Function at 0x10031fc7
Capabilities:
Contain obfuscated stackstrings
Extract resource via kernel32 functions
Parse pe header
Resolve function by parsing pe exports
Suspend thread

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x100580e5
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
push ecx
sub esp, 0x49c
push ebx
push esi
push edi
mov dword [ebp - 0x10], esp
cmp dword [ebp + 0x10], 0
jbe 0x10032188
movzx eax, byte [ebp + 0x14]
test eax, eax
je 0x10032188
mov dword [ebp - 0x88], 0xfffffffe
mov dword [ebp - 0xec], 0
jmp 0x10032025
mov eax, dword [ebp - 0xec]
inc eax
mov dword [ebp - 0xec], eax
cmp dword [ebp - 0xec], 3
jge 0x10032041
mov eax, dword [ebp - 0xec]
mov dword [ebp + eax*4 - 0x3d8], 0x4e1a
jmp 0x10032018
mov dword [ebp - 0x88], 2
jmp 0x1003205a
mov eax, dword [ebp - 0x88]
dec eax
mov dword [ebp - 0x88], eax
cmp dword [ebp - 0x88], 0
jl 0x10032174
mov dword [ebp - 0x4c], 0
mov dword [ebp - 0x40], 0xcb8ce3e
mov dword [ebp - 0xa0], 0xfe012d2c
mov dword [ebp - 0x4c], 0
jmp 0x1003208f
mov eax, dword [ebp - 0x4c]
inc eax
mov dword [ebp - 0x4c], eax
cmp dword [ebp - 0x4c], 2
jg 0x100320e7
mov dword [ebp - 0x158], 0
jmp 0x100320ae
mov eax, dword [ebp - 0x158]
inc eax
mov dword [ebp - 0x158], eax
cmp dword [ebp - 0x158], 3
jge 0x100320ca
mov eax, dword [ebp - 0x158]
mov dword [ebp + eax*4 - 0x378], 0xfffffff8
jmp 0x100320a1
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x378]
inc eax
push 4
pop ecx
shl ecx, 0
mov dword [ebp + ecx - 0x378], eax
jmp 0x10032088
mov dword [ebp - 0x4c], 0
jmp 0x100320f7
mov eax, dword [ebp - 0x4c]
inc eax
mov dword [ebp - 0x4c], eax
cmp dword [ebp - 0x4c], 2
jg 0x10032121
mov dword [ebp - 0x40], 2
jmp 0x1003210d
mov eax, dword [ebp - 0x40]
dec eax
mov dword [ebp - 0x40], eax
cmp dword [ebp - 0x40], 0
jl 0x1003211f
mov dword [ebp - 0xa0], 0x15d0
jmp 0x10032106
jmp 0x100320f0
mov dword [ebp - 0x40], 2
jmp 0x10032131
mov eax, dword [ebp - 0x40]
dec eax
mov dword [ebp - 0x40], eax
cmp dword [ebp - 0x40], 0
jl 0x1003216f
mov dword [ebp - 0xa0], 0
jmp 0x10032150
mov eax, dword [ebp - 0xa0]
inc eax
mov dword [ebp - 0xa0], eax
cmp dword [ebp - 0xa0], 2
jg 0x1003216d
mov eax, dword [ebp - 0x88]
cmp dword [ebp + eax*4 - 0x3d8], 0
je 0x1003216b
jmp 0x1003216d
jmp 0x10032143
jmp 0x1003212a
jmp 0x1003204d
movzx eax, word [ebp + 0x10]
push eax
push dword [ebp + 8]
call fcn.1002ae00
pop ecx
pop ecx
jmp 0x100341b0
mov dword [ebp - 0x160], 0x4b28ed4a
mov dword [ebp - 0x38], 0xc58f5537
mov dword [ebp - 0x98], 0x37fc
mov dword [ebp - 0x204], 0xa93f0451
mov dword [ebp - 0x1b4], 1
mov dword [ebp - 0x35c], 6
mov dword [ebp - 0x358], 6
mov dword [ebp - 0x354], 6
mov dword [ebp - 0x350], 6
mov dword [ebp - 0x14], 0
jmp 0x100321ef
mov eax, dword [ebp - 0x14]
inc eax
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 3
jge 0x10032205
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x318], 0xffff
jmp 0x100321e8
mov dword [ebp - 0x14], 0
jmp 0x10032215
mov eax, dword [ebp - 0x14]
inc eax
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 4
jge 0x1003222b
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x3cc], 0xfffffff6
jmp 0x1003220e
mov dword [ebp - 0x14], 0
jmp 0x1003223b
mov eax, dword [ebp - 0x14]
inc eax
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 3
jge 0x10032251
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x3e4], 0xfffffff7
jmp 0x10032234
mov eax, 0x5c96dd1e
test eax, eax
je 0x1003247b
mov eax, dword [ebp - 0x160]
mov dword [ebp - 0x394], eax
mov eax, dword [ebp - 0x38]
add eax, dword [ebp - 0x38]
cmp eax, 0x809b4af7
jne 0x1003228a
push 0xfffffffffffffff9
pop eax
test eax, eax
je 0x1003228a
mov dword [ebp - 0x1e4], 1
jmp 0x10032291
and dword [ebp - 0x1e4], 0
mov eax, dword [ebp - 0x38]
add eax, dword [ebp - 0x1e4]
add eax, dword [ebp - 0x160]
je 0x100322b7
cmp dword [ebp - 0x160], 0
je 0x100322b7
mov dword [ebp - 0x230], 1
jmp 0x100322be
and dword [ebp - 0x230], 0
mov eax, dword [ebp - 0x98]
imul eax, dword [ebp - 0x230]
imul eax, dword [ebp - 0x98]
imul eax, dword [ebp - 0x98]
cmp eax, 0xa1172167
jne 0x100322f2
cmp dword [ebp - 0x38], 0
je 0x100322f2
mov dword [ebp - 0x238], 1
jmp 0x100322f9
and dword [ebp - 0x238], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x318]
mov eax, 0xf1fa6f6
neg eax
cmp eax, 9
jge 0x1003231e
mov dword [ebp - 0x240], 1
jmp 0x10032325
and dword [ebp - 0x240], 0
cmp dword [ebp - 0x240], 0x779c
jg 0x1003233d
mov dword [ebp - 0x16c], 1
jmp 0x10032344
and dword [ebp - 0x16c], 0
push 4
pop eax
imul eax, eax, 3
mov ecx, dword [ebp - 0x16c]
mov dword [ebp + eax - 0x3cc], ecx
mov eax, dword [ebp - 0x160]
cmp dword [ebp - 0x16c], eax
jne 0x10032371
mov dword [ebp - 0x258], 1
jmp 0x10032378
and dword [ebp - 0x258], 0
mov eax, dword [ebp - 0x98]
cmp dword [ebp - 0x258], eax
jl 0x10032392
mov dword [ebp - 0x1a4], 1
jmp 0x10032399
and dword [ebp - 0x1a4], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x318]
cmp dword [ebp - 0x1a4], eax
jl 0x100323ba
mov dword [ebp - 0x228], 1
jmp 0x100323c1
and dword [ebp - 0x228], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x318]
cmp dword [ebp - 0x228], eax
jl 0x100323e2
mov dword [ebp - 0x22c], 1
jmp 0x100323e9
and dword [ebp - 0x22c], 0
mov eax, dword [ebp - 0x98]
cmp dword [ebp - 0x22c], eax
jge 0x10032403
mov dword [ebp - 0x1ac], 1
jmp 0x1003240a
and dword [ebp - 0x1ac], 0
cmp dword [ebp - 0x1ac], 0xd65121ac
jb 0x10032424
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x318], 0
mov eax, dword [ebp - 0x38]
mov dword [ebp - 0x204], eax
mov eax, dword [ebp - 0x204]
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x3e4], eax
mov dword [ebp - 0x1b4], 1
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x1b4]
cmp ecx, dword [ebp + eax - 0x318]
jl 0x1003246f
push 4
pop eax
imul eax, eax, 3
cmp dword [ebp + eax - 0x3cc], 0
je 0x1003247b
mov dword [ebp - 0x244], 1
jmp 0x10032482
and dword [ebp - 0x244], 0
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x244]
mov dword [ebp + eax - 0x35c], ecx
mov dword [ebp - 0x38], 4
jmp 0x100324a5
mov eax, dword [ebp - 0x38]
dec eax
mov dword [ebp - 0x38], eax
cmp dword [ebp - 0x38], 0xfffffff9
jg 0x100324d3
mov dword [ebp - 0x2a0], 0
push 4
pop eax
shl eax, 0
mov dword [ebp + eax - 0x35c], 0xfffffffe
cmp dword [ebp - 0x2a0], 0
je 0x100324d1
jmp 0x1003249e
jmp 0x1003249e
mov dword [ebp - 0x1bc], 0x53b1
mov dword [ebp - 0x29c], str.nwgwiphi_bnevnwync_fjdpva_dgaqypep
cmp dword [ebp - 0x1bc], 0x53fb
jle 0x100325d7
push 0
call dword [sym.imp.KERNEL32.dll_EncodePointer]
and dword [ebp - 0x168], 0
jmp 0x10032515
mov eax, dword [ebp - 0x168]
inc eax
mov dword [ebp - 0x168], eax
cmp dword [ebp - 0x168], 0xf5f
jge 0x100325d7
and dword [ebp - 0x12c], 0
jmp 0x1003253b
mov eax, dword [ebp - 0x12c]
inc eax
mov dword [ebp - 0x12c], eax
cmp dword [ebp - 0x12c], 0x2e8f
jge 0x100325d2
and dword [ebp - 0xe4], 0
jmp 0x10032561
mov eax, dword [ebp - 0xe4]
inc eax
mov dword [ebp - 0xe4], eax
cmp dword [ebp - 0xe4], 0x4bfa
jge 0x100325cd
mov eax, dword [ebp - 0x168]
cdq
idiv dword [ebp - 0x12c]
or edx, dword [ebp - 0xe4]
mov eax, edx
cdq
mov dword [ebp - 0x2a8], eax
mov dword [ebp - 0x2a4], edx
push dword [ebp - 0x2a4]
push dword [ebp - 0x2a8]
lea ecx, [ebp - 0x464]
call fcn.10002407
pop ecx
pop ecx
mov dword [ebp - 0x294], eax
mov ecx, dword [ebp - 0x294]
call fcn.1000e139
push eax
call fcn.10039f03
pop ecx
lea ecx, [ebp - 0x464]
call fcn.1000e12f
jmp 0x10032554
jmp 0x1003252e
jmp 0x10032508
and dword [ebp - 4], 0
cmp dword [ebp - 0x1bc], 0x5306
jge 0x100325f3
push dword [ebp - 0x29c]
call fcn.10039f03
pop ecx
jmp 0x1003260f
or dword [ebp - 4], 0xffffffff
jmp 0x10032619
mov dword [ebp - 0x54], 4
mov dword [ebp - 0x13c], 0
jmp 0x10032639
mov eax, dword [ebp - 0x13c]
inc eax
mov dword [ebp - 0x13c], eax
cmp dword [ebp - 0x13c], 3
jge 0x10032655
mov eax, dword [ebp - 0x13c]
mov dword [ebp + eax*4 - 0x344], 0xfffe
jmp 0x1003262c
mov dword [ebp - 0x54], 0
jmp 0x10032665
mov eax, dword [ebp - 0x54]
inc eax
mov dword [ebp - 0x54], eax
cmp dword [ebp - 0x54], 2
jg 0x10032701
mov dword [ebp - 0x300], 0xffffffff
mov eax, dword [ebp - 0x54]
push 4
pop ecx
shl ecx, 0
imul ecx, dword [ebp + ecx - 0x344], 0
cmp ecx, dword [ebp + eax*4 - 0x344]
jg 0x1003269f
mov dword [ebp - 0x20c], 1
jmp 0x100326a6
and dword [ebp - 0x20c], 0
mov eax, dword [ebp - 0x54]
mov eax, dword [ebp + eax*4 - 0x344]
cmp eax, dword [ebp - 0x20c]
jne 0x100326c4
mov dword [ebp - 0x1c4], 1
jmp 0x100326cb
and dword [ebp - 0x1c4], 0
mov eax, dword [ebp - 0x54]
mov eax, dword [ebp + eax*4 - 0x344]
cmp dword [ebp - 0x1c4], eax
je 0x100326e9
mov dword [ebp - 0x234], 1
jmp 0x100326f0
and dword [ebp - 0x234], 0
mov eax, dword [ebp - 0x234]
mov dword [ebp - 0x300], eax
jmp 0x1003265e
cmp dword [ebp + 0x10], 0
jne 0x100332e5
mov dword [ebp - 0xdc], 0
jmp 0x10032724
mov eax, dword [ebp - 0xdc]
inc eax
mov dword [ebp - 0xdc], eax
cmp dword [ebp - 0xdc], 1
jge 0x10032740
mov eax, dword [ebp - 0xdc]
mov dword [ebp + eax*4 - 0x154], 0x831713b9
jmp 0x10032717
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0x154], 0xffffffe3
jmp 0x1003276e
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x154]
inc eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x154], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x154], 0x1d
jg 0x100327e3
mov dword [ebp - 0x38c], 0x83846275
mov dword [ebp - 0x39c], 0xfffffff8
mov dword [ebp - 0x1cc], 0xffffffff
mov dword [ebp - 0xf4], 0
jmp 0x100327b5
mov eax, dword [ebp - 0xf4]
inc eax
mov dword [ebp - 0xf4], eax
cmp dword [ebp - 0xf4], 1
jge 0x100327d1
mov eax, dword [ebp - 0xf4]
mov dword [ebp + eax*4 - 0x380], 1
jmp 0x100327a8
mov eax, dword [ebp - 0x1cc]
dec eax
mov dword [ebp - 0x1cc], eax
jmp 0x10032753
mov edx, dword [ebp + 8]
mov ecx, dword [ebp + 0xc]
call fcn.1002629e
mov dword [ebp - 0xf0], eax
mov dword [ebp - 0x84], 0xffffffff
mov dword [ebp - 0x328], 0x440874b2
mov dword [ebp - 0x30c], 0x741311e2
mov dword [ebp - 0x34], 0
jmp 0x10032822
mov eax, dword [ebp - 0x34]
inc eax
mov dword [ebp - 0x34], eax
cmp dword [ebp - 0x34], 2
jge 0x10032838
mov eax, dword [ebp - 0x34]
mov dword [ebp + eax*4 - 0x34c], 2
jmp 0x1003281b
mov dword [ebp - 0x34], 0
jmp 0x10032848
mov eax, dword [ebp - 0x34]
inc eax
mov dword [ebp - 0x34], eax
cmp dword [ebp - 0x34], 4
jge 0x1003285e
mov eax, dword [ebp - 0x34]
mov dword [ebp + eax*4 - 0x44c], 0xab227d3
jmp 0x10032841
mov dword [ebp - 0x19c], 0x1c28
mov dword [ebp - 0x278], str.qdpi_nlb_zomfkqanh_jgd_hjd_xdpdejsp_fdi_jsxjbfdxu_onhy_pwmcu_yosflgxi_ukh_ampog_lgialguax
cmp dword [ebp - 0x19c], 0x1cc2
jle 0x10032985
push 0x4e1
push 0
push 0
push 0
push 0
push 0x1285
push 0xd67
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_ScrollWindowEx]
and dword [ebp - 0x144], 0
jmp 0x100328bc
mov eax, dword [ebp - 0x144]
inc eax
mov dword [ebp - 0x144], eax
cmp dword [ebp - 0x144], 0x11e0
jge 0x10032985
and dword [ebp - 0xfc], 0
jmp 0x100328e2
mov eax, dword [ebp - 0xfc]
inc eax
mov dword [ebp - 0xfc], eax
cmp dword [ebp - 0xfc], 0x1c12
jge 0x10032980
and dword [ebp - 0x164], 0
jmp 0x10032908
mov eax, dword [ebp - 0x164]
inc eax
mov dword [ebp - 0x164], eax
cmp dword [ebp - 0x164], 0xad8
jge 0x1003297b
and dword [ebp - 0x104], 0
jmp 0x1003292a
mov eax, dword [ebp - 0x104]
inc eax
mov dword [ebp - 0x104], eax
cmp dword [ebp - 0x104], 0x4522
jge 0x10032979
mov eax, dword [ebp - 0x144]
mov ecx, dword [ebp - 0xfc]
shl eax, cl
mov ecx, dword [ebp - 0x164]
shl eax, cl
mov ecx, dword [ebp - 0x104]
sar eax, cl
cdq
mov dword [ebp - 0x2b4], eax
mov dword [ebp - 0x2b0], edx
push dword [ebp - 0x2b0]
push dword [ebp - 0x2b4]
mov ecx, 0x10070b88
call fcn.1000e159
jmp 0x1003291d
jmp 0x100328fb
jmp 0x100328d5
jmp 0x100328af
cmp dword [ebp - 0x84], 0
je 0x10032a69
mov eax, dword [ebp - 0x84]
mov dword [ebp - 0x214], eax
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x214]
mov dword [ebp + eax - 0x34c], ecx
mov eax, dword [ebp - 0x84]
cmp eax, dword [ebp - 0x214]
jge 0x100329cb
mov dword [ebp - 0x308], 1
jmp 0x100329d2
and dword [ebp - 0x308], 0
mov eax, dword [ebp - 0x328]
mov dword [ebp - 0x388], eax
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x34c]
mov dword [ebp - 0x1d4], eax
push 4
pop eax
imul eax, eax, 3
mov ecx, dword [ebp - 0x1d4]
mov dword [ebp + eax - 0x44c], ecx
mov eax, dword [ebp - 0x84]
cmp eax, dword [ebp - 0x1d4]
jne 0x10032a1e
mov dword [ebp - 0x25c], 1
jmp 0x10032a25
and dword [ebp - 0x25c], 0
mov eax, dword [ebp - 0x84]
cmp dword [ebp - 0x25c], eax
jle 0x10032a48
mov eax, 0x4b541145
test eax, eax
je 0x10032a48
mov dword [ebp - 0x1dc], 1
jmp 0x10032a4f
and dword [ebp - 0x1dc], 0
imul eax, dword [ebp - 0x1dc], 0x1438
test eax, eax
jg 0x10032a69
mov dword [ebp - 0x21c], 1
jmp 0x10032a70
and dword [ebp - 0x21c], 0
mov eax, dword [ebp - 0x21c]
sub eax, 0xffff
sub eax, dword [ebp - 0x84]
mov dword [ebp - 0x30c], eax
mov dword [ebp - 4], 2
cmp dword [ebp - 0x19c], 0x1900
jge 0x10032aaa
mov edx, dword [ebp - 0x278]
mov ecx, 0x10070b88
call fcn.10010f71
jmp 0x10032ac6
or dword [ebp - 4], 0xffffffff
jmp 0x10032ad0
cmp dword [0x10070f8c], 0
jne 0x100332b3
mov dword [ebp - 0x288], 0
mov dword [ebp - 0x18], 0
jmp 0x10032af7
mov eax, dword [ebp - 0x18]
inc eax
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 3
jge 0x10032b0d
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x250], 0xb110c93b
jmp 0x10032af0
mov dword [ebp - 0x18], 0
jmp 0x10032b1d
mov eax, dword [ebp - 0x18]
inc eax
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 2
jge 0x10032b33
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x364], 0x63e3
jmp 0x10032b16
mov dword [ebp - 0x18], 0
jmp 0x10032b43
mov eax, dword [ebp - 0x18]
inc eax
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 1
jge 0x10032b59
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x280], 0xce008fb0
jmp 0x10032b3c
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0x250], 0
jmp 0x10032b87
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x250]
dec eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x250], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x250], 0xfffffff4
jle 0x10032d71
mov dword [ebp - 0x28c], 0x2eda8ed4
mov dword [ebp - 0x2ec], 0xffffffff
mov dword [ebp - 0x170], 2
mov dword [ebp - 0x128], 0
jmp 0x10032bd2
mov eax, dword [ebp - 0x128]
inc eax
mov dword [ebp - 0x128], eax
cmp dword [ebp - 0x128], 1
jge 0x10032bee
mov eax, dword [ebp - 0x128]
mov dword [ebp + eax*4 - 0x1fc], 0xda18461e
jmp 0x10032bc5
mov eax, dword [ebp - 0x170]
dec eax
mov dword [ebp - 0x170], eax
mov eax, dword [ebp - 0x170]
cmp eax, dword [ebp - 0x28c]
jg 0x10032c15
mov dword [ebp - 0x23c], 1
jmp 0x10032c1c
and dword [ebp - 0x23c], 0
cmp dword [ebp - 0x2ec], 0x189d9e62
jg 0x10032c34
mov dword [ebp - 0x178], 1
jmp 0x10032c3b
and dword [ebp - 0x178], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x178]
mov dword [ebp + eax - 0x280], ecx
mov eax, dword [ebp - 0x23c]
cmp eax, dword [ebp - 0x178]
jne 0x10032c68
mov dword [ebp - 0x1ec], 1
jmp 0x10032c6f
and dword [ebp - 0x1ec], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x250]
cmp eax, dword [ebp - 0x1ec]
jl 0x10032c90
mov dword [ebp - 0x224], 1
jmp 0x10032c97
and dword [ebp - 0x224], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x250]
cmp dword [ebp - 0x224], eax
jl 0x10032cb8
mov dword [ebp - 0x2e8], 1
jmp 0x10032cbf
and dword [ebp - 0x2e8], 0
mov eax, dword [ebp - 0x288]
mov dword [ebp - 0x36c], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x250]
mov dword [ebp - 0x3a0], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x1fc], 0
jne 0x10032cf7
mov eax, 0x5b45
test eax, eax
je 0x10032d0c
mov eax, 0xefc16765
test eax, eax
je 0x10032d0c
mov dword [ebp - 0x1f4], 1
jmp 0x10032d13
and dword [ebp - 0x1f4], 0
cmp dword [ebp - 0x1f4], 1
jne 0x10032d28
mov dword [ebp - 0x254], 1
jmp 0x10032d2f
and dword [ebp - 0x254], 0
push 4
pop eax
imul eax, eax, 0
push 4
pop ecx
shl ecx, 0
mov ecx, dword [ebp + ecx - 0x364]
imul ecx, dword [ebp - 0x254]
push 4
pop edx
shl edx, 0
mov edx, dword [ebp + edx - 0x364]
sub edx, ecx
sub edx, dword [ebp + eax - 0x250]
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0x1fc], edx
jmp 0x10032b6c
mov dword [ebp - 0x2f0], 0xbb71
lea eax, [ebp - 0x2f0]
push eax
call fcn.1002adcc
pop ecx
mov dword [ebp - 0x1a8], eax
mov dword [ebp - 0x80], 0x60f57a7c
mov dword [ebp - 0x180], 1
mov dword [ebp - 0x10c], 0
jmp 0x10032db8
mov eax, dword [ebp - 0x10c]
inc eax
mov dword [ebp - 0x10c], eax
cmp dword [ebp - 0x10c], 4
jge 0x10032dd4
mov eax, dword [ebp - 0x10c]
mov dword [ebp + eax*4 - 0x424], 0xdd78f4f8
jmp 0x10032dab
cmp dword [ebp - 0x80], 0
je 0x10032dde
cmp dword [ebp - 0x80], 0
mov dword [ebp - 0x180], 0x3c39
mov eax, dword [ebp - 0x180]
cmp eax, dword [ebp - 0x80]
jge 0x10032dff
mov dword [ebp - 0x290], 1
jmp 0x10032e06
and dword [ebp - 0x290], 0
mov eax, dword [ebp - 0x80]
mov dword [ebp - 0x37c], eax
imul eax, dword [ebp - 0x180], 0x6de0
cmp eax, 0x2167fa5c
jg 0x10032e2c
mov dword [ebp - 0x2f8], 1
jmp 0x10032e33
and dword [ebp - 0x2f8], 0
mov eax, dword [ebp - 0x80]
mov dword [ebp - 0x390], eax
mov eax, dword [ebp - 0x80]
push 4
pop ecx
imul ecx, ecx, 3
mov dword [ebp + ecx - 0x424], eax
mov byte [ebp - 0x67], 0
movzx eax, byte [ebp - 0x67]
test eax, eax
je 0x10032e74
push 0x2f7
push 0xc08
push 0x113b
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_CheckRadioButton]
mov byte [ebp - 0xd8], 5
mov byte [ebp - 0xd7], 0xa1
mov byte [ebp - 0xd6], 1
mov byte [ebp - 0xd5], 0x17
mov byte [ebp - 0xd4], 4
mov byte [ebp - 0xd3], 0
mov byte [ebp - 0xd2], 7
mov byte [ebp - 0xd1], 0xc
mov byte [ebp - 0xd0], 6
mov byte [ebp - 0xcf], 0x1a
mov byte [ebp - 0xce], 2
mov byte [ebp - 0xcd], 7
mov byte [ebp - 0xcc], 3
mov byte [ebp - 0xcb], 0x22
mov byte [ebp - 0xca], 0xc
mov byte [ebp - 0xc9], 1
mov byte [ebp - 0xc8], 0
mov byte [ebp - 0xc7], 0x10
mov byte [ebp - 0xc6], 0xa
mov byte [ebp - 0xc5], 2
mov byte [ebp - 0xc4], 9
mov byte [ebp - 0xc3], 0x2b
mov byte [ebp - 0xc2], 0xb
mov byte [ebp - 0xc1], 0x16
mov byte [ebp - 0xc0], 8
mov byte [ebp - 0xbf], 0x17
xor eax, eax
inc eax
shl eax, 0
movzx eax, byte [ebp + eax - 0xd8]
and eax, 0xd3
xor ecx, ecx
inc ecx
shl ecx, 0
movzx ecx, byte [ebp + ecx - 0xd8]
or ecx, 0xd3
sub ecx, eax
xor eax, eax
inc eax
imul eax, eax, 0
movzx eax, byte [ebp + eax - 0xd8]
mov byte [ebp + eax - 0x338], cl
mov dword [ebp - 0x44], 2
and dword [ebp - 0x1a0], 0
jmp 0x10032f80
mov eax, dword [ebp - 0x44]
inc eax
inc eax
mov dword [ebp - 0x44], eax
cmp dword [ebp - 0x44], 0x1a
jae 0x10032fe8
mov eax, dword [ebp - 0x44]
sub eax, dword [ebp - 0x1a0]
movzx eax, byte [ebp + eax - 0xda]
movsx eax, byte [ebp + eax - 0x338]
mov ecx, dword [ebp - 0x44]
movzx ecx, byte [ebp + ecx - 0xd7]
and ecx, eax
mov eax, dword [ebp - 0x44]
sub eax, dword [ebp - 0x1a0]
movzx eax, byte [ebp + eax - 0xda]
movsx eax, byte [ebp + eax - 0x338]
mov edx, dword [ebp - 0x44]
movzx edx, byte [ebp + edx - 0xd7]
or edx, eax
sub edx, ecx
mov eax, dword [ebp - 0x44]
movzx eax, byte [ebp + eax - 0xd8]
mov byte [ebp + eax - 0x338], dl
jmp 0x10032f78
xor eax, eax
inc eax
imul eax, eax, 0xd
mov byte [ebp + eax - 0x338], 0
lea eax, [ebp - 0x338]
push eax
lea ecx, [ebp - 0x47c]
call fcn.10036c13
mov dword [ebp - 0x298], eax
mov eax, dword [ebp - 0x298]
mov dword [ebp - 0x2f4], eax
mov dword [ebp - 4], 4
mov edx, dword [ebp - 0x1a8]
mov ecx, dword [ebp - 0x2f4]
call fcn.1002629e
mov dword [0x10070f8c], eax
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x47c]
call fcn.1000e3a8
and dword [ebp - 0x130], 0
jmp 0x1003305c
mov eax, dword [ebp - 0x130]
inc eax
mov dword [ebp - 0x130], eax
cmp dword [ebp - 0x130], 0xe
jae 0x10033075
mov eax, dword [ebp - 0x130]
mov byte [ebp + eax - 0x338], 0
jmp 0x1003304f
mov byte [ebp - 0xbc], 6
mov byte [ebp - 0xbb], 0xe9
mov byte [ebp - 0xba], 8
mov byte [ebp - 0xb9], 0x3f
mov byte [ebp - 0xb8], 3
mov byte [ebp - 0xb7], 0xe
mov byte [ebp - 0xb6], 1
mov byte [ebp - 0xb5], 0x13
mov byte [ebp - 0xb4], 5
mov byte [ebp - 0xb3], 0x17
mov byte [ebp - 0xb2], 0
mov byte [ebp - 0xb1], 0x26
mov byte [ebp - 0xb0], 4
mov byte [ebp - 0xaf], 0x37
mov byte [ebp - 0xae], 9
mov byte [ebp - 0xad], 0x17
mov byte [ebp - 0xac], 0xd
mov byte [ebp - 0xab], 0x34
mov byte [ebp - 0xaa], 2
mov byte [ebp - 0xa9], 0x32
mov byte [ebp - 0xa8], 7
mov byte [ebp - 0xa7], 0x17
mov byte [ebp - 0xa6], 0xa
mov byte [ebp - 0xa5], 0x17
mov byte [ebp - 0xa4], 0xb
mov byte [ebp - 0xa3], 0x16
mov byte [ebp - 0xa2], 0xc
mov byte [ebp - 0xa1], 0
xor eax, eax
inc eax
shl eax, 0
movzx eax, byte [ebp + eax - 0xbc]
and eax, 0xb9
xor ecx, ecx
inc ecx
shl ecx, 0
movzx ecx, byte [ebp + ecx - 0xbc]
or ecx, 0xb9
sub ecx, eax
xor eax, eax
inc eax
imul eax, eax, 0
movzx eax, byte [ebp + eax - 0xbc]
mov byte [ebp + eax - 0x26c], cl
mov dword [ebp - 0x28], 2
and dword [ebp - 0x188], 0
jmp 0x1003318f
mov eax, dword [ebp - 0x28]
inc eax
inc eax
mov dword [ebp - 0x28], eax
cmp dword [ebp - 0x28], 0x1c
jae 0x10033226
mov eax, dword [ebp - 0x28]
sub eax, dword [ebp - 0x188]
movzx eax, byte [ebp + eax - 0xbe]
movsx eax, byte [ebp + eax - 0x26c]
mov ecx, dword [ebp - 0x28]
movzx ecx, byte [ebp + ecx - 0xbb]
and ecx, eax
mov eax, dword [ebp - 0x28]
sub eax, dword [ebp - 0x188]
movzx eax, byte [ebp + eax - 0xbe]
movsx eax, byte [ebp + eax - 0x26c]
mov edx, dword [ebp - 0x28]
movzx edx, byte [ebp + edx - 0xbb]
and edx, eax
mov eax, dword [ebp - 0x28]
sub eax, dword [ebp - 0x188]
movzx eax, byte [ebp + eax - 0xbe]
movsx eax, byte [ebp + eax - 0x26c]
mov esi, dword [ebp - 0x28]
movzx ebx, byte [ebp + esi - 0xbb]
add ebx, eax
sub ebx, edx
sub ebx, ecx
mov eax, dword [ebp - 0x28]
movzx eax, byte [ebp + eax - 0xbc]
mov byte [ebp + eax - 0x26c], bl
jmp 0x10033187
xor eax, eax
inc eax
imul eax, eax, 0xe
mov byte [ebp + eax - 0x26c], 0
lea eax, [ebp - 0x26c]
push eax
lea ecx, [ebp - 0x4ac]
call fcn.10036c13
mov dword [ebp - 0x270], eax
mov eax, dword [ebp - 0x270]
mov dword [ebp - 0x324], eax
mov dword [ebp - 4], 5
mov edx, dword [ebp - 0x1a8]
mov ecx, dword [ebp - 0x324]
call fcn.1002629e
mov dword [0x10072448], eax
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x4ac]
call fcn.1000e3a8
and dword [ebp - 0x114], 0
jmp 0x1003329a
mov eax, dword [ebp - 0x114]
inc eax
mov dword [ebp - 0x114], eax
cmp dword [ebp - 0x114], 0xf
jae 0x100332b3
mov eax, dword [ebp - 0x114]
mov byte [ebp + eax - 0x26c], 0
jmp 0x1003328d
mov eax, dword [0x10070f8c]
cmp eax, dword [ebp - 0xf0]
je 0x100332cd
mov eax, dword [0x10072448]
cmp eax, dword [ebp - 0xf0]
jne 0x100332e5
mov ecx, dword [ebp + 0xc]
call fcn.1000e139
push eax
push dword [ebp + 8]
call fcn.1002ae00
pop ecx
pop ecx
jmp 0x100341b0
mov dword [ebp - 0x64], 1
mov dword [ebp - 0x138], 0
jmp 0x10033305
mov eax, dword [ebp - 0x138]
inc eax
mov dword [ebp - 0x138], eax
cmp dword [ebp - 0x138], 2
jge 0x10033321
mov eax, dword [ebp - 0x138]
mov dword [ebp + eax*4 - 0x94], 0x98a8f939
jmp 0x100332f8
mov dword [ebp - 0x64], 0
jmp 0x10033331
mov eax, dword [ebp - 0x64]
inc eax
mov dword [ebp - 0x64], eax
cmp dword [ebp - 0x64], 1
jg 0x100334be
mov dword [ebp - 0x1c], 0xafd94fe5
mov dword [ebp - 0x11c], 0x48bd921b
mov dword [ebp - 0x1c], 1
jmp 0x1003335c
mov eax, dword [ebp - 0x1c]
dec eax
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 0
jl 0x100334b9
mov eax, dword [ebp - 0x1c]
cmp dword [ebp + eax*4 - 0x94], 0
jne 0x10033389
mov eax, dword [ebp - 0x1c]
cmp dword [ebp + eax*4 - 0x94], 0
jne 0x10033389
and dword [ebp - 0x1b0], 0
jmp 0x10033393
mov dword [ebp - 0x1b0], 1
mov eax, dword [ebp - 0x1b0]
add eax, 0x2360
mov ecx, dword [ebp - 0x64]
mov ecx, dword [ebp + ecx*4 - 0x94]
sub ecx, eax
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0x94], ecx
xor eax, eax
jne 0x1003346a
cmp dword [ebp - 0x1c], 0xfffffffe
jg 0x100333ce
mov dword [ebp - 0x1b8], 1
jmp 0x100333d5
and dword [ebp - 0x1b8], 0
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp + eax*4 - 0x94]
cmp eax, dword [ebp - 0x1b8]
jg 0x100333f3
mov dword [ebp - 0x2ac], 1
jmp 0x100333fa
and dword [ebp - 0x2ac], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x94]
mov dword [ebp - 0x11c], eax
mov eax, dword [ebp - 0x11c]
mov dword [ebp - 0x398], eax
mov eax, dword [ebp - 0x1c]
mov ecx, dword [ebp - 0x1c]
mov ecx, dword [ebp + ecx*4 - 0x94]
cmp ecx, dword [ebp + eax*4 - 0x94]
jne 0x10033445
mov eax, dword [ebp - 0x1c]
cmp dword [ebp + eax*4 - 0x94], 0
jne 0x10033445
and dword [ebp - 0x1c0], 0
jmp 0x1003344f
mov dword [ebp - 0x1c0], 1
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp + eax*4 - 0x94]
cmp dword [ebp - 0x1c0], eax
jge 0x1003346a
cmp dword [ebp - 0x11c], 0
je 0x10033482
mov byte [ebp - 0x65], 0
movzx eax, byte [ebp - 0x65]
test eax, eax
je 0x10033480
push 0
push 0
call dword [sym.imp.KERNEL32.dll_GetExitCodeProcess]
jmp 0x100334b4
mov eax, dword [ebp - 0x64]
cmp dword [ebp + eax*4 - 0x94], 0
jne 0x1003349e
cmp dword [ebp - 0x64], 0
jne 0x1003349e
and dword [ebp - 0x1c8], 0
jmp 0x100334a8
mov dword [ebp - 0x1c8], 1
mov eax, dword [ebp - 0x1c8]
mov dword [ebp - 0x11c], eax
jmp 0x10033355
jmp 0x1003332a
mov eax, dword [ebp + 8]
mov dword [ebp - 0x148], eax
mov dword [ebp - 0x7c], 0x9b55bb2c
mov dword [ebp - 0x2fc], 0x8bd4dfbd
mov dword [ebp - 0x7c], 0
jmp 0x100334e8
mov eax, dword [ebp - 0x7c]
inc eax
mov dword [ebp - 0x7c], eax
cmp dword [ebp - 0x7c], 3
je 0x1003357d
mov dword [ebp - 0x140], 0
jmp 0x1003350b
mov eax, dword [ebp - 0x140]
inc eax
mov dword [ebp - 0x140], eax
cmp dword [ebp - 0x140], 1
jge 0x10033527
mov eax, dword [ebp - 0x140]
mov dword [ebp + eax*4 - 0x124], 0x7689351f
jmp 0x100334fe
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0x124], 0
jmp 0x10033555
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x124]
dec eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x124], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x124], 0xffffffff
jle 0x10033578
cmp dword [ebp - 0x7c], 0
je 0x1003356d
jmp 0x10033578
mov eax, dword [ebp - 0x7c]
mov dword [ebp - 0x2fc], eax
jmp 0x1003353a
jmp 0x100334e1
cmp dword [ebp - 0x148], 0
je 0x10034148
mov eax, dword [ebp - 0x148]
movzx eax, word [eax]
cmp eax, 0x5a4d
jne 0x10034148
mov eax, dword [ebp - 0x148]
mov ecx, dword [ebp - 0x148]
add ecx, dword [eax + 0x3c]
mov dword [ebp - 0x9c], ecx
mov eax, dword [ebp - 0x9c]
cmp dword [eax], 0x4550
jne 0x10034148
mov eax, dword [ebp - 0x9c]
cmp dword [eax + 0x74], 0
jbe 0x10034148
push 8
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x9c]
cmp dword [ecx + eax + 0x78], 0
je 0x10034148
mov eax, dword [ebp + 8]
mov dword [ebp - 0x74], eax
push 8
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x9c]
mov edx, dword [ebp - 0x74]
add edx, dword [ecx + eax + 0x78]
mov dword [ebp - 0x48], edx
mov eax, 0xffff
mov word [ebp - 0x3c], ax
or dword [ebp - 0x70], 0xffffffff
cmp dword [ebp + 0x10], 0
jbe 0x10033633
mov eax, dword [ebp - 0x48]
mov ecx, dword [ebp + 0x10]
cmp ecx, dword [eax + 0x14]
ja 0x1003362e
mov eax, dword [ebp + 0x10]
dec eax
mov word [ebp - 0x3c], ax
jmp 0x10033c20
mov dword [ebp - 0x1d0], 0x79f0
mov dword [ebp - 0x31c], str.cyc_znap_ljijy_qydt_defna_ojase_rgqfqhhl_bmoo_jdoi_csxnup_xneqqw_kjwaevr_xapblugz_yropj
cmp dword [ebp - 0x1d0], 0x7aa9
jle 0x10033736
and dword [ebp - 0x150], 0
jmp 0x1003366d
mov eax, dword [ebp - 0x150]
inc eax
mov dword [ebp - 0x150], eax
cmp dword [ebp - 0x150], 0x690
jge 0x1003372e
and dword [ebp - 0x14c], 0
jmp 0x10033693
mov eax, dword [ebp - 0x14c]
inc eax
mov dword [ebp - 0x14c], eax
cmp dword [ebp - 0x14c], 0x1e0f
jge 0x10033729
and dword [ebp - 0x134], 0
jmp 0x100336b9
mov eax, dword [ebp - 0x134]
inc eax
mov dword [ebp - 0x134], eax
cmp dword [ebp - 0x134], 0x72e7
jge 0x10033724
mov eax, dword [ebp - 0x150]
add eax, dword [ebp - 0x14c]
mov ecx, dword [ebp - 0x134]
shl eax, cl
cdq
mov dword [ebp - 0x2c0], eax
mov dword [ebp - 0x2bc], edx
push dword [ebp - 0x2bc]
push dword [ebp - 0x2c0]
lea ecx, [ebp - 0x494]
call fcn.10002407
pop ecx
pop ecx
mov dword [ebp - 0x2b8], eax
mov ecx, dword [ebp - 0x2b8]
call fcn.1000e139
push eax
call fcn.10039f03
pop ecx
lea ecx, [ebp - 0x494]
call fcn.1000e12f
jmp 0x100336ac
jmp 0x10033686
jmp 0x10033660
push 0
call dword [sym.imp.KERNEL32.dll_LockResource]
mov dword [ebp - 4], 6
cmp dword [ebp - 0x1d0], 0x7916
jge 0x10033755
push dword [ebp - 0x31c]
call fcn.10039f03
pop ecx
jmp 0x10033771
or dword [ebp - 4], 0xffffffff
jmp 0x1003377b
mov dword [ebp - 0x1d8], 0x54d1
mov dword [ebp - 0x2c4], str.kyef_utosrpkk_nxknp_eszewnk_njgwsmu_sdwv_etke_kbjkoola_solf_nux_hsriizai
cmp dword [ebp - 0x1d8], 0x55a7
jle 0x1003385e
and dword [ebp - 0x15c], 0
jmp 0x100337b5
mov eax, dword [ebp - 0x15c]
inc eax
mov dword [ebp - 0x15c], eax
cmp dword [ebp - 0x15c], 0x4fcd
jge 0x10033847
and dword [ebp - 0xe0], 0
jmp 0x100337db
mov eax, dword [ebp - 0xe0]
inc eax
mov dword [ebp - 0xe0], eax
cmp dword [ebp - 0xe0], 0x2b0d
jge 0x10033842
and dword [ebp - 0xe8], 0
jmp 0x100337fd
mov eax, dword [ebp - 0xe8]
inc eax
mov dword [ebp - 0xe8], eax
cmp dword [ebp - 0xe8], 0x6456
jge 0x10033840
mov eax, dword [ebp - 0x15c]
sub eax, dword [ebp - 0xe0]
add eax, dword [ebp - 0xe8]
cdq
mov dword [ebp - 0x2cc], eax
mov dword [ebp - 0x2c8], edx
push dword [ebp - 0x2c8]
push dword [ebp - 0x2cc]
mov ecx, 0x10070b88
call fcn.1000e159
jmp 0x100337f0
jmp 0x100337ce
jmp 0x100337a8
push 0x34d
push 0x133e
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_SetWindowLongA]
mov eax, dword [0x100724f4]
and eax, 1
jne 0x10033895
mov eax, dword [0x100724f4]
or eax, 1
mov dword [0x100724f4], eax
mov dword [ebp - 4], 8
mov ecx, 0x100724b0
call fcn.1000e43b
push 0x10058436
call fcn.10039ed9
pop ecx
or dword [ebp - 4], 0xffffffff
mov dword [ebp - 4], 9
cmp dword [ebp - 0x1d8], 0x52b7
jge 0x100338b8
mov edx, dword [ebp - 0x2c4]
mov ecx, 0x10070b88
call fcn.10010f71
jmp 0x100338d4
or dword [ebp - 4], 0xffffffff
jmp 0x100338de
movzx eax, byte [0x10070f87]
test eax, eax
je 0x10033947
mov ecx, 0x100724b0
call fcn.10036dcc
movzx eax, al
test eax, eax
jne 0x10033947
lea eax, [ebp - 0xf0]
push eax
lea eax, [ebp - 0x1e0]
push eax
mov ecx, 0x100724b0
call fcn.1000e500
lea eax, [ebp - 0x368]
push eax
mov ecx, 0x100724b0
call fcn.1000e4f2
push eax
lea ecx, [ebp - 0x1e0]
call fcn.1000e75d
movzx eax, al
test eax, eax
je 0x10033947
lea ecx, [ebp - 0x1e0]
call fcn.10036dd5
mov eax, dword [eax + 4]
mov dword [ebp - 0x70], eax
cmp dword [ebp - 0x70], 0xffffffff
jne 0x10033c20
mov ecx, 0x100724b0
call fcn.10036e19
mov ecx, dword [ebp - 0x48]
add eax, dword [ecx + 0x18]
push eax
mov ecx, 0x100724b0
call fcn.10036e1d
and dword [ebp - 0x6c], 0
jmp 0x10033979
mov eax, dword [ebp - 0x6c]
inc eax
mov dword [ebp - 0x6c], eax
mov eax, dword [ebp - 0x48]
mov ecx, dword [ebp - 0x6c]
cmp ecx, dword [eax + 0x18]
jae 0x10033c20
mov eax, dword [ebp - 0x48]
mov ecx, dword [ebp - 0x74]
add ecx, dword [eax + 0x20]
mov eax, dword [ebp - 0x6c]
lea eax, [ecx + eax*4]
mov dword [ebp - 0x1e8], eax
cmp dword [ebp - 0x1e8], 0
je 0x10033c1b
mov eax, dword [ebp - 0x1e8]
mov ecx, dword [ebp - 0x74]
add ecx, dword [eax]
push ecx
lea ecx, [ebp - 0x414]
call fcn.10036c13
mov dword [ebp - 4], 0xb
mov edx, dword [ebp + 8]
lea ecx, [ebp - 0x414]
call fcn.1002629e
mov dword [ebp - 0x1f0], eax
movzx eax, byte [0x10070f87]
test eax, eax
je 0x100339f8
mov ecx, 0x100724b0
call fcn.10036dcc
movzx eax, al
test eax, eax
jne 0x10033a15
lea eax, [ebp - 0x1f0]
push eax
mov ecx, 0x100724b0
call fcn.10036ddb
mov ecx, dword [ebp - 0x6c]
mov dword [eax], ecx
mov byte [0x10070f87], 1
cmp dword [ebp - 0x70], 0xffffffff
jne 0x10033c0c
mov eax, dword [ebp - 0x1f0]
cmp eax, dword [ebp - 0xf0]
jne 0x10033c0c
mov dword [ebp - 0x304], 0x1a11
cmp dword [ebp - 0x304], 0xe39
jge 0x10033c06
and dword [ebp - 0xf8], 0
and dword [ebp - 0x174], 0
lea eax, [ebp - 0x174]
push eax
lea eax, [ebp - 0xf8]
push eax
push str._ld__ld
call fcn.10039c1b
add esp, 0xc
and dword [ebp - 0x2d0], 0
lea eax, [ebp - 0x2d0]
push eax
push dword [ebp - 0x174]
lea ecx, [ebp - 0x198]
call fcn.1000e874
mov byte [ebp - 4], 0xc
mov eax, dword [ebp - 0xf8]
mov dword [ebp - 0x320], eax
mov eax, dword [ebp - 0xf8]
dec eax
mov dword [ebp - 0xf8], eax
cmp dword [ebp - 0x320], 0
je 0x10033bf7
and dword [ebp - 0x78], 0
and dword [ebp - 0x20], 0
jmp 0x10033ace
mov eax, dword [ebp - 0x20]
inc eax
mov dword [ebp - 0x20], eax
mov eax, dword [ebp - 0x20]
cmp eax, dword [ebp - 0x174]
jge 0x10033be3
and dword [ebp - 0x184], 0
lea eax, [ebp - 0x184]
push eax
push 0x1005f9c0
call fcn.10039c1b
pop ecx
pop ecx
push dword [ebp - 0x20]
lea ecx, [ebp - 0x198]
call fcn.1000e865
mov ecx, dword [ebp - 0x78]
cmp ecx, dword [eax]
jge 0x10033b24
push dword [ebp - 0x20]
lea ecx, [ebp - 0x198]
call fcn.1000e865
mov eax, dword [eax]
mov dword [ebp - 0x1f8], eax
jmp 0x10033b2d
mov eax, dword [ebp - 0x78]
mov dword [ebp - 0x1f8], eax
mov eax, dword [ebp - 0x1f8]
mov dword [ebp - 0x78], eax
mov eax, dword [ebp - 0x78]
add eax, dword [ebp - 0x184]
mov dword [ebp - 0x78], eax
cmp dword [ebp - 0x20], 0
jle 0x10033bb4
push dword [ebp - 0x20]
lea ecx, [ebp - 0x198]
call fcn.1000e865
mov esi, eax
mov eax, dword [ebp - 0x20]
dec eax
push eax
lea ecx, [ebp - 0x198]
call fcn.1000e865
mov eax, dword [eax]
cmp eax, dword [esi]
jge 0x10033b86
push dword [ebp - 0x20]
lea ecx, [ebp - 0x198]
call fcn.1000e865
mov eax, dword [eax]
mov dword [ebp - 0x200], eax
jmp 0x10033b9e
mov eax, dword [ebp - 0x20]
dec eax
push eax
lea ecx, [ebp - 0x198]
call fcn.1000e865
mov eax, dword [eax]
mov dword [ebp - 0x200], eax
push dword [ebp - 0x20]
lea ecx, [ebp - 0x198]
call fcn.1000e865
mov ecx, dword [ebp - 0x200]
mov dword [eax], ecx
push dword [ebp - 0x20]
lea ecx, [ebp - 0x198]
call fcn.1000e865
mov dword [ebp - 0x208], eax
mov eax, dword [ebp - 0x208]
mov eax, dword [eax]
add eax, dword [ebp - 0x184]
mov ecx, dword [ebp - 0x208]
mov dword [ecx], eax
jmp 0x10033ac7
push dword [ebp - 0x78]
push str._ld_n
call fcn.10039f03
pop ecx
pop ecx
jmp 0x10033a97
mov byte [ebp - 4], 0xb
lea ecx, [ebp - 0x198]
call fcn.1000e896
mov eax, dword [ebp - 0x6c]
mov dword [ebp - 0x70], eax
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x414]
call fcn.1000e3a8
jmp 0x10033972
cmp dword [ebp + 0x10], 0
jne 0x10033c40
cmp dword [ebp - 0x70], 0xffffffff
je 0x10033c40
mov eax, dword [ebp - 0x48]
mov ecx, dword [ebp - 0x74]
add ecx, dword [eax + 0x24]
mov eax, dword [ebp - 0x70]
mov ax, word [ecx + eax*2]
mov word [ebp - 0x3c], ax
movzx eax, word [ebp - 0x3c]
cmp eax, 0xffff
je 0x10034148
movzx eax, word [ebp - 0x3c]
mov ecx, dword [ebp - 0x48]
mov edx, dword [ebp - 0x74]
add edx, dword [ecx + 0x1c]
lea eax, [edx + eax*4]
mov dword [ebp - 0x2dc], eax
mov eax, dword [ebp - 0x2dc]
mov ecx, dword [ebp - 0x74]
add ecx, dword [eax]
mov dword [ebp - 0x50], ecx
mov eax, dword [ebp - 0x50]
cmp eax, dword [ebp - 0x48]
jbe 0x10034143
push 8
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x9c]
mov edx, dword [ebp - 0x48]
add edx, dword [ecx + eax + 0x7c]
cmp dword [ebp - 0x50], edx
jae 0x10034143
mov eax, dword [0x100724f4]
and eax, 2
jne 0x10033ccd
mov eax, dword [0x100724f4]
or eax, 2
mov dword [0x100724f4], eax
mov dword [ebp - 4], 0xd
push 0xd2dd
call fcn.10004b67
pop ecx
mov byte [0x10072444], al
or dword [ebp - 4], 0xffffffff
mov byte [ebp - 0x30], 0
mov byte [ebp - 0x2f], 0xab
mov byte [ebp - 0x2e], 1
mov byte [ebp - 0x2d], 8
mov byte [ebp - 0x2c], 2
mov byte [ebp - 0x2b], 0
xor eax, eax
inc eax
shl eax, 0
movzx eax, byte [ebp + eax - 0x30]
and eax, 0xcf
xor ecx, ecx
inc ecx
shl ecx, 0
movzx ecx, byte [ebp + ecx - 0x30]
or ecx, 0xcf
sub ecx, eax
xor eax, eax
inc eax
imul eax, eax, 0
movzx eax, byte [ebp + eax - 0x30]
mov byte [ebp + eax - 0x58], cl
mov dword [ebp - 0x24], 2
and dword [ebp - 0x17c], 0
jmp 0x10033d2f
mov eax, dword [ebp - 0x24]
inc eax
inc eax
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 6
jae 0x10033d9e
mov eax, dword [ebp - 0x24]
sub eax, dword [ebp - 0x17c]
movzx eax, byte [ebp + eax - 0x32]
movsx eax, byte [ebp + eax - 0x58]
mov ecx, dword [ebp - 0x24]
movzx ecx, byte [ebp + ecx - 0x2f]
and ecx, eax
mov eax, dword [ebp - 0x24]
sub eax, dword [ebp - 0x17c]
movzx eax, byte [ebp + eax - 0x32]
movsx eax, byte [ebp + eax - 0x58]
mov edx, dword [ebp - 0x24]
movzx edx, byte [ebp + edx - 0x2f]
and edx, eax
mov eax, dword [ebp - 0x24]
sub eax, dword [ebp - 0x17c]
movzx eax, byte [ebp + eax - 0x32]
movsx eax, byte [ebp + eax - 0x58]
mov esi, dword [ebp - 0x24]
movzx ebx, byte [ebp + esi - 0x2f]
add ebx, eax
sub ebx, edx
sub ebx, ecx
mov eax, dword [ebp - 0x24]
movzx eax, byte [ebp + eax - 0x30]
mov byte [ebp + eax - 0x58], bl
jmp 0x10033d27
xor eax, eax
inc eax
imul eax, eax, 3
mov byte [ebp + eax - 0x58], 0
mov eax, dword [0x100724f4]
and eax, 4
jne 0x10033de4
mov eax, dword [0x100724f4]
or eax, 4
mov dword [0x100724f4], eax
mov dword [ebp - 4], 0xe
lea eax, [ebp - 0x58]
push eax
mov ecx, 0x100724d4
call fcn.10036c13
push 0x10058427
call fcn.10039ed9
pop ecx
or dword [ebp - 4], 0xffffffff
and dword [ebp - 0x100], 0
jmp 0x10033dfa
mov eax, dword [ebp - 0x100]
inc eax
mov dword [ebp - 0x100], eax
cmp dword [ebp - 0x100], 4
jae 0x10033e10
mov eax, dword [ebp - 0x100]
mov byte [ebp + eax - 0x58], 0
jmp 0x10033ded
mov eax, dword [ebp - 0x50]
mov dword [ebp - 0x60], eax
movsx eax, byte [0x10072444]
mov ecx, dword [ebp - 0x60]
movsx ecx, byte [ecx]
cmp ecx, eax
je 0x10033e30
mov eax, dword [ebp - 0x60]
inc eax
mov dword [ebp - 0x60], eax
jmp 0x10033e16
mov eax, dword [ebp - 0x60]
inc eax
mov dword [ebp - 0x60], eax
push dword [ebp - 0x60]
push dword [ebp - 0x50]
lea ecx, [ebp - 0x3bc]
call fcn.10037267
mov dword [ebp - 4], 0xf
push 0x100724d4
lea ecx, [ebp - 0x3bc]
call fcn.10036c42
lea eax, [ebp - 0x384]
push eax
lea ecx, [ebp - 0x3bc]
call fcn.1000eeaf
push dword [eax]
lea eax, [ebp - 0x3a4]
push eax
lea ecx, [ebp - 0x3bc]
call fcn.1000ee9b
push dword [eax]
lea ecx, [ebp - 0x43c]
call fcn.10037290
mov byte [ebp - 4], 0x10
lea eax, [ebp - 0x43c]
push eax
call fcn.10026a50
pop ecx
mov dword [ebp - 0x18c], eax
cmp dword [ebp - 0x18c], 0
je 0x100340f2
mov dword [ebp - 0x210], 0x6d06
mov dword [ebp - 0x274], str.yhsxn_rpojunb_ocn
cmp dword [ebp - 0x210], 0x7063
jle 0x10033f4f
and dword [ebp - 0x108], 0
jmp 0x10033eec
mov eax, dword [ebp - 0x108]
inc eax
mov dword [ebp - 0x108], eax
cmp dword [ebp - 0x108], 0x1229
jge 0x10033f4f
and dword [ebp - 0x110], 0
jmp 0x10033f0e
mov eax, dword [ebp - 0x110]
inc eax
mov dword [ebp - 0x110], eax
cmp dword [ebp - 0x110], 0x1b18
jge 0x10033f4d
mov eax, dword [ebp - 0x108]
mov ecx, dword [ebp - 0x110]
sar eax, cl
cdq
mov dword [ebp - 0x2d8], eax
mov dword [ebp - 0x2d4], edx
push dword [ebp - 0x2d4]
push dword [ebp - 0x2d8]
mov ecx, 0x10070b88
call fcn.1000e159
jmp 0x10033f01
jmp 0x10033edf
push dword [ebp - 0x60]
lea ecx, [ebp - 0x3fc]
call fcn.10036c13
mov byte [ebp - 4], 0x11
mov byte [ebp - 4], 0x12
cmp dword [ebp - 0x210], 0x6c7d
jge 0x10033f81
mov edx, dword [ebp - 0x274]
mov ecx, 0x10070b88
call fcn.10010f71
jmp 0x10033f9d
mov dword [ebp - 4], 0x11
jmp 0x10033fad
mov dword [ebp - 0x218], 0x575d
mov dword [ebp - 0x27c], str.dtpzr_gkiudhcmz_yya_icvhpohn_prh_yigpff_vztf_zlgzgsu_wds_xmfqdleml_larwoi_ewrv_hokuv_qxkadhebm
cmp dword [ebp - 0x218], 0x58c2
jle 0x10034044
and dword [ebp - 0x118], 0
jmp 0x10033fe3
mov eax, dword [ebp - 0x118]
inc eax
mov dword [ebp - 0x118], eax
cmp dword [ebp - 0x118], 0xace
jge 0x10034044
and dword [ebp - 0x120], 0
jmp 0x10034005
mov eax, dword [ebp - 0x120]
inc eax
mov dword [ebp - 0x120], eax
cmp dword [ebp - 0x120], 0x2587
jge 0x10034042
mov eax, dword [ebp - 0x118]
xor eax, dword [ebp - 0x120]
cdq
mov dword [ebp - 0x2e4], eax
mov dword [ebp - 0x2e0], edx
push dword [ebp - 0x2e0]
push dword [ebp - 0x2e4]
mov ecx, 0x10070b88
call fcn.1000e159
jmp 0x10033ff8
jmp 0x10033fd6
mov byte [ebp - 4], 0x14
cmp dword [ebp - 0x218], 0x5409
jge 0x10034064
mov edx, dword [ebp - 0x27c]
mov ecx, 0x10070b88
call fcn.10010f71
jmp 0x10034080
mov dword [ebp - 4], 0x11
jmp 0x10034090
lea edx, [ebp - 0x284]
lea ecx, [ebp - 0x3fc]
call fcn.10026407
movzx eax, al
test eax, eax
je 0x100340c5
push 0
push dword [ebp - 0x284]
push 0
push dword [ebp - 0x18c]
call fcn.10031fc7
add esp, 0x10
mov dword [ebp - 0x50], eax
jmp 0x100340e1
push 1
push 0
lea eax, [ebp - 0x3fc]
push eax
push dword [ebp - 0x18c]
call fcn.10031fc7
add esp, 0x10
mov dword [ebp - 0x50], eax
mov byte [ebp - 4], 0x10
lea ecx, [ebp - 0x3fc]
call fcn.1000e3a8
jmp 0x10034125
cmp dword [ebp + 0x10], 0
jne 0x10034108
mov ecx, dword [ebp + 0xc]
call fcn.1000e139
mov dword [ebp - 0x220], eax
jmp 0x10034112
movzx eax, word [ebp + 0x10]
mov dword [ebp - 0x220], eax
push dword [ebp - 0x220]
push dword [ebp + 8]
call fcn.1002ae00
pop ecx
pop ecx
mov dword [ebp - 0x50], eax
mov byte [ebp - 4], 0xf
lea ecx, [ebp - 0x43c]
call fcn.1000e2ce
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x3bc]
call fcn.1000e3a8
mov eax, dword [ebp - 0x50]
jmp 0x100341b0
mov dword [ebp - 0x8c], 0x39b6
cmp dword [ebp - 0x8c], 0
je 0x10034176
mov byte [ebp - 0x66], 0
movzx eax, byte [ebp - 0x66]
test eax, eax
je 0x10034174
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetWindowTextLengthA]
jmp 0x100341ae
mov dword [ebp - 0x8c], 0xffffffed
jmp 0x1003418f
mov eax, dword [ebp - 0x8c]
inc eax
mov dword [ebp - 0x8c], eax
cmp dword [ebp - 0x8c], 0x34
jg 0x100341ae
mov byte [ebp - 0x59], 0
movzx eax, byte [ebp - 0x59]
test eax, eax
je 0x100341ac
push 0
call dword [sym.imp.KERNEL32.dll_SuspendThread]
jmp 0x10034182
xor eax, eax
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret