Function at 0x100027ba
Capabilities:
Get keyboard layout

Disassembly:
mov eax, 0x100558b1
call fcn.100553f0
sub esp, 0x250
push ebx
push esi
push edi
mov dword [ebp - 0x10], esp
xor ebx, ebx
mov dword [ebp - 0x20], 6
mov dword [ebp - 0x38], 0x979c
push 3
mov dword [ebp - 0xb8], edx
pop edx
mov dword [ebp - 0x24], edx
mov dword [ebp - 0x2c], 0x33a79cc0
mov dword [ebp - 0x28], ebx
mov dword [ebp - 0x7c], ecx
mov dword [ebp - 0x130], ebx
mov dword [ebp - 0x18], ebx
jmp 0x10002815
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x1a4], 0xffffffff
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], edx
jl 0x10002804
mov dword [ebp - 0x20], 0x4ec2e0cf
cmp dword [ebp - 0x20], ebx
jne 0x10002844
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x38]
mov eax, dword [ebp - 0x24]
imul eax, dword [ebp - 0x24]
sub eax, dword [ebp - 0x38]
neg eax
sbb eax, eax
inc eax
mov dword [ebp - 0x2c], eax
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0x24]
sub eax, dword [ebp - 0x20]
cmp dword [ebp - 0x20], eax
jge 0x10002858
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x28]
xor eax, eax
inc eax
sub eax, ecx
mov dword [ebp - 0x19c], eax
mov dword [ebp - 0x24], 0x79ca
cmp dword [ebp - 0x24], 0x7cb5
jle 0x10002907
mov dword [ebp - 0x20], ebx
mov eax, ebx
mov dword [ebp - 0x18], 0x4fdc
mov dword [ebp - 0x2c], eax
mov edi, ebx
mov dword [ebp - 0x38], ebx
mov ecx, edi
mov dword [ebp - 0x3c], eax
mov edi, eax
mov esi, ebx
shl edi, cl
mov ecx, esi
mov eax, edi
shl eax, cl
lea ecx, [ebp - 0x230]
cdq
push edx
push eax
call fcn.10002769
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x100028b7
mov eax, dword [eax]
push eax
call fcn.1003ed0a
pop ecx
push ebx
push 1
lea ecx, [ebp - 0x230]
call fcn.10001539
inc esi
cmp esi, 0x4706
jl 0x10002899
mov edi, dword [ebp - 0x38]
mov eax, dword [ebp - 0x2c]
inc edi
mov dword [ebp - 0x38], edi
cmp edi, 0x67a3
jl 0x1000288e
mov esi, dword [ebp - 0x20]
add eax, esi
dec dword [ebp - 0x18]
mov dword [ebp - 0x2c], eax
jne 0x10002889
inc esi
mov dword [ebp - 0x20], esi
cmp esi, 0x4891
jl 0x1000287d
push 3
pop edx
cmp dword [ebp - 0x24], 0x76db
mov word [ebp - 0x60], 0x4e02
mov byte [ebp - 0x5e], 5
mov byte [ebp - 0x5d], dl
mov dword [ebp - 0x5c], 0xdf043006
mov dword [ebp - 0x58], 0x4c01428
mov dword [ebp - 0x54], 0x126003d
mov byte [ebp - 0x50], 0x2b
mov byte [ebp - 0x4f], dl
mov byte [ebp - 0x4e], 0xe
jge 0x10002948
push str.rwwasakp_ftil_ekml_fjfuqht_pvvgf_zlpfmd_paqigv_peequktmz_xgs_rcth
call fcn.1003ed0a
pop ecx
or dword [ebp - 4], 0xffffffff
mov esi, dword [sym.imp.USER32.dll_GetDesktopWindow]
push 0x6f
pop eax
mov word [ebp - 0x128], ax
mov dword [ebp - 0x34], 0x8c6a53d0
mov byte [ebp - 0x19], bl
cmp byte [ebp - 0x19], bl
je 0x10002976
push 0x25
call esi
push eax
call dword [sym.imp.USER32.dll_GetDlgItem]
mov byte [ebp - 0x19], bl
cmp byte [ebp - 0x19], bl
je 0x10002988
push ebx
call esi
push eax
call dword [sym.imp.USER32.dll_SetMenu]
push 2
pop edi
mov ecx, ebx
mov dword [ebp - 0x18], edi
cmp edi, 0x13
jae 0x10002c07
movzx eax, byte [ebp - 0x60]
lea eax, [eax*2 + 2]
cmp edi, eax
jne 0x10002bd0
movzx esi, byte [ebp + edi - 0x60]
mov dword [ebp - 0x38], 0xaca
cmp dword [ebp - 0x38], 0xb86
mov dword [ebp - 0x2c], esi
lea eax, [esi + 1]
mov dword [ebp - 0x30], eax
jle 0x10002a16
mov edi, ebx
mov esi, ebx
lea eax, [esi + edi]
cdq
lea ecx, [ebp - 0x1e8]
push edx
push eax
call fcn.10002769
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x100029e9
mov eax, dword [eax]
push eax
call fcn.1003ed0a
pop ecx
push ebx
push 1
lea ecx, [ebp - 0x1e8]
call fcn.10001539
inc esi
cmp esi, 0x4a03
jl 0x100029ce
inc edi
cmp edi, 0x2dec
jl 0x100029cc
mov edi, dword [ebp - 0x18]
mov esi, dword [ebp - 0x2c]
mov dword [ebp - 0x20], 0x2c03342e
cmp dword [ebp - 0x38], 0xa7d
jge 0x10002a31
push str.qjo_tvgogmfrh_ovhaobn_ehv_gfgqob_yxtmagai_oyupk_eahqnjha_cguakyuz_vxempwc
call fcn.1003ed0a
pop ecx
or dword [ebp - 4], 0xffffffff
mov dword [ebp - 0x34], 7
mov dword [ebp - 0x18], ebx
jmp 0x10002a52
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x1c4], 1
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 2
jl 0x10002a41
mov dword [ebp - 0x20], ebx
cmp dword [ebp - 0x20], 0x1b
jne 0x10002abf
mov esi, dword [sym.imp.USER32.dll_GetDesktopWindow]
mov dword [ebp - 0x18], ebx
jmp 0x10002a7d
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0xe4], 0xd23b6182
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 3
jl 0x10002a6c
mov dword [ebp - 0xdc], 1
cmp dword [ebp - 0xdc], ebx
jl 0x10002ab3
mov byte [ebp - 0x19], bl
cmp byte [ebp - 0x19], bl
je 0x10002aab
push 0x2306
call esi
push eax
call dword [sym.imp.USER32.dll_GetWindowLongA]
dec dword [ebp - 0xdc]
jns 0x10002a95
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], 0x1b
je 0x10002a67
mov esi, dword [ebp - 0x2c]
mov byte [ebp - 0x19], bl
cmp byte [ebp - 0x19], bl
je 0x10002adb
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_EndPage]
mov dword [ebp - 0x24], 0xfffffff7
dec edi
push 2
mov dword [ebp - 0x28], 0xfffffffb
add edi, esi
mov dword [ebp - 0x18], ebx
pop edx
jmp 0x10002afe
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x70], edx
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], edx
jl 0x10002af4
mov dword [ebp - 0x24], 0xffffffff
xor ecx, ecx
mov eax, dword [ebp - 0x24]
inc ecx
mov dword [ebp - 0x28], eax
mov dword [ebp - 0x28], ecx
cmp dword [ebp - 0x28], ebx
jl 0x10002bcb
mov dword [ebp - 0x2c], ecx
mov dword [ebp - 0x38], ecx
mov dword [ebp - 0x18], ebx
jmp 0x10002b37
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x158], ecx
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], edx
jl 0x10002b2a
mov dword [ebp - 0x24], ebx
cmp dword [ebp - 0x24], ecx
jg 0x10002bc2
mov dword [ebp - 0x38], 0xc5530c4e
cmp dword [ebp - 0x24], ebx
jne 0x10002b57
cmp dword [ebp - 0x6c], ebx
jne 0x10002b57
mov ecx, ebx
mov dword [ebp - 0x38], ecx
mov eax, dword [ebp - 0x38]
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp + eax*4 - 0x70]
mov ecx, dword [ebp - 0x2c]
dec ecx
neg ecx
sbb ecx, ecx
xor edx, edx
neg ecx
sub ecx, eax
mov dword [ebp - 0x38], ecx
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp + eax*4 - 0x70]
mov eax, dword [ebp - 0x38]
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp + eax*4 - 0x70]
mov eax, dword [ebp - 0x2c]
cmp eax, 1
mov eax, dword [ebp - 0x6c]
setg dl
sub edx, ecx
xor ecx, ecx
add edx, eax
mov eax, dword [ebp - 0x28]
mov esi, dword [ebp + eax*4 - 0x70]
mov eax, dword [ebp - 0x28]
cmp edx, eax
setle cl
xor eax, eax
cmp esi, ecx
setge al
xor ecx, ecx
mov dword [ebp - 0x154], eax
inc ecx
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], ecx
jle 0x10002b44
push 2
pop edx
dec dword [ebp - 0x28]
jns 0x10002b1f
mov ecx, dword [ebp - 0x30]
jmp 0x10002bff
movzx edx, byte [ebp + edi - 0x5f]
mov eax, edi
sub eax, ecx
movzx eax, byte [ebp + eax - 0x62]
movzx ecx, word [ebp + eax*2 - 0x12c]
mov eax, ecx
and eax, edx
add eax, eax
sub ecx, eax
movzx eax, byte [ebp + edi - 0x60]
add ecx, edx
mov word [ebp + eax*2 - 0x12c], cx
mov ecx, ebx
add edi, 2
jmp 0x1000298d
xor eax, eax
mov dword [ebp - 0x13c], 7
mov word [ebp - 0x11e], ax
lea ecx, [ebp - 0x150]
mov word [ebp - 0x150], ax
lea eax, [ebp - 0x12c]
push eax
mov dword [ebp - 0x140], ebx
call fcn.10004211
mov dword [ebp - 4], 4
mov esi, ebx
mov dword [ebp - 0x2c], ebx
cmp esi, 8
jae 0x10002d49
mov dword [ebp - 0x34], 0xfffc
mov byte [ebp - 0x19], bl
cmp byte [ebp - 0x19], 0
je 0x10002c6b
push ebx
push 0x1416
push ebx
call dword [sym.imp.GDI32.dll_GetBitmapBits]
mov dword [ebp - 0x24], 0x4135
cmp dword [ebp - 0x24], 0x4168
jle 0x10002ce2
mov esi, ebx
mov dword [ebp - 0x20], ebx
mov dword [ebp - 0x18], ebx
mov eax, ebx
mov dword [ebp - 0x38], 0x381b
mov dword [ebp - 0x30], eax
mov edi, esi
mov dword [ebp - 0x3c], ebx
mov ecx, eax
mov esi, ebx
shl edi, cl
mov eax, edi
mov ecx, 0x1006f038
or eax, esi
cdq
push edx
push eax
call fcn.10003f1c
inc esi
cmp esi, 0xe15
jl 0x10002c9a
mov eax, dword [ebp - 0x30]
mov edi, dword [ebp - 0x18]
add eax, edi
dec dword [ebp - 0x38]
mov esi, dword [ebp - 0x20]
mov dword [ebp - 0x30], eax
jne 0x10002c8f
inc edi
mov dword [ebp - 0x18], edi
cmp edi, 0x26c4
jl 0x10002c83
inc esi
mov dword [ebp - 0x20], esi
cmp esi, 0x3306
jl 0x10002c80
mov esi, dword [ebp - 0x2c]
mov byte [ebp - 0x19], bl
cmp byte [ebp - 0x19], 0
je 0x10002cf2
push ebx
call dword [sym.imp.KERNEL32.dll_GlobalLock]
mov byte [ebp - 4], 5
cmp dword [ebp - 0x24], 0x3d4f
jge 0x10002d2f
mov edx, str.djkhym_jqwchocff_vgwhwsgum_gxrls_lukrkpj_cvrkvj_mylmwlm
mov ecx, 0x1006f038
call fcn.1000567a
jmp 0x10002d2f
xor eax, eax
mov dword [ebp - 4], 4
mov word [ebp + esi*2 - 0x12c], ax
inc esi
mov dword [ebp - 0x2c], esi
jmp 0x10002c45
mov dword [ebp - 0x20], 0xfffffff7
mov dword [ebp - 0x2c], 0x3f9e923e
mov dword [ebp - 0x28], ebx
jmp 0x10002d6d
mov eax, dword [ebp - 0x28]
mov dword [ebp + eax*4 - 0xa0], 0xffffffff
inc dword [ebp - 0x28]
cmp dword [ebp - 0x28], 2
jl 0x10002d5c
push 3
mov dword [ebp - 0x28], ebx
pop esi
jmp 0x10002d8c
mov eax, dword [ebp - 0x28]
mov dword [ebp + eax*4 - 0xd0], 0xef20fe6e
inc dword [ebp - 0x28]
cmp dword [ebp - 0x28], esi
jl 0x10002d7b
mov dword [ebp - 0xc8], ebx
cmp dword [ebp - 0xc8], 1
jg 0x10002fb5
mov dword [ebp - 0x24], 0x9b79
mov dword [ebp - 0x3c], 0xab1d6a56
inc dword [ebp - 0x24]
mov dword [ebp - 0x20], ebx
cmp dword [ebp - 0x20], 1
jg 0x10002faa
mov dword [ebp - 0x40], 0x6859
mov dword [ebp - 0x24], ebx
cmp dword [ebp - 0x24], 1
jg 0x10002fa2
mov eax, dword [ebp - 0x20]
cmp dword [ebp + eax*4 - 0xa0], 1
je 0x10002ef3
mov dword [ebp - 0x18], ebx
jmp 0x10002dfd
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x1d0], 0xb441a62a
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], esi
jl 0x10002dec
mov dword [ebp - 0x18], 0x627e
cmp dword [ebp - 0x18], 0x6508
jle 0x10002ea4
push 0x2254
call dword [sym.imp.USER32.dll_GetKeyboardLayout]
mov edi, ebx
mov esi, ebx
mov eax, ebx
mov dword [ebp - 0x2c], 0x5d2
mov dword [ebp - 0x38], eax
mov ecx, ebx
and eax, edi
mov dword [ebp - 0x30], ecx
mov dword [ebp - 0x3c], eax
xor eax, ecx
lea ecx, [ebp - 0x218]
cdq
push edx
push eax
call fcn.10002769
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x10002e55
mov eax, dword [eax]
push eax
call fcn.1003ed0a
pop ecx
push ebx
push 1
lea ecx, [ebp - 0x218]
call fcn.10001539
mov ecx, dword [ebp - 0x30]
mov eax, dword [ebp - 0x3c]
inc ecx
mov dword [ebp - 0x30], ecx
cmp ecx, 0x3bef
jl 0x10002e3b
mov eax, dword [ebp - 0x38]
add eax, esi
dec dword [ebp - 0x2c]
mov dword [ebp - 0x38], eax
jne 0x10002e31
inc esi
cmp esi, 0x4469
jl 0x10002e25
inc edi
cmp edi, 0x6ded
jl 0x10002e23
call dword [sym.imp.GDI32.dll_GdiFlush]
push 3
pop esi
mov eax, dword [ebp - 0x24]
cmp dword [ebp + eax*4 - 0xa0], ebx
jne 0x10002fa2
cmp dword [ebp - 0x18], 0x5fbc
jge 0x10002ec8
push str.ypanbrsf_aybz_lwwc
call fcn.1003ed0a
pop ecx
mov dword [ebp - 4], 4
mov dword [ebp - 0x2c], 1
cmp dword [ebp - 0x2c], ebx
jl 0x10002f94
mov dword [ebp - 0x30], 0x7c6
inc dword [ebp - 0x30]
dec dword [ebp - 0x2c]
jns 0x10002edf
jmp 0x10002f94
mov dword [ebp - 0x30], 0x62c
cmp dword [ebp - 0x30], 0x64d
jle 0x10002f62
mov ecx, ebx
mov dword [ebp - 0x2c], ebx
mov edi, ebx
mov esi, ebx
lea eax, [esi + edi]
or eax, ecx
lea ecx, [ebp - 0x248]
cdq
push edx
push eax
call fcn.10002769
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x10002f29
mov eax, dword [eax]
push eax
call fcn.1003ed0a
pop ecx
push ebx
push 1
lea ecx, [ebp - 0x248]
call fcn.10001539
mov ecx, dword [ebp - 0x2c]
inc esi
cmp esi, 0x3471
jl 0x10002f0c
inc edi
cmp edi, 0x2a0a
jl 0x10002f0a
inc ecx
mov dword [ebp - 0x2c], ecx
cmp ecx, 0x4b7e
jl 0x10002f08
push 3
pop esi
mov eax, dword [ebp - 0xc8]
mov ecx, dword [ebp + eax*4 - 0xa0]
mov eax, dword [ebp - 0x20]
mov dword [ebp + eax*4 - 0xa0], ecx
cmp dword [ebp - 0x30], 0x3b9
jge 0x10002f8d
push str.adsl_yzewxqh_aykj_pzkwsgfow_lfyyekx_ovlxrgqg_wrpujstjf_aiva_hktorugjq
call fcn.1003ed0a
pop ecx
mov dword [ebp - 4], 4
mov eax, dword [ebp - 0x40]
mov dword [ebp - 0x3c], eax
inc dword [ebp - 0x24]
jmp 0x10002dcc
inc dword [ebp - 0x20]
jmp 0x10002db8
inc dword [ebp - 0xc8]
jmp 0x10002d97
push dword [ebp - 0xb8]
lea ecx, [ebp - 0x198]
call fcn.100013b7
mov byte [ebp - 4], 0xb
mov dword [ebp - 0x20], 0x1f7e2799
mov dword [ebp - 0x20], 0xffffffea
jmp 0x10003002
mov byte [ebp - 0x19], bl
cmp byte [ebp - 0x19], 0
je 0x10002ffa
push 0xf7e
push 0x47c
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_SetWindowLongA]
cmp dword [ebp - 0x20], ebx
jne 0x10003008
dec dword [ebp - 0x20]
cmp dword [ebp - 0x20], 0xffffffe5
je 0x10002fda
mov dword [ebp - 0x24], 8
push 0xffffffffffffffef
mov dword [ebp - 0x24], ebx
pop edi
cmp dword [ebp - 0x24], edi
jge 0x100030b1
xor eax, eax
inc eax
mov dword [ebp - 0x20], 0x53aa9ac7
mov dword [ebp - 0x30], eax
mov dword [ebp - 0x30], eax
mov dword [ebp - 0x20], 0xffffffee
jmp 0x1000309f
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x40], 0x93bd5de1
mov dword [ebp - 0x18], 0xfffffff3
cmp dword [ebp - 0x18], edi
jle 0x1000309c
mov dword [ebp - 0x3c], 0xf9b6917a
mov eax, dword [ebp - 0x20]
neg eax
sbb eax, eax
xor edx, edx
neg eax
add eax, 9
mov dword [ebp - 0x30], eax
mov eax, dword [ebp - 0x30]
mov dword [ebp - 0x30], eax
mov ecx, dword [ebp - 0x30]
mov eax, dword [ebp - 0x24]
cmp ecx, eax
setge dl
xor ecx, ecx
cmp edx, 0xfecafe8
setl cl
xor eax, eax
cmp ecx, 1
setle al
mov dword [ebp - 0x3c], eax
cmp dword [ebp - 0x40], ebx
jne 0x10003099
dec dword [ebp - 0x18]
cmp dword [ebp - 0x18], edi
jg 0x1000304d
xor eax, eax
inc eax
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], 0xd
jg 0x10003037
dec dword [ebp - 0x24]
cmp dword [ebp - 0x24], edi
jl 0x10003021
mov dword [ebp - 0x20], 5
mov dword [ebp - 0x28], 0xfffffff7
mov dword [ebp - 0x18], ebx
jmp 0x100030d5
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0xf4], 0xfffffffd
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 4
jl 0x100030c4
mov dword [ebp - 0x20], ebx
jmp 0x100031c2
mov dword [ebp - 0x24], 0x5d09ea9
mov dword [ebp - 0x2c], 1
mov dword [ebp - 0x24], esi
cmp dword [ebp - 0x24], ebx
jl 0x100031bf
mov dword [ebp - 0x3c], 0x9973063d
mov ecx, 0x9dade661
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp + eax*4 - 0xf4]
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x28]
neg eax
sbb eax, eax
neg eax
cmp ecx, eax
sbb ecx, ecx
add ecx, 0xfffffffd
neg ecx
sbb ecx, ecx
xor eax, eax
inc ecx
cmp ecx, 0x1720
setg al
xor edx, edx
sub eax, dword [ebp - 0x24]
mov dword [ebp - 0x2c], eax
mov ecx, dword [ebp - 0x2c]
mov eax, dword [ebp - 0xf0]
neg ecx
cmp ecx, eax
mov eax, dword [ebp - 0x20]
setle dl
xor ecx, ecx
cmp eax, edx
setl cl
xor eax, eax
cmp ecx, 0x1213072c
mov dword [ebp - 0xf4], ecx
setl al
xor edx, edx
shl eax, 3
mov dword [ebp - 0x3c], eax
mov ecx, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x2c]
cmp ecx, eax
mov eax, dword [ebp - 0x24]
setne dl
xor ecx, ecx
mov eax, dword [ebp + eax*4 - 0xf4]
cmp eax, edx
mov eax, dword [ebp - 0x28]
setne cl
xor edx, edx
neg ecx
cmp ecx, 0xffffffff
setge dl
sub edx, 0x1359287a
neg edx
sbb edx, edx
xor ecx, ecx
neg edx
add eax, edx
cmp eax, 1
setg cl
mov dword [ebp - 0xf4], ecx
dec dword [ebp - 0x24]
jns 0x100030fd
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], 0x18
jl 0x100030e3
mov word [ebp - 0x68], 0xa900
mov dword [ebp - 0x24], 0x45cd
mov dword [ebp - 0x20], esi
mov eax, dword [ebp - 0x24]
mov dword [ebp - 0x20], eax
mov dword [ebp - 0x24], 0xfffffff1
jmp 0x1000324f
xor edx, edx
mov dword [ebp - 0x30], 5
mov ecx, dword [ebp - 0x20]
mov eax, dword [ebp - 0x20]
cmp ecx, eax
setg dl
cmp esi, edx
sbb eax, eax
xor edx, edx
neg eax
cmp eax, 0x2215256e
setg dl
xor ecx, ecx
sub edx, dword [ebp - 0x30]
add edx, dword [ebp - 0x24]
mov eax, dword [ebp - 0x20]
cmp edx, eax
mov eax, dword [ebp - 0x24]
setl cl
add eax, 6
xor edx, edx
cmp eax, ecx
setg dl
xor ecx, ecx
add edx, dword [ebp - 0x20]
mov eax, dword [ebp - 0x30]
cmp edx, eax
setle cl
mov dword [ebp - 0x20], ecx
mov byte [ebp - 0x19], bl
cmp byte [ebp - 0x19], 0
je 0x1000324c
push ebx
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], 9
je 0x100031eb
push 0x5c
pop eax
mov word [ebp - 0x64], ax
xor ecx, ecx
mov dword [ebp - 0x3c], 0x7dc4b4e1
inc ecx
mov dword [ebp - 0x18], ebx
jmp 0x1000327c
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0xd8], 0x85299dad
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], ecx
jl 0x1000326b
mov eax, dword [ebp - 0xd8]
mov dword [ebp - 0x3c], eax
mov byte [ebp - 0x19], bl
cmp byte [ebp - 0x19], 0
je 0x1000329e
push ebx
push ebx
call dword [sym.imp.USER32.dll_LoadCursorA]
xor ecx, ecx
inc ecx
xor eax, eax
mov word [ebp - 0x62], ax
mov eax, 0x33fcb50b
mov dword [ebp - 0x8c], eax
mov dword [ebp - 0x88], eax
mov dword [ebp - 0x84], eax
mov dword [ebp - 0x80], eax
mov dword [ebp - 0x18], ebx
jmp 0x100032d4
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0xa8], 0xeac8
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 2
jl 0x100032c3
mov dword [ebp - 0x88], ecx
cmp dword [ebp - 0x88], ebx
jl 0x100034aa
mov dword [ebp - 0x18], ecx
mov dword [ebp - 0x28], 0xfffffff7
mov dword [ebp - 0x18], ebx
jmp 0x10003308
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x1b4], ecx
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 4
jl 0x100032fb
mov dword [ebp - 0x18], ecx
cmp dword [ebp - 0x18], ebx
jl 0x1000345d
mov dword [ebp - 0x28], ebx
jmp 0x10003329
mov eax, dword [ebp - 0x28]
mov dword [ebp + eax*4 - 0x44], ebx
inc dword [ebp - 0x28]
cmp dword [ebp - 0x28], ecx
jl 0x1000331f
mov dword [ebp - 0x28], ebx
jmp 0x10003344
mov eax, dword [ebp - 0x28]
mov dword [ebp + eax*4 - 0x90], 6
inc dword [ebp - 0x28]
cmp dword [ebp - 0x28], ecx
jl 0x10003333
mov dword [ebp - 0x44], ebx
jmp 0x1000344b
mov dword [ebp - 0x20], 0x47597a61
mov dword [ebp - 0x24], ecx
mov dword [ebp - 0x20], ecx
cmp dword [ebp - 0x20], ebx
jl 0x10003418
cmp dword [ebp - 0x44], ebx
jne 0x10003379
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], ebx
jne 0x10003379
mov ecx, ebx
xor edx, edx
cmp ecx, 7
setne dl
sub edx, dword [ebp - 0x44]
mov eax, dword [ebp - 0x88]
neg edx
sbb edx, edx
xor ecx, ecx
inc edx
mov eax, dword [ebp + eax*4 - 0xa8]
cmp edx, eax
mov eax, dword [ebp - 0x88]
setle cl
xor ebx, ebx
cmp ecx, esi
mov edx, dword [ebp + eax*4 - 0xa8]
setl bl
mov eax, dword [ebp - 0x20]
xor ecx, ecx
cmp ebx, eax
setne cl
xor ebx, ebx
add edx, ecx
je 0x100033cd
cmp dword [ebp - 0x44], ebx
je 0x100033cd
xor ecx, ecx
inc ecx
mov edx, ecx
jmp 0x100033d2
xor ecx, ecx
mov edx, ebx
inc ecx
mov eax, dword [ebp - 0x88]
imul eax, edx
mov dword [ebp - 0x90], eax
mov dword [ebp - 0x1b4], eax
mov eax, dword [ebp - 0x44]
mov eax, dword [ebp - 0x88]
mov eax, dword [ebp + eax*4 - 0xa8]
mov eax, dword [ebp - 0x90]
mov eax, dword [ebp - 0x44]
mov eax, dword [ebp - 0x44]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x24]
mov dword [ebp - 0x28], eax
dec dword [ebp - 0x20]
jns 0x10003367
mov dword [ebp - 0x24], ebx
cmp dword [ebp - 0x24], ebx
jl 0x10003448
mov byte [ebp - 0x19], bl
cmp byte [ebp - 0x19], 0
je 0x10003440
push 0x1c7b
push 0x16c1
push ecx
push ebx
push 0x194b
call dword [sym.imp.USER32.dll_MsgWaitForMultipleObjects]
dec dword [ebp - 0x24]
push 1
pop ecx
jns 0x10003420
inc dword [ebp - 0x44]
cmp dword [ebp - 0x44], ecx
jle 0x10003351
dec dword [ebp - 0x18]
jns 0x1000331a
mov dword [ebp - 0x28], ecx
cmp dword [ebp - 0x28], ebx
jl 0x1000349e
mov byte [ebp - 0x19], bl
cmp byte [ebp - 0x19], 0
je 0x10003496
push 0xda1
push 0x8b5
push 0x244
push 0x1467
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_IntersectClipRect]
dec dword [ebp - 0x28]
jns 0x10003465
xor ecx, ecx
inc ecx
dec dword [ebp - 0x88]
jns 0x100032ec
xor eax, eax
mov dword [ebp - 0x108], 7
mov word [ebp - 0x11c], ax
lea ecx, [ebp - 0x11c]
lea eax, [ebp - 0x64]
mov dword [ebp - 0x10c], ebx
push eax
call fcn.10004211
mov byte [ebp - 4], 0xc
mov dword [ebp - 0x34], 0xffffffff
mov dword [ebp - 0x34], 0xc781ced8
mov dword [ebp - 0x34], 0xc7979b38
mov dword [ebp - 0x34], 0xe4e91208
mov dword [ebp - 0x34], ebx
mov dword [ebp - 0x34], 6
push 3
pop edx
mov dword [ebp - 0x104], edx
mov dword [ebp - 0x100], edx
mov dword [ebp - 0xfc], edx
mov dword [ebp - 0xf8], edx
mov dword [ebp - 0x28], 0xcfe983d4
mov dword [ebp - 0x18], ebx
jmp 0x10003534
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x98], 0x571177e8
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 2
jl 0x10003523
mov dword [ebp - 0x94], ebx
cmp dword [ebp - 0x94], 0xfffffffd
jne 0x10003729
mov dword [ebp - 0x20], 0x1dbeccce
xor ecx, ecx
mov dword [ebp - 0x34], 0x7af9ca3e
inc ecx
mov dword [ebp - 0x18], ebx
jmp 0x10003574
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0xd4], 0xa4d63a88
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], ecx
jl 0x10003563
mov dword [ebp - 0x40], 0x5671
cmp dword [ebp - 0x40], 0x5848
jle 0x100035e6
mov edi, ebx
mov esi, ebx
mov dword [ebp - 0x18], ebx
mov eax, esi
mov dword [ebp - 0x2c], 0x1b2b
mov dword [ebp - 0x38], eax
mov esi, eax
mov dword [ebp - 0x30], 0x251f
mov eax, esi
mov ecx, 0x1006f038
or eax, edi
cdq
push edx
push eax
call fcn.10003f1c
dec esi
dec dword [ebp - 0x30]
jne 0x100035a5
mov eax, dword [ebp - 0x38]
dec eax
dec dword [ebp - 0x2c]
mov dword [ebp - 0x38], eax
jne 0x1000359c
mov esi, dword [ebp - 0x18]
inc esi
mov dword [ebp - 0x18], esi
cmp esi, 0x17eb
jl 0x10003590
inc edi
cmp edi, 0x77b3
jl 0x1000358b
xor ecx, ecx
push 3
inc ecx
pop edx
mov dword [ebp - 0x20], ebx
jmp 0x100036ca
mov dword [ebp - 0x34], 7
mov dword [ebp - 0x34], 0xfffffff7
mov dword [ebp - 0x34], 0xffffffff
mov dword [ebp - 0x34], 0x96950a4b
mov dword [ebp - 0x34], ecx
mov dword [ebp - 0x34], 0xfffffff9
mov dword [ebp - 0x34], 0x9beab1d6
mov dword [ebp - 0x34], 0xf08e2294
mov dword [ebp - 0x34], 0xf066b7a7
mov dword [ebp - 0x34], 0x8877e06
mov dword [ebp - 0x34], ecx
mov dword [ebp - 0x34], 0x5004286a
mov dword [ebp - 0x34], ecx
mov dword [ebp - 0x34], 0xcb51404f
mov dword [ebp - 0x24], ebx
mov dword [ebp - 0x34], 0xfffffffc
mov dword [ebp - 0x34], 0x6d4c01e0
mov dword [ebp - 0x34], 0xfffffffc
mov dword [ebp - 0x34], 0xc1d66bd5
mov dword [ebp - 0x34], ebx
mov dword [ebp - 0x34], ecx
mov dword [ebp - 0x168], edx
mov dword [ebp - 0x164], edx
mov dword [ebp - 0x160], edx
mov dword [ebp - 0x15c], edx
mov dword [ebp - 0x18], ebx
jmp 0x10003697
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x258], 0xa9d2e819
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 4
jl 0x10003686
dec dword [ebp - 0x28]
mov dword [ebp - 0x24], ebx
cmp dword [ebp - 0x24], edx
jg 0x100036c7
mov eax, dword [ebp - 0x24]
mov ecx, dword [ebp + eax*4 - 0x104]
mov eax, dword [ebp - 0x24]
mov dword [ebp + eax*4 - 0x104], ecx
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], edx
jle 0x100036a8
xor ecx, ecx
inc ecx
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], 8
je 0x100035ee
mov byte [ebp - 4], 0xd
cmp dword [ebp - 0x40], 0x54e4
jge 0x1000370e
mov edx, str.imurd_yqxr_qpqqajga_xbamrlul_qqjmoqcs_uwni_bkbviyw_dfdda_bnybxn
mov ecx, 0x1006f038
call fcn.1000567a
jmp 0x1000370e
mov dword [ebp - 4], 0xc
mov eax, dword [ebp - 0xd4]
dec dword [ebp - 0x94]
push 3
pop edx
jmp 0x10003540
mov dword [ebp - 0x64], ebx
mov dword [ebp - 0x2c], 0xe1b61bab
mov dword [ebp - 0x24], 0xcd3860a4
mov dword [ebp - 0x20], 0xfffffffe
mov dword [ebp - 0x34], 0xffffffff
mov dword [ebp - 0x3c], 1
mov dword [ebp - 0x18], ebx
jmp 0x10003762
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x78], 1
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 2
jl 0x10003754
mov dword [ebp - 0x78], 9
cmp dword [ebp - 0x78], 7
jl 0x10003a06
mov dword [ebp - 0x28], 0x4e7937d8
mov dword [ebp - 0x20], 0xffffffff
mov dword [ebp - 0x18], ebx
jmp 0x1000379d
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0xb4], 0xe9d070fe
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], edx
jl 0x1000378c
mov dword [ebp - 0x28], ebx
jmp 0x10003888
mov dword [ebp - 0x18], 0x74c3
mov dword [ebp - 0x40], 0xabb7
mov dword [ebp - 0x3c], 0x3b016fef
mov eax, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x2c]
imul edx, dword [ebp - 0x28], 0x23cc
sub edx, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x18]
neg edx
sbb edx, edx
xor ecx, ecx
inc edx
cmp eax, edx
setl cl
mov dword [ebp - 0x24], ecx
cmp dword [ebp - 0x24], ebx
jne 0x100037f2
cmp dword [ebp - 0x28], ebx
jne 0x100037f2
mov ecx, ebx
jmp 0x100037f5
xor ecx, ecx
inc ecx
mov eax, dword [ebp - 0x18]
imul eax, ecx
mov dword [ebp - 0x20], eax
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x28]
mov dword [ebp - 0xb0], eax
test eax, eax
je 0x10003814
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x28]
cmp dword [ebp - 0x34], ebx
je 0x10003822
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x20]
xor ecx, ecx
mov eax, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x3c]
add eax, 7
cmp eax, 2
setg cl
mov dword [ebp - 0x20], ecx
xor ecx, ecx
mov eax, dword [ebp - 0x20]
test eax, eax
setg cl
sub ecx, dword [ebp - 0x78]
mov eax, dword [ebp - 0x24]
neg ecx
sbb ecx, ecx
inc ecx
imul eax, ecx
neg eax
jne 0x10003861
cmp dword [ebp - 0x18], ebx
jne 0x10003861
mov edx, ebx
jmp 0x10003864
xor edx, edx
inc edx
mov eax, dword [ebp - 0x40]
xor ecx, ecx
cmp eax, edx
setl cl
xor eax, eax
cmp eax, ecx
sbb edx, edx
xor ecx, ecx
inc edx
sub edx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x74]
cmp edx, eax
setge cl
mov dword [ebp - 0x20], ecx
dec dword [ebp - 0x28]
cmp dword [ebp - 0x28], 0xffffffe4
jl 0x100037aa
mov dword [ebp - 0x24], ebx
cmp dword [ebp - 0x24], 2
jg 0x100039fb
mov dword [ebp - 0x3c], 0xc33
mov dword [ebp - 0x38], 2
mov dword [ebp - 0x3c], 0x644e
cmp dword [ebp - 0x3c], 0x6796
jle 0x10003924
mov edi, ebx
mov dword [ebp - 0x20], ebx
mov esi, ebx
mov dword [ebp - 0x18], ebx
mov ecx, esi
mov dword [ebp - 0x40], edi
mov esi, edi
mov dword [ebp - 0x30], ebx
shl esi, cl
mov edi, ebx
mov eax, ebx
mov dword [ebp - 0x30], 0x6043
mov dword [ebp - 0x40], eax
or eax, esi
mov ecx, 0x1006f038
cdq
push edx
push eax
call fcn.10003f1c
mov eax, dword [ebp - 0x40]
add eax, edi
dec dword [ebp - 0x30]
mov dword [ebp - 0x40], eax
jne 0x100038e1
inc edi
cmp edi, 0x7a75
jl 0x100038d5
mov esi, dword [ebp - 0x18]
mov edi, dword [ebp - 0x20]
inc esi
mov dword [ebp - 0x18], esi
cmp esi, 0x7c0d
jl 0x100038c7
inc edi
mov dword [ebp - 0x20], edi
cmp edi, 0x5c47
jl 0x100038c2
mov dword [ebp - 0x40], 1
mov byte [ebp - 4], 0xf
cmp dword [ebp - 0x3c], 0x62cc
jge 0x10003965
mov edx, str.jprehyv_epayz_ergvzfc_djtokfxnw_kvk_hytnd_gihm_faftslxr_lrgvqx_leghgv
mov ecx, 0x1006f038
call fcn.1000567a
jmp 0x10003965
mov dword [ebp - 4], 0xc
mov dword [ebp - 0x18], ebx
jmp 0x10003982
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x1bc], 6
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 2
jl 0x10003971
mov dword [ebp - 0x20], ebx
jmp 0x100039bc
mov byte [ebp - 0x19], bl
cmp byte [ebp - 0x19], 0
je 0x100039b9
push ebx
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
push 0xa53
push 0x64b
push 0x1d1
push 0x24aa
push ebx
call dword [sym.imp.USER32.dll_TrackPopupMenu]
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], 2
jle 0x1000398d
inc dword [ebp - 0x38]
mov eax, dword [ebp - 0xb4]
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp + eax*4 - 0xb4]
mov eax, dword [ebp - 0xb4]
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x38]
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0xb0]
neg eax
sbb eax, eax
neg eax
mov dword [ebp - 0x40], eax
inc dword [ebp - 0x24]
jmp 0x10003895
dec dword [ebp - 0x78]
push 3
pop edx
jmp 0x1000376f
push 0x5f
pop eax
push 2
mov dword [ebp - 0x48], 0x5101c200
mov ecx, ebx
mov word [ebp - 0x4c], ax
pop esi
cmp esi, 2
jne 0x10003a22
push esi
pop ecx
jmp 0x10003a4b
movzx edx, byte [ebp + esi - 0x47]
mov eax, esi
sub eax, ecx
movzx eax, byte [ebp + eax - 0x4a]
movzx ecx, word [ebp + eax*2 - 0x4c]
mov eax, ecx
and eax, edx
add eax, eax
sub ecx, eax
movzx eax, byte [ebp + esi - 0x48]
add ecx, edx
mov word [ebp + eax*2 - 0x4c], cx
mov ecx, ebx
add esi, 2
cmp esi, 4
jb 0x10003a19
xor eax, eax
mov dword [ebp - 0x16c], 7
mov word [ebp - 0x4a], ax
lea ecx, [ebp - 0x180]
mov word [ebp - 0x180], ax
lea eax, [ebp - 0x4c]
push eax
mov dword [ebp - 0x170], ebx
call fcn.10004211
mov byte [ebp - 4], 0x11
mov dword [ebp - 0x3c], 0x77cc
cmp dword [ebp - 0x3c], 0x7b32
jle 0x10003af1
mov esi, ebx
mov edi, ebx
mov ecx, edi
mov eax, esi
shl eax, cl
lea ecx, [ebp - 0x200]
cdq
push edx
push eax
call fcn.10002769
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x10003ab5
mov eax, dword [eax]
push eax
call fcn.1003ed0a
pop ecx
push ebx
push 1
lea ecx, [ebp - 0x200]
call fcn.10001539
inc edi
cmp edi, 0x6bd
jl 0x10003a97
inc esi
cmp esi, 0x6e9a
jl 0x10003a95
push ebx
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_SetTextColor]
cmp dword [ebp - 0x3c], 0x77b2
jge 0x10003b05
push str.qctgr_cgx_geijbj_zndwlz_tnspbnatg_betjh
call fcn.1003ed0a
pop ecx
mov dword [ebp - 4], 0x11
mov dword [ebp - 0x30], 0x494a
cmp dword [ebp - 0x30], 0x4c9a
jle 0x10003b92
mov ecx, ebx
mov dword [ebp - 0x2c], ebx
mov edi, ebx
mov dword [ebp - 0x40], ebx
mov esi, ebx
mov dword [ebp - 0x3c], ebx
mov eax, edi
mov dword [ebp - 0x34], ebx
cdq
mov edi, ebx
idiv esi
mov eax, ecx
mov ecx, edx
shl eax, cl
mov dword [ebp - 0x38], eax
mov esi, eax
mov eax, edi
mov ecx, 0x1006f038
and eax, esi
cdq
push edx
push eax
call fcn.10003f1c
inc edi
cmp edi, 0x3ee0
jl 0x10003b40
mov esi, dword [ebp - 0x3c]
mov edi, dword [ebp - 0x40]
inc esi
mov ecx, dword [ebp - 0x2c]
mov dword [ebp - 0x3c], esi
cmp esi, 0x6c07
jl 0x10003b2b
inc edi
mov dword [ebp - 0x40], edi
cmp edi, 0x59a2
jl 0x10003b26
inc ecx
mov dword [ebp - 0x2c], ecx
cmp ecx, 0x4bf
jl 0x10003b21
push 1
push ebx
push ebx
push ebx
call dword [sym.imp.ADVAPI32.dll_SetSecurityDescriptorDacl]
push 3
mov dword [ebp - 0x2c], ebx
pop ecx
jmp 0x10003bab
mov eax, dword [ebp - 0x2c]
mov dword [ebp + eax*4 - 0xc4], 0xe1757117
inc dword [ebp - 0x2c]
cmp dword [ebp - 0x2c], ecx
jl 0x10003b9a
mov byte [ebp - 4], 0x14
cmp dword [ebp - 0x30], 0x46a9
jge 0x10003bea
mov edx, str.acyqjh_mzwpjsu_kpn_bhekwtfev
mov ecx, 0x1006f038
call fcn.1000567a
jmp 0x10003bea
mov dword [ebp - 4], 0x11
mov dword [ebp - 0xc0], ebx
jmp 0x10003c23
mov dword [ebp - 0x2c], ebx
jmp 0x10003c0f
mov eax, dword [ebp - 0x2c]
mov dword [ebp + eax*4 - 0x138], 0xccce1e2c
inc dword [ebp - 0x2c]
cmp dword [ebp - 0x2c], 2
jl 0x10003bfe
cmp dword [ebp - 0x138], ebx
jne 0x10003c2c
dec dword [ebp - 0xc0]
cmp dword [ebp - 0xc0], 0xfffffff7
jge 0x10003bf9
mov dword [ebp - 0x4c], ebx
push dword [ebp - 0x10c]
cmp dword [ebp - 0x108], 8
lea eax, [ebp - 0x11c]
push ebx
cmovae eax, dword [ebp - 0x11c]
lea ecx, [ebp - 0x198]
push eax
call fcn.10004299
cmp eax, 0xffffffff
je 0x10003c75
push 0xffffffffffffffff
push ebx
lea ecx, [ebp - 0x180]
push ecx
push 1
push eax
lea ecx, [ebp - 0x198]
call fcn.10001d26
jmp 0x10003c2f
mov ecx, dword [ebp - 0x7c]
lea eax, [ebp - 0x198]
push eax
lea edx, [ebp - 0x150]
call fcn.10005851
pop ecx
push ebx
push 1
lea ecx, [ebp - 0x180]
call fcn.100016a5
push ebx
push 1
lea ecx, [ebp - 0x11c]
call fcn.100016a5
push ebx
push 1
lea ecx, [ebp - 0x198]
call fcn.100016a5
push ebx
push 1
lea ecx, [ebp - 0x150]
call fcn.100016a5
mov ecx, dword [ebp - 0xc]
mov eax, dword [ebp - 0x7c]
pop edi
pop esi
mov dword fs:[0], ecx
pop ebx
mov esp, ebp
pop ebp
ret