Function at 0x1001e0e2
Capabilities:
Accept command line arguments
Authenticate hmac
Check os version
Encrypt data using speck
Get common file path
Get disk size
Get thread local storage value
Modify service
Query environment variable
Set thread local storage value

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x1005f7e3
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
push ecx
sub esp, 0xfc8
push ebx
push esi
push edi
mov dword [ebp - 0x10], esp
mov dword [ebp - 0x1a0], 0x62d5e48d
mov byte [ebp - 0xb9], 0
movzx eax, byte [ebp - 0xb9]
test eax, eax
je 0x1001e12d
push 0
push 0
call dword [sym.imp.KERNEL32.dll_WaitNamedPipeA]
mov dword [ebp - 0x44c], 0x2c93
mov dword [ebp - 0x89c], str.qpl_tvbpunz_aarqcli_snu_xsfvmki_utuqir_xag_fuk_dldcbw_vofbl_niffnu
cmp dword [ebp - 0x44c], 0x2f95
jle 0x1001e23c
and dword [ebp - 0x198], 0
jmp 0x1001e167
mov eax, dword [ebp - 0x198]
inc eax
mov dword [ebp - 0x198], eax
cmp dword [ebp - 0x198], 0x67de
jge 0x1001e22f
and dword [ebp - 0x214], 0
jmp 0x1001e18d
mov eax, dword [ebp - 0x214]
inc eax
mov dword [ebp - 0x214], eax
cmp dword [ebp - 0x214], 0x540f
jge 0x1001e22a
and dword [ebp - 0x190], 0
jmp 0x1001e1b3
mov eax, dword [ebp - 0x190]
inc eax
mov dword [ebp - 0x190], eax
cmp dword [ebp - 0x190], 0x36c2
jge 0x1001e225
and dword [ebp - 0x20c], 0
jmp 0x1001e1d5
mov eax, dword [ebp - 0x20c]
inc eax
mov dword [ebp - 0x20c], eax
cmp dword [ebp - 0x20c], 0x4085
jge 0x1001e223
mov eax, dword [ebp - 0x190]
cdq
idiv dword [ebp - 0x20c]
mov eax, dword [ebp - 0x198]
mov ecx, dword [ebp - 0x214]
shl eax, cl
xor eax, edx
cdq
mov dword [ebp - 0x930], eax
mov dword [ebp - 0x92c], edx
push dword [ebp - 0x92c]
push dword [ebp - 0x930]
mov ecx, 0x10079c18
call fcn.100048ed
jmp 0x1001e1c8
jmp 0x1001e1a6
jmp 0x1001e180
jmp 0x1001e15a
push 0
push 0xe5f
call dword [sym.imp.USER32.dll_GetClientRect]
mov dword [ebp - 0x1a0], 0
jmp 0x1001e255
mov eax, dword [ebp - 0x1a0]
inc eax
mov dword [ebp - 0x1a0], eax
cmp dword [ebp - 0x1a0], 0x10
jg 0x1001e280
mov byte [ebp - 0xab], 0
movzx eax, byte [ebp - 0xab]
test eax, eax
je 0x1001e27e
push 0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_VerifyVersionInfoW]
jmp 0x1001e248
and dword [ebp - 4], 0
cmp dword [ebp - 0x44c], 0x2b89
jge 0x1001e2a0
mov edx, dword [ebp - 0x89c]
mov ecx, 0x10079c18
call fcn.10006b05
jmp 0x1001e2bc
or dword [ebp - 4], 0xffffffff
jmp 0x1001e2c6
push 3
lea ecx, [ebp - 0xa68]
call fcn.100021db
mov dword [ebp - 4], 2
mov dword [ebp - 0xe3c], 0
mov dword [ebp - 0xe58], 0xdad5a519
mov dword [ebp - 0x834], 0x145c1747
mov dword [ebp - 0x21c], 0
jmp 0x1001e311
mov eax, dword [ebp - 0x21c]
inc eax
mov dword [ebp - 0x21c], eax
cmp dword [ebp - 0x21c], 3
jge 0x1001e333
push dword [ebp - 0x21c]
lea ecx, [ebp - 0xa68]
call fcn.10002242
mov dword [eax], 0x9841b3c6
jmp 0x1001e304
push 0
lea ecx, [ebp - 0xa68]
call fcn.10002242
and dword [eax], 0
jmp 0x1001e369
push 0
lea ecx, [ebp - 0xa68]
call fcn.10002242
mov dword [ebp - 0x82c], eax
mov eax, dword [ebp - 0x82c]
mov eax, dword [eax]
inc eax
mov ecx, dword [ebp - 0x82c]
mov dword [ecx], eax
push 0
lea ecx, [ebp - 0xa68]
call fcn.10002242
cmp dword [eax], 0x15
jne 0x1001e3aa
mov byte [ebp - 0xaf], 0
movzx eax, byte [ebp - 0xaf]
test eax, eax
je 0x1001e3a8
push 0
push 0x499
push 0
push 0
push 0xbc7
push 0xe24
call dword [sym.imp.USER32.dll_ToAsciiEx]
jmp 0x1001e345
mov eax, dword [ebp - 0x834]
inc eax
mov dword [ebp - 0x834], eax
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xa68]
call fcn.1000223d
cmp dword [0x1076dc9c], 0
jne 0x10024e56
push 1
lea ecx, [ebp - 0xd9c]
call fcn.100021db
mov dword [ebp - 4], 3
mov dword [ebp - 0x1a8], 0
jmp 0x1001e400
mov eax, dword [ebp - 0x1a8]
inc eax
mov dword [ebp - 0x1a8], eax
cmp dword [ebp - 0x1a8], 1
jge 0x1001e422
push dword [ebp - 0x1a8]
lea ecx, [ebp - 0xd9c]
call fcn.10002242
mov dword [eax], 0x2062
jmp 0x1001e3f3
mov byte [ebp - 0xb1], 0
movzx eax, byte [ebp - 0xb1]
test eax, eax
je 0x1001e43c
push 0
call dword [sym.imp.KERNEL32.dll_QueryPerformanceCounter]
mov byte [ebp - 0xb3], 0
movzx eax, byte [ebp - 0xb3]
test eax, eax
je 0x1001e582
mov dword [ebp - 0x83c], 0x54a3
mov dword [ebp - 0x924], str.ujomgel_rtgs_hqkonhc_mmlcs_skkoqmvof_mjdfai_tjtzgvg_yrfvfgo_ucgfwki_lvem_nkvaquxvs_kih_hothcls
cmp dword [ebp - 0x83c], 0x55b9
jle 0x1001e52e
push 0
push 0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_GetThreadTimes]
and dword [ebp - 0x22c], 0
jmp 0x1001e49c
mov eax, dword [ebp - 0x22c]
inc eax
mov dword [ebp - 0x22c], eax
cmp dword [ebp - 0x22c], 0x10de
jge 0x1001e52e
and dword [ebp - 0x224], 0
jmp 0x1001e4c2
mov eax, dword [ebp - 0x224]
inc eax
mov dword [ebp - 0x224], eax
cmp dword [ebp - 0x224], 0x7e63
jge 0x1001e529
and dword [ebp - 0x1b0], 0
jmp 0x1001e4e4
mov eax, dword [ebp - 0x1b0]
inc eax
mov dword [ebp - 0x1b0], eax
cmp dword [ebp - 0x1b0], 0x638a
jge 0x1001e527
mov eax, dword [ebp - 0x224]
add eax, dword [ebp - 0x1b0]
and eax, dword [ebp - 0x22c]
cdq
mov dword [ebp - 0x93c], eax
mov dword [ebp - 0x938], edx
push dword [ebp - 0x938]
push dword [ebp - 0x93c]
mov ecx, 0x10079c18
call fcn.100048ed
jmp 0x1001e4d7
jmp 0x1001e4b5
jmp 0x1001e48f
push 0
call dword [sym.imp.GDI32.dll_CreateRectRgnIndirect]
mov byte [ebp - 4], 4
cmp dword [ebp - 0x83c], 0x5262
jge 0x1001e556
mov edx, dword [ebp - 0x924]
mov ecx, 0x10079c18
call fcn.10006b05
jmp 0x1001e572
mov dword [ebp - 4], 3
jmp 0x1001e582
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xd9c]
call fcn.1000223d
mov dword [ebp - 0xdc], 0x1e4f1f13
mov dword [ebp - 0x358], 6
mov dword [ebp - 0x80c], 0xbfb3a4df
push 2
lea ecx, [ebp - 0x3cc]
call fcn.100021db
mov dword [ebp - 4], 6
mov dword [ebp - 0x58], 0
jmp 0x1001e5d3
mov eax, dword [ebp - 0x58]
inc eax
mov dword [ebp - 0x58], eax
cmp dword [ebp - 0x58], 3
jge 0x1001e5e9
mov eax, dword [ebp - 0x58]
mov dword [ebp + eax*4 - 0xa78], 0x12a3cc92
jmp 0x1001e5cc
mov dword [ebp - 0x58], 0
jmp 0x1001e5f9
mov eax, dword [ebp - 0x58]
inc eax
mov dword [ebp - 0x58], eax
cmp dword [ebp - 0x58], 2
jge 0x1001e615
push dword [ebp - 0x58]
lea ecx, [ebp - 0x3cc]
call fcn.10002242
mov dword [eax], 0xfffffffc
jmp 0x1001e5f2
push 0
lea ecx, [ebp - 0x3cc]
call fcn.10002242
mov dword [ebp - 0x3ac], eax
mov eax, dword [ebp - 0x3ac]
mov eax, dword [eax]
dec eax
mov ecx, dword [ebp - 0x3ac]
mov dword [ecx], eax
push 4
pop eax
shl eax, 1
mov ecx, dword [ebp - 0xdc]
mov edx, dword [ebp - 0x3ac]
imul ecx, dword [edx]
cmp ecx, dword [ebp + eax - 0xa78]
jne 0x1001e777
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0xa78]
mov dword [ebp - 0xe60], eax
mov esi, dword [ebp - 0xdc]
push 1
lea ecx, [ebp - 0x3cc]
call fcn.10002242
cmp dword [eax], esi
jl 0x1001e690
mov dword [ebp - 0x844], 1
jmp 0x1001e697
and dword [ebp - 0x844], 0
mov eax, dword [ebp - 0x358]
mov dword [ebp - 0x358], eax
mov esi, dword [ebp - 0x358]
imul esi, dword [ebp - 0x844]
push 0
lea ecx, [ebp - 0x3cc]
call fcn.10002242
cmp esi, dword [eax]
jle 0x1001e6cd
mov dword [ebp - 0x84c], 1
jmp 0x1001e6d4
and dword [ebp - 0x84c], 0
push 4
pop eax
imul eax, eax, 0
mov esi, dword [ebp + eax - 0xa78]
push 0
lea ecx, [ebp - 0x3cc]
call fcn.10002242
mov ecx, dword [ebp - 0x84c]
sub ecx, dword [eax]
add ecx, esi
jne 0x1001e70c
cmp dword [ebp - 0xdc], 0
jne 0x1001e70c
and dword [ebp - 0x868], 0
jmp 0x1001e716
mov dword [ebp - 0x868], 1
mov eax, dword [ebp - 0xdc]
cmp dword [ebp - 0x868], eax
jle 0x1001e736
mov eax, 0xd89e1771
test eax, eax
jne 0x1001e736
and dword [ebp - 0x758], 0
jmp 0x1001e740
mov dword [ebp - 0x758], 1
mov eax, dword [ebp - 0x758]
mov dword [ebp - 0x80c], eax
mov esi, dword [ebp - 0x80c]
push 0
lea ecx, [ebp - 0x3cc]
call fcn.10002242
sub esi, dword [eax]
imul eax, esi, 0x4d41
test eax, eax
je 0x1001e777
mov dword [ebp - 0x3f4], 1
jmp 0x1001e77e
and dword [ebp - 0x3f4], 0
push 4
pop eax
shl eax, 0
push 4
pop ecx
shl ecx, 0
mov edx, dword [ebp - 0x3f4]
sub edx, 0x43d9
sub edx, dword [ebp + ecx - 0xa78]
add edx, dword [ebp + eax - 0xa78]
jne 0x1001e7b8
cmp dword [ebp - 0xdc], 0
jne 0x1001e7b8
and dword [ebp - 0x814], 0
jmp 0x1001e7c2
mov dword [ebp - 0x814], 1
cmp dword [ebp - 0x814], 0xfffffff9
jne 0x1001e7d7
mov dword [ebp - 0x3fc], 1
jmp 0x1001e7de
and dword [ebp - 0x3fc], 0
cmp dword [ebp - 0x3fc], 0xe5c48968
jbe 0x1001e7f6
mov dword [ebp - 0x81c], 1
jmp 0x1001e7fd
and dword [ebp - 0x81c], 0
cmp dword [ebp - 0x81c], 0xe5aba8d6
jae 0x1001e815
mov dword [ebp - 0x824], 1
jmp 0x1001e81c
and dword [ebp - 0x824], 0
cmp dword [ebp - 0x824], 0
jb 0x1001e832
push 0
lea ecx, [ebp - 0x3cc]
call fcn.10002242
push 0
lea ecx, [ebp - 0x3cc]
call fcn.10002242
mov eax, dword [eax]
mov dword [ebp - 0xdc], eax
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x3cc]
call fcn.1000223d
mov dword [ebp - 0x408], 0x3ce3
mov dword [ebp - 0xa28], str.pvbrfbb_mpodwgu_tfklng_opqnc_axlbrbqmf_hqgji_otzb_ztny_plkgcgxnr_grztsyqg_iwdsc
cmp dword [ebp - 0x408], 0x3d42
jle 0x1001e956
and dword [ebp - 0x1c0], 0
jmp 0x1001e890
mov eax, dword [ebp - 0x1c0]
inc eax
mov dword [ebp - 0x1c0], eax
cmp dword [ebp - 0x1c0], 0x7e4a
jge 0x1001e956
and dword [ebp - 0x23c], 0
jmp 0x1001e8b6
mov eax, dword [ebp - 0x23c]
inc eax
mov dword [ebp - 0x23c], eax
cmp dword [ebp - 0x23c], 0xc1a
jge 0x1001e951
and dword [ebp - 0x1b8], 0
jmp 0x1001e8dc
mov eax, dword [ebp - 0x1b8]
inc eax
mov dword [ebp - 0x1b8], eax
cmp dword [ebp - 0x1b8], 0x54d3
jge 0x1001e94c
and dword [ebp - 0x234], 0
jmp 0x1001e8fe
mov eax, dword [ebp - 0x234]
inc eax
mov dword [ebp - 0x234], eax
cmp dword [ebp - 0x234], 0x6b5e
jge 0x1001e94a
mov eax, dword [ebp - 0x1b8]
cdq
idiv dword [ebp - 0x234]
mov eax, dword [ebp - 0x1c0]
add eax, dword [ebp - 0x23c]
add eax, edx
cdq
mov dword [ebp - 0x948], eax
mov dword [ebp - 0x944], edx
push dword [ebp - 0x944]
push dword [ebp - 0x948]
mov ecx, 0x10079c18
call fcn.100048ed
jmp 0x1001e8f1
jmp 0x1001e8cf
jmp 0x1001e8a9
jmp 0x1001e883
mov byte [ebp - 0x15c], 4
mov byte [ebp - 0x15b], 0x94
mov byte [ebp - 0x15a], 0xb
mov byte [ebp - 0x159], 9
mov byte [ebp - 0x158], 1
mov byte [ebp - 0x157], 9
mov byte [ebp - 0x156], 0
mov byte [ebp - 0x155], 0x2e
mov byte [ebp - 0x154], 9
mov byte [ebp - 0x153], 0x2f
mov byte [ebp - 0x152], 1
mov byte [ebp - 0x151], 0x18
mov byte [ebp - 0x150], 2
mov byte [ebp - 0x14f], 0x16
mov byte [ebp - 0x14e], 6
mov byte [ebp - 0x14d], 0x41
mov byte [ebp - 0x14c], 0xa
mov byte [ebp - 0x14b], 0x5f
mov byte [ebp - 0x14a], 5
mov byte [ebp - 0x149], 0
mov byte [ebp - 0x148], 8
mov byte [ebp - 0x147], 0x42
mov byte [ebp - 0x146], 3
mov byte [ebp - 0x145], 0x40
mov byte [ebp - 0x144], 7
mov byte [ebp - 0x143], 0x5c
mov dword [ebp - 4], 7
cmp dword [ebp - 0x408], 0x3bac
jge 0x1001ea2f
mov edx, dword [ebp - 0xa28]
mov ecx, 0x10079c18
call fcn.10006b05
jmp 0x1001ea4b
or dword [ebp - 4], 0xffffffff
jmp 0x1001ea55
mov dword [ebp - 0x244], 0xfffffffc
mov dword [ebp - 0x1c8], 0
jmp 0x1001ea78
mov eax, dword [ebp - 0x1c8]
inc eax
mov dword [ebp - 0x1c8], eax
cmp dword [ebp - 0x1c8], 1
jge 0x1001ea94
mov eax, dword [ebp - 0x1c8]
mov dword [ebp + eax*4 - 0xde8], 0xc204e2db
jmp 0x1001ea6b
mov byte [ebp - 0xb5], 0
movzx eax, byte [ebp - 0xb5]
test eax, eax
je 0x1001eab8
push 0
push 0
push 0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateThread]
mov dword [ebp - 0x244], 0
jmp 0x1001ead1
mov eax, dword [ebp - 0x244]
dec eax
mov dword [ebp - 0x244], eax
cmp dword [ebp - 0x244], 0
jl 0x1001ed0c
push 1
lea ecx, [ebp - 0xa88]
call fcn.100021db
mov dword [ebp - 4], 9
mov dword [ebp - 0x1d0], 0
jmp 0x1001eb0b
mov eax, dword [ebp - 0x1d0]
inc eax
mov dword [ebp - 0x1d0], eax
cmp dword [ebp - 0x1d0], 1
jge 0x1001eb2d
push dword [ebp - 0x1d0]
lea ecx, [ebp - 0xa88]
call fcn.10002242
mov dword [eax], 0x197f0a2
jmp 0x1001eafe
push 0
lea ecx, [ebp - 0xa88]
call fcn.10002242
and dword [eax], 0
jmp 0x1001eb63
push 0
lea ecx, [ebp - 0xa88]
call fcn.10002242
mov dword [ebp - 0x640], eax
mov eax, dword [ebp - 0x640]
mov eax, dword [eax]
inc eax
mov ecx, dword [ebp - 0x640]
mov dword [ecx], eax
push 0
lea ecx, [ebp - 0xa88]
call fcn.10002242
cmp dword [eax], 0
jg 0x1001ecf8
mov dword [ebp - 0x410], 0x4778
mov dword [ebp - 0xa38], str.dzmkrgxs_egayjaf_oudfjmgzs_afhxgzh_lmsnutw_gwftphfl_jjwmvra_lpplef_gtwlmdbin_zqkriq_fdofms
cmp dword [ebp - 0x410], 0x4a6a
jle 0x1001ec91
and dword [ebp - 0x254], 0
jmp 0x1001ebb3
mov eax, dword [ebp - 0x254]
inc eax
mov dword [ebp - 0x254], eax
cmp dword [ebp - 0x254], 0xcf5
jge 0x1001ec75
and dword [ebp - 0x24c], 0
jmp 0x1001ebd9
mov eax, dword [ebp - 0x24c]
inc eax
mov dword [ebp - 0x24c], eax
cmp dword [ebp - 0x24c], 0x714c
jge 0x1001ec70
and dword [ebp - 0x1d8], 0
jmp 0x1001ebff
mov eax, dword [ebp - 0x1d8]
inc eax
mov dword [ebp - 0x1d8], eax
cmp dword [ebp - 0x1d8], 0x68c2
jge 0x1001ec6b
mov eax, dword [ebp - 0x24c]
cdq
idiv dword [ebp - 0x1d8]
xor edx, dword [ebp - 0x254]
mov eax, edx
cdq
mov dword [ebp - 0x954], eax
mov dword [ebp - 0x950], edx
push dword [ebp - 0x950]
push dword [ebp - 0x954]
lea ecx, [ebp - 0xfa8]
call fcn.10002dd6
pop ecx
pop ecx
mov dword [ebp - 0xa30], eax
mov ecx, dword [ebp - 0xa30]
call fcn.100048cd
push eax
call fcn.100476ff
pop ecx
lea ecx, [ebp - 0xfa8]
call fcn.100048c3
jmp 0x1001ebf2
jmp 0x1001ebcc
jmp 0x1001eba6
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
call dword [sym.imp.ADVAPI32.dll_ChangeServiceConfigW]
mov byte [ebp - 0xb7], 0
mov byte [ebp - 4], 0xa
cmp dword [ebp - 0x410], 0x4508
jge 0x1001ecb4
push dword [ebp - 0xa38]
call fcn.100476ff
pop ecx
jmp 0x1001ecd0
mov dword [ebp - 4], 9
jmp 0x1001ece0
movzx eax, byte [ebp - 0xb7]
test eax, eax
je 0x1001ecf3
push 0
call dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
jmp 0x1001eb3f
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xa88]
call fcn.1000223d
jmp 0x1001eac4
xor eax, eax
inc eax
shl eax, 0
movzx eax, byte [ebp + eax - 0x15c]
and eax, 0xf1
xor ecx, ecx
inc ecx
shl ecx, 0
movzx ecx, byte [ebp + ecx - 0x15c]
or ecx, 0xf1
sub ecx, eax
xor eax, eax
inc eax
imul eax, eax, 0
movzx eax, byte [ebp + eax - 0x15c]
mov word [ebp + eax*2 - 0xcfc], cx
mov dword [ebp - 0x1c], 2
and dword [ebp - 0x120], 0
jmp 0x1001ed63
mov eax, dword [ebp - 0x1c]
inc eax
inc eax
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 0x1a
jae 0x1002028e
mov dword [ebp - 0x7e8], 0x5eb
mov dword [ebp - 0xa50], str.rnxrtn_rmdf_kgbiqs_quwlincik_welscijkt_rnmgsuq_sqpm_asyr_laapxsse_fguxfz
cmp dword [ebp - 0x7e8], 0x834
jle 0x1001ef46
mov dword [ebp - 0xa40], 0x15c1
cmp dword [ebp - 0xa40], 0x5d7
jge 0x1001eecd
and dword [ebp - 0xe8], 0
push 0x1076ce90
push 0x10067dd4
call fcn.10047aed
pop ecx
pop ecx
mov eax, dword [0x1076ce90]
mov dword [ebp - 0xa48], eax
mov eax, dword [0x1076ce90]
dec eax
mov dword [0x1076ce90], eax
cmp dword [ebp - 0xa48], 0
je 0x1001eecd
push 0x13ec8
push 0xffffffffffffffff
push 0x1013e770
call fcn.100477b0
add esp, 0xc
mov byte [ebp - 0x3d], 0
push 0x1007ad70
push 0x10067dd4
call fcn.10047aed
pop ecx
pop ecx
and dword [ebp - 0xf8], 0
jmp 0x1001ee25
mov eax, dword [ebp - 0xf8]
inc eax
mov dword [ebp - 0xf8], eax
mov eax, dword [ebp - 0xf8]
cmp eax, dword [0x1007ad70]
jge 0x1001ee72
mov eax, dword [ebp - 0xf8]
lea eax, [eax*8 + 0x1013e440]
push eax
mov eax, dword [ebp - 0xf8]
lea eax, [eax*4 + 0x1076ce98]
push eax
push str._d__lf
call fcn.10047aed
add esp, 0xc
mov eax, dword [ebp - 0xf8]
cmp dword [eax*4 + 0x1076ce98], 0
jle 0x1001ee70
mov byte [ebp - 0x3d], 1
jmp 0x1001ee18
movzx eax, byte [ebp - 0x3d]
test eax, eax
jne 0x1001ee9b
mov eax, dword [ebp - 0xe8]
inc eax
mov dword [ebp - 0xe8], eax
push dword [ebp - 0xe8]
push str.Case__d:_God__Save_me_n
call fcn.100476ff
pop ecx
pop ecx
jmp 0x1001eec8
mov eax, dword [ebp - 0xe8]
inc eax
mov dword [ebp - 0xe8], eax
push 0
call fcn.1001dca5
pop ecx
push ecx
push ecx
fstp qword [esp]
push dword [ebp - 0xe8]
push str.Case__d:__.2lf_n
call fcn.100476ff
add esp, 0x10
jmp 0x1001edc3
and dword [ebp - 0x1e0], 0
jmp 0x1001eee3
mov eax, dword [ebp - 0x1e0]
inc eax
mov dword [ebp - 0x1e0], eax
cmp dword [ebp - 0x1e0], 0x39ac
jge 0x1001ef46
and dword [ebp - 0x25c], 0
jmp 0x1001ef05
mov eax, dword [ebp - 0x25c]
inc eax
mov dword [ebp - 0x25c], eax
cmp dword [ebp - 0x25c], 0x65b7
jge 0x1001ef44
mov eax, dword [ebp - 0x1e0]
mov ecx, dword [ebp - 0x25c]
sar eax, cl
cdq
mov dword [ebp - 0x960], eax
mov dword [ebp - 0x95c], edx
push dword [ebp - 0x95c]
push dword [ebp - 0x960]
mov ecx, 0x10079c18
call fcn.100048ed
jmp 0x1001eef8
jmp 0x1001eed6
mov dword [ebp - 4], 0xc
cmp dword [ebp - 0x7e8], 0x2bd
jge 0x1001ef69
mov edx, dword [ebp - 0xa50]
mov ecx, 0x10079c18
call fcn.10006b05
jmp 0x1001ef85
or dword [ebp - 4], 0xffffffff
jmp 0x1001ef8f
mov dword [ebp - 0x418], 0x4886
mov dword [ebp - 0xb58], str.eizrkjf_qcurzvaq_chvsf_whunybo_uuclvcint_ezx_gtz_wzehn_elhvketth_avknlbr_wwgtnodn_ekywxpg
cmp dword [ebp - 0x418], 0x4b85
jle 0x1001f098
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_ExpandEnvironmentStringsA]
and dword [ebp - 0x188], 0
jmp 0x1001efd5
mov eax, dword [ebp - 0x188]
inc eax
mov dword [ebp - 0x188], eax
cmp dword [ebp - 0x188], 0x7a0
jge 0x1001f098
and dword [ebp - 0x264], 0
jmp 0x1001effb
mov eax, dword [ebp - 0x264]
inc eax
mov dword [ebp - 0x264], eax
cmp dword [ebp - 0x264], 0x339b
jge 0x1001f093
and dword [ebp - 0x1f0], 0
jmp 0x1001f021
mov eax, dword [ebp - 0x1f0]
inc eax
mov dword [ebp - 0x1f0], eax
cmp dword [ebp - 0x1f0], 0x3365
jge 0x1001f08e
mov eax, dword [ebp - 0x188]
imul eax, dword [ebp - 0x264]
cdq
idiv dword [ebp - 0x1f0]
mov eax, edx
cdq
mov dword [ebp - 0x96c], eax
mov dword [ebp - 0x968], edx
push dword [ebp - 0x968]
push dword [ebp - 0x96c]
lea ecx, [ebp - 0xfd8]
call fcn.10002dd6
pop ecx
pop ecx
mov dword [ebp - 0xa58], eax
mov ecx, dword [ebp - 0xa58]
call fcn.100048cd
push eax
call fcn.100476ff
pop ecx
lea ecx, [ebp - 0xfd8]
call fcn.100048c3
jmp 0x1001f014
jmp 0x1001efee
jmp 0x1001efc8
mov dword [ebp - 0xb54], 0xffffffff
mov dword [ebp - 4], 0xe
cmp dword [ebp - 0x418], 0x44e4
jge 0x1001f0c1
push dword [ebp - 0xb58]
call fcn.100476ff
pop ecx
jmp 0x1001f0dd
or dword [ebp - 4], 0xffffffff
jmp 0x1001f0e7
mov dword [ebp - 0x298], 0
jmp 0x1001f100
mov eax, dword [ebp - 0x298]
inc eax
mov dword [ebp - 0x298], eax
cmp dword [ebp - 0x298], 3
jge 0x1001f11c
mov eax, dword [ebp - 0x298]
mov dword [ebp + eax*4 - 0xe6c], 0x692b
jmp 0x1001f0f3
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0xe6c]
mov dword [ebp - 0xb54], eax
mov byte [ebp - 0xa1], 0
movzx eax, byte [ebp - 0xa1]
test eax, eax
je 0x1001f151
push 0
push 0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_GetDiskFreeSpaceW]
xor eax, eax
inc eax
imul eax, eax, 0
movzx eax, byte [ebp + eax - 0x15c]
lea eax, [eax + eax + 2]
cmp dword [ebp - 0x1c], eax
jne 0x1001f77f
mov dword [ebp - 0x80], 0xdbc75b16
mov dword [ebp - 0x110], 0
mov dword [ebp - 0xdf8], 0x81b93497
mov dword [ebp - 0x1f8], 0
jmp 0x1001f1a0
mov eax, dword [ebp - 0x1f8]
inc eax
mov dword [ebp - 0x1f8], eax
cmp dword [ebp - 0x1f8], 1
jge 0x1001f1b9
mov eax, dword [ebp - 0x1f8]
mov dword [ebp + eax*4 - 0x38], 6
jmp 0x1001f193
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0x38], 0
jmp 0x1001f1de
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x38]
dec eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x38], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x38], 0xffffffe7
je 0x1001f5ab
mov dword [ebp - 0x8c], 0x4fc2285f
mov dword [ebp - 0x118], 6
cmp dword [ebp - 0x8c], 0xfe30f587
jae 0x1001f21b
mov dword [ebp - 0x648], 1
jmp 0x1001f222
and dword [ebp - 0x648], 0
mov eax, dword [ebp - 0x648]
mov dword [ebp - 0x118], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x38]
cmp eax, dword [ebp - 0x118]
jne 0x1001f24c
mov dword [ebp - 0xa44], 1
jmp 0x1001f253
and dword [ebp - 0xa44], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x38]
sub eax, 0x6c19dc4c
cmp eax, 0xfffffffc
jge 0x1001f27c
cmp dword [ebp - 0x8c], 0
je 0x1001f27c
mov dword [ebp - 0x91c], 1
jmp 0x1001f283
and dword [ebp - 0x91c], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x8c]
cmp ecx, dword [ebp + eax - 0x38]
jl 0x1001f2a5
or eax, 0xffffffff
je 0x1001f2a5
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x38], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x8c]
cmp ecx, dword [ebp + eax - 0x38]
jl 0x1001f2c3
mov dword [ebp - 0x420], 1
jmp 0x1001f2ca
and dword [ebp - 0x420], 0
imul eax, dword [ebp - 0x420], 0x99da
neg eax
jns 0x1001f2e4
mov dword [ebp - 0x760], 1
jmp 0x1001f2eb
and dword [ebp - 0x760], 0
cmp dword [ebp - 0x760], 1
ja 0x1001f300
mov dword [ebp - 0x428], 1
jmp 0x1001f307
and dword [ebp - 0x428], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x38]
imul eax, dword [ebp - 0x428]
test eax, eax
je 0x1001f32e
mov eax, 0x4d81
test eax, eax
jne 0x1001f32e
and dword [ebp - 0x8a8], 0
jmp 0x1001f338
mov dword [ebp - 0x8a8], 1
cmp dword [ebp - 0x8c], 0
je 0x1001f35c
mov dword [ebp - 0xaec], 0xcc72b752
mov eax, dword [ebp - 0x118]
mov dword [ebp - 0xaec], eax
jmp 0x1001f589
mov dword [ebp - 0xc10], 0x1af6658d
mov dword [ebp - 0xc0c], 0x1af6658d
mov dword [ebp - 0xc08], 0x1af6658d
mov dword [ebp - 0xc04], 0x1af6658d
lea ecx, [ebp - 0x3b9]
call fcn.10002251
push eax
lea eax, [ebp - 0xc00]
push eax
lea eax, [ebp - 0xc10]
push eax
lea ecx, [ebp - 0xe98]
call fcn.10002254
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0xa98]
call fcn.10002217
mov dword [ebp - 4], 0x10
mov dword [ebp - 0x660], 0
mov eax, dword [ebp - 0x80]
mov dword [ebp - 0xd08], eax
mov esi, dword [ebp - 0x118]
push 0
lea ecx, [ebp - 0xa98]
call fcn.10002242
cmp dword [eax], esi
je 0x1001f3f6
mov dword [ebp - 0x650], 1
jmp 0x1001f3fd
and dword [ebp - 0x650], 0
push 2
lea ecx, [ebp - 0xa98]
call fcn.10002242
mov eax, dword [eax]
cmp eax, dword [ebp - 0x650]
jne 0x1001f420
mov dword [ebp - 0x8b0], 1
jmp 0x1001f427
and dword [ebp - 0x8b0], 0
mov eax, dword [ebp - 0x80]
mov dword [ebp - 0xdf4], eax
mov eax, dword [ebp - 0x8c]
cmp eax, dword [ebp - 0x80]
jne 0x1001f447
mov dword [ebp - 0x430], 1
jmp 0x1001f44e
and dword [ebp - 0x430], 0
mov esi, dword [ebp - 0x430]
sub esi, dword [ebp - 0x8c]
dec esi
push 2
lea ecx, [ebp - 0xa98]
call fcn.10002242
cmp dword [eax], esi
jl 0x1001f47c
push 5
pop eax
test eax, eax
jne 0x1001f47c
and dword [ebp - 0x830], 0
jmp 0x1001f486
mov dword [ebp - 0x830], 1
mov eax, dword [ebp - 0x8c]
cmp dword [ebp - 0x830], eax
jle 0x1001f4a0
mov dword [ebp - 0x438], 1
jmp 0x1001f4a7
and dword [ebp - 0x438], 0
mov eax, dword [ebp - 0x438]
mov dword [ebp - 0x80], eax
xor eax, eax
jl 0x1001f4c0
mov dword [ebp - 0x658], 1
jmp 0x1001f4c7
and dword [ebp - 0x658], 0
cmp dword [ebp - 0x658], 0x1c50
je 0x1001f4ec
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x38], 0
je 0x1001f4ec
mov dword [ebp - 0x440], 1
jmp 0x1001f4f3
and dword [ebp - 0x440], 0
push 2
lea ecx, [ebp - 0xa98]
call fcn.10002242
mov ecx, dword [ebp - 0x440]
cmp ecx, dword [eax]
jge 0x1001f516
mov dword [ebp - 0x768], 1
jmp 0x1001f51d
and dword [ebp - 0x768], 0
mov eax, dword [ebp - 0x118]
cmp dword [ebp - 0x768], eax
jle 0x1001f537
mov dword [ebp - 0x448], 1
jmp 0x1001f53e
and dword [ebp - 0x448], 0
mov eax, dword [ebp - 0x448]
mov dword [ebp - 0x660], eax
mov eax, dword [ebp - 0x660]
mov dword [ebp - 0x110], eax
mov byte [ebp - 0xd2], 0
movzx eax, byte [ebp - 0xd2]
test eax, eax
je 0x1001f57a
push 0x166a
push 0
push 0x151a
call dword [sym.imp.GDI32.dll_Polygon]
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xa98]
call fcn.1000223d
mov byte [ebp - 0xa9], 0
movzx eax, byte [ebp - 0xa9]
test eax, eax
je 0x1001f5a6
push 0x11ee
call dword [sym.imp.GDI32.dll_EndPage]
jmp 0x1001f1c9
mov dword [ebp - 0x110], 0xc
jmp 0x1001f5c4
mov eax, dword [ebp - 0x110]
dec eax
mov dword [ebp - 0x110], eax
cmp dword [ebp - 0x110], 0xffffffe9
jg 0x1001f607
mov dword [ebp - 0x8b8], 0x781be2fc
mov dword [ebp - 0x80], 0x1a
jmp 0x1001f5e7
mov eax, dword [ebp - 0x80]
dec eax
mov dword [ebp - 0x80], eax
cmp dword [ebp - 0x80], 0x16
jle 0x1001f605
mov dword [ebp - 0xa4c], 0x376a
mov eax, dword [ebp - 0xa4c]
mov dword [ebp - 0x8b8], eax
jmp 0x1001f5e0
jmp 0x1001f5b7
mov eax, dword [ebp - 0x1c]
movzx eax, byte [ebp + eax - 0x15c]
inc eax
mov dword [ebp - 0x120], eax
mov eax, dword [ebp - 0x1c]
movzx eax, byte [ebp + eax - 0x15c]
mov ecx, dword [ebp - 0x1c]
lea eax, [ecx + eax - 1]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0xbe8], 1
mov dword [ebp - 0xbe4], 1
mov dword [ebp - 0xbe0], 1
mov dword [ebp - 0xbdc], 1
lea ecx, [ebp - 0x34d]
call fcn.10002251
push eax
lea eax, [ebp - 0xbd8]
push eax
lea eax, [ebp - 0xbe8]
push eax
lea ecx, [ebp - 0xeb8]
call fcn.10002254
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0xc54]
call fcn.10002217
mov dword [ebp - 4], 0x11
mov dword [ebp - 0x108], 0
mov dword [ebp - 0x108], 3
jmp 0x1001f6b5
mov eax, dword [ebp - 0x108]
dec eax
mov dword [ebp - 0x108], eax
cmp dword [ebp - 0x108], 0
jl 0x1001f76b
mov dword [ebp - 0x32c], 0
jmp 0x1001f6db
mov eax, dword [ebp - 0x32c]
inc eax
mov dword [ebp - 0x32c], eax
cmp dword [ebp - 0x32c], 1
jge 0x1001f6f7
mov eax, dword [ebp - 0x32c]
mov dword [ebp + eax*4 - 0x458], 0xfffffffb
jmp 0x1001f6ce
push dword [ebp - 0x108]
lea ecx, [ebp - 0xc54]
call fcn.10002242
mov dword [ebp - 0x450], eax
push dword [ebp - 0x108]
lea ecx, [ebp - 0xc54]
call fcn.10002242
mov ecx, dword [ebp - 0x450]
mov eax, dword [eax]
mov dword [ecx], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x458]
mov ecx, dword [ebp - 0x450]
cmp dword [ecx], eax
jge 0x1001f74c
mov dword [ebp - 0x7f0], 1
jmp 0x1001f753
and dword [ebp - 0x7f0], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x7f0]
mov dword [ebp + eax - 0x458], ecx
jmp 0x1001f6a8
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xc54]
call fcn.1000223d
jmp 0x1001ed5b
mov dword [ebp - 0x8c0], 0xf230
mov dword [ebp - 0x140], 0xa05132d7
mov dword [ebp - 0x3b0], 0xf32f520a
mov dword [ebp - 0x9c], 0
mov dword [ebp - 0x4b0], 0x2cfb
mov dword [ebp - 0xd10], 0
mov dword [ebp - 0xe20], 0xcc13236c
mov dword [ebp - 0x698], 0
mov dword [ebp - 0xd18], 0x65bdf544
mov dword [ebp - 0x78], 0
jmp 0x1001f7e9
mov eax, dword [ebp - 0x78]
inc eax
mov dword [ebp - 0x78], eax
cmp dword [ebp - 0x78], 2
jge 0x1001f7ff
mov eax, dword [ebp - 0x78]
mov dword [ebp + eax*4 - 0x164], 0
jmp 0x1001f7e2
mov dword [ebp - 0x78], 0
jmp 0x1001f80f
mov eax, dword [ebp - 0x78]
inc eax
mov dword [ebp - 0x78], eax
cmp dword [ebp - 0x78], 3
jge 0x1001f825
mov eax, dword [ebp - 0x78]
mov dword [ebp + eax*4 - 0xdac], 7
jmp 0x1001f808
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x164], 1
jl 0x1001f841
mov dword [ebp - 0x668], 1
jmp 0x1001f848
and dword [ebp - 0x668], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x164]
cmp dword [ebp - 0x668], eax
jge 0x1001f869
mov dword [ebp - 0x770], 1
jmp 0x1001f870
and dword [ebp - 0x770], 0
push 4
pop eax
shl eax, 0
push 4
pop ecx
imul ecx, ecx, 0
mov ecx, dword [ebp + ecx - 0x164]
add ecx, 5
cmp ecx, dword [ebp + eax - 0x164]
jge 0x1001f89b
mov dword [ebp - 0xaf4], 1
jmp 0x1001f8a2
and dword [ebp - 0xaf4], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x164]
mov dword [ebp - 0xdf0], eax
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x164]
mov dword [ebp - 0xd20], eax
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x164]
sub eax, 0x710dd013
push 4
pop ecx
shl ecx, 0
cmp dword [ebp + ecx - 0x164], eax
jne 0x1001f8f5
mov dword [ebp - 0x460], 1
jmp 0x1001f8fc
and dword [ebp - 0x460], 0
mov eax, dword [ebp - 0x8c0]
cmp dword [ebp - 0x460], eax
je 0x1001f916
mov dword [ebp - 0x468], 1
jmp 0x1001f91d
and dword [ebp - 0x468], 0
mov eax, dword [ebp - 0x770]
cmp eax, dword [ebp - 0x468]
je 0x1001f937
mov dword [ebp - 0x670], 1
jmp 0x1001f93e
and dword [ebp - 0x670], 0
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x670]
sub ecx, dword [ebp + eax - 0x164]
mov dword [ebp - 0x140], ecx
mov dword [ebp - 0x140], 0
jmp 0x1001f970
mov eax, dword [ebp - 0x140]
inc eax
mov dword [ebp - 0x140], eax
cmp dword [ebp - 0x140], 0xa
jl 0x1001fefb
mov dword [ebp - 0x470], 0xddb2097e
mov dword [ebp - 0xa54], 0xfffffffa
mov dword [ebp - 0x60], 0
jmp 0x1001f9a1
mov eax, dword [ebp - 0x60]
inc eax
mov dword [ebp - 0x60], eax
cmp dword [ebp - 0x60], 4
jge 0x1001f9b7
mov eax, dword [ebp - 0x60]
mov dword [ebp + eax*4 - 0xb7c], 0x894ff545
jmp 0x1001f99a
mov dword [ebp - 0x60], 0
jmp 0x1001f9c7
mov eax, dword [ebp - 0x60]
inc eax
mov dword [ebp - 0x60], eax
cmp dword [ebp - 0x60], 3
jge 0x1001f9dd
mov eax, dword [ebp - 0x60]
mov dword [ebp + eax*4 - 0xf3c], 7
jmp 0x1001f9c0
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0xb7c], 0
je 0x1001fc6e
mov dword [ebp - 0xf0], 0
cmp dword [ebp - 0xf0], 0xabeb
je 0x1001fc1a
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0xb7c]
neg eax
cmp eax, dword [ebp - 0xf0]
jle 0x1001fa2e
mov dword [ebp - 0x7f8], 1
jmp 0x1001fa35
and dword [ebp - 0x7f8], 0
mov dword [ebp - 0x470], 1
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x470]
cmp ecx, dword [ebp + eax - 0xb7c]
jne 0x1001fa60
mov dword [ebp - 0x870], 1
jmp 0x1001fa67
and dword [ebp - 0x870], 0
cmp dword [ebp - 0x870], 5
jb 0x1001fa7c
mov dword [ebp - 0x478], 1
jmp 0x1001fa83
and dword [ebp - 0x478], 0
cmp dword [ebp - 0x478], 0xf2059515
jbe 0x1001fa9b
mov dword [ebp - 0x678], 1
jmp 0x1001faa2
and dword [ebp - 0x678], 0
mov eax, dword [ebp - 0xf0]
cmp dword [ebp - 0x678], eax
je 0x1001fabc
mov dword [ebp - 0x480], 1
jmp 0x1001fac3
and dword [ebp - 0x480], 0
cmp dword [ebp - 0x480], 0x7ff5
jle 0x1001fadb
mov dword [ebp - 0x778], 1
jmp 0x1001fae2
and dword [ebp - 0x778], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xb7c]
cmp dword [ebp - 0x778], eax
jne 0x1001fb03
mov dword [ebp - 0x488], 1
jmp 0x1001fb0a
and dword [ebp - 0x488], 0
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x488]
add ecx, 0x49145018
cmp ecx, dword [ebp + eax - 0xb7c]
je 0x1001fb31
mov dword [ebp - 0x680], 1
jmp 0x1001fb38
and dword [ebp - 0x680], 0
mov eax, dword [ebp - 0xf0]
cmp dword [ebp - 0x680], eax
jne 0x1001fb52
mov dword [ebp - 0x490], 1
jmp 0x1001fb59
and dword [ebp - 0x490], 0
mov eax, dword [ebp - 0x490]
mov dword [ebp - 0x3b0], eax
cmp dword [ebp - 0x3b0], 0xfffffff7
jl 0x1001fb7a
mov dword [ebp - 0x498], 1
jmp 0x1001fb81
and dword [ebp - 0x498], 0
mov eax, dword [ebp - 0x7f8]
cmp eax, dword [ebp - 0x498]
jg 0x1001fb9b
mov dword [ebp - 0x688], 1
jmp 0x1001fba2
and dword [ebp - 0x688], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x688]
sub ecx, dword [ebp + eax - 0x164]
jne 0x1001fbc5
xor eax, eax
inc eax
jne 0x1001fbc5
and dword [ebp - 0x4a0], 0
jmp 0x1001fbcf
mov dword [ebp - 0x4a0], 1
mov eax, dword [ebp - 0x4a0]
mov dword [ebp - 0x9c], eax
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x9c]
cmp ecx, dword [ebp + eax - 0xb7c]
jl 0x1001fbfc
mov dword [ebp - 0x780], 1
jmp 0x1001fc03
and dword [ebp - 0x780], 0
mov eax, dword [ebp - 0xf0]
cmp dword [ebp - 0x780], eax
jl 0x1001fc1a
and dword [ebp - 0x4a8], 0
jmp 0x1001fc24
mov dword [ebp - 0x4a8], 1
mov eax, dword [ebp - 0xf0]
mov ecx, dword [ebp - 0x4a8]
lea eax, [ecx + eax + 0xa75bede]
cmp eax, 0x98d7e942
ja 0x1001fc4a
mov dword [ebp - 0x690], 1
jmp 0x1001fc51
and dword [ebp - 0x690], 0
mov eax, dword [ebp - 0x690]
mov dword [ebp - 0x4b0], eax
mov eax, dword [ebp - 0x4b0]
mov dword [ebp - 0xa54], eax
jmp 0x1001feea
mov dword [ebp - 0xe54], 0xd5dd215
mov dword [ebp - 0x4b8], 0x7820eaad
mov dword [ebp - 0x838], 0x6d4d
mov dword [ebp - 0xafc], str.pnvisjj_arntcma_qtmre
cmp dword [ebp - 0x838], 0x6e15
jle 0x1001fdad
and dword [ebp - 0x2f4], 0
jmp 0x1001fcbc
mov eax, dword [ebp - 0x2f4]
inc eax
mov dword [ebp - 0x2f4], eax
cmp dword [ebp - 0x2f4], 0x48c3
jge 0x1001fdad
and dword [ebp - 0x208], 0
jmp 0x1001fce2
mov eax, dword [ebp - 0x208]
inc eax
mov dword [ebp - 0x208], eax
cmp dword [ebp - 0x208], 0x72dd
jge 0x1001fda8
and dword [ebp - 0x200], 0
jmp 0x1001fd08
mov eax, dword [ebp - 0x200]
inc eax
mov dword [ebp - 0x200], eax
cmp dword [ebp - 0x200], 0x2d2e
jge 0x1001fda3
and dword [ebp - 0x2a4], 0
jmp 0x1001fd2e
mov eax, dword [ebp - 0x2a4]
inc eax
mov dword [ebp - 0x2a4], eax
cmp dword [ebp - 0x2a4], 0x5ecd
jge 0x1001fd9e
mov eax, dword [ebp - 0x200]
imul eax, dword [ebp - 0x2a4]
add eax, dword [ebp - 0x208]
xor eax, dword [ebp - 0x2f4]
cdq
mov dword [ebp - 0x978], eax
mov dword [ebp - 0x974], edx
push dword [ebp - 0x974]
push dword [ebp - 0x978]
lea ecx, [ebp - 0xf18]
call fcn.10002dd6
pop ecx
pop ecx
mov dword [ebp - 0x8c8], eax
mov ecx, dword [ebp - 0x8c8]
call fcn.100048cd
push eax
call fcn.100476ff
pop ecx
lea ecx, [ebp - 0xf18]
call fcn.100048c3
jmp 0x1001fd21
jmp 0x1001fcfb
jmp 0x1001fcd5
jmp 0x1001fcaf
mov dword [ebp - 0xd28], 4
mov dword [ebp - 4], 0x12
cmp dword [ebp - 0x838], 0x6ab4
jge 0x1001fdd6
push dword [ebp - 0xafc]
call fcn.100476ff
pop ecx
jmp 0x1001fdf2
or dword [ebp - 4], 0xffffffff
jmp 0x1001fdfc
push 1
lea ecx, [ebp - 0xc6c]
call fcn.100021db
mov dword [ebp - 4], 0x14
mov dword [ebp - 0x210], 0
jmp 0x1001fe29
mov eax, dword [ebp - 0x210]
inc eax
mov dword [ebp - 0x210], eax
cmp dword [ebp - 0x210], 1
jge 0x1001fe4b
push dword [ebp - 0x210]
lea ecx, [ebp - 0xc6c]
call fcn.10002242
mov dword [eax], 0xfffffffe
jmp 0x1001fe1c
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0xdac]
inc eax
push 4
pop ecx
shl ecx, 1
mov dword [ebp + ecx - 0xdac], eax
mov dword [ebp - 0x9c], 0
jmp 0x1001fe7d
mov eax, dword [ebp - 0x9c]
dec eax
mov dword [ebp - 0x9c], eax
cmp dword [ebp - 0x9c], 0
jl 0x1001fedb
push dword [ebp - 0x9c]
lea ecx, [ebp - 0xc6c]
call fcn.10002242
mov eax, dword [eax]
mov dword [ebp - 0x4b8], eax
mov eax, dword [ebp - 0x4b8]
mov dword [ebp - 0x3b0], eax
mov byte [ebp - 0xd4], 0
movzx eax, byte [ebp - 0xd4]
test eax, eax
je 0x1001fed9
push 0xf19
push 0
push 0x2083
push 0x1f58
push 0x11c7
call dword [sym.imp.GDI32.dll_ExtFloodFill]
jmp 0x1001fe70
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xc6c]
call fcn.1000223d
mov eax, dword [ebp - 0x698]
mov dword [ebp - 0x698], eax
jmp 0x1001f963
mov eax, dword [ebp - 0x1c]
sub eax, dword [ebp - 0x120]
movzx eax, byte [ebp + eax - 0x15e]
movzx eax, word [ebp + eax*2 - 0xcfc]
mov ecx, dword [ebp - 0x1c]
movzx ecx, byte [ebp + ecx - 0x15b]
and ecx, eax
mov eax, dword [ebp - 0x1c]
sub eax, dword [ebp - 0x120]
movzx eax, byte [ebp + eax - 0x15e]
movzx eax, word [ebp + eax*2 - 0xcfc]
mov edx, dword [ebp - 0x1c]
movzx edx, byte [ebp + edx - 0x15b]
and edx, eax
mov eax, dword [ebp - 0x1c]
sub eax, dword [ebp - 0x120]
movzx eax, byte [ebp + eax - 0x15e]
movzx eax, word [ebp + eax*2 - 0xcfc]
mov esi, dword [ebp - 0x1c]
movzx esi, byte [ebp + esi - 0x15b]
add esi, eax
sub esi, edx
sub esi, ecx
mov eax, dword [ebp - 0x1c]
movzx eax, byte [ebp + eax - 0x15c]
mov word [ebp + eax*2 - 0xcfc], si
push 4
lea ecx, [ebp - 0x3e4]
call fcn.100021db
mov dword [ebp - 4], 0x15
mov dword [ebp - 0x8d0], 0xfffffff8
mov dword [ebp - 0x2ac], 0
jmp 0x1001ffbb
mov eax, dword [ebp - 0x2ac]
inc eax
mov dword [ebp - 0x2ac], eax
cmp dword [ebp - 0x2ac], 4
jge 0x1001ffdd
push dword [ebp - 0x2ac]
lea ecx, [ebp - 0x3e4]
call fcn.10002242
mov dword [eax], 0x946507e
jmp 0x1001ffae
mov byte [ebp - 0xd6], 0
movzx eax, byte [ebp - 0xd6]
test eax, eax
je 0x1001fff7
push 0
call dword [sym.imp.KERNEL32.dll_TlsGetValue]
mov eax, 0xa485bf25
test eax, eax
je 0x100200ff
push 0
lea ecx, [ebp - 0x3e4]
call fcn.10002242
mov esi, eax
push 1
lea ecx, [ebp - 0x3e4]
call fcn.10002242
mov eax, dword [eax]
cmp eax, dword [esi]
jne 0x10020032
mov dword [ebp - 0x4d0], 1
jmp 0x10020039
and dword [ebp - 0x4d0], 0
push 0
lea ecx, [ebp - 0x3e4]
call fcn.10002242
cmp dword [eax], 0xfffffffe
jge 0x10020057
mov dword [ebp - 0x4c0], 1
jmp 0x1002005e
and dword [ebp - 0x4c0], 0
push 1
lea ecx, [ebp - 0x3e4]
call fcn.10002242
mov ecx, dword [ebp - 0x4c0]
cmp ecx, dword [eax]
jle 0x10020081
mov dword [ebp - 0x788], 1
jmp 0x10020088
and dword [ebp - 0x788], 0
push 1
lea ecx, [ebp - 0x3e4]
call fcn.10002242
mov ecx, dword [ebp - 0x788]
cmp ecx, dword [eax]
jle 0x100200ab
mov dword [ebp - 0x4c8], 1
jmp 0x100200b2
and dword [ebp - 0x4c8], 0
push 0
lea ecx, [ebp - 0x3e4]
call fcn.10002242
mov ecx, dword [ebp - 0x4c8]
cmp ecx, dword [eax]
je 0x100200d5
mov dword [ebp - 0x6a0], 1
jmp 0x100200dc
and dword [ebp - 0x6a0], 0
mov eax, dword [ebp - 0x6a0]
mov ecx, dword [ebp - 0x4d0]
lea eax, [ecx + eax + 0x1e27d3ce]
test eax, eax
je 0x100200ff
mov dword [ebp - 0x800], 1
jmp 0x10020106
and dword [ebp - 0x800], 0
cmp dword [ebp - 0x800], 0x8f4e1c2e
jae 0x10020127
mov eax, 0x78f1e0c8
test eax, eax
je 0x10020127
mov dword [ebp - 0x4d8], 1
jmp 0x1002012e
and dword [ebp - 0x4d8], 0
push 1
lea ecx, [ebp - 0x3e4]
call fcn.10002242
mov ecx, dword [ebp - 0x4d8]
cmp ecx, dword [eax]
jge 0x10020151
mov dword [ebp - 0x6a8], 1
jmp 0x10020158
and dword [ebp - 0x6a8], 0
mov eax, dword [ebp - 0x6a8]
mov dword [ebp - 0x8d0], eax
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x3e4]
call fcn.1000223d
mov dword [ebp - 0x4e0], 0x1b0
mov dword [ebp - 0x8d8], str.kowef_umeo_apaaed_mlmfsdal_aylsw
cmp dword [ebp - 0x4e0], 0x28b
jle 0x1002023d
and dword [ebp - 0x218], 0
jmp 0x100201ad
mov eax, dword [ebp - 0x218]
inc eax
mov dword [ebp - 0x218], eax
cmp dword [ebp - 0x218], 0x17f5
jge 0x1002023d
and dword [ebp - 0x31c], 0
jmp 0x100201d3
mov eax, dword [ebp - 0x31c]
inc eax
mov dword [ebp - 0x31c], eax
cmp dword [ebp - 0x31c], 0x438a
jge 0x10020238
mov eax, dword [ebp - 0x218]
mov ecx, dword [ebp - 0x31c]
sar eax, cl
cdq
mov dword [ebp - 0x984], eax
mov dword [ebp - 0x980], edx
push dword [ebp - 0x980]
push dword [ebp - 0x984]
lea ecx, [ebp - 0xfc0]
call fcn.10002dd6
pop ecx
pop ecx
mov dword [ebp - 0xa5c], eax
mov ecx, dword [ebp - 0xa5c]
call fcn.100048cd
push eax
call fcn.100476ff
pop ecx
lea ecx, [ebp - 0xfc0]
call fcn.100048c3
jmp 0x100201c6
jmp 0x100201a0
and dword [ebp - 0x120], 0
mov dword [ebp - 4], 0x16
cmp dword [ebp - 0x4e0], 0xffffff0e
jge 0x10020263
push dword [ebp - 0x8d8]
call fcn.100476ff
pop ecx
jmp 0x1002027f
or dword [ebp - 4], 0xffffffff
jmp 0x10020289
jmp 0x1001ed5b
mov dword [ebp - 0x70], 0xf951fe7
mov dword [ebp - 0x220], 0xffffffff
mov dword [ebp - 0x798], 0xfffffffe
mov dword [ebp - 0x8e0], 0xf451dba1
mov byte [ebp - 0xac], 0
movzx eax, byte [ebp - 0xac]
test eax, eax
je 0x100202ff
push 0
push 0x16dc
push 0x49b
push 0x20ba
push 0xa97
push 0x2006
push 0xbfe
push 0xb83
push 0x837
push 0x1ef9
push 0x990
call dword [sym.imp.GDI32.dll_StretchBlt]
mov eax, dword [ebp - 0x220]
mov dword [ebp - 0xd5c], eax
cmp dword [ebp - 0x70], 0
je 0x10020324
push 2
pop eax
test eax, eax
je 0x10020324
mov dword [ebp - 0x790], 1
jmp 0x1002032b
and dword [ebp - 0x790], 0
mov eax, dword [ebp - 0x70]
cmp eax, dword [ebp - 0x790]
jge 0x10020342
mov dword [ebp - 0x4e8], 1
jmp 0x10020349
and dword [ebp - 0x4e8], 0
mov eax, dword [ebp - 0x70]
cmp dword [ebp - 0x4e8], eax
jge 0x10020360
mov dword [ebp - 0x6b0], 1
jmp 0x10020367
and dword [ebp - 0x6b0], 0
mov eax, dword [ebp - 0x70]
cmp dword [ebp - 0x6b0], eax
jle 0x1002037e
mov dword [ebp - 0x4f0], 1
jmp 0x10020385
and dword [ebp - 0x4f0], 0
mov eax, dword [ebp - 0x70]
cmp dword [ebp - 0x4f0], eax
jg 0x1002039c
mov dword [ebp - 0x860], 1
jmp 0x100203a3
and dword [ebp - 0x860], 0
mov eax, dword [ebp - 0x70]
cmp dword [ebp - 0x860], eax
jle 0x100203ba
mov dword [ebp - 0x4f8], 1
jmp 0x100203c1
and dword [ebp - 0x4f8], 0
mov eax, dword [ebp - 0x70]
cmp eax, dword [ebp - 0x4f8]
jne 0x100203d5
mov eax, 0x283d1f0d
test eax, eax
jne 0x100203de
mov eax, 0xc43c
test eax, eax
je 0x100203f3
cmp dword [ebp - 0x220], 0
je 0x100203f3
mov dword [ebp - 0xb04], 1
jmp 0x100203fa
and dword [ebp - 0xb04], 0
cmp dword [ebp - 0x220], 0xfffffffe
jne 0x1002040f
mov dword [ebp - 0x6b8], 1
jmp 0x10020416
and dword [ebp - 0x6b8], 0
cmp dword [ebp - 0x6b8], 0xfff9
ja 0x1002042e
mov dword [ebp - 0x500], 1
jmp 0x10020435
and dword [ebp - 0x500], 0
mov eax, dword [ebp - 0x500]
mov dword [ebp - 0x798], eax
mov eax, dword [ebp - 0x798]
cmp eax, dword [ebp - 0x220]
jne 0x1002045b
mov dword [ebp - 0x508], 1
jmp 0x10020462
and dword [ebp - 0x508], 0
mov eax, dword [ebp - 0x70]
cmp dword [ebp - 0x508], eax
jge 0x10020479
mov dword [ebp - 0x6c0], 1
jmp 0x10020480
and dword [ebp - 0x6c0], 0
mov eax, dword [ebp - 0x70]
cmp eax, dword [ebp - 0x6c0]
je 0x10020497
mov dword [ebp - 0x510], 1
jmp 0x1002049e
and dword [ebp - 0x510], 0
mov eax, dword [ebp - 0x510]
mov dword [ebp - 0x8e0], eax
push 2
pop eax
imul eax, eax, 0xc
xor ecx, ecx
mov word [ebp + eax - 0xcfc], cx
mov dword [ebp - 0x808], 0x17a3
mov dword [ebp - 0xa6c], str.hsfedwplo_skpsu_nurvsyo_nnq_cysp_ouksaqn
cmp dword [ebp - 0x808], 0x1913
jle 0x1002055f
and dword [ebp - 0x2b4], 0
jmp 0x100204f4
mov eax, dword [ebp - 0x2b4]
inc eax
mov dword [ebp - 0x2b4], eax
cmp dword [ebp - 0x2b4], 0x4570
jge 0x10020555
and dword [ebp - 0x228], 0
jmp 0x10020516
mov eax, dword [ebp - 0x228]
inc eax
mov dword [ebp - 0x228], eax
cmp dword [ebp - 0x228], 0x7e2f
jge 0x10020553
mov eax, dword [ebp - 0x2b4]
sub eax, dword [ebp - 0x228]
cdq
mov dword [ebp - 0x990], eax
mov dword [ebp - 0x98c], edx
push dword [ebp - 0x98c]
push dword [ebp - 0x990]
mov ecx, 0x10079c18
call fcn.100048ed
jmp 0x10020509
jmp 0x100204e7
push 0
push 0
call dword [sym.imp.KERNEL32.dll_TlsSetValue]
mov dword [ebp - 0x50], 0xffffffff
mov dword [ebp - 4], 0x18
cmp dword [ebp - 0x808], 0x1558
jge 0x10020589
mov edx, dword [ebp - 0xa6c]
mov ecx, 0x10079c18
call fcn.10006b05
jmp 0x100205a5
or dword [ebp - 4], 0xffffffff
jmp 0x100205af
mov dword [ebp - 0xd0], 0x2263126f
mov dword [ebp - 0x100], 1
mov dword [ebp - 0xc8], 0xd409884c
mov dword [ebp - 0x8f0], 7
mov dword [ebp - 0x900], 0xfec1
mov dword [ebp - 0xb24], 0x35935178
mov dword [ebp - 0x2fc], 0
jmp 0x10020604
mov eax, dword [ebp - 0x2fc]
inc eax
mov dword [ebp - 0x2fc], eax
cmp dword [ebp - 0x2fc], 3
jge 0x10020620
mov eax, dword [ebp - 0x2fc]
mov dword [ebp + eax*4 - 0xaa8], 0xfffffffb
jmp 0x100205f7
mov dword [ebp - 0x50], 0xfffffff9
jmp 0x10020630
mov eax, dword [ebp - 0x50]
inc eax
mov dword [ebp - 0x50], eax
cmp dword [ebp - 0x50], 0x1d
jge 0x100209c3
mov dword [ebp - 0x530], 0
mov dword [ebp - 0xc0], 0xffffffff
mov dword [ebp - 0xa7c], 0xf8f576c5
mov dword [ebp - 0x398], 0xf76ec751
mov dword [ebp - 0x908], 2
mov dword [ebp - 0xb14], 0xfffffff7
mov dword [ebp - 0x518], 0x9f
mov dword [ebp - 0xb0c], str.nysdlyua_vmcampzt_amak_cbcw_agsunkqul_olb_obxxxlbo_guda_zvsj_jfakmqpwk_gszra_sbilfqjkg
cmp dword [ebp - 0x518], 0x364
jle 0x1002074d
and dword [ebp - 0x230], 0
jmp 0x100206b0
mov eax, dword [ebp - 0x230]
inc eax
mov dword [ebp - 0x230], eax
cmp dword [ebp - 0x230], 0x68d9
jge 0x10020740
and dword [ebp - 0x2bc], 0
jmp 0x100206d6
mov eax, dword [ebp - 0x2bc]
inc eax
mov dword [ebp - 0x2bc], eax
cmp dword [ebp - 0x2bc], 0x489d
jge 0x1002073b
mov eax, dword [ebp - 0x230]
mov ecx, dword [ebp - 0x2bc]
sar eax, cl
cdq
mov dword [ebp - 0x99c], eax
mov dword [ebp - 0x998], edx
push dword [ebp - 0x998]
push dword [ebp - 0x99c]
lea ecx, [ebp - 0xee8]
call fcn.10002dd6
pop ecx
pop ecx
mov dword [ebp - 0x8e8], eax
mov ecx, dword [ebp - 0x8e8]
call fcn.100048cd
push eax
call fcn.100476ff
pop ecx
lea ecx, [ebp - 0xee8]
call fcn.100048c3
jmp 0x100206c9
jmp 0x100206a3
push 0
push 0x1bb0
call dword [sym.imp.GDI32.dll_CreateHatchBrush]
mov dword [ebp - 0x360], 0xffffffff
mov dword [ebp - 4], 0x1a
cmp dword [ebp - 0x518], 0xfffffcfb
jge 0x10020776
push dword [ebp - 0xb0c]
call fcn.100476ff
pop ecx
jmp 0x10020792
or dword [ebp - 4], 0xffffffff
jmp 0x1002079c
mov eax, dword [ebp - 0x360]
inc eax
mov dword [ebp - 0x360], eax
mov eax, dword [ebp - 0xc0]
cmp eax, dword [ebp - 0x360]
je 0x100207c3
mov dword [ebp - 0x6c8], 1
jmp 0x100207ca
and dword [ebp - 0x6c8], 0
mov eax, dword [ebp - 0x398]
cmp eax, dword [ebp - 0x6c8]
jle 0x100207e4
mov dword [ebp - 0x6d0], 1
jmp 0x100207eb
and dword [ebp - 0x6d0], 0
push 4
pop eax
shl eax, 1
mov ecx, dword [ebp - 0x8f0]
cmp ecx, dword [ebp + eax - 0xaa8]
jge 0x1002080b
mov dword [ebp - 0x520], 1
jmp 0x10020812
and dword [ebp - 0x520], 0
mov eax, dword [ebp - 0xa7c]
cmp eax, dword [ebp - 0x520]
je 0x1002082c
mov dword [ebp - 0x8f8], 1
jmp 0x10020833
and dword [ebp - 0x8f8], 0
mov eax, dword [ebp - 0x398]
mov dword [ebp - 0xd30], eax
cmp dword [ebp - 0x530], 0xfffffffc
jne 0x10020854
mov dword [ebp - 0x7a0], 1
jmp 0x1002085b
and dword [ebp - 0x7a0], 0
mov eax, dword [ebp - 0x7a0]
mov dword [ebp - 0xb14], eax
imul eax, dword [ebp - 0xc0], 0xfffffff8
test eax, eax
je 0x10020887
cmp dword [ebp - 0xc0], 0
je 0x10020887
mov dword [ebp - 0x528], 1
jmp 0x1002088e
and dword [ebp - 0x528], 0
mov eax, dword [ebp - 0x900]
imul eax, dword [ebp - 0x528]
cmp eax, 0x997
jle 0x100208ae
mov dword [ebp - 0xa8c], 1
jmp 0x100208b5
and dword [ebp - 0xa8c], 0
mov eax, dword [ebp - 0xd0]
mov dword [ebp - 0xd60], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xaa8]
mov dword [ebp - 0xd38], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xaa8]
mov dword [ebp - 0xd0], eax
mov eax, dword [ebp - 0xd0]
add eax, dword [ebp - 0x398]
mov ecx, dword [ebp - 0x6d0]
sub ecx, eax
add ecx, dword [ebp - 0x100]
sub ecx, dword [ebp - 0x530]
cmp ecx, dword [ebp - 0x908]
jne 0x1002091b
mov dword [ebp - 0x840], 1
jmp 0x10020922
and dword [ebp - 0x840], 0
cmp dword [ebp - 0x840], 0xe96f77d9
jbe 0x1002093a
mov dword [ebp - 0x538], 1
jmp 0x10020941
and dword [ebp - 0x538], 0
mov eax, dword [ebp - 0xc8]
dec eax
mov dword [ebp - 0xc8], eax
mov eax, dword [ebp - 0xc8]
add eax, dword [ebp - 0x538]
cmp eax, 0x9640
jl 0x1002096d
mov dword [ebp - 0x6d8], 1
jmp 0x10020974
and dword [ebp - 0x6d8], 0
mov eax, dword [ebp - 0x6d8]
mov dword [ebp - 0x100], eax
mov dword [ebp - 0xc0], 2
jmp 0x10020999
mov eax, dword [ebp - 0xc0]
dec eax
mov dword [ebp - 0xc0], eax
cmp dword [ebp - 0xc0], 0
jl 0x100209be
mov byte [ebp - 0xb8], 0
movzx eax, byte [ebp - 0xb8]
test eax, eax
je 0x100209bc
push 0
call dword [sym.imp.USER32.dll_DestroyMenu]
jmp 0x1002098c
jmp 0x10020629
mov dword [ebp - 0xc8], 0
jmp 0x100209dc
mov eax, dword [ebp - 0xc8]
inc eax
mov dword [ebp - 0xc8], eax
cmp dword [ebp - 0xc8], 0x14
je 0x10020e60
mov dword [ebp - 0x3b8], 0x4b17
mov dword [ebp - 0x810], 0
mov dword [ebp - 0xb1c], 0x20db
cmp dword [ebp - 0xb1c], 0x11d2
jge 0x10020b0c
push 0x105e647c
push 0x1013e284
push str._d__d
call fcn.10047aed
add esp, 0xc
push dword [0x1013e284]
push 1
push 1
call fcn.1001ddbb
add esp, 0xc
mov eax, dword [0x105e647c]
mov dword [ebp - 0x910], eax
mov eax, dword [0x105e647c]
dec eax
mov dword [0x105e647c], eax
cmp dword [ebp - 0x910], 0
je 0x10020b0c
lea eax, [ebp - 0x33c]
push eax
lea eax, [ebp - 0x238]
push eax
lea eax, [ebp - 0xa9c]
push eax
push str._d__d__d
call fcn.10047aed
add esp, 0x10
mov eax, dword [ebp - 0x238]
inc eax
mov dword [ebp - 0x238], eax
mov eax, dword [ebp - 0x33c]
inc eax
mov dword [ebp - 0x33c], eax
cmp dword [ebp - 0xa9c], 0
jne 0x10020ad2
mov eax, dword [ebp - 0x238]
mov dword [0x1007ad74], eax
mov eax, dword [ebp - 0x33c]
mov dword [0x105e6478], eax
push dword [0x1013e284]
push 1
push 1
call fcn.1001df3d
add esp, 0xc
jmp 0x10020b07
mov eax, dword [ebp - 0x238]
mov dword [0x1007ad74], eax
mov eax, dword [ebp - 0x33c]
mov dword [0x105e6478], eax
push dword [0x1013e284]
push 1
push 1
call fcn.1001e03e
add esp, 0xc
push eax
push 0x10068f5c
call fcn.100476ff
pop ecx
pop ecx
jmp 0x10020a40
mov dword [ebp - 0x50], 0xfffffff1
jmp 0x10020b1c
mov eax, dword [ebp - 0x50]
inc eax
mov dword [ebp - 0x50], eax
cmp dword [ebp - 0x50], 3
jle 0x10020e5b
mov dword [ebp - 0x138], 0xbae88b14
mov dword [ebp - 0x138], 0
mov dword [ebp - 0x100], 0
jmp 0x10020b53
mov eax, dword [ebp - 0x100]
inc eax
mov dword [ebp - 0x100], eax
cmp dword [ebp - 0x100], 0x13
jge 0x10020e56
mov dword [ebp - 0x6e8], 0xffffffff
mov dword [ebp - 0xd0], 0xfffffff8
jmp 0x10020b83
mov eax, dword [ebp - 0xd0]
inc eax
mov dword [ebp - 0xd0], eax
cmp dword [ebp - 0xd0], 3
jge 0x10020e51
push 2
lea ecx, [ebp - 0xc9c]
call fcn.100021db
mov dword [ebp - 4], 0x1c
mov dword [ebp - 0x540], 0x4cf7
mov dword [ebp - 0x918], str.nesgtstae_ejpnsoth_eluqpzet_iwrwlss_iuuffayio_neibaz_gprz
cmp dword [ebp - 0x540], 0x4f46
jle 0x10020c73
and dword [ebp - 0x240], 0
jmp 0x10020bde
mov eax, dword [ebp - 0x240]
inc eax
mov dword [ebp - 0x240], eax
cmp dword [ebp - 0x240], 0x570c
jge 0x10020c73
and dword [ebp - 0x2c4], 0
jmp 0x10020c04
mov eax, dword [ebp - 0x2c4]
inc eax
mov dword [ebp - 0x2c4], eax
cmp dword [ebp - 0x2c4], 0x6ecd
jge 0x10020c6e
and dword [ebp - 0x248], 0
jmp 0x10020c26
mov eax, dword [ebp - 0x248]
inc eax
mov dword [ebp - 0x248], eax
cmp dword [ebp - 0x248], 0x143e
jge 0x10020c6c
mov eax, dword [ebp - 0x240]
cdq
idiv dword [ebp - 0x2c4]
xor edx, dword [ebp - 0x248]
mov eax, edx
cdq
mov dword [ebp - 0x9a8], eax
mov dword [ebp - 0x9a4], edx
push dword [ebp - 0x9a4]
push dword [ebp - 0x9a8]
mov ecx, 0x10079c18
call fcn.100048ed
jmp 0x10020c19
jmp 0x10020bf7
jmp 0x10020bd1
mov byte [ebp - 4], 0x1d
cmp dword [ebp - 0x540], 0x4bce
jge 0x10020c93
mov edx, dword [ebp - 0x918]
mov ecx, 0x10079c18
call fcn.10006b05
jmp 0x10020caf
mov dword [ebp - 4], 0x1c
jmp 0x10020cbf
mov dword [ebp - 0x304], 0
jmp 0x10020cd8
mov eax, dword [ebp - 0x304]
inc eax
mov dword [ebp - 0x304], eax
cmp dword [ebp - 0x304], 2
jge 0x10020cfa
push dword [ebp - 0x304]
lea ecx, [ebp - 0xc9c]
call fcn.10002242
mov dword [eax], 0xfffffffc
jmp 0x10020ccb
mov eax, dword [ebp - 0x138]
mov dword [ebp - 0xd68], eax
cmp dword [ebp - 0x138], 0
jne 0x10020d24
cmp dword [ebp - 0x6e8], 0xffff
ja 0x10020d24
and dword [ebp - 0x7a8], 0
jmp 0x10020d2e
mov dword [ebp - 0x7a8], 1
mov eax, dword [ebp - 0x138]
cmp dword [ebp - 0x7a8], eax
jge 0x10020d48
mov dword [ebp - 0x548], 1
jmp 0x10020d4f
and dword [ebp - 0x548], 0
mov eax, dword [ebp - 0x3b8]
cmp dword [ebp - 0x548], eax
je 0x10020d69
mov dword [ebp - 0x6e0], 1
jmp 0x10020d70
and dword [ebp - 0x6e0], 0
mov eax, dword [ebp - 0x50]
cmp eax, dword [ebp - 0x6e0]
jne 0x10020d8d
cmp dword [ebp - 0x138], 0
jne 0x10020d8d
and dword [ebp - 0x368], 0
jmp 0x10020d97
mov dword [ebp - 0x368], 1
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x368]
mov dword [ebp + eax - 0xaa8], ecx
mov eax, 0x85d55a9d
sub eax, dword [ebp - 0x368]
jne 0x10020dc0
mov eax, 0x4d865e42
test eax, eax
je 0x10020dd5
cmp dword [ebp - 0x3b8], 0
je 0x10020dd5
mov dword [ebp - 0x550], 1
jmp 0x10020ddc
and dword [ebp - 0x550], 0
mov eax, dword [ebp - 0x550]
mov dword [ebp - 0x810], eax
cmp dword [ebp - 0x810], 0
je 0x10020e0f
push 0
lea ecx, [ebp - 0xc9c]
call fcn.10002242
cmp dword [eax], 0
je 0x10020e0f
mov dword [ebp - 0x558], 1
jmp 0x10020e16
and dword [ebp - 0x558], 0
mov eax, dword [ebp - 0x558]
sub eax, dword [ebp - 0x3b8]
mov dword [ebp - 0xb24], eax
mov eax, dword [ebp - 0x6e8]
neg eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0xaa8], eax
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xc9c]
call fcn.1000223d
jmp 0x10020b76
jmp 0x10020b46
jmp 0x10020b15
jmp 0x100209cf
lea eax, [ebp - 0xcfc]
push eax
lea ecx, [ebp - 0xf90]
call fcn.10004a2a
mov dword [ebp - 0x920], eax
mov eax, dword [ebp - 0x920]
mov dword [ebp - 0xaac], eax
mov dword [ebp - 4], 0x1f
push dword [ebp - 0xaac]
call fcn.100189e3
pop ecx
mov dword [ebp - 0x7b4], eax
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xf90]
call fcn.10004a4f
and dword [ebp - 0x250], 0
jmp 0x10020ec2
mov eax, dword [ebp - 0x250]
inc eax
mov dword [ebp - 0x250], eax
cmp dword [ebp - 0x250], 0xd
jae 0x100211a9
mov dword [ebp - 0xe0], 0x1e4f1f13
mov dword [ebp - 0x3a0], 6
mov dword [ebp - 0x570], 0xbfb3a4df
push 2
lea ecx, [ebp - 0x3d8]
call fcn.100021db
mov dword [ebp - 4], 0x20
mov dword [ebp - 0x54], 0
jmp 0x10020f11
mov eax, dword [ebp - 0x54]
inc eax
mov dword [ebp - 0x54], eax
cmp dword [ebp - 0x54], 3
jge 0x10020f27
mov eax, dword [ebp - 0x54]
mov dword [ebp + eax*4 - 0xab8], 0x12a3cc92
jmp 0x10020f0a
mov dword [ebp - 0x54], 0
jmp 0x10020f37
mov eax, dword [ebp - 0x54]
inc eax
mov dword [ebp - 0x54], eax
cmp dword [ebp - 0x54], 2
jge 0x10020f53
push dword [ebp - 0x54]
lea ecx, [ebp - 0x3d8]
call fcn.10002242
mov dword [eax], 0xfffffffc
jmp 0x10020f30
push 0
lea ecx, [ebp - 0x3d8]
call fcn.10002242
mov dword [ebp - 0x370], eax
mov eax, dword [ebp - 0x370]
mov eax, dword [eax]
dec eax
mov ecx, dword [ebp - 0x370]
mov dword [ecx], eax
push 4
pop eax
shl eax, 1
mov ecx, dword [ebp - 0xe0]
mov edx, dword [ebp - 0x370]
imul ecx, dword [edx]
cmp ecx, dword [ebp + eax - 0xab8]
jne 0x100210b5
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0xab8]
mov dword [ebp - 0xd40], eax
mov esi, dword [ebp - 0xe0]
push 1
lea ecx, [ebp - 0x3d8]
call fcn.10002242
cmp dword [eax], esi
jl 0x10020fce
mov dword [ebp - 0x560], 1
jmp 0x10020fd5
and dword [ebp - 0x560], 0
mov eax, dword [ebp - 0x3a0]
mov dword [ebp - 0x3a0], eax
mov esi, dword [ebp - 0x3a0]
imul esi, dword [ebp - 0x560]
push 0
lea ecx, [ebp - 0x3d8]
call fcn.10002242
cmp esi, dword [eax]
jle 0x1002100b
mov dword [ebp - 0x7b0], 1
jmp 0x10021012
and dword [ebp - 0x7b0], 0
push 4
pop eax
imul eax, eax, 0
mov esi, dword [ebp + eax - 0xab8]
push 0
lea ecx, [ebp - 0x3d8]
call fcn.10002242
mov ecx, dword [ebp - 0x7b0]
sub ecx, dword [eax]
add ecx, esi
jne 0x1002104a
cmp dword [ebp - 0xe0], 0
jne 0x1002104a
and dword [ebp - 0x568], 0
jmp 0x10021054
mov dword [ebp - 0x568], 1
mov eax, dword [ebp - 0xe0]
cmp dword [ebp - 0x568], eax
jle 0x10021074
mov eax, 0xd89e1771
test eax, eax
jne 0x10021074
and dword [ebp - 0x6f0], 0
jmp 0x1002107e
mov dword [ebp - 0x6f0], 1
mov eax, dword [ebp - 0x6f0]
mov dword [ebp - 0x570], eax
mov esi, dword [ebp - 0x570]
push 0
lea ecx, [ebp - 0x3d8]
call fcn.10002242
sub esi, dword [eax]
imul eax, esi, 0x4d41
test eax, eax
je 0x100210b5
mov dword [ebp - 0x864], 1
jmp 0x100210bc
and dword [ebp - 0x864], 0
push 4
pop eax
shl eax, 0
push 4
pop ecx
shl ecx, 0
mov edx, dword [ebp - 0x864]
sub edx, 0x43d9
sub edx, dword [ebp + ecx - 0xab8]
add edx, dword [ebp + eax - 0xab8]
jne 0x100210f6
cmp dword [ebp - 0xe0], 0
jne 0x100210f6
and dword [ebp - 0x578], 0
jmp 0x10021100
mov dword [ebp - 0x578], 1
cmp dword [ebp - 0x578], 0xfffffff9
jne 0x10021115
mov dword [ebp - 0x6f8], 1
jmp 0x1002111c
and dword [ebp - 0x6f8], 0
cmp dword [ebp - 0x6f8], 0xe5c48968
jbe 0x10021134
mov dword [ebp - 0x580], 1
jmp 0x1002113b
and dword [ebp - 0x580], 0
cmp dword [ebp - 0x580], 0xe5aba8d6
jae 0x10021153
mov dword [ebp - 0x7b8], 1
jmp 0x1002115a
and dword [ebp - 0x7b8], 0
cmp dword [ebp - 0x7b8], 0
jb 0x10021170
push 0
lea ecx, [ebp - 0x3d8]
call fcn.10002242
push 0
lea ecx, [ebp - 0x3d8]
call fcn.10002242
mov eax, dword [eax]
mov dword [ebp - 0xe0], eax
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x3d8]
call fcn.1000223d
xor eax, eax
mov ecx, dword [ebp - 0x250]
mov word [ebp + ecx*2 - 0xcfc], ax
jmp 0x10020eb5
mov dword [ebp - 0x258], 0xffffffff
mov dword [ebp - 0x2cc], 0
jmp 0x100211cc
mov eax, dword [ebp - 0x2cc]
inc eax
mov dword [ebp - 0x2cc], eax
cmp dword [ebp - 0x2cc], 3
jge 0x100211e8
mov eax, dword [ebp - 0x2cc]
mov dword [ebp + eax*4 - 0xf78], 1
jmp 0x100211bf
mov dword [ebp - 0x258], 0
jmp 0x10021201
mov eax, dword [ebp - 0x258]
inc eax
mov dword [ebp - 0x258], eax
cmp dword [ebp - 0x258], 2
jg 0x1002126a
mov dword [ebp - 0x324], 0xfffffff8
mov byte [ebp - 0xad], 0
movzx eax, byte [ebp - 0xad]
test eax, eax
je 0x10021230
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CompareFileTime]
mov dword [ebp - 0x324], 2
jmp 0x10021249
mov eax, dword [ebp - 0x324]
dec eax
mov dword [ebp - 0x324], eax
cmp dword [ebp - 0x324], 0
jl 0x10021268
mov dword [ebp - 0x928], 0x1ded6804
mov dword [ebp - 0x928], 0xfaaaeb9a
jmp 0x1002123c
jmp 0x100211f4
cmp dword [ebp - 0x7b4], 0
je 0x10024e56
mov dword [ebp - 0x128], 1
mov dword [ebp - 0xa0], 0xffffffff
mov dword [ebp - 0x44], 1
mov dword [ebp - 0x84], 1
mov dword [ebp - 0x4c], 0
jmp 0x100212ac
mov eax, dword [ebp - 0x4c]
inc eax
mov dword [ebp - 0x4c], eax
cmp dword [ebp - 0x4c], 3
jge 0x100212c2
mov eax, dword [ebp - 0x4c]
mov dword [ebp + eax*4 - 0x88c], 0
jmp 0x100212a5
mov dword [ebp - 0x4c], 0
jmp 0x100212d2
mov eax, dword [ebp - 0x4c]
inc eax
mov dword [ebp - 0x4c], eax
cmp dword [ebp - 0x4c], 2
jge 0x100212e8
mov eax, dword [ebp - 0x4c]
mov dword [ebp + eax*4 - 0xd54], 0x45bb
jmp 0x100212cb
mov eax, dword [ebp - 0x84]
inc eax
mov dword [ebp - 0x84], eax
mov dword [ebp - 0x44], 0
jmp 0x10021305
mov eax, dword [ebp - 0x44]
inc eax
mov dword [ebp - 0x44], eax
cmp dword [ebp - 0x44], 2
jg 0x10021612
mov dword [ebp - 0x934], 0xfffffffb
mov dword [ebp - 0x128], 0
jmp 0x10021332
mov eax, dword [ebp - 0x128]
inc eax
mov dword [ebp - 0x128], eax
cmp dword [ebp - 0x128], 2
jg 0x10021372
mov dword [ebp - 0x84], 0
jmp 0x10021354
mov eax, dword [ebp - 0x84]
inc eax
mov dword [ebp - 0x84], eax
cmp dword [ebp - 0x84], 3
jge 0x10021370
mov eax, dword [ebp - 0x84]
mov dword [ebp + eax*4 - 0x88c], 0xffffffff
jmp 0x10021347
jmp 0x10021325
mov eax, dword [ebp - 0x44]
mov eax, dword [ebp + eax*4 - 0x88c]
mov dword [ebp - 0xa0], eax
mov eax, dword [ebp - 0x44]
mov eax, dword [ebp + eax*4 - 0x88c]
cmp eax, dword [ebp - 0xa0]
jge 0x10021478
mov dword [ebp - 0xcd0], 0x5fa2ef7
mov dword [ebp - 0xccc], 0x5fa2ef7
mov dword [ebp - 0xcc8], 0x5fa2ef7
mov dword [ebp - 0xcc4], 0x5fa2ef7
mov eax, dword [ebp - 0x44]
cmp dword [ebp + eax*4 - 0x88c], 0xffffffff
jbe 0x100213d9
mov dword [ebp - 0x588], 1
jmp 0x100213e0
and dword [ebp - 0x588], 0
mov eax, dword [ebp - 0x44]
mov eax, dword [ebp + eax*4 - 0x88c]
sub eax, dword [ebp - 0x588]
jne 0x1002144c
mov eax, dword [ebp - 0x84]
mov dword [ebp - 0xd70], eax
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x44]
mov ecx, dword [ebp + ecx*4 - 0x88c]
cmp ecx, dword [ebp + eax - 0xd54]
jle 0x10021423
mov dword [ebp - 0xb2c], 1
jmp 0x1002142a
and dword [ebp - 0xb2c], 0
mov eax, dword [ebp - 0x44]
mov eax, dword [ebp + eax*4 - 0x88c]
mov dword [ebp - 0xd48], eax
cmp dword [ebp - 0x128], 0
jne 0x1002144c
and dword [ebp - 0x700], 0
jmp 0x10021456
mov dword [ebp - 0x700], 1
push 4
pop eax
imul eax, eax, 3
mov ecx, dword [ebp - 0x700]
mov dword [ebp + eax - 0xcd0], ecx
mov dword [ebp - 0x934], 0x19d87263
jmp 0x1002160d
mov dword [ebp - 0xa0], 0x7b1b0cad
mov dword [ebp - 0xa0], 0
jmp 0x1002149b
mov eax, dword [ebp - 0xa0]
inc eax
mov dword [ebp - 0xa0], eax
cmp dword [ebp - 0xa0], 3
jle 0x1002160d
mov byte [ebp - 0xd3], 0
movzx eax, byte [ebp - 0xd3]
test eax, eax
je 0x10021608
mov dword [ebp - 0x590], 0x75ef
mov dword [ebp - 0x940], str.ewjbdemau_ojuwtjwd_pkrq_kivaopfn_ktihkp_kttxxlhar_nxx_pofpl_ynrcakus_yamixtzoq_hbdgqphh_epb
cmp dword [ebp - 0x590], 0x796c
jle 0x100215b8
and dword [ebp - 0x260], 0
jmp 0x100214f8
mov eax, dword [ebp - 0x260]
inc eax
mov dword [ebp - 0x260], eax
cmp dword [ebp - 0x260], 0x6d3e
jge 0x100215b8
and dword [ebp - 0x2d4], 0
jmp 0x1002151e
mov eax, dword [ebp - 0x2d4]
inc eax
mov dword [ebp - 0x2d4], eax
cmp dword [ebp - 0x2d4], 0x366f
jge 0x100215b3
and dword [ebp - 0x268], 0
jmp 0x10021544
mov eax, dword [ebp - 0x268]
inc eax
mov dword [ebp - 0x268], eax
cmp dword [ebp - 0x268], 0x922
jge 0x100215ae
mov eax, dword [ebp - 0x260]
imul eax, dword [ebp - 0x2d4]
xor eax, dword [ebp - 0x268]
cdq
mov dword [ebp - 0x9b4], eax
mov dword [ebp - 0x9b0], edx
push dword [ebp - 0x9b0]
push dword [ebp - 0x9b4]
lea ecx, [ebp - 0xf6c]
call fcn.10002dd6
pop ecx
pop ecx
mov dword [ebp - 0xabc], eax
mov ecx, dword [ebp - 0xabc]
call fcn.100048cd
push eax
call fcn.100476ff
pop ecx
lea ecx, [ebp - 0xf6c]
call fcn.100048c3
jmp 0x10021537
jmp 0x10021511
jmp 0x100214eb
push 0x1b4c
call dword [sym.imp.USER32.dll_IsIconic]
mov dword [ebp - 4], 0x21
cmp dword [ebp - 0x590], 0x74de
jge 0x100215e2
push dword [ebp - 0x940]
call fcn.100476ff
pop ecx
jmp 0x100215fe
or dword [ebp - 4], 0xffffffff
jmp 0x10021608
jmp 0x1002148e
jmp 0x100212fe
mov dword [ebp - 0x270], 0xf09c
mov dword [ebp - 0xe4], 0x17d1dc6b
mov dword [ebp - 0x378], 7
mov dword [ebp - 0xacc], 0xffffffff
mov dword [ebp - 0x30c], 0
jmp 0x10021653
mov eax, dword [ebp - 0x30c]
inc eax
mov dword [ebp - 0x30c], eax
cmp dword [ebp - 0x30c], 3
jge 0x1002166f
mov eax, dword [ebp - 0x30c]
mov dword [ebp + eax*4 - 0xc48], 7
jmp 0x10021646
mov eax, 0x4e86524e
sub eax, dword [ebp - 0x270]
cmp eax, 1
jb 0x1002168b
mov dword [ebp - 0x818], 1
jmp 0x10021692
and dword [ebp - 0x818], 0
mov eax, dword [ebp - 0xe4]
cmp dword [ebp - 0x818], eax
jge 0x100216ac
mov dword [ebp - 0x598], 1
jmp 0x100216b3
and dword [ebp - 0x598], 0
mov eax, dword [ebp - 0xe4]
cmp dword [ebp - 0x598], eax
jl 0x100216cd
mov dword [ebp - 0x708], 1
jmp 0x100216d4
and dword [ebp - 0x708], 0
cmp dword [ebp - 0x708], 0
jle 0x100216e9
mov dword [ebp - 0x5a0], 1
jmp 0x100216f0
and dword [ebp - 0x5a0], 0
mov eax, dword [ebp - 0x270]
cmp dword [ebp - 0x5a0], eax
jg 0x1002170a
mov dword [ebp - 0xb34], 1
jmp 0x10021711
and dword [ebp - 0xb34], 0
mov eax, dword [ebp - 0x270]
mov dword [ebp - 0xd78], eax
mov eax, dword [ebp - 0xe4]
add eax, 0x67aa1138
cmp dword [ebp - 0x270], eax
jl 0x1002173c
mov dword [ebp - 0x94c], 1
jmp 0x10021743
and dword [ebp - 0x94c], 0
xor eax, eax
inc eax
jne 0x10021754
mov dword [ebp - 0x7c0], 1
jmp 0x1002175b
and dword [ebp - 0x7c0], 0
mov eax, dword [ebp - 0x7c0]
mov dword [ebp - 0xe4], eax
mov eax, dword [ebp - 0xe4]
cmp eax, dword [ebp - 0x378]
jle 0x10021781
mov dword [ebp - 0x5a8], 1
jmp 0x10021788
and dword [ebp - 0x5a8], 0
cmp dword [ebp - 0x5a8], 0xe779
jle 0x10021894
mov dword [ebp - 0xd64], 0xfffffffd
mov dword [ebp - 0xe28], 0x3650dfa0
mov dword [ebp - 0xd6c], 0x4307976b
mov dword [ebp - 0xe00], 0xfffffff8
mov dword [ebp - 0xd74], 4
mov dword [ebp - 0xe4c], 0xa966896e
mov dword [ebp - 0xd7c], 0xfffffff6
mov dword [ebp - 0x710], 0xffffffff
push 2
lea ecx, [ebp - 0xc3c]
call fcn.100021db
mov dword [ebp - 4], 0x23
mov dword [ebp - 0x2dc], 0
jmp 0x10021815
mov eax, dword [ebp - 0x2dc]
inc eax
mov dword [ebp - 0x2dc], eax
cmp dword [ebp - 0x2dc], 2
jge 0x10021837
push dword [ebp - 0x2dc]
lea ecx, [ebp - 0xc3c]
call fcn.10002242
mov dword [eax], 0x7232
jmp 0x10021808
mov eax, dword [ebp - 0x710]
inc eax
mov dword [ebp - 0x710], eax
mov esi, dword [ebp - 0x378]
push 1
lea ecx, [ebp - 0xc3c]
call fcn.10002242
cmp dword [eax], esi
jge 0x10021867
mov dword [ebp - 0x5b0], 1
jmp 0x1002186e
and dword [ebp - 0x5b0], 0
push 4
pop eax
shl eax, 1
mov ecx, dword [ebp - 0x5b0]
mov dword [ebp + eax - 0xc48], ecx
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xc3c]
call fcn.1000223d
jmp 0x10021a70
mov dword [ebp - 0x13c], 0xfffffffc
mov dword [ebp - 0x5e0], 0xfffd
mov dword [ebp - 0x820], 1
cmp dword [ebp - 0x13c], 0x48c3
je 0x100218ca
mov dword [ebp - 0x848], 1
jmp 0x100218d1
and dword [ebp - 0x848], 0
cmp dword [ebp - 0x848], 1
je 0x100218e6
mov dword [ebp - 0x5b8], 1
jmp 0x100218ed
and dword [ebp - 0x5b8], 0
mov eax, dword [ebp - 0xe4]
cmp dword [ebp - 0x5b8], eax
jg 0x10021907
mov dword [ebp - 0x718], 1
jmp 0x1002190e
and dword [ebp - 0x718], 0
imul eax, dword [ebp - 0x718], 0
push 4
pop ecx
shl ecx, 0
cmp dword [ebp + ecx - 0xc48], eax
jle 0x10021930
mov dword [ebp - 0x5c0], 1
jmp 0x10021937
and dword [ebp - 0x5c0], 0
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x13c]
add ecx, dword [ebp - 0x5c0]
imul ecx, dword [ebp + eax - 0xc48]
test ecx, ecx
jne 0x10021967
cmp dword [ebp - 0x13c], 0
jne 0x10021967
and dword [ebp - 0x7c8], 0
jmp 0x10021971
mov dword [ebp - 0x7c8], 1
cmp dword [ebp - 0x7c8], 2
ja 0x1002198f
mov eax, 0x573c098b
test eax, eax
je 0x1002198f
mov dword [ebp - 0x5c8], 1
jmp 0x10021996
and dword [ebp - 0x5c8], 0
cmp dword [ebp - 0x5c8], 0xfff6
je 0x100219ae
mov dword [ebp - 0x720], 1
jmp 0x100219b5
and dword [ebp - 0x720], 0
mov eax, dword [ebp - 0x5e0]
mov ecx, dword [ebp - 0x378]
imul ecx, dword [ebp - 0x720]
lea eax, [ecx + eax - 1]
imul eax, eax, 0x2ea1
test eax, eax
jne 0x100219e8
cmp dword [ebp - 0x13c], 0
jne 0x100219e8
and dword [ebp - 0x5d0], 0
jmp 0x100219f2
mov dword [ebp - 0x5d0], 1
mov eax, dword [ebp - 0x5d0]
mov dword [ebp - 0x820], eax
mov eax, dword [ebp - 0x820]
cmp eax, dword [ebp - 0x13c]
jg 0x10021a18
mov dword [ebp - 0x5d8], 1
jmp 0x10021a1f
and dword [ebp - 0x5d8], 0
cmp dword [ebp - 0x5d8], 0xffff
je 0x10021a37
mov dword [ebp - 0x728], 1
jmp 0x10021a3e
and dword [ebp - 0x728], 0
mov eax, dword [ebp - 0x728]
sub eax, dword [ebp - 0x5e0]
cmp eax, 0xb86d5672
jb 0x10021a5d
mov dword [ebp - 0x7d0], 1
jmp 0x10021a64
and dword [ebp - 0x7d0], 0
mov eax, dword [ebp - 0x7d0]
mov dword [ebp - 0xacc], eax
mov byte [ebp - 0x184], 0xa
mov byte [ebp - 0x183], 0xa8
mov byte [ebp - 0x182], 0xd
mov byte [ebp - 0x181], 1
mov byte [ebp - 0x180], 1
mov byte [ebp - 0x17f], 0x16
mov byte [ebp - 0x17e], 5
mov byte [ebp - 0x17d], 0xa
mov byte [ebp - 0x17c], 0xb
mov byte [ebp - 0x17b], 0xa
mov byte [ebp - 0x17a], 0xc
mov byte [ebp - 0x179], 0x16
mov byte [ebp - 0x178], 8
mov byte [ebp - 0x177], 0x17
mov byte [ebp - 0x176], 6
mov byte [ebp - 0x175], 7
mov byte [ebp - 0x174], 0
mov byte [ebp - 0x173], 0x24
mov byte [ebp - 0x172], 7
mov byte [ebp - 0x171], 6
mov byte [ebp - 0x170], 2
mov byte [ebp - 0x16f], 0x35
mov byte [ebp - 0x16e], 3
mov byte [ebp - 0x16d], 0x3b
mov byte [ebp - 0x16c], 0x40
mov byte [ebp - 0x16b], 0xee
mov byte [ebp - 0x16a], 9
mov byte [ebp - 0x169], 0x10
mov byte [ebp - 0x168], 3
mov byte [ebp - 0x167], 0x34
mov byte [ebp - 0x166], 4
mov byte [ebp - 0x165], 0x22
xor eax, eax
inc eax
shl eax, 0
movzx eax, byte [ebp + eax - 0x184]
and eax, 0xda
xor ecx, ecx
inc ecx
shl ecx, 0
movzx ecx, byte [ebp + ecx - 0x184]
or ecx, 0xda
sub ecx, eax
xor eax, eax
inc eax
imul eax, eax, 0
movzx eax, byte [ebp + eax - 0x184]
mov byte [ebp + eax - 0xb6c], cl
push 2
lea ecx, [ebp - 0x85c]
call fcn.100021db
mov dword [ebp - 4], 0x24
mov dword [ebp - 0x3c], 0
mov dword [ebp - 0x5e8], 0
mov dword [ebp - 0x958], 0xffffffff
mov dword [ebp - 0x278], 0
jmp 0x10021bd6
mov eax, dword [ebp - 0x278]
inc eax
mov dword [ebp - 0x278], eax
cmp dword [ebp - 0x278], 2
jge 0x10021bf8
push dword [ebp - 0x278]
lea ecx, [ebp - 0x85c]
call fcn.10002242
mov dword [eax], 0x862fd41e
jmp 0x10021bc9
mov dword [ebp - 0x3c], 1
jmp 0x10021c08
mov eax, dword [ebp - 0x3c]
dec eax
mov dword [ebp - 0x3c], eax
cmp dword [ebp - 0x3c], 0
jl 0x10021e62
mov byte [ebp - 0xae], 0
movzx eax, byte [ebp - 0xae]
test eax, eax
je 0x10021c2c
push 0
call dword [sym.imp.KERNEL32.dll_Sleep]
mov dword [ebp - 0x738], 0x6eb3
mov dword [ebp - 0x964], str.hdkyw_gzhqnkmg_jgurjhydr_hukv_yvpgfdh_hxlvmvqlv
cmp dword [ebp - 0x738], 0x6f00
jle 0x10021d11
push 0
push 0x2170
push 0x336
push 0x882
call dword [sym.imp.GDI32.dll_SetViewportOrgEx]
and dword [ebp - 0x334], 0
jmp 0x10021c7d
mov eax, dword [ebp - 0x334]
inc eax
mov dword [ebp - 0x334], eax
cmp dword [ebp - 0x334], 0x5876
jge 0x10021d11
and dword [ebp - 0x280], 0
jmp 0x10021ca3
mov eax, dword [ebp - 0x280]
inc eax
mov dword [ebp - 0x280], eax
cmp dword [ebp - 0x280], 0x76cd
jge 0x10021d0c
and dword [ebp - 0x2e4], 0
jmp 0x10021cc5
mov eax, dword [ebp - 0x2e4]
inc eax
mov dword [ebp - 0x2e4], eax
cmp dword [ebp - 0x2e4], 0x4f84
jge 0x10021d0a
mov eax, dword [ebp - 0x334]
sub eax, dword [ebp - 0x280]
mov ecx, dword [ebp - 0x2e4]
shl eax, cl
cdq
mov dword [ebp - 0x9c0], eax
mov dword [ebp - 0x9bc], edx
push dword [ebp - 0x9bc]
push dword [ebp - 0x9c0]
mov ecx, 0x10079c18
call fcn.100048ed
jmp 0x10021cb8
jmp 0x10021c96
jmp 0x10021c70
cmp dword [ebp - 0x3c], 0
jne 0x10021d37
mov eax, dword [ebp - 0x3c]
mov dword [ebp - 0x5e8], eax
mov eax, dword [ebp - 0x5e8]
cmp eax, dword [ebp - 0x958]
jg 0x10021d37
and dword [ebp - 0x730], 0
jmp 0x10021d41
mov dword [ebp - 0x730], 1
push dword [ebp - 0x3c]
lea ecx, [ebp - 0x85c]
call fcn.10002242
mov ecx, dword [ebp - 0x730]
cmp ecx, dword [eax]
jge 0x10021d65
mov dword [ebp - 0xb3c], 1
jmp 0x10021d6c
and dword [ebp - 0xb3c], 0
push dword [ebp - 0x3c]
lea ecx, [ebp - 0x85c]
call fcn.10002242
push dword [ebp - 0x3c]
lea ecx, [ebp - 0x85c]
call fcn.10002242
cmp dword [eax], 0xd78f
jle 0x10021d9c
mov dword [ebp - 0x5f0], 1
jmp 0x10021da3
and dword [ebp - 0x5f0], 0
push dword [ebp - 0x3c]
lea ecx, [ebp - 0x85c]
call fcn.10002242
mov ecx, dword [ebp - 0x5f0]
sub ecx, dword [eax]
cmp ecx, 1
ja 0x10021dca
mov dword [ebp - 0x86c], 1
jmp 0x10021dd1
and dword [ebp - 0x86c], 0
push 1
lea ecx, [ebp - 0x85c]
call fcn.10002242
mov ecx, dword [ebp - 0x86c]
cmp ecx, dword [eax]
je 0x10021df4
mov dword [ebp - 0x5f8], 1
jmp 0x10021dfb
and dword [ebp - 0x5f8], 0
push dword [ebp - 0x3c]
lea ecx, [ebp - 0x85c]
call fcn.10002242
mov ecx, dword [ebp - 0x5f8]
mov dword [eax], ecx
mov byte [ebp - 4], 0x25
cmp dword [ebp - 0x738], 0x6e97
jge 0x10021e31
mov edx, dword [ebp - 0x964]
mov ecx, 0x10079c18
call fcn.10006b05
jmp 0x10021e4d
mov dword [ebp - 4], 0x24
jmp 0x10021e5d
jmp 0x10021c01
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x85c]
call fcn.1000223d
mov dword [ebp - 0x2c], 2
and dword [ebp - 0x2a0], 0
jmp 0x10021e89
mov eax, dword [ebp - 0x2c]
inc eax
inc eax
mov dword [ebp - 0x2c], eax
cmp dword [ebp - 0x2c], 0x20
jae 0x10023b96
push 3
lea ecx, [ebp - 0xba0]
call fcn.100021db
mov dword [ebp - 4], 0x27
mov dword [ebp - 0x130], 0x9dada439
mov dword [ebp - 0x970], 0xc3f30b91
mov dword [ebp - 0xb44], 0x23c5ad05
mov dword [ebp - 0x7d8], 0xffffffff
mov dword [ebp - 0x630], 0xfffffff6
mov dword [ebp - 0x5c], 0
jmp 0x10021ee9
mov eax, dword [ebp - 0x5c]
inc eax
mov dword [ebp - 0x5c], eax
cmp dword [ebp - 0x5c], 3
jge 0x10021f05
push dword [ebp - 0x5c]
lea ecx, [ebp - 0xba0]
call fcn.10002242
mov dword [eax], 1
jmp 0x10021ee2
mov dword [ebp - 0x5c], 0
jmp 0x10021f15
mov eax, dword [ebp - 0x5c]
inc eax
mov dword [ebp - 0x5c], eax
cmp dword [ebp - 0x5c], 4
jge 0x10021f2b
mov eax, dword [ebp - 0x5c]
mov dword [ebp + eax*4 - 0xe38], 0x55950707
jmp 0x10021f0e
mov dword [ebp - 0x130], 2
jmp 0x10021f44
mov eax, dword [ebp - 0x130]
dec eax
mov dword [ebp - 0x130], eax
cmp dword [ebp - 0x130], 0
jl 0x10022375
mov dword [ebp - 0x34], 0xb3e90a62
push 3
lea ecx, [ebp - 0xb88]
call fcn.100021db
mov byte [ebp - 4], 0x28
mov dword [ebp - 0x608], 0x6f263393
mov dword [ebp - 0x288], 0
jmp 0x10021f8c
mov eax, dword [ebp - 0x288]
inc eax
mov dword [ebp - 0x288], eax
cmp dword [ebp - 0x288], 3
jge 0x10021fae
push dword [ebp - 0x288]
lea ecx, [ebp - 0xb88]
call fcn.10002242
mov dword [eax], 0xa898cbdb
jmp 0x10021f7f
mov dword [ebp - 0x34], 0
jmp 0x10021fbe
mov eax, dword [ebp - 0x34]
inc eax
mov dword [ebp - 0x34], eax
cmp dword [ebp - 0x34], 2
jg 0x10021feb
push 4
pop eax
shl eax, 0
mov dword [ebp + eax - 0xe38], 0x3921ded6
push dword [ebp - 0x130]
lea ecx, [ebp - 0xba0]
call fcn.10002242
and dword [eax], 0
jmp 0x10021fb7
mov dword [ebp - 0x750], 0x2e30
mov dword [ebp - 0x97c], str.fqgfvt_wovqr_hmyf_angvxwuj
cmp dword [ebp - 0x750], 0x3201
jle 0x1002212e
push 0
push 0x186
push 0
push 0
call dword [sym.imp.KERNEL32.dll_GetTempFileNameW]
and dword [ebp - 0x2ec], 0
jmp 0x10022036
mov eax, dword [ebp - 0x2ec]
inc eax
mov dword [ebp - 0x2ec], eax
cmp dword [ebp - 0x2ec], 0x1f40
jge 0x1002212e
and dword [ebp - 0x1e8], 0
jmp 0x1002205c
mov eax, dword [ebp - 0x1e8]
inc eax
mov dword [ebp - 0x1e8], eax
cmp dword [ebp - 0x1e8], 0x1a7a
jge 0x10022129
and dword [ebp - 0x314], 0
jmp 0x10022082
mov eax, dword [ebp - 0x314]
inc eax
mov dword [ebp - 0x314], eax
cmp dword [ebp - 0x314], 0x21f6
jge 0x10022124
and dword [ebp - 0x290], 0
jmp 0x100220a8
mov eax, dword [ebp - 0x290]
inc eax
mov dword [ebp - 0x290], eax
cmp dword [ebp - 0x290], 0x76f9
jge 0x1002211f
mov eax, dword [ebp - 0x314]
cdq
idiv dword [ebp - 0x290]
mov eax, dword [ebp - 0x2ec]
sub eax, dword [ebp - 0x1e8]
mov ecx, edx
shl eax, cl
cdq
mov dword [ebp - 0x9cc], eax
mov dword [ebp - 0x9c8], edx
push dword [ebp - 0x9c8]
push dword [ebp - 0x9cc]
lea ecx, [ebp - 0xf00]
call fcn.10002dd6
pop ecx
pop ecx
mov dword [ebp - 0xadc], eax
mov ecx, dword [ebp - 0xadc]
call fcn.100048cd
push eax
call fcn.100476ff
pop ecx
lea ecx, [ebp - 0xf00]
call fcn.100048c3
jmp 0x1002209b
jmp 0x10022075
jmp 0x1002204f
jmp 0x10022029
mov dword [ebp - 0x34], 0
jmp 0x1002213e
mov eax, dword [ebp - 0x34]
inc eax
mov dword [ebp - 0x34], eax
cmp dword [ebp - 0x34], 0x19
jg 0x10022319
mov dword [ebp - 0x114], 0
mov dword [ebp - 0x7e0], 0x4c3f121f
mov eax, dword [ebp - 0x114]
mov dword [ebp - 0xe08], eax
cmp dword [ebp - 0x970], 0
jne 0x10022209
cmp dword [ebp - 0x34], 0
je 0x100221cf
mov eax, dword [ebp - 0xb44]
mov dword [ebp - 0xd88], eax
mov eax, dword [ebp - 0x34]
cmp eax, dword [ebp - 0x114]
jge 0x1002219e
mov dword [ebp - 0x3c0], 1
jmp 0x100221a5
and dword [ebp - 0x3c0], 0
push 1
lea ecx, [ebp - 0xb88]
call fcn.10002242
mov ecx, dword [ebp - 0x3c0]
mov dword [eax], ecx
cmp dword [ebp - 0x3c0], 0
je 0x100221cf
mov dword [ebp - 0x600], 1
jmp 0x100221d6
and dword [ebp - 0x600], 0
mov eax, dword [ebp - 0x600]
sub eax, dword [ebp - 0x114]
mov dword [ebp - 0x7d8], eax
mov eax, dword [ebp - 0x7d8]
mov dword [ebp - 0x608], eax
cmp dword [ebp - 0x608], 0xbf5b
jl 0x10022209
and dword [ebp - 0x740], 0
jmp 0x10022213
mov dword [ebp - 0x740], 1
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xe38]
cmp eax, dword [ebp - 0x740]
jge 0x10022234
mov dword [ebp - 0x610], 1
jmp 0x1002223b
and dword [ebp - 0x610], 0
mov eax, dword [ebp - 0x610]
inc eax
inc eax
cmp eax, dword [ebp - 0x114]
jle 0x10022257
mov dword [ebp - 0x828], 1
jmp 0x1002225e
and dword [ebp - 0x828], 0
mov eax, dword [ebp - 0x114]
cmp dword [ebp - 0x828], eax
jge 0x10022278
mov dword [ebp - 0x618], 1
jmp 0x1002227f
and dword [ebp - 0x618], 0
push 0
lea ecx, [ebp - 0xba0]
call fcn.10002242
mov ecx, dword [ebp - 0x618]
cmp ecx, dword [eax]
jg 0x100222a2
mov dword [ebp - 0x748], 1
jmp 0x100222a9
and dword [ebp - 0x748], 0
mov eax, dword [ebp - 0x34]
cmp dword [ebp - 0x748], eax
jle 0x100222c4
xor eax, eax
je 0x100222c4
mov dword [ebp - 0x620], 1
jmp 0x100222cb
and dword [ebp - 0x620], 0
mov eax, dword [ebp - 0x34]
add eax, dword [ebp - 0x620]
mov dword [ebp - 0x7e0], eax
je 0x100222fa
push 0
lea ecx, [ebp - 0xb88]
call fcn.10002242
cmp dword [eax], 0
je 0x100222fa
mov dword [ebp - 0x628], 1
jmp 0x10022301
and dword [ebp - 0x628], 0
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x628]
mov dword [ebp + eax - 0xe38], ecx
jmp 0x10022137
mov byte [ebp - 4], 0x29
cmp dword [ebp - 0x750], 0x2dc3
jge 0x10022335
push dword [ebp - 0x97c]
call fcn.100476ff
pop ecx
jmp 0x10022351
mov dword [ebp - 4], 0x28
jmp 0x10022361
mov byte [ebp - 4], 0x27
lea ecx, [ebp - 0xb88]
call fcn.1000223d
jmp 0x10021f37
mov eax, dword [ebp - 0x630]
dec eax
mov dword [ebp - 0x630], eax
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xba0]
call fcn.1000223d
xor eax, eax
inc eax
imul eax, eax, 0
movzx eax, byte [ebp + eax - 0x184]
lea eax, [eax + eax + 2]
cmp dword [ebp - 0x2c], eax
jne 0x100234c2
mov dword [ebp - 0x88], 0xffffffff
mov dword [ebp - 0x400], 0x54292978
mov dword [ebp - 0x380], 0x68cd5467
mov dword [ebp - 0x988], 6
mov dword [ebp - 0xd00], 0x76fbfcc0
mov dword [ebp - 0xd90], 0x39200279
mov dword [ebp - 0xe10], 0xffffffff
mov dword [ebp - 0xda0], 0xfffffff7
mov dword [ebp - 0xe5c], 0xfffffffd
mov dword [ebp - 0x424], 1
mov dword [ebp - 0x88], 0xffffffe7
jmp 0x10022429
mov eax, dword [ebp - 0x88]
inc eax
mov dword [ebp - 0x88], eax
cmp dword [ebp - 0x88], 0xffffffe7
jge 0x10022590
mov dword [ebp - 0x1ec], 0x91df82
mov dword [ebp - 0x40c], 0x38e486ae
mov dword [ebp - 0xdb0], 0xfffffffa
mov dword [ebp - 0x1ec], 0xfcc58a01
cmp dword [ebp - 0x1ec], 0
je 0x10022509
imul eax, dword [ebp - 0x88], 0xec32
imul eax, dword [ebp - 0x40c]
test eax, eax
jne 0x10022492
cmp dword [ebp - 0x88], 0
jne 0x10022492
and dword [ebp - 0x850], 0
jmp 0x1002249c
mov dword [ebp - 0x850], 1
cmp dword [ebp - 0x850], 0xfffffff9
jle 0x100224b1
mov dword [ebp - 0x638], 1
jmp 0x100224b8
and dword [ebp - 0x638], 0
mov eax, 0x7030
sub eax, dword [ebp - 0x638]
mov dword [ebp - 0x400], eax
cmp dword [ebp - 0x400], 0x6c31
jne 0x100224e1
mov dword [ebp - 0x404], 1
jmp 0x100224e8
and dword [ebp - 0x404], 0
mov eax, dword [ebp - 0x404]
mov dword [ebp - 0x380], eax
cmp dword [ebp - 0x380], 0
je 0x10022509
mov dword [ebp - 0xb4c], 1
jmp 0x10022510
and dword [ebp - 0xb4c], 0
mov eax, dword [ebp - 0x88]
mov dword [ebp - 0xe18], eax
cmp dword [ebp - 0x40c], 0
jne 0x1002252c
cmp dword [ebp - 0x1ec], 0
mov eax, dword [ebp - 0x380]
sub eax, dword [ebp - 0x88]
jne 0x1002254c
cmp dword [ebp - 0x1ec], 0
jne 0x1002254c
and dword [ebp - 0x414], 0
jmp 0x10022556
mov dword [ebp - 0x414], 1
cmp dword [ebp - 0x414], 0xfffffffd
jl 0x1002256b
mov dword [ebp - 0x41c], 1
jmp 0x10022572
and dword [ebp - 0x41c], 0
mov eax, dword [ebp - 0x41c]
mov dword [ebp - 0x988], eax
mov eax, dword [ebp - 0x424]
dec eax
mov dword [ebp - 0x424], eax
jmp 0x1002241c
mov eax, dword [ebp - 0x2c]
movzx eax, byte [ebp + eax - 0x184]
inc eax
mov dword [ebp - 0x2a0], eax
push 4
lea ecx, [ebp - 0x34c]
call fcn.100021db
mov dword [ebp - 4], 0x2b
mov dword [ebp - 0x14], 0x6fe7d8a8
mov dword [ebp - 0x3a8], 0
mov dword [ebp - 0x18c], 2
push 1
lea ecx, [ebp - 0x898]
call fcn.100021db
mov byte [ebp - 4], 0x2c
mov dword [ebp - 0x64], 0
jmp 0x100225f2
mov eax, dword [ebp - 0x64]
inc eax
mov dword [ebp - 0x64], eax
cmp dword [ebp - 0x64], 4
jge 0x1002260b
push dword [ebp - 0x64]
lea ecx, [ebp - 0x34c]
call fcn.10002242
and dword [eax], 0
jmp 0x100225eb
mov dword [ebp - 0x64], 0
jmp 0x1002261b
mov eax, dword [ebp - 0x64]
inc eax
mov dword [ebp - 0x64], eax
cmp dword [ebp - 0x64], 1
jge 0x10022637
push dword [ebp - 0x64]
lea ecx, [ebp - 0x898]
call fcn.10002242
mov dword [eax], 0xe56a96da
jmp 0x10022614
mov dword [ebp - 0x14], 0
jmp 0x10022647
cmp dword [ebp - 0x14], 3
jg 0x10022986
mov dword [ebp - 0x464], 0xf0244c3f
mov dword [ebp - 0x42c], 0x30ef
mov dword [ebp - 0xae8], str.klanvbi_vltqyqqc_wjn_ibjw_lpx_lgdnen_tawdlgdpb_toaloq_bvvplodt_lzfybyix
cmp dword [ebp - 0x42c], 0x3158
jle 0x10022710
and dword [ebp - 0x1f4], 0
jmp 0x10022695
mov eax, dword [ebp - 0x1f4]
inc eax
mov dword [ebp - 0x1f4], eax
cmp dword [ebp - 0x1f4], 0x4b87
jge 0x100226f9
and dword [ebp - 0x1fc], 0
jmp 0x100226b7
mov eax, dword [ebp - 0x1fc]
inc eax
mov dword [ebp - 0x1fc], eax
cmp dword [ebp - 0x1fc], 0x1f3e
jge 0x100226f7
mov eax, dword [ebp - 0x1f4]
cdq
idiv dword [ebp - 0x1fc]
mov eax, edx
cdq
mov dword [ebp - 0x9d8], eax
mov dword [ebp - 0x9d4], edx
push dword [ebp - 0x9d4]
push dword [ebp - 0x9d8]
mov ecx, 0x10079c18
call fcn.100048ed
jmp 0x100226aa
jmp 0x10022688
push 0
push 0x2492
push 0x236c
push 0x1237
call dword [sym.imp.GDI32.dll_GetCharABCWidthsFloatA]
mov dword [ebp - 0xb28], 0xfffffffb
mov byte [ebp - 4], 0x2d
cmp dword [ebp - 0x42c], 0x2da2
jge 0x1002273a
mov edx, dword [ebp - 0xae8]
mov ecx, 0x10079c18
call fcn.10006b05
jmp 0x10022756
mov dword [ebp - 4], 0x2c
jmp 0x10022766
mov dword [ebp - 0x9ac], 0xfffffffe
mov dword [ebp - 0x204], 0
jmp 0x10022789
mov eax, dword [ebp - 0x204]
inc eax
mov dword [ebp - 0x204], eax
cmp dword [ebp - 0x204], 3
jge 0x100227a5
mov eax, dword [ebp - 0x204]
mov dword [ebp + eax*4 - 0xdbc], 0x7257
jmp 0x1002277c
push dword [ebp - 0x14]
lea ecx, [ebp - 0x34c]
call fcn.10002242
cmp dword [eax], 0
je 0x10022849
mov esi, dword [ebp - 0x14]
push dword [ebp - 0x14]
lea ecx, [ebp - 0x34c]
call fcn.10002242
add esi, dword [eax]
cmp dword [ebp - 0x14], esi
jl 0x100227e0
mov dword [ebp - 0x434], 1
jmp 0x100227e7
and dword [ebp - 0x434], 0
mov eax, dword [ebp - 0x14]
cmp dword [ebp - 0x434], eax
jg 0x100227fe
mov dword [ebp - 0x994], 1
jmp 0x10022805
and dword [ebp - 0x994], 0
push dword [ebp - 0x14]
lea ecx, [ebp - 0x34c]
call fcn.10002242
mov eax, 0xffff
add eax, 7
mov dword [ebp - 0x43c], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x43c]
mov dword [ebp + eax - 0xdbc], ecx
cmp dword [ebp - 0x43c], 0
je 0x10022849
mov dword [ebp - 0x444], 1
jmp 0x10022850
and dword [ebp - 0x444], 0
push dword [ebp - 0x14]
lea ecx, [ebp - 0x34c]
call fcn.10002242
mov eax, dword [eax]
cmp eax, dword [ebp - 0x444]
jle 0x10022874
mov dword [ebp - 0x3e8], 1
jmp 0x1002287b
and dword [ebp - 0x3e8], 0
mov eax, dword [ebp - 0x3e8]
mov dword [ebp - 0x464], eax
push dword [ebp - 0x14]
lea ecx, [ebp - 0x34c]
call fcn.10002242
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xdbc]
mov dword [ebp - 0xdc0], eax
push 0
lea ecx, [ebp - 0x34c]
call fcn.10002242
push 1
lea ecx, [ebp - 0x34c]
call fcn.10002242
cmp dword [eax], 0
jne 0x100228d9
mov eax, 0x758b39d2
test eax, eax
jne 0x100228d9
and dword [ebp - 0x454], 0
jmp 0x100228e3
mov dword [ebp - 0x454], 1
mov eax, dword [ebp - 0xb28]
cmp dword [ebp - 0x454], eax
jne 0x100228fd
mov dword [ebp - 0x9a0], 1
jmp 0x10022904
and dword [ebp - 0x9a0], 0
push 2
lea ecx, [ebp - 0x34c]
call fcn.10002242
mov esi, dword [ebp - 0x14]
push dword [ebp - 0x14]
lea ecx, [ebp - 0x34c]
call fcn.10002242
cmp esi, dword [eax]
je 0x10022932
mov dword [ebp - 0xaf0], 1
jmp 0x10022939
and dword [ebp - 0xaf0], 0
mov eax, dword [ebp - 0x9ac]
mov dword [ebp - 0xe44], eax
xor eax, eax
inc eax
je 0x10022950
xor eax, eax
inc eax
je 0x10022a82
mov esi, dword [ebp - 0x3a8]
push 0
lea ecx, [ebp - 0x898]
call fcn.10002242
add esi, dword [eax]
push 0
lea ecx, [ebp - 0x898]
call fcn.10002242
cmp esi, dword [eax]
jg 0x100229c1
mov dword [ebp - 0xb48], 1
jmp 0x100229c8
and dword [ebp - 0xb48], 0
mov eax, dword [ebp - 0x3a8]
mov dword [ebp - 0xdd0], eax
mov eax, dword [ebp - 0x14]
cmp eax, dword [ebp - 0x18c]
jl 0x100229eb
mov dword [ebp - 0x9b8], 1
jmp 0x100229f2
and dword [ebp - 0x9b8], 0
mov eax, dword [ebp - 0x18c]
mov dword [ebp - 0xde4], eax
mov esi, dword [ebp - 0x14]
push 0
lea ecx, [ebp - 0x898]
call fcn.10002242
cmp esi, dword [eax]
je 0x10022a1e
mov dword [ebp - 0x46c], 1
jmp 0x10022a25
and dword [ebp - 0x46c], 0
push 3
lea ecx, [ebp - 0x34c]
call fcn.10002242
mov eax, dword [eax]
cmp eax, dword [ebp - 0x46c]
jl 0x10022a48
mov dword [ebp - 0x474], 1
jmp 0x10022a4f
and dword [ebp - 0x474], 0
cmp dword [ebp - 0x474], 7
ja 0x10022a64
mov dword [ebp - 0x47c], 1
jmp 0x10022a6b
and dword [ebp - 0x47c], 0
mov eax, dword [ebp - 0x14]
cmp eax, dword [ebp - 0x47c]
jg 0x10022a82
mov dword [ebp - 0x484], 1
jmp 0x10022a89
and dword [ebp - 0x484], 0
cmp dword [ebp - 0x484], 0
jne 0x10022a9e
mov dword [ebp - 0x48c], 1
jmp 0x10022aa5
and dword [ebp - 0x48c], 0
mov eax, dword [ebp - 0x18c]
cmp dword [ebp - 0x48c], eax
jg 0x10022abf
mov dword [ebp - 0x494], 1
jmp 0x10022ac6
and dword [ebp - 0x494], 0
push 0
lea ecx, [ebp - 0x898]
call fcn.10002242
mov ecx, dword [ebp - 0x494]
mov dword [eax], ecx
mov byte [ebp - 4], 0x2b
lea ecx, [ebp - 0x898]
call fcn.1000223d
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x34c]
call fcn.1000223d
mov eax, dword [ebp - 0x2c]
movzx eax, byte [ebp + eax - 0x184]
mov ecx, dword [ebp - 0x2c]
lea eax, [ecx + eax - 1]
mov dword [ebp - 0x2c], eax
mov dword [ebp - 0x49c], 0x6a4d
mov dword [ebp - 0xaf8], str.yndkf_jgu_eucif_ugirxb_ciu
cmp dword [ebp - 0x49c], 0x6d27
jle 0x10022bf6
push 0
push 0x1508
push 0x23bb
call dword [sym.imp.GDI32.dll_CreatePen]
and dword [ebp - 0x1a4], 0
jmp 0x10022b5a
mov eax, dword [ebp - 0x1a4]
inc eax
mov dword [ebp - 0x1a4], eax
cmp dword [ebp - 0x1a4], 0x1bdd
jge 0x10022bec
and dword [ebp - 0x194], 0
jmp 0x10022b80
mov eax, dword [ebp - 0x194]
inc eax
mov dword [ebp - 0x194], eax
cmp dword [ebp - 0x194], 0x284
jge 0x10022be7
and dword [ebp - 0x19c], 0
jmp 0x10022ba2
mov eax, dword [ebp - 0x19c]
inc eax
mov dword [ebp - 0x19c], eax
cmp dword [ebp - 0x19c], 0x3b65
jge 0x10022be5
mov eax, dword [ebp - 0x194]
add eax, dword [ebp - 0x19c]
and eax, dword [ebp - 0x1a4]
cdq
mov dword [ebp - 0x9e4], eax
mov dword [ebp - 0x9e0], edx
push dword [ebp - 0x9e0]
push dword [ebp - 0x9e4]
mov ecx, 0x10079c18
call fcn.100048ed
jmp 0x10022b95
jmp 0x10022b73
jmp 0x10022b4d
push 0
push 0
call dword [sym.imp.GDI32.dll_CopyEnhMetaFileA]
mov dword [ebp - 0xec], 0xffffffff
mov dword [ebp - 4], 0x2f
cmp dword [ebp - 0x49c], 0x6682
jge 0x10022c23
mov edx, dword [ebp - 0xaf8]
mov ecx, 0x10079c18
call fcn.10006b05
jmp 0x10022c3f
or dword [ebp - 4], 0xffffffff
jmp 0x10022c49
mov dword [ebp - 0x880], 0x6b95
mov dword [ebp - 0x87c], 0x6b95
mov dword [ebp - 0x878], 0x6b95
mov dword [ebp - 0x874], 0x6b95
mov dword [ebp - 0x90], 0xffb91e60
mov dword [ebp - 0xb00], 0xfffc
mov dword [ebp - 0x1ac], 0
jmp 0x10022c9e
mov eax, dword [ebp - 0x1ac]
inc eax
mov dword [ebp - 0x1ac], eax
cmp dword [ebp - 0x1ac], 1
jge 0x10022cba
mov eax, dword [ebp - 0x1ac]
mov dword [ebp + eax*4 - 0x9dc], 1
jmp 0x10022c91
mov dword [ebp - 0xec], 0xffffffed
jmp 0x10022cd3
cmp dword [ebp - 0xec], 0xfffffff3
jg 0x100234bd
mov dword [ebp - 0x98], 0
mov dword [ebp - 0xf4], 0xb79df948
mov dword [ebp - 0x98], 0x12
jmp 0x10022d0d
jmp 0x10021e81
mov dword [ebp - 0x24], 0x8ec0ae97
mov dword [ebp - 0x59c], 8
mov dword [ebp - 0xbfc], 0xfffffff7
mov dword [ebp - 0xbf8], 0xfffffff7
mov dword [ebp - 0xbf4], 0xfffffff7
mov dword [ebp - 0xbf0], 0xfffffff7
lea ecx, [ebp - 0x399]
call fcn.10002251
push eax
lea eax, [ebp - 0xbec]
push eax
lea eax, [ebp - 0xbfc]
push eax
lea ecx, [ebp - 0xec8]
call fcn.10002254
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0xe90]
call fcn.10002217
mov dword [ebp - 4], 0x35
mov dword [ebp - 0x27c], 0
jmp 0x10023550
mov eax, dword [ebp - 0x27c]
inc eax
mov dword [ebp - 0x27c], eax
cmp dword [ebp - 0x27c], 3
jge 0x1002356c
mov eax, dword [ebp - 0x27c]
mov dword [ebp + eax*4 - 0xdcc], 0xabf8
jmp 0x10023543
mov dword [ebp - 0x24], 0
jmp 0x1002357c
cmp dword [ebp - 0x24], 0xfffffffe
jle 0x1002395b
mov dword [ebp - 0x48], 0xc74aa0d7
mov dword [ebp - 0x11c], 0x1fad
mov dword [ebp - 0x30], 0x885dc1b6
cmp dword [ebp - 0x48], 0
jne 0x100235b0
mov dword [ebp - 0x58c], 1
jmp 0x100235b7
and dword [ebp - 0x58c], 0
mov eax, dword [ebp - 0x24]
cmp eax, dword [ebp - 0x24]
jne 0x100235cb
mov dword [ebp - 0x574], 1
jmp 0x100235d2
and dword [ebp - 0x574], 0
mov eax, dword [ebp - 0x24]
cmp dword [ebp - 0x574], eax
jle 0x100235e9
mov dword [ebp - 0xb38], 1
jmp 0x100235f0
and dword [ebp - 0xb38], 0
mov eax, dword [ebp - 0x11c]
mov dword [ebp - 0xd14], eax
mov dword [ebp - 0x30], 0xee61780e
mov eax, dword [ebp - 0x30]
add eax, dword [ebp - 0x24]
cmp eax, dword [ebp - 0x11c]
jg 0x1002361d
mov dword [ebp - 0x57c], 1
jmp 0x10023624
and dword [ebp - 0x57c], 0
mov eax, dword [ebp - 0x24]
cmp eax, dword [ebp - 0x57c]
jne 0x1002363b
mov dword [ebp - 0x584], 1
jmp 0x10023642
and dword [ebp - 0x584], 0
mov eax, dword [ebp - 0x584]
add eax, 0x6273
sub eax, dword [ebp - 0x24]
cmp eax, dword [ebp - 0x48]
jle 0x10023661
mov dword [ebp - 0xa00], 1
jmp 0x10023668
and dword [ebp - 0xa00], 0
mov eax, dword [ebp - 0x24]
mov dword [ebp - 0xd1c], eax
mov eax, dword [ebp - 0x48]
add eax, dword [ebp - 0x58c]
imul eax, dword [ebp - 0x11c]
cmp eax, dword [ebp - 0x24]
jle 0x10023692
mov dword [ebp - 0x594], 1
jmp 0x10023699
and dword [ebp - 0x594], 0
mov eax, dword [ebp - 0x59c]
add eax, dword [ebp - 0x594]
je 0x1002376d
mov dword [ebp - 0x3b4], 6
mov dword [ebp - 0x48], 0
jmp 0x100236c5
mov eax, dword [ebp - 0x48]
inc eax
mov dword [ebp - 0x48], eax
cmp dword [ebp - 0x48], 2
jg 0x1002375a
push 3
lea ecx, [ebp - 0xc78]
call fcn.100021db
mov byte [ebp - 4], 0x36
mov dword [ebp - 0x284], 0
jmp 0x100236f9
mov eax, dword [ebp - 0x284]
inc eax
mov dword [ebp - 0x284], eax
cmp dword [ebp - 0x284], 3
jge 0x1002371b
push dword [ebp - 0x284]
lea ecx, [ebp - 0xc78]
call fcn.10002242
mov dword [eax], 0xc509ca4f
jmp 0x100236ec
mov eax, dword [ebp - 0x48]
cmp dword [ebp + eax*4 - 0xdcc], 0
je 0x10023739
mov byte [ebp - 4], 0x35
lea ecx, [ebp - 0xc78]
call fcn.1000223d
jmp 0x1002375a
mov eax, dword [ebp - 0x3b4]
inc eax
mov dword [ebp - 0x3b4], eax
mov byte [ebp - 4], 0x35
lea ecx, [ebp - 0xc78]
call fcn.1000223d
jmp 0x100236be
cmp dword [ebp - 0x3b4], 0
je 0x10023768
jmp 0x1002395b
jmp 0x1002389e
push 2
lea ecx, [ebp - 0xc90]
call fcn.100021db
mov byte [ebp - 4], 0x37
mov dword [ebp - 0xb10], 1
mov dword [ebp - 0x28c], 0
jmp 0x100237a1
mov eax, dword [ebp - 0x28c]
inc eax
mov dword [ebp - 0x28c], eax
cmp dword [ebp - 0x28c], 2
jge 0x100237c3
push dword [ebp - 0x28c]
lea ecx, [ebp - 0xc90]
call fcn.10002242
mov dword [eax], 7
jmp 0x10023794
mov dword [ebp - 0x30], 0xfffffff6
jmp 0x100237d3
cmp dword [ebp - 0x30], 4
jle 0x10023873
mov dword [ebp - 0x5a4], 1
push 0
lea ecx, [ebp - 0xc90]
call fcn.10002242
mov eax, dword [ebp - 0x59c]
cmp eax, dword [ebp - 0x5a4]
je 0x1002380e
mov dword [ebp - 0x5ac], 1
jmp 0x10023815
and dword [ebp - 0x5ac], 0
mov eax, dword [ebp - 0x5a4]
cmp eax, dword [ebp - 0x5ac]
je 0x1002382f
mov dword [ebp - 0x5b4], 1
jmp 0x10023836
and dword [ebp - 0x5b4], 0
mov eax, dword [ebp - 0x11c]
imul eax, dword [ebp - 0x48]
cmp dword [ebp - 0x5b4], eax
jne 0x10023854
mov dword [ebp - 0x5bc], 1
jmp 0x1002385b
and dword [ebp - 0x5bc], 0
mov eax, dword [ebp - 0x11c]
imul eax, dword [ebp - 0x5bc]
mov dword [ebp - 0xb10], eax
jmp 0x100237cc
mov byte [ebp - 0xd1], 0
movzx eax, byte [ebp - 0xd1]
test eax, eax
je 0x1002388f
push 0
push 0
call dword [sym.imp.KERNEL32.dll_GetExitCodeProcess]
mov byte [ebp - 4], 0x35
lea ecx, [ebp - 0xc90]
call fcn.1000223d
mov eax, dword [ebp - 0x30]
mov dword [ebp - 0xd24], eax
xor eax, eax
cmp eax, 1
ja 0x100238ba
mov dword [ebp - 0x5c4], 1
jmp 0x100238c1
and dword [ebp - 0x5c4], 0
mov eax, dword [ebp - 0x30]
cmp dword [ebp - 0x5c4], eax
jg 0x100238d8
mov dword [ebp - 0x5cc], 1
jmp 0x100238df
and dword [ebp - 0x5cc], 0
mov eax, dword [ebp - 0x30]
cmp eax, dword [ebp - 0x5cc]
jle 0x100238f6
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xe90]
call fcn.1000223d
mov eax, dword [ebp - 0x2c]
sub eax, dword [ebp - 0x2a0]
movzx eax, byte [ebp + eax - 0x186]
movsx eax, byte [ebp + eax - 0xb6c]
mov ecx, dword [ebp - 0x2c]
movzx ecx, byte [ebp + ecx - 0x183]
and ecx, eax
mov eax, dword [ebp - 0x2c]
sub eax, dword [ebp - 0x2a0]
movzx eax, byte [ebp + eax - 0x186]
movsx eax, byte [ebp + eax - 0xb6c]
mov edx, dword [ebp - 0x2c]
movzx edx, byte [ebp + edx - 0x183]
or edx, eax
sub edx, ecx
mov eax, dword [ebp - 0x2c]
movzx eax, byte [ebp + eax - 0x184]
mov byte [ebp + eax - 0xb6c], dl
mov dword [ebp - 0x5ec], 0x76d6092f
push 2
lea ecx, [ebp - 0xbac]
call fcn.100021db
mov dword [ebp - 4], 0x38
mov dword [ebp - 0x390], 0x7045b365
mov dword [ebp - 0xa0c], 0x25417612
mov dword [ebp - 0x294], 0
jmp 0x10023a15
mov eax, dword [ebp - 0x294]
inc eax
mov dword [ebp - 0x294], eax
cmp dword [ebp - 0x294], 2
jge 0x10023a37
push dword [ebp - 0x294]
lea ecx, [ebp - 0xbac]
call fcn.10002242
mov dword [eax], 0xd62e65
jmp 0x10023a08
mov eax, dword [ebp - 0x5ec]
inc eax
cmp eax, dword [ebp - 0x5ec]
jge 0x10023a52
mov dword [ebp - 0x5f4], 1
jmp 0x10023a59
and dword [ebp - 0x5f4], 0
push 0
lea ecx, [ebp - 0xbac]
call fcn.10002242
mov eax, dword [eax]
mov ecx, dword [ebp - 0x5f4]
lea eax, [ecx + eax + 0x7a67d926]
test eax, eax
je 0x10023a8e
mov eax, 0xfffe
test eax, eax
je 0x10023a8e
mov dword [ebp - 0x5fc], 1
jmp 0x10023a95
and dword [ebp - 0x5fc], 0
mov eax, dword [ebp - 0x5fc]
mov dword [ebp - 0x390], eax
mov eax, dword [ebp - 0x390]
add eax, 0x59ff446c
cmp eax, 0xd77f
jne 0x10023ac8
mov eax, 0x1fcc1031
test eax, eax
je 0x10023ac8
mov dword [ebp - 0x604], 1
jmp 0x10023acf
and dword [ebp - 0x604], 0
cmp dword [ebp - 0x604], 6
jne 0x10023ae4
mov dword [ebp - 0x60c], 1
jmp 0x10023aeb
and dword [ebp - 0x60c], 0
mov eax, dword [ebp - 0x60c]
mov dword [ebp - 0xa0c], eax
mov esi, dword [ebp - 0x390]
push 1
lea ecx, [ebp - 0xbac]
call fcn.10002242
sub esi, dword [eax]
je 0x10023b5d
mov byte [ebp - 0xb2], 0
movzx eax, byte [ebp - 0xb2]
test eax, eax
je 0x10023b3c
push 1
push 0x423
push 0x1632
push 0x778
push 0xd91
call dword [sym.imp.USER32.dll_SetScrollRange]
mov byte [ebp - 0xc1], 0
movzx eax, byte [ebp - 0xc1]
test eax, eax
je 0x10023b5b
push 0x119a
push 0
call dword [sym.imp.KERNEL32.dll_SetThreadPriority]
jmp 0x10023b7b
mov byte [ebp - 0xb4], 0
movzx eax, byte [ebp - 0xb4]
test eax, eax
je 0x10023b7b
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_HeapCreate]
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xbac]
call fcn.1000223d
and dword [ebp - 0x2a0], 0
jmp 0x10021e81
mov dword [ebp - 0x18], 0xb372ba29
mov dword [ebp - 0x614], 0x7f3f
mov dword [ebp - 0xa18], str.ofgz_rtizfer_yhqwicm_scbptet
cmp dword [ebp - 0x614], 0x831f
jle 0x10023c62
and dword [ebp - 0x2a8], 0
jmp 0x10023bd7
mov eax, dword [ebp - 0x2a8]
inc eax
mov dword [ebp - 0x2a8], eax
cmp dword [ebp - 0x2a8], 0x6c8
jge 0x10023c62
and dword [ebp - 0x2b0], 0
jmp 0x10023bf9
mov eax, dword [ebp - 0x2b0]
inc eax
mov dword [ebp - 0x2b0], eax
cmp dword [ebp - 0x2b0], 0x89f
jge 0x10023c5d
mov eax, dword [ebp - 0x2a8]
imul eax, dword [ebp - 0x2b0]
cdq
mov dword [ebp - 0xa08], eax
mov dword [ebp - 0xa04], edx
push dword [ebp - 0xa04]
push dword [ebp - 0xa08]
lea ecx, [ebp - 0xf30]
call fcn.10002dd6
pop ecx
pop ecx
mov dword [ebp - 0xb50], eax
mov ecx, dword [ebp - 0xb50]
call fcn.100048cd
push eax
call fcn.100476ff
pop ecx
lea ecx, [ebp - 0xf30]
call fcn.100048c3
jmp 0x10023bec
jmp 0x10023bca
mov dword [ebp - 0x2b8], 0x1de9829c
mov dword [ebp - 4], 0x39
cmp dword [ebp - 0x614], 0x7bba
jge 0x10023c8b
push dword [ebp - 0xa18]
call fcn.100476ff
pop ecx
jmp 0x10023ca7
or dword [ebp - 4], 0xffffffff
jmp 0x10023cb1
mov dword [ebp - 0x354], 0xffffffff
mov dword [ebp - 0x6b4], 0xfffffff7
mov dword [ebp - 0xd2c], 1
mov dword [ebp - 0x6c4], 2
mov dword [ebp - 0xb18], 0xffffffff
push 2
lea ecx, [ebp - 0xb94]
call fcn.100021db
mov dword [ebp - 4], 0x3b
mov dword [ebp - 0x35c], 0xa746c20b
push 4
lea ecx, [ebp - 0xac8]
call fcn.100021db
mov byte [ebp - 4], 0x3c
mov dword [ebp - 0x6c], 0
jmp 0x10023d22
mov eax, dword [ebp - 0x6c]
inc eax
mov dword [ebp - 0x6c], eax
cmp dword [ebp - 0x6c], 2
jge 0x10023d3e
push dword [ebp - 0x6c]
lea ecx, [ebp - 0xb94]
call fcn.10002242
mov dword [eax], 7
jmp 0x10023d1b
mov dword [ebp - 0x6c], 0
jmp 0x10023d4e
mov eax, dword [ebp - 0x6c]
inc eax
mov dword [ebp - 0x6c], eax
cmp dword [ebp - 0x6c], 4
jge 0x10023d6a
push dword [ebp - 0x6c]
lea ecx, [ebp - 0xac8]
call fcn.10002242
mov dword [eax], 1
jmp 0x10023d47
mov eax, dword [ebp - 0x18]
sub eax, 0x11b3df09
cmp dword [ebp - 0x18], eax
jg 0x10023d83
mov dword [ebp - 0x61c], 1
jmp 0x10023d8a
and dword [ebp - 0x61c], 0
mov eax, dword [ebp - 0x18]
cmp dword [ebp - 0x61c], eax
jne 0x10023da1
mov dword [ebp - 0x624], 1
jmp 0x10023da8
and dword [ebp - 0x624], 0
mov eax, dword [ebp - 0x18]
cmp dword [ebp - 0x624], eax
jg 0x10023dbf
mov dword [ebp - 0x62c], 1
jmp 0x10023dc6
and dword [ebp - 0x62c], 0
mov eax, dword [ebp - 0x18]
cmp eax, dword [ebp - 0x62c]
je 0x10023ddd
mov dword [ebp - 0x634], 1
jmp 0x10023de4
and dword [ebp - 0x634], 0
mov eax, dword [ebp - 0x18]
cmp dword [ebp - 0x634], eax
je 0x10023dfb
mov dword [ebp - 0x63c], 1
jmp 0x10023e02
and dword [ebp - 0x63c], 0
cmp dword [ebp - 0x63c], 0xda2ae7b7
jae 0x10023e1a
mov dword [ebp - 0x644], 1
jmp 0x10023e21
and dword [ebp - 0x644], 0
mov eax, dword [ebp - 0x18]
cmp dword [ebp - 0x644], eax
jle 0x10023e38
mov dword [ebp - 0x64c], 1
jmp 0x10023e3f
and dword [ebp - 0x64c], 0
mov eax, dword [ebp - 0x18]
cmp dword [ebp - 0x64c], eax
je 0x10023e56
mov dword [ebp - 0x654], 1
jmp 0x10023e5d
and dword [ebp - 0x654], 0
mov eax, dword [ebp - 0x18]
cmp dword [ebp - 0x654], eax
jne 0x10023e74
mov dword [ebp - 0x65c], 1
jmp 0x10023e7b
and dword [ebp - 0x65c], 0
mov eax, dword [ebp - 0x18]
cmp dword [ebp - 0x65c], eax
je 0x10023e92
mov dword [ebp - 0x664], 1
jmp 0x10023e99
and dword [ebp - 0x664], 0
cmp dword [ebp - 0x664], 0x3b16
jne 0x10023eb1
mov dword [ebp - 0x66c], 1
jmp 0x10023eb8
and dword [ebp - 0x66c], 0
mov eax, dword [ebp - 0x18]
cmp dword [ebp - 0x66c], eax
jg 0x10023ed2
cmp dword [ebp - 0x18], 0
jne 0x10023ed2
and dword [ebp - 0x674], 0
jmp 0x10023edc
mov dword [ebp - 0x674], 1
mov eax, dword [ebp - 0x18]
imul eax, dword [ebp - 0x674]
add eax, dword [ebp - 0x18]
je 0x10023efe
push 8
pop eax
test eax, eax
je 0x10023efe
mov dword [ebp - 0x67c], 1
jmp 0x10023f05
and dword [ebp - 0x67c], 0
mov eax, dword [ebp - 0x67c]
mov dword [ebp - 0x2b8], eax
mov eax, dword [ebp - 0x2b8]
cmp eax, dword [ebp - 0x18]
jg 0x10023f28
mov dword [ebp - 0x684], 1
jmp 0x10023f2f
and dword [ebp - 0x684], 0
mov eax, dword [ebp - 0x684]
mov dword [ebp - 0x354], eax
mov eax, dword [ebp - 0x354]
mov dword [ebp - 0xd34], eax
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0xd3c], eax
cmp dword [ebp - 0x18], 0
jne 0x10023f62
mov dword [ebp - 0x68c], 1
jmp 0x10023f69
and dword [ebp - 0x68c], 0
mov eax, dword [ebp - 0x68c]
mov dword [ebp - 0x6b4], eax
mov eax, dword [ebp - 0x354]
mov dword [ebp - 0xd44], eax
mov eax, dword [ebp - 0x35c]
dec eax
mov dword [ebp - 0x35c], eax
mov eax, dword [ebp - 0x35c]
mov dword [ebp - 0x2b8], eax
mov esi, dword [ebp - 0x18]
push 1
lea ecx, [ebp - 0xb94]
call fcn.10002242
mov eax, dword [eax]
sub eax, esi
mov esi, dword [ebp - 0x2b8]
add esi, eax
push 0
lea ecx, [ebp - 0xac8]
call fcn.10002242
cmp esi, dword [eax]
jge 0x10023fd3
mov dword [ebp - 0x694], 1
jmp 0x10023fda
and dword [ebp - 0x694], 0
cmp dword [ebp - 0x694], 0x3922
jge 0x10023ff2
mov dword [ebp - 0x69c], 1
jmp 0x10023ff9
and dword [ebp - 0x69c], 0
cmp dword [ebp - 0x6c4], 0xfff8
jb 0x10024014
cmp dword [ebp - 0x18], 0
jne 0x10024014
mov dword [ebp - 0x6a4], 1
mov eax, dword [ebp - 0xb18]
cmp dword [ebp - 0x6a4], eax
jg 0x10024038
mov dword [ebp - 0x340], 0x5f499006
mov dword [ebp - 0x94], 0xc2fdcba8
mov dword [ebp - 0x394], 0x4d2b5f79
mov dword [ebp - 0xce0], 0x3ca3691f
mov dword [ebp - 0xcdc], 0x3ca3691f
mov dword [ebp - 0xcd8], 0x3ca3691f
mov dword [ebp - 0xcd4], 0x3ca3691f
mov dword [ebp - 0xe24], 0xffffffff
mov byte [ebp - 0xc9], 0
movzx eax, byte [ebp - 0xc9]
test eax, eax
je 0x10024ed1
push 0
push 0
push 0x91
push 0x171b
push 0x268a
call dword [sym.imp.USER32.dll_SendDlgItemMessageW]
mov eax, dword [ebp - 0x340]
mov dword [ebp - 0x94], eax
cmp dword [ebp - 0x94], 0
jg 0x10024f5e
mov eax, dword [ebp - 0x340]
mov dword [ebp - 0xe40], eax
mov eax, dword [ebp - 0x94]
sub eax, 0x2278
sub eax, dword [ebp - 0x94]
jne 0x10024f11
mov dword [ebp - 0x7bc], 1
jmp 0x10024f18
and dword [ebp - 0x7bc], 0
mov eax, dword [ebp - 0x94]
cmp eax, dword [ebp - 0x7bc]
jl 0x10024f32
mov dword [ebp - 0x7c4], 1
jmp 0x10024f39
and dword [ebp - 0x7c4], 0
imul eax, dword [ebp - 0x7c4], 0xfffc
mov dword [ebp - 0x94], eax
cmp dword [ebp - 0x94], 0
je 0x10024f5e
mov dword [ebp - 0x7cc], 1
jmp 0x10024f65
and dword [ebp - 0x7cc], 0
mov eax, dword [ebp - 0x7cc]
mov dword [ebp - 0x394], eax
cmp dword [ebp - 0x394], 0
jne 0x10024f8c
cmp dword [ebp - 0x394], 0
jne 0x10024f8c
and dword [ebp - 0x7d4], 0
jmp 0x10024f96
mov dword [ebp - 0x7d4], 1
cmp dword [ebp - 0x7d4], 5
jbe 0x10024fb1
cmp dword [ebp - 0x94], 0
jne 0x10024fb1
and dword [ebp - 0x7dc], 0
jmp 0x10024fbb
mov dword [ebp - 0x7dc], 1
mov eax, dword [ebp - 0x340]
cmp dword [ebp - 0x7dc], eax
jg 0x10024fde
cmp dword [ebp - 0x340], 0
je 0x10024fde
mov dword [ebp - 0x7e4], 1
jmp 0x10024fe5
and dword [ebp - 0x7e4], 0
push 4
pop eax
shl eax, 1
mov ecx, dword [ebp - 0x7e4]
mov dword [ebp + eax - 0xce0], ecx
cmp dword [0x1076dc9c], 0
je 0x10025365
mov eax, dword [ebp + 8]
mov dword [ebp - 0x8dc], eax
mov dword [ebp - 0xc24], 7
mov dword [ebp - 0xc20], 7
mov dword [ebp - 0xc1c], 7
mov dword [ebp - 0xc18], 7
lea ecx, [ebp - 0x3a1]
call fcn.10002251
push eax
lea eax, [ebp - 0xc14]
push eax
lea eax, [ebp - 0xc24]
push eax
lea ecx, [ebp - 0xec0]
call fcn.10002254
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0xc30]
call fcn.10002217
mov dword [ebp - 4], 0x47
mov dword [ebp - 0x10c], 0xfffffff7
mov dword [ebp - 0x8d4], 0xffffffff
mov dword [ebp - 0x10c], 3
jmp 0x1002509e
mov eax, dword [ebp - 0x10c]
dec eax
mov dword [ebp - 0x10c], eax
cmp dword [ebp - 0x10c], 0
jl 0x10025126
mov dword [ebp - 0x29c], 0
push dword [ebp - 0x10c]
lea ecx, [ebp - 0xc30]
call fcn.10002242
mov esi, eax
push dword [ebp - 0x10c]
lea ecx, [ebp - 0xc30]
call fcn.10002242
mov eax, dword [eax]
mov dword [esi], eax
mov dword [ebp - 0x29c], 0xfffffff9
jmp 0x100250f2
mov eax, dword [ebp - 0x29c]
dec eax
mov dword [ebp - 0x29c], eax
cmp dword [ebp - 0x29c], 0xfffffff0
je 0x10025121
mov dword [ebp - 0x8d4], 0xfffffffc
mov byte [ebp - 0xaa], 0
movzx eax, byte [ebp - 0xaa]
test eax, eax
je 0x1002511f
push 0
call dword [sym.imp.KERNEL32.dll_GetLocalTime]
jmp 0x100250e5
jmp 0x10025091
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xc30]
call fcn.1000223d
mov eax, dword [ebp + 0xc]
mov dword [ebp - 0x8e4], eax
mov eax, dword [ebp - 0x8dc]
mov dword [ebp - 0x90c], eax
mov eax, dword [ebp - 0x8e4]
mov dword [ebp - 0x904], eax
mov dword [ebp - 0x68], 5
mov dword [ebp - 0x68], 0xd
jmp 0x1002516d
mov eax, dword [ebp - 0x68]
dec eax
mov dword [ebp - 0x68], eax
cmp dword [ebp - 0x68], 0xfffffff5
jg 0x10025345
mov dword [ebp - 0x134], 0x949d
push 2
lea ecx, [ebp - 0xcb4]
call fcn.100021db
mov dword [ebp - 4], 0x48
mov dword [ebp - 0x7c], 0
jmp 0x100251a5
mov eax, dword [ebp - 0x7c]
inc eax
mov dword [ebp - 0x7c], eax
cmp dword [ebp - 0x7c], 2
jge 0x100251c1
push dword [ebp - 0x7c]
lea ecx, [ebp - 0xcb4]
call fcn.10002242
mov dword [eax], 1
jmp 0x1002519e
mov dword [ebp - 0x7c], 0
jmp 0x100251d1
mov eax, dword [ebp - 0x7c]
inc eax
mov dword [ebp - 0x7c], eax
cmp dword [ebp - 0x7c], 1
jge 0x100251e7
mov eax, dword [ebp - 0x7c]
mov dword [ebp + eax*4 - 0x8fc], 0xceffb91e
jmp 0x100251ca
mov eax, dword [ebp - 0x134]
mov dword [ebp - 0x8ec], eax
push 1
lea ecx, [ebp - 0xcb4]
call fcn.10002242
mov ecx, dword [ebp - 0x8ec]
mov dword [eax], ecx
mov eax, dword [ebp - 0x68]
mov dword [ebp - 0xe48], eax
cmp dword [ebp - 0x68], 0xffffffff
ja 0x10025223
mov dword [ebp - 0x7ec], 1
jmp 0x1002522a
and dword [ebp - 0x7ec], 0
mov eax, dword [ebp - 0x134]
cmp dword [ebp - 0x7ec], eax
jge 0x10025244
mov dword [ebp - 0x7f4], 1
jmp 0x1002524b
and dword [ebp - 0x7f4], 0
cmp dword [ebp - 0x7f4], 0xf381
jne 0x10025263
mov dword [ebp - 0x7fc], 1
jmp 0x1002526a
and dword [ebp - 0x7fc], 0
mov eax, dword [ebp - 0x134]
cmp dword [ebp - 0x7fc], eax
jle 0x10025284
mov dword [ebp - 0x804], 1
jmp 0x1002528b
and dword [ebp - 0x804], 0
mov eax, dword [ebp - 0x134]
cmp dword [ebp - 0x804], eax
jg 0x100252a5
mov dword [ebp - 0x3ec], 1
jmp 0x100252ac
and dword [ebp - 0x3ec], 0
cmp dword [ebp - 0x3ec], 0xffff
jae 0x100252c4
mov dword [ebp - 0x3f0], 1
jmp 0x100252cb
and dword [ebp - 0x3f0], 0
mov eax, dword [ebp - 0x134]
cmp dword [ebp - 0x3f0], eax
jg 0x100252eb
mov eax, 0x74adf298
test eax, eax
jne 0x100252eb
and dword [ebp - 0x8f4], 0
jmp 0x100252f5
mov dword [ebp - 0x8f4], 1
mov eax, dword [ebp - 0x68]
mov dword [ebp - 0xe50], eax
mov eax, dword [ebp - 0x68]
sub eax, 0xf21
cmp eax, dword [ebp - 0x68]
jne 0x10025317
mov dword [ebp - 0x3f8], 1
jmp 0x1002531e
and dword [ebp - 0x3f8], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x3f8]
mov dword [ebp + eax - 0x8fc], ecx
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xcb4]
call fcn.1000223d
jmp 0x10025166
push dword [ebp - 0x904]
push dword [ebp - 0x90c]
call dword [0x1076dc9c]
mov dword [ebp - 0x914], eax
mov eax, dword [ebp - 0x914]
jmp 0x10025367
xor eax, eax
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret