Function at 0x1001720e
Capabilities:
Create process on windows
Delete directory
Log keystrokes via polling

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x1c0
mov dword [ebp - 0x54], edx
xor edx, edx
push ebx
xor ebx, ebx
mov dword [ebp - 0x2c], ecx
mov dword [ebp - 0x7c], ebx
inc edx
mov dword [ebp - 0x78], ebx
mov dword [ebp - 0x74], ebx
mov dword [ebp - 0x70], ebx
mov dword [ebp - 0xc], edx
mov dword [ebp - 0xc], ebx
cmp dword [ebp - 0xc], 3
push esi
push edi
jg 0x10017270
mov byte [ebp - 5], bl
cmp byte [ebp - 5], bl
je 0x10017250
push 0x7b8
call dword [sym.imp.USER32.dll_GetKeyState]
mov byte [ebp - 5], bl
cmp byte [ebp - 5], bl
je 0x10017264
push 0x2f9
push ebx
call dword [sym.imp.KERNEL32.dll_WinExec]
inc dword [ebp - 0xc]
cmp dword [ebp - 0xc], 3
jle 0x1001723d
xor edx, edx
inc edx
mov dword [ebp - 4], 0x9000d4e7
mov dword [ebp - 0xc], ebx
jmp 0x1001728d
mov eax, dword [ebp - 0xc]
mov dword [ebp + eax*4 - 0x100], 0x9102071b
inc dword [ebp - 0xc]
cmp dword [ebp - 0xc], edx
jl 0x1001727c
mov esi, dword [sym.imp.USER32.dll_MapDialogRect]
mov edi, dword [sym.imp.USER32.dll_GetDesktopWindow]
mov dword [ebp - 4], ebx
push 2
pop ecx
cmp dword [ebp - 4], ebx
jl 0x10017301
mov dword [ebp - 0xc], ebx
jmp 0x100172bf
mov eax, dword [ebp - 0xc]
mov dword [ebp + eax*4 - 0x8c], 0x76d7be7e
inc dword [ebp - 0xc]
cmp dword [ebp - 0xc], ecx
jl 0x100172ae
mov dword [ebp - 0x88], ebx
cmp dword [ebp - 0x88], ebx
jl 0x100172f9
mov dword [ebp - 0x18], 0x21009d43
mov byte [ebp - 5], bl
cmp byte [ebp - 5], bl
je 0x100172e7
push ebx
call edi
push eax
call esi
mov dword [ebp - 0x18], 0xffffffff
dec dword [ebp - 0x88]
jns 0x100172d2
push 2
pop ecx
dec dword [ebp - 4]
jns 0x100172a9
xor edx, edx
inc edx
mov dword [ebp - 0x24], 0xba339924
mov dword [ebp - 0x10], 0xfffffffd
mov dword [ebp - 0x10], 0xd7d490c4
mov dword [ebp - 0x10], 0xc90a35f3
mov dword [ebp - 0x10], ebx
mov dword [ebp - 0x10], 0xffffffff
mov dword [ebp - 0x10], 0xffffffff
mov dword [ebp - 0x10], edx
mov dword [ebp - 0x10], 0x76715f0e
mov dword [ebp - 0x10], 0xa4bedcc5
mov dword [ebp - 0x10], 0x498e64e6
mov dword [ebp - 0x10], ebx
mov dword [ebp - 0x10], 0x27cad7d7
mov dword [ebp - 0x10], 0x4cacff8e
mov dword [ebp - 0x10], 0xffffffff
mov dword [ebp - 0x10], 0xffffffff
mov dword [ebp - 0x10], 0x7c7be02
mov dword [ebp - 0x10], ebx
mov dword [ebp - 0x10], 0xfffffff6
mov dword [ebp - 0x10], 0xf4e26c12
mov dword [ebp - 0x10], 0x5954e3f1
mov dword [ebp - 0x10], edx
mov dword [ebp - 0x10], 0xffffffff
mov dword [ebp - 0x10], edx
mov dword [ebp - 0x10], edx
mov dword [ebp - 0x10], 0xe7550730
mov dword [ebp - 0x10], 0xfffffff8
mov dword [ebp - 0x14], 0xfffffffb
inc dword [ebp - 0x14]
mov dword [ebp - 0xc], 0xc4ab274b
mov dword [ebp - 0x14], 0xd2086bd0
mov dword [ebp - 4], ebx
jmp 0x100173d0
mov eax, dword [ebp - 4]
mov dword [ebp + eax*4 - 0x16c], 0x77862fd4
inc dword [ebp - 4]
cmp dword [ebp - 4], 3
jl 0x100173bf
mov dword [ebp - 4], ebx
jmp 0x100173e9
mov eax, dword [ebp - 4]
mov dword [ebp + eax*4 - 0x50], 0xf57a7c20
inc dword [ebp - 4]
cmp dword [ebp - 4], ecx
jl 0x100173db
mov byte [ebp - 5], bl
cmp byte [ebp - 5], bl
je 0x1001740f
push ebx
push ebx
push 0x2268
push 0x8f
push ebx
call dword [sym.imp.USER32.dll_ModifyMenuW]
xor edx, edx
push 2
inc edx
pop ecx
mov dword [ebp - 0x4c], ebx
jmp 0x10017426
mov eax, dword [ebp - 0x4c]
cmp dword [ebp + eax*4 - 0x16c], ebx
jne 0x1001742b
mov eax, dword [ebp - 0x4c]
inc dword [ebp - 0x4c]
cmp dword [ebp - 0x4c], ecx
jle 0x10017414
mov dword [ebp - 0x1c], 7
mov dword [ebp - 0xc], 0x960f57a7
mov dword [ebp - 0x14], 5
mov dword [ebp - 0xc], ebx
jmp 0x10017453
mov eax, dword [ebp - 0xc]
mov dword [ebp + eax*4 - 0x60], 0x7862
inc dword [ebp - 0xc]
cmp dword [ebp - 0xc], ecx
jl 0x10017445
mov dword [ebp - 0xc], edx
cmp dword [ebp - 0xc], ebx
jl 0x10017507
mov dword [ebp - 4], 0x8974b66
mov dword [ebp - 0x18], 0xffffffff
mov dword [ebp - 4], edx
cmp dword [ebp - 4], ebx
jl 0x1001749c
mov byte [ebp - 5], bl
cmp byte [ebp - 5], bl
je 0x10017492
call edi
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_RealizePalette]
dec dword [ebp - 4]
jns 0x1001747a
cmp dword [ebp - 4], ebx
je 0x1001749f
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp - 0xc]
xor edx, edx
mov eax, dword [ebp + eax*4 - 0x60]
mov eax, dword [ebp - 4]
mov eax, dword [ebp - 0xc]
mov ecx, dword [ebp + eax*4 - 0x60]
mov eax, dword [ebp - 4]
cmp ecx, eax
mov eax, dword [ebp - 0xc]
sete dl
sub edx, dword [ebp + eax*4 - 0x60]
je 0x100174cd
cmp dword [ebp - 4], ebx
je 0x100174cd
xor edx, edx
inc edx
jmp 0x100174cf
mov edx, ebx
mov eax, dword [ebp - 0x5c]
xor ecx, ecx
cmp edx, eax
setl cl
cmp ecx, dword [ebp - 0x14]
jg 0x100174e7
mov eax, dword [ebp - 0xc]
cmp dword [ebp + eax*4 - 0x60], ebx
jne 0x100174f3
cmp dword [ebp - 4], ebx
jne 0x100174f3
xor edx, edx
mov eax, ebx
inc edx
jmp 0x100174f8
xor edx, edx
inc edx
mov eax, edx
mov dword [ebp - 0x18], eax
dec dword [ebp - 0xc]
jns 0x10017464
push 2
pop ecx
mov dword [ebp - 0x20], 0xf906d8bc
mov dword [ebp - 4], 0xdb58e469
mov eax, dword [ebp - 4]
mov dword [ebp - 4], eax
cmp dword [ebp - 4], ebx
je 0x1001752c
mov dword [ebp - 0x14], 0xfffffffc
dec dword [ebp - 0x14]
jmp 0x10017562
mov dword [ebp - 0xc], ebx
jmp 0x10017542
mov eax, dword [ebp - 0xc]
mov dword [ebp + eax*4 - 0xc4], 0x290b
inc dword [ebp - 0xc]
cmp dword [ebp - 0xc], edx
jl 0x10017531
mov dword [ebp - 4], ebx
jmp 0x1001755d
mov eax, dword [ebp - 4]
mov dword [ebp + eax*4 - 0xc4], 0xbea1
inc dword [ebp - 4]
cmp dword [ebp - 4], edx
jl 0x1001754c
mov dword [ebp - 0x18], ebx
mov dword [ebp - 4], 0x9000d4e7
mov dword [ebp - 0xc], ebx
jmp 0x10017582
mov eax, dword [ebp - 0xc]
mov dword [ebp + eax*4 - 0x11c], 0x9102071b
inc dword [ebp - 0xc]
cmp dword [ebp - 0xc], edx
jl 0x10017571
mov dword [ebp - 4], ebx
cmp dword [ebp - 4], ebx
jl 0x100175e7
mov dword [ebp - 0xc], ebx
jmp 0x100175a5
mov eax, dword [ebp - 0xc]
mov dword [ebp + eax*4 - 0x94], 0x76d7be7e
inc dword [ebp - 0xc]
cmp dword [ebp - 0xc], ecx
jl 0x10017594
mov dword [ebp - 0x90], ebx
cmp dword [ebp - 0x90], ebx
jl 0x100175df
mov dword [ebp - 0x18], 0x21009d43
mov byte [ebp - 5], bl
cmp byte [ebp - 5], bl
je 0x100175cd
push ebx
call edi
push eax
call esi
mov dword [ebp - 0x18], 0xffffffff
dec dword [ebp - 0x90]
jns 0x100175b8
push 2
pop ecx
dec dword [ebp - 4]
jns 0x1001758f
xor edx, edx
inc edx
mov dword [ebp - 4], 0xffff
mov dword [ebp - 0xc], edx
mov dword [ebp - 0x10], 0xa2a3b3f3
push 4
mov dword [ebp - 0x14], 0xa3267e6
mov dword [ebp - 0xc], ebx
pop esi
jmp 0x10017618
mov eax, dword [ebp - 0xc]
mov dword [ebp + eax*4 - 0x13c], 0xfffffffa
inc dword [ebp - 0xc]
cmp dword [ebp - 0xc], esi
jl 0x10017607
imul eax, dword [ebp - 4], 0x80c
test eax, eax
jne 0x1001762f
dec dword [ebp - 0x14]
mov eax, ebx
je 0x10017631
mov eax, edx
mov ecx, dword [ebp - 4]
add ecx, eax
imul eax, dword [ebp - 0x130], 0x54c9
sub ecx, eax
neg ecx
sbb ecx, ecx
inc ecx
mov dword [ebp - 0xc], ecx
mov dword [ebp - 0xc], ebx
cmp dword [ebp - 0xc], 0xffffffff
jg 0x1001767e
mov dword [ebp - 0x18], 0xffffffff
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x130], eax
mov byte [ebp - 5], bl
cmp byte [ebp - 5], bl
je 0x10017672
push ebx
call dword [sym.imp.KERNEL32.dll_HeapDestroy]
dec dword [ebp - 0xc]
cmp dword [ebp - 0xc], 0xffffffff
jle 0x10017653
xor edx, edx
inc edx
mov dword [ebp - 0xc], ebx
jmp 0x10017691
mov eax, dword [ebp - 0xc]
mov dword [ebp + eax*4 - 0x6c], 0xfffffff8
inc dword [ebp - 0xc]
cmp dword [ebp - 0xc], edx
jl 0x10017683
mov dword [ebp - 4], 0x871c7bf0
mov dword [ebp - 4], ebx
jmp 0x100176b0
mov eax, dword [ebp - 4]
mov dword [ebp + eax*4 - 0x28], 0x6847dfa8
inc dword [ebp - 4]
cmp dword [ebp - 4], edx
jl 0x100176a2
mov dword [ebp - 4], ebx
jmp 0x100176c7
mov eax, dword [ebp - 4]
mov dword [ebp + eax*4 - 0x148], edx
inc dword [ebp - 4]
cmp dword [ebp - 4], 3
jl 0x100176ba
mov dword [ebp - 4], ebx
cmp dword [ebp - 4], ebx
jl 0x10017753
mov dword [ebp - 0x14], 0xc9b780f8
mov dword [ebp - 0x18], 0xfffffff8
mov byte [ebp - 5], bl
cmp byte [ebp - 5], bl
je 0x10017701
push 0x20eb
push 0x78f
call edi
push eax
call dword [sym.imp.USER32.dll_SetWindowLongW]
xor edx, edx
inc edx
mov eax, dword [ebp - 4]
mov eax, dword [ebp - 4]
mov eax, dword [ebp + eax*4 - 0x28]
mov eax, dword [ebp - 4]
mov eax, dword [ebp + eax*4 - 0x28]
mov eax, dword [ebp - 4]
mov eax, dword [ebp + eax*4 - 0x28]
cmp dword [ebp - 0x28], edx
jge 0x10017725
mov eax, dword [ebp - 4]
mov eax, dword [ebp + eax*4 - 0x28]
mov eax, dword [ebp - 4]
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 4]
mov eax, dword [ebp - 4]
mov eax, dword [ebp + eax*4 - 0x28]
mov ecx, dword [ebp - 0x140]
sub ecx, 8
add ecx, eax
neg ecx
sbb ecx, ecx
inc ecx
mov dword [ebp - 0x14], ecx
mov eax, dword [ebp - 0x14]
mov dword [ebp - 0x18], eax
dec dword [ebp - 4]
jns 0x100176d5
mov dword [ebp - 4], ebx
jmp 0x10017766
mov eax, dword [ebp - 4]
mov dword [ebp + eax*4 - 0x28], 0xfdadf860
inc dword [ebp - 4]
cmp dword [ebp - 4], edx
jl 0x10017758
mov eax, dword [ebp - 0x24]
xor edx, edx
mov dword [ebp - 0xc], eax
mov eax, dword [ebp - 0xc]
mov dword [ebp - 0x14], eax
mov ecx, dword [ebp - 0x14]
mov eax, dword [ebp - 0x24]
cmp eax, ecx
setge dl
sub edx, dword [ebp - 0x24]
je 0x100177c1
cmp dword [ebp - 0x24], ebx
jne 0x10017797
cmp dword [ebp - 0x1c], ebx
jne 0x10017797
mov eax, ebx
jmp 0x1001779a
xor eax, eax
inc eax
xor edx, edx
cmp eax, 0xfffffff9
mov eax, dword [ebp - 0xc]
sete dl
xor ecx, ecx
cmp edx, eax
setne cl
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x6c]
mov eax, dword [ebp - 0x20]
cmp dword [ebp - 0x1c], ebx
je 0x100177c1
mov eax, ebx
jmp 0x100177c4
xor eax, eax
inc eax
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x14], 0x8b10
mov dword [ebp - 0x10], 0xc3eee2fd
mov dword [ebp - 0x18], 0xfffffff9
mov dword [ebp - 0xc], 0x888999d9
mov dword [ebp - 0x20], 0x7e5c285c
push 0xfffffffffffffff6
pop eax
mov dword [ebp - 0x10], eax
mov dword [ebp - 0x24], 0xc84
mov dword [ebp - 0x1c], 0x2ee1
mov dword [ebp - 0xc], 0xe57c1f20
mov dword [ebp - 4], ebx
jmp 0x1001781b
mov eax, dword [ebp - 4]
mov dword [ebp + eax*4 - 0x194], 0x281d21f1
inc dword [ebp - 4]
cmp dword [ebp - 4], esi
jl 0x1001780a
push 2
mov dword [ebp - 4], ebx
pop esi
jmp 0x10017836
mov eax, dword [ebp - 4]
mov dword [ebp + eax*4 - 0x68], 0x35900b08
inc dword [ebp - 4]
cmp dword [ebp - 4], esi
jl 0x10017828
mov dword [ebp - 4], ebx
jmp 0x10017851
mov eax, dword [ebp - 4]
mov dword [ebp + eax*4 - 0x118], 0x62b41911
inc dword [ebp - 4]
cmp dword [ebp - 4], esi
jl 0x10017840
cmp dword [ebp - 0x14], ebx
je 0x1001785e
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp - 0x68]
sub eax, 9
neg eax
sbb eax, eax
inc eax
mov dword [ebp - 0xc], eax
mov ecx, dword [ebp - 0x1c]
mov eax, dword [ebp - 0xc]
inc dword [ebp - 0x1c]
cmp ecx, eax
je 0x1001787e
xor edx, edx
inc edx
jmp 0x10017880
mov edx, ebx
mov eax, dword [ebp - 0x64]
xor ecx, ecx
cmp eax, edx
setg cl
xor ebx, ebx
inc ecx
mov dword [ebp - 0x114], ecx
mov edx, dword [ebp - 0x190]
mov eax, dword [ebp - 0x68]
sub edx, ecx
cmp edx, eax
mov eax, dword [ebp - 0x20]
setne bl
xor ecx, ecx
cmp ebx, eax
setg cl
add ecx, dword [ebp - 0x18]
cmp ecx, dword [ebp - 0x68]
jg 0x100178b8
mov eax, dword [ebp - 0x68]
inc dword [ebp - 0x24]
xor ecx, ecx
mov eax, dword [ebp - 0x24]
cmp eax, 0x67b33df1
push 0xfffffffffffffff6
setge cl
pop eax
cmp eax, ecx
sbb eax, eax
xor ebx, ebx
neg eax
mov dword [ebp - 0xc], eax
mov byte [ebp - 5], bl
cmp byte [ebp - 5], bl
je 0x100178e6
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_SizeofResource]
mov dword [ebp - 0xc], ebx
jmp 0x10017a70
mov dword [ebp - 0x14], 0xe948708e
mov dword [ebp - 0xec], edx
mov dword [ebp - 0xe8], edx
mov dword [ebp - 0xe4], edx
mov dword [ebp - 0xe0], edx
mov dword [ebp - 0x18], edx
mov dword [ebp - 0x10], 0xb14f4e79
mov dword [ebp - 0x10], 0xffffffff
mov dword [ebp - 0x10], 0x9ca3191b
mov dword [ebp - 0x20], ebx
mov dword [ebp - 0x24], 0x8ecb302a
mov dword [ebp - 0x20], 0xfffffffc
mov dword [ebp - 0x20], ebx
mov dword [ebp - 0x20], 0xc237
mov dword [ebp - 0x20], 0x86ae2ad2
mov dword [ebp - 0x1c], 0x258d3b3e
mov dword [ebp - 0x1c], 0x2e6b
mov dword [ebp - 0x1c], 0xe85184bf
mov dword [ebp - 0x1c], 0xfffffff8
mov dword [ebp - 4], ebx
jmp 0x10017979
mov eax, dword [ebp - 4]
mov dword [ebp + eax*4 - 0x108], 0x88c55612
inc dword [ebp - 4]
cmp dword [ebp - 4], esi
jl 0x10017968
push 3
mov dword [ebp - 4], ebx
pop ecx
jmp 0x10017997
mov eax, dword [ebp - 4]
mov dword [ebp + eax*4 - 0x1a0], 4
inc dword [ebp - 4]
cmp dword [ebp - 4], ecx
jl 0x10017986
mov dword [ebp - 4], ebx
jmp 0x100179b2
mov eax, dword [ebp - 4]
mov dword [ebp + eax*4 - 0x154], 0x7bb6abd3
inc dword [ebp - 4]
cmp dword [ebp - 4], ecx
jl 0x100179a1
mov eax, dword [ebp - 0x14]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0xe8], ecx
inc dword [ebp - 0x1c]
mov eax, dword [ebp - 0x1c]
imul eax, dword [ebp - 0x18]
cmp ecx, eax
jne 0x10017a0b
mov eax, dword [ebp - 0x20]
xor ecx, ecx
mov eax, dword [ebp - 0x24]
cmp eax, 0xc16
setge cl
xor edx, edx
mov dword [ebp - 0x108], ecx
mov eax, dword [ebp - 0xe8]
cmp ecx, eax
mov eax, dword [ebp - 0x24]
sete dl
xor ecx, ecx
cmp edx, eax
setl cl
xor edx, edx
inc edx
cmp ecx, 0x8c55279c
mov ecx, edx
je 0x10017a0d
mov ecx, ebx
mov eax, dword [ebp - 0x154]
sub ecx, eax
cmp ecx, dword [ebp - 0x10]
jg 0x10017a26
cmp dword [ebp - 0x18], ebx
jne 0x10017a26
mov ecx, ebx
cmp dword [ebp - 0x1c], ebx
je 0x10017a28
mov ecx, edx
mov eax, dword [ebp - 0x14]
xor edx, edx
inc eax
add ecx, eax
mov eax, dword [ebp - 0x24]
cmp ecx, eax
setne dl
xor ecx, ecx
test edx, edx
setns cl
xor eax, eax
cmp ecx, 0x568c
setle al
imul eax, eax, 0x83f
mov dword [ebp - 0x24], eax
mov byte [ebp - 5], bl
cmp byte [ebp - 5], bl
je 0x10017a62
push ebx
call dword [sym.imp.GDI32.dll_CreatePenIndirect]
mov eax, dword [ebp - 0xc]
mov dword [ebp + eax*4 - 0x6c], 0xfffffff9
inc dword [ebp - 0xc]
xor edx, edx
inc edx
cmp dword [ebp - 0xc], edx
jl 0x100178ee
mov esi, dword [ebp - 0x2c]
cmp dword [esi + 0x10], ebx
jne 0x10017a8b
xor al, al
jmp 0x10018438
mov dword [ebp - 0xc], edx
mov dword [ebp - 0x7c], ebx
mov dword [ebp - 0x78], ebx
mov dword [ebp - 0x74], ebx
push 2
mov dword [ebp - 0x70], ebx
mov dword [ebp - 0xc], 0xe
pop ecx
jmp 0x10017b49
mov dword [ebp - 4], ebx
jmp 0x10017abb
mov eax, dword [ebp - 4]
mov dword [ebp + eax*4 - 0x174], edx
inc dword [ebp - 4]
cmp dword [ebp - 4], ecx
jl 0x10017aae
mov dword [ebp - 4], ebx
jmp 0x10017ad6
mov eax, dword [ebp - 4]
mov dword [ebp + eax*4 - 0xfc], 0x9bf39019
inc dword [ebp - 4]
cmp dword [ebp - 4], 4
jl 0x10017ac5
mov byte [ebp - 5], bl
cmp byte [ebp - 5], bl
je 0x10017b0e
push 0x77a
push 0x1320
push 0x2063
push 0xfe4
call edi
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_Rectangle]
xor edx, edx
push 2
inc edx
pop ecx
mov dword [ebp - 0xf4], ebx
cmp dword [ebp - 0xf4], edx
jg 0x10017b46
mov byte [ebp - 5], bl
cmp byte [ebp - 5], bl
je 0x10017b35
push ebx
push 0xc19
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_SignalObjectAndWait]
xor edx, edx
inc edx
inc dword [ebp - 0xf4]
cmp dword [ebp - 0xf4], edx
jle 0x10017b1c
push 2
pop ecx
dec dword [ebp - 0xc]
cmp dword [ebp - 0xc], ecx
jg 0x10017aa9
mov eax, dword [ebp - 0xc]
mov dword [ebp - 0xc], eax
mov eax, 0x70ad6f2e
mov dword [ebp - 0xc], 0x6802
mov dword [ebp - 0xdc], eax
mov dword [ebp - 0xd8], eax
mov dword [ebp - 0xd4], eax
mov dword [ebp - 0xd0], eax
mov dword [ebp - 0x10], edx
mov dword [ebp - 4], ebx
jmp 0x10017b95
mov eax, dword [ebp - 4]
mov dword [ebp + eax*4 - 0x110], 0xa9f8
inc dword [ebp - 4]
cmp dword [ebp - 4], ecx
jl 0x10017b84
mov byte [ebp - 5], bl
cmp byte [ebp - 5], bl
je 0x10017bb0
push ebx
push ebx
call edi
push eax
call dword [sym.imp.USER32.dll_SetPropA]
xor edx, edx
inc edx
cmp dword [ebp - 0xdc], ebx
je 0x10017bd6
mov dword [ebp - 0x10], 6
mov dword [ebp - 0x10], edx
mov byte [ebp - 5], bl
cmp byte [ebp - 5], bl
je 0x10017c2c
push ebx
call edi
push eax
call dword [sym.imp.USER32.dll_EndPaint]
jmp 0x10017c29
mov dword [ebp - 0x18], edx
mov dword [ebp - 4], ebx
jmp 0x10017beb
mov eax, dword [ebp - 4]
mov dword [ebp + eax*4 - 0xc8], edx
inc dword [ebp - 4]
cmp dword [ebp - 4], edx
jl 0x10017bde
mov dword [ebp - 0x10c], 0x9bd6
mov ecx, dword [ebp - 0xc8]
mov eax, dword [ebp - 0xd0]
neg ecx
mov dword [ebp - 0x18], eax
mov eax, dword [ebp - 0x18]
sbb ecx, ecx
neg ecx
xor edx, edx
cmp eax, ecx
mov eax, dword [ebp - 0xd8]
setl dl
xor ecx, ecx
cmp eax, edx
setg cl
mov dword [ebp - 0x10], ecx
xor edx, edx
inc edx
mov dword [ebp - 0x10], 0x1477a14a
mov dword [ebp - 0x14], 0xa5c1b09c
mov dword [ebp - 4], ebx
jmp 0x10017c50
mov eax, dword [ebp - 4]
mov dword [ebp + eax*4 - 0xb0], 0x862f
inc dword [ebp - 4]
cmp dword [ebp - 4], edx
jl 0x10017c3f
mov dword [ebp - 4], ebx
jmp 0x10017c68
mov eax, dword [ebp - 4]
mov dword [ebp + eax*4 - 0x38], 0xfffffff7
inc dword [ebp - 4]
cmp dword [ebp - 4], edx
jl 0x10017c5a
mov dword [ebp - 4], ebx
jmp 0x10017c80
mov eax, dword [ebp - 4]
mov dword [ebp + eax*4 - 0x80], 0xfffffffd
inc dword [ebp - 4]
cmp dword [ebp - 4], edx
jl 0x10017c72
mov dword [ebp - 0x38], ebx
cmp dword [ebp - 0x38], ebx
jl 0x10017d59
mov dword [ebp - 4], ebx
mov dword [ebp - 0x18], 0xdcc80fc3
mov dword [ebp - 4], ebx
jmp 0x10017cb1
mov eax, dword [ebp - 4]
mov dword [ebp + eax*4 - 0xc0], 0x7ddbf4df
inc dword [ebp - 4]
cmp dword [ebp - 4], 4
jl 0x10017ca0
mov dword [ebp - 4], ebx
cmp dword [ebp - 4], ebx
jl 0x10017cf0
mov byte [ebp - 5], bl
cmp byte [ebp - 5], bl
je 0x10017cce
push ebx
call dword [sym.imp.KERNEL32.dll_RtlCaptureContext]
mov byte [ebp - 5], bl
cmp byte [ebp - 5], bl
je 0x10017ceb
push ebx
push ebx
push 0x103d
push 0x1638
call edi
push eax
call dword [sym.imp.USER32.dll_ScrollWindow]
dec dword [ebp - 4]
jns 0x10017cbf
mov eax, dword [ebp - 0xb8]
xor edx, edx
mov eax, dword [ebp - 0xb0]
imul ecx, dword [ebp - 4], 0x14ad
mov eax, dword [ebp - 0x38]
cmp eax, ecx
setl dl
mov dword [ebp - 4], edx
xor edx, edx
mov eax, dword [ebp - 4]
mov dword [ebp - 0x18], eax
dec dword [ebp - 0x80]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0xb8]
mov eax, dword [ebp - 0x38]
mov eax, dword [ebp - 0xb8]
mov eax, dword [ebp - 0xb8]
mov eax, dword [ebp - 0xb4]
mov ecx, dword [ebp - 0xb4]
mov eax, dword [ebp - 0xb8]
cmp eax, ecx
setl dl
mov dword [ebp - 0x10], edx
dec dword [ebp - 0x38]
jns 0x10017c91
xor edx, edx
inc edx
inc dword [ebp - 0x14]
mov dword [ebp - 4], ebx
jmp 0x10017d72
mov eax, dword [ebp - 4]
mov dword [ebp + eax*4 - 0xcc], 5
inc dword [ebp - 4]
cmp dword [ebp - 4], edx
jl 0x10017d61
mov eax, dword [ebp - 0xc]
cmp dword [ebp - 0xc], ebx
jne 0x10017d81
mov edx, ebx
mov eax, dword [ebp - 0xc]
xor ecx, ecx
sub edx, eax
mov eax, dword [ebp - 0xc]
cmp edx, eax
setl cl
xor eax, eax
cmp ecx, 0xfff7
setne al
cmp eax, 0x9beab1d6
jae 0x10017dae
cmp dword [ebp - 0xc], ebx
je 0x10017dae
xor edi, edi
inc edi
mov eax, edi
jmp 0x10017db3
xor edi, edi
mov eax, ebx
inc edi
cmp eax, dword [ebp - 0xc]
jge 0x10017dc4
mov dword [ebp - 0xcc], 0xb489f7a9
jmp 0x10017de4
mov byte [ebp - 5], bl
cmp byte [ebp - 5], bl
je 0x10017de4
push 0x3f23
push 0x2a94
push ebx
push 0x62ae
call fcn.1001ffe2
add esp, 0x10
mov dword [ebp - 4], 0xfffffffc
mov dword [ebp - 0xc], 0xd8475761
mov dword [ebp - 0x10], 0x808adc70
mov dword [ebp - 4], ebx
jmp 0x10017e0b
mov eax, dword [ebp - 4]
mov dword [ebp + eax*4 - 0xa0], ebx
inc dword [ebp - 4]
cmp dword [ebp - 4], 3
jl 0x10017dfe
mov dword [ebp - 4], ebx
jmp 0x10017e24
mov eax, dword [ebp - 4]
mov dword [ebp + eax*4 - 0x58], 0xfffffff6
inc dword [ebp - 4]
cmp dword [ebp - 4], edi
jl 0x10017e16
mov byte [ebp - 5], bl
cmp byte [ebp - 5], bl
je 0x10017e47
push 0x1d61
push ebx
push 0x20e2
push 0xd88
call dword [sym.imp.USER32.dll_SystemParametersInfoA]
mov dword [ebp - 4], ebx
cmp dword [ebp - 4], 2
jg 0x10017f73
mov dword [ebp - 0x14], 0xfff8
xor edx, edx
mov dword [ebp - 0x18], 0xc48b1647
mov dword [ebp - 0x10], 0x2b82
mov dword [ebp - 0x1c], 0xfffffffd
mov ecx, dword [ebp - 0x10]
mov eax, dword [ebp - 4]
cmp ecx, eax
mov eax, dword [ebp - 4]
setle dl
xor ebx, ebx
push 2
mov eax, dword [ebp + eax*4 - 0xa0]
cmp edx, eax
mov eax, dword [ebp - 0x14]
setg bl
mov dword [ebp - 0x18], eax
mov eax, dword [ebp - 4]
xor ecx, ecx
mov esi, dword [ebp + eax*4 - 0xa0]
mov eax, dword [ebp - 4]
cmp ebx, eax
mov eax, dword [ebp - 0x18]
setge cl
xor edx, edx
cmp ecx, esi
pop esi
setle dl
xor ebx, ebx
cmp eax, edx
mov eax, dword [ebp - 0x9c]
setl bl
xor ecx, ecx
cmp ebx, eax
setle cl
xor edx, edx
mov dword [ebp - 0x1c], ecx
mov ecx, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x9c]
cmp ecx, eax
mov eax, dword [ebp - 0x58]
setne dl
xor ecx, ecx
cmp edx, 0x26c7
setg cl
xor edx, edx
cmp ecx, eax
mov eax, dword [ebp - 0x98]
setl dl
add edx, esi
neg edx
sbb edx, edx
xor ecx, ecx
neg edx
cmp eax, edx
setl cl
cmp esi, ecx
sbb eax, eax
neg eax
mov dword [ebp - 0xc], eax
mov eax, dword [ebp - 0x14]
cmp eax, dword [ebp - 0xc]
jl 0x10017f3c
mov dword [ebp - 0xc], 0x11
xor ebx, ebx
jmp 0x10017f34
mov byte [ebp - 5], bl
cmp byte [ebp - 5], bl
je 0x10017f31
push ebx
call dword [sym.imp.KERNEL32.dll_RemoveDirectoryW]
dec dword [ebp - 0xc]
cmp dword [ebp - 0xc], 0xfffffff0
jge 0x10017f22
jmp 0x10017f64
mov dword [ebp - 0x10], 0xd40a7fc
mov eax, dword [ebp - 0x58]
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 4]
mov eax, dword [ebp + eax*4 - 0xa0]
add eax, dword [ebp - 0x10]
xor ebx, ebx
mov dword [ebp - 0xc], eax
mov eax, dword [ebp - 0xc]
mov dword [ebp - 0x10], ebx
inc dword [ebp - 4]
cmp dword [ebp - 4], esi
jle 0x10017e54
mov esi, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x54]
mov dword [eax], ebx
mov dword [ebp - 0xc], 0x6bafcb14
mov dword [ebp - 0xc], ebx
jmp 0x10017f92
mov eax, dword [ebp - 0xc]
mov dword [ebp + eax*4 - 0x3c], 0xfffffffa
inc dword [ebp - 0xc]
cmp dword [ebp - 0xc], edi
jl 0x10017f84
mov dword [ebp - 0x3c], ebx
jmp 0x10017ff2
mov dword [ebp - 4], 0x7ad95e17
mov dword [ebp - 4], 0xfffffff8
jmp 0x10017fd4
cmp dword [ebp - 4], 0x12
jl 0x10017fac
cmp dword [ebp - 0x3c], 0xfffffffc
je 0x10017f9c
mov dword [ebp - 0xc], ebx
jmp 0x10018016
cmp dword [ebp - 0xc], 0xffffffe4
jne 0x10017ffd
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret