Function at 0x100073c0
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x1003268f
mov eax, dword fs:[0]
push eax
sub esp, 0x404
mov eax, dword [0x1006200c]
xor eax, ebp
mov dword [ebp - 0x14], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x10], esp
xor esi, esi
mov dword [ebp - 0x128], esi
mov eax, dword [0x10063aa4]
mov dword [ebp - 0x120], esi
test eax, eax
jg 0x100096a0
inc eax
lea ecx, [ebp - 0x3c8]
push 0x1005bb70
mov dword [0x10063aa4], eax
call fcn.10009d30
push str._Installer
mov edx, eax
mov dword [ebp - 4], esi
lea ecx, [ebp - 0xa0]
call fcn.1000b160
add esp, 4
mov byte [ebp - 4], 2
mov ecx, dword [ebp - 0x3b4]
cmp ecx, 8
jb 0x1000747e
mov edx, dword [ebp - 0x3c8]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x10007474
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x100096c1
push ecx
push edx
call fcn.1001629e
add esp, 8
xor eax, eax
mov dword [ebp - 0x3b8], 0
mov dword [ebp - 0x3b4], 7
mov word [ebp - 0x3c8], ax
mov byte [ebp - 4], 3
call fcn.10007110
cmp word [0x10063ae0], 9
jne 0x100074f1
lea eax, [ebp - 0x108]
mov dword [ebp - 0x100], 0
mov esi, 1
mov edi, 3
push eax
mov ecx, 0x10063ae0
mov word [ebp - 0x108], di
mov dword [ebp - 0x120], esi
mov dword [ebp - 0x128], esi
call fcn.100024b0
mov byte [ebp - 0x119], 0
test al, al
je 0x100074f8
mov byte [ebp - 0x119], 1
mov eax, dword [ebp - 0x120]
mov edi, dword [sym.imp.OLEAUT32.dll_VariantCopy]
mov dword [ebp - 0x13c], edi
test al, 1
je 0x10007526
and eax, 0xfffffffe
mov dword [ebp - 0x120], eax
mov dword [ebp - 0x128], eax
lea eax, [ebp - 0x108]
push eax
call edi
cmp byte [ebp - 0x119], 0
je 0x1000762a
cmp dword [0x10063ae8], 0
jne 0x1000762a
push 0
push 0x10063b08
push 0x4008
call fcn.10001b00
add esp, 0xc
test eax, eax
je 0x1000755c
xor eax, eax
jmp 0x10007570
mov eax, dword [0x10063b08]
xor ecx, ecx
cmp dword [0x10063b20], 0x800
cmovne eax, ecx
mov esi, dword [sym.imp.USER32.dll_EnumChildWindows]
push 1
push 0x100071d0
push eax
call esi
cmp dword [0x10063ae8], 0
jne 0x1000762a
push 0
push 0
push 0x8077
call fcn.10001b00
add esp, 0xc
test eax, eax
jne 0x1000762a
push 0x10062a40
push 1
push 0x10063aa8
push 0xbc
call fcn.10001b00
call fcn.10007110
push 0
push 0x10063b08
push 0x4008
call fcn.10001b00
add esp, 0x1c
test eax, eax
je 0x100075dd
xor eax, eax
jmp 0x100075f1
mov eax, dword [0x10063b08]
xor ecx, ecx
cmp dword [0x10063b20], 0x800
cmovne eax, ecx
push 0
push 0x100071d0
push eax
call esi
push 0x10063aa8
push 1
push 0
push 0x8067
call fcn.10001b00
add esp, 0x10
test eax, eax
jne 0x1000762a
push 0x10062a20
push 1
push eax
push 0x8010
call fcn.10001b00
add esp, 0x10
cmp word [0x10063ae0], 9
jne 0x1000767b
mov esi, dword [ebp - 0x120]
mov eax, 3
mov word [ebp - 0x108], ax
or esi, 2
lea eax, [ebp - 0x108]
mov dword [ebp - 0x100], 0
push eax
mov ecx, 0x10063ae0
mov dword [ebp - 0x120], esi
mov dword [ebp - 0x128], esi
call fcn.100024b0
mov byte [ebp - 0x119], 0
test al, al
je 0x10007682
mov byte [ebp - 0x119], 1
mov eax, dword [ebp - 0x120]
test al, 2
je 0x100076a4
and eax, 0xfffffffd
mov dword [ebp - 0x120], eax
mov dword [ebp - 0x128], eax
lea eax, [ebp - 0x108]
push eax
call edi
cmp byte [ebp - 0x119], 0
je 0x1000771d
cmp dword [ebp - 0x8c], 8
lea eax, [ebp - 0xa0]
push 0x40010
cmovae eax, dword [ebp - 0xa0]
push eax
push 0x1005bbc8
push 0
call dword [sym.imp.USER32.dll_MessageBoxW]
mov ecx, dword [ebp - 0x8c]
cmp ecx, 8
jb 0x100096a0
mov edx, dword [ebp - 0xa0]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x1000770e
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10009724
push ecx
push edx
call fcn.1001629e
add esp, 8
jmp 0x100096a0
xor eax, eax
mov word [ebp - 0x34], ax
lea eax, [ebp - 0x34]
push 0x10063ae0
push eax
mov eax, dword [sym.imp.OLEAUT32.dll_VariantCopyInd]
mov dword [ebp - 0x130], eax
call eax
test eax, eax
js 0x100096c6
xor eax, eax
mov byte [ebp - 4], 4
mov word [ebp - 0x24], ax
lea eax, [ebp - 0x24]
push eax
call edi
test eax, eax
js 0x100096d8
mov esi, dword [sym.imp.OLEAUT32.dll_SysReAllocString]
mov eax, 8
push str.Workbooks.Count
mov word [ebp - 0x24], ax
mov dword [ebp - 0x138], esi
call esi
mov dword [ebp - 0x1c], eax
test eax, eax
je 0x100096de
push 0
push 0xffffffffffffffff
sub esp, 0xc
mov byte [ebp - 4], 5
mov ecx, esp
mov byte [ebp - 0x119], 0
lea eax, [ebp - 0x14]
lea edx, [ebp - 0x34]
push ecx
push eax
push edx
call fcn.10009960
mov dl, byte [ebp - 0x119]
lea ecx, [ebp - 0xc8]
call fcn.10005ad0
add esp, 0x14
mov ecx, 3
mov dword [ebp - 0x100], 0
mov word [ebp - 0x108], cx
lea ecx, [ebp - 0x108]
push ecx
mov ecx, eax
call fcn.100024b0
mov byte [ebp - 0x119], al
lea eax, [ebp - 0x108]
push eax
call edi
lea eax, [ebp - 0xc8]
push eax
call edi
push 0x100022d0
push 2
push 0x10
lea eax, [ebp - 0x34]
mov byte [ebp - 4], 3
push eax
call fcn.10015e6f
cmp byte [ebp - 0x119], 0
je 0x100078ba
xor eax, eax
mov word [ebp - 0x34], ax
lea eax, [ebp - 0x34]
push 0x10063ae0
push eax
call dword [ebp - 0x130]
test eax, eax
js 0x100096f8
xor eax, eax
mov byte [ebp - 4], 7
mov word [ebp - 0x24], ax
lea eax, [ebp - 0x24]
push eax
call edi
test eax, eax
js 0x1000970a
mov eax, 8
push str.Workbooks.Add
mov word [ebp - 0x24], ax
call esi
mov dword [ebp - 0x1c], eax
test eax, eax
je 0x100096de
push 0
push 0xffffffffffffffff
sub esp, 0xc
mov byte [ebp - 4], 8
mov ecx, esp
mov byte [ebp - 0x119], 0
lea eax, [ebp - 0x14]
lea edx, [ebp - 0x34]
push ecx
push eax
push edx
call fcn.10009960
mov dl, byte [ebp - 0x119]
lea ecx, [ebp - 0xc8]
call fcn.10005ad0
add esp, 0x14
lea eax, [ebp - 0xc8]
push eax
call edi
push 0x100022d0
push 2
push 0x10
lea eax, [ebp - 0x34]
mov byte [ebp - 4], 3
push eax
call fcn.10015e6f
xorps xmm0, xmm0
mov dword [ebp - 0x68], 0
movq qword [ebp - 0x70], xmm0
mov dword [ebp - 0x70], 0
mov dword [ebp - 0x6c], 0
mov dword [ebp - 0x68], 0
xor eax, eax
mov dword [ebp - 0x78], 0
movups xmmword [ebp - 0x88], xmm0
mov dword [ebp - 0x74], 7
mov word [ebp - 0x88], ax
mov byte [ebp - 4], 0xa
mov word [ebp - 0x1b0], ax
lea eax, [ebp - 0x1b0]
push 0x10063ae0
push eax
call dword [ebp - 0x130]
test eax, eax
jns 0x10007935
mov ecx, 0xa
mov dword [ebp - 0x1a8], eax
mov word [ebp - 0x1b0], cx
push eax
jmp 0x100096f3
xor eax, eax
mov byte [ebp - 4], 0xb
mov word [ebp - 0x1a0], ax
lea eax, [ebp - 0x1a0]
push eax
call edi
test eax, eax
jns 0x10007955
push eax
jmp 0x100096f3
mov eax, 8
push str.AddIns.Count
mov word [ebp - 0x1a0], ax
call esi
mov dword [ebp - 0x198], eax
test eax, eax
jne 0x1000798d
mov eax, 0xa
mov dword [ebp - 0x198], 0x8007000e
mov word [ebp - 0x1a0], ax
jmp 0x100096ee
push 0
push 0xffffffffffffffff
sub esp, 0xc
mov byte [ebp - 4], 0xc
mov ecx, esp
mov byte [ebp - 0x119], 0
lea eax, [ebp - 0x190]
lea esi, [ebp - 0x1b0]
push ecx
push eax
push esi
call fcn.10009960
mov dl, byte [ebp - 0x119]
lea ecx, [ebp - 0xd8]
call fcn.10005ad0
add esp, 0x14
push 0x100022d0
push 2
push 0x10
mov eax, esi
mov byte [ebp - 4], 0xe
push eax
call fcn.10015e6f
mov ecx, dword [sym.imp.SHLWAPI.dll_StrStrIW]
mov esi, 1
mov dword [ebp - 0x134], ecx
mov eax, esi
mov dword [ebp - 0x12c], esi
mov dword [ebp - 0x140], esi
cmp eax, dword [ebp - 0xd0]
jg 0x10008122
xor eax, eax
mov word [ebp - 0x54], ax
lea eax, [ebp - 0x54]
push 0x10063ae0
push eax
call dword [ebp - 0x130]
test eax, eax
jns 0x10007a34
mov ecx, 0xa
mov dword [ebp - 0x4c], eax
mov word [ebp - 0x54], cx
push eax
jmp 0x100096f3
xor eax, eax
mov byte [ebp - 4], 0xf
mov word [ebp - 0x44], ax
lea eax, [ebp - 0x44]
push eax
call edi
test eax, eax
jns 0x10007a4e
push eax
jmp 0x100096f3
mov eax, 8
push str.AddIns.Item_
mov word [ebp - 0x44], ax
call dword [ebp - 0x138]
mov dword [ebp - 0x3c], eax
test eax, eax
jne 0x10007a7e
mov eax, 0xa
mov dword [ebp - 0x3c], 0x8007000e
mov word [ebp - 0x44], ax
jmp 0x100096ee
mov eax, 3
mov dword [ebp - 0x2c], esi
mov word [ebp - 0x34], ax
xor eax, eax
mov byte [ebp - 4], 0x11
push str._.Name
lea ecx, [ebp - 0x24]
mov word [ebp - 0x24], ax
call fcn.10002320
push 0
push 0xffffffffffffffff
sub esp, 0xc
mov byte [ebp - 4], 0x12
mov ecx, esp
mov byte [ebp - 0x119], 0
lea eax, [ebp - 0x14]
lea edx, [ebp - 0x54]
push ecx
push eax
push edx
call fcn.10009960
mov dl, byte [ebp - 0x119]
lea ecx, [ebp - 0xc8]
call fcn.10005ad0
add esp, 0x14
push 0x100022d0
push 4
push 0x10
lea eax, [ebp - 0x54]
mov byte [ebp - 4], 0x14
push eax
call fcn.10015e6f
push 0x1005bc9c
push dword [ebp - 0xc0]
call dword [ebp - 0x134]
test eax, eax
je 0x1000810f
mov eax, dword [ebp - 0x6c]
cmp eax, dword [ebp - 0x68]
je 0x10007b16
mov dword [eax], esi
add dword [ebp - 0x6c], 4
jmp 0x10007b26
lea ecx, [ebp - 0x12c]
push ecx
push eax
lea ecx, [ebp - 0x70]
call fcn.1000cfd0
xor eax, eax
mov word [ebp - 0x180], ax
lea eax, [ebp - 0x180]
push 0x10063ae0
push eax
call dword [ebp - 0x130]
test eax, eax
jns 0x10007b5d
mov ecx, 0xa
mov dword [ebp - 0x178], eax
mov word [ebp - 0x180], cx
push eax
jmp 0x100096f3
xor eax, eax
mov byte [ebp - 4], 0x15
mov word [ebp - 0x170], ax
lea eax, [ebp - 0x170]
push eax
call edi
test eax, eax
jns 0x10007b7d
push eax
jmp 0x100096f3
mov eax, 8
push str.AddIns.Item_
mov word [ebp - 0x170], ax
call dword [ebp - 0x138]
mov dword [ebp - 0x168], eax
test eax, eax
jne 0x10007bb9
mov eax, 0xa
mov dword [ebp - 0x168], 0x8007000e
mov word [ebp - 0x170], ax
jmp 0x100096ee
mov eax, 3
mov dword [ebp - 0x158], esi
mov word [ebp - 0x160], ax
xor eax, eax
mov byte [ebp - 4], 0x17
push str._.FullName
lea ecx, [ebp - 0x150]
mov word [ebp - 0x150], ax
call fcn.10002320
push 0
push 0xffffffffffffffff
sub esp, 0xc
mov byte [ebp - 4], 0x18
mov ecx, esp
mov byte [ebp - 0x119], 0
lea eax, [ebp - 0x140]
lea esi, [ebp - 0x180]
push ecx
push eax
push esi
call fcn.10009960
mov dl, byte [ebp - 0x119]
lea ecx, [ebp - 0x108]
call fcn.10005ad0
add esp, 0x14
push 0x100022d0
push 4
push 0x10
mov eax, esi
mov byte [ebp - 4], 0x1a
push eax
call fcn.10015e6f
push 0x1005bcbc
lea ecx, [ebp - 0x28c]
call fcn.10009d30
mov dword [ebp - 0x12c], eax
sub esp, 0x18
mov byte [ebp - 4], 0x1b
mov ecx, esp
push dword [ebp - 0x100]
call fcn.10009d30
lea ecx, [ebp - 0x2ec]
call fcn.10006870
add esp, 0x18
mov edi, eax
mov byte [ebp - 4], 0x1c
lea esi, [ebp - 0x16]
mov ecx, dword [ebp - 0x6c]
sub ecx, dword [ebp - 0x70]
sar ecx, 2
mov eax, 0xcccccccd
sub esi, 2
mul ecx
shr edx, 3
lea eax, [edx + edx*4]
add eax, eax
sub ecx, eax
add ecx, 0x30
mov word [esi], cx
mov ecx, edx
test ecx, ecx
jne 0x10007c83
push ecx
lea eax, [ebp - 0x16]
push eax
push esi
lea ecx, [ebp - 0x25c]
call fcn.1000be30
or dword [ebp - 0x120], 0xc0000
push 1
push 0x1005bcd4
push 0
lea ecx, [ebp - 0x25c]
mov byte [ebp - 4], 0x1d
call fcn.1000bd40
mov dword [ebp - 0x1b8], 0
xorps xmm0, xmm0
movups xmmword [ebp - 0x1c8], xmm0
mov dword [ebp - 0x1b4], 0
xor ecx, ecx
movups xmm0, xmmword [eax]
movups xmmword [ebp - 0x1c8], xmm0
movq xmm0, qword [eax + 0x10]
movq qword [ebp - 0x1b8], xmm0
mov dword [eax + 0x10], 0
mov dword [eax + 0x14], 7
mov word [eax], cx
or dword [ebp - 0x120], 0x20000
push 0x1005bccc
lea edx, [ebp - 0x1c8]
mov byte [ebp - 4], 0x1e
lea ecx, [ebp - 0x2d4]
call fcn.1000b160
add esp, 4
push edi
push eax
push dword [ebp - 0x134]
lea ecx, [ebp - 0x22c]
mov byte [ebp - 4], 0x1f
call fcn.1000b9a0
or dword [ebp - 0x120], 0x10000
mov byte [ebp - 4], 0x20
lea eax, [ebp - 0x22c]
push dword [ebp - 0x12c]
lea ecx, [ebp - 0x244]
push eax
push dword [ebp - 0x134]
call fcn.1000b9a0
mov eax, dword [ebp - 0x120]
or eax, 0x8000
mov dword [ebp - 0x120], eax
mov dword [ebp - 0x128], eax
mov byte [ebp - 4], 0x21
lea edx, [ebp - 0x244]
push dword [ebp - 0x100]
lea ecx, [ebp - 0x2bc]
call fcn.1000b160
add esp, 4
mov edx, eax
mov byte [ebp - 4], 0x22
cmp dword [edx + 0x14], 8
mov edi, dword [edx + 0x10]
jb 0x10007dce
mov edx, dword [edx]
mov ecx, dword [ebp - 0x78]
mov eax, dword [ebp - 0x74]
sub eax, ecx
mov dword [ebp - 0x12c], ecx
cmp edi, eax
ja 0x10007e18
cmp dword [ebp - 0x74], 8
lea eax, [ecx + edi]
lea esi, [ebp - 0x88]
mov dword [ebp - 0x78], eax
cmovae esi, dword [ebp - 0x88]
lea eax, [edi + edi]
push eax
push edx
lea ecx, [esi + ecx*2]
push ecx
call fcn.10018060
mov eax, dword [ebp - 0x12c]
add esp, 0xc
add eax, edi
xor ecx, ecx
mov word [esi + eax*2], cx
jmp 0x10007e2c
push edi
push edx
push dword [ebp - 0x134]
lea ecx, [ebp - 0x88]
push edi
call fcn.1000b6a0
mov byte [ebp - 4], 0x21
mov ecx, dword [ebp - 0x2a8]
cmp ecx, 8
jb 0x10007e70
mov edx, dword [ebp - 0x2bc]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x10007e66
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10009710
push ecx
push edx
call fcn.1001629e
add esp, 8
xor eax, eax
mov byte [ebp - 4], 0x20
mov ecx, dword [ebp - 0x230]
mov dword [ebp - 0x2ac], 0
mov dword [ebp - 0x2a8], 7
mov word [ebp - 0x2bc], ax
cmp ecx, 8
jb 0x10007ed1
mov edx, dword [ebp - 0x244]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x10007ec7
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10009710
push ecx
push edx
call fcn.1001629e
add esp, 8
xor eax, eax
mov byte [ebp - 4], 0x1f
mov ecx, dword [ebp - 0x218]
mov dword [ebp - 0x234], 0
mov dword [ebp - 0x230], 7
mov word [ebp - 0x244], ax
cmp ecx, 8
jb 0x10007f32
mov edx, dword [ebp - 0x22c]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x10007f28
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10009710
push ecx
push edx
call fcn.1001629e
add esp, 8
mov byte [ebp - 4], 0x1e
mov ecx, dword [ebp - 0x2c0]
cmp ecx, 8
jb 0x10007f76
mov edx, dword [ebp - 0x2d4]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x10007f6c
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10009710
push ecx
push edx
call fcn.1001629e
add esp, 8
xor eax, eax
mov byte [ebp - 4], 0x1d
mov ecx, dword [ebp - 0x1b4]
mov dword [ebp - 0x2c4], 0
mov dword [ebp - 0x2c0], 7
mov word [ebp - 0x2d4], ax
cmp ecx, 8
jb 0x10007fd7
mov edx, dword [ebp - 0x1c8]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x10007fcd
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10009710
push ecx
push edx
call fcn.1001629e
add esp, 8
xor eax, eax
mov byte [ebp - 4], 0x1c
mov ecx, dword [ebp - 0x248]
mov dword [ebp - 0x1b8], 0
mov dword [ebp - 0x1b4], 7
mov word [ebp - 0x1c8], ax
cmp ecx, 8
jb 0x10008038
mov edx, dword [ebp - 0x25c]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x1000802e
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10009710
push ecx
push edx
call fcn.1001629e
add esp, 8
xor eax, eax
mov byte [ebp - 4], 0x1b
mov ecx, dword [ebp - 0x2d8]
mov dword [ebp - 0x24c], 0
mov dword [ebp - 0x248], 7
mov word [ebp - 0x25c], ax
cmp ecx, 8
jb 0x10008099
mov edx, dword [ebp - 0x2ec]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x1000808f
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10009710
push ecx
push edx
call fcn.1001629e
add esp, 8
xor eax, eax
mov byte [ebp - 4], 0x1a
mov ecx, dword [ebp - 0x278]
mov dword [ebp - 0x2dc], 0
mov dword [ebp - 0x2d8], 7
mov word [ebp - 0x2ec], ax
cmp ecx, 8
jb 0x100080fa
mov edx, dword [ebp - 0x28c]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x100080f0
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10009710
push ecx
push edx
call fcn.1001629e
add esp, 8
mov edi, dword [ebp - 0x13c]
lea eax, [ebp - 0x108]
push eax
call edi
mov esi, dword [ebp - 0x140]
lea eax, [ebp - 0xc8]
mov byte [ebp - 4], 0xe
push eax
call edi
inc esi
jmp 0x100079ef
call fcn.10007110
xor eax, eax
mov word [ebp - 0x34], ax
lea eax, [ebp - 0x34]
push 0x10063ae0
push eax
call dword [ebp - 0x130]
test eax, eax
jns 0x10008152
mov ecx, 0xa
mov dword [ebp - 0x2c], eax
mov word [ebp - 0x34], cx
push eax
jmp 0x100096f3
xor eax, eax
mov byte [ebp - 4], 0x23
mov word [ebp - 0x24], ax
lea eax, [ebp - 0x24]
push eax
call edi
test eax, eax
jns 0x1000816c
push eax
jmp 0x100096f3
mov eax, 8
push 0x1005bcd8
mov word [ebp - 0x24], ax
call dword [ebp - 0x138]
mov dword [ebp - 0x1c], eax
test eax, eax
je 0x100096de
push 0
push 0xffffffffffffffff
sub esp, 0xc
mov byte [ebp - 4], 0x24
mov ecx, esp
mov byte [ebp - 0x119], 0
lea eax, [ebp - 0x14]
lea esi, [ebp - 0x34]
push ecx
push eax
push esi
call fcn.10009960
mov dl, byte [ebp - 0x119]
lea ecx, [ebp - 0x118]
call fcn.10005ad0
add esp, 0x14
push 0x100022d0
push 2
push 0x10
mov eax, esi
mov byte [ebp - 4], 0x26
push eax
call fcn.10015e6f
push dword [ebp - 0x110]
lea ecx, [ebp - 0x304]
call fcn.10009d30
push str.BedvitXLL32.xll
mov edx, eax
mov byte [ebp - 4], 0x27
lea ecx, [ebp - 0xb8]
call fcn.1000b160
add esp, 4
mov byte [ebp - 4], 0x29
mov ecx, dword [ebp - 0x2f0]
cmp ecx, 8
jb 0x10008244
mov edx, dword [ebp - 0x304]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x1000823a
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10009715
push ecx
push edx
call fcn.1001629e
add esp, 8
xor eax, eax
mov dword [ebp - 0x2f4], 0
cmp dword [ebp - 0x8c], 8
mov word [ebp - 0x304], ax
lea eax, [ebp - 0xa0]
cmovae eax, dword [ebp - 0xa0]
cmp dword [ebp - 0x78], 0
mov dword [ebp - 0x2f0], 7
mov dword [ebp - 0x124], eax
je 0x100082a3
push str._n_n_______________
lea ecx, [ebp - 0x2c]
call fcn.10009d30
mov dword [ebp - 0x140], eax
mov byte [ebp - 4], 0x2a
mov esi, dword [ebp - 0x120]
or esi, 4
jmp 0x100082c9
push 0x1005b4f0
lea ecx, [ebp - 0x1e4]
call fcn.10009d30
mov dword [ebp - 0x140], eax
mov dword [ebp - 4], 0x2b
mov esi, dword [ebp - 0x120]
or esi, 8
push 0x1005bdd0
lea ecx, [ebp - 0x398]
mov dword [ebp - 0x128], esi
call fcn.10009d30
mov dword [ebp - 0x1cc], eax
mov dword [ebp - 4], 0x2c
cmp dword [ebp - 0x78], 0
je 0x100083f2
push 0x1005be38
lea ecx, [ebp - 0x380]
call fcn.10009d30
mov edi, eax
mov byte [ebp - 4], 0x2d
lea edx, [ebp - 0x88]
mov ecx, dword [edi + 0x10]
or esi, 0x10
cmp dword [ebp - 0x74], 8
mov eax, dword [edi + 0x14]
cmovae edx, dword [ebp - 0x88]
sub eax, ecx
mov dword [ebp - 0x120], esi
mov dword [ebp - 0x128], esi
mov esi, dword [ebp - 0x78]
mov dword [ebp - 0x134], ecx
cmp esi, eax
ja 0x10008384
cmp dword [edi + 0x14], 8
lea eax, [esi + ecx]
mov dword [edi + 0x10], eax
mov eax, edi
mov dword [ebp - 0x12c], edi
jb 0x1000835d
mov eax, dword [edi]
mov dword [ebp - 0x12c], eax
lea ecx, [eax + ecx*2]
lea eax, [esi + esi]
push eax
push edx
push ecx
call fcn.10018060
mov eax, dword [ebp - 0x134]
add esp, 0xc
mov ecx, dword [ebp - 0x12c]
add eax, esi
xor edx, edx
mov word [ecx + eax*2], dx
jmp 0x10008396
push esi
push edx
push dword [ebp - 0x124]
mov ecx, edi
push esi
call fcn.1000b6a0
mov edi, eax
movups xmm0, xmmword [edi]
xor eax, eax
movups xmmword [ebp - 0x22c], xmm0
movq xmm0, qword [edi + 0x10]
movq qword [ebp - 0x21c], xmm0
mov dword [edi + 0x10], 0
mov dword [edi + 0x14], 7
mov word [edi], ax
mov ecx, dword [ebp - 0x120]
or ecx, 0x4000
or ecx, 0x20
mov dword [ebp - 4], 0x2e
lea edx, [ebp - 0x22c]
mov dword [ebp - 0x120], ecx
mov dword [ebp - 0x12c], edx
mov esi, ecx
mov dword [ebp - 0x128], ecx
jmp 0x10008418
push 0x1005b4f0
lea ecx, [ebp - 0x368]
call fcn.10009d30
mov dword [ebp - 0x12c], eax
or esi, 0x40
mov dword [ebp - 4], 0x2f
mov dword [ebp - 0x128], esi
mov ecx, dword [ebp - 0xa8]
mov eax, SysReAllocString
sub eax, ecx
cmp eax, 0x27
jb 0x1000971a
cmp dword [ebp - 0xa4], 8
lea eax, [ebp - 0xb8]
push ecx
cmovae eax, dword [ebp - 0xb8]
push eax
push 0x27
push 0x1005be78
push ecx
push dword [ebp - 0x124]
lea ecx, [ebp - 0x1a8]
call fcn.1000bbb0
or esi, 0x80
mov dword [ebp - 0x128], esi
push 0x1005bee8
lea ecx, [ebp - 0x3b0]
mov dword [ebp - 4], 0x30
call fcn.10009d30
mov edi, eax
push 0x1005bb70
lea ecx, [ebp - 0x34c]
mov byte [ebp - 4], 0x31
call fcn.10009d30
push 0x18
push 0x1005bf40
push 0
mov ecx, eax
mov byte [ebp - 4], 0x32
call fcn.1000bd40
mov dword [ebp - 0x1ec], 0
xorps xmm0, xmm0
movups xmmword [ebp - 0x1fc], xmm0
mov dword [ebp - 0x1e8], 0
xor ecx, ecx
movups xmm0, xmmword [eax]
or esi, 0x100
movups xmmword [ebp - 0x1fc], xmm0
movq xmm0, qword [eax + 0x10]
movq qword [ebp - 0x1ec], xmm0
mov dword [eax + 0x10], 0
mov dword [eax + 0x14], 7
mov word [eax], cx
mov dword [ebp - 0x128], esi
push 0x1005bcd4
lea edx, [ebp - 0x1fc]
mov byte [ebp - 4], 0x33
lea ecx, [ebp - 0x334]
call fcn.1000b160
add esp, 4
push edi
push eax
push dword [ebp - 0x124]
lea ecx, [ebp - 0x274]
mov byte [ebp - 4], 0x34
call fcn.1000b9a0
or esi, 0x200
mov dword [ebp - 0x128], esi
push 0x1005bec8
lea edx, [ebp - 0x274]
mov byte [ebp - 4], 0x35
lea ecx, [ebp - 0x31c]
call fcn.1000b160
add esp, 4
lea ecx, [ebp - 0x1a8]
mov byte [ebp - 4], 0x36
push ecx
push eax
push dword [ebp - 0x124]
lea ecx, [ebp - 0x3f8]
call fcn.1000b9a0
or esi, 0x400
mov dword [ebp - 0x128], esi
mov byte [ebp - 4], 0x37
push dword [ebp - 0x12c]
lea eax, [ebp - 0x3f8]
push eax
push dword [ebp - 0x124]
lea ecx, [ebp - 0x3e0]
call fcn.1000b9a0
or esi, 0x800
mov dword [ebp - 0x128], esi
push dword [ebp - 0x1cc]
lea eax, [ebp - 0x3e0]
mov byte [ebp - 4], 0x38
push eax
push dword [ebp - 0x124]
lea ecx, [ebp - 0x410]
call fcn.1000b9a0
or esi, 0x1000
mov dword [ebp - 0x128], esi
mov byte [ebp - 4], 0x39
lea eax, [ebp - 0x410]
push dword [ebp - 0x140]
lea ecx, [ebp - 0x214]
push eax
push dword [ebp - 0x124]
call fcn.1000b9a0
push 0x40021
push dword [ebp - 0x124]
or esi, 0x2000
lea eax, [ebp - 0x214]
cmp dword [ebp - 0x200], 8
mov dword [ebp - 0x120], esi
cmovae eax, dword [ebp - 0x214]
push eax
push 0
call dword [sym.imp.USER32.dll_MessageBoxW]
mov ecx, dword [ebp - 0x200]
cmp eax, 2
sete byte [ebp - 0x119]
cmp ecx, 8
jb 0x10008680
mov edx, dword [ebp - 0x214]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x10008676
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1000971f
push ecx
push edx
call fcn.1001629e
add esp, 8
xor eax, eax
mov byte [ebp - 4], 0x38
mov ecx, dword [ebp - 0x3fc]
mov dword [ebp - 0x204], 0
mov dword [ebp - 0x200], 7
mov word [ebp - 0x214], ax
cmp ecx, 8
jb 0x100086e1
mov edx, dword [ebp - 0x410]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x100086d7
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1000971f
push ecx
push edx
call fcn.1001629e
add esp, 8
mov byte [ebp - 4], 0x37
mov ecx, dword [ebp - 0x3cc]
cmp ecx, 8
jb 0x10008725
mov edx, dword [ebp - 0x3e0]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x1000871b
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1000971f
push ecx
push edx
call fcn.1001629e
add esp, 8
mov byte [ebp - 4], 0x36
mov ecx, dword [ebp - 0x3e4]
cmp ecx, 8
jb 0x10008769
mov edx, dword [ebp - 0x3f8]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x1000875f
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1000971f
push ecx
push edx
call fcn.1001629e
add esp, 8
mov byte [ebp - 4], 0x35
mov ecx, dword [ebp - 0x308]
cmp ecx, 8
jb 0x100087ad
mov edx, dword [ebp - 0x31c]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x100087a3
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1000971f
push ecx
push edx
call fcn.1001629e
add esp, 8
xor eax, eax
mov byte [ebp - 4], 0x34
mov ecx, dword [ebp - 0x260]
mov dword [ebp - 0x30c], 0
mov dword [ebp - 0x308], 7
mov word [ebp - 0x31c], ax
cmp ecx, 8
jb 0x1000880e
mov edx, dword [ebp - 0x274]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x10008804
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1000971f
push ecx
push edx
call fcn.1001629e
add esp, 8
xor eax, eax
mov byte [ebp - 4], 0x33
mov ecx, dword [ebp - 0x320]
mov dword [ebp - 0x264], 0
mov dword [ebp - 0x260], 7
mov word [ebp - 0x274], ax
cmp ecx, 8
jb 0x1000886f
mov edx, dword [ebp - 0x334]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x10008865
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1000971f
push ecx
push edx
call fcn.1001629e
add esp, 8
xor eax, eax
mov byte [ebp - 4], 0x32
mov ecx, dword [ebp - 0x1e8]
mov dword [ebp - 0x324], 0
mov dword [ebp - 0x320], 7
mov word [ebp - 0x334], ax
cmp ecx, 8
jb 0x100088d0
mov edx, dword [ebp - 0x1fc]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x100088c6
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1000971f
push ecx
push edx
call fcn.1001629e
add esp, 8
xor eax, eax
mov byte [ebp - 4], 0x31
mov ecx, dword [ebp - 0x338]
mov dword [ebp - 0x1ec], 0
mov dword [ebp - 0x1e8], 7
mov word [ebp - 0x1fc], ax
cmp ecx, 8
jb 0x10008931
mov edx, dword [ebp - 0x34c]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x10008927
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1000971f
push ecx
push edx
call fcn.1001629e
add esp, 8
xor eax, eax
mov byte [ebp - 4], 0x30
mov ecx, dword [ebp - 0x39c]
mov dword [ebp - 0x33c], 0
mov dword [ebp - 0x338], 7
mov word [ebp - 0x34c], ax
cmp ecx, 8
jb 0x10008992
mov edx, dword [ebp - 0x3b0]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x10008988
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1000971f
push ecx
push edx
call fcn.1001629e
add esp, 8
xor eax, eax
mov byte [ebp - 4], 0x2f
mov ecx, dword [ebp - 0x194]
mov dword [ebp - 0x3a0], 0
mov dword [ebp - 0x39c], 7
mov word [ebp - 0x3b0], ax
cmp ecx, 8
jb 0x100089f3
mov edx, dword [ebp - 0x1a8]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x100089e9
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1000971f
push ecx
push edx
call fcn.1001629e
add esp, 8
mov dword [ebp - 4], 0x2e
mov eax, dword [ebp - 0x120]
test al, 0x40
je 0x10008a70
mov ecx, dword [ebp - 0x354]
and eax, 0xffffffbf
mov dword [ebp - 0x120], eax
cmp ecx, 8
jb 0x10008a53
mov edx, dword [ebp - 0x368]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x10008a43
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1000971f
push ecx
push edx
call fcn.1001629e
mov eax, dword [ebp - 0x120]
add esp, 8
xor ecx, ecx
mov dword [ebp - 0x358], 0
mov dword [ebp - 0x354], 7
mov word [ebp - 0x368], cx
mov dword [ebp - 4], 0x2d
test al, 0x20
je 0x10008aca
mov ecx, dword [ebp - 0x218]
and eax, 0xffffffdf
mov dword [ebp - 0x120], eax
cmp ecx, 8
jb 0x10008aca
mov edx, dword [ebp - 0x22c]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x10008aba
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1000971f
push ecx
push edx
call fcn.1001629e
mov eax, dword [ebp - 0x120]
add esp, 8
mov dword [ebp - 4], 0x2c
test al, 0x10
je 0x10008b3b
mov ecx, dword [ebp - 0x36c]
and eax, 0xffffffef
mov dword [ebp - 0x120], eax
cmp ecx, 8
jb 0x10008b1e
mov edx, dword [ebp - 0x380]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x10008b14
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1000971f
push ecx
push edx
call fcn.1001629e
add esp, 8
xor eax, eax
mov dword [ebp - 0x370], 0
mov dword [ebp - 0x36c], 7
mov word [ebp - 0x380], ax
mov byte [ebp - 4], 0x2b
mov ecx, dword [ebp - 0x384]
cmp ecx, 8
jb 0x10008b7f
mov edx, dword [ebp - 0x398]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x10008b75
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1000971f
push ecx
push edx
call fcn.1001629e
add esp, 8
xor eax, eax
mov dword [ebp - 4], 0x2a
mov word [ebp - 0x398], ax
mov eax, dword [ebp - 0x120]
mov dword [ebp - 0x388], 0
mov dword [ebp - 0x384], 7
test al, 8
je 0x10008c19
mov ecx, dword [ebp - 0x1d0]
and eax, 0xfffffff7
mov dword [ebp - 0x120], eax
cmp ecx, 8
jb 0x10008bfc
mov edx, dword [ebp - 0x1e4]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x10008bec
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1000971f
push ecx
push edx
call fcn.1001629e
mov eax, dword [ebp - 0x120]
add esp, 8
xor ecx, ecx
mov dword [ebp - 0x1d4], 0
mov dword [ebp - 0x1d0], 7
mov word [ebp - 0x1e4], cx
mov dword [ebp - 4], 0x29
test al, 4
je 0x10008c5e
mov ecx, dword [ebp - 0x18]
cmp ecx, 8
jb 0x10008c5e
mov edx, dword [ebp - 0x2c]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x10008c54
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1000971f
push ecx
push edx
call fcn.1001629e
add esp, 8
cmp byte [ebp - 0x119], 0
je 0x10008dc3
mov ecx, dword [ebp - 0xa4]
cmp ecx, 8
jb 0x10008cab
mov edx, dword [ebp - 0xb8]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x10008ca1
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10009724
push ecx
push edx
call fcn.1001629e
add esp, 8
mov edi, dword [ebp - 0x13c]
xor eax, eax
mov word [ebp - 0xb8], ax
lea eax, [ebp - 0x118]
push eax
mov dword [ebp - 0xa8], 0
mov dword [ebp - 0xa4], 7
call edi
lea eax, [ebp - 0xd8]
push eax
call edi
mov ecx, dword [ebp - 0x74]
cmp ecx, 8
jb 0x10008d1d
mov edx, dword [ebp - 0x88]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x10008d13
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10009724
push ecx
push edx
call fcn.1001629e
add esp, 8
mov edx, dword [ebp - 0x70]
xor eax, eax
mov dword [ebp - 0x78], 0
mov dword [ebp - 0x74], 7
mov word [ebp - 0x88], ax
test edx, edx
je 0x10008d80
mov ecx, dword [ebp - 0x68]
mov eax, edx
sub ecx, edx
and ecx, 0xfffffffc
cmp ecx, 0x1000
jb 0x10008d61
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10009724
push ecx
push edx
call fcn.1001629e
add esp, 8
mov dword [ebp - 0x70], 0
mov dword [ebp - 0x6c], 0
mov dword [ebp - 0x68], 0
mov ecx, dword [ebp - 0x8c]
cmp ecx, 8
jb 0x100096a0
mov edx, dword [ebp - 0xa0]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x1000770e
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10009724
jmp 0x1000770e
mov edi, dword [ebp - 0x13c]
xor esi, esi
nop dword [eax + eax]
mov eax, dword [ebp - 0x6c]
sub eax, dword [ebp - 0x70]
sar eax, 2
cmp esi, eax
jae 0x10009057
xor eax, eax
mov word [ebp - 0x180], ax
lea eax, [ebp - 0x180]
push 0x10063ae0
push eax
call dword [ebp - 0x130]
test eax, eax
jns 0x10008e18
mov ecx, 0xa
mov dword [ebp - 0x178], eax
mov word [ebp - 0x180], cx
push eax
jmp 0x100096f3
xor eax, eax
mov byte [ebp - 4], 0x3a
mov word [ebp - 0x170], ax
lea eax, [ebp - 0x170]
push eax
call edi
test eax, eax
jns 0x10008e38
push eax
jmp 0x100096f3
mov eax, 8
push str.AddIns.Item_
mov word [ebp - 0x170], ax
call dword [ebp - 0x138]
mov dword [ebp - 0x168], eax
test eax, eax
jne 0x10008e74
mov eax, 0xa
mov dword [ebp - 0x168], 0x8007000e
mov word [ebp - 0x170], ax
jmp 0x100096ee
mov eax, dword [ebp - 0x70]
mov ecx, 3
mov eax, dword [eax + esi*4]
mov word [ebp - 0x160], cx
mov dword [ebp - 0x158], eax
xor eax, eax
mov byte [ebp - 4], 0x3c
push 0x1005bf74
lea ecx, [ebp - 0x150]
mov word [ebp - 0x150], ax
call fcn.10002320
push 0
push 0xffffffffffffffff
sub esp, 0xc
mov byte [ebp - 4], 0x3d
mov ecx, esp
mov byte [ebp - 0x119], 0
lea eax, [ebp - 0x140]
lea edx, [ebp - 0x180]
push ecx
push eax
push edx
call fcn.10009960
mov dl, byte [ebp - 0x119]
lea ecx, [ebp - 0xc8]
call fcn.10005ad0
add esp, 0x14
push 0x100022d0
push 4
push 0x10
lea eax, [ebp - 0x180]
mov byte [ebp - 4], 0x3f
push eax
call fcn.10015e6f
mov eax, 0xb
lea ecx, [ebp - 0xc8]
mov word [ebp - 0x108], ax
or eax, 0xffffffff
mov word [ebp - 0x100], ax
lea eax, [ebp - 0x108]
push eax
call fcn.100024b0
mov byte [ebp - 0x119], al
lea eax, [ebp - 0x108]
push eax
call edi
cmp byte [ebp - 0x119], 0
je 0x10009044
xor eax, eax
mov word [ebp - 0x64], ax
lea eax, [ebp - 0x64]
push 0x10063ae0
push eax
call dword [ebp - 0x130]
test eax, eax
jns 0x10008f6d
mov ecx, 0xa
mov dword [ebp - 0x5c], eax
mov word [ebp - 0x64], cx
push eax
jmp 0x100096f3
xor eax, eax
mov byte [ebp - 4], 0x40
mov word [ebp - 0x54], ax
lea eax, [ebp - 0x54]
push eax
call edi
test eax, eax
jns 0x10008f87
push eax
jmp 0x100096f3
mov eax, 8
push str.AddIns.Item_
mov word [ebp - 0x54], ax
call dword [ebp - 0x138]
mov dword [ebp - 0x4c], eax
test eax, eax
jne 0x10008fb7
mov eax, 0xa
mov dword [ebp - 0x4c], 0x8007000e
mov word [ebp - 0x54], ax
jmp 0x100096ee
mov eax, dword [ebp - 0x70]
mov ecx, 3
mov eax, dword [eax + esi*4]
mov word [ebp - 0x44], cx
mov dword [ebp - 0x3c], eax
xor eax, eax
mov byte [ebp - 4], 0x42
push str._.Installed
lea ecx, [ebp - 0x34]
mov word [ebp - 0x34], ax
call fcn.10002320
mov eax, 0xb
mov word [ebp - 0x24], ax
xor eax, eax
mov word [ebp - 0x1c], ax
push 0
push 0xffffffffffffffff
sub esp, 0xc
mov byte [ebp - 4], 0x43
mov ecx, esp
mov byte [ebp - 0x119], 0
lea eax, [ebp - 0x14]
lea edx, [ebp - 0x64]
push ecx
push eax
push edx
call fcn.10009960
mov dl, byte [ebp - 0x119]
lea ecx, [ebp - 0x1c0]
call fcn.10005ad0
add esp, 0x14
lea eax, [ebp - 0x1c0]
push eax
call edi
push 0x100022d0
push 5
push 0x10
lea eax, [ebp - 0x64]
mov byte [ebp - 4], 0x3f
push eax
call fcn.10015e6f
lea eax, [ebp - 0xc8]
mov byte [ebp - 4], 0x29
push eax
call edi
inc esi
jmp 0x10008dd0
call fcn.10007110
mov esi, dword [0x10063aa0]
lea eax, [ebp - 0xb8]
sub esp, 0x18
mov ecx, esp
push eax
call fcn.10009e60
mov edx, 0x69
mov ecx, esi
call fcn.10006e50
mov edi, eax
add esp, 0x18
test edi, edi
je 0x1000916b
cmp dword [ebp - 0x8c], 8
lea esi, [ebp - 0xa0]
push 0x1005bf90
cmovae esi, dword [ebp - 0xa0]
lea ecx, [ebp - 0x1a8]
call fcn.10009d30
push edi
sub esp, 0xc
mov byte [ebp - 4], 0x44
mov ecx, esp
lea eax, [ebp - 0x190]
lea edx, [ebp - 0x1a8]
push ecx
push eax
push edx
call fcn.100097e0
xor edx, edx
lea ecx, [ebp - 0x1e4]
call fcn.100053c0
add esp, 0x10
cmp dword [eax + 0x14], 8
jb 0x100090e6
mov eax, dword [eax]
push 0x40010
push esi
push eax
push 0
call dword [sym.imp.USER32.dll_MessageBoxW]
mov ecx, dword [ebp - 0x1d0]
cmp ecx, 8
jb 0x10009135
mov edx, dword [ebp - 0x1e4]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x1000912b
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10009729
push ecx
push edx
call fcn.1001629e
add esp, 8
push fcn.10009cd0
xor eax, eax
mov dword [ebp - 0x1d4], 0
push 1
mov word [ebp - 0x1e4], ax
lea eax, [ebp - 0x1a8]
push 0x18
push eax
mov dword [ebp - 0x1d0], 7
mov byte [ebp - 4], 0x29
call fcn.10015e6f
xor eax, eax
mov word [ebp - 0x190], ax
lea eax, [ebp - 0x190]
push 0x10063ae0
push eax
call dword [ebp - 0x130]
test eax, eax
jns 0x100091a2
mov ecx, 0xa
mov dword [ebp - 0x188], eax
mov word [ebp - 0x190], cx
push eax
jmp 0x100096f3
mov edi, dword [ebp - 0x13c]
xor eax, eax
mov byte [ebp - 4], 0x45
mov word [ebp - 0x180], ax
lea eax, [ebp - 0x180]
push eax
call edi
test eax, eax
jns 0x100091c8
push eax
jmp 0x100096f3
mov eax, 8
push str.AddIns.Add_
mov word [ebp - 0x180], ax
call dword [ebp - 0x138]
mov dword [ebp - 0x178], eax
test eax, eax
jne 0x10009204
mov eax, 0xa
mov dword [ebp - 0x178], 0x8007000e
mov word [ebp - 0x180], ax
jmp 0x100096ee
mov byte [ebp - 4], 0x46
lea esi, [ebp - 0xb8]
cmp dword [ebp - 0xa4], 8
cmovae esi, dword [ebp - 0xb8]
xor eax, eax
mov word [ebp - 0x170], ax
lea eax, [ebp - 0x170]
push eax
call edi
test eax, eax
jns 0x10009238
push eax
jmp 0x100096f3
mov eax, 8
push esi
mov word [ebp - 0x170], ax
call dword [ebp - 0x138]
mov dword [ebp - 0x168], eax
test eax, eax
jne 0x10009274
test esi, esi
je 0x10009274
mov eax, 0xa
mov dword [ebp - 0x168], 0x8007000e
mov word [ebp - 0x170], ax
jmp 0x100096ee
mov eax, 3
mov dword [ebp - 0x158], 0
mov word [ebp - 0x160], ax
xor eax, eax
mov byte [ebp - 4], 0x48
push 0x1005bfc0
lea ecx, [ebp - 0x150]
mov word [ebp - 0x150], ax
call fcn.10002320
push 0
push 0xffffffffffffffff
sub esp, 0xc
mov byte [ebp - 4], 0x49
mov ecx, esp
mov byte [ebp - 0x119], 0
lea eax, [ebp - 0x140]
lea esi, [ebp - 0x190]
push ecx
push eax
push esi
call fcn.10009960
mov dl, byte [ebp - 0x119]
lea ecx, [ebp - 0xe8]
call fcn.10005ad0
add esp, 0x14
push 0x100022d0
push 5
push 0x10
mov eax, esi
mov byte [ebp - 4], 0x4b
push eax
call fcn.10015e6f
call fcn.10007110
xor eax, eax
mov word [ebp - 0x44], ax
lea eax, [ebp - 0xe8]
push eax
lea eax, [ebp - 0x44]
push eax
call dword [ebp - 0x130]
test eax, eax
jns 0x1000932a
mov ecx, 0xa
mov dword [ebp - 0x3c], eax
mov word [ebp - 0x44], cx
push eax
jmp 0x100096f3
xor eax, eax
mov byte [ebp - 4], 0x4c
mov word [ebp - 0x34], ax
lea eax, [ebp - 0x34]
push eax
call edi
test eax, eax
jns 0x10009344
push eax
jmp 0x100096f3
mov eax, 8
push 0x1005bfc4
mov word [ebp - 0x34], ax
call dword [ebp - 0x138]
mov dword [ebp - 0x2c], eax
test eax, eax
jne 0x10009374
mov eax, 0xa
mov dword [ebp - 0x2c], 0x8007000e
mov word [ebp - 0x34], ax
jmp 0x100096ee
mov eax, 0xb
mov word [ebp - 0x24], ax
or eax, 0xffffffff
mov word [ebp - 0x1c], ax
push 0
push 0xffffffffffffffff
sub esp, 0xc
mov byte [ebp - 4], 0x4d
mov ecx, esp
mov byte [ebp - 0x119], 0
lea eax, [ebp - 0x14]
lea esi, [ebp - 0x44]
push ecx
push eax
push esi
call fcn.10009960
mov dl, byte [ebp - 0x119]
lea ecx, [ebp - 0xf8]
call fcn.10005ad0
add esp, 0x14
push 0x100022d0
push 3
push 0x10
mov eax, esi
mov byte [ebp - 4], 0x4f
push eax
call fcn.10015e6f
call fcn.10007110
cmp dword [ebp - 0x8c], 8
lea eax, [ebp - 0xa0]
push 0x40040
cmovae eax, dword [ebp - 0xa0]
push eax
push 0x1005bfe0
push 0
call dword [sym.imp.USER32.dll_MessageBoxW]
push 0x10063aa8
push 1
push 0
push 0x8067
call fcn.10001b00
add esp, 0x10
test eax, eax
jne 0x1000942a
push 0x10062a20
push 1
push eax
push 0x8010
call fcn.10001b00
add esp, 0x10
lea eax, [ebp - 0xf8]
push eax
call edi
lea eax, [ebp - 0xe8]
push eax
call edi
mov ecx, dword [ebp - 0xa4]
cmp ecx, 8
jb 0x1000947c
mov edx, dword [ebp - 0xb8]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x10009472
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10009724
push ecx
push edx
call fcn.1001629e
add esp, 8
xor eax, eax
mov dword [ebp - 0xa8], 0
mov word [ebp - 0xb8], ax
lea eax, [ebp - 0x118]
push eax
mov dword [ebp - 0xa4], 7
call edi
lea eax, [ebp - 0xd8]
push eax
call edi
mov ecx, dword [ebp - 0x74]
cmp ecx, 8
jb 0x100094e8
mov edx, dword [ebp - 0x88]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x100094de
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10009724
push ecx
push edx
call fcn.1001629e
add esp, 8
mov edx, dword [ebp - 0x70]
xor eax, eax
mov dword [ebp - 0x78], 0
mov dword [ebp - 0x74], 7
mov word [ebp - 0x88], ax
test edx, edx
je 0x10008d80
mov ecx, dword [ebp - 0x68]
mov eax, edx
sub ecx, edx
and ecx, 0xfffffffc
cmp ecx, 0x1000
jb 0x10008d61
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10009724
jmp 0x10008d61
mov eax, 1
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x14]
xor ecx, ebp
call fcn.10015c58
mov esp, ebp
pop ebp
ret
call fcn.1001f5cf
mov ecx, 0xa
mov dword [ebp - 0x2c], eax
push eax
mov word [ebp - 0x34], cx
call fcn.10002230
push eax
call fcn.10002230
mov eax, 0xa
mov dword [ebp - 0x1c], 0x8007000e
mov word [ebp - 0x24], ax
push 0x8007000e
call fcn.10002230
mov ecx, 0xa
mov dword [ebp - 0x2c], eax
push eax
mov word [ebp - 0x34], cx
call fcn.10002230
push eax
call fcn.10002230
call fcn.1001f5cf
call fcn.1001f5cf
call fcn.10001de0
call fcn.1001f5cf
call fcn.1001f5cf
call fcn.1001f5cf
int3