Function at 0x100268d3
Capabilities:
Query environment variable
Set registry value

Disassembly:
mov eax, 0x1005c977
call fcn.1005bac8
sub esp, 0x568
push ebx
push esi
push edi
mov dword [ebp - 0x10], esp
lea eax, [ebp - 0x1d0]
push eax
lea eax, [ebp - 0x268]
mov dword [ebp - 0x268], 0xfffffff9
push eax
lea eax, [ebp - 0x270]
mov dword [ebp - 0x270], 0xfffffff6
push eax
push 0x1bf4
xor eax, eax
lea ecx, [ebp - 0x1fc]
inc eax
lea edx, [ebp - 0x224]
push eax
push 0xeb2
push ecx
lea ecx, [ebp - 0x254]
or edi, 0xffffffff
mov dword [ebp - 0x1fc], edi
xor ebx, ebx
push ecx
mov dword [ebp - 0x26c], 0xfe662db8
lea ecx, [ebp - 0x26c]
mov dword [ebp - 0x224], 9
push ebx
mov dword [ebp - 0x254], 0x493e623b
mov dword [ebp - 0x1d0], 0xb5d1cb6a
push eax
call fcn.10023eeb
lea eax, [ebp - 0x8b]
mov byte [ebp - 0x8b], bl
push 0x5903
push eax
mov dl, 1
call fcn.10023783
mov dword [ebp - 0x4c], 0x7478144a
xor ecx, ecx
add esp, 0x30
mov dword [ebp - 0x38], 0x5f0ed1ad
mov dword [ebp - 0x18], ebx
inc ecx
jmp 0x100269b7
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x22c], 0xdf75
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], ecx
jl 0x100269a6
mov dword [ebp - 0x40], 0x47d
cmp dword [ebp - 0x40], 0x5bc
jle 0x10026a38
mov esi, ebx
mov dword [ebp - 0x54], ebx
mov edi, ebx
mov dword [ebp - 0x4c], esi
mov dword [ebp - 0x3c], 0x2683
mov eax, esi
lea ecx, [ebp - 0x45c]
cdq
push edx
push eax
call fcn.10001a65
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x100269f7
mov eax, dword [eax]
push eax
call fcn.10043bf4
pop ecx
push ebx
push 1
lea ecx, [ebp - 0x45c]
call fcn.100020a8
add esi, edi
dec dword [ebp - 0x3c]
jne 0x100269dd
mov esi, dword [ebp - 0x54]
dec edi
cmp edi, 0xffffd005
jg 0x100269d3
inc esi
mov dword [ebp - 0x54], esi
cmp esi, 0x296d
jl 0x100269d1
push ebx
call dword [sym.imp.KERNEL32.dll_GetLocalTime]
xor ecx, ecx
inc ecx
or edi, 0xffffffff
push 3
mov dword [ebp - 0x18], ebx
pop esi
cmp dword [ebp - 0x18], ecx
jge 0x10026a52
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0xdc], esi
inc dword [ebp - 0x18]
jmp 0x10026a3e
cmp dword [ebp - 0x40], 0x369
jge 0x10026a66
push str.mwdqycz_xbxpty_ferselcks_cbgvfuwa_yzcq_vyjkmqbn_ufsrytq_oihqsg_yyv_rwdoktq_ylupxaxzu_wrytnx_iulejmcl
call fcn.10043bf4
pop ecx
mov dword [ebp - 4], edi
mov dword [ebp - 0xdc], ebx
cmp dword [ebp - 0xdc], ebx
jl 0x10026aa9
mov eax, dword [ebp - 0xdc]
xor ecx, ecx
mov edx, 0x3b38
mov eax, dword [ebp + eax*4 - 0x22c]
cmp eax, 0x1d832937
sete cl
push ecx
push ecx
mov dword [ebp - 0x4c], ecx
push ebx
call fcn.10026799
add esp, 0xc
dec dword [ebp - 0xdc]
jns 0x10026a77
mov eax, dword [0x1027fe30]
xor ecx, ecx
inc ecx
test cl, al
jne 0x10026aea
or eax, ecx
mov dword [0x1027fe30], eax
mov dword [ebp - 4], 2
mov dword [0x1027fe38], ebx
mov dword [0x1027fe3c], ebx
call fcn.1002b855
push 0x1005d07a
mov dword [0x1027fe38], eax
call fcn.10043bca
pop ecx
xor ecx, ecx
mov dword [ebp - 4], edi
inc ecx
mov dword [ebp - 0x20], 0x7d8e
mov dword [ebp - 0x44], ebx
mov dword [ebp - 0x3c], 7
mov dword [ebp - 0x18], ebx
jmp 0x10026b0d
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x1d4], edi
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], ecx
jl 0x10026b00
mov dword [ebp - 0x4c], 0x2249
cmp dword [ebp - 0x4c], 0xdb2
jge 0x10026d5f
lea eax, [ebp - 0x188]
push eax
lea eax, [ebp - 0x74]
push eax
lea eax, [ebp - 0x208]
push eax
lea eax, [ebp - 0xe4]
push eax
push str._ld__ld__ld__ld_n
call fcn.10043eb2
add esp, 0x14
mov dword [ebp - 0xec], ebx
mov dword [ebp - 0xe8], ebx
call fcn.1002b880
mov dword [ebp - 0xec], eax
mov dword [ebp - 4], esi
mov dl, bl
mov eax, dword [ebp - 0xe4]
mov ecx, dword [ebp - 0x138]
mov byte [ebp - 0x30], bl
mov dword [ebp - 0x48], edx
mov byte [ebp - 0x31], bl
test eax, eax
je 0x10026cf8
mov dword [ebp - 0x1c], ecx
dec eax
mov dword [ebp - 0xe4], eax
lea eax, [ebp - 0x170]
push eax
push 0x100666a4
call fcn.10043eb2
movzx eax, byte [0x1027e97a]
pop ecx
pop ecx
push eax
lea eax, [ebp - 0x170]
push eax
push ecx
lea eax, [ebp - 0x420]
push eax
lea ecx, [ebp - 0xec]
call fcn.1002b8be
mov esi, dword [ebp - 0x170]
mov ecx, dword [ebp - 0x74]
cmp ecx, esi
jg 0x10026bfe
mov eax, esi
sub eax, ecx
lea ecx, [ebp - 0xec]
mov dword [ebp - 0x25c], eax
lea eax, [ebp - 0x25c]
push eax
call fcn.1002b0d6
mov ecx, dword [ebp - 0x30]
test eax, eax
push 1
movzx ecx, cl
pop eax
cmovne ecx, eax
mov dword [ebp - 0x30], ecx
mov edi, dword [ebp - 0x188]
cmp edi, esi
jg 0x10026c35
mov eax, esi
lea ecx, [ebp - 0xec]
sub eax, edi
mov dword [ebp - 0x1f4], eax
lea eax, [ebp - 0x1f4]
push eax
call fcn.1002b0d6
mov ecx, dword [ebp - 0x48]
test eax, eax
push 1
movzx ecx, cl
pop eax
cmovne ecx, eax
mov dword [ebp - 0x48], ecx
mov ecx, dword [ebp - 0x74]
lea eax, [ecx + edi]
cmp eax, esi
jg 0x10026c6f
mov eax, esi
sub eax, ecx
lea ecx, [ebp - 0xec]
sub eax, edi
mov dword [ebp - 0x1f8], eax
lea eax, [ebp - 0x1f8]
push eax
call fcn.1002b0d6
mov ecx, dword [ebp - 0x74]
test eax, eax
je 0x10026c6f
mov eax, esi
mov byte [ebp - 0x31], 1
sub eax, edi
mov dword [ebp - 0x1c], eax
cmp edi, esi
jg 0x10026ca2
mov eax, esi
sub eax, edi
mov dword [ebp - 0x4c], eax
add eax, ecx
mov dword [ebp - 0x200], eax
lea ecx, [ebp - 0xec]
lea eax, [ebp - 0x200]
push eax
call fcn.1002b0d6
test eax, eax
je 0x10026ca2
mov ecx, dword [ebp - 0x4c]
mov byte [ebp - 0x31], 1
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x74]
lea ecx, [esi + eax]
mov dword [ebp - 0x4c], ecx
cmp ecx, dword [ebp - 0x208]
jg 0x10026cdf
sub esi, edi
lea ecx, [ebp - 0xec]
add esi, eax
lea eax, [ebp - 0x138]
push eax
mov dword [ebp - 0x138], esi
call fcn.1002b0d6
test eax, eax
je 0x10026cdf
mov ecx, dword [ebp - 0x4c]
mov byte [ebp - 0x31], 1
mov dword [ebp - 0x1c], ecx
jmp 0x10026ce2
mov ecx, dword [ebp - 0x1c]
mov eax, dword [ebp - 0xe4]
test eax, eax
jne 0x10026b88
mov edx, dword [ebp - 0x48]
push 3
pop esi
jmp 0x10026cfe
mov edi, dword [ebp - 0x188]
dec eax
cmp byte [ebp - 0x30], 0
mov dword [ebp - 0xe4], eax
je 0x10026d1e
test dl, dl
je 0x10026d1b
push 0x100681b4
call fcn.10043f6d
jmp 0x10026d39
push edi
jmp 0x10026d2e
test dl, dl
je 0x10026d27
mov ecx, dword [ebp - 0x74]
jmp 0x10026d2d
cmp byte [ebp - 0x31], 0
je 0x10026d3c
push ecx
push str.1_n_ld_n
call fcn.10043bf4
pop ecx
pop ecx
jmp 0x10026d4e
mov ecx, dword [ebp - 0x74]
push edi
push ecx
push str.2_n_ld__ld_n
call fcn.10043bf4
add esp, 0xc
or edi, 0xffffffff
lea ecx, [ebp - 0xec]
mov dword [ebp - 4], edi
call fcn.1002afc4
mov dword [ebp - 0x18], ebx
jmp 0x10026d75
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x3f8], 4
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], esi
jl 0x10026d64
mov eax, dword [ebp - 0x20]
inc dword [ebp - 0x3c]
mov edx, dword [ebp - 0x44]
add edx, dword [ebp - 0x20]
mov eax, dword [ebp - 0x1d4]
mov ecx, dword [ebp - 0x20]
sub eax, 0xccde
sub edx, eax
neg edx
sbb edx, edx
inc edx
sub ecx, edx
sub ecx, dword [ebp - 0x20]
neg ecx
sbb ecx, ecx
xor eax, eax
inc ecx
cmp ecx, 0xb0bf
setge al
cmp byte [0x1027e994], 0
mov dword [ebp - 0x3f0], eax
jne 0x1002aa4e
mov dword [ebp - 0x20], 0x2667a876
mov dword [ebp - 0x4c], 0xfffffffc
mov dword [ebp - 0x1c], ebx
jmp 0x10026de7
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0x410], 0xfdf99ff6
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], esi
jl 0x10026dd6
mov dword [ebp - 0x20], ebx
cmp dword [ebp - 0x20], 2
jg 0x10026ed8
mov dword [ebp - 0x44], 0x3292c5eb
mov byte [ebp - 0x31], bl
cmp byte [ebp - 0x31], 0
je 0x10026ebf
mov dword [ebp - 0x40], 0x5ac0
cmp dword [ebp - 0x40], 0x5b5a
jle 0x10026e8f
push ebx
push 0x11ab
push 0x98a
push ebx
call dword [sym.imp.KERNEL32.dll_VirtualProtect]
mov edi, ebx
mov esi, ebx
mov dword [ebp - 0x54], ebx
mov dword [ebp - 0x4c], esi
mov dword [ebp - 0x3c], 0x26a
mov eax, esi
lea ecx, [ebp - 0x474]
or eax, edi
cdq
push edx
push eax
call fcn.10001a65
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x10026e5c
mov eax, dword [eax]
push eax
call fcn.10043bf4
pop ecx
push ebx
push 1
lea ecx, [ebp - 0x474]
call fcn.100020a8
dec esi
dec dword [ebp - 0x3c]
jne 0x10026e40
mov esi, dword [ebp - 0x54]
inc esi
mov dword [ebp - 0x54], esi
cmp esi, 0x4ed8
jl 0x10026e36
inc edi
cmp edi, 0x572a
jl 0x10026e31
push 0x4c18
push ebx
push ebx
mov dl, 1
mov ecx, 0x14a6
call fcn.10024908
add esp, 0xc
cmp dword [ebp - 0x40], 0x575e
jge 0x10026eb9
push str.gzywizdzg_bakr_pfjb_sdksqgwhu_hvaq_ivizdov_gqjnn_wxtsygv_pasuh
call fcn.10043bf4
pop ecx
or edi, 0xffffffff
mov dword [ebp - 4], edi
mov eax, dword [ebp - 0x44]
mov eax, dword [ebp - 0x40c]
neg eax
sbb eax, eax
inc eax
mov dword [ebp - 0x4c], eax
inc dword [ebp - 0x20]
jmp 0x10026def
push ebx
push 0x1027e994
push 0x1b6d
push ecx
call fcn.10026487
mov dword [ebp - 0x48], 0x1ba0
add esp, 0x10
mov dword [ebp - 0x28], edi
mov dword [ebp - 0x24], 0xdfb1af9d
mov dword [ebp - 0x20], 0xfff6
mov dword [ebp - 0x18], 0xfffffffa
push 3
mov dword [ebp - 0x30], 0x60abed99
mov dword [ebp - 0x1c], ebx
pop esi
jmp 0x10026f2b
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0x180], 0x72b90f99
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], esi
jl 0x10026f1a
mov eax, dword [ebp - 0x48]
xor edx, edx
mov eax, dword [ebp - 0x48]
mov eax, dword [ebp - 0x178]
cmp eax, 0xbbbd
mov eax, dword [ebp - 0x17c]
setne dl
xor ecx, ecx
cmp edx, eax
setle cl
imul eax, ecx, 0xfffffffc
cmp eax, 0x6173
jle 0x10026f63
mov eax, dword [ebp - 0x178]
mov eax, dword [ebp - 0x180]
xor edx, edx
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x48]
mov eax, dword [ebp - 0x24]
sub eax, dword [ebp - 0x24]
add eax, dword [ebp - 0x28]
mov dword [ebp - 0x20], eax
mov dword [ebp - 0x18], 1
mov eax, dword [ebp - 0x178]
imul ecx, eax, 0xfffffffa
mov eax, dword [ebp - 0x28]
cmp ecx, eax
sete dl
mov dword [ebp - 0x30], edx
mov eax, dword [ebp - 0x178]
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x24]
mov dword [ebp - 0x18], eax
mov ecx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x178]
dec eax
add eax, ecx
jne 0x10026fe0
cmp dword [ebp - 0x28], ebx
jne 0x10026fe0
mov dword [ebp - 0x3c], 6
mov dword [ebp - 0x24], ebx
jmp 0x10026fd5
mov eax, dword [ebp - 0x24]
cmp dword [ebp + eax*4 - 0x180], ebx
jne 0x10026fdb
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], 2
jle 0x10026fc6
inc dword [ebp - 0x3c]
jmp 0x10027057
mov dword [ebp - 0x3c], 0x9b924e19
mov dword [ebp - 0x4c], 0xc2cfccff
mov dword [ebp - 0x1c], ebx
jmp 0x10027000
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0x1c0], esi
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 2
jl 0x10026ff3
mov eax, dword [ebp - 0x20]
sub eax, dword [ebp - 0x20]
neg eax
sbb eax, eax
inc eax
mov dword [ebp - 0x3c], eax
mov eax, dword [ebp - 0x3c]
cmp eax, dword [ebp - 0x18]
jge 0x10027024
cmp dword [ebp - 0x1bc], ebx
je 0x10027027
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0x1bc]
xor ecx, ecx
mov eax, dword [ebp - 0x1bc]
test eax, eax
sets cl
cmp ecx, dword [ebp - 0x1bc]
jge 0x10027045
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x30]
neg eax
sbb eax, eax
neg eax
mov dword [ebp - 0x30], eax
mov eax, dword [ebp - 0x30]
mov dword [ebp - 0x4c], eax
push 0xc
pop ecx
mov esi, 0x100735f0
mov dword [ebp - 0x120], ebx
push 0xa
mov dword [ebp - 0x50], esi
pop edx
mov dword [ebp - 0x140], ecx
cmp ecx, 0xe0
jge 0x100274cb
mov dword [ebp - 0x18], 0x8c44
mov dword [ebp - 0x28], 0xfffffffa
mov eax, dword [ebp - 0x18]
cmp dword [ebp - 0x18], ebx
jne 0x10027097
mov ecx, ebx
jmp 0x1002709a
xor ecx, ecx
inc ecx
mov eax, dword [ebp - 0x18]
imul eax, dword [ebp - 0x18]
push 7
imul eax, ecx
pop ecx
imul eax, eax, 0x44d5
sub eax, dword [ebp - 0x18]
cmp ecx, eax
sbb eax, eax
xor ecx, ecx
neg eax
mov dword [ebp - 0x28], eax
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x28]
cmp eax, 0x6316
setl cl
cmp ecx, dword [ebp - 0x18]
jl 0x100270ec
push 0x4a9a
sub esp, 0x10
push ebx
push ecx
push ecx
call fcn.10023755
add esp, 0x20
push 0xa
pop edx
jmp 0x100271a9
mov dword [ebp - 0x230], 0xc02a
mov dword [ebp - 0x28], 0x18
jmp 0x100271a0
mov dword [ebp - 0x18], ebx
jmp 0x10027194
mov dword [ebp - 0x24], 0xae2fe817
mov dword [ebp - 0x24], 0xffffffea
cmp dword [ebp - 0x24], 0xb
je 0x1002718b
lea eax, [ebp - 0x91]
mov dword [ebp - 0x258], 2
push eax
push 0x3b80
push 1
push 1
mov byte [ebp - 0x91], bl
mov edx, 0x24bf
push 1
mov ecx, 0x7121
call fcn.10023919
add esp, 0x14
lea eax, [ebp - 0x230]
mov edx, 0x56f7
push 0x545d
push eax
push 0x3f57
push 0x4698
push ecx
lea eax, [ebp - 0x258]
mov cl, 1
push eax
call fcn.10023ab1
add esp, 0x18
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], 0xb
jne 0x1002711e
push 0xa
pop edx
mov eax, dword [ebp - 0x24]
mov dword [ebp - 0x24], eax
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], edx
je 0x1002710a
dec dword [ebp - 0x28]
cmp dword [ebp - 0x28], edi
jl 0x10027102
mov ecx, dword [ebp - 0x140]
mov al, byte [esi]
cmp al, byte [ecx + 0x100735f0]
je 0x100271bf
inc ecx
jmp 0x1002706b
mov dword [ebp - 0x24], 0xcea5d6c0
xor ecx, ecx
inc ecx
mov dword [ebp - 0x38], ecx
mov dword [ebp - 0x260], 0x4ab653b1
push 2
pop edx
mov dword [ebp - 0x38], edx
mov dword [ebp - 0x38], 0x67120dd9
mov dword [ebp - 0x38], 0xed1d25bb
mov dword [ebp - 0x48], 0x966ef3b0
mov dword [ebp - 0x3c], ecx
mov dword [ebp - 0x1c], ebx
jmp 0x1002720a
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0x3ac], 7
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], edx
jl 0x100271f9
mov dword [ebp - 0x24], 0x1d
jmp 0x1002729c
mov dword [ebp - 0x4c], edx
mov dword [ebp - 0x1c], ebx
jmp 0x10027230
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0xb4], ecx
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], ecx
jl 0x10027223
mov eax, dword [ebp - 0xb4]
cmp dword [ebp - 0xb4], ebx
jne 0x10027249
mov eax, dword [ebp - 0xb4]
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0xb4]
mov dword [ebp - 0x3a8], eax
mov edx, dword [ebp - 0xb4]
mov eax, dword [ebp - 0x24]
neg edx
push 1
sbb edx, edx
xor ecx, ecx
inc edx
cmp edx, eax
setne cl
xor edx, edx
imul eax, ecx, 0xa3d7
mov dword [ebp - 0xb4], ecx
cmp eax, edi
mov eax, dword [ebp - 0x24]
setne dl
xor ecx, ecx
cmp edx, eax
setne cl
mov dword [ebp - 0x4c], ecx
dec dword [ebp - 0x24]
pop ecx
push 2
pop edx
cmp dword [ebp - 0x24], ebx
jle 0x1002721b
mov dword [ebp - 0x54], 0x6824
cmp dword [ebp - 0x54], 0x69be
jle 0x10027313
mov eax, ebx
mov dword [ebp - 0x30], ebx
mov edi, ebx
mov esi, ebx
lea ecx, [esi + edi]
shl eax, cl
lea ecx, [ebp - 0x498]
cdq
push edx
push eax
call fcn.10001a65
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x100272db
mov eax, dword [eax]
push eax
call fcn.10043bf4
pop ecx
push ebx
push 1
lea ecx, [ebp - 0x498]
call fcn.100020a8
mov eax, dword [ebp - 0x30]
inc esi
cmp esi, 0x24d5
jl 0x100272be
inc edi
cmp edi, 0x1089
jl 0x100272bc
inc eax
mov dword [ebp - 0x30], eax
cmp eax, 0x487f
jl 0x100272ba
or edi, 0xffffffff
dec dword [ebp - 0x48]
mov edx, dword [ebp - 0x3c]
mov eax, dword [ebp - 0x48]
neg edx
sbb edx, edx
xor ecx, ecx
inc edx
cmp eax, edx
setle cl
sub ecx, dword [ebp - 0x3c]
je 0x1002734d
mov byte [ebp - 0x31], bl
cmp byte [ebp - 0x31], 0
je 0x1002739f
push 0x16b7
push ecx
push 0x53d6
mov dl, 1
call fcn.1002454b
add esp, 0xc
jmp 0x1002739f
mov dword [ebp - 0x28], ebx
mov dword [ebp - 0x1c], ebx
jmp 0x10027366
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0x4ec], 0x4549c4b0
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 3
jl 0x10027355
dec dword [ebp - 0x28]
mov dword [ebp - 0x28], ebx
jmp 0x10027399
lea eax, [ebp - 0x260]
mov dword [ebp - 0x38], 0xd535dd25
push eax
xor eax, eax
mov ecx, 0x377e
inc eax
push eax
push ebx
mov dl, al
call fcn.10024908
add esp, 0xc
inc dword [ebp - 0x28]
cmp dword [ebp - 0x28], 0x1e
jg 0x10027374
cmp dword [ebp - 0x54], 0x66fa
jge 0x100273b3
push str.jyy_ppg_zjuxlcwz
call fcn.10043bf4
pop ecx
push 0x7707
lea eax, [ebp - 0x140]
mov dword [ebp - 4], edi
push eax
push ebx
push 1
push ebx
mov edx, 0x4500
lea ecx, [ebp - 0x120]
call fcn.10023919
mov dword [ebp - 0x18], 9
add esp, 0x14
mov dword [ebp - 0x1c], ebx
jmp 0x100273f6
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0x284], 0xc64a6847
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 4
jl 0x100273e5
mov dword [ebp - 0x18], ebx
jmp 0x10027418
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp + eax*4 - 0x284]
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x284], ecx
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 3
jle 0x10027401
mov dword [ebp - 0x18], 3
cmp dword [ebp - 0x18], ebx
jl 0x100274cb
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp + eax*4 - 0x284]
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x284], ecx
mov dword [ebp - 0x3c], 0x6001
cmp dword [ebp - 0x3c], 0x630a
jle 0x1002749c
mov edi, ebx
mov esi, ebx
mov eax, esi
lea ecx, [ebp - 0x4bc]
or eax, edi
cdq
push edx
push eax
call fcn.10001a65
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x10027472
mov eax, dword [eax]
push eax
call fcn.10043bf4
pop ecx
push ebx
push 1
lea ecx, [ebp - 0x4bc]
call fcn.100020a8
inc esi
cmp esi, 0x39ea
jl 0x10027456
inc edi
cmp edi, 0x3f31
jl 0x10027454
or edi, 0xffffffff
mov ecx, dword [ebp - 0x280]
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x284], ecx
cmp dword [ebp - 0x3c], 0x5ebc
jge 0x100274c0
push str.evgnfr_qtioyr_ype_xbvbtslv_dhazjt_ufhzonww_hpokkpjq
call fcn.10043bf4
pop ecx
mov dword [ebp - 4], edi
dec dword [ebp - 0x18]
jmp 0x10027425
xor eax, eax
mov dword [ebp - 0x20], str.Y_vT_
inc eax
push eax
push 0x5a29
push 0x5a46
push 0x15d1
push 0x6833
mov dl, al
mov cl, al
call fcn.10023cf7
mov al, byte [str.Y_vT_]
xor edx, edx
mov byte [ebp - 0x114], al
add esp, 0x14
mov dword [ebp - 0x28], 0xf6af1124
inc edx
mov dword [ebp - 0x18], edx
mov dword [ebp - 0x30], 0xec93
mov dword [ebp - 0x28], 0xffffffee
cmp dword [ebp - 0x28], 0xffffffe7
jge 0x100277de
mov dword [ebp - 0x1c], 0xfffffff6
mov ecx, edi
mov dword [ebp - 0x24], edi
mov dword [ebp - 0x40], ebx
mov dword [ebp - 0x1b0], edx
mov dword [ebp - 0x1ac], edx
mov dword [ebp - 0x1a8], edx
mov dword [ebp - 0x1a4], edx
mov dword [ebp - 0x2c], edx
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x18]
cmp dword [ebp - 0x1c], ebx
mov eax, edx
mov dword [ebp - 0x24], eax
mov eax, dword [ebp - 0x24]
sub ecx, eax
add ecx, dword [ebp - 0x18]
cmp ecx, 0x238e
jg 0x10027575
mov ecx, edx
cmp dword [ebp - 0x30], ebx
jne 0x10027577
mov ecx, ebx
mov eax, dword [ebp - 0x30]
xor edx, edx
sub ecx, eax
sub ecx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x1c]
cmp ecx, eax
mov eax, dword [ebp - 0x1c]
setl dl
xor ecx, ecx
cmp edx, eax
setg cl
add ecx, 6
cmp ecx, 0xe8ce6fc2
jae 0x1002761a
mov dword [ebp - 0x48], ebx
xor ebx, ebx
mov ecx, dword [ebp - 0x48]
imul ecx, dword [ebp - 0x24]
mov eax, dword [ebp - 0x40]
cmp eax, ecx
setne bl
sub ebx, dword [ebp - 0x48]
mov eax, dword [ebp - 0x18]
neg ebx
sbb ebx, ebx
xor edx, edx
inc ebx
cmp ebx, 9
setle dl
xor ecx, ecx
cmp edx, eax
setne cl
add ecx, dword [ebp - 0x1c]
imul eax, ecx, 0x7cc7
cmp dword [ebp - 0x24], eax
jg 0x100275dd
mov eax, dword [ebp - 0x40]
mov eax, dword [ebp - 0x48]
mov edx, 0xfcc013ce
mov dword [ebp - 0x24], eax
mov ecx, dword [ebp - 0x28]
mov eax, dword [ebp - 0x30]
add ecx, 0xa
neg ecx
sbb ecx, ecx
neg ecx
cmp edx, eax
sbb eax, eax
xor ebx, ebx
neg eax
cmp eax, ecx
je 0x1002760f
cmp dword [ebp - 0x1b0], ebx
je 0x1002760f
mov eax, ebx
jmp 0x10027612
xor eax, eax
inc eax
mov dword [ebp - 0x2c], eax
jmp 0x100277c1
mov dword [ebp - 0x44], 0xfffa
mov dword [ebp - 0x4c], 4
mov dword [ebp - 0x24], 0x496d
cmp dword [ebp - 0x24], 0x4a34
jle 0x10027680
mov dword [ebp - 0x48], ebx
mov edi, ebx
mov dword [ebp - 0x54], 0x6bab
mov dword [ebp - 0x3c], edi
mov esi, edi
mov edi, 0x5fea
mov eax, esi
mov ecx, 0x10076b78
cdq
push edx
push eax
call fcn.10001c56
inc esi
dec edi
jne 0x1002764e
mov edi, dword [ebp - 0x3c]
mov esi, dword [ebp - 0x48]
add edi, esi
dec dword [ebp - 0x54]
mov dword [ebp - 0x3c], edi
jne 0x10027647
inc esi
mov dword [ebp - 0x48], esi
cmp esi, 0x60b8
jl 0x1002763b
or edi, 0xffffffff
mov dword [ebp - 0x18], 3
cmp dword [ebp - 0x18], ebx
jl 0x1002777e
mov dword [ebp - 0x4c], edi
mov byte [ebp - 0x31], bl
cmp byte [ebp - 0x31], 0
je 0x100276d7
push 0x36af
push 0x29c8
push 0x2892
push 0x6bc7
xor eax, eax
mov edx, 0x38b2
inc eax
mov ecx, 0x575c
push eax
push 0x645
push 0x6c16
push 0x7180
push eax
push eax
call fcn.10023eeb
add esp, 0x28
mov eax, dword [ebp - 0x2c]
cmp eax, dword [ebp - 0x40]
jle 0x100276e9
cmp dword [ebp - 0x1c], ebx
je 0x100276e9
xor eax, eax
inc eax
jmp 0x100276eb
mov eax, ebx
mov dword [ebp - 0x4c], eax
cmp dword [ebp - 0x1a8], ebx
jne 0x100276fe
cmp dword [ebp - 0x1b0], ebx
je 0x10027701
xor ebx, ebx
inc ebx
mov eax, dword [ebp - 0x18]
xor edx, edx
push 0
mov eax, dword [ebp + eax*4 - 0x1b0]
cmp eax, ebx
mov eax, dword [ebp - 0x18]
setne dl
add edx, 0x7b47864
sub edx, dword [ebp + eax*4 - 0x1b0]
mov eax, dword [ebp - 0x18]
neg edx
sbb edx, edx
xor ecx, ecx
inc edx
mov eax, dword [ebp + eax*4 - 0x1b0]
cmp edx, eax
mov eax, dword [ebp - 0x44]
setne cl
xor ebx, ebx
cmp eax, ecx
mov eax, dword [ebp - 0x18]
setg bl
xor edx, edx
mov eax, dword [ebp + eax*4 - 0x1b0]
test eax, eax
mov eax, dword [ebp - 0x18]
sete dl
xor ecx, ecx
cmp edx, eax
setl cl
xor edx, edx
cmp ecx, ebx
pop ebx
setge dl
xor eax, eax
cmp edx, 0x7dff
setg al
mov dword [ebp - 0x4c], eax
dec dword [ebp - 0x18]
jns 0x10027690
mov dword [ebp - 4], 0xa
cmp dword [ebp - 0x24], 0x47e8
jge 0x100277be
mov edx, str.kzq_pzirqpj_yyjplrtjc_zivzakwm_yundoa_rbc_vtnxvdda_noqf_zlkzua_ydvkiyhyc_dwityl_gawjfrci_sxhnxoim_iyu
mov ecx, 0x10076b78
call fcn.10003a53
jmp 0x100277be
mov dword [ebp - 4], edi
mov byte [ebp - 0x31], bl
cmp byte [ebp - 0x31], 0
je 0x100277d3
push ecx
xor dl, dl
call fcn.1002617f
pop ecx
dec dword [ebp - 0x28]
xor edx, edx
inc edx
jmp 0x1002751c
mov eax, dword [ebp - 0x50]
mov esi, dword [ebp - 0x20]
mov dl, byte [eax]
mov cl, byte [esi]
call fcn.1002b8ab
mov byte [esi], al
mov dword [ebp - 0x58], edi
mov dword [ebp - 0x3c], 0x4abc
cmp dword [ebp - 0x3c], 0x4d1b
jle 0x10027842
mov edi, ebx
mov esi, ebx
mov eax, ebx
mov dword [ebp - 0x2c], ebx
lea ecx, [eax + esi]
mov eax, edi
shl eax, cl
mov ecx, 0x10076b78
cdq
push edx
push eax
call fcn.10001c56
mov eax, dword [ebp - 0x2c]
inc eax
mov dword [ebp - 0x2c], eax
cmp eax, 0x179b
jl 0x1002780b
inc esi
cmp esi, 0x1dc7
jl 0x10027806
inc edi
cmp edi, 0x6f89
jl 0x10027804
or edi, 0xffffffff
mov dword [ebp - 4], 0xc
cmp dword [ebp - 0x3c], 0x48b3
jge 0x10027861
mov edx, str.pedqxkg_bcrzif_ordqlbqtu_whvr_epya_xlfhwbi_wtjqk_itoebcn_ygy_dqzqqrqum
mov ecx, 0x10076b78
call fcn.10003a53
xor ecx, ecx
inc ecx
mov dword [ebp - 4], edi
mov dword [ebp - 0x2c], ebx
mov dword [ebp - 0x1c], ebx
jmp 0x100278a4
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0x108], 0xde0b4074
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 2
jl 0x10027893
push 0xee6
push 0x57
push 0x28f4
lea eax, [ebp - 0x58]
mov edx, 0x24f9
push eax
push ecx
push ebx
push ebx
mov ecx, 0x57ea
call fcn.1002355d
xor ecx, ecx
mov dword [ebp - 0x58], ebx
inc ecx
add esp, 0x1c
cmp dword [ebp - 0x58], ecx
jg 0x100279fa
xor ecx, ecx
mov dword [ebp - 0x28], 3
mov eax, dword [ebp - 0x58]
push 0xfffffffffffffff7
mov edx, dword [ebp + eax*4 - 0x108]
mov eax, dword [ebp - 0x58]
mov eax, dword [ebp + eax*4 - 0x108]
cmp edx, eax
setge cl
xor edx, edx
mov dword [ebp - 0x28], ecx
mov ecx, dword [ebp - 0x28]
mov eax, dword [ebp - 0x58]
cmp eax, ecx
setle dl
mov dword [ebp - 0x2c], edx
cmp dword [ebp - 0x2c], 0xfff8
sbb eax, eax
xor ecx, ecx
inc eax
cmp eax, 0x197e7c14
mov eax, dword [ebp - 0x28]
setge cl
xor edx, edx
cmp ecx, eax
mov eax, dword [ebp - 0x104]
setg dl
xor ebx, ebx
neg edx
cmp edx, 0x3b0639e6
setle bl
xor ecx, ecx
cmp eax, ebx
mov eax, dword [ebp - 0x58]
setg cl
xor edx, edx
cmp ecx, 0x137d
mov eax, dword [ebp + eax*4 - 0x108]
setne dl
xor ecx, ecx
cmp edx, eax
mov eax, dword [ebp - 0x104]
setg cl
xor edx, edx
cmp ecx, eax
mov eax, dword [ebp - 0x58]
setge dl
xor ecx, ecx
mov esi, dword [ebp + eax*4 - 0x108]
mov eax, dword [ebp - 0x28]
cmp edx, eax
mov eax, dword [ebp - 0x28]
setl cl
xor edx, edx
imul esi, ecx
cmp esi, eax
mov eax, dword [ebp - 0x108]
setl dl
xor ecx, ecx
sub edx, eax
mov eax, dword [ebp - 0x58]
mov dword [ebp + eax*4 - 0x108], edx
mov eax, dword [ebp - 0x58]
cmp edx, eax
setle cl
xor eax, eax
cmp ecx, 1
pop ecx
setg al
cmp ecx, eax
mov eax, dword [ebp - 0x58]
sbb edx, edx
xor ecx, ecx
neg edx
cmp edx, eax
mov eax, dword [ebp - 0x28]
setne cl
cmp edi, ecx
sbb ecx, ecx
neg ecx
xor edx, edx
cmp ecx, eax
mov eax, dword [ebp - 0x58]
setne dl
xor ecx, ecx
cmp edx, eax
setge cl
mov dword [ebp - 0x28], ecx
xor ecx, ecx
inc dword [ebp - 0x58]
inc ecx
cmp dword [ebp - 0x58], ecx
jle 0x100278de
xor ebx, ebx
mov edi, ecx
push 3
mov dword [ebp - 0x48], edi
pop esi
mov dword [ebp - 0x38], ecx
mov dword [ebp - 0x2c], 0xfffffff9
mov dword [ebp - 0x50], 0xfffffffe
mov dword [ebp - 0x54], 0x2ffab8c3
mov dword [ebp - 0x2c], 0x52c58fb7
mov dword [ebp - 0x38], 5
mov dword [ebp - 0x134], 0xb5c6eff3
mov dword [ebp - 0x40], 0x1e19
mov dword [ebp - 0x3c], 0xcc5c6a3f
mov dword [ebp - 0x1c], ebx
jmp 0x10027a56
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0x380], 0x8748afa2
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], esi
jl 0x10027a45
push 0x5c0a
push ebx
push 0x3d15
push ecx
push 0x2711
push 0x4fa4
push 0x4925
push 0x6368
xor dl, dl
lea ecx, [ebp - 0x134]
call fcn.1002351c
mov dword [ebp - 0x380], ebx
xor edx, edx
imul ecx, dword [ebp - 0x2c], 0xfd03
add esp, 0x20
mov eax, dword [ebp - 0x40]
cmp ecx, eax
setne dl
add edx, dword [ebp - 0x3c]
mov dword [ebp - 0x2c], edx
mov ecx, dword [ebp - 0x134]
mov eax, dword [ebp - 0x2c]
add eax, ecx
mov ecx, dword [ebp - 0x54]
sub ecx, eax
neg ecx
sbb ecx, ecx
xor eax, eax
inc ecx
sub ecx, dword [ebp - 0x40]
add ecx, dword [ebp - 0x3c]
test ecx, ecx
setle al
mov dword [ebp - 0x50], eax
mov eax, dword [ebp - 0x54]
mov eax, dword [ebp - 0x40]
mov eax, dword [ebp - 0x380]
mov eax, dword [ebp - 0x134]
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x2c], ebx
mov al, byte [edi + eax]
mov byte [ebp - 0x61], al
mov dword [ebp - 0x18], 0x1265ab3e
mov dword [ebp - 0x30], 0xb94d0f4f
mov dword [ebp - 0x54], 0xfffffffa
mov dword [ebp - 0x50], 1
mov dword [ebp - 0x1c], ebx
jmp 0x10027b1d
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0x318], 0x55950707
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 4
jl 0x10027b0c
cmp dword [ebp - 0x18], ebx
je 0x10027b2d
xor edx, edx
inc edx
jmp 0x10027b2f
mov edx, ebx
mov eax, dword [ebp - 0x18]
xor ecx, ecx
cmp edx, eax
mov eax, dword [ebp - 0x18]
setge cl
xor edx, edx
cmp eax, ecx
mov eax, dword [ebp - 0x18]
setl dl
xor ecx, ecx
neg edx
cmp edx, eax
setl cl
xor edx, edx
mov dword [ebp - 0x30], ecx
inc edx
mov eax, dword [ebp - 0x30]
cmp dword [ebp - 0x18], edx
je 0x10027b64
mov esi, edx
cmp dword [ebp - 0x18], ebx
jne 0x10027b66
mov esi, ebx
mov eax, dword [ebp - 0x18]
xor ecx, ecx
cmp eax, esi
mov dword [ebp - 0x314], eax
setle cl
cmp ecx, dword [ebp - 0x18]
jle 0x10027b7e
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x314]
mov dword [ebp - 0x54], eax
mov dword [ebp - 0x18], 0x11
cmp dword [ebp - 0x18], 0xfffffffd
jne 0x10027c20
mov dword [ebp - 0x3c], 4
mov dword [ebp - 0x2c], 0xfffffff8
mov dword [ebp - 0x50], 0xfffffff7
mov dword [ebp - 0x1c], ebx
jmp 0x10027bc9
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0x1e0], 0xdc06
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 2
jl 0x10027bb8
mov eax, dword [ebp - 0x3c]
mov dword [ebp - 0x2c], eax
mov eax, dword [ebp - 0x2c]
add eax, dword [ebp - 0x3c]
mov dword [ebp - 0x50], eax
je 0x10027be3
mov eax, dword [ebp - 0x30]
mov eax, dword [ebp - 0x30]
mov eax, dword [ebp - 0x1e0]
cmp dword [ebp - 0x54], 0xffa898cb
jb 0x10027bfb
mov eax, dword [ebp - 0x310]
mov dword [ebp - 0x314], 0x93f8de90
mov eax, edx
cmp dword [ebp - 0x1e0], ebx
jne 0x10027c11
mov eax, ebx
mov dword [ebp - 0x50], eax
dec dword [ebp - 0x18]
cmp dword [ebp - 0x18], 0xfffffffd
je 0x10027b9e
mov edi, dword [ebp - 0x48]
mov eax, edi
mov cl, byte [ebp - 0x61]
cdq
idiv dword [ebp - 0x120]
mov esi, edx
mov dl, byte [ebp - 0x114]
call fcn.1002b8ab
mov dl, byte [esi + 0x100735f0]
mov cl, al
call fcn.1002b8ab
mov byte [edi + str.Y_vT_], al
xor eax, eax
inc eax
mov dword [ebp - 0x24], eax
mov dword [ebp - 0x28], eax
push 3
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x1c], ebx
pop esi
jmp 0x10027c71
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0x374], 0x1720348f
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], esi
jl 0x10027c60
mov eax, dword [ebp - 0x24]
sub eax, dword [ebp - 0x24]
jne 0x10027cc5
mov eax, dword [ebp - 0x24]
xor ecx, ecx
mov dword [ebp - 0x36c], eax
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0x374]
cmp eax, 0xfffffffe
mov eax, dword [ebp - 0x24]
setne cl
xor edx, edx
cmp ecx, eax
mov eax, dword [ebp - 0x24]
setle dl
sub edx, 0xc2489102
neg edx
sbb edx, edx
xor ecx, ecx
inc edx
cmp edx, eax
setl cl
add ecx, dword [ebp - 0x24]
jne 0x10027cc5
cmp dword [ebp - 0x24], ebx
jne 0x10027cc5
mov eax, ebx
jmp 0x10027cc8
xor eax, eax
inc eax
xor edx, edx
cmp eax, 0xfffc
mov eax, dword [ebp - 0x28]
setne dl
xor ecx, ecx
cmp edx, eax
setge cl
xor eax, eax
cmp ecx, 0x4015fb26
setg al
xor edx, edx
cmp eax, 0x7b88
mov eax, dword [ebp - 0x24]
setle dl
xor ecx, ecx
cmp edx, eax
setne cl
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 0x28], 0x17
jmp 0x10027d2e
mov dword [ebp - 0x1c], ebx
jmp 0x10027d25
push ecx
mov byte [ebp - 0x93], bl
lea edx, [ebp - 0x93]
push 1
call fcn.10024885
inc dword [ebp - 0x1c]
pop ecx
pop ecx
cmp dword [ebp - 0x1c], 2
jle 0x10027d0c
dec dword [ebp - 0x28]
cmp dword [ebp - 0x28], 5
jle 0x10027d07
push 0x1985
push ecx
push ebx
lea edx, [ebp - 0x114]
lea ecx, [ebp - 0x61]
call fcn.1002384e
add esp, 0xc
inc edi
mov dword [ebp - 0x48], edi
push 1
pop ecx
cmp edi, 4
jl 0x10027a02
mov dword [ebp - 0x30], 0xb743d837
push 5
pop eax
mov dword [ebp - 0x240], eax
mov dword [ebp - 0x23c], eax
mov dword [ebp - 0x238], eax
mov dword [ebp - 0x234], eax
mov dword [ebp - 0x38], 0xc6f1
mov dword [ebp - 0x38], 6
mov dword [ebp - 0x18], ebx
jmp 0x10027da2
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x388], 0x624039b
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], ecx
jl 0x10027d91
mov dword [ebp - 0x18], ebx
jmp 0x10027dbd
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x480], 0xfffffff8
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], esi
jl 0x10027dac
push ecx
lea eax, [ebp - 0x95]
mov byte [ebp - 0x95], bl
mov dl, cl
mov ecx, 0x51a
push eax
call fcn.100248c0
mov dword [ebp - 0x30], ebx
or edi, 0xffffffff
pop ecx
pop ecx
cmp dword [ebp - 0x30], ebx
jl 0x10027e50
mov dword [ebp - 0x38], 0x1ca2961c
xor eax, eax
inc eax
mov dword [ebp - 0x38], eax
mov dword [ebp - 0x38], eax
mov dword [ebp - 0x38], edi
mov dword [ebp - 0x38], edi
mov dword [ebp - 0x38], edi
mov dword [ebp - 0x274], ebx
mov dword [ebp - 0x1c], ebx
jmp 0x10027e1e
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0x558], 0xb59008cf
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], esi
jl 0x10027e0d
mov byte [ebp - 0x31], bl
cmp byte [ebp - 0x31], 0
je 0x10027e35
push ecx
xor cl, cl
call fcn.10022b52
pop ecx
lea eax, [ebp - 0x274]
push eax
push ecx
push 0x29a0
push ebx
call fcn.1002524b
add esp, 0x10
dec dword [ebp - 0x30]
jns 0x10027de9
mov esi, dword [ebp - 0x20]
mov eax, dword [esi]
mov dword [ebp - 0x48], eax
xor eax, eax
inc eax
mov dword [ebp - 0x24], eax
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x174], eax
mov dword [ebp - 0x28], ebx
jmp 0x10027e7d
mov eax, dword [ebp - 0x28]
mov dword [ebp + eax*4 - 0x394], 0x1720348f
inc dword [ebp - 0x28]
cmp dword [ebp - 0x28], 3
jl 0x10027e6c
mov eax, dword [ebp - 0x24]
sub eax, dword [ebp - 0x24]
jne 0x10027ed2
mov eax, dword [ebp - 0x24]
xor ecx, ecx
mov dword [ebp - 0x38c], eax
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0x394]
cmp eax, 0xfffffffe
mov eax, dword [ebp - 0x24]
setne cl
xor edx, edx
cmp ecx, eax
mov eax, dword [ebp - 0x24]
setle dl
sub edx, 0xc2489102
neg edx
sbb edx, edx
xor ecx, ecx
inc edx
cmp edx, eax
setl cl
add ecx, dword [ebp - 0x24]
jne 0x10027ed2
cmp dword [ebp - 0x24], ebx
jne 0x10027ed2
mov eax, ebx
jmp 0x10027ed5
xor eax, eax
inc eax
xor edx, edx
cmp eax, 0xfffc
mov eax, dword [ebp - 0x1c]
setne dl
xor ecx, ecx
cmp edx, eax
setge cl
xor eax, eax
cmp ecx, 0x4015fb26
setg al
xor edx, edx
cmp eax, 0x7b88
mov eax, dword [ebp - 0x24]
setle dl
xor ecx, ecx
cmp edx, eax
setne cl
mov dword [ebp - 0x174], ecx
mov dword [ebp - 0x1c], 0x17
jmp 0x10027f34
xor eax, eax
lea ecx, [ebp - 0x174]
inc eax
push 0x5aac
push eax
push eax
mov dl, al
call fcn.10024908
add esp, 0xc
dec dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 5
jle 0x10027f17
cmp dword [ebp - 0x48], 0
jle 0x1002a8da
cmp dword [ebp - 0x48], 0x29a1
jae 0x1002a8da
mov dword [ebp - 0x50], ebx
xor edx, edx
mov dword [ebp - 0x24], edi
inc edx
mov dword [ebp - 0x28], ebx
mov dword [ebp - 0x40], ebx
mov dword [ebp - 0x1c], ebx
jmp 0x10027f73
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0x60], 0x73838a1f
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], edx
jl 0x10027f65
cmp dword [ebp - 0x60], ebx
jne 0x10027fee
mov eax, dword [ebp - 0x50]
mov dword [ebp - 0x24], eax
mov eax, dword [ebp - 0x60]
mov eax, dword [ebp - 0x24]
mov ecx, dword [ebp - 0x60]
mov eax, dword [ebp - 0x24]
add eax, ecx
cmp eax, dword [ebp - 0x60]
jne 0x10027f99
mov eax, dword [ebp - 0x60]
mov eax, dword [ebp - 0x60]
mov eax, dword [ebp - 0x60]
mov eax, dword [ebp - 0x60]
mov eax, dword [ebp - 0x60]
mov eax, dword [ebp - 0x60]
sub eax, 0x5d76270
add eax, dword [ebp - 0x24]
neg eax
sbb eax, eax
inc eax
mov dword [ebp - 0x28], eax
jne 0x10027fee
mov dword [ebp - 0x28], ebx
cmp dword [ebp - 0x28], 0xfffffff3
jne 0x1002802f
push 0x2efd
push ecx
push ebx
mov byte [ebp - 0x97], bl
lea ecx, [ebp - 0x97]
push 0x6fd2
call fcn.100264ba
add esp, 0x10
dec dword [ebp - 0x28]
cmp dword [ebp - 0x28], 0xfffffff3
je 0x10027fc3
jmp 0x1002802c
mov dword [ebp - 0x1cc], 0xedc0
mov cl, dl
mov dword [ebp - 0x250], 0xc995f762
call fcn.10022b66
lea eax, [ebp - 0x1cc]
xor dl, dl
push eax
push 0x3df
push ecx
push ecx
push 0x160b
lea ecx, [ebp - 0x250]
call fcn.10023729
add esp, 0x14
xor edx, edx
inc edx
cmp dword [ebp - 0x24], ebx
je 0x10028043
cmp dword [ebp - 0x40], ebx
je 0x10028043
mov eax, dword [ebp - 0x40]
mov ecx, edx
cmp eax, dword [ebp - 0x24]
jge 0x10028045
mov ecx, ebx
mov eax, dword [ebp - 0x60]
imul eax, ecx
test eax, eax
jne 0x10028056
mov eax, ebx
cmp dword [ebp - 0x24], ebx
je 0x10028058
mov eax, edx
cmp eax, dword [ebp - 0x60]
jg 0x10028060
mov eax, dword [ebp - 0x40]
mov eax, dword [ebp - 0x24]
xor ecx, ecx
mov eax, dword [ebp - 0x60]
cmp eax, edx
mov edx, dword [ebp - 0x48]
setge cl
mov dword [ebp - 0x24], ecx
mov eax, dword [ebp - 0x24]
push dword [ebp - 0x120]
mov dword [ebp - 0x28], eax
push ecx
push dword [ebp - 0x114]
push esi
call fcn.10022a7d
push 0x316c
push 0xbd2
push 1
push 0x6f23
push 0x2da
push 0x7b48
push 0x36f7
push 0x5dea
push 0x7d74
push 0xdd8
xor dl, dl
xor cl, cl
call fcn.10024a3c
mov eax, dword [0x1027fe38]
add esp, 0x38
mov ecx, 0x1027fe38
push dword [eax + 4]
call fcn.1002b24f
mov eax, dword [0x1027fe38]
mov dword [eax + 4], eax
mov eax, dword [0x1027fe38]
mov dword [eax], eax
mov eax, dword [0x1027fe38]
mov dword [eax + 8], eax
mov dword [0x1027fe3c], ebx
mov dword [ebp - 0x18], 0x490c4d8e
mov dword [ebp - 0x2c], 0xfffffffe
mov dword [ebp - 0x2c], 0xc3cbaa6f
mov dword [ebp - 0x1c], ebx
jmp 0x10028121
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0xa8], 0xd3df
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 2
jl 0x10028110
xor edx, edx
inc edx
mov dword [ebp - 0x18], edx
cmp dword [ebp - 0x18], ebx
jl 0x1002827d
mov dword [ebp - 0x1c], 0xf18ee85e
mov dword [ebp - 0x2c], edx
mov dword [ebp - 0x2c], 0xaf1ba137
mov dword [ebp - 0x50], 0x942f34c9
mov dword [ebp - 0x28], ebx
jmp 0x10028164
mov eax, dword [ebp - 0x28]
mov dword [ebp + eax*4 - 0x1d8], 0xfff6
inc dword [ebp - 0x28]
cmp dword [ebp - 0x28], edx
jl 0x10028153
mov eax, dword [ebp - 0x18]
xor ecx, ecx
mov eax, dword [ebp + eax*4 - 0xa8]
test eax, eax
mov eax, dword [ebp - 0x18]
setne cl
mov dword [ebp - 0x50], ecx
cmp dword [ebp + eax*4 - 0xa8], ebx
je 0x10028236
mov eax, dword [ebp - 0x1c]
xor edx, edx
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0xa4]
mov eax, dword [ebp - 0x1d8]
mov eax, dword [ebp - 0xa8]
mov eax, dword [ebp - 0xa8]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp + eax*4 - 0xa8]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x18]
mov eax, dword [ebp - 0xa4]
cmp ecx, eax
mov ecx, dword [ebp - 0xa8]
mov eax, dword [ebp - 0xa4]
setne dl
imul ecx, edx
add eax, ecx
mov dword [ebp - 0x1c], eax
imul eax, dword [ebp - 0x1c], 0xfffe
test eax, eax
jne 0x10028200
mov eax, dword [ebp - 0x18]
cmp dword [ebp + eax*4 - 0xa8], ebx
jne 0x10028200
xor edx, edx
mov eax, ebx
inc edx
jmp 0x10028205
xor edx, edx
inc edx
mov eax, edx
mov dword [ebp - 0x2c], eax
xor ecx, ecx
mov eax, dword [ebp - 0x2c]
mov dword [ebp - 0x2c], eax
mov eax, dword [ebp - 0x2c]
mov dword [ebp - 0x2c], eax
mov eax, dword [ebp - 0x2c]
cmp eax, 0x25aa
setl cl
cmp ecx, dword [ebp - 0xa4]
jne 0x1002822e
cmp dword [ebp - 0x18], ebx
jne 0x10028238
cmp dword [ebp - 0xa8], ebx
jne 0x10028238
mov edx, ebx
mov eax, dword [ebp - 0x18]
xor ecx, ecx
push 1
mov eax, dword [ebp + eax*4 - 0xa8]
cmp dword [ebp - 0x50], eax
setg cl
xor eax, eax
cmp ecx, edx
setl al
xor edx, edx
mov dword [ebp - 0x2c], eax
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp + eax*4 - 0xa8]
mov eax, dword [ebp - 0x2c]
cmp eax, ecx
setle dl
add edx, 0xf50e
mov dword [ebp - 0x50], edx
dec dword [ebp - 0x18]
pop edx
jns 0x10028136
mov dword [ebp - 0xc0], ebx
mov dword [ebp - 0x1c], 0x1052
cmp dword [ebp - 0x1c], 0x126f
mov dword [ebp - 0x4c], str.yzjpiwb_hjkgtl_jsdwpsd_phijzro_nhc_bzr_nnnifgiy_kloenwm_otz_lpwjoqi_gfdbwakfn_yzwbbixe
jle 0x100282ee
mov edi, ebx
mov esi, ebx
lea eax, [esi + edi]
cdq
lea ecx, [ebp - 0x4e0]
push edx
push eax
call fcn.10001a65
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x100282b9
mov eax, dword [eax]
push eax
call fcn.10043bf4
pop ecx
push ebx
push 1
lea ecx, [ebp - 0x4e0]
call fcn.100020a8
inc esi
cmp esi, 0x4c91
jl 0x1002829e
inc edi
cmp edi, 0x1053
jl 0x1002829c
push 1
push ebx
push ebx
push ebx
call dword [sym.imp.ADVAPI32.dll_SetSecurityDescriptorDacl]
or edi, 0xffffffff
mov dword [ebp - 0x90], 0xc75b57fd
mov dword [ebp - 0x24], 0x3b947e29
mov dword [ebp - 0x90], 2
cmp dword [ebp - 0x90], 0x18
mov esi, 0xffff
jne 0x10028675
xor eax, eax
inc eax
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x6c], 6
mov dword [ebp - 0x2c], 9
mov dword [ebp - 0x38], 0x5c6f0d60
mov dword [ebp - 0x2c], 0xadd890aa
mov dword [ebp - 0x18], ebx
jmp 0x10028380
push eax
push eax
push 0x75f1
push ebx
lea eax, [ebp - 0x90]
mov dword [ebp - 0x210], esi
push eax
mov dword [ebp - 0x50], 0x7cfaf42
lea edx, [ebp - 0x6c]
push 0x26da
lea ecx, [ebp - 0x210]
call fcn.1002635d
mov eax, dword [ebp - 0x6c]
add esp, 0x18
mov dword [ebp - 0x50], eax
dec dword [ebp - 0x18]
push 1
pop eax
cmp dword [ebp - 0x18], 0xfffffff5
jge 0x10028342
mov dword [ebp - 0x30], 0x5447
cmp dword [ebp - 0x30], 0x57d2
jle 0x10028423
push ebx
push ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_EnumCalendarInfoW]
mov eax, ebx
mov dword [ebp - 0x40], ebx
mov edi, ebx
mov dword [ebp - 0x54], ebx
mov ecx, edi
mov esi, ebx
sar eax, cl
mov dword [ebp - 0x3c], esi
mov dword [ebp - 0x50], eax
mov edi, esi
mov dword [ebp - 0x2c], 0x6174
mov esi, dword [ebp - 0x50]
mov ecx, edi
mov eax, esi
shl eax, cl
mov ecx, 0x10076b78
cdq
push edx
push eax
call fcn.10001c56
dec edi
dec dword [ebp - 0x2c]
jne 0x100283c6
mov esi, dword [ebp - 0x3c]
inc esi
mov dword [ebp - 0x3c], esi
cmp esi, 0x69aa
jl 0x100283ba
mov edi, dword [ebp - 0x54]
mov eax, dword [ebp - 0x40]
inc edi
mov dword [ebp - 0x54], edi
cmp edi, 0x65bb
jl 0x100283ae
inc eax
mov dword [ebp - 0x40], eax
cmp eax, 0x3ce5
jl 0x100283a9
mov esi, dword [sym.imp.USER32.dll_GetDesktopWindow]
push 0x19c9
push ebx
call esi
push eax
call esi
push eax
call dword [sym.imp.USER32.dll_MapWindowPoints]
mov dword [ebp - 0x6c], 5
cmp dword [ebp - 0x6c], 0xffffffe7
je 0x10028624
push 3
pop esi
mov dword [ebp - 0x1a0], 0x7e318b47
mov dword [ebp - 0x19c], 0x7e318b47
mov dword [ebp - 0x198], 0x7e318b47
mov dword [ebp - 0x194], 0x7e318b47
mov dword [ebp - 0x368], esi
mov dword [ebp - 0x364], esi
mov dword [ebp - 0x360], esi
mov dword [ebp - 0x35c], esi
mov dword [ebp - 0x18], ebx
jmp 0x100284f8
mov dword [ebp - 0x40], 0xb79df948
cmp dword [ebp - 0x6c], ebx
je 0x100284ea
mov eax, dword [ebp - 0x40]
xor edx, edx
mov ecx, dword [ebp - 0x194]
mov eax, dword [ebp - 0x90]
cmp eax, ecx
setne dl
add edx, 0x6519a3cc
je 0x100284a9
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x1a0]
xor edx, edx
mov eax, dword [ebp - 0x198]
mov dword [ebp - 0x2c], ebx
mov eax, dword [ebp - 0x2c]
mov ecx, dword [ebp - 0x40]
mov eax, dword [ebp - 0x40]
cmp ecx, eax
mov eax, dword [ebp - 0x194]
setl dl
xor ecx, ecx
cmp eax, 0x4c259dba
setl cl
lea eax, [edx + ecx]
mov ecx, dword [ebp - 0x90]
add ecx, eax
je 0x100284ea
xor eax, eax
inc eax
jmp 0x100284ec
mov eax, ebx
mov dword [ebp - 0x24], eax
mov eax, dword [ebp - 0x194]
dec dword [ebp - 0x18]
cmp dword [ebp - 0x18], 0xfffffff5
jge 0x1002847c
mov eax, dword [ebp - 0x194]
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], ebx
je 0x10028532
push 1
push 0x48ce
lea eax, [ebp - 0x96]
mov byte [ebp - 0x96], bl
push eax
push ecx
call fcn.10026487
add esp, 0x10
jmp 0x10028617
mov dword [ebp - 0x38], 0x248c
mov dword [ebp - 0x18], 0xffffffeb
jmp 0x1002860d
xor edx, edx
mov dword [ebp - 0x28], 0xb070fcbc
inc edx
mov dword [ebp - 0x2c], 0x41ac573c
mov dword [ebp - 0x50], edx
mov ecx, dword [ebp - 0x28]
mov eax, dword [ebp - 0x18]
add ecx, 0x3725
dec dword [ebp - 0x28]
cmp eax, ecx
cmovl edx, ebx
mov dword [ebp - 0x2c], edx
mov edx, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x18]
sub edx, 0x8b3027fe
neg edx
sbb edx, edx
xor ecx, ecx
inc edx
cmp edx, eax
mov eax, dword [ebp - 0x19c]
setl cl
xor edx, edx
cmp ecx, 1
setg dl
imul edx, eax
mov eax, dword [ebp - 0x50]
imul eax, edx
mov dword [ebp - 0x2c], eax
mov eax, dword [ebp - 0x2c]
mov dword [ebp - 0x35c], eax
mov dword [ebp - 0x24], ebx
jmp 0x10028604
mov dword [ebp - 0x28], 0xfffffff9
jmp 0x100285fb
push 0x1f87
push 0x65ab
xor eax, eax
mov byte [ebp - 0x75], bl
inc eax
lea ecx, [ebp - 0x75]
push eax
push 0x7336
push 0x48eb
push 0x7a94
push 0x2f44
push 0x57c
push ecx
push 0x2b6c
mov dl, al
mov cl, al
call fcn.10024a3c
add esp, 0x28
inc dword [ebp - 0x28]
cmp dword [ebp - 0x28], 0xc
jl 0x100285b9
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], 0x14
jg 0x100285b0
dec dword [ebp - 0x18]
cmp dword [ebp - 0x18], 0xffffffea
je 0x10028545
dec dword [ebp - 0x6c]
cmp dword [ebp - 0x6c], 0xffffffe7
jne 0x10028437
mov dword [ebp - 4], 0xe
cmp dword [ebp - 0x30], 0x53c6
jge 0x10028643
mov edx, str.ylyhuis_lwlz_utrn
mov ecx, 0x10076b78
call fcn.10003a53
or edi, 0xffffffff
mov dword [ebp - 4], edi
inc dword [ebp - 0x90]
jmp 0x10028309
cmp dword [ebp - 0x1c], 0xd35
jge 0x10028687
push dword [ebp - 0x4c]
call fcn.10043bf4
pop ecx
mov eax, dword [ebp - 0x20]
xor edx, edx
mov dword [ebp - 4], edi
add eax, 4
mov dword [ebp - 0x30], 0xfffffff8
inc edx
mov dword [ebp - 0x54], eax
mov dword [ebp - 0x1c], ebx
jmp 0x100286af
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0xf0], edi
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], edx
jl 0x100286a2
mov dword [ebp - 0x30], ebx
cmp dword [ebp - 0x30], ebx
jl 0x10028779
mov esi, 0x70ade216
mov dword [ebp - 0x130], esi
mov dword [ebp - 0x12c], esi
mov dword [ebp - 0x128], esi
mov dword [ebp - 0x124], esi
mov dword [ebp - 0x50], 0xc80fc3a0
mov dword [ebp - 0x128], ebx
cmp dword [ebp - 0x128], ebx
jl 0x10028770
mov dword [ebp - 0x4c], 0xb2c41ac3
mov eax, dword [ebp - 0x128]
mov eax, dword [ebp + eax*4 - 0xf0]
mov ecx, dword [ebp - 0x128]
sub ecx, eax
neg ecx
sbb ecx, ecx
inc ecx
mov dword [ebp - 0x50], ecx
mov eax, dword [ebp - 0x128]
mov ecx, dword [ebp + eax*4 - 0xf0]
sub ecx, dword [ebp - 0x4c]
mov eax, dword [ebp - 0x128]
add ecx, eax
mov eax, dword [ebp - 0x128]
add ecx, eax
mov eax, dword [ebp - 0x128]
cmp dword [ebp + eax*4 - 0xf0], ecx
jg 0x1002874f
mov ecx, edx
cmp dword [ebp - 0x124], ebx
jne 0x10028751
mov ecx, ebx
mov eax, dword [ebp - 0x128]
push ecx
mov dword [ebp + eax*4 - 0xf0], ecx
call fcn.10024c1a
dec dword [ebp - 0x128]
pop ecx
push 1
pop edx
jns 0x100286f2
dec dword [ebp - 0x30]
jns 0x100286c5
call fcn.10023165
mov dword [ebp - 0x30], 0x7196
cmp dword [ebp - 0x30], 0x726c
jle 0x100287d6
mov dword [ebp - 0x40], ebx
mov edi, ebx
mov dword [ebp - 0x3c], 0x3aeb
mov dword [ebp - 0x2c], edi
mov esi, edi
mov edi, 0x20b3
mov eax, esi
mov ecx, 0x10076b78
cdq
push edx
push eax
call fcn.10001c56
dec esi
dec edi
jne 0x100287a4
mov edi, dword [ebp - 0x2c]
mov esi, dword [ebp - 0x40]
add edi, esi
dec dword [ebp - 0x3c]
mov dword [ebp - 0x2c], edi
jne 0x1002879d
inc esi
mov dword [ebp - 0x40], esi
cmp esi, 0x3c39
jl 0x10028791
or edi, 0xffffffff
mov dword [ebp - 4], 0x12
cmp dword [ebp - 0x30], 0x6df0
jge 0x100287f5
mov edx, str.afopu_cvap_jrmhn_fchtsr_wtwi_kor_ohzrs_mgzeu_ujep_xcjujager_wrx_ccxtcf
mov ecx, 0x10076b78
call fcn.10003a53
xor eax, eax
inc eax
mov dword [ebp - 4], edi
mov dword [ebp - 0x40], eax
mov dword [ebp - 0x30], edi
mov dword [ebp - 0x28], ebx
mov dword [ebp - 0x24], 0x3e
cmp dword [ebp - 0x24], 0x242
jle 0x1002885c
mov dword [ebp - 0x20], ebx
mov edi, ebx
mov dword [ebp - 0x3c], 0x5165
mov dword [ebp - 0x2c], edi
mov esi, edi
mov edi, 0x6d4f
mov eax, esi
mov ecx, 0x10076b78
cdq
push edx
push eax
call fcn.10001c56
dec esi
dec edi
jne 0x1002882a
mov edi, dword [ebp - 0x2c]
mov esi, dword [ebp - 0x20]
add edi, esi
dec dword [ebp - 0x3c]
mov dword [ebp - 0x2c], edi
jne 0x10028823
inc esi
mov dword [ebp - 0x20], esi
cmp esi, 0xcf1
jl 0x10028817
or edi, 0xffffffff
mov dword [ebp - 0x1c], ebx
jmp 0x10028899
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0xc8], 0xa48bbca6
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 2
jl 0x10028888
mov dword [ebp - 4], 0x14
cmp dword [ebp - 0x24], 0xfffffcb7
jge 0x100288df
mov edx, str.jtuinfqdd_qzjcbs_fdpfd_dtvqwppr
mov ecx, 0x10076b78
call fcn.10003a53
jmp 0x100288df
push 0xa
mov dword [ebp - 4], edi
pop esi
mov dword [ebp - 0xc8], ebx
jmp 0x100289ca
mov dword [ebp - 0x2c], edi
mov dword [ebp - 0x24], 0x4d0f4f23
mov dword [ebp - 0x1c], ebx
jmp 0x10028910
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0x2e0], 9
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 4
jl 0x100288ff
mov dword [ebp - 0x2c], ebx
xor ecx, ecx
mov eax, dword [ebp - 0x2c]
mov eax, dword [ebp - 0xc8]
cmp eax, 0xfe64
mov dword [ebp - 0x2d4], eax
mov eax, dword [ebp - 0x40]
setg cl
xor edx, edx
cmp ecx, eax
mov eax, dword [ebp - 0x40]
setl dl
xor ecx, ecx
cmp edx, eax
setge cl
cmp ecx, dword [ebp - 0x24]
jle 0x10028958
cmp dword [ebp - 0x2d4], ebx
je 0x10028958
xor eax, eax
inc eax
jmp 0x1002895a
mov eax, ebx
mov dword [ebp - 0x30], eax
mov eax, dword [ebp - 0x30]
push 0xfffffffffffffffb
pop ecx
cmp ecx, eax
sbb eax, eax
neg eax
mov dword [ebp - 0x28], eax
mov eax, dword [ebp - 0x28]
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], ebx
jne 0x1002897d
mov eax, dword [ebp - 0x2e0]
mov eax, dword [ebp - 0xc8]
xor edx, edx
mov eax, dword [ebp - 0xc8]
mov ecx, dword [ebp - 0xc4]
mov eax, dword [ebp - 0x2d4]
cmp ecx, eax
mov eax, dword [ebp - 0x28]
setge dl
imul eax, dword [ebp - 0xc4]
cmp eax, edx
jl 0x100289b4
cmp dword [ebp - 0x24], ebx
je 0x100289b4
xor eax, eax
inc eax
jmp 0x100289b6
mov eax, ebx
mov dword [ebp - 0x2dc], eax
add eax, 0xffff6735
mov dword [ebp - 0x24], eax
dec dword [ebp - 0xc8]
cmp dword [ebp - 0xc8], 0xfffffffb
jge 0x100288f0
mov eax, dword [ebp - 0x28]
xor edx, edx
mov ecx, dword [ebp - 0x30]
mov eax, dword [ebp - 0x40]
cmp ecx, eax
mov eax, dword [ebp - 0xc4]
setg dl
sub eax, edx
je 0x10028a1d
mov ecx, dword [ebp - 0x30]
xor edx, edx
mov eax, dword [ebp - 0xc4]
cmp ecx, eax
mov eax, dword [ebp - 0x28]
setne dl
xor ecx, ecx
cmp edx, eax
sete cl
sub ecx, dword [ebp - 0xc8]
jne 0x10028a16
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x28]
mov eax, ebx
jmp 0x10028a20
xor eax, eax
inc eax
xor ecx, ecx
add eax, 0x4060a3b7
push 0x1938
cmp eax, 0x4b54c5f6
mov edx, 0x64bc
mov eax, 0x177e8edf
setg cl
push ecx
push 0x7114
push 0x7cc8
push ecx
mov dword [ebp - 0x28], ecx
push ecx
mov dword [ebp - 0x240], eax
lea ecx, [ebp - 0x1e4]
mov dword [ebp - 0x23c], eax
push 1
mov dword [ebp - 0x238], eax
push 0x1f3d
mov dword [ebp - 0x234], eax
mov dword [ebp - 0x1e4], 7
push 0x373a
call fcn.10024ff5
mov dword [ebp - 0xb0], 0x86046000
add esp, 0x24
mov word [ebp - 0xac], 0x8990
mov byte [ebp - 0xaa], 0x80
mov word [ebp - 0xd0], si
mov dword [ebp - 0xb8], 0x9b55bb2c
mov dword [ebp - 0x218], 0x7ecc2443
mov dword [ebp - 0x1c], ebx
jmp 0x10028ad5
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0x398], 0x51f2
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 1
jl 0x10028ac4
mov dword [ebp - 0xb8], 0x17
jmp 0x10028b10
mov dword [ebp - 0x30], 0x417be187
mov dword [ebp - 0x30], ebx
cmp dword [ebp - 0x30], ebx
jl 0x10028b0a
push 0x7f65
push ecx
mov cl, 1
call fcn.1002505f
dec dword [ebp - 0x30]
pop ecx
pop ecx
jns 0x10028af6
dec dword [ebp - 0xb8]
cmp dword [ebp - 0xb8], 0xfffffff1
jle 0x10028ae7
mov dword [ebp - 0x2c], 0x3d8b
cmp dword [ebp - 0x2c], 0x407d
jle 0x10028b79
mov ecx, ebx
mov dword [ebp - 0x1c], ebx
mov eax, ebx
mov dword [ebp - 0x30], ebx
mov esi, ebx
mov edi, ebx
add eax, ecx
mov ecx, 0x10076b78
xor eax, edi
xor eax, esi
cdq
push edx
push eax
call fcn.10001c56
mov eax, dword [ebp - 0x30]
inc edi
mov ecx, dword [ebp - 0x1c]
cmp edi, 0x483a
jl 0x10028b37
inc esi
cmp esi, 0x5a86
jl 0x10028b35
inc eax
mov dword [ebp - 0x30], eax
cmp eax, 0xb5f
jl 0x10028b33
inc ecx
mov dword [ebp - 0x1c], ecx
cmp ecx, 0x1add
jl 0x10028b2e
lea eax, [ebp - 0x218]
mov edx, 0x5802
push eax
push ecx
lea eax, [ebp - 0xb8]
mov cl, 1
push eax
call fcn.10025132
add esp, 0xc
mov dword [ebp - 4], 0x16
cmp dword [ebp - 0x2c], 0x3b60
jge 0x10028bb6
mov edx, str.quqrmbt_uyllvoik_smgnyvj_hcx_vfighxr_czsxpkk_dssiy
mov ecx, 0x10076b78
call fcn.10003a53
or dword [ebp - 4], 0xffffffff
xor ecx, ecx
inc ecx
push 7
pop esi
push 2
pop edi
mov dword [ebp - 0x13c], ebx
mov dword [ebp - 0x1c], edi
cmp edi, esi
jae 0x10029715
mov dword [ebp - 0x28], 0xb26bdde0
mov dword [ebp - 0x50], 0x2b8ea2c3
mov dword [ebp - 0x28], ebx
jmp 0x10028c1d
mov eax, dword [ebp - 0x28]
mov dword [ebp + eax*4 - 0x160], 0xfffffff8
inc dword [ebp - 0x28]
cmp dword [ebp - 0x28], ecx
jl 0x10028c0c
mov dword [ebp - 0x28], ebx
jmp 0x10028cb5
mov dword [ebp - 0x40], 0xed15de05
mov dword [ebp - 0x2c], 0x26c7f05f
mov dword [ebp - 0x24], ebx
jmp 0x10028c4e
mov eax, dword [ebp - 0x24]
mov dword [ebp + eax*4 - 0x298], 5
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], 2
jl 0x10028c3d
mov eax, dword [ebp - 0x40]
mov eax, dword [ebp - 0x298]
cmp dword [ebp - 0x28], ebx
jne 0x10028c7b
cmp dword [ebp - 0x28], 0xffffffe6
jle 0x10028c2a
movzx eax, byte [ebp - 0xb0]
lea eax, [eax*2 + 2]
cmp edi, eax
jne 0x100292f6
movzx eax, byte [ebp + edi - 0xb0]
inc eax
mov dword [ebp - 0x13c], eax
mov dword [ebp - 0x3c], 0x8bb
cmp dword [ebp - 0x3c], 0xbda
jle 0x10028d4b
mov dword [ebp - 0x40], ebx
mov edi, ebx
mov esi, ebx
mov ecx, ebx
mov dword [ebp - 0x2c], ebx
mov eax, esi
cdq
idiv ecx
mov eax, dword [ebp - 0x40]
mov ecx, edx
lea eax, [edi + eax]
shl eax, cl
mov ecx, 0x10076b78
cdq
push edx
push eax
call fcn.10001c56
mov ecx, dword [ebp - 0x2c]
inc ecx
mov dword [ebp - 0x2c], ecx
cmp ecx, 0x6952
jl 0x10028d00
inc esi
cmp esi, 0x4bae
jl 0x10028cfb
mov dword [ebp - 4], 0x18
cmp dword [ebp - 0x3c], 0x594
jge 0x10028d6a
mov edx, str.yhui_fyq_vtdgxqmsd_kxn_iqxqrceo_mrqfeve_vvdcyyu_hubzmtthy_vng
mov ecx, 0x10076b78
call fcn.10003a53
or dword [ebp - 4], 0xffffffff
xor ecx, ecx
inc ecx
push 7
pop edx
mov dword [ebp - 0x18], edx
mov esi, 0xffff
mov dword [ebp - 0x24], ebx
mov dword [ebp - 0x28], 0xffffffff
mov dword [ebp - 0x18], ebx
jmp 0x10028dbd
mov dword [ebp - 0x38], 0xffffffff
mov dword [ebp - 0x38], 0xb13638ec
mov dword [ebp - 0x38], 0x9aed23b6
mov dword [ebp - 0x38], 0xfffffffa
mov dword [ebp - 0x40], 0x64c7
cmp dword [ebp - 0x40], 0x6816
jle 0x100293a1
mov edi, ebx
mov dword [ebp - 0x3c], ebx
mov dword [ebp - 0x50], edi
mov dword [ebp - 0x2c], 0x67dc
mov esi, ebx
mov ecx, esi
mov eax, edi
sar eax, cl
lea ecx, [ebp - 0x504]
cdq
push edx
push eax
call fcn.10001a65
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x10029351
mov eax, dword [eax]
push eax
call fcn.10043bf4
pop ecx
push ebx
push 1
lea ecx, [ebp - 0x504]
call fcn.100020a8
inc esi
cmp esi, 0x1c13
jl 0x10029333
cmp dword [ebp - 0x40], 0x6286
jge 0x100293b5
push str.hjowcgl_hub_ttskylaq_bdlzlau_xkmyebdas_mig_fotaqyd_acd_ozhfg
call fcn.10043bf4
pop ecx
or dword [ebp - 4], 0xffffffff
mov dword [ebp - 0x18], ebx
jmp 0x100293cf
xor eax, eax
mov word [ebp - 0xce], ax
mov dword [ebp - 0x30], 0x5540d7f8
mov dword [ebp - 0x2c], ebx
mov dword [ebp - 0x4c], 0xfffffffb
mov dword [ebp - 0x50], 0x8c46
mov dword [ebp - 0x28], 0xffff
mov dword [ebp - 0x20], ebx
jmp 0x10029753
mov eax, dword [ebp - 0x20]
mov dword [ebp + eax*4 - 0x3bc], 0x456160cb
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], 4
jl 0x10029742
mov dword [ebp - 0x30], esi
or edi, 0xffffffff
cmp dword [ebp - 0x30], 8
mov edx, 0x2dd8607f
mov eax, 0xe9d0
je 0x10029983
mov dword [ebp - 0x2d0], eax
mov dword [ebp - 0x2cc], eax
mov dword [ebp - 0x2c8], eax
mov dword [ebp - 0x2c4], eax
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 0x44], 0xa8ccedb7
mov dword [ebp - 0x38], ebx
mov dword [ebp - 0x38], ebx
mov dword [ebp - 0x2c], edi
mov dword [ebp - 0x2c], ecx
mov dword [ebp - 0x2c], 0x4e7f13bc
mov dword [ebp - 0x2c], 2
mov dword [ebp - 0x358], edx
mov dword [ebp - 0x354], edx
mov dword [ebp - 0x350], edx
mov dword [ebp - 0x34c], edx
mov dword [ebp - 0x1c], ebx
cmp dword [ebp - 0x1c], 3
jg 0x10029978
mov dword [ebp - 0x24], 3
mov dword [ebp - 0x2c], ebx
mov dword [ebp - 0x2c], 0x2b4b5a9c
mov dword [ebp - 0x18], esi
mov dword [ebp - 0x20], 0x13c6
cmp dword [ebp - 0x20], 0x146a
jle 0x1002989e
push 0x1176
push ebx
push 0x12ac
push 0x1929
push ebx
push ebx
call dword [sym.imp.ADVAPI32.dll_RegSetValueExW]
mov ecx, ebx
mov dword [ebp - 0x40], ebx
mov eax, ebx
mov dword [ebp - 0x3c], ebx
mov edx, ecx
mov edi, ebx
mov ecx, eax
sar edx, cl
mov dword [ebp - 0x2c], edx
mov esi, ebx
mov eax, edx
lea ecx, [esi + edi]
shl eax, cl
lea ecx, [ebp - 0x54c]
cdq
push edx
push eax
call fcn.10001a65
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x1002984a
mov eax, dword [eax]
push eax
call fcn.10043bf4
pop ecx
push ebx
push 1
lea ecx, [ebp - 0x54c]
call fcn.100020a8
mov edx, dword [ebp - 0x2c]
inc esi
cmp esi, 0x1960
jl 0x1002982b
inc edi
cmp edi, 0x63c
jl 0x10029829
mov dword [ebp - 0x2c], 4
cmp dword [ebp - 0x20], 0x108f
jge 0x100298b9
push str.sowgbkeb_tayn_mgoq_ujiawihhu_ybnesv_iqtoltn_licnrzlx_hrgibzr_pbneq_rfi_jcuibjpm_gwspgf_udqcy
call fcn.10043bf4
pop ecx
mov dword [ebp - 4], edi
mov dword [ebp - 0x20], ebx
jmp 0x100298d2
cmp dword [ebp - 0x20], 2
jl 0x100298c1
inc dword [ebp - 0x30]
xor ecx, ecx
inc ecx
jmp 0x1002975f
xor eax, eax
mov dword [ebp - 0x2f4], esi
mov word [ebp - 0x308], ax
lea ecx, [ebp - 0x308]
lea eax, [ebp - 0xd0]
mov dword [ebp - 0x2f8], ebx
push eax
call fcn.100174ef
cmp dword [ebp - 0x2f4], 8
lea eax, [ebp - 0x308]
push ebx
cmovae eax, dword [ebp - 0x308]
lea ecx, [ebp - 0x308]
push 1
movzx eax, word [eax]
mov dword [ebp - 0x264], eax
call fcn.10002214
mov dword [ebp - 0x30], 0x860b4ffb
mov dword [ebp - 0x38], 0x85c9e53e
mov dword [ebp - 0x38], 5
mov dword [ebp - 0x44], ebx
mov dword [ebp - 0x38], edi
mov dword [ebp - 0x38], edi
mov dword [ebp - 0x38], edi
mov dword [ebp - 0x38], 0xc9b7
mov dword [ebp - 0x38], edi
mov dword [ebp - 0x38], 0x25e42506
mov dword [ebp - 0x244], 1
mov dword [ebp - 0x18], ebx
jmp 0x10029a27
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x444], 0xfffffff8
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 3
jl 0x10029a16
mov dword [ebp - 0x18], ebx
jmp 0x10029a3f
cmp dword [ebp - 0x18], 2
jl 0x10029a32
mov dword [ebp - 0x48], 0x97f6af11
xor eax, eax
inc eax
mov dword [ebp - 0xbc], eax
mov dword [ebp - 0x38], edi
mov dword [ebp - 0x38], eax
mov dword [ebp - 0x48], ebx
cmp dword [ebp - 0x48], 0xfffffff6
jg 0x1002aa4e
mov dword [ebp - 0x44], 0x4329
cmp dword [ebp - 0x44], 0x451d
jle 0x1002a956
mov edi, ebx
mov esi, ebx
mov eax, ebx
mov dword [ebp - 0x4c], ebx
xor eax, esi
mov ecx, 0x10076b78
or eax, edi
cdq
push edx
push eax
call fcn.10001c56
mov eax, dword [ebp - 0x4c]
inc eax
mov dword [ebp - 0x4c], eax
cmp eax, 0x3a2
jl 0x1002a916
inc esi
cmp esi, 0x73bf
jl 0x1002a911
inc edi
cmp edi, 0x5e38
jl 0x1002a90f
push ebx
push 0x2045
call dword [sym.imp.GDI32.dll_CreateHatchBrush]
or edi, 0xffffffff
mov dword [ebp - 0x88], 0x72159124
mov dword [ebp - 4], 0x28
cmp dword [ebp - 0x44], 0x41f6
jge 0x1002a97f
mov edx, str.isdpy_ehmahvu_gqyhlm_rbcexjrx_bostmjvxa
mov ecx, 0x10076b78
call fcn.10003a53
xor eax, eax
inc eax
push 0x4634
lea ecx, [ebp - 0x88]
mov dword [ebp - 4], edi
push ecx
push ecx
push ecx
lea ecx, [ebp - 0xbc]
mov dl, al
push ecx
mov ecx, 0x3ad6
call fcn.10023729
add esp, 0x14
mov dword [ebp - 0x88], 0xffffffe6
jmp 0x1002aa3d
mov dword [ebp - 0x348], 5
mov dword [ebp - 0x344], 5
mov dword [ebp - 0x340], 5
mov dword [ebp - 0x33c], 5
mov dword [ebp - 0xbc], 0x17
jmp 0x1002aa2e
mov eax, dword [ebp - 0x348]
imul eax, dword [ebp - 0x88]
push 1
mov dword [ebp - 0x38], eax
call fcn.1002689f
dec dword [ebp - 0xbc]
pop ecx
cmp dword [ebp - 0xbc], 0x14
jg 0x1002aa10
inc dword [ebp - 0x88]
cmp dword [ebp - 0x88], 0x16
jle 0x1002a9dc
dec dword [ebp - 0x48]
jmp 0x1002a8f3
mov ecx, dword [ebp - 0xc]
mov eax, 0x1027fe38
pop edi
pop esi
mov dword fs:[0], ecx
pop ebx
mov esp, ebp
pop ebp
ret