Function at 0x1002978e
Capabilities:
Create directory
Delete file

Disassembly:
mov eax, 0x1005a92c
call fcn.100595f8
sub esp, 0x220
push ebx
xor ebx, ebx
mov dword [ebp - 0x2c], 0xfffffffe
push esi
mov byte [ebp - 0x15], bl
push edi
mov dword [ebp - 0x10], esp
mov dword [ebp - 0xb8], edx
mov dword [ebp - 0xb0], ecx
mov dword [ebp - 0x184], ebx
cmp byte [ebp - 0x15], bl
je 0x100297cf
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_GetCommState]
mov byte [ebp - 0x15], bl
cmp byte [ebp - 0x15], bl
je 0x100297e7
push 0x1455
push 0x23ce
call dword [sym.imp.USER32.dll_GetDlgItem]
push 3
mov dword [ebp - 0x34], 0xb9f9b319
lea ecx, [ebp - 0x118]
pop eax
mov dword [ebp - 0x30], 0xbf506e60
mov dword [ebp - 0x5c], eax
mov dword [ebp - 0x24], 0x3e93
mov dword [ebp - 0x2c], eax
push 2
call fcn.1000e2bc
mov dword [ebp - 4], ebx
mov dword [ebp - 0x40], 0xe6c1
mov dword [ebp - 0x20], 0xb389e767
mov dword [ebp - 0x1c], ebx
jmp 0x1002983b
mov ecx, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x118]
mov dword [eax + ecx*4], 5
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 2
jl 0x10029828
mov dword [ebp - 0x34], ebx
cmp dword [ebp - 0x34], 0xfffffff0
jge 0x10029a0e
mov dword [ebp - 0x78], 0x8d13
lea ecx, [ebp - 0x10c]
mov dword [ebp - 0x38], 3
mov dword [ebp - 0x2c], 0xffffffff
push 3
call fcn.1000e2bc
mov byte [ebp - 4], 1
mov dword [ebp - 0x28], 0xc458
mov dword [ebp - 0x3c], 0x2be2
cmp dword [ebp - 0x3c], 0x2f18
jle 0x100298f9
mov esi, ebx
mov dword [ebp - 0xa8], ebx
mov dword [ebp - 0x1c], esi
mov dword [ebp - 0xa4], 0x4fd7
mov edi, ebx
mov ecx, edi
mov dword [ebp - 0xbc], esi
mov dword [ebp - 0x74], ebx
shl esi, cl
mov eax, esi
mov ecx, 0x10075878
and eax, ebx
cdq
push edx
push eax
call fcn.1000dfeb
inc ebx
cmp ebx, 0x3be6
jl 0x100298af
mov esi, dword [ebp - 0x1c]
inc edi
push 0
pop ebx
cmp edi, 0x6c93
jl 0x100298a2
dec esi
dec dword [ebp - 0xa4]
mov dword [ebp - 0x1c], esi
jne 0x100298a0
mov esi, dword [ebp - 0xa8]
inc esi
mov dword [ebp - 0xa8], esi
cmp esi, 0xc18
jl 0x10029893
mov dword [ebp - 0x1c], ebx
jmp 0x10029911
mov ecx, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x10c]
mov dword [eax + ecx*4], 4
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 3
jl 0x100298fe
mov byte [ebp - 4], 2
cmp dword [ebp - 0x3c], 0x282a
jge 0x10029951
mov edx, str.zlcyrghy_cile_but_zvq
mov ecx, 0x10075878
call fcn.10010d3e
jmp 0x10029951
mov dword [ebp - 4], 1
inc dword [ebp - 0x24]
cmp dword [ebp - 0x78], ebx
jne 0x100299d1
mov eax, dword [ebp - 0x38]
xor ecx, ecx
inc dword [ebp - 0x28]
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x28]
cmp eax, 0x2e166580
mov esi, dword [ebp - 0x10c]
setge cl
xor edx, edx
add ecx, dword [ebp - 0x24]
mov eax, dword [ebp - 0x38]
cmp ecx, dword [esi + 8]
setge dl
xor ecx, ecx
cmp edx, eax
mov dword [esi + 8], edx
mov eax, dword [ebp - 0x30]
setl cl
xor edx, edx
cmp eax, ecx
setge dl
xor ecx, ecx
imul edx, dword [ebp - 0x24]
mov eax, dword [ebp - 0x5c]
cmp edx, eax
mov eax, dword [ebp - 0x118]
setne cl
xor edx, edx
cmp ecx, dword [eax + 4]
mov eax, dword [ebp - 0x38]
setg dl
xor ecx, ecx
cmp edx, 7
setl cl
imul eax, ecx
cmp eax, dword [ebp - 0x40]
jl 0x100299d1
mov edx, ebx
jmp 0x100299d4
xor edx, edx
inc edx
mov eax, dword [ebp - 0x30]
xor ecx, ecx
cmp edx, eax
setl cl
imul eax, ecx, 0xfffffffc
mov dword [ebp - 0x5c], eax
mov eax, dword [ebp - 0x5c]
mov eax, dword [ebp - 0x2c]
cmp dword [ebp - 0x20], ebx
jne 0x100299f2
mov eax, dword [ebp - 0x5c]
mov eax, dword [ebp - 0x20]
lea ecx, [ebp - 0x10c]
mov dword [ebp - 0x2c], eax
mov byte [ebp - 4], bl
call fcn.1000e33f
dec dword [ebp - 0x34]
jmp 0x10029844
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x118]
call fcn.1000e33f
push 0x5c
pop eax
push 2
mov dword [ebp - 0x70], 0x30053e06
mov edi, ebx
mov byte [ebp - 0x6c], bl
mov dword [ebp - 0x6b], 0x328022b
mov dword [ebp - 0x67], 0x103040d
mov dword [ebp - 0x63], 0x89a3030d
mov byte [ebp - 0x5f], 0x46
mov word [ebp - 0xdc], ax
pop esi
mov dword [ebp - 0x2c], 0xc05baf43
lea ecx, [ebp - 0x168]
mov dword [ebp - 0x2c], ebx
push 1
call fcn.1000e2bc
mov dword [ebp - 0x20], ebx
mov dword [ebp - 0x1c], ebx
jmp 0x10029a81
mov ecx, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x168]
mov dword [eax + ecx*4], 0x97eede0b
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 1
jl 0x10029a6e
dec dword [ebp - 0x20]
mov byte [ebp - 0x15], bl
cmp byte [ebp - 0x15], 0
je 0x10029a9f
push 0x28e
push ebx
call dword [sym.imp.USER32.dll_CharUpperBuffW]
lea ecx, [ebp - 0x168]
call fcn.1000e33f
cmp esi, 0xe
jne 0x10029ab7
push 4
pop edi
push 0x10
pop esi
jmp 0x10029ae4
movzx edx, byte [ebp + esi - 0x6f]
mov eax, esi
sub eax, edi
mov edi, ebx
movzx eax, byte [ebp + eax - 0x72]
movzx eax, word [ebp + eax*2 - 0xe8]
mov ecx, eax
and eax, edx
or ecx, edx
sub ecx, eax
movzx eax, byte [ebp + esi - 0x70]
mov word [ebp + eax*2 - 0xe8], cx
add esi, 2
cmp esi, 0x12
jb 0x10029a4f
mov dword [ebp - 0x3c], 0x6489
cmp dword [ebp - 0x3c], 0x6493
jle 0x10029b86
push 0x285
call dword [sym.imp.KERNEL32.dll_TlsFree]
mov eax, ebx
mov dword [ebp - 0x38], ebx
mov esi, ebx
mov dword [ebp - 0x30], ebx
cdq
idiv esi
mov dword [ebp - 0x20], 0x615b
mov esi, edx
mov edi, ebx
mov ecx, edi
mov eax, esi
shl eax, cl
lea ecx, [ebp - 0x1fc]
cdq
push edx
push eax
call fcn.10001a8f
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x10029b45
mov eax, dword [eax]
push eax
call fcn.10041543
pop ecx
push ebx
push 1
lea ecx, [ebp - 0x1fc]
call fcn.1000ea77
inc edi
cmp edi, 0x54f7
jl 0x10029b27
inc esi
dec dword [ebp - 0x20]
jne 0x10029b25
mov esi, dword [ebp - 0x30]
mov eax, dword [ebp - 0x38]
inc esi
mov dword [ebp - 0x30], esi
cmp esi, 0x1b2e
jl 0x10029b19
inc eax
mov dword [ebp - 0x38], eax
cmp eax, 0x671f
jl 0x10029b14
cmp dword [ebp - 0x3c], 0x61b4
jge 0x10029b9a
push str.akrt_kjkuredxz_fyvjeqa_mxltr_fnk_jqhnnpzd_ava_qgrnqe_yjawwfvb_yzt_devel_tramw_wtmg_lwnb
call fcn.10041543
pop ecx
or dword [ebp - 4], 0xffffffff
mov dword [ebp - 0x24], 0xfffffff8
mov dword [ebp - 0x28], ebx
mov dword [ebp - 0x2c], 0xffffffff
mov dword [ebp - 0x30], 0x6420
cmp dword [ebp - 0x30], 0x6644
jle 0x10029c18
mov eax, ebx
mov dword [ebp - 0x34], ebx
mov edi, ebx
mov dword [ebp - 0x20], ebx
mov esi, ebx
lea ecx, [esi + edi]
mov dword [ebp - 0x2c], ebx
mov edi, eax
shl edi, cl
mov eax, edi
mov ecx, 0x10075878
or eax, ebx
cdq
push edx
push eax
call fcn.1000dfeb
inc ebx
cmp ebx, 0x3f21
jl 0x10029bd5
mov edi, dword [ebp - 0x20]
inc esi
mov eax, dword [ebp - 0x34]
push 0
pop ebx
cmp esi, 0x369a
jl 0x10029bcb
inc edi
mov dword [ebp - 0x20], edi
cmp edi, 0x5b15
jl 0x10029bc9
inc eax
mov dword [ebp - 0x34], eax
cmp eax, 0x5777
jl 0x10029bc4
mov dword [ebp - 0x1c], ebx
jmp 0x10029c2e
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0x14c], 0xb4e1
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 4
jl 0x10029c1d
mov dword [ebp - 4], 6
cmp dword [ebp - 0x30], 0x6288
jge 0x10029c53
mov edx, str.ccecc_ijw_qrv_qfiinrrs_vwynd_zpj_xrfq_diwo
mov ecx, 0x10075878
call fcn.10010d3e
or dword [ebp - 4], 0xffffffff
mov dword [ebp - 0x24], ebx
jmp 0x10029d36
mov dword [ebp - 0x2c], 0xbcb1a7a8
mov dword [ebp - 0x2c], 0xe7071658
cmp dword [ebp - 0x24], ebx
jne 0x10029cb1
mov eax, dword [ebp - 0x14c]
cmp dword [ebp - 0x24], 0xffffffff
je 0x10029cac
mov eax, dword [ebp - 0x24]
cmp dword [ebp + eax*4 - 0x14c], ebx
je 0x10029cb1
xor edx, edx
inc edx
jmp 0x10029cb3
mov edx, ebx
mov eax, dword [ebp - 0x24]
xor ecx, ecx
mov eax, dword [ebp + eax*4 - 0x14c]
cmp edx, eax
mov eax, dword [ebp - 0x24]
setl cl
xor edx, edx
cmp ecx, eax
mov eax, dword [ebp - 0x24]
setne dl
xor ecx, ecx
mov eax, dword [ebp + eax*4 - 0x14c]
cmp eax, edx
setle cl
mov dword [ebp - 0x28], ecx
mov dword [ebp - 0x28], 3
cmp dword [ebp - 0x28], ebx
jl 0x10029d33
push 2
lea ecx, [ebp - 0x1b8]
call fcn.1000e2bc
mov dword [ebp - 0x20], 0xfffc
mov dword [ebp - 0x1c], ebx
jmp 0x10029d1a
mov ecx, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x1b8]
mov dword [eax + ecx*4], 1
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 2
jl 0x10029d07
dec dword [ebp - 0x20]
lea ecx, [ebp - 0x1b8]
call fcn.1000e33f
dec dword [ebp - 0x28]
jns 0x10029cee
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], 3
jle 0x10029c81
xor eax, eax
lea ecx, [ebp - 0x13c]
mov word [ebp - 0xda], ax
mov eax, 0xcefbde28
mov dword [ebp - 0x1c], 0x8c08872f
mov dword [ebp - 0x20], 4
mov dword [ebp - 0x38], 0xaa53f0d3
mov dword [ebp - 0xd8], eax
mov dword [ebp - 0xd4], eax
mov dword [ebp - 0xd0], eax
mov dword [ebp - 0xcc], eax
push 1
call fcn.1000e2bc
mov dword [ebp - 0x24], ebx
jmp 0x10029d9e
mov eax, dword [ebp - 0x24]
mov dword [ebp + eax*4 - 0x1ac], 0xc0e2632c
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], 4
jl 0x10029d8d
mov dword [ebp - 0x24], ebx
jmp 0x10029db8
mov ecx, dword [ebp - 0x24]
mov eax, dword [ebp - 0x13c]
mov dword [eax + ecx*4], ebx
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], 1
jl 0x10029da9
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
sub ecx, eax
je 0x10029dd2
cmp dword [ebp - 0x20], ebx
je 0x10029dd2
xor eax, eax
inc eax
jmp 0x10029dd4
mov eax, ebx
mov dword [ebp - 0x38], eax
xor edx, edx
mov ecx, dword [ebp - 0x38]
mov eax, dword [ebp - 0x1c]
cmp ecx, eax
setge dl
cmp edx, 0xe0fc36fe
jb 0x10029df8
mov dword [ebp - 0x1a8], 1
jmp 0x10029dfe
mov dword [ebp - 0x1a8], ebx
mov edx, dword [ebp - 0x1c]
mov eax, dword [ebp - 0xd0]
neg edx
sbb edx, edx
xor ecx, ecx
neg edx
cmp edx, eax
setg cl
mov dword [ebp - 0xd4], ecx
test ecx, ecx
jne 0x10029e2a
cmp dword [ebp - 0x1a8], ebx
jne 0x10029e2a
mov eax, ebx
jmp 0x10029e2d
xor eax, eax
inc eax
cmp eax, dword [ebp - 0x1c]
jne 0x10029e3c
cmp dword [ebp - 0x38], ebx
je 0x10029e3c
xor ecx, ecx
inc ecx
jmp 0x10029e3e
mov ecx, ebx
mov eax, dword [ebp - 0x1c]
sub ecx, eax
mov eax, dword [ebp - 0x13c]
sub ecx, 0x6e483bbb
mov dword [eax], ecx
mov dword [ebp - 0x1c], ebx
jmp 0x10029e73
mov byte [ebp - 0x15], bl
cmp byte [ebp - 0x15], 0
je 0x10029e70
push 0xb8e
push 0x1588
push ebx
call dword [sym.imp.GDI32.dll_OffsetRgn]
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 0x18
jl 0x10029e56
lea ecx, [ebp - 0x13c]
call fcn.1000e33f
xor eax, eax
mov dword [ebp - 0x188], 7
mov word [ebp - 0x19c], ax
lea ecx, [ebp - 0x19c]
lea eax, [ebp - 0xe8]
mov dword [ebp - 0x18c], ebx
push eax
call fcn.10014e02
mov dword [ebp - 4], 8
mov dword [ebp - 0x28], 0x76820624
mov dword [ebp - 0x28], 1
jmp 0x10029ee5
cmp byte [ebp - 0x15], 0
je 0x10029ee2
push 0x1186
push ebx
push 0x8a0
push 0x1702
call dword [sym.imp.USER32.dll_GetDlgItemTextW]
inc dword [ebp - 0x28]
cmp dword [ebp - 0x28], 0x1b
mov byte [ebp - 0x15], bl
jge 0x10029ec6
cmp byte [ebp - 0x15], 0
je 0x10029efe
push ebx
push ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_WritePrivateProfileStringW]
xor eax, eax
lea edi, [ebp - 0xe8]
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
mov dword [ebp - 0x3c], 0x6ec9
cmp dword [ebp - 0x3c], 0x6ffa
jle 0x10029f8a
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_CreateDirectoryW]
mov dword [ebp - 0x34], ebx
mov edi, ebx
mov dword [ebp - 0x30], ebx
mov esi, ebx
mov ebx, dword [ebp - 0x34]
mov dword [ebp - 0x20], esi
mov eax, edi
mov dword [ebp - 0x2c], ebx
cdq
mov edi, 0x2f75
idiv esi
mov dword [ebp - 0x40], edx
mov esi, edx
mov eax, ebx
mov ecx, 0x10075878
cdq
push edx
push eax
call fcn.1000dfeb
add ebx, esi
dec edi
jne 0x10029f44
mov esi, dword [ebp - 0x20]
mov edi, dword [ebp - 0x30]
inc esi
mov ebx, dword [ebp - 0x34]
mov dword [ebp - 0x20], esi
cmp esi, 0x334
jl 0x10029f32
inc edi
mov dword [ebp - 0x30], edi
push 0
pop ebx
cmp edi, 0x6d0a
jl 0x10029f2a
mov eax, dword [ebp - 0x34]
inc eax
mov dword [ebp - 0x34], eax
cmp eax, 0x714b
jl 0x10029f25
mov dword [ebp - 0x2c], 6
mov byte [ebp - 0x15], bl
cmp byte [ebp - 0x15], 0
je 0x10029fa1
push ebx
call dword [sym.imp.KERNEL32.dll_DeleteFileA]
mov dword [ebp - 0x2c], 0x1cea
cmp dword [ebp - 0x2c], 0x6d1
jge 0x1002a0d9
lea eax, [ebp - 0xac]
mov dword [ebp - 0x2c], ebx
push eax
lea eax, [ebp - 0xb4]
push eax
lea eax, [ebp - 0xa0]
push eax
lea eax, [ebp - 0x7c]
push eax
push str._d__d__d__d
call fcn.1004125b
mov eax, dword [ebp - 0x7c]
add esp, 0x14
cmp eax, 0xffffffff
je 0x1002a0d9
push 0x17
pop ecx
mov dword [ebp - 0x40], ecx
mov dword [ebp - 0x78], 0x1c
mov dword [ebp - 0x74], 0x21
cdq
xor edi, edi
idiv ecx
mov esi, dword [ebp - 0xac]
inc edi
or dword [ebp - 0x2c], 0xffffffff
mov ecx, edx
mov dword [ebp - 0x20], ecx
inc esi
mov eax, esi
cdq
idiv dword [ebp - 0x40]
cmp edx, ecx
jne 0x1002a055
mov eax, esi
cdq
push 0x1c
pop ecx
idiv ecx
mov eax, dword [ebp - 0xa0]
mov ecx, edx
cdq
idiv dword [ebp - 0x78]
cmp ecx, edx
jne 0x1002a052
mov eax, esi
cdq
push 0x21
pop ecx
idiv ecx
mov eax, dword [ebp - 0xb4]
mov ecx, edx
cdq
idiv dword [ebp - 0x74]
cmp ecx, edx
je 0x1002a107
mov ecx, dword [ebp - 0x20]
inc edi
inc esi
cmp edi, 0xf
jle 0x1002a014
mov eax, dword [ebp - 0x2c]
push eax
push ecx
inc ebx
mov edx, str.Case
push ebx
push ecx
mov ecx, 0x10075878
call fcn.10010d3e
pop ecx
mov ecx, eax
call fcn.1002ad78
mov edx, str.:_the_next_triple_peak_occurs_in
mov ecx, eax
call fcn.10010d3e
pop ecx
mov ecx, eax
call fcn.1002ad78
mov edx, str._days.
mov ecx, eax
call fcn.10010d3e
push eax
call fcn.10026f2a
pop ecx
lea eax, [ebp - 0xac]
push eax
lea eax, [ebp - 0xb4]
push eax
lea eax, [ebp - 0xa0]
push eax
lea eax, [ebp - 0x7c]
push eax
push str._d__d__d__d
call fcn.1004125b
mov eax, dword [ebp - 0x7c]
add esp, 0x14
push 0x17
pop ecx
cmp eax, 0xffffffff
jne 0x10029ffe
xor ebx, ebx
mov byte [ebp - 0x15], bl
cmp byte [ebp - 0x15], 0
je 0x1002a0e9
push ebx
call dword [sym.imp.KERNEL32.dll_GlobalUnlock]
mov byte [ebp - 4], 9
cmp dword [ebp - 0x3c], 0x6e9c
jge 0x1002a12a
mov edx, str.qijag_tabtsqx_ooc_geludra_thx_ivuo_whf
mov ecx, 0x10075878
call fcn.10010d3e
jmp 0x1002a12a
mov eax, edi
jmp 0x1002a05f
push 0x5c
pop esi
push dword [ebp - 0xb8]
lea ecx, [ebp - 0x1dc]
mov dword [ebp - 4], 8
call fcn.1000e100
mov byte [ebp - 4], 0xb
mov dword [ebp - 0x8c], ebx
mov dword [ebp - 0x88], ebx
mov dword [ebp - 0x84], ebx
mov dword [ebp - 0x80], ebx
mov dword [ebp - 0x30], 0x6f1860ec
mov dword [ebp - 0x20], 0xfffffff9
mov dword [ebp - 0x20], 0xfffffffb
mov dword [ebp - 0x28], ebx
jmp 0x1002a185
mov eax, dword [ebp - 0x28]
mov dword [ebp + eax*4 - 0xc8], ebx
inc dword [ebp - 0x28]
cmp dword [ebp - 0x28], 3
jl 0x1002a178
push 2
mov dword [ebp - 0x80], ebx
pop edx
jmp 0x1002a1a2
mov eax, dword [ebp - 0x80]
cmp dword [ebp + eax*4 - 0xc8], ebx
jne 0x1002a1a7
inc dword [ebp - 0x80]
cmp dword [ebp - 0x80], edx
jle 0x1002a193
mov eax, dword [ebp - 0xc4]
mov eax, dword [ebp - 0xc4]
mov dword [ebp - 0x20], eax
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x84]
mov eax, dword [ebp - 0xc0]
mov eax, dword [ebp - 0x88]
mov dword [ebp - 0x20], eax
mov eax, dword [ebp - 0x88]
mov eax, dword [ebp - 0x30]
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x30]
mov eax, dword [ebp - 0x84]
mov ecx, dword [ebp - 0x8c]
inc eax
imul ecx, eax
push edx
add ecx, 0x7349980b
mov dword [ebp - 0x8c], ecx
lea ecx, [ebp - 0x1c4]
mov dword [ebp - 0x2c], edx
mov dword [ebp - 0x40], 0xfffffffd
mov dword [ebp - 0x40], 0x8d581621
call fcn.1000e2bc
mov dword [ebp - 0x20], ebx
mov dword [ebp - 0x28], ebx
jmp 0x1002a22e
mov ecx, dword [ebp - 0x28]
mov eax, dword [ebp - 0x1c4]
or dword [eax + ecx*4], 0xffffffff
inc dword [ebp - 0x28]
cmp dword [ebp - 0x28], 2
jl 0x1002a21e
mov eax, dword [ebp - 0x2c]
lea ecx, [ebp - 0x1c4]
mov dword [ebp - 0x40], eax
dec dword [ebp - 0x20]
call fcn.1000e33f
push 2
mov word [ebp - 0x58], si
mov ecx, ebx
mov byte [ebp - 0x48], bl
mov word [ebp - 0x47], 0x165
mov byte [ebp - 0x45], 0x5e
pop esi
cmp esi, 2
jne 0x1002a267
push esi
pop ecx
jmp 0x1002a290
movzx edx, byte [ebp + esi - 0x47]
mov eax, esi
sub eax, ecx
movzx eax, byte [ebp + eax - 0x4a]
movzx ecx, word [ebp + eax*2 - 0x58]
mov eax, ecx
and eax, edx
add eax, eax
sub ecx, eax
movzx eax, byte [ebp + esi - 0x48]
add ecx, edx
mov word [ebp + eax*2 - 0x58], cx
mov ecx, ebx
add esi, 2
cmp esi, 4
jb 0x1002a25e
xor eax, eax
mov dword [ebp - 0xec], 7
mov word [ebp - 0x56], ax
lea ecx, [ebp - 0x100]
mov word [ebp - 0x100], ax
lea eax, [ebp - 0x58]
push eax
mov dword [ebp - 0xf0], ebx
call fcn.10014e02
mov byte [ebp - 4], 0xc
lea ecx, [ebp - 0x124]
mov dword [ebp - 0x34], 0xe9714a02
push 4
call fcn.1000e2bc
mov byte [ebp - 4], 0xd
mov dword [ebp - 0x28], ebx
jmp 0x1002a2f8
mov ecx, dword [ebp - 0x28]
mov eax, dword [ebp - 0x124]
mov dword [eax + ecx*4], 0xce57
inc dword [ebp - 0x28]
cmp dword [ebp - 0x28], 4
jl 0x1002a2e5
mov dword [ebp - 0x34], 0xffffffec
cmp dword [ebp - 0x34], 0xf
jg 0x1002a418
push 3
lea ecx, [ebp - 0x130]
call fcn.1000e2bc
mov byte [ebp - 4], 0xe
mov dword [ebp - 0x20], 0x6953
cmp dword [ebp - 0x20], 0x6b9c
jle 0x1002a380
mov edx, ebx
mov dword [ebp - 0x28], ebx
mov edi, ebx
mov esi, ebx
mov dword [ebp - 0x2c], ebx
mov ecx, ebx
mov eax, esi
sar eax, cl
mov ecx, 0x10075878
and eax, edi
and eax, edx
cdq
push edx
push eax
call fcn.1000dfeb
mov edx, dword [ebp - 0x28]
inc ebx
cmp ebx, 0x39f8
jl 0x1002a33c
inc esi
push 0
pop ebx
cmp esi, 0x28b1
jl 0x1002a339
inc edi
cmp edi, 0x5f2f
jl 0x1002a337
inc edx
mov dword [ebp - 0x28], edx
cmp edx, 0x7701
jl 0x1002a335
mov byte [ebp - 4], 0xf
cmp dword [ebp - 0x20], 0x6894
jge 0x1002a3ba
mov edx, str.fjhhn_ayrfohx_rvzfgoe_bjwgaqr_komd_ujqkj_xmxhtet_uuzv_raum_dgloqafwv_oszhkigag_hxwba
mov ecx, 0x10075878
call fcn.10010d3e
jmp 0x1002a3ba
mov dword [ebp - 4], 0xe
mov dword [ebp - 0x28], ebx
jmp 0x1002a3d9
mov ecx, dword [ebp - 0x28]
mov eax, dword [ebp - 0x130]
mov dword [eax + ecx*4], 0xfffffffa
inc dword [ebp - 0x28]
cmp dword [ebp - 0x28], 3
jl 0x1002a3c6
mov ecx, dword [ebp - 0x130]
mov edx, dword [ebp - 0x124]
mov dword [ecx + 8], ebx
mov eax, dword [ecx + 8]
mov dword [edx + eax*4], 0xf47
inc dword [ecx + 8]
cmp dword [ecx + 8], 4
jl 0x1002a3ee
lea ecx, [ebp - 0x130]
mov byte [ebp - 4], 0xd
call fcn.1000e33f
inc dword [ebp - 0x34]
jmp 0x1002a305
lea ecx, [ebp - 0x124]
mov byte [ebp - 4], 0xc
call fcn.1000e33f
mov dword [ebp - 0x58], ebx
mov dword [ebp - 0x24], 0xfffffff7
mov dword [ebp - 0x30], 0x58e17c10
mov dword [ebp - 0x1c], 0xfffffffd
mov byte [ebp - 0x15], bl
cmp byte [ebp - 0x15], 0
je 0x1002a4d9
mov dword [ebp - 0x20], 0x6a68
cmp dword [ebp - 0x20], 0x6ce0
jle 0x1002a482
mov esi, ebx
mov edi, ebx
lea eax, [edi + esi]
mov ecx, 0x10075878
cdq
push edx
push eax
call fcn.1000dfeb
inc edi
cmp edi, 0x1d08
jl 0x1002a460
inc esi
cmp esi, 0x653c
jl 0x1002a45e
push ebx
push 0x94b
push 0x12b8
push 0x153c
call dword [sym.imp.GDI32.dll_MoveToEx]
mov byte [ebp - 4], 0x11
cmp dword [ebp - 0x20], 0x66a0
jge 0x1002a4d2
mov edx, str.dlm_izcuqm_lbxglmlgs_wvvchjgo_pqcqh_gupawvahx_xxjx_ovteqc_ojiqvct_wzs_lsetbkqe_rnedirm_vsdsgdt_kyzgbyozu
mov ecx, 0x10075878
call fcn.10010d3e
jmp 0x1002a4d2
mov dword [ebp - 4], 0xc
cmp dword [ebp - 0x24], ebx
je 0x1002a542
mov dword [ebp - 0x20], 0x64fd9e2a
mov dword [ebp - 0x30], 0xfffffffd
mov dword [ebp - 0x24], ebx
jmp 0x1002a50e
mov dword [ebp - 0x1c], 0x65ab3e90
mov dword [ebp - 0x1c], ebx
jmp 0x1002a505
cmp dword [ebp - 0x1c], ebx
jne 0x1002a50b
dec dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 0xfffffff0
je 0x1002a4fd
dec dword [ebp - 0x24]
cmp dword [ebp - 0x24], 0xffffffec
jg 0x1002a4f1
cmp dword [ebp - 0x20], ebx
je 0x1002a52d
mov dword [ebp - 0x30], 2
mov eax, dword [ebp - 0x20]
add eax, dword [ebp - 0x30]
je 0x1002a52d
xor ecx, ecx
inc ecx
jmp 0x1002a52f
mov ecx, ebx
xor eax, eax
cmp ecx, 1
setne al
mov dword [ebp - 0x30], eax
mov eax, dword [ebp - 0x30]
mov dword [ebp - 0x1c], eax
jmp 0x1002a590
mov dword [ebp - 0x20], 1
mov dword [ebp - 0x15c], 5
mov dword [ebp - 0x158], 5
mov dword [ebp - 0x154], 5
mov dword [ebp - 0x150], 5
dec dword [ebp - 0x20]
mov dword [ebp - 0x1c], ebx
jmp 0x1002a58a
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0x15c], 0x7af2c9a1
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 4
jl 0x1002a579
push 0x5f
pop eax
mov byte [ebp - 0x50], bl
mov dword [ebp - 0x4f], 0x4fe70275
mov word [ebp - 0x54], ax
mov dword [ebp - 0x3c], 0xbe2
cmp dword [ebp - 0x3c], 0xda8
jle 0x1002a627
mov eax, ebx
mov dword [ebp - 0x30], ebx
mov edx, eax
mov dword [ebp - 0x20], 0x1516
mov dword [ebp - 0x34], edx
mov edi, ebx
mov esi, ebx
mov ecx, esi
mov eax, edi
shl eax, cl
lea ecx, [ebp - 0x214]
or eax, edx
cdq
push edx
push eax
call fcn.10001a8f
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x1002a5e6
mov eax, dword [eax]
push eax
call fcn.10041543
pop ecx
push ebx
push 1
lea ecx, [ebp - 0x214]
call fcn.1000ea77
mov edx, dword [ebp - 0x34]
inc esi
cmp esi, 0x2998
jl 0x1002a5c6
inc edi
cmp edi, 0x770a
jl 0x1002a5c4
dec edx
dec dword [ebp - 0x20]
mov dword [ebp - 0x34], edx
jne 0x1002a5c2
mov eax, dword [ebp - 0x30]
inc eax
mov dword [ebp - 0x30], eax
cmp eax, 0x75d1
jl 0x1002a5b6
push 2
pop esi
mov ecx, ebx
cmp esi, 2
jne 0x1002a638
push 3
pop ecx
push ecx
pop esi
jmp 0x1002a661
movzx edx, byte [ebp + esi - 0x4f]
mov eax, esi
sub eax, ecx
movzx eax, byte [ebp + eax - 0x52]
movzx ecx, word [ebp + eax*2 - 0x54]
mov eax, ecx
and eax, edx
add eax, eax
sub ecx, eax
movzx eax, byte [ebp + esi - 0x50]
add ecx, edx
mov word [ebp + eax*2 - 0x54], cx
mov ecx, ebx
add esi, 2
cmp esi, 5
jb 0x1002a62c
cmp dword [ebp - 0x3c], 0x9e2
jge 0x1002a67d
push str.mkmxbid_dqnbhba_rgwoknsey_vbtd_zlxejj_expzmjye_njxb_dxhgvwl_ftcvcyrmm_atlt_zpoib_zcdvc_cecbzspm
call fcn.10041543
pop ecx
mov dword [ebp - 4], 0xc
xor eax, eax
mov word [ebp - 0x52], ax
mov dword [ebp - 0x2c], 0xfffffffe
mov dword [ebp - 0x2c], 0x1897a4a1
mov dword [ebp - 0x2c], 3
mov dword [ebp - 0x1c], 0xb10
mov dword [ebp - 0x28], ebx
jmp 0x1002a6bc
mov eax, dword [ebp - 0x28]
mov dword [ebp + eax*4 - 0x1e4], 0xb72fd491
inc dword [ebp - 0x28]
cmp dword [ebp - 0x28], 2
jl 0x1002a6ab
inc dword [ebp - 0x1c]
mov dword [ebp - 0x1c], 0x18
jmp 0x1002a6fa
mov byte [ebp - 0x15], bl
cmp byte [ebp - 0x15], 0
je 0x1002a6f4
push ebx
push 0x31c
push 0xdd6
push ebx
push 0x2fa
push 0xdc
push ebx
call dword [sym.imp.KERNEL32.dll_CreateFileW]
mov eax, dword [ebp - 0x2c]
dec dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 0x10
jge 0x1002a6ce
xor eax, eax
mov dword [ebp - 0x16c], 7
mov word [ebp - 0x180], ax
lea ecx, [ebp - 0x180]
lea eax, [ebp - 0x54]
mov dword [ebp - 0x170], ebx
push eax
call fcn.10014e02
mov byte [ebp - 4], 0x15
mov dword [ebp - 0x38], 0xfffffff9
mov dword [ebp - 0x20], 0x90ef307d
mov dword [ebp - 0x38], 0xa9b27fa
mov dword [ebp - 0x2c], 0x2be197e7
mov dword [ebp - 0x2c], 0xffffffff
mov dword [ebp - 0x24], ebx
jmp 0x1002a762
mov eax, dword [ebp - 0x24]
mov dword [ebp + eax*4 - 0x44], 0xffff
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], 1
jl 0x1002a754
mov dword [ebp - 0x24], ebx
jmp 0x1002a77e
mov eax, dword [ebp - 0x24]
mov dword [ebp + eax*4 - 0x9c], 5
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], 4
jl 0x1002a76d
mov dword [ebp - 0x98], ebx
jmp 0x1002a807
mov eax, dword [ebp - 0x98]
xor edx, edx
mov ecx, dword [ebp + eax*4 - 0x44]
mov eax, dword [ebp - 0x44]
cmp eax, ecx
setge dl
cmp edx, 1
sbb eax, eax
inc eax
cmp eax, 0xd14cd495
mov eax, dword [ebp - 0x98]
sbb ecx, ecx
neg ecx
mov eax, dword [ebp + eax*4 - 0x44]
add eax, ecx
mov dword [ebp - 0x38], eax
mov eax, dword [ebp - 0x38]
mov eax, dword [ebp - 0x98]
mov dword [ebp - 0x38], 0xfffffff8
mov eax, dword [ebp - 0x38]
mov dword [ebp - 0x20], eax
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x98]
mov eax, dword [ebp + eax*4 - 0x44]
mov eax, dword [ebp - 0x98]
mov eax, dword [ebp + eax*4 - 0x44]
mov eax, dword [ebp - 0x98]
mov eax, dword [ebp - 0x98]
mov eax, dword [ebp + eax*4 - 0x44]
mov eax, dword [ebp - 0x38]
mov dword [ebp - 0x2c], eax
inc dword [ebp - 0x98]
cmp dword [ebp - 0x98], ebx
jle 0x1002a78c
mov dword [ebp - 0x38], 0xfffffffe
mov dword [ebp - 0x54], ebx
mov dword [ebp - 0x3c], 0x6023
cmp dword [ebp - 0x3c], 0x610c
jle 0x1002a890
mov edi, ebx
mov dword [ebp - 0x30], ebx
mov esi, ebx
mov dword [ebp - 0x20], ebx
mov eax, esi
mov dword [ebp - 0x2c], ebx
and eax, edi
mov edi, ebx
mov dword [ebp - 0x40], eax
mov esi, ebx
mov ebx, dword [ebp - 0x40]
mov ecx, esi
mov eax, edi
shl eax, cl
mov ecx, 0x10075878
or eax, ebx
cdq
push edx
push eax
call fcn.1000dfeb
inc esi
cmp esi, 0x7fa5
jl 0x1002a848
inc edi
push 0
pop ebx
cmp edi, 0x587e
jl 0x1002a843
mov esi, dword [ebp - 0x20]
mov edi, dword [ebp - 0x30]
inc esi
mov dword [ebp - 0x20], esi
cmp esi, 0x2285
jl 0x1002a837
inc edi
mov dword [ebp - 0x30], edi
cmp edi, 0x7ff8
jl 0x1002a832
mov dword [ebp - 0x28], 0x76820624
mov byte [ebp - 4], 0x16
cmp dword [ebp - 0x3c], 0x5c72
jge 0x1002a8d1
mov edx, str.zsibclk_xmwfzxmv_zrbnbt
mov ecx, 0x10075878
call fcn.10010d3e
jmp 0x1002a8d1
mov dword [ebp - 4], 0x15
mov dword [ebp - 0x28], 1
jmp 0x1002a900
cmp byte [ebp - 0x15], 0
je 0x1002a8fd
push 0x1186
push ebx
push 0x8a0
push 0x1702
call dword [sym.imp.USER32.dll_GetDlgItemTextW]
inc dword [ebp - 0x28]
cmp dword [ebp - 0x28], 0x1b
mov byte [ebp - 0x15], bl
jge 0x1002a8e1
cmp byte [ebp - 0x15], 0
je 0x1002a919
push ebx
push ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_WritePrivateProfileStringW]
push dword [ebp - 0xf0]
cmp dword [ebp - 0xec], 8
lea eax, [ebp - 0x100]
push ebx
cmovae eax, dword [ebp - 0x100]
lea ecx, [ebp - 0x1dc]
push eax
call fcn.1002ae8a
cmp eax, 0xffffffff
je 0x1002a95f
push 0xffffffffffffffff
push ebx
lea ecx, [ebp - 0x180]
push ecx
push 1
push eax
lea ecx, [ebp - 0x1dc]
call fcn.1001134c
jmp 0x1002a919
mov dword [ebp - 0x24], 4
mov dword [ebp - 0x20], 0xa831eb23
mov dword [ebp - 0x20], 0xfffffff8
mov dword [ebp - 0x20], 0x5497
cmp dword [ebp - 0x20], 0x569e
jle 0x1002a9d1
call dword [sym.imp.USER32.dll_GetCaretBlinkTime]
mov esi, ebx
mov edi, ebx
mov eax, edi
lea ecx, [ebp - 0x22c]
or eax, esi
cdq
push edx
push eax
call fcn.10001a8f
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x1002a9aa
mov eax, dword [eax]
push eax
call fcn.10041543
pop ecx
push ebx
push 1
lea ecx, [ebp - 0x22c]
call fcn.1000ea77
inc edi
cmp edi, 0x5049
jl 0x1002a98e
inc esi
cmp esi, 0x4e40
jl 0x1002a98c
mov byte [ebp - 0x15], bl
cmp byte [ebp - 0x15], 0
je 0x1002a9e6
push ebx
push 0x1ba5
call dword [sym.imp.GDI32.dll_SelectObject]
cmp dword [ebp - 0x20], 0x538b
jge 0x1002a9fa
push str.mzihji_aenqxmjbm_myjlgkuyu_pcjvln_umcfsshu_klolpvdmf_dlecjr_bezbkzpx
call fcn.10041543
pop ecx
mov dword [ebp - 4], 0x15
mov dword [ebp - 0x24], ebx
cmp dword [ebp - 0x24], 0xb
jne 0x1002ab18
mov dword [ebp - 0x3c], 0x5219
cmp dword [ebp - 0x3c], 0x54ea
jle 0x1002aa78
push ebx
call dword [sym.imp.ADVAPI32.dll_GetLengthSid]
mov dword [ebp - 0x30], ebx
mov dword [ebp - 0x38], ebx
mov dword [ebp - 0x20], 0x4013
mov edi, ebx
mov esi, ebx
mov ebx, dword [ebp - 0x38]
mov eax, esi
mov ecx, 0x10075878
and eax, edi
and eax, ebx
cdq
push edx
push eax
call fcn.1000dfeb
inc esi
cmp esi, 0x692d
jl 0x1002aa39
inc edi
push 0
pop ebx
cmp edi, 0x2d58
jl 0x1002aa34
mov esi, dword [ebp - 0x30]
add dword [ebp - 0x38], esi
dec dword [ebp - 0x20]
jne 0x1002aa32
inc esi
mov dword [ebp - 0x30], esi
cmp esi, 0x38be
jl 0x1002aa28
mov dword [ebp - 0x2c], 0x5a9864ba
mov byte [ebp - 4], 0x1a
cmp dword [ebp - 0x3c], 0x4f78
jge 0x1002aab9
mov edx, str.tuyxt_tfd_mhg_izpgbe
mov ecx, 0x10075878
call fcn.10010d3e
jmp 0x1002aab9
mov dword [ebp - 4], 0x15
mov dword [ebp - 0x30], 0xfffffffe
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0x24]
cmp eax, dword [ebp - 0x24]
je 0x1002ab0b
mov eax, dword [ebp - 0x24]
xor edx, edx
mov dword [ebp - 0x20], eax
mov ecx, dword [ebp - 0x20]
mov eax, dword [ebp - 0x24]
cmp ecx, eax
setne dl
mov dword [ebp - 0x2c], edx
mov edx, dword [ebp - 0x30]
mov eax, dword [ebp - 0x24]
neg edx
sbb edx, edx
xor ecx, ecx
neg edx
cmp edx, eax
setg cl
mov dword [ebp - 0x20], ecx
mov eax, dword [ebp - 0x20]
cmp eax, dword [ebp - 0x24]
jle 0x1002ab0b
xor eax, eax
inc eax
jmp 0x1002ab0d
mov eax, ebx
mov dword [ebp - 0x30], eax
inc dword [ebp - 0x24]
jmp 0x1002aa04
mov ecx, dword [ebp - 0xb0]
lea eax, [ebp - 0x1dc]
push eax
lea edx, [ebp - 0x19c]
call fcn.1002af2d
pop ecx
push ebx
push 1
lea ecx, [ebp - 0x180]
call fcn.1000ec4b
push ebx
push 1
lea ecx, [ebp - 0x100]
call fcn.1000ec4b
push ebx
push 1
lea ecx, [ebp - 0x1dc]
call fcn.1000ec4b
push ebx
push 1
lea ecx, [ebp - 0x19c]
call fcn.1000ec4b
mov ecx, dword [ebp - 0xc]
mov eax, dword [ebp - 0xb0]
pop edi
pop esi
mov dword fs:[0], ecx
pop ebx
mov esp, ebp
pop ebp
ret