Function at 0x10023487
Capabilities:
Encrypt data using speck
Enumerate gui resources
Get file size
Get graphical window text
Query environment variable
Read .ini file

Disassembly:
mov eax, 0x1005ee57
call fcn.1005dcd4
sub esp, 0x248
mov dword [ebp - 0xb8], ecx
xor ecx, ecx
inc ecx
mov word [ebp - 0x78], 0x9300
mov byte [ebp - 0x76], cl
mov dword [ebp - 0x75], 0x32b05ce
mov byte [ebp - 0x71], 0xe
mov byte [ebp - 0x70], cl
mov dword [ebp - 0x6f], 0x230060e
mov word [ebp - 0x6b], 0x433
mov byte [ebp - 0x69], 0xe
mov dword [ebp - 0x1c], 0x914d2edc
mov dword [ebp - 0x30], 0xae4b9a73
mov dword [ebp - 0x20], 0xffffffff
mov eax, dword [ebp - 0x1c]
imul eax, dword [ebp - 0x1c]
push ebx
push esi
xor ebx, ebx
mov dword [ebp - 0x34], edx
push edi
mov dword [ebp - 0x10], esp
mov dword [ebp - 0x158], ebx
test eax, eax
jne 0x10023505
cmp dword [ebp - 0x1c], ebx
jne 0x10023505
mov eax, dword [ebp - 0x1c]
mov eax, ebx
jmp 0x10023507
mov eax, ecx
xor ecx, ecx
test eax, eax
mov eax, dword [ebp - 0x1c]
sete cl
xor edx, edx
cmp eax, ecx
setle dl
sub edx, 2
neg edx
sbb edx, edx
inc edx
mov dword [ebp - 0x30], edx
mov eax, dword [ebp - 0x30]
mov dword [ebp - 0x20], eax
mov dword [ebp - 0x1c], 7
jmp 0x10023570
mov byte [ebp - 0x25], bl
cmp byte [ebp - 0x25], bl
je 0x1002356d
push 0x605
push 0x2533
push 0x1796
push 0xabf
push 0x745
push 0xe0d
push 0x17d
push 0x26c3
push 0x317
call dword [sym.imp.GDI32.dll_BitBlt]
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 0x35
jge 0x10023532
push 0x47
pop eax
mov word [ebp - 0x138], ax
xor edi, edi
mov dword [ebp - 0x24], 0xc3099cf
inc edi
mov dword [ebp - 0x50], 0x13c3
cmp dword [ebp - 0x50], 0x14bd
jle 0x100235f5
mov esi, ebx
mov ecx, ebx
mov dword [ebp - 0x30], ebx
mov eax, esi
cdq
idiv ecx
lea ecx, [ebp - 0x20c]
mov eax, edx
cdq
push edx
push eax
call fcn.1000288f
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x100235c0
mov eax, dword [eax]
push eax
call fcn.1004603d
pop ecx
push ebx
push edi
lea ecx, [ebp - 0x20c]
call fcn.100078fb
mov ecx, dword [ebp - 0x30]
inc ecx
mov dword [ebp - 0x30], ecx
cmp ecx, 0x7b26
jl 0x100235a1
inc esi
cmp esi, 0x75ba
jl 0x1002359c
push ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_EnumResourceTypesW]
mov dword [ebp - 0x2c], 0x2baef6e2
cmp dword [ebp - 0x50], 0x13b5
jge 0x10023610
push str.bygdwuvkr_oxyio_oujcvjmo_xiqmkgji_cmaohdks
call fcn.1004603d
pop ecx
or dword [ebp - 4], 0xffffffff
mov dword [ebp - 0x20], 0xffffffff
mov dword [ebp - 0x18], ebx
jmp 0x10023631
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0xb4], 0xfffffffe
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 2
jl 0x10023620
imul eax, dword [ebp - 0x24], 0xdd44
test eax, eax
jne 0x10023645
mov eax, dword [ebp - 0x24]
mov dword [ebp - 0xb4], ebx
mov ecx, 0xdca8fecf
mov dword [ebp - 0x2c], ebx
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x24]
cmp ecx, eax
sbb eax, eax
inc eax
sub eax, dword [ebp - 0x24]
neg eax
sbb eax, eax
add eax, 3
neg eax
sbb eax, eax
inc eax
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x2c], ebx
je 0x1002367b
mov eax, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x2c]
cmp dword [ebp - 0x2c], ebx
je 0x100236ee
mov dword [ebp - 0x1c], 0xea5d
mov dword [ebp - 0x20], 0x1153aa9
mov dword [ebp - 0x24], ebx
jmp 0x100236e6
mov dword [ebp - 0x20], 5
mov ecx, edi
mov dword [ebp - 0x38], ebx
mov eax, dword [ebp - 0x1c]
imul eax, dword [ebp - 0x1c]
add eax, 4
mov dword [ebp - 0xb4], eax
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x1c]
sub ecx, eax
sub ecx, dword [ebp - 0x38]
neg ecx
sbb ecx, ecx
inc ecx
cmp dword [ebp - 0x1c], ecx
jge 0x100236d4
mov edx, edi
cmp dword [ebp - 0x1c], ebx
jne 0x100236d6
mov edx, ebx
mov eax, dword [ebp - 0x1c]
xor ecx, ecx
cmp edx, eax
setg cl
mov dword [ebp - 0x20], ecx
dec dword [ebp - 0x24]
cmp dword [ebp - 0x24], 0xfffffff0
jle 0x10023696
jmp 0x10023718
mov dword [ebp - 0x20], 0x4bbc
mov eax, dword [ebp - 0x20]
neg eax
sbb eax, eax
inc eax
mov dword [ebp - 0xb4], eax
mov byte [ebp - 0x25], bl
cmp byte [ebp - 0x25], bl
je 0x10023718
push ebx
push 0x1f18
push ebx
call dword [sym.imp.KERNEL32.dll_WaitForSingleObjectEx]
push 2
pop esi
mov ecx, ebx
cmp esi, 2
jne 0x1002382a
mov dword [ebp - 0x24], 0xfffffff9
lea ecx, [ebp - 0x104]
mov dword [ebp - 0x30], 0x35ca4204
push 3
call fcn.10001cd0
mov dword [ebp - 0x30], ebx
mov dword [ebp - 0x30], 0xb288586f
mov dword [ebp - 0x20], ebx
mov dword [ebp - 0x18], ebx
jmp 0x10023766
mov ecx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x104]
mov dword [eax + ecx*4], 5
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 3
jl 0x10023753
mov eax, dword [ebp - 0x24]
mov dword [ebp - 0x24], eax
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0x24]
mov dword [ebp - 0x30], ebx
mov eax, dword [ebp - 0x30]
imul eax, dword [ebp - 0x24]
imul eax, dword [ebp - 0x24]
mov ecx, dword [ebp - 0x104]
test eax, eax
jne 0x10023799
mov edx, ebx
cmp dword [ecx], ebx
je 0x1002379b
mov edx, edi
xor eax, eax
cmp edx, dword [ecx]
setg al
mov dword [ebp - 0x30], eax
mov eax, dword [ebp - 0x30]
mov dword [ebp - 0x30], eax
mov eax, dword [ebp - 0x30]
mov ecx, dword [ebp - 0x24]
sub ecx, eax
neg ecx
sbb ecx, ecx
inc ecx
mov dword [ebp - 0x24], ecx
lea ecx, [ebp - 0x104]
mov eax, dword [ebp - 0x24]
mov dword [ebp - 0x20], eax
call fcn.10001d53
push 2
pop ecx
mov dword [ebp - 0x20], ecx
mov dword [ebp - 0x18], ebx
jmp 0x100237e8
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x94], 0x8bbca631
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 2
jl 0x100237d7
mov dword [ebp - 0x90], ebx
cmp dword [ebp - 0x90], 0xffffffe8
jl 0x10023822
mov byte [ebp - 0x25], bl
cmp byte [ebp - 0x25], bl
je 0x10023810
push ebx
push ebx
push ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_GetProcessTimes]
dec dword [ebp - 0x90]
cmp dword [ebp - 0x90], 0xffffffe8
jge 0x100237fd
mov ecx, dword [ebp - 0x20]
push 2
pop esi
jmp 0x100238c6
movzx edx, byte [ebp + esi - 0x77]
mov eax, esi
sub eax, ecx
movzx eax, byte [ebp + eax - 0x7a]
movzx ecx, word [ebp + eax*2 - 0x138]
mov eax, ecx
and eax, edx
add eax, eax
sub ecx, eax
movzx eax, byte [ebp + esi - 0x78]
add ecx, edx
mov word [ebp + eax*2 - 0x138], cx
mov eax, 0x4c23
mov dword [ebp - 0x4c], ebx
mov dword [ebp - 0x18], 0x3c7730f9
mov dword [ebp - 0x2c], 0x42a4
mov dword [ebp - 0x154], eax
mov dword [ebp - 0x150], eax
mov dword [ebp - 0x14c], eax
mov dword [ebp - 0x148], eax
inc dword [ebp - 0x2c]
mov dword [ebp - 0x2c], 4
jmp 0x100238be
mov dword [ebp - 0x18], 3
cmp dword [ebp - 0x18], ebx
jl 0x100238bb
mov byte [ebp - 0x25], bl
cmp byte [ebp - 0x25], bl
je 0x100238b6
push 0x185d
push ebx
push 0xe30
call dword [sym.imp.GDI32.dll_Polygon]
dec dword [ebp - 0x18]
jns 0x1002389d
inc dword [ebp - 0x2c]
cmp dword [ebp - 0x2c], 0x24
jle 0x10023891
mov ecx, ebx
add esi, 2
cmp esi, 0x10
jb 0x1002371d
xor eax, eax
mov dword [ebp - 0x180], 7
mov word [ebp - 0x12a], ax
lea ecx, [ebp - 0x194]
mov word [ebp - 0x194], ax
lea eax, [ebp - 0x138]
push eax
mov dword [ebp - 0x184], ebx
call fcn.10007a99
mov dword [ebp - 4], 2
mov esi, ebx
mov dword [ebp - 0x24], 0xdb3ae355
mov dword [ebp - 0x24], ebx
jmp 0x10023989
mov dword [ebp - 0x20], 0xffffffff
lea ecx, [ebp - 0x144]
mov dword [ebp - 0x2c], ebx
push edi
call fcn.10001cd0
mov dword [ebp - 0x18], ebx
jmp 0x10023947
mov ecx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x144]
mov dword [eax + ecx*4], 0x68d526d2
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], edi
jl 0x10023934
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x2c], eax
mov ecx, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x144]
mov dword [eax], ecx
mov dword [ebp - 0x2c], 0xffffffe3
jmp 0x10023975
mov dword [ebp - 0x20], 0x3c61c71b
cmp dword [ebp - 0x20], ebx
jne 0x1002397b
inc dword [ebp - 0x2c]
cmp dword [ebp - 0x2c], 0xffffffed
jge 0x10023966
lea ecx, [ebp - 0x144]
call fcn.10001d53
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], 0xa
jne 0x10023919
xor eax, eax
mov word [ebp + esi*2 - 0x138], ax
inc esi
cmp esi, 8
jb 0x1002390d
mov dword [ebp - 0x24], 6
mov dword [ebp - 0x2c], 0x6a9ef72d
mov dword [ebp - 0x20], 0x9f3c5a4a
mov dword [ebp - 0x24], ebx
cmp dword [ebp - 0x24], 0xfffffff5
jl 0x10023ba0
mov dword [ebp - 0x1c], 0x8b10
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0x2c], eax
mov eax, dword [ebp - 0x1c]
cmp dword [ebp - 0x24], ebx
je 0x100239e9
mov dword [ebp - 0x30], 0xd65121ac
inc dword [ebp - 0x30]
jmp 0x10023b98
mov dword [ebp - 0x38], 7
mov dword [ebp - 0x18], ebx
jmp 0x10023a06
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x84], 0x13281d21
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 2
jl 0x100239f5
mov dword [ebp - 0x1c], ebx
cmp dword [ebp - 0x1c], edi
jg 0x10023b95
mov byte [ebp - 0x25], bl
cmp byte [ebp - 0x25], 0
je 0x10023a27
call dword [sym.imp.USER32.dll_GetCapture]
mov dword [ebp - 0x2c], ebx
cmp dword [ebp - 0x2c], edi
jg 0x10023b8d
mov dword [ebp - 0x18], 0x858f9c25
mov dword [ebp - 0x3c], edi
mov dword [ebp - 0x18], edi
cmp dword [ebp - 0x18], ebx
jl 0x10023b85
mov dword [ebp - 0x4c], 0xfffffffa
mov dword [ebp - 0x3c], 0x7eb7
cmp dword [ebp - 0x3c], 0x805a
jle 0x10023ae7
mov dword [ebp - 0x30], ebx
mov eax, ebx
mov dword [ebp - 0x50], ebx
mov esi, ebx
cdq
mov ecx, ebx
idiv esi
mov dword [ebp - 0x40], ecx
mov eax, edx
mov dword [ebp - 0x5c], eax
cdq
idiv ecx
lea ecx, [ebp - 0x1dc]
xor edx, dword [ebp - 0x30]
mov eax, edx
cdq
push edx
push eax
call fcn.1000288f
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x10023a9b
mov eax, dword [eax]
push eax
call fcn.1004603d
pop ecx
push ebx
push edi
lea ecx, [ebp - 0x1dc]
call fcn.100078fb
mov ecx, dword [ebp - 0x40]
mov eax, dword [ebp - 0x5c]
inc ecx
mov dword [ebp - 0x40], ecx
cmp ecx, 0x2522
jl 0x10023a7b
mov eax, dword [ebp - 0x50]
inc esi
cmp esi, 0x160a
jl 0x10023a6e
inc eax
mov dword [ebp - 0x50], eax
cmp eax, 0x3dd4
jl 0x10023a6c
mov ecx, dword [ebp - 0x30]
inc ecx
mov dword [ebp - 0x30], ecx
cmp ecx, 0x6d92
jl 0x10023a67
cmp dword [ebp - 0x3c], 0x7c36
jge 0x10023afb
push str.ursfgblc_mnrcowyqu_vbo_mprfggoj_mlozt_kcraj_rpzb_wsipxxtzu_btulutmhf_jxh_ehaq_bjepxr_kgdz_xdabpm
call fcn.1004603d
pop ecx
mov dword [ebp - 4], 2
xor edx, edx
mov eax, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x1c]
mov ecx, dword [ebp + eax*4 - 0x84]
mov eax, dword [ebp - 0x1c]
add ecx, 0x1c2b8ad2
mov eax, dword [ebp + eax*4 - 0x84]
add eax, ecx
mov dword [ebp - 0x3c], eax
mov eax, dword [ebp - 0x3c]
mov eax, dword [ebp - 0x80]
mov ecx, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x1c]
cmp ecx, eax
setle dl
cmp edx, dword [ebp - 0x38]
jg 0x10023b58
mov eax, dword [ebp - 0x1c]
cmp dword [ebp + eax*4 - 0x84], ebx
jne 0x10023b58
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp + eax*4 - 0x84]
mov eax, dword [ebp - 0x1c]
xor edx, edx
mov eax, dword [ebp + eax*4 - 0x84]
test eax, eax
mov eax, dword [ebp - 0x4c]
setg dl
xor ecx, ecx
cmp edx, eax
mov eax, dword [ebp - 0x18]
setle cl
mov dword [ebp + eax*4 - 0x84], ecx
dec dword [ebp - 0x18]
jmp 0x10023a40
inc dword [ebp - 0x2c]
jmp 0x10023a2a
inc dword [ebp - 0x1c]
jmp 0x10023a0f
mov eax, dword [ebp - 0x38]
dec dword [ebp - 0x24]
jmp 0x100239bb
push dword [ebp - 0x34]
dec dword [ebp - 0x20]
lea ecx, [ebp - 0x1ac]
call fcn.10006f5b
push 4
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x110]
pop esi
mov dword [ebp - 0x24], 0x4bc662a2
mov dword [ebp - 0x2c], 0x6371
mov dword [ebp - 0x18], 0x270e7ad5
push esi
call fcn.10001cd0
mov byte [ebp - 4], 6
mov dword [ebp - 0x38], 0x7ff
cmp dword [ebp - 0x38], 0x84d
jle 0x10023c69
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_GetFileSize]
mov dword [ebp - 0x34], 0x176f
cmp dword [ebp - 0x34], 0x7d7
jge 0x10023c1a
jmp 0x10023c11
movsx eax, al
push eax
call fcn.1004656e
pop ecx
call fcn.10046584
cmp al, 0xff
jne 0x10023c07
mov esi, ebx
mov eax, ebx
mov dword [ebp - 0x20], ebx
or eax, esi
lea ecx, [ebp - 0x23c]
cdq
push edx
push eax
call fcn.1000288f
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x10023c3b
mov eax, dword [eax]
push eax
call fcn.1004603d
pop ecx
push ebx
push edi
lea ecx, [ebp - 0x23c]
call fcn.100078fb
mov eax, dword [ebp - 0x20]
inc eax
mov dword [ebp - 0x20], eax
cmp eax, 0x1743
jl 0x10023c21
inc esi
cmp esi, 0x3c7e
jl 0x10023c1c
push 4
pop esi
mov dword [ebp - 0x20], edi
cmp dword [ebp - 0x38], 0x52f
jge 0x10023c80
push str.wtguphw_axdfkml_mzbpdhql_ymntib_kmqxtpoq_qrwnwoos_rlcyq_yon
call fcn.1004603d
pop ecx
mov dword [ebp - 4], 6
mov eax, 0x657a
mov dword [ebp - 0x5c], 0x85d0
mov dword [ebp - 0x34], 0xfffffffe
mov dword [ebp - 0xdc], eax
mov dword [ebp - 0xd8], eax
mov dword [ebp - 0xd4], eax
mov dword [ebp - 0xd0], eax
mov dword [ebp - 0x18], ebx
jmp 0x10023cca
mov ecx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x110]
mov dword [eax + ecx*4], 0x223dec99
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], esi
jl 0x10023cb7
cmp dword [ebp - 0x24], ebx
jne 0x10023d09
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0x24]
cmp eax, dword [ebp - 0x24]
jne 0x10023ce6
mov ecx, edi
cmp dword [ebp - 0x24], ebx
jne 0x10023ce8
mov ecx, ebx
mov eax, dword [ebp - 0x24]
mov edx, dword [ebp - 0x24]
imul eax, ecx
xor ecx, ecx
sub edx, eax
mov eax, dword [ebp - 0x24]
cmp edx, eax
setne cl
cmp ecx, dword [ebp - 0x2c]
jle 0x10023d09
mov edx, ebx
cmp dword [ebp - 0x2c], ebx
je 0x10023d0b
mov edx, edi
mov eax, dword [ebp - 0x24]
xor ecx, ecx
cmp edx, eax
setge cl
xor edx, edx
add ecx, 0xbfc3
mov dword [ebp - 0x18], ecx
mov ecx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x24]
cmp eax, ecx
mov eax, dword [ebp - 0x2c]
setne dl
xor ecx, ecx
cmp edx, eax
mov edx, dword [ebp - 0x110]
mov dword [ebp - 0x4c], edx
setg cl
xor eax, eax
test ecx, ecx
mov dword [edx + 8], ecx
sete al
cmp eax, dword [ebp - 0x2c]
jg 0x10023d54
mov eax, ebx
cmp dword [edx + 8], ebx
jne 0x10023d56
mov eax, edi
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x18], ebx
jne 0x10023dc3
mov eax, dword [ebp - 0x110]
xor edx, edx
mov ecx, dword [ebp - 0x34]
mov esi, dword [eax + 0xc]
mov eax, dword [ebp - 0x18]
cmp eax, ecx
setle dl
xor eax, eax
imul edx, dword [ebp - 0xd8]
cmp edx, esi
setg al
cmp eax, esi
jne 0x10023d90
mov eax, ebx
cmp dword [ebp - 0xdc], ebx
je 0x10023d92
mov eax, edi
mov esi, dword [ebp - 0x4c]
xor edx, edx
imul eax, eax, 0x1153
push 4
sub eax, 0x1153
cmp eax, dword [esi + 8]
mov eax, dword [ebp - 0x5c]
setl dl
xor ecx, ecx
cmp eax, edx
setne cl
imul eax, ecx, 0x5412
cmp edi, eax
sbb eax, eax
inc eax
mov dword [esi + 8], eax
pop esi
mov eax, dword [ebp - 0xd8]
lea ecx, [ebp - 0x110]
mov dword [ebp - 0x20], 0xbc6c2db6
mov byte [ebp - 4], 5
call fcn.10001d53
mov dword [ebp - 0x1c], 0xda62
lea ecx, [ebp - 0x17c]
mov dword [ebp - 0x20], 0x78e10a3b
mov dword [ebp - 0x2c], 0x656540f2
mov dword [ebp - 0x20], 0xa4a603d2
mov dword [ebp - 0x34], ebx
mov dword [ebp - 0x34], 5
mov dword [ebp - 0x34], 0xffffffff
push esi
call fcn.10001cd0
mov dword [ebp - 0x18], ebx
jmp 0x10023e30
mov ecx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x17c]
mov dword [eax + ecx*4], 0x93c34f97
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], esi
jl 0x10023e1d
cmp dword [ebp - 0x1c], 0x8a60
jg 0x10023e46
cmp dword [ebp - 0x1c], ebx
jne 0x10023e46
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x1c]
cmp eax, dword [ebp - 0x1c]
jle 0x10023e58
mov eax, ebx
cmp dword [ebp - 0x1c], ebx
je 0x10023e5a
mov eax, edi
mov dword [ebp - 0x20], eax
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x2c]
sub eax, dword [ebp - 0x1c]
neg eax
sbb eax, eax
inc eax
cmp eax, dword [ebp - 0x2c]
jg 0x10023e81
cmp dword [ebp - 0x1c], ebx
jne 0x10023e83
mov edi, ebx
mov eax, dword [ebp - 0x1c]
xor ecx, ecx
cmp edi, eax
setl cl
cmp ecx, 0x8deb256c
lea ecx, [ebp - 0x17c]
sbb eax, eax
or edi, 0xffffffff
neg eax
mov dword [ebp - 0x20], eax
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x2c]
mov dword [ebp - 0x34], ebx
mov dword [ebp - 0x34], 0xfffffff7
mov dword [ebp - 0x34], ebx
mov dword [ebp - 0x34], 0x49562184
mov dword [ebp - 0x34], esi
mov dword [ebp - 0x20], edi
inc dword [ebp - 0x20]
call fcn.10001d53
xor ecx, ecx
inc ecx
mov dword [ebp - 0x2c], ecx
mov dword [ebp - 0x20], 2
mov dword [ebp - 0x34], edi
mov dword [ebp - 0x18], ebx
jmp 0x10023ef0
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x7c], edi
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], ecx
jl 0x10023ee6
mov dword [ebp - 0x2c], ebx
cmp dword [ebp - 0x2c], ebx
jl 0x10023faa
mov dword [ebp - 0x1c], 0xf951fe77
mov dword [ebp - 0x34], 0x3589fe57
mov dword [ebp - 0x18], ebx
jmp 0x10023f21
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0xbc], ebx
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], ecx
jl 0x10023f14
mov dword [ebp - 0x1c], ebx
cmp dword [ebp - 0x1c], ebx
jl 0x10023fa1
mov dword [ebp - 0x34], 0xfffffffe
mov dword [ebp - 0x34], ebx
mov dword [ebp - 0x18], ebx
jmp 0x10023f4b
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x60], 0x8ef6b8f3
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], ecx
jl 0x10023f3d
mov dword [ebp - 0x60], ebx
cmp dword [ebp - 0x60], ebx
jl 0x10023f9c
mov dword [ebp - 0x24], 0xf30836b1
mov dword [ebp - 0x24], ebx
jmp 0x10023f92
mov dword [ebp - 0x18], 0xa61eefb6
mov dword [ebp - 0x34], 0x35b263d1
mov dword [ebp - 0x34], 0xb051af7f
mov dword [ebp - 0x34], edi
mov dword [ebp - 0x18], ebx
jmp 0x10023f8a
mov dword [ebp - 0x20], ecx
dec dword [ebp - 0x20]
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], ebx
jle 0x10023f81
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], ebx
jle 0x10023f64
dec dword [ebp - 0x60]
jns 0x10023f58
dec dword [ebp - 0x1c]
jns 0x10023f2e
dec dword [ebp - 0x2c]
jns 0x10023f01
cmp dword [ebp - 0x7c], ebx
je 0x10023fdf
cmp dword [ebp - 0x7c], esi
ja 0x10023fbe
mov dword [ebp - 0x2c], ebx
cmp dword [ebp - 0x2c], ebx
jne 0x10023fbe
mov ecx, ebx
mov eax, dword [ebp - 0x7c]
xor edx, edx
cmp ecx, 7
sete dl
xor ecx, ecx
cmp edx, eax
setg cl
mov dword [ebp - 0x20], ecx
cmp dword [ebp - 0x20], ebx
je 0x10023fdf
xor edi, edi
inc edi
mov eax, edi
jmp 0x10023fe4
xor edi, edi
mov eax, ebx
inc edi
imul eax, eax, 0x3a7e
mov ecx, ebx
push 0x5c
mov dword [ebp - 0x48], 0xdf026700
mov byte [ebp - 0x44], 0x20
mov dword [ebp - 0x34], eax
pop eax
push 2
mov word [ebp - 0x58], ax
pop esi
mov dword [ebp - 0x40], esi
cmp esi, 5
jae 0x10024102
movzx eax, byte [ebp - 0x48]
lea eax, [eax*2 + 2]
cmp esi, eax
jne 0x1002402f
movzx eax, byte [ebp + esi - 0x48]
dec esi
add esi, eax
lea ecx, [eax + 1]
jmp 0x100240fa
movzx edx, byte [ebp + esi - 0x47]
mov eax, esi
sub eax, ecx
movzx eax, byte [ebp + eax - 0x4a]
movzx ecx, word [ebp + eax*2 - 0x58]
mov eax, ecx
and eax, edx
add eax, eax
sub ecx, eax
movzx eax, byte [ebp + esi - 0x48]
add ecx, edx
mov word [ebp + eax*2 - 0x58], cx
mov dword [ebp - 0x3c], 0x5318
cmp dword [ebp - 0x3c], 0x54ca
jle 0x100240ab
mov eax, ebx
mov dword [ebp - 0x38], ebx
mov edi, eax
mov dword [ebp - 0x20], 0x4596
mov dword [ebp - 0x34], ebx
mov eax, ebx
mov ecx, 0x10079b38
or eax, edi
cdq
push edx
push eax
call fcn.10006e46
inc ebx
cmp ebx, 0x3ebc
jl 0x10024077
dec edi
dec dword [ebp - 0x20]
push 0
pop ebx
jne 0x10024074
mov eax, dword [ebp - 0x38]
inc eax
mov dword [ebp - 0x38], eax
cmp eax, 0x6d01
jl 0x1002406b
xor edi, edi
inc edi
mov ecx, ebx
mov byte [ebp - 4], 9
cmp dword [ebp - 0x3c], 0x50f3
mov dword [ebp - 0x20], ecx
jge 0x100240f3
mov edx, str.icqclf_vroflu_yubqduh
mov ecx, 0x10079b38
call fcn.10009b61
jmp 0x100240f0
mov ecx, dword [ebp - 0x20]
mov dword [ebp - 4], 5
add esi, 2
jmp 0x10024004
xor eax, eax
lea ecx, [ebp - 0xf8]
mov word [ebp - 0x56], ax
mov dword [ebp - 0x24], 0x4bc662a2
mov dword [ebp - 0x2c], 0x6371
mov dword [ebp - 0x18], 0x270e7ad5
push 4
call fcn.10001cd0
mov dword [ebp - 0x20], edi
mov eax, 0x657a
mov dword [ebp - 0x5c], 0x85d0
mov dword [ebp - 0x34], 0xfffffffe
mov dword [ebp - 0xcc], eax
mov dword [ebp - 0xc8], eax
mov dword [ebp - 0xc4], eax
mov dword [ebp - 0xc0], eax
mov dword [ebp - 0x18], ebx
jmp 0x10024170
mov ecx, dword [ebp - 0x18]
mov eax, dword [ebp - 0xf8]
mov dword [eax + ecx*4], 0x223dec99
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 4
jl 0x1002415d
cmp dword [ebp - 0x24], ebx
jne 0x100241b0
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0x24]
cmp eax, dword [ebp - 0x24]
jne 0x1002418d
mov ecx, edi
cmp dword [ebp - 0x24], ebx
jne 0x1002418f
mov ecx, ebx
mov eax, dword [ebp - 0x24]
mov edx, dword [ebp - 0x24]
imul eax, ecx
xor ecx, ecx
sub edx, eax
mov eax, dword [ebp - 0x24]
cmp edx, eax
setne cl
cmp ecx, dword [ebp - 0x2c]
jle 0x100241b0
mov edx, ebx
cmp dword [ebp - 0x2c], ebx
je 0x100241b2
mov edx, edi
mov eax, dword [ebp - 0x24]
xor ecx, ecx
cmp edx, eax
setge cl
xor edx, edx
add ecx, 0xbfc3
mov dword [ebp - 0x18], ecx
mov ecx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x24]
cmp eax, ecx
mov eax, dword [ebp - 0x2c]
setne dl
xor ecx, ecx
cmp edx, eax
mov edx, dword [ebp - 0xf8]
mov dword [ebp - 0x4c], edx
setg cl
xor eax, eax
test ecx, ecx
mov dword [edx + 8], ecx
sete al
cmp eax, dword [ebp - 0x2c]
jg 0x100241fb
mov eax, ebx
cmp dword [edx + 8], ebx
jne 0x100241fd
mov eax, edi
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x18], ebx
jne 0x10024267
mov eax, dword [ebp - 0xf8]
xor edx, edx
mov ecx, dword [ebp - 0x34]
mov esi, dword [eax + 0xc]
mov eax, dword [ebp - 0x18]
cmp eax, ecx
setle dl
xor eax, eax
imul edx, dword [ebp - 0xc8]
cmp edx, esi
setg al
cmp eax, esi
jne 0x10024237
mov eax, ebx
cmp dword [ebp - 0xcc], ebx
je 0x10024239
mov eax, edi
mov esi, dword [ebp - 0x4c]
xor edx, edx
imul eax, eax, 0x1153
sub eax, 0x1153
cmp eax, dword [esi + 8]
mov eax, dword [ebp - 0x5c]
setl dl
xor ecx, ecx
cmp eax, edx
setne cl
imul eax, ecx, 0x5412
cmp edi, eax
sbb eax, eax
inc eax
mov dword [esi + 8], eax
mov eax, dword [ebp - 0xc8]
lea ecx, [ebp - 0xf8]
mov dword [ebp - 0x20], 0xbc6c2db6
call fcn.10001d53
xor eax, eax
mov dword [ebp - 0x114], 7
mov word [ebp - 0x128], ax
lea ecx, [ebp - 0x128]
lea eax, [ebp - 0x58]
mov dword [ebp - 0x118], ebx
push eax
call fcn.10007a99
mov byte [ebp - 4], 0xb
lea eax, [ebp - 0x1ac]
push dword [ebp - 0xbc]
xorps xmm0, xmm0
mov dword [ebp - 0x58], ebx
push eax
lea eax, [ebp - 0x1bc]
mov dword [ebp - 0x2c], edi
push eax
push ebx
lea ecx, [ebp - 0xac]
mov dword [ebp - 0xac], ebx
movdqu xmmword [ebp - 0x1bc], xmm0
mov dword [ebp - 0xa8], ebx
mov dword [ebp - 0xa4], ebx
call fcn.10001db9
mov byte [ebp - 4], 0xc
mov dword [ebp - 0x30], 0xcb667f5a
mov dword [ebp - 0x20], ebx
mov dword [ebp - 0x2c], ebx
cmp dword [ebp - 0x2c], 0x18
jle 0x1002444b
mov dword [ebp - 0x20], 0x812c005d
mov dword [ebp - 0x20], 0xd9532955
mov dword [ebp - 0x18], ebx
jmp 0x1002432a
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x68], 0xfe1ca29
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 2
jl 0x1002431c
mov dword [ebp - 0x64], ebx
cmp dword [ebp - 0x64], 3
jg 0x10024443
mov dword [ebp - 0x20], edi
mov dword [ebp - 0x38], 0x4f85
cmp dword [ebp - 0x38], 0x518e
jle 0x100243b7
push ebx
push 0x1135
push 0x2486
push 0xd0d
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_CreateFileMappingA]
mov esi, ebx
mov ecx, ebx
mov dword [ebp - 0x20], ebx
mov eax, esi
sar eax, cl
lea ecx, [ebp - 0x1f4]
cdq
push edx
push eax
call fcn.1000288f
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x1002438b
mov eax, dword [eax]
push eax
call fcn.1004603d
pop ecx
push ebx
push edi
lea ecx, [ebp - 0x1f4]
call fcn.100078fb
mov ecx, dword [ebp - 0x20]
inc ecx
mov dword [ebp - 0x20], ecx
cmp ecx, 0x3839
jl 0x1002436f
inc esi
cmp esi, 0x339d
jl 0x1002436a
mov dword [ebp - 0x34], 8
cmp dword [ebp - 0x38], 0x4d61
jge 0x100243d2
push str.iqtpr_htbdjmb_pxajgixuv_nnubftofv
call fcn.1004603d
pop ecx
mov dword [ebp - 4], 0xc
xor edx, edx
mov eax, dword [ebp - 0x64]
mov dword [ebp - 0x20], edi
mov ecx, dword [ebp - 0x20]
mov eax, dword [ebp - 0x2c]
cmp ecx, eax
mov eax, dword [ebp - 0xac]
setle dl
xor ecx, ecx
cmp dword [eax + 8], edx
setge cl
mov dword [ebp - 0x30], ecx
mov eax, dword [ebp - 0x64]
mov eax, dword [ebp - 0x30]
mov eax, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x30]
mov dword [ebp - 0x20], eax
mov edx, dword [ebp - 0x64]
mov ecx, dword [ebp - 0xac]
mov eax, dword [ebp - 0x20]
cmp eax, dword [ecx + edx*4]
jne 0x10024427
mov eax, edi
cmp dword [ebp - 0x64], ebx
jne 0x10024429
mov eax, ebx
mov dword [ebp - 0x20], eax
mov eax, dword [ebp - 0x20]
add eax, dword [ebp - 0x64]
mov dword [ebp - 0x20], eax
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x34], eax
inc dword [ebp - 0x64]
jmp 0x10024333
inc dword [ebp - 0x2c]
jmp 0x100242ff
mov byte [ebp - 0x25], bl
cmp byte [ebp - 0x25], 0
je 0x10024465
push 0x86b
push ebx
push 0x1851
call dword [sym.imp.USER32.dll_GetWindowTextA]
lea ecx, [ebp - 0xac]
mov byte [ebp - 4], 0xb
call fcn.10001d53
push 0x5f
pop eax
mov word [ebp - 0x8c], ax
xor ecx, ecx
xor eax, eax
mov byte [ebp - 0x88], bl
mov byte [ebp - 0x87], 0x2c
inc ecx
mov word [ebp - 0x8a], ax
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 0x2c], 0xa2215256
mov dword [ebp - 0x34], 0x1615
cmp dword [ebp - 0x34], 0x7a5
jge 0x100245eb
push 5
lea ecx, [ebp - 0xa0]
call fcn.10001cd0
mov esi, dword [ebp - 0xa0]
push 5
mov dword [ebp - 0x18], ebx
pop edi
push esi
push 0x1006795c
call fcn.10045abb
add ebx, dword [esi]
add esi, 4
pop ecx
pop ecx
dec edi
jne 0x100244ce
mov ecx, dword [ebp - 0xa0]
lea eax, [edi + 1]
mov edx, ebx
mov dword [ebp - 0x18], ebx
mov dword [ebp - 0x20], eax
xor ebx, ebx
mov dword [ebp - 0x38], ecx
mov edi, edx
mov dword [ebp - 0x3c], 5
mov esi, eax
cmp eax, 5
jge 0x10024536
mov ebx, dword [ecx]
mov eax, dword [ebp - 0xa0]
cmp ebx, dword [eax + esi*4]
jne 0x10024528
lea eax, [ebx + ebx]
mov ecx, edi
sub ecx, eax
mov eax, dword [ebp - 0xa0]
cmp ecx, edx
cmovl edx, ecx
inc esi
cmp esi, 5
jl 0x10024511
mov eax, dword [ebp - 0x20]
xor ebx, ebx
mov ecx, dword [ebp - 0x38]
inc eax
add ecx, 4
dec dword [ebp - 0x3c]
mov dword [ebp - 0x20], eax
mov dword [ebp - 0x38], ecx
jne 0x10024502
mov ecx, dword [ebp - 0xa0]
xor edi, edi
push 5
pop ebx
mov dword [ebp - 0x40], ecx
lea eax, [edi + 1]
mov dword [ebp - 0x30], ebx
mov dword [ebp - 0x3c], eax
cmp eax, 5
jge 0x100245be
lea esi, [eax + 1]
lea eax, [ecx + 4]
mov dword [ebp - 0x20], esi
mov dword [ebp - 0x38], eax
mov edi, esi
cmp esi, 5
jge 0x100245a9
mov eax, dword [eax]
mov ebx, dword [ecx]
mov esi, dword [ebp - 0xa0]
mov dword [ebp - 0x34], eax
cmp ebx, eax
jne 0x1002459a
cmp ebx, dword [esi + edi*4]
jne 0x1002459a
mov ecx, dword [ebp - 0x18]
imul eax, ebx, 3
sub ecx, eax
mov eax, dword [ebp - 0x34]
cmp ecx, edx
cmovl edx, ecx
inc edi
cmp edi, 5
jl 0x10024581
mov esi, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x40]
mov eax, dword [ebp - 0x38]
inc esi
add eax, 4
mov dword [ebp - 0x20], esi
mov dword [ebp - 0x38], eax
cmp esi, 6
jl 0x1002456d
mov eax, dword [ebp - 0x3c]
mov ebx, dword [ebp - 0x30]
inc eax
add ecx, 4
dec ebx
mov dword [ebp - 0x3c], eax
mov dword [ebp - 0x40], ecx
mov dword [ebp - 0x30], ebx
jne 0x1002455c
push edx
push 0x100671e4
call fcn.1004603d
pop ecx
pop ecx
lea ecx, [ebp - 0xa0]
call fcn.10001d53
xor ecx, ecx
xor ebx, ebx
inc ecx
mov dword [ebp - 0x18], ebx
jmp 0x100245fa
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x54], ecx
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], ecx
jl 0x100245f0
mov dword [ebp - 0x1c], ecx
mov esi, ecx
cmp dword [ebp - 0x1c], ebx
jne 0x1002460b
mov esi, ebx
imul ecx, dword [ebp - 0x1c], 0xfffffffc
xor edx, edx
mov eax, dword [ebp - 0x1c]
cmp ecx, eax
setg dl
mov dword [ebp - 0x2c], edx
cmp dword [ebp - 0x2c], ebx
jne 0x1002462d
cmp dword [ebp - 0x1c], ebx
jne 0x1002462d
xor edi, edi
mov ecx, ebx
inc edi
jmp 0x10024632
xor edi, edi
inc edi
mov ecx, edi
xor eax, eax
cmp esi, ecx
setg al
xor ecx, ecx
test eax, eax
setns cl
imul ecx, dword [ebp - 0x1c]
neg ecx
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x54]
cmp dword [ebp - 0x54], 0x5f88
jg 0x1002465f
mov eax, edi
cmp dword [ebp - 0x54], ebx
jne 0x10024661
mov eax, ebx
mov dword [ebp - 0x54], eax
mov dword [ebp - 0x1c], ebx
cmp dword [ebp - 0x1c], ebx
jl 0x1002476e
mov byte [ebp - 0x25], bl
cmp byte [ebp - 0x25], 0
je 0x10024687
push ebx
push 0x1096
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntW]
mov dword [ebp - 0x2c], ebx
cmp dword [ebp - 0x2c], ebx
jg 0x10024766
mov dword [ebp - 0x38], 0x1990
cmp dword [ebp - 0x38], 0x1b18
jle 0x1002470f
mov edx, ebx
mov dword [ebp - 0x18], ebx
mov esi, ebx
mov ecx, ebx
mov dword [ebp - 0x20], ebx
mov eax, esi
shl eax, cl
lea ecx, [ebp - 0x224]
xor eax, edx
cdq
push edx
push eax
call fcn.1000288f
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x100246cd
mov eax, dword [eax]
push eax
call fcn.1004603d
pop ecx
push ebx
push edi
lea ecx, [ebp - 0x224]
call fcn.100078fb
mov ecx, dword [ebp - 0x20]
mov edx, dword [ebp - 0x18]
inc ecx
mov dword [ebp - 0x20], ecx
cmp ecx, 0x1c40
jl 0x100246af
inc esi
cmp esi, 0x51f0
jl 0x100246aa
inc edx
mov dword [ebp - 0x18], edx
cmp edx, 0x2c2b
jl 0x100246a8
push ebx
call dword [sym.imp.KERNEL32.dll_GlobalUnlock]
mov dword [ebp - 0x24], 9
cmp dword [ebp - 0x38], 0x183f
jge 0x1002472a
push str.uoberwqpf_wzl_mcx_uquggdlp_pfpwzw_nsiiy_vyeuj_efcngrli_swowd_nhzdwaxp_uecla
call fcn.1004603d
pop ecx
mov dword [ebp - 4], 0xb
mov dword [ebp - 0x24], ebx
cmp dword [ebp - 0x24], ebx
jl 0x1002475e
mov dword [ebp - 0x18], 0x15fb26c
mov dword [ebp - 0x18], ebx
cmp dword [ebp - 0x18], ebx
jl 0x10024759
mov eax, dword [ebp - 0x2c]
cmp dword [ebp + eax*4 - 0x54], ebx
jne 0x10024759
mov eax, dword [ebp - 0x18]
dec dword [ebp - 0x18]
jns 0x10024748
dec dword [ebp - 0x24]
jns 0x10024739
inc dword [ebp - 0x2c]
jmp 0x1002468a
dec dword [ebp - 0x1c]
jmp 0x10024667
xor eax, eax
mov dword [ebp - 0x15c], 7
mov word [ebp - 0x170], ax
lea ecx, [ebp - 0x170]
lea eax, [ebp - 0x8c]
mov dword [ebp - 0x160], ebx
push eax
call fcn.10007a99
mov byte [ebp - 4], 0x11
mov dword [ebp - 0x8c], ebx
mov dword [ebp - 0x18], ebx
mov dword [ebp - 0x34], ebx
mov byte [ebp - 0x25], bl
cmp byte [ebp - 0x25], 0
je 0x100247b8
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov dword [ebp - 0x18], ebx
cmp dword [ebp - 0x18], 0x1a
jge 0x10024879
mov dword [ebp - 0x40], 0x2919
cmp dword [ebp - 0x40], 0x299e
jle 0x1002484f
push ebx
push ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_EnumResourceNamesW]
mov dword [ebp - 0x30], ebx
mov esi, ebx
mov dword [ebp - 0x3c], ebx
mov ecx, esi
mov dword [ebp - 0x38], 0x476e
mov esi, dword [ebp - 0x30]
mov dword [ebp - 0x20], ecx
mov eax, esi
and eax, ecx
lea ecx, [ebp - 0x254]
cdq
push edx
push eax
call fcn.1000288f
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x10024812
mov eax, dword [eax]
push eax
call fcn.1004603d
pop ecx
push ebx
push edi
lea ecx, [ebp - 0x254]
call fcn.100078fb
mov ecx, dword [ebp - 0x20]
dec ecx
dec dword [ebp - 0x38]
mov dword [ebp - 0x20], ecx
jne 0x100247f6
mov esi, dword [ebp - 0x3c]
inc esi
mov dword [ebp - 0x3c], esi
cmp esi, 0x1bb3
jl 0x100247e7
mov eax, dword [ebp - 0x30]
inc eax
mov dword [ebp - 0x30], eax
cmp eax, 0x688a
jl 0x100247e2
mov dword [ebp - 0x34], 0xfffffffc
cmp dword [ebp - 0x40], 0x26e1
jge 0x1002486a
push str.upgkucc_mlc_wxccem_lubeape_mnmlyx_aqscns
call fcn.1004603d
pop ecx
mov dword [ebp - 4], 0x11
inc dword [ebp - 0x18]
jmp 0x100247bb
push dword [ebp - 0x118]
cmp dword [ebp - 0x114], 8
lea eax, [ebp - 0x128]
push ebx
cmovae eax, dword [ebp - 0x128]
lea ecx, [ebp - 0x1ac]
push eax
call fcn.10007b53
cmp eax, 0xffffffff
je 0x100248be
push 0xffffffffffffffff
push ebx
lea ecx, [ebp - 0x170]
push ecx
push edi
push eax
lea ecx, [ebp - 0x1ac]
call fcn.10009fd7
jmp 0x10024879
mov dword [ebp - 0x1c], edi
push 4
mov dword [ebp - 0x24], 0x41449c9f
pop esi
mov dword [ebp - 0x2c], esi
mov dword [ebp - 0x30], 0xffffffff
mov dword [ebp - 0x1c], 0x14
jmp 0x10024911
mov byte [ebp - 0x25], bl
cmp byte [ebp - 0x25], 0
je 0x100248f8
push ebx
push 0x1d50
push 0xfda
call dword [sym.imp.USER32.dll_SetDlgItemTextA]
mov byte [ebp - 0x25], bl
cmp byte [ebp - 0x25], 0
je 0x1002490e
push 0x960
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_ExpandEnvironmentStringsA]
dec dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 0xfffffffa
jne 0x100248de
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x2c]
cmp dword [ebp - 0x2c], 5
jae 0x10024939
mov ecx, ebx
cmp dword [ebp - 0x1c], ebx
je 0x1002493b
mov ecx, edi
xor edx, edx
mov dword [ebp - 0x24], 0xfffffffb
mov eax, dword [ebp - 0x1c]
cmp ecx, eax
mov eax, dword [ebp - 0x2c]
sete dl
xor ecx, ecx
cmp edx, eax
mov eax, dword [ebp - 0x30]
setne cl
xor edx, edx
cmp ecx, 0xfffffffa
setne dl
xor ecx, ecx
cmp edx, eax
mov eax, dword [ebp - 0x24]
mov edx, dword [ebp - 0x1c]
setle cl
sub edx, eax
mov eax, dword [ebp - 0x1c]
neg edx
mov dword [ebp - 0x34], ecx
sbb edx, edx
xor ecx, ecx
inc edx
cmp edx, eax
setne cl
sub ecx, dword [ebp - 0x34]
je 0x10024a28
mov dword [ebp - 0x30], edi
mov dword [ebp - 0x18], 0xfffffff6
mov dword [ebp - 0x20], 0xf60700c0
cmp dword [ebp - 0x24], ebx
je 0x10024a20
mov dword [ebp - 0x30], 0xfffffffd
mov eax, dword [ebp - 0x30]
dec eax
je 0x100249b5
mov eax, edi
cmp dword [ebp - 0x30], ebx
jne 0x100249b7
mov eax, ebx
mov dword [ebp - 0x1c], 6
xor edx, edx
mov dword [ebp - 0x30], eax
mov eax, dword [ebp - 0x30]
sub eax, 0xffa8
imul ecx, eax, 0x5019
mov eax, dword [ebp - 0x18]
cmp ecx, eax
setne dl
mov dword [ebp - 0x24], edx
xor edx, edx
mov ecx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x24]
cmp eax, ecx
setne dl
cmp dword [ebp - 0x1c], edx
jle 0x100249f5
mov ecx, edi
cmp dword [ebp - 0x18], ebx
jne 0x100249f7
mov ecx, ebx
mov eax, dword [ebp - 0x18]
add ecx, 0xad11748e
xor edx, edx
cmp ecx, eax
mov eax, dword [ebp - 0x2c]
setl dl
xor ecx, ecx
sub edx, 0xfffc
cmp edx, eax
setge cl
mov dword [ebp - 0x18], ecx
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x20], edi
mov dword [ebp - 0x1c], ebx
jmp 0x10024a8e
mov dword [ebp - 0x34], ebx
mov dword [ebp - 0xec], edi
mov dword [ebp - 0xe8], edi
mov dword [ebp - 0xe4], edi
mov dword [ebp - 0xe0], edi
mov dword [ebp - 0x18], ebx
jmp 0x10024a59
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x1c4], 0x55375bb7
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 2
jl 0x10024a48
cmp dword [ebp - 0x34], ebx
je 0x10024a73
mov dword [ebp - 0x34], 0xb036c860
dec dword [ebp - 0xe8]
jmp 0x10024a8e
mov dword [ebp - 0x24], ebx
jmp 0x10024a89
mov eax, dword [ebp - 0x24]
mov dword [ebp + eax*4 - 0xec], 0x75ba
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], esi
jl 0x10024a78
mov ecx, dword [ebp - 0xb8]
lea eax, [ebp - 0x1ac]
push eax
lea edx, [ebp - 0x194]
call fcn.10024d32
pop ecx
push ebx
push edi
lea ecx, [ebp - 0x170]
call fcn.10007bf6
push ebx
push edi
lea ecx, [ebp - 0x128]
call fcn.10007bf6
push ebx
push edi
lea ecx, [ebp - 0x1ac]
call fcn.10007bf6
push ebx
push edi
lea ecx, [ebp - 0x194]
call fcn.10007bf6
mov ecx, dword [ebp - 0xc]
mov eax, dword [ebp - 0xb8]
pop edi
pop esi
mov dword fs:[0], ecx
pop ebx
mov esp, ebp
pop ebp
ret