Function at 0x10020666
Capabilities:
Extract resource via kernel32 functions

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x100621ea
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
push ecx
sub esp, 0x344
push ebx
push esi
push edi
mov dword [ebp - 0x10], esp
mov dword [ebp - 0x2c], 0xfff8
mov dword [ebp - 0x20], 1
mov dword [ebp - 0xe8], 0xfffffffe
mov dword [ebp - 0xf0], 2
push 2
lea ecx, [ebp - 0x248]
call fcn.10001dc8
and dword [ebp - 4], 0
mov dword [ebp - 0x2bc], 1
mov dword [ebp - 0x268], 7
mov dword [ebp - 0x270], 0
mov dword [ebp - 0x278], 0xfffffff8
mov dword [ebp - 0x280], 0xfffffff9
mov dword [ebp - 0x14], 0
jmp 0x10020700
mov eax, dword [ebp - 0x14]
inc eax
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 2
jge 0x1002071c
push dword [ebp - 0x14]
lea ecx, [ebp - 0x248]
call fcn.10001e41
mov dword [eax], 0x7d437f1b
jmp 0x100206f9
mov dword [ebp - 0x14], 0
jmp 0x1002072c
mov eax, dword [ebp - 0x14]
inc eax
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 3
jge 0x10020742
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x2c8], 0xffffffff
jmp 0x10020725
mov dword [ebp - 0x14], 0
jmp 0x10020752
mov eax, dword [ebp - 0x14]
inc eax
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 1
jge 0x10020768
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x1fc], 0xdeb94592
jmp 0x1002074b
mov dword [ebp - 0x14], 0
jmp 0x10020778
mov eax, dword [ebp - 0x14]
inc eax
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 3
jge 0x1002078e
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x314], 0xff2b
jmp 0x10020771
mov dword [ebp - 0x2c], 0
cmp dword [ebp - 0x2c], 0xfffffff7
jae 0x10020805
xor eax, eax
inc eax
sub eax, dword [ebp - 0x2c]
dec eax
jne 0x100207b9
cmp dword [ebp - 0x2c], 0
jne 0x100207b9
cmp dword [ebp - 0x2c], 0
jne 0x100207b9
and dword [ebp - 0x224], 0
jmp 0x100207c3
mov dword [ebp - 0x224], 1
mov eax, dword [ebp - 0x2c]
mov dword [ebp - 0x2a8], eax
cmp dword [ebp - 0x2c], 0
jne 0x100207d8
cmp dword [ebp - 0x20], 0
je 0x100207ea
cmp dword [ebp - 0x2c], 0
je 0x100207ea
mov dword [ebp - 0x124], 1
jmp 0x100207f1
and dword [ebp - 0x124], 0
mov eax, dword [ebp - 0x2c]
add eax, dword [ebp - 0x124]
jne 0x10020805
and dword [ebp - 0x1ac], 0
jmp 0x1002080f
mov dword [ebp - 0x1ac], 1
mov eax, dword [ebp - 0x20]
cmp dword [ebp - 0x1ac], eax
jl 0x10020826
mov dword [ebp - 0x180], 1
jmp 0x1002082d
and dword [ebp - 0x180], 0
cmp dword [ebp - 0x180], 0xa8f1
jl 0x10020845
mov dword [ebp - 0x1a4], 1
jmp 0x1002084c
and dword [ebp - 0x1a4], 0
imul eax, dword [ebp - 0x1a4], 9
add eax, dword [ebp - 0x20]
mov dword [ebp - 0xe8], eax
jne 0x1002086d
cmp dword [ebp - 0x20], 0
jne 0x1002086d
and dword [ebp - 0x150], 0
jmp 0x10020877
mov dword [ebp - 0x150], 1
mov eax, dword [ebp - 0x150]
mov dword [ebp - 0xf0], eax
mov eax, dword [ebp - 0xf0]
sub eax, dword [ebp - 0x20]
cmp eax, dword [ebp - 0x20]
jne 0x1002089d
mov dword [ebp - 0xa8], 1
jmp 0x100208a4
and dword [ebp - 0xa8], 0
push 0
lea ecx, [ebp - 0x248]
call fcn.10001e41
mov ecx, dword [ebp - 0xa8]
mov dword [eax], ecx
cmp dword [ebp - 0xa8], 0xffffffff
ja 0x100208ce
mov dword [ebp - 0x1a8], 1
jmp 0x100208d5
and dword [ebp - 0x1a8], 0
mov eax, dword [ebp - 0x20]
cmp dword [ebp - 0x1a8], eax
jl 0x100208ec
mov dword [ebp - 0xf8], 1
jmp 0x100208f3
and dword [ebp - 0xf8], 0
mov eax, dword [ebp - 0xf8]
add eax, dword [ebp - 0x20]
mov dword [ebp - 0x158], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x158]
mov dword [ebp + eax - 0x2c8], ecx
mov eax, dword [ebp - 0x20]
cmp dword [ebp - 0x158], eax
jge 0x1002092c
mov dword [ebp - 0x100], 1
jmp 0x10020933
and dword [ebp - 0x100], 0
mov eax, dword [ebp - 0x20]
cmp dword [ebp - 0x100], eax
jge 0x1002094a
mov dword [ebp - 0x188], 1
jmp 0x10020951
and dword [ebp - 0x188], 0
mov eax, dword [ebp - 0x20]
cmp dword [ebp - 0x188], eax
je 0x10020968
mov dword [ebp - 0x108], 1
jmp 0x1002096f
and dword [ebp - 0x108], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x108]
mov dword [ebp + eax - 0x1fc], ecx
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0x2c8], 1
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x248]
call fcn.10001e25
push 2
lea ecx, [ebp - 0x2d8]
call fcn.10001dc8
mov dword [ebp - 4], 1
mov dword [ebp - 0x54], 0x9bdba76a
mov dword [ebp - 0x1c8], 1
mov dword [ebp - 0x98], 0
jmp 0x100209e0
mov eax, dword [ebp - 0x98]
inc eax
mov dword [ebp - 0x98], eax
cmp dword [ebp - 0x98], 2
jge 0x100209ff
push dword [ebp - 0x98]
lea ecx, [ebp - 0x2d8]
call fcn.10001e41
and dword [eax], 0
jmp 0x100209d3
mov dword [ebp - 0x160], 0x3afe
mov dword [ebp - 0x1f4], str.cmm_bjxoebhke_dvanipe_oaaud_wjoafzttq_stuofy_skp_ggahgk_utwfsnas_oxvyj_jxmz
cmp dword [ebp - 0x160], 0x3e9f
jle 0x10020adc
call dword [sym.imp.KERNEL32.dll_GetUserDefaultLCID]
and dword [ebp - 0x64], 0
jmp 0x10020a36
mov eax, dword [ebp - 0x64]
inc eax
mov dword [ebp - 0x64], eax
cmp dword [ebp - 0x64], 0x303f
jge 0x10020adc
and dword [ebp - 0x5c], 0
jmp 0x10020a50
mov eax, dword [ebp - 0x5c]
inc eax
mov dword [ebp - 0x5c], eax
cmp dword [ebp - 0x5c], 0x668
jge 0x10020ad7
and dword [ebp - 0xa0], 0
jmp 0x10020a6f
mov eax, dword [ebp - 0xa0]
inc eax
mov dword [ebp - 0xa0], eax
cmp dword [ebp - 0xa0], 0x62ee
jge 0x10020ad2
mov eax, dword [ebp - 0x5c]
sub eax, dword [ebp - 0xa0]
and eax, dword [ebp - 0x64]
cdq
mov dword [ebp - 0x208], eax
mov dword [ebp - 0x204], edx
push dword [ebp - 0x204]
push dword [ebp - 0x208]
lea ecx, [ebp - 0x308]
call fcn.10001a31
pop ecx
pop ecx
mov dword [ebp - 0x228], eax
mov ecx, dword [ebp - 0x228]
call fcn.10001c93
push eax
call fcn.100490c6
pop ecx
lea ecx, [ebp - 0x308]
call fcn.10001c89
jmp 0x10020a62
jmp 0x10020a49
jmp 0x10020a2f
mov dword [ebp - 0x54], 1
jmp 0x10020aec
mov eax, dword [ebp - 0x54]
dec eax
mov dword [ebp - 0x54], eax
cmp dword [ebp - 0x54], 0
jl 0x10020afe
mov dword [ebp - 0x1c8], 0xfffffffe
jmp 0x10020ae5
mov byte [ebp - 4], 2
cmp dword [ebp - 0x160], 0x3add
jge 0x10020b1a
push dword [ebp - 0x1f4]
call fcn.100490c6
pop ecx
jmp 0x10020b36
mov dword [ebp - 4], 1
jmp 0x10020b46
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x2d8]
call fcn.10001e25
movzx eax, byte [0x1008bd48]
test eax, eax
je 0x10020b73
mov esi, 0x10079b00
mov edi, dword [ebp + 8]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
mov eax, dword [ebp + 8]
jmp 0x10021b04
mov dword [ebp - 0x110], 0x4ec8
mov dword [ebp - 0x1d0], str.qvmqdge_ojoymgiw_zxmctecjj_eobvov_yyhharu_issacwjr
cmp dword [ebp - 0x110], 0x5098
jle 0x10020c80
and dword [ebp - 0x6c], 0
jmp 0x10020ba4
mov eax, dword [ebp - 0x6c]
inc eax
mov dword [ebp - 0x6c], eax
cmp dword [ebp - 0x6c], 0x7ec9
jge 0x10020c80
and dword [ebp - 0x88], 0
jmp 0x10020bc7
mov eax, dword [ebp - 0x88]
inc eax
mov dword [ebp - 0x88], eax
cmp dword [ebp - 0x88], 0x30e
jge 0x10020c7b
and dword [ebp - 0x74], 0
jmp 0x10020be4
mov eax, dword [ebp - 0x74]
inc eax
mov dword [ebp - 0x74], eax
cmp dword [ebp - 0x74], 0x7b0f
jge 0x10020c76
and dword [ebp - 0x8c], 0
jmp 0x10020c07
mov eax, dword [ebp - 0x8c]
inc eax
mov dword [ebp - 0x8c], eax
cmp dword [ebp - 0x8c], 0x3a0e
jge 0x10020c71
mov eax, dword [ebp - 0x6c]
imul eax, dword [ebp - 0x88]
add eax, dword [ebp - 0x74]
or eax, dword [ebp - 0x8c]
cdq
mov dword [ebp - 0x214], eax
mov dword [ebp - 0x210], edx
push dword [ebp - 0x210]
push dword [ebp - 0x214]
lea ecx, [ebp - 0x32c]
call fcn.10001a31
pop ecx
pop ecx
mov dword [ebp - 0x22c], eax
mov ecx, dword [ebp - 0x22c]
call fcn.10001c93
push eax
call fcn.100490c6
pop ecx
lea ecx, [ebp - 0x32c]
call fcn.10001c89
jmp 0x10020bfa
jmp 0x10020bdd
jmp 0x10020bba
jmp 0x10020b9d
mov dword [ebp - 0x1d8], 0
mov dword [ebp - 4], 4
cmp dword [ebp - 0x110], 0x4e40
jge 0x10020ca9
push dword [ebp - 0x1d0]
call fcn.100490c6
pop ecx
jmp 0x10020cc5
or dword [ebp - 4], 0xffffffff
jmp 0x10020ccf
mov dword [ebp - 0x1e0], 0xfffffff6
mov dword [ebp - 0x94], 1
mov dword [ebp - 0x1a0], 3
mov dword [ebp - 0x1c0], 0
mov dword [ebp - 0x7c], 0
jmp 0x10020d07
mov eax, dword [ebp - 0x7c]
inc eax
mov dword [ebp - 0x7c], eax
cmp dword [ebp - 0x7c], 2
jge 0x10020d1d
mov eax, dword [ebp - 0x7c]
mov dword [ebp + eax*4 - 0x2f0], 0x3fde
jmp 0x10020d00
mov dword [ebp - 0x1a0], 1
cmp dword [ebp - 0x1a0], 0
jne 0x10020d42
mov eax, 0x377d6446
test eax, eax
jne 0x10020d42
and dword [ebp - 0x200], 0
jmp 0x10020d4c
mov dword [ebp - 0x200], 1
cmp dword [ebp - 0x1d8], 0xfffffff8
jne 0x10020d61
mov dword [ebp - 0x118], 1
jmp 0x10020d68
and dword [ebp - 0x118], 0
mov eax, dword [ebp - 0x118]
mov dword [ebp - 0x1c0], eax
mov dword [ebp - 0x94], 1
jmp 0x10020d8d
mov eax, dword [ebp - 0x94]
dec eax
mov dword [ebp - 0x94], eax
cmp dword [ebp - 0x94], 0
jl 0x10020da3
cmp dword [ebp - 0x1e0], 0
je 0x10020da1
jmp 0x10020da3
jmp 0x10020d80
mov dword [ebp - 0x2b0], 0x10079b00
mov dword [ebp - 0x2b8], 0x10079b04
mov dword [ebp - 0x18], 3
mov dword [ebp - 0x28], 0xfffffffc
mov dword [ebp - 0x9c], 0x45c17473
mov dword [ebp - 0x4c], 1
mov dword [ebp - 0x84], 0
jmp 0x10020def
mov eax, dword [ebp - 0x84]
inc eax
mov dword [ebp - 0x84], eax
cmp dword [ebp - 0x84], 1
jge 0x10020e0b
mov eax, dword [ebp - 0x84]
mov dword [ebp + eax*4 - 0x198], 0x7b332e0c
jmp 0x10020de2
mov eax, dword [ebp - 0x18]
sub eax, 0xa
mov dword [ebp - 0x28], eax
je 0x10020fa2
cmp dword [ebp - 0x18], 0
je 0x10020e32
cmp dword [ebp - 0x28], 0
je 0x10020e32
mov dword [ebp - 0x20c], 1
jmp 0x10020e39
and dword [ebp - 0x20c], 0
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x28c], eax
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x254], eax
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x2cc], eax
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x25c], eax
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x2a4], eax
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x264], eax
cmp dword [ebp - 0x28], 0
jne 0x10020e84
cmp dword [ebp - 0x18], 0
jne 0x10020e84
and dword [ebp - 0x168], 0
jmp 0x10020e8e
mov dword [ebp - 0x168], 1
mov eax, dword [ebp - 0x28]
cmp dword [ebp - 0x168], eax
je 0x10020ea5
mov dword [ebp - 0x120], 1
jmp 0x10020eac
and dword [ebp - 0x120], 0
mov eax, dword [ebp - 0x18]
cmp dword [ebp - 0x120], eax
jne 0x10020ec3
mov dword [ebp - 0x190], 1
jmp 0x10020eca
and dword [ebp - 0x190], 0
mov eax, dword [ebp - 0x28]
mov dword [ebp - 0x9c], eax
mov eax, dword [ebp - 0x28]
add eax, dword [ebp - 0x190]
cmp dword [ebp - 0x9c], eax
jg 0x10020ef0
mov dword [ebp - 0x128], 1
jmp 0x10020ef7
and dword [ebp - 0x128], 0
mov eax, dword [ebp - 0x18]
cmp dword [ebp - 0x128], eax
jge 0x10020f0e
mov dword [ebp - 0x170], 1
jmp 0x10020f15
and dword [ebp - 0x170], 0
mov eax, dword [ebp - 0x28]
cmp dword [ebp - 0x170], eax
jle 0x10020f2c
mov dword [ebp - 0x130], 1
jmp 0x10020f33
and dword [ebp - 0x130], 0
mov eax, dword [ebp - 0x28]
cmp eax, dword [ebp - 0x130]
jne 0x10020f4a
mov dword [ebp - 0x1b0], 1
jmp 0x10020f51
and dword [ebp - 0x1b0], 0
cmp dword [ebp - 0x1b0], 0xcbd6cd53
jbe 0x10020f69
mov dword [ebp - 0x138], 1
jmp 0x10020f70
and dword [ebp - 0x138], 0
mov eax, dword [ebp - 0x18]
cmp dword [ebp - 0x138], eax
jl 0x10020f82
cmp dword [ebp - 0x9c], 0
cmp dword [ebp - 0x28], 0
je 0x10020fa2
or eax, 0xffffffff
je 0x10020fa2
cmp dword [ebp - 0x9c], 0
je 0x10020fa2
mov dword [ebp - 0x178], 1
jmp 0x10020fa9
and dword [ebp - 0x178], 0
mov eax, dword [ebp - 0x18]
cmp dword [ebp - 0x178], eax
jl 0x10020fc0
mov dword [ebp - 0xbc], 1
jmp 0x10020fc7
and dword [ebp - 0xbc], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0xbc]
mov dword [ebp + eax - 0x198], ecx
mov eax, dword [ebp - 0x18]
cmp dword [ebp - 0xbc], eax
jne 0x10020ff1
mov dword [ebp - 0x140], 1
jmp 0x10020ff8
and dword [ebp - 0x140], 0
mov eax, dword [ebp - 0x140]
mov dword [ebp - 0x4c], eax
mov dword [ebp - 0x4c], 0
jmp 0x10021011
mov eax, dword [ebp - 0x4c]
inc eax
mov dword [ebp - 0x4c], eax
cmp dword [ebp - 0x4c], 0x10
jne 0x1002102a
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0x198], 0
jmp 0x1002100a
mov byte [0x1008bd48], 1
xor eax, eax
inc eax
imul eax, eax, 0x148
add eax, 0x10079740
mov dword [ebp - 0x164], eax
mov dword [ebp - 0x50], 0xfffffffb
mov dword [ebp - 0x148], 0xffffffff
mov dword [ebp - 0x24c], 0xcf415d72
mov dword [ebp - 0x26c], 0x66d210ec
mov dword [ebp - 0x2ac], 1
mov dword [ebp - 0x274], 0xffffffff
mov dword [ebp - 0x288], 1
mov dword [ebp - 0x27c], 1
mov dword [ebp - 0x290], 0xc946b43d
mov dword [ebp - 0x284], 1
mov dword [ebp - 0x298], 0xab551fa4
mov dword [ebp - 0x50], 0
jmp 0x100210c0
mov eax, dword [ebp - 0x50]
dec eax
mov dword [ebp - 0x50], eax
cmp dword [ebp - 0x50], 0xfffffffa
jle 0x100211d0
mov dword [ebp - 0x90], 0
mov dword [ebp - 0x2a0], 0
mov dword [ebp - 0xb4], 0xa6b42be1
mov dword [ebp - 0xa4], 0
jmp 0x10021101
mov eax, dword [ebp - 0xa4]
inc eax
mov dword [ebp - 0xa4], eax
cmp dword [ebp - 0xa4], 4
jge 0x1002111d
mov eax, dword [ebp - 0xa4]
mov dword [ebp + eax*4 - 0x354], 0xb963ab19
jmp 0x100210f4
mov dword [ebp - 0x90], 0
jmp 0x10021136
mov eax, dword [ebp - 0x90]
inc eax
mov dword [ebp - 0x90], eax
cmp dword [ebp - 0x90], 0xa
jl 0x100211cb
mov dword [ebp - 0x1e8], 0x2121f90e
mov dword [ebp - 0x230], 0xffffffff
mov dword [ebp - 0x58], 0
jmp 0x10021167
mov eax, dword [ebp - 0x58]
inc eax
mov dword [ebp - 0x58], eax
cmp dword [ebp - 0x58], 1
jge 0x1002117d
mov eax, dword [ebp - 0x58]
mov dword [ebp + eax*4 - 0x2dc], 0
jmp 0x10021160
mov eax, dword [ebp - 0x1e8]
mov dword [ebp - 0x148], eax
mov eax, dword [ebp - 0x50]
cmp dword [ebp - 0x148], eax
jle 0x100211a0
mov dword [ebp - 0xe0], 1
jmp 0x100211a7
and dword [ebp - 0xe0], 0
mov eax, dword [ebp - 0xb4]
add eax, dword [ebp - 0xe0]
mov dword [ebp - 0x230], eax
mov eax, dword [ebp - 0xb4]
dec eax
mov dword [ebp - 0xb4], eax
jmp 0x10021129
jmp 0x100210b9
xor eax, eax
inc eax
imul eax, eax, 0x1c
add eax, 0x10079740
mov dword [ebp - 0xb8], eax
mov dword [ebp - 0x44], 0x4e2db58
mov dword [ebp - 0xf4], 0x173948b0
mov dword [ebp - 0xc8], 1
mov dword [ebp - 0x44], 0
jmp 0x1002120c
mov eax, dword [ebp - 0x44]
dec eax
mov dword [ebp - 0x44], eax
cmp dword [ebp - 0x44], 0xfffffffe
jne 0x10021339
mov dword [ebp - 0x1f0], 1
push 2
lea ecx, [ebp - 0x23c]
call fcn.10001dc8
mov dword [ebp - 4], 6
mov dword [ebp - 0x60], 0
jmp 0x10021244
mov eax, dword [ebp - 0x60]
inc eax
mov dword [ebp - 0x60], eax
cmp dword [ebp - 0x60], 2
jge 0x1002125d
push dword [ebp - 0x60]
lea ecx, [ebp - 0x23c]
call fcn.10001e41
or dword [eax], 0xffffffff
jmp 0x1002123d
cmp dword [ebp - 0x44], 0
je 0x10021273
xor eax, eax
je 0x10021273
mov dword [ebp - 0xe4], 1
jmp 0x1002127a
and dword [ebp - 0xe4], 0
mov eax, dword [ebp - 0x1f0]
cmp dword [ebp - 0xe4], eax
jne 0x100212e9
mov dword [ebp - 0x218], 4
mov byte [ebp - 0x3c], 0
movzx eax, byte [ebp - 0x3c]
test eax, eax
je 0x100212a8
push 0
push 0
call dword [sym.imp.KERNEL32.dll_LoadResource]
mov eax, dword [ebp - 0x44]
mov dword [ebp - 0x294], eax
mov eax, dword [ebp - 0xf4]
cmp dword [ebp - 0x218], eax
jge 0x100212cb
mov dword [ebp - 0xec], 1
jmp 0x100212d2
and dword [ebp - 0xec], 0
push 0
lea ecx, [ebp - 0x23c]
call fcn.10001e41
mov ecx, dword [ebp - 0xec]
mov dword [eax], ecx
jmp 0x1002130b
mov dword [ebp - 0x1f8], 0xfffffff7
mov eax, dword [ebp - 0xf4]
mov dword [ebp - 0xc8], eax
mov eax, dword [ebp - 0xc8]
mov dword [ebp - 0x1f8], eax
cmp dword [ebp - 0xc8], 0
je 0x10021325
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x23c]
call fcn.10001e25
jmp 0x10021339
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x23c]
call fcn.10001e25
jmp 0x10021205
mov eax, dword [ebp - 0x164]
mov dword [0x10079b00], eax
push 3
lea ecx, [ebp - 0x1bc]
call fcn.10001dc8
mov dword [ebp - 4], 7
mov dword [ebp - 0xd8], 2
mov dword [ebp - 0xd4], 2
mov dword [ebp - 0xd0], 2
mov dword [ebp - 0xcc], 2
mov dword [ebp - 0x1c], 0xffffffff
mov dword [ebp - 0x30], 0
jmp 0x10021397
mov eax, dword [ebp - 0x30]
inc eax
mov dword [ebp - 0x30], eax
cmp dword [ebp - 0x30], 2
jge 0x100213ad
mov eax, dword [ebp - 0x30]
mov dword [ebp + eax*4 - 0xc4], 0xfffffffd
jmp 0x10021390
mov dword [ebp - 0x30], 0
jmp 0x100213bd
mov eax, dword [ebp - 0x30]
inc eax
mov dword [ebp - 0x30], eax
cmp dword [ebp - 0x30], 3
jge 0x100213d9
push dword [ebp - 0x30]
lea ecx, [ebp - 0x1bc]
call fcn.10001e41
mov dword [eax], 0x6bc3ec3d
jmp 0x100213b6
push 4
pop eax
shl eax, 0
mov dword [ebp + eax - 0xc4], 3
jmp 0x10021407
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0xc4]
dec eax
push 4
pop ecx
shl ecx, 0
mov dword [ebp + ecx - 0xc4], eax
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0xc4], 0xffffffee
jge 0x1002163e
mov dword [ebp - 0x34], 8
mov dword [ebp - 0x68], 0
jmp 0x10021432
mov eax, dword [ebp - 0x68]
inc eax
mov dword [ebp - 0x68], eax
cmp dword [ebp - 0x68], 1
jge 0x10021448
mov eax, dword [ebp - 0x68]
mov dword [ebp + eax*4 - 0x10c], 0xffffffff
jmp 0x1002142b
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x34]
mov dword [ebp + eax - 0x10c], ecx
cmp dword [ebp - 0x34], 0
je 0x10021488
mov byte [ebp - 0x3e], 0
movzx eax, byte [ebp - 0x3e]
test eax, eax
je 0x10021483
push 0x1fd0
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_RestoreDC]
jmp 0x10021639
mov dword [ebp - 0x38], 1
mov eax, dword [ebp - 0x38]
mov dword [ebp - 0x2b4], eax
mov eax, dword [ebp - 0x38]
mov dword [ebp - 0x29c], eax
push 0
lea ecx, [ebp - 0x1bc]
call fcn.10001e41
mov eax, dword [ebp - 0x38]
mov dword [ebp - 0x250], eax
mov eax, dword [ebp - 0x38]
imul eax, dword [ebp - 0x34]
cmp dword [ebp - 0x38], eax
je 0x100214cf
mov dword [ebp - 0xfc], 1
jmp 0x100214d6
and dword [ebp - 0xfc], 0
mov eax, dword [ebp - 0xfc]
neg eax
cmp eax, dword [ebp - 0x34]
jg 0x100214ef
mov dword [ebp - 0x104], 1
jmp 0x100214f6
and dword [ebp - 0x104], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xc4]
cmp dword [ebp - 0x104], eax
jg 0x10021517
mov dword [ebp - 0x1c4], 1
jmp 0x1002151e
and dword [ebp - 0x1c4], 0
mov eax, dword [ebp - 0x34]
mov dword [ebp - 0x258], eax
mov eax, dword [ebp - 0x38]
mov dword [ebp - 0x260], eax
cmp dword [ebp - 0x38], 0x2002
jl 0x10021545
mov dword [ebp - 0x114], 1
jmp 0x1002154c
and dword [ebp - 0x114], 0
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0xd8]
inc eax
mov dword [ebp - 0xac], eax
push 4
pop eax
shl eax, 1
mov ecx, dword [ebp - 0xac]
mov dword [ebp + eax - 0xd8], ecx
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0xac]
mov dword [ebp + eax - 0x10c], ecx
mov eax, dword [ebp - 0xac]
cmp eax, dword [ebp - 0x114]
jle 0x1002159e
mov dword [ebp - 0x11c], 1
jmp 0x100215a5
and dword [ebp - 0x11c], 0
push 1
lea ecx, [ebp - 0x1bc]
call fcn.10001e41
mov ecx, dword [ebp - 0x11c]
cmp ecx, dword [eax]
je 0x100215c8
mov dword [ebp - 0xdc], 1
jmp 0x100215cf
and dword [ebp - 0xdc], 0
mov eax, dword [ebp - 0x38]
cmp dword [ebp - 0xdc], eax
jge 0x100215e6
mov dword [ebp - 0x12c], 1
jmp 0x100215ed
and dword [ebp - 0x12c], 0
push 4
pop eax
shl eax, 0
mov esi, dword [ebp + eax - 0xc4]
add esi, dword [ebp - 0x12c]
push 1
lea ecx, [ebp - 0x1bc]
call fcn.10001e41
mov dword [eax], esi
mov dword [ebp - 0x34], 0
jmp 0x1002161f
mov eax, dword [ebp - 0x34]
dec eax
mov dword [ebp - 0x34], eax
cmp dword [ebp - 0x34], 0
jl 0x10021639
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0xc4], 0
je 0x10021637
jmp 0x10021639
jmp 0x10021618
jmp 0x100213ec
mov dword [ebp - 0x1c], 0
jmp 0x1002164e
mov eax, dword [ebp - 0x1c]
inc eax
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 2
jg 0x100217aa
mov dword [ebp - 0xb0], 0xe5de2cae
mov dword [ebp - 0x1cc], 4
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0xd4], 0xfff7
push 3
pop eax
sub eax, 0xfff7
je 0x100216f6
mov eax, dword [ebp - 0x1c]
mov ecx, dword [ebp - 0xb0]
cmp dword [ebp + eax*4 - 0xd4], ecx
jl 0x100216a2
mov dword [ebp - 0x134], 1
jmp 0x100216a9
and dword [ebp - 0x134], 0
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp + eax*4 - 0xd4]
imul eax, dword [ebp - 0x134]
mov ecx, dword [ebp - 0x1c]
cmp eax, dword [ebp + ecx*4 - 0xd4]
jge 0x100216d2
mov dword [ebp - 0x13c], 1
jmp 0x100216d9
and dword [ebp - 0x13c], 0
mov eax, dword [ebp - 0xb0]
imul eax, dword [ebp - 0x13c]
test eax, eax
je 0x100216f6
mov dword [ebp - 0x144], 1
jmp 0x100216fd
and dword [ebp - 0x144], 0
cmp dword [ebp - 0x144], 1
jae 0x10021712
mov dword [ebp - 0x14c], 1
jmp 0x10021719
and dword [ebp - 0x14c], 0
mov eax, dword [ebp - 0xb0]
cmp eax, dword [ebp - 0x14c]
jg 0x10021733
mov dword [ebp - 0x154], 1
jmp 0x1002173a
and dword [ebp - 0x154], 0
push dword [ebp - 0x1c]
lea ecx, [ebp - 0x1bc]
call fcn.10001e41
mov ecx, dword [ebp - 0x154]
mov dword [eax], ecx
mov eax, dword [ebp - 0x1c]
mov ecx, dword [ebp - 0x1c]
mov eax, dword [ebp + eax*4 - 0xd4]
mov dword [ebp + ecx*4 - 0xd4], eax
mov eax, dword [ebp - 0x1c]
mov esi, dword [ebp + eax*4 - 0xd4]
push 1
lea ecx, [ebp - 0x1bc]
call fcn.10001e41
sub esi, dword [eax]
mov dword [ebp - 0x15c], esi
push dword [ebp - 0x1c]
lea ecx, [ebp - 0x1bc]
call fcn.10001e41
mov ecx, dword [ebp - 0x15c]
mov dword [eax], ecx
mov eax, dword [ebp - 0x15c]
mov dword [ebp - 0x1cc], eax
jmp 0x10021647
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x1bc]
call fcn.10001e25
mov eax, dword [ebp - 0xb8]
mov dword [0x10079b04], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0xb8]
push dword [ecx + eax]
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x164]
push dword [ecx + eax]
call fcn.10020595
pop ecx
pop ecx
mov dword [ebp - 0x1d4], eax
push dword [ebp - 0xb8]
mov edx, 0x100795f4
mov ecx, dword [ebp - 0x1d4]
call fcn.1002062f
pop ecx
mov dword [ebp - 0x24], 0xe05dae5a
mov dword [ebp - 0x16c], 0x3ae0
mov dword [ebp - 0x1e4], str.chjbwv_dskimlthc_jdgikuq_lof_qij_xpcvo
cmp dword [ebp - 0x16c], 0x3cf3
jle 0x100218b2
and dword [ebp - 0x70], 0
jmp 0x1002183e
mov eax, dword [ebp - 0x70]
inc eax
mov dword [ebp - 0x70], eax
cmp dword [ebp - 0x70], 0xf0f
jge 0x100218b2
and dword [ebp - 0x78], 0
jmp 0x10021854
mov eax, dword [ebp - 0x78]
inc eax
mov dword [ebp - 0x78], eax
cmp dword [ebp - 0x78], 0x44dd
jge 0x100218b0
mov eax, dword [ebp - 0x70]
mov ecx, dword [ebp - 0x78]
shl eax, cl
cdq
mov dword [ebp - 0x220], eax
mov dword [ebp - 0x21c], edx
push dword [ebp - 0x21c]
push dword [ebp - 0x220]
lea ecx, [ebp - 0x344]
call fcn.10001a31
pop ecx
pop ecx
mov dword [ebp - 0x1dc], eax
mov ecx, dword [ebp - 0x1dc]
call fcn.10001c93
push eax
call fcn.100490c6
pop ecx
lea ecx, [ebp - 0x344]
call fcn.10001c89
jmp 0x1002184d
jmp 0x10021837
mov dword [ebp - 0x48], 0x77278fa8
mov dword [ebp - 4], 8
cmp dword [ebp - 0x16c], 0x3712
jge 0x100218d8
push dword [ebp - 0x1e4]
call fcn.100490c6
pop ecx
jmp 0x100218f4
or dword [ebp - 4], 0xffffffff
jmp 0x100218fe
mov dword [ebp - 0x1ec], 0
cmp dword [ebp - 0x24], 0
je 0x10021920
cmp dword [ebp - 0x24], 0
je 0x10021920
mov dword [ebp - 0x174], 1
jmp 0x10021927
and dword [ebp - 0x174], 0
mov eax, dword [ebp - 0x24]
cmp dword [ebp - 0x174], eax
jne 0x1002193e
mov dword [ebp - 0x17c], 1
jmp 0x10021945
and dword [ebp - 0x17c], 0
mov eax, dword [ebp - 0x24]
sub eax, 8
mov dword [ebp - 0x48], eax
mov eax, 0x8e1b8814
sub eax, dword [ebp - 0x24]
cmp dword [ebp - 0x17c], eax
jle 0x1002196a
mov dword [ebp - 0x184], 1
jmp 0x10021971
and dword [ebp - 0x184], 0
mov eax, dword [ebp - 0x24]
cmp dword [ebp - 0x184], eax
jl 0x10021988
mov dword [ebp - 0x18c], 1
jmp 0x1002198f
and dword [ebp - 0x18c], 0
mov eax, dword [ebp - 0x24]
cmp dword [ebp - 0x18c], eax
jge 0x100219a6
mov dword [ebp - 0x194], 1
jmp 0x100219ad
and dword [ebp - 0x194], 0
mov eax, dword [ebp - 0x194]
add eax, 0x30cc0dd
je 0x100219df
mov byte [ebp - 0x39], 0
movzx eax, byte [ebp - 0x39]
test eax, eax
je 0x100219da
push 0x2440
push 0
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetClassNameW]
jmp 0x10021ac8
mov dword [ebp - 0x24], 0
jmp 0x100219ef
mov eax, dword [ebp - 0x24]
inc eax
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 0xf
jge 0x10021aad
push 1
lea ecx, [ebp - 0x2e8]
call fcn.10001dc8
mov dword [ebp - 4], 0xa
mov dword [ebp - 0x80], 0
jmp 0x10021a1d
mov eax, dword [ebp - 0x80]
inc eax
mov dword [ebp - 0x80], eax
cmp dword [ebp - 0x80], 1
jge 0x10021a39
push dword [ebp - 0x80]
lea ecx, [ebp - 0x2e8]
call fcn.10001e41
mov dword [eax], 0x5256ee97
jmp 0x10021a16
mov dword [ebp - 0x48], 0
jmp 0x10021a49
mov eax, dword [ebp - 0x48]
dec eax
mov dword [ebp - 0x48], eax
cmp dword [ebp - 0x48], 0
jl 0x10021a68
mov byte [ebp - 0x3d], 0
movzx eax, byte [ebp - 0x3d]
test eax, eax
je 0x10021a66
push 0x128c
call dword [sym.imp.KERNEL32.dll_SetErrorMode]
jmp 0x10021a42
mov byte [ebp - 0x3b], 0
movzx eax, byte [ebp - 0x3b]
test eax, eax
je 0x10021a99
push 0x96e
push 0
push 0x20a9
push 0x1933
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_TextOutA]
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x2e8]
call fcn.10001e25
jmp 0x100219e8
mov byte [ebp - 0x3a], 0
movzx eax, byte [ebp - 0x3a]
test eax, eax
je 0x10021ac8
push 0
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_SetWindowTextW]
cmp dword [ebp - 0x1ec], 0
jne 0x10021ae3
mov eax, 0xe10e5e53
test eax, eax
jne 0x10021ae3
and dword [ebp - 0x19c], 0
jmp 0x10021aed
mov dword [ebp - 0x19c], 1
mov eax, dword [ebp - 0x19c]
mov dword [ebp - 0x48], eax
mov esi, 0x10079b00
mov edi, dword [ebp + 8]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
mov eax, dword [ebp + 8]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret