Function at 0x10029d3a
Capabilities:
Create directory
Delete directory
Delete file
Encrypt data using speck
Get graphical window text

Disassembly:
mov eax, 0x10060b88
call fcn.1005f648
sub esp, 0x2a0
push ebx
push esi
push edi
mov dword [ebp - 0x10], esp
xor ebx, ebx
push 0x61
mov dword [ebp - 0x84], 0xd01b304
mov dword [ebp - 0x80], 0x3e033006
mov dword [ebp - 0x7c], 0x3050d02
mov word [ebp - 0x78], 0x2b00
pop eax
mov word [ebp - 0x104], ax
mov dword [ebp - 0x18], 2
mov dword [ebp - 0x2c], ebx
mov byte [ebp - 0x1d], bl
mov dword [ebp - 0xb4], edx
mov dword [ebp - 0x8c], ecx
mov dword [ebp - 0x1c4], ebx
cmp byte [ebp - 0x1d], bl
je 0x10029daa
push 0x12b7
push ebx
call dword [sym.imp.KERNEL32.dll_SetThreadPriority]
mov dword [ebp - 0x18], 0xfffffff0
jmp 0x10029dc0
mov dword [ebp - 0x24], 0xffff
dec dword [ebp - 0x24]
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 0xfffffff6
jl 0x10029db3
push 2
pop esi
push esi
pop edi
movzx eax, byte [ebp + esi - 0x86]
movzx ecx, byte [ebp + esi - 0x83]
movzx edx, word [ebp + eax*2 - 0x10c]
mov eax, edx
and eax, ecx
add eax, eax
sub edx, eax
movzx eax, byte [ebp + esi - 0x84]
add edx, ecx
add esi, edi
mov word [ebp + eax*2 - 0x10c], dx
cmp esi, 0xe
jb 0x10029dcb
xor esi, esi
mov dword [ebp - 0x18], 0xbeccce1e
inc esi
mov dword [ebp - 0x24], 0x3e64f147
push esi
lea ecx, [ebp - 0xd8]
call fcn.100017ce
mov dword [ebp - 0x1c], ebx
jmp 0x10029e39
mov ecx, dword [ebp - 0x1c]
mov eax, dword [ebp - 0xd8]
mov dword [eax + ecx*4], 3
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 1
jl 0x10029e26
mov dword [ebp - 0x1c], ebx
jmp 0x10029e55
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0x220], 0x91208373
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 3
jl 0x10029e44
cmp dword [ebp - 0x18], ebx
jne 0x10029e74
mov dword [ebp - 0x24], 0xfffc
mov eax, dword [ebp - 0x24]
cmp eax, dword [ebp - 0x18]
jl 0x10029e74
xor esi, esi
inc esi
jmp 0x10029e76
mov esi, ebx
mov ecx, dword [ebp - 0x18]
mov eax, dword [ebp - 0xd8]
neg ecx
sbb ecx, ecx
xor edx, edx
inc ecx
mov dword [eax], ecx
mov ecx, dword [ebp - 0x18]
mov eax, dword [ebp - 0xd8]
cmp dword [eax], ecx
mov eax, dword [ebp - 0x18]
setle dl
xor ecx, ecx
cmp edx, eax
setl cl
sub esi, ecx
lea ecx, [ebp - 0xd8]
mov dword [ebp - 0x218], esi
call fcn.10001830
xor eax, eax
mov word [ebp - 0xfe], ax
mov dword [ebp - 0x38], 0x3f03
cmp dword [ebp - 0x38], 0x3f66
jle 0x10029f46
push ebx
push 0x93f
push ebx
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_GetTextExtentPointA]
mov edx, ebx
mov dword [ebp - 0x18], ebx
mov dword [ebp - 0x34], ebx
mov esi, ebx
mov eax, ebx
mov ebx, dword [ebp - 0x34]
mov dword [ebp - 0x24], eax
lea ecx, [eax + esi]
mov eax, edx
add ecx, ebx
shl eax, cl
mov ecx, 0x1007ba38
cdq
push edx
push eax
call fcn.10005547
mov eax, dword [ebp - 0x24]
mov edx, dword [ebp - 0x18]
inc eax
mov dword [ebp - 0x24], eax
cmp eax, 0x303b
jl 0x10029ef9
inc esi
push 0
pop ebx
cmp esi, 0x6147
jl 0x10029ef1
mov eax, dword [ebp - 0x34]
inc eax
mov dword [ebp - 0x34], eax
cmp eax, 0x5b45
jl 0x10029eef
inc edx
mov dword [ebp - 0x18], edx
cmp edx, 0x614e
jl 0x10029eec
xor eax, eax
mov dword [ebp - 0x1ac], 7
mov word [ebp - 0x1c0], ax
lea ecx, [ebp - 0x1c0]
lea eax, [ebp - 0x10c]
mov dword [ebp - 0x1b0], ebx
push eax
call fcn.10005bf3
mov dword [ebp - 4], ebx
mov byte [ebp - 4], 1
cmp dword [ebp - 0x38], 0x3e8d
jge 0x10029fb1
mov edx, str.zsmk_swv_vazsp
mov ecx, 0x1007ba38
call fcn.100078f4
jmp 0x10029fb1
mov dword [ebp - 4], ebx
mov eax, ebx
xor esi, esi
mov dword [ebp - 0x44], eax
inc esi
or ecx, 0xffffffff
cmp eax, 8
jae 0x1002a2a1
mov dword [ebp - 0x2c], 0x6a53d06c
mov dword [ebp - 0x28], ecx
lea ecx, [ebp - 0x98]
mov dword [ebp - 0x2c], 9
mov dword [ebp - 0x2c], 0x7b1891f7
mov dword [ebp - 0x24], 0x6ccb0362
mov dword [ebp - 0x2c], 0xd21dfe4b
mov dword [ebp - 0x2c], 0xc93ee327
mov dword [ebp - 0x1c], 0x50db8561
push edi
call fcn.100017ce
mov byte [ebp - 4], 3
mov dword [ebp - 0x50], esi
mov dword [ebp - 0x28], 0x27cc
cmp dword [ebp - 0x28], 0x295b
jle 0x1002a0a4
mov eax, ebx
mov dword [ebp - 0x18], ebx
mov dword [ebp - 0x40], ebx
mov edx, eax
mov dword [ebp - 0x38], 0x19ce
mov dword [ebp - 0x34], edx
mov ecx, ebx
mov dword [ebp - 0x24], ebx
mov eax, edx
sar eax, cl
lea ecx, [ebp - 0x290]
cdq
push edx
push eax
call fcn.10002394
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x1002a058
mov eax, dword [eax]
push eax
call fcn.10047752
pop ecx
push ebx
push esi
lea ecx, [ebp - 0x290]
call fcn.10005baf
mov ecx, dword [ebp - 0x24]
mov edx, dword [ebp - 0x34]
inc ecx
mov dword [ebp - 0x24], ecx
cmp ecx, 0x75d8
jl 0x1002a03c
mov eax, dword [ebp - 0x40]
add edx, eax
dec dword [ebp - 0x38]
mov dword [ebp - 0x34], edx
jne 0x1002a037
inc eax
mov dword [ebp - 0x40], eax
cmp eax, 0x50d3
mov eax, dword [ebp - 0x18]
jl 0x1002a02b
inc eax
mov dword [ebp - 0x18], eax
cmp eax, 0x694b
jl 0x1002a028
mov dword [ebp - 0x2c], 0x60bc
cmp dword [ebp - 0x28], 0x276e
jge 0x1002a0bf
push str.dkpibmxtv_bltuups_qdrdcphi_sjunr_fizyoamx_kqlftrcc_isr_ulsqpxkog_tvbdw_svxdkievb_pmbfbolp_qbgcvg_yqljumrz_itj
call fcn.10047752
pop ecx
mov dword [ebp - 4], 3
mov dword [ebp - 0x18], ebx
jmp 0x1002a0da
mov ecx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x98]
mov dword [eax + ecx*4], ebx
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], edi
jl 0x1002a0cb
dec dword [ebp - 0x1c]
mov dword [ebp - 0x40], 0x4b1c
cmp dword [ebp - 0x40], 0x4e8d
jle 0x1002a15d
mov eax, ebx
mov dword [ebp - 0x34], ebx
mov esi, ebx
mov dword [ebp - 0x38], ebx
cdq
mov ecx, ebx
idiv esi
mov dword [ebp - 0x24], ecx
mov eax, edx
mov dword [ebp - 0x48], eax
cdq
mov esi, 0x73fc
idiv ecx
mov dword [ebp - 0x30], ebx
mov dword [ebp - 0x3c], edx
mov eax, ebx
mov ecx, 0x1007ba38
cdq
push edx
push eax
call fcn.10005547
add ebx, dword [ebp - 0x3c]
dec esi
jne 0x1002a117
mov ecx, dword [ebp - 0x24]
mov eax, dword [ebp - 0x48]
inc ecx
mov dword [ebp - 0x24], ecx
push esi
pop ebx
cmp ecx, 0x4f2
jl 0x1002a109
mov esi, dword [ebp - 0x38]
mov eax, dword [ebp - 0x34]
inc esi
mov dword [ebp - 0x38], esi
cmp esi, 0x663e
jl 0x1002a0fc
inc eax
mov dword [ebp - 0x34], eax
cmp eax, 0x4332
jl 0x1002a0f7
xor eax, eax
mov dword [ebp - 0x1c], ebx
inc eax
cmp dword [ebp - 0x1c], eax
jg 0x1002a23c
mov dword [ebp - 0x19c], eax
mov dword [ebp - 0x198], eax
mov dword [ebp - 0x194], eax
mov dword [ebp - 0x190], eax
mov dword [ebp - 0x18], ebx
mov dword [ebp - 0x28], eax
cmp dword [ebp - 0x28], ebx
jl 0x1002a21b
mov dword [ebp - 0x2c], 0xffffffff
inc dword [ebp - 0x18]
mov esi, dword [ebp - 0x28]
mov edi, dword [ebp - 0x28]
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x1c]
sub ecx, eax
mov eax, dword [ebp - 0x98]
neg ecx
sbb ecx, ecx
xor edx, edx
add ecx, 6
cmp dword [eax + esi*4], ecx
mov eax, dword [ebp - 0x50]
setge dl
xor ecx, ecx
cmp eax, edx
mov eax, dword [ebp - 0x98]
setle cl
xor edx, edx
cmp ecx, dword [eax + edi*4]
setge dl
xor ecx, ecx
mov dword [ebp - 0x30], edx
mov edx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x190]
imul edx, dword [ebp - 0x30]
cmp eax, edx
setne cl
mov dword [ebp - 0x24], ecx
mov edx, dword [ebp - 0x28]
mov esi, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x98]
mov eax, dword [ebp - 0x24]
mov ecx, dword [ecx + edx*4]
sub ecx, eax
mov eax, dword [ebp - 0x98]
mov dword [eax + esi*4], ecx
dec dword [ebp - 0x28]
jns 0x1002a193
xor eax, eax
inc eax
mov byte [ebp - 0x1d], bl
cmp byte [ebp - 0x1d], 0
je 0x1002a22d
call dword [sym.imp.KERNEL32.dll_IsDebuggerPresent]
xor eax, eax
inc eax
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], eax
jle 0x1002a16c
push 2
pop edi
mov byte [ebp - 4], 6
cmp dword [ebp - 0x40], 0x4845
jge 0x1002a279
mov edx, str.nzrq_lcxh_kgtq_vwhagik_kbgslnn_stealnsv_apetzuc_fixxz_lnsvzjat_dxbbxbbjo_idy_fawbyprbh_xubvk
mov ecx, 0x1007ba38
call fcn.100078f4
jmp 0x1002a279
mov dword [ebp - 4], 3
lea ecx, [ebp - 0x98]
mov byte [ebp - 4], bl
call fcn.10001830
mov eax, dword [ebp - 0x44]
xor ecx, ecx
mov word [ebp + eax*2 - 0x10c], cx
inc eax
jmp 0x10029fb6
push dword [ebp - 0xb4]
lea ecx, [ebp - 0x1f4]
call fcn.100084aa
mov byte [ebp - 4], 8
lea ecx, [ebp - 0xc0]
mov byte [ebp - 0x60], bl
mov dword [ebp - 0x5f], 0xea25049e
mov word [ebp - 0x5b], 0x2214
mov dword [ebp - 0x40], 0xc692
mov dword [ebp - 0x34], 0xfffffff8
push esi
call fcn.100017ce
mov byte [ebp - 4], 9
mov dword [ebp - 0x24], 0x41dc
cmp dword [ebp - 0x24], 0x4317
jle 0x1002a349
mov eax, ebx
mov dword [ebp - 0x18], ebx
mov ecx, ebx
mov dword [ebp - 0x44], ebx
sar eax, cl
lea ecx, [ebp - 0x248]
cdq
push edx
push eax
call fcn.10002394
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x1002a318
mov eax, dword [eax]
push eax
call fcn.10047752
pop ecx
push ebx
push esi
lea ecx, [ebp - 0x248]
call fcn.10005baf
mov ecx, dword [ebp - 0x44]
mov eax, dword [ebp - 0x18]
inc ecx
mov dword [ebp - 0x44], ecx
cmp ecx, 0x267c
jl 0x1002a2fe
inc eax
mov dword [ebp - 0x18], eax
cmp eax, 0x5117
jl 0x1002a2f9
mov dword [ebp - 0x38], 0x2065c829
cmp dword [ebp - 0x24], 0x3e54
jge 0x1002a364
push str.nuxhqnmc_mhmujkr_yqr_lnxlynn_vrydvy_cog_aobr_wxlsscr_qjwh
call fcn.10047752
pop ecx
mov dword [ebp - 4], 9
or esi, 0xffffffff
mov dword [ebp - 0x3c], esi
mov dword [ebp - 0x24], 0x6ed9a830
mov dword [ebp - 0x2c], 0xfffffff7
mov dword [ebp - 0x1c], ebx
jmp 0x1002a392
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0x74], 1
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 1
jl 0x1002a384
mov dword [ebp - 0x1c], ebx
jmp 0x1002a3b0
mov ecx, dword [ebp - 0x1c]
mov eax, dword [ebp - 0xc0]
mov dword [eax + ecx*4], 0xd5a519d8
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 1
jl 0x1002a39d
cmp dword [ebp - 0x40], ebx
je 0x1002a5d5
mov dword [ebp - 0x44], 8
mov dword [ebp - 0x38], 0xc47d1afd
mov dword [ebp - 0x24], 0x206e
cmp dword [ebp - 0x24], 0x2444
jle 0x1002a40f
mov esi, ebx
mov dword [ebp - 0x44], ebx
mov dword [ebp - 0x50], esi
mov ebx, 0x4b01
mov eax, esi
mov ecx, 0x1007ba38
cdq
push edx
push eax
call fcn.10005547
dec esi
dec ebx
jne 0x1002a3ea
mov esi, dword [ebp - 0x44]
inc esi
mov dword [ebp - 0x44], esi
cmp esi, 0x47f4
jl 0x1002a3e2
or esi, 0xffffffff
mov dword [ebp - 0x28], 1
mov byte [ebp - 4], 0xc
cmp dword [ebp - 0x24], 0x1f97
jge 0x1002a456
mov edx, str.ahihu_mhyd_tjm_luv_aluvlzgr_eonjms_tyikxig_fmxuz_xfw_gpofbm_kkcaulukx_jpbhueys_xung
mov ecx, 0x1007ba38
call fcn.100078f4
jmp 0x1002a456
mov dword [ebp - 4], 9
mov dword [ebp - 0x2c], ebx
mov dword [ebp - 0x2c], esi
mov dword [ebp - 0x2c], 0xfffffff8
mov dword [ebp - 0x3c], 0xc411
mov dword [ebp - 0x24], 0xfffffffe
mov dword [ebp - 0x18], ebx
jmp 0x1002a48e
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x88], 0xfffffffc
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 1
jl 0x1002a47d
mov dword [ebp - 0x48], 0x1f7e
cmp dword [ebp - 0x48], 0x22a3
jle 0x1002a50d
mov ecx, ebx
mov dword [ebp - 0x18], ebx
mov eax, ebx
mov dword [ebp - 0x1c], ebx
mov esi, ebx
mov dword [ebp - 0x44], ebx
add eax, ecx
mov dword [ebp - 0x30], ebx
mov ecx, esi
mov dword [ebp - 0x50], eax
mov esi, eax
shl esi, cl
mov eax, esi
mov ecx, 0x1007ba38
xor eax, ebx
cdq
push edx
push eax
call fcn.10005547
inc ebx
cmp ebx, 0x1c7b
jl 0x1002a4c1
mov esi, dword [ebp - 0x44]
mov eax, dword [ebp - 0x1c]
inc esi
mov ecx, dword [ebp - 0x18]
mov dword [ebp - 0x44], esi
push 0
pop ebx
cmp esi, 0x299b
jl 0x1002a4b3
inc eax
mov dword [ebp - 0x1c], eax
cmp eax, 0x4a25
jl 0x1002a4ae
inc ecx
mov dword [ebp - 0x18], ecx
cmp ecx, 0x2947
jl 0x1002a4a9
or esi, 0xffffffff
mov eax, dword [ebp - 0x34]
xor ecx, ecx
mov eax, dword [ebp - 0x40]
cmp eax, 1
mov eax, dword [ebp - 0xc0]
setge cl
mov dword [eax], ecx
mov eax, dword [ebp - 0x40]
mov eax, dword [ebp - 0x34]
dec eax
neg eax
sbb eax, eax
xor edx, edx
inc eax
mov dword [ebp - 0x44], eax
mov ecx, dword [ebp - 0x38]
mov eax, dword [ebp - 0x44]
cmp eax, ecx
setge dl
mov dword [ebp - 0x38], edx
mov byte [ebp - 4], 0xe
cmp dword [ebp - 0x48], 0x1e3b
jge 0x1002a582
mov edx, str.hfnxyj_cpqyesllx_mswm_wcjyjvows
mov ecx, 0x1007ba38
call fcn.100078f4
jmp 0x1002a582
mov dword [ebp - 4], 9
mov eax, dword [ebp - 0x34]
cmp dword [ebp - 0x3c], ebx
jne 0x1002a59b
mov dword [ebp - 0x38], 0x627189e3
mov eax, dword [ebp - 0x38]
dec dword [ebp - 0x24]
mov edx, 0x6f05c239
mov eax, dword [ebp - 0x24]
xor ecx, ecx
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x74]
mov eax, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x34]
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x74]
mov eax, dword [ebp - 0x3c]
mov eax, dword [ebp - 0x28]
sub edx, eax
mov eax, dword [ebp - 0x28]
cmp edx, eax
setl cl
mov dword [ebp - 0x24], ecx
jmp 0x1002a6bd
push edi
lea ecx, [ebp - 0x154]
call fcn.100017ce
mov dword [ebp - 0x48], 0xa97cad95
mov dword [ebp - 0x18], 0x9e9da123
mov dword [ebp - 0x18], ebx
jmp 0x1002a607
mov ecx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x154]
mov dword [eax + ecx*4], 0x89989a98
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], edi
jl 0x1002a5f4
mov eax, dword [ebp - 0x2c]
xor ecx, ecx
mov eax, dword [ebp - 0x24]
cmp eax, 4
mov esi, dword [ebp - 0x154]
setne cl
xor eax, eax
cmp ecx, 0xfffffff7
setl al
xor ecx, ecx
cmp eax, dword [esi + 4]
mov eax, dword [ebp - 0x3c]
setne cl
xor edx, edx
cmp eax, ecx
mov eax, dword [ebp - 0xc0]
setge dl
sub edx, dword [eax]
mov eax, dword [ebp - 0x48]
neg edx
sbb edx, edx
inc edx
mov dword [ebp - 0x2c], edx
xor edx, edx
cmp dword [ebp - 0x2c], edx
setg dl
xor ecx, ecx
imul edx, dword [esi + 4]
cmp edx, eax
setle cl
xor edx, edx
cmp ecx, 0x8950
setg dl
xor ecx, ecx
add edx, dword [ebp - 0x3c]
mov eax, dword [ebp - 0x74]
cmp edx, eax
setg cl
xor edx, edx
imul ecx, dword [esi + 4]
mov dword [ebp - 0x18], ecx
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x38], eax
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0x18]
mov ecx, dword [esi + 4]
mov eax, dword [ebp - 0x18]
neg ecx
sub ecx, eax
mov eax, dword [ebp - 0x38]
cmp ecx, eax
mov eax, dword [ebp - 0x48]
setle dl
xor ecx, ecx
cmp edx, eax
setne cl
mov dword [ebp - 0x74], ecx
lea ecx, [ebp - 0x154]
call fcn.10001830
or esi, 0xffffffff
mov byte [ebp - 0x1d], bl
cmp byte [ebp - 0x1d], 0
je 0x1002a6d4
push ebx
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_ValidateRect]
lea ecx, [ebp - 0xc0]
mov byte [ebp - 4], 8
call fcn.10001830
push 0x5c
pop eax
mov word [ebp - 0x64], ax
mov dword [ebp - 0x28], 0x799040c3
mov dword [ebp - 0x18], 0xff93f8de
mov dword [ebp - 0x1c], esi
mov dword [ebp - 0x2c], 0xffff
mov dword [ebp - 0x28], ebx
jmp 0x1002a715
mov eax, dword [ebp - 0x28]
mov dword [ebp + eax*4 - 0x58], 0xb064
inc dword [ebp - 0x28]
cmp dword [ebp - 0x28], edi
jl 0x1002a707
cmp dword [ebp - 0x58], 0xe90a624c
mov eax, dword [ebp - 0x54]
sbb ecx, ecx
inc ecx
neg eax
sbb eax, eax
inc eax
add eax, ecx
je 0x1002a81a
xor eax, eax
mov dword [ebp - 0x1c], esi
inc eax
lea ecx, [ebp - 0xf0]
mov dword [ebp - 0x18c], eax
mov dword [ebp - 0x188], eax
mov dword [ebp - 0x184], eax
mov dword [ebp - 0x180], eax
push edi
call fcn.100017ce
mov dword [ebp - 0x2c], 0xd0c653dd
mov dword [ebp - 0x18], ebx
jmp 0x1002a77d
mov ecx, dword [ebp - 0x18]
mov eax, dword [ebp - 0xf0]
mov dword [eax + ecx*4], 0xaffa898c
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], edi
jl 0x1002a76a
cmp dword [ebp - 0x54], ebx
jne 0x1002a7f3
mov eax, dword [ebp - 0x54]
xor edx, edx
mov eax, dword [ebp - 0x1c]
mov ecx, dword [ebp - 0x54]
mov eax, dword [ebp - 0x1c]
cmp ecx, eax
mov ecx, 0x2f3f6085
setge dl
mov dword [ebp - 0x28], edx
xor edx, edx
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x58]
sub ecx, eax
mov eax, dword [ebp - 0x54]
cmp ecx, eax
mov ecx, dword [ebp - 0x54]
mov eax, dword [ebp - 0x54]
setle dl
add ecx, edx
xor edx, edx
cmp ecx, eax
setg dl
mov dword [ebp - 0x18c], edx
mov eax, dword [ebp - 0x1c]
lea ecx, [edx + 1]
xor edx, edx
cmp ecx, eax
mov eax, dword [ebp - 0xf0]
setg dl
mov dword [eax], edx
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x54]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x54]
lea ecx, [ebp - 0xf0]
mov eax, dword [ebp - 0xf0]
mov eax, dword [eax]
mov dword [ebp - 0x18], eax
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x2c], eax
call fcn.10001830
xor esi, esi
inc esi
jmp 0x1002a9c9
push 3
lea ecx, [ebp - 0x16c]
call fcn.100017ce
mov byte [ebp - 4], 0x10
mov dword [ebp - 0x34], 0xbdec7e1e
mov dword [ebp - 0x28], ebx
jmp 0x1002a84a
mov ecx, dword [ebp - 0x28]
mov eax, dword [ebp - 0x16c]
mov dword [eax + ecx*4], 0xb54c5f6b
inc dword [ebp - 0x28]
cmp dword [ebp - 0x28], 3
jl 0x1002a837
xor esi, esi
mov dword [ebp - 0x28], 0xd
inc esi
cmp dword [ebp - 0x28], 0x18
jge 0x1002a8c8
mov byte [ebp - 0x1d], bl
cmp byte [ebp - 0x1d], 0
je 0x1002a871
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_CreateDirectoryW]
mov dword [ebp - 0x18], esi
cmp dword [ebp - 0x18], ebx
jl 0x1002a8c3
mov byte [ebp - 0x1d], bl
cmp byte [ebp - 0x1d], 0
je 0x1002a88f
push 0xbbe
push ebx
push ebx
call dword [sym.imp.GDI32.dll_TranslateCharsetInfo]
mov byte [ebp - 0x1d], bl
cmp byte [ebp - 0x1d], 0
je 0x1002a8be
push 0xb75
push ebx
push ebx
push 0x51a
push 0x1d18
push ebx
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_GetDIBits]
dec dword [ebp - 0x18]
jns 0x1002a879
inc dword [ebp - 0x28]
jmp 0x1002a85a
mov dword [ebp - 0x30], 0x7b1e
cmp dword [ebp - 0x30], 0x7d49
jle 0x1002a968
mov eax, ebx
mov dword [ebp - 0x38], ebx
mov dword [ebp - 0x24], ebx
cdq
mov ecx, ebx
idiv dword [ebp - 0x24]
mov dword [ebp - 0x44], ecx
mov dword [ebp - 0x40], edx
mov eax, ecx
mov dword [ebp - 0x48], 0x3d93
mov dword [ebp - 0x3c], eax
and eax, edx
lea ecx, [ebp - 0x260]
cdq
push edx
push eax
call fcn.10002394
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x1002a916
mov eax, dword [eax]
push eax
call fcn.10047752
pop ecx
push ebx
push esi
lea ecx, [ebp - 0x260]
call fcn.10005baf
mov eax, dword [ebp - 0x3c]
mov edx, dword [ebp - 0x40]
dec eax
dec dword [ebp - 0x48]
mov dword [ebp - 0x3c], eax
jne 0x1002a8fc
mov ecx, dword [ebp - 0x44]
inc ecx
mov dword [ebp - 0x44], ecx
cmp ecx, 0x6f29
jl 0x1002a8f0
mov eax, dword [ebp - 0x24]
inc eax
mov dword [ebp - 0x24], eax
cmp eax, 0x1001
mov eax, dword [ebp - 0x38]
jl 0x1002a8e4
inc eax
mov dword [ebp - 0x38], eax
cmp eax, 0x6514
jl 0x1002a8e1
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x54]
mov eax, dword [ebp - 0x34]
mov eax, dword [ebp - 0x16c]
cmp dword [eax], ebx
je 0x1002a98e
mov eax, ebx
cmp dword [ebp - 0x1c], ebx
je 0x1002a990
mov eax, esi
mov edx, dword [ebp - 0x34]
xor ecx, ecx
imul edx, eax
mov eax, dword [ebp - 0x1c]
cmp edx, eax
setg cl
mov dword [ebp - 0x28], ecx
cmp dword [ebp - 0x30], 0x77d9
jge 0x1002a9b7
push str.tqjrvlgc_fllltf_rtpeurvyc_vyltnvdau_hypstwbdk_mrn_yljl
call fcn.10047752
pop ecx
lea ecx, [ebp - 0x16c]
mov dword [ebp - 4], 8
call fcn.10001830
mov dword [ebp - 0x1c], ebx
jmp 0x1002aa19
push 3
lea ecx, [ebp - 0xcc]
call fcn.100017ce
mov dword [ebp - 0x18], ebx
jmp 0x1002a9f3
mov ecx, dword [ebp - 0x18]
mov eax, dword [ebp - 0xcc]
mov dword [eax + ecx*4], 0x44fe3780
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 3
jl 0x1002a9e0
mov eax, dword [ebp - 0xcc]
lea ecx, [ebp - 0xcc]
mov dword [eax + 8], esi
mov eax, dword [ebp - 0x1c]
cmp dword [ebp + eax*4 - 0x58], ebx
jne 0x1002aa20
call fcn.10001830
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], esi
jle 0x1002a9ce
jmp 0x1002aa25
call fcn.10001830
mov eax, edi
mov dword [ebp - 0x28], edi
mov dword [ebp - 0x40], ebx
mov dword [ebp - 0x3c], eax
cmp eax, 7
jae 0x1002adf7
push edi
lea ecx, [ebp - 0x160]
call fcn.100017ce
mov byte [ebp - 4], 0x13
mov dword [ebp - 0x34], 0xdf2f4a8b
mov dword [ebp - 0x18], ebx
jmp 0x1002aa68
mov ecx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x160]
mov dword [eax + ecx*4], 0xf0ea75c9
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], edi
jl 0x1002aa55
mov dword [ebp - 0x34], esi
cmp dword [ebp - 0x34], ebx
jl 0x1002ab32
mov dword [ebp - 0x30], 0x32bf
cmp dword [ebp - 0x30], 0x34ac
jle 0x1002aabc
mov esi, ebx
mov dword [ebp - 0x2c], ebx
mov eax, ebx
mov ecx, 0x1007ba38
or eax, esi
cdq
push edx
push eax
call fcn.10005547
inc ebx
cmp ebx, 0x401
jl 0x1002aa8e
inc esi
push 0
pop ebx
cmp esi, 0x1aa1
jl 0x1002aa8b
push ebx
push ebx
call dword [sym.imp.OLEAUT32.dll_VariantCopyInd]
mov dword [ebp - 0x18], 0xea6801fc
mov byte [ebp - 4], 0x14
cmp dword [ebp - 0x30], 0x2f0e
jge 0x1002ab06
mov edx, str.fkryfovtt_enc_yphndti_awgbyfxou_coutrtgc_cjkic_uaf_zncpac_lgwpb
mov ecx, 0x1007ba38
call fcn.100078f4
jmp 0x1002ab06
mov dword [ebp - 4], 0x13
mov dword [ebp - 0x18], ebx
jmp 0x1002ab25
mov ecx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x160]
mov dword [eax + ecx*4], 0xfffffff8
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], edi
jl 0x1002ab12
dec dword [ebp - 0x34]
jmp 0x1002aa70
lea ecx, [ebp - 0x160]
mov byte [ebp - 4], 8
call fcn.10001830
movzx eax, byte [ebp - 0x60]
mov esi, dword [ebp - 0x28]
lea eax, [eax*2 + 2]
cmp esi, eax
jne 0x1002ad21
movzx eax, byte [ebp + esi - 0x60]
mov dword [ebp - 0x1c], 0x76d6
mov dword [ebp - 0x30], 0x246
mov dword [ebp - 0x24], 0xbd907c4
mov dword [ebp - 0x38], 7
lea ecx, [eax + 1]
mov dword [ebp - 0x34], ebx
mov dword [ebp - 0x30], 0xacefce06
mov dword [ebp - 0x30], 0x6f9132f4
mov dword [ebp - 0x2c], eax
mov eax, 0x6219ff40
mov dword [ebp - 0x17c], eax
mov dword [ebp - 0x178], eax
mov dword [ebp - 0x174], eax
mov dword [ebp - 0x170], eax
mov eax, dword [ebp - 0x1c]
imul eax, dword [ebp - 0x1c]
mov dword [ebp - 0x40], ecx
mov dword [ebp - 0x24], eax
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x24]
cmp dword [ebp - 0x24], ebx
je 0x1002abd4
cmp dword [ebp - 0x1c], ebx
je 0x1002abd4
xor eax, eax
inc eax
jmp 0x1002abd6
mov eax, ebx
cmp eax, dword [ebp - 0x1c]
jle 0x1002abe4
cmp dword [ebp - 0x1c], ebx
jne 0x1002abe4
mov edx, ebx
jmp 0x1002abe7
xor edx, edx
inc edx
mov eax, dword [ebp - 0x1c]
xor ecx, ecx
cmp eax, edx
setne cl
cmp ecx, dword [ebp - 0x1c]
jle 0x1002abf9
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x1c]
xor ecx, ecx
mov dword [ebp - 0x30], eax
mov eax, dword [ebp - 0x30]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x38]
mov eax, dword [ebp - 0x34]
mov edx, dword [ebp - 0x34]
imul edx, dword [ebp - 0x38]
mov eax, dword [ebp - 0x1c]
neg eax
movdqa xmm0, xmmword [0x1006e500]
cmp eax, edx
setle cl
mov dword [ebp - 0x30], ecx
xor ecx, ecx
mov eax, dword [ebp - 0x30]
cmp eax, 0xfff7
setne cl
mov dword [ebp - 0x30], ecx
xor ecx, ecx
mov eax, dword [ebp - 0x30]
cmp eax, 0xf55
mov eax, dword [ebp - 0x1c]
setg cl
xor edx, edx
cmp ecx, eax
mov eax, dword [ebp - 0x38]
setne dl
xor ecx, ecx
cmp edx, eax
setge cl
or eax, 0xffffffff
cmp eax, ecx
mov eax, dword [ebp - 0x34]
sbb ecx, ecx
xor edx, edx
inc ecx
cmp ecx, eax
lea ecx, [ebp - 0xa4]
setne dl
xor eax, eax
imul edx, dword [ebp - 0x34]
push dword [ebp - 0x88]
movdqu xmmword [ebp - 0x214], xmm0
mov dword [ebp - 0xa4], ebx
mov dword [ebp - 0xa0], ebx
cmp eax, edx
mov dword [ebp - 0x9c], ebx
sbb eax, eax
neg eax
mov dword [ebp - 0x178], eax
mov eax, dword [ebp - 0x2c]
dec eax
add esi, eax
lea eax, [ebp - 0x204]
push eax
lea eax, [ebp - 0x214]
mov dword [ebp - 0x28], esi
push eax
push ebx
call fcn.100018ed
mov dword [ebp - 0x18], 0xcb50bf34
mov dword [ebp - 0x18], ebx
jmp 0x1002aceb
mov eax, dword [ebp - 0x18]
mov edx, dword [ebp - 0x18]
mov ecx, dword [ebp - 0xa4]
mov eax, dword [ecx + eax*4]
mov dword [ecx + edx*4], eax
mov eax, dword [ebp - 0x18]
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 3
jle 0x1002acd3
mov byte [ebp - 0x1d], bl
cmp byte [ebp - 0x1d], 0
je 0x1002ad0e
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_CreateCompatibleDC]
lea ecx, [ebp - 0xa4]
call fcn.10001830
xor esi, esi
inc esi
jmp 0x1002adea
movzx edx, byte [ebp + esi - 0x5f]
mov eax, esi
sub eax, dword [ebp - 0x40]
movzx eax, byte [ebp + eax - 0x62]
movzx ecx, word [ebp + eax*2 - 0x64]
mov eax, ecx
and eax, edx
add eax, eax
sub ecx, eax
movzx eax, byte [ebp + esi - 0x60]
add ecx, edx
xor esi, esi
inc esi
mov word [ebp + eax*2 - 0x64], cx
mov dword [ebp - 0x3c], 0x137b1891
mov dword [ebp - 0x30], ebx
mov dword [ebp - 0x44], esi
mov dword [ebp - 0x2c], 0xd2250db8
mov dword [ebp - 0x2c], ebx
mov dword [ebp - 0x2c], 0xffffffff
mov dword [ebp - 0x24], 0x7110e6b6
mov dword [ebp - 0x48], 0x3f9150fa
mov dword [ebp - 0x18], ebx
jmp 0x1002ad8a
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x1a8], ebx
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 3
jl 0x1002ad7d
mov byte [ebp - 0x1d], bl
cmp byte [ebp - 0x1d], 0
je 0x1002ada0
push ebx
call dword [sym.imp.ole32.dll_CoInitialize]
mov eax, dword [ebp - 0x1a0]
mov eax, dword [ebp - 0x3c]
mov dword [ebp - 0x30], eax
inc dword [ebp - 0x24]
mov dword [ebp - 0x48], esi
cmp dword [ebp - 0x30], 0xfe4b2830
mov eax, dword [ebp - 0x3c]
sbb ecx, ecx
mov dword [ebp - 0x40], ebx
neg ecx
xor edx, edx
cmp eax, ecx
mov eax, dword [ebp - 0x24]
setge dl
xor ecx, ecx
cmp edx, eax
mov eax, dword [ebp - 0x48]
setl cl
add eax, dword [ebp - 0x44]
sub eax, dword [ebp - 0x1a4]
neg eax
sbb eax, eax
inc eax
add ecx, eax
mov dword [ebp - 0x44], ecx
mov eax, dword [ebp - 0x28]
add eax, edi
mov dword [ebp - 0x28], eax
jmp 0x1002aa2d
xor eax, eax
mov dword [ebp - 0x110], 7
mov word [ebp - 0x62], ax
lea ecx, [ebp - 0x124]
mov word [ebp - 0x124], ax
lea eax, [ebp - 0x64]
push eax
mov dword [ebp - 0x114], ebx
call fcn.10005bf3
push 3
lea ecx, [ebp - 0x130]
mov byte [ebp - 4], 0x16
call fcn.100017ce
push edi
lea ecx, [ebp - 0x148]
mov byte [ebp - 4], 0x17
call fcn.100017ce
mov dword [ebp - 0x2c], 0xa77c8748
mov dword [ebp - 0x1c], ebx
jmp 0x1002ae5f
mov ecx, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x130]
mov dword [eax + ecx*4], esi
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 3
jl 0x1002ae50
mov dword [ebp - 0x1c], ebx
jmp 0x1002ae7d
mov ecx, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x148]
mov dword [eax + ecx*4], 0xb8c3
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], edi
jl 0x1002ae6a
mov byte [ebp - 0x1d], bl
cmp byte [ebp - 0x1d], 0
je 0x1002ae92
push ebx
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
mov eax, dword [ebp - 0x130]
mov ecx, dword [eax]
mov eax, dword [ebp - 0x148]
mov dword [eax + 4], ecx
lea ecx, [ebp - 0x148]
mov dword [ebp - 0x2c], 0xfffffffa
call fcn.10001830
lea ecx, [ebp - 0x130]
mov byte [ebp - 4], 0x16
call fcn.10001830
mov dword [ebp - 0x64], ebx
lea ecx, [ebp - 0xe4]
mov dword [ebp - 0x1c], 0xca4f833f
push 3
call fcn.100017ce
mov dword [ebp - 0x18], ebx
jmp 0x1002aef3
mov ecx, dword [ebp - 0x18]
mov eax, dword [ebp - 0xe4]
mov dword [eax + ecx*4], 0xe60f951
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 3
jl 0x1002aee0
cmp dword [ebp - 0x1c], ebx
je 0x1002af0d
mov dword [ebp - 0x30], 0xffffffff
inc dword [ebp - 0x30]
jmp 0x1002af95
or eax, 0xffffffff
mov dword [ebp - 0x28], 0xfffffff9
mov dword [ebp - 0x24], eax
xor ecx, ecx
mov dword [ebp - 0x2c], eax
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x28]
cmp eax, esi
setg cl
mov dword [ebp - 0x28], ecx
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x24]
mov ecx, dword [ebp - 0xe4]
mov eax, dword [ebp - 0x1c]
mov ecx, dword [ecx + 4]
sub ecx, eax
jne 0x1002af4c
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0x24]
mov dword [ebp - 0x2c], esi
mov dword [ebp - 0x28], ebx
cmp dword [ebp - 0x28], edi
jg 0x1002af95
mov edx, 0xa1dd7933
mov dword [ebp - 0x18], ebx
jmp 0x1002af75
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x230], 6
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 4
jl 0x1002af64
mov ecx, dword [ebp - 0x28]
mov eax, dword [ebp - 0xe4]
mov dword [eax + ecx*4], edx
mov dword [ebp - 0x228], edx
inc dword [ebp - 0x28]
cmp dword [ebp - 0x28], edi
jle 0x1002af5f
mov byte [ebp - 0x1d], bl
cmp byte [ebp - 0x1d], 0
je 0x1002afb1
push 0x8b9
push ebx
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetWindowTextW]
lea ecx, [ebp - 0xe4]
call fcn.10001830
mov dword [ebp - 0x1c], 0xffffffff
mov dword [ebp - 0x2c], 0xfffffff8
mov dword [ebp - 0x18], ebx
jmp 0x1002afdd
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x70], 0xfff6
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], edi
jl 0x1002afcf
mov dword [ebp - 0x1c], 0x12
jmp 0x1002aff3
cmp dword [ebp - 0x1c], ebx
jne 0x1002aff9
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 0x1a
jne 0x1002afeb
mov dword [ebp - 0x1c], ebx
jmp 0x1002b0a5
mov dword [ebp - 0x18], 0xfffffffc
mov dword [ebp - 0x50], 0x267e
mov dword [ebp - 0x3c], 0xae215169
mov eax, dword [ebp - 0x1c]
mov ecx, dword [ebp + eax*4 - 0x70]
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0x70], ecx
mov dword [ebp - 0x18], ebx
jmp 0x1002b09c
mov dword [ebp - 0x2c], 0x8716
mov dword [ebp - 0x30], 0x5db2b058
mov eax, dword [ebp - 0x1c]
cmp dword [ebp + eax*4 - 0x70], ebx
jne 0x1002b0a2
mov eax, dword [ebp - 0x1c]
xor edx, edx
mov eax, dword [ebp + eax*4 - 0x70]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp + eax*4 - 0x70]
mov eax, dword [ebp - 0x6c]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp + eax*4 - 0x70]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp + eax*4 - 0x70]
mov eax, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x1c]
mov ecx, dword [ebp + eax*4 - 0x70]
imul ecx, dword [ebp - 0x50]
mov eax, dword [ebp - 0x30]
cmp ecx, eax
mov eax, dword [ebp - 0x1c]
setl dl
xor ecx, ecx
cmp edx, eax
setg cl
cmp ecx, dword [ebp - 0x3c]
je 0x1002b094
mov eax, dword [ebp - 0x1c]
cmp dword [ebp + eax*4 - 0x70], ebx
je 0x1002b094
xor eax, eax
inc eax
jmp 0x1002b096
mov eax, ebx
mov dword [ebp - 0x2c], eax
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 1
jle 0x1002b029
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 1
jle 0x1002b001
push 0x5f
pop ecx
mov al, bl
mov word [ebp - 0x68], cx
xor esi, esi
mov byte [ebp - 0x4c], al
mov word [ebp - 0x4b], 0x10f
mov ecx, edi
mov byte [ebp - 0x49], 0xc5
inc esi
mov dword [ebp - 0x18], edi
mov dword [ebp - 0x40], ebx
cmp ecx, 4
jae 0x1002b1fb
movzx eax, al
lea eax, [eax*2 + 2]
cmp ecx, eax
jne 0x1002b1bd
movzx eax, byte [ebp + ecx - 0x4c]
mov dword [ebp - 0x2c], eax
inc eax
mov dword [ebp - 0x3c], 0x338
cmp dword [ebp - 0x3c], 0x473
mov dword [ebp - 0x40], eax
jle 0x1002b194
push ebx
call dword [sym.imp.KERNEL32.dll_RemoveDirectoryW]
mov dword [ebp - 0x38], ebx
mov edx, ebx
mov dword [ebp - 0x34], ebx
mov ecx, ebx
mov dword [ebp - 0x24], ebx
mov eax, ebx
mov dword [ebp - 0x30], ebx
add eax, ecx
lea ecx, [ebp - 0x278]
xor eax, edx
or eax, dword [ebp - 0x38]
cdq
push edx
push eax
call fcn.10002394
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x1002b143
mov eax, dword [eax]
push eax
call fcn.10047752
pop ecx
push ebx
push esi
lea ecx, [ebp - 0x278]
call fcn.10005baf
mov eax, dword [ebp - 0x30]
mov ecx, dword [ebp - 0x24]
inc eax
mov edx, dword [ebp - 0x34]
mov dword [ebp - 0x30], eax
cmp eax, 0x16c9
jl 0x1002b124
inc ecx
mov dword [ebp - 0x24], ecx
cmp ecx, 0x55dc
jl 0x1002b11f
inc edx
mov dword [ebp - 0x34], edx
cmp edx, 0x6a14
jl 0x1002b11a
mov eax, dword [ebp - 0x38]
inc eax
mov dword [ebp - 0x38], eax
cmp eax, 0x46a7
jl 0x1002b115
mov ecx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x2c]
dec ecx
add ecx, eax
cmp dword [ebp - 0x3c], 0x124
mov dword [ebp - 0x18], ecx
jge 0x1002b1b4
push str.mtetsklrh_ughwcjr_qiplbgoc_dmkvtc_vrjcm_kkr_cmy_fuznirta_tdxswerky_supdcx_hzoordr_jpcexmvj_ofj_cik
call fcn.10047752
pop ecx
mov ecx, dword [ebp - 0x18]
mov dword [ebp - 4], 0x16
jmp 0x1002b1ee
movzx edx, byte [ebp + ecx - 0x4b]
mov eax, ecx
sub eax, dword [ebp - 0x40]
mov dword [ebp - 0x40], ebx
movzx eax, byte [ebp + eax - 0x4e]
movzx ecx, word [ebp + eax*2 - 0x68]
mov eax, ecx
and eax, edx
add eax, eax
sub ecx, eax
mov eax, dword [ebp - 0x18]
add ecx, edx
movzx eax, byte [ebp + eax - 0x4c]
mov word [ebp + eax*2 - 0x68], cx
mov ecx, dword [ebp - 0x18]
mov al, byte [ebp - 0x4c]
add ecx, edi
mov dword [ebp - 0x18], ecx
jmp 0x1002b0d0
xor eax, eax
lea ecx, [ebp - 0x13c]
mov word [ebp - 0x66], ax
mov dword [ebp - 0x1c], 0xfffffff7
push edi
call fcn.100017ce
mov byte [ebp - 4], 0x1a
mov dword [ebp - 0x24], 0xbf90350d
mov dword [ebp - 0x18], ebx
jmp 0x1002b237
mov ecx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x13c]
mov dword [eax + ecx*4], 0x9ac54c97
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], edi
jl 0x1002b224
mov byte [ebp - 0x1d], bl
cmp byte [ebp - 0x1d], 0
je 0x1002b24f
push ebx
push ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_EnumResourceNamesW]
mov dword [ebp - 0x1c], ebx
or edi, 0xffffffff
cmp dword [ebp - 0x1c], 0xfffffffe
jge 0x1002b330
mov dword [ebp - 0x30], esi
lea ecx, [ebp - 0xfc]
mov dword [ebp - 0x38], edi
push 4
call fcn.100017ce
mov dword [ebp - 0x2c], ebx
mov dword [ebp - 0x18], ebx
jmp 0x1002b28d
mov ecx, dword [ebp - 0x18]
mov eax, dword [ebp - 0xfc]
mov dword [eax + ecx*4], 0xcee34edf
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 4
jl 0x1002b27a
mov eax, dword [ebp - 0x1c]
mov edx, esi
mov ecx, dword [ebp - 0x38]
mov eax, dword [ebp - 0x24]
inc dword [ebp - 0x24]
cmp eax, ecx
mov eax, dword [ebp - 0x13c]
cmovne edx, ebx
mov ecx, dword [eax]
mov eax, dword [ebp - 0xfc]
mov dword [eax], ecx
xor ecx, ecx
mov eax, dword [ebp - 0x30]
cmp edx, esi
mov eax, dword [ebp - 0x30]
mov eax, dword [ebp - 0x1c]
setg cl
xor edx, edx
cmp ecx, eax
mov eax, dword [ebp - 0x1c]
setle dl
xor ecx, ecx
cmp eax, edx
mov eax, dword [ebp - 0x38]
setg cl
xor edx, edx
cmp ecx, eax
mov eax, dword [ebp - 0x1c]
setg dl
xor ecx, ecx
cmp eax, edx
setge cl
cmp ecx, dword [ebp - 0x38]
jle 0x1002b2fd
mov eax, dword [ebp - 0xfc]
mov edx, esi
cmp dword [eax + 4], ebx
jne 0x1002b2ff
mov edx, ebx
mov eax, dword [ebp - 0x1c]
xor ecx, ecx
cmp edx, eax
setl cl
xor eax, eax
sub ecx, 0x3cf6547d
cmp ecx, 0x1943
lea ecx, [ebp - 0xfc]
setl al
mov dword [ebp - 0x2c], eax
call fcn.10001830
dec dword [ebp - 0x1c]
jmp 0x1002b255
lea ecx, [ebp - 0x13c]
mov byte [ebp - 4], 0x16
call fcn.10001830
xor eax, eax
mov dword [ebp - 0x1c8], 7
mov word [ebp - 0x1dc], ax
lea ecx, [ebp - 0x1dc]
lea eax, [ebp - 0x68]
mov dword [ebp - 0x1cc], ebx
push eax
call fcn.10005bf3
mov byte [ebp - 4], 0x1b
mov dword [ebp - 0x68], ebx
mov dword [ebp - 0x2c], 0x9ac78948
mov byte [ebp - 0x1d], bl
cmp byte [ebp - 0x1d], 0
je 0x1002b38c
push ebx
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_SetWindowTextW]
mov byte [ebp - 0x1d], bl
cmp byte [ebp - 0x1d], 0
je 0x1002b3a2
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetParent]
push dword [ebp - 0x114]
cmp dword [ebp - 0x110], 8
lea eax, [ebp - 0x124]
push ebx
cmovae eax, dword [ebp - 0x124]
lea ecx, [ebp - 0x1f4]
push eax
call fcn.100297e8
cmp eax, edi
je 0x1002b3e5
push edi
push ebx
lea ecx, [ebp - 0x1dc]
push ecx
push esi
push eax
lea ecx, [ebp - 0x1f4]
call fcn.10019f2a
jmp 0x1002b3a2
mov dword [ebp - 0x3c], 0x60e
cmp dword [ebp - 0x3c], 0x79a
jle 0x1002b463
mov edi, ebx
mov ecx, ebx
mov dword [ebp - 0x30], ebx
mov eax, edi
shl eax, cl
lea ecx, [ebp - 0x2a8]
cdq
push edx
push eax
call fcn.10002394
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x1002b418
mov eax, dword [eax]
push eax
call fcn.10047752
pop ecx
push ebx
push esi
lea ecx, [ebp - 0x2a8]
call fcn.10005baf
mov ecx, dword [ebp - 0x30]
inc ecx
mov dword [ebp - 0x30], ecx
cmp ecx, 0x57ec
jl 0x1002b3fc
inc edi
cmp edi, 0x5528
jl 0x1002b3f7
mov edi, dword [sym.imp.USER32.dll_GetDesktopWindow]
push ebx
push 0x20b9
push ebx
call edi
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_GetTextExtentPoint32W]
jmp 0x1002b469
mov edi, dword [sym.imp.USER32.dll_GetDesktopWindow]
push dword [ebp - 0x88]
movdqa xmm0, xmmword [0x1006e500]
lea eax, [ebp - 0x1f4]
push eax
lea eax, [ebp - 0x204]
mov dword [ebp - 0xb0], ebx
push eax
push ebx
lea ecx, [ebp - 0xb0]
mov dword [ebp - 0xac], ebx
movdqu xmmword [ebp - 0x204], xmm0
mov dword [ebp - 0xa8], ebx
call fcn.100018ed
cmp dword [ebp - 0x3c], 0x597
jge 0x1002b4bf
push str.wqun_mneml_nffn_tkkjpxz_usvqwydkc_lvhdqh_rskqi_lszt_ngjkuu_xkcuey_rpx_nivgicjw_smggxn
call fcn.10047752
pop ecx
mov dword [ebp - 4], 0x1b
mov dword [ebp - 0x18], 0xcb50bf34
mov dword [ebp - 0x18], ebx
jmp 0x1002b4ea
mov eax, dword [ebp - 0x18]
mov edx, dword [ebp - 0x18]
mov ecx, dword [ebp - 0xb0]
mov eax, dword [ecx + eax*4]
mov dword [ecx + edx*4], eax
mov eax, dword [ebp - 0x18]
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 3
jle 0x1002b4d2
mov byte [ebp - 0x1d], bl
cmp byte [ebp - 0x1d], 0
je 0x1002b509
call edi
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_CreateCompatibleDC]
lea ecx, [ebp - 0xb0]
call fcn.10001830
mov ecx, dword [ebp - 0x8c]
lea eax, [ebp - 0x1f4]
push eax
lea edx, [ebp - 0x1c0]
call fcn.1002b74c
pop ecx
push ebx
push esi
lea ecx, [ebp - 0x1dc]
call fcn.10005c7b
push ebx
push esi
lea ecx, [ebp - 0x124]
call fcn.10005c7b
push ebx
push esi
lea ecx, [ebp - 0x1f4]
call fcn.10005c7b
push ebx
push esi
lea ecx, [ebp - 0x1c0]
call fcn.10005c7b
mov ecx, dword [ebp - 0xc]
mov eax, dword [ebp - 0x8c]
pop edi
pop esi
mov dword fs:[0], ecx
pop ebx
mov esp, ebp
pop ebp
ret