push dword [ebp - 0x2f0]
mov ecx, 0x100720b8
call fcn.10001c38
jmp 0x1001e176
jmp 0x1001e154
jmp 0x1001e12e
and dword [ebp - 0x74], 0
jmp 0x1001e1dc
mov eax, dword [ebp - 0x74]
inc eax
mov dword [ebp - 0x74], eax
mov eax, dword [ebp - 0x38]
mov ecx, dword [ebp - 0x74]
cmp ecx, dword [eax + 0x18]
jae 0x1001e416
mov eax, dword [ebp - 0x38]
mov ecx, dword [ebp - 0x68]
add ecx, dword [eax + 0x20]
mov eax, dword [ebp - 0x74]
lea eax, [ecx + eax*4]
mov dword [ebp - 0x208], eax
mov dword [ebp - 0x218], 0x35b2
mov dword [ebp - 0x30c], str.seb_brl_kurbxwh_kbrmy_cppqmx_czuyrwg_yuzmxgy_nrq_cccbervzj_hoqx_fkgfc_xrnrqmocq_yascqmvy
cmp dword [ebp - 0x218], 0x38c4
jle 0x1001e32b
and dword [ebp - 0xe8], 0
jmp 0x1001e23a
mov eax, dword [ebp - 0xe8]
inc eax
mov dword [ebp - 0xe8], eax
cmp dword [ebp - 0xe8], 0x1ab8
jge 0x1001e32b
and dword [ebp - 0xe0], 0
jmp 0x1001e260
mov eax, dword [ebp - 0xe0]
inc eax
mov dword [ebp - 0xe0], eax
cmp dword [ebp - 0xe0], 0x1738
jge 0x1001e326
and dword [ebp - 0xd4], 0
jmp 0x1001e286
mov eax, dword [ebp - 0xd4]
inc eax
mov dword [ebp - 0xd4], eax
cmp dword [ebp - 0xd4], 0x1ff1
jge 0x1001e321
and dword [ebp - 0xd8], 0
jmp 0x1001e2ac
mov eax, dword [ebp - 0xd8]
inc eax
mov dword [ebp - 0xd8], eax
cmp dword [ebp - 0xd8], 0x5b8a
jge 0x1001e31c
mov eax, dword [ebp - 0xd4]
imul eax, dword [ebp - 0xd8]
add eax, dword [ebp - 0xe0]
xor eax, dword [ebp - 0xe8]
cdq
mov dword [ebp - 0x2fc], eax
mov dword [ebp - 0x2f8], edx
push dword [ebp - 0x2f8]
push dword [ebp - 0x2fc]
lea ecx, [ebp - 0x488]
call fcn.10001a51
pop ecx
pop ecx
mov dword [ebp - 0x348], eax
mov ecx, dword [ebp - 0x348]
call fcn.10001c18
push eax
call fcn.1003fd76
pop ecx
lea ecx, [ebp - 0x488]
call fcn.10001c0e
jmp 0x1001e29f
jmp 0x1001e279
jmp 0x1001e253
jmp 0x1001e22d
cmp dword [ebp - 0x208], 0
je 0x1001e3cc
mov eax, dword [ebp - 0x208]
mov ecx, dword [ebp - 0x68]
add ecx, dword [eax]
push ecx
lea ecx, [ebp - 0x444]
call fcn.1002273a
mov dword [ebp - 4], 0x10
mov edx, dword [ebp + 8]
lea ecx, [ebp - 0x444]
call fcn.100130d0
mov dword [ebp - 0x210], eax
movzx eax, byte [0x10073b7a]
test eax, eax
je 0x1001e386
mov ecx, 0x10073cac
call fcn.100227c6
movzx eax, al
test eax, eax
jne 0x1001e3a3
lea eax, [ebp - 0x210]
push eax
mov ecx, 0x10073cac
call fcn.10022888
mov ecx, dword [ebp - 0x74]
mov dword [eax], ecx
mov byte [0x10073b7a], 1
cmp dword [ebp - 0x70], 0xffffffff
jne 0x1001e3bd
mov eax, dword [ebp - 0x210]
cmp eax, dword [ebp - 0xf0]
jne 0x1001e3bd
mov eax, dword [ebp - 0x74]
mov dword [ebp - 0x70], eax
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x444]
call fcn.10010f6a
mov dword [ebp - 4], 0x11
cmp dword [ebp - 0x218], 0x3200
jge 0x1001e3eb
push dword [ebp - 0x30c]
call fcn.1003fd76
pop ecx
jmp 0x1001e407
or dword [ebp - 4], 0xffffffff
jmp 0x1001e411
jmp 0x1001e1d5
mov dword [ebp - 4], 0x13
cmp dword [ebp - 0x220], 0x2242
jge 0x1001e439
mov edx, dword [ebp - 0x344]
mov ecx, 0x100720b8
call fcn.100035ef
jmp 0x1001e455
or dword [ebp - 4], 0xffffffff
jmp 0x1001e45f
cmp dword [ebp + 0x10], 0
jne 0x1001e47f
cmp dword [ebp - 0x70], 0xffffffff
je 0x1001e47f
mov eax, dword [ebp - 0x38]
mov ecx, dword [ebp - 0x68]
add ecx, dword [eax + 0x24]
mov eax, dword [ebp - 0x70]
mov ax, word [ecx + eax*2]
mov word [ebp - 0x30], ax
movzx eax, word [ebp - 0x30]
cmp eax, 0xffff
je 0x1001e93b
movzx eax, word [ebp - 0x30]
mov ecx, dword [ebp - 0x38]
mov edx, dword [ebp - 0x68]
add edx, dword [ecx + 0x1c]
lea eax, [edx + eax*4]
mov dword [ebp - 0x314], eax
mov dword [ebp - 0x228], 0x1c76
mov dword [ebp - 0x34c], str.dygpwcqug_afox_igmqe_eamtsnhl_ogosopa_hao_wctgv_gzbeeoifc
cmp dword [ebp - 0x228], 0x202e
jle 0x1001e5a3
and dword [ebp - 0x110], 0
jmp 0x1001e4de
mov eax, dword [ebp - 0x110]
inc eax
mov dword [ebp - 0x110], eax
cmp dword [ebp - 0x110], 0x6993
jge 0x1001e5a3
and dword [ebp - 0xf8], 0
jmp 0x1001e504
mov eax, dword [ebp - 0xf8]
inc eax
mov dword [ebp - 0xf8], eax
cmp dword [ebp - 0xf8], 0x77b3
jge 0x1001e59e
and dword [ebp - 0x100], 0
jmp 0x1001e52a
mov eax, dword [ebp - 0x100]
inc eax
mov dword [ebp - 0x100], eax
cmp dword [ebp - 0x100], 0x766b
jge 0x1001e599
and dword [ebp - 0x108], 0
jmp 0x1001e54c
mov eax, dword [ebp - 0x108]
inc eax
mov dword [ebp - 0x108], eax
cmp dword [ebp - 0x108], 0x132e
jge 0x1001e597
mov ecx, dword [ebp - 0xf8]
sub ecx, dword [ebp - 0x100]
sub ecx, dword [ebp - 0x108]
mov eax, dword [ebp - 0x110]
shl eax, cl
cdq
mov dword [ebp - 0x308], eax
mov dword [ebp - 0x304], edx
push dword [ebp - 0x304]
push dword [ebp - 0x308]
mov ecx, 0x100720b8
call fcn.10001c38
jmp 0x1001e53f
jmp 0x1001e51d
jmp 0x1001e4f7
jmp 0x1001e4d1
mov eax, dword [ebp - 0x314]
mov ecx, dword [ebp - 0x68]
add ecx, dword [eax]
mov dword [ebp - 0x40], ecx
mov dword [ebp - 4], 0x15
cmp dword [ebp - 0x228], 0x1932
jge 0x1001e5d4
mov edx, dword [ebp - 0x34c]
mov ecx, 0x100720b8
call fcn.100035ef
jmp 0x1001e5f0
or dword [ebp - 4], 0xffffffff
jmp 0x1001e5fa
mov eax, dword [ebp - 0x40]
cmp eax, dword [ebp - 0x38]
jbe 0x1001e933
push 8
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x90]
mov edx, dword [ebp - 0x38]
add edx, dword [ecx + eax + 0x7c]
cmp dword [ebp - 0x40], edx
jae 0x1001e933
mov eax, dword [0x10073c38]
and eax, 2
jne 0x1001e654
mov eax, dword [0x10073c38]
or eax, 2
mov dword [0x10073c38], eax
mov dword [ebp - 4], 0x17
push 0x1ffe
call fcn.10008166
pop ecx
mov byte [0x10073ca8], al
or dword [ebp - 4], 0xffffffff
mov byte [ebp - 0x50], 1
mov byte [ebp - 0x4f], 0x26
mov byte [ebp - 0x4e], 2
mov byte [ebp - 0x4d], 0
mov byte [ebp - 0x4c], 4
mov byte [ebp - 0x4b], 0x5a
mov byte [ebp - 0x4a], 0xe
mov byte [ebp - 0x49], 0x2f
mov byte [ebp - 0x48], 0x1c
mov byte [ebp - 0x47], 0
mov byte [ebp - 0x46], 8
xor eax, eax
inc eax
shl eax, 0
movzx eax, byte [ebp + eax - 0x50]
and eax, 0x4a
xor ecx, ecx
inc ecx
shl ecx, 0
movzx ecx, byte [ebp + ecx - 0x50]
or ecx, 0x4a
sub ecx, eax
xor eax, eax
inc eax
imul eax, eax, 0
movzx eax, byte [ebp + eax - 0x50]
mov byte [ebp + eax - 0x6c], cl
mov dword [ebp - 0x1c], 2
and dword [ebp - 0x118], 0
jmp 0x1001e6c5
mov eax, dword [ebp - 0x1c]
inc eax
inc eax
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 0xb
jae 0x1001e75a
xor eax, eax
inc eax
imul eax, eax, 0
movzx eax, byte [ebp + eax - 0x50]
lea eax, [eax + eax + 2]
cmp dword [ebp - 0x1c], eax
jne 0x1001e706
mov eax, dword [ebp - 0x1c]
movzx eax, byte [ebp + eax - 0x50]
inc eax
mov dword [ebp - 0x118], eax
mov eax, dword [ebp - 0x1c]
movzx eax, byte [ebp + eax - 0x50]
mov ecx, dword [ebp - 0x1c]
lea eax, [ecx + eax - 1]
mov dword [ebp - 0x1c], eax
jmp 0x1001e6bd
mov eax, dword [ebp - 0x1c]
sub eax, dword [ebp - 0x118]
movzx eax, byte [ebp + eax - 0x52]
movsx eax, byte [ebp + eax - 0x6c]
mov ecx, dword [ebp - 0x1c]
movzx ecx, byte [ebp + ecx - 0x4f]
and ecx, eax
mov eax, dword [ebp - 0x1c]
sub eax, dword [ebp - 0x118]
movzx eax, byte [ebp + eax - 0x52]
movsx eax, byte [ebp + eax - 0x6c]
mov edx, dword [ebp - 0x1c]
movzx edx, byte [ebp + edx - 0x4f]
or edx, eax
sub edx, ecx
mov eax, dword [ebp - 0x1c]
movzx eax, byte [ebp + eax - 0x50]
mov byte [ebp + eax - 0x6c], dl
and dword [ebp - 0x118], 0
jmp 0x1001e6bd
xor eax, eax
inc eax
imul eax, eax, 3
mov byte [ebp + eax - 0x6c], 0
mov eax, dword [0x10073c38]
and eax, 4
jne 0x1001e7a0
mov eax, dword [0x10073c38]
or eax, 4
mov dword [0x10073c38], eax
mov dword [ebp - 4], 0x18
lea eax, [ebp - 0x6c]
push eax
mov ecx, 0x10073c88
call fcn.1002273a
push 0x10058e0d
call fcn.1003fd4c
pop ecx
or dword [ebp - 4], 0xffffffff
and dword [ebp - 0x120], 0
jmp 0x1001e7b6
mov eax, dword [ebp - 0x120]
inc eax
mov dword [ebp - 0x120], eax
cmp dword [ebp - 0x120], 4
jae 0x1001e7cc
mov eax, dword [ebp - 0x120]
mov byte [ebp + eax - 0x6c], 0
jmp 0x1001e7a9
mov eax, dword [ebp - 0x40]
mov dword [ebp - 0x5c], eax
movsx eax, byte [0x10073ca8]
mov ecx, dword [ebp - 0x5c]
movsx ecx, byte [ecx]
cmp ecx, eax
je 0x1001e7ec
mov eax, dword [ebp - 0x5c]
inc eax
mov dword [ebp - 0x5c], eax
jmp 0x1001e7d2
mov eax, dword [ebp - 0x5c]
inc eax
mov dword [ebp - 0x5c], eax
push dword [ebp - 0x5c]
push dword [ebp - 0x40]
lea ecx, [ebp - 0x3f8]
call fcn.10022e3e
mov dword [ebp - 4], 0x19
push 0x10073c88
lea ecx, [ebp - 0x3f8]
call fcn.10022769
lea eax, [ebp - 0x3c8]
push eax
lea ecx, [ebp - 0x3f8]
call fcn.10011857
push dword [eax]
lea eax, [ebp - 0x3a0]
push eax
lea ecx, [ebp - 0x3f8]
call fcn.10011843
push dword [eax]
lea ecx, [ebp - 0x45c]
call fcn.10022e67
mov byte [ebp - 4], 0x1a
lea eax, [ebp - 0x45c]
push eax
call fcn.1001348e
pop ecx
mov dword [ebp - 0x164], eax
cmp dword [ebp - 0x164], 0
je 0x1001e8e2
push dword [ebp - 0x5c]
lea ecx, [ebp - 0x42c]
call fcn.1002273a
mov byte [ebp - 4], 0x1b
lea edx, [ebp - 0x31c]
lea ecx, [ebp - 0x42c]
call fcn.100131a0
movzx eax, al
test eax, eax
je 0x1001e8b5
push 0
push dword [ebp - 0x31c]
push 0
push dword [ebp - 0x164]
call fcn.1001c6f0
add esp, 0x10
mov dword [ebp - 0x40], eax
jmp 0x1001e8d1
push 1
push 0
lea eax, [ebp - 0x42c]
push eax
push dword [ebp - 0x164]
call fcn.1001c6f0
add esp, 0x10
mov dword [ebp - 0x40], eax
mov byte [ebp - 4], 0x1a
lea ecx, [ebp - 0x42c]
call fcn.10010f6a
jmp 0x1001e915
cmp dword [ebp + 0x10], 0
jne 0x1001e8f8
mov ecx, dword [ebp + 0xc]
call fcn.10001c18
mov dword [ebp - 0x230], eax
jmp 0x1001e902
movzx eax, word [ebp + 0x10]
mov dword [ebp - 0x230], eax
push dword [ebp - 0x230]
push dword [ebp + 8]
call fcn.10017a4c
pop ecx
pop ecx
mov dword [ebp - 0x40], eax
mov byte [ebp - 4], 0x19
lea ecx, [ebp - 0x45c]
call fcn.10010ea1
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x3f8]
call fcn.10010f6a
mov eax, dword [ebp - 0x40]
jmp 0x1001ea8f
mov dword [ebp - 0x18], 0x643cdf98
mov dword [ebp - 0x250], 0x3c0bf90a
mov dword [ebp - 0x354], 0xeda8ed40
cmp dword [ebp - 0x18], 0
je 0x1001ea44
mov eax, dword [ebp - 0x18]
neg eax
cmp eax, dword [ebp - 0x18]
je 0x1001e976
mov dword [ebp - 0x238], 1
jmp 0x1001e97d
and dword [ebp - 0x238], 0
mov eax, dword [ebp - 0x18]
cmp eax, dword [ebp - 0x238]
jge 0x1001e994
mov dword [ebp - 0x240], 1
jmp 0x1001e99b
and dword [ebp - 0x240], 0
mov eax, dword [ebp - 0x18]
cmp dword [ebp - 0x240], eax
jle 0x1001e9b2
mov dword [ebp - 0x248], 1
jmp 0x1001e9b9
and dword [ebp - 0x248], 0
mov eax, dword [ebp - 0x18]
cmp dword [ebp - 0x248], eax
jle 0x1001e9d6
cmp dword [ebp - 0x18], 0
je 0x1001e9d6
mov dword [ebp - 0x258], 1
jmp 0x1001e9dd
and dword [ebp - 0x258], 0
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x250], eax
mov eax, dword [ebp - 0x250]
add eax, dword [ebp - 0x258]
cmp eax, dword [ebp - 0x18]
jne 0x1001ea03
mov dword [ebp - 0x260], 1
jmp 0x1001ea0a
and dword [ebp - 0x260], 0
cmp dword [ebp - 0x260], 1
jge 0x1001ea28
mov eax, 0xfffe
test eax, eax
je 0x1001ea28
mov dword [ebp - 0x268], 1
jmp 0x1001ea2f
and dword [ebp - 0x268], 0
cmp dword [ebp - 0x268], 0
je 0x1001ea44
mov dword [ebp - 0x270], 1
jmp 0x1001ea4b
and dword [ebp - 0x270], 0
mov eax, dword [ebp - 0x270]
mov dword [ebp - 0x354], eax
mov dword [ebp - 0x18], 0xf
jmp 0x1001ea67
mov eax, dword [ebp - 0x18]
inc eax
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 0x25
jg 0x1001ea8d
mov byte [ebp - 0x55], 0
movzx eax, byte [ebp - 0x55]
test eax, eax
je 0x1001ea8b
push 0xc49
push 0x145b
push 0
call dword [sym.imp.USER32.dll_CheckMenuItem]
jmp 0x1001ea60
xor eax, eax
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret