Function at 0x10021193
Capabilities:
Check os version

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x1006194c
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
push ecx
sub esp, 0x5e4
push ebx
push esi
push edi
mov dword [ebp - 0x10], esp
movzx eax, byte [ebp + 0x20]
test eax, eax
je 0x100237a3
lea eax, [ebp + 8]
mov dword [ebp - 0x334], eax
mov eax, dword [ebp + 0x18]
mov dword [ebp - 0x390], eax
mov eax, dword [ebp + 0x24]
mov dword [ebp - 0x308], eax
mov eax, dword [ebp + 0x14]
mov dword [ebp - 0x398], eax
mov eax, dword [ebp - 0x334]
movzx eax, byte [eax]
test eax, eax
je 0x1002365c
mov eax, dword [ebp - 0x390]
mov dword [ebp - 0x3bc], eax
mov eax, dword [ebp - 0x398]
mov dword [ebp - 0x2b0], eax
mov dword [ebp - 0x50], 0xdf3d
mov dword [ebp - 0x7c], 1
mov dword [ebp - 0x114], 0xb9725245
mov dword [ebp - 0x18c], 6
mov dword [ebp - 0x13c], 1
mov dword [ebp - 0x54c], 0xfffffff7
mov dword [ebp - 0x58], 0xad0d
mov dword [ebp - 0x30c], 0xfffffffe
mov dword [ebp - 0x218], 0x7877
mov dword [ebp - 0x420], str.rkdkmx_gecnra_khvmosmal_occfgtivf_jizzup_owo_htlyoweh_wqbuce
cmp dword [ebp - 0x218], 0x7922
jle 0x10021333
and dword [ebp - 0xd4], 0
jmp 0x10021292
mov eax, dword [ebp - 0xd4]
inc eax
mov dword [ebp - 0xd4], eax
cmp dword [ebp - 0xd4], 0x4072
jge 0x10021333
and dword [ebp - 0x6c], 0
jmp 0x100212af
mov eax, dword [ebp - 0x6c]
inc eax
mov dword [ebp - 0x6c], eax
cmp dword [ebp - 0x6c], 0x3865
jge 0x1002132e
and dword [ebp - 0xa4], 0
jmp 0x100212ce
mov eax, dword [ebp - 0xa4]
inc eax
mov dword [ebp - 0xa4], eax
cmp dword [ebp - 0xa4], 0x5dba
jge 0x10021329
and dword [ebp - 0x74], 0
jmp 0x100212e7
mov eax, dword [ebp - 0x74]
inc eax
mov dword [ebp - 0x74], eax
cmp dword [ebp - 0x74], 0x351d
jge 0x10021327
mov eax, dword [ebp - 0xd4]
xor eax, dword [ebp - 0x6c]
xor eax, dword [ebp - 0xa4]
or eax, dword [ebp - 0x74]
cdq
mov dword [ebp - 0x3a4], eax
mov dword [ebp - 0x3a0], edx
push dword [ebp - 0x3a0]
push dword [ebp - 0x3a4]
mov ecx, 0x1007c0d8
call fcn.100042cb
jmp 0x100212e0
jmp 0x100212c1
jmp 0x100212a8
jmp 0x10021285
mov dword [ebp - 0x84], 0x59baaa4f
and dword [ebp - 4], 0
cmp dword [ebp - 0x218], 0x779e
jge 0x1002135d
mov edx, dword [ebp - 0x420]
mov ecx, 0x1007c0d8
call fcn.10006d07
jmp 0x10021379
or dword [ebp - 4], 0xffffffff
jmp 0x10021383
mov dword [ebp - 0x11c], 0
mov dword [ebp - 0x22c], 0xffff
mov dword [ebp - 0xa8], 0
jmp 0x100213b0
mov eax, dword [ebp - 0xa8]
inc eax
mov dword [ebp - 0xa8], eax
cmp dword [ebp - 0xa8], 1
jge 0x100213cc
mov eax, dword [ebp - 0xa8]
mov dword [ebp + eax*4 - 0x27c], 0x8664a11
jmp 0x100213a3
mov eax, dword [ebp - 0x50]
mov dword [ebp - 0x7c], eax
cmp dword [ebp - 0x7c], 0
je 0x1002145f
mov eax, dword [ebp - 0x50]
mov dword [ebp - 0x7c], eax
cmp dword [ebp - 0x7c], 0xfffffff6
jg 0x100213fa
mov eax, 0x96378555
test eax, eax
jne 0x100213fa
and dword [ebp - 0x2d0], 0
jmp 0x10021404
mov dword [ebp - 0x2d0], 1
mov eax, dword [ebp - 0x84]
mov dword [ebp - 0x428], eax
mov eax, dword [ebp - 0x84]
dec eax
mov dword [ebp - 0x84], eax
cmp dword [ebp - 0x428], 0
jl 0x10021432
mov dword [ebp - 0x14c], 1
jmp 0x10021439
and dword [ebp - 0x14c], 0
mov eax, dword [ebp - 0x2d0]
mov dword [ebp - 0x114], eax
mov eax, dword [ebp - 0x114]
cmp eax, dword [ebp - 0x14c]
je 0x1002145f
mov dword [ebp - 0x160], 1
jmp 0x10021466
and dword [ebp - 0x160], 0
mov eax, dword [ebp - 0x160]
sub eax, dword [ebp - 0x50]
jne 0x10021483
cmp dword [ebp - 0x114], 0
jne 0x10021483
and dword [ebp - 0x12c], 0
jmp 0x1002148d
mov dword [ebp - 0x12c], 1
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x12c]
mov dword [ebp + eax - 0x27c], ecx
mov eax, dword [ebp - 0x58]
cmp dword [ebp - 0x12c], eax
jl 0x100214b7
mov dword [ebp - 0x274], 1
jmp 0x100214be
and dword [ebp - 0x274], 0
mov eax, dword [ebp - 0x13c]
cmp dword [ebp - 0x274], eax
jne 0x100214d8
mov dword [ebp - 0x164], 1
jmp 0x100214df
and dword [ebp - 0x164], 0
mov eax, dword [ebp - 0x50]
cmp dword [ebp - 0x164], eax
jne 0x100214fc
cmp dword [ebp - 0x11c], 0
jne 0x100214fc
and dword [ebp - 0x21c], 0
jmp 0x10021506
mov dword [ebp - 0x21c], 1
mov eax, dword [ebp - 0x21c]
mov dword [ebp - 0x18c], eax
mov eax, dword [ebp - 0x11c]
cmp eax, dword [ebp - 0x11c]
je 0x1002152c
mov dword [ebp - 0x16c], 1
jmp 0x10021533
and dword [ebp - 0x16c], 0
cmp dword [ebp - 0x16c], 0xa1d127a4
jae 0x1002154b
mov dword [ebp - 0x2a4], 1
jmp 0x10021552
and dword [ebp - 0x2a4], 0
mov eax, dword [ebp - 0x58]
add eax, dword [ebp - 0x2a4]
mov dword [ebp - 0x13c], eax
mov dword [ebp - 0x450], 0x1ca4
cmp dword [ebp - 0x450], 0x63d
jge 0x100216a5
and dword [ebp - 0xb0], 0
lea eax, [ebp - 0xb0]
push eax
push 0x10069a08
call fcn.100498bb
pop ecx
pop ecx
lea ecx, [ebp - 0x2e4]
call fcn.1001c7d5
mov dword [ebp - 4], 2
lea ecx, [ebp - 0x2ec]
call fcn.1001c7d5
mov byte [ebp - 4], 3
mov eax, dword [ebp - 0xb0]
mov dword [ebp - 0x388], eax
mov eax, dword [ebp - 0xb0]
dec eax
mov dword [ebp - 0xb0], eax
cmp dword [ebp - 0x388], 0
je 0x10021635
and dword [ebp - 0x174], 0
and dword [ebp - 0x224], 0
lea eax, [ebp - 0x224]
push eax
lea eax, [ebp - 0x174]
push eax
push str._ld__ld
call fcn.100498bb
add esp, 0xc
lea eax, [ebp - 0x174]
push eax
lea eax, [ebp - 0x598]
push eax
lea ecx, [ebp - 0x2e4]
call fcn.1001c7ea
lea eax, [ebp - 0x224]
push eax
lea eax, [ebp - 0x5a8]
push eax
lea ecx, [ebp - 0x2ec]
call fcn.1001c7ea
jmp 0x100215b6
lea ecx, [ebp - 0x2ec]
call fcn.100351bc
mov esi, eax
lea ecx, [ebp - 0x2e4]
call fcn.100351bc
cmp eax, esi
jae 0x10021664
lea ecx, [ebp - 0x2e4]
call fcn.100351bc
mov dword [ebp - 0x17c], eax
jmp 0x10021675
lea ecx, [ebp - 0x2ec]
call fcn.100351bc
mov dword [ebp - 0x17c], eax
push dword [ebp - 0x17c]
push str._ld_n
call fcn.10049ba3
pop ecx
pop ecx
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x2ec]
call fcn.10018c38
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x2e4]
call fcn.10018c38
cmp dword [ebp - 0x58], 0xfffffffc
jb 0x100216b7
mov dword [ebp - 0x194], 1
jmp 0x100216be
and dword [ebp - 0x194], 0
cmp dword [ebp - 0x30c], 0
jne 0x10021717
mov eax, 0xc50d
sub eax, dword [ebp - 0x50]
jne 0x100216ea
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x27c], 0
jne 0x100216ea
and dword [ebp - 0x184], 0
jmp 0x100216f4
mov dword [ebp - 0x184], 1
mov eax, dword [ebp - 0x184]
mov dword [ebp - 0x22c], eax
cmp dword [ebp - 0x22c], 0
jne 0x10021717
or eax, 0xffffffff
jne 0x10021717
and dword [ebp - 0x3ac], 0
jmp 0x10021721
mov dword [ebp - 0x3ac], 1
mov eax, dword [ebp - 0x58]
mov dword [ebp - 0x504], eax
mov eax, dword [ebp - 0x84]
mov dword [ebp - 0x53c], eax
cmp dword [ebp - 0x58], 0xc75df642
jne 0x1002174b
mov dword [ebp - 0x2bc], 1
jmp 0x10021752
and dword [ebp - 0x2bc], 0
mov eax, dword [ebp - 0x18c]
add eax, dword [ebp - 0x2bc]
cmp eax, 0xf1e73e4f
je 0x10021771
mov dword [ebp - 0x234], 1
jmp 0x10021778
and dword [ebp - 0x234], 0
mov eax, dword [ebp - 0x194]
cmp eax, dword [ebp - 0x234]
jle 0x10021792
mov dword [ebp - 0x19c], 1
jmp 0x10021799
and dword [ebp - 0x19c], 0
mov eax, dword [ebp - 0x19c]
mov dword [ebp - 0x13c], eax
mov dword [ebp - 0x284], 0x49da
mov dword [ebp - 0x3b0], str.myav_yrftzl_xdday_bqoj_jarvxfy_whkam_gfsokr
cmp dword [ebp - 0x284], 0x4a5f
jle 0x100218a1
and dword [ebp - 0xb8], 0
jmp 0x100217df
mov eax, dword [ebp - 0xb8]
inc eax
mov dword [ebp - 0xb8], eax
cmp dword [ebp - 0xb8], 0x163c
jge 0x100218a1
and dword [ebp - 0x8c], 0
jmp 0x10021805
mov eax, dword [ebp - 0x8c]
inc eax
mov dword [ebp - 0x8c], eax
cmp dword [ebp - 0x8c], 0x66e
jge 0x1002189c
and dword [ebp - 0xc0], 0
jmp 0x1002182b
mov eax, dword [ebp - 0xc0]
inc eax
mov dword [ebp - 0xc0], eax
cmp dword [ebp - 0xc0], 0x1078
jge 0x10021897
mov eax, dword [ebp - 0xb8]
imul eax, dword [ebp - 0x8c]
mov ecx, dword [ebp - 0xc0]
shl eax, cl
cdq
mov dword [ebp - 0x3b8], eax
mov dword [ebp - 0x3b4], edx
push dword [ebp - 0x3b4]
push dword [ebp - 0x3b8]
lea ecx, [ebp - 0x5dc]
call fcn.10001a65
pop ecx
pop ecx
mov dword [ebp - 0x314], eax
mov ecx, dword [ebp - 0x314]
call fcn.100042ab
push eax
call fcn.10049ba3
pop ecx
lea ecx, [ebp - 0x5dc]
call fcn.100042a1
jmp 0x1002181e
jmp 0x100217f8
jmp 0x100217d2
mov dword [ebp - 4], 4
cmp dword [ebp - 0x284], 0x48a5
jge 0x100218c0
push dword [ebp - 0x3b0]
call fcn.10049ba3
pop ecx
jmp 0x100218dc
or dword [ebp - 4], 0xffffffff
jmp 0x100218e6
push 1
lea ecx, [ebp - 0x548]
call fcn.1000457d
mov dword [ebp - 4], 6
mov dword [ebp - 0x50c], 0xc443
mov dword [ebp - 0x31c], 0xbb7a
mov dword [ebp - 0x28c], 0xfbc9fa8b
push 3
lea ecx, [ebp - 0x474]
call fcn.1000457d
mov byte [ebp - 4], 7
push 2
lea ecx, [ebp - 0x438]
call fcn.1000457d
mov byte [ebp - 4], 8
mov dword [ebp - 0x41c], 0xca6d786f
lea eax, [ebp - 0x548]
push eax
push 0
lea eax, [ebp - 0x1a4]
push eax
call fcn.10023b65
add esp, 0xc
push 0x5133
push 0
lea eax, [ebp - 0x474]
push eax
push 1
lea eax, [ebp - 0x1a4]
push eax
push 0x9b8
push 0
push 0x74b5
call fcn.10020f5e
add esp, 0x20
push 0x3954
lea eax, [ebp - 0x438]
push eax
lea eax, [ebp - 0x1a4]
push eax
push 0
call fcn.10024a9a
add esp, 0x10
push 0
lea ecx, [ebp - 0x438]
call fcn.1000461c
mov dword [ebp - 0x23c], eax
mov eax, dword [ebp - 0x23c]
mov eax, dword [eax]
inc eax
mov ecx, dword [ebp - 0x23c]
mov dword [ecx], eax
mov esi, dword [ebp - 0x31c]
push 0
lea ecx, [ebp - 0x474]
call fcn.1000461c
cmp dword [eax], esi
je 0x100219eb
mov dword [ebp - 0x1ac], 1
jmp 0x100219f2
and dword [ebp - 0x1ac], 0
cmp dword [ebp - 0x1ac], 0xebab
jge 0x10021a0a
mov dword [ebp - 0x124], 1
jmp 0x10021a11
and dword [ebp - 0x124], 0
push 0
lea ecx, [ebp - 0x474]
call fcn.1000461c
mov ecx, dword [ebp - 0x124]
mov dword [eax], ecx
mov eax, dword [ebp - 0x28c]
cmp dword [ebp - 0x124], eax
jle 0x10021a40
mov dword [ebp - 0x2ac], 1
jmp 0x10021a47
and dword [ebp - 0x2ac], 0
mov eax, dword [ebp - 0x41c]
cmp dword [ebp - 0x2ac], eax
je 0x10021a61
mov dword [ebp - 0x1b4], 1
jmp 0x10021a68
and dword [ebp - 0x1b4], 0
push 0
lea ecx, [ebp - 0x438]
call fcn.1000461c
mov eax, dword [eax]
cmp eax, dword [ebp - 0x1b4]
jne 0x10021a8b
mov dword [ebp - 0x244], 1
jmp 0x10021a92
and dword [ebp - 0x244], 0
imul esi, dword [ebp - 0x244], 3
push 0
lea ecx, [ebp - 0x438]
call fcn.1000461c
cmp esi, dword [eax]
jl 0x10021ab6
mov dword [ebp - 0x1bc], 1
jmp 0x10021abd
and dword [ebp - 0x1bc], 0
mov eax, dword [ebp - 0x1bc]
mov dword [ebp - 0x28c], eax
mov byte [ebp - 4], 7
lea ecx, [ebp - 0x438]
call fcn.10004600
mov byte [ebp - 4], 6
lea ecx, [ebp - 0x474]
call fcn.10004600
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x548]
call fcn.10004600
lea eax, [ebp - 0x148]
push eax
push 0x3b3e
push 0
call fcn.10025c6a
add esp, 0xc
mov dword [ebp - 0x324], 0x76820624
mov dword [ebp - 0x584], 0xfffffffe
push 3
lea ecx, [ebp - 0x558]
call fcn.1000457d
mov dword [ebp - 4], 9
mov dword [ebp - 0x514], 0x4185a1fa
mov dword [ebp - 0x1c4], 1
lea eax, [ebp - 0x558]
push eax
push 0x1c4b
lea eax, [ebp - 0x4d4]
push eax
push 0x50ff
push 0
push 0x58a4
push 0
push 0x2210
call fcn.100251d1
add esp, 0x20
lea eax, [ebp - 0x324]
push eax
push 0
push 1
push 0x56b5
push 0x6335
push 0x70e6
push 1
call fcn.10025fa4
add esp, 0x1c
mov eax, dword [ebp - 0x1c4]
dec eax
mov dword [ebp - 0x1c4], eax
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x558]
call fcn.10004600
cmp dword [ebp - 0x148], 0
je 0x100235d8
push dword [ebp - 0x3bc]
lea ecx, [ebp - 0x4b8]
call fcn.100043e0
mov dword [ebp - 4], 0xa
lea eax, [ebp - 0x51c]
push eax
lea ecx, [ebp - 0x4b8]
call fcn.10005ad0
push dword [eax]
lea eax, [ebp - 0x57c]
push eax
lea ecx, [ebp - 0x4b8]
call fcn.10004b32
push dword [eax]
lea eax, [ebp - 0x524]
push eax
lea ecx, [ebp - 0x4b8]
call fcn.10005ad0
push dword [eax]
mov edx, 0x100208d4
lea ecx, [ebp - 0x4d8]
call fcn.10035495
add esp, 0xc
mov dword [ebp - 0x14], 0xfffffffe
mov dword [ebp - 0x300], 1
mov dword [ebp - 0x4dc], 0xffffffff
mov dword [ebp - 0x4e4], 0xa138dbec
mov dword [ebp - 0x500], 0xb7c80bfd
mov dword [ebp - 0x508], 0x48fb8aaa
mov dword [ebp - 0x2c], 0
jmp 0x10021c73
mov eax, dword [ebp - 0x2c]
inc eax
mov dword [ebp - 0x2c], eax
cmp dword [ebp - 0x2c], 1
jge 0x10021c89
mov eax, dword [ebp - 0x2c]
mov dword [ebp + eax*4 - 0x510], 0xffffffff
jmp 0x10021c6c
mov dword [ebp - 0x2c], 0
jmp 0x10021c99
mov eax, dword [ebp - 0x2c]
inc eax
mov dword [ebp - 0x2c], eax
cmp dword [ebp - 0x2c], 1
jge 0x10021caf
mov eax, dword [ebp - 0x2c]
mov dword [ebp + eax*4 - 0x150], 6
jmp 0x10021c92
mov dword [ebp - 0x14], 0
jmp 0x10021cbf
mov eax, dword [ebp - 0x14]
inc eax
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 9
jg 0x1002209d
mov dword [ebp - 0x1c], 0xffffffff
mov dword [ebp - 0x20], 0x13bf58aa
mov dword [ebp - 0x264], 0x2cc684ca
mov dword [ebp - 0x94], 0
jmp 0x10021cfa
mov eax, dword [ebp - 0x94]
inc eax
mov dword [ebp - 0x94], eax
cmp dword [ebp - 0x94], 3
jge 0x10021d16
mov eax, dword [ebp - 0x94]
mov dword [ebp + eax*4 - 0x4a0], 1
jmp 0x10021ced
cmp dword [ebp - 0x14], 0
je 0x10021dce
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0x20], eax
mov eax, dword [ebp - 0x20]
cmp eax, dword [ebp - 0x14]
jne 0x10021d3a
mov dword [ebp - 0x24c], 1
jmp 0x10021d41
and dword [ebp - 0x24c], 0
cmp dword [ebp - 0x24c], 0xffffffff
ja 0x10021d56
mov dword [ebp - 0x1cc], 1
jmp 0x10021d5d
and dword [ebp - 0x1cc], 0
mov eax, dword [ebp - 0x1c]
cmp dword [ebp - 0x20], 0x4cff
jne 0x10021d75
mov dword [ebp - 0x32c], 1
jmp 0x10021d7c
and dword [ebp - 0x32c], 0
mov eax, dword [ebp - 0x14]
mov dword [ebp - 0x518], eax
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0x520], eax
mov eax, dword [ebp - 0x1c]
imul eax, dword [ebp - 0x14]
xor ecx, ecx
inc ecx
sub ecx, eax
cmp ecx, dword [ebp - 0x1c]
jge 0x10021dad
or eax, 0xffffffff
jne 0x10021dad
and dword [ebp - 0x2cc], 0
jmp 0x10021db7
mov dword [ebp - 0x2cc], 1
mov eax, dword [ebp - 0x14]
cmp dword [ebp - 0x2cc], eax
jge 0x10021dce
mov dword [ebp - 0x1d4], 1
jmp 0x10021dd5
and dword [ebp - 0x1d4], 0
mov eax, dword [ebp - 0x1c]
cmp dword [ebp - 0x1d4], eax
jge 0x10021dec
mov dword [ebp - 0x254], 1
jmp 0x10021df3
and dword [ebp - 0x254], 0
mov eax, dword [ebp - 0x1c]
cmp dword [ebp - 0x254], eax
jge 0x10021e0a
mov dword [ebp - 0x1dc], 1
jmp 0x10021e11
and dword [ebp - 0x1dc], 0
mov eax, dword [ebp - 0x1c]
imul eax, dword [ebp - 0x1dc]
cmp eax, 1
jle 0x10021e2c
mov dword [ebp - 0x294], 1
jmp 0x10021e33
and dword [ebp - 0x294], 0
mov eax, dword [ebp - 0x1c]
cmp dword [ebp - 0x294], eax
jle 0x10021e4a
mov dword [ebp - 0x454], 1
jmp 0x10021e51
and dword [ebp - 0x454], 0
cmp dword [ebp - 0x20], 0
jne 0x10021e66
cmp dword [ebp - 0x14], 0
jne 0x10021e66
and dword [ebp - 0x1e4], 0
jmp 0x10021e70
mov dword [ebp - 0x1e4], 1
mov eax, dword [ebp - 0x1e4]
sub eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x528], eax
mov eax, 0x4cdb8faa
sub eax, dword [ebp - 0x14]
jne 0x10021e96
cmp dword [ebp - 0x20], 0
je 0x1002206d
cmp dword [ebp - 0x20], 0
je 0x1002206d
mov dword [ebp - 0xc8], 0
mov dword [ebp - 0x204], 0x215cd4dc
mov dword [ebp - 0x3c8], 0xe5efb48c
mov eax, dword [ebp - 0x14]
cmp eax, dword [ebp - 0xc8]
jne 0x10021ed5
mov dword [ebp - 0x25c], 1
jmp 0x10021edc
and dword [ebp - 0x25c], 0
mov eax, dword [ebp - 0x20]
sub eax, dword [ebp - 0xc8]
add eax, dword [ebp - 0x25c]
mov dword [ebp - 0x20], eax
mov eax, dword [ebp - 0xc8]
mov dword [ebp - 0x530], eax
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x14]
cmp ecx, dword [ebp + eax - 0x4a0]
je 0x10021f18
mov dword [ebp - 0x2b4], 1
jmp 0x10021f1f
and dword [ebp - 0x2b4], 0
mov eax, 0x5823
sub eax, dword [ebp - 0x1c]
jne 0x10021f42
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x4a0], 0
jne 0x10021f42
and dword [ebp - 0x1ec], 0
jmp 0x10021f4c
mov dword [ebp - 0x1ec], 1
mov eax, dword [ebp - 0xc8]
cmp eax, dword [ebp - 0x1ec]
jle 0x10021f66
mov dword [ebp - 0x1f4], 1
jmp 0x10021f6d
and dword [ebp - 0x1f4], 0
mov eax, dword [ebp - 0x2b4]
add eax, dword [ebp - 0x1f4]
cmp eax, dword [ebp - 0x264]
jl 0x10021f8d
mov dword [ebp - 0x1fc], 1
jmp 0x10021f94
and dword [ebp - 0x1fc], 0
mov eax, dword [ebp - 0x264]
cmp dword [ebp - 0x1fc], eax
jl 0x10021fae
mov dword [ebp - 0x29c], 1
jmp 0x10021fb5
and dword [ebp - 0x29c], 0
mov eax, dword [ebp - 0x29c]
dec eax
mov dword [ebp - 0x204], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x204]
add ecx, dword [ebp - 0x14]
cmp ecx, dword [ebp + eax - 0x4a0]
jge 0x10021fe6
mov dword [ebp - 0x26c], 1
jmp 0x10021fed
and dword [ebp - 0x26c], 0
mov eax, dword [ebp - 0x14]
imul eax, dword [ebp - 0x26c]
test eax, eax
jne 0x10022004
cmp dword [ebp - 0x300], 0
je 0x1002201d
xor eax, eax
je 0x1002201d
mov eax, 0xed6d
test eax, eax
je 0x1002201d
mov dword [ebp - 0x20c], 1
jmp 0x10022024
and dword [ebp - 0x20c], 0
cmp dword [ebp - 0x20c], 0
jne 0x10022039
mov dword [ebp - 0x2c4], 1
jmp 0x10022040
and dword [ebp - 0x2c4], 0
cmp dword [ebp - 0x2c4], 0x6c21
jl 0x10022058
mov dword [ebp - 0x214], 1
jmp 0x1002205f
and dword [ebp - 0x214], 0
mov eax, dword [ebp - 0x214]
mov dword [ebp - 0x3c8], eax
jmp 0x1002208d
mov dword [ebp - 0x33c], 8
lea eax, [ebp - 0x33c]
push eax
push 0
push 0x5fd2
call fcn.100318b4
add esp, 0xc
cmp dword [ebp - 0x20], 0
je 0x10022098
jmp 0x10021cb8
jmp 0x10021cb8
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x150]
dec eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x150], eax
mov eax, dword [ebp - 0x148]
mov eax, dword [eax + 0xc]
add eax, 0x14
mov dword [ebp - 0x1b0], eax
and dword [ebp - 0x140], 0
mov dword [ebp - 0x4c], 0x99841b3c
push 2
lea ecx, [ebp - 0x448]
call fcn.1000457d
mov byte [ebp - 4], 0xb
mov dword [ebp - 0x538], 0xb430688c
push 1
lea ecx, [ebp - 0x568]
call fcn.1000457d
mov byte [ebp - 4], 0xc
mov dword [ebp - 0x580], 0x563ade45
mov dword [ebp - 0x588], 0
mov dword [ebp - 0x34c], 6
mov dword [ebp - 0x44], 0
jmp 0x10022132
mov eax, dword [ebp - 0x44]
inc eax
mov dword [ebp - 0x44], eax
cmp dword [ebp - 0x44], 2
jge 0x1002214e
push dword [ebp - 0x44]
lea ecx, [ebp - 0x448]
call fcn.1000461c
mov dword [eax], 0xfffffffc
jmp 0x1002212b
push 0x81d
push 0
lea eax, [ebp - 0x568]
push eax
lea eax, [ebp - 0x44]
push eax
push 0x4570
push 0
call fcn.10021078
add esp, 0x18
mov dword [ebp - 0x4c], 0x1b
jmp 0x1002217f
mov eax, dword [ebp - 0x4c]
dec eax
mov dword [ebp - 0x4c], eax
cmp dword [ebp - 0x4c], 0x18
jl 0x1002283c
mov dword [ebp - 0x48], 0x102d149f
push 1
lea ecx, [ebp - 0x494]
call fcn.1000457d
mov byte [ebp - 4], 0xd
mov dword [ebp - 0x24], 0
jmp 0x100221b1
mov eax, dword [ebp - 0x24]
inc eax
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 1
jge 0x100221cd
push dword [ebp - 0x24]
lea ecx, [ebp - 0x494]
call fcn.1000461c
mov dword [eax], 0x9b69b2e4
jmp 0x100221aa
mov dword [ebp - 0x24], 0
jmp 0x100221dd
mov eax, dword [ebp - 0x24]
inc eax
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 1
jge 0x100221f3
mov eax, dword [ebp - 0x24]
mov dword [ebp + eax*4 - 0x198], 0xa6ff609d
jmp 0x100221d6
mov dword [ebp - 0x48], 0xffffffe9
jmp 0x10022203
mov eax, dword [ebp - 0x48]
inc eax
mov dword [ebp - 0x48], eax
cmp dword [ebp - 0x48], 0x1d
jge 0x10022828
mov dword [ebp - 0x188], 0x21fbb9c
mov dword [ebp - 0x28], 0
jmp 0x10022227
mov eax, dword [ebp - 0x28]
inc eax
mov dword [ebp - 0x28], eax
cmp dword [ebp - 0x28], 2
jge 0x1002223d
mov eax, dword [ebp - 0x28]
mov dword [ebp + eax*4 - 0x3e8], 0xc520ea0c
jmp 0x10022220
mov dword [ebp - 0x28], 0
jmp 0x1002224d
mov eax, dword [ebp - 0x28]
inc eax
mov dword [ebp - 0x28], eax
cmp dword [ebp - 0x28], 2
jge 0x10022263
mov eax, dword [ebp - 0x28]
mov dword [ebp + eax*4 - 0x4f0], 0xffffffff
jmp 0x10022246
cmp dword [ebp - 0x48], 0
je 0x1002266c
mov dword [ebp - 0xd8], 1
mov dword [ebp - 0x168], 0x64a6
mov dword [ebp - 0x424], str.fmnpc_uperbx_rfnyw_cibkifw_unugoik
cmp dword [ebp - 0x168], 0x66e2
jle 0x10022328
push 0x24df
push 0
push 0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_GetDateFormatW]
and dword [ebp - 0x9c], 0
jmp 0x100222c6
mov eax, dword [ebp - 0x9c]
inc eax
mov dword [ebp - 0x9c], eax
cmp dword [ebp - 0x9c], 0x63f9
jge 0x10022328
and dword [ebp - 0xd0], 0
jmp 0x100222e8
mov eax, dword [ebp - 0xd0]
inc eax
mov dword [ebp - 0xd0], eax
cmp dword [ebp - 0xd0], 0x50c5
jge 0x10022326
mov eax, dword [ebp - 0x9c]
imul eax, dword [ebp - 0xd0]
cdq
mov dword [ebp - 0x3c4], eax
mov dword [ebp - 0x3c0], edx
push dword [ebp - 0x3c0]
push dword [ebp - 0x3c4]
mov ecx, 0x1007c0d8
call fcn.100042cb
jmp 0x100222db
jmp 0x100222b9
mov dword [ebp - 0x60], 0
jmp 0x10022338
mov eax, dword [ebp - 0x60]
inc eax
mov dword [ebp - 0x60], eax
cmp dword [ebp - 0x60], 4
jge 0x1002234e
mov eax, dword [ebp - 0x60]
mov dword [ebp + eax*4 - 0x5b8], 0
jmp 0x10022331
mov byte [ebp - 4], 0xe
cmp dword [ebp - 0x168], 0x613d
jge 0x1002236e
mov edx, dword [ebp - 0x424]
mov ecx, 0x1007c0d8
call fcn.10006d07
jmp 0x1002238a
mov dword [ebp - 4], 0xd
jmp 0x1002239a
mov dword [ebp - 0xd8], 3
jmp 0x100223b3
mov eax, dword [ebp - 0xd8]
dec eax
mov dword [ebp - 0xd8], eax
cmp dword [ebp - 0xd8], 0
jl 0x1002254f
mov byte [ebp - 0x32], 0
mov dword [ebp - 0x170], 0x3241
mov dword [ebp - 0x344], str.mxybamy_adcsiuz_cdiijkvri_fruyegpqr_xhftioxj
cmp dword [ebp - 0x170], 0x35c9
jle 0x100224d3
and dword [ebp - 0xb4], 0
jmp 0x100223fe
mov eax, dword [ebp - 0xb4]
inc eax
mov dword [ebp - 0xb4], eax
cmp dword [ebp - 0xb4], 0x75b7
jge 0x100224cb
and dword [ebp - 0xf4], 0
jmp 0x10022424
mov eax, dword [ebp - 0xf4]
inc eax
mov dword [ebp - 0xf4], eax
cmp dword [ebp - 0xf4], 0x71d2
jge 0x100224c6
and dword [ebp - 0xac], 0
jmp 0x1002244a
mov eax, dword [ebp - 0xac]
inc eax
mov dword [ebp - 0xac], eax
cmp dword [ebp - 0xac], 0x7bae
jge 0x100224c1
and dword [ebp - 0xdc], 0
jmp 0x1002246c
mov eax, dword [ebp - 0xdc]
inc eax
mov dword [ebp - 0xdc], eax
cmp dword [ebp - 0xdc], 0x3ac5
jge 0x100224bc
mov esi, dword [ebp - 0xac]
mov ecx, dword [ebp - 0xdc]
sar esi, cl
mov eax, dword [ebp - 0xb4]
cdq
idiv dword [ebp - 0xf4]
and edx, esi
mov eax, edx
cdq
mov dword [ebp - 0x3d0], eax
mov dword [ebp - 0x3cc], edx
push dword [ebp - 0x3cc]
push dword [ebp - 0x3d0]
mov ecx, 0x1007c0d8
call fcn.100042cb
jmp 0x1002245f
jmp 0x1002243d
jmp 0x10022417
jmp 0x100223f1
push 0
call dword [sym.imp.KERNEL32.dll_GetVersionExW]
lea eax, [ebp - 0x32]
push eax
push 0x3963
push 0
push 0x1aea
push 0x4dcf
push 0x2d4f
push 1
push 0x640f
push 1
call fcn.10021193
add esp, 0x24
mov byte [ebp - 4], 0x10
cmp dword [ebp - 0x170], 0x2f4f
jge 0x1002251e
mov edx, dword [ebp - 0x344]
mov ecx, 0x1007c0d8
call fcn.10006d07
jmp 0x1002253a
mov dword [ebp - 4], 0xd
jmp 0x1002254a
jmp 0x100223a6
push 4
pop eax
shl eax, 0
push 4
pop ecx
shl ecx, 0
mov ecx, dword [ebp + ecx - 0x3e8]
sub ecx, dword [ebp + eax - 0x3e8]
cmp ecx, 0xfd06
jge 0x1002257d
mov dword [ebp - 0x178], 1
jmp 0x10022584
and dword [ebp - 0x178], 0
cmp dword [ebp - 0x178], 0xc7e43439
jbe 0x1002259c
mov dword [ebp - 0x180], 1
jmp 0x100225a3
and dword [ebp - 0x180], 0
push 0
lea ecx, [ebp - 0x494]
call fcn.1000461c
mov dword [eax], 0x2fdad5a5
cmp dword [ebp - 0x180], 0x2fdad5a5
jle 0x100225ce
mov dword [ebp - 0x134], 1
jmp 0x100225d5
and dword [ebp - 0x134], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x134]
mov dword [ebp + eax - 0x198], ecx
cmp dword [ebp - 0x134], 0
jne 0x10022600
cmp dword [ebp - 0x4c], 0
jne 0x10022600
and dword [ebp - 0x110], 0
jmp 0x1002260a
mov dword [ebp - 0x110], 1
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x110]
mov dword [ebp + eax - 0x4f0], ecx
push 4
pop eax
imul eax, eax, 3
mov eax, dword [ebp + eax - 0x5b8]
sub eax, dword [ebp - 0x110]
mov dword [ebp - 0x188], eax
je 0x1002264b
push 0xfffffffffffffffc
pop eax
test eax, eax
je 0x1002264b
mov dword [ebp - 0x190], 1
jmp 0x10022652
and dword [ebp - 0x190], 0
push 0
lea ecx, [ebp - 0x448]
call fcn.1000461c
mov ecx, dword [ebp - 0x190]
mov dword [eax], ecx
jmp 0x10022823
mov dword [ebp - 0x1a8], 0xffc
mov dword [ebp - 0x3d4], str.tfuvj_plmybboh_senqrz_bei_gzeg_iwzchqp_xpiowoatg_vrm_wufjhhs_rvvquj
cmp dword [ebp - 0x1a8], 0x1342
jle 0x1002277a
and dword [ebp - 0x104], 0
jmp 0x100226a6
mov eax, dword [ebp - 0x104]
inc eax
mov dword [ebp - 0x104], eax
cmp dword [ebp - 0x104], 0x20bc
jge 0x1002276e
and dword [ebp - 0xc4], 0
jmp 0x100226cc
mov eax, dword [ebp - 0xc4]
inc eax
mov dword [ebp - 0xc4], eax
cmp dword [ebp - 0xc4], 0x799
jge 0x10022769
and dword [ebp - 0xbc], 0
jmp 0x100226f2
mov eax, dword [ebp - 0xbc]
inc eax
mov dword [ebp - 0xbc], eax
cmp dword [ebp - 0xbc], 0x1472
jge 0x10022764
and dword [ebp - 0xe4], 0
jmp 0x10022714
mov eax, dword [ebp - 0xe4]
inc eax
mov dword [ebp - 0xe4], eax
cmp dword [ebp - 0xe4], 0x649
jge 0x10022762
mov eax, dword [ebp - 0xbc]
cdq
idiv dword [ebp - 0xe4]
mov eax, dword [ebp - 0xc4]
mov ecx, edx
sar eax, cl
xor eax, dword [ebp - 0x104]
cdq
mov dword [ebp - 0x3dc], eax
mov dword [ebp - 0x3d8], edx
push dword [ebp - 0x3d8]
push dword [ebp - 0x3dc]
mov ecx, 0x1007c0d8
call fcn.100042cb
jmp 0x10022707
jmp 0x100226e5
jmp 0x100226bf
jmp 0x10022699
push 0
push 0
push 0
call dword [sym.imp.ADVAPI32.dll_RegSetKeySecurity]
push 0
lea ecx, [ebp - 0x448]
call fcn.1000461c
cmp dword [eax], 0
je 0x100227bb
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x198]
mov dword [ebp - 0x590], eax
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x3e8], 0
je 0x100227bb
mov dword [ebp - 0x1a0], 1
jmp 0x100227c2
and dword [ebp - 0x1a0], 0
push 0
lea ecx, [ebp - 0x448]
call fcn.1000461c
mov ecx, dword [ebp - 0x1a0]
mov dword [eax], ecx
mov byte [ebp - 4], 0x12
cmp dword [ebp - 0x1a8], 0xdf9
jge 0x100227f7
mov edx, dword [ebp - 0x3d4]
mov ecx, 0x1007c0d8
call fcn.10006d07
jmp 0x10022813
mov dword [ebp - 4], 0xd
jmp 0x10022823
jmp 0x100221fc
mov byte [ebp - 4], 0xc
lea ecx, [ebp - 0x494]
call fcn.10004600
jmp 0x10022178
push 0x6e54
push 0
push 0xa19
push 0x24e0
push 0x5c9c
push 1
push 0x46ac
lea eax, [ebp - 0x34c]
push eax
push 0x3f90
push 0x1c0b
push 0x382d
push 0x2536
push 0x3f6
call fcn.10020a9d
add esp, 0x34
mov byte [ebp - 4], 0xb
lea ecx, [ebp - 0x568]
call fcn.10004600
mov byte [ebp - 4], 0xa
lea ecx, [ebp - 0x448]
call fcn.10004600
mov eax, dword [ebp - 0x1b0]
mov eax, dword [eax]
mov dword [ebp - 0x68], eax
jmp 0x100228b4
mov eax, dword [ebp - 0x68]
mov eax, dword [eax]
mov dword [ebp - 0x68], eax
mov eax, dword [ebp - 0x68]
cmp eax, dword [ebp - 0x1b0]
je 0x100235c9
mov dword [ebp - 0x54], 1
push 4
lea ecx, [ebp - 0x15c]
call fcn.1000457d
mov byte [ebp - 4], 0x14
mov dword [ebp - 0x128], 0xffffffff
mov dword [ebp - 0x364], 0xffffffff
mov dword [ebp - 0x42c], 0xfffffffb
mov dword [ebp - 0x35c], 0xb4ff5102
mov dword [ebp - 0xcc], 0
jmp 0x1002291c
mov eax, dword [ebp - 0xcc]
inc eax
mov dword [ebp - 0xcc], eax
cmp dword [ebp - 0xcc], 4
jge 0x1002293e
push dword [ebp - 0xcc]
lea ecx, [ebp - 0x15c]
call fcn.1000461c
mov dword [eax], 2
jmp 0x1002290f
mov dword [ebp - 0x54], 0
jmp 0x1002294e
mov eax, dword [ebp - 0x54]
dec eax
mov dword [ebp - 0x54], eax
cmp dword [ebp - 0x54], 0xffffffee
je 0x10022d72
mov dword [ebp - 0x3c], 0x17633efc
mov dword [ebp - 0x144], 0x9ec13488
mov dword [ebp - 0x3c], 0
jmp 0x10022979
mov eax, dword [ebp - 0x3c]
inc eax
mov dword [ebp - 0x3c], eax
cmp dword [ebp - 0x3c], 3
jg 0x10022d20
mov dword [ebp - 0x1d8], 0x56b
mov dword [ebp - 0x468], 0x15bf
cmp dword [ebp - 0x468], 0x1116
jge 0x10022a9a
lea eax, [ebp - 0x118]
push eax
push 0x10069a08
call fcn.100498bb
pop ecx
pop ecx
mov eax, dword [ebp - 0x118]
mov dword [ebp - 0x354], eax
mov eax, dword [ebp - 0x118]
dec eax
mov dword [ebp - 0x118], eax
cmp dword [ebp - 0x354], 0
je 0x10022a9a
lea eax, [ebp - 0x120]
push eax
lea eax, [ebp - 0x1c0]
push eax
push str._ld__ld
call fcn.100498bb
add esp, 0xc
mov eax, dword [ebp - 0x120]
cdq
push 3
pop ecx
idiv ecx
test edx, edx
je 0x10022a3f
mov eax, dword [ebp - 0x1c0]
cdq
push 3
pop ecx
idiv ecx
test edx, edx
je 0x10022a27
mov dword [ebp - 0x1b8], str.Alice
jmp 0x10022a31
mov dword [ebp - 0x1b8], 0x1006be78
push dword [ebp - 0x1b8]
call fcn.10049e62
pop ecx
jmp 0x10022a95
mov ecx, dword [ebp - 0x120]
inc ecx
mov eax, dword [ebp - 0x1c0]
cdq
idiv ecx
mov dword [ebp - 0x1c8], edx
mov eax, dword [ebp - 0x1c8]
cdq
push 3
pop ecx
idiv ecx
test edx, edx
jne 0x10022a7f
mov eax, dword [ebp - 0x1c8]
cmp eax, dword [ebp - 0x120]
je 0x10022a7f
mov dword [ebp - 0x1d0], 0x1006be78
jmp 0x10022a89
mov dword [ebp - 0x1d0], str.Alice
push dword [ebp - 0x1d0]
call fcn.10049e62
pop ecx
jmp 0x100229ba
mov dword [ebp - 0x3e0], str.pgwlrmtg_uzanrs_fil_jgssos_ugyp_ztvqhfbl_vqfx_jwpnqu_wzlyyhu_xwx
cmp dword [ebp - 0x1d8], 0x581
jle 0x10022b26
and dword [ebp - 0xec], 0
jmp 0x10022ac6
mov eax, dword [ebp - 0xec]
inc eax
mov dword [ebp - 0xec], eax
cmp dword [ebp - 0xec], 0x381d
jge 0x10022b19
and dword [ebp - 0x64], 0
jmp 0x10022adf
mov eax, dword [ebp - 0x64]
inc eax
mov dword [ebp - 0x64], eax
cmp dword [ebp - 0x64], 0x24a6
jge 0x10022b17
mov eax, dword [ebp - 0xec]
imul eax, dword [ebp - 0x64]
cdq
mov dword [ebp - 0x3f4], eax
mov dword [ebp - 0x3f0], edx
push dword [ebp - 0x3f0]
push dword [ebp - 0x3f4]
mov ecx, 0x1007c0d8
call fcn.100042cb
jmp 0x10022ad8
jmp 0x10022ab9
push 0
push 0x258a
call dword [sym.imp.USER32.dll_SetMenu]
mov dword [ebp - 0x40], 0xfffffff9
mov byte [ebp - 4], 0x15
cmp dword [ebp - 0x1d8], 0x18c
jge 0x10022b4d
mov edx, dword [ebp - 0x3e0]
mov ecx, 0x1007c0d8
call fcn.10006d07
jmp 0x10022b69
mov dword [ebp - 4], 0x14
jmp 0x10022b79
mov dword [ebp - 0x40], 3
jmp 0x10022b89
mov eax, dword [ebp - 0x40]
dec eax
mov dword [ebp - 0x40], eax
cmp dword [ebp - 0x40], 0
jl 0x10022d1b
mov dword [ebp - 0x210], 0x255ebda1
push 0x1475
push 0
push 0x31f8
push 1
push 0x510
push 0x607e
push 1
push 0x3e61
call fcn.10020f5e
add esp, 0x20
push dword [ebp - 0x3c]
lea ecx, [ebp - 0x15c]
call fcn.1000461c
cmp dword [eax], 0xffffffff
jne 0x10022be3
mov dword [ebp - 0x1f0], 1
jmp 0x10022bea
and dword [ebp - 0x1f0], 0
push 0
lea ecx, [ebp - 0x15c]
call fcn.1000461c
cmp dword [eax], 0xa8ed40a1
jb 0x10022c0b
mov dword [ebp - 0x1e0], 1
jmp 0x10022c12
and dword [ebp - 0x1e0], 0
mov eax, dword [ebp - 0x40]
cmp dword [ebp - 0x1e0], eax
jne 0x10022c29
mov dword [ebp - 0x1e8], 1
jmp 0x10022c30
and dword [ebp - 0x1e8], 0
push 2
lea ecx, [ebp - 0x15c]
call fcn.1000461c
mov ecx, dword [ebp - 0x1e8]
sub ecx, dword [eax]
add ecx, 8
neg ecx
je 0x10022c6a
push 1
lea ecx, [ebp - 0x15c]
call fcn.1000461c
cmp dword [eax], 0
je 0x10022c6a
mov dword [ebp - 0x1f8], 1
jmp 0x10022c71
and dword [ebp - 0x1f8], 0
mov eax, dword [ebp - 0x1f0]
cmp eax, dword [ebp - 0x1f8]
jne 0x10022c8b
mov dword [ebp - 0x200], 1
jmp 0x10022c92
and dword [ebp - 0x200], 0
cmp dword [ebp - 0x200], 5
jne 0x10022ca7
mov dword [ebp - 0x208], 1
jmp 0x10022cae
and dword [ebp - 0x208], 0
imul eax, dword [ebp - 0x208], 0
mov dword [ebp - 0x128], eax
mov eax, dword [ebp - 0x128]
mov dword [ebp - 0x210], eax
mov esi, dword [ebp - 0x210]
sub esi, 9
push 2
lea ecx, [ebp - 0x15c]
call fcn.1000461c
cmp esi, dword [eax]
jle 0x10022cec
mov eax, dword [ebp - 0x40]
mov dword [ebp - 0x144], eax
jmp 0x10022d16
mov byte [ebp - 0x31], 0
lea eax, [ebp - 0x31]
push eax
push 1
push 0x6033
push 1
push 0x37eb
push 0x450f
push 1
push 0x33ed
call fcn.10020f5e
add esp, 0x20
jmp 0x10022b82
jmp 0x10022972
lea eax, [ebp - 0x3c]
push eax
push 1
lea eax, [ebp - 0x15c]
push eax
push 0x2e18
lea eax, [ebp - 0x35c]
push eax
push 1
lea eax, [ebp - 0x144]
push eax
push 0x6009
lea eax, [ebp - 0x42c]
push eax
lea eax, [ebp - 0x54]
push eax
lea eax, [ebp - 0x128]
push eax
push 0x19c6
lea eax, [ebp - 0x364]
push eax
call fcn.10020a9d
add esp, 0x34
jmp 0x10022947
mov byte [ebp - 4], 0xa
lea ecx, [ebp - 0x15c]
call fcn.10004600
mov eax, dword [ebp - 0x68]
mov dword [ebp - 0x140], eax
mov dword [ebp - 0x18], 0xffff
mov dword [ebp - 0x30], 0xc3203bd6
mov dword [ebp - 0x80], 0x108531d1
mov dword [ebp - 0x384], 0x86565ea
mov dword [ebp - 0x44c], 0xb5dae8c
mov dword [ebp - 0x70], 0
jmp 0x10022dc3
mov eax, dword [ebp - 0x70]
inc eax
mov dword [ebp - 0x70], eax
cmp dword [ebp - 0x70], 4
jge 0x10022dd9
mov eax, dword [ebp - 0x70]
mov dword [ebp + eax*4 - 0x2fc], 0
jmp 0x10022dbc
cmp dword [ebp - 0x18], 0xbf8f
jne 0x10022dee
mov dword [ebp - 0x228], 1
jmp 0x10022df5
and dword [ebp - 0x228], 0
cmp dword [ebp - 0x18], 0
jne 0x10022e14
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x2fc], 0
jne 0x10022e14
and dword [ebp - 0x220], 0
jmp 0x10022e1e
mov dword [ebp - 0x220], 1
mov eax, dword [ebp - 0x18]
add eax, dword [ebp - 0x220]
cmp dword [ebp - 0x18], eax
jle 0x10022e38
mov dword [ebp - 0x230], 1
jmp 0x10022e3f
and dword [ebp - 0x230], 0
mov eax, dword [ebp - 0x228]
cmp eax, dword [ebp - 0x230]
jge 0x10022e59
mov dword [ebp - 0x238], 1
jmp 0x10022e60
and dword [ebp - 0x238], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x2fc]
cmp dword [ebp - 0x238], eax
jge 0x10022e81
mov dword [ebp - 0x240], 1
jmp 0x10022e88
and dword [ebp - 0x240], 0
mov eax, dword [ebp - 0x18]
cmp dword [ebp - 0x240], eax
jg 0x10022e9f
mov dword [ebp - 0x3ec], 1
jmp 0x10022ea6
and dword [ebp - 0x3ec], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x2fc]
mov dword [ebp - 0x55c], eax
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x2fc]
mov dword [ebp - 0x30], eax
mov eax, dword [ebp - 0x30]
mov dword [ebp - 0x80], eax
mov eax, dword [ebp - 0x18]
add eax, 0x598a
je 0x10022fb3
mov dword [ebp - 0x488], 3
mov dword [ebp - 0x484], 3
mov dword [ebp - 0x480], 3
mov dword [ebp - 0x47c], 3
lea ecx, [ebp - 0x109]
call fcn.1000462b
push eax
lea eax, [ebp - 0x478]
push eax
lea eax, [ebp - 0x488]
push eax
lea ecx, [ebp - 0x5a0]
call fcn.1000462e
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0x578]
call fcn.100045da
mov byte [ebp - 4], 0x17
mov dword [ebp - 0x18], 0
jmp 0x10022f4d
mov eax, dword [ebp - 0x18]
inc eax
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 3
jg 0x10022f9f
lea eax, [ebp - 0x578]
push eax
push 0
push 0x7592
push 0x639b
call fcn.100250c2
add esp, 0x10
mov byte [ebp - 0x34], 0
push 0x5673
lea eax, [ebp - 0x34]
push eax
push 1
push 0x7932
push 0x3702
push 0xd78
push 1
push 0x3954
push 0
call fcn.10021193
add esp, 0x24
jmp 0x10022f46
mov byte [ebp - 4], 0xa
lea ecx, [ebp - 0x578]
call fcn.10004600
jmp 0x1002305c
mov dword [ebp - 0x78], 0
mov dword [ebp - 0x248], 0xa8c98aac
mov dword [ebp - 0x36c], 1
mov dword [ebp - 0x130], 0x47c914a3
mov dword [ebp - 0x374], 0x3d975123
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x2fc]
mov dword [ebp - 0x4f8], eax
mov eax, dword [ebp - 0x78]
mov dword [ebp - 0x4e0], eax
mov eax, dword [ebp - 0x78]
mov dword [ebp - 0x248], eax
mov eax, dword [ebp - 0x248]
cmp eax, dword [ebp - 0x36c]
je 0x10023021
mov dword [ebp - 0x458], 1
jmp 0x10023028
and dword [ebp - 0x458], 0
mov eax, dword [ebp - 0x78]
mov dword [ebp - 0x52c], eax
mov eax, dword [ebp - 0x78]
imul eax, dword [ebp - 0x130]
cmp eax, dword [ebp - 0x130]
jle 0x10023047
cmp dword [ebp - 0x30], 0
mov eax, dword [ebp - 0x18]
add eax, dword [ebp - 0x18]
imul eax, dword [ebp - 0x130]
neg eax
mov dword [ebp - 0x374], eax
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x2fc]
inc eax
je 0x10023151
mov eax, 0x1d49
test eax, eax
je 0x10023095
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x2fc], 0
je 0x10023095
mov dword [ebp - 0x250], 1
jmp 0x1002309c
and dword [ebp - 0x250], 0
mov eax, dword [ebp - 0x80]
cmp dword [ebp - 0x250], eax
jle 0x100230b3
mov dword [ebp - 0x258], 1
jmp 0x100230ba
and dword [ebp - 0x258], 0
cmp dword [ebp - 0x258], 0xbb6f
jle 0x100230d2
mov dword [ebp - 0x260], 1
jmp 0x100230d9
and dword [ebp - 0x260], 0
cmp dword [ebp - 0x260], 0xfffffff7
jne 0x100230ee
mov dword [ebp - 0x268], 1
jmp 0x100230f5
and dword [ebp - 0x268], 0
mov eax, dword [ebp - 0x18]
cmp dword [ebp - 0x268], eax
jg 0x1002310c
mov dword [ebp - 0x270], 1
jmp 0x10023113
and dword [ebp - 0x270], 0
mov eax, dword [ebp - 0x80]
cmp dword [ebp - 0x270], eax
je 0x10023130
cmp dword [ebp - 0x80], 0
je 0x10023130
mov dword [ebp - 0x278], 1
jmp 0x10023137
and dword [ebp - 0x278], 0
imul eax, dword [ebp - 0x278], 0x54ab
test eax, eax
je 0x10023151
mov dword [ebp - 0x3f8], 1
jmp 0x10023158
and dword [ebp - 0x3f8], 0
mov eax, dword [ebp - 0x30]
mov dword [ebp - 0x4e8], eax
mov eax, 0x6b4c01f9
test eax, eax
je 0x1002319a
mov dword [ebp - 0x37c], 0xffffffff
lea eax, [ebp - 0x30]
push eax
push 1
push 0x2fce
push 0x2d86
lea eax, [ebp - 0x37c]
push eax
push 0
call fcn.10021078
add esp, 0x18
jmp 0x100233e2
mov dword [ebp - 0x280], 1
push 2
lea ecx, [ebp - 0x464]
call fcn.1000457d
mov byte [ebp - 4], 0x18
push 2
lea ecx, [ebp - 0x2dc]
call fcn.1000457d
mov byte [ebp - 4], 0x19
lea eax, [ebp - 0x43c]
push eax
lea eax, [ebp - 0x464]
push eax
push 0x6e6f
push 0
push 0x6622
call fcn.100242cb
add esp, 0x14
push 0x5820
push 0
push 1
lea eax, [ebp - 0x43c]
push eax
lea eax, [ebp - 0x2dc]
push eax
push 0x3d15
push 0
call fcn.10025fa4
add esp, 0x1c
mov eax, dword [ebp - 0x30]
mov dword [ebp - 0x280], eax
cmp dword [ebp - 0x280], 9
ja 0x1002322c
mov dword [ebp - 0x288], 1
jmp 0x10023233
and dword [ebp - 0x288], 0
mov eax, dword [ebp - 0x288]
add eax, 0x5c9efae3
mov ecx, dword [ebp - 0x18]
sub ecx, eax
cmp ecx, dword [ebp - 0x30]
jge 0x10023254
mov dword [ebp - 0x290], 1
jmp 0x1002325b
and dword [ebp - 0x290], 0
push 0
lea ecx, [ebp - 0x464]
call fcn.1000461c
mov ecx, dword [ebp - 0x290]
cmp ecx, dword [eax]
je 0x1002327e
mov dword [ebp - 0x298], 1
jmp 0x10023285
and dword [ebp - 0x298], 0
push 1
lea ecx, [ebp - 0x464]
call fcn.1000461c
mov ecx, dword [ebp - 0x298]
cmp ecx, dword [eax]
jge 0x100232a8
mov dword [ebp - 0x2a0], 1
jmp 0x100232af
and dword [ebp - 0x2a0], 0
mov eax, dword [ebp - 0x384]
add eax, dword [ebp - 0x2a0]
imul eax, eax, 0x2c4c
test eax, eax
jne 0x100232d5
push 4
pop eax
test eax, eax
jne 0x100232d5
and dword [ebp - 0x138], 0
jmp 0x100232df
mov dword [ebp - 0x138], 1
push 0
lea ecx, [ebp - 0x464]
call fcn.1000461c
mov ecx, dword [ebp - 0x138]
mov dword [eax], ecx
cmp dword [ebp - 0x138], 0x520f
jl 0x1002330c
mov dword [ebp - 0x404], 1
jmp 0x10023313
and dword [ebp - 0x404], 0
push 0
lea ecx, [ebp - 0x2dc]
call fcn.1000461c
cmp dword [ebp - 0x18], 0xb7ff
jle 0x10023335
mov dword [ebp - 0x38c], 1
jmp 0x1002333c
and dword [ebp - 0x38c], 0
push 1
lea ecx, [ebp - 0x2dc]
call fcn.1000461c
push 0
lea ecx, [ebp - 0x2dc]
call fcn.1000461c
cmp dword [eax], 0
je 0x1002336d
mov eax, 0x9619
test eax, eax
jne 0x1002336d
and dword [ebp - 0x2a8], 0
jmp 0x10023377
mov dword [ebp - 0x2a8], 1
mov eax, dword [ebp - 0x44c]
cmp dword [ebp - 0x2a8], eax
jne 0x10023391
mov dword [ebp - 0x394], 1
jmp 0x10023398
and dword [ebp - 0x394], 0
push 4
pop eax
imul eax, eax, 0
mov esi, dword [ebp + eax - 0x2fc]
push 0
lea ecx, [ebp - 0x2dc]
call fcn.1000461c
mov dword [eax], esi
push 0
lea eax, [ebp - 0x2dc]
push eax
call fcn.10024b73
pop ecx
pop ecx
mov byte [ebp - 4], 0x18
lea ecx, [ebp - 0x2dc]
call fcn.10004600
mov byte [ebp - 4], 0xa
lea ecx, [ebp - 0x464]
call fcn.10004600
mov eax, dword [ebp - 0x140]
push dword [eax + 0x28]
lea ecx, [ebp - 0x4d0]
call fcn.1001c379
mov byte [ebp - 4], 0x1a
lea eax, [ebp - 0x58c]
push eax
lea ecx, [ebp - 0x4d0]
call fcn.10005ad0
push dword [eax]
lea eax, [ebp - 0x4f4]
push eax
lea ecx, [ebp - 0x4d0]
call fcn.10004b32
push dword [eax]
lea eax, [ebp - 0x534]
push eax
lea ecx, [ebp - 0x4d0]
call fcn.10005ad0
push dword [eax]
mov edx, 0x100208d4
lea ecx, [ebp - 0x4fc]
call fcn.10035495
add esp, 0xc
mov dword [ebp - 0x90], 0x76f5020f
mov dword [ebp - 0x88], 0
jmp 0x1002346c
mov eax, dword [ebp - 0x88]
inc eax
mov dword [ebp - 0x88], eax
cmp dword [ebp - 0x88], 1
jge 0x10023488
mov eax, dword [ebp - 0x88]
mov dword [ebp + eax*4 - 0x56c], 1
jmp 0x1002345f
mov dword [ebp - 0x90], 0
jmp 0x100234a1
mov eax, dword [ebp - 0x90]
dec eax
mov dword [ebp - 0x90], eax
cmp dword [ebp - 0x90], 0
jl 0x100234f0
mov byte [ebp - 0x35], 0
lea eax, [ebp - 0x35]
push eax
push 0
push 0x4d13
push 0x3168
push 1
push 0x7947
push 0x298f
call fcn.100255b2
add esp, 0x1c
mov byte [ebp - 0x33], 0
lea eax, [ebp - 0x33]
push eax
push 0x4d82
push 0
push 0x2c5d
call fcn.100266c1
add esp, 0x10
jmp 0x10023494
lea edx, [ebp - 0x4d0]
lea ecx, [ebp - 0x4b8]
call fcn.100354fe
movzx eax, al
test eax, eax
je 0x100235b5
mov dword [ebp - 0x410], 0x51ad386c
mov dword [ebp - 0x39c], 0xf5cd53bc
mov dword [ebp - 0x304], 0
mov dword [ebp - 0x3a8], 0xffffffff
push 0xc33
lea eax, [ebp - 0x410]
push eax
push 0x4113
lea eax, [ebp - 0x39c]
push eax
push 1
lea eax, [ebp - 0x3a8]
push eax
push 0
lea eax, [ebp - 0x304]
push eax
call fcn.100251d1
add esp, 0x20
mov byte [ebp - 0x36], 0
movzx eax, byte [ebp - 0x36]
test eax, eax
je 0x1002357a
push 0
call fcn.100251b3
pop ecx
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x2b0]
mov edx, dword [ebp - 0x140]
mov eax, dword [edx + eax + 0x10]
mov dword [ecx], eax
mov byte [ebp - 4], 0xa
lea ecx, [ebp - 0x4d0]
call fcn.1000441b
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x4b8]
call fcn.1000441b
jmp 0x10023a75
mov byte [ebp - 4], 0xa
lea ecx, [ebp - 0x4d0]
call fcn.1000441b
jmp 0x100228ac
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x4b8]
call fcn.1000441b
mov dword [ebp - 0xa0], 0x2667a876
mov dword [ebp - 0x98], 0
jmp 0x100235fb
mov eax, dword [ebp - 0x98]
inc eax
mov dword [ebp - 0x98], eax
cmp dword [ebp - 0x98], 3
jge 0x10023617
mov eax, dword [ebp - 0x98]
mov dword [ebp + eax*4 - 0x5c4], 1
jmp 0x100235ee
mov dword [ebp - 0xa0], 0
jmp 0x10023630
mov eax, dword [ebp - 0xa0]
inc eax
mov dword [ebp - 0xa0], eax
cmp dword [ebp - 0xa0], 2
jg 0x10023649
push 0
push 0x159a
call fcn.10025f7e
pop ecx
pop ecx
jmp 0x10023623
mov eax, dword [ebp - 0x2b0]
and dword [eax], 0
jmp 0x10023a75
mov eax, dword [ebp - 0x308]
mov dword [ebp - 0x310], eax
mov eax, dword [ebp - 0x310]
mov dword [ebp - 0x318], eax
mov eax, dword [ebp - 0x318]
movzx eax, byte [eax]
test eax, eax
je 0x10023695
push 0x5a4e
push 0
push 0x72bd
call fcn.10026d06
add esp, 0xc
mov dword [ebp - 0x2b8], 0x709f
mov dword [ebp - 0x328], str.bpjgqij_wul_mtys
cmp dword [ebp - 0x2b8], 0x7381
jle 0x10023759
and dword [ebp - 0xe0], 0
jmp 0x100236cf
mov eax, dword [ebp - 0xe0]
inc eax
mov dword [ebp - 0xe0], eax
cmp dword [ebp - 0xe0], 0x5260
jge 0x10023759
and dword [ebp - 0xe8], 0
jmp 0x100236f1
mov eax, dword [ebp - 0xe8]
inc eax
mov dword [ebp - 0xe8], eax
cmp dword [ebp - 0xe8], 0x631
jge 0x10023754
mov eax, dword [ebp - 0xe0]
sub eax, dword [ebp - 0xe8]
cdq
mov dword [ebp - 0x400], eax
mov dword [ebp - 0x3fc], edx
push dword [ebp - 0x3fc]
push dword [ebp - 0x400]
lea ecx, [ebp - 0x5f4]
call fcn.10001a65
pop ecx
pop ecx
mov dword [ebp - 0x320], eax
mov ecx, dword [ebp - 0x320]
call fcn.100042ab
push eax
call fcn.10049ba3
pop ecx
lea ecx, [ebp - 0x5f4]
call fcn.100042a1
jmp 0x100236e4
jmp 0x100236c2
mov dword [ebp - 4], 0x1b
cmp dword [ebp - 0x2b8], 0x7028
jge 0x10023778
push dword [ebp - 0x328]
call fcn.10049ba3
pop ecx
jmp 0x10023794
or dword [ebp - 4], 0xffffffff
jmp 0x1002379e
jmp 0x10023a75
mov eax, dword [ebp + 0x28]
mov dword [ebp - 0x338], eax
mov eax, dword [ebp + 0x1c]
mov dword [ebp - 0x358], eax
lea eax, [ebp + 0x10]
mov dword [ebp - 0x330], eax
mov eax, dword [ebp + 0xc]
mov dword [ebp - 0x360], eax
mov eax, dword [ebp - 0x330]
movzx eax, byte [eax]
test eax, eax
je 0x100238ee
mov eax, dword [ebp - 0x338]
mov dword [ebp - 0x340], eax
mov eax, dword [ebp - 0x340]
mov dword [ebp - 0x348], eax
mov eax, dword [ebp - 0x348]
movzx eax, byte [eax]
test eax, eax
je 0x100238e9
mov dword [ebp - 0x2c0], 0x4566
mov dword [ebp - 0x350], str.nhzxnj_tnsvpr_hyl_mmbennmd_srvyhp_funylbjfo_ggkhjxrmh_xehd_ujs_eurslaa_yzzevmwl
cmp dword [ebp - 0x2c0], 0x468a
jle 0x10023898
and dword [ebp - 0xf0], 0
jmp 0x10023837
mov eax, dword [ebp - 0xf0]
inc eax
mov dword [ebp - 0xf0], eax
cmp dword [ebp - 0xf0], 0x3c8c
jge 0x10023898
and dword [ebp - 0xf8], 0
jmp 0x10023859
mov eax, dword [ebp - 0xf8]
inc eax
mov dword [ebp - 0xf8], eax
cmp dword [ebp - 0xf8], 0x6dc7
jge 0x10023896
mov eax, dword [ebp - 0xf0]
and eax, dword [ebp - 0xf8]
cdq
mov dword [ebp - 0x40c], eax
mov dword [ebp - 0x408], edx
push dword [ebp - 0x408]
push dword [ebp - 0x40c]
mov ecx, 0x1007c0d8
call fcn.100042cb
jmp 0x1002384c
jmp 0x1002382a
push 0
call dword [sym.imp.GDI32.dll_CreateBrushIndirect]
mov dword [ebp - 4], 0x1d
cmp dword [ebp - 0x2c0], 0x429f
jge 0x100238c3
mov edx, dword [ebp - 0x350]
mov ecx, 0x1007c0d8
call fcn.10006d07
jmp 0x100238df
or dword [ebp - 4], 0xffffffff
jmp 0x100238e9
jmp 0x10023a75
mov eax, dword [ebp - 0x358]
mov dword [ebp - 0x368], eax
mov eax, dword [ebp - 0x360]
mov dword [ebp - 0x378], eax
mov dword [ebp - 0x2c8], 0x5209
mov dword [ebp - 0x370], str.wzvltqt_tynh_tildza_nbwapdhb_rvmfiw_hibespsi
cmp dword [ebp - 0x2c8], 0x552b
jle 0x100239e1
and dword [ebp - 0x100], 0
jmp 0x10023940
mov eax, dword [ebp - 0x100]
inc eax
mov dword [ebp - 0x100], eax
cmp dword [ebp - 0x100], 0x20b1
jge 0x100239d2
and dword [ebp - 0x108], 0
jmp 0x10023966
mov eax, dword [ebp - 0x108]
inc eax
mov dword [ebp - 0x108], eax
cmp dword [ebp - 0x108], 0x7803
jge 0x100239cd
and dword [ebp - 0xfc], 0
jmp 0x10023988
mov eax, dword [ebp - 0xfc]
inc eax
mov dword [ebp - 0xfc], eax
cmp dword [ebp - 0xfc], 0x43f0
jge 0x100239cb
mov eax, dword [ebp - 0x100]
sub eax, dword [ebp - 0x108]
xor eax, dword [ebp - 0xfc]
cdq
mov dword [ebp - 0x418], eax
mov dword [ebp - 0x414], edx
push dword [ebp - 0x414]
push dword [ebp - 0x418]
mov ecx, 0x1007c0d8
call fcn.100042cb
jmp 0x1002397b
jmp 0x10023959
jmp 0x10023933
push 0
push 0x942
push 0
call dword [sym.imp.OLEAUT32.dll_SafeArrayDestroy]
mov eax, dword [ebp - 0x368]
mov dword [ebp - 0x5c], eax
mov dword [ebp - 4], 0x1f
cmp dword [ebp - 0x2c8], 0x4eeb
jge 0x10023a0d
mov edx, dword [ebp - 0x370]
mov ecx, 0x1007c0d8
call fcn.10006d07
jmp 0x10023a29
or dword [ebp - 4], 0xffffffff
jmp 0x10023a33
mov eax, dword [ebp - 0x378]
mov dword [ebp - 0x380], eax
mov eax, dword [ebp - 0x5c]
mov dword [eax], 0
jmp 0x10023a55
mov eax, dword [ebp - 0x5c]
mov eax, dword [eax]
inc eax
mov ecx, dword [ebp - 0x5c]
mov dword [ecx], eax
mov eax, dword [ebp - 0x5c]
cmp dword [eax], 2
jge 0x10023a75
mov eax, dword [ebp - 0x5c]
push dword [eax]
mov ecx, dword [ebp - 0x380]
call fcn.1000461c
mov dword [eax], 1
jmp 0x10023a4a
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret