Function at 0x10018017
Capabilities:
Allocate thread local storage
Check os version
Delete file
Delete registry key
Encrypt data using speck

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x10065822
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
push ecx
sub esp, 0xe30
push ebx
push esi
push edi
mov dword [ebp - 0x10], esp
push 1
lea ecx, [ebp - 0x34c]
call fcn.10006b10
and dword [ebp - 4], 0
mov dword [ebp - 0x798], 7
mov dword [ebp - 0x7a0], 0x5520f303
mov dword [ebp - 0x64c], 0
mov dword [ebp - 0x54], 0
jmp 0x1001807b
mov eax, dword [ebp - 0x54]
inc eax
mov dword [ebp - 0x54], eax
cmp dword [ebp - 0x54], 1
jge 0x10018097
push dword [ebp - 0x54]
lea ecx, [ebp - 0x34c]
call fcn.10006b8e
mov dword [eax], 1
jmp 0x10018074
mov dword [ebp - 0x54], 0
jmp 0x100180a7
mov eax, dword [ebp - 0x54]
inc eax
mov dword [ebp - 0x54], eax
cmp dword [ebp - 0x54], 2
jge 0x100180bd
mov eax, dword [ebp - 0x54]
mov dword [ebp + eax*4 - 0x754], 0xffffffff
jmp 0x100180a0
mov byte [ebp - 0xb6], 0
movzx eax, byte [ebp - 0xb6]
test eax, eax
je 0x1001810b
push 0x3fc
push 0x1a79
push 0x241d
push 0
push 0xd9f
push 0x24ff
push 0x408
push 0x131
push 0x719
push 0x1fcb
push 0xb84
push 0x5d
call dword [sym.imp.GDI32.dll_MaskBlt]
push 0
lea ecx, [ebp - 0x34c]
call fcn.10006b8e
mov dword [eax], 0x15
jmp 0x10018144
push 0
lea ecx, [ebp - 0x34c]
call fcn.10006b8e
mov dword [ebp - 0x3f0], eax
mov eax, dword [ebp - 0x3f0]
mov eax, dword [eax]
dec eax
mov ecx, dword [ebp - 0x3f0]
mov dword [ecx], eax
push 0
lea ecx, [ebp - 0x34c]
call fcn.10006b8e
cmp dword [eax], 6
je 0x100183c7
mov dword [ebp - 0xf0], 0x995f7626
mov dword [ebp - 0x13c], 0xf1e2cd84
push 4
pop eax
imul eax, eax, 0
mov esi, dword [ebp + eax - 0x754]
push 0
lea ecx, [ebp - 0x34c]
call fcn.10006b8e
cmp dword [eax], esi
je 0x10018198
mov dword [ebp - 0x70c], 1
jmp 0x1001819f
and dword [ebp - 0x70c], 0
cmp dword [ebp - 0xf0], 0xc422d5fb
jbe 0x100181b7
mov dword [ebp - 0x6e0], 1
jmp 0x100181be
and dword [ebp - 0x6e0], 0
cmp dword [ebp - 0x6e0], 0x522a
jl 0x100181dc
cmp dword [ebp - 0xf0], 0
jne 0x100181dc
and dword [ebp - 0x704], 0
jmp 0x100181e6
mov dword [ebp - 0x704], 1
push 0
lea ecx, [ebp - 0x34c]
call fcn.10006b8e
mov ecx, dword [ebp - 0x704]
cmp ecx, dword [eax]
jl 0x10018209
mov dword [ebp - 0x890], 1
jmp 0x10018210
and dword [ebp - 0x890], 0
mov eax, 0x840d
test eax, eax
jne 0x10018225
mov dword [ebp - 0x790], 1
jmp 0x1001822c
and dword [ebp - 0x790], 0
mov eax, dword [ebp - 0xf0]
mov dword [ebp - 0xcc0], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x754]
mov dword [ebp - 0x798], eax
mov eax, dword [ebp - 0xf0]
imul eax, dword [ebp - 0x70c]
cmp eax, dword [ebp - 0x7a0]
jle 0x10018275
cmp dword [ebp - 0x64c], 0
je 0x10018275
mov dword [ebp - 0x714], 1
jmp 0x1001827c
and dword [ebp - 0x714], 0
cmp dword [ebp - 0x714], 0xfffa
je 0x10018294
mov dword [ebp - 0x71c], 1
jmp 0x1001829b
and dword [ebp - 0x71c], 0
mov eax, dword [ebp - 0x71c]
mov dword [ebp - 0xf0], eax
mov eax, dword [ebp - 0xf0]
imul eax, dword [ebp - 0x13c]
cmp eax, dword [ebp - 0x13c]
jle 0x100182c8
mov dword [ebp - 0x868], 1
jmp 0x100182cf
and dword [ebp - 0x868], 0
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x754], 0
je 0x100182ef
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x754], 0
jne 0x10018301
mov eax, 0x867f5d1c
test eax, eax
jne 0x10018301
and dword [ebp - 0x710], 0
jmp 0x1001830b
mov dword [ebp - 0x710], 1
mov eax, dword [ebp - 0x13c]
cmp dword [ebp - 0x710], eax
jge 0x10018325
mov dword [ebp - 0x6d8], 1
jmp 0x1001832c
and dword [ebp - 0x6d8], 0
mov eax, dword [ebp - 0x64c]
cmp dword [ebp - 0x6d8], eax
jg 0x1001834c
mov eax, 0x3523
test eax, eax
jne 0x1001834c
and dword [ebp - 0x35c], 0
jmp 0x10018356
mov dword [ebp - 0x35c], 1
mov eax, dword [ebp - 0x13c]
cmp dword [ebp - 0x35c], eax
jl 0x10018370
mov dword [ebp - 0x554], 1
jmp 0x10018377
and dword [ebp - 0x554], 0
push 0
lea ecx, [ebp - 0x34c]
call fcn.10006b8e
mov esi, dword [eax]
imul esi, dword [ebp - 0x554]
push 0
lea ecx, [ebp - 0x34c]
call fcn.10006b8e
cmp dword [eax], esi
jle 0x100183ac
xor eax, eax
inc eax
jne 0x100183ac
and dword [ebp - 0x364], 0
jmp 0x100183b6
mov dword [ebp - 0x364], 1
mov eax, dword [ebp - 0x364]
mov dword [ebp - 0x13c], eax
jmp 0x10018120
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x34c]
call fcn.10006b72
mov dword [ebp - 0x374], 0x279f
mov dword [ebp - 0x880], str.dlmwkrn_qodqdzu_lgofxt_srex_knbfcasxv_rspkplm
cmp dword [ebp - 0x374], 0x28f5
jle 0x100184d0
and dword [ebp - 0x188], 0
jmp 0x10018410
mov eax, dword [ebp - 0x188]
inc eax
mov dword [ebp - 0x188], eax
cmp dword [ebp - 0x188], 0x1bf2
jge 0x100184d0
and dword [ebp - 0x2e4], 0
jmp 0x10018436
mov eax, dword [ebp - 0x2e4]
inc eax
mov dword [ebp - 0x2e4], eax
cmp dword [ebp - 0x2e4], 0x56bd
jge 0x100184cb
and dword [ebp - 0x2a4], 0
jmp 0x1001845c
mov eax, dword [ebp - 0x2a4]
inc eax
mov dword [ebp - 0x2a4], eax
cmp dword [ebp - 0x2a4], 0x117a
jge 0x100184c6
mov eax, dword [ebp - 0x2e4]
imul eax, dword [ebp - 0x2a4]
and eax, dword [ebp - 0x188]
cdq
mov dword [ebp - 0x7ac], eax
mov dword [ebp - 0x7a8], edx
push dword [ebp - 0x7a8]
push dword [ebp - 0x7ac]
lea ecx, [ebp - 0xe24]
call fcn.10001ac9
pop ecx
pop ecx
mov dword [ebp - 0x870], eax
mov ecx, dword [ebp - 0x870]
call fcn.10006659
push eax
call fcn.1004e1ed
pop ecx
lea ecx, [ebp - 0xe24]
call fcn.1000664f
jmp 0x1001844f
jmp 0x10018429
jmp 0x10018403
mov dword [ebp - 0xb54], 0x4e2db58
mov dword [ebp - 0xcb4], 7
mov dword [ebp - 0xb5c], 0x17ca0029
mov dword [ebp - 0xc3c], 0x97f0a290
mov dword [ebp - 0xb64], 0xbea12209
mov dword [ebp - 0xc7c], 0x9f361739
mov dword [ebp - 0xb6c], 0xbbdebf88
mov dword [ebp - 0x6cc], 9
mov dword [ebp - 0x55c], 0xffff
mov dword [ebp - 0x260], 0
jmp 0x10018543
mov eax, dword [ebp - 0x260]
inc eax
mov dword [ebp - 0x260], eax
cmp dword [ebp - 0x260], 3
jge 0x1001855f
mov eax, dword [ebp - 0x260]
mov dword [ebp + eax*4 - 0xe30], 2
jmp 0x10018536
mov dword [ebp - 0x36c], 0x5eb3
mov dword [ebp - 0x878], str.thuee_huoj_lufhzhyy_afgdtlr_bmy_niguupiy
cmp dword [ebp - 0x36c], 0x5fd1
jle 0x100185f6
and dword [ebp - 0x190], 0
jmp 0x10018595
mov eax, dword [ebp - 0x190]
inc eax
mov dword [ebp - 0x190], eax
cmp dword [ebp - 0x190], 0x2b37
jge 0x100185f6
and dword [ebp - 0x2a8], 0
jmp 0x100185b7
mov eax, dword [ebp - 0x2a8]
inc eax
mov dword [ebp - 0x2a8], eax
cmp dword [ebp - 0x2a8], 0x732b
jge 0x100185f4
mov eax, dword [ebp - 0x190]
xor eax, dword [ebp - 0x2a8]
cdq
mov dword [ebp - 0x7b8], eax
mov dword [ebp - 0x7b4], edx
push dword [ebp - 0x7b4]
push dword [ebp - 0x7b8]
mov ecx, 0x100809d8
call fcn.10006801
jmp 0x100185aa
jmp 0x10018588
mov eax, dword [ebp - 0x6cc]
inc eax
mov dword [ebp - 0x6cc], eax
mov dword [ebp - 4], 1
cmp dword [ebp - 0x36c], 0x5db5
jge 0x10018626
mov edx, dword [ebp - 0x878]
mov ecx, 0x100809d8
call fcn.1000b005
jmp 0x10018642
or dword [ebp - 4], 0xffffffff
jmp 0x1001864c
mov eax, dword [ebp - 0x55c]
inc eax
mov dword [ebp - 0x55c], eax
mov dword [ebp - 4], 3
cmp dword [ebp - 0x374], 0x272c
jge 0x10018678
push dword [ebp - 0x880]
call fcn.1004e1ed
pop ecx
jmp 0x10018694
or dword [ebp - 4], 0xffffffff
jmp 0x1001869e
cmp dword [0x10081b20], 0
jne 0x1001d079
push 1
lea ecx, [ebp - 0x340]
call fcn.10006b10
mov dword [ebp - 4], 5
mov dword [ebp - 0x654], 0x7f9a
mov dword [ebp - 0x888], str.gyp_iomjrd_pvvzfa_ivhfwbkyc_xuz_tlxns_piequywgn_shezwkhz
cmp dword [ebp - 0x654], 0x7fbb
jle 0x10018798
push 0
push 0
push 0
call dword [sym.imp.OLEAUT32.dll_SysStringByteLen]
and dword [ebp - 0x1a0], 0
jmp 0x10018705
mov eax, dword [ebp - 0x1a0]
inc eax
mov dword [ebp - 0x1a0], eax
cmp dword [ebp - 0x1a0], 0x469f
jge 0x10018798
and dword [ebp - 0x198], 0
jmp 0x1001872b
mov eax, dword [ebp - 0x198]
inc eax
mov dword [ebp - 0x198], eax
cmp dword [ebp - 0x198], 0x48a8
jge 0x10018793
and dword [ebp - 0x268], 0
jmp 0x1001874d
mov eax, dword [ebp - 0x268]
inc eax
mov dword [ebp - 0x268], eax
cmp dword [ebp - 0x268], 0x71d2
jge 0x10018791
mov eax, dword [ebp - 0x198]
imul eax, dword [ebp - 0x268]
or eax, dword [ebp - 0x1a0]
cdq
mov dword [ebp - 0x7c4], eax
mov dword [ebp - 0x7c0], edx
push dword [ebp - 0x7c0]
push dword [ebp - 0x7c4]
mov ecx, 0x100809d8
call fcn.10006801
jmp 0x10018740
jmp 0x1001871e
jmp 0x100186f8
mov dword [ebp - 0x8a0], 7
mov byte [ebp - 4], 6
cmp dword [ebp - 0x654], 0x7bff
jge 0x100187c2
mov edx, dword [ebp - 0x888]
mov ecx, 0x100809d8
call fcn.1000b005
jmp 0x100187de
mov dword [ebp - 4], 5
jmp 0x100187ee
mov dword [ebp - 0x8a8], 0x5520f303
mov dword [ebp - 0x65c], 0
mov dword [ebp - 0x90], 0
jmp 0x1001881b
mov eax, dword [ebp - 0x90]
inc eax
mov dword [ebp - 0x90], eax
cmp dword [ebp - 0x90], 1
jge 0x1001883d
push dword [ebp - 0x90]
lea ecx, [ebp - 0x340]
call fcn.10006b8e
mov dword [eax], 1
jmp 0x1001880e
mov dword [ebp - 0x90], 0
jmp 0x10018856
mov eax, dword [ebp - 0x90]
inc eax
mov dword [ebp - 0x90], eax
cmp dword [ebp - 0x90], 2
jge 0x10018872
mov eax, dword [ebp - 0x90]
mov dword [ebp + eax*4 - 0x75c], 0xffffffff
jmp 0x10018849
mov byte [ebp - 0xb0], 0
movzx eax, byte [ebp - 0xb0]
test eax, eax
je 0x100188c0
push 0x3fc
push 0x1a79
push 0x241d
push 0
push 0xd9f
push 0x24ff
push 0x408
push 0x131
push 0x719
push 0x1fcb
push 0xb84
push 0x5d
call dword [sym.imp.GDI32.dll_MaskBlt]
push 0
lea ecx, [ebp - 0x340]
call fcn.10006b8e
mov dword [eax], 0x15
jmp 0x100188f9
push 0
lea ecx, [ebp - 0x340]
call fcn.10006b8e
mov dword [ebp - 0x37c], eax
mov eax, dword [ebp - 0x37c]
mov eax, dword [eax]
dec eax
mov ecx, dword [ebp - 0x37c]
mov dword [ecx], eax
push 0
lea ecx, [ebp - 0x340]
call fcn.10006b8e
cmp dword [eax], 6
je 0x10018b7c
mov dword [ebp - 0xf4], 0x995f7626
mov dword [ebp - 0x100], 0xf1e2cd84
push 4
pop eax
imul eax, eax, 0
mov esi, dword [ebp + eax - 0x75c]
push 0
lea ecx, [ebp - 0x340]
call fcn.10006b8e
cmp dword [eax], esi
je 0x1001894d
mov dword [ebp - 0x720], 1
jmp 0x10018954
and dword [ebp - 0x720], 0
cmp dword [ebp - 0xf4], 0xc422d5fb
jbe 0x1001896c
mov dword [ebp - 0x564], 1
jmp 0x10018973
and dword [ebp - 0x564], 0
cmp dword [ebp - 0x564], 0x522a
jl 0x10018991
cmp dword [ebp - 0xf4], 0
jne 0x10018991
and dword [ebp - 0x384], 0
jmp 0x1001899b
mov dword [ebp - 0x384], 1
push 0
lea ecx, [ebp - 0x340]
call fcn.10006b8e
mov ecx, dword [ebp - 0x384]
cmp ecx, dword [eax]
jl 0x100189be
mov dword [ebp - 0x784], 1
jmp 0x100189c5
and dword [ebp - 0x784], 0
mov eax, 0x840d
test eax, eax
jne 0x100189da
mov dword [ebp - 0x898], 1
jmp 0x100189e1
and dword [ebp - 0x898], 0
mov eax, dword [ebp - 0xf4]
mov dword [ebp - 0xba4], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x75c]
mov dword [ebp - 0x8a0], eax
mov eax, dword [ebp - 0xf4]
imul eax, dword [ebp - 0x720]
cmp eax, dword [ebp - 0x8a8]
jle 0x10018a2a
cmp dword [ebp - 0x65c], 0
je 0x10018a2a
mov dword [ebp - 0x38c], 1
jmp 0x10018a31
and dword [ebp - 0x38c], 0
cmp dword [ebp - 0x38c], 0xfffa
je 0x10018a49
mov dword [ebp - 0x56c], 1
jmp 0x10018a50
and dword [ebp - 0x56c], 0
mov eax, dword [ebp - 0x56c]
mov dword [ebp - 0xf4], eax
mov eax, dword [ebp - 0xf4]
imul eax, dword [ebp - 0x100]
cmp eax, dword [ebp - 0x100]
jle 0x10018a7d
mov dword [ebp - 0x8b0], 1
jmp 0x10018a84
and dword [ebp - 0x8b0], 0
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x75c], 0
je 0x10018aa4
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x75c], 0
jne 0x10018ab6
mov eax, 0x867f5d1c
test eax, eax
jne 0x10018ab6
and dword [ebp - 0x394], 0
jmp 0x10018ac0
mov dword [ebp - 0x394], 1
mov eax, dword [ebp - 0x100]
cmp dword [ebp - 0x394], eax
jge 0x10018ada
mov dword [ebp - 0x39c], 1
jmp 0x10018ae1
and dword [ebp - 0x39c], 0
mov eax, dword [ebp - 0x65c]
cmp dword [ebp - 0x39c], eax
jg 0x10018b01
mov eax, 0x3523
test eax, eax
jne 0x10018b01
and dword [ebp - 0x574], 0
jmp 0x10018b0b
mov dword [ebp - 0x574], 1
mov eax, dword [ebp - 0x100]
cmp dword [ebp - 0x574], eax
jl 0x10018b25
mov dword [ebp - 0x3a4], 1
jmp 0x10018b2c
and dword [ebp - 0x3a4], 0
push 0
lea ecx, [ebp - 0x340]
call fcn.10006b8e
mov esi, dword [eax]
imul esi, dword [ebp - 0x3a4]
push 0
lea ecx, [ebp - 0x340]
call fcn.10006b8e
cmp dword [eax], esi
jle 0x10018b61
xor eax, eax
inc eax
jne 0x10018b61
and dword [ebp - 0x6d4], 0
jmp 0x10018b6b
mov dword [ebp - 0x6d4], 1
mov eax, dword [ebp - 0x6d4]
mov dword [ebp - 0x100], eax
jmp 0x100188d5
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x340]
call fcn.10006b72
mov dword [ebp - 0x9c], 4
mov dword [ebp - 0x1a8], 0xd850270f
mov dword [ebp - 0x314], 1
push 1
lea ecx, [ebp - 0x8c0]
call fcn.10006b10
mov dword [ebp - 4], 8
mov dword [ebp - 0x994], 0xc7fd579d
mov dword [ebp - 0x990], 0xc7fd579d
mov dword [ebp - 0x98c], 0xc7fd579d
mov dword [ebp - 0x988], 0xc7fd579d
mov dword [ebp - 0x17c], 0
jmp 0x10018bfe
mov eax, dword [ebp - 0x17c]
inc eax
mov dword [ebp - 0x17c], eax
cmp dword [ebp - 0x17c], 1
jge 0x10018c1d
push dword [ebp - 0x17c]
lea ecx, [ebp - 0x8c0]
call fcn.10006b8e
and dword [eax], 0
jmp 0x10018bf1
mov dword [ebp - 0x9c], 0x13
jmp 0x10018c36
mov eax, dword [ebp - 0x9c]
dec eax
mov dword [ebp - 0x9c], eax
cmp dword [ebp - 0x9c], 7
jne 0x10018d61
mov dword [ebp - 0x5c], 8
mov eax, dword [ebp - 0x5c]
cmp eax, dword [ebp - 0x5c]
jl 0x10018c5e
mov dword [ebp - 0x960], 1
jmp 0x10018c65
and dword [ebp - 0x960], 0
mov eax, 0x9d08
sub eax, dword [ebp - 0x5c]
cmp eax, dword [ebp - 0x5c]
jne 0x10018c7e
mov dword [ebp - 0x3ac], 1
jmp 0x10018c85
and dword [ebp - 0x3ac], 0
mov eax, dword [ebp - 0x5c]
cmp dword [ebp - 0x3ac], eax
jge 0x10018c9c
mov dword [ebp - 0x57c], 1
jmp 0x10018ca3
and dword [ebp - 0x57c], 0
mov eax, dword [ebp - 0x5c]
imul eax, dword [ebp - 0x57c]
cmp eax, dword [ebp - 0x5c]
je 0x10018cbe
mov dword [ebp - 0x3b4], 1
jmp 0x10018cc5
and dword [ebp - 0x3b4], 0
mov eax, dword [ebp - 0x5c]
cmp dword [ebp - 0x3b4], eax
jge 0x10018ce2
cmp dword [ebp - 0x9c], 0
jne 0x10018ce2
and dword [ebp - 0x664], 0
jmp 0x10018cec
mov dword [ebp - 0x664], 1
mov eax, dword [ebp - 0x1a8]
cmp dword [ebp - 0x664], eax
jge 0x10018d06
mov dword [ebp - 0x3bc], 1
jmp 0x10018d0d
and dword [ebp - 0x3bc], 0
cmp dword [ebp - 0x3bc], 0x74006310
jg 0x10018d25
mov dword [ebp - 0x584], 1
jmp 0x10018d2c
and dword [ebp - 0x584], 0
mov eax, dword [ebp - 0x5c]
imul eax, dword [ebp - 0x584]
cmp eax, 0xfffb
je 0x10018d49
mov dword [ebp - 0x3c4], 1
jmp 0x10018d50
and dword [ebp - 0x3c4], 0
mov eax, dword [ebp - 0x3c4]
mov dword [ebp - 0x314], eax
jmp 0x10018c29
mov eax, dword [ebp - 0x1a8]
mov dword [ebp - 0xb74], eax
mov eax, dword [ebp - 0x1a8]
mov dword [ebp - 0xbac], eax
mov eax, dword [ebp - 0x9c]
mov dword [ebp - 0xb7c], eax
mov eax, dword [ebp - 0x314]
mov dword [ebp - 0xbb4], eax
push 0
lea ecx, [ebp - 0x8c0]
call fcn.10006b8e
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x994], 0x9531defc
ja 0x10018dbd
mov dword [ebp - 0x6e8], 1
jmp 0x10018dc4
and dword [ebp - 0x6e8], 0
push 0
lea ecx, [ebp - 0x8c0]
call fcn.10006b8e
mov ecx, dword [ebp - 0x6e8]
cmp ecx, dword [eax]
jg 0x10018de7
mov dword [ebp - 0x3cc], 1
jmp 0x10018dee
and dword [ebp - 0x3cc], 0
cmp dword [ebp - 0x3cc], 0x1c1d
jne 0x10018e06
mov dword [ebp - 0x2ec], 1
jmp 0x10018e0d
and dword [ebp - 0x2ec], 0
push 0
lea ecx, [ebp - 0x8c0]
call fcn.10006b8e
mov ecx, dword [ebp - 0x2ec]
mov dword [eax], ecx
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x994]
cmp dword [ebp - 0x2ec], eax
jl 0x10018e43
mov dword [ebp - 0x58c], 1
jmp 0x10018e4a
and dword [ebp - 0x58c], 0
mov eax, dword [ebp - 0x1a8]
cmp dword [ebp - 0x58c], eax
jl 0x10018e64
mov dword [ebp - 0x3d4], 1
jmp 0x10018e6b
and dword [ebp - 0x3d4], 0
push 4
pop eax
imul eax, eax, 3
mov ecx, dword [ebp - 0x3d4]
sub ecx, dword [ebp - 0x314]
cmp ecx, dword [ebp + eax - 0x994]
jge 0x10018e92
mov dword [ebp - 0x66c], 1
jmp 0x10018e99
and dword [ebp - 0x66c], 0
mov eax, dword [ebp - 0x9c]
cmp dword [ebp - 0x66c], eax
jg 0x10018eb3
mov dword [ebp - 0x3dc], 1
jmp 0x10018eba
and dword [ebp - 0x3dc], 0
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x3dc]
add ecx, 3
cmp ecx, dword [ebp + eax - 0x994]
jg 0x10018ede
mov dword [ebp - 0x594], 1
jmp 0x10018ee5
and dword [ebp - 0x594], 0
mov eax, dword [ebp - 0x594]
sub eax, 0xd905
mov dword [ebp - 0x9c], eax
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x8c0]
call fcn.10006b72
mov dword [ebp - 0x270], 0
jmp 0x10018f1e
mov eax, dword [ebp - 0x270]
inc eax
mov dword [ebp - 0x270], eax
cmp dword [ebp - 0x270], 1
jge 0x10018f3a
mov eax, dword [ebp - 0x270]
mov dword [ebp + eax*4 - 0x1b0], 0xffffffff
jmp 0x10018f11
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0x1b0], 0x11
jmp 0x10018f68
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x1b0]
dec eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x1b0], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x1b0], 0xfffffffe
jle 0x10018f9a
mov dword [ebp - 0x78c], 0
mov dword [ebp - 0x788], 0
mov eax, dword [ebp - 0x78c]
mov dword [ebp - 0x788], eax
jmp 0x10018f4d
mov byte [ebp - 0x158], 1
mov byte [ebp - 0x157], 1
mov byte [ebp - 0x156], 0xb
mov byte [ebp - 0x155], 9
mov byte [ebp - 0x154], 3
mov byte [ebp - 0x153], 0xef
mov byte [ebp - 0x152], 0x2e
mov byte [ebp - 0x151], 0x33
mov byte [ebp - 0x150], 4
mov byte [ebp - 0x14f], 9
mov byte [ebp - 0x14e], 9
mov byte [ebp - 0x14d], 1
mov byte [ebp - 0x14c], 3
mov byte [ebp - 0x14b], 0xa
mov byte [ebp - 0x14a], 0
mov byte [ebp - 0x149], 0x25
mov byte [ebp - 0x148], 6
mov byte [ebp - 0x147], 0x78
mov byte [ebp - 0x146], 0xa
mov byte [ebp - 0x145], 0x5f
mov byte [ebp - 0x144], 5
mov byte [ebp - 0x143], 0
mov byte [ebp - 0x142], 8
mov byte [ebp - 0x141], 0x42
mov byte [ebp - 0x140], 7
mov byte [ebp - 0x13f], 0x1c
mov byte [ebp - 0x13e], 2
mov byte [ebp - 0x13d], 0x40
xor eax, eax
inc eax
shl eax, 0
movzx eax, byte [ebp + eax - 0x158]
and eax, 0x64
xor ecx, ecx
inc ecx
shl ecx, 0
movzx ecx, byte [ebp + ecx - 0x158]
or ecx, 0x64
sub ecx, eax
xor eax, eax
inc eax
imul eax, eax, 0
movzx eax, byte [ebp + eax - 0x158]
mov word [ebp + eax*2 - 0xae0], cx
push 4
lea ecx, [ebp - 0x128]
call fcn.10006b10
mov dword [ebp - 4], 9
mov dword [ebp - 0x108], 0x51c8b9ba
mov dword [ebp - 0x24], 0
jmp 0x100190c6
mov eax, dword [ebp - 0x24]
inc eax
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 3
jge 0x100190dc
mov eax, dword [ebp - 0x24]
mov dword [ebp + eax*4 - 0x32c], 2
jmp 0x100190bf
mov dword [ebp - 0x24], 0
jmp 0x100190ec
mov eax, dword [ebp - 0x24]
inc eax
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 4
jge 0x10019108
push dword [ebp - 0x24]
lea ecx, [ebp - 0x128]
call fcn.10006b8e
mov dword [eax], 0x42c70bb7
jmp 0x100190e5
mov dword [ebp - 0x24], 0
jmp 0x10019118
mov eax, dword [ebp - 0x24]
inc eax
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 3
jge 0x1001912e
mov eax, dword [ebp - 0x24]
mov dword [ebp + eax*4 - 0xab8], 0x2280643b
jmp 0x10019111
push 3
lea ecx, [ebp - 0x128]
call fcn.10006b8e
and dword [eax], 0
jmp 0x10019164
push 3
lea ecx, [ebp - 0x128]
call fcn.10006b8e
mov dword [ebp - 0x3e4], eax
mov eax, dword [ebp - 0x3e4]
mov eax, dword [eax]
inc eax
mov ecx, dword [ebp - 0x3e4]
mov dword [ecx], eax
push 3
lea ecx, [ebp - 0x128]
call fcn.10006b8e
cmp dword [eax], 2
jg 0x100193e5
push 3
lea ecx, [ebp - 0x128]
call fcn.10006b8e
mov eax, dword [eax]
cmp dword [ebp + eax*4 - 0x32c], 0
je 0x100192c6
push 4
pop eax
shl eax, 1
mov esi, dword [ebp + eax - 0x32c]
push 3
lea ecx, [ebp - 0x128]
call fcn.10006b8e
mov eax, dword [eax]
cmp dword [ebp + eax*4 - 0x32c], esi
je 0x100191c7
mov dword [ebp - 0x3f4], 1
jmp 0x100191ce
and dword [ebp - 0x3f4], 0
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0xab8], 0xfffffffa
jle 0x100191ed
push 0xfffffffffffffffd
pop eax
test eax, eax
jne 0x100191ed
and dword [ebp - 0x6dc], 0
jmp 0x100191f7
mov dword [ebp - 0x6dc], 1
push 3
lea ecx, [ebp - 0x128]
call fcn.10006b8e
mov eax, dword [eax]
mov eax, dword [ebp + eax*4 - 0x32c]
cmp dword [ebp - 0x6dc], eax
jl 0x10019221
mov dword [ebp - 0x3ec], 1
jmp 0x10019228
and dword [ebp - 0x3ec], 0
push 3
lea ecx, [ebp - 0x128]
call fcn.10006b8e
mov eax, dword [eax]
mov eax, dword [ebp + eax*4 - 0x32c]
cmp eax, dword [ebp - 0x3ec]
jne 0x10019252
mov dword [ebp - 0x59c], 1
jmp 0x10019259
and dword [ebp - 0x59c], 0
push 1
lea ecx, [ebp - 0x128]
call fcn.10006b8e
mov ecx, dword [ebp - 0x59c]
sub ecx, dword [eax]
jne 0x100192a2
push 3
lea ecx, [ebp - 0x128]
call fcn.10006b8e
mov eax, dword [eax]
cmp dword [ebp + eax*4 - 0x32c], 0
jne 0x100192a2
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0xab8], 0
jne 0x100192a2
and dword [ebp - 0x674], 0
jmp 0x100192ac
mov dword [ebp - 0x674], 1
mov eax, dword [ebp - 0x3f4]
cmp eax, dword [ebp - 0x674]
jl 0x100192c6
mov dword [ebp - 0x3fc], 1
jmp 0x100192cd
and dword [ebp - 0x3fc], 0
push 3
lea ecx, [ebp - 0x128]
call fcn.10006b8e
mov eax, dword [eax]
mov eax, dword [ebp + eax*4 - 0x32c]
cmp dword [ebp - 0x3fc], eax
jle 0x100192f7
mov dword [ebp - 0x5a4], 1
jmp 0x100192fe
and dword [ebp - 0x5a4], 0
push 3
lea ecx, [ebp - 0x128]
call fcn.10006b8e
mov eax, dword [eax]
mov esi, dword [ebp + eax*4 - 0x32c]
push 3
lea ecx, [ebp - 0x128]
call fcn.10006b8e
mov eax, dword [eax]
mov eax, dword [ebp + eax*4 - 0x32c]
add eax, dword [ebp - 0x5a4]
cmp eax, esi
jle 0x10019340
mov dword [ebp - 0x404], 1
jmp 0x10019347
and dword [ebp - 0x404], 0
cmp dword [ebp - 0x404], 0xfffffff7
jle 0x1001935c
mov dword [ebp - 0x6ec], 1
jmp 0x10019363
and dword [ebp - 0x6ec], 0
cmp dword [ebp - 0x6ec], 0x6e40424b
jg 0x1001937b
mov dword [ebp - 0x40c], 1
jmp 0x10019382
and dword [ebp - 0x40c], 0
cmp dword [ebp - 0x40c], 0x9b42c512
ja 0x1001939a
mov dword [ebp - 0x944], 1
jmp 0x100193a1
and dword [ebp - 0x944], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xab8]
mov dword [ebp - 0xb84], eax
push 3
lea ecx, [ebp - 0x128]
call fcn.10006b8e
mov eax, dword [eax]
mov esi, dword [ebp + eax*4 - 0x32c]
push 3
lea ecx, [ebp - 0x128]
call fcn.10006b8e
mov eax, dword [eax]
mov dword [ebp + eax*4 - 0x32c], esi
jmp 0x10019140
mov dword [ebp - 0x108], 0xffffffe8
jmp 0x100193fe
mov eax, dword [ebp - 0x108]
inc eax
mov dword [ebp - 0x108], eax
cmp dword [ebp - 0x108], 0xe
je 0x100195a4
mov dword [ebp - 0xcc], 0xffffffff
mov dword [ebp - 0xcc], 3
jmp 0x1001942e
mov eax, dword [ebp - 0xcc]
dec eax
mov dword [ebp - 0xcc], eax
cmp dword [ebp - 0xcc], 0xffffffef
je 0x10019579
mov dword [ebp - 0xd8], 0x2143
mov eax, dword [ebp - 0x108]
sub eax, dword [ebp - 0xcc]
cmp eax, 8
ja 0x10019462
mov dword [ebp - 0x5ac], 1
jmp 0x10019469
and dword [ebp - 0x5ac], 0
mov eax, dword [ebp - 0xd8]
cmp dword [ebp - 0x5ac], eax
jle 0x10019484
xor eax, eax
jne 0x10019484
and dword [ebp - 0x414], 0
jmp 0x1001948e
mov dword [ebp - 0x414], 1
cmp dword [ebp - 0x414], 0xfffffff9
jle 0x100194a3
mov dword [ebp - 0x67c], 1
jmp 0x100194aa
and dword [ebp - 0x67c], 0
push 3
lea ecx, [ebp - 0x128]
call fcn.10006b8e
mov ecx, dword [ebp - 0x67c]
cmp ecx, dword [eax]
je 0x100194cd
mov dword [ebp - 0x794], 1
jmp 0x100194d4
and dword [ebp - 0x794], 0
mov eax, dword [ebp - 0xd8]
mov dword [ebp - 0xbbc], eax
mov eax, dword [ebp - 0xcc]
mov dword [ebp - 0xb8c], eax
mov eax, 0x628a
imul eax, eax, 9
cmp eax, 0xfff9
jae 0x10019507
mov dword [ebp - 0x41c], 1
jmp 0x1001950e
and dword [ebp - 0x41c], 0
cmp dword [ebp - 0x41c], 3
jle 0x10019555
mov dword [ebp - 0xd8], 2
jmp 0x10019530
mov eax, dword [ebp - 0xd8]
dec eax
mov dword [ebp - 0xd8], eax
cmp dword [ebp - 0xd8], 0
jl 0x10019553
mov byte [ebp - 0xc5], 0
movzx eax, byte [ebp - 0xc5]
test eax, eax
je 0x10019551
call dword [sym.imp.USER32.dll_DestroyCaret]
jmp 0x10019523
jmp 0x10019574
mov byte [ebp - 0xb2], 0
movzx eax, byte [ebp - 0xb2]
test eax, eax
je 0x10019574
push 0x1e37
push 0
call dword [sym.imp.KERNEL32.dll_SetThreadPriority]
jmp 0x10019421
mov byte [ebp - 0xba], 0
movzx eax, byte [ebp - 0xba]
test eax, eax
je 0x1001959f
push 0
push 0
push 0x1dc7
push 0x763
call dword [sym.imp.USER32.dll_SetScrollInfo]
jmp 0x100193f1
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x128]
call fcn.10006b72
mov dword [ebp - 0x2c], 2
and dword [ebp - 0x280], 0
jmp 0x100195cb
mov eax, dword [ebp - 0x2c]
inc eax
inc eax
mov dword [ebp - 0x2c], eax
cmp dword [ebp - 0x2c], 0x1c
jae 0x10019d5c
push 3
lea ecx, [ebp - 0xbe8]
call fcn.10006b10
mov dword [ebp - 4], 0xa
mov dword [ebp - 0xbc4], 0
mov dword [ebp - 0xb94], 0xf8256a9e
mov dword [ebp - 0xbcc], 1
mov dword [ebp - 0xb9c], 0xee2fde2b
mov dword [ebp - 0xc4c], 0xfffffff7
mov dword [ebp - 0xbb0], 1
mov dword [ebp - 0xc50], 1
mov dword [ebp - 0xbb8], 0xfffffff9
mov dword [ebp - 0xc58], 1
mov dword [ebp - 0xbc0], 0xc285ce96
mov dword [ebp - 0xcac], 0x3c407858
mov dword [ebp - 0xbc8], 1
mov dword [ebp - 0xc5c], 0x890c5440
mov dword [ebp - 0x9f8], 3
mov dword [ebp - 0x9f4], 3
mov dword [ebp - 0x9f0], 3
mov dword [ebp - 0x9ec], 3
mov dword [ebp - 0x2b0], 0
jmp 0x100196ac
mov eax, dword [ebp - 0x2b0]
inc eax
mov dword [ebp - 0x2b0], eax
cmp dword [ebp - 0x2b0], 3
jge 0x100196ce
push dword [ebp - 0x2b0]
lea ecx, [ebp - 0xbe8]
call fcn.10006b8e
mov dword [eax], 0xa75c
jmp 0x1001969f
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x9f8]
dec eax
push 4
pop ecx
shl ecx, 1
mov dword [ebp + ecx - 0x9f8], eax
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xbe8]
call fcn.10006b72
xor eax, eax
inc eax
imul eax, eax, 0
movzx eax, byte [ebp + eax - 0x158]
lea eax, [eax + eax + 2]
cmp dword [ebp - 0x2c], eax
jne 0x100199f2
mov eax, dword [ebp - 0x2c]
movzx eax, byte [ebp + eax - 0x158]
inc eax
mov dword [ebp - 0x280], eax
push 1
lea ecx, [ebp - 0x740]
call fcn.10006b10
mov dword [ebp - 4], 0xb
mov dword [ebp - 0xe8], 0x662a2b3b
mov dword [ebp - 0x5c4], 0x223dec99
mov dword [ebp - 0x84], 0
jmp 0x10019764
mov eax, dword [ebp - 0x84]
inc eax
mov dword [ebp - 0x84], eax
cmp dword [ebp - 0x84], 1
jge 0x10019786
push dword [ebp - 0x84]
lea ecx, [ebp - 0x740]
call fcn.10006b8e
mov dword [eax], 0xfffffff8
jmp 0x10019757
mov dword [ebp - 0x84], 0
jmp 0x1001979f
mov eax, dword [ebp - 0x84]
inc eax
mov dword [ebp - 0x84], eax
cmp dword [ebp - 0x84], 1
jge 0x100197b8
mov eax, dword [ebp - 0x84]
mov dword [ebp + eax*4 - 0x3c], 0xffffffff
jmp 0x10019792
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0x3c], 0
jmp 0x100197dd
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x3c]
dec eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x3c], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x3c], 0
jl 0x1001981c
push 4
pop eax
imul eax, eax, 0
push dword [ebp + eax - 0x3c]
lea ecx, [ebp - 0x740]
call fcn.10006b8e
mov esi, eax
push 4
pop eax
imul eax, eax, 0
push dword [ebp + eax - 0x3c]
lea ecx, [ebp - 0x740]
call fcn.10006b8e
mov eax, dword [eax]
mov dword [esi], eax
jmp 0x100197c8
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0xe8]
cmp ecx, dword [ebp + eax - 0x3c]
jle 0x1001983a
mov dword [ebp - 0x5b4], 1
jmp 0x10019841
and dword [ebp - 0x5b4], 0
push 0
lea ecx, [ebp - 0x740]
call fcn.10006b8e
mov ecx, dword [ebp - 0x5b4]
cmp ecx, dword [eax]
je 0x10019864
mov dword [ebp - 0x444], 1
jmp 0x1001986b
and dword [ebp - 0x444], 0
cmp dword [ebp - 0xe8], 0
je 0x10019880
mov dword [ebp - 0x424], 1
jmp 0x10019887
and dword [ebp - 0x424], 0
push 0
lea ecx, [ebp - 0x740]
call fcn.10006b8e
mov ecx, dword [ebp - 0x424]
cmp ecx, dword [eax]
je 0x100198aa
mov dword [ebp - 0x6e4], 1
jmp 0x100198b1
and dword [ebp - 0x6e4], 0
mov eax, dword [ebp - 0xe8]
cmp dword [ebp - 0x6e4], eax
jg 0x100198cb
mov dword [ebp - 0x42c], 1
jmp 0x100198d2
and dword [ebp - 0x42c], 0
mov eax, dword [ebp - 0xe8]
cmp dword [ebp - 0x42c], eax
jne 0x100198ec
mov dword [ebp - 0x5bc], 1
jmp 0x100198f3
and dword [ebp - 0x5bc], 0
mov eax, dword [ebp - 0xe8]
cmp dword [ebp - 0x5bc], eax
je 0x1001990d
mov dword [ebp - 0x434], 1
jmp 0x10019914
and dword [ebp - 0x434], 0
mov eax, dword [ebp - 0x434]
add eax, 0x7ad5
jne 0x10019933
cmp dword [ebp - 0xe8], 0
jne 0x10019933
and dword [ebp - 0x684], 0
jmp 0x1001993d
mov dword [ebp - 0x684], 1
cmp dword [ebp - 0x684], 0xdb60
jne 0x10019955
mov dword [ebp - 0x43c], 1
jmp 0x1001995c
and dword [ebp - 0x43c], 0
mov eax, dword [ebp - 0x43c]
mov dword [ebp - 0x5c4], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x5c4]
cmp ecx, dword [ebp + eax - 0x3c]
jl 0x1001998a
or eax, 0xffffffff
jne 0x1001998a
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x3c], 0
push 0
lea ecx, [ebp - 0x740]
call fcn.10006b8e
mov ecx, 0x4ad3
sub ecx, dword [eax]
cmp dword [ebp - 0x444], ecx
jg 0x100199b2
mov dword [ebp - 0x6f4], 1
jmp 0x100199b9
and dword [ebp - 0x6f4], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x6f4]
mov dword [ebp + eax - 0x3c], ecx
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x740]
call fcn.10006b72
mov eax, dword [ebp - 0x2c]
movzx eax, byte [ebp + eax - 0x158]
mov ecx, dword [ebp - 0x2c]
lea eax, [ecx + eax - 1]
mov dword [ebp - 0x2c], eax
jmp 0x100195c3
mov eax, dword [ebp - 0x2c]
sub eax, dword [ebp - 0x280]
movzx eax, byte [ebp + eax - 0x15a]
movzx eax, word [ebp + eax*2 - 0xae0]
mov ecx, dword [ebp - 0x2c]
movzx ecx, byte [ebp + ecx - 0x157]
and ecx, eax
mov eax, dword [ebp - 0x2c]
sub eax, dword [ebp - 0x280]
movzx eax, byte [ebp + eax - 0x15a]
movzx eax, word [ebp + eax*2 - 0xae0]
mov edx, dword [ebp - 0x2c]
movzx edx, byte [ebp + edx - 0x157]
or edx, eax
sub edx, ecx
mov eax, dword [ebp - 0x2c]
movzx eax, byte [ebp + eax - 0x158]
mov word [ebp + eax*2 - 0xae0], dx
mov dword [ebp - 0x30], 0xffffffff
mov dword [ebp - 0x45c], 1
mov dword [ebp - 0x9b8], 0xfffffff8
mov dword [ebp - 0x9b4], 0xfffffff8
mov dword [ebp - 0x9b0], 0xfffffff8
mov dword [ebp - 0x9ac], 0xfffffff8
mov dword [ebp - 0x2b8], 0xffffffff
mov dword [ebp - 0x1b8], 0
jmp 0x10019aaf
mov eax, dword [ebp - 0x1b8]
inc eax
mov dword [ebp - 0x1b8], eax
cmp dword [ebp - 0x1b8], 3
jge 0x10019acb
mov eax, dword [ebp - 0x1b8]
mov dword [ebp + eax*4 - 0xbf8], 0xf572
jmp 0x10019aa2
mov dword [ebp - 0x30], 0
jmp 0x10019adb
mov eax, dword [ebp - 0x30]
inc eax
mov dword [ebp - 0x30], eax
cmp dword [ebp - 0x30], 2
jg 0x10019bbc
mov dword [ebp - 0x278], 0xfffffffd
mov dword [ebp - 0xae8], 0x23afc371
mov dword [ebp - 0xaf0], 0xf8b5131d
mov dword [ebp - 0xaf8], 1
mov dword [ebp - 0x278], 0
jmp 0x10019b26
mov eax, dword [ebp - 0x278]
inc eax
mov dword [ebp - 0x278], eax
cmp dword [ebp - 0x278], 2
jg 0x10019bb7
push 1
lea ecx, [ebp - 0xa64]
call fcn.10006b10
mov dword [ebp - 4], 0xc
mov dword [ebp - 0x1c0], 0
jmp 0x10019b60
mov eax, dword [ebp - 0x1c0]
inc eax
mov dword [ebp - 0x1c0], eax
cmp dword [ebp - 0x1c0], 1
jge 0x10019b7f
push dword [ebp - 0x1c0]
lea ecx, [ebp - 0xa64]
call fcn.10006b8e
or dword [eax], 0xffffffff
jmp 0x10019b53
push 0
lea ecx, [ebp - 0xa64]
call fcn.10006b8e
mov dword [ebp - 0x44c], eax
mov eax, dword [ebp - 0x44c]
mov eax, dword [eax]
dec eax
mov ecx, dword [ebp - 0x44c]
mov dword [ecx], eax
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xa64]
call fcn.10006b72
jmp 0x10019b19
jmp 0x10019ad4
mov dword [ebp - 0x30], 0
jmp 0x10019bcc
mov eax, dword [ebp - 0x30]
inc eax
mov dword [ebp - 0x30], eax
cmp dword [ebp - 0x30], 3
jg 0x10019d50
mov dword [ebp - 0x1c8], 1
mov eax, dword [ebp - 0x30]
mov eax, dword [ebp + eax*4 - 0x9b8]
mov dword [ebp - 0xb00], eax
push 4
pop eax
shl eax, 1
mov ecx, dword [ebp - 0x1c8]
cmp ecx, dword [ebp + eax - 0xbf8]
jg 0x10019c10
mov dword [ebp - 0x5cc], 1
jmp 0x10019c17
and dword [ebp - 0x5cc], 0
mov eax, dword [ebp - 0x5cc]
mov dword [ebp - 0x2b8], eax
mov eax, dword [ebp - 0x2b8]
neg eax
jne 0x10019c3b
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0xbf8], 0
cmp dword [ebp - 0x2b8], 0
je 0x10019c59
mov eax, 0x89d3
test eax, eax
je 0x10019c59
mov dword [ebp - 0x454], 1
jmp 0x10019c60
and dword [ebp - 0x454], 0
mov eax, dword [ebp - 0x1c8]
cmp dword [ebp - 0x454], eax
jg 0x10019c7a
mov dword [ebp - 0x68c], 1
jmp 0x10019c81
and dword [ebp - 0x68c], 0
mov eax, dword [ebp - 0x1c8]
cmp dword [ebp - 0x68c], eax
jne 0x10019c9b
mov dword [ebp - 0x8d4], 1
jmp 0x10019ca2
and dword [ebp - 0x8d4], 0
mov eax, dword [ebp - 0x45c]
mov dword [ebp - 0xb08], eax
cmp dword [ebp - 0x45c], 0
je 0x10019ccc
cmp dword [ebp - 0x2b8], 0
je 0x10019ccc
mov dword [ebp - 0x464], 1
jmp 0x10019cd3
and dword [ebp - 0x464], 0
mov eax, dword [ebp - 0x30]
mov eax, dword [ebp + eax*4 - 0x9b8]
mov dword [ebp - 0x5d4], eax
mov eax, dword [ebp - 0x30]
mov ecx, dword [ebp - 0x5d4]
mov dword [ebp + eax*4 - 0x9b8], ecx
mov eax, dword [ebp - 0x5d4]
add eax, dword [ebp - 0x464]
neg eax
cmp eax, 0x9b3a
jne 0x10019d14
mov dword [ebp - 0x6fc], 1
jmp 0x10019d1b
and dword [ebp - 0x6fc], 0
cmp dword [ebp - 0x6fc], 0x67bc6200
jne 0x10019d33
mov dword [ebp - 0x46c], 1
jmp 0x10019d3a
and dword [ebp - 0x46c], 0
mov eax, dword [ebp - 0x46c]
sub eax, 0x719a22b3
mov dword [ebp - 0x1c8], eax
jmp 0x10019bc5
and dword [ebp - 0x280], 0
jmp 0x100195c3
mov dword [ebp - 0x2c0], 0xdb3ae355
mov dword [ebp - 0xb10], 0xeb905d09
mov dword [ebp - 0xb18], 0xfffffff6
mov dword [ebp - 0xb20], 1
mov dword [ebp - 0xb28], 1
mov dword [ebp - 0xb30], 0x9ce4562
mov dword [ebp - 0xb38], 0xffffffff
mov dword [ebp - 0xb40], 0x7631615e
mov dword [ebp - 0xb48], 0xbc9fa8bc
mov dword [ebp - 0xb50], 0x6acb8f2b
mov dword [ebp - 0x5dc], 0xffff
mov dword [ebp - 0x1d0], 0
jmp 0x10019de3
mov eax, dword [ebp - 0x1d0]
inc eax
mov dword [ebp - 0x1d0], eax
cmp dword [ebp - 0x1d0], 4
jge 0x10019dff
mov eax, dword [ebp - 0x1d0]
mov dword [ebp + eax*4 - 0xe40], 0x8cae2fe8
jmp 0x10019dd6
mov dword [ebp - 0x2c0], 0x16
jmp 0x10019e18
mov eax, dword [ebp - 0x2c0]
dec eax
mov dword [ebp - 0x2c0], eax
cmp dword [ebp - 0x2c0], 0x11
jge 0x10019ef3
mov dword [ebp - 0xb58], 1
mov dword [ebp - 0xb60], 0xfffffff7
mov dword [ebp - 0xb68], 0xd513c61c
push 1
lea ecx, [ebp - 0xc08]
call fcn.10006b10
mov dword [ebp - 4], 0xd
mov dword [ebp - 0xb70], 0x98ab79ae
mov dword [ebp - 0x64], 0
jmp 0x10019e71
mov eax, dword [ebp - 0x64]
inc eax
mov dword [ebp - 0x64], eax
cmp dword [ebp - 0x64], 1
jge 0x10019e8d
push dword [ebp - 0x64]
lea ecx, [ebp - 0xc08]
call fcn.10006b8e
mov dword [eax], 0xfffffffc
jmp 0x10019e6a
mov dword [ebp - 0x64], 0
jmp 0x10019e9d
mov eax, dword [ebp - 0x64]
inc eax
mov dword [ebp - 0x64], eax
cmp dword [ebp - 0x64], 2
jge 0x10019eb3
mov eax, dword [ebp - 0x64]
mov dword [ebp + eax*4 - 0xce0], 0xfffffffa
jmp 0x10019e96
mov eax, dword [ebp - 0x5dc]
dec eax
mov dword [ebp - 0x5dc], eax
mov byte [ebp - 0xb4], 0
movzx eax, byte [ebp - 0xb4]
test eax, eax
je 0x10019edf
push 0
push 0x116c
call dword [sym.imp.GDI32.dll_GetWindowOrgEx]
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xc08]
call fcn.10006b72
jmp 0x10019e0b
push 2
pop eax
imul eax, eax, 0xc
xor ecx, ecx
mov word [ebp + eax - 0xae0], cx
push 2
lea ecx, [ebp - 0x8f0]
call fcn.10006b10
mov dword [ebp - 4], 0xe
push 1
lea ecx, [ebp - 0x8e0]
call fcn.10006b10
mov byte [ebp - 4], 0xf
mov dword [ebp - 0x79c], 0xffffffff
mov dword [ebp - 0x94c], 0
mov dword [ebp - 0x7c], 0
jmp 0x10019f4c
mov eax, dword [ebp - 0x7c]
inc eax
mov dword [ebp - 0x7c], eax
cmp dword [ebp - 0x7c], 2
jge 0x10019f68
push dword [ebp - 0x7c]
lea ecx, [ebp - 0x8f0]
call fcn.10006b8e
mov dword [eax], 0x13b91020
jmp 0x10019f45
mov dword [ebp - 0x7c], 0
jmp 0x10019f78
mov eax, dword [ebp - 0x7c]
inc eax
mov dword [ebp - 0x7c], eax
cmp dword [ebp - 0x7c], 1
jge 0x10019f94
push dword [ebp - 0x7c]
lea ecx, [ebp - 0x8e0]
call fcn.10006b8e
mov dword [eax], 5
jmp 0x10019f71
push 0
lea ecx, [ebp - 0x8f0]
call fcn.10006b8e
mov dword [eax], 0xffffffe2
jmp 0x10019fcd
push 0
lea ecx, [ebp - 0x8f0]
call fcn.10006b8e
mov dword [ebp - 0x474], eax
mov eax, dword [ebp - 0x474]
mov eax, dword [eax]
inc eax
mov ecx, dword [ebp - 0x474]
mov dword [ecx], eax
push 0
lea ecx, [ebp - 0x8f0]
call fcn.10006b8e
cmp dword [eax], 0xffffffe6
jne 0x1001a30b
mov dword [ebp - 0x80], 1
mov dword [ebp - 0xe0], 0x15e1abe8
mov dword [ebp - 0x2f8], 0x9d434678
mov dword [ebp - 0x494], 0
push 1
lea ecx, [ebp - 0x8d0]
call fcn.10006b10
mov byte [ebp - 4], 0x10
mov dword [ebp - 0x6c], 0
jmp 0x1001a029
mov eax, dword [ebp - 0x6c]
inc eax
mov dword [ebp - 0x6c], eax
cmp dword [ebp - 0x6c], 4
jge 0x1001a03f
mov eax, dword [ebp - 0x6c]
mov dword [ebp + eax*4 - 0xc8c], 1
jmp 0x1001a022
mov dword [ebp - 0x6c], 0
jmp 0x1001a04f
mov eax, dword [ebp - 0x6c]
inc eax
mov dword [ebp - 0x6c], eax
cmp dword [ebp - 0x6c], 1
jge 0x1001a06b
push dword [ebp - 0x6c]
lea ecx, [ebp - 0x8d0]
call fcn.10006b8e
mov dword [eax], 0x4d91
jmp 0x1001a048
mov dword [ebp - 0x80], 0
jmp 0x1001a07b
mov eax, dword [ebp - 0x80]
inc eax
mov dword [ebp - 0x80], eax
cmp dword [ebp - 0x80], 3
jg 0x1001a1fa
mov dword [ebp - 0x484], 0x21c9b6cd
mov dword [ebp - 0x5ec], 1
mov dword [ebp - 0xe0], 0xffffffff
mov eax, dword [ebp - 0xe0]
mov dword [ebp - 0x2f8], eax
push 0xfffffffffffffff7
pop eax
cmp eax, 0xa335c22c
jb 0x1001a0c5
mov dword [ebp - 0x694], 1
jmp 0x1001a0cc
and dword [ebp - 0x694], 0
mov eax, dword [ebp - 0x80]
imul eax, dword [ebp - 0x694]
cmp eax, 0x859495e
jle 0x1001a0e9
mov dword [ebp - 0x47c], 1
jmp 0x1001a0f0
and dword [ebp - 0x47c], 0
imul eax, dword [ebp - 0x47c], 0xbf35
imul eax, dword [ebp - 0x80]
mov ecx, dword [ebp - 0x80]
cmp dword [ebp + ecx*4 - 0xc8c], eax
jl 0x1001a116
mov dword [ebp - 0x5e4], 1
jmp 0x1001a11d
and dword [ebp - 0x5e4], 0
mov eax, dword [ebp - 0x5e4]
mov dword [ebp - 0x484], eax
mov eax, dword [ebp - 0x484]
mov dword [ebp - 0x2f8], eax
mov eax, dword [ebp - 0x80]
mov eax, dword [ebp + eax*4 - 0xc8c]
mov dword [ebp - 0xb78], eax
mov eax, dword [ebp - 0x2f8]
mov dword [ebp - 0xb80], eax
push 0
lea ecx, [ebp - 0x8e0]
call fcn.10006b8e
cmp dword [eax], 0x32716399
jl 0x1001a172
mov dword [ebp - 0x6f0], 1
jmp 0x1001a179
and dword [ebp - 0x6f0], 0
push 0
lea ecx, [ebp - 0x8e0]
call fcn.10006b8e
mov ecx, dword [ebp - 0x6f0]
cmp ecx, dword [eax]
jl 0x1001a19c
mov dword [ebp - 0x48c], 1
jmp 0x1001a1a3
and dword [ebp - 0x48c], 0
mov eax, dword [ebp - 0x48c]
mov dword [ebp - 0x5ec], eax
mov eax, dword [ebp - 0x5ec]
mov dword [ebp - 0x494], eax
mov eax, dword [ebp - 0x80]
mov eax, dword [ebp + eax*4 - 0xc8c]
cmp eax, dword [ebp - 0x494]
jne 0x1001a1d9
mov dword [ebp - 0x69c], 1
jmp 0x1001a1e0
and dword [ebp - 0x69c], 0
push 0
lea ecx, [ebp - 0x8d0]
call fcn.10006b8e
mov ecx, dword [ebp - 0x69c]
mov dword [eax], ecx
jmp 0x1001a074
push 0
lea ecx, [ebp - 0x8e0]
call fcn.10006b8e
cmp dword [eax], 0
je 0x1001a2c5
push 2
lea ecx, [ebp - 0xa7c]
call fcn.10006b10
mov byte [ebp - 4], 0x11
mov dword [ebp - 0x1d8], 0
jmp 0x1001a23a
mov eax, dword [ebp - 0x1d8]
inc eax
mov dword [ebp - 0x1d8], eax
cmp dword [ebp - 0x1d8], 2
jge 0x1001a25c
push dword [ebp - 0x1d8]
lea ecx, [ebp - 0xa7c]
call fcn.10006b8e
mov dword [eax], 6
jmp 0x1001a22d
mov dword [ebp - 0xe0], 0
jmp 0x1001a275
mov eax, dword [ebp - 0xe0]
inc eax
mov dword [ebp - 0xe0], eax
cmp dword [ebp - 0xe0], 0x30
jne 0x1001a2b4
push 1
lea ecx, [ebp - 0xa7c]
call fcn.10006b8e
mov dword [eax], 1
mov byte [ebp - 0xbe], 0
movzx eax, byte [ebp - 0xbe]
test eax, eax
je 0x1001a2b2
push 0
push 0x667
push 0
call dword [sym.imp.GDI32.dll_GetRegionData]
jmp 0x1001a268
mov byte [ebp - 4], 0x10
lea ecx, [ebp - 0xa7c]
call fcn.10006b72
jmp 0x1001a2f7
mov eax, dword [ebp - 0x79c]
mov dword [ebp - 0x94c], eax
push 0
lea ecx, [ebp - 0x8d0]
call fcn.10006b8e
cmp dword [eax], 0
je 0x1001a2f7
mov byte [ebp - 4], 0xf
lea ecx, [ebp - 0x8d0]
call fcn.10006b72
jmp 0x10019fa9
mov byte [ebp - 4], 0xf
lea ecx, [ebp - 0x8d0]
call fcn.10006b72
jmp 0x10019fa9
mov byte [ebp - 4], 0xe
lea ecx, [ebp - 0x8e0]
call fcn.10006b72
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x8f0]
call fcn.10006b72
lea eax, [ebp - 0xae0]
push eax
lea ecx, [ebp - 0xd58]
call fcn.10006951
mov dword [ebp - 0x7a4], eax
mov eax, dword [ebp - 0x7a4]
mov dword [ebp - 0x8e4], eax
mov dword [ebp - 4], 0x12
push dword [ebp - 0x8e4]
call fcn.1000e606
pop ecx
mov dword [ebp - 0x510], eax
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xd58]
call fcn.1000699b
mov dword [ebp - 0x49c], 0x44d1
mov dword [ebp - 0x954], str.kxzpj_suzeimvwm_srkefufht_dtdfmsk_ctmq
cmp dword [ebp - 0x49c], 0x46b0
jle 0x1001a474
and dword [ebp - 0x288], 0
jmp 0x1001a3af
mov eax, dword [ebp - 0x288]
inc eax
mov dword [ebp - 0x288], eax
cmp dword [ebp - 0x288], 0x2f5f
jge 0x1001a46e
and dword [ebp - 0x1e0], 0
jmp 0x1001a3d5
mov eax, dword [ebp - 0x1e0]
inc eax
mov dword [ebp - 0x1e0], eax
cmp dword [ebp - 0x1e0], 0x1e6b
jge 0x1001a469
and dword [ebp - 0x2c8], 0
jmp 0x1001a3fb
mov eax, dword [ebp - 0x2c8]
inc eax
mov dword [ebp - 0x2c8], eax
cmp dword [ebp - 0x2c8], 0x6d3c
jge 0x1001a464
mov eax, dword [ebp - 0x288]
and eax, dword [ebp - 0x1e0]
and eax, dword [ebp - 0x2c8]
cdq
mov dword [ebp - 0x7d0], eax
mov dword [ebp - 0x7cc], edx
push dword [ebp - 0x7cc]
push dword [ebp - 0x7d0]
lea ecx, [ebp - 0xde8]
call fcn.10001ac9
pop ecx
pop ecx
mov dword [ebp - 0x7b0], eax
mov ecx, dword [ebp - 0x7b0]
call fcn.10006659
push eax
call fcn.1004e1ed
pop ecx
lea ecx, [ebp - 0xde8]
call fcn.1000664f
jmp 0x1001a3ee
jmp 0x1001a3c8
jmp 0x1001a3a2
call dword [sym.imp.KERNEL32.dll_TlsAlloc]
mov dword [ebp - 4], 0x13
cmp dword [ebp - 0x49c], 0x42f2
jge 0x1001a493
push dword [ebp - 0x954]
call fcn.1004e1ed
pop ecx
jmp 0x1001a4af
or dword [ebp - 4], 0xffffffff
jmp 0x1001a4b9
mov dword [ebp - 0x5f4], 0xfffffff7
mov dword [ebp - 0x4a4], 0x96a162c9
mov dword [ebp - 0xa4], 1
mov dword [ebp - 0x4ac], 0xf0d3ecf0
push 3
lea ecx, [ebp - 0x900]
call fcn.10006b10
mov dword [ebp - 4], 0x15
mov dword [ebp - 0x7bc], 0xb74a71a6
mov dword [ebp - 0xb88], 0xbb66
mov dword [ebp - 0x1e8], 0
jmp 0x1001a522
mov eax, dword [ebp - 0x1e8]
inc eax
mov dword [ebp - 0x1e8], eax
cmp dword [ebp - 0x1e8], 3
jge 0x1001a544
push dword [ebp - 0x1e8]
lea ecx, [ebp - 0x900]
call fcn.10006b8e
mov dword [eax], 0xbae0fc36
jmp 0x1001a515
mov dword [ebp - 0x5f4], 0xdc75
mov eax, dword [ebp - 0x5f4]
mov dword [ebp - 0x4a4], eax
mov eax, dword [ebp - 0x4a4]
cmp eax, dword [ebp - 0xa4]
jne 0x1001a574
mov dword [ebp - 0x4c4], 1
jmp 0x1001a57b
and dword [ebp - 0x4c4], 0
cmp dword [ebp - 0xa4], 1
jge 0x1001a590
mov dword [ebp - 0x734], 1
jmp 0x1001a597
and dword [ebp - 0x734], 0
mov eax, dword [ebp - 0x734]
mov dword [ebp - 0x4ac], eax
mov eax, dword [ebp - 0x4ac]
mov dword [ebp - 0x5fc], eax
push 0
lea ecx, [ebp - 0x900]
call fcn.10006b8e
mov ecx, dword [ebp - 0x5fc]
mov dword [eax], ecx
cmp dword [ebp - 0x5fc], 0
jne 0x1001a5eb
push 2
lea ecx, [ebp - 0x900]
call fcn.10006b8e
cmp dword [eax], 0
jne 0x1001a5eb
mov dword [ebp - 0x4b4], 1
jmp 0x1001a5f2
and dword [ebp - 0x4b4], 0
mov eax, dword [ebp - 0xa4]
cmp dword [ebp - 0x4b4], eax
jle 0x1001a60c
mov dword [ebp - 0x6a4], 1
jmp 0x1001a613
and dword [ebp - 0x6a4], 0
mov eax, dword [ebp - 0xa4]
cmp dword [ebp - 0x6a4], eax
jne 0x1001a62d
mov dword [ebp - 0x4bc], 1
jmp 0x1001a634
and dword [ebp - 0x4bc], 0
mov eax, dword [ebp - 0xa4]
imul eax, dword [ebp - 0x4bc]
test eax, eax
je 0x1001a663
push 0
lea ecx, [ebp - 0x900]
call fcn.10006b8e
cmp dword [eax], 0
je 0x1001a663
mov dword [ebp - 0x604], 1
jmp 0x1001a66a
and dword [ebp - 0x604], 0
mov eax, dword [ebp - 0xa4]
sub eax, dword [ebp - 0x604]
cmp eax, 1
jae 0x1001a687
mov dword [ebp - 0x6f8], 1
jmp 0x1001a68e
and dword [ebp - 0x6f8], 0
mov eax, dword [ebp - 0x4c4]
cmp eax, dword [ebp - 0x6f8]
jg 0x1001a6a8
mov dword [ebp - 0x4cc], 1
jmp 0x1001a6af
and dword [ebp - 0x4cc], 0
cmp dword [ebp - 0x4cc], 0x46e
je 0x1001a6c7
mov dword [ebp - 0x60c], 1
jmp 0x1001a6ce
and dword [ebp - 0x60c], 0
mov eax, dword [ebp - 0x60c]
mov dword [ebp - 0xa4], eax
mov eax, dword [ebp - 0xa4]
mov dword [ebp - 0x7bc], eax
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x900]
call fcn.10006b72
and dword [ebp - 0x290], 0
jmp 0x1001a70b
mov eax, dword [ebp - 0x290]
inc eax
mov dword [ebp - 0x290], eax
cmp dword [ebp - 0x290], 0xd
jae 0x1001a726
xor eax, eax
mov ecx, dword [ebp - 0x290]
mov word [ebp + ecx*2 - 0xae0], ax
jmp 0x1001a6fe
mov dword [ebp - 0x51c], 0x2dae
mov dword [ebp - 0x7ec], str.czacdrbsn_ebpn_xjbc_tfvbsocry_juz_ralcln_nsn_woesdt_wszxdixw_frftnuc_ilrealoz_qeyqc_abuawb
cmp dword [ebp - 0x51c], 0x2f92
jle 0x1001a7fa
and dword [ebp - 0x1f8], 0
jmp 0x1001a760
mov eax, dword [ebp - 0x1f8]
inc eax
mov dword [ebp - 0x1f8], eax
cmp dword [ebp - 0x1f8], 0x63a0
jge 0x1001a7f2
and dword [ebp - 0x1f0], 0
jmp 0x1001a786
mov eax, dword [ebp - 0x1f0]
inc eax
mov dword [ebp - 0x1f0], eax
cmp dword [ebp - 0x1f0], 0x4e85
jge 0x1001a7ed
and dword [ebp - 0x2d0], 0
jmp 0x1001a7a8
mov eax, dword [ebp - 0x2d0]
inc eax
mov dword [ebp - 0x2d0], eax
cmp dword [ebp - 0x2d0], 0x2f7b
jge 0x1001a7eb
mov eax, dword [ebp - 0x1f0]
sub eax, dword [ebp - 0x2d0]
xor eax, dword [ebp - 0x1f8]
cdq
mov dword [ebp - 0x7dc], eax
mov dword [ebp - 0x7d8], edx
push dword [ebp - 0x7d8]
push dword [ebp - 0x7dc]
mov ecx, 0x100809d8
call fcn.10006801
jmp 0x1001a79b
jmp 0x1001a779
jmp 0x1001a753
push 0
call dword [sym.imp.ADVAPI32.dll_GetLengthSid]
mov dword [ebp - 0x14], 3
mov dword [ebp - 0xa20], 0xeb5ea28c
mov dword [ebp - 0xa1c], 0xeb5ea28c
mov dword [ebp - 0xa18], 0xeb5ea28c
mov dword [ebp - 0xa14], 0xeb5ea28c
lea ecx, [ebp - 0x301]
call fcn.10006b9d
push eax
lea eax, [ebp - 0xa10]
push eax
lea eax, [ebp - 0xa20]
push eax
lea ecx, [ebp - 0xce8]
call fcn.10006e2c
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0x72c]
call fcn.10006b4c
mov dword [ebp - 4], 0x16
mov dword [ebp - 0xf8], 3
mov dword [ebp - 0xb90], 0x69b1
push 2
lea ecx, [ebp - 0xaac]
call fcn.10006b10
mov byte [ebp - 4], 0x17
mov dword [ebp - 0x4d4], 0x49e
mov dword [ebp - 0x8f4], str.mmu_ijvip_wpbfwjr_ktbcndh_pmmeqce_zjqc_cnfzrs_ktkpexr_liwktkd
cmp dword [ebp - 0x4d4], 0x785
jle 0x1001a921
and dword [ebp - 0x298], 0
jmp 0x1001a8c0
mov eax, dword [ebp - 0x298]
inc eax
mov dword [ebp - 0x298], eax
cmp dword [ebp - 0x298], 0x6fe8
jge 0x1001a921
and dword [ebp - 0x200], 0
jmp 0x1001a8e2
mov eax, dword [ebp - 0x200]
inc eax
mov dword [ebp - 0x200], eax
cmp dword [ebp - 0x200], 0x6731
jge 0x1001a91f
mov eax, dword [ebp - 0x298]
sub eax, dword [ebp - 0x200]
cdq
mov dword [ebp - 0x7e8], eax
mov dword [ebp - 0x7e4], edx
push dword [ebp - 0x7e4]
push dword [ebp - 0x7e8]
mov ecx, 0x100809d8
call fcn.10006801
jmp 0x1001a8d5
jmp 0x1001a8b3
mov byte [ebp - 4], 0x18
cmp dword [ebp - 0x4d4], 0x348
jge 0x1001a941
mov edx, dword [ebp - 0x8f4]
mov ecx, 0x100809d8
call fcn.1000b005
jmp 0x1001a95d
mov dword [ebp - 4], 0x17
jmp 0x1001a96d
mov dword [ebp - 0x2d8], 0
jmp 0x1001a986
mov eax, dword [ebp - 0x2d8]
inc eax
mov dword [ebp - 0x2d8], eax
cmp dword [ebp - 0x2d8], 2
jge 0x1001a9a8
push dword [ebp - 0x2d8]
lea ecx, [ebp - 0xaac]
call fcn.10006b8e
mov dword [eax], 0x2c5acc8e
jmp 0x1001a979
cmp dword [ebp - 0x14], 0
jne 0x1001ab30
cmp dword [ebp - 0x14], 0
jne 0x1001a9c7
cmp dword [ebp - 0x14], 0
jne 0x1001a9c7
and dword [ebp - 0x6ac], 0
jmp 0x1001a9d1
mov dword [ebp - 0x6ac], 1
cmp dword [ebp - 0x6ac], 0xffffffff
jl 0x1001a9e9
cmp dword [ebp - 0x14], 0
jne 0x1001a9e9
and dword [ebp - 0x4dc], 0
jmp 0x1001a9f3
mov dword [ebp - 0x4dc], 1
mov eax, dword [ebp - 0x14]
cmp dword [ebp - 0x4dc], eax
jl 0x1001aa0a
mov dword [ebp - 0x614], 1
jmp 0x1001aa11
and dword [ebp - 0x614], 0
cmp dword [ebp - 0x614], 0xe24307a3
jbe 0x1001aa29
mov dword [ebp - 0x4e4], 1
jmp 0x1001aa30
and dword [ebp - 0x4e4], 0
imul eax, dword [ebp - 0x4e4], 0xd5b6
mov ecx, dword [ebp - 0x14]
shl ecx, 3
sub ecx, eax
mov dword [ebp - 0x718], ecx
push 3
lea ecx, [ebp - 0x72c]
call fcn.10006b8e
mov ecx, dword [ebp - 0x718]
mov dword [eax], ecx
cmp dword [ebp - 0x718], 6
jge 0x1001aa84
push 3
lea ecx, [ebp - 0x72c]
call fcn.10006b8e
cmp dword [eax], 0
je 0x1001aa84
mov dword [ebp - 0x4ec], 1
jmp 0x1001aa8b
and dword [ebp - 0x4ec], 0
cmp dword [ebp - 0x4ec], 0xfffffff9
jg 0x1001aaa0
mov dword [ebp - 0x61c], 1
jmp 0x1001aaa7
and dword [ebp - 0x61c], 0
mov eax, dword [ebp - 0x14]
cmp dword [ebp - 0x61c], eax
jne 0x1001aabe
mov dword [ebp - 0x4f4], 1
jmp 0x1001aac5
and dword [ebp - 0x4f4], 0
mov eax, dword [ebp - 0x4f4]
sub eax, dword [ebp - 0x14]
dec eax
jne 0x1001aade
push 3
lea ecx, [ebp - 0x72c]
call fcn.10006b8e
mov eax, dword [ebp - 0x14]
mov dword [ebp - 0xb98], eax
mov eax, dword [ebp - 0x14]
mov dword [ebp - 0xba0], eax
mov esi, dword [ebp - 0x14]
push 3
lea ecx, [ebp - 0x72c]
call fcn.10006b8e
cmp dword [eax], esi
jl 0x1001ab10
mov dword [ebp - 0x7c8], 1
jmp 0x1001ab17
and dword [ebp - 0x7c8], 0
mov eax, 0x8fe4
cmp eax, 0xffffffff
jle 0x1001ab30
cmp dword [ebp - 0x14], 0
jne 0x1001ab30
and dword [ebp - 0x6b4], 0
jmp 0x1001ab3a
mov dword [ebp - 0x6b4], 1
mov eax, dword [ebp - 0x14]
cmp dword [ebp - 0x6b4], eax
jl 0x1001ad11
mov dword [ebp - 0xc60], 0xfffffffc
mov dword [ebp - 0x14], 0xffffffe4
jmp 0x1001ab63
mov eax, dword [ebp - 0x14]
inc eax
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 0xffffffee
jle 0x1001ad0c
mov dword [ebp - 0x4fc], 0x18d7
mov dword [ebp - 0x95c], str.uwoeus_ogufe_uju_hiwtxmfbs_tkhmi_mbeprh_vqxbrsjio_sexsn_bpe_fdk_dldsf
cmp dword [ebp - 0x4fc], 0x191d
jle 0x1001ac6d
and dword [ebp - 0x210], 0
jmp 0x1001aba7
mov eax, dword [ebp - 0x210]
inc eax
mov dword [ebp - 0x210], eax
cmp dword [ebp - 0x210], 0x68ad
jge 0x1001ac6d
and dword [ebp - 0x2e0], 0
jmp 0x1001abcd
mov eax, dword [ebp - 0x2e0]
inc eax
mov dword [ebp - 0x2e0], eax
cmp dword [ebp - 0x2e0], 0x60a
jge 0x1001ac68
and dword [ebp - 0x208], 0
jmp 0x1001abf3
mov eax, dword [ebp - 0x208]
inc eax
mov dword [ebp - 0x208], eax
cmp dword [ebp - 0x208], 0x3364
jge 0x1001ac63
and dword [ebp - 0x2a0], 0
jmp 0x1001ac15
mov eax, dword [ebp - 0x2a0]
inc eax
mov dword [ebp - 0x2a0], eax
cmp dword [ebp - 0x2a0], 0x4378
jge 0x1001ac61
mov eax, dword [ebp - 0x208]
sub eax, dword [ebp - 0x2a0]
mov ecx, dword [ebp - 0x210]
imul ecx, dword [ebp - 0x2e0]
or eax, ecx
cdq
mov dword [ebp - 0x7f4], eax
mov dword [ebp - 0x7f0], edx
push dword [ebp - 0x7f0]
push dword [ebp - 0x7f4]
mov ecx, 0x100809d8
call fcn.10006801
jmp 0x1001ac08
jmp 0x1001abe6
jmp 0x1001abc0
jmp 0x1001ab9a
mov dword [ebp - 0x218], 0
jmp 0x1001ac86
mov eax, dword [ebp - 0x218]
inc eax
mov dword [ebp - 0x218], eax
cmp dword [ebp - 0x218], 3
jge 0x1001aca2
mov eax, dword [ebp - 0x218]
mov dword [ebp + eax*4 - 0xc18], 0xfff8
jmp 0x1001ac79
mov byte [ebp - 4], 0x1a
cmp dword [ebp - 0x4fc], 0x16b8
jge 0x1001acc2
mov edx, dword [ebp - 0x95c]
mov ecx, 0x100809d8
call fcn.1000b005
jmp 0x1001acde
mov dword [ebp - 4], 0x17
jmp 0x1001acee
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0xc18]
inc eax
push 4
pop ecx
shl ecx, 1
mov dword [ebp + ecx - 0xc18], eax
jmp 0x1001ab5c
jmp 0x1001aff8
mov dword [ebp - 0x7d4], 0x8f438361
mov dword [ebp - 0x62c], 0xb861
mov dword [ebp - 0x964], 0xffffffff
mov dword [ebp - 0x14], 0
jmp 0x1001ad3f
mov eax, dword [ebp - 0x14]
inc eax
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 0x1d
jl 0x1001ae93
mov dword [ebp - 0xd0], 0xbb53
push 0
lea ecx, [ebp - 0x72c]
call fcn.10006b8e
cmp dword [ebp - 0x7d4], 0
jne 0x1001ad80
mov eax, dword [ebp - 0xf8]
cmp eax, dword [ebp - 0xd0]
jne 0x1001ad80
and dword [ebp - 0x624], 0
jmp 0x1001ad8a
mov dword [ebp - 0x624], 1
mov eax, dword [ebp - 0x624]
neg eax
cmp eax, 0x58a13c44
jl 0x1001ada5
mov dword [ebp - 0x504], 1
jmp 0x1001adac
and dword [ebp - 0x504], 0
mov eax, dword [ebp - 0x62c]
cmp dword [ebp - 0x504], eax
jl 0x1001adc6
mov dword [ebp - 0x700], 1
jmp 0x1001adcd
and dword [ebp - 0x700], 0
mov eax, dword [ebp - 0xd0]
cmp dword [ebp - 0x700], eax
je 0x1001aded
cmp dword [ebp - 0x14], 0
je 0x1001aded
mov dword [ebp - 0x50c], 1
jmp 0x1001adf4
and dword [ebp - 0x50c], 0
push 1
lea ecx, [ebp - 0x72c]
call fcn.10006b8e
mov ecx, dword [ebp - 0x50c]
mov dword [eax], ecx
mov dword [ebp - 0xd0], 0
jmp 0x1001ae22
mov eax, dword [ebp - 0xd0]
dec eax
mov dword [ebp - 0xd0], eax
cmp dword [ebp - 0xd0], 0xffffffef
jle 0x1001ae8e
mov dword [ebp - 0xca0], 0
mov dword [ebp - 0xc9c], 0
mov dword [ebp - 0xc98], 0
mov dword [ebp - 0xc94], 0
mov esi, dword [ebp - 0x62c]
push 1
lea ecx, [ebp - 0x72c]
call fcn.10006b8e
mov dword [eax], esi
push 1
lea ecx, [ebp - 0xaac]
call fcn.10006b8e
mov dword [ebp - 0x514], eax
mov eax, dword [ebp - 0x514]
mov eax, dword [eax]
dec eax
mov ecx, dword [ebp - 0x514]
mov dword [ecx], eax
jmp 0x1001ae15
jmp 0x1001ad38
mov dword [ebp - 0xf8], 0
jmp 0x1001aeac
mov eax, dword [ebp - 0xf8]
inc eax
mov dword [ebp - 0xf8], eax
cmp dword [ebp - 0xf8], 0x2d
jne 0x1001aff8
mov byte [ebp - 0xad], 0
movzx eax, byte [ebp - 0xad]
test eax, eax
je 0x1001afe9
mov dword [ebp - 0x6bc], 0x1770
mov dword [ebp - 0x7e0], str.xcye_hgtljrk_oav_wyr_gfayu_gobiqtnwg_zdobt_krsmomhpn
cmp dword [ebp - 0x6bc], 0x17ed
jle 0x1001af99
and dword [ebp - 0x2e8], 0
jmp 0x1001af09
mov eax, dword [ebp - 0x2e8]
inc eax
mov dword [ebp - 0x2e8], eax
cmp dword [ebp - 0x2e8], 0x393d
jge 0x1001af99
and dword [ebp - 0x220], 0
jmp 0x1001af2f
mov eax, dword [ebp - 0x220]
inc eax
mov dword [ebp - 0x220], eax
cmp dword [ebp - 0x220], 0x3de6
jge 0x1001af94
mov eax, dword [ebp - 0x2e8]
mov ecx, dword [ebp - 0x220]
shl eax, cl
cdq
mov dword [ebp - 0x800], eax
mov dword [ebp - 0x7fc], edx
push dword [ebp - 0x7fc]
push dword [ebp - 0x800]
lea ecx, [ebp - 0xd88]
call fcn.10001ac9
pop ecx
pop ecx
mov dword [ebp - 0x904], eax
mov ecx, dword [ebp - 0x904]
call fcn.10006659
push eax
call fcn.1004e1ed
pop ecx
lea ecx, [ebp - 0xd88]
call fcn.1000664f
jmp 0x1001af22
jmp 0x1001aefc
push 0
call dword [sym.imp.KERNEL32.dll_UnmapViewOfFile]
mov byte [ebp - 4], 0x1c
cmp dword [ebp - 0x6bc], 0x158f
jge 0x1001afbd
push dword [ebp - 0x7e0]
call fcn.1004e1ed
pop ecx
jmp 0x1001afd9
mov dword [ebp - 4], 0x17
jmp 0x1001afe9
mov dword [ebp - 0x964], 0x2f88b317
jmp 0x1001ae9f
mov byte [ebp - 4], 0x16
lea ecx, [ebp - 0xaac]
call fcn.10006b72
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x72c]
call fcn.10006b72
mov dword [ebp - 4], 0x1e
cmp dword [ebp - 0x51c], 0x2cd2
jge 0x1001b039
mov edx, dword [ebp - 0x7ec]
mov ecx, 0x100809d8
call fcn.1000b005
jmp 0x1001b055
or dword [ebp - 4], 0xffffffff
jmp 0x1001b05f
cmp dword [ebp - 0x510], 0
je 0x1001d079
mov dword [ebp - 0x40], 8
mov dword [ebp - 0x98], 0x6c516535
mov dword [ebp - 0xc4], 0
mov dword [ebp - 0x4c], 0
mov dword [ebp - 0x240], 0xe0bbe0e2
push 0xfffffffffffffffa
pop eax
test eax, eax
je 0x1001b167
mov eax, dword [ebp - 0x40]
cmp eax, dword [ebp - 0x40]
jg 0x1001b0b7
mov dword [ebp - 0x634], 1
jmp 0x1001b0be
and dword [ebp - 0x634], 0
mov eax, dword [ebp - 0x98]
cmp eax, dword [ebp - 0x634]
je 0x1001b0d8
mov dword [ebp - 0x524], 1
jmp 0x1001b0df
and dword [ebp - 0x524], 0
mov eax, dword [ebp - 0x40]
cmp eax, dword [ebp - 0x524]
jle 0x1001b0f6
mov dword [ebp - 0x730], 1
jmp 0x1001b0fd
and dword [ebp - 0x730], 0
mov eax, dword [ebp - 0x40]
cmp dword [ebp - 0x730], eax
jg 0x1001b114
mov dword [ebp - 0x52c], 1
jmp 0x1001b11b
and dword [ebp - 0x52c], 0
mov eax, dword [ebp - 0x98]
cmp dword [ebp - 0x52c], eax
jge 0x1001b135
mov dword [ebp - 0x63c], 1
jmp 0x1001b13c
and dword [ebp - 0x63c], 0
mov eax, dword [ebp - 0x63c]
mov dword [ebp - 0xc4], eax
imul eax, dword [ebp - 0xc4], 0x69f
mov ecx, 0xb136
sub ecx, eax
je 0x1001b167
mov dword [ebp - 0x534], 1
jmp 0x1001b16e
and dword [ebp - 0x534], 0
mov eax, dword [ebp - 0x534]
mov dword [ebp - 0x4c], eax
mov dword [ebp - 0xc4], 0
jmp 0x1001b190
mov eax, dword [ebp - 0xc4]
dec eax
mov dword [ebp - 0xc4], eax
cmp dword [ebp - 0xc4], 0xfffffff7
jne 0x1001baa7
mov dword [ebp - 0xa0], 0x2ba7b7e8
mov dword [ebp - 0xa34], 0x674b172a
mov dword [ebp - 0xa30], 0x674b172a
mov dword [ebp - 0xa2c], 0x674b172a
mov dword [ebp - 0xa28], 0x674b172a
lea ecx, [ebp - 0x31a]
call fcn.10006b9d
push eax
lea eax, [ebp - 0xa24]
push eax
lea eax, [ebp - 0xa34]
push eax
lea ecx, [ebp - 0xd08]
call fcn.10006e2c
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0xc28]
call fcn.10006b4c
mov dword [ebp - 4], 0x20
mov dword [ebp - 0x914], 0x20b8
cmp dword [ebp - 0x914], 0x1112
jge 0x1001b380
lea eax, [ebp - 0x2ac]
push eax
push 0x1006d9fc
call fcn.1004dc6b
pop ecx
pop ecx
push dword [ebp - 0x2ac]
lea ecx, [ebp - 0x910]
call fcn.1000708d
mov byte [ebp - 4], 0x21
and dword [ebp - 0x228], 0
and dword [ebp - 0x10c], 0
jmp 0x1001b26a
mov eax, dword [ebp - 0x10c]
inc eax
mov dword [ebp - 0x10c], eax
mov eax, dword [ebp - 0x10c]
cmp eax, dword [ebp - 0x2ac]
jge 0x1001b2be
push dword [ebp - 0x10c]
lea ecx, [ebp - 0x910]
call fcn.10006b8e
push eax
push 0x1006d9fc
call fcn.1004dc6b
pop ecx
pop ecx
push dword [ebp - 0x10c]
lea ecx, [ebp - 0x910]
call fcn.10006b8e
push dword [eax]
push dword [ebp - 0x228]
call fcn.10017fe9
pop ecx
pop ecx
mov dword [ebp - 0x228], eax
jmp 0x1001b25d
push 0
lea ecx, [ebp - 0x910]
call fcn.10006b8e
mov ecx, dword [ebp - 0x228]
cmp ecx, dword [eax]
jge 0x1001b2e5
push 0x1006f3a8
call fcn.1004e4c3
pop ecx
jmp 0x1001b371
mov eax, dword [ebp - 0x2ac]
shl eax, 1
push eax
push str._ld_n
call fcn.1004e1ed
pop ecx
pop ecx
and dword [ebp - 0x110], 0
jmp 0x1001b310
mov eax, dword [ebp - 0x110]
inc eax
mov dword [ebp - 0x110], eax
mov eax, dword [ebp - 0x2ac]
shl eax, 1
cmp dword [ebp - 0x110], eax
jge 0x1001b366
mov eax, dword [ebp - 0x110]
and eax, 1
je 0x1001b33f
push dword [ebp - 0x228]
push str._ld
call fcn.1004e1ed
pop ecx
pop ecx
jmp 0x1001b364
mov eax, dword [ebp - 0x110]
cdq
sub eax, edx
sar eax, 1
push eax
lea ecx, [ebp - 0x910]
call fcn.10006b8e
push dword [eax]
push str._ld
call fcn.1004e1ed
pop ecx
pop ecx
jmp 0x1001b303
push 0x1006d969
call fcn.1004e4c3
pop ecx
mov byte [ebp - 4], 0x20
lea ecx, [ebp - 0x910]
call fcn.10006b72
mov dword [ebp - 0x2cc], 0
jmp 0x1001b399
mov eax, dword [ebp - 0x2cc]
inc eax
mov dword [ebp - 0x2cc], eax
cmp dword [ebp - 0x2cc], 1
jge 0x1001b3b5
mov eax, dword [ebp - 0x2cc]
mov dword [ebp + eax*4 - 0x300], 0
jmp 0x1001b38c
mov eax, dword [ebp - 0xc4]
mov dword [ebp - 0xa0], eax
mov dword [ebp - 0x40], 0xfffffff6
jmp 0x1001b3d1
mov eax, dword [ebp - 0x40]
inc eax
mov dword [ebp - 0x40], eax
cmp dword [ebp - 0x40], 0x38
jg 0x1001ba93
push 3
lea ecx, [ebp - 0x780]
call fcn.10006b10
mov byte [ebp - 4], 0x22
mov dword [ebp - 0x810], 0xfffffff6
mov dword [ebp - 0x74], 0
jmp 0x1001b406
mov eax, dword [ebp - 0x74]
inc eax
mov dword [ebp - 0x74], eax
cmp dword [ebp - 0x74], 3
jge 0x1001b422
push dword [ebp - 0x74]
lea ecx, [ebp - 0x780]
call fcn.10006b8e
mov dword [eax], 0xba5f27a4
jmp 0x1001b3ff
mov dword [ebp - 0x74], 0
jmp 0x1001b432
mov eax, dword [ebp - 0x74]
inc eax
mov dword [ebp - 0x74], eax
cmp dword [ebp - 0x74], 3
jge 0x1001b448
mov eax, dword [ebp - 0x74]
mov dword [ebp + eax*4 - 0xa4c], 0x461bcf2e
jmp 0x1001b42b
mov dword [ebp - 0x98], 6
jmp 0x1001b461
mov eax, dword [ebp - 0x98]
inc eax
mov dword [ebp - 0x98], eax
cmp dword [ebp - 0x98], 0x18
jge 0x1001ba7f
push 2
lea ecx, [ebp - 0x920]
call fcn.10006b10
mov byte [ebp - 4], 0x23
push 2
lea ecx, [ebp - 0xa58]
call fcn.10006b10
mov byte [ebp - 4], 0x24
mov dword [ebp - 0x88], 0
jmp 0x1001b4a9
mov eax, dword [ebp - 0x88]
inc eax
mov dword [ebp - 0x88], eax
cmp dword [ebp - 0x88], 2
jge 0x1001b4cb
push dword [ebp - 0x88]
lea ecx, [ebp - 0x920]
call fcn.10006b8e
mov dword [eax], 0xc1fcc8af
jmp 0x1001b49c
mov dword [ebp - 0x88], 0
jmp 0x1001b4e4
mov eax, dword [ebp - 0x88]
inc eax
mov dword [ebp - 0x88], eax
cmp dword [ebp - 0x88], 2
jge 0x1001b506
push dword [ebp - 0x88]
lea ecx, [ebp - 0xa58]
call fcn.10006b8e
mov dword [eax], 0xde68
jmp 0x1001b4d7
mov dword [ebp - 0x4c], 0
jmp 0x1001b516
mov eax, dword [ebp - 0x4c]
inc eax
mov dword [ebp - 0x4c], eax
cmp dword [ebp - 0x4c], 2
jg 0x1001ba5c
mov dword [ebp - 0x118], 7
mov dword [ebp - 0xa0], 0
jmp 0x1001b543
cmp dword [ebp - 0xa0], 2
jg 0x1001ba57
mov dword [ebp - 0x138], 0x7b09b37d
mov dword [ebp - 0x2dc], 0x7d3709e8
mov dword [ebp - 0x138], 2
jmp 0x1001b57d
cmp dword [ebp - 0x138], 0
jl 0x1001b973
mov dword [ebp - 0x368], 0x83dcdcbd
mov dword [ebp - 0x360], 0x3df3
mov dword [ebp - 0x804], str.hou_myuow_pdari_jvdnhbexu
cmp dword [ebp - 0x360], 0x3e32
jle 0x1001b68d
and dword [ebp - 0x230], 0
jmp 0x1001b5ce
cmp dword [ebp - 0x230], 0x3827
jge 0x1001b68d
and dword [ebp - 0x2b4], 0
jmp 0x1001b5f4
mov dword [ebp - 0x2dc], 1
cmp dword [ebp - 0x2dc], 0
jne 0x1001b6e0
xor eax, eax
jne 0x1001b6bf
push 1
lea ecx, [ebp - 0x780]
call fcn.10006b8e
cmp dword [eax], 0
jne 0x1001b6bf
mov dword [ebp - 0x6c4], 1
mov eax, dword [ebp - 0x98]
cmp dword [ebp - 0x6c4], eax
jle 0x1001b6e0
mov dword [ebp - 0x53c], 1
cmp dword [ebp - 0x53c], 0xffffffff
jge 0x1001b6ff
mov dword [ebp - 0x96c], 1
jmp 0x1001b706
and dword [ebp - 0x96c], 0
push dword [ebp - 0x4c]
lea ecx, [ebp - 0x780]
call fcn.10006b8e
mov esi, dword [ebp - 0xa0]
push dword [ebp - 0x4c]
lea ecx, [ebp - 0x780]
call fcn.10006b8e
cmp esi, dword [eax]
jg 0x1001b738
mov eax, dword [ebp - 0x118]
mov dword [ebp - 0x240], eax
cmp dword [ebp - 0x240], 0
jne 0x1001b9a3
push 1
lea ecx, [ebp - 0xa58]
call fcn.10006b8e
cmp dword [eax], 1
jb 0x1001b9a3
and dword [ebp - 0x30c], 0
jmp 0x1001b9ad
mov dword [ebp - 0x30c], 1
push dword [ebp - 0x4c]
lea ecx, [ebp - 0x780]
call fcn.10006b8e
mov ecx, dword [ebp - 0x30c]
mov dword [eax], ecx
mov eax, dword [ebp - 0x30c]
sub eax, 0x15b7d07a
cmp eax, 0xfffd
jne 0x1001b9e1
mov dword [ebp - 0x398], 1
jmp 0x1001b9e8
and dword [ebp - 0x398], 0
mov esi, dword [ebp - 0x118]
mov edi, dword [ebp - 0x118]
push 4
pop eax
shl eax, 0
mov ebx, dword [ebp + eax - 0xa4c]
push 0
lea ecx, [ebp - 0xc28]
call fcn.10006b8e
mov eax, dword [eax]
add eax, dword [ebp - 0x398]
imul eax, ebx
sub eax, edi
cmp eax, esi
jg 0x1001ba2b
mov dword [ebp - 0x924], 1
jmp 0x1001ba32
and dword [ebp - 0x924], 0
push 0
lea ecx, [ebp - 0x920]
call fcn.10006b8e
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0xa4c]
mov dword [ebp - 0x810], eax
jmp 0x1001b536
jmp 0x1001b50f
mov byte [ebp - 4], 0x23
lea ecx, [ebp - 0xa58]
call fcn.10006b72
mov byte [ebp - 4], 0x22
lea ecx, [ebp - 0x920]
call fcn.10006b72
jmp 0x1001b454
mov byte [ebp - 4], 0x20
lea ecx, [ebp - 0x780]
call fcn.10006b72
jmp 0x1001b3ca
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xc28]
call fcn.10006b72
jmp 0x1001b183
mov dword [ebp - 0xc78], 0xec3d
mov dword [ebp - 0xca8], 0x4d8e5ccc
push 1
lea ecx, [ebp - 0xa70]
call fcn.10006b10
mov dword [ebp - 4], 0x27
mov dword [ebp - 0x50], 0
jmp 0x1001badf
mov eax, dword [ebp - 0x50]
inc eax
mov dword [ebp - 0x50], eax
cmp dword [ebp - 0x50], 1
jge 0x1001baf5
mov eax, dword [ebp - 0x50]
mov dword [ebp + eax*4 - 0xcb0], 0x394a2a4f
jmp 0x1001bad8
mov dword [ebp - 0x50], 0
jmp 0x1001bb05
mov eax, dword [ebp - 0x50]
inc eax
mov dword [ebp - 0x50], eax
cmp dword [ebp - 0x50], 1
jge 0x1001bb1e
push dword [ebp - 0x50]
lea ecx, [ebp - 0xa70]
call fcn.10006b8e
or dword [eax], 0xffffffff
jmp 0x1001bafe
push 0
lea ecx, [ebp - 0xa70]
call fcn.10006b8e
mov dword [ebp - 0x3a0], eax
mov eax, dword [ebp - 0x3a0]
mov eax, dword [eax]
dec eax
mov ecx, dword [ebp - 0x3a0]
mov dword [ecx], eax
mov byte [ebp - 0xaf], 0
mov dword [ebp - 0x3a8], 0x7251
mov dword [ebp - 0x81c], str.qurcwgro_knabadqbm_xsg_uluvrzr_efeqnoafz_cyhout_ctumrr_tdrjmqc_fwk_fsnuwogv_gevribdsi
cmp dword [ebp - 0x3a8], 0x7322
jle 0x1001bc56
and dword [ebp - 0x2d4], 0
jmp 0x1001bb83
mov eax, dword [ebp - 0x2d4]
inc eax
mov dword [ebp - 0x2d4], eax
cmp dword [ebp - 0x2d4], 0x3b07
jge 0x1001bc42
and dword [ebp - 0x2bc], 0
jmp 0x1001bba9
mov eax, dword [ebp - 0x2bc]
inc eax
mov dword [ebp - 0x2bc], eax
cmp dword [ebp - 0x2bc], 0x2f6a
jge 0x1001bc3d
and dword [ebp - 0x248], 0
jmp 0x1001bbcf
mov eax, dword [ebp - 0x248]
inc eax
mov dword [ebp - 0x248], eax
cmp dword [ebp - 0x248], 0x22be
jge 0x1001bc38
mov eax, dword [ebp - 0x2bc]
sub eax, dword [ebp - 0x248]
and eax, dword [ebp - 0x2d4]
cdq
mov dword [ebp - 0x818], eax
mov dword [ebp - 0x814], edx
push dword [ebp - 0x814]
push dword [ebp - 0x818]
lea ecx, [ebp - 0xdb8]
call fcn.10001ac9
pop ecx
pop ecx
mov dword [ebp - 0x974], eax
mov ecx, dword [ebp - 0x974]
call fcn.10006659
push eax
call fcn.1004e1ed
pop ecx
lea ecx, [ebp - 0xdb8]
call fcn.1000664f
jmp 0x1001bbc2
jmp 0x1001bb9c
jmp 0x1001bb76
push 0
push 0xcf7
push 0
push 0x409
call dword [sym.imp.GDI32.dll_GetTextExtentPoint32A]
movzx eax, byte [ebp - 0xaf]
test eax, eax
je 0x1001bc75
push 0x16c6
push 0
push 0
push 0xa43
call dword [sym.imp.GDI32.dll_PolyPolyline]
mov byte [ebp - 4], 0x28
cmp dword [ebp - 0x3a8], 0x71c7
jge 0x1001bc91
push dword [ebp - 0x81c]
call fcn.1004e1ed
pop ecx
jmp 0x1001bcad
mov dword [ebp - 4], 0x27
jmp 0x1001bcbd
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xa70]
call fcn.10006b72
mov dword [ebp - 0x1c], 0xc184
mov dword [ebp - 0x250], 1
mov dword [ebp - 0x2c4], 0x11b9c6fe
cmp dword [ebp - 0x1c], 0
jne 0x1001bd8a
cmp dword [ebp - 0x1c], 0x5a63a74a
jg 0x1001bd06
mov dword [ebp - 0x3b0], 1
jmp 0x1001bd0d
and dword [ebp - 0x3b0], 0
mov eax, dword [ebp - 0x3b0]
mov dword [ebp - 0x250], eax
mov eax, dword [ebp - 0x250]
cmp eax, dword [ebp - 0x1c]
jne 0x1001bd39
mov eax, 0x1e60
test eax, eax
je 0x1001bd39
mov dword [ebp - 0x3b8], 1
jmp 0x1001bd40
and dword [ebp - 0x3b8], 0
mov eax, dword [ebp - 0x1c]
imul eax, dword [ebp - 0x3b8]
test eax, eax
je 0x1001bd63
mov eax, 0xc9d8d924
test eax, eax
je 0x1001bd63
mov dword [ebp - 0x3c0], 1
jmp 0x1001bd6a
and dword [ebp - 0x3c0], 0
mov eax, dword [ebp - 0x3c0]
mov dword [ebp - 0x2c4], eax
mov eax, dword [ebp - 0x2c4]
add eax, dword [ebp - 0x1c]
jne 0x1001bd8a
and dword [ebp - 0x3c8], 0
jmp 0x1001bd94
mov dword [ebp - 0x3c8], 1
mov eax, dword [ebp - 0x1c]
cmp dword [ebp - 0x3c8], eax
je 0x1001bdab
mov dword [ebp - 0x3d0], 1
jmp 0x1001bdb2
and dword [ebp - 0x3d0], 0
mov eax, dword [ebp - 0x1c]
cmp dword [ebp - 0x3d0], eax
je 0x1001bdc9
mov dword [ebp - 0x3d8], 1
jmp 0x1001bdd0
and dword [ebp - 0x3d8], 0
cmp dword [ebp - 0x3d8], 0
jg 0x1001bde5
mov dword [ebp - 0x3e0], 1
jmp 0x1001bdec
and dword [ebp - 0x3e0], 0
mov eax, dword [ebp - 0x1c]
cmp dword [ebp - 0x3e0], eax
jne 0x1001be03
mov dword [ebp - 0x3e8], 1
jmp 0x1001be0a
and dword [ebp - 0x3e8], 0
mov eax, dword [ebp - 0x3e8]
sub eax, dword [ebp - 0x1c]
add eax, dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], eax
jg 0x1001be27
mov dword [ebp - 0x350], 1
jmp 0x1001be2e
and dword [ebp - 0x350], 0
mov eax, dword [ebp - 0x1c]
imul eax, dword [ebp - 0x350]
cmp eax, 1
je 0x1001be52
cmp dword [ebp - 0x2c4], 0
je 0x1001be52
mov dword [ebp - 0x3f8], 1
jmp 0x1001be59
and dword [ebp - 0x3f8], 0
mov eax, dword [ebp - 0x1c]
cmp dword [ebp - 0x3f8], eax
jle 0x1001be70
mov dword [ebp - 0x400], 1
jmp 0x1001be77
and dword [ebp - 0x400], 0
mov eax, dword [ebp - 0x400]
add eax, 0xad7b
cmp eax, dword [ebp - 0x1c]
jl 0x1001be93
mov dword [ebp - 0x408], 1
jmp 0x1001be9a
and dword [ebp - 0x408], 0
imul eax, dword [ebp - 0x408], 0xd5f4
test eax, eax
je 0x1001beb1
cmp dword [ebp - 0x250], 0
jne 0x1001bec0
cmp dword [ebp - 0x1c], 0
jne 0x1001bec0
and dword [ebp - 0x410], 0
jmp 0x1001beca
mov dword [ebp - 0x410], 1
mov eax, dword [ebp - 0x1c]
cmp eax, dword [ebp - 0x410]
jge 0x1001bf3a
mov dword [ebp - 0x97c], 0xfffffff7
mov eax, dword [ebp - 0x250]
neg eax
jne 0x1001befb
cmp dword [ebp - 0x97c], 0
jne 0x1001befb
and dword [ebp - 0x418], 0
jmp 0x1001bf05
mov dword [ebp - 0x418], 1
mov eax, dword [ebp - 0x418]
mov dword [ebp - 0x2c4], eax
mov byte [ebp - 0xb1], 0
movzx eax, byte [ebp - 0xb1]
test eax, eax
je 0x1001bf35
push 0x111b
push 0x1d4c
push 0
call dword [sym.imp.KERNEL32.dll_SetHandleInformation]
jmp 0x1001c093
mov byte [ebp - 0xb3], 0
movzx eax, byte [ebp - 0xb3]
test eax, eax
je 0x1001c093
mov dword [ebp - 0x420], 0x6123
mov dword [ebp - 0x828], str.tfc_sxmdacs_izva_daopweuhx_acau_lmdxsyxg_rccdpcmja_loyfbl_vgufvcqk_yvl_ahdqff
cmp dword [ebp - 0x420], 0x648e
jle 0x1001c031
and dword [ebp - 0x258], 0
jmp 0x1001bf8a
cmp dword [ebp - 0x258], 0xc49
jge 0x1001c01d
push 0
push 0
push 0x235f
push 0x2039
push 0xc88
call dword [sym.imp.USER32.dll_ScrollWindow]
mov dword [ebp - 4], 0x2a
cmp dword [ebp - 0x420], 0x5dcc
jge 0x1001c06d
mov edx, dword [ebp - 0x828]
mov ecx, 0x100809d8
call fcn.1000b005
jmp 0x1001c089
mov byte [ebp - 0x178], 0xc
mov byte [ebp - 0x177], 0xe5
mov byte [ebp - 0x176], 0xa
mov byte [ebp - 0x175], 1
mov byte [ebp - 0x174], 9
mov byte [ebp - 0x173], 0x16
mov byte [ebp - 0x172], 0xd
mov byte [ebp - 0x171], 0x17
mov byte [ebp - 0x170], 0
mov byte [ebp - 0x16f], 0x34
mov byte [ebp - 0x16e], 7
mov byte [ebp - 0x16d], 6
mov byte [ebp - 0x16c], 8
mov byte [ebp - 0x16b], 0x25
mov byte [ebp - 0x16a], 2
mov byte [ebp - 0x169], 0x10
mov byte [ebp - 0x168], 6
mov byte [ebp - 0x167], 0x17
mov byte [ebp - 0x166], 3
mov byte [ebp - 0x165], 0x33
mov byte [ebp - 0x164], 1
mov byte [ebp - 0x163], 0x35
mov byte [ebp - 0x162], 5
mov byte [ebp - 0x161], 0xa
mov byte [ebp - 0x160], 0xb
mov byte [ebp - 0x15f], 0xa
mov byte [ebp - 0x15e], 1
mov byte [ebp - 0x15d], 0xb2
mov byte [ebp - 0x15c], 4
mov byte [ebp - 0x15b], 0x17
mov dword [ebp - 0x130], 0xf365
mov dword [ebp - 0x18c], 0
push 2
lea ecx, [ebp - 0x768]
call fcn.10006b10
mov dword [ebp - 4], 0x2c
mov dword [ebp - 0x448], 0xfffffffe
mov dword [ebp - 0x930], 0x5169ff4c
mov dword [ebp - 0x58], 0
jmp 0x1001c1b1
cmp dword [ebp - 0x58], 1
jge 0x1001c1c7
mov eax, dword [ebp - 0x58]
mov dword [ebp + eax*4 - 0x430], 0
jmp 0x1001c1aa
mov dword [ebp - 0x58], 0
jmp 0x1001c1d7
mov dword [ebp - 0x940], 0x2fd4
mov dword [ebp - 0x528], 0xffffffff
mov dword [ebp - 0x550], 0
mov dword [ebp - 0x948], 0
mov dword [ebp - 0xb2c], 0xf9c77509
mov byte [ebp - 0xac], 0
movzx eax, byte [ebp - 0xac]
test eax, eax
je 0x1001d0c5
push 0
call dword [sym.imp.KERNEL32.dll_DeleteFileA]
cmp dword [ebp - 0x940], 0
je 0x1001d104
mov dword [ebp - 0x518], 0x897
mov eax, dword [ebp - 0x518]
dec eax
mov dword [ebp - 0x518], eax
mov byte [ebp - 0xbc], 0
movzx eax, byte [ebp - 0xbc]
test eax, eax
je 0x1001d0ff
push 0
call dword [sym.imp.KERNEL32.dll_GlobalUnlock]
jmp 0x1001d357
mov dword [ebp - 0x520], 0x28b5
mov dword [ebp - 0x980], str.lclkvywu_fvcecy_sxqcem_xtq_zjjsi_xwwlpfgad_meqkvsof_sahtr
cmp dword [ebp - 0x520], 0x2c06
jle 0x1001d22f
and dword [ebp - 0x204], 0
jmp 0x1001d13e
mov eax, dword [ebp - 0x204]
inc eax
mov dword [ebp - 0x204], eax
cmp dword [ebp - 0x204], 0x4220
jge 0x1001d22f
and dword [ebp - 0x20c], 0
jmp 0x1001d164
mov eax, dword [ebp - 0x20c]
inc eax
mov dword [ebp - 0x20c], eax
cmp dword [ebp - 0x20c], 0x4292
jge 0x1001d22a
and dword [ebp - 0x214], 0
jmp 0x1001d18a
mov eax, dword [ebp - 0x214]
inc eax
mov dword [ebp - 0x214], eax
cmp dword [ebp - 0x214], 0x6edf
jge 0x1001d225
and dword [ebp - 0x21c], 0
jmp 0x1001d1b0
mov eax, dword [ebp - 0x21c]
inc eax
mov dword [ebp - 0x21c], eax
cmp dword [ebp - 0x21c], 0x1abf
jge 0x1001d220
mov eax, dword [ebp - 0x204]
imul eax, dword [ebp - 0x20c]
sub eax, dword [ebp - 0x214]
or eax, dword [ebp - 0x21c]
cdq
mov dword [ebp - 0x830], eax
mov dword [ebp - 0x82c], edx
push dword [ebp - 0x82c]
push dword [ebp - 0x830]
lea ecx, [ebp - 0xe0c]
call fcn.10001ac9
pop ecx
pop ecx
mov dword [ebp - 0x864], eax
mov ecx, dword [ebp - 0x864]
call fcn.10006659
push eax
call fcn.1004e1ed
pop ecx
lea ecx, [ebp - 0xe0c]
call fcn.1000664f
jmp 0x1001d1a3
jmp 0x1001d17d
jmp 0x1001d157
jmp 0x1001d131
mov dword [ebp - 0xdc], 0
mov dword [ebp - 4], 0x32
cmp dword [ebp - 0x520], 0x26a8
jge 0x1001d258
push dword [ebp - 0x980]
call fcn.1004e1ed
pop ecx
jmp 0x1001d274
or dword [ebp - 4], 0xffffffff
jmp 0x1001d27e
mov eax, dword [ebp - 0xdc]
mov dword [ebp - 0x528], eax
mov eax, dword [ebp - 0x550]
sub eax, dword [ebp - 0xdc]
cmp eax, dword [ebp - 0x528]
jne 0x1001d2aa
mov dword [ebp - 0x530], 1
jmp 0x1001d2b1
and dword [ebp - 0x530], 0
mov eax, dword [ebp - 0xdc]
imul eax, dword [ebp - 0xdc]
test eax, eax
je 0x1001d2d7
mov eax, 0x823a
test eax, eax
je 0x1001d2d7
mov dword [ebp - 0x86c], 1
jmp 0x1001d2de
and dword [ebp - 0x86c], 0
mov eax, dword [ebp - 0xdc]
mov dword [ebp - 0xc0c], eax
mov eax, dword [ebp - 0xdc]
cmp dword [ebp - 0x530], eax
jle 0x1001d304
mov dword [ebp - 0x538], 1
jmp 0x1001d30b
and dword [ebp - 0x538], 0
cmp dword [ebp - 0x538], 0xb66f
jg 0x1001d323
mov dword [ebp - 0x540], 1
jmp 0x1001d32a
and dword [ebp - 0x540], 0
mov eax, dword [ebp - 0x948]
cmp dword [ebp - 0x540], eax
je 0x1001d344
mov dword [ebp - 0x548], 1
jmp 0x1001d34b
and dword [ebp - 0x548], 0
mov eax, dword [ebp - 0x548]
mov dword [ebp - 0x550], eax
cmp dword [0x10081b20], 0
je 0x1001e594
mov dword [ebp - 0x224], 0
push 4
lea ecx, [ebp - 0x9e8]
call fcn.10006b10
mov dword [ebp - 4], 0x34
mov dword [ebp - 0x70], 0
jmp 0x1001d392
mov eax, dword [ebp - 0x70]
inc eax
mov dword [ebp - 0x70], eax
cmp dword [ebp - 0x70], 1
jge 0x1001d3a8
mov eax, dword [ebp - 0x70]
mov dword [ebp + eax*4 - 0xb34], 0xffffffff
jmp 0x1001d38b
mov dword [ebp - 0x70], 0
jmp 0x1001d3b8
mov eax, dword [ebp - 0x70]
inc eax
mov dword [ebp - 0x70], eax
cmp dword [ebp - 0x70], 4
jge 0x1001d3d1
push dword [ebp - 0x70]
lea ecx, [ebp - 0x9e8]
call fcn.10006b8e
and dword [eax], 0
jmp 0x1001d3b1
mov dword [ebp - 0x224], 0xfffffffd
jmp 0x1001d3ea
mov eax, dword [ebp - 0x224]
inc eax
mov dword [ebp - 0x224], eax
cmp dword [ebp - 0x224], 2
jle 0x1001d488
mov dword [ebp - 0x22c], 1
mov dword [ebp - 0x558], 0xfffffff6
mov dword [ebp - 0x22c], 0
jmp 0x1001d424
mov eax, dword [ebp - 0x22c]
dec eax
mov dword [ebp - 0x22c], eax
cmp dword [ebp - 0x22c], 0
jl 0x1001d44c
push 1
lea ecx, [ebp - 0x9e8]
call fcn.10006b8e
mov dword [eax], 8
mov dword [ebp - 0x558], 8
jmp 0x1001d417
imul eax, dword [ebp - 0x558], 0x76ec
cmp eax, 0xffffffff
je 0x1001d467
mov dword [ebp - 0x560], 1
jmp 0x1001d46e
and dword [ebp - 0x560], 0
push 1
lea ecx, [ebp - 0x9e8]
call fcn.10006b8e
mov ecx, dword [ebp - 0x560]
mov dword [eax], ecx
jmp 0x1001d3dd
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x9e8]
call fcn.10006b72
mov eax, dword [ebp + 8]
mov dword [ebp - 0x950], eax
push 3
lea ecx, [ebp - 0xa40]
call fcn.10006b10
mov dword [ebp - 4], 0x35
push 3
lea ecx, [ebp - 0x774]
call fcn.10006b10
mov byte [ebp - 4], 0x36
mov dword [ebp - 0xca4], 1
mov dword [ebp - 0x78], 0
jmp 0x1001d4df
mov eax, dword [ebp - 0x78]
inc eax
mov dword [ebp - 0x78], eax
cmp dword [ebp - 0x78], 3
jge 0x1001d4fb
push dword [ebp - 0x78]
lea ecx, [ebp - 0xa40]
call fcn.10006b8e
mov dword [eax], 0x313dd33a
jmp 0x1001d4d8
mov dword [ebp - 0x78], 0
jmp 0x1001d50b
mov eax, dword [ebp - 0x78]
inc eax
mov dword [ebp - 0x78], eax
cmp dword [ebp - 0x78], 3
jge 0x1001d524
push dword [ebp - 0x78]
lea ecx, [ebp - 0x774]
call fcn.10006b8e
and dword [eax], 0
jmp 0x1001d504
push 1
lea ecx, [ebp - 0x774]
call fcn.10006b8e
and dword [eax], 0
jmp 0x1001d55a
push 1
lea ecx, [ebp - 0x774]
call fcn.10006b8e
mov dword [ebp - 0x568], eax
mov eax, dword [ebp - 0x568]
mov eax, dword [eax]
inc eax
mov ecx, dword [ebp - 0x568]
mov dword [ecx], eax
push 1
lea ecx, [ebp - 0x774]
call fcn.10006b8e
cmp dword [eax], 3
jge 0x1001d58e
push 1
lea ecx, [ebp - 0x774]
call fcn.10006b8e
push dword [eax]
lea ecx, [ebp - 0xa40]
call fcn.10006b8e
mov dword [eax], 0x2afe01bd
jmp 0x1001d536
mov byte [ebp - 4], 0x35
lea ecx, [ebp - 0x774]
call fcn.10006b72
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xa40]
call fcn.10006b72
mov eax, dword [ebp + 0xc]
mov dword [ebp - 0x894], eax
mov dword [ebp - 0x134], 0xfffffffb
mov dword [ebp - 0x234], 0
jmp 0x1001d5d8
mov eax, dword [ebp - 0x234]
inc eax
mov dword [ebp - 0x234], eax
cmp dword [ebp - 0x234], 1
jge 0x1001d5f4
mov eax, dword [ebp - 0x234]
mov dword [ebp + eax*4 - 0x970], 0xd05ba772
jmp 0x1001d5cb
mov dword [ebp - 0x570], 0xeae
mov dword [ebp - 0x87c], str.rxfyaf_qnjczabv_sod_wwvfa_xzv
cmp dword [ebp - 0x570], 0x1290
jle 0x1001d6d1
push 0
push 0
push 0x235f
push 0x2039
push 0xc88
call dword [sym.imp.USER32.dll_ScrollWindow]
and dword [ebp - 0x23c], 0
jmp 0x1001d647
mov eax, dword [ebp - 0x23c]
inc eax
mov dword [ebp - 0x23c], eax
cmp dword [ebp - 0x23c], 0x6777
jge 0x1001d6d1
and dword [ebp - 0x244], 0
jmp 0x1001d669
mov eax, dword [ebp - 0x244]
inc eax
mov dword [ebp - 0x244], eax
cmp dword [ebp - 0x244], 0x1c7c
jge 0x1001d6cc
mov eax, dword [ebp - 0x23c]
sub eax, dword [ebp - 0x244]
cdq
mov dword [ebp - 0x83c], eax
mov dword [ebp - 0x838], edx
push dword [ebp - 0x838]
push dword [ebp - 0x83c]
lea ecx, [ebp - 0xd40]
call fcn.10001ac9
pop ecx
pop ecx
mov dword [ebp - 0x874], eax
mov ecx, dword [ebp - 0x874]
call fcn.10006659
push eax
call fcn.1004e1ed
pop ecx
lea ecx, [ebp - 0xd40]
call fcn.1000664f
jmp 0x1001d65c
jmp 0x1001d63a
mov dword [ebp - 0x134], 0
jmp 0x1001d6ea
mov eax, dword [ebp - 0x134]
dec eax
mov dword [ebp - 0x134], eax
cmp dword [ebp - 0x134], 0xfffffff2
jge 0x1001d727
mov byte [ebp - 0xae], 0
movzx eax, byte [ebp - 0xae]
test eax, eax
je 0x1001d712
push 0x687
push 0
call dword [sym.imp.USER32.dll_GetSubMenu]
mov eax, dword [ebp - 0x134]
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x970], eax
jmp 0x1001d6dd
mov dword [ebp - 4], 0x37
cmp dword [ebp - 0x570], 0xb46
jge 0x1001d746
push dword [ebp - 0x87c]
call fcn.1004e1ed
pop ecx
jmp 0x1001d762
or dword [ebp - 4], 0xffffffff
jmp 0x1001d76c
mov eax, dword [ebp - 0x950]
mov dword [ebp - 0x934], eax
push 1
lea ecx, [ebp - 0x74c]
call fcn.10006b10
mov dword [ebp - 4], 0x39
mov dword [ebp - 0xe4], 0x662a2b3b
mov dword [ebp - 0x5c8], 0x223dec99
mov dword [ebp - 0x578], 0x24b3
mov dword [ebp - 0x984], str.rymmcasrs_obivio_xyksddyzz_utdp_vynigyags_nama_ebfulshz_rsnkk
cmp dword [ebp - 0x578], 0x24c0
jle 0x1001d87a
push 0x1a4f
push 0x1de0
call dword [sym.imp.USER32.dll_SetParent]
and dword [ebp - 0x24c], 0
jmp 0x1001d7ea
mov eax, dword [ebp - 0x24c]
inc eax
mov dword [ebp - 0x24c], eax
cmp dword [ebp - 0x24c], 0x4530
jge 0x1001d87a
and dword [ebp - 0x254], 0
jmp 0x1001d810
mov eax, dword [ebp - 0x254]
inc eax
mov dword [ebp - 0x254], eax
cmp dword [ebp - 0x254], 0x7018
jge 0x1001d875
mov eax, dword [ebp - 0x24c]
mov ecx, dword [ebp - 0x254]
sar eax, cl
cdq
mov dword [ebp - 0x848], eax
mov dword [ebp - 0x844], edx
push dword [ebp - 0x844]
push dword [ebp - 0x848]
lea ecx, [ebp - 0xd70]
call fcn.10001ac9
pop ecx
pop ecx
mov dword [ebp - 0x884], eax
mov ecx, dword [ebp - 0x884]
call fcn.10006659
push eax
call fcn.1004e1ed
pop ecx
lea ecx, [ebp - 0xd70]
call fcn.1000664f
jmp 0x1001d803
jmp 0x1001d7dd
mov dword [ebp - 0x8c], 0
jmp 0x1001d893
mov eax, dword [ebp - 0x8c]
inc eax
mov dword [ebp - 0x8c], eax
cmp dword [ebp - 0x8c], 1
jge 0x1001d8b5
push dword [ebp - 0x8c]
lea ecx, [ebp - 0x74c]
call fcn.10006b8e
mov dword [eax], 0xfffffff8
jmp 0x1001d886
mov byte [ebp - 4], 0x3a
cmp dword [ebp - 0x578], 0x2380
jge 0x1001d8d1
push dword [ebp - 0x984]
call fcn.1004e1ed
pop ecx
jmp 0x1001d8ed
mov dword [ebp - 4], 0x39
jmp 0x1001d8fd
mov dword [ebp - 0x8c], 0
jmp 0x1001d916
mov eax, dword [ebp - 0x8c]
inc eax
mov dword [ebp - 0x8c], eax
cmp dword [ebp - 0x8c], 1
jge 0x1001d92f
mov eax, dword [ebp - 0x8c]
mov dword [ebp + eax*4 - 0x38], 0xffffffff
jmp 0x1001d909
mov dword [ebp - 0x580], 0x2f49
mov dword [ebp - 0x958], str.pwjm_ruljmqn_fmm_egmwyaaq_tnzikh_olan_ajxs_erezi_kevjv_ojpo_qabkiezj
cmp dword [ebp - 0x580], 0x3195
jle 0x1001da7d
push 0
push 0xe7c
push 0x216b
push 0x108
push 0x475
call dword [sym.imp.GDI32.dll_CreateBitmap]
and dword [ebp - 0x26c], 0
jmp 0x1001d985
mov eax, dword [ebp - 0x26c]
inc eax
mov dword [ebp - 0x26c], eax
cmp dword [ebp - 0x26c], 0x3c66
jge 0x1001da7d
and dword [ebp - 0x274], 0
jmp 0x1001d9ab
mov eax, dword [ebp - 0x274]
inc eax
mov dword [ebp - 0x274], eax
cmp dword [ebp - 0x274], 0x2b1b
jge 0x1001da78
and dword [ebp - 0x25c], 0
jmp 0x1001d9d1
mov eax, dword [ebp - 0x25c]
inc eax
mov dword [ebp - 0x25c], eax
cmp dword [ebp - 0x25c], 0x72c1
jge 0x1001da73
and dword [ebp - 0x264], 0
jmp 0x1001d9f7
mov eax, dword [ebp - 0x264]
inc eax
mov dword [ebp - 0x264], eax
cmp dword [ebp - 0x264], 0x4bf1
jge 0x1001da6e
mov eax, dword [ebp - 0x25c]
mov ecx, dword [ebp - 0x264]
shl eax, cl
mov ecx, dword [ebp - 0x26c]
imul ecx, dword [ebp - 0x274]
and eax, ecx
cdq
mov dword [ebp - 0x854], eax
mov dword [ebp - 0x850], edx
push dword [ebp - 0x850]
push dword [ebp - 0x854]
lea ecx, [ebp - 0xda0]
call fcn.10001ac9
pop ecx
pop ecx
mov dword [ebp - 0x88c], eax
mov ecx, dword [ebp - 0x88c]
call fcn.10006659
push eax
call fcn.1004e1ed
pop ecx
lea ecx, [ebp - 0xda0]
call fcn.1000664f
jmp 0x1001d9ea
jmp 0x1001d9c4
jmp 0x1001d99e
jmp 0x1001d978
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0x38], 0
jmp 0x1001daa2
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x38]
dec eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x38], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x38], 0
jl 0x1001dae1
push 4
pop eax
imul eax, eax, 0
push dword [ebp + eax - 0x38]
lea ecx, [ebp - 0x74c]
call fcn.10006b8e
mov esi, eax
push 4
pop eax
imul eax, eax, 0
push dword [ebp + eax - 0x38]
lea ecx, [ebp - 0x74c]
call fcn.10006b8e
mov eax, dword [eax]
mov dword [esi], eax
jmp 0x1001da8d
mov byte [ebp - 4], 0x3c
cmp dword [ebp - 0x580], 0x2c04
jge 0x1001dafd
push dword [ebp - 0x958]
call fcn.1004e1ed
pop ecx
jmp 0x1001db19
mov dword [ebp - 4], 0x39
jmp 0x1001db29
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0xe4]
cmp ecx, dword [ebp + eax - 0x38]
jle 0x1001db47
mov dword [ebp - 0x588], 1
jmp 0x1001db4e
and dword [ebp - 0x588], 0
push 0
lea ecx, [ebp - 0x74c]
call fcn.10006b8e
mov ecx, dword [ebp - 0x588]
cmp ecx, dword [eax]
je 0x1001db71
mov dword [ebp - 0x5d0], 1
jmp 0x1001db78
and dword [ebp - 0x5d0], 0
cmp dword [ebp - 0xe4], 0
je 0x1001db8d
mov dword [ebp - 0x590], 1
jmp 0x1001db94
and dword [ebp - 0x590], 0
push 0
lea ecx, [ebp - 0x74c]
call fcn.10006b8e
mov ecx, dword [ebp - 0x590]
cmp ecx, dword [eax]
je 0x1001dbb7
mov dword [ebp - 0x598], 1
jmp 0x1001dbbe
and dword [ebp - 0x598], 0
mov eax, dword [ebp - 0xe4]
cmp dword [ebp - 0x598], eax
jg 0x1001dbd8
mov dword [ebp - 0x5a0], 1
jmp 0x1001dbdf
and dword [ebp - 0x5a0], 0
mov eax, dword [ebp - 0xe4]
cmp dword [ebp - 0x5a0], eax
jne 0x1001dbf9
mov dword [ebp - 0x5a8], 1
jmp 0x1001dc00
and dword [ebp - 0x5a8], 0
mov eax, dword [ebp - 0xe4]
cmp dword [ebp - 0x5a8], eax
je 0x1001dc1a
mov dword [ebp - 0x5b0], 1
jmp 0x1001dc21
and dword [ebp - 0x5b0], 0
mov eax, dword [ebp - 0x5b0]
add eax, 0x7ad5
jne 0x1001dc40
cmp dword [ebp - 0xe4], 0
jne 0x1001dc40
and dword [ebp - 0x5b8], 0
jmp 0x1001dc4a
mov dword [ebp - 0x5b8], 1
cmp dword [ebp - 0x5b8], 0xdb60
jne 0x1001dc62
mov dword [ebp - 0x5c0], 1
jmp 0x1001dc69
and dword [ebp - 0x5c0], 0
mov eax, dword [ebp - 0x5c0]
mov dword [ebp - 0x5c8], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x5c8]
cmp ecx, dword [ebp + eax - 0x38]
jl 0x1001dc97
or eax, 0xffffffff
jne 0x1001dc97
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x38], 0
push 0
lea ecx, [ebp - 0x74c]
call fcn.10006b8e
mov ecx, 0x4ad3
sub ecx, dword [eax]
cmp dword [ebp - 0x5d0], ecx
jg 0x1001dcbf
mov dword [ebp - 0x5d8], 1
jmp 0x1001dcc6
and dword [ebp - 0x5d8], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x5d8]
mov dword [ebp + eax - 0x38], ecx
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x74c]
call fcn.10006b72
mov eax, dword [ebp - 0x894]
mov dword [ebp - 0x8ac], eax
mov dword [ebp - 0x5e0], 0x7c3c
mov dword [ebp - 0x89c], str.bdpzkb_gdkgqb_qlxhogau_fcjvbnvz_qyuxkqqg_gopsfb_majgzj_xikhjymiw_uyhfzlpns_ika_kuow_fxbwboxyw_nbkbvqm
cmp dword [ebp - 0x5e0], 0x7c6d
jle 0x1001de1c
and dword [ebp - 0x28c], 0
jmp 0x1001dd2b
mov eax, dword [ebp - 0x28c]
inc eax
mov dword [ebp - 0x28c], eax
cmp dword [ebp - 0x28c], 0x3339
jge 0x1001de1c
and dword [ebp - 0x27c], 0
jmp 0x1001dd51
mov eax, dword [ebp - 0x27c]
inc eax
mov dword [ebp - 0x27c], eax
cmp dword [ebp - 0x27c], 0x6a55
jge 0x1001de17
and dword [ebp - 0x284], 0
jmp 0x1001dd77
mov eax, dword [ebp - 0x284]
inc eax
mov dword [ebp - 0x284], eax
cmp dword [ebp - 0x284], 0x72aa
jge 0x1001de12
and dword [ebp - 0x294], 0
jmp 0x1001dd9d
mov eax, dword [ebp - 0x294]
inc eax
mov dword [ebp - 0x294], eax
cmp dword [ebp - 0x294], 0x595d
jge 0x1001de0d
mov eax, dword [ebp - 0x27c]
imul eax, dword [ebp - 0x284]
xor eax, dword [ebp - 0x28c]
xor eax, dword [ebp - 0x294]
cdq
mov dword [ebp - 0x860], eax
mov dword [ebp - 0x85c], edx
push dword [ebp - 0x85c]
push dword [ebp - 0x860]
lea ecx, [ebp - 0xdd0]
call fcn.10001ac9
pop ecx
pop ecx
mov dword [ebp - 0x978], eax
mov ecx, dword [ebp - 0x978]
call fcn.10006659
push eax
call fcn.1004e1ed
pop ecx
lea ecx, [ebp - 0xdd0]
call fcn.1000664f
jmp 0x1001dd90
jmp 0x1001dd6a
jmp 0x1001dd44
jmp 0x1001dd1e
mov dword [ebp - 4], 0x3e
cmp dword [ebp - 0x5e0], 0x79c3
jge 0x1001de3b
push dword [ebp - 0x89c]
call fcn.1004e1ed
pop ecx
jmp 0x1001de57
or dword [ebp - 4], 0xffffffff
jmp 0x1001de61
mov dword [ebp - 0x34], 0
mov dword [ebp - 0x2f0], 0xfffffffc
mov dword [ebp - 0x318], 0x47f28a99
mov dword [ebp - 0x34], 0x19
jmp 0x1001de8c
mov eax, dword [ebp - 0x34]
dec eax
mov dword [ebp - 0x34], eax
cmp dword [ebp - 0x34], 0xffffffff
je 0x1001e2c4
mov dword [ebp - 0x18], 0xc312
mov dword [ebp - 0xec], 8
push 4
lea ecx, [ebp - 0x9dc]
call fcn.10006b10
mov dword [ebp - 4], 0x40
mov dword [ebp - 0x29c], 0
jmp 0x1001ded4
mov eax, dword [ebp - 0x29c]
inc eax
mov dword [ebp - 0x29c], eax
cmp dword [ebp - 0x29c], 4
jge 0x1001def6
push dword [ebp - 0x29c]
lea ecx, [ebp - 0x9dc]
call fcn.10006b8e
mov dword [eax], 0xa113d7af
jmp 0x1001dec7
mov eax, dword [ebp - 0x18]
sub eax, dword [ebp - 0x18]
cmp eax, 0x76a47cde
jg 0x1001df0f
mov dword [ebp - 0x5e8], 1
jmp 0x1001df16
and dword [ebp - 0x5e8], 0
imul eax, dword [ebp - 0x5e8], 0xc93c
cmp eax, 0xe8ce6fc2
jne 0x1001df36
cmp dword [ebp - 0x18], 0
jne 0x1001df36
and dword [ebp - 0x5f0], 0
jmp 0x1001df40
mov dword [ebp - 0x5f0], 1
mov eax, dword [ebp - 0x34]
cmp dword [ebp - 0x5f0], eax
jl 0x1001df57
mov dword [ebp - 0x5f8], 1
jmp 0x1001df5e
and dword [ebp - 0x5f8], 0
cmp dword [ebp - 0x5f8], 0x2e6c
jne 0x1001df76
mov dword [ebp - 0x600], 1
jmp 0x1001df7d
and dword [ebp - 0x600], 0
mov eax, dword [ebp - 0x18]
cmp dword [ebp - 0x600], eax
jl 0x1001df94
mov dword [ebp - 0x608], 1
jmp 0x1001df9b
and dword [ebp - 0x608], 0
mov eax, dword [ebp - 0x608]
sub eax, dword [ebp - 0x34]
cmp eax, 0xfbfc
jle 0x1001dfb7
mov dword [ebp - 0x610], 1
jmp 0x1001dfbe
and dword [ebp - 0x610], 0
mov eax, dword [ebp - 0x18]
cmp dword [ebp - 0x610], eax
jg 0x1001dfd5
mov dword [ebp - 0x618], 1
jmp 0x1001dfdc
and dword [ebp - 0x618], 0
mov eax, dword [ebp - 0x34]
cmp eax, dword [ebp - 0x618]
je 0x1001dff3
mov dword [ebp - 0x620], 1
jmp 0x1001dffa
and dword [ebp - 0x620], 0
cmp dword [ebp - 0x620], 0
jge 0x1001e00f
mov dword [ebp - 0x628], 1
jmp 0x1001e016
and dword [ebp - 0x628], 0
mov eax, dword [ebp - 0x18]
cmp eax, dword [ebp - 0x628]
jl 0x1001e02d
mov dword [ebp - 0x630], 1
jmp 0x1001e034
and dword [ebp - 0x630], 0
mov eax, dword [ebp - 0x34]
cmp dword [ebp - 0x630], eax
jg 0x1001e04b
mov dword [ebp - 0x638], 1
jmp 0x1001e052
and dword [ebp - 0x638], 0
mov eax, dword [ebp - 0x638]
add eax, 0xd5d6
cmp eax, dword [ebp - 0x34]
jg 0x1001e06e
mov dword [ebp - 0x640], 1
jmp 0x1001e075
and dword [ebp - 0x640], 0
mov eax, dword [ebp - 0x18]
cmp dword [ebp - 0x640], eax
jle 0x1001e08c
mov dword [ebp - 0x928], 1
jmp 0x1001e093
and dword [ebp - 0x928], 0
mov eax, dword [ebp - 0x34]
mov dword [ebp - 0xb3c], eax
cmp dword [ebp - 0x18], 0
jne 0x1001e0ae
mov dword [ebp - 0x8a4], 1
jmp 0x1001e0b5
and dword [ebp - 0x8a4], 0
mov eax, dword [ebp - 0x34]
mov dword [ebp - 0xc1c], eax
cmp dword [ebp - 0x2f0], 1
je 0x1001e0d3
mov dword [ebp - 0x648], 1
jmp 0x1001e0da
and dword [ebp - 0x648], 0
mov eax, dword [ebp - 0x18]
cmp dword [ebp - 0x648], eax
jle 0x1001e0f1
mov dword [ebp - 0x650], 1
jmp 0x1001e0f8
and dword [ebp - 0x650], 0
mov eax, dword [ebp - 0x650]
mov dword [ebp - 0x318], eax
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0xb44], eax
mov eax, 0xf7ffff97
test eax, eax
je 0x1001e15e
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0xc74], eax
or eax, 0xffffffff
je 0x1001e136
cmp dword [ebp - 0x18], 0
je 0x1001e136
mov dword [ebp - 0x658], 1
jmp 0x1001e13d
and dword [ebp - 0x658], 0
mov eax, dword [ebp - 0x658]
mov dword [ebp - 0x318], eax
cmp dword [ebp - 0x318], 0xfffffffd
jae 0x1001e15e
mov dword [ebp - 0x660], 1
jmp 0x1001e165
and dword [ebp - 0x660], 0
mov eax, dword [ebp - 0x660]
neg eax
dec eax
dec eax
imul eax, dword [ebp - 0x18]
test eax, eax
jne 0x1001e186
cmp dword [ebp - 0x18], 0
jne 0x1001e186
and dword [ebp - 0x92c], 0
jmp 0x1001e190
mov dword [ebp - 0x92c], 1
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0xb4c], eax
mov eax, 0x604c38db
test eax, eax
jne 0x1001e1b4
mov eax, 0x36c8609e
test eax, eax
jne 0x1001e1b4
and dword [ebp - 0x668], 0
jmp 0x1001e1be
mov dword [ebp - 0x668], 1
mov eax, dword [ebp - 0x18]
imul eax, dword [ebp - 0x668]
cmp eax, dword [ebp - 0x2f0]
jle 0x1001e1dd
xor eax, eax
jne 0x1001e1dd
and dword [ebp - 0x670], 0
jmp 0x1001e1e7
mov dword [ebp - 0x670], 1
mov eax, dword [ebp - 0x18]
cmp dword [ebp - 0x670], eax
jne 0x1001e1fe
mov dword [ebp - 0x678], 1
jmp 0x1001e205
and dword [ebp - 0x678], 0
mov eax, dword [ebp - 0x678]
sub eax, dword [ebp - 0x2f0]
cmp eax, 0xaeaba4a2
jbe 0x1001e224
mov dword [ebp - 0x680], 1
jmp 0x1001e22b
and dword [ebp - 0x680], 0
mov eax, dword [ebp - 0xec]
add eax, dword [ebp - 0x680]
je 0x1001e25e
mov eax, 0xae5bd571
test eax, eax
je 0x1001e25e
mov byte [ebp - 0xb8], 0
movzx eax, byte [ebp - 0xb8]
test eax, eax
je 0x1001e25c
push 0
call dword [sym.imp.KERNEL32.dll_DeleteFileA]
jmp 0x1001e2b0
mov dword [ebp - 0xec], 0
jmp 0x1001e277
mov eax, dword [ebp - 0xec]
inc eax
mov dword [ebp - 0xec], eax
cmp dword [ebp - 0xec], 4
jge 0x1001e296
push dword [ebp - 0xec]
lea ecx, [ebp - 0x9dc]
call fcn.10006b8e
or dword [eax], 0xffffffff
jmp 0x1001e26a
cmp dword [ebp - 0x18], 0
je 0x1001e2b0
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x9dc]
call fcn.10006b72
jmp 0x1001de85
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x9dc]
call fcn.10006b72
jmp 0x1001de85
push dword [ebp - 0x8ac]
push dword [ebp - 0x934]
call dword [0x10081b20]
mov dword [ebp - 0x8c4], eax
mov dword [ebp - 0x94], 0x7c8a
mov dword [ebp - 0x2fc], 0xffffffff
push 3
lea ecx, [ebp - 0xac4]
call fcn.10006b10
mov dword [ebp - 4], 0x41
mov dword [ebp - 0x93c], 0x5e19f8c5
mov dword [ebp - 0x20], 0
jmp 0x1001e31e
mov eax, dword [ebp - 0x20]
inc eax
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 3
jge 0x1001e334
mov eax, dword [ebp - 0x20]
mov dword [ebp + eax*4 - 0x9d0], 0xb2d3650d
jmp 0x1001e317
mov dword [ebp - 0x20], 0
jmp 0x1001e344
mov eax, dword [ebp - 0x20]
inc eax
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 3
jge 0x1001e360
push dword [ebp - 0x20]
lea ecx, [ebp - 0xac4]
call fcn.10006b8e
mov dword [eax], 1
jmp 0x1001e33d
mov dword [ebp - 0x20], 0
jmp 0x1001e370
mov eax, dword [ebp - 0x20]
inc eax
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 3
jge 0x1001e386
mov eax, dword [ebp - 0x20]
mov dword [ebp + eax*4 - 0xcd8], 0xffffffff
jmp 0x1001e369
xor eax, eax
sub eax, dword [ebp - 0x94]
jne 0x1001e3a2
mov eax, 0x5eec
test eax, eax
jne 0x1001e3a2
and dword [ebp - 0x688], 0
jmp 0x1001e3ac
mov dword [ebp - 0x688], 1
mov eax, dword [ebp - 0x688]
mov dword [ebp - 0x2fc], eax
cmp dword [ebp - 0x2fc], 0xffff
ja 0x1001e3d0
mov dword [ebp - 0x690], 1
jmp 0x1001e3d7
and dword [ebp - 0x690], 0
mov eax, dword [ebp - 0x94]
imul eax, dword [ebp - 0x690]
test eax, eax
jne 0x1001e3fa
cmp dword [ebp - 0x94], 0
jne 0x1001e3fa
and dword [ebp - 0x698], 0
jmp 0x1001e404
mov dword [ebp - 0x698], 1
mov eax, dword [ebp - 0x94]
cmp dword [ebp - 0x698], eax
jge 0x1001e41e
mov dword [ebp - 0x6a0], 1
jmp 0x1001e425
and dword [ebp - 0x6a0], 0
mov eax, dword [ebp - 0x94]
cmp dword [ebp - 0x6a0], eax
jne 0x1001e43f
mov dword [ebp - 0x6a8], 1
jmp 0x1001e446
and dword [ebp - 0x6a8], 0
push 4
pop eax
shl eax, 1
mov ecx, dword [ebp - 0x94]
imul ecx, dword [ebp - 0x6a8]
cmp ecx, dword [ebp + eax - 0x9d0]
jle 0x1001e46d
mov dword [ebp - 0x6b0], 1
jmp 0x1001e474
and dword [ebp - 0x6b0], 0
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x9d0]
cmp dword [ebp - 0x6b0], eax
jge 0x1001e494
mov dword [ebp - 0x2f4], 1
jmp 0x1001e49b
and dword [ebp - 0x2f4], 0
push 2
lea ecx, [ebp - 0xac4]
call fcn.10006b8e
mov ecx, dword [ebp - 0x2f4]
mov dword [eax], ecx
cmp dword [ebp - 0x2f4], 0
je 0x1001e4ce
cmp dword [ebp - 0x2fc], 0
je 0x1001e4ce
mov dword [ebp - 0x6b8], 1
jmp 0x1001e4d5
and dword [ebp - 0x6b8], 0
mov eax, dword [ebp - 0x94]
sub eax, dword [ebp - 0x6b8]
jmp 0x1001e4ef
and dword [ebp - 0x6c0], 0
cmp dword [ebp - 0x6c0], 0xad7ba966
jbe 0x1001e50e
mov dword [ebp - 0x6c8], 1
jmp 0x1001e515
and dword [ebp - 0x6c8], 0
mov eax, dword [ebp - 0x94]
add eax, dword [ebp - 0x6c8]
mov dword [ebp - 0x8b4], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x8b4]
mov dword [ebp + eax - 0xcd8], ecx
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x9d0]
mov dword [ebp - 0xc2c], eax
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0x9d0], 0xf49dcb7b
jae 0x1001e56a
mov dword [ebp - 0x6d0], 1
jmp 0x1001e571
and dword [ebp - 0x6d0], 0
mov eax, dword [ebp - 0x6d0]
mov dword [ebp - 0x93c], eax
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xac4]
call fcn.10006b72
mov eax, dword [ebp - 0x8c4]
jmp 0x1001e596
xor eax, eax
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret