Function at 0x100553a4
Capabilities:
Accept command line arguments
Allocate thread local storage
Get session user name
Get thread local storage value

Disassembly:
push ebp
mov ebp, esp
mov eax, 0x100c
call fcn.1008cb20
push esi
push edi
mov dword [ebp - 0xd00], 5
mov dword [ebp - 0xc8c], 0x4c46983c
mov dword [ebp - 0xc88], 0x4c46983c
mov dword [ebp - 0xc84], 0x4c46983c
mov dword [ebp - 0xc80], 0x4c46983c
mov dword [ebp - 0x28], 0
jmp 0x100553f5
mov eax, dword [ebp - 0x28]
inc eax
mov dword [ebp - 0x28], eax
cmp dword [ebp - 0x28], 4
jge 0x1005540b
mov eax, dword [ebp - 0x28]
mov dword [ebp + eax*4 - 0xba8], 0xa8eac8b
jmp 0x100553ee
mov dword [ebp - 0x28], 0
jmp 0x1005541b
mov eax, dword [ebp - 0x28]
inc eax
mov dword [ebp - 0x28], eax
cmp dword [ebp - 0x28], 4
jge 0x10055431
mov eax, dword [ebp - 0x28]
mov dword [ebp + eax*4 - 0x970], 0
jmp 0x10055414
mov dword [ebp - 0x28], 0
jmp 0x10055441
mov eax, dword [ebp - 0x28]
inc eax
mov dword [ebp - 0x28], eax
cmp dword [ebp - 0x28], 2
jge 0x10055457
mov eax, dword [ebp - 0x28]
mov dword [ebp + eax*4 - 0xdac], 0x8e85a7b0
jmp 0x1005543a
push 4
pop eax
imul eax, eax, 3
mov dword [ebp + eax - 0x970], 3
jmp 0x10055485
push 4
pop eax
imul eax, eax, 3
mov eax, dword [ebp + eax - 0x970]
dec eax
push 4
pop ecx
imul ecx, ecx, 3
mov dword [ebp + ecx - 0x970], eax
push 4
pop eax
imul eax, eax, 3
cmp dword [ebp + eax - 0x970], 0
jl 0x10055785
mov dword [ebp - 0xe0], 0xfffffff6
mov dword [ebp - 0x47c], 0x9fe57f6c
mov dword [ebp - 0x32c], 6
mov dword [ebp - 0x264], 0
jmp 0x100554d0
mov eax, dword [ebp - 0x264]
inc eax
mov dword [ebp - 0x264], eax
cmp dword [ebp - 0x264], 2
jge 0x100554ec
mov eax, dword [ebp - 0x264]
mov dword [ebp + eax*4 - 0xda0], 0xfffffff8
jmp 0x100554c3
mov dword [ebp - 0xe0], 3
jmp 0x10055505
mov eax, dword [ebp - 0xe0]
dec eax
mov dword [ebp - 0xe0], eax
cmp dword [ebp - 0xe0], 0
jl 0x10055764
mov dword [ebp - 0xd14], 0xffffffff
mov dword [ebp - 0xd1c], 0xffffffff
mov dword [ebp - 0xd24], 0x56e74e80
mov dword [ebp - 0xd2c], 0xfffffffc
mov dword [ebp - 0x324], 0x7ef2
mov dword [ebp - 0x25c], 0
jmp 0x1005555d
mov eax, dword [ebp - 0x25c]
inc eax
mov dword [ebp - 0x25c], eax
cmp dword [ebp - 0x25c], 1
jge 0x10055579
mov eax, dword [ebp - 0x25c]
mov dword [ebp + eax*4 - 0xd34], 0
jmp 0x10055550
mov byte [ebp - 0xc9], 0
movzx eax, byte [ebp - 0xc9]
test eax, eax
je 0x100555b4
push 0x2421
push 0
push 0
push 0x18e1
push 0x20a3
push 0
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_GetDIBits]
push 4
pop eax
imul eax, eax, 3
mov eax, dword [ebp + eax - 0x970]
mov eax, dword [ebp + eax*4 - 0xba8]
mov dword [ebp - 0x47c], eax
mov eax, dword [ebp - 0x47c]
mov dword [ebp - 0x8f8], eax
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x8f8]
mov dword [ebp + eax - 0xda0], ecx
mov eax, dword [ebp - 0x324]
mov ecx, dword [ebp - 0x8f8]
mov edx, dword [ebp - 0x324]
inc edx
mov dword [ebp - 0x324], edx
cmp eax, ecx
jge 0x100556a1
mov eax, dword [ebp - 0xe0]
mov ecx, dword [ebp - 0x32c]
push 4
pop edx
imul edx, edx, 3
mov edx, dword [ebp + edx - 0x970]
add ecx, dword [ebp + edx*4 - 0xba8]
cmp dword [ebp + eax*4 - 0xba8], ecx
je 0x10055643
mov dword [ebp - 0x900], 1
jmp 0x1005564a
and dword [ebp - 0x900], 0
cmp dword [ebp - 0x900], 0xfffa
jae 0x10055662
mov dword [ebp - 0x908], 1
jmp 0x10055669
and dword [ebp - 0x908], 0
mov eax, dword [ebp - 0x908]
sub eax, 0x694a2199
neg eax
mov dword [ebp - 0x910], eax
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x910]
mov dword [ebp + eax - 0xc8c], ecx
cmp dword [ebp - 0x910], 0
je 0x100556a1
and dword [ebp - 0x918], 0
jmp 0x100556ab
mov dword [ebp - 0x918], 1
mov eax, dword [ebp - 0xe0]
cmp dword [ebp - 0x918], eax
jne 0x100556c5
mov dword [ebp - 0x920], 1
jmp 0x100556cc
and dword [ebp - 0x920], 0
mov eax, dword [ebp - 0x32c]
cmp dword [ebp - 0x920], eax
jle 0x100556e6
mov dword [ebp - 0x928], 1
jmp 0x100556ed
and dword [ebp - 0x928], 0
cmp dword [ebp - 0x928], 0x56bf5ee8
jle 0x10055705
mov dword [ebp - 0x88c], 1
jmp 0x1005570c
and dword [ebp - 0x88c], 0
mov eax, dword [ebp - 0xe0]
mov eax, dword [ebp + eax*4 - 0xba8]
cmp eax, dword [ebp - 0x88c]
jge 0x1005572d
mov dword [ebp - 0x28c], 1
jmp 0x10055734
and dword [ebp - 0x28c], 0
push 4
pop eax
imul eax, eax, 3
mov eax, dword [ebp + eax - 0x970]
mov ecx, dword [ebp - 0x28c]
mov dword [ebp + eax*4 - 0xba8], ecx
mov eax, dword [ebp - 0x28c]
sub eax, 0x34219488
mov dword [ebp - 0x32c], eax
jmp 0x100554f8
push 4
pop eax
imul eax, eax, 3
mov eax, dword [ebp + eax - 0x970]
cmp dword [ebp + eax*4 - 0xba8], 0
je 0x10055780
jmp 0x1005546a
jmp 0x1005546a
push 4
pop eax
imul eax, eax, 3
push 4
pop ecx
shl ecx, 0
mov eax, dword [ebp + eax - 0x970]
mov dword [ebp + ecx - 0xdac], eax
mov dword [ebp - 0x40], 0x2b1c
mov dword [ebp - 0xb8], 0x9d81479b
mov dword [ebp - 0xe8], 0xfffffff7
mov dword [ebp - 0x198], 0
jmp 0x100557d3
mov eax, dword [ebp - 0x198]
inc eax
mov dword [ebp - 0x198], eax
cmp dword [ebp - 0x198], 1
jge 0x100557ef
mov eax, dword [ebp - 0x198]
mov dword [ebp + eax*4 - 0xf0], 0x145c1747
jmp 0x100557c6
mov byte [ebp - 0xf9], 0
movzx eax, byte [ebp - 0xf9]
test eax, eax
je 0x1005580c
push 0xf67
call dword [sym.imp.KERNEL32.dll_TlsGetValue]
cmp dword [ebp - 0x40], 0x8f69f7fd
jne 0x10055821
mov dword [ebp - 0x388], 1
jmp 0x10055828
and dword [ebp - 0x388], 0
cmp dword [ebp - 0x40], 0x89a5
jne 0x1005583d
mov dword [ebp - 0x378], 1
jmp 0x10055844
and dword [ebp - 0x378], 0
mov eax, dword [ebp - 0x378]
imul eax, dword [ebp - 0xb8]
mov dword [ebp - 0x850], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x850]
mov dword [ebp + eax - 0xf0], ecx
mov eax, dword [ebp - 0x40]
cmp dword [ebp - 0x850], eax
jg 0x10055881
mov dword [ebp - 0x380], 1
jmp 0x10055888
and dword [ebp - 0x380], 0
mov eax, dword [ebp - 0x40]
cmp dword [ebp - 0x380], eax
jne 0x1005589f
mov dword [ebp - 0x9ac], 1
jmp 0x100558a6
and dword [ebp - 0x9ac], 0
mov eax, dword [ebp - 0xb8]
mov dword [ebp - 0xd3c], eax
cmp dword [ebp - 0x40], 0x829ed890
jbe 0x100558c7
mov dword [ebp - 0xad0], 1
jmp 0x100558ce
and dword [ebp - 0xad0], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xf0]
mov dword [ebp - 0xd44], eax
mov eax, dword [ebp - 0x40]
mov dword [ebp - 0xd4c], eax
cmp dword [ebp - 0xb8], 0
je 0x100558ff
mov dword [ebp - 0x858], 1
jmp 0x10055906
and dword [ebp - 0x858], 0
mov eax, dword [ebp - 0x858]
sub eax, dword [ebp - 0xb8]
mov dword [ebp - 0xe8], eax
mov eax, dword [ebp - 0xe8]
cmp dword [ebp - 0x388], eax
je 0x10055932
mov dword [ebp - 0x860], 1
jmp 0x10055939
and dword [ebp - 0x860], 0
mov eax, dword [ebp - 0x40]
cmp eax, dword [ebp - 0x860]
jne 0x10055963
push 4
pop eax
imul eax, eax, 0
push 4
pop ecx
imul ecx, ecx, 0
mov eax, dword [ebp + eax - 0xf0]
mov dword [ebp + ecx - 0xf0], eax
jmp 0x10055a42
mov dword [ebp - 0x40], 0
jmp 0x10055973
mov eax, dword [ebp - 0x40]
inc eax
mov dword [ebp - 0x40], eax
cmp dword [ebp - 0x40], 0
jg 0x10055a42
mov dword [ebp - 0x19c], 0
jmp 0x10055996
mov eax, dword [ebp - 0x19c]
inc eax
mov dword [ebp - 0x19c], eax
cmp dword [ebp - 0x19c], 1
jge 0x100559b2
mov eax, dword [ebp - 0x19c]
mov dword [ebp + eax*4 - 0xae0], 8
jmp 0x10055989
mov dword [ebp - 0xb8], 0
jmp 0x100559cb
mov eax, dword [ebp - 0xb8]
inc eax
mov dword [ebp - 0xb8], eax
cmp dword [ebp - 0xb8], 0
jg 0x10055a3d
mov dword [ebp - 0xe8], 0
jmp 0x100559ed
mov eax, dword [ebp - 0xe8]
inc eax
mov dword [ebp - 0xe8], eax
cmp dword [ebp - 0xe8], 0
jg 0x10055a2c
mov eax, dword [ebp - 0x40]
mov eax, dword [ebp + eax*4 - 0xf0]
mov dword [ebp - 0xad8], eax
mov eax, dword [ebp - 0xe8]
mov ecx, dword [ebp - 0xad8]
mov dword [ebp + eax*4 - 0xf0], ecx
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0xae0], 1
jmp 0x100559e0
mov eax, dword [ebp - 0x40]
cmp dword [ebp + eax*4 - 0xf0], 0
je 0x10055a3b
jmp 0x100559be
jmp 0x100559be
jmp 0x1005596c
mov dword [ebp - 0xf8], 1
mov dword [ebp - 0x68], 0
jmp 0x10055a5c
mov eax, dword [ebp - 0x68]
inc eax
mov dword [ebp - 0x68], eax
cmp dword [ebp - 0x68], 2
jge 0x10055a72
mov eax, dword [ebp - 0x68]
mov dword [ebp + eax*4 - 0x340], 6
jmp 0x10055a55
mov dword [ebp - 0x68], 0
jmp 0x10055a82
mov eax, dword [ebp - 0x68]
inc eax
mov dword [ebp - 0x68], eax
cmp dword [ebp - 0x68], 1
jge 0x10055a98
mov eax, dword [ebp - 0x68]
mov dword [ebp + eax*4 - 0x204], 0xeaa32b1c
jmp 0x10055a7b
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0x204], 1
jmp 0x10055ac6
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x204]
dec eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x204], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x204], 0
jl 0x10055f0a
mov dword [ebp - 0x50], 0xfffffff9
mov dword [ebp - 0x100], 0xcf7d1649
mov dword [ebp - 0x17c], 0xffff
mov dword [ebp - 0x50], 0
jmp 0x10055b05
mov eax, dword [ebp - 0x50]
inc eax
mov dword [ebp - 0x50], eax
cmp dword [ebp - 0x50], 1
jg 0x10055efd
mov dword [ebp - 0xb00], 0xa1b4bc71
mov eax, dword [ebp - 0x50]
mov eax, dword [ebp + eax*4 - 0x340]
mov dword [ebp - 0xd54], eax
cmp dword [ebp - 0x50], 0
ja 0x10055b3b
mov dword [ebp - 0x390], 1
jmp 0x10055b42
and dword [ebp - 0x390], 0
cmp dword [ebp - 0x390], 0xf209
jl 0x10055b5a
mov dword [ebp - 0x868], 1
jmp 0x10055b61
and dword [ebp - 0x868], 0
cmp dword [ebp - 0x868], 0xfffffff8
jne 0x10055b76
mov dword [ebp - 0x398], 1
jmp 0x10055b7d
and dword [ebp - 0x398], 0
mov eax, dword [ebp - 0x398]
neg eax
cmp eax, 0x70ca
jne 0x10055b98
mov dword [ebp - 0x870], 1
jmp 0x10055b9f
and dword [ebp - 0x870], 0
mov eax, dword [ebp - 0x50]
cmp dword [ebp - 0x870], eax
jne 0x10055bb6
mov dword [ebp - 0x3a0], 1
jmp 0x10055bbd
and dword [ebp - 0x3a0], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x340]
cmp dword [ebp - 0x3a0], eax
jle 0x10055bde
mov dword [ebp - 0x878], 1
jmp 0x10055be5
and dword [ebp - 0x878], 0
mov eax, dword [ebp - 0xf8]
cmp eax, dword [ebp - 0x878]
jle 0x10055bff
mov dword [ebp - 0x3a8], 1
jmp 0x10055c06
and dword [ebp - 0x3a8], 0
cmp dword [ebp - 0x3a8], 7
jne 0x10055c1b
mov dword [ebp - 0x880], 1
jmp 0x10055c22
and dword [ebp - 0x880], 0
mov eax, dword [ebp - 0x50]
mov eax, dword [ebp + eax*4 - 0x340]
imul eax, dword [ebp - 0x880]
mov dword [ebp - 0x100], eax
cmp dword [ebp - 0x100], 0
jne 0x10055c58
mov eax, dword [ebp - 0x50]
cmp dword [ebp + eax*4 - 0x340], 0
jne 0x10055c58
and dword [ebp - 0x3b0], 0
jmp 0x10055c62
mov dword [ebp - 0x3b0], 1
mov eax, dword [ebp - 0x17c]
cmp dword [ebp - 0x3b0], eax
jne 0x10055c7c
mov dword [ebp - 0x888], 1
jmp 0x10055c83
and dword [ebp - 0x888], 0
mov eax, dword [ebp - 0x50]
mov eax, dword [ebp + eax*4 - 0x340]
mov ecx, dword [ebp - 0x888]
add ecx, 0xfffe
add eax, ecx
jne 0x10055ec6
mov dword [ebp - 0xae8], 0xfffffff8
mov dword [ebp - 0xaf0], 0x6ac1dea9
mov dword [ebp - 0x17c], 0
jmp 0x10055cce
mov eax, dword [ebp - 0x17c]
inc eax
mov dword [ebp - 0x17c], eax
cmp dword [ebp - 0x17c], 1
jg 0x10055ec4
mov dword [ebp - 0x898], 0xd0863e87
mov dword [ebp - 0xf8], 0
jmp 0x10055cfe
mov eax, dword [ebp - 0xf8]
inc eax
mov dword [ebp - 0xf8], eax
cmp dword [ebp - 0xf8], 1
jg 0x10055e9e
mov dword [ebp - 0x3d0], 0x8a251abe
mov dword [ebp - 0x100], 0
jmp 0x10055d2e
mov eax, dword [ebp - 0x100]
inc eax
mov dword [ebp - 0x100], eax
cmp dword [ebp - 0x100], 1
jg 0x10055d79
mov byte [ebp - 0xc1], 0
movzx eax, byte [ebp - 0xc1]
test eax, eax
je 0x10055d4f
call dword [sym.imp.KERNEL32.dll_TlsAlloc]
mov byte [ebp - 0x137], 0
movzx eax, byte [ebp - 0x137]
test eax, eax
je 0x10055d77
push 0
push 0x261e
push 0
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_SetTimer]
jmp 0x10055d21
cmp dword [ebp - 0x50], 0
je 0x10055d94
cmp dword [ebp - 0x898], 0
je 0x10055d94
mov dword [ebp - 0x3b8], 1
jmp 0x10055d9b
and dword [ebp - 0x3b8], 0
cmp dword [ebp - 0x3b8], 4
jbe 0x10055db0
mov dword [ebp - 0x890], 1
jmp 0x10055db7
and dword [ebp - 0x890], 0
mov eax, dword [ebp - 0xf8]
mov eax, dword [ebp + eax*4 - 0x340]
cmp eax, dword [ebp - 0x890]
je 0x10055dd8
mov dword [ebp - 0x3c0], 1
jmp 0x10055ddf
and dword [ebp - 0x3c0], 0
cmp dword [ebp - 0x3c0], 1
jl 0x10055df4
mov dword [ebp - 0x3c8], 1
jmp 0x10055dfb
and dword [ebp - 0x3c8], 0
mov eax, dword [ebp - 0x898]
add eax, dword [ebp - 0x3c8]
cmp eax, 0xd538
jle 0x10055e1a
mov dword [ebp - 0x8a0], 1
jmp 0x10055e21
and dword [ebp - 0x8a0], 0
mov eax, dword [ebp - 0x8a0]
mov dword [ebp - 0x3d0], eax
mov eax, dword [ebp - 0x3d0]
mov dword [ebp - 0xd5c], eax
mov eax, dword [ebp - 0xf8]
mov eax, dword [ebp + eax*4 - 0x340]
mov dword [ebp - 0xd64], eax
cmp dword [ebp - 0x100], 0
je 0x10055e6a
cmp dword [ebp - 0xae8], 0
je 0x10055e6a
mov dword [ebp - 0x8a8], 1
jmp 0x10055e71
and dword [ebp - 0x8a8], 0
cmp dword [ebp - 0x8a8], 0xfffffffc
jbe 0x10055e86
mov dword [ebp - 0x3d8], 1
jmp 0x10055e8d
and dword [ebp - 0x3d8], 0
mov eax, dword [ebp - 0x3d8]
mov dword [ebp - 0xaf0], eax
jmp 0x10055cf1
mov byte [ebp - 0xc3], 0
movzx eax, byte [ebp - 0xc3]
test eax, eax
je 0x10055ebf
push 0
push 0
push 0x1a40
call dword [sym.imp.KERNEL32.dll_GetModuleHandleExW]
jmp 0x10055cc1
jmp 0x10055ef8
mov dword [ebp - 0xaf8], 5
cmp dword [ebp - 0xaf8], 3
je 0x10055ee5
mov dword [ebp - 0x8b0], 1
jmp 0x10055eec
and dword [ebp - 0x8b0], 0
mov eax, dword [ebp - 0x8b0]
mov dword [ebp - 0xb00], eax
jmp 0x10055afe
cmp dword [ebp - 0x50], 0
je 0x10055f05
jmp 0x10055f0a
jmp 0x10055aab
mov dword [ebp - 0x7c], 0
jmp 0x10055f1a
mov eax, dword [ebp - 0x7c]
inc eax
mov dword [ebp - 0x7c], eax
cmp dword [ebp - 0x7c], 1
jge 0x10055f30
mov eax, dword [ebp - 0x7c]
mov dword [ebp + eax*4 - 0xd6c], 5
jmp 0x10055f13
mov dword [ebp - 0x7c], 0
jmp 0x10055f40
mov eax, dword [ebp - 0x7c]
inc eax
mov dword [ebp - 0x7c], eax
cmp dword [ebp - 0x7c], 4
jge 0x10055f56
mov eax, dword [ebp - 0x7c]
mov dword [ebp + eax*4 - 0xc6c], 1
jmp 0x10055f39
push 4
pop eax
shl eax, 1
mov dword [ebp + eax - 0xc6c], 0
jmp 0x10055f81
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0xc6c]
inc eax
push 4
pop ecx
shl ecx, 1
mov dword [ebp + ecx - 0xc6c], eax
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0xc6c], 0
jg 0x10055fe0
mov byte [ebp - 0xcb], 0
movzx eax, byte [ebp - 0xcb]
test eax, eax
je 0x10055fbf
push 0
push 0x1824
push 0
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_GetTextExtentPoint32A]
mov byte [ebp - 0xbd], 0
movzx eax, byte [ebp - 0xbd]
test eax, eax
je 0x10055fde
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetParent]
jmp 0x10055f68
mov dword [ebp - 0x1a4], 0
jmp 0x10055ff9
mov eax, dword [ebp - 0x1a4]
inc eax
mov dword [ebp - 0x1a4], eax
cmp dword [ebp - 0x1a4], 2
jge 0x10056015
mov eax, dword [ebp - 0x1a4]
mov dword [ebp + eax*4 - 0xfd8], 0xa684
jmp 0x10055fec
mov byte [ebp - 0x111], 0
movzx eax, byte [ebp - 0x111]
test eax, eax
je 0x1005602f
push 0
call dword [sym.imp.KERNEL32.dll_GlobalFree]
mov byte [ebp - 0x101], 0
movzx eax, byte [ebp - 0x101]
test eax, eax
je 0x10056061
push 0
push 0x666
push 0xc90
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_MoveToEx]
mov dword [ebp - 0xd74], 5
mov dword [ebp - 0x10], 0
mov dword [ebp - 0xd7c], 0x590
mov dword [ebp - 0x260], 0
jmp 0x10056095
mov eax, dword [ebp - 0x260]
inc eax
mov dword [ebp - 0x260], eax
cmp dword [ebp - 0x260], 2
jge 0x100560b1
mov eax, dword [ebp - 0x260]
mov dword [ebp + eax*4 - 0x34c], 0xffffffff
jmp 0x10056088
mov eax, dword [ebp - 0x10]
cmp dword [ebp - 0x10], eax
jge 0x100562f0
mov dword [ebp - 0x168], 0x37c0
mov dword [ebp - 0x1ac], 0xabff5ecc
mov dword [ebp - 0x8d8], 1
mov dword [ebp - 0xb40], 0xd69b45c
cmp dword [ebp - 0x10], 0xffffffff
jg 0x100560f7
mov dword [ebp - 0x3e0], 1
jmp 0x100560fe
and dword [ebp - 0x3e0], 0
mov eax, dword [ebp - 0x168]
mov ecx, dword [ebp - 0x168]
imul ecx, dword [ebp - 0x3e0]
imul eax, ecx
cmp eax, 5
ja 0x10056125
mov dword [ebp - 0x8b8], 1
jmp 0x1005612c
and dword [ebp - 0x8b8], 0
cmp dword [ebp - 0x8b8], 0xfffffffc
je 0x10056141
mov dword [ebp - 0x3e8], 1
jmp 0x10056148
and dword [ebp - 0x3e8], 0
mov eax, dword [ebp - 0x10]
cmp dword [ebp - 0x3e8], eax
jge 0x1005615f
mov dword [ebp - 0x8c0], 1
jmp 0x10056166
and dword [ebp - 0x8c0], 0
mov eax, dword [ebp - 0x10]
cmp dword [ebp - 0x8c0], eax
jl 0x1005617d
mov dword [ebp - 0x3f0], 1
jmp 0x10056184
and dword [ebp - 0x3f0], 0
mov eax, dword [ebp - 0x10]
cmp dword [ebp - 0x3f0], eax
jge 0x1005619b
mov dword [ebp - 0x8c8], 1
jmp 0x100561a2
and dword [ebp - 0x8c8], 0
imul eax, dword [ebp - 0x8c8], 0xffffffff
cmp eax, dword [ebp - 0x10]
je 0x100561ba
mov dword [ebp - 0x3f8], 1
jmp 0x100561c1
and dword [ebp - 0x3f8], 0
mov eax, dword [ebp - 0x10]
cmp dword [ebp - 0x3f8], eax
jne 0x100561d8
mov dword [ebp - 0x8d0], 1
jmp 0x100561df
and dword [ebp - 0x8d0], 0
mov eax, dword [ebp - 0x8d0]
mov dword [ebp - 0x1ac], eax
mov eax, dword [ebp - 0x1ac]
add eax, 0x12a2ef7e
cmp eax, dword [ebp - 0x10]
je 0x10056207
mov dword [ebp - 0x400], 1
jmp 0x1005620e
and dword [ebp - 0x400], 0
mov eax, dword [ebp - 0x10]
add eax, dword [ebp - 0x400]
cmp eax, dword [ebp - 0x168]
jne 0x1005622b
mov dword [ebp - 0x334], 1
jmp 0x10056232
and dword [ebp - 0x334], 0
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x334]
mov dword [ebp + eax - 0x34c], ecx
mov eax, dword [ebp - 0x334]
sub eax, 6
cmp eax, 2
jae 0x1005625f
mov dword [ebp - 0xb08], 1
jmp 0x10056266
and dword [ebp - 0xb08], 0
mov eax, dword [ebp - 0x168]
mov dword [ebp - 0xd84], eax
mov eax, dword [ebp - 0x168]
mov dword [ebp - 0xd8c], eax
mov eax, dword [ebp - 0x1ac]
mov dword [ebp - 0x8d8], eax
mov eax, dword [ebp - 0x10]
cmp dword [ebp - 0x8d8], eax
jge 0x100562a1
mov dword [ebp - 0x408], 1
jmp 0x100562a8
and dword [ebp - 0x408], 0
mov eax, dword [ebp - 0x10]
cmp dword [ebp - 0x408], eax
jle 0x100562c3
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x34c], 0
jne 0x100562d5
cmp dword [ebp - 0x1ac], 0
jne 0x100562d5
and dword [ebp - 0x8e0], 0
jmp 0x100562df
mov dword [ebp - 0x8e0], 1
mov eax, dword [ebp - 0x8e0]
mov dword [ebp - 0xb40], eax
jmp 0x10056765
mov dword [ebp - 0xb50], 0x3d82f881
mov dword [ebp - 0x10], 0
jmp 0x1005630a
mov eax, dword [ebp - 0x10]
dec eax
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], 0xfffffffd
jle 0x10056754
mov dword [ebp - 0x140], 1
mov dword [ebp - 0x410], 0xfffffffa
mov dword [ebp - 0xb60], 0xe8e356d6
mov dword [ebp - 0x140], 0xffffffe6
jmp 0x1005634b
mov eax, dword [ebp - 0x140]
inc eax
mov dword [ebp - 0x140], eax
cmp dword [ebp - 0x140], 0xfffffff7
jne 0x1005674f
mov dword [ebp - 0x58], 0x5866b388
mov dword [ebp - 0xb58], 0xfffffffc
mov dword [ebp - 0x58], 1
jmp 0x10056379
mov eax, dword [ebp - 0x58]
dec eax
mov dword [ebp - 0x58], eax
cmp dword [ebp - 0x58], 0
jl 0x1005674a
mov dword [ebp - 0x148], 0xffffffff
mov dword [ebp - 0x7fc], 0xc51c
mov dword [ebp - 0xb68], 0xfffffffb
mov dword [ebp - 0x148], 0
jmp 0x100563ba
mov eax, dword [ebp - 0x148]
inc eax
mov dword [ebp - 0x148], eax
cmp dword [ebp - 0x148], 1
jg 0x10056745
mov dword [ebp - 0x174], 6
mov eax, dword [ebp - 0x174]
mov dword [ebp - 0xd94], eax
mov eax, dword [ebp - 0x174]
cmp dword [ebp - 0x58], eax
jne 0x100563f4
mov dword [ebp - 0xb48], 1
jmp 0x100563fb
and dword [ebp - 0xb48], 0
mov dword [ebp - 0x410], 7
mov eax, dword [ebp - 0x410]
mov dword [ebp - 0xe48], eax
mov eax, dword [ebp - 0x58]
mov ecx, dword [ebp - 0x140]
cmp dword [ebp + eax*4 - 0x34c], ecx
jge 0x10056433
push 9
pop eax
test eax, eax
jne 0x10056433
and dword [ebp - 0x8e8], 0
jmp 0x1005643d
mov dword [ebp - 0x8e8], 1
cmp dword [ebp - 0x8e8], 0
jne 0x10056458
cmp dword [ebp - 0x174], 0
jne 0x10056458
and dword [ebp - 0x8f0], 0
jmp 0x10056462
mov dword [ebp - 0x8f0], 1
imul eax, dword [ebp - 0x8f0], 0x5ccf
test eax, eax
je 0x10056708
mov dword [ebp - 0x41c], 0x5a1b
cmp dword [ebp - 0x41c], 0
je 0x1005669d
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x34c], 0xffffffff
jne 0x100564a7
mov dword [ebp - 0x420], 1
jmp 0x100564ae
and dword [ebp - 0x420], 0
mov eax, dword [ebp - 0x41c]
cmp dword [ebp - 0x420], eax
jle 0x100564c8
mov dword [ebp - 0x6c8], 1
jmp 0x100564cf
and dword [ebp - 0x6c8], 0
imul eax, dword [ebp - 0x6c8], 0x1fd1
cmp dword [ebp - 0x58], eax
jg 0x100564ea
mov dword [ebp - 0x428], 1
jmp 0x100564f1
and dword [ebp - 0x428], 0
mov eax, dword [ebp - 0x58]
cmp dword [ebp - 0x428], eax
jge 0x10056508
mov dword [ebp - 0x6b8], 1
jmp 0x1005650f
and dword [ebp - 0x6b8], 0
imul eax, dword [ebp - 0x6b8], 0xfff6
test eax, eax
jne 0x1005652c
cmp dword [ebp - 0x58], 0
jne 0x1005652c
and dword [ebp - 0x430], 0
jmp 0x10056536
mov dword [ebp - 0x430], 1
cmp dword [ebp - 0x430], 0x316a
jl 0x1005654e
mov dword [ebp - 0x6bc], 1
jmp 0x10056555
and dword [ebp - 0x6bc], 0
cmp dword [ebp - 0x6bc], 0xffffffff
jl 0x1005656a
mov dword [ebp - 0x438], 1
jmp 0x10056571
and dword [ebp - 0x438], 0
mov eax, dword [ebp - 0x174]
cmp dword [ebp - 0x438], eax
jge 0x1005658b
mov dword [ebp - 0x7f4], 1
jmp 0x10056592
and dword [ebp - 0x7f4], 0
cmp dword [ebp - 0x7f4], 3
ja 0x100565a7
mov dword [ebp - 0x440], 1
jmp 0x100565ae
and dword [ebp - 0x440], 0
mov eax, dword [ebp - 0x148]
cmp dword [ebp - 0x440], eax
jl 0x100565d1
cmp dword [ebp - 0x140], 0
je 0x100565d1
mov dword [ebp - 0x6c4], 1
jmp 0x100565d8
and dword [ebp - 0x6c4], 0
mov eax, dword [ebp - 0x174]
cmp eax, dword [ebp - 0x6c4]
jle 0x100565f2
mov dword [ebp - 0x448], 1
jmp 0x100565f9
and dword [ebp - 0x448], 0
mov eax, dword [ebp - 0x448]
sub eax, dword [ebp - 0x58]
jne 0x10056616
cmp dword [ebp - 0x148], 0
jne 0x10056616
and dword [ebp - 0x8dc], 0
jmp 0x10056620
mov dword [ebp - 0x8dc], 1
cmp dword [ebp - 0x8dc], 0xffffffff
jne 0x10056635
mov dword [ebp - 0x450], 1
jmp 0x1005663c
and dword [ebp - 0x450], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x34c]
cmp eax, dword [ebp - 0x450]
jge 0x1005665d
mov dword [ebp - 0x6cc], 1
jmp 0x10056664
and dword [ebp - 0x6cc], 0
imul eax, dword [ebp - 0x6cc], 0x8194
cmp eax, 0xb022
jge 0x10056681
mov dword [ebp - 0x458], 1
jmp 0x10056688
and dword [ebp - 0x458], 0
cmp dword [ebp - 0x458], 0
je 0x1005669d
mov dword [ebp - 0x36c], 1
jmp 0x100566a4
and dword [ebp - 0x36c], 0
mov eax, dword [ebp - 0x58]
mov ecx, dword [ebp - 0x36c]
mov dword [ebp + eax*4 - 0x34c], ecx
mov eax, dword [ebp - 0x7fc]
mov dword [ebp - 0xe50], eax
mov eax, dword [ebp - 0xb50]
mov dword [ebp - 0xe58], eax
xor eax, eax
je 0x100566e5
cmp dword [ebp - 0x7fc], 0
je 0x100566e5
mov dword [ebp - 0x460], 1
jmp 0x100566ec
and dword [ebp - 0x460], 0
mov eax, dword [ebp - 0x460]
mov dword [ebp - 0xb58], eax
cmp dword [ebp - 0xb60], 0
je 0x10056706
jmp 0x100563ad
jmp 0x10056740
mov dword [ebp - 0x6d4], 0xa093ea4b
mov dword [ebp - 0x6d4], 9
mov eax, dword [ebp - 0x6d4]
mov dword [ebp - 0xb68], eax
mov byte [ebp - 0xc5], 0
movzx eax, byte [ebp - 0xc5]
test eax, eax
je 0x10056740
call dword [sym.imp.KERNEL32.dll_GetCommandLineA]
jmp 0x100563ad
jmp 0x10056372
jmp 0x1005633e
jmp 0x10056303
push 4
pop eax
shl eax, 0
mov dword [ebp + eax - 0x34c], 0xfffffffb
mov dword [ebp - 0xc4c], 0x4c46983c
mov dword [ebp - 0xc48], 0x4c46983c
mov dword [ebp - 0xc44], 0x4c46983c
mov dword [ebp - 0xc40], 0x4c46983c
mov dword [ebp - 0x78], 0
jmp 0x1005679d
mov eax, dword [ebp - 0x78]
inc eax
mov dword [ebp - 0x78], eax
cmp dword [ebp - 0x78], 4
jge 0x100567b3
mov eax, dword [ebp - 0x78]
mov dword [ebp + eax*4 - 0x948], 0x937d8e6e
jmp 0x10056796
mov dword [ebp - 0x78], 0
jmp 0x100567c3
mov eax, dword [ebp - 0x78]
inc eax
mov dword [ebp - 0x78], eax
cmp dword [ebp - 0x78], 2
jge 0x100567d9
mov eax, dword [ebp - 0x78]
mov dword [ebp + eax*4 - 0x270], 0xbec0351
jmp 0x100567bc
push 4
pop eax
shl eax, 1
imul eax, dword [ebp + eax - 0x948], 0xffff
cmp eax, 0xffffffff
jae 0x1005684f
push 4
pop eax
shl eax, 1
push 4
pop ecx
shl ecx, 1
mov ecx, dword [ebp + ecx - 0x948]
cmp dword [ebp + eax - 0x948], ecx
jge 0x10056814
mov dword [ebp - 0xb70], 1
jmp 0x1005681b
and dword [ebp - 0xb70], 0
push 4
pop eax
imul eax, eax, 3
mov eax, dword [ebp + eax - 0x948]
mov dword [ebp - 0xe60], eax
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x948]
mov dword [ebp - 0xe68], eax
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0x948], 0
jne 0x1005685f
push 0xfffffffffffffff6
pop eax
test eax, eax
jne 0x1005685f
and dword [ebp - 0x2f8], 0
jmp 0x10056869
mov dword [ebp - 0x2f8], 1
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x2f8]
mov dword [ebp + eax - 0x270], ecx
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x948]
imul eax, dword [ebp - 0x2f8]
test eax, eax
je 0x100568b0
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x270], 0
je 0x100568b0
mov dword [ebp - 0x468], 1
jmp 0x100568b7
and dword [ebp - 0x468], 0
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x948]
cmp eax, dword [ebp - 0x468]
jne 0x100568d9
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x270], 0
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x270], 0
je 0x1005690f
mov byte [ebp - 0x135], 0
movzx eax, byte [ebp - 0x135]
test eax, eax
je 0x1005690a
push 0
push 0
push 0x9e7
call dword [sym.imp.ADVAPI32.dll_CopySid]
jmp 0x10056c18
mov dword [ebp - 0xa0], 0xffffffff
mov dword [ebp - 0x80], 0xfff6
mov dword [ebp - 0x9bc], 0xfffffff8
mov eax, dword [ebp - 0xa0]
mov dword [ebp - 0xe70], eax
push 4
pop eax
imul eax, eax, 0
push 4
pop ecx
imul ecx, ecx, 0
mov ecx, dword [ebp + ecx - 0x270]
cmp dword [ebp + eax - 0x270], ecx
jle 0x1005695e
mov dword [ebp - 0x894], 1
jmp 0x10056965
and dword [ebp - 0x894], 0
mov eax, dword [ebp - 0xa0]
cmp dword [ebp - 0x894], eax
jne 0x1005697f
mov dword [ebp - 0x470], 1
jmp 0x10056986
and dword [ebp - 0x470], 0
mov eax, dword [ebp - 0x80]
cmp dword [ebp - 0x470], eax
jle 0x1005699d
mov dword [ebp - 0x6dc], 1
jmp 0x100569a4
and dword [ebp - 0x6dc], 0
mov eax, dword [ebp - 0x80]
add eax, dword [ebp - 0x6dc]
push 4
pop ecx
shl ecx, 0
add eax, dword [ebp + ecx - 0x948]
jne 0x100569ce
mov eax, 0xfe57b6a6
test eax, eax
jne 0x100569ce
and dword [ebp - 0x478], 0
jmp 0x100569d8
mov dword [ebp - 0x478], 1
cmp dword [ebp - 0x478], 3
jae 0x100569ed
mov dword [ebp - 0xb78], 1
jmp 0x100569f4
and dword [ebp - 0xb78], 0
mov eax, dword [ebp - 0xa0]
mov dword [ebp - 0xe78], eax
cmp dword [ebp - 0x80], 0x8594
jl 0x10056a15
mov dword [ebp - 0x804], 1
jmp 0x10056a1c
and dword [ebp - 0x804], 0
mov eax, dword [ebp - 0x804]
mov dword [ebp - 0xa0], eax
mov eax, dword [ebp - 0xa0]
imul eax, dword [ebp - 0x80]
push 4
pop ecx
imul ecx, ecx, 0
cmp dword [ebp + ecx - 0x270], eax
jl 0x10056a4d
mov dword [ebp - 0x480], 1
jmp 0x10056a54
and dword [ebp - 0x480], 0
mov eax, dword [ebp - 0x80]
cmp dword [ebp - 0x480], eax
jl 0x10056a6b
mov dword [ebp - 0x6e4], 1
jmp 0x10056a72
and dword [ebp - 0x6e4], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x6e4]
mov dword [ebp + eax - 0x270], ecx
mov dword [ebp - 0xa0], 3
jmp 0x10056a9e
mov eax, dword [ebp - 0xa0]
dec eax
mov dword [ebp - 0xa0], eax
cmp dword [ebp - 0xa0], 0
jl 0x10056c18
mov dword [ebp - 0x490], 2
mov dword [ebp - 0x20c], 0
jmp 0x10056ace
mov eax, dword [ebp - 0x20c]
inc eax
mov dword [ebp - 0x20c], eax
cmp dword [ebp - 0x20c], 1
jge 0x10056aea
mov eax, dword [ebp - 0x20c]
mov dword [ebp + eax*4 - 0x298], 0x1beba424
jmp 0x10056ac1
mov byte [ebp - 0xc7], 0
movzx eax, byte [ebp - 0xc7]
test eax, eax
je 0x10056b12
push 0
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_SetTextColor]
mov dword [ebp - 0x80], 0
jmp 0x10056b22
mov eax, dword [ebp - 0x80]
inc eax
mov dword [ebp - 0x80], eax
cmp dword [ebp - 0x80], 3
jg 0x10056c13
mov dword [ebp - 0x1b4], 0x5c66b319
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x298], 0xffffffff
jbe 0x10056b52
mov dword [ebp - 0x904], 1
jmp 0x10056b59
and dword [ebp - 0x904], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x298]
mov dword [ebp - 0xedc], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x298]
mov dword [ebp - 0xee4], eax
mov eax, dword [ebp - 0x1b4]
mov dword [ebp - 0xeec], eax
mov eax, dword [ebp - 0x1b4]
push 4
pop ecx
imul ecx, ecx, 0
add eax, dword [ebp + ecx - 0x948]
cmp eax, dword [ebp - 0x1b4]
jne 0x10056bb2
mov dword [ebp - 0x488], 1
jmp 0x10056bb9
and dword [ebp - 0x488], 0
mov eax, dword [ebp - 0x488]
mov dword [ebp - 0x490], eax
mov eax, dword [ebp - 0x904]
sub eax, dword [ebp - 0x490]
cmp eax, 0xf8c5
je 0x10056be4
mov dword [ebp - 0x6ec], 1
jmp 0x10056beb
and dword [ebp - 0x6ec], 0
mov eax, dword [ebp - 0x1b4]
add eax, dword [ebp - 0x6ec]
mov dword [ebp - 0x9bc], eax
push 4
pop eax
shl eax, 0
mov dword [ebp + eax - 0x270], 0x1947684a
jmp 0x10056b1b
jmp 0x10056a91
mov dword [ebp - 0x240], 0
jmp 0x10056c31
mov eax, dword [ebp - 0x240]
inc eax
mov dword [ebp - 0x240], eax
cmp dword [ebp - 0x240], 1
jge 0x10056c4d
mov eax, dword [ebp - 0x240]
mov dword [ebp + eax*4 - 0xf00], 0x624039b
jmp 0x10056c24
mov byte [ebp - 0x109], 0
movzx eax, byte [ebp - 0x109]
test eax, eax
je 0x10056c6b
push 1
push 0x36
push 0
call dword [sym.imp.KERNEL32.dll_WaitForSingleObjectEx]
mov byte [ebp - 0x139], 0
movzx eax, byte [ebp - 0x139]
test eax, eax
je 0x10056c87
push 0
push 0
call dword [sym.imp.ADVAPI32.dll_GetUserNameA]
mov dword [ebp - 0x38], 0
jmp 0x10056c97
mov eax, dword [ebp - 0x38]
inc eax
mov dword [ebp - 0x38], eax
cmp dword [ebp - 0x38], 4
jge 0x10056cad
mov eax, dword [ebp - 0x38]
mov dword [ebp + eax*4 - 0xbc8], 0xa8eac8b
jmp 0x10056c90
mov dword [ebp - 0x38], 0
jmp 0x10056cbd
mov eax, dword [ebp - 0x38]
inc eax
mov dword [ebp - 0x38], eax
cmp dword [ebp - 0x38], 4
jge 0x10056cd3
mov eax, dword [ebp - 0x38]
mov dword [ebp + eax*4 - 0x988], 0
jmp 0x10056cb6
mov dword [ebp - 0x158], 0x928c176b
mov dword [ebp - 0x4a8], 0x7d50f82b
mov dword [ebp - 0xcac], 0x6f9b6917
mov dword [ebp - 0xca8], 0x6f9b6917
mov dword [ebp - 0xca4], 0x6f9b6917
mov dword [ebp - 0xca0], 0x6f9b6917
mov dword [ebp - 0x158], 0
jmp 0x10056d28
mov eax, dword [ebp - 0x158]
inc eax
mov dword [ebp - 0x158], eax
cmp dword [ebp - 0x158], 0x15
jl 0x10056eb5
mov dword [ebp - 0x1bc], 0xfffffffa
mov dword [ebp - 0xac8], 0
mov dword [ebp - 0xa10], 1
cmp dword [ebp - 0x1bc], 0
je 0x10056da4
cmp dword [ebp - 0x1bc], 0
jne 0x10056d80
cmp dword [ebp - 0x4a8], 0
jne 0x10056d80
mov eax, 0xf6e2
test eax, eax
jne 0x10056d80
and dword [ebp - 0x498], 0
jmp 0x10056d8a
mov dword [ebp - 0x498], 1
mov eax, dword [ebp - 0x1bc]
cmp dword [ebp - 0x498], eax
jle 0x10056da4
mov dword [ebp - 0x80c], 1
jmp 0x10056dab
and dword [ebp - 0x80c], 0
cmp dword [ebp - 0x80c], 4
jb 0x10056dc0
mov dword [ebp - 0x4a0], 1
jmp 0x10056dc7
and dword [ebp - 0x4a0], 0
mov eax, dword [ebp - 0xac8]
cmp dword [ebp - 0x4a0], eax
jle 0x10056de1
mov dword [ebp - 0x6f4], 1
jmp 0x10056de8
and dword [ebp - 0x6f4], 0
mov eax, dword [ebp - 0x158]
mov ecx, dword [ebp - 0x6f4]
sub ecx, dword [ebp - 0x4a8]
add eax, ecx
cmp eax, dword [ebp - 0x158]
jg 0x10056e10
mov dword [ebp - 0x35c], 1
jmp 0x10056e17
and dword [ebp - 0x35c], 0
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x35c]
mov dword [ebp + eax - 0xcac], ecx
cmp dword [ebp - 0x35c], 0
je 0x10056e8e
mov dword [ebp - 0x9f0], 0xd76270e7
cmp dword [ebp - 0xa10], 0x3d3b
jne 0x10056e55
mov dword [ebp - 0x89c], 1
jmp 0x10056e5c
and dword [ebp - 0x89c], 0
mov eax, dword [ebp - 0x89c]
mov dword [ebp - 0x9f0], eax
mov byte [ebp - 0xcd], 0
movzx eax, byte [ebp - 0xcd]
test eax, eax
je 0x10056e8c
push 0x246f
push 0x9ae
push 0
call dword [sym.imp.USER32.dll_OffsetRect]
jmp 0x10056eb0
mov dword [ebp - 0x4b0], 1
cmp dword [ebp - 0x1bc], 0
je 0x10056ea3
jmp 0x10056eb5
mov eax, dword [ebp - 0x4b0]
inc eax
mov dword [ebp - 0x4b0], eax
jmp 0x10056d1b
mov dword [ebp - 0x38], 0
jmp 0x10056ec5
mov eax, dword [ebp - 0x38]
inc eax
mov dword [ebp - 0x38], eax
cmp dword [ebp - 0x38], 2
jge 0x10056edb
mov eax, dword [ebp - 0x38]
mov dword [ebp + eax*4 - 0xdc4], 0x8e85a7b0
jmp 0x10056ebe
push 4
pop eax
imul eax, eax, 3
mov dword [ebp + eax - 0x988], 3
jmp 0x10056f09
push 4
pop eax
imul eax, eax, 3
mov eax, dword [ebp + eax - 0x988]
dec eax
push 4
pop ecx
imul ecx, ecx, 3
mov dword [ebp + ecx - 0x988], eax
push 4
pop eax
imul eax, eax, 3
cmp dword [ebp + eax - 0x988], 0
jl 0x100578e7
mov dword [ebp - 0x108], 0xfffffff6
mov dword [ebp - 0x8e4], 0xffffffff
mov dword [ebp - 0x214], 0xf18ee85e
mov dword [ebp - 0xb4], 0x51acae7b
mov dword [ebp - 0x2a0], 0xb903
mov dword [ebp - 0x150], 1
mov dword [ebp - 0x30], 0
jmp 0x10056f69
mov eax, dword [ebp - 0x30]
inc eax
mov dword [ebp - 0x30], eax
cmp dword [ebp - 0x30], 3
jge 0x10056f7f
mov eax, dword [ebp - 0x30]
mov dword [ebp + eax*4 - 0x27c], 0xf0ed
jmp 0x10056f62
mov dword [ebp - 0x30], 0
jmp 0x10056f8f
mov eax, dword [ebp - 0x30]
inc eax
mov dword [ebp - 0x30], eax
cmp dword [ebp - 0x30], 2
jge 0x10056fa5
mov eax, dword [ebp - 0x30]
mov dword [ebp + eax*4 - 0xb14], 0xffffffff
jmp 0x10056f88
mov dword [ebp - 0x30], 0
jmp 0x10056fb5
mov eax, dword [ebp - 0x30]
inc eax
mov dword [ebp - 0x30], eax
cmp dword [ebp - 0x30], 3
jge 0x10056fcb
mov eax, dword [ebp - 0x30]
mov dword [ebp + eax*4 - 0xfa0], 0xffffffff
jmp 0x10056fae
push 4
pop eax
imul eax, eax, 0
push 4
pop ecx
shl ecx, 1
mov ecx, dword [ebp + ecx - 0x27c]
cmp dword [ebp + eax - 0x27c], ecx
jge 0x10057221
mov eax, dword [ebp - 0x214]
mov dword [ebp - 0xb4], eax
mov eax, dword [ebp - 0xb4]
sub eax, dword [ebp - 0x214]
jne 0x1005701d
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x27c], 0
jne 0x1005701d
and dword [ebp - 0x6fc], 0
jmp 0x10057027
mov dword [ebp - 0x6fc], 1
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x27c]
cmp dword [ebp - 0x6fc], eax
jge 0x10057048
mov dword [ebp - 0x4b8], 1
jmp 0x1005704f
and dword [ebp - 0x4b8], 0
imul eax, dword [ebp - 0x4b8], 0x5bed
test eax, eax
jne 0x1005706d
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x27c], 0
je 0x10057089
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x27c], 0
je 0x10057089
mov dword [ebp - 0xa94], 1
jmp 0x10057090
and dword [ebp - 0xa94], 0
mov eax, dword [ebp - 0x2a0]
mov dword [ebp - 0xf08], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x2a0]
sub ecx, dword [ebp + eax - 0x27c]
mov dword [ebp - 0x814], ecx
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x814]
mov dword [ebp + eax - 0xb14], ecx
mov eax, dword [ebp - 0x214]
cmp dword [ebp - 0x814], eax
jg 0x100570e2
mov dword [ebp - 0x4c0], 1
jmp 0x100570e9
and dword [ebp - 0x4c0], 0
cmp dword [ebp - 0x4c0], 0xe402095d
jb 0x10057101
mov dword [ebp - 0x704], 1
jmp 0x10057108
and dword [ebp - 0x704], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x27c]
cmp dword [ebp - 0x704], eax
jle 0x10057129
mov dword [ebp - 0x4c8], 1
jmp 0x10057130
and dword [ebp - 0x4c8], 0
cmp dword [ebp - 0x4c8], 0x78c0
jne 0x10057148
mov dword [ebp - 0x4d0], 1
jmp 0x1005714f
and dword [ebp - 0x4d0], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x27c]
mov dword [ebp - 0x8e4], eax
mov eax, dword [ebp - 0x8e4]
cmp eax, dword [ebp - 0x4d0]
jl 0x1005717c
mov dword [ebp - 0x70c], 1
jmp 0x10057183
and dword [ebp - 0x70c], 0
mov eax, dword [ebp - 0x2a0]
cmp dword [ebp - 0x70c], eax
jne 0x1005719d
mov dword [ebp - 0x4d8], 1
jmp 0x100571a4
and dword [ebp - 0x4d8], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x27c]
cmp dword [ebp - 0x4d8], eax
jg 0x100571c5
mov dword [ebp - 0x81c], 1
jmp 0x100571cc
and dword [ebp - 0x81c], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x27c]
cmp dword [ebp - 0x81c], eax
jge 0x100571ed
mov dword [ebp - 0x300], 1
jmp 0x100571f4
and dword [ebp - 0x300], 0
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x300]
mov dword [ebp + eax - 0xfa0], ecx
mov eax, dword [ebp - 0x214]
cmp dword [ebp - 0x300], eax
jl 0x10057221
mov dword [ebp - 0x4e0], 1
jmp 0x10057228
and dword [ebp - 0x4e0], 0
mov eax, dword [ebp - 0x4e0]
mov dword [ebp - 0x150], eax
mov eax, dword [ebp - 0x150]
mov dword [ebp - 0xf10], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x27c], 0x6f4e
jle 0x1005725f
mov dword [ebp - 0x714], 1
jmp 0x10057266
and dword [ebp - 0x714], 0
mov eax, dword [ebp - 0x714]
add eax, 0x50e1
push 4
pop ecx
imul ecx, ecx, 0
cmp eax, dword [ebp + ecx - 0x27c]
jle 0x1005730a
mov byte [ebp - 0x132], 0
movzx eax, byte [ebp - 0x132]
test eax, eax
je 0x100572a6
push 0
push 0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_GetProcessTimes]
mov dword [ebp - 0xb4], 1
jmp 0x100572bf
mov eax, dword [ebp - 0xb4]
dec eax
mov dword [ebp - 0xb4], eax
cmp dword [ebp - 0xb4], 0
jl 0x10057308
mov dword [ebp - 0x150], 2
jmp 0x100572e1
mov eax, dword [ebp - 0x150]
dec eax
mov dword [ebp - 0x150], eax
cmp dword [ebp - 0x150], 0
jl 0x10057306
mov eax, dword [ebp - 0xb4]
mov ecx, dword [ebp - 0xb4]
mov eax, dword [ebp + eax*4 - 0xb14]
mov dword [ebp + ecx*4 - 0xb14], eax
jmp 0x100572d4
jmp 0x100572b2
jmp 0x10057324
mov byte [ebp - 0xcf], 0
movzx eax, byte [ebp - 0xcf]
test eax, eax
je 0x10057324
push 0
call dword [sym.imp.KERNEL32.dll_DeleteCriticalSection]
mov dword [ebp - 0x72c], 0x9fe57f6c
mov dword [ebp - 0x2b0], 0xfffffffd
mov dword [ebp - 0x500], 0xffffffff
mov dword [ebp - 0xf18], 8
mov dword [ebp - 0x9d4], 0x801fc3ee
mov dword [ebp - 0xf20], 0xbef7d651
mov dword [ebp - 0xf28], 0xffffffff
mov dword [ebp - 0x4e8], 0xffffffff
mov dword [ebp - 0xf38], 1
mov dword [ebp - 0xf34], 1
mov dword [ebp - 0xf30], 1
mov dword [ebp - 0xf2c], 1
mov dword [ebp - 0x2a8], 0xf39c
mov dword [ebp - 0x330], 0xda8d
mov dword [ebp - 0xf3c], 0xffffffff
mov dword [ebp - 0xb04], 5
mov dword [ebp - 0x9cc], 0xfffffffd
mov dword [ebp - 0xf44], 1
mov dword [ebp - 0x4f0], 0xa93f0451
mov dword [ebp - 0xa9c], 0xb9d37639
mov dword [ebp - 0x24], 0
jmp 0x100573fc
mov eax, dword [ebp - 0x24]
inc eax
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 2
jge 0x10057412
mov eax, dword [ebp - 0x24]
mov dword [ebp + eax*4 - 0xbf4], 0xffffffff
jmp 0x100573f5
mov dword [ebp - 0x24], 0
jmp 0x10057422
mov eax, dword [ebp - 0x24]
inc eax
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 4
jge 0x10057438
mov eax, dword [ebp - 0x24]
mov dword [ebp + eax*4 - 0xff0], 5
jmp 0x1005741b
mov dword [ebp - 0x24], 0
jmp 0x10057448
mov eax, dword [ebp - 0x24]
inc eax
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 3
jge 0x1005745e
mov eax, dword [ebp - 0x24]
mov dword [ebp + eax*4 - 0xe88], 0xfffffffe
jmp 0x10057441
mov eax, dword [ebp - 0x4e8]
dec eax
mov dword [ebp - 0x4e8], eax
mov eax, dword [ebp - 0x2a8]
dec eax
mov dword [ebp - 0x2a8], eax
mov eax, dword [ebp - 0x330]
mov dword [ebp - 0x8a4], eax
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x8a4]
mov dword [ebp + eax - 0xff0], ecx
mov eax, dword [ebp - 0x2a8]
mov dword [ebp - 0x9c4], eax
mov eax, dword [ebp - 0x8a4]
mov dword [ebp - 0xb44], eax
mov eax, dword [ebp - 0x330]
dec eax
mov dword [ebp - 0x330], eax
mov eax, dword [ebp - 0x9c4]
cmp eax, dword [ebp - 0xb44]
jle 0x100574d6
mov dword [ebp - 0x508], 1
jmp 0x100574dd
and dword [ebp - 0x508], 0
mov eax, dword [ebp - 0x4f0]
inc eax
mov dword [ebp - 0x4f0], eax
mov eax, dword [ebp - 0x9cc]
mov dword [ebp - 0xf4c], eax
cmp dword [ebp - 0xa9c], 0
je 0x10057514
cmp dword [ebp - 0x9d4], 0
je 0x10057514
mov dword [ebp - 0x71c], 1
jmp 0x1005751b
and dword [ebp - 0x71c], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x71c]
sub ecx, dword [ebp + eax - 0xbf4]
cmp dword [ebp - 0x2b0], 0xc114
jge 0x10057546
mov dword [ebp - 0x4f8], 1
jmp 0x1005754d
and dword [ebp - 0x4f8], 0
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0xe88]
cmp dword [ebp - 0x4f8], eax
je 0x1005756d
mov dword [ebp - 0x824], 1
jmp 0x10057574
and dword [ebp - 0x824], 0
mov eax, dword [ebp - 0x824]
mov dword [ebp - 0x500], eax
cmp dword [ebp - 0x500], 0x61e33ecd
jg 0x10057598
mov dword [ebp - 0x724], 1
jmp 0x1005759f
and dword [ebp - 0x724], 0
mov eax, dword [ebp - 0x2b0]
push 4
pop ecx
shl ecx, 0
imul eax, dword [ebp + ecx - 0xbf4]
mov ecx, dword [ebp - 0x2b0]
add ecx, dword [ebp - 0x724]
sub eax, ecx
cmp dword [ebp - 0x508], eax
jg 0x100575d5
mov dword [ebp - 0x924], 1
jmp 0x100575dc
and dword [ebp - 0x924], 0
mov eax, dword [ebp - 0xb04]
cmp dword [ebp - 0x924], eax
jg 0x100575f6
mov dword [ebp - 0x510], 1
jmp 0x100575fd
and dword [ebp - 0x510], 0
push 4
pop eax
shl eax, 1
mov ecx, dword [ebp - 0x510]
mov dword [ebp + eax - 0xe88], ecx
mov dword [ebp - 0x350], 6
mov dword [ebp - 0x1c4], 0
jmp 0x10057632
mov eax, dword [ebp - 0x1c4]
inc eax
mov dword [ebp - 0x1c4], eax
cmp dword [ebp - 0x1c4], 2
jge 0x1005764e
mov eax, dword [ebp - 0x1c4]
mov dword [ebp + eax*4 - 0xdb8], 0xfffffff8
jmp 0x10057625
mov dword [ebp - 0x108], 3
jmp 0x10057667
mov eax, dword [ebp - 0x108]
dec eax
mov dword [ebp - 0x108], eax
cmp dword [ebp - 0x108], 0
jl 0x100578c6
mov dword [ebp - 0xf54], 0xffffffff
mov dword [ebp - 0xf5c], 0xffffffff
mov dword [ebp - 0xf64], 0x56e74e80
mov dword [ebp - 0xf6c], 0xfffffffc
mov dword [ebp - 0x308], 0x7ef2
mov dword [ebp - 0x258], 0
jmp 0x100576bf
mov eax, dword [ebp - 0x258]
inc eax
mov dword [ebp - 0x258], eax
cmp dword [ebp - 0x258], 1
jge 0x100576db
mov eax, dword [ebp - 0x258]
mov dword [ebp + eax*4 - 0xf74], 0
jmp 0x100576b2
mov byte [ebp - 0x119], 0
movzx eax, byte [ebp - 0x119]
test eax, eax
je 0x10057716
push 0x2421
push 0
push 0
push 0x18e1
push 0x20a3
push 0
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_GetDIBits]
push 4
pop eax
imul eax, eax, 3
mov eax, dword [ebp + eax - 0x988]
mov eax, dword [ebp + eax*4 - 0xbc8]
mov dword [ebp - 0x72c], eax
mov eax, dword [ebp - 0x72c]
mov dword [ebp - 0x518], eax
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x518]
mov dword [ebp + eax - 0xdb8], ecx
mov eax, dword [ebp - 0x308]
mov ecx, dword [ebp - 0x518]
mov edx, dword [ebp - 0x308]
inc edx
mov dword [ebp - 0x308], edx
cmp eax, ecx
jge 0x10057803
mov eax, dword [ebp - 0x108]
mov ecx, dword [ebp - 0x350]
push 4
pop edx
imul edx, edx, 3
mov edx, dword [ebp + edx - 0x988]
add ecx, dword [ebp + edx*4 - 0xbc8]
cmp dword [ebp + eax*4 - 0xbc8], ecx
je 0x100577a5
mov dword [ebp - 0x82c], 1
jmp 0x100577ac
and dword [ebp - 0x82c], 0
cmp dword [ebp - 0x82c], 0xfffa
jae 0x100577c4
mov dword [ebp - 0x520], 1
jmp 0x100577cb
and dword [ebp - 0x520], 0
mov eax, dword [ebp - 0x520]
sub eax, 0x694a2199
neg eax
mov dword [ebp - 0x734], eax
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x734]
mov dword [ebp + eax - 0xc4c], ecx
cmp dword [ebp - 0x734], 0
je 0x10057803
and dword [ebp - 0x528], 0
jmp 0x1005780d
mov dword [ebp - 0x528], 1
mov eax, dword [ebp - 0x108]
cmp dword [ebp - 0x528], eax
jne 0x10057827
mov dword [ebp - 0x8ac], 1
jmp 0x1005782e
and dword [ebp - 0x8ac], 0
mov eax, dword [ebp - 0x350]
cmp dword [ebp - 0x8ac], eax
jle 0x10057848
mov dword [ebp - 0x530], 1
jmp 0x1005784f
and dword [ebp - 0x530], 0
cmp dword [ebp - 0x530], 0x56bf5ee8
jle 0x10057867
mov dword [ebp - 0x73c], 1
jmp 0x1005786e
and dword [ebp - 0x73c], 0
mov eax, dword [ebp - 0x108]
mov eax, dword [ebp + eax*4 - 0xbc8]
cmp eax, dword [ebp - 0x73c]
jge 0x1005788f
mov dword [ebp - 0x2b8], 1
jmp 0x10057896
and dword [ebp - 0x2b8], 0
push 4
pop eax
imul eax, eax, 3
mov eax, dword [ebp + eax - 0x988]
mov ecx, dword [ebp - 0x2b8]
mov dword [ebp + eax*4 - 0xbc8], ecx
mov eax, dword [ebp - 0x2b8]
sub eax, 0x34219488
mov dword [ebp - 0x350], eax
jmp 0x1005765a
push 4
pop eax
imul eax, eax, 3
mov eax, dword [ebp + eax - 0x988]
cmp dword [ebp + eax*4 - 0xbc8], 0
je 0x100578e2
jmp 0x10056eee
jmp 0x10056eee
push 4
pop eax
imul eax, eax, 3
push 4
pop ecx
shl ecx, 0
mov eax, dword [ebp + eax - 0x988]
mov dword [ebp + ecx - 0xdc4], eax
mov dword [ebp - 0x9dc], 0x13638ecf
mov dword [ebp - 0x1cc], 0
jmp 0x10057924
mov eax, dword [ebp - 0x1cc]
inc eax
mov dword [ebp - 0x1cc], eax
cmp dword [ebp - 0x1cc], 3
jge 0x10057940
mov eax, dword [ebp - 0x1cc]
mov dword [ebp + eax*4 - 0xfb8], 0xfffffffa
jmp 0x10057917
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0xfb8]
mov dword [ebp - 0x9dc], eax
mov byte [ebp - 0xd1], 0
movzx eax, byte [ebp - 0xd1]
test eax, eax
je 0x10057981
push 0x20e2
push 0x504
push 0x5a1
push 0x23c5
push 0
call dword [sym.imp.KERNEL32.dll_MapViewOfFile]
mov dword [ebp - 0x2c0], 0xffff
mov dword [ebp - 0x338], 0x29c1464f
mov dword [ebp - 0x754], 0x2b483718
mov dword [ebp - 0xf7c], 0xacf25792
mov dword [ebp - 0x83c], 0xffffffff
mov dword [ebp - 0x8ec], 0xffffffff
mov dword [ebp - 0x548], 0
mov dword [ebp - 0x9a8], 1
mov dword [ebp - 0x9a4], 1
mov dword [ebp - 0x9a0], 1
mov dword [ebp - 0x99c], 1
mov dword [ebp - 0x21c], 1
mov dword [ebp - 0x2c8], 0
mov dword [ebp - 0x2d0], 0x88c5540f
mov dword [ebp - 0xf84], 0
mov dword [ebp - 0x8b4], 0xd4644688
mov dword [ebp - 0x310], 0
mov dword [ebp - 0x558], 0
mov dword [ebp - 0x9e4], 0x9bd9
mov dword [ebp - 0x9ec], 1
mov dword [ebp - 0x2c0], 0xfffd
mov eax, dword [ebp - 0x2c0]
mov dword [ebp - 0xf8c], eax
mov eax, dword [ebp - 0x21c]
mov dword [ebp - 0xf94], eax
push 0xfffffffffffffff8
pop eax
cmp eax, 0x446ed9a8
jne 0x10057a81
mov dword [ebp - 0x538], 1
jmp 0x10057a88
and dword [ebp - 0x538], 0
cmp dword [ebp - 0x538], 0x66969e96
jg 0x10057aa0
mov dword [ebp - 0x834], 1
jmp 0x10057aa7
and dword [ebp - 0x834], 0
cmp dword [ebp - 0x834], 0xffff
jae 0x10057abf
mov dword [ebp - 0x540], 1
jmp 0x10057ac6
and dword [ebp - 0x540], 0
mov eax, dword [ebp - 0x540]
mov dword [ebp - 0x338], eax
mov eax, dword [ebp - 0x338]
push 4
pop ecx
imul ecx, ecx, 3
sub eax, dword [ebp + ecx - 0x9a8]
cmp eax, dword [ebp - 0x21c]
je 0x10057af9
mov dword [ebp - 0x744], 1
jmp 0x10057b00
and dword [ebp - 0x744], 0
imul eax, dword [ebp - 0x744], 0x8998
imul eax, dword [ebp - 0x8ec]
mov dword [ebp - 0x548], eax
mov eax, dword [ebp - 0x548]
sub eax, dword [ebp - 0x21c]
cmp eax, dword [ebp - 0x8ec]
jle 0x10057b37
mov dword [ebp - 0xaa4], 1
jmp 0x10057b3e
and dword [ebp - 0xaa4], 0
mov eax, dword [ebp - 0x2c8]
mov dword [ebp - 0xcc8], eax
mov eax, dword [ebp - 0x558]
mov dword [ebp - 0xf04], eax
mov eax, dword [ebp - 0x9e4]
mov dword [ebp - 0xcd0], eax
mov eax, dword [ebp - 0x2d0]
mov dword [ebp - 0xe44], eax
cmp dword [ebp - 0x2c0], 0
je 0x10057b88
or eax, 0xffffffff
je 0x10057b88
mov dword [ebp - 0x550], 1
jmp 0x10057b8f
and dword [ebp - 0x550], 0
mov eax, 0xb46f9f11
sub eax, dword [ebp - 0x550]
inc eax
cmp dword [ebp - 0x21c], eax
jg 0x10057baf
mov dword [ebp - 0x74c], 1
jmp 0x10057bb6
and dword [ebp - 0x74c], 0
mov eax, dword [ebp - 0x74c]
sub eax, dword [ebp - 0x558]
mov dword [ebp - 0x83c], eax
mov eax, dword [ebp - 0x8b4]
cmp dword [ebp - 0x83c], eax
jg 0x10057be2
mov dword [ebp - 0xb6c], 1
jmp 0x10057be9
and dword [ebp - 0xb6c], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x9a8]
mov dword [ebp - 0xcd8], eax
cmp dword [ebp - 0x2c8], 0
je 0x10057c11
mov dword [ebp - 0x560], 1
jmp 0x10057c18
and dword [ebp - 0x560], 0
mov eax, dword [ebp - 0x310]
dec eax
mov dword [ebp - 0x310], eax
mov eax, dword [ebp - 0x2d0]
add eax, dword [ebp - 0x560]
mov dword [ebp - 0x754], eax
mov eax, dword [ebp - 0x754]
inc eax
cmp dword [ebp - 0x310], eax
jle 0x10057c52
mov dword [ebp - 0x568], 1
jmp 0x10057c59
and dword [ebp - 0x568], 0
mov eax, dword [ebp - 0x568]
mov dword [ebp - 0x2c8], eax
mov eax, dword [ebp - 0x338]
add eax, dword [ebp - 0x8b4]
cmp eax, dword [ebp - 0x2d0]
jge 0x10057c85
mov dword [ebp - 0x570], 1
jmp 0x10057c8c
and dword [ebp - 0x570], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x9a8]
cmp dword [ebp - 0x570], eax
jge 0x10057cad
mov dword [ebp - 0x75c], 1
jmp 0x10057cb4
and dword [ebp - 0x75c], 0
mov eax, dword [ebp - 0x9ec]
cmp dword [ebp - 0x75c], eax
jg 0x10057cce
mov dword [ebp - 0x578], 1
jmp 0x10057cd5
and dword [ebp - 0x578], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x9a8]
add eax, dword [ebp - 0x578]
push 4
pop ecx
shl ecx, 0
mov dword [ebp + ecx - 0x9a8], eax
mov dword [ebp - 0x44], 0x2b1c
mov dword [ebp - 0xbc], 0x9d81479b
mov dword [ebp - 0x110], 0xfffffff7
mov dword [ebp - 0x1d4], 0
jmp 0x10057d29
mov eax, dword [ebp - 0x1d4]
inc eax
mov dword [ebp - 0x1d4], eax
cmp dword [ebp - 0x1d4], 1
jge 0x10057d45
mov eax, dword [ebp - 0x1d4]
mov dword [ebp + eax*4 - 0x118], 0x145c1747
jmp 0x10057d1c
mov byte [ebp - 0x134], 0
movzx eax, byte [ebp - 0x134]
test eax, eax
je 0x10057d62
push 0xf67
call dword [sym.imp.KERNEL32.dll_TlsGetValue]
cmp dword [ebp - 0x44], 0x8f69f7fd
jne 0x10057d77
mov dword [ebp - 0x90c], 1
jmp 0x10057d7e
and dword [ebp - 0x90c], 0
cmp dword [ebp - 0x44], 0x89a5
jne 0x10057d93
mov dword [ebp - 0x844], 1
jmp 0x10057d9a
and dword [ebp - 0x844], 0
mov eax, dword [ebp - 0x844]
imul eax, dword [ebp - 0xbc]
mov dword [ebp - 0x580], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x580]
mov dword [ebp + eax - 0x118], ecx
mov eax, dword [ebp - 0x44]
cmp dword [ebp - 0x580], eax
jg 0x10057dd7
mov dword [ebp - 0x764], 1
jmp 0x10057dde
and dword [ebp - 0x764], 0
mov eax, dword [ebp - 0x44]
cmp dword [ebp - 0x764], eax
jne 0x10057df5
mov dword [ebp - 0xaac], 1
jmp 0x10057dfc
and dword [ebp - 0xaac], 0
mov eax, dword [ebp - 0xbc]
mov dword [ebp - 0xf90], eax
cmp dword [ebp - 0x44], 0x829ed890
jbe 0x10057e1d
mov dword [ebp - 0x9f4], 1
jmp 0x10057e24
and dword [ebp - 0x9f4], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x118]
mov dword [ebp - 0xce0], eax
mov eax, dword [ebp - 0x44]
mov dword [ebp - 0xe4c], eax
cmp dword [ebp - 0xbc], 0
je 0x10057e55
mov dword [ebp - 0x588], 1
jmp 0x10057e5c
and dword [ebp - 0x588], 0
mov eax, dword [ebp - 0x588]
sub eax, dword [ebp - 0xbc]
mov dword [ebp - 0x110], eax
mov eax, dword [ebp - 0x110]
cmp dword [ebp - 0x90c], eax
je 0x10057e88
mov dword [ebp - 0x590], 1
jmp 0x10057e8f
and dword [ebp - 0x590], 0
mov eax, dword [ebp - 0x44]
cmp eax, dword [ebp - 0x590]
jne 0x10057eb9
push 4
pop eax
imul eax, eax, 0
push 4
pop ecx
imul ecx, ecx, 0
mov eax, dword [ebp + eax - 0x118]
mov dword [ebp + ecx - 0x118], eax
jmp 0x10057f98
mov dword [ebp - 0x44], 0
jmp 0x10057ec9
mov eax, dword [ebp - 0x44]
inc eax
mov dword [ebp - 0x44], eax
cmp dword [ebp - 0x44], 0
jg 0x10057f98
mov dword [ebp - 0x248], 0
jmp 0x10057eec
mov eax, dword [ebp - 0x248]
inc eax
mov dword [ebp - 0x248], eax
cmp dword [ebp - 0x248], 1
jge 0x10057f08
mov eax, dword [ebp - 0x248]
mov dword [ebp + eax*4 - 0x9fc], 8
jmp 0x10057edf
mov dword [ebp - 0xbc], 0
jmp 0x10057f21
mov eax, dword [ebp - 0xbc]
inc eax
mov dword [ebp - 0xbc], eax
cmp dword [ebp - 0xbc], 0
jg 0x10057f93
mov dword [ebp - 0x110], 0
jmp 0x10057f43
mov eax, dword [ebp - 0x110]
inc eax
mov dword [ebp - 0x110], eax
cmp dword [ebp - 0x110], 0
jg 0x10057f82
mov eax, dword [ebp - 0x44]
mov eax, dword [ebp + eax*4 - 0x118]
mov dword [ebp - 0xb0c], eax
mov eax, dword [ebp - 0x110]
mov ecx, dword [ebp - 0xb0c]
mov dword [ebp + eax*4 - 0x118], ecx
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0x9fc], 1
jmp 0x10057f36
mov eax, dword [ebp - 0x44]
cmp dword [ebp + eax*4 - 0x118], 0
je 0x10057f91
jmp 0x10057f14
jmp 0x10057f14
jmp 0x10057ec2
mov dword [ebp - 0x98], 5
mov dword [ebp - 0x2c], 0
jmp 0x10057fb2
mov eax, dword [ebp - 0x2c]
inc eax
mov dword [ebp - 0x2c], eax
cmp dword [ebp - 0x2c], 1
jge 0x10057fc5
mov eax, dword [ebp - 0x2c]
mov dword [ebp + eax*4 - 0x14], 8
jmp 0x10057fab
mov dword [ebp - 0x2c], 0
jmp 0x10057fd5
mov eax, dword [ebp - 0x2c]
inc eax
mov dword [ebp - 0x2c], eax
cmp dword [ebp - 0x2c], 1
jge 0x10057feb
mov eax, dword [ebp - 0x2c]
mov dword [ebp + eax*4 - 0x224], 0x82169286
jmp 0x10057fce
mov dword [ebp - 0x2c], 0
jmp 0x10057ffb
mov eax, dword [ebp - 0x2c]
inc eax
mov dword [ebp - 0x2c], eax
cmp dword [ebp - 0x2c], 2
jge 0x10058011
mov eax, dword [ebp - 0x2c]
mov dword [ebp + eax*4 - 0xdd0], 0xfffffffe
jmp 0x10057ff4
mov dword [ebp - 0x98], 0
jmp 0x1005802a
mov eax, dword [ebp - 0x98]
inc eax
mov dword [ebp - 0x98], eax
cmp dword [ebp - 0x98], 0
jg 0x100580ef
mov dword [ebp - 0x1dc], 0
jmp 0x10058050
mov eax, dword [ebp - 0x1dc]
inc eax
mov dword [ebp - 0x1dc], eax
cmp dword [ebp - 0x1dc], 3
jge 0x1005806c
mov eax, dword [ebp - 0x1dc]
mov dword [ebp + eax*4 - 0xbec], 0x951fe77d
jmp 0x10058043
push 4
pop eax
shl eax, 0
mov dword [ebp + eax - 0xbec], 0
jmp 0x1005809a
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0xbec]
inc eax
push 4
pop ecx
shl ecx, 0
mov dword [ebp + ecx - 0xbec], eax
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0xbec], 0
jg 0x100580ea
mov byte [ebp - 0xd3], 0
movzx eax, byte [ebp - 0xd3]
test eax, eax
je 0x100580cb
push 0x2ba
push 0
push 0
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
mov byte [ebp - 0x121], 0
movzx eax, byte [ebp - 0x121]
test eax, eax
je 0x100580e8
push 0x2115
call dword [sym.imp.USER32.dll_GetSystemMetrics]
jmp 0x1005807f
jmp 0x1005801d
mov dword [ebp - 0x98], 0xffffffef
jmp 0x10058108
mov eax, dword [ebp - 0x98]
inc eax
mov dword [ebp - 0x98], eax
cmp dword [ebp - 0x98], 0x12
jne 0x100583e4
mov dword [ebp - 4], 0xfffffff6
mov dword [ebp - 0x5a0], 9
mov dword [ebp - 4], 0
jmp 0x10058136
mov eax, dword [ebp - 4]
dec eax
mov dword [ebp - 4], eax
cmp dword [ebp - 4], 0
jl 0x100583df
mov dword [ebp - 0xa14], 9
mov eax, dword [ebp - 4]
cmp dword [ebp + eax*4 - 0x14], 0
je 0x10058159
jmp 0x100583df
cmp dword [ebp - 4], 0
jne 0x10058364
cmp dword [ebp - 0x98], 1
je 0x10058178
mov dword [ebp - 0xab4], 1
jmp 0x1005817f
and dword [ebp - 0xab4], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x14]
mov dword [ebp - 0xce8], eax
cmp dword [ebp - 0x5a0], 0x339b8842
je 0x100581a7
mov dword [ebp - 0x76c], 1
jmp 0x100581ae
and dword [ebp - 0x76c], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x14]
cmp dword [ebp - 0x76c], eax
je 0x100581cc
mov dword [ebp - 0x598], 1
jmp 0x100581d3
and dword [ebp - 0x598], 0
mov eax, dword [ebp - 4]
imul eax, dword [ebp - 0x598]
push 4
pop ecx
imul ecx, ecx, 0
cmp eax, dword [ebp + ecx - 0x224]
jg 0x10058205
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0xdd0], 0
jne 0x10058205
and dword [ebp - 0x84c], 0
jmp 0x1005820f
mov dword [ebp - 0x84c], 1
mov eax, dword [ebp - 4]
mov eax, dword [ebp + eax*4 - 0x14]
cmp dword [ebp - 0x84c], eax
jne 0x1005822a
mov dword [ebp - 0x774], 1
jmp 0x10058231
and dword [ebp - 0x774], 0
mov eax, dword [ebp - 0x5a0]
cmp dword [ebp - 0x774], eax
jge 0x1005824b
mov dword [ebp - 0x5a8], 1
jmp 0x10058252
and dword [ebp - 0x5a8], 0
mov eax, dword [ebp - 4]
cmp eax, dword [ebp - 0x5a8]
je 0x10058269
mov dword [ebp - 0xa04], 1
jmp 0x10058270
and dword [ebp - 0xa04], 0
mov eax, dword [ebp - 4]
mov eax, dword [ebp + eax*4 - 0x14]
mov dword [ebp - 0xf0c], eax
mov eax, dword [ebp - 4]
cmp dword [ebp + eax*4 - 0x14], 0
jle 0x10058293
mov dword [ebp - 0x8bc], 1
jmp 0x1005829a
and dword [ebp - 0x8bc], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x14]
imul eax, dword [ebp - 0x8bc]
cmp eax, 0xfffffffc
je 0x100582bc
mov dword [ebp - 0x5b0], 1
jmp 0x100582c3
and dword [ebp - 0x5b0], 0
mov eax, dword [ebp - 0x5b0]
sub eax, 0xe879
mov ecx, dword [ebp - 4]
sub eax, dword [ebp + ecx*4 - 0x14]
je 0x100582f3
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x224], 0
je 0x100582f3
and dword [ebp - 0x77c], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x224]
cmp dword [ebp - 0x77c], eax
jle 0x1005831b
mov dword [ebp - 0x854], 1
mov eax, dword [ebp - 4]
mov eax, dword [ebp + eax*4 - 0x14]
cmp dword [ebp - 0x854], eax
jge 0x10058389
mov dword [ebp - 0xa0c], 1
jmp 0x10058390
and dword [ebp - 0xa0c], 0
mov eax, dword [ebp - 4]
mov dword [ebp - 0xe54], eax
mov eax, dword [ebp - 4]
mov eax, dword [ebp + eax*4 - 0x14]
neg eax
cmp eax, 0xfffffffc
jae 0x100583b3
mov dword [ebp - 0xabc], 1
jmp 0x100583ba
and dword [ebp - 0xabc], 0
mov eax, dword [ebp - 4]
mov eax, dword [ebp + eax*4 - 0x14]
mov dword [ebp - 0xcf8], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x224]
mov dword [ebp - 0xa14], eax
jmp 0x1005812f
jmp 0x100580fb
mov dword [ebp - 0x190], 0xffffffff
mov dword [ebp - 0xb18], 0x13638ecf
mov dword [ebp - 0x1e4], 0
jmp 0x10058411
mov eax, dword [ebp - 0x1e4]
inc eax
mov dword [ebp - 0x1e4], eax
cmp dword [ebp - 0x1e4], 3
jge 0x1005842d
mov eax, dword [ebp - 0x1e4]
mov dword [ebp + eax*4 - 0xfd0], 0xfffffffa
jmp 0x10058404
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0xfd0]
mov dword [ebp - 0xb18], eax
mov byte [ebp - 0xd5], 0
movzx eax, byte [ebp - 0xd5]
test eax, eax
je 0x1005846e
push 0x20e2
push 0x504
push 0x5a1
push 0x23c5
push 0
call dword [sym.imp.KERNEL32.dll_MapViewOfFile]
mov dword [ebp - 0xf58], 0xfff8
mov byte [ebp - 0x136], 0
movzx eax, byte [ebp - 0x136]
test eax, eax
je 0x10058499
push 0
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_SetWindowTextA]
mov byte [ebp - 0xd7], 0
movzx eax, byte [ebp - 0xd7]
test eax, eax
je 0x100584bd
push 0x13a5
push 1
push 0x1f86
call dword [sym.imp.KERNEL32.dll_OpenProcess]
mov dword [ebp - 0x318], 0xffff
mov dword [ebp - 0x2e0], 0x29c1464f
mov dword [ebp - 0x8c4], 0x2b483718
mov dword [ebp - 0xcc0], 0xacf25792
mov dword [ebp - 0x794], 0xffffffff
mov dword [ebp - 0x78c], 0xffffffff
mov dword [ebp - 0x5d0], 0
mov dword [ebp - 0x998], 1
mov dword [ebp - 0x994], 1
mov dword [ebp - 0x990], 1
mov dword [ebp - 0x98c], 1
mov dword [ebp - 0x268], 1
mov dword [ebp - 0x368], 0
mov dword [ebp - 0x320], 0x88c5540f
mov dword [ebp - 0xe5c], 0
mov dword [ebp - 0x79c], 0xd4644688
mov dword [ebp - 0x2d8], 0
mov dword [ebp - 0x5e0], 0
mov dword [ebp - 0xac4], 0x9bd9
mov dword [ebp - 0xb64], 1
mov dword [ebp - 0x318], 0xfffd
mov eax, dword [ebp - 0x318]
mov dword [ebp - 0xd08], eax
mov eax, dword [ebp - 0x268]
mov dword [ebp - 0xf14], eax
push 0xfffffffffffffff8
pop eax
cmp eax, 0x446ed9a8
jne 0x100585bd
mov dword [ebp - 0x5c0], 1
jmp 0x100585c4
and dword [ebp - 0x5c0], 0
cmp dword [ebp - 0x5c0], 0x66969e96
jg 0x100585dc
mov dword [ebp - 0x784], 1
jmp 0x100585e3
and dword [ebp - 0x784], 0
cmp dword [ebp - 0x784], 0xffff
jae 0x100585fb
mov dword [ebp - 0x5c8], 1
jmp 0x10058602
and dword [ebp - 0x5c8], 0
mov eax, dword [ebp - 0x5c8]
mov dword [ebp - 0x2e0], eax
mov eax, dword [ebp - 0x2e0]
push 4
pop ecx
imul ecx, ecx, 3
sub eax, dword [ebp + ecx - 0x998]
cmp eax, dword [ebp - 0x268]
je 0x10058635
mov dword [ebp - 0x8f4], 1
jmp 0x1005863c
and dword [ebp - 0x8f4], 0
imul eax, dword [ebp - 0x8f4], 0x8998
imul eax, dword [ebp - 0x78c]
mov dword [ebp - 0x5d0], eax
mov eax, dword [ebp - 0x5d0]
sub eax, dword [ebp - 0x268]
cmp eax, dword [ebp - 0x78c]
jle 0x10058673
mov dword [ebp - 0xa1c], 1
jmp 0x1005867a
and dword [ebp - 0xa1c], 0
mov eax, dword [ebp - 0x368]
mov dword [ebp - 0xd10], eax
mov eax, dword [ebp - 0x5e0]
mov dword [ebp - 0xe64], eax
mov eax, dword [ebp - 0xac4]
mov dword [ebp - 0xd18], eax
mov eax, dword [ebp - 0x320]
mov dword [ebp - 0xf78], eax
cmp dword [ebp - 0x318], 0
je 0x100586c4
or eax, 0xffffffff
je 0x100586c4
mov dword [ebp - 0x5d8], 1
jmp 0x100586cb
and dword [ebp - 0x5d8], 0
mov eax, 0xb46f9f11
sub eax, dword [ebp - 0x5d8]
inc eax
cmp dword [ebp - 0x268], eax
jg 0x100586eb
mov dword [ebp - 0x85c], 1
jmp 0x100586f2
and dword [ebp - 0x85c], 0
mov eax, dword [ebp - 0x85c]
sub eax, dword [ebp - 0x5e0]
mov dword [ebp - 0x794], eax
mov eax, dword [ebp - 0x79c]
cmp dword [ebp - 0x794], eax
jg 0x1005871e
mov dword [ebp - 0xa24], 1
jmp 0x10058725
and dword [ebp - 0xa24], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x998]
mov dword [ebp - 0xd20], eax
cmp dword [ebp - 0x368], 0
je 0x1005874d
mov dword [ebp - 0x5e8], 1
jmp 0x10058754
and dword [ebp - 0x5e8], 0
mov eax, dword [ebp - 0x2d8]
dec eax
mov dword [ebp - 0x2d8], eax
mov eax, dword [ebp - 0x320]
add eax, dword [ebp - 0x5e8]
mov dword [ebp - 0x8c4], eax
mov eax, dword [ebp - 0x8c4]
inc eax
cmp dword [ebp - 0x2d8], eax
jle 0x1005878e