Function at 0x10001b15
Capabilities:
Log keystrokes

Disassembly:
mov eax, 0x1005f333
call fcn.1005ecf4
sub esp, 0x1f8
mov dword [ebp - 0x1c], 1
push ebx
xor ebx, ebx
mov dword [ebp - 0x28], 0x95d7c154
mov dword [ebp - 0x30], 0x8ebcce3f
push esi
mov byte [ebp - 0x1d], bl
push edi
mov dword [ebp - 0x10], esp
mov dword [ebp - 0xb8], edx
mov dword [ebp - 0xa4], ecx
mov dword [ebp - 0x154], ebx
cmp byte [ebp - 0x1d], bl
je 0x10001b63
push ebx
call dword [sym.imp.GDI32.dll_DeleteObject]
mov dword [ebp - 0x1c], ebx
cmp dword [ebp - 0x1c], 0xfffffff7
je 0x10001c34
mov edi, 0xee85ec41
mov dword [ebp - 0x28], 0xcc9f71d6
mov dword [ebp - 0x2c], 0xaa6f4ed8
mov dword [ebp - 0x18], ebx
jmp 0x10001b96
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x7c], 0x11c15747
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 2
jl 0x10001b88
cmp dword [ebp - 0x1c], ebx
je 0x10001ba6
xor esi, esi
inc esi
jmp 0x10001ba8
mov esi, ebx
mov eax, dword [ebp - 0x7c]
cmp edi, eax
mov eax, dword [ebp - 0x7c]
sbb edx, edx
xor ecx, ecx
neg edx
cmp edx, eax
setle cl
lea eax, [ecx + 0x40e66cec]
xor ecx, ecx
add eax, esi
cmp eax, 0x64939e63
setne cl
imul eax, ecx, 0xced6
cmp eax, dword [ebp - 0x78]
jge 0x10001be1
cmp dword [ebp - 0x78], ebx
jne 0x10001be1
mov edx, ebx
jmp 0x10001be4
xor edx, edx
inc edx
mov eax, dword [ebp - 0x1c]
xor ecx, ecx
cmp edx, eax
setle cl
imul ecx, dword [ebp - 0x1c]
cmp ecx, 3
jg 0x10001bfa
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x1c]
add eax, dword [ebp - 0x1c]
mov dword [ebp - 0x28], eax
cmp dword [ebp - 0x28], 9
sbb eax, eax
xor edx, edx
inc eax
mov dword [ebp - 0x28], eax
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x1c]
mov ecx, dword [ebp - 0x7c]
mov eax, dword [ebp - 0x1c]
inc ecx
cmp ecx, eax
setl dl
mov dword [ebp - 0x2c], edx
dec dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 0xfffffff7
jne 0x10001b75
mov dword [ebp - 0x18], 0x41e55969
lea ecx, [ebp - 0x134]
mov dword [ebp - 0x30], 0xade2167f
mov dword [ebp - 0x30], 0x8974b666
mov dword [ebp - 0x30], 0xffffffff
mov dword [ebp - 0x30], 0x924c0001
mov dword [ebp - 0x30], ebx
mov dword [ebp - 0x30], 0x963ba20b
mov dword [ebp - 0x30], 0x9f6d4a0d
mov dword [ebp - 0x30], 0x14eb4c8f
mov dword [ebp - 0x30], 0xffffffff
mov dword [ebp - 0x30], 7
push 3
call fcn.1000354d
mov dword [ebp - 0x30], 0xfffffffb
xor edx, edx
mov dword [ebp - 0x30], 0xc75daa08
inc edx
mov dword [ebp - 0x28], 0xffffffff
mov dword [ebp - 0x1c], ebx
jmp 0x10001cb8
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0xbc], 9
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], edx
jl 0x10001ca7
mov dword [ebp - 0x1c], ebx
jmp 0x10001cd5
mov ecx, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x134]
mov dword [eax + ecx*4], 0xcc80fc3a
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 3
jl 0x10001cc2
mov dword [ebp - 0x18], ebx
jmp 0x10001cf1
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0xbc], 0xffffffff
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], edx
jl 0x10001ce0
dec dword [ebp - 0x28]
lea ecx, [ebp - 0x134]
call fcn.100035d0
push 0x6c
mov dword [ebp - 0x74], 0x2b007905
mov dword [ebp - 0x70], 0xe032b01
mov dword [ebp - 0x6c], 0xe020304
mov dword [ebp - 0x68], 0x6693102
mov byte [ebp - 0x64], 0x33
pop eax
mov word [ebp - 0x106], ax
mov dword [ebp - 0x18], 0x8256a9ef
mov dword [ebp - 0x24], 0xfffffff7
mov dword [ebp - 0x2c], 1
mov dword [ebp - 0x30], ebx
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x18]
cmp dword [ebp - 0x18], ebx
jne 0x10001d67
mov ecx, dword [ebp - 0x18]
xor edx, edx
mov eax, dword [ebp - 0x18]
cmp ecx, eax
setge dl
add edx, 3
jne 0x10001d67
mov eax, ebx
jmp 0x10001d6a
xor eax, eax
inc eax
cmp dword [ebp - 0x18], eax
jge 0x10001d79
cmp dword [ebp - 0x24], ebx
je 0x10001d79
xor eax, eax
inc eax
jmp 0x10001d7b
mov eax, ebx
mov dword [ebp - 0x2c], eax
mov dword [ebp - 0x18], ebx
jmp 0x10001d94
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x148], 0x4dbb
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 2
jl 0x10001d83
mov dword [ebp - 0x24], ebx
jmp 0x10001db0
mov eax, dword [ebp - 0x24]
mov dword [ebp + eax*4 - 0x148], 0x5440
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], 2
jl 0x10001d9f
push 2
pop edi
mov dword [ebp - 0x2c], edi
mov esi, ebx
mov dword [ebp - 0x18], 0x8256a9ef
mov dword [ebp - 0x24], 0xfffffff7
mov dword [ebp - 0x38], 1
mov dword [ebp - 0x30], ebx
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x18]
cmp dword [ebp - 0x18], ebx
jne 0x10001df7
mov ecx, dword [ebp - 0x18]
xor edx, edx
mov eax, dword [ebp - 0x18]
cmp ecx, eax
setge dl
add edx, 3
jne 0x10001df7
mov eax, ebx
jmp 0x10001dfa
xor eax, eax
inc eax
cmp dword [ebp - 0x18], eax
jge 0x10001e09
cmp dword [ebp - 0x24], ebx
je 0x10001e09
xor eax, eax
inc eax
jmp 0x10001e0b
mov eax, ebx
mov dword [ebp - 0x38], eax
mov dword [ebp - 0x18], ebx
jmp 0x10001e24
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x150], 0x4dbb
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 2
jl 0x10001e13
mov dword [ebp - 0x24], ebx
jmp 0x10001e40
mov eax, dword [ebp - 0x24]
mov dword [ebp + eax*4 - 0x150], 0x5440
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], 2
jl 0x10001e2f
cmp edi, 0xc
jne 0x10001e5b
movzx eax, byte [ebp + edi - 0x74]
dec edi
add edi, eax
lea esi, [eax + 1]
jmp 0x1000224a
mov dword [ebp - 0x38], 6
mov dword [ebp - 0x34], 1
mov dword [ebp - 0x1c], ebx
jmp 0x10001e7f
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0xe0], 0xf825
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 4
jl 0x10001e6e
mov dword [ebp - 0x1c], ebx
jmp 0x10001e98
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0x48], 0xd8a87013
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 1
jl 0x10001e8a
mov byte [ebp - 0x1d], bl
cmp byte [ebp - 0x1d], bl
je 0x10001eb2
push ebx
push 0x24d5
call dword [sym.imp.KERNEL32.dll_IsDBCSLeadByteEx]
mov dword [ebp - 0x48], ebx
jmp 0x10001fe7
mov dword [ebp - 0x24], 0x73ff82ff
mov dword [ebp - 0x30], 0x39d6b9c2
mov dword [ebp - 0x30], 4
mov dword [ebp - 0x30], 0x2314af1
mov dword [ebp - 0x28], 1
mov dword [ebp - 0x40], 0xe70d28e4
mov dword [ebp - 0x18], ebx
jmp 0x10001ef6
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x140], ebx
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 3
jl 0x10001ee9
mov dword [ebp - 0x24], ebx
jmp 0x10001fa8
mov dword [ebp - 0x1c], 0x5fcb
mov dword [ebp - 0x18], ebx
jmp 0x10001f21
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x15c], 0xffffffff
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 2
jl 0x10001f10
mov eax, dword [ebp - 0x24]
cmp dword [ebp + eax*4 - 0xe0], ebx
jne 0x10001f39
inc dword [ebp - 0x28]
mov eax, dword [ebp - 0x38]
cmp dword [ebp - 0x1c], ebx
jne 0x10001f44
mov eax, dword [ebp - 0x15c]
mov edx, dword [ebp - 0x1c]
sub edx, 0xf13bcf59
neg edx
sbb edx, edx
xor ecx, ecx
inc edx
imul edx, dword [ebp - 0x34]
mov eax, dword [ebp - 0xd8]
cmp edx, eax
mov eax, dword [ebp - 0x48]
setg cl
sub ecx, eax
jne 0x10001f73
cmp dword [ebp - 0x40], ebx
jne 0x10001f73
mov eax, ebx
jmp 0x10001f76
xor eax, eax
inc eax
cmp eax, dword [ebp - 0xd4]
jne 0x10001f8e
mov eax, dword [ebp - 0x24]
cmp dword [ebp + eax*4 - 0xe0], ebx
jne 0x10001f8e
mov eax, ebx
jmp 0x10001f91
xor eax, eax
inc eax
mov dword [ebp - 0x38], eax
mov byte [ebp - 0x1d], bl
cmp byte [ebp - 0x1d], bl
je 0x10001fa5
push ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_SetHandleInformation]
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], 3
jle 0x10001f04
mov eax, dword [ebp - 0x48]
mov ecx, dword [ebp + eax*4 - 0xe0]
mov eax, dword [ebp - 0x48]
mov dword [ebp + eax*4 - 0xe0], ecx
mov dword [ebp - 0x34], 3
cmp dword [ebp - 0x34], ebx
jl 0x10001fe4
mov dword [ebp - 0x30], 0xfffffff8
inc dword [ebp - 0x140]
dec dword [ebp - 0x34]
jns 0x10001fd2
inc dword [ebp - 0x48]
cmp dword [ebp - 0x48], 3
jle 0x10001eba
movzx edx, byte [ebp + edi - 0x73]
mov eax, edi
push dword [ebp - 0xa8]
sub eax, esi
movdqa xmm0, xmmword [0x1006cbe0]
movdqu xmmword [ebp - 0x1b4], xmm0
mov dword [ebp - 0xa0], ebx
mov dword [ebp - 0x9c], ebx
movzx eax, byte [ebp + eax - 0x76]
mov dword [ebp - 0x98], ebx
movzx ecx, word [ebp + eax*2 - 0x110]
mov eax, ecx
and eax, edx
add eax, eax
sub ecx, eax
movzx eax, byte [ebp + edi - 0x74]
add ecx, edx
mov word [ebp + eax*2 - 0x110], cx
lea eax, [ebp - 0x1a4]
push eax
lea eax, [ebp - 0x1b4]
push eax
push ebx
lea ecx, [ebp - 0xa0]
call fcn.10005d79
mov dword [ebp - 0x18], 0xffff
xor edx, edx
mov dword [ebp - 0x34], 0xebda1846
inc edx
mov dword [ebp - 0x24], 0xc1676565
mov dword [ebp - 0x30], 0xfffffffe
mov dword [ebp - 0x1c], ebx
jmp 0x10002092
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0x3c], 0x28405cef
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], edx
jl 0x10002084
mov dword [ebp - 0x1c], ebx
jmp 0x100020ad
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0x1c0], 0xb986af20
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 3
jl 0x1000209c
mov esi, dword [ebp - 0xa0]
mov dword [ebp - 0x40], esi
cmp dword [esi + 8], ebx
je 0x10002115
cmp dword [ebp - 0x3c], edx
jl 0x100020cb
cmp dword [ebp - 0x34], ebx
je 0x100020ce
mov eax, dword [ebp - 0x34]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x3c]
mov ecx, dword [ebp - 0x3c]
mov eax, dword [ebp - 0xa0]
add ecx, 0x88a9
mov edi, dword [esi + 8]
mov esi, dword [eax]
mov eax, dword [ebp - 0x3c]
imul eax, ecx
xor ecx, ecx
cmp eax, edi
setge cl
cmp esi, ecx
jne 0x100020ff
mov eax, edx
test esi, esi
jne 0x10002101
mov eax, ebx
add eax, edi
imul eax, eax, 0x189d
cmp eax, dword [ebp - 0x3c]
jl 0x10002115
mov eax, edx
cmp dword [ebp - 0x3c], ebx
jne 0x10002117
mov eax, ebx
imul eax, eax, 0xc877
test eax, eax
jne 0x1000212b
mov eax, dword [ebp - 0x40]
mov ecx, ebx
cmp dword [eax + 8], ebx
je 0x1000212d
mov ecx, edx
mov eax, dword [ebp - 0xa0]
xor edx, edx
cmp ecx, dword [eax + 0xc]
mov eax, dword [ebp - 0x24]
setne dl
xor ecx, ecx
cmp edx, eax
setle cl
mov dword [ebp - 0x24], ecx
mov dword [ebp - 0x18], 0x14
jmp 0x10002230
mov dword [ebp - 0x1c], ebx
mov eax, dword [ebp - 0x3c]
mov eax, dword [ebp - 0x3c]
mov eax, dword [ebp - 0x34]
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x34]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x3c]
mov eax, dword [ebp - 0x1c]
add eax, 3
imul eax, dword [ebp - 0x1c]
test eax, eax
je 0x100021bb
mov dword [ebp - 0x34], 3
cmp dword [ebp - 0x34], ebx
jl 0x1000222d
mov dword [ebp - 0x1c], 1
mov byte [ebp - 0x1d], bl
cmp byte [ebp - 0x1d], bl
je 0x100021b4
push 0x202a
push ebx
push 0x1b79
push ebx
push ebx
push 0x2120
call dword [sym.imp.KERNEL32.dll_MultiByteToWideChar]
dec dword [ebp - 0x34]
jns 0x1000218d
jmp 0x1000222d
xor edx, edx
inc edx
mov dword [ebp - 0x38], edx
mov dword [ebp - 0x40], 0xdaee255
mov dword [ebp - 0x24], ebx
jmp 0x10002227
mov eax, dword [ebp - 0xa0]
mov dword [ebp - 0x28], 0x6307
mov eax, dword [eax]
mov dword [ebp - 0x38], eax
cmp dword [ebp - 0x1c], ebx
jne 0x100021ea
mov eax, dword [ebp - 0x3c]
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x38]
sub ecx, eax
neg ecx
sbb ecx, ecx
inc ecx
imul ecx, dword [ebp - 0x28]
imul eax, ecx, 0xfffa
test eax, eax
je 0x1000220b
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x1c]
xor ecx, ecx
mov eax, dword [ebp - 0x30]
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x40]
cmp eax, edx
setge cl
mov dword [ebp - 0x1bc], ecx
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], 0x1d
jl 0x100021cd
dec dword [ebp - 0x18]
cmp dword [ebp - 0x18], 2
jg 0x10002154
lea ecx, [ebp - 0xa0]
call fcn.100035d0
mov edi, dword [ebp - 0x2c]
mov esi, ebx
add edi, 2
mov dword [ebp - 0x2c], edi
cmp edi, 0x11
jb 0x10001dbe
xor eax, eax
mov dword [ebp - 0x160], 7
mov word [ebp - 0x102], ax
lea ecx, [ebp - 0x174]
mov word [ebp - 0x174], ax
lea eax, [ebp - 0x110]
push eax
mov dword [ebp - 0x164], ebx
call fcn.100039c6
push 4
lea ecx, [ebp - 0x11c]
mov dword [ebp - 4], ebx
call fcn.1000354d
mov byte [ebp - 4], 1
mov dword [ebp - 0x28], 0x782a
cmp dword [ebp - 0x28], 0x7ad0
jle 0x100022ff
mov edi, ebx
mov dword [ebp - 0x38], ebx
mov esi, ebx
mov dword [ebp - 0x2c], ebx
mov eax, edi
mov dword [ebp - 0x30], ebx
cdq
mov edi, 0x425d
idiv esi
mov dword [ebp - 0x40], edx
mov esi, edx
mov eax, ebx
mov ecx, 0x10079358
cdq
push edx
push eax
call fcn.100033d6
add ebx, esi
dec edi
jne 0x100022cb
mov esi, dword [ebp - 0x2c]
inc esi
mov dword [ebp - 0x2c], esi
push edi
mov edi, dword [ebp - 0x38]
pop ebx
cmp esi, 0x6ed4
jl 0x100022b9
inc edi
mov dword [ebp - 0x38], edi
cmp edi, 0x2cbf
jl 0x100022b4
mov dword [ebp - 0x1c], ebx
jmp 0x10002315
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0xe8], 0x5f70
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 2
jl 0x10002304
mov byte [ebp - 4], 2
cmp dword [ebp - 0x28], 0x7734
jge 0x10002337
mov edx, str.bcyl_jwzt_uwxopbd
mov ecx, 0x10079358
call fcn.1000562f
xor edx, edx
inc edx
mov dword [ebp - 4], edx
mov dword [ebp - 0x1c], ebx
jmp 0x10002376
mov ecx, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x11c]
mov dword [eax + ecx*4], 0x6f5020f8
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 4
jl 0x10002363
mov edi, dword [ebp - 0x11c]
mov dword [edi + 8], edx
mov dword [ebp - 0x30], 0x1d2b
cmp dword [ebp - 0x30], 0x416
jge 0x1000240c
lea eax, [ebp - 0x60]
push eax
push 0x100679c4
call fcn.10046a9b
jmp 0x100023fc
dec eax
mov dword [ebp - 0x60], eax
lea eax, [ebp - 0xa8]
push eax
lea eax, [ebp - 0xd0]
push eax
push str._ld__ld
call fcn.10046a9b
mov ecx, dword [ebp - 0xd0]
add esp, 0xc
mov esi, dword [ebp - 0xa8]
cmp ecx, esi
jg 0x100023e4
lea eax, [esi - 1]
add eax, ecx
cdq
idiv ecx
push eax
push str._ld_n
jmp 0x100023f7
mov eax, ecx
cdq
idiv esi
xor eax, eax
test edx, edx
setg al
inc eax
push eax
push 0x10067a18
call fcn.10046ccf
mov eax, dword [ebp - 0x60]
pop ecx
pop ecx
test eax, eax
jne 0x100023a5
dec eax
xor edx, edx
mov dword [ebp - 0x60], eax
inc edx
mov eax, dword [edi + 8]
mov dword [ebp - 0x18], edx
cmp dword [ebp + eax*4 - 0xe8], ebx
jne 0x10002440
mov dword [ebp - 0x18], ebx
jmp 0x10002431
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0xe8], 0x770a
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 2
jl 0x10002420
dec dword [edi + 8]
jns 0x10002385
lea ecx, [ebp - 0x11c]
mov byte [ebp - 4], bl
call fcn.100035d0
xor eax, eax
lea edi, [ebp - 0x110]
stosd dword es:[edi], eax
push 0xfffffffffffffff8
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
pop edi
mov dword [ebp - 0x1c], edi
mov dword [ebp - 0x24], 0x570a50b5
push 7
mov dword [ebp - 0x40], edi
pop eax
mov dword [ebp - 0x38], eax
mov dword [ebp - 0x1c], 5
cmp dword [ebp - 0x1c], eax
jl 0x100025a4
mov dword [ebp - 0x18], 1
mov dword [ebp - 0x34], 6
mov dword [ebp - 0x2c], 0x2ddb74a7
mov dword [ebp - 0x24], 0x289a6957
cmp dword [ebp - 0x18], 0x8ae505b0
jne 0x100024d4
mov ecx, dword [ebp - 0x24]
xor edx, edx
mov eax, dword [ebp - 0x24]
cmp ecx, eax
setle dl
sub edx, dword [ebp - 0x1c]
add edx, dword [ebp - 0x24]
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x30], edx
xor edx, edx
cmp dword [ebp - 0x30], 0xfffffffd
setne dl
xor ecx, ecx
cmp edx, eax
setle cl
mov dword [ebp - 0x18], ecx
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x1c]
xor ecx, ecx
add eax, 0x5c14225a
imul eax, dword [ebp - 0x1c]
mov dword [ebp - 0x34], eax
mov eax, dword [ebp - 0x34]
cmp eax, edi
setne cl
sub ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x2c], ecx
je 0x10002563
mov dword [ebp - 0x28], 0xe7374489
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x1c]
sub ecx, eax
mov dword [ebp - 0x24], ecx
mov eax, dword [ebp - 0x28]
cmp eax, dword [ebp - 0x34]
jle 0x10002512
mov eax, dword [ebp - 0x34]
mov eax, dword [ebp - 0x28]
xor edx, edx
test eax, eax
mov eax, dword [ebp - 0x1c]
sets dl
xor ecx, ecx
cmp edx, eax
setne cl
mov dword [ebp - 0x34], ecx
mov eax, dword [ebp - 0x34]
mov eax, dword [ebp - 0x2c]
mov dword [ebp - 0x18], 0xffff
mov eax, dword [ebp - 0x18]
mov edx, dword [ebp - 0x40]
mov eax, dword [ebp - 0x28]
neg edx
sbb edx, edx
xor ecx, ecx
neg edx
cmp edx, eax
mov eax, dword [ebp - 0x38]
setle cl
xor edx, edx
cmp ecx, eax
setge dl
sub edx, dword [ebp - 0x1c]
neg edx
sbb edx, edx
inc edx
mov dword [ebp - 0x24], edx
jmp 0x1000256f
mov dword [ebp - 0x30], 0xf4f
cmp dword [ebp - 0x30], ebx
jne 0x100025a4
mov dword [ebp - 0x34], ebx
jmp 0x10002591
mov byte [ebp - 0x1d], bl
cmp byte [ebp - 0x1d], 0
je 0x1000258e
push 0x1328
push 0x111b
push ebx
call dword [sym.imp.USER32.dll_EnableMenuItem]
inc dword [ebp - 0x34]
cmp dword [ebp - 0x34], 2
jl 0x10002574
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 7
jge 0x10002480
push dword [ebp - 0xb8]
lea ecx, [ebp - 0x1a4]
call fcn.100034eb
mov byte [ebp - 4], 4
mov eax, 0x909b7928
mov dword [ebp - 0x30], 0xffffffff
mov dword [ebp - 0x34], ebx
mov dword [ebp - 0x2c], 0xcdcb363f
mov dword [ebp - 0x24], 1
mov dword [ebp - 0xcc], eax
mov dword [ebp - 0xc8], eax
mov dword [ebp - 0xc4], eax
mov dword [ebp - 0xc0], eax
mov dword [ebp - 0x18], ebx
mov dword [ebp - 0x28], 0xd3388a01
mov dword [ebp - 0x38], 0xa3e8
mov eax, dword [ebp - 0x18]
dec dword [ebp - 0x18]
test eax, eax
je 0x1000266c
mov eax, dword [ebp - 0x18]
imul eax, dword [ebp - 0x18]
mov dword [ebp - 0x2c], eax
mov edx, dword [ebp - 0x38]
mov eax, dword [ebp - 0x28]
dec edx
neg edx
sbb edx, edx
xor ecx, ecx
neg edx
cmp eax, edx
setne cl
imul ecx, dword [ebp - 0x2c]
mov dword [ebp - 0x28], ecx
mov eax, dword [ebp - 0x28]
add eax, dword [ebp - 0x30]
je 0x10002639
mov eax, dword [ebp - 0x38]
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0x34]
cmp dword [ebp - 0xc0], ebx
je 0x1000264d
mov eax, dword [ebp - 0xc0]
mov ecx, dword [ebp - 0xc0]
xor edx, edx
mov eax, dword [ebp - 0x24]
cmp eax, ecx
setle dl
cmp edx, dword [ebp - 0x24]
jne 0x1000266c
cmp dword [ebp - 0x28], ebx
je 0x1000266c
xor ecx, ecx
inc ecx
jmp 0x1000266e
mov ecx, ebx
mov eax, dword [ebp - 0x34]
sub ecx, eax
mov dword [ebp - 0xc4], ecx
mov dword [ebp - 0x30], ebx
mov byte [ebp - 0x1d], bl
cmp byte [ebp - 0x1d], 0
je 0x10002691
push ebx
push 0x147d
call dword [sym.imp.GDI32.dll_GetWindowOrgEx]
mov byte [ebp - 0x1d], bl
cmp byte [ebp - 0x1d], 0
je 0x100026b0
push ebx
push 0x955
push 0x1358
push 0x3e9
call dword [sym.imp.GDI32.dll_MoveToEx]
mov dword [ebp - 0x18], 0x769e
cmp dword [ebp - 0x18], 0x799d
jle 0x10002719
mov dword [ebp - 0x28], ebx
mov edi, ebx
mov esi, ebx
mov ebx, dword [ebp - 0x28]
mov dword [ebp - 0x38], esi
mov dword [ebp - 0x30], esi
mov dword [ebp - 0x2c], 0x13a6
mov eax, edi
mov ecx, 0x10079358
or eax, ebx
or eax, esi
cdq
push edx
push eax
call fcn.100033d6
dec esi
dec dword [ebp - 0x2c]
jne 0x100026d7
mov esi, dword [ebp - 0x38]
inc esi
mov dword [ebp - 0x38], esi
cmp esi, 0x3251
jl 0x100026cd
inc edi
push 0
pop ebx
cmp edi, 0xa9a
jl 0x100026c5
mov eax, dword [ebp - 0x28]
inc eax
mov dword [ebp - 0x28], eax
cmp eax, 0x1cc3
jl 0x100026c3
mov byte [ebp - 4], 5
cmp dword [ebp - 0x18], 0x73d0
jge 0x10002753
mov edx, str.xga_doeipu_nymgsmbh_hfnuvs_ttc_msy_ugcnsg_ntqjo_lxjlzs_kfxocy
mov ecx, 0x10079358
call fcn.1000562f
jmp 0x10002753
push 0x5c
pop eax
mov dword [ebp - 4], 4
mov ecx, ebx
push 2
mov byte [ebp - 0x5c], bl
mov dword [ebp - 0x5b], 0x36a20364
mov byte [ebp - 0x57], 0x4c
mov word [ebp - 0x50], ax
pop esi
cmp esi, 2
jne 0x10002780
push 4
pop ecx
push ecx
pop esi
jmp 0x100027a9
movzx edx, byte [ebp + esi - 0x5b]
mov eax, esi
sub eax, ecx
movzx eax, byte [ebp + eax - 0x5e]
movzx ecx, word [ebp + eax*2 - 0x50]
mov eax, ecx
and eax, edx
add eax, eax
sub ecx, eax
movzx eax, byte [ebp + esi - 0x5c]
add ecx, edx
mov word [ebp + eax*2 - 0x50], cx
mov ecx, ebx
add esi, 2
cmp esi, 6
jb 0x10002774
xor eax, eax
mov dword [ebp - 0xec], 7
mov word [ebp - 0x4e], ax
lea ecx, [ebp - 0x100]
mov word [ebp - 0x100], ax
lea eax, [ebp - 0x50]
push eax
mov dword [ebp - 0xf0], ebx
call fcn.100039c6
mov byte [ebp - 4], 7
mov dword [ebp - 0x50], ebx
mov dword [ebp - 0x18], ebx
mov dword [ebp - 0x18], ebx
jmp 0x10002817
mov byte [ebp - 0x1d], bl
cmp byte [ebp - 0x1d], 0
je 0x10002801
push ebx
push 0x215c
call dword [sym.imp.USER32.dll_TranslateMDISysAccel]
mov byte [ebp - 0x1d], bl
cmp byte [ebp - 0x1d], 0
je 0x10002814
push ebx
push ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_EnumResourceNamesW]
dec dword [ebp - 0x18]
cmp dword [ebp - 0x18], 0xffffffee
jg 0x100027ec
mov dword [ebp - 0x24], 0x7325
cmp dword [ebp - 0x24], 0x7666
jle 0x1000288f
push ebx
call dword [sym.imp.USER32.dll_DestroyMenu]
mov edi, ebx
mov dword [ebp - 0x38], ebx
mov eax, edi
mov dword [ebp - 0x2c], 0x5c88
mov dword [ebp - 0x28], eax
mov esi, ebx
mov edi, esi
mov dword [ebp - 0x30], ebx
xor edi, eax
mov eax, ebx
mov ecx, 0x10079358
or eax, edi
cdq
push edx
push eax
call fcn.100033d6
inc ebx
cmp ebx, 0x47b6
jl 0x1000284e
mov eax, dword [ebp - 0x28]
inc esi
push 0
pop ebx
cmp esi, 0x67f4
jl 0x10002847
dec eax
dec dword [ebp - 0x2c]
mov dword [ebp - 0x28], eax
jne 0x10002845
mov edi, dword [ebp - 0x38]
inc edi
mov dword [ebp - 0x38], edi
cmp edi, 0x1119
jl 0x10002839
mov dword [ebp - 0x1c], 1
mov dword [ebp - 0x2c], 0x95d7c154
mov dword [ebp - 0x30], 0x8ebcce3f
mov byte [ebp - 0x1d], bl
cmp byte [ebp - 0x1d], 0
je 0x100028b4
push ebx
call dword [sym.imp.GDI32.dll_DeleteObject]
mov dword [ebp - 0x1c], ebx
cmp dword [ebp - 0x1c], 0xfffffff7
je 0x10002a12
mov dword [ebp - 0x2c], 0x7ec9
cmp dword [ebp - 0x2c], 0x81f4
jle 0x1000292c
mov eax, ebx
mov dword [ebp - 0x28], ebx
mov edi, ebx
mov esi, ebx
lea ecx, [esi + edi]
shl eax, cl
lea ecx, [ebp - 0x1d8]
cdq
push edx
push eax
call fcn.10001ac4
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x100028f7
mov eax, dword [eax]
push eax
call fcn.10046ccf
pop ecx
push ebx
push 1
lea ecx, [ebp - 0x1d8]
call fcn.100038da
mov eax, dword [ebp - 0x28]
inc esi
cmp esi, 0x63c2
jl 0x100028da
inc edi
cmp edi, 0x62cf
jl 0x100028d8
inc eax
mov dword [ebp - 0x28], eax
cmp eax, 0x2dd5
jl 0x100028d6
cmp dword [ebp - 0x2c], 0x7c96
jge 0x10002940
push str.hhchiyjgh_sgiqjxtc_ynxo_avcuz_rbaqlfr_yqdpfugf_yilprxl_zpqzhit_trncxzye_jmi_ttlurv_tjvgvqpcd_pkignl
call fcn.10046ccf
pop ecx
mov dword [ebp - 4], 7
mov dword [ebp - 0x2c], 0xcc9f71d6
mov dword [ebp - 0x30], 0xaa6f4ed8
mov dword [ebp - 0x18], ebx
jmp 0x1000296b
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x84], 0x11c15747
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 2
jl 0x1000295a
cmp dword [ebp - 0x1c], ebx
je 0x1000297b
xor esi, esi
inc esi
jmp 0x1000297d
mov esi, ebx
mov eax, dword [ebp - 0x84]
mov ecx, 0xee85ec41
cmp ecx, eax
mov eax, dword [ebp - 0x84]
sbb edx, edx
xor ecx, ecx
neg edx
cmp edx, eax
setle cl
lea eax, [ecx + 0x40e66cec]
xor ecx, ecx
add eax, esi
cmp eax, 0x64939e63
setne cl
imul eax, ecx, 0xced6
cmp eax, dword [ebp - 0x80]
jge 0x100029c1
cmp dword [ebp - 0x80], ebx
jne 0x100029c1
mov edx, ebx
jmp 0x100029c4
xor edx, edx
inc edx
mov eax, dword [ebp - 0x1c]
xor ecx, ecx
cmp edx, eax
setle cl
imul ecx, dword [ebp - 0x1c]
cmp ecx, 3
jg 0x100029da
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x1c]
add eax, dword [ebp - 0x1c]
mov dword [ebp - 0x2c], eax
cmp dword [ebp - 0x2c], 9
sbb eax, eax
xor edx, edx
inc eax
mov dword [ebp - 0x2c], eax
mov eax, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x1c]
mov ecx, dword [ebp - 0x84]
mov eax, dword [ebp - 0x1c]
inc ecx
cmp ecx, eax
setl dl
mov dword [ebp - 0x30], edx
dec dword [ebp - 0x1c]
jmp 0x100028b7
mov byte [ebp - 4], 0xa
cmp dword [ebp - 0x24], 0x6fe2
jge 0x10002a4c
mov edx, str.toj_wqdlthb_nkbqhoc_hhast_fenkbxv_sexexvt_hddbl_aqw
mov ecx, 0x10079358
call fcn.1000562f
jmp 0x10002a4c
push 0xfffffffffffffff8
pop edi
push 0x5f
pop eax
mov dword [ebp - 4], 7
mov ecx, ebx
push 2
mov byte [ebp - 0x4c], bl
mov word [ebp - 0x4b], 0x1c8
mov byte [ebp - 0x49], 0x9e
mov word [ebp - 0x54], ax
pop esi
cmp esi, 2
jne 0x10002a78
push esi
pop ecx
jmp 0x10002aa1
movzx edx, byte [ebp + esi - 0x4b]
mov eax, esi
sub eax, ecx
movzx eax, byte [ebp + eax - 0x4e]
movzx ecx, word [ebp + eax*2 - 0x54]
mov eax, ecx
and eax, edx
add eax, eax
sub ecx, eax
movzx eax, byte [ebp + esi - 0x4c]
add ecx, edx
mov word [ebp + eax*2 - 0x54], cx
mov ecx, ebx
add esi, 2
cmp esi, 4
jb 0x10002a6f
xor eax, eax
xor ecx, ecx
mov word [ebp - 0x52], ax
inc ecx
mov dword [ebp - 0x1c], 0xffffffff
mov dword [ebp - 0x18], ecx
mov dword [ebp - 0x28], edi
mov dword [ebp - 0x18], ebx
jmp 0x10002ace
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x44], ebx
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], ecx
jl 0x10002ac4
mov byte [ebp - 0x1d], bl
cmp byte [ebp - 0x1d], 0
je 0x10002af2
push ebx
push 0x71b
push 0x1eb9
push 0x23e1
call dword [sym.imp.GDI32.dll_SetPixel]
mov dword [ebp - 0x1c], ebx
jmp 0x10002cc1
push 2
lea ecx, [ebp - 0xb4]
call fcn.1000354d
mov byte [ebp - 4], 0xc
mov dword [ebp - 0x30], ebx
mov dword [ebp - 0x18], ebx
jmp 0x10002b26
mov ecx, dword [ebp - 0x18]
mov eax, dword [ebp - 0xb4]
mov dword [eax + ecx*4], 0x8a137b18
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 2
jl 0x10002b13
mov eax, dword [ebp - 0xb4]
mov dword [eax], ebx
mov dword [ebp - 0x28], 0x67f8b4df
lea ecx, [ebp - 0x128]
push 4
call fcn.1000354d
mov dword [ebp - 0x18], ebx
jmp 0x10002b5d
mov ecx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x128]
or dword [eax + ecx*4], 0xffffffff
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 4
jl 0x10002b4d
mov ecx, dword [ebp - 0x28]
xor edx, edx
mov eax, dword [ebp - 0x44]
cmp eax, ecx
mov ecx, dword [ebp - 0x28]
setle dl
cmp edx, 4
sbb eax, eax
neg eax
add ecx, eax
mov eax, dword [ebp - 0x1c]
neg ecx
sbb ecx, ecx
mov esi, dword [ebp + eax*4 - 0x44]
neg ecx
mov eax, 0x9689
sub eax, ecx
xor ecx, ecx
cmp eax, 0x997
mov eax, dword [ebp - 0xb4]
setle cl
xor edx, edx
cmp esi, ecx
sete dl
xor ecx, ecx
cmp edx, dword [eax]
mov eax, dword [ebp - 0x1c]
setle cl
mov dword [ebp - 0x30], ecx
xor ecx, ecx
mov eax, dword [ebp + eax*4 - 0x44]
cmp dword [ebp - 0x30], eax
setg cl
xor edx, edx
add ecx, 0x4ed3
mov dword [ebp - 0x18], ecx
mov eax, dword [ebp - 0x1c]
mov ecx, dword [ebp + eax*4 - 0x44]
mov eax, dword [ebp - 0x18]
cmp eax, ecx
mov eax, dword [ebp - 0x28]
setl dl
xor ecx, ecx
cmp edx, eax
mov eax, dword [ebp - 0x1c]
setge cl
neg ecx
mov dword [ebp - 0x30], ecx
xor ecx, ecx
cmp dword [ebp - 0x30], eax
setle cl
mov dword [ebp - 0x28], ecx
xor ecx, ecx
mov eax, dword [ebp - 0x28]
cmp eax, 0x981c
mov eax, dword [ebp - 0x128]
setl cl
imul ecx, ecx, 0xe327
mov dword [eax + 4], ecx
lea ecx, [ebp - 0x128]
call fcn.100035d0
mov eax, dword [ebp - 0xb4]
inc dword [eax]
mov eax, dword [eax]
test eax, eax
jle 0x10002b34
cmp eax, 0x36511f0b
jle 0x10002c40
cmp dword [ebp - 0x1c], ebx
jne 0x10002c40
mov eax, ebx
jmp 0x10002c43
xor eax, eax
inc eax
mov dword [ebp - 0x28], eax
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp + eax*4 - 0x44]
mov ecx, dword [ebp - 0x1c]
neg ecx
sbb ecx, ecx
xor eax, eax
neg ecx
cmp ecx, 0x34f12ce3
setg al
cmp eax, 0xffffffff
mov eax, dword [ebp - 0x18]
sbb ecx, ecx
xor edx, edx
inc ecx
cmp ecx, eax
mov eax, dword [ebp - 0x1c]
setge dl
cmp dword [ebp + eax*4 - 0x44], edx
jg 0x10002c7d
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0x18], eax
mov edx, dword [ebp - 0x18]
mov eax, dword [ebp - 0xb4]
mov dword [eax], edx
mov eax, dword [ebp - 0x1c]
mov ecx, dword [ebp + eax*4 - 0x44]
imul eax, edx, 0x72fd
xor edx, edx
cmp ecx, eax
mov eax, dword [ebp - 0x44]
setge dl
xor ecx, ecx
cmp edx, eax
setle cl
mov dword [ebp - 0x30], ecx
lea ecx, [ebp - 0xb4]
mov byte [ebp - 4], 7
call fcn.100035d0
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], ebx
jle 0x10002afa
xor eax, eax
mov dword [ebp - 0x178], 7
mov word [ebp - 0x18c], ax
lea ecx, [ebp - 0x18c]
lea eax, [ebp - 0x54]
mov dword [ebp - 0x17c], ebx
push eax
call fcn.100039c6
mov byte [ebp - 4], 0xd
mov dword [ebp - 0x18], 0x5d6c05ba
mov dword [ebp - 0x18], ebx
jmp 0x10002d13
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x200], 0xb4074dd
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 4
jl 0x10002d02
mov dword [ebp - 0x18], 0xe
jmp 0x10002d2f
mov dword [ebp - 0x2c], 0x4c8d3c89
inc dword [ebp - 0x2c]
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 0x19
jle 0x10002d22
mov dword [ebp - 0x54], ebx
mov dword [ebp - 0x1c], 0xb57fd546
mov dword [ebp - 0x34], 0xfffffffa
mov dword [ebp - 0x2c], 0x2857
cmp dword [ebp - 0x2c], 0x296d
jle 0x10002d7d
mov esi, ebx
mov edi, ebx
mov eax, edi
mov ecx, 0x10079358
xor eax, esi
cdq
push edx
push eax
call fcn.100033d6
inc edi
cmp edi, 0x5b12
jl 0x10002d5a
inc esi
cmp esi, 0x2dd3
jl 0x10002d58
mov dword [ebp - 0x18], 0x25d8bac8
mov byte [ebp - 4], 0xe
cmp dword [ebp - 0x2c], 0x27a1
jge 0x10002dbe
mov edx, str.rykuipb_qjqn_wwfwcf
mov ecx, 0x10079358
call fcn.1000562f
jmp 0x10002dbe
mov dword [ebp - 4], 0xd
mov dword [ebp - 0x1c], ebx
cmp dword [ebp - 0x1c], 5
mov eax, 0xc6ae49a2
jg 0x100030d3
mov dword [ebp - 0x94], eax
mov dword [ebp - 0x90], eax
mov dword [ebp - 0x8c], eax
mov dword [ebp - 0x88], eax
mov dword [ebp - 0x2c], 0xfffffffc
mov dword [ebp - 0x30], 0x43d03942
mov dword [ebp - 0x2c], 0x4643
cmp dword [ebp - 0x2c], 0x465e
jle 0x10002e57
mov esi, ebx
mov edi, ebx
mov eax, esi
lea ecx, [ebp - 0x1f0]
cdq
idiv edi
mov eax, edx
cdq
push edx
push eax
call fcn.10001ac4
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x10002e30
mov eax, dword [eax]
push eax
call fcn.10046ccf
pop ecx
push ebx
push 1
lea ecx, [ebp - 0x1f0]
call fcn.100038da
inc edi
cmp edi, 0x7608
jl 0x10002e11
inc esi
cmp esi, 0x5c9c
jl 0x10002e0f
cmp dword [ebp - 0x2c], 0x4610
jge 0x10002e6b
push str.blqxuxt_mnswdk_xlngpodx_vynb_qvyxqlt_xrudc_vrlnqer_hyv_xegiyu_qfmfehg_tpbgwcuio
call fcn.10046ccf
pop ecx
mov dword [ebp - 4], 0xd
mov eax, dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 1
ja 0x10002e7e
mov eax, dword [ebp - 0x1c]
mov ecx, dword [ebp - 0x90]
xor edx, edx
mov eax, dword [ebp - 0x1c]
cmp ecx, eax
mov eax, dword [ebp - 0x1c]
setl dl
sub edx, eax
imul edx, dword [ebp - 0x90]
test edx, edx
jne 0x10002ea1
push dword [ebp - 0xf0]
cmp dword [ebp - 0xec], 8
lea eax, [ebp - 0x100]
push ebx
cmovae eax, dword [ebp - 0x100]
lea ecx, [ebp - 0x1a4]
push eax
call fcn.10003d42
cmp eax, 0xffffffff
je 0x10003119
push 0xffffffffffffffff
push ebx
lea ecx, [ebp - 0x18c]
push ecx
push 1
push eax
lea ecx, [ebp - 0x1a4]
call fcn.10003a4e
jmp 0x100030d3
mov ecx, dword [ebp - 0xa4]
lea eax, [ebp - 0x1a4]
push eax
lea edx, [ebp - 0x174]
call fcn.10005806
pop ecx
push ebx
push 1
lea ecx, [ebp - 0x18c]
call fcn.10003de5
push ebx
push 1
lea ecx, [ebp - 0x100]
call fcn.10003de5
push ebx
push 1
lea ecx, [ebp - 0x1a4]
call fcn.10003de5
push ebx
push 1
lea ecx, [ebp - 0x174]
call fcn.10003de5
mov ecx, dword [ebp - 0xc]
mov eax, dword [ebp - 0xa4]
pop edi
pop esi
mov dword fs:[0], ecx
pop ebx
mov esp, ebp
pop ebp
ret