Function at 0x10014c4e
Capabilities:
Encrypt data using speck

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x1005b42e
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
push ecx
sub esp, 0xb20
push ebx
push esi
push edi
mov dword [ebp - 0x10], esp
push 1
lea ecx, [ebp - 0x568]
call fcn.10001c9a
and dword [ebp - 4], 0
mov dword [ebp - 0x74], 2
mov dword [ebp - 0x9d0], 0xff8ee1d1
mov dword [ebp - 0x280], 0xcdf5ef88
mov dword [ebp - 0x18c], 0xc007c7be
mov dword [ebp - 0xa18], 8
mov dword [ebp - 0x930], 0xc12a7b09
mov dword [ebp - 0x9b0], 0x21dd2eb2
push 1
lea ecx, [ebp - 0x99c]
call fcn.10001c9a
mov byte [ebp - 4], 1
mov dword [ebp - 0x938], 0x3ca5
mov dword [ebp - 0x64], 0
jmp 0x10014cf2
mov eax, dword [ebp - 0x64]
inc eax
mov dword [ebp - 0x64], eax
cmp dword [ebp - 0x64], 1
jge 0x10014d0e
push dword [ebp - 0x64]
lea ecx, [ebp - 0x568]
call fcn.10001cdb
mov dword [eax], 0xd3df75dc
jmp 0x10014ceb
mov dword [ebp - 0x64], 0
jmp 0x10014d1e
mov eax, dword [ebp - 0x64]
inc eax
mov dword [ebp - 0x64], eax
cmp dword [ebp - 0x64], 1
jge 0x10014d3a
push dword [ebp - 0x64]
lea ecx, [ebp - 0x99c]
call fcn.10001cdb
mov dword [eax], 0xa10dd664
jmp 0x10014d17
mov dword [ebp - 0x74], 0
jmp 0x10014d4a
mov eax, dword [ebp - 0x74]
dec eax
mov dword [ebp - 0x74], eax
cmp dword [ebp - 0x74], 0
jl 0x10015140
mov dword [ebp - 0xa00], 0xfffffffc
mov dword [ebp - 0x940], 3
mov dword [ebp - 0x384], 0x553d
mov dword [ebp - 0x630], str.iolresdsf_bvy_rhozxrl_vxvnhvs_lstghn_megdt_opwuddiyu_mhcbso
cmp dword [ebp - 0x384], 0x55d0
jle 0x10014e6f
and dword [ebp - 0x17c], 0
jmp 0x10014da2
mov eax, dword [ebp - 0x17c]
inc eax
mov dword [ebp - 0x17c], eax
cmp dword [ebp - 0x17c], 0x5745
jge 0x10014e6f
and dword [ebp - 0x148], 0
jmp 0x10014dc8
mov eax, dword [ebp - 0x148]
inc eax
mov dword [ebp - 0x148], eax
cmp dword [ebp - 0x148], 0x1e0
jge 0x10014e6a
and dword [ebp - 0x184], 0
jmp 0x10014dee
mov eax, dword [ebp - 0x184]
inc eax
mov dword [ebp - 0x184], eax
cmp dword [ebp - 0x184], 0x12b5
jge 0x10014e65
and dword [ebp - 0x150], 0
jmp 0x10014e10
mov eax, dword [ebp - 0x150]
inc eax
mov dword [ebp - 0x150], eax
cmp dword [ebp - 0x150], 0x6ff9
jge 0x10014e60
mov eax, dword [ebp - 0x17c]
imul eax, dword [ebp - 0x148]
cdq
idiv dword [ebp - 0x184]
mov eax, edx
cdq
idiv dword [ebp - 0x150]
mov eax, edx
cdq
mov dword [ebp - 0x5cc], eax
mov dword [ebp - 0x5c8], edx
push dword [ebp - 0x5c8]
push dword [ebp - 0x5cc]
mov ecx, 0x10075b18
call fcn.10001b85
jmp 0x10014e03
jmp 0x10014de1
jmp 0x10014dbb
jmp 0x10014d95
mov dword [ebp - 0x9c0], 1
mov byte [ebp - 4], 2
cmp dword [ebp - 0x384], 0x5524
jge 0x10014e99
mov edx, dword [ebp - 0x630]
mov ecx, 0x10075b18
call fcn.100036dc
jmp 0x10014eb5
mov dword [ebp - 4], 1
jmp 0x10014ec5
mov dword [ebp - 0x948], 0xffffffff
mov dword [ebp - 0xa28], 0x6e86ff18
mov dword [ebp - 0x88c], 0
mov dword [ebp - 0x894], 0
push 3
lea ecx, [ebp - 0x7d0]
call fcn.10001c9a
mov byte [ebp - 4], 4
mov dword [ebp - 0x5c0], 0x337672a6
mov dword [ebp - 0x64c], 0xf7cd
mov dword [ebp - 0x30], 0
jmp 0x10014f22
mov eax, dword [ebp - 0x30]
inc eax
mov dword [ebp - 0x30], eax
cmp dword [ebp - 0x30], 3
jge 0x10014f3e
push dword [ebp - 0x30]
lea ecx, [ebp - 0x7d0]
call fcn.10001cdb
mov dword [eax], 0x939e63a5
jmp 0x10014f1b
mov dword [ebp - 0x30], 0
jmp 0x10014f4e
mov eax, dword [ebp - 0x30]
inc eax
mov dword [ebp - 0x30], eax
cmp dword [ebp - 0x30], 3
jge 0x10014f64
mov eax, dword [ebp - 0x30]
mov dword [ebp + eax*4 - 0x7e8], 0xaf1ba137
jmp 0x10014f47
mov dword [ebp - 0x30], 0
jmp 0x10014f74
mov eax, dword [ebp - 0x30]
inc eax
mov dword [ebp - 0x30], eax
cmp dword [ebp - 0x30], 1
jge 0x10014f8a
mov eax, dword [ebp - 0x30]
mov dword [ebp + eax*4 - 0x558], 0x24df
jmp 0x10014f6d
push dword [ebp - 0x74]
lea ecx, [ebp - 0x568]
call fcn.10001cdb
cmp dword [eax], 6
jae 0x10014fb8
push 0
lea ecx, [ebp - 0x568]
call fcn.10001cdb
cmp dword [eax], 0
jne 0x10014fb8
and dword [ebp - 0x4fc], 0
jmp 0x10014fc2
mov dword [ebp - 0x4fc], 1
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x7e8]
mov dword [ebp - 0x5b0], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x7e8]
dec eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x7e8], eax
cmp dword [ebp - 0x5b0], 0
jl 0x10015005
mov dword [ebp - 0x5b8], 1
jmp 0x1001500c
and dword [ebp - 0x5b8], 0
push dword [ebp - 0x74]
lea ecx, [ebp - 0x568]
call fcn.10001cdb
push 2
lea ecx, [ebp - 0x7d0]
call fcn.10001cdb
mov ecx, dword [ebp - 0x4fc]
cmp ecx, dword [eax]
je 0x1001503d
mov dword [ebp - 0x504], 1
jmp 0x10015044
and dword [ebp - 0x504], 0
mov eax, dword [ebp - 0x5c0]
cmp dword [ebp - 0x504], eax
jl 0x1001505e
mov dword [ebp - 0x518], 1
jmp 0x10015065
and dword [ebp - 0x518], 0
mov eax, dword [ebp - 0x518]
mov dword [ebp - 0x280], eax
cmp dword [ebp - 0x280], 0
jne 0x1001507e
cmp dword [ebp - 0x74], 0
mov eax, dword [ebp - 0x280]
mov dword [ebp - 0x89c], eax
push dword [ebp - 0x74]
lea ecx, [ebp - 0x568]
call fcn.10001cdb
mov eax, dword [eax]
add eax, 0xa760
cmp eax, 0x89bb5c1e
jbe 0x100150b2
mov dword [ebp - 0x520], 1
jmp 0x100150b9
and dword [ebp - 0x520], 0
mov eax, dword [ebp - 0x520]
mov dword [ebp - 0x64c], eax
mov dword [ebp - 0x18c], 0
jmp 0x100150de
mov eax, dword [ebp - 0x18c]
inc eax
mov dword [ebp - 0x18c], eax
cmp dword [ebp - 0x18c], 0
jg 0x1001512c
mov dword [ebp - 0x8a4], 0
mov dword [ebp - 0x8ac], 0xfffffff7
mov dword [ebp - 0x8cc], 1
mov dword [ebp - 0x8d4], 1
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x558]
dec eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x558], eax
jmp 0x100150d1
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x7d0]
call fcn.10001cd6
jmp 0x10014d43
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x99c]
call fcn.10001cd6
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x568]
call fcn.10001cd6
mov dword [ebp - 0x8dc], 0xa8f9
mov dword [ebp - 0x8e4], 0xffffffff
mov dword [ebp - 0x8ec], 0xc6f1bf50
mov dword [ebp - 0x8f4], 4
mov dword [ebp - 0x8fc], 0xf36f6dd8
mov dword [ebp - 0x904], 1
mov dword [ebp - 0x90c], 7
push 3
lea ecx, [ebp - 0x9ac]
call fcn.10001c9a
mov dword [ebp - 4], 5
mov dword [ebp - 0x788], 0xae28de6
mov dword [ebp - 0x784], 0xae28de6
mov dword [ebp - 0x780], 0xae28de6
mov dword [ebp - 0x77c], 0xae28de6
mov dword [ebp - 0x70], 0
jmp 0x100151f0
mov eax, dword [ebp - 0x70]
inc eax
mov dword [ebp - 0x70], eax
cmp dword [ebp - 0x70], 1
jge 0x10015206
mov eax, dword [ebp - 0x70]
mov dword [ebp + eax*4 - 0x914], 0x6923607a
jmp 0x100151e9
mov dword [ebp - 0x70], 0
jmp 0x10015216
mov eax, dword [ebp - 0x70]
inc eax
mov dword [ebp - 0x70], eax
cmp dword [ebp - 0x70], 3
jge 0x10015232
push dword [ebp - 0x70]
lea ecx, [ebp - 0x9ac]
call fcn.10001cdb
mov dword [eax], 0xdcef989b
jmp 0x1001520f
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x788]
dec eax
push 4
pop ecx
shl ecx, 0
mov dword [ebp + ecx - 0x788], eax
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x9ac]
call fcn.10001cd6
cmp dword [0x10076cac], 0
jne 0x10018642
mov dword [ebp - 0x90], 0xce125d16
mov dword [ebp - 0x2c0], 0x53be
mov dword [ebp - 0x65c], str.kdangah_zaklposnb_vxkpjgiij_jovme
cmp dword [ebp - 0x2c0], 0x5444
jle 0x10015370
and dword [ebp - 0x13c], 0
jmp 0x100152ad
mov eax, dword [ebp - 0x13c]
inc eax
mov dword [ebp - 0x13c], eax
cmp dword [ebp - 0x13c], 0x669e
jge 0x10015370
and dword [ebp - 0x194], 0
jmp 0x100152d3
mov eax, dword [ebp - 0x194]
inc eax
mov dword [ebp - 0x194], eax
cmp dword [ebp - 0x194], 0x5e23
jge 0x1001536b
and dword [ebp - 0x160], 0
jmp 0x100152f9
mov eax, dword [ebp - 0x160]
inc eax
mov dword [ebp - 0x160], eax
cmp dword [ebp - 0x160], 0x7cd4
jge 0x10015366
mov eax, dword [ebp - 0x13c]
cdq
idiv dword [ebp - 0x194]
imul edx, dword [ebp - 0x160]
mov eax, edx
cdq
mov dword [ebp - 0x5d8], eax
mov dword [ebp - 0x5d4], edx
push dword [ebp - 0x5d4]
push dword [ebp - 0x5d8]
lea ecx, [ebp - 0xad0]
call fcn.10001a41
pop ecx
pop ecx
mov dword [ebp - 0x654], eax
mov ecx, dword [ebp - 0x654]
call fcn.10001b65
push eax
call fcn.100425d6
pop ecx
lea ecx, [ebp - 0xad0]
call fcn.10001b5b
jmp 0x100152ec
jmp 0x100152c6
jmp 0x100152a0
mov dword [ebp - 0xc0], 1
mov dword [ebp - 4], 6
cmp dword [ebp - 0x2c0], 0x52bd
jge 0x10015399
push dword [ebp - 0x65c]
call fcn.100425d6
pop ecx
jmp 0x100153b5
or dword [ebp - 4], 0xffffffff
jmp 0x100153bf
mov dword [ebp - 0x50], 0xf9150fae
mov dword [ebp - 0x1e0], 0
jmp 0x100153df
mov eax, dword [ebp - 0x1e0]
inc eax
mov dword [ebp - 0x1e0], eax
cmp dword [ebp - 0x1e0], 1
jge 0x100153fb
mov eax, dword [ebp - 0x1e0]
mov dword [ebp + eax*4 - 0xe4], 0
jmp 0x100153d2
mov dword [ebp - 0x90], 0
jmp 0x10015414
mov eax, dword [ebp - 0x90]
dec eax
mov dword [ebp - 0x90], eax
cmp dword [ebp - 0x90], 0
jl 0x10015594
mov dword [ebp - 0x48], 0x891f782a
mov dword [ebp - 0x410], 0x8d72a67f
mov dword [ebp - 0x48], 0
jmp 0x10015442
mov eax, dword [ebp - 0x48]
dec eax
mov dword [ebp - 0x48], eax
cmp dword [ebp - 0x48], 0
jl 0x1001550f
mov eax, dword [ebp - 0x48]
cmp dword [ebp + eax*4 - 0xe4], 0
je 0x100154f9
mov eax, dword [ebp - 0x90]
mov ecx, dword [ebp - 0xc0]
cmp ecx, dword [ebp + eax*4 - 0xe4]
jne 0x1001547b
cmp dword [ebp - 0xc0], 0
je 0x10015490
mov eax, 0xd34c
test eax, eax
je 0x10015490
mov dword [ebp - 0x4f4], 1
jmp 0x10015497
and dword [ebp - 0x4f4], 0
mov eax, dword [ebp - 0x4f4]
mov dword [ebp - 0x410], eax
cmp dword [ebp - 0x410], 0
je 0x100154b2
cmp dword [ebp - 0x50], 0
jne 0x100154c8
mov eax, dword [ebp - 0x48]
cmp dword [ebp + eax*4 - 0xe4], 0
jne 0x100154c8
and dword [ebp - 0x2c8], 0
jmp 0x100154d2
mov dword [ebp - 0x2c8], 1
mov eax, dword [ebp - 0x90]
mov ecx, dword [ebp - 0x2c8]
sub ecx, dword [ebp + eax*4 - 0xe4]
cmp ecx, 0x3927
jg 0x100154f9
mov dword [ebp - 0x4b8], 1
jmp 0x10015500
and dword [ebp - 0x4b8], 0
imul eax, dword [ebp - 0x4b8], 0xe
mov dword [ebp - 0x50], eax
jmp 0x1001543b
mov dword [ebp - 0x50], 0
jmp 0x1001551f
mov eax, dword [ebp - 0x50]
inc eax
mov dword [ebp - 0x50], eax
cmp dword [ebp - 0x50], 0
jg 0x1001558f
mov dword [ebp - 0x48], 0
jmp 0x10015535
mov eax, dword [ebp - 0x48]
inc eax
mov dword [ebp - 0x48], eax
cmp dword [ebp - 0x48], 0
jg 0x1001557b
mov dword [ebp - 0xc0], 0
jmp 0x10015554
mov eax, dword [ebp - 0xc0]
dec eax
mov dword [ebp - 0xc0], eax
cmp dword [ebp - 0xc0], 0
jl 0x10015579
mov byte [ebp - 0xb9], 0
movzx eax, byte [ebp - 0xb9]
test eax, eax
je 0x10015577
push 0
call dword [sym.imp.KERNEL32.dll_GetFileAttributesA]
jmp 0x10015547
jmp 0x1001552e
mov eax, dword [ebp - 0x90]
cmp dword [ebp + eax*4 - 0xe4], 0
je 0x1001558d
jmp 0x1001558f
jmp 0x10015518
jmp 0x10015407
mov dword [ebp - 0x50], 0
jmp 0x100155a4
mov eax, dword [ebp - 0x50]
inc eax
mov dword [ebp - 0x50], eax
cmp dword [ebp - 0x50], 0x11
jne 0x100155c1
mov dword [ebp - 0x664], 0
cmp dword [ebp - 0x664], 0
je 0x100155bf
jmp 0x100155c1
jmp 0x1001559d
mov byte [ebp - 0x11c], 4
mov byte [ebp - 0x11b], 0x34
mov byte [ebp - 0x11a], 0
mov byte [ebp - 0x119], 0x2e
mov byte [ebp - 0x118], 0xa
mov byte [ebp - 0x117], 0x27
mov byte [ebp - 0x116], 1
mov byte [ebp - 0x115], 9
mov byte [ebp - 0x114], 5
mov byte [ebp - 0x113], 9
mov byte [ebp - 0x112], 3
mov byte [ebp - 0x111], 0xb
mov byte [ebp - 0x110], 0xc6
mov byte [ebp - 0x10f], 0x5a
mov byte [ebp - 0x10e], 8
mov byte [ebp - 0x10d], 0x42
mov byte [ebp - 0x10c], 9
mov byte [ebp - 0x10b], 0x4a
mov byte [ebp - 0x10a], 0xb
mov byte [ebp - 0x109], 8
mov byte [ebp - 0x108], 3
mov byte [ebp - 0x107], 2
mov byte [ebp - 0x106], 6
mov byte [ebp - 0x105], 0x5d
mov byte [ebp - 0x104], 7
mov byte [ebp - 0x103], 1
mov byte [ebp - 0x102], 2
mov byte [ebp - 0x101], 0x40
mov dword [ebp - 0x34], 3
mov dword [ebp - 0x78], 0xf1912530
mov dword [ebp - 0x318], 0xffffffff
mov dword [ebp - 0x91c], 0x489a
mov dword [ebp - 0x168], 0
jmp 0x100156c0
mov eax, dword [ebp - 0x168]
inc eax
mov dword [ebp - 0x168], eax
cmp dword [ebp - 0x168], 1
jge 0x100156dc
mov eax, dword [ebp - 0x168]
mov dword [ebp + eax*4 - 0x2d0], 1
jmp 0x100156b3
mov dword [ebp - 0x34], 6
jmp 0x100156ec
mov eax, dword [ebp - 0x34]
inc eax
mov dword [ebp - 0x34], eax
cmp dword [ebp - 0x34], 0x1a
jl 0x10015aae
mov dword [ebp - 0x84], 0x54320e32
mov dword [ebp - 0x170], 6
mov dword [ebp - 0x328], 0x94dfd996
cmp dword [ebp - 0x34], 0
jne 0x1001575a
mov eax, dword [ebp - 0x34]
mov dword [ebp - 0x924], eax
mov eax, dword [ebp - 0x34]
mov dword [ebp - 0x92c], eax
cmp dword [ebp - 0x84], 0
jne 0x10015744
cmp dword [ebp - 0x34], 0
jne 0x10015744
and dword [ebp - 0x66c], 0
jmp 0x1001574e
mov dword [ebp - 0x66c], 1
mov eax, dword [ebp - 0x34]
imul eax, dword [ebp - 0x34]
cmp eax, dword [ebp - 0x34]
jne 0x100157ba
mov dword [ebp - 0x220], 0
jmp 0x10015773
mov eax, dword [ebp - 0x220]
inc eax
mov dword [ebp - 0x220], eax
cmp dword [ebp - 0x220], 2
jge 0x1001578f
mov eax, dword [ebp - 0x220]
mov dword [ebp + eax*4 - 0xa3c], 1
jmp 0x10015766
cmp dword [ebp - 0x34], 0
je 0x1001579a
jmp 0x10015aae
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x2d0]
dec eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x2d0], eax
jmp 0x10015aa9
mov dword [ebp - 0x2e8], 0
mov dword [ebp - 0x420], 0xffffffff
mov dword [ebp - 0x428], 1
mov eax, dword [ebp - 0x34]
mov dword [ebp - 0x78], eax
cmp dword [ebp - 0x78], 0
je 0x10015a9e
mov dword [ebp - 0x674], 0x389
mov dword [ebp - 0x2f8], 0xa6ae
mov dword [ebp - 0x320], 0
mov dword [ebp - 0x84], 0xf
jmp 0x1001581f
mov eax, dword [ebp - 0x84]
dec eax
mov dword [ebp - 0x84], eax
cmp dword [ebp - 0x84], 0xfffffff2
je 0x10015a78
mov dword [ebp - 0x2d8], 1
mov dword [ebp - 0x67c], 0x46153b72
cmp dword [ebp - 0x2e8], 0
je 0x10015855
mov dword [ebp - 0x438], 1
jmp 0x1001585c
and dword [ebp - 0x438], 0
cmp dword [ebp - 0x170], 0
jne 0x100158a7
cmp dword [ebp - 0x170], 0
je 0x10015883
cmp dword [ebp - 0x2d8], 0
je 0x10015883
mov dword [ebp - 0x418], 1
jmp 0x1001588a
and dword [ebp - 0x418], 0
mov eax, dword [ebp - 0x418]
sub eax, dword [ebp - 0x2d8]
add eax, dword [ebp - 0x674]
jne 0x100158a7
and dword [ebp - 0x554], 0
jmp 0x100158b1
mov dword [ebp - 0x554], 1
mov eax, dword [ebp - 0x78]
cmp dword [ebp - 0x554], eax
jl 0x100158cf
push 4
pop eax
test eax, eax
je 0x100158cf
mov dword [ebp - 0x2e0], 1
jmp 0x100158d6
and dword [ebp - 0x2e0], 0
mov eax, dword [ebp - 0x78]
add eax, dword [ebp - 0x2e0]
mov dword [ebp - 0x420], eax
mov eax, dword [ebp - 0x420]
mov dword [ebp - 0x170], eax
mov eax, dword [ebp - 0x170]
cmp eax, dword [ebp - 0x2e8]
jl 0x1001590b
mov dword [ebp - 0x4c0], 1
jmp 0x10015912
and dword [ebp - 0x4c0], 0
cmp dword [ebp - 0x4c0], 0x70c1
jl 0x1001592a
mov dword [ebp - 0x2f0], 1
jmp 0x10015931
and dword [ebp - 0x2f0], 0
mov eax, dword [ebp - 0x2f0]
sub eax, dword [ebp - 0x2f8]
mov dword [ebp - 0x428], eax
mov eax, dword [ebp - 0x328]
cmp eax, dword [ebp - 0x428]
jne 0x10015966
cmp dword [ebp - 0x2f8], 0
je 0x10015966
mov dword [ebp - 0x514], 1
jmp 0x1001596d
and dword [ebp - 0x514], 0
mov eax, dword [ebp - 0x84]
cmp dword [ebp - 0x514], eax
jg 0x10015987
mov dword [ebp - 0x300], 1
jmp 0x1001598e
and dword [ebp - 0x300], 0
cmp dword [ebp - 0x300], 0xfff9
ja 0x100159a6
mov dword [ebp - 0x430], 1
jmp 0x100159ad
and dword [ebp - 0x430], 0
cmp dword [ebp - 0x430], 0x725d
jge 0x100159c5
mov dword [ebp - 0x308], 1
jmp 0x100159cc
and dword [ebp - 0x308], 0
mov eax, dword [ebp - 0x84]
cmp dword [ebp - 0x308], eax
jge 0x100159e6
mov dword [ebp - 0x4c8], 1
jmp 0x100159ed
and dword [ebp - 0x4c8], 0
cmp dword [ebp - 0x4c8], 0x77f0a061
jge 0x10015a05
mov dword [ebp - 0x310], 1
jmp 0x10015a0c
and dword [ebp - 0x310], 0
mov eax, dword [ebp - 0x84]
cmp dword [ebp - 0x310], eax
je 0x10015a26
mov dword [ebp - 0x55c], 1
jmp 0x10015a2d
and dword [ebp - 0x55c], 0
mov eax, dword [ebp - 0x438]
mov dword [ebp - 0x318], eax
mov eax, dword [ebp - 0x318]
add eax, dword [ebp - 0x55c]
mov dword [ebp - 0x320], eax
cmp dword [ebp - 0x320], 0xfffffff6
jge 0x10015a60
mov dword [ebp - 0x440], 1
jmp 0x10015a67
and dword [ebp - 0x440], 0
mov eax, dword [ebp - 0x440]
mov dword [ebp - 0x67c], eax
jmp 0x10015812
mov byte [ebp - 0xb8], 0
movzx eax, byte [ebp - 0xb8]
test eax, eax
je 0x10015a9c
push 0x1ef7
push 0xfd3
push 0
call dword [sym.imp.GDI32.dll_CreatePolygonRgn]
jmp 0x10015aa9
cmp dword [ebp - 0x328], 0
je 0x10015aa9
jmp 0x10015aae
jmp 0x100156e5
mov dword [ebp - 0x78], 0
jmp 0x10015abe
mov eax, dword [ebp - 0x78]
inc eax
mov dword [ebp - 0x78], eax
cmp dword [ebp - 0x78], 0
jg 0x10015add
mov dword [ebp - 0x4d0], 0xfef6
mov eax, dword [ebp - 0x4d0]
dec eax
mov dword [ebp - 0x4d0], eax
jmp 0x10015ab7
xor eax, eax
inc eax
shl eax, 0
movzx eax, byte [ebp + eax - 0x11c]
and eax, 0x51
xor ecx, ecx
inc ecx
shl ecx, 0
movzx ecx, byte [ebp + ecx - 0x11c]
or ecx, 0x51
sub ecx, eax
xor eax, eax
inc eax
imul eax, eax, 0
movzx eax, byte [ebp + eax - 0x11c]
mov word [ebp + eax*2 - 0x86c], cx
mov dword [ebp - 0x40], 0
mov dword [ebp - 0x40], 0
jmp 0x10015b2e
mov eax, dword [ebp - 0x40]
inc eax
mov dword [ebp - 0x40], eax
cmp dword [ebp - 0x40], 6
jne 0x10015c88
mov dword [ebp - 0x1e8], 0x9cd4
mov dword [ebp - 0x72c], 0x59229a27
mov eax, dword [ebp - 0x40]
cmp eax, dword [ebp - 0x40]
jge 0x10015b60
mov dword [ebp - 0x330], 1
jmp 0x10015b67
and dword [ebp - 0x330], 0
mov eax, dword [ebp - 0x1e8]
imul eax, dword [ebp - 0x1e8]
imul eax, dword [ebp - 0x330]
imul eax, eax, 0xe75c
test eax, eax
je 0x10015b9a
cmp dword [ebp - 0x1e8], 0
je 0x10015b9a
mov dword [ebp - 0x448], 1
jmp 0x10015ba1
and dword [ebp - 0x448], 0
mov eax, dword [ebp - 0x448]
dec eax
cmp eax, dword [ebp - 0x40]
jg 0x10015bb9
mov dword [ebp - 0x338], 1
jmp 0x10015bc0
and dword [ebp - 0x338], 0
cmp dword [ebp - 0x338], 7
jb 0x10015bd5
mov dword [ebp - 0x51c], 1
jmp 0x10015bdc
and dword [ebp - 0x51c], 0
cmp dword [ebp - 0x51c], 0
jle 0x10015bf1
mov dword [ebp - 0x340], 1
jmp 0x10015bf8
and dword [ebp - 0x340], 0
mov eax, dword [ebp - 0x340]
inc eax
cmp eax, 0xe2f7c629
jbe 0x10015c12
mov dword [ebp - 0x450], 1
jmp 0x10015c19
and dword [ebp - 0x450], 0
cmp dword [ebp - 0x450], 0xfffffff8
jb 0x10015c2e
mov dword [ebp - 0x348], 1
jmp 0x10015c35
and dword [ebp - 0x348], 0
cmp dword [ebp - 0x348], 0xffffffff
jg 0x10015c4f
or eax, 0xffffffff
je 0x10015c4f
mov dword [ebp - 0x4d8], 1
jmp 0x10015c56
and dword [ebp - 0x4d8], 0
mov eax, dword [ebp - 0x1e8]
cmp dword [ebp - 0x4d8], eax
jl 0x10015c70
mov dword [ebp - 0x350], 1
jmp 0x10015c77
and dword [ebp - 0x350], 0
mov eax, dword [ebp - 0x350]
mov dword [ebp - 0x72c], eax
jmp 0x10015b27
mov dword [ebp - 0x40], 0
jmp 0x10015c98
mov eax, dword [ebp - 0x40]
inc eax
mov dword [ebp - 0x40], eax
cmp dword [ebp - 0x40], 0x19
jne 0x10015cc6
mov byte [ebp - 0xb6], 0
movzx eax, byte [ebp - 0xb6]
test eax, eax
je 0x10015cc4
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_GetBkColor]
jmp 0x10015c91
mov dword [ebp - 0x38], 2
and dword [ebp - 0x200], 0
jmp 0x10015cde
mov eax, dword [ebp - 0x38]
inc eax
inc eax
mov dword [ebp - 0x38], eax
cmp dword [ebp - 0x38], 0x1c
jae 0x10016a44
xor eax, eax
inc eax
imul eax, eax, 0
movzx eax, byte [ebp + eax - 0x11c]
lea eax, [eax + eax + 2]
cmp dword [ebp - 0x38], eax
jne 0x100165dd
mov eax, dword [ebp - 0x38]
movzx eax, byte [ebp + eax - 0x11c]
inc eax
mov dword [ebp - 0x200], eax
mov dword [ebp - 0x934], 0x2db58e46
mov dword [ebp - 0xec], 0x57ad95e1
mov dword [ebp - 0x93c], 0x9bf39019
mov dword [ebp - 0x944], 1
mov dword [ebp - 0x5bc], 1
mov dword [ebp - 0x5b4], 1
mov dword [ebp - 0x94c], 0xffffffff
mov dword [ebp - 0x954], 9
mov dword [ebp - 0x95c], 1
mov dword [ebp - 0x964], 0
mov dword [ebp - 0x178], 0x48b08158
mov dword [ebp - 0x710], 0xffffffff
mov dword [ebp - 0x96c], 0x4515fdc8
mov dword [ebp - 0x458], 0xd018
mov dword [ebp - 0x6c], 0
jmp 0x10015db1
mov eax, dword [ebp - 0x6c]
inc eax
mov dword [ebp - 0x6c], eax
cmp dword [ebp - 0x6c], 2
jge 0x10015dc7
mov eax, dword [ebp - 0x6c]
mov dword [ebp + eax*4 - 0x878], 0xffffffff
jmp 0x10015daa
mov dword [ebp - 0x6c], 0
jmp 0x10015dd7
mov eax, dword [ebp - 0x6c]
inc eax
mov dword [ebp - 0x6c], eax
cmp dword [ebp - 0x6c], 3
jge 0x10015ded
mov eax, dword [ebp - 0x6c]
mov dword [ebp + eax*4 - 0x9bc], 0xffffffff
jmp 0x10015dd0
mov eax, dword [ebp - 0x458]
dec eax
mov dword [ebp - 0x458], eax
mov dword [ebp - 0x178], 0xc
jmp 0x10015e13
mov eax, dword [ebp - 0x178]
inc eax
mov dword [ebp - 0x178], eax
cmp dword [ebp - 0x178], 0x1a
jg 0x100161a6
mov dword [ebp - 0x974], 0x1a6b719d
mov dword [ebp - 0x97c], 7
mov dword [ebp - 0x984], 0x9653e3f3
mov dword [ebp - 0x98c], 0xadc1094d
mov dword [ebp - 0x460], 0x293
mov dword [ebp - 0xec], 0
jmp 0x10015e6b
mov eax, dword [ebp - 0xec]
inc eax
mov dword [ebp - 0xec], eax
cmp dword [ebp - 0xec], 1
jg 0x10016113
mov dword [ebp - 0x9e4], 0x6b933888
mov dword [ebp - 0x9ec], 0
mov dword [ebp - 0x9f4], 0x3cf68729
push 3
lea ecx, [ebp - 0x818]
call fcn.10001c9a
mov dword [ebp - 4], 8
mov dword [ebp - 0x240], 0
jmp 0x10015ec3
mov eax, dword [ebp - 0x240]
inc eax
mov dword [ebp - 0x240], eax
cmp dword [ebp - 0x240], 3
jge 0x10015ee5
push dword [ebp - 0x240]
lea ecx, [ebp - 0x818]
call fcn.10001cdb
mov dword [eax], 0x3288
jmp 0x10015eb6
mov eax, dword [ebp - 0xec]
mov dword [ebp + eax*4 - 0x878], 0xfffffffe
push 0xfffffffffffffffe
pop eax
test eax, eax
je 0x100160bd
mov dword [ebp - 0x358], 0x5151
mov dword [ebp - 0x6fc], str.yejk_nnyjwn_jrdfpyyo_bnlddgbm_vww_dqyovzvug
cmp dword [ebp - 0x358], 0x539f
jle 0x10016044
push 0xfd6
push 0x1506
push 0
push 0
push 0x1928
call dword [sym.imp.USER32.dll_MsgWaitForMultipleObjects]
and dword [ebp - 0x228], 0
jmp 0x10015f54
mov eax, dword [ebp - 0x228]
inc eax
mov dword [ebp - 0x228], eax
cmp dword [ebp - 0x228], 0x68ee
jge 0x10016044
and dword [ebp - 0x180], 0
jmp 0x10015f7a
mov eax, dword [ebp - 0x180]
inc eax
mov dword [ebp - 0x180], eax
cmp dword [ebp - 0x180], 0x23a8
jge 0x1001603f
and dword [ebp - 0x1f0], 0
jmp 0x10015fa0
mov eax, dword [ebp - 0x1f0]
inc eax
mov dword [ebp - 0x1f0], eax
cmp dword [ebp - 0x1f0], 0x5d5d
jge 0x1001603a
and dword [ebp - 0x188], 0
jmp 0x10015fc6
mov eax, dword [ebp - 0x188]
inc eax
mov dword [ebp - 0x188], eax
cmp dword [ebp - 0x188], 0x6341
jge 0x10016035
mov eax, dword [ebp - 0x180]
xor eax, dword [ebp - 0x1f0]
xor eax, dword [ebp - 0x188]
or eax, dword [ebp - 0x228]
cdq
mov dword [ebp - 0x5e4], eax
mov dword [ebp - 0x5e0], edx
push dword [ebp - 0x5e0]
push dword [ebp - 0x5e4]
lea ecx, [ebp - 0xb00]
call fcn.10001a41
pop ecx
pop ecx
mov dword [ebp - 0x728], eax
mov ecx, dword [ebp - 0x728]
call fcn.10001b65
push eax
call fcn.100425d6
pop ecx
lea ecx, [ebp - 0xb00]
call fcn.10001b5b
jmp 0x10015fb9
jmp 0x10015f93
jmp 0x10015f6d
jmp 0x10015f47
mov byte [ebp - 0xba], 0
mov byte [ebp - 4], 9
cmp dword [ebp - 0x358], 0x4e97
jge 0x10016067
push dword [ebp - 0x6fc]
call fcn.100425d6
pop ecx
jmp 0x10016083
mov dword [ebp - 4], 8
jmp 0x10016093
movzx eax, byte [ebp - 0xba]
test eax, eax
je 0x100160bb
push 0
push 0xbae
push 0x2a
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_SetViewportExtEx]
jmp 0x100160ff
mov dword [ebp - 0x9fc], 0
mov dword [ebp - 0xa04], 0xfffffffe
mov dword [ebp - 0xa0c], 0
push 2
lea ecx, [ebp - 0x818]
call fcn.10001cdb
mov dword [ebp - 0x550], eax
mov eax, dword [ebp - 0x550]
mov eax, dword [eax]
dec eax
mov ecx, dword [ebp - 0x550]
mov dword [ecx], eax
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x818]
call fcn.10001cd6
jmp 0x10015e5e
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x9bc]
dec eax
mov dword [ebp - 0x360], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x360]
mov dword [ebp + eax - 0x9bc], ecx
cmp dword [ebp - 0x360], 0
je 0x1001618e
cmp dword [ebp - 0x460], 0xffffffff
jbe 0x10016153
cmp dword [ebp - 0x5b4], 0
cmp dword [ebp - 0x460], 0x8317
je 0x1001616b
mov dword [ebp - 0x6c0], 1
jmp 0x10016172
and dword [ebp - 0x6c0], 0
mov eax, dword [ebp - 0x710]
mov dword [ebp - 0xa14], eax
xor eax, eax
je 0x1001618e
mov dword [ebp - 0x368], 1
jmp 0x10016195
and dword [ebp - 0x368], 0
mov eax, dword [ebp - 0x368]
mov dword [ebp - 0x5bc], eax
jmp 0x10015e06
mov eax, dword [ebp - 0x38]
movzx eax, byte [ebp + eax - 0x11c]
mov ecx, dword [ebp - 0x38]
lea eax, [ecx + eax - 1]
mov dword [ebp - 0x38], eax
mov dword [ebp - 0x44], 0xcea5d6c0
push 1
lea ecx, [ebp - 0x530]
call fcn.10001c9a
mov dword [ebp - 4], 0xb
mov dword [ebp - 0x5c4], 1
mov dword [ebp - 0x190], 0
jmp 0x100161f9
mov eax, dword [ebp - 0x190]
inc eax
mov dword [ebp - 0x190], eax
cmp dword [ebp - 0x190], 1
jge 0x1001621b
push dword [ebp - 0x190]
lea ecx, [ebp - 0x530]
call fcn.10001cdb
mov dword [eax], 0x91c5534b
jmp 0x100161ec
mov dword [ebp - 0x44], 0x1d
jmp 0x1001622b
mov eax, dword [ebp - 0x44]
dec eax
mov dword [ebp - 0x44], eax
cmp dword [ebp - 0x44], 0x18
jl 0x1001625e
mov byte [ebp - 0xac], 0
movzx eax, byte [ebp - 0xac]
test eax, eax
je 0x1001625c
push 0x108f
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_SetLayout]
jmp 0x10016224
mov dword [ebp - 0x44], 0xfffffff9
jmp 0x1001626e
mov eax, dword [ebp - 0x44]
inc eax
mov dword [ebp - 0x44], eax
cmp dword [ebp - 0x44], 0x10
jge 0x100165c9
mov dword [ebp - 0xe0], 0xc3203bd6
mov dword [ebp - 0x79c], 0xfffffff8
mov dword [ebp - 0x798], 0xfffffff8
mov dword [ebp - 0x794], 0xfffffff8
mov dword [ebp - 0x790], 0xfffffff8
lea ecx, [ebp - 0x261]
call fcn.1000203f
push eax
lea eax, [ebp - 0x78c]
push eax
lea eax, [ebp - 0x79c]
push eax
lea ecx, [ebp - 0xa74]
call fcn.1001e8bf
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0x754]
call fcn.1001e75d
mov byte [ebp - 4], 0xc
push 0
lea ecx, [ebp - 0x530]
call fcn.10001cdb
cmp dword [eax], 0
je 0x100164c9
mov dword [ebp - 0x370], 0xa9b2
push 1
lea ecx, [ebp - 0x748]
call fcn.10001c9a
mov byte [ebp - 4], 0xd
mov dword [ebp - 0x1f8], 0
jmp 0x1001632d
mov eax, dword [ebp - 0x1f8]
inc eax
mov dword [ebp - 0x1f8], eax
cmp dword [ebp - 0x1f8], 1
jge 0x1001634f
push dword [ebp - 0x1f8]
lea ecx, [ebp - 0x748]
call fcn.10001cdb
mov dword [eax], 0x197e
jmp 0x10016320
push 0
lea ecx, [ebp - 0x748]
call fcn.10001cdb
mov esi, dword [ebp - 0xe0]
push 0
lea ecx, [ebp - 0x530]
call fcn.10001cdb
cmp esi, dword [eax]
jne 0x10016385
cmp dword [ebp - 0x44], 0
je 0x10016385
mov dword [ebp - 0x4e0], 1
jmp 0x1001638c
and dword [ebp - 0x4e0], 0
mov eax, dword [ebp - 0x4e0]
add eax, 0xa3d7
sub eax, dword [ebp - 0x370]
mov ecx, dword [ebp - 0x370]
sub ecx, eax
imul ecx, dword [ebp - 0xe0]
mov eax, dword [ebp - 0xe0]
sub eax, ecx
cmp eax, 1
jne 0x100163c5
mov dword [ebp - 0x468], 1
jmp 0x100163cc
and dword [ebp - 0x468], 0
mov eax, dword [ebp - 0xe0]
cmp dword [ebp - 0x468], eax
je 0x100163e6
mov dword [ebp - 0x378], 1
jmp 0x100163ed
and dword [ebp - 0x378], 0
push 0
lea ecx, [ebp - 0x530]
call fcn.10001cdb
mov ecx, dword [ebp - 0x378]
cmp ecx, dword [eax]
je 0x10016410
mov dword [ebp - 0x524], 1
jmp 0x10016417
and dword [ebp - 0x524], 0
push 0
lea ecx, [ebp - 0x748]
call fcn.10001cdb
mov ecx, dword [ebp - 0x524]
cmp ecx, dword [eax]
jne 0x1001643a
mov dword [ebp - 0x380], 1
jmp 0x10016441
and dword [ebp - 0x380], 0
mov eax, dword [ebp - 0xe0]
cmp dword [ebp - 0x380], eax
jne 0x1001645b
mov dword [ebp - 0x470], 1
jmp 0x10016462
and dword [ebp - 0x470], 0
cmp dword [ebp - 0x470], 0x51d
jl 0x1001647a
mov dword [ebp - 0x388], 1
jmp 0x10016481
and dword [ebp - 0x388], 0
cmp dword [ebp - 0x388], 0xca8c
jge 0x10016499
mov dword [ebp - 0x4e8], 1
jmp 0x100164a0
and dword [ebp - 0x4e8], 0
push 1
lea ecx, [ebp - 0x754]
call fcn.10001cdb
mov ecx, dword [ebp - 0x4e8]
mov dword [eax], ecx
mov byte [ebp - 4], 0xc
lea ecx, [ebp - 0x748]
call fcn.10001cd6
jmp 0x100165b5
mov dword [ebp - 0x548], 0xafcb06a9
mov eax, dword [ebp - 0x44]
mov dword [ebp - 0xa1c], eax
push 0
lea ecx, [ebp - 0x530]
call fcn.10001cdb
mov esi, eax
push 1
lea ecx, [ebp - 0x754]
call fcn.10001cdb
mov edi, dword [eax]
imul edi, dword [esi]
push 0
lea ecx, [ebp - 0x530]
call fcn.10001cdb
cmp dword [eax], edi
jge 0x1001651a
mov dword [ebp - 0x390], 1
jmp 0x10016521
and dword [ebp - 0x390], 0
push 0
lea ecx, [ebp - 0x530]
call fcn.10001cdb
mov ecx, dword [ebp - 0x390]
cmp ecx, dword [eax]
jl 0x10016544
mov dword [ebp - 0x478], 1
jmp 0x1001654b
and dword [ebp - 0x478], 0
mov eax, dword [ebp - 0x478]
sub eax, dword [ebp - 0xe0]
cmp eax, 0xfffa
jb 0x1001656a
mov dword [ebp - 0x398], 1
jmp 0x10016571
and dword [ebp - 0x398], 0
push 1
lea ecx, [ebp - 0x754]
call fcn.10001cdb
mov ecx, dword [ebp - 0x398]
imul ecx, dword [eax]
cmp ecx, 0xeed1
jle 0x1001659b
mov dword [ebp - 0x718], 1
jmp 0x100165a2
and dword [ebp - 0x718], 0
mov eax, dword [ebp - 0x548]
imul eax, dword [ebp - 0x548]
mov dword [ebp - 0x5c4], eax
mov byte [ebp - 4], 0xb
lea ecx, [ebp - 0x754]
call fcn.10001cd6
jmp 0x10016267
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x530]
call fcn.10001cd6
jmp 0x10015cd6
mov eax, dword [ebp - 0x38]
sub eax, dword [ebp - 0x200]
movzx eax, byte [ebp + eax - 0x11e]
movzx eax, word [ebp + eax*2 - 0x86c]
mov ecx, dword [ebp - 0x38]
movzx ecx, byte [ebp + ecx - 0x11b]
and ecx, eax
mov eax, dword [ebp - 0x38]
sub eax, dword [ebp - 0x200]
movzx eax, byte [ebp + eax - 0x11e]
movzx eax, word [ebp + eax*2 - 0x86c]
mov edx, dword [ebp - 0x38]
movzx edx, byte [ebp + edx - 0x11b]
or edx, eax
sub edx, ecx
mov eax, dword [ebp - 0x38]
movzx eax, byte [ebp + eax - 0x11c]
mov word [ebp + eax*2 - 0x86c], dx
mov dword [ebp - 0x7c4], 7
mov dword [ebp - 0x7c0], 7
mov dword [ebp - 0x7bc], 7
mov dword [ebp - 0x7b8], 7
lea ecx, [ebp - 0x275]
call fcn.1000203f
push eax
lea eax, [ebp - 0x7b4]
push eax
lea eax, [ebp - 0x7c4]
push eax
lea ecx, [ebp - 0xa7c]
call fcn.1001e8bf
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0x760]
call fcn.1001e75d
mov dword [ebp - 4], 0xe
mov dword [ebp - 0x5dc], 0x65ee6d54
mov dword [ebp - 0x198], 0
jmp 0x100166c5
mov eax, dword [ebp - 0x198]
inc eax
mov dword [ebp - 0x198], eax
cmp dword [ebp - 0x198], 2
jge 0x100166e1
mov eax, dword [ebp - 0x198]
mov dword [ebp + eax*4 - 0x29c], 0
jmp 0x100166b8
mov dword [ebp - 0x488], 0xcc2
mov dword [ebp - 0x6d4], str.nntje_kmmvosog_rwt_xackspadg_vlqvffw_mrosae
cmp dword [ebp - 0x488], 0x1016
jle 0x1001678a
push 1
push 0
push 0
call dword [sym.imp.ADVAPI32.dll_SetSecurityDescriptorOwner]
and dword [ebp - 0x250], 0
jmp 0x10016727
mov eax, dword [ebp - 0x250]
inc eax
mov dword [ebp - 0x250], eax
cmp dword [ebp - 0x250], 0x1552
jge 0x1001678a
and dword [ebp - 0x1a0], 0
jmp 0x10016749
mov eax, dword [ebp - 0x1a0]
inc eax
mov dword [ebp - 0x1a0], eax
cmp dword [ebp - 0x1a0], 0x262
jge 0x10016788
mov eax, dword [ebp - 0x250]
mov ecx, dword [ebp - 0x1a0]
sar eax, cl
cdq
mov dword [ebp - 0x5f0], eax
mov dword [ebp - 0x5ec], edx
push dword [ebp - 0x5ec]
push dword [ebp - 0x5f0]
mov ecx, 0x10075b18
call fcn.10001b85
jmp 0x1001673c
jmp 0x1001671a
push 4
pop eax
shl eax, 0
mov dword [ebp + eax - 0x29c], 0
jmp 0x100167b8
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x29c]
inc eax
push 4
pop ecx
shl ecx, 0
mov dword [ebp + ecx - 0x29c], eax
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x29c], 3
jg 0x100169dd
mov dword [ebp - 0xcc], 0x7c8a6b95
mov dword [ebp - 0x5d0], 0xfffffffc
mov dword [ebp - 0xcc], 3
jmp 0x100167f9
mov eax, dword [ebp - 0xcc]
dec eax
mov dword [ebp - 0xcc], eax
cmp dword [ebp - 0xcc], 0
jl 0x100169d8
mov dword [ebp - 0x5a8], 1
mov dword [ebp - 0x5a4], 1
mov dword [ebp - 0x5a0], 1
mov dword [ebp - 0x59c], 1
push 4
pop eax
shl eax, 1
mov dword [ebp + eax - 0x5a8], 0
jmp 0x10016859
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x5a8]
inc eax
push 4
pop ecx
shl ecx, 1
mov dword [ebp + ecx - 0x5a8], eax
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0x5a8], 3
jg 0x100169b1
mov dword [ebp - 0x6cc], 9
mov dword [ebp - 0x26c], 0x3ca955a6
mov dword [ebp - 0x480], 1
mov dword [ebp - 0x724], 0x1b16
push 4
pop eax
shl eax, 1
push dword [ebp + eax - 0x5a8]
lea ecx, [ebp - 0x760]
call fcn.10001cdb
mov esi, eax
push dword [ebp - 0xcc]
lea ecx, [ebp - 0x760]
call fcn.10001cdb
mov eax, dword [eax]
mov dword [esi], eax
mov eax, dword [ebp - 0xcc]
mov dword [ebp - 0xa24], eax
mov eax, dword [ebp - 0x6cc]
mov dword [ebp - 0xa2c], eax
mov dword [ebp - 0x26c], 1
mov eax, dword [ebp - 0x5d0]
mov dword [ebp - 0xa34], eax
mov eax, dword [ebp - 0x480]
mov dword [ebp - 0x890], eax
mov eax, dword [ebp - 0x26c]
mov dword [ebp - 0x87c], eax
mov eax, 0xb91e
test eax, eax
jne 0x10016933
cmp dword [ebp - 0x26c], 0
jne 0x10016933
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x29c], 0
jne 0x10016933
and dword [ebp - 0x3a0], 0
jmp 0x1001693d
mov dword [ebp - 0x3a0], 1
cmp dword [ebp - 0x3a0], 0xffffffff
jne 0x10016952
mov dword [ebp - 0x3a8], 1
jmp 0x10016959
and dword [ebp - 0x3a8], 0
mov eax, dword [ebp - 0x480]
cmp dword [ebp - 0x3a8], eax
jl 0x10016973
mov dword [ebp - 0x4f0], 1
jmp 0x1001697a
and dword [ebp - 0x4f0], 0
mov eax, dword [ebp - 0x724]
add eax, dword [ebp - 0x4f0]
cmp eax, 0xd3650dfa
jae 0x10016999
mov dword [ebp - 0x3b0], 1
jmp 0x100169a0
and dword [ebp - 0x3b0], 0
mov eax, dword [ebp - 0x3b0]
mov dword [ebp - 0x5dc], eax
jmp 0x10016840
push 4
pop eax
shl eax, 0
push dword [ebp + eax - 0x29c]
lea ecx, [ebp - 0x760]
call fcn.10001cdb
cmp dword [eax], 0
je 0x100169d3
jmp 0x100167ec
jmp 0x100167ec
jmp 0x1001679d
mov byte [ebp - 4], 0xf
cmp dword [ebp - 0x488], 0xaab
jge 0x100169fd
mov edx, dword [ebp - 0x6d4]
mov ecx, 0x10075b18
call fcn.100036dc
jmp 0x10016a19
mov dword [ebp - 4], 0xe
jmp 0x10016a29
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x760]
call fcn.10001cd6
and dword [ebp - 0x200], 0
jmp 0x10015cd6
mov dword [ebp - 0x5e8], 0x1805
cmp dword [ebp - 0x5e8], 0xeae
jge 0x10016d3d
push 0x20
pop eax
imul esi, eax, 0
call fcn.100444cd
add eax, esi
push eax
push 0x10065c70
push str.in.txt
call fcn.1004467c
add esp, 0xc
push 0x20
pop esi
shl esi, 0
call fcn.100444cd
add eax, esi
push eax
push 0x10065c7c
push str.out.txt
call fcn.1004467c
add esp, 0xc
lea ecx, [ebp - 0x598]
call fcn.10001b1b
mov dword [ebp - 4], 0x11
lea edx, [ebp - 0x598]
mov ecx, 0x10075c38
call fcn.10020e37
mov dword [ebp - 0x3b8], eax
mov eax, dword [ebp - 0x3b8]
mov eax, dword [eax]
mov ecx, dword [ebp - 0x3b8]
add ecx, dword [eax + 4]
call fcn.1000cef3
movzx eax, al
test eax, eax
je 0x10016d2e
mov edx, str.e_o_i
lea ecx, [ebp - 0x598]
call fcn.10020e5c
movzx eax, al
test eax, eax
je 0x10016b03
jmp 0x10016d2e
xor eax, eax
mov word [ebp - 0x18], ax
and dword [ebp - 0x14], 0
push dword [ebp - 0x14]
lea ecx, [ebp - 0x598]
call fcn.100029f3
movsx eax, byte [eax]
cmp eax, 0x2f
je 0x10016b85
push dword [ebp - 0x14]
lea ecx, [ebp - 0x598]
call fcn.100029f3
mov al, byte [eax]
movzx eax, al
push eax
call fcn.10014c00
pop ecx
movzx eax, al
test eax, eax
je 0x10016b7c
mov ax, word [ebp - 0x18]
add ax, 1
mov word [ebp - 0x18], ax
push dword [ebp - 0x14]
lea ecx, [ebp - 0x598]
call fcn.100029f3
mov al, byte [eax]
movzx eax, al
push eax
call fcn.10014c00
pop ecx
movzx eax, al
test eax, eax
je 0x10016b7a
mov eax, dword [ebp - 0x14]
inc eax
mov dword [ebp - 0x14], eax
jmp 0x10016b50
jmp 0x10016b0d
mov eax, dword [ebp - 0x14]
inc eax
mov dword [ebp - 0x14], eax
jmp 0x10016b0d
mov eax, dword [ebp - 0x14]
inc eax
mov dword [ebp - 0x14], eax
movsx eax, word [ebp - 0x18]
cmp eax, 5
je 0x10016bb2
push 0x10020ce6
push 1
mov ecx, 0x10075b18
call fcn.1001e5e7
mov ecx, eax
call fcn.1001e5db
jmp 0x10016ab0
xor eax, eax
mov word [ebp - 0x18], ax
push dword [ebp - 0x14]
lea ecx, [ebp - 0x598]
call fcn.100029f3
movsx eax, byte [eax]
cmp eax, 0x2f
je 0x10016c30
push dword [ebp - 0x14]
lea ecx, [ebp - 0x598]
call fcn.100029f3
mov al, byte [eax]
movzx eax, al
push eax
call fcn.10014c00
pop ecx
movzx eax, al
test eax, eax
je 0x10016c27
mov ax, word [ebp - 0x18]
add ax, 1
mov word [ebp - 0x18], ax
push dword [ebp - 0x14]
lea ecx, [ebp - 0x598]
call fcn.100029f3
mov al, byte [eax]
movzx eax, al
push eax
call fcn.10014c00
pop ecx
movzx eax, al
test eax, eax
je 0x10016c25
mov eax, dword [ebp - 0x14]
inc eax
mov dword [ebp - 0x14], eax
jmp 0x10016bfb
jmp 0x10016bb8
mov eax, dword [ebp - 0x14]
inc eax
mov dword [ebp - 0x14], eax
jmp 0x10016bb8
mov eax, dword [ebp - 0x14]
inc eax
mov dword [ebp - 0x14], eax
movsx eax, word [ebp - 0x18]
cmp eax, 7
je 0x10016c5d
push 0x10020ce6
push 2
mov ecx, 0x10075b18
call fcn.1001e5e7
mov ecx, eax
call fcn.1001e5db
jmp 0x10016ab0
xor eax, eax
mov word [ebp - 0x18], ax
lea ecx, [ebp - 0x598]
call fcn.10001f92
cmp dword [ebp - 0x14], eax
jae 0x10016ce8
push dword [ebp - 0x14]
lea ecx, [ebp - 0x598]
call fcn.100029f3
mov al, byte [eax]
movzx eax, al
push eax
call fcn.10014c00
pop ecx
movzx eax, al
test eax, eax
je 0x10016cdc
mov ax, word [ebp - 0x18]
add ax, 1
mov word [ebp - 0x18], ax
push dword [ebp - 0x14]
lea ecx, [ebp - 0x598]
call fcn.100029f3
mov al, byte [eax]
movzx eax, al
push eax
call fcn.10014c00
pop ecx
movzx eax, al
test eax, eax
je 0x10016cda
lea ecx, [ebp - 0x598]
call fcn.10001f92
cmp dword [ebp - 0x14], eax
jae 0x10016cda
mov eax, dword [ebp - 0x14]
inc eax
mov dword [ebp - 0x14], eax
jmp 0x10016ca0
jmp 0x10016c63
mov eax, dword [ebp - 0x14]
inc eax
mov dword [ebp - 0x14], eax
jmp 0x10016c63
movsx eax, word [ebp - 0x18]
cmp eax, 5
je 0x10016d0e
push 0x10020ce6
push 3
mov ecx, 0x10075b18
call fcn.1001e5e7
mov ecx, eax
call fcn.1001e5db
jmp 0x10016ab0
push 0x10020ce6
mov edx, 0x10065c90
mov ecx, 0x10075b18
call fcn.100036dc
mov ecx, eax
call fcn.1001e5db
jmp 0x10016ab0
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x598]
call fcn.10001b5b
push 2
pop eax
imul eax, eax, 0xc
xor ecx, ecx
mov word [ebp + eax - 0x86c], cx
mov dword [ebp - 0x248], 0xfffffff9
mov dword [ebp - 0x1a8], 0
jmp 0x10016d70
mov eax, dword [ebp - 0x1a8]
inc eax
mov dword [ebp - 0x1a8], eax
cmp dword [ebp - 0x1a8], 4
jge 0x10016d8c
mov eax, dword [ebp - 0x1a8]
mov dword [ebp + eax*4 - 0xa6c], 0
jmp 0x10016d63
mov dword [ebp - 0x534], 0x66c
mov dword [ebp - 0x5f4], str.yvcfzf_tquevjbm_jeitoj_rwz_xlyeyf_lemwhfove_riyitqnj_tbefmjgl_gfrgmcxb_ecrkplere_utirjofh_mczhaw
cmp dword [ebp - 0x534], 0x74e
jle 0x10016ebe
and dword [ebp - 0x208], 0
jmp 0x10016dc6
mov eax, dword [ebp - 0x208]
inc eax
mov dword [ebp - 0x208], eax
cmp dword [ebp - 0x208], 0x603a
jge 0x10016ebe
and dword [ebp - 0x1b8], 0
jmp 0x10016dec
mov eax, dword [ebp - 0x1b8]
inc eax
mov dword [ebp - 0x1b8], eax
cmp dword [ebp - 0x1b8], 0x233f
jge 0x10016eb9
and dword [ebp - 0x230], 0
jmp 0x10016e12
mov eax, dword [ebp - 0x230]
inc eax
mov dword [ebp - 0x230], eax
cmp dword [ebp - 0x230], 0x64c0
jge 0x10016eb4
and dword [ebp - 0x1b0], 0
jmp 0x10016e38
mov eax, dword [ebp - 0x1b0]
inc eax
mov dword [ebp - 0x1b0], eax
cmp dword [ebp - 0x1b0], 0x16be
jge 0x10016eaf
mov eax, dword [ebp - 0x230]
imul eax, dword [ebp - 0x1b0]
mov edx, dword [ebp - 0x208]
mov ecx, dword [ebp - 0x1b8]
sar edx, cl
or eax, edx
cdq
mov dword [ebp - 0x5fc], eax
mov dword [ebp - 0x5f8], edx
push dword [ebp - 0x5f8]
push dword [ebp - 0x5fc]
lea ecx, [ebp - 0xb30]
call fcn.10001a41
pop ecx
pop ecx
mov dword [ebp - 0x704], eax
mov ecx, dword [ebp - 0x704]
call fcn.10001b65
push eax
call fcn.100425d6
pop ecx
lea ecx, [ebp - 0xb30]
call fcn.10001b5b
jmp 0x10016e2b
jmp 0x10016e05
jmp 0x10016ddf
jmp 0x10016db9
mov dword [ebp - 0x248], 0xffffffec
jmp 0x10016ed7
mov eax, dword [ebp - 0x248]
inc eax
mov dword [ebp - 0x248], eax
cmp dword [ebp - 0x248], 0xfffffffc
jl 0x10016f21
mov dword [ebp - 0xfc], 0xffffffff
mov dword [ebp - 0xfc], 0
jmp 0x10016f03
mov eax, dword [ebp - 0xfc]
inc eax
mov dword [ebp - 0xfc], eax
cmp dword [ebp - 0xfc], 4
jge 0x10016f1f
mov eax, dword [ebp - 0xfc]
mov dword [ebp + eax*4 - 0xa6c], 0xfffffffa
jmp 0x10016ef6
jmp 0x10016eca
mov dword [ebp - 4], 0x12
cmp dword [ebp - 0x534], 0x516
jge 0x10016f40
push dword [ebp - 0x5f4]
call fcn.100425d6
pop ecx
jmp 0x10016f5c
or dword [ebp - 4], 0xffffffff
jmp 0x10016f66
lea eax, [ebp - 0x86c]
push eax
lea ecx, [ebp - 0xa94]
call fcn.1000a518
mov dword [ebp - 0x6dc], eax
mov eax, dword [ebp - 0x6dc]
mov dword [ebp - 0x600], eax
mov dword [ebp - 4], 0x14
push dword [ebp - 0x600]
call fcn.1000d8a1
pop ecx
mov dword [ebp - 0x3a4], eax
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xa94]
call fcn.100068b2
mov dword [ebp - 0x7b0], 1
mov dword [ebp - 0x7ac], 1
mov dword [ebp - 0x7a8], 1
mov dword [ebp - 0x7a4], 1
lea ecx, [ebp - 0x28d]
call fcn.1000203f
push eax
lea eax, [ebp - 0x7a0]
push eax
lea eax, [ebp - 0x7b0]
push eax
lea ecx, [ebp - 0xa5c]
call fcn.1001e8bf
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0x2b4]
call fcn.1001e75d
mov dword [ebp - 4], 0x15
mov dword [ebp - 0x490], 0xf18ee85e
mov dword [ebp - 0x498], 0x289c089c
mov dword [ebp - 0x3c0], 0x2470
mov dword [ebp - 0x60c], str.veupkdai_rloseme_lzxojv_mmk_teecqu_ibwgu_bxtoxckv_qnv_adf_urrqrffgu_nppu
cmp dword [ebp - 0x3c0], 0x250b
jle 0x10017168
push 1
push 0
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_InvalidateRect]
and dword [ebp - 0x1c8], 0
jmp 0x10017075
mov eax, dword [ebp - 0x1c8]
inc eax
mov dword [ebp - 0x1c8], eax
cmp dword [ebp - 0x1c8], 0x7281
jge 0x10017168
and dword [ebp - 0x238], 0
jmp 0x1001709b
mov eax, dword [ebp - 0x238]
inc eax
mov dword [ebp - 0x238], eax
cmp dword [ebp - 0x238], 0x1b6b
jge 0x10017163
and dword [ebp - 0x1c0], 0
jmp 0x100170c1
mov eax, dword [ebp - 0x1c0]
inc eax
mov dword [ebp - 0x1c0], eax
cmp dword [ebp - 0x1c0], 0x7c32
jge 0x1001715e
and dword [ebp - 0x210], 0
jmp 0x100170e7
mov eax, dword [ebp - 0x210]
inc eax
mov dword [ebp - 0x210], eax
cmp dword [ebp - 0x210], 0x69ba
jge 0x10017159
mov eax, dword [ebp - 0x1c0]
cdq
idiv dword [ebp - 0x210]
mov eax, dword [ebp - 0x1c8]
add eax, dword [ebp - 0x238]
sub eax, edx
cdq
mov dword [ebp - 0x608], eax
mov dword [ebp - 0x604], edx
push dword [ebp - 0x604]
push dword [ebp - 0x608]
lea ecx, [ebp - 0xb18]
call fcn.10001a41
pop ecx
pop ecx
mov dword [ebp - 0x71c], eax
mov ecx, dword [ebp - 0x71c]
call fcn.10001b65
push eax
call fcn.100425d6
pop ecx
lea ecx, [ebp - 0xb18]
call fcn.10001b5b
jmp 0x100170da
jmp 0x100170b4
jmp 0x1001708e
jmp 0x10017068
mov dword [ebp - 0x3e0], 0
mov byte [ebp - 4], 0x16
cmp dword [ebp - 0x3c0], 0x2115
jge 0x1001718e
push dword [ebp - 0x60c]
call fcn.100425d6
pop ecx
jmp 0x100171aa
mov dword [ebp - 4], 0x15
jmp 0x100171ba
push 3
lea ecx, [ebp - 0x800]
call fcn.10001c9a
mov byte [ebp - 4], 0x18
mov dword [ebp - 0x28c], 0x7c1543f3
mov dword [ebp - 0x28], 0
jmp 0x100171e5
mov eax, dword [ebp - 0x28]
inc eax
mov dword [ebp - 0x28], eax
cmp dword [ebp - 0x28], 1
jge 0x100171f8
mov eax, dword [ebp - 0x28]
mov dword [ebp + eax*4 - 0x1c], 0x90c4d8e5
jmp 0x100171de
mov dword [ebp - 0x28], 0
jmp 0x10017208
mov eax, dword [ebp - 0x28]
inc eax
mov dword [ebp - 0x28], eax
cmp dword [ebp - 0x28], 3
jge 0x10017224
push dword [ebp - 0x28]
lea ecx, [ebp - 0x800]
call fcn.10001cdb
mov dword [eax], 0x5126ed4b
jmp 0x10017201
mov dword [ebp - 0x28], 0
jmp 0x10017234
mov eax, dword [ebp - 0x28]
inc eax
mov dword [ebp - 0x28], eax
cmp dword [ebp - 0x28], 2
jge 0x1001724a
mov eax, dword [ebp - 0x28]
mov dword [ebp + eax*4 - 0x884], 0xfff9
jmp 0x1001722d
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0x1c], 3
jmp 0x1001726f
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x1c]
dec eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x1c], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x1c], 0
jl 0x10017524
mov dword [ebp - 0x4f8], 0xffffffff
push 4
pop eax
imul eax, eax, 0
push dword [ebp + eax - 0x1c]
lea ecx, [ebp - 0x2b4]
call fcn.10001cdb
cmp dword [eax], 0x320a1078
jne 0x100173c2
push 4
pop eax
imul eax, eax, 0
push dword [ebp + eax - 0x1c]
lea ecx, [ebp - 0x2b4]
call fcn.10001cdb
mov eax, dword [eax]
mov dword [ebp - 0x490], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x490]
cmp ecx, dword [ebp + eax - 0x1c]
jl 0x100172fd
push 4
pop eax
imul eax, eax, 0
push dword [ebp + eax - 0x1c]
lea ecx, [ebp - 0x2b4]
call fcn.10001cdb
cmp dword [eax], 0
jne 0x100172fd
and dword [ebp - 0x3c8], 0
jmp 0x10017307
mov dword [ebp - 0x3c8], 1
mov eax, dword [ebp - 0x3c8]
mov dword [ebp - 0x4f8], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x4f8]
cmp ecx, dword [ebp + eax - 0x1c]
je 0x10017331
mov dword [ebp - 0x3d0], 1
jmp 0x10017338
and dword [ebp - 0x3d0], 0
mov eax, dword [ebp - 0x3d0]
neg eax
mov dword [ebp - 0x498], eax
mov eax, dword [ebp - 0x498]
cmp eax, dword [ebp - 0x3e0]
jle 0x10017360
mov dword [ebp - 0x3d8], 1
jmp 0x10017367
and dword [ebp - 0x3d8], 0
cmp dword [ebp - 0x3d8], 0x7b09
jle 0x1001737f
mov dword [ebp - 0x54c], 1
jmp 0x10017386
and dword [ebp - 0x54c], 0
push 0
lea ecx, [ebp - 0x800]
call fcn.10001cdb
mov ecx, dword [ebp - 0x54c]
mov dword [eax], ecx
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x1c]
mov dword [ebp - 0x8b4], eax
imul eax, dword [ebp - 0x28c], 0xfffd
test eax, eax
jne 0x100173c2
and dword [ebp - 0x6e4], 0
jmp 0x100173cc
mov dword [ebp - 0x6e4], 1
push 4
pop eax
imul eax, eax, 0
push dword [ebp + eax - 0x1c]
lea ecx, [ebp - 0x2b4]
call fcn.10001cdb
mov esi, dword [ebp - 0x3e0]
push 4
pop eax
imul eax, eax, 0
push dword [ebp + eax - 0x1c]
lea ecx, [ebp - 0x2b4]
call fcn.10001cdb
cmp dword [eax], esi
jge 0x1001740c
mov dword [ebp - 0x4a0], 1
jmp 0x10017413
and dword [ebp - 0x4a0], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x4a0]
sub ecx, 0x5450e45f
cmp ecx, dword [ebp + eax - 0x1c]
jl 0x10017437
mov dword [ebp - 0x3e8], 1
jmp 0x1001743e
and dword [ebp - 0x3e8], 0
push 4
pop eax
imul eax, eax, 0
push dword [ebp + eax - 0x1c]
lea ecx, [ebp - 0x2b4]
call fcn.10001cdb
mov ecx, dword [ebp - 0x3e8]
add ecx, dword [eax]
je 0x10017483
push 4
pop eax
imul eax, eax, 0
push dword [ebp + eax - 0x1c]
lea ecx, [ebp - 0x2b4]
call fcn.10001cdb
cmp dword [eax], 0
je 0x10017483
mov dword [ebp - 0x500], 1
jmp 0x1001748a
and dword [ebp - 0x500], 0
cmp dword [ebp - 0x500], 0x31cf
jne 0x100174a2
mov dword [ebp - 0x3f0], 1
jmp 0x100174a9
and dword [ebp - 0x3f0], 0
mov eax, dword [ebp - 0x3f0]
mov dword [ebp - 0x28c], eax
mov esi, dword [ebp - 0x28c]
push 4
pop eax
imul eax, eax, 0
push dword [ebp + eax - 0x1c]
lea ecx, [ebp - 0x2b4]
call fcn.10001cdb
cmp esi, dword [eax]
jle 0x100174e0
mov dword [ebp - 0x4a8], 1
jmp 0x100174e7
and dword [ebp - 0x4a8], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x1c]
cmp dword [ebp - 0x4a8], eax
jl 0x10017505
mov dword [ebp - 0x3f8], 1
jmp 0x1001750c
and dword [ebp - 0x3f8], 0
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x3f8]
mov dword [ebp + eax - 0x884], ecx
jmp 0x1001725a
mov byte [ebp - 4], 0x15
lea ecx, [ebp - 0x800]
call fcn.10001cd6
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x2b4]
call fcn.10001cd6
and dword [ebp - 0x218], 0
jmp 0x10017558
mov eax, dword [ebp - 0x218]
inc eax
mov dword [ebp - 0x218], eax
cmp dword [ebp - 0x218], 0xd
jae 0x100175fe
mov dword [ebp - 0x1d0], 0xfffffffc
mov dword [ebp - 0x888], 0x2cfb
mov dword [ebp - 0x1d0], 0xfffffff1
jmp 0x10017592
mov eax, dword [ebp - 0x1d0]
dec eax
mov dword [ebp - 0x1d0], eax
cmp dword [ebp - 0x1d0], 0xffffffeb
jg 0x100175e9
mov byte [ebp - 0xad], 0
movzx eax, byte [ebp - 0xad]
test eax, eax
je 0x100175b8
push 0x19d2
call dword [sym.imp.USER32.dll_GetQueueStatus]
mov byte [ebp - 0xaf], 0
movzx eax, byte [ebp - 0xaf]
test eax, eax
je 0x100175e7
push 0xb8f
push 0
push 0
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_PolyPolyline]
jmp 0x10017585
xor eax, eax
mov ecx, dword [ebp - 0x218]
mov word [ebp + ecx*2 - 0x86c], ax
jmp 0x1001754b
mov dword [ebp - 0x158], 0xc4307e
mov dword [ebp - 0x618], 1
mov dword [ebp - 0x4b0], 1
mov dword [ebp - 0x70c], 6
mov dword [ebp - 0x1d8], 0
jmp 0x1001763f
mov eax, dword [ebp - 0x1d8]
inc eax
mov dword [ebp - 0x1d8], eax
cmp dword [ebp - 0x1d8], 2
jge 0x1001765b
mov eax, dword [ebp - 0x1d8]
mov dword [ebp + eax*4 - 0x510], 0xffffffff
jmp 0x10017632
mov byte [ebp - 0xb1], 0
movzx eax, byte [ebp - 0xb1]
test eax, eax
je 0x10017686
push 0xb0
push 0
push 0x22b2
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDlgItemTextA]
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x510], 0
jne 0x10017740
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x510]
mov dword [ebp - 0x8bc], eax
mov eax, dword [ebp - 0x158]
mov dword [ebp - 0x8c4], eax
mov eax, dword [ebp - 0x158]
mov dword [ebp - 0x950], eax
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x510]
mov dword [ebp - 0x898], eax
imul eax, dword [ebp - 0x158], 0xfaa3
cmp eax, 0x7335
jge 0x100176f5
mov dword [ebp - 0x544], 1
jmp 0x100176fc
and dword [ebp - 0x544], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x510]
cmp dword [ebp - 0x544], eax
jl 0x1001771d
mov dword [ebp - 0x400], 1
jmp 0x10017724
and dword [ebp - 0x400], 0
imul eax, dword [ebp - 0x400], 0xe071
test eax, eax
jne 0x10017740
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x510], 0
mov eax, dword [ebp - 0x618]
mov dword [ebp - 0x4b0], eax
mov eax, dword [ebp - 0x4b0]
sub eax, 0x2c9a130d
je 0x10017777
cmp dword [ebp - 0x158], 0
je 0x10017777
mov eax, 0x9041
test eax, eax
je 0x10017777
mov dword [ebp - 0x408], 1
jmp 0x1001777e
and dword [ebp - 0x408], 0
mov eax, dword [ebp - 0x408]
mov dword [ebp - 0x70c], eax
cmp dword [ebp - 0x3a4], 0
je 0x10018642
mov dword [ebp - 0x870], 0x8eac8b13
mov byte [ebp - 0xb3], 0
movzx eax, byte [ebp - 0xb3]
test eax, eax
je 0x100177ce
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_ReleaseDC]
mov byte [ebp - 0x91], 0
movzx eax, byte [ebp - 0x91]
test eax, eax
je 0x100177ed
push 0
push 0x1242
call dword [sym.imp.GDI32.dll_CreateHatchBrush]
mov dword [ebp - 0x24], 0x41e55969
mov dword [ebp - 0x15c], 0
jmp 0x1001780d
mov eax, dword [ebp - 0x15c]
inc eax
mov dword [ebp - 0x15c], eax
cmp dword [ebp - 0x15c], 3
jge 0x10017829
mov eax, dword [ebp - 0x15c]
mov dword [ebp + eax*4 - 0x2a8], 0x398070a
jmp 0x10017800
mov eax, dword [ebp - 0x24]
push 4
pop ecx
shl ecx, 0
mov dword [ebp + ecx - 0x2a8], eax
mov dword [ebp - 0x24], 2
jmp 0x10017849
mov eax, dword [ebp - 0x24]
dec eax
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 0
jl 0x10017a93
mov dword [ebp - 0x98], 0xffffffff
mov dword [ebp - 0x2dc], 0xf11bbb4f
mov dword [ebp - 0x164], 0
jmp 0x10017880
mov eax, dword [ebp - 0x164]
inc eax
mov dword [ebp - 0x164], eax
cmp dword [ebp - 0x164], 4
jge 0x1001789c
mov eax, dword [ebp - 0x164]
mov dword [ebp + eax*4 - 0x850], 1
jmp 0x10017873
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp + eax*4 - 0x2a8]
mov dword [ebp - 0x8a0], eax
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x2a8]
mov dword [ebp - 0x958], eax
mov eax, dword [ebp - 0x24]
mov dword [ebp - 0x8a8], eax
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x2a8]
cmp eax, dword [ebp - 0x24]
jg 0x100178e6
mov dword [ebp - 0x508], 1
jmp 0x100178ed
and dword [ebp - 0x508], 0
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp + eax*4 - 0x2a8]
cmp dword [ebp - 0x508], eax
jle 0x1001790b
mov dword [ebp - 0x2bc], 1
jmp 0x10017912
and dword [ebp - 0x2bc], 0
mov eax, dword [ebp - 0x24]
cmp dword [ebp - 0x2bc], eax
jl 0x10017929
mov dword [ebp - 0x2c4], 1
jmp 0x10017930
and dword [ebp - 0x2c4], 0
mov eax, dword [ebp - 0x2c4]
neg eax
imul eax, dword [ebp - 0x98]
cmp eax, 3
jb 0x10017950
mov dword [ebp - 0x2cc], 1
jmp 0x10017957
and dword [ebp - 0x2cc], 0
cmp dword [ebp - 0x2cc], 1
jne 0x1001796c
mov dword [ebp - 0x2d4], 1
jmp 0x10017973
and dword [ebp - 0x2d4], 0
mov eax, dword [ebp - 0x2d4]
mov dword [ebp - 0x2dc], eax
mov eax, dword [ebp - 0x24]
mov ecx, dword [ebp - 0x24]
mov ecx, dword [ebp + ecx*4 - 0x2a8]
add ecx, dword [ebp - 0x2dc]
cmp ecx, dword [ebp + eax*4 - 0x2a8]
jle 0x100179a7
mov dword [ebp - 0x2e4], 1
jmp 0x100179ae
and dword [ebp - 0x2e4], 0
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x2e4]
mov dword [ebp + eax - 0x850], ecx
mov dword [ebp - 0x98], 0
jmp 0x100179da
mov eax, dword [ebp - 0x98]
inc eax
mov dword [ebp - 0x98], eax
cmp dword [ebp - 0x98], 2
jg 0x10017a8e
mov eax, dword [ebp - 0x98]
cmp dword [ebp + eax*4 - 0x850], 0x97867a7b
jb 0x10017a06
mov dword [ebp - 0x2ec], 1
jmp 0x10017a0d
and dword [ebp - 0x2ec], 0
imul eax, dword [ebp - 0x2ec], 0xe26b
mov ecx, dword [ebp - 0x24]
mov ecx, dword [ebp + ecx*4 - 0x850]
imul ecx, eax
cmp ecx, 0x27f3
jl 0x10017a38
mov dword [ebp - 0x2f4], 1
jmp 0x10017a3f
and dword [ebp - 0x2f4], 0
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp + eax*4 - 0x2a8]
cmp dword [ebp - 0x2f4], eax
jne 0x10017a6a
mov eax, dword [ebp - 0x24]
cmp dword [ebp + eax*4 - 0x2a8], 0
je 0x10017a6a
mov dword [ebp - 0x2fc], 1
jmp 0x10017a71
and dword [ebp - 0x2fc], 0
mov eax, dword [ebp - 0x2fc]
sub eax, 0x4c638299
mov ecx, dword [ebp - 0x98]
mov dword [ebp + ecx*4 - 0x850], eax
jmp 0x100179cd
jmp 0x10017842
mov dword [ebp - 0xf4], 0x477862f
mov byte [ebp - 0xb5], 0
movzx eax, byte [ebp - 0xb5]
test eax, eax
je 0x10017ac3
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_CreateCompatibleDC]
mov dword [ebp - 0xf4], 0
jmp 0x10017adc
mov eax, dword [ebp - 0xf4]
inc eax
mov dword [ebp - 0xf4], eax
cmp dword [ebp - 0xf4], 0xe
jg 0x10017b0c
cmp dword [ebp - 0xf4], 0
je 0x10017af0
jmp 0x10017b0c
mov byte [ebp - 0x99], 0
movzx eax, byte [ebp - 0x99]
test eax, eax
je 0x10017b0a
push 0
call dword [sym.imp.USER32.dll_DestroyCursor]
jmp 0x10017acf
mov byte [ebp - 0x138], 0xb
mov byte [ebp - 0x137], 0x5f
mov byte [ebp - 0x136], 8
mov byte [ebp - 0x135], 1
mov byte [ebp - 0x134], 9
mov byte [ebp - 0x133], 0
mov byte [ebp - 0x132], 0xd
mov byte [ebp - 0x131], 0x17
mov byte [ebp - 0x130], 0xc
mov byte [ebp - 0x12f], 0
mov byte [ebp - 0x12e], 0xa
mov byte [ebp - 0x12d], 1
mov byte [ebp - 0x12c], 1
mov byte [ebp - 0x12b], 0x17
mov byte [ebp - 0x12a], 0
mov byte [ebp - 0x129], 0x22
mov byte [ebp - 0x128], 7
mov byte [ebp - 0x127], 6
mov byte [ebp - 0x126], 2
mov byte [ebp - 0x125], 0x35
mov byte [ebp - 0x124], 3
mov byte [ebp - 0x123], 0x24
mov byte [ebp - 0x122], 5
mov byte [ebp - 0x121], 0x3f
mov byte [ebp - 0x120], 6
mov byte [ebp - 0x11f], 0xc
mov byte [ebp - 0x11e], 4
mov byte [ebp - 0x11d], 0x11
xor eax, eax
inc eax
shl eax, 0
movzx eax, byte [ebp + eax - 0x138]
and eax, 0x3a
xor ecx, ecx
inc ecx
shl ecx, 0
movzx ecx, byte [ebp + ecx - 0x138]
or ecx, 0x3a
sub ecx, eax
xor eax, eax
inc eax
imul eax, eax, 0
movzx eax, byte [ebp + eax - 0x138]
mov byte [ebp + eax - 0x73c], cl
mov dword [ebp - 0x80], 2
and dword [ebp - 0x304], 0
jmp 0x10017c21
mov eax, dword [ebp - 0x80]
inc eax
inc eax
mov dword [ebp - 0x80], eax
cmp dword [ebp - 0x80], 0x1c
jae 0x10017c89
mov eax, dword [ebp - 0x80]
sub eax, dword [ebp - 0x304]
movzx eax, byte [ebp + eax - 0x13a]
movsx eax, byte [ebp + eax - 0x73c]
mov ecx, dword [ebp - 0x80]
movzx ecx, byte [ebp + ecx - 0x137]
and ecx, eax
mov eax, dword [ebp - 0x80]
sub eax, dword [ebp - 0x304]
movzx eax, byte [ebp + eax - 0x13a]
movsx eax, byte [ebp + eax - 0x73c]
mov edx, dword [ebp - 0x80]
movzx edx, byte [ebp + edx - 0x137]
or edx, eax
sub edx, ecx
mov eax, dword [ebp - 0x80]
movzx eax, byte [ebp + eax - 0x138]
mov byte [ebp + eax - 0x73c], dl
jmp 0x10017c19
mov dword [ebp - 0x68], 5
mov dword [ebp - 0x68], 0
jmp 0x10017ca0
mov eax, dword [ebp - 0x68]
inc eax
mov dword [ebp - 0x68], eax
cmp dword [ebp - 0x68], 0xd
je 0x10017dc5
mov dword [ebp - 0x314], 8
push 2
lea ecx, [ebp - 0x7dc]
call fcn.10001c9a
mov dword [ebp - 4], 0x19
mov dword [ebp - 0x6ec], 0xdc6b79df
mov dword [ebp - 0x16c], 0
jmp 0x10017ceb
mov eax, dword [ebp - 0x16c]
inc eax
mov dword [ebp - 0x16c], eax
cmp dword [ebp - 0x16c], 2
jge 0x10017d0a
push dword [ebp - 0x16c]
lea ecx, [ebp - 0x7dc]
call fcn.10001cdb
and dword [eax], 0
jmp 0x10017cde
cmp dword [ebp - 0x314], 0
jne 0x10017d9b
mov eax, dword [ebp - 0x68]
mov dword [ebp - 0xa08], eax
mov eax, dword [ebp - 0x68]
mov dword [ebp - 0x624], eax
push 0
lea ecx, [ebp - 0x7dc]
call fcn.10001cdb
mov ecx, dword [ebp - 0x624]
mov dword [eax], ecx
mov eax, dword [ebp - 0x68]
mov dword [ebp - 0x8b0], eax
cmp dword [ebp - 0x68], 0xfffffffe
jg 0x10017d59
mov dword [ebp - 0x30c], 1
jmp 0x10017d60
and dword [ebp - 0x30c], 0
cmp dword [ebp - 0x30c], 0
jge 0x10017d7a
or eax, 0xffffffff
je 0x10017d7a
mov dword [ebp - 0x31c], 1
jmp 0x10017d81
and dword [ebp - 0x31c], 0
mov eax, dword [ebp - 0x314]
add eax, dword [ebp - 0x31c]
cmp dword [ebp - 0x68], eax
jg 0x10017d9b
and dword [ebp - 0x324], 0
jmp 0x10017da5
mov dword [ebp - 0x324], 1
mov eax, dword [ebp - 0x324]
mov dword [ebp - 0x6ec], eax
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x7dc]
call fcn.10001cd6
jmp 0x10017c99
xor eax, eax
inc eax
imul eax, eax, 0xe
mov byte [ebp + eax - 0x73c], 0
lea eax, [ebp - 0x73c]
push eax
lea ecx, [ebp - 0xa54]
call fcn.1001e6f9
mov dword [ebp - 4], 0x1a
mov dword [ebp - 0xa0], 0x20f89b54
mov dword [ebp - 0x960], 0xffffffff
mov dword [ebp - 0x8b8], 0x17a
mov dword [ebp - 0x334], 0x136
mov dword [ebp - 0x5c], 0
jmp 0x10017e24
mov eax, dword [ebp - 0x5c]
inc eax
mov dword [ebp - 0x5c], eax
cmp dword [ebp - 0x5c], 3
jge 0x10017e3a
mov eax, dword [ebp - 0x5c]
mov dword [ebp + eax*4 - 0x69c], 0xad6
jmp 0x10017e1d
mov dword [ebp - 0x5c], 0
jmp 0x10017e4a
mov eax, dword [ebp - 0x5c]
inc eax
mov dword [ebp - 0x5c], eax
cmp dword [ebp - 0x5c], 1
jge 0x10017e60
mov eax, dword [ebp - 0x5c]
mov dword [ebp + eax*4 - 0x9e0], 0xffffffff
jmp 0x10017e43
mov dword [ebp - 0xa0], 0
jmp 0x10017e79
mov eax, dword [ebp - 0xa0]
inc eax
mov dword [ebp - 0xa0], eax
cmp dword [ebp - 0xa0], 2
jg 0x100180a0
mov dword [ebp - 0xe8], 0xd3b3152c
mov dword [ebp - 0x8c0], 0x78acc4b7
mov dword [ebp - 0x968], 1
mov dword [ebp - 0x8c8], 0x9a20b287
mov dword [ebp - 0x174], 0
jmp 0x10017ec7
mov eax, dword [ebp - 0x174]
inc eax
mov dword [ebp - 0x174], eax
cmp dword [ebp - 0x174], 3
jge 0x10017ee3
mov eax, dword [ebp - 0x174]
mov dword [ebp + eax*4 - 0xab8], 0
jmp 0x10017eba
mov dword [ebp - 0xe8], 0
jmp 0x10017efc
mov eax, dword [ebp - 0xe8]
inc eax
mov dword [ebp - 0xe8], eax
cmp dword [ebp - 0xe8], 2
jg 0x10018081
mov dword [ebp - 0xf0], 0x4a9bacde
mov dword [ebp - 0x140], 0
jmp 0x10017f2c
mov eax, dword [ebp - 0x140]
inc eax
mov dword [ebp - 0x140], eax
cmp dword [ebp - 0x140], 3
jge 0x10017f48
mov eax, dword [ebp - 0x140]
mov dword [ebp + eax*4 - 0x68c], 0
jmp 0x10017f1f
push 4
pop eax
shl eax, 1
mov dword [ebp + eax - 0x68c], 2
jmp 0x10017f73
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x68c]
dec eax
push 4
pop ecx
shl ecx, 1
mov dword [ebp + ecx - 0x68c], eax
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0x68c], 0
jl 0x10017fe8
mov dword [ebp - 0x144], 2
mov dword [ebp - 0x144], 0
jmp 0x10017fa5
mov eax, dword [ebp - 0x144]
inc eax
mov dword [ebp - 0x144], eax
cmp dword [ebp - 0x144], 2
jg 0x10017fe3
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x68c]
mov eax, dword [ebp + eax*4 - 0x69c]
mov ecx, dword [ebp - 0xa0]
mov dword [ebp + ecx*4 - 0x69c], eax
mov eax, dword [ebp - 0xe8]
mov eax, dword [ebp + eax*4 - 0x69c]
mov dword [ebp - 0xf0], eax
jmp 0x10017f98
jmp 0x10017f5a
mov dword [ebp - 0xf0], 2
jmp 0x10018001
mov eax, dword [ebp - 0xf0]
dec eax
mov dword [ebp - 0xf0], eax
cmp dword [ebp - 0xf0], 0
jl 0x1001807c
mov dword [ebp - 0xa20], 0xffffffff
mov dword [ebp - 0x8d0], 0x402da3c3
mov dword [ebp - 0x32c], 0x1210cbed
mov dword [ebp - 0x14c], 0
jmp 0x10018041
mov eax, dword [ebp - 0x14c]
inc eax
mov dword [ebp - 0x14c], eax
cmp dword [ebp - 0x14c], 1
jge 0x1001805d
mov eax, dword [ebp - 0x14c]
mov dword [ebp + eax*4 - 0x970], 0xb15a8df0
jmp 0x10018034
mov eax, dword [ebp - 0x32c]
dec eax
mov dword [ebp - 0x32c], eax
mov eax, dword [ebp - 0x334]
inc eax
mov dword [ebp - 0x334], eax
jmp 0x10017ff4
jmp 0x10017eef
mov eax, dword [ebp - 0xa0]
mov eax, dword [ebp + eax*4 - 0x69c]
mov ecx, dword [ebp - 0xa0]
mov dword [ebp + ecx*4 - 0x69c], eax
jmp 0x10017e6c
and dword [ebp - 0x1ac], 0
jmp 0x100180b6
mov eax, dword [ebp - 0x1ac]
inc eax
mov dword [ebp - 0x1ac], eax
cmp dword [ebp - 0x1ac], 0xf
jae 0x10018576
mov dword [ebp - 0xdc], 0x25b9b55b
mov dword [ebp - 0x284], 0xd564c7b7
mov dword [ebp - 0x274], 0xfffffffe
mov dword [ebp - 0x33c], 0x7c68
mov dword [ebp - 0x5ac], str.lstwzon_ptvy_gsndiymmt_ureu_gyiiwrjek_posnepgyn_xpwr_cjtpxkoot_nsxsix_lnajaku_mri
cmp dword [ebp - 0x33c], 0x7fd8
jle 0x100181b2
and dword [ebp - 0x154], 0
jmp 0x1001811b
mov eax, dword [ebp - 0x154]
inc eax
mov dword [ebp - 0x154], eax
cmp dword [ebp - 0x154], 0x5496
jge 0x100181b2
and dword [ebp - 0x19c], 0
jmp 0x10018141
mov eax, dword [ebp - 0x19c]
inc eax
mov dword [ebp - 0x19c], eax
cmp dword [ebp - 0x19c], 0x1a16
jge 0x100181ad
and dword [ebp - 0x1a4], 0
jmp 0x10018163
mov eax, dword [ebp - 0x1a4]
inc eax
mov dword [ebp - 0x1a4], eax
cmp dword [ebp - 0x1a4], 0x7052
jge 0x100181ab
mov eax, dword [ebp - 0x154]
cdq
idiv dword [ebp - 0x19c]
mov ecx, dword [ebp - 0x1a4]
sar edx, cl
mov eax, edx
cdq
mov dword [ebp - 0x614], eax
mov dword [ebp - 0x610], edx
push dword [ebp - 0x610]
push dword [ebp - 0x614]
mov ecx, 0x10075b18
call fcn.10001b85
jmp 0x10018156
jmp 0x10018134
jmp 0x1001810e
mov byte [ebp - 4], 0x1b
cmp dword [ebp - 0x33c], 0x7b09
jge 0x100181d2
mov edx, dword [ebp - 0x5ac]
mov ecx, 0x10075b18
call fcn.100036dc
jmp 0x100181ee
mov dword [ebp - 4], 0x1a
jmp 0x100181fe
push 3
lea ecx, [ebp - 0x580]
call fcn.10001c9a
mov byte [ebp - 4], 0x1d
mov dword [ebp - 0x54], 0
jmp 0x1001821f
mov eax, dword [ebp - 0x54]
inc eax
mov dword [ebp - 0x54], eax
cmp dword [ebp - 0x54], 3
jge 0x10018235
mov eax, dword [ebp - 0x54]
mov dword [ebp + eax*4 - 0x7f4], 7
jmp 0x10018218
mov dword [ebp - 0x54], 0
jmp 0x10018245
mov eax, dword [ebp - 0x54]
inc eax
mov dword [ebp - 0x54], eax
cmp dword [ebp - 0x54], 3
jge 0x10018261
push dword [ebp - 0x54]
lea ecx, [ebp - 0x580]
call fcn.10001cdb
mov dword [eax], 0x6c64e719
jmp 0x1001823e
mov dword [ebp - 0xdc], 0xffffffec
jmp 0x1001827a
mov eax, dword [ebp - 0xdc]
dec eax
mov dword [ebp - 0xdc], eax
cmp dword [ebp - 0xdc], 0xffffffe6
jne 0x10018554
mov dword [ebp - 0x4c], 0x534de6f8
mov dword [ebp - 0x27c], 0xfacd
mov dword [ebp - 0x294], 0x95848308
mov dword [ebp - 0x36c], 0xaaf1
mov dword [ebp - 0x288], 0x52b8909f
mov eax, dword [ebp - 0x4c]
dec eax
mov dword [ebp - 0x4c], eax
mov eax, dword [ebp - 0x274]
cmp eax, dword [ebp - 0x4c]
jne 0x100182d4
mov dword [ebp - 0x35c], 1
jmp 0x100182db
and dword [ebp - 0x35c], 0
mov dword [ebp - 0x27c], 0xffffffff
cmp dword [ebp - 0x27c], 0
jne 0x10018357
cmp dword [ebp - 0x274], 0
je 0x1001830a
push 0xfffffffffffffffa
pop eax
test eax, eax
je 0x1001830a
mov dword [ebp - 0x344], 1
jmp 0x10018311
and dword [ebp - 0x344], 0
mov eax, dword [ebp - 0x344]
add eax, 0xccad04e
cmp eax, 0xad33
jge 0x10018335
cmp dword [ebp - 0x4c], 0
je 0x10018335
mov dword [ebp - 0x34c], 1
jmp 0x1001833c
and dword [ebp - 0x34c], 0
mov eax, dword [ebp - 0xdc]
imul eax, dword [ebp - 0x34c]
cmp dword [ebp - 0x4c], eax
jg 0x10018357
and dword [ebp - 0x354], 0
jmp 0x10018361
mov dword [ebp - 0x354], 1
mov eax, dword [ebp - 0x354]
mov dword [ebp - 0x284], eax
mov eax, dword [ebp - 0x284]
mov dword [ebp - 0x294], eax
mov eax, dword [ebp - 0x294]
imul eax, dword [ebp - 0x4c]
imul eax, dword [ebp - 0x274]
cmp dword [ebp - 0x35c], eax
jl 0x1001839e
mov dword [ebp - 0x720], 1
jmp 0x100183a5
and dword [ebp - 0x720], 0
mov eax, dword [ebp - 0x4c]
mov dword [ebp - 0x8d8], eax
mov eax, dword [ebp - 0xdc]
mov dword [ebp - 0x9e8], eax
mov eax, dword [ebp - 0x4c]
mov dword [ebp - 0x8e0], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x7f4], 0
je 0x100183e3
xor eax, eax
je 0x100183e3
mov dword [ebp - 0x364], 1
jmp 0x100183ea
and dword [ebp - 0x364], 0
mov eax, dword [ebp - 0x364]
mov dword [ebp - 0x36c], eax
cmp dword [ebp - 0x36c], 0xfffffff9
je 0x1001840b
mov dword [ebp - 0x374], 1
jmp 0x10018412
and dword [ebp - 0x374], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x374]
sub ecx, dword [ebp + eax - 0x7f4]
sub ecx, dword [ebp - 0x4c]
jne 0x10018433
cmp dword [ebp - 0x294], 0
je 0x10018445
cmp dword [ebp - 0x4c], 0
je 0x10018445
mov dword [ebp - 0x37c], 1
jmp 0x1001844c
and dword [ebp - 0x37c], 0
push 0
lea ecx, [ebp - 0x580]
call fcn.10001cdb
mov ecx, dword [ebp - 0x37c]
cmp ecx, dword [eax]
jge 0x1001846f
mov dword [ebp - 0x2b8], 1
jmp 0x10018476
and dword [ebp - 0x2b8], 0
mov eax, dword [ebp - 0x288]
cmp dword [ebp - 0x2b8], eax
jg 0x10018496
push 0
lea ecx, [ebp - 0x580]
call fcn.10001cdb
cmp dword [eax], 0
jne 0x100184a8
cmp dword [ebp - 0x27c], 0
jne 0x100184a8
and dword [ebp - 0x63c], 0
jmp 0x100184b2
mov dword [ebp - 0x63c], 1
mov esi, dword [ebp - 0x288]
push 1
lea ecx, [ebp - 0x580]
call fcn.10001cdb
cmp dword [eax], esi
jl 0x100184d5
mov dword [ebp - 0x38c], 1
jmp 0x100184dc
and dword [ebp - 0x38c], 0
mov eax, dword [ebp - 0x288]
imul eax, dword [ebp - 0x38c]
test eax, eax
jne 0x100184ff
mov eax, 0xc518f82e
test eax, eax
jne 0x100184ff
and dword [ebp - 0x394], 0
jmp 0x10018509
mov dword [ebp - 0x394], 1
push 0
lea ecx, [ebp - 0x580]
call fcn.10001cdb
mov ecx, dword [ebp - 0x394]
cmp ecx, dword [eax]
jg 0x1001852c
mov dword [ebp - 0x39c], 1
jmp 0x10018533
and dword [ebp - 0x39c], 0
push 4
pop eax
shl eax, 1
mov ecx, dword [ebp - 0x39c]
mov dword [ebp + eax - 0x7f4], ecx
mov dword [ebp - 0x284], 0xd229656d
jmp 0x1001826d
mov byte [ebp - 4], 0x1a
lea ecx, [ebp - 0x580]
call fcn.10001cd6
mov eax, dword [ebp - 0x1ac]
mov byte [ebp + eax - 0x73c], 0
jmp 0x100180a9
mov dword [ebp - 0xf8], 0xffffffff
push 1
lea ecx, [ebp - 0x9cc]
call fcn.10001c9a
mov byte [ebp - 4], 0x1e
mov dword [ebp - 0x1b4], 0
jmp 0x100185aa
mov eax, dword [ebp - 0x1b4]
inc eax
mov dword [ebp - 0x1b4], eax
cmp dword [ebp - 0x1b4], 1
jge 0x100185cc
push dword [ebp - 0x1b4]
lea ecx, [ebp - 0x9cc]
call fcn.10001cdb
mov dword [eax], 1
jmp 0x1001859d
mov dword [ebp - 0xf8], 0x13
jmp 0x100185e5
mov eax, dword [ebp - 0xf8]
inc eax
mov dword [ebp - 0xf8], eax
cmp dword [ebp - 0xf8], 0x13
jle 0x10018606
mov dword [ebp - 0x6f4], 0xa2a4
mov eax, dword [ebp - 0xf8]
mov dword [ebp - 0x6f4], eax
jmp 0x100185d8
mov byte [ebp - 4], 0x1a
lea ecx, [ebp - 0x9cc]
call fcn.10001cd6
push 1
push 0
lea eax, [ebp - 0xa54]
push eax
push dword [ebp - 0x3a4]
call fcn.10019c2d
add esp, 0x10
mov dword [0x10076cac], eax
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xa54]
call fcn.10006970
mov dword [ebp - 0x3ac], 0x2c2c
mov dword [ebp - 0x714], str.qaihl_vlmge_wphkye_bvd_xsq
cmp dword [ebp - 0x3ac], 0x3002
jle 0x1001873b
and dword [ebp - 0x1bc], 0
jmp 0x1001867c
mov eax, dword [ebp - 0x1bc]
inc eax
mov dword [ebp - 0x1bc], eax
cmp dword [ebp - 0x1bc], 0x2229
jge 0x1001873b
and dword [ebp - 0x1c4], 0
jmp 0x100186a2
mov eax, dword [ebp - 0x1c4]
inc eax
mov dword [ebp - 0x1c4], eax
cmp dword [ebp - 0x1c4], 0x7837
jge 0x10018736
and dword [ebp - 0x1cc], 0
jmp 0x100186c8
mov eax, dword [ebp - 0x1cc]
inc eax
mov dword [ebp - 0x1cc], eax
cmp dword [ebp - 0x1cc], 0x44de
jge 0x10018731
mov eax, dword [ebp - 0x1bc]
add eax, dword [ebp - 0x1c4]
add eax, dword [ebp - 0x1cc]
cdq
mov dword [ebp - 0x620], eax
mov dword [ebp - 0x61c], edx
push dword [ebp - 0x61c]
push dword [ebp - 0x620]
lea ecx, [ebp - 0xae8]
call fcn.10001a41
pop ecx
pop ecx
mov dword [ebp - 0x648], eax
mov ecx, dword [ebp - 0x648]
call fcn.10001b65
push eax
call fcn.100425d6
pop ecx
lea ecx, [ebp - 0xae8]
call fcn.10001b5b
jmp 0x100186bb
jmp 0x10018695
jmp 0x1001866f
mov dword [ebp - 4], 0x1f
cmp dword [ebp - 0x3ac], 0x2a1d
jge 0x1001875a
push dword [ebp - 0x714]
call fcn.100425d6
pop ecx
jmp 0x10018776
or dword [ebp - 4], 0xffffffff
jmp 0x10018780
push 3
lea ecx, [ebp - 0x80c]
call fcn.10001c9a
mov dword [ebp - 4], 0x21
push 3
lea ecx, [ebp - 0x6ac]
call fcn.10001c9a
mov byte [ebp - 4], 0x22
mov dword [ebp - 0x978], 0xffffffff
mov dword [ebp - 0x2c], 0
jmp 0x100187bf
mov eax, dword [ebp - 0x2c]
inc eax
mov dword [ebp - 0x2c], eax
cmp dword [ebp - 0x2c], 3
jge 0x100187db
push dword [ebp - 0x2c]
lea ecx, [ebp - 0x80c]
call fcn.10001cdb
mov dword [eax], 0xb58e
jmp 0x100187b8
mov dword [ebp - 0x2c], 0
jmp 0x100187eb
mov eax, dword [ebp - 0x2c]
inc eax
mov dword [ebp - 0x2c], eax
cmp dword [ebp - 0x2c], 3
jge 0x10018804
push dword [ebp - 0x2c]
lea ecx, [ebp - 0x6ac]
call fcn.10001cdb
or dword [eax], 0xffffffff
jmp 0x100187e4
mov dword [ebp - 0x2c], 0
jmp 0x10018814
mov eax, dword [ebp - 0x2c]
inc eax
mov dword [ebp - 0x2c], eax
cmp dword [ebp - 0x2c], 1
jge 0x1001882a
mov eax, dword [ebp - 0x2c]
mov dword [ebp + eax*4 - 0x8e8], 0x36173948
jmp 0x1001880d
push 2
lea ecx, [ebp - 0x80c]
call fcn.10001cdb
mov dword [ebp - 0x3b4], eax
mov eax, dword [ebp - 0x3b4]
mov eax, dword [eax]
inc eax
mov ecx, dword [ebp - 0x3b4]
mov dword [ecx], eax
push 2
lea ecx, [ebp - 0x6ac]
call fcn.10001cdb
mov dword [eax], 0xffffffee
jmp 0x10018887
push 2
lea ecx, [ebp - 0x6ac]
call fcn.10001cdb
mov dword [ebp - 0x3bc], eax
mov eax, dword [ebp - 0x3bc]
mov eax, dword [eax]
inc eax
mov ecx, dword [ebp - 0x3bc]
mov dword [ecx], eax
push 2
lea ecx, [ebp - 0x6ac]
call fcn.10001cdb
cmp dword [eax], 0xa
jle 0x10018956
mov dword [ebp - 0xa10], 0
mov dword [ebp - 0x8f0], 0xea388845
mov dword [ebp - 0x980], 0x22e974a5
mov dword [ebp - 0x8f8], 1
mov dword [ebp - 0x1d4], 0
jmp 0x100188de
mov eax, dword [ebp - 0x1d4]
inc eax
mov dword [ebp - 0x1d4], eax
cmp dword [ebp - 0x1d4], 3
jge 0x100188fa
mov eax, dword [ebp - 0x1d4]
mov dword [ebp + eax*4 - 0x778], 0
jmp 0x100188d1
push 4
pop eax
shl eax, 0
mov dword [ebp + eax - 0x778], 2
jmp 0x10018928
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x778]
dec eax
push 4
pop ecx
shl ecx, 0
mov dword [ebp + ecx - 0x778], eax
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x778], 0
jl 0x10018951
mov dword [ebp - 0x3c4], 0
mov eax, dword [ebp - 0x3c4]
inc eax
mov dword [ebp - 0x3c4], eax
jmp 0x1001890d
jmp 0x10018863
mov byte [ebp - 4], 0x21
lea ecx, [ebp - 0x6ac]
call fcn.10001cd6
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x80c]
call fcn.10001cd6
cmp dword [0x10076cac], 0
je 0x10019ad9
mov dword [ebp - 0x100], 0xffffffff
mov dword [ebp - 0x3e4], 0x1d018875
mov byte [ebp - 0xb7], 0
movzx eax, byte [ebp - 0xb7]
test eax, eax
je 0x100189bd
push 0
push 0
push 0x1bab
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_PostMessageA]
cmp dword [ebp - 0x100], 0
je 0x10018a19
mov byte [ebp - 0xb0], 0
movzx eax, byte [ebp - 0xb0]
test eax, eax
je 0x10018a14
push 0x1e14
push 0xdf2
push 0x1fa7
push 0x66a
push 0x42e
push 0x15ed
push 0xa33
push 0x1356
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_Arc]
jmp 0x10018b68
push 4
lea ecx, [ebp - 0x76c]
call fcn.10001c9a
mov dword [ebp - 4], 0x23
mov dword [ebp - 0x6c4], 0xffffffff
mov dword [ebp - 0x9f0], 0xa5202749
mov dword [ebp - 0x3cc], 0x7d72b90f
mov dword [ebp - 0x1dc], 0
jmp 0x10018a64
mov eax, dword [ebp - 0x1dc]
inc eax
mov dword [ebp - 0x1dc], eax
cmp dword [ebp - 0x1dc], 4
jge 0x10018a86
push dword [ebp - 0x1dc]
lea ecx, [ebp - 0x76c]
call fcn.10001cdb
mov dword [eax], 0x7ca0029b
jmp 0x10018a57
push 1
lea ecx, [ebp - 0x76c]
call fcn.10001cdb
mov eax, dword [eax]
mov dword [ebp - 0x100], eax
mov eax, dword [ebp - 0x3cc]
inc eax
mov dword [ebp - 0x3cc], eax
xor eax, eax
inc eax
cmp eax, 0x268dd2ac
jl 0x10018abe
mov dword [ebp - 0x3d4], 1
jmp 0x10018ac5
and dword [ebp - 0x3d4], 0
cmp dword [ebp - 0x3d4], 0xbca0
je 0x10018ae6
cmp dword [ebp - 0x100], 0
je 0x10018ae6
mov dword [ebp - 0x650], 1
jmp 0x10018aed
and dword [ebp - 0x650], 0
mov eax, dword [ebp - 0x6c4]
mov dword [ebp - 0x900], eax
push 1
lea ecx, [ebp - 0x76c]
call fcn.10001cdb
cmp dword [eax], 0
jne 0x10018b17
mov dword [ebp - 0x3dc], 1
jmp 0x10018b1e
and dword [ebp - 0x3dc], 0
mov eax, dword [ebp - 0x100]
imul eax, dword [ebp - 0x3dc]
cmp eax, dword [ebp - 0x3e4]
jne 0x10018b3f
mov dword [ebp - 0x3ec], 1
jmp 0x10018b46
and dword [ebp - 0x3ec], 0
mov eax, dword [ebp - 0x3e4]
imul eax, dword [ebp - 0x3ec]
mov dword [ebp - 0x100], eax
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x76c]
call fcn.10001cd6
mov eax, dword [ebp + 8]
mov dword [ebp - 0x6d0], eax
mov dword [ebp - 0x20], 0xb6eb6b9d
mov dword [ebp - 0xd4], 0xffffffff
mov dword [ebp - 0x1e4], 0
jmp 0x10018b9b
mov eax, dword [ebp - 0x1e4]
inc eax
mov dword [ebp - 0x1e4], eax
cmp dword [ebp - 0x1e4], 1
jge 0x10018bb7
mov eax, dword [ebp - 0x1e4]
mov dword [ebp + eax*4 - 0x268], 0x4392f209
jmp 0x10018b8e
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x988], eax
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x908], eax
cmp dword [ebp - 0x20], 0
jne 0x10018bd3
cmp dword [ebp - 0x20], 0
mov eax, dword [ebp - 0x20]
cmp eax, dword [ebp - 0x20]
jle 0x10018be7
mov dword [ebp - 0x3f4], 1
jmp 0x10018bee
and dword [ebp - 0x3f4], 0
imul eax, dword [ebp - 0x3f4], 0x464f
cmp dword [ebp - 0x20], eax
jne 0x10018c09
mov dword [ebp - 0x3fc], 1
jmp 0x10018c10
and dword [ebp - 0x3fc], 0
mov eax, dword [ebp - 0x20]
cmp dword [ebp - 0x3fc], eax
jg 0x10018c27
mov dword [ebp - 0x404], 1
jmp 0x10018c2e
and dword [ebp - 0x404], 0
mov eax, 0xbb67
sub eax, dword [ebp - 0x404]
cmp eax, dword [ebp - 0x20]
jle 0x10018c4a
mov dword [ebp - 0x40c], 1
jmp 0x10018c51
and dword [ebp - 0x40c], 0
mov eax, dword [ebp - 0x40c]
sub eax, dword [ebp - 0x20]
mov dword [ebp - 0xd4], eax
je 0x10018c98
cmp dword [ebp - 0x20], 0
je 0x10018c98
mov byte [ebp - 0xa1], 0
movzx eax, byte [ebp - 0xa1]
test eax, eax
je 0x10018c93
push 0x1b41
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_SetROP2]
jmp 0x10018e34
mov byte [ebp - 0xa9], 0
movzx eax, byte [ebp - 0xa9]
test eax, eax
je 0x10018cb9
push 0
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_RemovePropA]
mov dword [ebp - 0x20], 0
jmp 0x10018cc9
mov eax, dword [ebp - 0x20]
dec eax
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 0
jl 0x10018e34
mov dword [ebp - 0x658], 0xaad90151
mov dword [ebp - 0xd4], 0
jmp 0x10018cf6
mov eax, dword [ebp - 0xd4]
dec eax
mov dword [ebp - 0xd4], eax
cmp dword [ebp - 0xd4], 0
jl 0x10018e12
push 3
lea ecx, [ebp - 0x540]
call fcn.10001c9a
mov dword [ebp - 4], 0x24
mov dword [ebp - 0x1ec], 0
jmp 0x10018d30
mov eax, dword [ebp - 0x1ec]
inc eax
mov dword [ebp - 0x1ec], eax
cmp dword [ebp - 0x1ec], 3
jge 0x10018d52
push dword [ebp - 0x1ec]
lea ecx, [ebp - 0x540]
call fcn.10001cdb
mov dword [eax], 0xfffffffa
jmp 0x10018d23
push 1
lea ecx, [ebp - 0x540]
call fcn.10001cdb
and dword [eax], 0
jmp 0x10018d88
push 1
lea ecx, [ebp - 0x540]
call fcn.10001cdb
mov dword [ebp - 0x414], eax
mov eax, dword [ebp - 0x414]
mov eax, dword [eax]
dec eax
mov ecx, dword [ebp - 0x414]
mov dword [ecx], eax
push 1
lea ecx, [ebp - 0x540]
call fcn.10001cdb
cmp dword [eax], 0
jl 0x10018dfe
push 1
lea ecx, [ebp - 0x540]
call fcn.10001cdb
mov eax, dword [eax]
cmp dword [ebp + eax*4 - 0x268], 0
je 0x10018db5
jmp 0x10018dfe
push 1
lea ecx, [ebp - 0x540]
call fcn.10001cdb
mov eax, dword [eax]
mov eax, dword [ebp + eax*4 - 0x268]
mov dword [ebp - 0x41c], eax
push 1
lea ecx, [ebp - 0x540]
call fcn.10001cdb
mov eax, dword [eax]
mov ecx, dword [ebp - 0x41c]
mov dword [ebp + eax*4 - 0x268], ecx
mov eax, dword [ebp - 0x41c]
mov dword [ebp - 0x658], eax
jmp 0x10018d64
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x540]
call fcn.10001cd6
jmp 0x10018ce9
mov byte [ebp - 0xaa], 0
movzx eax, byte [ebp - 0xaa]
test eax, eax
je 0x10018e2f
push 0xc7f
call dword [sym.imp.GDI32.dll_GetStockObject]
jmp 0x10018cc2
mov eax, dword [ebp + 0xc]
mov dword [ebp - 0x670], eax
mov dword [ebp - 0x1f4], 0xf506
mov dword [ebp - 0xc8], 1
mov dword [ebp - 0xa8], 0xfffffff7
mov eax, dword [ebp - 0x1f4]
cmp eax, dword [ebp - 0x1f4]
je 0x10018e75
mov dword [ebp - 0x434], 1
jmp 0x10018e7c
and dword [ebp - 0x434], 0
mov eax, dword [ebp - 0x1f4]
mov dword [ebp - 0xc8], eax
mov eax, dword [ebp - 0xc8]
cmp eax, dword [ebp - 0x1f4]
jne 0x10018ea2
mov dword [ebp - 0x424], 1
jmp 0x10018ea9
and dword [ebp - 0x424], 0
mov eax, dword [ebp - 0x424]
mov dword [ebp - 0xa8], eax
cmp dword [ebp - 0xa8], 0xa298
jne 0x10018ecd
mov dword [ebp - 0x42c], 1
jmp 0x10018ed4
and dword [ebp - 0x42c], 0
mov eax, dword [ebp - 0x42c]
add eax, 0x3a3f
cmp eax, 0xffffffff
jle 0x10018ef0
mov dword [ebp - 0x43c], 1
jmp 0x10018ef7
and dword [ebp - 0x43c], 0
mov eax, dword [ebp - 0x434]
cmp eax, dword [ebp - 0x43c]
jl 0x10018fda
mov dword [ebp - 0x6c8], 1
mov dword [ebp - 0x660], 0xf989b1ab
cmp dword [ebp - 0x6c8], 0
je 0x10018f56
mov byte [ebp - 0x89], 0
movzx eax, byte [ebp - 0x89]
test eax, eax
je 0x10018f47
push 0
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_EndPaint]
mov dword [ebp - 0x660], 0x868bb4a
jmp 0x10018fd8
mov dword [ebp - 0x840], 2
mov dword [ebp - 0x83c], 2
mov dword [ebp - 0x838], 2
mov dword [ebp - 0x834], 2
mov dword [ebp - 0xa8], 3
jmp 0x10018f97
mov eax, dword [ebp - 0xa8]
dec eax
mov dword [ebp - 0xa8], eax
cmp dword [ebp - 0xa8], 0
jl 0x10018fd8
mov dword [ebp - 0xc8], 0
jmp 0x10018fb9
mov eax, dword [ebp - 0xc8]
inc eax
mov dword [ebp - 0xc8], eax
cmp dword [ebp - 0xc8], 3
jg 0x10018fd6
mov eax, dword [ebp - 0xa8]
cmp dword [ebp + eax*4 - 0x840], 0
je 0x10018fd4
jmp 0x10018fd6
jmp 0x10018fac
jmp 0x10018f8a
jmp 0x1001901e
mov dword [ebp - 0x444], 5
mov eax, dword [ebp - 0x444]
dec eax
mov dword [ebp - 0x444], eax
mov byte [ebp - 0xb2], 0
movzx eax, byte [ebp - 0xb2]
test eax, eax
je 0x1001901e
push 0
push 0
push 0x1868
push 0x1b3
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_SendDlgItemMessageA]
mov eax, dword [ebp - 0x6d0]
mov dword [ebp - 0x6f0], eax
mov dword [ebp - 0x668], 0x89480189
mov dword [ebp - 0xd0], 0xb57e8b72
mov dword [ebp - 0xa30], 0xbf38c088
push 2
lea ecx, [ebp - 0x9dc]
call fcn.10001c9a
mov dword [ebp - 4], 0x25
mov dword [ebp - 0x44c], 0xffffffff
mov dword [ebp - 0x1fc], 0
jmp 0x1001907f
mov eax, dword [ebp - 0x1fc]
inc eax
mov dword [ebp - 0x1fc], eax
cmp dword [ebp - 0x1fc], 2
jge 0x100190a1
push dword [ebp - 0x1fc]
lea ecx, [ebp - 0x9dc]
call fcn.10001cdb
mov dword [eax], 0x44d0289a
jmp 0x10019072
mov eax, dword [ebp - 0x668]
mov dword [ebp - 0xd0], eax
mov dword [ebp - 0xd0], 0
jmp 0x100190c6
mov eax, dword [ebp - 0xd0]
inc eax
mov dword [ebp - 0xd0], eax
cmp dword [ebp - 0xd0], 0x13
je 0x10019108
mov dword [ebp - 0x6d8], 0x6a162c9c
mov dword [ebp - 0x910], 1
mov dword [ebp - 0x990], 0xb101aae4
mov eax, dword [ebp - 0x44c]
dec eax
mov dword [ebp - 0x44c], eax
mov eax, dword [ebp - 0xd0]
mov dword [ebp - 0x6d8], eax
jmp 0x100190b9
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x9dc]
call fcn.10001cd6
mov eax, dword [ebp - 0x670]
mov dword [ebp - 0x680], eax
mov dword [ebp - 0x88], 5
mov dword [ebp - 0x464], 0xa912e755
mov dword [ebp - 0xc4], 0xc415051a
mov dword [ebp - 0xd8], 9
mov dword [ebp - 0x88], 0xfffffffd
jmp 0x10019164
mov eax, dword [ebp - 0x88]
dec eax
mov dword [ebp - 0x88], eax
cmp dword [ebp - 0x88], 0xfffffff7
je 0x1001965d
mov dword [ebp - 0x7c], 0x2e31d83
mov dword [ebp - 0x204], 1
mov eax, dword [ebp - 0x88]
mov dword [ebp - 0x918], eax
mov eax, dword [ebp - 0x88]
mov dword [ebp - 0x9f8], eax
mov eax, dword [ebp - 0x7c]
mov dword [ebp - 0x204], eax
cmp dword [ebp - 0x204], 0xffffffff
jae 0x100191b8
mov dword [ebp - 0x454], 1
jmp 0x100191bf
and dword [ebp - 0x454], 0
mov eax, dword [ebp - 0x7c]
cmp dword [ebp - 0x454], eax
jl 0x100191dc
cmp dword [ebp - 0x204], 0
jne 0x100191dc
and dword [ebp - 0x45c], 0
jmp 0x100191e6
mov dword [ebp - 0x45c], 1
mov eax, dword [ebp - 0x45c]
mov dword [ebp - 0x464], eax
imul eax, dword [ebp - 0x464], 0x23d
cmp eax, dword [ebp - 0x7c]
jl 0x1001920d
mov dword [ebp - 0x46c], 1
jmp 0x10019214
and dword [ebp - 0x46c], 0
mov eax, dword [ebp - 0x88]
cmp dword [ebp - 0x46c], eax
jle 0x1001922e
mov dword [ebp - 0x474], 1
jmp 0x10019235
and dword [ebp - 0x474], 0
mov eax, dword [ebp - 0x474]
mov dword [ebp - 0xc4], eax
cmp dword [ebp - 0xc4], 0
je 0x1001925f
cmp dword [ebp - 0x204], 0
je 0x1001925f
mov dword [ebp - 0x47c], 1
jmp 0x10019266
and dword [ebp - 0x47c], 0
mov eax, dword [ebp - 0x7c]
cmp eax, dword [ebp - 0x47c]
jl 0x1001927d
mov dword [ebp - 0x484], 1
jmp 0x10019284
and dword [ebp - 0x484], 0
mov eax, dword [ebp - 0xd8]
imul eax, dword [ebp - 0x484]
cmp eax, dword [ebp - 0x88]
jge 0x100192a5
mov dword [ebp - 0x48c], 1
jmp 0x100192ac
and dword [ebp - 0x48c], 0
mov eax, dword [ebp - 0xd8]
cmp dword [ebp - 0x48c], eax
jge 0x100192c6
mov dword [ebp - 0x494], 1
jmp 0x100192cd
and dword [ebp - 0x494], 0
mov eax, dword [ebp - 0x7c]
cmp dword [ebp - 0x494], eax
jl 0x100192e4
mov dword [ebp - 0x49c], 1
jmp 0x100192eb
and dword [ebp - 0x49c], 0
mov eax, dword [ebp - 0x7c]
cmp eax, dword [ebp - 0x49c]
jne 0x10019302
mov dword [ebp - 0x4a4], 1
jmp 0x10019309
and dword [ebp - 0x4a4], 0
cmp dword [ebp - 0x4a4], 0xffff
jbe 0x1001949c
mov byte [ebp - 0xab], 0
movzx eax, byte [ebp - 0xab]
test eax, eax
je 0x10019497
mov dword [ebp - 0x4ac], 0x315f
mov dword [ebp - 0x6e0], str.uhmt_lzhzfx_dbu_vzbwvgtx_plp_wifrdd_tmtjcaohy_dqpwyopv
cmp dword [ebp - 0x4ac], 0x3295
jle 0x10019432
push 0xd51
push 0xec
push 0x56c
push 0xf1d
push 0
call dword [sym.imp.USER32.dll_CheckMenuRadioItem]
and dword [ebp - 0x20c], 0
jmp 0x10019385
mov eax, dword [ebp - 0x20c]
inc eax
mov dword [ebp - 0x20c], eax
cmp dword [ebp - 0x20c], 0x66f1
jge 0x100193e8
and dword [ebp - 0x214], 0
jmp 0x100193a7
mov eax, dword [ebp - 0x214]
inc eax
mov dword [ebp - 0x214], eax
cmp dword [ebp - 0x214], 0x3567
jge 0x100193e6
mov eax, dword [ebp - 0x20c]
mov ecx, dword [ebp - 0x214]
shl eax, cl
cdq
mov dword [ebp - 0x62c], eax
mov dword [ebp - 0x628], edx
push dword [ebp - 0x628]
push dword [ebp - 0x62c]
mov ecx, 0x10075b18
call fcn.10001b85
jmp 0x1001939a
jmp 0x10019378
push 0xa72
push 0x317
push 0
push 0
push 0x466
push 0x1aa6
push 0xa1
push 0x1f88
push 0xf2c
push 0x1f80
push 0x2601
push 0x1e1a
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_StretchDIBits]
push 0x889
push 0x226d
push 0x6a6
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_CheckRadioButton]
mov dword [ebp - 4], 0x26
cmp dword [ebp - 0x4ac], 0x2f8d
jge 0x10019471
mov edx, dword [ebp - 0x6e0]
mov ecx, 0x10075b18
call fcn.100036dc
jmp 0x1001948d
or dword [ebp - 4], 0xffffffff
jmp 0x10019497
jmp 0x10019658
mov dword [ebp - 0x4b4], 0x59d3
mov dword [ebp - 0x6e8], str.jold_azmpqlp_xmt_agyp_vzkfdwwg_gkiuk_mnpssa_aphk_fxnxivo_vrz_kso_udglemts_eeus
cmp dword [ebp - 0x4b4], 0x5bf0
jle 0x10019596
and dword [ebp - 0x21c], 0
jmp 0x100194d6
mov eax, dword [ebp - 0x21c]
inc eax
mov dword [ebp - 0x21c], eax
cmp dword [ebp - 0x21c], 0x7b69
jge 0x10019596
and dword [ebp - 0x224], 0
jmp 0x100194fc
mov eax, dword [ebp - 0x224]
inc eax
mov dword [ebp - 0x224], eax
cmp dword [ebp - 0x224], 0x449e
jge 0x10019591
and dword [ebp - 0x22c], 0
jmp 0x10019522
mov eax, dword [ebp - 0x22c]
inc eax
mov dword [ebp - 0x22c], eax
cmp dword [ebp - 0x22c], 0x440
jge 0x1001958c
mov eax, dword [ebp - 0x21c]
imul eax, dword [ebp - 0x224]
xor eax, dword [ebp - 0x22c]
cdq
mov dword [ebp - 0x638], eax
mov dword [ebp - 0x634], edx
push dword [ebp - 0x634]
push dword [ebp - 0x638]
lea ecx, [ebp - 0xaac]
call fcn.10001a41
pop ecx
pop ecx
mov dword [ebp - 0x678], eax
mov ecx, dword [ebp - 0x678]
call fcn.10001b65
push eax
call fcn.100425d6
pop ecx
lea ecx, [ebp - 0xaac]
call fcn.10001b5b
jmp 0x10019515
jmp 0x100194ef
jmp 0x100194c9
mov dword [ebp - 0xd8], 0
jmp 0x100195af
mov eax, dword [ebp - 0xd8]
dec eax
mov dword [ebp - 0xd8], eax
cmp dword [ebp - 0xd8], 0xffffffea
jg 0x10019613
mov dword [ebp - 0x7c], 0xbca925f3
mov dword [ebp - 0xc4], 0
jmp 0x100195d8
mov eax, dword [ebp - 0xc4]
dec eax
mov dword [ebp - 0xc4], eax
cmp dword [ebp - 0xc4], 0xffffffec
jge 0x10019611
mov byte [ebp - 0xbb], 0
movzx eax, byte [ebp - 0xbb]
test eax, eax
je 0x10019607
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_EndDoc]
cmp dword [ebp - 0x7c], 0
je 0x1001960f
jmp 0x10019611
jmp 0x100195cb
jmp 0x100195a2
mov dword [ebp - 4], 0x28
cmp dword [ebp - 0x4b4], 0x595a
jge 0x10019632
push dword [ebp - 0x6e8]
call fcn.100425d6
pop ecx
jmp 0x1001964e
or dword [ebp - 4], 0xffffffff
jmp 0x10019658
jmp 0x10019157
push dword [ebp - 0x680]
push dword [ebp - 0x6f0]
call dword [0x10076cac]
mov dword [ebp - 0x6b0], eax
push 4
lea ecx, [ebp - 0x830]
call fcn.10001c9a
mov dword [ebp - 4], 0x2a
push 1
lea ecx, [ebp - 0x574]
call fcn.10001c9a
mov byte [ebp - 4], 0x2b
mov dword [ebp - 0x258], 0xfffffffc
mov dword [ebp - 0x4bc], 0x7e61
mov dword [ebp - 0x690], str.ozved_stqs_wdcjd_xgpbsytz_aerjv_zbevht_lveryqh_dzuxja_vxceu_ursxvc_wakknecwf_hua
cmp dword [ebp - 0x4bc], 0x81da
jle 0x100197bc
push 0x108f
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_SetLayout]
and dword [ebp - 0x244], 0
jmp 0x100196f7
mov eax, dword [ebp - 0x244]
inc eax
mov dword [ebp - 0x244], eax
cmp dword [ebp - 0x244], 0x3629
jge 0x100197bc
and dword [ebp - 0x24c], 0
jmp 0x1001971d
mov eax, dword [ebp - 0x24c]
inc eax
mov dword [ebp - 0x24c], eax
cmp dword [ebp - 0x24c], 0x8bc
jge 0x100197b7
and dword [ebp - 0x234], 0
jmp 0x10019743
mov eax, dword [ebp - 0x234]
inc eax
mov dword [ebp - 0x234], eax
cmp dword [ebp - 0x234], 0x6260
jge 0x100197b2
and dword [ebp - 0x23c], 0
jmp 0x10019765
mov eax, dword [ebp - 0x23c]
inc eax
mov dword [ebp - 0x23c], eax
cmp dword [ebp - 0x23c], 0x27c8
jge 0x100197b0
mov eax, dword [ebp - 0x234]
and eax, dword [ebp - 0x23c]
mov ecx, dword [ebp - 0x244]
and ecx, dword [ebp - 0x24c]
xor eax, ecx
cdq
mov dword [ebp - 0x644], eax
mov dword [ebp - 0x640], edx
push dword [ebp - 0x640]
push dword [ebp - 0x644]
mov ecx, 0x10075b18
call fcn.10001b85
jmp 0x10019758
jmp 0x10019736
jmp 0x10019710
jmp 0x100196ea
mov dword [ebp - 0x700], 0
mov byte [ebp - 4], 0x2c
cmp dword [ebp - 0x4bc], 0x7c4e
jge 0x100197e6
mov edx, dword [ebp - 0x690]
mov ecx, 0x10075b18
call fcn.100036dc
jmp 0x10019802
mov dword [ebp - 4], 0x2b
jmp 0x10019812
mov dword [ebp - 0x60], 0
jmp 0x10019822
mov eax, dword [ebp - 0x60]
inc eax
mov dword [ebp - 0x60], eax
cmp dword [ebp - 0x60], 4
jge 0x1001983b
push dword [ebp - 0x60]
lea ecx, [ebp - 0x830]
call fcn.10001cdb
or dword [eax], 0xffffffff
jmp 0x1001981b
mov dword [ebp - 0x60], 0
jmp 0x1001984b
mov eax, dword [ebp - 0x60]
inc eax
mov dword [ebp - 0x60], eax
cmp dword [ebp - 0x60], 1
jge 0x10019867
push dword [ebp - 0x60]
lea ecx, [ebp - 0x574]
call fcn.10001cdb
mov dword [eax], 0xfffffffb
jmp 0x10019844
push 0
lea ecx, [ebp - 0x574]
call fcn.10001cdb
and dword [eax], 0
jmp 0x1001989d
push 0
lea ecx, [ebp - 0x574]
call fcn.10001cdb
mov dword [ebp - 0x4c4], eax
mov eax, dword [ebp - 0x4c4]
mov eax, dword [eax]
inc eax
mov ecx, dword [ebp - 0x4c4]
mov dword [ecx], eax
push 0
lea ecx, [ebp - 0x574]
call fcn.10001cdb
cmp dword [eax], 3
jg 0x10019ab0
mov dword [ebp - 0x3c], 0
mov dword [ebp - 0x270], 0xda8db884
mov dword [ebp - 0x3c], 0
jmp 0x100198d4
mov eax, dword [ebp - 0x3c]
inc eax
mov dword [ebp - 0x3c], eax
cmp dword [ebp - 0x3c], 3
jg 0x10019a36
push 1
lea ecx, [ebp - 0x6bc]
call fcn.10001c9a
mov byte [ebp - 4], 0x2e
mov dword [ebp - 0x4cc], 0xf39c
mov dword [ebp - 0x254], 0
jmp 0x10019912
mov eax, dword [ebp - 0x254]
inc eax
mov dword [ebp - 0x254], eax
cmp dword [ebp - 0x254], 1
jge 0x10019931
push dword [ebp - 0x254]
lea ecx, [ebp - 0x6bc]
call fcn.10001cdb
or dword [eax], 0xffffffff
jmp 0x10019905
mov eax, 0x888999d9
test eax, eax
je 0x10019a0a
push 0
lea ecx, [ebp - 0x6bc]
call fcn.10001cdb
cmp dword [eax], 0
jne 0x1001995c
mov dword [ebp - 0x6f8], 1
jmp 0x10019963
and dword [ebp - 0x6f8], 0
push 0
lea ecx, [ebp - 0x6bc]
call fcn.10001cdb
push 0
lea ecx, [ebp - 0x6bc]
call fcn.10001cdb
mov eax, dword [ebp - 0x3c]
mov dword [ebp - 0x920], eax
cmp dword [ebp - 0x4cc], 0
jne 0x100199aa
push 3
lea ecx, [ebp - 0x830]
call fcn.10001cdb
cmp dword [eax], 0
jne 0x100199aa
and dword [ebp - 0x6a0], 0
jmp 0x100199b4
mov dword [ebp - 0x6a0], 1
mov eax, dword [ebp - 0x3c]
mov dword [ebp - 0x9a0], eax
mov eax, dword [ebp - 0x4cc]
mov dword [ebp - 0x270], eax
mov eax, dword [ebp - 0x270]
mov dword [ebp - 0x258], eax
mov eax, dword [ebp - 0x258]
sub eax, dword [ebp - 0x3c]
cmp eax, 6
je 0x100199ef
mov dword [ebp - 0x4d4], 1
jmp 0x100199f6
and dword [ebp - 0x4d4], 0
push 0
lea ecx, [ebp - 0x574]
call fcn.10001cdb
cmp dword [ebp - 0x270], 0
mov eax, dword [ebp - 0x258]
mov dword [ebp - 0x928], eax
mov eax, dword [ebp - 0x258]
mov dword [ebp - 0x700], eax
mov byte [ebp - 4], 0x2b
lea ecx, [ebp - 0x6bc]
call fcn.10001cd6
jmp 0x100198cd
mov dword [ebp - 0x3c], 3
jmp 0x10019a46
mov eax, dword [ebp - 0x3c]
dec eax
mov dword [ebp - 0x3c], eax
cmp dword [ebp - 0x3c], 0
jl 0x10019aab
mov byte [ebp - 0xb4], 0
movzx eax, byte [ebp - 0xb4]
test eax, eax
je 0x10019a7e
push 0
push 0x676
push 0x26c1
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_SetDIBColorTable]
mov byte [ebp - 0xae], 0
movzx eax, byte [ebp - 0xae]
test eax, eax
je 0x10019aa9
push 0xfd6
push 0x1506
push 0
push 0
push 0x1928
call dword [sym.imp.USER32.dll_MsgWaitForMultipleObjects]
jmp 0x10019a3f
jmp 0x10019879
mov byte [ebp - 4], 0x2a
lea ecx, [ebp - 0x574]
call fcn.10001cd6
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x830]
call fcn.10001cd6
mov eax, dword [ebp - 0x6b0]
jmp 0x10019c1c
mov dword [ebp - 0x58], 0
jmp 0x10019ae9
mov eax, dword [ebp - 0x58]
inc eax
mov dword [ebp - 0x58], eax
cmp dword [ebp - 0x58], 3
jge 0x10019aff
mov eax, dword [ebp - 0x58]
mov dword [ebp + eax*4 - 0x824], 0xfffffffd
jmp 0x10019ae2
mov dword [ebp - 0x58], 0
jmp 0x10019b0f
mov eax, dword [ebp - 0x58]
inc eax
mov dword [ebp - 0x58], eax
cmp dword [ebp - 0x58], 2
jge 0x10019b25
mov eax, dword [ebp - 0x58]
mov dword [ebp + eax*4 - 0x260], 0
jmp 0x10019b08
push 4
pop eax
shl eax, 0
mov dword [ebp + eax - 0x260], 0
jmp 0x10019b53
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x260]
inc eax
push 4
pop ecx
shl ecx, 0
mov dword [ebp + ecx - 0x260], eax
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x260], 2
jg 0x10019c1a
mov dword [ebp - 0x708], 0xfffffffd
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x260]
cmp dword [ebp + eax*4 - 0x824], 0
jne 0x10019bd0
push 4
pop eax
imul eax, eax, 0
push 4
pop ecx
shl ecx, 0
mov ecx, dword [ebp + ecx - 0x260]
mov ecx, dword [ebp + ecx*4 - 0x824]
cmp ecx, dword [ebp + eax - 0x260]
jne 0x10019bb7
mov dword [ebp - 0x4dc], 1
jmp 0x10019bbe
and dword [ebp - 0x4dc], 0
cmp dword [ebp - 0x4dc], 0xffffffff
jge 0x10019bd0
and dword [ebp - 0x4e4], 0
jmp 0x10019bda
mov dword [ebp - 0x4e4], 1
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x260]
mov eax, dword [ebp + eax*4 - 0x824]
cmp dword [ebp - 0x4e4], eax
jne 0x10019c02
mov dword [ebp - 0x4ec], 1
jmp 0x10019c09
and dword [ebp - 0x4ec], 0
mov eax, dword [ebp - 0x4ec]
mov dword [ebp - 0x708], eax
jmp 0x10019b38
xor eax, eax
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret