Function at 0x10023f4b
Capabilities:
Set environment variable

Disassembly:
mov eax, 0x100598cf
call fcn.10058764
sub esp, 0x208
push ebx
push esi
push edi
mov dword [ebp - 0x10], esp
xor ebx, ebx
mov dword [ebp - 0x84], ecx
lea ecx, [ebp - 0xa8]
push 3
mov dword [ebp - 0xbc], edx
mov dword [ebp - 0x1ac], ebx
call fcn.1000adae
mov dword [ebp - 0x30], 4
xor edx, edx
mov dword [ebp - 0x34], 0x4868fdad
inc edx
mov dword [ebp - 0x1c], 0x5950cfdf
mov dword [ebp - 0x24], 0xd42ad01
mov dword [ebp - 0x40], 0xffffffff
mov dword [ebp - 0x28], 0x59c3f908
mov dword [ebp - 0x38], 0xffffffff
mov dword [ebp - 0x24], ebx
cmp dword [ebp - 0x24], 3
jge 0x10023fd0
mov ecx, dword [ebp - 0x24]
mov eax, dword [ebp - 0xa8]
mov dword [eax + ecx*4], edx
inc dword [ebp - 0x24]
jmp 0x10023fb9
mov eax, dword [ebp - 0x30]
mov ecx, dword [ebp - 0xa8]
cmp eax, dword [ecx]
je 0x10023fe4
cmp dword [ecx + 8], ebx
jne 0x10023fe4
mov edx, ebx
mov ecx, dword [ebp - 0x30]
push 0xfffffffffffffff6
pop edi
cmp edi, edx
sbb eax, eax
inc eax
cmp eax, 0xcfd66c4a
sbb eax, eax
xor edx, edx
inc eax
sub ecx, eax
mov eax, dword [ebp - 0x30]
cmp ecx, eax
mov eax, dword [ebp - 0x30]
setg dl
xor ecx, ecx
cmp edx, eax
setg cl
xor edx, edx
mov dword [ebp - 0x34], ecx
mov eax, dword [ebp - 0x30]
neg eax
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x30]
mov ecx, dword [ebp - 0x1c]
mov eax, dword [ebp - 0xa8]
cmp ecx, dword [eax]
setl dl
xor esi, esi
mov dword [ebp - 0x24], edx
inc esi
mov eax, dword [ebp - 0x40]
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0x24]
mov dword [ebp - 0x28], eax
mov eax, dword [ebp - 0x28]
cmp esi, eax
mov eax, dword [ebp - 0xa8]
sbb edx, edx
xor ecx, ecx
inc edx
imul edx, dword [eax + 4]
mov eax, dword [ebp - 0x30]
cmp edx, eax
setl cl
mov dword [ebp - 0x38], ecx
cmp dword [ebp - 0x24], 0xb0d35edc
jne 0x1002406d
cmp dword [ebp - 0x28], ebx
jne 0x1002406f
mov esi, ebx
mov edx, dword [ebp - 0x1c]
xor eax, eax
cmp esi, 0x6ce2e7c5
setle al
sub edx, eax
mov eax, dword [ebp - 0x38]
neg edx
sbb edx, edx
xor ecx, ecx
inc edx
cmp eax, edx
setle cl
mov dword [ebp - 0x24], ecx
lea ecx, [ebp - 0xa8]
mov eax, dword [ebp - 0x24]
mov dword [ebp - 0x1c], eax
call fcn.1000ae31
mov dword [ebp - 0x24], ebx
lea ecx, [ebp - 0x138]
mov dword [ebp - 0x3c], 0x751c
mov dword [ebp - 0x28], 0xfffffffc
mov dword [ebp - 0x30], 0x2f63069b
push 2
call fcn.1000adae
mov dword [ebp - 4], ebx
mov dword [ebp - 0x24], ebx
jmp 0x100240e2
mov ecx, dword [ebp - 0x24]
mov eax, dword [ebp - 0x138]
mov dword [eax + ecx*4], 0x84cb
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], 2
jl 0x100240cf
mov dword [ebp - 0x24], 0xfffffff3
cmp dword [ebp - 0x24], 0xd
jl 0x10024305
mov dword [ebp - 0x1c], 0xcde6bc04
mov dword [ebp - 0x34], 0xd5269945
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x24]
add eax, 0x504d
cmp dword [ebp - 0x3c], eax
je 0x100241c2
cmp dword [ebp - 0x30], ebx
je 0x100241c2
xor eax, eax
inc eax
mov dword [ebp - 0x38], eax
mov dword [ebp - 0x30], ebx
cmp dword [ebp - 0x30], eax
jg 0x100242fd
mov dword [ebp - 0x18], 5
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x38]
mov ecx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x38]
neg ecx
sbb ecx, ecx
xor edx, edx
neg ecx
cmp eax, ecx
setl dl
xor ecx, ecx
add edx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x38]
cmp edx, eax
mov eax, dword [ebp - 0x18]
setg cl
xor edx, edx
cmp ecx, eax
setge dl
xor ecx, ecx
sub edx, dword [ebp - 0x38]
mov eax, dword [ebp - 0x1c]
cmp edx, eax
setl cl
imul eax, ecx, 0x4c9f
xor ecx, ecx
cmp eax, 0x503a
setge cl
cmp ecx, 0xfffc
sbb eax, eax
neg eax
add eax, dword [ebp - 0x1c]
mov dword [ebp - 0x28], eax
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x28], eax
inc dword [ebp - 0x30]
cmp dword [ebp - 0x30], 1
jle 0x10024148
xor ebx, ebx
jmp 0x100242fd
mov dword [ebp - 0x34], 0xa5798870
mov dword [ebp - 0x18], ebx
jmp 0x100241df
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x11c], 0xc027682c
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 3
jl 0x100241ce
mov dword [ebp - 0x2c], 0x5b8e
cmp dword [ebp - 0x2c], 0x5dde
jle 0x1002426c
mov dword [ebp - 0x38], ebx
mov edi, ebx
mov esi, ebx
mov eax, ebx
mov ebx, dword [ebp - 0x38]
mov dword [ebp - 0x18], eax
add eax, esi
mov ecx, 0x10073a98
add eax, edi
xor eax, ebx
cdq
push edx
push eax
call fcn.1000ab96
mov eax, dword [ebp - 0x18]
inc eax
mov dword [ebp - 0x18], eax
cmp eax, 0x24d5
jl 0x10024204
inc esi
push 0
pop ebx
cmp esi, 0x368a
jl 0x100241fc
inc edi
cmp edi, 0x2562
jl 0x100241fa
mov eax, dword [ebp - 0x38]
inc eax
mov dword [ebp - 0x38], eax
cmp eax, 0x1ec0
jl 0x100241f8
push 0x13d5
push ebx
push 0x22cf
push 0x22aa
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_ExtFloodFill]
mov eax, dword [ebp - 0x118]
cmp dword [ebp - 0x1c], eax
jne 0x100242a7
mov ecx, dword [ebp - 0x1c]
neg ecx
sbb ecx, ecx
xor eax, eax
neg ecx
cmp ecx, 0x3adfe1d
setge al
add eax, dword [ebp - 0x1c]
mov dword [ebp - 0x34], eax
cmp dword [ebp - 0x30], 3
sbb eax, eax
neg eax
cmp eax, dword [ebp - 0x1c]
je 0x100242a4
mov eax, dword [ebp - 0x118]
mov eax, dword [ebp - 0x30]
mov ecx, dword [ebp - 0x114]
xor edx, edx
mov eax, dword [ebp - 0x3c]
add ecx, 0xfff9
cmp ecx, eax
setne dl
mov dword [ebp - 0x34], edx
mov byte [ebp - 4], 1
cmp dword [ebp - 0x2c], 0x59cc
jge 0x100242fa
mov edx, str.wltl_onowadliz_hffkb_ridojdoc_dftdugbe
mov ecx, 0x10073a98
call fcn.1000d257
jmp 0x100242fa
mov dword [ebp - 4], ebx
inc dword [ebp - 0x24]
jmp 0x100240ef
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x138]
call fcn.1000ae31
xor ecx, ecx
mov dword [ebp - 0x7b], 0x3300649
inc ecx
mov dword [ebp - 0x77], 0x3e252e4
mov byte [ebp - 0x7c], cl
mov word [ebp - 0x73], 0x43e
mov byte [ebp - 0x71], 3
mov byte [ebp - 0x70], bl
mov dword [ebp - 0x6f], 0x5280226
mov byte [ebp - 0x6b], 3
mov dword [ebp - 0x24], 4
mov dword [ebp - 0x34], 0x12fd89d6
mov dword [ebp - 0x18], ebx
jmp 0x10024364
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x88], 0xfffffffe
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], ecx
jl 0x10024353
mov byte [ebp - 0x1d], bl
cmp byte [ebp - 0x1d], 0
je 0x10024387
push 0x1f48
push 0x9fa
push 0x1aea
call dword [sym.imp.KERNEL32.dll_MulDiv]
mov dword [ebp - 0x24], ebx
cmp dword [ebp - 0x24], 5
jl 0x1002448e
mov dword [ebp - 0x3c], 0x3302
cmp dword [ebp - 0x3c], 0x3463
jle 0x100243e4
mov edi, ebx
mov esi, ebx
mov dword [ebp - 0x2c], ebx
mov ebx, esi
mov esi, 0x3f2a
mov ecx, ebx
mov eax, edi
sar eax, cl
mov ecx, 0x10073a98
cdq
push edx
push eax
call fcn.1000ab96
dec ebx
dec esi
jne 0x100243b2
mov esi, dword [ebp - 0x2c]
inc esi
mov dword [ebp - 0x2c], esi
cmp esi, 0x20c0
jl 0x100243ab
inc edi
push 0
pop ebx
cmp edi, 0x7207
jl 0x100243a6
mov dword [ebp - 0x44], 0xe61780ee
mov dword [ebp - 4], 3
cmp dword [ebp - 0x3c], 0x2f29
jge 0x1002440a
mov edx, str.ryzvigt_klkvcnu_maxhqvkny_rvzoz
mov ecx, 0x10073a98
call fcn.1000d257
or dword [ebp - 4], 0xffffffff
push 3
lea ecx, [ebp - 0x150]
call fcn.1000adae
mov dword [ebp - 0x18], ebx
jmp 0x10024455
mov ecx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x150]
mov dword [eax + ecx*4], 0x3cf81320
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 3
jl 0x10024442
mov dword [ebp - 0x88], 0xfffffffb
mov ecx, 0xff7673ed
mov eax, dword [ebp - 0x88]
mov eax, dword [ebp - 0x24]
cmp ecx, eax
lea ecx, [ebp - 0x150]
sbb eax, eax
inc eax
mov dword [ebp - 0x34], eax
call fcn.1000ae31
inc dword [ebp - 0x24]
jmp 0x1002438a
mov dl, byte [ebp - 0x7b]
movzx esi, byte [ebp - 0x7c]
mov al, dl
or al, 0x25
mov dword [ebp - 0x38], ebx
movzx ecx, al
and dl, 0x25
movzx eax, dl
sub cx, ax
lea eax, [esi*2 + 2]
push 2
mov word [ebp + esi*2 - 0xf8], cx
pop edi
mov dword [ebp - 0x3c], eax
cmp edi, eax
jne 0x100244d4
movzx eax, byte [ebp + edi - 0x7c]
dec edi
add edi, eax
lea ecx, [eax + 1]
mov dword [ebp - 0x38], ecx
jmp 0x100246a7
push 2
lea ecx, [ebp - 0xb4]
call fcn.1000adae
push 3
lea ecx, [ebp - 0x9c]
mov dword [ebp - 4], 5
call fcn.1000adae
mov dword [ebp - 0x34], 0xab551fa4
mov dword [ebp - 0x2c], 0xffffffff
mov dword [ebp - 0x2c], 0x40b319b
mov dword [ebp - 0x28], 0xffffffff
mov dword [ebp - 0x40], 9
mov dword [ebp - 0x44], 0xffff
mov dword [ebp - 0x1c], ebx
jmp 0x10024537
mov ecx, dword [ebp - 0x1c]
mov eax, dword [ebp - 0xb4]
mov dword [eax + ecx*4], 0xc891
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 2
jl 0x10024524
push 3
mov dword [ebp - 0x1c], ebx
pop edx
jmp 0x10024558
mov ecx, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x9c]
mov dword [eax + ecx*4], 0xfffffff8
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], edx
jl 0x10024545
mov dword [ebp - 0x1c], ebx
jmp 0x1002456f
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0x19c], edx
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], edx
jl 0x10024562
mov byte [ebp - 0x1d], bl
cmp byte [ebp - 0x1d], 0
je 0x10024592
push ebx
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_GetWindowOrgEx]
mov eax, dword [ebp - 0x9c]
mov esi, dword [eax]
test esi, esi
jne 0x1002460e
mov eax, dword [ebp - 0x34]
xor ecx, ecx
mov eax, dword [ebp - 0xb4]
mov esi, dword [eax]
mov eax, dword [ebp - 0x9c]
cmp esi, dword [eax]
setg cl
xor edx, edx
inc edx
cmp edx, ecx
mov ecx, 0xca8c98aa
sbb eax, eax
inc eax
cmp ecx, eax
sbb eax, eax
inc eax
cmp eax, 0xfffffff9
je 0x100245d3
mov ecx, ebx
test esi, esi
je 0x100245d5
mov ecx, edx
mov esi, dword [ebp - 0xb4]
xor eax, eax
cmp ecx, dword [esi + 4]
setl al
mov dword [ebp - 0x2c], eax
mov eax, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x9c]
mov esi, dword [eax]
cmp esi, 0x9c4b05ef
sbb eax, eax
xor ecx, ecx
neg eax
cmp eax, 0x352601c8
setge cl
cmp ecx, 0xfffffff8
je 0x10024611
mov edx, ebx
jmp 0x10024611
xor edx, edx
inc edx
xor ecx, ecx
lea eax, [edx - 1]
cmp eax, esi
setle cl
mov dword [ebp - 0x2c], ecx
cmp dword [ebp - 0x2c], ebx
jne 0x10024626
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x28]
xor edx, edx
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0xb4]
mov ecx, dword [eax]
mov eax, dword [ebp - 0x9c]
cmp ecx, dword [eax + 8]
setl dl
cmp edx, dword [ebp - 0x40]
je 0x10024654
cmp dword [ebp - 0x194], ebx
je 0x10024654
xor eax, eax
inc eax
jmp 0x10024656
mov eax, ebx
lea ecx, [ebp - 0x9c]
mov dword [ebp - 0x194], eax
call fcn.1000ae31
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xb4]
call fcn.1000ae31
movzx edx, byte [ebp + edi - 0x7b]
mov eax, edi
sub eax, dword [ebp - 0x38]
mov dword [ebp - 0x38], ebx
movzx eax, byte [ebp + eax - 0x7e]
movzx ecx, word [ebp + eax*2 - 0xf8]
mov eax, ecx
and eax, edx
add eax, eax
sub ecx, eax
movzx eax, byte [ebp + edi - 0x7c]
add ecx, edx
mov word [ebp + eax*2 - 0xf8], cx
mov eax, dword [ebp - 0x3c]
add edi, 2
cmp edi, 0x12
jb 0x100244bd
push 2
lea ecx, [ebp - 0x144]
call fcn.1000adae
mov dword [ebp - 0x28], 0x9bdba76a
mov dword [ebp - 0x18], ebx
jmp 0x100246e2
mov ecx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x144]
mov dword [eax + ecx*4], 0xffff
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 2
jl 0x100246cf
xor ecx, ecx
inc ecx
mov dword [ebp - 0x28], ecx
cmp dword [ebp - 0x28], ebx
jl 0x1002473e
mov dword [ebp - 0x18], ebx
jmp 0x10024706
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x68], 0x7a888ada
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], ecx
jl 0x100246f8
mov dword [ebp - 0x68], ebx
jmp 0x10024734
mov byte [ebp - 0x1d], bl
cmp byte [ebp - 0x1d], 0
je 0x10024731
push ebx
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_SelectClipRgn]
xor ecx, ecx
inc ecx
inc dword [ebp - 0x68]
cmp dword [ebp - 0x68], ecx
jle 0x10024710
dec dword [ebp - 0x28]
jns 0x100246f3
lea ecx, [ebp - 0x144]
call fcn.1000ae31
xor eax, eax
mov word [ebp - 0xea], ax
mov dword [ebp - 0x1c], ebx
mov dword [ebp - 0x34], 0xfffffff8
mov dword [ebp - 0x1c], ebx
jmp 0x100247ca
mov dword [ebp - 0x2c], 0x164c
cmp dword [ebp - 0x2c], ebx
jne 0x100247a3
mov eax, dword [ebp - 0x1c]
xor ecx, ecx
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x1c]
test eax, eax
mov eax, dword [ebp - 0x1c]
sets cl
xor edx, edx
cmp ecx, eax
mov eax, dword [ebp - 0x1c]
setg dl
xor ecx, ecx
cmp edx, eax
setl cl
cmp ecx, dword [ebp - 0x1c]
jne 0x100247a3
mov edx, ebx
jmp 0x100247a6
xor edx, edx
inc edx
mov eax, dword [ebp - 0x1c]
xor ecx, ecx
cmp edx, eax
mov eax, dword [ebp - 0x1c]
setne cl
cmp ecx, 0xcf041577
sbb edx, edx
xor ecx, ecx
neg edx
cmp eax, edx
setne cl
mov dword [ebp - 0x34], ecx
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 0x10
jl 0x10024761
mov byte [ebp - 0x1d], bl
cmp byte [ebp - 0x1d], 0
je 0x100247e1
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_SetEnvironmentVariableW]
xor eax, eax
mov dword [ebp - 0x17c], 7
mov word [ebp - 0x190], ax
lea ecx, [ebp - 0x190]
lea eax, [ebp - 0xf8]
mov dword [ebp - 0x180], ebx
push eax
call fcn.1000b303
push dword [ebp - 0xbc]
mov dword [ebp - 4], 6
lea edi, [ebp - 0xf8]
xor eax, eax
lea ecx, [ebp - 0x1c4]
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
call fcn.1000acab
mov byte [ebp - 4], 7
mov dword [ebp - 0x1c], ebx
mov dword [ebp - 0x24], 0x985a9576
mov dword [ebp - 0x30], 0x5bbbdebf
mov dword [ebp - 0x3c], 0x1e07
cmp dword [ebp - 0x3c], 0x21e2
jle 0x100248f7
push ebx
push 0x1ff0
push ebx
call dword [sym.imp.ADVAPI32.dll_OpenProcessToken]
mov eax, ebx
mov dword [ebp - 0x28], ebx
mov esi, ebx
mov dword [ebp - 0x2c], ebx
mov ecx, esi
mov edi, ebx
shl eax, cl
mov dword [ebp - 0x34], eax
mov esi, ebx
mov ebx, dword [ebp - 0x34]
mov eax, edi
mov ecx, 0x10073a98
cdq
idiv esi
and edx, ebx
mov eax, edx
cdq
push edx
push eax
call fcn.1000ab96
inc esi
cmp esi, 0x6f87
jl 0x1002487e
inc edi
push 0
pop ebx
cmp edi, 0x3297
jl 0x10024879
mov esi, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x28]
inc esi
mov dword [ebp - 0x2c], esi
cmp esi, 0xd68
jl 0x10024870
inc eax
mov dword [ebp - 0x28], eax
cmp eax, 0x11b9
jl 0x1002486b
push ebx
push 0x1c4d
push 0xc92
push 0x22c3
push 0x1c7c
push 0x1b35
push 0xe0d
push 0x60d
push 0x1c0e
push ebx
push ebx
call dword [sym.imp.ADVAPI32.dll_AllocateAndInitializeSid]
push 2
lea ecx, [ebp - 0xd8]
call fcn.1000adae
mov byte [ebp - 4], 9
cmp dword [ebp - 0x3c], 0x1d63
jge 0x1002493e
mov edx, str.aywop_asnr_tcnsb_oyg_nfwtlxi_awqdt_ahjhb_yjthvx
mov ecx, 0x10073a98
call fcn.1000d257
jmp 0x1002493e
xor edx, edx
mov dword [ebp - 4], 8
inc edx
mov dword [ebp - 0x18], ebx
jmp 0x10024960
mov ecx, dword [ebp - 0x18]
mov eax, dword [ebp - 0xd8]
mov dword [eax + ecx*4], 0xffff
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 2
jl 0x1002494d
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], ebx
jne 0x10024974
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x1c]
xor ecx, ecx
mov eax, dword [ebp - 0x30]
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0x24], eax
mov eax, dword [ebp - 0x24]
cmp eax, 0x22a5bc4
setne cl
xor eax, eax
cmp ecx, edx
setg al
xor ecx, ecx
cmp eax, edx
setge cl
add ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x30], ecx
mov dword [ebp - 0x1c], ebx
jmp 0x100249fb
mov dword [ebp - 0x24], edx
cmp dword [ebp - 0x24], ebx
jl 0x100249dd
mov dword [ebp - 0x34], 0x3e3f36a5
xor edx, edx
mov eax, dword [ebp - 0x1c]
mov esi, dword [ebp - 0x24]
mov ecx, dword [ebp - 0xd8]
mov eax, dword [ecx + eax*4]
cmp eax, dword [ecx + esi*4]
setle dl
imul eax, edx, 0xb56c
mov dword [ebp - 0x34], eax
dec dword [ebp - 0x24]
jns 0x100249ae
xor edx, edx
inc edx
mov dword [ebp - 0x30], ebx
jmp 0x100249f3
mov ecx, dword [ebp - 0x30]
mov eax, dword [ebp - 0xd8]
cmp dword [eax + ecx*4], ebx
jne 0x100249f8
inc dword [ebp - 0x30]
cmp dword [ebp - 0x30], edx
jle 0x100249e2
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], edx
jle 0x100249a6
lea ecx, [ebp - 0xd8]
mov byte [ebp - 4], 7
call fcn.1000ae31
mov dword [ebp - 0x18], 0xffffffff
mov byte [ebp - 0x1d], bl
cmp byte [ebp - 0x1d], 0
je 0x10024a2a
push 0x1b10
call dword [sym.imp.KERNEL32.dll_IsValidCodePage]
mov dword [ebp - 0x18], ebx
jmp 0x10024a54
mov byte [ebp - 0x1d], bl
cmp byte [ebp - 0x1d], 0
je 0x10024a51
push 0x215f
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_SetLayout]
dec dword [ebp - 0x18]
cmp dword [ebp - 0x18], 0xfffffffe
jl 0x10024a2f
push 0x5c
pop eax
push 2
mov byte [ebp - 0x50], bl
mov edi, ebx
mov dword [ebp - 0x4f], 0xe8310380
mov byte [ebp - 0x4b], 0x9b
mov word [ebp - 0x64], ax
pop esi
mov dword [ebp - 0x28], esi
cmp esi, 6
jae 0x10024b8d
movzx eax, byte [ebp - 0x50]
lea eax, [eax*2 + 2]
cmp esi, eax
jne 0x10024a9f
movzx eax, byte [ebp + esi - 0x50]
dec esi
add esi, eax
lea edi, [eax + 1]
jmp 0x10024b85
movzx edx, byte [ebp + esi - 0x4f]
mov eax, esi
sub eax, edi
movzx eax, byte [ebp + eax - 0x52]
movzx ecx, word [ebp + eax*2 - 0x64]
mov eax, ecx
and eax, edx
add eax, eax
sub ecx, eax
movzx eax, byte [ebp + esi - 0x50]
add ecx, edx
mov word [ebp + eax*2 - 0x64], cx
mov dword [ebp - 0x18], 0x1a09
cmp dword [ebp - 0x18], 0x1b07
jle 0x10024b39
mov esi, ebx
mov dword [ebp - 0x38], ebx
mov edi, ebx
mov eax, edi
mov dword [ebp - 0x3c], 0x1619
mov dword [ebp - 0x2c], eax
mov ecx, eax
mov dword [ebp - 0x34], esi
mov dword [ebp - 0x40], ebx
sar esi, cl
mov ecx, ebx
mov eax, esi
shl eax, cl
mov ecx, 0x10073a98
cdq
push edx
push eax
call fcn.1000ab96
inc ebx
cmp ebx, 0x32c
jl 0x10024af3
mov eax, dword [ebp - 0x2c]
mov esi, dword [ebp - 0x38]
dec eax
dec dword [ebp - 0x3c]
push 0
mov dword [ebp - 0x2c], eax
pop ebx
jne 0x10024ae9
inc edi
cmp edi, 0x5860
jl 0x10024add
inc esi
mov dword [ebp - 0x38], esi
cmp esi, 0x227c
jl 0x10024adb
mov esi, dword [ebp - 0x28]
mov edi, ebx
mov byte [ebp - 4], 0xb
cmp dword [ebp - 0x18], 0x19b2
mov dword [ebp - 0x34], edi
jge 0x10024b7e
mov edx, str.pok_phaxt_pwltod_ievzzgdus_ugewsqv
mov ecx, 0x10073a98
call fcn.1000d257
jmp 0x10024b7e
mov dword [ebp - 4], 7
add esi, 2
jmp 0x10024a74
xor eax, eax
mov word [ebp - 0x62], ax
mov dword [ebp - 0x2c], 0x7c3d
cmp dword [ebp - 0x2c], 0x7dc0
jle 0x10024c04
mov eax, ebx
mov dword [ebp - 0x28], ebx
mov edi, ebx
mov esi, ebx
add eax, edi
lea ecx, [ebp - 0x1e4]
or eax, esi
cdq
push edx
push eax
call fcn.10001a55
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x10024bc8
mov eax, dword [eax]
push eax
call fcn.10040afc
pop ecx
push ebx
push 1
lea ecx, [ebp - 0x1e4]
call fcn.1000b217
mov eax, dword [ebp - 0x28]
inc esi
cmp esi, 0x61e6
jl 0x10024bac
inc edi
cmp edi, 0x2182
jl 0x10024baa
inc eax
mov dword [ebp - 0x28], eax
cmp eax, 0x5e2d
jl 0x10024ba8
push ebx
call dword [sym.imp.ADVAPI32.dll_GetLengthSid]
cmp dword [ebp - 0x2c], 0x7a04
jge 0x10024c18
push str.takef_ftlblvuz_qvedzgt_lzjnjufh_tqi_lpkkvj_ehfynossr_jhe_yaysyidz_wszs_ghpseotlo
call fcn.10040afc
pop ecx
push 7
pop ecx
mov dword [ebp - 4], ecx
mov dword [ebp - 0x24], 0xa362
mov dword [ebp - 0xcc], 0xffffffff
mov dword [ebp - 0xc8], 0xffffffff
mov dword [ebp - 0xc4], 0xffffffff
mov dword [ebp - 0xc0], 0xffffffff
mov eax, dword [ebp - 0x24]
mov dword [ebp - 0xc4], eax
mov dword [ebp - 0x24], ebx
jmp 0x10024c7e
mov dword [ebp - 0x34], 0xda62
mov dword [ebp - 0x40], 0xfffffff9
mov eax, dword [ebp - 0x34]
mov dword [ebp - 0xc4], eax
mov eax, dword [ebp - 0xc4]
mov dword [ebp - 0x40], eax
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], 9
jg 0x10024c5b
xor eax, eax
mov dword [ebp - 0xfc], ecx
mov word [ebp - 0x110], ax
lea ecx, [ebp - 0x110]
lea eax, [ebp - 0x64]
mov dword [ebp - 0x100], ebx
push eax
call fcn.1000b303
xor ecx, ecx
mov byte [ebp - 4], 0xf
mov dword [ebp - 0x18], ebx
inc ecx
jmp 0x10024cbe
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x5c], ecx
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], ecx
jl 0x10024cb4
mov dword [ebp - 0x5c], ebx
cmp dword [ebp - 0x5c], 7
jge 0x10024ce9
mov byte [ebp - 0x1d], bl
cmp byte [ebp - 0x1d], 0
je 0x10024cdd
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_SetCommTimeouts]
inc dword [ebp - 0x5c]
cmp dword [ebp - 0x5c], 7
jl 0x10024ccc
xor ecx, ecx
inc ecx
mov dword [ebp - 0x64], ebx
mov dword [ebp - 0x18], ebx
jmp 0x10024cff
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x48], 0xfffffffc
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], ecx
jl 0x10024cf1
mov dword [ebp - 0x48], ebx
jmp 0x10024d96
mov dword [ebp - 0x28], ebx
lea ecx, [ebp - 0x1a8]
push 4
call fcn.1000adae
mov dword [ebp - 0x2c], ebx
mov dword [ebp - 0x34], 1
mov dword [ebp - 0x18], ebx
jmp 0x10024d3e
mov ecx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x1a8]
mov dword [eax + ecx*4], 0xfffffff8
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 4
jl 0x10024d2b
cmp dword [ebp - 0x48], ebx
jne 0x10024d7a
mov eax, dword [ebp - 0x28]
xor edx, edx
mov eax, dword [ebp - 0x48]
mov eax, dword [ebp - 0x48]
mov eax, dword [ebp - 0x48]
mov ecx, dword [ebp - 0x28]
mov eax, dword [ebp - 0x28]
cmp ecx, eax
setg dl
xor eax, eax
test edx, edx
setle al
mov dword [ebp - 0x2c], eax
mov eax, dword [ebp - 0x2c]
neg eax
cmp eax, 0xfffffffa
jne 0x10024d7a
mov ecx, ebx
jmp 0x10024d7d
xor ecx, ecx
inc ecx
xor eax, eax
cmp ecx, 0xffffffff
lea ecx, [ebp - 0x1a8]
setle al
mov dword [ebp - 0x34], eax
call fcn.1000ae31
dec dword [ebp - 0x48]
cmp dword [ebp - 0x48], 0xffffffe9
jne 0x10024d0c
push 2
lea ecx, [ebp - 0x15c]
call fcn.1000adae
mov byte [ebp - 4], 0x10
mov dword [ebp - 0x28], 0x9bdba76a
mov dword [ebp - 0x18], ebx
jmp 0x10024dd0
mov ecx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x15c]
mov dword [eax + ecx*4], 0xffff
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 2
jl 0x10024dbd
xor ecx, ecx
inc ecx
mov dword [ebp - 0x28], ecx
cmp dword [ebp - 0x28], ebx
jl 0x10024ef8
mov dword [ebp - 0x18], ebx
jmp 0x10024df8
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x80], 0x7a888ada
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], ecx
jl 0x10024dea
mov dword [ebp - 0x80], ebx
cmp dword [ebp - 0x80], ecx
jg 0x10024ef0
mov byte [ebp - 0x1d], bl
mov dword [ebp - 0x18], 0x2cdd
cmp dword [ebp - 0x18], 0x2fcb
jle 0x10024e89
push 0x1f48
push 0x9fa
push 0x1aea
call dword [sym.imp.KERNEL32.dll_MulDiv]
mov edi, ebx
mov dword [ebp - 0x38], ebx
mov esi, ebx
mov eax, edi
mov dword [ebp - 0x3c], 0x2455
cdq
idiv esi
mov edi, edx
mov ecx, ebx
mov dword [ebp - 0x2c], ebx
mov eax, edi
sar eax, cl
mov ecx, 0x10073a98
cdq
push edx
push eax
call fcn.1000ab96
mov ecx, dword [ebp - 0x2c]
inc ecx
mov dword [ebp - 0x2c], ecx
cmp ecx, 0x490f
jl 0x10024e4b
dec edi
dec dword [ebp - 0x3c]
jne 0x10024e46
mov edi, dword [ebp - 0x38]
inc esi
cmp esi, 0x493a
jl 0x10024e38
inc edi
mov dword [ebp - 0x38], edi
cmp edi, 0x316a
jl 0x10024e36
cmp byte [ebp - 0x1d], 0
je 0x10024ea4
push ebx
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_SelectClipRgn]
mov byte [ebp - 4], 0x11
cmp dword [ebp - 0x18], 0x2ad2
jge 0x10024ede
mov edx, str.ruojjf_qjoghu_uig_jkr_dhvc_zdzhertn_ejor_uanprhim_kjaqrzr_gjihvhe_oenouuy_btqqm_gwn_odak
mov ecx, 0x10073a98
call fcn.1000d257
jmp 0x10024ede
xor ecx, ecx
mov dword [ebp - 4], 0x10
inc ecx
inc dword [ebp - 0x80]
jmp 0x10024e00
dec dword [ebp - 0x28]
jmp 0x10024ddc
lea ecx, [ebp - 0x15c]
mov byte [ebp - 4], 0xf
call fcn.1000ae31
push 0x5f
pop eax
push 2
mov byte [ebp - 0x58], bl
mov ecx, ebx
mov dword [ebp - 0x57], 0x95350356
mov byte [ebp - 0x53], 0xfe
mov word [ebp - 0x60], ax
pop esi
cmp esi, 2
jne 0x10024f2d
push 4
pop ecx
push ecx
pop esi
jmp 0x10024f54
movzx edx, byte [ebp + esi - 0x57]
mov eax, esi
sub eax, ecx
movzx eax, byte [ebp + eax - 0x5a]
movzx eax, word [ebp + eax*2 - 0x60]
mov ecx, eax
and eax, edx
or ecx, edx
sub ecx, eax
movzx eax, byte [ebp + esi - 0x58]
mov word [ebp + eax*2 - 0x60], cx
mov ecx, ebx
add esi, 2
cmp esi, 6
jb 0x10024f21
xor eax, eax
mov dword [ebp - 0x160], 7
mov word [ebp - 0x5e], ax
lea ecx, [ebp - 0x174]
mov word [ebp - 0x174], ax
lea eax, [ebp - 0x60]
push eax
mov dword [ebp - 0x164], ebx
call fcn.1000b303
mov byte [ebp - 4], 0x13
mov dword [ebp - 0x1c], 0x477862f
mov dword [ebp - 0x2c], 0xbb4f5ac3
mov dword [ebp - 0x38], 0xdfc9b996
mov dword [ebp - 0x30], 0xfffffff6
mov dword [ebp - 0x18], 0x2c6f7398
mov dword [ebp - 0x34], 0xddc4ea3c
mov dword [ebp - 0x34], 0x64a3a207
mov dword [ebp - 0x1c], 0xffffffe6
jmp 0x100250ae
mov dword [ebp - 0x24], 0x8f0d
mov dword [ebp - 0x28], 0xf9c77509
mov dword [ebp - 0x3c], 0x315bfeb1
mov dword [ebp - 0x3c], 0x456014ef
mov dword [ebp - 0x3c], 0x32e88240
mov edx, dword [ebp - 0x1c]
sub edx, dword [ebp - 0x1c]
sub edx, dword [ebp - 0x24]
mov eax, dword [ebp - 0x1c]
cmp edx, eax
push 6
setg cl
xor edx, edx
cmp ecx, 0xffffffff
pop eax
setle dl
sub eax, edx
add eax, dword [ebp - 0x1c]
cmp eax, dword [ebp - 0x28]
jne 0x10025015
mov eax, dword [ebp - 0x2c]
mov ecx, dword [ebp - 0x2c]
xor edx, edx
mov eax, dword [ebp - 0x1c]
cmp eax, ecx
setl dl
mov dword [ebp - 0x38], edx
xor edx, edx
mov eax, dword [ebp - 0x30]
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x24]
mov dword [ebp - 0x3c], ebx
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x3c]
mov dword [ebp - 0x38], 1
mov ecx, dword [ebp - 0x28]
mov eax, dword [ebp - 0x38]
cmp eax, ecx
setge dl
cmp edx, dword [ebp - 0x18]
jne 0x1002505e
cmp dword [ebp - 0x24], ebx
jne 0x1002505e
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0x18]
xor edx, edx
cmp eax, 0xda74
mov eax, dword [ebp - 0x24]
setge dl
xor ecx, ecx
cmp edx, eax
setg cl
sub ecx, dword [ebp - 0x24]
mov dword [ebp - 0x3c], ecx
xor ecx, ecx
mov eax, dword [ebp - 0x3c]
cmp eax, 0xf19
setge cl
mov dword [ebp - 0x3c], ecx
xor ecx, ecx
mov eax, dword [ebp - 0x3c]
mov dword [ebp - 0x34], eax
mov eax, dword [ebp - 0x30]
mov eax, dword [ebp - 0x28]
cmp eax, 0xfffffff8
setle cl
sub ecx, dword [ebp - 0x1c]
add ecx, 0xeb64
mov dword [ebp - 0x34], ecx
inc dword [ebp - 0x1c]
xor ecx, ecx
cmp dword [ebp - 0x1c], 0xfffffffb
jg 0x10024fc9
mov dword [ebp - 0x60], ebx
inc ecx
mov dword [ebp - 0x28], 0xffffffff
mov dword [ebp - 0x40], ecx
mov dword [ebp - 0xb8], 0xf8f6a1c3
mov dword [ebp - 0x18], ebx
jmp 0x100250e8
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0xe8], 9
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 4
jl 0x100250d7
mov dword [ebp - 0x34], 0xa6d
cmp dword [ebp - 0x34], 0xb21
mov dword [ebp - 0x44], str.oeums_obhgy_ixkgifhs_nsoheo_wuuqfgi_kutsj_qubi_vqyteegyx
jle 0x10025180
mov esi, ebx
mov dword [ebp - 0x3c], ebx
mov dword [ebp - 0x28], esi
mov dword [ebp - 0x2c], 0x390b
mov edi, ebx
mov eax, edi
lea ecx, [ebp - 0x1fc]
xor eax, esi
cdq
push edx
push eax
call fcn.10001a55
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x10025132
mov eax, dword [eax]
push eax
call fcn.10040afc
pop ecx
push ebx
push 1
lea ecx, [ebp - 0x1fc]
call fcn.1000b217
inc edi
cmp edi, 0x3212
jl 0x10025116
dec esi
dec dword [ebp - 0x2c]
jne 0x10025114
mov esi, dword [ebp - 0x3c]
inc esi
mov dword [ebp - 0x3c], esi
cmp esi, 0x40c4
jl 0x1002510a
mov esi, dword [sym.imp.USER32.dll_GetDesktopWindow]
push ebx
push ebx
push 0x5c7
call esi
push eax
call dword [sym.imp.USER32.dll_PostMessageA]
xor ecx, ecx
inc ecx
jmp 0x10025186
mov esi, dword [sym.imp.USER32.dll_GetDesktopWindow]
mov dword [ebp - 0x28], ebx
cmp dword [ebp - 0x28], 8
push 0xfffffffffffffffd
pop eax
jle 0x100253b6
mov dword [ebp - 0x1c], ebx
mov dword [ebp - 0x12c], eax
mov dword [ebp - 0x128], eax
mov dword [ebp - 0x124], eax
mov dword [ebp - 0x120], eax
mov dword [ebp - 0x1c], ebx
cmp dword [ebp - 0x1c], 3
jg 0x100253ae
mov dword [ebp - 0x30], 0x526d2e85
mov dword [ebp - 0x38], ebx
mov dword [ebp - 0x2c], 0x83dc0e3e
mov dword [ebp - 0x2c], ebx
mov dword [ebp - 0x30], ebx
cmp dword [ebp - 0x30], 3
jg 0x1002539c
mov dword [ebp - 0x24], 0x45625132
mov dword [ebp - 0x24], ebx
jmp 0x100252bb
mov dword [ebp - 0x18], ebx
jmp 0x10025204
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x90], 0x5e82aa9d
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 2
jl 0x100251f3
inc dword [ebp - 0x40]
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp + eax*4 - 0xe8]
mov eax, dword [ebp - 0x30]
cmp dword [ebp - 0x30], ebx
je 0x10025225
mov eax, dword [ebp - 0x90]
cmp dword [ebp - 0xe0], ebx
je 0x10025232
cmp dword [ebp - 0x30], ebx
jne 0x10025234
mov ecx, ebx
mov eax, dword [ebp - 0x38]
cmp ecx, 0xfffffffc
sbb ecx, ecx
xor edx, edx
inc ecx
cmp ecx, eax
mov eax, dword [ebp - 0x90]
setne dl
xor ecx, ecx
cmp edx, eax
setl cl
cmp ecx, dword [ebp - 0x90]
jl 0x10025266
cmp dword [ebp - 0xb8], ebx
je 0x10025266
xor eax, eax
inc eax
jmp 0x10025268
mov eax, ebx
mov dword [ebp - 0x2c], eax
xor edx, edx
mov ecx, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x1c]
cmp ecx, eax
setle dl
imul edx, dword [ebp - 0x128]
neg edx
jne 0x1002528f
cmp dword [ebp - 0x90], ebx
jne 0x1002528f
mov eax, ebx
jmp 0x10025292
xor eax, eax
inc eax
mov dword [ebp - 0x2c], eax
xor edx, edx
mov eax, dword [ebp - 0x24]
push 1
mov ecx, dword [ebp + eax*4 - 0xe8]
mov eax, dword [ebp - 0x2c]
cmp eax, ecx
pop ecx
setl dl
mov dword [ebp - 0x38], edx
mov eax, dword [ebp - 0x38]
mov dword [ebp - 0xe0], eax
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], 3
jle 0x100251ee
mov byte [ebp - 0x1d], bl
cmp byte [ebp - 0x1d], 0
je 0x1002538b
mov dword [ebp - 0x3c], 0x6b91
cmp dword [ebp - 0x3c], 0x6e2a
jle 0x1002533f
push 0x1f55
push ebx
push ebx
push 0x2609
push ebx
call esi
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_CreateDIBitmap]
mov edi, ebx
mov esi, ebx
mov ecx, ebx
mov dword [ebp - 0x2c], ebx
mov eax, esi
cdq
idiv ecx
mov ecx, 0x10073a98
and edx, edi
mov eax, edx
cdq
push edx
push eax
call fcn.1000ab96
mov ecx, dword [ebp - 0x2c]
inc ecx
mov dword [ebp - 0x2c], ecx
cmp ecx, 0x1bbb
jl 0x10025308
inc esi
cmp esi, 0x31c8
jl 0x10025303
inc edi
cmp edi, 0x79c7
jl 0x10025301
push 0xd17
call dword [sym.imp.KERNEL32.dll_IsProcessorFeaturePresent]
mov byte [ebp - 4], 0x14
cmp dword [ebp - 0x3c], 0x6a12
jge 0x10025384
mov edx, str.oovnv_ziilrhlt_vvpqrzb_etwpwqy_jahcvkekq_sbmlmwbno
mov ecx, 0x10073a98
call fcn.1000d257
jmp 0x10025384
mov dword [ebp - 4], 0x13
mov esi, dword [sym.imp.USER32.dll_GetDesktopWindow]
xor ecx, ecx
inc ecx
inc dword [ebp - 0x30]
jmp 0x100251d5
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp + eax*4 - 0xe8]
inc dword [ebp - 0x1c]
jmp 0x100251b4
inc dword [ebp - 0x28]
jmp 0x10025189
cmp dword [ebp - 0x34], 0x978
jge 0x100253c8
push dword [ebp - 0x44]
call fcn.10040afc
pop ecx
mov dword [ebp - 4], 0x13
push dword [ebp - 0x100]
cmp dword [ebp - 0xfc], 8
lea eax, [ebp - 0x110]
push ebx
cmovae eax, dword [ebp - 0x110]
lea ecx, [ebp - 0x1c4]
push eax
call fcn.100237e8
cmp eax, 0xffffffff
je 0x10025415
push 0xffffffffffffffff
push ebx
lea ecx, [ebp - 0x174]
push ecx
push 1
push eax
lea ecx, [ebp - 0x1c4]
call fcn.1001e52a
jmp 0x100253cf
mov dword [ebp - 0x28], 0xfffffff9
xor ecx, ecx
mov dword [ebp - 0x44], 0xa7084bc9
inc ecx
mov dword [ebp - 0x44], 6
mov dword [ebp - 0x44], 0xffff
mov dword [ebp - 0x28], 2
cmp dword [ebp - 0x28], ebx
jge 0x10025660
mov dword [ebp - 0x30], 0xb6182eac
mov dword [ebp - 0x1c], ebx
jmp 0x10025461
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0x178], 0x38ecf54c
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], ecx
jl 0x10025450
mov dword [ebp - 0x1c], ebx
jmp 0x1002547c
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0x1cc], 5
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 2
jl 0x1002546b
mov dword [ebp - 0x30], ebx
cmp dword [ebp - 0x30], ebx
jl 0x1002554d
mov dword [ebp - 0x2c], 0xae3
cmp dword [ebp - 0x2c], 0xc01
jle 0x10025505
mov edi, ebx
mov dword [ebp - 0x40], ebx
mov esi, ebx
mov dword [ebp - 0x34], ebx
mov eax, edi
cdq
idiv esi
mov esi, 0x15c8
mov edi, edx
mov eax, edi
lea ecx, [ebp - 0x214]
cdq
push edx
push eax
call fcn.10001a55
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x100254ce
mov eax, dword [eax]
push eax
call fcn.10040afc
pop ecx
push ebx
push 1
lea ecx, [ebp - 0x214]
call fcn.1000b217
dec edi
dec esi
jne 0x100254b4
mov esi, dword [ebp - 0x34]
mov edi, dword [ebp - 0x40]
inc esi
mov dword [ebp - 0x34], esi
cmp esi, 0x3d81
jl 0x100254a8
inc edi
mov dword [ebp - 0x40], edi
cmp edi, 0x3b8c
jl 0x100254a3
mov byte [ebp - 0x1d], bl
cmp dword [ebp - 0x2c], 0xa0f
jge 0x1002551c
push str.strvtkdl_ugxutuqg_jerxartrx_vwkud_uepet_qsfhvadxz_yxlryxj_uddgwfff_ywhvpyxb_kperxdaa_aoqprauu_vgftybs_ihfoleh_afar
call fcn.10040afc
pop ecx
mov dword [ebp - 4], 0x13
cmp byte [ebp - 0x1d], 0
je 0x10025545
push 0xb9f
push ebx
push 0x19cc
push ebx
push 0x232f
push 0x22e3
call dword [sym.imp.KERNEL32.dll_MultiByteToWideChar]
dec dword [ebp - 0x30]
jmp 0x10025485
xor ecx, ecx
mov dword [ebp - 0x30], ebx
inc ecx
cmp dword [ebp - 0x30], 0xc
je 0x10025658
mov dword [ebp - 0x34], 0x6b00
cmp dword [ebp - 0x34], 0x6c1b
jle 0x100255e7
mov ecx, ebx
mov dword [ebp - 0x18], ebx
mov edi, ebx
mov esi, ebx
mov dword [ebp - 0x38], ebx
mov eax, esi
cdq
idiv dword [ebp - 0x38]
mov eax, edi
sub eax, edx
or eax, ecx
mov ecx, 0x10073a98
cdq
push edx
push eax
call fcn.1000ab96
mov eax, dword [ebp - 0x38]
mov ecx, dword [ebp - 0x18]
inc eax
mov dword [ebp - 0x38], eax
cmp eax, 0x1203
jl 0x10025579
inc esi
cmp esi, 0x69f4
jl 0x10025576
inc edi
cmp edi, 0x5bda
jl 0x10025574
inc ecx
mov dword [ebp - 0x18], ecx
cmp ecx, 0x5319
jl 0x10025572
push 0x1757
push ebx
push ebx
push 0x1d2b
push 0x1788
push ebx
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_GetDIBits]
mov dword [ebp - 0x44], 0x576c5165
mov byte [ebp - 4], 0x1a
cmp dword [ebp - 0x34], 0x694e
jge 0x10025628
mov edx, str.invtpoq_eauxd_wdyfu_sok_iye_fwapvyn
mov ecx, 0x10073a98
call fcn.1000d257
jmp 0x10025628
mov dword [ebp - 4], 0x13
xor ecx, ecx
inc ecx
mov dword [ebp - 0x44], ecx
mov dword [ebp - 0x44], 0xfffffff8
mov dword [ebp - 0x44], 8
mov dword [ebp - 0x44], ecx
mov dword [ebp - 0x34], 0xd68f9855
dec dword [ebp - 0x34]
inc dword [ebp - 0x30]
jmp 0x10025553
dec dword [ebp - 0x28]
jmp 0x1002543b
mov ecx, dword [ebp - 0x84]
lea eax, [ebp - 0x1c4]
push eax
lea edx, [ebp - 0x190]
call fcn.10025984
pop ecx
push ebx
push 1
lea ecx, [ebp - 0x174]
call fcn.1000b425
push ebx
push 1
lea ecx, [ebp - 0x110]
call fcn.1000b425
push ebx
push 1
lea ecx, [ebp - 0x1c4]
call fcn.1000b425
push ebx
push 1
lea ecx, [ebp - 0x190]
call fcn.1000b425
mov ecx, dword [ebp - 0xc]
mov eax, dword [ebp - 0x84]
pop edi
pop esi
mov dword fs:[0], ecx
pop ebx
mov esp, ebp
pop ebp
ret