Function at 0x10002862
Capabilities:
Clear file content
Query environment variable

Disassembly:
mov eax, 0x100583e5
call fcn.10057d24
sub esp, 0x318
mov dword [ebp - 0x18], 1
mov dword [ebp - 0x24], 0x12af048
push ebx
xor ebx, ebx
mov dword [ebp - 0xc4], edx
mov dword [ebp - 0x24], ebx
mov dword [ebp - 0x28], 0x204795ed
mov dword [ebp - 0x34], 3
push esi
mov dword [ebp - 0x2c], ebx
push edi
mov dword [ebp - 0x34], 0x1e60e779
mov dword [ebp - 0x10], esp
mov dword [ebp - 0x94], ecx
mov dword [ebp - 0x248], ebx
mov dword [ebp - 0x1c], ebx
jmp 0x100028c7
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0x2cc], ebx
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 4
jl 0x100028ba
mov ecx, dword [ebp - 0x18]
xor edx, edx
mov eax, dword [ebp - 0x18]
cmp ecx, eax
setle dl
cmp dword [ebp - 0x18], edx
jg 0x10002940
mov eax, dword [ebp - 0x18]
xor edx, edx
mov dword [ebp - 0x24], eax
mov eax, dword [ebp - 0x24]
mov dword [ebp - 0x24], eax
mov ecx, dword [ebp - 0x24]
mov eax, dword [ebp - 0x18]
cmp ecx, eax
setle dl
sub edx, dword [ebp - 0x18]
neg edx
sbb edx, edx
xor ecx, ecx
inc edx
xor esi, esi
imul edx, dword [ebp - 0x28]
inc esi
mov dword [ebp - 0x28], edx
mov eax, dword [ebp - 0x28]
mov dword [ebp - 0x34], eax
mov eax, dword [ebp - 0x18]
cmp eax, esi
mov eax, dword [ebp - 0x18]
setl cl
xor edx, edx
cmp ecx, eax
setg dl
xor ecx, ecx
mov dword [ebp - 0x2c8], edx
mov eax, dword [ebp - 0x18]
cmp edx, eax
setge cl
imul ecx, dword [ebp - 0x2c]
test ecx, ecx
jne 0x10002943
mov eax, ebx
jmp 0x10002945
xor esi, esi
inc esi
mov eax, esi
xor ecx, ecx
mov edx, 0x84c5
sub edx, eax
mov eax, dword [ebp - 0x18]
cmp edx, eax
push 3
setg cl
mov dword [ebp - 0x34], ecx
lea ecx, [ebp - 0x198]
mov dword [ebp - 0x2c], 9
mov dword [ebp - 0x28], 0x77b568be
mov dword [ebp - 0x34], esi
mov dword [ebp - 0x28], 0xffff
call fcn.100013fd
mov dword [ebp - 0x28], 0x9cea445a
mov dword [ebp - 0x1c], ebx
jmp 0x10002999
mov ecx, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x198]
mov dword [eax + ecx*4], esi
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 3
jl 0x1000298a
mov eax, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x2c]
inc eax
cmp eax, 0xfffffffa
jl 0x100029b2
cmp dword [ebp - 0x34], ebx
jne 0x100029b2
mov esi, ebx
mov eax, dword [ebp - 0x2c]
add eax, 0xe70
mov dword [ebp - 0x28], eax
xor eax, eax
mov edx, dword [ebp - 0x28]
imul edx, dword [ebp - 0x2c]
cmp esi, 0xca6c8490
sete al
xor ecx, ecx
add edx, eax
mov eax, dword [ebp - 0x2c]
cmp edx, eax
setl cl
mov dword [ebp - 0x28], ecx
mov ecx, dword [ebp - 0x28]
mov eax, dword [ebp - 0x198]
neg ecx
sbb ecx, ecx
neg ecx
mov dword [eax], ecx
mov dword [ebp - 0x28], ecx
lea ecx, [ebp - 0x198]
call fcn.10001439
mov dword [ebp - 0x68], 0x3e039506
mov dword [ebp - 0x64], 0x28000d02
mov dword [ebp - 0x60], 0xd052604
mov word [ebp - 0x5c], 1
mov dword [ebp - 0x2c], 0xe91a049f
mov dword [ebp - 0x2c], 0xffffffe9
jmp 0x10002afa
push 1
lea ecx, [ebp - 0x104]
call fcn.100013fd
push 2
lea ecx, [ebp - 0x244]
mov dword [ebp - 4], ebx
call fcn.100013fd
xor edx, edx
inc edx
mov byte [ebp - 4], dl
mov dword [ebp - 0x18], ebx
jmp 0x10002a66
mov ecx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x104]
mov dword [eax + ecx*4], 0x22124f84
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], edx
jl 0x10002a53
mov dword [ebp - 0x18], ebx
jmp 0x10002a7f
mov ecx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x244]
mov dword [eax + ecx*4], edx
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 2
jl 0x10002a70
mov eax, dword [ebp - 0x104]
mov dword [eax], 0xffffffed
push 2
lea ecx, [ebp - 0x150]
call fcn.100013fd
mov dword [ebp - 0x1c], ebx
jmp 0x10002ab6
mov ecx, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x150]
mov dword [eax + ecx*4], 0xfffffffe
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 2
jl 0x10002aa3
mov eax, dword [ebp - 0x150]
lea ecx, [ebp - 0x150]
mov dword [eax + 4], ebx
call fcn.10001439
mov eax, dword [ebp - 0x104]
inc dword [eax]
cmp dword [eax], 0xc
jl 0x10002a91
lea ecx, [ebp - 0x244]
call fcn.10001439
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x104]
call fcn.10001439
inc dword [ebp - 0x2c]
cmp dword [ebp - 0x2c], 0xe
jle 0x10002a2b
push 0x5c
pop edi
mov word [ebp - 0x120], di
mov dword [ebp - 0x18], 0x37db
cmp dword [ebp - 0x18], 0x37f4
jle 0x10002b85
mov edi, ebx
mov esi, ebx
mov ecx, ebx
mov dword [ebp - 0x24], 0x5b6
mov dword [ebp - 0x28], ecx
mov eax, edi
shl eax, cl
lea ecx, [ebp - 0x308]
cdq
push edx
push eax
call fcn.10002811
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x10002b4a
mov eax, dword [eax]
push eax
call fcn.100402ca
pop ecx
push ebx
push 1
lea ecx, [ebp - 0x308]
call fcn.10001571
mov ecx, dword [ebp - 0x28]
add ecx, esi
dec dword [ebp - 0x24]
mov dword [ebp - 0x28], ecx
jne 0x10002b2e
inc esi
cmp esi, 0x30d3
jl 0x10002b22
inc edi
cmp edi, 0x1db
jl 0x10002b20
push ebx
call dword [sym.imp.KERNEL32.dll_FindClose]
push 3
lea ecx, [ebp - 0x18c]
call fcn.100013fd
mov dword [ebp - 0x1c], ebx
jmp 0x10002baa
mov ecx, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x18c]
mov dword [eax + ecx*4], 0xb110c93b
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 3
jl 0x10002b97
mov ecx, dword [ebp - 0x18c]
mov dword [ecx + 4], 4
mov dword [ebp - 0x2c], 9
mov dword [ebp - 0x2c], 0xffffffe9
jmp 0x10002be3
mov dword [ebp - 0x34], 0xc79e672c
mov eax, dword [ebp - 0x2c]
neg eax
sbb eax, eax
neg eax
mov dword [ebp - 0x34], eax
inc dword [ebp - 0x2c]
cmp dword [ebp - 0x2c], 0x11
jg 0x10002bcd
inc dword [ecx + 4]
cmp dword [ecx + 4], 0xc
jle 0x10002bbd
lea ecx, [ebp - 0x18c]
call fcn.10001439
cmp dword [ebp - 0x18], 0x35e0
jge 0x10002c11
push str.halbfdbz_ivjqkmoh_udkbf
call fcn.100402ca
pop ecx
or dword [ebp - 4], 0xffffffff
push 2
pop esi
movzx eax, byte [ebp + esi - 0x6a]
movzx ecx, byte [ebp + esi - 0x67]
movzx eax, word [ebp + eax*2 - 0x12c]
mov edx, eax
and eax, ecx
or edx, ecx
sub edx, eax
movzx eax, byte [ebp + esi - 0x68]
add esi, 2
mov word [ebp + eax*2 - 0x12c], dx
cmp esi, 0xe
jb 0x10002c18
xor eax, eax
lea ecx, [ebp - 0x1e8]
push 4
mov word [ebp - 0x11e], ax
call fcn.100013fd
mov dword [ebp - 0x24], 0xa32b1cec
mov dword [ebp - 0x30], 0xfffffffa
mov dword [ebp - 0x1c], ebx
jmp 0x10002c80
mov ecx, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x1e8]
or dword [eax + ecx*4], 0xffffffff
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 4
jl 0x10002c70
mov dword [ebp - 0x24], 3
cmp dword [ebp - 0x24], ebx
jl 0x10002cc1
mov byte [ebp - 0x1d], bl
cmp byte [ebp - 0x1d], 0
je 0x10002ca7
push ebx
push 1
push 1
push ebx
call dword [sym.imp.KERNEL32.dll_CreateEventW]
mov byte [ebp - 0x1d], bl
cmp byte [ebp - 0x1d], 0
je 0x10002cbc
push ebx
push 0x25cb
call dword [sym.imp.GDI32.dll_CreateHatchBrush]
dec dword [ebp - 0x24]
jns 0x10002c92
lea ecx, [ebp - 0x1e8]
call fcn.10001439
xor eax, eax
mov dword [ebp - 0x1f8], 7
mov word [ebp - 0x20c], ax
lea ecx, [ebp - 0x20c]
lea eax, [ebp - 0x12c]
mov dword [ebp - 0x1fc], ebx
push eax
call fcn.100044ea
mov dword [ebp - 4], 4
mov eax, ebx
mov dword [ebp - 0x2c], ebx
cmp eax, 8
jae 0x10002f3f
push 2
lea ecx, [ebp - 0x1c0]
call fcn.100013fd
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x218]
mov dword [ebp - 0xc0], ebx
mov dword [ebp - 0xbc], ebx
mov dword [ebp - 0xb8], ebx
mov dword [ebp - 0xb4], ebx
mov dword [ebp - 0x30], 0xc7af5af8
mov dword [ebp - 0x30], 0xae7b79f6
mov dword [ebp - 0x30], 0xbdb979cd
mov dword [ebp - 0x30], 0x2b82c447
push 3
call fcn.100013fd
mov byte [ebp - 4], 6
lea eax, [ebp - 0x278]
push dword [ebp - 0x94]
movdqa xmm0, xmmword [0x10066a10]
lea ecx, [ebp - 0xd4]
push eax
lea eax, [ebp - 0x288]
mov dword [ebp - 0xd4], ebx
push eax
push ebx
movdqu xmmword [ebp - 0x288], xmm0
mov dword [ebp - 0xd0], ebx
mov dword [ebp - 0xcc], ebx
call fcn.1000619c
mov byte [ebp - 4], 7
mov dword [ebp - 0x18], ebx
jmp 0x10002dc0
mov ecx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x1c0]
mov dword [eax + ecx*4], 0xfffffffe
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 2
jl 0x10002dad
mov dword [ebp - 0x1c], 0x7ddc
cmp dword [ebp - 0x1c], 0x80b4
jle 0x10002e15
mov dword [ebp - 0x24], ebx
mov edi, ebx
mov dword [ebp - 0x28], 0x5dc4
mov ebx, edi
mov esi, 0x2cd2
mov eax, ebx
mov ecx, 0x10073b38
cdq
push edx
push eax
call fcn.10004192
inc ebx
dec esi
jne 0x10002de9
mov esi, dword [ebp - 0x24]
add edi, esi
dec dword [ebp - 0x28]
jne 0x10002de2
inc esi
mov dword [ebp - 0x24], esi
push 0
pop ebx
cmp esi, 0x4768
jl 0x10002dd9
mov dword [ebp - 0x18], ebx
jmp 0x10002e2d
mov ecx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x218]
mov dword [eax + ecx*4], 2
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 3
jl 0x10002e1a
mov byte [ebp - 4], 8
cmp dword [ebp - 0x1c], 0x7bd4
jge 0x10002e6d
mov edx, str.hapc_beo_sweahw_eedabobu_nibum_dnpdpoom_iivuonnhy_dbu_tbtdximgx
mov ecx, 0x10073b38
call fcn.10005a51
jmp 0x10002e6d
mov dword [ebp - 4], 7
mov dword [ebp - 0xb4], 1
cmp dword [ebp - 0xb4], ebx
jl 0x10002efa
mov dword [ebp - 0x24], 0xccbad86e
lea ecx, [ebp - 0x1dc]
mov dword [ebp - 0x30], 0xfffffffb
mov dword [ebp - 0x30], 0xa92bd42c
push 1
call fcn.100013fd
xor edx, edx
mov dword [ebp - 0x1c], ebx
inc edx
jmp 0x10002ec3
mov ecx, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x1dc]
mov dword [eax + ecx*4], 0x48b1647c
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], edx
jl 0x10002eb0
mov dword [ebp - 0x24], edx
cmp dword [ebp - 0x24], ebx
jl 0x10002edf
mov dword [ebp - 0x28], 0x580d
dec dword [ebp - 0x28]
dec dword [ebp - 0x24]
jns 0x10002ed0
mov eax, dword [ebp - 0xd4]
lea ecx, [ebp - 0x1dc]
dec dword [eax]
call fcn.10001439
dec dword [ebp - 0xb4]
jns 0x10002e86
lea ecx, [ebp - 0xd4]
mov dword [ebp - 0xb4], 0x752570e
call fcn.10001439
lea ecx, [ebp - 0x218]
call fcn.10001439
lea ecx, [ebp - 0x1c0]
mov byte [ebp - 4], 4
call fcn.10001439
mov eax, dword [ebp - 0x2c]
xor ecx, ecx
mov word [ebp + eax*2 - 0x12c], cx
inc eax
mov dword [ebp - 0x2c], eax
jmp 0x10002d03
push dword [ebp - 0xc4]
lea ecx, [ebp - 0x278]
call fcn.10001388
mov byte [ebp - 4], 0xa
lea ecx, [ebp - 0x174]
mov dword [ebp - 0x2c], 9
xor esi, esi
mov dword [ebp - 0x28], 0x77b568be
inc esi
mov dword [ebp - 0x3c], esi
mov dword [ebp - 0x28], 0xffff
push 3
call fcn.100013fd
mov byte [ebp - 4], 0xb
mov dword [ebp - 0x34], 0x9cea445a
mov dword [ebp - 0x1c], 0x902
cmp dword [ebp - 0x1c], 0xadc
jle 0x10003007
mov eax, ebx
mov dword [ebp - 0x28], ebx
mov edi, ebx
mov dword [ebp - 0x24], ebx
cdq
idiv edi
mov dword [ebp - 0x34], ebx
mov edi, ebx
mov eax, edx
mov dword [ebp - 0x18], eax
mov ecx, edi
shl eax, cl
lea ecx, [ebp - 0x2f0]
cdq
push edx
push eax
call fcn.10002811
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x10002fca
mov eax, dword [eax]
push eax
call fcn.100402ca
pop ecx
push ebx
push esi
lea ecx, [ebp - 0x2f0]
call fcn.10001571
mov eax, dword [ebp - 0x18]
inc edi
cmp edi, 0xd5a
jl 0x10002fae
mov edi, dword [ebp - 0x24]
mov eax, dword [ebp - 0x28]
inc edi
mov dword [ebp - 0x24], edi
cmp edi, 0x5860
jl 0x10002fa1
inc eax
mov dword [ebp - 0x28], eax
cmp eax, 0x27d2
jl 0x10002f9c
cmp dword [ebp - 0x1c], 0x7a0
jge 0x1000301b
push str.rlogdcn_fqlezyke_gqlxoqw
call fcn.100402ca
pop ecx
mov dword [ebp - 4], 0xb
mov dword [ebp - 0x1c], ebx
jmp 0x10003036
mov ecx, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x174]
mov dword [eax + ecx*4], esi
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 3
jl 0x10003027
mov dword [ebp - 0x34], 0x1512
cmp dword [ebp - 0x34], 0x865
jge 0x100030a8
lea eax, [ebp - 0x7c]
mov edi, str._d__d__d
push eax
lea eax, [ebp - 0x80]
push eax
lea eax, [ebp - 0x74]
push eax
push edi
call fcn.100401d6
add esp, 0x10
jmp 0x100030a2
mov edx, ebx
mov eax, esi
mov ecx, eax
imul ecx, eax
cmp ecx, dword [ebp - 0x80]
jl 0x1000307c
cmp ecx, dword [ebp - 0x7c]
jg 0x1000307c
inc edx
inc eax
cmp eax, 0x34
jle 0x1000306c
push edx
push 0x10060ac8
call fcn.100402ca
lea eax, [ebp - 0x7c]
push eax
lea eax, [ebp - 0x80]
push eax
lea eax, [ebp - 0x74]
push eax
push edi
call fcn.100401d6
add esp, 0x18
cmp dword [ebp - 0x74], 0
jne 0x10003068
mov eax, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x2c]
inc eax
cmp eax, 0xfffffffa
jl 0x100030bb
cmp dword [ebp - 0x3c], ebx
jne 0x100030bb
mov esi, ebx
mov eax, dword [ebp - 0x2c]
add eax, 0xe70
mov dword [ebp - 0x28], eax
xor eax, eax
mov edx, dword [ebp - 0x28]
imul edx, dword [ebp - 0x2c]
cmp esi, 0xca6c8490
sete al
xor ecx, ecx
add edx, eax
mov eax, dword [ebp - 0x2c]
cmp edx, eax
setl cl
mov dword [ebp - 0x28], ecx
mov ecx, dword [ebp - 0x28]
mov eax, dword [ebp - 0x174]
neg ecx
sbb ecx, ecx
neg ecx
mov dword [eax], ecx
mov dword [ebp - 0x34], ecx
lea ecx, [ebp - 0x174]
mov byte [ebp - 4], 0xa
call fcn.10001439
xor ecx, ecx
mov dword [ebp - 0x1c], 0xfffffffe
mov dword [ebp - 0x18], ebx
inc ecx
jmp 0x1000312a
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x88], 0x13b9
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], ecx
jl 0x10003119
mov dword [ebp - 0x18], ebx
jmp 0x10003145
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x2d8], 0xe838
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 3
jl 0x10003134
mov dword [ebp - 0x1c], ebx
cmp dword [ebp - 0x1c], ebx
jg 0x1000317e
mov byte [ebp - 0x1d], bl
cmp byte [ebp - 0x1d], 0
je 0x10003173
push 0x1654
push 0x11d5
push ebx
push ebx
push 0x1578
call dword [sym.imp.USER32.dll_MsgWaitForMultipleObjects]
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], ebx
jle 0x10003153
xor ecx, ecx
inc ecx
mov byte [ebp - 0x48], bl
mov dword [ebp - 0x47], 0x850f02f0
mov dword [ebp - 0x38], 0x2604
mov dword [ebp - 0x34], 0xbd6c3f0b
mov dword [ebp - 0x30], 0xc3a23fe5
mov dword [ebp - 0x3c], 0xecc2443a
mov dword [ebp - 0x28], 0xcd16652d
mov dword [ebp - 0x30], 0xdf7cd95d
mov dword [ebp - 0x28], 0xb7f609b2
mov dword [ebp - 0x30], ebx
mov dword [ebp - 0x2c], ebx
mov dword [ebp - 0x1b4], ecx
mov dword [ebp - 0x1b0], ecx
mov dword [ebp - 0x1ac], ecx
mov dword [ebp - 0x1a8], ecx
lea ecx, [ebp - 0x15c]
mov dword [ebp - 0x3c], 0xc842
push 3
call fcn.100013fd
mov byte [ebp - 4], 0xe
mov dword [ebp - 0x1c], 0x825
cmp dword [ebp - 0x1c], 0xa82
jle 0x1000327c
mov edi, ebx
mov esi, ebx
mov dword [ebp - 0x24], ebx
mov dword [ebp - 0x3c], esi
mov dword [ebp - 0x28], 0x1cc4
mov ecx, esi
mov eax, edi
shl eax, cl
lea ecx, [ebp - 0x320]
cdq
push edx
push eax
call fcn.10002811
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x1000322e
mov eax, dword [eax]
push eax
call fcn.100402ca
pop ecx
push ebx
push 1
lea ecx, [ebp - 0x320]
call fcn.10001571
dec esi
dec dword [ebp - 0x28]
jne 0x10003210
mov esi, dword [ebp - 0x24]
inc esi
mov dword [ebp - 0x24], esi
cmp esi, 0x4c9c
jl 0x10003206
inc edi
cmp edi, 0x4877
jl 0x10003201
push ebx
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
push ebx
push 0x21bd
call dword [sym.imp.GDI32.dll_SetWinMetaFileBits]
push 1
lea ecx, [ebp - 0x1f4]
call fcn.100013fd
cmp dword [ebp - 0x1c], 0x454
jge 0x1000329d
push str.umimftcqo_crejjdgd_omoxodojl_yzk_ayxlddu_fagqfkm_lau_giwnskq
call fcn.100402ca
pop ecx
push 3
mov dword [ebp - 4], 0xe
mov dword [ebp - 0x18], ebx
pop edx
jmp 0x100032bd
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x1a4], 0xffffffff
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], edx
jl 0x100032ac
mov dword [ebp - 0x18], ebx
jmp 0x100032da
mov ecx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x15c]
mov dword [eax + ecx*4], 4
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], edx
jl 0x100032c7
xor edx, edx
mov dword [ebp - 0x18], ebx
inc edx
jmp 0x100032fa
mov ecx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x1f4]
mov dword [eax + ecx*4], 0xfffffff8
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], edx
jl 0x100032e7
mov eax, dword [ebp - 0x15c]
mov ecx, dword [ebp - 0x19c]
inc dword [eax + 8]
neg ecx
sbb ecx, ecx
neg ecx
cmp dword [ebp - 0x34], ebx
je 0x10003337
mov eax, dword [ebp - 0x2c]
mov dword [ebp - 0x28], eax
imul eax, dword [ebp - 0x28], 6
sub eax, 0x518f4c6f
neg eax
sbb eax, eax
inc eax
sub eax, dword [ebp - 0x19c]
mov eax, edx
jne 0x10003339
mov eax, ebx
imul eax, eax, 0xef33
mov dword [ebp - 0x3c], eax
mov eax, dword [ebp - 0x38]
mov dword [ebp - 0x28], ecx
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x1a0]
cmp dword [ebp - 0x2c], 0x8faa83fb
jne 0x1000335f
cmp dword [ebp - 0x30], ebx
jne 0x10003361
mov edx, ebx
mov dword [ebp - 0x1ac], edx
lea ecx, [ebp - 0x1f4]
mov dword [ebp - 0x30], edx
call fcn.10001439
lea ecx, [ebp - 0x15c]
mov byte [ebp - 4], 0xa
call fcn.10001439
push 0x5c
pop eax
push 2
pop edi
mov word [ebp - 0x50], ax
mov dword [ebp - 0x34], edi
mov dword [ebp - 0x24], ebx
cmp edi, 2
jne 0x100033a8
push 3
mov dword [ebp - 0x24], 3
pop edi
jmp 0x1000356d
push dword [ebp - 0x88]
movdqa xmm0, xmmword [0x10066a50]
lea eax, [ebp - 0x288]
push eax
lea eax, [ebp - 0x298]
mov dword [ebp - 0xa4], ebx
push eax
push ebx
lea ecx, [ebp - 0xa4]
mov dword [ebp - 0xa0], ebx
movdqu xmmword [ebp - 0x298], xmm0
mov dword [ebp - 0x9c], ebx
call fcn.1000619c
push 2
lea ecx, [ebp - 0xe0]
mov byte [ebp - 4], 0x11
call fcn.100013fd
mov dword [ebp - 0x18], ebx
jmp 0x10003413
mov ecx, dword [ebp - 0x18]
mov eax, dword [ebp - 0xe0]
mov dword [eax + ecx*4], 0xa18885c6
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 2
jl 0x10003400
mov dword [ebp - 0x18], ebx
jmp 0x1000342f
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x22c], 0xffffffff
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 2
jl 0x1000341e
push 3
mov dword [ebp - 0x18], ebx
pop ecx
jmp 0x1000344e
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x238], 7
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], ecx
jl 0x1000343d
mov edi, dword [ebp - 0xe0]
mov edx, dword [ebp - 0xa4]
mov dword [ebp - 0x30], edx
mov dword [edi + 4], ecx
mov dword [ebp - 0x2c], 0xfffffff8
mov dword [ebp - 0x28], 0x38d10fbf
mov dword [ebp - 0x1c], ebx
jmp 0x10003485
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0x1c8], ebx
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 2
jl 0x10003478
xor eax, eax
inc eax
mov dword [ebp - 0x228], eax
mov ecx, eax
sub ecx, dword [edx + 0xc]
xor edx, edx
mov eax, dword [ebp - 0x2c]
cmp ecx, eax
mov ecx, dword [edi + 4]
mov eax, dword [ebp - 0xa4]
sete dl
mov ecx, dword [eax + ecx*4]
mov eax, dword [ebp - 0x2c]
sub ecx, edx
dec ecx
neg ecx
sbb ecx, ecx
xor edx, edx
inc ecx
cmp ecx, eax
mov eax, dword [ebp - 0x234]
setne dl
xor ecx, ecx
cmp edx, eax
setle cl
imul eax, ecx, 0x5e1b
neg eax
sbb eax, eax
neg eax
mov dword [ebp - 0x28], eax
mov eax, dword [ebp - 0x28]
mov ecx, dword [edi + 4]
mov eax, dword [ebp - 0xa4]
mov esi, dword [eax + ecx*4]
xor ecx, ecx
mov eax, dword [ebp - 0xe0]
cmp dword [eax], 1
mov eax, dword [ebp - 0x230]
sete cl
xor edx, edx
cmp esi, ecx
setg dl
sub edx, esi
imul eax, edx
dec dword [edi + 4]
mov edx, dword [ebp - 0x30]
mov dword [ebp - 0x1c4], eax
mov dword [ebp - 0x28], 4
jns 0x10003465
lea ecx, [ebp - 0xe0]
call fcn.10001439
lea ecx, [ebp - 0xa4]
mov byte [ebp - 4], 0xa
call fcn.10001439
mov edi, dword [ebp - 0x34]
mov eax, edi
sub eax, dword [ebp - 0x24]
mov dword [ebp - 0x24], ebx
movzx edx, byte [ebp + edi - 0x47]
movzx eax, byte [ebp + eax - 0x4a]
movzx ecx, word [ebp + eax*2 - 0x50]
mov eax, ecx
and eax, edx
add eax, eax
sub ecx, eax
movzx eax, byte [ebp + edi - 0x48]
add ecx, edx
mov word [ebp + eax*2 - 0x50], cx
add edi, 2
mov dword [ebp - 0x34], edi
cmp edi, 5
jb 0x10003394
push 2
lea ecx, [ebp - 0xec]
call fcn.100013fd
mov byte [ebp - 4], 0x12
lea ecx, [ebp - 0xf8]
mov dword [ebp - 0x30], 0x779a7b44
push 2
call fcn.100013fd
push 2
mov dword [ebp - 0x18], ebx
pop edx
jmp 0x100035bc
mov ecx, dword [ebp - 0x18]
mov eax, dword [ebp - 0xec]
mov dword [eax + ecx*4], 0xec0a
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], edx
jl 0x100035a9
mov dword [ebp - 0x18], ebx
jmp 0x100035d4
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x70], 0x915a1369
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], edx
jl 0x100035c6
mov dword [ebp - 0x18], ebx
jmp 0x100035f1
mov ecx, dword [ebp - 0x18]
mov eax, dword [ebp - 0xf8]
mov dword [eax + ecx*4], 0x61780eec
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], edx
jl 0x100035de
xor ecx, ecx
mov dword [ebp - 0x6c], ebx
inc ecx
jmp 0x100036ae
mov dword [ebp - 0x30], 0xffffffff
mov dword [ebp - 0x34], 0xcd4431fa
mov dword [ebp - 0x28], ecx
mov dword [ebp - 0x30], 0xffffffff
mov dword [ebp - 0x38], ecx
mov dword [ebp - 0x1c], ebx
jmp 0x10003632
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0x84], 0x93e75cb5
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], ecx
jl 0x10003621
mov eax, dword [ebp - 0x28]
dec dword [ebp - 0x28]
mov eax, dword [ebp - 0x70]
mov eax, dword [ebp - 0x30]
mov esi, dword [ebp - 0x6c]
mov ecx, dword [ebp - 0x6c]
mov eax, dword [ebp - 0xec]
mov edx, dword [ebp - 0xec]
mov ecx, dword [eax + ecx*4]
mov eax, dword [ebp - 0xf8]
mov dword [edx + esi*4], ecx
xor edx, edx
cmp ecx, dword [eax]
setge dl
cmp edx, 0xd7c869b7
sbb eax, eax
inc eax
mov dword [ebp - 0x34], eax
mov eax, dword [ebp - 0x84]
add eax, dword [ebp - 0x34]
je 0x1000368e
cmp dword [ebp - 0x84], ebx
je 0x1000368e
xor ecx, ecx
inc ecx
mov edx, ecx
jmp 0x10003693
xor ecx, ecx
mov edx, ebx
inc ecx
mov eax, dword [ebp - 0x38]
sub edx, eax
je 0x100036a6
mov eax, dword [ebp - 0xf8]
cmp dword [eax], ebx
mov eax, ecx
jne 0x100036a8
mov eax, ebx
mov dword [ebp - 0x30], eax
inc dword [ebp - 0x6c]
cmp dword [ebp - 0x6c], ecx
jle 0x10003601
mov byte [ebp - 0x1d], bl
cmp byte [ebp - 0x1d], 0
je 0x100036c6
call dword [sym.imp.KERNEL32.dll_GetEnvironmentStringsW]
lea ecx, [ebp - 0xf8]
call fcn.10001439
lea ecx, [ebp - 0xec]
mov byte [ebp - 4], 0xa
call fcn.10001439
xor eax, eax
mov word [ebp - 0x4e], ax
mov dword [ebp - 0x18], ebx
jmp 0x100036f9
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x40], 0x17571177
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 1
jl 0x100036eb
mov dword [ebp - 0x18], ebx
jmp 0x10003715
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x224], 0xdbeccce1
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 3
jl 0x10003704
mov dword [ebp - 0x40], ebx
jmp 0x100037c7
mov dword [ebp - 0x2c], 0xfffffffd
mov dword [ebp - 0x2c], 2
cmp dword [ebp - 0x2c], ebx
jl 0x100037c4
push 4
lea ecx, [ebp - 0x168]
call fcn.100013fd
mov dword [ebp - 0x1c], ebx
jmp 0x1000375f
mov ecx, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x168]
mov dword [eax + ecx*4], 0x7909b792
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 4
jl 0x1000374c
mov esi, dword [ebp - 0x168]
mov dword [esi + 0xc], 2
mov dword [ebp - 0x30], 0xfffffffc
xor ecx, ecx
mov eax, dword [ebp - 0x2c]
mov eax, dword [ebp + eax*4 - 0x224]
mov eax, dword [ebp - 0x2c]
cmp eax, 0x71f0
mov eax, dword [ebp - 0x224]
setle cl
xor edx, edx
cmp ecx, dword [esi + 0xc]
setle dl
xor ecx, ecx
cmp edx, eax
setne cl
mov dword [ebp - 0x30], ecx
mov eax, dword [ebp - 0x40]
dec dword [esi + 0xc]
jns 0x10003772
lea ecx, [ebp - 0x168]
call fcn.10001439
dec dword [ebp - 0x2c]
jns 0x1000373a
inc dword [ebp - 0x40]
cmp dword [ebp - 0x40], 0xf
jne 0x10003723
mov dword [ebp - 0x1c], 0x186d
cmp dword [ebp - 0x1c], 0x1b80
jle 0x10003845
mov edi, ebx
mov dword [ebp - 0x24], ebx
mov esi, ebx
mov dword [ebp - 0x28], ebx
mov ecx, esi
mov dword [ebp - 0x34], ebx
mov esi, edi
mov dword [ebp - 0x30], edi
sar esi, cl
mov edi, ebx
mov ebx, dword [ebp - 0x34]
mov eax, esi
mov ecx, 0x10073b38
xor eax, edi
xor eax, ebx
cdq
push edx
push eax
call fcn.10004192
inc edi
cmp edi, 0xf1b
jl 0x100037fc
inc ebx
push 0
mov dword [ebp - 0x34], ebx
cmp ebx, 0x6f94
pop ebx
jl 0x100037f7
mov esi, dword [ebp - 0x28]
mov edi, dword [ebp - 0x24]
inc esi
mov dword [ebp - 0x28], esi
cmp esi, 0x3934
jl 0x100037eb
inc edi
mov dword [ebp - 0x24], edi
cmp edi, 0x7d76
jl 0x100037e6
xor eax, eax
mov dword [ebp - 0x130], 7
mov word [ebp - 0x144], ax
lea ecx, [ebp - 0x144]
lea eax, [ebp - 0x50]
mov dword [ebp - 0x134], ebx
push eax
call fcn.100044ea
mov byte [ebp - 4], 0x14
cmp dword [ebp - 0x1c], 0x185d
jge 0x100038a7
mov edx, str.qglhasb_joryxmhy_olr_kyij_pejimpw_gwprndho_rjtazh
mov ecx, 0x10073b38
call fcn.10005a51
jmp 0x100038a7
push 0x5f
pop eax
mov dword [ebp - 4], 0x13
mov ecx, ebx
push 2
mov dword [ebp - 0x50], ebx
mov byte [ebp - 0x58], bl
mov dword [ebp - 0x57], 0x17900478
mov word [ebp - 0x53], 0x39d3
mov word [ebp - 0x4c], ax
pop esi
cmp esi, 2
jne 0x100038d9
push 5
pop ecx
push ecx
pop esi
jmp 0x10003900
movzx edx, byte [ebp + esi - 0x57]
mov eax, esi
sub eax, ecx
movzx eax, byte [ebp + eax - 0x5a]
movzx eax, word [ebp + eax*2 - 0x4c]
mov ecx, eax
and eax, edx
or ecx, edx
sub ecx, eax
movzx eax, byte [ebp + esi - 0x58]
mov word [ebp + eax*2 - 0x4c], cx
mov ecx, ebx
add esi, 2
cmp esi, 7
jb 0x100038cd
xor eax, eax
mov word [ebp - 0x4a], ax
mov dword [ebp - 0x18], 0x60477862
mov dword [ebp - 0x2c], 0xfb49a5c1
mov dword [ebp - 0x34], 0xfffb
mov dword [ebp - 0x30], ebx
mov dword [ebp - 0x30], 0xffffffff
mov dword [ebp - 0x1c], ebx
jmp 0x10003940
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0x78], 0xfffffffb
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 1
jl 0x10003932
mov dword [ebp - 0x18], 3
cmp dword [ebp - 0x18], 0xffffffee
jl 0x10003ba9
mov edi, 0x100609a4
push dword [ebp - 0x88]
movdqa xmm0, xmmword [0x10066a20]
lea eax, [ebp - 0x298]
push eax
lea eax, [ebp - 0x2a8]
mov dword [ebp - 0x28], 3
push eax
push ebx
lea ecx, [ebp - 0xb0]
mov dword [ebp - 0xb0], ebx
movdqu xmmword [ebp - 0x2a8], xmm0
mov dword [ebp - 0xac], ebx
mov dword [ebp - 0xa8], ebx
call fcn.1000619c
push 2
lea ecx, [ebp - 0x11c]
mov byte [ebp - 4], 0x16
call fcn.100013fd
xor edx, edx
mov byte [ebp - 4], 0x17
inc edx
mov dword [ebp - 0x1c], edx
mov dword [ebp - 0x24], ebx
jmp 0x100039d8
mov ecx, dword [ebp - 0x24]
mov eax, dword [ebp - 0x11c]
mov dword [eax + ecx*4], 0x5ff74f57
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], 2
jl 0x100039c5
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x18]
cmp dword [ebp - 0x28], edx
jge 0x10003a63
mov dword [ebp - 0x28], 0x3d6c
mov dword [ebp - 0x30], edx
mov dword [ebp - 0x38], 0x5487972e
mov dword [ebp - 0x38], 0xfffffff9
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x30]
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x28]
neg eax
sbb eax, eax
xor ecx, ecx
inc eax
cmp eax, 0xffffffff
mov eax, dword [ebp - 0xb0]
setge cl
mov dword [eax], ecx
xor ecx, ecx
mov eax, dword [ebp - 0x28]
mov dword [ebp - 0x28], 0x4f823aaf
mov eax, dword [ebp - 0x18]
cmp eax, 0x3b06d9e9
setge cl
add ecx, dword [ebp - 0x28]
mov dword [ebp - 0x38], ecx
cmp dword [ebp - 0x18], edx
mov ecx, dword [ebp - 0x11c]
sbb eax, eax
xor edx, edx
inc eax
cmp eax, dword [ecx]
mov eax, dword [ebp - 0x1c]
setg dl
imul eax, edx
mov dword [ecx + 4], edx
mov dword [ebp - 0x38], eax
jmp 0x10003b56
cmp dword [ebp - 0x2c], ebx
jne 0x10003b8f
mov dword [ebp - 0x30], 0x259b
cmp dword [ebp - 0x30], 0xf0a
jge 0x10003b11
lea eax, [ebp - 0x98]
push eax
push edi
call fcn.100401d6
pop ecx
pop ecx
mov dword [ebp - 0x90], ebx
mov dword [ebp - 0x8c], ebx
call fcn.10005980
mov dword [ebp - 0x90], eax
mov byte [ebp - 4], 0x18
mov esi, ebx
mov eax, dword [ebp - 0x98]
test eax, eax
jle 0x10003af2
lea eax, [ebp - 0xc8]
push eax
push edi
call fcn.100401d6
movzx eax, byte [0x10075760]
pop ecx
pop ecx
push eax
lea eax, [ebp - 0xc8]
push eax
push ecx
lea eax, [ebp - 0x2bc]
push eax
lea ecx, [ebp - 0x90]
call fcn.10005e06
mov eax, dword [ebp - 0x98]
inc esi
cmp esi, eax
jl 0x10003ab6
sub eax, dword [ebp - 0x8c]
inc eax
push eax
push str._ld_n
call fcn.100402ca
pop ecx
pop ecx
lea ecx, [ebp - 0x90]
call fcn.10004306
mov dword [ebp - 0x1c], ebx
jmp 0x10003b50
mov dword [ebp - 0x30], 0x84b505d0
mov dword [ebp - 0x2c], ebx
jmp 0x10003b33
mov ecx, dword [ebp - 0x2c]
mov eax, dword [ebp - 0xb0]
mov dword [eax], ecx
mov dword [ebp - 0x30], ecx
inc dword [ebp - 0x2c]
cmp dword [ebp - 0x2c], 3
jle 0x10003b22
mov byte [ebp - 0x1d], bl
cmp byte [ebp - 0x1d], 0
je 0x10003b4d
push 0x2080
call dword [sym.imp.KERNEL32.dll_IsProcessorFeaturePresent]
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 3
jle 0x10003b16
mov byte [ebp - 0x1d], bl
cmp byte [ebp - 0x1d], 0
je 0x10003b66
push ebx
call dword [sym.imp.KERNEL32.dll_GetFileType]
lea ecx, [ebp - 0x11c]
call fcn.10001439
lea ecx, [ebp - 0xb0]
mov byte [ebp - 4], 0x13
call fcn.10001439
dec dword [ebp - 0x18]
cmp dword [ebp - 0x18], 0xffffffee
jge 0x1000395c
lea ecx, [ebp - 0x11c]
call fcn.10001439
lea ecx, [ebp - 0xb0]
mov byte [ebp - 4], 0x13
call fcn.10001439
mov dword [ebp - 0x18], ebx
cmp dword [ebp - 0x18], ebx
jl 0x10003c30
push 2
lea ecx, [ebp - 0x180]
call fcn.100013fd
mov dword [ebp - 0x30], 0x6cb
mov dword [ebp - 0x24], ebx
jmp 0x10003bdd
mov ecx, dword [ebp - 0x24]
mov eax, dword [ebp - 0x180]
mov dword [eax + ecx*4], 0xefc71010
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], 2
jl 0x10003bca
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp + eax*4 - 0x78]
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x78], ecx
mov dword [ebp - 0x34], ecx
xor ecx, ecx
mov eax, dword [ebp - 0x34]
mov eax, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x30]
sub eax, 0x1030c6a8
mov dword [ebp - 0x30], eax
mov eax, dword [ebp - 0x180]
cmp dword [eax + 4], 1
setg cl
mov dword [ebp - 0x30], ecx
lea ecx, [ebp - 0x180]
call fcn.10001439
dec dword [ebp - 0x18]
jns 0x10003bb1
xor eax, eax
mov dword [ebp - 0x24c], 7
mov word [ebp - 0x260], ax
lea ecx, [ebp - 0x260]
lea eax, [ebp - 0x4c]
mov dword [ebp - 0x250], ebx
push eax
call fcn.100044ea
mov byte [ebp - 4], 0x19
mov edi, dword [sym.imp.USER32.dll_GetDesktopWindow]
mov dword [ebp - 0x2c], ebx
mov byte [ebp - 0x1d], bl
cmp byte [ebp - 0x1d], 0
je 0x10003c7e
call edi
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_SaveDC]
mov dword [ebp - 0x2c], 0x1a
jmp 0x10003cf9
mov dword [ebp - 0x28], 0xfffffffd
mov dword [ebp - 0x34], 0xffffffff
mov dword [ebp - 0x24], ebx
jmp 0x10003cab
mov eax, dword [ebp - 0x24]
mov dword [ebp + eax*4 - 0x1d0], 0xffffffff
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], 2
jl 0x10003c9a
cmp dword [ebp - 0x28], ebx
jne 0x10003cc5
mov eax, dword [ebp - 0x2c]
mov dword [ebp - 0x34], eax
cmp dword [ebp - 0x34], ebx
jne 0x10003cc5
mov esi, ebx
jmp 0x10003cc8
xor esi, esi
inc esi
mov eax, dword [ebp - 0x28]
xor edx, edx
inc eax
cmp eax, 0xecf7
setl dl
add edx, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x2c]
neg edx
sbb edx, edx
xor ecx, ecx
neg edx
cmp esi, eax
setle cl
xor eax, eax
cmp ecx, edx
setne al
mov dword [ebp - 0x1cc], eax
dec dword [ebp - 0x2c]
cmp dword [ebp - 0x2c], 0xe
jge 0x10003c87
mov dword [ebp - 0x4c], ebx
push dword [ebp - 0x134]
cmp dword [ebp - 0x130], 8
lea eax, [ebp - 0x144]
push ebx
cmovae eax, dword [ebp - 0x144]
lea ecx, [ebp - 0x278]
push eax
call fcn.10004572
cmp eax, 0xffffffff
je 0x10003d48
push 0xffffffffffffffff
push ebx
lea ecx, [ebp - 0x260]
push ecx
push 1
push eax
lea ecx, [ebp - 0x278]
call fcn.10001dce
jmp 0x10003d02
mov dword [ebp - 0x1c], ebx
lea ecx, [ebp - 0x110]
push 4
call fcn.100013fd
push 4
pop edx
mov dword [ebp - 0x30], edx
mov dword [ebp - 0x24], ebx
jmp 0x10003d76
mov ecx, dword [ebp - 0x24]
mov eax, dword [ebp - 0x110]
mov dword [eax + ecx*4], 1
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], edx
jl 0x10003d63
mov byte [ebp - 0x1d], bl
cmp byte [ebp - 0x1d], 0
je 0x10003d8b
push ebx
call dword [sym.imp.KERNEL32.dll_SetEndOfFile]
mov dword [ebp - 0x1c], ebx
jmp 0x10003e9c