Function at 0x100578e2
Capabilities:
Delete file
Query or enumerate registry key
Read .ini file

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x1008c5f3
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x1f4
push esi
movzx eax, byte [ebp + 0xc]
test eax, eax
je 0x10057ebd
push 2
lea ecx, [ebp - 0x98]
call fcn.10019689
and dword [ebp - 4], 0
mov dword [ebp - 0x14], 0x6b8f3d42
mov dword [ebp - 0x20], 5
mov dword [ebp - 0x154], 0xfffc
push 2
lea ecx, [ebp - 0x18c]
call fcn.10019689
mov byte [ebp - 4], 1
mov dword [ebp - 0x114], 0xc63b8821
mov dword [ebp - 0x3c], 0x9f9f4aec
mov dword [ebp - 0x174], 0xd4463028
mov dword [ebp - 0x18], 0
jmp 0x10057972
mov eax, dword [ebp - 0x18]
inc eax
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 2
jge 0x1005798b
push dword [ebp - 0x18]
lea ecx, [ebp - 0x98]
call fcn.10019727
and dword [eax], 0
jmp 0x1005796b
mov dword [ebp - 0x18], 0
jmp 0x1005799b
mov eax, dword [ebp - 0x18]
inc eax
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 2
jge 0x100579b7
push dword [ebp - 0x18]
lea ecx, [ebp - 0x18c]
call fcn.10019727
mov dword [eax], 0x14186e14
jmp 0x10057994
push 0
lea ecx, [ebp - 0x98]
call fcn.10019727
cmp dword [eax], 0xecb302af
jne 0x100579d8
mov dword [ebp - 0xdc], 1
jmp 0x100579df
and dword [ebp - 0xdc], 0
cmp dword [ebp - 0xdc], 0xe74e
je 0x100579f7
mov dword [ebp - 0x144], 1
jmp 0x100579fe
and dword [ebp - 0x144], 0
cmp dword [ebp - 0x144], 0xffffffff
je 0x10057a13
mov dword [ebp - 0x110], 1
jmp 0x10057a1a
and dword [ebp - 0x110], 0
mov eax, dword [ebp - 0x110]
mov dword [ebp - 0x20], eax
mov esi, dword [ebp - 0x20]
push 0
lea ecx, [ebp - 0x98]
call fcn.10019727
cmp esi, dword [eax]
je 0x10057a49
cmp dword [ebp - 0x14], 0
je 0x10057a49
mov dword [ebp - 0x108], 1
jmp 0x10057a50
and dword [ebp - 0x108], 0
mov eax, dword [ebp - 0x154]
cmp dword [ebp - 0x108], eax
jle 0x10057a68
cmp dword [ebp - 0x14], 0
je 0x10057a68
cmp dword [ebp - 0x14], 0
push 0
lea ecx, [ebp - 0x98]
call fcn.10019727
imul eax, dword [eax], 0xc3b7
cmp eax, dword [ebp - 0x14]
jne 0x10057a8c
mov dword [ebp - 0xa8], 1
jmp 0x10057a93
and dword [ebp - 0xa8], 0
mov eax, dword [ebp - 0x14]
mov dword [ebp - 0x1dc], eax
mov esi, dword [ebp - 0x14]
add esi, dword [ebp - 0xa8]
push 0
lea ecx, [ebp - 0x98]
call fcn.10019727
mov eax, dword [eax]
lea eax, [esi + eax + 0x4692]
neg eax
mov dword [ebp - 0x16c], eax
push 1
lea ecx, [ebp - 0x18c]
call fcn.10019727
mov ecx, dword [ebp - 0x16c]
mov dword [eax], ecx
push 0
lea ecx, [ebp - 0x98]
call fcn.10019727
push 1
lea ecx, [ebp - 0x98]
call fcn.10019727
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x114], eax
push 0
lea ecx, [ebp - 0x98]
call fcn.10019727
push 0
lea ecx, [ebp - 0x18c]
call fcn.10019727
cmp dword [eax], 0
jne 0x10057b83
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x1e8], eax
mov eax, dword [ebp - 0x114]
mov dword [ebp - 0x1d4], eax
cmp dword [ebp - 0x3c], 0
je 0x10057b4a
mov eax, 0x1401
test eax, eax
je 0x10057b4a
mov dword [ebp - 0xb0], 1
jmp 0x10057b51
and dword [ebp - 0xb0], 0
cmp dword [ebp - 0xb0], 1
jbe 0x10057b66
mov dword [ebp - 0x11c], 1
jmp 0x10057b6d
and dword [ebp - 0x11c], 0
mov eax, dword [ebp - 0x11c]
add eax, 0x2e528fd4
jne 0x10057b83
and dword [ebp - 0xb8], 0
jmp 0x10057b8d
mov dword [ebp - 0xb8], 1
push 0
lea ecx, [ebp - 0x18c]
call fcn.10019727
mov ecx, dword [ebp - 0xb8]
cmp ecx, dword [eax]
jg 0x10057bb0
mov dword [ebp - 0x124], 1
jmp 0x10057bb7
and dword [ebp - 0x124], 0
mov eax, dword [ebp - 0x174]
cmp dword [ebp - 0x124], eax
jl 0x10057c27
mov byte [ebp - 0x2e], 0
movzx eax, byte [ebp - 0x2e]
test eax, eax
je 0x10057c22
push 0x18aa
push 0x1da9
push 0x6ca
push 0
push 0x1bdc
push 0x1130
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
push 0x2094
push 0x1ff5
push 0x1e7f
push 0x2020
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_MaskBlt]
jmp 0x10057d0a
mov dword [ebp - 0x17c], 0x7d625c2a
mov dword [ebp - 0x20], 1
jmp 0x10057c41
mov eax, dword [ebp - 0x20]
dec eax
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 0
jl 0x10057ce9
mov dword [ebp - 0x7c], 0
jmp 0x10057c5b
mov eax, dword [ebp - 0x7c]
inc eax
mov dword [ebp - 0x7c], eax
cmp dword [ebp - 0x7c], 4
jge 0x10057c71
mov eax, dword [ebp - 0x7c]
mov dword [ebp + eax*4 - 0x200], 0x5bccbf78
jmp 0x10057c54
push 4
pop eax
shl eax, 1
mov dword [ebp + eax - 0x200], 0xf2b6367a
mov dword [ebp - 0x17c], 0xf2b6367a
mov dword [ebp - 0x14], 0
jmp 0x10057c9b
mov eax, dword [ebp - 0x14]
inc eax
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 1
jg 0x10057ce4
mov dword [ebp - 0xc0], 7
mov dword [ebp - 0x3c], 0
jmp 0x10057cbb
mov eax, dword [ebp - 0x3c]
inc eax
mov dword [ebp - 0x3c], eax
cmp dword [ebp - 0x3c], 1
jg 0x10057cd5
mov byte [ebp - 0x32], 0
movzx eax, byte [ebp - 0x32]
test eax, eax
je 0x10057cd3
call dword [sym.imp.KERNEL32.dll_IsDebuggerPresent]
jmp 0x10057cb4
mov eax, dword [ebp - 0xc0]
inc eax
mov dword [ebp - 0xc0], eax
jmp 0x10057c94
jmp 0x10057c3a
mov byte [ebp - 0x2a], 0
movzx eax, byte [ebp - 0x2a]
test eax, eax
je 0x10057d0a
push 0
push 0xbaf
push 0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringW]
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x18c]
call fcn.1001970b
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x98]
call fcn.1001970b
mov dword [ebp - 0x6c], 0xfffffffe
mov byte [ebp - 0x2b], 0
movzx eax, byte [ebp - 0x2b]
test eax, eax
je 0x10057d43
push 0
call dword [sym.imp.COMDLG32.dll_GetOpenFileNameW]
mov dword [ebp - 0x6c], 0xfffffffd
jmp 0x10057d53
mov eax, dword [ebp - 0x6c]
inc eax
mov dword [ebp - 0x6c], eax
cmp dword [ebp - 0x6c], 0x1a
jle 0x10057eb0
mov dword [ebp - 0x64], 0x7df2f4a8
mov dword [ebp - 0x64], 7
jmp 0x10057d74
mov eax, dword [ebp - 0x64]
dec eax
mov dword [ebp - 0x64], eax
cmp dword [ebp - 0x64], 0xffffffe2
jle 0x10057e8d
mov dword [ebp - 0x44], 1
push 2
lea ecx, [ebp - 0x1c0]
call fcn.10019689
mov dword [ebp - 4], 2
mov dword [ebp - 0x74], 0
jmp 0x10057da9
mov eax, dword [ebp - 0x74]
inc eax
mov dword [ebp - 0x74], eax
cmp dword [ebp - 0x74], 2
jge 0x10057dc5
push dword [ebp - 0x74]
lea ecx, [ebp - 0x1c0]
call fcn.10019727
mov dword [eax], 0xa831d26e
jmp 0x10057da2
mov dword [ebp - 0x44], 0
jmp 0x10057dd5
mov eax, dword [ebp - 0x44]
inc eax
mov dword [ebp - 0x44], eax
cmp dword [ebp - 0x44], 0x1d
jge 0x10057e67
mov dword [ebp - 0x28], 1
mov dword [ebp - 0x28], 3
jmp 0x10057df6
mov eax, dword [ebp - 0x28]
dec eax
mov dword [ebp - 0x28], eax
cmp dword [ebp - 0x28], 0xffffffec
jl 0x10057e25
mov dword [ebp - 0x164], 6
mov esi, dword [ebp - 0x44]
push 1
lea ecx, [ebp - 0x1c0]
call fcn.10019727
mov dword [eax], esi
cmp dword [ebp - 0x164], 0
je 0x10057e23
jmp 0x10057def
jmp 0x10057def
mov dword [ebp - 0x28], 0xffffffee
jmp 0x10057e35
mov eax, dword [ebp - 0x28]
inc eax
mov dword [ebp - 0x28], eax
cmp dword [ebp - 0x28], 1
jne 0x10057e62
mov byte [ebp - 0x33], 0
movzx eax, byte [ebp - 0x33]
test eax, eax
je 0x10057e60
push 0x1413
push 0xefb
push 0
push 0x1272
push 0
call dword [sym.imp.USER32.dll_GetMenuStringW]
jmp 0x10057e2e
jmp 0x10057dce
mov byte [ebp - 0x2d], 0
movzx eax, byte [ebp - 0x2d]
test eax, eax
je 0x10057e79
call dword [sym.imp.USER32.dll_CreateMenu]
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x1c0]
call fcn.1001970b
jmp 0x10057d6d
mov byte [ebp - 0x2f], 0
movzx eax, byte [ebp - 0x2f]
test eax, eax
je 0x10057eab
push 0x46f
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDlgItem]
jmp 0x10057d4c
push 0
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
jmp 0x10058864
mov eax, dword [ebp + 8]
mov dword [ebp - 0x160], eax
mov dword [ebp - 0x78], 0x831713b9
mov dword [ebp - 0x78], 0
jmp 0x10057edd
mov eax, dword [ebp - 0x78]
dec eax
mov dword [ebp - 0x78], eax
cmp dword [ebp - 0x78], 0xfffffffe
jle 0x10057fbd
push 3
lea ecx, [ebp - 0x19c]
call fcn.10019689
mov dword [ebp - 4], 3
mov dword [ebp - 0x80], 0
jmp 0x10057f0b
mov eax, dword [ebp - 0x80]
inc eax
mov dword [ebp - 0x80], eax
cmp dword [ebp - 0x80], 3
jge 0x10057f24
push dword [ebp - 0x80]
lea ecx, [ebp - 0x19c]
call fcn.10019727
and dword [eax], 0
jmp 0x10057f04
push 1
lea ecx, [ebp - 0x19c]
call fcn.10019727
and dword [eax], 0
jmp 0x10057f5a
push 1
lea ecx, [ebp - 0x19c]
call fcn.10019727
mov dword [ebp - 0x12c], eax
mov eax, dword [ebp - 0x12c]
mov eax, dword [eax]
dec eax
mov ecx, dword [ebp - 0x12c]
mov dword [ecx], eax
push 1
lea ecx, [ebp - 0x19c]
call fcn.10019727
cmp dword [eax], 0xffffffe7
jne 0x10057fa9
mov byte [ebp - 0x31], 0
movzx eax, byte [ebp - 0x31]
test eax, eax
je 0x10057f8a
push 0x1f7e
push 0x2272
push 0
call dword [sym.imp.USER32.dll_EnableMenuItem]
mov byte [ebp - 0x30], 0
movzx eax, byte [ebp - 0x30]
test eax, eax
je 0x10057fa7
push 0
push 0x2249
push 0
push 0
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntW]
jmp 0x10057f36
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x19c]
call fcn.1001970b
jmp 0x10057ed6
mov eax, dword [ebp - 0x160]
mov dword [ebp - 0x190], eax
mov dword [ebp - 0x10], 0xfffffffd
mov dword [ebp - 0x24], 0x8fb8ceff
mov dword [ebp - 0x1c], 0x911b9c6f
mov dword [ebp - 0x38], 0x50dfa014
mov dword [ebp - 0xe0], 1
mov dword [ebp - 0x1d0], 0xfa6b86d5
mov dword [ebp - 0x1cc], 0xfa6b86d5
mov dword [ebp - 0x1c8], 0xfa6b86d5
mov dword [ebp - 0x1c4], 0xfa6b86d5
mov dword [ebp - 0x170], 0x184bafc8
mov eax, 0xf2b29949
test eax, eax
je 0x10058180
mov eax, dword [ebp - 0x10]
cmp dword [ebp - 0x10], eax
jge 0x10058042
mov dword [ebp - 0x134], 1
jmp 0x10058049
and dword [ebp - 0x134], 0
mov eax, 0x49a2f381
test eax, eax
je 0x10058064
cmp dword [ebp - 0x10], 0
je 0x10058064
mov dword [ebp - 0xc8], 1
jmp 0x1005806b
and dword [ebp - 0xc8], 0
cmp dword [ebp - 0xc8], 0xb79df948
jbe 0x10058083
mov dword [ebp - 0x13c], 1
jmp 0x1005808a
and dword [ebp - 0x13c], 0
mov eax, dword [ebp - 0x134]
cmp eax, dword [ebp - 0x13c]
jge 0x100580a7
cmp dword [ebp - 0x10], 0
jne 0x100580a7
and dword [ebp - 0xd4], 0
jmp 0x100580b1
mov dword [ebp - 0xd4], 1
mov eax, dword [ebp - 0xd4]
inc eax
je 0x100580cc
cmp dword [ebp - 0x10], 0
je 0x100580cc
mov dword [ebp - 0x10c], 1
jmp 0x100580d3
and dword [ebp - 0x10c], 0
mov eax, dword [ebp - 0x10c]
mov dword [ebp - 0x24], eax
mov eax, dword [ebp - 0x10]
cmp dword [ebp - 0x24], eax
jl 0x100580f3
cmp dword [ebp - 0x10], 0
jne 0x100580f3
and dword [ebp - 0x9c], 0
jmp 0x100580fd
mov dword [ebp - 0x9c], 1
mov eax, dword [ebp - 0x10]
add eax, dword [ebp - 0x9c]
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x10]
cmp dword [ebp - 0x1c], eax
jl 0x1005811d
mov dword [ebp - 0x138], 1
jmp 0x10058124
and dword [ebp - 0x138], 0
mov eax, dword [ebp - 0x138]
mov dword [ebp - 0x38], eax
cmp dword [ebp - 0x38], 0
je 0x10058145
cmp dword [ebp - 0x10], 0
je 0x10058145
mov dword [ebp - 0xe4], 1
jmp 0x1005814c
and dword [ebp - 0xe4], 0
cmp dword [ebp - 0xe4], 0xb474
jg 0x10058164
mov dword [ebp - 0x118], 1
jmp 0x1005816b
and dword [ebp - 0x118], 0
cmp dword [ebp - 0x118], 0
jg 0x10058180
mov dword [ebp - 0xec], 1
jmp 0x10058187
and dword [ebp - 0xec], 0
mov eax, dword [ebp - 0x10]
cmp dword [ebp - 0xec], eax
jle 0x1005819e
mov dword [ebp - 0x180], 1
jmp 0x100581a5
and dword [ebp - 0x180], 0
mov eax, dword [ebp - 0x10]
mov dword [ebp - 0x1e0], eax
cmp dword [ebp - 0x1c], 0
je 0x100581cd
mov dword [ebp - 0x168], 0xfffffffe
mov dword [ebp - 0x168], 0xe6286c8a
jmp 0x10058400
mov dword [ebp - 0x50], 0
mov dword [ebp - 0x40], 0x1f13d464
cmp dword [ebp - 0x50], 0
je 0x1005833a
mov dword [ebp - 0x38], 0xfffffffb
mov eax, dword [ebp - 0x10]
cmp dword [ebp - 0x38], eax
je 0x10058200
mov dword [ebp - 0x130], 1
jmp 0x10058207
and dword [ebp - 0x130], 0
mov eax, dword [ebp - 0x50]
cmp dword [ebp - 0x130], eax
jge 0x1005821e
mov dword [ebp - 0xf4], 1
jmp 0x10058225
and dword [ebp - 0xf4], 0
mov eax, dword [ebp - 0x1c]
cmp dword [ebp - 0xf4], eax
jg 0x1005823c
mov dword [ebp - 0x120], 1
jmp 0x10058243
and dword [ebp - 0x120], 0
mov eax, dword [ebp - 0x10]
cmp eax, dword [ebp - 0x120]
jge 0x1005825a
mov dword [ebp - 0xfc], 1
jmp 0x10058261
and dword [ebp - 0xfc], 0
mov eax, dword [ebp - 0x50]
cmp eax, dword [ebp - 0xfc]
jne 0x10058278
mov dword [ebp - 0x140], 1
jmp 0x1005827f
and dword [ebp - 0x140], 0
mov eax, dword [ebp - 0x10]
cmp dword [ebp - 0x140], eax
je 0x10058296
mov dword [ebp - 0x104], 1
jmp 0x1005829d
and dword [ebp - 0x104], 0
mov eax, dword [ebp - 0x104]
neg eax
jne 0x100582b6
cmp dword [ebp - 0x1c], 0
jne 0x100582b6
and dword [ebp - 0x128], 0
jmp 0x100582c0
mov dword [ebp - 0x128], 1
mov eax, dword [ebp - 0x50]
cmp dword [ebp - 0x128], eax
jge 0x100582d7
mov dword [ebp - 0xcc], 1
jmp 0x100582de
and dword [ebp - 0xcc], 0
mov eax, dword [ebp - 0x1c]
cmp eax, dword [ebp - 0xcc]
jne 0x100582f5
mov dword [ebp - 0xd0], 1
jmp 0x100582fc
and dword [ebp - 0xd0], 0
mov eax, dword [ebp - 0xd0]
mov dword [ebp - 0x40], eax
mov eax, dword [ebp - 0xe0]
cmp dword [ebp - 0x40], eax
jge 0x1005831f
cmp dword [ebp - 0x40], 0
jne 0x1005831f
and dword [ebp - 0x1a0], 0
jmp 0x10058329
mov dword [ebp - 0x1a0], 1
mov eax, dword [ebp - 0x40]
mov dword [ebp - 0x1e4], eax
mov eax, 0x70fcbc84
sub eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0x50]
mov dword [ebp - 0x24], eax
mov dword [ebp - 0x24], 0
jmp 0x10058350
mov eax, dword [ebp - 0x24]
inc eax
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 2
jle 0x10058400
mov dword [ebp - 0x10], 0
jmp 0x1005836a
mov eax, dword [ebp - 0x10]
dec eax
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], 0xffffffe4
jne 0x100583d9
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x1d0], 0x44077424
jne 0x1005838f
mov dword [ebp - 0xd8], 1
jmp 0x10058396
and dword [ebp - 0xd8], 0
mov eax, dword [ebp - 0xd8]
mov dword [ebp - 0x38], eax
mov eax, dword [ebp - 0x38]
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 0
jne 0x100583be
mov eax, dword [ebp - 0xe0]
neg eax
jne 0x100583be
and dword [ebp - 0xe8], 0
jmp 0x100583c8
mov dword [ebp - 0xe8], 1
mov eax, dword [ebp - 0xe8]
sub eax, dword [ebp - 0x40]
mov dword [ebp - 0x170], eax
jmp 0x10058363
mov byte [ebp - 0x2c], 0
movzx eax, byte [ebp - 0x2c]
test eax, eax
je 0x100583fb
push 0
push 0x6da
push 0
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_SetTimer]
jmp 0x10058349
mov eax, dword [ebp - 0x190]
movzx eax, byte [eax]
test eax, eax
je 0x100584a7
mov dword [ebp - 0x4c], 0
mov dword [ebp - 0x68], 0
jmp 0x10058428
mov eax, dword [ebp - 0x68]
inc eax
mov dword [ebp - 0x68], eax
cmp dword [ebp - 0x68], 1
jge 0x1005843e
mov eax, dword [ebp - 0x68]
mov dword [ebp + eax*4 - 0x178], 0x35568345
jmp 0x10058421
mov dword [ebp - 0x4c], 0
jmp 0x1005844e
mov eax, dword [ebp - 0x4c]
inc eax
mov dword [ebp - 0x4c], eax
cmp dword [ebp - 0x4c], 1
jge 0x10058464
mov eax, dword [ebp - 0x4c]
mov dword [ebp + eax*4 - 0x178], 0xffffffff
jmp 0x10058447
mov byte [ebp - 0x34], 0
movzx eax, byte [ebp - 0x34]
test eax, eax
je 0x10058489
push 0
push 0
push 0
push 0
push 0
push 0
push 0x1236
push 0
call dword [sym.imp.ADVAPI32.dll_RegEnumKeyExW]
push 0
push 0xc65
push 0x1448
push 0x1576
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_SetScrollRange]
mov dword [ebp - 0x1b4], 0xb4ffb871
mov dword [ebp - 0x1b0], 0xb4ffb871
mov dword [ebp - 0x1ac], 0xb4ffb871
mov dword [ebp - 0x1a8], 0xb4ffb871
lea ecx, [ebp - 0x85]
call fcn.100093d3
push eax
lea eax, [ebp - 0x1a4]
push eax
lea eax, [ebp - 0x1b4]
push eax
lea ecx, [ebp - 0x1f0]
call fcn.10019736
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0x60]
call fcn.100196e5
mov dword [ebp - 4], 4
push 2
lea ecx, [ebp - 0x150]
call fcn.10019689
mov byte [ebp - 4], 5
mov dword [ebp - 0x54], 1
mov dword [ebp - 0x70], 0
jmp 0x10058530
mov eax, dword [ebp - 0x70]
inc eax
mov dword [ebp - 0x70], eax
cmp dword [ebp - 0x70], 2
jge 0x10058549
push dword [ebp - 0x70]
lea ecx, [ebp - 0x150]
call fcn.10019727
and dword [eax], 0
jmp 0x10058529
push 1
lea ecx, [ebp - 0x60]
call fcn.10019727
push 0xfffffffffffffffa
pop eax
test eax, eax
je 0x10058663
push 1
lea ecx, [ebp - 0x60]
call fcn.10019727
mov esi, eax
push 1
lea ecx, [ebp - 0x60]
call fcn.10019727
mov ecx, dword [esi]
cmp ecx, dword [eax]
jle 0x10058586
mov dword [ebp - 0xf0], 1
jmp 0x1005858d
and dword [ebp - 0xf0], 0
push 2
lea ecx, [ebp - 0x60]
call fcn.10019727
mov esi, dword [ebp - 0xf0]
sub esi, dword [eax]
push 1
lea ecx, [ebp - 0x60]
call fcn.10019727
cmp esi, dword [eax]
jne 0x100585b9
mov dword [ebp - 0xf8], 1
jmp 0x100585c0
and dword [ebp - 0xf8], 0
push 3
lea ecx, [ebp - 0x60]
call fcn.10019727
mov ecx, dword [ebp - 0xf8]
cmp ecx, dword [eax]
jle 0x100585e0
mov dword [ebp - 0x158], 1
jmp 0x100585e7
and dword [ebp - 0x158], 0
push 0
lea ecx, [ebp - 0x60]
call fcn.10019727
push 3
lea ecx, [ebp - 0x60]
call fcn.10019727
push 0
lea ecx, [ebp - 0x60]
call fcn.10019727
mov esi, eax
push 1
lea ecx, [ebp - 0x60]
call fcn.10019727
mov ecx, dword [esi]
cmp ecx, dword [eax]
jg 0x10058623
mov dword [ebp - 0x100], 1
jmp 0x1005862a
and dword [ebp - 0x100], 0
push 1
lea ecx, [ebp - 0x60]
call fcn.10019727
mov esi, dword [ebp - 0x100]
imul esi, dword [eax]
push 3
lea ecx, [ebp - 0x60]
call fcn.10019727
sub esi, dword [eax]
cmp esi, 9
jle 0x10058663
mov eax, 0xffff
test eax, eax
je 0x10058663
mov dword [ebp - 0xa0], 1
jmp 0x1005866a
and dword [ebp - 0xa0], 0
cmp dword [ebp - 0xa0], 1
jb 0x1005867d
push 0
lea ecx, [ebp - 0x60]
call fcn.10019727
push 1
lea ecx, [ebp - 0x150]
call fcn.10019727
cmp dword [eax], 0
jne 0x1005869b
mov dword [ebp - 0xa4], 1
jmp 0x100586a2
and dword [ebp - 0xa4], 0
mov eax, dword [ebp - 0xa4]
mov dword [ebp - 0x54], eax
mov dword [ebp - 0x54], 0xfffffff0
jmp 0x100586bb
mov eax, dword [ebp - 0x54]
inc eax
mov dword [ebp - 0x54], eax
cmp dword [ebp - 0x54], 0xb
je 0x10058849
mov dword [ebp - 0x48], 0x8f738f58
mov dword [ebp - 0xbc], 0xfffffff7
mov dword [ebp - 0x15c], 0xfffffffc
mov dword [ebp - 0x48], 0
jmp 0x100586f0
mov eax, dword [ebp - 0x48]
dec eax
mov dword [ebp - 0x48], eax
cmp dword [ebp - 0x48], 0xffffffe3
je 0x100587f3
mov dword [ebp - 0x84], 0xed55c59c
mov dword [ebp - 0x8c], 1
cmp dword [ebp - 0x8c], 0
je 0x10058787
mov eax, dword [ebp - 0x8c]
mov dword [ebp - 0x1d8], eax
push 1
lea ecx, [ebp - 0x60]
call fcn.10019727
mov esi, eax
push 1
lea ecx, [ebp - 0x150]
call fcn.10019727
mov ecx, dword [esi]
cmp ecx, dword [eax]
jne 0x1005874e
mov dword [ebp - 0xac], 1
jmp 0x10058755
and dword [ebp - 0xac], 0
push 0
lea ecx, [ebp - 0x150]
call fcn.10019727
mov esi, dword [ebp - 0xac]
add esi, dword [eax]
push 1
lea ecx, [ebp - 0x150]
call fcn.10019727
add esi, dword [eax]
je 0x10058787
mov dword [ebp - 0xb4], 1
jmp 0x1005878e
and dword [ebp - 0xb4], 0
mov eax, dword [ebp - 0xb4]
mov dword [ebp - 0xbc], eax
mov eax, dword [ebp - 0xbc]
imul ecx, dword [ebp - 0x84], 0x2f74
mov eax, dword [ebp - 0x84]
imul eax, dword [ebp - 0x48]
or ecx, 0xffffffff
sub ecx, eax
je 0x100587d0
cmp dword [ebp - 0x84], 0
je 0x100587d0
mov dword [ebp - 0xc4], 1
jmp 0x100587d7
and dword [ebp - 0xc4], 0
mov eax, dword [ebp - 0xc4]
mov dword [ebp - 0x15c], eax
cmp dword [ebp - 0x8c], 0
je 0x100587ee
jmp 0x100587f3
jmp 0x100586e9
mov byte [ebp - 0x29], 0
movzx eax, byte [ebp - 0x29]
test eax, eax
je 0x10058844
push 0x21d7
push 0x16d3
push 0x1e9e
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
push 0x37b
push 0x4de
push 0xb54
push 0xc51
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_BitBlt]
jmp 0x100586b4
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x150]
call fcn.1001970b
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x60]
call fcn.1001970b
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop esi
mov esp, ebp
pop ebp
ret