Function at 0x1001e15d
Capabilities:
Extract resource via kernel32 functions
Get session user name
Read .ini file

Disassembly:
mov eax, 0x10062148
call fcn.100612c8
sub esp, 0x300
push ebx
push esi
xor ebx, ebx
mov dword [ebp - 0x30], 0xd1b
cmp dword [ebp - 0x30], 0x10b5
push edi
mov dword [ebp - 0x10], esp
mov dword [ebp - 0x10c], edx
mov dword [ebp - 0x98], ecx
mov dword [ebp - 0x1a4], ebx
jle 0x1001e1ee
mov dword [ebp - 0x24], ebx
mov edi, ebx
mov dword [ebp - 0x3c], 0x530
mov eax, edi
mov dword [ebp - 0x34], 0x5deb
mov dword [ebp - 0x2c], eax
mov ebx, eax
mov esi, 0x5b15
mov eax, ebx
mov ecx, 0x1007cab8
cdq
push edx
push eax
call fcn.10001cb3
inc ebx
dec esi
jne 0x1001e1b6
mov eax, dword [ebp - 0x2c]
dec eax
dec dword [ebp - 0x34]
mov dword [ebp - 0x2c], eax
jne 0x1001e1af
mov esi, dword [ebp - 0x24]
add edi, esi
dec dword [ebp - 0x3c]
jne 0x1001e1a3
inc esi
mov dword [ebp - 0x24], esi
push 0
pop ebx
cmp esi, 0x525
jl 0x1001e19a
mov dword [ebp - 4], ebx
cmp dword [ebp - 0x30], 0x93e
mov dword [ebp - 0x64], 0x3024201
mov dword [ebp - 0x60], 0x4696402
mov word [ebp - 0x5c], 0x30e
mov byte [ebp - 0x5a], 3
mov byte [ebp - 0x59], bl
mov dword [ebp - 0x58], 0x51b0625
mov byte [ebp - 0x54], 0x30
jge 0x1001e22f
mov edx, str.unosb_zux_fkuvscpv_kshd_mhkpxkv_avaevr_wmwhbmpvo_igs_ttfyvl_cgqk_mpwhusdvb_uwlnafah_hsbk
mov ecx, 0x1007cab8
call fcn.100036f5
or edi, 0xffffffff
mov dword [ebp - 4], edi
mov dword [ebp - 0x18], 0xe05dae5a
mov dword [ebp - 0x30], 0x77278fa8
mov dword [ebp - 0x34], ebx
cmp dword [ebp - 0x18], ebx
je 0x1001e271
xor edx, edx
inc edx
jmp 0x1001e273
mov edx, ebx
mov eax, dword [ebp - 0x18]
xor ecx, ecx
sub eax, 8
mov dword [ebp - 0x30], eax
mov eax, dword [ebp - 0x18]
cmp edx, eax
mov eax, dword [ebp - 0x18]
sete cl
xor edx, edx
mov dword [ebp - 0x2c], ecx
mov ecx, 0x8e1b8814
sub ecx, eax
mov eax, dword [ebp - 0x18]
cmp dword [ebp - 0x2c], ecx
setg dl
xor ecx, ecx
cmp edx, eax
mov eax, dword [ebp - 0x18]
setge cl
mov dword [ebp - 0x2c], ecx
xor ecx, ecx
cmp dword [ebp - 0x2c], eax
setl cl
add ecx, 0x30cc0dd
je 0x1001e2e0
mov byte [ebp - 0x1d], bl
cmp byte [ebp - 0x1d], 0
je 0x1001e396
push 0x2440
push ebx
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetClassNameW]
jmp 0x1001e396
mov dword [ebp - 0x18], ebx
cmp dword [ebp - 0x18], 0xf
jge 0x1001e37f
xor esi, esi
inc esi
push esi
lea ecx, [ebp - 0x1a0]
call fcn.10001dc8
mov dword [ebp - 0x30], ebx
jmp 0x1001e314
mov ecx, dword [ebp - 0x30]
mov eax, dword [ebp - 0x1a0]
mov dword [eax + ecx*4], 0x5256ee97
inc dword [ebp - 0x30]
cmp dword [ebp - 0x30], esi
jl 0x1001e301
mov dword [ebp - 0x30], ebx
cmp dword [ebp - 0x30], ebx
jl 0x1001e33a
mov byte [ebp - 0x1d], bl
cmp byte [ebp - 0x1d], 0
je 0x1001e335
push 0x128c
call dword [sym.imp.KERNEL32.dll_SetErrorMode]
dec dword [ebp - 0x30]
jns 0x1001e321
mov byte [ebp - 0x1d], bl
cmp byte [ebp - 0x1d], 0
je 0x1001e367
push 0x96e
push ebx
push 0x20a9
push 0x1933
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_TextOutA]
lea ecx, [ebp - 0x1a0]
call fcn.10001e25
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 0xf
jl 0x1001e2f0
mov byte [ebp - 0x1d], bl
cmp byte [ebp - 0x1d], 0
je 0x1001e396
push ebx
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_SetWindowTextW]
mov eax, dword [ebp - 0x34]
lea ecx, [ebp - 0x1b0]
push 0x6c
xor esi, esi
inc esi
pop eax
mov dword [ebp - 0x30], esi
push esi
mov word [ebp - 0x13e], ax
call fcn.10001dc8
mov dword [ebp - 4], 2
mov dword [ebp - 0x1c], edi
mov dword [ebp - 0x30], ebx
jmp 0x1001e3d3
mov ecx, dword [ebp - 0x30]
mov eax, dword [ebp - 0x1b0]
mov dword [eax + ecx*4], esi
inc dword [ebp - 0x30]
cmp dword [ebp - 0x30], esi
jl 0x1001e3c4
mov dword [ebp - 0x1c], ebx
cmp dword [ebp - 0x1c], ebx
jl 0x1001e687
push dword [ebp - 0x50]
lea eax, [ebp - 0x22c]
mov dword [ebp - 0xf4], ebx
push eax
lea eax, [ebp - 0x23c]
mov dword [ebp - 0xf0], ebx
push eax
xorps xmm0, xmm0
mov dword [ebp - 0xec], ebx
push ebx
lea ecx, [ebp - 0xf4]
movdqu xmmword [ebp - 0x23c], xmm0
call fcn.10007dd5
mov byte [ebp - 4], 3
mov edi, dword [ebp - 0xf4]
mov dword [ebp - 0x30], 0xa80e3580
mov dword [edi + 4], ebx
mov byte [ebp - 0x1d], bl
cmp byte [ebp - 0x1d], 0
je 0x1001e44e
push 0x149a
push ebx
push ebx
push 0x82d
push ebx
call dword [sym.imp.SHELL32.dll_ExtractIconExW]
dec dword [edi + 4]
jns 0x1001e432
mov dword [ebp - 0x30], ebx
cmp dword [ebp - 0x30], ebx
jg 0x1001e670
mov dword [ebp - 0x18], 0x76ec
cmp dword [ebp - 0x18], 0x78c5
jle 0x1001e512
mov eax, ebx
mov dword [ebp - 0x34], ebx
mov ecx, ebx
mov dword [ebp - 0x3c], ebx
cdq
idiv ecx
mov dword [ebp - 0x24], ebx
mov eax, ebx
mov ecx, edx
mov dword [ebp - 0x2c], ecx
mov edi, ebx
add eax, edi
or eax, ecx
lea ecx, [ebp - 0x2e0]
cdq
push edx
push eax
call fcn.10001a31
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x1001e4a8
mov eax, dword [eax]
push eax
call fcn.100490c6
pop ecx
push ebx
push esi
lea ecx, [ebp - 0x2e0]
call fcn.1000209f
mov eax, dword [ebp - 0x24]
inc edi
mov ecx, dword [ebp - 0x2c]
cmp edi, 0x5f8e
jl 0x1001e48c
inc eax
mov dword [ebp - 0x24], eax
cmp eax, 0x57bc
jl 0x1001e48a
mov ecx, dword [ebp - 0x3c]
mov eax, dword [ebp - 0x34]
inc ecx
mov dword [ebp - 0x3c], ecx
cmp ecx, 0x3afe
jl 0x1001e47d
inc eax
mov dword [ebp - 0x34], eax
cmp eax, 0xedd
jl 0x1001e478
push ebx
push 0x1176
push 0x13be
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_GetDIBColorTable]
mov byte [ebp - 0x1d], bl
cmp dword [ebp - 0x18], 0x738a
jge 0x1001e529
push str.fjmyohivq_iqgbd_odpu_xfrmunm_jopga_mbpv_dcxjhmrgk_zsuemqs
call fcn.100490c6
pop ecx
mov dword [ebp - 4], 3
cmp byte [ebp - 0x1d], 0
je 0x1001e546
push ebx
push 0x1a9
push ebx
push ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringW]
mov byte [ebp - 0x1d], bl
mov dword [ebp - 0x2c], 0x1a0d
cmp dword [ebp - 0x2c], 0x907
jge 0x1001e65a
lea eax, [ebp - 0x108]
mov edi, 0x1006cacc
push eax
push edi
call fcn.1004946a
pop ecx
pop ecx
mov dword [ebp - 0x80], ebx
mov dword [ebp - 0x7c], ebx
call fcn.100201d9
mov dword [ebp - 0x80], eax
lea eax, [ebp - 0xa8]
mov byte [ebp - 4], 6
push eax
push edi
call fcn.1004946a
cmp dword [ebp - 0xa8], 0
mov edi, ebx
pop ecx
pop ecx
jle 0x1001e5d8
lea eax, [ebp - 0xf8]
push eax
push 0x1006b570
call fcn.1004946a
movzx eax, byte [0x1008bd30]
pop ecx
pop ecx
push eax
lea eax, [ebp - 0xf8]
push eax
push ecx
lea eax, [ebp - 0x26c]
push eax
lea ecx, [ebp - 0x80]
call fcn.10020296
inc edi
cmp edi, dword [ebp - 0xa8]
jl 0x1001e59d
lea eax, [ebp - 0xa0]
push eax
push 0x1006cacc
call fcn.1004946a
cmp dword [ebp - 0xa0], 0
mov edi, ebx
pop ecx
pop ecx
jle 0x1001e631
lea eax, [ebp - 0xe8]
push eax
push 0x1006b570
call fcn.1004946a
movzx eax, byte [0x1008bd30]
pop ecx
pop ecx
push eax
lea eax, [ebp - 0xe8]
push eax
push ecx
lea eax, [ebp - 0x274]
push eax
lea ecx, [ebp - 0x80]
call fcn.10020296
inc edi
cmp edi, dword [ebp - 0xa0]
jl 0x1001e5f6
mov eax, dword [ebp - 0x7c]
mov edx, str.Oh__my_keyboard_
cmp eax, dword [ebp - 0x108]
mov ecx, str.I_become_the_guy.
cmovb ecx, edx
push ecx
call fcn.1004978b
pop ecx
lea ecx, [ebp - 0x80]
mov byte [ebp - 4], 3
call fcn.1002004e
cmp byte [ebp - 0x1d], 0
je 0x1001e668
push ebx
push ebx
call dword [sym.imp.ADVAPI32.dll_GetUserNameA]
inc dword [ebp - 0x30]
jmp 0x1001e456
lea ecx, [ebp - 0xf4]
mov byte [ebp - 4], 2
call fcn.10001e25
dec dword [ebp - 0x1c]
jmp 0x1001e3db
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x1b0]
call fcn.10001e25
push 2
pop edi
mov dword [ebp - 0x34], ebx
mov dword [ebp - 0x30], edi
cmp edi, 0x11
jae 0x1001f0d9
push 3
lea ecx, [ebp - 0xc0]
call fcn.10001dc8
mov dword [ebp - 4], 7
mov dword [ebp - 0x28], 0xd3740063
mov dword [ebp - 0x1c], 0xc2f5a260
mov dword [ebp - 0x18], ebx
jmp 0x1001e6de
mov ecx, dword [ebp - 0x18]
mov eax, dword [ebp - 0xc0]
mov dword [eax + ecx*4], ebx
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 3
jl 0x1001e6cf
mov eax, dword [ebp - 0xc0]
mov dword [ebp - 0x3c], eax
mov ecx, dword [eax + 8]
xor eax, eax
cmp ecx, 0x7bededb5
setne al
lea eax, [eax + ecx*2]
mov dword [ebp - 0x28], eax
mov dword [ebp - 0x28], ebx
cmp dword [ebp - 0x28], 0x15
jge 0x1001e851
push 2
lea ecx, [ebp - 0xb4]
call fcn.10001dc8
mov dword [ebp - 0x18], 0xfffffffe
push 2
mov dword [ebp - 0x2c], esi
mov dword [ebp - 0x24], ebx
pop edx
jmp 0x1001e740
mov ecx, dword [ebp - 0x24]
mov eax, dword [ebp - 0xb4]
mov dword [eax + ecx*4], 5
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], edx
jl 0x1001e72d
mov eax, dword [ebp - 0xb4]
mov dword [eax], edx
lea edi, [eax + 4]
mov dword [ebp - 0x2c], 0x5807c1ab
cmp dword [eax], ebx
je 0x1001e75e
mov eax, dword [ebp - 0x1c]
xor ecx, ecx
mov eax, esi
sub eax, dword [edi]
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x2c]
cmp eax, 0x3050
mov eax, dword [ebp - 0x3c]
setl cl
xor edx, edx
sub ecx, dword [ebp - 0x18]
sub ecx, 0x1f19
cmp ecx, dword [eax + 8]
mov eax, dword [ebp - 0xb4]
setle dl
mov ecx, dword [eax]
mov eax, dword [ebp - 0xc0]
mov eax, dword [eax + ecx*4]
mov ecx, 0xcecb2ec6
sub eax, edx
cmp ecx, eax
sbb eax, eax
inc eax
add eax, dword [edi]
mov dword [ebp - 0x2c], eax
je 0x1001e7cd
mov dword [ebp - 0x18], ebx
jmp 0x1001e7c5
mov ecx, dword [ebp - 0x18]
mov eax, dword [ebp - 0xc0]
mov dword [eax + ecx*4], 0x3592
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 3
jl 0x1001e7b2
jmp 0x1001e7f9
mov byte [ebp - 0x1d], bl
cmp byte [ebp - 0x1d], 0
je 0x1001e7df
push ebx
push ebx
push ebx
call dword [sym.imp.ADVAPI32.dll_RegSetKeySecurity]
mov dword [ebp - 0x1c], ebx
jmp 0x1001e7f3
mov ecx, dword [ebp - 0x1c]
mov eax, dword [ebp - 0xc0]
mov dword [eax + ecx*4], esi
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 3
jl 0x1001e7e4
mov dword [ebp - 0x18], ebx
cmp dword [ebp - 0x18], 2
jg 0x1001e825
mov esi, dword [ebp - 0x18]
mov eax, dword [ebp - 0xb4]
mov ecx, dword [ebp - 0xc0]
mov edx, dword [eax]
mov eax, dword [ecx + esi*4]
mov dword [ecx + edx*4], eax
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 2
jle 0x1001e802
xor esi, esi
inc esi
mov eax, dword [ebp - 0xb4]
dec dword [eax]
jns 0x1001e750
cmp dword [ebp - 0x28], ebx
lea ecx, [ebp - 0xb4]
call fcn.10001e25
inc dword [ebp - 0x28]
cmp dword [ebp - 0x28], 0x15
jl 0x1001e70e
mov edi, dword [ebp - 0x30]
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xc0]
call fcn.10001e25
movzx eax, byte [ebp - 0x64]
lea eax, [eax*2 + 2]
cmp edi, eax
jne 0x1001ecf0
push 3
lea ecx, [ebp - 0x130]
call fcn.10001dc8
or edi, 0xffffffff
mov dword [ebp - 4], 8
mov dword [ebp - 0x3c], edi
lea ecx, [ebp - 0x118]
push 4
call fcn.10001dc8
mov dword [ebp - 0x2c], 0xfffffffe
mov dword [ebp - 0x2c], 0x451f1e28
mov dword [ebp - 0x34], 0xc31e13ca
mov dword [ebp - 0x2c], esi
mov dword [ebp - 0x2c], 0x2b4cf22a
mov dword [ebp - 0x1c], ebx
jmp 0x1001e8d1
mov ecx, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x130]
mov dword [eax + ecx*4], 0xfffffff8
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 3
jl 0x1001e8be
mov dword [ebp - 0x1c], ebx
jmp 0x1001e8eb
mov ecx, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x118]
mov dword [eax + ecx*4], edi
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 4
jl 0x1001e8dc
mov byte [ebp - 0x1d], bl
cmp byte [ebp - 0x1d], 0
je 0x1001e902
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_GetExitCodeProcess]
mov edx, dword [ebp - 0x130]
xor ecx, ecx
mov edi, dword [ebp - 0x118]
mov dword [ebp - 0x24], edx
mov eax, dword [edx + 4]
imul eax, eax
mov dword [ebp - 0x3c], eax
mov eax, dword [edi + 8]
cmp eax, dword [edx + 4]
setne cl
mov dword [ebp - 0x2c], ecx
mov eax, dword [ebp - 0x2c]
add eax, dword [edi + 0xc]
mov dword [ebp - 0x2c], eax
mov eax, dword [ebp - 0x2c]
mov dword [ebp - 0x34], 0x196e
mov eax, dword [ebp - 0x34]
mov dword [ebp - 0x2c], eax
cmp dword [ebp - 0x2c], 0xc39c
jne 0x1001e94d
mov eax, dword [ebp - 0x3c]
mov eax, dword [ebp - 0x34]
xor ecx, ecx
cmp eax, dword [edi + 0xc]
mov eax, dword [ebp - 0x24]
setne cl
xor edx, edx
add ecx, 0x23e4
cmp dword [eax + 4], ecx
mov eax, dword [ebp - 0x130]
setne dl
xor ecx, ecx
cmp edx, dword [eax + 8]
mov eax, dword [ebp - 0x118]
setne cl
xor edx, edx
cmp ecx, dword [eax + 4]
lea ecx, [ebp - 0x118]
setg dl
xor eax, eax
sub edx, 0x451d
cmp edx, dword [edi + 8]
setne al
mov dword [ebp - 0x2c], eax
call fcn.10001e25
or edi, 0xffffffff
lea ecx, [ebp - 0x130]
mov dword [ebp - 4], edi
call fcn.10001e25
mov eax, dword [ebp - 0x30]
movzx eax, byte [ebp + eax - 0x64]
mov dword [ebp - 0x28], 0x30f94f37
inc eax
mov dword [ebp - 0x18], ebx
mov dword [ebp - 0x3c], 0x6369dda3
mov dword [ebp - 0x34], eax
mov dword [ebp - 0x38], eax
mov dword [ebp - 0x24], ebx
jmp 0x1001e9e5
mov eax, dword [ebp - 0x24]
mov dword [ebp + eax*4 - 0x70], 0xec2e0cf5
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], 3
jl 0x1001e9d7
mov dword [ebp - 0x28], 2
cmp dword [ebp - 0x28], ebx
jl 0x1001ec97
push dword [ebp - 0x50]
movdqa xmm0, xmmword [0x100702a0]
lea eax, [ebp - 0x24c]
push eax
lea eax, [ebp - 0x25c]
mov dword [ebp - 0xd8], ebx
push eax
push ebx
lea ecx, [ebp - 0xd8]
mov dword [ebp - 0xd4], ebx
movdqu xmmword [ebp - 0x25c], xmm0
mov dword [ebp - 0xd0], ebx
call fcn.10007dd5
mov dword [ebp - 4], 9
mov eax, dword [ebp - 0x28]
cmp dword [ebp + eax*4 - 0x70], ebx
je 0x1001eadb
mov dword [ebp - 0x24], 8
xor ecx, ecx
mov dword [ebp - 0x2c], 0x6c715341
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp + eax*4 - 0x70]
cmp eax, 0xfffffffa
setle cl
mov dword [ebp - 0x18], ecx
cmp dword [ebp - 0x18], ebx
je 0x1001ea7a
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp + eax*4 - 0x70]
mov ecx, dword [ebp - 0x6c]
xor edx, edx
mov eax, dword [ebp - 0x24]
cmp eax, ecx
mov eax, dword [ebp - 0x24]
setl dl
sub eax, edx
neg eax
sbb eax, eax
inc eax
sub eax, dword [ebp - 0x24]
neg eax
sbb eax, eax
inc eax
cmp dword [ebp - 0x28], eax
jg 0x1001eaa5
mov eax, ebx
cmp dword [ebp - 0x28], ebx
je 0x1001eaa7
mov eax, esi
xor edx, edx
cmp eax, 0xffff
mov eax, dword [ebp - 0x28]
sete dl
xor ecx, ecx
cmp edx, eax
push 7
setge cl
pop eax
cmp eax, ecx
mov eax, dword [ebp - 0x6c]
sbb edx, edx
xor ecx, ecx
inc edx
cmp edx, eax
setne cl
imul eax, ecx, 0xb4c2
mov dword [ebp - 0x2c], eax
jmp 0x1001ec80
mov dword [ebp - 0x2c], 0x3442
cmp dword [ebp - 0x2c], 0x376b
jle 0x1001eb25
push ebx
push ebx
push ebx
call dword [sym.imp.USER32.dll_UnionRect]
mov edi, ebx
mov dword [ebp - 0x24], ebx
mov eax, edi
mov ecx, 0x1007cab8
cdq
idiv ebx
mov eax, edx
cdq
push edx
push eax
call fcn.10001cb3
inc ebx
cmp ebx, 0x6df7
jl 0x1001eaf9
inc edi
push 0
pop ebx
cmp edi, 0x59fc
jl 0x1001eaf6
or edi, 0xffffffff
push 3
lea ecx, [ebp - 0x184]
call fcn.10001dc8
mov byte [ebp - 4], 0xb
cmp dword [ebp - 0x2c], 0x31ff
jge 0x1001eb78
mov edx, str.pjiwgku_ramyt_gnj_muwwtwbi_tsdefjiz
mov ecx, 0x1007cab8
call fcn.100036f5
jmp 0x1001eb78
mov dword [ebp - 0x1c], ebx
jmp 0x1001eb8a
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0x94], ebx
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], esi
jl 0x1001eb7d
mov dword [ebp - 0x1c], ebx
jmp 0x1001eba7
mov ecx, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x184]
mov dword [eax + ecx*4], 0x922cbd4d
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 3
jl 0x1001eb94
mov dword [ebp - 0x18], 2
cmp dword [ebp - 0x18], ebx
jl 0x1001ebd1
mov byte [ebp - 0x1d], bl
cmp byte [ebp - 0x1d], 0
je 0x1001ebcc
push ebx
push ebx
push ebx
push ebx
call dword [sym.imp.ADVAPI32.dll_RegGetKeySecurity]
dec dword [ebp - 0x18]
jns 0x1001ebb9
mov dword [ebp - 0x18], ebx
cmp dword [ebp - 0x18], 2
jg 0x1001ec75
mov eax, dword [ebp - 0xd8]
mov edi, dword [ebp - 0x184]
mov dword [ebp - 0x2c], eax
mov dword [ebp - 0x24], ebx
jmp 0x1001ec03
mov eax, dword [ebp - 0x24]
mov dword [ebp + eax*4 - 0x160], 6
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], 2
jl 0x1001ebf2
mov eax, dword [ebp - 0x94]
xor ecx, ecx
mov eax, dword [ebp - 0x94]
mov eax, dword [ebp - 0x160]
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp + eax*4 - 0x70]
mov dword [ebp - 0x3c], 0xe0f61949
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp + eax*4 - 0x70]
cmp eax, 0xcc19
setle cl
cmp ecx, dword [ebp - 0x3c]
jl 0x1001ec49
mov eax, ebx
cmp dword [ebp - 0x15c], ebx
je 0x1001ec4b
mov eax, esi
mov dword [edi + 4], eax
xor edx, edx
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp + eax*4 - 0x70]
mov eax, dword [ebp - 0x18]
cmp eax, ecx
mov eax, dword [ebp - 0x2c]
setl dl
mov dword [eax + 0xc], edx
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 2
jle 0x1001ebed
or edi, 0xffffffff
lea ecx, [ebp - 0x184]
call fcn.10001e25
mov eax, dword [ebp - 0x28]
lea ecx, [ebp - 0xd8]
mov dword [ebp - 4], edi
cmp dword [ebp + eax*4 - 0x70], ebx
je 0x1001ece3
call fcn.10001e25
cmp dword [ebp - 0x6c], ebx
je 0x1001ecc4
cmp dword [ebp - 0x18], ebx
jne 0x1001ecb9
mov eax, dword [ebp - 0x70]
mov dword [ebp - 0x28], eax
mov eax, dword [ebp - 0x28]
mov dword [ebp - 0x18], eax
mov eax, dword [ebp - 0x18]
add eax, 0xdb1
mov eax, ebx
je 0x1001ecbb
mov eax, esi
imul eax, eax, 3
mov edx, esi
test eax, eax
jne 0x1001ecc6
mov edx, ebx
mov eax, dword [ebp - 0x3c]
xor ecx, ecx
mov edi, dword [ebp - 0x30]
cmp edx, eax
setne cl
mov dword [ebp - 0x3c], ecx
movzx eax, byte [ebp + edi - 0x64]
dec edi
add edi, eax
jmp 0x1001f0d1
call fcn.10001e25
dec dword [ebp - 0x28]
jmp 0x1001e9f2
mov dword [ebp - 0x1c], 0xffffffff
lea ecx, [ebp - 0x16c]
mov dword [ebp - 0x28], 0x838a1f94
push 2
call fcn.10001dc8
mov dword [ebp - 4], 0xd
mov dword [ebp - 0x38], esi
mov dword [ebp - 0x24], ebx
jmp 0x1001ed2d
mov ecx, dword [ebp - 0x24]
mov eax, dword [ebp - 0x16c]
mov dword [eax + ecx*4], 0xdebf624
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], 2
jl 0x1001ed1a
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0x28], eax
cmp dword [ebp - 0x28], ebx
je 0x1001ee37
mov dword [ebp - 0x18], 0x84edc02
mov dword [ebp - 0x2c], ebx
mov dword [ebp - 0x24], ebx
jmp 0x1001ed62
mov eax, dword [ebp - 0x24]
mov dword [ebp + eax*4 - 0x194], 0xfffffffc
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], 4
jl 0x1001ed51
push 3
mov dword [ebp - 0x28], ebx
pop edx
jmp 0x1001ede7
mov dword [ebp - 0x3c], 0x9d08
mov dword [ebp - 0x1c], ebx
jmp 0x1001eddf
mov dword [ebp - 0x38], 0xad53a38d
cmp dword [ebp - 0x38], ebx
je 0x1001ed8e
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x3c]
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x1c]
mov ecx, dword [ebp + eax*4 - 0x194]
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0x194], ecx
mov eax, dword [ebp - 0x3c]
mov eax, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x3c]
mov eax, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp + eax*4 - 0x194]
mov dword [ebp - 0x18], edx
mov eax, dword [ebp - 0x3c]
mov dword [ebp - 0x18], eax
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], edx
jle 0x1001ed7c
inc dword [ebp - 0x28]
cmp dword [ebp - 0x28], edx
jle 0x1001ed70
cmp dword [ebp - 0x18], ebx
jne 0x1001ee2b
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x18]
cmp eax, dword [ebp - 0x28]
je 0x1001ee0b
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x1c]
xor edx, edx
mov dword [ebp - 0x18], ebx
mov ecx, dword [ebp - 0x188]
mov eax, dword [ebp - 0x18]
cmp eax, ecx
mov ecx, ebx
setg dl
mov dword [ebp - 0x28], edx
cmp dword [ebp - 0x28], ebx
je 0x1001ee2d
mov ecx, esi
mov eax, dword [ebp - 0x16c]
mov dword [eax], ecx
jmp 0x1001ee8a
push dword [ebp - 0x50]
movdqa xmm0, xmmword [0x100702d0]
lea eax, [ebp - 0x23c]
push eax
lea eax, [ebp - 0x24c]
mov dword [ebp - 0xe4], ebx
push eax
push ebx
lea ecx, [ebp - 0xe4]
mov dword [ebp - 0xe0], ebx
movdqu xmmword [ebp - 0x24c], xmm0
mov dword [ebp - 0xdc], ebx
call fcn.10007dd5
mov eax, dword [ebp - 0xe4]
lea ecx, [ebp - 0xe4]
inc dword [eax + 8]
call fcn.10001e25
mov byte [ebp - 0x1d], bl
cmp byte [ebp - 0x1d], 0
je 0x1001ee9a
push ebx
call dword [sym.imp.ole32.dll_CoInitialize]
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x16c]
call fcn.10001e25
mov dword [ebp - 0x24], 0x4e6b
cmp dword [ebp - 0x24], 0x50af
jle 0x1001ef24
mov edi, ebx
mov eax, ebx
mov dword [ebp - 0x3c], 0x3eb
mov dword [ebp - 0x2c], eax
cdq
lea ecx, [ebp - 0x2a4]
push edx
push eax
call fcn.10001a31
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x1001eedf
mov eax, dword [eax]
push eax
call fcn.100490c6
pop ecx
push ebx
push esi
lea ecx, [ebp - 0x2a4]
call fcn.1000209f
mov eax, dword [ebp - 0x2c]
add eax, edi
dec dword [ebp - 0x3c]
mov dword [ebp - 0x2c], eax
jne 0x1001eec7
inc edi
cmp edi, 0x3313
jl 0x1001eebb
push 0xf8d
push 0x1ce0
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
push ebx
call dword [sym.imp.USER32.dll_GetMessageA]
mov edi, dword [ebp - 0x30]
movzx edx, byte [ebp + edi - 0x63]
mov eax, edi
sub eax, dword [ebp - 0x34]
movzx eax, byte [ebp + eax - 0x66]
movzx ecx, word [ebp + eax*2 - 0x140]
mov eax, ecx
and eax, edx
add eax, eax
sub ecx, eax
movzx eax, byte [ebp + edi - 0x64]
add ecx, edx
cmp dword [ebp - 0x24], 0x4cb3
mov word [ebp + eax*2 - 0x140], cx
jge 0x1001ef66
push str.akyqbueq_xgs_dyureomf_vts_xzfmgkzp_kfhv_atfy_bhmedkvs_djwxe_cffdatq_gynddygzh_jur_cjdlx
call fcn.100490c6
pop ecx
or dword [ebp - 4], 0xffffffff
mov dword [ebp - 0x1c], 5
mov dword [ebp - 0x18], 0xc70c3099
mov dword [ebp - 0x38], 0xbc657e3b
mov dword [ebp - 0x18], 0xf949
mov eax, dword [ebp - 0x18]
cmp dword [ebp - 0x1c], eax
jg 0x1001efa7
mov byte [ebp - 0x1d], bl
cmp byte [ebp - 0x1d], 0
je 0x1001f094
push ebx
call dword [sym.imp.GDI32.dll_CreateFontIndirectW]
jmp 0x1001f094
mov dword [ebp - 0x24], ebx
jmp 0x1001efbd
mov eax, dword [ebp - 0x24]
mov dword [ebp + eax*4 - 0x1d0], 0xffffffff
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], 2
jl 0x1001efac
mov dword [ebp - 0x1c], 0xfffffff1
cmp dword [ebp - 0x1c], 0x2a
jne 0x1001f091
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0x1cc], eax
mov dword [ebp - 0x34], 0x3041
cmp dword [ebp - 0x34], 0x3053
jle 0x1001f052
mov eax, ebx
mov dword [ebp - 0x2c], ebx
mov edi, ebx
mov ecx, edi
shl eax, cl
lea ecx, [ebp - 0x2c8]
cdq
push edx
push eax
call fcn.10001a31
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x1001f010
mov eax, dword [eax]
push eax
call fcn.100490c6
pop ecx
push ebx
push esi
lea ecx, [ebp - 0x2c8]
call fcn.1000209f
mov eax, dword [ebp - 0x2c]
inc edi
cmp edi, 0x9b0
jl 0x1001eff4
inc eax
mov dword [ebp - 0x2c], eax
cmp eax, 0x3b40
jl 0x1001eff2
push 0x1720
push 0x104c
push ebx
push 0x15a0
push ebx
call dword [sym.imp.SHELL32.dll_SHGetFileInfoW]
mov byte [ebp - 0x1d], bl
cmp dword [ebp - 0x34], 0x2e32
jge 0x1001f069
push str.knnatd_dyxyijmn_goxpu_vay_bkfpw_ganrbuyi_tcivxyx_eyid
call fcn.100490c6
pop ecx
or dword [ebp - 4], 0xffffffff
cmp byte [ebp - 0x1d], 0
je 0x1001f089
push 0x19d0
push ebx
push ebx
push ebx
push ebx
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.SHELL32.dll_ShellExecuteW]
inc dword [ebp - 0x1c]
jmp 0x1001efca
mov edi, dword [ebp - 0x30]
mov ecx, dword [ebp - 0x1c]
xor edx, edx
mov eax, dword [ebp - 0x1c]
cmp ecx, eax
mov eax, 0x921e124d
mov dword [ebp - 0x34], ebx
setle dl
mov ecx, 0xfff9
cmp eax, edx
sbb eax, eax
inc eax
cmp ecx, eax
sbb eax, eax
inc eax
imul eax, dword [ebp - 0x18]
mov dword [ebp - 0x18], eax
mov eax, dword [ebp - 0x1c]
imul eax, dword [ebp - 0x1c]
sub eax, dword [ebp - 0x18]
neg eax
sbb eax, eax
inc eax
mov dword [ebp - 0x38], eax
add edi, 2
jmp 0x1001e69c
mov dword [ebp - 0x30], 0x603a
cmp dword [ebp - 0x30], 0x6291
jle 0x1001f143
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_FindFirstFileW]
mov edi, ebx
mov dword [ebp - 0x34], ebx
mov dword [ebp - 0x38], edi
mov dword [ebp - 0x2c], 0x77e
mov eax, edi
lea ecx, [ebp - 0x2f8]
cdq
push edx
push eax
call fcn.10001a31
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x1001f11a
mov eax, dword [eax]
push eax
call fcn.100490c6
pop ecx
push ebx
push esi
lea ecx, [ebp - 0x2f8]
call fcn.1000209f
dec edi
dec dword [ebp - 0x2c]
jne 0x1001f100
mov edi, dword [ebp - 0x34]
inc edi
mov dword [ebp - 0x34], edi
cmp edi, 0x1194
jl 0x1001f0f6
or edi, 0xffffffff
xor edx, edx
mov dword [ebp - 0x28], edi
mov dword [ebp - 0x1c], 0x27f3
mov dword [ebp - 0x34], ebx
mov dword [ebp - 0x18], esi
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x28]
sub ecx, dword [ebp - 0x28]
mov eax, dword [ebp - 0x28]
cmp ecx, eax
mov eax, dword [ebp - 0x28]
setl dl
xor ecx, ecx
cmp edx, eax
mov eax, dword [ebp - 0x28]
setne cl
mov dword [ebp - 0x38], ecx
xor ecx, ecx
cmp eax, dword [ebp - 0x38]
setle cl
imul ecx, dword [ebp - 0x1c]
test ecx, ecx
jne 0x1001f19f
mov edx, ebx
cmp dword [ebp - 0x28], ebx
je 0x1001f1a1
mov edx, esi
mov eax, dword [ebp - 0x28]
xor ecx, ecx
sub edx, eax
mov eax, dword [ebp - 0x28]
cmp eax, edx
mov eax, dword [ebp - 0x28]
setge cl
xor edx, edx
sub ecx, 0xce3d978
cmp ecx, 0xffff0001
setne dl
xor ecx, ecx
cmp edx, eax
mov eax, 0xc2e3a4c6
setge cl
cmp eax, ecx
sbb eax, eax
xor edx, edx
neg eax
sub eax, dword [ebp - 0x1c]
cmp eax, 0xfffffff9
mov eax, dword [ebp - 0x1c]
setg dl
xor ecx, ecx
cmp edx, eax
setle cl
mov dword [ebp - 0x34], ecx
mov edx, dword [ebp - 0x34]
mov eax, dword [ebp - 0x28]
neg edx
sbb edx, edx
xor ecx, ecx
neg edx
cmp edx, eax
sete cl
imul eax, ecx, 0x7eb6
test eax, eax
je 0x1001f26d
push dword [ebp - 0x50]
movdqa xmm0, xmmword [0x100702e0]
lea eax, [ebp - 0x21c]
push eax
lea eax, [ebp - 0x22c]
mov dword [ebp - 0x38], 2
push eax
push ebx
lea ecx, [ebp - 0x104]
mov dword [ebp - 0x104], ebx
movdqu xmmword [ebp - 0x22c], xmm0
mov dword [ebp - 0x100], ebx
mov dword [ebp - 0xfc], ebx
call fcn.10007dd5
mov ecx, dword [ebp - 0x38]
mov eax, dword [ebp - 0x104]
mov dword [eax + 4], ecx
lea ecx, [ebp - 0x104]
call fcn.10001e25
jmp 0x1001f2ef
mov dword [ebp - 0x2c], 0xbb1d
mov dword [ebp - 0x1c], ebx
jmp 0x1001f2ea
mov dword [ebp - 0x24], 0x315b
mov dword [ebp - 0x28], ebx
jmp 0x1001f2e1
mov dword [ebp - 0x38], 0xc1b09c82
mov dword [ebp - 0x3c], 0xc6c04840
cmp dword [ebp - 0x38], ebx
jne 0x1001f2e7
cmp dword [ebp - 0x2c], ebx
je 0x1001f2a9
mov eax, dword [ebp - 0x2c]
mov ecx, esi
add eax, 0xa1e2
jne 0x1001f2ab
mov ecx, ebx
mov eax, dword [ebp - 0x24]
sub ecx, eax
mov dword [ebp - 0x3c], ecx
je 0x1001f2d9
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0x2c]
mov edx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x34]
neg edx
sbb edx, edx
xor ecx, ecx
inc edx
cmp edx, eax
setl cl
mov dword [ebp - 0x3c], ecx
mov eax, dword [ebp - 0x3c]
neg eax
mov eax, esi
jne 0x1001f2db
mov eax, ebx
mov dword [ebp - 0x34], eax
inc dword [ebp - 0x28]
cmp dword [ebp - 0x28], 3
jl 0x1001f285
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], esi
je 0x1001f279
cmp dword [ebp - 0x30], 0x601b
jge 0x1001f303
push str.meschoxks_mrbgq_ieadhtheg_tyfc_lgz_xrn_asuezqfo_zyv_oqg_jzsskwir_pvxer_mip_emlqf_vkirjejhh
call fcn.100490c6
pop ecx
mov dword [ebp - 4], edi
lea ecx, [ebp - 0x1c8]
xor eax, eax
mov dword [ebp - 0x1b4], 7
mov word [ebp - 0x132], ax
mov word [ebp - 0x1c8], ax
lea eax, [ebp - 0x140]
push eax
mov dword [ebp - 0x1b8], ebx
call fcn.100072f5
mov dword [ebp - 4], 0x14
lea ecx, [ebp - 0x178]
push 2
mov dword [ebp - 0x18], 0xfff8
pop eax
mov dword [ebp - 0x1c], esi
mov dword [ebp - 0x38], 0xfffffffe
mov dword [ebp - 0x2c], eax
push eax
call fcn.10001dc8
xor edx, edx
inc edx
mov dword [ebp - 0x38], edx
mov dword [ebp - 0x38], 7
mov dword [ebp - 0x38], ebx
mov dword [ebp - 0x38], 0xfffffff8
mov dword [ebp - 0x38], 0xfffffff9
mov dword [ebp - 0x28], ebx
jmp 0x1001f398
mov ecx, dword [ebp - 0x28]
mov eax, dword [ebp - 0x178]
mov dword [eax + ecx*4], 0x7d437f1b
inc dword [ebp - 0x28]
cmp dword [ebp - 0x28], 2
jl 0x1001f385
push 3
mov dword [ebp - 0x28], ebx
pop ecx
jmp 0x1001f3b3
mov eax, dword [ebp - 0x28]
mov dword [ebp + eax*4 - 0x1ec], edi
inc dword [ebp - 0x28]
cmp dword [ebp - 0x28], ecx
jl 0x1001f3a6
mov dword [ebp - 0x28], ebx
jmp 0x1001f3cb
mov eax, dword [ebp - 0x28]
mov dword [ebp + eax*4 - 0x50], 0xdeb94592
inc dword [ebp - 0x28]
cmp dword [ebp - 0x28], edx
jl 0x1001f3bd
mov dword [ebp - 0x28], ebx
jmp 0x1001f3e6
mov eax, dword [ebp - 0x28]
mov dword [ebp + eax*4 - 0x2b0], 0xff2b
inc dword [ebp - 0x28]
cmp dword [ebp - 0x28], ecx
jl 0x1001f3d5
mov dword [ebp - 0x18], ebx
cmp dword [ebp - 0x18], 0xfffffff7
jae 0x1001f424
mov eax, dword [ebp - 0x18]
neg eax
jne 0x1001f403
cmp dword [ebp - 0x18], ebx
jne 0x1001f403
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x18]
cmp dword [ebp - 0x18], ebx
jne 0x1001f415
cmp dword [ebp - 0x1c], ebx
je 0x1001f419
cmp dword [ebp - 0x18], ebx
je 0x1001f419
mov ecx, edx
jmp 0x1001f41b
mov ecx, ebx
mov eax, dword [ebp - 0x18]
mov esi, ebx
add eax, ecx
je 0x1001f426
mov esi, edx
mov eax, dword [ebp - 0x1c]
xor ecx, ecx
cmp esi, eax
setge cl
xor eax, eax
cmp ecx, 0xa8f1
setge al
imul eax, eax, 9
add eax, dword [ebp - 0x1c]
mov dword [ebp - 0x38], eax
jne 0x1001f44d
cmp dword [ebp - 0x1c], ebx
jne 0x1001f44d
mov edx, ebx
mov dword [ebp - 0x2c], edx
mov ecx, dword [ebp - 0x2c]
sub ecx, dword [ebp - 0x1c]
sub ecx, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x178]
neg ecx
sbb ecx, ecx
inc ecx
mov dword [eax], ecx
cmp edi, ecx
mov eax, dword [ebp - 0x1c]
sbb ecx, ecx
xor edx, edx
inc ecx
cmp ecx, eax
mov ecx, dword [ebp - 0x1c]
setge dl
add ecx, edx
xor edx, edx
mov dword [ebp - 0x1ec], ecx
mov eax, dword [ebp - 0x1c]
cmp ecx, eax
mov eax, dword [ebp - 0x1c]
setl dl
xor ecx, ecx
cmp edx, eax
mov eax, dword [ebp - 0x1c]
setl cl
mov dword [ebp - 0x38], ecx
xor ecx, ecx
cmp dword [ebp - 0x38], eax
setne cl
xor esi, esi
mov dword [ebp - 0x50], ecx
inc esi
mov dword [ebp - 0x1ec], esi
lea ecx, [ebp - 0x178]
call fcn.10001e25
xor eax, eax
lea edi, [ebp - 0x140]
stosd dword es:[edi], eax
lea ecx, [ebp - 0x1dc]
push 2
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
call fcn.10001dc8
mov dword [ebp - 0x34], 0x9bdba76a
mov dword [ebp - 0x38], esi
mov dword [ebp - 0x24], ebx
jmp 0x1001f4f0
mov ecx, dword [ebp - 0x24]
mov eax, dword [ebp - 0x1dc]
mov dword [eax + ecx*4], ebx
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], 2
jl 0x1001f4e1
mov dword [ebp - 0x34], esi
cmp dword [ebp - 0x34], ebx
jl 0x1001f50a
mov dword [ebp - 0x38], 0xfffffffe
dec dword [ebp - 0x34]
jns 0x1001f4fe
lea ecx, [ebp - 0x1dc]
call fcn.10001e25
push dword [ebp - 0x10c]
lea ecx, [ebp - 0x21c]
call fcn.10008281
mov byte [ebp - 4], 0x15
xor ecx, ecx
mov dword [ebp - 0x38], ebx
inc ecx
mov dword [ebp - 0x3c], 0xfffffff6
mov dword [ebp - 0x34], ecx
mov dword [ebp - 0x2c], 3
mov dword [ebp - 0x2c], ebx
mov dword [ebp - 0x24], ebx
jmp 0x1001f55a
mov eax, dword [ebp - 0x24]
mov dword [ebp + eax*4 - 0x264], 0x3fde
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], 2
jl 0x1001f549
mov dword [ebp - 0x2c], ecx
mov eax, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x38]
sub eax, 0xfffffff8
neg eax
sbb eax, eax
inc eax
mov dword [ebp - 0x2c], eax
mov dword [ebp - 0x34], ecx
cmp dword [ebp - 0x34], ebx
jl 0x1001f586
cmp dword [ebp - 0x3c], ebx
jne 0x1001f586
dec dword [ebp - 0x34]
jns 0x1001f57c
push 0x5c
pop eax
push 2
xor esi, esi
mov byte [ebp - 0x42], cl
mov byte [ebp - 0x44], bl
mov ecx, ebx
mov byte [ebp - 0x43], 0x20
inc esi
mov byte [ebp - 0x41], 0x7b
mov word [ebp - 0x4c], ax
pop edi
cmp edi, 2
jne 0x1001f641
push edi
mov dword [ebp - 0x38], 0x1930
cmp dword [ebp - 0x38], 0x1a27
pop ecx
mov dword [ebp - 0x30], ecx
mov dword [ebp - 0x24], edi
jle 0x1001f66a
mov edi, ebx
mov dword [ebp - 0x34], ebx
mov eax, ebx
mov dword [ebp - 0x2c], ebx
mov edx, edi
mov dword [ebp - 0x38], ebx
mov ecx, eax
mov edi, ebx
shl edx, cl
mov dword [ebp - 0x3c], edx
mov eax, edi
lea ecx, [ebp - 0x28c]
and eax, edx
cdq
push edx
push eax
call fcn.10001a31
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x1001f5fc
mov eax, dword [eax]
push eax
call fcn.100490c6
pop ecx
push ebx
push esi
lea ecx, [ebp - 0x28c]
call fcn.1000209f
mov edx, dword [ebp - 0x3c]
inc edi
cmp edi, 0x7e37
jl 0x1001f5e0
mov eax, dword [ebp - 0x2c]
mov edi, dword [ebp - 0x34]
inc eax
mov dword [ebp - 0x2c], eax
cmp eax, 0x462c
jl 0x1001f5d2
inc edi
mov dword [ebp - 0x34], edi
cmp edi, 0x5f55
jl 0x1001f5cd
mov edi, dword [ebp - 0x24]
mov ecx, dword [ebp - 0x30]
jmp 0x1001f66a
movzx edx, byte [ebp + edi - 0x43]
mov eax, edi
sub eax, ecx
movzx eax, byte [ebp + eax - 0x46]
movzx ecx, word [ebp + eax*2 - 0x4c]
mov eax, ecx
and eax, edx
add eax, eax
sub ecx, eax
movzx eax, byte [ebp + edi - 0x44]
add ecx, edx
mov word [ebp + eax*2 - 0x4c], cx
mov ecx, ebx
add edi, 2
cmp edi, 4
jb 0x1001f5a3
xor eax, eax
mov dword [ebp - 0x144], 7
mov word [ebp - 0x4a], ax
lea ecx, [ebp - 0x158]
mov word [ebp - 0x158], ax
lea eax, [ebp - 0x4c]
push eax
mov dword [ebp - 0x148], ebx
call fcn.100072f5
mov byte [ebp - 4], 0x18
mov dword [ebp - 0x18], 3
mov dword [ebp - 0x1c], 0xfffffffc
mov dword [ebp - 0x34], 0x45c17473
mov dword [ebp - 0x2c], 0x5dc1
cmp dword [ebp - 0x2c], 0x6012
jle 0x1001f6f8
mov esi, ebx
mov edi, ebx
lea eax, [edi + esi]
mov ecx, 0x1007cab8
cdq
push edx
push eax
call fcn.10001cb3
inc edi
cmp edi, 0x5e0a
jl 0x1001f6cf
inc esi
cmp esi, 0x65aa
jl 0x1001f6cd
push ebx
call dword [sym.imp.COMDLG32.dll_FindTextW]
mov dword [ebp - 0x30], 1
mov byte [ebp - 4], 0x19
cmp dword [ebp - 0x2c], 0x59f6
jge 0x1001f739
mov edx, str.wiutaa_sfpjfhxe_nuxs_dgp_cka_yad_gizwjt_wle_ykj_amdwl_tmlxfywf_bclhva_dpdvtvu_qbw
mov ecx, 0x1007cab8
call fcn.100036f5
jmp 0x1001f739
mov dword [ebp - 4], 0x18
or edi, 0xffffffff
mov dword [ebp - 0x24], ebx
jmp 0x1001f759
mov eax, dword [ebp - 0x24]
mov dword [ebp + eax*4 - 0x9c], 0x7b332e0c
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], 1
jl 0x1001f748
mov eax, dword [ebp - 0x18]
sub eax, 0xa
mov dword [ebp - 0x1c], eax
je 0x1001f7fe
cmp dword [ebp - 0x18], ebx
je 0x1001f776
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x18]
cmp dword [ebp - 0x1c], ebx
jne 0x1001f796
cmp dword [ebp - 0x18], ebx
jne 0x1001f796
mov ecx, ebx
jmp 0x1001f799
xor ecx, ecx
inc ecx
mov eax, dword [ebp - 0x1c]
xor edx, edx
mov dword [ebp - 0x34], eax
mov eax, dword [ebp - 0x1c]
cmp ecx, eax
setne dl
sub edx, dword [ebp - 0x18]
neg edx
sbb edx, edx
xor ecx, ecx
inc edx
add edx, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x34]
cmp eax, edx
mov eax, dword [ebp - 0x18]
setle cl
xor edx, edx
cmp ecx, eax
mov eax, dword [ebp - 0x1c]
setl dl
xor ecx, ecx
cmp edx, eax
mov eax, dword [ebp - 0x1c]
setg cl
sub eax, ecx
mov ecx, 0xcbd6cd53
neg eax
sbb eax, eax
inc eax
cmp ecx, eax
sbb eax, eax
neg eax
cmp eax, dword [ebp - 0x18]
jl 0x1001f7ef
mov eax, dword [ebp - 0x34]
cmp dword [ebp - 0x1c], ebx
je 0x1001f7fe
cmp dword [ebp - 0x34], ebx
je 0x1001f7fe
xor esi, esi
inc esi
jmp 0x1001f800
mov esi, ebx
mov eax, dword [ebp - 0x18]
xor edx, edx
cmp esi, eax
setge dl
xor ecx, ecx
mov dword [ebp - 0x9c], edx
mov eax, dword [ebp - 0x18]
cmp edx, eax
sete cl
mov dword [ebp - 0x30], ecx
mov dword [ebp - 0x30], ebx
jmp 0x1001f82b
mov dword [ebp - 0x9c], ebx
inc dword [ebp - 0x30]
cmp dword [ebp - 0x30], 0x10
je 0x1001f822
mov dword [ebp - 0x4c], ebx
xor ecx, ecx
mov dword [ebp - 0x30], 0xfffffffb
inc ecx
mov dword [ebp - 0x34], edi
mov dword [ebp - 0x38], 0xcf415d72
mov dword [ebp - 0x38], 0x66d210ec
mov dword [ebp - 0x38], ecx
mov dword [ebp - 0x38], edi
mov dword [ebp - 0x38], ecx
mov dword [ebp - 0x38], ecx
mov dword [ebp - 0x38], 0xc946b43d
mov dword [ebp - 0x38], ecx
mov dword [ebp - 0x38], 0xab551fa4
mov dword [ebp - 0x30], ebx
jmp 0x1001f8ef
mov dword [ebp - 0x1c], ebx
mov dword [ebp - 0x38], ebx
mov dword [ebp - 0x2c], 0xa6b42be1
mov dword [ebp - 0x24], ebx
jmp 0x1001f894
mov eax, dword [ebp - 0x24]
mov dword [ebp + eax*4 - 0x308], 0xb963ab19
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], 4
jl 0x1001f883
mov dword [ebp - 0x1c], ebx
cmp dword [ebp - 0x1c], 0xa
jl 0x1001f8ec
mov dword [ebp - 0x38], 0x2121f90e
mov dword [ebp - 0x34], edi
mov dword [ebp - 0x24], ebx
jmp 0x1001f8bf
mov eax, dword [ebp - 0x24]
mov dword [ebp + eax*4 - 0x1e0], ebx
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], ecx
jl 0x1001f8b2
mov eax, dword [ebp - 0x38]
xor edx, edx
mov dword [ebp - 0x34], eax
mov ecx, dword [ebp - 0x34]
mov eax, dword [ebp - 0x30]
cmp ecx, eax
push 1
setg dl
add edx, dword [ebp - 0x2c]
mov dword [ebp - 0x34], edx
dec dword [ebp - 0x2c]
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 0xa
pop ecx
jge 0x1001f8a3
dec dword [ebp - 0x30]
cmp dword [ebp - 0x30], 0xfffffffa
jg 0x1001f871
push 0x5f
pop eax
push 2
mov byte [ebp - 0x3e], cl
mov ecx, ebx
mov byte [ebp - 0x40], bl
mov byte [ebp - 0x3f], 0xff
mov byte [ebp - 0x3d], 0x61
mov word [ebp - 0x48], ax
pop esi
cmp esi, 2
jne 0x1001f91c
push esi
pop ecx
jmp 0x1001f945
movzx edx, byte [ebp + esi - 0x3f]
mov eax, esi
sub eax, ecx
movzx eax, byte [ebp + eax - 0x42]
movzx ecx, word [ebp + eax*2 - 0x48]
mov eax, ecx
and eax, edx
add eax, eax
sub ecx, eax
movzx eax, byte [ebp + esi - 0x40]
add ecx, edx
mov word [ebp + eax*2 - 0x48], cx
mov ecx, ebx
add esi, 2
cmp esi, 4
jb 0x1001f913
xor eax, eax
mov dword [ebp - 0x1f0], 7
mov word [ebp - 0x46], ax
lea ecx, [ebp - 0x204]
mov word [ebp - 0x204], ax
lea eax, [ebp - 0x48]
push eax
mov dword [ebp - 0x1f4], ebx
call fcn.100072f5
mov byte [ebp - 4], 0x1b
xor edi, edi
mov dword [ebp - 0x48], ebx
inc edi
mov dword [ebp - 0x30], 0x4e2db58
mov dword [ebp - 0x34], 0x173948b0
mov dword [ebp - 0x2c], edi
mov dword [ebp - 0x30], ebx
jmp 0x1001fa27
mov dword [ebp - 0x38], edi
lea ecx, [ebp - 0x124]
push 2
call fcn.10001dc8
mov dword [ebp - 0x24], ebx
jmp 0x1001f9c1
mov ecx, dword [ebp - 0x24]
mov eax, dword [ebp - 0x124]
or dword [eax + ecx*4], 0xffffffff
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], 2
jl 0x1001f9b1
mov eax, dword [ebp - 0x30]
cmp dword [ebp - 0x38], ebx
jne 0x1001fa01
mov dword [ebp - 0x38], 4
mov byte [ebp - 0x1d], bl
cmp byte [ebp - 0x1d], 0
je 0x1001f9e7
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_LoadResource]
mov eax, dword [ebp - 0x30]
xor edx, edx
mov ecx, dword [ebp - 0x38]
mov eax, dword [ebp - 0x34]
cmp ecx, eax
mov eax, dword [ebp - 0x124]
setl dl
mov dword [eax], edx
jmp 0x1001fa14
mov dword [ebp - 0x38], 0xfffffff7
mov eax, dword [ebp - 0x34]
mov dword [ebp - 0x2c], eax
mov eax, dword [ebp - 0x2c]
mov dword [ebp - 0x38], eax
lea ecx, [ebp - 0x124]
cmp dword [ebp - 0x2c], ebx
jne 0x1001fa33
call fcn.10001e25
dec dword [ebp - 0x30]
cmp dword [ebp - 0x30], 0xfffffffe
je 0x1001f99c
jmp 0x1001fa38
call fcn.10001e25
or esi, 0xffffffff
push dword [ebp - 0x148]
cmp dword [ebp - 0x144], 8
lea eax, [ebp - 0x158]
push ebx
cmovae eax, dword [ebp - 0x158]
lea ecx, [ebp - 0x21c]
push eax
call fcn.10020077
cmp eax, esi
je 0x1001fa7e
push esi
push ebx
lea ecx, [ebp - 0x204]
push ecx
push edi
push eax
lea ecx, [ebp - 0x21c]
call fcn.1001de50
jmp 0x1001fa3b
push 3
lea ecx, [ebp - 0xcc]
call fcn.10001dc8
mov byte [ebp - 4], 0x1c
push 2
pop ecx
mov dword [ebp - 0x90], ecx
mov dword [ebp - 0x8c], ecx
mov dword [ebp - 0x88], ecx
mov dword [ebp - 0x84], ecx
mov dword [ebp - 0x18], esi
mov dword [ebp - 0x1c], ebx
jmp 0x1001fac0
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0x78], 0xfffffffd
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], ecx
jl 0x1001fab2
push 3
mov dword [ebp - 0x1c], ebx
pop edx
jmp 0x1001fae0
mov ecx, dword [ebp - 0x1c]
mov eax, dword [ebp - 0xcc]
mov dword [eax + ecx*4], 0x6bc3ec3d
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], edx
jl 0x1001facd
mov dword [ebp - 0x74], edx
cmp dword [ebp - 0x74], 0xffffffee
jge 0x1001fca1
mov dword [ebp - 0x1c], 8
mov dword [ebp - 0x24], ebx
jmp 0x1001fb0b
mov eax, dword [ebp - 0x24]
mov dword [ebp + eax*4 - 0xa4], esi
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], edi
jl 0x1001fafe
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0xa4], eax
cmp dword [ebp - 0x1c], ebx
je 0x1001fc1f
mov byte [ebp - 0x1d], bl
mov dword [ebp - 0x24], 0xd5c
cmp dword [ebp - 0x24], 0xddc
jle 0x1001fbb0
mov ecx, ebx
mov dword [ebp - 0x34], ebx
mov eax, ebx
mov dword [ebp - 0x2c], ebx
mov esi, ebx
mov dword [ebp - 0x3c], ebx
add eax, ecx
mov dword [ebp - 0x30], ebx
mov ecx, esi
mov dword [ebp - 0x38], eax
mov esi, eax
shl esi, cl
mov eax, esi
mov ecx, 0x1007cab8
xor eax, ebx
cdq
push edx
push eax
call fcn.10001cb3
inc ebx
cmp ebx, 0x375e
jl 0x1001fb52
mov esi, dword [ebp - 0x3c]
mov eax, dword [ebp - 0x2c]
inc esi
mov ecx, dword [ebp - 0x34]
mov dword [ebp - 0x3c], esi
push 0
pop ebx
cmp esi, 0x721d
jl 0x1001fb44
inc eax
mov dword [ebp - 0x2c], eax
cmp eax, 0x68e1
jl 0x1001fb3f
inc ecx
mov dword [ebp - 0x34], ecx
cmp ecx, 0x6b6
jl 0x1001fb3a
mov esi, dword [sym.imp.USER32.dll_GetDesktopWindow]
call esi
push eax
call esi
push eax
call dword [sym.imp.USER32.dll_SetParent]
or esi, 0xffffffff
cmp byte [ebp - 0x1d], 0
je 0x1001fbcf
push 0x1fd0
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_RestoreDC]
mov byte [ebp - 4], 0x1d
cmp dword [ebp - 0x24], 0xad4
jge 0x1001fbeb
mov edx, str.koldunmx_qrmfy_jgfxgo_lpu_emhfp_gybxddnba_bzqo_lodsflphh_ywujsupe_djkozokg_ijltr
mov ecx, 0x1007cab8
call fcn.100036f5
mov dword [ebp - 4], 0x1c
jmp 0x1001fc99
mov dword [ebp - 0x18], edi
xor ecx, ecx
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x78]
inc dword [ebp - 0x88]
mov edx, dword [ebp - 0x88]
mov esi, dword [ebp - 0xcc]
mov dword [ebp - 0xa4], edx
mov eax, dword [ebp - 0x18]
cmp eax, 0x2002
setge cl
xor eax, eax
cmp edx, ecx
setg al
xor edx, edx
cmp eax, dword [esi + 4]
mov eax, dword [ebp - 0x18]
setne dl
xor ecx, ecx
cmp edx, eax
setl cl
add ecx, dword [ebp - 0x74]
mov dword [esi + 4], ecx
mov dword [ebp - 0x1c], ebx
cmp dword [ebp - 0x1c], ebx
jl 0x1001fc96
cmp dword [ebp - 0x74], ebx
jne 0x1001fc96
dec dword [ebp - 0x1c]
jns 0x1001fc8c
or esi, 0xffffffff
dec dword [ebp - 0x74]
jmp 0x1001fae8
mov dword [ebp - 0x18], ebx
cmp dword [ebp - 0x18], 2
jg 0x1001fd65
mov ebx, dword [ebp - 0xcc]
mov dword [ebp - 0x2c], 0xe5de2cae
xor edx, edx
mov dword [ebp - 0x38], 4
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x8c], 0xfff7
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp + eax*4 - 0x8c]
mov eax, dword [ebp - 0x2c]
cmp ecx, eax
mov eax, dword [ebp - 0x18]
setge dl
xor ecx, ecx
imul edx, dword [ebp + eax*4 - 0x8c]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp + eax*4 - 0x8c]
cmp edx, eax
setl cl
imul ecx, dword [ebp - 0x2c]
mov esi, dword [ebp - 0x18]
mov eax, dword [ebp - 0x2c]
neg ecx
sbb ecx, ecx
neg ecx
cmp ecx, edi
sbb ecx, ecx
xor edx, edx
neg ecx
cmp eax, ecx
mov eax, dword [ebp - 0xcc]
setle dl
mov dword [eax + esi*4], edx
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp + eax*4 - 0x8c]
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x8c], ecx
mov eax, dword [ebp - 0x18]
mov edx, dword [ebp + eax*4 - 0x8c]
mov ecx, dword [ebp - 0x18]
mov eax, dword [ebp - 0xcc]
sub edx, dword [ebx + 4]
mov dword [eax + ecx*4], edx
mov dword [ebp - 0x38], edx
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 2
jle 0x1001fcb4
xor ebx, ebx
lea ecx, [ebp - 0xcc]
mov byte [ebp - 4], 0x1b
call fcn.10001e25
mov ecx, dword [ebp - 0x98]
lea eax, [ebp - 0x21c]
push eax
lea edx, [ebp - 0x1c8]
call fcn.10020204
pop ecx
push ebx
push edi
lea ecx, [ebp - 0x204]
call fcn.1000737d
push ebx
push edi
lea ecx, [ebp - 0x158]
call fcn.1000737d
push ebx
push edi
lea ecx, [ebp - 0x21c]
call fcn.1000737d
push ebx
push edi
lea ecx, [ebp - 0x1c8]
call fcn.1000737d
mov ecx, dword [ebp - 0xc]
mov eax, dword [ebp - 0x98]
pop edi
pop esi
mov dword fs:[0], ecx
pop ebx
mov esp, ebp
pop ebp
ret