Function at 0x10027215
Capabilities:
Authenticate hmac
Delete directory
Encrypt data using speck
Set registry value

Disassembly:
mov eax, 0x10061610
call fcn.10060138
sub esp, 0x600
push ebx
push esi
push edi
mov dword [ebp - 0x10], esp
lea ecx, [ebp - 0x2cc]
mov dword [ebp - 0x260], 0x69bd
push 1
call fcn.10004840
xor ebx, ebx
mov dword [ebp - 4], ebx
mov dword [ebp - 0x58], 0xc6d21cd
mov dword [ebp - 0x9c], 6
mov dword [ebp - 0x24], 0x67df2ddf
mov dword [ebp - 0x28], 5
mov dword [ebp - 0x1c], 0x4e57
cmp dword [ebp - 0x1c], 0x51f0
jle 0x100272d6
mov esi, ebx
mov dword [ebp - 0x18], ebx
mov dword [ebp - 0x34], esi
mov dword [ebp - 0x24], 0x1a7e
mov edi, ebx
mov eax, esi
lea ecx, [ebp - 0x530]
xor eax, edi
cdq
push edx
push eax
call fcn.10001a55
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x100272a3
mov eax, dword [eax]
push eax
call fcn.10047e1c
pop ecx
push ebx
push 1
lea ecx, [ebp - 0x530]
call fcn.10004d0a
inc edi
cmp edi, 0x12cf
jl 0x10027287
dec esi
dec dword [ebp - 0x24]
jne 0x10027285
mov esi, dword [ebp - 0x18]
inc esi
mov dword [ebp - 0x18], esi
cmp esi, 0x752
jl 0x1002727b
cmp dword [ebp - 0x1c], 0x4bce
jge 0x100272ea
push str.iwu_rhwenbck_pygyesn_lggouy_vxts_gyilgs_egenpeey_rhbezc_filwdwo_ymfjmar_gcbzyz
call fcn.10047e1c
pop ecx
lea eax, [ebp - 0x2cc]
mov dword [ebp - 4], ebx
push eax
push ecx
lea edx, [ebp - 0x434]
xor cl, cl
call fcn.100236aa
lea eax, [ebp - 0x2cc]
push eax
push 0x6aae
lea eax, [ebp - 0x58]
push eax
push 0xc07
push 1
lea eax, [ebp - 0x260]
push eax
push 0x61c4
lea ecx, [ebp - 0x9c]
call fcn.10022858
add esp, 0x24
mov dword [ebp - 0x58], 0xa
jmp 0x1002742c
mov ecx, dword [ebp - 0x2cc]
xor edx, edx
mov dword [ebp - 0x18], 0x4acc
mov dword [ebp - 0x120], 0xfffffffa
cmp dword [ecx], 0x9ed5
mov eax, dword [ecx]
setne dl
mov dword [ebp - 0x24], eax
mov eax, dword [ebp - 0x18]
xor ecx, ecx
cmp edx, eax
mov eax, dword [ebp - 0x18]
setge cl
xor edx, edx
cmp ecx, eax
mov eax, dword [ebp - 0x24]
setg dl
xor ecx, ecx
cmp eax, edx
mov eax, dword [ebp - 0x9c]
setne cl
imul ecx, eax
mov eax, dword [ebp - 0x18]
imul eax, dword [ebp - 0x9c]
mov dword [ebp - 0x34], ecx
xor ecx, ecx
cmp eax, dword [ebp - 0x34]
setl cl
xor edx, edx
mov dword [ebp - 0x9c], ecx
mov ecx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x18]
sub ecx, 0xc7e7
cmp ecx, eax
setg dl
neg edx
je 0x100273c9
cmp dword [ebp - 0x18], ebx
je 0x100273c9
xor eax, eax
inc eax
jmp 0x100273cb
mov eax, ebx
imul ecx, eax, 0xfffffff9
xor edx, edx
mov eax, dword [ebp - 0x18]
cmp ecx, eax
mov eax, dword [ebp - 0x58]
setge dl
imul edx, eax
mov eax, dword [ebp - 0x28]
add eax, edx
je 0x100273f8
push ecx
push ecx
mov dl, 1
lea ecx, [ebp - 0x120]
call fcn.10023ba0
pop ecx
pop ecx
jmp 0x10027429
push 0x28f8
push ebx
push 1
lea eax, [ebp - 0x120]
mov edx, 0x2e72
push eax
push 0x1f06
push 0x21ad
lea eax, [ebp - 0x58]
xor cl, cl
push eax
push 0xfb0
call fcn.1002492d
add esp, 0x20
inc dword [ebp - 0x58]
cmp dword [ebp - 0x58], 0x1d
jl 0x1002733f
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x2cc]
call fcn.1000489d
mov dword [ebp - 0x20], 0x99cf
mov dword [ebp - 0x1c], 0x62a2b3b7
mov edx, dword [ebp - 0x20]
mov eax, dword [ebp - 0x20]
neg edx
sbb edx, edx
xor ecx, ecx
neg edx
cmp edx, eax
sete cl
mov dword [ebp - 0x1c], ecx
cmp dword [ebp - 0x1c], ebx
jne 0x100274d9
cmp dword [ebp - 0x20], 6
sbb eax, eax
inc eax
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
add eax, dword [ebp - 0x20]
jne 0x100274d9
push 3
lea ecx, [ebp - 0x41c]
call fcn.10004840
push 3
pop edx
mov dword [ebp - 4], edx
mov dword [ebp - 0x18], ebx
jmp 0x100274ab
mov ecx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x41c]
mov dword [eax + ecx*4], 1
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], edx
jl 0x10027498
mov dword [ebp - 0x20], 2
cmp dword [ebp - 0x20], ebx
jl 0x100274c8
xor dl, dl
call fcn.1002453e
dec dword [ebp - 0x20]
jns 0x100274bc
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x41c]
call fcn.1000489d
jmp 0x10027503
mov dword [ebp - 0x1c], 0x19
jmp 0x100274fd
push ebx
call fcn.10025a40
push ecx
push ecx
mov byte [ebp - 0x61], bl
lea edx, [ebp - 0x61]
mov cl, 1
call fcn.10023cf9
add esp, 0xc
dec dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 4
jg 0x100274e2
mov dword [ebp - 0x20], 0xfffffffb
mov dword [ebp - 0x24], 1
mov dword [ebp - 0x34], 0x764ce34a
mov dword [ebp - 0x20], ebx
jmp 0x100275ce
xor ecx, ecx
mov dword [ebp - 0x18], 1
mov dword [ebp - 0x24], ebx
mov dword [ebp - 0x28], 1
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x20]
cmp eax, 0xe8fe
mov eax, dword [ebp - 0x18]
setg cl
xor edx, edx
cmp ecx, eax
mov eax, dword [ebp - 0x20]
setg dl
xor ecx, ecx
cmp edx, eax
setl cl
sub ecx, 0xfffc
neg ecx
sbb ecx, ecx
inc ecx
mov dword [ebp - 0x24], ecx
mov eax, dword [ebp - 0x24]
mov dword [ebp - 0x24], eax
mov eax, dword [ebp - 0x24]
mov ecx, dword [ebp - 0x20]
sub ecx, eax
mov eax, dword [ebp - 0x18]
neg ecx
sbb ecx, ecx
xor edx, edx
inc ecx
cmp ecx, eax
setl dl
sub edx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x20]
neg edx
sbb edx, edx
xor ecx, ecx
inc edx
cmp edx, eax
mov eax, dword [ebp - 0x18]
setle cl
xor edx, edx
cmp ecx, eax
mov eax, dword [ebp - 0x20]
setg dl
xor ecx, ecx
cmp edx, eax
setl cl
sub ecx, dword [ebp - 0x20]
add ecx, dword [ebp - 0x20]
jne 0x100275b7
cmp dword [ebp - 0x24], ebx
jne 0x100275b7
mov ecx, ebx
jmp 0x100275ba
xor ecx, ecx
inc ecx
xor eax, eax
cmp ecx, 0x2c5d177c
setne al
mov dword [ebp - 0x34], eax
mov eax, dword [ebp - 0x28]
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], 0x1b
jne 0x10027520
mov eax, dword [0x1007f180]
test al, 1
jne 0x10027615
or eax, 1
mov dword [0x1007f180], eax
mov dword [ebp - 4], 4
mov dword [0x1007f178], ebx
mov dword [0x1007f17c], ebx
call fcn.1002b4b2
push 0x10061de1
mov dword [0x1007f178], eax
call fcn.10047df2
or dword [ebp - 4], 0xffffffff
pop ecx
push 0x1c51
push ebx
push 0x2344
push 0x4350
push 1
push ebx
push 0x11f0
push 0x1165
mov dword [ebp - 0x7c], ebx
lea ecx, [ebp - 0x7c]
mov dword [ebp - 0x34], 0x11151c
mov edx, 0x54ef
push 0x2991
call fcn.10025907
add esp, 0x24
mov dword [ebp - 0x7c], ebx
jmp 0x10027686
mov dword [ebp - 0x18], ebx
jmp 0x1002766c
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x440], 0xe08974b6
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 3
jl 0x1002765b
cmp dword [ebp - 0x440], ebx
jne 0x1002768c
mov eax, dword [ebp - 0x43c]
mov dword [ebp - 0x34], eax
inc dword [ebp - 0x7c]
cmp dword [ebp - 0x7c], 0x1a
jne 0x10027656
cmp byte [0x1007dcde], 0
je 0x10027768
push 2
lea ecx, [ebp - 0x3a8]
call fcn.10004840
mov dword [ebp - 4], 5
mov dword [ebp - 0x444], 0xbc58
mov dword [ebp - 0x3f0], 0xfffffff9
mov dword [ebp - 0x24], 0x25d5
cmp dword [ebp - 0x24], 0x2647
jle 0x100276f8
mov esi, ebx
mov edi, ebx
mov eax, edi
mov ecx, 0x1007cb98
and eax, esi
cdq
push edx
push eax
call fcn.10004616
inc edi
cmp edi, 0x46c0
jl 0x100276d5
inc esi
cmp esi, 0x2c2c
jl 0x100276d3
mov byte [ebp - 4], 6
cmp dword [ebp - 0x24], 0x2447
jge 0x10027732
mov edx, str.roxmaai_zzjn_rhjk_bhthk_ljxew_nzays_xyjrm_pky_duzjua
mov ecx, 0x1007cb98
call fcn.10006a66
jmp 0x10027732
lea eax, [ebp - 0x3a8]
mov dword [ebp - 4], 5
push eax
push ecx
mov dl, 1
lea ecx, [ebp - 0x44c]
call fcn.10022ba4
mov eax, dword [ebp - 0x3a8]
pop ecx
pop ecx
lea ecx, [ebp - 0x3a8]
mov dword [eax], ebx
call fcn.1000489d
jmp 0x1002a325
push 0x39c7
push 1
push 1
push 0x126
push ebx
mov edx, 0x1007dcde
mov ecx, 0x60cb
call fcn.10026ac6
mov dword [ebp - 0x70], ebx
add esp, 0x14
mov dword [ebp - 0x34], 0x3413
mov dword [ebp - 0x18], ebx
jmp 0x100277a9
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x3e4], 1
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 3
jl 0x10027798
push 1
lea eax, [ebp - 0x70]
mov edx, 0x2529
push eax
push 0x5403
push 0x30d
push 0x7410
push 0x5e4f
push 0x7240
push ecx
mov ecx, 0x5ac9
call fcn.1002690a
mov dword [ebp - 0x24], 0x128e
add esp, 0x20
cmp dword [ebp - 0x24], 0x1408
jle 0x10027816
mov esi, ebx
mov edi, esi
mov ebx, 0x1f6c
mov eax, edi
mov ecx, 0x1007cb98
cdq
push edx
push eax
call fcn.10004616
dec edi
dec ebx
jne 0x100277fa
inc esi
cmp esi, 0x1087
jl 0x100277f3
mov dword [ebp - 4], 9
cmp dword [ebp - 0x24], 0x10aa
jge 0x10027835
mov edx, str.atxf_lxohvj_letrt_ojpcf_pkt_npg_jjkrpdgth_hvyg_janm_cewccn
mov ecx, 0x1007cb98
call fcn.10006a66
or dword [ebp - 4], 0xffffffff
mov dword [ebp - 0x70], ebx
jmp 0x100278dd
mov dword [ebp - 0x24], 0x9dbea522
xor edx, edx
mov dword [ebp - 0x18], 0xb372ba29
mov dword [ebp - 0x18], 0x487223b1
mov eax, dword [ebp - 0x24]
mov dword [ebp - 0x18], 0xc9eb
imul ecx, dword [ebp - 0x18], 0xa00c
mov eax, dword [ebp - 0x24]
cmp eax, ecx
mov eax, dword [ebp - 0x3e4]
setne dl
xor ecx, ecx
cmp eax, edx
setne cl
xor eax, eax
cmp ecx, 0x75d5
setl al
cmp eax, 0xf746e33a
jae 0x100278be
cmp dword [ebp - 0x3e4], ebx
jne 0x100278be
mov ecx, ebx
jmp 0x100278c1
xor ecx, ecx
inc ecx
mov eax, dword [ebp - 0x24]
add eax, 0x718e5034
add eax, ecx
mov dword [ebp - 0x18], eax
mov eax, dword [ebp - 0x18]
neg eax
sbb eax, eax
neg eax
mov dword [ebp - 0x34], eax
inc dword [ebp - 0x70]
cmp dword [ebp - 0x70], 0x30
jle 0x10027863
mov dword [ebp - 0x24], 0x40df
cmp dword [ebp - 0x24], 0x4191
jle 0x10027936
push ebx
push ebx
push ebx
push ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_CreateFileMappingA]
mov edi, ebx
mov esi, ebx
mov dword [ebp - 0x34], ebx
lea eax, [ebx + esi]
mov ecx, 0x1007cb98
xor eax, edi
cdq
push edx
push eax
call fcn.10004616
inc ebx
cmp ebx, 0x3f65
jl 0x10027906
inc esi
push 0
pop ebx
cmp esi, 0x5dcd
jl 0x10027903
inc edi
cmp edi, 0x2614
jl 0x10027901
mov dword [ebp - 4], 0xb
cmp dword [ebp - 0x24], 0x3d31
mov dword [ebp - 0xa0], 0x10079af8
jge 0x1002795f
mov edx, str.tlgejp_niqyquym_vfxdvry_gjsgt_yvfeyvw
mov ecx, 0x1007cb98
call fcn.10006a66
or dword [ebp - 4], 0xffffffff
mov dword [ebp - 0x1c], 0x43cdf98a
mov dword [ebp - 0x20], 0x4b27
cmp dword [ebp - 0x20], 0x4edb
jle 0x100279fe
mov ecx, ebx
mov dword [ebp - 0x18], ebx
mov edi, ebx
mov dword [ebp - 0x1c], ebx
mov esi, ebx
mov dword [ebp - 0x24], ebx
mov eax, edi
mov edi, ecx
cdq
idiv esi
mov esi, 0x6ce2
mov dword [ebp - 0x34], edx
mov eax, edi
lea ecx, [ebp - 0x590]
cdq
push edx
push eax
call fcn.10001a55
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x100279b6
mov eax, dword [eax]
push eax
call fcn.10047e1c
pop ecx
push ebx
push 1
lea ecx, [ebp - 0x590]
call fcn.10004d0a
add edi, dword [ebp - 0x34]
dec esi
jne 0x1002799c
mov esi, dword [ebp - 0x24]
mov edi, dword [ebp - 0x1c]
inc esi
mov ecx, dword [ebp - 0x18]
mov dword [ebp - 0x24], esi
cmp esi, 0x6760
jl 0x1002798d
inc edi
mov dword [ebp - 0x1c], edi
cmp edi, 0x31a6
jl 0x10027988
inc ecx
mov dword [ebp - 0x18], ecx
cmp ecx, 0x5280
jl 0x10027983
mov dword [ebp - 0x18], ebx
jmp 0x10027a39
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x4d0], 0xc93b4e1a
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 3
jl 0x10027a28
cmp dword [ebp - 0x20], 0x4b1b
jge 0x10027a53
push str.ksxqda_scfvyc_euskzglc_jpcruqvv_zmisbutj_vudd_euq_dpbj_qvttt_nnnitnuo_ueo_afua_yaabn
call fcn.10047e1c
pop ecx
or dword [ebp - 4], 0xffffffff
push 2
pop ecx
mov dword [ebp - 0x1c], ecx
cmp dword [ebp - 0x1c], ebx
jl 0x10027aad
mov dword [ebp - 0x18], 0x1da622a1
mov dword [ebp - 0x18], ebx
jmp 0x10027a7f
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x4c4], 8
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 3
jl 0x10027a6e
mov dword [ebp - 0x4c4], 0x9c3fbb4
mov dword [ebp - 0x18], ebx
jmp 0x10027aa3
mov eax, dword [ebp - 0x18]
cmp dword [ebp + eax*4 - 0x4d0], ebx
jne 0x10027aa8
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], ecx
jle 0x10027a94
dec dword [ebp - 0x1c]
jns 0x10027a62
mov dword [ebp - 0xc0], ebx
lea ecx, [ebp - 0x3c0]
mov dword [ebp - 0x1c], 0xffff
mov dword [ebp - 0x5c], 0x4bda99da
mov dword [ebp - 0x208], ebx
push 3
call fcn.10004840
mov dword [ebp - 4], 0xf
mov dword [ebp - 0x2c], 0x9c1c50d5
mov dword [ebp - 0x34], 0x1a2955e3
mov dword [ebp - 0x6c], ebx
jmp 0x10027aff
mov eax, dword [ebp - 0x6c]
mov dword [ebp + eax*4 - 0xd4], 0x9be1
inc dword [ebp - 0x6c]
cmp dword [ebp - 0x6c], 2
jl 0x10027aee
push 0xcbe
push 0x3859
push 1
push ebx
lea eax, [ebp - 0x6c]
mov edx, 0x5a71
push eax
push 0x5e60
lea eax, [ebp - 0x3c0]
mov ecx, 0x6ee2
push 1
push eax
call fcn.10022d79
add esp, 0x20
cmp dword [ebp - 0x1c], ebx
je 0x10027cc2
push 0x7e5b
push ebx
push 0xae8
lea eax, [ebp - 0x5d]
mov byte [ebp - 0x5d], bl
push eax
push 1
push 1
push 0x2df1
push 0x2ee6
push 0x59d9
mov edx, 0x32cb
mov ecx, 0x6363
call fcn.10025907
mov byte [ebp - 0x2d], bl
add esp, 0x24
cmp byte [ebp - 0x2d], 0
je 0x10027ba8
push 0x19df
push 0x2735
push ecx
push 0x709d
push ecx
push 0x5036
push 0x1b09
push ebx
mov ecx, 0x5cb0
call fcn.1002424a
add esp, 0x20
mov eax, dword [ebp - 0x1c]
xor ecx, ecx
mov eax, dword [ebp - 0x3c0]
mov esi, dword [eax + 4]
sub esi, dword [eax]
mov eax, dword [ebp - 0xd0]
cmp eax, 0xffffffff
mov eax, dword [ebp - 0x1c]
setg cl
xor edx, edx
cmp ecx, esi
setg dl
xor ecx, ecx
cmp edx, eax
setge cl
sub ecx, dword [ebp - 0x5c]
je 0x10027be8
cmp dword [ebp - 0xd4], ebx
je 0x10027be8
mov eax, dword [ebp - 0xd0]
mov eax, dword [ebp - 0x1c]
xor edx, edx
mov eax, dword [ebp - 0x1c]
mov ecx, dword [ebp - 0xd4]
mov eax, dword [ebp - 0x5c]
add ecx, 0x883eb999
cmp ecx, eax
lea ecx, [ebp - 0x3c0]
sete dl
mov dword [ebp - 0x5c], edx
mov eax, dword [ebp - 0x5c]
inc eax
neg eax
sbb eax, eax
inc eax
mov dword [ebp - 0x2c], eax
mov eax, dword [ebp - 0x2c]
mov dword [ebp - 0x34], eax
or dword [ebp - 4], 0xffffffff
call fcn.1000489d
push 0xc
xor edx, edx
pop esi
inc edx
mov dword [ebp - 0x78], 0xfffffffb
mov dword [ebp - 0x200], edx
mov dword [ebp - 0x20c], 0x764ce34a
mov dword [ebp - 0x78], ebx
cmp dword [ebp - 0x78], 0x1b
je 0x10027c9f
lea eax, [ebp - 0x78]
mov dword [ebp - 0x204], edx
push eax
lea eax, [ebp - 0x230]
mov dword [ebp - 0x230], ebx
push eax
push edx
push edx
push 0x2e22
lea eax, [ebp - 0x200]
mov dword [ebp - 0x34], edx
push eax
push ebx
push 0x3c7b
lea edx, [ebp - 0x204]
lea ecx, [ebp - 0x20c]
call fcn.10022d79
mov eax, dword [ebp - 0x34]
add esp, 0x20
inc dword [ebp - 0x78]
cmp dword [ebp - 0x78], 0x1b
push 1
pop edx
jne 0x10027c4e
mov ecx, dword [ebp - 0xa0]
mov al, byte [ecx]
cmp al, byte [esi + ecx]
je 0x10027e34
inc esi
cmp esi, 0xe0
jl 0x10027c2e
jmp 0x10027f43
mov dword [ebp - 0x50], ebx
mov dword [ebp - 0x1c], ebx
cmp dword [ebp - 0x1c], 1
jg 0x10027ba8
mov dword [ebp - 0x18], 0xf2887cf2
mov dword [ebp - 0x34], 0xccae
mov dword [ebp - 0x18], 1
cmp dword [ebp - 0x18], ebx
jl 0x10027e2c
mov dword [ebp - 0x20], 0xfc2285fa
mov byte [ebp - 0x2d], bl
cmp byte [ebp - 0x2d], 0
je 0x10027d07
xor dl, dl
call fcn.1002344b
mov dword [ebp - 0x20], 1
cmp dword [ebp - 0x20], ebx
jl 0x10027e24
mov dword [ebp - 0x24], 5
mov eax, dword [ebp - 0x20]
cmp dword [ebp + eax*4 - 0xd4], ebx
jne 0x10027d52
cmp dword [ebp - 0x34], ebx
je 0x10027d32
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp + eax*4 - 0xd4]
mov dword [ebp - 0x5c], eax
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x5c]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp + eax*4 - 0xd4]
mov eax, dword [ebp - 0x24]
push 0x76a
mov dword [ebp - 0x24], eax
lea eax, [ebp - 0x5c]
push eax
push ecx
push ecx
lea eax, [ebp - 0x208]
push eax
push 0x3c1a
push ecx
push 0x2abd
push 0x638e
push ecx
xor cl, cl
call fcn.10024192
mov dword [ebp - 0x2c], 0x6b1e
add esp, 0x28
cmp dword [ebp - 0x2c], 0x6e6b
jle 0x10027ddb
push ebx
push ebx
push ebx
call dword [sym.imp.ADVAPI32.dll_ControlService]
mov edi, ebx
mov esi, ebx
mov ecx, ebx
mov dword [ebp - 0x24], ebx
mov eax, esi
sar eax, cl
mov ecx, 0x1007cb98
or eax, edi
cdq
push edx
push eax
call fcn.10004616
mov ecx, dword [ebp - 0x24]
inc ecx
mov dword [ebp - 0x24], ecx
cmp ecx, 0x6dd6
jl 0x10027da7
inc esi
cmp esi, 0x65ca
jl 0x10027da2
inc edi
cmp edi, 0x8e6
jl 0x10027da0
mov byte [ebp - 4], 0x10
cmp dword [ebp - 0x2c], 0x6ab9
jge 0x10027e15
mov edx, str.zloqck_znj_adygy_fga_pcjq_jub_pxhrbl_unxgdfwj_wqitvil
mov ecx, 0x1007cb98
call fcn.10006a66
jmp 0x10027e15
mov dword [ebp - 4], 0xf
dec dword [ebp - 0x20]
jmp 0x10027d0e
dec dword [ebp - 0x18]
jmp 0x10027ce7
inc dword [ebp - 0x1c]
jmp 0x10027cc8
mov dword [ebp - 0x3c], ebx
mov dword [ebp - 0x180], 6
mov dword [ebp - 0x188], edx
mov dword [ebp - 0x198], 0x83d4
mov eax, dword [ebp - 0x3c]
mov eax, dword [ebp - 0x3c]
mov eax, dword [ebp - 0x3c]
mov eax, dword [ebp - 0x3c]
mov eax, dword [ebp - 0x3c]
add eax, 0x9523
je 0x10027f25
mov dword [ebp - 0x190], edx
mov dword [ebp - 0x21c], 0xb1857497
mov dword [ebp - 0x224], 0x2a60d4e0
mov dword [ebp - 0x3c], ebx
cmp dword [ebp - 0x3c], 0xfffffff9
jne 0x10027eb4
push ebx
lea eax, [ebp - 0x65]
mov byte [ebp - 0x65], bl
push 0x234e
push eax
mov ecx, 0x72c7
call fcn.10025dd0
add esp, 0xc
dec dword [ebp - 0x3c]
cmp dword [ebp - 0x3c], 0xfffffff9
je 0x10027e8e
xor edx, edx
inc edx
mov dword [ebp - 0x3c], 0x1c
jmp 0x10027f1d
lea eax, [ebp - 0x214]
mov dword [ebp - 0x214], 0xb656d4c0
push eax
lea eax, [ebp - 0x21c]
push eax
push edx
push 0x2db0
lea eax, [ebp - 0x3c]
push eax
push edx
push 0x1677
lea eax, [ebp - 0x224]
push eax
push 0x68c8
push edx
push 0x1d8d
lea eax, [ebp - 0x180]
push eax
push 0x36a
lea edx, [ebp - 0x188]
lea ecx, [ebp - 0x190]
call fcn.10023ef1
add esp, 0x34
dec dword [ebp - 0x3c]
push 1
pop edx
cmp dword [ebp - 0x3c], 0xffffffe4
jge 0x10027ebd
jmp 0x10027f3d
lea eax, [ebp - 0x198]
mov dword [ebp - 0x50], 0xffffffff
push eax
push ecx
xor dl, dl
call fcn.10023cd4
pop ecx
pop ecx
mov dword [ebp - 0xc0], esi
push 2
lea ecx, [ebp - 0x3d8]
mov dword [ebp - 0x19c], 4
mov dword [ebp - 0xc8], 0x10079bd8
call fcn.10004840
push 0x5d0a
push ebx
lea eax, [ebp - 0x3d8]
mov dword [ebp - 4], 0x12
push eax
mov dword [ebp - 0x20], 0x4a18885c
lea edx, [ebp - 0x448]
push ecx
call fcn.10023d89
xor eax, eax
mov dword [ebp - 0x20], ebx
add esp, 0x10
inc eax
jmp 0x1002800f
mov dword [ebp - 0x24], 0xfd94fe5f
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], ebx
jl 0x1002800c
mov dword [ebp - 0x1c], 0xe9323d1b
mov dword [ebp - 0x1c], ebx
jmp 0x10028002
mov dword [ebp - 0x18], 0xcbcef054
mov dword [ebp - 0x18], ebx
jmp 0x10027ffa
push eax
push ecx
lea eax, [ebp - 0x1a0]
mov dword [ebp - 0x1a0], 0x3e38693
push eax
push 0x297
push 0x75a4
push ecx
lea eax, [ebp - 0x3d8]
mov ecx, 0x2b2f
push eax
push 0x7382
call fcn.100260d6
add esp, 0x20
xor eax, eax
inc dword [ebp - 0x18]
inc eax
cmp dword [ebp - 0x18], eax
jle 0x10027fbd
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], eax
jle 0x10027fb1
dec dword [ebp - 0x24]
jns 0x10027fa5
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], eax
jle 0x10027f96
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x3d8]
call fcn.1000489d
mov eax, dword [ebp - 0xa0]
mov cl, byte [0x10079bd8]
mov byte [ebp - 0x3d], cl
mov dl, byte [eax]
call fcn.1002b4dd
xor edi, edi
mov byte [0x10079bd8], al
inc edi
push 1
lea ecx, [ebp - 0x1b8]
call fcn.10004840
push 1
push 0x93e
lea eax, [ebp - 0x410]
mov dword [ebp - 4], 0x13
push eax
lea eax, [ebp - 0x1b8]
mov dword [ebp - 0x94], 3
push eax
push 0x5ecc
mov ecx, 0x458b
mov dword [ebp - 0x24], 0xd219fa4a
call fcn.1002304d
mov eax, dword [ebp - 0x1b8]
add esp, 0x14
mov ecx, dword [eax]
xor eax, eax
test ecx, ecx
sete al
cmp eax, ecx
jge 0x10028109
mov dword [ebp - 0x18], ebx
cmp dword [ebp - 0x94], ebx
je 0x100280ca
push 1
lea eax, [ebp - 0x1b8]
push eax
push ecx
push 0x314d
lea edx, [ebp - 0x94]
call fcn.10023408
add esp, 0x10
jmp 0x100280f5
mov dword [ebp - 0x34], 0xfffffffe
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x18]
neg eax
mov dword [ebp - 0x94], eax
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x94]
mov eax, dword [ebp - 0x34]
mov dword [ebp - 0x18], 0xe45db0ff
lea eax, [ebp - 0x5f]
mov byte [ebp - 0x5f], bl
push eax
mov dl, 1
call fcn.10023927
pop ecx
jmp 0x100281c3
mov dword [ebp - 0x1c], 1
mov dword [ebp - 0x2c], 0xfffffffd
mov dword [ebp - 0x34], 5
dec dword [ebp - 0x24]
jne 0x10028180
mov eax, dword [ebp - 0x94]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x1c]
mov ecx, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x1b8]
imul ecx, dword [eax]
xor eax, eax
cmp ecx, 0x23ee1e16
setg al
mov dword [ebp - 0x2c], eax
cmp dword [ebp - 0x2c], ebx
je 0x1002815b
cmp dword [ebp - 0x1c], ebx
je 0x1002815b
xor esi, esi
inc esi
jmp 0x1002815d
mov esi, ebx
mov ecx, dword [ebp - 0x1c]
xor edx, edx
mov eax, dword [ebp - 0x1c]
cmp ecx, eax
setl dl
xor eax, eax
cmp esi, 9
sete al
add edx, eax
add edx, dword [ebp - 0x1c]
cmp edx, dword [ebp - 0x34]
jle 0x10028180
mov ecx, ebx
jmp 0x10028183
xor ecx, ecx
inc ecx
mov eax, dword [ebp - 0x1c]
imul eax, ecx
test eax, eax
jne 0x100281ab
cmp dword [ebp - 0x24], ebx
jne 0x100281ab
push ebx
lea eax, [ebp - 0x63]
mov byte [ebp - 0x63], bl
push eax
push 0x545d
mov edx, 0x7f2
call fcn.10026a57
jmp 0x100281c0
mov byte [ebp - 0x2d], bl
cmp byte [ebp - 0x2d], 0
je 0x100281c3
push ebx
push ecx
push 0x6792
call fcn.10023008
add esp, 0xc
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x1b8]
call fcn.1000489d
mov eax, edi
mov cl, byte [edi + 0x10079bd8]
cdq
idiv dword [ebp - 0xc0]
mov byte [ebp - 0x67], cl
mov esi, edx
mov dl, byte [ebp - 0x3d]
call fcn.1002b4dd
mov ecx, dword [ebp - 0xa0]
mov dl, byte [esi + ecx]
mov cl, al
call fcn.1002b4dd
mov byte [edi + 0x10079bd8], al
lea edx, [ebp - 0x11c]
mov dword [ebp - 0x110], 0xffffffff
lea eax, [ebp - 0x110]
mov dword [ebp - 0x11c], 0xffffffff
push ebx
mov dword [ebp - 0x114], 0xb5486b6f
push eax
lea eax, [ebp - 0x114]
mov dword [ebp - 0x184], 0xfffffffd
mov dword [ebp - 0x298], 2
push eax
mov dword [ebp - 0x1a8], 1
call fcn.10024c95
add esp, 0xc
lea eax, [ebp - 0x114]
lea edx, [ebp - 0x110]
mov ecx, 0x7ccb
push eax
lea eax, [ebp - 0x11c]
push eax
push 0x1530
push 0x1b55
push 0x8d0
push 1
lea eax, [ebp - 0x1a8]
push eax
push ebx
lea eax, [ebp - 0x298]
push eax
push 1
push 0x4a62
lea eax, [ebp - 0x184]
push eax
push 0x67a8
call fcn.10026517
add esp, 0x34
lea eax, [ebp - 0x67]
lea edx, [ebp - 0x3d]
mov ecx, 0x633
push 1
push 1
push 1
push 0x7e09
push eax
push 0x4be1
push 0x17c4
push 0x5c
call fcn.100229ac
add esp, 0x20
inc edi
cmp edi, 4
jl 0x10028041
mov dword [ebp - 0x22c], 0x39924432
mov dword [ebp - 0x50], 0x31f145ba
mov dword [ebp - 0x18], ebx
jmp 0x1002830d
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x2f0], 0x64a6847d
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 3
jl 0x100282fc
mov dword [ebp - 0x2f0], ebx
cmp dword [ebp - 0x2f0], 0xfffffffa
jg 0x100283d0
mov dword [ebp - 0x18], 0x5a2d
cmp dword [ebp - 0x18], 0x5bf6
jle 0x100283a4
mov eax, ebx
mov dword [ebp - 0x24], ebx
mov esi, ebx
mov dword [ebp - 0x2c], ebx
mov ecx, esi
mov dword [ebp - 0x34], eax
mov esi, eax
mov edi, ebx
shl esi, cl
mov ecx, edi
mov eax, esi
shl eax, cl
lea ecx, [ebp - 0x4e8]
cdq
push edx
push eax
call fcn.10001a55
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x10028369
mov eax, dword [eax]
push eax
call fcn.10047e1c
pop ecx
push ebx
push 1
lea ecx, [ebp - 0x4e8]
call fcn.10004d0a
inc edi
cmp edi, 0x1baf
jl 0x1002834b
mov esi, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x24]
inc esi
mov dword [ebp - 0x2c], esi
cmp esi, 0x4c49
jl 0x10028340
inc eax
mov dword [ebp - 0x24], eax
cmp eax, 0x620
jl 0x1002833b
push ecx
xor dl, dl
call fcn.10023318
cmp dword [ebp - 0x18], 0x5815
pop ecx
jge 0x100283c1
push str.xepzq_mgampiv_snkbjljoq_lscdl
call fcn.10047e1c
pop ecx
or dword [ebp - 4], 0xffffffff
dec dword [ebp - 0x2f0]
jmp 0x10028319
push ecx
push ebx
sub esp, 0xc
lea eax, [ebp - 0x22c]
mov edx, 0x6a5a
mov ecx, 0x3735
push eax
call fcn.100241d7
mov eax, dword [ebp - 0xc8]
add esp, 0x18
mov eax, dword [eax]
mov dword [ebp - 0xb4], eax
mov dword [ebp - 0x4c], 0xc8b13eca
mov dword [ebp - 0x1c], 0x453
cmp dword [ebp - 0x1c], 0x526
jle 0x1002847d
mov dword [ebp - 0x24], ebx
mov edi, ebx
mov dword [ebp - 0x18], ebx
mov esi, ebx
mov dword [ebp - 0x2c], ebx
mov eax, edi
mov dword [ebp - 0x34], ebx
cdq
idiv esi
mov edi, dword [ebp - 0x24]
mov esi, edx
mov eax, esi
cdq
idiv ebx
mov eax, edi
mov ecx, edx
sar eax, cl
mov ecx, 0x1007cb98
cdq
push edx
push eax
call fcn.10004616
inc ebx
cmp ebx, 0x4219
jl 0x1002842d
mov esi, dword [ebp - 0x2c]
mov edi, dword [ebp - 0x18]
inc esi
mov dword [ebp - 0x2c], esi
push 0
pop ebx
cmp esi, 0x19a6
jl 0x10028420
inc edi
mov dword [ebp - 0x18], edi
cmp edi, 0x39d1
jl 0x1002841b
mov eax, dword [ebp - 0x24]
inc eax
mov dword [ebp - 0x24], eax
cmp eax, 0x6a91
jl 0x10028416
mov dword [ebp - 0x23c], 0xfffffffa
mov dword [ebp - 4], 0x16
cmp dword [ebp - 0x1c], 0x2e4
jge 0x100284a6
mov edx, str.poi_zfpual_mfbyi
mov ecx, 0x1007cb98
call fcn.10006a66
or dword [ebp - 4], 0xffffffff
cmp dword [ebp - 0x4c], ebx
je 0x10028652
push 1
lea ecx, [ebp - 0x308]
call fcn.10004840
push 0x351f
lea eax, [ebp - 0x3e8]
mov dword [ebp - 4], 0x18
push eax
push ecx
lea eax, [ebp - 0x308]
mov dword [ebp - 0x1c], 0xfffffffd
push eax
push 0x5e8e
push 1
push 0x23e1
mov edx, 0x4544
mov ecx, 0x10b
call fcn.10022abe
add esp, 0x1c
mov dword [ebp - 0x4c], ebx
cmp dword [ebp - 0x4c], ebx
jl 0x10028641
mov esi, 0x36b1
mov dword [ebp - 0x2ac], esi
mov dword [ebp - 0x2a8], esi
mov dword [ebp - 0x2a4], esi
mov dword [ebp - 0x2a0], esi
mov dword [ebp - 0x18], ebx
mov dword [ebp - 0x20], 0x3cc9f196
mov dword [ebp - 0x234], 1
cmp dword [ebp - 0x2a8], ebx
jne 0x10028573
cmp dword [ebp - 0x4c], ebx
jne 0x10028573
mov edx, ebx
jmp 0x10028576
xor edx, edx
inc edx
mov eax, dword [ebp - 0x308]
xor ecx, ecx
cmp dword [eax], ebx
setle cl
cmp ecx, dword [ebp - 0x2a4]
jge 0x10028594
cmp dword [ebp - 0x4c], ebx
jne 0x10028594
mov eax, ebx
jmp 0x10028597
xor eax, eax
inc eax
mov dword [ebp - 0x1c], 0xfffe
mov ecx, dword [ebp - 0x1c]
sub ecx, eax
xor eax, eax
add ecx, dword [ebp - 0x4c]
cmp ecx, 0xcf04
setne al
mov dword [ebp - 0x18], eax
mov ecx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x2a0]
sub ecx, eax
mov eax, dword [ebp - 0x2a4]
imul eax, ecx
imul eax, edx
cmp eax, 0xe283d1f0
sbb eax, eax
inc eax
mov dword [ebp - 0x20], eax
mov dword [ebp - 0x1c], ebx
jmp 0x10028633
mov dword [ebp - 0x20], ebx
jmp 0x1002862b
mov dword [ebp - 0x18], ebx
jmp 0x10028623
lea eax, [ebp - 0x4c]
mov dword [ebp - 0x18c], 0x69209a48
push eax
push 0x2225
push ecx
push ecx
push 0x2c28
lea eax, [ebp - 0x308]
push eax
push ecx
lea eax, [ebp - 0x18c]
push eax
lea eax, [ebp - 0x234]
push eax
push ecx
mov cl, 1
call fcn.10024192
add esp, 0x28
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], ebx
jle 0x100285e5
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], ebx
jle 0x100285e0
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], ebx
jle 0x100285db
dec dword [ebp - 0x4c]
jns 0x10028511
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x308]
call fcn.1000489d
jmp 0x10028678
push ecx
push 1
sub esp, 0xc
mov dword [ebp - 0x194], 0x73d
lea edx, [ebp - 0x194]
lea ecx, [ebp - 0x4c]
push 0x5038
call fcn.100241d7
add esp, 0x18
lea eax, [ebp - 0x4c]
mov edx, 0x34ec
push eax
push 1
push 0x66ba
push 0x3e73
push ebx
push ebx
lea ecx, [ebp - 0x23c]
call fcn.100234d9
mov eax, dword [ebp - 0xb4]
add esp, 0x18
dec eax
cmp eax, 0x29cd
ja 0x1002a303
mov dword [ebp - 0x2c], 0x6e9
cmp dword [ebp - 0x2c], 0x77c
jle 0x10028714
mov edi, ebx
mov esi, ebx
mov eax, edi
lea ecx, [ebp - 0x5f0]
cdq
idiv esi
mov eax, edx
cdq
push edx
push eax
call fcn.10001a55
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x100286e2
mov eax, dword [eax]
push eax
call fcn.10047e1c
pop ecx
push ebx
push 1
lea ecx, [ebp - 0x5f0]
call fcn.10004d0a
inc esi
cmp esi, 0x19d0
jl 0x100286c3
inc edi
cmp edi, 0x730b
jl 0x100286c1
push 0x3a8
call dword [sym.imp.USER32.dll_IsWindow]
cmp dword [ebp - 0x2c], 0x605
jge 0x10028728
push str.sjdrrqre_ogxl_ytelev_ospdvc_pbajzs_wdnk
call fcn.10047e1c
pop ecx
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x16c]
push 2
call fcn.10004840
lea eax, [ebp - 0x3ec]
mov dword [ebp - 4], 0x1b
push eax
push 1
push 0x29ce
push 0x3b51
push 0x29a9
push ecx
push 0x5bc
push ecx
mov dword [ebp - 0x20], 4
lea edx, [ebp - 0x16c]
mov dword [ebp - 0x2c], 0xffffffff
mov dword [ebp - 0x34], 6
push 0x6141
call fcn.100246f6
mov dword [ebp - 0x20], ebx
add esp, 0x24
cmp dword [ebp - 0x20], 1
jg 0x10028856
mov edi, dword [ebp - 0x16c]
push 1
lea ecx, [ebp - 0x39c]
call fcn.10004840
push ecx
lea edx, [ebp - 0x39c]
mov byte [ebp - 4], 0x1c
lea ecx, [ebp - 0x42c]
call fcn.1002422b
mov ecx, dword [ebp - 0x20]
add esp, 4
mov eax, dword [ebp - 0x16c]
cmp dword [eax + ecx*4], ebx
je 0x100287da
mov eax, dword [ebp - 0x39c]
mov dword [eax], 0x7525
mov eax, dword [ebp - 0x20]
xor ecx, ecx
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x20]
mov esi, dword [ebp - 0x20]
mov edx, dword [ebp - 0x16c]
mov eax, dword [edx + eax*4]
cmp eax, dword [edi + 4]
setle cl
xor eax, eax
cmp ecx, dword [edx + esi*4]
setge al
cmp eax, dword [ebp - 0x20]
jle 0x10028816
mov eax, dword [ebp - 0x16c]
cmp dword [eax], ebx
je 0x10028816
xor eax, eax
inc eax
jmp 0x10028818
mov eax, ebx
mov dword [ebp - 0x2c], eax
mov eax, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x34], 1
mov byte [ebp - 0x2d], bl
cmp byte [ebp - 0x2d], 0
je 0x1002883a
push ecx
mov dl, 1
call fcn.10023318
pop ecx
lea ecx, [ebp - 0x39c]
mov byte [ebp - 4], 0x1b
call fcn.1000489d
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], 1
jle 0x1002879a
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x16c]
call fcn.1000489d
lea eax, [ebp - 0xa0]
push eax
lea eax, [ebp - 0xc0]
push eax
push ecx
lea eax, [ebp - 0xc8]
push eax
push ecx
lea eax, [ebp - 0x3d]
push eax
lea eax, [ebp - 0xb4]
push eax
push 1
lea ecx, [ebp - 0x19c]
call fcn.1002424a
mov eax, dword [0x1007f178]
add esp, 0x20
mov ecx, 0x1007f178
push dword [eax + 4]
call fcn.1000cc1e
mov eax, dword [0x1007f178]
mov dword [eax + 4], eax
mov eax, dword [0x1007f178]
mov dword [eax], eax
mov eax, dword [0x1007f178]
mov dword [eax + 8], eax
mov dword [0x1007f17c], ebx
mov dword [ebp - 0x18], 0x261f9c28
mov dword [ebp - 0x50], 9
mov dword [ebp - 0x50], 0xa07e4fc2
mov dword [ebp - 0x18], 0xffffffeb
jmp 0x10028917
lea eax, [ebp - 0x244]
mov dword [ebp - 0x244], 0x6d4f2887
push eax
push 1
push 0x5ca8
push 0x3330
push ebx
mov dl, 1
mov ecx, 0x5e93
call fcn.10022c20
mov eax, dword [ebp - 0x18]
add esp, 0x14
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 0x18
jle 0x100288e4
mov dword [ebp - 0x98], ebx
mov dword [ebp - 0x20], 1
mov dword [ebp - 0x1c], 0xffffffff
mov dword [ebp - 0x34], ebx
mov dword [ebp - 0x20], 0xffffffe6
jmp 0x10028a4f
mov dword [ebp - 0x18], 0xfffffff8
lea ecx, [ebp - 0x2d8]
push 1
call fcn.10004840
push ecx
lea eax, [ebp - 0x2d8]
mov dword [ebp - 4], 0x1d
push 1
mov dword [ebp - 0x24], 0x277e
lea edx, [ebp - 0x27c]
push eax
mov ecx, 0x604e
call fcn.10024343
add esp, 0xc
mov dword [ebp - 0x18], ebx
jmp 0x100289d3
mov dword [ebp - 0x2c], 2
mov dword [ebp - 0x1c], ebx
jmp 0x100289a1
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0x118], 0xfffffffc
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 1
jl 0x10028990
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x2c]
cmp dword [ebp - 0x20], eax
jge 0x100289b5
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x118]
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x18]
add eax, 0xfffffff8
mov dword [ebp - 0x118], eax
mov dword [ebp - 0x1c], eax
dec dword [ebp - 0x18]
cmp dword [ebp - 0x18], 0xfffffff7
jle 0x10028984
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x1c]
cmp dword [ebp - 0x20], ebx
je 0x100289e9
xor ecx, ecx
inc ecx
jmp 0x100289eb
mov ecx, ebx
mov eax, dword [ebp - 0x2d8]
mov edx, dword [eax]
lea eax, [ecx + 3]
xor ecx, ecx
cmp eax, edx
setle cl
cmp ecx, edx
jg 0x10028a0a
cmp dword [ebp - 0x34], ebx
jne 0x10028a0a
mov ecx, ebx
jmp 0x10028a0d
xor ecx, ecx
inc ecx
mov eax, dword [ebp - 0x2d8]
cmp ecx, dword [eax]
jg 0x10028a1a
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x20]
xor ecx, ecx
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x1c]
cmp eax, 0xfffffff6
setl cl
mov dword [ebp - 0x1c], ecx
lea ecx, [ebp - 0x2d8]
or dword [ebp - 4], 0xffffffff
call fcn.1000489d
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], 6
jg 0x10028940
mov dword [ebp - 0x20], ebx
jmp 0x10028aa5
mov dword [ebp - 0x1a4], 0xfffffffb
mov dword [ebp - 0x1c], ebx
jmp 0x10028a81
push ebx
push ecx
push ecx
lea ecx, [ebp - 0x1a4]
call fcn.10025547
add esp, 0xc
dec dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 0xffffffe2
jl 0x10028a6d
push ecx
push 0x493b
push 1
push 0x4812
push ecx
mov ecx, 0x139f
call fcn.100244cf
add esp, 0x14
dec dword [ebp - 0x20]
cmp dword [ebp - 0x20], 0xffffffec
jne 0x10028a5e
mov dword [ebp - 0x1c], 0x7db3
cmp dword [ebp - 0x1c], 0x7ddb
jle 0x10028b51
push ebx
call dword [sym.imp.KERNEL32.dll_RemoveDirectoryW]
mov dword [ebp - 0x18], ebx
mov eax, ebx
mov dword [ebp - 0x24], ebx
mov esi, ebx
mov dword [ebp - 0x2c], ebx
cdq
mov edi, ebx
idiv esi
mov esi, dword [ebp - 0x18]
mov eax, edx
mov dword [ebp - 0x34], eax
cdq
idiv edi
mov eax, esi
mov ecx, edx
shl eax, cl
lea ecx, [ebp - 0x560]
cdq
push edx
push eax
call fcn.10001a55
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x10028b01
mov eax, dword [eax]
push eax
call fcn.10047e1c
pop ecx
push ebx
push 1
lea ecx, [ebp - 0x560]
call fcn.10004d0a
mov eax, dword [ebp - 0x34]
inc edi
cmp edi, 0x72e2
jl 0x10028ae0
mov esi, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x24]
inc esi
mov dword [ebp - 0x2c], esi
cmp esi, 0x7ba5
jl 0x10028ad3
inc eax
mov dword [ebp - 0x24], eax
cmp eax, 0x2ab9
jl 0x10028ace
mov eax, dword [ebp - 0x18]
inc eax
mov dword [ebp - 0x18], eax
cmp eax, 0x4698
jl 0x10028ac9
mov eax, dword [ebp - 0xc8]
add eax, 4
cmp dword [ebp - 0x1c], 0x7a4f
mov dword [ebp - 0x34], eax
jge 0x10028b71
push str.mkn_qwaiqn_qhc_oiwxthgj_cstwe_whg_xqylzj_vwalzvy_cuyzgykr_emlicuyy_xvmaaiix_nxefejkr_zdre_hze
call fcn.10047e1c
pop ecx
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x458]
push 3
call fcn.10004840
mov dword [ebp - 4], 0x20
mov dword [ebp - 0x18], 0x394643cd
mov dword [ebp - 0xd8], 0x63e3
mov dword [ebp - 0x24c], 0x91509cf1
mov dword [ebp - 0x18], ebx
jmp 0x10028bbc
mov ecx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x458]
mov dword [eax + ecx*4], 1
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 3
jl 0x10028ba9
push 0x7229
push 0x439a
push 1
push ecx
mov byte [ebp - 0x5e], bl
lea ecx, [ebp - 0x5e]
mov edx, 0x2aa9
call fcn.100259b5
add esp, 0x10
mov dword [ebp - 0x18], ebx
jmp 0x10028cc5
push dword [ebp - 0x27c]
movdqa xmm0, xmmword [0x1006f3f0]
lea eax, [ebp - 0x45c]
push eax
lea eax, [ebp - 0x46c]
mov dword [ebp - 0x178], ebx
push eax
push ebx
lea ecx, [ebp - 0x178]
mov dword [ebp - 0x174], ebx
movdqu xmmword [ebp - 0x46c], xmm0
mov dword [ebp - 0x170], ebx
call fcn.1001d482
push 0x3472
push 1
push ebx
push 0x76e3
push 0x7c45
push 0x7437
push 0x5156
push 0x703d
lea edx, [ebp - 0xd8]
mov byte [ebp - 4], 0x21
mov cl, 1
call fcn.1002492d
mov eax, dword [ebp - 0x178]
xor ecx, ecx
add esp, 0x20
cmp dword [eax + 4], ebx
setg cl
cmp ecx, dword [ebp - 0xd8]
jge 0x10028c92
cmp dword [ebp - 0xd8], ebx
jne 0x10028cd1
push ecx
push ecx
push 0x54c6
mov cl, 1
call fcn.10026a12
add esp, 0xc
jmp 0x10028cb3
push 0x4baf
push ebx
push ebx
push 0x7ed2
push 1
mov edx, 0x71e8
lea ecx, [ebp - 0x24c]
call fcn.10026ac6
add esp, 0x14
lea ecx, [ebp - 0x178]
mov byte [ebp - 4], 0x20
call fcn.1000489d
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 2
jle 0x10028bea
jmp 0x10028cdc
lea ecx, [ebp - 0x178]
call fcn.1000489d
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x458]
call fcn.1000489d
push 0x6da9
push 1
lea eax, [ebp - 0x60]
mov dword [ebp - 0x50], 0x77862fd4
push eax
push ecx
mov byte [ebp - 0x60], bl
push 0x47fe
call fcn.10022bed
add esp, 0x14
mov cl, 1
call fcn.10024575
mov dword [ebp - 0x18], 0xb743d837
mov dword [ebp - 0x2c], 0xbf
cmp dword [ebp - 0x2c], 0x346
jle 0x10028d76
mov edi, ebx
mov esi, ebx
mov eax, edi
lea ecx, [ebp - 0x5c0]
cdq
idiv esi
mov eax, edx
cdq
push edx
push eax
call fcn.10001a55
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x10028d4f
mov eax, dword [eax]
push eax
call fcn.10047e1c
pop ecx
push ebx
push 1
lea ecx, [ebp - 0x5c0]
call fcn.10004d0a
inc esi
cmp esi, 0x6ba9
jl 0x10028d30
inc edi
cmp edi, 0x1609
jl 0x10028d2e
mov dword [ebp - 0x1ac], 0xf1860ec0
cmp dword [ebp - 0x2c], 0xffffff44
jge 0x10028d94
push str.yjqoi_gwufjo_mcxtsk_rfesoirq_skhiugbx_szslb_qnzk_abeavogze_vifrbela_nfv_zxbovj_jmnsgygoy
call fcn.10047e1c
pop ecx
or dword [ebp - 4], 0xffffffff
mov dword [ebp - 0x18], ebx
jmp 0x10028dae
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x4b8], 0x20624039
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 3
jl 0x10028d9d
mov dword [ebp - 0x18], ebx
jmp 0x10028dd5
mov dword [ebp - 0x28], 0x1ca2961c
mov ecx, dword [ebp - 0x28]
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x4b8], ecx
cmp dword [ebp - 0x18], ebx
jne 0x10028ddb
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 2
jle 0x10028db9
push ecx
mov dl, 1
lea ecx, [ebp - 0x1ac]
call fcn.100245c0
pop ecx
mov byte [ebp - 0x88], bl
lea ecx, [ebp - 0x33c]
mov dword [ebp - 0x87], 0x26d03ab
mov byte [ebp - 0x83], 0xc
mov dword [ebp - 0x1c], 0xffff
mov dword [ebp - 0x20], 0x4bda99da
mov dword [ebp - 0x38], ebx
push 3
call fcn.10004840
mov dword [ebp - 4], 0x24
mov dword [ebp - 0x2c], 0x9c1c50d5
mov dword [ebp - 0x28], 0x1a2955e3
mov dword [ebp - 0x80], ebx
jmp 0x10028e4a
mov eax, dword [ebp - 0x80]
mov dword [ebp + eax*4 - 0xe0], 0x9be1
inc dword [ebp - 0x80]
cmp dword [ebp - 0x80], 2
jl 0x10028e39
push ecx
lea eax, [ebp - 0x33c]
push eax
push ecx
push ecx
push 0x2e6b
push 1
push ecx
push ecx
lea edx, [ebp - 0x80]
mov ecx, 0x3833
call fcn.10024827
add esp, 0x20
cmp dword [ebp - 0x1c], ebx
je 0x10028eab
push 1
push ecx
push ecx
mov edx, 0x4b67
mov ecx, 0x8b1
call fcn.10026c1a
add esp, 0xc
mov byte [ebp - 0x62], bl
lea eax, [ebp - 0x62]
push eax
push ecx
push 0x49f5
push ecx
xor cl, cl
call fcn.1002719e
add esp, 0x10
jmp 0x10028f4e
mov dword [ebp - 0x50], ebx
mov dword [ebp - 0x1c], ebx
jmp 0x10028f44
mov dword [ebp - 0x24], 0xf2887cf2
mov dword [ebp - 0x28], 0xccae
mov dword [ebp - 0x24], 1
cmp dword [ebp - 0x24], ebx
jl 0x10028f41
mov dword [ebp - 0x18], 0xfc2285fa
mov dl, 1
push 0x279b
call fcn.10024875
mov dword [ebp - 0x18], 1
pop ecx
cmp dword [ebp - 0x18], ebx
jl 0x10028f3c
mov dword [ebp - 0x2c], 5
mov eax, dword [ebp - 0x18]
cmp dword [ebp + eax*4 - 0xe0], ebx
jne 0x10028f2b
cmp dword [ebp - 0x28], ebx
je 0x10028f0b
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp + eax*4 - 0xe0]
mov dword [ebp - 0x20], eax
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp + eax*4 - 0xe0]
mov eax, dword [ebp - 0x2c]
mov dword [ebp - 0x2c], eax
mov eax, dword [ebp - 0x38]
mov dword [ebp - 0x20], eax
dec dword [ebp - 0x18]
jns 0x10028ef0
dec dword [ebp - 0x24]
jns 0x10028ed0
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 1
jle 0x10028eb6
mov eax, dword [ebp - 0x1c]
xor ecx, ecx
mov eax, dword [ebp - 0x33c]
mov esi, dword [eax + 4]
sub esi, dword [eax]
mov eax, dword [ebp - 0xdc]
cmp eax, 0xffffffff
mov eax, dword [ebp - 0x1c]
setg cl
xor edx, edx
cmp ecx, esi
setg dl
xor ecx, ecx
cmp edx, eax
setge cl
sub ecx, dword [ebp - 0x20]
je 0x10028f8e
cmp dword [ebp - 0xe0], ebx
je 0x10028f8e
mov eax, dword [ebp - 0xdc]
mov eax, dword [ebp - 0x1c]
xor edx, edx
mov eax, dword [ebp - 0x1c]
mov ecx, dword [ebp - 0xe0]
mov eax, dword [ebp - 0x20]
add ecx, 0x883eb999
cmp ecx, eax
lea ecx, [ebp - 0x33c]
sete dl
mov dword [ebp - 0x20], edx
mov eax, dword [ebp - 0x20]
inc eax
neg eax
sbb eax, eax
inc eax
mov dword [ebp - 0x2c], eax
mov eax, dword [ebp - 0x2c]
mov dword [ebp - 0x28], eax
or dword [ebp - 4], 0xffffffff
call fcn.1000489d
push 0xa
pop eax
mov word [ebp - 0x8c], ax
mov dword [ebp - 0x20], 0x43d8
mov dword [ebp - 0x24], 0xa3c47aa2
mov dword [ebp - 0x28], 0x1511
cmp dword [ebp - 0x28], 0x18f1
jle 0x10029055
push ebx
call dword [sym.imp.KERNEL32.dll_ClearCommBreak]
mov edi, ebx
mov dword [ebp - 0x1c], ebx
mov dword [ebp - 0x18], ebx
mov dword [ebp - 0x2c], ebx
mov dword [ebp - 0x24], 0x30df
mov esi, edi
mov ebx, 0xf85
mov edi, dword [ebp - 0x2c]
mov eax, esi
mov ecx, 0x1007cb98
cdq
push edx
push eax
call fcn.10004616
add esi, edi
dec ebx
jne 0x10029019
mov esi, dword [ebp - 0x18]
add edi, esi
dec dword [ebp - 0x24]
mov dword [ebp - 0x2c], edi
mov edi, dword [ebp - 0x1c]
jne 0x1002900f
inc esi
mov dword [ebp - 0x18], esi
cmp esi, 0x7ad3
jl 0x10029005
inc edi
mov dword [ebp - 0x1c], edi
cmp edi, 0x686f
jl 0x10029002
mov dword [ebp - 0x2c0], ebx
mov dword [ebp - 0x2bc], ebx
mov dword [ebp - 0x2b8], ebx
mov dword [ebp - 0x2b4], ebx
mov dword [ebp - 4], 0x25
cmp dword [ebp - 0x28], 0x1335
jge 0x1002908c
mov edx, str.nbizgimd_diomyijcp_tshailgep_dghzr_xye_suu_pcnmbite
mov ecx, 0x1007cb98
call fcn.10006a66
or dword [ebp - 4], 0xffffffff
mov dword [ebp - 0x28], 0x46ed4d34
mov dword [ebp - 0xac], ebx
mov dword [ebp - 0xc4], 1
mov dword [ebp - 0xa8], 0xffffffff
mov dword [ebp - 0x24], 0x8364b2cb
mov dword [ebp - 0x38], 0xa1111cd
mov dword [ebp - 0x2c], 0xfffd
mov dword [ebp - 0x1c], ebx
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x20]
cmp dword [ebp - 0x20], ebx
je 0x10029101
xor ecx, ecx
inc ecx
jmp 0x10029103
mov ecx, ebx
mov eax, dword [ebp - 0x20]
xor edx, edx
cmp ecx, eax
setg dl
xor ecx, ecx
imul edx, dword [ebp - 0x20]
mov eax, dword [ebp - 0x20]
cmp eax, edx
setle cl
cmp ecx, dword [ebp - 0x20]
jne 0x100291d1
mov dword [ebp - 0x1c], 0x69b42c51
mov dword [ebp - 0x28], 0x4abf0a64
mov dword [ebp - 0x18], 0x26243a5d
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x20]
sub eax, 3
jne 0x10029150
cmp dword [ebp - 0x20], ebx
jne 0x10029150
mov ecx, ebx
jmp 0x10029153
xor ecx, ecx
inc ecx
mov eax, dword [ebp - 0x1c]
imul eax, ecx
cmp eax, 0x8064
jg 0x1002916a
cmp dword [ebp - 0x1c], ebx
je 0x1002916a
xor eax, eax
inc eax
jmp 0x1002916c
mov eax, ebx
mov dword [ebp - 0x24], eax
mov eax, dword [ebp - 0x24]
mov dword [ebp - 0x28], eax
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x18], 0xffffffff
mov dword [ebp - 0x18], 3
cmp dword [ebp - 0x18], ebx
jl 0x10029318
mov byte [ebp - 0x2d], bl
cmp byte [ebp - 0x2d], 0
je 0x100291c7
push 0x1c7c
push 1
push 0x1693
push 0x2be7
push 1
push ebx
mov edx, 0xa0b
mov ecx, 0x43e6
call fcn.100234d9
add esp, 0x18
dec dword [ebp - 0x18]
jns 0x10029198
jmp 0x10029318
push 1
lea ecx, [ebp - 0x2e4]
call fcn.10004840
lea eax, [ebp - 0x2e4]
mov dword [ebp - 4], 0x27
push eax
push ecx
push 1
mov dword [ebp - 0x18], 0xcdbbf84
lea edx, [ebp - 0x428]
push 0x6717
call fcn.10022cb1
add esp, 0x10
cmp dword [ebp - 0x28], ebx
je 0x10029227
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0xac], eax
mov eax, dword [ebp - 0x20]
cmp dword [ebp - 0xac], eax
jle 0x10029227
xor eax, eax
inc eax
jmp 0x10029229
mov eax, ebx
mov dword [ebp - 0xc4], eax
mov dword [ebp - 0x24], 0xe831e341
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0x2b8]
mov eax, dword [ebp - 0x28]
dec eax
neg eax
sbb eax, eax
neg eax
cmp eax, 0xfffffffb
sbb eax, eax
inc eax
mov dword [ebp - 0xa8], eax
mov eax, dword [ebp - 0xa8]
mov dword [ebp - 0x24], ebx
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x2b4]
mov eax, dword [ebp - 0x20]
dec eax
neg eax
sbb eax, eax
neg eax
sub eax, dword [ebp - 0x2bc]
neg eax
sbb eax, eax
inc eax
mov dword [ebp - 0x18], eax
mov eax, dword [ebp - 0x38]
mov ecx, dword [ebp - 0x24]
neg ecx
sbb ecx, ecx
inc ecx
sub ecx, dword [ebp - 0xa8]
mov eax, dword [ebp - 0x2b4]
neg ecx
sbb ecx, ecx
inc ecx
sub ecx, eax
imul eax, ecx, 0x6a26
cmp eax, 0x5732
jg 0x100292b0
mov eax, dword [ebp - 0xc4]
mov dword [ebp - 0x18], 8
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x2e4]
mov ecx, dword [eax]
cmp ecx, 1
jge 0x100292d3
test ecx, ecx
je 0x100292d3
xor edx, edx
inc edx
jmp 0x100292d5
mov edx, ebx
xor eax, eax
cmp edx, ecx
setne al
test eax, eax
jg 0x100292e9
cmp dword [ebp - 0x2c], ebx
jne 0x100292e9
mov edx, ebx
jmp 0x100292ec
xor edx, edx
inc edx
mov eax, dword [ebp - 0x1c]
xor ecx, ecx
cmp edx, eax
mov eax, dword [ebp - 0x2e4]
setg cl
xor edx, edx
cmp ecx, dword [eax]
lea ecx, [ebp - 0x2e4]
setg dl
sub edx, dword [ebp - 0x24]
mov dword [ebp - 0x24], edx
or dword [ebp - 4], 0xffffffff
call fcn.1000489d
push 0x1d15
push ecx
push ecx
lea eax, [ebp - 0xac]
push eax
push 0x6d3c
lea eax, [ebp - 0xc4]
push eax
lea eax, [ebp - 0xa8]
push eax
push ecx
push ecx
mov cl, 1
call fcn.10025613
add esp, 0x24
mov dword [ebp - 0xb8], ebx
mov edi, 0xca4b38b4
push 2
pop esi
push 1
push 0x3fd8
mov dword [ebp - 0x24], 0x20624039
mov ecx, 0x111e
mov dword [ebp - 0x268], 0x8cf5a8b0
push 0x2f2d
call fcn.100248e5
mov dword [ebp - 0x24], ebx
add esp, 0xc
cmp dword [ebp - 0x24], ebx
jge 0x10029473
mov dword [ebp - 0x1c], ebx
mov dword [ebp - 0x18], ebx
jmp 0x100293a2
cmp dword [ebp - 0x18], 2
jl 0x10029391
cmp esi, 2
jne 0x100297aa
mov dword [ebp - 0x1c], 0x399841b3
xor ecx, ecx
mov dword [ebp - 0x20], 3
inc ecx
mov dword [ebp - 0x24], 0xe81d534a
mov dword [ebp - 0x330], edi
mov dword [ebp - 0x32c], edi
mov dword [ebp - 0x328], edi
mov dword [ebp - 0x324], edi
mov dword [ebp - 0x18], ebx
jmp 0x100294be
push 0x479b
push 1
mov edx, 0x6ce1
call fcn.10024b96
movzx edx, byte [ebp + esi - 0x87]
mov eax, esi
sub eax, dword [ebp - 0xb8]
add esp, 4
movzx eax, byte [ebp + eax - 0x8a]
push ebx
push 0x517c
movzx eax, word [ebp + eax*2 - 0x8c]
mov ecx, eax
and eax, edx
or ecx, edx
mov edx, 0xff2
sub ecx, eax
movzx eax, byte [ebp + esi - 0x88]
mov word [ebp + eax*2 - 0x8c], cx
lea ecx, [ebp - 0xb8]
call fcn.10024343
add esp, 0xc
add esi, 2
cmp esi, 6
jb 0x10029353
push 0x7d2d
push ecx
lea eax, [ebp - 0x240]
mov dword [ebp - 0x240], 5
push eax
push ecx
mov cl, 1
call fcn.1002719e
add esp, 0x10
mov ecx, dword [ebp - 0xc]
mov eax, 0x1007f178
pop edi
pop esi
mov dword fs:[0], ecx
pop ebx
mov esp, ebp
pop ebp
ret