Function at 0x1001ead6
Capabilities:
Accept command line arguments
Get common file path

Disassembly:
mov eax, 0x10057789
call fcn.10056a88
sub esp, 0x220
mov dword [ebp - 0x3c], 0x3a4a
push ebx
mov dword [ebp - 0x3c], 0x6aabecba
xor ebx, ebx
mov dword [ebp - 0x3c], 0xffffffff
push esi
mov dword [ebp - 0x3c], 0x644accb2
push edi
mov dword [ebp - 0x3c], 0x56e7
mov dword [ebp - 0x10], esp
mov dword [ebp - 0xc4], edx
mov dword [ebp - 0xa4], ecx
mov dword [ebp - 0x158], ebx
mov dword [ebp - 0x18], ebx
jmp 0x1001eb39
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x1d8], 0xadae8c9f
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 3
jl 0x1001eb28
mov dword [ebp - 0x18], ebx
jmp 0x1001eb55
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x11c], 0xf3b8c105
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 1
jl 0x1001eb44
mov dword [ebp - 0x18], ebx
jmp 0x1001eb71
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0xa0], 0xffffffff
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 1
jl 0x1001eb60
dec dword [ebp - 0xa0]
mov dword [ebp - 0x24], 0xfffffffc
mov dword [ebp - 0x38], 0x515466b
mov dword [ebp - 0x28], 0xab6dad81
mov dword [ebp - 0x2c], 0x45f5
cmp dword [ebp - 0x2c], 0x4870
jle 0x1001ec02
mov edi, ebx
mov esi, ebx
mov dword [ebp - 0x30], ebx
mov dword [ebp - 0x1c], esi
mov dword [ebp - 0x28], 0x5d48
mov eax, esi
lea ecx, [ebp - 0x1f0]
xor eax, edi
cdq
push edx
push eax
call fcn.10001a55
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x1001ebcf
mov eax, dword [eax]
push eax
call fcn.1003e75c
pop ecx
push ebx
push 1
lea ecx, [ebp - 0x1f0]
call fcn.1000460a
dec esi
dec dword [ebp - 0x28]
jne 0x1001ebb3
mov esi, dword [ebp - 0x30]
inc esi
mov dword [ebp - 0x30], esi
cmp esi, 0x3536
jl 0x1001eba9
inc edi
cmp edi, 0x37c
jl 0x1001eba4
mov dword [ebp - 0x1c], ebx
jmp 0x1001ec18
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0x88], 0x3099cfe0
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 1
jl 0x1001ec07
cmp dword [ebp - 0x2c], 0x4285
jge 0x1001ec32
push str.dai_cvtqugq_pymmjxip_pkvspeco_lazpdabjm
call fcn.1003e75c
pop ecx
or dword [ebp - 4], 0xffffffff
mov byte [ebp - 0x1d], bl
cmp byte [ebp - 0x1d], bl
je 0x1001ec45
push ebx
call dword [sym.imp.ADVAPI32.dll_GetLengthSid]
inc dword [ebp - 0x88]
cmp dword [ebp - 0x24], 5
ja 0x1001ec54
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0x24]
xor ecx, ecx
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0x38]
mov eax, dword [ebp - 0x38]
mov edx, dword [ebp - 0x24]
sub edx, eax
mov eax, dword [ebp - 0x88]
cmp eax, edx
setge cl
mov dword [ebp - 0x24], ecx
mov eax, dword [ebp - 0x24]
mov dword [ebp - 0x28], eax
mov dword [ebp - 0x2c], 0x432a2768
mov dword [ebp - 0x1c], ebx
jmp 0x1001ec9e
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0x214], 0xbb2c2135
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 3
jl 0x1001ec8d
mov dword [ebp - 0x2c], 2
cmp dword [ebp - 0x2c], ebx
jl 0x1001ed09
mov byte [ebp - 0x1d], bl
cmp byte [ebp - 0x1d], bl
je 0x1001ed04
mov esi, dword [sym.imp.USER32.dll_GetDesktopWindow]
push 0x14f1
push 0x1362
push 0xc3e
push ebx
push 0xc44
push 0x446
call esi
mov edi, dword [sym.imp.USER32.dll_GetDC]
push eax
call edi
push eax
push 0x313
push 0x240b
push 0xd44
push 0x1a43
call esi
push eax
call edi
push eax
call dword [sym.imp.GDI32.dll_MaskBlt]
dec dword [ebp - 0x2c]
jns 0x1001ecb0
mov dword [ebp - 0x80], 0xd035902
xor ecx, ecx
mov dword [ebp - 0x7c], 0xf5043e06
inc ecx
mov dword [ebp - 0x78], 0x5108511
mov word [ebp - 0x74], 0x430
mov byte [ebp - 0x72], 0xd
mov byte [ebp - 0x71], cl
mov word [ebp - 0x70], 0xd
mov byte [ebp - 0x6e], 0x2b
push 0x6f
pop eax
mov word [ebp - 0x100], ax
mov dword [ebp - 0x34], ecx
mov dword [ebp - 0x28], 0xb09f
mov dword [ebp - 0x30], 0xa10dd664
mov dword [ebp - 0x2c], 5
mov dword [ebp - 0x2c], 0x89c089ce
mov dword [ebp - 0x30], 0xfffffff7
mov dword [ebp - 0x1c], ebx
jmp 0x1001ed7e
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0xd4], 5
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 2
jl 0x1001ed6d
mov eax, dword [ebp - 0x34]
xor edx, edx
mov eax, dword [ebp - 0x28]
mov dword [ebp - 0x30], ecx
mov ecx, dword [ebp - 0x30]
mov eax, dword [ebp - 0x28]
cmp ecx, eax
push 2
setne dl
xor ecx, ecx
mov dword [ebp - 0xd4], edx
xor edx, edx
mov eax, dword [ebp - 0x34]
inc edx
mov eax, dword [ebp - 0xd4]
mov eax, dword [ebp - 0x34]
mov dword [ebp - 0x2c], edx
mov eax, dword [ebp - 0x34]
sub eax, 9
mov dword [ebp - 0x2c], eax
mov eax, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x34]
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x30]
test eax, eax
pop esi
sets cl
mov edi, esi
mov dword [ebp - 0x30], ecx
mov dword [ebp - 0x30], ebx
mov dword [ebp - 0x28], edi
cmp edi, 0x13
jae 0x1001f16b
movzx eax, byte [ebp - 0x80]
lea eax, [eax*2 + 2]
cmp edi, eax
jne 0x1001ee07
movzx eax, byte [ebp + edi - 0x80]
dec edi
add edi, eax
lea ecx, [eax + 1]
mov dword [ebp - 0x30], ecx
jmp 0x1001f164
mov dword [ebp - 0x24], 0xa80e3580
mov dword [ebp - 0x2c], 5
mov dword [ebp - 0x34], 0x29cbc21b
mov dword [ebp - 0x18], ebx
jmp 0x1001ee32
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0xb4], 0x3b372ba2
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 4
jl 0x1001ee21
mov dword [ebp - 0x18], ebx
jmp 0x1001ee4e
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x198], 0xffffffff
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 4
jl 0x1001ee3d
mov byte [ebp - 0x1d], bl
cmp byte [ebp - 0x1d], 0
je 0x1001ee6c
push 0xa8d
push ebx
call dword [sym.imp.KERNEL32.dll_GetSystemDirectoryA]
xor edx, edx
inc edx
cmp dword [ebp - 0x24], ebx
je 0x1001ee9f
mov eax, dword [ebp - 0x24]
mov dword [ebp - 0xa8], eax
test eax, eax
je 0x1001ee9f
cmp dword [ebp - 0xb4], ebx
je 0x1001ee90
mov dword [ebp - 0xa8], edx
mov ecx, edx
jmp 0x1001ee98
mov dword [ebp - 0xa8], ebx
mov ecx, ebx
mov eax, dword [ebp - 0x24]
sub ecx, eax
jne 0x1001eea1
mov edx, ebx
cmp edx, dword [ebp - 0x24]
jg 0x1001eea9
mov eax, dword [ebp - 0x24]
mov dword [ebp - 0x2c], 0x7153
mov eax, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x24]
neg eax
sbb eax, eax
xor edx, edx
inc eax
imul eax, dword [ebp - 0x34]
imul ecx, eax, 0xc0e0
mov eax, dword [ebp - 0x34]
cmp ecx, eax
setl dl
imul edx, dword [ebp - 0x24]
test edx, edx
je 0x1001eeda
mov eax, dword [ebp - 0x34]
mov eax, dword [ebp - 0x34]
mov eax, dword [ebp - 0x34]
sub eax, 0x7a35da77
je 0x1001ef0d
mov dword [ebp - 0x28], 1
mov byte [ebp - 0x1d], bl
cmp byte [ebp - 0x1d], 0
je 0x1001ef05
push ebx
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_KillTimer]
inc dword [ebp - 0x28]
jmp 0x1001f12f
mov dword [ebp - 0x2c], 0xf12afbca
mov dword [ebp - 0x38], 0xbd0c7f12
mov dword [ebp - 0x38], 0xf7cfeb45
mov dword [ebp - 0x3c], 1
mov dword [ebp - 0x1c], ebx
jmp 0x1001ef3f
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0x118], 0x559c29c8
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], esi
jl 0x1001ef2e
mov dword [ebp - 0x24], 0x2887
cmp dword [ebp - 0x24], 0x2a45
jle 0x1001ef88
mov edi, ebx
mov eax, ebx
mov dword [ebp - 0x1c], 0x87c
mov dword [ebp - 0x38], eax
cdq
mov ecx, 0x100711f8
push edx
push eax
call fcn.10003fa2
mov eax, dword [ebp - 0x38]
add eax, edi
dec dword [ebp - 0x1c]
mov dword [ebp - 0x38], eax
jne 0x1001ef62
inc edi
cmp edi, 0x313b
jl 0x1001ef56
mov edi, dword [ebp - 0x28]
mov byte [ebp - 0x1d], bl
cmp byte [ebp - 0x1d], 0
je 0x1001efaf
push 0x25c5
push 0x1c19
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_GetPixel]
mov dword [ebp - 4], esi
cmp dword [ebp - 0x24], 0x2662
jge 0x1001efca
mov edx, str.dlraouokj_seawqzie_whuup_tngypvsz
mov ecx, 0x100711f8
call fcn.1000634f
or dword [ebp - 4], 0xffffffff
mov dword [ebp - 0x24], 0xffffffe2
jmp 0x1001f125
mov dword [ebp - 0x28], ebx
mov dword [ebp - 0x38], 0xa1fb9d33
mov dword [ebp - 0x18], ebx
jmp 0x1001f022
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x84], 0xddd8d7cd
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 1
jl 0x1001f011
mov dword [ebp - 0x18], ebx
jmp 0x1001f03e
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x110], 0xc011945b
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 3
jl 0x1001f02d
mov dword [ebp - 0x18], ebx
jmp 0x1001f05a
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0xc8], 0xf7bd129a
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 1
jl 0x1001f049
cmp dword [ebp - 0x2c], ebx
je 0x1001f0f5
mov eax, dword [ebp - 0x28]
xor edx, edx
mov ecx, dword [ebp - 0xac]
mov eax, dword [ebp - 0x2c]
cmp eax, ecx
mov eax, dword [ebp - 0x2c]
setg dl
imul ecx, edx, 0xfffffffd
xor edx, edx
cmp ecx, eax
mov eax, dword [ebp - 0x34]
setle dl
sub edx, eax
mov dword [ebp - 0x84], edx
cmp edx, dword [ebp - 0x28]
jne 0x1001f09c
mov eax, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x198]
xor ecx, ecx
mov eax, dword [ebp - 0x84]
mov eax, dword [ebp - 0xa8]
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0xa8]
mov eax, dword [ebp - 0xac]
mov eax, dword [ebp - 0x10c]
mov eax, dword [ebp - 0x84]
mov dword [ebp - 0x118], 1
mov eax, dword [ebp - 0x10c]
mov eax, dword [ebp - 0xb4]
mov eax, dword [ebp - 0x10c]
cmp eax, 0x13d06461
setg cl
mov dword [ebp - 0x38], ecx
mov eax, dword [ebp - 0x38]
mov eax, dword [ebp - 0xc8]
neg eax
sbb eax, eax
neg eax
mov dword [ebp - 0x38], eax
mov eax, dword [ebp - 0x3c]
imul eax, dword [ebp - 0x38]
cmp eax, dword [ebp - 0x34]
jl 0x1001f11d
cmp dword [ebp - 0x198], ebx
je 0x1001f11d
xor eax, eax
inc eax
jmp 0x1001f11f
mov eax, ebx
mov dword [ebp - 0x38], eax
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], 0xfffffff8
je 0x1001f002
movzx edx, byte [ebp + edi - 0x7f]
mov eax, edi
sub eax, dword [ebp - 0x30]
mov dword [ebp - 0x30], ebx
movzx eax, byte [ebp + eax - 0x82]
movzx eax, word [ebp + eax*2 - 0x104]
mov ecx, eax
and eax, edx
or ecx, edx
xor edx, edx
sub ecx, eax
movzx eax, byte [ebp + edi - 0x80]
inc edx
mov word [ebp + eax*2 - 0x104], cx
add edi, esi
jmp 0x1001edd9
mov dword [ebp - 0x30], edx
mov dword [ebp - 0x3c], 0x44ad
push 3
pop eax
mov dword [ebp - 0x34], eax
mov dword [ebp - 0x28], 0xb6f9b691
mov dword [ebp - 0x3c], edx
mov dword [ebp - 0x3c], 0xbfe6b87c
mov dword [ebp - 0x2c], 0x6eb3e198
mov dword [ebp - 0x2c], eax
mov dword [ebp - 0x3c], 0xffffffff
mov dword [ebp - 0x18], ebx
jmp 0x1001f1b3
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x14c], 0xfffffffc
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], edx
jl 0x1001f1a2
mov dword [ebp - 0x1c], 0x46b5
cmp dword [ebp - 0x1c], 0x47f9
jle 0x1001f212
mov edi, ebx
mov dword [ebp - 0x38], ebx
mov esi, ebx
mov dword [ebp - 0x2c], ebx
mov eax, edi
cdq
idiv esi
mov esi, 0x423
mov edi, edx
mov eax, edi
mov ecx, 0x100711f8
cdq
push edx
push eax
call fcn.10003fa2
dec edi
dec esi
jne 0x1001f1de
mov esi, dword [ebp - 0x2c]
mov edi, dword [ebp - 0x38]
inc esi
mov dword [ebp - 0x2c], esi
cmp esi, 0x70e
jl 0x1001f1d2
inc edi
mov dword [ebp - 0x38], edi
cmp edi, 0x19a0
jl 0x1001f1cd
xor edx, edx
inc edx
mov dword [ebp - 0x18], ebx
jmp 0x1001f225
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x50], 0xa53aa9ac
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], edx
jl 0x1001f217
mov dword [ebp - 4], 4
cmp dword [ebp - 0x1c], 0x4661
jge 0x1001f24c
mov edx, str.wfgyfxeks_jclmbu_eyhetainl_mmhbyvl_oanvxemw_wyecooeh_mkjfya_osdddh_qligi_qmbej_urauodx_lyxpi_xwo_kjerjrrcw
mov ecx, 0x100711f8
call fcn.1000634f
xor edx, edx
inc edx
or dword [ebp - 4], 0xffffffff
mov dword [ebp - 0x18], ebx
jmp 0x1001f28b
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x1ac], 0xfffffff9
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 2
jl 0x1001f27a
mov dword [ebp - 0x18], ebx
jmp 0x1001f2a7
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x13c], 0x2b293353
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 2
jl 0x1001f296
mov dword [ebp - 0x18], ebx
jmp 0x1001f2c3
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x148], 0xe4bcb816
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 2
jl 0x1001f2b2
inc dword [ebp - 0x28]
mov eax, dword [ebp - 0x50]
mov dword [ebp - 0x2c], 0x5412
cmp dword [ebp - 0x2c], ebx
je 0x1001f2de
mov eax, dword [ebp - 0x34]
mov eax, dword [ebp - 0x50]
mov eax, dword [ebp - 0x28]
mov dword [ebp - 0x138], edx
mov dword [ebp - 0x2c], edx
mov eax, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x50]
mov eax, dword [ebp - 0x30]
mov eax, dword [ebp - 0x50]
mov eax, dword [ebp - 0x30]
mov eax, dword [ebp - 0x50]
mov eax, dword [ebp - 0x3c]
mov eax, dword [ebp - 0x34]
add eax, dword [ebp - 0x30]
mov dword [ebp - 0x148], eax
xor eax, eax
mov word [ebp - 0xf6], ax
mov dword [ebp - 0x28], edx
mov dword [ebp - 0x3c], 0xcbcb1a7a
mov dword [ebp - 0x1c], ebx
jmp 0x1001f337
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0xc0], 0xb110c93b
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 3
jl 0x1001f326
mov dword [ebp - 0xb8], ebx
jmp 0x1001f3ab
mov dword [ebp - 0x28], 0x247a
mov dword [ebp - 0x1c], ebx
jmp 0x1001f35f
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0x48], 0x3fbb4ebb
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], edx
jl 0x1001f351
cmp dword [ebp - 0x48], ebx
je 0x1001f3a0
mov eax, dword [ebp - 0x48]
mov eax, dword [ebp - 0xb8]
mov eax, dword [ebp - 0x48]
mov eax, dword [ebp - 0x48]
mov eax, dword [ebp - 0x48]
cmp dword [ebp - 0x48], 0xfffa
jne 0x1001f38b
mov ecx, edx
cmp dword [ebp - 0x48], ebx
jne 0x1001f38d
mov ecx, ebx
mov eax, dword [ebp - 0x48]
mov dword [ebp - 0x28], eax
mov eax, dword [ebp - 0x28]
mov dword [ebp - 0x28], eax
mov eax, edx
cmp dword [ebp - 0x28], ecx
jne 0x1001f3a2
mov eax, ebx
mov dword [ebp - 0x3c], eax
inc dword [ebp - 0xb8]
cmp dword [ebp - 0xb8], 0x1c
je 0x1001f345
xor eax, eax
mov dword [ebp - 0x120], 7
mov word [ebp - 0x134], ax
lea ecx, [ebp - 0x134]
lea eax, [ebp - 0x104]
mov dword [ebp - 0x124], ebx
push eax
call fcn.1000464e
mov dword [ebp - 4], 6
lea edi, [ebp - 0x104]
xor eax, eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
mov dword [ebp - 0x3c], 0x51ad386c
mov dword [ebp - 0x3c], 0xcd53bc6e
mov dword [ebp - 0x3c], 0xf47a6dee
mov dword [ebp - 0x3c], 0x1328f6c7
mov dword [ebp - 0x3c], 0xfffffffc
mov dword [ebp - 0x3c], 0x166941fc
mov dword [ebp - 0x3c], 0xf2d3
mov dword [ebp - 0x30], 0x1b98
mov dword [ebp - 0x3c], 0xbf0ddd9c
mov dword [ebp - 0x28], 0x6b4d
cmp dword [ebp - 0x28], 0x6d39
jle 0x1001f4a7
mov edx, ebx
mov dword [ebp - 0x2c], ebx
mov esi, ebx
mov edi, ebx
mov ecx, edi
mov eax, esi
shl eax, cl
lea ecx, [ebp - 0x208]
and eax, edx
cdq
push edx
push eax
call fcn.10001a55
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x1001f46a
mov eax, dword [eax]
push eax
call fcn.1003e75c
pop ecx
push ebx
push 1
lea ecx, [ebp - 0x208]
call fcn.1000460a
mov edx, dword [ebp - 0x2c]
inc edi
cmp edi, 0x2831
jl 0x1001f44a
inc esi
cmp esi, 0x25b0
jl 0x1001f448
inc edx
mov dword [ebp - 0x2c], edx
cmp edx, 0xebc
jl 0x1001f446
push ebx
call dword [sym.imp.KERNEL32.dll_GlobalUnlock]
push 2
mov dword [ebp - 0x24], ebx
pop esi
jmp 0x1001f4c0
mov eax, dword [ebp - 0x24]
mov dword [ebp + eax*4 - 0x1b4], 0xae9714a0
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], esi
jl 0x1001f4af
cmp dword [ebp - 0x28], 0x699d
jge 0x1001f4d9
push str.wprinjt_mfubcxxdp_tnmeskb_zvxpss_diijfoook_kgqxfysd_rjakfilja
call fcn.1003e75c
pop ecx
mov dword [ebp - 4], 6
mov dword [ebp - 0x24], ebx
jmp 0x1001f4f6
mov eax, dword [ebp - 0x24]
mov dword [ebp + eax*4 - 0x140], 3
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], 1
jl 0x1001f4e5
inc dword [ebp - 0x30]
lea ecx, [ebp - 0x188]
push dword [ebp - 0xc4]
mov dword [ebp - 0x3c], 0xffffffff
call fcn.10006f05
mov byte [ebp - 4], 9
mov dword [ebp - 0x2c], 0xf6af1124
mov dword [ebp - 0x2c], ebx
cmp dword [ebp - 0x2c], 0xffffffea
jg 0x1001f61c
mov dword [ebp - 0x38], 0x73d8
cmp dword [ebp - 0x38], 0x744b
jle 0x1001f5c5
mov eax, ebx
mov dword [ebp - 0x28], ebx
mov edi, ebx
mov dword [ebp - 0x30], ebx
mov ecx, edi
mov dword [ebp - 0x3c], ebx
shl eax, cl
mov edi, ebx
mov dword [ebp - 0x1c], eax
or eax, edi
lea ecx, [ebp - 0x22c]
cdq
push edx
push eax
call fcn.10001a55
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x1001f573
mov eax, dword [eax]
push eax
call fcn.1003e75c
pop ecx
push ebx
push 1
lea ecx, [ebp - 0x22c]
call fcn.1000460a
mov eax, dword [ebp - 0x1c]
inc edi
cmp edi, 0x2eff
jl 0x1001f559
mov edi, dword [ebp - 0x30]
mov eax, dword [ebp - 0x28]
inc edi
mov dword [ebp - 0x30], edi
cmp edi, 0x6870
jl 0x1001f54d
inc eax
mov dword [ebp - 0x28], eax
cmp eax, 0x25b1
jl 0x1001f548
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_CreateHalftonePalette]
cmp dword [ebp - 0x38], 0x726f
jge 0x1001f5d9
push str.ffarknd_roxcjx_qzetex_apoos
call fcn.1003e75c
pop ecx
mov dword [ebp - 4], 9
mov dword [ebp - 0x1c], ebx
jmp 0x1001f5f6
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0x154], 0x5c19
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], esi
jl 0x1001f5e5
mov byte [ebp - 0x1d], bl
cmp byte [ebp - 0x1d], 0
je 0x1001f60c
push ebx
push ebx
call dword [sym.imp.USER32.dll_UnregisterClassA]
cmp dword [ebp - 0x150], ebx
jne 0x1001f61c
dec dword [ebp - 0x2c]
jmp 0x1001f525
push 0x5c
pop eax
mov dword [ebp - 0x64], 0x7f049f00
mov word [ebp - 0x60], 0xc615
mov byte [ebp - 0x5e], 0xa8
mov word [ebp - 0x58], ax
mov dword [ebp - 0x30], 0x7413
cmp dword [ebp - 0x30], 0x77ed
jle 0x1001f684
mov edi, ebx
mov esi, ebx
mov ecx, ebx
mov dword [ebp - 0x28], ebx
mov eax, esi
cdq
idiv ecx
mov ecx, 0x100711f8
or edx, edi
mov eax, edx
cdq
push edx
push eax
call fcn.10003fa2
mov ecx, dword [ebp - 0x28]
inc ecx
mov dword [ebp - 0x28], ecx
cmp ecx, 0x43ae
jl 0x1001f64d
inc esi
cmp esi, 0x4416
jl 0x1001f648
inc edi
cmp edi, 0x5101
jl 0x1001f646
push 2
pop esi
mov ecx, ebx
cmp esi, 2
jne 0x1001f695
push 5
pop ecx
push ecx
pop esi
jmp 0x1001f6bc
movzx edx, byte [ebp + esi - 0x63]
mov eax, esi
sub eax, ecx
movzx eax, byte [ebp + eax - 0x66]
movzx eax, word [ebp + eax*2 - 0x58]
mov ecx, eax
and eax, edx
or ecx, edx
sub ecx, eax
movzx eax, byte [ebp + esi - 0x64]
mov word [ebp + eax*2 - 0x58], cx
mov ecx, ebx
add esi, 2
cmp esi, 7
jb 0x1001f689
mov byte [ebp - 4], 0xc
cmp dword [ebp - 0x30], 0x7408
jge 0x1001f6fe
mov edx, str.rxoqgpte_hyposkic_oyfei_ura
mov ecx, 0x100711f8
call fcn.1000634f
jmp 0x1001f6fe
mov dword [ebp - 4], 9
xor eax, eax
mov word [ebp - 0x56], ax
mov dword [ebp - 0x24], 0xfffffff8
mov dword [ebp - 0x1c], ebx
jmp 0x1001f728
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0x9c], 0x13b91020
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 2
jl 0x1001f717
mov dword [ebp - 0x24], ebx
jmp 0x1001f79d
mov dword [ebp - 0x1c], ebx
jmp 0x1001f749
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0x1c4], 0xffffffff
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 4
jl 0x1001f738
mov eax, dword [ebp - 0x24]
or ecx, 0xffffffff
mov eax, dword [ebp + eax*4 - 0x9c]
mov dword [ebp - 0x1c0], 0x1554
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp + eax*4 - 0x9c]
sub ecx, eax
mov edx, dword [ebp - 0x9c]
mov eax, dword [ebp - 0x24]
add edx, ecx
xor ecx, ecx
mov eax, dword [ebp + eax*4 - 0x9c]
cmp eax, 0x55059b8b
setge cl
imul ecx, edx
mov dword [ebp - 0x9c], ecx
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], 1
jle 0x1001f733
xor eax, eax
mov dword [ebp - 0xe0], 7
mov word [ebp - 0xf4], ax
lea ecx, [ebp - 0xf4]
lea eax, [ebp - 0x58]
mov dword [ebp - 0xe4], ebx
push eax
call fcn.1000464e
mov byte [ebp - 4], 0xe
push 2
mov dword [ebp - 0x2c], 0x905c8094
mov dword [ebp - 0x1c], ebx
pop esi
jmp 0x1001f7ef
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0x1cc], 9
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], esi
jl 0x1001f7de
mov dword [ebp - 0x2c], 1
cmp dword [ebp - 0x2c], ebx
jl 0x1001f827
mov byte [ebp - 0x1d], bl
cmp byte [ebp - 0x1d], 0
je 0x1001f822
mov edi, dword [sym.imp.USER32.dll_GetDesktopWindow]
call edi
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call edi
push eax
call dword [sym.imp.USER32.dll_ReleaseDC]
dec dword [ebp - 0x2c]
jns 0x1001f800
mov dword [ebp - 0x58], ebx
mov dword [ebp - 0x1c], ebx
mov dword [ebp - 0x1c], ebx
jmp 0x1001f843
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0x1a4], 0xfffffff7
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 3
jl 0x1001f832
mov edi, dword [sym.imp.USER32.dll_GetDesktopWindow]
mov byte [ebp - 0x1d], bl
cmp byte [ebp - 0x1d], 0
je 0x1001f86b
push 0xf03
push 0x13be
call edi
push eax
call dword [sym.imp.USER32.dll_EnableScrollBar]
mov dword [ebp - 0x1c], ebx
jmp 0x1001f8b2
mov dword [ebp - 0x34], ebx
mov dword [ebp - 0x34], ebx
jmp 0x1001f889
mov eax, dword [ebp - 0x34]
mov dword [ebp + eax*4 - 0x1a4], 0x8114768c
inc dword [ebp - 0x34]
cmp dword [ebp - 0x34], 3
jl 0x1001f878
mov byte [ebp - 0x1d], bl
cmp byte [ebp - 0x1d], 0
je 0x1001f8af
push 0xf6
push ebx
push ebx
call edi
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_PolyPolygon]
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], esi
jle 0x1001f870
mov dword [ebp - 0x18], 0x8a61928c
xor ecx, ecx
mov dword [ebp - 0x30], 0x509b9552
inc ecx
mov dword [ebp - 0x38], 0x2939c010
mov dword [ebp - 0x28], 0xffffffff
mov dword [ebp - 0x1c], ebx
jmp 0x1001f8ec
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0xcc], 0x67f5d1cc
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], ecx
jl 0x1001f8db
mov dword [ebp - 0x18], ebx
cmp dword [ebp - 0x18], 0xffffffed
jne 0x1001fa0f
mov dword [ebp - 0x28], 0xfffe
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 0x30], 0xd6
cmp dword [ebp - 0x30], 0x441
jle 0x1001f96e
push ebx
push 0x9ef
push ebx
call dword [sym.imp.GDI32.dll_GetObjectW]
mov ecx, ebx
mov dword [ebp - 0x2c], ebx
mov edi, ebx
mov dword [ebp - 0x28], ebx
mov eax, edi
cdq
idiv dword [ebp - 0x28]
mov eax, ecx
mov ecx, edx
sar eax, cl
mov ecx, 0x100711f8
cdq
push edx
push eax
call fcn.10003fa2
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x2c]
inc eax
mov dword [ebp - 0x28], eax
cmp eax, 0x36d5
jl 0x1001f92f
inc edi
cmp edi, 0x2923
jl 0x1001f92c
inc ecx
mov dword [ebp - 0x2c], ecx
cmp ecx, 0x637
jl 0x1001f92a
mov eax, dword [ebp - 0x18]
mov ecx, 0xedca8fec
cmp ecx, eax
sbb edx, edx
inc edx
sub edx, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x18]
neg edx
sbb edx, edx
xor ecx, ecx
inc edx
cmp eax, edx
setle cl
imul ecx, dword [ebp - 0x18]
test ecx, ecx
jne 0x1001f998
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x18]
add eax, 9
mov dword [ebp - 0x28], eax
mov eax, dword [ebp - 0x18]
inc eax
neg eax
sbb eax, eax
inc eax
sub eax, dword [ebp - 0x1c]
neg eax
sbb eax, eax
inc eax
sub eax, dword [ebp - 0x1c]
neg eax
sbb eax, eax
inc eax
add eax, dword [ebp - 0x28]
mov dword [ebp - 0x1c], eax
mov byte [ebp - 4], 0xf
cmp dword [ebp - 0x30], 0xfffffe2d
jge 0x1001f9fd
mov edx, str.xql_hbvo_lmwrnmqm_ylayv_mfkbqjy_egnbaon_nkigxyjbz_xxcxcsa_dmotmgj_vxjstac
mov ecx, 0x100711f8
call fcn.1000634f
jmp 0x1001f9fd
xor ecx, ecx
mov dword [ebp - 4], 0xe
inc ecx
dec dword [ebp - 0x18]
jmp 0x1001f8f4
mov eax, dword [ebp - 0x18]
mov edx, ebx
cmp dword [ebp - 0x18], ebx
je 0x1001fa1b
mov edx, ecx
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x30], ecx
cmp dword [ebp - 0x38], ebx
je 0x1001fa34
cmp dword [ebp - 0x18], ebx
jne 0x1001fa36
mov ecx, ebx
mov dword [ebp - 0x28], ecx
mov edi, esi
mov eax, dword [ebp - 0x28]
xor ecx, ecx
cmp edx, eax
push 0x5f
setl cl
mov dword [ebp - 0x18], ecx
mov ecx, ebx
mov eax, dword [ebp - 0x30]
mov eax, dword [ebp - 0x38]
mov eax, dword [ebp - 0x28]
mov dword [ebp - 0xcc], eax
pop eax
mov dword [ebp - 0x6c], 0xd1047e00
mov word [ebp - 0x68], 0x39aa
mov byte [ebp - 0x66], 0x6b
mov word [ebp - 0x54], ax
cmp edi, esi
jne 0x1001fa7c
push 5
pop ecx
push ecx
pop edi
jmp 0x1001faa3
movzx edx, byte [ebp + edi - 0x6b]
mov eax, edi
sub eax, ecx
movzx eax, byte [ebp + eax - 0x6e]
movzx eax, word [ebp + eax*2 - 0x54]
mov ecx, eax
and eax, edx
or ecx, edx
sub ecx, eax
movzx eax, byte [ebp + edi - 0x6c]
mov word [ebp + eax*2 - 0x54], cx
mov ecx, ebx
add edi, esi
cmp edi, 7
jb 0x1001fa71
xor eax, eax
mov dword [ebp - 0x15c], 7
mov word [ebp - 0x52], ax
lea ecx, [ebp - 0x170]
mov word [ebp - 0x170], ax
lea eax, [ebp - 0x54]
push eax
mov dword [ebp - 0x160], ebx
call fcn.1000464e
mov byte [ebp - 4], 0x11
mov dword [ebp - 0x18], 0xad313dd3
mov dword [ebp - 0x1c], ebx
jmp 0x1001faf0
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0x4c], ebx
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 1
jl 0x1001fae6
mov dword [ebp - 0x18], 0xfffffff4
jmp 0x1001fdda
mov dword [ebp - 0x28], 0xffffffff
mov dword [ebp - 0x24], 0xa27557bc
mov dword [ebp - 0x1c], 0xf4bb0f55
mov dword [ebp - 0x2c], 1
mov dword [ebp - 0x24], ebx
jmp 0x1001fb34
mov eax, dword [ebp - 0x24]
mov dword [ebp + eax*4 - 0x94], 0x33ac2541
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], 3
jl 0x1001fb23
mov dword [ebp - 0x24], ebx
jmp 0x1001fb50
mov eax, dword [ebp - 0x24]
mov dword [ebp + eax*4 - 0xdc], 9
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], esi
jl 0x1001fb3f
cmp dword [ebp - 0x90], 0xfffffff8
jl 0x1001fb70
cmp dword [ebp - 0x90], ebx
je 0x1001fb70
cmp dword [ebp - 0x18], ebx
je 0x1001fb70
xor eax, eax
inc eax
jmp 0x1001fb72
mov eax, ebx
cmp eax, dword [ebp - 0x18]
jle 0x1001fb80
cmp dword [ebp - 0x18], ebx
jne 0x1001fb80
mov ecx, ebx
jmp 0x1001fb83
xor ecx, ecx
inc ecx
mov eax, dword [ebp - 0x18]
xor edx, edx
cmp ecx, eax
mov eax, dword [ebp - 0x18]
setne dl
xor ecx, ecx
cmp edx, eax
setge cl
mov dword [ebp - 0x28], ecx
xor ecx, ecx
mov eax, dword [ebp - 0x28]
mov dword [ebp - 0x24], eax
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0x94]
mov eax, dword [ebp - 0x24]
cmp eax, 0x32f82966
setne cl
sub ecx, 0xc3825062
neg ecx
sbb ecx, ecx
sub ecx, 2
neg ecx
sbb ecx, ecx
inc ecx
dec ecx
jne 0x1001fbce
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x90]
mov eax, dword [ebp - 0x90]
cmp dword [ebp - 0x18], 0xffffffff
jae 0x1001fbea
cmp dword [ebp - 0x18], ebx
je 0x1001fbea
xor ecx, ecx
inc ecx
jmp 0x1001fbec
mov ecx, ebx
mov eax, dword [ebp - 0x18]
sub eax, ecx
mov ecx, 0xfa20bd03
neg eax
sbb eax, eax
inc eax
cmp ecx, eax
sbb eax, eax
inc eax
sub eax, dword [ebp - 0x18]
jne 0x1001fc11
cmp dword [ebp - 0x94], ebx
jne 0x1001fc11
mov ecx, ebx
jmp 0x1001fc14
xor ecx, ecx
inc ecx
mov eax, dword [ebp - 0x18]
add eax, 0xce06dfe5
add eax, ecx
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], ebx
je 0x1001fd1d
mov dword [ebp - 0x30], 0xe0855bbb
xor edx, edx
mov dword [ebp - 0x34], 0x9520128b
mov dword [ebp - 0x38], 0xffffffff
mov ecx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x18]
cmp ecx, eax
setg dl
mov dword [ebp - 0x30], edx
mov eax, dword [ebp - 0x94]
mov dword [ebp - 0x34], 0xef61
mov eax, dword [ebp - 0x34]
mov dword [ebp - 0x38], eax
mov eax, dword [ebp - 0x38]
mov dword [ebp - 0x4c], eax
add eax, 0x3978
mov dword [ebp - 0x2c], eax
mov eax, dword [ebp - 0x1c]
mov edx, dword [ebp - 0x90]
mov eax, dword [ebp - 0xdc]
neg edx
sbb edx, edx
xor ecx, ecx
neg edx
cmp edx, eax
setl cl
mov dword [ebp - 0x2c], ecx
mov eax, dword [ebp - 0x34]
imul eax, dword [ebp - 0x2c]
cmp eax, 0xffff
mov eax, dword [ebp - 0x38]
sbb ecx, ecx
xor edx, edx
neg ecx
cmp eax, ecx
setl dl
xor ebx, ebx
imul edx, dword [ebp - 0x30]
mov eax, dword [ebp - 0x94]
cmp edx, 9
setg bl
xor ecx, ecx
cmp ebx, eax
mov eax, dword [ebp - 0x90]
setl cl
xor edx, edx
cmp ecx, 0x5048
setg dl
xor ecx, ecx
imul eax, edx
cmp eax, 0x64b57dc5
mov eax, dword [ebp - 0x90]
setle cl
add eax, ecx
jne 0x1001fced
mov eax, dword [ebp - 0x4c]
mov dword [ebp - 0x38], 1
mov eax, dword [ebp - 0x38]
mov dword [ebp - 0x34], eax
mov eax, dword [ebp - 0x34]
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x30]
mov eax, dword [ebp - 0x30]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x24]
mov dword [ebp - 0x4c], eax
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x34]
mov dword [ebp - 0x28], eax
jmp 0x1001fd84
mov edi, dword [sym.imp.USER32.dll_GetDesktopWindow]
mov byte [ebp - 0x1d], bl
cmp byte [ebp - 0x1d], 0
je 0x1001fd4e
push 0x158f
push ebx
push ebx
push 0x9f0
push 0x15a5
push ebx
call edi
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_GetDIBits]
mov dword [ebp - 0x24], 0xfffffff4
jmp 0x1001fd7e
mov byte [ebp - 0x1d], bl
cmp byte [ebp - 0x1d], 0
je 0x1001fd7b
push ebx
push 0x7ba
push 0x1752
call edi
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_SetWindowExtEx]
dec dword [ebp - 0x24]
cmp dword [ebp - 0x24], 0xfffffff3
jge 0x1001fd57
mov eax, dword [ebp - 0x4c]
xor ecx, ecx
mov dword [ebp - 0x2c], 0x4fffb
mov eax, dword [ebp - 0x2c]
cmp eax, 0x2c56
mov edx, dword [ebp - 0x1c]
mov eax, dword [ebp - 0xdc]
setne cl
sub edx, ecx
xor ebx, ebx
cmp edx, eax
mov eax, dword [ebp - 0x24]
setg bl
xor ecx, ecx
cmp ebx, eax
setle cl
xor ebx, ebx
cmp ecx, dword [ebp - 0x1c]
je 0x1001fdc8
cmp dword [ebp - 0x4c], ebx
je 0x1001fdc8
xor ecx, ecx
inc ecx
jmp 0x1001fdca
mov ecx, ebx
mov eax, dword [ebp - 0x4c]
sub eax, ecx
neg eax
sbb eax, eax
inc eax
mov dword [ebp - 0x4c], eax
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 0xfffffffe
jl 0x1001fb02
mov dword [ebp - 0x54], ebx
mov dword [ebp - 0x28], 0x3d4
cmp dword [ebp - 0x28], 0x6c0
jle 0x1001fe24
call dword [sym.imp.KERNEL32.dll_GetCommandLineW]
mov esi, ebx
mov edi, ebx
mov eax, edi
mov ecx, 0x100711f8
or eax, esi
cdq
push edx
push eax
call fcn.10003fa2
inc edi
cmp edi, 0x2ce6
jl 0x1001fe01
inc esi
cmp esi, 0xf4e
jl 0x1001fdff
mov dword [ebp - 0x1c], 0xe07df7dc
mov byte [ebp - 4], 0x12
cmp dword [ebp - 0x28], 0xa9
jge 0x1001fe65
mov edx, str.sffusyj_oeaotdfuf_sjzxqy_tvxouqs_mbxxa_bmjqxhbt_yvaqfee
mov ecx, 0x100711f8
call fcn.1000634f
jmp 0x1001fe65
mov dword [ebp - 4], 0x11
mov esi, 0xffff
mov dword [ebp - 0x3c], 1
mov dword [ebp - 0x18], ebx
jmp 0x1001fe8b
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x44], 0xd5e48d32
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 1
jl 0x1001fe7d
mov dword [ebp - 0x18], ebx
jmp 0x1001fea4
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x40], 1
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 1
jl 0x1001fe96
mov dword [ebp - 0x18], ebx
jmp 0x1001feb9