Function at 0x1002172a
Capabilities:
Accept command line arguments
Contain obfuscated stackstrings
Encrypt data using speck
Enumerate gui resources
Get common file path
Get graphical window text

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x100562e5
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
push ecx
sub esp, 0xc84
push ebx
push esi
push edi
mov dword [ebp - 0x10], esp
cmp dword [0x104701b4], 0
jne 0x10026c7c
mov dword [ebp - 0x100], 5
mov dword [ebp - 0x324], 0xfffffff7
mov dword [ebp - 0x2f0], 0
jmp 0x10021789
mov eax, dword [ebp - 0x2f0]
inc eax
mov dword [ebp - 0x2f0], eax
cmp dword [ebp - 0x2f0], 4
jge 0x100217a5
mov eax, dword [ebp - 0x2f0]
mov dword [ebp + eax*4 - 0x98c], 0xfffffffd
jmp 0x1002177c
mov dword [ebp - 0x100], 0
jmp 0x100217be
mov eax, dword [ebp - 0x100]
inc eax
mov dword [ebp - 0x100], eax
cmp dword [ebp - 0x100], 0x18
jge 0x10021a04
mov dword [ebp - 0x80], 0x5d09ea9
mov dword [ebp - 0x2f8], 1
mov dword [ebp - 0x80], 3
jmp 0x100217ec
mov eax, dword [ebp - 0x80]
dec eax
mov dword [ebp - 0x80], eax
cmp dword [ebp - 0x80], 0
jl 0x100219ff
mov dword [ebp - 0x8d0], 0x9973063d
mov eax, dword [ebp - 0x80]
mov eax, dword [ebp + eax*4 - 0x98c]
mov dword [ebp - 0xae4], eax
mov eax, dword [ebp - 0x324]
mov dword [ebp - 0xa14], eax
push 0xfffffffffffffffc
pop eax
test eax, eax
je 0x10021838
cmp dword [ebp - 0x324], 0
je 0x10021838
mov dword [ebp - 0x378], 1
jmp 0x1002183f
and dword [ebp - 0x378], 0
cmp dword [ebp - 0x378], 0x9dade661
ja 0x10021857
mov dword [ebp - 0x690], 1
jmp 0x1002185e
and dword [ebp - 0x690], 0
cmp dword [ebp - 0x690], 4
jne 0x10021873
mov dword [ebp - 0x684], 1
jmp 0x1002187a
and dword [ebp - 0x684], 0
cmp dword [ebp - 0x684], 0x1720
jle 0x10021892
mov dword [ebp - 0x4f4], 1
jmp 0x10021899
and dword [ebp - 0x4f4], 0
mov eax, dword [ebp - 0x4f4]
sub eax, dword [ebp - 0x80]
mov dword [ebp - 0x2f8], eax
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x2f8]
neg ecx
cmp ecx, dword [ebp + eax - 0x98c]
jg 0x100218cb
mov dword [ebp - 0x678], 1
jmp 0x100218d2
and dword [ebp - 0x678], 0
mov eax, dword [ebp - 0x100]
cmp eax, dword [ebp - 0x678]
jge 0x100218ec
mov dword [ebp - 0x30c], 1
jmp 0x100218f3
and dword [ebp - 0x30c], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x30c]
mov dword [ebp + eax - 0x98c], ecx
cmp dword [ebp - 0x30c], 0x1213072c
jge 0x1002191e
mov dword [ebp - 0x344], 1
jmp 0x10021925
and dword [ebp - 0x344], 0
mov eax, dword [ebp - 0x344]
shl eax, 3
mov dword [ebp - 0x8d0], eax
mov eax, 0x2377
test eax, eax
je 0x100219bc
mov eax, dword [ebp - 0x2f8]
cmp eax, dword [ebp - 0x2f8]
je 0x10021957
mov dword [ebp - 0x63c], 1
jmp 0x1002195e
and dword [ebp - 0x63c], 0
mov eax, dword [ebp - 0x80]
mov eax, dword [ebp + eax*4 - 0x98c]
cmp eax, dword [ebp - 0x63c]
je 0x1002197c
mov dword [ebp - 0x34c], 1
jmp 0x10021983
and dword [ebp - 0x34c], 0
mov eax, dword [ebp - 0x34c]
neg eax
cmp eax, 0xffffffff
jl 0x1002199c
mov dword [ebp - 0x4fc], 1
jmp 0x100219a3
and dword [ebp - 0x4fc], 0
mov eax, dword [ebp - 0x4fc]
sub eax, 0x1359287a
je 0x100219bc
mov dword [ebp - 0x354], 1
jmp 0x100219c3
and dword [ebp - 0x354], 0
mov eax, dword [ebp - 0x324]
add eax, dword [ebp - 0x354]
cmp eax, 1
jle 0x100219e0
mov dword [ebp - 0x5d4], 1
jmp 0x100219e7
and dword [ebp - 0x5d4], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x5d4]
mov dword [ebp + eax - 0x98c], ecx
jmp 0x100217e5
jmp 0x100217b1
mov dword [ebp - 0x84], 0x45cd
mov dword [ebp - 0xdc], 3
mov eax, dword [ebp - 0x84]
mov dword [ebp - 0xdc], eax
mov dword [ebp - 0x84], 0xfffffff1
jmp 0x10021a3d
mov eax, dword [ebp - 0x84]
inc eax
mov dword [ebp - 0x84], eax
cmp dword [ebp - 0x84], 9
jne 0x10021b53
mov dword [ebp - 0x50c], 5
mov eax, dword [ebp - 0xdc]
cmp eax, dword [ebp - 0xdc]
jle 0x10021a6e
mov dword [ebp - 0x35c], 1
jmp 0x10021a75
and dword [ebp - 0x35c], 0
cmp dword [ebp - 0x35c], 3
jbe 0x10021a8a
mov dword [ebp - 0x504], 1
jmp 0x10021a91
and dword [ebp - 0x504], 0
cmp dword [ebp - 0x504], 0x2215256e
jle 0x10021aa9
mov dword [ebp - 0x364], 1
jmp 0x10021ab0
and dword [ebp - 0x364], 0
mov eax, dword [ebp - 0x84]
sub eax, dword [ebp - 0x50c]
add eax, dword [ebp - 0x364]
cmp eax, dword [ebp - 0xdc]
jge 0x10021ad6
mov dword [ebp - 0x674], 1
jmp 0x10021add
and dword [ebp - 0x674], 0
mov eax, dword [ebp - 0x84]
add eax, 6
cmp eax, dword [ebp - 0x674]
jle 0x10021afa
mov dword [ebp - 0x36c], 1
jmp 0x10021b01
and dword [ebp - 0x36c], 0
mov eax, dword [ebp - 0xdc]
add eax, dword [ebp - 0x36c]
cmp eax, dword [ebp - 0x50c]
jg 0x10021b21
mov dword [ebp - 0x374], 1
jmp 0x10021b28
and dword [ebp - 0x374], 0
mov eax, dword [ebp - 0x374]
mov dword [ebp - 0xdc], eax
mov byte [ebp - 0xd2], 0
movzx eax, byte [ebp - 0xd2]
test eax, eax
je 0x10021b4e
push 0
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
jmp 0x10021a30
mov dword [ebp - 0x8ac], 0x7dc4b4e1
mov dword [ebp - 0x2e4], 0
jmp 0x10021b76
mov eax, dword [ebp - 0x2e4]
inc eax
mov dword [ebp - 0x2e4], eax
cmp dword [ebp - 0x2e4], 1
jge 0x10021b92
mov eax, dword [ebp - 0x2e4]
mov dword [ebp + eax*4 - 0x79c], 0x85299dad
jmp 0x10021b69
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x79c]
mov dword [ebp - 0x8ac], eax
mov byte [ebp - 0xc6], 0
movzx eax, byte [ebp - 0xc6]
test eax, eax
je 0x10021bc1
push 0
push 0
call dword [sym.imp.USER32.dll_LoadCursorA]
mov byte [ebp - 0x138], 7
mov byte [ebp - 0x137], 0xc7
mov byte [ebp - 0x136], 6
mov byte [ebp - 0x135], 1
mov byte [ebp - 0x134], 9
mov byte [ebp - 0x133], 0x57
mov byte [ebp - 0x132], 8
mov byte [ebp - 0x131], 0x4a
mov byte [ebp - 0x130], 0xb
mov byte [ebp - 0x12f], 0x42
mov byte [ebp - 0x12e], 3
mov byte [ebp - 0x12d], 2
mov byte [ebp - 0x12c], 5
mov byte [ebp - 0x12b], 2
mov byte [ebp - 0x12a], 4
mov byte [ebp - 0x129], 9
mov byte [ebp - 0x128], 0xa
mov byte [ebp - 0x127], 9
mov byte [ebp - 0x126], 1
mov byte [ebp - 0x125], 9
mov byte [ebp - 0x124], 2
mov byte [ebp - 0x123], 0x17
mov byte [ebp - 0x122], 0
mov byte [ebp - 0x121], 0x39
mov dword [ebp - 0x168], 0xa66fe7d8
mov dword [ebp - 0x248], 0
jmp 0x10021c8c
mov eax, dword [ebp - 0x248]
inc eax
mov dword [ebp - 0x248], eax
cmp dword [ebp - 0x248], 2
jge 0x10021ca8
mov eax, dword [ebp - 0x248]
mov dword [ebp + eax*4 - 0xb80], 0xfffffff6
jmp 0x10021c7f
mov dword [ebp - 0x168], 1
jmp 0x10021cc1
mov eax, dword [ebp - 0x168]
dec eax
mov dword [ebp - 0x168], eax
cmp dword [ebp - 0x168], 0
jl 0x10021d0b
mov dword [ebp - 0x8b4], 1
cmp dword [ebp - 0x8b4], 0
je 0x10021cdf
jmp 0x10021d0b
mov byte [ebp - 0x8d], 0
movzx eax, byte [ebp - 0x8d]
test eax, eax
je 0x10021d09
push 0
push 0
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_PlayEnhMetaFile]
jmp 0x10021cb4
xor eax, eax
inc eax
shl eax, 0
movzx eax, byte [ebp + eax - 0x138]
and eax, 0xf5
xor ecx, ecx
inc ecx
shl ecx, 0
movzx ecx, byte [ebp + ecx - 0x138]
or ecx, 0xf5
sub ecx, eax
xor eax, eax
inc eax
imul eax, eax, 0
movzx eax, byte [ebp + eax - 0x138]
mov word [ebp + eax*2 - 0x9e4], cx
mov dword [ebp - 0x8c], 1
mov dword [ebp - 0x64], 0
jmp 0x10021d64
mov eax, dword [ebp - 0x64]
inc eax
mov dword [ebp - 0x64], eax
cmp dword [ebp - 0x64], 3
jge 0x10021d7a
mov eax, dword [ebp - 0x64]
mov dword [ebp + eax*4 - 0xa30], 0xbacc5d9b
jmp 0x10021d5d
mov dword [ebp - 0x64], 0
jmp 0x10021d8a
mov eax, dword [ebp - 0x64]
inc eax
mov dword [ebp - 0x64], eax
cmp dword [ebp - 0x64], 1
jge 0x10021da0
mov eax, dword [ebp - 0x64]
mov dword [ebp + eax*4 - 0x39c], 0xfffffff6
jmp 0x10021d83
mov dword [ebp - 0x8c], 0
jmp 0x10021db9
mov eax, dword [ebp - 0x8c]
dec eax
mov dword [ebp - 0x8c], eax
cmp dword [ebp - 0x8c], 0xffffffe5
jl 0x10022360
mov dword [ebp - 0x34], 0xfffffff9
mov dword [ebp - 0x34], 0
jmp 0x10021ddd
mov eax, dword [ebp - 0x34]
dec eax
mov dword [ebp - 0x34], eax
cmp dword [ebp - 0x34], 0xfffffff1
jle 0x10021f47
mov dword [ebp - 0x2e0], 1
mov dword [ebp - 0x2e0], 0x11
jmp 0x10021e0a
mov eax, dword [ebp - 0x2e0]
dec eax
mov dword [ebp - 0x2e0], eax
cmp dword [ebp - 0x2e0], 0xffffffe9
jne 0x10021f42
mov dword [ebp - 0x5dc], 0xac8
mov dword [ebp - 0x924], str.srmet_qfqxykm_ycuf_axiavnflv_kta_tdhdy_gdaakrcs_zft_gvotumki
cmp dword [ebp - 0x5dc], 0xc16
jle 0x10021ef0
and dword [ebp - 0x170], 0
jmp 0x10021e51
mov eax, dword [ebp - 0x170]
inc eax
mov dword [ebp - 0x170], eax
cmp dword [ebp - 0x170], 0x26ac
jge 0x10021ee1
and dword [ebp - 0x250], 0
jmp 0x10021e77
mov eax, dword [ebp - 0x250]
inc eax
mov dword [ebp - 0x250], eax
cmp dword [ebp - 0x250], 0x47e3
jge 0x10021edc
mov eax, dword [ebp - 0x170]
mov ecx, dword [ebp - 0x250]
shl eax, cl
cdq
mov dword [ebp - 0x7a8], eax
mov dword [ebp - 0x7a4], edx
push dword [ebp - 0x7a4]
push dword [ebp - 0x7a8]
lea ecx, [ebp - 0xc40]
call fcn.10002769
pop ecx
pop ecx
mov dword [ebp - 0x910], eax
mov ecx, dword [ebp - 0x910]
call fcn.10003efc
push eax
call fcn.1003ed0a
pop ecx
lea ecx, [ebp - 0xc40]
call fcn.100013ad
jmp 0x10021e6a
jmp 0x10021e44
push 0
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_BeginPaint]
cmp dword [ebp - 0x8c], 0
je 0x10021efb
jmp 0x10021f42
and dword [ebp - 4], 0
cmp dword [ebp - 0x5dc], 0x93b
jge 0x10021f17
push dword [ebp - 0x924]
call fcn.1003ed0a
pop ecx
jmp 0x10021f33
or dword [ebp - 4], 0xffffffff
jmp 0x10021f3d
jmp 0x10021dfd
jmp 0x10021dd6
mov dword [ebp - 0x34], 0
jmp 0x10021f57
mov eax, dword [ebp - 0x34]
inc eax
mov dword [ebp - 0x34], eax
cmp dword [ebp - 0x34], 0x11
jg 0x1002235b
mov dword [ebp - 0x74], 0xf545ee28
mov dword [ebp - 0x114], 1
mov dword [ebp - 0x74], 2
jmp 0x10021f82
mov eax, dword [ebp - 0x74]
dec eax
mov dword [ebp - 0x74], eax
cmp dword [ebp - 0x74], 0
jl 0x10022356
mov dword [ebp - 0x37c], 0x76
mov dword [ebp - 0x6d8], str.vlxff_cgffhe_eonrfce_yijq_amgsctrt_ecbfid_gto_bdsz_kvnnwg_ylvt_uprd_bdqrly_hluodetnl
cmp dword [ebp - 0x37c], 0x2d3
jle 0x100220cb
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_IsWindow]
and dword [ebp - 0x258], 0
jmp 0x10021fd3
mov eax, dword [ebp - 0x258]
inc eax
mov dword [ebp - 0x258], eax
cmp dword [ebp - 0x258], 0x6d3b
jge 0x100220c3
and dword [ebp - 0x178], 0
jmp 0x10021ff9
mov eax, dword [ebp - 0x178]
inc eax
mov dword [ebp - 0x178], eax
cmp dword [ebp - 0x178], 0x63d9
jge 0x100220be
and dword [ebp - 0x2c0], 0
jmp 0x1002201f
mov eax, dword [ebp - 0x2c0]
inc eax
mov dword [ebp - 0x2c0], eax
cmp dword [ebp - 0x2c0], 0x3250
jge 0x100220b9
and dword [ebp - 0x180], 0
jmp 0x10022045
mov eax, dword [ebp - 0x180]
inc eax
mov dword [ebp - 0x180], eax
cmp dword [ebp - 0x180], 0x6d68
jge 0x100220b4
mov eax, dword [ebp - 0x178]
add eax, dword [ebp - 0x2c0]
add eax, dword [ebp - 0x180]
and eax, dword [ebp - 0x258]
cdq
mov dword [ebp - 0x7b4], eax
mov dword [ebp - 0x7b0], edx
push dword [ebp - 0x7b0]
push dword [ebp - 0x7b4]
lea ecx, [ebp - 0xbe0]
call fcn.10002769
pop ecx
pop ecx
mov dword [ebp - 0x6d0], eax
mov ecx, dword [ebp - 0x6d0]
call fcn.10003efc
push eax
call fcn.1003ed0a
pop ecx
lea ecx, [ebp - 0xbe0]
call fcn.100013ad
jmp 0x10022038
jmp 0x10022012
jmp 0x10021fec
jmp 0x10021fc6
push 0
call dword [sym.imp.USER32.dll_CreateIconIndirect]
mov dword [ebp - 0x6b8], 0x3cfce294
mov dword [ebp - 0x6b4], 0x3cfce294
mov dword [ebp - 0x6b0], 0x3cfce294
mov dword [ebp - 0x6ac], 0x3cfce294
mov dword [ebp - 4], 2
cmp dword [ebp - 0x37c], 0x35
jge 0x1002210f
push dword [ebp - 0x6d8]
call fcn.1003ed0a
pop ecx
jmp 0x1002212b
or dword [ebp - 4], 0xffffffff
jmp 0x10022135
mov dword [ebp - 0x794], 0x95866b38
push 4
pop eax
shl eax, 0
mov dword [ebp + eax - 0x6b8], 0
jmp 0x1002216d
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x6b8]
inc eax
push 4
pop ecx
shl ecx, 0
mov dword [ebp + ecx - 0x6b8], eax
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x6b8], 2
jg 0x10022351
mov eax, dword [ebp - 0x74]
cmp dword [ebp + eax*4 - 0xa30], 0
jne 0x10022192
cmp dword [ebp - 0x74], 0
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x6b8]
mov dword [ebp - 0x514], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x514]
mov dword [ebp + eax - 0x39c], ecx
mov eax, dword [ebp - 0x8c]
cmp dword [ebp - 0x514], eax
jl 0x100221d1
mov dword [ebp - 0x384], 1
jmp 0x100221d8
and dword [ebp - 0x384], 0
cmp dword [ebp - 0x384], 0xe5a8
jne 0x100221f3
cmp dword [ebp - 0x74], 0
jne 0x100221f3
and dword [ebp - 0x644], 0
jmp 0x100221fd
mov dword [ebp - 0x644], 1
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x114]
add ecx, dword [ebp - 0x34]
cmp ecx, dword [ebp + eax - 0x6b8]
je 0x10022221
mov dword [ebp - 0x38c], 1
jmp 0x10022228
and dword [ebp - 0x38c], 0
mov eax, dword [ebp - 0x34]
imul eax, dword [ebp - 0x38c]
test eax, eax
jne 0x1002224f
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x6b8], 0
jne 0x1002224f
and dword [ebp - 0x51c], 0
jmp 0x10022259
mov dword [ebp - 0x51c], 1
mov eax, dword [ebp - 0x74]
imul eax, dword [ebp - 0x51c]
cmp eax, dword [ebp - 0x8c]
je 0x10022277
mov dword [ebp - 0x394], 1
jmp 0x1002227e
and dword [ebp - 0x394], 0
cmp dword [ebp - 0x394], 0
jb 0x10022293
mov dword [ebp - 0x5e4], 1
jmp 0x1002229a
and dword [ebp - 0x5e4], 0
push 4
pop eax
shl eax, 0
push 4
pop ecx
imul ecx, ecx, 0
mov ecx, dword [ebp + ecx - 0x39c]
imul ecx, dword [ebp + eax - 0xa30]
test ecx, ecx
jne 0x100222cb
mov eax, 0xb9ce
test eax, eax
jne 0x100222cb
and dword [ebp - 0x524], 0
jmp 0x100222d5
mov dword [ebp - 0x524], 1
mov eax, dword [ebp - 0x524]
mov dword [ebp - 0x794], eax
mov dword [ebp - 0x114], 0
jmp 0x100222fa
mov eax, dword [ebp - 0x114]
inc eax
mov dword [ebp - 0x114], eax
cmp dword [ebp - 0x114], 2
jg 0x1002234c
mov byte [ebp - 0xc8], 0
movzx eax, byte [ebp - 0xc8]
test eax, eax
je 0x1002234a
push 0x1370
push 0x345
push 0x1e99
push 0x217f
push 0x19c
push 0
push 0
push 0
push 0
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.USER32.dll_DrawStateW]
jmp 0x100222ed
jmp 0x10022152
jmp 0x10021f7b
jmp 0x10021f50
jmp 0x10021dac
mov dword [ebp - 0x38], 2
and dword [ebp - 0x32c], 0
jmp 0x10022378
mov eax, dword [ebp - 0x38]
inc eax
inc eax
mov dword [ebp - 0x38], eax
cmp dword [ebp - 0x38], 0x18
jae 0x10022759
mov dword [ebp - 0x3a4], 0x7c96
mov dword [ebp - 0x8c8], str.igrtsqd_gccpvhv_uwqzysw_oqsqdajxr_puivfhpe_rrrm_nqdqny_xvan_gvnnhi_rvt_svanfd
cmp dword [ebp - 0x3a4], 0x7dc0
jle 0x1002246e
and dword [ebp - 0x188], 0
jmp 0x100223bc
mov eax, dword [ebp - 0x188]
inc eax
mov dword [ebp - 0x188], eax
cmp dword [ebp - 0x188], 0x445c
jge 0x1002244e
and dword [ebp - 0x2e8], 0
jmp 0x100223e2
mov eax, dword [ebp - 0x2e8]
inc eax
mov dword [ebp - 0x2e8], eax
cmp dword [ebp - 0x2e8], 0x3c3b
jge 0x10022449
and dword [ebp - 0x190], 0
jmp 0x10022404
mov eax, dword [ebp - 0x190]
inc eax
mov dword [ebp - 0x190], eax
cmp dword [ebp - 0x190], 0x6e66
jge 0x10022447
mov eax, dword [ebp - 0x188]
sub eax, dword [ebp - 0x2e8]
add eax, dword [ebp - 0x190]
cdq
mov dword [ebp - 0x7c0], eax
mov dword [ebp - 0x7bc], edx
push dword [ebp - 0x7bc]
push dword [ebp - 0x7c0]
mov ecx, 0x1006f038
call fcn.10003f1c
jmp 0x100223f7
jmp 0x100223d5
jmp 0x100223af
push 0x1745
push 0xf6f
push 0
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.USER32.dll_DrawFrameControl]
mov dword [ebp - 4], 4
cmp dword [ebp - 0x3a4], 0x7a4a
jge 0x10022491
mov edx, dword [ebp - 0x8c8]
mov ecx, 0x1006f038
call fcn.1000567a
jmp 0x100224ad
or dword [ebp - 4], 0xffffffff
jmp 0x100224b7
mov dword [ebp - 0x80c], 0x9fe387fb
mov dword [ebp - 0x8f4], 0xb68d
mov dword [ebp - 0x3ac], 0x416c
mov dword [ebp - 0x818], str.rukmh_qngp_pradb_dpo_idbdybyfq_ruxg_wkwcqya_juqmkaec_zqmwcm_bwkflk_vqvzi_tgfwn_gdqxoi
cmp dword [ebp - 0x3ac], 0x42d6
jle 0x100225c6
and dword [ebp - 0x15c], 0
jmp 0x10022505
mov eax, dword [ebp - 0x15c]
inc eax
mov dword [ebp - 0x15c], eax
cmp dword [ebp - 0x15c], 0x4fee
jge 0x100225c6
and dword [ebp - 0x260], 0
jmp 0x1002252b
mov eax, dword [ebp - 0x260]
inc eax
mov dword [ebp - 0x260], eax
cmp dword [ebp - 0x260], 0x5032
jge 0x100225c1
and dword [ebp - 0x198], 0
jmp 0x10022551
mov eax, dword [ebp - 0x198]
inc eax
mov dword [ebp - 0x198], eax
cmp dword [ebp - 0x198], 0x6d98
jge 0x100225bc
mov eax, dword [ebp - 0x260]
mov ecx, dword [ebp - 0x198]
shl eax, cl
xor eax, dword [ebp - 0x15c]
cdq
mov dword [ebp - 0x7cc], eax
mov dword [ebp - 0x7c8], edx
push dword [ebp - 0x7c8]
push dword [ebp - 0x7cc]
lea ecx, [ebp - 0xb98]
call fcn.10002769
pop ecx
pop ecx
mov dword [ebp - 0x6e0], eax
mov ecx, dword [ebp - 0x6e0]
call fcn.10003efc
push eax
call fcn.1003ed0a
pop ecx
lea ecx, [ebp - 0xb98]
call fcn.100013ad
jmp 0x10022544
jmp 0x1002251e
jmp 0x100224f8
cmp dword [ebp - 0x80c], 0
je 0x10022648
mov dword [ebp - 0x6e8], 0xe19f
mov dword [ebp - 0x6f0], 0x56974edf
mov dword [ebp - 0x1a0], 0
jmp 0x100225fc
mov eax, dword [ebp - 0x1a0]
inc eax
mov dword [ebp - 0x1a0], eax
cmp dword [ebp - 0x1a0], 3
jge 0x10022618
mov eax, dword [ebp - 0x1a0]
mov dword [ebp + eax*4 - 0xc88], 6
jmp 0x100225ef
cmp dword [ebp - 0x6e8], 1
jle 0x1002262d
mov dword [ebp - 0x6a8], 1
jmp 0x10022634
and dword [ebp - 0x6a8], 0
mov eax, dword [ebp - 0x6a8]
sub eax, dword [ebp - 0x8f4]
mov dword [ebp - 0x6f0], eax
jmp 0x10022660
mov byte [ebp - 0x95], 0
movzx eax, byte [ebp - 0x95]
test eax, eax
je 0x10022660
call dword [sym.imp.USER32.dll_GetMessageTime]
mov dword [ebp - 4], 6
cmp dword [ebp - 0x3ac], 0x3f86
jge 0x1002267f
push dword [ebp - 0x818]
call fcn.1003ed0a
pop ecx
jmp 0x1002269b
or dword [ebp - 4], 0xffffffff
jmp 0x100226a5
mov byte [ebp - 0xca], 0
movzx eax, byte [ebp - 0xca]
test eax, eax
je 0x100226cb
push 0
push 0x584
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetScrollInfo]
mov eax, dword [ebp - 0x38]
sub eax, dword [ebp - 0x32c]
movzx eax, byte [ebp + eax - 0x13a]
movzx eax, word [ebp + eax*2 - 0x9e4]
mov ecx, dword [ebp - 0x38]
movzx ecx, byte [ebp + ecx - 0x137]
and ecx, eax
mov eax, dword [ebp - 0x38]
sub eax, dword [ebp - 0x32c]
movzx eax, byte [ebp + eax - 0x13a]
movzx eax, word [ebp + eax*2 - 0x9e4]
mov edx, dword [ebp - 0x38]
movzx edx, byte [ebp + edx - 0x137]
and edx, eax
mov eax, dword [ebp - 0x38]
sub eax, dword [ebp - 0x32c]
movzx eax, byte [ebp + eax - 0x13a]
movzx eax, word [ebp + eax*2 - 0x9e4]
mov esi, dword [ebp - 0x38]
movzx esi, byte [ebp + esi - 0x137]
add esi, eax
sub esi, edx
sub esi, ecx
mov eax, dword [ebp - 0x38]
movzx eax, byte [ebp + eax - 0x138]
mov word [ebp + eax*2 - 0x9e4], si
jmp 0x10022370
mov dword [ebp - 0xa64], 9
mov byte [ebp - 0x9d], 0
movzx eax, byte [ebp - 0x9d]
test eax, eax
je 0x1002277b
call dword [sym.imp.USER32.dll_DestroyCaret]
mov byte [ebp - 0xcc], 0
movzx eax, byte [ebp - 0xcc]
test eax, eax
je 0x1002279a
push 0x1798
push 0
call dword [sym.imp.KERNEL32.dll_GetSystemDirectoryA]
push 2
pop eax
imul eax, eax, 0xc
xor ecx, ecx
mov word [ebp + eax - 0x9e4], cx
lea eax, [ebp - 0x9e4]
push eax
lea ecx, [ebp - 0xc10]
call fcn.10004031
mov dword [ebp - 0x6f8], eax
mov eax, dword [ebp - 0x6f8]
mov dword [ebp - 0x8fc], eax
mov dword [ebp - 4], 8
push dword [ebp - 0x8fc]
call fcn.1001ab26
pop ecx
mov dword [ebp - 0x628], eax
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xc10]
call fcn.10001417
and dword [ebp - 0x1b8], 0
jmp 0x1002280c
mov eax, dword [ebp - 0x1b8]
inc eax
mov dword [ebp - 0x1b8], eax
cmp dword [ebp - 0x1b8], 0xd
jae 0x1002309b
mov dword [ebp - 0x40], 0xfffffff9
mov dword [ebp - 0xf0], 0xcd95da22
mov dword [ebp - 0x718], 0x4498
mov dword [ebp - 0xa1c], 1
mov dword [ebp - 0xa6c], 0xfc518f82
mov dword [ebp - 0xa24], 1
mov dword [ebp - 0x3ec], 8
mov dword [ebp - 0xa74], 0x36182647
mov dword [ebp - 0xa34], 0x2551ad04
mov dword [ebp - 0x40c], 0x961f9da9
mov dword [ebp - 0x730], 0xffffffff
mov dword [ebp - 0x83c], 0
mov dword [ebp - 0x720], 0
mov dword [ebp - 0x270], 0x2865603b
mov dword [ebp - 0xa7c], 6
mov dword [ebp - 0x3e4], 0x81ee
mov dword [ebp - 0x318], 0x2859f961
mov dword [ebp - 0x90c], 0xffffffff
mov dword [ebp - 0x52c], 0x4294
mov dword [ebp - 0x700], str.cjwii_hxs_zfxfj_rlkyaihx
cmp dword [ebp - 0x52c], 0x4563
jle 0x10022997
and dword [ebp - 0x2cc], 0
jmp 0x10022904
mov eax, dword [ebp - 0x2cc]
inc eax
mov dword [ebp - 0x2cc], eax
cmp dword [ebp - 0x2cc], 0x1af9
jge 0x10022997
and dword [ebp - 0x268], 0
jmp 0x1002292a
mov eax, dword [ebp - 0x268]
inc eax
mov dword [ebp - 0x268], eax
cmp dword [ebp - 0x268], 0x2535
jge 0x10022992
and dword [ebp - 0x1a8], 0
jmp 0x1002294c
mov eax, dword [ebp - 0x1a8]
inc eax
mov dword [ebp - 0x1a8], eax
cmp dword [ebp - 0x1a8], 0x3f65
jge 0x10022990
mov eax, dword [ebp - 0x268]
imul eax, dword [ebp - 0x1a8]
and eax, dword [ebp - 0x2cc]
cdq
mov dword [ebp - 0x7d8], eax
mov dword [ebp - 0x7d4], edx
push dword [ebp - 0x7d4]
push dword [ebp - 0x7d8]
mov ecx, 0x1006f038
call fcn.10003f1c
jmp 0x1002293f
jmp 0x1002291d
jmp 0x100228f7
mov dword [ebp - 0x848], 2
mov dword [ebp - 4], 9
cmp dword [ebp - 0x52c], 0x3f07
jge 0x100229c4
mov edx, dword [ebp - 0x700]
mov ecx, 0x1006f038
call fcn.1000567a
jmp 0x100229e0
or dword [ebp - 4], 0xffffffff
jmp 0x100229ea
mov dword [ebp - 0x44], 0
jmp 0x100229fa
mov eax, dword [ebp - 0x44]
inc eax
mov dword [ebp - 0x44], eax
cmp dword [ebp - 0x44], 1
jge 0x10022a10
mov eax, dword [ebp - 0x44]
mov dword [ebp + eax*4 - 0xa44], 0x76a90d26
jmp 0x100229f3
mov dword [ebp - 0x44], 0
jmp 0x10022a20
mov eax, dword [ebp - 0x44]
inc eax
mov dword [ebp - 0x44], eax
cmp dword [ebp - 0x44], 2
jge 0x10022a36
mov eax, dword [ebp - 0x44]
mov dword [ebp + eax*4 - 0x7e4], 1
jmp 0x10022a19
mov eax, dword [ebp - 0x40]
cmp eax, dword [ebp - 0x40]
jle 0x10022a4a
mov dword [ebp - 0x3b4], 1
jmp 0x10022a51
and dword [ebp - 0x3b4], 0
mov eax, dword [ebp - 0x3b4]
mov dword [ebp - 0xf0], eax
cmp dword [ebp - 0xf0], 0
jne 0x10022a78
cmp dword [ebp - 0xf0], 0
jne 0x10022a78
and dword [ebp - 0x5ec], 0
jmp 0x10022a82
mov dword [ebp - 0x5ec], 1
mov eax, dword [ebp - 0x40]
dec eax
cmp eax, dword [ebp - 0x5ec]
je 0x10022a9a
mov dword [ebp - 0x3bc], 1
jmp 0x10022aa1
and dword [ebp - 0x3bc], 0
mov eax, dword [ebp - 0x40]
cmp eax, dword [ebp - 0x3bc]
jl 0x10022ab8
mov dword [ebp - 0x534], 1
jmp 0x10022abf
and dword [ebp - 0x534], 0
mov eax, dword [ebp - 0x40]
cmp dword [ebp - 0x40], 0xfffc
je 0x10022ad7
mov dword [ebp - 0x3c4], 1
jmp 0x10022ade
and dword [ebp - 0x3c4], 0
cmp dword [ebp - 0x3c4], 0x34bdac84
jg 0x10022af6
mov dword [ebp - 0x824], 1
jmp 0x10022afd
and dword [ebp - 0x824], 0
mov eax, 0x3f3ac9d7
test eax, eax
je 0x10022eef
mov dword [ebp - 0x708], 0xc6f4
mov dword [ebp - 0x1b0], 7
mov dword [ebp - 0x3d4], 1
mov dword [ebp - 0x9c8], 0x87dd7d55
mov dword [ebp - 0x9c4], 0x87dd7d55
mov dword [ebp - 0x9c0], 0x87dd7d55
mov dword [ebp - 0x9bc], 0x87dd7d55
mov dword [ebp - 0x99c], 0xaf36eaf0
mov dword [ebp - 0x998], 0xaf36eaf0
mov dword [ebp - 0x994], 0xaf36eaf0
mov dword [ebp - 0x990], 0xaf36eaf0
mov dword [ebp - 0x334], 0x6aa6f69a
mov dword [ebp - 0x8d8], 0x3d9e
mov dword [ebp - 0x60], 0
jmp 0x10022b9c
mov eax, dword [ebp - 0x60]
inc eax
mov dword [ebp - 0x60], eax
cmp dword [ebp - 0x60], 2
jge 0x10022bb2
mov eax, dword [ebp - 0x60]
mov dword [ebp + eax*4 - 0xa8c], 0xbacd6bce
jmp 0x10022b95
mov dword [ebp - 0x60], 0
jmp 0x10022bc2
mov eax, dword [ebp - 0x60]
inc eax
mov dword [ebp - 0x60], eax
cmp dword [ebp - 0x60], 1
jge 0x10022bd8
mov eax, dword [ebp - 0x60]
mov dword [ebp + eax*4 - 0x330], 0xe24e562a
jmp 0x10022bbb
mov eax, dword [ebp - 0xf0]
mov dword [ebp - 0xa84], eax
mov eax, 0x5ad3
test eax, eax
jne 0x10022bf9
mov dword [ebp - 0x64c], 1
jmp 0x10022c00
and dword [ebp - 0x64c], 0
cmp dword [ebp - 0x64c], 0x4ffd
jle 0x10022c18
mov dword [ebp - 0x3cc], 1
jmp 0x10022c1f
and dword [ebp - 0x3cc], 0
mov eax, dword [ebp - 0x40]
cmp dword [ebp - 0x3cc], eax
jge 0x10022c36
mov dword [ebp - 0x53c], 1
jmp 0x10022c3d
and dword [ebp - 0x53c], 0
mov eax, dword [ebp - 0x53c]
mov dword [ebp - 0xf0], eax
cmp dword [ebp - 0x3d4], 0
jne 0x10022c69
mov eax, dword [ebp - 0x708]
cmp eax, dword [ebp - 0x3d4]
jle 0x10022c69
and dword [ebp - 0x5f4], 0
jmp 0x10022c73
mov dword [ebp - 0x5f4], 1
cmp dword [ebp - 0x5f4], 0
jl 0x10022e94
mov eax, dword [ebp - 0x334]
inc eax
mov dword [ebp - 0x334], eax
jne 0x10022e70
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x330], 0
je 0x10022cb8
cmp dword [ebp - 0x3ec], 0
je 0x10022cb8
mov dword [ebp - 0x8f8], 1
jmp 0x10022cbf
and dword [ebp - 0x8f8], 0
mov eax, dword [ebp - 0xf0]
mov dword [ebp - 0xa54], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x3e4]
neg ecx
cmp ecx, dword [ebp + eax - 0x330]
jge 0x10022cee
mov dword [ebp - 0x3dc], 1
jmp 0x10022cf5
and dword [ebp - 0x3dc], 0
mov eax, dword [ebp - 0x318]
cmp dword [ebp - 0x3dc], eax
jg 0x10022d0f
mov dword [ebp - 0x544], 1
jmp 0x10022d16
and dword [ebp - 0x544], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x99c]
cmp dword [ebp - 0x544], eax
jg 0x10022d39
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0xa8c], 0
mov eax, dword [ebp - 0x3e4]
mov dword [ebp - 0xa90], eax
cmp dword [ebp - 0x40c], 0x4f1c
jg 0x10022d5d
mov dword [ebp - 0x67c], 1
jmp 0x10022d64
and dword [ebp - 0x67c], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x7e4]
mov dword [ebp - 0x710], eax
mov eax, dword [ebp - 0x67c]
mov dword [ebp - 0x830], eax
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x7e4]
inc eax
push 4
pop ecx
shl ecx, 0
mov dword [ebp + ecx - 0x7e4], eax
mov eax, dword [ebp - 0x710]
cmp eax, dword [ebp - 0x830]
jl 0x10022db8
mov dword [ebp - 0x54c], 1
jmp 0x10022dbf
and dword [ebp - 0x54c], 0
mov eax, dword [ebp - 0x3ec]
cmp dword [ebp - 0x54c], eax
jne 0x10022dd9
mov dword [ebp - 0x3f4], 1
jmp 0x10022de0
and dword [ebp - 0x3f4], 0
mov eax, dword [ebp - 0x718]
add eax, dword [ebp - 0x3f4]
cmp eax, dword [ebp - 0x1b0]
jge 0x10022e00
mov dword [ebp - 0x5fc], 1
jmp 0x10022e07
and dword [ebp - 0x5fc], 0
mov eax, dword [ebp - 0x1b0]
cmp dword [ebp - 0x5fc], eax
jne 0x10022e21
mov dword [ebp - 0x3fc], 1
jmp 0x10022e28
and dword [ebp - 0x3fc], 0
push 4
pop eax
imul eax, eax, 3
mov eax, dword [ebp + eax - 0x9c8]
cmp dword [ebp - 0x3fc], eax
jl 0x10022e52
cmp dword [ebp - 0x270], 0
je 0x10022e52
mov dword [ebp - 0x554], 1
jmp 0x10022e59
and dword [ebp - 0x554], 0
mov eax, dword [ebp - 0x40]
imul eax, dword [ebp - 0x554]
mov dword [ebp - 0x1b0], eax
cmp dword [ebp - 0x1b0], 0
mov eax, dword [ebp - 0x40]
push 4
pop ecx
imul ecx, ecx, 0
mov ecx, dword [ebp + ecx - 0x330]
lea eax, [ecx + eax + 0x5a49bcd9]
test eax, eax
jne 0x10022e94
and dword [ebp - 0x404], 0
jmp 0x10022e9e
mov dword [ebp - 0x404], 1
mov eax, dword [ebp - 0x8d8]
cmp dword [ebp - 0x404], eax
jle 0x10022ec5
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x99c], 0
jne 0x10022ec5
and dword [ebp - 0x654], 0
jmp 0x10022ecf
mov dword [ebp - 0x654], 1
mov eax, dword [ebp - 0x654]
sub eax, dword [ebp - 0x40]
add eax, dword [ebp - 0x40c]
imul eax, eax, 0xde7c
mov dword [ebp - 0x270], eax
jmp 0x10023086
mov dword [ebp - 0x30], 0xb7ca390a
mov eax, dword [ebp - 0x720]
mov dword [ebp - 0x318], eax
cmp dword [ebp - 0x318], 0
je 0x10023076
cmp dword [ebp - 0x30], 0
jne 0x10022f21
mov dword [ebp - 0x604], 1
jmp 0x10022f28
and dword [ebp - 0x604], 0
cmp dword [ebp - 0x30], 0
jne 0x10022f32
cmp dword [ebp - 0x30], 0
imul eax, dword [ebp - 0x30], 0x87ea
cmp eax, dword [ebp - 0x30]
jg 0x10022f4a
mov dword [ebp - 0x55c], 1
jmp 0x10022f51
and dword [ebp - 0x55c], 0
mov eax, dword [ebp - 0x55c]
inc eax
cmp eax, dword [ebp - 0x30]
je 0x10022f69
mov dword [ebp - 0x414], 1
jmp 0x10022f70
and dword [ebp - 0x414], 0
mov eax, dword [ebp - 0x414]
sub eax, dword [ebp - 0x30]
je 0x10022f8d
cmp dword [ebp - 0x30], 0
je 0x10022f8d
mov dword [ebp - 0x41c], 1
jmp 0x10022f94
and dword [ebp - 0x41c], 0
mov eax, dword [ebp - 0x604]
cmp eax, dword [ebp - 0x41c]
jge 0x10022fae
mov dword [ebp - 0x564], 1
jmp 0x10022fb5
and dword [ebp - 0x564], 0
cmp dword [ebp - 0x564], 0
jne 0x10022fca
mov dword [ebp - 0x424], 1
jmp 0x10022fd1
and dword [ebp - 0x424], 0
mov eax, dword [ebp - 0x83c]
cmp dword [ebp - 0x424], eax
jle 0x10022feb
mov dword [ebp - 0x680], 1
jmp 0x10022ff2
and dword [ebp - 0x680], 0
mov eax, dword [ebp - 0x680]
mov dword [ebp - 0x270], eax
cmp dword [ebp - 0x270], 0xcea37410
jne 0x10023016
mov dword [ebp - 0x728], 1
jmp 0x1002301d
and dword [ebp - 0x728], 0
mov eax, dword [ebp - 0x90c]
mov dword [ebp - 0xa9c], eax
mov eax, dword [ebp - 0x30]
imul eax, dword [ebp - 0x730]
cmp eax, dword [ebp - 0x848]
jle 0x10023047
mov dword [ebp - 0x42c], 1
jmp 0x1002304e
and dword [ebp - 0x42c], 0
mov eax, dword [ebp - 0x42c]
add eax, 0xcb7b
je 0x1002305f
cmp dword [ebp - 0x30], 0
mov eax, 0xdd06fed4
dec eax
cmp eax, dword [ebp - 0x30]
jl 0x10023076
mov dword [ebp - 0x56c], 1
jmp 0x1002307d
and dword [ebp - 0x56c], 0
mov eax, dword [ebp - 0x56c]
mov dword [ebp - 0x30], eax
xor eax, eax
mov ecx, dword [ebp - 0x1b8]
mov word [ebp + ecx*2 - 0x9e4], ax
jmp 0x100227ff
cmp dword [ebp - 0x628], 0
je 0x10026c7c
mov dword [ebp - 0x10c], 0
mov dword [ebp - 0x8e0], 0xab9737e0
mov dword [ebp - 0x854], 0
mov dword [ebp - 0x2f4], 0
jmp 0x100230df
mov eax, dword [ebp - 0x2f4]
inc eax
mov dword [ebp - 0x2f4], eax
cmp dword [ebp - 0x2f4], 4
jge 0x100230fb
mov eax, dword [ebp - 0x2f4]
mov dword [ebp + eax*4 - 0xaf4], 0xffffffff
jmp 0x100230d2
mov dword [ebp - 0x10c], 3
jmp 0x10023114
mov eax, dword [ebp - 0x10c]
dec eax
mov dword [ebp - 0x10c], eax
cmp dword [ebp - 0x10c], 0
jl 0x100234fc
mov dword [ebp - 0x24], 5
mov dword [ebp - 0x434], 0x77ac
mov dword [ebp - 0x738], str.ecxe_pbbxbcnl_nkmb_ruwln_gjnjz_yngdi_dwxeb
cmp dword [ebp - 0x434], 0x7b3d
jle 0x100231ec
push 0x22d5
push 0x3d2
push 0
push 0
push 0xbe0
push 0xba5
call dword [sym.imp.USER32.dll_ToUnicode]
and dword [ebp - 0x1c0], 0
jmp 0x10023180
mov eax, dword [ebp - 0x1c0]
inc eax
mov dword [ebp - 0x1c0], eax
cmp dword [ebp - 0x1c0], 0x1e49
jge 0x100231e1
and dword [ebp - 0x278], 0
jmp 0x100231a2
mov eax, dword [ebp - 0x278]
inc eax
mov dword [ebp - 0x278], eax
cmp dword [ebp - 0x278], 0x1f5f
jge 0x100231df
mov eax, dword [ebp - 0x1c0]
or eax, dword [ebp - 0x278]
cdq
mov dword [ebp - 0x7f0], eax
mov dword [ebp - 0x7ec], edx
push dword [ebp - 0x7ec]
push dword [ebp - 0x7f0]
mov ecx, 0x1006f038
call fcn.10003f1c
jmp 0x10023195
jmp 0x10023173
push 0x130b
call dword [sym.imp.GDI32.dll_GetStockObject]
mov dword [ebp - 0x748], 0x75dd3610
mov dword [ebp - 4], 0xb
cmp dword [ebp - 0x434], 0x76c1
jge 0x10023219
mov edx, dword [ebp - 0x738]
mov ecx, 0x1006f038
call fcn.1000567a
jmp 0x10023235
or dword [ebp - 4], 0xffffffff
jmp 0x1002323f
push 4
pop eax
imul eax, eax, 3
mov eax, dword [ebp + eax - 0xaf4]
cmp eax, dword [ebp - 0x24]
jl 0x1002325d
mov dword [ebp - 0x57c], 1
jmp 0x10023264
and dword [ebp - 0x57c], 0
cmp dword [ebp - 0x10c], 0
jne 0x10023293
push 0xfffffffffffffff8
pop eax
test eax, eax
jne 0x10023293
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0xaf4], 0
jne 0x10023293
cmp dword [ebp - 0x24], 0
jne 0x10023293
and dword [ebp - 0x60c], 0
jmp 0x1002329d
mov dword [ebp - 0x60c], 1
mov eax, dword [ebp - 0x24]
cmp dword [ebp - 0x60c], eax
jl 0x100232b4
mov dword [ebp - 0x43c], 1
jmp 0x100232bb
and dword [ebp - 0x43c], 0
mov eax, dword [ebp - 0x8e0]
cmp dword [ebp - 0x43c], eax
je 0x100232d5
mov dword [ebp - 0x574], 1
jmp 0x100232dc
and dword [ebp - 0x574], 0
mov eax, dword [ebp - 0x24]
cmp eax, dword [ebp - 0x574]
jne 0x100232f3
mov dword [ebp - 0x444], 1
jmp 0x100232fa
and dword [ebp - 0x444], 0
mov eax, dword [ebp - 0x24]
cmp dword [ebp - 0x444], eax
jge 0x10023314
cmp dword [ebp - 0x24], 0
jne 0x10023314
and dword [ebp - 0x65c], 0
jmp 0x1002331e
mov dword [ebp - 0x65c], 1
mov eax, dword [ebp - 0x24]
cmp dword [ebp - 0x65c], eax
jge 0x10023335
mov dword [ebp - 0x44c], 1
jmp 0x1002333c
and dword [ebp - 0x44c], 0
mov eax, dword [ebp - 0x24]
cmp dword [ebp - 0x44c], eax
jl 0x10023353
mov dword [ebp - 0x454], 1
jmp 0x1002335a
and dword [ebp - 0x454], 0
mov eax, dword [ebp - 0x57c]
cmp eax, dword [ebp - 0x454]
je 0x10023374
mov dword [ebp - 0x740], 1
jmp 0x1002337b
and dword [ebp - 0x740], 0
or eax, 0xffffffff
je 0x100233a6
mov byte [ebp - 0xa5], 0
movzx eax, byte [ebp - 0xa5]
test eax, eax
je 0x100233a1
push 0
push 0
push 0x14a9
call dword [sym.imp.KERNEL32.dll_OpenFileMappingA]
jmp 0x100234f7
mov dword [ebp - 0x614], 0xfffffffa
mov dword [ebp - 0x24], 0
jmp 0x100233c0
mov eax, dword [ebp - 0x24]
inc eax
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 3
jg 0x100234c7
mov dword [ebp - 0x46c], 0xc73f
mov eax, dword [ebp - 0x614]
mov dword [ebp - 0xa60], eax
mov eax, 0xfff6
sub eax, dword [ebp - 0x854]
cmp eax, dword [ebp - 0x614]
jne 0x100233ff
mov dword [ebp - 0x45c], 1
jmp 0x10023406
and dword [ebp - 0x45c], 0
mov eax, dword [ebp - 0x24]
cmp dword [ebp - 0x45c], eax
jge 0x1002341d
mov dword [ebp - 0x584], 1
jmp 0x10023424
and dword [ebp - 0x584], 0
mov eax, dword [ebp - 0x584]
add eax, 0x2c27f6ad
push 4
pop ecx
imul ecx, ecx, 3
cmp dword [ebp + ecx - 0xaf4], eax
jne 0x1002344a
mov dword [ebp - 0x464], 1
jmp 0x10023451
and dword [ebp - 0x464], 0
cmp dword [ebp - 0x464], 0x3d9c
jge 0x10023469
mov dword [ebp - 0x688], 1
jmp 0x10023470
and dword [ebp - 0x688], 0
mov eax, dword [ebp - 0x46c]
add eax, dword [ebp - 0x688]
cmp eax, dword [ebp - 0x46c]
jl 0x10023490
mov dword [ebp - 0x58c], 1
jmp 0x10023497
and dword [ebp - 0x58c], 0
mov eax, dword [ebp - 0x58c]
mov dword [ebp - 0x748], eax
mov byte [ebp - 0xce], 0
movzx eax, byte [ebp - 0xce]
test eax, eax
je 0x100234c2
push 0
push 0x10f0
call dword [sym.imp.KERNEL32.dll_GetCPInfo]
jmp 0x100233b9
mov byte [ebp - 0xad], 0
movzx eax, byte [ebp - 0xad]
test eax, eax
je 0x100234f7
push 0x22d5
push 0x3d2
push 0
push 0
push 0xbe0
push 0xba5
call dword [sym.imp.USER32.dll_ToUnicode]
jmp 0x10023107
mov dword [ebp - 0x474], 0xbef
mov dword [ebp - 0x900], str.ouxutofi_rgdrduc_wswtacy
cmp dword [ebp - 0x474], 0xce9
jle 0x1002360f
push 0
call dword [sym.imp.GDI32.dll_CreateBrushIndirect]
and dword [ebp - 0x280], 0
jmp 0x1002353e
mov eax, dword [ebp - 0x280]
inc eax
mov dword [ebp - 0x280], eax
cmp dword [ebp - 0x280], 0x1110
jge 0x10023607
and dword [ebp - 0x1c8], 0
jmp 0x10023564
mov eax, dword [ebp - 0x1c8]
inc eax
mov dword [ebp - 0x1c8], eax
cmp dword [ebp - 0x1c8], 0x1819
jge 0x10023602
and dword [ebp - 0x2d4], 0
jmp 0x1002358a
mov eax, dword [ebp - 0x2d4]
inc eax
mov dword [ebp - 0x2d4], eax
cmp dword [ebp - 0x2d4], 0x294d
jge 0x100235fd
and dword [ebp - 0x1d0], 0
jmp 0x100235ac
mov eax, dword [ebp - 0x1d0]
inc eax
mov dword [ebp - 0x1d0], eax
cmp dword [ebp - 0x1d0], 0x7439
jge 0x100235fb
mov eax, dword [ebp - 0x1c8]
cdq
idiv dword [ebp - 0x2d4]
mov eax, edx
cdq
idiv dword [ebp - 0x1d0]
mov eax, dword [ebp - 0x280]
sub eax, edx
cdq
mov dword [ebp - 0x7fc], eax
mov dword [ebp - 0x7f8], edx
push dword [ebp - 0x7f8]
push dword [ebp - 0x7fc]
mov ecx, 0x1006f038
call fcn.10003f1c
jmp 0x1002359f
jmp 0x1002357d
jmp 0x10023557
jmp 0x10023531
push 0
call dword [sym.imp.KERNEL32.dll_FreeLibrary]
mov dword [ebp - 4], 0xd
cmp dword [ebp - 0x474], 0x949
jge 0x10023632
mov edx, dword [ebp - 0x900]
mov ecx, 0x1006f038
call fcn.1000567a
jmp 0x1002364e
or dword [ebp - 4], 0xffffffff
jmp 0x10023658
mov dword [ebp - 0xab8], 0xebb0cb8c
mov dword [ebp - 0xa68], 0x551d
mov dword [ebp - 0x54], 0
jmp 0x1002367c
mov eax, dword [ebp - 0x54]
inc eax
mov dword [ebp - 0x54], eax
cmp dword [ebp - 0x54], 1
jge 0x10023692
mov eax, dword [ebp - 0x54]
mov dword [ebp + eax*4 - 0x9e8], 0xfffffff9
jmp 0x10023675
mov dword [ebp - 0x54], 0
jmp 0x100236a2
mov eax, dword [ebp - 0x54]
inc eax
mov dword [ebp - 0x54], eax
cmp dword [ebp - 0x54], 3
jge 0x100236b8
mov eax, dword [ebp - 0x54]
mov dword [ebp + eax*4 - 0x940], 0xfffffffc
jmp 0x1002369b
mov byte [ebp - 0xd0], 0
movzx eax, byte [ebp - 0xd0]
test eax, eax
je 0x100236dc
push 0x15ad
push 0xf03
push 0
call dword [sym.imp.GDI32.dll_OffsetRgn]
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0x940], 0
jmp 0x1002370a
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x940]
inc eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x940], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x940], 0
jg 0x10023942
mov dword [ebp - 0x1d8], 1
mov dword [ebp - 0x1d8], 0
jmp 0x10023741
mov eax, dword [ebp - 0x1d8]
dec eax
mov dword [ebp - 0x1d8], eax
cmp dword [ebp - 0x1d8], 0
jl 0x10023923
mov dword [ebp - 0x47c], 0xc79e
mov dword [ebp - 0x61c], 0xb59
mov dword [ebp - 0x860], str.lzfceihx_qrsnzoqqi_xswwqxia_qatdpn_gasarxl_pakc_jzjsba_hwsdcfsni
cmp dword [ebp - 0x61c], 0xce6
jle 0x100238a1
and dword [ebp - 0x2ec], 0
jmp 0x10023792
mov eax, dword [ebp - 0x2ec]
inc eax
mov dword [ebp - 0x2ec], eax
cmp dword [ebp - 0x2ec], 0x2dae
jge 0x10023886
and dword [ebp - 0x1e0], 0
jmp 0x100237b8
mov eax, dword [ebp - 0x1e0]
inc eax
mov dword [ebp - 0x1e0], eax
cmp dword [ebp - 0x1e0], 0xf7d
jge 0x10023881
and dword [ebp - 0x288], 0
jmp 0x100237de
mov eax, dword [ebp - 0x288]
inc eax
mov dword [ebp - 0x288], eax
cmp dword [ebp - 0x288], 0x7a7b
jge 0x1002387c
and dword [ebp - 0x1e8], 0
jmp 0x10023804
mov eax, dword [ebp - 0x1e8]
inc eax
mov dword [ebp - 0x1e8], eax
cmp dword [ebp - 0x1e8], 0x3d6e
jge 0x10023877
mov eax, dword [ebp - 0x2ec]
mov ecx, dword [ebp - 0x1e0]
shl eax, cl
mov ecx, dword [ebp - 0x288]
sar eax, cl
and eax, dword [ebp - 0x1e8]
cdq
mov dword [ebp - 0x808], eax
mov dword [ebp - 0x804], edx
push dword [ebp - 0x804]
push dword [ebp - 0x808]
lea ecx, [ebp - 0xc70]
call fcn.10002769
pop ecx
pop ecx
mov dword [ebp - 0x750], eax
mov ecx, dword [ebp - 0x750]
call fcn.10003efc
push eax
call fcn.1003ed0a
pop ecx
lea ecx, [ebp - 0xc70]
call fcn.100013ad
jmp 0x100237f7
jmp 0x100237d1
jmp 0x100237ab
jmp 0x10023785
push 0x136a
push 0
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_Polyline]
mov byte [ebp - 0xb5], 0
mov dword [ebp - 4], 0xf
cmp dword [ebp - 0x61c], 0xacd
jge 0x100238c7
push dword [ebp - 0x860]
call fcn.1003ed0a
pop ecx
jmp 0x100238e3
or dword [ebp - 4], 0xffffffff
jmp 0x100238ed
movzx eax, byte [ebp - 0xb5]
test eax, eax
je 0x10023911
push 0x1156
push 0
push 0x152d
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDlgItemTextA]
mov eax, dword [ebp - 0x47c]
inc eax
mov dword [ebp - 0x47c], eax
jmp 0x10023734
mov byte [ebp - 0xc7], 0
movzx eax, byte [ebp - 0xc7]
test eax, eax
je 0x1002393d
push 0
call dword [sym.imp.KERNEL32.dll_GetFileAttributesA]
jmp 0x100236ef
mov dword [ebp - 0x4e4], 0x2fe1
mov dword [ebp - 0x884], str.djlxdk_gks_oluonwtv_doxukvyd_qarljbre_zeiyywnv_evla
cmp dword [ebp - 0x4e4], 0x33c4
jle 0x10023a75
call dword [sym.imp.GDI32.dll_GdiFlush]
and dword [ebp - 0x290], 0
jmp 0x10023982
mov eax, dword [ebp - 0x290]
inc eax
mov dword [ebp - 0x290], eax
cmp dword [ebp - 0x290], 0xab4
jge 0x10023a75
and dword [ebp - 0x1f8], 0
jmp 0x100239a8
mov eax, dword [ebp - 0x1f8]
inc eax
mov dword [ebp - 0x1f8], eax
cmp dword [ebp - 0x1f8], 0x3e25
jge 0x10023a70
and dword [ebp - 0x2dc], 0
jmp 0x100239ce
mov eax, dword [ebp - 0x2dc]
inc eax
mov dword [ebp - 0x2dc], eax
cmp dword [ebp - 0x2dc], 0x4e84
jge 0x10023a6b
and dword [ebp - 0x1f0], 0
jmp 0x100239f4
mov eax, dword [ebp - 0x1f0]
inc eax
mov dword [ebp - 0x1f0], eax
cmp dword [ebp - 0x1f0], 0x4dc4
jge 0x10023a66
mov eax, dword [ebp - 0x2dc]
cdq
idiv dword [ebp - 0x1f0]
mov eax, dword [ebp - 0x290]
sub eax, dword [ebp - 0x1f8]
or eax, edx
cdq
mov dword [ebp - 0x814], eax
mov dword [ebp - 0x810], edx
push dword [ebp - 0x810]
push dword [ebp - 0x814]
lea ecx, [ebp - 0xbb0]
call fcn.10002769
pop ecx
pop ecx
mov dword [ebp - 0x758], eax
mov ecx, dword [ebp - 0x758]
call fcn.10003efc
push eax
call fcn.1003ed0a
pop ecx
lea ecx, [ebp - 0xbb0]
call fcn.100013ad
jmp 0x100239e7
jmp 0x100239c1
jmp 0x1002399b
jmp 0x10023975
mov dword [ebp - 0x4a4], 0xae8c9f36
mov dword [ebp - 0xa70], 0xcb24ce55
mov dword [ebp - 0x200], 0xda585283
mov dword [ebp - 0x904], 0x451d52aa
mov dword [ebp - 0x878], 0xc4f3f7e8
mov dword [ebp - 0x11c], 0xbc56e700
mov dword [ebp - 0x48c], 0xffffffff
mov dword [ebp - 0x298], 1
mov dword [ebp - 0x768], 0xcc1031c3
mov dword [ebp - 0x2c4], 0xfffb
mov dword [ebp - 0x208], 0x557bc775
mov dword [ebp - 0x2a0], 0xfffffff6
mov dword [ebp - 0x5c4], 0xc58f
mov dword [ebp - 0x14], 0
jmp 0x10023b07
mov eax, dword [ebp - 0x14]
inc eax
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 1
jge 0x10023b1d
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x104], 1
jmp 0x10023b00
mov dword [ebp - 0x14], 0
jmp 0x10023b2d
mov eax, dword [ebp - 0x14]
inc eax
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 3
jge 0x10023b43
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x6cc], 0
jmp 0x10023b26
mov dword [ebp - 0x14], 0
jmp 0x10023b53
mov eax, dword [ebp - 0x14]
inc eax
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 3
jge 0x10023b69
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x9a8], 0x7dc510ce
jmp 0x10023b4c
mov dword [ebp - 0x14], 0
jmp 0x10023b79
mov eax, dword [ebp - 0x14]
inc eax
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 2
jge 0x10023b8f
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0xafc], 0x4a1f
jmp 0x10023b72
push 0xfffffffffffffffd
pop eax
test eax, eax
je 0x10023bab
cmp dword [ebp - 0x11c], 0
je 0x10023bab
mov dword [ebp - 0x594], 1
jmp 0x10023bb2
and dword [ebp - 0x594], 0
mov eax, dword [ebp - 0x2a0]
mov dword [ebp - 0x8e8], eax
mov eax, dword [ebp - 0x594]
mov dword [ebp - 0x760], eax
mov eax, dword [ebp - 0x2a0]
dec eax
mov dword [ebp - 0x2a0], eax
mov eax, dword [ebp - 0x8e8]
cmp eax, dword [ebp - 0x760]
jge 0x10023bf1
mov dword [ebp - 0x484], 1
jmp 0x10023bf8
and dword [ebp - 0x484], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x104]
sub eax, dword [ebp - 0x484]
mov dword [ebp - 0x200], eax
je 0x10023c2e
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0x6cc], 0
je 0x10023c2e
mov dword [ebp - 0x664], 1
jmp 0x10023c35
and dword [ebp - 0x664], 0
mov eax, dword [ebp - 0x48c]
cmp dword [ebp - 0x664], eax
jl 0x10023c4f
mov dword [ebp - 0x86c], 1
jmp 0x10023c56
and dword [ebp - 0x86c], 0
mov eax, dword [ebp - 0x2c4]
inc eax
mov dword [ebp - 0x2c4], eax
mov eax, dword [ebp - 0x2c4]
mov dword [ebp - 0xac0], eax
mov eax, dword [ebp - 0x208]
mov dword [ebp - 0xa78], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x6cc]
mov dword [ebp - 0xb14], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x48c]
cmp ecx, dword [ebp + eax - 0x104]
jge 0x10023caf
mov dword [ebp - 0x59c], 1
jmp 0x10023cb6
and dword [ebp - 0x59c], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x104]
sub eax, dword [ebp - 0x59c]
je 0x10023ce0
cmp dword [ebp - 0x768], 0
je 0x10023ce0
mov dword [ebp - 0x494], 1
jmp 0x10023ce7
and dword [ebp - 0x494], 0
mov eax, dword [ebp - 0x298]
mov ecx, dword [ebp - 0x494]
mov edx, dword [ebp - 0x298]
inc edx
mov dword [ebp - 0x298], edx
cmp eax, ecx
jg 0x10023d19
mov eax, 0xde5a
test eax, eax
je 0x10023d19
mov dword [ebp - 0x624], 1
jmp 0x10023d20
and dword [ebp - 0x624], 0
mov eax, dword [ebp - 0x904]
cmp dword [ebp - 0x624], eax
jne 0x10023d3a
mov dword [ebp - 0x49c], 1
jmp 0x10023d41
and dword [ebp - 0x49c], 0
mov eax, dword [ebp - 0x208]
imul eax, dword [ebp - 0x49c]
test eax, eax
je 0x10023fc2
mov eax, 0x6278
test eax, eax
je 0x10023fc2
mov dword [ebp - 0x5a4], 0x7628d16e
mov dword [ebp - 0x2fc], 0
jmp 0x10023d86
mov eax, dword [ebp - 0x2fc]
inc eax
mov dword [ebp - 0x2fc], eax
cmp dword [ebp - 0x2fc], 3
jge 0x10023da2
mov eax, dword [ebp - 0x2fc]
mov dword [ebp + eax*4 - 0x970], 0xaaef4046
jmp 0x10023d79
or eax, 0xffffffff
je 0x10023e57
mov eax, dword [ebp - 0x11c]
mov dword [ebp - 0x200], eax
mov eax, dword [ebp - 0x200]
cmp eax, dword [ebp - 0x298]
jle 0x10023dd1
mov dword [ebp - 0x770], 1
jmp 0x10023dd8
and dword [ebp - 0x770], 0
cmp dword [ebp - 0x4a4], 0
je 0x10023dfd
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x9a8], 0
je 0x10023dfd
mov dword [ebp - 0x328], 1
jmp 0x10023e04
and dword [ebp - 0x328], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x328]
mov dword [ebp + eax - 0x104], ecx
mov eax, dword [ebp - 0x328]
mov dword [ebp - 0x5a4], eax
mov eax, dword [ebp - 0x5a4]
mov dword [ebp - 0xa80], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x970]
mov dword [ebp - 0xac8], eax
cmp dword [ebp - 0x878], 0
je 0x10023e57
mov dword [ebp - 0x694], 1
jmp 0x10023e5e
and dword [ebp - 0x694], 0
mov eax, dword [ebp - 0x4a4]
cmp dword [ebp - 0x694], eax
jg 0x10023e78
mov dword [ebp - 0x778], 1
jmp 0x10023e7f
and dword [ebp - 0x778], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x6cc]
mov dword [ebp - 0xaa0], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x208]
cmp ecx, dword [ebp + eax - 0x970]
jg 0x10023eb3
mov dword [ebp - 0x4ac], 1
jmp 0x10023eba
and dword [ebp - 0x4ac], 0
push 4
pop eax
shl eax, 1
mov ecx, dword [ebp - 0x208]
imul ecx, dword [ebp - 0x4ac]
cmp ecx, dword [ebp + eax - 0x6cc]
jl 0x10023ee1
mov dword [ebp - 0x5ac], 1
jmp 0x10023ee8
and dword [ebp - 0x5ac], 0
mov eax, dword [ebp - 0x2c4]
cmp dword [ebp - 0x5ac], eax
jne 0x10023f02
mov dword [ebp - 0x4b4], 1
jmp 0x10023f09
and dword [ebp - 0x4b4], 0
push 4
pop eax
shl eax, 1
mov ecx, dword [ebp - 0x4b4]
mov dword [ebp + eax - 0x970], ecx
mov eax, 0xf9cd
imul eax, eax, 0xf1a7
cmp eax, dword [ebp - 0x11c]
jg 0x10023f3a
mov dword [ebp - 0x62c], 1
jmp 0x10023f41
and dword [ebp - 0x62c], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x9a8]
cmp dword [ebp - 0x62c], eax
je 0x10023f72
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x970], 0
je 0x10023f72
mov dword [ebp - 0x4bc], 1
jmp 0x10023f79
and dword [ebp - 0x4bc], 0
mov eax, dword [ebp - 0x4bc]
mov dword [ebp - 0x11c], eax
cmp dword [ebp - 0x11c], 0
je 0x10023fa3
mov eax, 0x4e98
test eax, eax
je 0x10023fa3
mov dword [ebp - 0x5b4], 1
jmp 0x10023faa
and dword [ebp - 0x5b4], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x5b4]
mov dword [ebp + eax - 0xafc], ecx
jmp 0x10024168
mov dword [ebp - 0x4d4], 0x67d996f0
mov dword [ebp - 0x4cc], 9
mov dword [ebp - 0x780], 0xfffffffe
mov dword [ebp - 0x210], 0
jmp 0x10023ff9
mov eax, dword [ebp - 0x210]
inc eax
mov dword [ebp - 0x210], eax
cmp dword [ebp - 0x210], 1
jge 0x10024015
mov eax, dword [ebp - 0x210]
mov dword [ebp + eax*4 - 0x320], 7
jmp 0x10023fec
mov eax, dword [ebp - 0x4d4]
cmp eax, dword [ebp - 0x2a0]
jg 0x1002402f
mov dword [ebp - 0x5bc], 1
jmp 0x10024036
and dword [ebp - 0x5bc], 0
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x320], 0xd0942df0
je 0x10024065
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x104], 0
je 0x10024065
mov dword [ebp - 0x4c4], 1
jmp 0x1002406c
and dword [ebp - 0x4c4], 0
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x9a8]
cmp dword [ebp - 0x4c4], eax
jg 0x1002408c
mov dword [ebp - 0x66c], 1
jmp 0x10024093
and dword [ebp - 0x66c], 0
mov eax, dword [ebp - 0x66c]
mov dword [ebp - 0x4cc], eax
mov eax, dword [ebp - 0x4cc]
add eax, dword [ebp - 0x5bc]
cmp dword [ebp - 0x4d4], eax
jge 0x100240bf
mov dword [ebp - 0x8f0], 1
jmp 0x100240c6
and dword [ebp - 0x8f0], 0
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x6cc]
mov dword [ebp - 0xb18], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x6cc], 0x4b7f
jge 0x100240f7
mov dword [ebp - 0x634], 1
jmp 0x100240fe
and dword [ebp - 0x634], 0
cmp dword [ebp - 0x634], 0
ja 0x10024117
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x320], 0
je 0x10024133
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x320], 0
je 0x10024133
mov dword [ebp - 0x4dc], 1
jmp 0x1002413a
and dword [ebp - 0x4dc], 0
mov eax, dword [ebp - 0x4dc]
mov dword [ebp - 0x5c4], eax
mov eax, dword [ebp - 0x5c4]
mov dword [ebp - 0x780], eax
mov byte [ebp - 0x79], 0
movzx eax, byte [ebp - 0x79]
test eax, eax
je 0x10024168
push 0
push 0
call dword [sym.imp.ADVAPI32.dll_EqualSid]
mov dword [ebp - 4], 0x11
cmp dword [ebp - 0x4e4], 0x2e05
jge 0x10024187
push dword [ebp - 0x884]
call fcn.1003ed0a
pop ecx
jmp 0x100241a3
or dword [ebp - 4], 0xffffffff
jmp 0x100241ad
mov byte [ebp - 0x158], 0xb
mov byte [ebp - 0x157], 0xfc
mov byte [ebp - 0x156], 0xa
mov byte [ebp - 0x155], 0x17
mov byte [ebp - 0x154], 1
mov byte [ebp - 0x153], 0x17
mov byte [ebp - 0x152], 0xd
mov byte [ebp - 0x151], 0x16
mov byte [ebp - 0x150], 3
mov byte [ebp - 0x14f], 0x23
mov byte [ebp - 0x14e], 2
mov byte [ebp - 0x14d], 0x24
mov byte [ebp - 0x14c], 5
mov byte [ebp - 0x14b], 0x1b
mov byte [ebp - 0x14a], 9
mov byte [ebp - 0x149], 0xb
mov byte [ebp - 0x148], 8
mov byte [ebp - 0x147], 0
mov byte [ebp - 0x146], 4
mov byte [ebp - 0x145], 0x16
mov byte [ebp - 0x144], 0xc
mov byte [ebp - 0x143], 1
mov byte [ebp - 0x142], 6
mov byte [ebp - 0x141], 0x10
mov byte [ebp - 0x140], 3
mov byte [ebp - 0x13f], 0x5f
mov byte [ebp - 0x13e], 0xad
mov byte [ebp - 0x13d], 0x29
mov byte [ebp - 0x13c], 7
mov byte [ebp - 0x13b], 0x22
mov byte [ebp - 0x13a], 0
mov byte [ebp - 0x139], 6
mov dword [ebp - 0x2c8], 0xc8094a18
mov dword [ebp - 0x218], 0
jmp 0x100242b0
mov eax, dword [ebp - 0x218]
inc eax
mov dword [ebp - 0x218], eax
cmp dword [ebp - 0x218], 3
jge 0x100242cc
mov eax, dword [ebp - 0x218]
mov dword [ebp + eax*4 - 0xb3c], 0xb319
jmp 0x100242a3
mov dword [ebp - 0x2c8], 2
jmp 0x100242e5
mov eax, dword [ebp - 0x2c8]
dec eax
mov dword [ebp - 0x2c8], eax
cmp dword [ebp - 0x2c8], 0
jl 0x10024378
mov dword [ebp - 0x108], 0xffffffff
mov dword [ebp - 0x788], 0x9d692360
mov dword [ebp - 0x108], 2
jmp 0x1002431f
mov eax, dword [ebp - 0x108]
dec eax
mov dword [ebp - 0x108], eax
cmp dword [ebp - 0x108], 0
jl 0x10024373
mov eax, dword [ebp - 0x108]
cmp dword [ebp + eax*4 - 0xb3c], 0xfffffffd
jle 0x10024344
mov dword [ebp - 0x68c], 1
jmp 0x1002434b
and dword [ebp - 0x68c], 0
mov eax, dword [ebp - 0x68c]
mov dword [ebp - 0x788], eax
mov byte [ebp - 0xcf], 0
movzx eax, byte [ebp - 0xcf]
test eax, eax
je 0x10024371
push 0
call dword [sym.imp.KERNEL32.dll_LocalFree]
jmp 0x10024312
jmp 0x100242d8
xor eax, eax
inc eax
shl eax, 0
movzx eax, byte [ebp + eax - 0x158]
and eax, 0x99
xor ecx, ecx
inc ecx
shl ecx, 0
movzx ecx, byte [ebp + ecx - 0x158]
or ecx, 0x99
sub ecx, eax
xor eax, eax
inc eax
imul eax, eax, 0
movzx eax, byte [ebp + eax - 0x158]
mov byte [ebp + eax - 0x934], cl
mov dword [ebp - 0x4ec], 0x2cb3
mov dword [ebp - 0x908], str.gjlutvrvj_fbqmxpks_khdxn_mtn
cmp dword [ebp - 0x4ec], 0x2e16
jle 0x1002448f
and dword [ebp - 0x220], 0
jmp 0x100243f0
mov eax, dword [ebp - 0x220]
inc eax
mov dword [ebp - 0x220], eax
cmp dword [ebp - 0x220], 0x30c7
jge 0x10024485
and dword [ebp - 0x2a8], 0
jmp 0x10024416
mov eax, dword [ebp - 0x2a8]
inc eax
mov dword [ebp - 0x2a8], eax
cmp dword [ebp - 0x2a8], 0x69fe
jge 0x10024480
and dword [ebp - 0x228], 0
jmp 0x10024438
mov eax, dword [ebp - 0x228]
inc eax
mov dword [ebp - 0x228], eax
cmp dword [ebp - 0x228], 0x52bb
jge 0x1002447e
mov eax, dword [ebp - 0x220]
imul eax, dword [ebp - 0x2a8]
mov ecx, dword [ebp - 0x228]
sar eax, cl
cdq
mov dword [ebp - 0x820], eax
mov dword [ebp - 0x81c], edx
push dword [ebp - 0x81c]
push dword [ebp - 0x820]
mov ecx, 0x1006f038
call fcn.10003f1c
jmp 0x1002442b
jmp 0x10024409
jmp 0x100243e3
push 0
push 0
call dword [sym.imp.USER32.dll_UnregisterClassA]
mov dword [ebp - 0x9ec], 0
mov dword [ebp - 4], 0x13
cmp dword [ebp - 0x4ec], 0x296f
jge 0x100244bc
mov edx, dword [ebp - 0x908]
mov ecx, 0x1006f038
call fcn.1000567a
jmp 0x100244d8
or dword [ebp - 4], 0xffffffff
jmp 0x100244e2
mov dword [ebp - 0x9f0], 0
mov dword [ebp - 0x310], 0xcd3624b6
mov dword [ebp - 0x798], 0x9be99b96
mov dword [ebp - 0x8cc], 0x1e69
mov dword [ebp - 0x18], 0
jmp 0x1002451a
mov eax, dword [ebp - 0x18]
inc eax
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 3
jge 0x10024530
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0xa40], 0x1b3c692b
jmp 0x10024513
mov dword [ebp - 0x18], 0
jmp 0x10024540
mov eax, dword [ebp - 0x18]
inc eax
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 4
jge 0x10024556
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x920], 0
jmp 0x10024539
mov dword [ebp - 0x18], 0
jmp 0x10024566
mov eax, dword [ebp - 0x18]
inc eax
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 4
jge 0x1002457c
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0xb70], 0
jmp 0x1002455f
mov dword [ebp - 0x5cc], 0x7017
mov dword [ebp - 0x790], str.qxv_leuk_cpt_wwbh_cxosiaqdy_jloa_efixzcmj_tgcgf_pdm_awq_ieqrsbsv_pnvdhi_snagy_dsnczu
cmp dword [ebp - 0x5cc], 0x70b3
jle 0x10024613
and dword [ebp - 0x2d0], 0
jmp 0x100245b2
mov eax, dword [ebp - 0x2d0]
inc eax
mov dword [ebp - 0x2d0], eax
cmp dword [ebp - 0x2d0], 0x1c5c
jge 0x10024613
and dword [ebp - 0x230], 0
jmp 0x100245d4
mov eax, dword [ebp - 0x230]
inc eax
mov dword [ebp - 0x230], eax
cmp dword [ebp - 0x230], 0x6ba1
jge 0x10024611
mov eax, dword [ebp - 0x2d0]
and eax, dword [ebp - 0x230]
cdq
mov dword [ebp - 0x82c], eax
mov dword [ebp - 0x828], edx
push dword [ebp - 0x828]
push dword [ebp - 0x82c]
mov ecx, 0x1006f038
call fcn.10003f1c
jmp 0x100245c7
jmp 0x100245a5
mov dword [ebp - 0x18], 0
jmp 0x10024623
mov eax, dword [ebp - 0x18]
inc eax
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 4
jge 0x10024639
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0xb30], 0xffffffff
jmp 0x1002461c
mov dword [ebp - 4], 0x15
cmp dword [ebp - 0x5cc], 0x6c61
jge 0x1002465c
mov edx, dword [ebp - 0x790]
mov ecx, 0x1006f038
call fcn.1000567a
jmp 0x10024678
or dword [ebp - 4], 0xffffffff
jmp 0x10024682
push 4
pop eax
shl eax, 1
mov dword [ebp + eax - 0x920], 0
jmp 0x100246ad
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x920]
inc eax
push 4
pop ecx
shl ecx, 1
mov dword [ebp + ecx - 0x920], eax
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0x920], 2
jg 0x10024714
mov dword [ebp - 0x9f8], 0xe814
mov dword [ebp - 0xa00], 1
mov dword [ebp - 0xa08], 0x6eb6b9dd
mov dword [ebp - 0x33c], 0xfff7
mov eax, dword [ebp - 0x33c]
inc eax
mov dword [ebp - 0x33c], eax
mov byte [ebp - 0xbd], 0
movzx eax, byte [ebp - 0xbd]
test eax, eax
je 0x10024712
push 0
push 0
push 0x14a9
call dword [sym.imp.KERNEL32.dll_OpenFileMappingA]
jmp 0x10024694
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0x920], 0
je 0x1002477d
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xb30]
dec eax
mov dword [ebp - 0x890], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x890]
mov dword [ebp + eax - 0xb30], ecx
mov eax, dword [ebp - 0x310]
dec eax
mov dword [ebp - 0x310], eax
push 4
pop eax
shl eax, 1
mov ecx, dword [ebp - 0x310]
add ecx, dword [ebp - 0x798]
cmp ecx, dword [ebp + eax - 0xa40]
jg 0x1002477d
mov dword [ebp - 0x314], 1
jmp 0x10024784
and dword [ebp - 0x314], 0
push 4
pop eax
shl eax, 1
mov ecx, dword [ebp - 0x314]
mov dword [ebp + eax - 0xb70], ecx
cmp dword [ebp - 0x314], 0
jne 0x100247b8
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0xa40], 0
jne 0x100247b8
and dword [ebp - 0x340], 0
jmp 0x100247c2
mov dword [ebp - 0x340], 1
cmp dword [ebp - 0x340], 0x3ade45a9
jle 0x100247da
mov dword [ebp - 0x348], 1
jmp 0x100247e1
and dword [ebp - 0x348], 0
push 4
pop eax
shl eax, 1
push 4
pop ecx
shl ecx, 1
mov edx, dword [ebp - 0x348]
sub edx, dword [ebp + ecx - 0x920]
add edx, dword [ebp + eax - 0x920]
mov dword [ebp - 0x8cc], edx
mov dword [ebp - 0x28], 2
and dword [ebp - 0x1fc], 0
jmp 0x1002481d
mov eax, dword [ebp - 0x28]
inc eax
inc eax
mov dword [ebp - 0x28], eax
cmp dword [ebp - 0x28], 0x20
jae 0x10025cc1
mov dword [ebp - 0xf8], 1
mov dword [ebp - 0x8a8], 0
mov dword [ebp - 0x350], 0x22a9
mov dword [ebp - 0x89c], str.svzk_yhicoak_rsnbvy_mjrgjnnnr_zvyxmre_zfjbe_lhugk_qwz_eed_cygfsewto_mqukzzoq_infer_ieelrorfc_xwyt
cmp dword [ebp - 0x350], 0x263e
jle 0x1002496e
and dword [ebp - 0x2d8], 0
jmp 0x10024875
mov eax, dword [ebp - 0x2d8]
inc eax
mov dword [ebp - 0x2d8], eax
cmp dword [ebp - 0x2d8], 0x63ad
jge 0x1002496e
and dword [ebp - 0x240], 0
jmp 0x1002489b
mov eax, dword [ebp - 0x240]
inc eax
mov dword [ebp - 0x240], eax
cmp dword [ebp - 0x240], 0x7b9d
jge 0x10024969
and dword [ebp - 0x2b0], 0
jmp 0x100248c1
mov eax, dword [ebp - 0x2b0]
inc eax
mov dword [ebp - 0x2b0], eax
cmp dword [ebp - 0x2b0], 0x3016
jge 0x10024964
and dword [ebp - 0x238], 0
jmp 0x100248e7
mov eax, dword [ebp - 0x238]
inc eax
mov dword [ebp - 0x238], eax
cmp dword [ebp - 0x238], 0x1c1
jge 0x1002495f
mov ecx, dword [ebp - 0x2b0]
imul ecx, dword [ebp - 0x238]
mov eax, dword [ebp - 0x2d8]
cdq
idiv dword [ebp - 0x240]
sub edx, ecx
mov eax, edx
cdq
mov dword [ebp - 0x838], eax
mov dword [ebp - 0x834], edx
push dword [ebp - 0x834]
push dword [ebp - 0x838]
lea ecx, [ebp - 0xbc8]
call fcn.10002769
pop ecx
pop ecx
mov dword [ebp - 0x7a0], eax
mov ecx, dword [ebp - 0x7a0]
call fcn.10003efc
push eax
call fcn.1003ed0a
pop ecx
lea ecx, [ebp - 0xbc8]
call fcn.100013ad
jmp 0x100248da
jmp 0x100248b4
jmp 0x1002488e
jmp 0x10024868
mov dword [ebp - 0x3b0], 0xe11cd4ee
mov dword [ebp - 4], 0x17
cmp dword [ebp - 0x350], 0x215d
jge 0x10024997
push dword [ebp - 0x89c]
call fcn.1003ed0a
pop ecx
jmp 0x100249b3
or dword [ebp - 4], 0xffffffff
jmp 0x100249bd
mov dword [ebp - 0x2b8], 0
jmp 0x100249d6
mov eax, dword [ebp - 0x2b8]
inc eax
mov dword [ebp - 0x2b8], eax
cmp dword [ebp - 0x2b8], 2
jge 0x100249f2
mov eax, dword [ebp - 0x2b8]
mov dword [ebp + eax*4 - 0xa98], 1
jmp 0x100249c9
mov dword [ebp - 0xf8], 0xffffffe5
jmp 0x10024a0b
mov eax, dword [ebp - 0xf8]
inc eax
mov dword [ebp - 0xf8], eax
cmp dword [ebp - 0xf8], 0xffffffed
jg 0x10024f72
mov dword [ebp - 0xe8], 6
mov dword [ebp - 0x8dc], 0xfffffff6
mov dword [ebp - 0x160], 0
jmp 0x10024a45
mov eax, dword [ebp - 0x160]
inc eax
mov dword [ebp - 0x160], eax
cmp dword [ebp - 0x160], 3
jge 0x10024a61
mov eax, dword [ebp - 0x160]
mov dword [ebp + eax*4 - 0xc94], 4
jmp 0x10024a38
mov dword [ebp - 0xe8], 0
jmp 0x10024a7a
mov eax, dword [ebp - 0xe8]
inc eax
mov dword [ebp - 0xe8], eax
cmp dword [ebp - 0xe8], 0x13
jle 0x10024f6d
mov dword [ebp - 0x70], 0xb0ceafd9
mov dword [ebp - 0x7d0], 8
mov dword [ebp - 0x70], 0xffffffed
jmp 0x10024aa8
mov eax, dword [ebp - 0x70]
inc eax
mov dword [ebp - 0x70], eax
cmp dword [ebp - 0x70], 4
jg 0x10024f68
mov dword [ebp - 0x5c], 0
jmp 0x10024ac2
mov eax, dword [ebp - 0x5c]
inc eax
mov dword [ebp - 0x5c], eax
cmp dword [ebp - 0x5c], 3
jge 0x10024ad8
mov eax, dword [ebp - 0x5c]
mov dword [ebp + eax*4 - 0x94c], 0xffffffff
jmp 0x10024abb
mov dword [ebp - 0x5c], 0
jmp 0x10024ae8
mov eax, dword [ebp - 0x5c]
inc eax
mov dword [ebp - 0x5c], eax
cmp dword [ebp - 0x5c], 1
jge 0x10024afb
mov eax, dword [ebp - 0x5c]
mov dword [ebp + eax*4 - 0x6c], 0xbcef054a
jmp 0x10024ae1
push 4
pop eax
shl eax, 0
mov dword [ebp + eax - 0x94c], 0xd
jmp 0x10024b29
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x94c]
dec eax
push 4
pop ecx
shl ecx, 0
mov dword [ebp + ecx - 0x94c], eax
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x94c], 0xfffffffc
je 0x10024ce5
mov byte [ebp - 0xbe], 0
movzx eax, byte [ebp - 0xbe]
test eax, eax
je 0x10024cd8
mov dword [ebp - 0x358], 0x4d1c
mov dword [ebp - 0x8d4], str.bqgy_gglzgdaq_qckulacye_nivankwd_dnzin
cmp dword [ebp - 0x358], 0x4d95
jle 0x10024c89
push 0
call dword [sym.imp.KERNEL32.dll_GlobalUnlock]
and dword [ebp - 0x164], 0
jmp 0x10024b95
mov eax, dword [ebp - 0x164]
inc eax
mov dword [ebp - 0x164], eax
cmp dword [ebp - 0x164], 0x4b88
jge 0x10024c89
and dword [ebp - 0x16c], 0
jmp 0x10024bbb
cmp dword [ebp - 0x16c], 0x3ed9
jge 0x10024c84
and dword [ebp - 0x174], 0
jmp 0x10024be1
cmp dword [ebp - 0x174], 0x1b80
jge 0x10024c7f
and dword [ebp - 0x17c], 0
jmp 0x10024c07
jmp 0x10024bae
jmp 0x10024b88
push 0
push 0
call dword [sym.imp.USER32.dll_EnumWindows]
mov dword [ebp - 4], 0x19
cmp dword [ebp - 0x358], 0x4a3f
jge 0x10024cb2
push dword [ebp - 0x8d4]
call fcn.1003ed0a
pop ecx
jmp 0x10024cce
or dword [ebp - 4], 0xffffffff
jmp 0x10024cd8
cmp dword [ebp - 0x70], 0
je 0x10024ce0
jmp 0x10024ce5
jmp 0x10024b0e
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0x6c], 0xffffffe6
jmp 0x10024d0a
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x6c]
inc eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x6c], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x6c], 0x10
jne 0x10024f63
mov dword [ebp - 0x94], 0xda37bb00
mov dword [ebp - 0x7c4], 0x975a1448
mov dword [ebp - 0x94], 0x14
jmp 0x10024d48
cmp dword [ebp - 0x94], 2
jg 0x10024f27
mov dword [ebp - 0x3a8], 3
mov eax, dword [ebp - 0x94]
mov dword [ebp - 0xa10], eax
cmp dword [ebp - 0x3a8], 0
je 0x10024d86
cmp dword [ebp - 0x70], 0
je 0x10024d86
mov dword [ebp - 0x360], 1
jmp 0x10024d8d
and dword [ebp - 0x360], 0
mov eax, dword [ebp - 0x94]
cmp dword [ebp - 0x360], eax
jne 0x10024da7
mov dword [ebp - 0x368], 1
jmp 0x10024dae
and dword [ebp - 0x368], 0
cmp dword [ebp - 0x368], 0xd10f
jle 0x10024dc6
mov dword [ebp - 0x370], 1
jmp 0x10024dcd
and dword [ebp - 0x370], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x6c]
cmp dword [ebp - 0x370], eax
jle 0x10024dec
xor eax, eax
jne 0x10024dec
mov dword [ebp - 0x338], 1
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0xe8]
add ecx, dword [ebp - 0x338]
cmp ecx, dword [ebp + eax - 0x6c]
jg 0x10024e1a
mov dword [ebp - 0x3b0], 1
mov eax, dword [ebp - 0x3b0]
cmp eax, dword [ebp - 0x8dc]
jge 0x10024f4b
mov dword [ebp - 0x3b8], 1
jmp 0x10024f52
and dword [ebp - 0x3b8], 0
mov eax, dword [ebp - 0x3b8]
mov dword [ebp - 0x7d0], eax
jmp 0x10024cf5
jmp 0x10024aa1
jmp 0x10024a6d
jmp 0x100249fe
xor eax, eax
inc eax
imul eax, eax, 0
movzx eax, byte [ebp + eax - 0x158]
lea eax, [eax + eax + 2]
cmp dword [ebp - 0x28], eax
jne 0x100259d8
mov dword [ebp - 0x78], 1
mov dword [ebp - 0x19c], 0x141e4f1f
mov dword [ebp - 0x3c0], 0x47aa
mov dword [ebp - 0x8b0], str.jnlthcx_obmgffbl_twmoaw_glbp_ybjr_ffsmera_rvxbc_dnfzn_ldrneby_owd_yjnb_copsixay_bmmxws_eskfknxd
cmp dword [ebp - 0x3c0], 0x49c1
jle 0x10025035
and dword [ebp - 0x184], 0
jmp 0x10024fd4
mov eax, dword [ebp - 0x184]
inc eax
mov dword [ebp - 0x184], eax
cmp dword [ebp - 0x184], 0x6a36
jge 0x10025035
and dword [ebp - 0x18c], 0
jmp 0x10024ff6
mov eax, dword [ebp - 0x18c]
inc eax
mov dword [ebp - 0x18c], eax
cmp dword [ebp - 0x18c], 0x2090
jge 0x10025033
mov eax, dword [ebp - 0x184]
sub eax, dword [ebp - 0x18c]
cdq
mov dword [ebp - 0x850], eax
mov dword [ebp - 0x84c], edx
push dword [ebp - 0x84c]
push dword [ebp - 0x850]
mov ecx, 0x1006f038
call fcn.10003f1c
jmp 0x10024fe9
jmp 0x10024fc7
mov dword [ebp - 0x7dc], 0xfffa
mov dword [ebp - 4], 0x1b
cmp dword [ebp - 0x3c0], 0x4476
jge 0x10025062
mov edx, dword [ebp - 0x8b0]
mov ecx, 0x1006f038
call fcn.1000567a
jmp 0x1002507e
or dword [ebp - 4], 0xffffffff
jmp 0x10025088
mov dword [ebp - 0x440], 0xea21e1d8
mov dword [ebp - 0x420], 0xffffffff
mov dword [ebp - 0x78], 0xffffffff
jmp 0x100250ac
mov eax, dword [ebp - 0x78]
inc eax
mov dword [ebp - 0x78], eax
cmp dword [ebp - 0x78], 0x1d
je 0x1002533b
mov dword [ebp - 0x9c], 0
mov dword [ebp - 0x8e4], 0xec73
cmp dword [ebp - 0x78], 0
je 0x10025159
cmp dword [ebp - 0x9c], 0
jne 0x100250ee
mov eax, dword [ebp - 0x78]
cmp eax, dword [ebp - 0x78]
jl 0x100250ee
and dword [ebp - 0x3c8], 0
jmp 0x100250f8
mov dword [ebp - 0x3c8], 1
cmp dword [ebp - 0x3c8], 0x1a07
jge 0x10025110
mov dword [ebp - 0x3d0], 1
jmp 0x10025117
and dword [ebp - 0x3d0], 0
mov eax, dword [ebp - 0x3d0]
mov dword [ebp - 0x19c], eax
mov eax, dword [ebp - 0x7dc]
cmp eax, dword [ebp - 0x78]
je 0x1002513a
mov dword [ebp - 0x3d8], 1
jmp 0x10025141
and dword [ebp - 0x3d8], 0
cmp dword [ebp - 0x3d8], 0xa485bf25
jne 0x10025159
mov dword [ebp - 0x3e0], 1
jmp 0x10025160
and dword [ebp - 0x3e0], 0
mov eax, dword [ebp - 0x3e0]
mov dword [ebp - 0x440], eax
mov dword [ebp - 0x9c], 0
jmp 0x10025185
mov eax, dword [ebp - 0x9c]
inc eax
mov dword [ebp - 0x9c], eax
cmp dword [ebp - 0x9c], 0x1b
jg 0x10025336
mov dword [ebp - 0x194], 0x91ba8027
cmp dword [ebp - 0x194], 0
jne 0x10025270
cmp dword [ebp - 0x420], 0
je 0x100251c7
cmp dword [ebp - 0x194], 0
je 0x100251c7
mov dword [ebp - 0x3e8], 1
jmp 0x100251ce
and dword [ebp - 0x3e8], 0
cmp dword [ebp - 0x3e8], 0x380a
jne 0x100251e6
mov dword [ebp - 0x3f0], 1
jmp 0x100251ed
and dword [ebp - 0x3f0], 0
mov eax, dword [ebp - 0x3f0]
neg eax
sub eax, 0x7716
mov ecx, dword [ebp - 0x9c]
sub ecx, eax
jne 0x10025214
push 7
pop eax
test eax, eax
jne 0x10025214
and dword [ebp - 0x3f8], 0
jmp 0x1002521e
mov dword [ebp - 0x3f8], 1
mov eax, dword [ebp - 0x8e4]
cmp dword [ebp - 0x3f8], eax
jne 0x10025238
mov dword [ebp - 0x400], 1
jmp 0x1002523f
and dword [ebp - 0x400], 0
mov eax, dword [ebp - 0x194]
add eax, dword [ebp - 0x400]
test eax, eax
jg 0x1002525b
mov dword [ebp - 0x408], 1
jmp 0x10025262
and dword [ebp - 0x408], 0
mov eax, dword [ebp - 0x9c]
add eax, dword [ebp - 0x408]
je 0x10025283
push 0xfffffffffffffffe
pop eax
test eax, eax
je 0x10025283
mov dword [ebp - 0x410], 1
jmp 0x1002528a
and dword [ebp - 0x410], 0
cmp dword [ebp - 0x410], 0xce5aba8d
jbe 0x1002529f
mov eax, 0x4be495ee
test eax, eax
je 0x100252b4
cmp dword [ebp - 0x194], 0
je 0x100252b4
mov dword [ebp - 0x418], 1
jmp 0x100252bb
and dword [ebp - 0x418], 0
mov eax, dword [ebp - 0x19c]
cmp eax, dword [ebp - 0x418]
jne 0x100252d5
mov dword [ebp - 0x428], 1
jmp 0x100252dc
and dword [ebp - 0x428], 0
mov eax, dword [ebp - 0x420]
cmp dword [ebp - 0x428], eax
jle 0x100252f6
mov dword [ebp - 0x430], 1
jmp 0x100252fd
and dword [ebp - 0x430], 0
mov eax, dword [ebp - 0x430]
mov dword [ebp - 0x19c], eax
cmp dword [ebp - 0x19c], 0
jne 0x1002531e
mov dword [ebp - 0x438], 1
jmp 0x10025325
and dword [ebp - 0x438], 0
mov eax, dword [ebp - 0x438]
mov dword [ebp - 0x440], eax
jmp 0x10025178
jmp 0x100250a5
mov eax, dword [ebp - 0x28]
movzx eax, byte [ebp + eax - 0x158]
inc eax
mov dword [ebp - 0x1fc], eax
mov dword [ebp - 0x118], 0xffffffff
mov dword [ebp - 0x3c], 0xe17ca002
mov dword [ebp - 0x8b8], 0xe834ab4
mov dword [ebp - 0x7f4], 1
mov dword [ebp - 0x1a4], 0
jmp 0x1002538b
mov eax, dword [ebp - 0x1a4]
inc eax
mov dword [ebp - 0x1a4], eax
cmp dword [ebp - 0x1a4], 1
jge 0x100253a7
mov eax, dword [ebp - 0x1a4]
mov dword [ebp + eax*4 - 0x110], 0xfffffff8
jmp 0x1002537e
mov dword [ebp - 0x118], 0
jmp 0x100253c0
mov eax, dword [ebp - 0x118]
dec eax
mov dword [ebp - 0x118], eax
cmp dword [ebp - 0x118], 0xffffffe4
jg 0x10025664
mov dword [ebp - 0x448], 0x97f0a290
mov dword [ebp - 0xa20], 0xffffffff
mov eax, dword [ebp - 0x448]
dec eax
mov dword [ebp - 0x448], eax
mov dword [ebp - 0x3c], 0
jmp 0x100253fe
cmp dword [ebp - 0x3c], 0
jl 0x1002565f
mov dword [ebp - 0x1bc], 0x17d7
mov dword [ebp - 0x458], 0x38886a6c
mov dword [ebp - 0x490], 0x166d
mov dword [ebp - 0x8ec], str.shtpjk_jvi_flp_kqcjdzfir_mbofspjp_umpfqgrw_veguub
cmp dword [ebp - 0x490], 0x17d0
jle 0x100254e0
and dword [ebp - 0x1ac], 0
jmp 0x10025456
mov eax, dword [ebp - 0x1ac]
inc eax
mov dword [ebp - 0x1ac], eax
cmp dword [ebp - 0x1ac], 0x159a
jge 0x100254e0
and dword [ebp - 0x1b4], 0
jmp 0x10025478
mov eax, dword [ebp - 0x1b4]
inc eax
mov dword [ebp - 0x1b4], eax
cmp dword [ebp - 0x1b4], 0x291e
jge 0x100254db
mov eax, dword [ebp - 0x1ac]
or eax, dword [ebp - 0x1b4]
cdq
mov dword [ebp - 0x85c], eax
mov dword [ebp - 0x858], edx
push dword [ebp - 0x858]
push dword [ebp - 0x85c]
lea ecx, [ebp - 0xc28]
call fcn.10002769
pop ecx
pop ecx
mov dword [ebp - 0x7e8], eax
mov ecx, dword [ebp - 0x7e8]
call fcn.10003efc
push eax
call fcn.1003ed0a
pop ecx
lea ecx, [ebp - 0xc28]
call fcn.100013ad
jmp 0x1002546b
jmp 0x10025449
mov eax, dword [ebp - 0x1bc]
inc eax
mov dword [ebp - 0x1bc], eax
jne 0x100254fb
mov dword [ebp - 0x460], 1
jmp 0x10025502
and dword [ebp - 0x460], 0
mov eax, dword [ebp - 0x3c]
cmp dword [ebp + eax*4 - 0x110], 0
jne 0x10025532
mov eax, dword [ebp - 0x3c]
cmp dword [ebp + eax*4 - 0x110], 0
je 0x10025529
mov eax, dword [ebp - 0x3c]
cmp dword [ebp + eax*4 - 0x110], 1
je 0x10025532
and dword [ebp - 0x450], 0
jmp 0x1002553c
mov dword [ebp - 0x450], 1
mov eax, dword [ebp - 0x450]
mov dword [ebp - 0x458], eax
cmp dword [ebp - 0x458], 1
je 0x1002555d
mov dword [ebp - 0x468], 1
jmp 0x10025564
and dword [ebp - 0x468], 0
mov eax, dword [ebp - 0x3c]
mov ecx, dword [ebp - 0x460]
sub ecx, dword [ebp - 0x468]
sub ecx, dword [ebp + eax*4 - 0x110]
mov dword [ebp - 0x470], ecx
mov eax, dword [ebp - 0x3c]
mov ecx, dword [ebp - 0x470]
mov dword [ebp + eax*4 - 0x110], ecx
mov eax, dword [ebp - 0x118]
add eax, dword [ebp - 0x470]
jne 0x100255a2
xor eax, eax
je 0x100255b7
mov eax, 0x36a5
test eax, eax
je 0x100255b7
mov dword [ebp - 0x478], 1
jmp 0x100255be
and dword [ebp - 0x478], 0
mov eax, dword [ebp - 0x8b8]
cmp dword [ebp - 0x478], eax
jl 0x100255d8
mov dword [ebp - 0x480], 1
jmp 0x100255df
and dword [ebp - 0x480], 0
mov eax, dword [ebp - 0x3c]
cmp dword [ebp - 0x480], eax
jne 0x100255f6
jmp 0x100253b3
mov eax, dword [ebp - 0x28]
movzx eax, byte [ebp + eax - 0x158]
mov ecx, dword [ebp - 0x28]
lea eax, [ecx + eax - 1]
mov dword [ebp - 0x28], eax
mov dword [ebp - 0xe0], 0xfffffff7
mov dword [ebp - 0x1ec], 0x3f9e923e
mov dword [ebp - 0x50], 0
jmp 0x1002569d
mov eax, dword [ebp - 0x50]
inc eax
mov dword [ebp - 0x50], eax
cmp dword [ebp - 0x50], 2
jge 0x100256b3
mov eax, dword [ebp - 0x50]
mov dword [ebp + eax*4 - 0x6c0], 0xffffffff
jmp 0x10025696
mov dword [ebp - 0x50], 0
jmp 0x100256c3
mov eax, dword [ebp - 0x50]
inc eax
mov dword [ebp - 0x50], eax
cmp dword [ebp - 0x50], 3
jge 0x100256d9
mov eax, dword [ebp - 0x50]
mov dword [ebp + eax*4 - 0x8c4], 0xef20fe6e
jmp 0x100256bc
push 4
pop eax
shl eax, 1
mov dword [ebp + eax - 0x8c4], 0
jmp 0x10025704
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x8c4]
inc eax
push 4
pop ecx
shl ecx, 1
mov dword [ebp + ecx - 0x8c4], eax
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0x8c4], 1
jg 0x100259d3
mov dword [ebp - 0xa4], 0x9b79
mov dword [ebp - 0x6dc], 0xab1d6a56
mov eax, dword [ebp - 0xa4]
inc eax
mov dword [ebp - 0xa4], eax
mov dword [ebp - 0xe0], 0
jmp 0x10025751
cmp dword [ebp - 0xe0], 1
jg 0x100259ce
mov dword [ebp - 0x498], 0x79e9
mov dword [ebp - 0x800], str.txlzkqo_bkihzriz_cwzmteac
cmp dword [ebp - 0x498], 0x7af5
jle 0x10025887
push 0x457
push 0x2551
push 0x1529
push 0xb0a
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_Ellipse]
and dword [ebp - 0x1d4], 0
jmp 0x100257c0
mov dword [ebp - 0x6d4], 0x6859
mov dword [ebp - 4], 0x1f
cmp dword [ebp - 0x498], 0x78fc
jge 0x100258b4
jmp 0x100256eb
jmp 0x10024815
mov eax, dword [ebp - 0x28]
sub eax, dword [ebp - 0x1fc]
movzx eax, byte [ebp + eax - 0x15a]
movsx eax, byte [ebp + eax - 0x934]
mov ecx, dword [ebp - 0x28]
movzx ecx, byte [ebp + ecx - 0x157]
and ecx, eax
mov eax, dword [ebp - 0x28]
sub eax, dword [ebp - 0x1fc]
movzx eax, byte [ebp + eax - 0x15a]
movsx eax, byte [ebp + eax - 0x934]
mov edx, dword [ebp - 0x28]
movzx edx, byte [ebp + edx - 0x157]
or edx, eax
sub edx, ecx
mov eax, dword [ebp - 0x28]
movzx eax, byte [ebp + eax - 0x158]
mov byte [ebp + eax - 0x934], dl
mov dword [ebp - 0x2c], 0xfe7d8a87
mov dword [ebp - 0x9b8], 0xfffffff9
mov dword [ebp - 0x9b4], 0xfffffff9
mov dword [ebp - 0x9b0], 0xfffffff9
mov dword [ebp - 0x9ac], 0xfffffff9
mov dword [ebp - 0xaa4], 0xf433
mov dword [ebp - 0x1f4], 0
jmp 0x10025a8a
mov eax, dword [ebp - 0x1f4]
inc eax
mov dword [ebp - 0x1f4], eax
cmp dword [ebp - 0x1f4], 1
jge 0x10025aa3
mov eax, dword [ebp - 0x1f4]
mov dword [ebp + eax*4 - 0x20], 0xffffffff
jmp 0x10025a7d
mov dword [ebp - 0x2c], 0
jmp 0x10025ab3
mov eax, dword [ebp - 0x2c]
dec eax
mov dword [ebp - 0x2c], eax
cmp dword [ebp - 0x2c], 0
jl 0x10025b8b
mov dword [ebp - 0x6ec], 0x60cbeb96
mov byte [ebp - 0xbf], 0
movzx eax, byte [ebp - 0xbf]
test eax, eax
je 0x10025af9
push 0
push 0x671
push 0x24b4
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_GetDIBColorTable]
mov eax, dword [ebp - 0x2c]
mov eax, dword [ebp + eax*4 - 0x20]
mov dword [ebp - 0xaac], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x20], 0
jne 0x10025b1d
mov eax, dword [ebp - 0x2c]
cmp dword [ebp + eax*4 - 0x20], 0
je 0x10025b2e
xor eax, eax
inc eax
je 0x10025b2e
mov dword [ebp - 0x6e4], 1
jmp 0x10025b35
and dword [ebp - 0x6e4], 0
mov eax, dword [ebp - 0x2c]
mov dword [ebp - 0xab4], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x20]
mov dword [ebp - 0x4a8], eax
mov eax, dword [ebp - 0x2c]
mov ecx, dword [ebp - 0x4a8]
mov dword [ebp + eax*4 - 0x20], ecx
cmp dword [ebp - 0x4a8], 0x73ff82f
jg 0x10025b73
mov dword [ebp - 0x4b0], 1
jmp 0x10025b7a
and dword [ebp - 0x4b0], 0
mov eax, dword [ebp - 0x4b0]
mov dword [ebp - 0x6ec], eax
jmp 0x10025aac
cmp dword [ebp - 0x2c], 0
je 0x10025baa
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x20], 0
je 0x10025baa
mov dword [ebp - 0x4b8], 1
jmp 0x10025bb1
and dword [ebp - 0x4b8], 0
mov eax, dword [ebp - 0x4b8]
mov dword [ebp - 0x2c], eax
push 4
pop eax
imul eax, eax, 0
push 4
pop ecx
imul ecx, ecx, 0
mov ecx, dword [ebp + ecx - 0x20]
cmp ecx, dword [ebp + eax - 0x20]
jge 0x10025c30
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x2c]
cmp ecx, dword [ebp + eax - 0x20]
jle 0x10025beb
mov dword [ebp - 0x4c0], 1
jmp 0x10025bf2
and dword [ebp - 0x4c0], 0
mov eax, dword [ebp - 0x4c0]
inc eax
je 0x10025c14
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x20], 0
je 0x10025c14
mov dword [ebp - 0x4c8], 1
jmp 0x10025c1b
and dword [ebp - 0x4c8], 0
cmp dword [ebp - 0x4c8], 0x13bcf59f
jle 0x10025c30
and dword [ebp - 0x6f4], 0
jmp 0x10025c3a
mov dword [ebp - 0x6f4], 1
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x20]
mov dword [ebp - 0xabc], eax
mov eax, dword [ebp - 0x2c]
mov dword [ebp - 0xac4], eax
push 4
pop eax
imul eax, eax, 0
push 4
pop ecx
imul ecx, ecx, 0
mov ecx, dword [ebp + ecx - 0x20]
cmp ecx, dword [ebp + eax - 0x20]
jge 0x10025c75
mov dword [ebp - 0x4d0], 1
jmp 0x10025c7c
and dword [ebp - 0x4d0], 0
cmp dword [ebp - 0x4d0], 0
ja 0x10025c91
mov dword [ebp - 0x4d8], 1
jmp 0x10025c98
and dword [ebp - 0x4d8], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x4d8]
sub ecx, dword [ebp + eax - 0x20]
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0x9b8], ecx
and dword [ebp - 0x1fc], 0
jmp 0x10024815
mov dword [ebp - 0xe4], 6
mov dword [ebp - 0x4e0], 0x979c
mov dword [ebp - 0x120], 3
mov dword [ebp - 0x4f0], 0x33a79cc0
mov dword [ebp - 0x500], 0
mov dword [ebp - 0x204], 0
jmp 0x10025d0c
mov eax, dword [ebp - 0x204]
inc eax
mov dword [ebp - 0x204], eax
cmp dword [ebp - 0x204], 3
jge 0x10025d28
mov eax, dword [ebp - 0x204]
mov dword [ebp + eax*4 - 0xb48], 0xffffffff
jmp 0x10025cff
mov dword [ebp - 0xe4], 0x4ec2e0cf
cmp dword [ebp - 0xe4], 0
jne 0x10025d93
mov eax, dword [ebp - 0xe4]
mov dword [ebp - 0xacc], eax
mov eax, dword [ebp - 0x4e0]
mov dword [ebp - 0xad8], eax
mov eax, dword [ebp - 0x120]
imul eax, dword [ebp - 0x120]
cmp eax, dword [ebp - 0x4e0]
jne 0x10025d74
mov dword [ebp - 0x4e8], 1
jmp 0x10025d7b
and dword [ebp - 0x4e8], 0
mov eax, dword [ebp - 0x4e8]
mov dword [ebp - 0x4f0], eax
mov eax, dword [ebp - 0x4f0]
add eax, dword [ebp - 0x120]
cmp dword [ebp - 0xe4], 0
je 0x10025dac
xor eax, eax
je 0x10025dac
mov dword [ebp - 0x6fc], 1
jmp 0x10025db3
and dword [ebp - 0x6fc], 0
mov eax, dword [ebp - 0x120]
mov dword [ebp - 0xae0], eax
mov eax, dword [ebp - 0x120]
sub eax, dword [ebp - 0xe4]
cmp dword [ebp - 0xe4], eax
jge 0x10025dda
cmp dword [ebp - 0x500], 0
xor eax, eax
inc eax
cmp eax, 1
jne 0x10025dee
mov dword [ebp - 0x4f8], 1
jmp 0x10025df5
and dword [ebp - 0x4f8], 0
mov eax, dword [ebp - 0x4f8]
sub eax, dword [ebp - 0x500]
push 4
pop ecx
shl ecx, 1
mov dword [ebp + ecx - 0xb48], eax
xor eax, eax
inc eax
imul eax, eax, 0xe
mov byte [ebp + eax - 0x934], 0
mov dword [ebp - 0xb20], 0xebb0cb8c
mov dword [ebp - 0xb1c], 0x551d
mov dword [ebp - 0x508], 0x1edc
mov dword [ebp - 0x704], str.ftduh_eqxfku_tmsxhk_apcttx
cmp dword [ebp - 0x508], 0x2075
jle 0x10025f36
and dword [ebp - 0x21c], 0
jmp 0x10025e69
mov eax, dword [ebp - 0x21c]
inc eax
mov dword [ebp - 0x21c], eax
cmp dword [ebp - 0x21c], 0x371d
jge 0x10025f2e
and dword [ebp - 0x224], 0
jmp 0x10025e8f
mov eax, dword [ebp - 0x224]
inc eax
mov dword [ebp - 0x224], eax
cmp dword [ebp - 0x224], 0x6195
jge 0x10025f29
and dword [ebp - 0x20c], 0
jmp 0x10025eb5
mov eax, dword [ebp - 0x20c]
inc eax
mov dword [ebp - 0x20c], eax
cmp dword [ebp - 0x20c], 0x4137
jge 0x10025f24
and dword [ebp - 0x214], 0
jmp 0x10025ed7
mov eax, dword [ebp - 0x214]
inc eax
mov dword [ebp - 0x214], eax
cmp dword [ebp - 0x214], 0x59a2
jge 0x10025f22
mov eax, dword [ebp - 0x20c]
add eax, dword [ebp - 0x214]
mov ecx, dword [ebp - 0x21c]
xor ecx, dword [ebp - 0x224]
xor eax, ecx
cdq
mov dword [ebp - 0x874], eax
mov dword [ebp - 0x870], edx
push dword [ebp - 0x870]
push dword [ebp - 0x874]
mov ecx, 0x1006f038
call fcn.10003f1c
jmp 0x10025eca
jmp 0x10025ea8
jmp 0x10025e82
jmp 0x10025e5c
push 0
call dword [sym.imp.KERNEL32.dll_SetCommBreak]
mov dword [ebp - 0x58], 0
jmp 0x10025f46
mov eax, dword [ebp - 0x58]
inc eax
mov dword [ebp - 0x58], eax
cmp dword [ebp - 0x58], 1
jge 0x10025f5c
mov eax, dword [ebp - 0x58]
mov dword [ebp + eax*4 - 0xb10], 0xfffffff9
jmp 0x10025f3f
mov dword [ebp - 4], 0x21
cmp dword [ebp - 0x508], 0x1eb9
jge 0x10025f7f
mov edx, dword [ebp - 0x704]
mov ecx, 0x1006f038
call fcn.1000567a
jmp 0x10025f9b
or dword [ebp - 4], 0xffffffff
jmp 0x10025fa5
mov dword [ebp - 0x58], 0
jmp 0x10025fb5
mov eax, dword [ebp - 0x58]
inc eax
mov dword [ebp - 0x58], eax
cmp dword [ebp - 0x58], 3
jge 0x10025fcb
mov eax, dword [ebp - 0x58]
mov dword [ebp + eax*4 - 0x964], 0xfffffffc
jmp 0x10025fae
mov byte [ebp - 0xd4], 0
movzx eax, byte [ebp - 0xd4]
test eax, eax
je 0x10025fef
push 0x15ad
push 0xf03
push 0
call dword [sym.imp.GDI32.dll_OffsetRgn]
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0x964], 0
jmp 0x1002601d
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x964]
inc eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x964], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x964], 0
jg 0x100260c0
mov dword [ebp - 0x22c], 1
mov dword [ebp - 0x22c], 0
jmp 0x10026054
mov eax, dword [ebp - 0x22c]
dec eax
mov dword [ebp - 0x22c], eax
cmp dword [ebp - 0x22c], 0
jl 0x100260a1
mov dword [ebp - 0x510], 0xc79e
mov byte [ebp - 0xc5], 0
movzx eax, byte [ebp - 0xc5]
test eax, eax
je 0x10026092
push 0x1156
push 0
push 0x152d
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDlgItemTextA]
mov eax, dword [ebp - 0x510]
inc eax
mov dword [ebp - 0x510], eax
jmp 0x10026047
mov byte [ebp - 0xd6], 0
movzx eax, byte [ebp - 0xd6]
test eax, eax
je 0x100260bb
push 0
call dword [sym.imp.KERNEL32.dll_GetFileAttributesA]
jmp 0x10026002
lea eax, [ebp - 0x934]
push eax
lea ecx, [ebp - 0xb60]
call fcn.1002b775
mov dword [ebp - 4], 0x23
mov dword [ebp - 0x31c], 8
mov dword [ebp - 0x71c], 0x41651328
mov dword [ebp - 0xaa8], 0x6b87d0fa
mov dword [ebp - 0x9f4], 0x1fc9a57b
mov dword [ebp - 0xb0c], 0x47c4d145
mov dword [ebp - 0xb08], 0x47c4d145
mov dword [ebp - 0xb04], 0x47c4d145
mov dword [ebp - 0xb00], 0x47c4d145
mov dword [ebp - 0x518], 0x545b
mov dword [ebp - 0x70c], str.bxptrue_srqrfpb_fwqosn
cmp dword [ebp - 0x518], 0x5543
jle 0x100261f8
and dword [ebp - 0x234], 0
jmp 0x10026163
mov eax, dword [ebp - 0x234]
inc eax
mov dword [ebp - 0x234], eax
cmp dword [ebp - 0x234], 0x6d12
jge 0x100261f8
and dword [ebp - 0x23c], 0
jmp 0x10026189
mov eax, dword [ebp - 0x23c]
inc eax
mov dword [ebp - 0x23c], eax
cmp dword [ebp - 0x23c], 0x1294
jge 0x100261f3
and dword [ebp - 0x244], 0
jmp 0x100261ab
mov eax, dword [ebp - 0x244]
inc eax
mov dword [ebp - 0x244], eax
cmp dword [ebp - 0x244], 0x61ee
jge 0x100261f1
mov eax, dword [ebp - 0x234]
cdq
idiv dword [ebp - 0x23c]
or edx, dword [ebp - 0x244]
mov eax, edx
cdq
mov dword [ebp - 0x880], eax
mov dword [ebp - 0x87c], edx
push dword [ebp - 0x87c]
push dword [ebp - 0x880]
mov ecx, 0x1006f038
call fcn.10003f1c
jmp 0x1002619e
jmp 0x1002617c
jmp 0x10026156
mov dword [ebp - 0x538], 3
mov byte [ebp - 4], 0x24
cmp dword [ebp - 0x518], 0x51ce
jge 0x10026222
mov edx, dword [ebp - 0x70c]
mov ecx, 0x1006f038
call fcn.1000567a
jmp 0x1002623e
mov dword [ebp - 4], 0x23
jmp 0x1002624e
cmp dword [ebp - 0x31c], 0
je 0x100262a9
mov dword [ebp - 0x528], 0xfffffff7
mov dword [ebp - 0x714], 0xfffffff7
mov eax, dword [ebp - 0x31c]
cmp eax, dword [ebp - 0x31c]
jle 0x10026285
mov dword [ebp - 0x520], 1
jmp 0x1002628c
and dword [ebp - 0x520], 0
mov eax, dword [ebp - 0x520]
mov dword [ebp - 0x528], eax
mov eax, dword [ebp - 0x528]
mov dword [ebp - 0x714], eax
jmp 0x10026397
mov dword [ebp - 0x530], 0x4096
mov dword [ebp - 0x724], str.okpwln_mjsrnvxbp_eqwviin_kjgonqq_vgb_kbq_wxuav_vjknwexi_zjubjbjsj
cmp dword [ebp - 0x530], 0x421c
jle 0x10026341
and dword [ebp - 0x24c], 0
jmp 0x100262df
mov eax, dword [ebp - 0x24c]
inc eax
mov dword [ebp - 0x24c], eax
cmp dword [ebp - 0x24c], 0x2512
jge 0x10026341
and dword [ebp - 0x254], 0
jmp 0x10026301
mov eax, dword [ebp - 0x254]
inc eax
mov dword [ebp - 0x254], eax
cmp dword [ebp - 0x254], 0x78ab
jge 0x1002633f
mov eax, dword [ebp - 0x24c]
imul eax, dword [ebp - 0x254]
cdq
mov dword [ebp - 0x88c], eax
mov dword [ebp - 0x888], edx
push dword [ebp - 0x888]
push dword [ebp - 0x88c]
mov ecx, 0x1006f038
call fcn.10003f1c
jmp 0x100262f4
jmp 0x100262d2
mov dword [ebp - 0x71c], 0
mov byte [ebp - 4], 0x26
cmp dword [ebp - 0x530], 0x3dba
jge 0x1002636b
mov edx, dword [ebp - 0x724]
mov ecx, 0x1006f038
call fcn.1000567a
jmp 0x10026387
mov dword [ebp - 4], 0x23
jmp 0x10026397
mov eax, dword [ebp - 0x538]
dec eax
mov dword [ebp - 0x538], eax
and dword [ebp - 0x27c], 0
jmp 0x100263ba
cmp dword [ebp - 0x27c], 0xf
jae 0x10026c4f
mov dword [ebp - 0x1c], 1
mov dword [ebp - 0xb4], 0x7750
mov dword [ebp - 0x48], 0xffffffff
mov dword [ebp - 0x6a4], 0xa60813c2
mov dword [ebp - 0x6a0], 0xa60813c2
mov dword [ebp - 0x69c], 0xa60813c2
mov dword [ebp - 0x698], 0xa60813c2
mov dword [ebp - 0xc4], 0x245e3205
mov dword [ebp - 0xec], 0x98071081
mov dword [ebp - 0x68], 0x207b8a5f
mov dword [ebp - 0x25c], 0
jmp 0x1002643b
push 1
push 0
lea eax, [ebp - 0xb60]
push eax
push dword [ebp - 0x628]
call fcn.10027234
add esp, 0x10
mov dword [0x104701b4], eax
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xb60]
call fcn.1001a018
mov dword [ebp - 0xa0c], 0xfffc
mov dword [ebp - 0x630], 0x1ab5
mov dword [ebp - 0x75c], str.cpjjrtug_owsbvcycm_dxa_xvpbnwam_tlcox_brnrd_evsl_vkoax_yqz
cmp dword [ebp - 0x630], 0x1b75
jle 0x10026d96
and dword [ebp - 0x294], 0
jmp 0x10026cc0
mov eax, dword [ebp - 0x294]
inc eax
mov dword [ebp - 0x294], eax
cmp dword [ebp - 0x294], 0xe6
jge 0x10026d85
and dword [ebp - 0x29c], 0
jmp 0x10026ce6
mov eax, dword [ebp - 0x29c]
inc eax
mov dword [ebp - 0x29c], eax
cmp dword [ebp - 0x29c], 0x32f
jge 0x10026d80
and dword [ebp - 0x284], 0
jmp 0x10026d0c
mov eax, dword [ebp - 0x284]
inc eax
mov dword [ebp - 0x284], eax
cmp dword [ebp - 0x284], 0x6679
jge 0x10026d7b
and dword [ebp - 0x28c], 0
jmp 0x10026d2e
mov eax, dword [ebp - 0x28c]
inc eax
mov dword [ebp - 0x28c], eax
cmp dword [ebp - 0x28c], 0x76d9
jge 0x10026d79
mov eax, dword [ebp - 0x284]
add eax, dword [ebp - 0x28c]
mov ecx, dword [ebp - 0x294]
and ecx, dword [ebp - 0x29c]
xor eax, ecx
cdq
mov dword [ebp - 0x8a4], eax
mov dword [ebp - 0x8a0], edx
push dword [ebp - 0x8a0]
push dword [ebp - 0x8a4]
mov ecx, 0x1006f038
call fcn.10003f1c
jmp 0x10026d21
jmp 0x10026cff
jmp 0x10026cd9
jmp 0x10026cb3
push 0x26c9
push 0
push 0
push 0
call dword [sym.imp.GDI32.dll_CombineRgn]
mov byte [ebp - 0xcb], 0
movzx eax, byte [ebp - 0xcb]
test eax, eax
je 0x10026db7
push 0
push 0x1416
push 0
call dword [sym.imp.GDI32.dll_GetBitmapBits]
mov dword [ebp - 4], 0x2a
cmp dword [ebp - 0x630], 0x17b0
jge 0x10026dda
mov edx, dword [ebp - 0x75c]
mov ecx, 0x1006f038
call fcn.1000567a
jmp 0x10026df6
or dword [ebp - 4], 0xffffffff
jmp 0x10026e00
mov byte [ebp - 0xd1], 0
movzx eax, byte [ebp - 0xd1]
test eax, eax
je 0x10026e1a
push 0
call dword [sym.imp.KERNEL32.dll_GlobalLock]
cmp dword [0x104701b4], 0
je 0x100271ff
mov eax, dword [ebp + 8]
mov dword [ebp - 0x764], eax
mov eax, dword [ebp + 0xc]
mov dword [ebp - 0x774], eax
mov eax, dword [ebp - 0x764]
mov dword [ebp - 0x784], eax
mov dword [ebp - 0x658], 0x91c5
mov dword [ebp - 0xf4], 2
mov dword [ebp - 0xfc], 4
mov dword [ebp - 0x2b4], 0xbe197e7c
mov dword [ebp - 0x2a4], 0
jmp 0x10026e86
mov eax, dword [ebp - 0x2a4]
inc eax
mov dword [ebp - 0x2a4], eax
cmp dword [ebp - 0x2a4], 3
jge 0x10026ea2
mov eax, dword [ebp - 0x2a4]
mov dword [ebp + eax*4 - 0xa50], 0x66193fe6
jmp 0x10026e79
mov byte [ebp - 0xcd], 0
movzx eax, byte [ebp - 0xcd]
test eax, eax
je 0x10026ed1
push 0x11b5
push 0
push 0
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_PolyPolygon]
cmp dword [ebp - 0xf4], 1
jl 0x10026ee6
mov eax, dword [ebp - 0xf4]
mov dword [ebp - 0xa5c], eax
cmp dword [ebp - 0xf4], 0
je 0x10026f04
cmp dword [ebp - 0xf4], 0
je 0x10026f04
mov dword [ebp - 0x638], 1
jmp 0x10026f0b
and dword [ebp - 0x638], 0
mov eax, dword [ebp - 0x638]
mov dword [ebp - 0xf4], eax
mov eax, dword [ebp - 0xf4]
cmp eax, dword [ebp - 0xfc]
jle 0x10026f31
mov dword [ebp - 0x640], 1
jmp 0x10026f38
and dword [ebp - 0x640], 0
mov eax, dword [ebp - 0xfc]
cmp dword [ebp - 0x640], eax
jle 0x10026f52
mov dword [ebp - 0x648], 1
jmp 0x10026f59
and dword [ebp - 0x648], 0
cmp dword [ebp - 0x648], 5
jb 0x10026f6e
mov dword [ebp - 0x650], 1
jmp 0x10026f75
and dword [ebp - 0x650], 0
mov dword [ebp - 0x658], 6
mov eax, dword [ebp - 0x650]
sub eax, dword [ebp - 0xfc]
cmp dword [ebp - 0x658], eax
jge 0x10026f9f
mov dword [ebp - 0x660], 1
jmp 0x10026fa6
and dword [ebp - 0x660], 0
mov eax, dword [ebp - 0xfc]
add eax, dword [ebp - 0x660]
cmp eax, dword [ebp - 0xfc]
jge 0x10026fc6
mov dword [ebp - 0x668], 1
jmp 0x10026fcd
and dword [ebp - 0x668], 0
mov eax, dword [ebp - 0x2b4]
cmp dword [ebp - 0x668], eax
je 0x10026fe7
mov dword [ebp - 0x670], 1
jmp 0x10026fee
and dword [ebp - 0x670], 0
mov eax, dword [ebp - 0x670]
mov dword [ebp - 0x2b4], eax
mov eax, dword [ebp - 0x2b4]
add eax, dword [ebp - 0xfc]
je 0x10027054
mov dword [ebp - 0x76c], 1
mov byte [ebp - 0xd5], 0
movzx eax, byte [ebp - 0xd5]
test eax, eax
je 0x10027048
push 0xea1
push 0
push 0
push 0
push 0
push 0x73e
push 0x18a8
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_ScrollWindowEx]
mov dword [ebp - 0x76c], 0x4c821046
jmp 0x100270b7
mov dword [ebp - 0x2ac], 0
jmp 0x1002706d
mov eax, dword [ebp - 0x2ac]
inc eax
mov dword [ebp - 0x2ac], eax
cmp dword [ebp - 0x2ac], 2
jge 0x10027089
mov eax, dword [ebp - 0x2ac]
mov dword [ebp + eax*4 - 0xad4], 0xfffffffb
jmp 0x10027060
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0xa50]
inc eax
push 4
pop ecx
shl ecx, 0
mov dword [ebp + ecx - 0xa50], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xad4]
mov dword [ebp - 0x2b4], eax
mov eax, dword [ebp - 0x774]
mov dword [ebp - 0x77c], eax
push dword [ebp - 0x77c]
push dword [ebp - 0x784]
call dword [0x104701b4]
mov dword [ebp - 0x78c], eax
mov dword [ebp - 0x4c], 0
jmp 0x100270eb
mov eax, dword [ebp - 0x4c]
inc eax
mov dword [ebp - 0x4c], eax
cmp dword [ebp - 0x4c], 2
jge 0x10027101
mov eax, dword [ebp - 0x4c]
mov dword [ebp + eax*4 - 0xb78], 0
jmp 0x100270e4
mov dword [ebp - 0x4c], 0
jmp 0x10027111
mov eax, dword [ebp - 0x4c]
inc eax
mov dword [ebp - 0x4c], eax
cmp dword [ebp - 0x4c], 3
jge 0x10027127
mov eax, dword [ebp - 0x4c]
mov dword [ebp + eax*4 - 0x97c], 0x79763266
jmp 0x1002710a
push 4
pop eax
shl eax, 0
mov dword [ebp + eax - 0x97c], 1
jmp 0x10027155
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x97c]
dec eax
push 4
pop ecx
shl ecx, 0
mov dword [ebp + ecx - 0x97c], eax
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x97c], 0
jl 0x100271f7
mov dword [ebp - 0x2bc], 0
jmp 0x10027182
mov eax, dword [ebp - 0x2bc]
inc eax
mov dword [ebp - 0x2bc], eax
cmp dword [ebp - 0x2bc], 3
jge 0x1002719e
mov eax, dword [ebp - 0x2bc]
mov dword [ebp + eax*4 - 0x958], 0xfffffffd
jmp 0x10027175
push 4
pop eax
shl eax, 1
mov dword [ebp + eax - 0x958], 0
jmp 0x100271c9
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x958]
inc eax
push 4
pop ecx
shl ecx, 1
mov dword [ebp + ecx - 0x958], eax
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0x958], 1
jg 0x100271f2
mov byte [ebp - 0x85], 0
movzx eax, byte [ebp - 0x85]
test eax, eax
je 0x100271f0
call dword [sym.imp.KERNEL32.dll_GetCommandLineA]
jmp 0x100271b0
jmp 0x1002713a
mov eax, dword [ebp - 0x78c]
jmp 0x10027201
xor eax, eax
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret