Function at 0x100310ce
Capabilities:
Delete registry key
Get geographical location

Disassembly:
mov eax, 0x10065a11
call fcn.100641d4
sub esp, 0x2b8
mov dword [ebp - 0x18], 0x6f1b
xor eax, eax
inc eax
mov dword [ebp - 0x100], edx
push ebx
xor ebx, ebx
mov dword [ebp - 0xa4], ecx
mov dword [ebp - 0x30], ebx
mov dword [ebp - 0x2c], 0xfffffffa
mov dword [ebp - 0x38], 0xfffffff7
mov dword [ebp - 0x1fc], eax
mov dword [ebp - 0x1f8], eax
mov dword [ebp - 0x1f4], eax
mov dword [ebp - 0x1f0], eax
mov dword [ebp - 0x30], ebx
cmp dword [ebp - 0x18], 4
mov eax, dword [ebp - 0x18]
sbb edx, edx
mov dword [ebp - 0x200], ebx
xor ecx, ecx
inc edx
cmp eax, edx
mov eax, dword [ebp - 0x18]
push esi
setl cl
imul ecx, ecx, 0xc383
neg eax
push edi
sbb eax, eax
mov dword [ebp - 0x10], esp
inc eax
cmp eax, ecx
jne 0x100311f4
push 2
lea ecx, [ebp - 0x12c]
call fcn.1000ba05
push 2
mov dword [ebp - 0x24], 5
mov dword [ebp - 0x1c], ebx
pop edx
jmp 0x10031184
mov ecx, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x12c]
mov dword [eax + ecx*4], 0x5378470e
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], edx
jl 0x10031171
mov eax, dword [ebp - 0x18]
neg eax
je 0x100311a8
mov eax, dword [ebp - 0x12c]
mov eax, dword [eax]
mov dword [ebp - 0x30], eax
mov eax, dword [ebp - 0x30]
cmp eax, dword [ebp - 0x18]
jle 0x100311a8
xor edi, edi
inc edi
jmp 0x100311ca
cmp dword [ebp - 0x18], ebx
je 0x100311ba
cmp dword [ebp - 0x18], 7
je 0x100311ba
xor edi, edi
inc edi
mov eax, edi
jmp 0x100311bf
xor edi, edi
mov eax, ebx
inc edi
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], ebx
jne 0x100311ca
mov eax, dword [ebp - 0x30]
mov dword [ebp - 0x2c], edi
mov dword [ebp - 0x24], ebx
cmp dword [ebp - 0x24], edx
jne 0x100311e9
mov ecx, dword [ebp - 0x12c]
mov eax, dword [ecx + 4]
mov dword [ebp - 0x2c], eax
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], edx
je 0x100311db
lea ecx, [ebp - 0x12c]
jmp 0x1003144b
xor edi, edi
mov dword [ebp - 0x34], 0xacda
inc edi
mov dword [ebp - 0x24], 0xde0d6158
push edi
lea ecx, [ebp - 0xa0]
call fcn.1000ba05
mov dword [ebp - 4], ebx
mov dword [ebp - 0x28], 4
mov dword [ebp - 0x1c], ebx
jmp 0x10031233
mov ecx, dword [ebp - 0x1c]
mov eax, dword [ebp - 0xa0]
mov dword [eax + ecx*4], 0x1448afe0
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], edi
jl 0x10031220
mov eax, dword [ebp - 0x18]
xor ecx, ecx
mov edx, dword [ebp - 0x24]
add edx, dword [ebp - 0x18]
mov eax, dword [ebp - 0xa0]
add edx, dword [eax]
mov eax, dword [ebp - 0x18]
cmp edx, eax
mov edx, dword [ebp - 0xa0]
setne cl
xor eax, eax
cmp ecx, dword [edx]
setl al
xor ecx, ecx
cmp eax, 0x319b885b
mov eax, dword [ebp - 0x2c]
setg cl
mov dword [ebp - 0x30], ecx
mov dword [edx], ecx
xor ecx, ecx
cmp dword [ebp - 0x30], eax
setg cl
cmp dword [ebp - 0x34], ecx
jne 0x10031336
xor edx, edx
inc edx
mov dword [ebp - 0x30], edx
mov dword [ebp - 0x34], 0x5ef7b606
mov dword [ebp - 0x1c], ebx
jmp 0x100312a6
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0xe8], 0xca52c43d
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], edx
jl 0x10031295
mov eax, dword [ebp - 0xa0]
mov ecx, edx
sub ecx, dword [eax]
imul ecx, dword [eax]
test ecx, ecx
je 0x100312c3
mov esi, edx
cmp dword [ebp - 0x28], ebx
jne 0x100312c5
mov esi, ebx
mov eax, dword [ebp - 0x24]
xor ecx, ecx
cmp esi, eax
setge cl
cmp dword [ebp - 0x18], ecx
je 0x100312db
cmp dword [ebp - 0x30], ebx
jne 0x100312db
mov edx, ebx
mov ecx, dword [ebp - 0x30]
sub ecx, dword [ebp - 0x30]
mov eax, dword [ebp - 0xa0]
imul ecx, edx
mov dword [eax], ecx
xor ecx, ecx
mov eax, dword [ebp - 0x30]
mov eax, dword [ebp - 0x34]
mov dword [ebp - 0xe8], eax
mov eax, dword [ebp - 0x28]
mov edx, dword [ebp - 0xa0]
cmp dword [edx], 2
setle cl
xor eax, eax
cmp ecx, 0x3d22
setg al
xor ecx, ecx
add eax, 0xedf21916
cmp eax, 0x6b74
mov dword [edx], eax
setne cl
cmp ecx, 0xa480d8aa
sbb eax, eax
inc eax
mov dword [ebp - 0x2c], eax
jmp 0x10031413
mov dword [ebp - 0x18], 0xffffffff
mov dword [ebp - 0x24], 0x6df0
cmp dword [ebp - 0x24], 0x6ee2
jle 0x100313ac
mov esi, ebx
mov dword [ebp - 0x1c], ebx
mov dword [ebp - 0x2c], esi
mov dword [ebp - 0x30], 0x1ee0
mov edi, ebx
mov ebx, dword [ebp - 0x2c]
mov dword [ebp - 0x28], edi
mov esi, edi
mov edi, 0x22c
mov ecx, esi
mov eax, ebx
shl eax, cl
mov ecx, 0x10080d38
cdq
push edx
push eax
call fcn.1000b7ed
dec esi
dec edi
jne 0x1003136b
mov edi, dword [ebp - 0x28]
inc edi
mov dword [ebp - 0x28], edi
cmp edi, 0x65fa
jl 0x10031364
dec ebx
dec dword [ebp - 0x30]
push 0
mov dword [ebp - 0x2c], ebx
pop ebx
jne 0x1003135c
mov esi, dword [ebp - 0x1c]
inc esi
mov dword [ebp - 0x1c], esi
cmp esi, 0xd40
jl 0x10031352
mov byte [ebp - 4], 1
cmp dword [ebp - 0x24], 0x6c4f
jge 0x100313e6
mov edx, str.ipsohkck_otozlmjl_opruopx_scpkyaklu
mov ecx, 0x10080d38
call fcn.1000da64
jmp 0x100313e6
mov dword [ebp - 0x1c], ebx
jmp 0x100313fc
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0x104], 0x6311489d
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 1
jl 0x100313eb
inc dword [ebp - 0x18]
mov eax, dword [ebp - 0xa0]
mov eax, dword [eax]
mov dword [ebp - 0x104], eax
mov dword [ebp - 0x24], 0xfffffffc
jmp 0x1003143b
mov byte [ebp - 0x1d], bl
cmp byte [ebp - 0x1d], 0
je 0x10031432
push ebx
push 0x1469
push ebx
call dword [sym.imp.GDI32.dll_GetBitmapBits]
mov eax, dword [ebp - 0x1f4]
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], 0x30
jge 0x1003141c
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xa0]
call fcn.1000ba88
mov dword [ebp - 0x64], 0xd01b104
mov byte [ebp - 0x60], 5
mov byte [ebp - 0x5f], bl
mov byte [ebp - 0x5e], bl
mov dword [ebp - 0x5d], 0x11b062b
mov dword [ebp - 0x59], 0x33302a0
mov byte [ebp - 0x55], 0xd
mov dword [ebp - 0x1c], 0xb11accba
mov dword [ebp - 0x28], 9
mov dword [ebp - 0x28], 0xffffffff
mov dword [ebp - 0x34], 0x949f0dc4
mov dword [ebp - 0x1c], ebx
jmp 0x100314a5
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0x168], 0x4f37831e
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 3
jl 0x10031494
mov dword [ebp - 0x1c], 1
mov dword [ebp - 0x1c], 2
push 3
cmp dword [ebp - 0x1c], ebx
jl 0x10031777
lea ecx, [ebp - 0x144]
call fcn.1000ba05
xor edi, edi
mov dword [ebp - 4], 3
inc edi
lea ecx, [ebp - 0x1b0]
push edi
call fcn.1000ba05
mov byte [ebp - 4], 4
mov dword [ebp - 0x18], ebx
jmp 0x100314fd
mov ecx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x144]
mov dword [eax + ecx*4], edi
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 3
jl 0x100314ee
mov dword [ebp - 0x18], ebx
jmp 0x1003151b
mov ecx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x1b0]
mov dword [eax + ecx*4], 0x4b71808a
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], edi
jl 0x10031508
mov dword [ebp - 0x28], 0x77d5
cmp dword [ebp - 0x28], 0x7a14
jle 0x10031556
mov esi, ebx
mov edi, ebx
lea eax, [edi + esi]
mov ecx, 0x10080d38
cdq
push edx
push eax
call fcn.1000b7ed
inc edi
cmp edi, 0x2780
jl 0x10031534
inc esi
cmp esi, 0x603e
jl 0x10031532
mov byte [ebp - 0x1d], bl
cmp byte [ebp - 0x1d], 0
je 0x10031574
push ebx
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_SetBkColor]
mov byte [ebp - 4], 5
cmp dword [ebp - 0x28], 0x754c
jge 0x100315ae
mov edx, str.lvvolwk_mhppt_cbbirxva_tymhubhg_jabuqseki_nsawbzt_iajrxu_itoxkcp_hflgup_ydrqzcz_vdczmebsb_tpggwsulg
mov ecx, 0x10080d38
call fcn.1000da64
jmp 0x100315ae
mov dword [ebp - 4], 4
mov eax, dword [ebp - 0x144]
mov dword [eax], 2
mov dword [ebp - 0x18], 1
mov dword [ebp - 0x24], ebx
jmp 0x100315de
mov eax, dword [ebp - 0x24]
mov dword [ebp + eax*4 - 0x214], 0xffffffff
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], 2
jl 0x100315cd
mov dword [ebp - 0x18], ebx
jmp 0x1003173a
mov dword [ebp - 0x24], 0xd42ca8cd
mov dword [ebp - 0x2c], 1
mov dword [ebp - 0x28], 0x3b16aac8
mov dword [ebp - 0x28], ebx
mov dword [ebp - 0x24], ebx
cmp dword [ebp - 0x24], 2
jg 0x10031720
xor edi, edi
push dword [ebp - 0x38]
lea eax, [ebp - 0x27c]
mov dword [ebp - 0xbc], ebx
push eax
lea eax, [ebp - 0x28c]
mov dword [ebp - 0xb8], ebx
push eax
xorps xmm0, xmm0
mov dword [ebp - 0xb4], ebx
push ebx
lea ecx, [ebp - 0xbc]
movdqu xmmword [ebp - 0x28c], xmm0
call fcn.1000dfe5
mov dword [ebp - 0x2c], 0x9cc099a5
xor edx, edx
mov eax, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp + eax*4 - 0x168]
mov eax, dword [ebp - 0x160]
cmp eax, ecx
mov eax, dword [ebp - 0xbc]
setl dl
xor ecx, ecx
mov dword [eax], edx
mov eax, dword [ebp - 0x1c]
cmp edx, eax
setl cl
mov dword [ebp - 0x28], ecx
cmp dword [ebp - 0x28], ebx
je 0x10031693
lea edx, [edi + 1]
cmp dword [ebp - 0x160], ebx
jne 0x10031695
mov edx, ebx
mov eax, dword [ebp - 0x18]
xor ecx, ecx
mov dword [ebp - 0x2c], eax
mov eax, dword [ebp - 0x2c]
mov dword [ebp - 0x28], eax
mov eax, dword [ebp - 0x28]
cmp eax, edx
setge cl
mov dword [ebp - 0x214], ecx
cmp ecx, dword [ebp - 0x24]
je 0x100316c3
mov eax, dword [ebp - 0xbc]
lea edx, [edi + 1]
cmp dword [eax], ebx
jne 0x100316c5
mov edx, ebx
mov eax, dword [ebp - 0x18]
xor ecx, ecx
cmp edx, eax
setle cl
mov dword [ebp - 0x28], ecx
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp + eax*4 - 0x168]
mov eax, dword [ebp - 0x28]
mov dword [ebp - 0x28], 0xd40a7fcc
mov ecx, dword [ebp - 0x28]
mov eax, dword [ebp - 0x1b0]
mov dword [eax], ecx
mov byte [ebp - 0x1d], bl
cmp byte [ebp - 0x1d], 0
je 0x10031708
push 0x9f
push ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_GetLocaleInfoW]
lea ecx, [ebp - 0xbc]
call fcn.1000ba88
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], 2
jle 0x10031613
mov byte [ebp - 0x1d], bl
cmp byte [ebp - 0x1d], 0
je 0x10031737
push 0x248a
push ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_GetLocaleInfoA]
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 2
jle 0x100315ec
mov eax, dword [ebp - 0x34]
mov eax, dword [ebp - 0x144]
dec dword [eax]
jns 0x100315c1
lea ecx, [ebp - 0x1b0]
call fcn.1000ba88
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x144]
call fcn.1000ba88
dec dword [ebp - 0x1c]
jmp 0x100314b9
mov dl, byte [ebp - 0x63]
movzx edi, byte [ebp - 0x64]
mov al, dl
or al, 0xd0
and dl, 0xd0
movzx ecx, al
movzx eax, dl
sub cx, ax
mov word [ebp + edi*2 - 0x198], cx
lea ecx, [ebp - 0x120]
call fcn.1000ba05
mov dword [ebp - 4], 7
mov dword [ebp - 0x18], 0x2a276893
mov dword [ebp - 0x24], 0xffffffff
mov dword [ebp - 0x1c], ebx
jmp 0x100317ce
mov ecx, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x120]
mov dword [eax + ecx*4], 0xbb2c2135
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 3
jl 0x100317bb
mov dword [ebp - 0x18], 2
cmp dword [ebp - 0x18], ebx
jl 0x1003189b
push 4
lea ecx, [ebp - 0xe4]
call fcn.1000ba05
mov dword [ebp - 0x1c], ebx
jmp 0x10031809
mov ecx, dword [ebp - 0x1c]
mov eax, dword [ebp - 0xe4]
mov dword [eax + ecx*4], 0xdad94e8f
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 4
jl 0x100317f6
mov esi, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x120]
mov edx, dword [ebp - 0x120]
mov ecx, dword [eax + ecx*4]
mov eax, dword [ebp - 0xe4]
mov dword [edx + esi*4], ecx
mov eax, dword [eax]
imul eax, ecx
mov dword [ebp - 0x24], eax
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0xe4]
xor eax, eax
cmp dword [ecx + 0xc], ebx
setge al
imul eax, dword [ecx]
imul eax, eax, 0x672a
mov dword [ecx], eax
mov dword [ebp - 0x24], 0xfffffffd
jmp 0x10031881
mov dword [ebp - 0x1c], ebx
mov dword [ebp - 0x1c], ebx
jmp 0x10031878
mov ecx, dword [ebp - 0x1c]
mov eax, dword [ebp - 0xe4]
mov dword [eax + ecx*4], 0x321a0783
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 4
jl 0x10031865
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], 0xc
jge 0x1003185d
lea ecx, [ebp - 0xe4]
call fcn.1000ba88
dec dword [ebp - 0x18]
jns 0x100317e4
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x120]
call fcn.1000ba88
lea eax, [edi*2 + 2]
mov dword [ebp - 0x30], ebx
push 2
xor edi, edi
mov dword [ebp - 0x38], eax
pop esi
inc edi
mov dword [ebp - 0x34], 0x9d221e9c
lea ecx, [ebp - 0x20c]
mov dword [ebp - 0x34], 5
mov dword [ebp - 0x34], 8
mov dword [ebp - 0x34], 0xfffffffa
mov dword [ebp - 0x34], 6
mov dword [ebp - 0x34], edi
mov dword [ebp - 0x34], 0xffffffff
mov dword [ebp - 0x34], 0x1fbf6859
push 2
call fcn.1000ba05
mov dword [ebp - 0x28], 0x6c34
push 2
mov dword [ebp - 0x28], edi
mov dword [ebp - 0x18], ebx
pop edx
jmp 0x10031921
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x294], 0xffffffff
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], edx
jl 0x10031910
mov dword [ebp - 0x18], ebx
jmp 0x1003193e
mov ecx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x20c]
mov dword [eax + ecx*4], 8
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], edx
jl 0x1003192b
mov eax, dword [ebp - 0x34]
lea ecx, [ebp - 0x20c]
mov dword [ebp - 0x34], ebx
call fcn.1000ba88
cmp esi, dword [ebp - 0x38]
jne 0x10031ac8
movzx eax, byte [ebp + esi - 0x64]
lea ecx, [ebp - 0x150]
push dword [ebp - 0x38]
movdqa xmm0, xmmword [0x10073980]
mov dword [ebp - 0x34], eax
inc eax
mov dword [ebp - 0x30], eax
lea eax, [ebp - 0x26c]
push eax
lea eax, [ebp - 0x27c]
mov dword [ebp - 0x150], ebx
push eax
push ebx
movdqu xmmword [ebp - 0x27c], xmm0
mov dword [ebp - 0x14c], ebx
mov dword [ebp - 0x148], ebx
call fcn.1000dfe5
mov dword [ebp - 4], 8
lea ecx, [ebp - 0x1bc]
mov dword [ebp - 0x2c], 0xffffffff
push 3
call fcn.1000ba05
push 3
mov dword [ebp - 0x1c], ebx
pop edx
jmp 0x100319de
mov ecx, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x1bc]
mov dword [eax + ecx*4], 0x59b8bc58
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], edx
jl 0x100319cb
mov dword [ebp - 0x2c], edx
cmp dword [ebp - 0x2c], ebx
jl 0x100319fc
mov eax, dword [ebp - 0x1bc]
mov dword [eax], 0x462751c7
dec dword [ebp - 0x2c]
jns 0x100319eb
lea ecx, [ebp - 0x1bc]
call fcn.1000ba88
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x150]
call fcn.1000ba88
mov eax, dword [ebp - 0x34]
dec eax
mov dword [ebp - 0x24], edi
add esi, eax
mov dword [ebp - 0x24], 0xfffffff7
jmp 0x10031a92
mov dword [ebp - 0x1c], 0xfffffff9
mov dword [ebp - 0x1c], 0xffffffe4
jmp 0x10031a89
mov byte [ebp - 0x1d], bl
cmp byte [ebp - 0x1d], 0
je 0x10031a86
push ebx
push 0x1d65
push 0x4a
push 0x1ebc
push 0x1256
push 0x19b4
push 0xef1
push 0x1f60
push 0x1080
push 0x4c3
push 0x1240
push 0x197a
push 0x20ab
push 0x1bf4
call dword [sym.imp.GDI32.dll_CreateFontA]
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 0xfffffff3
je 0x10031a38
dec dword [ebp - 0x24]
cmp dword [ebp - 0x24], 0xffffffe7
jg 0x10031a28
mov byte [ebp - 0x1d], bl
cmp byte [ebp - 0x1d], 0
je 0x10031bbb
push 0x15d1
push 0x678
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_GetPixel]
jmp 0x10031bbb
mov dword [ebp - 0x24], 0xfffffffa
lea ecx, [ebp - 0x1d4]
mov dword [ebp - 0x28], 0x77c8748a
mov dword [ebp - 0x34], 0xd11d962e
mov dword [ebp - 0x2c], 0x14a9bacd
push edi
call fcn.1000ba05
mov dword [ebp - 0x18], 0xab9c279a
mov dword [ebp - 0x28], 0xfffffff8
mov dword [ebp - 0x34], 0xa33a4d1b
mov dword [ebp - 0x1c], ebx
jmp 0x10031b1d
mov ecx, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x1d4]
mov dword [eax + ecx*4], 0xcc4b7c70
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], edi
jl 0x10031b0a
mov dword [ebp - 0x28], 0x3152c58f
xor edx, edx
mov eax, dword [ebp - 0x28]
mov dword [ebp - 0x34], eax
mov ecx, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x2c]
sub ecx, 0x119b93a
cmp ecx, eax
mov eax, dword [ebp - 0x1d4]
setg dl
imul edx, dword [eax]
xor eax, eax
cmp edx, 0x5ea964a9
setl al
xor ecx, ecx
mov dword [ebp - 0x34], eax
mov eax, dword [ebp - 0x18]
cmp dword [ebp - 0x34], eax
setne cl
mov dword [ebp - 0x28], ecx
mov eax, dword [ebp - 0x28]
mov edx, dword [ebp - 0x24]
sub edx, eax
mov eax, dword [ebp - 0x24]
neg edx
sbb edx, edx
xor ecx, ecx
inc edx
cmp eax, edx
setne cl
mov dword [ebp - 0x34], ecx
lea ecx, [ebp - 0x1d4]
call fcn.1000ba88
movzx edx, byte [ebp + esi - 0x63]
mov eax, esi
sub eax, dword [ebp - 0x30]
mov dword [ebp - 0x30], ebx
movzx eax, byte [ebp + eax - 0x66]
movzx eax, word [ebp + eax*2 - 0x198]
mov ecx, eax
and eax, edx
or ecx, edx
sub ecx, eax
movzx eax, byte [ebp + esi - 0x64]
mov word [ebp + eax*2 - 0x198], cx
add esi, 2
cmp esi, 0x10
jb 0x100318bd
xor eax, eax
xor edx, edx
mov word [ebp - 0x18a], ax
mov eax, 0x6182eac4
mov dword [ebp - 0x114], eax
mov dword [ebp - 0x110], eax
mov dword [ebp - 0x10c], eax
mov dword [ebp - 0x108], eax
mov dword [ebp - 0x18], 0x2f76ec75
mov esi, dword [ebp - 0x10c]
mov dword [ebp - 0x10c], esi
mov ecx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x18]
cmp ecx, eax
setle dl
xor ecx, ecx
cmp edx, 0x5b29
setle cl
sub ecx, 0xffff
neg ecx
sbb ecx, ecx
xor eax, eax
inc ecx
cmp esi, ecx
setl al
imul eax, dword [ebp - 0x18]
imul eax, dword [ebp - 0x18]
cmp eax, dword [ebp - 0x18]
jge 0x10031c7b
mov dword [ebp - 0x18], ebx
jmp 0x10031c5a
cmp byte [ebp - 0x1d], 0
je 0x10031c57
push ebx
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_GetClipBox]
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 0xc
mov byte [ebp - 0x1d], bl
jne 0x10031c3c
cmp byte [ebp - 0x1d], 0
je 0x10031cf0
push 0xa5
push ebx
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
jmp 0x10031cf0
push edi
lea ecx, [ebp - 0x1ec]
call fcn.1000ba05
xor edx, edx
mov dword [ebp - 0x1c], ebx
inc edx
jmp 0x10031ca2
mov ecx, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x1ec]
mov dword [eax + ecx*4], 0x58331c58
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], edx
jl 0x10031c8f
mov dword [ebp - 0x18], ebx
jmp 0x10031cdc
mov dword [ebp - 0x1c], edx
mov dword [ebp - 0x38], 0x261fc42f
mov dword [ebp - 0x1c], ebx
jmp 0x10031cc8
mov eax, dword [ebp - 0x1ec]
cmp dword [eax], ebx
jne 0x10031cce
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 8
je 0x10031cbb
mov eax, dword [ebp - 0x1c]
add eax, 0x5f27a412
mov dword [ebp - 0x38], eax
dec dword [ebp - 0x18]
cmp dword [ebp - 0x18], 0xffffffea
je 0x10031cac
lea ecx, [ebp - 0x1ec]
call fcn.1000ba88
xor edi, edi
inc edi
mov dword [ebp - 0x18], 0xfffffffa
jmp 0x10031d06
mov dword [ebp - 0x10c], 0x997b09b3
dec dword [ebp - 0x18]
cmp dword [ebp - 0x18], 0xfffffff6
jle 0x10031cf9
mov dword [ebp - 0x30], 0xec8
cmp dword [ebp - 0x30], 0x10ad
jle 0x10031d8a
mov eax, ebx
mov dword [ebp - 0x2c], ebx
mov esi, ebx
mov dword [ebp - 0x28], ebx
cdq
idiv esi
mov dword [ebp - 0x38], ebx
mov esi, ebx
mov eax, edx
mov dword [ebp - 0x34], eax
and eax, esi
lea ecx, [ebp - 0x2ac]
cdq
push edx
push eax
call fcn.10001aa5
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x10031d4d
mov eax, dword [eax]
push eax
call fcn.1004c12c
pop ecx
push ebx
push edi
lea ecx, [ebp - 0x2ac]
call fcn.1000bdc4
mov eax, dword [ebp - 0x34]
inc esi
cmp esi, 0xbc9
jl 0x10031d33
mov esi, dword [ebp - 0x28]
mov eax, dword [ebp - 0x2c]
inc esi
mov dword [ebp - 0x28], esi
cmp esi, 0x18d8
jl 0x10031d26
inc eax
mov dword [ebp - 0x2c], eax
cmp eax, 0x4047
jl 0x10031d21
xor eax, eax
mov dword [ebp - 0x230], 7
mov word [ebp - 0x244], ax
lea ecx, [ebp - 0x244]
lea eax, [ebp - 0x198]
mov dword [ebp - 0x234], ebx
push eax
call fcn.1000beb0
cmp dword [ebp - 0x30], 0xd7a
jge 0x10031dc9
push str.bkkr_vsnctndbo_fnjfa_mgzzefeeg_llpscsa_vty_hyihnmncs_vdcpvupp_gyyazfq
call fcn.1004c12c
pop ecx
mov dword [ebp - 4], 9
lea ecx, [ebp - 0x1e0]
mov dword [ebp - 0x24], edi
push 2
call fcn.1000ba05
mov byte [ebp - 4], 0xc
mov dword [ebp - 0x18], ebx
jmp 0x10031df6
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0xfc], edi
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 3
jl 0x10031de9
mov dword [ebp - 0x18], ebx
jmp 0x10031e14
mov ecx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x1e0]
mov dword [eax + ecx*4], 0xd017
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 2
jl 0x10031e01
mov dword [ebp - 0xf8], 0xe
cmp dword [ebp - 0xf8], 0x11
je 0x10031f19
mov byte [ebp - 0x1d], bl
mov dword [ebp - 0x30], 0x13de
cmp dword [ebp - 0x30], 0x1477
jle 0x10031eae
push ebx
push 0x1dfa
push ebx
push 0xca1
push 0x75
call dword [sym.imp.GDI32.dll_ExtCreatePen]
mov dword [ebp - 0x2c], ebx
mov edi, ebx
mov esi, ebx
mov ecx, ebx
mov ebx, dword [ebp - 0x2c]
mov dword [ebp - 0x28], ecx
mov eax, esi
sar eax, cl
mov ecx, 0x10080d38
or eax, edi
or eax, ebx
cdq
push edx
push eax
call fcn.1000b7ed
mov ecx, dword [ebp - 0x28]
inc ecx
mov dword [ebp - 0x28], ecx
cmp ecx, 0x4706
jl 0x10031e67
inc esi
push 0
pop ebx
cmp esi, 0x7d7a
jl 0x10031e5f
inc edi
cmp edi, 0x171b
jl 0x10031e5d
mov eax, dword [ebp - 0x2c]
inc eax
mov dword [ebp - 0x2c], eax
cmp eax, 0x45e5
jl 0x10031e5b
cmp byte [ebp - 0x1d], 0
je 0x10031ecd
push 0x22ce
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_SetTextAlign]
mov byte [ebp - 4], 0xd
cmp dword [ebp - 0x30], 0x11ae
jge 0x10031f07
mov edx, str.arxnjozmu_jhrf_ebevh_seu_lepbrnwze_wmpqsogji_eclztor_dwp_shroc_zjwwe_puleotb_zinc_sustietm
mov ecx, 0x10080d38
call fcn.1000da64
jmp 0x10031f07
mov dword [ebp - 4], 0xc
inc dword [ebp - 0xf8]
jmp 0x10031e24
mov dword [ebp - 0x24], ebx
cmp dword [ebp - 0x24], 0xffffffed
jg 0x10031f94
xor edi, edi
mov dword [ebp - 0x2c], 0x96673e7e
mov dword [ebp - 0x1c], ebx
jmp 0x10031f41
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0xf0], 0xcf5a8b06
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 2
jl 0x10031f30
cmp dword [ebp - 0x24], ebx
jne 0x10031f82
mov eax, dword [ebp - 0x24]
xor edx, edx
inc dword [ebp - 0x2c]
mov ecx, dword [ebp - 0xec]
add ecx, dword [ebp - 0xec]
mov eax, dword [ebp - 0x1e0]
cmp ecx, dword [eax]
mov eax, dword [ebp - 0x2c]
setne dl
sub eax, edx
neg eax
sbb eax, eax
inc eax
mov dword [ebp - 0xf4], eax
cmp eax, 0xffffffff
mov eax, ebx
je 0x10031f85
lea eax, [edi + 1]
mov dword [ebp - 0xec], eax
dec dword [ebp - 0x24]
cmp dword [ebp - 0x24], 0xffffffed
jle 0x10031f24
lea ecx, [ebp - 0x1e0]
mov byte [ebp - 4], 9
call fcn.1000ba88
push dword [ebp - 0x100]
xor eax, eax
lea edi, [ebp - 0x198]
stosd dword es:[edi], eax
lea ecx, [ebp - 0x25c]
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
call fcn.1000b902
mov byte [ebp - 4], 0xf
lea ecx, [ebp - 0x1a4]
mov dword [ebp - 0x24], 0xb26bdde0
mov dword [ebp - 0x2c], 0xcf33f23e
mov dword [ebp - 0x38], 0xfeb9e9d6
mov dword [ebp - 0x38], 0x5256ee97
mov dword [ebp - 0x28], 0xffffffff
push 2
call fcn.1000ba05
mov dword [ebp - 0x38], 0xa2ef
mov dword [ebp - 0x34], 0xdfce9586
mov dword [ebp - 0x18], ebx
jmp 0x1003201a
mov ecx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x1a4]
mov dword [eax + ecx*4], 0xa0426a76
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 2
jl 0x10032007
mov dword [ebp - 0x18], ebx
jmp 0x10032036
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x15c], 0x4891023f
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 3
jl 0x10032025
mov dword [ebp - 0x24], 6
jmp 0x100320bc
mov dword [ebp - 0x28], 0xfffffffd
mov dword [ebp - 0x1c], 0x348f4a8
cmp dword [ebp - 0x24], ebx
je 0x10032070
mov eax, dword [ebp - 0x154]
mov eax, dword [ebp - 0x1c]
dec dword [ebp - 0x154]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x1c]
mov edx, dword [ebp - 0x1c]
neg edx
mov dword [ebp - 0x28], 3
mov eax, dword [ebp - 0x38]
sbb edx, edx
xor ecx, ecx
neg edx
cmp edx, eax
sete cl
cmp ecx, 0xfffb
mov ecx, dword [ebp - 0x28]
sbb eax, eax
inc eax
sub ecx, eax
neg ecx
sbb ecx, ecx
inc ecx
mov dword [ebp - 0x28], ecx
mov byte [ebp - 0x1d], bl
cmp byte [ebp - 0x1d], 0
je 0x100320b9
push ebx
push ebx
push 0x1e90
call dword [sym.imp.ADVAPI32.dll_CopySid]
dec dword [ebp - 0x24]
cmp dword [ebp - 0x24], 0xffffffe3
jl 0x10032045
mov eax, dword [ebp - 0x158]
xor ecx, ecx
cmp eax, 0xce22
mov eax, dword [ebp - 0x28]
setg cl
xor edx, edx
neg ecx
add ecx, ecx
cmp ecx, eax
setle dl
sub edx, dword [ebp - 0x34]
mov eax, dword [ebp - 0x2c]
neg edx
sbb edx, edx
xor ecx, ecx
inc edx
neg edx
cmp edx, eax
mov eax, dword [ebp - 0x1a4]
setle cl
xor edx, edx
cmp ecx, 0x58a
lea ecx, [ebp - 0x1a4]
setg dl
mov dword [eax], edx
call fcn.1000ba88
mov dword [ebp - 0x28], 0x975
cmp dword [ebp - 0x28], 0xd16
jle 0x1003215b
mov edi, ebx
mov esi, ebx
mov dword [ebp - 0x38], ebx
mov ecx, ebx
lea eax, [esi + edi]
shl eax, cl
mov ecx, 0x10080d38
cdq
push edx
push eax
call fcn.1000b7ed
inc ebx
cmp ebx, 0x60b7
jl 0x10032129
inc esi
push 0
pop ebx
cmp esi, 0x3fed
jl 0x10032126
inc edi
cmp edi, 0xcc9
jl 0x10032124
mov eax, 0x8ade19d2
mov dword [ebp - 0x84], eax
mov dword [ebp - 0x80], eax
mov dword [ebp - 0x7c], eax
mov dword [ebp - 0x78], eax
mov byte [ebp - 4], 0x10
cmp dword [ebp - 0x28], 0x79c
jge 0x100321a9
mov edx, str.cujnpqf_fpukw_fottwgejt_vloprh
mov ecx, 0x10080d38
call fcn.1000da64
jmp 0x100321a9
mov dword [ebp - 4], 0xf
mov dword [ebp - 0x34], 2
mov dword [ebp - 0x1c], ebx
jmp 0x100321ca
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0x3c], 1
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 1
jl 0x100321bc
mov byte [ebp - 0x1d], bl
cmp byte [ebp - 0x1d], 0
je 0x100321f3
push 0xdeb
push ebx
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_Polygon]
mov dword [ebp - 0x7c], ebx
jmp 0x1003227c
mov dword [ebp - 0x18], 0xfffffffc
mov dword [ebp - 0x38], ebx
mov dword [ebp - 0x28], 0xfb5d1cb6
mov dword [ebp - 0x18], ebx
jmp 0x10032274
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp + eax*4 - 0x3c]
mov eax, dword [ebp - 0x7c]
mov dword [ebp + eax*4 - 0x3c], ecx
xor ecx, ecx
mov eax, dword [ebp - 0x7c]
mov eax, dword [ebp + eax*4 - 0x3c]
mov eax, dword [ebp - 0x84]
mov eax, dword [ebp - 0x7c]
mov eax, dword [ebp - 0x7c]
mov eax, dword [ebp + eax*4 - 0x3c]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp + eax*4 - 0x3c]
mov eax, dword [ebp - 0x7c]
mov esi, dword [ebp + eax*4 - 0x3c]
mov eax, dword [ebp - 0x18]
cmp eax, 0xfffffff9
mov eax, dword [ebp - 0x38]
setle cl
xor edx, edx
sub esi, ecx
cmp esi, eax
mov eax, dword [ebp - 0x84]
sete dl
xor ecx, ecx
cmp edx, eax
setge cl
mov dword [ebp - 0x28], ecx
mov eax, dword [ebp - 0x28]
mov dword [ebp - 0x34], eax
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], ebx
jle 0x10032211
inc dword [ebp - 0x7c]
cmp dword [ebp - 0x7c], ebx
jle 0x100321fb
push 0x5c
pop eax
push 2
mov byte [ebp - 0x44], bl
mov ecx, ebx
mov dword [ebp - 0x43], 0xb2f303bf
mov byte [ebp - 0x3f], 0xc
mov word [ebp - 0x50], ax
pop esi
cmp esi, 2
jne 0x100322ab
push 4
pop ecx
push ecx
pop esi
jmp 0x100322d2
movzx edx, byte [ebp + esi - 0x43]
mov eax, esi
sub eax, ecx
movzx eax, byte [ebp + eax - 0x46]
movzx eax, word [ebp + eax*2 - 0x50]
mov ecx, eax
and eax, edx
or ecx, edx
sub ecx, eax
movzx eax, byte [ebp + esi - 0x44]
mov word [ebp + eax*2 - 0x50], cx
mov ecx, ebx
add esi, 2
cmp esi, 6
jb 0x1003229f
xor eax, eax
mov dword [ebp - 0x16c], 7
mov word [ebp - 0x4e], ax
lea ecx, [ebp - 0x180]
mov word [ebp - 0x180], ax
lea eax, [ebp - 0x50]
push eax
mov dword [ebp - 0x170], ebx
call fcn.1000beb0
xor edi, edi
mov byte [ebp - 4], 0x12
inc edi
mov dword [ebp - 0x1c], edi
mov dword [ebp - 0x28], 0xffffffff
mov dword [ebp - 0x1c], ebx
jmp 0x10032459
mov dword [ebp - 0x2c], 0xfa814b11
mov dword [ebp - 0x38], 0xfffffffb
mov dword [ebp - 0x24], ebx
jmp 0x10032340
mov eax, dword [ebp - 0x24]
mov dword [ebp + eax*4 - 0x6c], 0x39beb064
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], 2
jl 0x10032332
mov dword [ebp - 0x68], ebx
jmp 0x10032449
push dword [ebp - 0x38]
movdqa xmm0, xmmword [0x10073990]
lea eax, [ebp - 0x25c]
push eax
lea eax, [ebp - 0x26c]
mov dword [ebp - 0xd8], ebx
push eax
push ebx
lea ecx, [ebp - 0xd8]
mov dword [ebp - 0xd4], ebx
movdqu xmmword [ebp - 0x26c], xmm0
mov dword [ebp - 0xd0], ebx
call fcn.1000dfe5
mov dword [ebp - 0x30], 0xa0627e80
mov dword [ebp - 0x30], 0xed23c5ad
mov dword [ebp - 0x24], ebx
jmp 0x100323b1
mov eax, dword [ebp - 0x24]
mov dword [ebp + eax*4 - 0x188], 0xfffffff9
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], 2
jl 0x100323a0
mov eax, dword [ebp - 0x1c]
cmp dword [ebp - 0x28], ebx
jne 0x100323eb
mov eax, dword [ebp - 0x68]
mov ecx, 0x8e5faece
sub ecx, eax
mov eax, dword [ebp - 0x184]
sub ecx, eax
mov eax, dword [ebp - 0x68]
push 0
pop edx
sets dl
xor ecx, ecx
cmp edx, eax
mov eax, ebx
setg cl
mov dword [ebp - 0x2c], ecx
cmp dword [ebp - 0x2c], ebx
je 0x100323ed
mov eax, edi
cmp eax, 7
mov eax, dword [ebp - 0x68]
sbb ecx, ecx
xor edx, edx
neg ecx
cmp ecx, eax
mov eax, dword [ebp - 0xd8]
setge dl
mov dword [eax + 4], edx
xor edx, edx
mov eax, dword [ebp - 0x6c]
mov eax, dword [ebp - 0x184]
cmp eax, 0x7440271d
mov eax, dword [ebp - 0x28]
setne dl
xor ecx, ecx
cmp eax, 6
setne cl
xor eax, eax
cmp ecx, edx
lea ecx, [ebp - 0xd8]
setle al
mov dword [ebp - 0x30], eax
mov eax, dword [ebp - 0x30]
mov dword [ebp - 0x30], eax
mov eax, dword [ebp - 0x30]
mov dword [ebp - 0x38], eax
call fcn.1000ba88
inc dword [ebp - 0x68]
cmp dword [ebp - 0x68], 0x10
jle 0x1003234e
mov eax, dword [ebp - 0x2c]
dec dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 0xffffffe5
jg 0x1003231f
push 3
lea ecx, [ebp - 0xb0]
mov dword [ebp - 0x50], ebx
call fcn.1000ba05
mov byte [ebp - 4], 0x13
mov dword [ebp - 0x28], ebx
mov dword [ebp - 0x38], 0xce5aba8d
mov dword [ebp - 0x1c], 0x1cc9
cmp dword [ebp - 0x1c], 0x1fa4
jle 0x100324fe
push ebx
push ebx
call dword [sym.imp.ADVAPI32.dll_RegDeleteKeyA]
mov esi, ebx
mov dword [ebp - 0x30], ebx
mov eax, esi
mov dword [ebp - 0x28], 0x75e5
mov dword [ebp - 0x2c], eax
mov esi, ebx
add eax, esi
lea ecx, [ebp - 0x2c4]
cdq
push edx
push eax
call fcn.10001aa5
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x100324c6
mov eax, dword [eax]
push eax
call fcn.1004c12c
pop ecx
push ebx
push edi
lea ecx, [ebp - 0x2c4]
call fcn.1000bdc4
mov eax, dword [ebp - 0x2c]
inc esi
cmp esi, 0x2053
jl 0x100324ac
dec eax
dec dword [ebp - 0x28]
mov dword [ebp - 0x2c], eax
jne 0x100324aa
mov esi, dword [ebp - 0x30]
inc esi
mov dword [ebp - 0x30], esi
cmp esi, 0x30ab
jl 0x1003249e
mov dword [ebp - 0x18], ebx
jmp 0x10032516
mov ecx, dword [ebp - 0x18]
mov eax, dword [ebp - 0xb0]
mov dword [eax + ecx*4], 0xfdf99ff6
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 3
jl 0x10032503
cmp dword [ebp - 0x1c], 0x1c98
jge 0x10032530
push str.ynzbp_bqrgxugl_edwehyvdn_eptutvken_yglleby_kxhvm_hfoqnms
call fcn.1004c12c
pop ecx
mov dword [ebp - 4], 0x13
mov dword [ebp - 0x18], ebx
jmp 0x10032549
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x94], ebx
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 4
jl 0x1003253c
mov dword [ebp - 0x88], 2
cmp dword [ebp - 0x88], ebx
jl 0x10032781
xor eax, eax
inc eax
mov dword [ebp - 0x24], eax
mov dword [ebp - 0x38], eax
mov dword [ebp - 0x30], 0x2d92
cmp dword [ebp - 0x30], 0x2e2b
jle 0x100325e0
mov eax, ebx
mov dword [ebp - 0x2c], ebx
mov esi, ebx
mov dword [ebp - 0x28], ebx
mov ecx, esi
mov edi, ebx
shl eax, cl
mov dword [ebp - 0x34], eax
mov esi, eax
mov dword [ebp - 0x38], ebx
mov ecx, edi
sar esi, cl
mov eax, ebx
mov ecx, 0x10080d38
and eax, esi
cdq
push edx
push eax
call fcn.1000b7ed
inc ebx
cmp ebx, 0x4fd0
jl 0x1003259a
mov eax, dword [ebp - 0x34]
inc edi
push 0
pop ebx
cmp edi, 0x39f2
jl 0x10032591
mov esi, dword [ebp - 0x28]
mov eax, dword [ebp - 0x2c]
inc esi
mov dword [ebp - 0x28], esi
cmp esi, 0x3683
jl 0x10032588
inc eax
mov dword [ebp - 0x2c], eax
cmp eax, 0xd44
jl 0x10032583
mov dword [ebp - 0x34], 0xfffffff8
mov byte [ebp - 4], 0x16
cmp dword [ebp - 0x30], 0x2a04
jge 0x10032621
mov edx, str.yfkjwmps_jbu_uwg_qrge_nrimzjzk_eanagsiy_xpcjmrmjz
mov ecx, 0x10080d38
call fcn.1000da64
jmp 0x10032621
mov dword [ebp - 4], 0x13
mov dword [ebp - 0x24], ebx
jmp 0x1003276c
mov dword [ebp - 0x28], 0x22b60780
mov dword [ebp - 0x1c], ebx
jmp 0x1003264a
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0x74], 1
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 2
jl 0x1003263c
mov byte [ebp - 0x1d], bl
cmp byte [ebp - 0x1d], 0
je 0x1003266a
push 0x2600
push 0x417
push ebx
call dword [sym.imp.USER32.dll_InflateRect]
mov dword [ebp - 0x74], 2
cmp dword [ebp - 0x74], ebx
jl 0x10032769
xor edi, edi
inc edi
mov dword [ebp - 0x28], ebx
xor edx, edx
mov ecx, dword [ebp - 0x88]
mov esi, 0xf6f97812
mov eax, dword [ebp - 0xb0]
mov eax, dword [eax + ecx*4]
mov dword [ebp - 0x38], eax
mov eax, dword [ebp - 0x88]
mov ecx, dword [ebp - 0xb0]
mov eax, dword [ecx + eax*4]
cmp eax, dword [ecx]
setl dl
xor eax, eax
cmp edx, edi
setle al
xor ecx, ecx
mov dword [ebp - 0x38], eax
mov eax, dword [ebp - 0x74]
cmp dword [ebp - 0x38], eax
setge cl
xor edx, edx
mov dword [ebp - 0x28], ecx
mov eax, dword [ebp - 0x28]
cmp eax, 0x806aa1c3
setne dl
imul edx, dword [ebp - 0x74]
mov ecx, dword [ebp - 0x88]
mov eax, dword [ebp - 0xb0]
dec edx
neg edx
sbb edx, edx
sub esi, dword [eax + ecx*4]
mov eax, dword [ebp - 0x88]
xor ecx, ecx
inc edx
cmp edx, eax
mov eax, dword [ebp - 0x74]
setg cl
xor edx, edx
add eax, ecx
mov ecx, dword [ebp - 0x34]
imul ecx, eax
mov eax, dword [ebp - 0x70]
cmp ecx, eax
setl dl
xor eax, eax
cmp esi, edx
setl al
xor edx, edx
mov dword [ebp - 0x28], eax
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x88]
mov esi, dword [ebp - 0x88]
mov ecx, dword [ebp - 0xb0]
cmp dword [ecx + eax*4], ebx
sete dl
xor eax, eax
cmp edx, dword [ecx + esi*4]
setne al
mov dword [ebp - 0x28], eax
mov ecx, dword [ebp - 0x88]
mov eax, dword [ebp - 0xb0]
mov edx, dword [ebp - 0x28]
add edx, dword [eax + ecx*4]
xor ecx, ecx
mov eax, dword [ebp - 0x74]
cmp edx, eax
setle cl
neg ecx
mov dword [ebp - 0x38], ecx
dec dword [ebp - 0x74]
jns 0x1003267d
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], 2
jle 0x10032630
dec dword [ebp - 0x88]
jmp 0x10032559
lea ecx, [ebp - 0xb0]
mov byte [ebp - 4], 0x12
call fcn.1000ba88
mov dword [ebp - 0x38], ebx
mov byte [ebp - 0x1d], bl
cmp byte [ebp - 0x1d], 0
je 0x100327b2
push ebx
push ebx
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_PlayEnhMetaFile]
mov byte [ebp - 0x1d], bl
cmp byte [ebp - 0x1d], 0
je 0x100327c3
push ebx
push ebx
call dword [sym.imp.ADVAPI32.dll_RegDeleteKeyA]
push 0x5f
pop eax
push 2
mov byte [ebp - 0x4c], bl
mov ecx, ebx
mov word [ebp - 0x4b], 0x3f1
mov byte [ebp - 0x49], 7
mov byte [ebp - 0x48], bl
mov byte [ebp - 0x47], 0x5a
mov word [ebp - 0x54], ax
pop esi
cmp esi, 2
jne 0x100327ef
push 4
pop ecx
push ecx
pop esi
jmp 0x10032818
movzx edx, byte [ebp + esi - 0x4b]
mov eax, esi
sub eax, ecx
movzx eax, byte [ebp + eax - 0x4e]
movzx ecx, word [ebp + eax*2 - 0x54]
mov eax, ecx
and eax, edx
add eax, eax
sub ecx, eax
movzx eax, byte [ebp + esi - 0x4c]
add ecx, edx
mov word [ebp + eax*2 - 0x54], cx
mov ecx, ebx
add esi, 2
cmp esi, 6
jb 0x100327e3
xor eax, eax
lea ecx, [ebp - 0x1c8]
push 2
mov word [ebp - 0x52], ax
call fcn.1000ba05
mov byte [ebp - 4], 0x18
mov dword [ebp - 0x18], ebx
jmp 0x1003284f
mov ecx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x1c8]
mov dword [eax + ecx*4], 0xdd33a4a9
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 2
jl 0x1003283c
mov dword [ebp - 0x18], ebx
jmp 0x1003286b
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0xcc], 8
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 4
jl 0x1003285a
mov dword [ebp - 0xc4], ebx
cmp dword [ebp - 0xc4], 1
jg 0x10032b1f
mov dword [ebp - 0x1c], 2
mov dword [ebp - 0x30], 0xfff6
mov dword [ebp - 0x28], ebx
mov byte [ebp - 0x1d], bl
cmp byte [ebp - 0x1d], 0
je 0x10032931
mov dword [ebp - 0x28], 0x4704
cmp dword [ebp - 0x28], 0x49a6
jle 0x100328d8
mov esi, ebx
mov edi, ebx
lea eax, [edi + esi]
mov ecx, 0x10080d38
cdq
push edx
push eax
call fcn.1000b7ed
inc edi
cmp edi, 0x2305
jl 0x100328b6
inc esi
cmp esi, 0x407c
jl 0x100328b4
push 0x126a
push ebx
push 0x1dad
push ebx
push 0x6da
push ebx
call dword [sym.imp.KERNEL32.dll_CompareStringW]
mov byte [ebp - 4], 0x19
cmp dword [ebp - 0x28], 0x4457
jge 0x1003292a
mov edx, str.ouyygsm_kkbd_kaohayen_iscy_satbqsa_cgngkq_hsg_qzudyhzk_uiagd_jog
mov ecx, 0x10080d38
call fcn.1000da64
jmp 0x1003292a
mov dword [ebp - 4], 0x18
mov dword [ebp - 0x1c], ebx
cmp dword [ebp - 0x1c], 1
jg 0x10032b14
mov dword [ebp - 0x28], 1
lea ecx, [ebp - 0x138]
push 1
call fcn.1000ba05
mov byte [ebp - 4], 0x1b
mov dword [ebp - 0x28], 0x5d1f
cmp dword [ebp - 0x28], 0x60c5
jle 0x1003298c
mov esi, ebx
mov edi, ebx
lea eax, [edi + esi]
mov ecx, 0x10080d38
cdq
push edx
push eax
call fcn.1000b7ed
inc edi
cmp edi, 0x7b16
jl 0x1003296a
inc esi
cmp esi, 0x37c0
jl 0x10032968
mov dword [ebp - 0x2c], 0xbc4433ac
mov byte [ebp - 4], 0x1c
cmp dword [ebp - 0x28], 0x5a81
jge 0x100329cd
mov edx, str.nidcuedhm_hdcti_fpkmpj_xfqujy_ktwumrmx_akvdilorg_nsvl_wrwsmya_jfcgpjjyq
mov ecx, 0x10080d38
call fcn.1000da64
jmp 0x100329cd
mov dword [ebp - 4], 0x1b
mov dword [ebp - 0x28], 0x8f0bd907
mov dword [ebp - 0x28], 5
mov dword [ebp - 0x2c], 0x7cea
cmp dword [ebp - 0x2c], 0x7f53
jle 0x10032a20
mov esi, ebx
mov dword [ebp - 0x28], ebx
mov edi, esi
mov esi, 0xb21
mov eax, edi
mov ecx, 0x10080d38
cdq
push edx
push eax
call fcn.1000b7ed
dec edi
dec esi
jne 0x100329fe
mov esi, dword [ebp - 0x28]
inc esi
mov dword [ebp - 0x28], esi
cmp esi, 0x1aa1
jl 0x100329f7
mov dword [ebp - 0x24], ebx
jmp 0x10032a38
mov ecx, dword [ebp - 0x24]
mov eax, dword [ebp - 0x138]
mov dword [eax + ecx*4], 0xfffffff9
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], 1
jl 0x10032a25
mov byte [ebp - 4], 0x1e
cmp dword [ebp - 0x2c], 0x7a3d
jge 0x10032a78
mov edx, str.kvsxood_sgdzbyv_iwdnczsv_mtdfis
mov ecx, 0x10080d38
call fcn.1000da64
jmp 0x10032a78
mov dword [ebp - 4], 0x1b
mov edx, dword [ebp - 0x30]
mov eax, dword [ebp - 0x1c]
neg edx
mov eax, dword [ebp - 0xc4]
mov eax, dword [ebp - 0x1c8]
sbb edx, edx
neg edx
mov eax, dword [eax]
mov dword [ebp - 0x28], eax
cmp dword [ebp - 0x28], ebx
je 0x10032aa7
mov eax, dword [ebp - 0xc4]
mov eax, dword [ebp - 0x30]
xor ecx, ecx
inc ecx
sub ecx, eax
mov eax, dword [ebp - 0x138]
mov dword [eax], ecx
xor ecx, ecx
mov eax, dword [ebp - 0xc4]
cmp eax, 1
setle cl
mov dword [ebp - 0x2c], ecx
xor ecx, ecx
mov eax, dword [ebp - 0x2c]
add eax, 0x417612d2
add eax, edx
cmp eax, 0x7d41
setne cl
mov dword [ebp - 0x28], ecx
mov eax, dword [ebp - 0x28]
mov dword [ebp - 0x28], eax
cmp dword [ebp - 0x28], ebx
je 0x10032af0
mov eax, dword [ebp - 0xc4]
mov eax, dword [ebp - 0x1c]
lea ecx, [ebp - 0x138]
mov dword [ebp - 0x28], 0xffffffff
mov byte [ebp - 4], 0x18
cmp dword [ebp - 0x28], ebx
call fcn.1000ba88
inc dword [ebp - 0x1c]
jmp 0x10032934
inc dword [ebp - 0xc4]
jmp 0x10032877
lea ecx, [ebp - 0x1c8]
mov byte [ebp - 4], 0x12
call fcn.1000ba88
xor eax, eax
mov dword [ebp - 0x218], 7
mov word [ebp - 0x22c], ax
lea ecx, [ebp - 0x22c]
lea eax, [ebp - 0x54]
mov dword [ebp - 0x21c], ebx
push eax
call fcn.1000beb0
xor edi, edi
mov byte [ebp - 4], 0x20
mov dword [ebp - 0x54], ebx
inc edi
push dword [ebp - 0x170]
cmp dword [ebp - 0x16c], 8
lea eax, [ebp - 0x180]
push ebx
cmovae eax, dword [ebp - 0x180]
lea ecx, [ebp - 0x25c]
push eax
call fcn.1003043c
cmp eax, 0xffffffff
je 0x10032ba5
push 0xffffffffffffffff
push ebx
lea ecx, [ebp - 0x22c]
push ecx
push edi
push eax
lea ecx, [ebp - 0x25c]
call fcn.10030acc
jmp 0x10032b60
mov ecx, dword [ebp - 0xa4]
lea eax, [ebp - 0x25c]
push eax
lea edx, [ebp - 0x244]
call fcn.10032e99
pop ecx
push ebx
push edi
lea ecx, [ebp - 0x22c]
call fcn.1000bfd2
push ebx
push edi
lea ecx, [ebp - 0x180]
call fcn.1000bfd2
push ebx
push edi
lea ecx, [ebp - 0x25c]
call fcn.1000bfd2
push ebx
push edi
lea ecx, [ebp - 0x244]
call fcn.1000bfd2
mov ecx, dword [ebp - 0xc]
mov eax, dword [ebp - 0xa4]
pop edi
pop esi
mov dword fs:[0], ecx
pop ebx
mov esp, ebp
pop ebp
ret