Function at 0x1003ac14
Capabilities:
Connect pipe
Encode data using base64
Get session user name
Set thread local storage value

Disassembly:
mov eax, 0x10064ae6
call fcn.100630d8
sub esp, 0x620
push ebx
push esi
mov dword [ebp - 0x1c], 0x65d0
xor ebx, ebx
cmp dword [ebp - 0x1c], 0x693f
push edi
mov dword [ebp - 0x10], esp
jle 0x1003ac85
mov esi, ebx
mov edi, ebx
mov ecx, edi
mov eax, esi
sar eax, cl
lea ecx, [ebp - 0x590]
cdq
push edx
push eax
call fcn.10001ab5
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x1003ac5e
mov eax, dword [eax]
push eax
call fcn.1004c653
pop ecx
push ebx
push 1
lea ecx, [ebp - 0x590]
call fcn.100050bb
inc edi
cmp edi, 0x7584
jl 0x1003ac40
inc esi
cmp esi, 0x5d03
jl 0x1003ac3e
mov dword [ebp - 0x38], 0xffffffff
mov dword [ebp - 0x38], 1
mov dword [ebp - 0x38], 0xfbd6c3f0
mov dword [ebp - 0x38], 0xfffffff8
mov dword [ebp - 0x38], 0xce4b0ad8
mov dword [ebp - 0x38], 0xf3ac9d73
mov dword [ebp - 0x28], 0xffffffff
mov dword [ebp - 0x24], 0x3d1b
cmp dword [ebp - 0x24], 0x3f53
jle 0x1003ad12
mov esi, ebx
mov edi, ebx
mov dword [ebp - 0x38], ebx
lea ecx, [ebx + edi]
mov eax, esi
sar eax, cl
mov ecx, 0x10081078
cdq
push edx
push eax
call fcn.10004aca
inc ebx
cmp ebx, 0x1694
jl 0x1003accd
inc edi
push 0
pop ebx
cmp edi, 0x561c
jl 0x1003acca
inc esi
cmp esi, 0x1f1
jl 0x1003acc8
push ebx
push ebx
push 0xd57
push 0x588
push ebx
call dword [sym.imp.USER32.dll_InsertMenuA]
mov dword [ebp - 4], ebx
cmp dword [ebp - 0x24], 0x3a06
jge 0x1003ad2d
mov edx, str.zsiwed_xeiaqlmwc_wpvjwzbv_qisilqlhp_suteorzd_yvgmyd
mov ecx, 0x10081078
call fcn.10006f4f
or dword [ebp - 4], 0xffffffff
mov dword [ebp - 0x38], 0xd090d790
mov dword [ebp - 0x1f4], 0xa1804524
mov dword [ebp - 0x3c], 0x9ba4
mov dword [ebp - 0x24], 0xa917
mov dword [ebp - 0x2c], ebx
jmp 0x1003ad88
mov eax, dword [ebp - 0x2c]
mov dword [ebp + eax*4 - 0xe0], 0x5b9b55bb
inc dword [ebp - 0x2c]
cmp dword [ebp - 0x2c], 1
jl 0x1003ad77
push 4
mov dword [ebp - 0x2c], ebx
pop esi
jmp 0x1003ada7
mov eax, dword [ebp - 0x2c]
mov dword [ebp + eax*4 - 0x4d0], 3
inc dword [ebp - 0x2c]
cmp dword [ebp - 0x2c], esi
jl 0x1003ad96
mov dword [ebp - 0xe0], ebx
cmp dword [ebp - 0xe0], 0xffffffe3
je 0x1003af53
mov edi, 0xffff
mov dword [ebp - 0x38], 2
lea ecx, [ebp - 0x43c]
mov dword [ebp - 0x18], 0xfffffffa
mov dword [ebp - 0x20], 0x2b534de6
mov dword [ebp - 0x104], 9
mov dword [ebp - 0x20], 0xdac842f8
mov dword [ebp - 0x20], 0x1ae9a07b
push esi
call fcn.10004d6b
mov dword [ebp - 4], 2
mov dword [ebp - 0x20], 0xcb6e
mov dword [ebp - 0x18], ebx
jmp 0x1003ae23
mov ecx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x43c]
mov dword [eax + ecx*4], 3
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], esi
jl 0x1003ae10
cmp dword [ebp - 0x38], ebx
je 0x1003af07
mov dword [ebp - 0x38], 1
lea ecx, [ebp - 0x370]
mov dword [ebp - 0x30], 8
mov dword [ebp - 0x18], 0xc46ddcd1
push 3
call fcn.10004d6b
push 0x6450
push 0x4932
push 1
push ebx
mov byte [ebp - 4], 3
lea edx, [ebp - 0x370]
mov dword [ebp - 0x18], 0xffffffff
lea ecx, [ebp - 0x450]
push 1
call fcn.10035efd
add esp, 0x14
lea eax, [ebp - 0x1f4]
mov edx, 0x499c
push 0xc86
push eax
sub esp, 0xc
push ebx
push ecx
call fcn.10036fef
mov eax, dword [ebp - 0x104]
add esp, 0x1c
mov eax, dword [ebp - 0x24]
inc dword [ebp - 0x24]
mov eax, dword [ebp - 0x370]
cmp edi, dword [eax + 8]
mov eax, dword [ebp - 0x28]
sbb ecx, ecx
xor edx, edx
inc ecx
cmp ecx, eax
setne dl
mov dword [ebp - 0x4c8], edx
imul eax, dword [ebp - 0x38], 0xdbd8
mov ecx, dword [ebp - 0x20]
sub ecx, eax
xor eax, eax
cmp ecx, edx
setg al
imul eax, dword [ebp - 0x104]
test eax, eax
jne 0x1003aeee
cmp dword [ebp - 0x30], ebx
jne 0x1003aeee
mov eax, ebx
jmp 0x1003aef1
xor eax, eax
inc eax
mov dword [ebp - 0x18], eax
lea ecx, [ebp - 0x370]
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x38], eax
call fcn.10004dc8
jmp 0x1003af24
push 0x4128
lea eax, [ebp - 0x104]
mov dl, 1
push eax
push ecx
push ecx
call fcn.10037caa
add esp, 0x10
cmp dword [ebp - 0x3c], ebx
jne 0x1003af48
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x43c]
call fcn.10004dc8
dec dword [ebp - 0xe0]
cmp dword [ebp - 0xe0], 0xffffffe3
jne 0x1003adc4
jmp 0x1003af53
lea ecx, [ebp - 0x43c]
call fcn.10004dc8
cmp dword [ebp - 0x1c], 0x651e
push 8
pop edi
jge 0x1003af6a
push str.vrqdbzjn_uwtn_vbfrnehdw_yeemh_egkrzxlv
call fcn.1004c653
pop ecx
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x3f4]
mov dword [ebp - 0x228], 0xb064
mov dword [ebp - 0x220], 1
push 2
call fcn.10004d6b
mov dword [ebp - 4], 6
lea ecx, [ebp - 0x388]
mov dword [ebp - 0xb4], 5
push 2
call fcn.10004d6b
push 0x735c
push ebx
lea eax, [ebp - 0xb0]
mov byte [ebp - 4], 7
push eax
push 0x428a
push 0x3408
push ecx
lea eax, [ebp - 0x3f4]
mov edx, 0x4774
push eax
call fcn.10037ff3
add esp, 0x1c
mov dword [ebp - 0xb0], ebx
jmp 0x1003affe
mov ecx, dword [ebp - 0xb0]
mov eax, dword [ebp - 0x388]
mov dword [eax + ecx*4], 0xfffffff6
inc dword [ebp - 0xb0]
cmp dword [ebp - 0xb0], 2
jl 0x1003afe5
lea eax, [ebp - 0x220]
push eax
lea eax, [ebp - 0x3f4]
push eax
lea eax, [ebp - 0x228]
push eax
push ecx
push ebx
push ecx
lea edx, [ebp - 0x388]
lea ecx, [ebp - 0xb4]
call fcn.10038ee9
add esp, 0x18
mov dword [ebp - 0xb4], ebx
jmp 0x1003b09e
push 0x64f7
push 0x5191
push 0x17b9
push ebx
push 0xa63
mov edx, 0x5f88
call fcn.1003864d
add esp, 0x14
mov edx, 0x7794
mov ecx, 0x4a1e
push 0x71fc
push 1
push 0x6c03
push 0x1c37
push 0x2996
push 1
push 0x68a9
push 0x3ff1
push 0x490f
push 1
call fcn.10037cc9
add esp, 0x28
inc dword [ebp - 0xb4]
cmp dword [ebp - 0xb4], 0xf
jne 0x1003b03b
lea ecx, [ebp - 0x388]
call fcn.10004dc8
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x3f4]
call fcn.10004dc8
mov eax, dword [0x1035fe40]
test al, 1
jne 0x1003b0fa
or eax, 1
mov dword [0x1035fe40], eax
mov dword [ebp - 4], edi
mov dword [0x1035fe60], ebx
mov dword [0x1035fe64], ebx
call fcn.1003f17b
push 0x10065117
mov dword [0x1035fe60], eax
call fcn.1004c629
or dword [ebp - 4], 0xffffffff
pop ecx
mov dword [ebp - 0x18], 0x69fdf99f
lea ecx, [ebp - 0x3b8]
mov dword [ebp - 0x38], 0xf13b
mov dword [ebp - 0x2c], 0xffffffff
push 2
call fcn.10004d6b
push ecx
mov dword [ebp - 4], 9
lea edx, [ebp - 0x460]
mov dword [ebp - 0x30], 0x17f215a
lea ecx, [ebp - 0x3b8]
mov dword [ebp - 0x28], 0x2f2aa787
push 1
call fcn.10035434
pop ecx
pop ecx
mov dword [ebp - 0x18], ebx
cmp dword [ebp - 0x18], 0xfffffff0
jne 0x1003b390
push 3
lea ecx, [ebp - 0x424]
call fcn.10004d6b
mov byte [ebp - 4], 0xa
lea ecx, [ebp - 0x3a0]
mov dword [ebp - 0x24], ebx
mov dword [ebp - 0x3c], 0xce028f4e
mov dword [ebp - 0x20], 0xd1b7136
mov dword [ebp - 0x1c], 0xffffffff
push 2
call fcn.10004d6b
lea eax, [ebp - 0x54]
mov byte [ebp - 4], 0xb
push eax
push 0x4565
push 1
lea eax, [ebp - 0x424]
mov edx, 0x14c2
push eax
push 0x5d70
push 1
push 0x1ca1
push 0x53c2
push 0x17e0
xor cl, cl
call fcn.10036bef
add esp, 0x24
mov dword [ebp - 0x54], ebx
jmp 0x1003b1d7
mov eax, dword [ebp - 0x54]
mov dword [ebp + eax*4 - 0x2e0], ebx
inc dword [ebp - 0x54]
cmp dword [ebp - 0x54], 3
jl 0x1003b1ca
mov dword [ebp - 0x54], ebx
jmp 0x1003b1f3
mov eax, dword [ebp - 0x54]
mov dword [ebp + eax*4 - 0x46c], 0xef314d41
inc dword [ebp - 0x54]
cmp dword [ebp - 0x54], 2
jl 0x1003b1e2
push ebx
lea eax, [ebp - 0x3a0]
push eax
push 0x59e
push ecx
lea edx, [ebp - 0x54]
mov ecx, 0x4dec
call fcn.1003909f
mov dword [ebp - 0x3c], 0x7011
add esp, 0x10
cmp dword [ebp - 0x3c], 0x70a1
jle 0x1003b258
mov esi, ebx
mov dword [ebp - 0x24], ebx
mov edi, esi
mov esi, 0x1b99
mov eax, edi
mov ecx, 0x10081078
cdq
push edx
push eax
call fcn.10004aca
dec edi
dec esi
jne 0x1003b233
mov esi, dword [ebp - 0x24]
inc esi
mov dword [ebp - 0x24], esi
cmp esi, 0xcd7
jl 0x1003b22c
push 4
pop esi
mov byte [ebp - 4], 0xc
cmp dword [ebp - 0x3c], 0x6f92
jge 0x1003b295
mov edx, str.jlidzp_kmuygl_hsekmotz_cin_lyoujwqs_yyxzugpo_jqv_deizbf_mpcvj_xvfoejcr_esagjuzbl_kcbodivya_jrvr
mov ecx, 0x10081078
call fcn.10006f4f
jmp 0x1003b295
mov dword [ebp - 4], 0xb
mov eax, dword [ebp - 0x2e0]
dec dword [ebp - 0x2e0]
cmp eax, 1
jne 0x1003b2b2
xor edx, edx
inc edx
jmp 0x1003b2b4
mov edx, ebx
mov eax, dword [ebp - 0x38]
xor ecx, ecx
mov dword [ebp - 0x24], eax
mov eax, dword [ebp - 0x30]
cmp edx, eax
mov eax, dword [ebp - 0x30]
setl cl
xor edx, edx
cmp ecx, eax
mov ecx, dword [ebp - 0x24]
mov eax, dword [ebp - 0x18]
setle dl
sub edx, 0x57fd8712
mov dword [ebp - 0x28], edx
xor edx, edx
cmp eax, ecx
mov eax, dword [ebp - 0x1c]
setg dl
xor ecx, ecx
cmp edx, dword [ebp - 0x28]
setne cl
xor edx, edx
cmp ecx, eax
mov eax, dword [ebp - 0x424]
setge dl
xor ecx, ecx
cmp dword [eax], edx
sete cl
xor eax, eax
cmp ecx, 0x1d9
setg al
imul eax, eax, 3
test eax, eax
jne 0x1003b318
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x3b8]
xor edx, edx
mov dword [eax], 0x3888
mov eax, dword [ebp - 0x468]
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x3c], eax
mov eax, dword [ebp - 0x3c]
mov eax, dword [ebp - 0x2c]
mov dword [ebp - 0x20], eax
mov eax, dword [ebp - 0x1c]
mov ecx, dword [ebp - 0x3a0]
mov dword [ebp - 0x2c], eax
mov eax, dword [ebp - 0x2c]
cmp eax, dword [ecx + 4]
mov eax, dword [ebp - 0x24]
setle dl
mov dword [ebp - 0x28], edx
xor edx, edx
cmp eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x2dc]
setge dl
xor ecx, ecx
cmp eax, edx
setne cl
mov dword [ebp - 0x24], ecx
lea ecx, [ebp - 0x3a0]
call fcn.10004dc8
lea ecx, [ebp - 0x424]
mov byte [ebp - 4], 9
call fcn.10004dc8
dec dword [ebp - 0x18]
jmp 0x1003b14a
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x3b8]
call fcn.10004dc8
cmp byte [0x1035e8fc], 0
je 0x1003b5c6
mov dword [ebp - 0xd8], 0x540d7f82
mov dword [ebp - 0x238], 0x40fc0272
mov dword [ebp - 0x24], 0x539f
cmp dword [ebp - 0x24], 0x55c6
jle 0x1003b45e
mov esi, ebx
mov dword [ebp - 0x3c], ebx
mov edi, ebx
mov dword [ebp - 0x30], ebx
mov eax, esi
mov dword [ebp - 0x38], ebx
cdq
mov esi, ebx
idiv edi
mov ecx, edx
mov dword [ebp - 0x20], ecx
mov edi, ebx
mov eax, edi
and eax, esi
or eax, ecx
lea ecx, [ebp - 0x518]
cdq
push edx
push eax
call fcn.10001ab5
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x1003b40d
mov eax, dword [eax]
push eax
call fcn.1004c653
pop ecx
push ebx
push 1
lea ecx, [ebp - 0x518]
call fcn.100050bb
mov ecx, dword [ebp - 0x20]
inc edi
cmp edi, 0x138b
jl 0x1003b3ef
inc esi
cmp esi, 0x7754
jl 0x1003b3ed
mov edi, dword [ebp - 0x30]
mov esi, dword [ebp - 0x3c]
inc edi
mov dword [ebp - 0x30], edi
cmp edi, 0x701b
jl 0x1003b3de
inc esi
mov dword [ebp - 0x3c], esi
cmp esi, 0x675e
jl 0x1003b3d9
push ebx
push ebx
push ebx
call dword [sym.imp.ADVAPI32.dll_RegLoadKeyW]
mov dword [ebp - 0x45c], 0xfffffff9
cmp dword [ebp - 0x24], 0x516d
jge 0x1003b47c
push str.vfryto_kxaoh_lnpq_raugyjmf_kjpvkmaa_frfsqaube_tvpezr_avtlr_qovncqvkg_gls_brqlqrv
call fcn.1004c653
pop ecx
or dword [ebp - 4], 0xffffffff
mov dword [ebp - 0x464], 0xfffffffa
mov dword [ebp - 0xd8], ebx
jmp 0x1003b4d0
push ecx
push 0x6df1
push ebx
lea eax, [ebp - 0x230]
mov dword [ebp - 0x47c], 0xa83a
push eax
lea eax, [ebp - 0x238]
mov dword [ebp - 0x230], 1
push eax
sub esp, 0xc
mov dl, 1
mov cl, dl
call fcn.10039222
add esp, 0x20
dec dword [ebp - 0xd8]
cmp dword [ebp - 0xd8], 0xffffffe4
jle 0x1003b492
mov dword [ebp - 0x24], 0x6291
cmp dword [ebp - 0x24], 0x63c7
jle 0x1003b55b
mov edi, ebx
mov dword [ebp - 0x3c], ebx
mov esi, ebx
mov eax, ebx
mov dword [ebp - 0x30], 0xb86
mov dword [ebp - 0x20], eax
mov dword [ebp - 0x38], ebx
mov ecx, eax
mov ebx, edi
mov edi, dword [ebp - 0x38]
shl ebx, cl
mov eax, ebx
mov ecx, 0x10081078
or eax, edi
cdq
push edx
push eax
call fcn.10004aca
inc edi
cmp edi, 0x29cf
jl 0x1003b508
mov eax, dword [ebp - 0x20]
mov edi, dword [ebp - 0x3c]
add eax, esi
dec dword [ebp - 0x30]
push 0
mov dword [ebp - 0x20], eax
pop ebx
jne 0x1003b4fc
inc esi
cmp esi, 0x16e6
jl 0x1003b4f0
inc edi
mov dword [ebp - 0x3c], edi
cmp edi, 0x1577
jl 0x1003b4ee
push 0x2c6
push 0x2299
push ebx
call dword [sym.imp.USER32.dll_CheckMenuItem]
mov byte [ebp - 0x8e], bl
mov dword [ebp - 4], 0x10
cmp dword [ebp - 0x24], 0x6016
jge 0x1003b580
mov edx, str.hicox_swpt_sjd_ssiknbq_yyprz
mov ecx, 0x10081078
call fcn.10006f4f
or dword [ebp - 4], 0xffffffff
lea edx, [ebp - 0x8e]
push ecx
push ecx
push 1
call fcn.10037f62
add esp, 0xc
mov ecx, dword [ebp - 0xc]
mov eax, 0x1035fe60
pop edi
pop esi
mov dword fs:[0], ecx
pop ebx
mov esp, ebp
pop ebp
ret
push ecx
push ecx
push ebx
mov edx, 0x6f63
call fcn.10037f62
add esp, 0xc
mov dl, 1
mov ecx, 0x2e37
push 0x7ed8
push 1
push 0x8d5
push ebx
push 0x1035e8fc
call fcn.10038166
mov dword [ebp - 0x30], 0x4658
add esp, 0x14
cmp dword [ebp - 0x30], 0x49fe
jle 0x1003b6a2
push ebx
push 1
push 1
push ebx
call dword [sym.imp.KERNEL32.dll_CreateEventA]
mov eax, ebx
mov dword [ebp - 0x24], ebx
mov esi, ebx
mov dword [ebp - 0x20], ebx
mov ecx, esi
mov dword [ebp - 0x38], ebx
shl eax, cl
mov esi, ebx
mov dword [ebp - 0x28], eax
mov edi, ebx
mov eax, esi
cdq
idiv edi
mov eax, dword [ebp - 0x28]
mov ecx, edx
sar eax, cl
lea ecx, [ebp - 0x5e4]
cdq
push edx
push eax
call fcn.10001ab5
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x1003b653
mov eax, dword [eax]
push eax
call fcn.1004c653
pop ecx
push ebx
push 1
lea ecx, [ebp - 0x5e4]
call fcn.100050bb
inc edi
cmp edi, 0x27d9
jl 0x1003b62f
inc esi
cmp esi, 0x5eca
jl 0x1003b62d
mov esi, dword [ebp - 0x20]
mov eax, dword [ebp - 0x24]
inc esi
mov dword [ebp - 0x20], esi
cmp esi, 0x6e3e
jl 0x1003b621
inc eax
mov dword [ebp - 0x24], eax
cmp eax, 0x18f4
jl 0x1003b61c
push ebx
push ebx
call dword [sym.imp.GDI32.dll_RectInRegion]
push 4
pop esi
mov dword [ebp - 0x18], 8
mov dword [ebp - 0x38], ebx
mov dword [ebp - 0x18], ebx
jmp 0x1003b6be
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x498], esi
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 1
jl 0x1003b6b1
push ecx
push 1
push ecx
mov ecx, 0x4448
call fcn.1003a79a
add esp, 0xc
mov dword [ebp - 0x18], ebx
jmp 0x1003b77b
push ebx
lea eax, [ebp - 0xa0]
mov dword [ebp - 0x24], 0x951fe77d
push eax
push ecx
push ecx
mov byte [ebp - 0xa0], bl
mov edx, 0x5198
mov ecx, 0x1986
call fcn.1003a496
mov dword [ebp - 0x24], ebx
add esp, 0x10
cmp dword [ebp - 0x24], ebx
jl 0x1003b778
lea eax, [ebp - 0x1b0]
mov dword [ebp - 0x1b0], 0xb8f3
push eax
push 1
push 0x18b3
push 1
push 0x4fb3
mov dl, 1
mov ecx, 0x6a45
call fcn.10038166
add esp, 0x14
mov byte [ebp - 0x81], bl
mov edx, 0x1fa0
lea ecx, [ebp - 0x81]
push 0x2d17
push 0x303f
push 1
push 0x42b5
push ebx
push 1
push 0x4ccc
push 0x4cd4
call fcn.10035b74
add esp, 0x20
dec dword [ebp - 0x24]
jns 0x1003b70e
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], ebx
jle 0x1003b6dd
cmp dword [ebp - 0x30], 0x44f5
jge 0x1003b798
push str.zdmo_xvkkavg_todgopbpr_vyjezkjpv_retqje_stqhlw_qwj_lyzlnneix_mxssvdju_uctxsraa_jdg_qokx
call fcn.1004c653
pop ecx
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x188]
mov dword [ebp - 0xf0], 0x1007dae0
mov dword [ebp - 0x68], 0xfffffffd
mov dword [ebp - 0x80], 0x590f0234
push 1
call fcn.10004d6b
push 0x2f84
lea eax, [ebp - 0x188]
mov dword [ebp - 4], 0x14
push eax
push ebx
lea eax, [ebp - 0x484]
mov dword [ebp - 0xec], 1
push eax
push ecx
mov edx, 0x4953
call fcn.1003a0a2
mov eax, dword [ebp - 0x68]
add esp, 0x14
cmp dword [ebp - 0x68], ebx
jne 0x1003b810
mov eax, dword [ebp - 0x68]
sub eax, dword [ebp - 0x68]
neg eax
sbb eax, eax
inc eax
cmp eax, dword [ebp - 0x68]
jle 0x1003b810
mov edx, ebx
jmp 0x1003b813
xor edx, edx
inc edx
mov eax, dword [ebp - 0x68]
xor ecx, ecx
cmp eax, edx
setle cl
mov dword [ebp - 0x80], ecx
cmp dword [ebp - 0x80], ebx
je 0x1003b9bf
mov dword [ebp - 0x1c], 2
mov eax, dword [ebp - 0x1c]
cmp eax, dword [ebp - 0x1c]
mov dword [ebp - 0x18], ebx
jg 0x1003b95a
jmp 0x1003b852
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x284], 0xf1d65f4e
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 3
jl 0x1003b841
mov dword [ebp - 0x80], ebx
cmp dword [ebp - 0x80], 0xfffffff9
jg 0x1003b972
mov dword [ebp - 0x24], 0x196e86ff
mov dword [ebp - 0x20], 1
mov dword [ebp - 0x3c], 0x6210
cmp dword [ebp - 0x3c], 0x655e
jle 0x1003b8e3
mov edi, ebx
mov dword [ebp - 0x30], ebx
mov dword [ebp - 0x38], edi
mov dword [ebp - 0x20], 0x41cd
mov esi, ebx
mov eax, edi
lea ecx, [ebp - 0x530]
xor eax, esi
cdq
push edx
push eax
call fcn.10001ab5
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x1003b8b0
mov eax, dword [eax]
push eax
call fcn.1004c653
pop ecx
push ebx
push 1
lea ecx, [ebp - 0x530]
call fcn.100050bb
inc esi
cmp esi, 0x7814
jl 0x1003b894
dec edi
dec dword [ebp - 0x20]
jne 0x1003b892
mov edi, dword [ebp - 0x30]
inc edi
mov dword [ebp - 0x30], edi
cmp edi, 0x5bf4
jl 0x1003b888
cmp dword [ebp - 0x284], ebx
jne 0x1003b90c
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0x27c]
mov eax, dword [ebp - 0x68]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x284]
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0x284]
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0x20], 1
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x280]
mov dword [ebp - 0x1c], 6
cmp dword [ebp - 0x3c], 0x5ffb
jge 0x1003b937
push str.klomxeru_qpapoozju_rpxqo_gdb_sfeobvt_jegwcsy_ndtdibfmn
call fcn.1004c653
pop ecx
mov dword [ebp - 4], 0x14
mov eax, dword [ebp - 0x24]
dec dword [ebp - 0x80]
jmp 0x1003b85b
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x4b4], 0xaf1ba137
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 3
jl 0x1003b949
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0xec], eax
mov eax, dword [ebp - 0x4ac]
mov dword [ebp - 0x80], eax
push 0x7ec0
push 0x559a
push 0x1782
push 1
push 0x63c6
push 0x6428
push 0xafe
push 0x5de8
lea eax, [ebp - 0x8c]
mov byte [ebp - 0x8c], bl
push eax
push 1
push 0x7561
mov dl, 1
mov ecx, 0x7e7e
call fcn.10038384
add esp, 0x2c
jmp 0x1003bb1f
mov dword [ebp - 0x58], 0x689bb5c1
mov dword [ebp - 0x38], 0x6f38f68c
mov dword [ebp - 0x20], 0x31764c7f
mov dword [ebp - 0x28], 0xc8d4e572
mov dword [ebp - 0x18], ebx
jmp 0x1003b9f1
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x190], 0xfffffffa
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 2
jl 0x1003b9e0
lea eax, [ebp - 0x188]
mov edx, 0x6740
push eax
push ebx
push 0x6c72
lea eax, [ebp - 0xec]
push eax
push 0x5196
push 1
push 0x1e19
lea eax, [ebp - 0x58]
push eax
lea eax, [ebp - 0x80]
push eax
push 1
lea ecx, [ebp - 0x68]
call fcn.10037cc9
mov eax, dword [ebp - 0x188]
xor ecx, ecx
add esp, 0x28
mov esi, dword [eax]
mov eax, dword [ebp - 0x58]
cmp eax, esi
setl cl
xor edx, edx
cmp ecx, esi
setg dl
xor eax, eax
cmp edx, 0x7a7558cd
setle al
cmp eax, 0xfffffff6
jg 0x1003ba5d
mov eax, dword [ebp - 0x58]
mov eax, dword [ebp - 0x58]
xor ecx, ecx
mov eax, dword [ebp - 0x188]
cmp dword [eax], 0x3475f540
setl cl
cmp ecx, 0x99b6
jle 0x1003ba7c
mov eax, dword [ebp - 0x58]
mov eax, dword [ebp - 0xec]
mov eax, dword [ebp - 0x58]
mov eax, dword [ebp - 0x58]
push 2
pop ecx
sub ecx, eax
cmp ecx, 0xfffffff9
je 0x1003baa0
mov eax, dword [ebp - 0x188]
cmp dword [eax], ebx
jne 0x1003baa0
mov esi, ebx
jmp 0x1003baa3
xor esi, esi
inc esi
mov edx, dword [ebp - 0x58]
add edx, dword [ebp - 0x68]
neg edx
sbb edx, edx
xor ecx, ecx
inc edx
neg esi
mov dword [ebp - 0x190], edx
mov eax, dword [ebp - 0x68]
cmp esi, eax
mov eax, dword [ebp - 0x58]
setg cl
imul eax, ecx
cmp edx, eax
jg 0x1003bad0
mov eax, dword [ebp - 0x18c]
mov eax, dword [ebp - 0x190]
xor ecx, ecx
mov eax, dword [ebp - 0x58]
mov eax, dword [ebp - 0x58]
mov eax, dword [ebp - 0x58]
test eax, eax
mov eax, dword [ebp - 0x188]
setle cl
xor edx, edx
cmp ecx, dword [eax]
setle dl
xor eax, eax
test edx, edx
sets al
cmp eax, dword [ebp - 0xec]
jl 0x1003bb0e
cmp dword [ebp - 0x190], ebx
jne 0x1003bb0e
mov ecx, ebx
jmp 0x1003bb11
xor ecx, ecx
inc ecx
mov eax, dword [ebp - 0x38]
sub ecx, eax
mov dword [ebp - 0x20], ecx
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x28], eax
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x188]
call fcn.10004dc8
mov dword [ebp - 0x108], ebx
lea ecx, [ebp - 0x358]
mov dword [ebp - 0x274], 0xb064
mov dword [ebp - 0x26c], 1
push 2
call fcn.10004d6b
mov dword [ebp - 4], 0x17
lea ecx, [ebp - 0x40c]
mov dword [ebp - 0x16c], 5
push 2
call fcn.10004d6b
push 0x37c4
push 0x5940
push ecx
push ebx
push 0x225
push 0x756b
push ecx
lea eax, [ebp - 0x358]
mov byte [ebp - 4], 0x18
push eax
push 0x268e
mov edx, 0x6048
lea ecx, [ebp - 0x264]
call fcn.10038c00
add esp, 0x24
lea eax, [ebp - 0x264]
push 0x6ff5
push ebx
push 0x17af
push eax
lea eax, [ebp - 0x40c]
push eax
push 0x645a
push 0x7764
push ecx
mov ecx, 0x824
call fcn.10035dce
mov dword [ebp - 0x3c], 0x1a7e
add esp, 0x20
cmp dword [ebp - 0x3c], 0x1e4a
jle 0x1003bc7e
push ebx
push 0x2b6
call dword [sym.imp.USER32.dll_GetClientRect]
mov eax, ebx
mov dword [ebp - 0x24], ebx
mov esi, ebx
mov dword [ebp - 0x30], ebx
mov ecx, esi
mov dword [ebp - 0x38], ebx
and ecx, eax
mov esi, ebx
mov dword [ebp - 0x20], ecx
mov edi, ebx
mov eax, esi
cdq
idiv edi
xor edx, ecx
lea ecx, [ebp - 0x548]
mov eax, edx
cdq
push edx
push eax
call fcn.10001ab5
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x1003bc37
mov eax, dword [eax]
push eax
call fcn.1004c653
pop ecx
push ebx
push 1
lea ecx, [ebp - 0x548]
call fcn.100050bb
mov ecx, dword [ebp - 0x20]
inc edi
cmp edi, 0x7a1c
jl 0x1003bc16
inc esi
cmp esi, 0xdc6
jl 0x1003bc14
mov esi, dword [ebp - 0x30]
mov eax, dword [ebp - 0x24]
inc esi
mov dword [ebp - 0x30], esi
cmp esi, 0x3883
jl 0x1003bc08
inc eax
mov dword [ebp - 0x24], eax
cmp eax, 0x7bfb
jl 0x1003bc03
lea eax, [ebp - 0x26c]
push eax
push 1
lea eax, [ebp - 0x40c]
push eax
push 0x3940
push 0x584c
lea eax, [ebp - 0x274]
push eax
lea eax, [ebp - 0x16c]
push eax
push ecx
lea ecx, [ebp - 0x358]
call fcn.10035dce
add esp, 0x20
cmp dword [ebp - 0x3c], 0x1770
jge 0x1003bcc9
push str.xkgevsa_sbpqhi_rqjrhi_evmt_noobgu
call fcn.1004c653
pop ecx
push 1
push 0x5b7d
push 1
lea eax, [ebp - 0x16c]
mov dword [ebp - 4], 0x18
push eax
push ebx
mov edx, 0x3af3
mov ecx, 0x6e58
call fcn.1003a00d
add esp, 0x14
lea ecx, [ebp - 0x40c]
call fcn.10004dc8
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x358]
call fcn.10004dc8
mov ecx, dword [ebp - 0xf0]
push 0xc
pop edx
mov dword [ebp - 0x150], edx
cmp edx, 0xe0
jge 0x1003c005
mov al, byte [ecx]
cmp al, byte [edx + ecx]
je 0x1003bd32
inc edx
jmp 0x1003bd16
mov dword [ebp - 0x64], 0xa1e94870
xor ecx, ecx
mov dword [ebp - 0x6c], 3
mov dword [ebp - 0x20], 0x188047d2
mov eax, dword [ebp - 0x64]
cmp ecx, eax
push 4
sbb eax, eax
xor edx, edx
neg eax
mov dword [ebp - 0x6c], eax
mov ecx, dword [ebp - 0x64]
mov eax, dword [ebp - 0x64]
shl ecx, 2
cmp eax, ecx
mov eax, dword [ebp - 0x64]
pop esi
setle dl
xor ecx, ecx
cmp eax, edx
mov eax, dword [ebp - 0x6c]
setge cl
xor edx, edx
cmp ecx, eax
mov eax, dword [ebp - 0x64]
setne dl
sub edx, eax
mov eax, dword [ebp - 0x20]
cmp esi, edx
sbb ecx, ecx
neg ecx
sub ecx, eax
cmp ecx, dword [ebp - 0x20]
jge 0x1003bdb1
push ecx
push ecx
lea edx, [ebp - 0x2c0]
mov dword [ebp - 0x2c0], 3
xor cl, cl
call fcn.100390e8
pop ecx
pop ecx
jmp 0x1003be97
lea eax, [ebp - 0x64]
push eax
lea eax, [ebp - 0x6c]
push eax
push 0x48cb
push 0x6216
push 0x12b3
push 0x5d1c
push ebx
push ecx
push ecx
mov ecx, 0x6cea
call fcn.10039c8f
mov dword [ebp - 0x20], 0x2c62
add esp, 0x24
cmp dword [ebp - 0x20], 0x2e0d
jle 0x1003be37
mov edi, ebx
mov esi, ebx
mov eax, esi
lea ecx, [ebp - 0x578]
or eax, edi
cdq
push edx
push eax
call fcn.10001ab5
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x1003be0d
mov eax, dword [eax]
push eax
call fcn.1004c653
pop ecx
push ebx
push 1
lea ecx, [ebp - 0x578]
call fcn.100050bb
inc esi
cmp esi, 0x6b32
jl 0x1003bdf1
inc edi
cmp edi, 0xe49
jl 0x1003bdef
push 4
pop esi
mov dword [ebp - 0x64], 0xfffffffc
jmp 0x1003be79
mov dword [ebp - 0x18], ebx
jmp 0x1003be56
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x4f0], 0xfffffffa
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], esi
jl 0x1003be45
mov dword [ebp - 0x6c], ebx
jmp 0x1003be71
mov eax, dword [ebp - 0x6c]
mov dword [ebp + eax*4 - 0x4f0], 0xfffffff9
inc dword [ebp - 0x6c]
cmp dword [ebp - 0x6c], esi
jl 0x1003be60
inc dword [ebp - 0x64]
cmp dword [ebp - 0x64], 0x14
jle 0x1003be40
cmp dword [ebp - 0x20], 0x2b2f
jge 0x1003be93
push str.iwmueoato_vlc_qxxdq_gfryuz_vuicw
call fcn.1004c653
pop ecx
or dword [ebp - 4], 0xffffffff
mov byte [ebp - 0x31], bl
cmp byte [ebp - 0x31], 0
je 0x1003beae
push ecx
xor dl, dl
mov ecx, 0x4198
call fcn.10037023
pop ecx
push 0x672c
lea eax, [ebp - 0x108]
push eax
push ecx
push 0x240b
push 0x3d41
push 0x5eed
lea eax, [ebp - 0x150]
mov ecx, 0x2ede
push eax
push 1
push 0x1f32
call fcn.1003858a
add esp, 0x24
mov dword [ebp - 0x1c0], 0xb064
mov dword [ebp - 0x240], 1
lea ecx, [ebp - 0x37c]
push 2
call fcn.10004d6b
mov dword [ebp - 4], 0x1d
lea ecx, [ebp - 0x364]
mov dword [ebp - 0xa8], 5
push 2
call fcn.10004d6b
push 1
push ecx
lea eax, [ebp - 0x1b4]
mov byte [ebp - 4], 0x1e
push eax
push ecx
lea ecx, [ebp - 0x37c]
call fcn.10038614
add esp, 0x10
lea eax, [ebp - 0x1b4]
mov dl, 1
push eax
push 0x37de
push 0x600c
push ecx
push ecx
lea ecx, [ebp - 0x364]
call fcn.100356a2
add esp, 0x14
lea eax, [ebp - 0x240]
lea edx, [ebp - 0x1c0]
push eax
lea eax, [ebp - 0x364]
push eax
lea eax, [ebp - 0x37c]
push eax
lea eax, [ebp - 0xa8]
push 1
push eax
call fcn.1003864d
add esp, 0x14
mov dword [ebp - 0xa8], ebx
jmp 0x1003bfe2
mov cl, 1
call fcn.10038779
push 0x79c1
push 1
push 1
push 0x3c8d
push 0x77ec
push 0x2e15
push 0x3f2b
push 0x632d
mov byte [ebp - 0x90], bl
lea ecx, [ebp - 0x90]
push 0x51b9
xor dl, dl
call fcn.10038c56
add esp, 0x24
inc dword [ebp - 0xa8]
cmp dword [ebp - 0xa8], 0xf
jne 0x1003bf98
lea ecx, [ebp - 0x364]
call fcn.10004dc8
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x37c]
call fcn.10004dc8
push 4
pop esi
mov dword [ebp - 0x1d4], esi
mov dword [ebp - 0x1c], 0x3ae35568
mov dword [ebp - 0x20], esi
mov dword [ebp - 0x38], 0xf77722ab
mov dword [ebp - 0x18], ebx
jmp 0x1003c035
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x13c], 0xe7631615
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 1
jl 0x1003c024
mov dword [ebp - 0x1c], ebx
jmp 0x1003c0a1
mov dword [ebp - 0x18], 0x167c
mov dword [ebp - 0x24], 0x34ac0198
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0x13c], eax
test eax, eax
je 0x1003c061
mov eax, dword [ebp - 0x13c]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0x24], ebx
cmp dword [ebp - 0x24], ebx
je 0x1003c078
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x1c]
xor ecx, ecx
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x20], 1
mov eax, dword [ebp - 0x20]
cmp eax, 0x62a4
setg cl
sub ecx, dword [ebp - 0x18]
sub ecx, dword [ebp - 0x18]
mov dword [ebp - 0x38], ecx
mov eax, dword [ebp - 0x24]
dec dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 0xffffffea
jle 0x1003c040
mov al, byte [0x1007dbc0]
xor ecx, ecx
mov byte [ebp - 0x45], al
mov dword [ebp - 0x14c], 0x1007dbc0
mov dword [ebp - 0x5c], 0xa1e94870
mov dword [ebp - 0x70], 3
mov dword [ebp - 0x20], 0x188047d2
mov eax, dword [ebp - 0x5c]
cmp ecx, eax
sbb eax, eax
xor edx, edx
neg eax
mov dword [ebp - 0x70], eax
mov ecx, dword [ebp - 0x5c]
mov eax, dword [ebp - 0x5c]
shl ecx, 2
cmp eax, ecx
mov eax, dword [ebp - 0x5c]
setle dl
xor ecx, ecx
cmp eax, edx
mov eax, dword [ebp - 0x70]
setge cl
xor edx, edx
cmp ecx, eax
mov eax, dword [ebp - 0x5c]
setne dl
sub edx, eax
mov eax, dword [ebp - 0x20]
cmp esi, edx
sbb ecx, ecx
neg ecx
sub ecx, eax
cmp ecx, dword [ebp - 0x20]
jge 0x1003c13d
push ecx
push 0x5fab
lea eax, [ebp - 0x254]
mov dword [ebp - 0x254], 3
push eax
push ebx
push ecx
mov edx, 0x590a
call fcn.10035dae
add esp, 0x14
jmp 0x1003c196
push ebx
push ecx
lea eax, [ebp - 0x70]
push eax
lea ecx, [ebp - 0x5c]
call fcn.10036fbf
add esp, 0xc
mov dword [ebp - 0x5c], 0xfffffffc
jmp 0x1003c190
mov dword [ebp - 0x18], ebx
jmp 0x1003c16d
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x4e0], 0xfffffffa
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], esi
jl 0x1003c15c
mov dword [ebp - 0x70], ebx
jmp 0x1003c188
mov eax, dword [ebp - 0x70]
mov dword [ebp + eax*4 - 0x4e0], 0xfffffff9
inc dword [ebp - 0x70]
cmp dword [ebp - 0x70], esi
jl 0x1003c177
inc dword [ebp - 0x5c]
cmp dword [ebp - 0x5c], 0x14
jle 0x1003c157
push ecx
push ecx
push 0x7841
push ecx
mov byte [ebp - 0x8a], bl
lea ecx, [ebp - 0x8a]
mov dl, 1
call fcn.100387af
mov eax, dword [ebp - 0xf0]
add esp, 0x10
mov cl, byte [0x1007dbc0]
mov dl, byte [eax]
call fcn.1003f1a6
mov byte [0x1007dbc0], al
xor eax, eax
inc eax
mov dword [ebp - 0x25c], eax
mov dword [ebp - 0x144], eax
mov dword [ebp - 0xc8], ebx
mov dword [ebp - 0x1cc], 0xac842f88
mov dword [ebp - 0x18], ebx
jmp 0x1003c201
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x5b4], 0x4de6f885
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 3
jl 0x1003c1f0
sub esp, 0x10
lea eax, [ebp - 0x25c]
lea edx, [ebp - 0xc8]
push ebx
push ecx
push eax
push ecx
push 0x5f5b
lea ecx, [ebp - 0x144]
call fcn.10038866
add esp, 0x24
mov dword [ebp - 0xc8], 2
cmp dword [ebp - 0xc8], ebx
jl 0x1003c27a
push 0x7498
push 0x7f37
push 1
lea eax, [ebp - 0x1cc]
mov ecx, 0x7d06
push eax
push 1
push ebx
push 0x6321
push 0x4d59
lea edx, [ebp - 0x144]
call fcn.10035b74
add esp, 0x20
dec dword [ebp - 0xc8]
jns 0x1003c23f
xor edi, edi
inc edi
mov dword [ebp - 0x2c], 6
lea ecx, [ebp - 0x394]
mov dword [ebp - 0x24], 0xfffffffd
mov dword [ebp - 0x20], 0xfffffffe
mov dword [ebp - 0x18], 0x486c
push esi
call fcn.10004d6b
mov dword [ebp - 0x20], 0x3fa9a180
mov dword [ebp - 0x20], 0xe663439f
mov dword [ebp - 0x38], ebx
mov dword [ebp - 0x1c], ebx
jmp 0x1003c2ce
mov ecx, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x394]
mov dword [eax + ecx*4], 1
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], esi
jl 0x1003c2bb
mov dword [ebp - 0x1c], ebx
jmp 0x1003c2e9
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0x494], 0xffffffff
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], esi
jl 0x1003c2d8
cmp dword [ebp - 0x2c], ebx
je 0x1003c38c
mov eax, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x2c]
cmp dword [ebp - 0x2c], 0xfffc
sbb eax, eax
inc eax
mov dword [ebp - 0x24], eax
je 0x1003c319
cmp dword [ebp - 0x24], ebx
je 0x1003c319
xor ecx, ecx
inc ecx
jmp 0x1003c31b
mov ecx, ebx
mov eax, dword [ebp - 0x2c]
add eax, ecx
imul eax, dword [ebp - 0x2c]
cmp eax, 0xd73df2ef
jb 0x1003c334
cmp dword [ebp - 0x2c], ebx
jne 0x1003c334
mov edx, ebx
jmp 0x1003c337
xor edx, edx
inc edx
mov eax, dword [ebp - 0x2c]
xor ecx, ecx
cmp edx, eax
setne cl
mov dword [ebp - 0x20], ecx
cmp dword [ebp - 0x20], ebx
je 0x1003c34c
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x2c]
xor edx, edx
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x24]
mov eax, dword [ebp - 0x2c]
cmp ecx, eax
mov eax, dword [ebp - 0x394]
setl dl
mov dword [eax + 8], edx
mov eax, dword [ebp - 0x18]
sub edx, eax
cmp edx, dword [ebp - 0x18]
jge 0x1003c5a3
mov dword [ebp - 0x490], 1
cmp dword [ebp - 0x490], ebx
je 0x1003c5a9
mov eax, ebx
xor edx, edx
mov dword [ebp - 0x20], eax
mov ecx, dword [ebp - 0x20]
mov eax, dword [ebp - 0x2c]
cmp eax, ecx
mov eax, dword [ebp - 0x18]
setne dl
xor ecx, ecx
cmp edx, 0x1676492a
setne cl
xor edx, edx
add ecx, esi
cmp ecx, eax
setne dl
imul edx, dword [ebp - 0x2c]
inc edx
neg edx
sbb edx, edx
xor ecx, ecx
inc edx
mov dword [ebp - 0x20], edx
mov eax, dword [ebp - 0x20]
cmp eax, 0x1824
setg cl
mov dword [ebp - 0x38], ecx
lea ecx, [ebp - 0x394]
call fcn.10004dc8
mov al, byte [edi + 0x1007dbc0]
mov edx, 0x4697
push ecx
push ebx
push 0x77e8
push ecx
mov byte [ebp - 0x31], al
mov byte [ebp - 0x9e], al
call fcn.10035ac1
mov eax, edi
mov cl, byte [ebp - 0x31]
cdq
idiv dword [ebp - 0x108]
mov esi, edx
mov dl, byte [ebp - 0x45]
call fcn.1003f1a6
mov ecx, dword [ebp - 0xf0]
mov dl, byte [esi + ecx]
mov cl, al
call fcn.1003f1a6
push 1
push 0x2da2
push 0x2f18
push 0x46ff
push 0x5e66
push 0xc1f
push 0x57ad
push 0x17d2
push 0x757c
push 0x11fc
push 1
push 0x7c46
push 0x305e
push ebx
push 0x438a
mov edx, 0x3bf5
mov byte [edi + 0x1007dbc0], al
mov ecx, 0x7a22
call fcn.1003a81f
add esp, 0x4c
lea eax, [ebp - 0x45]
mov edx, 0x1a67
mov ecx, 0x4aec
push 0x6116
push eax
push ebx
push 1
push 0x72b7
push 0x739a
lea eax, [ebp - 0x9e]
push 1
push eax
call fcn.1003662b
add esp, 0x20
push 4
inc edi
pop esi
cmp edi, esi
jl 0x1003c27d
mov eax, dword [0x1007dbc0]
mov dword [ebp - 0xfc], eax
mov dword [ebp - 0x30], 0x5146
cmp dword [ebp - 0x30], 0x53d1
jle 0x1003c57f
mov dword [ebp - 0x18], ebx
mov eax, ebx
mov dword [ebp - 0x24], ebx
mov esi, ebx
mov dword [ebp - 0x20], ebx
cdq
mov edi, ebx
idiv esi
mov esi, dword [ebp - 0x18]
mov ecx, edx
mov dword [ebp - 0x38], ecx
mov eax, edi
and eax, ecx
lea ecx, [ebp - 0x5a8]
or eax, esi
cdq
push edx
push eax
call fcn.10001ab5
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x1003c511
mov eax, dword [eax]
push eax
call fcn.1004c653
pop ecx
push ebx
push 1
lea ecx, [ebp - 0x5a8]
call fcn.100050bb
mov ecx, dword [ebp - 0x38]
inc edi
cmp edi, 0x624a
jl 0x1003c4f3
mov esi, dword [ebp - 0x20]
mov eax, dword [ebp - 0x24]
inc esi
mov dword [ebp - 0x20], esi
cmp esi, 0x60b4
jl 0x1003c4e6
inc eax
mov dword [ebp - 0x24], eax
cmp eax, 0x3216
jl 0x1003c4e1
mov eax, dword [ebp - 0x18]
inc eax
mov dword [ebp - 0x18], eax
cmp eax, 0x675
jl 0x1003c4dc
push 0x299
push 0x645
push 0x6c1
push 0x1acb
push ebx
call dword [sym.imp.USER32.dll_CheckMenuRadioItem]
push 4
pop esi
mov dword [ebp - 0x18], 0xfffffffd
cmp dword [ebp - 0x30], 0x50ca
jge 0x1003c59a
push str.onfcr_rjsbpyot_xtisjdb_bqlozs_ffqgfcoj_veo_fvhkwy_sibaywb_tubv_iwwhcc_clscww
call fcn.1004c653
pop ecx
or dword [ebp - 4], 0xffffffff
mov dword [ebp - 0x18], ebx
jmp 0x1003c5fc
mov dword [ebp - 0x490], ebx
xor eax, eax
inc eax
jmp 0x1003c38e
sub esp, 0x10
mov dword [ebp - 0x2a8], 0xfffffffe
lea eax, [ebp - 0x89]
mov byte [ebp - 0x89], bl
mov edx, 0x377f
push 1
push ecx
push 0x13ed
push ecx
push eax
mov ecx, 0x7af4
call fcn.10038866
add esp, 0x20
lea ecx, [ebp - 0x2a8]
mov edx, 0x3b1c
push ebx
call fcn.10039c59
inc dword [ebp - 0x18]
pop ecx
pop ecx
cmp dword [ebp - 0x18], 0xe
jl 0x1003c5b1
mov eax, dword [ebp - 0xfc]
dec eax
cmp eax, 0x2eda
ja 0x1003b596
lea eax, [ebp - 0x45]
push eax
lea eax, [ebp - 0x1d4]
push eax
push ecx
push 1
lea eax, [ebp - 0x108]
push eax
lea eax, [ebp - 0xfc]
push eax
push ecx
lea eax, [ebp - 0xf0]
mov ecx, 0xac
push 0xbb0
push eax
lea edx, [ebp - 0x14c]
call fcn.10038c00
add esp, 0x24
mov dword [ebp - 0x18], ebx
mov dword [ebp - 0x1c], 0x9694d2b5
lea ecx, [ebp - 0x3ac]
mov dword [ebp - 0x20], 0xedb39523
push 2
call fcn.10004d6b
mov dword [ebp - 4], 0x21
mov dword [ebp - 0xc0], ebx
jmp 0x1003c694
mov eax, dword [ebp - 0xc0]
mov dword [ebp + eax*4 - 0x250], 0x91cb4e76
inc dword [ebp - 0xc0]
cmp dword [ebp - 0xc0], esi
jl 0x1003c67d
lea eax, [ebp - 0xc0]
push eax
push ecx
lea eax, [ebp - 0x3ac]
push eax
push 0x5f45
push 1
call fcn.10038a82
mov eax, dword [ebp - 0x248]
add esp, 0x14
mov eax, dword [ebp - 0x24c]
mov eax, dword [ebp - 0x24c]
mov eax, dword [ebp - 0x244]
mov eax, dword [ebp - 0x244]
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x1c]
cmp dword [ebp - 0x24c], ebx
jne 0x1003c6ec
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x18]
sub eax, dword [ebp - 0x18]
mov dword [ebp - 0x20], eax
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], ebx
je 0x1003c71e
cmp dword [ebp - 0x248], ebx
je 0x1003c71e
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x3ac]
cmp dword [eax + 4], ebx
je 0x1003c71e
xor eax, eax
inc eax
jmp 0x1003c720
mov eax, ebx
imul eax, eax, 0xfcf4
lea ecx, [ebp - 0x3ac]
mov dword [ebp - 0x20], eax
or dword [ebp - 4], 0xffffffff
call fcn.10004dc8
mov eax, dword [0x1035fe60]
mov ecx, 0x1035fe60
push dword [eax + 4]
call fcn.10016fa9
mov eax, dword [0x1035fe60]
mov edi, 0xffff
mov dword [ebp - 0xd4], ebx
xor ecx, ecx
mov dword [eax + 4], eax
mov eax, dword [0x1035fe60]
mov dword [eax], eax
mov eax, dword [0x1035fe60]
mov dword [eax + 8], eax
mov dword [0x1035fe64], ebx
mov dword [ebp - 0x50], 0x71c1ec2d
mov dword [ebp - 0x1e4], 9
mov dword [ebp - 0x1ec], edi
mov eax, dword [ebp - 0x50]
mov eax, dword [ebp - 0x50]
mov eax, dword [ebp - 0x50]
mov eax, dword [ebp - 0x50]
mov eax, dword [ebp - 0x50]
mov eax, dword [ebp - 0x50]
cmp eax, 0xaa39
setle cl
cmp ecx, 0xc25b
jle 0x1003c927
mov dword [ebp - 0x258], 0x6b3e713e
mov dword [ebp - 0x2c4], 0xfffffff8
mov dword [ebp - 0x50], ebx
cmp dword [ebp - 0x50], 6
jle 0x1003c90c
mov dword [ebp - 0x1dc], 1
lea ecx, [ebp - 0x3c4]
push 2
call fcn.10004d6b
mov dword [ebp - 4], 0x22
mov dword [ebp - 0x30], 0x659a
cmp dword [ebp - 0x30], 0x66a2
jle 0x1003c850
mov edi, ebx
mov dword [ebp - 0x20], ebx
mov esi, ebx
mov dword [ebp - 0x38], ebx
mov ecx, esi
mov ebx, edi
mov edi, dword [ebp - 0x38]
sar ebx, cl
mov eax, edi
mov ecx, 0x10081078
xor eax, ebx
cdq
push edx
push eax
call fcn.10004aca
inc edi
cmp edi, 0x6879
jl 0x1003c813
mov edi, dword [ebp - 0x20]
inc esi
push 0
pop ebx
cmp esi, 0x23d8
jl 0x1003c807
inc edi
mov dword [ebp - 0x20], edi
cmp edi, 0x3edb
jl 0x1003c805
push 4
pop esi
mov edi, 0xffff
mov byte [ebp - 4], 0x23
cmp dword [ebp - 0x30], 0x63c4
jge 0x1003c892
mov edx, str.vnyriq_lnkwlj_hocvkkcfz_wunnofw_jgv_mreozyql_djr_sjrd_cthacq_pfpbtgcof_sekly
mov ecx, 0x10081078
call fcn.10006f4f
jmp 0x1003c892
push ecx
push 1
push ecx
lea eax, [ebp - 0x454]
mov dword [ebp - 4], 0x22
push eax
lea edx, [ebp - 0x3c4]
call fcn.10038ea8
add esp, 0x10
mov byte [ebp - 0x8b], bl
push 1
push ecx
lea ecx, [ebp - 0x8b]
call fcn.10038ba7
pop ecx
pop ecx
lea eax, [ebp - 0x3c4]
push eax
push ebx
push ecx
push 0x1254
lea eax, [ebp - 0x258]
push eax
lea eax, [ebp - 0x1dc]
push eax
lea eax, [ebp - 0x50]
push 0x1cf1
push eax
call fcn.1003696e
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x3c4]
add esp, 0x20
call fcn.10004dc8
inc dword [ebp - 0x50]
jmp 0x1003c7c8
push ecx
push 1
lea eax, [ebp - 0x2c4]
push eax
push ecx
lea edx, [ebp - 0x50]
call fcn.10035ac1
add esp, 0x10
jmp 0x1003c9a7
push 0x58ff
xor eax, eax
mov dword [ebp - 0x2b8], ebx
inc eax
lea ecx, [ebp - 0x8d]
push eax
push eax
push 0x74a7
push 0x7e67
push 0x5c29
push 0x6458
push ecx
mov dword [ebp - 0x260], eax
mov dl, al
push 0x65c5
mov ecx, 0x712e
mov byte [ebp - 0x8d], bl
call fcn.10038c56
add esp, 0x24
lea eax, [ebp - 0x1e4]
lea edx, [ebp - 0x50]
push eax
lea eax, [ebp - 0x260]
push eax
push 0x7d64
push ecx
lea eax, [ebp - 0x1ec]
push eax
push ecx
push 1
push ecx
push 0x4527
lea ecx, [ebp - 0x2b8]
call fcn.10036117
add esp, 0x24
mov eax, dword [ebp - 0x14c]
lea ecx, [ebp - 0x3e8]
add eax, 4
push 2
mov dword [ebp - 0x38], eax
call fcn.10004d6b
lea eax, [ebp - 0x470]
mov dword [ebp - 4], 0x25
push eax
push 1
push 0x4039
lea eax, [ebp - 0x3e8]
mov dword [ebp - 0x1c], 0xfffffff6
push eax
push 1
xor dl, dl
mov ecx, 0x41d4
call fcn.1003ab90
mov dword [ebp - 0x1c], 1
add esp, 0x14
cmp dword [ebp - 0x1c], ebx
jl 0x1003ca17
mov eax, dword [ebp - 0x1c]
mov edx, dword [ebp - 0x1c]
mov ecx, dword [ebp - 0x3e8]
mov eax, dword [ecx + eax*4]
mov dword [ecx + edx*4], eax
dec dword [ebp - 0x1c]
jns 0x1003ca00
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x3e8]
call fcn.10004dc8
mov dword [ebp - 0x60], 0xa1e94870
xor ecx, ecx
mov dword [ebp - 0x78], 3
mov dword [ebp - 0x20], 0x188047d2
mov eax, dword [ebp - 0x60]
cmp ecx, eax
sbb eax, eax
xor edx, edx
neg eax
mov dword [ebp - 0x78], eax
mov ecx, dword [ebp - 0x60]
mov eax, dword [ebp - 0x60]
shl ecx, 2
cmp eax, ecx
mov eax, dword [ebp - 0x60]
setle dl
xor ecx, ecx
cmp eax, edx
mov eax, dword [ebp - 0x78]
setge cl
xor edx, edx
cmp ecx, eax
mov eax, dword [ebp - 0x60]
setne dl
sub edx, eax
mov eax, dword [ebp - 0x20]
cmp esi, edx
sbb ecx, ecx
neg ecx
sub ecx, eax
cmp ecx, dword [ebp - 0x20]
jge 0x1003cac1
lea eax, [ebp - 0x1ac]
mov dword [ebp - 0x1ac], 3
push eax
push 0xfe
push 1
push 0x4b9
push 1
push 1
push 0x1549
push 0x620f
mov edx, 0x42cc
mov ecx, 0x4d2e
call fcn.10035b74
add esp, 0x20
jmp 0x1003cb3c
push 0x3e65
push ebx
push 1
push 0x77a1
lea eax, [ebp - 0x60]
mov dl, 1
push eax
push 0x4422
lea eax, [ebp - 0x78]
mov ecx, 0x2d75
push eax
push 0x7dd3
push 0x7fb5
call fcn.10038c56
add esp, 0x24
mov dword [ebp - 0x60], 0xfffffffc
jmp 0x1003cb36
mov dword [ebp - 0x18], ebx
jmp 0x1003cb13
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x500], 0xfffffffa
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], esi
jl 0x1003cb02
mov dword [ebp - 0x78], ebx
jmp 0x1003cb2e
mov eax, dword [ebp - 0x78]
mov dword [ebp + eax*4 - 0x500], 0xfffffff9
inc dword [ebp - 0x78]
cmp dword [ebp - 0x78], esi
jl 0x1003cb1d
inc dword [ebp - 0x60]
cmp dword [ebp - 0x60], 0x14
jle 0x1003cafd
push 0x49ff
push ecx
push 1
push ecx
mov edx, 0xc1d
call fcn.10038daf
add esp, 0x10
mov byte [ebp - 0x9c], bl
mov dword [ebp - 0x9b], 0xc1d30293
lea ecx, [ebp - 0x294]
push 0xa
pop eax
mov word [ebp - 0xdc], ax
mov dword [ebp - 0x18], 0x13dd33a4
mov dword [ebp - 0xf4], 0xf7e813a3
mov dword [ebp - 0xcc], 0xffffffff
push 3
call fcn.10004d6b
push ecx
lea eax, [ebp - 0x478]
mov dword [ebp - 4], 0x26
push eax
push 1
push ecx
push ecx
mov dword [ebp - 0x28], 0x4471
lea ecx, [ebp - 0x294]
call fcn.10035cc5
add esp, 0x14
mov dword [ebp - 0x18], 0x13
cmp dword [ebp - 0x18], 0xfffffff9
jl 0x1003ce2e
mov dword [ebp - 0xf8], 0x24ce5545
mov dword [ebp - 0x2cc], 0xfec4
mov dword [ebp - 0x3c], 0x27e3
cmp dword [ebp - 0x3c], 0x2abb
jle 0x1003cc41
mov esi, ebx
mov dword [ebp - 0x30], ebx
mov dword [ebp - 0x28], esi
mov dword [ebp - 0x20], 0x6f7
mov edi, ebx
mov eax, edi
mov ecx, 0x10081078
or eax, esi
cdq
push edx
push eax
call fcn.10004aca
inc edi
cmp edi, 0x2bb
jl 0x1003cc02
dec esi
dec dword [ebp - 0x20]
jne 0x1003cc00
mov esi, dword [ebp - 0x30]
inc esi
mov dword [ebp - 0x30], esi
cmp esi, 0x5f7c
jl 0x1003cbf6
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_TlsSetValue]
push 4
pop esi
mov edi, 0xffff
mov dword [ebp - 0x10c], 0xf55f5dd
mov byte [ebp - 4], 0x27
cmp dword [ebp - 0x3c], 0x2765
jge 0x1003cc8d
mov edx, str.olkedbur_wbfiv_yhvfjqe
mov ecx, 0x10081078
call fcn.10006f4f
jmp 0x1003cc8d
mov dword [ebp - 4], 0x26
mov dword [ebp - 0x204], ebx
mov eax, dword [ebp - 0xf8]
mov eax, dword [ebp - 0xf8]
mov eax, dword [ebp - 0x18]
imul eax, dword [ebp - 0xf8], 0xfff7934e
push 8
pop ecx
cmp eax, edi
sbb eax, eax
add eax, 0xb
neg eax
sbb eax, eax
inc eax
mov dword [ebp - 0xf4], eax
je 0x1003cda5
mov dword [ebp - 0x128], 0xfda0246c
lea ecx, [ebp - 0x31c]
push esi
call fcn.10004d6b
push ecx
lea eax, [ebp - 0x31c]
mov byte [ebp - 4], 0x29
push eax
mov dword [ebp - 0x268], 0x7212
lea ecx, [ebp - 0x218]
push ebx
mov dword [ebp - 0x1fc], 0xcd58f28d
call fcn.1003a746
pop ecx
pop ecx
lea eax, [ebp - 0x128]
push eax
push 0x7aa7
push 1
push ecx
lea edx, [ebp - 0x31c]
call fcn.10035dae
add esp, 0x14
lea ecx, [ebp - 0xf8]
mov eax, edx
lea edx, [ebp - 0x204]
push 1
push eax
lea eax, [ebp - 0x268]
push eax
lea eax, [ebp - 0x10c]
push eax
push 0x119c
lea eax, [ebp - 0x294]
push eax
lea eax, [ebp - 0x1fc]
push eax
push 0x7cc6
lea eax, [ebp - 0xf4]
push eax
lea eax, [ebp - 0xcc]
push eax
push ebx
push 0x22c
lea eax, [ebp - 0x2cc]
push eax
lea eax, [ebp - 0x128]
push ebx
push eax
call fcn.1003a81f
add esp, 0x3c
mov byte [ebp - 4], 0x26
lea ecx, [ebp - 0x31c]
call fcn.10004dc8
jmp 0x1003ce26
mov eax, dword [ebp - 0x294]
mov dword [ebp - 0x28], 0x93a29add
cmp dword [eax + 8], ebx
jne 0x1003ce1d
mov dword [ebp - 0xf4], ebx
cmp dword [ebp - 0xf4], 0xfffffff6
jne 0x1003cdda
mov eax, dword [ebp - 0xcc]
add eax, 0xffff7480
cmp eax, dword [ebp - 0x28]
jl 0x1003cdda
mov eax, ebx
jmp 0x1003cddd
xor eax, eax
inc eax
cmp eax, ecx
mov eax, dword [ebp - 0xcc]
sbb edx, edx
xor ecx, ecx
neg edx
cmp edx, eax
setl cl
xor edx, edx
mov dword [ebp - 0x10c], ecx
mov ecx, dword [ebp - 0x10c]
mov eax, dword [ebp - 0x294]
add ecx, 0xc267
cmp ecx, dword [eax]
mov eax, dword [ebp - 0xcc]
setne dl
add eax, edx
jne 0x1003ce1d
mov eax, ebx
jmp 0x1003ce20
xor eax, eax
inc eax
mov dword [ebp - 0xcc], eax
dec dword [ebp - 0x18]
jmp 0x1003cbc3
mov dword [ebp - 0x3c], 0x58e7
cmp dword [ebp - 0x3c], 0x592f
jle 0x1003cea0
mov eax, ebx
mov dword [ebp - 0x24], ebx
mov esi, ebx
mov dword [ebp - 0x30], ebx
mov ecx, esi
mov dword [ebp - 0x28], eax
mov esi, eax
mov edi, ebx
shl esi, cl
mov dword [ebp - 0x28], ebx
mov dword [ebp - 0x20], 0x51e1
mov ecx, ebx
mov eax, esi
shl eax, cl
mov ecx, 0x10081078
cdq
push edx
push eax
call fcn.10004aca
add ebx, edi
dec dword [ebp - 0x20]
jne 0x1003ce5d
inc edi
push 0
pop ebx
cmp edi, 0x2f6a
jl 0x1003ce53
mov esi, dword [ebp - 0x30]
mov eax, dword [ebp - 0x24]
inc esi
mov dword [ebp - 0x30], esi
cmp esi, 0x1e2e
jl 0x1003ce48
inc eax
mov dword [ebp - 0x24], eax
cmp eax, 0x53b3
jl 0x1003ce43
mov byte [ebp - 0x8f], bl
mov byte [ebp - 4], 0x2a
cmp dword [ebp - 0x3c], 0x56bb
jge 0x1003cee0
mov edx, str.gldmumiga_ldwfbwhul_tkuxjx_asdpilds_qlxlgdqr_knl_fnfcfx_zlwxcj_rddxscs
mov ecx, 0x10081078
call fcn.10006f4f
jmp 0x1003cee0
push 1
push 0x7a1b
push ebx
push 0x54e4
push 1
lea edx, [ebp - 0x8f]
mov dword [ebp - 4], 0x26
mov ecx, 0x7dc2
call fcn.1003a00d
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x294]
add esp, 0x14
call fcn.10004dc8
push 2
pop edi
mov esi, ebx
mov dword [ebp - 0x28], edi
cmp edi, 5
jae 0x1003d422
push 0x1dea
push 0x9bd
push 0x5706
push 1
push 0x6cbb
push 0x2f97
push 0x326e
push 0x37d5
push 0x7cd2
push ebx
mov dword [ebp - 0xb8], 0x7730f94f
lea ecx, [ebp - 0xb8]
push 0x40a9
xor dl, dl
call fcn.10038384
add esp, 0x2c
mov dword [ebp - 0xb8], 0x16
jmp 0x1003cfb9
mov dword [ebp - 0x20], 0xe3580d4
mov dword [ebp - 0x18], ebx
jmp 0x1003cf9c
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x324], 0xffffffff
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 2
jl 0x1003cf8b
cmp dword [ebp - 0x324], ebx
jne 0x1003cfc2
mov eax, dword [ebp - 0x324]
mov dword [ebp - 0x20], eax
dec dword [ebp - 0xb8]
cmp dword [ebp - 0xb8], 0x15
jne 0x1003cf7f
movzx eax, byte [ebp - 0x9c]
lea eax, [eax*2 + 2]
cmp edi, eax
jne 0x1003d258
mov dword [ebp - 0x74], 4
cmp dword [ebp - 0x74], ebx
je 0x1003d040
mov dword [ebp - 0x28], 0x8b108f82
mov eax, dword [ebp - 0x28]
add eax, 0x56108d2c
je 0x1003d025
mov byte [ebp - 0x31], bl
cmp byte [ebp - 0x31], 0
je 0x1003d046
push 0x618f
push 0x2cf1
push 0x4c97
push ecx
push 1
push ecx
mov edx, 0x206f
mov ecx, 0x7791
call fcn.10038ee9
add esp, 0x18
jmp 0x1003d046
lea eax, [ebp - 0x74]
mov edx, 0x914
push eax
push 1
push ecx
push 0x1f8
call fcn.10037034
add esp, 0x10
jmp 0x1003d046
mov eax, dword [ebp - 0x74]
mov dword [ebp - 0x74], eax
mov dword [ebp - 0x74], 0xf
jmp 0x1003d097
push 1
lea eax, [ebp - 0x91]
mov dword [ebp - 0x270], 0xc17e5c28
push eax
push ecx
mov byte [ebp - 0x91], bl
mov ecx, 0x5b9
call fcn.10038f5e
add esp, 0xc
lea eax, [ebp - 0x270]
xor dl, dl
push eax
push ecx
push ecx
push 0x421f
push ecx
mov ecx, 0x113a
call fcn.10039c1f
add esp, 0x14
dec dword [ebp - 0x74]
cmp dword [ebp - 0x74], 0xffffffe3
jge 0x1003d04f
movzx esi, byte [ebp + edi - 0x9c]
mov dword [ebp - 0x1c], 8
mov dword [ebp - 0x20], 0xd3833037
lea eax, [esi + 1]
mov dword [ebp - 0x30], eax
mov eax, 0xf98c
mov dword [ebp - 0x44c], eax
mov dword [ebp - 0x448], eax
mov dword [ebp - 0x444], eax
mov dword [ebp - 0x440], eax
mov dword [ebp - 0x1c], ebx
jmp 0x1003d187
mov dword [ebp - 0x2c], 0x1449c9fb
xor ecx, ecx
mov dword [ebp - 0x20], 0x3876a47c
mov eax, dword [ebp - 0x2c]
mov dword [ebp - 0x20], eax
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x448], eax
mov eax, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x2c]
cmp eax, 0x6735
mov eax, dword [ebp - 0x2c]
setl cl
xor edx, edx
cmp eax, ecx
mov eax, dword [ebp - 0x2c]
push 1
setge dl
mov ecx, 0x5d91
sub eax, 0xb04800fa
neg eax
push 0x5de1
sbb eax, eax
inc eax
sub eax, edx
mov edx, 0x55d7
neg eax
push 1
sbb eax, eax
inc eax
mov dword [ebp - 0x20], eax
mov eax, dword [ebp - 0x20]
sub eax, dword [ebp - 0x1c]
neg eax
push 0x3546
sbb eax, eax
add eax, 0x9f82e607
mov dword [ebp - 0x2c], eax
lea eax, [ebp - 0x9d]
push 1
push 0x6af4
mov byte [ebp - 0x9d], bl
push eax
call fcn.10038f85
add esp, 0x1c
dec dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 0xffffffe9
jne 0x1003d0de
dec edi
mov dword [ebp - 0x130], 0x2eb90da1
add edi, esi
mov dword [ebp - 0x18], ebx
jmp 0x1003d1b4
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x2d0], 0xfffffff8
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 1
jl 0x1003d1a3
cmp dword [ebp - 0x130], ebx
je 0x1003d240
mov dword [ebp - 0x2d4], 0xfffffff9
mov edx, 0x48f9
push ecx
mov dword [ebp - 0x21c], 0xfffffffd
mov dword [ebp - 0x20c], 0xa5f27a41
push ecx
mov dword [ebp - 0x278], 6
mov cl, 1
mov dword [ebp - 0x214], ebx
call fcn.100390e8
pop ecx
pop ecx
lea eax, [ebp - 0x20c]
push eax
lea eax, [ebp - 0x2d4]
push eax
lea eax, [ebp - 0x214]
push eax
push 0x5fcf
push ecx
lea eax, [ebp - 0x278]
push eax
push 1
push 0x1d75
push ecx
lea edx, [ebp - 0x130]
lea ecx, [ebp - 0x21c]
call fcn.1003822e
add esp, 0x24
jmp 0x1003d250
mov dword [ebp - 0x28], 0xc84b
mov eax, dword [ebp - 0x28]
mov dword [ebp - 0x2d0], eax
mov esi, dword [ebp - 0x30]
jmp 0x1003d41a
movzx edx, byte [ebp + edi - 0x9b]
lea eax, [ebp - 0x9c]
sub eax, esi
movzx eax, byte [eax + edi - 2]
movzx eax, word [ebp + eax*2 - 0xdc]
mov ecx, eax
and eax, edx
or ecx, edx
sub ecx, eax
movzx eax, byte [ebp + edi - 0x9c]
mov word [ebp + eax*2 - 0xdc], cx
mov dword [ebp - 0x2c], 0xfffffff6
mov dword [ebp - 0x2c], 0x18
cmp dword [ebp - 0x2c], 0xffffffff
jl 0x1003d415
mov dword [ebp - 0x1c], 0xe1d925b0
mov dword [ebp - 0x1c], ebx
cmp dword [ebp - 0x1c], 0x12
jne 0x1003d403
mov dword [ebp - 0x18], 0x887cf2e5
mov dword [ebp - 0x18], ebx
cmp dword [ebp - 0x18], 0xfffffffc
jge 0x1003d3fb
mov dword [ebp - 0x24], 0xc2285faa
mov dword [ebp - 0x24], 0x10
cmp dword [ebp - 0x24], 1
jne 0x1003d3f3
mov dword [ebp - 0x3c], 0x7fdb
cmp dword [ebp - 0x3c], 0x8235
jle 0x1003d368
push ebx
push ebx
push 0x1c31
push 0x6b2
push ebx
call dword [sym.imp.USER32.dll_ModifyMenuW]
mov edi, ebx
mov esi, ebx
mov eax, edi
mov dword [ebp - 0x30], 0xc0f
cdq
idiv esi
mov eax, edx
mov dword [ebp - 0x20], eax
cdq
lea ecx, [ebp - 0x5cc]
push edx
push eax
call fcn.10001ab5
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x1003d335
mov eax, dword [eax]
push eax
call fcn.1004c653
pop ecx
push ebx
push 1
lea ecx, [ebp - 0x5cc]
call fcn.100050bb
mov eax, dword [ebp - 0x20]
dec eax
dec dword [ebp - 0x30]
mov dword [ebp - 0x20], eax
jne 0x1003d31d
inc esi
cmp esi, 0x1cfe
jl 0x1003d30c
inc edi
cmp edi, 0x4b64
jl 0x1003d30a
push dword [ebp - 0x218]
movdqa xmm0, xmmword [0x10073750]
lea eax, [ebp - 0x498]
push eax
lea eax, [ebp - 0x4a8]
mov dword [ebp - 0x2a4], ebx
push eax
push ebx
lea ecx, [ebp - 0x2a4]
mov dword [ebp - 0x2a0], ebx
movdqu xmmword [ebp - 0x4a8], xmm0
mov dword [ebp - 0x29c], ebx
call fcn.10033ea1
cmp dword [ebp - 0x3c], 0x7e62
jge 0x1003d3be
push str.zwxem_chf_jey_byh_rrizndayn_pqixbffr_abhfhl
call fcn.1004c653
pop ecx
push 0x70c4
push ecx
lea eax, [ebp - 0x2a4]
mov dword [ebp - 4], 0x2c
push 1
push eax
call fcn.100391b2
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x2a4]
add esp, 0x10
call fcn.10004dc8
dec dword [ebp - 0x24]
jmp 0x1003d2db
dec dword [ebp - 0x18]
jmp 0x1003d2c3
inc dword [ebp - 0x1c]
jmp 0x1003d2af
push 1
push ecx
call fcn.1003a323
dec dword [ebp - 0x2c]
pop ecx
pop ecx
jmp 0x1003d29b
mov edi, dword [ebp - 0x28]
mov esi, ebx
add edi, 2
jmp 0x1003cf1d
push 1
lea ecx, [ebp - 0x19c]
call fcn.10004d6b
mov dword [ebp - 4], 0x2f
lea eax, [ebp - 0x44]
push ebx
push eax
mov dword [ebp - 0x28], 0xf5cbf793
lea eax, [ebp - 0x19c]
mov dword [ebp - 0x28], 1
mov ecx, 0x15bf
mov dword [ebp - 0x20], 0xffffffff
mov dword [ebp - 0x28], 0xcd1ac8c6
push eax
call fcn.10036ebe
add esp, 0xc
mov dword [ebp - 0x44], ebx
jmp 0x1003d47d
mov eax, dword [ebp - 0x44]
mov dword [ebp + eax*4 - 0x124], ebx
inc dword [ebp - 0x44]
cmp dword [ebp - 0x44], 2
jl 0x1003d470
mov dword [ebp - 0x44], ebx
jmp 0x1003d499
mov eax, dword [ebp - 0x44]
mov dword [ebp + eax*4 - 0x224], 6
inc dword [ebp - 0x44]
cmp dword [ebp - 0x44], 1
jl 0x1003d488
mov dword [ebp - 0x44], ebx
jmp 0x1003d4b5
mov eax, dword [ebp - 0x44]
mov dword [ebp + eax*4 - 0x4c0], 0xbab72157
inc dword [ebp - 0x44]
cmp dword [ebp - 0x44], 3
jl 0x1003d4a4
mov eax, dword [ebp - 0x19c]
cmp dword [eax], ebx
jne 0x1003d50c
mov eax, dword [ebp - 0x120]
xor ecx, ecx
mov eax, dword [ebp - 0x120]
mov eax, dword [ebp - 0x120]
mov eax, dword [ebp - 0x120]
mov eax, dword [ebp - 0x19c]
cmp dword [eax], ebx
sete cl
xor eax, eax
cmp ecx, 0xe3f3
mov ecx, 0xffff
setl al
cmp ecx, eax
sbb eax, eax
neg eax
mov dword [ebp - 0x224], eax
jne 0x1003d50c
mov ecx, ebx
jmp 0x1003d50f
xor ecx, ecx
inc ecx
mov eax, dword [ebp - 0x120]
xor edx, edx
cmp ecx, eax
mov eax, dword [ebp - 0x120]
setge dl
xor ecx, ecx
cmp edx, eax
mov eax, dword [ebp - 0x19c]
setle cl
imul ecx, dword [eax]
mov dword [ebp - 0x28], ecx
mov eax, dword [ebp - 0x28]
mov dword [ebp - 0x28], eax
mov ecx, dword [ebp - 0x28]
mov eax, dword [ebp - 0x19c]
imul ecx, dword [eax]
test ecx, ecx
jne 0x1003d554
cmp dword [ebp - 0x20], ebx
jne 0x1003d554
mov eax, ebx
jmp 0x1003d557
xor eax, eax
inc eax
mov dword [ebp - 0x4b8], eax
mov dword [ebp - 0x28], eax
lea eax, [ebp - 0x9f]
push ebx
push eax
mov byte [ebp - 0x9f], bl
push ecx
call fcn.10036f9b
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x19c]
add esp, 0xc
call fcn.10004dc8
mov dword [ebp - 0x24], 0x4cdd
cmp dword [ebp - 0x24], 0x4def
jle 0x1003d5f2
call dword [sym.imp.USER32.dll_GetCapture]
mov dword [ebp - 0x3c], ebx
mov eax, ebx
mov dword [ebp - 0x30], 0x893
mov dword [ebp - 0x20], eax
mov esi, eax
mov dword [ebp - 0x28], 0x64f0
mov edi, ebx
mov eax, edi
mov ecx, 0x10081078
or eax, esi
cdq
push edx
push eax
call fcn.10004aca
inc edi
cmp edi, 0x1b70
jl 0x1003d5b6
inc esi
dec dword [ebp - 0x28]
jne 0x1003d5b4
mov eax, dword [ebp - 0x20]
mov esi, dword [ebp - 0x3c]
add eax, esi
dec dword [ebp - 0x30]
mov dword [ebp - 0x20], eax
jne 0x1003d5ab
inc esi
mov dword [ebp - 0x3c], esi
cmp esi, 0x62f6
jl 0x1003d59f
xor eax, eax
mov dword [ebp - 4], 0x30
cmp dword [ebp - 0x24], 0x4b57
mov word [ebp - 0xda], ax
jge 0x1003d61a
mov edx, str.gpllyeymw_pabt_oqbqlglu_wujyjtpy_uyriqp_vwywpcx_jscx_jvfnvk_esqjm
mov ecx, 0x10081078
call fcn.10006f4f
or dword [ebp - 4], 0xffffffff
push 4
pop edi
push 5
pop esi
push ecx
push 0x4187
push 1
push 0xb3a
push 0x9ac
sub esp, 0xc
mov dl, 1
mov cl, dl
call fcn.10039222
xor eax, eax
mov dword [ebp - 0x3c8], 7
add esp, 0x20
mov word [ebp - 0x3dc], ax
lea eax, [ebp - 0xdc]
mov dword [ebp - 0x3cc], ebx
lea ecx, [ebp - 0x3dc]
push eax
call fcn.1001ddd6
cmp dword [ebp - 0x3c8], 8
lea eax, [ebp - 0x3dc]
push ebx
cmovae eax, dword [ebp - 0x3dc]
lea ecx, [ebp - 0x3dc]
push 1
movzx eax, word [eax]
mov dword [ebp - 0x210], eax
call fcn.1000522d
xor ecx, ecx
inc ecx
mov dword [ebp - 0x4c], ecx
mov dword [ebp - 0x100], 0x13fe662d
mov dword [ebp - 0x138], 0x64a11600
mov dword [ebp - 0x88], esi
mov dword [ebp - 0x18], ebx
jmp 0x1003d6f6
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x118], 0x6d64
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 2
jl 0x1003d6e5
lea eax, [ebp - 0x100]
mov edx, 0x7244
push eax
push ecx
push ecx
lea eax, [ebp - 0x4c]
push eax
lea eax, [ebp - 0x138]
push eax
push ecx
push ecx
lea ecx, [ebp - 0x88]
call fcn.100360d9
add esp, 0x1c
mov dword [ebp - 0x88], ebx
jmp 0x1003d869
lea eax, [ebp - 0x7c]
mov dword [ebp - 0x7c], 0xa9f4f9a0
push eax
push 1
push ecx
lea eax, [ebp - 0x138]
mov dword [ebp - 0x30], 0xffffffff
push eax
push ecx
mov dword [ebp - 0x28], esi
lea edx, [ebp - 0x100]
mov ecx, 0x77fb
call fcn.100393f8
add esp, 0x14
mov dword [ebp - 0x4c], ebx
jmp 0x1003d859
mov dword [ebp - 0x20], esi
mov dword [ebp - 0x28], 0xc01
mov dword [ebp - 0x7c], ebx
jmp 0x1003d84c
mov dword [ebp - 0x28], 1
lea ecx, [ebp - 0x2f8]
push edi
call fcn.10004d6b
push 1
lea eax, [ebp - 0x2f8]
mov dword [ebp - 4], 0x32
push eax
push ecx
lea eax, [ebp - 0x474]
mov edx, 0x1b46
push 0x581d
push eax
call fcn.100394ee
mov eax, dword [ebp - 0x4c]
xor ecx, ecx
add esp, 0x14
mov eax, dword [ebp + eax*4 - 0x118]
mov eax, dword [ebp - 0x4c]
mov eax, dword [ebp + eax*4 - 0x118]
mov eax, dword [ebp - 0x4c]
mov eax, dword [ebp + eax*4 - 0x118]
mov eax, dword [ebp - 0x4c]
mov eax, dword [ebp + eax*4 - 0x118]
mov eax, dword [ebp - 0x20]
add eax, dword [ebp - 0x7c]
mov dword [ebp - 0x28], eax
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x88]
mov eax, dword [ebp - 0x100]
mov eax, dword [ebp - 0x4c]
mov eax, dword [ebp + eax*4 - 0x118]
mov eax, dword [ebp - 0x7c]
mov eax, dword [ebp - 0x4c]
mov eax, dword [ebp + eax*4 - 0x118]
test eax, eax
mov eax, dword [ebp - 0x30]
setle cl
imul eax, ecx
mov dword [ebp - 0x28], eax
mov ecx, dword [ebp - 0x28]
mov eax, dword [ebp - 0x2f8]
mov dword [eax + 4], ecx
mov dword [ebp - 0x28], ecx
lea ecx, [ebp - 0x2f8]
mov eax, dword [ebp - 0x4c]
or dword [ebp - 4], 0xffffffff
cmp dword [ebp + eax*4 - 0x118], ebx
call fcn.10004dc8
inc dword [ebp - 0x7c]
cmp dword [ebp - 0x7c], 1
jle 0x1003d77d
inc dword [ebp - 0x4c]
cmp dword [ebp - 0x4c], 1
jle 0x1003d76b
dec dword [ebp - 0x88]
cmp dword [ebp - 0x88], 0xffffffff
jge 0x1003d730
mov esi, ebx
mov dword [ebp - 0x2c], ebx
cmp esi, 2
jae 0x1003dbc4
push 2
lea ecx, [ebp - 0x2b4]
call fcn.10004d6b
mov dword [ebp - 4], 0x33
lea ecx, [ebp - 0x340]
mov dword [ebp - 0x40], 6
push edi
call fcn.10004d6b
push 0x69a3
push ecx
push ecx
lea eax, [ebp - 0x2b4]
mov byte [ebp - 4], 0x34
push eax
push ecx
mov dl, 1
lea ecx, [ebp - 0x288]
call fcn.10039c1f
add esp, 0x14
lea eax, [ebp - 0x340]
lea edx, [ebp - 0x288]
mov ecx, 0x603f
push 0x9a6
push 0xbe5
push 1
push 1
push 0x6d08
push eax
push 1
push 0x444
call fcn.1003662b
add esp, 0x20
mov dword [ebp - 0x40], ebx
cmp dword [ebp - 0x40], 1
jg 0x1003da5f
mov dword [ebp - 0x1c], 0x24f84b81
mov dword [ebp - 0x18], ebx
jmp 0x1003d92c
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x22c], 0xf8716b5b
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 1
jl 0x1003d91b
mov dword [ebp - 0x1c], ebx
cmp dword [ebp - 0x1c], 1
jg 0x1003d9ee
push 4
mov dword [ebp - 0x40], 1
pop edi
cmp dword [ebp - 0x40], ebx
jl 0x1003db94
push ebx
push 0xc31
push ecx
mov dword [ebp - 0x15c], 0xe215169f
lea ecx, [ebp - 0x15c]
mov dword [ebp - 0x2c8], 5
call fcn.10038f5e
mov dword [ebp - 0x28], 0x6cc8
add esp, 0xc
cmp dword [ebp - 0x28], 0x6dd8
jle 0x1003db13
push ebx
push ebx
call dword [sym.imp.ADVAPI32.dll_GetUserNameA]
mov edx, ebx
mov dword [ebp - 0x24], ebx
mov eax, ebx
mov dword [ebp - 0x1c], ebx
mov edi, ebx
mov esi, eax
mov dword [ebp - 0x18], ebx
mov ecx, edi
sar esi, cl
xor esi, edx
mov eax, esi
mov ecx, 0x10081078
or eax, dword [ebp - 0x18]
cdq
push edx
push eax
call fcn.10004aca
mov eax, dword [ebp - 0x18]
inc eax
mov dword [ebp - 0x18], eax
cmp eax, 0x58c6
jl 0x1003daca
push 0x767d
push 0x1fad
lea eax, [ebp - 0x40]
push eax
lea eax, [ebp - 0x2c8]
push eax
lea eax, [ebp - 0x340]
push eax
lea eax, [ebp - 0x2b4]
push eax
push 1
push ecx
push ecx
lea ecx, [ebp - 0x15c]
call fcn.10039c8f
add esp, 0x24
mov byte [ebp - 4], 0x37
cmp dword [ebp - 0x28], 0x69c0
jge 0x1003db85
lea ecx, [ebp - 0x340]
call fcn.10004dc8
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x2b4]
call fcn.10004dc8
mov esi, dword [ebp - 0x2c]
xor eax, eax
mov word [ebp + esi*2 - 0xdc], ax
inc esi
mov dword [ebp - 0x2c], esi
jmp 0x1003d87b
push ecx
push 0x13da
push ecx
mov dl, 1
mov dword [ebp - 0x234], 0x62d5e48d
lea ecx, [ebp - 0x234]
call fcn.10039faa
mov eax, dword [ebp - 0xfc]
add esp, 0xc
shr eax, 1
mov dword [ebp - 0x3c], eax
mov eax, dword [ebp - 0xd4]
inc eax
cmp eax, dword [ebp - 0x3c]
jae 0x1003b596
xor eax, eax
mov dword [ebp - 0x1c], 0xfffffff9
inc eax
mov dword [ebp - 0x28], 0x568d526d
mov dword [ebp - 0x24], 0x198ab79
lea ecx, [ebp - 0x310]
mov dword [ebp - 0x18], eax
push eax
call fcn.10004d6b
push 1
lea eax, [ebp - 0x310]
mov dword [ebp - 4], 0x39
push eax
push 1
push 0x6adc
mov dword [ebp - 0x20], 0x1cc545e2
lea ecx, [ebp - 0xac]
mov dword [ebp - 0x30], 0xfffffff6
mov edx, 0x38b
push 1
call fcn.1003a00d
add esp, 0x14
mov dword [ebp - 0xac], ebx
jmp 0x1003dc80
mov eax, dword [ebp - 0xac]
mov dword [ebp + eax*4 - 0x298], 0x452e
inc dword [ebp - 0xac]
cmp dword [ebp - 0xac], 1
jl 0x1003dc69
cmp dword [ebp - 0x1c], ebx
jne 0x1003dc97