Function at 0x1001818c
Capabilities:
Clear file content
Set registry value

Disassembly:
mov eax, 0x100624ff
call fcn.100616f8
sub esp, 0x240
push ebx
push esi
push edi
mov dword [ebp - 0x10], esp
xor ebx, ebx
mov dword [ebp - 0xb0], ecx
lea ecx, [ebp - 0x88]
push 3
mov dword [ebp - 0x110], edx
mov dword [ebp - 0x184], ebx
call fcn.1000b34a
mov dword [ebp - 4], ebx
mov dword [ebp - 0x1c], ebx
mov dword [ebp - 0x18], 0xfffffffb
mov dword [ebp - 0x18], 0xfffffff8
mov dword [ebp - 0x30], 0xffffffff
mov dword [ebp - 0x18], 0x2b67
cmp dword [ebp - 0x18], 0x2ea0
jle 0x10018215
mov esi, ebx
mov edi, ebx
mov eax, edi
mov ecx, 0x1007da98
or eax, esi
cdq
push edx
push eax
call fcn.1000b132
inc edi
cmp edi, 0x699d
jl 0x100181f2
inc esi
cmp esi, 0x30e5
jl 0x100181f0
mov dword [ebp - 0x30], 6
mov byte [ebp - 4], 1
cmp dword [ebp - 0x18], 0x2882
jge 0x10018256
mov edx, str.qitztieg_gzs_bbuoxnmt
mov ecx, 0x1007da98
call fcn.1000d503
jmp 0x10018256
xor esi, esi
mov dword [ebp - 4], ebx
mov dword [ebp - 0x20], 0x7c2a
inc esi
cmp dword [ebp - 0x20], 0x7f7f
jle 0x100182e8
mov eax, ebx
mov dword [ebp - 0x18], ebx
mov edi, ebx
mov dword [ebp - 0x24], ebx
mov ecx, edi
mov dword [ebp - 0x34], ebx
sar eax, cl
mov edi, ebx
mov dword [ebp - 0x38], eax
mov ecx, edi
sar eax, cl
lea ecx, [ebp - 0x204]
cdq
push edx
push eax
call fcn.10001a65
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x1001829e
mov eax, dword [eax]
push eax
call fcn.1004ad2c
pop ecx
push ebx
push esi
lea ecx, [ebp - 0x204]
call fcn.1000b74b
mov eax, dword [ebp - 0x38]
inc edi
cmp edi, 0x2d8e
jl 0x10018282
mov edi, dword [ebp - 0x24]
mov eax, dword [ebp - 0x18]
inc edi
mov dword [ebp - 0x24], edi
cmp edi, 0x6ca3
jl 0x10018276
inc eax
mov dword [ebp - 0x18], eax
cmp eax, 0x49e9
jl 0x10018271
push ebx
push 0x1ac7
push ebx
call dword [sym.imp.GDI32.dll_GetEnhMetaFileHeader]
mov dword [ebp - 0x3c], 0xffffffff
cmp dword [ebp - 0x20], 0x7b7c
jge 0x10018303
push str.kgc_llhoiznmm_dhadfli_ysqpiapl_wawc_icqnqamgp_dzlaq_wswqmy
call fcn.1004ad2c
pop ecx
mov dword [ebp - 0x18], ebx
jmp 0x10018318
mov ecx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x88]
or dword [eax + ecx*4], 0xffffffff
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 3
jl 0x10018308
mov dword [ebp - 0x1c], 2
cmp dword [ebp - 0x1c], ebx
jl 0x100183d9
mov dword [ebp - 0x34], 0xffffffff
mov edi, esi
mov dword [ebp - 0x38], 0x1466ac3a
mov dword [ebp - 0x20], 0xc0c8fbfc
mov dword [ebp - 0x2c], 5
mov dword [ebp - 0x24], 0x8bbe26b5
mov eax, dword [ebp - 0x1c]
mov edx, dword [ebp - 0x1c]
mov ecx, dword [ebp - 0x88]
mov eax, dword [ecx + eax*4]
mov dword [ecx + edx*4], eax
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0x18], 0xfffffff7
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x34], 0x461e3ff1
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x24]
mov dword [ebp - 0x18], eax
mov ecx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x88]
imul ecx, dword [eax]
mov eax, dword [ebp - 0x38]
inc dword [ebp - 0x24]
cmp ecx, eax
mov eax, ebx
cmove edi, ebx
cmp dword [ebp - 0x20], ebx
je 0x100183a2
mov eax, esi
mov dword [ebp - 0x18], eax
xor edx, edx
mov ecx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x88]
cmp ecx, dword [eax]
mov eax, dword [ebp - 0x2c]
setl dl
sub edx, eax
cmp edi, edx
jg 0x100183c1
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x3c]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x2c], esi
dec dword [ebp - 0x1c]
jns 0x1001832e
or dword [ebp - 4], 0xffffffff
cmp dword [ebp - 0x88], 0
je 0x10018401
push dword [ebp - 0x88]
call fcn.1004aef9
pop ecx
mov dword [ebp - 0x88], ebx
mov dword [ebp - 0x84], ebx
mov dword [ebp - 0x80], ebx
mov dword [ebp - 0x24], 0x25b9b55b
lea ecx, [ebp - 0xbc]
push 3
call fcn.1000b34a
mov dword [ebp - 4], 5
mov dword [ebp - 0x3c], 0x4498b94b
mov dword [ebp - 0x1c], ebx
jmp 0x1001843b
mov ecx, dword [ebp - 0x1c]
mov eax, dword [ebp - 0xbc]
mov dword [eax + ecx*4], 0x9351f200
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 3
jl 0x10018428
mov dword [ebp - 0x1c], ebx
jmp 0x10018457
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0xac], 5
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], esi
jl 0x10018446
mov dword [ebp - 0x24], ebx
cmp dword [ebp - 0x24], 0xc
jne 0x1001863a
mov dword [ebp - 0x1c], 0xe1879501
mov dword [ebp - 0x40], 0x4e13
cmp dword [ebp - 0x40], 0x4e57
jle 0x100184fa
mov ecx, ebx
mov dword [ebp - 0x18], ebx
mov dword [ebp - 0x1c], ebx
mov eax, ebx
mov dword [ebp - 0x2c], 0x198e
mov dword [ebp - 0x20], eax
mov edi, ebx
and eax, edi
and eax, ecx
lea ecx, [ebp - 0x234]
cdq
push edx
push eax
call fcn.10001a65
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x100184b2
mov eax, dword [eax]
push eax
call fcn.1004ad2c
pop ecx
push ebx
push esi
lea ecx, [ebp - 0x234]
call fcn.1000b74b
mov ecx, dword [ebp - 0x18]
inc edi
mov eax, dword [ebp - 0x20]
cmp edi, 0x4c77
jl 0x10018496
mov edi, dword [ebp - 0x1c]
add eax, edi
dec dword [ebp - 0x2c]
mov dword [ebp - 0x20], eax
jne 0x10018494
inc edi
mov dword [ebp - 0x1c], edi
cmp edi, 0x730e
jl 0x10018488
inc ecx
mov dword [ebp - 0x18], ecx
cmp ecx, 0x3f1
jl 0x10018485
mov dword [ebp - 0x18], 0x790f9584
cmp dword [ebp - 0x40], 0x4c5e
jge 0x10018515
push str.vccauuft_rrp_nyi_buoazs_rxwpos_wiwoqq_vjzot_yad_nbfwlh_llfyi_aehopzukb_uqdpyyu
call fcn.1004ad2c
pop ecx
mov dword [ebp - 4], 5
mov dword [ebp - 0x40], 0xffffffff
mov dword [ebp - 0x1c], 2
cmp dword [ebp - 0x1c], ebx
jl 0x10018614
push esi
lea ecx, [ebp - 0xe0]
call fcn.1000b34a
mov dword [ebp - 0x40], 0xffffffff
mov dword [ebp - 0x34], 0xfffffffb
mov dword [ebp - 0x18], ebx
jmp 0x10018565
mov ecx, dword [ebp - 0x18]
mov eax, dword [ebp - 0xe0]
mov dword [eax + ecx*4], 0xd96753f3
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], esi
jl 0x10018552
mov eax, dword [ebp - 0xe0]
mov eax, dword [eax]
mov dword [ebp - 0x40], eax
mov eax, dword [ebp - 0x40]
neg eax
sbb eax, eax
neg eax
mov dword [ebp - 0xac], eax
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x3c]
mov eax, dword [ebp - 0x3c]
mov eax, dword [ebp - 0x24]
mov edx, dword [ebp - 0x1c]
mov ecx, dword [ebp - 0xbc]
mov eax, dword [ebp - 0x1c]
add eax, dword [ecx + edx*4]
jne 0x100185ad
mov eax, dword [ebp - 0xe0]
mov edx, ebx
cmp dword [eax], ebx
je 0x100185af
mov edx, esi
mov eax, dword [ebp - 0x1c]
xor ecx, ecx
cmp edx, eax
setne cl
xor edx, edx
imul ecx, dword [ebp - 0x1c]
imul eax, ecx, 0xffff220d
mov dword [ebp - 0x18], eax
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x40], eax
mov ecx, dword [ebp - 0x40]
mov eax, dword [ebp - 0x1c]
cmp ecx, eax
setl dl
mov dword [ebp - 0x34], edx
mov byte [ebp - 0x25], bl
cmp byte [ebp - 0x25], 0
je 0x100185ed
push ebx
push ebx
call dword [sym.imp.USER32.dll_LoadIconA]
push dword [ebp - 0xe0]
call fcn.1004aef9
mov dword [ebp - 0xe0], ebx
mov dword [ebp - 0xdc], ebx
mov dword [ebp - 0xd8], ebx
dec dword [ebp - 0x1c]
pop ecx
jns 0x10018533
mov ecx, dword [ebp - 0x1c]
xor edx, edx
mov eax, dword [ebp - 0x1c]
cmp ecx, eax
setne dl
xor eax, eax
cmp edx, 0x3fa9a180
setge al
mov dword [ebp - 0xac], eax
inc dword [ebp - 0x24]
jmp 0x1001845f
or dword [ebp - 4], 0xffffffff
cmp dword [ebp - 0xbc], 0
je 0x10018665
push dword [ebp - 0xbc]
call fcn.1004aef9
pop ecx
mov dword [ebp - 0xbc], ebx
mov dword [ebp - 0xb8], ebx
mov dword [ebp - 0xb4], ebx
mov dword [ebp - 0x20], 0xa115252c
mov dword [ebp - 0x18], esi
mov dword [ebp - 0x1c], esi
mov dword [ebp - 0x18], ebx
jmp 0x10018688
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x11c], 9
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 3
jl 0x10018677
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x18], eax
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x24], 0xffffffff
mov dword [ebp - 0x1c], ebx
jmp 0x100186ee
mov dword [ebp - 0x34], 0x209c3997
mov eax, dword [ebp - 0x1c]
cmp dword [ebp + eax*4 - 0x11c], ebx
je 0x100186e6
mov eax, dword [ebp - 0x1c]
xor edx, edx
mov ecx, dword [ebp + eax*4 - 0x11c]
mov eax, dword [ebp - 0x20]
cmp eax, ecx
mov eax, dword [ebp - 0x1c]
setge dl
xor ecx, ecx
cmp edx, 0xb857
setl cl
cmp ecx, dword [ebp + eax*4 - 0x11c]
mov eax, esi
jge 0x100186e8
mov eax, ebx
mov dword [ebp - 0x34], eax
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 2
jle 0x100186a6
mov ecx, dword [ebp - 0x114]
xor edx, edx
mov eax, dword [ebp - 0x18]
cmp eax, ecx
mov eax, dword [ebp - 0x11c]
setl dl
add eax, dword [ebp - 0x18]
mov dword [ebp - 0x34], edx
xor edx, edx
cmp eax, dword [ebp - 0x34]
mov eax, dword [ebp - 0x24]
setg dl
xor ecx, ecx
cmp edx, eax
setle cl
mov dword [ebp - 0x18], ecx
cmp dword [ebp - 0x18], ebx
jne 0x1001872d
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0x24]
neg eax
push 0x61
sbb eax, eax
xor esi, esi
inc eax
inc esi
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x24]
add eax, dword [ebp - 0x1c]
mov dword [ebp - 0x20], eax
xor eax, eax
mov dword [ebp - 0x6c], 0xd05c004
inc eax
mov byte [ebp - 0x66], al
mov byte [ebp - 0x62], al
mov word [ebp - 0x68], 0x302
mov word [ebp - 0x65], 0x603
mov byte [ebp - 0x63], 0x30
mov dword [ebp - 0x61], 0x3e03e7
mov byte [ebp - 0x5d], 0x25
pop ecx
mov word [ebp - 0x148], cx
mov ecx, 0x61928c17
mov dword [ebp - 0xa8], ecx
mov dword [ebp - 0xa4], ecx
mov dword [ebp - 0xa0], ecx
mov dword [ebp - 0x9c], ecx
mov dword [ebp - 0x20], 0x4964a53a
mov dword [ebp - 0x30], ebx
mov dword [ebp - 0x30], 0x38dd44ad
mov dword [ebp - 0x30], 3
mov dword [ebp - 0x30], 0x752f67d5
mov dword [ebp - 0x30], 0xfffffff8
mov dword [ebp - 0x30], 0xcf7921e1
mov dword [ebp - 0x30], eax
mov eax, 0x657e3b6f
mov dword [ebp - 0xa8], eax
mov dword [ebp - 0xa4], eax
mov dword [ebp - 0xa0], eax
mov dword [ebp - 0x9c], eax
mov dword [ebp - 0x30], 3
mov dword [ebp - 0x30], 0xfffffffc
mov dword [ebp - 0x38], 0x30385d06
mov dword [ebp - 0x1c], 0x7386
cmp dword [ebp - 0x1c], 0x7435
jle 0x1001886d
mov edi, ebx
mov dword [ebp - 0x40], edi
mov eax, edi
mov dword [ebp - 0x3c], 0x36cd
mov dword [ebp - 0x18], eax
mov edi, ebx
or eax, edi
lea ecx, [ebp - 0x1ec]
cdq
push edx
push eax
call fcn.10001a65
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x10018835
mov eax, dword [eax]
push eax
call fcn.1004ad2c
pop ecx
push ebx
push esi
lea ecx, [ebp - 0x1ec]
call fcn.1000b74b
mov eax, dword [ebp - 0x18]
inc edi
cmp edi, 0x28a6
jl 0x1001881b
dec eax
dec dword [ebp - 0x3c]
mov dword [ebp - 0x18], eax
jne 0x10018819
mov edi, dword [ebp - 0x40]
inc edi
mov dword [ebp - 0x40], edi
cmp edi, 0x2f2a
jl 0x1001880d
mov dword [ebp - 0x20], 3
cmp dword [ebp - 0x20], ebx
jl 0x100189b8
mov dword [ebp - 0x24], 0x80849f84
lea ecx, [ebp - 0xf4]
push 3
call fcn.1000b34a
mov dword [ebp - 4], 8
mov dword [ebp - 0x2c], 0x270f9e3
mov dword [ebp - 0x18], ebx
jmp 0x100188b3
mov ecx, dword [ebp - 0x18]
mov eax, dword [ebp - 0xf4]
mov dword [eax + ecx*4], ebx
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 3
jl 0x100188a4
mov dword [ebp - 0x24], 3
cmp dword [ebp - 0x24], ebx
jl 0x10018985
mov dword [ebp - 0x18], 0x1326
cmp dword [ebp - 0x18], 0x15ff
jle 0x10018940
mov edi, ebx
mov dword [ebp - 0x40], ebx
mov dword [ebp - 0x34], edi
mov dword [ebp - 0x3c], 0x668b
mov eax, edi
lea ecx, [ebp - 0x21c]
cdq
push edx
push eax
call fcn.10001a65
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x10018902
mov eax, dword [eax]
push eax
call fcn.1004ad2c
pop ecx
push ebx
push esi
lea ecx, [ebp - 0x21c]
call fcn.1000b74b
dec edi
dec dword [ebp - 0x3c]
jne 0x100188e8
mov edi, dword [ebp - 0x40]
inc edi
mov dword [ebp - 0x40], edi
cmp edi, 0x3c4c
jl 0x100188de
push 0x2014
push 0x2212
push 0x6e1
call dword [sym.imp.USER32.dll_EnableScrollBar]
cmp dword [ebp - 0x18], 0x1283
jge 0x10018954
push str.fqhn_pei_kyfhwv_rbbeuep_npctep_mre_pcspbyuqp_cowe_uqmk_robmai_pwarkr_vhtcgj_ubvq
call fcn.1004ad2c
pop ecx
mov dword [ebp - 4], 8
mov dword [ebp - 0x30], esi
mov dword [ebp - 0x18], ebx
jmp 0x10018974
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x1d4], 0x8b0d193e
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 2
jl 0x10018963
dec dword [ebp - 0x2c]
dec dword [ebp - 0x24]
jmp 0x100188c0
or dword [ebp - 4], 0xffffffff
cmp dword [ebp - 0xf4], 0
je 0x100189b0
push dword [ebp - 0xf4]
call fcn.1004aef9
pop ecx
mov dword [ebp - 0xf4], ebx
mov dword [ebp - 0xf0], ebx
mov dword [ebp - 0xec], ebx
dec dword [ebp - 0x20]
jmp 0x10018874
cmp dword [ebp - 0x1c], 0x70c1
jge 0x100189cc
push str.mdwdgdr_crmwu_rcpiy_kggprate_wzzhqso_uequl_hyaoml_equnyyc_uayffyxf_kglblrhx_phoanctu
call fcn.1004ad2c
pop ecx
or dword [ebp - 4], 0xffffffff
mov edi, ebx
inc dword [ebp - 0x38]
push 2
pop ecx
mov dword [ebp - 0x24], ecx
cmp ecx, 0x10
jae 0x10018ebf
movzx eax, byte [ebp - 0x6c]
lea eax, [eax*2 + 2]
cmp ecx, eax
jne 0x10018d24
mov dword [ebp - 0x20], 0xffffffff
mov dword [ebp - 0x40], 0xd488
mov dword [ebp - 0x34], 0xffffffff
mov dword [ebp - 0x18], ebx
jmp 0x10018a1f
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x78], 2
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 3
jl 0x10018a11
mov dword [ebp - 0x70], ebx
cmp dword [ebp - 0x70], 0xa
jne 0x10018c69
mov dword [ebp - 0x1c], 0x3809d01
mov dword [ebp - 0x2c], 0xffffffff
mov dword [ebp - 0x18], 0x4e5477a
mov dword [ebp - 0x48], 0x236511f0
mov dword [ebp - 0x30], 0x6213
mov dword [ebp - 0x1c], 0x5613717b
cmp dword [ebp - 0x1c], ebx
je 0x10018ac1
mov ecx, dword [ebp - 0x1c]
xor edx, edx
mov eax, dword [ebp - 0x1c]
cmp ecx, eax
setge dl
cmp edx, dword [ebp - 0x70]
jg 0x10018a7a
mov eax, esi
cmp dword [ebp - 0x1c], ebx
jne 0x10018a7c
mov eax, ebx
cmp eax, dword [ebp - 0x1c]
jle 0x10018a84
mov eax, dword [ebp - 0x74]
mov eax, dword [ebp - 0x1c]
mov ecx, 0x1bb0
mov eax, dword [ebp - 0x78]
sub ecx, eax
je 0x10018a98
cmp dword [ebp - 0x1c], ebx
jne 0x10018a9a
mov esi, ebx
mov eax, dword [ebp - 0x1c]
xor edx, edx
mov ecx, dword [ebp - 0x70]
sub esi, eax
mov eax, dword [ebp - 0x1c]
add ecx, esi
cmp ecx, eax
mov eax, dword [ebp - 0x78]
setne dl
sub edx, eax
mov eax, dword [ebp - 0x74]
sub edx, eax
je 0x10018ac1
xor edx, edx
inc edx
mov eax, edx
jmp 0x10018ac6
xor edx, edx
mov eax, ebx
inc edx
mov dword [ebp - 0x20], eax
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x70]
mov eax, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x2c]
cmp dword [ebp - 0x78], ebx
je 0x10018b05
mov dword [ebp - 0x38], edx
mov dword [ebp - 0x2c], 0xfffffffc
jmp 0x10018afa
mov eax, dword [ebp - 0x38]
neg eax
sbb eax, eax
inc eax
mov dword [ebp - 0x18], eax
dec dword [ebp - 0x2c]
cmp dword [ebp - 0x2c], 0xfffffff5
je 0x10018aec
jmp 0x10018be0
mov dword [ebp - 0x3c], 0x20da
cmp dword [ebp - 0x3c], 0x2200
jle 0x10018b75
push 0x1b9e
push ebx
push 0x69b
push 0x1b58
push ebx
push ebx
call dword [sym.imp.ADVAPI32.dll_RegSetValueExW]
mov edi, ebx
mov dword [ebp - 0x38], ebx
mov esi, ebx
mov dword [ebp - 0x18], ebx
mov ecx, esi
mov ebx, edi
mov edi, dword [ebp - 0x18]
sar ebx, cl
mov eax, edi
mov ecx, 0x1007da98
and eax, ebx
cdq
push edx
push eax
call fcn.1000b132
inc edi
cmp edi, 0x385b
jl 0x10018b40
mov edi, dword [ebp - 0x38]
inc esi
push 0
pop ebx
cmp esi, 0x599d
jl 0x10018b34
inc edi
mov dword [ebp - 0x38], edi
cmp edi, 0x4b03
jl 0x10018b32
mov dword [ebp - 0x38], 2
mov dword [ebp - 4], 0xd
cmp dword [ebp - 0x3c], 0x2079
jge 0x10018bb9
mov edx, str.zgr_swrawekok_qrexxi_daisxhnnl_njt
mov ecx, 0x1007da98
call fcn.1000d503
jmp 0x10018bb9
or dword [ebp - 4], 0xffffffff
xor edx, edx
mov dword [ebp - 0x38], 0xc1c73b01
inc edx
mov byte [ebp - 0x25], bl
cmp byte [ebp - 0x25], 0
je 0x10018be0
push ebx
push 0x233a
push ebx
call dword [sym.imp.GDI32.dll_ExtCreateRegion]
xor edx, edx
inc edx
cmp dword [ebp - 0x20], ebx
jne 0x10018c3c
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x74]
mov eax, dword [ebp - 0x20]
push 4
pop ecx
sub ecx, eax
mov dword [ebp - 0x18], ecx
mov eax, dword [ebp - 0x40]
cmp edx, eax
mov eax, dword [ebp - 0x40]
sbb ecx, ecx
xor edx, edx
inc ecx
cmp ecx, eax
mov eax, dword [ebp - 0x18]
setle dl
xor ecx, ecx
cmp eax, edx
mov eax, dword [ebp - 0x70]
setg cl
xor edx, edx
cmp ecx, eax
setge dl
xor ecx, ecx
mov dword [ebp - 0x38], edx
mov edx, dword [ebp - 0x34]
imul edx, dword [ebp - 0x38]
mov eax, dword [ebp - 0x2c]
cmp edx, eax
setle cl
cmp ecx, 3
jle 0x10018c3c
xor esi, esi
mov eax, ebx
inc esi
jmp 0x10018c41
xor esi, esi
inc esi
mov eax, esi
mov dword [ebp - 0x20], eax
xor edx, edx
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x1c]
mov ecx, dword [ebp - 0x48]
mov eax, dword [ebp - 0x20]
cmp ecx, eax
setge dl
add edx, dword [ebp - 0x30]
imul edx, dword [ebp - 0x34]
mov dword [ebp - 0x2c], edx
inc dword [ebp - 0x70]
jmp 0x10018a28
mov dword [ebp - 0x38], 0x1185
cmp dword [ebp - 0x38], 0x149f
jle 0x10018cea
mov eax, ebx
mov dword [ebp - 0x18], ebx
mov edi, ebx
mov dword [ebp - 0x34], ebx
cdq
idiv edi
mov dword [ebp - 0x30], ebx
mov edi, ebx
mov eax, edx
mov dword [ebp - 0x48], eax
cdq
lea ecx, [ebp - 0x24c]
idiv edi
mov eax, edx
cdq
push edx
push eax
call fcn.10001a65
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x10018cad
mov eax, dword [eax]
push eax
call fcn.1004ad2c
pop ecx
push ebx
push esi
lea ecx, [ebp - 0x24c]
call fcn.1000b74b
mov eax, dword [ebp - 0x48]
inc edi
cmp edi, 0x19fb
jl 0x10018c90
mov edi, dword [ebp - 0x34]
mov eax, dword [ebp - 0x18]
inc edi
mov dword [ebp - 0x34], edi
cmp edi, 0x7a06
jl 0x10018c83
inc eax
mov dword [ebp - 0x18], eax
cmp eax, 0x161b
jl 0x10018c7e
mov byte [ebp - 0x25], bl
cmp dword [ebp - 0x38], 0xf7c
jge 0x10018d01
push str.xunqmw_lovr_siisrzgva_ikn_xnlnncv_vbwzma_gwb_zvtua_jbcmv_pymsjcwz_xxxlk_rmab
call fcn.1004ad2c
pop ecx
or dword [ebp - 4], 0xffffffff
cmp byte [ebp - 0x25], 0
je 0x10018d11
call dword [sym.imp.KERNEL32.dll_GetThreadLocale]
mov ecx, dword [ebp - 0x24]
movzx eax, byte [ebp + ecx - 0x6c]
dec ecx
add ecx, eax
lea edi, [eax + 1]
jmp 0x10018eb7
mov dword [ebp - 0x2c], 0xfffffffd
mov dword [ebp - 0x1c], 0xf6b34c2
mov dword [ebp - 0x3c], ebx
mov dword [ebp - 0x38], 0xfffffffa
mov dword [ebp - 0x34], 0x471b2a12
mov dword [ebp - 0x18], ebx
jmp 0x10018d59
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x98], 0xfffffffd
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], esi
jl 0x10018d48
mov eax, dword [ebp - 0x2c]
xor edx, edx
cmp eax, esi
setg dl
imul edx, dword [ebp - 0x2c]
mov ecx, dword [ebp - 0x2c]
dec ecx
neg ecx
sbb ecx, ecx
xor eax, eax
neg ecx
cmp ecx, edx
setle al
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0x20], 0x552b8909
mov dword [ebp - 0x18], ebx
jmp 0x10018da0
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0xe8], 0xfffe
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 2
jl 0x10018d8f
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x3c]
mov eax, dword [ebp - 0x20]
cmp dword [ebp - 0x1c], eax
jne 0x10018db7
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x38]
mov dword [ebp - 0xe4], 0x8fa
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0xe8]
mov dword [ebp - 0x34], eax
cmp dword [ebp - 0x34], ebx
je 0x10018ded
mov eax, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x38]
imul eax, dword [ebp - 0x1c], 0xf9da
test eax, eax
jne 0x10018e08
mov edx, ebx
cmp dword [ebp - 0xe4], ebx
je 0x10018e0a
mov edx, esi
mov eax, dword [ebp - 0x20]
xor ecx, ecx
cmp edx, eax
setl cl
xor eax, eax
cmp ecx, 0xfffffff9
setne al
xor edx, edx
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0xe4]
mov ecx, dword [ebp - 0x3c]
mov eax, dword [ebp - 0x2c]
cmp eax, ecx
mov eax, dword [ebp - 0x24]
setne dl
mov dword [ebp - 0x20], edx
movzx edx, byte [ebp + eax - 0x6b]
sub eax, edi
movzx eax, byte [ebp + eax - 0x6e]
movzx eax, word [ebp + eax*2 - 0x150]
mov ecx, eax
and eax, edx
or ecx, edx
sub ecx, eax
mov eax, dword [ebp - 0x24]
movzx eax, byte [ebp + eax - 0x6c]
mov word [ebp + eax*2 - 0x150], cx
mov dword [ebp - 0x20], 0xfffffffd
mov dword [ebp - 0x18], ebx
jmp 0x10018e84
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x1cc], 0xc93b4e1a
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 3
jl 0x10018e73
mov dword [ebp - 0x20], 2
cmp dword [ebp - 0x20], ebx
jl 0x10018eac
mov eax, dword [ebp - 0x20]
cmp dword [ebp + eax*4 - 0x1cc], ebx
jne 0x10018eac
cmp dword [ebp - 0x20], ebx
jne 0x10018eac
dec dword [ebp - 0x20]
jns 0x10018e96
mov eax, dword [ebp - 0x20]
mov edi, ebx
mov ecx, dword [ebp - 0x24]
mov dword [ebp - 0x20], eax
add ecx, 2
jmp 0x100189d8
mov dword [ebp - 0x18], 0x4e064826
mov dword [ebp - 0x30], 0x412df3d3
mov byte [ebp - 0x25], bl
cmp byte [ebp - 0x25], 0
je 0x10018edd
push ebx
call dword [sym.imp.GDI32.dll_CreateFontIndirectA]
mov dword [ebp - 0x18], ebx
jmp 0x10018f7a
push dword [ebp - 0x98]
movdqa xmm0, xmmword [0x10070f20]
lea eax, [ebp - 0x1b0]
push eax
lea eax, [ebp - 0x1c0]
mov dword [ebp - 0x94], ebx
push eax
push ebx
lea ecx, [ebp - 0x94]
mov dword [ebp - 0x90], ebx
movdqu xmmword [ebp - 0x1c0], xmm0
mov dword [ebp - 0x8c], ebx
call fcn.1000da84
mov dword [ebp - 0x24], 0xffffffff
mov dword [ebp - 0x24], ebx
cmp dword [ebp - 0x24], 3
jg 0x10018f50
mov ecx, dword [ebp - 0x94]
mov eax, dword [ebp - 0x24]
mov eax, dword [ecx + 0xc]
inc eax
mov dword [ebp - 0x30], eax
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], 3
jle 0x10018f3d
cmp dword [ebp - 0x94], 0
je 0x10018f77
push dword [ebp - 0x94]
call fcn.1004aef9
pop ecx
mov dword [ebp - 0x94], ebx
mov dword [ebp - 0x90], ebx
mov dword [ebp - 0x8c], ebx
dec dword [ebp - 0x18]
cmp dword [ebp - 0x18], 0xfffffff1
jle 0x10018ee5
xor eax, eax
mov dword [ebp - 0x170], ebx
push 7
mov word [ebp - 0x142], ax
lea ecx, [ebp - 0x180]
pop esi
mov word [ebp - 0x180], ax
lea eax, [ebp - 0x150]
push eax
mov dword [ebp - 0x16c], esi
call fcn.1000b837
push dword [ebp - 0x110]
mov dword [ebp - 4], 0x11
lea edi, [ebp - 0x150]
xor eax, eax
lea ecx, [ebp - 0x1a0]
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
call fcn.1000b247
mov byte [ebp - 4], 0x12
lea eax, [ebp - 0x1a0]
push dword [ebp - 0x98]
movdqa xmm0, xmmword [0x10070f00]
lea ecx, [ebp - 0xd4]
push eax
lea eax, [ebp - 0x1b0]
mov dword [ebp - 0xd4], ebx
push eax
push ebx
movdqu xmmword [ebp - 0x1b0], xmm0
mov dword [ebp - 0xd0], ebx
mov dword [ebp - 0xcc], ebx
call fcn.1000da84
xor ecx, ecx
inc ecx
mov dword [ebp - 0x30], ecx
mov dword [ebp - 0x30], 0xb2ab76d6
mov dword [ebp - 0x30], 0xaccb24ce
mov dword [ebp - 0x30], 0x3f7e813a
mov dword [ebp - 0x30], 0xffffffff
mov dword [ebp - 0x30], esi
mov dword [ebp - 0x30], ecx
mov dword [ebp - 0x30], ebx
mov dword [ebp - 0x30], ebx
mov dword [ebp - 0x30], 0xc064b57d
mov dword [ebp - 0x30], 0x7762
mov dword [ebp - 0x18], ebx
jmp 0x10019071
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x188], 0x62d7bc35
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], ecx
jl 0x10019060
mov eax, dword [ebp - 0xd4]
push eax
mov byte [ebp - 4], 0x12
mov dword [eax], 0xfffffff7
call fcn.1004aef9
mov dword [ebp - 0xd4], ebx
xor edx, edx
mov dword [ebp - 0xd0], ebx
inc edx
mov dword [ebp - 0xcc], ebx
mov dword [ebp - 0x20], 0x7c203980
mov dword [ebp - 0x2c], 0xffff
mov dword [ebp - 0x24], 0xffffffff
mov dword [ebp - 0x1c], 0x5205300c
mov dword [ebp - 0x34], ebx
mov dword [ebp - 0x34], 0xffffffff
pop ecx
mov dword [ebp - 0x18], ebx
jmp 0x100190db
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x44], 0xfbfc75da
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], edx
jl 0x100190cd
mov eax, dword [ebp - 0x20]
cmp dword [ebp - 0x20], ebx
jne 0x10019102
mov eax, dword [ebp - 0x2c]
mov ecx, ebx
mov eax, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x2c]
cmp dword [ebp - 0x20], 0x6c1dfe93
jle 0x10019104
mov ecx, edx
mov eax, dword [ebp - 0x24]
add eax, ecx
cmp eax, dword [ebp - 0x24]
jge 0x10019111
mov eax, dword [ebp - 0x24]
mov ecx, dword [ebp - 0x2c]
mov dword [ebp - 0x44], ecx
mov eax, dword [ebp - 0x24]
sub ecx, eax
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 0x1c], ebx
jmp 0x100191e4
mov dword [ebp - 0x18], ebx
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp + eax*4 - 0x44]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp + eax*4 - 0x44]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp + eax*4 - 0x44]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp + eax*4 - 0x44]
mov dword [ebp - 0x18], edx
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp + eax*4 - 0x44]
cmp dword [ebp - 0x18], eax
jge 0x100191d0
mov dword [ebp - 0x24], 0xfffffff7
cmp dword [ebp - 0x24], ebx
jne 0x10019168
cmp dword [ebp - 0x44], ebx
jne 0x10019168
mov edx, ebx
imul eax, dword [ebp - 0x18], 0x4560
xor ecx, ecx
cmp eax, edx
mov eax, dword [ebp - 0x1c]
setne cl
sub ecx, dword [ebp + eax*4 - 0x44]
neg ecx
sbb ecx, ecx
xor edx, edx
inc ecx
mov dword [ebp - 0x34], ecx
mov eax, dword [ebp - 0x34]
mov dword [ebp - 0x34], eax
mov ecx, dword [ebp - 0x24]
mov eax, dword [ebp - 0x34]
cmp eax, ecx
mov eax, dword [ebp - 0x1c]
setne dl
add edx, dword [ebp + eax*4 - 0x44]
mov eax, dword [ebp - 0x24]
imul edx, edx, 0xbc8c
neg edx
sbb edx, edx
xor ecx, ecx
inc edx
cmp edx, eax
setle cl
xor edx, edx
add ecx, dword [ebp - 0x44]
mov eax, dword [ebp - 0x1c]
cmp ecx, 6
setl dl
mov eax, dword [ebp + eax*4 - 0x44]
add eax, edx
xor edx, edx
mov dword [ebp - 0x44], eax
inc edx
jmp 0x100191e1
mov dword [ebp - 0x30], 0x38d03d8e
mov dword [ebp - 0x30], ebx
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp + eax*4 - 0x44]
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], ebx
jle 0x10019127
push 0x5c
pop eax
push 2
mov byte [ebp - 0x4c], bl
mov ecx, ebx
mov byte [ebp - 0x4b], 0x4f
mov byte [ebp - 0x4a], dl
mov byte [ebp - 0x49], 0xc5
mov word [ebp - 0x50], ax
pop esi
cmp esi, 2
jne 0x10019210
push esi
pop ecx
jmp 0x10019237
movzx edx, byte [ebp + esi - 0x4b]
mov eax, esi
sub eax, ecx
movzx eax, byte [ebp + eax - 0x4e]
movzx eax, word [ebp + eax*2 - 0x50]
mov ecx, eax
and eax, edx
or ecx, edx
sub ecx, eax
movzx eax, byte [ebp + esi - 0x4c]
mov word [ebp + eax*2 - 0x50], cx
mov ecx, ebx
add esi, 2
cmp esi, 4
jb 0x10019207
xor eax, eax
lea ecx, [ebp - 0x10c]
mov word [ebp - 0x4e], ax
xor esi, esi
inc esi
mov dword [ebp - 0x2c], 0xda8e97ee
mov dword [ebp - 0x20], esi
mov dword [ebp - 0x24], 0x534bf8f0
push 2
call fcn.1000b34a
mov dword [ebp - 0x18], ebx
jmp 0x1001927e
mov ecx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x10c]
mov dword [eax + ecx*4], 0x53b1dab5
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 2
jl 0x1001926b
mov eax, dword [ebp - 0x2c]
xor ecx, ecx
mov eax, dword [ebp - 0x2c]
cmp eax, 0x8c66
setge cl
mov dword [ebp - 0x2c], ecx
mov eax, dword [ebp - 0x2c]
mov dword [ebp - 0x20], eax
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x24], eax
mov dword [ebp - 0x20], ebx
jmp 0x10019334
mov dword [ebp - 0x38], 0x531d14cd
mov dword [ebp - 0x34], ebx
mov dword [ebp - 0x24], ebx
jmp 0x1001932b
mov dword [ebp - 0x48], 0xd6b6
mov dword [ebp - 0x18], 0x3203bd65
mov dword [ebp - 0x30], 0x39e6
mov byte [ebp - 0x25], bl
cmp byte [ebp - 0x25], 0
je 0x100192df
push ebx
call dword [sym.imp.GDI32.dll_CreateBitmapIndirect]
mov eax, dword [ebp - 0x18]
xor edx, edx
mov ecx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x2c]
cmp eax, ecx
setg dl
mov dword [ebp - 0x38], edx
xor edx, edx
mov eax, dword [ebp - 0x30]
test eax, eax
sets dl
sub edx, dword [ebp - 0x34]
mov eax, dword [ebp - 0x34]
neg edx
sbb edx, edx
xor ecx, ecx
inc edx
cmp edx, eax
setg cl
xor edx, edx
add ecx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x38]
cmp eax, ecx
mov eax, dword [ebp - 0x48]
setne dl
xor ecx, ecx
cmp eax, edx
setne cl
mov dword [ebp - 0x18], ecx
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], 0x15
jne 0x100192ba
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], 8
jg 0x100192ab
cmp dword [ebp - 0x10c], 0
je 0x10019365
push dword [ebp - 0x10c]
call fcn.1004aef9
pop ecx
mov dword [ebp - 0x10c], ebx
mov dword [ebp - 0x108], ebx
mov dword [ebp - 0x104], ebx
xor eax, eax
mov dword [ebp - 0x12c], 7
mov word [ebp - 0x140], ax
lea ecx, [ebp - 0x140]
lea eax, [ebp - 0x50]
mov dword [ebp - 0x130], ebx
push eax
call fcn.1000b837
mov byte [ebp - 4], 0x14
mov dword [ebp - 0x50], ebx
mov dword [ebp - 0x24], 0x2c29a3df
mov dword [ebp - 0x20], 0xb37b0480
mov dword [ebp - 0x30], ebx
mov dword [ebp - 0x18], ebx
jmp 0x100193b8
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x7c], 0xf1124f01
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], esi
jl 0x100193aa
mov dword [ebp - 0x24], ebx
cmp dword [ebp - 0x24], ebx
jl 0x100193e4
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp + eax*4 - 0x7c]
mov ecx, dword [ebp - 0x7c]
mov eax, dword [ebp - 0x24]
mov dword [ebp + eax*4 - 0x7c], ecx
mov dword [ebp - 0x20], ecx
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x30], eax
dec dword [ebp - 0x24]
jns 0x100193c5
mov dword [ebp - 0x20], ebx
jmp 0x10019410
mov byte [ebp - 0x25], bl
cmp byte [ebp - 0x25], 0
je 0x1001940d
push ebx
push 0x1e93
push 0x1312
push 0x1fcd
push 0x99e
call dword [sym.imp.USER32.dll_SetScrollRange]
dec dword [ebp - 0x20]
cmp dword [ebp - 0x20], 0xfffffffa
jl 0x100193e9
push 0x5f
pop eax
push 2
mov byte [ebp - 0x5c], bl
mov ecx, ebx
mov word [ebp - 0x5b], 0x478
mov byte [ebp - 0x59], bl
mov word [ebp - 0x58], 0x5e2d
mov byte [ebp - 0x56], 0xbb
mov word [ebp - 0x54], ax
pop edi
cmp edi, 2
jne 0x10019444
push 5
pop ecx
push ecx
pop edi
jmp 0x1001946b
movzx edx, byte [ebp + edi - 0x5b]
mov eax, edi
sub eax, ecx
movzx eax, byte [ebp + eax - 0x5e]
movzx eax, word [ebp + eax*2 - 0x54]
mov ecx, eax
and eax, edx
or ecx, edx
sub ecx, eax
movzx eax, byte [ebp + edi - 0x5c]
mov word [ebp + eax*2 - 0x54], cx
mov ecx, ebx
add edi, 2
cmp edi, 7
jb 0x10019438
xor eax, eax
mov dword [ebp - 0x154], 7
mov word [ebp - 0x52], ax
lea ecx, [ebp - 0x168]
mov word [ebp - 0x168], ax
lea eax, [ebp - 0x54]
push eax
mov dword [ebp - 0x158], ebx
call fcn.1000b837
mov byte [ebp - 4], 0x15
lea ecx, [ebp - 0xc8]
mov dword [ebp - 0x20], 9
mov dword [ebp - 0x34], 0x1d8f8f57
mov dword [ebp - 0x2c], ebx
mov dword [ebp - 0x34], 0x1c77dcda
mov dword [ebp - 0x18], 0xfffc
mov dword [ebp - 0x1c], 0xc8af9534
mov dword [ebp - 0x24], 0x718b
mov dword [ebp - 0x30], 0xd0336d06
mov dword [ebp - 0x48], 3
mov dword [ebp - 0x48], esi
push esi
call fcn.1000b34a
mov byte [ebp - 4], 0x16
xor edx, edx
mov dword [ebp - 0x3c], 0xfffffffe
inc edx
mov dword [ebp - 0x38], edx
mov dword [ebp - 0x2c], ebx
jmp 0x10019516
mov ecx, dword [ebp - 0x2c]
mov eax, dword [ebp - 0xc8]
mov dword [eax + ecx*4], 0xd900d296
inc dword [ebp - 0x2c]
cmp dword [ebp - 0x2c], edx
jl 0x10019503
mov dword [ebp - 0x2c], ebx
jmp 0x10019531
mov eax, dword [ebp - 0x2c]
mov dword [ebp + eax*4 - 0x128], 0x86225270
inc dword [ebp - 0x2c]
cmp dword [ebp - 0x2c], 2
jl 0x10019520
cmp dword [ebp - 0x20], ebx
jne 0x1001953f
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x2c], edx
xor edx, edx
mov eax, dword [ebp - 0x2c]
mov dword [ebp - 0x34], eax
mov ecx, dword [ebp - 0x34]
mov eax, dword [ebp - 0x20]
cmp ecx, eax
setg dl
xor ecx, ecx
sub edx, dword [ebp - 0x18]
cmp edx, 0xffffffff
setle cl
xor eax, eax
imul ecx, dword [ebp - 0x18]
cmp ecx, 0x31966c47
setl al
sub eax, dword [ebp - 0x20]
jne 0x10019580
cmp dword [ebp - 0x2c], ebx
jne 0x10019580
xor esi, esi
mov ecx, ebx
inc esi
jmp 0x10019585
xor esi, esi
inc esi
mov ecx, esi
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x34], eax
xor eax, eax
cmp ecx, 0xd069
setg al
xor edx, edx
mov dword [ebp - 0x1c], eax
mov ecx, dword [ebp - 0x24]
add ecx, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x24]
cmp ecx, eax
mov eax, dword [ebp - 0x18]
setle dl
xor ecx, ecx
cmp edx, eax
mov eax, dword [ebp - 0x30]
setle cl
mov dword [ebp - 0x48], ecx
xor ecx, ecx
cmp dword [ebp - 0x48], eax
setge cl
cmp dword [ebp - 0x34], ecx
jle 0x100195cd
mov edi, ebx
cmp dword [ebp - 0x2c], ebx
je 0x100195cf
mov edi, esi
mov edx, dword [ebp - 0x20]
xor ecx, ecx
imul edx, dword [ebp - 0x20]
mov eax, dword [ebp - 0x24]
cmp edi, eax
setg cl
cmp edx, ecx
jne 0x100196fb
mov dword [ebp - 0x30], esi
mov eax, 0xa6f57610
mov dword [ebp - 0x30], 0x5f93be41
mov dword [ebp - 0x30], 0xfffffff9
mov dword [ebp - 0x30], 0x11771b70
mov dword [ebp - 0x30], 0xffffffff
mov dword [ebp - 0x30], 0xd734895c
mov dword [ebp - 0x30], 0xfffffff8
mov dword [ebp - 0x30], ebx
mov dword [ebp - 0x30], esi
mov dword [ebp - 0x30], 0xdc630de2
mov dword [ebp - 0x30], 4
mov dword [ebp - 0x30], 0xfffffffb
mov dword [ebp - 0x30], ebx
mov dword [ebp - 0x30], ebx
mov dword [ebp - 0xa8], eax
mov dword [ebp - 0xa4], eax
mov dword [ebp - 0xa0], eax
mov dword [ebp - 0x9c], eax
mov dword [ebp - 0x3c], 0x752c
cmp dword [ebp - 0x3c], 0x77e8
jle 0x100196af
mov dword [ebp - 0x18], ebx
mov edi, ebx
mov ecx, ebx
mov dword [ebp - 0x38], 0x7f75
mov ebx, dword [ebp - 0x18]
mov dword [ebp - 0x34], ecx
mov eax, ebx
and eax, ecx
mov ecx, 0x1007da98
cdq
push edx
push eax
call fcn.1000b132
mov ecx, dword [ebp - 0x34]
add ecx, edi
dec dword [ebp - 0x38]
mov dword [ebp - 0x34], ecx
jne 0x10019677
inc edi
push 0
pop ebx
cmp edi, 0x7cf5
jl 0x10019668
mov eax, dword [ebp - 0x18]
inc eax
mov dword [ebp - 0x18], eax
cmp eax, 0x37c7
jl 0x10019666
mov byte [ebp - 4], 0x17
cmp dword [ebp - 0x3c], 0x72e3
jge 0x100196ec
mov edx, str.nprabucq_khsq_pfqy_fzxq_lzmvxa_nmh_xgriupe_xdcc_dmj_ewmg_tlgh_poticerzl
mov ecx, 0x1007da98
call fcn.1000d503
jmp 0x100196ec
mov dword [ebp - 4], 0x16
inc dword [ebp - 0x128]
jmp 0x1001976b
mov dword [ebp - 0x18], 0x715b7d07
mov dword [ebp - 0x2c], ebx
jmp 0x10019765
mov dword [ebp - 0x24], 6
mov dword [ebp - 0x30], esi
mov dword [ebp - 0x48], ebx
cmp dword [ebp - 0x24], ebx
jne 0x10019725
mov eax, dword [ebp - 0xc8]
cmp dword [eax], ebx
mov eax, ebx
je 0x10019727
mov eax, esi
mov edx, dword [ebp - 0x24]
imul edx, dword [ebp - 0x1c]
imul edx, eax
sub edx, dword [ebp - 0x18]
sub edx, 0x2536
add edx, dword [ebp - 0x24]
neg edx
sbb edx, edx
xor ecx, ecx
inc edx
sub edx, dword [ebp - 0x38]
imul edx, dword [ebp - 0x18]
imul edx, dword [ebp - 0x3c]
mov eax, dword [ebp - 0x18]
cmp edx, eax
mov eax, dword [ebp - 0x18]
setle cl
sub ecx, eax
sub ecx, dword [ebp - 0x30]
mov dword [ebp - 0x48], ecx
dec dword [ebp - 0x2c]
cmp dword [ebp - 0x2c], 0xfffffff0
jl 0x10019707
mov byte [ebp - 4], 0x15
cmp dword [ebp - 0xc8], 0
je 0x10019796
push dword [ebp - 0xc8]
call fcn.1004aef9
pop ecx
mov dword [ebp - 0xc8], ebx
mov dword [ebp - 0xc4], ebx
mov dword [ebp - 0xc0], ebx
mov dword [ebp - 0x54], ebx
lea ecx, [ebp - 0x100]
mov dword [ebp - 0x24], 0xfffffff8
push esi
call fcn.1000b34a
mov dword [ebp - 0x30], ebx
mov dword [ebp - 0x18], ebx
jmp 0x100197c3
mov ecx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x100]
mov dword [eax + ecx*4], ebx
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], esi
jl 0x100197b4
mov eax, dword [ebp - 0x24]
xor ecx, ecx
mov eax, dword [ebp - 0x24]
test eax, eax
mov eax, dword [ebp - 0x24]
setg cl
xor edx, edx
cmp eax, ecx
mov eax, dword [ebp - 0x24]
setg dl
xor ecx, ecx
cmp eax, edx
setg cl
mov dword [ebp - 0x30], ecx
mov byte [ebp - 0x25], bl
cmp byte [ebp - 0x25], 0
je 0x10019800
push ebx
push ebx
push ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_GetThreadTimes]
cmp dword [ebp - 0x100], 0
je 0x10019827
push dword [ebp - 0x100]
call fcn.1004aef9
pop ecx
mov dword [ebp - 0x100], ebx
mov dword [ebp - 0xfc], ebx
mov dword [ebp - 0xf8], ebx
push dword [ebp - 0x130]
cmp dword [ebp - 0x12c], 8
lea eax, [ebp - 0x140]
push ebx
cmovae eax, dword [ebp - 0x140]
lea ecx, [ebp - 0x1a0]
push eax
call fcn.10013591
cmp eax, 0xffffffff
je 0x1001986c
push 0xffffffffffffffff
push ebx
lea ecx, [ebp - 0x168]
push ecx
push esi
push eax
lea ecx, [ebp - 0x1a0]
call fcn.10013baa
jmp 0x10019827
mov dword [ebp - 0x1c], ebx
mov dword [ebp - 0x34], 0xfc35327
mov dword [ebp - 0x2c], 0x3efe35fe
mov dword [ebp - 0x24], 0xe9d070fe
mov dword [ebp - 0x18], ebx
jmp 0x1001989a
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x120], 0x760fc5c2
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], esi
jl 0x10019889
mov dword [ebp - 0x1c], ebx
jmp 0x100199ba
mov dword [ebp - 0x20], 0xfffffffd
xor edx, edx
mov ecx, dword [ebp - 0x20]
mov eax, dword [ebp - 0x1c]
cmp eax, ecx
setle dl
imul edx, dword [ebp - 0x1c]
sub edx, 0xa056
jne 0x100198ca
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x20]
imul eax, dword [ebp - 0x1c], 0x562b
test eax, eax
je 0x100199a3
mov dword [ebp - 0x18], 0xe2bf
mov eax, dword [ebp - 0x2c]
neg eax
sbb eax, eax
neg eax
imul eax, eax, 0xb6a6
test eax, eax
je 0x10019915
mov eax, esi
cmp dword [ebp - 0x20], ebx
jne 0x10019917
mov eax, ebx
or ecx, 0xffffffff
mov dword [ebp - 0x34], 0xffff
sub ecx, eax
xor edx, edx
mov eax, dword [ebp - 0x34]
cmp eax, ecx
setle dl
sub edx, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x2c]
neg edx
sbb edx, edx
xor ecx, ecx
inc edx
neg edx
cmp edx, eax
setg cl
sub ecx, dword [ebp - 0x20]
mov eax, dword [ebp - 0x18]
neg ecx
sbb ecx, ecx
xor edx, edx
inc ecx
cmp eax, ecx
mov eax, dword [ebp - 0x20]
setle dl
xor ecx, ecx
cmp eax, edx
setge cl
mov dword [ebp - 0x24], ecx
mov dword [ebp - 0x2c], ebx
jmp 0x1001999c
mov dword [ebp - 0x18], ebx
jmp 0x1001998a
mov dword [ebp - 0x24], ebx
jmp 0x10019982
mov byte [ebp - 0x25], bl
cmp byte [ebp - 0x25], 0
je 0x1001997f
push ebx
call dword [sym.imp.KERNEL32.dll_SetEndOfFile]
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], ebx
jle 0x1001996f
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], ebx
jle 0x1001996a
mov eax, dword [ebp - 0x2c]
mov eax, dword [ebp + eax*4 - 0x120]
inc dword [ebp - 0x2c]
cmp dword [ebp - 0x2c], ebx
jle 0x10019965
jmp 0x100199b7
mov byte [ebp - 0x25], bl
cmp byte [ebp - 0x25], 0
je 0x100199b7
push 0x15aa
call dword [sym.imp.KERNEL32.dll_Sleep]
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 7
jge 0x100198a7
mov ecx, dword [ebp - 0xb0]
lea eax, [ebp - 0x1a0]
push eax
lea edx, [ebp - 0x180]
call fcn.10019c7d
pop ecx
push ebx
push esi
lea ecx, [ebp - 0x168]
call fcn.1000b959
push ebx
push esi
lea ecx, [ebp - 0x140]
call fcn.1000b959
push ebx
push esi
lea ecx, [ebp - 0x1a0]
call fcn.1000b959
push ebx
push esi
lea ecx, [ebp - 0x180]
call fcn.1000b959
mov ecx, dword [ebp - 0xc]
mov eax, dword [ebp - 0xb0]
pop edi
pop esi
mov dword fs:[0], ecx
pop ebx
mov esp, ebp
pop ebp
ret