Function at 0x1001e4cd
Capabilities:
Connect pipe
Get geographical location

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x1005f772
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
push ecx
sub esp, 0x600
push ebx
push esi
push edi
mov dword [ebp - 0x10], esp
mov dword [ebp - 0x48], 0xfffffffe
mov dword [ebp - 0x398], 0x6460
mov dword [ebp - 0x3ec], str.swiw_jtebujzpl_sswywgk_dmuiyehk_yovftayhl
cmp dword [ebp - 0x398], 0x646f
jle 0x1001e5a5
push 0x253
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_GetLocaleInfoW]
and dword [ebp - 0x94], 0
jmp 0x1001e544
mov eax, dword [ebp - 0x94]
inc eax
mov dword [ebp - 0x94], eax
cmp dword [ebp - 0x94], 0x22e1
jge 0x1001e5a5
and dword [ebp - 0x88], 0
jmp 0x1001e566
mov eax, dword [ebp - 0x88]
inc eax
mov dword [ebp - 0x88], eax
cmp dword [ebp - 0x88], 0xd26
jge 0x1001e5a3
mov eax, dword [ebp - 0x94]
add eax, dword [ebp - 0x88]
cdq
mov dword [ebp - 0x45c], eax
mov dword [ebp - 0x458], edx
push dword [ebp - 0x458]
push dword [ebp - 0x45c]
mov ecx, 0x1007ab78
call fcn.10001bfe
jmp 0x1001e559
jmp 0x1001e537
mov dword [ebp - 0xf0], 0x270f9e3
and dword [ebp - 4], 0
cmp dword [ebp - 0x398], 0x6132
jge 0x1001e5cf
mov edx, dword [ebp - 0x3ec]
mov ecx, 0x1007ab78
call fcn.100039fb
jmp 0x1001e5eb
or dword [ebp - 4], 0xffffffff
jmp 0x1001e5f5
mov dword [ebp - 0x140], 0x2522abf7
mov dword [ebp - 0x150], 0x40dfe9f4
mov dword [ebp - 0x450], 0
mov dword [ebp - 0x2f0], 0x509b9552
mov dword [ebp - 0x4c8], 1
mov dword [ebp - 0x90], 0
jmp 0x1001e640
mov eax, dword [ebp - 0x90]
inc eax
mov dword [ebp - 0x90], eax
cmp dword [ebp - 0x90], 1
jge 0x1001e65c
mov eax, dword [ebp - 0x90]
mov dword [ebp + eax*4 - 0x3e0], 0x93bd5de1
jmp 0x1001e633
cmp dword [ebp - 0x48], 0
je 0x1001e678
mov eax, dword [ebp - 0xf0]
dec eax
mov dword [ebp - 0xf0], eax
mov eax, dword [ebp - 0x48]
cmp eax, dword [ebp - 0xf0]
push 4
pop eax
imul eax, eax, 0
xor ecx, ecx
sub ecx, dword [ebp + eax - 0x3e0]
imul eax, ecx, 0
add eax, 0xf7d9
mov dword [ebp - 0x130], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x130]
mov dword [ebp + eax - 0x3e0], ecx
mov eax, dword [ebp - 0x130]
add eax, 0x6084
cmp dword [ebp - 0x48], eax
je 0x1001e6c4
mov dword [ebp - 0x2d0], 1
jmp 0x1001e6cb
and dword [ebp - 0x2d0], 0
mov eax, dword [ebp - 0x48]
cmp dword [ebp - 0x2d0], eax
jge 0x1001e6e2
mov dword [ebp - 0x138], 1
jmp 0x1001e6e9
and dword [ebp - 0x138], 0
cmp dword [ebp - 0x138], 0
jne 0x1001e6fe
mov dword [ebp - 0x2d8], 1
jmp 0x1001e705
and dword [ebp - 0x2d8], 0
mov eax, dword [ebp - 0x2d8]
mov dword [ebp - 0x140], eax
cmp dword [ebp - 0x140], 0
je 0x1001e72b
xor eax, eax
inc eax
je 0x1001e72b
mov dword [ebp - 0x2e0], 1
jmp 0x1001e732
and dword [ebp - 0x2e0], 0
cmp dword [ebp - 0x2e0], 0xffffffff
jl 0x1001e747
mov dword [ebp - 0x148], 1
jmp 0x1001e74e
and dword [ebp - 0x148], 0
mov eax, dword [ebp - 0x48]
cmp dword [ebp - 0x148], eax
jg 0x1001e765
mov dword [ebp - 0x2e8], 1
jmp 0x1001e76c
and dword [ebp - 0x2e8], 0
mov eax, dword [ebp - 0x2e8]
mov dword [ebp - 0x150], eax
mov eax, dword [ebp - 0x150]
mov dword [ebp - 0x450], eax
mov eax, 0xb63
add eax, 0x965e
mov dword [ebp - 0x2f0], eax
mov eax, dword [ebp - 0x2f0]
mov dword [ebp - 0x5a8], eax
mov eax, dword [ebp - 0x48]
mov dword [ebp - 0x530], eax
xor eax, eax
inc eax
sub eax, dword [ebp - 0x48]
cmp dword [ebp - 0x48], eax
je 0x1001e7c0
mov dword [ebp - 0x158], 1
jmp 0x1001e7c7
and dword [ebp - 0x158], 0
imul eax, dword [ebp - 0x158], 0xf1e2
cmp eax, 0x91f199e1
jae 0x1001e7e4
mov dword [ebp - 0x304], 1
jmp 0x1001e7eb
and dword [ebp - 0x304], 0
mov eax, dword [ebp - 0x48]
imul eax, dword [ebp - 0x304]
mov dword [ebp - 0x4c8], eax
mov dword [ebp - 0x1c], 0x3099cfe0
mov dword [ebp - 0x114], 0x7c422d5f
mov dword [ebp - 0x448], 0x9305
mov dword [ebp - 0xd8], 0
jmp 0x1001e82f
mov eax, dword [ebp - 0xd8]
inc eax
mov dword [ebp - 0xd8], eax
cmp dword [ebp - 0xd8], 3
jge 0x1001e84b
mov eax, dword [ebp - 0xd8]
mov dword [ebp + eax*4 - 0x124], 0xf07b4bc6
jmp 0x1001e822
mov eax, dword [ebp - 0x1c]
cmp eax, dword [ebp - 0x1c]
jl 0x1001e85f
mov dword [ebp - 0x160], 1
jmp 0x1001e866
and dword [ebp - 0x160], 0
mov eax, dword [ebp - 0x160]
sub eax, dword [ebp - 0x1c]
je 0x1001e883
cmp dword [ebp - 0x1c], 0
je 0x1001e883
mov dword [ebp - 0x30c], 1
jmp 0x1001e88a
and dword [ebp - 0x30c], 0
mov eax, dword [ebp - 0x30c]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x1c], 0
jmp 0x1001e8a3
mov eax, dword [ebp - 0x1c]
inc eax
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 2
jg 0x1001eb14
mov dword [ebp - 0xfc], 1
mov dword [ebp - 0x4b8], 0xcaf1e2cd
mov dword [ebp - 0x44], 0
jmp 0x1001e8d1
mov eax, dword [ebp - 0x44]
inc eax
mov dword [ebp - 0x44], eax
cmp dword [ebp - 0x44], 2
jge 0x1001e8e7
mov eax, dword [ebp - 0x44]
mov dword [ebp + eax*4 - 0x574], 0x520f3038
jmp 0x1001e8ca
mov dword [ebp - 0x44], 0
jmp 0x1001e8f7
mov eax, dword [ebp - 0x44]
inc eax
mov dword [ebp - 0x44], eax
cmp dword [ebp - 0x44], 1
jge 0x1001e90d
mov eax, dword [ebp - 0x44]
mov dword [ebp + eax*4 - 0x3fc], 0xdefcecb2
jmp 0x1001e8f0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x124]
mov dword [ebp - 0x538], eax
mov dword [ebp - 0xfc], 0xd06721f7
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x124], 0
jne 0x1001e94c
cmp dword [ebp - 0xfc], 0
jne 0x1001e94c
and dword [ebp - 0x168], 0
jmp 0x1001e956
mov dword [ebp - 0x168], 1
mov eax, dword [ebp - 0x114]
cmp dword [ebp - 0x168], eax
jne 0x1001e970
mov dword [ebp - 0x314], 1
jmp 0x1001e977
and dword [ebp - 0x314], 0
cmp dword [ebp - 0x314], 0x2522
jl 0x1001e98f
mov dword [ebp - 0x4d0], 1
jmp 0x1001e996
and dword [ebp - 0x4d0], 0
mov eax, dword [ebp - 0x114]
mov dword [ebp - 0x540], eax
mov eax, dword [ebp - 0x1c]
cmp dword [ebp + eax*4 - 0x124], 0x9281
je 0x1001e9be
mov dword [ebp - 0x170], 1
jmp 0x1001e9c5
and dword [ebp - 0x170], 0
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp + eax*4 - 0x124]
cmp dword [ebp - 0x170], eax
jle 0x1001e9e3
mov dword [ebp - 0x31c], 1
jmp 0x1001e9ea
and dword [ebp - 0x31c], 0
mov eax, dword [ebp - 0x1c]
cmp dword [ebp - 0x31c], eax
jle 0x1001ea01
mov dword [ebp - 0x178], 1
jmp 0x1001ea08
and dword [ebp - 0x178], 0
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp + eax*4 - 0x124]
add eax, dword [ebp - 0x178]
cmp eax, dword [ebp - 0x114]
jge 0x1001ea2c
mov dword [ebp - 0x324], 1
jmp 0x1001ea33
and dword [ebp - 0x324], 0
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp + eax*4 - 0x124]
cmp dword [ebp - 0x324], eax
jg 0x1001ea51
mov dword [ebp - 0x3f4], 1
jmp 0x1001ea58
and dword [ebp - 0x3f4], 0
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp + eax*4 - 0x124]
mov dword [ebp - 0x548], eax
mov eax, dword [ebp - 0x448]
mov dword [ebp - 0x180], eax
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x180]
mov dword [ebp + eax - 0x574], ecx
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp + eax*4 - 0x124]
cmp dword [ebp - 0x180], eax
je 0x1001eaa5
mov dword [ebp - 0x32c], 1
jmp 0x1001eaac
and dword [ebp - 0x32c], 0
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp + eax*4 - 0x124]
cmp dword [ebp - 0x32c], eax
jge 0x1001eaca
mov dword [ebp - 0x188], 1
jmp 0x1001ead1
and dword [ebp - 0x188], 0
mov eax, dword [ebp - 0x188]
mov dword [ebp - 0x4b8], eax
cmp dword [ebp - 0xfc], 0x74006310
jle 0x1001eaf5
mov dword [ebp - 0x334], 1
jmp 0x1001eafc
and dword [ebp - 0x334], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x334]
mov dword [ebp + eax - 0x3fc], ecx
jmp 0x1001e89c
mov dword [ebp - 0x190], 0x7b52
mov dword [ebp - 0x46c], str.agjahuzj_tajyufs_twyazas_iamwelmom_jemr_oudgkcczd_whgcmjuyr_ahl_crobonlp_dixkyn_kqbtdq_xrvgxjehb
cmp dword [ebp - 0x190], 0x7d5a
jle 0x1001ebab
and dword [ebp - 0x9c], 0
jmp 0x1001eb4a
mov eax, dword [ebp - 0x9c]
inc eax
mov dword [ebp - 0x9c], eax
cmp dword [ebp - 0x9c], 0x6a22
jge 0x1001ebab
and dword [ebp - 0xc8], 0
jmp 0x1001eb6c
mov eax, dword [ebp - 0xc8]
inc eax
mov dword [ebp - 0xc8], eax
cmp dword [ebp - 0xc8], 0x717f
jge 0x1001eba9
mov eax, dword [ebp - 0x9c]
sub eax, dword [ebp - 0xc8]
cdq
mov dword [ebp - 0x468], eax
mov dword [ebp - 0x464], edx
push dword [ebp - 0x464]
push dword [ebp - 0x468]
mov ecx, 0x1007ab78
call fcn.10001bfe
jmp 0x1001eb5f
jmp 0x1001eb3d
mov dword [ebp - 4], 2
cmp dword [ebp - 0x190], 0x7828
jge 0x1001ebce
mov edx, dword [ebp - 0x46c]
mov ecx, 0x1007ab78
call fcn.100039fb
jmp 0x1001ebea
or dword [ebp - 4], 0xffffffff
jmp 0x1001ebf4
mov dword [ebp - 0x2c], 0xffffffff
mov dword [ebp - 0x58], 0xffffffff
mov dword [ebp - 0x80], 0xffffffff
mov dword [ebp - 0x10c], 0x9124c6e1
mov dword [ebp - 0x40c], 0
mov dword [ebp - 0x1e8], 1
cmp dword [ebp - 0x2c], 1
jle 0x1001ec39
mov dword [ebp - 0x33c], 1
jmp 0x1001ec40
and dword [ebp - 0x33c], 0
mov eax, dword [ebp - 0x2c]
cmp dword [ebp - 0x33c], eax
jl 0x1001ec57
mov dword [ebp - 0x198], 1
jmp 0x1001ec5e
and dword [ebp - 0x198], 0
cmp dword [ebp - 0x198], 0x9fa553fc
jb 0x1001ec77
xor eax, eax
jne 0x1001ec77
and dword [ebp - 0x344], 0
jmp 0x1001ec81
mov dword [ebp - 0x344], 1
mov eax, dword [ebp - 0x344]
neg eax
push 0xfffffffffffffffd
pop ecx
sub ecx, eax
cmp ecx, dword [ebp - 0x58]
je 0x1001ec9f
mov dword [ebp - 0x1a0], 1
jmp 0x1001eca6
and dword [ebp - 0x1a0], 0
mov eax, dword [ebp - 0x2c]
cmp dword [ebp - 0x1a0], eax
jge 0x1001ecbd
mov dword [ebp - 0x34c], 1
jmp 0x1001ecc4
and dword [ebp - 0x34c], 0
mov eax, dword [ebp - 0x2c]
cmp dword [ebp - 0x34c], eax
jge 0x1001ecdb
mov dword [ebp - 0x1a8], 1
jmp 0x1001ece2
and dword [ebp - 0x1a8], 0
mov eax, dword [ebp - 0x58]
cmp dword [ebp - 0x1a8], eax
je 0x1001ecf9
mov dword [ebp - 0x354], 1
jmp 0x1001ed00
and dword [ebp - 0x354], 0
mov eax, dword [ebp - 0x2c]
cmp dword [ebp - 0x354], eax
jl 0x1001ed17
mov dword [ebp - 0x1b0], 1
jmp 0x1001ed1e
and dword [ebp - 0x1b0], 0
mov eax, dword [ebp - 0x2c]
cmp eax, dword [ebp - 0x1b0]
je 0x1001ed35
mov dword [ebp - 0x35c], 1
jmp 0x1001ed3c
and dword [ebp - 0x35c], 0
mov eax, dword [ebp - 0x58]
cmp dword [ebp - 0x35c], eax
jne 0x1001ed53
mov dword [ebp - 0x404], 1
jmp 0x1001ed5a
and dword [ebp - 0x404], 0
mov eax, dword [ebp - 0x58]
mov dword [ebp - 0x550], eax
cmp dword [ebp - 0x2c], 0x1fb9
je 0x1001ed78
mov dword [ebp - 0x1b8], 1
jmp 0x1001ed7f
and dword [ebp - 0x1b8], 0
mov eax, dword [ebp - 0x1b8]
sub eax, dword [ebp - 0x2c]
cmp dword [ebp - 0x2c], eax
jg 0x1001ed99
mov dword [ebp - 0x364], 1
jmp 0x1001eda0
and dword [ebp - 0x364], 0
imul eax, dword [ebp - 0x364], 0x4b26
cmp eax, dword [ebp - 0x58]
jne 0x1001edbb
mov dword [ebp - 0x1c0], 1
jmp 0x1001edc2
and dword [ebp - 0x1c0], 0
cmp dword [ebp - 0x1c0], 0
jge 0x1001edf5
mov byte [ebp - 0x5f], 0
movzx eax, byte [ebp - 0x5f]
test eax, eax
je 0x1001edf0
push 0
push 0x17a8
push 0
push 0x1cc5
push 0x25a6
call dword [sym.imp.GDI32.dll_ExtCreatePen]
jmp 0x1001f07a
mov dword [ebp - 0x68], 0xffff
mov dword [ebp - 0x4b0], 0x2ee8b720
mov dword [ebp - 0x40], 0
jmp 0x1001ee16
mov eax, dword [ebp - 0x40]
inc eax
mov dword [ebp - 0x40], eax
cmp dword [ebp - 0x40], 2
jge 0x1001ee2c
mov eax, dword [ebp - 0x40]
mov dword [ebp + eax*4 - 0x4e4], 9
jmp 0x1001ee0f
mov dword [ebp - 0x40], 0
jmp 0x1001ee3c
mov eax, dword [ebp - 0x40]
inc eax
mov dword [ebp - 0x40], eax
cmp dword [ebp - 0x40], 3
jge 0x1001ee52
mov eax, dword [ebp - 0x40]
mov dword [ebp + eax*4 - 0x5e0], 0xb8a8
jmp 0x1001ee35
mov byte [ebp - 0x5d], 0
movzx eax, byte [ebp - 0x5d]
test eax, eax
je 0x1001ee68
push 0
push 0
call dword [sym.imp.KERNEL32.dll_ConnectNamedPipe]
cmp dword [ebp - 0x68], 0
je 0x1001ee86
cmp dword [ebp - 0x68], 0
je 0x1001ee86
cmp dword [ebp - 0x2c], 0
je 0x1001ee86
mov dword [ebp - 0x36c], 1
jmp 0x1001ee8d
and dword [ebp - 0x36c], 0
mov eax, dword [ebp - 0x2c]
sub eax, dword [ebp - 0x58]
mov dword [ebp - 0x80], eax
mov eax, dword [ebp - 0x80]
cmp eax, dword [ebp - 0x36c]
je 0x1001eead
mov dword [ebp - 0x1c8], 1
jmp 0x1001eeb4
and dword [ebp - 0x1c8], 0
mov eax, dword [ebp - 0x1c8]
sub eax, dword [ebp - 0x58]
add eax, dword [ebp - 0x58]
je 0x1001eec9
cmp dword [ebp - 0x10c], 0
imul eax, dword [ebp - 0x4b0], 0x2bb1
sub eax, 0x4a5bf585
je 0x1001f061
mov dword [ebp - 0x104], 0x9c94
mov eax, dword [ebp - 0x10c]
mov dword [ebp - 0x558], eax
mov eax, dword [ebp - 0x68]
mov dword [ebp - 0x560], eax
mov eax, dword [ebp - 0x104]
mov dword [ebp - 0x568], eax
mov eax, dword [ebp - 0x68]
mov dword [ebp - 0x588], eax
mov eax, dword [ebp - 0x10c]
cmp eax, dword [ebp - 0x68]
jge 0x1001ef29
mov dword [ebp - 0x374], 1
jmp 0x1001ef30
and dword [ebp - 0x374], 0
cmp dword [ebp - 0x374], 0xe821
jle 0x1001ef42
cmp dword [ebp - 0x80], 0
jne 0x1001ef51
cmp dword [ebp - 0x80], 0
jne 0x1001ef51
and dword [ebp - 0x1d0], 0
jmp 0x1001ef5b
mov dword [ebp - 0x1d0], 1
mov eax, dword [ebp - 0x68]
add eax, dword [ebp - 0x1d0]
jne 0x1001ef74
or eax, 0xffffffff
jne 0x1001ef74
and dword [ebp - 0x37c], 0
jmp 0x1001ef7e
mov dword [ebp - 0x37c], 1
mov eax, dword [ebp - 0x37c]
add eax, 0x8a13
cmp eax, 0xb7df
jl 0x1001ef9c
mov dword [ebp - 0x1d8], 1
jmp 0x1001efa3
and dword [ebp - 0x1d8], 0
mov eax, dword [ebp - 0x40c]
cmp dword [ebp - 0x1d8], eax
jg 0x1001efbd
mov dword [ebp - 0x384], 1
jmp 0x1001efc4
and dword [ebp - 0x384], 0
cmp dword [ebp - 0x384], 0xd5e8e059
ja 0x1001efdc
mov dword [ebp - 0x1e0], 1
jmp 0x1001efe3
and dword [ebp - 0x1e0], 0
mov eax, dword [ebp - 0x104]
cmp dword [ebp - 0x1e0], eax
jle 0x1001effd
mov dword [ebp - 0x478], 1
jmp 0x1001f004
and dword [ebp - 0x478], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x4e4]
mov dword [ebp - 0x590], eax
mov eax, dword [ebp - 0x104]
mov dword [ebp - 0x598], eax
push 4
pop eax
shl eax, 0
push 4
pop ecx
shl ecx, 0
imul ecx, dword [ebp + ecx - 0x5e0], 0xf60
cmp ecx, dword [ebp + eax - 0x4e4]
je 0x1001f04f
mov dword [ebp - 0x38c], 1
jmp 0x1001f056
and dword [ebp - 0x38c], 0
mov eax, dword [ebp - 0x38c]
mov dword [ebp - 0x80], eax
jmp 0x1001f07a
mov byte [ebp - 0x59], 0
movzx eax, byte [ebp - 0x59]
test eax, eax
je 0x1001f07a
push 0
push 0x1463
call dword [sym.imp.USER32.dll_BeginPaint]
mov eax, dword [ebp - 0x1e8]
dec eax
mov dword [ebp - 0x1e8], eax
mov dword [ebp - 0x34], 0xd6c05baf
mov dword [ebp - 0x34], 0xfffffffd
jmp 0x1001f09e
mov eax, dword [ebp - 0x34]
inc eax
mov dword [ebp - 0x34], eax
cmp dword [ebp - 0x34], 0x11
jl 0x1001f386
mov dword [ebp - 0x20], 0xd14cd495
mov dword [ebp - 0x1f8], 1
mov dword [ebp - 0x41c], 0xdb6377f0
mov eax, dword [ebp - 0x34]
mov dword [ebp - 0x5a0], eax
mov eax, dword [ebp - 0x34]
mov dword [ebp - 0x518], eax
mov eax, 0xf90e
sub eax, dword [ebp - 0x34]
xor ecx, ecx
sub ecx, eax
sub ecx, dword [ebp - 0x20]
cmp ecx, 4
jg 0x1001f0f5
mov dword [ebp - 0x394], 1
jmp 0x1001f0fc
and dword [ebp - 0x394], 0
mov eax, dword [ebp - 0x34]
cmp eax, dword [ebp - 0x394]
jne 0x1001f113
mov dword [ebp - 0x1f0], 1
jmp 0x1001f11a
and dword [ebp - 0x1f0], 0
mov eax, dword [ebp - 0x20]
cmp dword [ebp - 0x1f0], eax
jg 0x1001f1da
mov dword [ebp - 0x414], 0x20dd93ba
mov dword [ebp - 0xa4], 0
jmp 0x1001f14c
mov eax, dword [ebp - 0xa4]
inc eax
mov dword [ebp - 0xa4], eax
cmp dword [ebp - 0xa4], 2
jge 0x1001f168
mov eax, dword [ebp - 0xa4]
mov dword [ebp + eax*4 - 0x580], 0xad5befa1
jmp 0x1001f13f
mov dword [ebp - 0x20], 1
jmp 0x1001f178
mov eax, dword [ebp - 0x20]
dec eax
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 0
jl 0x1001f1d5
mov byte [ebp - 0x5e], 0
movzx eax, byte [ebp - 0x5e]
test eax, eax
je 0x1001f19c
push 0xf8a
push 0xdcf
push 0
call dword [sym.imp.USER32.dll_CheckMenuItem]
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp + eax*4 - 0x580]
mov dword [ebp - 0x5b0], eax
mov eax, dword [ebp - 0x20]
cmp eax, dword [ebp - 0x20]
je 0x1001f1c0
mov dword [ebp - 0x39c], 1
jmp 0x1001f1c7
and dword [ebp - 0x39c], 0
mov eax, dword [ebp - 0x39c]
mov dword [ebp - 0x414], eax
jmp 0x1001f171
jmp 0x1001f381
mov dword [ebp - 0x370], 0
mov dword [ebp - 0x3c4], 0
mov dword [ebp - 0x21c], 0xf6679856
mov eax, dword [ebp - 0x20]
cmp eax, dword [ebp - 0x20]
jl 0x1001f20c
mov dword [ebp - 0x200], 1
jmp 0x1001f213
and dword [ebp - 0x200], 0
cmp dword [ebp - 0x1f8], 0
jne 0x1001f22e
cmp dword [ebp - 0x370], 0
jne 0x1001f22e
and dword [ebp - 0x3a4], 0
jmp 0x1001f238
mov dword [ebp - 0x3a4], 1
mov eax, dword [ebp - 0x1f8]
mov ecx, dword [ebp - 0x3a4]
lea eax, [ecx + eax - 0x9d5a]
cmp eax, dword [ebp - 0x34]
je 0x1001f25c
mov dword [ebp - 0x4cc], 1
jmp 0x1001f263
and dword [ebp - 0x4cc], 0
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x5b8], eax
push 7
pop eax
cmp eax, 0x9038991f
jb 0x1001f282
mov dword [ebp - 0x3ac], 1
jmp 0x1001f289
and dword [ebp - 0x3ac], 0
mov eax, dword [ebp - 0x200]
cmp eax, dword [ebp - 0x3ac]
jge 0x1001f2a6
cmp dword [ebp - 0x20], 0
jne 0x1001f2a6
and dword [ebp - 0x208], 0
jmp 0x1001f2b0
mov dword [ebp - 0x208], 1
imul eax, dword [ebp - 0x208], 0xbebb
test eax, eax
jne 0x1001f2ce
push 9
pop eax
test eax, eax
jne 0x1001f2ce
and dword [ebp - 0x3b4], 0
jmp 0x1001f2d8
mov dword [ebp - 0x3b4], 1
mov eax, dword [ebp - 0x20]
cmp dword [ebp - 0x3b4], eax
jne 0x1001f2ef
mov dword [ebp - 0x210], 1
jmp 0x1001f2f6
and dword [ebp - 0x210], 0
mov eax, dword [ebp - 0x210]
add eax, 0x68d2
cmp eax, 0xfffffffd
jg 0x1001f312
mov dword [ebp - 0x3bc], 1
jmp 0x1001f319
and dword [ebp - 0x3bc], 0
mov eax, dword [ebp - 0x34]
imul eax, dword [ebp - 0x3bc]
mov dword [ebp - 0x3c4], eax
mov eax, dword [ebp - 0x3c4]
mov dword [ebp - 0x21c], eax
mov eax, dword [ebp - 0x21c]
cmp eax, dword [ebp - 0x370]
jne 0x1001f34f
mov dword [ebp - 0x224], 1
jmp 0x1001f356
and dword [ebp - 0x224], 0
cmp dword [ebp - 0x224], 0x725dc8ff
jle 0x1001f36e
mov dword [ebp - 0x308], 1
jmp 0x1001f375
and dword [ebp - 0x308], 0
mov eax, dword [ebp - 0x308]
mov dword [ebp - 0x41c], eax
jmp 0x1001f097
movzx eax, byte [0x110921eb]
test eax, eax
je 0x1001f3a4
mov esi, 0x1007a218
mov edi, dword [ebp + 8]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
mov eax, dword [ebp + 8]
jmp 0x10020e9a
mov dword [ebp - 0x5c0], 0x1007a218
push 1
lea ecx, [ebp - 0x4dc]
call fcn.1000efc4
mov dword [ebp - 4], 4
mov dword [ebp - 0x74], 0xecf54c3c
mov dword [ebp - 0x484], 0
mov dword [ebp - 0xcc], 0
jmp 0x1001f3ec
mov eax, dword [ebp - 0xcc]
inc eax
mov dword [ebp - 0xcc], eax
cmp dword [ebp - 0xcc], 1
jge 0x1001f40e
push dword [ebp - 0xcc]
lea ecx, [ebp - 0x4dc]
call fcn.1000f063
mov dword [eax], 0xda11525
jmp 0x1001f3df
mov dword [ebp - 0x74], 0
jmp 0x1001f41e
mov eax, dword [ebp - 0x74]
inc eax
mov dword [ebp - 0x74], eax
cmp dword [ebp - 0x74], 0
jg 0x1001f539
mov dword [ebp - 0x38], 0xc4530722
mov dword [ebp - 0x38], 0
jmp 0x1001f43f
mov eax, dword [ebp - 0x38]
dec eax
mov dword [ebp - 0x38], eax
cmp dword [ebp - 0x38], 0
jl 0x1001f508
push 1
lea ecx, [ebp - 0x4c4]
call fcn.1000efc4
mov byte [ebp - 4], 5
mov dword [ebp - 0xac], 0
jmp 0x1001f473
mov eax, dword [ebp - 0xac]
inc eax
mov dword [ebp - 0xac], eax
cmp dword [ebp - 0xac], 1
jge 0x1001f495
push dword [ebp - 0xac]
lea ecx, [ebp - 0x4c4]
call fcn.1000f063
mov dword [eax], 0xccddd1d8
jmp 0x1001f466
push 0
lea ecx, [ebp - 0x4c4]
call fcn.1000f063
and dword [eax], 0
jmp 0x1001f4cb
push 0
lea ecx, [ebp - 0x4c4]
call fcn.1000f063
mov dword [ebp - 0x22c], eax
mov eax, dword [ebp - 0x22c]
mov eax, dword [eax]
inc eax
mov ecx, dword [ebp - 0x22c]
mov dword [ecx], eax
push 0
lea ecx, [ebp - 0x4c4]
call fcn.1000f063
cmp dword [eax], 0
jg 0x1001f4f4
push dword [ebp - 0x74]
lea ecx, [ebp - 0x4dc]
call fcn.1000f063
cmp dword [eax], 0
je 0x1001f4f2
jmp 0x1001f4f4
jmp 0x1001f4a7
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x4c4]
call fcn.1000f047
jmp 0x1001f438
mov dword [ebp - 0x38], 0
jmp 0x1001f518
mov eax, dword [ebp - 0x38]
inc eax
mov dword [ebp - 0x38], eax
cmp dword [ebp - 0x38], 1
jge 0x1001f534
push dword [ebp - 0x38]
lea ecx, [ebp - 0x4dc]
call fcn.1000f063
mov dword [eax], 0x16a205b2
jmp 0x1001f511
jmp 0x1001f417
mov dword [ebp - 0x484], 0xafbbd0a7
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x4dc]
call fcn.1000f047
mov dword [ebp - 0x5d0], 0x1007a21c
mov dword [ebp - 0x3a8], 0x372d
mov dword [ebp - 0x424], str.wzfkcftht_jzcryf_wijuxluq_krxjebi_tyrwagnb_imqcg_zcesgbs_qfg_zdczd_ijytv_txv_qplljhzsm_hqlfnzzu
cmp dword [ebp - 0x3a8], 0x3970
jle 0x1001f62b
and dword [ebp - 0xd4], 0
jmp 0x1001f596
mov eax, dword [ebp - 0xd4]
inc eax
mov dword [ebp - 0xd4], eax
cmp dword [ebp - 0xd4], 0x6503
jge 0x1001f62b
and dword [ebp - 0xb4], 0
jmp 0x1001f5bc
mov eax, dword [ebp - 0xb4]
inc eax
mov dword [ebp - 0xb4], eax
cmp dword [ebp - 0xb4], 0x5f15
jge 0x1001f626
and dword [ebp - 0xdc], 0
jmp 0x1001f5de
mov eax, dword [ebp - 0xdc]
inc eax
mov dword [ebp - 0xdc], eax
cmp dword [ebp - 0xdc], 0x155d
jge 0x1001f624
mov eax, dword [ebp - 0xd4]
cdq
idiv dword [ebp - 0xb4]
and edx, dword [ebp - 0xdc]
mov eax, edx
cdq
mov dword [ebp - 0x474], eax
mov dword [ebp - 0x470], edx
push dword [ebp - 0x470]
push dword [ebp - 0x474]
mov ecx, 0x1007ab78
call fcn.10001bfe
jmp 0x1001f5d1
jmp 0x1001f5af
jmp 0x1001f589
mov dword [ebp - 4], 6
cmp dword [ebp - 0x3a8], 0x33c0
jge 0x1001f64e
mov edx, dword [ebp - 0x424]
mov ecx, 0x1007ab78
call fcn.100039fb
jmp 0x1001f66a
or dword [ebp - 4], 0xffffffff
jmp 0x1001f674
mov dword [ebp - 0x50], 0xffffffff
mov dword [ebp - 0x23c], 0xfffffff6
mov dword [ebp - 0x6c], 0x457a23a3
mov dword [ebp - 0x25c], 0x9e4a0435
mov dword [ebp - 0xbc], 0
jmp 0x1001f6af
mov eax, dword [ebp - 0xbc]
inc eax
mov dword [ebp - 0xbc], eax
cmp dword [ebp - 0xbc], 1
jge 0x1001f6cb
mov eax, dword [ebp - 0xbc]
mov dword [ebp + eax*4 - 0x584], 0
jmp 0x1001f6a2
mov dword [ebp - 0x50], 0
jmp 0x1001f6db
mov eax, dword [ebp - 0x50]
dec eax
mov dword [ebp - 0x50], eax
cmp dword [ebp - 0x50], 0xfffffff2
jne 0x1001fa9f
mov dword [ebp - 0xf4], 1
mov dword [ebp - 0x4a0], 0xfffffff6
mov dword [ebp - 0x3d0], 0xf213ed4
mov dword [ebp - 0x3c], 0
jmp 0x1001f713
mov eax, dword [ebp - 0x3c]
inc eax
mov dword [ebp - 0x3c], eax
cmp dword [ebp - 0x3c], 2
jge 0x1001f729
mov eax, dword [ebp - 0x3c]
mov dword [ebp + eax*4 - 0x3e8], 0x6255d580
jmp 0x1001f70c
mov dword [ebp - 0x3c], 0
jmp 0x1001f739
mov eax, dword [ebp - 0x3c]
inc eax
mov dword [ebp - 0x3c], eax
cmp dword [ebp - 0x3c], 3
jge 0x1001f74f
mov eax, dword [ebp - 0x3c]
mov dword [ebp + eax*4 - 0x508], 0x189d
jmp 0x1001f732
mov dword [ebp - 0x3b0], 0x2789
mov dword [ebp - 0x42c], str.vfdzpcmy_zjtmysuat_zzx_avfoqnmt_udia_sqy_qazey_uyxwgt
cmp dword [ebp - 0x3b0], 0x28dc
jle 0x1001f7e6
and dword [ebp - 0xe4], 0
jmp 0x1001f785
mov eax, dword [ebp - 0xe4]
inc eax
mov dword [ebp - 0xe4], eax
cmp dword [ebp - 0xe4], 0x3e5e
jge 0x1001f7e6
and dword [ebp - 0xc4], 0
jmp 0x1001f7a7
mov eax, dword [ebp - 0xc4]
inc eax
mov dword [ebp - 0xc4], eax
cmp dword [ebp - 0xc4], 0x7c9a
jge 0x1001f7e4
mov eax, dword [ebp - 0xe4]
or eax, dword [ebp - 0xc4]
cdq
mov dword [ebp - 0x480], eax
mov dword [ebp - 0x47c], edx
push dword [ebp - 0x47c]
push dword [ebp - 0x480]
mov ecx, 0x1007ab78
call fcn.10001bfe
jmp 0x1001f79a
jmp 0x1001f778
mov eax, dword [ebp - 0x50]
add eax, 0x1e707165
jne 0x1001f802
xor eax, eax
jne 0x1001f802
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x3e8], 0
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x508], 0xffff
jne 0x1001f821
mov dword [ebp - 0x234], 1
jmp 0x1001f828
and dword [ebp - 0x234], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x3e8]
cmp dword [ebp - 0x234], eax
je 0x1001f849
mov dword [ebp - 0x310], 1
jmp 0x1001f850
and dword [ebp - 0x310], 0
mov eax, dword [ebp - 0x310]
mov dword [ebp - 0x23c], eax
mov eax, dword [ebp - 0x23c]
mov dword [ebp - 0x524], eax
mov eax, dword [ebp - 0x50]
cmp eax, dword [ebp - 0x4a0]
jg 0x1001f87f
mov dword [ebp - 0x378], 1
jmp 0x1001f886
and dword [ebp - 0x378], 0
cmp dword [ebp - 0x378], 0xac3e
jle 0x1001f89e
mov dword [ebp - 0x244], 1
jmp 0x1001f8a5
and dword [ebp - 0x244], 0
mov eax, dword [ebp - 0xf4]
sub eax, dword [ebp - 0x244]
je 0x1001f8cf
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x3e8], 0
je 0x1001f8cf
mov dword [ebp - 0x318], 1
jmp 0x1001f8d6
and dword [ebp - 0x318], 0
cmp dword [ebp - 0x318], 0
jne 0x1001f8eb
mov dword [ebp - 0x24c], 1
jmp 0x1001f8f2
and dword [ebp - 0x24c], 0
mov eax, dword [ebp - 0x24c]
mov dword [ebp - 0x3d0], eax
mov eax, dword [ebp - 0x3d0]
mov dword [ebp - 0x6c], eax
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x6c]
cmp ecx, dword [ebp + eax - 0x508]
jne 0x1001f925
mov dword [ebp - 0x254], 1
jmp 0x1001f92c
and dword [ebp - 0x254], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x3e8]
cmp dword [ebp - 0x254], eax
jge 0x1001f94d
mov dword [ebp - 0x320], 1
jmp 0x1001f954
and dword [ebp - 0x320], 0
mov eax, dword [ebp - 0x320]
mov dword [ebp - 0x25c], eax
mov eax, dword [ebp - 0x25c]
mov dword [ebp - 0x5b4], eax
mov eax, dword [ebp - 0x50]
mov dword [ebp - 0x52c], eax
mov eax, dword [ebp - 0x50]
mov dword [ebp - 0x58c], eax
mov eax, 0x9a32
test eax, eax
jne 0x1001f995
xor eax, eax
inc eax
jne 0x1001f995
and dword [ebp - 0x380], 0
jmp 0x1001f99f
mov dword [ebp - 0x380], 1
cmp dword [ebp - 0x380], 0x63e31551
jg 0x1001f9c0
mov eax, 0x8deb256c
test eax, eax
je 0x1001f9c0
mov dword [ebp - 0x264], 1
jmp 0x1001f9c7
and dword [ebp - 0x264], 0
mov eax, dword [ebp - 0x50]
add eax, dword [ebp - 0x264]
cmp eax, dword [ebp - 0xf4]
jle 0x1001f9e4
mov dword [ebp - 0x328], 1
jmp 0x1001f9eb
and dword [ebp - 0x328], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x508]
cmp dword [ebp - 0x328], eax
jne 0x1001fa0c
mov dword [ebp - 0x26c], 1
jmp 0x1001fa13
and dword [ebp - 0x26c], 0
mov eax, dword [ebp - 0x26c]
mov dword [ebp - 0xf4], eax
mov dword [ebp - 4], 8
cmp dword [ebp - 0x3b0], 0x26fd
jge 0x1001fa42
mov edx, dword [ebp - 0x42c]
mov ecx, 0x1007ab78
call fcn.100039fb
jmp 0x1001fa5e
or dword [ebp - 4], 0xffffffff
jmp 0x1001fa68
mov dword [ebp - 0x6c], 0xb
jmp 0x1001fa78
mov eax, dword [ebp - 0x6c]
dec eax
mov dword [ebp - 0x6c], eax
cmp dword [ebp - 0x6c], 0xffffffe3
jne 0x1001fa9a
mov byte [ebp - 0x5a], 0
movzx eax, byte [ebp - 0x5a]
test eax, eax
je 0x1001fa98
push 0
push 0
push 0
push 0
call dword [sym.imp.ADVAPI32.dll_SetSecurityDescriptorDacl]
jmp 0x1001fa71
jmp 0x1001f6d4
mov byte [0x110921eb], 1
mov dword [ebp - 0x28], 0
mov dword [ebp - 0xf8], 0xfffffff6
mov dword [ebp - 0x7c], 2
mov dword [ebp - 0x30], 0x1c097bc8
mov dword [ebp - 0x3c8], 0
mov dword [ebp - 0x4ac], 0x9f2ea6da
mov dword [ebp - 0xec], 0
jmp 0x1001faf2
mov eax, dword [ebp - 0xec]
inc eax
mov dword [ebp - 0xec], eax
cmp dword [ebp - 0xec], 1
jge 0x1001fb0e
mov eax, dword [ebp - 0xec]
mov dword [ebp + eax*4 - 0x444], 0xfab0
jmp 0x1001fae5
mov eax, dword [ebp - 0x28]
neg eax
jne 0x1001fbcc
mov eax, dword [ebp - 0x28]
mov dword [ebp - 0x534], eax
mov eax, dword [ebp - 0x28]
add eax, 0xdf5e
cmp eax, dword [ebp - 0x28]
jg 0x1001fb3b
mov dword [ebp - 0x274], 1
jmp 0x1001fb42
and dword [ebp - 0x274], 0
mov eax, dword [ebp - 0x274]
mov dword [ebp - 0xf8], eax
mov eax, dword [ebp - 0xf8]
cmp eax, dword [ebp - 0x28]
jge 0x1001fb68
cmp dword [ebp - 0x28], 0
jne 0x1001fb68
and dword [ebp - 0x330], 0
jmp 0x1001fb72
mov dword [ebp - 0x330], 1
mov eax, dword [ebp - 0x330]
mov dword [ebp - 0x7c], eax
mov eax, dword [ebp - 0x7c]
imul eax, dword [ebp - 0x28]
cmp dword [ebp - 0x28], eax
jl 0x1001fb93
mov dword [ebp - 0x27c], 1
jmp 0x1001fb9a
and dword [ebp - 0x27c], 0
mov eax, dword [ebp - 0x28]
cmp dword [ebp - 0x27c], eax
jg 0x1001fbb1
mov dword [ebp - 0x388], 1
jmp 0x1001fbb8
and dword [ebp - 0x388], 0
mov eax, dword [ebp - 0x28]
cmp eax, dword [ebp - 0x388]
jne 0x1001fbcc
and dword [ebp - 0x284], 0
jmp 0x1001fbd6
mov dword [ebp - 0x284], 1
cmp dword [ebp - 0x284], 0xb09f5954
jb 0x1001fbee
mov dword [ebp - 0x338], 1
jmp 0x1001fbf5
and dword [ebp - 0x338], 0
mov eax, dword [ebp - 0x338]
mov dword [ebp - 0x30], eax
mov eax, dword [ebp - 0x30]
mov dword [ebp - 0x3c8], eax
cmp dword [ebp - 0x7c], 0xe755
jle 0x1001fc1c
mov dword [ebp - 0x28c], 1
jmp 0x1001fc23
and dword [ebp - 0x28c], 0
cmp dword [ebp - 0x28c], 0x96e86ff1
jb 0x1001ff5a
mov dword [ebp - 0x24], 0x4939e63a
cmp dword [ebp - 0x24], 0
jne 0x1001fd4a
cmp dword [ebp - 0x24], 0
jae 0x1001fc5c
cmp dword [ebp - 0x3c8], 0
jne 0x1001fc5c
and dword [ebp - 0x294], 0
jmp 0x1001fc66
mov dword [ebp - 0x294], 1
mov eax, dword [ebp - 0x30]
cmp dword [ebp - 0x294], eax
jne 0x1001fc7d
mov dword [ebp - 0x490], 1
jmp 0x1001fc84
and dword [ebp - 0x490], 0
mov eax, dword [ebp - 0xf8]
mov dword [ebp - 0x5d4], eax
mov eax, dword [ebp - 0x28]
cmp eax, dword [ebp - 0x24]
jne 0x1001fca4
mov dword [ebp - 0x340], 1
jmp 0x1001fcab
and dword [ebp - 0x340], 0
cmp dword [ebp - 0x340], 0xbcce3f50
jbe 0x1001fcc6
cmp dword [ebp - 0x30], 0
jne 0x1001fcc6
and dword [ebp - 0x29c], 0
jmp 0x1001fcd0
mov dword [ebp - 0x29c], 1
imul eax, dword [ebp - 0x29c], 0xe836
cmp eax, dword [ebp - 0x24]
jne 0x1001fcf1
cmp dword [ebp - 0x24], 0
je 0x1001fcf1
mov dword [ebp - 0x390], 1
jmp 0x1001fcf8
and dword [ebp - 0x390], 0
mov eax, dword [ebp - 0x24]
cmp eax, dword [ebp - 0x390]
jne 0x1001fd0f
mov dword [ebp - 0x2a4], 1
jmp 0x1001fd16
and dword [ebp - 0x2a4], 0
cmp dword [ebp - 0x2a4], 0x33337672
jle 0x1001fd2e
mov dword [ebp - 0x348], 1
jmp 0x1001fd35
and dword [ebp - 0x348], 0
cmp dword [ebp - 0x348], 0x89ce
je 0x1001fd4a
and dword [ebp - 0x2ac], 0
jmp 0x1001fd54
mov dword [ebp - 0x2ac], 1
cmp dword [ebp - 0x2ac], 0xfe16
jg 0x1001ff43
mov dword [ebp - 0x78], 0xfffffff6
mov dword [ebp - 0x2bc], 0xfffffff8
mov dword [ebp - 0x4a4], 0xcee38976
mov eax, dword [ebp - 0x24]
mov dword [ebp - 0x53c], eax
mov eax, dword [ebp - 0x24]
mov dword [ebp - 0x594], eax
mov eax, dword [ebp - 0x28]
mov dword [ebp - 0x544], eax
mov eax, dword [ebp - 0x78]
cmp eax, dword [ebp - 0x78]
jl 0x1001fdb7
cmp dword [ebp - 0x24], 0
jne 0x1001fdb7
cmp dword [ebp - 0x78], 0
jne 0x1001fdb7
and dword [ebp - 0x3b8], 0
jmp 0x1001fdc1
mov dword [ebp - 0x3b8], 1
mov eax, dword [ebp - 0x24]
cmp dword [ebp - 0x3b8], eax
jge 0x1001fdd8
mov dword [ebp - 0x2b4], 1
jmp 0x1001fddf
and dword [ebp - 0x2b4], 0
mov eax, dword [ebp - 0x30]
cmp eax, dword [ebp - 0x2b4]
jge 0x1001fdf6
mov dword [ebp - 0x350], 1
jmp 0x1001fdfd
and dword [ebp - 0x350], 0
mov eax, dword [ebp - 0x350]
mov dword [ebp - 0x2bc], eax
cmp dword [ebp - 0x2bc], 0x249f
je 0x1001fe21
mov dword [ebp - 0x128], 1
jmp 0x1001fe28
and dword [ebp - 0x128], 0
cmp dword [ebp - 0x128], 1
je 0x1001fe3d
mov dword [ebp - 0x2c4], 1
jmp 0x1001fe44
and dword [ebp - 0x2c4], 0
mov eax, dword [ebp - 0x7c]
cmp dword [ebp - 0x2c4], eax
jl 0x1001fe5b
mov dword [ebp - 0x358], 1
jmp 0x1001fe62
and dword [ebp - 0x358], 0
mov eax, dword [ebp - 0x24]
cmp dword [ebp - 0x358], eax
jne 0x1001fe79
mov dword [ebp - 0x2cc], 1
jmp 0x1001fe80
and dword [ebp - 0x2cc], 0
mov eax, dword [ebp - 0x24]
cmp dword [ebp - 0x2cc], eax
jg 0x1001fe97
mov dword [ebp - 0x3cc], 1
jmp 0x1001fe9e
and dword [ebp - 0x3cc], 0
mov eax, dword [ebp - 0x24]
add eax, dword [ebp - 0x3cc]
imul eax, dword [ebp - 0x28]
cmp eax, 1
jle 0x1001febc
mov dword [ebp - 0x2d4], 1
jmp 0x1001fec3
and dword [ebp - 0x2d4], 0
mov eax, dword [ebp - 0x24]
add eax, dword [ebp - 0x2d4]
jne 0x1001fedc
or eax, 0xffffffff
jne 0x1001fedc
and dword [ebp - 0x434], 0
jmp 0x1001fee6
mov dword [ebp - 0x434], 1
mov eax, dword [ebp - 0x78]
mov dword [ebp - 0x5bc], eax
cmp dword [ebp - 0x30], 0
je 0x1001ff07
cmp dword [ebp - 0x30], 0
je 0x1001ff07
mov dword [ebp - 0x360], 1
jmp 0x1001ff0e
and dword [ebp - 0x360], 0
mov eax, dword [ebp - 0x78]
add eax, dword [ebp - 0x360]
cmp eax, dword [ebp - 0x30]
je 0x1001ff2e
cmp dword [ebp - 0x7c], 0
je 0x1001ff2e
mov dword [ebp - 0x2dc], 1
jmp 0x1001ff35
and dword [ebp - 0x2dc], 0
mov eax, dword [ebp - 0x2dc]
mov dword [ebp - 0x4a4], eax
jmp 0x1001ff55
mov byte [ebp - 0x61], 0
movzx eax, byte [ebp - 0x61]
test eax, eax
je 0x1001ff55
call dword [sym.imp.USER32.dll_GetDoubleClickTime]
jmp 0x100202cb
push 1
lea ecx, [ebp - 0x3dc]
call fcn.1000efc4
mov dword [ebp - 4], 0xa
mov dword [ebp - 0x220], 0xffffffff
mov dword [ebp - 0x238], 1
push 2
lea ecx, [ebp - 0x4f0]
call fcn.1000efc4
mov byte [ebp - 4], 0xb
mov dword [ebp - 0x4b4], 0xffffffff
mov dword [ebp - 0x4c], 0
jmp 0x1001ffad
mov eax, dword [ebp - 0x4c]
inc eax
mov dword [ebp - 0x4c], eax
cmp dword [ebp - 0x4c], 1
jge 0x1001ffc9
push dword [ebp - 0x4c]
lea ecx, [ebp - 0x3dc]
call fcn.1000f063
mov dword [eax], 0x2240
jmp 0x1001ffa6
mov dword [ebp - 0x3a0], 0x75e0
mov dword [ebp - 0x49c], str.iqcoxiqcg_bzfkjucue_svv_kmuz_cxwnpjp_bwzzobwg_wrth_hrccqc_welgetjc_qgyn_zksprzbdq_rtqdzvq
cmp dword [ebp - 0x3a0], 0x7784
jle 0x10020093
and dword [ebp - 0xe8], 0
jmp 0x10020003
mov eax, dword [ebp - 0xe8]
inc eax
mov dword [ebp - 0xe8], eax
cmp dword [ebp - 0xe8], 0x2df0
jge 0x10020093
and dword [ebp - 0xd0], 0
jmp 0x10020029
mov eax, dword [ebp - 0xd0]
inc eax
mov dword [ebp - 0xd0], eax
cmp dword [ebp - 0xd0], 0x2bc0
jge 0x1002008e
mov eax, dword [ebp - 0xe8]
mov ecx, dword [ebp - 0xd0]
shl eax, cl
cdq
mov dword [ebp - 0x48c], eax
mov dword [ebp - 0x488], edx
push dword [ebp - 0x488]
push dword [ebp - 0x48c]
lea ecx, [ebp - 0x5f8]
call fcn.10001a55
pop ecx
pop ecx
mov dword [ebp - 0x43c], eax
mov ecx, dword [ebp - 0x43c]
call fcn.10001bde
push eax
call fcn.10047d34
pop ecx
lea ecx, [ebp - 0x5f8]
call fcn.10001bd4
jmp 0x1002001c
jmp 0x1001fff6
mov dword [ebp - 0x4c], 0
jmp 0x100200a3
mov eax, dword [ebp - 0x4c]
inc eax
mov dword [ebp - 0x4c], eax
cmp dword [ebp - 0x4c], 2
jge 0x100200bc
push dword [ebp - 0x4c]
lea ecx, [ebp - 0x4f0]
call fcn.1000f063
and dword [eax], 0
jmp 0x1002009c
mov byte [ebp - 4], 0xc
cmp dword [ebp - 0x3a0], 0x73fa
jge 0x100200d8
push dword [ebp - 0x49c]
call fcn.10047d34
pop ecx
jmp 0x100200f4
mov dword [ebp - 4], 0xb
jmp 0x10020104
xor eax, eax
jne 0x10020121
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x444], 0
jne 0x10020121
and dword [ebp - 0x2ec], 0
jmp 0x1002012b
mov dword [ebp - 0x2ec], 1
cmp dword [ebp - 0x4ac], 1
jl 0x10020140
mov dword [ebp - 0x2e4], 1
jmp 0x10020147
and dword [ebp - 0x2e4], 0
push 0
lea ecx, [ebp - 0x3dc]
call fcn.1000f063
mov ecx, dword [ebp - 0x2e4]
cmp ecx, dword [eax]
jge 0x1002016a
mov dword [ebp - 0x368], 1
jmp 0x10020171
and dword [ebp - 0x368], 0
push 0
lea ecx, [ebp - 0x3dc]
call fcn.1000f063
mov ecx, dword [ebp - 0x368]
cmp ecx, dword [eax]
jge 0x100201a3
push 0
lea ecx, [ebp - 0x3dc]
call fcn.1000f063
cmp dword [eax], 0
jne 0x100201a3
and dword [ebp - 0x3c0], 0
jmp 0x100201ad
mov dword [ebp - 0x3c0], 1
mov eax, dword [ebp - 0x2ec]
cmp eax, dword [ebp - 0x3c0]
jle 0x100201c7
mov dword [ebp - 0x214], 1
jmp 0x100201ce
and dword [ebp - 0x214], 0
push 0
lea ecx, [ebp - 0x3dc]
call fcn.1000f063
mov ecx, dword [ebp - 0x214]
cmp ecx, dword [eax]
jl 0x100201f1
mov dword [ebp - 0x218], 1
jmp 0x100201f8
and dword [ebp - 0x218], 0
push 0
lea ecx, [ebp - 0x3dc]
call fcn.1000f063
mov eax, dword [eax]
cmp eax, dword [ebp - 0x218]
jl 0x1002021b
mov dword [ebp - 0x44c], 1
jmp 0x10020222
and dword [ebp - 0x44c], 0
mov eax, dword [ebp - 0x30]
mov dword [ebp - 0x220], eax
cmp dword [ebp - 0x220], 4
jae 0x10020240
mov dword [ebp - 0x228], 1
jmp 0x10020247
and dword [ebp - 0x228], 0
push 0
lea ecx, [ebp - 0x3dc]
call fcn.1000f063
mov ecx, dword [ebp - 0x228]
cmp ecx, dword [eax]
jg 0x1002026a
mov dword [ebp - 0x230], 1
jmp 0x10020271
and dword [ebp - 0x230], 0
mov eax, dword [ebp - 0x230]
mov dword [ebp - 0x238], eax
mov eax, dword [ebp - 0x238]
add eax, dword [ebp - 0x30]
mov dword [ebp - 0x240], eax
push 1
lea ecx, [ebp - 0x4f0]
call fcn.1000f063
mov ecx, dword [ebp - 0x240]
mov dword [eax], ecx
mov eax, dword [ebp - 0x240]
mov dword [ebp - 0x4b4], eax
mov byte [ebp - 4], 0xa
lea ecx, [ebp - 0x4f0]
call fcn.1000f047
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x3dc]
call fcn.1000f047
xor eax, eax
inc eax
imul eax, eax, 0x148
add eax, 0x1007a228
mov dword [ebp - 0x20c], eax
mov dword [ebp - 0x18], 0xffffffff
mov dword [ebp - 0x298], 1
mov dword [ebp - 0x268], 0xfffffffd
mov dword [ebp - 0x4a8], 0x3bf844ba
cmp dword [ebp - 0x18], 0xffffffff
jne 0x10020316
mov dword [ebp - 0x248], 1
jmp 0x1002031d
and dword [ebp - 0x248], 0
mov eax, dword [ebp - 0x18]
cmp dword [ebp - 0x248], eax
jle 0x10020334
mov dword [ebp - 0x250], 1
jmp 0x1002033b
and dword [ebp - 0x250], 0
mov eax, dword [ebp - 0x18]
cmp dword [ebp - 0x250], eax
jle 0x10020352
mov dword [ebp - 0x258], 1
jmp 0x10020359
and dword [ebp - 0x258], 0
mov eax, dword [ebp - 0x18]
cmp dword [ebp - 0x258], eax
jne 0x10020370
mov dword [ebp - 0x260], 1
jmp 0x10020377
and dword [ebp - 0x260], 0
cmp dword [ebp - 0x260], 1
ja 0x1002038c
mov dword [ebp - 0x454], 1
jmp 0x10020393
and dword [ebp - 0x454], 0
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x54c], eax
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x59c], eax
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x554], eax
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x5c8], eax
mov dword [ebp - 0x268], 1
mov eax, dword [ebp - 0x268]
cmp eax, dword [ebp - 0x18]
jle 0x100203d8
mov dword [ebp - 0x270], 1
jmp 0x100203df
and dword [ebp - 0x270], 0
mov eax, dword [ebp - 0x18]
cmp dword [ebp - 0x270], eax
je 0x100203f6
mov dword [ebp - 0x278], 1
jmp 0x100203fd
and dword [ebp - 0x278], 0
cmp dword [ebp - 0x278], 0xeda5
jne 0x10020415
mov dword [ebp - 0x280], 1
jmp 0x1002041c
and dword [ebp - 0x280], 0
mov eax, dword [ebp - 0x18]
cmp dword [ebp - 0x280], eax
jg 0x10020433
mov dword [ebp - 0x288], 1
jmp 0x1002043a
and dword [ebp - 0x288], 0
mov eax, dword [ebp - 0x288]
sub eax, dword [ebp - 0x18]
cmp eax, dword [ebp - 0x18]
jge 0x1002045a
cmp dword [ebp - 0x18], 0
je 0x1002045a
mov dword [ebp - 0x290], 1
jmp 0x10020461
and dword [ebp - 0x290], 0
mov eax, dword [ebp - 0x18]
cmp dword [ebp - 0x290], eax
jge 0x10020478
mov dword [ebp - 0x2a0], 1
jmp 0x1002047f
and dword [ebp - 0x2a0], 0
mov eax, dword [ebp - 0x18]
sub eax, dword [ebp - 0x18]
mov dword [ebp - 0x298], eax
mov eax, dword [ebp - 0x298]
cmp eax, dword [ebp - 0x2a0]
jle 0x100204a5
mov dword [ebp - 0x2a8], 1
jmp 0x100204ac
and dword [ebp - 0x2a8], 0
mov eax, dword [ebp - 0x18]
cmp dword [ebp - 0x2a8], eax
jg 0x100204c3
mov dword [ebp - 0x2b0], 1
jmp 0x100204ca
and dword [ebp - 0x2b0], 0
cmp dword [ebp - 0x2b0], 0xfffffff7
jne 0x100204df
mov dword [ebp - 0x2b8], 1
jmp 0x100204e6
and dword [ebp - 0x2b8], 0
mov eax, dword [ebp - 0x2b8]
mov dword [ebp - 0x4a8], eax
mov eax, 0x8f0bd907
test eax, eax
je 0x10020522
mov byte [ebp - 0x5c], 0
movzx eax, byte [ebp - 0x5c]
test eax, eax
je 0x10020520
push 0
push 0x17a8
push 0
push 0x1cc5
push 0x25a6
call dword [sym.imp.GDI32.dll_ExtCreatePen]
jmp 0x10020593
push 4
lea ecx, [ebp - 0x4fc]
call fcn.1000efc4
mov dword [ebp - 4], 0xe
mov dword [ebp - 0xe0], 0
jmp 0x1002054f
mov eax, dword [ebp - 0xe0]
inc eax
mov dword [ebp - 0xe0], eax
cmp dword [ebp - 0xe0], 4
jge 0x10020571
push dword [ebp - 0xe0]
lea ecx, [ebp - 0x4fc]
call fcn.1000f063
mov dword [eax], 0xa151cd25
jmp 0x10020542
push 2
lea ecx, [ebp - 0x4fc]
call fcn.1000f063
mov dword [eax], 0xcc0e4260
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x4fc]
call fcn.1000f047
xor eax, eax
inc eax
imul eax, eax, 0x1c
add eax, 0x1007a228
mov dword [ebp - 0x118], eax
mov dword [ebp - 0x14], 0xfffffff8
mov dword [ebp - 0x2c0], 0x5db1
mov dword [ebp - 0x3f0], str.cdejgpfvr_rppsgzytz_wufi_igtvyqw
cmp dword [ebp - 0x2c0], 0x609b
jle 0x100206d9
and dword [ebp - 0xa8], 0
jmp 0x100205e5
mov eax, dword [ebp - 0xa8]
inc eax
mov dword [ebp - 0xa8], eax
cmp dword [ebp - 0xa8], 0x584
jge 0x100206d9
and dword [ebp - 0x8c], 0
jmp 0x1002060b
mov eax, dword [ebp - 0x8c]
inc eax
mov dword [ebp - 0x8c], eax
cmp dword [ebp - 0x8c], 0x6adc
jge 0x100206d4
and dword [ebp - 0x98], 0
jmp 0x10020631
mov eax, dword [ebp - 0x98]
inc eax
mov dword [ebp - 0x98], eax
cmp dword [ebp - 0x98], 0x6ec0
jge 0x100206cf
and dword [ebp - 0xa0], 0
jmp 0x10020657
mov eax, dword [ebp - 0xa0]
inc eax
mov dword [ebp - 0xa0], eax
cmp dword [ebp - 0xa0], 0x407e
jge 0x100206ca
mov eax, dword [ebp - 0x8c]
imul eax, dword [ebp - 0x98]
cdq
idiv dword [ebp - 0xa0]
mov eax, dword [ebp - 0xa8]
sub eax, edx
cdq
mov dword [ebp - 0x498], eax
mov dword [ebp - 0x494], edx
push dword [ebp - 0x494]
push dword [ebp - 0x498]
lea ecx, [ebp - 0x610]
call fcn.10001a55
pop ecx
pop ecx
mov dword [ebp - 0x460], eax
mov ecx, dword [ebp - 0x460]
call fcn.10001bde
push eax
call fcn.10047d34
pop ecx
lea ecx, [ebp - 0x610]
call fcn.10001bd4
jmp 0x1002064a
jmp 0x10020624
jmp 0x100205fe
jmp 0x100205d8
mov dword [ebp - 0x84], 0xcf5aa05d
mov dword [ebp - 4], 0xf
cmp dword [ebp - 0x2c0], 0x5be2
jge 0x10020702
push dword [ebp - 0x3f0]
call fcn.10047d34
pop ecx
jmp 0x1002071e
or dword [ebp - 4], 0xffffffff
jmp 0x10020728
mov dword [ebp - 0x300], 0
mov dword [ebp - 0x2fc], 0
mov dword [ebp - 0x2f8], 0
mov dword [ebp - 0x2f4], 0
mov dword [ebp - 0x100], 0xfffffffc
xor eax, eax
inc eax
je 0x10020790
cmp dword [ebp - 0x14], 1
jge 0x1002077a
mov eax, 0xbd85
test eax, eax
je 0x1002077a
mov dword [ebp - 0x2c8], 1
jmp 0x10020781
and dword [ebp - 0x2c8], 0
mov eax, dword [ebp - 0x2c8]
sub eax, dword [ebp - 0x84]
cmp eax, dword [ebp - 0x14]
mov eax, dword [ebp - 0x14]
cmp eax, dword [ebp - 0x84]
jle 0x100207a7
mov dword [ebp - 0x12c], 1
jmp 0x100207ae
and dword [ebp - 0x12c], 0
mov eax, dword [ebp - 0x14]
cmp dword [ebp - 0x12c], eax
jle 0x100207c5
mov dword [ebp - 0x134], 1
jmp 0x100207cc
and dword [ebp - 0x134], 0
cmp dword [ebp - 0x134], 0xffffffff
jne 0x100207e1
mov dword [ebp - 0x13c], 1
jmp 0x100207e8
and dword [ebp - 0x13c], 0
mov eax, dword [ebp - 0x84]
cmp dword [ebp - 0x13c], eax
jg 0x10020802
mov dword [ebp - 0x144], 1
jmp 0x10020809
and dword [ebp - 0x144], 0
mov eax, dword [ebp - 0x14]
cmp dword [ebp - 0x144], eax
jg 0x10020826
cmp dword [ebp - 0x14], 0
je 0x10020826
mov dword [ebp - 0x3f8], 1
jmp 0x1002082d
and dword [ebp - 0x3f8], 0
mov eax, dword [ebp - 0x14]
mov dword [ebp - 0x55c], eax
xor eax, eax
inc eax
cmp eax, 0xf39281c1
ja 0x10020850
push 0xfffffffffffffff7
pop eax
test eax, eax
jne 0x10020850
and dword [ebp - 0x14c], 0
jmp 0x1002085a
mov dword [ebp - 0x14c], 1
mov eax, dword [ebp - 0x14c]
add eax, 0xfe9f
cmp eax, dword [ebp - 0x14]
jg 0x10020876
mov dword [ebp - 0x154], 1
jmp 0x1002087d
and dword [ebp - 0x154], 0
mov eax, dword [ebp - 0x14]
imul eax, dword [ebp - 0x154]
cmp eax, dword [ebp - 0x84]
jge 0x1002089b
mov dword [ebp - 0x15c], 1
jmp 0x100208a2
and dword [ebp - 0x15c], 0
mov eax, dword [ebp - 0x15c]
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 0
je 0x10020aec
push 2
lea ecx, [ebp - 0x514]
call fcn.1000efc4
mov dword [ebp - 4], 0x11
mov dword [ebp - 0x54], 0x7c2657a7
mov dword [ebp - 0xb0], 0
jmp 0x100208e9
mov eax, dword [ebp - 0xb0]
inc eax
mov dword [ebp - 0xb0], eax
cmp dword [ebp - 0xb0], 2
jge 0x10020908
push dword [ebp - 0xb0]
lea ecx, [ebp - 0x514]
call fcn.1000f063
and dword [eax], 0
jmp 0x100208dc
mov dword [ebp - 0x14], 0
jmp 0x10020918
cmp dword [ebp - 0x14], 3
jg 0x10020aba
push 4
pop eax
imul eax, eax, 3
mov ecx, dword [ebp - 0x14]
mov ecx, dword [ebp + ecx*4 - 0x300]
cmp ecx, dword [ebp + eax - 0x300]
jl 0x10020947
mov dword [ebp - 0x174], 1
jmp 0x1002094e
and dword [ebp - 0x174], 0
cmp dword [ebp - 0x54], 0x5412
jge 0x10020963
mov dword [ebp - 0x164], 1
jmp 0x1002096a
and dword [ebp - 0x164], 0
mov eax, dword [ebp - 0x54]
cmp dword [ebp - 0x164], eax
jge 0x10020981
mov dword [ebp - 0x16c], 1
jmp 0x10020988
and dword [ebp - 0x16c], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x300]
cmp dword [ebp - 0x16c], eax
jne 0x100209af
cmp dword [ebp - 0x54], 0
je 0x100209af
mov dword [ebp - 0x400], 1
jmp 0x100209b6
and dword [ebp - 0x400], 0
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp + eax*4 - 0x300]
mov dword [ebp - 0x5a4], eax
mov eax, dword [ebp - 0x54]
add eax, dword [ebp - 0x54]
cmp dword [ebp - 0x174], eax
je 0x100209e0
mov dword [ebp - 0x17c], 1
jmp 0x100209e7
and dword [ebp - 0x17c], 0
mov eax, dword [ebp - 0x54]
cmp dword [ebp - 0x17c], eax
jne 0x100209fe
mov dword [ebp - 0x408], 1
jmp 0x10020a05
and dword [ebp - 0x408], 0
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp + eax*4 - 0x300]
mov dword [ebp - 0x564], eax
push 0
lea ecx, [ebp - 0x514]
call fcn.1000f063
mov dword [eax], 5
mov dword [ebp - 0x54], 0x585c2c10
cmp dword [ebp - 0x54], 5
je 0x10020a3e
mov byte [ebp - 0x5b], 0
movzx eax, byte [ebp - 0x5b]
test eax, eax
je 0x10020ad8
push 0xe8
push 0x884
push 0
call dword [sym.imp.KERNEL32.dll_SetHandleInformation]
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x514]
call fcn.1000f047
jmp 0x10020bc3
mov dword [ebp - 0x410], 0x2ffabe4b
cmp dword [ebp - 0x100], 0x1ea52fa5
je 0x10020b0e
mov dword [ebp - 0x19c], 1
jmp 0x10020b15
and dword [ebp - 0x19c], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x300]
mov dword [ebp - 0x5c4], eax
mov eax, dword [ebp - 0x84]
cmp dword [ebp - 0x19c], eax
jg 0x10020b42
mov dword [ebp - 0x1a4], 1
jmp 0x10020b49
and dword [ebp - 0x1a4], 0
mov eax, dword [ebp - 0x410]
cmp dword [ebp - 0x1a4], eax
jge 0x10020b6c
mov eax, 0xf96394a
test eax, eax
je 0x10020b6c
mov dword [ebp - 0x1ac], 1
jmp 0x10020b73
and dword [ebp - 0x1ac], 0
cmp dword [ebp - 0x1ac], 2
ja 0x10020b88
mov dword [ebp - 0x1b4], 1
jmp 0x10020b8f
and dword [ebp - 0x1b4], 0
mov eax, dword [ebp - 0x14]
sub eax, dword [ebp - 0x1b4]
add eax, 0x6e99
cmp eax, 0xbd68e480
jne 0x10020bb0
mov dword [ebp - 0x1bc], 1
jmp 0x10020bb7
and dword [ebp - 0x1bc], 0
mov eax, dword [ebp - 0x1bc]
mov dword [ebp - 0x100], eax
mov eax, dword [ebp - 0x20c]
mov dword [0x1007a218], eax
mov eax, dword [ebp - 0x118]
mov dword [0x1007a21c], eax
mov dword [ebp - 0x108], 0xffff
mov dword [ebp - 0x418], 0x1c7bf0b9
mov dword [ebp - 0x420], 0xd2703d9b
mov dword [ebp - 0x1e4], 0x5362daab
mov dword [ebp - 0x56c], 0xffffffff
mov dword [ebp - 0x5ac], 1
mov dword [ebp - 0x578], 0x7e2f9d44
mov dword [ebp - 0x5cc], 0xfffffffc
mov dword [ebp - 0x204], 1
mov dword [ebp - 0x430], 0xfffffffd
mov dword [ebp - 0x110], 8
mov dword [ebp - 0x1dc], 0
mov dword [ebp - 0x428], 1
mov dword [ebp - 0xb8], 0
jmp 0x10020c74
mov eax, dword [ebp - 0xb8]
inc eax
mov dword [ebp - 0xb8], eax
cmp dword [ebp - 0xb8], 1
jge 0x10020c90
mov eax, dword [ebp - 0xb8]
mov dword [ebp + eax*4 - 0x1c4], 0xa32a17d0
jmp 0x10020c67
mov eax, dword [ebp - 0x108]
mov dword [ebp - 0x51c], eax
mov eax, dword [ebp - 0x108]
mov dword [ebp - 0x418], eax
mov eax, dword [ebp - 0x108]
mov dword [ebp - 0x520], eax
mov eax, dword [ebp - 0x110]
dec eax
mov dword [ebp - 0x110], eax
mov eax, dword [ebp - 0x110]
neg eax
jne 0x10020d87
cmp dword [ebp - 0x204], 0
jne 0x10020d13
push 4
pop eax
imul eax, eax, 0
push 4
pop ecx
imul ecx, ecx, 0
mov ecx, dword [ebp + ecx - 0x1c4]
sub ecx, dword [ebp - 0x1dc]
imul ecx, dword [ebp - 0x420]
sub ecx, dword [ebp + eax - 0x1c4]
je 0x10020d0a
cmp dword [ebp - 0x1e4], 0
jne 0x10020d13
and dword [ebp - 0x1cc], 0
jmp 0x10020d1d
mov dword [ebp - 0x1cc], 1
imul eax, dword [ebp - 0x1cc], 0xf744
cmp eax, dword [ebp - 0x428]
jle 0x10020d3b
mov dword [ebp - 0x1d4], 1
jmp 0x10020d42
and dword [ebp - 0x1d4], 0
mov eax, dword [ebp - 0x430]
add eax, dword [ebp - 0x1d4]
cmp dword [ebp - 0x1dc], eax
jg 0x10020d62
mov dword [ebp - 0x1ec], 1
cmp dword [ebp - 0x1ec], 0xfffffffc
jae 0x10020da6
mov dword [ebp - 0x1f4], 1
jmp 0x10020dad
and dword [ebp - 0x1f4], 0
imul eax, dword [ebp - 0x1f4], 0xffffffff
test eax, eax
je 0x10020dcd
mov eax, 0x9a27
test eax, eax
je 0x10020dcd
and dword [ebp - 0x1fc], 0
mov eax, dword [ebp - 0x1fc]
mov dword [ebp - 0x204], eax
push 4
pop eax
imul eax, eax, 0
push 4
pop ecx
imul ecx, ecx, 0
mov edx, dword [ebp - 0x118]
mov edx, dword [edx + eax]
mov eax, dword [ebp - 0x20c]
mov ecx, dword [eax + ecx]
call fcn.1000fa74
mov dword [ebp - 0x440], eax
mov dword [ebp - 0x70], 0xffffffff
mov eax, dword [ebp - 0x70]
mov dword [ebp - 0x70], eax
mov dword [ebp - 0x70], 0xf
jmp 0x10020e26
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret