Function at 0x100328f3
Capabilities:
Get system information on windows
Parse pe header
Read .ini file
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x100568c3
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
push ecx
sub esp, 0x8e8
push ebx
push esi
push edi
mov dword [ebp - 0x10], esp
cmp dword [ebp + 0x10], 0
jbe 0x10032c7b
movzx eax, byte [ebp + 0x14]
test eax, eax
je 0x10032c7b
mov dword [ebp - 0x118], 1
mov dword [ebp - 0xc4], 0xbae0
mov dword [ebp - 0x118], 1
jmp 0x1003295b
mov eax, dword [ebp - 0x118]
dec eax
mov dword [ebp - 0x118], eax
cmp dword [ebp - 0x118], 0xfffffff7
jg 0x10032c67
mov dword [ebp - 0x1b8], 0xb57e8b72
mov dword [ebp - 0x30], 0
jmp 0x10032982
mov eax, dword [ebp - 0x30]
inc eax
mov dword [ebp - 0x30], eax
cmp dword [ebp - 0x30], 3
jge 0x10032998
mov eax, dword [ebp - 0x30]
mov dword [ebp + eax*4 - 0x4c8], 0xa9d19ac1
jmp 0x1003297b
mov dword [ebp - 0x30], 0
jmp 0x100329a8
mov eax, dword [ebp - 0x30]
inc eax
mov dword [ebp - 0x30], eax
cmp dword [ebp - 0x30], 1
jge 0x100329be
mov eax, dword [ebp - 0x30]
mov dword [ebp + eax*4 - 0x434], 0x948214d2
jmp 0x100329a1
mov byte [ebp - 0x71], 0
movzx eax, byte [ebp - 0x71]
test eax, eax
je 0x100329d7
push 0x1d68
push 0
call dword [sym.imp.USER32.dll_CharLowerBuffW]
mov dword [ebp - 0x1b8], 0
jmp 0x100329f0
mov eax, dword [ebp - 0x1b8]
inc eax
mov dword [ebp - 0x1b8], eax
cmp dword [ebp - 0x1b8], 0x1b
jle 0x10032c62
mov dword [ebp - 0x60], 0x14173bf3
mov dword [ebp - 0x498], 0x4a6e8f59
mov dword [ebp - 0x494], 0x4a6e8f59
mov dword [ebp - 0x490], 0x4a6e8f59
mov dword [ebp - 0x48c], 0x4a6e8f59
mov dword [ebp - 0x1e4], 0x6eab3ae5
mov dword [ebp - 0x60], 2
jmp 0x10032a46
mov eax, dword [ebp - 0x60]
dec eax
mov dword [ebp - 0x60], eax
cmp dword [ebp - 0x60], 0
jl 0x10032c1d
mov dword [ebp - 0x1c0], 0
jmp 0x10032a69
mov eax, dword [ebp - 0x1c0]
inc eax
mov dword [ebp - 0x1c0], eax
cmp dword [ebp - 0x1c0], 3
jge 0x10032a85
mov eax, dword [ebp - 0x1c0]
mov dword [ebp + eax*4 - 0x340], 0xfffffffb
jmp 0x10032a5c
push 4
pop eax
shl eax, 0
mov dword [ebp + eax - 0x340], 0
jmp 0x10032ab3
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x340]
inc eax
push 4
pop ecx
shl ecx, 0
mov dword [ebp + ecx - 0x340], eax
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x340], 3
jge 0x10032add
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x340]
mov dword [ebp + eax*4 - 0x4c8], 7
jmp 0x10032a98
mov eax, dword [ebp - 0x60]
mov eax, dword [ebp + eax*4 - 0x4c8]
cmp eax, dword [ebp - 0x60]
jge 0x10032af8
mov dword [ebp - 0x318], 1
jmp 0x10032aff
and dword [ebp - 0x318], 0
mov eax, dword [ebp - 0x60]
cmp eax, dword [ebp - 0x60]
je 0x10032b13
mov dword [ebp - 0x1f0], 1
jmp 0x10032b1a
and dword [ebp - 0x1f0], 0
imul eax, dword [ebp - 0x1f0], 0xffffffff
imul eax, eax, 0xffff
imul eax, eax, 0xfffffff8
cmp dword [ebp - 0xc4], eax
jle 0x10032b3e
mov dword [ebp - 0x320], 1
jmp 0x10032b45
and dword [ebp - 0x320], 0
mov eax, dword [ebp - 0x318]
imul eax, dword [ebp - 0x320]
mov dword [ebp - 0x330], eax
push 4
pop eax
shl eax, 1
mov ecx, dword [ebp - 0x330]
mov dword [ebp + eax - 0x498], ecx
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x340]
cmp dword [ebp - 0x330], eax
jl 0x10032b8b
mov dword [ebp - 0x1dc], 1
jmp 0x10032b92
and dword [ebp - 0x1dc], 0
cmp dword [ebp - 0x1dc], 0xe280bfe7
je 0x10032bb0
mov eax, 0x9b467bb1
test eax, eax
jne 0x10032bb0
and dword [ebp - 0x310], 0
jmp 0x10032bba
mov dword [ebp - 0x310], 1
cmp dword [ebp - 0x310], 0xfff8
je 0x10032bd2
mov dword [ebp - 0x314], 1
jmp 0x10032bd9
and dword [ebp - 0x314], 0
mov eax, dword [ebp - 0x314]
mov dword [ebp - 0x1e4], eax
mov eax, dword [ebp - 0x1e4]
add eax, 0x11b
jne 0x10032bfe
mov dword [ebp - 0x294], 1
jmp 0x10032c05
and dword [ebp - 0x294], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x294]
mov dword [ebp + eax - 0x434], ecx
jmp 0x10032a3f
mov dword [ebp - 0xc4], 0x18
jmp 0x10032c36
mov eax, dword [ebp - 0xc4]
inc eax
mov dword [ebp - 0xc4], eax
cmp dword [ebp - 0xc4], 0x3b
jg 0x10032c5d
mov byte [ebp - 0x82], 0
movzx eax, byte [ebp - 0x82]
test eax, eax
je 0x10032c5b
push 0
push 0
call dword [sym.imp.KERNEL32.dll_SizeofResource]
jmp 0x10032c29
jmp 0x100329e3
jmp 0x1003294e
movzx eax, word [ebp + 0x10]
push eax
push dword [ebp + 8]
call fcn.1002d6d3
pop ecx
pop ecx
jmp 0x1003583d
mov dword [ebp - 0x1ec], 0x5bb2
mov dword [ebp - 0x41c], str.phu_mjbitx_qdbanprbg_iccarm_xlxqgg_krcvxowi_liaqhjxh_kob_vyvodrec_jjbl_zyio
cmp dword [ebp - 0x1ec], 0x5d81
jle 0x10032dad
and dword [ebp - 0x124], 0
jmp 0x10032cb5
mov eax, dword [ebp - 0x124]
inc eax
mov dword [ebp - 0x124], eax
cmp dword [ebp - 0x124], 0x2815
jge 0x10032dad
and dword [ebp - 0x1c8], 0
jmp 0x10032cdb
mov eax, dword [ebp - 0x1c8]
inc eax
mov dword [ebp - 0x1c8], eax
cmp dword [ebp - 0x1c8], 0x13ec
jge 0x10032da8
and dword [ebp - 0x1ac], 0
jmp 0x10032d01
mov eax, dword [ebp - 0x1ac]
inc eax
mov dword [ebp - 0x1ac], eax
cmp dword [ebp - 0x1ac], 0x60f1
jge 0x10032da3
and dword [ebp - 0x1a4], 0
jmp 0x10032d27
mov eax, dword [ebp - 0x1a4]
inc eax
mov dword [ebp - 0x1a4], eax
cmp dword [ebp - 0x1a4], 0x2af
jge 0x10032d9e
mov eax, dword [ebp - 0x1c8]
cdq
idiv dword [ebp - 0x1ac]
mov ecx, dword [ebp - 0x1a4]
shl edx, cl
and edx, dword [ebp - 0x124]
mov eax, edx
cdq
mov dword [ebp - 0x388], eax
mov dword [ebp - 0x384], edx
push dword [ebp - 0x384]
push dword [ebp - 0x388]
lea ecx, [ebp - 0x62c]
call fcn.100042e3
pop ecx
pop ecx
mov dword [ebp - 0x37c], eax
mov ecx, dword [ebp - 0x37c]
call fcn.10002363
push eax
call fcn.10039f30
pop ecx
lea ecx, [ebp - 0x62c]
call fcn.10002359
jmp 0x10032d1a
jmp 0x10032cf4
jmp 0x10032cce
jmp 0x10032ca8
and dword [ebp - 4], 0
cmp dword [ebp - 0x1ec], 0x5b07
jge 0x10032dc9
push dword [ebp - 0x41c]
call fcn.10039f30
pop ecx
jmp 0x10032de5
or dword [ebp - 4], 0xffffffff
jmp 0x10032def
mov dword [ebp - 0x9c], 0x7730f94f
mov dword [ebp - 0x38], 0
jmp 0x10032e09
mov eax, dword [ebp - 0x38]
inc eax
mov dword [ebp - 0x38], eax
cmp dword [ebp - 0x38], 2
jge 0x10032e1f
mov eax, dword [ebp - 0x38]
mov dword [ebp + eax*4 - 0x460], 0xfffffffa
jmp 0x10032e02
mov dword [ebp - 0x38], 0
jmp 0x10032e2f
mov eax, dword [ebp - 0x38]
inc eax
mov dword [ebp - 0x38], eax
cmp dword [ebp - 0x38], 3
jge 0x10032e45
mov eax, dword [ebp - 0x38]
mov dword [ebp + eax*4 - 0x588], 0xfa3a92bd
jmp 0x10032e28
mov byte [ebp - 0x93], 0
movzx eax, byte [ebp - 0x93]
test eax, eax
je 0x10032e68
push 0
push 0x4f7
push 0
push 0
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntW]
mov dword [ebp - 0x9c], 0
jmp 0x10032e81
mov eax, dword [ebp - 0x9c]
inc eax
mov dword [ebp - 0x9c], eax
cmp dword [ebp - 0x9c], 1
jg 0x10032f2f
mov dword [ebp - 0x4a8], 0xc9ebf495
mov dword [ebp - 0x4a4], 0xc9ebf495
mov dword [ebp - 0x4a0], 0xc9ebf495
mov dword [ebp - 0x49c], 0xc9ebf495
push 4
pop eax
shl eax, 0
mov dword [ebp + eax - 0x588], 0xb9db
mov eax, dword [ebp - 0x9c]
mov ecx, dword [ebp - 0x9c]
mov edx, 0xb9db
dec edx
add edx, dword [ebp + ecx*4 - 0x460]
cmp edx, dword [ebp + eax*4 - 0x460]
je 0x10032ef5
mov dword [ebp - 0x2ec], 1
jmp 0x10032efc
and dword [ebp - 0x2ec], 0
cmp dword [ebp - 0x2ec], 1
jg 0x10032f11
mov dword [ebp - 0x1f4], 1
jmp 0x10032f18
and dword [ebp - 0x1f4], 0
push 4
pop eax
shl eax, 1
mov ecx, dword [ebp - 0x1f4]
mov dword [ebp + eax - 0x4a8], ecx
jmp 0x10032e74
cmp dword [ebp + 0x10], 0
jne 0x10033f27
mov edx, dword [ebp + 8]
mov ecx, dword [ebp + 0xc]
call fcn.100275b9
mov dword [ebp - 0x188], eax
mov dword [ebp - 0x17c], 1
mov dword [ebp - 0xd4], 0xbae0
mov dword [ebp - 0x17c], 1
jmp 0x10032f77
mov eax, dword [ebp - 0x17c]
dec eax
mov dword [ebp - 0x17c], eax
cmp dword [ebp - 0x17c], 0xfffffff7
jg 0x10033289
mov dword [ebp - 0x12c], 0xb57e8b72
mov dword [ebp - 0x34], 0
jmp 0x10032f9e
mov eax, dword [ebp - 0x34]
inc eax
mov dword [ebp - 0x34], eax
cmp dword [ebp - 0x34], 3
jge 0x10032fb4
mov eax, dword [ebp - 0x34]
mov dword [ebp + eax*4 - 0x4d8], 0xa9d19ac1
jmp 0x10032f97
mov dword [ebp - 0x34], 0
jmp 0x10032fc4
mov eax, dword [ebp - 0x34]
inc eax
mov dword [ebp - 0x34], eax
cmp dword [ebp - 0x34], 1
jge 0x10032fda
mov eax, dword [ebp - 0x34]
mov dword [ebp + eax*4 - 0x424], 0x948214d2
jmp 0x10032fbd
mov byte [ebp - 0x81], 0
movzx eax, byte [ebp - 0x81]
test eax, eax
je 0x10032ff9
push 0x1d68
push 0
call dword [sym.imp.USER32.dll_CharLowerBuffW]
mov dword [ebp - 0x12c], 0
jmp 0x10033012
mov eax, dword [ebp - 0x12c]
inc eax
mov dword [ebp - 0x12c], eax
cmp dword [ebp - 0x12c], 0x1b
jle 0x10033284
mov dword [ebp - 0x54], 0x14173bf3
mov dword [ebp - 0x478], 0x4a6e8f59
mov dword [ebp - 0x474], 0x4a6e8f59
mov dword [ebp - 0x470], 0x4a6e8f59
mov dword [ebp - 0x46c], 0x4a6e8f59
mov dword [ebp - 0x214], 0x6eab3ae5
mov dword [ebp - 0x54], 2
jmp 0x10033068
mov eax, dword [ebp - 0x54]
dec eax
mov dword [ebp - 0x54], eax
cmp dword [ebp - 0x54], 0
jl 0x1003323f
mov dword [ebp - 0x1a8], 0
jmp 0x1003308b
mov eax, dword [ebp - 0x1a8]
inc eax
mov dword [ebp - 0x1a8], eax
cmp dword [ebp - 0x1a8], 3
jge 0x100330a7
mov eax, dword [ebp - 0x1a8]
mov dword [ebp + eax*4 - 0x34c], 0xfffffffb
jmp 0x1003307e
push 4
pop eax
shl eax, 0
mov dword [ebp + eax - 0x34c], 0
jmp 0x100330d5
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x34c]
inc eax
push 4
pop ecx
shl ecx, 0
mov dword [ebp + ecx - 0x34c], eax
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x34c], 3
jge 0x100330ff
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x34c]
mov dword [ebp + eax*4 - 0x4d8], 7
jmp 0x100330ba
mov eax, dword [ebp - 0x54]
mov eax, dword [ebp + eax*4 - 0x4d8]
cmp eax, dword [ebp - 0x54]
jge 0x1003311a
mov dword [ebp - 0x1fc], 1
jmp 0x10033121
and dword [ebp - 0x1fc], 0
mov eax, dword [ebp - 0x54]
cmp eax, dword [ebp - 0x54]
je 0x10033135
mov dword [ebp - 0x29c], 1
jmp 0x1003313c
and dword [ebp - 0x29c], 0
imul eax, dword [ebp - 0x29c], 0xffffffff
imul eax, eax, 0xffff
imul eax, eax, 0xfffffff8
cmp dword [ebp - 0xd4], eax
jle 0x10033160
mov dword [ebp - 0x334], 1
jmp 0x10033167
and dword [ebp - 0x334], 0
mov eax, dword [ebp - 0x1fc]
imul eax, dword [ebp - 0x334]
mov dword [ebp - 0x204], eax
push 4
pop eax
shl eax, 1
mov ecx, dword [ebp - 0x204]
mov dword [ebp + eax - 0x478], ecx
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x34c]
cmp dword [ebp - 0x204], eax
jl 0x100331ad
mov dword [ebp - 0x2a4], 1
jmp 0x100331b4
and dword [ebp - 0x2a4], 0
cmp dword [ebp - 0x2a4], 0xe280bfe7
je 0x100331d2
mov eax, 0x9b467bb1
test eax, eax
jne 0x100331d2
and dword [ebp - 0x20c], 0
jmp 0x100331dc
mov dword [ebp - 0x20c], 1
cmp dword [ebp - 0x20c], 0xfff8
je 0x100331f4
mov dword [ebp - 0x2f4], 1
jmp 0x100331fb
and dword [ebp - 0x2f4], 0
mov eax, dword [ebp - 0x2f4]
mov dword [ebp - 0x214], eax
mov eax, dword [ebp - 0x214]
add eax, 0x11b
jne 0x10033220
mov dword [ebp - 0x2ac], 1
jmp 0x10033227
and dword [ebp - 0x2ac], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x2ac]
mov dword [ebp + eax - 0x424], ecx
jmp 0x10033061
mov dword [ebp - 0xd4], 0x18
jmp 0x10033258
mov eax, dword [ebp - 0xd4]
inc eax
mov dword [ebp - 0xd4], eax
cmp dword [ebp - 0xd4], 0x3b
jg 0x1003327f
mov byte [ebp - 0x91], 0
movzx eax, byte [ebp - 0x91]
test eax, eax
je 0x1003327d
push 0
push 0
call dword [sym.imp.KERNEL32.dll_SizeofResource]
jmp 0x1003324b
jmp 0x10033005
jmp 0x10032f6a
mov dword [ebp - 0x134], 0xd7c3b7c3
mov dword [ebp - 0x2b4], 0xfffffff6
mov dword [ebp - 0x43c], 0x1dd79339
mov dword [ebp - 0x28], 0
jmp 0x100332b7
mov eax, dword [ebp - 0x28]
inc eax
mov dword [ebp - 0x28], eax
cmp dword [ebp - 0x28], 1
jge 0x100332cd
mov eax, dword [ebp - 0x28]
mov dword [ebp + eax*4 - 0xc8], 2
jmp 0x100332b0
mov dword [ebp - 0x28], 0
jmp 0x100332dd
mov eax, dword [ebp - 0x28]
inc eax
mov dword [ebp - 0x28], eax
cmp dword [ebp - 0x28], 3
jge 0x100332f3
mov eax, dword [ebp - 0x28]
mov dword [ebp + eax*4 - 0x594], 0xffffffff
jmp 0x100332d6
mov dword [ebp - 0x28], 0
jmp 0x10033303
mov eax, dword [ebp - 0x28]
inc eax
mov dword [ebp - 0x28], eax
cmp dword [ebp - 0x28], 1
jge 0x10033319
mov eax, dword [ebp - 0x28]
mov dword [ebp + eax*4 - 0x42c], 0xffffffff
jmp 0x100332fc
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0xc8], 0xffffffff
xor eax, eax
inc eax
je 0x1003333d
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0xc8], 0
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0x594], 0
je 0x10033368
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0xc8], 0
je 0x10033368
mov dword [ebp - 0x21c], 1
jmp 0x1003336f
and dword [ebp - 0x21c], 0
cmp dword [ebp - 0x21c], 0x31e1
jl 0x10033387
mov dword [ebp - 0x31c], 1
jmp 0x1003338e
and dword [ebp - 0x31c], 0
mov eax, dword [ebp - 0x134]
cmp dword [ebp - 0x31c], eax
jl 0x100333a8
mov dword [ebp - 0x224], 1
jmp 0x100333af
and dword [ebp - 0x224], 0
mov eax, dword [ebp - 0x224]
mov dword [ebp - 0x2b4], eax
mov eax, dword [ebp - 0x2b4]
sub eax, dword [ebp - 0x134]
cmp eax, dword [ebp - 0x134]
jl 0x100333e8
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x42c], 0
jne 0x100333e8
and dword [ebp - 0x22c], 0
jmp 0x100333f2
mov dword [ebp - 0x22c], 1
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xc8]
cmp eax, dword [ebp - 0x22c]
je 0x10033413
mov dword [ebp - 0x2fc], 1
jmp 0x1003341a
and dword [ebp - 0x2fc], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xc8]
cmp eax, dword [ebp - 0x2fc]
jge 0x1003343b
mov dword [ebp - 0x234], 1
jmp 0x10033442
and dword [ebp - 0x234], 0
mov eax, dword [ebp - 0x234]
add eax, 0x186e
sub eax, dword [ebp - 0x134]
mov dword [ebp - 0x43c], eax
cmp dword [0x1017d5d0], 0
jne 0x10033dbe
mov dword [ebp - 0x1cc], 0xffffffff
mov dword [ebp - 0x2bc], 0xe96673e7
mov dword [ebp - 0x24c], 0xfffffff7
mov dword [ebp - 0x400], 0xd2f38d92
mov dword [ebp - 0x4f4], 0x9dffbe58
mov dword [ebp - 0x374], 0xcb667f5a
mov dword [ebp - 0x4ec], 0x96a0b597
mov dword [ebp - 0x518], 7
mov dword [ebp - 0x520], 0xe40424b9
mov dword [ebp - 0x40c], 0
mov dword [ebp - 0x368], 5
mov dword [ebp - 0x530], 0xb3f4b141
mov dword [ebp - 0x4fc], 0xa5e0b2f6
mov dword [ebp - 0x3f8], 0x532955f1
mov dword [ebp - 0x370], 7
mov dword [ebp - 0x14], 0
jmp 0x1003350c
mov eax, dword [ebp - 0x14]
inc eax
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 2
jge 0x10033522
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x394], 0
jmp 0x10033505
mov dword [ebp - 0x14], 0
jmp 0x10033532
mov eax, dword [ebp - 0x14]
inc eax
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 2
jge 0x10033548
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x564], 0x5d9c7279
jmp 0x1003352b
mov dword [ebp - 0x14], 0
jmp 0x10033558
mov eax, dword [ebp - 0x14]
inc eax
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 1
jge 0x1003356e
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x558], 0
jmp 0x10033551
mov dword [ebp - 0x14], 0
jmp 0x1003357e
mov eax, dword [ebp - 0x14]
inc eax
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 2
jge 0x10033594
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x468], 0xb7826243
jmp 0x10033577
cmp dword [ebp - 0x1cc], 0xffffffff
jne 0x100335ab
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x394], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x394]
mov dword [ebp - 0x2bc], eax
cmp dword [ebp - 0x2bc], 0xf1860ec0
jae 0x100335d6
mov dword [ebp - 0x23c], 1
jmp 0x100335dd
and dword [ebp - 0x23c], 0
mov eax, dword [ebp - 0x1cc]
cmp eax, dword [ebp - 0x23c]
je 0x100335f7
mov dword [ebp - 0x328], 1
jmp 0x100335fe
and dword [ebp - 0x328], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x394]
cmp dword [ebp - 0x328], eax
jg 0x1003361f
mov dword [ebp - 0x244], 1
jmp 0x10033626
and dword [ebp - 0x244], 0
mov eax, dword [ebp - 0x24c]
cmp dword [ebp - 0x244], eax
jge 0x10033640
mov dword [ebp - 0x2c4], 1
jmp 0x10033647
and dword [ebp - 0x2c4], 0
mov eax, dword [ebp - 0x2c4]
mov dword [ebp - 0x400], eax
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x468]
inc eax
push 4
pop ecx
shl ecx, 0
mov dword [ebp + ecx - 0x468], eax
mov eax, dword [ebp - 0x368]
mov dword [ebp - 0x504], eax
mov eax, dword [ebp - 0x374]
mov dword [ebp - 0x538], eax
mov eax, dword [ebp - 0x3f8]
mov dword [ebp - 0x50c], eax
mov eax, dword [ebp - 0x370]
neg eax
je 0x100336b1
cmp dword [ebp - 0x24c], 0
je 0x100336b1
mov dword [ebp - 0x304], 1
jmp 0x100336b8
and dword [ebp - 0x304], 0
mov eax, dword [ebp - 0x1cc]
cmp eax, dword [ebp - 0x304]
jle 0x100336d2
mov dword [ebp - 0x254], 1
jmp 0x100336d9
and dword [ebp - 0x254], 0
cmp dword [ebp - 0x254], 0
jne 0x10033702
xor eax, eax
je 0x10033702
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x564], 0
je 0x10033702
mov dword [ebp - 0x2cc], 1
jmp 0x10033709
and dword [ebp - 0x2cc], 0
mov eax, dword [ebp - 0x2cc]
mov dword [ebp - 0x40c], eax
mov dword [ebp - 0x378], 0x5559
lea eax, [ebp - 0x378]
push eax
call fcn.1002d6a1
pop ecx
mov dword [ebp - 0x2d4], eax
mov dword [ebp - 0x550], 0xca0029bf
mov dword [ebp - 0x25c], 0xfffffffc
mov dword [ebp - 0x514], 0x5a95
mov dword [ebp - 0x184], 0
jmp 0x10033769
mov eax, dword [ebp - 0x184]
inc eax
mov dword [ebp - 0x184], eax
cmp dword [ebp - 0x184], 2
jge 0x10033785
mov eax, dword [ebp - 0x184]
mov dword [ebp + eax*4 - 0x5e4], 0xdb58e469
jmp 0x1003375c
mov eax, dword [ebp - 0x25c]
inc eax
mov dword [ebp - 0x25c], eax
mov byte [ebp - 0x83], 0
movzx eax, byte [ebp - 0x83]
test eax, eax
je 0x100337ac
push 0
call dword [sym.imp.GDI32.dll_CreatePenIndirect]
mov byte [ebp - 0x114], 0
mov byte [ebp - 0x113], 0x1f
mov byte [ebp - 0x112], 5
mov byte [ebp - 0x111], 0x35
mov byte [ebp - 0x110], 9
mov byte [ebp - 0x10f], 0x1c
mov byte [ebp - 0x10e], 1
mov byte [ebp - 0x10d], 0xb
mov byte [ebp - 0x10c], 0xc
mov byte [ebp - 0x10b], 0x32
mov byte [ebp - 0x10a], 7
mov byte [ebp - 0x109], 0x3e
mov byte [ebp - 0x108], 3
mov byte [ebp - 0x107], 0x3f
mov byte [ebp - 0x106], 4
mov byte [ebp - 0x105], 0x33
mov byte [ebp - 0x104], 0xb
mov byte [ebp - 0x103], 0x1d
mov byte [ebp - 0x102], 6
mov byte [ebp - 0x101], 0xb
mov byte [ebp - 0x100], 0xa
mov byte [ebp - 0xff], 0x36
mov byte [ebp - 0xfe], 8
mov byte [ebp - 0xfd], 0x2a
mov byte [ebp - 0xfc], 2
mov byte [ebp - 0xfb], 0x1b
mov dword [ebp - 0x324], 0x3da7
mov dword [ebp - 0x414], str.czmshvf_ufwvdks_hcebwrn_lgtefgu_hedbyupx_vzi_ugvrdkxqk_cvoqc_loak
cmp dword [ebp - 0x324], 0x3f13
jle 0x1003392f
and dword [ebp - 0x13c], 0
jmp 0x1003389c
mov eax, dword [ebp - 0x13c]
inc eax
mov dword [ebp - 0x13c], eax
cmp dword [ebp - 0x13c], 0x1d6a
jge 0x1003392f
and dword [ebp - 0x1b0], 0
jmp 0x100338c2
mov eax, dword [ebp - 0x1b0]
inc eax
mov dword [ebp - 0x1b0], eax
cmp dword [ebp - 0x1b0], 0xaab
jge 0x1003392a
and dword [ebp - 0x144], 0
jmp 0x100338e4
mov eax, dword [ebp - 0x144]
inc eax
mov dword [ebp - 0x144], eax
cmp dword [ebp - 0x144], 0x3eea
jge 0x10033928
mov eax, dword [ebp - 0x13c]
imul eax, dword [ebp - 0x1b0]
or eax, dword [ebp - 0x144]
cdq
mov dword [ebp - 0x3a0], eax
mov dword [ebp - 0x39c], edx
push dword [ebp - 0x39c]
push dword [ebp - 0x3a0]
mov ecx, 0x1006f688
call fcn.10002383
jmp 0x100338d7
jmp 0x100338b5
jmp 0x1003388f
xor eax, eax
inc eax
shl eax, 0
movzx eax, byte [ebp + eax - 0x114]
and eax, 0x58
xor ecx, ecx
inc ecx
shl ecx, 0
movzx ecx, byte [ebp + ecx - 0x114]
or ecx, 0x58
sub ecx, eax
xor eax, eax
inc eax
imul eax, eax, 0
movzx eax, byte [ebp + eax - 0x114]
mov byte [ebp + eax - 0x44c], cl
mov dword [ebp - 4], 2
cmp dword [ebp - 0x324], 0x3d70
jge 0x1003398b
mov edx, dword [ebp - 0x414]
mov ecx, 0x1006f688
call fcn.10003d52
jmp 0x100339a7
or dword [ebp - 4], 0xffffffff
jmp 0x100339b1
mov dword [ebp - 0x50], 2
and dword [ebp - 0x264], 0
jmp 0x100339c9
mov eax, dword [ebp - 0x50]
inc eax
inc eax
mov dword [ebp - 0x50], eax
cmp dword [ebp - 0x50], 0x1a
jae 0x10033a31
mov eax, dword [ebp - 0x50]
sub eax, dword [ebp - 0x264]
movzx eax, byte [ebp + eax - 0x116]
movsx eax, byte [ebp + eax - 0x44c]
mov ecx, dword [ebp - 0x50]
movzx ecx, byte [ebp + ecx - 0x113]
and ecx, eax
mov eax, dword [ebp - 0x50]
sub eax, dword [ebp - 0x264]
movzx eax, byte [ebp + eax - 0x116]
movsx eax, byte [ebp + eax - 0x44c]
mov edx, dword [ebp - 0x50]
movzx edx, byte [ebp + edx - 0x113]
or edx, eax
sub edx, ecx
mov eax, dword [ebp - 0x50]
movzx eax, byte [ebp + eax - 0x114]
mov byte [ebp + eax - 0x44c], dl
jmp 0x100339c1
xor eax, eax
inc eax
imul eax, eax, 0xd
mov byte [ebp + eax - 0x44c], 0
lea eax, [ebp - 0x44c]
push eax
lea ecx, [ebp - 0x644]
call fcn.10036cc2
mov dword [ebp - 0x380], eax
mov eax, dword [ebp - 0x380]
mov dword [ebp - 0x360], eax
mov dword [ebp - 4], 4
mov edx, dword [ebp - 0x2d4]
mov ecx, dword [ebp - 0x360]
call fcn.100275b9
mov dword [0x1017d5d0], eax
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x644]
call fcn.10012ad4
mov dword [ebp - 0x540], 0xffffffff
mov byte [ebp - 0x95], 0
movzx eax, byte [ebp - 0x95]
test eax, eax
je 0x10033ac1
push 0
push 0
push 0xcd9
push 0x4b8
push 0
call dword [sym.imp.USER32.dll_InsertMenuA]
mov byte [ebp - 0x92], 0
movzx eax, byte [ebp - 0x92]
test eax, eax
je 0x10033ae7
push 0
push 0x131a
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_SetDlgItemTextW]
and dword [ebp - 0x18c], 0
jmp 0x10033afd
mov eax, dword [ebp - 0x18c]
inc eax
mov dword [ebp - 0x18c], eax
cmp dword [ebp - 0x18c], 0xe
jae 0x10033b16
mov eax, dword [ebp - 0x18c]
mov byte [ebp + eax - 0x44c], 0
jmp 0x10033af0
mov byte [ebp - 0xf8], 8
mov byte [ebp - 0xf7], 0x86
mov byte [ebp - 0xf6], 0xc
mov byte [ebp - 0xf5], 0x1c
mov byte [ebp - 0xf4], 3
mov byte [ebp - 0xf3], 0x12
mov byte [ebp - 0xf2], 0xb
mov byte [ebp - 0xf1], 0x12
mov byte [ebp - 0xf0], 0
mov byte [ebp - 0xef], 0x30
mov byte [ebp - 0xee], 0xd
mov byte [ebp - 0xed], 0x14
mov byte [ebp - 0xec], 5
mov byte [ebp - 0xeb], 0x32
mov byte [ebp - 0xea], 1
mov byte [ebp - 0xe9], 0x17
mov byte [ebp - 0xe8], 0xa
mov byte [ebp - 0xe7], 0x17
mov byte [ebp - 0xe6], 4
mov byte [ebp - 0xe5], 0xf8
mov byte [ebp - 0xe4], 0x28
mov byte [ebp - 0xe3], 0x55
mov byte [ebp - 0xe2], 0xf9
mov byte [ebp - 0xe1], 9
mov byte [ebp - 0xe0], 6
mov byte [ebp - 0xdf], 2
mov byte [ebp - 0xde], 6
mov byte [ebp - 0xdd], 7
mov byte [ebp - 0xdc], 0x17
mov byte [ebp - 0xdb], 6
mov byte [ebp - 0xda], 0x22
mov byte [ebp - 0xd9], 4
mov byte [ebp - 0xd8], 0x24
xor eax, eax
inc eax
shl eax, 0
movzx eax, byte [ebp + eax - 0xf8]
and eax, 0xe9
xor ecx, ecx
inc ecx
shl ecx, 0
movzx ecx, byte [ebp + ecx - 0xf8]
or ecx, 0xe9
sub ecx, eax
xor eax, eax
inc eax
imul eax, eax, 0
movzx eax, byte [ebp + eax - 0xf8]
mov byte [ebp + eax - 0x35c], cl
mov dword [ebp - 0x1c], 2
and dword [ebp - 0xbc], 0
jmp 0x10033c53
mov eax, dword [ebp - 0x1c]
inc eax
inc eax
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 0x21
jae 0x10033d31
xor eax, eax
inc eax
imul eax, eax, 0
movzx eax, byte [ebp + eax - 0xf8]
lea eax, [eax + eax + 2]
cmp dword [ebp - 0x1c], eax
jne 0x10033c9d
mov eax, dword [ebp - 0x1c]
movzx eax, byte [ebp + eax - 0xf8]
inc eax
mov dword [ebp - 0xbc], eax
mov eax, dword [ebp - 0x1c]
movzx eax, byte [ebp + eax - 0xf8]
mov ecx, dword [ebp - 0x1c]
lea eax, [ecx + eax - 1]
mov dword [ebp - 0x1c], eax
jmp 0x10033c4b
mov eax, dword [ebp - 0x1c]
sub eax, dword [ebp - 0xbc]
movzx eax, byte [ebp + eax - 0xfa]
movsx eax, byte [ebp + eax - 0x35c]
mov ecx, dword [ebp - 0x1c]
movzx ecx, byte [ebp + ecx - 0xf7]
and ecx, eax
mov eax, dword [ebp - 0x1c]
sub eax, dword [ebp - 0xbc]
movzx eax, byte [ebp + eax - 0xfa]
movsx eax, byte [ebp + eax - 0x35c]
mov edx, dword [ebp - 0x1c]
movzx edx, byte [ebp + edx - 0xf7]
and edx, eax
mov eax, dword [ebp - 0x1c]
sub eax, dword [ebp - 0xbc]
movzx eax, byte [ebp + eax - 0xfa]
movsx eax, byte [ebp + eax - 0x35c]
mov esi, dword [ebp - 0x1c]
movzx ebx, byte [ebp + esi - 0xf7]
add ebx, eax
sub ebx, edx
sub ebx, ecx
mov eax, dword [ebp - 0x1c]
movzx eax, byte [ebp + eax - 0xf8]
mov byte [ebp + eax - 0x35c], bl
and dword [ebp - 0xbc], 0
jmp 0x10033c4b
xor eax, eax
inc eax
imul eax, eax, 0xe
mov byte [ebp + eax - 0x35c], 0
lea eax, [ebp - 0x35c]
push eax
lea ecx, [ebp - 0x5fc]
call fcn.10036cc2
mov dword [ebp - 0x38c], eax
mov eax, dword [ebp - 0x38c]
mov dword [ebp - 0x408], eax
mov dword [ebp - 4], 5
mov edx, dword [ebp - 0x2d4]
mov ecx, dword [ebp - 0x408]
call fcn.100275b9
mov dword [0x1017eb20], eax
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x5fc]
call fcn.10012ad4
and dword [ebp - 0x14c], 0
jmp 0x10033da5
mov eax, dword [ebp - 0x14c]
inc eax
mov dword [ebp - 0x14c], eax
cmp dword [ebp - 0x14c], 0xf
jae 0x10033dbe
mov eax, dword [ebp - 0x14c]
mov byte [ebp + eax - 0x35c], 0
jmp 0x10033d98
mov dword [ebp - 0x2c], 8
mov dword [ebp - 0x70], 0xa4ccfd66
mov dword [ebp - 0x1bc], 0
jmp 0x10033de5
mov eax, dword [ebp - 0x1bc]
inc eax
mov dword [ebp - 0x1bc], eax
cmp dword [ebp - 0x1bc], 3
jge 0x10033e01
mov eax, dword [ebp - 0x1bc]
mov dword [ebp + eax*4 - 0x4e8], 0xfffffffe
jmp 0x10033dd8
mov dword [ebp - 0x2c], 2
jmp 0x10033e11
mov eax, dword [ebp - 0x2c]
dec eax
mov dword [ebp - 0x2c], eax
cmp dword [ebp - 0x2c], 0
jl 0x10033e92
mov dword [ebp - 0x51c], 0xffffffff
mov eax, dword [ebp - 0x2c]
cmp dword [ebp + eax*4 - 0x4e8], 0xc324
je 0x10033e3d
mov dword [ebp - 0x26c], 1
jmp 0x10033e44
and dword [ebp - 0x26c], 0
cmp dword [ebp - 0x2c], 1
jne 0x10033e5c
cmp dword [ebp - 0x2c], 0
je 0x10033e5c
mov dword [ebp - 0x30c], 1
jmp 0x10033e63
and dword [ebp - 0x30c], 0
mov eax, dword [ebp - 0x26c]
cmp eax, dword [ebp - 0x30c]
jl 0x10033e7d
mov dword [ebp - 0x274], 1
jmp 0x10033e84
and dword [ebp - 0x274], 0
mov eax, dword [ebp - 0x274]
mov dword [ebp - 0x70], eax
jmp 0x10033e0a
mov dword [ebp - 0x2c], 0x1d
jmp 0x10033ea2
mov eax, dword [ebp - 0x2c]
dec eax
mov dword [ebp - 0x2c], eax
cmp dword [ebp - 0x2c], 0x15
jge 0x10033ef5
mov dword [ebp - 0x70], 0
jmp 0x10033eb8
mov eax, dword [ebp - 0x70]
inc eax
mov dword [ebp - 0x70], eax
cmp dword [ebp - 0x70], 2
jg 0x10033eeb
mov byte [ebp - 0x94], 0
movzx eax, byte [ebp - 0x94]
test eax, eax
je 0x10033eda
push 0
push 0
call dword [sym.imp.KERNEL32.dll_FindFirstFileW]
mov eax, dword [ebp - 0x70]
cmp dword [ebp + eax*4 - 0x4e8], 0
je 0x10033ee9
jmp 0x10033eeb
jmp 0x10033eb1
cmp dword [ebp - 0x70], 0
je 0x10033ef3
jmp 0x10033e9b
jmp 0x10033e9b
mov eax, dword [0x1017d5d0]
cmp eax, dword [ebp - 0x188]
je 0x10033f0f
mov eax, dword [0x1017eb20]
cmp eax, dword [ebp - 0x188]
jne 0x10033f27
mov ecx, dword [ebp + 0xc]
call fcn.10002363
push eax
push dword [ebp + 8]
call fcn.1002d6d3
pop ecx
pop ecx
jmp 0x1003583d
mov dword [ebp - 0x548], 0x624039b6
mov dword [ebp - 0x2dc], 0x3c99
mov dword [ebp - 0x428], str.hlrioicg_xtbyp_dpjoggw_fgvm_mshrrf_iuinxj_ocqecexe_awnqoh_xxorx_jvddue_frpwfbc_cooixhszo_xwysvzk_ecdlvp
cmp dword [ebp - 0x2dc], 0x3ceb
jle 0x10033ff5
and dword [ebp - 0x154], 0
jmp 0x10033f6b
mov eax, dword [ebp - 0x154]
inc eax
mov dword [ebp - 0x154], eax
cmp dword [ebp - 0x154], 0x47f9
jge 0x10033ff5
and dword [ebp - 0x194], 0
jmp 0x10033f8d
mov eax, dword [ebp - 0x194]
inc eax
mov dword [ebp - 0x194], eax
cmp dword [ebp - 0x194], 0x5a23
jge 0x10033ff0
mov eax, dword [ebp - 0x154]
or eax, dword [ebp - 0x194]
cdq
mov dword [ebp - 0x3ac], eax
mov dword [ebp - 0x3a8], edx
push dword [ebp - 0x3a8]
push dword [ebp - 0x3ac]
lea ecx, [ebp - 0x674]
call fcn.100042e3
pop ecx
pop ecx
mov dword [ebp - 0x398], eax
mov ecx, dword [ebp - 0x398]
call fcn.10002363
push eax
call fcn.10039f30
pop ecx
lea ecx, [ebp - 0x674]
call fcn.10002359
jmp 0x10033f80
jmp 0x10033f5e
mov dword [ebp - 0x4f0], 2
mov dword [ebp - 4], 6
cmp dword [ebp - 0x2dc], 0x38bd
jge 0x1003401e
push dword [ebp - 0x428]
call fcn.10039f30
pop ecx
jmp 0x1003403a
or dword [ebp - 4], 0xffffffff
jmp 0x10034044
mov dword [ebp - 0x4b0], 0x286e871d
mov dword [ebp - 0x4b8], 1
mov dword [ebp - 0x52c], 0x961c0f80
mov dword [ebp - 0x534], 0xffffffff
mov dword [ebp - 0x53c], 0x79c4185a
mov dword [ebp - 0x27c], 0x559
mov dword [ebp - 0x410], str.ojhxpddph_hwubrcbaa_cwwj_jxt_melbixgdb_fwmm_wpkwvak
cmp dword [ebp - 0x27c], 0x79b
jle 0x100341a9
and dword [ebp - 0x164], 0
jmp 0x100340b0
mov eax, dword [ebp - 0x164]
inc eax
mov dword [ebp - 0x164], eax
cmp dword [ebp - 0x164], 0x7728
jge 0x100341a9
and dword [ebp - 0x19c], 0
jmp 0x100340d6
mov eax, dword [ebp - 0x19c]
inc eax
mov dword [ebp - 0x19c], eax
cmp dword [ebp - 0x19c], 0x6ae6
jge 0x100341a4
and dword [ebp - 0x15c], 0
jmp 0x100340fc
mov eax, dword [ebp - 0x15c]
inc eax
mov dword [ebp - 0x15c], eax
cmp dword [ebp - 0x15c], 0x25e9
jge 0x1003419f
and dword [ebp - 0x1b4], 0
jmp 0x10034122
mov eax, dword [ebp - 0x1b4]
inc eax
mov dword [ebp - 0x1b4], eax
cmp dword [ebp - 0x1b4], 0x129a
jge 0x1003419a
mov eax, dword [ebp - 0x15c]
mov ecx, dword [ebp - 0x1b4]
shl eax, cl
mov edx, dword [ebp - 0x164]
mov ecx, dword [ebp - 0x19c]
shl edx, cl
and eax, edx
cdq
mov dword [ebp - 0x3b8], eax
mov dword [ebp - 0x3b4], edx
push dword [ebp - 0x3b4]
push dword [ebp - 0x3b8]
lea ecx, [ebp - 0x65c]
call fcn.100042e3
pop ecx
pop ecx
mov dword [ebp - 0x3a4], eax
mov ecx, dword [ebp - 0x3a4]
call fcn.10002363
push eax
call fcn.10039f30
pop ecx
lea ecx, [ebp - 0x65c]
call fcn.10002359
jmp 0x10034115
jmp 0x100340ef
jmp 0x100340c9
jmp 0x100340a3
mov dword [ebp - 4], 8
cmp dword [ebp - 0x27c], 0x3a1
jge 0x100341c8
push dword [ebp - 0x410]
call fcn.10039f30
pop ecx
jmp 0x100341e4
or dword [ebp - 4], 0xffffffff
jmp 0x100341ee
mov dword [ebp - 0x32c], 0x562f
mov dword [ebp - 0x438], str.niec_ych_rfgu_kcvh_mvitypmc_mgozlijfj_qdueyql_kyumor_glydprxlg_nzuqmo_wza_dqm_bge_uhgmxbui
cmp dword [ebp - 0x32c], 0x595c
jle 0x100342e8
and dword [ebp - 0x16c], 0
jmp 0x10034228
mov eax, dword [ebp - 0x16c]
inc eax
mov dword [ebp - 0x16c], eax
cmp dword [ebp - 0x16c], 0x67cc
jge 0x100342e8
and dword [ebp - 0x1c4], 0
jmp 0x1003424e
mov eax, dword [ebp - 0x1c4]
inc eax
mov dword [ebp - 0x1c4], eax
cmp dword [ebp - 0x1c4], 0x270c
jge 0x100342e3
and dword [ebp - 0x174], 0
jmp 0x10034274
mov eax, dword [ebp - 0x174]
inc eax
mov dword [ebp - 0x174], eax
cmp dword [ebp - 0x174], 0x7f84
jge 0x100342de
mov eax, dword [ebp - 0x16c]
imul eax, dword [ebp - 0x1c4]
xor eax, dword [ebp - 0x174]
cdq
mov dword [ebp - 0x3c4], eax
mov dword [ebp - 0x3c0], edx
push dword [ebp - 0x3c0]
push dword [ebp - 0x3c4]
lea ecx, [ebp - 0x614]
call fcn.100042e3
pop ecx
pop ecx
mov dword [ebp - 0x3b0], eax
mov ecx, dword [ebp - 0x3b0]
call fcn.10002363
push eax
call fcn.10039f30
pop ecx
lea ecx, [ebp - 0x614]
call fcn.10002359
jmp 0x10034267
jmp 0x10034241
jmp 0x1003421b
mov dword [ebp - 0x24], 0
jmp 0x100342f8
mov eax, dword [ebp - 0x24]
inc eax
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 1
jge 0x1003430e
mov eax, dword [ebp - 0x24]
mov dword [ebp + eax*4 - 0x544], 0xb80be39e
jmp 0x100342f1
mov dword [ebp - 4], 0xa
cmp dword [ebp - 0x32c], 0x5307
jge 0x1003432d
push dword [ebp - 0x438]
call fcn.10039f30
pop ecx
jmp 0x10034349
or dword [ebp - 4], 0xffffffff
jmp 0x10034353
mov dword [ebp - 0x24], 0
jmp 0x10034363
mov eax, dword [ebp - 0x24]
inc eax
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 4
jge 0x10034379
mov eax, dword [ebp - 0x24]
mov dword [ebp + eax*4 - 0x684], 0x9008cf5a
jmp 0x1003435c
mov dword [ebp - 0x24], 0
jmp 0x10034389
mov eax, dword [ebp - 0x24]
inc eax
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 1
jge 0x1003439f
mov eax, dword [ebp - 0x24]
mov dword [ebp + eax*4 - 0x284], 0xdf7e
jmp 0x10034382
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x284]
dec eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x284], eax
mov byte [ebp - 0x89], 0
movzx eax, byte [ebp - 0x89]
test eax, eax
je 0x100343e5
push 0x1157
push 0
push 0x177a
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDlgItemTextW]
mov eax, dword [ebp + 8]
mov dword [ebp - 0x138], eax
mov dword [ebp - 0x200], 0xdae1
mov dword [ebp - 0x54c], 0xfffffff7
mov dword [ebp - 0x3bc], 0x1ad4
cmp dword [ebp - 0x3bc], 0x10bd
jge 0x10034632
push 0x20
pop eax
imul esi, eax, 0
call fcn.1003a73d
add eax, esi
push eax
push 0x10061a3c
push str.in.txt
call fcn.1003a8ec
add esp, 0xc
push 0x20
pop esi
shl esi, 0
call fcn.1003a73d
add eax, esi
push eax
push 0x10061a48
push str.out.txt
call fcn.1003a8ec
add esp, 0xc
xor eax, eax
inc eax
je 0x10034632
lea eax, [ebp - 0xac]
push eax
push 0x1006288c
call fcn.1003a041
pop ecx
pop ecx
cmp dword [ebp - 0xac], 0
jne 0x10034486
jmp 0x10034632
push dword [ebp - 0xac]
lea ecx, [ebp - 0x458]
call fcn.10036d10
mov dword [ebp - 4], 0xc
and dword [ebp - 0xb0], 0
jmp 0x100344b4
mov eax, dword [ebp - 0xb0]
inc eax
mov dword [ebp - 0xb0], eax
mov eax, dword [ebp - 0xb0]
cmp eax, dword [ebp - 0xac]
jge 0x100344ff
mov eax, dword [ebp - 0xb0]
lea eax, [ebp + eax*4 - 0x8f8]
push eax
push 0x1005de50
call fcn.1003a041
pop ecx
pop ecx
mov esi, dword [ebp - 0xb0]
inc esi
mov eax, dword [ebp - 0xb0]
push dword [ebp + eax*4 - 0x8f8]
lea ecx, [ebp - 0x458]
call fcn.1002539e
mov dword [eax], esi
jmp 0x100344a7
mov byte [ebp - 0x15], 0
and dword [ebp - 0x80], 0
jmp 0x10034510
mov eax, dword [ebp - 0x80]
inc eax
mov dword [ebp - 0x80], eax
mov eax, dword [ebp - 0xac]
dec eax
dec eax
cmp dword [ebp - 0x80], eax
jge 0x100345de
movzx eax, byte [ebp - 0x15]
test eax, eax
jne 0x100345de
mov eax, dword [ebp - 0x80]
inc eax
mov dword [ebp - 0x78], eax
jmp 0x1003453d
mov eax, dword [ebp - 0x78]
inc eax
mov dword [ebp - 0x78], eax
mov eax, dword [ebp - 0xac]
dec eax
cmp dword [ebp - 0x78], eax
jge 0x100345d9
movzx eax, byte [ebp - 0x15]
test eax, eax
jne 0x100345d9
mov eax, dword [ebp - 0x78]
mov eax, dword [ebp + eax*4 - 0x8f8]
shl eax, 1
mov ecx, dword [ebp - 0x80]
sub eax, dword [ebp + ecx*4 - 0x8f8]
test eax, eax
jle 0x100345d4
mov eax, dword [ebp - 0x78]
mov eax, dword [ebp + eax*4 - 0x8f8]
shl eax, 1
mov ecx, dword [ebp - 0x80]
sub eax, dword [ebp + ecx*4 - 0x8f8]
cmp eax, dword [ebp - 0xac]
jge 0x100345d4
mov eax, dword [ebp - 0x78]
push dword [ebp + eax*4 - 0x8f8]
lea ecx, [ebp - 0x458]
call fcn.1002539e
mov esi, eax
mov eax, dword [ebp - 0x78]
mov eax, dword [ebp + eax*4 - 0x8f8]
shl eax, 1
mov ecx, dword [ebp - 0x80]
sub eax, dword [ebp + ecx*4 - 0x8f8]
push eax
lea ecx, [ebp - 0x458]
call fcn.1002539e
mov eax, dword [eax]
cmp eax, dword [esi]
jle 0x100345d4
mov byte [ebp - 0x15], 1
jmp 0x10034536
jmp 0x10034509
movzx eax, byte [ebp - 0x15]
test eax, eax
je 0x10034603
push fcn.10007349
mov edx, 0x10062890
mov ecx, 0x1006f688
call fcn.10003d52
mov ecx, eax
call fcn.10006792
jmp 0x1003461e
push fcn.10007349
mov edx, 0x10062894
mov ecx, 0x1006f688
call fcn.10003d52
mov ecx, eax
call fcn.10006792
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x458]
call fcn.1001319d
jmp 0x1003445c
mov dword [ebp - 0x40], 0
jmp 0x10034642
mov eax, dword [ebp - 0x40]
inc eax
mov dword [ebp - 0x40], eax
cmp dword [ebp - 0x40], 2
jge 0x10034658
mov eax, dword [ebp - 0x40]
mov dword [ebp + eax*4 - 0xb8], 0x98a8f939
jmp 0x1003463b
mov dword [ebp - 0x40], 0
jmp 0x10034668
mov eax, dword [ebp - 0x40]
inc eax
mov dword [ebp - 0x40], eax
cmp dword [ebp - 0x40], 2
jge 0x1003467e
mov eax, dword [ebp - 0x40]
mov dword [ebp + eax*4 - 0x528], 0xffffffff
jmp 0x10034661
mov dword [ebp - 0x208], 0x178e
mov dword [ebp - 0x3d4], str.wnqhvu_dsnmgx_ppjnq_ifszv_dgxlrljgt_bot_wxnoyf_ayiahhys_xojje_dyt
cmp dword [ebp - 0x208], 0x17f9
jle 0x1003477f
and dword [ebp - 0x128], 0
jmp 0x100346b8
mov eax, dword [ebp - 0x128]
inc eax
mov dword [ebp - 0x128], eax
cmp dword [ebp - 0x128], 0x2c71
jge 0x1003477f
and dword [ebp - 0x130], 0
jmp 0x100346de
mov eax, dword [ebp - 0x130]
inc eax
mov dword [ebp - 0x130], eax
cmp dword [ebp - 0x130], 0x38e6
jge 0x1003477a
and dword [ebp - 0x11c], 0
jmp 0x10034704
mov eax, dword [ebp - 0x11c]
inc eax
mov dword [ebp - 0x11c], eax
cmp dword [ebp - 0x11c], 0x237e
jge 0x10034775
and dword [ebp - 0x120], 0
jmp 0x10034726
mov eax, dword [ebp - 0x120]
inc eax
mov dword [ebp - 0x120], eax
cmp dword [ebp - 0x120], 0x4fc3
jge 0x10034773
mov eax, dword [ebp - 0x11c]
sub eax, dword [ebp - 0x120]
mov edx, dword [ebp - 0x128]
mov ecx, dword [ebp - 0x130]
shl edx, cl
or eax, edx
cdq
mov dword [ebp - 0x3d0], eax
mov dword [ebp - 0x3cc], edx
push dword [ebp - 0x3cc]
push dword [ebp - 0x3d0]
mov ecx, 0x1006f688
call fcn.10002383
jmp 0x10034719
jmp 0x100346f7
jmp 0x100346d1
jmp 0x100346ab
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xb8]
mov dword [ebp - 0x554], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0xb8], 0x4456
jg 0x100347b1
mov dword [ebp - 0x2e4], 1
jmp 0x100347b8
and dword [ebp - 0x2e4], 0
cmp dword [ebp - 0x2e4], 0x48cc
je 0x100347e9
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0xb8], 0
je 0x100347e9
mov eax, 0xe82
test eax, eax
je 0x100347e9
mov dword [ebp - 0x28c], 1
jmp 0x100347f0
and dword [ebp - 0x28c], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0xb8]
cmp dword [ebp - 0x28c], eax
jg 0x10034811
mov dword [ebp - 0x1d8], 1
jmp 0x10034818
and dword [ebp - 0x1d8], 0
push 4
pop eax
imul eax, eax, 0
push 4
pop ecx
imul ecx, ecx, 0
mov ecx, dword [ebp + ecx - 0xb8]
add ecx, dword [ebp - 0x1d8]
imul ecx, dword [ebp + eax - 0xb8]
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0xb8], ecx
jge 0x10034854
mov dword [ebp - 0x1e0], 1
jmp 0x1003485b
and dword [ebp - 0x1e0], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xb8]
cmp dword [ebp - 0x1e0], eax
jge 0x1003487c
mov dword [ebp - 0x1e8], 1
jmp 0x10034883
and dword [ebp - 0x1e8], 0
cmp dword [ebp - 0x1e8], 3
jl 0x10034898
mov dword [ebp - 0x1d4], 1
jmp 0x1003489f
and dword [ebp - 0x1d4], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xb8]
cmp dword [ebp - 0x1d4], eax
jle 0x100348c0
mov dword [ebp - 0x418], 1
jmp 0x100348c7
and dword [ebp - 0x418], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xb8]
mov dword [ebp - 0x55c], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xb8]
mov dword [ebp - 0x4ac], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xb8]
mov dword [ebp - 0x4b4], eax
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0xb8]
mov dword [ebp - 0x1f8], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x1f8]
mov dword [ebp + eax - 0x528], ecx
cmp dword [ebp - 0x1f8], 0
je 0x1003494c
mov byte [ebp - 0x79], 0
movzx eax, byte [ebp - 0x79]
test eax, eax
je 0x1003494a
push 0
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_ValidateRect]
jmp 0x1003498e
mov dword [ebp - 0x3c8], 0x1bfe
mov dword [ebp - 0x430], 0
mov dword [ebp - 0x4f8], 1
mov dword [ebp - 0x4bc], 0
mov eax, dword [ebp - 0x3c8]
inc eax
mov dword [ebp - 0x430], eax
mov eax, dword [ebp - 0x200]
inc eax
mov dword [ebp - 0x200], eax
mov dword [ebp - 4], 0xd
cmp dword [ebp - 0x208], 0x1536
jge 0x100349b1
mov edx, dword [ebp - 0x3d4]
mov ecx, 0x1006f688
call fcn.10003d52
jmp 0x100349cd
or dword [ebp - 4], 0xffffffff
jmp 0x100349d7
cmp dword [ebp - 0x138], 0
je 0x100353d4
mov eax, dword [ebp - 0x138]
movzx eax, word [eax]
cmp eax, 0x5a4d
jne 0x100353d4
mov eax, dword [ebp - 0x138]
mov ecx, dword [ebp - 0x138]
add ecx, dword [eax + 0x3c]
mov dword [ebp - 0xcc], ecx
mov dword [ebp - 0x240], 0x1dae
mov dword [ebp - 0x404], str.cea_uxkgevzld_pkrmr_kilrhhc_lcuyxx_kzrorgts_cskhl_ceya_aigzuy_qpkhjaz_simjm_sruewzti_uishrcp_oiioeajaj
cmp dword [ebp - 0x240], 0x1de0
jle 0x10034ad9
and dword [ebp - 0x150], 0
jmp 0x10034a47
mov eax, dword [ebp - 0x150]
inc eax
mov dword [ebp - 0x150], eax
cmp dword [ebp - 0x150], 0x3b9a
jge 0x10034ad9
and dword [ebp - 0x140], 0
jmp 0x10034a6d
mov eax, dword [ebp - 0x140]
inc eax
mov dword [ebp - 0x140], eax
cmp dword [ebp - 0x140], 0x78ad
jge 0x10034ad4
and dword [ebp - 0x148], 0
jmp 0x10034a8f
mov eax, dword [ebp - 0x148]
inc eax
mov dword [ebp - 0x148], eax
cmp dword [ebp - 0x148], 0x65be
jge 0x10034ad2
mov eax, dword [ebp - 0x140]
and eax, dword [ebp - 0x148]
or eax, dword [ebp - 0x150]
cdq
mov dword [ebp - 0x3dc], eax
mov dword [ebp - 0x3d8], edx
push dword [ebp - 0x3d8]
push dword [ebp - 0x3dc]
mov ecx, 0x1006f688
call fcn.10002383
jmp 0x10034a82
jmp 0x10034a60
jmp 0x10034a3a
mov eax, dword [ebp - 0xcc]
cmp dword [eax], 0x4550
jne 0x1003538b
mov eax, dword [ebp - 0xcc]
cmp dword [eax + 0x74], 0
jbe 0x1003538b
push 8
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0xcc]
cmp dword [ecx + eax + 0x78], 0
je 0x1003538b
mov eax, dword [ebp + 8]
mov dword [ebp - 0xa4], eax
push 8
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0xcc]
mov edx, dword [ebp - 0xa4]
add edx, dword [ecx + eax + 0x78]
mov dword [ebp - 0x5c], edx
mov eax, 0xffff
mov word [ebp - 0x3c], ax
or dword [ebp - 0xa0], 0xffffffff
cmp dword [ebp + 0x10], 0
jbe 0x10034b62
mov eax, dword [ebp - 0x5c]
mov ecx, dword [ebp + 0x10]
cmp ecx, dword [eax + 0x14]
ja 0x10034b5d
mov eax, dword [ebp + 0x10]
dec eax
mov word [ebp - 0x3c], ax
jmp 0x10034fb0
mov eax, dword [0x1017ea6c]
and eax, 1
jne 0x10034b99
mov eax, dword [0x1017ea6c]
or eax, 1
mov dword [0x1017ea6c], eax
mov dword [ebp - 4], 0xf
mov ecx, 0x1017eab8
call fcn.10012b67
push 0x10056b84
call fcn.100384ac
pop ecx
or dword [ebp - 4], 0xffffffff
mov dword [ebp - 0x218], 0x33ba
mov dword [ebp - 0x420], str.zwqk_uvkcx_nhlanf_qczehuxs_rkfvpp_zocyyr_amnl_vcf_nwdnbpv
cmp dword [ebp - 0x218], 0x357e
jle 0x10034c8e
push 0
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_BeginPaint]
and dword [ebp - 0x158], 0
jmp 0x10034be2
mov eax, dword [ebp - 0x158]
inc eax
mov dword [ebp - 0x158], eax
cmp dword [ebp - 0x158], 0x5023
jge 0x10034c78
and dword [ebp - 0x160], 0
jmp 0x10034c08
mov eax, dword [ebp - 0x160]
inc eax
mov dword [ebp - 0x160], eax
cmp dword [ebp - 0x160], 0x33e0
jge 0x10034c73
and dword [ebp - 0x168], 0
jmp 0x10034c2a
mov eax, dword [ebp - 0x168]
inc eax
mov dword [ebp - 0x168], eax
cmp dword [ebp - 0x168], 0x6517
jge 0x10034c71
mov eax, dword [ebp - 0x158]
mov ecx, dword [ebp - 0x160]
sar eax, cl
mov ecx, dword [ebp - 0x168]
sar eax, cl
cdq
mov dword [ebp - 0x3e8], eax
mov dword [ebp - 0x3e4], edx
push dword [ebp - 0x3e4]
push dword [ebp - 0x3e8]
mov ecx, 0x1006f688
call fcn.10002383
jmp 0x10034c1d
jmp 0x10034bfb
jmp 0x10034bd5
push 0
push 0
push 0xcd9
push 0x4b8
push 0
call dword [sym.imp.USER32.dll_InsertMenuA]
movzx eax, byte [0x1017d5c4]
test eax, eax
je 0x10034cfa
mov ecx, 0x1017eab8
call fcn.10036dab
movzx eax, al
test eax, eax
jne 0x10034cfa
lea eax, [ebp - 0x188]
push eax
lea eax, [ebp - 0x210]
push eax
mov ecx, 0x1017eab8
call fcn.10012c2c
lea eax, [ebp - 0x500]
push eax
mov ecx, 0x1017eab8
call fcn.10012c1e
push eax
lea ecx, [ebp - 0x210]
call fcn.10012c41
movzx eax, al
test eax, eax
je 0x10034cfa
lea ecx, [ebp - 0x210]
call fcn.10036db4
mov eax, dword [eax + 4]
mov dword [ebp - 0xa0], eax
mov dword [ebp - 4], 0x10
cmp dword [ebp - 0x218], 0x3181
jge 0x10034d1d
mov edx, dword [ebp - 0x420]
mov ecx, 0x1006f688
call fcn.10003d52
jmp 0x10034d39
or dword [ebp - 4], 0xffffffff
jmp 0x10034d43
cmp dword [ebp - 0xa0], 0xffffffff
jne 0x10034fb0
mov ecx, 0x1017eab8
call fcn.10036df8
mov ecx, dword [ebp - 0x5c]
add eax, dword [ecx + 0x18]
push eax
mov ecx, 0x1017eab8
call fcn.10036dfc
and dword [ebp - 0xa8], 0
jmp 0x10034d81
mov eax, dword [ebp - 0xa8]
inc eax
mov dword [ebp - 0xa8], eax
mov eax, dword [ebp - 0x5c]
mov ecx, dword [ebp - 0xa8]
cmp ecx, dword [eax + 0x18]
jae 0x10034fb0
mov eax, dword [ebp - 0x5c]
mov ecx, dword [ebp - 0xa4]
add ecx, dword [eax + 0x20]
mov eax, dword [ebp - 0xa8]
lea eax, [ecx + eax*4]
mov dword [ebp - 0x220], eax
cmp dword [ebp - 0x220], 0
je 0x10034fab
mov eax, dword [ebp - 0x220]
mov ecx, dword [ebp - 0xa4]
add ecx, dword [eax]
push ecx
lea ecx, [ebp - 0x5c4]
call fcn.10036cc2
mov dword [ebp - 4], 0x12
mov edx, dword [ebp + 8]
lea ecx, [ebp - 0x5c4]
call fcn.100275b9
mov dword [ebp - 0x230], eax
movzx eax, byte [0x1017d5c4]
test eax, eax
je 0x10034e10
mov ecx, 0x1017eab8
call fcn.10036dab
movzx eax, al
test eax, eax
jne 0x10034f79
mov dword [ebp - 0x228], 0x1e0d
mov dword [ebp - 0x3e0], str.jtmxg_ofdfnfw_cvd_bilg_gnqcpt_pmne_vjg_xliyr_nleum_tooonn_rducvgzj_whyjfzs
cmp dword [ebp - 0x228], 0x1e1d
jle 0x10034f0d
push 0
call dword [sym.imp.KERNEL32.dll_GetSystemInfo]
and dword [ebp - 0x180], 0
jmp 0x10034e52
mov eax, dword [ebp - 0x180]
inc eax
mov dword [ebp - 0x180], eax
cmp dword [ebp - 0x180], 0x36c1
jge 0x10034ee4
and dword [ebp - 0x170], 0
jmp 0x10034e78
mov eax, dword [ebp - 0x170]
inc eax
mov dword [ebp - 0x170], eax
cmp dword [ebp - 0x170], 0x7b2b
jge 0x10034edf
and dword [ebp - 0x178], 0
jmp 0x10034e9a
mov eax, dword [ebp - 0x178]
inc eax
mov dword [ebp - 0x178], eax
cmp dword [ebp - 0x178], 0x429e
jge 0x10034edd
mov eax, dword [ebp - 0x170]
add eax, dword [ebp - 0x178]
or eax, dword [ebp - 0x180]
cdq
mov dword [ebp - 0x3f4], eax
mov dword [ebp - 0x3f0], edx
push dword [ebp - 0x3f0]
push dword [ebp - 0x3f4]
mov ecx, 0x1006f688
call fcn.10002383
jmp 0x10034e8d
jmp 0x10034e6b
jmp 0x10034e45
push 0x13b9
push 0
push 0
push 0xfdd
push 0xc74
push 0
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_GetDIBits]
lea eax, [ebp - 0x230]
push eax
mov ecx, 0x1017eab8
call fcn.10036dba
mov ecx, dword [ebp - 0xa8]
mov dword [eax], ecx
mov byte [ebp - 4], 0x13
cmp dword [ebp - 0x228], 0x1c63
jge 0x10034f46
mov edx, dword [ebp - 0x3e0]
mov ecx, 0x1006f688
call fcn.10003d52
jmp 0x10034f62
mov dword [ebp - 4], 0x12
jmp 0x10034f72
mov byte [0x1017d5c4], 1
cmp dword [ebp - 0xa0], 0xffffffff
jne 0x10034f9c
mov eax, dword [ebp - 0x230]
cmp eax, dword [ebp - 0x188]
jne 0x10034f9c
mov eax, dword [ebp - 0xa8]
mov dword [ebp - 0xa0], eax
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x5c4]
call fcn.10012ad4
jmp 0x10034d74
cmp dword [ebp + 0x10], 0
jne 0x10034fd9
cmp dword [ebp - 0xa0], 0xffffffff
je 0x10034fd9
mov eax, dword [ebp - 0x5c]
mov ecx, dword [ebp - 0xa4]
add ecx, dword [eax + 0x24]
mov eax, dword [ebp - 0xa0]
mov ax, word [ecx + eax*2]
mov word [ebp - 0x3c], ax
movzx eax, word [ebp - 0x3c]
cmp eax, 0xffff
je 0x1003538b
movzx eax, word [ebp - 0x3c]
mov ecx, dword [ebp - 0x5c]
mov edx, dword [ebp - 0xa4]
add edx, dword [ecx + 0x1c]
lea eax, [edx + eax*4]
mov dword [ebp - 0x3fc], eax
mov eax, dword [ebp - 0x3fc]
mov ecx, dword [ebp - 0xa4]
add ecx, dword [eax]
mov dword [ebp - 0x64], ecx
mov eax, dword [ebp - 0x64]
cmp eax, dword [ebp - 0x5c]
jbe 0x10035383
push 8
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0xcc]
mov edx, dword [ebp - 0x5c]
add edx, dword [ecx + eax + 0x7c]
cmp dword [ebp - 0x64], edx
jae 0x10035383
mov eax, dword [0x1017ea6c]
and eax, 2
jne 0x1003506c
mov eax, dword [0x1017ea6c]
or eax, 2
mov dword [0x1017ea6c], eax
mov dword [ebp - 4], 0x15
push 0x120c9
call fcn.10009a7a
pop ecx
mov byte [0x1017ea70], al
or dword [ebp - 4], 0xffffffff
mov byte [ebp - 0x4c], 1
mov byte [ebp - 0x4b], 0xe1
mov byte [ebp - 0x4a], 0
mov byte [ebp - 0x49], 8
mov byte [ebp - 0x48], 3
mov byte [ebp - 0x47], 0xf2
mov byte [ebp - 0x46], 0xa2
mov byte [ebp - 0x45], 0xa7
mov byte [ebp - 0x44], 2
mov byte [ebp - 0x43], 8
xor eax, eax
inc eax
shl eax, 0
movzx eax, byte [ebp + eax - 0x4c]
and eax, 0x8d
xor ecx, ecx
inc ecx
shl ecx, 0
movzx ecx, byte [ebp + ecx - 0x4c]
or ecx, 0x8d
sub ecx, eax
xor eax, eax
inc eax
imul eax, eax, 0
movzx eax, byte [ebp + eax - 0x4c]
mov byte [ebp + eax - 0x68], cl
mov dword [ebp - 0x20], 2
and dword [ebp - 0xd0], 0
jmp 0x100350de
mov eax, dword [ebp - 0x20]
inc eax
inc eax
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 0xa
jae 0x10035192
xor eax, eax
inc eax
imul eax, eax, 0
movzx eax, byte [ebp + eax - 0x4c]
lea eax, [eax + eax + 2]
cmp dword [ebp - 0x20], eax
jne 0x1003511f
mov eax, dword [ebp - 0x20]
movzx eax, byte [ebp + eax - 0x4c]
inc eax
mov dword [ebp - 0xd0], eax
mov eax, dword [ebp - 0x20]
movzx eax, byte [ebp + eax - 0x4c]
mov ecx, dword [ebp - 0x20]
lea eax, [ecx + eax - 1]
mov dword [ebp - 0x20], eax
jmp 0x100350d6
mov eax, dword [ebp - 0x20]
sub eax, dword [ebp - 0xd0]
movzx eax, byte [ebp + eax - 0x4e]
movsx eax, byte [ebp + eax - 0x68]
mov ecx, dword [ebp - 0x20]
movzx ecx, byte [ebp + ecx - 0x4b]
and ecx, eax
mov eax, dword [ebp - 0x20]
sub eax, dword [ebp - 0xd0]
movzx eax, byte [ebp + eax - 0x4e]
movsx eax, byte [ebp + eax - 0x68]
mov edx, dword [ebp - 0x20]
movzx edx, byte [ebp + edx - 0x4b]
and edx, eax
mov eax, dword [ebp - 0x20]
sub eax, dword [ebp - 0xd0]
movzx eax, byte [ebp + eax - 0x4e]
movsx eax, byte [ebp + eax - 0x68]
mov esi, dword [ebp - 0x20]
movzx ebx, byte [ebp + esi - 0x4b]
add ebx, eax
sub ebx, edx
sub ebx, ecx
mov eax, dword [ebp - 0x20]
movzx eax, byte [ebp + eax - 0x4c]
mov byte [ebp + eax - 0x68], bl
and dword [ebp - 0xd0], 0
jmp 0x100350d6
xor eax, eax
inc eax
imul eax, eax, 3
mov byte [ebp + eax - 0x68], 0
mov eax, dword [0x1017ea6c]
and eax, 4
jne 0x100351d8
mov eax, dword [0x1017ea6c]
or eax, 4
mov dword [0x1017ea6c], eax
mov dword [ebp - 4], 0x16
lea eax, [ebp - 0x68]
push eax
mov ecx, 0x1017eb28
call fcn.10036cc2
push 0x10056b75
call fcn.100384ac
pop ecx
or dword [ebp - 4], 0xffffffff
and dword [ebp - 0x190], 0
jmp 0x100351ee
mov eax, dword [ebp - 0x190]
inc eax
mov dword [ebp - 0x190], eax
cmp dword [ebp - 0x190], 4
jae 0x10035204
mov eax, dword [ebp - 0x190]
mov byte [ebp + eax - 0x68], 0
jmp 0x100351e1
mov eax, dword [ebp - 0x64]
mov dword [ebp - 0x88], eax
movsx eax, byte [0x1017ea70]
mov ecx, dword [ebp - 0x88]
movsx ecx, byte [ecx]
cmp ecx, eax
je 0x10035230
mov eax, dword [ebp - 0x88]
inc eax
mov dword [ebp - 0x88], eax
jmp 0x1003520d
mov eax, dword [ebp - 0x88]
inc eax
mov dword [ebp - 0x88], eax
push dword [ebp - 0x88]
push dword [ebp - 0x64]
lea ecx, [ebp - 0x57c]
call fcn.100370f5
mov dword [ebp - 4], 0x17
push 0x1017eb28
lea ecx, [ebp - 0x57c]
call fcn.10036cf1
lea eax, [ebp - 0x4cc]
push eax
lea ecx, [ebp - 0x57c]
call fcn.10013023
push dword [eax]
lea eax, [ebp - 0x508]
push eax
lea ecx, [ebp - 0x57c]
call fcn.1001300f
push dword [eax]
lea ecx, [ebp - 0x5dc]
call fcn.1003711e
mov byte [ebp - 4], 0x18
lea eax, [ebp - 0x5dc]
push eax
call fcn.1002819b
pop ecx
mov dword [ebp - 0x1d0], eax
cmp dword [ebp - 0x1d0], 0
je 0x10035332
push dword [ebp - 0x88]
lea ecx, [ebp - 0x5ac]
call fcn.10036cc2
mov byte [ebp - 4], 0x19
lea edx, [ebp - 0x3ec]
lea ecx, [ebp - 0x5ac]
call fcn.10027776
movzx eax, al
test eax, eax
je 0x10035305
push 0
push dword [ebp - 0x3ec]
push 0
push dword [ebp - 0x1d0]
call fcn.100328f3
add esp, 0x10
mov dword [ebp - 0x64], eax
jmp 0x10035321
push 1
push 0
lea eax, [ebp - 0x5ac]
push eax
push dword [ebp - 0x1d0]
call fcn.100328f3
add esp, 0x10
mov dword [ebp - 0x64], eax
mov byte [ebp - 4], 0x18
lea ecx, [ebp - 0x5ac]
call fcn.10012ad4
jmp 0x10035365
cmp dword [ebp + 0x10], 0
jne 0x10035348
mov ecx, dword [ebp + 0xc]
call fcn.10002363
mov dword [ebp - 0x238], eax
jmp 0x10035352
movzx eax, word [ebp + 0x10]
mov dword [ebp - 0x238], eax
push dword [ebp - 0x238]
push dword [ebp + 8]
call fcn.1002d6d3
pop ecx
pop ecx
mov dword [ebp - 0x64], eax
mov byte [ebp - 4], 0x17
lea ecx, [ebp - 0x5dc]
call fcn.100067c3
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x57c]
call fcn.10012ad4
mov eax, dword [ebp - 0x64]
jmp 0x1003583d
mov dword [ebp - 4], 0x1a
cmp dword [ebp - 0x240], 0x1b0b
jge 0x100353ae
mov edx, dword [ebp - 0x404]
mov ecx, 0x1006f688
call fcn.10003d52
jmp 0x100353ca
or dword [ebp - 4], 0xffffffff
jmp 0x100353d4
mov dword [ebp - 0x90], 0x9d692360
mov dword [ebp - 0x58], 0xddce
mov dword [ebp - 0x6c], 0x233fd52
mov dword [ebp - 0x2c0], 0xf085ffff
mov dword [ebp - 0x198], 0
jmp 0x1003540f
mov eax, dword [ebp - 0x198]
inc eax
mov dword [ebp - 0x198], eax
cmp dword [ebp - 0x198], 4
jge 0x1003542b
mov eax, dword [ebp - 0x198]
mov dword [ebp + eax*4 - 0x488], 6
jmp 0x10035402
cmp dword [ebp - 0x90], 0x693e
jg 0x100354fb
mov eax, dword [ebp - 0x90]
cmp eax, dword [ebp - 0x58]
jle 0x10035452
mov dword [ebp - 0x248], 1
jmp 0x10035459
and dword [ebp - 0x248], 0
mov eax, dword [ebp - 0x58]
cmp eax, dword [ebp - 0x248]
jne 0x10035470
mov dword [ebp - 0x250], 1
jmp 0x10035477
and dword [ebp - 0x250], 0
mov eax, dword [ebp - 0x90]
cmp dword [ebp - 0x250], eax
jne 0x10035491
mov dword [ebp - 0x258], 1
jmp 0x10035498
and dword [ebp - 0x258], 0
mov eax, dword [ebp - 0x90]
add eax, dword [ebp - 0x258]
cmp eax, dword [ebp - 0x90]
jge 0x100354b8
mov dword [ebp - 0x260], 1
jmp 0x100354bf
and dword [ebp - 0x260], 0
mov eax, dword [ebp - 0x260]
add eax, 0x10afbd13
mov dword [ebp - 0x268], eax
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x268]
mov dword [ebp + eax - 0x488], ecx
cmp dword [ebp - 0x268], 0x8e13
jge 0x100354fb
mov dword [ebp - 0x270], 1
jmp 0x10035502
and dword [ebp - 0x270], 0
mov eax, dword [ebp - 0x270]
add eax, 0xceafd94
cmp eax, dword [ebp - 0x58]
jg 0x1003551e
mov dword [ebp - 0x278], 1
jmp 0x10035525
and dword [ebp - 0x278], 0
mov eax, dword [ebp - 0x58]
imul eax, dword [ebp - 0x278]
mov dword [ebp - 0x6c], eax
cmp dword [ebp - 0x6c], 0
jne 0x10035551
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x488], 0
jne 0x10035551
and dword [ebp - 0x280], 0
jmp 0x1003555b
mov dword [ebp - 0x280], 1
cmp dword [ebp - 0x280], 0x41a8
jge 0x100355a6
mov byte [ebp - 0x96], 0
movzx eax, byte [ebp - 0x96]
test eax, eax
je 0x100355a1
push 0x206c
push 0xa47
push 0x42b
push 0x178
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_ExcludeClipRect]
jmp 0x1003583b
mov dword [ebp - 0xc0], 5
mov dword [ebp - 0x1a0], 0
mov dword [ebp - 0x36c], 0x91cfe0c2
mov eax, dword [ebp - 0x58]
mov dword [ebp - 0x1a0], eax
cmp dword [ebp - 0x1a0], 0
jne 0x100355e2
mov dword [ebp - 0x290], 1
jmp 0x100355e9
and dword [ebp - 0x290], 0
or eax, 0xffffffff
je 0x10035600
cmp dword [ebp - 0x6c], 0
je 0x10035600
mov dword [ebp - 0x288], 1
jmp 0x10035607
and dword [ebp - 0x288], 0
mov eax, dword [ebp - 0x288]
mov dword [ebp - 0x6c], eax
mov eax, dword [ebp - 0x6c]
cmp dword [ebp - 0x290], eax
jg 0x10035627
mov dword [ebp - 0x298], 1
jmp 0x1003562e
and dword [ebp - 0x298], 0
mov eax, dword [ebp - 0xc0]
cmp dword [ebp - 0x298], eax
jl 0x10035648
mov dword [ebp - 0x2a0], 1
jmp 0x1003564f
and dword [ebp - 0x2a0], 0
mov eax, dword [ebp - 0x90]
cmp dword [ebp - 0x2a0], eax
jl 0x10035669
mov dword [ebp - 0x2a8], 1
jmp 0x10035670
and dword [ebp - 0x2a8], 0
cmp dword [ebp - 0x2a8], 0xb26de0d6
je 0x10035688
mov dword [ebp - 0x2b0], 1
jmp 0x1003568f
and dword [ebp - 0x2b0], 0
mov eax, dword [ebp - 0x58]
cmp dword [ebp - 0x2b0], eax
jl 0x100356a6
mov dword [ebp - 0x364], 1
jmp 0x100356ad
and dword [ebp - 0x364], 0
mov eax, dword [ebp - 0x90]
mov dword [ebp - 0x4dc], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x488]
mov dword [ebp - 0x2b8], eax
push 4
pop eax
shl eax, 1
mov ecx, dword [ebp - 0x2b8]
mov dword [ebp + eax - 0x488], ecx
mov eax, dword [ebp - 0x2b8]
sub eax, dword [ebp - 0x58]
mov ecx, dword [ebp - 0xc0]
sub ecx, eax
mov dword [ebp - 0x2c0], ecx
mov eax, dword [ebp - 0x6c]
mov dword [ebp - 0x510], eax
mov eax, dword [ebp - 0x2c0]
cmp eax, dword [ebp - 0xc0]
jle 0x10035718
mov dword [ebp - 0x2c8], 1
jmp 0x1003571f
and dword [ebp - 0x2c8], 0
cmp dword [ebp - 0x2c8], 0xffff
jbe 0x10035737
mov dword [ebp - 0x2d0], 1
jmp 0x1003573e
and dword [ebp - 0x2d0], 0
mov eax, dword [ebp - 0x2d0]
add eax, 0x7f0b4bd0
cmp eax, 0x341a
je 0x1003575c
mov dword [ebp - 0x2d8], 1
jmp 0x10035763
and dword [ebp - 0x2d8], 0
mov eax, dword [ebp - 0xc0]
cmp dword [ebp - 0x2d8], eax
jl 0x1003577d
mov dword [ebp - 0x2e0], 1
jmp 0x10035784
and dword [ebp - 0x2e0], 0
mov eax, dword [ebp - 0x2e0]
sub eax, 0xffff
cmp eax, 0x9b7
jne 0x100357a2
mov dword [ebp - 0x2e8], 1
jmp 0x100357a9
and dword [ebp - 0x2e8], 0
cmp dword [ebp - 0x2e8], 5
jl 0x100357be
mov dword [ebp - 0x2f0], 1
jmp 0x100357c5
and dword [ebp - 0x2f0], 0
mov eax, dword [ebp - 0xc0]
cmp dword [ebp - 0x2f0], eax
je 0x100357df
mov dword [ebp - 0x2f8], 1
jmp 0x100357e6
and dword [ebp - 0x2f8], 0
mov eax, dword [ebp - 0x6c]
mov dword [ebp - 0x1a0], eax
mov eax, dword [ebp - 0x1a0]
add eax, dword [ebp - 0x2f8]
cmp eax, dword [ebp - 0x58]
jg 0x1003580c
mov dword [ebp - 0x300], 1
jmp 0x10035813
and dword [ebp - 0x300], 0
cmp dword [ebp - 0x300], 2
jbe 0x10035828
mov dword [ebp - 0x308], 1
jmp 0x1003582f
and dword [ebp - 0x308], 0
mov eax, dword [ebp - 0x308]
mov dword [ebp - 0x36c], eax
xor eax, eax
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret