Function at 0x10001b58
Capabilities:
Encode data using xor
Encrypt data using speck
Get disk size

Disassembly:
mov eax, 0x1005a33d
call fcn.10059d20
sub esp, 0x258
push ebx
push esi
xor ebx, ebx
mov dword [ebp - 0x2c], 0x14b7
cmp dword [ebp - 0x2c], 0xa99
push edi
mov dword [ebp - 0x10], esp
mov dword [ebp - 0x48], edx
mov dword [ebp - 0x84], ecx
mov dword [ebp - 0x190], ebx
jge 0x10001c2b
push 0xc40
push 0xffffffffffffffff
push 0x10074ad0
call fcn.1002f732
add esp, 0xc
lea eax, [ebp - 0x5c]
push eax
push 0x100633e0
call fcn.100422fb
mov eax, dword [ebp - 0x5c]
pop ecx
pop ecx
cmp eax, 0xffffffff
je 0x10001c2b
xor edi, edi
inc edi
cmp eax, edi
jne 0x10001bd2
push 0x100633ec
call fcn.100426e6
jmp 0x10001c12
cmp eax, 2
jne 0x10001bde
push 0x100633f0
jmp 0x10001bcb
mov edi, ebx
mov esi, ebx
lea ecx, [eax - 2]
mov edx, esi
call fcn.10001ae5
add eax, edi
mov ecx, 0xc4
cdq
idiv ecx
inc esi
mov edi, edx
cmp esi, 4
jge 0x10001c03
mov eax, dword [ebp - 0x5c]
jmp 0x10001be2
push edi
push 0x100633f4
call fcn.1004252f
xor edi, edi
pop ecx
inc edi
pop ecx
lea eax, [ebp - 0x5c]
push eax
push 0x100633e0
call fcn.100422fb
mov eax, dword [ebp - 0x5c]
pop ecx
pop ecx
cmp eax, 0xffffffff
jne 0x10001bc2
mov dword [ebp - 0x24], 0xfffffffa
xor ecx, ecx
mov dword [ebp - 0x28], 0x2906c902
inc ecx
mov dword [ebp - 0x54], 0xb06d673c
mov dword [ebp - 0x38], 0x65e429b0
mov dword [ebp - 0x18], ebx
jmp 0x10001c5c
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x16c], ecx
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 4
jl 0x10001c4f
push 0xfffffffffffffffb
pop eax
push 3
mov dword [ebp - 0x24], 0x1d
mov esi, 0xb4ef66b
pop edx
cmp dword [ebp - 0x24], 0xffffffe5
jne 0x10001f54
mov dword [ebp - 0x100], eax
mov dword [ebp - 0xfc], eax
mov dword [ebp - 0xf8], eax
mov dword [ebp - 0xf4], eax
mov dword [ebp - 0x30], ebx
jmp 0x10001ca8
mov eax, dword [ebp - 0x30]
mov dword [ebp + eax*4 - 0x9c], ecx
inc dword [ebp - 0x30]
cmp dword [ebp - 0x30], edx
jl 0x10001c9b
mov dword [ebp - 0x30], ebx
jmp 0x10001cbf
mov eax, dword [ebp - 0x30]
mov dword [ebp + eax*4 - 0xdc], ecx
inc dword [ebp - 0x30]
cmp dword [ebp - 0x30], ecx
jl 0x10001cb2
xor edi, edi
mov dword [ebp - 0x3c], 0x56f5
inc edi
cmp dword [ebp - 0x3c], 0x5a5e
jle 0x10001d6c
mov eax, ebx
mov dword [ebp - 0x20], eax
mov esi, ebx
mov dword [ebp - 0x30], ebx
mov ecx, esi
mov dword [ebp - 0x2c], ebx
mov edx, eax
mov esi, ebx
sar edx, cl
mov dword [ebp - 0x28], edx
mov eax, ebx
mov dword [ebp - 0x18], 0x4683
mov dword [ebp - 0x34], eax
or eax, edx
lea ecx, [ebp - 0x230]
cdq
push edx
push eax
call fcn.10001a94
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x10001d19
mov eax, dword [eax]
push eax
call fcn.1004252f
pop ecx
push ebx
push edi
lea ecx, [ebp - 0x230]
call fcn.100038eb
mov eax, dword [ebp - 0x34]
mov edx, dword [ebp - 0x28]
add eax, esi
dec dword [ebp - 0x18]
mov dword [ebp - 0x34], eax
jne 0x10001cff
inc esi
cmp esi, 0x7384
jl 0x10001cf3
mov esi, dword [ebp - 0x30]
mov eax, dword [ebp - 0x20]
inc esi
mov dword [ebp - 0x30], esi
cmp esi, 0x2103
jl 0x10001ce5
inc eax
mov dword [ebp - 0x20], eax
cmp eax, 0x670
jl 0x10001ce0
mov esi, 0xb4ef66b
mov byte [ebp - 0x19], bl
cmp dword [ebp - 0x3c], 0x5587
jge 0x10001d83
push str.crjinxcvm_lyjobuy_wzeydy_psq_kmnz
call fcn.1004252f
pop ecx
or dword [ebp - 4], 0xffffffff
cmp byte [ebp - 0x19], 0
je 0x10001d95
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_CompareFileTime]
mov dword [ebp - 0x94], ebx
jmp 0x10001f36
mov dword [ebp - 0xcc], esi
mov dword [ebp - 0xc8], esi
mov dword [ebp - 0xc4], esi
mov dword [ebp - 0xc0], esi
mov dword [ebp - 0x18], 0x423637b3
mov dword [ebp - 0x2c], 0xfffffff8
cmp dword [ebp - 0x24], ebx
je 0x10001dd2
mov ecx, edi
cmp dword [ebp - 0x18], ebx
jne 0x10001dd4
mov ecx, ebx
mov eax, dword [ebp - 0x16c]
sub ecx, eax
mov eax, dword [ebp - 0xdc]
add eax, ecx
je 0x10001dec
mov eax, dword [ebp - 0x100]
mov dword [ebp - 0x16c], edi
xor edx, edx
mov eax, dword [ebp - 0x94]
mov eax, dword [ebp - 0xc4]
mov eax, dword [ebp - 0x100]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x18]
dec dword [ebp - 0xc4]
mov eax, dword [ebp - 0x18]
cmp eax, 0x21eb
mov eax, dword [ebp - 0x18]
setl dl
xor ecx, ecx
cmp edx, eax
setne cl
imul eax, ecx, 9
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x28], 0x15
cmp dword [ebp - 0x28], 0x1d
jle 0x10001f30
mov eax, 0x3a09
mov dword [ebp - 0x134], eax
mov dword [ebp - 0x130], eax
mov dword [ebp - 0x12c], eax
mov dword [ebp - 0x128], eax
mov dword [ebp - 0x20], 0x618d7c58
mov dword [ebp - 0x30], ebx
jmp 0x10001e78
mov eax, dword [ebp - 0x30]
mov dword [ebp + eax*4 - 0x184], 0x8eaf5359
inc dword [ebp - 0x30]
cmp dword [ebp - 0x30], 2
jl 0x10001e67
mov eax, dword [ebp - 0x130]
xor edx, edx
mov dword [ebp - 0x20], eax
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x24]
mov ecx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x28]
cmp ecx, eax
mov eax, dword [ebp - 0x28]
setl dl
xor ecx, ecx
cmp edx, eax
setl cl
sub ecx, dword [ebp - 0x2c]
cmp ecx, dword [ebp - 0x18]
jle 0x10001eb2
mov eax, dword [ebp - 0x100]
mov eax, dword [ebp - 0xc4]
xor edx, edx
mov eax, dword [ebp - 0x54]
mov eax, dword [ebp - 0xc0]
mov eax, dword [ebp - 0xf4]
mov ecx, dword [ebp - 0x20]
mov eax, dword [ebp - 0x130]
cmp eax, ecx
mov eax, dword [ebp - 0x38]
setge dl
xor ebx, ebx
cmp edx, eax
mov eax, dword [ebp - 0x28]
push 0
setg bl
xor ecx, ecx
sub ebx, eax
mov dword [ebp - 0x16c], ebx
mov eax, dword [ebp - 0x24]
cmp eax, ebx
mov eax, dword [ebp - 0xc4]
setne cl
xor edx, edx
cmp ecx, eax
mov eax, dword [ebp - 0x20]
pop ebx
setge dl
xor ecx, ecx
cmp edx, eax
setne cl
xor eax, eax
sub ecx, dword [ebp - 0x94]
test ecx, ecx
setle al
mov dword [ebp - 0x184], eax
inc dword [ebp - 0x28]
cmp dword [ebp - 0x28], 0x1d
jg 0x10001e3e
dec dword [ebp - 0x94]
cmp dword [ebp - 0x94], 0xffffffe2
jle 0x10001da0
dec dword [ebp - 0x24]
xor ecx, ecx
push 3
pop edx
push 0xfffffffffffffffb
inc ecx
pop eax
jmp 0x10001c74
mov dword [ebp - 0x24], ebx
cmp dword [ebp - 0x24], edx
jg 0x10001fa2
mov esi, dword [sym.imp.USER32.dll_GetDC]
mov edi, dword [sym.imp.USER32.dll_GetDesktopWindow]
mov eax, dword [ebp - 0x24]
cmp dword [ebp + eax*4 - 0x16c], ebx
jne 0x10001fa2
mov byte [ebp - 0x19], bl
cmp byte [ebp - 0x19], 0
je 0x10001f9a
push ebx
push ebx
push ebx
push 0x15df
push 0x511
push ebx
call edi
push eax
call esi
push eax
call dword [sym.imp.GDI32.dll_GetTextExtentExPointA]
push 3
pop edx
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], edx
jle 0x10001f68
xor ecx, ecx
mov eax, 0x35a60c4
inc ecx
mov dword [ebp - 0x24], ecx
mov dword [ebp - 0xbc], eax
mov dword [ebp - 0xb8], eax
mov dword [ebp - 0xb4], eax
mov dword [ebp - 0xb0], eax
mov dword [ebp - 0x18], ebx
mov dword [ebp - 0x38], 0x426c
mov dword [ebp - 0x2c], 9
mov dword [ebp - 0x54], ecx
mov dword [ebp - 0x28], ebx
jmp 0x10001fe8
mov eax, dword [ebp - 0x28]
mov dword [ebp + eax*4 - 0x80], ecx
inc dword [ebp - 0x28]
cmp dword [ebp - 0x28], 2
jl 0x10001fde
mov dword [ebp - 0x24], ebx
cmp dword [ebp - 0x24], 0xffffffee
jle 0x10002201
mov dword [ebp - 0x30], 0x5e1f
mov dword [ebp - 0x28], ebx
cmp dword [ebp - 0x24], ebx
jne 0x10002019
mov eax, dword [ebp - 0x30]
cmp dword [ebp - 0x24], eax
jl 0x10002015
mov eax, dword [ebp - 0x24]
mov edx, ebx
jmp 0x1000201b
mov edx, ecx
mov eax, dword [ebp - 0x30]
sub edx, eax
add edx, 0x5f2fe72d
mov dword [ebp - 0x28], edx
mov dword [ebp - 0x30], ebx
jmp 0x100021e8
mov dword [ebp - 0x20], 0xbc130268
xor edx, edx
mov dword [ebp - 0xb0], ebx
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x24]
test eax, eax
mov eax, dword [ebp - 0x24]
setle dl
xor ecx, ecx
cmp edx, eax
setge cl
sub ecx, 0x259c42fa
jne 0x10002060
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x18]
xor edx, edx
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x20]
mov eax, dword [ebp - 0x30]
cmp eax, ecx
mov eax, dword [ebp - 0x20]
setle dl
xor ecx, ecx
cmp edx, eax
setle cl
add ecx, 7
jne 0x1000209a
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x30]
mov dword [ebp + eax*4 - 0x80], 0xffffffff
mov eax, dword [ebp - 0x38]
imul eax, dword [ebp - 0x24]
test eax, eax
je 0x10002178
mov dword [ebp - 0x20], 0xffffffff
mov dword [ebp - 0x3c], 0xffffffff
mov dword [ebp - 0x34], 0x866ca241
mov dword [ebp - 0x34], 0x9515b845
mov eax, dword [ebp - 0x3c]
mov eax, dword [ebp - 0x30]
mov eax, dword [ebp + eax*4 - 0x80]
cmp dword [ebp - 0x20], ebx
je 0x100020e2
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x3c]
xor edx, edx
mov ecx, dword [ebp - 0x28]
mov eax, dword [ebp - 0x24]
cmp eax, ecx
setl dl
sub edx, 0xf00d
mov dword [ebp - 0x34], edx
xor edx, edx
mov eax, dword [ebp - 0x34]
mov eax, dword [ebp - 0x30]
mov eax, dword [ebp + eax*4 - 0x80]
mov eax, dword [ebp - 0x30]
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x54]
mov eax, dword [ebp - 0x2c]
cmp eax, ecx
setl dl
add edx, 0xcc6c
sub edx, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x20]
neg edx
sbb edx, edx
xor ecx, ecx
inc edx
cmp eax, edx
mov eax, dword [ebp - 0x30]
setg cl
xor edx, edx
cmp ecx, 0x8654
mov eax, dword [ebp + eax*4 - 0x80]
setle dl
xor ebx, ebx
cmp eax, edx
mov eax, dword [ebp - 0x30]
setl bl
xor ecx, ecx
mov eax, dword [ebp + eax*4 - 0x80]
cmp ebx, eax
mov eax, dword [ebp - 0x30]
setne cl
xor edx, edx
cmp ecx, eax
mov eax, dword [ebp - 0x28]
setl dl
xor ecx, ecx
cmp edx, eax
setge cl
xor ebx, ebx
mov dword [ebp - 0x28], ecx
mov eax, dword [ebp - 0x28]
mov dword [ebp - 0x34], eax
jmp 0x100021e2
mov dword [ebp - 0x3c], 0xbbe7
mov dword [ebp - 0x18], ebx
jmp 0x100021d9
mov eax, dword [ebp - 0x30]
mov ecx, dword [ebp + eax*4 - 0xb4]
mov eax, dword [ebp - 0x30]
mov dword [ebp + eax*4 - 0xb8], ecx
mov dword [ebp - 0x3c], ecx
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp + eax*4 - 0xbc]
mov eax, dword [ebp - 0x18]
sub ecx, dword [ebp + eax*4 - 0xbc]
je 0x100021c9
mov byte [ebp - 0x19], bl
cmp byte [ebp - 0x19], 0
je 0x100021d6
push 0x21a2
push ebx
push ebx
call dword [sym.imp.GDI32.dll_TranslateCharsetInfo]
jmp 0x100021d6
mov ecx, dword [ebp - 0x28]
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0xbc], ecx
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 3
jle 0x10002184
mov eax, dword [ebp - 0x3c]
inc dword [ebp - 0x30]
xor ecx, ecx
inc ecx
cmp dword [ebp - 0x30], ecx
jle 0x10002031
dec dword [ebp - 0x24]
cmp dword [ebp - 0x24], 0xffffffee
jg 0x10001ffb
push 3
pop edx
push 0x6c
pop eax
push 2
mov byte [ebp - 0x70], cl
mov dword [ebp - 0x6f], 0x597
mov dword [ebp - 0x6b], 0x428022b
mov word [ebp - 0x67], 0x60e
mov byte [ebp - 0x65], 0x3d
mov byte [ebp - 0x64], dl
mov byte [ebp - 0x63], 0x3e
mov word [ebp - 0x15a], ax
pop esi
mov dword [ebp - 0xf0], edx
mov dword [ebp - 0xec], edx
mov dword [ebp - 0xe8], edx
mov dword [ebp - 0xe4], edx
mov dword [ebp - 0x20], 0xc506d444
mov dword [ebp - 0x20], edx
cmp dword [ebp - 0x20], ebx
jl 0x1000226c
mov byte [ebp - 0x19], bl
cmp byte [ebp - 0x19], 0
je 0x10002267
push ebx
call dword [sym.imp.USER32.dll_CharNextW]
dec dword [ebp - 0x20]
jns 0x10002257
movzx eax, byte [ebp + esi - 0x72]
movzx ecx, byte [ebp + esi - 0x6f]
push 3
movzx eax, word [ebp + eax*2 - 0x15c]
mov edx, eax
and eax, ecx
or edx, ecx
sub edx, eax
movzx eax, byte [ebp + esi - 0x70]
add esi, 2
mov word [ebp + eax*2 - 0x15c], dx
pop edx
cmp esi, 0xe
jb 0x10002230
xor eax, eax
xor edi, edi
mov word [ebp - 0x14e], ax
inc edi
mov dword [ebp - 0x20], 0xc099a567
mov dword [ebp - 0x38], edi
mov dword [ebp - 0x18], ebx
jmp 0x100022c7
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x44], 0xcf57
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], edi
jl 0x100022b9
mov dword [ebp - 0x18], ebx
jmp 0x100022e2
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x1f8], 0xffffffff
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 4
jl 0x100022d1
inc dword [ebp - 0x44]
mov eax, dword [ebp - 0x44]
mov ecx, dword [ebp - 0x44]
mov eax, dword [ebp - 0x44]
sub ecx, 0xffff
neg ecx
sbb ecx, ecx
neg eax
inc ecx
xor edx, edx
cmp eax, ecx
mov eax, dword [ebp - 0x44]
setge dl
xor ecx, ecx
cmp edx, eax
setg cl
mov dword [ebp - 0x20], ecx
cmp dword [ebp - 0x20], ebx
jne 0x10002321
mov edx, ebx
cmp dword [ebp - 0x44], ebx
je 0x10002323
mov edx, edi
mov eax, dword [ebp - 0x44]
xor ecx, ecx
cmp edx, eax
mov eax, dword [ebp - 0x44]
push 7
setl cl
sub ecx, eax
xor eax, eax
cmp ecx, 0xa0c0e075
pop esi
setne al
cmp esi, eax
sbb eax, eax
neg eax
mov dword [ebp - 0x38], eax
mov eax, dword [ebp - 0x44]
mov eax, dword [ebp - 0x44]
sub eax, dword [ebp - 0x44]
mov edx, dword [ebp - 0x44]
neg eax
sbb eax, eax
inc eax
inc edx
sub edx, eax
mov eax, dword [ebp - 0x44]
neg edx
mov dword [ebp - 0x1ac], esi
mov dword [ebp - 0x1b0], ebx
sbb edx, edx
xor ecx, ecx
inc edx
cmp edx, eax
setg cl
xor eax, eax
mov word [ebp - 0x1c0], ax
lea eax, [ebp - 0x15c]
mov dword [ebp - 0x1ec], ecx
lea ecx, [ebp - 0x1c0]
push eax
call fcn.100039d7
push 2
pop ecx
mov dword [ebp - 4], ecx
mov dword [ebp - 0x24], 0x61f9
mov dword [ebp - 0x38], 0xd2466e9f
mov dword [ebp - 0x38], 0xa11600d5
mov dword [ebp - 0x38], 0xa14c5530
mov dword [ebp - 0x38], 0xffffffff
mov dword [ebp - 0x38], 0x77cccaea
mov dword [ebp - 0x18], edi
mov dword [ebp - 0x38], 0xda99da97
mov dword [ebp - 0x38], 0xffffffff
mov dword [ebp - 0x28], ebx
jmp 0x100023f0
mov eax, dword [ebp - 0x28]
mov dword [ebp + eax*4 - 0xe0], 6
inc dword [ebp - 0x28]
cmp dword [ebp - 0x28], edi
jl 0x100023df
cmp dword [ebp - 0x24], ebx
je 0x10002433
mov dword [ebp - 0x2c], 0x7e4fc22
mov dword [ebp - 0x24], 0xffffffe4
jmp 0x10002428
mov dword [ebp - 0x18], 0xf37d
inc dword [ebp - 0x18]
mov dword [ebp - 0x18], ebx
jmp 0x1000241f
inc dword [ebp - 0x2c]
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 0x10
jl 0x10002419
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], 0x32
jg 0x1000240a
jmp 0x1000253b
mov dword [ebp - 0x38], 0x5b1b6fd4
mov dword [ebp - 0x54], 0x3b4709ba
mov dword [ebp - 0x2c], 0x5f40e13f
mov dword [ebp - 0x2c], 0xfffffff7
mov dword [ebp - 0x20], 0xffffffff
mov dword [ebp - 0x28], ebx
jmp 0x1000246c
mov eax, dword [ebp - 0x28]
mov dword [ebp + eax*4 - 0x124], 0x872d9ee1
inc dword [ebp - 0x28]
cmp dword [ebp - 0x28], ecx
jl 0x1000245b
mov dword [ebp - 0x24], ebx
jmp 0x10002521
mov dword [ebp - 0x2c], 0x5145ccb9
xor edx, edx
mov dword [ebp - 0x2c], 0x7289fff1
mov dword [ebp - 0x34], 0xafb5d1cb
mov dword [ebp - 0x3c], 0xfffffff8
mov eax, dword [ebp - 0x38]
cmp eax, 0xfffffffd
mov eax, dword [ebp - 0x54]
setg dl
xor ecx, ecx
cmp edx, eax
setge cl
xor edx, edx
mov dword [ebp - 0x2c], ecx
mov ecx, dword [ebp - 0x3c]
mov eax, dword [ebp - 0x2c]
cmp eax, ecx
setl dl
xor eax, eax
cmp edx, 0x659baaa4
setge al
sub eax, dword [ebp - 0x18]
neg eax
sbb eax, eax
inc eax
imul esi, eax, 9
neg esi
sbb esi, esi
xor edx, edx
neg esi
inc dword [ebp - 0x20]
mov eax, dword [ebp - 0x24]
mov ecx, dword [ebp + eax*4 - 0x124]
mov eax, dword [ebp - 0x20]
cmp eax, ecx
mov eax, dword [ebp - 0x34]
setg dl
add eax, 0xd800
xor ecx, ecx
cmp eax, esi
setge cl
xor eax, eax
imul edx, ecx
cmp edx, 0x1d12
setge al
xor ecx, ecx
cmp eax, 0x21dd
mov eax, dword [ebp - 0x24]
setne cl
mov dword [ebp + eax*4 - 0x124], ecx
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], edi
jle 0x10002479
mov byte [ebp - 0x19], bl
cmp byte [ebp - 0x19], 0
je 0x1000253b
push ebx
push ebx
call dword [sym.imp.USER32.dll_LoadMenuW]
mov dword [ebp - 0x18], ebx
cmp dword [ebp - 0x18], ebx
jl 0x10002554
mov eax, dword [ebp - 0x18]
cmp dword [ebp + eax*4 - 0xe0], ebx
jne 0x10002554
dec dword [ebp - 0x18]
jns 0x10002543
mov esi, ebx
mov dword [ebp - 0x3c], ebx
mov dword [ebp - 0x28], 0xfffffffa
mov dword [ebp - 0x38], 0xfffffffa
mov dword [ebp - 0x38], ebx
mov dword [ebp - 0x30], 0xfffffffd
mov dword [ebp - 0x28], 0xffffffe5
cmp dword [ebp - 0x28], 0xe
jle 0x100026c3
mov esi, dword [sym.imp.USER32.dll_GetDesktopWindow]
mov dword [ebp - 0x24], 0xb13638ec
mov dword [ebp - 0x2c], 0x9a01c77d
mov dword [ebp - 0x18], ebx
jmp 0x100025ac
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x114], 0xc4530722
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 3
jl 0x1000259b
mov dword [ebp - 0x18], ebx
jmp 0x100025c5
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x60], 0xfffffffe
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], edi
jl 0x100025b7
mov dword [ebp - 0x24], ebx
jmp 0x1000265a
mov dword [ebp - 0x18], 5
mov dword [ebp - 0x38], 0xbd0a7084
mov dword [ebp - 0x38], 0x985589b5
mov dword [ebp - 0x18], ebx
jmp 0x10002642
mov dword [ebp - 0x34], 0x7c7a
mov dword [ebp - 0x20], ebx
jmp 0x10002609
mov eax, dword [ebp - 0x20]
mov dword [ebp + eax*4 - 0x1e8], 8
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], 4
jl 0x100025f8
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp + eax*4 - 0x114]
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x114], ecx
mov eax, dword [ebp - 0x34]
mov dword [ebp - 0x1dc], eax
dec dword [ebp - 0x34]
mov eax, dword [ebp - 0x60]
mov dword [ebp - 0x10c], edi
mov dword [ebp - 0x2c], 0xffffffff
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 2
jle 0x100025ec
mov byte [ebp - 0x19], bl
cmp byte [ebp - 0x19], 0
je 0x10002657
call dword [sym.imp.KERNEL32.dll_GetUserDefaultLCID]
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], 0x1b
je 0x100025d2
cmp dword [ebp - 0x60], ebx
jne 0x1000266c
mov eax, dword [ebp - 0x30]
mov eax, dword [ebp - 0x60]
xor ecx, ecx
cmp eax, 0x7c29
setge cl
xor edx, edx
cmp ecx, 4
sete dl
sub edx, dword [ebp - 0x110]
mov eax, dword [ebp - 0x2c]
neg edx
sbb edx, edx
inc edx
sub eax, edx
mov dword [ebp - 0x24], eax
mov eax, dword [ebp - 0x30]
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x60]
mov byte [ebp - 0x19], bl
cmp byte [ebp - 0x19], 0
je 0x100026b3
push ebx
call esi
push eax
call dword [sym.imp.USER32.dll_BeginPaint]
inc dword [ebp - 0x28]
cmp dword [ebp - 0x28], 0xe
jg 0x10002588
mov esi, dword [ebp - 0x3c]
mov dword [ebp - 0x30], ebx
jmp 0x100026ed
mov dword [ebp - 0x28], 0x15
jmp 0x100026e4
mov byte [ebp - 0x19], bl
cmp byte [ebp - 0x19], 0
je 0x100026e1
push ebx
call dword [sym.imp.GDI32.dll_DeleteObject]
dec dword [ebp - 0x28]
cmp dword [ebp - 0x28], 0xfffffff6
jge 0x100026d1
dec dword [ebp - 0x30]
cmp dword [ebp - 0x30], 0xfffffff1
jl 0x100026c8
xor eax, eax
mov word [ebp + esi*2 - 0x15c], ax
inc esi
mov dword [ebp - 0x3c], esi
cmp esi, 8
jb 0x10002559
push dword [ebp - 0x48]
lea ecx, [ebp - 0x1d8]
call fcn.100035c1
mov byte [ebp - 4], 3
mov dword [ebp - 0x24], 6
mov dword [ebp - 0x28], 0xfffffff9
mov dword [ebp - 0x20], ebx
mov dword [ebp - 0x2c], 0x1497ea9b
mov dword [ebp - 0x2c], 0xc7819afc
mov dword [ebp - 0x2c], 0xffffffff
mov dword [ebp - 0x2c], 0xfffffffd
mov dword [ebp - 0x18], ebx
jmp 0x1000275f
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0xd8], 0xffffffff
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 3
jl 0x1000274e
mov dword [ebp - 0x18], ebx
jmp 0x1000277b
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x18c], 0x1ef224b3
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 2
jl 0x1000276a
dec dword [ebp - 0x28]
mov eax, dword [ebp - 0x28]
imul eax, dword [ebp - 0x24]
mov ecx, dword [ebp - 0xd8]
mov esi, dword [ebp - 0x24]
sub ecx, eax
mov eax, dword [ebp - 0x28]
neg ecx
sbb ecx, ecx
inc ecx
add esi, ecx
mov ecx, dword [ebp - 0x24]
neg esi
sbb esi, esi
sub ecx, eax
mov dword [ebp - 0x20], ecx
xor edx, edx
mov ecx, dword [ebp - 0x20]
neg esi
mov eax, dword [ebp - 0xd8]
cmp eax, ecx
setle dl
add edx, esi
je 0x1000283e
mov dword [ebp - 0x2c], 0xd872
mov dword [ebp - 0x48], 0x2932384b
mov dword [ebp - 0x28], ebx
jmp 0x10002833
mov dword [ebp - 0x34], edi
mov dword [ebp - 0x48], 0xb090aec5
cmp dword [ebp - 0xd4], ebx
je 0x100027ee
mov edx, edi
cmp dword [ebp - 0x2c], ebx
jne 0x100027f0
mov edx, ebx
mov eax, dword [ebp - 0x2c]
xor ecx, ecx
cmp edx, eax
mov eax, dword [ebp - 0x28]
setl cl
xor edx, edx
add ecx, 0xd0294e
mov eax, dword [ebp + eax*4 - 0xd8]
cmp ecx, 7
setg dl
xor ecx, ecx
cmp eax, edx
mov eax, 0x7605e7c7
setg cl
sub eax, ecx
add eax, dword [ebp - 0x34]
inc dword [ebp - 0x34]
test eax, eax
mov eax, edi
cmove eax, ebx
mov dword [ebp - 0x48], eax
inc dword [ebp - 0x28]
cmp dword [ebp - 0x28], 2
jle 0x100027d5
jmp 0x100028fa
mov dword [ebp - 0x34], 0xcdcec458
or ecx, 0xffffffff
mov dword [ebp - 0x18], 0x9b7b3fa8
mov eax, dword [ebp - 0xd8]
sub ecx, eax
mov dword [ebp - 0xd0], ecx
mov eax, dword [ebp - 0x34]
imul eax, ecx
mov ecx, 0xd75f053d
mov dword [ebp - 0x18c], eax
mov dword [ebp - 0x34], eax
mov eax, dword [ebp - 0x34]
cmp edi, eax
sbb eax, eax
neg eax
cmp ecx, eax
mov eax, dword [ebp - 0x24]
sbb edx, edx
xor ecx, ecx
neg edx
cmp eax, edx
setge cl
cmp ecx, 4
sbb eax, eax
xor edx, edx
inc eax
mov dword [ebp - 0x2c], eax
mov eax, dword [ebp - 0x2c]
mov dword [ebp - 0x2c], eax
mov ecx, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x24]
cmp ecx, eax
setl dl
imul eax, edx, 0x46b8
sub eax, dword [ebp - 0x18]
neg eax
sbb eax, eax
inc eax
mov dword [ebp - 0x2c], eax
mov edx, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x20]
sub edx, 0xbc79a46b
neg edx
sbb edx, edx
xor ecx, ecx
inc edx
cmp eax, edx
setne cl
imul eax, ecx, 0x31ec
sub eax, dword [ebp - 0x24]
mov dword [ebp - 0x2c], eax
mov eax, dword [ebp - 0x2c]
mov dword [ebp - 0x20], eax
mov eax, dword [ebp - 0x20]
mov edx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x24]
dec edx
neg edx
sbb edx, edx
xor ecx, ecx
inc edx
cmp edx, eax
setl cl
mov dword [ebp - 0x18], ecx
mov dword [ebp - 0x50], 0xcf02d900
mov byte [ebp - 0x4c], 0x9f
mov dword [ebp - 0x2c], 0x1a0b
cmp dword [ebp - 0x2c], 0x1dd1
jle 0x100029b2
push ebx
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_KillTimer]
mov ecx, ebx
mov dword [ebp - 0x20], ebx
mov eax, ebx
mov dword [ebp - 0x34], ebx
mov esi, ebx
cdq
idiv esi
mov eax, ecx
mov ecx, edx
shl eax, cl
lea ecx, [ebp - 0x248]
cdq
push edx
push eax
call fcn.10001a94
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x10002954
mov eax, dword [eax]
push eax
call fcn.1004252f
pop ecx
push ebx
push edi
lea ecx, [ebp - 0x248]
call fcn.100038eb
mov eax, dword [ebp - 0x34]
inc esi
mov ecx, dword [ebp - 0x20]
cmp esi, 0x41a4
jl 0x10002933
inc eax
mov dword [ebp - 0x34], eax
cmp eax, 0x5c69
jl 0x10002931
inc ecx
mov dword [ebp - 0x20], ecx
cmp ecx, 0x2730
jl 0x1000292c
mov esi, dword [sym.imp.USER32.dll_GetDesktopWindow]
push 0x19bb
push ebx
push ebx
push ebx
push ebx
push 0x2613
push 0x2106
call esi
push eax
call dword [sym.imp.USER32.dll_ScrollWindowEx]
jmp 0x100029b8
mov esi, dword [sym.imp.USER32.dll_GetDesktopWindow]
cmp dword [ebp - 0x2c], 0x178a
jge 0x100029cc
push str.ejvtg_coldhbsf_srwj_sbg
call fcn.1004252f
pop ecx
mov dword [ebp - 4], 3
mov dword [ebp - 0x24], edi
mov dword [ebp - 0x20], 0xcbed562b
mov dword [ebp - 0x34], 0xfffffff6
mov dword [ebp - 0x24], 0xfffffff5
cmp dword [ebp - 0x24], 0xfffffffb
jl 0x10002b29
mov eax, 0xe6e83846
mov dword [ebp - 0xac], eax
mov dword [ebp - 0xa8], eax
mov dword [ebp - 0xa4], eax
mov dword [ebp - 0xa0], eax
mov dword [ebp - 0x2c], 0x25155467
mov dword [ebp - 0x2c], 9
mov dword [ebp - 0x20], ebx
jmp 0x10002a36
mov eax, dword [ebp - 0x20]
mov dword [ebp + eax*4 - 0x11c], 0x300d3b51
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], 2
jl 0x10002a25
mov eax, dword [ebp - 0xa8]
xor ecx, ecx
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0xa8]
mov dword [ebp - 0x20], eax
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0x24]
mov dword [ebp - 0x2c], eax
mov edx, dword [ebp - 0xa0]
mov eax, dword [ebp - 0x24]
sub edx, eax
mov eax, dword [ebp - 0xa8]
cmp edx, eax
mov edx, 0xe8f2
setne cl
mov dword [ebp - 0x34], ecx
xor ecx, ecx
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0x34]
mov eax, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x24]
cmp eax, edi
setle cl
sub edx, ecx
mov dword [ebp - 0x11c], ecx
mov eax, dword [ebp - 0xa0]
xor ecx, ecx
cmp edx, eax
setge cl
xor edx, edx
mov dword [ebp - 0x2c], ecx
mov ecx, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x24]
cmp ecx, eax
setg dl
cmp dword [ebp - 0xa8], edx
je 0x10002b04
mov dword [ebp - 0x2c], 5
mov byte [ebp - 0x19], bl
cmp byte [ebp - 0x19], 0
je 0x10002ae2
push edi
push ebx
call esi
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_SelectPalette]
mov ecx, dword [ebp - 0x2c]
xor edx, edx
mov eax, dword [ebp - 0x24]
cmp ecx, eax
setl dl
mov dword [ebp - 0x20], edx
xor edx, edx
mov ecx, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x20]
cmp eax, ecx
setle dl
mov dword [ebp - 0x34], edx
jmp 0x10002b17
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x24]
sub ecx, eax
neg ecx
sbb ecx, ecx
inc ecx
mov dword [ebp - 0x11c], ecx
inc dword [ebp - 0x24]
mov eax, 0xe6e83846
cmp dword [ebp - 0x24], 0xfffffffb
jge 0x100029fa
push 0x5c
pop eax
mov word [ebp - 0x58], ax
mov dword [ebp - 0x3c], 0x6ae7
cmp dword [ebp - 0x3c], 0x6c83
jle 0x10002b95
mov edx, ebx
mov dword [ebp - 0x20], ebx
mov edi, ebx
mov esi, ebx
mov ecx, ebx
mov dword [ebp - 0x2c], ebx
lea eax, [esi + edi]
xor eax, ecx
mov ecx, 0x10073998
or eax, edx
cdq
push edx
push eax
call fcn.100034ac
mov ecx, dword [ebp - 0x2c]
mov edx, dword [ebp - 0x20]
inc ecx
mov dword [ebp - 0x2c], ecx
cmp ecx, 0x53b8
jl 0x10002b4e
inc esi
cmp esi, 0x700d
jl 0x10002b49
inc edi
cmp edi, 0x61e8
jl 0x10002b47
inc edx
mov dword [ebp - 0x20], edx
cmp edx, 0x7340
jl 0x10002b45
xor edi, edi
inc edi
mov byte [ebp - 4], 6
cmp dword [ebp - 0x3c], 0x68f5
jge 0x10002bd2
mov edx, str.zfzpm_lcgye_lcbj_jei_gbihqcteb
mov ecx, 0x10073998
call fcn.10005649
jmp 0x10002bd2
mov dword [ebp - 4], 3
mov dword [ebp - 0x18], ebx
mov dword [ebp - 0x2c], 0x7495
cmp dword [ebp - 0x2c], 0x7801
jle 0x10002c16
mov esi, ebx
mov edi, ebx
mov eax, edi
mov ecx, 0x10073998
xor eax, esi
cdq
push edx
push eax
call fcn.100034ac
inc edi
cmp edi, 0x3368
jl 0x10002bf0
inc esi
cmp esi, 0x13ee
jl 0x10002bee
xor edi, edi
inc edi
mov byte [ebp - 0x19], bl
cmp byte [ebp - 0x19], 0
je 0x10002c2a
push 0xff1
call dword [sym.imp.GDI32.dll_GetStockObject]
mov byte [ebp - 4], 8
cmp dword [ebp - 0x2c], 0x72b8
jge 0x10002c67
mov edx, str.pyuiparnk_rwvx_vgftj_zmqp_hfhfhfysw_iaokka_eja_xesy
mov ecx, 0x10073998
call fcn.10005649
jmp 0x10002c67
mov dword [ebp - 4], 3
mov dword [ebp - 0x18], ebx
jmp 0x10002cb2
mov dword [ebp - 0x48], ebx
mov edx, edi
mov dword [ebp - 0x38], 0xfffffffe
cmp dword [ebp - 0x18], ebx
jne 0x10002c86
mov edx, ebx
mov eax, dword [ebp - 0x48]
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x18]
sub ecx, dword [ebp - 0x18]
neg ecx
sbb ecx, ecx
inc ecx
sub ecx, dword [ebp - 0x18]
neg ecx
sbb ecx, ecx
xor eax, eax
inc ecx
add ecx, edx
cmp ecx, 0xfe04
setge al
mov dword [ebp - 0x38], eax
dec dword [ebp - 0x18]
cmp dword [ebp - 0x18], 0xffffffeb
jl 0x10002c73
push 2
pop esi
mov dword [ebp - 0x2c], esi
mov dword [ebp - 0x28], ebx
mov dword [ebp - 0x18], 0x47dfa860
mov byte [ebp - 0x19], bl
cmp byte [ebp - 0x19], 0
je 0x10002ce3
push 0x19a9
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_MonitorFromWindow]
mov dword [ebp - 0x18], 0xfffffff2
cmp dword [ebp - 0x18], 0xffffffed
je 0x10002d2c
mov esi, dword [sym.imp.USER32.dll_GetDesktopWindow]
mov dword [ebp - 0x20], edi
mov dword [ebp - 0x20], ebx
jmp 0x10002d1a
mov byte [ebp - 0x19], bl
cmp byte [ebp - 0x19], 0
je 0x10002d17
push edi
push ebx
push 0x53f
call esi
push eax
call dword [sym.imp.USER32.dll_SetScrollInfo]
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], 0xd
jge 0x10002cfe
dec dword [ebp - 0x18]
cmp dword [ebp - 0x18], 0xffffffed
jne 0x10002cf6
mov esi, dword [ebp - 0x2c]
cmp esi, 2
jne 0x10002e05
movzx eax, byte [ebp - 0x4e]
mov dword [ebp - 0x18], 0xfffffffc
lea ecx, [eax + 1]
mov dword [ebp - 0x28], ecx
lea esi, [eax + 1]
mov ecx, 0x64f14790
mov dword [ebp - 0x17c], ecx
mov dword [ebp - 0x178], ecx
mov dword [ebp - 0x174], ecx
mov dword [ebp - 0x170], ecx
mov dword [ebp - 0x48], ebx
mov dword [ebp - 0x2c], 6
mov dword [ebp - 0x20], ebx
jmp 0x10002d86
mov eax, dword [ebp - 0x20]
mov dword [ebp + eax*4 - 0x108], 0x571177e8
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], 2
jl 0x10002d75
mov dword [ebp - 0x18], edi
cmp dword [ebp - 0x18], ebx
jl 0x10002ef6
mov dword [ebp - 0x38], 0xa88e00f6
mov dword [ebp - 0x38], 0x21e9c96c
mov dword [ebp - 0x38], 6
mov dword [ebp - 0x38], 0xee4e9120
push 0xfffffffffffffff6
pop eax
mov dword [ebp - 0xf0], eax
mov dword [ebp - 0xec], eax
mov dword [ebp - 0xe8], eax
mov dword [ebp - 0xe4], eax
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp + eax*4 - 0x108]
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x108], ecx
dec dword [ebp - 0x2c]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp + eax*4 - 0x108]
mov ecx, dword [ebp - 0x48]
sub ecx, eax
mov dword [ebp - 0x174], ecx
dec dword [ebp - 0x18]
jns 0x10002d98
jmp 0x10002ef6
mov dword [ebp - 0x34], 0xc099a567
mov dword [ebp - 0x48], edi
mov dword [ebp - 0x18], ebx
jmp 0x10002e22
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x40], 0xcf57
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], edi
jl 0x10002e14
mov dword [ebp - 0x18], ebx
jmp 0x10002e3d
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x218], 0xffffffff
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 4
jl 0x10002e2c
inc dword [ebp - 0x40]
mov eax, dword [ebp - 0x40]
mov ecx, dword [ebp - 0x40]
mov eax, dword [ebp - 0x40]
sub ecx, 0xffff
neg ecx
sbb ecx, ecx
neg eax
inc ecx
xor edx, edx
cmp eax, ecx
mov eax, dword [ebp - 0x40]
setge dl
xor ecx, ecx
cmp edx, eax
setg cl
mov dword [ebp - 0x34], ecx
cmp dword [ebp - 0x34], ebx
jne 0x10002e7c
mov edx, ebx
cmp dword [ebp - 0x40], ebx
je 0x10002e7e
mov edx, edi
mov eax, dword [ebp - 0x40]
xor ecx, ecx
cmp edx, eax
mov eax, dword [ebp - 0x40]
push 7
setl cl
sub ecx, eax
xor eax, eax
cmp ecx, 0xa0c0e075
pop ecx
setne al
cmp ecx, eax
sbb eax, eax
neg eax
mov dword [ebp - 0x48], eax
mov eax, dword [ebp - 0x40]
mov eax, dword [ebp - 0x40]
sub eax, dword [ebp - 0x40]
mov edx, dword [ebp - 0x40]
neg eax
sbb eax, eax
inc eax
inc edx
sub edx, eax
mov eax, dword [ebp - 0x40]
neg edx
sbb edx, edx
xor ecx, ecx
inc edx
cmp edx, eax
movzx edx, byte [ebp + esi - 0x4f]
mov eax, esi
setg cl
sub eax, dword [ebp - 0x28]
mov dword [ebp - 0x20c], ecx
mov dword [ebp - 0x28], ebx
movzx eax, byte [ebp + eax - 0x52]
movzx eax, word [ebp + eax*2 - 0x58]
mov ecx, eax
and eax, edx
or ecx, edx
sub ecx, eax
movzx eax, byte [ebp + esi - 0x50]
mov word [ebp + eax*2 - 0x58], cx
add esi, 2
mov dword [ebp - 0x2c], esi
cmp esi, 5
jb 0x10002cc1
xor eax, eax
mov dword [ebp - 0x13c], ebx
push 7
mov word [ebp - 0x56], ax
lea ecx, [ebp - 0x14c]
pop esi
mov word [ebp - 0x14c], ax
lea eax, [ebp - 0x58]
push eax
mov dword [ebp - 0x138], esi
call fcn.100039d7
mov byte [ebp - 4], 0xa
mov dword [ebp - 0x58], ebx
mov dword [ebp - 0x20], 0x7632667a
mov dword [ebp - 0x20], ebx
jmp 0x10002f54
mov eax, dword [ebp - 0x20]
mov dword [ebp + eax*4 - 0x208], 0xfffffffb
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], 4
jl 0x10002f43
mov dword [ebp - 0x20], 3
cmp dword [ebp - 0x20], ebx
jl 0x10002f84
cmp dword [ebp - 0x200], ebx
jne 0x10002f84
mov byte [ebp - 0x19], bl
cmp byte [ebp - 0x19], 0
je 0x10002f7f
push ebx
push ebx
call dword [sym.imp.USER32.dll_LoadCursorA]
dec dword [ebp - 0x20]
jns 0x10002f66
push 0x5f
pop eax
mov word [ebp - 0x74], 0x7200
mov word [ebp - 0x78], ax
mov dword [ebp - 0x3c], 0x6da0
cmp dword [ebp - 0x3c], 0x7084
jle 0x10002fe3
mov edi, ebx
mov esi, ebx
mov ecx, ebx
mov dword [ebp - 0x2c], ebx
lea eax, [esi + edi]
sar eax, cl
mov ecx, 0x10073998
cdq
push edx
push eax
call fcn.100034ac
mov ecx, dword [ebp - 0x2c]
inc ecx
mov dword [ebp - 0x2c], ecx
cmp ecx, 0x7557
jl 0x10002faa
inc esi
cmp esi, 0x800f
jl 0x10002fa5
inc edi
cmp edi, 0xd79
jl 0x10002fa3
xor edi, edi
push 7
inc edi
pop esi
mov byte [ebp - 4], 0xb
cmp dword [ebp - 0x3c], 0x6d85
jge 0x10003023
mov edx, str.ylztw_vbbj_gvrx_uwdnlnfrb
mov ecx, 0x10073998
call fcn.10005649
jmp 0x10003023
mov dword [ebp - 4], 0xa
lea ecx, [ebp - 0x1a8]
xor eax, eax
mov dword [ebp - 0x194], esi
mov word [ebp - 0x76], ax
mov word [ebp - 0x1a8], ax
lea eax, [ebp - 0x78]
push eax
mov dword [ebp - 0x198], ebx
call fcn.100039d7
mov byte [ebp - 4], 0xd
mov dword [ebp - 0x78], ebx
mov dword [ebp - 0x48], 4
mov byte [ebp - 0x19], bl
cmp byte [ebp - 0x19], 0
je 0x10003074
push ebx
push ebx
push ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_GetDiskFreeSpaceW]
mov byte [ebp - 0x19], bl
mov dword [ebp - 0x3c], 0x328e
cmp dword [ebp - 0x3c], 0x33cc
jle 0x100030e0
push ebx
call dword [sym.imp.KERNEL32.dll_SetThreadLocale]
mov esi, ebx
mov eax, ebx
mov dword [ebp - 0x2c], ebx
and eax, esi
lea ecx, [ebp - 0x260]
cdq
push edx
push eax
call fcn.10001a94
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x100030af
mov eax, dword [eax]
push eax
call fcn.1004252f
pop ecx
push ebx
push edi
lea ecx, [ebp - 0x260]
call fcn.100038eb
mov eax, dword [ebp - 0x2c]
inc eax
mov dword [ebp - 0x2c], eax
cmp eax, 0x40b7
jl 0x10003095
inc esi
cmp esi, 0x96a
jl 0x10003090
call dword [sym.imp.KERNEL32.dll_GetThreadLocale]
cmp byte [ebp - 0x19], 0
je 0x100030f3
push 0x21a2
push ebx
push ebx
call dword [sym.imp.GDI32.dll_TranslateCharsetInfo]
cmp dword [ebp - 0x3c], 0x2f50
jge 0x10003107
push str.sgxeig_rce_cmkkzjv_ebqgtrg
call fcn.1004252f
pop ecx
mov dword [ebp - 4], 0xd
push dword [ebp - 0x13c]
cmp dword [ebp - 0x138], 8
lea eax, [ebp - 0x14c]
push ebx
cmovae eax, dword [ebp - 0x14c]
lea ecx, [ebp - 0x1d8]
push eax
call fcn.10003d53
cmp eax, 0xffffffff
je 0x10003153
push 0xffffffffffffffff
push ebx
lea ecx, [ebp - 0x1a8]
push ecx
push edi
push eax
lea ecx, [ebp - 0x1d8]
call fcn.10003a5f
jmp 0x1000310e
mov dword [ebp - 0x3c], 0x9c3fbb4e
mov dword [ebp - 0x34], edi
mov dword [ebp - 0x34], 0xfffffffa
mov dword [ebp - 0x2c], 0xfd06bde6
mov dword [ebp - 0x48], 0x18461e70
mov dword [ebp - 0x38], 0xfffffff8
mov dword [ebp - 0x20], ebx
jmp 0x1000318f
mov eax, dword [ebp - 0x20]
mov dword [ebp + eax*4 - 0x90], 9
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], 3
jl 0x1000317e
cmp dword [ebp - 0x90], ebx
jne 0x100031a4
mov ecx, ebx
cmp dword [ebp - 0x3c], ebx
je 0x100031a6
mov ecx, edi
mov eax, dword [ebp - 0x90]
imul eax, ecx
mov dword [ebp - 0x34], eax
mov eax, dword [ebp - 0x90]
mov eax, dword [ebp - 0x90]
mov dword [ebp - 0x34], eax
mov eax, dword [ebp - 0x34]
mov eax, dword [ebp - 0x88]
cmp dword [ebp - 0x90], 0xfffc
mov eax, dword [ebp - 0x90]
sbb ecx, ecx
neg ecx
imul eax, ecx
mov dword [ebp - 0x34], eax
mov eax, dword [ebp - 0x34]
mov dword [ebp - 0x2c], eax
mov eax, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x34]
cmp eax, dword [ebp - 0x3c]
jl 0x100031fc
mov edx, ebx
cmp dword [ebp - 0x48], ebx
je 0x100031fe
mov edx, edi
mov eax, dword [ebp - 0x90]
xor ecx, ecx
cmp edx, eax
lea eax, [ebp - 0x1d8]
push eax
setl cl
lea edx, [ebp - 0x1c0]
mov dword [ebp - 0x38], ecx
mov ecx, dword [ebp - 0x84]
call fcn.10005820
pop ecx
push ebx
push edi
lea ecx, [ebp - 0x1a8]
call fcn.10003df6
push ebx
push edi
lea ecx, [ebp - 0x14c]
call fcn.10003df6
push ebx
push edi
lea ecx, [ebp - 0x1d8]
call fcn.10003df6
push ebx
push edi
lea ecx, [ebp - 0x1c0]
call fcn.10003df6
mov ecx, dword [ebp - 0xc]
mov eax, dword [ebp - 0x84]
pop edi
pop esi
mov dword fs:[0], ecx
pop ebx
mov esp, ebp
pop ebp
ret