Function at 0x100207ec
Capabilities:
Get common file path

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x10063b5f
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
push ecx
sub esp, 0x5d8
push ebx
push esi
push edi
mov dword [ebp - 0x10], esp
mov dword [ebp - 0x2a0], 0x726e
mov dword [ebp - 0x440], str.cdocwud_ltgedyqy_wbs_roksyhik_apbjrvuts_qqzb_zzhqle_lyphxv_emfxixis_bplvgrfbt_japgp_ndpiyboca
cmp dword [ebp - 0x2a0], 0x72e9
jle 0x10020943
and dword [ebp - 0xfc], 0
jmp 0x1002084b
mov eax, dword [ebp - 0xfc]
inc eax
mov dword [ebp - 0xfc], eax
cmp dword [ebp - 0xfc], 0x3b22
jge 0x10020943
and dword [ebp - 0xb4], 0
jmp 0x10020871
mov eax, dword [ebp - 0xb4]
inc eax
mov dword [ebp - 0xb4], eax
cmp dword [ebp - 0xb4], 0x420c
jge 0x1002093e
and dword [ebp - 0xc8], 0
jmp 0x10020897
mov eax, dword [ebp - 0xc8]
inc eax
mov dword [ebp - 0xc8], eax
cmp dword [ebp - 0xc8], 0x7f43
jge 0x10020939
and dword [ebp - 0xf4], 0
jmp 0x100208bd
mov eax, dword [ebp - 0xf4]
inc eax
mov dword [ebp - 0xf4], eax
cmp dword [ebp - 0xf4], 0x122c
jge 0x10020934
mov eax, dword [ebp - 0xc8]
cdq
idiv dword [ebp - 0xf4]
mov eax, dword [ebp - 0xb4]
mov ecx, edx
sar eax, cl
and eax, dword [ebp - 0xfc]
cdq
mov dword [ebp - 0x454], eax
mov dword [ebp - 0x450], edx
push dword [ebp - 0x450]
push dword [ebp - 0x454]
lea ecx, [ebp - 0x5d0]
call fcn.10001a8a
pop ecx
pop ecx
mov dword [ebp - 0x41c], eax
mov ecx, dword [ebp - 0x41c]
call fcn.100045ca
push eax
call fcn.1004b583
pop ecx
lea ecx, [ebp - 0x5d0]
call fcn.100045c0
jmp 0x100208b0
jmp 0x1002088a
jmp 0x10020864
jmp 0x1002083e
mov dword [ebp - 0x48], 0x7d8e6e83
and dword [ebp - 4], 0
cmp dword [ebp - 0x2a0], 0x71f6
jge 0x10020966
push dword [ebp - 0x440]
call fcn.1004b583
pop ecx
jmp 0x10020982
or dword [ebp - 4], 0xffffffff
jmp 0x1002098c
mov dword [ebp - 0x64], 0xc2251554
mov eax, dword [ebp - 0x48]
cmp eax, dword [ebp - 0x48]
jle 0x100209a7
mov dword [ebp - 0x3e4], 1
jmp 0x100209ae
and dword [ebp - 0x3e4], 0
cmp dword [ebp - 0x3e4], 0x2071
jge 0x10020a9b
mov dword [ebp - 0xa8], 0
jmp 0x100209d7
mov eax, dword [ebp - 0xa8]
inc eax
mov dword [ebp - 0xa8], eax
cmp dword [ebp - 0xa8], 1
jge 0x100209f3
mov eax, dword [ebp - 0xa8]
mov dword [ebp + eax*4 - 0x17c], 0x5059b8bc
jmp 0x100209ca
mov byte [ebp - 0x65], 0
movzx eax, byte [ebp - 0x65]
test eax, eax
je 0x10020a0b
push 0
push 0
push 0
call dword [sym.imp.ADVAPI32.dll_RegLoadKeyW]
mov dword [ebp - 0x48], 0
jmp 0x10020a1b
mov eax, dword [ebp - 0x48]
dec eax
mov dword [ebp - 0x48], eax
cmp dword [ebp - 0x48], 0
jl 0x10020a99
mov dword [ebp - 0x448], 0x923ccde6
mov eax, dword [ebp - 0x48]
mov ecx, dword [ebp - 0x48]
mov ecx, dword [ebp + ecx*4 - 0x17c]
cmp ecx, dword [ebp + eax*4 - 0x17c]
jle 0x10020a4d
mov dword [ebp - 0x3ec], 1
jmp 0x10020a54
and dword [ebp - 0x3ec], 0
mov eax, dword [ebp - 0x3ec]
add eax, 0xfffe
mov dword [ebp - 0x398], eax
mov eax, dword [ebp - 0x48]
mov ecx, dword [ebp - 0x398]
mov dword [ebp + eax*4 - 0x17c], ecx
mov eax, dword [ebp - 0x398]
add eax, 0x52bf3388
mov dword [ebp - 0x64], eax
mov eax, dword [ebp - 0x64]
mov dword [ebp - 0x448], eax
cmp dword [ebp - 0x64], 0
je 0x10020a94
jmp 0x10020a99
jmp 0x10020a14
jmp 0x10020aca
mov dword [ebp - 0x64], 0xffffffee
jmp 0x10020aab
mov eax, dword [ebp - 0x64]
inc eax
mov dword [ebp - 0x64], eax
cmp dword [ebp - 0x64], 0x10
jg 0x10020aca
mov byte [ebp - 0x7b], 0
movzx eax, byte [ebp - 0x7b]
test eax, eax
je 0x10020ac8
push 0x1b9d
call dword [sym.imp.USER32.dll_SetFocus]
jmp 0x10020aa4
mov dword [ebp - 0xbc], 0xe1757117
mov dword [ebp - 0x1a0], 0xf1dbeccc
mov dword [ebp - 0xbc], 0x10
jmp 0x10020af7
mov eax, dword [ebp - 0xbc]
dec eax
mov dword [ebp - 0xbc], eax
cmp dword [ebp - 0xbc], 0xffffffea
jge 0x10020b23
mov eax, dword [ebp - 0x1a0]
inc eax
mov dword [ebp - 0x1a0], eax
mov byte [ebp - 0x7a], 0
movzx eax, byte [ebp - 0x7a]
test eax, eax
je 0x10020b21
push 0
call dword [sym.imp.GDI32.dll_CreateFontIndirectW]
jmp 0x10020aea
mov dword [ebp - 0x40], 0x730f94f3
mov dword [ebp - 0x2e4], 0x1702
mov dword [ebp - 0x4a4], str.szffkwjq_efuz_nzzcdqx
cmp dword [ebp - 0x2e4], 0x190a
jle 0x10020c00
and dword [ebp - 0xc0], 0
jmp 0x10020b64
mov eax, dword [ebp - 0xc0]
inc eax
mov dword [ebp - 0xc0], eax
cmp dword [ebp - 0xc0], 0x41af
jge 0x10020bf9
and dword [ebp - 0x104], 0
jmp 0x10020b8a
mov eax, dword [ebp - 0x104]
inc eax
mov dword [ebp - 0x104], eax
cmp dword [ebp - 0x104], 0x3f61
jge 0x10020bf4
and dword [ebp - 0x100], 0
jmp 0x10020bac
mov eax, dword [ebp - 0x100]
inc eax
mov dword [ebp - 0x100], eax
cmp dword [ebp - 0x100], 0x7b2e
jge 0x10020bf2
mov eax, dword [ebp - 0xc0]
cdq
idiv dword [ebp - 0x104]
and edx, dword [ebp - 0x100]
mov eax, edx
cdq
mov dword [ebp - 0x460], eax
mov dword [ebp - 0x45c], edx
push dword [ebp - 0x45c]
push dword [ebp - 0x460]
mov ecx, 0x1007f2b8
call fcn.1000473c
jmp 0x10020b9f
jmp 0x10020b7d
jmp 0x10020b57
xor ecx, ecx
call fcn.1001aa35
mov dword [ebp - 0x108], 0x8382bdb9
mov dword [ebp - 4], 2
cmp dword [ebp - 0x2e4], 0x151a
jge 0x10020c2d
mov edx, dword [ebp - 0x4a4]
mov ecx, 0x1007f2b8
call fcn.1000877a
jmp 0x10020c49
or dword [ebp - 4], 0xffffffff
jmp 0x10020c53
mov dword [ebp - 0x18], 0x34859bb
mov dword [ebp - 0x31c], 2
mov dword [ebp - 0x1d0], 0xffffffff
mov dword [ebp - 0x428], 0
mov dword [ebp - 0x1a8], 0x1f05
mov dword [ebp - 0x4ac], str.xdfek_yecvpqbm_elyd_cvfywv_hdfgvdsl_tzdshgu
cmp dword [ebp - 0x1a8], 0x1f7c
jle 0x10020d11
and dword [ebp - 0xd0], 0
jmp 0x10020cae
mov eax, dword [ebp - 0xd0]
inc eax
mov dword [ebp - 0xd0], eax
cmp dword [ebp - 0xd0], 0x26ed
jge 0x10020d11
and dword [ebp - 0x128], 0
jmp 0x10020cd0
mov eax, dword [ebp - 0x128]
inc eax
mov dword [ebp - 0x128], eax
cmp dword [ebp - 0x128], 0x29fb
jge 0x10020d0f
mov eax, dword [ebp - 0xd0]
mov ecx, dword [ebp - 0x128]
sar eax, cl
cdq
mov dword [ebp - 0x46c], eax
mov dword [ebp - 0x468], edx
push dword [ebp - 0x468]
push dword [ebp - 0x46c]
mov ecx, 0x1007f2b8
call fcn.1000473c
jmp 0x10020cc3
jmp 0x10020ca1
mov dword [ebp - 0xd8], 0
jmp 0x10020d2a
mov eax, dword [ebp - 0xd8]
inc eax
mov dword [ebp - 0xd8], eax
cmp dword [ebp - 0xd8], 4
jge 0x10020d46
mov eax, dword [ebp - 0xd8]
mov dword [ebp + eax*4 - 0x488], 0x4ec2e0cf
jmp 0x10020d1d
mov dword [ebp - 4], 4
cmp dword [ebp - 0x1a8], 0x1cab
jge 0x10020d69
mov edx, dword [ebp - 0x4ac]
mov ecx, 0x1007f2b8
call fcn.1000877a
jmp 0x10020d85
or dword [ebp - 4], 0xffffffff
jmp 0x10020d8f
mov dword [ebp - 0x40], 3
jmp 0x10020d9f
mov eax, dword [ebp - 0x40]
dec eax
mov dword [ebp - 0x40], eax
cmp dword [ebp - 0x40], 0
jl 0x10020fa5
mov dword [ebp - 0x590], 0xe3580d4
mov dword [ebp - 0xa0], 0xfffffffa
mov dword [ebp - 0x54], 0
jmp 0x10020dcd
mov eax, dword [ebp - 0x54]
inc eax
mov dword [ebp - 0x54], eax
cmp dword [ebp - 0x54], 3
jge 0x10020de3
mov eax, dword [ebp - 0x54]
mov dword [ebp + eax*4 - 0x59c], 0xd8b9dbea
jmp 0x10020dc6
mov dword [ebp - 0x54], 0
jmp 0x10020df3
mov eax, dword [ebp - 0x54]
inc eax
mov dword [ebp - 0x54], eax
cmp dword [ebp - 0x54], 3
jge 0x10020e09
mov eax, dword [ebp - 0x54]
mov dword [ebp + eax*4 - 0x500], 5
jmp 0x10020dec
mov eax, dword [ebp - 0x108]
mov dword [ebp - 0x4b4], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x40]
mov ecx, dword [ebp + ecx*4 - 0x488]
imul ecx, dword [ebp + eax - 0x500]
mov dword [ebp - 0x4bc], ecx
mov eax, dword [ebp - 0x108]
dec eax
mov dword [ebp - 0x108], eax
mov eax, dword [ebp - 0x4b4]
cmp eax, dword [ebp - 0x4bc]
jl 0x10020e5a
mov dword [ebp - 0x2ec], 1
jmp 0x10020e61
and dword [ebp - 0x2ec], 0
mov dword [ebp - 0x18], 0xcc099a56
cmp dword [ebp - 0x18], 0
je 0x10020e80
cmp dword [ebp - 0x18], 0
je 0x10020e80
mov dword [ebp - 0x1b0], 1
jmp 0x10020e87
and dword [ebp - 0x1b0], 0
mov eax, dword [ebp - 0x2ec]
cmp eax, dword [ebp - 0x1b0]
jge 0x10020ea1
mov dword [ebp - 0x2f4], 1
jmp 0x10020ea8
and dword [ebp - 0x2f4], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x2f4]
mov dword [ebp + eax - 0x488], ecx
mov dword [ebp - 0x18], 0xfffffff0
jmp 0x10020ecb
mov eax, dword [ebp - 0x18]
inc eax
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 9
je 0x10020fa0
mov dword [ebp - 0xa0], 0
jmp 0x10020eee
mov eax, dword [ebp - 0xa0]
inc eax
mov dword [ebp - 0xa0], eax
cmp dword [ebp - 0xa0], 3
jg 0x10020f9b
xor eax, eax
jne 0x10020f15
mov eax, dword [ebp - 0x40]
cmp dword [ebp + eax*4 - 0x488], 0
jne 0x10020f15
and dword [ebp - 0x2fc], 0
jmp 0x10020f1f
mov dword [ebp - 0x2fc], 1
push 4
pop eax
shl eax, 1
mov dword [ebp + eax - 0x59c], 0x585c
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x500], 0x585c
jl 0x10020f4e
mov dword [ebp - 0x1b8], 1
jmp 0x10020f55
and dword [ebp - 0x1b8], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x500]
cmp eax, dword [ebp - 0x1b8]
jge 0x10020f76
mov dword [ebp - 0x1c0], 1
jmp 0x10020f7d
and dword [ebp - 0x1c0], 0
mov eax, dword [ebp - 0x2fc]
add eax, dword [ebp - 0x1c0]
mov ecx, dword [ebp - 0xa0]
mov dword [ebp + ecx*4 - 0x488], eax
jmp 0x10020ee1
jmp 0x10020ec4
jmp 0x10020d98
mov dword [ebp - 0x18], 0
jmp 0x10020fb5
mov eax, dword [ebp - 0x18]
inc eax
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 3
jg 0x100210f8
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp + eax*4 - 0x488]
mov dword [ebp - 0x540], eax
mov eax, dword [ebp - 0x40]
sub eax, dword [ebp - 0x31c]
mov dword [ebp - 0x4c4], eax
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x4c4]
mov dword [ebp + eax*4 - 0x488], ecx
mov eax, dword [ebp - 0x18]
push 0xfffffffffffffff7
pop ecx
sub ecx, dword [ebp + eax*4 - 0x488]
je 0x10021006
mov eax, 0xdb1
test eax, eax
jne 0x10021018
mov eax, 0x188a
test eax, eax
jne 0x10021018
and dword [ebp - 0x304], 0
jmp 0x10021022
mov dword [ebp - 0x304], 1
mov eax, dword [ebp - 0x304]
sub eax, 0x13309e69
jne 0x1002103e
cmp dword [ebp - 0x18], 0
jne 0x1002103e
and dword [ebp - 0x1c8], 0
jmp 0x10021048
mov dword [ebp - 0x1c8], 1
cmp dword [ebp - 0x1c8], 0x3922
jne 0x10021069
cmp dword [ebp - 0x1d0], 0
je 0x10021069
mov dword [ebp - 0x30c], 1
jmp 0x10021070
and dword [ebp - 0x30c], 0
cmp dword [ebp - 0x30c], 0
jg 0x1002108e
cmp dword [ebp - 0x108], 0
je 0x1002108e
mov dword [ebp - 0x314], 1
jmp 0x10021095
and dword [ebp - 0x314], 0
mov eax, dword [ebp - 0x1d0]
cmp dword [ebp - 0x314], eax
jl 0x100210af
mov dword [ebp - 0x1d8], 1
jmp 0x100210b6
and dword [ebp - 0x1d8], 0
cmp dword [ebp - 0x1d8], 0x8adc
jl 0x100210ce
mov dword [ebp - 0x438], 1
jmp 0x100210d5
and dword [ebp - 0x438], 0
mov eax, dword [ebp - 0x40]
mov dword [ebp - 0x588], eax
mov eax, dword [ebp - 0x31c]
mov dword [ebp - 0x548], eax
mov eax, dword [ebp - 0x428]
mov dword [ebp - 0x40], eax
jmp 0x10020fae
mov dword [ebp - 0x84], 0xc04ccb63
mov dword [ebp - 0x9c], 0x7278fa8f
mov dword [ebp - 0x5c], 6
mov dword [ebp - 0x2c], 0xffffffff
mov dword [ebp - 0x130], 0x3090707e
mov dword [ebp - 0x1e0], 0x51cf
mov dword [ebp - 0x42c], str.fatfnd_uwprgte_icfrmj_cmnhvgqg_hkmz_xlzxfsgxh_zyuff_tlwzlhnn_ywtbdi_yustz_xjjmtlwq
cmp dword [ebp - 0x1e0], 0x5434
jle 0x100211f1
and dword [ebp - 0xe8], 0
jmp 0x1002115e
mov eax, dword [ebp - 0xe8]
inc eax
mov dword [ebp - 0xe8], eax
cmp dword [ebp - 0xe8], 0x5332
jge 0x100211f1
and dword [ebp - 0xe0], 0
jmp 0x10021184
mov eax, dword [ebp - 0xe0]
inc eax
mov dword [ebp - 0xe0], eax
cmp dword [ebp - 0xe0], 0x64d6
jge 0x100211ec
and dword [ebp - 0x120], 0
jmp 0x100211a6
mov eax, dword [ebp - 0x120]
inc eax
mov dword [ebp - 0x120], eax
cmp dword [ebp - 0x120], 0x5ad0
jge 0x100211ea
mov eax, dword [ebp - 0xe0]
imul eax, dword [ebp - 0x120]
or eax, dword [ebp - 0xe8]
cdq
mov dword [ebp - 0x478], eax
mov dword [ebp - 0x474], edx
push dword [ebp - 0x474]
push dword [ebp - 0x478]
mov ecx, 0x1007f2b8
call fcn.1000473c
jmp 0x10021199
jmp 0x10021177
jmp 0x10021151
mov dword [ebp - 4], 6
cmp dword [ebp - 0x1e0], 0x5081
jge 0x10021214
mov edx, dword [ebp - 0x42c]
mov ecx, 0x1007f2b8
call fcn.1000877a
jmp 0x10021230
or dword [ebp - 4], 0xffffffff
jmp 0x1002123a
push 2
lea ecx, [ebp - 0x4e4]
call fcn.100049ee
mov dword [ebp - 4], 8
mov dword [ebp - 0x36c], 0x125b
mov dword [ebp - 0x1c], 0
jmp 0x10021268
mov eax, dword [ebp - 0x1c]
inc eax
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 1
jge 0x1002127e
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0x90], 6
jmp 0x10021261
mov dword [ebp - 0x1c], 0
jmp 0x1002128e
mov eax, dword [ebp - 0x1c]
inc eax
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 2
jge 0x100212a4
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0x51c], 0xded1
jmp 0x10021287
mov dword [ebp - 0x1c], 0
jmp 0x100212b4
mov eax, dword [ebp - 0x1c]
inc eax
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 2
jge 0x100212d0
push dword [ebp - 0x1c]
lea ecx, [ebp - 0x4e4]
call fcn.10004a67
mov dword [eax], 0x761b8ce2
jmp 0x100212ad
cmp dword [ebp - 0x84], 0
jne 0x10021349
mov eax, dword [ebp - 0x84]
mov dword [ebp - 0x57c], eax
mov eax, dword [ebp - 0x84]
cmp eax, dword [ebp - 0x84]
jge 0x100212ff
mov dword [ebp - 0x324], 1
jmp 0x10021306
and dword [ebp - 0x324], 0
mov eax, dword [ebp - 0x324]
mov dword [ebp - 0x9c], eax
mov eax, dword [ebp - 0x9c]
cmp eax, dword [ebp - 0x5c]
je 0x10021329
mov dword [ebp - 0x1e8], 1
jmp 0x10021330
and dword [ebp - 0x1e8], 0
mov eax, dword [ebp - 0x1e8]
mov dword [ebp - 0x2c], eax
push 0xfffffffffffffffd
pop eax
test eax, eax
jne 0x10021349
and dword [ebp - 0x32c], 0
jmp 0x10021353
mov dword [ebp - 0x32c], 1
mov eax, dword [ebp - 0x5c]
imul eax, dword [ebp - 0x32c]
test eax, eax
jne 0x10021367
cmp dword [ebp - 0x2c], 0
je 0x10021382
cmp dword [ebp - 0x5c], 0
je 0x10021382
mov eax, 0x256ee973
test eax, eax
je 0x10021382
mov dword [ebp - 0x4d8], 1
jmp 0x10021389
and dword [ebp - 0x4d8], 0
mov eax, dword [ebp - 0x84]
cmp eax, dword [ebp - 0x84]
jle 0x100213bf
mov byte [ebp - 0x78], 0
movzx eax, byte [ebp - 0x78]
test eax, eax
je 0x100213ba
push 0x90
push 0
push 0x2141
push 0x534
call dword [sym.imp.USER32.dll_GetDlgItemTextA]
jmp 0x1002185b
mov dword [ebp - 0x30], 1
mov dword [ebp - 0xf8], 1
mov byte [ebp - 0x7c], 0
movzx eax, byte [ebp - 0x7c]
test eax, eax
je 0x100213e9
push 0x14c7
push 0
call dword [sym.imp.KERNEL32.dll_GetSystemDirectoryA]
mov dword [ebp - 0x2c], 0
jmp 0x100213f9
mov eax, dword [ebp - 0x2c]
dec eax
mov dword [ebp - 0x2c], eax
cmp dword [ebp - 0x2c], 0
jl 0x1002185b
mov dword [ebp - 0x98], 0x44f34d89
push 3
lea ecx, [ebp - 0x4d4]
call fcn.100049ee
mov byte [ebp - 4], 9
mov dword [ebp - 0x110], 0
jmp 0x10021437
mov eax, dword [ebp - 0x110]
inc eax
mov dword [ebp - 0x110], eax
cmp dword [ebp - 0x110], 3
jge 0x10021459
push dword [ebp - 0x110]
lea ecx, [ebp - 0x4d4]
call fcn.10004a67
mov dword [eax], 1
jmp 0x1002142a
cmp dword [ebp - 0x30], 0xfffa
jge 0x1002146e
mov dword [ebp - 0x334], 1
jmp 0x10021475
and dword [ebp - 0x334], 0
cmp dword [ebp - 0x30], 0
je 0x10021481
cmp dword [ebp - 0x30], 0
jne 0x10021490
cmp dword [ebp - 0x30], 0
jne 0x10021490
and dword [ebp - 0x1f0], 0
jmp 0x1002149a
mov dword [ebp - 0x1f0], 1
mov eax, dword [ebp - 0x1f0]
mov dword [ebp - 0x130], eax
mov eax, dword [ebp - 0x130]
mov dword [ebp - 0x550], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x51c]
mov dword [ebp - 0x58c], eax
mov eax, dword [ebp - 0x30]
mov dword [ebp - 0x508], eax
cmp dword [ebp - 0x2c], 0
je 0x100214e9
mov eax, 0x7606e82a
test eax, eax
je 0x100214e9
mov dword [ebp - 0x1f8], 1
jmp 0x100214f0
and dword [ebp - 0x1f8], 0
mov eax, dword [ebp - 0x334]
mov dword [ebp - 0x9c], eax
mov eax, dword [ebp - 0x30]
add eax, dword [ebp - 0x9c]
mov ecx, dword [ebp - 0x2c]
mov ecx, dword [ebp + ecx*4 - 0x90]
add ecx, eax
sub ecx, dword [ebp - 0x1f8]
cmp ecx, dword [ebp - 0x30]
jne 0x10021528
mov dword [ebp - 0x33c], 1
jmp 0x1002152f
and dword [ebp - 0x33c], 0
push 1
lea ecx, [ebp - 0x4e4]
call fcn.10004a67
mov ecx, dword [ebp - 0x33c]
mov dword [eax], ecx
push 1
lea ecx, [ebp - 0x4e4]
call fcn.10004a67
mov dword [eax], 0xfffffffe
mov dword [ebp - 0x98], 0xfffffffe
cmp dword [ebp - 0x98], 0
jne 0x100216b2
mov eax, dword [ebp - 0x30]
mov dword [ebp - 0x510], eax
mov eax, dword [ebp - 0x98]
mov dword [ebp - 0x98], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x90]
cmp eax, dword [ebp - 0x30]
jl 0x100215a1
mov dword [ebp - 0x200], 1
jmp 0x100215a8
and dword [ebp - 0x200], 0
mov eax, dword [ebp - 0x98]
cmp dword [ebp - 0x200], eax
jle 0x100215c2
mov dword [ebp - 0x344], 1
jmp 0x100215c9
and dword [ebp - 0x344], 0
mov eax, dword [ebp - 0x30]
add eax, dword [ebp - 0x344]
imul eax, dword [ebp - 0x98]
mov dword [ebp - 0x208], eax
push 2
lea ecx, [ebp - 0x4d4]
call fcn.10004a67
mov ecx, dword [ebp - 0x208]
mov dword [eax], ecx
mov eax, dword [ebp - 0x208]
mov dword [ebp - 0xf8], eax
mov eax, dword [ebp - 0xf8]
cmp eax, dword [ebp - 0x30]
jle 0x10021617
mov dword [ebp - 0x34c], 1
jmp 0x1002161e
and dword [ebp - 0x34c], 0
mov eax, dword [ebp - 0x2c]
mov eax, dword [ebp + eax*4 - 0x90]
cmp dword [ebp - 0x34c], eax
jl 0x1002163c
mov dword [ebp - 0x210], 1
jmp 0x10021643
and dword [ebp - 0x210], 0
cmp dword [ebp - 0x210], 0xfffffff9
je 0x10021658
mov dword [ebp - 0x354], 1
jmp 0x1002165f
and dword [ebp - 0x354], 0
mov eax, dword [ebp - 0x2c]
mov eax, dword [ebp + eax*4 - 0x90]
imul eax, dword [ebp - 0x354]
test eax, eax
je 0x10021689
cmp dword [ebp - 0xf8], 0
je 0x10021689
mov dword [ebp - 0x218], 1
jmp 0x10021690
and dword [ebp - 0x218], 0
cmp dword [ebp - 0x218], 0x58509ef6
jg 0x100216a8
mov dword [ebp - 0x35c], 1
jmp 0x100216af
and dword [ebp - 0x35c], 0
mov eax, dword [ebp - 0x5c]
cmp dword [ebp - 0x30], 0xffffffff
ja 0x100216c4
mov dword [ebp - 0x220], 1
jmp 0x100216cb
and dword [ebp - 0x220], 0
mov eax, dword [ebp - 0x2c]
mov eax, dword [ebp + eax*4 - 0x90]
cmp dword [ebp - 0x220], eax
je 0x100216e9
mov dword [ebp - 0x364], 1
jmp 0x100216f0
and dword [ebp - 0x364], 0
mov eax, dword [ebp - 0x364]
mov dword [ebp - 0x9c], eax
mov dword [ebp - 0x5c], 0
jmp 0x1002170c
mov eax, dword [ebp - 0x5c]
inc eax
mov dword [ebp - 0x5c], eax
cmp dword [ebp - 0x5c], 0
jg 0x10021847
mov dword [ebp - 0xf0], 0
jmp 0x1002172f
mov eax, dword [ebp - 0xf0]
inc eax
mov dword [ebp - 0xf0], eax
cmp dword [ebp - 0xf0], 1
jge 0x1002174b
mov eax, dword [ebp - 0xf0]
mov dword [ebp + eax*4 - 0x434], 0xf992ce4c
jmp 0x10021722
push 1
lea ecx, [ebp - 0x4d4]
call fcn.10004a67
mov eax, dword [eax]
mov dword [ebp - 0x130], eax
mov eax, dword [ebp - 0x130]
mov dword [ebp - 0x524], eax
push 1
lea ecx, [ebp - 0x4e4]
call fcn.10004a67
mov dword [eax], 0x40743585
cmp dword [ebp - 0xf8], 0xa7464c66
ja 0x10021797
mov dword [ebp - 0x228], 1
jmp 0x1002179e
and dword [ebp - 0x228], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x434]
cmp eax, dword [ebp - 0x228]
jge 0x100217bf
mov dword [ebp - 0x160], 1
jmp 0x100217c6
and dword [ebp - 0x160], 0
push 2
lea ecx, [ebp - 0x4d4]
call fcn.10004a67
mov ecx, dword [ebp - 0x160]
mov dword [eax], ecx
mov eax, dword [ebp - 0x160]
mov dword [ebp - 0x36c], eax
cmp dword [ebp - 0x36c], 0
je 0x10021805
mov eax, 0xa242739a
test eax, eax
je 0x10021805
mov dword [ebp - 0x230], 1
jmp 0x1002180c
and dword [ebp - 0x230], 0
mov eax, dword [ebp - 0x2c]
mov ecx, 0x6e99
sub ecx, dword [ebp - 0x230]
cmp ecx, dword [ebp + eax*4 - 0x90]
jne 0x1002182f
mov dword [ebp - 0x374], 1
jmp 0x10021836
and dword [ebp - 0x374], 0
mov eax, dword [ebp - 0x374]
mov dword [ebp - 0x9c], eax
jmp 0x10021705
mov byte [ebp - 4], 8
lea ecx, [ebp - 0x4d4]
call fcn.10004a4b
jmp 0x100213f2
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x4e4]
call fcn.10004a4b
mov dword [ebp - 0x88], 0xfffb
mov dword [ebp - 0x148], 0
mov dword [ebp - 0x118], 1
mov dword [ebp - 0x38c], 0xfffffffe
mov dword [ebp - 0x39c], 0x9bf5e4d8
mov dword [ebp - 0x170], 0x20410224
mov dword [ebp - 0x52c], 0xae89405d
mov dword [ebp - 0x4f4], 0
mov dword [ebp - 0x4f0], 0
mov dword [ebp - 0x4ec], 0
mov dword [ebp - 0x4e8], 0
mov dword [ebp - 0x38], 0
jmp 0x100218e8
mov eax, dword [ebp - 0x38]
inc eax
mov dword [ebp - 0x38], eax
cmp dword [ebp - 0x38], 3
jge 0x100218fe
mov eax, dword [ebp - 0x38]
mov dword [ebp + eax*4 - 0x5a8], 0xffffffff
jmp 0x100218e1
mov dword [ebp - 0x38], 0
jmp 0x1002190e
mov eax, dword [ebp - 0x38]
inc eax
mov dword [ebp - 0x38], eax
cmp dword [ebp - 0x38], 4
jge 0x10021924
mov eax, dword [ebp - 0x38]
mov dword [ebp + eax*4 - 0x5b8], 0xbfcf419c
jmp 0x10021907
xor eax, eax
inc eax
je 0x100219fb
cmp dword [ebp - 0x88], 1
je 0x10021947
or eax, 0xffffffff
je 0x10021947
mov dword [ebp - 0x238], 1
jmp 0x1002194e
and dword [ebp - 0x238], 0
mov eax, dword [ebp - 0x148]
cmp dword [ebp - 0x238], eax
je 0x10021968
mov dword [ebp - 0x37c], 1
jmp 0x1002196f
and dword [ebp - 0x37c], 0
mov eax, dword [ebp - 0x118]
cmp dword [ebp - 0x37c], eax
jge 0x10021989
mov dword [ebp - 0x240], 1
jmp 0x10021990
and dword [ebp - 0x240], 0
mov eax, dword [ebp - 0x240]
dec eax
neg eax
cmp eax, dword [ebp - 0x118]
jne 0x100219ad
mov dword [ebp - 0x384], 1
jmp 0x100219b4
and dword [ebp - 0x384], 0
mov eax, dword [ebp - 0x118]
cmp dword [ebp - 0x384], eax
jg 0x100219ce
mov dword [ebp - 0x248], 1
jmp 0x100219d5
and dword [ebp - 0x248], 0
mov eax, dword [ebp - 0x248]
mov dword [ebp - 0x38c], eax
mov eax, dword [ebp - 0x38c]
cmp eax, dword [ebp - 0x148]
je 0x100219fb
mov dword [ebp - 0x250], 1
jmp 0x10021a02
and dword [ebp - 0x250], 0
mov eax, dword [ebp - 0x148]
cmp dword [ebp - 0x250], eax
jg 0x10021a1c
mov dword [ebp - 0x394], 1
jmp 0x10021a23
and dword [ebp - 0x394], 0
mov eax, dword [ebp - 0x394]
dec eax
mov dword [ebp - 0x258], eax
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x258]
mov dword [ebp + eax - 0x5a8], ecx
cmp dword [ebp - 0x258], 0
jne 0x10021a5e
mov eax, 0xfff8
test eax, eax
jne 0x10021a5e
and dword [ebp - 0x494], 0
jmp 0x10021a68
mov dword [ebp - 0x494], 1
mov eax, dword [ebp - 0x88]
mov dword [ebp - 0x534], eax
mov eax, dword [ebp - 0x88]
mov dword [ebp - 0x39c], eax
mov eax, dword [ebp - 0x39c]
sub eax, dword [ebp - 0x118]
mov ecx, dword [ebp - 0x88]
imul ecx, eax
imul ecx, dword [ebp - 0x88]
mov dword [ebp - 0x170], ecx
mov eax, dword [ebp - 0x88]
cmp eax, dword [ebp - 0x170]
je 0x10021abc
mov dword [ebp - 0x260], 1
jmp 0x10021ac3
and dword [ebp - 0x260], 0
cmp dword [ebp - 0x260], 0xd074defc
jbe 0x10021adb
mov dword [ebp - 0x43c], 1
jmp 0x10021ae2
and dword [ebp - 0x43c], 0
mov eax, dword [ebp - 0x170]
push 4
pop ecx
shl ecx, 0
mov dword [ebp + ecx - 0x5b8], eax
push 4
pop eax
imul eax, eax, 3
mov eax, dword [ebp + eax - 0x4f4]
dec eax
push 4
pop ecx
imul ecx, ecx, 3
mov dword [ebp + ecx - 0x4f4], eax
movzx eax, byte [0x10114a6a]
test eax, eax
je 0x10021b2e
mov esi, 0x1007e7b0
mov edi, dword [ebp + 8]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
mov eax, dword [ebp + 8]
jmp 0x100234c9
mov dword [ebp - 0x53c], 0x1007e7b0
mov dword [ebp - 0x3c], 0
push 1
lea ecx, [ebp - 0x194]
call fcn.100049ee
mov dword [ebp - 4], 0xa
mov dword [ebp - 0x168], 1
mov dword [ebp - 0xcc], 8
mov dword [ebp - 0x20], 0
jmp 0x10021b77
mov eax, dword [ebp - 0x20]
inc eax
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 1
jge 0x10021b93
push dword [ebp - 0x20]
lea ecx, [ebp - 0x194]
call fcn.10004a67
mov dword [eax], 1
jmp 0x10021b70
mov dword [ebp - 0x20], 0
jmp 0x10021ba3
mov eax, dword [ebp - 0x20]
inc eax
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 2
jge 0x10021bb9
mov eax, dword [ebp - 0x20]
mov dword [ebp + eax*4 - 0x13c], 0x80d68f98
jmp 0x10021b9c
mov dword [ebp - 0x20], 0
jmp 0x10021bc9
mov eax, dword [ebp - 0x20]
inc eax
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 1
jge 0x10021bdf
mov eax, dword [ebp - 0x20]
mov dword [ebp + eax*4 - 0xc4], 7
jmp 0x10021bc2
mov eax, dword [ebp - 0x3c]
mov dword [ebp - 0x3a4], eax
push 0
lea ecx, [ebp - 0x194]
call fcn.10004a67
mov ecx, dword [ebp - 0x3a4]
mov dword [eax], ecx
mov eax, dword [ebp - 0x3c]
cmp eax, dword [ebp - 0x3a4]
jge 0x10021c14
mov dword [ebp - 0x268], 1
jmp 0x10021c1b
and dword [ebp - 0x268], 0
mov eax, dword [ebp - 0x3c]
cmp eax, dword [ebp - 0x268]
jl 0x10021c32
mov dword [ebp - 0x278], 1
jmp 0x10021c39
and dword [ebp - 0x278], 0
mov eax, dword [ebp - 0x3c]
mov dword [ebp - 0x544], eax
mov eax, dword [ebp - 0x3c]
cmp eax, dword [ebp - 0x3c]
jle 0x10021c56
mov dword [ebp - 0x3ac], 1
jmp 0x10021c5d
and dword [ebp - 0x3ac], 0
mov eax, dword [ebp - 0x3ac]
add eax, 0xffff
mov dword [ebp - 0x168], eax
mov eax, dword [ebp - 0x168]
sub eax, dword [ebp - 0x3c]
cmp eax, dword [ebp - 0x3c]
jne 0x10021c88
mov dword [ebp - 0x270], 1
jmp 0x10021c8f
and dword [ebp - 0x270], 0
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x270]
mov dword [ebp + eax - 0x13c], ecx
cmp dword [ebp - 0xcc], 0xfffffff8
jle 0x10021cb7
mov dword [ebp - 0x3b4], 1
jmp 0x10021cbe
and dword [ebp - 0x3b4], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xc4]
cmp dword [ebp - 0x3b4], eax
jge 0x10021cdf
mov dword [ebp - 0x4b8], 1
jmp 0x10021ce6
and dword [ebp - 0x4b8], 0
cmp dword [ebp - 0xcc], 0xa01c77dc
ja 0x10021d04
mov eax, 0x8f62c4df
test eax, eax
jne 0x10021d04
and dword [ebp - 0x3bc], 0
jmp 0x10021d0e
mov dword [ebp - 0x3bc], 1
mov eax, dword [ebp - 0x278]
cmp eax, dword [ebp - 0x3bc]
jle 0x10021f65
mov dword [ebp - 0x6c], 0x137d3709
mov dword [ebp - 0x150], 1
mov esi, dword [ebp - 0x3c]
push 0
lea ecx, [ebp - 0x194]
call fcn.10004a67
cmp dword [eax], esi
jl 0x10021d51
mov dword [ebp - 0x348], 1
jmp 0x10021d58
and dword [ebp - 0x348], 0
cmp dword [ebp - 0x6c], 0
jne 0x10021d76
mov eax, 0x81f6
test eax, eax
je 0x10021d6d
cmp dword [ebp - 0x6c], 0
jne 0x10021d76
and dword [ebp - 0x280], 0
jmp 0x10021d80
mov dword [ebp - 0x280], 1
cmp dword [ebp - 0x280], 0
jl 0x10021d95
mov dword [ebp - 0x3c4], 1
jmp 0x10021d9c
and dword [ebp - 0x3c4], 0
mov eax, dword [ebp - 0x3c4]
sub eax, dword [ebp - 0x6c]
je 0x10021db9
cmp dword [ebp - 0x6c], 0
je 0x10021db9
mov dword [ebp - 0x288], 1
jmp 0x10021dc0
and dword [ebp - 0x288], 0
mov eax, dword [ebp - 0x6c]
cmp dword [ebp - 0x288], eax
jg 0x10021dd7
mov dword [ebp - 0x3cc], 1
jmp 0x10021dde
and dword [ebp - 0x3cc], 0
mov eax, dword [ebp - 0x6c]
cmp eax, dword [ebp - 0x3cc]
jg 0x10021df5
mov dword [ebp - 0x290], 1
jmp 0x10021dfc
and dword [ebp - 0x290], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x13c]
cmp dword [ebp - 0x290], eax
jl 0x10021e1d
mov dword [ebp - 0x3d4], 1
jmp 0x10021e24
and dword [ebp - 0x3d4], 0
mov eax, dword [ebp - 0x6c]
imul eax, dword [ebp - 0x3d4]
test eax, eax
je 0x10021e53
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x13c], 0
je 0x10021e53
or eax, 0xffffffff
je 0x10021e53
mov dword [ebp - 0x3dc], 1
jmp 0x10021e5a
and dword [ebp - 0x3dc], 0
cmp dword [ebp - 0x3dc], 0xffffffff
jge 0x10021e6f
mov dword [ebp - 0x2a4], 1
jmp 0x10021e76
and dword [ebp - 0x2a4], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x13c]
cmp dword [ebp - 0x2a4], eax
jl 0x10021e97
mov dword [ebp - 0x198], 1
jmp 0x10021e9e
and dword [ebp - 0x198], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xc4]
cmp dword [ebp - 0x198], eax
jne 0x10021ebf
mov dword [ebp - 0x2a8], 1
jmp 0x10021ec6
and dword [ebp - 0x2a8], 0
mov eax, dword [ebp - 0x348]
cmp eax, dword [ebp - 0x2a8]
jne 0x10021ee0
mov dword [ebp - 0x3d8], 1
jmp 0x10021ee7
and dword [ebp - 0x3d8], 0
mov eax, dword [ebp - 0x3d8]
mov dword [ebp - 0x150], eax
cmp dword [ebp - 0x150], 0x4d7e
jge 0x10021f0b
mov dword [ebp - 0x2b0], 1
jmp 0x10021f12
and dword [ebp - 0x2b0], 0
cmp dword [ebp - 0x2b0], 0xffff
jbe 0x10021f2a
mov dword [ebp - 0x350], 1
jmp 0x10021f31
and dword [ebp - 0x350], 0
push 0
lea ecx, [ebp - 0x194]
call fcn.10004a67
mov ecx, dword [ebp - 0x350]
mov dword [eax], ecx
mov eax, dword [ebp - 0x150]
imul eax, dword [ebp - 0xcc]
push 4
pop ecx
shl ecx, 0
mov dword [ebp + ecx - 0x13c], eax
jmp 0x10022191
mov dword [ebp - 0xa4], 0xab83
mov dword [ebp - 0x444], 1
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0xc4], 0
jne 0x10021f95
mov dword [ebp - 0x2b8], 1
jmp 0x10021f9c
and dword [ebp - 0x2b8], 0
mov dword [ebp - 0xa4], 0xffffffff
mov eax, dword [ebp - 0xa4]
cmp dword [ebp - 0x2b8], eax
jle 0x10021fc0
mov dword [ebp - 0x3a0], 1
jmp 0x10021fc7
and dword [ebp - 0x3a0], 0
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x3a0]
mov dword [ebp + eax - 0x13c], ecx
mov eax, dword [ebp - 0xa4]
cmp eax, dword [ebp - 0x168]
jge 0x10021ff4
mov dword [ebp - 0x2c0], 1
jmp 0x10021ffb
and dword [ebp - 0x2c0], 0
mov eax, dword [ebp - 0xa4]
cmp dword [ebp - 0x2c0], eax
je 0x10022015
mov dword [ebp - 0x358], 1
jmp 0x1002201c
and dword [ebp - 0x358], 0
push 0
lea ecx, [ebp - 0x194]
call fcn.10004a67
mov ecx, dword [ebp - 0x358]
cmp ecx, dword [eax]
jge 0x1002203f
mov dword [ebp - 0x2c8], 1
jmp 0x10022046
and dword [ebp - 0x2c8], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xc4]
cmp dword [ebp - 0x2c8], eax
jl 0x10022067
mov dword [ebp - 0x3c8], 1
jmp 0x1002206e
and dword [ebp - 0x3c8], 0
imul eax, dword [ebp - 0x3c8], 0x49ba
test eax, eax
jne 0x10022097
push 0
lea ecx, [ebp - 0x194]
call fcn.10004a67
cmp dword [eax], 0
jne 0x10022097
and dword [ebp - 0x2d0], 0
jmp 0x100220a1
mov dword [ebp - 0x2d0], 1
push 0
lea ecx, [ebp - 0x194]
call fcn.10004a67
mov ecx, dword [ebp - 0x2d0]
cmp ecx, dword [eax]
jne 0x100220c4
mov dword [ebp - 0x360], 1
jmp 0x100220cb
and dword [ebp - 0x360], 0
cmp dword [ebp - 0x360], 0
jb 0x100220e0
mov dword [ebp - 0x2d8], 1
jmp 0x100220e7
and dword [ebp - 0x2d8], 0
mov eax, dword [ebp - 0xcc]
cmp dword [ebp - 0x2d8], eax
jg 0x10022101
mov dword [ebp - 0x158], 1
jmp 0x10022108
and dword [ebp - 0x158], 0
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x158]
mov dword [ebp + eax - 0x13c], ecx
mov eax, dword [ebp - 0xa4]
cmp dword [ebp - 0x158], eax
je 0x10022135
mov dword [ebp - 0x3a8], 1
jmp 0x1002213c
and dword [ebp - 0x3a8], 0
push 0
lea ecx, [ebp - 0x194]
call fcn.10004a67
mov ecx, dword [ebp - 0x3a8]
cmp ecx, dword [eax]
jle 0x1002215f
mov dword [ebp - 0x2e0], 1
jmp 0x10022166
and dword [ebp - 0x2e0], 0
cmp dword [ebp - 0x2e0], 0x8b20606
jne 0x1002217e
mov dword [ebp - 0x368], 1
jmp 0x10022185
and dword [ebp - 0x368], 0
mov eax, dword [ebp - 0x368]
mov dword [ebp - 0x444], eax
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x194]
call fcn.10004a4b
mov dword [ebp - 0x54c], 0x1007e7b4
mov dword [ebp - 0x58], 1
push 1
lea ecx, [ebp - 0x188]
call fcn.100049ee
mov dword [ebp - 4], 0xb
mov dword [ebp - 0x370], 0x907c4e7c
mov dword [ebp - 0x2f8], 2
mov dword [ebp - 0x3b0], 1
push 1
lea ecx, [ebp - 0x404]
call fcn.100049ee
mov byte [ebp - 4], 0xc
mov dword [ebp - 0x328], 0
mov dword [ebp - 0x4a0], 0x4605dd88
mov dword [ebp - 0x44], 0
jmp 0x10022218
mov eax, dword [ebp - 0x44]
inc eax
mov dword [ebp - 0x44], eax
cmp dword [ebp - 0x44], 1
jge 0x10022234
push dword [ebp - 0x44]
lea ecx, [ebp - 0x188]
call fcn.10004a67
mov dword [eax], 0x3ac2
jmp 0x10022211
mov dword [ebp - 0x44], 0
jmp 0x10022244
mov eax, dword [ebp - 0x44]
inc eax
mov dword [ebp - 0x44], eax
cmp dword [ebp - 0x44], 1
jge 0x10022260
push dword [ebp - 0x44]
lea ecx, [ebp - 0x404]
call fcn.10004a67
mov dword [eax], 0x212908cd
jmp 0x1002223d
cmp dword [ebp - 0x58], 0
mov eax, dword [ebp - 0x58]
mov dword [ebp - 0x554], eax
push 0
lea ecx, [ebp - 0x188]
call fcn.10004a67
cmp dword [eax], 0x1c36b586
je 0x1002228e
mov dword [ebp - 0x2e8], 1
jmp 0x10022295
and dword [ebp - 0x2e8], 0
cmp dword [ebp - 0x2e8], 0x29ed
je 0x100222ad
mov dword [ebp - 0x3e8], 1
jmp 0x100222b4
and dword [ebp - 0x3e8], 0
push 0
lea ecx, [ebp - 0x188]
call fcn.10004a67
mov ecx, dword [ebp - 0x3e8]
cmp ecx, dword [eax]
jl 0x100222d7
mov dword [ebp - 0x2f0], 1
jmp 0x100222de
and dword [ebp - 0x2f0], 0
push 0
lea ecx, [ebp - 0x188]
call fcn.10004a67
mov ecx, dword [ebp - 0x2f0]
add ecx, dword [eax]
mov dword [ebp - 0x370], ecx
mov eax, dword [ebp - 0x370]
mov dword [ebp - 0x2f8], eax
mov eax, dword [ebp - 0x2f8]
mov dword [ebp - 0x3b0], eax
cmp dword [ebp - 0x3b0], 0
jne 0x10022326
mov dword [ebp - 0x300], 1
jmp 0x1002232d
and dword [ebp - 0x300], 0
cmp dword [ebp - 0x58], 0x3758
jl 0x10022351
push 0
lea ecx, [ebp - 0x188]
call fcn.10004a67
cmp dword [eax], 0
jne 0x10022351
and dword [ebp - 0x378], 0
jmp 0x1002235b
mov dword [ebp - 0x378], 1
cmp dword [ebp - 0x378], 0xfffffff9
jl 0x10022370
mov dword [ebp - 0x308], 1
jmp 0x10022377
and dword [ebp - 0x308], 0
imul esi, dword [ebp - 0x308], 9
push 0
lea ecx, [ebp - 0x188]
call fcn.10004a67
cmp esi, dword [eax]
jg 0x1002239b
mov dword [ebp - 0x3d0], 1
jmp 0x100223a2
and dword [ebp - 0x3d0], 0
mov eax, dword [ebp - 0x58]
cmp eax, dword [ebp - 0x3d0]
jl 0x100223b9
mov dword [ebp - 0x310], 1
jmp 0x100223c0
and dword [ebp - 0x310], 0
push 0
lea ecx, [ebp - 0x404]
call fcn.10004a67
mov esi, dword [ebp - 0x310]
imul esi, dword [eax]
push 0
lea ecx, [ebp - 0x188]
call fcn.10004a67
cmp esi, dword [eax]
je 0x100223f3
mov dword [ebp - 0x380], 1
jmp 0x100223fa
and dword [ebp - 0x380], 0
cmp dword [ebp - 0x380], 0xfffffff6
jle 0x1002240f
mov dword [ebp - 0x318], 1
jmp 0x10022416
and dword [ebp - 0x318], 0
push 0
lea ecx, [ebp - 0x404]
call fcn.10004a67
mov ecx, dword [ebp - 0x318]
cmp ecx, dword [eax]
jg 0x10022439
mov dword [ebp - 0x3b8], 1
jmp 0x10022440
and dword [ebp - 0x3b8], 0
cmp dword [ebp - 0x3b8], 0xfffffffb
jl 0x10022455
mov dword [ebp - 0x320], 1
jmp 0x1002245c
and dword [ebp - 0x320], 0
push 0
lea ecx, [ebp - 0x188]
call fcn.10004a67
mov ecx, dword [ebp - 0x320]
add ecx, dword [eax]
cmp dword [ebp - 0x58], ecx
jl 0x10022482
mov dword [ebp - 0x388], 1
jmp 0x10022489
and dword [ebp - 0x388], 0
mov eax, dword [ebp - 0x388]
mov dword [ebp - 0x328], eax
cmp dword [ebp - 0x328], 0
jne 0x100224ad
cmp dword [ebp - 0x58], 0
jne 0x100224ad
and dword [ebp - 0x3e0], 0
jmp 0x100224b7
mov dword [ebp - 0x3e0], 1
mov eax, dword [ebp - 0x58]
mov ecx, dword [ebp - 0x3e0]
lea eax, [ecx + eax - 0xffff]
imul eax, eax, 0
test eax, eax
je 0x100224ec
push 0
lea ecx, [ebp - 0x404]
call fcn.10004a67
cmp dword [eax], 0
je 0x100224ec
mov dword [ebp - 0x330], 1
jmp 0x100224f3
and dword [ebp - 0x330], 0
push 0
lea ecx, [ebp - 0x404]
call fcn.10004a67
mov ecx, dword [ebp - 0x330]
cmp ecx, dword [eax]
jg 0x10022516
mov dword [ebp - 0x390], 1
jmp 0x1002251d
and dword [ebp - 0x390], 0
mov eax, dword [ebp - 0x58]
cmp dword [ebp - 0x390], eax
jge 0x10022534
mov dword [ebp - 0x338], 1
jmp 0x1002253b
and dword [ebp - 0x338], 0
push 0
lea ecx, [ebp - 0x188]
call fcn.10004a67
mov ecx, dword [ebp - 0x338]
cmp ecx, dword [eax]
jg 0x1002255e
mov dword [ebp - 0x178], 1
jmp 0x10022565
and dword [ebp - 0x178], 0
push 0
lea ecx, [ebp - 0x404]
call fcn.10004a67
mov ecx, dword [ebp - 0x178]
mov dword [eax], ecx
mov eax, dword [ebp - 0x178]
mov dword [ebp - 0x4a0], eax
mov byte [ebp - 4], 0xb
lea ecx, [ebp - 0x404]
call fcn.10004a4b
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x188]
call fcn.10004a4b
mov byte [0x10114a6a], 1
mov dword [ebp - 0xd4], 0xffffffff
mov dword [ebp - 0xd4], 0
jmp 0x100225ce
mov eax, dword [ebp - 0xd4]
inc eax
mov dword [ebp - 0xd4], eax
cmp dword [ebp - 0xd4], 0x17
je 0x10022610
mov dword [ebp - 0x44c], 0xacd7
mov byte [ebp - 0x76], 0
movzx eax, byte [ebp - 0x76]
test eax, eax
je 0x10022603
push 0
push 0
push 0x21b5
push 0x1ce2
push 0
call dword [sym.imp.USER32.dll_InsertMenuA]
cmp dword [ebp - 0x44c], 0
je 0x1002260e
jmp 0x100225c1
jmp 0x100225c1
xor eax, eax
inc eax
imul eax, eax, 0x148
add eax, 0x1007e7c0
mov dword [ebp - 0x28c], eax
push 4
lea ecx, [ebp - 0x410]
call fcn.100049ee
mov dword [ebp - 4], 0xd
mov dword [ebp - 0x24], 0
mov dword [ebp - 0x4a8], 0x56cf6d70
mov dword [ebp - 0x55c], 0x6221
mov dword [ebp - 0x504], 0xf4926a67
mov dword [ebp - 0x14], 0
jmp 0x1002266d
mov eax, dword [ebp - 0x14]
inc eax
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 4
jge 0x10022689
push dword [ebp - 0x14]
lea ecx, [ebp - 0x410]
call fcn.10004a67
mov dword [eax], 0x456160cb
jmp 0x10022666
mov dword [ebp - 0x14], 0
jmp 0x10022699
mov eax, dword [ebp - 0x14]
inc eax
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 1
jge 0x100226af
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x4c8], 0xf81a770a
jmp 0x10022692
mov dword [ebp - 0x14], 0
jmp 0x100226bf
mov eax, dword [ebp - 0x14]
inc eax
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 1
jge 0x100226d5
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x458], 1
jmp 0x100226b8
mov dword [ebp - 0x14], 0
jmp 0x100226e5
mov eax, dword [ebp - 0x14]
inc eax
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 1
jge 0x100226fb
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x584], 0x1e9426ce
jmp 0x100226de
push 0
lea ecx, [ebp - 0x410]
call fcn.10004a67
push 3
lea ecx, [ebp - 0x410]
call fcn.10004a67
mov esi, eax
push 1
lea ecx, [ebp - 0x410]
call fcn.10004a67
mov eax, dword [eax]
cmp eax, dword [esi]
jg 0x10022736
mov dword [ebp - 0x3c0], 1
jmp 0x1002273d
and dword [ebp - 0x3c0], 0
mov eax, dword [ebp - 0x3c0]
add eax, 0x4d91f06e
mov dword [ebp - 0x24], eax
mov dword [ebp - 0x24], 3
jmp 0x1002275b
mov eax, dword [ebp - 0x24]
dec eax
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 0
jl 0x100229b4
mov dword [ebp - 0x140], 0xfffffffa
mov dword [ebp - 0x50c], 0xffffffff
mov dword [ebp - 0x558], 0
push 2
lea ecx, [ebp - 0x56c]
call fcn.100049ee
mov byte [ebp - 4], 0xe
mov dword [ebp - 0x19c], 0xfffffff9
mov dword [ebp - 0xdc], 0
jmp 0x100227b7
mov eax, dword [ebp - 0xdc]
inc eax
mov dword [ebp - 0xdc], eax
cmp dword [ebp - 0xdc], 2
jge 0x100227d9
push dword [ebp - 0xdc]
lea ecx, [ebp - 0x56c]
call fcn.10004a67
mov dword [eax], 5
jmp 0x100227aa
cmp dword [ebp - 0x24], 0x3de76903
jg 0x100227ee
mov dword [ebp - 0x298], 1
jmp 0x100227f5
and dword [ebp - 0x298], 0
mov eax, dword [ebp - 0x24]
mov ecx, dword [ebp - 0x24]
lea eax, [ecx + eax + 0x67a3d58e]
sub eax, 0xa96dad8b
mov dword [ebp - 0x340], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x340]
mov dword [ebp + eax - 0x4c8], ecx
mov eax, dword [ebp - 0x140]
imul eax, dword [ebp - 0x340]
cmp eax, dword [ebp - 0x24]
jl 0x1002283e
mov dword [ebp - 0x29c], 1
jmp 0x10022845
and dword [ebp - 0x29c], 0
mov eax, dword [ebp - 0x298]
neg eax
sub eax, dword [ebp - 0x140]
cmp eax, dword [ebp - 0x29c]
jne 0x10022867
mov dword [ebp - 0x294], 1
jmp 0x1002286e
and dword [ebp - 0x294], 0
mov eax, dword [ebp - 0x140]
cmp dword [ebp - 0x294], eax
jg 0x10022888
mov dword [ebp - 0x2ac], 1
jmp 0x1002288f
and dword [ebp - 0x2ac], 0
mov eax, dword [ebp - 0x24]
cmp dword [ebp - 0x2ac], eax
jg 0x100228a6
mov dword [ebp - 0x2b4], 1
jmp 0x100228ad
and dword [ebp - 0x2b4], 0
mov eax, dword [ebp - 0x24]
cmp dword [ebp - 0x2b4], eax
je 0x100228c4
mov dword [ebp - 0x2c4], 1
jmp 0x100228cb
and dword [ebp - 0x2c4], 0
push dword [ebp - 0x24]
lea ecx, [ebp - 0x410]
call fcn.10004a67
mov dword [ebp - 0x2bc], eax
push dword [ebp - 0x24]
lea ecx, [ebp - 0x410]
call fcn.10004a67
mov ecx, dword [ebp - 0x2bc]
mov eax, dword [eax]
mov dword [ecx], eax
mov eax, dword [ebp - 0x2bc]
mov eax, dword [eax]
cmp eax, dword [ebp - 0x2c4]
je 0x10022913
mov dword [ebp - 0x2cc], 1
jmp 0x1002291a
and dword [ebp - 0x2cc], 0
cmp dword [ebp - 0x2cc], 0xfffe
ja 0x10022932
mov dword [ebp - 0x2d4], 1
jmp 0x10022939
and dword [ebp - 0x2d4], 0
cmp dword [ebp - 0x2d4], 0x9546
je 0x10022951
mov dword [ebp - 0x144], 1
jmp 0x10022958
and dword [ebp - 0x144], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x144]
mov dword [ebp + eax - 0x458], ecx
cmp dword [ebp - 0x144], 0xffffffff
jbe 0x10022980
mov dword [ebp - 0x2dc], 1
jmp 0x10022987
and dword [ebp - 0x2dc], 0
mov eax, dword [ebp - 0x2dc]
mov dword [ebp - 0x4a8], eax
mov eax, dword [ebp - 0x19c]
inc eax
mov dword [ebp - 0x19c], eax
mov byte [ebp - 4], 0xd
lea ecx, [ebp - 0x56c]
call fcn.10004a4b
jmp 0x10022754
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x410]
call fcn.10004a4b
xor eax, eax
inc eax
imul eax, eax, 0x1c
add eax, 0x1007e7c0
mov dword [ebp - 0x174], eax
mov dword [ebp - 0x28], 0xffffffff
mov dword [ebp - 0x34], 1
mov dword [ebp - 0x94], 0xfffffff7
mov dword [ebp - 0x8c], 0xfffffff7
mov eax, dword [ebp - 0x34]
add eax, dword [ebp - 0x28]
neg eax
je 0x10022a51
mov eax, 0x415d
test eax, eax
je 0x10022a51
mov eax, dword [ebp - 0x28]
mov dword [ebp - 0x514], eax
cmp dword [ebp - 0x28], 0
je 0x10022a2a
cmp dword [ebp - 0x28], 0
je 0x10022a2a
mov dword [ebp - 0x1a4], 1
jmp 0x10022a31
and dword [ebp - 0x1a4], 0
mov eax, dword [ebp - 0x94]
cmp dword [ebp - 0x1a4], eax
jne 0x10022a51
cmp dword [ebp - 0x34], 0
je 0x10022a51
mov dword [ebp - 0x1ac], 1
jmp 0x10022a58
and dword [ebp - 0x1ac], 0
mov eax, dword [ebp - 0x1ac]
sub eax, 0x98aa
jne 0x10022a6e
cmp dword [ebp - 0x94], 0
je 0x10022a80
mov eax, 0xe1c5a3d7
test eax, eax
jne 0x10022a80
and dword [ebp - 0x1b4], 0
jmp 0x10022a8a
mov dword [ebp - 0x1b4], 1
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x1b4]
lea eax, [eax + ecx + 0x530a]
test eax, eax
je 0x1002301b
push 4
lea ecx, [ebp - 0x3f8]
call fcn.100049ee
mov dword [ebp - 4], 0xf
mov dword [ebp - 0x204], 0xffffffff
mov dword [ebp - 0x4c], 0
jmp 0x10022ad0
mov eax, dword [ebp - 0x4c]
inc eax
mov dword [ebp - 0x4c], eax
cmp dword [ebp - 0x4c], 1
jge 0x10022ae6
mov eax, dword [ebp - 0x4c]
mov dword [ebp + eax*4 - 0x15c], 0xcf1c
jmp 0x10022ac9
mov dword [ebp - 0x4c], 0
jmp 0x10022af6
mov eax, dword [ebp - 0x4c]
inc eax
mov dword [ebp - 0x4c], eax
cmp dword [ebp - 0x4c], 4
jge 0x10022b12
push dword [ebp - 0x4c]
lea ecx, [ebp - 0x3f8]
call fcn.10004a67
mov dword [eax], 0x68f57f54
jmp 0x10022aef
mov dword [ebp - 0x34], 0
jmp 0x10022b22
mov eax, dword [ebp - 0x34]
inc eax
mov dword [ebp - 0x34], eax
cmp dword [ebp - 0x34], 0
jg 0x10022b51
mov eax, dword [ebp - 0x34]
cmp dword [ebp + eax*4 - 0x15c], 0
je 0x10022b37
jmp 0x10022b51
mov byte [ebp - 0x5e], 0
movzx eax, byte [ebp - 0x5e]
test eax, eax
je 0x10022b4f
push 0
push 0
push 0
call dword [sym.imp.ADVAPI32.dll_ControlService]
jmp 0x10022b1b
mov dword [ebp - 0x28], 0
jmp 0x10022b61
cmp dword [ebp - 0x28], 0x36
je 0x10023007
mov dword [ebp - 0x164], 0x20f620a3
mov dword [ebp - 0x154], 3
mov dword [ebp - 0x1bc], 0x1abe
mov dword [ebp - 0x4c0], str.xnpot_ixcrusu_jpfxb_padvu_afc_nwnlhoz_axnnsx
cmp dword [ebp - 0x1bc], 0x1b40
jle 0x10022c4b
push 0
call dword [sym.imp.KERNEL32.dll_GetSystemTime]
and dword [ebp - 0xe4], 0
jmp 0x10022bc1
cmp dword [ebp - 0xe4], 0xc0
jge 0x10022c4b
and dword [ebp - 0xec], 0
jmp 0x10022be3
mov byte [ebp - 4], 0x10
cmp dword [ebp - 0x1bc], 0x17c3
jge 0x10022c67
push dword [ebp - 0x4c0]
call fcn.1004b583
pop ecx
jmp 0x10022c83
mov dword [ebp - 4], 0xf
jmp 0x10022c93
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x3f8]
call fcn.10004a4b
jmp 0x100230ca
mov dword [ebp - 0x24c], 9
mov dword [ebp - 0x264], 0x8281b7ff
mov byte [ebp - 0x5f], 0
movzx eax, byte [ebp - 0x5f]
test eax, eax
je 0x10023051
push 0x19b3
push 0
push 0
push 0x205f
push 0
call dword [sym.imp.SHELL32.dll_ExtractIconExW]
cmp dword [ebp - 0x264], 1
jl 0x10023066
mov dword [ebp - 0x244], 1
jmp 0x1002306d
and dword [ebp - 0x244], 0
mov eax, dword [ebp - 0x94]
mov dword [ebp - 0x24c], eax
mov eax, dword [ebp - 0x244]
sub eax, dword [ebp - 0x94]
cmp dword [ebp - 0x24c], eax
jne 0x10023099
mov dword [ebp - 0x254], 1
jmp 0x100230a0
and dword [ebp - 0x254], 0
mov eax, dword [ebp - 0x28]
cmp dword [ebp - 0x254], eax
jl 0x100230b7
mov dword [ebp - 0x25c], 1
jmp 0x100230be
and dword [ebp - 0x25c], 0
mov eax, dword [ebp - 0x25c]
mov dword [ebp - 0x264], eax
mov byte [ebp - 0x77], 0
movzx eax, byte [ebp - 0x77]
test eax, eax
je 0x100230e1
push 0x1d58
call dword [sym.imp.USER32.dll_GetDlgCtrlID]
mov eax, dword [ebp - 0x28c]
mov dword [0x1007e7b0], eax
mov dword [ebp - 0x50], 0x7d8e6e83
mov dword [ebp - 0x74], 0xc2251554
mov eax, dword [ebp - 0x50]
cmp eax, dword [ebp - 0x50]
jle 0x1002310e
mov dword [ebp - 0x26c], 1
jmp 0x10023115
and dword [ebp - 0x26c], 0
cmp dword [ebp - 0x26c], 0x2071
jge 0x10023202
mov dword [ebp - 0xb0], 0
jmp 0x1002313e
mov eax, dword [ebp - 0xb0]
inc eax
mov dword [ebp - 0xb0], eax
cmp dword [ebp - 0xb0], 1
jge 0x1002315a
mov eax, dword [ebp - 0xb0]
mov dword [ebp + eax*4 - 0x16c], 0x5059b8bc
jmp 0x10023131
mov byte [ebp - 0x75], 0
movzx eax, byte [ebp - 0x75]
test eax, eax
je 0x10023172
push 0
push 0
push 0
call dword [sym.imp.ADVAPI32.dll_RegLoadKeyW]
mov dword [ebp - 0x50], 0
jmp 0x10023182
cmp dword [ebp - 0x50], 0
jl 0x10023200
mov dword [ebp - 0x74], 0xffffffee
jmp 0x10023212
mov eax, dword [ebp - 0x74]
inc eax
mov dword [ebp - 0x74], eax
cmp dword [ebp - 0x74], 0x10
jg 0x10023231
mov byte [ebp - 0x5d], 0
movzx eax, byte [ebp - 0x5d]
test eax, eax
je 0x1002322f
push 0x1b9d
call dword [sym.imp.USER32.dll_SetFocus]
jmp 0x1002320b
mov dword [ebp - 0x284], 0x709
mov dword [ebp - 0x424], str.xrrv_laeaj_zjeuv_fgqbe_fdqgvd_jprq_vuhvt_pwjeln_gzlpvp_zncplqrk_ajsnalcq_zwiasutt
cmp dword [ebp - 0x284], 0xa81
jle 0x1002332e
and dword [ebp - 0xb8], 0
jmp 0x1002326b
cmp dword [ebp - 0xb8], 0x4b77
jge 0x1002332e
mov eax, dword [ebp - 0x174]
mov dword [0x1007e7b4], eax
mov dword [ebp - 4], 0x12
cmp dword [ebp - 0x284], 0x384
jge 0x1002335c
mov edx, dword [ebp - 0x424]
mov ecx, 0x1007f2b8
call fcn.1000877a
jmp 0x10023378
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret