Function at 0x10025f70
Capabilities:
Delete registry key
Encode data using xor
Encrypt data using speck
Get memory capacity

Disassembly:
mov eax, 0x10054613
call fcn.10053340
sub esp, 0x258
mov dword [ebp - 0x20], 0xffffffff
push ebx
mov dword [ebp - 0x34], 0xa421e0be
xor ebx, ebx
mov dword [ebp - 0x28], 0xf4d39d98
push esi
mov dword [ebp - 0x30], 1
push edi
mov dword [ebp - 0x38], 0xd52276c1
mov dword [ebp - 0x10], esp
mov dword [ebp - 0xc0], edx
mov dword [ebp - 0x9c], ecx
mov dword [ebp - 0x190], ebx
mov dword [ebp - 0x20], ebx
cmp dword [ebp - 0x20], 0xffffffe3
jg 0x10026157
push 2
lea ecx, [ebp - 0xdc]
call fcn.10001b7c
mov dword [ebp - 4], ebx
mov dword [ebp - 0x2c], 0xfffffffd
mov dword [ebp - 0x24], ebx
jmp 0x10025ff9
mov ecx, dword [ebp - 0x24]
mov eax, dword [ebp - 0xdc]
mov dword [eax + ecx*4], 0xbc588e1b
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], 2
jl 0x10025fe6
mov esi, dword [ebp - 0xdc]
xor ecx, ecx
mov eax, dword [esi + 4]
mov dword [ebp - 0x28], eax
mov eax, dword [ebp - 0x28]
cmp dword [esi + 4], eax
mov eax, dword [ebp - 0x20]
setne cl
cmp ecx, 0x9b504dbf
sbb edx, edx
xor ecx, ecx
neg edx
cmp edx, eax
setl cl
cmp ecx, 0x11aa
jl 0x100260de
mov dword [ebp - 0x34], 0xfffffffc
cmp dword [ebp - 0x34], 0x22
jg 0x10026140
cmp dword [ebp - 0x34], ebx
jne 0x10026140
mov byte [ebp - 0x15], bl
mov dword [ebp - 0x28], 0x364d
cmp dword [ebp - 0x28], 0x3693
jle 0x100260aa
mov esi, ebx
mov edi, ebx
mov eax, edi
lea ecx, [ebp - 0x248]
xor eax, esi
cdq
push edx
push eax
call fcn.10002543
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x10026083
mov eax, dword [eax]
push eax
call fcn.1003de4c
pop ecx
push ebx
push 1
lea ecx, [ebp - 0x248]
call fcn.1000c586
inc edi
cmp edi, 0xaa6
jl 0x10026067
inc esi
cmp esi, 0x7eaa
jl 0x10026065
cmp byte [ebp - 0x15], 0
je 0x100260bf
push ebx
push 0x1bb4
push ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_ReadProcessMemory]
cmp dword [ebp - 0x28], 0x340a
jge 0x100260d3
push str.leb_bahzhe_mgqmlyzhx_mysv_szugnzx_bktkk_wnifuxv_ntlrcz_xlkkovite_stnospxm_gzf_gilezhyar_vkdevhr_pbsr
call fcn.1003de4c
pop ecx
mov dword [ebp - 4], ebx
inc dword [ebp - 0x34]
jmp 0x1002603d
mov dword [ebp - 0x1c], 0xffffffff
mov dword [ebp - 0x2c], ebx
mov dword [ebp - 0x1c], 0xfffffff6
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0xdc]
cmp dword [eax], ebx
je 0x10026127
xor eax, eax
cmp dword [esi + 4], 1
setl al
cmp eax, 0xfff6
mov eax, dword [ebp - 0x1c]
sbb edx, edx
xor ecx, ecx
neg edx
cmp edx, eax
setne cl
xor eax, eax
test ecx, ecx
setle al
add eax, dword [ebp - 0x1c]
jne 0x10026127
mov eax, dword [ebp - 0x30]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x34]
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x30]
mov eax, dword [ebp - 0x38]
mov dword [ebp - 0x2c], 0xc92cebb3
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xdc]
call fcn.10001bd9
dec dword [ebp - 0x20]
jmp 0x10025fc0
mov dword [ebp - 0x30], 0x6670
cmp dword [ebp - 0x30], 0x6a55
jle 0x100261a2
mov edi, ebx
mov esi, ebx
mov dword [ebp - 0x38], ebx
mov eax, esi
mov ecx, 0x1006de98
cdq
idiv ebx
xor edx, edi
mov eax, edx
cdq
push edx
push eax
call fcn.1000bb28
inc ebx
cmp ebx, 0xd0a
jl 0x1002616e
inc esi
push 0
pop ebx
cmp esi, 0x281f
jl 0x1002616b
inc edi
cmp edi, 0x5040
jl 0x10026169
mov dword [ebp - 0x24], ebx
jmp 0x100261b5
mov eax, dword [ebp - 0x24]
mov dword [ebp + eax*4 - 0x44], 7
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], 1
jl 0x100261a7
mov dword [ebp - 4], 3
cmp dword [ebp - 0x30], 0x634b
jge 0x100261da
mov edx, str.qtdyo_pcck_dll_itkmrhda_vwav_ueeakoek_kso_tmmd_jvozb_lmrnwu_jscx_vtzhq_vyvzw
mov ecx, 0x1006de98
call fcn.100102b0
or dword [ebp - 4], 0xffffffff
mov dword [ebp - 0x44], 0x11
jmp 0x10026221
mov byte [ebp - 0x15], bl
cmp byte [ebp - 0x15], 0
je 0x1002621e
push ebx
push 0x1f9b
call dword [sym.imp.USER32.dll_GetWindowThreadProcessId]
dec dword [ebp - 0x44]
cmp dword [ebp - 0x44], 0xffffffee
je 0x10026209
push dword [ebp - 0x80]
movdqa xmm0, xmmword [0x10061140]
lea eax, [ebp - 0x1c0]
push eax
lea eax, [ebp - 0x1d0]
mov dword [ebp - 0x78], 0xd049905
push eax
push ebx
lea ecx, [ebp - 0xbc]
mov word [ebp - 0x74], 0x3d06
mov byte [ebp - 0x72], bl
mov dword [ebp - 0x71], 0x125031b
mov dword [ebp - 0x6d], 0xec7c030e
mov word [ebp - 0x69], 0x2d7
mov byte [ebp - 0x67], 3
movdqu xmmword [ebp - 0x1d0], xmm0
mov dword [ebp - 0xbc], ebx
mov dword [ebp - 0xb8], ebx
mov dword [ebp - 0xb4], ebx
call fcn.100113a5
push 4
lea ecx, [ebp - 0x110]
mov dword [ebp - 4], 5
call fcn.10001b7c
mov dword [ebp - 0x24], ebx
jmp 0x100262b7
mov ecx, dword [ebp - 0x24]
mov eax, dword [ebp - 0x110]
or dword [eax + ecx*4], 0xffffffff
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], 4
jl 0x100262a7
mov byte [ebp - 0x15], bl
cmp byte [ebp - 0x15], 0
je 0x100262cd
push ebx
call dword [sym.imp.KERNEL32.dll_GlobalUnlock]
mov esi, dword [ebp - 0x110]
mov dword [esi + 0xc], ebx
mov ecx, dword [esi + 0xc]
mov eax, dword [ebp - 0xbc]
mov dword [ebp - 0x38], 0x31d8b9db
mov dword [ebp - 0x2c], 0x2bd42ca8
mov edx, dword [eax + ecx*4]
xor ecx, ecx
mov eax, dword [ebp - 0x38]
add edx, 0x74c7
cmp edx, eax
setne cl
xor eax, eax
cmp ecx, 9
setle al
mov dword [ebp - 0x2c], eax
mov byte [ebp - 0x15], bl
cmp byte [ebp - 0x15], 0
je 0x1002631c
push ebx
push ebx
call dword [sym.imp.ADVAPI32.dll_RegDeleteKeyA]
inc dword [esi + 0xc]
cmp dword [esi + 0xc], 3
jle 0x100262d6
lea ecx, [ebp - 0x110]
call fcn.10001bd9
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xbc]
call fcn.10001bd9
push 0x6c
pop eax
mov word [ebp - 0xfa], ax
mov dword [ebp - 0x1c], 0x213
cmp dword [ebp - 0x1c], 0x452
jle 0x100263af
mov esi, ebx
mov dword [ebp - 0x28], ebx
mov dword [ebp - 0x38], esi
mov dword [ebp - 0x30], 0x7d3a
mov edi, ebx
mov dword [ebp - 0x38], ebx
mov eax, edi
cdq
idiv ebx
mov eax, esi
mov ecx, edx
sar eax, cl
mov ecx, 0x1006de98
cdq
push edx
push eax
call fcn.1000bb28
inc ebx
cmp ebx, 0x6f74
jl 0x1002636d
inc edi
push 0
pop ebx
cmp edi, 0x6c31
jl 0x1002636a
dec esi
dec dword [ebp - 0x30]
jne 0x10026368
mov esi, dword [ebp - 0x28]
inc esi
mov dword [ebp - 0x28], esi
cmp esi, 0x2d85
jl 0x1002635e
mov dword [ebp - 4], 6
cmp dword [ebp - 0x1c], 0xffffffc2
jge 0x100263cb
mov edx, str.tym_mkekmw_idthkwx_hxyom_fwfk_ksxqfln_slgwncyt_sxjlou_mqoblgtcx_jelh_ugx_vfmv_arjndozyf
mov ecx, 0x1006de98
call fcn.100102b0
or dword [ebp - 4], 0xffffffff
mov dword [ebp - 0x1c], 0xc69aed23
mov dword [ebp - 0x28], 0xffffffff
mov dword [ebp - 0x30], 0x205b2906
mov dword [ebp - 0x24], 5
mov dword [ebp - 0x34], 7
mov dword [ebp - 0x30], 0xfffffff6
mov dword [ebp - 0x38], 0xfffffffc
mov byte [ebp - 0x15], bl
cmp byte [ebp - 0x15], 0
je 0x10026416
push ebx
push 0x200c
push ebx
call dword [sym.imp.GDI32.dll_ExtCreateRegion]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x28]
sub eax, dword [ebp - 0x1c]
mov dword [ebp - 0x30], eax
mov eax, dword [ebp - 0x30]
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], ebx
je 0x10026469
mov eax, dword [ebp - 0x34]
mov eax, dword [ebp - 0x24]
imul eax, dword [ebp - 0x28], 0x6b17
cmp eax, dword [ebp - 0x34]
je 0x10026469
xor eax, eax
inc eax
jmp 0x1002646b
mov eax, ebx
mov dword [ebp - 0x30], eax
mov eax, dword [ebp - 0x30]
sub eax, 0x7cce3a79
imul eax, dword [ebp - 0x1c]
cmp eax, 0xdd77
jge 0x1002648a
cmp dword [ebp - 0x1c], ebx
jne 0x1002648a
mov eax, ebx
jmp 0x1002648d
xor eax, eax
inc eax
push 2
mov dword [ebp - 0x38], eax
mov edi, ebx
pop esi
mov dword [ebp - 0x28], edi
mov dword [ebp - 0x1c], esi
cmp esi, 0x12
jae 0x10026a00
push 4
lea ecx, [ebp - 0x134]
call fcn.10001b7c
mov dword [ebp - 0x34], 0xfffffff7
mov dword [ebp - 0x80], 0xe90a624c
mov dword [ebp - 0x24], ebx
jmp 0x100264d7
mov ecx, dword [ebp - 0x24]
mov eax, dword [ebp - 0x134]
mov dword [eax + ecx*4], 4
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], 4
jl 0x100264c4
mov byte [ebp - 0x15], bl
cmp byte [ebp - 0x15], 0
je 0x100264f9
push 0x2d9
push ebx
push ebx
push 0x11cb
push ebx
call dword [sym.imp.SHELL32.dll_ExtractIconExW]
mov dword [ebp - 0x34], ebx
jmp 0x1002650f
mov ecx, dword [ebp - 0x34]
mov eax, dword [ebp - 0x134]
cmp dword [eax + ecx*4], ebx
jne 0x10026515
inc dword [ebp - 0x34]
cmp dword [ebp - 0x34], 3
jle 0x100264fe
lea ecx, [ebp - 0x134]
call fcn.10001bd9
movzx eax, byte [ebp - 0x78]
lea eax, [eax*2 + 2]
cmp esi, eax
jne 0x100266c7
mov dword [ebp - 0x2c], 0x19b6
cmp dword [ebp - 0x2c], 0x1a50
jle 0x100265c7
mov edi, ebx
mov dword [ebp - 0x20], ebx
mov dword [ebp - 0x24], edi
mov dword [ebp - 0x34], 0x6414
mov esi, ebx
mov dword [ebp - 0x28], ebx
mov edi, esi
mov dword [ebp - 0x30], 0x6b39
mov esi, dword [ebp - 0x24]
mov eax, esi
lea ecx, [ebp - 0x218]
xor eax, edi
cdq
push edx
push eax
call fcn.10002543
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x10026583
mov eax, dword [eax]
push eax
call fcn.1003de4c
pop ecx
push ebx
push 1
lea ecx, [ebp - 0x218]
call fcn.1000c586
dec edi
dec dword [ebp - 0x30]
jne 0x10026567
mov esi, dword [ebp - 0x28]
inc esi
mov dword [ebp - 0x28], esi
cmp esi, 0x551
jl 0x1002655b
dec dword [ebp - 0x24]
dec dword [ebp - 0x34]
jne 0x10026556
mov edi, dword [ebp - 0x20]
inc edi
mov dword [ebp - 0x20], edi
cmp edi, 0x2460
jl 0x1002654c
mov esi, dword [ebp - 0x1c]
mov dword [ebp - 0x20], 0xb9f9b319
mov dword [ebp - 0x30], 0xe637c5b1
mov dword [ebp - 0x144], ebx
mov dword [ebp - 0x140], ebx
mov dword [ebp - 0x13c], ebx
mov dword [ebp - 0x138], ebx
mov dword [ebp - 0x30], 0x41a80d1c
mov dword [ebp - 0x38], 0xfffffff7
mov dword [ebp - 0x20], ebx
jmp 0x10026695
mov dword [ebp - 0x24], 0x36f6dd8d
mov dword [ebp - 0x1c], 0xffffffff
mov byte [ebp - 0x15], bl
cmp byte [ebp - 0x15], 0
je 0x1002662f
push 0x3c1
push 0x1968
push 0x5a3
call dword [sym.imp.KERNEL32.dll_MulDiv]
cmp dword [ebp - 0x24], ebx
je 0x1002668f
mov eax, dword [ebp - 0x20]
xor edx, edx
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x30], eax
mov eax, dword [ebp - 0x30]
cmp eax, 1
mov eax, dword [ebp - 0x1c]
setl dl
xor ecx, ecx
cmp edx, eax
setl cl
xor edx, edx
imul ecx, ecx, 0x70ed
mov dword [ebp - 0x13c], ecx
mov eax, dword [ebp - 0x24]
cmp ecx, eax
setg dl
xor eax, eax
cmp edx, 0xea31
setle al
cmp eax, dword [ebp - 0x24]
je 0x1002667b
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x24]
mov dword [ebp - 0x30], eax
cmp dword [ebp - 0x30], ebx
jne 0x1002668f
mov eax, dword [ebp - 0x24]
mov dword [ebp - 0x38], ebx
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], 0x14
je 0x10026603
cmp dword [ebp - 0x2c], 0x166f
jge 0x100266b3
push str.edoyxgf_mwnovcu_njpk_vwgwplsve_qpodo_fxgrb_uhhj_wvn_rrsrnskc_xidmkg_phyhlyye
call fcn.1003de4c
pop ecx
or dword [ebp - 4], 0xffffffff
movzx eax, byte [ebp + esi - 0x78]
dec esi
add esi, eax
lea edi, [eax + 1]
jmp 0x100269f8
mov dword [ebp - 0x20], ebx
mov dword [ebp - 0x2c], 0xffffffff
mov dword [ebp - 0x2c], 0x6964
cmp dword [ebp - 0x2c], 0x69be
jle 0x10026735
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_FindNextFileW]
mov edi, ebx
mov esi, ebx
lea eax, [esi + edi]
cdq
lea ecx, [ebp - 0x1e8]
push edx
push eax
call fcn.10002543
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x10026708
mov eax, dword [eax]
push eax
call fcn.1003de4c
pop ecx
push ebx
push 1
lea ecx, [ebp - 0x1e8]
call fcn.1000c586
inc esi
cmp esi, 0x74ae
jl 0x100266ed
inc edi
cmp edi, 0x771c
jl 0x100266eb
mov esi, dword [ebp - 0x1c]
mov edi, dword [ebp - 0x28]
cmp dword [ebp - 0x2c], 0x6616
jge 0x10026749
push str.nrf_hiqsragdb_ozcf_alni_whtkgsm_pyth_mbpk_vptfxn_xtvqwm_jvjmqzy_sdvgtipd_cqljmib
call fcn.1003de4c
pop ecx
or dword [ebp - 4], 0xffffffff
xor ecx, ecx
mov dword [ebp - 0x24], ebx
inc ecx
jmp 0x10026762
mov eax, dword [ebp - 0x24]
mov dword [ebp + eax*4 - 0xb0], ecx
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], ecx
jl 0x10026755
mov dword [ebp - 0x20], ebx
jmp 0x100267c7
mov dword [ebp - 0x34], 0x7d27
mov dword [ebp - 0x2c], 0xd8bc0d13
mov dword [ebp - 0x38], 5
mov eax, dword [ebp - 0x34]
mov eax, dword [ebp - 0x20]
inc eax
je 0x1002678d
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x20]
cmp dword [ebp - 0x34], ebx
je 0x1002679c
mov eax, ecx
cmp dword [ebp - 0x20], ebx
jne 0x1002679e
mov eax, ebx
mov dword [ebp - 0x2c], eax
mov eax, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x34]
mov eax, dword [ebp - 0x34]
cmp dword [ebp - 0x20], ebx
jne 0x100267b6
mov eax, ebx
cmp dword [ebp - 0x34], ebx
je 0x100267b8
mov eax, ecx
mov dword [ebp - 0x2c], eax
mov eax, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x34]
mov dword [ebp - 0x38], eax
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], 0x14
jl 0x1002676c
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x20], eax
mov eax, dword [ebp - 0x20]
movzx edx, byte [ebp + esi - 0x77]
mov dword [ebp - 0xb0], eax
mov eax, esi
sub eax, edi
push 3
movzx eax, byte [ebp + eax - 0x7a]
movzx ecx, word [ebp + eax*2 - 0x104]
mov eax, ecx
and eax, edx
add eax, eax
sub ecx, eax
movzx eax, byte [ebp + esi - 0x78]
add ecx, edx
mov word [ebp + eax*2 - 0x104], cx
lea ecx, [ebp - 0x11c]
mov dword [ebp - 0x20], 0xd7839892
mov dword [ebp - 0x34], 0xffffffff
mov dword [ebp - 0x24], 0x665969a2
mov dword [ebp - 0x30], 8
mov dword [ebp - 0x28], 1
call fcn.10001b7c
mov dword [ebp - 4], 0xc
mov esi, 0x947f
mov dword [ebp - 0x154], esi
mov dword [ebp - 0x150], esi
mov dword [ebp - 0x14c], esi
mov dword [ebp - 0x148], esi
mov dword [ebp - 0x2c], 0x2bc3
cmp dword [ebp - 0x2c], 0x2c47
jle 0x100268a4
push 0x1a11
push 0x323
call dword [sym.imp.USER32.dll_GetDlgItem]
mov esi, ebx
mov edi, ebx
mov eax, edi
mov ecx, 0x1006de98
or eax, esi
cdq
push edx
push eax
call fcn.1000bb28
inc edi
cmp edi, 0x58ca
jl 0x10026881
inc esi
cmp esi, 0x1da7
jl 0x1002687f
mov dword [ebp - 0x24], ebx
jmp 0x100268bc
mov ecx, dword [ebp - 0x24]
mov eax, dword [ebp - 0x11c]
mov dword [eax + ecx*4], 0x7f28a996
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], 3
jl 0x100268a9
mov byte [ebp - 4], 0xd
cmp dword [ebp - 0x2c], 0x295d
jge 0x100268fc
mov edx, str.tmaslcv_inmjfwjc_ncybbnb_ktqop_vytanip_oqhbu_rmeddkbd_rstt
mov ecx, 0x1006de98
call fcn.100102b0
jmp 0x100268fc
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x34], eax
mov eax, dword [ebp - 0x34]
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x34], ebx
jne 0x10026911
mov ecx, ebx
jmp 0x10026914
xor ecx, ecx
inc ecx
xor eax, eax
cmp ecx, 1
setne al
cmp eax, dword [ebp - 0x24]
jge 0x1002692b
cmp dword [ebp - 0x34], ebx
je 0x1002692b
xor ecx, ecx
inc ecx
jmp 0x1002692d
mov ecx, ebx
xor eax, eax
cmp ecx, 0xfff8
setne al
xor edx, edx
cmp eax, 2
setne dl
xor ecx, ecx
add edx, dword [ebp - 0x24]
imul edx, dword [ebp - 0x24]
mov eax, dword [ebp - 0x30]
cmp edx, eax
setg cl
xor edx, edx
cmp ecx, 0xfffffffd
setl dl
xor ecx, ecx
imul edx, dword [ebp - 0x20]
mov eax, dword [ebp - 0x20]
cmp eax, edx
mov eax, dword [ebp - 0x20]
setge cl
xor edx, edx
cmp eax, ecx
setg dl
xor ecx, ecx
imul edx, dword [ebp - 0x28]
mov eax, dword [ebp - 0x28]
cmp edx, eax
setne cl
xor eax, eax
cmp ecx, 1
setg al
xor ecx, ecx
cmp eax, 0x4b4b
setge cl
sub ecx, dword [ebp - 0x30]
mov eax, dword [ebp - 0x28]
neg ecx
mov esi, dword [ebp - 0x11c]
sbb ecx, ecx
xor edx, edx
inc ecx
cmp ecx, eax
mov eax, 0xfffe
setle dl
sub edx, dword [esi]
neg edx
sbb edx, edx
inc edx
neg edx
cmp eax, edx
sbb eax, eax
xor ecx, ecx
inc eax
cmp eax, 0xaba4
setge cl
xor edx, edx
cmp dword [esi], 0x42b8
mov dword [ebp - 0x154], ecx
mov eax, dword [ebp - 0x20]
setne dl
xor ecx, ecx
cmp edx, eax
setne cl
mov dword [ebp - 0x34], ecx
lea ecx, [ebp - 0x11c]
or dword [ebp - 4], 0xffffffff
call fcn.10001bd9
mov esi, dword [ebp - 0x1c]
mov edi, ebx
add esi, 2
jmp 0x10026495
xor eax, eax
mov word [ebp - 0xf6], ax
mov dword [ebp - 0x80], 6
mov byte [ebp - 0x15], bl
cmp byte [ebp - 0x15], al
je 0x10026a23
push 0x2504
call dword [sym.imp.KERNEL32.dll_SetLastError]
mov dword [ebp - 0x1c], 0x6398
cmp dword [ebp - 0x1c], 0x641e
jle 0x10026a9f
mov dword [ebp - 0x28], ebx
mov edi, ebx
mov dword [ebp - 0x30], ebx
mov esi, ebx
mov dword [ebp - 0x2c], ebx
mov ecx, esi
mov dword [ebp - 0x24], ebx
mov ebx, dword [ebp - 0x28]
mov esi, edi
mov dword [ebp - 0x38], edi
mov edi, dword [ebp - 0x24]
shl esi, cl
mov ecx, edi
mov eax, esi
shl eax, cl
mov ecx, 0x1006de98
or eax, ebx
cdq
push edx
push eax
call fcn.1000bb28
inc edi
cmp edi, 0x437e
jl 0x10026a52
mov esi, dword [ebp - 0x2c]
mov edi, dword [ebp - 0x30]
inc esi
mov dword [ebp - 0x2c], esi
push 0
pop ebx
cmp esi, 0x3f96
jl 0x10026a40
inc edi
mov dword [ebp - 0x30], edi
cmp edi, 0x7a6f
jl 0x10026a3b
mov eax, dword [ebp - 0x28]
inc eax
mov dword [ebp - 0x28], eax
cmp eax, 0x245d
jl 0x10026a36
mov byte [ebp - 0x15], bl
mov dword [ebp - 4], 0xf
cmp dword [ebp - 0x1c], 0x62eb
jge 0x10026ac1
mov edx, str.nktrln_byof_llkypovfc
mov ecx, 0x1006de98
call fcn.100102b0
or dword [ebp - 4], 0xffffffff
cmp byte [ebp - 0x15], 0
je 0x10026ae1
push 0xf6b
push 0x1692
push ebx
push 0x268
call dword [sym.imp.USER32.dll_CreateCaret]
xor eax, eax
mov dword [ebp - 0x194], 7
mov word [ebp - 0x1a8], ax
lea ecx, [ebp - 0x1a8]
lea eax, [ebp - 0x104]
mov dword [ebp - 0x198], ebx
push eax
call fcn.10020a6d
push dword [ebp - 0xc0]
mov dword [ebp - 4], 0x11
lea edi, [ebp - 0x104]
xor eax, eax
lea ecx, [ebp - 0x1c0]
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
call fcn.1000bc3d
mov byte [ebp - 4], 0x12
mov dword [ebp - 0x20], 0xb743d837
mov dword [ebp - 0x24], 0x8b922806
mov dword [ebp - 0x2c], 0xffffffff
mov dword [ebp - 0x34], 0x184e
mov dword [ebp - 0x1c], ebx
jmp 0x10026b8b
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0xd0], 0x82062403
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 4
jl 0x10026b7a
mov dword [ebp - 0x20], ebx
jmp 0x10026c15
mov dword [ebp - 0x1c], 0x7b6fe6d3
mov esi, dword [ebp - 0xd0]
mov eax, dword [ebp - 0x20]
neg esi
sbb esi, esi
xor ecx, ecx
inc esi
mov edx, dword [ebp + eax*4 - 0xd0]
mov eax, dword [ebp - 0x20]
cmp eax, esi
setle cl
imul edx, ecx
test edx, edx
je 0x10026bc6
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0xcc]
xor edx, edx
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp + eax*4 - 0xd0]
mov eax, dword [ebp - 0x1c]
imul eax, dword [ebp - 0x1c]
cmp eax, ecx
mov eax, dword [ebp - 0x20]
setne dl
xor ecx, ecx
mov eax, dword [ebp + eax*4 - 0xd0]
cmp eax, edx
setne cl
mov dword [ebp - 0x24], ecx
mov byte [ebp - 0x15], bl
cmp byte [ebp - 0x15], 0
je 0x10026c12
push 0x3ca
call dword [sym.imp.USER32.dll_SetFocus]
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], 3
jle 0x10026b96
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0xc4]
mov eax, dword [ebp - 0x2c]
neg ecx
push 0x5c
sbb ecx, ecx
xor edx, edx
neg ecx
cmp ecx, eax
setle dl
xor ecx, ecx
imul edx, dword [ebp - 0x34]
mov eax, dword [ebp - 0x24]
cmp edx, eax
setne cl
xor edx, edx
cmp ecx, 0x51c8
setg dl
xor ecx, ecx
add edx, dword [ebp - 0x34]
mov eax, dword [ebp - 0x2c]
cmp edx, eax
setne cl
sub ecx, 0x4a3b31f0
sub ecx, dword [ebp - 0x24]
mov eax, dword [ebp - 0x20]
neg ecx
sbb ecx, ecx
inc ecx
mov dword [ebp - 0x38], ecx
xor ecx, ecx
cmp eax, dword [ebp - 0x38]
mov eax, dword [ebp - 0xcc]
setl cl
xor edx, edx
cmp ecx, eax
mov eax, dword [ebp - 0x24]
setg dl
xor ecx, ecx
cmp eax, edx
pop eax
setl cl
sub ecx, dword [ebp - 0x34]
neg ecx
push 2
sbb ecx, ecx
inc ecx
sub ecx, dword [ebp - 0x34]
neg ecx
mov byte [ebp - 0x58], bl
mov dword [ebp - 0x57], 0x86b40426
sbb ecx, ecx
mov word [ebp - 0x53], 0x3c1f
inc ecx
mov word [ebp - 0x48], ax
mov dword [ebp - 0x24], ecx
mov ecx, ebx
pop esi
cmp esi, 2
jne 0x10026ccc
push 5
pop ecx
push ecx
pop esi
jmp 0x10026cf5
movzx edx, byte [ebp + esi - 0x57]
mov eax, esi
sub eax, ecx
movzx eax, byte [ebp + eax - 0x5a]
movzx ecx, word [ebp + eax*2 - 0x48]
mov eax, ecx
and eax, edx
add eax, eax
sub ecx, eax
movzx eax, byte [ebp + esi - 0x58]
add ecx, edx
mov word [ebp + eax*2 - 0x48], cx
mov ecx, ebx
add esi, 2
cmp esi, 7
jb 0x10026cc0
xor eax, eax
mov word [ebp - 0x46], ax
mov dword [ebp - 0x20], 0x2eac4530
mov dword [ebp - 0x2c], 0x5b2906c
mov byte [ebp - 0x15], bl
cmp byte [ebp - 0x15], al
je 0x10026d23
push ebx
push ebx
push ebx
push ebx
call dword [sym.imp.OLEAUT32.dll_VariantTimeToDosDateTime]
cmp dword [ebp - 0x20], ebx
je 0x10026d4b
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x20]
cmp eax, dword [ebp - 0x20]
jle 0x10026d46
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x2c], eax
mov eax, dword [ebp - 0x2c]
add eax, 0x2f58f7b5
cmp eax, dword [ebp - 0x20]
je 0x10026d4b
xor ecx, ecx
inc ecx
jmp 0x10026d4d
mov ecx, ebx
mov eax, dword [ebp - 0x20]
xor edx, edx
cmp ecx, eax
mov eax, dword [ebp - 0x20]
setg dl
xor ecx, ecx
cmp edx, eax
setle cl
cmp ecx, 0x9934b0b4
ja 0x10026e37
mov dword [ebp - 0x1c], 0x75e5
cmp dword [ebp - 0x1c], 0x77fe
jle 0x10026dd9
mov edi, ebx
mov dword [ebp - 0x28], ebx
mov eax, ebx
mov dword [ebp - 0x30], 0x2156
mov dword [ebp - 0x2c], eax
mov ebx, eax
mov esi, 0x7973
mov eax, edi
mov ecx, 0x1006de98
or eax, ebx
cdq
push edx
push eax
call fcn.1000bb28
dec ebx
dec esi
jne 0x10026d95
mov eax, dword [ebp - 0x2c]
mov esi, dword [ebp - 0x28]
add eax, esi
dec dword [ebp - 0x30]
mov dword [ebp - 0x2c], eax
jne 0x10026d8e
inc esi
mov dword [ebp - 0x28], esi
push 0
pop ebx
cmp esi, 0x2839
jl 0x10026d82
inc edi
cmp edi, 0x26f5
jl 0x10026d7f
push ebx
call dword [sym.imp.KERNEL32.dll_GetFileType]
mov byte [ebp - 0x15], bl
cmp byte [ebp - 0x15], 0
je 0x10026ded
push 0x2570
call dword [sym.imp.USER32.dll_HideCaret]
mov byte [ebp - 4], 0x13
cmp dword [ebp - 0x1c], 0x73e1
jge 0x10026e09
mov edx, str.fyowg_rrl_gutl_vxtiiza_goz_zdrwbhpmy_yed_lgg_pdnkckm_onysavva_enddiq_okxmw_epjgeh_vrjj
mov ecx, 0x1006de98
call fcn.100102b0
mov dword [ebp - 4], 0x12
jmp 0x10026e47
mov byte [ebp - 0x15], bl
cmp byte [ebp - 0x15], 0
je 0x10026e47
push ebx
call dword [sym.imp.KERNEL32.dll_ClearCommBreak]
xor eax, eax
mov dword [ebp - 0xe0], 7
mov word [ebp - 0xf4], ax
lea ecx, [ebp - 0xf4]
lea eax, [ebp - 0x48]
mov dword [ebp - 0xe4], ebx
push eax
call fcn.10020a6d
mov byte [ebp - 4], 0x15
mov dword [ebp - 0x48], ebx
mov dword [ebp - 0x28], 0x40e11a79
mov dword [ebp - 0x24], 0xffd0
mov dword [ebp - 0x38], 0xdc6f
mov dword [ebp - 0x1c], ebx
jmp 0x10026e9e
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0x50], 0xddc85f70
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 2
jl 0x10026e90
mov dword [ebp - 0x50], ebx
cmp dword [ebp - 0x50], 0xffffffe8
jg 0x10026f9d
mov dword [ebp - 0x1c], 0xfffffff9
mov dword [ebp - 0x38], 0xd11d962e
mov dword [ebp - 0x1c], 0x1d
cmp dword [ebp - 0x1c], 5
jne 0x10026f95
mov dword [ebp - 0x38], 0xfffffffc
mov dword [ebp - 0x20], 0x8ab
cmp dword [ebp - 0x20], 0x975
jle 0x10026f6c
mov eax, ebx
mov dword [ebp - 0x28], ebx
mov esi, ebx
mov dword [ebp - 0x34], ebx
cdq
mov edi, ebx
idiv esi
mov eax, edx
mov dword [ebp - 0x30], eax
mov ecx, ebx
mov esi, 0x1a19
mov dword [ebp - 0x2c], ecx
xor eax, ecx
lea ecx, [ebp - 0x200]
cdq
push edx
push eax
call fcn.10002543
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x10026f23
mov eax, dword [eax]
push eax
call fcn.1003de4c
pop ecx
push ebx
push 1
lea ecx, [ebp - 0x200]
call fcn.1000c586
mov ecx, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x30]
add ecx, edi
mov dword [ebp - 0x2c], ecx
dec esi
jne 0x10026f09
inc edi
cmp edi, 0x32f1
jl 0x10026eff
mov esi, dword [ebp - 0x34]
mov eax, dword [ebp - 0x28]
inc esi
mov dword [ebp - 0x34], esi
cmp esi, 0x1f53
jl 0x10026ef5
inc eax
mov dword [ebp - 0x28], eax
cmp eax, 0x395f
jl 0x10026ef0
mov eax, dword [ebp - 0x38]
mov dword [ebp - 0x38], eax
cmp dword [ebp - 0x20], 0x697
jge 0x10026f86
push str.tvdgdz_omdruox_okfpvqaj_ppnl
call fcn.1003de4c
pop ecx
mov dword [ebp - 4], 0x15
dec dword [ebp - 0x1c]
jmp 0x10026ec6
dec dword [ebp - 0x50]
jmp 0x10026ea7
mov eax, dword [ebp - 0x50]
mov eax, dword [ebp - 0x4c]
imul eax, dword [ebp - 0x50], 0xfffe
mov dword [ebp - 0x28], eax
cmp dword [ebp - 0x28], ebx
jne 0x10026fb5
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0x4c]
xor edx, edx
mov eax, dword [ebp - 0x50]
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x50]
mov dword [ebp - 0x50], eax
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0x24]
cmp eax, 1
mov eax, dword [ebp - 0x24]
setle dl
xor ecx, ecx
add edx, 0xfff9
cmp edx, eax
push 1
setge cl
mov dword [ebp - 0x38], ecx
lea ecx, [ebp - 0x168]
call fcn.10001b7c
xor edx, edx
mov byte [ebp - 4], 0x18
inc edx
mov dword [ebp - 0x1c], edx
mov dword [ebp - 0x1c], ebx
jmp 0x10027014
mov ecx, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x168]
mov dword [eax + ecx*4], 0x9f9b3198
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], edx
jl 0x10027001
mov dword [ebp - 0x1c], ebx
cmp dword [ebp - 0x1c], ebx
jg 0x100270f7
mov byte [ebp - 0x15], bl
mov dword [ebp - 0x24], 0x68f6
cmp dword [ebp - 0x24], 0x6c5d
jle 0x100270ad
mov eax, ebx
mov dword [ebp - 0x28], ebx
mov edi, ebx
mov dword [ebp - 0x30], ebx
cdq
idiv edi
mov dword [ebp - 0x2c], 0x5dd6
mov edi, edx
mov esi, ebx
mov eax, esi
lea ecx, [ebp - 0x230]
xor eax, edi
cdq
push edx
push eax
call fcn.10002543
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x1002706c
mov eax, dword [eax]
push eax
call fcn.1003de4c
pop ecx
push ebx
push 1
lea ecx, [ebp - 0x230]
call fcn.1000c586
inc esi
cmp esi, 0x3e0b
jl 0x10027050
dec edi
dec dword [ebp - 0x2c]
jne 0x1002704e
mov edi, dword [ebp - 0x30]
mov eax, dword [ebp - 0x28]
inc edi
mov dword [ebp - 0x30], edi
cmp edi, 0x727
jl 0x10027042
inc eax
mov dword [ebp - 0x28], eax
cmp eax, 0x33b1
jl 0x1002703d
cmp byte [ebp - 0x15], 0
je 0x100270bf
push ebx
push ebx
push 0x3c
push ebx
push ebx
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
cmp dword [ebp - 0x24], 0x652c
jge 0x100270d3
push str.likgdgild_dhtd_hvgvf
call fcn.1003de4c
pop ecx
mov dword [ebp - 4], 0x18
mov byte [ebp - 0x15], bl
cmp byte [ebp - 0x15], 0
je 0x100270ef
push 0x229b
push ebx
call dword [sym.imp.KERNEL32.dll_IsValidLocale]
inc dword [ebp - 0x1c]
jmp 0x1002701c
lea ecx, [ebp - 0x168]
mov byte [ebp - 4], 0x15
call fcn.10001bd9
push 0x5f
pop ecx
mov al, bl
mov word [ebp - 0x3b], 0x1e0
push 2
mov byte [ebp - 0x3c], al
mov edi, ebx
mov byte [ebp - 0x39], 0xd8
mov word [ebp - 0x40], cx
pop esi
mov dword [ebp - 0x1c], esi
cmp esi, 4
jae 0x10027216
movzx eax, al
lea eax, [eax*2 + 2]
cmp esi, eax
jne 0x100271e2
mov dword [ebp - 0x28], 0x975
cmp dword [ebp - 0x28], 0xa3b
jle 0x100271b4
mov edi, ebx
mov dword [ebp - 0x30], ebx
mov dword [ebp - 0x38], edi
mov dword [ebp - 0x2c], 0x11b1
mov esi, ebx
mov ecx, esi
mov eax, edi
sar eax, cl
lea ecx, [ebp - 0x260]
cdq
push edx
push eax
call fcn.10002543
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x1002717e
mov eax, dword [eax]
push eax
call fcn.1003de4c
pop ecx
push ebx
push 1
lea ecx, [ebp - 0x260]
call fcn.1000c586
inc esi
cmp esi, 0x5894
jl 0x10027160
dec edi
dec dword [ebp - 0x2c]
jne 0x1002715e
mov edi, dword [ebp - 0x30]
inc edi
mov dword [ebp - 0x30], edi
cmp edi, 0x8ba
jl 0x10027154
mov esi, dword [ebp - 0x1c]
cmp dword [ebp - 0x28], 0x7fe
movzx eax, byte [ebp + esi - 0x3c]
mov dword [ebp - 0x38], eax
lea edi, [eax + 1]
jge 0x100271d6
push str.yco_itlzi_mlum_guwxv_rqivhcqku_vjyn_jwvvr_puwthsjr_bezkbr
call fcn.1003de4c
mov eax, dword [ebp - 0x38]
pop ecx
dec esi
mov dword [ebp - 4], 0x15
add esi, eax
jmp 0x1002720b
movzx edx, byte [ebp + esi - 0x3b]
mov eax, esi
sub eax, edi
mov edi, ebx
movzx eax, byte [ebp + eax - 0x3e]
movzx ecx, word [ebp + eax*2 - 0x40]
mov eax, ecx
and eax, edx
add eax, eax
sub ecx, eax
movzx eax, byte [ebp + esi - 0x3c]
add ecx, edx
mov word [ebp + eax*2 - 0x40], cx
mov al, byte [ebp - 0x3c]
add esi, 2
jmp 0x10027121
xor eax, eax
mov word [ebp - 0x3e], ax
mov dword [ebp - 0x38], 0x1814
cmp dword [ebp - 0x38], 0x1333
jge 0x100274b6
lea eax, [ebp - 0x8c]
push eax
lea eax, [ebp - 0x64]
push eax
push str._lld__lld
call fcn.1003e221
mov eax, dword [ebp - 0x64]
lea ecx, [ebp - 0x174]
add esp, 0xc
mov dword [ebp - 0x98], ebx
inc eax
mov dword [ebp - 0x94], ebx
xorps xmm0, xmm0
mov dword [ebp - 0x90], ebx
movlpd qword [ebp - 0x174], xmm0
push ecx
push eax
lea ecx, [ebp - 0x98]
call fcn.10027afc
mov byte [ebp - 4], 0x1d
lea ecx, [ebp - 0x98]
mov eax, dword [ebp - 0x8c]
push ecx
inc eax
mov dword [ebp - 0xa8], ebx
push eax
lea ecx, [ebp - 0xa8]
mov dword [ebp - 0xa4], ebx
mov dword [ebp - 0xa0], ebx
call fcn.10027b3e
mov byte [ebp - 4], 0x15
cmp dword [ebp - 0x98], 0
je 0x100272d7
push dword [ebp - 0x98]
call fcn.1003b0bd
pop ecx
mov dword [ebp - 0x98], ebx
mov dword [ebp - 0x94], ebx
mov dword [ebp - 0x90], ebx
mov edi, dword [ebp - 0x60]
xor ecx, ecx
mov edx, ebx
inc ecx
cmp edx, edi
jg 0x10027310
jge 0x10027307
mov eax, dword [ebp - 0xa8]
mov eax, dword [eax + 0xc]
mov dword [eax + ecx*8], 1
mov dword [eax + ecx*8 + 4], ebx
add ecx, 1
mov edi, dword [ebp - 0x60]
adc edx, ebx
cmp edx, edi
jl 0x100272e5
jg 0x10027310
mov esi, dword [ebp - 0x64]
cmp ecx, esi
jbe 0x100272e5
jmp 0x10027313
mov esi, dword [ebp - 0x64]
push 2
mov eax, ebx
pop ecx
mov dword [ebp - 0x34], ecx
mov dword [ebp - 0x20], eax
cmp eax, dword [ebp - 0x88]
jg 0x10027410
jge 0x10027404
xor eax, eax
mov edx, ebx
inc eax
mov dword [ebp - 0x30], edx
mov dword [ebp - 0x24], eax
cmp edx, edi
jg 0x100273e8
jl 0x1002734d
cmp eax, esi
ja 0x100273e8
mov dword [ebp - 0x28], eax
mov dword [ebp - 0x2c], edx
cmp edx, edi
jg 0x100273c8
jl 0x1002735d
cmp eax, esi
ja 0x100273c8
imul ecx, dword [ebp - 0x34], 0xc
mov dword [ebp - 0x1c], ecx
mov esi, dword [ebp - 0xa8]
mov edi, dword [ebp - 0x28]
push ebx
push 0x6f
mov edx, dword [ecx + esi]
mov ecx, dword [ecx + esi - 0xc]
mov eax, dword [ecx + eax*8]
add dword [edx + edi*8], eax
mov eax, dword [ebp - 0x24]
mov eax, dword [ecx + eax*8 + 4]
adc dword [edx + edi*8 + 4], eax
mov eax, dword [ebp - 0x1c]
mov esi, dword [eax + esi]
push dword [esi + edi*8 + 4]
push dword [esi + edi*8]
call fcn.10053360
mov ecx, dword [ebp - 0x2c]
mov dword [esi + edi*8], eax
mov eax, dword [ebp - 0x24]
mov dword [esi + edi*8 + 4], edx
add edi, eax
mov edx, dword [ebp - 0x30]
adc ecx, edx
mov dword [ebp - 0x28], edi
mov edi, dword [ebp - 0x60]
cmp ecx, edi
mov dword [ebp - 0x2c], ecx
mov ecx, dword [ebp - 0x1c]
jl 0x10027364
mov esi, dword [ebp - 0x64]
jg 0x100273c8
cmp dword [ebp - 0x28], esi
jbe 0x10027364
add eax, 1
mov dword [ebp - 0x24], eax
adc edx, ebx
mov dword [ebp - 0x30], edx
cmp edx, edi
jl 0x1002734d
jg 0x100273e5
cmp eax, esi
jbe 0x1002734d
mov ecx, dword [ebp - 0x34]
mov eax, dword [ebp - 0x20]
add ecx, 1
mov dword [ebp - 0x34], ecx
adc eax, ebx
mov dword [ebp - 0x20], eax
cmp eax, dword [ebp - 0x88]
jl 0x10027330
jg 0x10027410
cmp ecx, dword [ebp - 0x8c]
jbe 0x10027330
xor edx, edx
mov eax, ebx
inc edx
mov dword [ebp - 0x28], eax
mov dword [ebp - 0x24], edx
xorps xmm0, xmm0
movlpd qword [ebp - 0x84], xmm0
cmp eax, edi
jg 0x10027493
jl 0x10027430
cmp edx, esi
ja 0x10027493
imul eax, dword [ebp - 0x8c], 0xc
mov ecx, dword [ebp - 0xa8]
mov eax, dword [eax + ecx]
mov dword [ebp - 0x2c], eax
mov eax, dword [ebp - 0x80]
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x84]
jmp 0x10027454
mov eax, dword [ebp - 0x30]
mov ecx, dword [ebp - 0x2c]
push ebx
push 0x6f
mov ecx, dword [ecx + edx*8]
add ecx, eax
mov eax, dword [ebp - 0x2c]
mov eax, dword [eax + edx*8 + 4]
adc eax, dword [ebp - 0x1c]
push eax
push ecx
call fcn.10053360
mov ecx, eax
mov eax, edx
mov edx, dword [ebp - 0x24]
add edx, 1
mov dword [ebp - 0x30], ecx
mov dword [ebp - 0x1c], eax
adc dword [ebp - 0x28], ebx
mov dword [ebp - 0x24], edx
cmp dword [ebp - 0x28], edi
jl 0x10027451
jg 0x1002749c
cmp edx, esi
jbe 0x10027451
jmp 0x1002749c
mov eax, dword [ebp - 0x80]
mov ecx, dword [ebp - 0x84]
push eax
push ecx
push str._lld_n
call fcn.1003de4c
add esp, 0xc
lea ecx, [ebp - 0xa8]
call fcn.10027be0
mov dword [ebp - 0x20], 0x73ff82f
xor edx, edx
mov dword [ebp - 0x28], 0xfff8
inc edx
mov dword [ebp - 0x2c], 0xd621ec21
mov dword [ebp - 0x2c], 0x2a83a0f0
mov dword [ebp - 0x2c], 0xa8ccedb7
mov dword [ebp - 0x38], 0xffffffff
mov dword [ebp - 0x1c], ebx
jmp 0x100274f5
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0xac], edx
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], edx
jl 0x100274e8
mov ecx, ebx
cmp dword [ebp - 0x20], ebx
je 0x10027503
mov ecx, edx
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x28], eax
mov dword [ebp - 0x2c], ecx
mov ecx, dword [ebp - 0x2c]
sub ecx, dword [ebp - 0x20]
neg ecx
sbb ecx, ecx
inc ecx
mov dword [ebp - 0xac], ecx
mov eax, dword [ebp - 0x20]
add eax, ecx
lea ecx, [ebp - 0x18c]
mov dword [ebp - 0x2c], eax
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x2c], edx
mov eax, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x28]
mov dword [ebp - 0x38], eax
xor eax, eax
mov word [ebp - 0x18c], ax
lea eax, [ebp - 0x40]
push eax
mov dword [ebp - 0x178], 7
mov dword [ebp - 0x17c], ebx
call fcn.10020a6d
mov byte [ebp - 4], 0x1e
mov dword [ebp - 0x40], ebx
mov dword [ebp - 0x24], 0xf6af1124
mov dword [ebp - 0x34], 0x721
cmp dword [ebp - 0x34], 0x841
mov dword [ebp - 0x80], str.ybpis_vil_hfpw_uekrvwfk_zjosvm_wfv_gtjqv_retyscqs_rdxhgbtex_mrobjm_iunrpg_gasyiw_owuca_flkrn
jle 0x100275fd
mov edi, ebx
mov dword [ebp - 0x1c], ebx
mov esi, ebx
mov dword [ebp - 0x28], ebx
mov eax, esi
mov dword [ebp - 0x30], 0x1212
mov dword [ebp - 0x2c], eax
mov esi, edi
mov dword [ebp - 0x38], ebx
mov ecx, eax
mov edi, ebx
shl esi, cl
mov ecx, edi
mov eax, esi
shl eax, cl
mov ecx, 0x1006de98
cdq
push edx
push eax
call fcn.1000bb28
inc edi
cmp edi, 0x18ce
jl 0x100275b7
mov eax, dword [ebp - 0x2c]
mov edi, dword [ebp - 0x1c]
dec eax
dec dword [ebp - 0x30]
mov dword [ebp - 0x2c], eax
jne 0x100275ac
mov esi, dword [ebp - 0x28]
inc esi
mov dword [ebp - 0x28], esi
cmp esi, 0x358e
jl 0x100275a0
inc edi
mov dword [ebp - 0x1c], edi
cmp edi, 0x77a0
jl 0x1002759b
mov dword [ebp - 0x24], ebx
cmp dword [ebp - 0x24], 0x1a
je 0x1002777c
mov dword [ebp - 0x20], 1
mov dword [ebp - 0x1c], ebx
jmp 0x10027627
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0x15c], 0x72159124
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 2
jl 0x10027616
mov dword [ebp - 0x20], 0xfffffff5
cmp dword [ebp - 0x20], ebx
jg 0x10027711
mov dword [ebp - 0x28], ebx
mov dword [ebp - 0x30], 0x5a87
cmp dword [ebp - 0x30], 0x5e03
jle 0x100276a7
mov eax, ebx
mov dword [ebp - 0x1c], ebx
mov edi, ebx
mov esi, ebx
lea ecx, [esi + edi]
mov edx, ebx
sar eax, cl
mov dword [ebp - 0x2c], edx
mov dword [ebp - 0x38], eax
mov eax, edx
mov ecx, 0x1006de98
or eax, dword [ebp - 0x38]
cdq
push edx
push eax
call fcn.1000bb28
mov edx, dword [ebp - 0x2c]
inc edx
mov dword [ebp - 0x2c], edx
cmp edx, 0x66f0
jl 0x10027666
mov eax, dword [ebp - 0x1c]
inc esi
cmp esi, 0x386
jl 0x10027659
inc edi
cmp edi, 0x1d07
jl 0x10027657
inc eax
mov dword [ebp - 0x1c], eax
cmp eax, 0x121b
jl 0x10027655
mov byte [ebp - 0x15], bl
cmp byte [ebp - 0x15], 0
je 0x100276c5
push 0x21ab
push 0x1c87
push 0x10ea
call dword [sym.imp.USER32.dll_EnableScrollBar]
mov byte [ebp - 4], 0x1f
cmp dword [ebp - 0x30], 0x5730
jge 0x100276ff
mov edx, str.mmqycwfr_cxgc_nhrffiw_zcqfksy_otj
mov ecx, 0x1006de98
call fcn.100102b0
jmp 0x100276ff
mov dword [ebp - 4], 0x1e
dec dword [ebp - 0x28]
inc dword [ebp - 0x20]
jmp 0x10027634
mov dword [ebp - 0x20], ebx
jmp 0x1002776e
push 3
lea ecx, [ebp - 0x128]
call fcn.10001b7c
mov dword [ebp - 0x1c], ebx
jmp 0x1002773b
mov ecx, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x128]
mov dword [eax + ecx*4], 1
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 3
jl 0x10027728
mov byte [ebp - 0x15], bl
cmp byte [ebp - 0x15], 0
je 0x10027751
push ebx
call dword [sym.imp.KERNEL32.dll_GlobalMemoryStatus]
mov ecx, dword [ebp - 0x158]
mov eax, dword [ebp - 0x128]
mov dword [eax + 8], ecx
lea ecx, [ebp - 0x128]
call fcn.10001bd9
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], 0x1b
jle 0x10027716
inc dword [ebp - 0x24]
jmp 0x10027600
mov byte [ebp - 4], 0x21
cmp dword [ebp - 0x34], 0x66b
jge 0x100277b4
mov edx, dword [ebp - 0x80]
mov ecx, 0x1006de98
call fcn.100102b0
jmp 0x100277b4
mov dword [ebp - 4], 0x1e
push dword [ebp - 0xe4]
cmp dword [ebp - 0xe0], 8
lea eax, [ebp - 0xf4]
push ebx
cmovae eax, dword [ebp - 0xf4]
lea ecx, [ebp - 0x1c0]
push eax
call fcn.100258a1
cmp eax, 0xffffffff
je 0x10027801
push 0xffffffffffffffff
push ebx
lea ecx, [ebp - 0x18c]
push ecx
push 1
push eax
lea ecx, [ebp - 0x1c0]
call fcn.10010ea5
jmp 0x100277bb
mov ecx, dword [ebp - 0x9c]
lea eax, [ebp - 0x1c0]
push eax
lea edx, [ebp - 0x1a8]
call fcn.10027c8b
pop ecx
push ebx
push 1
lea ecx, [ebp - 0x18c]
call fcn.1000c8be
push ebx
push 1
lea ecx, [ebp - 0xf4]
call fcn.1000c8be
push ebx
push 1
lea ecx, [ebp - 0x1c0]
call fcn.1000c8be
push ebx
push 1
lea ecx, [ebp - 0x1a8]
call fcn.1000c8be
mov ecx, dword [ebp - 0xc]
mov eax, dword [ebp - 0x9c]
pop edi
pop esi
mov dword fs:[0], ecx
pop ebx
mov esp, ebp
pop ebp
ret