Function at 0x10007bd0
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x10032f2d
mov eax, dword fs:[0]
push eax
sub esp, 0x3bc
mov eax, dword [0x10061040]
xor eax, ebp
mov dword [ebp - 0x14], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x10], esp
xor esi, esi
mov dword [ebp - 0x128], esi
mov eax, dword [0x10062c2c]
mov dword [ebp - 0x120], esi
test eax, eax
jg 0x10009f7f
inc eax
lea ecx, [ebp - 0x304]
push 0x10059ce8
mov dword [0x10062c2c], eax
call fcn.1000a880
push str._Installer
mov edx, eax
mov dword [ebp - 4], esi
lea ecx, [ebp - 0xa0]
call fcn.1000bc20
add esp, 4
mov byte [ebp - 4], 2
mov ecx, dword [ebp - 0x2f0]
cmp ecx, 7
jbe 0x10007c8e
mov edx, dword [ebp - 0x304]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x10007c84
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10009fa0
push ecx
push edx
call fcn.1001754d
add esp, 8
xor eax, eax
mov dword [ebp - 0x2f4], 0
mov dword [ebp - 0x2f0], 7
mov word [ebp - 0x304], ax
mov byte [ebp - 4], 3
call fcn.10007900
cmp word [0x10062c78], 9
jne 0x10007d01
lea eax, [ebp - 0x108]
mov dword [ebp - 0x100], 0
mov esi, 1
mov edi, 3
push eax
mov ecx, 0x10062c78
mov word [ebp - 0x108], di
mov dword [ebp - 0x120], esi
mov dword [ebp - 0x128], esi
call fcn.100025f0
mov byte [ebp - 0x119], 0
test al, al
je 0x10007d08
mov byte [ebp - 0x119], 1
mov eax, dword [ebp - 0x120]
mov edi, dword [sym.imp.OLEAUT32.dll_VariantCopy]
mov dword [ebp - 0x144], edi
test al, 1
je 0x10007d36
and eax, 0xfffffffe
mov dword [ebp - 0x120], eax
mov dword [ebp - 0x128], eax
lea eax, [ebp - 0x108]
push eax
call edi
cmp byte [ebp - 0x119], 0
je 0x10007e3a
cmp dword [0x10062c80], 0
jne 0x10007e3a
push 0
push 0x10062cc0
push 0x4008
call fcn.10001da0
add esp, 0xc
test eax, eax
je 0x10007d6c
xor eax, eax
jmp 0x10007d80
mov eax, dword [0x10062cc0]
xor ecx, ecx
cmp dword [0x10062cd8], 0x800
cmovne eax, ecx
mov esi, dword [sym.imp.USER32.dll_EnumChildWindows]
push 1
push 0x100079c0
push eax
call esi
cmp dword [0x10062c80], 0
jne 0x10007e3a
push 0
push 0
push 0x8077
call fcn.10001da0
add esp, 0xc
test eax, eax
jne 0x10007e3a
push 0x10061ac0
push 1
push 0x10062c30
push 0xbc
call fcn.10001da0
call fcn.10007900
push 0
push 0x10062cc0
push 0x4008
call fcn.10001da0
add esp, 0x1c
test eax, eax
je 0x10007ded
xor eax, eax
jmp 0x10007e01
mov eax, dword [0x10062cc0]
xor ecx, ecx
cmp dword [0x10062cd8], 0x800
cmovne eax, ecx
push 0
push 0x100079c0
push eax
call esi
push 0x10062c30
push 1
push 0
push 0x8067
call fcn.10001da0
add esp, 0x10
test eax, eax
jne 0x10007e3a
push 0x10061aa0
push 1
push eax
push 0x8010
call fcn.10001da0
add esp, 0x10
cmp word [0x10062c78], 9
jne 0x10007e8b
mov esi, dword [ebp - 0x120]
mov eax, 3
mov word [ebp - 0x108], ax
or esi, 2
lea eax, [ebp - 0x108]
mov dword [ebp - 0x100], 0
push eax
mov ecx, 0x10062c78
mov dword [ebp - 0x120], esi
mov dword [ebp - 0x128], esi
call fcn.100025f0
mov byte [ebp - 0x119], 0
test al, al
je 0x10007e92
mov byte [ebp - 0x119], 1
mov eax, dword [ebp - 0x120]
test al, 2
je 0x10007eb4
and eax, 0xfffffffd
mov dword [ebp - 0x120], eax
mov dword [ebp - 0x128], eax
lea eax, [ebp - 0x108]
push eax
call edi
cmp byte [ebp - 0x119], 0
je 0x10007f2d
cmp dword [ebp - 0x8c], 7
lea eax, [ebp - 0xa0]
push 0x40010
cmova eax, dword [ebp - 0xa0]
push eax
push 0x10059d48
push 0
call dword [sym.imp.USER32.dll_MessageBoxW]
mov ecx, dword [ebp - 0x8c]
cmp ecx, 7
jbe 0x10009f7f
mov edx, dword [ebp - 0xa0]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x10007f1e
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1000a003
push ecx
push edx
call fcn.1001754d
add esp, 8
jmp 0x10009f7f
xor eax, eax
mov word [ebp - 0x34], ax
lea eax, [ebp - 0x34]
push 0x10062c78
push eax
mov eax, dword [sym.imp.OLEAUT32.dll_VariantCopyInd]
mov dword [ebp - 0x130], eax
call eax
test eax, eax
js 0x10009fa5
xor eax, eax
mov byte [ebp - 4], 4
mov word [ebp - 0x24], ax
lea eax, [ebp - 0x24]
push eax
call edi
test eax, eax
js 0x10009fb7
mov esi, dword [sym.imp.OLEAUT32.dll_SysReAllocString]
mov eax, 8
push str.Workbooks.Count
mov word [ebp - 0x24], ax
mov dword [ebp - 0x138], esi
call esi
mov dword [ebp - 0x1c], eax
test eax, eax
je 0x10009fbd
push 0
push 0xffffffffffffffff
push 0
sub esp, 0xc
lea edx, [ebp - 0x14]
mov eax, esp
mov dword [ebp - 0x124], esp
mov dword [eax], 0
mov dword [eax + 4], 0
mov dword [eax + 8], 0
sub esp, 0xc
mov byte [ebp - 4], 6
mov ecx, esp
lea eax, [ebp - 0x34]
push ecx
push edx
push eax
call fcn.1000a450
lea ecx, [ebp - 0xc8]
mov byte [ebp - 4], 5
call fcn.10006ec0
add esp, 0x24
mov ecx, 3
mov dword [ebp - 0x100], 0
mov word [ebp - 0x108], cx
lea ecx, [ebp - 0x108]
push ecx
mov ecx, eax
call fcn.100025f0
mov byte [ebp - 0x119], al
lea eax, [ebp - 0x108]
push eax
call edi
lea eax, [ebp - 0xc8]
push eax
call edi
push 0x10002460
push 2
push 0x10
lea eax, [ebp - 0x34]
mov byte [ebp - 4], 3
push eax
call fcn.1001711f
cmp byte [ebp - 0x119], 0
je 0x100080fa
xor eax, eax
mov word [ebp - 0x34], ax
lea eax, [ebp - 0x34]
push 0x10062c78
push eax
call dword [ebp - 0x130]
test eax, eax
js 0x10009fd7
xor eax, eax
mov byte [ebp - 4], 8
mov word [ebp - 0x24], ax
lea eax, [ebp - 0x24]
push eax
call edi
test eax, eax
js 0x10009fe9
mov eax, 8
push 0x10059dc0
mov word [ebp - 0x24], ax
call esi
mov dword [ebp - 0x1c], eax
test eax, eax
je 0x10009fbd
push 0
push 0xffffffffffffffff
push 0
sub esp, 0xc
lea edx, [ebp - 0x14]
mov eax, esp
mov dword [ebp - 0x124], esp
mov dword [eax], 0
mov dword [eax + 4], 0
mov dword [eax + 8], 0
sub esp, 0xc
mov byte [ebp - 4], 0xa
mov ecx, esp
lea eax, [ebp - 0x34]
push ecx
push edx
push eax
call fcn.1000a450
lea ecx, [ebp - 0xc8]
mov byte [ebp - 4], 9
call fcn.10006ec0
add esp, 0x24
lea eax, [ebp - 0xc8]
push eax
call edi
push 0x10002460
push 2
push 0x10
lea eax, [ebp - 0x34]
mov byte [ebp - 4], 3
push eax
call fcn.1001711f
xorps xmm0, xmm0
mov dword [ebp - 0x68], 0
movq qword [ebp - 0x70], xmm0
mov dword [ebp - 0x70], 0
mov dword [ebp - 0x6c], 0
mov dword [ebp - 0x68], 0
xor eax, eax
mov dword [ebp - 0x78], 0
movups xmmword [ebp - 0x88], xmm0
mov dword [ebp - 0x74], 7
mov word [ebp - 0x88], ax
mov byte [ebp - 4], 0xc
mov word [ebp - 0x1b4], ax
lea eax, [ebp - 0x1b4]
push 0x10062c78
push eax
call dword [ebp - 0x130]
test eax, eax
jns 0x10008175
mov ecx, 0xa
mov dword [ebp - 0x1ac], eax
mov word [ebp - 0x1b4], cx
push eax
jmp 0x10009fd2
xor eax, eax
mov byte [ebp - 4], 0xd
mov word [ebp - 0x1a4], ax
lea eax, [ebp - 0x1a4]
push eax
call edi
test eax, eax
jns 0x10008195
push eax
jmp 0x10009fd2
mov eax, 8
push str.AddIns.Count
mov word [ebp - 0x1a4], ax
call esi
mov dword [ebp - 0x19c], eax
test eax, eax
jne 0x100081cd
mov eax, 0xa
mov dword [ebp - 0x19c], 0x8007000e
mov word [ebp - 0x1a4], ax
jmp 0x10009fcd
push 0
push 0xffffffffffffffff
push 0
sub esp, 0xc
lea esi, [ebp - 0x1b4]
mov eax, esp
mov dword [ebp - 0x124], esp
lea edx, [ebp - 0x194]
mov dword [eax], 0
mov dword [eax + 4], 0
mov dword [eax + 8], 0
sub esp, 0xc
mov byte [ebp - 4], 0xf
mov ecx, esp
push ecx
push edx
push esi
call fcn.1000a450
lea ecx, [ebp - 0xd8]
mov byte [ebp - 4], 0xe
call fcn.10006ec0
add esp, 0x24
push 0x10002460
push 2
push 0x10
mov eax, esi
mov byte [ebp - 4], 0x11
push eax
call fcn.1001711f
mov ecx, dword [sym.imp.SHLWAPI.dll_StrStrIW]
mov esi, 1
mov dword [ebp - 0x140], ecx
mov eax, esi
mov dword [ebp - 0x134], esi
mov dword [ebp - 0x13c], esi
cmp eax, dword [ebp - 0xd0]
jg 0x100089af
xor eax, eax
mov word [ebp - 0x54], ax
lea eax, [ebp - 0x54]
push 0x10062c78
push eax
call dword [ebp - 0x130]
test eax, eax
jns 0x1000828c
mov ecx, 0xa
mov dword [ebp - 0x4c], eax
mov word [ebp - 0x54], cx
push eax
jmp 0x10009fd2
xor eax, eax
mov byte [ebp - 4], 0x12
mov word [ebp - 0x44], ax
lea eax, [ebp - 0x44]
push eax
call edi
test eax, eax
jns 0x100082a6
push eax
jmp 0x10009fd2
mov eax, 8
push str.AddIns.Item_
mov word [ebp - 0x44], ax
call dword [ebp - 0x138]
mov dword [ebp - 0x3c], eax
test eax, eax
jne 0x100082d6
mov eax, 0xa
mov dword [ebp - 0x3c], 0x8007000e
mov word [ebp - 0x44], ax
jmp 0x10009fcd
mov eax, 3
mov dword [ebp - 0x2c], esi
mov word [ebp - 0x34], ax
xor eax, eax
mov byte [ebp - 4], 0x14
push str._.Name
lea ecx, [ebp - 0x24]
mov word [ebp - 0x24], ax
call fcn.10002470
push 0
push 0xffffffffffffffff
push 0
sub esp, 0xc
lea edx, [ebp - 0x14]
mov eax, esp
mov dword [ebp - 0x124], esp
mov dword [eax], 0
mov dword [eax + 4], 0
mov dword [eax + 8], 0
sub esp, 0xc
mov byte [ebp - 4], 0x16
mov ecx, esp
lea eax, [ebp - 0x54]
push ecx
push edx
push eax
call fcn.1000a450
lea ecx, [ebp - 0xc8]
mov byte [ebp - 4], 0x15
call fcn.10006ec0
add esp, 0x24
push 0x10002460
push 4
push 0x10
lea eax, [ebp - 0x54]
mov byte [ebp - 4], 0x18
push eax
call fcn.1001711f
push 0x10059e1c
push dword [ebp - 0xc0]
call dword [ebp - 0x140]
test eax, eax
je 0x1000899c
mov eax, dword [ebp - 0x6c]
cmp eax, dword [ebp - 0x68]
je 0x10008386
mov dword [eax], esi
add dword [ebp - 0x6c], 4
jmp 0x10008396
lea ecx, [ebp - 0x134]
push ecx
push eax
lea ecx, [ebp - 0x70]
call fcn.1000e010
xor eax, eax
mov word [ebp - 0x184], ax
lea eax, [ebp - 0x184]
push 0x10062c78
push eax
call dword [ebp - 0x130]
test eax, eax
jns 0x100083cd
mov ecx, 0xa
mov dword [ebp - 0x17c], eax
mov word [ebp - 0x184], cx
push eax
jmp 0x10009fd2
xor eax, eax
mov byte [ebp - 4], 0x19
mov word [ebp - 0x174], ax
lea eax, [ebp - 0x174]
push eax
call edi
test eax, eax
jns 0x100083ed
push eax
jmp 0x10009fd2
mov eax, 8
push str.AddIns.Item_
mov word [ebp - 0x174], ax
call dword [ebp - 0x138]
mov dword [ebp - 0x16c], eax
test eax, eax
jne 0x10008429
mov eax, 0xa
mov dword [ebp - 0x16c], 0x8007000e
mov word [ebp - 0x174], ax
jmp 0x10009fcd
mov eax, 3
mov dword [ebp - 0x15c], esi
mov word [ebp - 0x164], ax
xor eax, eax
mov byte [ebp - 4], 0x1b
push str._.FullName
lea ecx, [ebp - 0x154]
mov word [ebp - 0x154], ax
call fcn.10002470
push 0
push 0xffffffffffffffff
push 0
sub esp, 0xc
lea esi, [ebp - 0x184]
mov eax, esp
mov dword [ebp - 0x124], esp
lea edx, [ebp - 0x144]
mov dword [eax], 0
mov dword [eax + 4], 0
mov dword [eax + 8], 0
sub esp, 0xc
mov byte [ebp - 4], 0x1d
mov ecx, esp
push ecx
push edx
push esi
call fcn.1000a450
lea ecx, [ebp - 0x108]
mov byte [ebp - 4], 0x1c
call fcn.10006ec0
add esp, 0x24
push 0x10002460
push 4
push 0x10
mov eax, esi
mov byte [ebp - 4], 0x1f
push eax
call fcn.1001711f
push 0x10059e3c
lea ecx, [ebp - 0x2d4]
call fcn.1000a880
mov dword [ebp - 0x134], eax
sub esp, 0x18
mov byte [ebp - 4], 0x20
mov ecx, esp
push dword [ebp - 0x100]
call fcn.1000a880
lea ecx, [ebp - 0x244]
call fcn.10007120
add esp, 0x18
mov edi, eax
mov byte [ebp - 4], 0x21
lea esi, [ebp - 0x16]
mov ecx, dword [ebp - 0x6c]
sub ecx, dword [ebp - 0x70]
sar ecx, 2
nop dword [eax + eax]
mov eax, 0xcccccccd
sub esi, 2
mul ecx
shr edx, 3
lea eax, [edx + edx*4]
add eax, eax
sub ecx, eax
add ecx, 0x30
mov word [esi], cx
mov ecx, edx
test ecx, ecx
jne 0x10008510
push ecx
lea eax, [ebp - 0x16]
push eax
push esi
lea ecx, [ebp - 0x28c]
call fcn.1000cb10
or dword [ebp - 0x120], 0xc0000
push 1
push 0x10059e54
push 0
lea ecx, [ebp - 0x28c]
mov byte [ebp - 4], 0x22
call fcn.1000ca20
mov dword [ebp - 0x1bc], 0
xorps xmm0, xmm0
movups xmmword [ebp - 0x1cc], xmm0
mov dword [ebp - 0x1b8], 0
xor ecx, ecx
movups xmm0, xmmword [eax]
movups xmmword [ebp - 0x1cc], xmm0
movq xmm0, qword [eax + 0x10]
movq qword [ebp - 0x1bc], xmm0
mov dword [eax + 0x10], 0
mov dword [eax + 0x14], 7
mov word [eax], cx
or dword [ebp - 0x120], 0x20000
push 0x10059e4c
lea edx, [ebp - 0x1cc]
mov byte [ebp - 4], 0x23
lea ecx, [ebp - 0x22c]
call fcn.1000bc20
add esp, 4
push edi
push eax
mov byte [ebp - 4], 0x24
lea ecx, [ebp - 0x25c]
push dword [ebp - 0x124]
call fcn.1000c6a0
or dword [ebp - 0x120], 0x10000
mov byte [ebp - 4], 0x25
lea eax, [ebp - 0x25c]
push dword [ebp - 0x134]
lea ecx, [ebp - 0x2bc]
push eax
push dword [ebp - 0x124]
call fcn.1000c6a0
mov eax, dword [ebp - 0x120]
or eax, 0x8000
mov dword [ebp - 0x120], eax
mov dword [ebp - 0x128], eax
mov byte [ebp - 4], 0x26
lea edx, [ebp - 0x2bc]
push dword [ebp - 0x100]
lea ecx, [ebp - 0x214]
call fcn.1000bc20
add esp, 4
mov edx, eax
mov byte [ebp - 4], 0x27
cmp dword [edx + 0x14], 7
mov edi, dword [edx + 0x10]
jbe 0x1000865b
mov edx, dword [edx]
mov ecx, dword [ebp - 0x78]
mov eax, dword [ebp - 0x74]
sub eax, ecx
mov dword [ebp - 0x134], ecx
cmp edi, eax
ja 0x100086a5
cmp dword [ebp - 0x74], 7
lea eax, [ecx + edi]
lea esi, [ebp - 0x88]
mov dword [ebp - 0x78], eax
cmova esi, dword [ebp - 0x88]
lea eax, [edi + edi]
push eax
push edx
lea ecx, [esi + ecx*2]
push ecx
call fcn.10019650
mov eax, dword [ebp - 0x134]
add esp, 0xc
add eax, edi
xor ecx, ecx
mov word [esi + eax*2], cx
jmp 0x100086b9
push edi
push edx
push dword [ebp - 0x124]
lea ecx, [ebp - 0x88]
push edi
call fcn.1000c330
mov byte [ebp - 4], 0x26
mov ecx, dword [ebp - 0x200]
cmp ecx, 7
jbe 0x100086fd
mov edx, dword [ebp - 0x214]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x100086f3
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10009fef
push ecx
push edx
call fcn.1001754d
add esp, 8
xor eax, eax
mov byte [ebp - 4], 0x25
mov ecx, dword [ebp - 0x2a8]
mov dword [ebp - 0x204], 0
mov dword [ebp - 0x200], 7
mov word [ebp - 0x214], ax
cmp ecx, 7
jbe 0x1000875e
mov edx, dword [ebp - 0x2bc]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x10008754
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10009fef
push ecx
push edx
call fcn.1001754d
add esp, 8
xor eax, eax
mov byte [ebp - 4], 0x24
mov ecx, dword [ebp - 0x248]
mov dword [ebp - 0x2ac], 0
mov dword [ebp - 0x2a8], 7
mov word [ebp - 0x2bc], ax
cmp ecx, 7
jbe 0x100087bf
mov edx, dword [ebp - 0x25c]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x100087b5
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10009fef
push ecx
push edx
call fcn.1001754d
add esp, 8
mov byte [ebp - 4], 0x23
mov ecx, dword [ebp - 0x218]
cmp ecx, 7
jbe 0x10008803
mov edx, dword [ebp - 0x22c]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x100087f9
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10009fef
push ecx
push edx
call fcn.1001754d
add esp, 8
xor eax, eax
mov byte [ebp - 4], 0x22
mov ecx, dword [ebp - 0x1b8]
mov dword [ebp - 0x21c], 0
mov dword [ebp - 0x218], 7
mov word [ebp - 0x22c], ax
cmp ecx, 7
jbe 0x10008864
mov edx, dword [ebp - 0x1cc]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x1000885a
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10009fef
push ecx
push edx
call fcn.1001754d
add esp, 8
xor eax, eax
mov byte [ebp - 4], 0x21
mov ecx, dword [ebp - 0x278]
mov dword [ebp - 0x1bc], 0
mov dword [ebp - 0x1b8], 7
mov word [ebp - 0x1cc], ax
cmp ecx, 7
jbe 0x100088c5
mov edx, dword [ebp - 0x28c]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x100088bb
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10009fef
push ecx
push edx
call fcn.1001754d
add esp, 8
xor eax, eax
mov byte [ebp - 4], 0x20
mov ecx, dword [ebp - 0x230]
mov dword [ebp - 0x27c], 0
mov dword [ebp - 0x278], 7
mov word [ebp - 0x28c], ax
cmp ecx, 7
jbe 0x10008926
mov edx, dword [ebp - 0x244]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x1000891c
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10009fef
push ecx
push edx
call fcn.1001754d
add esp, 8
xor eax, eax
mov byte [ebp - 4], 0x1f
mov ecx, dword [ebp - 0x2c0]
mov dword [ebp - 0x234], 0
mov dword [ebp - 0x230], 7
mov word [ebp - 0x244], ax
cmp ecx, 7
jbe 0x10008987
mov edx, dword [ebp - 0x2d4]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x1000897d
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10009fef
push ecx
push edx
call fcn.1001754d
add esp, 8
mov edi, dword [ebp - 0x144]
lea eax, [ebp - 0x108]
push eax
call edi
mov esi, dword [ebp - 0x13c]
lea eax, [ebp - 0xc8]
mov byte [ebp - 4], 0x11
push eax
call edi
inc esi
jmp 0x10008247
call fcn.10007900
xor eax, eax
mov word [ebp - 0x34], ax
lea eax, [ebp - 0x34]
push 0x10062c78
push eax
call dword [ebp - 0x130]
test eax, eax
jns 0x100089df
mov ecx, 0xa
mov dword [ebp - 0x2c], eax
mov word [ebp - 0x34], cx
push eax
jmp 0x10009fd2
xor eax, eax
mov byte [ebp - 4], 0x28
mov word [ebp - 0x24], ax
lea eax, [ebp - 0x24]
push eax
call edi
test eax, eax
jns 0x100089f9
push eax
jmp 0x10009fd2
mov eax, 8
push 0x10059e58
mov word [ebp - 0x24], ax
call dword [ebp - 0x138]
mov dword [ebp - 0x1c], eax
test eax, eax
je 0x10009fbd
push 0
push 0xffffffffffffffff
push 0
sub esp, 0xc
lea esi, [ebp - 0x34]
mov eax, esp
mov dword [ebp - 0x124], esp
lea edx, [ebp - 0x14]
mov dword [eax], 0
mov dword [eax + 4], 0
mov dword [eax + 8], 0
sub esp, 0xc
mov byte [ebp - 4], 0x2a
mov ecx, esp
push ecx
push edx
push esi
call fcn.1000a450
lea ecx, [ebp - 0x118]
mov byte [ebp - 4], 0x29
call fcn.10006ec0
add esp, 0x24
push 0x10002460
push 2
push 0x10
mov eax, esi
mov byte [ebp - 4], 0x2c
push eax
call fcn.1001711f
push dword [ebp - 0x110]
lea ecx, [ebp - 0x31c]
call fcn.1000a880
push str.BedvitXLL32.xll
mov edx, eax
mov byte [ebp - 4], 0x2d
lea ecx, [ebp - 0xb8]
call fcn.1000bc20
add esp, 4
mov byte [ebp - 4], 0x2f
mov ecx, dword [ebp - 0x308]
cmp ecx, 7
jbe 0x10008ae9
mov edx, dword [ebp - 0x31c]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x10008adf
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10009ff4
push ecx
push edx
call fcn.1001754d
add esp, 8
xor eax, eax
mov dword [ebp - 0x30c], 0
cmp dword [ebp - 0x8c], 7
mov word [ebp - 0x31c], ax
lea eax, [ebp - 0xa0]
cmova eax, dword [ebp - 0xa0]
cmp dword [ebp - 0x78], 0
mov dword [ebp - 0x308], 7
mov dword [ebp - 0x124], eax
je 0x10008b48
push str._n_n_______________
lea ecx, [ebp - 0x2c]
call fcn.1000a880
mov dword [ebp - 0x13c], eax
mov byte [ebp - 4], 0x30
mov esi, dword [ebp - 0x120]
or esi, 4
jmp 0x10008b6e
push 0x10058bcc
lea ecx, [ebp - 0x1e4]
call fcn.1000a880
mov dword [ebp - 0x13c], eax
mov dword [ebp - 4], 0x31
mov esi, dword [ebp - 0x120]
or esi, 8
push 0x10059f50
lea ecx, [ebp - 0x3b0]
mov dword [ebp - 0x128], esi
call fcn.1000a880
mov dword [ebp - 0x12c], eax
mov dword [ebp - 4], 0x32
cmp dword [ebp - 0x78], 0
je 0x10008c91
push 0x10059fb8
lea ecx, [ebp - 0x398]
call fcn.1000a880
mov edi, eax
mov byte [ebp - 4], 0x33
lea edx, [ebp - 0x88]
mov ecx, dword [edi + 0x10]
or esi, 0x10
cmp dword [ebp - 0x74], 7
mov eax, dword [edi + 0x14]
cmova edx, dword [ebp - 0x88]
sub eax, ecx
mov dword [ebp - 0x120], esi
mov dword [ebp - 0x128], esi
mov esi, dword [ebp - 0x78]
mov dword [ebp - 0x140], ecx
cmp esi, eax
ja 0x10008c29
cmp dword [edi + 0x14], 7
lea eax, [esi + ecx]
mov dword [edi + 0x10], eax
mov eax, edi
mov dword [ebp - 0x134], edi
jbe 0x10008c02
mov eax, dword [edi]
mov dword [ebp - 0x134], eax
lea ecx, [eax + ecx*2]
lea eax, [esi + esi]
push eax
push edx
push ecx
call fcn.10019650
mov eax, dword [ebp - 0x140]
add esp, 0xc
mov ecx, dword [ebp - 0x134]
add eax, esi
xor edx, edx
mov word [ecx + eax*2], dx
jmp 0x10008c3b
push esi
push edx
push dword [ebp - 0x124]
mov ecx, edi
push esi
call fcn.1000c330
mov edi, eax
movups xmm0, xmmword [edi]
xor eax, eax
movups xmmword [ebp - 0x25c], xmm0
movq xmm0, qword [edi + 0x10]
movq qword [ebp - 0x24c], xmm0
mov dword [edi + 0x10], 0
mov dword [edi + 0x14], 7
mov word [edi], ax
mov ecx, dword [ebp - 0x120]
or ecx, 0x4000
or ecx, 0x20
mov dword [ebp - 4], 0x34
lea edi, [ebp - 0x25c]
mov dword [ebp - 0x120], ecx
mov dword [ebp - 0x128], ecx
mov esi, ecx
jmp 0x10008cb3
push 0x10058bcc
lea ecx, [ebp - 0x380]
call fcn.1000a880
mov edi, eax
or esi, 0x40
mov dword [ebp - 4], 0x35
mov dword [ebp - 0x128], esi
mov ecx, dword [ebp - 0xa8]
mov eax, SysReAllocString
sub eax, ecx
cmp eax, 0x27
jb 0x10009ff9
cmp dword [ebp - 0xa4], 7
lea eax, [ebp - 0xb8]
push ecx
cmova eax, dword [ebp - 0xb8]
push eax
push 0x27
push 0x10059ff8
push ecx
push dword [ebp - 0x124]
lea ecx, [ebp - 0x1ac]
call fcn.1000c8a0
or esi, 0x80
mov dword [ebp - 0x128], esi
push 0x1005a068
lea ecx, [ebp - 0x368]
mov dword [ebp - 4], 0x36
call fcn.1000a880
mov dword [ebp - 0x140], eax
push 0x10059ce8
lea ecx, [ebp - 0x3c8]
mov byte [ebp - 4], 0x37
call fcn.1000a880
push 0x18
push 0x1005a0c8
push 0
mov ecx, eax
mov byte [ebp - 4], 0x38
call fcn.1000ca20
mov dword [ebp - 0x1ec], 0
xorps xmm0, xmm0
movups xmmword [ebp - 0x1fc], xmm0
mov dword [ebp - 0x1e8], 0
xor ecx, ecx
movups xmm0, xmmword [eax]
or esi, 0x100
movups xmmword [ebp - 0x1fc], xmm0
movq xmm0, qword [eax + 0x10]
movq qword [ebp - 0x1ec], xmm0
mov dword [eax + 0x10], 0
mov dword [eax + 0x14], 7
mov word [eax], cx
mov dword [ebp - 0x128], esi
push 0x10059e54
lea edx, [ebp - 0x1fc]
mov byte [ebp - 4], 0x39
lea ecx, [ebp - 0x34c]
call fcn.1000bc20
add esp, 4
push dword [ebp - 0x140]
mov byte [ebp - 4], 0x3a
lea ecx, [ebp - 0x2a4]
push eax
push dword [ebp - 0x124]
call fcn.1000c6a0
or esi, 0x200
mov dword [ebp - 0x128], esi
push 0x1005a048
lea edx, [ebp - 0x2a4]
mov byte [ebp - 4], 0x3b
lea ecx, [ebp - 0x334]
call fcn.1000bc20
add esp, 4
lea ecx, [ebp - 0x1ac]
mov byte [ebp - 4], 0x3c
push ecx
push eax
push dword [ebp - 0x124]
lea ecx, [ebp - 0x214]
call fcn.1000c6a0
or esi, 0x400
mov dword [ebp - 0x128], esi
mov byte [ebp - 4], 0x3d
push edi
lea eax, [ebp - 0x214]
push eax
push dword [ebp - 0x124]
lea ecx, [ebp - 0x22c]
call fcn.1000c6a0
or esi, 0x800
mov dword [ebp - 0x128], esi
push dword [ebp - 0x12c]
lea eax, [ebp - 0x22c]
mov byte [ebp - 4], 0x3e
push eax
push dword [ebp - 0x124]
lea ecx, [ebp - 0x244]
call fcn.1000c6a0
or esi, 0x1000
mov dword [ebp - 0x128], esi
mov byte [ebp - 4], 0x3f
lea eax, [ebp - 0x244]
push dword [ebp - 0x13c]
lea ecx, [ebp - 0x274]
push eax
push dword [ebp - 0x124]
call fcn.1000c6a0
push 0x40021
push dword [ebp - 0x124]
or esi, 0x2000
lea eax, [ebp - 0x274]
cmp dword [ebp - 0x260], 7
mov dword [ebp - 0x120], esi
cmova eax, dword [ebp - 0x274]
push eax
push 0
call dword [sym.imp.USER32.dll_MessageBoxW]
mov ecx, dword [ebp - 0x260]
mov esi, eax
cmp ecx, 7
jbe 0x10008f17
mov edx, dword [ebp - 0x274]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x10008f0d
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10009ffe
push ecx
push edx
call fcn.1001754d
add esp, 8
xor eax, eax
mov byte [ebp - 4], 0x3e
mov ecx, dword [ebp - 0x230]
mov dword [ebp - 0x264], 0
mov dword [ebp - 0x260], 7
mov word [ebp - 0x274], ax
cmp ecx, 7
jbe 0x10008f78
mov edx, dword [ebp - 0x244]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x10008f6e
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10009ffe
push ecx
push edx
call fcn.1001754d
add esp, 8
mov byte [ebp - 4], 0x3d
mov ecx, dword [ebp - 0x218]
cmp ecx, 7
jbe 0x10008fbc
mov edx, dword [ebp - 0x22c]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x10008fb2
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10009ffe
push ecx
push edx
call fcn.1001754d
add esp, 8
mov byte [ebp - 4], 0x3c
mov ecx, dword [ebp - 0x200]
cmp ecx, 7
jbe 0x10009000
mov edx, dword [ebp - 0x214]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x10008ff6
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10009ffe
push ecx
push edx
call fcn.1001754d
add esp, 8
mov byte [ebp - 4], 0x3b
mov ecx, dword [ebp - 0x320]
cmp ecx, 7
jbe 0x10009044
mov edx, dword [ebp - 0x334]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x1000903a
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10009ffe
push ecx
push edx
call fcn.1001754d
add esp, 8
xor eax, eax
mov byte [ebp - 4], 0x3a
mov ecx, dword [ebp - 0x290]
mov dword [ebp - 0x324], 0
mov dword [ebp - 0x320], 7
mov word [ebp - 0x334], ax
cmp ecx, 7
jbe 0x100090a5
mov edx, dword [ebp - 0x2a4]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x1000909b
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10009ffe
push ecx
push edx
call fcn.1001754d
add esp, 8
xor eax, eax
mov byte [ebp - 4], 0x39
mov ecx, dword [ebp - 0x338]
mov dword [ebp - 0x294], 0
mov dword [ebp - 0x290], 7
mov word [ebp - 0x2a4], ax
cmp ecx, 7
jbe 0x10009106
mov edx, dword [ebp - 0x34c]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x100090fc
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10009ffe
push ecx
push edx
call fcn.1001754d
add esp, 8
xor eax, eax
mov byte [ebp - 4], 0x38
mov ecx, dword [ebp - 0x1e8]
mov dword [ebp - 0x33c], 0
mov dword [ebp - 0x338], 7
mov word [ebp - 0x34c], ax
cmp ecx, 7
jbe 0x10009167
mov edx, dword [ebp - 0x1fc]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x1000915d
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10009ffe
push ecx
push edx
call fcn.1001754d
add esp, 8
xor eax, eax
mov byte [ebp - 4], 0x37
mov ecx, dword [ebp - 0x3b4]
mov dword [ebp - 0x1ec], 0
mov dword [ebp - 0x1e8], 7
mov word [ebp - 0x1fc], ax
cmp ecx, 7
jbe 0x100091c8
mov edx, dword [ebp - 0x3c8]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x100091be
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10009ffe
push ecx
push edx
call fcn.1001754d
add esp, 8
xor eax, eax
mov byte [ebp - 4], 0x36
mov ecx, dword [ebp - 0x354]
mov dword [ebp - 0x3b8], 0
mov dword [ebp - 0x3b4], 7
mov word [ebp - 0x3c8], ax
cmp ecx, 7
jbe 0x10009229
mov edx, dword [ebp - 0x368]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x1000921f
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10009ffe
push ecx
push edx
call fcn.1001754d
add esp, 8
xor eax, eax
mov byte [ebp - 4], 0x35
mov ecx, dword [ebp - 0x198]
mov dword [ebp - 0x358], 0
mov dword [ebp - 0x354], 7
mov word [ebp - 0x368], ax
cmp ecx, 7
jbe 0x1000928a
mov edx, dword [ebp - 0x1ac]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x10009280
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10009ffe
push ecx
push edx
call fcn.1001754d
add esp, 8
mov dword [ebp - 4], 0x34
mov eax, dword [ebp - 0x120]
test al, 0x40
je 0x10009307
mov ecx, dword [ebp - 0x36c]
and eax, 0xffffffbf
mov dword [ebp - 0x120], eax
cmp ecx, 7
jbe 0x100092ea
mov edx, dword [ebp - 0x380]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x100092da
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10009ffe
push ecx
push edx
call fcn.1001754d
mov eax, dword [ebp - 0x120]
add esp, 8
xor ecx, ecx
mov dword [ebp - 0x370], 0
mov dword [ebp - 0x36c], 7
mov word [ebp - 0x380], cx
mov dword [ebp - 4], 0x33
test al, 0x20
je 0x10009361
mov ecx, dword [ebp - 0x248]
and eax, 0xffffffdf
mov dword [ebp - 0x120], eax
cmp ecx, 7
jbe 0x10009361
mov edx, dword [ebp - 0x25c]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x10009351
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10009ffe
push ecx
push edx
call fcn.1001754d
mov eax, dword [ebp - 0x120]
add esp, 8
mov dword [ebp - 4], 0x32
test al, 0x10
je 0x100093d2
mov ecx, dword [ebp - 0x384]
and eax, 0xffffffef
mov dword [ebp - 0x120], eax
cmp ecx, 7
jbe 0x100093b5
mov edx, dword [ebp - 0x398]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x100093ab
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10009ffe
push ecx
push edx
call fcn.1001754d
add esp, 8
xor eax, eax
mov dword [ebp - 0x388], 0
mov dword [ebp - 0x384], 7
mov word [ebp - 0x398], ax
mov byte [ebp - 4], 0x31
mov ecx, dword [ebp - 0x39c]
cmp ecx, 7
jbe 0x10009416
mov edx, dword [ebp - 0x3b0]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x1000940c
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10009ffe
push ecx
push edx
call fcn.1001754d
add esp, 8
xor eax, eax
mov dword [ebp - 4], 0x30
mov word [ebp - 0x3b0], ax
mov eax, dword [ebp - 0x120]
mov dword [ebp - 0x3a0], 0
mov dword [ebp - 0x39c], 7
test al, 8
je 0x100094b0
mov ecx, dword [ebp - 0x1d0]
and eax, 0xfffffff7
mov dword [ebp - 0x120], eax
cmp ecx, 7
jbe 0x10009493
mov edx, dword [ebp - 0x1e4]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x10009483
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10009ffe
push ecx
push edx
call fcn.1001754d
mov eax, dword [ebp - 0x120]
add esp, 8
xor ecx, ecx
mov dword [ebp - 0x1d4], 0
mov dword [ebp - 0x1d0], 7
mov word [ebp - 0x1e4], cx
mov dword [ebp - 4], 0x2f
test al, 4
je 0x100094f5
mov ecx, dword [ebp - 0x18]
cmp ecx, 7
jbe 0x100094f5
mov edx, dword [ebp - 0x2c]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x100094eb
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10009ffe
push ecx
push edx
call fcn.1001754d
add esp, 8
cmp esi, 2
jne 0x10009656
mov ecx, dword [ebp - 0xa4]
cmp ecx, 7
jbe 0x1000953e
mov edx, dword [ebp - 0xb8]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x10009534
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1000a003
push ecx
push edx
call fcn.1001754d
add esp, 8
mov edi, dword [ebp - 0x144]
xor eax, eax
mov word [ebp - 0xb8], ax
lea eax, [ebp - 0x118]
push eax
mov dword [ebp - 0xa8], 0
mov dword [ebp - 0xa4], 7
call edi
lea eax, [ebp - 0xd8]
push eax
call edi
mov ecx, dword [ebp - 0x74]
cmp ecx, 7
jbe 0x100095b0
mov edx, dword [ebp - 0x88]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x100095a6
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1000a003
push ecx
push edx
call fcn.1001754d
add esp, 8
mov edx, dword [ebp - 0x70]
xor eax, eax
mov dword [ebp - 0x78], 0
mov dword [ebp - 0x74], 7
mov word [ebp - 0x88], ax
test edx, edx
je 0x10009613
mov ecx, dword [ebp - 0x68]
mov eax, edx
sub ecx, edx
and ecx, 0xfffffffc
cmp ecx, 0x1000
jb 0x100095f4
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1000a003
push ecx
push edx
call fcn.1001754d
add esp, 8
mov dword [ebp - 0x70], 0
mov dword [ebp - 0x6c], 0
mov dword [ebp - 0x68], 0
mov ecx, dword [ebp - 0x8c]
cmp ecx, 7
jbe 0x10009f7f
mov edx, dword [ebp - 0xa0]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x10007f1e
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1000a003
jmp 0x10007f1e
mov edi, dword [ebp - 0x144]
xor esi, esi
nop
mov eax, dword [ebp - 0x6c]
sub eax, dword [ebp - 0x70]
sar eax, 2
cmp esi, eax
jae 0x10009915
xor eax, eax
mov word [ebp - 0x184], ax
lea eax, [ebp - 0x184]
push 0x10062c78
push eax
call dword [ebp - 0x130]
test eax, eax
jns 0x100096a8
mov ecx, 0xa
mov dword [ebp - 0x17c], eax
mov word [ebp - 0x184], cx
push eax
jmp 0x10009fd2
xor eax, eax
mov byte [ebp - 4], 0x40
mov word [ebp - 0x174], ax
lea eax, [ebp - 0x174]
push eax
call edi
test eax, eax
jns 0x100096c8
push eax
jmp 0x10009fd2
mov eax, 8
push str.AddIns.Item_
mov word [ebp - 0x174], ax
call dword [ebp - 0x138]
mov dword [ebp - 0x16c], eax
test eax, eax
jne 0x10009704
mov eax, 0xa
mov dword [ebp - 0x16c], 0x8007000e
mov word [ebp - 0x174], ax
jmp 0x10009fcd
mov eax, dword [ebp - 0x70]
mov ecx, 3
mov eax, dword [eax + esi*4]
mov word [ebp - 0x164], cx
mov dword [ebp - 0x15c], eax
xor eax, eax
mov byte [ebp - 4], 0x42
push 0x1005a0fc
lea ecx, [ebp - 0x154]
mov word [ebp - 0x154], ax
call fcn.10002470
push 0
push 0xffffffffffffffff
push 0
sub esp, 0xc
lea edx, [ebp - 0x144]
mov eax, esp
mov dword [ebp - 0x124], esp
mov dword [eax], 0
mov dword [eax + 4], 0
mov dword [eax + 8], 0
sub esp, 0xc
mov byte [ebp - 4], 0x44
mov ecx, esp
lea eax, [ebp - 0x184]
push ecx
push edx
push eax
call fcn.1000a450
lea ecx, [ebp - 0xc8]
mov byte [ebp - 4], 0x43
call fcn.10006ec0
add esp, 0x24
push 0x10002460
push 4
push 0x10
lea eax, [ebp - 0x184]
mov byte [ebp - 4], 0x46
push eax
call fcn.1001711f
mov eax, 0xb
lea ecx, [ebp - 0xc8]
mov word [ebp - 0x108], ax
or eax, 0xffffffff
mov word [ebp - 0x100], ax
lea eax, [ebp - 0x108]
push eax
call fcn.100025f0
mov byte [ebp - 0x119], al
lea eax, [ebp - 0x108]
push eax
call edi
cmp byte [ebp - 0x119], 0
je 0x10009902
xor eax, eax
mov word [ebp - 0x64], ax
lea eax, [ebp - 0x64]
push 0x10062c78
push eax
call dword [ebp - 0x130]
test eax, eax
jns 0x10009815
mov ecx, 0xa
mov dword [ebp - 0x5c], eax
mov word [ebp - 0x64], cx
push eax
jmp 0x10009fd2
xor eax, eax
mov byte [ebp - 4], 0x47
mov word [ebp - 0x54], ax
lea eax, [ebp - 0x54]
push eax
call edi
test eax, eax
jns 0x1000982f
push eax
jmp 0x10009fd2
mov eax, 8
push str.AddIns.Item_
mov word [ebp - 0x54], ax
call dword [ebp - 0x138]
mov dword [ebp - 0x4c], eax
test eax, eax
jne 0x1000985f
mov eax, 0xa
mov dword [ebp - 0x4c], 0x8007000e
mov word [ebp - 0x54], ax
jmp 0x10009fcd
mov eax, dword [ebp - 0x70]
mov ecx, 3
mov eax, dword [eax + esi*4]
mov word [ebp - 0x44], cx
mov dword [ebp - 0x3c], eax
xor eax, eax
mov byte [ebp - 4], 0x49
push str._.Installed
lea ecx, [ebp - 0x34]
mov word [ebp - 0x34], ax
call fcn.10002470
mov eax, 0xb
mov word [ebp - 0x24], ax
xor eax, eax
mov word [ebp - 0x1c], ax
push eax
push 0xffffffffffffffff
push eax
sub esp, 0xc
lea edx, [ebp - 0x14]
mov eax, esp
mov dword [ebp - 0x124], esp
mov dword [eax], 0
mov dword [eax + 4], 0
mov dword [eax + 8], 0
sub esp, 0xc
mov byte [ebp - 4], 0x4b
mov ecx, esp
lea eax, [ebp - 0x64]
push ecx
push edx
push eax
call fcn.1000a450
lea ecx, [ebp - 0x1c4]
mov byte [ebp - 4], 0x4a
call fcn.10006ec0
add esp, 0x24
lea eax, [ebp - 0x1c4]
push eax
call edi
push 0x10002460
push 5
push 0x10
lea eax, [ebp - 0x64]
mov byte [ebp - 4], 0x46
push eax
call fcn.1001711f
lea eax, [ebp - 0xc8]
mov byte [ebp - 4], 0x2f
push eax
call edi
inc esi
jmp 0x10009660
call fcn.10007900
mov esi, dword [0x10062c28]
lea eax, [ebp - 0xb8]
sub esp, 0x18
mov ecx, esp
push eax
call fcn.1000a9a0
mov edx, 0x69
mov ecx, esi
call fcn.10007610
mov edi, eax
add esp, 0x18
test edi, edi
je 0x10009a2b
cmp dword [ebp - 0x8c], 7
lea esi, [ebp - 0xa0]
push 0x1005a118
cmova esi, dword [ebp - 0xa0]
lea ecx, [ebp - 0x1ac]
call fcn.1000a880
push 0
push edi
sub esp, 0xc
mov byte [ebp - 4], 0x4c
mov ecx, esp
lea eax, [ebp - 0x194]
lea edx, [ebp - 0x1ac]
push ecx
push eax
push edx
call fcn.1000a340
xor edx, edx
lea ecx, [ebp - 0x1e4]
call fcn.10005820
add esp, 0x14
cmp dword [eax + 0x14], 7
jbe 0x100099a6
mov eax, dword [eax]
push 0x40010
push esi
push eax
push 0
call dword [sym.imp.USER32.dll_MessageBoxW]
mov ecx, dword [ebp - 0x1d0]
cmp ecx, 7
jbe 0x100099f5
mov edx, dword [ebp - 0x1e4]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x100099eb
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1000a008
push ecx
push edx
call fcn.1001754d
add esp, 8
push fcn.1000a820
xor eax, eax
mov dword [ebp - 0x1d4], 0
push 1
mov word [ebp - 0x1e4], ax
lea eax, [ebp - 0x1ac]
push 0x18
push eax
mov dword [ebp - 0x1d0], 7
mov byte [ebp - 4], 0x2f
call fcn.1001711f
xor eax, eax
mov word [ebp - 0x194], ax
lea eax, [ebp - 0x194]
push 0x10062c78
push eax
call dword [ebp - 0x130]
test eax, eax
jns 0x10009a62
mov ecx, 0xa
mov dword [ebp - 0x18c], eax
mov word [ebp - 0x194], cx
push eax
jmp 0x10009fd2
mov edi, dword [ebp - 0x144]
xor eax, eax
mov byte [ebp - 4], 0x4d
mov word [ebp - 0x184], ax
lea eax, [ebp - 0x184]
push eax
call edi
test eax, eax
jns 0x10009a88
push eax
jmp 0x10009fd2
mov eax, 8
push str.AddIns.Add_
mov word [ebp - 0x184], ax
call dword [ebp - 0x138]
mov dword [ebp - 0x17c], eax
test eax, eax
jne 0x10009ac4
mov eax, 0xa
mov dword [ebp - 0x17c], 0x8007000e
mov word [ebp - 0x184], ax
jmp 0x10009fcd
mov byte [ebp - 4], 0x4e
lea esi, [ebp - 0xb8]
cmp dword [ebp - 0xa4], 7
cmova esi, dword [ebp - 0xb8]
xor eax, eax
mov word [ebp - 0x174], ax
lea eax, [ebp - 0x174]
push eax
call edi
test eax, eax
jns 0x10009af8
push eax
jmp 0x10009fd2
mov eax, 8
push esi
mov word [ebp - 0x174], ax
call dword [ebp - 0x138]
mov dword [ebp - 0x16c], eax
test eax, eax
jne 0x10009b34
test esi, esi
je 0x10009b34
mov eax, 0xa
mov dword [ebp - 0x16c], 0x8007000e
mov word [ebp - 0x174], ax
jmp 0x10009fcd
mov eax, 3
mov dword [ebp - 0x15c], 0
mov word [ebp - 0x164], ax
xor eax, eax
mov byte [ebp - 4], 0x50
push 0x1005a148
lea ecx, [ebp - 0x154]
mov word [ebp - 0x154], ax
call fcn.10002470
push 0
push 0xffffffffffffffff
push 0
sub esp, 0xc
lea esi, [ebp - 0x194]
mov eax, esp
mov dword [ebp - 0x124], esp
lea edx, [ebp - 0x144]
mov dword [eax], 0
mov dword [eax + 4], 0
mov dword [eax + 8], 0
sub esp, 0xc
mov byte [ebp - 4], 0x52
mov ecx, esp
push ecx
push edx
push esi
call fcn.1000a450
lea ecx, [ebp - 0xe8]
mov byte [ebp - 4], 0x51
call fcn.10006ec0
add esp, 0x24
push 0x10002460
push 5
push 0x10
mov eax, esi
mov byte [ebp - 4], 0x54
push eax
call fcn.1001711f
call fcn.10007900
xor eax, eax
mov word [ebp - 0x44], ax
lea eax, [ebp - 0xe8]
push eax
lea eax, [ebp - 0x44]
push eax
call dword [ebp - 0x130]
test eax, eax
jns 0x10009c02
mov ecx, 0xa
mov dword [ebp - 0x3c], eax
mov word [ebp - 0x44], cx
push eax
jmp 0x10009fd2
xor eax, eax
mov byte [ebp - 4], 0x55
mov word [ebp - 0x34], ax
lea eax, [ebp - 0x34]
push eax
call edi
test eax, eax
jns 0x10009c1c
push eax
jmp 0x10009fd2
mov eax, 8
push 0x1005a14c
mov word [ebp - 0x34], ax
call dword [ebp - 0x138]
mov dword [ebp - 0x2c], eax
test eax, eax
jne 0x10009c4c
mov eax, 0xa
mov dword [ebp - 0x2c], 0x8007000e
mov word [ebp - 0x34], ax
jmp 0x10009fcd
mov eax, 0xb
mov word [ebp - 0x24], ax
or eax, 0xffffffff
mov word [ebp - 0x1c], ax
push 0
push eax
push 0
sub esp, 0xc
lea esi, [ebp - 0x44]
mov eax, esp
mov dword [ebp - 0x124], esp
lea edx, [ebp - 0x14]
mov dword [eax], 0
mov dword [eax + 4], 0
mov dword [eax + 8], 0
sub esp, 0xc
mov byte [ebp - 4], 0x57
mov ecx, esp
push ecx
push edx
push esi
call fcn.1000a450
lea ecx, [ebp - 0xf8]
mov byte [ebp - 4], 0x56
call fcn.10006ec0
add esp, 0x24
push 0x10002460
push 3
push 0x10
mov eax, esi
mov byte [ebp - 4], 0x59
push eax
call fcn.1001711f
call fcn.10007900
cmp dword [ebp - 0x8c], 7
lea eax, [ebp - 0xa0]
push 0x40040
cmova eax, dword [ebp - 0xa0]
push eax
push 0x1005a168
push 0
call dword [sym.imp.USER32.dll_MessageBoxW]
push 0x10062c30
push 1
push 0
push 0x8067
call fcn.10001da0
add esp, 0x10
test eax, eax
jne 0x10009d19
push 0x10061aa0
push 1
push eax
push 0x8010
call fcn.10001da0
add esp, 0x10
lea eax, [ebp - 0xf8]
push eax
call edi
lea eax, [ebp - 0xe8]
push eax
call edi
mov ecx, dword [ebp - 0xa4]
cmp ecx, 7
jbe 0x10009d6b
mov edx, dword [ebp - 0xb8]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x10009d61
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1000a003
push ecx
push edx
call fcn.1001754d
add esp, 8
xor eax, eax
mov dword [ebp - 0xa8], 0
mov word [ebp - 0xb8], ax
lea eax, [ebp - 0x118]
push eax
mov dword [ebp - 0xa4], 7
call edi
lea eax, [ebp - 0xd8]
push eax
call edi
mov ecx, dword [ebp - 0x74]
cmp ecx, 7
jbe 0x10009dd7
mov edx, dword [ebp - 0x88]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x10009dcd
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1000a003
push ecx
push edx
call fcn.1001754d
add esp, 8
mov edx, dword [ebp - 0x70]
xor eax, eax
mov dword [ebp - 0x78], 0
mov dword [ebp - 0x74], 7
mov word [ebp - 0x88], ax
test edx, edx
je 0x10009613
mov ecx, dword [ebp - 0x68]
mov eax, edx
sub ecx, edx
and ecx, 0xfffffffc
cmp ecx, 0x1000
jb 0x100095f4
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1000a003
jmp 0x100095f4
mov eax, 1
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x14]
xor ecx, ebp
call fcn.100170dc
mov esp, ebp
pop ebp
ret
call fcn.1001ef91
mov ecx, 0xa
mov dword [ebp - 0x2c], eax
push eax
mov word [ebp - 0x34], cx
call fcn.100023c0
push eax
call fcn.100023c0
mov eax, 0xa
mov dword [ebp - 0x1c], 0x8007000e
mov word [ebp - 0x24], ax
push 0x8007000e
call fcn.100023c0
mov ecx, 0xa
mov dword [ebp - 0x2c], eax
push eax
mov word [ebp - 0x34], cx
call fcn.100023c0
push eax
call fcn.100023c0
call fcn.1001ef91
call fcn.1001ef91
call fcn.100020c0
call fcn.1001ef91
call fcn.1001ef91
call fcn.1001ef91
int3