Function at 0x10033c21
Capabilities:
Extract resource via kernel32 functions
Query or enumerate registry key
Set thread local storage value
Terminate process

Disassembly:
mov eax, 0x1006337e
call fcn.10061a48
sub esp, 0x380
movdqa xmm0, xmmword [0x10070800]
lea eax, [ebp - 0x2e4]
push ebx
push esi
push edi
mov dword [ebp - 0x1c], 6
xor ebx, ebx
mov dword [ebp - 0x10], esp
push dword [ebp - 0x84]
mov dword [ebp - 0x40], 0xfffffff6
mov dword [ebp - 0x2c], 0x48abb75d
mov dword [ebp - 0x38], 0x5c22c920
push eax
mov dword [ebp - 0x28], 0x5e0e2bf3
lea eax, [ebp - 0x2f4]
mov dword [ebp - 0x24], 0x82ba8d7d
push eax
mov dword [ebp - 0xf8], ecx
lea ecx, [ebp - 0x15c]
mov dword [ebp - 0x48], 0xf21c9b6c
mov dword [ebp - 0x18], ebx
mov dword [ebp - 0x18], 0xfffffff9
push ebx
mov dword [ebp - 0x18c], edx
mov dword [ebp - 0x254], ebx
movdqu xmmword [ebp - 0x2f4], xmm0
mov dword [ebp - 0x15c], ebx
mov dword [ebp - 0x158], ebx
mov dword [ebp - 0x154], ebx
call fcn.10007962
mov dword [ebp - 0x30], 0x7a30
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x28]
dec dword [ebp - 0x30]
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0x30]
dec eax
je 0x10033cee
cmp dword [ebp - 0x38], ebx
je 0x10033cee
xor eax, eax
inc eax
jmp 0x10033cf0
mov eax, ebx
imul ecx, eax, 0x5fffa
xor edx, edx
mov eax, dword [ebp - 0x2c]
push 2
pop edi
cmp ecx, eax
mov eax, dword [ebp - 0x24]
mov esi, dword [ebp - 0x15c]
setg dl
xor ecx, ecx
cmp edx, edi
setg cl
sub eax, ecx
xor ecx, ecx
mov dword [ebp - 0x18], eax
mov eax, dword [ebp - 0x18]
add eax, dword [esi + 0xc]
cmp eax, 0x7777bab6
setne cl
cmp dword [ebp - 0x40], ecx
jg 0x10033d30
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0x28]
mov edx, dword [ebp - 0x15c]
xor eax, eax
cmp dword [edx + 4], ebx
setne al
mov dword [ebp - 0x18], eax
mov eax, dword [ebp - 0x18]
cmp edi, eax
sbb eax, eax
xor ecx, ecx
inc eax
cmp ecx, eax
sbb eax, eax
neg eax
sub eax, dword [ebp - 0x28]
je 0x10033d5c
mov eax, dword [ebp - 0x30]
mov eax, dword [ebp - 0x24]
xor ecx, ecx
mov eax, dword [ebp - 0x24]
cmp eax, dword [edx + 4]
setg cl
mov dword [ebp - 0x2c], ecx
lea ecx, [ebp - 0x15c]
mov eax, dword [ebp - 0x2c]
sub eax, 6
neg eax
sbb eax, eax
inc eax
mov dword [esi + 0xc], eax
call fcn.10004ee5
push dword [ebp - 0x84]
movdqa xmm0, xmmword [0x100707d0]
lea eax, [ebp - 0x304]
push eax
lea eax, [ebp - 0x314]
mov dword [ebp - 0x1c], 3
push eax
push ebx
lea ecx, [ebp - 0x1f8]
mov dword [ebp - 0x1f8], ebx
movdqu xmmword [ebp - 0x314], xmm0
mov dword [ebp - 0x1f4], ebx
mov dword [ebp - 0x1f0], ebx
call fcn.10007962
mov dword [ebp - 4], ebx
mov dword [ebp - 0x30], 0x2b96ce02
mov dword [ebp - 0x38], ebx
mov dword [ebp - 0x1c], 0xffffffeb
jmp 0x10033f00
mov dword [ebp - 0x18], 0xffffffff
mov dword [ebp - 0x18], 3
cmp dword [ebp - 0x18], ebx
jl 0x10033ef7
push dword [ebp - 0x84]
movdqa xmm0, xmmword [0x100707f0]
lea eax, [ebp - 0x2f4]
push eax
lea eax, [ebp - 0x304]
mov dword [ebp - 0x174], ebx
push eax
push ebx
lea ecx, [ebp - 0x174]
mov dword [ebp - 0x170], ebx
movdqu xmmword [ebp - 0x304], xmm0
mov dword [ebp - 0x16c], ebx
call fcn.10007962
mov esi, dword [ebp - 0x174]
push 3
pop eax
mov dword [esi + 8], ebx
mov dword [ebp - 0x2c], 1
mov dword [ebp - 0x2c], eax
cmp dword [ebp - 0x2c], ebx
jl 0x10033ed7
mov dword [ebp - 0x24], 0xfffffffe
mov dword [ebp - 0x24], ebx
jmp 0x10033e90
mov dword [ebp - 0x30], 0x19a80bfb
mov dword [ebp - 0x38], 1
mov dword [ebp - 0x30], eax
cmp dword [ebp - 0x30], ebx
jl 0x10033e8d
mov dword [ebp - 0x28], 0xffff
dec dword [ebp - 0x28]
dec dword [ebp - 0x30]
jns 0x10033e7e
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], eax
jle 0x10033e68
mov dword [ebp - 0x30], eax
cmp dword [ebp - 0x30], ebx
jl 0x10033ed2
mov byte [ebp - 0x1d], bl
cmp byte [ebp - 0x1d], 0
je 0x10033eb3
push 0x7ae
push ebx
push ebx
call dword [sym.imp.ADVAPI32.dll_OpenSCManagerW]
mov byte [ebp - 0x1d], bl
cmp byte [ebp - 0x1d], 0
je 0x10033eca
push ebx
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetWindowThreadProcessId]
dec dword [ebp - 0x30]
jns 0x10033e9d
push 3
pop eax
dec dword [ebp - 0x2c]
jns 0x10033e5c
inc dword [esi + 8]
cmp dword [esi + 8], eax
jle 0x10033e4d
lea ecx, [ebp - 0x174]
call fcn.10004ee5
dec dword [ebp - 0x18]
jns 0x10033dff
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x38], eax
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 0x11
jge 0x10033de8
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x1f8]
call fcn.10004ee5
mov dword [ebp - 0x38], 0x1656
cmp dword [ebp - 0x38], 0x744
jge 0x10034259
lea eax, [ebp - 0x80]
push eax
push 0x1006c13c
call fcn.1004b4b3
pop ecx
pop ecx
push dword [ebp - 0x80]
lea ecx, [ebp - 0x150]
call fcn.10032fb2
mov dword [ebp - 4], 1
mov edx, dword [ebp - 0x80]
test edx, edx
jle 0x10033f79
mov edi, dword [ebp - 0x150]
mov esi, ebx
push edi
push 0x1006c13c
call fcn.1004b4b3
mov edx, dword [ebp - 0x80]
inc esi
pop ecx
add edi, 4
pop ecx
cmp esi, edx
jl 0x10033f61
mov esi, dword [ebp - 0x150]
mov eax, ebx
mov edi, ebx
mov dword [ebp - 0xa0], eax
mov dword [ebp - 0x9c], edi
mov dword [ebp - 0x98], ebx
mov dword [ebp - 0x11c], ebx
mov dword [ebp - 0x118], ebx
mov dword [ebp - 0x114], ebx
mov dword [ebp - 0xbc], ebx
mov dword [ebp - 0xb8], ebx
mov dword [ebp - 0xb4], ebx
mov byte [ebp - 4], 4
mov ecx, ebx
mov dword [ebp - 0x74], ecx
test edx, edx
jle 0x10034025
mov edx, ebx
test ecx, ecx
jle 0x10033fda
mov eax, dword [esi + ecx*4]
cmp eax, dword [esi + ecx*4 - 4]
jne 0x10033fda
inc dword [edx - 4]
jmp 0x10034010
lea eax, [esi + ecx*4]
push eax
lea ecx, [ebp - 0xa0]
call fcn.10032ff7
lea eax, [ebp - 0x74]
push eax
lea ecx, [ebp - 0x11c]
call fcn.10032ff7
lea eax, [ebp - 0x74]
push eax
lea ecx, [ebp - 0xbc]
call fcn.10032ff7
mov ecx, dword [ebp - 0x74]
mov edx, dword [ebp - 0xb8]
inc ecx
mov dword [ebp - 0x74], ecx
cmp ecx, dword [ebp - 0x80]
jl 0x10033fc8
mov edi, dword [ebp - 0x9c]
mov eax, dword [ebp - 0xa0]
or dword [ebp - 0x2c], 0xffffffff
mov edx, ebx
mov esi, ebx
mov dword [ebp - 0x70], edx
mov dword [ebp - 0x6c], esi
mov dword [ebp - 0x68], ebx
sub edi, eax
mov byte [ebp - 4], 5
sar edi, 2
mov ecx, ebx
test edi, edi
je 0x10034172
mov dword [ebp - 0x28], ecx
test ecx, ecx
jle 0x10034085
mov ebx, dword [eax + ecx*4]
lea eax, [eax + ecx*4]
add eax, 0xfffffffc
mov dword [ebp - 0x30], eax
cmp ebx, dword [eax]
jg 0x1003407d
mov eax, dword [eax]
cdq
idiv ebx
test edx, edx
jne 0x1003407d
mov edx, dword [ebp - 0x28]
mov eax, dword [ebp - 0x30]
dec edx
sub eax, 4
mov dword [ebp - 0x28], edx
mov dword [ebp - 0x30], eax
test edx, edx
jg 0x1003405c
mov eax, dword [ebp - 0xa0]
xor ebx, ebx
lea edx, [ecx + 1]
mov dword [ebp - 0x38], edx
cmp edx, edi
jae 0x100340c2
mov ebx, dword [eax + ecx*4]
lea eax, [eax + ecx*4]
add eax, 4
mov dword [ebp - 0x1c], edx
mov dword [ebp - 0x30], eax
cmp ebx, dword [eax]
jg 0x100340c0
mov eax, dword [eax]
cdq
idiv ebx
test edx, edx
jne 0x100340c0
mov eax, dword [ebp - 0x30]
inc ecx
mov edx, dword [ebp - 0x1c]
add eax, 4
inc edx
mov dword [ebp - 0x30], eax
mov dword [ebp - 0x1c], edx
cmp edx, edi
jb 0x1003409e
xor ebx, ebx
mov eax, dword [ebp - 0x11c]
mov edx, dword [ebp - 0x28]
lea edx, [eax + edx*4]
mov eax, dword [ebp - 0xbc]
mov eax, dword [eax + ecx*4]
sub eax, dword [edx]
mov ecx, dword [ebp - 0x2c]
cmp eax, ecx
jle 0x10034149
push edx
push ecx
lea ecx, [ebp - 0xe8]
mov dword [ebp - 0x2c], eax
mov dword [ebp - 0xe8], ebx
mov dword [ebp - 0xe4], ebx
mov dword [ebp - 0xe0], ebx
call fcn.10035e3c
lea ecx, [ebp - 0x70]
call fcn.10004ee5
mov edx, dword [ebp - 0xe8]
mov esi, dword [ebp - 0xe4]
mov eax, dword [ebp - 0xe0]
mov byte [ebp - 0xad], bl
mov byte [ebp - 0xa1], bl
mov dword [ebp - 0x70], edx
mov dword [ebp - 0x6c], esi
mov dword [ebp - 0x68], eax
mov dword [ebp - 0xe8], ebx
mov dword [ebp - 0xe4], ebx
mov dword [ebp - 0xe0], ebx
mov byte [ebp - 4], 5
jmp 0x10034161
jne 0x1003415e
mov eax, dword [edx]
cmp dword [esi - 4], eax
jge 0x1003415e
push edx
lea ecx, [ebp - 0x70]
call fcn.10032ff7
mov esi, dword [ebp - 0x6c]
mov edx, dword [ebp - 0x70]
mov ecx, dword [ebp - 0x38]
mov eax, dword [ebp - 0xa0]
cmp ecx, edi
jb 0x10034049
push dword [ebp - 0x2c]
sub esi, edx
sar esi, 2
push esi
push str._ld__ld_n
call fcn.1004af7c
mov edi, dword [ebp - 0x70]
add esp, 0xc
mov dword [ebp - 0x38], ebx
test esi, esi
je 0x100341aa
mov eax, dword [edi + ebx*4]
inc eax
push eax
push str._ld
call fcn.1004af7c
inc ebx
pop ecx
pop ecx
cmp ebx, esi
jb 0x10034192
xor ebx, ebx
push 0x1006a935
call fcn.1004b73f
pop ecx
test edi, edi
je 0x100341c9
push edi
call fcn.1004b149
pop ecx
mov dword [ebp - 0x70], ebx
mov dword [ebp - 0x6c], ebx
mov dword [ebp - 0x68], ebx
mov eax, dword [ebp - 0xbc]
test eax, eax
je 0x100341ec
push eax
call fcn.1004b149
pop ecx
mov dword [ebp - 0xbc], ebx
mov dword [ebp - 0xb8], ebx
mov dword [ebp - 0xb4], ebx
mov eax, dword [ebp - 0x11c]
test eax, eax
je 0x1003420f
push eax
call fcn.1004b149
pop ecx
mov dword [ebp - 0x11c], ebx
mov dword [ebp - 0x118], ebx
mov dword [ebp - 0x114], ebx
mov eax, dword [ebp - 0xa0]
test eax, eax
je 0x10034232
push eax
call fcn.1004b149
pop ecx
mov dword [ebp - 0xa0], ebx
mov dword [ebp - 0x9c], ebx
mov dword [ebp - 0x98], ebx
or dword [ebp - 4], 0xffffffff
mov eax, dword [ebp - 0x150]
test eax, eax
je 0x10034259
push eax
call fcn.1004b149
pop ecx
mov dword [ebp - 0x150], ebx
mov dword [ebp - 0x14c], ebx
mov dword [ebp - 0x148], ebx
mov dword [ebp - 0x24], 0xfffffff6
push 2
mov dword [ebp - 0x28], 0x41fd9d08
mov dword [ebp - 0x1c], ebx
pop edx
jmp 0x10034280
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0x110], 0xf73838a1
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], edx
jl 0x1003426f
inc dword [ebp - 0x110]
xor ecx, ecx
mov dword [ebp - 0x24], ebx
inc ecx
jmp 0x1003432c
mov dword [ebp - 0x38], 0x7d96711d
mov dword [ebp - 0x1c], ebx
jmp 0x100342b3
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0x144], 0x80849f84
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], edx
jl 0x100342a2
mov dword [ebp - 0x140], ecx
cmp dword [ebp - 0x140], ebx
jl 0x10034329
mov dword [ebp - 0x1c], ebx
jmp 0x100342dc
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0x35c], 0x3d3b0cf5
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 3
jl 0x100342cb
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp + eax*4 - 0x110]
mov eax, dword [ebp - 0x110]
cmp dword [ebp - 0x110], ebx
je 0x100342fd
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x140]
xor ecx, ecx
mov edx, dword [ebp - 0x28]
sub edx, eax
mov eax, dword [ebp - 0x24]
cmp edx, eax
setne cl
mov dword [ebp - 0x354], ecx
xor ecx, ecx
inc ecx
mov dword [ebp - 0x38], ecx
dec dword [ebp - 0x140]
jns 0x100342c6
push 2
pop edx
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], ecx
jle 0x10034296
push 0x47
pop eax
mov byte [ebp - 0x88], cl
lea ecx, [ebp - 0x1a4]
mov byte [ebp - 0x8a], dl
mov word [ebp - 0x22c], ax
mov dword [ebp - 0x94], 0x25038800
mov dword [ebp - 0x90], 0x30060e05
mov word [ebp - 0x8c], 0x3d04
mov byte [ebp - 0x89], 0xe
mov byte [ebp - 0x87], 3
mov dword [ebp - 0x2c], 0x4a2a
push 3
call fcn.10004e62
xor eax, eax
mov dword [ebp - 4], 7
inc eax
lea ecx, [ebp - 0x130]
mov dword [ebp - 0x28], eax
push eax
call fcn.10004e62
mov byte [ebp - 4], 8
lea ecx, [ebp - 0x1c8]
mov dword [ebp - 0x1c], ebx
push 1
call fcn.10004e62
mov byte [ebp - 4], 9
mov dword [ebp - 0x30], 0x6221
mov dword [ebp - 0x40], 0x13999ea3
mov dword [ebp - 0x48], 0x3ecb
mov dword [ebp - 0x18], ebx
jmp 0x100343e8
mov ecx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x1a4]
mov dword [eax + ecx*4], 0x31d8
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 3
jl 0x100343d5
xor edx, edx
mov dword [ebp - 0x18], ebx
inc edx
jmp 0x10034406
mov ecx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x130]
or dword [eax + ecx*4], 0xffffffff
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], edx
jl 0x100343f6
mov dword [ebp - 0x18], ebx
jmp 0x10034423
mov ecx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x1c8]
mov dword [eax + ecx*4], 0xe402095d
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], edx
jl 0x10034410
mov dword [ebp - 0x18], ebx
jmp 0x1003443e
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x338], 0xf360
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 3
jl 0x1003442d
mov ecx, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x1a4]
mov dword [eax], ecx
test ecx, ecx
je 0x10034465
inc dword [ebp - 0x1c]
mov ecx, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x130]
cmp ecx, dword [eax]
mov eax, edx
jg 0x10034467
mov eax, ebx
xor ecx, ecx
cmp eax, edx
sete cl
sub ecx, dword [ebp - 0x28]
mov eax, dword [ebp - 0x130]
mov dword [eax], ecx
mov eax, dword [ebp - 0x1c8]
cmp dword [eax], ebx
je 0x100344f1
mov dword [ebp - 0x24], edx
xor edx, edx
mov dword [ebp - 0x28], 0x69bad970
mov eax, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0x24]
mov ecx, dword [ebp - 0x24]
mov eax, dword [ebp - 0x24]
cmp ecx, eax
push 2
setge dl
mov dword [ebp - 0x28], edx
cmp dword [ebp - 0x28], 1
mov eax, dword [ebp - 0x24]
sbb ecx, ecx
xor edx, edx
inc ecx
cmp ecx, eax
mov ecx, 0x241a59c3
mov eax, dword [ebp - 0x130]
setl dl
sub ecx, edx
xor edx, edx
pop edi
cmp ecx, dword [eax]
mov eax, dword [ebp - 0x2c]
setl dl
xor ecx, ecx
cmp edx, 0x72625aa9
setl cl
imul eax, ecx
xor ecx, ecx
cmp eax, 0xfd5d
setge cl
jmp 0x10034666
mov dword [ebp - 0x24], 0xffffffff
mov dword [ebp - 0x38], 0x3ae864ea
mov dword [ebp - 0x28], ebx
mov dword [ebp - 0x28], edx
mov dword [ebp - 0x18], ebx
jmp 0x1003451b
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x344], 0xfffffffc
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 3
jl 0x1003450a
mov dword [ebp - 0x30], 0x65c7
cmp dword [ebp - 0x30], 0x6723
jle 0x10034586
push ebx
call dword [sym.imp.KERNEL32.dll_LockResource]
mov esi, ebx
mov dword [ebp - 0x28], ebx
mov edi, esi
mov esi, 0x7f5b
mov eax, edi
lea ecx, [ebp - 0x388]
cdq
push edx
push eax
call fcn.10001a95
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x1003455e
mov eax, dword [eax]
push eax
call fcn.1004af7c
pop ecx
push ebx
push 1
lea ecx, [ebp - 0x388]
call fcn.10005365
dec edi
dec esi
jne 0x10034544
mov esi, dword [ebp - 0x28]
inc esi
mov dword [ebp - 0x28], esi
cmp esi, 0x7f1e
jl 0x1003453d
push 2
mov dword [ebp - 0x18], ebx
pop edi
jmp 0x1003459f
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x264], 8
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], edi
jl 0x1003458e
cmp dword [ebp - 0x30], 0x6217
jge 0x100345b8
push str.yyyifz_zjvjmlp_ztxwcngsi_tuilcw_thjnrar_xpqjxbu_xpfdjr_btyx_gpaipjiqj_lrtjuawzu_mpvjxqzf_iwp
call fcn.1004af7c
pop ecx
mov eax, dword [ebp - 0x1c]
xor edx, edx
mov eax, dword [ebp - 0x130]
mov eax, dword [eax]
mov dword [ebp - 0x30], eax
mov ecx, dword [ebp - 0x24]
mov eax, dword [ebp - 0x30]
cmp ecx, eax
mov eax, dword [ebp - 0x1c8]
setge dl
xor ecx, ecx
cmp edx, dword [eax]
setge cl
mov dword [ebp - 0x38], ecx
xor ecx, ecx
mov eax, dword [ebp - 0x40]
mov dword [ebp - 0x28], eax
mov eax, dword [ebp - 0x28]
mov dword [ebp - 0x28], eax
mov eax, dword [ebp - 0x28]
test eax, eax
setg cl
xor edx, edx
mov dword [ebp - 0x28], ecx
mov eax, dword [ebp - 0x28]
cmp eax, 0x38976cc2
setg dl
xor ecx, ecx
imul edx, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x24]
cmp eax, edx
mov eax, dword [ebp - 0x1c]
setge cl
xor edx, edx
cmp ecx, eax
mov eax, dword [ebp - 0x1a4]
setl dl
xor ecx, ecx
mov dword [ebp - 0x344], edx
cmp edx, dword [eax]
mov eax, dword [ebp - 0x24]
setle cl
mov dword [ebp - 0x38], ecx
xor ecx, ecx
cmp dword [ebp - 0x38], eax
setl cl
xor edx, edx
add ecx, dword [ebp - 0x24]
mov eax, dword [ebp - 0x334]
cmp ecx, eax
setg dl
xor ecx, ecx
mov dword [ebp - 0x260], edx
mov eax, dword [ebp - 0x48]
cmp edx, eax
sete cl
imul ecx, dword [ebp - 0x24]
mov eax, dword [ebp - 0x130]
mov dword [eax], ecx
lea ecx, [ebp - 0x1c8]
call fcn.10004ee5
lea ecx, [ebp - 0x130]
call fcn.10004ee5
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x1a4]
call fcn.10004ee5
mov esi, edi
mov dword [ebp - 0x1c], ebx
jmp 0x100346ab
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0x124], 0xcff0ea75
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], edi
jl 0x1003469a
mov dword [ebp - 0x120], 0xffffffe8
jmp 0x100346cf
mov byte [ebp - 0x1d], bl
cmp byte [ebp - 0x1d], 0
jne 0x100347d8
inc dword [ebp - 0x120]
cmp dword [ebp - 0x120], 0xfffffff3
jl 0x100346bc
movzx eax, byte [ebp + esi - 0x96]
movzx ecx, byte [ebp + esi - 0x93]
movzx edx, word [ebp + eax*2 - 0x22c]
mov eax, edx
and eax, ecx
add eax, eax
sub edx, eax
movzx eax, byte [ebp + esi - 0x94]
add edx, ecx
add esi, edi
mov word [ebp + eax*2 - 0x22c], dx
cmp esi, 0xe
jb 0x10034695
mov dword [ebp - 0x30], 0x506d
cmp dword [ebp - 0x30], 0x50b2
jle 0x1003477e
mov edi, ebx
mov dword [ebp - 0x2c], ebx
mov esi, ebx
mov eax, edi
mov dword [ebp - 0x38], ebx
cdq
mov edi, ebx
idiv esi
mov dword [ebp - 0x28], 0x58af
mov dword [ebp - 0x40], edx
mov dword [ebp - 0x38], ebx
mov ecx, ebx
mov eax, edi
sar eax, cl
mov ecx, 0x1007d9f8
cdq
push edx
push eax
call fcn.10004c38
inc ebx
cmp ebx, 0x42f4
jl 0x1003473f
add edi, dword [ebp - 0x40]
dec dword [ebp - 0x28]
push 0
pop ebx
jne 0x1003473c
mov edi, dword [ebp - 0x2c]
inc esi
cmp esi, 0x437d
jl 0x10034728
inc edi
mov dword [ebp - 0x2c], edi
cmp edi, 0x2f68
jl 0x10034726
mov dword [ebp - 0x38], 0x2435
cmp dword [ebp - 0x38], 0x6f1
jge 0x1003480d
lea eax, [ebp - 0x134]
push eax
push str._ld_n
call fcn.1004b4b3
cmp dword [ebp - 0x134], 0
mov esi, ebx
pop ecx
pop ecx
mov byte [ebp - 0x1d], 1
mov edi, ebx
jle 0x100347f5
lea eax, [ebp - 0x188]
push eax
push 0x1006c13c
call fcn.1004b4b3
pop ecx
pop ecx
mov ecx, dword [ebp - 0x188]
call fcn.10033be7
test esi, esi
jne 0x100347e3
mov esi, eax
jmp 0x100347e7
push 0xbbc
call dword [sym.imp.KERNEL32.dll_ExitProcess]
cmp eax, esi
jne 0x100347f2
inc edi
cmp edi, dword [ebp - 0x134]
jl 0x100347b2
jmp 0x100347f5
mov byte [ebp - 0x1d], bl
cmp byte [ebp - 0x1d], 0
mov ecx, 0x1006e570
mov eax, 0x1006e56c
cmove eax, ecx
push eax
call fcn.1004b73f
pop ecx
mov dword [ebp - 4], 0xc
cmp dword [ebp - 0x30], 0x4e76
jge 0x1003482c
mov edx, str.qhimcu_kke_poxu_ecwa_avzor_qvowckvxq_fmrcerl_gislvz_brwmnolkb_qhdyuslv_biwt_lfyhzjt_utcze
mov ecx, 0x1007d9f8
call fcn.100070aa
or dword [ebp - 4], 0xffffffff
mov dword [ebp - 0x2c], 0x6e60b0c
lea ecx, [ebp - 0x1d4]
mov dword [ebp - 0x38], 0x82ca9683
push 2
mov dword [ebp - 0x24], ebx
mov dword [ebp - 0x48], 4
pop edi
mov dword [ebp - 0x30], 0xfffffffb
mov dword [ebp - 0x1c], 4
mov dword [ebp - 0x30], 0xb8e136dc
push edi
call fcn.10004e62
mov dword [ebp - 4], 0xe
mov dword [ebp - 0x28], ebx
mov dword [ebp - 0x40], ebx
mov dword [ebp - 0x18], ebx
jmp 0x100348b1
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x178], 0xfffffff9
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 1
jl 0x100348a0
mov dword [ebp - 0x18], ebx
jmp 0x100348cf
mov ecx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x1d4]
mov dword [eax + ecx*4], 0xc4365dea
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], edi
jl 0x100348bc
mov dword [ebp - 0x18], ebx
jmp 0x100348ea
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x278], 1
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 3
jl 0x100348d9
mov eax, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x2c]
dec dword [ebp - 0x28]
jne 0x1003491f
mov eax, dword [ebp - 0x38]
xor ecx, ecx
mov edx, dword [ebp - 0x1d4]
cmp eax, 0x3e2e1665
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x40]
setl cl
sub ecx, dword [edx + 4]
neg ecx
sbb ecx, ecx
inc ecx
mov dword [edx + 4], ecx
mov eax, dword [ebp - 0x48]
mov ecx, dword [ebp - 0x24]
mov eax, dword [ebp - 0x274]
neg ecx
sbb ecx, ecx
neg ecx
imul ecx, eax
cmp dword [ebp - 0x2c], ecx
jl 0x10034942
cmp dword [ebp - 0x48], ebx
jne 0x10034942
mov ecx, ebx
jmp 0x10034945
xor ecx, ecx
inc ecx
xor eax, eax
cmp ecx, 0x1448
setne al
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x30]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x1c]
dec eax
neg eax
sbb eax, eax
inc eax
cmp eax, dword [ebp - 0x24]
jle 0x10034a0a
mov byte [ebp - 0x1d], bl
mov dword [ebp - 0x48], 0x552a
cmp dword [ebp - 0x48], 0x5666
jle 0x100349aa
mov esi, ebx
mov edi, ebx
mov ebx, 0x822
mov eax, edi
mov ecx, 0x1007d9f8
cdq
push edx
push eax
call fcn.10004c38
add edi, esi
dec ebx
jne 0x1003498a
inc esi
cmp esi, 0x1782
jl 0x10034983
push 2
pop edi
cmp byte [ebp - 0x1d], 0
je 0x100349c1
push 0x663
push 0x542
push ebx
call dword [sym.imp.GDI32.dll_OffsetRgn]
mov byte [ebp - 4], 0xf
cmp dword [ebp - 0x48], 0x538a
jge 0x10034ae7
mov edx, str.zhln_ltcadzw_zxmzw_fslsud_bbusf_oyuu
mov ecx, 0x1007d9f8
call fcn.100070aa
jmp 0x10034ae7
mov dword [ebp - 0x2c], 0x18a8
mov dword [ebp - 0x48], 0x1916dc91
mov dword [ebp - 0x1c], ebx
jmp 0x10034a2a
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0x350], ebx
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 3
jl 0x10034a1d
mov dword [ebp - 0x24], ebx
cmp dword [ebp - 0x24], 0xffffffe5
jg 0x10034ade
mov esi, dword [ebp - 0x1d4]
mov dword [ebp - 0x18], 0x485e09b7
xor edx, edx
mov eax, dword [ebp - 0x2c]
imul eax, dword [ebp - 0x24]
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x18]
mov eax, dword [esi + 4]
mov dword [ebp - 0x30], eax
mov eax, dword [ebp - 0x30]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x28]
mov dword [ebp - 0x48], 0xffffffff
mov eax, dword [ebp - 0x48]
cmp eax, 0xffffffff
mov eax, dword [ebp - 0x40]
setne dl
add edx, 0xca64a9b1
neg edx
sbb edx, edx
xor ecx, ecx
inc edx
cmp edx, dword [esi + 4]
setle cl
xor edx, edx
cmp ecx, eax
mov eax, dword [ebp - 0x2c]
setl dl
xor ecx, ecx
cmp edx, eax
setge cl
xor edx, edx
imul ecx, dword [ebp - 0x18]
mov dword [ebp - 0x30], ecx
mov ecx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x30]
cmp ecx, eax
mov eax, dword [ebp - 0x178]
setge dl
imul edx, eax
mov eax, dword [ebp - 0x18]
imul eax, edx
imul eax, eax, 7
mov dword [ebp - 0x348], eax
dec dword [ebp - 0x24]
cmp dword [ebp - 0x24], 0xffffffe5
jle 0x10034a43
mov eax, dword [ebp - 0x274]
mov dword [ebp - 0x38], eax
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x1d4]
call fcn.10004ee5
xor eax, eax
mov word [ebp - 0x21e], ax
mov dword [ebp - 0x28], 0x20624039
mov dword [ebp - 0x28], 0xfffffffc
cmp dword [ebp - 0x28], 0xfffffff2
jge 0x100351b9
mov dword [ebp - 0x24], 0xc0f8067e
mov dword [ebp - 0x38], 1
mov dword [ebp - 0x38], 0xde9ab5c2
mov dword [ebp - 0x1c], ebx
jmp 0x10034b42
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0x364], 0xff55e00f
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], edi
jl 0x10034b31
mov dword [ebp - 0x24], ebx
cmp dword [ebp - 0x24], 1
jg 0x100351b1
mov dword [ebp - 0x30], 0x79c4185a
mov dword [ebp - 0x38], 0xd0176df7
mov dword [ebp - 0x38], 0xd0f065f4
mov dword [ebp - 0x30], 1
cmp dword [ebp - 0x30], ebx
jl 0x10035193
push edi
lea ecx, [ebp - 0x1b0]
call fcn.10004e62
mov dword [ebp - 4], 0x11
lea ecx, [ebp - 0x290]
mov dword [ebp - 0x38], 0x643b8a27
push 4
call fcn.10004e62
mov byte [ebp - 4], 0x12
mov dword [ebp - 0x18], ebx
jmp 0x10034bbc
mov ecx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x1b0]
mov dword [eax + ecx*4], 1
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], edi
jl 0x10034ba9
mov dword [ebp - 0x18], ebx
jmp 0x10034bd9
mov ecx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x290]
mov dword [eax + ecx*4], 0x6a0b5978
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 4
jl 0x10034bc6
mov eax, dword [ebp - 0x1b0]
mov dword [eax], 1
cmp dword [eax], ebx
jl 0x10035159
mov dword [ebp - 0x38], 0xb9193c1d
mov dword [ebp - 0x38], 0x667f5aee
mov dword [ebp - 0x38], 0x4151c8b9
mov dword [ebp - 0x18], 0xffffffff
mov dword [ebp - 0x38], 0x60f2
cmp dword [ebp - 0x38], 0x62ef
jle 0x10034c5a
push ebx
push ebx
push ebx
push ebx
push ebx
push ebx
push 0x160b
push ebx
call dword [sym.imp.ADVAPI32.dll_RegEnumKeyExW]
mov esi, ebx
mov edi, ebx
mov ecx, edi
mov eax, esi
sar eax, cl
mov ecx, 0x1007d9f8
cdq
push edx
push eax
call fcn.10004c38
inc edi
cmp edi, 0xaca
jl 0x10034c35
inc esi
cmp esi, 0x300b
jl 0x10034c33
mov byte [ebp - 4], 0x13
cmp dword [ebp - 0x38], 0x6010
jge 0x10034c97
mov edx, str.ymkxnfc_ivb_thorsrzc_jwpsbffm_qjauok_kuavqvnqd_nphneqnr
mov ecx, 0x1007d9f8
call fcn.100070aa
jmp 0x10034c97
mov dword [ebp - 4], 0x12
mov dword [ebp - 0x1c], ebx
jmp 0x10034cb4
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0x1e0], 0xfffffff7
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 3
jl 0x10034ca3
mov dword [ebp - 0x1e0], ebx
cmp dword [ebp - 0x1e0], 1
jg 0x1003514c
mov dword [ebp - 0x2c], 0xd2f38d9
mov dword [ebp - 0x38], 0xdffbe584
mov dword [ebp - 0x38], 4
mov dword [ebp - 0x38], 0xfffffff6
mov dword [ebp - 0x1c], 0x407
cmp dword [ebp - 0x1c], 0x6e5
jle 0x10034d53
push ebx
call dword [sym.imp.OLEAUT32.dll_VariantClear]
mov edi, ebx
mov eax, edi
mov dword [ebp - 0x48], 0x455d
mov dword [ebp - 0x2c], eax
mov esi, ebx
add eax, esi
mov dword [ebp - 0x40], 0x23a
mov dword [ebp - 0x38], eax
cdq
mov ecx, 0x1007d9f8
push edx
push eax
call fcn.10004c38
mov eax, dword [ebp - 0x38]
dec eax
dec dword [ebp - 0x40]
mov dword [ebp - 0x38], eax
jne 0x10034d1c
mov eax, dword [ebp - 0x2c]
inc esi
cmp esi, 0x5b45
jl 0x10034d10
dec eax
dec dword [ebp - 0x48]
mov dword [ebp - 0x2c], eax
jne 0x10034d0e
inc edi
cmp edi, 0x1c1b
jl 0x10034d02
mov dword [ebp - 0x2c], 1
cmp dword [ebp - 0x2c], ebx
jl 0x10034d67
inc dword [ebp - 0x18]
dec dword [ebp - 0x2c]
jns 0x10034d5f
mov byte [ebp - 4], 0x15
cmp dword [ebp - 0x1c], 0x25e
jge 0x1003513a
mov dword [ebp - 0x38], 0x17fd
cmp dword [ebp - 0x38], 0x78d
jge 0x1003510a
lea eax, [ebp - 0x7c]
xorps xmm0, xmm0
push eax
lea eax, [ebp - 0xc4]
movlpd qword [ebp - 0x5c], xmm0
push eax
lea eax, [ebp - 0x5c]
movlpd qword [ebp - 0xc4], xmm0
push eax
push str._lld__lld__lld_n
movlpd qword [ebp - 0x7c], xmm0
call fcn.1004b4b3
mov eax, dword [ebp - 0x5c]
lea ecx, [ebp - 0x25c]
add esp, 0x10
mov dword [ebp - 0xd0], ebx
inc eax
mov dword [ebp - 0xcc], ebx
xorps xmm0, xmm0
mov dword [ebp - 0xc8], ebx
movlpd qword [ebp - 0x25c], xmm0
push ecx
push eax
lea ecx, [ebp - 0xd0]
call fcn.10035e61
xor esi, esi
mov byte [ebp - 4], 0x16
mov edi, ebx
inc esi
cmp edi, dword [ebp - 0x58]
jg 0x10034e28
jge 0x10034e23
mov eax, dword [ebp - 0xd0]
lea eax, [eax + esi*8]
push eax
push str._lld
call fcn.1004b4b3
add esi, 1
pop ecx
adc edi, ebx
pop ecx
cmp edi, dword [ebp - 0x58]
jl 0x10034e01
jg 0x10034e28
cmp esi, dword [ebp - 0x5c]
jbe 0x10034e01
push 0x1006d06c
call fcn.1004b4b3
pop ecx
lea eax, [ebp - 0x2b4]
mov dword [ebp - 0xdc], ebx
push eax
xorps xmm0, xmm0
mov dword [ebp - 0xd8], ebx
push 3
lea ecx, [ebp - 0xdc]
movlpd qword [ebp - 0x2b4], xmm0
mov dword [ebp - 0xd4], ebx
call fcn.10035e61
mov byte [ebp - 4], 0x17
lea ecx, [ebp - 0xdc]
mov eax, dword [ebp - 0xc4]
push ecx
inc eax
mov dword [ebp - 0x168], ebx
push eax
lea ecx, [ebp - 0x168]
mov dword [ebp - 0x164], ebx
mov dword [ebp - 0x160], ebx
call fcn.10035ea3
mov byte [ebp - 4], 0x19
cmp dword [ebp - 0xdc], 0
je 0x10034ebf
push dword [ebp - 0xdc]
call fcn.1004b149
pop ecx
mov dword [ebp - 0xdc], ebx
mov dword [ebp - 0xd8], ebx
mov dword [ebp - 0xd4], ebx
xor esi, esi
mov edi, ebx
inc esi
cmp edi, dword [ebp - 0xc0]
jg 0x10034f07
jge 0x10034eff
mov ecx, dword [ebp - 0x168]
imul eax, esi, 0xc
mov ecx, dword [eax + ecx]
lea eax, [ecx + 0x10]
push eax
lea eax, [ecx + 8]
push eax
push ecx
push str._lld__lld__lld_n
call fcn.1004b4b3
add esp, 0x10
add esi, 1
adc edi, ebx
cmp edi, dword [ebp - 0xc0]
jl 0x10034ece
jg 0x10034f07
cmp esi, dword [ebp - 0xc4]
jbe 0x10034ece
mov eax, dword [ebp - 0x5c]
lea ecx, [ebp - 0x26c]
push ecx
inc eax
mov dword [ebp - 0xf4], ebx
xorps xmm0, xmm0
mov dword [ebp - 0xf0], ebx
push eax
lea ecx, [ebp - 0xf4]
movlpd qword [ebp - 0x26c], xmm0
mov dword [ebp - 0xec], ebx
call fcn.10035e61
mov esi, dword [ebp - 0xf4]
mov ecx, dword [ebp - 0x7c]
xorps xmm0, xmm0
mov edx, dword [ebp - 0x78]
mov eax, ecx
or eax, edx
je 0x10035026
lea eax, [ebp - 0x13c]
movlpd qword [ebp - 0x184], xmm0
push eax
add ecx, 0xffffffff
movlpd qword [ebp - 0x13c], xmm0
lea eax, [ebp - 0x184]
mov dword [ebp - 0x7c], ecx
push eax
adc edx, 0xffffffff
push str._lld__lld_n
mov dword [ebp - 0x78], edx
call fcn.1004b4b3
mov ecx, dword [ebp - 0x180]
add esp, 0xc
mov eax, dword [ebp - 0x184]
mov dword [ebp - 0x48], eax
mov dword [ebp - 0x2c], ecx
cmp ecx, dword [ebp - 0x138]
jg 0x10034f41
jge 0x10035019
mov ecx, dword [ebp - 0x168]
imul eax, eax, 0xc
mov ecx, dword [eax + ecx]
mov eax, dword [ecx + 4]
mov esi, dword [ecx + 0x10]
mov edx, dword [ecx]
mov edi, dword [ecx + 8]
mov dword [ebp - 0x38], eax
mov eax, dword [ecx + 0xc]
mov ecx, dword [ecx + 0x14]
mov dword [ebp - 0x38], esi
mov esi, dword [ebp - 0xf4]
mov dword [ebp - 0x40], ecx
mov ecx, dword [ebp - 0x38]
add dword [esi + edx*8], ecx
mov ecx, dword [ebp - 0x40]
adc dword [esi + edx*8 + 4], ecx
mov ecx, dword [ebp - 0x38]
cmp eax, dword [ebp - 0x58]
jg 0x10034ffa
jl 0x10034fef
cmp edi, dword [ebp - 0x5c]
jae 0x10034ffa
sub dword [esi + edi*8 + 8], ecx
mov eax, dword [ebp - 0x40]
sbb dword [esi + edi*8 + 0xc], eax
mov eax, dword [ebp - 0x48]
mov ecx, dword [ebp - 0x2c]
add eax, 1
mov dword [ebp - 0x48], eax
adc ecx, ebx
mov dword [ebp - 0x2c], ecx
cmp ecx, dword [ebp - 0x138]
jl 0x10034fa7
jg 0x10034f41
cmp eax, dword [ebp - 0x13c]
jbe 0x10034fa7
jmp 0x10034f41
add ecx, 0xffffffff
movlpd qword [ebp - 0x4c], xmm0
mov dword [ebp - 0x7c], ecx
adc edx, 0xffffffff
mov dword [ebp - 0x38], 1
mov dword [ebp - 0x78], edx
cmp dword [ebp - 0x58], ebx
jl 0x100350b0
jg 0x1003504b
cmp dword [ebp - 0x5c], 1
jb 0x100350b0
mov ecx, dword [ebp - 0xd0]
mov eax, esi
mov edx, dword [ebp - 0x48]
sub eax, ecx
mov dword [ebp - 0x40], eax
lea edi, [ecx + 8]
mov ecx, dword [ebp - 0x4c]
add ecx, dword [eax + edi]
mov dword [ebp - 0x2c], ecx
adc edx, dword [eax + edi + 4]
mov ecx, dword [edi]
add ecx, dword [ebp - 0x2c]
mov eax, dword [edi + 4]
adc eax, edx
mov dword [ebp - 0x48], edx
push eax
push ecx
push str._lld
call fcn.1004af7c
mov eax, dword [ebp - 0x38]
lea edi, [edi + 8]
mov ecx, dword [ebp - 0x2c]
add esp, 0xc
inc eax
mov dword [ebp - 0x38], eax
cdq
cmp edx, dword [ebp - 0x58]
mov edx, dword [ebp - 0x48]
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x40]
jl 0x10035061
jg 0x100350b0
mov eax, dword [ebp - 0x1c]
cmp eax, dword [ebp - 0x5c]
mov eax, dword [ebp - 0x40]
jbe 0x10035061
push 0x1006a935
call fcn.1004b73f
pop ecx
test esi, esi
je 0x100350d8
push esi
call fcn.1004b149
pop ecx
mov dword [ebp - 0xf4], ebx
mov dword [ebp - 0xf0], ebx
mov dword [ebp - 0xec], ebx
lea ecx, [ebp - 0x168]
call fcn.10035f45
mov byte [ebp - 4], 0x15
mov eax, dword [ebp - 0xd0]
test eax, eax
je 0x1003510a
push eax
call fcn.1004b149
pop ecx
mov dword [ebp - 0xd0], ebx
mov dword [ebp - 0xcc], ebx
mov dword [ebp - 0xc8], ebx
mov edx, str.ejme_fawxef_ozp
mov ecx, 0x1007d9f8
call fcn.100070aa
jmp 0x1003513a
mov dword [ebp - 4], 0x12
inc dword [ebp - 0x1e0]
jmp 0x10034cc0
mov eax, dword [ebp - 0x1b0]
dec dword [eax]
jmp 0x10034beb
mov byte [ebp - 0x1d], bl
cmp byte [ebp - 0x1d], 0
je 0x1003516e
push ebx
push 0x10bc
call dword [sym.imp.KERNEL32.dll_TlsSetValue]
lea ecx, [ebp - 0x290]
call fcn.10004ee5
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x1b0]
call fcn.10004ee5
dec dword [ebp - 0x30]
push 2
pop edi
jmp 0x10034b70
mov byte [ebp - 0x1d], bl
cmp byte [ebp - 0x1d], 0
je 0x100351a9
push ebx
push ebx
push 0xee6
call dword [sym.imp.KERNEL32.dll_GetModuleHandleExW]
inc dword [ebp - 0x24]
jmp 0x10034b4a
dec dword [ebp - 0x28]
jmp 0x10034b0d
xor eax, eax
mov dword [ebp - 0x294], 7
mov word [ebp - 0x2a8], ax
lea ecx, [ebp - 0x2a8]
lea eax, [ebp - 0x22c]
mov dword [ebp - 0x298], ebx
push eax
call fcn.100053a9
push 3
lea ecx, [ebp - 0x284]
mov dword [ebp - 4], 0x1b
call fcn.10004e62
push edi
lea ecx, [ebp - 0x244]
mov byte [ebp - 4], 0x1c
call fcn.10004e62
mov byte [ebp - 4], 0x1d
mov dword [ebp - 0x24], 0xc5416513
mov dword [ebp - 0x18], ebx
jmp 0x1003522b
mov ecx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x284]
mov dword [eax + ecx*4], 0xae9714a
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 3
jl 0x10035218
mov dword [ebp - 0x18], ebx
jmp 0x10035249
mov ecx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x244]
mov dword [eax + ecx*4], 9
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], edi
jl 0x10035236
mov eax, dword [ebp - 0x244]
mov dword [eax], ebx
inc dword [eax]
mov dword [ebp - 0x24], 0xe5c7a00f
cmp dword [eax], edi
jle 0x10035256
mov dword [ebp - 0x24], 0xa
jmp 0x100352ae
push edi
lea ecx, [ebp - 0x1bc]
call fcn.10004e62
mov dword [ebp - 0x1c], ebx
jmp 0x10035290
mov ecx, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x1bc]
mov dword [eax + ecx*4], 0x9a57b5bf
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], edi
jl 0x1003527d
mov eax, dword [ebp - 0x1bc]
lea ecx, [ebp - 0x1bc]
cmp dword [eax + 4], ebx
jne 0x100352b6
call fcn.10004ee5
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], 0x1c
jg 0x1003526c
jmp 0x100352bb
call fcn.10004ee5
lea ecx, [ebp - 0x244]
call fcn.10004ee5
lea ecx, [ebp - 0x284]
mov byte [ebp - 4], 0x1b
call fcn.10004ee5
mov esi, ebx
push 4
lea ecx, [ebp - 0x250]
call fcn.10004e62
mov dword [ebp - 0x1c], ebx
mov dword [ebp - 0x1c], ebx
jmp 0x100352fc
mov ecx, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x250]
or dword [eax + ecx*4], 0xffffffff
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 4
jl 0x100352ec
mov dword [ebp - 0x1c], ebx
jmp 0x1003532b
mov byte [ebp - 0x1d], bl
cmp byte [ebp - 0x1d], 0
je 0x10035328
push 0x2583
push ebx
push 0x1eaa
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDlgItemTextW]
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 3
jle 0x10035307
lea ecx, [ebp - 0x250]
call fcn.10004ee5
xor eax, eax
mov word [ebp + esi*2 - 0x22c], ax
inc esi
cmp esi, 8
jb 0x100352d7
push dword [ebp - 0x18c]
lea ecx, [ebp - 0x2e4]
call fcn.10007e3c
mov byte [ebp - 4], 0x1e
mov dword [ebp - 0x18], 0x38462751
mov dword [ebp - 0x28], ebx
mov dword [ebp - 0x2c], 0xfffffff7
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x28], 1
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x2c], eax
cmp dword [ebp - 0x2c], ebx
je 0x10035399
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x18]
mov byte [ebp - 0x1d], bl
cmp byte [ebp - 0x1d], 0
je 0x100353c3
push ebx
push ebx
push ebx
push ebx
push ebx
push ebx
push ebx
push ebx
push ebx
push ebx
push ebx
push ebx
call dword [sym.imp.ADVAPI32.dll_RegQueryInfoKeyW]
push 3
lea ecx, [ebp - 0x1ec]
mov byte [ebp - 0xa8], bl
mov byte [ebp - 0xa7], 0xa8
call fcn.10004e62
xor edx, edx
mov dword [ebp - 0x24], ebx
inc edx
mov dword [ebp - 0x28], edx
mov dword [ebp - 0x18], ebx
jmp 0x100353fe
mov ecx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x1ec]
mov dword [eax + ecx*4], 0xb9b55bb2
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 3
jl 0x100353eb
mov dword [ebp - 0x18], ebx
jmp 0x1003541a
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x84], 0xaafbebf0
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], edx
jl 0x10035409
mov dword [ebp - 0x24], ebx
cmp dword [ebp - 0x24], edi
jg 0x10035497
mov esi, dword [ebp - 0x1ec]
mov dword [ebp - 0x18], 0xce4b0ad8
mov ecx, dword [ebp - 0x24]
mov eax, dword [ebp - 0x1ec]
mov edx, dword [esi + 8]
mov dword [eax + ecx*4], edx
xor ecx, ecx
mov dword [ebp - 0x28], edx
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x28]
cmp eax, 0x7b30
setne cl
xor eax, eax
cmp ecx, 0x8d20
setne al
imul eax, dword [ebp - 0x18]
cmp eax, 0xd3bed162
mov eax, dword [ebp - 0x18]
sbb edx, edx
xor ecx, ecx
inc edx
cmp edx, eax
setl cl
mov dword [ebp - 0x84], ecx
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], edi
jle 0x1003542d
lea ecx, [ebp - 0x1ec]
call fcn.10004ee5
push 0x5c
pop eax
mov word [ebp - 0xac], ax
mov dword [ebp - 0x38], 0x5eba
cmp dword [ebp - 0x38], 0x604d
jle 0x10035513
push ebx
push 0x127c
push 0x22ab
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_SetViewportExtEx]
mov esi, ebx
mov edi, ebx
mov eax, edi
mov ecx, 0x1007d9f8
and eax, esi
cdq
push edx
push eax
call fcn.10004c38
inc edi
cmp edi, 0x3d98
jl 0x100354df
inc esi
cmp esi, 0x6401
jl 0x100354dd
push 0x663
push 0x542
push ebx
call dword [sym.imp.GDI32.dll_OffsetRgn]
xor eax, eax
mov byte [ebp - 4], 0x1f
cmp dword [ebp - 0x38], 0x5e99
mov word [ebp - 0xaa], ax
jge 0x10035559
mov edx, str.crmcbbm_mcdhgif_clcpi_nev_vyfzj_nffqaev_ucdihmk_xponcr_hncnfjtzg
mov ecx, 0x1007d9f8
call fcn.100070aa
jmp 0x10035559
xor ecx, ecx
mov dword [ebp - 4], 0x1e
inc ecx
mov dword [ebp - 0x18], ebx
jmp 0x10035572
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x50], ecx
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], ecx
jl 0x10035568
mov dword [ebp - 0x18], ebx
jmp 0x1003558a
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x54], 0x251d69f4
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], ecx
jl 0x1003557c
mov dword [ebp - 0x50], ebx
jmp 0x100355d4
mov dword [ebp - 0x24], ecx
mov dword [ebp - 0x24], ebx
jmp 0x100355aa
mov eax, dword [ebp - 0x24]
mov dword [ebp + eax*4 - 0x54], 0x91f782a1
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], ecx
jl 0x1003559c
mov byte [ebp - 0x1d], bl
cmp byte [ebp - 0x1d], 0
je 0x100355d1
push ebx
push ebx
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_PlayEnhMetaFile]
xor ecx, ecx
inc ecx
dec dword [ebp - 0x50]
cmp dword [ebp - 0x50], 0xfffffffc
je 0x10035594
mov eax, dword [ebp - 0x50]
mov edx, dword [ebp - 0x54]
mov eax, dword [ebp - 0x54]
sub edx, 0xaa2d
neg edx
sbb edx, edx
xor ecx, ecx
inc edx
cmp edx, eax
mov eax, dword [ebp - 0x54]
setge cl
xor edx, edx
cmp ecx, eax
mov eax, dword [ebp - 0x54]
sete dl
xor ecx, ecx
cmp edx, eax
mov eax, dword [ebp - 0x50]
mov edx, dword [ebp - 0x50]
setg cl
mov dword [ebp - 0x38], ecx
xor ecx, ecx
cmp eax, dword [ebp - 0x38]
mov eax, dword [ebp - 0x54]
setl cl
neg eax
add edx, ecx
xor ecx, ecx
neg edx
cmp eax, edx
setg cl
imul eax, ecx, 0xfff8
lea ecx, [ebp - 0x21c]
add eax, dword [ebp - 0x54]
mov dword [ebp - 0x50], eax
xor eax, eax
mov word [ebp - 0x21c], ax
lea eax, [ebp - 0xac]
push eax
mov dword [ebp - 0x208], 7
mov dword [ebp - 0x20c], ebx
call fcn.100053a9
push 0x5f
pop eax
mov byte [ebp - 4], 0x21
mov ecx, ebx
push 2
pop edx
mov dword [ebp - 0xac], ebx
mov esi, edx
mov byte [ebp - 0x60], bl
mov word [ebp - 0x5f], 0x139
mov byte [ebp - 0x5d], 0x19
mov word [ebp - 0x64], ax
cmp esi, edx
jne 0x10035690
mov ecx, edx
mov esi, edx
jmp 0x100356bc
movzx edx, byte [ebp + esi - 0x5f]
mov eax, esi
sub eax, ecx
push 2
movzx eax, byte [ebp + eax - 0x62]
movzx ecx, word [ebp + eax*2 - 0x64]
mov eax, ecx
and eax, edx
add eax, eax
sub ecx, eax
movzx eax, byte [ebp + esi - 0x60]
add ecx, edx
pop edx
mov word [ebp + eax*2 - 0x64], cx
mov ecx, ebx
add esi, edx
cmp esi, 4
jb 0x10035686
xor eax, eax
mov word [ebp - 0x62], ax
mov dword [ebp - 0x24], 0xfffffff6
mov dword [ebp - 0x38], 0x41fd9d08
mov dword [ebp - 0x1c], ebx
jmp 0x100356ed
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0x100], 0xf73838a1
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], edx
jl 0x100356dc
inc dword [ebp - 0x100]
xor ecx, ecx
mov dword [ebp - 0x24], ebx
inc ecx
jmp 0x10035799
mov dword [ebp - 0x40], 0x7d96711d
mov dword [ebp - 0x1c], ebx
jmp 0x10035720
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0x108], 0x80849f84
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], edx
jl 0x1003570f
mov dword [ebp - 0x104], ecx
cmp dword [ebp - 0x104], ebx
jl 0x10035796
mov dword [ebp - 0x1c], ebx
jmp 0x10035749
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0x320], 0x3d3b0cf5
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 3
jl 0x10035738
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp + eax*4 - 0x100]
mov eax, dword [ebp - 0x100]
cmp dword [ebp - 0x100], ebx
je 0x1003576a
mov eax, dword [ebp - 0x38]
mov edx, dword [ebp - 0x38]
xor ecx, ecx
mov eax, dword [ebp - 0x104]
sub edx, eax
mov eax, dword [ebp - 0x24]
cmp edx, eax
setne cl
mov dword [ebp - 0x318], ecx
xor ecx, ecx
inc ecx
mov dword [ebp - 0x40], ecx
dec dword [ebp - 0x104]
jns 0x10035733
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], ecx
jle 0x10035703
xor eax, eax
mov dword [ebp - 0x2b8], 7
mov word [ebp - 0x2cc], ax
lea ecx, [ebp - 0x2cc]
lea eax, [ebp - 0x64]
mov dword [ebp - 0x2bc], ebx
push eax
call fcn.100053a9
mov byte [ebp - 4], 0x22
lea ecx, [ebp - 0x198]
mov dword [ebp - 0x64], ebx
mov dword [ebp - 0x18], 0x42a4
mov dword [ebp - 0x28], 1
push 3
call fcn.10004e62
mov byte [ebp - 4], 0x23
mov dword [ebp - 0x38], 3
mov dword [ebp - 0x1c], ebx
jmp 0x1003580c
mov ecx, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x198]
or dword [eax + ecx*4], 0xffffffff
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 3
jl 0x100357fc
mov ecx, dword [ebp - 0x28]
xor edx, edx
mov eax, dword [ebp - 0x18]
cmp ecx, eax
mov eax, dword [ebp - 0x28]
setl dl
xor ecx, ecx
cmp edx, eax
mov eax, dword [ebp - 0x198]
setle cl
xor edx, edx
cmp ecx, dword [eax]
setne dl
xor ecx, ecx
add edx, dword [eax + 4]
mov eax, dword [ebp - 0x18]
cmp eax, edx
mov eax, dword [ebp - 0x198]
setl cl
sub ecx, dword [eax + 8]
neg ecx
sbb ecx, ecx
xor eax, eax
inc ecx
cmp ecx, 0xffffffff
setg al
xor edx, edx
imul ecx, eax, 0x79cc
mov eax, dword [ebp - 0x28]
cmp eax, ecx
mov eax, dword [ebp - 0x198]
setle dl
xor ecx, ecx
cmp edx, 0x18e50348
setle cl
imul ecx, dword [eax]
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x38], ecx
xor ecx, ecx
cmp dword [ebp - 0x38], eax
setge cl
xor eax, eax
cmp ecx, 8
setge al
add eax, dword [ebp - 0x18]
add eax, dword [ebp - 0x18]
mov dword [ebp - 0x38], eax
mov dword [ebp - 0x18], 0xf
cmp dword [ebp - 0x18], 0xfffffff9
jne 0x100359b3