Function at 0x100447bd
Capabilities:
Check os version
Encode data using xor

Disassembly:
mov eax, 0x10064e4e
call fcn.10062d88
sub esp, 0x310
push ebx
push esi
push edi
mov dword [ebp - 0x10], esp
xor ebx, ebx
mov dword [ebp - 0xa8], ecx
lea ecx, [ebp - 0x6c]
push 1
mov dword [ebp - 0x108], edx
mov dword [ebp - 0x234], ebx
call fcn.10005c0e
push 1
lea ecx, [ebp - 0x114]
mov dword [ebp - 4], ebx
call fcn.10005c0e
push 2
pop edi
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x1f0]
mov dword [ebp - 0x2c], 0x6ed55c59
push edi
call fcn.10005c0e
xor edx, edx
mov dword [ebp - 0x18], 0xffffffff
inc edx
mov dword [ebp - 0x24], edx
mov dword [ebp - 0x1c], ebx
jmp 0x1004483e
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0x98], 0xffffffff
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 3
jl 0x1004482d
mov dword [ebp - 0x1c], ebx
jmp 0x10044855
mov ecx, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x6c]
mov dword [eax + ecx*4], edx
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], edx
jl 0x10044849
mov dword [ebp - 0x1c], ebx
jmp 0x10044872
mov ecx, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x114]
mov dword [eax + ecx*4], 0x38f58595
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], edx
jl 0x1004485f
mov dword [ebp - 0x1c], ebx
jmp 0x1004488b
mov ecx, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x1f0]
mov dword [eax + ecx*4], ebx
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], edi
jl 0x1004487c
mov ecx, dword [ebp - 0x6c]
mov esi, dword [ebp - 0x1f0]
mov dword [ecx], ebx
mov eax, dword [ecx]
xor edx, edx
mov dword [ebp - 0x18], 0x8112def9
mov dword [ebp - 0x30], 0xddac0faa
mov dword [ebp - 0x18], eax
mov eax, dword [ecx]
push 0xfffffffffffffffb
mov eax, dword [ebp + eax*4 - 0x98]
mov dword [ebp - 0x30], eax
mov eax, dword [ebp - 0x6c]
mov ecx, dword [eax]
pop eax
sub eax, ecx
cmp eax, ecx
mov eax, dword [ebp - 0x30]
setl dl
imul eax, dword [ebp - 0x18]
xor ecx, ecx
cmp eax, edx
mov eax, dword [ebp - 0x114]
setge cl
mov dword [eax], ecx
mov ecx, 0xfff6
mov eax, dword [ebp - 0x6c]
mov eax, dword [eax]
mov eax, dword [ebp + eax*4 - 0x98]
mov eax, dword [ebp - 0x6c]
mov eax, dword [eax]
mov eax, dword [ebp + eax*4 - 0x98]
mov eax, dword [ebp - 0x6c]
mov eax, dword [eax]
mov eax, dword [ebp + eax*4 - 0x98]
mov eax, dword [ebp - 0x90]
mov eax, dword [ebp - 0x6c]
mov eax, dword [eax]
mov eax, dword [ebp + eax*4 - 0x98]
cmp ecx, eax
sbb eax, eax
neg eax
mov dword [ebp - 0x2c], eax
jne 0x10044930
cmp dword [ebp - 0x18], ebx
jne 0x10044930
mov ecx, ebx
jmp 0x10044933
xor ecx, ecx
inc ecx
xor eax, eax
mov dword [esi + 4], ecx
cmp ecx, 0xfffffffc
setle al
xor ecx, ecx
mov dword [ebp - 0x18], eax
mov eax, dword [ebp - 0x6c]
mov eax, dword [eax]
mov eax, dword [ebp + eax*4 - 0x98]
cmp eax, 1
setl cl
sub ecx, 0xc7127b1a
neg ecx
sbb ecx, ecx
inc ecx
mov dword [ebp - 0x24], ecx
mov ecx, dword [ebp - 0x6c]
inc dword [ecx]
cmp dword [ecx], edi
jle 0x1004489b
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0x90]
mov ecx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x114]
inc ecx
mov esi, dword [esi + 4]
mov edx, dword [eax]
mov eax, dword [ebp - 0x18]
add edx, ecx
xor ecx, ecx
cmp edx, eax
sete cl
xor edx, edx
cmp esi, ecx
lea ecx, [ebp - 0x1f0]
sete dl
sub edx, esi
sub edx, dword [ebp - 0x24]
mov eax, dword [ebp - 0x6c]
imul edx, dword [eax]
mov dword [eax], edx
mov eax, dword [ebp - 0x18]
dec eax
neg eax
sbb eax, eax
neg eax
mov dword [ebp - 0x24], eax
call fcn.10005c91
lea ecx, [ebp - 0x114]
call fcn.10005c91
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x6c]
call fcn.10005c91
mov dword [ebp - 0x18], 7
lea ecx, [ebp - 0x19c]
push 4
call fcn.10005c0e
mov dword [ebp - 0x1c], ebx
jmp 0x10044a01
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0x288], 1
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 3
jl 0x100449f0
mov dword [ebp - 0x1c], ebx
jmp 0x10044a1b
mov ecx, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x19c]
mov dword [eax + ecx*4], ebx
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 4
jl 0x10044a0c
mov dword [ebp - 0x18], ebx
cmp dword [ebp - 0x18], edi
jg 0x10044a3e
mov eax, dword [ebp - 0x19c]
mov dword [eax + 8], 1
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], edi
jle 0x10044a2f
lea ecx, [ebp - 0x19c]
call fcn.10005c91
push 2
pop ecx
push 0x47
pop eax
mov dword [ebp - 0x60], 0x1b064f00
mov byte [ebp - 0x5c], cl
mov dword [ebp - 0x5b], 0x30e0433
mov dword [ebp - 0x57], 0x50e0103
mov byte [ebp - 0x53], bl
mov word [ebp - 0x178], ax
mov dword [ebp - 0x18], 1
mov dword [ebp - 0x18], ebx
jmp 0x10044a8e
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x1d8], 0x7117
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 3
jl 0x10044a7d
mov dword [ebp - 0x18], ecx
cmp dword [ebp - 0x18], ebx
jl 0x10044b2f
mov dword [ebp - 0x24], 0xffffffff
mov dword [ebp - 0x2c], 1
mov dword [ebp - 0x24], ebx
jmp 0x10044b21
mov dword [ebp - 0x28], 0xb363f9e9
mov dword [ebp - 0x28], ecx
cmp dword [ebp - 0x28], ebx
jl 0x10044adc
mov byte [ebp - 0x1d], bl
cmp byte [ebp - 0x1d], 0
je 0x10044ad7
push ebx
push 0xdb9
call dword [sym.imp.USER32.dll_GetWindowPlacement]
dec dword [ebp - 0x28]
jns 0x10044ac2
mov eax, dword [ebp - 0x18]
xor edx, edx
push 2
mov eax, dword [ebp + eax*4 - 0x1d8]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp + eax*4 - 0x1d8]
mov eax, dword [ebp - 0x24]
mov ecx, dword [ebp + eax*4 - 0x1d8]
mov eax, dword [ebp - 0x24]
cmp ecx, eax
setl dl
cmp edx, 0x8593f9be
sbb eax, eax
xor ecx, ecx
inc eax
cmp eax, 1
setg cl
mov dword [ebp - 0x2c], ecx
inc dword [ebp - 0x24]
pop ecx
cmp dword [ebp - 0x24], ecx
jle 0x10044ab3
dec dword [ebp - 0x18]
jns 0x10044aa0
push 2
mov esi, ecx
pop edi
movzx eax, byte [ebp + esi - 0x62]
movzx edx, byte [ebp + esi - 0x5f]
mov ecx, edx
movzx eax, word [ebp + eax*2 - 0x178]
or ecx, eax
and edx, eax
movzx eax, byte [ebp + esi - 0x60]
sub ecx, edx
add esi, edi
mov word [ebp + eax*2 - 0x178], cx
cmp esi, 0xe
jb 0x10044b34
mov dword [ebp - 0x18], 0x53b26bdd
lea ecx, [ebp - 0x8c]
push edi
call fcn.10005c0e
mov dword [ebp - 0x38], ebx
mov dword [ebp - 0x18], ebx
jmp 0x10044b90
mov ecx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x8c]
mov dword [eax + ecx*4], 0xfffffff7
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], edi
jl 0x10044b7d
mov dword [ebp - 0x18], 0xfffffffe
jmp 0x10044d89
mov dword [ebp - 0x1c], 0xfffffffb
mov dword [ebp - 0x2c], ebx
mov dword [ebp - 0x24], 0xfffffff7
mov dword [ebp - 0x30], 0x7609fa85
mov dword [ebp - 0x28], 0xa67606e8
mov dword [ebp - 0x44], 0xf05d
mov byte [ebp - 0x1d], bl
cmp byte [ebp - 0x1d], 0
je 0x10044bdc
push ebx
push 0x14c5
call dword [sym.imp.GDI32.dll_RectVisible]
mov dword [ebp - 0x1c], 1
cmp dword [ebp - 0x1c], ebx
jl 0x10044d86
mov ecx, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x8c]
imul eax, dword [eax + ecx*4], 0x5b7f
test eax, eax
je 0x10044ca0
mov dword [ebp - 0x38], 0x389a9b8
mov byte [ebp - 0x1d], bl
cmp byte [ebp - 0x1d], 0
je 0x10044c28
push 0x1e1b
push ebx
push ebx
push ebx
push 0x92e
push ebx
call dword [sym.imp.KERNEL32.dll_GetDateFormatW]
cmp dword [ebp - 0x2c], ebx
jne 0x10044c58
mov ecx, dword [ebp - 0x1c]
xor edx, edx
mov eax, dword [ebp - 0x8c]
cmp dword [eax + ecx*4], ebx
mov dword [ebp - 0x24], 0x9e9d60a2
mov eax, dword [ebp - 0x24]
setne dl
xor ecx, ecx
cmp eax, edx
setl cl
cmp ecx, dword [ebp - 0x30]
je 0x10044c58
mov esi, ebx
jmp 0x10044c5b
xor esi, esi
inc esi
mov edx, dword [ebp - 0x1c]
xor ecx, ecx
mov eax, dword [ebp - 0x18]
cmp esi, eax
mov eax, dword [ebp - 0x8c]
setl cl
push 0
cmp dword [eax + edx*4], ecx
mov eax, dword [ebp - 0x1c]
pop edx
setge dl
xor ecx, ecx
cmp edx, eax
mov edx, dword [ebp - 0x30]
setg cl
add edx, 0xc2489102
add edx, ecx
mov ecx, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x8c]
mov dword [eax + ecx*4], edx
mov dword [ebp - 0x38], edx
jmp 0x10044d3d
mov dword [ebp - 0x34], 0xffff
mov dword [ebp - 0x38], 0xffffffff
mov byte [ebp - 0x1d], bl
cmp byte [ebp - 0x1d], 0
je 0x10044cbe
push ebx
call dword [sym.imp.KERNEL32.dll_GetFileType]
mov edx, dword [ebp - 0x1c]
mov ecx, dword [ebp - 0x34]
mov eax, dword [ebp - 0x8c]
mov dword [eax + edx*4], ecx
mov eax, dword [ebp - 0x24]
mov ecx, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x8c]
cmp dword [eax + ecx*4], 0xffffffff
jge 0x10044ce8
cmp dword [ebp - 0x18], ebx
jne 0x10044ce8
mov edx, ebx
jmp 0x10044ceb
xor edx, edx
inc edx
mov ecx, dword [ebp - 0x34]
mov eax, dword [ebp - 0x28]
add eax, edx
xor edx, edx
add ecx, eax
mov eax, dword [ebp - 0x8c]
cmp dword [eax + 4], ecx
mov eax, dword [ebp - 0x38]
setl dl
sub eax, edx
sub eax, dword [ebp - 0x1c]
neg eax
sbb eax, eax
xor edx, edx
inc eax
cmp eax, 0x5b0d69b4
mov eax, dword [ebp - 0x34]
setle dl
xor ecx, ecx
cmp edx, eax
setne cl
xor eax, eax
cmp ecx, 0x22955d48
setl al
xor ecx, ecx
cmp eax, 0x2f8dc70e
setne cl
dec ecx
mov dword [ebp - 0x38], ecx
mov dword [ebp - 0x28], ebx
jmp 0x10044d77
mov dword [ebp - 0x38], 0xaa473ecf
mov dword [ebp - 0x24], 1
cmp dword [ebp - 0x24], ebx
jl 0x10044d74
mov edx, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x8c]
mov eax, dword [ebp - 0x44]
mov ecx, dword [ecx + edx*4]
sub ecx, eax
add ecx, 0x7646c4c5
mov dword [ebp - 0x38], ecx
dec dword [ebp - 0x24]
jns 0x10044d55
inc dword [ebp - 0x28]
cmp dword [ebp - 0x28], 1
jle 0x10044d42
dec dword [ebp - 0x1c]
jns 0x10044bec
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 1
je 0x10044ba1
lea ecx, [ebp - 0x8c]
call fcn.10005c91
xor eax, eax
mov word [ebp - 0x16a], ax
mov dword [ebp - 0x18], 9
mov dword [ebp - 0x28], 0x78ab
mov dword [ebp - 0x24], 0x592c
cmp dword [ebp - 0x24], 0x5b17
jle 0x10044e50
mov ecx, ebx
mov dword [ebp - 0x18], ebx
mov edi, ebx
mov esi, ebx
mov edx, ebx
mov dword [ebp - 0x34], 0x49d
mov dword [ebp - 0x30], edx
mov eax, edi
and eax, edx
or eax, ecx
lea ecx, [ebp - 0x2dc]
cdq
push edx
push eax
call fcn.10001a6a
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x10044dfc
mov eax, dword [eax]
push eax
call fcn.1004da8c
pop ecx
push ebx
push 1
lea ecx, [ebp - 0x2dc]
call fcn.10006111
mov edx, dword [ebp - 0x30]
mov ecx, dword [ebp - 0x18]
add edx, esi
dec dword [ebp - 0x34]
mov dword [ebp - 0x30], edx
jne 0x10044dde
inc esi
cmp esi, 0x4ddd
jl 0x10044dd2
inc edi
cmp edi, 0x68f2
jl 0x10044dd0
inc ecx
mov dword [ebp - 0x18], ecx
cmp ecx, 0x2534
jl 0x10044dce
push 0x7c3
push 0x2701
push ebx
call dword [sym.imp.USER32.dll_OffsetRect]
mov dword [ebp - 0x1c], 0x1465
cmp dword [ebp - 0x24], 0x557b
jge 0x10044e6b
push str.kcb_alkzzpcn_zrd_plxfqslfs_rptmaxqas_uxxpxb_mfofsg_kfcij_xibeobggl
call fcn.1004da8c
pop ecx
or dword [ebp - 4], 0xffffffff
mov dword [ebp - 0x30], 0x6d9a
cmp dword [ebp - 0x30], 0x6f41
jle 0x10044ef9
mov dword [ebp - 0x34], ebx
mov ecx, ebx
mov dword [ebp - 0x18], ebx
mov edi, ebx
mov esi, ebx
mov eax, edi
cdq
idiv esi
mov eax, ecx
lea ecx, [ebp - 0x2a0]
sub eax, edx
or eax, dword [ebp - 0x34]
cdq
push edx
push eax
call fcn.10001a6a
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x10044eaf
mov eax, dword [eax]
push eax
call fcn.1004da8c
pop ecx
push ebx
push 1
lea ecx, [ebp - 0x2a0]
call fcn.10006111
mov ecx, dword [ebp - 0x18]
inc esi
cmp esi, 0x68b4
jl 0x10044e8b
inc edi
cmp edi, 0x21cb
jl 0x10044e89
inc ecx
mov dword [ebp - 0x18], ecx
cmp ecx, 0x320c
jl 0x10044e87
mov eax, dword [ebp - 0x34]
inc eax
mov dword [ebp - 0x34], eax
cmp eax, 0x32ee
jl 0x10044e82
call dword [sym.imp.KERNEL32.dll_GetUserDefaultLCID]
push 1
lea ecx, [ebp - 0xf8]
call fcn.10005c0e
cmp dword [ebp - 0x30], 0x6af2
jge 0x10044f1a
push str.ammychfc_jmbs_civdru
call fcn.1004da8c
pop ecx
mov dword [ebp - 4], 4
xor edx, edx
mov dword [ebp - 0x30], 5
inc edx
mov dword [ebp - 0x30], 0x29ac92d1
mov dword [ebp - 0x2c], 0xfffffff8
mov dword [ebp - 0x38], edx
mov dword [ebp - 0x18], ebx
jmp 0x10044f54
mov ecx, dword [ebp - 0x18]
mov eax, dword [ebp - 0xf8]
mov dword [eax + ecx*4], 0x4ec7e318
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], edx
jl 0x10044f41
mov dword [ebp - 0x18], ebx
jmp 0x10045055
push 2
lea ecx, [ebp - 0x138]
call fcn.10005c0e
mov dword [ebp - 0x34], 0x2477
mov dword [ebp - 0x30], 0xffffffff
mov dword [ebp - 0x24], ebx
jmp 0x10044f94
mov ecx, dword [ebp - 0x24]
mov eax, dword [ebp - 0x138]
mov dword [eax + ecx*4], 1
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], 2
jl 0x10044f81
cmp dword [ebp - 0x34], ebx
je 0x10045023
mov eax, dword [ebp - 0x28]
xor edx, edx
cmp eax, 0x7911
mov eax, dword [ebp - 0x138]
setle dl
xor ecx, ecx
imul edx, dword [eax]
mov eax, dword [ebp - 0x1c]
neg edx
cmp edx, eax
mov eax, dword [ebp - 0xf8]
setge cl
mov dword [eax], ecx
test ecx, ecx
je 0x10044fe0
mov eax, dword [ebp - 0x138]
cmp dword [eax], ebx
je 0x10044fe0
xor eax, eax
inc eax
jmp 0x10044fe2
mov eax, ebx
cmp eax, dword [ebp - 0x18]
jne 0x10044ff6
mov eax, dword [ebp - 0xf8]
cmp dword [eax], ebx
je 0x10044ff6
xor eax, eax
inc eax
jmp 0x10044ff8
mov eax, ebx
mov dword [ebp - 0x30], eax
xor ecx, ecx
mov eax, dword [ebp - 0x30]
cmp eax, 4
setl cl
xor eax, eax
cmp ecx, 0x6c8a81d5
setl al
imul eax, dword [ebp - 0x28]
add eax, dword [ebp - 0x34]
add eax, dword [ebp - 0x28]
neg eax
mov dword [ebp - 0x30], eax
mov eax, dword [ebp - 0x30]
mov eax, dword [ebp - 0xf8]
xor edx, edx
mov eax, dword [eax]
mov dword [ebp - 0x30], eax
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x30]
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x34]
mov eax, dword [ebp - 0x2c]
cmp eax, ecx
lea ecx, [ebp - 0x138]
setne dl
mov dword [ebp - 0x38], edx
call fcn.10005c91
dec dword [ebp - 0x18]
cmp dword [ebp - 0x18], 0xffffffe7
jge 0x10044f61
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xf8]
call fcn.10005c91
xor eax, eax
mov dword [ebp - 0x220], ebx
push 7
pop edi
mov word [ebp - 0x230], ax
lea ecx, [ebp - 0x230]
lea eax, [ebp - 0x178]
mov dword [ebp - 0x21c], edi
push eax
call fcn.100062b9
mov dword [ebp - 4], edi
mov esi, ebx
push 1
lea ecx, [ebp - 0x1fc]
call fcn.10005c0e
xor edx, edx
inc edx
mov dword [ebp - 0x18], edx
mov dword [ebp - 0x18], ebx
jmp 0x100450c8
mov ecx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x1fc]
mov dword [eax + ecx*4], 0xfffffffc
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], edx
jl 0x100450b5
mov dword [ebp - 0x18], ebx
jmp 0x100450e3
mov ecx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x1fc]
cmp dword [eax + ecx*4], ebx
jne 0x100450e8
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], ebx
jle 0x100450d2
lea ecx, [ebp - 0x1fc]
call fcn.10005c91
xor eax, eax
mov word [ebp + esi*2 - 0x178], ax
inc esi
cmp esi, 8
jb 0x1004509d
mov dword [ebp - 0x30], 0x58c3
cmp dword [ebp - 0x30], 0x5ace
jle 0x10045145
push ebx
push ebx
call dword [sym.imp.GDI32.dll_GetRgnBox]
mov esi, ebx
mov edi, ebx
mov eax, edi
mov ecx, 0x100808b8
xor eax, esi
cdq
push edx
push eax
call fcn.100059e4
inc edi
cmp edi, 0x5838
jl 0x1004511f
inc esi
cmp esi, 0x7684
jl 0x1004511d
push 7
pop edi
mov byte [ebp - 4], 8
cmp dword [ebp - 0x30], 0x5684
jge 0x10045161
mov edx, str.xko_zmcna_palxxx_kcwg_mjqfhnkka_fbhmnivh_lnwit_gmajh_ozh_wgl_mddn_vmhtsp
mov ecx, 0x100808b8
call fcn.10008020
mov dword [ebp - 4], edi
push 2
mov dword [ebp - 0x28], ebx
pop edi
mov dword [ebp - 0x18], ebx
jmp 0x100451a5
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x27c], 0xffffffff
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], edi
jl 0x10045194
mov dword [ebp - 0x28], ebx
cmp dword [ebp - 0x28], 0x10
jle 0x100451e3
mov eax, 0x9924
mov dword [ebp - 0x20c], eax
mov dword [ebp - 0x208], eax
mov dword [ebp - 0x204], eax
mov dword [ebp - 0x200], eax
mov dword [ebp - 0x208], 0xfffffff6
inc dword [ebp - 0x28]
cmp dword [ebp - 0x28], 0x10
jg 0x100451b8
mov dword [ebp - 0x28], 0x19
cmp dword [ebp - 0x28], edi
jle 0x10045380
push dword [ebp - 0xa8]
movdqa xmm0, xmmword [0x10072c40]
lea eax, [ebp - 0x264]
push eax
lea eax, [ebp - 0x274]
mov dword [ebp - 0x24], 0x8bfc4f27
push eax
mov dword [ebp - 0x3c], 0xb72b21a3
lea ecx, [ebp - 0xdc]
push ebx
movdqu xmmword [ebp - 0x274], xmm0
mov dword [ebp - 0xdc], ebx
mov dword [ebp - 0xd8], ebx
mov dword [ebp - 0xd4], ebx
call fcn.10008ab5
mov byte [ebp - 4], 0xa
mov dword [ebp - 0x18], ebx
jmp 0x1004525d
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x210], 0xffffffff
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 1
jl 0x1004524c
mov byte [ebp - 0x1d], bl
cmp byte [ebp - 0x1d], 0
je 0x10045275
push ebx
push ebx
push ebx
call dword [sym.imp.ADVAPI32.dll_RegLoadKeyW]
mov dword [ebp - 0x24], 1
cmp dword [ebp - 0x24], ebx
jl 0x10045369
mov dword [ebp - 0x2c], 0x5c54
cmp dword [ebp - 0x2c], 0x5d09
jle 0x10045325
push ebx
push 0xf4b
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_VerSetConditionMask]
mov dword [ebp - 0x38], ebx
mov dword [ebp - 0x1c], ebx
mov dword [ebp - 0x44], 0xc74
mov esi, ebx
mov dword [ebp - 0x18], 0x53dd
mov eax, esi
mov dword [ebp - 0x34], 0xcdf
mov dword [ebp - 0x30], eax
cdq
lea ecx, [ebp - 0x2c4]
push edx
push eax
call fcn.10001a6a
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x100452e1
mov eax, dword [eax]
push eax
call fcn.1004da8c
pop ecx
push ebx
push 1
lea ecx, [ebp - 0x2c4]
call fcn.10006111
mov eax, dword [ebp - 0x30]
dec eax
dec dword [ebp - 0x34]
mov dword [ebp - 0x30], eax
jne 0x100452c9
mov eax, dword [ebp - 0x1c]
add esi, eax
dec dword [ebp - 0x18]
jne 0x100452bd
mov esi, dword [ebp - 0x38]
add eax, esi
dec dword [ebp - 0x44]
mov dword [ebp - 0x1c], eax
jne 0x100452b4
inc esi
mov dword [ebp - 0x38], esi
cmp esi, 0x75e7
jl 0x100452aa
mov dword [ebp - 0x18], ebx
jmp 0x10045337
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x2ac], ebx
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 3
jl 0x1004532a
cmp dword [ebp - 0x2c], 0x5afb
jge 0x10045351
push str.bqmrgbzu_lgm_crnq_gto_ogfkq_pylr_gjw_rnapwazo_qfzrisn_mkabfj
call fcn.1004da8c
pop ecx
mov dword [ebp - 4], 0xa
mov eax, dword [ebp - 0xdc]
inc dword [eax + 0xc]
dec dword [ebp - 0x24]
jmp 0x1004527c
lea ecx, [ebp - 0xdc]
mov byte [ebp - 4], 7
call fcn.10005c91
dec dword [ebp - 0x28]
jmp 0x100451ea
push dword [ebp - 0x108]
lea ecx, [ebp - 0x264]
call fcn.10009001
mov byte [ebp - 4], 0xd
mov dword [ebp - 0x18], ebx
mov dword [ebp - 0x18], 0x19
cmp dword [ebp - 0x18], 0xffffffff
jl 0x10045465
mov esi, 0xb999fb0
mov dword [ebp - 0xd0], esi
xor ecx, ecx
mov dword [ebp - 0xcc], esi
inc ecx
mov dword [ebp - 0xc8], esi
xor edx, edx
mov dword [ebp - 0xc4], esi
mov dword [ebp - 0x2c], 0xa28c7fff
mov dword [ebp - 0x38], 0xef7e2919
mov eax, dword [ebp - 0xc8]
mov eax, dword [ebp - 0xcc]
mov eax, dword [ebp - 0x18]
sub ecx, eax
mov eax, dword [ebp - 0xd0]
cmp ecx, eax
setge dl
xor eax, eax
cmp edx, 0xc39d
setg al
xor ecx, ecx
dec eax
mov dword [ebp - 0x2c], eax
mov eax, dword [ebp - 0xcc]
cmp eax, 1
mov eax, dword [ebp - 0x2c]
setle cl
dec eax
neg eax
sbb eax, eax
inc eax
add eax, ecx
imul eax, eax, 0x6c4f
add eax, dword [ebp - 0x18]
cmp eax, 0xffffffff
je 0x1004542e
mov eax, dword [ebp - 0x38]
cmp dword [ebp - 0xcc], 0xb2455f99
sbb eax, eax
inc eax
mov dword [ebp - 0x38], eax
mov byte [ebp - 0x1d], bl
cmp byte [ebp - 0x1d], 0
je 0x10045458
push ebx
push 0xf70
push 0x707
call dword [sym.imp.USER32.dll_SetDlgItemTextA]
dec dword [ebp - 0x18]
cmp dword [ebp - 0x18], 0xffffffff
jge 0x100453ae
push 1
lea ecx, [ebp - 0x1b4]
call fcn.10005c0e
mov dword [ebp - 0x18], 0xffffffff
xor edx, edx
mov dword [ebp - 0x3c], 0x5c6f1bf5
inc edx
mov dword [ebp - 0x18], ebx
jmp 0x1004549b
mov ecx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x1b4]
mov dword [eax + ecx*4], 0x9f9b3198
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], edx
jl 0x10045488
mov dword [ebp - 0x18], ebx
jmp 0x100454b4
mov ecx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x1b4]
mov dword [eax + ecx*4], edx
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], edx
jl 0x100454a5
lea ecx, [ebp - 0x1b4]
call fcn.10005c91
push 1
lea ecx, [ebp - 0xec]
call fcn.10005c0e
mov byte [ebp - 4], 0xe
xor edx, edx
mov eax, 0xe764939e
inc edx
mov dword [ebp - 0x1c], edx
mov dword [ebp - 0x38], 0xe64e
mov dword [ebp - 0xc0], eax
mov dword [ebp - 0xbc], eax
mov dword [ebp - 0xb8], eax
mov dword [ebp - 0xb4], eax
mov dword [ebp - 0x18], ebx
jmp 0x10045517
mov ecx, dword [ebp - 0x18]
mov eax, dword [ebp - 0xec]
mov dword [eax + ecx*4], 0xd3df75dc
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], edx
jl 0x10045504
mov dword [ebp - 0x1c], ebx
cmp dword [ebp - 0x1c], ebx
jl 0x100456e9
mov dword [ebp - 0x28], 0x4f402e31
lea ecx, [ebp - 0x1e4]
mov dword [ebp - 0x30], 0x67a4bedc
push 4
call fcn.10005c0e
mov dword [ebp - 0x34], 0xfffffffd
mov dword [ebp - 0x18], ebx
jmp 0x1004555f
mov ecx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x1e4]
or dword [eax + ecx*4], 0xffffffff
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 4
jl 0x1004554f
mov dword [ebp - 0x28], ebx
cmp dword [ebp - 0x28], ebx
jg 0x100456c1
mov esi, dword [ebp - 0x1e4]
mov dword [ebp - 0x3c], esi
mov dword [ebp - 0x2c], 0xfffffff7
mov dword [ebp - 0x2c], 0xc007c7be
mov dword [ebp - 0x24], 0xfffffffc
mov dword [ebp - 0x44], 0x7b09f595
mov dword [ebp - 0x2c], 0x97bc8b42
mov dword [ebp - 0x18], ebx
jmp 0x100455b3
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x218], 0xfc257a10
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], edi
jl 0x100455a2
dec dword [ebp - 0xc0]
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0xec]
cmp dword [ecx + eax*4], ebx
je 0x10045625
mov eax, dword [ebp - 0xb4]
mov dword [ebp - 0x2c], ebx
mov eax, dword [ebp - 0x2c]
mov dword [ebp - 0x218], eax
mov dword [ebp - 0x34], eax
mov eax, dword [ebp - 0x34]
mov eax, dword [ebp - 0xb4]
mov eax, dword [ebp - 0x30]
mov eax, dword [ebp - 0x44]
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x28]
mov esi, dword [ebp - 0x28]
neg eax
sbb eax, eax
xor edx, edx
neg eax
cmp eax, 0x4bb91e25
mov eax, dword [ebp - 0xec]
setl dl
xor ecx, ecx
cmp dword [eax + esi*4], edx
mov esi, dword [ebp - 0x3c]
setle cl
mov dword [eax], ecx
mov eax, dword [ebp - 0x38]
mov ecx, dword [ebp - 0xec]
cmp dword [ecx], ebx
jne 0x1004562c
mov eax, dword [ebp - 0x34]
mov eax, dword [ebp - 0x24]
mov edx, dword [ebp - 0xb4]
mov eax, dword [ebp - 0x30]
neg edx
sbb edx, edx
xor ecx, ecx
neg edx
cmp edx, eax
mov eax, dword [ebp - 0x24]
setl cl
xor edx, edx
cmp ecx, eax
sete dl
sub edx, dword [ebp - 0xc0]
mov eax, dword [ebp - 0x28]
neg edx
sbb edx, edx
xor ecx, ecx
inc edx
cmp edx, eax
mov eax, dword [ebp - 0x1c]
setne cl
xor edx, edx
cmp ecx, eax
setne dl
mov dword [esi + 0xc], edx
mov dword [ebp - 0x24], edx
mov eax, dword [ebp - 0x24]
sub eax, 0x70035351
je 0x10045696
mov dword [ebp - 0x2c], 1
mov eax, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x30]
mov eax, dword [ebp - 0x38]
mov dword [ebp - 0x24], eax
jmp 0x100456b5
mov dword [ebp - 0x2c], 0xeee40b14
mov byte [ebp - 0x1d], bl
cmp byte [ebp - 0x1d], 0
je 0x100456b2
push ebx
push 0x13d7
call dword [sym.imp.USER32.dll_GetWindowInfo]
inc dword [ebp - 0x2c]
inc dword [ebp - 0x28]
cmp dword [ebp - 0x28], ebx
jle 0x1004557a
mov byte [ebp - 0x1d], bl
cmp byte [ebp - 0x1d], 0
je 0x100456d5
push 0x1a54
call dword [sym.imp.GDI32.dll_CloseEnhMetaFile]
lea ecx, [ebp - 0x1e4]
call fcn.10005c91
dec dword [ebp - 0x1c]
jns 0x10045528
lea ecx, [ebp - 0xec]
mov byte [ebp - 4], 0xd
call fcn.10005c91
push 0x5c
pop eax
mov word [ebp - 0x70], ax
lea ecx, [ebp - 0x7c]
xor eax, eax
mov word [ebp - 0x80], 0x1a00
push 1
mov word [ebp - 0x6e], ax
call fcn.10005c0e
push 1
lea ecx, [ebp - 0x12c]
mov byte [ebp - 4], 0xf
call fcn.10005c0e
mov byte [ebp - 4], 0x10
lea ecx, [ebp - 0x1cc]
mov dword [ebp - 0x3c], 0x6ed55c59
push edi
call fcn.10005c0e
xor edx, edx
mov dword [ebp - 0x18], 0xffffffff
inc edx
mov dword [ebp - 0x24], edx
mov dword [ebp - 0x1c], ebx
jmp 0x10045760
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0xa4], 0xffffffff
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 3
jl 0x1004574f
mov dword [ebp - 0x1c], ebx
jmp 0x10045777
mov ecx, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x7c]
mov dword [eax + ecx*4], edx
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], edx
jl 0x1004576b
mov dword [ebp - 0x1c], ebx
jmp 0x10045794
mov ecx, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x12c]
mov dword [eax + ecx*4], 0x38f58595
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], edx
jl 0x10045781
mov dword [ebp - 0x1c], ebx
jmp 0x100457ad
mov ecx, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x1cc]
mov dword [eax + ecx*4], ebx
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], edi
jl 0x1004579e
mov ecx, dword [ebp - 0x7c]
mov eax, dword [ebp - 0x1cc]
mov dword [ebp - 0x38], eax
mov dword [ecx], ebx
mov eax, dword [ecx]
mov dword [ebp - 0x30], 0x8112def9
mov dword [ebp - 0x2c], 0xddac0faa
mov dword [ebp - 0x30], eax
mov eax, dword [ecx]
xor ecx, ecx
push 0xfffffffffffffffb
mov eax, dword [ebp + eax*4 - 0xa4]
mov dword [ebp - 0x2c], eax
mov esi, dword [ebp - 0x2c]
imul esi, dword [ebp - 0x30]
mov eax, dword [ebp - 0x7c]
mov edx, dword [eax]
pop eax
sub eax, edx
cmp eax, edx
mov eax, dword [ebp - 0x12c]
setl cl
xor edx, edx
cmp esi, ecx
mov ecx, 0xfff6
setge dl
mov dword [eax], edx
mov eax, dword [ebp - 0x7c]
mov eax, dword [eax]
mov eax, dword [ebp + eax*4 - 0xa4]
mov eax, dword [ebp - 0x7c]
mov eax, dword [eax]
mov eax, dword [ebp + eax*4 - 0xa4]
mov eax, dword [ebp - 0x7c]
mov eax, dword [eax]
mov eax, dword [ebp + eax*4 - 0xa4]
mov eax, dword [ebp - 0x9c]
mov eax, dword [ebp - 0x7c]
mov eax, dword [eax]
mov eax, dword [ebp + eax*4 - 0xa4]
cmp ecx, eax
sbb eax, eax
neg eax
mov dword [ebp - 0x3c], eax
jne 0x10045855
cmp dword [ebp - 0x30], ebx
jne 0x10045855
mov ecx, ebx
jmp 0x10045858
xor ecx, ecx
inc ecx
mov esi, dword [ebp - 0x38]
xor eax, eax
cmp ecx, 0xfffffffc
setle al
mov dword [esi + 4], ecx
xor ecx, ecx
mov dword [ebp - 0x18], eax
mov eax, dword [ebp - 0x7c]
mov eax, dword [eax]
mov eax, dword [ebp + eax*4 - 0xa4]
cmp eax, 1
setl cl
sub ecx, 0xc7127b1a
neg ecx
sbb ecx, ecx
inc ecx
mov dword [ebp - 0x24], ecx
mov ecx, dword [ebp - 0x7c]
inc dword [ecx]
cmp dword [ecx], edi
jle 0x100457c0
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0x9c]
mov ecx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x12c]
inc ecx
mov esi, dword [esi + 4]
mov edx, dword [eax]
mov eax, dword [ebp - 0x18]
add edx, ecx
xor ecx, ecx
cmp edx, eax
sete cl
xor edx, edx
cmp esi, ecx
lea ecx, [ebp - 0x1cc]
sete dl
sub edx, esi
sub edx, dword [ebp - 0x24]
mov eax, dword [ebp - 0x7c]
imul edx, dword [eax]
mov dword [eax], edx
mov eax, dword [ebp - 0x18]
dec eax
neg eax
sbb eax, eax
neg eax
mov dword [ebp - 0x24], eax
call fcn.10005c91
lea ecx, [ebp - 0x12c]
call fcn.10005c91
lea ecx, [ebp - 0x7c]
mov byte [ebp - 4], 0xd
call fcn.10005c91
xor eax, eax
mov dword [ebp - 0x154], 7
mov word [ebp - 0x168], ax
lea ecx, [ebp - 0x168]
lea eax, [ebp - 0x70]
mov dword [ebp - 0x158], ebx
push eax
call fcn.100062b9
mov byte [ebp - 4], 0x11
mov esi, edi
push 0x5f
pop eax
mov dword [ebp - 0x70], ebx
mov ecx, ebx
mov dword [ebp - 0x50], 0xef03bd00
mov word [ebp - 0x4c], 0xc19a
mov word [ebp - 0x48], ax
cmp esi, edi
jne 0x10045951
push 4
pop ecx
push ecx
pop esi
jmp 0x1004597a
movzx edx, byte [ebp + esi - 0x4f]
mov eax, esi
sub eax, ecx
movzx eax, byte [ebp + eax - 0x52]
movzx ecx, word [ebp + eax*2 - 0x48]
mov eax, ecx
and eax, edx
add eax, eax
sub ecx, eax
movzx eax, byte [ebp + esi - 0x50]
add ecx, edx
mov word [ebp + eax*2 - 0x48], cx
mov ecx, ebx
add esi, edi
cmp esi, 6
jb 0x10045946
xor eax, eax
lea ecx, [ebp - 0x120]
push 1
mov word [ebp - 0x46], ax
call fcn.10005c0e
mov dword [ebp - 0x18], ebx
jmp 0x100459ac
mov ecx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x120]
mov dword [eax + ecx*4], 0x1713b910
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 1
jl 0x10045999
mov eax, dword [ebp - 0x120]
mov dword [eax], 0xfffffffb
mov byte [ebp - 0x1d], bl
cmp byte [ebp - 0x1d], 0
je 0x100459db
push 0x1e1b
push ebx
push ebx
push ebx
push 0x92e
push ebx
call dword [sym.imp.KERNEL32.dll_GetDateFormatW]
mov eax, dword [ebp - 0x120]
inc dword [eax]
cmp dword [eax], 0x12
jle 0x100459be
lea ecx, [ebp - 0x120]
call fcn.10005c91
xor eax, eax
mov dword [ebp - 0x238], 7
mov word [ebp - 0x24c], ax
lea ecx, [ebp - 0x24c]
lea eax, [ebp - 0x48]
mov dword [ebp - 0x23c], ebx
push eax
call fcn.100062b9
mov byte [ebp - 4], 0x12
xor eax, eax
mov dword [ebp - 0x24], 0xf5c184c5
inc eax
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x2c], eax
cmp dword [ebp - 0x24], ebx
mov byte [ebp - 0x1d], bl
je 0x10045ad5
cmp byte [ebp - 0x1d], 0
je 0x10045aff
mov dword [ebp - 0x2c], 0x305d
cmp dword [ebp - 0x2c], 0x334b
jle 0x10045ab2
mov ecx, ebx
mov dword [ebp - 0x18], ebx
mov esi, ebx
mov edi, ebx
mov eax, edi
or eax, esi
or eax, ecx
lea ecx, [ebp - 0x2f4]
cdq
push edx
push eax
call fcn.10001a6a
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x10045a7c
mov eax, dword [eax]
push eax
call fcn.1004da8c
pop ecx
push ebx
push 1
lea ecx, [ebp - 0x2f4]
call fcn.10006111
mov ecx, dword [ebp - 0x18]
inc edi
cmp edi, 0x7813
jl 0x10045a5e
inc esi
cmp esi, 0x73c2
jl 0x10045a5c
inc ecx
mov dword [ebp - 0x18], ecx
cmp ecx, 0x2dfc
jl 0x10045a5a
call dword [sym.imp.USER32.dll_CreateMenu]
cmp dword [ebp - 0x2c], 0x2e18
jge 0x10045acc
push str.nnmhjky_wwp_lglfrxgtb_tqmr_eqil_qow_vor_romxl_qxe_qyvcb_idxc
call fcn.1004da8c
pop ecx
mov dword [ebp - 4], 0x12
jmp 0x10045aff
cmp byte [ebp - 0x1d], 0
je 0x10045aff
push 0x26d2
push 0x247d
push 0x188b
push 0x1892
push 0xa1e
push 0x9a9
call dword [sym.imp.GDI32.dll_PatBlt]
mov dword [ebp - 0x48], ebx
mov dword [ebp - 0x2c], 0x3bab
cmp dword [ebp - 0x2c], 0x3bca
jle 0x10045b59
mov esi, ebx
mov edi, ebx
mov eax, edi
lea ecx, [ebp - 0x318]
or eax, esi
cdq
push edx
push eax
call fcn.10001a6a
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x10045b32
mov eax, dword [eax]
push eax
call fcn.1004da8c
pop ecx
push ebx
push 1
lea ecx, [ebp - 0x318]
call fcn.10006111
inc edi
cmp edi, 0x71d1
jl 0x10045b16
inc esi
cmp esi, 0x518e
jl 0x10045b14
mov dword [ebp - 0x28], 1
cmp dword [ebp - 0x2c], 0x3a8c
jge 0x10045b74
push str.gkjrmgke_lmif_bkkoezfcq_oaoxgwhgl_qrjopi_xrl_gbktyxug_cypsj_fnbqz_hvdbmrs_qndgf_jvpjl
call fcn.1004da8c
pop ecx
mov dword [ebp - 4], 0x12
lea ecx, [ebp - 0x190]
push 2
pop edi
mov dword [ebp - 0x30], 5
mov dword [ebp - 0x24], edi
mov dword [ebp - 0x34], 0x7468e576
mov dword [ebp - 0x2c], 0x7d552b89
push 3
call fcn.10005c0e
push 3
mov dword [ebp - 0x2c], 0xffffffff
pop edx
mov dword [ebp - 0x18], edx
mov dword [ebp - 0x3c], 0x4d7f4843
mov dword [ebp - 0x1c], ebx
jmp 0x10045bcd
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0x150], 0x5da2282d
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], edx
jl 0x10045bbc
mov dword [ebp - 0x1c], ebx
jmp 0x10045be8
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0xb0], 0x30498d20
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], edi
jl 0x10045bd7
mov dword [ebp - 0x1c], ebx
jmp 0x10045c01
mov ecx, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x190]
mov dword [eax + ecx*4], ebx
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], edx
jl 0x10045bf2
mov dword [ebp - 0x1c], ebx
jmp 0x10045c1c
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0xe0], 0xf82ea917
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 1
jl 0x10045c0b
dec dword [ebp - 0x24]
mov ecx, dword [ebp - 0x28]
mov eax, dword [ebp - 0xb0]
add ecx, 0x536c745d
neg ecx
sbb ecx, ecx
xor edx, edx
inc ecx
cmp ecx, eax
mov eax, dword [ebp - 0x24]
setne dl
xor ecx, ecx
cmp eax, edx
setne cl
mov dword [ebp - 0xb0], ecx
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x28]
mov dword [ebp - 0x34], ebx
cmp dword [ebp - 0x34], eax
sbb edx, edx
neg edx
sub edx, dword [ebp - 0x28]
mov eax, dword [ebp - 0x28]
neg edx
sbb edx, edx
xor ecx, ecx
inc edx
cmp edx, eax
setg cl
mov dword [ebp - 0x2c], ecx
mov ecx, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x30]
dec dword [ebp - 0x30]
cmp eax, ecx
jle 0x10045c87
xor eax, eax
inc eax
jmp 0x10045c89
mov eax, ebx
mov esi, dword [ebp - 0x190]
mov dword [esi + 8], eax
cmp eax, 0xbacd6bce
jae 0x10045ca5
cmp dword [ebp - 0xb0], ebx
jne 0x10045ca5
mov eax, ebx
jmp 0x10045ca8
xor eax, eax
inc eax
mov dword [ebp - 0x2c], eax
xor ecx, ecx
mov eax, dword [ebp - 0x2c]
neg eax
mov dword [ebp - 0xe0], eax
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x28]
mov dword [ebp - 0x148], eax
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0xb0]
cmp eax, 0x855c
mov eax, dword [ebp - 0x18]
setne cl
imul eax, ecx
test eax, eax
jne 0x10045cee
mov eax, dword [ebp - 0x150]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x150]
mov eax, dword [ebp - 0x18]
dec eax
neg eax
sbb eax, eax
neg eax
cmp dword [ebp - 0x28], eax
jge 0x10045d78
mov dword [ebp - 0x18], ebx
jmp 0x10045d1e
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x184], ebx
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 3
jl 0x10045d11
mov eax, dword [ebp - 0x180]
mov eax, dword [ebp - 0x3c]
mov eax, dword [ebp - 0x180]
neg eax
sbb eax, eax
xor ecx, ecx
inc eax
cmp eax, 1
mov eax, dword [ebp - 0x28]
setg cl
xor edx, edx
cmp ecx, eax
mov eax, dword [ebp - 0x17c]
setle dl
xor ecx, ecx
cmp edx, eax
setge cl
xor edx, edx
cmp ecx, 0xe226
setle dl
xor eax, eax
imul edx, dword [esi + 8]
test edx, edx
mov dword [ebp - 0x14c], edx
setne al
mov dword [ebp - 0x34], eax
jmp 0x10045d94
mov dword [ebp - 0x24], ebx
jmp 0x10045d8e
mov eax, dword [ebp - 0x24]
mov dword [ebp + eax*4 - 0xb0], 0x766aa6f6
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], 1
jle 0x10045d7d
lea ecx, [ebp - 0x190]
call fcn.10005c91
push dword [ebp - 0x158]
cmp dword [ebp - 0x154], 8
lea eax, [ebp - 0x168]
push ebx
cmovae eax, dword [ebp - 0x168]
lea ecx, [ebp - 0x264]
push eax
call fcn.100100a4
cmp eax, 0xffffffff
je 0x10045de5
push 0xffffffffffffffff
push ebx
lea ecx, [ebp - 0x24c]
push ecx
push 1
push eax
lea ecx, [ebp - 0x264]
call fcn.10012402
jmp 0x10045d9f
mov dword [ebp - 0x24], 0xffffffff
lea ecx, [ebp - 0x104]
mov dword [ebp - 0x30], 8
mov dword [ebp - 0x18], 5
mov dword [ebp - 0x2c], 4
push 1
call fcn.10005c0e
mov byte [ebp - 4], 0x17
lea ecx, [ebp - 0x144]
mov dword [ebp - 0x18], 0xfffffff6
mov dword [ebp - 0x38], 0x8e548e01
push edi
call fcn.10005c0e
push 3
lea ecx, [ebp - 0x1c0]
mov byte [ebp - 4], 0x18
call fcn.10005c0e
xor edx, edx
mov byte [ebp - 4], 0x19
mov dword [ebp - 0x1c], ebx
inc edx
jmp 0x10045e58
mov ecx, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x104]
mov dword [eax + ecx*4], edx
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], edx
jl 0x10045e49
mov dword [ebp - 0x1c], ebx
jmp 0x10045e75
mov ecx, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x144]
mov dword [eax + ecx*4], 0xfffffff8
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], edi
jl 0x10045e62
mov dword [ebp - 0x1c], ebx
jmp 0x10045e92
mov ecx, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x1c0]
mov dword [eax + ecx*4], 0x85d5
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 3
jl 0x10045e7f
mov dword [ebp - 0x18], edx
mov eax, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x24]
cmp dword [ebp - 0x2c], ebx
jne 0x10045eae
cmp dword [ebp - 0x24], ebx
jne 0x10045eb0
mov edx, ebx
mov eax, dword [ebp - 0x104]
mov dword [eax], edx
xor eax, eax
test edx, edx
setne al
cmp eax, 0xb30477ae
mov eax, dword [ebp - 0x24]
sbb ecx, ecx
xor edx, edx
inc ecx
cmp ecx, eax
setne dl
imul edx, dword [ebp - 0x24]
test edx, edx
je 0x10045eea