Function at 0x10011436
Capabilities:
Extract resource via kernel32 functions
Get common file path
Identify system language via api

Disassembly:
mov eax, 0x10058b73
call fcn.10057e90
sub esp, 0x2c0
push ebx
push esi
push edi
mov dword [ebp - 0x10], esp
xor ebx, ebx
mov dword [ebp - 0x7c], ecx
lea ecx, [ebp - 0x130]
push 1
mov dword [ebp - 0xbc], edx
mov dword [ebp - 0x1ac], ebx
call fcn.100013ad
push 2
lea ecx, [ebp - 0x124]
mov dword [ebp - 4], ebx
call fcn.100013ad
mov byte [ebp - 4], 1
mov dword [ebp - 0x34], 0x3923
cmp dword [ebp - 0x34], 0x3cf1
jle 0x100114f5
mov esi, ebx
mov dword [ebp - 0x1c], ebx
mov edi, ebx
mov dword [ebp - 0x20], ebx
mov eax, esi
cdq
idiv edi
mov edi, 0x2612
mov esi, edx
mov eax, esi
lea ecx, [ebp - 0x250]
cdq
push edx
push eax
call fcn.10001331
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x100114be
mov eax, dword [eax]
push eax
call fcn.10040c20
pop ecx
push ebx
push 1
lea ecx, [ebp - 0x250]
call fcn.10001542
inc esi
dec edi
jne 0x100114a4
mov edi, dword [ebp - 0x20]
mov esi, dword [ebp - 0x1c]
inc edi
mov dword [ebp - 0x20], edi
cmp edi, 0x3792
jl 0x10011498
inc esi
mov dword [ebp - 0x1c], esi
cmp esi, 0x25cd
jl 0x10011493
mov dword [ebp - 0x18], ebx
jmp 0x1001150d
mov ecx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x130]
mov dword [eax + ecx*4], 0xd5e48d32
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 1
jl 0x100114fa
cmp dword [ebp - 0x34], 0x38ca
jge 0x10011527
push str.dxbztws_isomqnh_smsllhye_wtzt_rvtdglgak
call fcn.10040c20
pop ecx
mov dword [ebp - 0x18], ebx
jmp 0x1001153b
mov ecx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x124]
mov dword [eax + ecx*4], ebx
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 2
jl 0x1001152c
mov byte [ebp - 0x29], bl
cmp byte [ebp - 0x29], 0
je 0x1001155a
push 0x22b7
push 0x1b16
call dword [sym.imp.GDI32.dll_SetROP2]
mov ecx, dword [ebp - 0x124]
mov edx, dword [ebp - 0x130]
mov dword [ecx], ebx
mov eax, dword [ecx]
mov dword [edx + eax*4], 0x61f6656
inc dword [ecx]
cmp dword [ecx], 1
jl 0x10011568
lea ecx, [ebp - 0x124]
call fcn.1000140a
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x130]
call fcn.1000140a
push dword [ebp - 0x7c]
movdqa xmm0, xmmword [0x10065cb0]
lea eax, [ebp - 0x200]
push eax
lea eax, [ebp - 0x210]
mov dword [ebp - 0x68], 0xd02ce03
push eax
mov dword [ebp - 0x64], 0x10305
lea ecx, [ebp - 0xb8]
mov dword [ebp - 0x60], 0x8d8f3803
mov dword [ebp - 0x5c], 0x26000d04
mov word [ebp - 0x58], 0x1b06
mov dword [ebp - 0x24], 0xd8cb4c23
push ebx
movdqu xmmword [ebp - 0x210], xmm0
mov dword [ebp - 0xb8], ebx
mov dword [ebp - 0xb4], ebx
mov dword [ebp - 0xb0], ebx
call fcn.10006820
mov edx, dword [ebp - 0xb8]
xor ecx, ecx
mov dword [ebp - 0x28], 3
cmp dword [edx], 0x223fa3a9
setle cl
xor eax, eax
cmp ecx, dword [edx]
setg al
mov dword [edx + 0xc], eax
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0x24]
imul eax, dword [ebp - 0x24]
imul eax, eax, 0xc371
cmp eax, 7
je 0x1001163d
cmp dword [ebp - 0x24], ebx
jne 0x1001163d
mov eax, ebx
jmp 0x10011640
xor eax, eax
inc eax
mov dword [ebp - 0x28], eax
mov byte [ebp - 0x29], bl
cmp byte [ebp - 0x29], 0
je 0x10011653
push ebx
call dword [sym.imp.ADVAPI32.dll_CloseServiceHandle]
lea ecx, [ebp - 0xb8]
call fcn.1000140a
push 0x62
pop eax
push 2
mov word [ebp - 0x102], ax
mov edi, ebx
pop esi
mov dword [ebp - 0x38], 0x24f84b81
mov dword [ebp - 0x28], 0xffffffff
mov dword [ebp - 0x20], 0xe21a
mov dword [ebp - 0x24], 0xffffffff
mov dword [ebp - 0x30], ebx
jmp 0x1001169f
mov eax, dword [ebp - 0x30]
mov dword [ebp + eax*4 - 0x178], 1
inc dword [ebp - 0x30]
cmp dword [ebp - 0x30], 4
jl 0x1001168e
mov eax, dword [ebp - 0x38]
inc dword [ebp - 0x20]
je 0x10011703
mov ecx, dword [ebp - 0x170]
xor edx, edx
mov eax, dword [ebp - 0x38]
cmp eax, ecx
setg dl
xor eax, eax
cmp edx, 0xfffffff9
mov edx, dword [ebp - 0x170]
setle al
sub edx, eax
mov eax, dword [ebp - 0x38]
neg edx
sbb edx, edx
add edx, 0xffff1509
neg edx
sbb edx, edx
xor ecx, ecx
inc edx
cmp edx, eax
mov eax, dword [ebp - 0x38]
setle cl
xor edx, edx
cmp ecx, eax
setle dl
inc edx
neg edx
sbb edx, edx
inc edx
add edx, dword [ebp - 0x38]
cmp edx, dword [ebp - 0x24]
je 0x10011703
xor eax, eax
inc eax
jmp 0x10011705
mov eax, ebx
mov dword [ebp - 0x170], eax
mov dword [ebp - 0x24], 0xffffffe9
jmp 0x10011776
mov dword [ebp - 0x20], 0x857617c0
cmp dword [ebp - 0x20], ebx
je 0x10011769
mov dword [ebp - 0x20], 6
lea ecx, [ebp - 0x1c0]
push 2
call fcn.100013ad
mov dword [ebp - 0x20], 1
mov dword [ebp - 0x30], ebx
jmp 0x10011753
mov ecx, dword [ebp - 0x30]
mov eax, dword [ebp - 0x1c0]
mov dword [eax + ecx*4], 0xe1b8d813
inc dword [ebp - 0x30]
cmp dword [ebp - 0x30], 2
jl 0x10011740
inc dword [ebp - 0x20]
lea ecx, [ebp - 0x1c0]
call fcn.1000140a
jmp 0x10011773
mov dword [ebp - 0x20], 1
mov eax, dword [ebp - 0x28]
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], 0x25
jl 0x10011714
cmp esi, 8
jne 0x100119aa
mov dword [ebp - 0x30], 1
lea ecx, [ebp - 0x1a8]
mov dword [ebp - 0x38], 0xfffffffe
mov dword [ebp - 0x1c], 0x24b54114
mov dword [ebp - 0x24], 0x67457993
push 1
call fcn.100013ad
mov dword [ebp - 4], 4
mov dword [ebp - 0x18], ebx
jmp 0x100117cd
mov ecx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x1a8]
mov dword [eax + ecx*4], 0x95761be3
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 1
jl 0x100117ba
mov dword [ebp - 0x18], ebx
jmp 0x100117e9
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x110], 0x45cb296a
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 2
jl 0x100117d8
cmp dword [ebp - 0x30], 0xffff
sbb eax, eax
xor ecx, ecx
neg eax
cmp eax, 1
setg cl
xor edx, edx
mov dword [ebp - 0x30], ecx
mov ecx, dword [ebp - 0x38]
mov eax, dword [ebp - 0x30]
cmp eax, ecx
mov eax, dword [ebp - 0x38]
setg dl
xor ecx, ecx
cmp edx, eax
setge cl
xor edx, edx
add ecx, dword [ebp - 0x38]
mov dword [ebp - 0x38], ecx
mov ecx, 0xffffc11d
mov eax, dword [ebp - 0x38]
sub ecx, eax
mov dword [ebp - 0x1c], ecx
mov ecx, dword [ebp - 0x24]
mov eax, dword [ebp - 0x1c]
cmp eax, ecx
setge dl
mov dword [ebp - 0x24], edx
mov dword [ebp - 0x24], ebx
jmp 0x10011987
mov dword [ebp - 0x20], 0xda781b5f
lea ecx, [ebp - 0x184]
mov eax, 0xb108f980
mov dword [ebp - 0x18], 0xc5a4a104
mov dword [ebp - 0xf8], eax
mov dword [ebp - 0xf4], eax
mov dword [ebp - 0xf0], eax
mov dword [ebp - 0xec], eax
push 1
call fcn.100013ad
mov dword [ebp - 0x30], ebx
jmp 0x10011897
mov ecx, dword [ebp - 0x30]
mov eax, dword [ebp - 0x184]
mov dword [eax + ecx*4], 0xe89c674f
inc dword [ebp - 0x30]
cmp dword [ebp - 0x30], 1
jl 0x10011884
mov dword [ebp - 0x30], ebx
cmp dword [ebp - 0x30], ebx
jl 0x1001196f
mov dword [ebp - 0x34], 0x2a6add33
xor edx, edx
mov dword [ebp - 0x28], ebx
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x38], eax
mov ecx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x20]
cmp eax, ecx
mov eax, dword [ebp - 0x38]
setl dl
xor ecx, ecx
cmp eax, edx
mov eax, dword [ebp - 0x1c]
setg cl
xor edx, edx
cmp ecx, eax
mov eax, dword [ebp - 0x34]
setg dl
xor ecx, ecx
cmp edx, eax
mov eax, dword [ebp - 0x34]
setl cl
xor edx, edx
cmp ecx, 0x40a9711f
setle dl
xor ecx, ecx
cmp edx, eax
setg cl
imul ecx, dword [ebp - 0x34]
test ecx, ecx
je 0x1001190b
cmp dword [ebp - 0x34], ebx
je 0x1001190b
xor eax, eax
inc eax
jmp 0x1001190d
mov eax, ebx
add eax, 0xcc6a3362
xor edx, edx
mov dword [ebp - 0x10c], eax
mov ecx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x20]
cmp eax, ecx
setge dl
cmp dword [ebp - 0x1c], edx
je 0x10011933
cmp dword [ebp - 0x20], ebx
jne 0x10011933
mov eax, ebx
jmp 0x10011936
xor eax, eax
inc eax
mov dword [ebp - 0xf4], eax
cmp dword [ebp - 0x38], ebx
je 0x1001194b
cmp dword [ebp - 0x34], ebx
je 0x1001194b
xor eax, eax
inc eax
jmp 0x1001194d
mov eax, ebx
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x18], ebx
jmp 0x10011961
mov eax, dword [ebp - 0x10c]
mov dword [ebp - 0x28], eax
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], ebx
jle 0x10011955
dec dword [ebp - 0x30]
jns 0x100118a9
mov dword [ebp - 0xf4], 1
lea ecx, [ebp - 0x184]
call fcn.1000140a
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], ebx
jle 0x10011847
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x1a8]
call fcn.1000140a
push 4
pop edi
push 0xa
pop esi
jmp 0x10011a5a
movzx edx, byte [ebp + esi - 0x67]
mov eax, esi
sub eax, edi
mov edi, ebx
movzx eax, byte [ebp + eax - 0x6a]
movzx eax, word [ebp + eax*2 - 0x108]
mov ecx, eax
and eax, edx
or ecx, edx
sub ecx, eax
movzx eax, byte [ebp + esi - 0x68]
mov word [ebp + eax*2 - 0x108], cx
mov dword [ebp - 0x28], 0xffffffff
mov dword [ebp - 0x28], 9
mov dword [ebp - 0x28], ebx
mov dword [ebp - 0x28], 0x84b81147
mov dword [ebp - 0x28], 0x39ed080c
mov dword [ebp - 0x28], 0xfffffff7
mov dword [ebp - 0x28], 0x34eea2a3
mov dword [ebp - 0x28], ebx
mov dword [ebp - 0x28], 0xfffffff9
mov dword [ebp - 0x28], 0x5bfc88eb
mov dword [ebp - 0x28], 0x76038591
mov dword [ebp - 0x28], 0xfffffffb
mov dword [ebp - 0x28], ebx
mov dword [ebp - 0x28], 0xfffffffc
mov dword [ebp - 0x28], 0x65420764
mov dword [ebp - 0x28], 0xc54c9751
mov dword [ebp - 0x28], 0xdcee34ed
mov dword [ebp - 0x28], 0x13e19f23
mov dword [ebp - 0x28], 7
mov dword [ebp - 0x20], 0xf0ebf903
inc dword [ebp - 0x20]
add esi, 2
cmp esi, 0x12
jb 0x1001166d
xor eax, eax
mov word [ebp - 0xfa], ax
mov dword [ebp - 0x1c], 1
mov dword [ebp - 0x20], ebx
mov dword [ebp - 0x1c], 0xf
cmp dword [ebp - 0x1c], 8
jge 0x10011b4a
mov dword [ebp - 0x28], 0x515466bc
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x20]
cmp dword [ebp - 0x28], ebx
je 0x10011ab3
mov byte [ebp - 0x29], bl
cmp byte [ebp - 0x29], al
je 0x10011b20
push ebx
call dword [sym.imp.ADVAPI32.dll_GetLengthSid]
jmp 0x10011b20
mov dword [ebp - 0x24], 0xffffffff
mov dword [ebp - 0x34], 0x313
cmp dword [ebp - 0x34], 0x68b
jle 0x10011af1
mov esi, ebx
mov edi, ebx
mov eax, edi
mov ecx, 0x10073038
or eax, esi
cdq
push edx
push eax
call fcn.10004272
inc edi
cmp edi, 0x4ffc
jl 0x10011ace
inc esi
cmp esi, 0x3769
jl 0x10011acc
mov dword [ebp - 0x24], 0xb6917ab6
mov dword [ebp - 4], 5
cmp dword [ebp - 0x34], 0x14a
jge 0x10011b17
mov edx, str.srwoy_favjwmfhn_wcvjg_pulbrc_pbjkuhgiu_nfxtgdzfx
mov ecx, 0x10073038
call fcn.100062fd
or dword [ebp - 4], 0xffffffff
cmp dword [ebp - 0x24], ebx
jne 0x10011b4a
dec dword [ebp - 0x1c]
jmp 0x10011a80
xor eax, eax
mov dword [ebp - 0x18c], ebx
push 7
pop esi
mov word [ebp - 0x19c], ax
lea ecx, [ebp - 0x19c]
lea eax, [ebp - 0x108]
mov dword [ebp - 0x188], esi
push eax
call fcn.1000ed02
mov dword [ebp - 4], esi
mov dword [ebp - 0x18], 0x75c96dd1
mov dword [ebp - 0x18], 0xfffffff3
jmp 0x10011c25
mov dword [ebp - 0x24], 0xa9ef72d4
mov dword [ebp - 0x20], 0xffffffff
mov dword [ebp - 0x24], ebx
jmp 0x10011c18
mov dword [ebp - 0x28], 0x90c54408
lea ecx, [ebp - 0x160]
push 1
call fcn.100013ad
mov dword [ebp - 0x1c], ebx
jmp 0x10011bc9
mov ecx, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x160]
mov dword [eax + ecx*4], 0x5714ffd8
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 1
jl 0x10011bb6
mov eax, dword [ebp - 0x18]
xor ecx, ecx
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x28]
imul eax, dword [ebp - 0x18]
cmp eax, 0xfffffff9
setl cl
sub ecx, 4
neg ecx
sbb ecx, ecx
inc ecx
neg ecx
mov dword [ebp - 0x20], ecx
xor ecx, ecx
mov eax, dword [ebp - 0x20]
imul eax, dword [ebp - 0x24]
cmp eax, 0x81d2
mov eax, dword [ebp - 0x160]
setle cl
mov dword [eax], ecx
lea ecx, [ebp - 0x160]
call fcn.1000140a
dec dword [ebp - 0x24]
cmp dword [ebp - 0x24], 0xfffffff0
jl 0x10011b9d
dec dword [ebp - 0x18]
cmp dword [ebp - 0x18], 0xffffffec
jg 0x10011b8a
mov dword [ebp - 0x18], 0xffffffe5
cmp dword [ebp - 0x18], 0xffffffea
je 0x10011cd7
mov byte [ebp - 0x29], bl
mov dword [ebp - 0x20], 0x3cb5
cmp dword [ebp - 0x20], 0x3db3
jle 0x10011ca0
mov edi, ebx
mov esi, ebx
mov eax, edi
lea ecx, [ebp - 0x2b0]
cdq
idiv esi
mov eax, edx
cdq
push edx
push eax
call fcn.10001331
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x10011c76
mov eax, dword [eax]
push eax
call fcn.10040c20
pop ecx
push ebx
push 1
lea ecx, [ebp - 0x2b0]
call fcn.10001542
inc esi
cmp esi, 0x4fc9
jl 0x10011c57
inc edi
cmp edi, 0x69f3
jl 0x10011c55
push 7
pop esi
cmp byte [ebp - 0x29], 0
je 0x10011cb8
push 0x1a7c
push ebx
push ebx
push 0x21ec
call dword [sym.imp.USER32.dll_SetWindowsHookExA]
cmp dword [ebp - 0x20], 0x3999
jge 0x10011ccc
push str.qnxmhm_kch_pqofkt_qldcnrs_unb_pbo_isaicnvr_opc_ktimdbr_nzoohxtz_bixniaomt_nlgebkxlk
call fcn.10040c20
pop ecx
mov dword [ebp - 4], esi
inc dword [ebp - 0x18]
jmp 0x10011c36
xor eax, eax
lea edi, [ebp - 0x108]
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
mov eax, 0x70ade216
mov dword [ebp - 0x8c], eax
mov dword [ebp - 0x88], eax
mov dword [ebp - 0x84], eax
mov dword [ebp - 0x80], eax
mov dword [ebp - 0x34], 0xdc5336de
mov dword [ebp - 0x20], 0xffffffff
mov dword [ebp - 0x1c], 3
mov dword [ebp - 0x1c], 0xf7b1466a
mov dword [ebp - 0x28], 0xbe26b5cf
mov dword [ebp - 0x1c], ebx
jmp 0x10011d36
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0x168], 0x813c27f3
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 2
jl 0x10011d25
cmp dword [ebp - 0x80], ebx
jne 0x10011dae
mov eax, dword [ebp - 0x20]
xor edx, edx
mov ecx, dword [ebp - 0x80]
mov eax, dword [ebp - 0x80]
cmp ecx, eax
setge dl
mov dword [ebp - 0x1c], edx
cmp dword [ebp - 0x1c], 0x936be856
mov eax, dword [ebp - 0x80]
sbb ecx, ecx
xor edx, edx
neg ecx
cmp ecx, eax
mov eax, dword [ebp - 0x20]
setne dl
mov dword [ebp - 0x28], edx
xor edx, edx
cmp dword [ebp - 0x28], eax
mov eax, dword [ebp - 0x34]
setne dl
xor ecx, ecx
cmp eax, edx
mov eax, 0xa0d461e3
setne cl
cmp eax, ecx
mov eax, dword [ebp - 0x80]
sbb ecx, ecx
neg ecx
imul ecx, eax
mov eax, dword [ebp - 0x80]
imul eax, ecx
xor ecx, ecx
cmp ecx, eax
sbb eax, eax
inc eax
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0x168], eax
mov eax, dword [ebp - 0x80]
mov eax, dword [ebp - 0x20]
lea ecx, [ebp - 0x1f0]
push dword [ebp - 0xbc]
neg eax
sbb eax, eax
neg eax
mov dword [ebp - 0x28], eax
call fcn.10004387
push 2
lea ecx, [ebp - 0x154]
mov byte [ebp - 4], 0xa
call fcn.100013ad
push 2
pop edx
mov dword [ebp - 0x28], edx
mov dword [ebp - 0x1c], ebx
jmp 0x10011dfa
mov ecx, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x154]
mov dword [eax + ecx*4], 1
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], edx
jl 0x10011de7
mov byte [ebp - 0x29], bl
cmp byte [ebp - 0x29], 0
je 0x10011e0f
push ebx
call dword [sym.imp.KERNEL32.dll_LockResource]
mov eax, dword [ebp - 0x154]
lea ecx, [ebp - 0x154]
mov eax, dword [eax + 4]
mov dword [ebp - 0x28], eax
call fcn.1000140a
mov dword [ebp - 0x18], 0xffffffff
push 0xfffffffffffffffe
pop esi
mov dword [ebp - 0x78], esi
mov dword [ebp - 0x74], esi
mov dword [ebp - 0x70], esi
mov dword [ebp - 0x6c], esi
mov dword [ebp - 0x20], esi
mov dword [ebp - 0x20], 0xffffffff
mov dword [ebp - 0x28], 0x84abf0a6
push 3
mov dword [ebp - 0x38], 0xe1c2a91
pop eax
mov dword [ebp - 0x28], eax
mov dword [ebp - 0x18], 0x12
jmp 0x10011e9f
mov dword [ebp - 0x34], 0x75286e87
mov dword [ebp - 0x34], 0x17
jmp 0x10011e96
mov dword [ebp - 0x1c], 5
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], ebx
jl 0x10011e93
mov eax, dword [ebp - 0x1c]
cmp dword [ebp + eax*4 - 0x78], ebx
jne 0x10011e90
dec dword [ebp - 0x1c]
jns 0x10011e82
push 3
pop eax
dec dword [ebp - 0x34]
cmp dword [ebp - 0x34], 0xffffffff
jle 0x10011e73
dec dword [ebp - 0x18]
cmp dword [ebp - 0x18], 0x10
je 0x10011e63
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], ebx
jl 0x10012171
mov dword [ebp - 0x24], 0xc6d0f065
mov dword [ebp - 0x30], ebx
mov dword [ebp - 0x20], ebx
mov dword [ebp - 0x34], 0x347e
cmp dword [ebp - 0x34], 0x37c6
jle 0x10011f22
push 0x1700
call dword [sym.imp.GDI32.dll_UpdateColors]
mov edi, ebx
mov dword [ebp - 0x20], ebx
mov esi, ebx
mov eax, edi
mov dword [ebp - 0x28], ebx
cdq
idiv esi
mov edi, dword [ebp - 0x28]
mov ebx, edx
mov eax, edi
mov ecx, 0x10073038
or eax, ebx
cdq
push edx
push eax
call fcn.10004272
inc edi
cmp edi, 0x6c53
jl 0x10011eed
mov edi, dword [ebp - 0x20]
inc esi
push 0
pop ebx
cmp esi, 0x44df
jl 0x10011ee0
inc edi
mov dword [ebp - 0x20], edi
cmp edi, 0x12c8
jl 0x10011ede
mov dword [ebp - 0x1c], ebx
jmp 0x10011f38
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0x94], 0xe6e40424
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 2
jl 0x10011f27
mov byte [ebp - 4], 0xb
cmp dword [ebp - 0x34], 0x32a6
jge 0x10011f78
mov edx, str.yzix_bgmw_keuh
mov ecx, 0x10073038
call fcn.100062fd
jmp 0x10011f78
mov dword [ebp - 4], 0xa
xor ecx, ecx
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp + eax*4 - 0x78]
mov dword [ebp - 0x90], eax
mov dword [ebp - 0x24], eax
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp + eax*4 - 0x78]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp + eax*4 - 0x78]
mov eax, dword [ebp - 0x70]
cmp eax, 0x8b9b
setne cl
xor edx, edx
mov dword [ebp - 0x20], ecx
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp + eax*4 - 0x78]
mov eax, dword [ebp - 0x20]
cmp eax, ecx
mov eax, dword [ebp - 0x18]
setg dl
xor ecx, ecx
mov eax, dword [ebp + eax*4 - 0x78]
cmp eax, edx
setl cl
xor edx, edx
mov dword [ebp - 0x20], ecx
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp + eax*4 - 0x78]
mov eax, dword [ebp - 0x20]
cmp eax, ecx
mov eax, dword [ebp - 0x30]
setl dl
xor ecx, ecx
cmp edx, eax
mov eax, dword [ebp - 0x70]
setl cl
mov dword [ebp - 0x28], ecx
xor ecx, ecx
cmp dword [ebp - 0x28], eax
setge cl
mov dword [ebp - 0x28], ecx
mov dword [ebp - 0x38], 0x184eb300
mov eax, dword [ebp - 0x18]
cmp dword [ebp + eax*4 - 0x78], ebx
je 0x1001201b
cmp dword [ebp - 0x90], ebx
je 0x1001201b
xor ecx, ecx
inc ecx
jmp 0x1001201d
mov ecx, ebx
mov eax, dword [ebp - 0x18]
add eax, ecx
xor ecx, ecx
cmp eax, 1
setge cl
imul ecx, dword [ebp - 0x18]
mov dword [ebp - 0x20], ecx
xor ecx, ecx
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp + eax*4 - 0x78]
cmp eax, 0xbfbd
setl cl
xor edx, edx
mov dword [ebp - 0x28], ecx
mov ecx, dword [ebp - 0x20]
mov eax, dword [ebp - 0x70]
cmp ecx, eax
setg dl
xor eax, eax
cmp dword [ebp - 0x28], edx
setl al
mov dword [ebp - 0x28], eax
mov dword [ebp - 0x24], ebx
cmp dword [ebp - 0x24], 3
jg 0x10012169
mov dword [ebp - 0x20], ebx
mov dword [ebp - 0x1c], ebx
jmp 0x10012083
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0x1b4], 0xffffffff
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 2
jl 0x10012072
mov dword [ebp - 0x30], 0x6548
cmp dword [ebp - 0x30], 0x6656
jle 0x10012103
mov dword [ebp - 0x34], ebx
mov dword [ebp - 0x20], ebx
mov dword [ebp - 0x1c], 0x5ea6
mov esi, dword [ebp - 0x20]
mov edi, ebx
mov eax, edi
lea ecx, [ebp - 0x280]
or eax, esi
cdq
push edx
push eax
call fcn.10001331
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x100120c7
mov eax, dword [eax]
push eax
call fcn.10040c20
pop ecx
push ebx
push 1
lea ecx, [ebp - 0x280]
call fcn.10001542
inc edi
cmp edi, 0xded
jl 0x100120ab
mov esi, dword [ebp - 0x34]
add dword [ebp - 0x20], esi
dec dword [ebp - 0x1c]
jne 0x100120a6
inc esi
mov dword [ebp - 0x34], esi
cmp esi, 0x1058
jl 0x1001209c
push ebx
call dword [sym.imp.COMDLG32.dll_FindTextW]
mov dword [ebp - 0x38], ebx
jmp 0x10012140
mov eax, dword [ebp - 0x38]
xor edx, edx
mov eax, dword [ebp + eax*4 - 0x94]
mov dword [ebp - 0x20], eax
mov eax, dword [ebp - 0x38]
mov ecx, dword [ebp + eax*4 - 0x94]
mov eax, dword [ebp - 0x20]
cmp ecx, eax
mov eax, dword [ebp - 0x38]
setg dl
xor ecx, ecx
mov eax, dword [ebp + eax*4 - 0x70]
cmp edx, eax
setg cl
mov dword [ebp - 0x1b4], ecx
inc dword [ebp - 0x38]
cmp dword [ebp - 0x38], 1
jle 0x10012108
cmp dword [ebp - 0x30], 0x651a
jge 0x1001215a
push str.mvncdza_alh_fpcxbcmv_nkskunig_iwljca_lhvw
call fcn.10040c20
pop ecx
mov dword [ebp - 4], 0xa
inc dword [ebp - 0x24]
jmp 0x10012060
dec dword [ebp - 0x18]
jmp 0x10011ea8
push dword [ebp - 0x7c]
movdqa xmm0, xmmword [str._t_t_t_t]
lea eax, [ebp - 0x1f0]
push eax
lea eax, [ebp - 0x200]
mov dword [ebp - 0x18], 0xfffffffc
push eax
push ebx
lea ecx, [ebp - 0xa0]
mov dword [ebp - 0xa0], ebx
movdqu xmmword [ebp - 0x200], xmm0
mov dword [ebp - 0x9c], ebx
mov dword [ebp - 0x98], ebx
call fcn.10006820
mov byte [ebp - 4], 0xf
xor ecx, ecx
mov dword [ebp - 0x34], 0x6add33d7
inc ecx
mov dword [ebp - 0x1c], ebx
jmp 0x100121d4
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0x3c], ecx
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], ecx
jl 0x100121ca
mov dword [ebp - 0x18], ebx
cmp dword [ebp - 0x18], ebx
jl 0x100122ab
mov dword [ebp - 0x20], 0x83674579
lea ecx, [ebp - 0xd0]
mov dword [ebp - 0x20], ebx
push 3
call fcn.100013ad
mov dword [ebp - 0x1c], ebx
jmp 0x10012214
mov ecx, dword [ebp - 0x1c]
mov eax, dword [ebp - 0xd0]
mov dword [eax + ecx*4], 0x311e2db8
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 3
jl 0x10012201
mov eax, dword [ebp - 0x18]
xor ecx, ecx
mov eax, dword [ebp + eax*4 - 0x3c]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp + eax*4 - 0x3c]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp + eax*4 - 0x3c]
cmp eax, 0x3ee76373
mov eax, dword [ebp - 0x3c]
setge cl
xor edx, edx
imul ecx, eax
mov eax, dword [ebp - 0x18]
add eax, ecx
mov dword [ebp - 0x20], eax
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x20], eax
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp + eax*4 - 0x3c]
mov eax, dword [ebp - 0x20]
cmp eax, ecx
mov eax, dword [ebp - 0x18]
setg dl
sub edx, dword [ebp + eax*4 - 0x3c]
mov eax, dword [ebp - 0xd0]
mov dword [eax], edx
mov eax, dword [ebp - 0x18]
cmp dword [ebp - 0x18], 0xfff9
jne 0x1001227f
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x3c]
xor ecx, ecx
mov eax, dword [ebp - 0xd0]
cmp dword [eax], ebx
mov eax, dword [ebp - 0xa0]
setne cl
mov dword [eax], ecx
lea ecx, [ebp - 0xd0]
call fcn.1000140a
dec dword [ebp - 0x18]
jns 0x100121e5
mov dword [ebp - 0x18], 3
cmp dword [ebp - 0x18], ebx
jl 0x1001231f
mov dword [ebp - 0x24], 0xfffffff7
mov dword [ebp - 0x20], 0x38140a97
mov dword [ebp - 0x24], 3
cmp dword [ebp - 0x24], ebx
jl 0x100122e0
mov dword [ebp - 0x28], ebx
mov dword [ebp - 0x28], 9
dec dword [ebp - 0x24]
jns 0x100122d1
mov dword [ebp - 0x24], 0x8e5161e3
mov eax, dword [ebp - 0x24]
neg eax
je 0x1001230a
mov eax, dword [ebp - 0x18]
xor edx, edx
mov ecx, dword [ebp - 0x34]
mov eax, dword [ebp - 0x18]
cmp eax, ecx
setle dl
mov dword [ebp - 0x20], edx
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x18]
mov eax, dword [ebp - 0xa0]
mov dword [eax + ecx*4], 0x93f04518
dec dword [ebp - 0x18]
jns 0x100122b7
lea ecx, [ebp - 0xa0]
mov byte [ebp - 4], 0xa
call fcn.1000140a
push 0x5c
pop eax
push 2
mov byte [ebp - 0x44], bl
mov ecx, ebx
mov dword [ebp - 0x43], 0xeee703db
mov byte [ebp - 0x3f], 0xac
mov word [ebp - 0x50], ax
pop esi
cmp esi, 2
jne 0x10012354
push 4
pop ecx
push ecx
pop esi
jmp 0x1001237b
movzx edx, byte [ebp + esi - 0x43]
mov eax, esi
sub eax, ecx
movzx eax, byte [ebp + eax - 0x46]
movzx eax, word [ebp + eax*2 - 0x50]
mov ecx, eax
and eax, edx
or ecx, edx
sub ecx, eax
movzx eax, byte [ebp + esi - 0x44]
mov word [ebp + eax*2 - 0x50], cx
mov ecx, ebx
add esi, 2
cmp esi, 6
jb 0x10012348
xor eax, eax
mov dword [ebp - 0xd4], 7
mov word [ebp - 0x4e], ax
lea ecx, [ebp - 0xe8]
mov word [ebp - 0xe8], ax
lea eax, [ebp - 0x50]
push eax
mov dword [ebp - 0xd8], ebx
call fcn.1000ed02
mov byte [ebp - 4], 0x10
lea ecx, [ebp - 0xac]
push 2
mov dword [ebp - 0x50], ebx
call fcn.100013ad
mov byte [ebp - 4], 0x11
mov dword [ebp - 0x20], 0x2f9d44c0
mov dword [ebp - 0x28], 6
mov dword [ebp - 0x18], ebx
jmp 0x100123ed
mov ecx, dword [ebp - 0x18]
mov eax, dword [ebp - 0xac]
mov dword [eax + ecx*4], 1
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 2
jl 0x100123da
mov dword [ebp - 0x18], ebx
jmp 0x10012405
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x220], ebx
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 4
jl 0x100123f8
mov byte [ebp - 0x29], bl
cmp byte [ebp - 0x29], 0
je 0x1001242f
push 0xada
push 0x19c5
push 0x1a70
push 0x49a
push ebx
call dword [sym.imp.USER32.dll_CheckMenuRadioItem]
mov dword [ebp - 0x38], 0x4b0b
cmp dword [ebp - 0x38], 0x4cf9
jle 0x100124b6
mov esi, ebx
mov dword [ebp - 0x30], ebx
mov eax, esi
mov dword [ebp - 0x24], 0x2adb
mov dword [ebp - 0x34], eax
mov esi, eax
mov dword [ebp - 0x1c], 0x5d1
mov edi, ebx
mov eax, edi
lea ecx, [ebp - 0x238]
or eax, esi
cdq
push edx
push eax
call fcn.10001331
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x10012477
mov eax, dword [eax]
push eax
call fcn.10040c20
pop ecx
push ebx
push 1
lea ecx, [ebp - 0x238]
call fcn.10001542
inc edi
cmp edi, 0x74af
jl 0x1001245b
dec esi
dec dword [ebp - 0x1c]
jne 0x10012459
mov eax, dword [ebp - 0x34]
dec eax
dec dword [ebp - 0x24]
mov dword [ebp - 0x34], eax
jne 0x10012450
mov esi, dword [ebp - 0x30]
inc esi
mov dword [ebp - 0x30], esi
cmp esi, 0x21d2
jl 0x10012444
mov eax, dword [ebp - 0xac]
cmp dword [eax], ebx
jne 0x100124da
mov dword [ebp - 0x20], 0x5ca42045
cmp dword [ebp - 0x20], ebx
mov eax, dword [ebp - 0xac]
jne 0x100124d6
cmp dword [eax], ebx
jne 0x100124da
mov ecx, ebx
jmp 0x100124dd
xor ecx, ecx
inc ecx
cmp ecx, dword [eax]
jne 0x100124ea
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0xac]
mov eax, dword [eax]
mov dword [ebp - 0x220], eax
mov dword [ebp - 0x28], eax
cmp dword [ebp - 0x38], 0x4945
jge 0x10012509
push str.isq_jbwj_xmcjs_ueniwqh_mywauey_cpkngnpz_wcymrvow
call fcn.10040c20
pop ecx
lea ecx, [ebp - 0xac]
mov dword [ebp - 4], 0x10
call fcn.1000140a
push 0x5f
pop eax
push 2
mov byte [ebp - 0x4c], bl
mov ecx, ebx
mov dword [ebp - 0x4b], 0x8a370307
mov byte [ebp - 0x47], 0x2e
mov word [ebp - 0x54], ax
pop esi
cmp esi, 2
jne 0x10012541
push 4
pop ecx
push ecx
pop esi
jmp 0x1001256a
movzx edx, byte [ebp + esi - 0x4b]
mov eax, esi
sub eax, ecx
movzx eax, byte [ebp + eax - 0x4e]
movzx ecx, word [ebp + eax*2 - 0x54]
mov eax, ecx
and eax, edx
add eax, eax
sub ecx, eax
movzx eax, byte [ebp + esi - 0x4c]
add ecx, edx
mov word [ebp + eax*2 - 0x54], cx
mov ecx, ebx
add esi, 2
cmp esi, 6
jb 0x10012535
xor eax, eax
lea ecx, [ebp - 0x148]
mov word [ebp - 0x52], ax
mov dword [ebp - 0x18], 0x3066c93e
mov dword [ebp - 0x38], 0xfffffff9
mov dword [ebp - 0x24], 0x61fc2da8
push 2
call fcn.100013ad
mov byte [ebp - 4], 0x14
mov dword [ebp - 0x20], 0x715ee56e
mov dword [ebp - 0x1c], ebx
jmp 0x100125bd
mov ecx, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x148]
mov dword [eax + ecx*4], 0xfdb696
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 2
jl 0x100125aa
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 0x836ccb03
jne 0x100125ec
cmp dword [ebp - 0x18], ebx
je 0x100125ec
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x18]
neg eax
je 0x100125ec
xor eax, eax
inc eax
jmp 0x100125ee
mov eax, ebx
mov dword [ebp - 0x38], eax
mov eax, dword [ebp - 0x38]
neg eax
sub eax, dword [ebp - 0x24]
neg eax
sbb eax, eax
inc eax
cmp eax, 0xffffffff
sbb eax, eax
neg eax
mov dword [ebp - 0x24], eax
mov dword [ebp - 0x28], 0x346c
cmp dword [ebp - 0x28], 0x3784
jle 0x1001269f
mov dword [ebp - 0x1c], ebx
mov dword [ebp - 0x24], ebx
mov ecx, ebx
mov dword [ebp - 0x34], 0x2133
mov dword [ebp - 0x20], ecx
mov esi, dword [ebp - 0x1c]
mov edi, ebx
mov eax, edi
and eax, ecx
lea ecx, [ebp - 0x268]
xor eax, esi
cdq
push edx
push eax
call fcn.10001331
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x10012651
mov eax, dword [eax]
push eax
call fcn.10040c20
pop ecx
push ebx
push 1
lea ecx, [ebp - 0x268]
call fcn.10001542
mov ecx, dword [ebp - 0x20]
inc edi
cmp edi, 0x2bdb
jl 0x10012633
mov esi, dword [ebp - 0x24]
add ecx, esi
dec dword [ebp - 0x34]
mov dword [ebp - 0x20], ecx
jne 0x1001262e
inc esi
mov dword [ebp - 0x24], esi
cmp esi, 0x1876
jl 0x10012622
mov eax, dword [ebp - 0x1c]
inc eax
mov dword [ebp - 0x1c], eax
cmp eax, 0x431e
jl 0x1001261f
call dword [sym.imp.KERNEL32.dll_GetSystemDefaultUILanguage]
xor eax, eax
inc eax
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], ebx
jl 0x10012792
mov dword [ebp - 0x18], ebx
cmp dword [ebp - 0x18], eax
jg 0x1001278a
mov dword [ebp - 0x38], eax
cmp dword [ebp - 0x38], ebx
jl 0x10012782
mov dword [ebp - 0x30], eax
mov dword [ebp - 0x1c], 0x61c0
cmp dword [ebp - 0x1c], 0x6347
jle 0x10012726
mov esi, ebx
mov edi, ebx
mov dword [ebp - 0x20], 0x8025
mov eax, edi
lea ecx, [ebp - 0x298]
cdq
push edx
push eax
call fcn.10001331
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x100126fe
mov eax, dword [eax]
push eax
call fcn.10040c20
pop ecx
push ebx
push 1
lea ecx, [ebp - 0x298]
call fcn.10001542
add edi, esi
dec dword [ebp - 0x20]
jne 0x100126e4
inc esi
cmp esi, 0x3685
jl 0x100126db
xor eax, eax
inc eax
mov dword [ebp - 0x30], ebx
cmp dword [ebp - 0x30], eax
jg 0x1001275c
mov dword [ebp - 0x20], 0x6f393842
mov eax, dword [ebp - 0x18]
mov edx, dword [ebp - 0x24]
mov ecx, dword [ebp - 0x148]
mov eax, dword [ecx + eax*4]
mov dword [ecx + edx*4], eax
mov eax, dword [ebp - 0x30]
mov dword [ebp - 0x20], eax
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x20], eax
inc dword [ebp - 0x30]
cmp dword [ebp - 0x30], 1
jle 0x1001272e
cmp dword [ebp - 0x1c], 0x5f36
jge 0x10012770
push str.gfrnhhjp_teudgjvx_udhyelayz_dxkx
call fcn.10040c20
pop ecx
mov dword [ebp - 4], 0x14
xor eax, eax
dec dword [ebp - 0x38]
inc eax
jmp 0x100126bd
inc dword [ebp - 0x18]
jmp 0x100126b1
dec dword [ebp - 0x24]
jmp 0x100126a5
cmp dword [ebp - 0x28], 0x3441
jge 0x100127a6
push str.xycacs_eadotsu_zvzndconk_eui_rcxfmgs_lvjzzuqmm_bdpslxipb_mgsdupkzd_oaa_dze_pmx_nynpg_rwqpdbsgg
call fcn.10040c20
pop ecx
lea ecx, [ebp - 0x148]
mov dword [ebp - 4], 0x10
call fcn.1000140a
xor eax, eax
mov dword [ebp - 0x1c4], 7
mov word [ebp - 0x1d8], ax
lea ecx, [ebp - 0x1d8]
lea eax, [ebp - 0x54]
mov dword [ebp - 0x1c8], ebx
push eax
call fcn.1000ed02
mov byte [ebp - 4], 0x19
mov dword [ebp - 0x54], ebx
mov dword [ebp - 0x20], 0xfffffff7
mov dword [ebp - 0x28], ebx
push 2
mov dword [ebp - 0x28], 0xe5e5349
mov dword [ebp - 0x18], ebx
pop ecx
jmp 0x10012811
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0xc4], 0xfffffffe
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], ecx
jl 0x10012800
mov dword [ebp - 0x18], ebx
jmp 0x1001282c
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x118], 0xfffffffb
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], ecx
jl 0x1001281b
mov edx, dword [ebp - 0xc4]
mov eax, dword [ebp - 0xc0]
sub edx, 0xfffffff6
neg edx
sbb edx, edx
xor ecx, ecx
inc edx
cmp eax, edx
mov eax, dword [ebp - 0xc0]
setle cl
xor edx, edx
cmp eax, ecx
mov ecx, dword [ebp - 0x20]
mov eax, dword [ebp - 0x20]
setle dl
add ecx, edx
xor edx, edx
cmp ecx, eax
setl dl
mov dword [ebp - 0x118], edx
test edx, edx
je 0x1001287f
cmp dword [ebp - 0x118], ebx
je 0x1001287f
xor ecx, ecx
inc ecx
jmp 0x10012881
mov ecx, ebx
mov eax, dword [ebp - 0x20]
add ecx, 0xb999fb02
xor edx, edx
cmp ecx, eax
setg dl
xor ecx, ecx
mov dword [ebp - 0x28], edx
imul eax, dword [ebp - 0x28], 0x609f
cmp eax, 0xbcd
setne cl
mov dword [ebp - 0x28], ecx
mov dword [ebp - 0x1c], 0x39
cmp dword [ebp - 0x1c], 0x8c
jle 0x10012924
mov edi, ebx
mov dword [ebp - 0x20], ebx
mov esi, ebx
mov dword [ebp - 0x28], ebx
mov dword [ebp - 0x34], esi
and esi, edi
mov dword [ebp - 0x24], ebx
mov edi, ebx
mov eax, edi
lea ecx, [ebp - 0x2c8]
or eax, esi
cdq
push edx
push eax
call fcn.10001331
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x100128e8
mov eax, dword [eax]
push eax
call fcn.10040c20
pop ecx
push ebx
push 1
lea ecx, [ebp - 0x2c8]
call fcn.10001542
inc edi
cmp edi, 0x7ee2
jl 0x100128cc
mov esi, dword [ebp - 0x28]
mov edi, dword [ebp - 0x20]
inc esi
mov dword [ebp - 0x28], esi
cmp esi, 0x36e1
jl 0x100128c2
inc edi
mov dword [ebp - 0x20], edi
cmp edi, 0x2c6b
jl 0x100128bd
push dword [ebp - 0xd8]
cmp dword [ebp - 0xd4], 8
lea eax, [ebp - 0xe8]
push ebx
cmovae eax, dword [ebp - 0xe8]
lea ecx, [ebp - 0x1f0]
push eax
call fcn.10012f66
cmp eax, 0xffffffff
je 0x1001296a
push 0xffffffffffffffff
push ebx
lea ecx, [ebp - 0x1d8]
push ecx
push 1
push eax
lea ecx, [ebp - 0x1f0]
call fcn.10012c72
jmp 0x10012924
cmp dword [ebp - 0x1c], 0xfffffdfd
jge 0x1001297e
push str.prbrbe_cuvrilgnj_hpfj_wsfqw_lzewfu_hmsz_vivjei_cibiikcb_xbwxxzip_ejjeu_bbbcjrapx_oshcu
call fcn.10040c20
pop ecx
push 0x19
pop esi
mov dword [ebp - 4], esi
mov dword [ebp - 0x30], 0xfffffffc
mov dword [ebp - 0x30], ebx
jmp 0x10012a36
mov dword [ebp - 0x34], 0xa3df603f
lea ecx, [ebp - 0x13c]
push 3
call fcn.100013ad
push 3
mov dword [ebp - 0x1c], ebx
pop edx
jmp 0x100129c2
mov ecx, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x13c]
mov dword [eax + ecx*4], 4
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], edx
jl 0x100129af
mov dword [ebp - 0x34], ebx
jmp 0x10012a0e
mov dword [ebp - 0x1c], 0x91e29ea4
mov dword [ebp - 0x1c], 2
cmp dword [ebp - 0x1c], ebx
jl 0x10012a0b
mov dword [ebp - 0x24], 0xfffffffa
mov dword [ebp - 0x24], ebx
jmp 0x100129fe
mov ecx, dword [ebp - 0x24]
mov eax, dword [ebp - 0x13c]
mov dword [eax + ecx*4], 0xe1dfe009
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], edx
jl 0x100129eb
mov eax, dword [ebp - 0x1c]
dec dword [ebp - 0x1c]
jns 0x100129df
dec dword [ebp - 0x34]
cmp dword [ebp - 0x34], 0xfffffffd
jle 0x100129cc
mov byte [ebp - 0x29], bl
cmp byte [ebp - 0x29], 0
je 0x10012a28
push ebx
push 0x45
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_GetTempFileNameW]
lea ecx, [ebp - 0x13c]
call fcn.1000140a
inc dword [ebp - 0x30]
cmp dword [ebp - 0x30], esi
jle 0x10012993
mov ecx, dword [ebp - 0x7c]
lea eax, [ebp - 0x1f0]
push eax
lea edx, [ebp - 0x19c]
call fcn.10013009
pop ecx
push ebx
push 1
lea ecx, [ebp - 0x1d8]
call fcn.10004836
push ebx
push 1
lea ecx, [ebp - 0xe8]
call fcn.10004836
push ebx
push 1
lea ecx, [ebp - 0x1f0]
call fcn.10004836
push ebx
push 1
lea ecx, [ebp - 0x19c]
call fcn.10004836
mov eax, dword [ebp - 0x7c]
mov ecx, dword [ebp - 0xc]
pop edi
pop esi
mov dword fs:[0], ecx
pop ebx
mov esp, ebp
pop ebp
ret