Function at 0x1002575c
Capabilities:
Set environment variable

Disassembly:
mov eax, 0x1005d0ec
call fcn.1005c388
sub esp, 0x2b0
push ebx
push esi
push edi
mov dword [ebp - 0x10], esp
xor ebx, ebx
push 0xfffffffffffffff7
mov dword [ebp - 0x40], edx
pop edx
mov dword [ebp - 0xe0], edx
mov dword [ebp - 0xdc], edx
mov dword [ebp - 0xd8], edx
mov dword [ebp - 0xd4], edx
mov dword [ebp - 0x2c], 0x57f451d5
mov dword [ebp - 0x30], 0x4f3f7e81
mov dword [ebp - 0x3c], 6
mov dword [ebp - 0x88], ecx
xor ecx, ecx
push 0xfffffffffffffff8
pop edi
mov dword [ebp - 0x24], edi
inc ecx
mov dword [ebp - 0x34], ecx
mov dword [ebp - 0x38], 0xffffffff
mov dword [ebp - 0x28], 0xa66fa4bc
mov dword [ebp - 0x20], 0xfffb
mov dword [ebp - 0x28], ebx
mov dword [ebp - 0x188], ebx
mov dword [ebp - 0x18], ebx
jmp 0x100257e9
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0xd0], ecx
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], ecx
jl 0x100257dc
mov dword [ebp - 0x18], ebx
jmp 0x100257fd
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x7c], edx
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], ecx
jl 0x100257f3
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x28], eax
mov eax, dword [ebp - 0xd0]
mov eax, dword [ebp - 0x28]
inc dword [ebp - 0x20]
mov eax, dword [ebp - 0x34]
add eax, 4
je 0x1002581f
mov eax, dword [ebp - 0x34]
mov eax, dword [ebp - 0x2c]
xor ecx, ecx
mov eax, dword [ebp - 0x3c]
mov eax, dword [ebp - 0x34]
mov eax, dword [ebp - 0x7c]
cmp eax, 0x249de49
mov eax, dword [ebp - 0xe0]
mov edx, dword [ebp - 0x7c]
setle cl
add eax, ecx
mov ecx, dword [ebp - 0x24]
imul edx, eax
mov eax, dword [ebp - 0x30]
neg edx
sbb edx, edx
inc edx
imul ecx, edx
xor edx, edx
dec dword [ebp - 0x30]
inc edx
cmp eax, ecx
mov ecx, edx
jle 0x1002585f
mov ecx, ebx
mov eax, dword [ebp - 0x38]
add eax, ecx
jne 0x10025870
mov esi, ebx
cmp dword [ebp - 0xdc], ebx
je 0x10025872
mov esi, edx
mov eax, dword [ebp - 0x24]
xor ecx, ecx
cmp esi, eax
sete cl
mov dword [ebp - 0x28], ecx
mov eax, dword [ebp - 0xd8]
sub eax, 0x43
neg eax
sbb eax, eax
inc eax
cmp eax, dword [ebp - 0x7c]
jl 0x10025899
mov esi, ebx
cmp dword [ebp - 0x20], ebx
je 0x1002589b
mov esi, edx
mov eax, dword [ebp - 0xd8]
xor ecx, ecx
cmp eax, esi
setge cl
xor eax, eax
cmp ecx, 0x5ce4ec6
setle al
sub eax, 0xf55f5dd
neg eax
sbb eax, eax
inc eax
cmp eax, dword [ebp - 0x38]
je 0x100258ed
mov dword [ebp - 0x38], ebx
jmp 0x100258e5
mov byte [ebp - 0x19], bl
cmp byte [ebp - 0x19], bl
je 0x100258df
push ebx
push ebx
push 0x877
push ebx
push edx
push ebx
call dword [sym.imp.ADVAPI32.dll_AdjustTokenPrivileges]
inc dword [ebp - 0x38]
push 1
pop edx
cmp dword [ebp - 0x38], 0xb
jge 0x100258c7
jmp 0x100258f7
mov dword [ebp - 0x28], 0x32c2674d
inc dword [ebp - 0x28]
xor ecx, ecx
mov dword [ebp - 0x73], 0x3030232
inc ecx
mov dword [ebp - 0x6f], 0x31c42f9
mov byte [ebp - 0x74], cl
mov dword [ebp - 0x6b], 0x40e050d
mov dword [ebp - 0x67], 0x3d060d
mov byte [ebp - 0x63], 0x1b
mov dword [ebp - 0x18], 0xfffffffb
mov dword [ebp - 0x3c], 0x72fa5d87
mov dword [ebp - 0x48], ecx
mov dword [ebp - 0x18], ebx
cmp dword [ebp - 0x18], 4
jle 0x10025d1d
mov dword [ebp - 0x38], ebx
mov dword [ebp - 0x2c], ebx
cmp dword [ebp - 0x18], ebx
je 0x10025953
mov eax, dword [ebp - 0x38]
neg eax
sbb eax, eax
inc eax
cmp dword [ebp - 0x38], eax
jg 0x10025955
mov ecx, ebx
mov eax, dword [ebp - 0x18]
xor edx, edx
cmp ecx, eax
mov eax, dword [ebp - 0x18]
setne dl
xor ecx, ecx
cmp edx, eax
setg cl
cmp dword [ebp - 0x18], ecx
jne 0x10025bd1
mov dword [ebp - 0x3c], ebx
mov dword [ebp - 0x20], ebx
jmp 0x1002598b
mov eax, dword [ebp - 0x20]
mov dword [ebp + eax*4 - 0x15c], 0xa98c
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], 3
jl 0x1002597a
xor esi, esi
mov dword [ebp - 0x38], ebx
inc esi
cmp dword [ebp - 0x38], 0x16
jge 0x10025b6a
mov dword [ebp - 0x34], 0xffffffff
mov dword [ebp - 0x34], ebx
cmp dword [ebp - 0x34], 0xb
jle 0x10025b62
mov dword [ebp - 0x24], esi
mov dword [ebp - 0x24], ebx
cmp dword [ebp - 0x24], 9
jg 0x10025b5a
mov dword [ebp - 0x3c], 0x7615
cmp dword [ebp - 0x3c], 0x7739
jle 0x10025a68
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_GetBkColor]
mov edx, ebx
mov dword [ebp - 0x20], ebx
mov ecx, ebx
mov dword [ebp - 0x30], ebx
mov eax, ebx
mov dword [ebp - 0x28], ebx
mov edi, ebx
add eax, ecx
lea ecx, [ebp - 0x2a0]
or eax, edi
or eax, edx
cdq
push edx
push eax
call fcn.10001a55
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x10025a1c
mov eax, dword [eax]
push eax
call fcn.100443ac
pop ecx
push ebx
push esi
lea ecx, [ebp - 0x2a0]
call fcn.10005611
mov eax, dword [ebp - 0x28]
inc edi
mov ecx, dword [ebp - 0x30]
mov edx, dword [ebp - 0x20]
cmp edi, 0x3a2b
jl 0x100259fe
inc eax
mov dword [ebp - 0x28], eax
cmp eax, 0x1054
jl 0x100259fc
inc ecx
mov dword [ebp - 0x30], ecx
cmp ecx, 0x435
jl 0x100259f7
inc edx
mov dword [ebp - 0x20], edx
cmp edx, 0x6d0e
jl 0x100259f2
push 0xfffffffffffffff8
pop edi
mov dword [ebp - 0xf0], edi
mov dword [ebp - 0xec], edi
mov dword [ebp - 0xe8], edi
mov dword [ebp - 0xe4], edi
cmp dword [ebp - 0x3c], 0x731f
jge 0x10025a94
push str.lerxdhd_aqjxtyaaz_zcgnclgk_mnap_sxubsw
call fcn.100443ac
pop ecx
or dword [ebp - 4], 0xffffffff
mov dword [ebp - 0xec], ebx
cmp dword [ebp - 0xec], 0xffffffeb
jle 0x10025b4f
mov byte [ebp - 0x19], bl
cmp byte [ebp - 0x19], 0
je 0x10025b44
mov dword [ebp - 0x20], 0x1366
cmp dword [ebp - 0x20], 0x162b
jle 0x10025b17
mov edi, ebx
mov eax, edi
mov dword [ebp - 0x28], 0x3377
mov dword [ebp - 0x3c], eax
cdq
lea ecx, [ebp - 0x258]
push edx
push eax
call fcn.10001a55
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x10025aee
mov eax, dword [eax]
push eax
call fcn.100443ac
pop ecx
push ebx
push esi
lea ecx, [ebp - 0x258]
call fcn.10005611
mov eax, dword [ebp - 0x3c]
dec eax
dec dword [ebp - 0x28]
mov dword [ebp - 0x3c], eax
jne 0x10025ad6
inc edi
cmp edi, 0x5be9
jl 0x10025aca
push ebx
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_GetClipBox]
cmp dword [ebp - 0x20], 0x12e0
jge 0x10025b40
push str.ire_ctgjoxy_ecj_wsg_malcuv_zrkdpklb_gkzshv_fbklk_masduzkl_pefbgc_xhcyt_pegyq_tkqtgouij_afrgam
call fcn.100443ac
pop ecx
or dword [ebp - 4], 0xffffffff
dec dword [ebp - 0xec]
jmp 0x10025a9e
inc dword [ebp - 0x24]
push 0xfffffffffffffff8
pop edi
jmp 0x100259bb
inc dword [ebp - 0x34]
jmp 0x100259ab
inc dword [ebp - 0x38]
jmp 0x10025997
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x3c], 0xbf5e
mov eax, dword [ebp - 0x3c]
mov eax, dword [ebp - 0x15c]
mov eax, dword [ebp - 0x38]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x15c]
cmp esi, eax
mov ecx, dword [ebp - 0x15c]
sbb eax, eax
inc eax
add ecx, eax
neg ecx
sbb ecx, ecx
inc ecx
mov dword [ebp - 0x3c], ecx
cmp dword [ebp - 0x3c], 0xfc1c5751
mov eax, dword [ebp - 0x18]
sbb ecx, ecx
xor edx, edx
inc ecx
cmp ecx, eax
mov eax, dword [ebp - 0x18]
setg dl
xor ebx, ebx
cmp edx, 0xf419
setne bl
xor ecx, ecx
cmp ebx, eax
setg cl
xor ebx, ebx
mov dword [ebp - 0x2c], ecx
jmp 0x10025d12
mov dword [ebp - 0x2c], 0x1c3f
cmp dword [ebp - 0x2c], 0x1039
jge 0x10025cf2
lea eax, [ebp - 0x58]
mov dword [ebp - 0x58], ebx
push eax
push 0x10065b20
call fcn.100440ab
mov eax, dword [ebp - 0x58]
xor ecx, ecx
push 4
pop edx
mul edx
seto cl
neg ecx
or ecx, eax
push ecx
call fcn.1003f722
mov edx, dword [ebp - 0x58]
add esp, 0xc
mov dword [ebp - 0x2c], eax
mov edi, ebx
mov dword [ebp - 0x28], ebx
test edx, edx
jle 0x10025c40
mov esi, eax
push esi
push 0x10065b20
call fcn.100440ab
add ebx, dword [esi]
inc edi
mov edx, dword [ebp - 0x58]
add esi, 4
pop ecx
pop ecx
cmp edi, edx
jl 0x10025c21
mov dword [ebp - 0x28], ebx
xor ebx, ebx
mov eax, ebx
mov dword [ebp - 0x9c], ebx
mov esi, ebx
mov dword [ebp - 0xa4], eax
mov dword [ebp - 0xa0], esi
mov dword [ebp - 4], 4
mov ecx, ebx
mov dword [ebp - 0x78], ecx
test edx, edx
jle 0x10025c9f
mov esi, dword [ebp - 0x28]
mov edi, dword [ebp - 0x2c]
mov eax, dword [edi + ecx*4]
imul eax, edx
cmp eax, esi
jne 0x10025c8b
lea eax, [ebp - 0x78]
push eax
lea ecx, [ebp - 0xa4]
call fcn.10013430
mov edx, dword [ebp - 0x58]
mov ecx, dword [ebp - 0x78]
inc ecx
mov dword [ebp - 0x78], ecx
cmp ecx, edx
jl 0x10025c6c
mov esi, dword [ebp - 0xa0]
mov eax, dword [ebp - 0xa4]
sub esi, eax
sar esi, 2
push esi
push str._ld_n
call fcn.100443ac
mov edi, ebx
pop ecx
pop ecx
test esi, esi
je 0x10025cd5
mov ebx, dword [ebp - 0xa4]
mov eax, dword [ebx + edi*4]
inc eax
push eax
push str._ld
call fcn.100443ac
inc edi
pop ecx
pop ecx
cmp edi, esi
jb 0x10025cbd
xor ebx, ebx
push 0x10064921
call fcn.100449ab
or dword [ebp - 4], 0xffffffff
pop ecx
lea ecx, [ebp - 0xa4]
call fcn.100133fc
push 0xfffffffffffffff8
pop edi
mov byte [ebp - 0x19], bl
cmp byte [ebp - 0x19], 0
je 0x10025d12
push 0x25df
push 0x14c4
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_SetWindowLongA]
inc dword [ebp - 0x18]
xor ecx, ecx
inc ecx
jmp 0x10025931
mov dl, byte [ebp - 0x73]
movzx esi, byte [ebp - 0x74]
mov al, dl
or al, 0x5e
and dl, 0x5e
movzx ecx, al
movzx eax, dl
sub cx, ax
mov word [ebp + esi*2 - 0x150], cx
mov dword [ebp - 0x18], 0x8c6a53d0
mov dword [ebp - 0x34], 5
push 4
mov dword [ebp - 0x28], 7
mov dword [ebp - 0x20], ebx
pop ecx
jmp 0x10025d6a
mov eax, dword [ebp - 0x20]
mov dword [ebp + eax*4 - 0x1f4], 0x6cd33356
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], ecx
jl 0x10025d59
mov dword [ebp - 0x18], ebx
jmp 0x10025db5
mov dword [ebp - 0x2c], 0x9cb6
mov dword [ebp - 0x3c], 0x8afc1da7
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x34], eax
cmp dword [ebp - 0x34], 0xa062b000
mov eax, dword [ebp - 0x2c]
sbb edx, edx
add edx, 0xffffcd57
neg edx
sbb edx, edx
sub eax, dword [ebp - 0x18]
xor ecx, ecx
inc edx
cmp eax, edx
setle cl
mov dword [ebp - 0x3c], ecx
mov eax, dword [ebp - 0x28]
mov dword [ebp - 0x3c], eax
dec dword [ebp - 0x18]
cmp dword [ebp - 0x18], 0xfffffff2
je 0x10025d74
mov eax, dword [ebp - 0x34]
mov dword [ebp - 0x18], eax
mov eax, dword [ebp - 0x1f0]
add eax, dword [ebp - 0x18]
jne 0x10025dd2
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x1f0]
cmp eax, dword [ebp - 0x34]
jl 0x10025df0
mov byte [ebp - 0x19], bl
cmp byte [ebp - 0x19], 0
je 0x10025dfa
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_SetEnvironmentVariableW]
jmp 0x10025dfa
mov dword [ebp - 0x3c], 0xfa1a
inc dword [ebp - 0x3c]
push 2
pop edi
lea edx, [esi*2 + 2]
mov dword [ebp - 0x30], edi
mov dword [ebp - 0x34], ebx
mov dword [ebp - 0x2c], edx
mov dword [ebp - 0x18], 0xec2e0cf5
mov dword [ebp - 0x48], 0x9ebf495e
mov dword [ebp - 0x48], 0x58382bdb
mov dword [ebp - 0x48], 0x3a00d0e7
mov dword [ebp - 0x18], ebx
cmp dword [ebp - 0x18], 8
jge 0x10025e61
mov edi, dword [sym.imp.USER32.dll_GetDesktopWindow]
mov byte [ebp - 0x19], bl
cmp byte [ebp - 0x19], 0
je 0x10025e52
push ebx
call edi
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_GetCurrentPositionEx]
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 8
jl 0x10025e38
mov edi, dword [ebp - 0x30]
mov edx, dword [ebp - 0x2c]
xor ecx, ecx
mov dword [ebp - 0x18], ebx
inc ecx
cmp dword [ebp - 0x18], 0xffffffef
jg 0x10025ebd
mov dword [ebp - 0x38], 0xe35
mov dword [ebp - 0x3c], 0x7af5af8b
mov dword [ebp - 0x48], ebx
mov dword [ebp - 0x48], ebx
mov dword [ebp - 0x28], ebx
mov dword [ebp - 0x20], ebx
jmp 0x10025e9a
mov eax, dword [ebp - 0x20]
mov dword [ebp + eax*4 - 0x118], 0xffffffff
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], ecx
jl 0x10025e89
mov eax, dword [ebp - 0x38]
mov eax, dword [ebp - 0x28]
mov dword [ebp - 0x3c], eax
mov eax, dword [ebp - 0x3c]
dec dword [ebp - 0x28]
mov dword [ebp - 0x118], 0x4c20f746
dec dword [ebp - 0x18]
jmp 0x10025e67
cmp edi, edx
jne 0x10025ed7
movzx eax, byte [ebp + edi - 0x74]
xor esi, esi
dec edi
add edi, eax
inc esi
lea ecx, [eax + 1]
mov dword [ebp - 0x34], ecx
jmp 0x100260c9
mov dword [ebp - 0x38], 0x7c7ce53d
mov dword [ebp - 0x20], ebx
jmp 0x10025ef0
mov eax, dword [ebp - 0x20]
mov dword [ebp + eax*4 - 0x84], ebx
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], ecx
jl 0x10025ee3
mov dword [ebp - 0x38], ebx
cmp dword [ebp - 0x38], ebx
jg 0x10025f7c
mov edi, dword [sym.imp.USER32.dll_CheckMenuItem]
mov dword [ebp - 0x18], 0xffffffff
mov dword [ebp - 0x18], ebx
jmp 0x10025f1c
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x84], ecx
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], ecx
jl 0x10025f0f
mov eax, dword [ebp - 0x38]
mov ecx, dword [ebp + eax*4 - 0x84]
mov eax, dword [ebp - 0x38]
mov dword [ebp + eax*4 - 0x84], ecx
mov dword [ebp - 0x18], ebx
jmp 0x10025f69
mov byte [ebp - 0x19], bl
cmp byte [ebp - 0x19], 0
je 0x10025f50
push 0x24ba
push 0x542
push ebx
call edi
mov byte [ebp - 0x19], bl
cmp byte [ebp - 0x19], 0
je 0x10025f66
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_IsWindow]
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], ebx
jle 0x10025f3a
inc dword [ebp - 0x38]
push 1
pop ecx
cmp dword [ebp - 0x38], ebx
jle 0x10025f03
mov edi, dword [ebp - 0x30]
mov byte [ebp - 0x19], bl
cmp byte [ebp - 0x19], 0
je 0x10025f8e
push ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_GetSystemTimeAdjustment]
movzx edx, byte [ebp + edi - 0x73]
mov eax, edi
sub eax, dword [ebp - 0x34]
xor esi, esi
movzx eax, byte [ebp + eax - 0x76]
movzx ecx, word [ebp + eax*2 - 0x150]
mov eax, ecx
and eax, edx
add eax, eax
sub ecx, eax
movzx eax, byte [ebp + edi - 0x74]
add ecx, edx
inc esi
mov word [ebp + eax*2 - 0x150], cx
mov dword [ebp - 0x18], ebx
mov dword [ebp - 0x28], 0x62ccd204
mov dword [ebp - 0x30], 0x595a2e71
mov dword [ebp - 0x34], 0xffff
mov dword [ebp - 0x18], 0xfffffff2
cmp dword [ebp - 0x18], 0x16
jl 0x100260c3
mov dword [ebp - 0x24], 0x58a835a2
mov dword [ebp - 0x20], esi
mov dword [ebp - 0x3c], 0x9642e40c
mov dword [ebp - 0x38], 0xb56fe18b
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x24]
sub eax, dword [ebp - 0x18]
neg eax
sbb eax, eax
xor edx, edx
inc eax
mov dword [ebp - 0x20], eax
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x3c]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x24]
mov eax, dword [ebp - 0x24]
cmp ecx, eax
setle dl
imul eax, dword [ebp - 0x24], 0x86f8
sub eax, edx
neg eax
sbb eax, eax
xor edx, edx
inc eax
cmp eax, 0xffffffff
setg dl
xor ecx, ecx
imul edx, dword [ebp - 0x24]
mov eax, dword [ebp - 0x18]
cmp edx, eax
setle cl
mov dword [ebp - 0x28], ecx
dec dword [ebp - 0x30]
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x30]
sub ecx, eax
je 0x100260af
cmp dword [ebp - 0x24], ebx
je 0x100260af
mov eax, dword [ebp - 0x18]
xor ebx, ebx
mov dword [ebp - 0x28], eax
mov ecx, 0x9ed5
mov eax, dword [ebp - 0x28]
mov dword [ebp - 0x34], eax
mov eax, dword [ebp - 0x38]
neg eax
mov dword [ebp - 0x20], eax
mov eax, dword [ebp - 0x18]
sub ecx, eax
add ecx, dword [ebp - 0x20]
mov eax, dword [ebp - 0x30]
cmp ecx, eax
setle bl
xor edx, edx
add ebx, dword [ebp - 0x24]
mov eax, dword [ebp - 0x34]
cmp eax, ebx
mov eax, dword [ebp - 0x30]
setl dl
xor ecx, ecx
cmp edx, eax
setg cl
xor ebx, ebx
cmp ecx, dword [ebp - 0x30]
jle 0x100260b6
mov eax, ebx
cmp dword [ebp - 0x34], ebx
je 0x100260b8
mov eax, esi
mov dword [ebp - 0x24], eax
inc dword [ebp - 0x18]
jmp 0x10025fde
mov edx, dword [ebp - 0x2c]
mov dword [ebp - 0x34], ebx
add edi, 2
mov dword [ebp - 0x30], edi
cmp edi, 0x12
jb 0x10025e0d
mov dword [ebp - 0x30], 0xffffffff
mov dword [ebp - 0x48], 0xffffffff
mov dword [ebp - 0x2c], 9
mov dword [ebp - 0x20], ebx
jmp 0x100260ff
mov eax, dword [ebp - 0x20]
mov dword [ebp + eax*4 - 0x228], esi
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], 3
jl 0x100260f2
mov dword [ebp - 0x30], ebx
cmp dword [ebp - 0x30], 0xffffffec
jne 0x100261cc
mov edx, 0xc4ab
mov dword [ebp - 0x20], 0xb96ca2cb
mov dword [ebp - 0x184], edx
mov dword [ebp - 0x180], edx
mov dword [ebp - 0x17c], edx
mov dword [ebp - 0x178], edx
mov dword [ebp - 0x3c], esi
mov dword [ebp - 0x20], ebx
cmp dword [ebp - 0x20], 0xffffffe7
jl 0x100261bf
push 4
pop ecx
mov dword [ebp - 0x18], ebx
jmp 0x10026157
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x140], ebx
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], ecx
jl 0x1002614a
mov dword [ebp - 0x18], ebx
jmp 0x10026172
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x204], 0x52a26f3f
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], ecx
jl 0x10026161
mov dword [ebp - 0x140], 3
cmp dword [ebp - 0x140], ebx
jl 0x100261b6
mov ecx, dword [ebp - 0x140]
xor eax, eax
cmp ecx, esi
mov dword [ebp - 0x1f8], ecx
mov dword [ebp - 0x228], ecx
sete al
mov dword [ebp - 0x3c], eax
mov eax, dword [ebp - 0x1f8]
dec dword [ebp - 0x140]
jns 0x10026189
push 4
pop ecx
dec dword [ebp - 0x20]
cmp dword [ebp - 0x20], 0xffffffe7
jge 0x10026145
dec dword [ebp - 0x30]
cmp dword [ebp - 0x30], 0xffffffec
je 0x10026117
inc dword [ebp - 0x2c]
xor eax, eax
mov word [ebp - 0x142], ax
mov dword [ebp - 0x30], 0xfffffff6
mov dword [ebp - 0x2c], 0x15898f01
mov dword [ebp - 0x20], ebx
jmp 0x100261fc
mov eax, dword [ebp - 0x20]
mov dword [ebp + eax*4 - 0x1a8], 0xf9986e3e
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], 2
jl 0x100261eb
mov eax, dword [ebp - 0x30]
cmp dword [ebp - 0x30], ebx
je 0x10026216
mov eax, dword [ebp - 0x30]
mov dword [ebp - 0x2c], eax
mov eax, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x30]
mov eax, dword [ebp - 0x30]
mov eax, dword [ebp - 0x30]
dec eax
neg eax
sbb eax, eax
neg eax
mov dword [ebp - 0x1a4], eax
mov byte [ebp - 0x19], bl
cmp byte [ebp - 0x19], 0
je 0x10026244
push 0x6e4
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDlgItem]
xor eax, eax
mov dword [ebp - 0x18c], 7
mov word [ebp - 0x1a0], ax
lea ecx, [ebp - 0x1a0]
lea eax, [ebp - 0x150]
mov dword [ebp - 0x190], ebx
push eax
call fcn.10005655
mov dword [ebp - 4], 5
mov dword [ebp - 0x30], 0x33a4
cmp dword [ebp - 0x30], 0x35d3
jle 0x100262e8
mov ecx, ebx
mov dword [ebp - 0x34], ebx
mov eax, ebx
mov dword [ebp - 0x28], ebx
mov edi, ebx
add eax, ecx
lea ecx, [ebp - 0x270]
or eax, edi
cdq
push edx
push eax
call fcn.10001a55
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x100262ae
mov eax, dword [eax]
push eax
call fcn.100443ac
pop ecx
push ebx
push esi
lea ecx, [ebp - 0x270]
call fcn.10005611
mov eax, dword [ebp - 0x28]
inc edi
mov ecx, dword [ebp - 0x34]
cmp edi, 0x2077
jl 0x10026292
inc eax
mov dword [ebp - 0x28], eax
cmp eax, 0x25eb
jl 0x10026290
inc ecx
mov dword [ebp - 0x34], ecx
cmp ecx, 0x6eb5
jl 0x1002628b
push 0xfffffffffffffff7
pop edx
mov dword [ebp - 0x114], edx
xor ecx, ecx
mov dword [ebp - 0x110], edx
inc ecx
mov dword [ebp - 0x10c], edx
mov dword [ebp - 0x108], edx
mov dword [ebp - 0x24], 0x57f451d5
mov dword [ebp - 0x20], 0x4f3f7e81
mov dword [ebp - 0x48], 6
mov dword [ebp - 0x3c], 0xfffffff8
mov dword [ebp - 0x28], ecx
mov dword [ebp - 0x38], 0xffffffff
mov dword [ebp - 0x2c], 0xa66fa4bc
mov dword [ebp - 0x34], 0xfffb
mov dword [ebp - 0x2c], ebx
mov dword [ebp - 0x18], ebx
jmp 0x1002634f
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x100], ecx
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], ecx
jl 0x10026342
mov dword [ebp - 0x18], ebx
jmp 0x10026363
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x80], edx
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], ecx
jl 0x10026359
mov eax, dword [ebp - 0x34]
mov dword [ebp - 0x2c], eax
mov eax, dword [ebp - 0x100]
mov eax, dword [ebp - 0x2c]
inc dword [ebp - 0x34]
mov eax, dword [ebp - 0x28]
add eax, 4
je 0x10026385
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x24]
xor ecx, ecx
mov eax, dword [ebp - 0x48]
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x80]
cmp eax, 0x249de49
mov eax, dword [ebp - 0x114]
mov edx, dword [ebp - 0x80]
setle cl
add eax, ecx
mov ecx, dword [ebp - 0x3c]
imul edx, eax
mov eax, dword [ebp - 0x20]
neg edx
sbb edx, edx
inc edx
imul ecx, edx
xor edx, edx
dec dword [ebp - 0x20]
inc edx
cmp eax, ecx
mov ecx, edx
jle 0x100263c5
mov ecx, ebx
mov eax, dword [ebp - 0x38]
add eax, ecx
jne 0x100263d6
mov esi, ebx
cmp dword [ebp - 0x110], ebx
je 0x100263d8
mov esi, edx
mov eax, dword [ebp - 0x3c]
xor ecx, ecx
cmp esi, eax
sete cl
mov dword [ebp - 0x2c], ecx
mov eax, dword [ebp - 0x10c]
sub eax, 0x43
neg eax
sbb eax, eax
inc eax
cmp eax, dword [ebp - 0x80]
jl 0x100263ff
mov esi, ebx
cmp dword [ebp - 0x34], ebx
je 0x10026401
mov esi, edx
mov eax, dword [ebp - 0x10c]
xor ecx, ecx
cmp eax, esi
setge cl
xor eax, eax
cmp ecx, 0x5ce4ec6
setle al
sub eax, 0xf55f5dd
neg eax
sbb eax, eax
inc eax
cmp eax, dword [ebp - 0x38]
je 0x10026454
mov dword [ebp - 0x38], ebx
jmp 0x1002644c
mov byte [ebp - 0x19], bl
cmp byte [ebp - 0x19], 0
je 0x10026446
push ebx
push ebx
push 0x877
push ebx
push edx
push ebx
call dword [sym.imp.ADVAPI32.dll_AdjustTokenPrivileges]
inc dword [ebp - 0x38]
push 1
pop edx
cmp dword [ebp - 0x38], 0xb
jge 0x1002642d
jmp 0x1002645e
mov dword [ebp - 0x2c], 0x32c2674d
inc dword [ebp - 0x2c]
cmp dword [ebp - 0x30], 0x30e1
jge 0x10026472
push str.yvhjke_oqlq_losqr_wxavgz
call fcn.100443ac
pop ecx
mov dword [ebp - 4], 5
lea edi, [ebp - 0x150]
xor eax, eax
stosd dword es:[edi], eax
push 4
pop ecx
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
mov eax, 0x4a68
mov dword [ebp - 0x98], eax
mov dword [ebp - 0x94], eax
mov dword [ebp - 0x90], eax
mov dword [ebp - 0x8c], eax
mov dword [ebp - 0x18], 0x871c7bf0
mov dword [ebp - 0x48], 1
mov dword [ebp - 0x18], ebx
jmp 0x100264c9
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0xcc], 0x5ff57440
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], ecx
jl 0x100264b8
push 3
mov dword [ebp - 0x18], ebx
pop edx
jmp 0x100264e7
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x21c], 0xc7e90690
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], edx
jl 0x100264d6
mov dword [ebp - 0x18], ebx
jmp 0x100265e3
mov dword [ebp - 0x24], ebx
mov dword [ebp - 0x28], 1
mov dword [ebp - 0x48], 0x5610a143
mov dword [ebp - 0x24], ebx
jmp 0x10026534
mov eax, dword [ebp - 0x24]
mov ecx, dword [ebp + eax*4 - 0x98]
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x98], ecx
mov byte [ebp - 0x19], bl
cmp byte [ebp - 0x19], 0
je 0x10026531
push ebx
call dword [sym.imp.USER32.dll_RegisterClassA]
push 3
pop edx
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], edx
jle 0x1002650a
mov dword [ebp - 0x24], edx
cmp dword [ebp - 0x24], ebx
jl 0x1002657e
mov dword [ebp - 0x34], 0xbfc4f27d
mov dword [ebp - 0x48], ebx
mov dword [ebp - 0x34], edx
cmp dword [ebp - 0x34], ebx
jl 0x10026579
mov dword [ebp - 0x2c], 0x20452a26
mov byte [ebp - 0x19], bl
cmp byte [ebp - 0x19], 0
je 0x1002656e
push 0x2171
call dword [sym.imp.USER32.dll_GetSystemMetrics]
inc dword [ebp - 0x2c]
dec dword [ebp - 0x34]
jns 0x10026553
push 3
pop edx
dec dword [ebp - 0x24]
jns 0x10026541
mov dword [ebp - 0x24], ebx
cmp dword [ebp - 0x24], edx
jg 0x100265e0
xor esi, esi
mov eax, dword [ebp - 0x18]
xor edx, edx
mov eax, dword [ebp + eax*4 - 0x98]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x24]
mov dword [ebp - 0x28], eax
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp + eax*4 - 0x98]
mov eax, dword [ebp - 0x8c]
cmp eax, ecx
setl dl
cmp edx, dword [ebp - 0x24]
jle 0x100265c5
lea ecx, [esi + 1]
cmp dword [ebp - 0x28], ebx
jne 0x100265c7
mov ecx, ebx
xor eax, eax
cmp ecx, 0x84868fda
push 3
setne al
mov dword [ebp - 0x48], eax
inc dword [ebp - 0x24]
pop edx
cmp dword [ebp - 0x24], edx
jle 0x10026588
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], edx
jle 0x100264f4
cmp dword [ebp - 0x18], ebx
je 0x10026670
mov dword [ebp - 0x18], 0xbd0d
mov eax, dword [ebp - 0x8c]
mov dword [ebp - 0xc0], eax
cmp dword [ebp - 0x18], eax
je 0x10026660
mov edx, dword [ebp - 0x18]
sub edx, dword [ebp - 0xc4]
mov eax, dword [ebp - 0x18]
neg edx
sbb edx, edx
xor ecx, ecx
inc edx
cmp edx, eax
setg cl
neg ecx
cmp ecx, dword [ebp - 0xc0]
jle 0x10026635
cmp dword [ebp - 0x18], ebx
je 0x10026635
xor eax, eax
inc eax
jmp 0x10026637
mov eax, ebx
cmp eax, dword [ebp - 0xcc]
jle 0x10026642
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0xcc]
mov eax, dword [ebp - 0xcc]
mov eax, dword [ebp - 0xcc]
cmp eax, dword [ebp - 0xc0]
jge 0x10026660
mov eax, ebx
jmp 0x10026663
xor eax, eax
inc eax
cmp eax, dword [ebp - 0x94]
jge 0x10026670
xor eax, eax
inc eax
jmp 0x10026672
mov eax, ebx
push dword [ebp - 0x40]
mov dword [ebp - 0x218], eax
lea ecx, [ebp - 0x1e4]
call fcn.10007f20
xor esi, esi
mov byte [ebp - 4], 8
inc esi
mov dword [ebp - 0x34], esi
mov dword [ebp - 0x28], 0xfffffffc
mov dword [ebp - 0x3c], 0x3934
cmp dword [ebp - 0x3c], 0x3a31
jle 0x100266ed
mov dword [ebp - 0x28], ebx
mov edi, ebx
mov eax, ebx
mov ebx, dword [ebp - 0x28]
mov dword [ebp - 0x2c], eax
and eax, edi
mov ecx, 0x10075fb8
and eax, ebx
cdq
push edx
push eax
call fcn.10004fa9
mov eax, dword [ebp - 0x2c]
inc eax
mov dword [ebp - 0x2c], eax
cmp eax, 0x7e9
jl 0x100266b4
inc edi
push 0
pop ebx
cmp edi, 0xdb5
jl 0x100266ac
mov eax, dword [ebp - 0x28]
inc eax
mov dword [ebp - 0x28], eax
cmp eax, 0x6a12
jl 0x100266aa
mov byte [ebp - 4], 9
cmp dword [ebp - 0x3c], 0x3918
jge 0x1002672a
mov edx, str.wdsbulq_vfgipkgjj_euacd_kvfk_utcr_lewtnoyt_lqkwrqj
mov ecx, 0x10075fb8
call fcn.1000736a
jmp 0x1002672a
mov dword [ebp - 4], 8
mov dword [ebp - 0x3c], 0x6f88
cmp dword [ebp - 0x3c], 0x7204
jle 0x100267eb
push ebx
push 0xebc
push 0x2366
push ebx
call dword [sym.imp.GDI32.dll_GetPaletteEntries]
mov edx, ebx
mov dword [ebp - 0x20], ebx
mov eax, ebx
mov dword [ebp - 0x28], ebx
mov edi, ebx
mov dword [ebp - 0x2c], ebx
mov ecx, edi
mov dword [ebp - 0x40], ebx
shl eax, cl
mov edi, ebx
mov dword [ebp - 0x48], eax
mov eax, edi
lea ecx, [ebp - 0x288]
and eax, edx
and eax, dword [ebp - 0x48]
cdq
push edx
push eax
call fcn.10001a55
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x10026791
mov eax, dword [eax]
push eax
call fcn.100443ac
pop ecx
push ebx
push esi
lea ecx, [ebp - 0x288]
call fcn.10005611
mov edx, dword [ebp - 0x20]
inc edi
cmp edi, 0x3638
jl 0x10026772
mov edi, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x28]
inc edi
mov dword [ebp - 0x2c], edi
cmp edi, 0x1ea1
jl 0x10026766
inc eax
mov dword [ebp - 0x28], eax
cmp eax, 0x24f3
jl 0x10026761
inc edx
mov dword [ebp - 0x20], edx
cmp edx, 0x397a
jl 0x1002675c
push 0x1d58
push 0x16f1
push ebx
call dword [sym.imp.USER32.dll_CheckMenuItem]
mov dword [ebp - 0x40], 0xffffffff
cmp dword [ebp - 0x3c], 0x6d0d
jge 0x10026806
push str.qpjl_hrgln_amd_vncqiqy_jzly_ruhszlld_yja_hcqutng_laebvvpzx_ywpmqhy_ewasramtq
call fcn.100443ac
pop ecx
mov dword [ebp - 4], 8
xor ecx, ecx
mov dword [ebp - 0x40], 0x58a8ce9b
inc ecx
push 0xfffffffffffffffa
pop eax
mov dword [ebp - 0x2c], eax
mov dword [ebp - 0x48], eax
mov dword [ebp - 0x40], 0x8b742d63
mov dword [ebp - 0x24], ebx
jmp 0x1002683a
mov eax, dword [ebp - 0x24]
mov dword [ebp + eax*4 - 0x44], 0xfffffff6
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], ecx
jl 0x1002682c
mov dword [ebp - 0x24], ebx
jmp 0x10026855
mov eax, dword [ebp - 0x24]
mov dword [ebp + eax*4 - 0x104], 0xffffffff
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], ecx
jl 0x10026844
mov dword [ebp - 0x24], ebx
jmp 0x10026870
mov eax, dword [ebp - 0x24]
mov dword [ebp + eax*4 - 0x174], 0xffffffff
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], 2
jl 0x1002685f
mov dword [ebp - 0x24], ebx
jmp 0x1002688c
mov eax, dword [ebp - 0x24]
mov dword [ebp + eax*4 - 0xfc], 4
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], 3
jl 0x1002687b
mov eax, dword [ebp - 0x44]
xor edx, edx
mov eax, dword [ebp - 0x44]
mov eax, dword [ebp - 0x44]
mov eax, dword [ebp - 0x44]
mov dword [ebp - 0x34], eax
mov ecx, dword [ebp - 0x44]
mov eax, dword [ebp - 0x34]
cmp eax, ecx
setl dl
add edx, 0x219252f2
mov dword [ebp - 0x28], edx
xor edx, edx
mov ecx, dword [ebp - 0x44]
mov eax, dword [ebp - 0x28]
cmp ecx, eax
mov eax, dword [ebp - 0x44]
setle dl
xor ebx, ebx
cmp edx, eax
setne bl
xor ecx, ecx
mov dword [ebp - 0x104], ebx
mov eax, dword [ebp - 0x44]
cmp ebx, eax
setne cl
xor esi, esi
xor eax, eax
inc esi
cmp ecx, esi
setle al
xor ecx, ecx
cmp eax, 0x9a164e6
mov eax, dword [ebp - 0x44]
setle cl
xor ebx, ebx
sub ecx, eax
mov dword [ebp - 0x174], ecx
mov ecx, dword [ebp - 0x44]
mov eax, dword [ebp - 0x44]
sub ecx, eax
cmp ecx, dword [ebp - 0xfc]
jne 0x10026916
mov edx, esi
cmp dword [ebp - 0x44], ebx
jne 0x10026918
mov edx, ebx
mov eax, dword [ebp - 0x44]
xor ecx, ecx
sub edx, eax
mov eax, dword [ebp - 0x44]
cmp edx, eax
mov eax, dword [ebp - 0xf8]
setge cl
xor edx, edx
add ecx, 0x2d74
cmp ecx, eax
setg dl
mov dword [ebp - 0x40], edx
xor edx, edx
mov eax, dword [ebp - 0x28]
mov dword [ebp - 0x40], eax
mov eax, dword [ebp - 0x34]
mov dword [ebp - 0x2c], eax
mov ecx, dword [ebp - 0x2c]
mov eax, dword [ebp - 0xfc]
sub ecx, eax
mov eax, dword [ebp - 0x44]
cmp ecx, eax
mov eax, dword [ebp - 0x44]
sete dl
xor ecx, ecx
cmp eax, edx
setle cl
cmp ecx, dword [ebp - 0x44]
jle 0x1002697c
cmp dword [ebp - 0xfc], ebx
jne 0x1002697c
mov eax, ebx
cmp dword [ebp - 0x48], ebx
je 0x1002697e
mov eax, esi
xor ecx, ecx
cmp eax, 9
mov eax, dword [ebp - 0xfc]
setne cl
xor edx, edx
cmp ecx, eax
mov eax, dword [ebp - 0x44]
mov word [ebp - 0x4c], 0x5a00
setge dl
add eax, edx
mov dword [ebp - 0x40], eax
mov dword [ebp - 0x30], 0x69da
cmp dword [ebp - 0x30], 0x69f3
jle 0x10026a55
push 0xf84
push ebx
push 0x15b
push ebx
push 0x1e2b
push ebx
call dword [sym.imp.KERNEL32.dll_CompareStringW]
mov eax, ebx
mov dword [ebp - 0x28], ebx
mov edi, ebx
mov dword [ebp - 0x20], ebx
cdq
idiv edi
mov dword [ebp - 0x3c], ebx
mov dword [ebp - 0x40], edx
mov dword [ebp - 0x34], 0x7c9
mov edi, ebx
mov dword [ebp - 0x2c], 0x12d2
mov ebx, dword [ebp - 0x3c]
mov eax, edi
mov ecx, 0x10075fb8
cdq
push edx
push eax
call fcn.10004fa9
add edi, ebx
dec dword [ebp - 0x2c]
jne 0x100269f3
add ebx, dword [ebp - 0x40]
dec dword [ebp - 0x34]
push 0
mov dword [ebp - 0x3c], ebx
pop ebx
jne 0x100269e7
mov edi, dword [ebp - 0x20]
mov eax, dword [ebp - 0x28]
inc edi
mov dword [ebp - 0x20], edi
cmp edi, 0x7455
jl 0x100269d7
inc eax
mov dword [ebp - 0x28], eax
cmp eax, 0x5fb
jl 0x100269d2
push 0x1edc
push ebx
push ebx
push 0x1c1f
push ebx
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_CreateDIBitmap]
push 0x5c
pop eax
mov byte [ebp - 4], 0xd
cmp dword [ebp - 0x30], 0x6944
mov word [ebp - 0x50], ax
jge 0x10026a99
mov edx, str.myyrgvgh_wqru_dpiwwmnb_jqa_ckakbho_wypfxc_xwrbvr_uns_oiaefuqa_nukpjotun_vrewpsar
mov ecx, 0x10075fb8
call fcn.1000736a
jmp 0x10026a99
push 2
pop edi
mov dword [ebp - 0x20], edi
mov dword [ebp - 4], 8
cmp edi, 2
jae 0x10026b7c
mov dword [ebp - 0x34], 0x6dcd
cmp dword [ebp - 0x34], 0x6fdc
jle 0x10026b3b
mov eax, ebx
mov dword [ebp - 0x3c], ebx
mov ecx, eax
mov dword [ebp - 0x2c], 0xc39
mov dword [ebp - 0x28], ecx
mov edi, ebx
mov eax, edi
xor eax, ecx
lea ecx, [ebp - 0x2b8]
cdq
push edx
push eax
call fcn.10001a55
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x10026aee
mov eax, dword [eax]
push eax
call fcn.100443ac
pop ecx
push ebx
push esi
lea ecx, [ebp - 0x2b8]
call fcn.10005611
mov ecx, dword [ebp - 0x28]
inc edi
cmp edi, 0x25a8
jl 0x10026ad2
dec ecx
dec dword [ebp - 0x2c]
mov dword [ebp - 0x28], ecx
jne 0x10026ad0
mov eax, dword [ebp - 0x3c]
inc eax
mov dword [ebp - 0x3c], eax
cmp eax, 0x2273
jl 0x10026ac4
push 0xc57
push 0x1b1b
call fcn.10035f8f
pop ecx
pop ecx
call eax
mov edi, dword [ebp - 0x20]
movzx edx, byte [ebp + edi - 0x4b]
mov eax, edi
sub eax, ebx
movzx eax, byte [ebp + eax - 0x4e]
movzx eax, word [ebp + eax*2 - 0x50]
mov ecx, eax
and eax, edx
or ecx, edx
sub ecx, eax
cmp dword [ebp - 0x34], 0x6b1f
movzx eax, byte [ebp + edi - 0x4c]
mov word [ebp + eax*2 - 0x50], cx
jge 0x10026b74
push str.cda_jugtb_xryh
call fcn.100443ac
pop ecx
add edi, 2
jmp 0x10026a9c
xor eax, eax
mov word [ebp - 0x4e], ax
mov eax, 0xb4ffb871
mov dword [ebp - 0x16c], eax
mov dword [ebp - 0x168], eax
mov dword [ebp - 0x164], eax
mov dword [ebp - 0x160], eax
mov dword [ebp - 0x34], 0x443250e6
push 0xfffffffffffffff6
pop eax
mov dword [ebp - 0x40], eax
mov dword [ebp - 0x2c], 0xf29c8dda
mov dword [ebp - 0x168], eax
mov dword [ebp - 0x34], 3
cmp dword [ebp - 0x34], ebx
jl 0x10026c0e
xor ecx, ecx
inc ecx
mov dword [ebp - 0x40], 3
mov dword [ebp - 0x40], 0x27d2703d
mov dword [ebp - 0x40], 9
mov dword [ebp - 0x40], 0xa420452a
mov dword [ebp - 0x40], 0x87fce6bb
mov dword [ebp - 0x20], ebx
jmp 0x10026bfd
mov eax, dword [ebp - 0x20]
mov dword [ebp + eax*4 - 0x230], ecx
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], 2
jl 0x10026bf0
dec dword [ebp - 0x2c]
dec dword [ebp - 0x34]
jns 0x10026bc8
xor esi, esi
inc esi
xor eax, eax
mov dword [ebp - 0x11c], 7
mov word [ebp - 0x130], ax
lea ecx, [ebp - 0x130]
lea eax, [ebp - 0x50]
mov dword [ebp - 0x120], ebx
push eax
call fcn.10005655
mov byte [ebp - 4], 0x11
mov dword [ebp - 0x50], ebx
mov dword [ebp - 0x18], 0x7e2799ac
mov dword [ebp - 0x40], 0x211e9a9
mov dword [ebp - 0x20], ebx
jmp 0x10026c61
mov eax, dword [ebp - 0x20]
mov dword [ebp + eax*4 - 0x210], 0xfffffff8
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], 3
jl 0x10026c50
mov byte [ebp - 0x19], bl
cmp byte [ebp - 0x19], 0
je 0x10026c77
push ebx
call dword [sym.imp.KERNEL32.dll_FlushFileBuffers]
mov dword [ebp - 0x18], 0x16
jmp 0x10026dd5
mov dword [ebp - 0x38], 0xe8b72fd4
mov dword [ebp - 0x20], ebx
mov dword [ebp - 0x30], 0x9265
mov dword [ebp - 0x38], ebx
cmp dword [ebp - 0x38], 0xf
jle 0x10026dcc
mov dword [ebp - 0x24], 0x467b
mov dword [ebp - 0x2c], 4
mov dword [ebp - 0x20], ebx
jmp 0x10026cc5
mov eax, dword [ebp - 0x20]
mov dword [ebp + eax*4 - 0xac], 0x19570a50
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], 2
jl 0x10026cb4
mov eax, dword [ebp - 0xa8]
xor ecx, ecx
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x38]
mov eax, dword [ebp - 0xa8]
cmp eax, 0xfffffff7
mov eax, dword [ebp - 0x18]
setne cl
xor edx, edx
cmp ecx, 0x6efe0cd1
setg dl
sub eax, edx
jne 0x10026cfc
cmp dword [ebp - 0x24], ebx
jne 0x10026cfe
mov esi, ebx
mov eax, dword [ebp - 0x38]
xor ecx, ecx
imul eax, esi
cmp eax, 0xf8b8
setne cl
mov dword [ebp - 0x20], ecx
xor ecx, ecx
mov eax, dword [ebp - 0x18]
mov edx, dword [ebp - 0xa8]
sub edx, eax
mov eax, dword [ebp - 0x24]
sub edx, eax
mov eax, dword [ebp - 0x18]
cmp edx, eax
setl cl
xor eax, eax
cmp ecx, 0x3ae5
setne al
xor ecx, ecx
sub eax, dword [ebp - 0x38]
inc ecx
mov dword [ebp - 0x2c], eax
mov eax, dword [ebp - 0x2c]
mov dword [ebp - 0x30], eax
mov eax, dword [ebp - 0x30]
mov dword [ebp - 0x40], eax
mov dword [ebp - 0x20], ebx
jmp 0x10026db7
mov dword [ebp - 0x30], ebx
jmp 0x10026d95
mov dword [ebp - 0x24], ebx
jmp 0x10026d8d
mov byte [ebp - 0x19], bl
cmp byte [ebp - 0x19], 0
je 0x10026d7e
push ebx
push 0xa8b
push ebx
push ebx
push 0x20c5
push 0xa5d
call dword [sym.imp.USER32.dll_ToAsciiEx]
xor ecx, ecx
inc ecx
mov eax, dword [ebp - 0x24]
cmp dword [ebp + eax*4 - 0xac], ebx
jne 0x10026d92
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], ecx
jle 0x10026d5a
inc dword [ebp - 0x30]
cmp dword [ebp - 0x30], ecx
jle 0x10026d55
mov byte [ebp - 0x19], bl
cmp byte [ebp - 0x19], 0
je 0x10026db4
push ebx
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_EndPaint]
xor ecx, ecx
inc ecx
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], ecx
jle 0x10026d50
inc dword [ebp - 0x38]
cmp dword [ebp - 0x38], 0xf
push 1
pop esi
jg 0x10026ca1
mov eax, dword [ebp - 0x208]
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 0x17
jl 0x10026c83
push 0x5f
pop eax
push 2
mov byte [ebp - 0x60], bl
mov ecx, ebx
mov dword [ebp - 0x5f], 0x5be9048b
mov word [ebp - 0x5b], 0x8738
mov word [ebp - 0x54], ax
pop edi
cmp edi, 2
jne 0x10026e07
push 5
pop ecx
push ecx
pop edi
jmp 0x10026e30
movzx edx, byte [ebp + edi - 0x5f]
mov eax, edi
sub eax, ecx
movzx eax, byte [ebp + eax - 0x62]
movzx ecx, word [ebp + eax*2 - 0x54]
mov eax, ecx
and eax, edx
add eax, eax
sub ecx, eax
movzx eax, byte [ebp + edi - 0x60]
add ecx, edx
mov word [ebp + eax*2 - 0x54], cx
mov ecx, ebx
add edi, 2
cmp edi, 7
jb 0x10026dfb
xor eax, eax
mov dword [ebp - 0x1ac], 7
mov word [ebp - 0x52], ax
lea ecx, [ebp - 0x1c0]
mov word [ebp - 0x1c0], ax
lea eax, [ebp - 0x54]
push eax
mov dword [ebp - 0x1b0], ebx
call fcn.10005655
mov byte [ebp - 4], 0x12
mov dword [ebp - 0x34], 0x17571177
mov dword [ebp - 0x38], 0xbeccce1e
mov dword [ebp - 0x40], 7
mov dword [ebp - 0x34], ebx
cmp dword [ebp - 0x34], 0xffffffe6
jne 0x10026f7f
mov dword [ebp - 0x30], 0x779b
cmp dword [ebp - 0x30], 0x7858
jle 0x10026f0f
mov dword [ebp - 0x2c], ebx
mov edi, ebx
mov ebx, dword [ebp - 0x2c]
mov dword [ebp - 0x20], edi
mov eax, edi
mov dword [ebp - 0x28], 0x7721
mov dword [ebp - 0x3c], eax
mov edi, eax
mov dword [ebp - 0x2c], 0x27f7
mov eax, ebx
mov ecx, 0x10075fb8
or eax, edi
cdq
push edx
push eax
call fcn.10004fa9
dec edi
dec dword [ebp - 0x2c]
jne 0x10026eba
mov eax, dword [ebp - 0x3c]
dec eax
dec dword [ebp - 0x28]
mov dword [ebp - 0x3c], eax
jne 0x10026eb1
mov edi, dword [ebp - 0x20]
inc edi
mov dword [ebp - 0x20], edi
cmp edi, 0x63d8
jl 0x10026ea5
inc ebx
push 0
mov dword [ebp - 0x2c], ebx
cmp ebx, 0x1d9b
pop ebx
jl 0x10026e9d
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_DeleteDC]
mov byte [ebp - 0x19], bl
mov byte [ebp - 4], 0x13
cmp dword [ebp - 0x30], 0x740b
jge 0x10026f4f
mov edx, str.tfuvey_oggxntvu_zzojhf
mov ecx, 0x10075fb8
call fcn.1000736a
jmp 0x10026f4f
mov dword [ebp - 4], 0x12
cmp byte [ebp - 0x19], 0
je 0x10026f74
push ebx
push 0x240e
push 0x2293
push 0x26ea
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_CreateFileMappingA]
dec dword [ebp - 0x38]
dec dword [ebp - 0x34]
jmp 0x10026e80
mov dword [ebp - 0x54], ebx
mov dword [ebp - 0xbc], ebx
mov dword [ebp - 0xb8], ebx
mov dword [ebp - 0xb4], ebx
mov dword [ebp - 0xb0], ebx
mov dword [ebp - 0x30], 0xa35c
mov dword [ebp - 0x2c], 0x12a30a4c
mov dword [ebp - 0x20], 0xf1448112
push 4
mov dword [ebp - 0x40], 0x5c526587
mov dword [ebp - 0x20], ebx
pop ecx
jmp 0x10026fcf
mov eax, dword [ebp - 0x20]
mov dword [ebp + eax*4 - 0x240], 0xb3bfa32a
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], ecx
jl 0x10026fbe
mov eax, dword [ebp - 0xb8]
mov dword [ebp - 0x30], eax
mov ecx, dword [ebp - 0x30]
neg ecx
sbb ecx, ecx
neg ecx
cmp dword [ebp - 0xbc], ebx
jne 0x10027001
mov eax, dword [ebp - 0xb0]
mov edx, ebx
imul eax, dword [ebp - 0xbc]
test eax, eax
je 0x10027003
mov edx, esi
mov eax, dword [ebp - 0xbc]
imul edx, ecx
xor ecx, ecx
add eax, edx
cmp eax, 0x31f145ba
mov dword [ebp - 0x234], eax
sete cl
xor edx, edx
sub ecx, 0x288586fd
mov dword [ebp - 0x2c], ecx
mov ecx, dword [ebp - 0x2c]
mov eax, dword [ebp - 0xbc]
cmp ecx, eax
setle dl
mov dword [ebp - 0x20], edx
mov dword [ebp - 0x30], ebx
jmp 0x100270a1
mov dword [ebp - 0x48], 0x4f8d
mov dword [ebp - 0x2c], esi
mov dword [ebp - 0x20], ebx
jmp 0x1002705b
mov eax, dword [ebp - 0x20]
mov dword [ebp + eax*4 - 0x1cc], ebx
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], 3
jl 0x1002704e
mov dword [ebp - 0x20], 0xffffffe4
jmp 0x10027080
mov dword [ebp - 0x48], 9
mov eax, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x40]
mov dword [ebp - 0x1c4], eax
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], 0xfffffff9
jge 0x1002706a
mov eax, dword [ebp - 0x1c4]
dec eax
neg eax
sbb eax, eax
add eax, 0xffffb0d5
neg eax
sbb eax, eax
inc eax
mov dword [ebp - 0x2c], eax
inc dword [ebp - 0x30]
cmp dword [ebp - 0x30], 7
jg 0x1002703f
push dword [ebp - 0x120]
cmp dword [ebp - 0x11c], 8
lea eax, [ebp - 0x130]
push ebx
cmovae eax, dword [ebp - 0x130]
lea ecx, [ebp - 0x1e4]
push eax
call fcn.10027352
cmp eax, 0xffffffff
je 0x100270ec
push 0xffffffffffffffff
push ebx
lea ecx, [ebp - 0x1c0]
push ecx
push esi
push eax
lea ecx, [ebp - 0x1e4]
call fcn.10008878
jmp 0x100270a7
mov ecx, dword [ebp - 0x88]
lea eax, [ebp - 0x1e4]
push eax
lea edx, [ebp - 0x1a0]
call fcn.100273f5
pop ecx
push ebx
push esi
lea ecx, [ebp - 0x1c0]
call fcn.100056dd
push ebx
push esi
lea ecx, [ebp - 0x130]
call fcn.100056dd
push ebx
push esi
lea ecx, [ebp - 0x1e4]
call fcn.100056dd
push ebx
push esi
lea ecx, [ebp - 0x1a0]
call fcn.100056dd
mov ecx, dword [ebp - 0xc]
mov eax, dword [ebp - 0x88]
pop edi
pop esi
mov dword fs:[0], ecx
pop ebx
mov esp, ebp
pop ebp
ret