Function at 0x1000960d
Capabilities:
Get common file path
Log keystrokes
Query service status

Disassembly:
mov eax, 0x100631b8
call fcn.100628b0
sub esp, 0x278
mov dword [ebp - 0x1c], 0x7d8e6e83
push ebx
mov dword [ebp - 0x2c], 0xc2251554
xor ebx, ebx
mov dword [ebp - 0xf8], edx
xor edx, edx
mov dword [ebp - 0x98], ecx
mov ecx, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x1c]
cmp ecx, eax
push esi
setg dl
mov dword [ebp - 0x170], ebx
push edi
mov dword [ebp - 0x10], esp
cmp edx, 0x2071
jge 0x100096d0
mov dword [ebp - 0x18], ebx
jmp 0x1000966d
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x74], 0x5059b8bc
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 1
jl 0x1000965f
mov byte [ebp - 0x1d], bl
cmp byte [ebp - 0x1d], bl
je 0x10009684
push ebx
push ebx
push ebx
call dword [sym.imp.ADVAPI32.dll_RegLoadKeyW]
mov dword [ebp - 0x1c], ebx
cmp dword [ebp - 0x1c], ebx
jl 0x100096f5
mov dword [ebp - 0x28], 0x923ccde6
xor ecx, ecx
mov eax, dword [ebp - 0x1c]
mov edx, dword [ebp + eax*4 - 0x74]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp + eax*4 - 0x74]
cmp edx, eax
mov eax, dword [ebp - 0x1c]
setg cl
add ecx, 0xfffe
mov dword [ebp + eax*4 - 0x74], ecx
lea eax, [ecx + 0x52bf3388]
mov dword [ebp - 0x2c], eax
mov eax, dword [ebp - 0x2c]
mov dword [ebp - 0x28], eax
cmp dword [ebp - 0x2c], ebx
jne 0x100096f5
dec dword [ebp - 0x1c]
jns 0x1000968c
jmp 0x100096f5
mov dword [ebp - 0x2c], 0xffffffee
jmp 0x100096ef
mov byte [ebp - 0x1d], bl
cmp byte [ebp - 0x1d], bl
je 0x100096ec
push 0x1b9d
call dword [sym.imp.USER32.dll_SetFocus]
inc dword [ebp - 0x2c]
cmp dword [ebp - 0x2c], 0x10
jle 0x100096d9
mov dword [ebp - 0x18], 0xe1757117
mov dword [ebp - 0x30], 0xf1dbeccc
mov dword [ebp - 0x18], 0x10
jmp 0x10009721
inc dword [ebp - 0x30]
mov byte [ebp - 0x1d], bl
cmp byte [ebp - 0x1d], bl
je 0x1000971e
push ebx
call dword [sym.imp.GDI32.dll_CreateFontIndirectW]
dec dword [ebp - 0x18]
cmp dword [ebp - 0x18], 0xffffffea
jl 0x1000970c
mov dword [ebp - 0x18], 0x6c08
cmp dword [ebp - 0x18], 0x6d89
jle 0x1000978f
mov esi, ebx
mov dword [ebp - 0x30], ebx
mov edi, esi
mov esi, 0x5ade
mov eax, edi
lea ecx, [ebp - 0x268]
cdq
push edx
push eax
call fcn.10001a8a
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x1000975d
mov eax, dword [eax]
push eax
call fcn.1004b583
pop ecx
push ebx
push 1
lea ecx, [ebp - 0x268]
call fcn.10004d7a
dec edi
dec esi
jne 0x10009743
mov esi, dword [ebp - 0x30]
inc esi
mov dword [ebp - 0x30], esi
cmp esi, 0x2d16
jl 0x1000973c
push 1
push ebx
push ebx
call dword [sym.imp.USER32.dll_AttachThreadInput]
cmp dword [ebp - 0x18], 0x69a1
mov dword [ebp - 0x6c], 0x3006e005
mov dword [ebp - 0x68], 0x2b003001
mov dword [ebp - 0x64], 0xe042802
mov dword [ebp - 0x60], 0x3424d204
mov word [ebp - 0x5c], 0x371
mov byte [ebp - 0x5a], 3
jge 0x100097c9
push str.ieoq_jzfb_vqepsb_bggv
call fcn.1004b583
pop ecx
or esi, 0xffffffff
xor edx, edx
mov dword [ebp - 4], esi
mov dword [ebp - 0x1c], 0x7d8e6e83
mov dword [ebp - 0x2c], 0xc2251554
mov ecx, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x1c]
cmp ecx, eax
setg dl
cmp edx, 0x2071
jge 0x10009868
mov dword [ebp - 0x18], ebx
jmp 0x10009805
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x7c], 0x5059b8bc
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 1
jl 0x100097f7
mov byte [ebp - 0x1d], bl
cmp byte [ebp - 0x1d], bl
je 0x1000981c
push ebx
push ebx
push ebx
call dword [sym.imp.ADVAPI32.dll_RegLoadKeyW]
mov dword [ebp - 0x1c], ebx
cmp dword [ebp - 0x1c], ebx
jl 0x1000988d
mov dword [ebp - 0x28], 0x923ccde6
xor ecx, ecx
mov eax, dword [ebp - 0x1c]
mov edx, dword [ebp + eax*4 - 0x7c]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp + eax*4 - 0x7c]
cmp edx, eax
mov eax, dword [ebp - 0x1c]
setg cl
add ecx, 0xfffe
mov dword [ebp + eax*4 - 0x7c], ecx
lea eax, [ecx + 0x52bf3388]
mov dword [ebp - 0x2c], eax
mov eax, dword [ebp - 0x2c]
mov dword [ebp - 0x28], eax
cmp dword [ebp - 0x2c], ebx
jne 0x1000988d
dec dword [ebp - 0x1c]
jns 0x10009824
jmp 0x1000988d
mov dword [ebp - 0x2c], 0xffffffee
jmp 0x10009887
mov byte [ebp - 0x1d], bl
cmp byte [ebp - 0x1d], bl
je 0x10009884
push 0x1b9d
call dword [sym.imp.USER32.dll_SetFocus]
inc dword [ebp - 0x2c]
cmp dword [ebp - 0x2c], 0x10
jle 0x10009871
mov dword [ebp - 0x1c], 0x522f
cmp dword [ebp - 0x1c], 0x54a7
jle 0x10009925
mov edi, ebx
mov dword [ebp - 0x2c], ebx
mov esi, ebx
mov dword [ebp - 0x34], ebx
mov eax, edi
mov edi, ebx
cdq
idiv esi
mov ecx, edx
mov dword [ebp - 0x18], ecx
mov esi, ebx
mov dword [ebp - 0x30], 0x44d3
mov eax, esi
or eax, ecx
lea ecx, [ebp - 0x220]
cdq
push edx
push eax
call fcn.10001a8a
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x100098dc
mov eax, dword [eax]
push eax
call fcn.1004b583
pop ecx
push ebx
push 1
lea ecx, [ebp - 0x220]
call fcn.10004d7a
mov ecx, dword [ebp - 0x18]
add esi, edi
dec dword [ebp - 0x30]
jne 0x100098c0
inc edi
cmp edi, 0x78d3
jl 0x100098b7
mov esi, dword [ebp - 0x34]
mov edi, dword [ebp - 0x2c]
inc esi
mov dword [ebp - 0x34], esi
cmp esi, 0x4072
jl 0x100098ab
inc edi
mov dword [ebp - 0x2c], edi
cmp edi, 0x54b5
jl 0x100098a6
or esi, 0xffffffff
cmp dword [ebp - 0x1c], 0x5032
push 0x6c
pop eax
mov word [ebp - 0x11a], ax
jge 0x10009943
push str.gual_nie_svjtfv_irgf_eepzdhreq_ghtys_gcdhben_ihaqbybz_latwymhq_eqz_rcg_dvpteq
call fcn.1004b583
pop ecx
mov dword [ebp - 4], esi
mov dword [ebp - 0x18], 0xf7e2799a
mov dword [ebp - 0x28], 0x555b7cef
mov dword [ebp - 0x18], 0xfffffffd
jmp 0x1000997a
mov byte [ebp - 0x1d], bl
cmp byte [ebp - 0x1d], bl
je 0x10009970
push 0xfd9
call dword [sym.imp.GDI32.dll_DeleteDC]
mov dword [ebp - 0x28], 0x72fd4914
dec dword [ebp - 0x18]
cmp dword [ebp - 0x18], 0xfffffff2
jne 0x1000995d
push 2
pop esi
mov edi, ebx
mov dword [ebp - 0x34], esi
cmp esi, 0x13
jae 0x10009c6d
movzx eax, byte [ebp - 0x6c]
lea eax, [eax*2 + 2]
cmp esi, eax
jne 0x10009aa9
mov dword [ebp - 0x2c], 0xfffffffa
mov dword [ebp - 0x30], ebx
mov dword [ebp - 0x18], 0x5a519d81
mov dword [ebp - 0x28], 1
mov byte [ebp - 0x1d], bl
cmp byte [ebp - 0x1d], bl
je 0x100099cb
push ebx
call dword [sym.imp.ole32.dll_CoTaskMemFree]
mov eax, dword [ebp - 0x2c]
mov dword [ebp - 0x30], eax
mov eax, dword [ebp - 0x2c]
cmp dword [ebp - 0x30], 0x9acf
jl 0x100099e6
cmp dword [ebp - 0x2c], ebx
jne 0x100099e6
mov eax, ebx
jmp 0x100099e9
xor eax, eax
inc eax
cmp eax, dword [ebp - 0x2c]
jg 0x100099f8
cmp dword [ebp - 0x30], ebx
je 0x100099f8
xor edx, edx
inc edx
jmp 0x100099fa
mov edx, ebx
mov eax, dword [ebp - 0x2c]
xor ecx, ecx
cmp eax, edx
setg cl
mov dword [ebp - 0x2c], ecx
mov eax, dword [ebp - 0x18]
imul eax, dword [ebp - 0x2c]
mov dword [ebp - 0x18], eax
movzx eax, byte [ebp + esi - 0x6c]
mov dword [ebp - 0x30], 0x4f5d
cmp dword [ebp - 0x30], 0x4f9b
mov dword [ebp - 0x28], eax
lea edi, [eax + 1]
mov dword [ebp - 0x38], edi
jle 0x10009a89
mov edi, ebx
mov esi, ebx
mov ecx, esi
mov eax, edi
sar eax, cl
lea ecx, [ebp - 0x238]
cdq
push edx
push eax
call fcn.10001a8a
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x10009a51
mov eax, dword [eax]
push eax
call fcn.1004b583
pop ecx
push ebx
push 1
lea ecx, [ebp - 0x238]
call fcn.10004d7a
inc esi
cmp esi, 0x37dd
jl 0x10009a33
inc edi
cmp edi, 0x2421
jl 0x10009a31
push ebx
push ebx
call dword [sym.imp.ADVAPI32.dll_QueryServiceStatus]
mov esi, dword [ebp - 0x34]
mov eax, dword [ebp - 0x28]
mov edi, dword [ebp - 0x38]
dec esi
add esi, eax
cmp dword [ebp - 0x30], 0x4d6b
jge 0x10009aa0
push str.zawawh_rar_osmxhfm_fwlqzewh_orkj_qojcajugq_lxlktyn
call fcn.1004b583
pop ecx
or dword [ebp - 4], 0xffffffff
jmp 0x10009c65
movzx edx, byte [ebp + esi - 0x6b]
mov eax, esi
sub eax, edi
movzx eax, byte [ebp + eax - 0x6e]
movzx eax, word [ebp + eax*2 - 0x124]
mov ecx, eax
and eax, edx
or ecx, edx
sub ecx, eax
movzx eax, byte [ebp + esi - 0x6c]
mov word [ebp + eax*2 - 0x124], cx
mov dword [ebp - 0x1c], 0x4925
cmp dword [ebp - 0x1c], 0x4bbf
jle 0x10009b69
mov eax, ebx
mov dword [ebp - 0x18], ebx
mov esi, ebx
mov dword [ebp - 0x2c], ebx
mov edi, ebx
mov dword [ebp - 0x30], ebx
lea ecx, [edi + esi]
mov edi, eax
sar edi, cl
mov esi, ebx
mov eax, edi
lea ecx, [ebp - 0x250]
and eax, esi
cdq
push edx
push eax
call fcn.10001a8a
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x10009b1c
mov eax, dword [eax]
push eax
call fcn.1004b583
pop ecx
push ebx
push 1
lea ecx, [ebp - 0x250]
call fcn.10004d7a
inc esi
cmp esi, 0x1765
jl 0x10009b00
mov edi, dword [ebp - 0x30]
mov esi, dword [ebp - 0x2c]
inc edi
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x30], edi
cmp edi, 0x6f54
jl 0x10009af7
inc esi
mov dword [ebp - 0x2c], esi
cmp esi, 0x639c
jl 0x10009af2
inc eax
mov dword [ebp - 0x18], eax
cmp eax, 0x25cc
jl 0x10009aed
mov esi, dword [ebp - 0x34]
cmp dword [ebp - 0x1c], 0x4573
jge 0x10009b7d
push str.upbxhw_puyuf_epkkzdv_cseajw_khnd_ddlkevtyh_mamgj_rfw_rwkfi
call fcn.1004b583
pop ecx
or dword [ebp - 4], 0xffffffff
xor ecx, ecx
push 5
pop edx
mov dword [ebp - 0x28], edx
inc ecx
mov dword [ebp - 0x38], ecx
mov dword [ebp - 0x3c], 0xfd9e2a8d
mov dword [ebp - 0x38], 0x418a5273
mov dword [ebp - 0x40], 0x710dd01
mov dword [ebp - 0x18], 0xc9a130df
mov dword [ebp - 0x30], 0xffff
mov dword [ebp - 0x1c], ebx
jmp 0x10009bc6
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0x1a4], 0xb8faaaeb
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 3
jl 0x10009bb5
mov dword [ebp - 0x1c], ebx
jmp 0x10009be2
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0x94], 0x80c3414b
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], ecx
jl 0x10009bd1
mov eax, dword [ebp - 0x1a0]
mov edi, ebx
inc dword [ebp - 0x30]
mov eax, dword [ebp - 0x94]
sub eax, dword [ebp - 0x18]
neg eax
sbb eax, eax
inc eax
cmp edx, eax
mov eax, dword [ebp - 0x18]
sbb ecx, ecx
xor edx, edx
neg ecx
cmp eax, ecx
mov eax, dword [ebp - 0x28]
setg dl
xor ecx, ecx
cmp edx, eax
mov eax, dword [ebp - 0x38]
setg cl
xor edx, edx
cmp ecx, eax
setne dl
sub edx, 7
neg edx
sbb edx, edx
xor eax, eax
inc edx
mov dword [ebp - 0x94], edx
mov ecx, dword [ebp - 0x19c]
sub ecx, dword [ebp - 0x30]
cmp edx, 0xdb62
setle al
sub ecx, eax
mov eax, dword [ebp - 0x3c]
neg ecx
sbb ecx, ecx
xor edx, edx
inc ecx
cmp ecx, 0x4d71b36c
setge dl
xor ecx, ecx
cmp edx, eax
setl cl
mov dword [ebp - 0x38], ecx
add esi, 2
jmp 0x10009985
mov dword [ebp - 0x18], 0xa4a12b57
mov dword [ebp - 0x28], 0x9d19ac19
mov dword [ebp - 0x18], ebx
jmp 0x10009c91
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x198], 0x799ac789
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 1
jl 0x10009c80
mov byte [ebp - 0x1d], bl
cmp byte [ebp - 0x1d], bl
je 0x10009caa
push 0x235d
call dword [sym.imp.USER32.dll_GetQueueStatus]
mov dword [ebp - 0x18], ebx
cmp dword [ebp - 0x18], ebx
jl 0x10009ccf
mov byte [ebp - 0x1d], bl
cmp byte [ebp - 0x1d], bl
je 0x10009cca
push 0x2601
push 0x1e5
call dword [sym.imp.USER32.dll_IsDlgButtonChecked]
dec dword [ebp - 0x18]
jns 0x10009cb2
xor eax, eax
or esi, 0xffffffff
mov word [ebp - 0x116], ax
mov dword [ebp - 0x2c], 0x730f94f3
mov dword [ebp - 0x34], 0x8382bdb9
mov dword [ebp - 0x24], 0x34859bb
mov dword [ebp - 0x40], 2
mov dword [ebp - 0x28], esi
mov dword [ebp - 0x38], ebx
mov dword [ebp - 0x18], ebx
jmp 0x10009d13
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0xd8], 0x4ec2e0cf
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 4
jl 0x10009d02
mov dword [ebp - 0x2c], 3
cmp dword [ebp - 0x2c], ebx
jl 0x10009eba
mov dword [ebp - 0x3c], 0xe3580d4
mov dword [ebp - 0x1c], 0xfffffffa
mov dword [ebp - 0x18], 0x4c95
cmp dword [ebp - 0x18], 0x4e31
jle 0x10009d8a
mov edi, ebx
mov esi, ebx
mov ecx, ebx
mov dword [ebp - 0x30], ebx
mov eax, esi
cdq
idiv ecx
mov eax, edi
mov ecx, 0x1007f2b8
sub eax, edx
cdq
push edx
push eax
call fcn.1000473c
mov ecx, dword [ebp - 0x30]
inc ecx
mov dword [ebp - 0x30], ecx
cmp ecx, 0x6ee0
jl 0x10009d50
inc esi
cmp esi, 0x7990
jl 0x10009d4b
inc edi
cmp edi, 0x4b0c
jl 0x10009d49
or esi, 0xffffffff
mov dword [ebp - 0x1c], ebx
jmp 0x10009da0
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0x1f8], 0xd8b9dbea
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 3
jl 0x10009d8f
mov dword [ebp - 4], 8
cmp dword [ebp - 0x18], 0x49bf
jge 0x10009de6
mov edx, str.nxcrndwhw_ugjm_ftja_gituehb_nugft_iwuumm
mov ecx, 0x1007f2b8
call fcn.1000877a
jmp 0x10009de6
push 5
mov dword [ebp - 4], esi
pop ecx
mov dword [ebp - 0x1c], ebx
jmp 0x10009dfe
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0x164], ecx
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 3
jl 0x10009df1
mov eax, dword [ebp - 0x2c]
mov ecx, dword [ebp + eax*4 - 0xd8]
mov eax, dword [ebp - 0x164]
imul ecx, eax
mov eax, dword [ebp - 0x34]
dec dword [ebp - 0x34]
cmp eax, ecx
jl 0x10009e26
xor edx, edx
inc edx
jmp 0x10009e28
mov edx, ebx
mov dword [ebp - 0x24], 0xcc099a56
cmp dword [ebp - 0x24], ebx
je 0x10009e39
xor ecx, ecx
inc ecx
jmp 0x10009e3b
mov ecx, ebx
xor eax, eax
cmp edx, ecx
setl al
mov dword [ebp - 0xd8], eax
mov dword [ebp - 0x24], 0xfffffff0
jmp 0x10009eac
mov dword [ebp - 0x1c], ebx
cmp dword [ebp - 0x1c], 3
jg 0x10009ea9
mov eax, dword [ebp - 0x2c]
xor ebx, ebx
mov eax, dword [ebp + eax*4 - 0xd8]
test eax, eax
mov dword [ebp - 0x1f0], 0x585c
mov eax, dword [ebp - 0x164]
setne bl
xor edx, edx
cmp eax, 0x585c
mov eax, dword [ebp - 0x164]
setge dl
xor ecx, ecx
cmp eax, edx
mov eax, dword [ebp - 0x1c]
setl cl
add ecx, ebx
mov dword [ebp + eax*4 - 0xd8], ecx
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 3
jle 0x10009e5a
xor ebx, ebx
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], 9
jne 0x10009e51
dec dword [ebp - 0x2c]
jmp 0x10009d20
mov dword [ebp - 0x24], ebx
jmp 0x10009efa
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp + eax*4 - 0xd8]
mov eax, dword [ebp - 0x40]
mov ecx, dword [ebp - 0x2c]
sub ecx, eax
mov eax, dword [ebp - 0x24]
mov dword [ebp + eax*4 - 0xd8], ecx
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp + eax*4 - 0xd8]
mov eax, dword [ebp - 0x34]
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x40]
mov eax, dword [ebp - 0x38]
mov dword [ebp - 0x2c], eax
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], 3
jle 0x10009ebf
xor eax, eax
mov dword [ebp - 0x1b4], 7
mov word [ebp - 0x1c8], ax
lea ecx, [ebp - 0x1c8]
lea eax, [ebp - 0x124]
mov dword [ebp - 0x1b8], ebx
push eax
call fcn.1000b67d
mov dword [ebp - 4], 0xa
lea ecx, [ebp - 0x108]
mov dword [ebp - 0x34], 0xc04ccb63
mov dword [ebp - 0x18], 0x7278fa8f
mov dword [ebp - 0x2c], 6
mov dword [ebp - 0x1c], esi
mov dword [ebp - 0x18], 0x3090707e
push 2
call fcn.100049ee
mov byte [ebp - 4], 0xb
xor edx, edx
mov dword [ebp - 0x28], 0x125b
inc edx
mov dword [ebp - 0x24], ebx
jmp 0x10009f7f
mov eax, dword [ebp - 0x24]
mov dword [ebp + eax*4 - 0x48], 6
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], edx
jl 0x10009f71
mov dword [ebp - 0x24], ebx
jmp 0x10009f9a
mov eax, dword [ebp - 0x24]
mov dword [ebp + eax*4 - 0x1b0], 0xded1
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], 2
jl 0x10009f89
mov dword [ebp - 0x24], ebx
jmp 0x10009fb8
mov ecx, dword [ebp - 0x24]
mov eax, dword [ebp - 0x108]
mov dword [eax + ecx*4], 0x761b8ce2
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], 2
jl 0x10009fa5
cmp dword [ebp - 0x34], ebx
jne 0x10009fe9
mov eax, dword [ebp - 0x34]
xor edx, edx
mov ecx, dword [ebp - 0x34]
mov eax, dword [ebp - 0x34]
cmp ecx, eax
setl dl
mov dword [ebp - 0x18], edx
xor edx, edx
mov ecx, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x18]
cmp eax, ecx
setne dl
mov dword [ebp - 0x1c], edx
xor edx, edx
inc edx
cmp dword [ebp - 0x2c], ebx
jne 0x10009ff3
cmp dword [ebp - 0x1c], ebx
je 0x10009ff6
mov eax, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x34]
cmp eax, dword [ebp - 0x34]
jle 0x1000a0df
mov byte [ebp - 0x1d], bl
cmp byte [ebp - 0x1d], 0
je 0x1000a021
push 0x90
push ebx
push 0x2141
push 0x534
call dword [sym.imp.USER32.dll_GetDlgItemTextA]
lea ecx, [ebp - 0x108]
mov byte [ebp - 4], 0xa
call fcn.10004a4b
xor eax, eax
lea edi, [ebp - 0x124]
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
mov dword [ebp - 0x18], 0xfffb
mov dword [ebp - 0x34], ebx
mov dword [ebp - 0x30], 1
mov dword [ebp - 0x28], 0xfffffffe
mov dword [ebp - 0x28], 0x9bf5e4d8
mov dword [ebp - 0x2c], 0x20410224
mov dword [ebp - 0x28], 0xae89405d
mov dword [ebp - 0x28], 0x6e1c
cmp dword [ebp - 0x28], 0x6f06
jle 0x1000a0a2
mov esi, ebx
mov edi, ebx
lea eax, [edi + esi]
mov ecx, 0x1007f2b8
cdq
push edx
push eax
call fcn.1000473c
inc edi
cmp edi, 0x6468
jl 0x1000a07d
inc esi
cmp esi, 0x604f
jl 0x1000a07b
or esi, 0xffffffff
mov dword [ebp - 0x14c], ebx
mov dword [ebp - 0x148], ebx
mov dword [ebp - 0x144], ebx
mov dword [ebp - 0x140], ebx
mov byte [ebp - 4], 0xf
cmp dword [ebp - 0x28], 0x6bc1
jge 0x1000a394
mov edx, str.jcvzpgvt_psrvi_ssay_gakjhh_xkxnc_akvevdz_wzm_spquwt_cnvuke
mov ecx, 0x1007f2b8
call fcn.1000877a
jmp 0x1000a394
mov dword [ebp - 0x24], edx
mov dword [ebp - 0x30], edx
mov byte [ebp - 0x1d], bl
cmp byte [ebp - 0x1d], 0
je 0x1000a0fa
push 0x14c7
push ebx
call dword [sym.imp.KERNEL32.dll_GetSystemDirectoryA]
mov dword [ebp - 0x1c], ebx
cmp dword [ebp - 0x1c], ebx
jl 0x1000a021
mov dword [ebp - 0x34], 0x44f34d89
lea ecx, [ebp - 0xc4]
push 3
call fcn.100049ee
mov byte [ebp - 4], 0xc
mov dword [ebp - 0x18], ebx
jmp 0x1000a136
mov ecx, dword [ebp - 0x18]
mov eax, dword [ebp - 0xc4]
mov dword [eax + ecx*4], 1
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 3
jl 0x1000a123
cmp dword [ebp - 0x24], ebx
jne 0x1000a145
mov eax, ebx
jmp 0x1000a148
xor eax, eax
inc eax
mov dword [ebp - 0x18], eax
xor ecx, ecx
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x1b0]
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x24]
cmp eax, 0xfffa
setl cl
mov dword [ebp - 0x18], ecx
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp + eax*4 - 0x48]
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0x108]
mov dword [eax + 4], 0xfffffffe
mov dword [ebp - 0x34], 0xfffffffe
cmp dword [ebp - 0x34], ebx
jne 0x1000a1fd
mov eax, dword [ebp - 0x24]
xor edx, edx
mov eax, dword [ebp - 0x34]
mov dword [ebp - 0x34], eax
mov ecx, dword [ebp - 0x24]
mov eax, dword [ebp - 0x48]
cmp eax, ecx
mov eax, dword [ebp - 0x34]
setge dl
xor ecx, ecx
cmp edx, eax
setg cl
xor edx, edx
add ecx, dword [ebp - 0x24]
mov eax, dword [ebp - 0x34]
imul ecx, eax
mov eax, dword [ebp - 0xc4]
mov dword [eax + 8], ecx
mov dword [ebp - 0x30], ecx
mov ecx, dword [ebp - 0x30]
mov eax, dword [ebp - 0x24]
cmp ecx, eax
mov eax, dword [ebp - 0x1c]
setg dl
xor ecx, ecx
mov eax, dword [ebp + eax*4 - 0x48]
cmp edx, eax
mov eax, dword [ebp - 0x1c]
setge cl
xor edx, edx
cmp ecx, 0xfffffff9
setne dl
imul edx, dword [ebp + eax*4 - 0x48]
test edx, edx
je 0x1000a1fa
mov eax, dword [ebp - 0x30]
mov eax, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x1c]
mov edx, dword [ebp + eax*4 - 0x48]
mov eax, dword [ebp - 0x24]
cmp esi, eax
sbb eax, eax
xor ecx, ecx
inc eax
cmp eax, edx
setne cl
mov dword [ebp - 0x18], ecx
mov dword [ebp - 0x2c], ebx
cmp dword [ebp - 0x2c], ebx
jg 0x1000a35e
mov dword [ebp - 0x28], 0x58b7
cmp dword [ebp - 0x28], 0x5a1e
jle 0x1000a293
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [ebp - 0x38], ebx
mov dword [ebp - 0x18], ebx
mov dword [ebp - 0x3c], 0x5a43
mov edi, dword [ebp - 0x18]
mov esi, ebx
lea eax, [edi + esi]
mov dword [ebp - 0x34], 0x2ab
mov dword [ebp - 0x40], eax
cdq
mov ecx, 0x1007f2b8
push edx
push eax
call fcn.1000473c
mov eax, dword [ebp - 0x40]
dec eax
dec dword [ebp - 0x34]
mov dword [ebp - 0x40], eax
jne 0x1000a257
inc esi
cmp esi, 0x2530
jl 0x1000a24a
mov edi, dword [ebp - 0x38]
add dword [ebp - 0x18], edi
dec dword [ebp - 0x3c]
jne 0x1000a245
inc edi
mov dword [ebp - 0x38], edi
cmp edi, 0x2e8d
jl 0x1000a23b
or esi, 0xffffffff
mov byte [ebp - 4], 0xd
cmp dword [ebp - 0x28], 0x56ee
jge 0x1000a2d0
mov edx, str.pywmqly_hsfqxos_qaycxgbsn
mov ecx, 0x1007f2b8
call fcn.1000877a
jmp 0x1000a2d0
mov dword [ebp - 4], 0xc
mov dword [ebp - 0x18], ebx
jmp 0x1000a2ed
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0xc8], 0xf992ce4c
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 1
jl 0x1000a2dc
mov eax, dword [ebp - 0xc4]
mov ecx, 0xa7464c66
mov eax, dword [eax + 4]
mov dword [ebp - 0x18], eax
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x108]
mov dword [eax + 4], 0x40743585
mov eax, dword [ebp - 0x30]
cmp ecx, eax
mov eax, dword [ebp - 0xc8]
sbb ecx, ecx
xor edx, edx
inc ecx
cmp eax, ecx
mov eax, dword [ebp - 0xc4]
mov ecx, 0x6e99
setl dl
mov dword [eax + 8], edx
mov dword [ebp - 0x28], edx
mov edx, dword [ebp - 0x28]
mov eax, dword [ebp - 0x1c]
neg edx
sbb edx, edx
neg edx
mov eax, dword [ebp + eax*4 - 0x48]
sub ecx, edx
sub ecx, eax
neg ecx
sbb ecx, ecx
inc ecx
mov dword [ebp - 0x18], ecx
inc dword [ebp - 0x2c]
jmp 0x1000a219
lea ecx, [ebp - 0xc4]
mov byte [ebp - 4], 0xb
call fcn.10004a4b
dec dword [ebp - 0x1c]
jmp 0x1000a0fd
mov dword [ebp - 4], 0xa
mov edi, 0xffff
mov dword [ebp - 0x1c], ebx
jmp 0x1000a3b2
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0x1ec], esi
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 3
jl 0x1000a3a5
mov dword [ebp - 0x1c], ebx
jmp 0x1000a3ce
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0x208], 0xbfcf419c
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 4
jl 0x1000a3bd
mov ecx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x34]
dec ecx
neg ecx
push dword [ebp - 0xf8]
sbb ecx, ecx
xor edx, edx
neg ecx
cmp ecx, eax
mov eax, dword [ebp - 0x30]
setne dl
xor ecx, ecx
cmp edx, eax
setl cl
xor edx, edx
inc edx
sub edx, ecx
sub edx, dword [ebp - 0x30]
mov eax, dword [ebp - 0x30]
neg edx
sbb edx, edx
xor ecx, ecx
inc edx
cmp edx, eax
setle cl
xor edx, edx
mov dword [ebp - 0x28], ecx
mov ecx, dword [ebp - 0x28]
mov eax, dword [ebp - 0x34]
cmp ecx, eax
mov eax, dword [ebp - 0x34]
setne dl
xor ecx, ecx
cmp edx, eax
setle cl
dec ecx
mov dword [ebp - 0x1e8], ecx
lea ecx, [ebp - 0x1e0]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x28], eax
mov eax, dword [ebp - 0x28]
sub eax, dword [ebp - 0x30]
imul eax, dword [ebp - 0x18]
imul eax, dword [ebp - 0x18]
mov dword [ebp - 0x2c], eax
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x2c]
mov dword [ebp - 0x204], eax
dec dword [ebp - 0x140]
call fcn.10004851
mov byte [ebp - 4], 0x11
lea ecx, [ebp - 0xac]
mov dword [ebp - 0x2c], ebx
push 1
call fcn.100049ee
xor edx, edx
inc edx
mov dword [ebp - 0x34], edx
mov dword [ebp - 0x30], 8
mov dword [ebp - 0x24], ebx
jmp 0x1000a49f
mov ecx, dword [ebp - 0x24]
mov eax, dword [ebp - 0xac]
mov dword [eax + ecx*4], edx
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], edx
jl 0x1000a490
mov dword [ebp - 0x24], ebx
jmp 0x1000a4ba
mov eax, dword [ebp - 0x24]
mov dword [ebp + eax*4 - 0x88], 0x80d68f98
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], 2
jl 0x1000a4a9
mov dword [ebp - 0x24], ebx
jmp 0x1000a4d3
mov eax, dword [ebp - 0x24]
mov dword [ebp + eax*4 - 0x70], 7
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], edx
jl 0x1000a4c5
mov eax, dword [ebp - 0x2c]
xor edx, edx
mov ecx, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x2c]
cmp ecx, eax
setg dl
add edx, edi
mov dword [ebp - 0x34], edx
mov eax, dword [ebp - 0x34]
sub eax, dword [ebp - 0x2c]
sub eax, dword [ebp - 0x2c]
neg eax
sbb eax, eax
xor edx, edx
inc eax
mov dword [ebp - 0x84], eax
mov eax, dword [ebp - 0x30]
mov eax, dword [ebp - 0x70]
mov eax, dword [ebp - 0x30]
mov ecx, dword [ebp - 0x2c]
mov eax, dword [ebp - 0xac]
mov dword [eax], ecx
mov eax, dword [ebp - 0x2c]
cmp eax, ecx
mov eax, dword [ebp - 0x2c]
setl dl
xor ecx, ecx
cmp eax, edx
setge cl
xor edx, edx
inc edx
cmp ecx, edx
jle 0x1000a5f4
mov dword [ebp - 0x1c], 0x137d3709
mov ecx, ebx
mov dword [ebp - 0x18], edx
cmp dword [ebp - 0x1c], ebx
je 0x1000a547
mov ecx, edx
xor eax, eax
test ecx, ecx
setns al
sub eax, dword [ebp - 0x1c]
je 0x1000a558
cmp dword [ebp - 0x1c], ebx
jne 0x1000a55a
mov edx, ebx
mov eax, dword [ebp - 0x1c]
xor ecx, ecx
cmp edx, eax
mov eax, dword [ebp - 0x1c]
setle cl
xor edx, edx
cmp eax, ecx
mov eax, dword [ebp - 0x84]
setle dl
xor ecx, ecx
cmp edx, eax
mov eax, dword [ebp - 0x1c]
setge cl
imul eax, ecx
test eax, eax
je 0x1000a590
cmp dword [ebp - 0x88], ebx
je 0x1000a590
xor ebx, ebx
inc ebx
mov eax, dword [ebp - 0x84]
xor ecx, ecx
cmp ebx, esi
setl cl
xor edx, edx
cmp ecx, eax
mov eax, dword [ebp - 0x70]
mov ecx, dword [ebp - 0x2c]
setge dl
xor ebx, ebx
cmp edx, eax
mov eax, dword [ebp - 0xac]
sete bl
xor edx, edx
cmp dword [eax], ecx
setge dl
sub edx, ebx
neg edx
sbb edx, edx
xor ecx, ecx
inc edx
mov dword [ebp - 0x18], edx
mov eax, dword [ebp - 0x18]
cmp eax, 0x4d7e
mov eax, dword [ebp - 0xac]
setl cl
cmp edi, ecx
sbb ecx, ecx
neg ecx
mov dword [eax], ecx
mov eax, dword [ebp - 0x18]
imul eax, dword [ebp - 0x30]
xor ebx, ebx
mov dword [ebp - 0x84], eax
jmp 0x1000a65b
mov dword [ebp - 0x18], 0xab83
mov dword [ebp - 0x28], edx
mov dword [ebp - 0x18], esi
mov edx, dword [ebp - 0x70]
mov eax, dword [ebp - 0x18]
neg edx
sbb edx, edx
xor ecx, ecx
inc edx
cmp edx, eax
setg cl
xor edx, edx
mov dword [ebp - 0x84], ecx
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x34]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x70]
mov eax, dword [ebp - 0x30]
cmp eax, 1
setge dl
xor ecx, ecx
mov dword [ebp - 0x84], edx
mov eax, dword [ebp - 0x18]
cmp edx, eax
mov eax, dword [ebp - 0xac]
setne cl
xor edx, edx
cmp ecx, dword [eax]
setg dl
sub edx, 0x8b20606
neg edx
sbb edx, edx
inc edx
mov dword [ebp - 0x28], edx
lea ecx, [ebp - 0xac]
call fcn.10004a4b
mov dword [ebp - 0x3c], 0x5499
cmp dword [ebp - 0x3c], 0x5859
jle 0x1000a6ce
mov edi, ebx
mov dword [ebp - 0x38], ebx
mov esi, ebx
mov dword [ebp - 0x28], ebx
mov ecx, esi
mov dword [ebp - 0x40], edi
mov esi, edi
mov dword [ebp - 0x30], ebx
sar esi, cl
mov edi, ebx
mov eax, esi
mov ecx, 0x1007f2b8
or eax, edi
cdq
push edx
push eax
call fcn.1000473c
inc edi
cmp edi, 0x7a99
jl 0x1000a68e
mov esi, dword [ebp - 0x28]
mov edi, dword [ebp - 0x38]
inc esi
mov dword [ebp - 0x28], esi
cmp esi, 0x15e6
jl 0x1000a680
inc edi
mov dword [ebp - 0x38], edi
cmp edi, 0x311c
jl 0x1000a67b
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_GetExitCodeProcess]
push 0x5c
pop eax
push 2
mov dword [ebp - 0x58], 0x56048400
mov ecx, ebx
mov word [ebp - 0x54], 0xdf61
mov byte [ebp - 0x52], 0x49
mov word [ebp - 0x4c], ax
pop esi
cmp esi, 2
jne 0x1000a6f9
push 5
pop eax
mov ecx, eax
mov esi, eax
jmp 0x1000a720
movzx edx, byte [ebp + esi - 0x57]
mov eax, esi
sub eax, ecx
movzx eax, byte [ebp + eax - 0x5a]
movzx eax, word [ebp + eax*2 - 0x4c]
mov ecx, eax
and eax, edx
or ecx, edx
sub ecx, eax
movzx eax, byte [ebp + esi - 0x58]
mov word [ebp + eax*2 - 0x4c], cx
mov ecx, ebx
add esi, 2
cmp esi, 7
jb 0x1000a6eb
xor eax, eax
mov byte [ebp - 4], 0x12
cmp dword [ebp - 0x3c], 0x516c
mov word [ebp - 0x4a], ax
jge 0x1000a768
mov edx, str.pztv_kvcskepvy_hpwesmbb_myksec_edhv_ysiuolv_gpfvjptm
mov ecx, 0x1007f2b8
call fcn.1000877a
jmp 0x1000a768
mov dword [ebp - 4], 0x11
lea ecx, [ebp - 0xb8]
mov dword [ebp - 0x2c], 1
push 1
call fcn.100049ee
mov byte [ebp - 4], 0x14
lea ecx, [ebp - 0xe4]
xor eax, eax
mov dword [ebp - 0x28], 0x907c4e7c
inc eax
mov dword [ebp - 0x28], 2
mov dword [ebp - 0x28], eax
push eax
call fcn.100049ee
mov dword [ebp - 0x28], ebx
xor edx, edx
mov dword [ebp - 0x28], 0x4605dd88
inc edx
mov dword [ebp - 0x1c], ebx
jmp 0x1000a7cc
mov ecx, dword [ebp - 0x1c]
mov eax, dword [ebp - 0xb8]
mov dword [eax + ecx*4], 0x3ac2
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], edx
jl 0x1000a7b9
mov dword [ebp - 0x1c], ebx
jmp 0x1000a7e9
mov ecx, dword [ebp - 0x1c]
mov eax, dword [ebp - 0xe4]
mov dword [eax + ecx*4], 0x212908cd
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], edx
jl 0x1000a7d6
mov eax, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x2c]
mov eax, dword [ebp - 0xb8]
mov edx, dword [eax]
xor eax, eax
cmp edx, 0x1c36b586
setne al
xor ecx, ecx
cmp eax, 0x29ed
setne cl
xor eax, eax
cmp ecx, edx
setge al
add eax, edx
mov dword [ebp - 0x28], eax
mov eax, dword [ebp - 0x28]
mov dword [ebp - 0x28], eax
mov eax, dword [ebp - 0x28]
mov dword [ebp - 0x28], eax
mov eax, dword [ebp - 0x28]
cmp dword [ebp - 0x2c], 0x3758
mov edi, dword [ebp - 0xb8]
jl 0x1000a843
cmp dword [edi], ebx
jne 0x1000a843
mov ecx, ebx
jmp 0x1000a846
xor ecx, ecx
inc ecx
xor eax, eax
cmp ecx, 0xfffffff9
setge al
xor edx, edx
imul eax, eax, 9
cmp eax, dword [edi]
mov eax, dword [ebp - 0xe4]
mov edi, dword [edi]
setle dl
xor ecx, ecx
mov esi, dword [eax]
mov eax, dword [ebp - 0x2c]
cmp eax, edx
setge cl
xor eax, eax
imul ecx, esi
cmp ecx, edi
setne al
xor ecx, ecx
cmp eax, 0xfffffff6
setg cl
xor eax, eax
cmp ecx, esi
setle al
xor edx, edx
cmp eax, 0xfffffffb
mov eax, dword [ebp - 0x2c]
setge dl
xor ecx, ecx
add edx, edi
cmp eax, edx
setge cl
mov dword [ebp - 0x28], ecx
cmp dword [ebp - 0x28], ebx
jne 0x1000a8a4
mov eax, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x2c]
xor edx, edx
mov eax, dword [ebp - 0xe4]
cmp dword [eax], ebx
mov eax, dword [ebp - 0x2c]
setge dl
xor ecx, ecx
cmp edx, eax
mov eax, dword [ebp - 0xb8]
setl cl
xor edx, edx
cmp ecx, dword [eax]
lea ecx, [ebp - 0xe4]
mov eax, dword [ebp - 0xe4]
setle dl
mov dword [eax], edx
mov dword [ebp - 0x28], edx
call fcn.10004a4b
lea ecx, [ebp - 0xb8]
mov byte [ebp - 4], 0x11
call fcn.10004a4b
xor eax, eax
mov dword [ebp - 0x128], 7
mov word [ebp - 0x13c], ax
lea ecx, [ebp - 0x13c]
lea eax, [ebp - 0x4c]
mov dword [ebp - 0x12c], ebx
push eax
call fcn.1000b67d
mov byte [ebp - 4], 0x15
or esi, 0xffffffff
mov dword [ebp - 0x18], esi
mov dword [ebp - 0x18], ebx
jmp 0x1000a950
mov dword [ebp - 0x28], 0xacd7
mov byte [ebp - 0x1d], bl
cmp byte [ebp - 0x1d], 0
je 0x1000a94a
push ebx
push ebx
push 0x21b5
push 0x1ce2
push ebx
call dword [sym.imp.USER32.dll_InsertMenuA]
mov eax, dword [ebp - 0x28]
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 0x17
jne 0x1000a927
mov dword [ebp - 0x4c], ebx
mov dword [ebp - 0x3c], 0x20af
cmp dword [ebp - 0x3c], 0x2172
jle 0x1000a9d5
push ebx
push 0x150d
call dword [sym.imp.GDI32.dll_RectVisible]
mov esi, ebx
mov dword [ebp - 0x38], ebx
mov dword [ebp - 0x40], esi
mov dword [ebp - 0x28], 0x6d68
mov edi, ebx
mov ecx, edi
mov eax, esi
sar eax, cl
mov ecx, 0x1007f2b8
cdq
push edx
push eax
call fcn.1000473c
inc edi
cmp edi, 0x1ddf
jl 0x1000a986
dec esi
dec dword [ebp - 0x28]
jne 0x1000a984
mov esi, dword [ebp - 0x38]
inc esi
mov dword [ebp - 0x38], esi
cmp esi, 0x1efc
jl 0x1000a97a
push ebx
push 0x1898
push 0x112a
push 0x1765
push 0x195a
call dword [sym.imp.GDI32.dll_CreateBitmap]
or esi, 0xffffffff
mov byte [ebp - 4], 0x16
cmp dword [ebp - 0x3c], 0x1e8d
jge 0x1000aa12
mov edx, str.orpf_wamsptn_dwz_yjsfbhi_aiyn_niupioh_ahmv_gifqpxl_mtofwwdj_put_eyx_tuabfd_cwzloxaf_lsuf
mov ecx, 0x1007f2b8
call fcn.1000877a
jmp 0x1000aa12
push 4
lea ecx, [ebp - 0xf4]
mov dword [ebp - 4], 0x15
call fcn.100049ee
mov byte [ebp - 4], 0x18
mov dword [ebp - 0x24], ebx
mov dword [ebp - 0x38], 0x56cf6d70
mov dword [ebp - 0x28], 0x6221
mov dword [ebp - 0x28], 0xf4926a67
mov dword [ebp - 0x24], ebx
jmp 0x1000aa5a
mov ecx, dword [ebp - 0x24]
mov eax, dword [ebp - 0xf4]
mov dword [eax + ecx*4], 0x456160cb
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], 4
jl 0x1000aa47
mov dword [ebp - 0x40], 0x3372
cmp dword [ebp - 0x40], 0x35ab
jle 0x1000aad5
mov edi, ebx
mov dword [ebp - 0x3c], ebx
mov esi, ebx
mov dword [ebp - 0x38], ebx
mov edx, edi
mov dword [ebp - 0x30], ebx
mov ecx, esi
mov edi, ebx
sar edx, cl
mov dword [ebp - 0x28], edx
mov esi, ebx
mov ecx, esi
mov eax, edi
sar eax, cl
mov ecx, 0x1007f2b8
and eax, edx
cdq
push edx
push eax
call fcn.1000473c
mov edx, dword [ebp - 0x28]
inc esi
cmp esi, 0x45c3
jl 0x1000aa8a
inc edi
cmp edi, 0x2d2
jl 0x1000aa88
mov esi, dword [ebp - 0x38]
mov edi, dword [ebp - 0x3c]
inc esi
mov dword [ebp - 0x38], esi
cmp esi, 0x4864
jl 0x1000aa7a
inc edi
mov dword [ebp - 0x3c], edi
cmp edi, 0x59fc
jl 0x1000aa75
or esi, 0xffffffff
mov dword [ebp - 0x24], ebx
jmp 0x1000aaeb
mov eax, dword [ebp - 0x24]
mov dword [ebp + eax*4 - 0xe8], 0xf81a770a
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], 1
jl 0x1000aada
mov byte [ebp - 4], 0x19
cmp dword [ebp - 0x40], 0x3233
jge 0x1000ab2e
mov edx, str.ykcfkiq_fab_mdbrphi_cwsljgkt_dqtdr_uawntxpt_eopai
mov ecx, 0x1007f2b8
call fcn.1000877a
jmp 0x1000ab2e
push 5
mov dword [ebp - 4], 0x18
pop edi
mov dword [ebp - 0x24], ebx
jmp 0x1000ab4e
mov eax, dword [ebp - 0x24]
mov dword [ebp + eax*4 - 0xfc], 1
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], 1
jl 0x1000ab3d
mov dword [ebp - 0x24], ebx
jmp 0x1000ab6a
mov eax, dword [ebp - 0x24]
mov dword [ebp + eax*4 - 0x16c], 0x1e9426ce
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], 1
jl 0x1000ab59
mov ecx, dword [ebp - 0xf4]
xor edx, edx
mov eax, dword [ecx + 4]
cmp eax, dword [ecx + 0xc]
setle dl
add edx, 0x4d91f06e
mov dword [ebp - 0x24], edx
mov dword [ebp - 0x24], 3
cmp dword [ebp - 0x24], ebx
jl 0x1000ad47
mov dword [ebp - 0x30], 0xfffffffa
lea ecx, [ebp - 0x17c]
mov dword [ebp - 0x28], esi
mov dword [ebp - 0x28], ebx
push 2
call fcn.100049ee
mov byte [ebp - 4], 0x1b
mov dword [ebp - 0x28], 0x13a3
cmp dword [ebp - 0x28], 0x1234
jge 0x1000ac65
lea eax, [ebp - 0x168]
push eax
lea eax, [ebp - 0x1a8]
push eax
lea eax, [ebp - 0x78]
push eax
push str._ld__ld__ld
call fcn.1004b29b
mov eax, dword [ebp - 0x78]
lea ecx, [ebp - 0x158]
add esp, 0x10
inc eax
push eax
call fcn.1000b5be
xor esi, esi
mov byte [ebp - 4], 0x1c
inc esi
cmp dword [ebp - 0x78], esi
jle 0x1000ac5a
lea eax, [ebp - 0x8c]
push eax
lea eax, [ebp - 0x90]
push eax
push str._ld__ld
call fcn.1004b29b
imul ecx, dword [ebp - 0x90], 0xc
lea eax, [ebp - 0x8c]
add esp, 0xc
add ecx, dword [ebp - 0x158]
push eax
call fcn.1000b62a
imul ecx, dword [ebp - 0x8c], 0xc
lea eax, [ebp - 0x90]
push eax
add ecx, dword [ebp - 0x158]
call fcn.1000b62a
inc esi
cmp esi, dword [ebp - 0x78]
jl 0x1000ac07
lea ecx, [ebp - 0x158]
call fcn.1000ba9c
mov dword [ebp - 0x28], 0xfffffff9
mov dword [ebp - 0x18], ebx
jmp 0x1000ac80
mov ecx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x17c]
mov dword [eax + ecx*4], edi
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 2
jl 0x1000ac71
mov edi, dword [ebp - 0x24]
xor ebx, ebx
mov ecx, dword [ebp - 0x24]
mov esi, dword [ebp - 0xf4]
mov eax, dword [ebp - 0xf4]
mov eax, dword [eax + ecx*4]
mov ecx, dword [ebp - 0x24]
mov dword [esi + edi*4], eax
mov eax, dword [ebp - 0x24]
add eax, 0xbe362803
add ecx, eax
mov dword [ebp - 0xe8], ecx
mov eax, dword [ebp - 0x24]
cmp eax, 0x3de76903
setle bl
add ebx, dword [ebp - 0x30]
mov edx, dword [ebp - 0x30]
neg ebx
mov eax, dword [ebp - 0x24]
imul edx, ecx
xor ecx, ecx
cmp edx, eax
mov eax, dword [ebp - 0x30]
setge cl
sub ebx, ecx
neg ebx
sbb ebx, ebx
xor ecx, ecx
inc ebx
cmp ebx, eax
mov eax, dword [ebp - 0x24]
setle cl
xor edx, edx
cmp ecx, eax
mov eax, dword [ebp - 0x24]
setle dl
xor ecx, ecx
cmp edx, eax
setne cl
xor eax, eax
cmp dword [esi + edi*4], ecx
mov ecx, 0xfffe
setne al
cmp ecx, eax
sbb eax, eax
xor ecx, ecx
inc eax
cmp eax, 0x9546
setne cl
or esi, 0xffffffff
cmp esi, ecx
mov dword [ebp - 0xfc], ecx
lea ecx, [ebp - 0x17c]
sbb eax, eax
neg eax
mov dword [ebp - 0x38], eax
inc dword [ebp - 0x28]
mov byte [ebp - 4], 0x18
call fcn.10004a4b
dec dword [ebp - 0x24]
push 0
pop ebx
push 5
pop edi
jns 0x1000ab9a
lea ecx, [ebp - 0xf4]
mov byte [ebp - 4], 0x15
call fcn.10004a4b
push 0x5f
pop eax
push 2
mov dword [ebp - 0x44], 0x23018600
mov ecx, ebx
mov word [ebp - 0x50], ax
pop esi
mov dword [ebp - 0x30], esi
cmp esi, 4
jae 0x1000ae68
movzx eax, byte [ebp - 0x44]
lea eax, [eax*2 + 2]
cmp esi, eax
jne 0x1000ae37
movzx eax, byte [ebp + esi - 0x44]
mov dword [ebp - 0x18], eax
inc eax
mov dword [ebp - 0x3c], 0x3d8e
cmp dword [ebp - 0x3c], 0x3f22
mov dword [ebp - 0x40], eax
jle 0x1000ade5
mov dword [ebp - 0x38], ebx
mov esi, ebx
mov dword [ebp - 0x28], 0x7e94
mov edi, ebx
mov eax, esi
mov ecx, 0x1007f2b8
or eax, edi
cdq
push edx
push eax
call fcn.1000473c
inc edi
cmp edi, 0x127e
jl 0x1000adb2
mov edi, dword [ebp - 0x38]
add esi, edi
dec dword [ebp - 0x28]
jne 0x1000adb0
inc edi
mov dword [ebp - 0x38], edi
cmp edi, 0x672b
jl 0x1000ada7
mov esi, dword [ebp - 0x30]
mov eax, dword [ebp - 0x18]
dec eax
mov byte [ebp - 4], 0x1d
add esi, eax
cmp dword [ebp - 0x3c], 0x3c76
mov dword [ebp - 0x28], esi
jge 0x1000ae2b
mov edx, str.pqhrvuboo_wpgklso_wnxjabpu_uau_bwrww_tyaqb_szgc_qrpow
mov ecx, 0x1007f2b8
call fcn.1000877a
jmp 0x1000ae2b
mov ecx, dword [ebp - 0x40]
mov dword [ebp - 4], 0x15
jmp 0x1000ae60
movzx edx, byte [ebp + esi - 0x43]
mov eax, esi
sub eax, ecx
movzx eax, byte [ebp + eax - 0x46]
movzx ecx, word [ebp + eax*2 - 0x50]
mov eax, ecx
and eax, edx
add eax, eax
sub ecx, eax
movzx eax, byte [ebp + esi - 0x44]
add ecx, edx
mov word [ebp + eax*2 - 0x50], cx
mov ecx, ebx
add esi, 2
jmp 0x1000ad69
mov dword [ebp - 0x40], 0x6067
cmp dword [ebp - 0x40], 0x6154
jle 0x1000aeec
mov edi, ebx
mov dword [ebp - 0x3c], ebx
mov esi, ebx
mov dword [ebp - 0x38], ebx
mov ecx, esi
mov dword [ebp - 0x30], edi
mov esi, edi
mov eax, ebx
shl esi, cl
mov dword [ebp - 0x28], eax
mov dword [ebp - 0x30], esi
mov ecx, eax
mov dword [ebp - 0x18], esi
mov edi, ebx
shl esi, cl
mov eax, edi
mov ecx, 0x1007f2b8
and eax, esi
cdq
push edx
push eax
call fcn.1000473c
inc edi
cmp edi, 0x10da
jl 0x1000ae9c
mov eax, dword [ebp - 0x28]
mov esi, dword [ebp - 0x30]
inc eax
mov dword [ebp - 0x28], eax
cmp eax, 0x43d5
jl 0x1000ae93
mov esi, dword [ebp - 0x38]
mov edi, dword [ebp - 0x3c]
inc esi
mov dword [ebp - 0x38], esi
cmp esi, 0x1312
jl 0x1000ae82
inc edi
mov dword [ebp - 0x3c], edi
cmp edi, 0x1cc8
jl 0x1000ae7d
push ebx
call dword [sym.imp.KERNEL32.dll_GetFileAttributesW]
xor eax, eax
mov byte [ebp - 4], 0x1f
cmp dword [ebp - 0x40], 0x5ee6
mov word [ebp - 0x4e], ax
jge 0x1000af2c
mov edx, str.datkdw_cltgyfba_jwlxy
mov ecx, 0x1007f2b8
call fcn.1000877a
jmp 0x1000af2c
mov dword [ebp - 4], 0x15
lea ecx, [ebp - 0x194]
xor eax, eax
mov dword [ebp - 0x180], 7
mov word [ebp - 0x194], ax
or esi, 0xffffffff
lea eax, [ebp - 0x50]
mov dword [ebp - 0x184], ebx
push eax
call fcn.1000b67d
mov byte [ebp - 4], 0x21
mov dword [ebp - 0x50], ebx
push dword [ebp - 0x12c]
cmp dword [ebp - 0x128], 8
lea eax, [ebp - 0x13c]
push ebx
cmovae eax, dword [ebp - 0x13c]
lea ecx, [ebp - 0x1e0]
push eax
call fcn.1000b9f9
cmp eax, esi
je 0x1000afa9
push esi
push ebx
lea ecx, [ebp - 0x194]
push ecx
push 1
push eax
lea ecx, [ebp - 0x1e0]
call fcn.1000b705
jmp 0x1000af65
mov dword [ebp - 0x24], esi
xor ecx, ecx
inc ecx
mov dword [ebp - 0x1c], ecx
push 0xfffffffffffffff7
pop eax
mov dword [ebp - 0x34], eax
mov dword [ebp - 0x18], eax
mov eax, dword [ebp - 0x1c]
add eax, dword [ebp - 0x24]
neg eax
je 0x1000afdb
mov eax, dword [ebp - 0x24]
mov eax, ecx
cmp dword [ebp - 0x24], ebx
jne 0x1000afd1
mov eax, ebx
cmp eax, dword [ebp - 0x34]
jne 0x1000afdb
cmp dword [ebp - 0x1c], ebx
jne 0x1000afdd
mov ecx, ebx
lea eax, [ecx - 0x98aa]
test eax, eax
jne 0x1000afea
mov eax, dword [ebp - 0x34]
mov eax, dword [ebp - 0x24]
add eax, 0x530b
je 0x1000b187
push 4
lea ecx, [ebp - 0x114]
call fcn.100049ee
mov dword [ebp - 0x28], esi
mov dword [ebp - 0x1c], ebx
jmp 0x1000b01b
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0x80], 0xcf1c
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 1
jl 0x1000b00d
mov dword [ebp - 0x1c], ebx
jmp 0x1000b039
mov ecx, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x114]
mov dword [eax + ecx*4], 0x68f57f54
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 4
jl 0x1000b026
mov dword [ebp - 0x1c], ebx
jmp 0x1000b062
mov eax, dword [ebp - 0x1c]
cmp dword [ebp + eax*4 - 0x80], ebx
jne 0x1000b067
mov byte [ebp - 0x1d], bl
cmp byte [ebp - 0x1d], 0
je 0x1000b05f
push ebx
push ebx
push ebx
call dword [sym.imp.ADVAPI32.dll_ControlService]
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], ebx
jle 0x1000b044
mov dword [ebp - 0x24], ebx
jmp 0x1000b16d
mov dword [ebp - 0x2c], 0x20f620a3
mov dword [ebp - 0x30], 3
mov dword [ebp - 0x18], ebx
jmp 0x1000b093
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0xa0], 0x550e3526
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 2
jl 0x1000b082
mov eax, dword [ebp - 0x34]
mov edx, 0x747c914a
mov eax, dword [ebp - 0x24]
mov dword [ebp - 0x18], 0x8fc5
mov eax, dword [ebp - 0x24]
sub edx, eax
neg edx
sbb edx, edx
xor ecx, ecx
inc edx
mov dword [ebp - 0x9c], edx
mov eax, dword [ebp - 0x18]
cmp eax, edx
mov eax, dword [ebp - 0x1c]
setge cl
xor edx, edx
cmp ecx, 0x91c8
setl dl
xor ecx, ecx
cmp edx, eax
setg cl
mov dword [ebp - 0x2c], ecx
mov eax, dword [ebp - 0x30]
mov eax, dword [ebp - 0x2c]
mov ecx, dword [ebp - 0x24]
mov eax, dword [ebp - 0x114]
neg ecx
sbb ecx, ecx
xor edx, edx
neg ecx
mov dword [eax], ebx
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x80]
cmp eax, ecx
mov eax, dword [ebp - 0x34]
setl dl
xor ecx, ecx
cmp edx, eax
setne cl
xor edx, edx
mov dword [ebp - 0x28], ecx
mov ecx, dword [ebp - 0x28]
mov eax, dword [ebp - 0x18]
cmp ecx, eax
setge dl
mov dword [ebp - 0x30], edx
mov eax, dword [ebp - 0x30]
mov eax, dword [ebp - 0x9c]
mov eax, dword [ebp - 0xa0]
mov eax, dword [ebp - 0x80]
mov ecx, dword [ebp - 0x1c]
sub ecx, eax
mov eax, dword [ebp - 0x114]
neg ecx
sbb ecx, ecx
xor edx, edx
inc ecx
imul ecx, ecx, 0xb9cc
cmp ecx, dword [eax]
setl dl
xor eax, eax
cmp edx, 0x633ef28f
setne al
mov dword [ebp - 0x18], eax
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x9c]
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0x2c], esi
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], 0x36
jne 0x1000b06f
lea ecx, [ebp - 0x114]
call fcn.10004a4b
jmp 0x1000b26c
mov dword [ebp - 0x38], 0x5fc5
cmp dword [ebp - 0x38], 0x6372
jle 0x1000b1fc
push ebx
push ebx
call dword [sym.imp.SHELL32.dll_Shell_NotifyIconW]
mov esi, ebx
mov edi, ebx
mov ecx, ebx
mov dword [ebp - 0x28], ebx
mov eax, edi
sar eax, cl
lea ecx, [ebp - 0x280]
or eax, esi
cdq
push edx
push eax
call fcn.10001a8a
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x1000b1c6
mov eax, dword [eax]
push eax
call fcn.1004b583
pop ecx
push ebx
push 1
lea ecx, [ebp - 0x280]
call fcn.10004d7a
mov ecx, dword [ebp - 0x28]
inc ecx
mov dword [ebp - 0x28], ecx
cmp ecx, 0x3679
jl 0x1000b1a8
inc edi
cmp edi, 0x10a7
jl 0x1000b1a3
inc esi
cmp esi, 0xc46
jl 0x1000b1a1
mov dword [ebp - 0x28], 9
cmp dword [ebp - 0x38], 0x5e9b
jge 0x1000b217
push str.fyurnsby_plytjpnbn_fldewdbex_jbow_ymcxupzpp_xsd_xeovwbeut_boduab_krpaiorfy
call fcn.1004b583
pop ecx
mov dword [ebp - 4], 0x21
mov dword [ebp - 0x38], 0x8281b7ff
mov byte [ebp - 0x1d], bl
cmp byte [ebp - 0x1d], 0
je 0x1000b241
push 0x19b3
push ebx
push ebx
push 0x205f
push ebx
call dword [sym.imp.SHELL32.dll_ExtractIconExW]
mov eax, dword [ebp - 0x34]
xor ecx, ecx
mov dword [ebp - 0x28], eax
mov eax, dword [ebp - 0x38]
cmp eax, 1
setge cl
sub ecx, dword [ebp - 0x34]
mov edx, dword [ebp - 0x28]
mov eax, dword [ebp - 0x24]
sub edx, ecx
neg edx
sbb edx, edx
xor ecx, ecx
inc edx
cmp edx, eax
setge cl
mov dword [ebp - 0x38], ecx
mov byte [ebp - 0x1d], bl
cmp byte [ebp - 0x1d], 0
je 0x1000b280
push 0x1d58
call dword [sym.imp.USER32.dll_GetDlgCtrlID]
mov ecx, dword [ebp - 0x98]
lea eax, [ebp - 0x1e0]
push eax
lea edx, [ebp - 0x1c8]
call fcn.1000bbb7
pop ecx
push ebx
push 1
lea ecx, [ebp - 0x194]
call fcn.10005081
push ebx
push 1
lea ecx, [ebp - 0x13c]
call fcn.10005081
push ebx
push 1
lea ecx, [ebp - 0x1e0]
call fcn.10005081
push ebx
push 1
lea ecx, [ebp - 0x1c8]
call fcn.10005081
mov ecx, dword [ebp - 0xc]
mov eax, dword [ebp - 0x98]
pop edi
pop esi
mov dword fs:[0], ecx
pop ebx
mov esp, ebp
pop ebp
ret