Function at 0x1000671d
Capabilities:
Get common file path

Disassembly:
mov eax, 0x10058ecc
call fcn.10058764
sub esp, 0x698
push ebx
xor ebx, ebx
mov dword [ebp - 0x1c], 0xffffffff
push esi
mov byte [ebp - 0x31], bl
push edi
mov dword [ebp - 0x10], esp
cmp byte [ebp - 0x31], bl
je 0x1000674f
push 0x1b10
call dword [sym.imp.KERNEL32.dll_IsValidCodePage]
mov dword [ebp - 0x1c], ebx
jmp 0x1000675e
push ebx
call fcn.10006435
dec dword [ebp - 0x1c]
pop ecx
cmp dword [ebp - 0x1c], 0xfffffffe
jl 0x10006754
mov dword [ebp - 0x1c], 0xa362
mov dword [ebp - 0x310], 0xffffffff
mov dword [ebp - 0x30c], 0xffffffff
mov dword [ebp - 0x308], 0xffffffff
mov dword [ebp - 0x304], 0xffffffff
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0x308], eax
mov dword [ebp - 0x1c], ebx
jmp 0x100067c4
mov dword [ebp - 0x30], 0xda62
mov dword [ebp - 0x3c], 0xfffffff9
mov eax, dword [ebp - 0x30]
mov dword [ebp - 0x308], eax
mov eax, dword [ebp - 0x308]
mov dword [ebp - 0x3c], eax
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 9
jg 0x100067a1
mov dword [ebp - 0x2c], 0x2c84
cmp dword [ebp - 0x2c], 0x2f32
jle 0x1000682e
mov esi, ebx
mov dword [ebp - 0x28], ebx
mov edi, ebx
mov ecx, edi
mov dword [ebp - 0x30], esi
mov dword [ebp - 0x3c], ebx
sar esi, cl
mov ecx, ebx
mov eax, esi
shl eax, cl
mov ecx, 0x10073a98
cdq
push edx
push eax
call fcn.1000ab96
inc ebx
cmp ebx, 0x6c45
jl 0x100067eb
mov esi, dword [ebp - 0x28]
inc edi
push 0
pop ebx
cmp edi, 0x5330
jl 0x100067e1
inc esi
mov dword [ebp - 0x28], esi
cmp esi, 0xbe4
jl 0x100067df
push 0x1a50
push ebx
call dword [sym.imp.KERNEL32.dll_GetWindowsDirectoryA]
mov dword [ebp - 4], ebx
cmp dword [ebp - 0x2c], 0x2b84
jge 0x10006849
mov edx, str.bkj_qvi_ggsd_trugeq_vhnaqnvyh_hdjdfde
mov ecx, 0x10073a98
call fcn.1000d257
or dword [ebp - 4], 0xffffffff
xor ecx, ecx
mov dword [ebp - 0x1c], ebx
inc ecx
jmp 0x10006884
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0xa8], ecx
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], ecx
jl 0x10006877
mov dword [ebp - 0x2c], 0x64ea
cmp dword [ebp - 0x2c], 0x667c
jle 0x100068f6
push ebx
push 0x1eb0
push 0x1ad1
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_MoveToEx]
mov edi, ebx
mov esi, ebx
mov dword [ebp - 0x28], ebx
mov ebx, esi
mov esi, 0x349
mov eax, ebx
mov ecx, 0x10073a98
xor eax, edi
cdq
push edx
push eax
call fcn.1000ab96
dec ebx
dec esi
jne 0x100068c6
mov esi, dword [ebp - 0x28]
inc esi
mov dword [ebp - 0x28], esi
cmp esi, 0x2ed3
jl 0x100068bf
inc edi
push 0
pop ebx
cmp edi, 0x4aa9
jl 0x100068ba
mov dword [ebp - 0xa8], ebx
jmp 0x10006919
lea eax, [ebp - 0x71]
mov byte [ebp - 0x71], bl
push 0x7db3
push eax
xor cl, cl
call fcn.100044a8
inc dword [ebp - 0xa8]
pop ecx
pop ecx
cmp dword [ebp - 0xa8], 7
jl 0x100068fe
mov dword [ebp - 4], 2
cmp dword [ebp - 0x2c], 0x6174
jge 0x1000695f
mov edx, str.nqopi_nxbljutv_ytkyztiy_qtrfzto_faivbqrd_jsnvvcx_eqc_alfqwvi_huuazyhr
mov ecx, 0x10073a98
call fcn.1000d257
jmp 0x1000695f
or dword [ebp - 4], 0xffffffff
xor ecx, ecx
mov eax, dword [0x10396924]
inc ecx
test cl, al
jne 0x100069a5
or eax, ecx
mov dword [0x10396924], eax
mov dword [ebp - 4], 4
mov dword [0x10396954], ebx
mov dword [0x10396958], ebx
call fcn.1000d173
push 0x1005a1a5
mov dword [0x10396954], eax
call fcn.10040ad2
or dword [ebp - 4], 0xffffffff
pop ecx
xor ecx, ecx
inc ecx
mov dword [ebp - 0x1c], ebx
jmp 0x100069b8
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0x50], 0xfffffffc
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], ecx
jl 0x100069aa
xor esi, esi
mov dword [ebp - 0x50], ebx
inc esi
cmp dword [ebp - 0x50], 0xffffffe9
je 0x10006ae0
mov dword [ebp - 0x18], ebx
lea ecx, [ebp - 0x4a4]
push 4
call fcn.1000adae
mov dword [ebp - 4], 5
mov dword [ebp - 0x28], ebx
mov dword [ebp - 0x28], 0x5098
cmp dword [ebp - 0x28], 0x5429
jle 0x10006a24
mov edi, ebx
mov dword [ebp - 0x30], ebx
mov ecx, ebx
mov eax, edi
shl eax, cl
mov ecx, 0x10073a98
cdq
push edx
push eax
call fcn.1000ab96
inc ebx
cmp ebx, 0xe61
jl 0x100069fc
inc edi
push 0
pop ebx
cmp edi, 0x9a3
jl 0x100069f9
mov dword [ebp - 0x30], esi
mov byte [ebp - 4], 6
cmp dword [ebp - 0x28], 0x4d4c
jge 0x10006a64
mov edx, str.dapjitlua_paojhwe_ohd_lryrlt_ubvukev_bwbb_sndwciwhb_hsvsr_sohbsm_rwncalv_kcvzslzxo
mov ecx, 0x10073a98
call fcn.1000d257
jmp 0x10006a64
push ecx
push ecx
lea eax, [ebp - 0x4a4]
mov dword [ebp - 4], 5
push eax
push ebx
push 0x1f9a
lea edx, [ebp - 0x458]
call fcn.10006180
add esp, 0x14
cmp dword [ebp - 0x50], ebx
jne 0x10006abc
mov eax, dword [ebp - 0x18]
xor edx, edx
mov eax, dword [ebp - 0x50]
mov eax, dword [ebp - 0x50]
mov eax, dword [ebp - 0x50]
mov ecx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x18]
cmp ecx, eax
mov ecx, ebx
setg dl
xor eax, eax
test edx, edx
setle al
mov dword [ebp - 0x28], eax
mov eax, dword [ebp - 0x28]
neg eax
cmp eax, 0xfffffffa
je 0x10006abe
mov ecx, esi
xor eax, eax
cmp ecx, 0xffffffff
lea ecx, [ebp - 0x4a4]
setle al
mov dword [ebp - 0x30], eax
or dword [ebp - 4], 0xffffffff
call fcn.1000ae31
dec dword [ebp - 0x50]
jmp 0x100069c3
cmp byte [0x10074bd0], 0
jne 0x1000a70b
push 2
lea ecx, [ebp - 0x4b0]
call fcn.1000adae
mov dword [ebp - 4], 8
mov dword [ebp - 0x18], 0x9bdba76a
mov dword [ebp - 0x1c], ebx
jmp 0x10006b20
mov ecx, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x4b0]
mov dword [eax + ecx*4], 0xffff
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 2
jl 0x10006b0d
mov dword [ebp - 0x30], 0x1540
cmp dword [ebp - 0x30], 0x1306
jge 0x10006cdb
lea eax, [ebp - 0xe0]
push eax
push 0x100619a8
call fcn.100407fb
pop ecx
jmp 0x10006cc5
dec eax
mov dword [ebp - 0xe0], eax
lea eax, [ebp - 0x254]
push eax
lea eax, [ebp - 0x58]
push eax
push str._ld__ld
call fcn.100407fb
add esp, 0xc
lea ecx, [ebp - 0x174]
push dword [ebp - 0x58]
call fcn.1000aed5
mov byte [ebp - 4], 9
mov eax, dword [ebp - 0x58]
mov dword [ebp - 0x30], ebx
test eax, eax
jle 0x10006bac
mov esi, dword [ebp - 0x174]
mov edi, ebx
push esi
push 0x100619a8
call fcn.100407fb
mov eax, dword [ebp - 0x58]
inc edi
pop ecx
add esi, 4
pop ecx
cmp edi, eax
jl 0x10006b94
mov edi, dword [ebp - 0x174]
lea ecx, [ebp - 0x164]
push eax
call fcn.1000aed5
mov byte [ebp - 4], 0xa
cmp dword [ebp - 0x58], 0
mov dword [ebp - 0x30], ebx
jle 0x10006bef
mov edi, dword [ebp - 0x164]
mov esi, ebx
push edi
push 0x100619a8
call fcn.100407fb
inc esi
add edi, 4
pop ecx
pop ecx
cmp esi, dword [ebp - 0x58]
jl 0x10006bd3
mov edi, dword [ebp - 0x174]
mov edx, dword [ebp - 0x170]
mov ecx, edi
mov esi, dword [ebp - 0x164]
mov eax, edx
sub eax, edi
mov byte [ebp - 0x240], bl
push dword [ebp - 0x240]
sar eax, 2
push eax
call fcn.1000dc7e
mov ecx, dword [ebp - 0x160]
mov byte [ebp - 0x2b0], bl
sub ecx, esi
push dword [ebp - 0x2b0]
sar ecx, 2
push esi
push dword [ebp - 0x160]
call fcn.1000ddc4
add esp, 0x14
mov byte [ebp - 0x31], 1
cmp dword [ebp - 0x58], 0
mov dword [ebp - 0x28], ebx
jle 0x10006c70
mov edx, edi
mov ecx, esi
sub edx, esi
mov eax, dword [edx + ecx]
add eax, dword [ecx]
cmp eax, dword [ebp - 0x254]
jg 0x10006c6d
mov eax, dword [ebp - 0x28]
add ecx, 4
inc eax
mov dword [ebp - 0x28], eax
cmp eax, dword [ebp - 0x58]
jl 0x10006c4f
jmp 0x10006c70
mov byte [ebp - 0x31], bl
cmp byte [ebp - 0x31], 0
mov ecx, 0x10062988
mov eax, 0x10062984
cmove eax, ecx
push eax
call fcn.10040d16
pop ecx
test esi, esi
je 0x10006ca5
push esi
call fcn.10040cc9
pop ecx
mov dword [ebp - 0x164], ebx
mov dword [ebp - 0x160], ebx
mov dword [ebp - 0x15c], ebx
mov byte [ebp - 4], 8
test edi, edi
je 0x10006cc6
push edi
call fcn.10040cc9
mov dword [ebp - 0x174], ebx
mov dword [ebp - 0x170], ebx
mov dword [ebp - 0x16c], ebx
pop ecx
mov eax, dword [ebp - 0xe0]
test eax, eax
jne 0x10006b51
dec eax
mov dword [ebp - 0xe0], eax
xor ecx, ecx
inc ecx
mov dword [ebp - 0x18], ecx
cmp dword [ebp - 0x18], ebx
jl 0x10006d3f
mov dword [ebp - 0x1c], ebx
jmp 0x10006cfc
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0xc0], 0x7a888ada
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], ecx
jl 0x10006ceb
mov dword [ebp - 0xc0], ebx
jmp 0x10006d32
push 0x3be3
push ecx
push ecx
push ebx
mov byte [ebp - 0x76], bl
lea ecx, [ebp - 0x76]
push 0x23cd
mov edx, 0x46bb
call fcn.10005223
add esp, 0x14
xor ecx, ecx
inc dword [ebp - 0xc0]
inc ecx
cmp dword [ebp - 0xc0], ecx
jle 0x10006d09
dec dword [ebp - 0x18]
jns 0x10006ce6
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x4b0]
call fcn.1000ae31
push 1
push ebx
push 0x17a7
push 0x3905
push 0xaa2
push 0x10074bd0
push 0x6719
push 0x41b1
push 0x4a9f
push 0x6f99
push 0x2c69
xor dl, dl
mov ecx, 0x5a61
call fcn.10004c8f
add esp, 0x2c
mov dword [ebp - 0x1dc], 0x477862f
lea eax, [ebp - 0x258]
mov dword [ebp - 0x260], 0xbb4f5ac3
mov dword [ebp - 0x1e4], 0xdfc9b996
lea edx, [ebp - 0x1e4]
mov dword [ebp - 0x28c], 0xfffffff6
push eax
lea eax, [ebp - 0x260]
mov dword [ebp - 0x1d8], 0x2c6f7398
push eax
lea eax, [ebp - 0x28c]
mov dword [ebp - 0x1ec], 0xddc4ea3c
push eax
lea eax, [ebp - 0x1d8]
mov dword [ebp - 0x258], 0x64a3a207
push eax
push ecx
push ecx
lea eax, [ebp - 0x1dc]
push eax
push ebx
lea ecx, [ebp - 0x1ec]
call fcn.10005d4c
mov dword [ebp - 0xd4], 0x100705d0
xor ecx, ecx
add esp, 0x20
mov dword [ebp - 0x18], 0xffffffff
inc ecx
mov dword [ebp - 0x1f4], ecx
mov dword [ebp - 0x30], 0xf8f6a1c3
mov dword [ebp - 0x1c], ebx
jmp 0x10006e44
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0x338], 9
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 4
jl 0x10006e33
push 3
mov dword [ebp - 0x18], ebx
pop edi
cmp dword [ebp - 0x18], 8
jle 0x10007020
mov dword [ebp - 0x1c], ebx
mov dword [ebp - 0x42c], 0xfffffffd
mov dword [ebp - 0x428], 0xfffffffd
mov dword [ebp - 0x424], 0xfffffffd
mov dword [ebp - 0x420], 0xfffffffd
mov dword [ebp - 0x1c], ebx
jmp 0x1000700f
mov dword [ebp - 0x24], 0x526d2e85
mov dword [ebp - 0x2c], ebx
mov dword [ebp - 0x28], 0x83dc0e3e
mov dword [ebp - 0x28], ebx
mov dword [ebp - 0x24], ebx
cmp dword [ebp - 0x24], edi
jg 0x10007002
mov dword [ebp - 0x20], 0x45625132
mov dword [ebp - 0x20], ebx
cmp dword [ebp - 0x20], edi
jg 0x10006fce
mov dword [ebp - 0x38], ebx
jmp 0x10006ed6
mov eax, dword [ebp - 0x38]
mov dword [ebp + eax*4 - 0x1ac], 0x5e82aa9d
inc dword [ebp - 0x38]
cmp dword [ebp - 0x38], 2
jl 0x10006ec5
push ecx
push ecx
push 0x4438
push 0x367f
push 0x791a
push 0x21a6
push 0x1b40
lea eax, [ebp - 0x1f4]
mov edx, 0xe2f
push eax
push 0x5dd4
push 0x9d1
call fcn.10001d22
mov eax, dword [ebp - 0x20]
add esp, 0x28
mov eax, dword [ebp + eax*4 - 0x338]
mov eax, dword [ebp - 0x24]
cmp dword [ebp - 0x24], ebx
je 0x10006f2d
mov eax, dword [ebp - 0x1ac]
cmp dword [ebp - 0x330], ebx
je 0x10006f3f
cmp dword [ebp - 0x24], ebx
je 0x10006f3f
xor eax, eax
inc eax
jmp 0x10006f41
mov eax, ebx
cmp eax, 0xfffffffc
mov eax, dword [ebp - 0x2c]
sbb ecx, ecx
xor edx, edx
inc ecx
cmp ecx, eax
mov eax, dword [ebp - 0x1ac]
setne dl
xor ecx, ecx
cmp edx, eax
setl cl
cmp ecx, dword [ebp - 0x1ac]
jl 0x10006f70
cmp dword [ebp - 0x30], ebx
je 0x10006f70
xor eax, eax
inc eax
jmp 0x10006f72
mov eax, ebx
mov dword [ebp - 0x28], eax
xor edx, edx
mov ecx, dword [ebp - 0x28]
mov eax, dword [ebp - 0x1c]
cmp ecx, eax
setle dl
imul edx, dword [ebp - 0x428]
neg edx
jne 0x10006f99
cmp dword [ebp - 0x1ac], ebx
jne 0x10006f99
mov eax, ebx
jmp 0x10006f9c
xor eax, eax
inc eax
mov dword [ebp - 0x28], eax
xor edx, edx
mov eax, dword [ebp - 0x20]
push 1
mov ecx, dword [ebp + eax*4 - 0x338]
mov eax, dword [ebp - 0x28]
cmp eax, ecx
pop ecx
setl dl
mov dword [ebp - 0x2c], edx
mov eax, dword [ebp - 0x2c]
mov dword [ebp - 0x330], eax
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], edi
jle 0x10006ec0
lea eax, [ebp - 0x74]
mov byte [ebp - 0x74], bl
push eax
push 0x5e7
push ecx
push 0x1096
push ecx
mov edx, 0x1505
mov ecx, 0x4ce6
call fcn.10002f4b
add esp, 0x14
inc dword [ebp - 0x24]
push 1
pop ecx
cmp dword [ebp - 0x24], edi
jle 0x10006ead
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp + eax*4 - 0x338]
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], edi
jle 0x10006e8d
inc dword [ebp - 0x18]
jmp 0x10006e50
mov dword [ebp - 0x108], ebx
mov dword [ebp - 0x18], 0xfffffff9
mov dword [ebp - 0x30], 0xa7084bc9
mov dword [ebp - 0x30], 6
mov dword [ebp - 0x30], 0xffff
mov dword [ebp - 0x18], 2
cmp dword [ebp - 0x18], ebx
jge 0x100070e2
mov dword [ebp - 0xc8], 0xb6182eac
mov dword [ebp - 0x20], ebx
jmp 0x10007072
mov eax, dword [ebp - 0x20]
mov dword [ebp + eax*4 - 0x2fc], 0x38ecf54c
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], ecx
jl 0x10007061
mov dword [ebp - 0x20], ebx
jmp 0x1000708d
mov eax, dword [ebp - 0x20]
mov dword [ebp + eax*4 - 0x540], 5
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], 2
jl 0x1000707c
mov dword [ebp - 0xc8], ebx
cmp dword [ebp - 0xc8], ebx
jl 0x100070c1
push 0xc59
push ebx
push 0x16a9
mov dl, cl
call fcn.100030b4
add esp, 0xc
dec dword [ebp - 0xc8]
push 1
pop ecx
jns 0x100070a1
push 0x2472
push ebx
push ecx
lea ecx, [ebp - 0xc8]
call fcn.100043d4
add esp, 0xc
dec dword [ebp - 0x18]
push 1
pop ecx
js 0x10007052
push 0xc
pop esi
mov dword [ebp - 0x2c], esi
cmp esi, 0xe0
jge 0x10007546
mov dword [ebp - 0x18], 0xfffffffd
mov dword [ebp - 0x1fc], ebx
mov dword [ebp - 0x18], ebx
jmp 0x10007117
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x6a4], 0xa8eac8b
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 4
jl 0x10007106
mov dword [ebp - 0x18], ebx
jmp 0x10007141
lea eax, [ebp - 0x73]
mov byte [ebp - 0x73], bl
push eax
xor eax, eax
inc eax
push eax
push 0x13ef
mov dl, al
mov cl, al
call fcn.100030b4
add esp, 0xc
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], edi
jle 0x10007122
lea eax, [ebp - 0x1fc]
xor dl, dl
push eax
push ecx
push ecx
call fcn.10002b7f
mov ecx, dword [ebp - 0xd4]
add esp, 0xc
mov al, byte [ecx]
cmp al, byte [esi + ecx]
jne 0x10007652
push edi
lea ecx, [ebp - 0x410]
call fcn.1000adae
mov dword [ebp - 4], 0xb
mov dword [ebp - 0x18], 1
mov dword [ebp - 0x28], 0xc946b43d
mov dword [ebp - 0x28], 0xffffffff
mov dword [ebp - 0x30], 0x1e0f758f
mov dword [ebp - 0x28], 0x5d01
cmp dword [ebp - 0x28], 0x6010
jle 0x100071e4
mov edi, ebx
mov esi, ebx
mov eax, esi
mov ecx, 0x10073a98
or eax, edi
cdq
push edx
push eax
call fcn.1000ab96
inc esi
cmp esi, 0x5fa6
jl 0x100071ad
inc edi
cmp edi, 0x8003
jl 0x100071ab
mov esi, dword [ebp - 0x2c]
push ebx
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_BeginPaint]
push 3
pop edi
mov byte [ebp - 4], 0xc
cmp dword [ebp - 0x28], 0x5a2e
jge 0x10007224
mov edx, str.dus_lofrpkf_wscgwibdc_oxijnl_xaqsftg_mcbjtklq_ouirymvaq_dqlcwexm_aoiwubjx_iwrzy_kvnlcmzkh
mov ecx, 0x10073a98
call fcn.1000d257
jmp 0x10007224
xor ecx, ecx
mov dword [ebp - 4], 0xb
inc ecx
mov dword [ebp - 0x84], ebx
jmp 0x1000724a
mov eax, dword [ebp - 0x84]
mov dword [ebp + eax*4 - 0x6c], 0xfffffffb
inc dword [ebp - 0x84]
cmp dword [ebp - 0x84], ecx
jl 0x10007236
lea eax, [ebp - 0x410]
push eax
push 0x650f
push ecx
push ecx
push 0x457a
lea ecx, [ebp - 0x84]
call fcn.10002308
add esp, 0x14
mov dword [ebp - 0x6c], ebx
jmp 0x1000733b
xor ecx, ecx
inc ecx
mov dword [ebp - 0x2c], ecx
mov dword [ebp - 0x28], 0xffffffff
mov dword [ebp - 0x30], 0xffffffff
mov dword [ebp - 0x20], ebx
jmp 0x100072a5
mov eax, dword [ebp - 0x20]
mov dword [ebp + eax*4 - 0xe4], 4
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], ecx
jl 0x10007294
mov dword [ebp - 0x20], ebx
jmp 0x100072c0
mov eax, dword [ebp - 0x20]
mov dword [ebp + eax*4 - 0x46c], 0xdd2e
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], 2
jl 0x100072af
mov eax, dword [ebp - 0x2c]
mov dword [ebp - 0x2c], eax
cmp dword [ebp - 0xe4], ebx
je 0x100072f7
mov ecx, dword [ebp - 0x6c]
mov eax, dword [ebp - 0x410]
mov dword [eax + 8], ecx
lea eax, [ecx - 3]
cmp eax, 0xfff9
sbb eax, eax
inc eax
mov dword [ebp - 0x18], eax
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x28], eax
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x2c]
xor edx, edx
mov eax, dword [ebp - 0xe4]
mov eax, dword [ebp - 0xe4]
mov dword [ebp - 0x28], eax
mov eax, dword [ebp - 0x28]
mov dword [ebp - 0xe4], eax
mov dword [ebp - 0x28], eax
mov ecx, dword [ebp - 0x28]
mov eax, dword [ebp - 0x6c]
cmp ecx, eax
mov eax, dword [ebp - 0x30]
setle dl
imul eax, edx
test eax, eax
je 0x10007332
mov eax, dword [ebp - 0x46c]
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x30], eax
dec dword [ebp - 0x6c]
cmp dword [ebp - 0x6c], 0xffffffe4
jle 0x1000727b
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x410]
call fcn.1000ae31
mov dword [ebp - 0x108], esi
mov dword [ebp - 0x38], 0x5c68ec0a
mov dword [ebp - 0x28], 0xfffffff9
mov dword [ebp - 0x3c], 0xa37b
mov dword [ebp - 0x38], 0x13
jmp 0x10007511
push dword [ebp - 0x2fc]
movdqa xmm0, xmmword [0x10067580]
lea eax, [ebp - 0x500]
push eax
lea eax, [ebp - 0x510]
mov dword [ebp - 0x19c], ebx
push eax
push ebx
lea ecx, [ebp - 0x19c]
mov dword [ebp - 0x198], ebx
movdqu xmmword [ebp - 0x510], xmm0
mov dword [ebp - 0x194], ebx
call fcn.1000d7c5
mov dword [ebp - 4], 0xe
mov dword [ebp - 0x1c], 1
mov dword [ebp - 0x1c], edi
cmp dword [ebp - 0x1c], ebx
jl 0x100074ff
mov dword [ebp - 0x18], ebx
jmp 0x100073ed
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x130], 0x6c74aa0d
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], edi
jl 0x100073dc
mov byte [ebp - 0x31], bl
cmp byte [ebp - 0x31], 0
je 0x10007413
push 0x48ba
push 1
push 0x3316
xor dl, dl
xor cl, cl
call fcn.100030b4
add esp, 0xc
mov dword [ebp - 0x128], edi
cmp dword [ebp - 0x128], ebx
jl 0x100074f6
mov dword [ebp - 0x28], ebx
lea ecx, [ebp - 0x41c]
mov dword [ebp - 0x30], 1
push 4
call fcn.1000adae
sub esp, 0x14
mov byte [ebp - 4], 0xf
lea eax, [ebp - 0x41c]
push eax
lea eax, [ebp - 0x4d4]
push eax
push 1
push ecx
call fcn.1000329f
mov dword [ebp - 0x28], 0x5ace
xor edx, edx
mov eax, dword [ebp - 0x28]
add esp, 0x24
mov eax, dword [ebp - 0x30]
mov esi, dword [ebp - 0x128]
mov eax, dword [ebp - 0x128]
mov ecx, dword [ebp - 0x19c]
cmp dword [ecx + eax*4], 0x75ff
setle dl
cmp dword [ecx + esi*4], edx
jl 0x10007492
mov eax, dword [ebp - 0x128]
mov ecx, dword [ebp - 0x128]
xor edx, edx
mov eax, dword [ebp - 0x19c]
push 1
cmp dword [eax + ecx*4], ebx
sete dl
mov dword [ebp - 0x28], edx
xor edx, edx
mov esi, dword [ebp - 0x128]
mov ecx, dword [ebp - 0x3c]
mov eax, dword [ebp - 0x28]
cmp eax, ecx
mov eax, dword [ebp - 0x19c]
setge dl
xor ecx, ecx
cmp dword [eax + esi*4], edx
mov eax, dword [ebp - 0x41c]
setge cl
mov dword [eax + 8], ecx
call fcn.1000330e
pop ecx
lea ecx, [ebp - 0x41c]
mov byte [ebp - 4], 0xe
call fcn.1000ae31
dec dword [ebp - 0x128]
jns 0x10007425
dec dword [ebp - 0x1c]
jns 0x100073d7
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x19c]
call fcn.1000ae31
dec dword [ebp - 0x38]
cmp dword [ebp - 0x38], 0xd
jle 0x1000737b
push 0x29c7
push 1
push 0x5f74
push 0xb96
push ecx
push 0x2a6d
push ecx
push ecx
mov edx, 0x362b
mov ecx, 0x1e7a
call fcn.10005a9d
add esp, 0x20
mov dword [ebp - 0x20], ebx
mov dword [ebp - 0x1c], 0x751c
mov dword [ebp - 0x38], 0x5497
cmp dword [ebp - 0x38], 0x55a8
jle 0x1000760c
mov ecx, ebx
mov dword [ebp - 0x18], ebx
mov eax, ebx
mov dword [ebp - 0x2c], ebx
mov edi, ebx
mov dword [ebp - 0x28], ebx
mov esi, edi
mov dword [ebp - 0x30], ebx
and esi, eax
mov edi, ebx
xor esi, ecx
mov eax, edi
lea ecx, [ebp - 0x638]
or eax, esi
cdq
push edx
push eax
call fcn.10001a55
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x1000759a
mov eax, dword [eax]
push eax
call fcn.10040afc
pop ecx
push ebx
push 1
lea ecx, [ebp - 0x638]
call fcn.1000b217
inc edi
cmp edi, 0x5721
jl 0x1000757e
mov edi, dword [ebp - 0x28]
mov eax, dword [ebp - 0x2c]
inc edi
mov ecx, dword [ebp - 0x18]
mov dword [ebp - 0x28], edi
cmp edi, 0x666e
jl 0x10007573
inc eax
mov dword [ebp - 0x2c], eax
cmp eax, 0x679b
jl 0x1000756e
inc ecx
mov dword [ebp - 0x18], ecx
cmp ecx, 0x6268
jl 0x10007569
push 0x19a6
push 0x1819
push 0x25ef
push 0x82c
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_Rectangle]
mov dword [ebp - 0xd8], 0xfffffffc
cmp dword [ebp - 0x38], 0x543e
jge 0x1000762a
push str.cls_domavbe_ghgeb_mhbztzr_gntg_seqyuvay_hqynz_rfridqag_ryskg_asabsoq_waakhfj_chphyzs_vdpzc
call fcn.10040afc
pop ecx
push 2
or esi, 0xffffffff
lea ecx, [ebp - 0x438]
pop edi
mov dword [ebp - 4], esi
mov dword [ebp - 0x24], 0x2f63069b
push edi
call fcn.1000adae
mov dword [ebp - 4], 0x12
mov dword [ebp - 0x18], ebx
jmp 0x1000766b
inc esi
jmp 0x100070e5
mov ecx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x438]
mov dword [eax + ecx*4], 0x84cb
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], edi
jl 0x10007658
mov dword [ebp - 0x20], 0xfffffff3
jmp 0x100077ab
mov dword [ebp - 0x54], 0xcde6bc04
mov dword [ebp - 0x30], 0xd5269945
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0xd8]
mov eax, dword [ebp - 0x54]
mov eax, dword [ebp - 0x54]
mov eax, dword [ebp - 0x54]
mov eax, dword [ebp - 0xd8]
mov eax, dword [ebp - 0x20]
add eax, 0x504d
cmp dword [ebp - 0x1c], eax
je 0x10007731
cmp dword [ebp - 0x24], ebx
je 0x10007731
xor eax, eax
inc eax
mov dword [ebp - 0x204], eax
mov dword [ebp - 0x24], ebx
jmp 0x1000772a
push 0x26b8
lea ecx, [ebp - 0x144]
mov dword [ebp - 0x144], 5
push ecx
push 0x7290
push 0x4c
push 0x3a60
push 0x1cca
push 0x1f4d
push eax
lea ecx, [ebp - 0x54]
mov dl, al
push ecx
push 0xb67
push 0x34e7
lea ecx, [ebp - 0xd8]
push ebx
push ecx
lea ecx, [ebp - 0x204]
call fcn.10004084
mov eax, dword [ebp - 0x144]
add esp, 0x34
mov dword [ebp - 0xd8], eax
xor eax, eax
inc dword [ebp - 0x24]
inc eax
cmp dword [ebp - 0x24], eax
jle 0x100076c5
jmp 0x100077a8
mov dword [ebp - 0x30], 0xa5798870
mov dword [ebp - 0x18], ebx
jmp 0x1000774e
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x368], 0xc027682c
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 3
jl 0x1000773d
mov eax, dword [ebp - 0x364]
cmp dword [ebp - 0x54], eax
jne 0x1000778f
mov ecx, dword [ebp - 0x54]
neg ecx
sbb ecx, ecx
xor eax, eax
neg ecx
cmp ecx, 0x3adfe1d
setge al
add eax, dword [ebp - 0x54]
mov dword [ebp - 0x30], eax
cmp dword [ebp - 0x24], 3
sbb eax, eax
neg eax
cmp eax, dword [ebp - 0x54]
je 0x1000778c
mov eax, dword [ebp - 0x364]
mov eax, dword [ebp - 0x24]
mov ecx, dword [ebp - 0x360]
xor edx, edx
mov eax, dword [ebp - 0x1c]
add ecx, 0xfff9
cmp ecx, eax
setne dl
mov dword [ebp - 0x30], edx
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], 0xd
jge 0x1000767c
lea ecx, [ebp - 0x438]
mov dword [ebp - 4], esi
call fcn.1000ae31
push 4
pop eax
mov dword [ebp - 0x2bc], eax
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x30], 0x12fd89d6
mov dword [ebp - 0x1c], 0x138a
cmp dword [ebp - 0x1c], 0x1552
jle 0x10007886
push 0x1d7e
push ebx
push 0x1c12
push ebx
push 0x17fe
push ebx
call dword [sym.imp.KERNEL32.dll_CompareStringW]
mov eax, ebx
mov dword [ebp - 0x2c], ebx
mov edi, ebx
mov dword [ebp - 0x38], ebx
cdq
mov esi, ebx
idiv edi
mov eax, edx
mov dword [ebp - 0x18], eax
mov edi, ebx
mov dword [ebp - 0x28], 0x29fa
mov ecx, edi
shl eax, cl
lea ecx, [ebp - 0x578]
cdq
push edx
push eax
call fcn.10001a55
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x1000783b
mov eax, dword [eax]
push eax
call fcn.10040afc
pop ecx
push ebx
push 1
lea ecx, [ebp - 0x578]
call fcn.1000b217
mov eax, dword [ebp - 0x18]
add edi, esi
dec dword [ebp - 0x28]
jne 0x1000781f
inc esi
cmp esi, 0x472a
jl 0x10007816
mov edi, dword [ebp - 0x38]
mov eax, dword [ebp - 0x2c]
inc edi
mov dword [ebp - 0x38], edi
cmp edi, 0x783f
jl 0x1000780c
inc eax
mov dword [ebp - 0x2c], eax
cmp eax, 0x2e74
jl 0x10007807
push 2
or esi, 0xffffffff
pop edi
cmp dword [ebp - 0x1c], 0x119d
jge 0x1000789a
push str.xfsdvs_slawfhdoz_dhumo_ycscmelq_pckw_qsikcvhsy_inzdt
call fcn.10040afc
pop ecx
xor ecx, ecx
mov dword [ebp - 4], esi
mov dword [ebp - 0x18], ebx
inc ecx
jmp 0x100078b6
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x154], 0xfffffffe
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], ecx
jl 0x100078a5
push ecx
mov dl, cl
mov byte [ebp - 0x75], bl
lea ecx, [ebp - 0x75]
call fcn.100033b0
mov dword [ebp - 0x1c], ebx
cmp dword [ebp - 0x1c], 5
pop ecx
jl 0x1000793e
mov dword [ebp - 0x30], 0xe61780ee
lea ecx, [ebp - 0x4d0]
push 3
call fcn.1000adae
lea eax, [ebp - 0x4d0]
mov dword [ebp - 4], 0x15
push eax
lea eax, [ebp - 0x4e8]
mov cl, 1
push eax
call fcn.1000333f
pop ecx
mov dword [ebp - 0x154], 0xfffffffb
mov eax, dword [ebp - 0x154]
mov eax, dword [ebp - 0x1c]
pop ecx
mov ecx, 0xff7673ed
cmp ecx, eax
lea ecx, [ebp - 0x4d0]
sbb eax, eax
inc eax
mov dword [ebp - 0x30], eax
mov dword [ebp - 4], esi
call fcn.1000ae31
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 5
jge 0x100078d3
xor ebx, ebx
push edi
lea ecx, [ebp - 0x444]
mov dword [ebp - 0xe8], 0x100706b0
call fcn.1000adae
mov dword [ebp - 4], 0x16
mov dword [ebp - 0x38], 0x9bdba76a
mov dword [ebp - 0x18], ebx
jmp 0x1000797a
mov ecx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x444]
mov dword [eax + ecx*4], 0xffff
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], edi
jl 0x10007967
xor ecx, ecx
inc ecx
mov dword [ebp - 0x38], ecx
cmp dword [ebp - 0x38], ebx
jl 0x100079e8
mov dword [ebp - 0x18], ebx
jmp 0x100079a0
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0xd0], 0x7a888ada
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], ecx
jl 0x1000798f
mov dword [ebp - 0xd0], ebx
jmp 0x100079db
push 0x4eb6
push ecx
push 0x55f0
push ecx
push 0x6521
push ecx
mov byte [ebp - 0x77], bl
lea edx, [ebp - 0x77]
mov ecx, 0x1bf2
call fcn.100033e8
add esp, 0x18
xor ecx, ecx
inc dword [ebp - 0xd0]
inc ecx
cmp dword [ebp - 0xd0], ecx
jle 0x100079ad
dec dword [ebp - 0x38]
jns 0x1000798a
lea ecx, [ebp - 0x444]
mov dword [ebp - 4], esi
call fcn.1000ae31
mov eax, dword [ebp - 0xd4]
mov cl, byte [0x100706b0]
mov byte [ebp - 0x41], cl
mov dl, byte [eax]
call fcn.1000d244
push edi
lea ecx, [ebp - 0x31c]
mov byte [0x100706b0], al
call fcn.1000adae
push 3
lea ecx, [ebp - 0x1d0]
mov dword [ebp - 4], 0x17
call fcn.1000adae
mov byte [ebp - 4], 0x18
mov dword [ebp - 0x30], 0xab551fa4
mov dword [ebp - 0x28], esi
mov dword [ebp - 0x28], 0x40b319b
mov dword [ebp - 0x2c], esi
mov dword [ebp - 0x3c], 9
mov dword [ebp - 0x28], 0x3bad
cmp dword [ebp - 0x28], 0x3c9e
jle 0x10007aa7
mov edi, ebx
mov esi, ebx
mov eax, esi
lea ecx, [ebp - 0x608]
xor eax, edi
cdq
push edx
push eax
call fcn.10001a55
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x10007a80
mov eax, dword [eax]
push eax
call fcn.10040afc
pop ecx
push ebx
push 1
lea ecx, [ebp - 0x608]
call fcn.1000b217
inc esi
cmp esi, 0x1d62
jl 0x10007a64
inc edi
cmp edi, 0x1bca
jl 0x10007a62
mov dword [ebp - 0x18], 0xffff
cmp dword [ebp - 0x28], 0x3887
jge 0x10007ac2
push str.rpkw_fcqkmreab_hrd_frogu_dul
call fcn.10040afc
pop ecx
lea eax, [ebp - 0x5c]
mov dword [ebp - 4], 0x18
push eax
lea eax, [ebp - 0x31c]
push eax
push ecx
push 0x7950
push ecx
push ecx
push 1
push ecx
mov ecx, 0x3b42
call fcn.100035db
add esp, 0x20
lea eax, [ebp - 0x5c]
mov dl, 1
lea ecx, [ebp - 0x1d0]
push eax
push 0x957
sub esp, 0xc
call fcn.10003cef
add esp, 0x14
mov dword [ebp - 0x5c], ebx
jmp 0x10007b1e
mov eax, dword [ebp - 0x5c]
mov dword [ebp + eax*4 - 0x454], 3
inc dword [ebp - 0x5c]
cmp dword [ebp - 0x5c], 3
jl 0x10007b0d
push 0x39a0
push 0x2bea
push 0x5fc4
push 0x7b4c
push 0x2714
push 0x1505
push 0x5418
xor eax, eax
mov byte [ebp - 0x79], bl
inc eax
lea ecx, [ebp - 0x79]
push eax
push 0x1673
push ecx
push 0x74de
push eax
push 0x3bf0
mov dl, al
mov ecx, 0x447f
call fcn.10004084
mov eax, dword [ebp - 0x1d0]
add esp, 0x34
mov esi, dword [eax]
test esi, esi
jne 0x10007be7
mov eax, dword [ebp - 0x30]
xor ecx, ecx
mov edi, dword [ebp - 0x31c]
mov eax, dword [ebp - 0x1d0]
mov esi, dword [edi]
cmp esi, dword [eax]
setg cl
xor edx, edx
inc edx
cmp edx, ecx
mov ecx, 0xca8c98aa
sbb eax, eax
inc eax
cmp ecx, eax
sbb eax, eax
inc eax
cmp eax, 0xfffffff9
je 0x10007bb2
mov ecx, ebx
test esi, esi
je 0x10007bb4
mov ecx, edx
xor eax, eax
cmp ecx, dword [edi + 4]
setl al
mov dword [ebp - 0x28], eax
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x1d0]
mov esi, dword [eax]
cmp esi, 0x9c4b05ef
sbb eax, eax
xor ecx, ecx
neg eax
cmp eax, 0x352601c8
setge cl
cmp ecx, 0xfffffff8
je 0x10007bea
mov edx, ebx
jmp 0x10007bea
xor edx, edx
inc edx
xor ecx, ecx
lea eax, [edx - 1]
cmp eax, esi
setle cl
mov dword [ebp - 0x28], ecx
cmp dword [ebp - 0x28], ebx
jne 0x10007bff
mov eax, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x2c]
xor edx, edx
mov eax, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x31c]
mov ecx, dword [eax]
mov eax, dword [ebp - 0x1d0]
cmp ecx, dword [eax + 8]
setl dl
cmp edx, dword [ebp - 0x3c]
je 0x10007c2d
cmp dword [ebp - 0x44c], ebx
je 0x10007c2d
xor eax, eax
inc eax
jmp 0x10007c2f
mov eax, ebx
lea ecx, [ebp - 0x1d0]
mov dword [ebp - 0x44c], eax
call fcn.1000ae31
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x31c]
call fcn.1000ae31
xor eax, eax
inc eax
mov esi, eax
mov dword [ebp - 0x1c], eax
push 4
pop ecx
cmp esi, ecx
jge 0x100081e1
mov dword [ebp - 0x20], ebx
mov dword [ebp - 0x28], ecx
lea ecx, [ebp - 0x3d4]
mov dword [ebp - 0x24], 9
mov dword [ebp - 0x30], 0xddac0faa
mov dword [ebp - 0x18], 0xfffffffa
mov dword [ebp - 0x2c], 0x34a938f7
mov dword [ebp - 0x3c], eax
push eax
call fcn.1000adae
mov dword [ebp - 4], 0x1b
mov dword [ebp - 0x24], ebx
jmp 0x10007cb0
mov eax, dword [ebp - 0x24]
mov dword [ebp + eax*4 - 0x1a4], 0x63abefa0
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], 2
jl 0x10007c9f
xor edx, edx
mov dword [ebp - 0x24], ebx
inc edx
jmp 0x10007cd1
mov ecx, dword [ebp - 0x24]
mov eax, dword [ebp - 0x3d4]
mov dword [eax + ecx*4], 0xf3f85024
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], edx
jl 0x10007cbe
cmp dword [ebp - 0x20], 0xba13b288
mov eax, dword [ebp - 0x20]
sbb ecx, ecx
xor edx, edx
inc ecx
cmp ecx, eax
setge dl
xor eax, eax
cmp edx, 0xa4c
setl al
sub eax, dword [ebp - 0x20]
cmp eax, dword [ebp - 0x20]
jne 0x10007d09
cmp dword [ebp - 0x20], ebx
jne 0x10007d09
xor edx, edx
mov eax, ebx
inc edx
jmp 0x10007d0e
xor edx, edx
inc edx
mov eax, edx
cmp dword [ebp - 0x20], eax
jle 0x10007d16
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x30]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x28], eax
mov eax, dword [ebp - 0x28]
mov dword [ebp - 0x24], eax
imul eax, dword [ebp - 0x18], 7
mov dword [ebp - 0x2c], eax
mov eax, dword [ebp - 0x2c]
mov ecx, dword [ebp - 0x24]
sub ecx, eax
cmp ecx, dword [ebp - 0x3c]
jge 0x10007d97
mov dword [ebp - 0x24], ebx
jmp 0x10007d82
push 0x61df
lea eax, [ebp - 0x7b]
mov byte [ebp - 0x7b], bl
push eax
sub esp, 0xc
xor dl, dl
mov ecx, 0x25d
call fcn.10003cef
mov eax, dword [ebp - 0x24]
add esp, 0x14
xor edx, edx
mov eax, dword [ebp + eax*4 - 0x1a4]
mov ecx, dword [ebp - 0x1a4]
mov eax, dword [ebp - 0x24]
mov dword [ebp + eax*4 - 0x1a4], ecx
inc dword [ebp - 0x24]
inc edx
cmp dword [ebp - 0x24], edx
jle 0x10007d44
mov byte [ebp - 0x31], bl
cmp byte [ebp - 0x31], 0
je 0x10007dcb
call fcn.10002370
jmp 0x10007dcb
mov eax, dword [ebp - 0x1a4]
mov dword [ebp - 0x2c], eax
mov dword [ebp - 0x20], ebx
jmp 0x10007dc5
push ebx
push 0x31a0
push 0x46eb
push ecx
push ecx
lea eax, [ebp - 0x7d]
mov byte [ebp - 0x7d], bl
push eax
push ecx
call fcn.10005ba2
add esp, 0x1c
dec dword [ebp - 0x20]
cmp dword [ebp - 0x20], 0xffffffed
jg 0x10007da5
mov eax, dword [ebp - 0x3d4]
lea ecx, [ebp - 0x3d4]
dec dword [eax]
or dword [ebp - 4], 0xffffffff
call fcn.1000ae31
mov edi, dword [ebp - 0xe8]
lea ecx, [ebp - 0x464]
push 2
mov al, byte [esi + edi]
mov dword [ebp - 0x18], ebx
mov dword [ebp - 0x30], 0xfffffffb
mov dword [ebp - 0x30], 0xe7ccc895
mov byte [ebp - 0x31], al
call fcn.1000adae
mov dword [ebp - 4], 0x1c
push 2
mov dword [ebp - 0x20c], 8
mov dword [ebp - 0x18], ebx
pop edx
jmp 0x10007e38
mov ecx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x464]
mov dword [eax + ecx*4], 0x3ccd2466
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], edx
jl 0x10007e25
mov dword [ebp - 0x18], ebx
jmp 0x10007edf
mov dword [ebp - 0x38], 1
mov dword [ebp - 0x24], ebx
jmp 0x10007e62
mov eax, dword [ebp - 0x24]
mov dword [ebp + eax*4 - 0x694], 0x29be1d92
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], 4
jl 0x10007e51
mov dword [ebp - 0x24], ebx
jmp 0x10007e7e
mov eax, dword [ebp - 0x24]
mov dword [ebp + eax*4 - 0x550], 0xfe662db8
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], edx
jl 0x10007e6d
mov dword [ebp - 0x38], 3
cmp dword [ebp - 0x38], ebx
jl 0x10007edc
xor ebx, ebx
inc ebx
mov dword [ebp - 0x30], 0xc9ed9ba0
lea eax, [ebp - 0x20c]
mov dword [ebp - 0x30], 0xffffffff
push eax
mov dword [ebp - 0x30], 0xf5872d9e
mov dword [ebp - 0x30], 0x5b7d8cf4
push ebx
mov dword [ebp - 0x30], ebx
push ecx
mov dword [ebp - 0x30], 0xccb97252
mov ecx, 0x1317
mov dword [ebp - 0x30], 0xfffffff8
call fcn.100043d4
add esp, 0xc
dec dword [ebp - 0x38]
jns 0x10007e92
xor ebx, ebx
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 0x18
jg 0x10007e45
push 1
push 0x5a6c
mov ecx, 0x2a1
call fcn.10004423
or dword [ebp - 4], 0xffffffff
pop ecx
pop ecx
lea ecx, [ebp - 0x464]
call fcn.1000ae31
mov eax, esi
mov cl, byte [ebp - 0x31]
cdq
idiv dword [ebp - 0x108]
mov esi, edx
mov dl, byte [ebp - 0x41]
call fcn.1000d244
mov ecx, dword [ebp - 0xd4]
mov dl, byte [esi + ecx]
mov cl, al
call fcn.1000d244
mov esi, dword [ebp - 0x1c]
lea ecx, [ebp - 0x21c]
push 1
mov byte [esi + edi], al
call fcn.1000adae
mov dword [ebp - 4], 0x1d
lea ecx, [ebp - 0x478]
mov dword [ebp - 0x30], ebx
xor eax, eax
push 3
mov dword [ebp - 0x30], ebx
inc eax
pop edi
mov dword [ebp - 0x30], edi
mov dword [ebp - 0x64], 0xfffffff8
mov dword [ebp - 0x30], 0x2db7
mov dword [ebp - 0x1f8], eax
mov dword [ebp - 0x30], 0x8fe4de5a
push eax
call fcn.1000adae
push 0x211e
push ecx
lea eax, [ebp - 0x21c]
mov byte [ebp - 4], 0x1e
push eax
push ebx
mov dword [ebp - 0x294], 0x8dc70e74
lea ecx, [ebp - 0x300]
push 0x7c44
mov dword [ebp - 0x30], 0xe197b2c3
call fcn.100027ee
add esp, 0x14
lea eax, [ebp - 0x478]
lea edx, [ebp - 0x300]
push ebx
push 0x14ca
push ecx
push ecx
push 0x1039
push eax
push ecx
push ecx
call fcn.1000273f
mov eax, dword [ebp - 0x21c]
add esp, 0x20
mov dword [eax], ebx
mov dword [ebp - 0x158], ebx
lea ecx, [ebp - 0x380]
mov dword [ebp - 0x1f0], 0x5f88
mov dword [ebp - 0x1e0], 0x3494abc2
mov dword [ebp - 0x29c], 0xf126c7f0
mov dword [ebp - 0x2a4], 0xa48a2b8e
mov dword [ebp - 0x4f0], 0x8eb5ea28
mov dword [ebp - 0x2f4], 0xffffffff
push 4
call fcn.1000adae
push 1
lea eax, [ebp - 0x4ec]
mov byte [ebp - 4], 0x1f
push eax
push ecx
push ecx
lea eax, [ebp - 0x380]
mov dword [ebp - 0x448], edi
push eax
push 0x17bd
push ecx
mov dword [ebp - 0x4e0], 0xffffffff
mov edx, 0x2ba2
mov dword [ebp - 0x2b4], 0x9fe4
push ecx
call fcn.1000273f
add esp, 0x18
lea eax, [ebp - 0x2f4]
push eax
push 0x22df
sub esp, 0xc
lea eax, [ebp - 0x21c]
push eax
lea eax, [ebp - 0x294]
push eax
lea eax, [ebp - 0x1e0]
push eax
lea eax, [ebp - 0x158]
push eax
push ebx
push ecx
push ecx
lea ecx, [ebp - 0x64]
call fcn.100046c3
add esp, 0x38
mov dword [ebp - 0x64], ebx
jmp 0x1000811b
lea eax, [ebp - 0x29c]
mov dword [ebp - 0x1e8], 8
push eax
lea eax, [ebp - 0x1e8]
mov dword [ebp - 0x2ac], 0xffffffff
push eax
lea eax, [ebp - 0x158]
push eax
lea eax, [ebp - 0x64]
push eax
lea eax, [ebp - 0x2a4]
push eax
push ebx
lea eax, [ebp - 0x1f0]
push eax
push 0x2421
push ecx
lea eax, [ebp - 0x2ac]
push eax
lea eax, [ebp - 0x1f8]
push eax
lea edx, [ebp - 0x2b4]
lea ecx, [ebp - 0x380]
call fcn.100023b2
add esp, 0x2c
inc dword [ebp - 0x64]
cmp dword [ebp - 0x64], 2
jg 0x100080b4
lea ecx, [ebp - 0x380]
mov byte [ebp - 4], 0x1e
call fcn.1000ae31
mov eax, dword [ebp - 0x21c]
dec dword [eax]
cmp dword [eax], 0xfffffff2
jge 0x10007fe3
lea ecx, [ebp - 0x478]
call fcn.1000ae31
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x21c]
call fcn.1000ae31
mov dword [ebp - 0x28], 0x65d0
cmp dword [ebp - 0x28], 0x693f
jle 0x100081b7
mov edi, ebx
mov esi, ebx
mov ecx, esi
mov eax, edi
sar eax, cl
lea ecx, [ebp - 0x590]
cdq
push edx
push eax
call fcn.10001a55
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x1000818d
mov eax, dword [eax]
push eax
call fcn.10040afc
pop ecx
push ebx
push 1
lea ecx, [ebp - 0x590]
call fcn.1000b217
inc esi
cmp esi, 0x7584
jl 0x1000816f
inc edi
cmp edi, 0x5d03
jl 0x1000816d
mov esi, dword [ebp - 0x1c]
cmp dword [ebp - 0x28], 0x651e
mov al, byte [ebp - 0x31]
mov byte [ebp - 0x41], al
jge 0x100081d1
push str.vrqdbzjn_uwtn_vbfrnehdw_yeemh_egkrzxlv
call fcn.10040afc
pop ecx
or dword [ebp - 4], 0xffffffff
xor eax, eax
inc esi
inc eax
mov dword [ebp - 0x1c], esi
jmp 0x10007c57
mov eax, dword [ebp - 0xe8]
lea ecx, [ebp - 0x1b8]
push 3
mov eax, dword [eax]
mov dword [ebp - 0x104], eax
call fcn.1000adae
lea ecx, [ebp - 0x48]
mov dword [ebp - 4], 0x22
xor eax, eax
lea edx, [ebp - 0x1b8]
inc eax
mov dword [ebp - 0x20], eax
push ecx
mov dword [ebp - 0x18], eax
push ecx
mov dword [ebp - 0x1c], 0xffffffff
mov cl, al
mov dword [ebp - 0x24], 0xffffffff
call fcn.10004472
mov dword [ebp - 0x38], 0x4658
cmp dword [ebp - 0x38], 0x49fe
pop ecx
pop ecx
jle 0x100082d8
push ebx
xor eax, eax
inc eax
push eax
push eax
push ebx
call dword [sym.imp.KERNEL32.dll_CreateEventA]
mov eax, ebx
mov dword [ebp - 0x2c], ebx
mov edi, ebx
mov dword [ebp - 0x28], ebx
mov ecx, edi
mov dword [ebp - 0x30], ebx
shl eax, cl
mov edi, ebx
mov dword [ebp - 0x3c], eax
mov esi, ebx
mov eax, edi
cdq
idiv esi
mov eax, dword [ebp - 0x3c]
mov ecx, edx
sar eax, cl
lea ecx, [ebp - 0x5a8]
cdq
push edx
push eax
call fcn.10001a55
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x1000828b
mov eax, dword [eax]
push eax
call fcn.10040afc
pop ecx
push ebx
push 1
lea ecx, [ebp - 0x5a8]
call fcn.1000b217
inc esi
cmp esi, 0x27d9
jl 0x10008267
inc edi
cmp edi, 0x5eca
jl 0x10008265
mov edi, dword [ebp - 0x28]
mov eax, dword [ebp - 0x2c]
inc edi
mov dword [ebp - 0x28], edi
cmp edi, 0x6e3e
jl 0x10008259
inc eax
mov dword [ebp - 0x2c], eax
cmp eax, 0x18f4
jl 0x10008254
push ebx
push ebx
push ebx
call dword [sym.imp.ADVAPI32.dll_SetSecurityDescriptorOwner]
cmp dword [ebp - 0x38], 0x44f5
jge 0x100082ec
push str.zdmo_xvkkavg_todgopbpr_vyjezkjpv_retqje_stqhlw_qwj_lyzlnneix_mxssvdju_uctxsraa_jdg_qokx
call fcn.10040afc
pop ecx
xor edx, edx
mov dword [ebp - 4], 0x22
mov dword [ebp - 0x48], ebx
inc edx
jmp 0x1000830c
mov eax, dword [ebp - 0x48]
mov dword [ebp + eax*4 - 0x140], 0xffffffff
inc dword [ebp - 0x48]
cmp dword [ebp - 0x48], edx
jl 0x100082fb
mov dword [ebp - 0x48], ebx
jmp 0x10008327
mov eax, dword [ebp - 0x48]
mov dword [ebp + eax*4 - 0x100], 0xfffffff6
inc dword [ebp - 0x48]
cmp dword [ebp - 0x48], edx
jl 0x10008316
mov dword [ebp - 0x20], ebx
cmp dword [ebp - 0x20], 2
jg 0x1000852a
mov dword [ebp - 0x28], 6
mov dword [ebp - 0x1c], 7
mov ecx, dword [ebp - 0x20]
mov eax, dword [ebp - 0x1b8]
cmp dword [eax + ecx*4], ebx
jne 0x10008400
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x1c]
cmp dword [ebp - 0x28], ebx
jne 0x1000836b
cmp dword [ebp - 0x1c], ebx
jne 0x1000836b
mov edx, ebx
mov eax, dword [ebp - 0x1c]
xor ecx, ecx
cmp edx, eax
mov eax, dword [ebp - 0x1c]
setle cl
xor edx, edx
cmp ecx, 1
setge dl
xor ecx, ecx
sub edx, 0x71424773
cmp edx, eax
setle cl
mov dword [ebp - 0x140], ecx
mov dword [ebp - 0x18], ecx
xor ecx, ecx
mov eax, dword [ebp - 0x18]
cmp eax, 0xf1f1
setge cl
xor edx, edx
mov dword [ebp - 0x1c], ecx
mov esi, dword [ebp - 0x20]
mov eax, dword [ebp - 0x1c]
mov ecx, dword [ebp - 0x1b8]
cmp dword [ecx + 4], eax
mov eax, dword [ebp - 0x1b8]
setne dl
xor ecx, ecx
cmp edx, dword [eax + esi*4]
setle cl
mov dword [ebp - 0x30], ecx
mov ecx, dword [ebp - 0x20]
mov eax, dword [ebp - 0x1b8]
mov edx, dword [ebp - 0x30]
mov dword [eax + ecx*4], edx
xor ecx, ecx
mov eax, dword [ebp - 0x28]
cmp edx, eax
mov eax, dword [ebp - 0x100]
setne cl
add eax, ecx
mov ecx, dword [ebp - 0x20]
add ecx, eax
cmp ecx, dword [ebp - 0x100]
jg 0x100083fd
mov edx, ebx
jmp 0x10008400
xor edx, edx
inc edx
mov dword [ebp - 0x1c], edx
mov dword [ebp - 0x28], 0x3d1b
cmp dword [ebp - 0x28], 0x3f53
jle 0x10008498
mov edi, ebx
mov esi, ebx
mov dword [ebp - 0x30], ebx
lea ecx, [ebx + esi]
mov eax, edi
sar eax, cl
mov ecx, 0x10073a98
cdq
push edx
push eax
call fcn.1000ab96
inc ebx
cmp ebx, 0x1694
jl 0x1000841e
inc esi
push 0
pop ebx
cmp esi, 0x561c
jl 0x1000841b
inc edi
cmp edi, 0x1f1
jl 0x10008419
push 0x229b
push 0x142a
push ebx
push ebx
push 0x2223
push 0x207f
push 0x19a8
push 0x1fed
push 0x950
push 0xc01
push 0x221f
push 0x969
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_StretchDIBits]
mov byte [ebp - 0x78], bl
mov byte [ebp - 4], 0x25
cmp dword [ebp - 0x28], 0x3a06
jge 0x100084d5
mov edx, str.zsiwed_xeiaqlmwc_wpvjwzbv_qisilqlhp_suteorzd_yvgmyd
mov ecx, 0x10073a98
call fcn.1000d257
jmp 0x100084d5
push 0x7c37
push 0x5dd2
push 0x6d9a
push 0x72ef
push 0x3b9d
xor eax, eax
mov dword [ebp - 4], 0x22
inc eax
mov edx, 0x32ca
push eax
push 0x10d2
lea eax, [ebp - 0x78]
push eax
push ecx
push 0x2a74
push 0xcbc
mov ecx, 0x47d0
call fcn.100023b2
add esp, 0x2c
xor edx, edx
inc dword [ebp - 0x20]
inc edx
jmp 0x1000832f
mov eax, dword [ebp - 0x24]
xor ecx, ecx
add eax, dword [ebp - 0x18]
cmp eax, 0xffff
mov eax, dword [ebp - 0x1c]
setne cl
xor edx, edx
cmp ecx, eax
mov eax, dword [ebp - 0x100]
setg dl
xor ecx, ecx
cmp edx, eax
mov eax, dword [ebp - 0x20]
setge cl
mov dword [ebp - 0x30], ecx
xor ecx, ecx
cmp eax, dword [ebp - 0x30]
setle cl
mov dword [ebp - 0x20], ecx
xor ecx, ecx
mov eax, dword [ebp - 0x20]
cmp eax, 0x3113
setge cl
mov dword [ebp - 0x140], ecx
lea ecx, [ebp - 0x1b8]
or dword [ebp - 4], 0xffffffff
call fcn.1000ae31
mov eax, dword [ebp - 0x104]
dec eax
cmp eax, 0x294e
ja 0x1000a66b
mov dword [ebp - 0x1c], 0xffffffff
lea ecx, [ebp - 0x1c4]
mov dword [ebp - 0x28], 0x3e32883e
mov dword [ebp - 0x10c], 0xffffffff
mov dword [ebp - 0x4c], 1
mov dword [ebp - 0x110], 0xd2570d97
push 2
call fcn.1000adae
lea eax, [ebp - 0x1c4]
mov dword [ebp - 4], 0x27
push eax
push ecx
push 0x24e3
lea eax, [ebp - 0x2a8]
mov ecx, 0xe53
push 1
push eax
call fcn.100027ee
mov dword [ebp - 0x1c], ebx
add esp, 0x14
cmp dword [ebp - 0x1c], ebx
jle 0x100087d5
push 3
pop edi
mov dword [ebp - 0x20], 0xfffffffa
mov dword [ebp - 0x38], 0xb721
mov dword [ebp - 0x18], ebx
jmp 0x10008629
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x124], 0x7ad95e17
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], edi
jl 0x10008618
mov dword [ebp - 0x20], ebx
cmp dword [ebp - 0x20], 2
jg 0x100087c9
mov esi, dword [ebp - 0x1c4]
mov dword [ebp - 0x18], 4
lea ecx, [ebp - 0x404]
mov dword [ebp - 0x2c], 8
push edi
call fcn.1000adae
mov dword [ebp - 0x18], 0xf916744f
mov dword [ebp - 0x24], ebx
jmp 0x1000867a
mov ecx, dword [ebp - 0x24]
mov eax, dword [ebp - 0x404]
mov dword [eax + ecx*4], 0xb1f356d9
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], edi
jl 0x10008667
xor ecx, ecx
mov dword [ebp - 0x24], ebx
inc ecx
jmp 0x10008698
mov eax, dword [ebp - 0x24]
mov dword [ebp + eax*4 - 0x200], 0x81c91930
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], ecx
jl 0x10008687
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp + eax*4 - 0x124]
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp + eax*4 - 0x124]
mov eax, dword [ebp - 0x120]
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp + eax*4 - 0x124]
inc dword [ebp - 0x2c]
mov eax, dword [ebp - 0x28]
mov dword [ebp - 0x18], eax
mov eax, dword [ebp - 0x18]
imul eax, dword [ebp - 0x28]
add eax, dword [ebp - 0x20]
mov dword [ebp - 0x10c], eax
mov eax, dword [ebp - 0x2c]
sub eax, dword [ebp - 0x10c]
neg eax
sbb eax, eax
xor edx, edx
inc eax
mov dword [ebp - 0x4c], eax
mov ecx, dword [ebp - 0x124]
mov eax, dword [ebp - 0x4c]
cmp eax, ecx
setl dl
sub edx, 0x68dd
jne 0x1000870d
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp + eax*4 - 0x124]
mov eax, dword [ebp - 0x38]
xor edx, edx
mov eax, dword [ebp - 0x20]
imul ecx, dword [ebp + eax*4 - 0x124], 0xac8c
mov eax, dword [ebp - 0x110]
cmp ecx, eax
setne dl
cmp edx, 0xd700
jne 0x1000873c
cmp dword [ebp - 0x18], ebx
jne 0x1000873c
mov edx, ebx
jmp 0x1000873f
xor edx, edx
inc edx
mov eax, dword [ebp - 0x20]
xor ecx, ecx
mov eax, dword [ebp + eax*4 - 0x124]
mov eax, dword [ebp - 0x404]
cmp edx, dword [eax + 4]
mov edx, dword [ebp - 0x20]
mov eax, dword [ebp - 0x38]
setne cl
imul edx, ecx
xor ecx, ecx
cmp edx, eax
mov dword [esi + 4], edx
mov eax, dword [ebp - 0x28]
setl cl
xor edx, edx
imul ecx, ecx, 0x6042
cmp ecx, eax
mov eax, dword [ebp - 0x38]
setg dl
xor ecx, ecx
cmp edx, eax
mov eax, dword [ebp - 0x38]
setg cl
mov dword [ebp - 0x30], ecx
xor ecx, ecx
cmp dword [ebp - 0x30], eax
setg cl
mov dword [ebp - 0x18], ecx
lea ecx, [ebp - 0x404]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp + eax*4 - 0x124]
mov eax, dword [ebp - 0x110]
mov eax, dword [ebp - 0x38]
mov dword [ebp - 0x200], eax
call fcn.1000ae31
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], 2
jle 0x10008641
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], ebx
jg 0x10008605
mov dword [ebp - 0x4c], ebx
jmp 0x10008846
lea ecx, [ebp - 0x6e]
mov byte [ebp - 0x6e], bl
push ecx
push 0x10e5
mov cl, al
call fcn.100044a8
pop ecx
pop ecx
mov ecx, dword [ebp - 0x4c]
mov eax, dword [ebp - 0x1c4]
cmp dword [eax + ecx*4], ebx
je 0x10008837
mov ecx, dword [ebp - 0x4c]
mov eax, dword [ebp - 0x1c4]
cmp dword [eax + ecx*4], ebx
jne 0x1000884e
lea eax, [ebp - 0x110]
mov edx, 0x6a5d
push eax
push ecx
push ebx
lea eax, [ebp - 0x10c]
push eax
lea eax, [ebp - 0x1c4]
push eax
sub esp, 0x10
lea ecx, [ebp - 0x4c]
call fcn.10005fa9
add esp, 0x24
jmp 0x10008843
mov dword [ebp - 0x30], 0xa0b5bcdc
cmp dword [ebp - 0x30], ebx
jne 0x1000884e
inc dword [ebp - 0x4c]
xor eax, eax
inc eax
cmp dword [ebp - 0x4c], eax
jle 0x100087da
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x1c4]
call fcn.1000ae31
xor eax, eax
lea ecx, [ebp - 0x2bc]
inc eax
push eax
push ebx
push ecx
push 0x3fac
push 0x23f2
push 0x55d8
push 0x2945
lea ecx, [ebp - 0x104]
mov dl, al
push ecx
lea ecx, [ebp - 0xe8]
push ecx
lea ecx, [ebp - 0x108]
push ecx
lea ecx, [ebp - 0xd4]
push ecx
lea ecx, [ebp - 0x41]
call fcn.10004c8f
add esp, 0x2c
mov edx, 0x1fbd
push 0x6137
push 0x4ff2
push 0x15cc
push 1
push 0x76c8
push ecx
push 0x7cd7
push ecx
push 0x1b6d
push ecx
mov ecx, 0x11af
call fcn.1000450f
add esp, 0x20
push 0x7aee
push 0x10396954
sub esp, 0xc
push 0x459c
push 0x624d
push 0x1907
push 0x35a
push 1
push ecx
push ecx
mov ecx, 0x41f3
call fcn.100046c3
mov dword [ebp - 0x20], ebx
add esp, 0x38
cmp dword [ebp - 0x20], ebx
je 0x10008c6e
mov dword [ebp - 0x2c], 0x7011
cmp dword [ebp - 0x2c], 0x70a1
jle 0x10008957
mov esi, ebx
mov dword [ebp - 0x28], ebx
mov edi, esi
mov esi, 0x1b99
mov eax, edi
mov ecx, 0x10073a98
cdq
push edx
push eax
call fcn.1000ab96
dec edi
dec esi
jne 0x10008935
mov esi, dword [ebp - 0x28]
inc esi
mov dword [ebp - 0x28], esi
cmp esi, 0xcd7
jl 0x1000892e
mov dword [ebp - 4], 0x28
cmp dword [ebp - 0x2c], 0x6f92
jge 0x10008976
mov edx, str.jlidzp_kmuygl_hsekmotz_cin_lyoujwqs_yyxzugpo_jqv_deizbf_mpcvj_xvfoejcr_esagjuzbl_kcbodivya_jrvr
mov ecx, 0x10073a98
call fcn.1000d257
or dword [ebp - 4], 0xffffffff
mov dword [ebp - 0x18], ebx
jmp 0x100089b2
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x26c], 0x24dc41fd
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 2
jl 0x100089a1
mov dword [ebp - 0x38], 0x539f
cmp dword [ebp - 0x38], 0x55c6
jle 0x10008a5b
mov eax, ebx
mov dword [ebp - 0x28], ebx
mov ecx, ebx
mov dword [ebp - 0x18], ebx
cdq
mov edi, ebx
idiv ecx
mov ecx, edx
mov dword [ebp - 0x2c], ecx
mov esi, ebx
mov eax, esi
and eax, edi
or eax, ecx
lea ecx, [ebp - 0x5c0]
cdq
push edx
push eax
call fcn.10001a55
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x10008a00
mov eax, dword [eax]
push eax
call fcn.10040afc
pop ecx
push ebx
push 1
lea ecx, [ebp - 0x5c0]
call fcn.1000b217
mov ecx, dword [ebp - 0x2c]
inc esi
cmp esi, 0x138b
jl 0x100089e2
inc edi
cmp edi, 0x7754
jl 0x100089e0
mov ecx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x28]
inc ecx
mov dword [ebp - 0x18], ecx
cmp ecx, 0x701b
jl 0x100089d6
inc eax
mov dword [ebp - 0x28], eax
cmp eax, 0x675e
jl 0x100089d1
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_EndDoc]
mov dword [ebp - 0x20], 0x1d
jmp 0x10008b6a
push dword [ebp - 0x2a8]
movdqa xmm0, xmmword [0x10067590]
lea eax, [ebp - 0x510]
push eax
lea eax, [ebp - 0x520]
mov dword [ebp - 0x22c], ebx
push eax
push ebx
lea ecx, [ebp - 0x22c]
mov dword [ebp - 0x228], ebx
movdqu xmmword [ebp - 0x520], xmm0
mov dword [ebp - 0x224], ebx
call fcn.1000d7c5
mov dword [ebp - 0x18], ebx
jmp 0x10008abf
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x398], 0x711d
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 3
jl 0x10008aae
mov ecx, dword [ebp - 0x268]
xor edx, edx
mov eax, dword [ebp - 0x20]
cmp ecx, eax
mov ecx, dword [ebp - 0x398]
mov eax, dword [ebp - 0x20]
setle dl
imul ecx, edx
xor edx, edx
add ecx, 0x23de
cmp ecx, eax
mov eax, dword [ebp - 0x20]
setle dl
xor ecx, ecx
cmp edx, eax
mov eax, dword [ebp - 0x394]
setle cl
neg ecx
mov dword [ebp - 0x30], ecx
xor ecx, ecx
cmp dword [ebp - 0x30], eax
mov eax, dword [ebp - 0x268]
setge cl
xor edx, edx
add ecx, eax
mov eax, dword [ebp - 0x20]
cmp ecx, eax
setle dl
cmp edx, 0xbf7c2f5a
jbe 0x10008b28
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x268]
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x398]
mov eax, dword [ebp - 0x20]
cmp dword [ebp - 0x20], ebx
jne 0x10008b43
mov eax, ebx
jmp 0x10008b46
xor eax, eax
inc eax
cmp eax, 0xfffa
sbb ecx, ecx
neg ecx
imul ecx, dword [ebp - 0x20]
mov eax, dword [ebp - 0x22c]
mov dword [eax + 0xc], ecx
lea ecx, [ebp - 0x22c]
call fcn.1000ae31
dec dword [ebp - 0x20]
cmp dword [ebp - 0x20], 0xfffffffd
je 0x10008a67
cmp dword [ebp - 0x38], 0x516d
jge 0x10008b88
push str.vfryto_kxaoh_lnpq_raugyjmf_kjpvkmaa_frfsqaube_tvpezr_avtlr_qovncqvkg_gls_brqlqrv
call fcn.10040afc
pop ecx
or dword [ebp - 4], 0xffffffff
mov dword [ebp - 0x1c], 0x6291
cmp dword [ebp - 0x1c], 0x63c7
jle 0x10008c01
mov eax, ebx
mov dword [ebp - 0x18], ebx
mov dword [ebp - 0x38], ebx
mov ecx, ebx
mov dword [ebp - 0x2c], 0xb86
mov dword [ebp - 0x28], ecx
mov esi, eax
mov edi, ebx
shl esi, cl
mov eax, esi
mov ecx, 0x10073a98
or eax, edi
cdq
push edx
push eax
call fcn.1000ab96
inc edi
cmp edi, 0x29cf
jl 0x10008bb6
mov ecx, dword [ebp - 0x28]
mov esi, dword [ebp - 0x38]
add ecx, esi
dec dword [ebp - 0x2c]
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x28], ecx
jne 0x10008bb0
inc esi
mov dword [ebp - 0x38], esi
cmp esi, 0x16e6
jl 0x10008ba4
inc eax
mov dword [ebp - 0x18], eax
cmp eax, 0x1577
jl 0x10008ba1
push ebx
call dword [sym.imp.GDI32.dll_CreatePalette]
mov byte [ebp - 0x70], bl
mov dword [ebp - 4], 0x2c
cmp dword [ebp - 0x1c], 0x6016
jge 0x10008c41
mov edx, str.hicox_swpt_sjd_ssiknbq_yyprz
mov ecx, 0x10073a98
call fcn.1000d257
jmp 0x10008c41
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x70]
push 0x7483
push 0x55cc
push ecx
xor eax, eax
mov ecx, 0x145f
inc eax
push eax
push eax
push 0x133b
mov dl, al
call fcn.100047fe
add esp, 0x18
jmp 0x10008cb8
mov dword [ebp - 0x20], 0x13
jmp 0x10008cb2
push 0x3d5c
push 0x5806
lea eax, [ebp - 0x7a]
mov byte [ebp - 0x7a], bl
push eax
xor eax, eax
mov edx, 0x7a06
inc eax
mov ecx, 0x896
push eax
push 0x9ff
push 0x49c9
push eax
push 0x5db7
push eax
call fcn.1000495e
add esp, 0x24
dec dword [ebp - 0x20]
cmp dword [ebp - 0x20], 0xffffffe7
je 0x10008c77
mov byte [ebp - 0x31], bl
cmp byte [ebp - 0x31], 0
je 0x10008ce3
push 0x52f3
xor eax, eax
mov edx, 0x5b68
push ebx
inc eax
mov ecx, 0x2ffe
push eax
push eax
push 0x1eac
call fcn.10005223
add esp, 0x14
push 1
lea ecx, [ebp - 0x23c]
mov dword [ebp - 0xdc], ebx
call fcn.1000adae
lea ecx, [ebp - 0x98]
mov dword [ebp - 4], 0x2e
push ecx
push ecx
lea ecx, [ebp - 0x23c]
xor eax, eax
push ecx
push ecx
push ecx
inc eax
push 0x1943
mov dword [ebp - 0x30], eax
mov dword [ebp - 0x220], 0xfffc
push eax
call fcn.10004a59
add esp, 0x1c
mov dword [ebp - 0x98], ebx
jmp 0x10008d4b
mov eax, dword [ebp - 0x98]
mov dword [ebp + eax*4 - 0x684], 0xdbcabebf
inc dword [ebp - 0x98]
cmp dword [ebp - 0x98], 4
jl 0x10008d34
mov eax, dword [ebp - 0x23c]
mov dword [eax], ebx
xor eax, eax
mov dword [ebp - 0x2cc], 3
inc eax
mov dword [ebp - 0x2c4], 0x94ff
push eax
push 0x103c
push 0x2a87
push ebx
push 0x7dd0
lea ecx, [ebp - 0x208]
mov dword [ebp - 0x210], 0xb91ee4c
push ecx
lea ecx, [ebp - 0x2c4]
mov dword [ebp - 0x208], ebx
push ecx
push eax
lea eax, [ebp - 0x23c]
mov edx, 0x9c2
push eax
push 0x3351
lea eax, [ebp - 0x210]
mov ecx, 0x4e01
push eax
lea eax, [ebp - 0x2cc]
push eax
push 0x7727
call fcn.10005070
add esp, 0x34
lea eax, [ebp - 0x220]
push 1
push eax
call fcn.10004a90
mov eax, dword [ebp - 0x23c]
pop ecx
pop ecx
inc dword [eax]
cmp dword [eax], 0xb
jne 0x10008d5c
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x23c]
call fcn.1000ae31
mov eax, dword [ebp - 0xe8]
mov dword [ebp - 0xcc], 0xfffffffa
add eax, 4
mov dword [ebp - 0x2d4], 1
mov dword [ebp - 0x230], 0xfffffff6
mov dword [ebp - 0x90], 0x96378555
mov dword [ebp - 0x30], eax
mov dword [ebp - 0xcc], ebx
cmp dword [ebp - 0xcc], 6
jle 0x10008f81
mov dword [ebp - 0x168], 0x1c97412d
lea ecx, [ebp - 0x3ec]
push 2
call fcn.1000adae
push ecx
lea eax, [ebp - 0x2d8]
mov dword [ebp - 4], 0x2f
push eax
lea eax, [ebp - 0x3ec]
push eax
push 0x732c
push 0x75f0
push 0x6c37
push 1
call fcn.100026b2
mov dword [ebp - 0x18], 0x6210
add esp, 0x1c
cmp dword [ebp - 0x18], 0x655e
jle 0x10008f01
mov edi, ebx
mov dword [ebp - 0x2c], ebx
mov dword [ebp - 0x3c], edi
mov dword [ebp - 0x28], 0x41cd
mov esi, ebx
mov eax, edi
lea ecx, [ebp - 0x5f0]
xor eax, esi
cdq
push edx
push eax
call fcn.10001a55
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x10008ece
mov eax, dword [eax]
push eax
call fcn.10040afc
pop ecx
push ebx
push 1
lea ecx, [ebp - 0x5f0]
call fcn.1000b217
inc esi
cmp esi, 0x7814
jl 0x10008eb2
dec edi
dec dword [ebp - 0x28]
jne 0x10008eb0
mov edi, dword [ebp - 0x2c]
inc edi
mov dword [ebp - 0x2c], edi
cmp edi, 0x5bf4
jl 0x10008ea6
cmp dword [ebp - 0x18], 0x5ffb
jge 0x10008f15
push str.klomxeru_qpapoozju_rpxqo_gdb_sfeobvt_jegwcsy_ndtdibfmn
call fcn.10040afc
pop ecx
push 0x2f52
lea eax, [ebp - 0xcc]
mov dword [ebp - 4], 0x2f
push eax
lea eax, [ebp - 0x2d4]
push eax
push ecx
lea eax, [ebp - 0x230]
push 1
push eax
lea edx, [ebp - 0x168]
call fcn.10005f52
lea eax, [ebp - 0x90]
push eax
lea eax, [ebp - 0x3ec]
push eax
xor eax, eax
lea edx, [ebp - 0x168]
inc eax
push ebx
push eax
mov cl, al
call fcn.1000637e
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x3ec]
add esp, 0x28
call fcn.1000ae31
inc dword [ebp - 0xcc]
jmp 0x10008e3e
mov dword [ebp - 0x90], ebx
jmp 0x10008fa5
push 1
push 0x413c
push ecx
mov byte [ebp - 0x72], bl
lea ecx, [ebp - 0x72]
call fcn.10004ad7
add esp, 0xc
inc dword [ebp - 0x90]
cmp dword [ebp - 0x90], 0x1c
jge 0x10008f89
mov eax, 0x462d5e48
mov dword [ebp - 0xfc], eax
mov dword [ebp - 0xf8], eax
mov dword [ebp - 0xf4], eax
mov dword [ebp - 0xf0], eax
mov dword [ebp - 0xf0], ebx
cmp dword [ebp - 0xf0], 0xffffffe5
jge 0x1000909d
xor eax, eax
inc eax
mov dword [ebp - 0x4c4], eax
mov dword [ebp - 0x4c0], eax
mov dword [ebp - 0x4bc], eax
mov dword [ebp - 0x4b8], eax
mov dword [ebp - 0x18], 0xfffffff9
mov dword [ebp - 0x18], ebx
cmp dword [ebp - 0x18], 3
jg 0x10009082
push eax
push 0x6e50
push 0x668e
push 0x2f22
push 0x623a
push eax
push 0x2f37
mov edx, 0x6fa
mov cl, al
call fcn.10004b2e
add esp, 0x1c
mov byte [ebp - 0x7c], bl
xor eax, eax
lea ecx, [ebp - 0x7c]
inc eax
mov dl, al
push eax
push eax
push 0x6b69
push 0x215b
push 0x1fb1
push 0x6961
push ecx
push 0x3776
push 0x48a6
push 0x5b8c
push 0x57b5
mov ecx, 0x1a72
call fcn.10004c8f
add esp, 0x2c
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 3
push 1
pop eax
jle 0x10009009
cmp dword [ebp - 0xf0], ebx
jne 0x100090a5
dec dword [ebp - 0xf0]
cmp dword [ebp - 0xf0], 0xffffffe5
jl 0x10008fe1
cmp dword [ebp - 0xf0], ebx
je 0x100090ab
mov eax, dword [ebp - 0xf0]
mov eax, dword [ebp - 0xfc]
mov eax, dword [ebp - 0xf0]
mov eax, dword [ebp - 0xfc]
mov eax, dword [ebp - 0xf0]
mov dword [ebp - 0xf4], eax
mov dword [ebp - 0x38], 0x1a7e
cmp dword [ebp - 0x38], 0x1e4a
jle 0x1000916e
push ebx
push ebx
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
push ebx
push ebx
call dword [sym.imp.USER32.dll_CreateDialogIndirectParamA]
mov eax, ebx
mov dword [ebp - 0x28], ebx
mov edi, ebx
mov dword [ebp - 0x18], ebx
mov ecx, edi
mov dword [ebp - 0x3c], ebx
and ecx, eax
mov edi, ebx
mov dword [ebp - 0x2c], ecx
mov esi, ebx
mov eax, edi
cdq
idiv esi
xor edx, ecx
lea ecx, [ebp - 0x620]
mov eax, edx
cdq
push edx
push eax
call fcn.10001a55
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x10009127
mov eax, dword [eax]
push eax
call fcn.10040afc
pop ecx
push ebx
push 1
lea ecx, [ebp - 0x620]
call fcn.1000b217
mov ecx, dword [ebp - 0x2c]
inc esi
cmp esi, 0x7a1c
jl 0x10009106
inc edi
cmp edi, 0xdc6
jl 0x10009104
mov edi, dword [ebp - 0x18]
mov eax, dword [ebp - 0x28]
inc edi
mov dword [ebp - 0x18], edi
cmp edi, 0x3883
jl 0x100090f8
inc eax
mov dword [ebp - 0x28], eax
cmp eax, 0x7bfb
jl 0x100090f3
mov dword [ebp - 0x24], 0x439beb06
cmp dword [ebp - 0x38], 0x1770
jge 0x10009189
push str.xkgevsa_sbpqhi_rqjrhi_evmt_noobgu
call fcn.10040afc
pop ecx
or dword [ebp - 4], 0xffffffff
mov dword [ebp - 0x1c], 6
mov dword [ebp - 0x18], ebx
jmp 0x100091aa
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x278], 0xffffffff
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 2
jl 0x10009199
mov eax, dword [ebp - 0x24]
mov dword [ebp - 0x274], ebx
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0x274]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x24], 0xd
jmp 0x100091f3
mov dword [ebp - 0x1c], ebx
jmp 0x100091ea
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0x278], 0x7e4a9061
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 2
jl 0x100091d9
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], 0x2d
jge 0x100091d4
mov byte [ebp - 0xa0], bl
mov dword [ebp - 0x9f], 0xd82504f9
mov word [ebp - 0x9b], 0xf24a
mov dword [ebp - 0x40], ebx
cmp dword [ebp - 0x40], ebx
je 0x10009362
mov dword [ebp - 0x18], ebx
jmp 0x10009234
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x284], 0x24dc41fd
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 2
jl 0x10009223
mov dword [ebp - 0x40], 0x1d
jmp 0x10009349
push dword [ebp - 0x2d8]
movdqa xmm0, xmmword [0x10067590]
lea eax, [ebp - 0x4f0]
push eax
lea eax, [ebp - 0x500]
mov dword [ebp - 0x24c], ebx
push eax
push ebx
lea ecx, [ebp - 0x24c]
mov dword [ebp - 0x248], ebx
movdqu xmmword [ebp - 0x500], xmm0
mov dword [ebp - 0x244], ebx
call fcn.1000d7c5
mov dword [ebp - 0x18], ebx
jmp 0x1000929e
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x344], 0x711d
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 3
jl 0x1000928d
mov ecx, dword [ebp - 0x280]
xor edx, edx
mov eax, dword [ebp - 0x40]
cmp ecx, eax
mov ecx, dword [ebp - 0x344]
mov eax, dword [ebp - 0x40]
setle dl
imul ecx, edx
xor edx, edx
add ecx, 0x23de
cmp ecx, eax
mov eax, dword [ebp - 0x40]
setle dl
xor ecx, ecx
cmp edx, eax
mov eax, dword [ebp - 0x340]
setle cl
neg ecx
mov dword [ebp - 0x3c], ecx
xor ecx, ecx
cmp dword [ebp - 0x3c], eax
mov eax, dword [ebp - 0x280]
setge cl
xor edx, edx
add ecx, eax
mov eax, dword [ebp - 0x40]
cmp ecx, eax
setle dl
cmp edx, 0xbf7c2f5a
jbe 0x10009307
mov eax, dword [ebp - 0x40]
mov eax, dword [ebp - 0x280]
mov eax, dword [ebp - 0x40]
mov eax, dword [ebp - 0x344]
mov eax, dword [ebp - 0x40]
cmp dword [ebp - 0x40], ebx
jne 0x10009322
mov eax, ebx
jmp 0x10009325
xor eax, eax
inc eax
cmp eax, 0xfffa
sbb ecx, ecx
neg ecx
imul ecx, dword [ebp - 0x40]
mov eax, dword [ebp - 0x24c]
mov dword [eax + 0xc], ecx
lea ecx, [ebp - 0x24c]
call fcn.1000ae31
dec dword [ebp - 0x40]
cmp dword [ebp - 0x40], 0xfffffffd
je 0x10009246
sub esp, 0x10
push 1
call fcn.10004e45
add esp, 0x14
jmp 0x1000937b
xor eax, eax
lea ecx, [ebp - 0x40]
inc eax
xor dl, dl
push 0x146f
push eax
push ecx
mov cl, al
call fcn.100030b4
add esp, 0xc
mov dword [ebp - 0x28], 0x2c62
cmp dword [ebp - 0x28], 0x2e0d
jle 0x100093d2
mov edi, ebx
mov esi, ebx
mov eax, esi
lea ecx, [ebp - 0x650]
or eax, edi
cdq
push edx
push eax
call fcn.10001a55
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x100093ab
mov eax, dword [eax]
push eax
call fcn.10040afc
pop ecx
push ebx
push 1
lea ecx, [ebp - 0x650]
call fcn.1000b217
inc esi
cmp esi, 0x6b32
jl 0x1000938f
inc edi
cmp edi, 0xe49
jl 0x1000938d
mov byte [ebp - 0x5d], bl
cmp dword [ebp - 0x28], 0x2b2f
jge 0x100093e9
push str.iwmueoato_vlc_qxxdq_gfryuz_vuicw
call fcn.10040afc
pop ecx
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x5d]
xor eax, eax
inc eax
push eax
push ecx
mov dl, al
mov cl, al
call fcn.10004f01
pop ecx
pop ecx
push 0xa
pop eax
mov word [ebp - 0xc4], ax
lea ecx, [ebp - 0x350]
xor eax, eax
inc eax
mov dword [ebp - 0x3c], eax
mov dword [ebp - 0x18], 0xffffffff
mov dword [ebp - 0x3c], 0xe90a624c
mov dword [ebp - 0x3c], eax
mov dword [ebp - 0x3c], eax
mov dword [ebp - 0x3c], 2
mov dword [ebp - 0x3c], 0x950707df
mov dword [ebp - 0x3c], 0xbda7fe64
mov dword [ebp - 0x250], 0xfffffffb
mov dword [ebp - 0x3c], 0x52733582
push 3
call fcn.1000adae
mov dword [ebp - 4], 0x36
mov dword [ebp - 0x2dc], 0x55fff839
mov dword [ebp - 0x2e4], 0x3f8de905
mov dword [ebp - 0x88], ebx
jmp 0x10009491
mov eax, dword [ebp - 0x88]
mov dword [ebp + eax*4 - 0x548], 0xa6318529
inc dword [ebp - 0x88]
cmp dword [ebp - 0x88], 2
jl 0x1000947a
lea eax, [ebp - 0x88]
mov ecx, 0x4527
push eax
push 0x16f4
push 0x2985
xor eax, eax
lea edx, [ebp - 0x350]
inc eax
push eax
push 0x30e7
push 0x3985
push eax
push 0x69dc
push ebx
call fcn.1000495e
add esp, 0x24
lea ecx, [ebp - 0x2dc]
push 0x39ad
sub esp, 0x14
push ebx
call fcn.10002efd
add esp, 0x1c
mov dword [ebp - 0x18], ebx
jmp 0x100095a8
xor eax, eax
mov dword [ebp - 0x1d4], 0x1ffb
inc eax
mov dword [ebp - 0x2ec], 0x653ddb20
push eax
push ecx
lea ecx, [ebp - 0x1d4]
push ecx
push eax
push 0x3e6b
push 0x5570
push 0x3d95
push eax
push 0x27ee
push 0x1ecf
push 0x440
lea eax, [ebp - 0x2e4]
push 0x718
push eax
lea edx, [ebp - 0x250]
lea ecx, [ebp - 0x2ec]
call fcn.10005070
mov byte [ebp - 0x31], bl
add esp, 0x34
cmp byte [ebp - 0x31], 0
je 0x100095a5
xor eax, eax
mov edx, 0xdfa
inc eax
mov ecx, 0x64a0
push eax
push 0x814
push 0x4564
push eax
push 0x5671
push 0x42ea
push 0x4eeb
push ebx
push 0x2848
push 0xb6d
push 0x525f
push 0x6f89
push 0x95f
call fcn.10005070
add esp, 0x34
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 2
lea ecx, [ebp - 0x350]
jle 0x100094f2
or dword [ebp - 4], 0xffffffff
call fcn.1000ae31
push 2
pop esi
mov dword [ebp - 0x2c], ebx
mov dword [ebp - 0x28], esi
mov dword [ebp - 0x1c], esi
cmp esi, 7
jae 0x10009c34
xor eax, eax
mov dword [ebp - 0x3c], 2
inc eax
mov byte [ebp - 0x6d], bl
push 0x25fb
push eax
push eax
push eax
lea eax, [ebp - 0x6d]
mov edx, 0x41f8
push eax
mov ecx, 0x7d8c
call fcn.10005223
add esp, 0x14
mov byte [ebp - 0x65], bl
lea eax, [ebp - 0x65]
push eax
call fcn.100054c8
movzx eax, byte [ebp - 0xa0]
pop ecx
lea eax, [eax*2 + 2]
cmp esi, eax
jne 0x100098c1
mov dword [ebp - 0xb0], 0x2a2b3b7b
mov dword [ebp - 0xa4], 0x580
mov dword [ebp - 0xb8], ebx
mov dword [ebp - 0x4d8], ebx
mov eax, dword [ebp - 0xb0]
dec eax
neg eax
sbb eax, eax
neg eax
imul eax, eax, 0x5520
test eax, eax
je 0x10009668
cmp dword [ebp - 0xa4], ebx
je 0x10009668
xor eax, eax
inc eax
jmp 0x1000966a
mov eax, ebx
mov dword [ebp - 0xb8], eax
mov eax, dword [ebp - 0xa4]
mov eax, dword [ebp - 0xb0]
mov eax, dword [ebp - 0xa4]
mov eax, dword [ebp - 0xb8]
mov eax, dword [ebp - 0xb0]
xor eax, eax
inc eax
cmp dword [ebp - 0xb0], eax
je 0x100096f8
push ecx
lea ecx, [ebp - 0x2f8]
mov dword [ebp - 0x2f8], 0x984bbc18
push ecx
push ecx
push ecx
push eax
lea eax, [ebp - 0x25c]
mov dword [ebp - 0x25c], 0x8841
push eax
sub esp, 0xc
mov dword [ebp - 0x2b8], 0x174ed7b9
lea eax, [ebp - 0x2b8]
push 0x4c2d
push eax
push ecx
push ecx
lea eax, [ebp - 0xb0]
push eax
lea eax, [ebp - 0xb8]
push eax
lea ecx, [ebp - 0xa4]
call fcn.100029ea
add esp, 0x3c
jmp 0x1000971b
lea ecx, [ebp - 0xa4]
mov dl, al
push ecx
push eax
mov cl, al
call fcn.100056ad
pop ecx
lea eax, [ebp - 0xb8]
push eax
push 1
call fcn.100058a2
add esp, 0xc
push ecx
push ecx
push 1
push ecx
lea ecx, [ebp - 0xb8]
call fcn.10005a7a
movzx eax, byte [ebp + esi - 0xa0]
lea ecx, [ebp - 0x488]
add esp, 0x10
lea edi, [eax + 1]
dec eax
add esi, eax
mov dword [ebp - 0x2c], edi
push 2
mov dword [ebp - 0x1c], esi
call fcn.1000adae
push 1
lea eax, [ebp - 0x488]
mov dword [ebp - 4], 0x37
push eax
lea eax, [ebp - 0x4e4]
mov dword [ebp - 0x38], 0x9bdba76a
push eax
push ecx
push ecx
push 0x6c56
push ecx
call fcn.10005ba2
xor ecx, ecx
add esp, 0x1c
inc ecx
mov dword [ebp - 0x38], ecx
cmp dword [ebp - 0x38], ebx
jl 0x100098aa
mov dword [ebp - 0x24], 0x5146
cmp dword [ebp - 0x24], 0x53d1
jle 0x1000982a
mov dword [ebp - 0x28], ebx
mov esi, ebx
mov edi, ebx
mov eax, esi
mov ecx, ebx
cdq
idiv edi
mov dword [ebp - 0x18], ecx
mov dword [ebp - 0x3c], edx
mov eax, ecx
lea ecx, [ebp - 0x674]
and eax, edx
or eax, dword [ebp - 0x28]
cdq
push edx
push eax
call fcn.10001a55
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x100097d3
mov eax, dword [eax]
push eax
call fcn.10040afc
pop ecx
push ebx
push 1
lea ecx, [ebp - 0x674]
call fcn.1000b217
mov ecx, dword [ebp - 0x18]
mov edx, dword [ebp - 0x3c]
inc ecx
mov dword [ebp - 0x18], ecx
cmp ecx, 0x624a
jl 0x100097b4
inc edi
cmp edi, 0x60b4
jl 0x100097a7
inc esi
cmp esi, 0x3216
jl 0x100097a5
mov eax, dword [ebp - 0x28]
inc eax
mov dword [ebp - 0x28], eax
cmp eax, 0x675
jl 0x100097a3
push ebx
push 0xb74
push ebx
call dword [sym.imp.GDI32.dll_GetRegionData]
xor ecx, ecx
inc ecx
cmp dword [ebp - 0x24], 0x50ca
jge 0x10009841
push str.onfcr_rjsbpyot_xtisjdb_bqlozs_ffqgfcoj_veo_fvhkwy_sibaywb_tubv_iwwhcc_clscww
call fcn.10040afc
pop ecx
xor ecx, ecx
inc ecx
mov dword [ebp - 4], 0x37
mov dword [ebp - 0x18], ebx
jmp 0x1000985e
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0xb4], 0x7a888ada
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], ecx
jl 0x1000984d
mov dword [ebp - 0xb4], ebx
jmp 0x1000989a
cmp dword [ebp - 0xb4], ecx
jle 0x1000986b
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x488]
call fcn.1000ae31
mov esi, dword [ebp - 0x1c]
jmp 0x10009c2c
mov dword [ebp - 0x3c], ebx
lea ecx, [ebp - 0x374]
push 3
call fcn.1000adae
mov dword [ebp - 4], 0x3a
lea ecx, [ebp - 0x35c]
mov dword [ebp - 0x27c], 0x126ff23b
mov dword [ebp - 0x2c0], ebx
mov dword [ebp - 0x2e0], 7
push 3
call fcn.1000adae
push 0x7f18
push 0x6f48
xor eax, eax
mov byte [ebp - 4], 0x3b
push 0x58d
inc eax
mov dword [ebp - 0x270], 0x928d
push eax
lea ecx, [ebp - 0x374]
mov dl, al
push ebx
push ecx
lea ecx, [ebp - 0x264]
call fcn.100047fe
add esp, 0x14
lea eax, [ebp - 0x35c]
mov edx, 0x72b7
push eax
push ecx
lea eax, [ebp - 0x264]
push 1
push eax
call fcn.10005bf7
mov dword [ebp - 0x24], 0x659a
add esp, 0x14
cmp dword [ebp - 0x24], 0x66a2
jle 0x100099b9
mov edi, ebx
mov dword [ebp - 0x38], ebx
mov esi, ebx
mov dword [ebp - 0x18], ebx
mov ecx, esi
mov dword [ebp - 0x3c], edi
mov esi, edi
mov dword [ebp - 0x20], ebx
sar esi, cl
mov edi, ebx
mov eax, edi
mov ecx, 0x10073a98
xor eax, esi
cdq
push edx
push eax
call fcn.1000ab96
inc edi
cmp edi, 0x6879
jl 0x1000997e
mov esi, dword [ebp - 0x18]
mov edi, dword [ebp - 0x38]
inc esi
mov dword [ebp - 0x18], esi
cmp esi, 0x23d8
jl 0x10009970
inc edi
mov dword [ebp - 0x38], edi
cmp edi, 0x3edb
jl 0x1000996b
mov esi, dword [ebp - 0x1c]
push 0x345
push ecx
push 0x3dbc
push ecx
push ecx
lea eax, [ebp - 0x2e0]
push eax
push ebx
call fcn.10004a59
add esp, 0x1c
mov byte [ebp - 4], 0x3c
cmp dword [ebp - 0x24], 0x63c4
jge 0x10009a16
mov edx, str.vnyriq_lnkwlj_hocvkkcfz_wunnofw_jgv_mreozyql_djr_sjrd_cthacq_pfpbtgcof_sekly
mov ecx, 0x10073a98
call fcn.1000d257
jmp 0x10009a16
push ecx
xor eax, eax
mov dword [ebp - 4], 0x3b
push 0x7d0e
inc eax
lea edx, [ebp - 0x374]
push eax
lea eax, [ebp - 0x270]
push eax
push ecx
push 0x677a
lea eax, [ebp - 0x35c]
push eax
push ecx
lea eax, [ebp - 0x2c0]
push eax
lea eax, [ebp - 0x27c]
push eax
call fcn.10005ceb
add esp, 0x28
lea ecx, [ebp - 0x35c]
call fcn.1000ae31
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x374]
call fcn.1000ae31
movzx edx, byte [ebp + esi - 0x9f]
mov eax, esi
sub eax, dword [ebp - 0x2c]
movzx eax, byte [ebp + eax - 0xa2]
movzx eax, word [ebp + eax*2 - 0xc4]
mov ecx, eax
and eax, edx
or ecx, edx
sub ecx, eax
movzx eax, byte [ebp + esi - 0xa0]
mov word [ebp + eax*2 - 0xc4], cx
mov dword [ebp - 0x18], ebx
mov dword [ebp - 0x18], ebx
cmp dword [ebp - 0x18], 0x16
jg 0x10009c29
push 1
lea ecx, [ebp - 0x38c]
call fcn.1000adae
mov dword [ebp - 4], 0x3e
mov dword [ebp - 0x3c], 0x4cdd
cmp dword [ebp - 0x3c], 0x4def
jle 0x10009b4b
push 0x22ae
push 0x2018
push ebx
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_CreateCaret]
mov edi, ebx
mov eax, ebx
mov dword [ebp - 0x20], 0x893
mov dword [ebp - 0x24], eax
mov esi, eax
mov dword [ebp - 0x38], 0x64f0
mov eax, ebx
mov dword [ebp - 0x2c], ebx
or eax, esi
mov ecx, 0x10073a98
cdq
push edx
push eax
call fcn.1000ab96
mov eax, dword [ebp - 0x2c]
inc eax
mov dword [ebp - 0x2c], eax
cmp eax, 0x1b70
jl 0x10009b0f
inc esi
dec dword [ebp - 0x38]
jne 0x10009b0a
mov eax, dword [ebp - 0x24]
add eax, edi
dec dword [ebp - 0x20]
mov dword [ebp - 0x24], eax
jne 0x10009b01
inc edi
cmp edi, 0x62f6
jl 0x10009af5
mov esi, dword [ebp - 0x1c]
push ecx
lea eax, [ebp - 0x8c]
mov edx, 0x546d
push eax
push ebx
push 0x5ff6
push ecx
lea eax, [ebp - 0x38c]
push eax
push 0x541a
push ecx
push 0x64d1
push 0x406e
call fcn.10005ceb
add esp, 0x28
mov byte [ebp - 4], 0x3f
cmp dword [ebp - 0x3c], 0x4b57
jge 0x10009bbe
mov edx, str.gpllyeymw_pabt_oqbqlglu_wujyjtpy_uyriqp_vwywpcx_jscx_jvfnvk_esqjm
mov ecx, 0x10073a98
call fcn.1000d257
jmp 0x10009bbe
xor edx, edx
mov dword [ebp - 0x8c], ebx
inc edx
jmp 0x10009be0
mov eax, dword [ebp - 0x8c]
mov dword [ebp + eax*4 - 0x118], 0xe04822b1
inc dword [ebp - 0x8c]
cmp dword [ebp - 0x8c], 2
jl 0x10009bc9
mov dword [ebp - 0x118], ebx
jmp 0x10009c0a
cmp dword [ebp - 0x118], edx
jl 0x10009bf1
mov dword [ebp - 0x2c], ebx
add esi, 2
jmp 0x100095c7
mov dword [ebp - 0x24], 0xca4f833f
mov dword [ebp - 0x28], 0xffffffff
mov dword [ebp - 0x24], ebx
jmp 0x10009c58
mov eax, dword [ebp - 0x24]
mov dword [ebp + eax*4 - 0x13c], 1
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], 3
jl 0x10009c47
mov dword [ebp - 0x24], ebx
jmp 0x10009c74
mov eax, dword [ebp - 0x24]
mov dword [ebp + eax*4 - 0x3a4], 0xffffffff
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], 3
jl 0x10009c63
mov dword [ebp - 0x24], ebx
jmp 0x10009d5e
mov dword [ebp - 0x2c], 0xb8842b4c
mov dword [ebp - 0x3c], 0xe1f230b5
mov dword [ebp - 0x18], ebx
jmp 0x10009ca6
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x52c], 1
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 3
jl 0x10009c95
mov eax, dword [ebp - 0x24]
xor edx, edx
mov eax, dword [ebp + eax*4 - 0x13c]
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp + eax*4 - 0x13c]
mov ecx, dword [ebp - 0x13c]
mov eax, dword [ebp - 0x28]
cmp ecx, eax
mov eax, dword [ebp - 0x24]
setge dl
xor ecx, ecx
mov dword [ebp - 0x3c], edx
mov edx, dword [ebp + eax*4 - 0x13c]
mov eax, dword [ebp - 0x28]
cmp dword [ebp - 0x3c], eax
setl cl
add edx, ecx
xor ecx, ecx
imul eax, edx, 0xc39c
xor edx, edx
inc edx
mov dword [ebp - 0x3a4], eax
mov eax, dword [ebp - 0x134]
mov dword [ebp - 0x524], edx
mov eax, dword [ebp - 0x24]
cmp eax, edx
mov edx, dword [ebp - 0x134]
mov eax, dword [ebp - 0x28]
setg cl
add ecx, ecx
neg edx
sub edx, ecx
xor ecx, ecx
cmp edx, eax
setl cl
mov dword [ebp - 0x2c], ecx
mov eax, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x134]
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp + eax*4 - 0x13c]
mov eax, dword [ebp - 0x138]
cmp dword [ebp - 0x2c], ebx
jne 0x10009d55
cmp dword [ebp - 0x24], 2
jle 0x10009c82
mov dword [ebp - 0x3a0], ebx
xor eax, eax
mov word [ebp - 0xc2], ax
mov eax, 0x8ade19d2
mov dword [ebp - 0x190], eax
mov dword [ebp - 0x18c], eax
mov dword [ebp - 0x188], eax
mov dword [ebp - 0x184], eax
mov dword [ebp - 0x3c], 0x5f40
mov dword [ebp - 0x2c], 0x27e3
cmp dword [ebp - 0x2c], 0x2abb
jle 0x10009df9
mov esi, ebx
mov dword [ebp - 0x28], ebx
mov dword [ebp - 0x18], esi
mov dword [ebp - 0x3c], 0x6f7
mov edi, ebx
mov eax, edi
mov ecx, 0x10073a98
or eax, esi
cdq
push edx
push eax
call fcn.1000ab96
inc edi
cmp edi, 0x2bb
jl 0x10009dbc
dec esi
dec dword [ebp - 0x3c]
jne 0x10009dba
xor ecx, ecx
mov dword [ebp - 0x18], ebx
inc ecx
jmp 0x10009e12
cmp dword [ebp - 0x18], ecx
jl 0x10009e01
xor eax, eax
inc eax
mov dword [ebp - 0x38], eax
mov dword [ebp - 0x30], eax
mov dword [ebp - 0x18], ebx
jmp 0x1000a68a
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x65c], 4
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 3
jl 0x1000a679
mov dword [ebp - 0x38], ebx
jmp 0x1000a6fd
mov dword [ebp - 0x2a0], 0x76ff55e0
lea ecx, [ebp - 0x498]
push 2
call fcn.1000adae
mov dword [ebp - 4], 0x4c
mov dword [ebp - 0x18], ebx
jmp 0x1000a6cb
mov ecx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x498]
mov dword [eax + ecx*4], 0x279c4185
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 2
jl 0x1000a6b8
sub esp, 0x10
lea eax, [ebp - 0x2a0]
push eax
push ecx
push 1
push 0x6218
call fcn.10002e6c
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x498]
add esp, 0x20
call fcn.1000ae31
inc dword [ebp - 0x38]
cmp dword [ebp - 0x38], 2
jle 0x1000a695
push 1
call fcn.10006435
pop ecx
mov ecx, dword [ebp - 0xc]
mov eax, 0x10396954
pop edi
pop esi
mov dword fs:[0], ecx
pop ebx
mov esp, ebp
pop ebp
ret