Function at 0x10012c27
Capabilities:
Encode data using xor
Generate random numbers using a mersenne twister
Terminate process

Disassembly:
mov eax, 0x10063332
call fcn.100628e0
sub esp, 0x204
push ebx
push esi
push edi
mov dword [ebp - 0x54], ecx
mov dword [ebp - 0x18], 0x2c12
cmp dword [ebp - 0x18], 0x2c77
push 0
mov dword [ebp - 0x7c], edx
pop ebx
jle 0x10012cb3
mov esi, ebx
mov dword [ebp - 0x10], ebx
mov dword [ebp - 0x1c], esi
mov dword [ebp - 0x14], 0x7368
mov edi, ebx
mov eax, esi
lea ecx, [ebp - 0x164]
and eax, edi
cdq
push edx
push eax
call fcn.100019c5
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x10012c80
mov eax, dword [eax]
push eax
call fcn.1004d87c
pop ecx
push ebx
push 1
lea ecx, [ebp - 0x164]
call fcn.1000d197
inc edi
cmp edi, 0x3cf7
jl 0x10012c64
dec esi
dec dword [ebp - 0x14]
jne 0x10012c62
mov esi, dword [ebp - 0x10]
inc esi
mov dword [ebp - 0x10], esi
cmp esi, 0x4772
jl 0x10012c58
cmp dword [ebp - 0x18], 0x2abf
jge 0x10012cc7
push str.kskqni_ehlbibdma_bgejgbebx_mqd_xwdysrmw
call fcn.1004d87c
pop ecx
cmp byte [ebp + 0x10], 0
je 0x10012eaf
mov dword [ebp - 0x10], 0x1520
cmp dword [ebp - 0x10], 0x17d4
jle 0x10012d22
mov esi, ebx
mov dword [ebp - 0x14], ebx
mov edi, ebx
mov eax, esi
mov esi, 0x5f5b
cdq
idiv edi
mov ebx, edx
mov eax, ebx
mov ecx, 0x1007bbb8
cdq
push edx
push eax
call fcn.1000cbc0
dec ebx
dec esi
jne 0x10012cf4
mov esi, dword [ebp - 0x14]
inc edi
cmp edi, 0x55d7
jl 0x10012ce8
inc esi
mov dword [ebp - 0x14], esi
push 0
pop ebx
cmp esi, 0xf95
jl 0x10012ce6
mov dword [ebp - 0x98], 0xf
mov dword [ebp - 0x9c], ebx
mov byte [ebp - 0xac], bl
mov dword [ebp - 4], ebx
cmp dword [ebp - 0x10], 0x14ec
jge 0x10012d53
mov edx, str.oavcpglh_tmvwcde_nflkva_ing_jbktm_syuvrkykt_bhom_cnewj_kikgpyaf_ntylfch
mov ecx, 0x1007bbb8
call fcn.1000ee07
push 0x1794
push 0x6b1e
lea eax, [ebp - 0x54]
push eax
push ecx
push 1
push ecx
lea edx, [ebp - 0xac]
call fcn.100127e9
mov eax, dword [0x1007cc7c]
add esp, 0x18
test al, 1
jne 0x10012da0
or eax, 1
mov dword [0x1007cc7c], eax
push 0x8b17
mov byte [ebp - 4], 1
call fcn.10018daa
mov byte [0x1008100e], al
mov byte [ebp - 4], bl
mov eax, dword [0x1007cc7c]
pop ecx
test al, 2
jne 0x10012dc3
or eax, 2
mov dword [0x1007cc7c], eax
push 0x9afb
mov byte [ebp - 4], 2
call fcn.10018daa
pop ecx
mov byte [0x1008239a], al
mov byte [ebp - 4], bl
mov dword [ebp - 0x10], 0x37ef
cmp dword [ebp - 0x10], 0x3a51
jle 0x10012e43
mov esi, ebx
mov dword [ebp - 0x14], ebx
mov edi, ebx
mov dword [ebp - 0x38], ebx
mov eax, esi
mov dword [ebp - 0x50], ebx
cdq
mov esi, ebx
idiv edi
mov edi, edx
mov ecx, esi
mov eax, edi
shl eax, cl
lea ecx, [ebp - 0x1f4]
cdq
push edx
push eax
call fcn.100019c5
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x10012e07
mov eax, dword [eax]
push eax
call fcn.1004d87c
pop ecx
push ebx
push 1
lea ecx, [ebp - 0x1f4]
call fcn.1000d197
inc esi
cmp esi, 0x5e56
jl 0x10012de9
mov edi, dword [ebp - 0x38]
mov esi, dword [ebp - 0x14]
inc edi
mov dword [ebp - 0x38], edi
cmp edi, 0x201d
jl 0x10012ddd
inc esi
mov dword [ebp - 0x14], esi
cmp esi, 0x7512
jl 0x10012dd8
push ecx
push 0x655b
push 0x1008239a
push ecx
push 0x6ebb
push 0x63d9
lea eax, [ebp - 0x54]
mov edx, 0x1008100e
push eax
push 1
lea ecx, [ebp - 0xac]
call fcn.1001291b
add esp, 0x20
cmp dword [ebp - 0x10], 0x348d
jge 0x10012e86
push str.gitpdjbyd_huwkhqv_sqdbp_oaan_bskmonjy_asjvyhve_tdquir_cnlyq_xhx_hbllcwu_mhywkuqad_mkjcwq_rouuot_mrnxl
call fcn.1004d87c
pop ecx
mov ecx, dword [ebp + 8]
lea eax, [ebp - 0xac]
cmp ecx, eax
je 0x10012e9c
push 0xffffffffffffffff
push ebx
push eax
call fcn.10013d19
push ebx
push 1
lea ecx, [ebp - 0xac]
call fcn.10013e23
jmp 0x10013c72
mov eax, dword [0x1007cc7c]
mov esi, 0x270
test al, 4
jne 0x10012efb
or dword [0x10082394], 0xffffffff
or eax, 4
mov ecx, 0x1571
mov dword [0x1007cc7c], eax
xor edx, edx
mov dword [0x10081014], ecx
inc edx
mov eax, ecx
shr eax, 0x1e
xor eax, ecx
imul ecx, eax, 0x6c078965
add ecx, edx
mov dword [edx*4 + 0x10081014], ecx
inc edx
cmp edx, esi
jl 0x10012eda
mov dword [0x10081010], esi
mov dword [ebp - 0x10], 0x9b55bb2c
mov dword [ebp - 0x28], 0x770e
cmp dword [ebp - 0x28], 0x782f
jle 0x10012f87
mov dword [ebp - 0x10], ebx
mov edi, ebx
mov dword [ebp - 0x18], ebx
mov esi, ebx
mov dword [ebp - 0x14], ebx
mov dword [ebp - 0x20], ebx
mov ebx, dword [ebp - 0x10]
mov dword [ebp - 0x1c], esi
and esi, edi
mov edi, dword [ebp - 0x20]
mov eax, esi
mov ecx, 0x1007bbb8
xor eax, edi
xor eax, ebx
cdq
push edx
push eax
call fcn.1000cbc0
inc edi
cmp edi, 0x1c09
jl 0x10012f2d
mov esi, dword [ebp - 0x14]
mov edi, dword [ebp - 0x18]
inc esi
mov dword [ebp - 0x14], esi
push 0
pop ebx
cmp esi, 0x4b3b
jl 0x10012f1f
inc edi
mov dword [ebp - 0x18], edi
cmp edi, 0x1425
jl 0x10012f1a
mov eax, dword [ebp - 0x10]
inc eax
mov dword [ebp - 0x10], eax
cmp eax, 0x437e
jl 0x10012f15
push ebx
push ebx
push ebx
push ebx
push ebx
push ebx
push ebx
push ebx
push ebx
call dword [sym.imp.GDI32.dll_Pie]
push 2
lea ecx, [ebp - 0xc4]
call fcn.1000cdd8
mov dword [ebp - 4], 3
cmp dword [ebp - 0x28], 0x76b3
jge 0x10012fb3
mov edx, str.qcgmbiab_dolppyshq_ytwxgvusk_impbupyi_sqdqli_hfnawovh_jncvw
mov ecx, 0x1007bbb8
call fcn.1000ee07
mov dword [ebp - 0x18], 0x3ead
cmp dword [ebp - 0x18], 0x3ef8
jle 0x10013048
mov edi, ebx
mov dword [ebp - 0x10], ebx
mov esi, ebx
mov dword [ebp - 0x14], ebx
mov eax, edi
mov dword [ebp - 0x1c], ebx
cdq
idiv esi
mov esi, ebx
mov dword [ebp - 0x28], edx
mov edi, ebx
mov ecx, edi
mov eax, esi
shl eax, cl
lea ecx, [ebp - 0x11c]
or eax, edx
cdq
push edx
push eax
call fcn.100019c5
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x10013000
mov eax, dword [eax]
push eax
call fcn.1004d87c
pop ecx
push ebx
push 1
lea ecx, [ebp - 0x11c]
call fcn.1000d197
mov edx, dword [ebp - 0x28]
inc edi
cmp edi, 0x5edc
jl 0x10012fe0
inc esi
cmp esi, 0x21d1
jl 0x10012fde
mov esi, dword [ebp - 0x14]
mov edi, dword [ebp - 0x10]
inc esi
mov dword [ebp - 0x14], esi
cmp esi, 0x4c2
jl 0x10012fd1
inc edi
mov dword [ebp - 0x10], edi
cmp edi, 0x4681
jl 0x10012fcc
cmp dword [ebp - 0x18], 0x3d14
jge 0x1001305c
push str.ake_pqosk_fuisao_gsm_bsfet_heqawam_lcmyyvfi_kjvmvxcqo_ytefxawkk_xba_xmjbx_fpabckf
call fcn.1004d87c
pop ecx
mov dword [ebp - 0x24], 0x254f
cmp dword [ebp - 0x24], 0x2776
jle 0x100130de
mov dword [ebp - 0x14], ebx
mov eax, ebx
mov dword [ebp - 0x28], 0xae1
mov dword [ebp - 0x10], eax
mov edi, ebx
mov esi, ebx
or eax, esi
lea ecx, [ebp - 0x1c4]
or eax, edi
cdq
push edx
push eax
call fcn.100019c5
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x1001309b
mov eax, dword [eax]
push eax
call fcn.1004d87c
pop ecx
push ebx
push 1
lea ecx, [ebp - 0x1c4]
call fcn.1000d197
mov eax, dword [ebp - 0x10]
inc esi
cmp esi, 0x6f8f
jl 0x1001307f
inc edi
cmp edi, 0x2f40
jl 0x1001307d
mov esi, dword [ebp - 0x14]
add eax, esi
dec dword [ebp - 0x28]
mov dword [ebp - 0x10], eax
jne 0x1001307b
inc esi
mov dword [ebp - 0x14], esi
cmp esi, 0x78eb
jl 0x1001306f
mov dword [ebp - 0x18], ebx
jmp 0x100130f6
mov ecx, dword [ebp - 0x18]
mov eax, dword [ebp - 0xc4]
mov dword [eax + ecx*4], 1
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 2
jl 0x100130e3
cmp dword [ebp - 0x24], 0x2401
jge 0x10013110
push str.ibve_markufgak_facbjx_ejjpupbi_xdbrpwa_bilvwce_ynk_pptipbgx_hunfwsb_ykmmk_rsawxff_ypl_ixhvrhews_crclhbgf
call fcn.1004d87c
pop ecx
mov dword [ebp - 0x1c], 0xfed
cmp dword [ebp - 0x1c], 0x104d
jle 0x100131a5
push ebx
call dword [sym.imp.USER32.dll_UpdateWindow]
mov edi, ebx
mov dword [ebp - 0x28], ebx
mov esi, ebx
mov dword [ebp - 0x24], ebx
mov ecx, esi
mov dword [ebp - 0x20], edi
mov esi, edi
mov dword [ebp - 0x14], ebx
sar esi, cl
mov edi, ebx
mov eax, esi
lea ecx, [ebp - 0x194]
and eax, edi
cdq
push edx
push eax
call fcn.100019c5
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x1001315f
mov eax, dword [eax]
push eax
call fcn.1004d87c
pop ecx
push ebx
push 1
lea ecx, [ebp - 0x194]
call fcn.1000d197
inc edi
cmp edi, 0x6f43
jl 0x10013143
mov esi, dword [ebp - 0x24]
mov edi, dword [ebp - 0x28]
inc esi
mov dword [ebp - 0x24], esi
cmp esi, 0x2216
jl 0x10013135
inc edi
mov dword [ebp - 0x28], edi
cmp edi, 0x19dc
jl 0x10013130
push ebx
push ebx
push ebx
push ebx
call dword [sym.imp.USER32.dll_WinHelpA]
mov dword [ebp - 0x10], ebx
jmp 0x10013406
mov dword [ebp - 0x3c], ebx
mov dword [ebp - 0x20], ebx
mov dword [ebp - 0x20], ebx
mov dword [ebp - 0x20], 0xfffffff7
mov dword [ebp - 0x20], 0x1375
cmp dword [ebp - 0x20], 0x1394
jle 0x10013257
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_TerminateProcess]
mov dword [ebp - 0x14], ebx
mov dword [ebp - 0x28], ebx
mov eax, ebx
mov dword [ebp - 0x24], 0x183
mov dword [ebp - 0x18], eax
mov esi, dword [ebp - 0x14]
mov edi, ebx
cdq
lea ecx, [ebp - 0x134]
idiv edi
or edx, esi
mov eax, edx
cdq
push edx
push eax
call fcn.100019c5
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x1001320f
mov eax, dword [eax]
push eax
call fcn.1004d87c
pop ecx
push ebx
push 1
lea ecx, [ebp - 0x134]
call fcn.1000d197
mov eax, dword [ebp - 0x18]
inc edi
cmp edi, 0x415e
jl 0x100131f0
mov esi, dword [ebp - 0x28]
add eax, esi
dec dword [ebp - 0x24]
mov dword [ebp - 0x18], eax
jne 0x100131eb
inc esi
mov dword [ebp - 0x28], esi
cmp esi, 0x6e79
jl 0x100131df
mov eax, dword [ebp - 0x14]
inc eax
mov dword [ebp - 0x14], eax
cmp eax, 0x4777
jl 0x100131dc
mov dword [ebp - 0x24], 0x266d8ff8
cmp dword [ebp - 0x20], 0x1077
jge 0x10013272
push str.bpp_dccn_qapmidc_jvwnw_fdltp_nmkqkutw_jli_xmtfravem_mebbyfauf_akmhw_nxdrtd_eng_aeblknetu_umgpejos
call fcn.1004d87c
pop ecx
mov dword [ebp - 0x20], 0xfffffffb
mov dword [ebp - 0x20], 0xd764ce34
mov dword [ebp - 0x94], 0xcd95ff7
mov dword [ebp - 0x3c], ebx
cmp dword [ebp - 0x3c], 1
jg 0x10013403
mov dword [ebp - 0x20], 0x5ecb
cmp dword [ebp - 0x20], 0x6059
jle 0x100132f5
push ebx
push ebx
call dword [sym.imp.GDI32.dll_SelectClipRgn]
mov esi, ebx
mov edi, ebx
lea eax, [edi + esi]
cdq
lea ecx, [ebp - 0x14c]
push edx
push eax
call fcn.100019c5
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x100132ce
mov eax, dword [eax]
push eax
call fcn.1004d87c
pop ecx
push ebx
push 1
lea ecx, [ebp - 0x14c]
call fcn.1000d197
inc edi
cmp edi, 0x3998
jl 0x100132b3
inc esi
cmp esi, 0x76c5
jl 0x100132b1
mov dword [ebp - 0x18], 0xa73d2d67
cmp dword [ebp - 0x20], 0x5d9f
jge 0x10013310
push str.rflgbanbo_karv_vbtgxfuy_nnwqfbpf_urgioym_lhu_njdcbhpli_gusd_tpcfeull_suaaxbhh_btcd_vexd
call fcn.1004d87c
pop ecx
xor ecx, ecx
inc ecx
mov dword [ebp - 0x20], ecx
mov dword [ebp - 0x18], ebx
jmp 0x10013328
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x104], ebx
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 2
jl 0x1001331b
push ecx
lea eax, [ebp - 0x32]
mov byte [ebp - 0x32], bl
push eax
push ecx
push ecx
mov ecx, 0x459b
call fcn.10012717
add esp, 0x10
mov dword [ebp - 0x18], ebx
jmp 0x100133eb
mov dword [ebp - 0x90], eax
lea ecx, [ebp - 0xec]
mov dword [ebp - 0x20], 0xfffffff9
mov dword [ebp - 0x20], 0xf51ae9a0
push eax
call fcn.1000cdd8
push ebx
push 1
lea eax, [ebp - 0xec]
mov byte [ebp - 4], 4
push eax
push 0x536a
push ebx
push 0x5946
push 0x2a4
push 0x2a98
lea edx, [ebp - 0x8c]
mov ecx, 0x2f5c
call fcn.1004946b
lea eax, [ebp - 0x94]
xor cl, cl
push eax
lea eax, [ebp - 0x90]
push eax
push ebx
lea eax, [ebp - 0x3c]
push eax
push 0x2023
push 0x6352
push 1
push 0x4188
push 0x37c6
lea edx, [ebp - 0xc4]
call fcn.1001096d
add esp, 0x44
mov byte [ebp - 4], 3
lea ecx, [ebp - 0xec]
call fcn.1000ce5b
inc dword [ebp - 0x18]
xor eax, eax
inc eax
cmp dword [ebp - 0x18], eax
jle 0x1001334d
inc dword [ebp - 0x3c]
cmp dword [ebp - 0x3c], eax
jle 0x10013297
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], 0xf
jge 0x100131ad
cmp dword [ebp - 0x1c], 0xd65
jge 0x10013424
push str.ebxd_deoao_aet_jnqsctn_bdvoqvql_uvdrhbw_wkt_iwlmy_bvjdxlply_hwvkvp
call fcn.1004d87c
pop ecx
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xc4]
call fcn.1000ce5b
mov dword [ebp - 0x18], 0xffffffff
lea ecx, [ebp - 0x88]
push 2
call fcn.1000cdd8
push 3
lea ecx, [ebp - 0xb8]
mov dword [ebp - 4], 5
call fcn.1000cdd8
mov byte [ebp - 4], 6
mov dword [ebp - 0x24], 4
mov dword [ebp - 0x2c], ebx
jmp 0x10013479
mov eax, dword [ebp - 0x2c]
mov dword [ebp + eax*4 - 0x6c], 0x4c924b54
inc dword [ebp - 0x2c]
cmp dword [ebp - 0x2c], 2
jl 0x1001346b
push ecx
push 0x4cfa
push 0x5652
push ecx
lea eax, [ebp - 0x2c]
mov edx, 0x4279
push eax
lea eax, [ebp - 0x88]
mov ecx, 0x36fc
push eax
push 0x3f4d
push ebx
call fcn.1001291b
add esp, 0x20
mov dword [ebp - 0x2c], ebx
jmp 0x100134c2
mov ecx, dword [ebp - 0x2c]
mov eax, dword [ebp - 0xb8]
mov dword [eax + ecx*4], ebx
inc dword [ebp - 0x2c]
cmp dword [ebp - 0x2c], 3
jl 0x100134b3
mov dword [ebp - 0x18], 1
jmp 0x1001369d
mov dword [ebp - 0x4c], 0xf72d4ea6
mov dword [ebp - 0x1c], 0x203f
cmp dword [ebp - 0x1c], 0x220e
jle 0x10013531
mov esi, ebx
mov edi, ebx
lea eax, [edi + esi]
cdq
lea ecx, [ebp - 0x17c]
push edx
push eax
call fcn.100019c5
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x1001350a
mov eax, dword [eax]
push eax
call fcn.1004d87c
pop ecx
push ebx
push 1
lea ecx, [ebp - 0x17c]
call fcn.1000d197
inc edi
cmp edi, 0x785e
jl 0x100134ef
inc esi
cmp esi, 0x70c9
jl 0x100134ed
mov dword [ebp - 0x38], 0x7c70ab22
cmp dword [ebp - 0x1c], 0x1c91
jge 0x1001354c
push str.cxsdgp_ogqc_viyec_dtr_vcs
call fcn.1004d87c
pop ecx
mov eax, dword [ebp - 0x4c]
cmp eax, dword [ebp - 0x4c]
jge 0x100135e6
mov dword [ebp - 0x1c], 0x281f
cmp dword [ebp - 0x1c], 0x2942
jle 0x10013592
mov esi, ebx
mov edi, ebx
mov eax, esi
mov ecx, 0x1007bbb8
cdq
idiv edi
mov eax, edx
cdq
push edx
push eax
call fcn.1000cbc0
inc edi
cmp edi, 0x85f
jl 0x1001356c
inc esi
cmp esi, 0x7d24
jl 0x1001356a
mov dword [ebp - 0x20], 0xfffffffe
cmp dword [ebp - 0x1c], 0x26b7
jge 0x100135b1
mov edx, str.gkgscamlv_vmipfqu_svkx_fuabtpxuy_jqymag_osocqhdx_qhdvx_bsqsqnlbf_glsxardsr
mov ecx, 0x1007bbb8
call fcn.1000ee07
mov eax, dword [ebp - 0x4c]
xor edx, edx
mov ecx, dword [ebp - 0x20]
mov eax, dword [ebp - 0x4c]
cmp eax, ecx
mov eax, dword [ebp - 0x38]
setne dl
imul eax, dword [ebp - 0x18]
xor ecx, ecx
add eax, edx
mov dword [ebp - 0x68], eax
mov eax, dword [ebp - 0x38]
cmp eax, 1
mov eax, dword [ebp - 0x88]
setge cl
mov dword [eax + 4], ecx
jmp 0x10013672
mov dword [ebp - 0x1c], 0x19a1
cmp dword [ebp - 0x1c], 0x1cec
jle 0x10013647
mov esi, ebx
mov edi, ebx
mov ecx, edi
mov eax, esi
sar eax, cl
lea ecx, [ebp - 0x1ac]
cdq
push edx
push eax
call fcn.100019c5
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x10013618
mov eax, dword [eax]
push eax
call fcn.1004d87c
pop ecx
push ebx
push 1
lea ecx, [ebp - 0x1ac]
call fcn.1000d197
inc edi
cmp edi, 0x6933
jl 0x100135fa
inc esi
cmp esi, 0x2928
jl 0x100135f8
push ebx
push ebx
call dword [sym.imp.GDI32.dll_SetPolyFillMode]
push 0x24e6
push ebx
push 0x18a3
xor dl, dl
mov cl, 1
call fcn.10010310
add esp, 0xc
cmp dword [ebp - 0x1c], 0x1945
jge 0x10013672
push str.egkghbdub_ejeltmcu_msvtf_eix_rodlcjd_upnoxwhws_mpmwo_onbotrr_pxtgiiveo_gutkh
call fcn.1004d87c
pop ecx
push ebx
push 0x1ac1
lea eax, [ebp - 0x38]
mov edx, 0x1379
push eax
push ecx
push ecx
push 0xc2e
push ecx
lea eax, [ebp - 0x4c]
mov ecx, 0x5a7
push eax
call fcn.100105e0
add esp, 0x20
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 0xd
jg 0x100134d4
cmp dword [ebp - 0x68], ebx
jne 0x100136e4
mov eax, dword [ebp - 0x68]
mov eax, dword [ebp - 0x68]
mov edx, dword [ebp - 0x88]
cmp dword [edx], 0xa6add33d
sbb eax, eax
xor ecx, ecx
neg eax
cmp eax, 0xfffffffb
mov eax, dword [ebp - 0xb8]
setg cl
mov eax, dword [eax]
add eax, 2
add eax, ecx
imul eax, dword [edx + 4]
cmp eax, dword [ebp - 0x24]
jle 0x100136e4
mov ecx, ebx
jmp 0x100136e7
xor ecx, ecx
inc ecx
mov eax, dword [ebp - 0x88]
mov dword [eax], ecx
lea ecx, [ebp - 0xb8]
call fcn.1000ce5b
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x88]
call fcn.1000ce5b
cmp byte [section.vmahdnee], 0
jne 0x1001395f
push 2
lea ecx, [ebp - 0xe0]
call fcn.1000cdd8
mov dword [ebp - 4], 7
mov dword [ebp - 0x24], 0x2f3e
cmp dword [ebp - 0x24], 0x3200
jle 0x1001379b
push ebx
push ebx
push ebx
push ebx
call dword [sym.imp.GDI32.dll_CreateDCA]
mov dword [ebp - 0x14], ebx
mov edi, ebx
mov esi, ebx
mov eax, ebx
mov dword [ebp - 0x20], 0x6c47
mov ebx, dword [ebp - 0x14]
mov dword [ebp - 0x1c], eax
and eax, edi
mov ecx, 0x1007bbb8
or eax, ebx
cdq
push edx
push eax
call fcn.1000cbc0
mov eax, dword [ebp - 0x1c]
add eax, esi
dec dword [ebp - 0x20]
mov dword [ebp - 0x1c], eax
jne 0x1001375a
inc esi
push 0
pop ebx
cmp esi, 0x7eaf
jl 0x1001374b
inc edi
cmp edi, 0x3c96
jl 0x10013749
mov eax, dword [ebp - 0x14]
inc eax
mov dword [ebp - 0x14], eax
cmp eax, 0x7656
jl 0x10013747
cmp dword [ebp - 0x24], 0x2de7
jge 0x100137b3
mov edx, str.yixlee_htgx_neqo_veb_qogvjfv_mslpu_ibyaxrj_fqjekngx_hwjdbtbwi_wun
mov ecx, 0x1007bbb8
call fcn.1000ee07
lea eax, [ebp - 0xe0]
mov dword [ebp - 0x1c], 0xfff7
push eax
push ebx
lea eax, [ebp - 0x44]
push eax
sub esp, 0x10
push 0x1e4f
push ecx
push 0x6085
push 0x6ba5
call fcn.100100b1
add esp, 0x2c
mov dword [ebp - 0x44], ebx
jmp 0x100137f4
mov eax, dword [ebp - 0x44]
mov dword [ebp + eax*4 - 0x64], 0x9bdba76a
inc dword [ebp - 0x44]
cmp dword [ebp - 0x44], 4
jl 0x100137e6
mov dword [ebp - 0x58], ebx
cmp dword [ebp - 0x58], 1
jg 0x10013878
mov dword [ebp - 0x14], 0xffffffff
mov dword [ebp - 0x10], 0x35240ca7
mov edx, dword [ebp - 0x58]
mov eax, dword [ebp - 0x14]
dec edx
neg edx
sbb edx, edx
xor ecx, ecx
inc edx
cmp edx, eax
mov eax, dword [ebp - 0x58]
sete cl
xor edx, edx
cmp ecx, eax
mov eax, dword [ebp - 0x64]
setne dl
xor ecx, ecx
cmp eax, edx
mov eax, dword [ebp - 0x58]
setl cl
sub eax, ecx
je 0x10013842
mov eax, dword [ebp - 0x1c]
cmp dword [ebp - 0x58], ebx
jne 0x10013850
cmp dword [ebp - 0x14], ebx
jne 0x10013850
mov eax, ebx
jmp 0x10013853
xor eax, eax
inc eax
mov dword [ebp - 0x10], eax
xor eax, eax
inc eax
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], ebx
jl 0x10013870
cmp dword [ebp - 0x58], ebx
jne 0x10013870
cmp dword [ebp - 0x14], ebx
jne 0x10013870
dec dword [ebp - 0x10]
jns 0x10013861
inc dword [ebp - 0x58]
cmp dword [ebp - 0x58], eax
jle 0x10013803
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xe0]
call fcn.1000ce5b
push ecx
push ecx
push 0x10081010
push ecx
push ebx
call fcn.1000ffd4
add esp, 0x14
xor dl, dl
mov ecx, 0x6c53
push 1
call fcn.100118c1
mov dword [ebp - 0x1c], 0x5516
cmp dword [ebp - 0x1c], 0x5648
pop ecx
jle 0x10013933
mov dword [ebp - 0x14], ebx
mov ecx, ebx
mov dword [ebp - 0x10], ebx
mov esi, ebx
mov edi, ebx
mov eax, esi
cdq
idiv edi
mov eax, dword [ebp - 0x14]
add eax, ecx
lea ecx, [ebp - 0x1dc]
and eax, edx
cdq
push edx
push eax
call fcn.100019c5
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x100138e7
mov eax, dword [eax]
push eax
call fcn.1004d87c
pop ecx
push ebx
push 1
lea ecx, [ebp - 0x1dc]
call fcn.1000d197
mov ecx, dword [ebp - 0x10]
inc edi
cmp edi, 0x41d2
jl 0x100138c3
inc esi
cmp esi, 0x1766
jl 0x100138c1
inc ecx
mov dword [ebp - 0x10], ecx
cmp ecx, 0x1ba4
jl 0x100138bf
mov eax, dword [ebp - 0x14]
inc eax
mov dword [ebp - 0x14], eax
cmp eax, 0x6d0f
jl 0x100138ba
push ebx
push ebx
call dword [sym.imp.USER32.dll_ShowOwnedPopups]
push section.vmahdnee
push 1
push 0x3f42
mov dl, 1
xor cl, cl
call fcn.10010310
add esp, 0xc
cmp dword [ebp - 0x1c], 0x5386
jge 0x1001395f
push str.bjmddy_twuluwj_njiiwx_pnwwm_tydqsv_apkrny_pdenf_mvtvsbu_rcidk
call fcn.1004d87c
pop ecx
mov dword [ebp - 0x20], 0x34c7
cmp dword [ebp - 0x20], 0x3558
jle 0x100139c6
mov dword [ebp - 0x14], ebx
mov edi, ebx
mov esi, ebx
mov ecx, ebx
mov ebx, dword [ebp - 0x14]
mov dword [ebp - 0x1c], ecx
mov eax, esi
shl eax, cl
lea ecx, [edi + ebx]
and eax, ecx
mov ecx, 0x1007bbb8
cdq
push edx
push eax
call fcn.1000cbc0
mov ecx, dword [ebp - 0x1c]
inc ecx
mov dword [ebp - 0x1c], ecx
cmp ecx, 0x5085
jl 0x1001397e
inc esi
push 0
pop ebx
cmp esi, 0x660c
jl 0x10013976
inc edi
cmp edi, 0x265
jl 0x10013974
mov eax, dword [ebp - 0x14]
inc eax
mov dword [ebp - 0x14], eax
cmp eax, 0x2dea
jl 0x10013972
cmp dword [ebp - 0x20], 0x3211
jge 0x100139de
mov edx, str.jhbed_gle_njuebw_txnd_koihbyb_fdpw_bawooj_sqg
mov ecx, 0x1007bbb8
call fcn.1000ee07
push dword [ebp - 0x8c]
movdqa xmm0, xmmword [0x10075500]
lea eax, [ebp - 0xec]
push eax
lea eax, [ebp - 0xfc]
mov dword [ebp - 0x78], ebx
push eax
push ebx
lea ecx, [ebp - 0x78]
mov dword [ebp - 0x74], ebx
movdqu xmmword [ebp - 0xfc], xmm0
mov dword [ebp - 0x70], ebx
call fcn.1000f388
mov dword [ebp - 4], 8
xor ecx, ecx
mov dword [ebp - 0x30], 6
inc ecx
mov dword [ebp - 0x40], ecx
mov dword [ebp - 0x48], ecx
mov dword [ebp - 0x1c], 5
mov dword [ebp - 0x1c], 0x39032f82
mov dword [ebp - 0x10], ebx
jmp 0x10013a4c
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0x50], 0xce1c
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], ecx
jl 0x10013a3e
mov dword [ebp - 0x30], ebx
cmp dword [ebp - 0x30], 3
jg 0x10013bb8
push ecx
lea eax, [ebp - 0x78]
mov dword [ebp - 0x28], 0xffffffff
push eax
push 0xa0b
push ecx
push ecx
lea eax, [ebp - 0x30]
push eax
push ecx
push 0x3b9c
lea edx, [ebp - 0x40]
lea ecx, [ebp - 0x48]
call fcn.100105e0
add esp, 0x20
mov dword [ebp - 0x40], ebx
jmp 0x10013b9e
push 2
lea ecx, [ebp - 0xd4]
call fcn.1000cdd8
mov byte [ebp - 4], 9
mov dword [ebp - 0x24], 0x3ef5
cmp dword [ebp - 0x24], 0x419f
jle 0x10013b1d
mov edi, ebx
mov esi, ebx
mov eax, ebx
mov dword [ebp - 0x20], 0x27c1
mov dword [ebp - 0x1c], eax
or eax, edi
mov dword [ebp - 0x14], 0x1007b5f4
cdq
lea ecx, [ebp - 0x20c]
push edx
push eax
call fcn.100019c5
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x10013ae3
mov eax, dword [eax]
push eax
call fcn.1004d87c
pop ecx
push ebx
push 1
lea ecx, [ebp - 0x20c]
call fcn.1000d197
mov eax, dword [ebp - 0x1c]
add eax, esi
dec dword [ebp - 0x20]
mov dword [ebp - 0x1c], eax
jne 0x10013ac2
inc esi
cmp esi, 0x6997
jl 0x10013ab6
inc edi
cmp edi, 0x6649
jl 0x10013ab4
call dword [sym.imp.USER32.dll_CreatePopupMenu]
cmp dword [ebp - 0x24], 0x3dd2
jge 0x10013b31
push str.rhav_wekw_beddxggi_lulvgw_egpujbun_nfoyccj_dfbwnkrc_dcyv_iudf_jkrsg_opoqgay_yephny_esmkmhgs_kmrmrn
call fcn.1004d87c
pop ecx
push ecx
lea eax, [ebp - 0xd4]
push eax
push ebx
push 0x734e
push ecx
lea edx, [ebp - 0xc8]
call fcn.10011a7d
add esp, 0x14
mov dword [ebp - 0x48], 3
cmp dword [ebp - 0x48], ebx
jl 0x10013b8c
mov eax, dword [ebp - 0x30]
mov edx, 0xffff
mov eax, dword [ebp - 0x50]
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x30]
mov eax, dword [ebp - 0x78]
cmp edx, dword [eax + ecx*4]
mov eax, dword [ebp - 0x50]
sbb edx, edx
xor ecx, ecx
inc edx
cmp edx, eax
setle cl
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], eax
dec dword [ebp - 0x48]
jns 0x10013b5a
lea ecx, [ebp - 0xd4]
mov byte [ebp - 4], 8
call fcn.1000ce5b
inc dword [ebp - 0x40]
cmp dword [ebp - 0x40], 3
jle 0x10013a91
inc dword [ebp - 0x30]
cmp dword [ebp - 0x30], 3
push 1
pop ecx
jle 0x10013a5e
push 0x4dcd
push ecx
lea eax, [ebp - 0x31]
mov byte [ebp - 0x31], bl
push eax
xor dl, dl
call fcn.10010310
add esp, 0xc
lea ecx, [ebp - 0x78]
call fcn.1000ce5b
mov eax, dword [0x10081010]
cmp eax, 0x270
jne 0x10013c23
mov edx, 0x10081018
mov ecx, dword [edx - 4]
xor ecx, dword [edx]
and ecx, 0x7fffffff
xor ecx, dword [edx - 4]
mov eax, ecx
and al, 1
movzx eax, al
neg eax
sbb eax, eax
shr ecx, 1
and eax, 0x9908b0df
xor eax, ecx
xor eax, dword [edx + 0x630]
mov dword [edx + 0x9bc], eax
add edx, 4
cmp edx, 0x100819d8
jl 0x10013be8
jmp 0x10013c2f
cmp eax, 0x4e0
jb 0x10013c34
call fcn.10013ea4
mov eax, dword [0x10081010]
mov ecx, dword [eax*4 + 0x10081014]
inc eax
mov dword [0x10081010], eax
mov eax, ecx
shr eax, 0xb
and eax, dword [0x10082394]
xor ecx, eax
mov eax, ecx
and eax, 0xff3a58ad
shl eax, 7
xor ecx, eax
mov eax, ecx
and eax, 0xffffdf8c
shl eax, 0xf
xor ecx, eax
mov eax, ecx
shr eax, 0x12
xor eax, ecx
mov ecx, dword [ebp - 0x7c]
mov dword [ecx], eax
mov ecx, dword [ebp - 0xc]
pop edi
pop esi
mov dword fs:[0], ecx
pop ebx
mov esp, ebp
pop ebp
ret