Function at 0x10006f9b
Capabilities:
Accept command line arguments
Allocate thread local storage
Encrypt data using speck
Query environment variable

Disassembly:
mov eax, 0x1006091d
call fcn.100600a0
sub esp, 0x3b0
push ebx
xor ebx, ebx
mov dword [ebp - 0x30], edx
mov dword [ebp - 0x24], ebx
push esi
mov byte [ebp - 0x19], bl
push edi
mov dword [ebp - 0x10], esp
mov dword [ebp - 0x54], ecx
mov dword [ebp - 0x1d8], ebx
cmp byte [ebp - 0x19], bl
je 0x10006fe6
push 0x52f
push 0x23d5
push ebx
push ebx
push 0x19fe
push 0x253a
call dword [sym.imp.USER32.dll_ToUnicode]
mov dword [ebp - 0x24], ebx
jmp 0x10007001
mov byte [ebp - 0x19], bl
cmp byte [ebp - 0x19], bl
je 0x10006ffe
push 0x1006
call dword [sym.imp.KERNEL32.dll_SetErrorMode]
dec dword [ebp - 0x24]
cmp dword [ebp - 0x24], 0xffffffe2
jg 0x10006feb
mov dword [ebp - 0x18], 0x32fe2236
mov dword [ebp - 0x40], 0xf7a7
mov dword [ebp - 0x24], ebx
jmp 0x1000702b
mov eax, dword [ebp - 0x24]
mov dword [ebp + eax*4 - 0x230], 3
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], 4
jl 0x1000701a
mov dword [ebp - 0x18], 3
cmp dword [ebp - 0x18], ebx
jl 0x10007057
mov ecx, dword [ebp - 0x230]
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x230], ecx
cmp dword [ebp - 0x18], ebx
jne 0x10007057
dec dword [ebp - 0x18]
jns 0x1000703d
mov dword [ebp - 0x64], 0xd02bd03
mov dword [ebp - 0x60], 0xd050e04
mov dword [ebp - 0x5c], 0x15201
mov dword [ebp - 0x58], 0x1b062b00
mov dword [ebp - 0x2c], 0x5995
cmp dword [ebp - 0x2c], 0x5b5a
jle 0x100070e8
call dword [sym.imp.KERNEL32.dll_GetACP]
mov esi, ebx
mov dword [ebp - 0x28], ebx
mov dword [ebp - 0x34], esi
mov dword [ebp - 0x3c], 0x1cb6
mov edi, ebx
lea eax, [esi + edi]
cdq
lea ecx, [ebp - 0x2c0]
push edx
push eax
call fcn.10001a85
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x100070b5
mov eax, dword [eax]
push eax
call fcn.10049603
pop ecx
push ebx
push 1
lea ecx, [ebp - 0x2c0]
call fcn.100048ea
inc edi
cmp edi, 0x1a6b
jl 0x1000709a
dec esi
dec dword [ebp - 0x3c]
jne 0x10007098
mov esi, dword [ebp - 0x28]
inc esi
mov dword [ebp - 0x28], esi
cmp esi, 0x1cfc
jl 0x1000708e
cmp dword [ebp - 0x2c], 0x565a
push 0x62
pop eax
mov word [ebp - 0x16e], ax
jge 0x10007106
push str.wfak_lkorkwtyi_ddtk_vbipoe_xjzvgjn_hmbtcvde_ceshp_jaaozwn_zmeae_cxe_tnghyl_purvoepd_abarnud
call fcn.10049603
pop ecx
or dword [ebp - 4], 0xffffffff
mov esi, ebx
push 2
pop edi
cmp edi, 8
jne 0x1000711c
push 2
pop esi
jmp 0x1000742e
mov dword [ebp - 0x18], 0x485bf25c
mov dword [ebp - 0x20], 0xc32b96ce
cmp dword [ebp - 0x18], ebx
jne 0x10007132
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x20]
sub ecx, dword [ebp - 0x20]
mov eax, dword [ebp - 0x20]
neg ecx
sbb ecx, ecx
xor edx, edx
neg ecx
cmp ecx, eax
sete dl
xor ecx, ecx
imul edx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x20]
cmp edx, eax
setle cl
cmp ecx, dword [ebp - 0x20]
mov byte [ebp - 0x19], bl
jne 0x1000717f
cmp byte [ebp - 0x19], 0
je 0x1000718b
push ebx
push ebx
push 0x1428
call dword [sym.imp.USER32.dll_SetPropA]
jmp 0x1000718b
cmp byte [ebp - 0x19], 0
je 0x1000718b
call dword [sym.imp.KERNEL32.dll_GetCommandLineA]
movzx edx, byte [ebp + edi - 0x63]
mov eax, edi
sub eax, esi
push 4
movzx eax, byte [ebp + eax - 0x66]
movzx eax, word [ebp + eax*2 - 0x174]
mov ecx, eax
and eax, edx
or ecx, edx
sub ecx, eax
movzx eax, byte [ebp + edi - 0x64]
mov word [ebp + eax*2 - 0x174], cx
lea ecx, [ebp - 0xb4]
call fcn.10004595
mov dword [ebp - 4], 2
lea ecx, [ebp - 0xe8]
mov dword [ebp - 0x18], 1
push 0xfffffffffffffff6
mov dword [ebp - 0x40], 0x64f16efa
pop esi
mov dword [ebp - 0x40], ebx
mov dword [ebp - 0x34], esi
mov dword [ebp - 0x44], 0xed890fc5
mov dword [ebp - 0x40], 0xfffffffa
push 1
call fcn.10004595
mov byte [ebp - 4], 3
lea ecx, [ebp - 0xdc]
mov dword [ebp - 0x28], 0x10caad90
push 1
call fcn.10004595
mov byte [ebp - 4], 4
mov dword [ebp - 0x20], ebx
jmp 0x1000722c
mov ecx, dword [ebp - 0x20]
mov eax, dword [ebp - 0xb4]
mov dword [eax + ecx*4], esi
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], 4
jl 0x1000721d
mov dword [ebp - 0x20], ebx
jmp 0x1000724a
mov ecx, dword [ebp - 0x20]
mov eax, dword [ebp - 0xe8]
mov dword [eax + ecx*4], 0x8e356ec7
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], 1
jl 0x10007237
mov dword [ebp - 0x20], ebx
jmp 0x10007268
mov ecx, dword [ebp - 0x20]
mov eax, dword [ebp - 0xdc]
mov dword [eax + ecx*4], 8
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], 1
jl 0x10007255
mov dword [ebp - 0x18], 3
cmp dword [ebp - 0x18], ebx
jl 0x100073b3
mov dword [ebp - 0x3c], 0x9f7f
lea ecx, [ebp - 0x11c]
mov dword [ebp - 0x38], 0x37182abb
mov dword [ebp - 0x40], ebx
mov dword [ebp - 0x2c], 0xd585ed06
mov dword [ebp - 0x40], 0xdad5a519
mov dword [ebp - 0x40], 9
mov dword [ebp - 0x40], 0xfffffff8
push 1
call fcn.10004595
mov dword [ebp - 0x34], 0xc280563a
mov dword [ebp - 0x24], ebx
jmp 0x100072d3
mov ecx, dword [ebp - 0x24]
mov eax, dword [ebp - 0x11c]
mov dword [eax + ecx*4], esi
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], 1
jl 0x100072c4
dec dword [ebp - 0x3c]
mov edx, dword [ebp - 0x18]
mov eax, dword [ebp - 0xb4]
mov ecx, dword [ebp - 0x28]
mov dword [ebp - 0x3c], 1
mov eax, dword [eax + edx*4]
inc dword [ebp - 0x28]
cmp eax, ecx
jg 0x100072fc
mov dword [ebp - 0x3c], ebx
mov eax, dword [ebp - 0x18]
xor edx, edx
mov ecx, dword [ebp - 0xb4]
mov esi, dword [ebp - 0x18]
cmp dword [ecx + eax*4], 0xd538
mov eax, dword [ecx]
setne dl
xor ecx, ecx
sub eax, edx
sub eax, 7
cmp eax, 0x44688d23
mov eax, dword [ebp - 0xdc]
setge cl
mov dword [eax], ecx
mov eax, dword [ebp - 0xe8]
mov edx, dword [eax]
mov eax, dword [ebp - 0x34]
add eax, ecx
sub eax, edx
neg eax
sbb eax, eax
xor ecx, ecx
inc eax
cmp eax, 0x7b6c411e
mov eax, dword [ebp - 0xb4]
setge cl
sub ecx, edx
neg ecx
sbb ecx, ecx
xor edx, edx
inc ecx
sub ecx, dword [eax + esi*4]
mov eax, dword [ebp - 0x44]
cmp ecx, eax
mov eax, dword [ebp - 0x38]
setl dl
xor ecx, ecx
cmp edx, eax
setl cl
mov dword [ebp - 0x2c], ecx
xor ecx, ecx
mov eax, dword [ebp - 0x2c]
cmp dword [ebp - 0x3c], eax
setge cl
cmp dword [ebp - 0x11c], 0
mov dword [ebp - 0x34], ecx
je 0x100073a7
push dword [ebp - 0x11c]
call fcn.100497d9
pop ecx
mov dword [ebp - 0x11c], ebx
mov dword [ebp - 0x118], ebx
mov dword [ebp - 0x114], ebx
dec dword [ebp - 0x18]
push 0xfffffffffffffff6
pop esi
jns 0x1000727e
cmp dword [ebp - 0xdc], 0
je 0x100073da
push dword [ebp - 0xdc]
call fcn.100497d9
pop ecx
mov dword [ebp - 0xdc], ebx
mov dword [ebp - 0xd8], ebx
mov dword [ebp - 0xd4], ebx
cmp dword [ebp - 0xe8], 0
je 0x10007401
push dword [ebp - 0xe8]
call fcn.100497d9
pop ecx
mov dword [ebp - 0xe8], ebx
mov dword [ebp - 0xe4], ebx
mov dword [ebp - 0xe0], ebx
or dword [ebp - 4], 0xffffffff
cmp dword [ebp - 0xb4], 0
je 0x1000742c
push dword [ebp - 0xb4]
call fcn.100497d9
pop ecx
mov dword [ebp - 0xb4], ebx
mov dword [ebp - 0xb0], ebx
mov dword [ebp - 0xac], ebx
mov esi, ebx
add edi, 2
cmp edi, 0x10
jb 0x1000710f
xor eax, eax
mov dword [ebp - 0x1c0], 7
mov word [ebp - 0x166], ax
lea ecx, [ebp - 0x1d4]
mov word [ebp - 0x1d4], ax
lea eax, [ebp - 0x174]
push eax
mov dword [ebp - 0x1c4], ebx
call fcn.1000936f
push dword [ebp - 0x30]
mov dword [ebp - 4], 5
lea edi, [ebp - 0x174]
xor eax, eax
lea ecx, [ebp - 0x220]
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
call fcn.100043f8
mov byte [ebp - 4], 6
xor edi, edi
mov dword [ebp - 0x20], ebx
inc edi
mov dword [ebp - 0x18], 0xfafe44fa
mov dword [ebp - 0x20], 0xfffffff6
cmp dword [ebp - 0x20], 0x10
jge 0x100075df
push 2
lea ecx, [ebp - 0x128]
call fcn.10004595
mov byte [ebp - 4], 7
mov dword [ebp - 0x2c], 0x7ac7
cmp dword [ebp - 0x2c], 0x7b7a
jle 0x10007520
mov esi, ebx
mov eax, ebx
mov dword [ebp - 0x28], 0x11c2
mov dword [ebp - 0x3c], eax
cdq
lea ecx, [ebp - 0x290]
push edx
push eax
call fcn.10001a85
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x100074f6
mov eax, dword [eax]
push eax
call fcn.10049603
pop ecx
push ebx
push edi
lea ecx, [ebp - 0x290]
call fcn.100048ea
mov eax, dword [ebp - 0x3c]
add eax, esi
dec dword [ebp - 0x28]
mov dword [ebp - 0x3c], eax
jne 0x100074de
inc esi
cmp esi, 0x2690
jl 0x100074d2
mov dword [ebp - 0x18], ebx
jmp 0x10007538
mov ecx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x128]
mov dword [eax + ecx*4], 0xfffffffb
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 2
jl 0x10007525
cmp dword [ebp - 0x2c], 0x78e8
jge 0x10007552
push str.gxtmje_jkanfx_zelyomj
call fcn.10049603
pop ecx
mov dword [ebp - 4], 7
mov dword [ebp - 0x18], ebx
jmp 0x1000756f
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x14c], 0x45acee61
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], edi
jl 0x1000755e
mov edx, dword [ebp - 0x128]
mov dword [edx + 4], 0xb
mov dword [ebp - 0x30], ebx
cmp dword [ebp - 0x20], ebx
je 0x10007596
mov eax, dword [ebp - 0x20]
mov esi, edi
mov eax, dword [ebp - 0x30]
cmp dword [ebp - 0x30], ebx
jne 0x10007598
mov esi, ebx
mov eax, dword [ebp - 0x30]
xor ecx, ecx
cmp esi, eax
mov eax, dword [ebp - 0x30]
sete cl
add ecx, dword [edx + 4]
add eax, ecx
dec dword [edx + 4]
mov dword [ebp - 0x14c], eax
jne 0x10007581
mov byte [ebp - 4], 6
push dword [ebp - 0x128]
call fcn.100497d9
mov dword [ebp - 0x128], ebx
mov dword [ebp - 0x124], ebx
mov dword [ebp - 0x120], ebx
inc dword [ebp - 0x20]
pop ecx
jmp 0x100074a5
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], ebx
je 0x10007690
push 3
lea ecx, [ebp - 0x100]
call fcn.10004595
mov dword [ebp - 0x24], ebx
jmp 0x10007613
mov ecx, dword [ebp - 0x24]
mov eax, dword [ebp - 0x100]
mov dword [eax + ecx*4], 0xd7c869b7
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], 3
jl 0x10007600
mov dword [ebp - 0x20], ebx
cmp dword [ebp - 0x20], 0xfffffff9
jl 0x10007660
mov esi, dword [ebp - 0x100]
mov dword [ebp - 0x3c], 2
mov dword [ebp - 0x34], edi
mov edx, dword [ebp - 0x34]
mov eax, dword [esi + 8]
neg edx
mov dword [ebp - 0x3c], eax
mov eax, dword [esi + 8]
sbb edx, edx
add eax, dword [esi + 4]
xor ecx, ecx
neg edx
cmp edx, eax
mov eax, dword [ebp - 0x3c]
setne cl
imul eax, ecx
mov dword [ebp - 0x18], eax
dec dword [ebp - 0x20]
cmp dword [ebp - 0x20], 0xfffffff9
jge 0x10007628
cmp dword [ebp - 0x100], 0
je 0x10007825
push dword [ebp - 0x100]
call fcn.100497d9
pop ecx
mov dword [ebp - 0x100], ebx
mov dword [ebp - 0xfc], ebx
mov dword [ebp - 0xf8], ebx
jmp 0x10007825
mov dword [ebp - 0x2c], 0xc5c6a81d
mov dword [ebp - 0x38], 0xffffffff
mov dword [ebp - 0x3c], 0xcbf698ba
mov dword [ebp - 0x24], ebx
jmp 0x100076bb
mov eax, dword [ebp - 0x24]
mov dword [ebp + eax*4 - 0x144], 0x762969fb
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], edi
jl 0x100076aa
mov dword [ebp - 0x18], 0xffffffe9
cmp dword [ebp - 0x18], 0xffffffe5
mov eax, 0x86c7a88f
je 0x100077c2
mov dword [ebp - 0x40], ebx
mov dword [ebp - 0x1e8], eax
mov dword [ebp - 0x1e4], eax
mov dword [ebp - 0x1e0], eax
mov dword [ebp - 0x1dc], eax
mov dword [ebp - 0x24], 0x7a1c
cmp dword [ebp - 0x24], 0x7c2c
jle 0x1000779c
mov ecx, ebx
mov dword [ebp - 0x30], ebx
mov eax, ebx
mov dword [ebp - 0x28], ebx
mov esi, ebx
mov dword [ebp - 0x3c], ebx
add eax, ecx
mov dword [ebp - 0x34], ebx
mov ecx, esi
mov esi, ebx
shl eax, cl
mov dword [ebp - 0x44], eax
mov ecx, esi
shl eax, cl
lea ecx, [ebp - 0x320]
cdq
push edx
push eax
call fcn.10001a85
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x1000773e
mov eax, dword [eax]
push eax
call fcn.10049603
pop ecx
push ebx
push edi
lea ecx, [ebp - 0x320]
call fcn.100048ea
mov eax, dword [ebp - 0x44]
inc esi
cmp esi, 0x4c27
jl 0x10007722
mov esi, dword [ebp - 0x3c]
mov eax, dword [ebp - 0x28]
inc esi
mov ecx, dword [ebp - 0x30]
mov dword [ebp - 0x3c], esi
cmp esi, 0x23cd
jl 0x10007714
inc eax
mov dword [ebp - 0x28], eax
cmp eax, 0x5f4
jl 0x1000770f
inc ecx
mov dword [ebp - 0x30], ecx
cmp ecx, 0x68e6
jl 0x1000770a
push 0x1d13
push ebx
push 0x1f51
push ebx
call dword [sym.imp.KERNEL32.dll_SetFilePointer]
dec dword [ebp - 0x38]
cmp dword [ebp - 0x24], 0x788f
jge 0x100077b3
push str.hmjzvpqc_pba_lgslksy_mxuyarky_rclvhh_kmrukbwsa_agk_bbeuxp_zeaqirx_iktexw
call fcn.10049603
pop ecx
mov dword [ebp - 4], 6
dec dword [ebp - 0x18]
jmp 0x100076c7
mov eax, dword [ebp - 0x20]
xor edx, edx
mov eax, dword [ebp - 0x20]
cmp eax, 0xc0e8
mov eax, dword [ebp - 0x20]
setge dl
xor ecx, ecx
cmp edx, eax
setne cl
sub ecx, dword [ebp - 0x2c]
imul eax, ecx, 0xf41a
mov ecx, dword [ebp - 0x2c]
sub ecx, eax
neg ecx
sbb ecx, ecx
inc ecx
mov dword [ebp - 0x3c], ecx
mov ecx, dword [ebp - 0x3c]
mov eax, dword [ebp - 0x144]
sub ecx, 0x2a49e864
neg ecx
sbb ecx, ecx
xor edx, edx
inc ecx
add eax, ecx
mov ecx, dword [ebp - 0x18]
imul ecx, eax
mov eax, dword [ebp - 0x2c]
cmp eax, ecx
mov eax, dword [ebp - 0x2c]
setg dl
xor ecx, ecx
cmp edx, eax
setne cl
mov dword [ebp - 0x18], ecx
mov dword [ebp - 0x30], 0x74d5
cmp dword [ebp - 0x30], 0x75ac
jle 0x1000789d
mov dword [ebp - 0x28], ebx
mov dword [ebp - 0x38], ebx
mov esi, ebx
mov ebx, dword [ebp - 0x38]
mov dword [ebp - 0x2c], esi
mov ecx, esi
mov dword [ebp - 0x3c], 0x5811
mov esi, dword [ebp - 0x28]
mov dword [ebp - 0x38], ecx
mov eax, ebx
shl eax, cl
mov ecx, 0x1007bb98
and eax, esi
cdq
push edx
push eax
call fcn.100042e3
mov ecx, dword [ebp - 0x38]
dec ecx
dec dword [ebp - 0x3c]
mov dword [ebp - 0x38], ecx
jne 0x10007852
mov esi, dword [ebp - 0x2c]
inc esi
mov dword [ebp - 0x2c], esi
cmp esi, 0x76dd
jl 0x10007843
inc ebx
push 0
mov dword [ebp - 0x38], ebx
cmp ebx, 0x77bd
pop ebx
jl 0x1000783b
mov eax, dword [ebp - 0x28]
inc eax
mov dword [ebp - 0x28], eax
cmp eax, 0x39cc
jl 0x10007838
mov byte [ebp - 4], 0xc
cmp dword [ebp - 0x30], 0x72fa
jge 0x100078da
mov edx, str.zhzk_wncdwkas_vxbyn_zoo_spebfkj_osxlvb_gfpvh_gegrk_pud_ihu_riccpz_qwzn_qlitghx_qkpdqxddv
mov ecx, 0x1007bb98
call fcn.100067dc
jmp 0x100078da
push 3
lea ecx, [ebp - 0x140]
mov dword [ebp - 4], 6
call fcn.10004595
mov byte [ebp - 4], 0xe
push 3
mov dword [ebp - 0x38], ebx
mov dword [ebp - 0x18], ebx
pop edx
jmp 0x1000790a
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x208], edi
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], edx
jl 0x100078fd
mov dword [ebp - 0x18], ebx
jmp 0x10007927
mov ecx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x140]
mov dword [eax + ecx*4], 0x9dada439
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], edx
jl 0x10007914
mov esi, dword [ebp - 0x140]
mov dword [ebp - 0x2c], esi
mov dword [esi + 4], 2
mov dword [ebp - 0x110], 0xffffffff
mov dword [ebp - 0x10c], 0xffffffff
mov dword [ebp - 0x108], 0xffffffff
mov dword [ebp - 0x104], 0xffffffff
mov dword [ebp - 0x38], ebx
mov dword [ebp - 0x34], edi
mov byte [ebp - 0x19], bl
cmp byte [ebp - 0x19], 0
je 0x1000797b
push ebx
push ebx
call dword [sym.imp.GDI32.dll_RectInRegion]
mov dword [ebp - 0x104], ebx
jmp 0x10007ba1
push dword [ebp - 0x54]
movdqa xmm0, xmmword [0x1006f170]
lea eax, [ebp - 0x250]
push eax
lea eax, [ebp - 0x260]
mov dword [ebp - 0x20], 0xffffffff
push eax
push ebx
lea ecx, [ebp - 0x9c]
mov dword [ebp - 0x9c], ebx
movdqu xmmword [ebp - 0x260], xmm0
mov dword [ebp - 0x98], ebx
mov dword [ebp - 0x94], ebx
call fcn.10006d4a
mov byte [ebp - 4], 0xf
mov dword [ebp - 0x44], 0xa7c6dd3e
mov dword [ebp - 0x20], ebx
jmp 0x10007b66
mov dword [ebp - 0x18], edi
mov dword [ebp - 0x18], 2
cmp dword [ebp - 0x18], ebx
jl 0x10007b5d
push dword [ebp - 0x54]
movdqa xmm0, xmmword [0x1006f1e0]
lea eax, [ebp - 0x240]
push eax
lea eax, [ebp - 0x250]
mov dword [ebp - 0x70], ebx
push eax
push ebx
lea ecx, [ebp - 0x70]
mov dword [ebp - 0x6c], ebx
movdqu xmmword [ebp - 0x250], xmm0
mov dword [ebp - 0x68], ebx
call fcn.10006d4a
mov byte [ebp - 4], 0x10
mov eax, dword [ebp - 0x104]
cmp dword [ebp + eax*4 - 0x208], ebx
jne 0x10007b3e
mov esi, dword [ebp - 0x70]
mov eax, dword [ebp - 0x9c]
mov dword [ebp - 0x34], eax
mov dword [esi + 0xc], ebx
push edi
lea ecx, [ebp - 0xd0]
call fcn.10004595
mov dword [ebp - 0x24], ebx
jmp 0x10007a6f
mov ecx, dword [ebp - 0x24]
mov eax, dword [ebp - 0xd0]
mov dword [eax + ecx*4], 0x13bf58aa
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], edi
jl 0x10007a5c
mov eax, dword [ebp - 0x2c]
xor edx, edx
cmp dword [eax + 4], 0xffffffff
mov eax, dword [ebp - 0x18]
setl dl
xor ecx, ecx
cmp eax, edx
mov eax, dword [ebp - 0x34]
setg cl
mov dword [eax + 0xc], ecx
xor ecx, ecx
mov eax, dword [ebp - 0xd0]
cmp dword [eax], 0x2fa8
setge cl
xor edx, edx
mov dword [ebp - 0x38], ecx
mov ecx, dword [ebp - 0x38]
mov eax, dword [ebp - 0xd0]
cmp ecx, dword [eax]
setg dl
mov dword [ebp - 0x38], edx
mov eax, dword [ebp - 0x38]
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x208]
neg ecx
sbb ecx, ecx
xor eax, eax
neg ecx
neg ecx
cmp ecx, 0x1ea0
setge al
mov dword [ebp - 0x44], eax
mov byte [ebp - 0x19], bl
cmp byte [ebp - 0x19], 0
je 0x10007af2
push 0x1ea7
push 0xeae
call dword [sym.imp.GDI32.dll_RestoreDC]
push dword [ebp - 0xd0]
call fcn.100497d9
inc dword [esi + 0xc]
cmp dword [esi + 0xc], 2
pop ecx
mov dword [ebp - 0xd0], ebx
mov dword [ebp - 0xcc], ebx
mov dword [ebp - 0xc8], ebx
jle 0x10007a4b
mov byte [ebp - 4], 0xf
push dword [ebp - 0x70]
call fcn.100497d9
mov dword [ebp - 0x70], ebx
mov dword [ebp - 0x6c], ebx
mov dword [ebp - 0x68], ebx
dec dword [ebp - 0x18]
pop ecx
jns 0x100079f2
jmp 0x10007b5a
mov byte [ebp - 4], 0xf
cmp dword [ebp - 0x70], 0
je 0x10007b5a
push dword [ebp - 0x70]
call fcn.100497d9
pop ecx
mov dword [ebp - 0x70], ebx
mov dword [ebp - 0x6c], ebx
mov dword [ebp - 0x68], ebx
mov esi, dword [ebp - 0x2c]
mov eax, dword [esi + 4]
mov dword [ebp - 0x34], eax
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], 2
jle 0x100079df
mov byte [ebp - 4], 0xe
cmp dword [ebp - 0x9c], 0
je 0x10007b9b
push dword [ebp - 0x9c]
call fcn.100497d9
pop ecx
mov dword [ebp - 0x9c], ebx
mov dword [ebp - 0x98], ebx
mov dword [ebp - 0x94], ebx
inc dword [ebp - 0x104]
cmp dword [ebp - 0x104], 2
jle 0x10007986
dec dword [esi + 4]
jns 0x1000793c
mov byte [ebp - 4], 6
push dword [ebp - 0x140]
call fcn.100497d9
pop ecx
push 3
lea ecx, [ebp - 0xf4]
mov dword [ebp - 0x140], ebx
mov dword [ebp - 0x13c], ebx
mov dword [ebp - 0x138], ebx
call fcn.10004595
mov dword [ebp - 0x24], ebx
jmp 0x10007bfe
mov ecx, dword [ebp - 0x24]
mov eax, dword [ebp - 0xf4]
mov dword [eax + ecx*4], 0xea5d6c05
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], 3
jl 0x10007beb
mov eax, dword [ebp - 0xf4]
mov dword [eax + 4], ebx
mov dword [ebp - 0x24], 0xeede0b40
mov dword [ebp - 0x24], ebx
cmp dword [ebp - 0x24], 0xa
je 0x10007c31
mov ecx, dword [ebp - 0xf4]
cmp dword [ecx + 8], ebx
jne 0x10007c31
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], 0xa
jne 0x10007c23
inc dword [eax + 4]
cmp dword [eax + 4], 0x1d
jl 0x10007c0d
push dword [ebp - 0xf4]
call fcn.100497d9
pop ecx
push 2
lea ecx, [ebp - 0x134]
mov dword [ebp - 0xf4], ebx
mov dword [ebp - 0xf0], ebx
mov dword [ebp - 0xec], ebx
mov byte [ebp - 0x48], bl
mov byte [ebp - 0x47], 0xb3
call fcn.10004595
mov dword [ebp - 0x28], 0xfffffffe
push 2
mov dword [ebp - 0x34], 0x12a3cc92
mov dword [ebp - 0x18], ebx
pop edx
jmp 0x10007c95
mov ecx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x134]
mov dword [eax + ecx*4], 0x76e6bacd
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], edx
jl 0x10007c82
mov dword [ebp - 0x18], ebx
jmp 0x10007cb0
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x1fc], 0x79cf1813
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], edx
jl 0x10007c9f
mov eax, dword [ebp - 0x134]
mov ecx, 0xcbd94543
mov dword [eax], ecx
xor eax, eax
mov dword [ebp - 0x1f8], ecx
mov ecx, dword [ebp - 0x28]
sub ecx, dword [ebp - 0x28]
sub ecx, dword [ebp - 0x28]
push dword [ebp - 0x134]
cmp ecx, edi
setl al
mov dword [ebp - 0x34], eax
call fcn.100497d9
pop ecx
push 0x5c
pop eax
mov dword [ebp - 0x134], ebx
mov dword [ebp - 0x130], ebx
mov dword [ebp - 0x12c], ebx
mov word [ebp - 0x4c], ax
mov dword [ebp - 0x34], 0x1d98
cmp dword [ebp - 0x34], 0x1ffe
mov dword [ebp - 0x40], str.jovrj_xgf_nzmi_jzxyknwzn_nyifykd_cvfeufes_ojerxy_kvkqq
jle 0x10007d9f
mov eax, ebx
mov dword [ebp - 0x28], ebx
mov ecx, ebx
mov dword [ebp - 0x30], ebx
cdq
mov esi, ebx
idiv ecx
mov eax, edx
mov dword [ebp - 0x2c], eax
mov ecx, ebx
mov dword [ebp - 0x3c], 0x6c4f
mov dword [ebp - 0x38], ecx
sar eax, cl
lea ecx, [ebp - 0x2f0]
cdq
push edx
push eax
call fcn.10001a85
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x10007d55
mov eax, dword [eax]
push eax
call fcn.10049603
pop ecx
push ebx
push edi
lea ecx, [ebp - 0x2f0]
call fcn.100048ea
mov ecx, dword [ebp - 0x38]
mov eax, dword [ebp - 0x2c]
add ecx, esi
dec dword [ebp - 0x3c]
mov dword [ebp - 0x38], ecx
jne 0x10007d3b
inc esi
cmp esi, 0xcb7
jl 0x10007d2f
mov ecx, dword [ebp - 0x30]
mov eax, dword [ebp - 0x28]
inc ecx
mov dword [ebp - 0x30], ecx
cmp ecx, 0x5143
jl 0x10007d25
inc eax
mov dword [ebp - 0x28], eax
cmp eax, 0x3e2a
jl 0x10007d20
push 2
mov edi, ebx
pop esi
mov dword [ebp - 0x44], edi
mov dword [ebp - 0x30], esi
cmp esi, 2
jae 0x10008368
mov dword [ebp - 0x20], 0xfffffffb
mov dword [ebp - 0x38], 0x142b930e
mov dword [ebp - 0x24], ebx
jmp 0x10007dd7
mov eax, dword [ebp - 0x24]
mov dword [ebp + eax*4 - 0x88], 0xfffffffd
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], 3
jl 0x10007dc6
cmp dword [ebp - 0x20], ebx
jne 0x10007e22
mov eax, dword [ebp - 0x20]
xor edx, edx
cmp eax, 0x9b2e
mov eax, dword [ebp - 0x20]
setne dl
xor ecx, ecx
cmp edx, eax
setg cl
add ecx, dword [ebp - 0x20]
je 0x10007e08
cmp dword [ebp - 0x20], ebx
je 0x10007e08
xor eax, eax
inc eax
jmp 0x10007e0a
mov eax, ebx
push 5
pop ecx
cmp ecx, eax
sbb eax, eax
add eax, 0xfffffffb
neg eax
sbb eax, eax
inc eax
cmp eax, dword [ebp - 0x20]
jle 0x10007e22
mov eax, ebx
jmp 0x10007e25
xor eax, eax
inc eax
neg eax
jne 0x10007e2e
cmp dword [ebp - 0x20], ebx
je 0x10007e38
cmp dword [ebp - 0x20], ebx
je 0x10007e38
xor edx, edx
inc edx
jmp 0x10007e3a
mov edx, ebx
mov eax, dword [ebp - 0x20]
xor ecx, ecx
cmp edx, eax
setne cl
mov dword [ebp - 0x84], ecx
test ecx, ecx
jne 0x10007e5a
cmp dword [ebp - 0x88], ebx
jne 0x10007e5a
mov edx, ebx
jmp 0x10007e5d
xor edx, edx
inc edx
mov eax, dword [ebp - 0x20]
xor ecx, ecx
cmp edx, eax
setg cl
cmp ecx, dword [ebp - 0x20]
jl 0x10007e76
cmp dword [ebp - 0x80], ebx
je 0x10007e76
xor eax, eax
inc eax
jmp 0x10007e78
mov eax, ebx
cmp dword [ebp - 0x20], eax
je 0x10007fb4
mov dword [ebp - 0x38], 0xd1649bc0
mov dword [ebp - 0x18], 0xfffffffb
mov eax, dword [ebp - 0x38]
dec eax
mov dword [ebp - 0x18], eax
mov eax, dword [ebp - 0x18]
cmp dword [ebp - 0x20], eax
jge 0x10007eb6
mov eax, dword [ebp - 0x80]
mov dword [ebp - 0x18], eax
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x84], 1
jmp 0x1000833b
mov dword [ebp - 0x20], 0xffffffed
cmp dword [ebp - 0x20], 0xfffffff9
jg 0x10008335
mov dword [ebp - 0x38], 0xffffffff
mov dword [ebp - 0x18], 0xfffffffd
cmp dword [ebp - 0x18], 0x12
je 0x10007fac
mov dword [ebp - 0x38], 0x430688cd
mov dword [ebp - 0x24], 0x1ef
cmp dword [ebp - 0x24], 0x35c
jle 0x10007f72
mov eax, ebx
mov dword [ebp - 0x28], ebx
mov edi, ebx
cdq
mov esi, ebx
idiv edi
mov eax, edx
mov dword [ebp - 0x2c], eax
mov ecx, ebx
mov dword [ebp - 0x3c], 0xd94
mov dword [ebp - 0x38], ecx
sar eax, cl
lea ecx, [ebp - 0x350]
cdq
push edx
push eax
call fcn.10001a85
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x10007f2d
mov eax, dword [eax]
push eax
call fcn.10049603
pop ecx
push ebx
push 1
lea ecx, [ebp - 0x350]
call fcn.100048ea
mov ecx, dword [ebp - 0x38]
mov eax, dword [ebp - 0x2c]
add ecx, esi
dec dword [ebp - 0x3c]
mov dword [ebp - 0x38], ecx
jne 0x10007f13
inc esi
cmp esi, 0x3e37
jl 0x10007f07
mov eax, dword [ebp - 0x28]
inc edi
cmp edi, 0x57e6
jl 0x10007efd
inc eax
mov dword [ebp - 0x28], eax
cmp eax, 0x7b21
jl 0x10007efb
mov byte [ebp - 0x19], bl
cmp byte [ebp - 0x19], 0
je 0x10007f8c
push ebx
push 0xe04
push 0x1d90
call dword [sym.imp.USER32.dll_GetScrollInfo]
cmp dword [ebp - 0x24], 0xffffffe6
jge 0x10007f9d
push str.ncnzcp_hlgrzb_hybuxabv_fggodogy_tupqdsuko_dijjioolh_dzmwvili_rlqitpwti_nqml_conzdt_sqtd
call fcn.10049603
pop ecx
mov dword [ebp - 4], 6
inc dword [ebp - 0x18]
jmp 0x10007ed5
inc dword [ebp - 0x20]
jmp 0x10007ebd
mov dword [ebp - 0x2c], 5
mov dword [ebp - 0x18], 0x3257
cmp dword [ebp - 0x18], 0x3373
jle 0x10008151
mov dword [ebp - 0x28], ebx
mov edx, ebx
mov dword [ebp - 0x24], ebx
mov dword [ebp - 0x38], 0x160f
cmp dword [ebp - 0x38], 0xb2c
jge 0x100080de
lea eax, [ebp - 0x148]
push eax
push ecx
lea eax, [ebp - 0xc4]
mov ecx, 0x1007bcb8
push eax
call fcn.10008eda
pop ecx
mov ecx, eax
call fcn.10008eda
mov dword [ebp - 0x190], 0xf
mov dword [ebp - 0x194], ebx
mov byte [ebp - 0x1a4], bl
mov byte [ebp - 4], 0x13
mov edi, ebx
mov esi, dword [ebp - 0xc4]
jmp 0x100080a4
lea edx, [ebp - 0x1a4]
mov ecx, 0x1007bcb8
dec esi
call fcn.1000b72c
push 0x68
lea eax, [ebp - 0x3bc]
push ebx
push eax
call fcn.100496c0
mov edx, dword [ebp - 0x194]
add esp, 0xc
mov ecx, ebx
test edx, edx
je 0x10008083
cmp dword [ebp - 0x190], 0x10
lea eax, [ebp - 0x1a4]
cmovae eax, dword [ebp - 0x1a4]
movsx eax, byte [eax + ecx]
inc dword [ebp + eax*4 - 0x540]
inc ecx
cmp ecx, edx
jb 0x1000805f
mov ecx, ebx
mov eax, ebx
cmp dword [ebp + eax*4 - 0x3bc], ebx
je 0x10008091
inc ecx
inc eax
cmp eax, 0x1a
jl 0x10008087
cmp ecx, dword [ebp - 0x148]
jg 0x100080a4
cmp edi, edx
cmovb edi, edx
test esi, esi
jne 0x10008030
dec esi
mov ecx, 0x1007bb98
mov dword [ebp - 0xc4], esi
test edi, edi
jne 0x100080bc
push 0xffffffffffffffff
jmp 0x100080bd
push edi
call fcn.100090d3
push eax
call fcn.1000b153
pop ecx
push ebx
push 1
lea ecx, [ebp - 0x1a4]
mov byte [ebp - 4], 6
call fcn.100048ea
mov edx, dword [ebp - 0x24]
mov edi, ebx
mov esi, ebx
mov ecx, esi
mov eax, edi
shl eax, cl
lea ecx, [ebp - 0x2a8]
and eax, edx
xor eax, dword [ebp - 0x28]
cdq
push edx
push eax
call fcn.10001a85
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x10008105
mov eax, dword [eax]
push eax
call fcn.10049603
pop ecx
push ebx
push 1
lea ecx, [ebp - 0x2a8]
call fcn.100048ea
mov edx, dword [ebp - 0x24]
inc esi
cmp esi, 0x4fd1
jl 0x100080e2
inc edi
cmp edi, 0x547a
jl 0x100080e0
inc edx
mov dword [ebp - 0x24], edx
cmp edx, 0x7c81
jl 0x10007fd7
mov eax, dword [ebp - 0x28]
inc eax
mov dword [ebp - 0x28], eax
cmp eax, 0x432b
jl 0x10007fd2
mov dword [ebp - 0x20], ebx
cmp dword [ebp - 0x20], 0xe
je 0x1000831a
push 1
lea ecx, [ebp - 0x7c]
call fcn.10004595
mov byte [ebp - 4], 0x14
mov dword [ebp - 0x28], 1
mov dword [ebp - 0x38], 0xfffffffd
mov dword [ebp - 0x24], ebx
jmp 0x1000818f
mov ecx, dword [ebp - 0x24]
mov eax, dword [ebp - 0x7c]
mov dword [eax + ecx*4], 0x38770ce4
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], 1
jl 0x1000817f
mov eax, dword [ebp - 0x7c]
mov dword [eax], ebx
cmp dword [eax], 2
jg 0x100082fe
mov dword [ebp - 0x24], 0x563ade4
mov dword [ebp - 0x3c], 0x5ce7
cmp dword [ebp - 0x3c], 0x5dc1
jle 0x100081f4
mov edi, ebx
mov esi, ebx
mov eax, ebx
mov dword [ebp - 0x38], ebx
and eax, esi
mov ecx, 0x1007bb98
or eax, edi
cdq
push edx
push eax
call fcn.100042e3
mov eax, dword [ebp - 0x38]
inc eax
mov dword [ebp - 0x38], eax
cmp eax, 0x6c75
jl 0x100081c3
inc esi
cmp esi, 0x16ce
jl 0x100081be
inc edi
cmp edi, 0x19ae
jl 0x100081bc
mov byte [ebp - 4], 0x15
cmp dword [ebp - 0x3c], 0x5c0d
jge 0x1000822e
mov edx, str.jfqoml_wirlhzv_hosug_psg_srb_vei_nnvfnbtp_cqzsar_rbixwtv_yxkjhdll_lrnvtbedd_frbmgxxw
mov ecx, 0x1007bb98
call fcn.100067dc
jmp 0x1000822e
mov dword [ebp - 4], 0x14
mov ecx, dword [ebp - 0x84]
mov eax, dword [ebp - 0x7c]
mov eax, dword [eax]
mov dword [ebp + eax*4 - 0x88], ecx
mov dword [ebp - 0x28], ecx
cmp dword [ebp - 0x28], ebx
jne 0x1000826b
mov eax, dword [ebp - 0x2c]
xor edx, edx
mov eax, dword [ebp - 0x88]
mov eax, dword [ebp - 0x2c]
mov ecx, dword [ebp - 0x20]
mov eax, dword [ebp - 0x7c]
cmp ecx, dword [eax]
setge dl
mov dword [ebp - 0x2c], edx
mov eax, dword [ebp - 0x24]
xor ecx, ecx
cmp eax, 1
mov eax, dword [ebp - 0x7c]
setl cl
xor edx, edx
add ecx, dword [eax]
mov dword [ebp - 0x24], ecx
mov eax, dword [ebp - 0x88]
mov eax, dword [ebp - 0x84]
mov ecx, dword [ebp - 0x24]
sub ecx, dword [ebp - 0x20]
mov eax, dword [ebp - 0x28]
cmp ecx, eax
mov eax, dword [ebp - 0x2c]
setge dl
xor ecx, ecx
cmp eax, edx
setg cl
cmp ecx, 1
mov ecx, dword [ebp - 0x7c]
sbb edx, edx
inc edx
mov eax, dword [ecx]
mov dword [ebp + eax*4 - 0x88], edx
xor eax, eax
cmp edx, dword [ecx]
setl al
xor edx, edx
mov dword [ebp - 0x38], eax
mov ecx, dword [ebp - 0x38]
mov eax, dword [ebp - 0x7c]
cmp dword [eax], ecx
setge dl
xor eax, eax
cmp edx, 1
setg al
xor edx, edx
mov dword [ebp - 0x24], eax
mov ecx, dword [ebp - 0x24]
mov eax, dword [ebp - 0x7c]
cmp ecx, dword [eax]
mov ecx, 0x1c88f
mov eax, dword [ebp - 0x20]
setl dl
sub ecx, edx
sub ecx, eax
mov eax, dword [ebp - 0x7c]
mov dword [ebp - 0x38], ecx
inc dword [eax]
jmp 0x1000819a
push eax
mov byte [ebp - 4], 6
call fcn.100497d9
mov dword [ebp - 0x7c], ebx
mov dword [ebp - 0x78], ebx
mov dword [ebp - 0x74], ebx
inc dword [ebp - 0x20]
pop ecx
jmp 0x10008154
cmp dword [ebp - 0x18], 0x3198
jge 0x1000832e
push str.zjvrhurk_iorxgevd_tmyugr_xltqq_cdeqkme_phjl_xznnjyz_otda_bjmku_wdo_svv_osfuvqchm
call fcn.10049603
pop ecx
mov dword [ebp - 4], 6
mov edi, dword [ebp - 0x44]
mov esi, dword [ebp - 0x30]
movzx edx, byte [ebp + esi - 0x47]
mov eax, esi
sub eax, edi
movzx eax, byte [ebp + eax - 0x4a]
movzx eax, word [ebp + eax*2 - 0x4c]
mov ecx, eax
and eax, edx
or ecx, edx
sub ecx, eax
movzx eax, byte [ebp + esi - 0x48]
add esi, 2
mov word [ebp + eax*2 - 0x4c], cx
jmp 0x10007da7
cmp dword [ebp - 0x34], 0x19c7
jge 0x1000837a
push dword [ebp - 0x40]
call fcn.10049603
pop ecx
mov dword [ebp - 4], 6
xor edi, edi
mov dword [ebp - 0x38], 0x1240
inc edi
cmp dword [ebp - 0x38], 0x14d1
jle 0x100083f9
mov eax, ebx
mov dword [ebp - 0x2c], eax
mov esi, ebx
mov ecx, ebx
mov dword [ebp - 0x44], 0x2b0e
mov dword [ebp - 0x34], ecx
xor eax, ecx
lea ecx, [ebp - 0x2d8]
cdq
push edx
push eax
call fcn.10001a85
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x100083c1
mov eax, dword [eax]
push eax
call fcn.10049603
pop ecx
push ebx
push edi
lea ecx, [ebp - 0x2d8]
call fcn.100048ea
mov ecx, dword [ebp - 0x34]
mov eax, dword [ebp - 0x2c]
add ecx, esi
dec dword [ebp - 0x44]
mov dword [ebp - 0x34], ecx
jne 0x100083a7
inc esi
cmp esi, 0x11ac
jl 0x1000839b
inc eax
mov dword [ebp - 0x2c], eax
cmp eax, 0x2769
jl 0x10008399
mov dword [ebp - 0x18], 0xdb3ae355
cmp dword [ebp - 0x38], 0xef7
jge 0x10008414
push str.tuynt_urs_glcc_yopoca_xus_menydqhec_mwpfv_surzg_ppi_qopi
call fcn.10049603
pop ecx
mov dword [ebp - 4], 6
mov dword [ebp - 0x34], 0x8d7cbae8
mov dword [ebp - 0x20], 0xfffffffc
mov dword [ebp - 0x18], 0xe
jmp 0x10008517
mov dword [ebp - 0x30], ebx
mov dword [ebp - 0x34], ebx
mov dword [ebp - 0x24], ebx
jmp 0x1000844e
mov eax, dword [ebp - 0x24]
mov dword [ebp + eax*4 - 0x50], 0xfffffff9
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], edi
jl 0x10008440
cmp dword [ebp - 0x18], ebx
jne 0x10008496
mov eax, dword [ebp - 0x18]
xor ecx, ecx
cmp eax, 0x7006986d
mov eax, dword [ebp - 0x18]
setg cl
xor edx, edx
cmp ecx, eax
mov eax, dword [ebp - 0x30]
setne dl
xor ecx, ecx
cmp edx, eax
setl cl
mov dword [ebp - 0x34], ecx
mov eax, dword [ebp - 0x34]
add eax, 0x3072c02a
je 0x1000848d
mov eax, edi
cmp dword [ebp - 0x18], ebx
jne 0x1000848f
mov eax, ebx
mov edx, ebx
add eax, 0xfffffff9
je 0x10008498
mov edx, edi
mov eax, dword [ebp - 0x18]
xor ecx, ecx
sub edx, eax
mov eax, dword [ebp - 0x30]
cmp eax, edx
mov eax, 0x71bc7dcd
setl cl
imul ecx, dword [ebp - 0x30]
sub eax, ecx
xor ecx, ecx
mov dword [ebp - 0x50], eax
mov dword [ebp - 0x34], eax
mov eax, dword [ebp - 0x34]
mov eax, dword [ebp - 0x30]
cmp eax, 0xe750
setl cl
mov dword [ebp - 0x20], ecx
mov dword [ebp - 0x20], ebx
jmp 0x1000850e
mov dword [ebp - 0x40], 0xd4fe9304
mov dword [ebp - 0x34], 0xffffffff
cmp dword [ebp - 0x50], ebx
jne 0x10008506
mov eax, dword [ebp - 0x40]
dec dword [ebp - 0x50]
mov eax, dword [ebp - 0x50]
mov ecx, dword [ebp - 0x20]
imul ecx, eax
neg ecx
sbb ecx, ecx
neg ecx
lea eax, [ecx + 2]
test eax, eax
jne 0x10008506
mov eax, ebx
cmp dword [ebp - 0x30], ebx
je 0x10008508
mov eax, edi
mov dword [ebp - 0x34], eax
dec dword [ebp - 0x20]
cmp dword [ebp - 0x20], 0xfffffff2
jle 0x100084d0
dec dword [ebp - 0x18]
cmp dword [ebp - 0x18], 0xfffffffd
je 0x10008435
xor eax, eax
mov word [ebp - 0x4a], ax
mov dword [ebp - 0x18], 0xffffffff
mov dword [ebp - 0x30], ebx
jmp 0x10008544
mov eax, dword [ebp - 0x30]
mov dword [ebp + eax*4 - 0x26c], 0xa8eac8b1
inc dword [ebp - 0x30]
cmp dword [ebp - 0x30], 3
jl 0x10008533
mov byte [ebp - 0x19], bl
cmp byte [ebp - 0x19], 0
je 0x10008560
push ebx
push ebx
push 0x685
call dword [sym.imp.KERNEL32.dll_GetModuleHandleExW]
mov dword [ebp - 0x18], ebx
jmp 0x10008576
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x26c], 0xfffffff7
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 3
jl 0x10008565
xor eax, eax
mov dword [ebp - 0x178], 7
mov word [ebp - 0x18c], ax
lea ecx, [ebp - 0x18c]
lea eax, [ebp - 0x4c]
mov dword [ebp - 0x17c], ebx
push eax
call fcn.1000936f
mov byte [ebp - 4], 0x1d
mov dword [ebp - 0x30], edi
mov dword [ebp - 0x40], 0xfffffff8
mov dword [ebp - 0x30], ebx
jmp 0x100085ca
mov byte [ebp - 0x19], bl
cmp byte [ebp - 0x19], 0
je 0x100085c7
push ebx
call dword [sym.imp.ADVAPI32.dll_CloseServiceHandle]
inc dword [ebp - 0x30]
cmp dword [ebp - 0x30], 4
jne 0x100085b7
mov dword [ebp - 0x44], 0x2706
cmp dword [ebp - 0x44], 0x2806
jle 0x10008659
mov dword [ebp - 0x28], ebx
mov edx, ebx
mov dword [ebp - 0x2c], ebx
mov esi, ebx
mov ecx, ebx
mov dword [ebp - 0x34], ebx
mov eax, esi
shl eax, cl
lea ecx, [ebp - 0x308]
or eax, edx
or eax, dword [ebp - 0x28]
cdq
push edx
push eax
call fcn.10001a85
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x10008610
mov eax, dword [eax]
push eax
call fcn.10049603
pop ecx
push ebx
push edi
lea ecx, [ebp - 0x308]
call fcn.100048ea
mov ecx, dword [ebp - 0x34]
mov edx, dword [ebp - 0x2c]
inc ecx
mov dword [ebp - 0x34], ecx
cmp ecx, 0x8c4
jl 0x100085ef
inc esi
cmp esi, 0x69c4
jl 0x100085ea
inc edx
mov dword [ebp - 0x2c], edx
cmp edx, 0x7fe1
jl 0x100085e8
mov eax, dword [ebp - 0x28]
inc eax
mov dword [ebp - 0x28], eax
cmp eax, 0x7697
jl 0x100085e3
mov byte [ebp - 0x19], bl
cmp dword [ebp - 0x44], 0x236b
jge 0x10008670
push str.eqqcouii_ixpx_dqtcdrrk_kcqumerjt_mfgwisk_jvzvwndd_tgzmi_iue_lrfw_yeolkipod_gwn_weafohvl_jwwpnuolt
call fcn.10049603
pop ecx
mov dword [ebp - 4], 0x1d
cmp byte [ebp - 0x19], 0
je 0x10008683
call dword [sym.imp.KERNEL32.dll_GetACP]
mov dword [ebp - 0x4c], ebx
mov byte [ebp - 0x90], bl
mov byte [ebp - 0x8f], 0x65
push 0x5f
pop eax
mov word [ebp - 0x8c], ax
xor eax, eax
mov word [ebp - 0x8a], ax
mov dword [ebp - 0x20], 0x21f90ef3
mov dword [ebp - 0x24], 0xfffffff8
mov dword [ebp - 0x18], 0x51fa4c82
mov dword [ebp - 0x2c], edi
mov dword [ebp - 0x3c], 0xb1c2fbf3
mov dword [ebp - 0x34], 0xffffffff
mov dword [ebp - 0x40], 0xb8877e47
mov dword [ebp - 0x38], 0x6b68
cmp dword [ebp - 0x38], 0x6d76
jle 0x1000876d
push 0x215a
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_ExpandEnvironmentStringsA]
mov esi, ebx
mov dword [ebp - 0x44], ebx
mov ecx, esi
mov dword [ebp - 0x34], 0xb66
mov dword [ebp - 0x28], ecx
mov esi, ebx
mov eax, esi
and eax, ecx
lea ecx, [ebp - 0x338]
cdq
push edx
push eax
call fcn.10001a85
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x10008723
mov eax, dword [eax]
push eax
call fcn.10049603
pop ecx
push ebx
push edi
lea ecx, [ebp - 0x338]
call fcn.100048ea
mov ecx, dword [ebp - 0x28]
inc esi
cmp esi, 0x31af
jl 0x10008707
dec ecx
dec dword [ebp - 0x34]
mov dword [ebp - 0x28], ecx
jne 0x10008705
mov esi, dword [ebp - 0x44]
inc esi
mov dword [ebp - 0x44], esi
cmp esi, 0x6219
jl 0x100086f9
push 0x579
push ebx
push 0x185a
push ebx
call dword [sym.imp.USER32.dll_LoadStringA]
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x20]
cmp dword [ebp - 0x20], ebx
je 0x1000879d
mov eax, edi
cmp dword [ebp - 0x24], ebx
jne 0x1000879f
mov eax, ebx
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x38], 0x6a59
jge 0x100087b6
push str.lgdvbnn_ndwpy_zvprap_upceduok_ubtltzvt_jgowbt_aaksnlzlz_zpvbf_mcvzwj_vcafjgsz_fomrjaf_rijflto_snlgw_dmjoyauw
call fcn.10049603
pop ecx
mov dword [ebp - 4], 0x1d
cmp dword [ebp - 0x20], ebx
je 0x100087c8
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0x20]
mov edx, dword [ebp - 0x24]
mov eax, dword [ebp - 0x24]
neg edx
mov dword [ebp - 0x18], eax
mov ecx, dword [ebp - 0x2c]
sbb edx, edx
neg edx
xor eax, eax
neg edx
cmp edx, ecx
setle al
cmp dword [ebp - 0x18], eax
jg 0x100087ed
cmp dword [ebp - 0x24], ebx
jne 0x100087f0
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x20]
xor edx, edx
mov ecx, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x20]
cmp eax, ecx
mov eax, dword [ebp - 0x20]
setg dl
xor ecx, ecx
cmp eax, edx
setg cl
cmp ecx, 0xfffc
sbb eax, eax
inc eax
mov dword [ebp - 0x3c], eax
je 0x10008843
mov byte [ebp - 0x19], bl
cmp byte [ebp - 0x19], 0
je 0x10008829
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_FindNextFileA]
mov byte [ebp - 0x19], bl
cmp byte [ebp - 0x19], 0
je 0x10008a15
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_GetExitCodeProcess]
jmp 0x10008a15
mov dword [ebp - 0x28], 0x6054615
lea ecx, [ebp - 0xc0]
mov dword [ebp - 0x18], 0xafff74b7
mov dword [ebp - 0x34], 0xe45104f3
push 3
call fcn.10004595
mov byte [ebp - 4], 0x22
lea eax, [ebp - 0x230]
push dword [ebp - 0x54]
movdqa xmm0, xmmword [0x1006f1a0]
lea ecx, [ebp - 0xa8]
push eax
lea eax, [ebp - 0x240]
mov dword [ebp - 0xa8], ebx
push eax
push ebx
movdqu xmmword [ebp - 0x240], xmm0
mov dword [ebp - 0xa4], ebx
mov dword [ebp - 0xa0], ebx
call fcn.10006d4a
mov dword [ebp - 0x30], ebx
jmp 0x100088bd
mov ecx, dword [ebp - 0x30]
mov eax, dword [ebp - 0xc0]
or dword [eax + ecx*4], 0xffffffff
inc dword [ebp - 0x30]
cmp dword [ebp - 0x30], 3
jl 0x100088ad
imul eax, dword [ebp - 0x28], 0x46b4
test eax, eax
je 0x100088ed
mov eax, dword [ebp - 0x18]
neg eax
sbb eax, eax
neg eax
mov dword [ebp - 0x18], eax
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x28]
mov dword [ebp - 0x34], 0xa6825d82
mov eax, dword [ebp - 0x34]
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x24]
xor ecx, ecx
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x2c]
test eax, eax
setg cl
mov dword [ebp - 0x18], ecx
mov ecx, 0xbb70
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x3c]
sub ecx, eax
je 0x10008932
mov eax, dword [ebp - 0xa8]
mov dword [ebp - 0x40], 0xe10b09ed
mov dword [ebp - 0x40], 0x9b5f814d
mov dword [ebp - 0x40], 0x3d3c4855
dec dword [eax + 8]
jmp 0x100089c6
mov dword [ebp - 0x24], 0x45fe6ee0
mov dword [ebp - 0x18], 0xfffffff4
jmp 0x10008964
mov byte [ebp - 0x19], bl
cmp byte [ebp - 0x19], 0
je 0x10008952
push ebx
call dword [sym.imp.KERNEL32.dll_ClearCommBreak]
mov byte [ebp - 0x19], bl
cmp byte [ebp - 0x19], 0
je 0x10008961
call dword [sym.imp.KERNEL32.dll_TlsAlloc]
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 0xb
jle 0x10008942
cmp dword [ebp - 0x2c], ebx
jne 0x10008978
cmp dword [ebp - 0x24], ebx
jne 0x10008978
mov ecx, ebx
jmp 0x100089a0
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0x40]
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0xc0]
mov ecx, dword [eax + 8]
mov eax, dword [ebp - 0xa8]
sub ecx, 0x5e26160d
cmp ecx, dword [eax + 4]
jle 0x1000899e
mov eax, dword [ebp - 0x24]
mov ecx, edi
mov eax, dword [ebp - 0xc0]
mov eax, dword [eax + 8]
imul eax, ecx
xor ecx, ecx
cmp eax, 6
setl cl
mov dword [ebp - 0x24], ecx
mov eax, dword [ebp - 0x24]
sub eax, dword [ebp - 0x3c]
mov dword [ebp - 0x18], eax
mov eax, dword [ebp - 0xa8]
mov dword [ebp - 0x28], 0x4c718fe3
test eax, eax
je 0x100089ea
push eax
call fcn.100497d9
pop ecx
mov dword [ebp - 0xa8], ebx
mov dword [ebp - 0xa4], ebx
mov dword [ebp - 0xa0], ebx
mov byte [ebp - 4], 0x1d
cmp dword [ebp - 0xc0], 0
je 0x10008a15
push dword [ebp - 0xc0]
call fcn.100497d9
pop ecx
mov dword [ebp - 0xc0], ebx
mov dword [ebp - 0xbc], ebx
mov dword [ebp - 0xb8], ebx
xor eax, eax
mov dword [ebp - 0x1a8], 7
mov word [ebp - 0x1bc], ax
lea ecx, [ebp - 0x1bc]
lea eax, [ebp - 0x8c]
mov dword [ebp - 0x1ac], ebx
push eax
call fcn.1000936f
mov byte [ebp - 4], 0x23
mov dword [ebp - 0x18], ebx
mov dword [ebp - 0x34], 0xa2ae
mov dword [ebp - 0x28], 5
mov dword [ebp - 0x44], edi
mov dword [ebp - 0x44], 0x153413f0
push 3
mov dword [ebp - 0x40], 0x7fb
mov dword [ebp - 0x18], ebx
pop ecx
jmp 0x10008a7b
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x158], ebx
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], ecx
jl 0x10008a6e
mov dword [ebp - 0x18], ebx
jmp 0x10008a96
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x278], 0x1d847576
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], ecx
jl 0x10008a85
mov dword [ebp - 0x18], ebx
jmp 0x10008ab1
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x158], 0x83c7
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], ecx
jl 0x10008aa0
cmp dword [ebp - 0x34], ebx
je 0x10008ad4
mov eax, dword [ebp - 0x154]
mov eax, dword [ebp - 0x34]
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x150]
mov eax, ebx
cmp dword [ebp - 0x28], ebx
jne 0x10008ad6
mov eax, edi
mov dword [ebp - 0x18], eax
mov edx, edi
mov eax, dword [ebp - 0x18]
xor ecx, ecx
mov dword [ebp - 0x44], ebx
mov eax, dword [ebp - 0x44]
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x158]
mov dword [ebp - 0x44], 0x6aac8953
mov eax, dword [ebp - 0x44]
mov eax, dword [ebp - 0x28]
sub edx, eax
mov eax, dword [ebp - 0x40]
cmp edx, eax
mov dword [ebp - 0x8c], ebx
setge cl
mov dword [ebp - 0x274], ecx
push dword [ebp - 0x17c]
cmp dword [ebp - 0x178], 8
lea eax, [ebp - 0x18c]
push ebx
cmovae eax, dword [ebp - 0x18c]
lea ecx, [ebp - 0x220]
push eax
call fcn.100096eb
cmp eax, 0xffffffff
je 0x10008b57
push 0xffffffffffffffff
push ebx
lea ecx, [ebp - 0x1bc]
push ecx
push edi
push eax
lea ecx, [ebp - 0x220]
call fcn.100093f7
jmp 0x10008b12
mov dword [ebp - 0x28], 0x80d416db
lea ecx, [ebp - 0x164]
push 3
call fcn.10004595
mov byte [ebp - 4], 0x24
lea ecx, [ebp - 0x1f4]
mov dword [ebp - 0x40], 0x6c715341
mov dword [ebp - 0x40], ebx
mov dword [ebp - 0x40], 0xfffffffb
mov dword [ebp - 0x40], 0xffffffff
mov dword [ebp - 0x40], ebx
mov dword [ebp - 0x40], 0xd0d1d847
mov dword [ebp - 0x40], 0xeb236728
mov dword [ebp - 0x40], 0xffffffff
mov dword [ebp - 0x40], 0x3585ca25
mov dword [ebp - 0x40], 0x51fe511b
push edi
call fcn.10004595
mov dword [ebp - 0x18], ebx
jmp 0x10008bcd
mov ecx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x164]
mov dword [eax + ecx*4], edi
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 3
jl 0x10008bbe
mov dword [ebp - 0x18], ebx
jmp 0x10008be7