Function at 0x10015218
Capabilities:
Parse pe header
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x100505a0
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
push ecx
sub esp, 0x5f0
push ebx
push esi
push edi
mov dword [ebp - 0x10], esp
mov dword [ebp - 0x9c], 0
mov dword [ebp - 0x1a8], 0x79c63c40
mov dword [ebp - 0x8c], 0x3ee76373
mov dword [ebp - 0x1f0], 0x54114571
mov dword [ebp - 0x170], 1
mov dword [ebp - 0x194], 0
mov dword [ebp - 0x17c], 0xd5228033
mov dword [ebp - 0x280], 1
mov dword [ebp - 0x36c], 2
mov dword [ebp - 0xf8], 0
jmp 0x100152b0
mov eax, dword [ebp - 0xf8]
inc eax
mov dword [ebp - 0xf8], eax
cmp dword [ebp - 0xf8], 2
jge 0x100152cc
mov eax, dword [ebp - 0xf8]
mov dword [ebp + eax*4 - 0x458], 0xc7d24b5e
jmp 0x100152a3
mov eax, dword [ebp - 0x9c]
cmp eax, dword [ebp - 0x9c]
jne 0x100152e6
mov dword [ebp - 0x30c], 1
jmp 0x100152ed
and dword [ebp - 0x30c], 0
cmp dword [ebp - 0x9c], 0
jne 0x10015308
cmp dword [ebp - 0x9c], 1
jne 0x10015308
and dword [ebp - 0x1c4], 0
jmp 0x10015312
mov dword [ebp - 0x1c4], 1
cmp dword [ebp - 0x1c4], 0
jae 0x10015327
mov dword [ebp - 0x32c], 1
jmp 0x1001532e
and dword [ebp - 0x32c], 0
mov eax, dword [ebp - 0x30c]
neg eax
imul eax, eax, 0
cmp eax, dword [ebp - 0x32c]
jle 0x1001534d
mov dword [ebp - 0x328], 1
jmp 0x10015354
and dword [ebp - 0x328], 0
mov eax, dword [ebp - 0x328]
mov dword [ebp - 0x1a8], eax
mov eax, dword [ebp - 0x17c]
inc eax
mov dword [ebp - 0x17c], eax
mov eax, dword [ebp - 0x9c]
cmp eax, dword [ebp - 0x17c]
je 0x10015387
mov dword [ebp - 0x31c], 1
jmp 0x1001538e
and dword [ebp - 0x31c], 0
mov eax, 0x7c8a36a7
test eax, eax
je 0x100153ac
cmp dword [ebp - 0x8c], 0
je 0x100153ac
mov dword [ebp - 0x1c8], 1
jmp 0x100153b3
and dword [ebp - 0x1c8], 0
cmp dword [ebp - 0x8c], 0
jne 0x100153ce
cmp dword [ebp - 0x8c], 0
jne 0x100153ce
and dword [ebp - 0x2d0], 0
jmp 0x100153d8
mov dword [ebp - 0x2d0], 1
mov eax, dword [ebp - 0x2d0]
sub eax, dword [ebp - 0x8c]
cmp eax, dword [ebp - 0x170]
jle 0x10015401
cmp dword [ebp - 0x194], 0
je 0x10015401
mov dword [ebp - 0x304], 1
jmp 0x10015408
and dword [ebp - 0x304], 0
mov eax, dword [ebp - 0x280]
cmp dword [ebp - 0x304], eax
jge 0x10015422
mov dword [ebp - 0x1c0], 1
jmp 0x10015429
and dword [ebp - 0x1c0], 0
mov eax, dword [ebp - 0x8c]
cmp dword [ebp - 0x1c0], eax
jle 0x10015443
mov dword [ebp - 0x278], 1
jmp 0x1001544a
and dword [ebp - 0x278], 0
mov eax, dword [ebp - 0x1a8]
cmp dword [ebp - 0x278], eax
jne 0x10015464
mov dword [ebp - 0x300], 1
jmp 0x1001546b
and dword [ebp - 0x300], 0
mov eax, dword [ebp - 0x1c8]
cmp eax, dword [ebp - 0x300]
jge 0x10015485
mov dword [ebp - 0x1d0], 1
jmp 0x1001548c
and dword [ebp - 0x1d0], 0
mov eax, dword [ebp - 0x170]
cmp dword [ebp - 0x1d0], eax
jne 0x100154a6
mov dword [ebp - 0x1d8], 1
jmp 0x100154ad
and dword [ebp - 0x1d8], 0
mov eax, dword [ebp - 0x280]
cmp dword [ebp - 0x1d8], eax
je 0x100154c7
mov dword [ebp - 0x2d8], 1
jmp 0x100154ce
and dword [ebp - 0x2d8], 0
mov eax, dword [ebp - 0x2d8]
sub eax, dword [ebp - 0x8c]
jne 0x100154ee
mov eax, 0xb108f980
test eax, eax
jne 0x100154ee
and dword [ebp - 0x1e0], 0
jmp 0x100154f8
mov dword [ebp - 0x1e0], 1
mov eax, dword [ebp - 0x1e0]
inc eax
mov dword [ebp - 0x170], eax
mov eax, dword [ebp - 0x194]
add eax, dword [ebp - 0x170]
cmp eax, dword [ebp - 0x36c]
jg 0x10015525
mov dword [ebp - 0x288], 1
jmp 0x1001552c
and dword [ebp - 0x288], 0
cmp dword [ebp - 0x288], 1
je 0x10015541
mov dword [ebp - 0x1e8], 1
jmp 0x10015548
and dword [ebp - 0x1e8], 0
mov eax, dword [ebp - 0x194]
cmp dword [ebp - 0x1e8], eax
jge 0x10015562
mov dword [ebp - 0x1f8], 1
jmp 0x10015569
and dword [ebp - 0x1f8], 0
mov eax, dword [ebp - 0x31c]
mov dword [ebp - 0x1f0], eax
mov eax, dword [ebp - 0x1f0]
mov dword [ebp - 0x290], eax
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x290]
mov dword [ebp + eax - 0x458], ecx
mov eax, dword [ebp - 0x290]
cmp eax, dword [ebp - 0x1f8]
je 0x100155ae
mov dword [ebp - 0x2e0], 1
jmp 0x100155b5
and dword [ebp - 0x2e0], 0
mov eax, dword [ebp - 0x2e0]
mov dword [ebp - 0x1a8], eax
cmp dword [ebp + 0x10], 0
jbe 0x100155e3
movzx eax, byte [ebp + 0x14]
test eax, eax
je 0x100155e3
movzx eax, word [ebp + 0x10]
push eax
push dword [ebp + 8]
call fcn.1000f9f5
pop ecx
pop ecx
jmp 0x10017b88
mov dword [ebp - 0x20], 0x44a75432
mov dword [ebp - 0x178], 0
jmp 0x10015603
mov eax, dword [ebp - 0x178]
inc eax
mov dword [ebp - 0x178], eax
cmp dword [ebp - 0x178], 2
jge 0x1001561f
mov eax, dword [ebp - 0x178]
mov dword [ebp + eax*4 - 0x318], 0xd2717f40
jmp 0x100155f6
mov eax, dword [ebp - 0x20]
cmp eax, dword [ebp - 0x20]
jle 0x10015633
mov dword [ebp - 0x210], 1
jmp 0x1001563a
and dword [ebp - 0x210], 0
cmp dword [ebp - 0x20], 0x531d
jge 0x1001564f
mov dword [ebp - 0x200], 1
jmp 0x10015656
and dword [ebp - 0x200], 0
mov eax, dword [ebp - 0x20]
cmp dword [ebp - 0x200], eax
jge 0x1001566d
mov dword [ebp - 0x298], 1
jmp 0x10015674
and dword [ebp - 0x298], 0
cmp dword [ebp - 0x298], 0x23a266d2
jle 0x1001568c
mov dword [ebp - 0x208], 1
jmp 0x10015693
and dword [ebp - 0x208], 0
mov eax, dword [ebp - 0x20]
cmp dword [ebp - 0x208], eax
jle 0x100156aa
mov dword [ebp - 0x308], 1
jmp 0x100156b1
and dword [ebp - 0x308], 0
mov eax, dword [ebp - 0x20]
cmp dword [ebp - 0x308], eax
jne 0x100156ce
cmp dword [ebp - 0x20], 0
je 0x100156ce
mov dword [ebp - 0x2a0], 1
jmp 0x100156d5
and dword [ebp - 0x2a0], 0
mov eax, dword [ebp - 0x210]
cmp eax, dword [ebp - 0x2a0]
jg 0x100156f3
push 9
pop eax
test eax, eax
jne 0x100156f3
and dword [ebp - 0x218], 0
jmp 0x100156fd
mov dword [ebp - 0x218], 1
mov eax, dword [ebp - 0x20]
cmp dword [ebp - 0x218], eax
jle 0x10015714
mov dword [ebp - 0x2e8], 1
jmp 0x1001571b
and dword [ebp - 0x2e8], 0
mov eax, dword [ebp - 0x2e8]
mov dword [ebp - 0x20], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x20]
cmp ecx, dword [ebp + eax - 0x318]
jge 0x10015742
mov dword [ebp - 0x374], 1
jmp 0x10015749
and dword [ebp - 0x374], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x318]
mov dword [ebp - 0x4c8], eax
mov eax, 0x197e7c14
test eax, eax
jne 0x10015771
mov dword [ebp - 0x220], 1
jmp 0x10015778
and dword [ebp - 0x220], 0
push 4
pop eax
imul eax, eax, 0
imul ecx, dword [ebp - 0x220], 0xfffffffb
cmp ecx, dword [ebp + eax - 0x318]
jne 0x1001579a
mov dword [ebp - 0x2a8], 1
jmp 0x100157a1
and dword [ebp - 0x2a8], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x2a8]
mov dword [ebp + eax - 0x318], ecx
mov dword [ebp - 0x228], 0x6577
mov dword [ebp - 0x384], str.uzmtj_qgddzcdz_xidgww_fpf_szovi_bgelhcera_eahjd_zjuhh
cmp dword [ebp - 0x228], 0x6887
jle 0x100158ae
and dword [ebp - 0x14c], 0
jmp 0x100157ee
mov eax, dword [ebp - 0x14c]
inc eax
mov dword [ebp - 0x14c], eax
cmp dword [ebp - 0x14c], 0x6aec
jge 0x100158ae
and dword [ebp - 0x174], 0
jmp 0x10015814
mov eax, dword [ebp - 0x174]
inc eax
mov dword [ebp - 0x174], eax
cmp dword [ebp - 0x174], 0x3aad
jge 0x100158a9
and dword [ebp - 0xe8], 0
jmp 0x1001583a
mov eax, dword [ebp - 0xe8]
inc eax
mov dword [ebp - 0xe8], eax
cmp dword [ebp - 0xe8], 0x564b
jge 0x100158a4
mov eax, dword [ebp - 0x174]
imul eax, dword [ebp - 0xe8]
and eax, dword [ebp - 0x14c]
cdq
mov dword [ebp - 0x390], eax
mov dword [ebp - 0x38c], edx
push dword [ebp - 0x38c]
push dword [ebp - 0x390]
lea ecx, [ebp - 0x5d8]
call fcn.10001a55
pop ecx
pop ecx
mov dword [ebp - 0x37c], eax
mov ecx, dword [ebp - 0x37c]
call fcn.100032b3
push eax
call fcn.100379e3
pop ecx
lea ecx, [ebp - 0x5d8]
call fcn.100032a9
jmp 0x1001582d
jmp 0x10015807
jmp 0x100157e1
mov dword [ebp - 0x20], 0xffffffeb
jmp 0x100158be
mov eax, dword [ebp - 0x20]
inc eax
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 0xffffffed
jle 0x10015914
mov dword [ebp - 0xf0], 0
jmp 0x100158dd
mov eax, dword [ebp - 0xf0]
inc eax
mov dword [ebp - 0xf0], eax
cmp dword [ebp - 0xf0], 4
jge 0x100158f9
mov eax, dword [ebp - 0xf0]
mov dword [ebp + eax*4 - 0x578], 0x8661
jmp 0x100158d0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x318]
push 4
pop ecx
shl ecx, 1
mov dword [ebp + ecx - 0x578], eax
jmp 0x100158b7
and dword [ebp - 4], 0
cmp dword [ebp - 0x228], 0x6340
jge 0x10015930
push dword [ebp - 0x384]
call fcn.100379e3
pop ecx
jmp 0x1001594c
or dword [ebp - 4], 0xffffffff
jmp 0x10015956
mov dword [ebp - 0x38], 0xeac45307
mov dword [ebp - 0x238], 0xffffffff
mov dword [ebp - 0x44c], 0
mov dword [ebp - 0x448], 0
mov dword [ebp - 0x444], 0
mov dword [ebp - 0x440], 0
mov dword [ebp - 0x50], 0
jmp 0x1001599f
mov eax, dword [ebp - 0x50]
inc eax
mov dword [ebp - 0x50], eax
cmp dword [ebp - 0x50], 2
jge 0x100159b5
mov eax, dword [ebp - 0x50]
mov dword [ebp + eax*4 - 0x424], 0xe80d68f9
jmp 0x10015998
mov dword [ebp - 0x50], 0
jmp 0x100159c5
mov eax, dword [ebp - 0x50]
inc eax
mov dword [ebp - 0x50], eax
cmp dword [ebp - 0x50], 1
jge 0x100159db
mov eax, dword [ebp - 0x50]
mov dword [ebp + eax*4 - 0x3cc], 5
jmp 0x100159be
mov eax, dword [ebp - 0x38]
cmp eax, dword [ebp - 0x38]
jge 0x100159ef
mov dword [ebp - 0x3e0], 1
jmp 0x100159f6
and dword [ebp - 0x3e0], 0
mov eax, dword [ebp - 0x38]
cmp eax, dword [ebp - 0x38]
je 0x10015a0a
mov dword [ebp - 0x320], 1
jmp 0x10015a11
and dword [ebp - 0x320], 0
cmp dword [ebp - 0x320], 0xfffffff6
je 0x10015a26
mov dword [ebp - 0x230], 1
jmp 0x10015a2d
and dword [ebp - 0x230], 0
mov eax, dword [ebp - 0x38]
cmp dword [ebp - 0x230], eax
jne 0x10015a44
mov dword [ebp - 0x2b0], 1
jmp 0x10015a4b
and dword [ebp - 0x2b0], 0
mov eax, dword [ebp - 0x2b0]
mov dword [ebp - 0x238], eax
mov eax, dword [ebp - 0x238]
sub eax, dword [ebp - 0x38]
neg eax
je 0x10015a76
cmp dword [ebp - 0x38], 0
je 0x10015a76
mov dword [ebp - 0x1b0], 1
jmp 0x10015a7d
and dword [ebp - 0x1b0], 0
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x1b0]
mov dword [ebp + eax - 0x424], ecx
cmp dword [ebp - 0x1b0], 0
je 0x10015ab5
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x424], 0
je 0x10015ab5
mov dword [ebp - 0x2f0], 1
jmp 0x10015abc
and dword [ebp - 0x2f0], 0
mov eax, dword [ebp - 0x38]
add eax, dword [ebp - 0x2f0]
cmp eax, 0xba5f27a4
ja 0x10015ad8
mov dword [ebp - 0x240], 1
jmp 0x10015adf
and dword [ebp - 0x240], 0
mov eax, dword [ebp - 0x38]
cmp eax, dword [ebp - 0x240]
jne 0x10015af6
mov dword [ebp - 0x2b8], 1
jmp 0x10015afd
and dword [ebp - 0x2b8], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x3cc]
imul eax, dword [ebp - 0x2b8]
push 4
pop ecx
shl ecx, 0
mov dword [ebp + ecx - 0x44c], eax
cmp dword [ebp + 0x10], 0
jne 0x100173be
mov dword [ebp - 0x4c0], 0xfffffff6
mov dword [ebp - 0x498], 0
mov dword [ebp - 0x340], 0xb96ca2cb
mov dword [ebp - 0xe0], 1
mov dword [ebp - 0x4ec], 0xffffffff
mov dword [ebp - 0x4a0], 0x4ab274bf
mov dword [ebp - 0x4a4], 0
mov dword [ebp - 0x4ac], 0xfffffffb
mov dword [ebp - 0x154], 0xffffffff
mov dword [ebp - 0x100], 0x7d2703d9
mov dword [ebp - 0x248], 0xc4a87fce
mov dword [ebp - 0x164], 0
jmp 0x10015baf
mov eax, dword [ebp - 0x164]
inc eax
mov dword [ebp - 0x164], eax
cmp dword [ebp - 0x164], 2
jge 0x10015bcb
mov eax, dword [ebp - 0x164]
mov dword [ebp + eax*4 - 0x530], 0xffffffff
jmp 0x10015ba2
mov eax, dword [ebp - 0x248]
inc eax
mov dword [ebp - 0x248], eax
mov dword [ebp - 0xe0], 0xffffffee
jmp 0x10015bf1
mov eax, dword [ebp - 0xe0]
inc eax
mov dword [ebp - 0xe0], eax
cmp dword [ebp - 0xe0], 0xa
jl 0x10015e03
mov dword [ebp - 0x154], 0
jmp 0x10015c17
mov eax, dword [ebp - 0x154]
inc eax
mov dword [ebp - 0x154], eax
cmp dword [ebp - 0x154], 2
jl 0x10015c2c
mov dword [ebp - 0x340], 8
jmp 0x10015c0a
mov dword [ebp - 0x100], 0
jmp 0x10015c45
mov eax, dword [ebp - 0x100]
inc eax
mov dword [ebp - 0x100], eax
cmp dword [ebp - 0x100], 1
jg 0x10015dfe
mov byte [ebp - 0x7e], 0
mov dword [ebp - 0x310], 0x6ed8
mov dword [ebp - 0x3dc], str.uwoi_nvjfr_qixumw_yxf_nbyre
cmp dword [ebp - 0x310], 0x6fd5
jle 0x10015d89
call dword [sym.imp.KERNEL32.dll_IsDebuggerPresent]
and dword [ebp - 0x138], 0
jmp 0x10015c96
mov eax, dword [ebp - 0x138]
inc eax
mov dword [ebp - 0x138], eax
cmp dword [ebp - 0x138], 0x5d3d
jge 0x10015d89
and dword [ebp - 0x134], 0
jmp 0x10015cbc
mov eax, dword [ebp - 0x134]
inc eax
mov dword [ebp - 0x134], eax
cmp dword [ebp - 0x134], 0x6614
jge 0x10015d84
and dword [ebp - 0x108], 0
jmp 0x10015ce2
mov eax, dword [ebp - 0x108]
inc eax
mov dword [ebp - 0x108], eax
cmp dword [ebp - 0x108], 0x22ac
jge 0x10015d7f
and dword [ebp - 0x110], 0
jmp 0x10015d08
mov eax, dword [ebp - 0x110]
inc eax
mov dword [ebp - 0x110], eax
cmp dword [ebp - 0x110], 0x2dc0
jge 0x10015d7a
mov ecx, dword [ebp - 0x134]
imul ecx, dword [ebp - 0x108]
mov eax, dword [ebp - 0x138]
shl eax, cl
and eax, dword [ebp - 0x110]
cdq
mov dword [ebp - 0x39c], eax
mov dword [ebp - 0x398], edx
push dword [ebp - 0x398]
push dword [ebp - 0x39c]
lea ecx, [ebp - 0x590]
call fcn.10001a55
pop ecx
pop ecx
mov dword [ebp - 0x338], eax
mov ecx, dword [ebp - 0x338]
call fcn.100032b3
push eax
call fcn.100379e3
pop ecx
lea ecx, [ebp - 0x590]
call fcn.100032a9
jmp 0x10015cfb
jmp 0x10015cd5
jmp 0x10015caf
jmp 0x10015c89
movzx eax, byte [ebp - 0x7e]
test eax, eax
je 0x10015d9b
push 0
push 0
call dword [sym.imp.KERNEL32.dll_GetExitCodeProcess]
mov dword [ebp - 4], 2
cmp dword [ebp - 0x310], 0x6bc6
jge 0x10015dba
push dword [ebp - 0x3dc]
call fcn.100379e3
pop ecx
jmp 0x10015dd6
or dword [ebp - 4], 0xffffffff
jmp 0x10015de0
mov byte [ebp - 0x7c], 0
movzx eax, byte [ebp - 0x7c]
test eax, eax
je 0x10015df9
push 0x305
push 0
call dword [sym.imp.ADVAPI32.dll_InitializeSecurityDescriptor]
jmp 0x10015c38
jmp 0x10015be4
mov edx, dword [ebp + 8]
mov ecx, dword [ebp + 0xc]
call fcn.1000ae5b
mov dword [ebp - 0x124], eax
mov dword [ebp - 0x44], 1
mov dword [ebp - 0x5c], 0xb2906c90
mov dword [ebp - 0x3b8], 0xfffffffd
mov dword [ebp - 0x3f8], 0x66b17b72
mov dword [ebp - 0x350], 0xc42ff18c
mov dword [ebp - 0x250], 0x4b7b
mov dword [ebp - 0x360], 2
mov dword [ebp - 0x3c], 0
jmp 0x10015e64
mov eax, dword [ebp - 0x3c]
inc eax
mov dword [ebp - 0x3c], eax
cmp dword [ebp - 0x3c], 1
jge 0x10015e7a
mov eax, dword [ebp - 0x3c]
mov dword [ebp + eax*4 - 0x140], 0x7e80d68f
jmp 0x10015e5d
mov dword [ebp - 0x3c], 0
jmp 0x10015e8a
mov eax, dword [ebp - 0x3c]
inc eax
mov dword [ebp - 0x3c], eax
cmp dword [ebp - 0x3c], 3
jge 0x10015ea0
mov eax, dword [ebp - 0x3c]
mov dword [ebp + eax*4 - 0x510], 0xfffffff6
jmp 0x10015e83
cmp dword [ebp - 0x5c], 0xffff
jbe 0x10015eb5
mov dword [ebp - 0x348], 1
jmp 0x10015ebc
and dword [ebp - 0x348], 0
mov eax, dword [ebp - 0x250]
inc eax
mov dword [ebp - 0x250], eax
push 4
pop eax
imul eax, eax, 0
push 4
pop ecx
imul ecx, ecx, 0
mov ecx, dword [ebp + ecx - 0x140]
cmp ecx, dword [ebp + eax - 0x140]
jl 0x10015ef1
mov dword [ebp - 0x2c0], 1
jmp 0x10015ef8
and dword [ebp - 0x2c0], 0
mov eax, dword [ebp - 0x5c]
cmp eax, dword [ebp - 0x2c0]
je 0x10015f0f
mov dword [ebp - 0x3ac], 1
jmp 0x10015f16
and dword [ebp - 0x3ac], 0
mov eax, dword [ebp - 0x5c]
mov dword [ebp - 0x468], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x140]
imul eax, dword [ebp - 0x350]
cmp eax, dword [ebp - 0x3f8]
jne 0x10015f47
mov dword [ebp - 0x258], 1
jmp 0x10015f4e
and dword [ebp - 0x258], 0
mov eax, dword [ebp - 0x44]
cmp eax, dword [ebp - 0x258]
jge 0x10015f65
mov dword [ebp - 0x2f8], 1
jmp 0x10015f6c
and dword [ebp - 0x2f8], 0
mov eax, dword [ebp - 0x2f8]
mov dword [ebp - 0x44], eax
cmp dword [ebp - 0x44], 0
jne 0x10015f8a
cmp dword [ebp - 0x44], 0
jne 0x10015f8a
and dword [ebp - 0x260], 0
jmp 0x10015f94
mov dword [ebp - 0x260], 1
mov eax, dword [ebp - 0x5c]
cmp dword [ebp - 0x260], eax
jge 0x10015fab
mov dword [ebp - 0x2c8], 1
jmp 0x10015fb2
and dword [ebp - 0x2c8], 0
cmp dword [ebp - 0x2c8], 0
jg 0x10015ffc
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x140], 0
jne 0x10015ffc
mov dword [ebp - 0x358], 0xfffffffe
mov dword [ebp - 0x44], 0
jmp 0x10015fe5
mov eax, dword [ebp - 0x44]
dec eax
mov dword [ebp - 0x44], eax
cmp dword [ebp - 0x44], 0xfffffff6
jl 0x10015ff7
mov dword [ebp - 0x358], 0
jmp 0x10015fde
jmp 0x1001617d
mov dword [ebp - 0x198], 0
mov dword [ebp - 0x1b4], 0xba7da828
mov dword [ebp - 0x46c], 0xf61ca727
mov dword [ebp - 0x118], 0
jmp 0x10016033
mov eax, dword [ebp - 0x118]
inc eax
mov dword [ebp - 0x118], eax
cmp dword [ebp - 0x118], 4
jge 0x1001604f
mov eax, dword [ebp - 0x118]
mov dword [ebp + eax*4 - 0x600], 1
jmp 0x10016026
push 0xfffffffffffffff7
pop eax
test eax, eax
je 0x1001609f
cmp dword [ebp - 0x198], 0
jne 0x10016093
cmp dword [ebp - 0x198], 0x9d65
je 0x10016077
mov dword [ebp - 0x268], 1
jmp 0x1001607e
and dword [ebp - 0x268], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x510]
cmp dword [ebp - 0x268], eax
jne 0x1001609f
mov dword [ebp - 0x324], 1
jmp 0x100160a6
and dword [ebp - 0x324], 0
mov eax, dword [ebp - 0x3b8]
mov ecx, dword [ebp - 0x324]
lea eax, [ecx + eax - 0xa]
cmp dword [ebp - 0x198], eax
jle 0x100160ca
mov dword [ebp - 0x270], 1
jmp 0x100160d1
and dword [ebp - 0x270], 0
mov eax, dword [ebp - 0x44]
cmp dword [ebp - 0x270], eax
je 0x100160e8
mov dword [ebp - 0x1b8], 1
jmp 0x100160ef
and dword [ebp - 0x1b8], 0
mov eax, dword [ebp - 0x360]
cmp eax, dword [ebp - 0x1b8]
jg 0x10016109
mov dword [ebp - 0x1bc], 1
jmp 0x10016110
and dword [ebp - 0x1bc], 0
mov eax, dword [ebp - 0x1bc]
mov dword [ebp - 0x1b4], eax
cmp dword [ebp - 0x1b4], 0
je 0x1001613e
mov dword [ebp - 0x1cc], 0
mov eax, dword [ebp - 0x1cc]
dec eax
mov dword [ebp - 0x1cc], eax
jmp 0x10016155
mov dword [ebp - 0x1d4], 0xfffffff8
mov eax, dword [ebp - 0x1d4]
dec eax
mov dword [ebp - 0x1d4], eax
mov byte [ebp - 0x7a], 0
movzx eax, byte [ebp - 0x7a]
test eax, eax
je 0x1001617d
push 0
push 0x2111
push 0x14af
push 0x25ce
push 0x1937
call dword [sym.imp.GDI32.dll_CreateBitmap]
mov dword [ebp - 0x5c], 2
jmp 0x1001618d
mov eax, dword [ebp - 0x5c]
dec eax
mov dword [ebp - 0x5c], eax
cmp dword [ebp - 0x5c], 0
jl 0x100161af
mov byte [ebp - 0x79], 0
movzx eax, byte [ebp - 0x79]
test eax, eax
je 0x100161ad
push 0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_WritePrivateProfileStringW]
jmp 0x10016186
mov dword [ebp - 0x34], 0
jmp 0x100161bf
mov eax, dword [ebp - 0x34]
inc eax
mov dword [ebp - 0x34], eax
cmp dword [ebp - 0x34], 2
jge 0x100161d5
mov eax, dword [ebp - 0x34]
mov dword [ebp + eax*4 - 0x334], 0xffffffff
jmp 0x100161b8
mov dword [ebp - 0x34], 0
jmp 0x100161e5
mov eax, dword [ebp - 0x34]
inc eax
mov dword [ebp - 0x34], eax
cmp dword [ebp - 0x34], 2
jge 0x100161fb
mov eax, dword [ebp - 0x34]
mov dword [ebp + eax*4 - 0x568], 0x79536444
jmp 0x100161de
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0x334], 0
jmp 0x10016229
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x334]
dec eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x334], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x334], 0xfffffffc
jg 0x100162be
mov dword [ebp - 0x408], 7
mov dword [ebp - 0x404], 7
mov dword [ebp - 0x400], 7
mov dword [ebp - 0x3fc], 7
push 4
pop eax
imul eax, eax, 3
mov dword [ebp + eax - 0x408], 0
jmp 0x10016293
push 4
pop eax
imul eax, eax, 3
mov eax, dword [ebp + eax - 0x408]
inc eax
push 4
pop ecx
imul ecx, ecx, 3
mov dword [ebp + ecx - 0x408], eax
push 4
pop eax
imul eax, eax, 3
cmp dword [ebp + eax - 0x408], 1
jg 0x100162b9
mov byte [ebp - 0x7b], 0
movzx eax, byte [ebp - 0x7b]
test eax, eax
je 0x100162b7
push 0
call dword [sym.imp.ADVAPI32.dll_GetLengthSid]
jmp 0x10016278
jmp 0x1001620e
mov dword [ebp - 0x1dc], 0x5d94
mov dword [ebp - 0x3c8], str.tfuufkso_razlm_ccizmoy_kiqhrlmjr_acd_mjgqzvda_nyzkwicx
cmp dword [ebp - 0x1dc], 0x6130
jle 0x100163cc
and dword [ebp - 0x148], 0
jmp 0x100162f8
mov eax, dword [ebp - 0x148]
inc eax
mov dword [ebp - 0x148], eax
cmp dword [ebp - 0x148], 0x264c
jge 0x100163bb
and dword [ebp - 0x120], 0
jmp 0x1001631e
mov eax, dword [ebp - 0x120]
inc eax
mov dword [ebp - 0x120], eax
cmp dword [ebp - 0x120], 0x1297
jge 0x100163b6
and dword [ebp - 0x150], 0
jmp 0x10016344
mov eax, dword [ebp - 0x150]
inc eax
mov dword [ebp - 0x150], eax
cmp dword [ebp - 0x150], 0x7f9f
jge 0x100163b1
and dword [ebp - 0x128], 0
jmp 0x10016366
mov eax, dword [ebp - 0x128]
inc eax
mov dword [ebp - 0x128], eax
cmp dword [ebp - 0x128], 0x42c2
jge 0x100163af
mov eax, dword [ebp - 0x148]
and eax, dword [ebp - 0x120]
or eax, dword [ebp - 0x150]
or eax, dword [ebp - 0x128]
cdq
mov dword [ebp - 0x3a8], eax
mov dword [ebp - 0x3a4], edx
push dword [ebp - 0x3a4]
push dword [ebp - 0x3a8]
mov ecx, 0x10067998
call fcn.100032d3
jmp 0x10016359
jmp 0x10016337
jmp 0x10016311
jmp 0x100162eb
push 0
push 0
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_SetWindowRgn]
mov dword [ebp - 4], 4
cmp dword [ebp - 0x1dc], 0x5b4c
jge 0x100163ef
mov edx, dword [ebp - 0x3c8]
mov ecx, 0x10067998
call fcn.100056ca
jmp 0x1001640b
or dword [ebp - 4], 0xffffffff
jmp 0x10016415
mov dword [ebp - 0x18], 0
jmp 0x10016425
mov eax, dword [ebp - 0x18]
inc eax
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 2
jge 0x1001643b
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x460], 0xdf99ff60
jmp 0x1001641e
mov dword [ebp - 0x18], 0
jmp 0x1001644b
mov eax, dword [ebp - 0x18]
inc eax
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 4
jge 0x10016461
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x43c], 0x667a876e
jmp 0x10016444
mov dword [ebp - 0x18], 0
jmp 0x10016471
mov eax, dword [ebp - 0x18]
inc eax
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 1
jge 0x10016487
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x474], 0xc5eb2006
jmp 0x1001646a
push 4
pop eax
shl eax, 0
mov dword [ebp + eax - 0x43c], 0
jmp 0x100164b5
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x43c]
inc eax
push 4
pop ecx
shl ecx, 0
mov dword [ebp + ecx - 0x43c], eax
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x43c], 1
jg 0x10016564
mov dword [ebp - 0x4c], 0x94543beb
mov dword [ebp - 0x4c], 0
jmp 0x100164e0
mov eax, dword [ebp - 0x4c]
inc eax
mov dword [ebp - 0x4c], eax
cmp dword [ebp - 0x4c], 1
jg 0x100164f7
mov eax, dword [ebp - 0x4c]
cmp dword [ebp + eax*4 - 0x460], 0
je 0x100164f5
jmp 0x100164f7
jmp 0x100164d9
mov dword [ebp - 0x4c], 1
jmp 0x10016507
mov eax, dword [ebp - 0x4c]
dec eax
mov dword [ebp - 0x4c], eax
cmp dword [ebp - 0x4c], 0
jl 0x1001655f
mov dword [ebp - 0x158], 0
jmp 0x10016526
mov eax, dword [ebp - 0x158]
inc eax
mov dword [ebp - 0x158], eax
cmp dword [ebp - 0x158], 2
jge 0x10016542
mov eax, dword [ebp - 0x158]
mov dword [ebp + eax*4 - 0x42c], 0
jmp 0x10016519
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x42c]
inc eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x42c], eax
jmp 0x10016500
jmp 0x1001649a
cmp dword [0x10068af0], 0
jne 0x1001719a
mov dword [ebp - 0x1c], 1
mov dword [ebp - 0x130], 0x7e71f09a
mov dword [ebp - 0x160], 0xfffffff9
mov dword [ebp - 0x1ac], 0xe60d1f28
mov dword [ebp - 0x3d0], 5
mov dword [ebp - 0x1c], 0xf
jmp 0x100165b0
mov eax, dword [ebp - 0x1c]
dec eax
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 1
jg 0x10016805
mov dword [ebp - 0x30], 1
mov dword [ebp - 0x188], 0xfffffffd
cmp dword [ebp - 0x1c], 0
je 0x100165f4
mov dword [ebp - 0x130], 5
mov eax, dword [ebp - 0x130]
add eax, 0x441a62a9
je 0x100165f4
mov dword [ebp - 0x368], 1
jmp 0x100165fb
and dword [ebp - 0x368], 0
mov eax, dword [ebp - 0x1c]
cmp eax, dword [ebp - 0x1c]
jle 0x10016612
cmp dword [ebp - 0x30], 0
jne 0x10016612
and dword [ebp - 0x1e4], 0
jmp 0x1001661c
mov dword [ebp - 0x1e4], 1
mov eax, dword [ebp - 0x30]
cmp dword [ebp - 0x1e4], eax
jle 0x10016633
mov dword [ebp - 0x1ec], 1
jmp 0x1001663a
and dword [ebp - 0x1ec], 0
mov eax, dword [ebp - 0x1c]
cmp dword [ebp - 0x1ec], eax
jl 0x10016651
mov dword [ebp - 0x1f4], 1
jmp 0x10016658
and dword [ebp - 0x1f4], 0
mov eax, dword [ebp - 0x1f4]
sub eax, dword [ebp - 0x30]
je 0x10016675
cmp dword [ebp - 0x30], 0
je 0x10016675
mov dword [ebp - 0x1fc], 1
jmp 0x1001667c
and dword [ebp - 0x1fc], 0
mov eax, dword [ebp - 0x1c]
cmp dword [ebp - 0x1fc], eax
jge 0x10016693
mov dword [ebp - 0x204], 1
jmp 0x1001669a
and dword [ebp - 0x204], 0
mov eax, dword [ebp - 0x188]
cmp dword [ebp - 0x204], eax
jl 0x100166b4
mov dword [ebp - 0x3c4], 1
jmp 0x100166bb
and dword [ebp - 0x3c4], 0
mov eax, dword [ebp - 0x30]
mov dword [ebp - 0x160], eax
cmp dword [ebp - 0x1c], 0
je 0x100167a2
cmp dword [ebp - 0x30], 0
je 0x10016780
mov dword [ebp - 0x160], 0
mov eax, dword [ebp - 0x160]
mov dword [ebp - 0x47c], eax
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0x49c], eax
cmp dword [ebp - 0x188], 0xfffffffe
jne 0x1001670c
mov dword [ebp - 0x20c], 1
jmp 0x10016713
and dword [ebp - 0x20c], 0
imul eax, dword [ebp - 0x20c], 0x56d4
mov dword [ebp - 0x130], eax
mov eax, dword [ebp - 0x130]
cmp eax, dword [ebp - 0x1c]
jg 0x1001673a
mov dword [ebp - 0x214], 1
jmp 0x10016741
and dword [ebp - 0x214], 0
cmp dword [ebp - 0x214], 1
jge 0x10016756
mov dword [ebp - 0x21c], 1
jmp 0x1001675d
and dword [ebp - 0x21c], 0
mov eax, dword [ebp - 0x21c]
mov dword [ebp - 0x1ac], eax
mov eax, dword [ebp - 0x1ac]
cmp eax, dword [ebp - 0x1c]
jl 0x10016780
mov dword [ebp - 0x224], 1
jmp 0x10016787
and dword [ebp - 0x224], 0
imul eax, dword [ebp - 0x224], 0xc1d6
test eax, eax
jne 0x1001679e
cmp dword [ebp - 0x188], 0
je 0x100167a2
cmp dword [ebp - 0x1c], 0
mov eax, dword [ebp - 0x160]
mov dword [ebp - 0x4b4], eax
cmp dword [ebp - 0x1ac], 0
jne 0x100167c6
cmp dword [ebp - 0x30], 0
jne 0x100167c6
and dword [ebp - 0x22c], 0
jmp 0x100167d0
mov dword [ebp - 0x22c], 1
mov eax, dword [ebp - 0x30]
cmp dword [ebp - 0x22c], eax
je 0x100167e7
mov dword [ebp - 0x370], 1
jmp 0x100167ee
and dword [ebp - 0x370], 0
mov eax, dword [ebp - 0x30]
mov dword [ebp - 0x4bc], eax
mov eax, dword [ebp - 0x30]
mov dword [ebp - 0x3d0], eax
jmp 0x100165a9
mov dword [ebp - 0x378], 0xdcf
lea eax, [ebp - 0x378]
push eax
call fcn.1000f9c1
pop ecx
mov dword [ebp - 0x294], eax
mov dword [ebp - 0x2c], 0xd4e06482
mov dword [ebp - 0x74], 0x5eafb5d1
mov dword [ebp - 0x4c4], 0xfffffffd
mov dword [ebp - 0x168], 0
jmp 0x10016853
mov eax, dword [ebp - 0x168]
inc eax
mov dword [ebp - 0x168], eax
cmp dword [ebp - 0x168], 1
jge 0x1001686f
mov eax, dword [ebp - 0x168]
mov dword [ebp + eax*4 - 0x3e4], 0xfffffff7
jmp 0x10016846
mov dword [ebp - 0x2c], 0x17
jmp 0x1001687f
mov eax, dword [ebp - 0x2c]
dec eax
mov dword [ebp - 0x2c], eax
cmp dword [ebp - 0x2c], 0xffffffe5
jl 0x10016b20
mov dword [ebp - 0x274], 0xa12afd77
mov dword [ebp - 0x4cc], 1
mov dword [ebp - 0x27c], 0x5e40c883
mov dword [ebp - 0x54], 0
jmp 0x100168b7
mov eax, dword [ebp - 0x54]
inc eax
mov dword [ebp - 0x54], eax
cmp dword [ebp - 0x54], 1
jge 0x100168cd
mov eax, dword [ebp - 0x54]
mov dword [ebp + eax*4 - 0x190], 0xffffffff
jmp 0x100168b0
mov dword [ebp - 0x54], 0
jmp 0x100168dd
mov eax, dword [ebp - 0x54]
inc eax
mov dword [ebp - 0x54], eax
cmp dword [ebp - 0x54], 1
jge 0x100168f3
mov eax, dword [ebp - 0x54]
mov dword [ebp + eax*4 - 0xa0], 0xa116
jmp 0x100168d6
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x190]
mov dword [ebp - 0x74], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xa0]
cmp eax, dword [ebp - 0x74]
jg 0x10016921
mov dword [ebp - 0x3d8], 1
jmp 0x10016928
and dword [ebp - 0x3d8], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x190]
mov dword [ebp - 0x4d4], eax
mov eax, dword [ebp - 0x74]
mov dword [ebp - 0x274], eax
mov eax, dword [ebp - 0x2c]
cmp eax, dword [ebp - 0x2c]
jle 0x10016958
mov dword [ebp - 0x234], 1
jmp 0x1001695f
and dword [ebp - 0x234], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x190]
cmp eax, dword [ebp - 0x234]
jge 0x10016986
cmp dword [ebp - 0x2c], 0
je 0x10016986
mov dword [ebp - 0x23c], 1
jmp 0x1001698d
and dword [ebp - 0x23c], 0
cmp dword [ebp - 0x23c], 0
jb 0x100169a2
mov dword [ebp - 0x380], 1
jmp 0x100169a9
and dword [ebp - 0x380], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xa0]
mov dword [ebp - 0x4a8], eax
mov eax, 0xf903
test eax, eax
jne 0x100169d7
mov eax, 0x1054
test eax, eax
jne 0x100169d7
and dword [ebp - 0x244], 0
jmp 0x100169e1
mov dword [ebp - 0x244], 1
mov eax, dword [ebp - 0x2c]
cmp dword [ebp - 0x244], eax
jne 0x100169f8
mov dword [ebp - 0x24c], 1
jmp 0x100169ff
and dword [ebp - 0x24c], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x24c]
sub ecx, dword [ebp + eax - 0xa0]
cmp ecx, 0xf5872d9e
je 0x10016a26
mov dword [ebp - 0x254], 1
jmp 0x10016a2d
and dword [ebp - 0x254], 0
mov eax, dword [ebp - 0x2c]
cmp eax, dword [ebp - 0x254]
jge 0x10016a44
mov dword [ebp - 0x25c], 1
jmp 0x10016a4b
and dword [ebp - 0x25c], 0
cmp dword [ebp - 0x25c], 0xffffffff
jne 0x10016a60
mov dword [ebp - 0x264], 1
jmp 0x10016a67
and dword [ebp - 0x264], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x2c]
imul ecx, dword [ebp - 0x264]
imul ecx, ecx, 0xfffffff7
cmp ecx, dword [ebp + eax - 0xa0]
jl 0x10016a8f
mov dword [ebp - 0x26c], 1
jmp 0x10016a96
and dword [ebp - 0x26c], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xa0]
cmp dword [ebp - 0x26c], eax
jge 0x10016ab7
mov dword [ebp - 0x1a4], 1
jmp 0x10016abe
and dword [ebp - 0x1a4], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x1a4]
mov dword [ebp + eax - 0x3e4], ecx
cmp dword [ebp - 0x1a4], 0
je 0x10016ae6
mov dword [ebp - 0x274], 0x6e074f0e
jmp 0x10016b1b
mov dword [ebp - 0x450], 0x4f69
mov dword [ebp - 0x484], 0xa103363
mov dword [ebp - 0x464], 0xd83f7cd3
mov dword [ebp - 0x48c], 0x169b41db
mov eax, dword [ebp - 0x27c]
inc eax
mov dword [ebp - 0x27c], eax
jmp 0x10016878
mov dword [ebp - 0x74], 0x15
jmp 0x10016b30
mov eax, dword [ebp - 0x74]
dec eax
mov dword [ebp - 0x74], eax
cmp dword [ebp - 0x74], 0xffffffe7
je 0x10016cd7
mov dword [ebp - 0x494], 0xffffffff
mov dword [ebp - 0x470], 0xce43c7d7
mov dword [ebp - 0x284], 0x1c52
mov dword [ebp - 0x388], str.urubyybf_jpamfilyf_qhl_qbahrlxdq_hyarmyt
cmp dword [ebp - 0x284], 0x1d12
jle 0x10016c22
push 0
call dword [sym.imp.USER32.dll_SetCursor]
and dword [ebp - 0x144], 0
jmp 0x10016b90
mov eax, dword [ebp - 0x144]
inc eax
mov dword [ebp - 0x144], eax
cmp dword [ebp - 0x144], 0x1c0e
jge 0x10016c22
and dword [ebp - 0x13c], 0
jmp 0x10016bb6
mov eax, dword [ebp - 0x13c]
inc eax
mov dword [ebp - 0x13c], eax
cmp dword [ebp - 0x13c], 0x2769
jge 0x10016c1d
and dword [ebp - 0x15c], 0
jmp 0x10016bd8
mov eax, dword [ebp - 0x15c]
inc eax
mov dword [ebp - 0x15c], eax
cmp dword [ebp - 0x15c], 0x800
jge 0x10016c1b
mov eax, dword [ebp - 0x13c]
sub eax, dword [ebp - 0x15c]
xor eax, dword [ebp - 0x144]
cdq
mov dword [ebp - 0x3b4], eax
mov dword [ebp - 0x3b0], edx
push dword [ebp - 0x3b0]
push dword [ebp - 0x3b4]
mov ecx, 0x10067998
call fcn.100032d3
jmp 0x10016bcb
jmp 0x10016ba9
jmp 0x10016b83
mov dword [ebp - 0x4b0], 0xde8aff65
mov dword [ebp - 4], 6
cmp dword [ebp - 0x284], 0x1b7a
jge 0x10016c4f
mov edx, dword [ebp - 0x388]
mov ecx, 0x10067998
call fcn.100056ca
jmp 0x10016c6b
or dword [ebp - 4], 0xffffffff
jmp 0x10016c75
mov dword [ebp - 0x478], 0x7db40437
mov dword [ebp - 0x4d8], 0xa2c160ec
mov dword [ebp - 0x480], 3
mov dword [ebp - 0x4e8], 4
mov dword [ebp - 0x4e4], 4
mov dword [ebp - 0x4e0], 4
mov dword [ebp - 0x4dc], 4
mov dword [ebp - 0x28c], 0xfffffff6
mov eax, dword [ebp - 0x28c]
inc eax
mov dword [ebp - 0x28c], eax
jmp 0x10016b29
mov byte [ebp - 0xbc], 9
mov byte [ebp - 0xbb], 0xeb
mov byte [ebp - 0xba], 1
mov byte [ebp - 0xb9], 0xb
mov byte [ebp - 0xb8], 0
mov byte [ebp - 0xb7], 0x22
mov byte [ebp - 0xb6], 4
mov byte [ebp - 0xb5], 0x22
mov byte [ebp - 0xb4], 5
mov byte [ebp - 0xb3], 0x17
mov byte [ebp - 0xb2], 2
mov byte [ebp - 0xb1], 6
mov byte [ebp - 0xb0], 0xb
mov byte [ebp - 0xaf], 0xc
mov byte [ebp - 0xae], 7
mov byte [ebp - 0xad], 0x11
mov byte [ebp - 0xac], 8
mov byte [ebp - 0xab], 6
mov byte [ebp - 0xaa], 0xc
mov byte [ebp - 0xa9], 0x38
mov byte [ebp - 0xa8], 1
mov byte [ebp - 0xa7], 0xbc
mov byte [ebp - 0xa6], 0xa
mov byte [ebp - 0xa5], 0x12
mov byte [ebp - 0xa4], 3
mov byte [ebp - 0xa3], 0x13
mov byte [ebp - 0xa2], 6
mov byte [ebp - 0xa1], 0x25
xor eax, eax
inc eax
shl eax, 0
movzx eax, byte [ebp + eax - 0xbc]
and eax, 0x85
xor ecx, ecx
inc ecx
shl ecx, 0
movzx ecx, byte [ebp + ecx - 0xbc]
or ecx, 0x85
sub ecx, eax
xor eax, eax
inc eax
imul eax, eax, 0
movzx eax, byte [ebp + eax - 0xbc]
mov byte [ebp + eax - 0x3f4], cl
mov dword [ebp - 0x24], 2
and dword [ebp - 0x16c], 0
jmp 0x10016df1
mov eax, dword [ebp - 0x24]
inc eax
inc eax
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 0x1c
jae 0x10016ea7
xor eax, eax
inc eax
imul eax, eax, 0
movzx eax, byte [ebp + eax - 0xbc]
lea eax, [eax + eax + 2]
cmp dword [ebp - 0x24], eax
jne 0x10016e3b
mov eax, dword [ebp - 0x24]
movzx eax, byte [ebp + eax - 0xbc]
inc eax
mov dword [ebp - 0x16c], eax
mov eax, dword [ebp - 0x24]
movzx eax, byte [ebp + eax - 0xbc]
mov ecx, dword [ebp - 0x24]
lea eax, [ecx + eax - 1]
mov dword [ebp - 0x24], eax
jmp 0x10016de9
mov eax, dword [ebp - 0x24]
sub eax, dword [ebp - 0x16c]
movzx eax, byte [ebp + eax - 0xbe]
movsx eax, byte [ebp + eax - 0x3f4]
mov ecx, dword [ebp - 0x24]
movzx ecx, byte [ebp + ecx - 0xbb]
and ecx, eax
mov eax, dword [ebp - 0x24]
sub eax, dword [ebp - 0x16c]
movzx eax, byte [ebp + eax - 0xbe]
movsx eax, byte [ebp + eax - 0x3f4]
mov edx, dword [ebp - 0x24]
movzx edx, byte [ebp + edx - 0xbb]
or edx, eax
sub edx, ecx
mov eax, dword [ebp - 0x24]
movzx eax, byte [ebp + eax - 0xbc]
mov byte [ebp + eax - 0x3f4], dl
and dword [ebp - 0x16c], 0
jmp 0x10016de9
xor eax, eax
inc eax
imul eax, eax, 0xd
mov byte [ebp + eax - 0x3f4], 0
lea eax, [ebp - 0x3f4]
push eax
lea ecx, [ebp - 0x5c0]
call fcn.10018d36
mov dword [ebp - 0x3d4], eax
mov eax, dword [ebp - 0x3d4]
mov dword [ebp - 0x394], eax
mov dword [ebp - 4], 8
mov edx, dword [ebp - 0x294]
mov ecx, dword [ebp - 0x394]
call fcn.1000ae5b
mov dword [0x10068af0], eax
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x5c0]
call fcn.100034f2
and dword [ebp - 0xe4], 0
jmp 0x10016f1b
mov eax, dword [ebp - 0xe4]
inc eax
mov dword [ebp - 0xe4], eax
cmp dword [ebp - 0xe4], 0xe
jae 0x10016f34
mov eax, dword [ebp - 0xe4]
mov byte [ebp + eax - 0x3f4], 0
jmp 0x10016f0e
mov byte [ebp - 0xdc], 2
mov byte [ebp - 0xdb], 0x30
mov byte [ebp - 0xda], 1
mov byte [ebp - 0xd9], 0x17
mov byte [ebp - 0xd8], 0xd
mov byte [ebp - 0xd7], 0x25
mov byte [ebp - 0xd6], 1
mov byte [ebp - 0xd5], 0x4f
mov byte [ebp - 0xd4], 9
mov byte [ebp - 0xd3], 0x34
mov byte [ebp - 0xd2], 0xa
mov byte [ebp - 0xd1], 6
mov byte [ebp - 0xd0], 6
mov byte [ebp - 0xcf], 0x35
mov byte [ebp - 0xce], 0xb
mov byte [ebp - 0xcd], 0x23
mov byte [ebp - 0xcc], 4
mov byte [ebp - 0xcb], 7
mov byte [ebp - 0xca], 7
mov byte [ebp - 0xc9], 6
mov byte [ebp - 0xc8], 3
mov byte [ebp - 0xc7], 0x13
mov byte [ebp - 0xc6], 5
mov byte [ebp - 0xc5], 4
mov byte [ebp - 0xc4], 8
mov byte [ebp - 0xc3], 0xa
mov byte [ebp - 0xc2], 0xc
mov byte [ebp - 0xc1], 0x1c
mov byte [ebp - 0xc0], 0
mov byte [ebp - 0xbf], 0x30
xor eax, eax
inc eax
shl eax, 0
movzx eax, byte [ebp + eax - 0xdc]
and eax, 0x55
xor ecx, ecx
inc ecx
shl ecx, 0
movzx ecx, byte [ebp + ecx - 0xdc]
or ecx, 0x55
sub ecx, eax
xor eax, eax
inc eax
imul eax, eax, 0
movzx eax, byte [ebp + eax - 0xdc]
mov byte [ebp + eax - 0x41c], cl
mov dword [ebp - 0x28], 2
and dword [ebp - 0xec], 0
jmp 0x10017057
mov eax, dword [ebp - 0x28]
inc eax
inc eax
mov dword [ebp - 0x28], eax
cmp dword [ebp - 0x28], 0x1e
jae 0x1001710d
xor eax, eax
inc eax
imul eax, eax, 0
movzx eax, byte [ebp + eax - 0xdc]
lea eax, [eax + eax + 2]
cmp dword [ebp - 0x28], eax
jne 0x100170a1
mov eax, dword [ebp - 0x28]
movzx eax, byte [ebp + eax - 0xdc]
inc eax
mov dword [ebp - 0xec], eax
mov eax, dword [ebp - 0x28]
movzx eax, byte [ebp + eax - 0xdc]
mov ecx, dword [ebp - 0x28]
lea eax, [ecx + eax - 1]
mov dword [ebp - 0x28], eax
jmp 0x1001704f
mov eax, dword [ebp - 0x28]
sub eax, dword [ebp - 0xec]
movzx eax, byte [ebp + eax - 0xde]
movsx eax, byte [ebp + eax - 0x41c]
mov ecx, dword [ebp - 0x28]
movzx ecx, byte [ebp + ecx - 0xdb]
and ecx, eax
mov eax, dword [ebp - 0x28]
sub eax, dword [ebp - 0xec]
movzx eax, byte [ebp + eax - 0xde]
movsx eax, byte [ebp + eax - 0x41c]
mov edx, dword [ebp - 0x28]
movzx edx, byte [ebp + edx - 0xdb]
or edx, eax
sub edx, ecx
mov eax, dword [ebp - 0x28]
movzx eax, byte [ebp + eax - 0xdc]
mov byte [ebp + eax - 0x41c], dl
and dword [ebp - 0xec], 0
jmp 0x1001704f
xor eax, eax
inc eax
imul eax, eax, 0xe
mov byte [ebp + eax - 0x41c], 0
lea eax, [ebp - 0x41c]
push eax
lea ecx, [ebp - 0x5f0]
call fcn.10018d36
mov dword [ebp - 0x40c], eax
mov eax, dword [ebp - 0x40c]
mov dword [ebp - 0x3a0], eax
mov dword [ebp - 4], 9
mov edx, dword [ebp - 0x294]
mov ecx, dword [ebp - 0x3a0]
call fcn.1000ae5b
mov dword [0x10069f10], eax
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x5f0]
call fcn.100034f2
and dword [ebp - 0xf4], 0
jmp 0x10017181
mov eax, dword [ebp - 0xf4]
inc eax
mov dword [ebp - 0xf4], eax
cmp dword [ebp - 0xf4], 0xf
jae 0x1001719a
mov eax, dword [ebp - 0xf4]
mov byte [ebp + eax - 0x41c], 0
jmp 0x10017174
mov dword [ebp - 0x29c], 0xc1d6
mov dword [ebp - 0x180], 0x145ba13b
mov dword [ebp - 0x184], 0xfff9
mov dword [ebp - 0x344], 3
mov dword [ebp - 0x48], 0
jmp 0x100171d2
mov eax, dword [ebp - 0x48]
inc eax
mov dword [ebp - 0x48], eax
cmp dword [ebp - 0x48], 2
jge 0x100171e8
mov eax, dword [ebp - 0x48]
mov dword [ebp + eax*4 - 0x1a0], 0
jmp 0x100171cb
mov dword [ebp - 0x48], 0
jmp 0x100171f8
mov eax, dword [ebp - 0x48]
inc eax
mov dword [ebp - 0x48], eax
cmp dword [ebp - 0x48], 1
jge 0x1001720e
mov eax, dword [ebp - 0x48]
mov dword [ebp + eax*4 - 0x33c], 4
jmp 0x100171f1
mov byte [ebp - 0x7d], 0
movzx eax, byte [ebp - 0x7d]
test eax, eax
je 0x10017227
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetMenu]
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x29c]
cmp ecx, dword [ebp + eax - 0x1a0]
jge 0x10017248
mov dword [ebp - 0x2a4], 1
jmp 0x1001724f
and dword [ebp - 0x2a4], 0
mov eax, dword [ebp - 0x29c]
cmp dword [ebp - 0x2a4], eax
jge 0x10017269
mov dword [ebp - 0x2ac], 1
jmp 0x10017270
and dword [ebp - 0x2ac], 0
mov eax, dword [ebp - 0x2ac]
mov dword [ebp - 0x180], eax
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x180]
sub ecx, 7
cmp ecx, dword [ebp + eax - 0x1a0]
jl 0x100172a0
mov dword [ebp - 0x2b4], 1
jmp 0x100172a7
and dword [ebp - 0x2b4], 0
mov eax, dword [ebp - 0x184]
cmp dword [ebp - 0x2b4], eax
jle 0x100172c1
mov dword [ebp - 0x2bc], 1
jmp 0x100172c8
and dword [ebp - 0x2bc], 0
push 4
pop eax
imul eax, eax, 0
push 4
pop ecx
shl ecx, 0
push 4
pop edx
imul edx, edx, 0
mov edx, dword [ebp + edx - 0x1a0]
sub edx, dword [ebp + ecx - 0x1a0]
sub edx, dword [ebp - 0x2bc]
cmp edx, dword [ebp + eax - 0x1a0]
jge 0x10017303
mov dword [ebp - 0x2c4], 1
jmp 0x1001730a
and dword [ebp - 0x2c4], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x1a0]
mov dword [ebp - 0x4b8], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x2c4]
mov dword [ebp + eax - 0x33c], ecx
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x180]
cmp ecx, dword [ebp + eax - 0x1a0]
jne 0x10017351
mov dword [ebp - 0x2cc], 1
jmp 0x10017358
and dword [ebp - 0x2cc], 0
mov eax, dword [ebp - 0x184]
cmp dword [ebp - 0x2cc], eax
jg 0x10017372
mov dword [ebp - 0x2d4], 1
jmp 0x10017379
and dword [ebp - 0x2d4], 0
mov eax, dword [ebp - 0x184]
imul eax, dword [ebp - 0x2d4]
mov dword [ebp - 0x344], eax
mov eax, dword [0x10068af0]
cmp eax, dword [ebp - 0x124]
je 0x100173a6
mov eax, dword [0x10069f10]
cmp eax, dword [ebp - 0x124]
jne 0x100173be
mov ecx, dword [ebp + 0xc]
call fcn.100032b3
push eax
push dword [ebp + 8]
call fcn.1000f9f5
pop ecx
pop ecx
jmp 0x10017b88
mov eax, dword [ebp + 8]
mov dword [ebp - 0xfc], eax
cmp dword [ebp - 0xfc], 0
je 0x10017b86
mov eax, dword [ebp - 0xfc]
movzx eax, word [eax]
cmp eax, 0x5a4d
jne 0x10017b86
mov eax, dword [ebp - 0xfc]
mov ecx, dword [ebp - 0xfc]
add ecx, dword [eax + 0x3c]
mov dword [ebp - 0x94], ecx
mov eax, dword [ebp - 0x94]
cmp dword [eax], 0x4550
jne 0x10017b86
mov eax, dword [ebp - 0x94]
cmp dword [eax + 0x74], 0
jbe 0x10017b86
push 8
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x94]
cmp dword [ecx + eax + 0x78], 0
je 0x10017b86
mov eax, dword [ebp + 8]
mov dword [ebp - 0x88], eax
push 8
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x94]
mov edx, dword [ebp - 0x88]
add edx, dword [ecx + eax + 0x78]
mov dword [ebp - 0x58], edx
mov eax, 0xffff
mov word [ebp - 0x40], ax
or dword [ebp - 0x90], 0xffffffff
cmp dword [ebp + 0x10], 0
jbe 0x10017486
mov eax, dword [ebp - 0x58]
mov ecx, dword [ebp + 0x10]
cmp ecx, dword [eax + 0x14]
ja 0x10017481
mov eax, dword [ebp + 0x10]
dec eax
mov word [ebp - 0x40], ax
jmp 0x100177c7
mov eax, dword [0x10069fc0]
and eax, 1
jne 0x100174bd
mov eax, dword [0x10069fc0]
or eax, 1
mov dword [0x10069fc0], eax
mov dword [ebp - 4], 0xa
mov ecx, 0x10069f98
call fcn.10018d9a
push 0x10050fa0
call fcn.100379b9
pop ecx
or dword [ebp - 4], 0xffffffff
movzx eax, byte [0x10068ae9]
test eax, eax
je 0x10017529
mov ecx, 0x10069f98
call fcn.10018e5f
movzx eax, al
test eax, eax
jne 0x10017529
lea eax, [ebp - 0x124]
push eax
lea eax, [ebp - 0x2dc]
push eax
mov ecx, 0x10069f98
call fcn.10018e68
lea eax, [ebp - 0x488]
push eax
mov ecx, 0x10069f98
call fcn.10018e51
push eax
lea ecx, [ebp - 0x2dc]
call fcn.10018d87
movzx eax, al
test eax, eax
je 0x10017529
lea ecx, [ebp - 0x2dc]
call fcn.10018e7d
mov eax, dword [eax + 4]
mov dword [ebp - 0x90], eax
cmp dword [ebp - 0x90], 0xffffffff
jne 0x100177c7
mov ecx, 0x10069f98
call fcn.10018ec1
mov ecx, dword [ebp - 0x58]
add eax, dword [ecx + 0x18]
push eax
mov ecx, 0x10069f98
call fcn.10018ec5
and dword [ebp - 0x84], 0
jmp 0x10017567
mov eax, dword [ebp - 0x84]
inc eax
mov dword [ebp - 0x84], eax
mov eax, dword [ebp - 0x58]
mov ecx, dword [ebp - 0x84]
cmp ecx, dword [eax + 0x18]
jae 0x100177c7
mov dword [ebp - 0x2e4], 0x7502
mov dword [ebp - 0x354], str.hqu_uiekuovlz_tbqoj_lswi_sbxwi_khybpec_vjaeoumq_xdkc_lvn_aqzlox_hdskaf_hjf_thwweu_nnd
cmp dword [ebp - 0x2e4], 0x7637
jle 0x100176b2
and dword [ebp - 0x114], 0
jmp 0x100175b3
mov eax, dword [ebp - 0x114]
inc eax
mov dword [ebp - 0x114], eax
cmp dword [ebp - 0x114], 0x22da
jge 0x100176a6
and dword [ebp - 0x104], 0
jmp 0x100175d9
mov eax, dword [ebp - 0x104]
inc eax
mov dword [ebp - 0x104], eax
cmp dword [ebp - 0x104], 0x54af
jge 0x100176a1
and dword [ebp - 0x10c], 0
jmp 0x100175ff
mov eax, dword [ebp - 0x10c]
inc eax
mov dword [ebp - 0x10c], eax
cmp dword [ebp - 0x10c], 0x72e1
jge 0x1001769c
and dword [ebp - 0x11c], 0
jmp 0x10017625
mov eax, dword [ebp - 0x11c]
inc eax
mov dword [ebp - 0x11c], eax
cmp dword [ebp - 0x11c], 0x59ec
jge 0x10017697
mov ecx, dword [ebp - 0x104]
imul ecx, dword [ebp - 0x10c]
mov eax, dword [ebp - 0x114]
shl eax, cl
or eax, dword [ebp - 0x11c]
cdq
mov dword [ebp - 0x3c0], eax
mov dword [ebp - 0x3bc], edx
push dword [ebp - 0x3bc]
push dword [ebp - 0x3c0]
lea ecx, [ebp - 0x5a8]
call fcn.10001a55
pop ecx
pop ecx
mov dword [ebp - 0x34c], eax
mov ecx, dword [ebp - 0x34c]
call fcn.100032b3
push eax
call fcn.100379e3
pop ecx
lea ecx, [ebp - 0x5a8]
call fcn.100032a9
jmp 0x10017618
jmp 0x100175f2
jmp 0x100175cc
jmp 0x100175a6
push 0
push 0
push 0
call dword [sym.imp.ADVAPI32.dll_RegSetKeySecurity]
mov eax, dword [ebp - 0x58]
mov ecx, dword [ebp - 0x88]
add ecx, dword [eax + 0x20]
mov eax, dword [ebp - 0x84]
lea eax, [ecx + eax*4]
mov dword [ebp - 0x2ec], eax
mov dword [ebp - 4], 0xb
cmp dword [ebp - 0x2e4], 0x746b
jge 0x100176ec
push dword [ebp - 0x354]
call fcn.100379e3
pop ecx
jmp 0x10017708
or dword [ebp - 4], 0xffffffff
jmp 0x10017712
cmp dword [ebp - 0x2ec], 0
je 0x100177c2
mov eax, dword [ebp - 0x2ec]
mov ecx, dword [ebp - 0x88]
add ecx, dword [eax]
push ecx
lea ecx, [ebp - 0x548]
call fcn.10018d36
mov dword [ebp - 4], 0xd
mov edx, dword [ebp + 8]
lea ecx, [ebp - 0x548]
call fcn.1000ae5b
mov dword [ebp - 0x2f4], eax
movzx eax, byte [0x10068ae9]
test eax, eax
je 0x10017770
mov ecx, 0x10069f98
call fcn.10018e5f
movzx eax, al
test eax, eax
jne 0x10017790
lea eax, [ebp - 0x2f4]
push eax
mov ecx, 0x10069f98
call fcn.10018e83
mov ecx, dword [ebp - 0x84]
mov dword [eax], ecx
mov byte [0x10068ae9], 1
cmp dword [ebp - 0x90], 0xffffffff
jne 0x100177b3
mov eax, dword [ebp - 0x2f4]
cmp eax, dword [ebp - 0x124]
jne 0x100177b3
mov eax, dword [ebp - 0x84]
mov dword [ebp - 0x90], eax
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x548]
call fcn.100034f2
jmp 0x1001755a
cmp dword [ebp + 0x10], 0
jne 0x100177f0
cmp dword [ebp - 0x90], 0xffffffff
je 0x100177f0
mov eax, dword [ebp - 0x58]
mov ecx, dword [ebp - 0x88]
add ecx, dword [eax + 0x24]
mov eax, dword [ebp - 0x90]
mov ax, word [ecx + eax*2]
mov word [ebp - 0x40], ax
movzx eax, word [ebp - 0x40]
cmp eax, 0xffff
je 0x10017b86
movzx eax, word [ebp - 0x40]
mov ecx, dword [ebp - 0x58]
mov edx, dword [ebp - 0x88]
add edx, dword [ecx + 0x1c]
lea eax, [edx + eax*4]
mov dword [ebp - 0x35c], eax
mov eax, dword [ebp - 0x35c]
mov ecx, dword [ebp - 0x88]
add ecx, dword [eax]
mov dword [ebp - 0x60], ecx
mov eax, dword [ebp - 0x60]
cmp eax, dword [ebp - 0x58]
jbe 0x10017b81
push 8
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x94]
mov edx, dword [ebp - 0x58]
add edx, dword [ecx + eax + 0x7c]
cmp dword [ebp - 0x60], edx
jae 0x10017b81
mov eax, dword [0x10069fc0]
and eax, 2
jne 0x10017883
mov eax, dword [0x10069fc0]
or eax, 2
mov dword [0x10069fc0], eax
mov dword [ebp - 4], 0xe
push 0x1e8b
call fcn.100265d3
pop ecx
mov byte [0x10069fb8], al
or dword [ebp - 4], 0xffffffff
mov byte [ebp - 0x6c], 2
mov byte [ebp - 0x6b], 0x42
mov byte [ebp - 0x6a], 0
mov byte [ebp - 0x69], 8
mov byte [ebp - 0x68], 1
mov byte [ebp - 0x67], 8
mov byte [ebp - 0x66], 4
mov byte [ebp - 0x65], 0x8c
mov byte [ebp - 0x64], 0x83
mov byte [ebp - 0x63], 0x7d
mov byte [ebp - 0x62], 0x6b
xor eax, eax
inc eax
shl eax, 0
movzx eax, byte [ebp + eax - 0x6c]
and eax, 0x2e
xor ecx, ecx
inc ecx
shl ecx, 0
movzx ecx, byte [ebp + ecx - 0x6c]
or ecx, 0x2e
sub ecx, eax
xor eax, eax
inc eax
imul eax, eax, 0
movzx eax, byte [ebp + eax - 0x6c]
mov byte [ebp + eax - 0x78], cl
mov dword [ebp - 0x14], 2
and dword [ebp - 0x98], 0
jmp 0x100178f4
mov eax, dword [ebp - 0x14]
inc eax
inc eax
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 0xb
jae 0x100179a8
xor eax, eax
inc eax
imul eax, eax, 0
movzx eax, byte [ebp + eax - 0x6c]
lea eax, [eax + eax + 2]
cmp dword [ebp - 0x14], eax
jne 0x10017935
mov eax, dword [ebp - 0x14]
movzx eax, byte [ebp + eax - 0x6c]
inc eax
mov dword [ebp - 0x98], eax
mov eax, dword [ebp - 0x14]
movzx eax, byte [ebp + eax - 0x6c]
mov ecx, dword [ebp - 0x14]
lea eax, [ecx + eax - 1]
mov dword [ebp - 0x14], eax
jmp 0x100178ec
mov eax, dword [ebp - 0x14]
sub eax, dword [ebp - 0x98]
movzx eax, byte [ebp + eax - 0x6e]
movsx eax, byte [ebp + eax - 0x78]
mov ecx, dword [ebp - 0x14]
movzx ecx, byte [ebp + ecx - 0x6b]
and ecx, eax
mov eax, dword [ebp - 0x14]
sub eax, dword [ebp - 0x98]
movzx eax, byte [ebp + eax - 0x6e]
movsx eax, byte [ebp + eax - 0x78]
mov edx, dword [ebp - 0x14]
movzx edx, byte [ebp + edx - 0x6b]
and edx, eax
mov eax, dword [ebp - 0x14]
sub eax, dword [ebp - 0x98]
movzx eax, byte [ebp + eax - 0x6e]
movsx eax, byte [ebp + eax - 0x78]
mov esi, dword [ebp - 0x14]
movzx ebx, byte [ebp + esi - 0x6b]
add ebx, eax
sub ebx, edx
sub ebx, ecx
mov eax, dword [ebp - 0x14]
movzx eax, byte [ebp + eax - 0x6c]
mov byte [ebp + eax - 0x78], bl
and dword [ebp - 0x98], 0
jmp 0x100178ec
xor eax, eax
inc eax
imul eax, eax, 3
mov byte [ebp + eax - 0x78], 0
mov eax, dword [0x10069fc0]
and eax, 4
jne 0x100179ee
mov eax, dword [0x10069fc0]
or eax, 4
mov dword [0x10069fc0], eax
mov dword [ebp - 4], 0xf
lea eax, [ebp - 0x78]
push eax
mov ecx, 0x10069f20
call fcn.10018d36
push 0x10050f91
call fcn.100379b9
pop ecx
or dword [ebp - 4], 0xffffffff
and dword [ebp - 0x12c], 0
jmp 0x10017a04
mov eax, dword [ebp - 0x12c]
inc eax
mov dword [ebp - 0x12c], eax
cmp dword [ebp - 0x12c], 4
jae 0x10017a1a
mov eax, dword [ebp - 0x12c]
mov byte [ebp + eax - 0x78], 0
jmp 0x100179f7
mov eax, dword [ebp - 0x60]
mov dword [ebp - 0x70], eax
movsx eax, byte [0x10069fb8]
mov ecx, dword [ebp - 0x70]
movsx ecx, byte [ecx]
cmp ecx, eax
je 0x10017a3a
mov eax, dword [ebp - 0x70]
inc eax
mov dword [ebp - 0x70], eax
jmp 0x10017a20
mov eax, dword [ebp - 0x70]
inc eax
mov dword [ebp - 0x70], eax
push dword [ebp - 0x70]
push dword [ebp - 0x60]
lea ecx, [ebp - 0x504]
call fcn.10019520
mov dword [ebp - 4], 0x10
push 0x10069f20
lea ecx, [ebp - 0x504]
call fcn.10018d65
lea eax, [ebp - 0x4d0]
push eax
lea ecx, [ebp - 0x504]
call fcn.10003ab0
push dword [eax]
lea eax, [ebp - 0x490]
push eax
lea ecx, [ebp - 0x504]
call fcn.10004a76
push dword [eax]
lea ecx, [ebp - 0x560]
call fcn.10019549
mov byte [ebp - 4], 0x11
lea eax, [ebp - 0x560]
push eax
call fcn.1000c264
pop ecx
mov dword [ebp - 0x18c], eax
cmp dword [ebp - 0x18c], 0
je 0x10017b30
push dword [ebp - 0x70]
lea ecx, [ebp - 0x528]
call fcn.10018d36
mov byte [ebp - 4], 0x12
lea edx, [ebp - 0x364]
lea ecx, [ebp - 0x528]
call fcn.1000af67
movzx eax, al
test eax, eax
je 0x10017b03
push 0
push dword [ebp - 0x364]
push 0
push dword [ebp - 0x18c]
call fcn.10015218
add esp, 0x10
mov dword [ebp - 0x60], eax
jmp 0x10017b1f
push 1
push 0
lea eax, [ebp - 0x528]
push eax
push dword [ebp - 0x18c]
call fcn.10015218
add esp, 0x10
mov dword [ebp - 0x60], eax
mov byte [ebp - 4], 0x11
lea ecx, [ebp - 0x528]
call fcn.100034f2
jmp 0x10017b63
cmp dword [ebp + 0x10], 0
jne 0x10017b46
mov ecx, dword [ebp + 0xc]
call fcn.100032b3
mov dword [ebp - 0x2fc], eax
jmp 0x10017b50
movzx eax, word [ebp + 0x10]
mov dword [ebp - 0x2fc], eax
push dword [ebp - 0x2fc]
push dword [ebp + 8]
call fcn.1000f9f5
pop ecx
pop ecx
mov dword [ebp - 0x60], eax
mov byte [ebp - 4], 0x10
lea ecx, [ebp - 0x560]
call fcn.10003423
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x504]
call fcn.100034f2
mov eax, dword [ebp - 0x60]
jmp 0x10017b88
xor eax, eax
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret