Function at 0x10001b45
Capabilities:
Query or enumerate registry value

Disassembly:
mov eax, 0x100600f9
call fcn.1005fa24
sub esp, 0x198
push ebx
push esi
xor ebx, ebx
mov dword [ebp - 0x2c], 0x5db0
cmp dword [ebp - 0x2c], 0x5e74
push edi
mov dword [ebp - 0x10], esp
mov dword [ebp - 0xac], edx
mov dword [ebp - 0x7c], ecx
mov dword [ebp - 0x164], ebx
jle 0x10001bb5
mov esi, ebx
mov edi, ebx
mov dword [ebp - 0x28], ebx
lea ecx, [ebx + edi]
mov eax, esi
sar eax, cl
mov ecx, 0x1007cff8
cdq
push edx
push eax
call fcn.10002e68
inc ebx
cmp ebx, 0x2a83
jl 0x10001b83
inc edi
push 0
pop ebx
cmp edi, 0x16e6
jl 0x10001b80
inc esi
cmp esi, 0x7d2e
jl 0x10001b7e
mov dword [ebp - 0x34], ebx
mov dword [ebp - 4], ebx
cmp dword [ebp - 0x2c], 0x5da2
jge 0x10001bd3
mov edx, str.tugckayl_zth_rllfllxzt_naiebbhpi_utxrgjj_osktgtpr_vwqtnmu_zkkr_hggzmdg_dypxg_igz_cxjd_weel_glabucs
mov ecx, 0x1007cff8
call fcn.100050b8
or dword [ebp - 4], 0xffffffff
mov dword [ebp - 0x34], 0xfffffff6
lea ecx, [ebp - 0xf8]
mov dword [ebp - 0x2c], 0x27d373ee
push 2
call fcn.10002fdf
push 2
mov dword [ebp - 0x18], ebx
pop edx
jmp 0x10001c2a
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x68], 0x7df2f4a8
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], edx
jl 0x10001c1c
mov dword [ebp - 0x18], ebx
jmp 0x10001c47
mov ecx, dword [ebp - 0x18]
mov eax, dword [ebp - 0xf8]
mov dword [eax + ecx*4], 0x81438367
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], edx
jl 0x10001c34
cmp dword [ebp - 0x64], ebx
jne 0x10001c55
mov eax, ebx
jmp 0x10001c58
xor eax, eax
inc eax
mov dword [ebp - 0x34], eax
xor edx, edx
mov eax, dword [ebp - 0x34]
mov dword [ebp - 0x34], eax
mov eax, dword [ebp - 0x64]
cmp eax, 0x6f3a
mov eax, dword [ebp - 0x64]
setg dl
xor ecx, ecx
cmp edx, eax
push 0xfffffffffffffffd
setge cl
mov dword [ebp - 0x2c], ecx
mov ecx, 0xffff
mov eax, dword [ebp - 0x68]
sub ecx, eax
mov eax, dword [ebp - 0x2c]
add eax, ecx
pop edi
cmp eax, edi
mov eax, dword [ebp - 0x64]
sbb ecx, ecx
xor edx, edx
inc ecx
cmp ecx, eax
mov ecx, dword [ebp - 0x34]
mov eax, dword [ebp - 0x64]
setle dl
imul ecx, edx
xor edx, edx
cmp eax, ecx
mov eax, dword [ebp - 0xf8]
lea ecx, [ebp - 0xf8]
setle dl
mov dword [eax + 4], edx
call fcn.1000301b
mov dword [ebp - 0x20], 0x57fd5464
mov eax, 0xfcf09cc2
mov dword [ebp - 0x30], 0xffffffff
mov dword [ebp - 0x30], 0x50ba1bf2
mov dword [ebp - 0xa4], eax
mov dword [ebp - 0xa0], eax
mov dword [ebp - 0x9c], eax
mov dword [ebp - 0x98], eax
mov dword [ebp - 0x30], 6
mov dword [ebp - 0x30], edi
mov dword [ebp - 0x30], 1
mov dword [ebp - 0x2c], 0xfffe
mov dword [ebp - 0x20], ebx
jmp 0x10001d26
cmp dword [ebp - 0x20], ebx
jne 0x10001d2c
mov byte [ebp - 0x19], bl
cmp byte [ebp - 0x19], 0
je 0x10001d23
call dword [sym.imp.KERNEL32.dll_SwitchToThread]
dec dword [ebp - 0x20]
cmp dword [ebp - 0x20], 0xffffffef
jle 0x10001d0f
inc dword [ebp - 0x2c]
lea ecx, [ebp - 0xb8]
push 3
call fcn.10002fdf
mov dword [ebp - 0x18], ebx
jmp 0x10001d52
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0xa8], 5
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 1
jl 0x10001d41
push 3
mov dword [ebp - 0x18], ebx
pop esi
jmp 0x10001d73
mov ecx, dword [ebp - 0x18]
mov eax, dword [ebp - 0xb8]
mov dword [eax + ecx*4], 0xfffffffc
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], esi
jl 0x10001d60
mov eax, dword [ebp - 0xb8]
mov dword [eax], ebx
mov dword [ebp - 0x24], 0xdae8c9f3
mov dword [ebp - 0x24], ebx
cmp dword [ebp - 0x24], ebx
jl 0x10001dc9
mov dword [ebp - 0x20], 5
mov dword [ebp - 0x20], ebx
jmp 0x10001daa
mov eax, dword [ebp - 0x24]
cmp dword [ebp + eax*4 - 0xa8], ebx
jne 0x10001daf
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], ebx
jle 0x10001d9b
mov byte [ebp - 0x19], bl
cmp byte [ebp - 0x19], 0
je 0x10001dc4
push 0x17f8
push ebx
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
dec dword [ebp - 0x24]
jns 0x10001d8f
mov byte [ebp - 0x19], bl
cmp byte [ebp - 0x19], 0
je 0x10001de8
push ebx
push 0xad2
push 0x155f
push 0x919
call dword [sym.imp.GDI32.dll_SetWindowOrgEx]
mov eax, dword [ebp - 0xb8]
inc dword [eax]
cmp dword [eax], 0
jle 0x10001d80
lea ecx, [ebp - 0xb8]
call fcn.1000301b
push 0x61
pop eax
push 2
mov word [ebp - 0x60], 0xdc04
mov byte [ebp - 0x5e], bl
mov dword [ebp - 0x5d], 0x31b0626
mov dword [ebp - 0x59], 0x10e053e
mov byte [ebp - 0x55], bl
mov word [ebp - 0x54], 0x302
mov word [ebp - 0xe4], ax
pop esi
movzx eax, byte [ebp + esi - 0x62]
movzx edx, byte [ebp + esi - 0x5f]
movzx ecx, word [ebp + eax*2 - 0xec]
mov eax, edx
and eax, ecx
add eax, eax
sub edx, eax
movzx eax, byte [ebp + esi - 0x60]
add edx, ecx
add esi, 2
mov word [ebp + eax*2 - 0xec], dx
cmp esi, 0xe
jb 0x10001e2d
xor eax, eax
mov word [ebp - 0xde], ax
mov dword [ebp - 0x28], 0x14d6
cmp dword [ebp - 0x28], 0x1508
jle 0x10001ec4
mov esi, ebx
mov dword [ebp - 0x2c], esi
mov dword [ebp - 0x34], 0x49fa
mov edi, ebx
mov ebx, dword [ebp - 0x2c]
mov eax, ebx
mov ecx, 0x1007cff8
xor eax, edi
cdq
push edx
push eax
call fcn.10002e68
inc edi
cmp edi, 0x1d75
jl 0x10001e88
dec ebx
dec dword [ebp - 0x34]
push 0
mov dword [ebp - 0x2c], ebx
pop ebx
jne 0x10001e83
inc esi
cmp esi, 0x3ccd
jl 0x10001e79
push ebx
push 0x424
push ebx
call dword [sym.imp.OLEAUT32.dll_SafeArrayDestroy]
mov dword [ebp - 0x20], ebx
lea ecx, [ebp - 0x88]
mov dword [ebp - 0x18], 0x278fa8f9
push 2
call fcn.10002fdf
push 2
pop eax
mov dword [ebp - 4], eax
xor edx, edx
mov dword [ebp - 0x2c], 0xffffffff
inc edx
mov dword [ebp - 0x24], edx
mov dword [ebp - 0x34], 0x4db5
mov dword [ebp - 0x24], ebx
cmp dword [ebp - 0x24], eax
jge 0x10001f12
mov ecx, dword [ebp - 0x24]
mov eax, dword [ebp - 0x88]
mov dword [eax + ecx*4], edx
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], 2
jl 0x10001efd
mov eax, dword [ebp - 0x20]
xor ecx, ecx
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x20]
cmp eax, 0xf545
push 3
setg cl
xor edx, edx
mov dword [ebp - 0x18], ecx
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x20]
add ecx, dword [ebp - 0x20]
mov eax, dword [ebp - 0x18]
cmp ecx, eax
mov eax, dword [ebp - 0x88]
setg dl
xor ecx, ecx
cmp edx, 0xffffffff
pop esi
setne cl
mov dword [eax], ecx
mov dword [ebp - 0x2c], esi
mov eax, dword [ebp - 0x2c]
sub eax, 4
je 0x10001fc1
mov dword [ebp - 0x30], 0xf4a0
lea ecx, [ebp - 0x148]
mov dword [ebp - 0x30], 0x6c7f05f4
mov dword [ebp - 0x30], 0xfffffff8
mov dword [ebp - 0x30], 0x11fb8eb5
mov dword [ebp - 0x30], 1
mov dword [ebp - 0x30], 0x26c4f32b
push 4
call fcn.10002fdf
mov dword [ebp - 0x20], ebx
jmp 0x10001fab
mov ecx, dword [ebp - 0x20]
mov eax, dword [ebp - 0x148]
mov dword [eax + ecx*4], 0xe35a12a2
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], 4
jl 0x10001f98
inc dword [ebp - 0x34]
lea ecx, [ebp - 0x148]
call fcn.1000301b
jmp 0x10002002
mov dword [ebp - 0x18], ebx
jmp 0x10001fd9
mov ecx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x88]
mov dword [eax + ecx*4], 0xfffffffb
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 2
jl 0x10001fc6
mov dword [ebp - 0x18], ebx
jmp 0x10001ffc
mov byte [ebp - 0x19], bl
cmp byte [ebp - 0x19], 0
je 0x10001ff9
push 0x1217
push ebx
call dword [sym.imp.ADVAPI32.dll_InitializeSecurityDescriptor]
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 1
jle 0x10001fe4
mov dword [ebp - 0x24], ebx
jmp 0x1000204c
mov dword [ebp - 0x2c], 0x8f43
mov byte [ebp - 0x19], bl
cmp byte [ebp - 0x19], 0
je 0x1000201d
call dword [sym.imp.USER32.dll_GetDoubleClickTime]
mov dword [ebp - 0x18], ebx
jmp 0x10002043
mov dword [ebp - 0x2c], 0xa44f34d8
xor ecx, ecx
mov edx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x2c]
cmp eax, 1
mov eax, dword [ebp - 0x88]
setle cl
mov dword [eax + edx*4], ecx
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 1
jle 0x10002022
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], 1
jle 0x10002007
lea ecx, [ebp - 0x88]
call fcn.1000301b
mov dword [ebp - 4], esi
cmp dword [ebp - 0x28], 0x1154
jge 0x10002078
mov edx, str.bqy_hvohfjqdk_wvvftz_qijmlzz_gyibbuhx
mov ecx, 0x1007cff8
call fcn.100050b8
or dword [ebp - 4], 0xffffffff
xor eax, eax
mov dword [ebp - 0x14c], 7
mov word [ebp - 0x160], ax
lea ecx, [ebp - 0x160]
lea eax, [ebp - 0xec]
mov dword [ebp - 0x150], ebx
push eax
call fcn.100033fa
mov dword [ebp - 4], 5
mov dword [ebp - 0x18], 4
mov dword [ebp - 0x20], ebx
jmp 0x100020ea
mov eax, dword [ebp - 0x20]
mov dword [ebp + eax*4 - 0x6c], 8
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], 1
jl 0x100020dc
mov dword [ebp - 0x18], ebx
cmp dword [ebp - 0x18], ebx
jl 0x10002161
push 2
lea ecx, [ebp - 0x110]
call fcn.10002fdf
mov dword [ebp - 0x20], ebx
jmp 0x1000211d
mov ecx, dword [ebp - 0x20]
mov eax, dword [ebp - 0x110]
mov dword [eax + ecx*4], 1
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], 2
jl 0x1000210a
mov esi, dword [ebp - 0x110]
mov dword [esi + 4], ebx
mov byte [ebp - 0x19], bl
cmp byte [ebp - 0x19], 0
je 0x10002147
push ebx
push 0x1076
push ebx
push 0x14ab
call dword [sym.imp.GDI32.dll_GetTextExtentPointA]
dec dword [esi + 4]
jns 0x1000212c
lea ecx, [ebp - 0x110]
call fcn.1000301b
dec dword [ebp - 0x18]
jns 0x100020f8
cmp dword [ebp - 0x18], ebx
je 0x10002175
mov eax, dword [ebp - 0x6c]
mov eax, dword [ebp - 0x6c]
mov eax, dword [ebp - 0x18]
cmp dword [ebp - 0x18], ebx
jle 0x10002172
mov eax, dword [ebp - 0x6c]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x18]
lea edi, [ebp - 0xec]
xor eax, eax
mov dword [ebp - 0x18], 1
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
mov dword [ebp - 0x20], ebx
jmp 0x1000219e
mov eax, dword [ebp - 0x20]
mov dword [ebp + eax*4 - 0x78], 9
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], 3
jl 0x10002190
mov dword [ebp - 0x78], ebx
jmp 0x1000226e
mov dword [ebp - 0x24], 0x3eb905d0
mov dword [ebp - 0x18], ebx
inc dword [ebp - 0x24]
mov dword [ebp - 0x24], ebx
jmp 0x10002261
mov dword [ebp - 0x20], 0x9dade661
xor edx, edx
mov dword [ebp - 0x34], 0xfffffff6
mov dword [ebp - 0x28], 0xedda5659
mov dword [ebp - 0x18], 0x1c71
mov ecx, dword [ebp - 0x78]
mov eax, dword [ebp - 0x24]
cmp eax, ecx
mov eax, dword [ebp - 0x20]
setge dl
xor ecx, ecx
sub edx, eax
add edx, dword [ebp - 0x24]
mov eax, dword [ebp - 0x18]
cmp eax, 0x756
push 5
setge cl
imul edx, ecx
pop eax
mov dword [ebp - 0x20], edx
cmp dword [ebp - 0x20], 0xc07c2076
sbb ecx, ecx
inc ecx
sub eax, ecx
mov dword [ebp - 0x34], eax
imul eax, dword [ebp - 0x74], 5
mov dword [ebp - 0x34], eax
cmp dword [ebp - 0x34], 3
jbe 0x10002227
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x20], 0x213072c0
mov eax, dword [ebp - 0x70]
mov edx, dword [ebp - 0x20]
sub edx, eax
cmp dword [ebp - 0x18], 6
sbb eax, eax
xor ecx, ecx
neg eax
cmp edx, eax
setl cl
xor edx, edx
cmp ecx, 0x2e71
setg dl
xor eax, eax
cmp edx, 0xe213
setg al
mov dword [ebp - 0x28], eax
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], 0x2e
jle 0x100021c1
inc dword [ebp - 0x78]
cmp dword [ebp - 0x78], 0xc
jl 0x100021ac
push dword [ebp - 0xac]
lea ecx, [ebp - 0x188]
call fcn.10002f7d
mov byte [ebp - 4], 6
or edi, 0xffffffff
mov dword [ebp - 0x20], edi
mov dword [ebp - 0x18], 0x90a23371
mov eax, dword [ebp - 0x20]
cmp eax, dword [ebp - 0x20]
jne 0x100022cb
xor ecx, ecx
inc ecx
mov dword [ebp - 0x28], ecx
mov dword [ebp - 0x2c], 0xa8628405
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], ebx
je 0x100022bd
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x28]
mov dword [ebp - 0x2c], ecx
jmp 0x100022fd
mov dword [ebp - 0x24], 0xc3b03c3f
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x18], 0x4a126529
mov dword [ebp - 0x20], ebx
mov dword [ebp - 0x28], 0xa754320e
mov dword [ebp - 0x2c], ebx
mov dword [ebp - 0x30], edi
mov byte [ebp - 0x19], bl
cmp byte [ebp - 0x19], 0
je 0x1000232e
push ebx
push 0x12ef
push 0x501
push 0x1a5c
push 0x4e
call dword [sym.imp.USER32.dll_SetScrollRange]
mov dword [ebp - 0x20], 0xffffffee
jmp 0x100023f5
mov dword [ebp - 0x24], ebx
lea ecx, [ebp - 0x104]
push 2
call fcn.10002fdf
mov dword [ebp - 0x34], 0x551f
mov dword [ebp - 0x28], 0xfffffff7
mov dword [ebp - 0x18], ebx
jmp 0x10002370
mov ecx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x104]
mov dword [eax + ecx*4], 1
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 2
jl 0x1000235d
mov eax, dword [ebp - 0x24]
xor edx, edx
mov ecx, dword [ebp - 0x24]
mov eax, dword [ebp - 0x20]
cmp eax, ecx
setle dl
xor ecx, ecx
cmp edx, 9
setg cl
xor eax, eax
cmp ecx, 0x7f19
setl al
cmp eax, 0xa9bc
jle 0x100023a3
mov eax, dword [ebp - 0x24]
mov dword [ebp - 0x28], 1
xor edx, edx
mov ecx, dword [ebp - 0x24]
mov eax, dword [ebp - 0x28]
cmp eax, ecx
setne dl
xor ecx, ecx
imul edx, dword [ebp - 0x20]
mov eax, dword [ebp - 0x2c]
neg edx
cmp edx, eax
setg cl
mov dword [ebp - 0x24], ecx
xor ecx, ecx
mov edx, dword [ebp - 0x34]
imul edx, dword [ebp - 0x24]
mov eax, dword [ebp - 0x104]
imul edx, dword [eax]
mov eax, dword [ebp - 0x30]
cmp edx, eax
setne cl
mov dword [ebp - 0x28], ecx
lea ecx, [ebp - 0x104]
call fcn.1000301b
dec dword [ebp - 0x20]
cmp dword [ebp - 0x20], 0xffffffe2
jle 0x1000233a
push 0x5c
pop eax
push 2
mov byte [ebp - 0x50], bl
mov ecx, ebx
mov dword [ebp - 0x4f], 0x26e10465
mov word [ebp - 0x4b], 0x6846
mov word [ebp - 0x48], ax
pop esi
cmp esi, 2
jne 0x10002427
push 5
pop ecx
push ecx
pop esi
jmp 0x1000244e
movzx edx, byte [ebp + esi - 0x4f]
mov eax, esi
sub eax, ecx
movzx eax, byte [ebp + eax - 0x52]
movzx eax, word [ebp + eax*2 - 0x48]
mov ecx, eax
and eax, edx
or ecx, edx
sub ecx, eax
movzx eax, byte [ebp + esi - 0x50]
mov word [ebp + eax*2 - 0x48], cx
mov ecx, ebx
add esi, 2
cmp esi, 7
jb 0x1000241b
xor eax, eax
mov word [ebp - 0x46], ax
mov dword [ebp - 0x30], edi
mov byte [ebp - 0x19], bl
cmp byte [ebp - 0x19], al
je 0x10002472
push 0x81c
call dword [sym.imp.KERNEL32.dll_IsProcessorFeaturePresent]
mov byte [ebp - 0x19], bl
cmp byte [ebp - 0x19], 0
je 0x10002483
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_FindNextFileA]
xor eax, eax
mov dword [ebp - 0xc8], 7
mov word [ebp - 0xdc], ax
lea ecx, [ebp - 0xdc]
lea eax, [ebp - 0x48]
mov dword [ebp - 0xcc], ebx
push eax
call fcn.100033fa
mov byte [ebp - 4], 7
mov dword [ebp - 0x20], 1
mov dword [ebp - 0x30], 0x9b546158
mov dword [ebp - 0x28], 0xb8c3ad3b
mov dword [ebp - 0x28], 0x8748afa2
mov dword [ebp - 0x28], 7
mov dword [ebp - 0x28], 0x23e86f8c
mov dword [ebp - 0x28], 0x97e780ca
mov dword [ebp - 0x20], 0xffffffee
jmp 0x100024fb
mov dword [ebp - 0x2c], edi
mov dword [ebp - 0x2c], ebx
mov dword [ebp - 0x2c], ebx
inc dword [ebp - 0x28]
mov eax, dword [ebp - 0x30]
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], 6
jle 0x100024e9
mov dword [ebp - 0x48], ebx
mov dword [ebp - 0x18], 0xc03342eb
mov dword [ebp - 0x30], 0xaed23b61
mov dword [ebp - 0x18], ebx
jmp 0x10002535
mov byte [ebp - 0x19], bl
cmp byte [ebp - 0x19], 0
je 0x1000252c
push ebx
push ebx
push ebx
push ebx
push ebx
push ebx
call dword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x30], eax
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 0x12
jge 0x10002517
mov dword [ebp - 0x18], ebx
jmp 0x1000254b
mov dword [ebp - 0x30], edi
cmp dword [ebp - 0x30], ebx
jne 0x10002551
dec dword [ebp - 0x18]
cmp dword [ebp - 0x18], 0xffffffec
je 0x10002540
push 0x5f
pop eax
push 2
mov byte [ebp - 0x40], bl
mov ecx, ebx
mov dword [ebp - 0x3f], 0x4ef902ed
mov word [ebp - 0x44], ax
pop esi
cmp esi, 2
jne 0x10002573
push 3
pop ecx
push ecx
pop esi
jmp 0x1000259a
movzx edx, byte [ebp + esi - 0x3f]
mov eax, esi
sub eax, ecx
movzx eax, byte [ebp + eax - 0x42]
movzx eax, word [ebp + eax*2 - 0x44]
mov ecx, eax
and eax, edx
or ecx, edx
sub ecx, eax
movzx eax, byte [ebp + esi - 0x40]
mov word [ebp + eax*2 - 0x44], cx
mov ecx, ebx
add esi, 2
cmp esi, 5
jb 0x10002567
xor eax, eax
mov word [ebp - 0x42], ax
mov dword [ebp - 0x20], 0xccc90a35
mov dword [ebp - 0x20], ebx
jmp 0x100025c1
mov eax, dword [ebp - 0x20]
mov dword [ebp + eax*4 - 0x118], ebx
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], 2
jl 0x100025b4
mov dword [ebp - 0x20], 1
cmp dword [ebp - 0x20], ebx
jl 0x100025fc
mov dword [ebp - 0x24], 5
mov dword [ebp - 0x24], 1
cmp dword [ebp - 0x24], ebx
jl 0x100025f7
mov eax, dword [ebp - 0x20]
cmp dword [ebp + eax*4 - 0x118], ebx
jne 0x100025f7
dec dword [ebp - 0x24]
jns 0x100025e6
dec dword [ebp - 0x20]
jns 0x100025d3
xor eax, eax
mov dword [ebp - 0x128], 7
mov word [ebp - 0x13c], ax
lea ecx, [ebp - 0x13c]
lea eax, [ebp - 0x44]
mov dword [ebp - 0x12c], ebx
push eax
call fcn.100033fa
push 3
lea ecx, [ebp - 0xc4]
mov byte [ebp - 4], 8
call fcn.10002fdf
mov byte [ebp - 4], 9
mov dword [ebp - 0x30], ebx
mov dword [ebp - 0x2c], 0x44f1
cmp dword [ebp - 0x2c], 0x47bc
jle 0x10002696
mov esi, ebx
mov edi, ebx
mov dword [ebp - 0x28], 0x6640
mov eax, edi
lea ecx, [ebp - 0x1a0]
cdq
push edx
push eax
call fcn.10001af4
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x10002671
mov eax, dword [eax]
push eax
call fcn.10048e5f
pop ecx
push ebx
push 1
lea ecx, [ebp - 0x1a0]
call fcn.1000330e
add edi, esi
dec dword [ebp - 0x28]
jne 0x10002657
inc esi
cmp esi, 0x78a5
jl 0x1000264e
mov dword [ebp - 0x18], ebx
jmp 0x100026ae
mov ecx, dword [ebp - 0x18]
mov eax, dword [ebp - 0xc4]
mov dword [eax + ecx*4], 0x9841b3c6
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 3
jl 0x1000269b
cmp dword [ebp - 0x2c], 0x4276
jge 0x100026c8
push str.hge_fozkvabe_qnv_kfzzyidh_gghfohgwu_zjziainav_reg_cdxqah_cngpq_jvahspc_anfv_dcp_cgcdrtex_zhjdqikew
call fcn.10048e5f
pop ecx
mov dword [ebp - 4], 9
mov dword [ebp - 0x18], ebx
jmp 0x100026e2
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x38], 0x1cecb457
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 1
jl 0x100026d4
push 2
mov dword [ebp - 0x38], ebx
pop esi
jmp 0x10002713
mov ecx, dword [ebp - 0x38]
mov eax, dword [ebp - 0xc4]
cmp dword [eax + ecx*4], ebx
jne 0x10002718
mov eax, dword [ebp - 0x38]
mov edx, dword [ebp - 0x38]
mov ecx, dword [ebp - 0xc4]
mov eax, dword [ecx + eax*4]
mov dword [ecx + edx*4], eax
inc dword [ebp - 0x38]
cmp dword [ebp - 0x38], esi
jle 0x100026f0
lea ecx, [ebp - 0xc4]
mov byte [ebp - 4], 8
call fcn.1000301b
mov dword [ebp - 0x44], ebx
lea ecx, [ebp - 0x170]
push 0xfffffffffffffffd
mov dword [ebp - 0x20], 0x71c1
pop edi
mov dword [ebp - 0x34], 5
mov dword [ebp - 0x18], edi
mov dword [ebp - 0x30], 0x8d0d4a49
push 4
call fcn.10002fdf
mov byte [ebp - 4], 0xc
mov dword [ebp - 0x24], ebx
jmp 0x1000276e
mov ecx, dword [ebp - 0x24]
mov eax, dword [ebp - 0x170]
mov dword [eax + ecx*4], 0xc34309e9
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], 4
jl 0x1000275b
mov eax, dword [ebp - 0x20]
xor ecx, ecx
test eax, eax
setle cl
mov dword [ebp - 0x34], ecx
mov eax, dword [ebp - 0x34]
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x18], 0xfffffff9
cmp dword [ebp - 0x18], ebx
je 0x100027af
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x34]
mov dword [ebp - 0x18], 1
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x20]
xor ecx, ecx
cmp eax, 0xefa97f51
setne cl
add ecx, dword [ebp - 0x20]
je 0x100027da
mov dword [ebp - 0x30], 0x2151
mov dword [ebp - 0x28], 0xa5d7
mov eax, dword [ebp - 0x30]
mov dword [ebp - 0x28], eax
jmp 0x100029e1
mov dword [ebp - 0x2c], edi
mov dword [ebp - 0x24], 0x92357994
cmp dword [ebp - 0x34], ebx
je 0x10002825
mov dword [ebp - 0x34], 0xfffa
xor edx, edx
mov dword [ebp - 0x28], 0x309ab83e
mov ecx, dword [ebp - 0x34]
mov eax, dword [ebp - 0x18]
cmp ecx, eax
setge dl
mov dword [ebp - 0x28], edx
cmp dword [ebp - 0x2c], 0xb0d58e7e
sbb edx, edx
xor ecx, ecx
neg edx
imul edx, dword [ebp - 0x28]
mov eax, dword [ebp - 0x34]
cmp edx, eax
setne cl
mov dword [ebp - 0x24], ecx
jmp 0x10002852
mov dword [ebp - 0x18], ebx
jmp 0x1000284c
mov byte [ebp - 0x19], bl
cmp byte [ebp - 0x19], 0
je 0x10002849
push ebx
push 0x12a1
push 0xc99
push 0x7dd
call dword [sym.imp.GDI32.dll_MoveToEx]
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 0xc
jg 0x1000282a
mov eax, dword [ebp - 0x18]
xor ecx, ecx
cmp eax, 0xc9a8
mov eax, dword [ebp - 0x20]
setl cl
cmp ecx, 0xc33490ce
sbb edx, edx
neg edx
sub edx, 0xfff9
neg edx
sbb edx, edx
xor ecx, ecx
inc edx
cmp eax, edx
mov eax, dword [ebp - 0x24]
setl cl
xor edx, edx
cmp eax, ecx
setne dl
xor ecx, ecx
sub edx, dword [ebp - 0x20]
mov eax, dword [ebp - 0x2c]
cmp edx, eax
setge cl
cmp ecx, dword [ebp - 0x24]
jl 0x100028a4
cmp dword [ebp - 0x30], ebx
je 0x100028a4
xor eax, eax
inc eax
jmp 0x100028a6
mov eax, ebx
xor edx, edx
cmp eax, 0x3e09
mov eax, dword [ebp - 0x24]
setne dl
xor ecx, ecx
cmp eax, edx
setge cl
cmp ecx, dword [ebp - 0x24]
jg 0x100028c8
cmp dword [ebp - 0x24], ebx
jne 0x100028c8
mov eax, ebx
jmp 0x100028cb
xor eax, eax
inc eax
push 9
pop ecx
sub ecx, eax
je 0x100029d2
mov dword [ebp - 0x30], 0x68cde333
mov dword [ebp - 0x20], 0x6208
cmp dword [ebp - 0x20], 0x6436
jle 0x10002948
mov dword [ebp - 0x34], ebx
mov edi, ebx
mov ebx, dword [ebp - 0x34]
mov dword [ebp - 0x28], edi
mov eax, ebx
cdq
idiv edi
mov edi, 0x6d36
mov ebx, edx
mov eax, ebx
mov ecx, 0x1007cff8
cdq
push edx
push eax
call fcn.10002e68
inc ebx
dec edi
jne 0x10002904
mov edi, dword [ebp - 0x28]
mov ebx, dword [ebp - 0x34]
inc edi
mov dword [ebp - 0x28], edi
cmp edi, 0x2d4a
jl 0x100028f8
inc ebx
push 0
mov dword [ebp - 0x34], ebx
cmp ebx, 0x8d9
pop ebx
jl 0x100028f0
push 0x1aa6
push 0x8e
call dword [sym.imp.USER32.dll_GetWindow]
mov eax, 0xa35e06c0
mov dword [ebp - 0xa4], eax
mov dword [ebp - 0xa0], eax
mov dword [ebp - 0x9c], eax
mov dword [ebp - 0x98], eax
mov byte [ebp - 4], 0xd
cmp dword [ebp - 0x20], 0x6130
jge 0x100029a2
mov edx, str.noimheu_rrm_xycd_smgovp_abjaq_mkk_nrcfyu
mov ecx, 0x1007cff8
call fcn.100050b8
jmp 0x100029a2
mov dword [ebp - 4], 0xc
mov eax, dword [ebp - 0x2c]
mov dword [ebp - 0x30], eax
mov dword [ebp - 0x24], 3
cmp dword [ebp - 0x24], ebx
jl 0x100029e1
mov byte [ebp - 0x19], bl
cmp byte [ebp - 0x19], 0
je 0x100029cb
push ebx
call dword [sym.imp.GDI32.dll_GetObjectType]
dec dword [ebp - 0x24]
jns 0x100029bb
jmp 0x100029e1
mov byte [ebp - 0x19], bl
cmp byte [ebp - 0x19], 0
je 0x100029e1
call dword [sym.imp.USER32.dll_CreateMenu]
lea ecx, [ebp - 0x170]
mov byte [ebp - 4], 8
call fcn.1000301b
push dword [ebp - 0xcc]
cmp dword [ebp - 0xc8], 8
lea eax, [ebp - 0xdc]
push ebx
cmovae eax, dword [ebp - 0xdc]
lea ecx, [ebp - 0x188]
push eax
call fcn.10003776
cmp eax, 0xffffffff
je 0x10002a36
push 0xffffffffffffffff
push ebx
lea ecx, [ebp - 0x13c]
push ecx
push 1
push eax
lea ecx, [ebp - 0x188]
call fcn.10003482
jmp 0x100029f0
mov dword [ebp - 0x20], ebx
lea ecx, [ebp - 0x94]
mov dword [ebp - 0x18], 0x278fa8f9
push esi
call fcn.10002fdf
mov byte [ebp - 4], 0xf
xor edx, edx
mov dword [ebp - 0x28], 0xffffffff
inc edx
mov dword [ebp - 0x24], edx
mov dword [ebp - 0x2c], 0x4db5
mov dword [ebp - 0x24], ebx
jmp 0x10002a78
mov ecx, dword [ebp - 0x24]
mov eax, dword [ebp - 0x94]
mov dword [eax + ecx*4], edx
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], esi
jl 0x10002a69
mov eax, dword [ebp - 0x20]
xor ecx, ecx
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x20]
cmp eax, 0xf545
setg cl
xor edx, edx
mov dword [ebp - 0x18], ecx
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x20]
add ecx, dword [ebp - 0x20]
mov eax, dword [ebp - 0x18]
cmp ecx, eax
mov eax, dword [ebp - 0x94]
setg dl
xor ecx, ecx
cmp edx, 0xffffffff
setne cl
mov dword [eax], ecx
mov dword [ebp - 0x28], 3
mov eax, dword [ebp - 0x28]
sub eax, 4
je 0x10002b2d
mov dword [ebp - 0x30], 0xf4a0
lea ecx, [ebp - 0x124]
mov dword [ebp - 0x30], 0x6c7f05f4
mov dword [ebp - 0x30], 0xfffffff8
mov dword [ebp - 0x30], 0x11fb8eb5
mov dword [ebp - 0x30], 1
mov dword [ebp - 0x30], 0x26c4f32b
push 4
call fcn.10002fdf
mov dword [ebp - 0x20], ebx
jmp 0x10002b17
mov ecx, dword [ebp - 0x20]
mov eax, dword [ebp - 0x124]
mov dword [eax + ecx*4], 0xe35a12a2
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], 4
jl 0x10002b04
inc dword [ebp - 0x2c]
lea ecx, [ebp - 0x124]
call fcn.1000301b
jmp 0x10002b6d
mov dword [ebp - 0x18], ebx
jmp 0x10002b45
mov ecx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x94]
mov dword [eax + ecx*4], 0xfffffffb
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], esi
jl 0x10002b32
mov dword [ebp - 0x18], ebx
jmp 0x10002b67
mov byte [ebp - 0x19], bl
cmp byte [ebp - 0x19], 0
je 0x10002b64
push 0x1217
push ebx
call dword [sym.imp.ADVAPI32.dll_InitializeSecurityDescriptor]
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 1
jle 0x10002b4f
mov dword [ebp - 0x24], ebx
jmp 0x10002bb7
mov dword [ebp - 0x28], 0x8f43
mov byte [ebp - 0x19], bl
cmp byte [ebp - 0x19], 0
je 0x10002b88
call dword [sym.imp.USER32.dll_GetDoubleClickTime]
mov dword [ebp - 0x18], ebx
jmp 0x10002bae
mov dword [ebp - 0x28], 0xa44f34d8
xor ecx, ecx
mov edx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x28]
cmp eax, 1
mov eax, dword [ebp - 0x94]
setle cl
mov dword [eax + edx*4], ecx
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 1
jle 0x10002b8d
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], 1
jle 0x10002b72
lea ecx, [ebp - 0x94]
mov byte [ebp - 4], 8
call fcn.1000301b
mov ecx, dword [ebp - 0x7c]
lea eax, [ebp - 0x188]
push eax
lea edx, [ebp - 0x160]
call fcn.1000528f
pop ecx
push ebx
push 1
lea ecx, [ebp - 0x13c]
call fcn.10003819
push ebx
push 1
lea ecx, [ebp - 0xdc]
call fcn.10003819
push ebx
push 1
lea ecx, [ebp - 0x188]
call fcn.10003819
push ebx
push 1
lea ecx, [ebp - 0x160]
call fcn.10003819
mov ecx, dword [ebp - 0xc]
mov eax, dword [ebp - 0x7c]
pop edi
pop esi
mov dword fs:[0], ecx
pop ebx
mov esp, ebp
pop ebp
ret