Function at 0x1002373d
Capabilities:
Check http status code
Encode data using xor
Query or enumerate registry key

Disassembly:
mov eax, 0x10057efc
call fcn.10056e5c
sub esp, 0x554
push ebx
push esi
mov dword [ebp - 0x240], edx
mov edx, ecx
push edi
mov dword [ebp - 0x10], esp
mov dword [ebp - 0x3c], edx
xor ebx, ebx
mov dword [ebp - 4], ebx
mov dword [ebp - 0x1f8], ebx
mov dword [ebp - 0x1f4], ebx
mov dword [ebp - 0x1f0], ebx
mov byte [ebp - 4], 1
mov dword [ebp - 0x1c], 0xdf1febae
mov dword [ebp - 0x1c], ebx
jmp 0x10023796
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0x390], 0xffffffff
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 2
jl 0x10023785
mov dword [ebp - 0x1c], ebx
jmp 0x100237c1
push 1
push 0x3612
push 0x3ad7
mov byte [ebp - 0x3e], bl
lea ecx, [ebp - 0x3e]
push ebx
xor dl, dl
call fcn.100230fe
add esp, 0x10
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 1
jle 0x100237a1
push 0x43
pop eax
push 2
mov ecx, ebx
mov dword [ebp - 0xc4], 0x2c070806
mov dword [ebp - 0xc0], 0xf02030c
mov dword [ebp - 0xbc], 0x1704110a
mov dword [ebp - 0xb8], 0xc0032600
mov dword [ebp - 0xb4], 0x2d084dd9
mov dword [ebp - 0xb0], 0x59051a09
mov dword [ebp - 0xac], 0x9034c01
mov word [ebp - 0xa8], 0x70b
mov word [ebp - 0x328], ax
pop esi
mov dword [ebp - 0x18c], ecx
cmp esi, 0xe
jne 0x1002383e
push 4
pop ecx
push 0x10
mov dword [ebp - 0x18c], ecx
pop esi
jmp 0x10023899
movzx edx, byte [ebp + esi - 0xc3]
mov eax, esi
sub eax, ecx
push 1
push 0x1a6
movzx eax, byte [ebp + eax - 0xc6]
movzx ecx, word [ebp + eax*2 - 0x334]
mov eax, ecx
and eax, edx
add eax, eax
sub ecx, eax
movzx eax, byte [ebp + esi - 0xc4]
add ecx, edx
mov dl, 1
mov word [ebp + eax*2 - 0x334], cx
lea eax, [ebp - 0x18c]
push eax
push 1
mov ecx, 0x2b13
call fcn.100230fe
mov ecx, dword [ebp - 0x18c]
add esp, 0x10
add esi, 2
cmp esi, 0x1e
jb 0x1002382b
mov dword [ebp - 0x20], 0x8a
cmp dword [ebp - 0x20], 0x12a
jle 0x100238ec
mov edi, ebx
mov esi, ebx
mov dword [ebp - 0x24], ebx
mov eax, esi
mov ecx, 0x10070b88
cdq
idiv ebx
or edx, edi
mov eax, edx
cdq
push edx
push eax
call fcn.1000e159
inc ebx
cmp ebx, 0x6042
jl 0x100238b8
inc esi
push 0
pop ebx
cmp esi, 0x5aee
jl 0x100238b5
inc edi
cmp edi, 0x5a9e
jl 0x100238b3
xor eax, eax
mov byte [ebp - 4], 2
cmp dword [ebp - 0x20], 0xfffffcee
mov word [ebp - 0x31a], ax
jge 0x10023911
mov edx, str.yzdgsusz_dimrg_kuotdfqh_lsac_jvdbq_cpnxns_ssxfqvmj_whoybjb_wvtkozfc_trudverl_ttyakoy_flj
mov ecx, 0x10070b88
call fcn.10010f71
xor ecx, ecx
inc ecx
mov dword [ebp - 4], ecx
mov dword [ebp - 0x18], ebx
mov dword [ebp - 0x20], 0x914cc5c6
mov dword [ebp - 0x70], 0xffffffff
mov dword [ebp - 0x24], 0xf2ddfdaf
mov dword [ebp - 0x1c], ebx
jmp 0x10023963
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0x58], 0xfffffff9
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 2
jl 0x10023955
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x20], 0xffff
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x18]
dec eax
neg eax
sbb eax, eax
neg eax
mov dword [ebp - 0x70], eax
mov eax, dword [ebp - 0x70]
mov eax, dword [ebp - 0x18]
sub eax, 0x864cb83
je 0x1002399b
cmp dword [ebp - 0x58], ebx
jne 0x1002399d
mov ecx, ebx
mov eax, dword [ebp - 0x58]
xor edx, edx
add eax, ecx
cmp eax, 0xacc0
mov eax, dword [ebp - 0x18]
setg dl
xor ecx, ecx
cmp eax, edx
setg cl
imul ecx, dword [ebp - 0x18]
mov dword [ebp - 0x18], ecx
cmp dword [ebp - 0x58], 0xfffffffc
jg 0x100239cd
cmp dword [ebp - 0x58], ebx
je 0x100239cd
xor ecx, ecx
inc ecx
jmp 0x100239cf
mov ecx, ebx
mov eax, dword [ebp - 0x58]
xor edx, edx
add ecx, eax
mov eax, dword [ebp - 0x24]
cmp ecx, eax
setg dl
imul edx, dword [ebp - 0x54]
test edx, edx
je 0x100239f0
cmp dword [ebp - 0x70], ebx
je 0x100239f0
xor edx, edx
inc edx
jmp 0x100239f2
mov edx, ebx
mov eax, dword [ebp - 0x58]
xor ecx, ecx
cmp edx, eax
mov eax, dword [ebp - 0x58]
setg cl
xor edx, edx
add ecx, eax
mov eax, dword [ebp - 0x58]
cmp ecx, eax
push ecx
setne dl
cmp edx, dword [ebp - 0x58]
jle 0x10023a83
mov dl, 1
call fcn.10023155
pop ecx
push 0x68
pop eax
push 2
pop edi
mov ecx, ebx
mov dword [ebp - 0x94], 0x9042006
mov dword [ebp - 0x90], 0xc010205
mov byte [ebp - 0x8c], bl
mov dword [ebp - 0x8b], 0x3430201
mov dword [ebp - 0x87], 0x77f6044e
mov dword [ebp - 0x83], 0x6075225
mov word [ebp - 0x2ac], ax
mov dword [ebp - 0x18], edi
mov dword [ebp - 0x194], ecx
cmp edi, 0xe
jne 0x10023b64
push 5
pop ecx
push 0x11
mov dword [ebp - 0x194], ecx
pop edi
jmp 0x10023c7e
push ebx
lea eax, [ebp - 0x22c]
mov dword [ebp - 0x22c], 0xb5d06de2
push eax
push ecx
lea edx, [ebp - 0x70]
mov ecx, 0x1aec
call fcn.10023721
add esp, 0x10
mov dword [ebp - 0x18], ebx
cmp dword [ebp - 0x18], 0xfffffffc
je 0x10023a19
mov byte [ebp - 0x25], bl
cmp byte [ebp - 0x25], 0
je 0x10023acd
push ebx
push 0x1e1c
push 0x1b40
call dword [sym.imp.GDI32.dll_CreatePen]
mov dword [ebp - 0x20], 0x2109
cmp dword [ebp - 0x20], 0x23b0
jle 0x10023b24
mov edi, ebx
mov esi, ebx
mov eax, esi
lea ecx, [ebp - 0x450]
and eax, edi
cdq
push edx
push eax
call fcn.10002407
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x10023afd
mov eax, dword [eax]
push eax
call fcn.10039f03
pop ecx
push ebx
push 1
lea ecx, [ebp - 0x450]
call fcn.1000eba1
inc esi
cmp esi, 0x3a87
jl 0x10023ae1
inc edi
cmp edi, 0x50aa
jl 0x10023adf
push 0x3c98
lea eax, [ebp - 0x3d]
mov byte [ebp - 0x3d], bl
push eax
push ecx
push ecx
mov dl, 1
mov ecx, 0x784a
call fcn.10023180
add esp, 0x10
cmp dword [ebp - 0x20], 0x1df4
jge 0x10023b55
push str.hjhca_ribu_fppr_fnsna_mag
call fcn.10039f03
pop ecx
mov dword [ebp - 4], 1
dec dword [ebp - 0x18]
jmp 0x10023aa9
movzx edx, byte [ebp + edi - 0x93]
mov eax, edi
sub eax, ecx
movzx eax, byte [ebp + eax - 0x96]
movzx ecx, word [ebp + eax*2 - 0x2b8]
mov eax, ecx
and eax, edx
add eax, eax
sub ecx, eax
movzx eax, byte [ebp + edi - 0x94]
add ecx, edx
mov word [ebp + eax*2 - 0x2b8], cx
mov dword [ebp - 0x24], 0x1812
cmp dword [ebp - 0x24], 0x97e
jge 0x10023c51
lea eax, [ebp - 0x1bc]
push eax
push 0x1006263c
call fcn.10039c1b
mov esi, dword [ebp - 0x1bc]
mov dword [ebp - 0x1a4], ebx
mov dword [ebp - 0x1c8], ebx
mov dword [ebp - 0x14], ebx
mov dword [ebp - 0x20], ebx
mov dword [ebp - 0x1c], ebx
pop ecx
pop ecx
test esi, esi
jle 0x10023c25
mov edi, ebx
lea eax, [ebp - 0x1c8]
push eax
lea eax, [ebp - 0x1a4]
push eax
push str._d__d
call fcn.10039c1b
mov eax, dword [ebp - 0x1c]
add esp, 0xc
add ebx, dword [ebp - 0x1a4]
add edi, dword [ebp - 0x1c8]
inc eax
mov esi, dword [ebp - 0x1bc]
mov dword [ebp - 0x1c], eax
cmp eax, esi
jl 0x10023be2
mov dword [ebp - 0x20], edi
mov edi, dword [ebp - 0x18]
mov dword [ebp - 0x14], ebx
xor ebx, ebx
mov eax, esi
mov ecx, esi
cdq
sub eax, edx
mov edx, dword [ebp - 0x20]
sub ecx, edx
sar eax, 1
cmp edx, eax
cmovle ecx, edx
mov edx, dword [ebp - 0x14]
sub esi, edx
cmp edx, eax
cmovle esi, edx
add ecx, esi
push ecx
push 0x10060858
call fcn.10039f03
pop ecx
pop ecx
push 1
push ebx
push 1
push 0x77f
push 0x5f31
push 0x4676
mov edx, 0x3967
lea ecx, [ebp - 0x194]
call fcn.100232e6
mov ecx, dword [ebp - 0x194]
add esp, 0x18
add edi, 2
mov dword [ebp - 0x18], edi
cmp edi, 0x15
jb 0x10023a69
xor eax, eax
mov word [ebp - 0x2a8], ax
mov dword [ebp - 0x14], 0x51c7
mov dword [ebp - 0x18], ebx
mov dword [ebp - 0x2c], 0xfffffffb
mov dword [ebp - 0x2c], ebx
mov dword [ebp - 0x2c], 0x6b99
cmp dword [ebp - 0x2c], 0x6ded
jle 0x10023d13
mov dword [ebp - 0x20], ebx
mov edi, ebx
mov esi, ebx
mov ecx, ebx
mov dword [ebp - 0x34], 0x4267
mov ebx, dword [ebp - 0x20]
mov dword [ebp - 0x1c], ecx
mov eax, edi
sar eax, cl
mov ecx, 0x10070b88
or eax, ebx
cdq
push edx
push eax
call fcn.1000e159
mov ecx, dword [ebp - 0x1c]
add ecx, esi
dec dword [ebp - 0x34]
mov dword [ebp - 0x1c], ecx
jne 0x10023cd0
inc esi
push 0
pop ebx
cmp esi, 0x1d7a
jl 0x10023cc1
inc edi
cmp edi, 0x1e7d
jl 0x10023cbf
mov eax, dword [ebp - 0x20]
inc eax
mov dword [ebp - 0x20], eax
cmp eax, 0x1533
jl 0x10023cbd
mov byte [ebp - 4], 6
cmp dword [ebp - 0x2c], 0x690e
jge 0x10023d4d
mov edx, str.queyvjv_wxuqzhlj_xgivkviup_pmcs_ojscz_itccwa_qleuilrok_qfcxz_fwsqfz_bqlwosf_vcqfhf
mov ecx, 0x10070b88
call fcn.10010f71
jmp 0x10023d4d
mov dword [ebp - 4], 1
mov dword [ebp - 0x2c], 0xb748abb7
mov dword [ebp - 0x24], 0xcd021aa2
mov dword [ebp - 0x24], 8
mov dword [ebp - 0x1c], ebx
jmp 0x10023d7f
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0x310], 0x69be541
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 3
jl 0x10023d6e
mov eax, dword [ebp - 0x14]
xor edx, edx
mov dword [ebp - 0x2c], eax
mov ecx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x14]
cmp ecx, eax
mov ecx, dword [ebp - 0x2c]
setl dl
dec ecx
neg ecx
sbb ecx, ecx
xor eax, eax
neg ecx
cmp edx, ecx
setg al
xor edx, edx
mov dword [ebp - 0x2c], eax
xor ecx, ecx
mov eax, dword [ebp - 0x14]
inc edx
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x2c]
mov dword [ebp - 0x30c], edx
mov eax, dword [ebp - 0x18]
cmp eax, edx
setg cl
xor eax, eax
mov dword [ebp - 0x2c], ecx
mov ecx, dword [ebp - 0x2c]
imul ecx, dword [ebp - 0x18]
neg ecx
cmp ecx, 0x9b8b
setle al
cmp dword [ebp - 0x14], eax
jg 0x10023dee
cmp dword [ebp - 0x30c], ebx
jne 0x10023dee
mov edx, ebx
mov eax, dword [ebp - 0x18]
xor ecx, ecx
cmp edx, eax
setl cl
imul eax, ecx, 0xa8d7
lea ecx, [ebp - 0x2f8]
sub eax, dword [ebp - 0x14]
mov dword [ebp - 0x24], eax
xor eax, eax
mov word [ebp - 0x2f8], ax
lea eax, [ebp - 0x2b8]
push eax
mov dword [ebp - 0x2e4], 7
mov dword [ebp - 0x2e8], ebx
call fcn.100163c6
mov byte [ebp - 4], 8
lea ecx, [ebp - 0x2e0]
xor eax, eax
mov dword [ebp - 0x2cc], 7
mov word [ebp - 0x2e0], ax
lea eax, [ebp - 0x334]
push eax
mov dword [ebp - 0x2d0], ebx
call fcn.100163c6
lea eax, [ebp - 0x2e0]
push eax
lea ecx, [ebp - 0x3f0]
call fcn.10016ff1
lea eax, [ebp - 0x2f8]
push eax
lea ecx, [ebp - 0x3d8]
call fcn.10016ff1
push ebx
push 1
lea ecx, [ebp - 0x2e0]
call fcn.1000ed75
push ebx
push 1
lea ecx, [ebp - 0x2f8]
call fcn.1000ed75
mov byte [ebp - 4], 9
lea eax, [ebp - 0x3c0]
push dword [ebp - 0x1cc]
lea ecx, [ebp - 0x1b0]
mov dword [ebp - 0x1b0], ebx
push eax
lea eax, [ebp - 0x3f0]
mov dword [ebp - 0x1ac], ebx
push eax
push ebx
mov dword [ebp - 0x1a8], ebx
call fcn.10025e0a
push fcn.100170ef
push 1
push 0x30
lea eax, [ebp - 0x3f0]
mov byte [ebp - 4], 0xb
push eax
call fcn.10039cbb
xor ecx, ecx
inc ecx
mov dword [ebp - 0x20], ecx
mov dword [ebp - 0x1c], 0x6b3e713e
mov dword [ebp - 0x14], ebx
jmp 0x10023f10
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x264], 0x1b055cc2
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], 4
jl 0x10023eff
mov eax, dword [ebp - 0x264]
cmp dword [ebp - 0x25c], ebx
ja 0x10023f2a
mov eax, dword [ebp - 0x260]
mov eax, dword [ebp - 0x264]
mov dword [ebp - 0x264], eax
test eax, eax
jne 0x10023f44
mov edx, ebx
cmp dword [ebp - 0x260], ebx
je 0x10023f46
mov edx, ecx
dec dword [ebp - 0x20]
xor ecx, ecx
mov eax, dword [ebp - 0x1c]
cmp edx, eax
mov eax, 0xfff8
setne cl
cmp eax, ecx
mov eax, dword [ebp - 0x1c]
push ebx
sbb ecx, ecx
xor edx, edx
inc ecx
cmp ecx, eax
mov eax, dword [ebp - 0x20]
push 1
setge dl
xor ecx, ecx
cmp eax, edx
mov dl, 1
push 0x73be
setge cl
mov dword [ebp - 0x1c], ecx
mov ecx, 0x5b5
call fcn.100235ff
add esp, 0xc
lea edi, [ebp - 0x334]
xor eax, eax
push 7
pop ecx
rep stosd dword es:[edi], eax
mov dword [ebp - 0x20], 0x21bb
cmp dword [ebp - 0x20], 0x251d
jle 0x1002401a
push 0x438
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetWindowLongW]
mov edi, ebx
mov esi, ebx
mov ecx, ebx
mov dword [ebp - 0x34], 0x4687
mov dword [ebp - 0x2c], ecx
mov eax, edi
or eax, ecx
lea ecx, [ebp - 0x420]
cdq
push edx
push eax
call fcn.10002407
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x10023fe6
mov eax, dword [eax]
push eax
call fcn.10039f03
pop ecx
push ebx
push 1
lea ecx, [ebp - 0x420]
call fcn.1000eba1
mov ecx, dword [ebp - 0x2c]
add ecx, esi
dec dword [ebp - 0x34]
mov dword [ebp - 0x2c], ecx
jne 0x10023fca
inc esi
cmp esi, 0x3f1e
jl 0x10023fbe
inc edi
cmp edi, 0x32f5
jl 0x10023fbc
xor eax, eax
lea edi, [ebp - 0x2b8]
cmp dword [ebp - 0x20], 0x1ee3
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosw word es:[edi], ax
jge 0x1002403c
push str.tjuhl_iqdlmugya_yydec_gwkgjgwt_bjowwf_rywmho_smelfn_cnewi_oehrmnp
call fcn.10039f03
pop ecx
mov dword [ebp - 4], 0xb
xor ecx, ecx
mov dword [ebp - 0x24], 0xe80c6548
inc ecx
mov dword [ebp - 0x14], ebx
jmp 0x10024063
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x198], 0x22124f84
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], ecx
jl 0x10024052
push ecx
push ecx
push 0x395f
xor dl, dl
mov ecx, 0x59a7
call fcn.100235ff
add esp, 0xc
cmp dword [ebp - 0x198], ebx
je 0x10024097
cmp dword [ebp - 0x198], 0x847d
je 0x10024097
xor ecx, ecx
inc ecx
jmp 0x10024099
mov ecx, ebx
xor eax, eax
lea edx, [ebp - 0x1b0]
cmp ecx, 1
push ecx
setl al
lea ecx, [ebp + 8]
mov dword [ebp - 0x198], eax
mov dword [ebp - 0x24], eax
push ebx
call fcn.100232b7
mov esi, 0x847dfa86
xor edx, edx
mov dword [ebp - 0x1dc], esi
inc edx
mov dword [ebp - 0x1d8], esi
mov dword [ebp - 0x1d4], esi
mov dword [ebp - 0x1d0], esi
mov dword [ebp - 0x1c], 0xf0b96ca2
pop ecx
mov dword [ebp - 0x24], edx
pop ecx
mov dword [ebp - 0x14], ebx
jmp 0x100240fc
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x9c], 0xfffffffd
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], 2
jl 0x100240eb
mov dword [ebp - 0x1c], 3
cmp dword [ebp - 0x1c], ebx
jl 0x1002429c
mov dword [ebp - 0x18], 7
mov dword [ebp - 0x30], 0xffffffff
mov dword [ebp - 0x14], ebx
jmp 0x10024136
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x274], 0xfffffffc
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], 2
jl 0x10024125
mov dword [ebp - 0x18], ebx
jmp 0x100241bd
mov dword [ebp - 0x24], ebx
mov dword [ebp - 0x14], ebx
jmp 0x1002415a
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x364], 0xb3bfa32a
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], 4
jl 0x10024149
mov eax, dword [ebp - 0x1c]
xor ecx, ecx
mov eax, dword [ebp + eax*4 - 0x1dc]
cmp eax, 0x4163
sete cl
mov dword [ebp - 0x358], ecx
test ecx, ecx
je 0x1002418d
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0x9c], eax
mov eax, dword [ebp - 0x358]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp + eax*4 - 0x1dc]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp + eax*4 - 0x1dc]
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x1dc]
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x1dc], ecx
mov dword [ebp - 0x24], ecx
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 3
jle 0x10024141
mov dword [ebp - 0x18], edx
cmp dword [ebp - 0x18], ebx
jl 0x10024293
mov dword [ebp - 0x14], 0xfffffffb
mov dword [ebp - 0x24], 0xbe1552b9
mov eax, dword [ebp - 0x18]
inc eax
jne 0x100241ea
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp - 0x18]
xor ecx, ecx
mov edx, dword [ebp + eax*4 - 0x9c]
mov eax, dword [ebp - 0x18]
cmp eax, 0x44ed25e4
setle cl
cmp ecx, edx
jl 0x10024208
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x18]
xor edx, edx
mov ecx, dword [ebp + eax*4 - 0x9c]
mov eax, dword [ebp - 0x14]
cmp eax, ecx
setg dl
mov dword [ebp - 0x14], edx
cmp dword [ebp - 0x18], ebx
jne 0x1002422a
mov eax, dword [ebp - 0x1d4]
mov eax, dword [ebp - 0x98]
mov eax, dword [ebp - 0x30]
mov eax, dword [ebp - 0x18]
imul ecx, dword [ebp + eax*4 - 0x9c], 0x5604
mov eax, dword [ebp - 0x18]
cmp ecx, dword [ebp + eax*4 - 0x9c]
jl 0x10024253
mov eax, dword [ebp - 0x9c]
mov eax, dword [ebp - 0x18]
xor edx, edx
mov ecx, dword [ebp + eax*4 - 0x9c]
mov eax, dword [ebp - 0x1dc]
cmp ecx, eax
setne dl
add edx, 0x418d0dca
mov dword [ebp - 0x270], edx
cmp dword [ebp - 0x14], 0xcf62392e
sbb eax, eax
neg eax
mov dword [ebp - 0x270], eax
dec dword [ebp - 0x18]
jns 0x100241d3
xor edx, edx
inc edx
dec dword [ebp - 0x1c]
jns 0x10024112
push ecx
push edx
push 0x5d0c
call fcn.10023590
mov dword [ebp - 0x2c], 0x517e
add esp, 0xc
cmp dword [ebp - 0x2c], 0x5459
jle 0x100242e0
mov esi, ebx
mov edi, esi
mov ebx, 0x249b
mov eax, edi
mov ecx, 0x10070b88
cdq
push edx
push eax
call fcn.1000e159
dec edi
dec ebx
jne 0x100242c4
inc esi
cmp esi, 0x69c8
jl 0x100242bd
mov byte [ebp - 4], 0xe
cmp dword [ebp - 0x2c], 0x4e20
jge 0x1002431d
mov edx, str.jhkebgxdo_ashaetflu_mtomyzcfh_deknakui
mov ecx, 0x10070b88
call fcn.10010f71
jmp 0x1002431d
push ecx
lea eax, [ebp - 0x244]
mov dword [ebp - 4], 0xb
mov dword [ebp - 0x244], 0x4e064826
xor dl, dl
push eax
mov ecx, 0xb54
call fcn.100231d9
mov byte [ebp - 0x25], bl
cmp byte [ebp - 0x25], 0
pop ecx
pop ecx
je 0x10024361
push ecx
push 1
mov edx, 0x41de
mov ecx, 0x2f91
call fcn.100232b7
pop ecx
pop ecx
push ebx
push 0xde93
push 0xcd02
call fcn.10035d6b
pop ecx
pop ecx
call eax
push ecx
push 0x444d
mov dl, 1
lea ecx, [ebp - 0x2c8]
call fcn.100231d9
mov dword [ebp - 0x1c], ebx
mov dword [ebp - 0x20], 0xbefcdf11
mov dword [ebp - 0x18], 0xe856dfc9
pop ecx
mov dword [ebp - 0x24], 1
pop ecx
mov dword [ebp - 0x14], ebx
jmp 0x100243b5
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x68], 1
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], 1
jl 0x100243a7
mov dword [ebp - 0x1c], ebx
cmp dword [ebp - 0x1c], ebx
jg 0x100244e9
mov dword [ebp - 0x14], ebx
jmp 0x100243dd
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x21c], 0x398070ad
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], 3
jl 0x100243cc
mov dword [ebp - 0x30], 0x228c
cmp dword [ebp - 0x30], 0x22a9
jle 0x10024453
mov dword [ebp - 0x14], ebx
mov edi, ebx
mov dword [ebp - 0x34], ebx
mov esi, ebx
mov ebx, dword [ebp - 0x14]
mov dword [ebp - 0x2c], esi
mov eax, edi
cdq
idiv esi
mov esi, 0x3275
mov edi, edx
mov eax, ebx
mov ecx, 0x10070b88
xor eax, edi
cdq
push edx
push eax
call fcn.1000e159
dec edi
dec esi
jne 0x1002440f
mov esi, dword [ebp - 0x2c]
mov edi, dword [ebp - 0x34]
inc esi
mov dword [ebp - 0x2c], esi
cmp esi, 0x77d8
jl 0x10024403
inc edi
mov dword [ebp - 0x34], edi
push 0
pop ebx
cmp edi, 0x7da0
jl 0x100243fb
mov eax, dword [ebp - 0x14]
inc eax
mov dword [ebp - 0x14], eax
cmp eax, 0x6920
jl 0x100243f6
mov dword [ebp - 0x214], ebx
jmp 0x1002446f
mov eax, dword [ebp - 0x214]
mov dword [ebp + eax*4 - 0x68], 0xffffffff
inc dword [ebp - 0x214]
cmp dword [ebp - 0x214], 1
jl 0x1002445b
mov byte [ebp - 4], 0x10
cmp dword [ebp - 0x30], 0x213b
jge 0x100244b2
mov edx, str.cszmvzbb_dbsklg_jsksmo_ainuanjn_arpnaxo_nzmrdso_efw_afpiy_xdfiu_erct_wdrude_mycfko
mov ecx, 0x10070b88
call fcn.10010f71
jmp 0x100244b2
push 1
push 1
push ebx
push 0x1d65
lea eax, [ebp - 0x3f]
mov dword [ebp - 4], 0xb
push eax
mov byte [ebp - 0x3f], bl
mov edx, 0x55f3
push 0x6a0e
mov ecx, 0x7be2
call fcn.100232e6
add esp, 0x18
inc dword [ebp - 0x1c]
jmp 0x100243be
cmp dword [ebp - 0x68], ebx
jne 0x10024522
mov eax, dword [ebp - 0x68]
xor ecx, ecx
cmp eax, 0xffffffff
setl cl
xor edx, edx
mov dword [ebp - 0x20], ecx
mov ecx, dword [ebp - 0x20]
mov eax, dword [ebp - 0x1c]
cmp ecx, eax
setle dl
neg edx
mov dword [ebp - 0x18], edx
mov eax, dword [ebp - 0x18]
cmp eax, dword [ebp - 0x1c]
jg 0x10024519
mov eax, dword [ebp - 0x20]
cmp dword [ebp - 0x68], 1
jg 0x10024522
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x24]
xor edx, edx
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x24]
mov ecx, dword [ebp - 0x20]
mov eax, dword [ebp - 0x1c]
cmp eax, ecx
push 0xfffffffffffffff8
setle dl
mov dword [ebp - 0x38], ebx
mov dword [ebp - 0x1c], edx
pop edx
mov dword [ebp - 0x18], edx
mov dword [ebp - 0x14], ebx
jmp 0x1002455a
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x304], 0x313dd33a
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], 3
jl 0x10024549
push 2
mov dword [ebp - 0x18], ebx
pop ecx
jmp 0x100245ab
mov dword [ebp - 0x14], 0x888adae8
mov eax, dword [ebp - 0x18]
cmp dword [ebp + eax*4 - 0x304], ebx
jne 0x100245b0
mov dword [ebp - 0x14], ebx
jmp 0x100245a3
mov dword [ebp - 0x1c], 0xa20bd035
mov dword [ebp - 0x1c], ebx
jmp 0x1002459b
mov eax, dword [ebp - 0x1c]
cmp dword [ebp + eax*4 - 0x304], ebx
jne 0x100245a0
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], ecx
jle 0x1002458c
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], ecx
jle 0x10024580
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], ecx
jle 0x10024568
mov dword [ebp - 0x1c], edx
mov dword [ebp - 0x18], 0x5466bc65
mov dword [ebp - 0x24], ebx
mov dword [ebp - 0x30], 0x124f
cmp dword [ebp - 0x30], 0x1319
jle 0x10024666
mov edx, ebx
mov dword [ebp - 0x20], ebx
mov eax, ebx
mov dword [ebp - 0x14], ebx
mov edi, ebx
mov dword [ebp - 0x24], ebx
lea ecx, [edi + eax]
mov esi, ebx
mov edi, edx
shl edi, cl
mov ecx, esi
mov eax, edi
shl eax, cl
lea ecx, [ebp - 0x408]
cdq
push edx
push eax
call fcn.10002407
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x10024607
mov eax, dword [eax]
push eax
call fcn.10039f03
pop ecx
push ebx
push 1
lea ecx, [ebp - 0x408]
call fcn.1000eba1
inc esi
cmp esi, 0x3ac1
jl 0x100245e9
mov edi, dword [ebp - 0x24]
mov eax, dword [ebp - 0x14]
inc edi
mov edx, dword [ebp - 0x20]
mov dword [ebp - 0x24], edi
cmp edi, 0x1da0
jl 0x100245e0
inc eax
mov dword [ebp - 0x14], eax
cmp eax, 0x22fa
jl 0x100245db
inc edx
mov dword [ebp - 0x20], edx
cmp edx, 0x6fc3
jl 0x100245d6
push ebx
push ebx
push ebx
push ebx
push ebx
push ebx
push 0x1bc0
push ebx
call dword [sym.imp.ADVAPI32.dll_RegEnumKeyExW]
push 2
pop ecx
mov dword [ebp - 0x24], ecx
cmp dword [ebp - 0x30], 0x1216
jge 0x1002467d
push str.bhjmi_zqayzdnh_oracuzsw_cwlx_bwqywh_aaxlv_jzbaeh_chd_uskbdrl
call fcn.10039f03
pop ecx
mov dword [ebp - 4], 0xb
mov dword [ebp - 0x24], 0x61ea52fa
mov dword [ebp - 0x24], 0x5a44
cmp dword [ebp - 0x24], 0x5adf
jle 0x100246e2
mov edi, ebx
mov esi, ebx
mov eax, esi
lea ecx, [ebp - 0x438]
xor eax, edi
cdq
push edx
push eax
call fcn.10002407
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x100246bb
mov eax, dword [eax]
push eax
call fcn.10039f03
pop ecx
push ebx
push 1
lea ecx, [ebp - 0x438]
call fcn.1000eba1
inc esi
cmp esi, 0x2ef2
jl 0x1002469f
inc edi
cmp edi, 0x30c2
jl 0x1002469d
mov dword [ebp - 0x14], ebx
jmp 0x100246f8
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x45c], 8
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], 3
jl 0x100246e7
cmp dword [ebp - 0x24], 0x57e7
jge 0x10024712
push str.lssavmzd_uoqoz_ppem_hshyopppb_lzkpz_qlgp_wjaynbhm_gunsgn_qjikplu_qiywec_igqkilpk
call fcn.10039f03
pop ecx
push 0xb
pop eax
mov dword [ebp - 4], eax
mov dword [ebp - 0x1c], ebx
cmp dword [ebp - 0x1c], 0xfffffff7
jge 0x100249c0
mov dword [ebp - 0x44], 3
mov dword [ebp - 0x50], 0x3d3b
mov dword [ebp - 0x24], 1
mov dword [ebp - 0x24], 0x1f7ee045
mov dword [ebp - 0x24], 0xd68e480b
mov dword [ebp - 0x230], 0x42a2
mov dword [ebp - 0x14], ebx
jmp 0x10024764
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x518], ebx
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], 4
jl 0x10024757
mov eax, dword [ebp - 0x44]
xor edx, edx
mov eax, dword [ebp - 0x44]
mov dword [ebp - 0x18], eax
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x44]
mov eax, dword [ebp - 0x44]
mov eax, dword [ebp - 0x50]
mov ecx, dword [ebp - 0x50]
mov eax, dword [ebp - 0x1c]
cmp ecx, eax
setg dl
cmp edx, 0xffffffff
jle 0x1002479b
cmp dword [ebp - 0x18], ebx
je 0x1002479b
xor edx, edx
inc edx
jmp 0x1002479d
mov edx, ebx
mov eax, dword [ebp - 0x1c]
xor ecx, ecx
sub edx, eax
mov eax, dword [ebp - 0x1c]
cmp eax, edx
push 9
setge cl
imul ecx, dword [ebp - 0x44]
pop eax
sub eax, ecx
je 0x100248a7
mov dword [ebp - 0x24], 0x7c76
mov dword [ebp - 0x14], ebx
jmp 0x100247d8
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x318], 0x3c8d3fd9
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], 2
jl 0x100247c7
mov dword [ebp - 0x18], ebx
jmp 0x10024892
mov dword [ebp - 0x30], 0xc35cf455
mov dword [ebp - 0x30], 0x657a772b
mov dword [ebp - 0x14], ebx
jmp 0x1002480a
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x374], 0x7dcc3592
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], 4
jl 0x100247f9
cmp dword [ebp - 0x50], ebx
je 0x1002481f
cmp dword [ebp - 0x24], ebx
je 0x1002481f
xor ecx, ecx
inc ecx
jmp 0x10024821
mov ecx, ebx
xor eax, eax
cmp ecx, 1
setge al
cmp eax, dword [ebp - 0x24]
je 0x10024838
cmp dword [ebp - 0x50], ebx
je 0x10024838
xor ecx, ecx
inc ecx
jmp 0x1002483a
mov ecx, ebx
xor eax, eax
test ecx, ecx
setne al
add eax, dword [ebp - 0x18]
jne 0x1002484f
cmp dword [ebp - 0x18], ebx
jne 0x1002484f
mov eax, ebx
jmp 0x10024852
xor eax, eax
inc eax
xor edx, edx
cmp eax, 0x1c1d
mov eax, dword [ebp - 0x36c]
setl dl
xor ecx, ecx
imul edx, eax
mov eax, dword [ebp - 0x1c]
cmp edx, eax
setge cl
mov dword [ebp - 0x30], ecx
cmp dword [ebp - 0x30], ebx
je 0x10024884
cmp dword [ebp - 0x36c], ebx
je 0x10024884
xor eax, eax
inc eax
jmp 0x10024886
mov eax, ebx
mov dword [ebp - 0x30], eax
mov dword [ebp - 0x318], ebx
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 3
je 0x100247e6
push 0xb
pop eax
dec dword [ebp - 0x1c]
jmp 0x1002471b
mov dword [ebp - 0x1cc], 0xf33d48a2
mov dword [ebp - 0x24], 0x194e4064
mov dword [ebp - 0x18], ebx
jmp 0x100248ce
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x1c0], 0x2db60270
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 1
jl 0x100248bd
mov dword [ebp - 0x18], ebx
jmp 0x100248e6
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x468], ebx
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 3
jl 0x100248d9
push 1
lea eax, [ebp - 0x230]
push eax
lea eax, [ebp - 0x44]
push eax
push ecx
lea edx, [ebp - 0x50]
lea ecx, [ebp - 0x1cc]
call fcn.100230bc
mov dword [ebp - 0x24], 0x5e
add esp, 0x10
cmp dword [ebp - 0x24], 0xf2
jle 0x1002496f
mov dword [ebp - 0x20], ebx
mov esi, ebx
mov edi, ebx
mov ebx, dword [ebp - 0x20]
mov eax, edi
mov ecx, 0x10070b88
xor eax, esi
or eax, ebx
cdq
push edx
push eax
call fcn.1000e159
inc edi
cmp edi, 0x2b2d
jl 0x10024925
inc esi
push 0
pop ebx
cmp esi, 0x69ee
jl 0x10024920
mov eax, dword [ebp - 0x20]
inc eax
mov dword [ebp - 0x20], eax
cmp eax, 0x5e53
jl 0x1002491e
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_RealizePalette]
mov byte [ebp - 4], 0x16
cmp dword [ebp - 0x24], 0xfffffd0f
jge 0x1002498b
mov edx, str.czbc_jnr_xbegpczkp_sscqx_nho_etek_ocok_edifbecfz_bajzaqp_oymry_sznugm
mov ecx, 0x10070b88
call fcn.10010f71
push 0xb
pop eax
mov dword [ebp - 4], eax
jmp 0x1002489f
push 0x45
mov byte [ebp - 0x138], al
mov ecx, ebx
mov byte [ebp - 0x133], al
pop eax
push 2
mov dword [ebp - 0x178], 0x7c147401
mov dword [ebp - 0x174], 0x1f94204
mov word [ebp - 0x170], 0x21d7
mov byte [ebp - 0x16e], 0xf
mov byte [ebp - 0x16d], bl
mov dword [ebp - 0x16c], 0x104f0a4d
mov dword [ebp - 0x168], 0x1f750805
mov dword [ebp - 0x164], 0x1e1a0e73
mov dword [ebp - 0x160], 0x5770f6b
mov byte [ebp - 0x15c], bl
mov dword [ebp - 0x15b], 0x107080d
mov dword [ebp - 0x157], 0x1d1a1509
mov dword [ebp - 0x153], 0x49250417
mov dword [ebp - 0x14f], 0x71063c16
mov dword [ebp - 0x14b], 0x623731b
mov dword [ebp - 0x147], 0x7d117c20
mov dword [ebp - 0x143], 0x115741c
mov dword [ebp - 0x13f], 0x6e041c13
mov word [ebp - 0x13b], 0x7a22
mov byte [ebp - 0x139], 0x12
mov dword [ebp - 0x137], 0x7002060c
mov dword [ebp - 0x132], 0x3071d77
mov dword [ebp - 0x12e], 0x1915180c
mov word [ebp - 0x12a], 0x241d
mov byte [ebp - 0x128], 8
mov word [ebp - 0x4b6], ax
pop esi
mov dword [ebp - 0x19c], ecx
cmp esi, 4
jne 0x10024b89
mov dword [ebp - 0x19c], 5
push 7
mov dword [ebp - 0x24], 0x1910
cmp dword [ebp - 0x24], 0x1926
pop esi
mov dword [ebp - 0x30], esi
jle 0x10024bd9
mov esi, dword [sym.imp.USER32.dll_GetDesktopWindow]
push 0x247f
push 0xe0e
push 0x1fd4
push ebx
push 0x1c8b
push 0x18ed
call esi
mov edi, dword [sym.imp.USER32.dll_GetDC]
push eax
call edi
push eax
push 0x5a6
push 0x254b
push 0x2176
push 0x14b8
call esi
push eax
call edi
push eax
call dword [sym.imp.GDI32.dll_MaskBlt]
mov dword [ebp - 0x20], ebx
mov esi, ebx
mov dword [ebp - 0x24], ebx
mov edi, esi
mov ebx, 0x3aec
mov esi, dword [ebp - 0x20]
mov eax, esi
mov ecx, 0x10070b88
xor eax, edi
cdq
push edx
push eax
call fcn.1000e159
dec edi
dec ebx
jne 0x10024b52
mov esi, dword [ebp - 0x24]
inc esi
mov dword [ebp - 0x24], esi
cmp esi, 0x6556
jl 0x10024b48
mov eax, dword [ebp - 0x20]
inc eax
mov dword [ebp - 0x20], eax
cmp eax, 0x62e8
jl 0x10024b43
mov esi, dword [ebp - 0x30]
jmp 0x10024bd9
movzx edx, byte [ebp + esi - 0x177]
mov eax, esi
sub eax, ecx
movzx eax, byte [ebp + eax - 0x17a]
movzx ecx, word [ebp + eax*2 - 0x4b8]
mov eax, ecx
and eax, edx
add eax, eax
sub ecx, eax
movzx eax, byte [ebp + esi - 0x178]
add ecx, edx
lea edx, [ebp - 0x19c]
push ecx
push 0x5be9
mov word [ebp + eax*2 - 0x4b8], cx
mov ecx, 0x6d95
push ebx
call fcn.100235e8
add esp, 0xc
add esi, 2
cmp esi, 0x51
jae 0x10024bec
mov ecx, dword [ebp - 0x19c]
jmp 0x10024ac7
xor eax, eax
mov dword [ebp - 0x290], 7
mov word [ebp - 0x46c], ax
lea ecx, [ebp - 0x2a4]
mov word [ebp - 0x2a4], ax
lea eax, [ebp - 0x4b8]
push eax
mov dword [ebp - 0x294], ebx
call fcn.100163c6
mov byte [ebp - 4], 0x1a
lea edi, [ebp - 0x4b8]
push 0x13
pop ecx
xor eax, eax
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
mov dword [ebp - 0x1c], 0xfffffff7
mov dword [ebp - 0x18], ebx
jmp 0x10024c47
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x7c], ebx
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 3
jl 0x10024c3d
mov dword [ebp - 0x18], ebx
jmp 0x10024c63
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x354], 0xf0f5
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 4
jl 0x10024c52
mov dword [ebp - 0x74], 0xfffffffd
mov ecx, 0xfffb
mov eax, dword [ebp - 0x74]
mov eax, dword [ebp - 0x74]
mov eax, dword [ebp - 0x78]
mov eax, dword [ebp - 0x74]
mov eax, dword [ebp - 0x78]
mov eax, dword [ebp - 0x78]
mov eax, dword [ebp - 0x74]
mov eax, dword [ebp - 0x74]
mov eax, dword [ebp - 0x78]
cmp ecx, eax
mov ecx, dword [ebp - 0x78]
sbb eax, eax
xor edx, edx
inc eax
imul ecx, eax
mov dword [ebp - 0x350], ecx
mov eax, dword [ebp - 0x74]
cmp eax, ecx
mov eax, dword [ebp - 0x74]
setg dl
sub edx, eax
mov dword [ebp - 0x1c], edx
mov dword [ebp - 0x1c], ebx
jmp 0x10024cc9
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0x354], 0xfffffffe
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 4
jl 0x10024cb8
xor ecx, ecx
inc ecx
mov dword [ebp - 0x20], ecx
mov dword [ebp - 0x1c], 0x6b3e713e
mov dword [ebp - 0x14], ebx
jmp 0x10024cf2
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x254], 0x1b055cc2
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], 4
jl 0x10024ce1
mov eax, dword [ebp - 0x254]
cmp dword [ebp - 0x24c], ebx
ja 0x10024d0c
mov eax, dword [ebp - 0x250]
mov eax, dword [ebp - 0x254]
mov dword [ebp - 0x254], eax
test eax, eax
jne 0x10024d26
mov edx, ebx
cmp dword [ebp - 0x250], ebx
je 0x10024d28
mov edx, ecx
dec dword [ebp - 0x20]
xor ecx, ecx
mov eax, dword [ebp - 0x1c]
cmp edx, eax
mov eax, 0xfff8
setne cl
cmp eax, ecx
mov eax, dword [ebp - 0x1c]
sbb ecx, ecx
xor edx, edx
inc ecx
cmp ecx, eax
mov eax, dword [ebp - 0x20]
setge dl
xor ecx, ecx
cmp eax, edx
setge cl
mov dword [ebp - 0x1c], ecx
mov byte [ebp - 0x25], bl
cmp byte [ebp - 0x25], 0
je 0x10024d6b
push ebx
mov ecx, 0x73b
call fcn.10023400
pop ecx
push 0x30
pop eax
push 2
mov ecx, ebx
mov byte [ebp - 0x120], 0x21
mov byte [ebp - 0x11f], al
mov byte [ebp - 0x11e], 0x19
mov byte [ebp - 0x11d], bl
mov dword [ebp - 0x11c], 0x701b0312
mov byte [ebp - 0x118], 0xb
mov byte [ebp - 0x117], bl
mov dword [ebp - 0x116], 0xe1f740c
mov dword [ebp - 0x112], 0x710d7b22
mov dword [ebp - 0x10e], 0x7f060a0a
mov dword [ebp - 0x10a], 0x2010203
mov word [ebp - 0x106], 0x6b0e
mov byte [ebp - 0x104], 0x13
mov byte [ebp - 0x103], bl
mov byte [ebp - 0x102], bl
mov dword [ebp - 0x101], 0x4481556
mov dword [ebp - 0xfd], 0x240f080a
mov dword [ebp - 0xf9], 0x16191802
mov dword [ebp - 0xf5], 0x1704021f
mov dword [ebp - 0xf1], 0x10011173
mov dword [ebp - 0xed], 0x1e1c0975
mov dword [ebp - 0xe9], 0x2577076b
mov dword [ebp - 0xe5], 0x234d054c
mov dword [ebp - 0xe1], 0x1c721a72
mov byte [ebp - 0xdd], bl
mov dword [ebp - 0xdc], 0x78204a04
mov dword [ebp - 0xd8], 0x140920b4
mov dword [ebp - 0xd4], 0xf761d7b
mov byte [ebp - 0xd0], 5
mov word [ebp - 0x4c6], ax
pop esi
mov dword [ebp - 0x190], ecx
cmp esi, 0x44
jne 0x10024e8d
push 5
pop ecx
push 0x47
mov dword [ebp - 0x190], ecx
pop esi
jmp 0x10024ef3
movzx edx, byte [ebp + esi - 0x11f]
lea eax, [ebp - 0x120]
sub eax, ecx
push 1
push 1
push 1
movzx eax, byte [eax + esi - 2]
movzx ecx, word [ebp + eax*2 - 0x508]
mov eax, edx
and eax, ecx
add eax, eax
sub edx, eax
movzx eax, byte [ebp + esi - 0x120]
add edx, ecx
mov ecx, 0x3f2e
mov word [ebp + eax*2 - 0x508], dx
lea eax, [ebp - 0x190]
push eax
push 0x203
push 0x33a7
mov edx, 0xa7b
call fcn.100232e6
mov ecx, dword [ebp - 0x190]
add esp, 0x18
add esi, 2
cmp esi, 0x51
jb 0x10024e7a
xor eax, eax
mov dword [ebp - 0x278], 7
mov word [ebp - 0x4bc], ax
lea ecx, [ebp - 0x28c]
mov word [ebp - 0x28c], ax
lea eax, [ebp - 0x508]
push eax
mov dword [ebp - 0x27c], ebx
call fcn.100163c6
mov byte [ebp - 4], 0x1b
lea edi, [ebp - 0x508]
push 0x13
xor eax, eax
xor edx, edx
pop ecx
rep stosd dword es:[edi], eax
inc edx
stosw word es:[edi], ax
mov dword [ebp - 0x1c], edx
mov dword [ebp - 0x14], ebx
jmp 0x10024f5d
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x4c], 0x98a8f939
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], 2
jl 0x10024f4f
mov dword [ebp - 0x1c], ebx
jmp 0x10025027
mov dword [ebp - 0x18], 0xafd94fe5
mov dword [ebp - 0x20], 0x48bd921b
mov dword [ebp - 0x18], edx
cmp dword [ebp - 0x18], ebx
jl 0x10025024
mov eax, dword [ebp - 0x18]
cmp dword [ebp + eax*4 - 0x4c], ebx
jne 0x10024f99
mov eax, dword [ebp - 0x18]
mov esi, ebx
cmp dword [ebp + eax*4 - 0x4c], ebx
je 0x10024f9b
mov esi, edx
mov eax, dword [ebp - 0x1c]
mov ecx, dword [ebp + eax*4 - 0x4c]
mov eax, 0xffffdca0
sub eax, esi
add ecx, eax
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x4c], ecx
mov eax, dword [ebp - 0x4c]
mov dword [ebp - 0x20], eax
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp + eax*4 - 0x4c]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp + eax*4 - 0x4c]
mov eax, dword [ebp - 0x18]
cmp ecx, dword [ebp + eax*4 - 0x4c]
jne 0x10024fe0
mov eax, dword [ebp - 0x18]
mov ecx, ebx
cmp dword [ebp + eax*4 - 0x4c], ebx
je 0x10024fe2
mov ecx, edx
mov eax, dword [ebp - 0x18]
cmp ecx, dword [ebp + eax*4 - 0x4c]
jge 0x10025007
cmp dword [ebp - 0x20], ebx
jne 0x10025007
mov eax, dword [ebp - 0x1c]
cmp dword [ebp + eax*4 - 0x4c], ebx
jne 0x10025000
mov eax, ebx
cmp dword [ebp - 0x1c], ebx
je 0x10025002
mov eax, edx
mov dword [ebp - 0x20], eax
jmp 0x1002501b
push ecx
push ecx
push 0x3a92
push ecx
push edx
call fcn.100233d7
xor edx, edx
add esp, 0x14
inc edx
dec dword [ebp - 0x18]
jns 0x10024f85
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], edx
jle 0x10024f6b
mov dword [ebp - 0x1ec], 0x847dfa86
mov dword [ebp - 0x1e8], 0x847dfa86
mov dword [ebp - 0x1e4], 0x847dfa86
mov dword [ebp - 0x1e0], 0x847dfa86
mov dword [ebp - 0x1c], 0xf0b96ca2
mov dword [ebp - 0x24], edx
mov dword [ebp - 0x14], ebx
jmp 0x10025078
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0xa4], 0xfffffffd
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], 2
jl 0x10025067
mov dword [ebp - 0x1c], 3
cmp dword [ebp - 0x1c], ebx
jl 0x10025218
mov dword [ebp - 0x18], 7
mov dword [ebp - 0x30], 0xffffffff
mov dword [ebp - 0x14], ebx
jmp 0x100250b2
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x26c], 0xfffffffc
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], 2
jl 0x100250a1
mov dword [ebp - 0x18], ebx
jmp 0x10025139
mov dword [ebp - 0x24], ebx
mov dword [ebp - 0x14], ebx
jmp 0x100250d6
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x344], 0xb3bfa32a
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], 4
jl 0x100250c5
mov eax, dword [ebp - 0x1c]
xor ecx, ecx
mov eax, dword [ebp + eax*4 - 0x1ec]
cmp eax, 0x4163
sete cl
mov dword [ebp - 0x338], ecx
test ecx, ecx
je 0x10025109
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0xa4], eax
mov eax, dword [ebp - 0x338]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp + eax*4 - 0x1ec]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp + eax*4 - 0x1ec]
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x1ec]
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x1ec], ecx
mov dword [ebp - 0x24], ecx
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 3
jle 0x100250bd
mov dword [ebp - 0x18], edx
cmp dword [ebp - 0x18], ebx
jl 0x1002520f
mov dword [ebp - 0x20], 0xfffffffb
mov dword [ebp - 0x24], 0xbe1552b9
mov eax, dword [ebp - 0x18]
inc eax
jne 0x10025166
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x18]
xor ecx, ecx
mov edx, dword [ebp + eax*4 - 0xa4]
mov eax, dword [ebp - 0x18]
cmp eax, 0x44ed25e4
setle cl
cmp ecx, edx
jl 0x10025184
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x18]
xor edx, edx
mov ecx, dword [ebp + eax*4 - 0xa4]
mov eax, dword [ebp - 0x20]
cmp eax, ecx
setg dl
mov dword [ebp - 0x20], edx
cmp dword [ebp - 0x18], ebx
jne 0x100251a6
mov eax, dword [ebp - 0x1e4]
mov eax, dword [ebp - 0xa0]
mov eax, dword [ebp - 0x30]
mov eax, dword [ebp - 0x18]
imul ecx, dword [ebp + eax*4 - 0xa4], 0x5604
mov eax, dword [ebp - 0x18]
cmp ecx, dword [ebp + eax*4 - 0xa4]
jl 0x100251cf
mov eax, dword [ebp - 0xa4]
mov eax, dword [ebp - 0x18]
xor edx, edx
mov ecx, dword [ebp + eax*4 - 0xa4]
mov eax, dword [ebp - 0x1ec]
cmp ecx, eax
setne dl
add edx, 0x418d0dca
mov dword [ebp - 0x268], edx
cmp dword [ebp - 0x20], 0xcf62392e
sbb eax, eax
neg eax
mov dword [ebp - 0x268], eax
dec dword [ebp - 0x18]
jns 0x1002514f
xor edx, edx
inc edx
dec dword [ebp - 0x1c]
jns 0x1002508e
mov byte [ebp - 0x25], bl
cmp byte [ebp - 0x25], 0
je 0x1002523a
push edx
push 0x408b
push 0x7539
push ebx
mov ecx, 0x7849
call fcn.100230fe
add esp, 0x10
cmp dword [ebp - 0x290], 8
lea ecx, [ebp - 0x3a0]
push ecx
lea eax, [ebp - 0x2a4]
mov esi, 0xf5ff
cmovae eax, dword [ebp - 0x2a4]
push eax
push 0xde93
push esi
call fcn.10035d6b
pop ecx
pop ecx
call eax
test eax, eax
jne 0x10025860
cmp dword [ebp - 0x278], 8
lea ecx, [ebp - 0x3c0]
push ecx
lea eax, [ebp - 0x28c]
cmovae eax, dword [ebp - 0x28c]
push eax
push 0xde93
push esi
call fcn.10035d6b
pop ecx
pop ecx
call eax
test eax, eax
jne 0x10025860
lea eax, [ebp - 0x38]
push eax
lea eax, [ebp - 0x3a0]
push eax
push 3
push ebx
lea eax, [ebp - 0x3c0]
push eax
push 0xde93
push 0x80e3
call fcn.10035d6b
pop ecx
pop ecx
call eax
test eax, eax
js 0x10025860
cmp dword [ebp - 0x38], 0
je 0x10025860
push 0xb
pop eax
xor ecx, ecx
mov word [ebp - 0x388], ax
push 0x65
mov word [ebp - 0x380], cx
pop ecx
mov word [ebp - 0x1b6], cx
mov ecx, ebx
push 2
mov word [ebp - 0x64], 0x9301
mov byte [ebp - 0x62], bl
mov dword [ebp - 0x61], 0xe3f30422
mov dword [ebp - 0x5d], 0x3302d4ef
pop esi
mov dword [ebp - 0x188], ecx
cmp esi, 4
jne 0x10025331
push 5
pop ecx
push 7
mov dword [ebp - 0x188], ecx
pop esi
jmp 0x10025373
movzx edx, byte [ebp + esi - 0x63]
mov eax, esi
sub eax, ecx
push 1
movzx eax, byte [ebp + eax - 0x66]
movzx eax, word [ebp + eax*2 - 0x1b8]
mov ecx, eax
and eax, edx
or ecx, edx
sub ecx, eax
movzx eax, byte [ebp + esi - 0x64]
mov word [ebp + eax*2 - 0x1b8], cx
lea ecx, [ebp - 0x188]
call fcn.10023400
pop ecx
mov ecx, dword [ebp - 0x188]
push 0xb
pop eax
add esi, 2
cmp esi, eax
jb 0x1002531e
xor eax, eax
mov dword [ebp - 0x1fc], 7
mov word [ebp - 0x1b2], ax
lea ecx, [ebp - 0x210]
mov word [ebp - 0x210], ax
lea eax, [ebp - 0x1b8]
push eax
mov dword [ebp - 0x200], ebx
call fcn.100163c6
mov byte [ebp - 4], 0x1c
mov esi, ebx
mov dword [ebp - 0x14], ebx
cmp esi, 4
jae 0x10025492
mov dword [ebp - 0x2c], 0x6732
cmp dword [ebp - 0x2c], 0x677d
jle 0x1002543b
mov dword [ebp - 0x20], ebx
mov esi, ebx
mov dword [ebp - 0x30], ebx
mov edi, ebx
mov dword [ebp - 0x24], ebx
mov eax, esi
mov dword [ebp - 0x34], ebx
cdq
idiv edi
mov ebx, dword [ebp - 0x20]
mov esi, dword [ebp - 0x34]
mov edi, edx
mov ecx, esi
mov eax, edi
shl eax, cl
mov ecx, 0x10070b88
or eax, ebx
cdq
push edx
push eax
call fcn.1000e159
inc esi
cmp esi, 0x596f
jl 0x100253eb
mov edi, dword [ebp - 0x24]
mov esi, dword [ebp - 0x30]
inc edi
mov dword [ebp - 0x24], edi
push 0
pop ebx
cmp edi, 0x362c
jl 0x100253db
inc esi
mov dword [ebp - 0x30], esi
cmp esi, 0x1d14
jl 0x100253d6
mov eax, dword [ebp - 0x20]
inc eax
mov dword [ebp - 0x20], eax
cmp eax, 0x4fe6
jl 0x100253d1
mov esi, dword [ebp - 0x14]
xor eax, eax
mov byte [ebp - 4], 0x1d
cmp dword [ebp - 0x2c], 0x6636
mov word [ebp + esi*2 - 0x1b8], ax
jge 0x10025482
mov edx, str.aefcr_nlghcl_gvlkjaxr_krrfogn
mov ecx, 0x10070b88
call fcn.10010f71
jmp 0x10025482
inc esi
mov dword [ebp - 4], 0x1c
mov dword [ebp - 0x14], esi
jmp 0x100253b5
cmp dword [ebp - 0x1fc], 8
lea ecx, [ebp - 0x210]
mov eax, dword [ebp - 0x200]
cmovae ecx, dword [ebp - 0x210]
push dword [ebp - 0x1c0]
mov dword [ebp - 0x23c], ebx
mov dword [ebp - 0x238], ebx
lea eax, [ecx + eax*2]
mov dword [ebp - 0x234], ebx
lea ecx, [ebp - 0x210]
cmovae ecx, dword [ebp - 0x210]
push eax
push ecx
lea ecx, [ebp - 0x23c]
call fcn.10016fb6
push ebx
lea eax, [ebp - 0x23c]
mov byte [ebp - 4], 0x1f
push eax
push 0x4100
push 1
mov dl, 1
mov ecx, 0x324f
call fcn.100230fe
mov edx, dword [ebp - 0x3c]
add esp, 0x10
cmp dword [edx + 0x14], 8
jb 0x10025510
mov ecx, dword [edx]
jmp 0x10025512
mov ecx, edx
cmp dword [edx + 0x14], 8
mov eax, dword [edx + 0x10]
lea eax, [ecx + eax*2]
jb 0x10025520
mov edx, dword [edx]
push dword [ebp - 0x1c0]
lea ecx, [ebp - 0x228]
mov dword [ebp - 0x228], ebx
push eax
push edx
mov dword [ebp - 0x224], ebx
mov dword [ebp - 0x220], ebx
call fcn.10016fb6
push ecx
push ecx
lea eax, [ebp - 0x228]
mov byte [ebp - 4], 0x20
push eax
mov edx, 0x181e
mov cl, 1
call fcn.10023446
mov eax, dword [ebp - 0x38]
lea esi, [ebp - 0x2c8]
cmp dword [ebp - 0x1fc], 8
lea edx, [ebp - 0x210]
cmovae edx, dword [ebp - 0x210]
mov ecx, dword [eax]
push ecx
mov edi, esp
sub esp, 0x10
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
mov edi, esp
lea esi, [ebp - 0x2c8]
sub esp, 0x10
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
mov edi, esp
lea esi, [ebp - 0x388]
push dword [ebp - 0x228]
push edx
movsd dword es:[edi], dword [esi]
push eax
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
call dword [ecx + 0x1c]
test eax, eax
js 0x1002581c
mov esi, dword [ebp - 0x1b0]
mov cl, 1
mov dword [ebp - 0x17c], ebx
cmp esi, dword [ebp - 0x1ac]
je 0x10025615
add esi, 0x18
test cl, cl
je 0x100255fd
cmp dword [esi + 0x14], 8
jb 0x100255dc
mov edi, dword [esi]
jmp 0x100255de
mov edi, esi
cmp dword [esi - 4], 8
jb 0x100255e9
mov edx, dword [esi - 0x18]
jmp 0x100255ec
lea edx, [esi - 0x18]
mov eax, dword [ebp - 0x38]
push edi
push edx
push eax
mov ecx, dword [eax]
call dword [ecx + 0x20]
mov cl, 1
test eax, eax
jns 0x100255ff
mov cl, bl
add esi, 0x30
lea eax, [esi - 0x18]
cmp eax, dword [ebp - 0x1ac]
jne 0x100255ce
test cl, cl
je 0x1002581c
mov eax, dword [ebp - 0x38]
lea esi, [ebp - 0x2c8]
sub esp, 0x10
mov edi, esp
mov ecx, dword [eax]
push eax
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
call dword [ecx + 0x2c]
test eax, eax
js 0x1002581c
mov eax, dword [ebp - 0x38]
lea edx, [ebp - 0x17c]
push edx
push eax
mov ecx, dword [eax]
call dword [ecx + 0x34]
test eax, eax
js 0x1002581c
cmp dword [ebp - 0x17c], 0x130
je 0x10025669
cmp dword [ebp - 0x17c], 0xc8
jne 0x1002581c
mov eax, dword [ebp - 0x38]
lea edx, [ebp - 0x3b0]
push edx
push eax
mov ecx, dword [eax]
call dword [ecx + 0x48]
test eax, eax
js 0x1002581c
mov esi, dword [ebp - 0x3a8]
mov dword [ebp - 0x1c4], esi
test esi, esi
je 0x1002581c
mov eax, dword [esi]
lea ecx, [ebp - 0x560]
push 1
push ecx
push esi
call dword [eax + 0x30]
test eax, eax
js 0x10025809
mov eax, dword [ebp - 0x558]
xor dl, dl
mov dword [ebp - 0x6c], eax
lea eax, [ebp - 0x6c]
push eax
push 0x656d
push ecx
push ecx
lea ecx, [ebp - 0x1f8]
call fcn.10023180
mov edx, dword [ebp - 0x6c]
mov edi, ebx
add esp, 0x10
mov dword [ebp - 0x1a0], edx
mov dword [ebp - 0x180], ebx
mov dword [ebp - 0x184], edi
mov eax, dword [ebp - 0x1f8]
mov ecx, dword [esi]
add eax, edi
lea edi, [ebp - 0x180]
push edi
push edx
push eax
push esi
call dword [ecx + 0xc]
mov edi, dword [ebp - 0x184]
test eax, eax
js 0x100257e9
mov dword [ebp - 0x24], 0x4093
cmp dword [ebp - 0x24], 0x41eb
jle 0x10025745
mov esi, ebx
mov edi, ebx
mov ecx, edi
mov eax, esi
shl eax, cl
mov ecx, 0x10070b88
cdq
push edx
push eax
call fcn.1000e159
inc edi
cmp edi, 0x584d
jl 0x10025720
inc esi
cmp esi, 0x71fb
jl 0x1002571e
push ecx
lea eax, [ebp - 0x180]
mov edx, 0x1eeb
push eax
push 1
lea ecx, [ebp - 0x184]
call fcn.100235e8
add esp, 0xc
mov byte [ebp - 4], 0x21
cmp dword [ebp - 0x24], 0x3e15
jge 0x1002579c
mov edx, str.nfc_fmex_kpcnrx_qtysata_myubwrdsn_ulmumwl_msfggskfe_zenrznr_vugs_bagtkrep_rzwg
mov ecx, 0x10070b88
call fcn.10010f71
jmp 0x1002579c
push ebx
push 1
push ebx
push 0x285c
lea eax, [ebp - 0x180]
mov dword [ebp - 4], 0x20
push 0x56e4
push eax
lea edx, [ebp - 0x1a0]
mov ecx, 0x1d78
call fcn.100232e6
mov edi, dword [ebp - 0x184]
add esp, 0x18
mov eax, dword [ebp - 0x6c]
cmp edi, eax
jae 0x100257ee
mov esi, dword [ebp - 0x1c4]
mov edx, dword [ebp - 0x1a0]
jmp 0x100256e7
mov eax, dword [ebp - 0x6c]
cmp edi, eax
je 0x10025809
push 1
push 1
push 0x63aa
mov dl, 1
lea ecx, [ebp - 0x1f8]
call fcn.100235ff
add esp, 0xc
push ecx
push ecx
lea eax, [ebp - 0x1c4]
push eax
push ecx
push ebx
call fcn.100233d7
add esp, 0x14
push ecx
push 1
push 0x7e4d
push ecx
mov edx, 0x6e06
lea ecx, [ebp - 0x38]
call fcn.10023721
add esp, 0x10
mov dword [ebp - 0x38], ebx
lea ecx, [ebp - 0x228]
call fcn.1000f0ef
lea ecx, [ebp - 0x23c]
call fcn.1000f0ef
push ebx
push 1
lea ecx, [ebp - 0x210]
mov byte [ebp - 4], 0x1b
call fcn.1000ed75
push 0xde93
push 0xafbb
call fcn.10035d6b
pop ecx
pop ecx
call eax
mov ecx, dword [ebp - 0x240]
lea eax, [ebp - 0x1f8]
push eax
call fcn.10025a0a
push ebx
push 1
lea ecx, [ebp - 0x28c]
call fcn.1000ed75
push ebx
push 1
lea ecx, [ebp - 0x2a4]
call fcn.1000ed75
lea ecx, [ebp - 0x1b0]
call fcn.100164f1
lea ecx, [ebp - 0x1f8]
call fcn.10016752
lea ecx, [ebp + 8]
call fcn.100164f1
mov ecx, dword [ebp - 0xc]
pop edi
pop esi
mov dword fs:[0], ecx
pop ebx
mov esp, ebp
pop ebp
ret