Function at 0x100200f1
Capabilities:
Get system information on windows
Identify system language via api

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x1005945d
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
push ecx
sub esp, 0x644
push ebx
push esi
push edi
mov dword [ebp - 0x10], esp
movzx eax, byte [ebp + 0x2c]
test eax, eax
je 0x10022ae8
mov eax, dword [ebp + 0x38]
mov dword [ebp - 0x2e8], eax
mov eax, dword [ebp + 8]
mov dword [ebp - 0x2f0], eax
mov dword [ebp - 0x3f0], 0x16b5
cmp dword [ebp - 0x3f0], 0x11c6
jge 0x1002023e
lea eax, [ebp - 0x424]
push eax
push 0x10062590
call fcn.10040302
pop ecx
pop ecx
lea eax, [ebp - 0x80]
push eax
push 0x10062590
call fcn.10040302
pop ecx
pop ecx
and dword [ebp - 0x5c], 0
mov byte [ebp - 0x12], 1
mov dword [ebp - 0x160], 1
jmp 0x10020192
mov eax, dword [ebp - 0x160]
inc eax
mov dword [ebp - 0x160], eax
mov eax, dword [ebp - 0x160]
cmp eax, dword [ebp - 0x424]
jge 0x10020214
lea eax, [ebp - 0xf4]
push eax
push 0x10062590
call fcn.10040302
pop ecx
pop ecx
mov eax, dword [ebp - 0xf4]
cmp eax, dword [ebp - 0x80]
jle 0x100201cc
cmp dword [ebp - 0x5c], 0
jle 0x100201cc
mov byte [ebp - 0x12], 0
jmp 0x10020214
mov eax, dword [ebp - 0xf4]
cmp eax, dword [ebp - 0x80]
jne 0x100201f4
cmp dword [ebp - 0x5c], 0
jne 0x100201e6
mov dword [ebp - 0x5c], 1
jmp 0x100201f2
cmp dword [ebp - 0x5c], 1
jle 0x100201f2
mov byte [ebp - 0x12], 0
jmp 0x10020214
jmp 0x10020206
mov eax, dword [ebp - 0xf4]
cmp eax, dword [ebp - 0x80]
jge 0x10020206
mov dword [ebp - 0x5c], 2
mov eax, dword [ebp - 0xf4]
mov dword [ebp - 0x80], eax
jmp 0x10020185
movzx eax, byte [ebp - 0x12]
test eax, eax
je 0x10020228
mov dword [ebp - 0x240], 0x10063fdc
jmp 0x10020232
mov dword [ebp - 0x240], 0x10063fe0
push dword [ebp - 0x240]
call fcn.10040bc6
pop ecx
mov eax, dword [ebp + 0xc]
mov dword [ebp - 0x2f8], eax
mov eax, dword [ebp + 0x10]
mov dword [ebp - 0x2e0], eax
mov eax, dword [ebp + 0x30]
mov dword [ebp - 0x2b8], eax
mov eax, dword [ebp + 0x14]
mov dword [ebp - 0x398], eax
mov eax, dword [ebp + 0x1c]
mov dword [ebp - 0x2d8], eax
lea eax, [ebp + 0x18]
mov dword [ebp - 0x2b4], eax
mov dword [ebp - 0x184], 0x5c11
mov dword [ebp - 0x388], str.zyela_qsannaod_uctclccbu_xgv_enhrhgsu_nnijiu_vvrefcwk_mraosmi_ebnp_pflcgywo_qqejyzoc
cmp dword [ebp - 0x184], 0x5c71
jle 0x1002037e
push 0
push 0
push 0
push 0
call dword [sym.imp.ADVAPI32.dll_RegGetKeySecurity]
and dword [ebp - 0xb8], 0
jmp 0x100202bc
mov eax, dword [ebp - 0xb8]
inc eax
mov dword [ebp - 0xb8], eax
cmp dword [ebp - 0xb8], 0x3435
jge 0x1002037e
and dword [ebp - 0x134], 0
jmp 0x100202e2
mov eax, dword [ebp - 0x134]
inc eax
mov dword [ebp - 0x134], eax
cmp dword [ebp - 0x134], 0x537b
jge 0x10020379
and dword [ebp - 0x88], 0
jmp 0x10020308
mov eax, dword [ebp - 0x88]
inc eax
mov dword [ebp - 0x88], eax
cmp dword [ebp - 0x88], 0x2419
jge 0x10020374
mov eax, dword [ebp - 0x134]
cdq
idiv dword [ebp - 0x88]
xor edx, dword [ebp - 0xb8]
mov eax, edx
cdq
mov dword [ebp - 0x3a4], eax
mov dword [ebp - 0x3a0], edx
push dword [ebp - 0x3a0]
push dword [ebp - 0x3a4]
lea ecx, [ebp - 0x5ac]
call fcn.10001a11
pop ecx
pop ecx
mov dword [ebp - 0x42c], eax
mov ecx, dword [ebp - 0x42c]
call fcn.10001aa8
push eax
call fcn.100400a6
pop ecx
lea ecx, [ebp - 0x5ac]
call fcn.10001a9e
jmp 0x100202fb
jmp 0x100202d5
jmp 0x100202af
lea eax, [ebp + 0x28]
mov dword [ebp - 0x390], eax
and dword [ebp - 4], 0
cmp dword [ebp - 0x184], 0x596c
jge 0x100203a3
push dword [ebp - 0x388]
call fcn.100400a6
pop ecx
jmp 0x100203bf
or dword [ebp - 4], 0xffffffff
jmp 0x100203c9
mov eax, dword [ebp - 0x2b4]
movzx eax, byte [eax]
test eax, eax
je 0x10022812
mov eax, dword [ebp - 0x390]
mov dword [ebp - 0x68], eax
mov eax, dword [ebp - 0x398]
mov dword [ebp - 0x250], eax
mov dword [ebp - 0x19c], 0x43b8
mov dword [ebp - 0x2c8], str.zbyjxmq_vulbuk_gzt_qpaksv_tmzkyvxr
cmp dword [ebp - 0x19c], 0x4482
jle 0x10020486
and dword [ebp - 0x90], 0
jmp 0x10020425
mov eax, dword [ebp - 0x90]
inc eax
mov dword [ebp - 0x90], eax
cmp dword [ebp - 0x90], 0xdb3
jge 0x10020486
and dword [ebp - 0xc0], 0
jmp 0x10020447
mov eax, dword [ebp - 0xc0]
inc eax
mov dword [ebp - 0xc0], eax
cmp dword [ebp - 0xc0], 0x7fa2
jge 0x10020484
mov eax, dword [ebp - 0x90]
or eax, dword [ebp - 0xc0]
cdq
mov dword [ebp - 0x3b0], eax
mov dword [ebp - 0x3ac], edx
push dword [ebp - 0x3ac]
push dword [ebp - 0x3b0]
mov ecx, 0x10072ab8
call fcn.10001ac8
jmp 0x1002043a
jmp 0x10020418
mov dword [ebp - 0x180], 0xc90d2972
mov dword [ebp - 0x494], 6
mov dword [ebp - 0x150], 0x6e6a3735
mov dword [ebp - 0x98], 0xf3e76e5b
mov dword [ebp - 0x2d0], 0xfe57f6cc
mov dword [ebp - 0x2c0], 0x262b096
push 2
lea ecx, [ebp - 0x4d0]
call fcn.10001bdd
mov dword [ebp - 4], 2
mov dword [ebp - 0x54], 0
jmp 0x100204e6
mov eax, dword [ebp - 0x54]
inc eax
mov dword [ebp - 0x54], eax
cmp dword [ebp - 0x54], 3
jge 0x100204fc
mov eax, dword [ebp - 0x54]
mov dword [ebp + eax*4 - 0x564], 0x8047d203
jmp 0x100204df
lea eax, [ebp - 0x4d0]
push eax
lea eax, [ebp - 0x54]
push eax
push 0x1a9d
push 1
push 0x79ed
push 0x10fe
push 1
call fcn.1001c6be
add esp, 0x1c
mov eax, dword [ebp - 0x180]
mov dword [ebp - 0x98], eax
mov eax, dword [ebp - 0x98]
mov dword [ebp - 0x4ac], eax
cmp dword [ebp - 0x98], 0
jne 0x10020551
xor eax, eax
inc eax
jne 0x10020551
and dword [ebp - 0x194], 0
jmp 0x1002055b
mov dword [ebp - 0x194], 1
cmp dword [ebp - 0x98], 1
jle 0x10020570
mov dword [ebp - 0x298], 1
jmp 0x10020577
and dword [ebp - 0x298], 0
mov eax, dword [ebp - 0x150]
add eax, dword [ebp - 0x298]
cmp dword [ebp - 0x180], eax
jl 0x100205a0
cmp dword [ebp - 0x150], 0
je 0x100205a0
mov dword [ebp - 0x254], 1
jmp 0x100205a7
and dword [ebp - 0x254], 0
mov eax, dword [ebp - 0x150]
cmp dword [ebp - 0x254], eax
jg 0x100205c1
mov dword [ebp - 0x18c], 1
jmp 0x100205c8
and dword [ebp - 0x18c], 0
mov eax, dword [ebp - 0x2d0]
imul eax, dword [ebp - 0x18c]
cmp eax, 0xffffffff
jg 0x100205e6
mov dword [ebp - 0x214], 1
jmp 0x100205ed
and dword [ebp - 0x214], 0
cmp dword [ebp - 0x214], 1
jb 0x10020602
mov dword [ebp - 0x294], 1
jmp 0x10020609
and dword [ebp - 0x294], 0
push 4
pop eax
shl eax, 1
mov ecx, dword [ebp - 0x194]
add ecx, dword [ebp - 0x294]
cmp ecx, dword [ebp + eax - 0x564]
jne 0x10020703
push 2
lea ecx, [ebp - 0x4c0]
call fcn.10001bdd
mov byte [ebp - 4], 3
mov dword [ebp - 0x464], 0x9807
mov dword [ebp - 0x460], 0x9807
mov dword [ebp - 0x45c], 0x9807
mov dword [ebp - 0x458], 0x9807
mov dword [ebp - 0x4f8], 0x1f51b437
push 0x67c5
lea eax, [ebp - 0x4c0]
push eax
push 1
push 1
lea eax, [ebp - 0x4b4]
push eax
push 0x3a4d
push 0x7d31
push 0x3065
push 1
push 0x3e30
call fcn.100198c3
add esp, 0x28
push 4
pop eax
imul eax, eax, 3
mov eax, dword [ebp + eax - 0x464]
inc eax
push 4
pop ecx
imul ecx, ecx, 3
mov dword [ebp + ecx - 0x464], eax
push 0x5686
lea eax, [ebp - 0x2c0]
push eax
push 0
push 0x33d0
push 1
push 1
push 0x1c35
push 0x7025
push 0x2ab7
push 0x20e9
push 0x78ac
call fcn.1001e961
add esp, 0x2c
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x4c0]
call fcn.10001c3a
jmp 0x10020728
mov byte [ebp - 0x33], 0
push 1
push 1
push 0x6ee1
push 0
push 0x307f
push 0x63ee
lea eax, [ebp - 0x33]
push eax
call fcn.1001eb67
add esp, 0x1c
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x4d0]
call fcn.10001c3a
mov dword [ebp - 4], 4
cmp dword [ebp - 0x19c], 0x4347
jge 0x1002075a
mov edx, dword [ebp - 0x2c8]
mov ecx, 0x10072ab8
call fcn.1000350a
jmp 0x10020776
or dword [ebp - 4], 0xffffffff
jmp 0x10020780
mov eax, dword [0x10099a10]
and eax, 1
jne 0x100207b7
mov eax, dword [0x10099a10]
or eax, 1
mov dword [0x10099a10], eax
mov dword [ebp - 4], 6
mov ecx, 0x100999f0
call fcn.100237e8
push 0x10059df6
call fcn.1004007c
pop ecx
or dword [ebp - 4], 0xffffffff
push 2
lea ecx, [ebp - 0x43c]
call fcn.10001bdd
mov dword [ebp - 4], 7
mov dword [ebp - 0x2cc], 0xffff
mov dword [ebp - 0x514], 5
mov dword [ebp - 0xc8], 0
jmp 0x100207f8
mov eax, dword [ebp - 0xc8]
inc eax
mov dword [ebp - 0xc8], eax
cmp dword [ebp - 0xc8], 2
jge 0x1002081a
push dword [ebp - 0xc8]
lea ecx, [ebp - 0x43c]
call fcn.10001c56
mov dword [eax], 0xfffffff9
jmp 0x100207eb
push 0
lea ecx, [ebp - 0x43c]
call fcn.10001c56
and dword [eax], 0
jmp 0x10020850
push 0
lea ecx, [ebp - 0x43c]
call fcn.10001c56
mov dword [ebp - 0x21c], eax
mov eax, dword [ebp - 0x21c]
mov eax, dword [eax]
inc eax
mov ecx, dword [ebp - 0x21c]
mov dword [ecx], eax
push 0
lea ecx, [ebp - 0x43c]
call fcn.10001c56
cmp dword [eax], 0x14
jg 0x10020886
mov dword [ebp - 0x4c4], 0x1dbeccce
push 0x7280
push 1
push 1
lea eax, [ebp - 0x2cc]
push eax
call fcn.10019d00
add esp, 0x10
jmp 0x1002082c
push 1
push 0x5c2d
push 0x48f8
push 0x59c1
push 1
push 0x5f15
push 1
push 0x2c72
push 0x5291
push 0x4fef
call fcn.1001c91c
add esp, 0x28
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x43c]
call fcn.10001c3a
mov eax, dword [ebp - 0x68]
mov ecx, dword [eax]
call fcn.10018374
mov dword [ebp - 0xa4], eax
mov dword [ebp - 0x6c], 3
mov dword [ebp - 0x50], 0xb1c2610a
mov dword [ebp - 0x374], 1
mov dword [ebp - 0xa0], 0
jmp 0x10020907
mov eax, dword [ebp - 0xa0]
inc eax
mov dword [ebp - 0xa0], eax
cmp dword [ebp - 0xa0], 3
jge 0x10020923
mov eax, dword [ebp - 0xa0]
mov dword [ebp + eax*4 - 0x144], 0xffffffff
jmp 0x100208fa
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0x144], 0
jmp 0x10020951
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x144]
dec eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x144], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x144], 0xffffffec
je 0x10020f61
mov dword [ebp - 0x3c], 0x4b1b055c
mov dword [ebp - 0x4c], 0x158018d9
mov dword [ebp - 0x1e4], 1
mov dword [ebp - 0x30], 6
mov eax, dword [ebp - 0x3c]
cmp eax, dword [ebp - 0x6c]
jle 0x10020998
mov dword [ebp - 0x1a4], 1
jmp 0x1002099f
and dword [ebp - 0x1a4], 0
mov eax, dword [ebp - 0x1a4]
mov dword [ebp - 0x4c], eax
mov eax, dword [ebp - 0x4c]
mov dword [ebp - 0x51c], eax
mov eax, dword [ebp - 0x3c]
mov dword [ebp - 0x4d4], eax
mov eax, dword [ebp - 0x3c]
sub eax, 0x71b35d56
mov ecx, dword [ebp - 0x3c]
imul ecx, eax
cmp ecx, dword [ebp - 0x3c]
jne 0x100209d9
mov dword [ebp - 0x25c], 1
jmp 0x100209e0
and dword [ebp - 0x25c], 0
mov eax, dword [ebp - 0x25c]
add eax, 0x80bf7f4
je 0x10020bd5
mov dword [ebp - 0x64], 0xaf8716b5
push 0x1e68
lea eax, [ebp - 0x64]
push eax
push 1
push 1
push 0x1dc
push 0x160
call fcn.10019fa9
add esp, 0x18
mov eax, dword [ebp - 0x3c]
mov dword [ebp - 0x524], eax
or eax, 0xffffffff
je 0x10020a88
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x144], 1
jg 0x10020a41
mov dword [ebp - 0x1ac], 1
jmp 0x10020a48
and dword [ebp - 0x1ac], 0
cmp dword [ebp - 0x1ac], 0x9427
jg 0x10020a60
mov dword [ebp - 0x224], 1
jmp 0x10020a67
and dword [ebp - 0x224], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x144]
cmp dword [ebp - 0x224], eax
jle 0x10020a88
mov dword [ebp - 0x1b4], 1
jmp 0x10020a8f
and dword [ebp - 0x1b4], 0
cmp dword [ebp - 0x1b4], 0
jne 0x10020aa4
mov dword [ebp - 0x27c], 1
jmp 0x10020aab
and dword [ebp - 0x27c], 0
mov eax, dword [ebp - 0x4c]
cmp dword [ebp - 0x27c], eax
jge 0x10020ac2
mov dword [ebp - 0x1bc], 1
jmp 0x10020ac9
and dword [ebp - 0x1bc], 0
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x144]
cmp dword [ebp - 0x1bc], eax
jl 0x10020ae9
mov dword [ebp - 0x22c], 1
jmp 0x10020af0
and dword [ebp - 0x22c], 0
mov eax, dword [ebp - 0x64]
cmp dword [ebp - 0x22c], eax
jle 0x10020b07
mov dword [ebp - 0x1c4], 1
jmp 0x10020b0e
and dword [ebp - 0x1c4], 0
mov eax, dword [ebp - 0x64]
imul eax, dword [ebp - 0x1c4]
cmp eax, dword [ebp - 0x64]
jge 0x10020b29
mov dword [ebp - 0x264], 1
jmp 0x10020b30
and dword [ebp - 0x264], 0
mov eax, dword [ebp - 0x1e4]
cmp dword [ebp - 0x264], eax
jg 0x10020b50
mov eax, 0xffff
test eax, eax
jne 0x10020b50
and dword [ebp - 0x1cc], 0
jmp 0x10020b5a
mov dword [ebp - 0x1cc], 1
mov eax, dword [ebp - 0x64]
cmp dword [ebp - 0x1cc], eax
jge 0x10020b71
mov dword [ebp - 0x234], 1
jmp 0x10020b78
and dword [ebp - 0x234], 0
mov eax, dword [ebp - 0x234]
mov dword [ebp - 0x30], eax
cmp dword [ebp - 0x3c], 9
je 0x10020b93
mov dword [ebp - 0x1d4], 1
jmp 0x10020b9a
and dword [ebp - 0x1d4], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x144]
imul eax, dword [ebp - 0x1d4]
inc eax
cmp dword [ebp - 0x4c], eax
jge 0x10020bc0
mov dword [ebp - 0x28c], 1
jmp 0x10020bc7
and dword [ebp - 0x28c], 0
mov eax, dword [ebp - 0x28c]
mov dword [ebp - 0x4c], eax
jmp 0x10020f5c
mov dword [ebp - 0x44], 6
mov dword [ebp - 0x478], 0xfffb
mov dword [ebp - 0x474], 0xfffb
mov dword [ebp - 0x470], 0xfffb
mov dword [ebp - 0x46c], 0xfffb
lea ecx, [ebp - 0x171]
call fcn.10001ef8
push eax
lea eax, [ebp - 0x468]
push eax
lea eax, [ebp - 0x478]
push eax
lea ecx, [ebp - 0x584]
call fcn.1000c827
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0x454]
call fcn.1000c801
mov dword [ebp - 4], 8
mov dword [ebp - 0x48], 0x2a7181ca
mov dword [ebp - 0x24c], 0xffffffff
mov eax, 0xcde333b8
sub eax, dword [ebp - 0x30]
cmp eax, 0xe06c0838
je 0x10020c6c
mov dword [ebp - 0x1dc], 1
jmp 0x10020c73
and dword [ebp - 0x1dc], 0
imul eax, dword [ebp - 0x1dc], 0xeac6
cmp eax, 0xfffffff8
jb 0x10020c8e
mov dword [ebp - 0x23c], 1
jmp 0x10020c95
and dword [ebp - 0x23c], 0
push 2
lea ecx, [ebp - 0x454]
call fcn.10001c56
mov eax, dword [eax]
cmp eax, dword [ebp - 0x23c]
jle 0x10020cb8
mov dword [ebp - 0x3cc], 1
jmp 0x10020cbf
and dword [ebp - 0x3cc], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x144]
mov dword [ebp - 0x4e4], eax
mov eax, dword [ebp - 0x1e4]
mov dword [ebp - 0x48], eax
cmp dword [ebp - 0x48], 0
je 0x10020cf6
mov eax, 0xd5f39643
test eax, eax
je 0x10020cf6
mov dword [ebp - 0x26c], 1
jmp 0x10020cfd
and dword [ebp - 0x26c], 0
mov eax, dword [ebp - 0x44]
cmp eax, dword [ebp - 0x26c]
jne 0x10020d17
cmp dword [ebp - 0x30], 0
jne 0x10020d17
and dword [ebp - 0x1ec], 0
jmp 0x10020d21
mov dword [ebp - 0x1ec], 1
cmp dword [ebp - 0x1ec], 0xb3e9
je 0x10020d39
mov dword [ebp - 0x244], 1
jmp 0x10020d40
and dword [ebp - 0x244], 0
mov eax, dword [ebp - 0x6c]
cmp eax, dword [ebp - 0x244]
je 0x10020d57
mov dword [ebp - 0x1f4], 1
jmp 0x10020d5e
and dword [ebp - 0x1f4], 0
cmp dword [ebp - 0x1f4], 0xfffffff7
jbe 0x10020d73
mov dword [ebp - 0x284], 1
jmp 0x10020d7a
and dword [ebp - 0x284], 0
mov eax, dword [ebp - 0x284]
mov dword [ebp - 0x6c], eax
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x6c]
cmp ecx, dword [ebp + eax - 0x144]
jg 0x10020da1
mov dword [ebp - 0x1fc], 1
jmp 0x10020da8
and dword [ebp - 0x1fc], 0
mov eax, dword [ebp - 0x1fc]
mov dword [ebp - 0x24c], eax
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x24c]
cmp ecx, dword [ebp + eax - 0x144]
jg 0x10020ddb
cmp dword [ebp - 0x6c], 0
je 0x10020ddb
mov dword [ebp - 0x204], 1
jmp 0x10020de2
and dword [ebp - 0x204], 0
cmp dword [ebp - 0x204], 0x36c3
jle 0x10020dfa
mov dword [ebp - 0x274], 1
jmp 0x10020e01
and dword [ebp - 0x274], 0
mov eax, dword [ebp - 0x274]
mov dword [ebp - 0x50], eax
mov dword [ebp - 0x48], 3
jmp 0x10020e1a
mov eax, dword [ebp - 0x48]
dec eax
mov dword [ebp - 0x48], eax
cmp dword [ebp - 0x48], 0
jl 0x10020f4d
mov dword [ebp - 0x44], 3
jmp 0x10020e34
mov eax, dword [ebp - 0x44]
dec eax
mov dword [ebp - 0x44], eax
cmp dword [ebp - 0x44], 0
jl 0x10020f48
mov dword [ebp - 0x2dc], 0xca9a92ed
mov dword [ebp - 0x30], 0
jmp 0x10020e58
mov eax, dword [ebp - 0x30]
inc eax
mov dword [ebp - 0x30], eax
cmp dword [ebp - 0x30], 3
jg 0x10020efe
mov dword [ebp - 0x2d4], 0x9db650f8
mov dword [ebp - 0x50], 3
jmp 0x10020e7c
mov eax, dword [ebp - 0x50]
dec eax
mov dword [ebp - 0x50], eax
cmp dword [ebp - 0x50], 0
jl 0x10020ee4
mov byte [ebp - 0x35], 0
push 0xce0
lea eax, [ebp - 0x35]
push eax
push 0x2550
push 0x108e
push 1
push 1
call fcn.1001ca9a
add esp, 0x18
push 0x1669
push 0x69f5
push 0x529a
push 0
push 0x52dc
push 0x24bf
push 1
lea eax, [ebp - 0x2d4]
push eax
push 0x700e
push 1
push 0x2bf3
push 0x7f8a
call fcn.1001b363
add esp, 0x30
jmp 0x10020e75
push dword [ebp - 0x30]
lea ecx, [ebp - 0x454]
call fcn.10001c56
cmp dword [eax], 0
je 0x10020ef9
jmp 0x10020efe
jmp 0x10020e51
lea eax, [ebp - 0x374]
push eax
push 1
push 0x5809
push 0x672a
lea eax, [ebp - 0x44]
push eax
push 0x63c5
push 1
push 0x21b4
lea eax, [ebp - 0x454]
push eax
push 0x3cf
push 1
lea eax, [ebp - 0x2dc]
push eax
push 0x70f9
call fcn.1001cb91
add esp, 0x34
jmp 0x10020e2d
jmp 0x10020e13
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x454]
call fcn.10001c3a
jmp 0x10020936
mov dword [ebp - 0x190], 0x5fec
mov dword [ebp - 0x2fc], str.zfpavgt_wkavqpr_dguaxpyny_nblvqmqmx_mmlupoo_xfmwelyuf_ons_lwqykoqd_rggqqcsl_wahcvn_ilb_xslxxsonj_syqf
cmp dword [ebp - 0x190], 0x63b9
jle 0x1002105a
and dword [ebp - 0xd0], 0
jmp 0x10020f9b
mov eax, dword [ebp - 0xd0]
inc eax
mov dword [ebp - 0xd0], eax
cmp dword [ebp - 0xd0], 0x7ab7
jge 0x1002105a
and dword [ebp - 0xa8], 0
jmp 0x10020fc1
mov eax, dword [ebp - 0xa8]
inc eax
mov dword [ebp - 0xa8], eax
cmp dword [ebp - 0xa8], 0x6d25
jge 0x10021055
and dword [ebp - 0xd8], 0
jmp 0x10020fe7
mov eax, dword [ebp - 0xd8]
inc eax
mov dword [ebp - 0xd8], eax
cmp dword [ebp - 0xd8], 0x302d
jge 0x10021050
mov eax, dword [ebp - 0xd0]
add eax, dword [ebp - 0xa8]
or eax, dword [ebp - 0xd8]
cdq
mov dword [ebp - 0x3bc], eax
mov dword [ebp - 0x3b8], edx
push dword [ebp - 0x3b8]
push dword [ebp - 0x3bc]
lea ecx, [ebp - 0x63c]
call fcn.10001a11
pop ecx
pop ecx
mov dword [ebp - 0x408], eax
mov ecx, dword [ebp - 0x408]
call fcn.10001aa8
push eax
call fcn.100400a6
pop ecx
lea ecx, [ebp - 0x63c]
call fcn.10001a9e
jmp 0x10020fda
jmp 0x10020fb4
jmp 0x10020f8e
cmp dword [ebp - 0xa4], 6
jae 0x1002138c
mov eax, dword [ebp - 0x68]
mov eax, dword [eax]
mov dword [ebp - 0x2e4], eax
lea eax, [ebp - 0x52c]
push eax
mov ecx, 0x100999f0
call fcn.100235b5
push eax
lea eax, [ebp - 0x2e4]
push eax
lea eax, [ebp - 0x4f4]
push eax
mov ecx, 0x100999f0
call fcn.100235c3
mov ecx, eax
call fcn.100237d5
movzx eax, al
test eax, eax
je 0x1002138c
mov dword [ebp - 0x20c], 0x9841b3c6
mov dword [ebp - 0x37c], 0xf8f9ed02
mov dword [ebp - 0x518], 0xdf2a
push 0x32c6
lea eax, [ebp - 0x20c]
push eax
push 0x7723
push 1
push 1
call fcn.1001a3bf
add esp, 0x14
push 0x1535
lea eax, [ebp - 0x20c]
push eax
push 1
lea eax, [ebp - 0x37c]
push eax
push 0x5318
push 1
call fcn.1001ce33
add esp, 0x18
mov dword [ebp - 0x17c], 0x32cc
mov dword [ebp - 0x3d8], str.qwulwrn_dwbh_ufxbaofd_frhw_lrfbzsjmk_jdxqrds_dzmaox_bobrygcyy_lugs_jzaifecv
cmp dword [ebp - 0x17c], 0x339e
jle 0x1002122c
and dword [ebp - 0xb0], 0
jmp 0x10021147
mov eax, dword [ebp - 0xb0]
inc eax
mov dword [ebp - 0xb0], eax
cmp dword [ebp - 0xb0], 0x7a28
jge 0x1002122c
and dword [ebp - 0xe0], 0
jmp 0x1002116d
mov eax, dword [ebp - 0xe0]
inc eax
mov dword [ebp - 0xe0], eax
cmp dword [ebp - 0xe0], 0x5626
jge 0x10021227
and dword [ebp - 0x74], 0
jmp 0x1002118a
mov eax, dword [ebp - 0x74]
inc eax
mov dword [ebp - 0x74], eax
cmp dword [ebp - 0x74], 0x5afc
jge 0x10021222
and dword [ebp - 0xe8], 0
jmp 0x100211ad
mov eax, dword [ebp - 0xe8]
inc eax
mov dword [ebp - 0xe8], eax
cmp dword [ebp - 0xe8], 0x543c
jge 0x1002121d
mov eax, dword [ebp - 0xb0]
imul eax, dword [ebp - 0xe0]
cdq
idiv dword [ebp - 0x74]
add edx, dword [ebp - 0xe8]
mov eax, edx
cdq
mov dword [ebp - 0x3c8], eax
mov dword [ebp - 0x3c4], edx
push dword [ebp - 0x3c4]
push dword [ebp - 0x3c8]
lea ecx, [ebp - 0x5c4]
call fcn.10001a11
pop ecx
pop ecx
mov dword [ebp - 0x2ec], eax
mov ecx, dword [ebp - 0x2ec]
call fcn.10001aa8
push eax
call fcn.100400a6
pop ecx
lea ecx, [ebp - 0x5c4]
call fcn.10001a9e
jmp 0x100211a0
jmp 0x10021183
jmp 0x10021160
jmp 0x1002113a
mov dword [ebp - 4], 9
cmp dword [ebp - 0x17c], 0x313e
jge 0x1002124b
push dword [ebp - 0x3d8]
call fcn.100400a6
pop ecx
jmp 0x10021267
or dword [ebp - 4], 0xffffffff
jmp 0x10021271
mov dword [ebp - 0x188], 0x5273
mov dword [ebp - 0x384], str.ooq_jqhcn_cns_ecqe_opy_ebujhqt
cmp dword [ebp - 0x188], 0x55af
jle 0x10021316
and dword [ebp - 0xfc], 0
jmp 0x100212ab
mov eax, dword [ebp - 0xfc]
inc eax
mov dword [ebp - 0xfc], eax
cmp dword [ebp - 0xfc], 0x5fe5
jge 0x1002130c
and dword [ebp - 0xc4], 0
jmp 0x100212cd
mov eax, dword [ebp - 0xc4]
inc eax
mov dword [ebp - 0xc4], eax
cmp dword [ebp - 0xc4], 0x6c9c
jge 0x1002130a
mov eax, dword [ebp - 0xfc]
sub eax, dword [ebp - 0xc4]
cdq
mov dword [ebp - 0x3d4], eax
mov dword [ebp - 0x3d0], edx
push dword [ebp - 0x3d0]
push dword [ebp - 0x3d4]
mov ecx, 0x10072ab8
call fcn.10001ac8
jmp 0x100212c0
jmp 0x1002129e
push 0
push 0
call dword [sym.imp.KERNEL32.dll_GetExitCodeThread]
mov eax, dword [ebp - 0x68]
mov eax, dword [eax]
mov dword [ebp - 0x2f4], eax
lea eax, [ebp - 0x2f4]
push eax
mov ecx, 0x100999f0
call fcn.1002383c
push eax
mov ecx, dword [ebp - 0x250]
call fcn.1000c768
jmp 0x10022b95
mov dword [ebp - 4], 0xd
cmp dword [ebp - 0x190], 0x5fbb
jge 0x100213ab
push dword [ebp - 0x2fc]
call fcn.100400a6
pop ecx
jmp 0x100213c7
or dword [ebp - 4], 0xffffffff
jmp 0x100213d1
mov dword [ebp - 0x54c], 1
mov dword [ebp - 0x520], 0x2bd7b1c2
mov dword [ebp - 0x540], 0x6b950ba1
push 1
lea ecx, [ebp - 0x4e0]
call fcn.10001bdd
mov dword [ebp - 4], 0xf
mov dword [ebp - 0x198], 0x7663
mov dword [ebp - 0x430], str.een_srv_qicfnqbjv_icqqabgi_yon_ntdqotlth_ahfeibrak_buus_ahcb_qsuratl_lvogesgpr_nmrwinpu_upwkj
cmp dword [ebp - 0x198], 0x789a
jle 0x100214a0
and dword [ebp - 0x11c], 0
jmp 0x10021439
mov eax, dword [ebp - 0x11c]
inc eax
mov dword [ebp - 0x11c], eax
cmp dword [ebp - 0x11c], 0x5c39
jge 0x1002149a
and dword [ebp - 0xcc], 0
jmp 0x1002145b
mov eax, dword [ebp - 0xcc]
inc eax
mov dword [ebp - 0xcc], eax
cmp dword [ebp - 0xcc], 0x59d4
jge 0x10021498
mov eax, dword [ebp - 0x11c]
and eax, dword [ebp - 0xcc]
cdq
mov dword [ebp - 0x3e0], eax
mov dword [ebp - 0x3dc], edx
push dword [ebp - 0x3dc]
push dword [ebp - 0x3e0]
mov ecx, 0x10072ab8
call fcn.10001ac8
jmp 0x1002144e
jmp 0x1002142c
call dword [sym.imp.KERNEL32.dll_GetUserDefaultLangID]
mov dword [ebp - 0x498], 0x7cc42477
mov byte [ebp - 4], 0x10
cmp dword [ebp - 0x198], 0x7310
jge 0x100214ca
mov edx, dword [ebp - 0x430]
mov ecx, 0x10072ab8
call fcn.1000350a
jmp 0x100214e6
mov dword [ebp - 4], 0xf
jmp 0x100214f6
mov dword [ebp - 0x4a0], 0x12af0488
mov dword [ebp - 0x4a8], 0xfffffff7
mov dword [ebp - 0x4b0], 0xffffffff
mov dword [ebp - 0x304], 1
mov dword [ebp - 0x20], 0
jmp 0x1002152e
mov eax, dword [ebp - 0x20]
inc eax
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 3
jge 0x10021544
mov eax, dword [ebp - 0x20]
mov dword [ebp + eax*4 - 0x5e8], 0xffffffff
jmp 0x10021527
mov dword [ebp - 0x20], 0
jmp 0x10021554
mov eax, dword [ebp - 0x20]
inc eax
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 1
jge 0x10021570
push dword [ebp - 0x20]
lea ecx, [ebp - 0x4e0]
call fcn.10001c56
mov dword [eax], 0xfffffffb
jmp 0x1002154d
push 1
push 0x6761
push 0x4b3f
push 0x19ef
push 1
push 0x7460
push 0
push 0x2a05
push 0x6401
lea eax, [ebp - 0x304]
push eax
call fcn.1001c91c
add esp, 0x28
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x4e0]
call fcn.10001c3a
lea ecx, [ebp - 0x510]
call fcn.1000c726
mov dword [ebp - 4], 0x12
mov dword [ebp - 0x1a0], 0x1f56
mov dword [ebp - 0x30c], str.bzmhlbpk_zfynkw_ctrrx_wrmhdbbf_jalivk_tlsr_oswbpfyrh
cmp dword [ebp - 0x1a0], 0x205e
jle 0x100216c1
and dword [ebp - 0x104], 0
jmp 0x100215fe
mov eax, dword [ebp - 0x104]
inc eax
mov dword [ebp - 0x104], eax
cmp dword [ebp - 0x104], 0x5c6c
jge 0x100216c1
and dword [ebp - 0xd4], 0
jmp 0x10021624
mov eax, dword [ebp - 0xd4]
inc eax
mov dword [ebp - 0xd4], eax
cmp dword [ebp - 0xd4], 0x4e10
jge 0x100216bc
and dword [ebp - 0x12c], 0
jmp 0x1002164a
mov eax, dword [ebp - 0x12c]
inc eax
mov dword [ebp - 0x12c], eax
cmp dword [ebp - 0x12c], 0x429e
jge 0x100216b7
mov eax, dword [ebp - 0x104]
mov ecx, dword [ebp - 0xd4]
sar eax, cl
mov ecx, dword [ebp - 0x12c]
sar eax, cl
cdq
mov dword [ebp - 0x3ec], eax
mov dword [ebp - 0x3e8], edx
push dword [ebp - 0x3e8]
push dword [ebp - 0x3ec]
lea ecx, [ebp - 0x5dc]
call fcn.10001a11
pop ecx
pop ecx
mov dword [ebp - 0x38c], eax
mov ecx, dword [ebp - 0x38c]
call fcn.10001aa8
push eax
call fcn.100400a6
pop ecx
lea ecx, [ebp - 0x5dc]
call fcn.10001a9e
jmp 0x1002163d
jmp 0x10021617
jmp 0x100215f1
mov byte [ebp - 4], 0x13
cmp dword [ebp - 0x1a0], 0x1d7d
jge 0x100216dd
push dword [ebp - 0x30c]
call fcn.100400a6
pop ecx
jmp 0x100216f9
mov dword [ebp - 4], 0x12
jmp 0x10021709
mov dword [ebp - 0x3e4], 0x1ab0
cmp dword [ebp - 0x3e4], 0x1166
jge 0x100217ec
lea eax, [ebp - 0x314]
push eax
push 0x10062590
call fcn.10040302
pop ecx
pop ecx
mov byte [ebp - 0x11], 1
mov byte [ebp - 0x13], 1
or dword [ebp - 0x168], 0xffffffff
and dword [ebp - 0x170], 0
jmp 0x1002175b
mov eax, dword [ebp - 0x170]
inc eax
mov dword [ebp - 0x170], eax
mov eax, dword [ebp - 0x170]
cmp eax, dword [ebp - 0x314]
jge 0x100217c2
lea eax, [ebp - 0x158]
push eax
push 0x10062590
call fcn.10040302
pop ecx
pop ecx
movzx eax, byte [ebp - 0x11]
test eax, eax
je 0x10021798
mov eax, dword [ebp - 0x158]
cmp eax, dword [ebp - 0x168]
jge 0x10021798
mov byte [ebp - 0x11], 0
jmp 0x100217b4
movzx eax, byte [ebp - 0x11]
test eax, eax
jne 0x100217b4
mov eax, dword [ebp - 0x158]
cmp eax, dword [ebp - 0x168]
jle 0x100217b4
mov byte [ebp - 0x13], 0
jmp 0x100217c2
mov eax, dword [ebp - 0x158]
mov dword [ebp - 0x168], eax
jmp 0x1002174e
movzx eax, byte [ebp - 0x13]
test eax, eax
je 0x100217d6
mov dword [ebp - 0x1a8], 0x10063fdc
jmp 0x100217e0
mov dword [ebp - 0x1a8], 0x10063fe0
push dword [ebp - 0x1a8]
call fcn.10040bc6
pop ecx
mov dword [ebp - 0x1c], 0x60f57a7c
mov dword [ebp - 0x1b0], 0x3f26
mov dword [ebp - 0x394], str.gcajfrqe_eposse_vmeildsrd_dczj
cmp dword [ebp - 0x1b0], 0x4046
jle 0x10021892
push 0
call dword [sym.imp.KERNEL32.dll_GetSystemInfo]
and dword [ebp - 0xdc], 0
jmp 0x10021831
mov eax, dword [ebp - 0xdc]
inc eax
mov dword [ebp - 0xdc], eax
cmp dword [ebp - 0xdc], 0x4643
jge 0x10021892
and dword [ebp - 0x10c], 0
jmp 0x10021853
mov eax, dword [ebp - 0x10c]
inc eax
mov dword [ebp - 0x10c], eax
cmp dword [ebp - 0x10c], 0x524b
jge 0x10021890
mov eax, dword [ebp - 0xdc]
sub eax, dword [ebp - 0x10c]
cdq
mov dword [ebp - 0x3f8], eax
mov dword [ebp - 0x3f4], edx
push dword [ebp - 0x3f4]
push dword [ebp - 0x3f8]
mov ecx, 0x10072ab8
call fcn.10001ac8
jmp 0x10021846
jmp 0x10021824
mov dword [ebp - 0x31c], 0xfff6
mov byte [ebp - 4], 0x15
cmp dword [ebp - 0x1b0], 0x3b52
jge 0x100218bc
mov edx, dword [ebp - 0x394]
mov ecx, 0x10072ab8
call fcn.1000350a
jmp 0x100218d8
mov dword [ebp - 4], 0x12
jmp 0x100218e8
mov dword [ebp - 0xe4], 0
jmp 0x10021901
mov eax, dword [ebp - 0xe4]
inc eax
mov dword [ebp - 0xe4], eax
cmp dword [ebp - 0xe4], 2
jge 0x1002191d
mov eax, dword [ebp - 0xe4]
mov dword [ebp + eax*4 - 0x53c], 0x477862fd
jmp 0x100218f4
mov dword [ebp - 0x1c], 1
jmp 0x1002192d
mov eax, dword [ebp - 0x1c]
dec eax
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 0
jl 0x10021956
mov byte [ebp - 0x32], 0
movzx eax, byte [ebp - 0x32]
test eax, eax
je 0x10021945
call dword [sym.imp.KERNEL32.dll_GetSystemDefaultUILanguage]
mov eax, dword [ebp - 0x1c]
cmp dword [ebp + eax*4 - 0x53c], 0
je 0x10021954
jmp 0x10021956
jmp 0x10021926
mov dword [ebp - 0x1c], 0
jmp 0x10021966
mov eax, dword [ebp - 0x1c]
inc eax
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 0xc
jne 0x100219fe
push 3
lea ecx, [ebp - 0x4f0]
call fcn.10001bdd
mov byte [ebp - 4], 0x17
push 0x2892
lea eax, [ebp - 0x4f0]
push eax
push 0x4e94
push 0
push 0x7dc3
push 0
lea eax, [ebp - 0x550]
push eax
push 0x7f16
push 1
push 0x5b4f
push 0x69c5
push 0x697b
push 0x638c
call fcn.100200f1
add esp, 0x34
push 0x26b6
push 0x20b6
push 0
lea eax, [ebp - 0x31c]
push eax
push 0x54e
push 0x5b78
call fcn.10022c63
add esp, 0x18
mov byte [ebp - 4], 0x12
lea ecx, [ebp - 0x4f0]
call fcn.10001c3a
jmp 0x1002195f
mov eax, dword [ebp - 0xa4]
xor edx, edx
push 2
pop ecx
div ecx
test edx, edx
jne 0x100227d8
mov dword [ebp - 0x18], 0xfffffff6
mov dword [ebp - 0x58], 0xd0714ad
mov dword [ebp - 0x124], 0
jmp 0x10021a3a
mov eax, dword [ebp - 0x124]
inc eax
mov dword [ebp - 0x124], eax
cmp dword [ebp - 0x124], 2
jge 0x10021a56
mov eax, dword [ebp - 0x124]
mov dword [ebp + eax*4 - 0x548], 0x477862fd
jmp 0x10021a2d
mov dword [ebp - 0x18], 0
jmp 0x10021a66
mov eax, dword [ebp - 0x18]
inc eax
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 1
jg 0x10021aa4
push 0x312f
push 0x58db
push 1
push 1
push 0x468a
push 0x91b
push 0x35fd
push 1
push 0x3e9f
push 0x5ab8
push 0x53a0
call fcn.1001d2f8
add esp, 0x2c
jmp 0x10021a5f
cmp dword [ebp - 0x18], 0
je 0x10021b04
mov dword [ebp - 0x414], 0
mov dword [ebp - 0x18], 0
jmp 0x10021ac4
mov eax, dword [ebp - 0x18]
inc eax
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 1
jg 0x10021b02
mov dword [ebp - 0x324], 0x461e3ff1
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x558], eax
mov eax, dword [ebp - 0x414]
mov dword [ebp - 0x49c], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x548]
imul eax, dword [ebp - 0x324]
mov dword [ebp - 0x58], eax
jmp 0x10021abd
jmp 0x10021b58
mov dword [ebp - 0x58], 1
jmp 0x10021b14
mov eax, dword [ebp - 0x58]
dec eax
mov dword [ebp - 0x58], eax
cmp dword [ebp - 0x58], 0
jl 0x10021b58
mov byte [ebp - 0x31], 0
push 0x6607
lea eax, [ebp - 0x31]
push eax
push 1
push 0x4843
push 0x412c
push 0
push 0x89a
push 0x5979
push 0x1bf8
push 0x5da3
push 0x5899
call fcn.1001d5e8
add esp, 0x2c
jmp 0x10021b0d
lea eax, [ebp - 0x60c]
push eax
call fcn.10016e0a
pop ecx
mov esi, eax
lea edi, [ebp - 0x570]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
lea esi, [ebp - 0x570]
lea edi, [ebp - 0x57c]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
push 2
lea ecx, [ebp - 0x484]
call fcn.10001bdd
mov byte [ebp - 4], 0x18
mov dword [ebp - 0x39c], 1
mov dword [ebp - 0x334], 0xa233712
mov dword [ebp - 0x32c], 0xe012d2c8
push 4
lea ecx, [ebp - 0x490]
call fcn.10001bdd
mov byte [ebp - 4], 0x19
mov dword [ebp - 0x2a8], 0xfffffffa
push 1
push 0xcb3
push 0x5749
push 0x3d68
push 0x6aa8
push 1
lea eax, [ebp - 0x484]
push eax
push 0x6543
lea eax, [ebp - 0x60]
push eax
call fcn.1001aba7
add esp, 0x24
mov dword [ebp - 0x60], 0
jmp 0x10021c09
mov eax, dword [ebp - 0x60]
inc eax
mov dword [ebp - 0x60], eax
cmp dword [ebp - 0x60], 4
jge 0x10021c25
push dword [ebp - 0x60]
lea ecx, [ebp - 0x490]
call fcn.10001c56
mov dword [eax], 0xb44cf59
jmp 0x10021c02
push 0
push 0x21af
push 0x4275
push 0x478
push 1
push 0x5b7c
push 0x7e1f
push 0x3a5
call fcn.1001e741
add esp, 0x20
lea eax, [ebp - 0x39c]
push eax
push 0x3161
push 1
lea eax, [ebp - 0x32c]
push eax
lea eax, [ebp - 0x490]
push eax
push 1
push 0x4082
lea eax, [ebp - 0x484]
push eax
lea eax, [ebp - 0x2a8]
push eax
push 0x4a5f
lea eax, [ebp - 0x334]
push eax
call fcn.1001d5e8
add esp, 0x2c
mov byte [ebp - 4], 0x18
lea ecx, [ebp - 0x490]
call fcn.10001c3a
mov byte [ebp - 4], 0x12
lea ecx, [ebp - 0x484]
call fcn.10001c3a
mov eax, dword [ebp - 0x68]
mov ecx, dword [eax]
call fcn.100183a2
mov dword [ebp - 0x354], eax
push 1
lea ecx, [ebp - 0x2a4]
call fcn.10001bdd
mov byte [ebp - 4], 0x1a
push 2
lea ecx, [ebp - 0x448]
call fcn.10001bdd
mov byte [ebp - 4], 0x1b
mov dword [ebp - 0x1b8], 0x5966
mov dword [ebp - 0x33c], str.erfksnofo_xin_mxseyy_tqdukxe_mcrqzqhx_usa_ebdvn_zwvywjqfm
cmp dword [ebp - 0x1b8], 0x59a3
jle 0x10021df1
and dword [ebp - 0x78], 0
jmp 0x10021d15
mov eax, dword [ebp - 0x78]
inc eax
mov dword [ebp - 0x78], eax
cmp dword [ebp - 0x78], 0x4dc6
jge 0x10021df1
and dword [ebp - 0xec], 0
jmp 0x10021d38
mov eax, dword [ebp - 0xec]
inc eax
mov dword [ebp - 0xec], eax
cmp dword [ebp - 0xec], 0x130a
jge 0x10021dec
and dword [ebp - 0x114], 0
jmp 0x10021d5e
mov eax, dword [ebp - 0x114]
inc eax
mov dword [ebp - 0x114], eax
cmp dword [ebp - 0x114], 0x67f7
jge 0x10021de7
and dword [ebp - 0x7c], 0
jmp 0x10021d77
mov eax, dword [ebp - 0x7c]
inc eax
mov dword [ebp - 0x7c], eax
cmp dword [ebp - 0x7c], 0x21b1
jge 0x10021de2
mov eax, dword [ebp - 0xec]
cdq
idiv dword [ebp - 0x114]
add edx, dword [ebp - 0x78]
mov ecx, dword [ebp - 0x7c]
shl edx, cl
mov eax, edx
cdq
mov dword [ebp - 0x404], eax
mov dword [ebp - 0x400], edx
push dword [ebp - 0x400]
push dword [ebp - 0x404]
lea ecx, [ebp - 0x600]
call fcn.10001a11
pop ecx
pop ecx
mov dword [ebp - 0x3a8], eax
mov ecx, dword [ebp - 0x3a8]
call fcn.10001aa8
push eax
call fcn.100400a6
pop ecx
lea ecx, [ebp - 0x600]
call fcn.10001a9e
jmp 0x10021d70
jmp 0x10021d51
jmp 0x10021d2b
jmp 0x10021d0e
mov dword [ebp - 0x3b4], 0
mov byte [ebp - 4], 0x1c
cmp dword [ebp - 0x1b8], 0x57a0
jge 0x10021e17
push dword [ebp - 0x33c]
call fcn.100400a6
pop ecx
jmp 0x10021e33
mov dword [ebp - 4], 0x1b
jmp 0x10021e43
mov dword [ebp - 0x34c], 0xfffffffa
lea eax, [ebp - 0x2a4]
push eax
lea eax, [ebp - 0x428]
push eax
push 1
push 1
push 0x701
push 0x735d
call fcn.1001ada5
add esp, 0x18
lea eax, [ebp - 0x448]
push eax
push 0x260c
lea eax, [ebp - 0x428]
push eax
push 1
push 1
call fcn.1001ae76
add esp, 0x14
push 0x53da
push 0x4813
push 0x76d3
push 0x6d4a
push 1
push 1
call fcn.1001b192
add esp, 0x18
push 0
lea ecx, [ebp - 0x2a4]
call fcn.10001c56
mov dword [eax], 6
jmp 0x10021ee9
push 0
lea ecx, [ebp - 0x2a4]
call fcn.10001c56
mov dword [ebp - 0x1c0], eax
mov eax, dword [ebp - 0x1c0]
mov eax, dword [eax]
dec eax
mov ecx, dword [ebp - 0x1c0]
mov dword [ecx], eax
push 0
lea ecx, [ebp - 0x2a4]
call fcn.10001c56
cmp dword [eax], 0xfffffff1
jne 0x10021fe1
mov dword [ebp - 0x2c], 0x24f84b81
mov dword [ebp - 0x344], 1
mov dword [ebp - 0x2c], 0
jmp 0x10021f20
mov eax, dword [ebp - 0x2c]
dec eax
mov dword [ebp - 0x2c], eax
cmp dword [ebp - 0x2c], 0xffffffe2
jg 0x10021f50
mov byte [ebp - 0x34], 0
lea eax, [ebp - 0x34]
push eax
push 1
push 0x187
push 0x7373
push 1
push 0x286c
push 0x7322
call fcn.1001deae
add esp, 0x1c
jmp 0x10021f19
mov eax, dword [ebp - 0x2c]
add eax, dword [ebp - 0x2c]
je 0x10021f91
push 0x64f2
push 0x3f1f
push 1
lea eax, [ebp - 0x448]
push eax
push 0
push 1
push 0x56c6
push 0x1110
lea eax, [ebp - 0x2c]
push eax
push 0x7d9
push 0x5175
call fcn.1001e961
add esp, 0x2c
jmp 0x10021fdc
mov dword [ebp - 0x3fc], 0xdcee052
lea eax, [ebp - 0x344]
push eax
lea eax, [ebp - 0x448]
push eax
push 0
push 1
push 0x5e71
lea eax, [ebp - 0x2c]
push eax
lea eax, [ebp - 0x3b4]
push eax
push 0
lea eax, [ebp - 0x34c]
push eax
lea eax, [ebp - 0x3fc]
push eax
lea eax, [ebp - 0x2a4]
push eax
call fcn.1001d2f8
add esp, 0x2c
jmp 0x10021ec5
mov byte [ebp - 4], 0x1a
lea ecx, [ebp - 0x448]
call fcn.10001c3a
mov byte [ebp - 4], 0x12
lea ecx, [ebp - 0x2a4]
call fcn.10001c3a
lea eax, [ebp - 0x510]
push eax
push 0x524a
push 1
push 0x30b0
push 1
push 1
lea eax, [ebp - 0x57c]
push eax
lea eax, [ebp - 0x354]
push eax
push 0x449e
lea eax, [ebp - 0xa4]
push eax
push 0x2188
call fcn.1001e961
add esp, 0x2c
mov dword [ebp - 0x1c8], 0x3f4b
mov dword [ebp - 0x35c], str.hmmx_ikfmiexi_uigunpb_ekkxvoy_bqicc_zbm_vxtwpy_sstvnxo_vokhteo
cmp dword [ebp - 0x1c8], 0x4036
jle 0x1002216f
call dword [sym.imp.KERNEL32.dll_GetThreadLocale]
and dword [ebp - 0x94], 0
jmp 0x1002207d
mov eax, dword [ebp - 0x94]
inc eax
mov dword [ebp - 0x94], eax
cmp dword [ebp - 0x94], 0x341f
jge 0x1002216f
and dword [ebp - 0x84], 0
jmp 0x100220a3
mov eax, dword [ebp - 0x84]
inc eax
mov dword [ebp - 0x84], eax
cmp dword [ebp - 0x84], 0x4bbc
jge 0x1002216a
and dword [ebp - 0x8c], 0
jmp 0x100220c9
mov eax, dword [ebp - 0x8c]
inc eax
mov dword [ebp - 0x8c], eax
cmp dword [ebp - 0x8c], 0x2993
jge 0x10022165
and dword [ebp - 0x9c], 0
jmp 0x100220ef
mov eax, dword [ebp - 0x9c]
inc eax
mov dword [ebp - 0x9c], eax
cmp dword [ebp - 0x9c], 0x4cf4
jge 0x10022160
mov eax, dword [ebp - 0x84]
mov ecx, dword [ebp - 0x8c]
shl eax, cl
xor eax, dword [ebp - 0x94]
xor eax, dword [ebp - 0x9c]
cdq
mov dword [ebp - 0x410], eax
mov dword [ebp - 0x40c], edx
push dword [ebp - 0x40c]
push dword [ebp - 0x410]
lea ecx, [ebp - 0x624]
call fcn.10001a11
pop ecx
pop ecx
mov dword [ebp - 0x3c0], eax
mov ecx, dword [ebp - 0x3c0]
call fcn.10001aa8
push eax
call fcn.100400a6
pop ecx
lea ecx, [ebp - 0x624]
call fcn.10001a9e
jmp 0x100220e2
jmp 0x100220bc
jmp 0x10022096
jmp 0x10022070
mov byte [ebp - 4], 0x1e
cmp dword [ebp - 0x1c8], 0x3d0b
jge 0x1002218b
push dword [ebp - 0x35c]
call fcn.100400a6
pop ecx
jmp 0x100221a7
mov dword [ebp - 4], 0x12
jmp 0x100221b7
cmp dword [ebp - 0xa4], 6
jae 0x100227d8
mov dword [ebp - 0x24], 2
mov dword [ebp - 0x1e8], 8
mov dword [ebp - 0x148], 0x9cc099a5
mov dword [ebp - 0x228], 0
mov dword [ebp - 0xac], 0
jmp 0x10022202
mov eax, dword [ebp - 0xac]
inc eax
mov dword [ebp - 0xac], eax
cmp dword [ebp - 0xac], 1
jge 0x1002221e
mov eax, dword [ebp - 0xac]
mov dword [ebp + eax*4 - 0x120], 0x4ec2
jmp 0x100221f5
mov dword [ebp - 0x24], 0
jmp 0x1002222e
mov eax, dword [ebp - 0x24]
inc eax
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 0
jg 0x1002231e
push 2
lea ecx, [ebp - 0x36c]
call fcn.10001bdd
mov byte [ebp - 4], 0x20
push 1
push 1
lea eax, [ebp - 0x528]
push eax
push 1
push 0x6647
lea eax, [ebp - 0x36c]
push eax
push 0x2b7b
call fcn.1001eb67
add esp, 0x1c
push 1
lea ecx, [ebp - 0x36c]
call fcn.10001c56
and dword [eax], 0
jmp 0x100222a5
push 1
lea ecx, [ebp - 0x36c]
call fcn.10001c56
mov dword [ebp - 0x1d0], eax
mov eax, dword [ebp - 0x1d0]
mov eax, dword [eax]
dec eax
mov ecx, dword [ebp - 0x1d0]
mov dword [ecx], eax
push 1
lea ecx, [ebp - 0x36c]
call fcn.10001c56
cmp dword [eax], 0
jl 0x1002230a
mov dword [ebp - 0xb4], 1
mov dword [ebp - 0xb4], 0
jmp 0x100222da
mov eax, dword [ebp - 0xb4]
inc eax
mov dword [ebp - 0xb4], eax
cmp dword [ebp - 0xb4], 0
jg 0x10022305
push 0x3534
push 0x38ac
push 0xaa3
push 0x25da
push 1
push 1
call fcn.1001ef55
add esp, 0x18
jmp 0x100222cd
jmp 0x10022281
mov byte [ebp - 4], 0x12
lea ecx, [ebp - 0x36c]
call fcn.10001c3a
jmp 0x10022227
mov dword [ebp - 0x24], 0
jmp 0x1002232e
mov eax, dword [ebp - 0x24]
inc eax
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 1
jg 0x100227a9
mov dword [ebp - 0x40], 0xffffffff
mov dword [ebp - 0x14c], 0xfffffffe
mov dword [ebp - 0x130], 0x2589d389
mov dword [ebp - 0x1d8], 0x55c3
mov dword [ebp - 0x2c4], str.liaxkw_nhmz_eshgnssr_ajnmrh_kjuwma_ppoep_ghpzveq_tlfkmr_mzkfinxu_sduluohb_dgaras_hobzyj_fftwnsu
cmp dword [ebp - 0x1d8], 0x569b
jle 0x10022485
call dword [sym.imp.KERNEL32.dll_GetCurrentThread]
and dword [ebp - 0xf0], 0
jmp 0x10022393
mov eax, dword [ebp - 0xf0]
inc eax
mov dword [ebp - 0xf0], eax
cmp dword [ebp - 0xf0], 0x306e
jge 0x10022485
and dword [ebp - 0xf8], 0
jmp 0x100223b9
mov eax, dword [ebp - 0xf8]
inc eax
mov dword [ebp - 0xf8], eax
cmp dword [ebp - 0xf8], 0x6b16
jge 0x10022480
and dword [ebp - 0x100], 0
jmp 0x100223df
mov eax, dword [ebp - 0x100]
inc eax
mov dword [ebp - 0x100], eax
cmp dword [ebp - 0x100], 0x1c36
jge 0x1002247b
and dword [ebp - 0x108], 0
jmp 0x10022405
mov eax, dword [ebp - 0x108]
inc eax
mov dword [ebp - 0x108], eax
cmp dword [ebp - 0x108], 0x5a7c
jge 0x10022476
mov eax, dword [ebp - 0xf0]
mov ecx, dword [ebp - 0xf8]
sar eax, cl
or eax, dword [ebp - 0x100]
or eax, dword [ebp - 0x108]
cdq
mov dword [ebp - 0x41c], eax
mov dword [ebp - 0x418], edx
push dword [ebp - 0x418]
push dword [ebp - 0x41c]
lea ecx, [ebp - 0x654]
call fcn.10001a11
pop ecx
pop ecx
mov dword [ebp - 0x420], eax
mov ecx, dword [ebp - 0x420]
call fcn.10001aa8
push eax
call fcn.100400a6
pop ecx
lea ecx, [ebp - 0x654]
call fcn.10001a9e
jmp 0x100223f8
jmp 0x100223d2
jmp 0x100223ac
jmp 0x10022386
mov dword [ebp - 0x110], 0
jmp 0x1002249e
mov eax, dword [ebp - 0x110]
inc eax
mov dword [ebp - 0x110], eax
cmp dword [ebp - 0x110], 4
jge 0x100224ba
mov eax, dword [ebp - 0x110]
mov dword [ebp + eax*4 - 0x594], 0xe188
jmp 0x10022491
mov byte [ebp - 4], 0x21
cmp dword [ebp - 0x1d8], 0x520a
jge 0x100224d6
push dword [ebp - 0x2c4]
call fcn.100400a6
pop ecx
jmp 0x100224f2
mov dword [ebp - 4], 0x12
jmp 0x10022502
mov dword [ebp - 0x40], 0
jmp 0x10022512
mov eax, dword [ebp - 0x40]
inc eax
mov dword [ebp - 0x40], eax
cmp dword [ebp - 0x40], 1
jg 0x1002278f
mov dword [ebp - 0x128], 0xe075257
mov dword [ebp - 0x2bc], 0xffffffff
mov dword [ebp - 0x118], 0
jmp 0x10022549
mov eax, dword [ebp - 0x118]
inc eax
mov dword [ebp - 0x118], eax
cmp dword [ebp - 0x118], 2
jge 0x10022565
mov eax, dword [ebp - 0x118]
mov dword [ebp + eax*4 - 0x534], 0x15e1b460
jmp 0x1002253c
cmp dword [ebp - 0x14c], 0
jne 0x1002261a
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x120]
mov dword [ebp - 0x148], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x120]
cmp eax, dword [ebp - 0x148]
jge 0x100225d4
mov eax, dword [ebp - 0x148]
cmp eax, dword [ebp - 0x14c]
je 0x100225b4
mov dword [ebp - 0x1e0], 1
jmp 0x100225bb
and dword [ebp - 0x1e0], 0
mov eax, dword [ebp - 0x24]
imul eax, dword [ebp - 0x1e0]
mov dword [ebp - 0x128], eax
mov eax, dword [ebp - 0x128]
cmp eax, dword [ebp - 0x40]
mov dword [ebp - 0x1e8], 0x2ba2
mov eax, dword [ebp - 0x1e8]
cmp eax, dword [ebp - 0x40]
jne 0x100225f5
mov dword [ebp - 0x1f0], 1
jmp 0x100225fc
and dword [ebp - 0x1f0], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x120]
cmp dword [ebp - 0x1f0], eax
jg 0x1002261a
and dword [ebp - 0x1f8], 0
jmp 0x10022624
mov dword [ebp - 0x1f8], 1
mov eax, dword [ebp - 0x2bc]
cmp dword [ebp - 0x1f8], eax
jg 0x1002263e
mov dword [ebp - 0x200], 1
jmp 0x10022645
and dword [ebp - 0x200], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x120]
cmp dword [ebp - 0x200], eax
jl 0x10022666
mov dword [ebp - 0x208], 1
jmp 0x1002266d
and dword [ebp - 0x208], 0
mov eax, dword [ebp - 0x208]
mov dword [ebp - 0x130], eax
xor eax, eax
inc eax
je 0x1002274f
cmp dword [ebp - 0x128], 0
je 0x10022692
cmp dword [ebp - 0x130], 0
cmp dword [ebp - 0x228], 0x5b974db9
jle 0x100226aa
mov dword [ebp - 0x210], 1
jmp 0x100226b1
and dword [ebp - 0x210], 0
cmp dword [ebp - 0x210], 0xfffffff7
je 0x100226c6
mov dword [ebp - 0x218], 1
jmp 0x100226cd
and dword [ebp - 0x218], 0
mov eax, dword [ebp - 0x130]
cmp dword [ebp - 0x218], eax
jl 0x100226e7
mov dword [ebp - 0x220], 1
jmp 0x100226ee
and dword [ebp - 0x220], 0
mov eax, dword [ebp - 0x14c]
cmp dword [ebp - 0x220], eax
je 0x10022708
mov dword [ebp - 0x230], 1
jmp 0x1002270f
and dword [ebp - 0x230], 0
mov eax, dword [ebp - 0x228]
cmp dword [ebp - 0x230], eax
jge 0x1002272f
cmp dword [ebp - 0x128], 0
jne 0x1002272f
and dword [ebp - 0x238], 0
jmp 0x10022739
mov dword [ebp - 0x238], 1
mov eax, dword [ebp - 0x238]
neg eax
jne 0x1002274f
mov dword [ebp - 0x178], 1
jmp 0x10022756
and dword [ebp - 0x178], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x534]
cmp dword [ebp - 0x178], eax
jl 0x10022777
mov dword [ebp - 0x248], 1
jmp 0x1002277e
and dword [ebp - 0x248], 0
mov eax, dword [ebp - 0x248]
mov dword [ebp - 0x130], eax
jmp 0x1002250b
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x594], 0
je 0x100227a4
jmp 0x10022327
jmp 0x10022327
push 0x100999f0
push 0
lea eax, [ebp - 0x510]
push eax
push dword [ebp - 0x68]
push 0x7966
push 0x2a09
push 0x1f37
push 1
push 0x4be6
call fcn.10022d77
add esp, 0x24
lea eax, [ebp - 0x510]
push eax
mov ecx, dword [ebp - 0x250]
call fcn.1000c768
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x510]
call fcn.1000c75e
jmp 0x10022b95
mov eax, dword [ebp - 0x2b8]
mov dword [ebp - 0x300], eax
mov eax, dword [ebp - 0x2d8]
mov dword [ebp - 0x308], eax
mov eax, dword [ebp - 0x2e0]
mov dword [ebp - 0x310], eax
mov eax, dword [ebp - 0x2e8]
mov dword [ebp - 0x318], eax
mov eax, dword [ebp - 0x2f0]
mov dword [ebp - 0x320], eax
mov eax, dword [ebp - 0x2f8]
mov dword [ebp - 0x328], eax
mov eax, dword [ebp - 0x300]
mov dword [ebp - 0x28], eax
mov eax, dword [ebp - 0x308]
mov dword [ebp - 0x358], eax
mov eax, dword [ebp - 0x310]
mov dword [ebp - 0x290], eax
mov eax, dword [ebp - 0x318]
mov dword [ebp - 0x350], eax
mov eax, dword [ebp - 0x320]
mov dword [ebp - 0x164], eax
mov eax, dword [ebp - 0x328]
mov dword [ebp - 0x16c], eax
mov eax, dword [ebp - 0x28]
mov dword [eax], 0xffffffe9
jmp 0x100228b5
mov eax, dword [ebp - 0x28]
mov eax, dword [eax]
inc eax
mov ecx, dword [ebp - 0x28]
mov dword [ecx], eax
mov eax, dword [ebp - 0x28]
cmp dword [eax], 0x14
jg 0x10022ae3
mov dword [ebp - 0x15c], 0
mov dword [ebp - 0x138], 0xa8551b32
mov eax, dword [ebp - 0x28]
cmp dword [eax], 0
je 0x10022ace
cmp dword [ebp - 0x138], 0xdb39523d
jne 0x100228f9
mov dword [ebp - 0x154], 1
jmp 0x10022900
and dword [ebp - 0x154], 0
mov eax, dword [ebp - 0x16c]
mov ecx, dword [ebp - 0x154]
mov dword [eax], ecx
mov eax, dword [ebp - 0x154]
sub eax, dword [ebp - 0x138]
cmp eax, 0xffffffff
jge 0x1002292b
mov dword [ebp - 0x330], 1
jmp 0x10022932
and dword [ebp - 0x330], 0
mov eax, dword [ebp - 0x164]
mov eax, dword [eax]
mov dword [ebp - 0x4a4], eax
mov eax, 0x67b3
test eax, eax
je 0x1002295e
mov eax, 0xbf5e
test eax, eax
je 0x1002295e
mov dword [ebp - 0x258], 1
jmp 0x10022965
and dword [ebp - 0x258], 0
cmp dword [ebp - 0x258], 0xfffffff6
jle 0x1002297a
mov dword [ebp - 0x260], 1
jmp 0x10022981
and dword [ebp - 0x260], 0
mov eax, dword [ebp - 0x138]
cmp dword [ebp - 0x260], eax
je 0x100229a2
push 7
pop eax
test eax, eax
je 0x100229a2
mov dword [ebp - 0x268], 1
jmp 0x100229a9
and dword [ebp - 0x268], 0
mov eax, dword [ebp - 0x164]
mov eax, dword [eax]
sub eax, dword [ebp - 0x15c]
mov dword [ebp - 0x338], eax
mov eax, dword [ebp - 0x268]
mov dword [ebp - 0x340], eax
mov eax, dword [ebp - 0x15c]
dec eax
mov dword [ebp - 0x15c], eax
mov eax, dword [ebp - 0x338]
cmp eax, dword [ebp - 0x340]
jne 0x100229f0
mov dword [ebp - 0x348], 1
jmp 0x100229f7
and dword [ebp - 0x348], 0
mov eax, dword [ebp - 0x28]
mov eax, dword [eax]
mov dword [ebp - 0x554], eax
mov eax, dword [ebp - 0x16c]
mov eax, dword [eax]
cmp eax, dword [ebp - 0x138]
jne 0x10022a1e
mov dword [ebp - 0x270], 1
jmp 0x10022a25
and dword [ebp - 0x270], 0
mov eax, dword [ebp - 0x28]
mov eax, dword [eax]
cmp dword [ebp - 0x270], eax
jle 0x10022a3e
mov dword [ebp - 0x278], 1
jmp 0x10022a45
and dword [ebp - 0x278], 0
cmp dword [ebp - 0x278], 0x511ecbfc
jg 0x10022a5d
mov dword [ebp - 0x280], 1
jmp 0x10022a64
and dword [ebp - 0x280], 0
mov eax, dword [ebp - 0x164]
mov eax, dword [eax]
cmp eax, dword [ebp - 0x280]
jge 0x10022a80
mov dword [ebp - 0x288], 1
jmp 0x10022a87
and dword [ebp - 0x288], 0
mov eax, dword [ebp - 0x28]
mov eax, dword [eax]
cmp dword [ebp - 0x288], eax
jg 0x10022aab
mov eax, dword [ebp - 0x16c]
cmp dword [eax], 0
je 0x10022aab
mov dword [ebp - 0xbc], 1
jmp 0x10022ab2
and dword [ebp - 0xbc], 0
mov eax, dword [ebp - 0x350]
mov ecx, dword [ebp - 0xbc]
mov dword [eax], ecx
mov eax, dword [ebp - 0x290]
mov ecx, dword [ebp - 0xbc]
mov dword [eax], ecx
mov eax, dword [ebp - 0x358]
mov ecx, dword [ebp - 0x290]
mov ecx, dword [ecx]
mov dword [eax], ecx
jmp 0x100228aa
jmp 0x10022b95
lea eax, [ebp + 0x24]
mov dword [ebp - 0x360], eax
mov eax, dword [ebp + 0x34]
mov dword [ebp - 0x378], eax
mov eax, dword [ebp + 0x20]
mov dword [ebp - 0x370], eax
mov eax, dword [ebp - 0x360]
movzx eax, byte [eax]
test eax, eax
je 0x10022b32
push 0
push 0x48e
push 0x1c10
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_SetWindowExtEx]
jmp 0x10022b95
mov eax, dword [ebp - 0x370]
mov dword [ebp - 0x380], eax
mov eax, dword [ebp - 0x378]
mov dword [ebp - 0x2ac], eax
mov eax, dword [ebp - 0x380]
mov dword [ebp - 0x70], eax
mov eax, dword [ebp - 0x2ac]
mov dword [ebp - 0x2b0], eax
mov eax, dword [ebp - 0x70]
mov dword [eax], 0
jmp 0x10022b75
mov eax, dword [ebp - 0x70]
mov eax, dword [eax]
inc eax
mov ecx, dword [ebp - 0x70]
mov dword [ecx], eax
mov eax, dword [ebp - 0x70]
cmp dword [eax], 3
jge 0x10022b95
mov eax, dword [ebp - 0x70]
push dword [eax]
mov ecx, dword [ebp - 0x2b0]
call fcn.10001c56
mov dword [eax], 7
jmp 0x10022b6a
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret