Function at 0x10012965
Capabilities:
Check os version
Contain obfuscated stackstrings
Delete directory

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x10076c5f
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
push ecx
sub esp, 0xb74
push ebx
push esi
push edi
mov dword [ebp - 0x10], esp
push 2
lea ecx, [ebp - 0x16c]
call fcn.100214a3
and dword [ebp - 4], 0
mov dword [ebp - 0x654], 1
mov dword [ebp - 0x650], 0x3e141b6b
mov dword [ebp - 0x680], 0xfffa
mov dword [ebp - 0x724], 0x44bb323f
mov dword [ebp - 0x600], 0xeb94
mov dword [ebp - 0x72c], 0x3aa9c1c7
mov dword [ebp - 0x214], 0
jmp 0x100129f0
mov eax, dword [ebp - 0x214]
inc eax
mov dword [ebp - 0x214], eax
cmp dword [ebp - 0x214], 2
jge 0x10012a0f
push dword [ebp - 0x214]
lea ecx, [ebp - 0x16c]
call fcn.10021541
and dword [eax], 0
jmp 0x100129e3
mov byte [ebp - 0xcb], 0
movzx eax, byte [ebp - 0xcb]
test eax, eax
je 0x10012a31
push 0x2c2
push 0xea6
call dword [sym.imp.USER32.dll_GetWindowLongW]
push 0
lea ecx, [ebp - 0x16c]
call fcn.10021541
cmp dword [eax], 1
jg 0x10012a4f
mov dword [ebp - 0x3a8], 1
jmp 0x10012a56
and dword [ebp - 0x3a8], 0
push 1
lea ecx, [ebp - 0x16c]
call fcn.10021541
mov ecx, dword [ebp - 0x3a8]
cmp ecx, dword [eax]
jg 0x10012a79
mov dword [ebp - 0x608], 1
jmp 0x10012a80
and dword [ebp - 0x608], 0
cmp dword [ebp - 0x608], 3
jb 0x10012a95
mov dword [ebp - 0x610], 1
jmp 0x10012a9c
and dword [ebp - 0x610], 0
cmp dword [ebp - 0x610], 0
jae 0x10012ab1
mov dword [ebp - 0x618], 1
jmp 0x10012ab8
and dword [ebp - 0x618], 0
mov eax, dword [ebp - 0x618]
add eax, 9
jne 0x10012af0
push 1
lea ecx, [ebp - 0x16c]
call fcn.10021541
cmp dword [eax], 0
jne 0x10012af0
push 0
lea ecx, [ebp - 0x16c]
call fcn.10021541
cmp dword [eax], 0
jne 0x10012af0
and dword [ebp - 0x620], 0
jmp 0x10012afa
mov dword [ebp - 0x620], 1
mov esi, dword [ebp - 0x620]
add esi, 0x2e4e
push 0
lea ecx, [ebp - 0x16c]
call fcn.10021541
cmp esi, dword [eax]
jle 0x10012b23
mov dword [ebp - 0x628], 1
jmp 0x10012b2a
and dword [ebp - 0x628], 0
mov eax, dword [ebp - 0x628]
sub eax, 4
jne 0x10012b50
push 1
lea ecx, [ebp - 0x16c]
call fcn.10021541
cmp dword [eax], 0
jne 0x10012b50
and dword [ebp - 0x6fc], 0
jmp 0x10012b5a
mov dword [ebp - 0x6fc], 1
push 1
lea ecx, [ebp - 0x16c]
call fcn.10021541
mov dword [ebp - 0x654], 0x81c5
mov eax, dword [ebp - 0x654]
mov dword [ebp - 0x650], eax
mov esi, dword [ebp - 0x680]
mov edi, dword [ebp - 0x650]
neg edi
neg edi
push 1
lea ecx, [ebp - 0x16c]
call fcn.10021541
add edi, dword [eax]
push 1
lea ecx, [ebp - 0x16c]
call fcn.10021541
sub edi, dword [eax]
imul edi, esi
test edi, edi
je 0x10012bd0
push 1
lea ecx, [ebp - 0x16c]
call fcn.10021541
cmp dword [eax], 0
je 0x10012bd0
mov dword [ebp - 0x5e4], 1
jmp 0x10012bd7
and dword [ebp - 0x5e4], 0
mov eax, dword [ebp - 0x5e4]
dec eax
cmp eax, 0xae055a24
ja 0x10012bf1
mov dword [ebp - 0x71c], 1
jmp 0x10012bf8
and dword [ebp - 0x71c], 0
push 1
lea ecx, [ebp - 0x16c]
call fcn.10021541
push 1
lea ecx, [ebp - 0x16c]
call fcn.10021541
mov eax, dword [ebp - 0x724]
mov dword [ebp - 0x600], eax
cmp dword [ebp - 0x600], 0
jne 0x10012c42
push 1
lea ecx, [ebp - 0x16c]
call fcn.10021541
cmp dword [eax], 0
jne 0x10012c42
and dword [ebp - 0x2bc], 0
jmp 0x10012c4c
mov dword [ebp - 0x2bc], 1
mov eax, dword [ebp - 0x2bc]
mov dword [ebp - 0x72c], eax
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x16c]
call fcn.10021525
mov dword [ebp - 0xaa8], 0xa5d6c05b
mov dword [ebp - 0xaa4], 0xa5d6c05b
mov dword [ebp - 0xaa0], 0xa5d6c05b
mov dword [ebp - 0xa9c], 0xa5d6c05b
mov dword [ebp - 0x1d8], 0xffffffff
mov dword [ebp - 0x734], 0xd7c1188e
mov dword [ebp - 0x914], 0
mov dword [ebp - 0x8f4], 0xffffffff
push 3
lea ecx, [ebp - 0x9f8]
call fcn.100214a3
mov dword [ebp - 4], 1
mov dword [ebp - 0x73c], 0
mov dword [ebp - 0x178], 0
jmp 0x10012cee
mov eax, dword [ebp - 0x178]
inc eax
mov dword [ebp - 0x178], eax
cmp dword [ebp - 0x178], 3
jge 0x10012d0d
push dword [ebp - 0x178]
lea ecx, [ebp - 0x9f8]
call fcn.10021541
or dword [eax], 0xffffffff
jmp 0x10012ce1
mov dword [ebp - 0x1d8], 3
jmp 0x10012d26
mov eax, dword [ebp - 0x1d8]
dec eax
mov dword [ebp - 0x1d8], eax
cmp dword [ebp - 0x1d8], 0
jl 0x10012eee
mov dword [ebp - 0x8fc], 0xfffffffa
mov dword [ebp - 0x904], 0x249aaed6
mov dword [ebp - 0x948], 4
mov dword [ebp - 0x950], 0x2530a9bc
mov dword [ebp - 0x958], 5
mov dword [ebp - 0x960], 0xfa4c
mov dword [ebp - 0x968], 1
mov dword [ebp - 0x970], 1
mov dword [ebp - 0x978], 0x3b0639e6
mov dword [ebp - 0x64], 0
jmp 0x10012d9d
mov eax, dword [ebp - 0x64]
inc eax
mov dword [ebp - 0x64], eax
cmp dword [ebp - 0x64], 4
jge 0x10012db3
mov eax, dword [ebp - 0x64]
mov dword [ebp + eax*4 - 0x8b4], 0xf5a9c4c8
jmp 0x10012d96
mov dword [ebp - 0x64], 0
jmp 0x10012dc3
mov eax, dword [ebp - 0x64]
inc eax
mov dword [ebp - 0x64], eax
cmp dword [ebp - 0x64], 1
jge 0x10012dd9
mov eax, dword [ebp - 0x64]
mov dword [ebp + eax*4 - 0x980], 0xfffffffb
jmp 0x10012dbc
push 4
pop eax
shl eax, 0
mov dword [ebp + eax - 0x8b4], 0
jmp 0x10012e07
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x8b4]
inc eax
push 4
pop ecx
shl ecx, 0
mov dword [ebp + ecx - 0x8b4], eax
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x8b4], 3
jg 0x10012ee9
mov dword [ebp - 0x988], 0
mov dword [ebp - 0x990], 0xffffffff
mov dword [ebp - 0x998], 0xffffffff
mov dword [ebp - 0x9a0], 1
mov dword [ebp - 0x9a8], 0xd49598aa
mov dword [ebp - 0x9b0], 1
mov dword [ebp - 0x9b8], 0xfffffffd
mov dword [ebp - 0x9c0], 0xfffffffd
mov dword [ebp - 0x9c8], 0x4039ee49
push 3
lea ecx, [ebp - 0x9e8]
call fcn.100214a3
mov byte [ebp - 4], 2
mov dword [ebp - 0x48c], 0x2d50
mov dword [ebp - 0x180], 0
jmp 0x10012ea9
mov eax, dword [ebp - 0x180]
inc eax
mov dword [ebp - 0x180], eax
cmp dword [ebp - 0x180], 3
jge 0x10012ec8
push dword [ebp - 0x180]
lea ecx, [ebp - 0x9e8]
call fcn.10021541
and dword [eax], 0
jmp 0x10012e9c
mov eax, dword [ebp - 0x48c]
inc eax
mov dword [ebp - 0x48c], eax
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x9e8]
call fcn.10021525
jmp 0x10012dec
jmp 0x10012d19
mov eax, dword [ebp - 0x734]
mov dword [ebp - 0x73c], eax
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x9f8]
call fcn.10021525
cmp dword [0x1061f908], 0
jne 0x100165b0
mov dword [ebp - 0x6c], 0xffffffff
mov dword [ebp - 0x2cc], 0
push 4
lea ecx, [ebp - 0x868]
call fcn.100214a3
mov dword [ebp - 4], 3
mov dword [ebp - 0x48], 0
jmp 0x10012f4b
mov eax, dword [ebp - 0x48]
inc eax
mov dword [ebp - 0x48], eax
cmp dword [ebp - 0x48], 3
jge 0x10012f61
mov eax, dword [ebp - 0x48]
mov dword [ebp + eax*4 - 0xadc], 0x15aa9614
jmp 0x10012f44
mov dword [ebp - 0x48], 0
jmp 0x10012f71
mov eax, dword [ebp - 0x48]
inc eax
mov dword [ebp - 0x48], eax
cmp dword [ebp - 0x48], 4
jge 0x10012f8d
push dword [ebp - 0x48]
lea ecx, [ebp - 0x868]
call fcn.10021541
mov dword [eax], 0xfffffff8
jmp 0x10012f6a
mov eax, dword [ebp - 0x6c]
mov dword [ebp - 0x9d0], eax
mov eax, dword [ebp - 0x6c]
mov dword [ebp - 0x9d8], eax
cmp dword [ebp - 0x6c], 0xffffffff
jg 0x10012fb1
mov dword [ebp - 0x2c4], 1
jmp 0x10012fb8
and dword [ebp - 0x2c4], 0
mov eax, dword [ebp - 0x6c]
cmp eax, dword [ebp - 0x2c4]
jg 0x10012fcf
mov dword [ebp - 0x224], 1
jmp 0x10012fd6
and dword [ebp - 0x224], 0
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x224]
mov dword [ebp + eax - 0xadc], ecx
mov eax, dword [ebp - 0x6c]
imul eax, dword [ebp - 0x224]
cmp eax, dword [ebp - 0x6c]
jge 0x1001300a
mov eax, 0xf6f97812
test eax, eax
jne 0x1001300a
and dword [ebp - 0x574], 0
jmp 0x10013014
mov dword [ebp - 0x574], 1
mov eax, dword [ebp - 0x574]
mov dword [ebp - 0x2cc], eax
cmp dword [ebp - 0x2cc], 1
je 0x10013035
mov dword [ebp - 0x494], 1
jmp 0x1001303c
and dword [ebp - 0x494], 0
mov eax, dword [ebp - 0x6c]
imul eax, dword [ebp - 0x494]
cmp eax, dword [ebp - 0x6c]
jle 0x10013057
mov dword [ebp - 0x2d4], 1
jmp 0x1001305e
and dword [ebp - 0x2d4], 0
push 3
lea ecx, [ebp - 0x868]
call fcn.10021541
mov ecx, dword [ebp - 0x2d4]
mov dword [eax], ecx
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x868]
call fcn.10021525
push 2
lea ecx, [ebp - 0x660]
call fcn.100214a3
mov dword [ebp - 4], 4
mov dword [ebp - 0x744], 0
mov dword [ebp - 0x74c], 0xffff
mov dword [ebp - 0x7b8], 0xe64f6cbc
mov dword [ebp - 0x2e4], 0x8461e707
mov dword [ebp - 0x1e0], 0
jmp 0x100130d7
mov eax, dword [ebp - 0x1e0]
inc eax
mov dword [ebp - 0x1e0], eax
cmp dword [ebp - 0x1e0], 2
jge 0x100130f6
push dword [ebp - 0x1e0]
lea ecx, [ebp - 0x660]
call fcn.10021541
and dword [eax], 0
jmp 0x100130ca
push 1
lea ecx, [ebp - 0x660]
call fcn.10021541
cmp dword [eax], 0
jne 0x10013155
mov esi, dword [ebp - 0x744]
push 0
lea ecx, [ebp - 0x660]
call fcn.10021541
cmp dword [ebp - 0x74c], 0
jne 0x10013136
cmp dword [ebp - 0x7b8], 0
jne 0x10013136
and dword [ebp - 0x64c], 0
jmp 0x10013140
mov dword [ebp - 0x64c], 1
cmp dword [ebp - 0x64c], 0x2e77e815
jne 0x10013155
and dword [ebp - 0x2dc], 0
jmp 0x1001315f
mov dword [ebp - 0x2dc], 1
push 1
lea ecx, [ebp - 0x660]
call fcn.10021541
mov eax, dword [eax]
imul eax, dword [ebp - 0x2dc]
test eax, eax
je 0x10013197
push 1
lea ecx, [ebp - 0x660]
call fcn.10021541
cmp dword [eax], 0
je 0x10013197
mov dword [ebp - 0x49c], 1
jmp 0x1001319e
and dword [ebp - 0x49c], 0
mov eax, dword [ebp - 0x49c]
mov dword [ebp - 0x2e4], eax
mov dword [ebp - 0x2e4], 0x16488a
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x660]
call fcn.10021525
mov dword [ebp - 0x188], 0xd6c05baf
mov dword [ebp - 0x188], 0xfffffff9
jmp 0x100131e6
mov eax, dword [ebp - 0x188]
dec eax
mov dword [ebp - 0x188], eax
cmp dword [ebp - 0x188], 0xfffffff5
je 0x100132bf
push 1
lea ecx, [ebp - 0x850]
call fcn.100214a3
mov dword [ebp - 4], 5
mov dword [ebp - 0x10c], 0
mov dword [ebp - 0x1e8], 0
jmp 0x1001322a
mov eax, dword [ebp - 0x1e8]
inc eax
mov dword [ebp - 0x1e8], eax
cmp dword [ebp - 0x1e8], 1
jge 0x10013249
push dword [ebp - 0x1e8]
lea ecx, [ebp - 0x850]
call fcn.10021541
and dword [eax], 0
jmp 0x1001321d
mov dword [ebp - 0x10c], 0
jmp 0x10013262
mov eax, dword [ebp - 0x10c]
inc eax
mov dword [ebp - 0x10c], eax
cmp dword [ebp - 0x10c], 0
jg 0x100132ab
mov byte [ebp - 0xc9], 0
movzx eax, byte [ebp - 0xc9]
test eax, eax
je 0x10013291
push 0
push 0
push 0xd1c
push 0x1ef3
call dword [sym.imp.USER32.dll_PostMessageA]
push dword [ebp - 0x10c]
lea ecx, [ebp - 0x850]
call fcn.10021541
cmp dword [eax], 0
je 0x100132a9
jmp 0x10013255
jmp 0x10013255
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x850]
call fcn.10021525
jmp 0x100131d9
mov byte [ebp - 0x138], 6
mov byte [ebp - 0x137], 0xc0
mov byte [ebp - 0x136], 7
mov byte [ebp - 0x135], 1
mov byte [ebp - 0x134], 3
mov byte [ebp - 0x133], 0x5c
mov byte [ebp - 0x132], 4
mov byte [ebp - 0x131], 0xb
mov byte [ebp - 0x130], 1
mov byte [ebp - 0x12f], 0
mov byte [ebp - 0x12e], 0xa
mov byte [ebp - 0x12d], 9
mov byte [ebp - 0x12c], 0
mov byte [ebp - 0x12b], 0x27
mov byte [ebp - 0x12a], 2
mov byte [ebp - 0x129], 0x7e
mov byte [ebp - 0x128], 0x70
mov byte [ebp - 0x127], 2
mov byte [ebp - 0x126], 0x39
mov byte [ebp - 0x125], 8
mov byte [ebp - 0x124], 0x5c
mov byte [ebp - 0x123], 5
mov byte [ebp - 0x122], 0x42
mov byte [ebp - 0x121], 9
mov byte [ebp - 0x120], 8
mov byte [ebp - 0x11f], 0xb
mov byte [ebp - 0x11e], 8
xor eax, eax
inc eax
shl eax, 0
movzx eax, byte [ebp + eax - 0x138]
and eax, 0xf3
xor ecx, ecx
inc ecx
shl ecx, 0
movzx ecx, byte [ebp + ecx - 0x138]
or ecx, 0xf3
sub ecx, eax
xor eax, eax
inc eax
imul eax, eax, 0
movzx eax, byte [ebp + eax - 0x138]
mov word [ebp + eax*2 - 0x8e0], cx
mov dword [ebp - 0x50], 0
push 4
lea ecx, [ebp - 0x75c]
call fcn.100214a3
mov dword [ebp - 4], 6
mov dword [ebp - 0xd4], 8
mov dword [ebp - 0x5c], 0
jmp 0x100133f0
mov eax, dword [ebp - 0x5c]
inc eax
mov dword [ebp - 0x5c], eax
cmp dword [ebp - 0x5c], 4
jge 0x1001340c
push dword [ebp - 0x5c]
lea ecx, [ebp - 0x75c]
call fcn.10021541
mov dword [eax], 0xf9b2
jmp 0x100133e9
mov dword [ebp - 0x5c], 0
jmp 0x1001341c
mov eax, dword [ebp - 0x5c]
inc eax
mov dword [ebp - 0x5c], eax
cmp dword [ebp - 0x5c], 3
jge 0x10013432
mov eax, dword [ebp - 0x5c]
mov dword [ebp + eax*4 - 0xae8], 9
jmp 0x10013415
mov dword [ebp - 0x50], 0xfffffff7
jmp 0x10013442
mov eax, dword [ebp - 0x50]
inc eax
mov dword [ebp - 0x50], eax
cmp dword [ebp - 0x50], 4
jge 0x1001358c
push 2
lea ecx, [ebp - 0x2a0]
call fcn.100214a3
mov byte [ebp - 4], 7
mov dword [ebp - 0x190], 0
jmp 0x10013476
mov eax, dword [ebp - 0x190]
inc eax
mov dword [ebp - 0x190], eax
cmp dword [ebp - 0x190], 2
jge 0x10013498
push dword [ebp - 0x190]
lea ecx, [ebp - 0x2a0]
call fcn.10021541
mov dword [eax], 0xd5816210
jmp 0x10013469
push 1
lea ecx, [ebp - 0x2a0]
call fcn.10021541
and dword [eax], 0
jmp 0x100134ce
push 1
lea ecx, [ebp - 0x2a0]
call fcn.10021541
mov dword [ebp - 0x57c], eax
mov eax, dword [ebp - 0x57c]
mov eax, dword [eax]
inc eax
mov ecx, dword [ebp - 0x57c]
mov dword [ecx], eax
push 1
lea ecx, [ebp - 0x2a0]
call fcn.10021541
cmp dword [eax], 4
jge 0x10013502
push 1
lea ecx, [ebp - 0x2a0]
call fcn.10021541
push dword [eax]
lea ecx, [ebp - 0x75c]
call fcn.10021541
mov dword [eax], 0xfff9
jmp 0x100134aa
mov esi, dword [ebp - 0x50]
push 0
lea ecx, [ebp - 0x2a0]
call fcn.10021541
cmp dword [eax], esi
jg 0x10013522
mov dword [ebp - 0x2ec], 1
jmp 0x10013529
and dword [ebp - 0x2ec], 0
imul eax, dword [ebp - 0x2ec], 0xf37c
mov dword [ebp - 0xd4], eax
mov esi, dword [ebp - 0xd4]
push 1
lea ecx, [ebp - 0x2a0]
call fcn.10021541
cmp esi, dword [eax]
jle 0x1001355c
mov dword [ebp - 0x4a4], 1
jmp 0x10013563
and dword [ebp - 0x4a4], 0
push 1
lea ecx, [ebp - 0x2a0]
call fcn.10021541
mov ecx, dword [ebp - 0x4a4]
mov dword [eax], ecx
mov byte [ebp - 4], 6
lea ecx, [ebp - 0x2a0]
call fcn.10021525
jmp 0x1001343b
push 0
lea ecx, [ebp - 0x75c]
call fcn.10021541
cmp dword [eax], 0
jne 0x100135aa
mov dword [ebp - 0x2f4], 1
jmp 0x100135b1
and dword [ebp - 0x2f4], 0
mov eax, dword [ebp - 0xd4]
cmp eax, dword [ebp - 0x2f4]
je 0x100135cb
mov dword [ebp - 0x5ec], 1
jmp 0x100135d2
and dword [ebp - 0x5ec], 0
cmp dword [ebp - 0x50], 0xabc2
jg 0x100135e7
mov dword [ebp - 0x278], 1
jmp 0x100135ee
and dword [ebp - 0x278], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x278]
mov dword [ebp + eax - 0xae8], ecx
mov eax, dword [ebp - 0x5ec]
sub eax, dword [ebp - 0x278]
je 0x10013621
cmp dword [ebp - 0x50], 0
je 0x10013621
mov dword [ebp - 0x2fc], 1
jmp 0x10013628
and dword [ebp - 0x2fc], 0
mov eax, dword [ebp - 0x2fc]
mov dword [ebp - 0x50], eax
mov esi, dword [ebp - 0x50]
push 1
lea ecx, [ebp - 0x75c]
call fcn.10021541
cmp esi, dword [eax]
jge 0x10013651
mov dword [ebp - 0x4ac], 1
jmp 0x10013658
and dword [ebp - 0x4ac], 0
xor eax, eax
sub eax, dword [ebp - 0x4ac]
jne 0x10013674
cmp dword [ebp - 0xd4], 0
jne 0x10013674
and dword [ebp - 0x304], 0
jmp 0x1001367e
mov dword [ebp - 0x304], 1
cmp dword [ebp - 0x304], 0x2c39
jle 0x10013696
mov dword [ebp - 0x584], 1
jmp 0x1001369d
and dword [ebp - 0x584], 0
mov eax, dword [ebp - 0xd4]
imul eax, dword [ebp - 0x584]
mov dword [ebp - 0xd4], eax
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x75c]
call fcn.10021525
mov dword [ebp - 0x18], 2
and dword [ebp - 0x118], 0
jmp 0x100136d7
mov eax, dword [ebp - 0x18]
inc eax
inc eax
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 0x1b
jae 0x100142cc
push 1
lea ecx, [ebp - 0x638]
call fcn.100214a3
mov dword [ebp - 4], 8
mov dword [ebp - 0xa74], 1
mov dword [ebp - 0x7c0], 0xfffa
push 2
lea ecx, [ebp - 0x898]
call fcn.100214a3
mov byte [ebp - 4], 9
mov dword [ebp - 0xa7c], 9
mov dword [ebp - 0x58], 0
jmp 0x10013734
mov eax, dword [ebp - 0x58]
inc eax
mov dword [ebp - 0x58], eax
cmp dword [ebp - 0x58], 1
jge 0x10013750
push dword [ebp - 0x58]
lea ecx, [ebp - 0x638]
call fcn.10021541
mov dword [eax], 3
jmp 0x1001372d
mov dword [ebp - 0x58], 0
jmp 0x10013760
mov eax, dword [ebp - 0x58]
inc eax
mov dword [ebp - 0x58], eax
cmp dword [ebp - 0x58], 2
jge 0x1001377c
push dword [ebp - 0x58]
lea ecx, [ebp - 0x898]
call fcn.10021541
mov dword [eax], 0xe28de637
jmp 0x10013759
push 0
lea ecx, [ebp - 0x638]
call fcn.10021541
mov esi, eax
push 0
lea ecx, [ebp - 0x638]
call fcn.10021541
mov eax, dword [eax]
imul eax, dword [esi]
test eax, eax
jne 0x10013819
push 0
lea ecx, [ebp - 0x638]
call fcn.10021541
cmp dword [eax], 0
je 0x100137f2
push 0
lea ecx, [ebp - 0x638]
call fcn.10021541
cmp dword [eax], 1
jle 0x100137d1
mov dword [ebp - 0x30c], 1
jmp 0x100137d8
and dword [ebp - 0x30c], 0
mov eax, dword [ebp - 0x7c0]
cmp dword [ebp - 0x30c], eax
je 0x100137f2
mov dword [ebp - 0x4b4], 1
jmp 0x100137f9
and dword [ebp - 0x4b4], 0
push 0
lea ecx, [ebp - 0x638]
call fcn.10021541
mov ecx, dword [ebp - 0x4b4]
cmp ecx, dword [eax]
jg 0x10013819
and dword [ebp - 0x314], 0
jmp 0x10013823
mov dword [ebp - 0x314], 1
cmp dword [ebp - 0x314], 0xffffffff
je 0x10013838
mov dword [ebp - 0x624], 1
jmp 0x1001383f
and dword [ebp - 0x624], 0
push 0
lea ecx, [ebp - 0x638]
call fcn.10021541
mov eax, dword [eax]
mov ecx, dword [ebp - 0x624]
lea esi, [ecx + eax + 1]
push 1
lea ecx, [ebp - 0x898]
call fcn.10021541
mov dword [eax], esi
mov byte [ebp - 4], 8
lea ecx, [ebp - 0x898]
call fcn.10021525
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x638]
call fcn.10021525
xor eax, eax
inc eax
imul eax, eax, 0
movzx eax, byte [ebp + eax - 0x138]
lea eax, [eax + eax + 2]
cmp dword [ebp - 0x18], eax
jne 0x10013e21
mov dword [ebp - 0xdc], 0xb18d
mov dword [ebp - 0x808], 1
mov dword [ebp - 0x804], 1
mov dword [ebp - 0x800], 1
mov dword [ebp - 0x7fc], 1
lea ecx, [ebp - 0x251]
call fcn.10021550
push eax
lea eax, [ebp - 0x7f8]
push eax
lea eax, [ebp - 0x808]
push eax
lea ecx, [ebp - 0xafc]
call fcn.10021636
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0xa08]
call fcn.100214ff
mov dword [ebp - 4], 0xa
cmp dword [ebp - 0xdc], 0x81c2
jg 0x1001397b
mov dword [ebp - 0xdc], 0
jmp 0x10013933
mov eax, dword [ebp - 0xdc]
inc eax
mov dword [ebp - 0xdc], eax
cmp dword [ebp - 0xdc], 4
jge 0x10013955
push dword [ebp - 0xdc]
lea ecx, [ebp - 0xa08]
call fcn.10021541
mov dword [eax], 0x51c76d7b
jmp 0x10013926
mov byte [ebp - 0x9d], 0
movzx eax, byte [ebp - 0x9d]
test eax, eax
je 0x10013979
push 0x258f
push 0x1d2c
push 0
call dword [sym.imp.USER32.dll_RemoveMenu]
jmp 0x100139b5
mov dword [ebp - 0x31c], 0
mov byte [ebp - 0xcd], 0
movzx eax, byte [ebp - 0xcd]
test eax, eax
je 0x100139a8
push 0
push 0x1a
push 0
push 0x799
call dword [sym.imp.GDI32.dll_GetTextExtentPoint32W]
mov eax, dword [ebp - 0x31c]
dec eax
mov dword [ebp - 0x31c], eax
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xa08]
call fcn.10021525
mov eax, dword [ebp - 0x18]
movzx eax, byte [ebp + eax - 0x138]
inc eax
mov dword [ebp - 0x118], eax
mov dword [ebp - 0x28], 0
mov dword [ebp - 0x8c4], 0xc6e5c7a0
mov dword [ebp - 0x8c0], 0xc6e5c7a0
mov dword [ebp - 0x8bc], 0xc6e5c7a0
mov dword [ebp - 0x8b8], 0xc6e5c7a0
and dword [ebp - 0x81c], 0
and dword [ebp - 0x818], 0
and dword [ebp - 0x814], 0
and dword [ebp - 0x810], 0
lea ecx, [ebp - 0x279]
call fcn.10021550
push eax
lea eax, [ebp - 0x80c]
push eax
lea eax, [ebp - 0x81c]
push eax
lea ecx, [ebp - 0xb34]
call fcn.10021636
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0x7cc]
call fcn.100214ff
mov dword [ebp - 4], 0xb
mov dword [ebp - 0x6f4], 0xffffffff
mov dword [ebp - 0x28], 0
jmp 0x10013a77
mov eax, dword [ebp - 0x28]
dec eax
mov dword [ebp - 0x28], eax
cmp dword [ebp - 0x28], 0xfffffff0
jle 0x10013a99
mov byte [ebp - 0xa5], 0
movzx eax, byte [ebp - 0xa5]
test eax, eax
je 0x10013a97
push 0
call dword [sym.imp.OLEAUT32.dll_SysStringLen]
jmp 0x10013a70
mov eax, dword [ebp - 0x28]
mov dword [ebp - 0x4bc], eax
push 4
pop eax
shl eax, 1
mov ecx, dword [ebp - 0x4bc]
mov dword [ebp + eax - 0x8c4], ecx
cmp dword [ebp - 0x4bc], 0x328f6c74
jle 0x10013acc
mov dword [ebp - 0x324], 1
jmp 0x10013ad3
and dword [ebp - 0x324], 0
mov eax, dword [ebp - 0x324]
mov dword [ebp - 0x28], eax
cmp dword [ebp - 0x28], 0
je 0x10013c42
mov dword [ebp - 0x1f8], 8
mov dword [ebp - 0x1f0], 0
jmp 0x10013b09
mov eax, dword [ebp - 0x1f0]
inc eax
mov dword [ebp - 0x1f0], eax
cmp dword [ebp - 0x1f0], 1
jge 0x10013b25
mov eax, dword [ebp - 0x1f0]
mov dword [ebp + eax*4 - 0x794], 7
jmp 0x10013afc
mov dword [ebp - 0x28], 0x10
jmp 0x10013b35
mov eax, dword [ebp - 0x28]
dec eax
mov dword [ebp - 0x28], eax
cmp dword [ebp - 0x28], 0xd
jge 0x10013c20
mov dword [ebp - 0x198], 0x3051ebf0
mov eax, dword [ebp - 0x28]
cmp eax, dword [ebp - 0x1f8]
jge 0x10013b60
mov dword [ebp - 0x58c], 1
jmp 0x10013b67
and dword [ebp - 0x58c], 0
mov eax, dword [ebp - 0x1f8]
mov dword [ebp - 0x198], eax
mov eax, dword [ebp - 0x198]
cmp eax, dword [ebp - 0x58c]
jg 0x10013b8d
mov dword [ebp - 0x230], 1
jmp 0x10013b94
and dword [ebp - 0x230], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x230]
mov dword [ebp + eax - 0x794], ecx
cmp dword [ebp - 0x230], 0
jne 0x10013bee
push 1
lea ecx, [ebp - 0x7cc]
call fcn.10021541
cmp dword [eax], 0
je 0x10013bce
mov dword [ebp - 0x688], 1
jmp 0x10013bd5
and dword [ebp - 0x688], 0
mov eax, dword [ebp - 0x198]
mov dword [ebp - 0xa84], eax
push 1
lea ecx, [ebp - 0x7cc]
call fcn.10021541
mov eax, dword [ebp - 0x28]
mov dword [ebp - 0xa8c], eax
mov eax, dword [ebp - 0x198]
mov dword [ebp - 0xa94], eax
mov eax, dword [ebp - 0x1f8]
mov dword [ebp - 0xab0], eax
mov eax, dword [ebp - 0x1f8]
mov dword [ebp - 0x6f4], eax
jmp 0x10013b2e
mov byte [ebp - 0xc6], 0
movzx eax, byte [ebp - 0xc6]
test eax, eax
je 0x10013c40
push 0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_VerSetConditionMask]
jmp 0x10013cc1
mov dword [ebp - 0x264], 0x7b187b35
mov dword [ebp - 0x690], 0xffffffff
mov eax, dword [ebp - 0x264]
mov dword [ebp - 0x798], eax
mov eax, dword [ebp - 0x264]
dec eax
mov dword [ebp - 0x264], eax
cmp dword [ebp - 0x798], 0
jbe 0x10013c84
mov dword [ebp - 0x32c], 1
jmp 0x10013c8b
and dword [ebp - 0x32c], 0
push 1
lea ecx, [ebp - 0x7cc]
call fcn.10021541
mov eax, dword [eax]
cmp eax, dword [ebp - 0x32c]
je 0x10013cae
mov dword [ebp - 0x4c4], 1
jmp 0x10013cb5
and dword [ebp - 0x4c4], 0
mov eax, dword [ebp - 0x4c4]
mov dword [ebp - 0x690], eax
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x7cc]
call fcn.10021525
mov eax, dword [ebp - 0x18]
movzx eax, byte [ebp + eax - 0x138]
mov ecx, dword [ebp - 0x18]
lea eax, [ecx + eax - 1]
mov dword [ebp - 0x18], eax
mov dword [ebp - 0xec], 5
mov dword [ebp - 0x1a0], 0
jmp 0x10013d08
mov eax, dword [ebp - 0x1a0]
inc eax
mov dword [ebp - 0x1a0], eax
cmp dword [ebp - 0x1a0], 1
jge 0x10013d24
mov eax, dword [ebp - 0x1a0]
mov dword [ebp + eax*4 - 0x94], 0xffffffff
jmp 0x10013cfb
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0x94], 0xfffffff8
jmp 0x10013d52
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x94]
inc eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x94], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x94], 0x11
jne 0x10013dda
mov dword [ebp - 0x334], 0x65e3edfa
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x94]
mov dword [ebp - 0xab8], eax
mov dword [ebp - 0xec], 0xfffffffd
cmp dword [ebp - 0xec], 0
jne 0x10013dab
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x94], 0
jne 0x10013dab
and dword [ebp - 0x750], 0
jmp 0x10013db5
mov dword [ebp - 0x750], 1
mov eax, dword [ebp - 0x334]
mov dword [ebp - 0xac0], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x94]
dec eax
mov dword [ebp - 0x334], eax
jmp 0x10013d37
mov dword [ebp - 0xec], 0
jmp 0x10013df3
mov eax, dword [ebp - 0xec]
dec eax
mov dword [ebp - 0xec], eax
cmp dword [ebp - 0xec], 0xffffffea
jg 0x10013e1c
mov byte [ebp - 0x8d], 0
movzx eax, byte [ebp - 0x8d]
test eax, eax
je 0x10013e1a
push 0
push 0
push 0
call dword [sym.imp.OLEAUT32.dll_SysStringByteLen]
jmp 0x10013de6
jmp 0x100136cf
mov dword [ebp - 0x88], 0xfffffffe
mov dword [ebp - 0x33c], 0xbe9fb1c0
mov dword [ebp - 0x200], 0
jmp 0x10013e4e
mov eax, dword [ebp - 0x200]
inc eax
mov dword [ebp - 0x200], eax
cmp dword [ebp - 0x200], 4
jge 0x10013e6a
mov eax, dword [ebp - 0x200]
mov dword [ebp + eax*4 - 0xb84], 0xffffffff
jmp 0x10013e41
mov dword [ebp - 0x88], 0
jmp 0x10013e83
mov eax, dword [ebp - 0x88]
inc eax
mov dword [ebp - 0x88], eax
cmp dword [ebp - 0x88], 2
jne 0x10013eae
mov dword [ebp - 0x5f4], 0xffffffff
cmp dword [ebp - 0x5f4], 0
je 0x10013ea1
jmp 0x10013eae
cmp dword [ebp - 0x5f4], 0
je 0x10013eac
jmp 0x10013eae
jmp 0x10013e76
mov dword [ebp - 0x88], 7
jmp 0x10013ec7
mov eax, dword [ebp - 0x88]
dec eax
mov dword [ebp - 0x88], eax
cmp dword [ebp - 0x88], 0xfffffff5
je 0x10013f47
mov dword [ebp - 0xac8], 0xd21dfe4
push 1
lea ecx, [ebp - 0xa18]
call fcn.100214a3
mov dword [ebp - 4], 0xc
mov dword [ebp - 0x1a8], 0
jmp 0x10013f07
mov eax, dword [ebp - 0x1a8]
inc eax
mov dword [ebp - 0x1a8], eax
cmp dword [ebp - 0x1a8], 1
jge 0x10013f26
push dword [ebp - 0x1a8]
lea ecx, [ebp - 0xa18]
call fcn.10021541
or dword [eax], 0xffffffff
jmp 0x10013efa
mov eax, dword [ebp - 0x33c]
dec eax
mov dword [ebp - 0x33c], eax
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xa18]
call fcn.10021525
jmp 0x10013eba
mov eax, dword [ebp - 0x18]
sub eax, dword [ebp - 0x118]
movzx eax, byte [ebp + eax - 0x13a]
movzx eax, word [ebp + eax*2 - 0x8e0]
mov ecx, dword [ebp - 0x18]
movzx ecx, byte [ebp + ecx - 0x137]
and ecx, eax
mov eax, dword [ebp - 0x18]
sub eax, dword [ebp - 0x118]
movzx eax, byte [ebp + eax - 0x13a]
movzx eax, word [ebp + eax*2 - 0x8e0]
mov edx, dword [ebp - 0x18]
movzx edx, byte [ebp + edx - 0x137]
and edx, eax
mov eax, dword [ebp - 0x18]
sub eax, dword [ebp - 0x118]
movzx eax, byte [ebp + eax - 0x13a]
movzx eax, word [ebp + eax*2 - 0x8e0]
mov esi, dword [ebp - 0x18]
movzx esi, byte [ebp + esi - 0x137]
add esi, eax
sub esi, edx
sub esi, ecx
mov eax, dword [ebp - 0x18]
movzx eax, byte [ebp + eax - 0x138]
mov word [ebp + eax*2 - 0x8e0], si
mov dword [ebp - 0x2c], 0x85c9e53e
push 1
lea ecx, [ebp - 0x8a4]
call fcn.100214a3
mov dword [ebp - 4], 0xd
mov dword [ebp - 0x6a0], 0xbd0d42ad
mov dword [ebp - 0x760], 1
mov dword [ebp - 0xad0], 0xffffffff
mov dword [ebp - 0xac4], 1
mov dword [ebp - 0x91c], 0x5ac8
mov dword [ebp - 0x20], 0
jmp 0x1001402d
mov eax, dword [ebp - 0x20]
inc eax
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 1
jge 0x10014043
mov eax, dword [ebp - 0x20]
mov dword [ebp + eax*4 - 0xe4], 0
jmp 0x10014026
mov dword [ebp - 0x20], 0
jmp 0x10014053
mov eax, dword [ebp - 0x20]
inc eax
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 1
jge 0x1001406f
push dword [ebp - 0x20]
lea ecx, [ebp - 0x8a4]
call fcn.10021541
mov dword [eax], 0x938f738f
jmp 0x1001404c
mov dword [ebp - 0x20], 0
jmp 0x1001407f
mov eax, dword [ebp - 0x20]
inc eax
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 1
jge 0x10014095
mov eax, dword [ebp - 0x20]
mov dword [ebp + eax*4 - 0x36c], 0xfffa
jmp 0x10014078
cmp dword [ebp - 0x2c], 0
jne 0x100141ce
mov eax, dword [ebp - 0x2c]
cmp eax, dword [ebp - 0x2c]
jg 0x100140b3
mov dword [ebp - 0x594], 1
jmp 0x100140ba
and dword [ebp - 0x594], 0
mov eax, dword [ebp - 0x2c]
cmp eax, dword [ebp - 0x2c]
jg 0x100140ce
mov dword [ebp - 0x4cc], 1
jmp 0x100140d5
and dword [ebp - 0x4cc], 0
cmp dword [ebp - 0x4cc], 0x448112de
jge 0x100140ed
mov dword [ebp - 0x344], 1
jmp 0x100140f4
and dword [ebp - 0x344], 0
mov eax, dword [ebp - 0x2c]
imul eax, dword [ebp - 0x344]
cmp dword [ebp - 0x594], eax
je 0x10014112
mov dword [ebp - 0x34c], 1
jmp 0x10014119
and dword [ebp - 0x34c], 0
mov eax, dword [ebp - 0x2c]
add eax, dword [ebp - 0x34c]
cmp dword [ebp - 0x2c], eax
jl 0x10014133
mov dword [ebp - 0x4d4], 1
jmp 0x1001413a
and dword [ebp - 0x4d4], 0
cmp dword [ebp - 0x4d4], 0xf29c
jg 0x10014152
mov dword [ebp - 0x698], 1
jmp 0x10014159
and dword [ebp - 0x698], 0
mov eax, dword [ebp - 0x2c]
mov dword [ebp - 0x9d4], eax
mov eax, dword [ebp - 0x2c]
cmp eax, dword [ebp - 0x2c]
je 0x1001417c
mov eax, 0x1dbdae4
test eax, eax
jne 0x1001417c
and dword [ebp - 0x354], 0
jmp 0x10014186
mov dword [ebp - 0x354], 1
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x354]
neg ecx
cmp ecx, dword [ebp + eax - 0xe4]
jne 0x100141a9
mov dword [ebp - 0x648], 1
jmp 0x100141b0
and dword [ebp - 0x648], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xe4]
cmp dword [ebp - 0x648], eax
je 0x100141ce
and dword [ebp - 0x7a0], 0
jmp 0x100141d8
mov dword [ebp - 0x7a0], 1
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xe4]
mov dword [ebp - 0x8f0], eax
mov eax, dword [ebp - 0x2c]
mov dword [ebp - 0x35c], eax
push 0
lea ecx, [ebp - 0x8a4]
call fcn.10021541
mov ecx, dword [ebp - 0x35c]
mov dword [eax], ecx
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xe4]
cmp dword [ebp - 0x35c], eax
jle 0x1001422a
mov dword [ebp - 0x4dc], 1
jmp 0x10014231
and dword [ebp - 0x4dc], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xe4]
cmp dword [ebp - 0x4dc], eax
jge 0x10014252
mov dword [ebp - 0x364], 1
jmp 0x10014259
and dword [ebp - 0x364], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xe4]
cmp dword [ebp - 0x364], eax
jl 0x10014280
cmp dword [ebp - 0x6a0], 0
jne 0x10014280
and dword [ebp - 0x59c], 0
jmp 0x1001428a
mov dword [ebp - 0x59c], 1
mov eax, dword [ebp - 0x59c]
mov dword [ebp - 0x760], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x36c]
dec eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x36c], eax
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x8a4]
call fcn.10021525
and dword [ebp - 0x118], 0
jmp 0x100136cf
mov dword [ebp - 0x4e4], 0x5023
mov dword [ebp - 0x7a8], 0x100078b8
cmp dword [ebp - 0x4e4], 0x5121
jle 0x100143d9
and dword [ebp - 0x208], 0
jmp 0x10014306
mov eax, dword [ebp - 0x208]
inc eax
mov dword [ebp - 0x208], eax
cmp dword [ebp - 0x208], 0x10bd
jge 0x100143c5
and dword [ebp - 0x1b0], 0
jmp 0x1001432c
mov eax, dword [ebp - 0x1b0]
inc eax
mov dword [ebp - 0x1b0], eax
cmp dword [ebp - 0x1b0], 0x1ec
jge 0x100143c0
and dword [ebp - 0x210], 0
jmp 0x10014352
mov eax, dword [ebp - 0x210]
inc eax
mov dword [ebp - 0x210], eax
cmp dword [ebp - 0x210], 0x16a7
jge 0x100143bb
mov eax, dword [ebp - 0x208]
add eax, dword [ebp - 0x1b0]
or eax, dword [ebp - 0x210]
cdq
mov dword [ebp - 0x708], eax
mov dword [ebp - 0x704], edx
push dword [ebp - 0x704]
push dword [ebp - 0x708]
lea ecx, [ebp - 0xb5c]
call fcn.1000a883
pop ecx
pop ecx
mov dword [ebp - 0x6a8], eax
mov ecx, dword [ebp - 0x6a8]
call fcn.10020d7c
push eax
call fcn.1005fa61
pop ecx
lea ecx, [ebp - 0xb5c]
call fcn.10020d4d
jmp 0x10014345
jmp 0x1001431f
jmp 0x100142f9
push 0x11c0
push 0
push 0
push 0x1ac0
call dword [sym.imp.USER32.dll_MessageBoxW]
mov dword [ebp - 0x80], 1
mov dword [ebp - 4], 0xe
cmp dword [ebp - 0x4e4], 0x4e07
jge 0x100143ff
push dword [ebp - 0x7a8]
call fcn.1005fa61
pop ecx
jmp 0x1001441b
or dword [ebp - 4], 0xffffffff
jmp 0x10014425
mov dword [ebp - 0x110], 0x2758e92e
mov dword [ebp - 0x1b8], 1
push 1
lea ecx, [ebp - 0x7e4]
call fcn.100214a3
mov dword [ebp - 4], 0x10
mov dword [ebp - 0x238], 0xaafa
mov dword [ebp - 0x62c], 0x9236f914
mov dword [ebp - 0x6b8], 0x919139f4
mov dword [ebp - 0x60], 0
jmp 0x1001447b
mov eax, dword [ebp - 0x60]
inc eax
mov dword [ebp - 0x60], eax
cmp dword [ebp - 0x60], 1
jge 0x10014494
push dword [ebp - 0x60]
lea ecx, [ebp - 0x7e4]
call fcn.10021541
and dword [eax], 0
jmp 0x10014474
mov dword [ebp - 0x60], 0
jmp 0x100144a4
mov eax, dword [ebp - 0x60]
inc eax
mov dword [ebp - 0x60], eax
cmp dword [ebp - 0x60], 2
jge 0x100144ba
mov eax, dword [ebp - 0x60]
mov dword [ebp + eax*4 - 0x910], 0
jmp 0x1001449d
cmp dword [ebp - 0x80], 0
jne 0x1001454e
mov eax, dword [ebp - 0x80]
inc eax
sub eax, dword [ebp - 0x110]
cmp eax, dword [ebp - 0x80]
jl 0x100144df
mov dword [ebp - 0x6b0], 1
jmp 0x100144e6
and dword [ebp - 0x6b0], 0
mov eax, dword [ebp - 0x80]
mov dword [ebp - 0x918], eax
mov eax, 0x187
cmp eax, 0x6284
jle 0x10014507
mov dword [ebp - 0x374], 1
jmp 0x1001450e
and dword [ebp - 0x374], 0
mov eax, dword [ebp - 0x110]
cmp dword [ebp - 0x374], eax
jg 0x1001452e
mov eax, 0x6cbcb1a7
test eax, eax
jne 0x1001452e
and dword [ebp - 0x5fc], 0
jmp 0x10014538
mov dword [ebp - 0x5fc], 1
mov eax, dword [ebp - 0x5fc]
sub eax, 0xfff9
jne 0x1001454e
and dword [ebp - 0x37c], 0
jmp 0x10014558
mov dword [ebp - 0x37c], 1
cmp dword [ebp - 0x37c], 0xfffffff7
je 0x1001456d
mov dword [ebp - 0x4ec], 1
jmp 0x10014574
and dword [ebp - 0x4ec], 0
mov eax, dword [ebp - 0x80]
cmp eax, dword [ebp - 0x4ec]
jge 0x1001458b
mov dword [ebp - 0x384], 1
jmp 0x10014592
and dword [ebp - 0x384], 0
mov eax, dword [ebp - 0x384]
mov dword [ebp - 0x1b8], eax
cmp dword [ebp - 0x110], 0
je 0x10014661
cmp dword [ebp - 0x80], 0
je 0x10014661
mov eax, dword [ebp - 0x80]
cmp eax, dword [ebp - 0x80]
jle 0x100145cd
push 0xfffffffffffffff8
pop eax
test eax, eax
jne 0x100145cd
and dword [ebp - 0x5a4], 0
jmp 0x100145d7
mov dword [ebp - 0x5a4], 1
cmp dword [ebp - 0x5a4], 1
jl 0x100145ec
mov dword [ebp - 0x38c], 1
jmp 0x100145f3
and dword [ebp - 0x38c], 0
mov eax, dword [ebp - 0x1b8]
cmp eax, dword [ebp - 0x38c]
jne 0x1001460d
mov dword [ebp - 0x4f4], 1
jmp 0x10014614
and dword [ebp - 0x4f4], 0
mov eax, dword [ebp - 0x110]
imul eax, dword [ebp - 0x4f4]
mov dword [ebp - 0x1b8], eax
mov esi, dword [ebp - 0x1b8]
push 0
lea ecx, [ebp - 0x7e4]
call fcn.10021541
mov dword [eax], esi
mov esi, dword [ebp - 0x110]
push 0
lea ecx, [ebp - 0x7e4]
call fcn.10021541
mov eax, dword [eax]
sub eax, esi
je 0x10014661
mov dword [ebp - 0x394], 1
jmp 0x10014668
and dword [ebp - 0x394], 0
mov eax, dword [ebp - 0x394]
sub eax, 0x3d2cf3e
jne 0x10014687
mov eax, 0xe158
test eax, eax
jne 0x10014687
and dword [ebp - 0x7b0], 0
jmp 0x10014691
mov dword [ebp - 0x7b0], 1
mov eax, dword [ebp - 0x238]
mov dword [ebp - 0x8f8], eax
mov eax, dword [ebp - 0x238]
mov dword [ebp - 0x62c], eax
cmp dword [ebp - 0x62c], 0xffffffff
jbe 0x100146be
mov dword [ebp - 0x39c], 1
jmp 0x100146c5
and dword [ebp - 0x39c], 0
mov eax, dword [ebp - 0x238]
cmp dword [ebp - 0x39c], eax
jl 0x100146df
mov dword [ebp - 0x4fc], 1
jmp 0x100146e6
and dword [ebp - 0x4fc], 0
cmp dword [ebp - 0x4fc], 0x32a5
je 0x100146fe
mov dword [ebp - 0x3a4], 1
jmp 0x10014705
and dword [ebp - 0x3a4], 0
mov eax, dword [ebp - 0x6b8]
cmp dword [ebp - 0x3a4], eax
je 0x1001471f
mov dword [ebp - 0x5ac], 1
jmp 0x10014726
and dword [ebp - 0x5ac], 0
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x5ac]
mov dword [ebp + eax - 0x910], ecx
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x7e4]
call fcn.10021525
push 2
pop eax
imul eax, eax, 0xc
xor ecx, ecx
mov word [ebp + eax - 0x8e0], cx
lea eax, [ebp - 0x8e0]
push eax
lea ecx, [ebp - 0xb74]
call fcn.100213a4
mov dword [ebp - 0x76c], eax
mov eax, dword [ebp - 0x76c]
mov dword [ebp - 0x6c0], eax
mov dword [ebp - 4], 0x11
push dword [ebp - 0x6c0]
call fcn.1000ab17
pop ecx
mov dword [ebp - 0x458], eax
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xb74]
call fcn.100213c9
push 3
lea ecx, [ebp - 0x144]
call fcn.100214a3
mov dword [ebp - 4], 0x12
mov dword [ebp - 0x79c], 0xbd13d8c5
mov dword [ebp - 0x38], 0xed99
mov dword [ebp - 0x3b4], 0xd686a37b
mov dword [ebp - 0x9c], 0xffffffff
mov dword [ebp - 0x104], 0
mov dword [ebp - 0x220], 0x95b676bd
mov dword [ebp - 0x74], 1
mov dword [ebp - 0x5c4], 0
mov dword [ebp - 0x6d8], 1
mov dword [ebp - 0x218], 0
jmp 0x10014825
mov eax, dword [ebp - 0x218]
inc eax
mov dword [ebp - 0x218], eax
cmp dword [ebp - 0x218], 3
jge 0x10014847
push dword [ebp - 0x218]
lea ecx, [ebp - 0x144]
call fcn.10021541
mov dword [eax], 0x34d0
jmp 0x10014818
push 0
lea ecx, [ebp - 0x144]
call fcn.10021541
push 0
lea ecx, [ebp - 0x144]
call fcn.10021541
mov esi, eax
push 1
lea ecx, [ebp - 0x144]
call fcn.10021541
mov eax, dword [eax]
add eax, dword [esi]
cmp eax, 0x33fd
jle 0x10014887
mov dword [ebp - 0x3ac], 1
jmp 0x1001488e
and dword [ebp - 0x3ac], 0
mov eax, dword [ebp - 0x38]
dec eax
mov dword [ebp - 0x38], eax
mov eax, dword [ebp - 0x38]
imul eax, dword [ebp - 0x3ac]
cmp eax, 0xd4aa41a8
jae 0x100148b2
mov dword [ebp - 0x504], 1
jmp 0x100148b9
and dword [ebp - 0x504], 0
mov eax, dword [ebp - 0x504]
mov dword [ebp - 0x3b4], eax
mov eax, dword [ebp - 0x3b4]
inc eax
cmp eax, dword [ebp - 0x9c]
jge 0x100148e0
mov dword [ebp - 0x604], 1
jmp 0x100148e7
and dword [ebp - 0x604], 0
push 0
lea ecx, [ebp - 0x144]
call fcn.10021541
mov ecx, dword [ebp - 0x604]
cmp ecx, dword [eax]
jg 0x1001490a
mov dword [ebp - 0x3bc], 1
jmp 0x10014911
and dword [ebp - 0x3bc], 0
push 0
lea ecx, [ebp - 0x144]
call fcn.10021541
mov ecx, dword [ebp - 0x3bc]
cmp ecx, dword [eax]
jl 0x10014938
push 9
pop eax
test eax, eax
jne 0x10014938
and dword [ebp - 0x50c], 0
jmp 0x10014942
mov dword [ebp - 0x50c], 1
mov esi, dword [ebp - 0x9c]
imul esi, dword [ebp - 0x50c]
push 0
lea ecx, [ebp - 0x144]
call fcn.10021541
imul esi, dword [eax]
cmp esi, 0xfffffff7
jg 0x10014970
mov dword [ebp - 0x7ac], 1
jmp 0x10014977
and dword [ebp - 0x7ac], 0
push 0
lea ecx, [ebp - 0x144]
call fcn.10021541
mov esi, eax
push 0
lea ecx, [ebp - 0x144]
call fcn.10021541
mov eax, dword [eax]
cmp eax, dword [esi]
jne 0x100149a5
mov dword [ebp - 0x3c4], 1
jmp 0x100149ac
and dword [ebp - 0x3c4], 0
cmp dword [ebp - 0x3c4], 0xec51938d
ja 0x100149c4
mov dword [ebp - 0x5b4], 1
jmp 0x100149cb
and dword [ebp - 0x5b4], 0
mov eax, dword [ebp - 0x9c]
cmp dword [ebp - 0x5b4], eax
jl 0x100149e5
mov dword [ebp - 0x3cc], 1
jmp 0x100149ec
and dword [ebp - 0x3cc], 0
mov eax, dword [ebp - 0x3cc]
mov dword [ebp - 0x104], eax
mov eax, dword [ebp - 0x104]
cmp eax, dword [ebp - 0x220]
jg 0x10014a12
mov dword [ebp - 0x6c8], 1
jmp 0x10014a19
and dword [ebp - 0x6c8], 0
mov esi, dword [ebp - 0x220]
push 0
lea ecx, [ebp - 0x144]
call fcn.10021541
mov eax, dword [eax]
sub eax, esi
je 0x10014a87
mov byte [ebp - 0xcc], 0
movzx eax, byte [ebp - 0xcc]
test eax, eax
je 0x10014a4e
push 0
push 0
call dword [sym.imp.ADVAPI32.dll_InitializeSecurityDescriptor]
mov dword [ebp - 0x38], 0
jmp 0x10014a5e
mov eax, dword [ebp - 0x38]
inc eax
mov dword [ebp - 0x38], eax
cmp dword [ebp - 0x38], 0x1c
je 0x10014a82
mov byte [ebp - 0xb5], 0
movzx eax, byte [ebp - 0xb5]
test eax, eax
je 0x10014a80
push 0
push 0
call dword [sym.imp.GDI32.dll_GetNearestPaletteIndex]
jmp 0x10014a57
jmp 0x10014f78
mov dword [ebp - 0x3c], 8
mov dword [ebp - 0xf4], 0xa1e05bf5
mov dword [ebp - 0x77c], 0x947d9ba7
mov dword [ebp - 0x6e8], 0x1c6cb56a
mov eax, dword [ebp - 0x74]
mov dword [ebp - 0x920], eax
push 0
lea ecx, [ebp - 0x144]
call fcn.10021541
cmp dword [eax], 0x691cfe0c
jg 0x10014ad6
mov dword [ebp - 0x514], 1
jmp 0x10014add
and dword [ebp - 0x514], 0
mov eax, dword [ebp - 0x3c]
cmp dword [ebp - 0x514], eax
jg 0x10014af4
mov dword [ebp - 0x3d4], 1
jmp 0x10014afb
and dword [ebp - 0x3d4], 0
mov eax, dword [ebp - 0x3c]
cmp dword [ebp - 0x3d4], eax
jl 0x10014b12
mov dword [ebp - 0x640], 1
jmp 0x10014b19
and dword [ebp - 0x640], 0
mov eax, dword [ebp - 0x104]
imul eax, dword [ebp - 0x640]
mov dword [ebp - 0x3c], eax
mov eax, dword [ebp - 0x3c]
cmp eax, dword [ebp - 0x74]
jg 0x10014b3d
mov dword [ebp - 0x3dc], 1
jmp 0x10014b44
and dword [ebp - 0x3dc], 0
cmp dword [ebp - 0x3dc], 0x19ab
jl 0x10014b5c
mov dword [ebp - 0x51c], 1
jmp 0x10014b63
and dword [ebp - 0x51c], 0
cmp dword [ebp - 0x51c], 5
jg 0x10014b78
mov dword [ebp - 0x3e4], 1
jmp 0x10014b7f
and dword [ebp - 0x3e4], 0
mov eax, dword [ebp - 0x38]
cmp dword [ebp - 0x3e4], eax
jne 0x10014b99
cmp dword [ebp - 0x38], 0
jne 0x10014b99
and dword [ebp - 0x5bc], 0
jmp 0x10014ba3
mov dword [ebp - 0x5bc], 1
mov eax, dword [ebp - 0x5c4]
mov ecx, dword [ebp - 0x5bc]
lea eax, [eax + ecx + 9]
neg eax
jne 0x10014bc3
mov dword [ebp - 0x3ec], 1
jmp 0x10014bca
and dword [ebp - 0x3ec], 0
mov eax, dword [ebp - 0x104]
cmp eax, dword [ebp - 0x3ec]
jge 0x10014bf9
cmp dword [ebp - 0x38], 0
jne 0x10014bf9
push 0
lea ecx, [ebp - 0x144]
call fcn.10021541
cmp dword [eax], 0
jne 0x10014bf9
and dword [ebp - 0x524], 0
jmp 0x10014c03
mov dword [ebp - 0x524], 1
mov eax, dword [ebp - 0x220]
cmp dword [ebp - 0x524], eax
jge 0x10014c1d
mov dword [ebp - 0x3f4], 1
jmp 0x10014c24
and dword [ebp - 0x3f4], 0
mov eax, dword [ebp - 0xf4]
cmp dword [ebp - 0x3f4], eax
jg 0x10014c3e
mov dword [ebp - 0x60c], 1
jmp 0x10014c45
and dword [ebp - 0x60c], 0
mov eax, dword [ebp - 0xf4]
cmp dword [ebp - 0x60c], eax
jle 0x10014c65
cmp dword [ebp - 0x3c], 0
je 0x10014c65
mov dword [ebp - 0x3fc], 1
jmp 0x10014c6c
and dword [ebp - 0x3fc], 0
mov eax, dword [ebp - 0xf4]
cmp dword [ebp - 0x3fc], eax
jle 0x10014c86
mov dword [ebp - 0x52c], 1
jmp 0x10014c8d
and dword [ebp - 0x52c], 0
mov eax, dword [ebp - 0x104]
cmp dword [ebp - 0x52c], eax
jge 0x10014ca7
mov dword [ebp - 0x774], 1
jmp 0x10014cae
and dword [ebp - 0x774], 0
mov eax, dword [ebp - 0x220]
mov dword [ebp - 0x900], eax
mov esi, dword [ebp - 0x74]
push 0
lea ecx, [ebp - 0x144]
call fcn.10021541
cmp dword [eax], esi
jg 0x10014d1e
mov dword [ebp - 0x928], 0xc605
mov dword [ebp - 0x6d0], 0xd5e33ab5
mov dword [ebp - 0x74], 2
jmp 0x10014cf2
mov eax, dword [ebp - 0x74]
dec eax
mov dword [ebp - 0x74], eax
cmp dword [ebp - 0x74], 0
jl 0x10014d19
push dword [ebp - 0x74]
lea ecx, [ebp - 0x144]
call fcn.10021541
cmp dword [eax], 0
je 0x10014d0d
jmp 0x10014d19
mov dword [ebp - 0x6d0], 1
jmp 0x10014ceb
jmp 0x10014eab
mov dword [ebp - 0x424], 0x4b34
mov dword [ebp - 0x414], 0xffffffff
mov eax, 0x6ef6a07e
test eax, eax
je 0x10014e8f
mov esi, dword [ebp - 0x79c]
push 1
lea ecx, [ebp - 0x144]
call fcn.10021541
add esi, dword [eax]
je 0x10014dde
cmp dword [ebp - 0xf4], 0xffffffff
jne 0x10014d6f
mov dword [ebp - 0x404], 1
jmp 0x10014d76
and dword [ebp - 0x404], 0
mov eax, dword [ebp - 0x404]
add eax, 0x56ab6569
cmp eax, dword [ebp - 0x6d8]
jge 0x10014d95
mov dword [ebp - 0x40c], 1
jmp 0x10014d9c
and dword [ebp - 0x40c], 0
mov eax, dword [ebp - 0x5c4]
cmp dword [ebp - 0x40c], eax
jge 0x10014db6
mov dword [ebp - 0x534], 1
jmp 0x10014dbd
and dword [ebp - 0x534], 0
mov eax, dword [ebp - 0x534]
mov dword [ebp - 0x414], eax
cmp dword [ebp - 0x414], 0
je 0x10014dde
mov dword [ebp - 0x63c], 1
jmp 0x10014de5
and dword [ebp - 0x63c], 0
cmp dword [ebp - 0x63c], 0xaf33
jle 0x10014dfd
mov dword [ebp - 0x41c], 1
jmp 0x10014e04
and dword [ebp - 0x41c], 0
mov eax, dword [ebp - 0x77c]
cmp dword [ebp - 0x41c], eax
je 0x10014e1e
mov dword [ebp - 0x6e0], 1
jmp 0x10014e25
and dword [ebp - 0x6e0], 0
mov eax, dword [ebp - 0x3c]
mov dword [ebp - 0x908], eax
mov eax, dword [ebp - 0x3c]
sub eax, 6
cmp dword [ebp - 0x424], eax
jl 0x10014e48
mov dword [ebp - 0x53c], 1
jmp 0x10014e4f
and dword [ebp - 0x53c], 0
cmp dword [ebp - 0x53c], 0x2f92bf7
jg 0x10014e6d
cmp dword [ebp - 0x424], 0
jne 0x10014e6d
and dword [ebp - 0x5cc], 0
jmp 0x10014e77
mov dword [ebp - 0x5cc], 1
cmp dword [ebp - 0x5cc], 0x92b1
jne 0x10014e8f
mov dword [ebp - 0x42c], 1
jmp 0x10014e96
and dword [ebp - 0x42c], 0
mov eax, dword [ebp - 0x42c]
mov dword [ebp - 0xf4], eax
mov eax, dword [ebp - 0xf4]
mov dword [ebp - 0x3c], eax
mov dword [ebp - 0x9c], 2
jmp 0x10014ec4
mov eax, dword [ebp - 0x9c]
dec eax
mov dword [ebp - 0x9c], eax
cmp dword [ebp - 0x9c], 0
jl 0x10014f78
mov dword [ebp - 0x7bc], 1
cmp dword [ebp - 0x3c], 0xe23b
jle 0x10014ef9
mov eax, 0x15289768
test eax, eax
je 0x10014ef9
mov dword [ebp - 0x544], 1
jmp 0x10014f00
and dword [ebp - 0x544], 0
mov eax, dword [ebp - 0x7bc]
cmp dword [ebp - 0x544], eax
jg 0x10014f1a
mov dword [ebp - 0x434], 1
jmp 0x10014f21
and dword [ebp - 0x434], 0
mov eax, dword [ebp - 0x3c]
sub eax, 0x1d3
cmp eax, dword [ebp - 0x434]
jge 0x10014f3d
mov dword [ebp - 0x614], 1
jmp 0x10014f44
and dword [ebp - 0x614], 0
mov eax, dword [ebp - 0x614]
add eax, 3
cmp eax, 0x828161dd
jb 0x10014f60
mov dword [ebp - 0x43c], 1
jmp 0x10014f67
and dword [ebp - 0x43c], 0
mov eax, dword [ebp - 0x43c]
mov dword [ebp - 0x6e8], eax
jmp 0x10014eb7
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x144]
call fcn.10021525
and dword [ebp - 0x1c4], 0
jmp 0x10014f9d
mov eax, dword [ebp - 0x1c4]
inc eax
mov dword [ebp - 0x1c4], eax
cmp dword [ebp - 0x1c4], 0xd
jae 0x10014fb8
xor eax, eax
mov ecx, dword [ebp - 0x1c4]
mov word [ebp + ecx*2 - 0x8e0], ax
jmp 0x10014f90
mov dword [ebp - 0x930], 0xa6318529
mov dword [ebp - 0x8e4], 0x39beb064
mov dword [ebp - 0x938], 0xe1265ab3
mov dword [ebp - 0x940], 0xfffffffd
mov dword [ebp - 0xabc], 1
mov dword [ebp - 0x924], 0
mov dword [ebp - 0x9dc], 0x55595070
mov dword [ebp - 0x92c], 0x9edbda7f
mov dword [ebp - 0xa78], 0xfffffffc
mov dword [ebp - 0x54c], 0x67ee39f3
mov dword [ebp - 0x1f4], 0
jmp 0x10015035
mov eax, dword [ebp - 0x1f4]
inc eax
mov dword [ebp - 0x1f4], eax
cmp dword [ebp - 0x1f4], 2
jge 0x10015051
mov eax, dword [ebp - 0x1f4]
mov dword [ebp + eax*4 - 0xb2c], 0x418a5273
jmp 0x10015028
mov eax, dword [ebp - 0x54c]
inc eax
mov dword [ebp - 0x54c], eax
cmp dword [ebp - 0x458], 0
je 0x100165b0
mov dword [ebp - 0x70], 5
mov dword [ebp - 0x6f0], 0x326874be
mov dword [ebp - 0x70], 0x14
jmp 0x1001508c
mov eax, dword [ebp - 0x70]
dec eax
mov dword [ebp - 0x70], eax
cmp dword [ebp - 0x70], 0xffffffe4
jl 0x100152a9
mov dword [ebp - 0x784], 0x65969a22
mov dword [ebp - 0x7a4], 0x876a47cd
mov dword [ebp - 0x1cc], 0
jmp 0x100150c3
mov eax, dword [ebp - 0x1cc]
inc eax
mov dword [ebp - 0x1cc], eax
cmp dword [ebp - 0x1cc], 2
jge 0x100150df
mov eax, dword [ebp - 0x1cc]
mov dword [ebp + eax*4 - 0x260], 0x3fa
jmp 0x100150b6
cmp dword [ebp - 0x70], 0
je 0x10015272
mov dword [ebp - 0xa4], 9
push 1
lea ecx, [ebp - 0x880]
call fcn.100214a3
mov dword [ebp - 4], 0x13
mov dword [ebp - 0x20c], 0
jmp 0x10015120
mov eax, dword [ebp - 0x20c]
inc eax
mov dword [ebp - 0x20c], eax
cmp dword [ebp - 0x20c], 1
jge 0x10015142
push dword [ebp - 0x20c]
lea ecx, [ebp - 0x880]
call fcn.10021541
mov dword [eax], 1
jmp 0x10015113
mov dword [ebp - 0xa4], 1
jmp 0x1001515b
mov eax, dword [ebp - 0xa4]
dec eax
mov dword [ebp - 0xa4], eax
cmp dword [ebp - 0xa4], 0
jl 0x10015261
mov dword [ebp - 0x444], 7
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x260]
mov dword [ebp - 0x444], eax
mov eax, dword [ebp - 0x444]
cmp eax, dword [ebp - 0x70]
jle 0x1001519c
mov dword [ebp - 0x5d4], 1
jmp 0x100151a3
and dword [ebp - 0x5d4], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x260]
sub eax, dword [ebp - 0x70]
cmp dword [ebp - 0x5d4], eax
jl 0x100151c7
mov dword [ebp - 0x44c], 1
jmp 0x100151ce
and dword [ebp - 0x44c], 0
mov eax, dword [ebp - 0xa4]
mov ecx, dword [ebp - 0x44c]
sub ecx, dword [ebp - 0x784]
cmp ecx, dword [ebp + eax*4 - 0x260]
jge 0x100151f5
mov dword [ebp - 0x554], 1
jmp 0x100151fc
and dword [ebp - 0x554], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x260]
add eax, dword [ebp - 0x554]
mov ecx, dword [ebp - 0xa4]
cmp dword [ebp + ecx*4 - 0x260], eax
jl 0x1001522a
mov dword [ebp - 0x454], 1
jmp 0x10015231
and dword [ebp - 0x454], 0
mov eax, dword [ebp - 0xa4]
mov eax, dword [ebp + eax*4 - 0x260]
add eax, dword [ebp - 0x454]
mov dword [ebp - 0x6f0], eax
mov esi, dword [ebp - 0x70]
push 0
lea ecx, [ebp - 0x880]
call fcn.10021541
mov dword [eax], esi
jmp 0x1001514e
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x880]
call fcn.10021525
jmp 0x100152a4
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x260], 0x467356a0
jle 0x10015291
mov dword [ebp - 0x644], 1
jmp 0x10015298
and dword [ebp - 0x644], 0
mov eax, dword [ebp - 0x644]
mov dword [ebp - 0x7a4], eax
jmp 0x10015085
mov dword [ebp - 0xac], 0xffffffff
mov dword [ebp - 0x6f8], 5
mov dword [ebp - 0x5dc], 1
mov dword [ebp - 0xac], 0
jmp 0x100152e0
mov eax, dword [ebp - 0xac]
dec eax
mov dword [ebp - 0xac], eax
cmp dword [ebp - 0xac], 0xffffffeb
jg 0x100154d3
mov dword [ebp - 0x100], 0x36432a27
mov byte [ebp - 0xca], 0
movzx eax, byte [ebp - 0xca]
test eax, eax
je 0x10015325
push 0
push 0x1688
push 0x171e
push 0x22f
push 0x1516
call dword [sym.imp.USER32.dll_SetScrollRange]
mov dword [ebp - 0x100], 0
jmp 0x1001533e
mov eax, dword [ebp - 0x100]
inc eax
mov dword [ebp - 0x100], eax
cmp dword [ebp - 0x100], 0x12
jl 0x100154ce
mov dword [ebp - 0xb4], 0xbe187950
mov dword [ebp - 0x46c], 0x81a7ecc2
mov dword [ebp - 0xb4], 0xe
jmp 0x10015378
mov eax, dword [ebp - 0xb4]
dec eax
mov dword [ebp - 0xb4], eax
cmp dword [ebp - 0xb4], 0xffffffe5
jg 0x100154c9
mov dword [ebp - 0x1d4], 0xffffffff
mov dword [ebp - 0x45c], 1
mov dword [ebp - 0x700], 0x9b8db370
cmp dword [ebp - 0xac], 0
je 0x10015475
cmp dword [ebp - 0xac], 0
je 0x10015450
mov eax, dword [ebp - 0x6f8]
sub eax, dword [ebp - 0xb4]
cmp eax, dword [ebp - 0x1d4]
je 0x100153dd
mov dword [ebp - 0x78c], 1
jmp 0x100153e4
and dword [ebp - 0x78c], 0
mov eax, dword [ebp - 0xb4]
mov dword [ebp - 0x934], eax
mov eax, dword [ebp - 0x1d4]
mov dword [ebp - 0x9ec], eax
mov eax, dword [ebp - 0xac]
mov dword [ebp - 0x45c], eax
mov eax, dword [ebp - 0x45c]
cmp eax, dword [ebp - 0x1d4]
je 0x10015422
mov dword [ebp - 0x55c], 1
jmp 0x10015429
and dword [ebp - 0x55c], 0
imul eax, dword [ebp - 0x55c], 0xb94b
mov ecx, dword [ebp - 0x1d4]
lea eax, [ecx + eax - 0x2f18d119]
test eax, eax
je 0x10015450
mov dword [ebp - 0x464], 1
jmp 0x10015457
and dword [ebp - 0x464], 0
mov eax, dword [ebp - 0x464]
mov dword [ebp - 0x5dc], eax
cmp dword [ebp - 0x5dc], 0
je 0x10015475
and dword [ebp - 0x564], 0
jmp 0x1001547f
mov dword [ebp - 0x564], 1
mov eax, dword [ebp - 0xb4]
mov dword [ebp - 0x46c], eax
mov eax, dword [ebp - 0x46c]
imul eax, dword [ebp - 0x564]
test eax, eax
je 0x100154b1
cmp dword [ebp - 0x100], 0
je 0x100154b1
mov dword [ebp - 0x474], 1
jmp 0x100154b8
and dword [ebp - 0x474], 0
mov eax, dword [ebp - 0x474]
mov dword [ebp - 0x700], eax
jmp 0x1001536b
jmp 0x10015331
jmp 0x100152d3
mov byte [ebp - 0x160], 0xa
mov byte [ebp - 0x15f], 0x50
mov byte [ebp - 0x15e], 7
mov byte [ebp - 0x15d], 0x33
mov byte [ebp - 0x15c], 0xc
mov byte [ebp - 0x15b], 0x32
mov byte [ebp - 0x15a], 6
mov byte [ebp - 0x159], 0x10
mov byte [ebp - 0x158], 8
mov byte [ebp - 0x157], 7
mov byte [ebp - 0x156], 2
mov byte [ebp - 0x155], 0x10
mov byte [ebp - 0x154], 9
mov byte [ebp - 0x153], 0x10
mov byte [ebp - 0x152], 0xb
mov byte [ebp - 0x151], 1
mov byte [ebp - 0x150], 0
mov byte [ebp - 0x14f], 0x22
mov byte [ebp - 0x14e], 0xd
mov byte [ebp - 0x14d], 0x34
mov byte [ebp - 0x14c], 3
mov byte [ebp - 0x14b], 0x23
mov byte [ebp - 0x14a], 4
mov byte [ebp - 0x149], 0x22
mov byte [ebp - 0x148], 1
mov byte [ebp - 0x147], 0x17
mov byte [ebp - 0x146], 5
mov byte [ebp - 0x145], 0xa
xor eax, eax
inc eax
shl eax, 0
movzx eax, byte [ebp + eax - 0x160]
and eax, 0x22
xor ecx, ecx
inc ecx
shl ecx, 0
movzx ecx, byte [ebp + ecx - 0x160]
or ecx, 0x22
sub ecx, eax
xor eax, eax
inc eax
imul eax, eax, 0
movzx eax, byte [ebp + eax - 0x160]
mov byte [ebp + eax - 0x67c], cl
mov dword [ebp - 0xd8], 1
mov dword [ebp - 0x61c], 0xc63c4078
mov dword [ebp - 0x56c], 3
mov dword [ebp - 0x7b4], 0x373a
mov dword [ebp - 0x70c], 0x5714ffd8
mov dword [ebp - 0x1fc], 0
jmp 0x1001561b
mov eax, dword [ebp - 0x1fc]
inc eax
mov dword [ebp - 0x1fc], eax
cmp dword [ebp - 0x1fc], 1
jge 0x10015637
mov eax, dword [ebp - 0x1fc]
mov dword [ebp + eax*4 - 0x280], 0xfffffff7
jmp 0x1001560e
cmp dword [ebp - 0xd8], 0
jne 0x1001566a
mov eax, dword [ebp - 0xd8]
mov dword [ebp - 0x93c], eax
mov eax, dword [ebp - 0xd8]
mov dword [ebp - 0x61c], eax
cmp dword [ebp - 0x61c], 0
jne 0x1001566a
and dword [ebp - 0x47c], 0
jmp 0x10015674
mov dword [ebp - 0x47c], 1
mov eax, dword [ebp - 0x47c]
mov dword [ebp - 0x56c], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x56c]
cmp ecx, dword [ebp + eax - 0x280]
je 0x100156a1
mov dword [ebp - 0x484], 1
jmp 0x100156a8
and dword [ebp - 0x484], 0
push 4
pop eax
imul eax, eax, 0
push 4
pop ecx
imul ecx, ecx, 0
mov ecx, dword [ebp + ecx - 0x280]
add ecx, dword [ebp - 0x484]
cmp ecx, dword [ebp + eax - 0x280]
jle 0x100156d6
mov dword [ebp - 0x2b4], 1
jmp 0x100156dd
and dword [ebp - 0x2b4], 0
mov eax, dword [ebp - 0xd8]
imul eax, dword [ebp - 0x2b4]
neg eax
cmp eax, dword [ebp - 0x7b4]
jle 0x10015700
mov dword [ebp - 0x2b8], 1
jmp 0x10015707
and dword [ebp - 0x2b8], 0
mov eax, dword [ebp - 0xd8]
cmp eax, dword [ebp - 0x2b8]
jl 0x10015721
mov dword [ebp - 0x2c0], 1
jmp 0x10015728
and dword [ebp - 0x2c0], 0
mov eax, dword [ebp - 0xd8]
cmp dword [ebp - 0x2c0], eax
jg 0x10015742
mov dword [ebp - 0x2c8], 1
jmp 0x10015749
and dword [ebp - 0x2c8], 0
mov eax, dword [ebp - 0x2c8]
mov dword [ebp - 0x70c], eax
mov byte [ebp - 0xbd], 0
movzx eax, byte [ebp - 0xbd]
test eax, eax
je 0x10015780
push 0
push 0
push 0x18f6
push 0x170c
push 0x2702
call dword [sym.imp.USER32.dll_SendDlgItemMessageA]
mov dword [ebp - 0x44], 2
and dword [ebp - 0x240], 0
jmp 0x10015798
mov eax, dword [ebp - 0x44]
inc eax
inc eax
mov dword [ebp - 0x44], eax
cmp dword [ebp - 0x44], 0x1c
jae 0x1001582f
mov eax, dword [ebp - 0x44]
sub eax, dword [ebp - 0x240]
movzx eax, byte [ebp + eax - 0x162]
movsx eax, byte [ebp + eax - 0x67c]
mov ecx, dword [ebp - 0x44]
movzx ecx, byte [ebp + ecx - 0x15f]
and ecx, eax
mov eax, dword [ebp - 0x44]
sub eax, dword [ebp - 0x240]
movzx eax, byte [ebp + eax - 0x162]
movsx eax, byte [ebp + eax - 0x67c]
mov edx, dword [ebp - 0x44]
movzx edx, byte [ebp + edx - 0x15f]
and edx, eax
mov eax, dword [ebp - 0x44]
sub eax, dword [ebp - 0x240]
movzx eax, byte [ebp + eax - 0x162]
movsx eax, byte [ebp + eax - 0x67c]
mov esi, dword [ebp - 0x44]
movzx ebx, byte [ebp + esi - 0x15f]
add ebx, eax
sub ebx, edx
sub ebx, ecx
mov eax, dword [ebp - 0x44]
movzx eax, byte [ebp + eax - 0x160]
mov byte [ebp + eax - 0x67c], bl
jmp 0x10015790
xor eax, eax
inc eax
imul eax, eax, 0xe
mov byte [ebp + eax - 0x67c], 0
lea eax, [ebp - 0x67c]
push eax
lea ecx, [ebp - 0xb1c]
call fcn.10021410
mov dword [ebp - 4], 0x14
mov dword [ebp - 0xe0], 1
mov dword [ebp - 0x2f0], 0xa9d19ac1
mov dword [ebp - 0x2d0], 0x2ba75a59
mov dword [ebp - 0x764], 0x6c0e263
mov dword [ebp - 0xe0], 0xfffffffd
jmp 0x10015897
mov eax, dword [ebp - 0xe0]
inc eax
mov dword [ebp - 0xe0], eax
cmp dword [ebp - 0xe0], 0xb
jl 0x10015994
mov dword [ebp - 0x1dc], 0
mov dword [ebp - 0x26c], 0xffffffff
mov eax, dword [ebp - 0xe0]
mov dword [ebp - 0x26c], eax
cmp dword [ebp - 0x26c], 0
jne 0x100158df
cmp dword [ebp - 0x1dc], 0
jne 0x100158df
and dword [ebp - 0x2e0], 0
jmp 0x100158e9
mov dword [ebp - 0x2e0], 1
mov eax, dword [ebp - 0xe0]
inc eax
mov dword [ebp - 0x2d0], eax
mov eax, dword [ebp - 0x2d0]
cmp eax, dword [ebp - 0x1dc]
jg 0x10015910
mov dword [ebp - 0x2d8], 1
jmp 0x10015917
and dword [ebp - 0x2d8], 0
mov eax, dword [ebp - 0x1dc]
cmp dword [ebp - 0x2d8], eax
jne 0x10015931
mov dword [ebp - 0x2e8], 1
jmp 0x10015938
and dword [ebp - 0x2e8], 0
mov eax, dword [ebp - 0x2e0]
add eax, dword [ebp - 0x2e8]
je 0x1001595b
mov eax, 0xfc3
test eax, eax
je 0x1001595b
mov dword [ebp - 0x2f8], 1
jmp 0x10015962
and dword [ebp - 0x2f8], 0
mov eax, dword [ebp - 0x1dc]
mov dword [ebp - 0x2f0], eax
mov eax, dword [ebp - 0x2f0]
imul eax, dword [ebp - 0x2f8]
mov dword [ebp - 0x764], eax
cmp dword [ebp - 0x26c], 0
je 0x1001598f
jmp 0x1001588a
jmp 0x1001588a
and dword [ebp - 0x1c8], 0
jmp 0x100159aa
cmp dword [ebp - 0x1c8], 0xf
jae 0x10016112
mov dword [ebp - 0x300], 0x399d
mov dword [ebp - 0x718], 0x1000793c
cmp dword [ebp - 0x300], 0x3be6
jle 0x10015a50
and dword [ebp - 0x21c], 0
jmp 0x100159ed
mov eax, dword [ebp - 0x21c]
inc eax
mov dword [ebp - 0x21c], eax
cmp dword [ebp - 0x21c], 0x5452
jge 0x10015a50
and dword [ebp - 0x1e4], 0
jmp 0x10015a0f
mov eax, dword [ebp - 0x1e4]
inc eax
mov dword [ebp - 0x1e4], eax
cmp dword [ebp - 0x1e4], 0x7d86
jge 0x10015a4e
mov eax, dword [ebp - 0x21c]
mov ecx, dword [ebp - 0x1e4]
sar eax, cl
cdq
mov dword [ebp - 0x714], eax
mov dword [ebp - 0x710], edx
push dword [ebp - 0x710]
push dword [ebp - 0x714]
mov ecx, 0x1061e7b8
call fcn.10021267
jmp 0x10015a02
jmp 0x100159e0
mov dword [ebp - 0x40], 0
mov byte [ebp - 4], 0x15
cmp dword [ebp - 0x300], 0x3824
jge 0x10015a77
mov edx, dword [ebp - 0x718]
mov ecx, 0x1061e7b8
call fcn.100255e3
jmp 0x10015a93
mov dword [ebp - 4], 0x14
jmp 0x10015aa3
mov dword [ebp - 0x84], 0x9351f200
mov dword [ebp - 0x68], 0xfffffffa
mov dword [ebp - 0x1c0], 1
mov dword [ebp - 0x7c], 3
mov dword [ebp - 0x248], 0xffffffff
mov dword [ebp - 0xe8], 0
mov dword [ebp - 0x778], 0xc168
mov dword [ebp - 0x730], 0xffffffff
mov dword [ebp - 0x170], 0
jmp 0x10015b06
mov eax, dword [ebp - 0x170]
inc eax
mov dword [ebp - 0x170], eax
cmp dword [ebp - 0x170], 1
jge 0x10015b1f
mov eax, dword [ebp - 0x170]
mov dword [ebp + eax*4 - 0x24], 0xcce45d76
jmp 0x10015af9
mov eax, dword [ebp - 0x40]
mov dword [ebp - 0x40], eax
mov eax, dword [ebp - 0x40]
mov dword [ebp - 0x84], eax
mov eax, dword [ebp - 0x84]
mov dword [ebp - 0x68], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x24]
mov dword [ebp - 0xaac], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x24]
inc eax
cmp eax, 7
jl 0x10015b63
mov dword [ebp - 0x308], 1
jmp 0x10015b6a
and dword [ebp - 0x308], 0
cmp dword [ebp - 0x308], 0xffffffff
jge 0x10015b7f
mov dword [ebp - 0x310], 1
jmp 0x10015b86
and dword [ebp - 0x310], 0
mov eax, dword [ebp - 0x310]
mov dword [ebp - 0x84], eax
mov eax, dword [ebp - 0x84]
mov dword [ebp - 0x1c0], eax
mov eax, dword [ebp - 0x40]
mov dword [ebp - 0x944], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x40]
cmp ecx, dword [ebp + eax - 0x24]
jle 0x10015bc2
mov dword [ebp - 0x250], 0xd2250db8
mov dword [ebp - 0xbc], 7
mov dword [ebp - 0x294], 0xa8afc1da
mov dword [ebp - 0x290], 0xa8afc1da
mov dword [ebp - 0x28c], 0xa8afc1da
mov dword [ebp - 0x288], 0xa8afc1da
mov dword [ebp - 0x780], 0
mov dword [ebp - 0x738], 0xf848
mov dword [ebp - 0x258], 4
mov dword [ebp - 0x1d0], 0
jmp 0x10016185
mov eax, dword [ebp - 0x1d0]
inc eax
mov dword [ebp - 0x1d0], eax
cmp dword [ebp - 0x1d0], 3
jge 0x100161a1
mov eax, dword [ebp - 0x1d0]
mov dword [ebp + eax*4 - 0x85c], 9
jmp 0x10016178
mov byte [ebp - 0xc5], 0
movzx eax, byte [ebp - 0xc5]
test eax, eax
je 0x100161c2
push 0
push 0
push 0x1943
call dword [sym.imp.GDI32.dll_PlayEnhMetaFile]
mov eax, dword [ebp - 0x250]
mov dword [ebp - 0x97c], eax
cmp dword [ebp - 0x250], 1
jne 0x100161e3
mov dword [ebp - 0x3c8], 1
jmp 0x100161ea
and dword [ebp - 0x3c8], 0
cmp dword [ebp - 0x250], 0
jne 0x10016215
mov eax, 0x5732
test eax, eax
je 0x1001620c
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x294], 0
jne 0x10016215
and dword [ebp - 0x3c0], 0
jmp 0x1001621f
mov dword [ebp - 0x3c0], 1
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x294]
cmp dword [ebp - 0x3c0], eax
jg 0x10016240
mov dword [ebp - 0x3d0], 1
jmp 0x10016247
and dword [ebp - 0x3d0], 0
mov eax, dword [ebp - 0x3c8]
mov dword [ebp - 0xbc], eax
mov eax, dword [ebp - 0xbc]
cmp eax, dword [ebp - 0x3d0]
je 0x1001627a
push 4
pop eax
imul eax, eax, 3
cmp dword [ebp + eax - 0x294], 0
jne 0x1001627a
and dword [ebp - 0x3d8], 0
jmp 0x10016284
mov dword [ebp - 0x3d8], 1
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x294]
cmp dword [ebp - 0x3d8], eax
jg 0x100162a4
mov dword [ebp - 0x3e0], 1
jmp 0x100162ab
and dword [ebp - 0x3e0], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x3e0]
add ecx, 3
imul ecx, dword [ebp + eax - 0x294]
add ecx, 4
cmp ecx, 8
jle 0x100162d6
mov dword [ebp - 0x114], 0
mov dword [ebp - 0x174], 0
jmp 0x100165d3
mov eax, dword [ebp - 0x174]
inc eax
mov dword [ebp - 0x174], eax
cmp dword [ebp - 0x174], 1
jge 0x100165ef
mov eax, dword [ebp - 0x174]
mov dword [ebp + eax*4 - 0x460], 1
jmp 0x100165c6
mov dword [ebp - 0x114], 0
jmp 0x10016608
mov eax, dword [ebp - 0x114]
dec eax
mov dword [ebp - 0x114], eax
cmp dword [ebp - 0x114], 0
jl 0x1001662d
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x460]
mov ecx, dword [ebp - 0x114]
mov dword [ebp + ecx*4 - 0x460], eax
jmp 0x100165fb
cmp dword [0x1061f908], 0
je 0x1001738e
mov dword [ebp - 0x14], 0xffffffff
mov dword [ebp - 0x8c], 0xffffffff
mov dword [ebp - 0xf8], 0xfffffff8
mov dword [ebp - 0x694], 0
mov dword [ebp - 0x23c], 2
mov dword [ebp - 0x17c], 0
jmp 0x10016682
mov eax, dword [ebp - 0x17c]
inc eax
mov dword [ebp - 0x17c], eax
cmp dword [ebp - 0x17c], 4
jge 0x1001669e
mov eax, dword [ebp - 0x17c]
mov dword [ebp + eax*4 - 0xb44], 0xffffffff
jmp 0x10016675
mov eax, dword [ebp - 0x14]
mov dword [ebp - 0x8c], eax
mov eax, dword [ebp - 0x8c]
cmp eax, dword [ebp - 0x14]
jge 0x100166be
mov dword [ebp - 0x468], 1
jmp 0x100166c5
and dword [ebp - 0x468], 0
mov eax, dword [ebp - 0x14]
cmp dword [ebp - 0x468], eax
jl 0x100166dc
mov dword [ebp - 0x480], 1
jmp 0x100166e3
and dword [ebp - 0x480], 0
mov eax, dword [ebp - 0x14]
cmp eax, dword [ebp - 0x14]
jg 0x100166f7
mov dword [ebp - 0x470], 1
jmp 0x100166fe
and dword [ebp - 0x470], 0
mov eax, dword [ebp - 0x14]
imul eax, dword [ebp - 0x470]
test eax, eax
jne 0x1001671b
cmp dword [ebp - 0x14], 0
jne 0x1001671b
and dword [ebp - 0x740], 0
jmp 0x10016725
mov dword [ebp - 0x740], 1
mov eax, dword [ebp - 0x14]
cmp eax, dword [ebp - 0x14]
jge 0x10016739
mov dword [ebp - 0x478], 1
jmp 0x10016740
and dword [ebp - 0x478], 0
mov eax, dword [ebp - 0x478]
sub eax, dword [ebp - 0x14]
cmp dword [ebp - 0x480], eax
jl 0x1001675d
mov dword [ebp - 0x488], 1
jmp 0x10016764
and dword [ebp - 0x488], 0
mov eax, dword [ebp - 0x14]
cmp dword [ebp - 0x488], eax
jge 0x1001677b
mov dword [ebp - 0x490], 1
jmp 0x10016782
and dword [ebp - 0x490], 0
mov eax, dword [ebp - 0x14]
imul eax, dword [ebp - 0x490]
test eax, eax
jne 0x1001679f
cmp dword [ebp - 0x14], 0
jne 0x1001679f
and dword [ebp - 0x498], 0
jmp 0x100167a9
mov dword [ebp - 0x498], 1
mov eax, dword [ebp - 0x14]
cmp dword [ebp - 0x498], eax
jne 0x100167c0
mov dword [ebp - 0x4a0], 1
jmp 0x100167c7
and dword [ebp - 0x4a0], 0
mov eax, dword [ebp - 0x4a0]
neg eax
cmp eax, 0xfffffff8
jl 0x10016b95
mov dword [ebp - 0x234], 0xca862934
mov dword [ebp - 0x68c], 0xfffffffc
mov dword [ebp - 0x748], 0x3a2cc370
mov dword [ebp - 0x684], 0xda2dd443
mov dword [ebp - 0x69c], 1
mov dword [ebp - 0x510], 0xde7e8591
mov dword [ebp - 0x184], 0
jmp 0x1001682d
mov eax, dword [ebp - 0x184]
inc eax
mov dword [ebp - 0x184], eax
cmp dword [ebp - 0x184], 1
jge 0x10016849
mov eax, dword [ebp - 0x184]
mov dword [ebp + eax*4 - 0x4e8], 0xfffffff9
jmp 0x10016820
mov dword [ebp - 0x8c], 0
jmp 0x10016862
mov eax, dword [ebp - 0x8c]
inc eax
mov dword [ebp - 0x8c], eax
cmp dword [ebp - 0x8c], 0x33
jl 0x100169e3
mov dword [ebp - 0x228], 0xa4a2
mov dword [ebp - 0x14], 0xd
jmp 0x10016889
mov eax, dword [ebp - 0x14]
inc eax
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 0x14
jle 0x100169de
mov dword [ebp - 0x22c], 0xffffffff
mov dword [ebp - 0x790], 3
cmp dword [ebp - 0xf8], 0
je 0x100168b5
jmp 0x100169de
mov eax, dword [ebp - 0x14]
mov dword [ebp - 0x98c], eax
cmp dword [ebp - 0x8c], 0
je 0x10016923
mov eax, dword [ebp - 0x234]
cmp eax, dword [ebp - 0x228]
jge 0x100168e1
mov dword [ebp - 0x4a8], 1
jmp 0x100168e8
and dword [ebp - 0x4a8], 0
mov eax, dword [ebp - 0xf8]
cmp dword [ebp - 0x4a8], eax
jne 0x10016902
mov dword [ebp - 0x4b0], 1
jmp 0x10016909
and dword [ebp - 0x4b0], 0
mov eax, dword [ebp - 0x22c]
cmp eax, dword [ebp - 0x4b0]
je 0x10016923
mov dword [ebp - 0x4b8], 1
jmp 0x1001692a
and dword [ebp - 0x4b8], 0
mov eax, dword [ebp - 0x22c]
cmp eax, dword [ebp - 0x4b8]
jl 0x10016944
mov dword [ebp - 0x4c0], 1
jmp 0x1001694b
and dword [ebp - 0x4c0], 0
mov eax, dword [ebp - 0x4c0]
sub eax, dword [ebp - 0x228]
sub eax, dword [ebp - 0x228]
jne 0x10016971
cmp dword [ebp - 0x234], 0
jne 0x10016971
and dword [ebp - 0x4c8], 0
jmp 0x1001697b
mov dword [ebp - 0x4c8], 1
mov eax, dword [ebp - 0x22c]
cmp dword [ebp - 0x4c8], eax
jg 0x10016995
mov dword [ebp - 0x4d0], 1
jmp 0x1001699c
and dword [ebp - 0x4d0], 0
mov eax, dword [ebp - 0xf8]
cmp dword [ebp - 0x4d0], eax
jl 0x100169b3
cmp dword [ebp - 0x234], 0
je 0x100169c6
push 0xfffffffffffffffe
pop eax
test eax, eax
je 0x100169c6
mov dword [ebp - 0x4d8], 1
jmp 0x100169cd
and dword [ebp - 0x4d8], 0
mov eax, dword [ebp - 0x4d8]
mov dword [ebp - 0x790], eax
jmp 0x10016882
jmp 0x10016855
mov eax, dword [ebp - 0x8c]
neg eax
cmp eax, 0xfff9
jae 0x10016b7a
mov eax, dword [ebp - 0x748]
mov dword [ebp - 0xa90], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x4e8]
add eax, 0x33a5
jne 0x10016a31
cmp dword [ebp - 0x684], 0
jne 0x10016a31
mov eax, 0x414e
test eax, eax
jne 0x10016a31
and dword [ebp - 0x4e0], 0
jmp 0x10016a3b
mov dword [ebp - 0x4e0], 1
mov eax, dword [ebp - 0x68c]
add eax, dword [ebp - 0x4e0]
cmp eax, dword [ebp - 0x14]
je 0x10016a58
mov dword [ebp - 0x4f0], 1
jmp 0x10016a5f
and dword [ebp - 0x4f0], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x4e8]
cmp dword [ebp - 0x4f0], eax
jle 0x10016a89
cmp dword [ebp - 0xf8], 0
je 0x10016a89
mov dword [ebp - 0x4f8], 1
jmp 0x10016a90
and dword [ebp - 0x4f8], 0
push 4
pop eax
imul eax, eax, 3
mov ecx, dword [ebp - 0x4f8]
mov dword [ebp + eax - 0xb44], ecx
mov eax, dword [ebp - 0x14]
mov dword [ebp - 0x994], eax
push 8
pop eax
test eax, eax
jne 0x10016ac5
cmp dword [ebp - 0xf8], 0
jne 0x10016ac5
and dword [ebp - 0x500], 0
jmp 0x10016acf
mov dword [ebp - 0x500], 1
mov eax, dword [ebp - 0x500]
sub eax, dword [ebp - 0x694]
cmp eax, dword [ebp - 0x69c]
jne 0x10016aef
mov dword [ebp - 0x508], 1
jmp 0x10016af6
and dword [ebp - 0x508], 0
mov eax, dword [ebp - 0x510]
cmp dword [ebp - 0x508], eax
je 0x10016b10
mov dword [ebp - 0x518], 1
jmp 0x10016b17
and dword [ebp - 0x518], 0
mov eax, dword [ebp - 0x510]
cmp dword [ebp - 0x518], eax
jne 0x10016b31
mov dword [ebp - 0x520], 1
jmp 0x10016b38
and dword [ebp - 0x520], 0
mov eax, dword [ebp - 0x23c]
dec eax
mov dword [ebp - 0x23c], eax
mov eax, dword [ebp - 0x23c]
cmp eax, dword [ebp - 0x520]
jne 0x10016b5f
mov dword [ebp - 0x528], 1
jmp 0x10016b66
and dword [ebp - 0x528], 0
imul eax, dword [ebp - 0x528], 0xffffffff
test eax, eax
jne 0x10016b7a
and dword [ebp - 0x530], 0
jmp 0x10016b84
mov dword [ebp - 0x530], 1
mov eax, dword [ebp - 0x530]
mov dword [ebp - 0xf8], eax
jmp 0x10016c17
push 3
lea ecx, [ebp - 0x874]
call fcn.100214a3
mov dword [ebp - 4], 0x17
mov dword [ebp - 0x18c], 0
jmp 0x10016bc2
mov eax, dword [ebp - 0x18c]
inc eax
mov dword [ebp - 0x18c], eax
cmp dword [ebp - 0x18c], 3
jge 0x10016be4
push dword [ebp - 0x18c]
lea ecx, [ebp - 0x874]
call fcn.10021541
mov dword [eax], 0xfffffff9
jmp 0x10016bb5
push 1
lea ecx, [ebp - 0x874]
call fcn.10021541
mov dword [ebp - 0x538], eax
mov eax, dword [ebp - 0x538]
mov eax, dword [eax]
dec eax
mov ecx, dword [ebp - 0x538]
mov dword [ecx], eax
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x874]
call fcn.10021525
mov eax, dword [ebp + 8]
mov dword [ebp - 0x6a4], eax
mov eax, dword [ebp + 0xc]
mov dword [ebp - 0x6b4], eax
mov dword [ebp - 0x194], 7
mov dword [ebp - 0x194], 0
jmp 0x10016c4c
mov eax, dword [ebp - 0x194]
dec eax
mov dword [ebp - 0x194], eax
cmp dword [ebp - 0x194], 0xfffffff2
jle 0x10016ca5
mov dword [ebp - 0x19c], 0xdb22124f
mov dword [ebp - 0x19c], 0
jmp 0x10016c78
mov eax, dword [ebp - 0x19c]
inc eax
mov dword [ebp - 0x19c], eax
cmp dword [ebp - 0x19c], 0x16
jg 0x10016ca3
mov byte [ebp - 0xce], 0
movzx eax, byte [ebp - 0xce]
test eax, eax
je 0x10016ca1
push 0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_RaiseException]
jmp 0x10016c6b
jmp 0x10016c3f
mov eax, dword [ebp - 0x6a4]
mov dword [ebp - 0x6c4], eax
push 2
lea ecx, [ebp - 0xa38]
call fcn.100214a3
mov dword [ebp - 4], 0x18
mov dword [ebp - 0x1ac], 0
mov dword [ebp - 0x6ac], 0x3152c58f
mov dword [ebp - 0xa4c], 0xffffffff
mov dword [ebp - 0x99c], 0xd11d962e
mov dword [ebp - 0xa60], 0x6f8c7b5c
mov dword [ebp - 0x9a4], 0xf8d19c92
mov dword [ebp - 0xa5c], 0xffffffff
mov dword [ebp - 0x540], 3
mov dword [ebp - 0x1a4], 0
jmp 0x10016d2e
mov eax, dword [ebp - 0x1a4]
inc eax
mov dword [ebp - 0x1a4], eax
cmp dword [ebp - 0x1a4], 2
jge 0x10016d50
push dword [ebp - 0x1a4]
lea ecx, [ebp - 0xa38]
call fcn.10021541
mov dword [eax], 0xffff
jmp 0x10016d21
mov dword [ebp - 0x1ac], 1
jmp 0x10016d69
mov eax, dword [ebp - 0x1ac]
dec eax
mov dword [ebp - 0x1ac], eax
cmp dword [ebp - 0x1ac], 0
jl 0x10016d9f
mov dword [ebp - 0x9ac], 9
mov dword [ebp - 0xa64], 0x369bd69
mov dword [ebp - 0x6ac], 0xd32ffab8
mov eax, dword [ebp - 0x540]
inc eax
mov dword [ebp - 0x540], eax
jmp 0x10016d5c
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xa38]
call fcn.10021525
mov eax, dword [ebp - 0x6b4]
mov dword [ebp - 0x6bc], eax
mov dword [ebp - 0x78], 0xffffffff
mov dword [ebp - 0x558], 0
push 4
lea ecx, [ebp - 0x88c]
call fcn.100214a3
mov dword [ebp - 4], 0x19
mov dword [ebp - 0x54], 0
jmp 0x10016def
mov eax, dword [ebp - 0x54]
inc eax
mov dword [ebp - 0x54], eax
cmp dword [ebp - 0x54], 3
jge 0x10016e05
mov eax, dword [ebp - 0x54]
mov dword [ebp + eax*4 - 0xaf4], 0x15aa9614
jmp 0x10016de8
mov dword [ebp - 0x54], 0
jmp 0x10016e15
mov eax, dword [ebp - 0x54]
inc eax
mov dword [ebp - 0x54], eax
cmp dword [ebp - 0x54], 4
jge 0x10016e31
push dword [ebp - 0x54]
lea ecx, [ebp - 0x88c]
call fcn.10021541
mov dword [eax], 0xfffffff8
jmp 0x10016e0e
mov eax, dword [ebp - 0x78]
mov dword [ebp - 0x9b4], eax
mov eax, dword [ebp - 0x78]
mov dword [ebp - 0xa6c], eax
cmp dword [ebp - 0x78], 0xffffffff
jg 0x10016e55
mov dword [ebp - 0x548], 1
jmp 0x10016e5c
and dword [ebp - 0x548], 0
mov eax, dword [ebp - 0x78]
cmp eax, dword [ebp - 0x548]
jg 0x10016e73
mov dword [ebp - 0x244], 1
jmp 0x10016e7a
and dword [ebp - 0x244], 0
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x244]
mov dword [ebp + eax - 0xaf4], ecx
mov eax, dword [ebp - 0x78]
imul eax, dword [ebp - 0x244]
cmp eax, dword [ebp - 0x78]
jge 0x10016eae
mov eax, 0xf6f97812
test eax, eax
jne 0x10016eae
and dword [ebp - 0x550], 0
jmp 0x10016eb8
mov dword [ebp - 0x550], 1
mov eax, dword [ebp - 0x550]
mov dword [ebp - 0x558], eax
cmp dword [ebp - 0x558], 1
je 0x10016ed9
mov dword [ebp - 0x560], 1
jmp 0x10016ee0
and dword [ebp - 0x560], 0
mov eax, dword [ebp - 0x78]
imul eax, dword [ebp - 0x560]
cmp eax, dword [ebp - 0x78]
jle 0x10016efb
mov dword [ebp - 0x568], 1
jmp 0x10016f02
and dword [ebp - 0x568], 0
push 3
lea ecx, [ebp - 0x88c]
call fcn.10021541
mov ecx, dword [ebp - 0x568]
mov dword [eax], ecx
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x88c]
call fcn.10021525
push dword [ebp - 0x6bc]
push dword [ebp - 0x6c4]
call dword [0x1061f908]
mov dword [ebp - 0x6ec], eax
mov dword [ebp - 0x844], 0x3dd33a4a
mov dword [ebp - 0x840], 0x3dd33a4a
mov dword [ebp - 0x83c], 0x3dd33a4a
mov dword [ebp - 0x838], 0x3dd33a4a
lea ecx, [ebp - 0x26d]
call fcn.10021550
push eax
lea eax, [ebp - 0x834]
push eax
lea eax, [ebp - 0x844]
push eax
lea ecx, [ebp - 0xb24]
call fcn.10021636
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0x7d8]
call fcn.100214ff
mov dword [ebp - 4], 0x1a
mov dword [ebp - 0x11c], 9
mov dword [ebp - 0x830], 0xcc0e4260
mov dword [ebp - 0x82c], 0xcc0e4260
mov dword [ebp - 0x828], 0xcc0e4260
mov dword [ebp - 0x824], 0xcc0e4260
lea ecx, [ebp - 0x265]
call fcn.10021550
push eax
lea eax, [ebp - 0x820]
push eax
lea eax, [ebp - 0x830]
push eax
lea ecx, [ebp - 0xb04]
call fcn.10021636
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0xa58]
call fcn.100214ff
mov byte [ebp - 4], 0x1b
mov dword [ebp - 0x11c], 0
jmp 0x10017026
mov eax, dword [ebp - 0x11c]
inc eax
mov dword [ebp - 0x11c], eax
cmp dword [ebp - 0x11c], 3
jg 0x10017365
mov dword [ebp - 0x30], 0xffffffff
mov dword [ebp - 0x9bc], 0x2c9dbe4f
mov dword [ebp - 0xa68], 0
push 1
lea ecx, [ebp - 0xa48]
call fcn.100214a3
mov byte [ebp - 4], 0x1c
mov dword [ebp - 0x1b4], 0
jmp 0x10017078
mov eax, dword [ebp - 0x1b4]
inc eax
mov dword [ebp - 0x1b4], eax
cmp dword [ebp - 0x1b4], 1
jge 0x1001709a
push dword [ebp - 0x1b4]
lea ecx, [ebp - 0xa48]
call fcn.10021541
mov dword [eax], 0xcb1743e6
jmp 0x1001706b
mov dword [ebp - 0x30], 0
jmp 0x100170aa
mov eax, dword [ebp - 0x30]
inc eax
mov dword [ebp - 0x30], eax
cmp dword [ebp - 0x30], 3
jg 0x10017312
mov dword [ebp - 0x34], 0xf2fb5a5e
mov dword [ebp - 0x6e4], 1
mov dword [ebp - 0x34], 3
jmp 0x100170d5
mov eax, dword [ebp - 0x34]
dec eax
mov dword [ebp - 0x34], eax
cmp dword [ebp - 0x34], 0
jl 0x10017304
mov dword [ebp - 0x570], 0xd926128f
mov dword [ebp - 0x6d4], 0xa928
mov dword [ebp - 0x9c4], 0x8d922791
push dword [ebp - 0x34]
lea ecx, [ebp - 0x7d8]
call fcn.10021541
cmp dword [ebp - 0x570], 0
je 0x100171b8
mov eax, dword [ebp - 0x570]
imul eax, dword [ebp - 0x11c]
cmp eax, dword [ebp - 0x30]
jg 0x10017136
mov dword [ebp - 0x578], 1
jmp 0x1001713d
and dword [ebp - 0x578], 0
mov eax, dword [ebp - 0x30]
cmp dword [ebp - 0x578], eax
jg 0x10017154
mov dword [ebp - 0x580], 1
jmp 0x1001715b
and dword [ebp - 0x580], 0
cmp dword [ebp - 0x580], 4
ja 0x10017170
mov dword [ebp - 0x588], 1
jmp 0x10017177
and dword [ebp - 0x588], 0
push 0
lea ecx, [ebp - 0x7d8]
call fcn.10021541
mov ecx, dword [ebp - 0x588]
cmp ecx, dword [eax]
jg 0x1001719a
mov dword [ebp - 0x590], 1
jmp 0x100171a1
and dword [ebp - 0x590], 0
mov eax, dword [ebp - 0x590]
sub eax, dword [ebp - 0x30]
jne 0x100171b8
mov dword [ebp - 0x598], 1
jmp 0x100171bf
and dword [ebp - 0x598], 0
mov eax, dword [ebp - 0x30]
imul eax, dword [ebp - 0x598]
cmp dword [ebp - 0x34], eax
jne 0x100171da
mov dword [ebp - 0x6cc], 1
jmp 0x100171e1
and dword [ebp - 0x6cc], 0
mov eax, dword [ebp - 0x30]
mov dword [ebp - 0xa98], eax
mov eax, dword [ebp - 0x6d4]
mov dword [ebp - 0x9cc], eax
cmp dword [ebp - 0x34], 0xffffffff
jl 0x10017208
mov dword [ebp - 0x24c], 1
jmp 0x1001720f
and dword [ebp - 0x24c], 0
push 1
lea ecx, [ebp - 0xa58]
call fcn.10021541
mov ecx, dword [ebp - 0x24c]
mov dword [eax], ecx
imul eax, dword [ebp - 0x24c], 0x557b
cmp eax, 0xfff9
je 0x10017241
mov dword [ebp - 0x5a0], 1
jmp 0x10017248
and dword [ebp - 0x5a0], 0
push dword [ebp - 0x34]
lea ecx, [ebp - 0x7d8]
call fcn.10021541
mov ecx, dword [ebp - 0x5a0]
cmp ecx, dword [eax]
jle 0x1001726c
mov dword [ebp - 0x5a8], 1
jmp 0x10017273
and dword [ebp - 0x5a8], 0
mov eax, dword [ebp - 0x34]
cmp dword [ebp - 0x5a8], eax
jg 0x1001728a
mov dword [ebp - 0x5b0], 1
jmp 0x10017291
and dword [ebp - 0x5b0], 0
cmp dword [ebp - 0x5b0], 0x32f82966
jge 0x100172a9
mov dword [ebp - 0x6dc], 1
jmp 0x100172b0
and dword [ebp - 0x6dc], 0
mov eax, dword [ebp - 0x30]
mov dword [ebp - 0xa70], eax
mov eax, dword [ebp - 0x30]
mov dword [ebp - 0x8e8], eax
cmp dword [ebp - 0x34], 0
je 0x100172e1
mov dword [ebp - 0x5b8], 0x6dfe5350
mov eax, dword [ebp - 0x5b8]
inc eax
mov dword [ebp - 0x5b8], eax
jmp 0x100172ff
mov byte [ebp - 0xc7], 0
movzx eax, byte [ebp - 0xc7]
test eax, eax
je 0x100172ff
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_WaitForSingleObjectEx]
jmp 0x100170ce
mov eax, dword [ebp - 0x34]
mov dword [ebp - 0x6e4], eax
jmp 0x100170a3
mov byte [ebp - 0xad], 0
movzx eax, byte [ebp - 0xad]
test eax, eax
je 0x10017351
push 0
push 0x440
push 0x1e
push 0x1ff9
push 0x2099
push 0x1e78
push 0x1add
push 0x54f
push 0x25c
call dword [sym.imp.GDI32.dll_BitBlt]
mov byte [ebp - 4], 0x1b
lea ecx, [ebp - 0xa48]
call fcn.10021525
jmp 0x10017019
mov byte [ebp - 4], 0x1a
lea ecx, [ebp - 0xa58]
call fcn.10021525
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x7d8]
call fcn.10021525
mov eax, dword [ebp - 0x6ec]
jmp 0x100176db
push 1
lea ecx, [ebp - 0x66c]
call fcn.100214a3
mov dword [ebp - 4], 0x1d
push 2
lea ecx, [ebp - 0x2ac]
call fcn.100214a3
mov byte [ebp - 4], 0x1e
mov dword [ebp - 0x4c], 0
jmp 0x100173c3
mov eax, dword [ebp - 0x4c]
inc eax
mov dword [ebp - 0x4c], eax
cmp dword [ebp - 0x4c], 1
jge 0x100173df
push dword [ebp - 0x4c]
lea ecx, [ebp - 0x66c]
call fcn.10021541
mov dword [eax], 0x6bdd
jmp 0x100173bc
mov dword [ebp - 0x4c], 0
jmp 0x100173ef
mov eax, dword [ebp - 0x4c]
inc eax
mov dword [ebp - 0x4c], eax
cmp dword [ebp - 0x4c], 2
jge 0x10017408
push dword [ebp - 0x4c]
lea ecx, [ebp - 0x2ac]
call fcn.10021541
or dword [eax], 0xffffffff
jmp 0x100173e8
mov byte [ebp - 0xc8], 0
movzx eax, byte [ebp - 0xc8]
test eax, eax
je 0x10017427
push 0
push 0xa66
call dword [sym.imp.KERNEL32.dll_GetCPInfo]
push 0
lea ecx, [ebp - 0x2ac]
call fcn.10021541
and dword [eax], 0
jmp 0x1001745d
push 0
lea ecx, [ebp - 0x2ac]
call fcn.10021541
mov dword [ebp - 0x5c0], eax
mov eax, dword [ebp - 0x5c0]
mov eax, dword [eax]
inc eax
mov ecx, dword [ebp - 0x5c0]
mov dword [ecx], eax
push 0
lea ecx, [ebp - 0x2ac]
call fcn.10021541
cmp dword [eax], 0
jg 0x100176bb
mov dword [ebp - 0x1c], 0x816210b9
mov dword [ebp - 0xc4], 0
mov dword [ebp - 0x108], 0xc7f05f43
mov dword [ebp - 0x1c], 0
jmp 0x1001749e
mov eax, dword [ebp - 0x1c]
inc eax
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 0
jg 0x1001761a
push 0
lea ecx, [ebp - 0x2ac]
call fcn.10021541
push dword [eax]
lea ecx, [ebp - 0x66c]
call fcn.10021541
mov dword [ebp - 0x5c8], eax
push dword [ebp - 0x1c]
lea ecx, [ebp - 0x66c]
call fcn.10021541
mov ecx, dword [ebp - 0x5c8]
mov eax, dword [eax]
mov dword [ecx], eax
mov eax, dword [ebp - 0x5c8]
cmp dword [eax], 0
je 0x100175e7
cmp dword [ebp - 0x1c], 1
je 0x10017501
mov dword [ebp - 0x5d8], 1
jmp 0x10017508
and dword [ebp - 0x5d8], 0
mov eax, dword [ebp - 0xc4]
cmp eax, dword [ebp - 0xc4]
jg 0x10017522
mov dword [ebp - 0x5d0], 1
jmp 0x10017529
and dword [ebp - 0x5d0], 0
mov eax, dword [ebp - 0xc4]
cmp dword [ebp - 0x5d0], eax
jge 0x10017543
mov dword [ebp - 0x5e0], 1
jmp 0x1001754a
and dword [ebp - 0x5e0], 0
mov eax, dword [ebp - 0x5d8]
cmp eax, dword [ebp - 0x5e0]
jle 0x10017564
mov dword [ebp - 0x5e8], 1
jmp 0x1001756b
and dword [ebp - 0x5e8], 0
push 0
lea ecx, [ebp - 0x2ac]
call fcn.10021541
push dword [eax]
lea ecx, [ebp - 0x66c]
call fcn.10021541
mov ecx, dword [ebp - 0x5e8]
cmp ecx, dword [eax]
je 0x1001759b
mov dword [ebp - 0x5f0], 1
jmp 0x100175a2
and dword [ebp - 0x5f0], 0
mov eax, dword [ebp - 0x1c]
cmp dword [ebp - 0x5f0], eax
jne 0x100175b9
mov dword [ebp - 0x5f8], 1
jmp 0x100175c0
and dword [ebp - 0x5f8], 0
push 0
lea ecx, [ebp - 0x2ac]
call fcn.10021541
mov esi, dword [ebp - 0x5f8]
sub esi, dword [eax]
push dword [ebp - 0x1c]
lea ecx, [ebp - 0x66c]
call fcn.10021541
cmp dword [eax], esi
jl 0x100175eb
cmp dword [ebp - 0x1c], 0
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0x8ec], eax
mov dword [ebp - 0x108], 0xabc24891
push 1
lea ecx, [ebp - 0x2ac]
call fcn.10021541
cmp dword [eax], 0
je 0x10017615
jmp 0x10017497
jmp 0x10017497
mov dword [ebp - 0x108], 0
jmp 0x10017633
mov eax, dword [ebp - 0x108]
dec eax
mov dword [ebp - 0x108], eax
cmp dword [ebp - 0x108], 0
jl 0x100176b6
mov dword [ebp - 0xc4], 0
jmp 0x10017655
mov eax, dword [ebp - 0xc4]
inc eax
mov dword [ebp - 0xc4], eax
cmp dword [ebp - 0xc4], 0
jg 0x10017692
mov dword [ebp - 0x1c], 0
jmp 0x1001766e
mov eax, dword [ebp - 0x1c]
dec eax
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 0
jl 0x10017690
mov byte [ebp - 0x8e], 0
movzx eax, byte [ebp - 0x8e]
test eax, eax
je 0x1001768e
push 0
call dword [sym.imp.KERNEL32.dll_RemoveDirectoryW]
jmp 0x10017667
jmp 0x10017648
mov byte [ebp - 0x95], 0
movzx eax, byte [ebp - 0x95]
test eax, eax
je 0x100176b1
push 1
push 0x25b7
call dword [sym.imp.USER32.dll_FlashWindow]
jmp 0x10017626
jmp 0x10017439
mov byte [ebp - 4], 0x1d
lea ecx, [ebp - 0x2ac]
call fcn.10021525
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x66c]
call fcn.10021525
xor eax, eax
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret