Function at 0x10039501
Capabilities:
Check http status code
Encode data using xor
Query environment variable
Set registry value

Disassembly:
mov eax, 0x1005cd69
call fcn.1005bac8
sub esp, 0x4ec
push ebx
push esi
push edi
mov dword [ebp - 0x10], esp
mov dword [ebp - 0x218], edx
mov dword [ebp - 0x74], ecx
xor ebx, ebx
mov dword [ebp - 4], ebx
mov dword [ebp - 0x14], 6
mov dword [ebp - 0x1c], 0x133f29c8
mov dword [ebp - 0x208], ebx
mov dword [ebp - 0x14], ebx
jmp 0x1003954c
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x34], 0x4a6847df
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], 1
jl 0x1003953e
mov dword [ebp - 0x14], ebx
jmp 0x10039568
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x310], 0xffffffff
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], 3
jl 0x10039557
mov dword [ebp - 0x14], ebx
cmp dword [ebp - 0x14], ebx
jl 0x1003960a
mov dword [ebp - 0x1c], ebx
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp + eax*4 - 0x34]
mov eax, dword [ebp - 0x14]
mov ecx, dword [ebp + eax*4 - 0x34]
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x34], ecx
mov eax, dword [ebp - 0x14]
cmp dword [ebp + eax*4 - 0x34], ebx
jne 0x100395a4
cmp dword [ebp - 0x14], ebx
jne 0x100395a4
mov edx, ebx
jmp 0x100395a7
xor edx, edx
inc edx
mov eax, dword [ebp - 0x34]
xor ecx, ecx
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp + eax*4 - 0x34]
cmp edx, eax
mov eax, dword [ebp - 0x14]
setle cl
xor edx, edx
mov eax, dword [ebp + eax*4 - 0x34]
cmp ecx, eax
mov eax, dword [ebp - 0x14]
setle dl
xor ecx, ecx
mov eax, dword [ebp + eax*4 - 0x34]
cmp edx, eax
setle cl
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp - 0x34]
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
sub eax, 9
jne 0x100395f8
mov eax, dword [ebp - 0x14]
cmp dword [ebp + eax*4 - 0x34], ebx
jne 0x100395f8
mov eax, ebx
jmp 0x100395fb
xor eax, eax
inc eax
mov dword [ebp - 0x308], eax
dec dword [ebp - 0x14]
jns 0x1003957a
push 0x7ab0
push 0x5b7d
push 1
push 0x6a23
lea eax, [ebp - 0x208]
mov dl, 1
push eax
push ebx
push 0x4ca5
mov ecx, 0x2349
call fcn.10038dcd
mov dword [ebp - 0x190], ebx
mov dword [ebp - 0x18c], ebx
mov dword [ebp - 0x188], ebx
mov byte [ebp - 4], 1
add esp, 0x18
mov dword [ebp - 0x148], 4
xor dl, dl
mov dword [ebp - 0x1e0], 0xba29f583
mov ecx, 0x83b
mov dword [ebp - 0x1f0], 1
call fcn.10038d9b
mov eax, dword [ebp - 0x148]
neg eax
pop ecx
sbb eax, eax
neg eax
dec eax
lea eax, [ebp - 0x148]
je 0x100396ca
push eax
lea eax, [ebp - 0x1d8]
mov dword [ebp - 0x1d8], 0x6db6
push eax
push 1
lea eax, [ebp - 0x204]
mov dword [ebp - 0x204], ebx
push eax
push 0x2184
lea eax, [ebp - 0x1e0]
mov dl, 1
push 1
push eax
mov ecx, 0xd4b
call fcn.10038dcd
jmp 0x100396f0
push 0x7d40
push 0x9a1
push eax
push 1
push 0x5458
push 0x2d63
push 1
xor dl, dl
lea ecx, [ebp - 0x1f0]
call fcn.10039395
add esp, 0x1c
mov dword [ebp - 0x9c], 0x17020709
mov dword [ebp - 0x98], 0xa070604
mov ecx, ebx
mov dword [ebp - 0x94], 0x130a0e01
mov dword [ebp - 0x90], 0x2081e0c
push 0x74
pop eax
push 2
mov dword [ebp - 0x8c], 0x2c06010b
mov dword [ebp - 0x88], 0xabb88503
mov dword [ebp - 0x84], 0x2b002b03
mov word [ebp - 0x80], 0x6e05
mov word [ebp - 0x2d6], ax
pop esi
cmp esi, 0x14
jne 0x1003975b
push 4
pop ecx
push 0x16
pop esi
jmp 0x10039793
movzx edx, byte [ebp + esi - 0x9b]
mov eax, esi
sub eax, ecx
movzx eax, byte [ebp + eax - 0x9e]
movzx ecx, word [ebp + eax*2 - 0x2e8]
mov eax, ecx
and eax, edx
add eax, eax
sub ecx, eax
movzx eax, byte [ebp + esi - 0x9c]
add ecx, edx
mov word [ebp + eax*2 - 0x2e8], cx
mov ecx, ebx
add esi, 2
cmp esi, 0x1e
jb 0x1003974e
xor eax, eax
mov word [ebp - 0x2ce], ax
mov dword [ebp - 0x14], 0x99cfe04
mov dword [ebp - 0x18], 1
mov dword [ebp - 0x24], 0xdb5cabfc
mov dword [ebp - 0x18], ebx
jmp 0x100397cf
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x198], 0xfffffffb
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 2
jl 0x100397be
mov eax, dword [ebp - 0x14]
mov dword [ebp - 0x18], eax
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov edx, dword [ebp - 0x14]
sub ecx, eax
mov eax, dword [ebp - 0x14]
neg ecx
sbb ecx, ecx
inc ecx
sub edx, ecx
neg edx
sbb edx, edx
xor ecx, ecx
inc edx
cmp edx, eax
setg cl
mov dword [ebp - 0x24], ecx
cmp dword [ebp - 0x24], ebx
je 0x100398a3
mov dword [ebp - 0x20], 9
mov dword [ebp - 0x28], ebx
mov dword [ebp - 0x14], 1
cmp dword [ebp - 0x14], ebx
jl 0x100398ca
mov dword [ebp - 0x1c], 1
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp + eax*4 - 0x198]
mov eax, dword [ebp - 0x18]
cmp dword [ebp - 0x20], 8
je 0x10039848
mov eax, dword [ebp - 0x14]
cmp dword [ebp + eax*4 - 0x198], ebx
jne 0x10039856
cmp dword [ebp - 0x20], ebx
jne 0x10039856
cmp dword [ebp - 0x1c], ebx
jne 0x10039856
mov eax, ebx
jmp 0x10039859
xor eax, eax
inc eax
add eax, 0x520f3038
je 0x10039863
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp + eax*4 - 0x198]
mov eax, dword [ebp - 0x1c]
add eax, dword [ebp - 0x20]
mov dword [ebp - 0x20], eax
je 0x1003987b
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x28]
xor ecx, ecx
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp + eax*4 - 0x198]
test eax, eax
setg cl
mov dword [ebp - 0x18], ecx
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x24], 5
dec dword [ebp - 0x14]
jns 0x10039822
jmp 0x100398ca
mov dword [ebp - 0x14], 1
cmp dword [ebp - 0x14], ebx
jl 0x100398ca
push ecx
push ecx
push 0x6c5f
push 0x64f3
mov cl, 1
call fcn.10038f57
add esp, 0x10
dec dword [ebp - 0x14]
jns 0x100398af
mov dword [ebp - 0x14], 0xbfc4f27d
mov dword [ebp - 0x1c], 4
mov dword [ebp - 0x1c], 0x9c8ddac0
mov dword [ebp - 0x28], 0xfffffff9
mov dword [ebp - 0x18], ebx
jmp 0x100398fc
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x338], 0xcfd66c4a
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 4
jl 0x100398eb
mov eax, dword [ebp - 0x14]
cmp eax, dword [ebp - 0x14]
je 0x1003994b
mov edx, dword [ebp - 0x14]
sub edx, dword [ebp - 0x14]
mov eax, dword [ebp - 0x14]
neg edx
sbb edx, edx
xor ecx, ecx
inc edx
cmp eax, edx
setl cl
xor edx, edx
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cmp eax, 0xd705
mov eax, dword [ebp - 0x14]
setg dl
xor ecx, ecx
cmp edx, eax
setle cl
mov dword [ebp - 0x330], ecx
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp - 0x14]
mov dword [ebp - 0x1c], ebx
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp - 0x14]
mov ecx, dword [ebp - 0x14]
sub ecx, 0x9b78
neg ecx
sbb ecx, ecx
xor eax, eax
inc ecx
cmp ecx, 0x4868
push ecx
setge al
mov cl, 1
add eax, 7
mov dword [ebp - 0x28], eax
lea eax, [ebp - 0x3f]
mov byte [ebp - 0x3f], bl
push eax
call fcn.100390c4
mov dword [ebp - 0x70], 0xb05bc06
mov dword [ebp - 0x6c], 0x4c020204
mov dword [ebp - 0x68], 0xa014807
mov dword [ebp - 0x64], 0x90020100
mov word [ebp - 0x60], 0x385
mov byte [ebp - 0x5e], 0xd
mov dword [ebp - 0x2c], 0x6213
cmp dword [ebp - 0x2c], 0x64c7
pop ecx
pop ecx
jle 0x10039a43
mov edi, ebx
mov dword [ebp - 0x44], ebx
mov esi, ebx
mov dword [ebp - 0x1c], ebx
mov eax, edi
mov dword [ebp - 0x28], ebx
cdq
mov edi, ebx
idiv esi
mov esi, edx
mov ecx, edi
mov eax, esi
shl eax, cl
lea ecx, [ebp - 0x3b0]
cdq
push edx
push eax
call fcn.10001a65
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x100399ef
mov eax, dword [eax]
push eax
call fcn.10043bf4
pop ecx
push ebx
push 1
lea ecx, [ebp - 0x3b0]
call fcn.100020a8
inc edi
cmp edi, 0x22b0
jl 0x100399d1
mov esi, dword [ebp - 0x1c]
mov edi, dword [ebp - 0x44]
inc esi
mov dword [ebp - 0x1c], esi
cmp esi, 0x5626
jl 0x100399c5
inc edi
mov dword [ebp - 0x44], edi
cmp edi, 0x53f0
jl 0x100399c0
push 0x1176
push ebx
push 0x12ac
push 0x1929
push ebx
push ebx
call dword [sym.imp.ADVAPI32.dll_RegSetValueExW]
cmp dword [ebp - 0x2c], 0x6176
push 0x68
pop eax
mov word [ebp - 0x220], ax
jge 0x10039a61
push str.vsh_fohb_svcc_wdzgbquq_ehuuecp_tjpbpee_gykwln
call fcn.10043bf4
pop ecx
push 2
mov ecx, ebx
mov dword [ebp - 4], 1
pop esi
mov dword [ebp - 0x44], ecx
mov dword [ebp - 0x24], esi
cmp esi, 0x13
jae 0x10039b9f
movzx eax, byte [ebp - 0x70]
lea eax, [eax*2 + 2]
cmp esi, eax
jne 0x10039b54
movzx eax, byte [ebp + esi - 0x70]
mov dword [ebp - 0x28], eax
inc eax
mov dword [ebp - 0x44], eax
mov dword [ebp - 0x18], 0x1b11
cmp dword [ebp - 0x18], 0x1d53
jle 0x10039b31
mov esi, ebx
mov dword [ebp - 0x20], ebx
mov ecx, ebx
mov dword [ebp - 0x30], ebx
mov eax, esi
mov edi, ebx
cdq
idiv ecx
mov eax, edx
mov dword [ebp - 0x2c], eax
mov esi, ebx
mov dword [ebp - 0x1c], 0x5214
or eax, esi
lea ecx, [ebp - 0x3f8]
cdq
push edx
push eax
call fcn.10001a65
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x10039ae8
mov eax, dword [eax]
push eax
call fcn.10043bf4
pop ecx
push ebx
push 1
lea ecx, [ebp - 0x3f8]
call fcn.100020a8
mov eax, dword [ebp - 0x2c]
add esi, edi
dec dword [ebp - 0x1c]
jne 0x10039ace
inc edi
cmp edi, 0x2dd7
jl 0x10039ac5
mov ecx, dword [ebp - 0x30]
mov esi, dword [ebp - 0x20]
inc ecx
mov dword [ebp - 0x30], ecx
cmp ecx, 0x98e
jl 0x10039ab9
inc esi
mov dword [ebp - 0x20], esi
cmp esi, 0x42ea
jl 0x10039ab4
mov esi, dword [ebp - 0x24]
mov eax, dword [ebp - 0x28]
dec eax
add esi, eax
cmp dword [ebp - 0x18], 0x18d2
jge 0x10039b4b
push str.rxabmpk_pkzi_ymnbfvmel_hbdxyb_zvkm
call fcn.10043bf4
pop ecx
mov dword [ebp - 4], 1
jmp 0x10039b94
movzx edx, byte [ebp + esi - 0x6f]
mov eax, esi
sub eax, ecx
movzx eax, byte [ebp + eax - 0x72]
movzx ecx, word [ebp + eax*2 - 0x22c]
mov eax, ecx
and eax, edx
add eax, eax
sub ecx, eax
movzx eax, byte [ebp + esi - 0x70]
add ecx, edx
push ecx
push ebx
push ecx
mov word [ebp + eax*2 - 0x22c], cx
lea ecx, [ebp - 0x44]
push 0x145b
call fcn.10039258
add esp, 0x10
mov ecx, dword [ebp - 0x44]
add esi, 2
jmp 0x10039a70
xor eax, eax
or esi, 0xffffffff
mov word [ebp - 0x21c], ax
mov dword [ebp - 0x24], 0xfffffffc
mov dword [ebp - 0x28], esi
mov dword [ebp - 0x1c], 0x584a
cmp dword [ebp - 0x1c], 0x5913
jle 0x10039bfc
call dword [sym.imp.KERNEL32.dll_SwitchToThread]
mov esi, ebx
mov edi, ebx
mov eax, edi
mov ecx, 0x10076b78
xor eax, esi
cdq
push edx
push eax
call fcn.10001c56
inc edi
cmp edi, 0x9e6
jl 0x10039bcf
inc esi
cmp esi, 0x23f7
jl 0x10039bcd
push ebx
call dword [sym.imp.KERNEL32.dll_QueryPerformanceCounter]
or esi, 0xffffffff
mov dword [ebp - 0x28], 0x8319
mov byte [ebp - 4], 6
cmp dword [ebp - 0x1c], 0x551f
jge 0x10039c1f
mov edx, str.kedp_vxswzgllz_tdxn
mov ecx, 0x10076b78
call fcn.10003a53
xor ecx, ecx
inc ecx
mov dword [ebp - 4], ecx
mov dword [ebp - 0x1c], ebx
mov dword [ebp - 0x1c], esi
mov dword [ebp - 0x14], ecx
mov dword [ebp - 0x1c], 0xfe497d6a
mov dword [ebp - 0x18], ebx
jmp 0x10039c6f
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x2c4], 0x788afb1c
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 2
jl 0x10039c5e
mov dword [ebp - 0x18], 0x6bec
cmp dword [ebp - 0x18], 0x6d2f
jle 0x10039d0a
mov dword [ebp - 0x2c], ebx
mov edi, ebx
mov esi, ebx
mov dword [ebp - 0x20], ebx
mov ecx, esi
mov dword [ebp - 0x30], 0x3e3d
mov esi, dword [ebp - 0x2c]
mov dword [ebp - 0x1c], ecx
mov eax, edi
xor eax, esi
xor eax, ecx
lea ecx, [ebp - 0x3e0]
cdq
push edx
push eax
call fcn.10001a65
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x10039cc0
mov eax, dword [eax]
push eax
call fcn.10043bf4
pop ecx
push ebx
push 1
lea ecx, [ebp - 0x3e0]
call fcn.100020a8
mov ecx, dword [ebp - 0x1c]
dec ecx
dec dword [ebp - 0x30]
mov dword [ebp - 0x1c], ecx
jne 0x10039ca2
mov esi, dword [ebp - 0x20]
inc esi
mov dword [ebp - 0x20], esi
cmp esi, 0x593
jl 0x10039c93
inc edi
cmp edi, 0x1603
jl 0x10039c8e
mov eax, dword [ebp - 0x2c]
inc eax
mov dword [ebp - 0x2c], eax
cmp eax, 0x25cd
jl 0x10039c8c
xor ecx, ecx
inc ecx
cmp dword [ebp - 0x24], ebx
je 0x10039d19
mov edx, ecx
cmp dword [ebp - 0x2c4], ebx
jne 0x10039d1b
mov edx, ebx
mov eax, dword [ebp - 0x28]
sub edx, eax
jne 0x10039d27
cmp dword [ebp - 0x24], ebx
je 0x10039d2c
cmp dword [ebp - 0x14], ebx
jne 0x10039d2e
mov ecx, ebx
mov dword [ebp - 0x1c], ecx
cmp dword [ebp - 0x18], 0x6849
jge 0x10039d45
push str.nuxyus_zyxzsrkfx_kemzzz_rnshh_ydmzkkyjd_gpdsdep_vre_sxrjmz
call fcn.10043bf4
pop ecx
mov dword [ebp - 4], 1
lea ecx, [ebp - 0x2bc]
xor eax, eax
mov dword [ebp - 0x2a8], 7
mov word [ebp - 0x2bc], ax
lea eax, [ebp - 0x22c]
push eax
mov dword [ebp - 0x2ac], ebx
call fcn.100174ef
mov byte [ebp - 4], 0xa
lea ecx, [ebp - 0x298]
xor eax, eax
mov dword [ebp - 0x284], 7
mov word [ebp - 0x298], ax
lea eax, [ebp - 0x2e8]
push eax
mov dword [ebp - 0x288], ebx
call fcn.100174ef
lea eax, [ebp - 0x298]
push eax
lea ecx, [ebp - 0x398]
call fcn.10003dc8
lea eax, [ebp - 0x2bc]
push eax
lea ecx, [ebp - 0x380]
call fcn.10003dc8
push ebx
push 1
lea ecx, [ebp - 0x298]
call fcn.10002214
push ebx
push 1
lea ecx, [ebp - 0x2bc]
call fcn.10002214
mov byte [ebp - 4], 0xb
lea eax, [ebp - 0x368]
push dword [ebp - 0x48]
lea ecx, [ebp - 0x168]
mov dword [ebp - 0x168], ebx
push eax
lea eax, [ebp - 0x398]
mov dword [ebp - 0x164], ebx
push eax
push ebx
mov dword [ebp - 0x160], ebx
call fcn.1003bab7
push fcn.100220ac
push 1
push 0x30
lea eax, [ebp - 0x398]
mov byte [ebp - 4], 0xd
push eax
call fcn.1004372b
xor eax, eax
lea edi, [ebp - 0x2e8]
push 7
pop ecx
rep stosd dword es:[edi], eax
lea edi, [ebp - 0x22c]
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosw word es:[edi], ax
mov dword [ebp - 0x14], 0xe7d8a870
mov dword [ebp - 0x1fc], 0x7b568be1
mov dword [ebp - 0x18], ebx
jmp 0x10039e6e
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x1ec], ebx
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 2
jl 0x10039e61
mov dword [ebp - 0x14], ebx
xor eax, eax
inc eax
cmp dword [ebp - 0x14], eax
jg 0x10039f95
mov dword [ebp - 0x24], 0x5b3b9da4
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], ebx
jl 0x10039f6f
mov dword [ebp - 0x18], ebx
mov dword [ebp - 0x18], ebx
jmp 0x10039eaf
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x1ec], 0xfffffff8
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 2
jl 0x10039e9e
mov dword [ebp - 0x30], 0x7835
cmp dword [ebp - 0x30], 0x7b91
jle 0x10039f10
mov esi, ebx
mov dword [ebp - 0x1c], esi
mov dword [ebp - 0x2c], 0x99c
mov edi, ebx
mov ebx, dword [ebp - 0x1c]
mov eax, edi
mov ecx, 0x10076b78
xor eax, ebx
cdq
push edx
push eax
call fcn.10001c56
inc edi
cmp edi, 0x7b04
jl 0x10039ed6
dec ebx
dec dword [ebp - 0x2c]
push 0
mov dword [ebp - 0x1c], ebx
pop ebx
jne 0x10039ed1
inc esi
cmp esi, 0x99e
jl 0x10039ec7
push ebx
push ebx
push ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_GetProcessTimes]
mov eax, dword [ebp - 0x24]
mov ecx, dword [ebp + eax*4 - 0x1ec]
mov eax, dword [ebp - 0x14]
neg ecx
mov dword [ebp + eax*4 - 0x1ec], ecx
mov byte [ebp - 4], 0xe
cmp dword [ebp - 0x30], 0x7802
jge 0x10039f60
mov edx, str.yehhikky_lavfhqqov_eabkfcwp_wbyppatze
mov ecx, 0x10076b78
call fcn.10003a53
jmp 0x10039f60
mov dword [ebp - 4], 0xd
dec dword [ebp - 0x24]
jmp 0x10039e8d
push 1
push ecx
push 0x6dae
push ecx
push 0x3787
push ecx
push ecx
lea ecx, [ebp - 0x1fc]
call fcn.10039112
add esp, 0x1c
inc dword [ebp - 0x14]
jmp 0x10039e77
push ecx
push ecx
lea ecx, [ebp + 8]
push ecx
push eax
push ecx
lea eax, [ebp - 0x168]
mov ecx, 0x52f8
push eax
call fcn.10039368
add esp, 0x18
mov dword [ebp - 0x210], 0xfffffff9
lea eax, [ebp - 0x1f8]
mov dword [ebp - 0x1f8], 0xfffffff6
or esi, 0xffffffff
mov dword [ebp - 0x1c8], esi
push eax
push ebx
lea eax, [ebp - 0x1c8]
mov dword [ebp - 0x20c], 0xfe662db8
push eax
lea eax, [ebp - 0x1dc]
mov dword [ebp - 0x200], 9
push eax
lea eax, [ebp - 0x210]
mov dword [ebp - 0x214], 0x493e623b
push eax
lea eax, [ebp - 0x20c]
mov dword [ebp - 0x1dc], 0xb5d1cb6a
push eax
push ecx
lea eax, [ebp - 0x214]
mov ecx, 0x7f5a
push eax
lea eax, [ebp - 0x200]
push eax
call fcn.1003904c
add esp, 0x24
mov byte [ebp - 0x3e], bl
lea ecx, [ebp - 0x3e]
push ebx
call fcn.10039177
mov dword [ebp - 0x28], 0x7478144a
mov dword [ebp - 0x28], 0x5f0ed1ad
pop ecx
mov dword [ebp - 0x14], ebx
jmp 0x1003a067
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x1f4], 0xdf75
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], 1
jl 0x1003a056
mov dword [ebp - 0x14], ebx
jmp 0x1003a080
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x4c], 3
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], 1
jl 0x1003a072
mov dword [ebp - 0x4c], ebx
cmp dword [ebp - 0x4c], ebx
jl 0x1003a0be
mov eax, dword [ebp - 0x4c]
xor ecx, ecx
push 1
push 0x1c2c
push 0x38e0
mov eax, dword [ebp + eax*4 - 0x1f4]
cmp eax, 0x1d832937
sete cl
mov dword [ebp - 0x28], ecx
call fcn.1003912f
add esp, 0xc
dec dword [ebp - 0x4c]
jns 0x1003a08e
push ebx
push 0x6265
push 0xc855
call fcn.100163fe
pop ecx
pop ecx
call eax
mov dword [ebp - 0x1c], 0x662d
cmp dword [ebp - 0x1c], 0x67b0
jle 0x1003a10e
mov esi, ebx
mov edi, ebx
mov ecx, edi
mov eax, esi
sar eax, cl
mov ecx, 0x10076b78
cdq
push edx
push eax
call fcn.10001c56
inc edi
cmp edi, 0x4d28
jl 0x1003a0e6
inc esi
cmp esi, 0x21c7
jl 0x1003a0e4
or esi, 0xffffffff
mov dword [ebp - 0x20], 0x7d8e
mov byte [ebp - 4], 0x10
cmp dword [ebp - 0x1c], 0x63c8
jge 0x1003a152
mov edx, str.lzmp_wztlbmxpt_tdrkpag_qrpxki_pfzq_zoaien_ewikyaho_uow_hqe_yrwysufdk
mov ecx, 0x10076b78
call fcn.10003a53
jmp 0x1003a152
mov dword [ebp - 4], 0xd
mov dword [ebp - 0x28], ebx
mov dword [ebp - 0x1c], 7
mov dword [ebp - 0x14], ebx
jmp 0x1003a175
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x1e4], esi
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], 1
jl 0x1003a168
mov dword [ebp - 0x14], ebx
jmp 0x1003a191
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x328], 4
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], 3
jl 0x1003a180
mov eax, dword [ebp - 0x20]
inc dword [ebp - 0x1c]
mov edx, dword [ebp - 0x28]
add edx, dword [ebp - 0x20]
mov eax, dword [ebp - 0x1e4]
mov ecx, dword [ebp - 0x20]
sub eax, 0xccde
sub edx, eax
neg edx
sbb edx, edx
inc edx
sub ecx, edx
sub ecx, dword [ebp - 0x20]
neg ecx
sbb ecx, ecx
xor eax, eax
inc ecx
cmp ecx, 0xb0bf
setge al
mov dword [ebp - 0x320], eax
mov dword [ebp - 0x1c], 0x480c
cmp dword [ebp - 0x1c], 0x4897
jle 0x1003a20c
mov esi, ebx
mov edi, ebx
mov ecx, edi
mov eax, esi
sar eax, cl
mov ecx, 0x10076b78
cdq
push edx
push eax
call fcn.10001c56
inc edi
cmp edi, 0x56fc
jl 0x1003a1e7
inc esi
cmp esi, 0x1839
jl 0x1003a1e5
mov byte [ebp - 4], 0x12
cmp dword [ebp - 0x1c], 0x4465
jge 0x1003a246
mov edx, str.axvgb_cgm_cidotx_jfvum_ocajpr_varnehgbg_kegnrgxys_jceuecvpf_sdjw_iuvighlw_tchky_xqaepmf
mov ecx, 0x10076b78
call fcn.10003a53
jmp 0x1003a246
mov dword [ebp - 4], 0xd
mov dword [ebp - 0x20], 0x2667a876
mov dword [ebp - 0x28], 0xfffffffc
mov dword [ebp - 0x18], ebx
jmp 0x1003a271
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x31c], 0xfdf99ff6
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 3
jl 0x1003a260
mov dword [ebp - 0x20], ebx
cmp dword [ebp - 0x20], 2
jg 0x1003a32d
mov dword [ebp - 0x28], 0x3292c5eb
mov dword [ebp - 0x1c], 0x7669
cmp dword [ebp - 0x1c], 0x7707
jle 0x1003a2e1
mov edi, ebx
mov esi, ebx
lea eax, [esi + edi]
cdq
lea ecx, [ebp - 0x3c8]
push edx
push eax
call fcn.10001a65
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x1003a2ba
mov eax, dword [eax]
push eax
call fcn.10043bf4
pop ecx
push ebx
push 1
lea ecx, [ebp - 0x3c8]
call fcn.100020a8
inc esi
cmp esi, 0x608f
jl 0x1003a29f
inc edi
cmp edi, 0x47cd
jl 0x1003a29d
cmp dword [ebp - 0x1c], 0x72ec
jge 0x1003a2f5
push str.vemw_fmqvgpg_jqfte_iok_bjsznkuql_iiemzsrx_cmetl_evpcl_mxhgcun_fdoaub_huerx_dplng_rag_qvu
call fcn.10043bf4
pop ecx
mov dword [ebp - 4], 0xd
mov byte [ebp - 0x40], bl
cmp byte [ebp - 0x40], 0
je 0x1003a314
push ecx
push 0xe27
mov dl, 1
call fcn.1003919d
pop ecx
pop ecx
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x318]
neg eax
sbb eax, eax
inc eax
mov dword [ebp - 0x28], eax
inc dword [ebp - 0x20]
jmp 0x1003a27a
push 0x37
pop ecx
xor eax, eax
mov word [ebp - 0x422], cx
push 2
mov ecx, ebx
mov word [ebp - 0x280], ax
mov dword [ebp - 0x3c], ebx
mov al, 0x1f
mov dword [ebp - 0xf0], 0xf24a41f
mov dword [ebp - 0xec], 0x2210c0c
mov dword [ebp - 0xe8], 0x750f7208
mov dword [ebp - 0xe4], 0xd22050a
mov dword [ebp - 0xe0], 0x7523091a
mov dword [ebp - 0xdc], 0xd0d7117
mov byte [ebp - 0xd8], 0x20
mov byte [ebp - 0xd7], bl
mov dword [ebp - 0xd6], 0x8070906
mov dword [ebp - 0xd2], 0x761e0819
mov byte [ebp - 0xce], bl
mov dword [ebp - 0xcd], 0x16381b3d
mov dword [ebp - 0xc9], 0x1d050202
mov dword [ebp - 0xc5], 0x10050570
mov byte [ebp - 0xc1], bl
mov dword [ebp - 0xc0], 0x1e09020b
mov dword [ebp - 0xbc], 0x1141503
mov dword [ebp - 0xb8], 0x72157a04
mov dword [ebp - 0xb4], 0x212011c
mov dword [ebp - 0xb0], 0xe8c7502
mov word [ebp - 0xac], 0x131f
mov byte [ebp - 0xaa], bl
mov dword [ebp - 0xa9], 0x39256911
mov dword [ebp - 0xa5], 0x68015018
pop esi
mov dword [ebp - 0x20], ecx
mov dword [ebp - 0x24], esi
mov dword [ebp - 0x18], esi
cmp esi, 0x4f
jae 0x1003a605
movzx eax, al
lea eax, [eax*2 + 2]
cmp esi, eax
jne 0x1003a4f9
movzx eax, byte [ebp + esi - 0xf0]
dec esi
add esi, eax
mov dword [ebp - 0x28], 0x9c3
cmp dword [ebp - 0x28], 0xc85
mov dword [ebp - 0x18], esi
lea ecx, [eax + 1]
mov dword [ebp - 0x20], ecx
jle 0x1003a5f7
mov eax, ebx
mov dword [ebp - 0x2c], ebx
mov ecx, ebx
mov dword [ebp - 0x24], ebx
cdq
mov edi, ebx
idiv ecx
mov eax, edx
mov dword [ebp - 0x30], eax
mov esi, ebx
mov dword [ebp - 0x1c], 0x1b6c
and eax, esi
lea ecx, [ebp - 0x410]
cdq
push edx
push eax
call fcn.10001a65
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x1003a4a9
mov eax, dword [eax]
push eax
call fcn.10043bf4
pop ecx
push ebx
push 1
lea ecx, [ebp - 0x410]
call fcn.100020a8
mov eax, dword [ebp - 0x30]
add esi, edi
dec dword [ebp - 0x1c]
jne 0x1003a48f
inc edi
cmp edi, 0xadc
jl 0x1003a486
mov ecx, dword [ebp - 0x24]
mov eax, dword [ebp - 0x2c]
inc ecx
mov dword [ebp - 0x24], ecx
cmp ecx, 0x6412
jl 0x1003a47c
inc eax
mov dword [ebp - 0x2c], eax
cmp eax, 0x3d31
jl 0x1003a477
mov esi, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x20]
jmp 0x1003a5f7
mov dword [ebp - 0x1c], 0x5272
cmp dword [ebp - 0x1c], 0x5650
jle 0x1003a57a
mov dword [ebp - 0x30], ebx
mov dword [ebp - 0x2c], ebx
mov esi, ebx
mov edi, ebx
mov ebx, dword [ebp - 0x2c]
mov eax, esi
cdq
idiv edi
mov eax, ebx
mov ecx, edx
shl eax, cl
mov ecx, 0x10076b78
or eax, dword [ebp - 0x30]
cdq
push edx
push eax
call fcn.10001c56
inc edi
cmp edi, 0x73db
jl 0x1003a516
inc esi
push 0
pop ebx
cmp esi, 0x2916
jl 0x1003a511
mov eax, dword [ebp - 0x2c]
inc eax
mov dword [ebp - 0x2c], eax
cmp eax, 0x5a38
jl 0x1003a50f
mov ecx, dword [ebp - 0x30]
inc ecx
mov dword [ebp - 0x30], ecx
cmp ecx, 0xce
jl 0x1003a50c
push 0x1cd7
push 0x134
push ebx
call dword [sym.imp.USER32.dll_InflateRect]
mov esi, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x20]
movzx edx, byte [ebp + esi - 0xef]
mov eax, esi
sub eax, ecx
movzx eax, byte [ebp + eax - 0xf2]
movzx eax, word [ebp + eax*2 - 0x460]
mov ecx, eax
and eax, edx
or ecx, edx
sub ecx, eax
movzx eax, byte [ebp + esi - 0xf0]
mov byte [ebp - 4], 0x18
cmp dword [ebp - 0x1c], 0x4ef0
mov word [ebp + eax*2 - 0x460], cx
jge 0x1003a5eb
mov edx, str.rbirajf_acjifenea_syfpphf_mju_gvvkzbcfa_kjcr_gxqjhqtg_xctrtmxa_outs_uznapct_ywqemzj
mov ecx, 0x10076b78
call fcn.10003a53
jmp 0x1003a5eb
mov dword [ebp - 4], 0xd
mov ecx, ebx
mov dword [ebp - 0x20], ebx
mov al, byte [ebp - 0xf0]
add esi, 2
jmp 0x1003a429
xor eax, eax
mov dword [ebp - 0x230], 7
mov word [ebp - 0x414], ax
lea ecx, [ebp - 0x244]
mov word [ebp - 0x244], ax
lea eax, [ebp - 0x460]
push eax
mov dword [ebp - 0x234], ebx
call fcn.100174ef
mov byte [ebp - 4], 0x1a
mov dword [ebp - 0x1c], 0x1ba0
mov dword [ebp - 0x24], 0xffffffff
mov dword [ebp - 0x14], 0xdfb1af9d
mov dword [ebp - 0x20], 0xfff6
mov dword [ebp - 0x30], 0xfffffffa
mov dword [ebp - 0x2c], 0x60abed99
mov dword [ebp - 0x18], ebx
jmp 0x1003a67b
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x174], 0x72b90f99
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 3
jl 0x1003a66a
mov eax, dword [ebp - 0x1c]
xor edx, edx
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x16c]
cmp eax, 0xbbbd
mov eax, dword [ebp - 0x170]
setne dl
xor ecx, ecx
cmp edx, eax
setle cl
imul eax, ecx, 0xfffffffc
cmp eax, 0x6173
jle 0x1003a6b4
mov eax, dword [ebp - 0x16c]
mov eax, dword [ebp - 0x174]
xor edx, edx
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x14]
sub eax, dword [ebp - 0x14]
add eax, dword [ebp - 0x24]
mov dword [ebp - 0x20], eax
mov dword [ebp - 0x30], 1
mov eax, dword [ebp - 0x16c]
imul ecx, eax, 0xfffffffa
mov eax, dword [ebp - 0x24]
cmp ecx, eax
sete dl
mov dword [ebp - 0x2c], edx
mov eax, dword [ebp - 0x16c]
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x14]
mov dword [ebp - 0x30], eax
mov ecx, dword [ebp - 0x30]
mov eax, dword [ebp - 0x16c]
dec eax
add eax, ecx
jne 0x1003a731
cmp dword [ebp - 0x24], ebx
jne 0x1003a731
mov dword [ebp - 0x1c], 6
mov dword [ebp - 0x14], ebx
jmp 0x1003a726
mov eax, dword [ebp - 0x14]
cmp dword [ebp + eax*4 - 0x174], ebx
jne 0x1003a72c
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], 2
jle 0x1003a717
inc dword [ebp - 0x1c]
jmp 0x1003a7ac
mov dword [ebp - 0x1c], 0x9b924e19
mov dword [ebp - 0x28], 0xc2cfccff
mov dword [ebp - 0x18], ebx
jmp 0x1003a755
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x1a0], 3
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 2
jl 0x1003a744
mov eax, dword [ebp - 0x20]
sub eax, dword [ebp - 0x20]
neg eax
sbb eax, eax
inc eax
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cmp eax, dword [ebp - 0x30]
jge 0x1003a779
cmp dword [ebp - 0x19c], ebx
je 0x1003a77c
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp - 0x19c]
xor ecx, ecx
mov eax, dword [ebp - 0x19c]
test eax, eax
sets cl
cmp ecx, dword [ebp - 0x19c]
jge 0x1003a79a
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0x2c]
neg eax
sbb eax, eax
neg eax
mov dword [ebp - 0x2c], eax
mov eax, dword [ebp - 0x2c]
mov dword [ebp - 0x28], eax
push 0x13
xor eax, eax
lea edi, [ebp - 0x460]
pop ecx
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
mov eax, 0x249687fd
mov dword [ebp - 0x18], 0x1f66
mov dword [ebp - 0x24], 0x971867b8
mov dword [ebp - 0x28], 0xfffffff8
mov dword [ebp - 0x26c], eax
mov dword [ebp - 0x268], eax
mov dword [ebp - 0x264], eax
mov dword [ebp - 0x260], eax
mov dword [ebp - 0x2c], 0xbdae
mov dword [ebp - 0x30], 4
mov dword [ebp - 0x20], 0xeea
cmp dword [ebp - 0x20], 0xf13
jle 0x1003a857
mov eax, ebx
mov dword [ebp - 0x1c], ebx
mov esi, ebx
mov dword [ebp - 0x30], ebx
mov ecx, esi
mov dword [ebp - 0x14], ebx
mov edi, eax
mov esi, ebx
sar edi, cl
mov eax, edi
mov ecx, 0x10076b78
and eax, esi
cdq
push edx
push eax
call fcn.10001c56
inc esi
cmp esi, 0x6859
jl 0x1003a820
mov esi, dword [ebp - 0x30]
mov eax, dword [ebp - 0x1c]
inc esi
mov dword [ebp - 0x30], esi
cmp esi, 0x4162
jl 0x1003a815
inc eax
mov dword [ebp - 0x1c], eax
cmp eax, 0x787b
jl 0x1003a810
mov dword [ebp - 0x1c], 0xe07df7dc
mov byte [ebp - 4], 0x1b
cmp dword [ebp - 0x20], 0xcd6
jge 0x1003a898
mov edx, str.vckmlr_dswqxk_cyjyqq_jqfl_joj_nzlo_nxdkj_esdztez
mov ecx, 0x10076b78
call fcn.10003a53
jmp 0x1003a898
mov dword [ebp - 4], 0x1a
or edi, 0xffffffff
mov dword [ebp - 0x20], 0x15ea3766
mov dword [ebp - 0x14], ebx
jmp 0x1003a8bf
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x304], 0xfffffff9
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], 3
jl 0x1003a8ae
mov dword [ebp - 0x14], ebx
jmp 0x1003a8db
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x2cc], 0x61940c9b
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], 2
jl 0x1003a8ca
mov dword [ebp - 0x14], ebx
jmp 0x1003a8f7
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x2a4], 0xfc1c5751
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], 3
jl 0x1003a8e6
mov eax, dword [ebp - 0x24]
xor ecx, ecx
mov eax, dword [ebp - 0x18]
test eax, eax
mov dword [ebp - 0x304], eax
mov eax, dword [ebp - 0x24]
setne cl
add eax, ecx
je 0x1003a91a
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x18]
mov ecx, 0xf9a8551b
cmp ecx, eax
mov eax, dword [ebp - 0x18]
sbb ecx, ecx
add ecx, 0xffff1d9c
neg ecx
sbb ecx, ecx
xor edx, edx
inc ecx
cmp ecx, eax
setl dl
xor ecx, ecx
imul edx, dword [ebp - 0x24]
mov eax, dword [ebp - 0x28]
cmp edx, eax
setne cl
xor edx, edx
add ecx, 0x640a1b28
mov dword [ebp - 0x2cc], ecx
mov dword [ebp - 0x26c], ecx
mov dword [ebp - 0x2a0], ecx
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x24]
cmp ecx, eax
mov eax, dword [ebp - 0x18]
setge dl
sub eax, edx
mov dword [ebp - 0x30], eax
jne 0x1003a97e
mov eax, dword [ebp - 0x2c]
mov edx, dword [ebp - 0x24]
mov eax, dword [ebp - 0x2a0]
neg edx
sbb edx, edx
xor ecx, ecx
inc edx
cmp edx, eax
setne cl
xor eax, eax
cmp ecx, 0xb19d
setne al
sub eax, 0x1359a703
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
mov ecx, dword [ebp - 0x18]
sub ecx, eax
neg ecx
sbb ecx, ecx
inc ecx
mov dword [ebp - 0x20], ecx
cmp dword [ebp - 0x24], ebx
je 0x1003a9d4
mov eax, dword [ebp - 0x24]
cmp dword [ebp - 0x18], ebx
je 0x1003a9c6
mov eax, dword [ebp - 0x30]
mov eax, dword [ebp - 0x1c]
cmp dword [ebp - 0x20], 0xfffffff8
jle 0x1003a9d4
xor edx, edx
inc edx
jmp 0x1003a9d6
mov edx, ebx
mov eax, dword [ebp - 0x2c]
xor ecx, ecx
cmp edx, eax
mov dword [ebp - 0x140], 0x2116f1e
push 0x46
sete cl
mov dword [ebp - 0x13c], 0x74070117
xor eax, eax
mov dword [ebp - 0x138], 0x5080215
cmp ecx, 0xaee4
mov dword [ebp - 0x134], 0x6020621
mov ecx, ebx
mov dword [ebp - 0x130], 0xd240f04
setge al
mov dword [ebp - 0x12c], 0x10b7622
mov dword [ebp - 0x30], eax
pop eax
push 2
mov word [ebp - 0x128], 0x703
mov byte [ebp - 0x126], bl
mov dword [ebp - 0x125], 0xe4b1a3f
mov dword [ebp - 0x121], 0xa1f161d
mov dword [ebp - 0x11d], 0x230a0d0b
mov dword [ebp - 0x119], 0xf6f1871
mov dword [ebp - 0x115], 0xc1c131c
mov dword [ebp - 0x111], 0x2075141a
mov dword [ebp - 0x10d], 0x1c44257b
mov dword [ebp - 0x109], 0x9041d4d
mov dword [ebp - 0x105], 0x36b0119
mov dword [ebp - 0x101], 0x1f3e5117
mov dword [ebp - 0xfd], 0x1009057f
mov dword [ebp - 0xf9], 0x1b770601
mov dword [ebp - 0xf5], 0x19701205
mov byte [ebp - 0xf1], 3
mov word [ebp - 0x474], ax
pop esi
mov dword [ebp - 0x154], ecx
cmp esi, 0x3e
jne 0x1003aaea
push 4
pop ecx
push 0x40
mov dword [ebp - 0x154], ecx
pop esi
jmp 0x1003ab3d
movzx edx, byte [ebp + esi - 0x13f]
mov eax, esi
sub eax, ecx
movzx eax, byte [ebp + eax - 0x142]
movzx ecx, word [ebp + eax*2 - 0x4b0]
mov eax, ecx
and eax, edx
add eax, eax
sub ecx, eax
movzx eax, byte [ebp + esi - 0x140]
add ecx, edx
xor dl, dl
push ecx
push 0x60d6
mov word [ebp + eax*2 - 0x4b0], cx
lea eax, [ebp - 0x154]
push eax
call fcn.10038d7d
mov ecx, dword [ebp - 0x154]
add esp, 0xc
add esi, 2
cmp esi, 0x50
jb 0x1003aad7
xor eax, eax
mov dword [ebp - 0x248], 7
mov word [ebp - 0x464], ax
lea ecx, [ebp - 0x25c]
mov word [ebp - 0x25c], ax
lea eax, [ebp - 0x4b0]
push eax
mov dword [ebp - 0x24c], ebx
call fcn.100174ef
mov byte [ebp - 4], 0x1d
xor edx, edx
mov dword [ebp - 0x18], 0xf6af1124
inc edx
mov dword [ebp - 0x14], edx
mov dword [ebp - 0x2c], 0xec93
mov dword [ebp - 0x18], 0xffffffee
cmp dword [ebp - 0x18], 0xffffffe7
jge 0x1003adb9
jmp 0x1003aba5
xor edx, edx
inc edx
mov dword [ebp - 0x24], 0xfffffff6
mov ecx, edi
mov dword [ebp - 0x20], edi
mov dword [ebp - 0x30], ebx
mov dword [ebp - 0x184], edx
mov dword [ebp - 0x180], edx
mov dword [ebp - 0x17c], edx
mov dword [ebp - 0x178], edx
mov dword [ebp - 0x28], edx
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x14]
cmp dword [ebp - 0x24], ebx
mov eax, edx
mov dword [ebp - 0x20], eax
mov eax, dword [ebp - 0x20]
sub ecx, eax
add ecx, dword [ebp - 0x14]
cmp ecx, 0x238e
jg 0x1003abf4
mov ecx, edx
cmp dword [ebp - 0x2c], ebx
jne 0x1003abf6
mov ecx, ebx
mov eax, dword [ebp - 0x2c]
xor edx, edx
sub ecx, eax
sub ecx, dword [ebp - 0x14]
mov eax, dword [ebp - 0x24]
cmp ecx, eax
mov eax, dword [ebp - 0x24]
setl dl
xor ecx, ecx
cmp edx, eax
setg cl
add ecx, 6
cmp ecx, 0xe8ce6fc2
jae 0x1003ac9b
mov dword [ebp - 0x1c], ebx
xor edx, edx
mov ecx, dword [ebp - 0x1c]
imul ecx, dword [ebp - 0x20]
mov eax, dword [ebp - 0x30]
cmp eax, ecx
setne dl
sub edx, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x14]
neg edx
sbb edx, edx
inc edx
mov dword [ebp - 0x28], edx
xor edx, edx
cmp dword [ebp - 0x28], 9
setle dl
xor ecx, ecx
cmp edx, eax
setne cl
add ecx, dword [ebp - 0x24]
imul eax, ecx, 0x7cc7
cmp dword [ebp - 0x20], eax
jg 0x1003ac60
mov eax, dword [ebp - 0x30]
mov eax, dword [ebp - 0x1c]
mov edx, 0xfcc013ce
mov dword [ebp - 0x20], eax
mov ecx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x2c]
add ecx, 0xa
neg ecx
sbb ecx, ecx
neg ecx
cmp edx, eax
sbb eax, eax
neg eax
cmp eax, ecx
je 0x1003ac90
cmp dword [ebp - 0x184], ebx
je 0x1003ac90
mov eax, ebx
jmp 0x1003ac93
xor eax, eax
inc eax
mov dword [ebp - 0x28], eax
jmp 0x1003ad94
mov dword [ebp - 0x20], 0xfffa
mov dword [ebp - 0x1c], 4
mov dword [ebp - 0x14], 3
cmp dword [ebp - 0x14], ebx
jl 0x1003ad94
push 0x1b19
push 0x7450
push 1
push 0x2b69
push 0x63d9
push 1
mov dword [ebp - 0x1c], edi
xor dl, dl
push 0x433e
mov ecx, 0x349e
call fcn.10038dcd
mov eax, dword [ebp - 0x28]
add esp, 0x1c
cmp eax, dword [ebp - 0x30]
jle 0x1003acfa
cmp dword [ebp - 0x24], ebx
je 0x1003acfa
xor eax, eax
inc eax
jmp 0x1003acfc
mov eax, ebx
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x17c], ebx
jne 0x1003ad13
cmp dword [ebp - 0x184], ebx
jne 0x1003ad13
mov ecx, ebx
jmp 0x1003ad16
xor ecx, ecx
inc ecx
mov eax, dword [ebp - 0x14]
xor edx, edx
mov eax, dword [ebp + eax*4 - 0x184]
cmp eax, ecx
mov eax, dword [ebp - 0x14]
setne dl
add edx, 0x7b47864
sub edx, dword [ebp + eax*4 - 0x184]
mov eax, dword [ebp - 0x14]
neg edx
sbb edx, edx
xor ecx, ecx
inc edx
mov eax, dword [ebp + eax*4 - 0x184]
cmp edx, eax
mov eax, dword [ebp - 0x20]
setne cl
xor edx, edx
cmp eax, ecx
mov eax, dword [ebp - 0x14]
setg dl
mov dword [ebp - 0x1c], edx
xor edx, edx
mov eax, dword [ebp + eax*4 - 0x184]
test eax, eax
mov eax, dword [ebp - 0x14]
sete dl
xor ecx, ecx
cmp edx, eax
setl cl
xor edx, edx
cmp ecx, dword [ebp - 0x1c]
setge dl
xor eax, eax
cmp edx, 0x7dff
setg al
mov dword [ebp - 0x1c], eax
dec dword [ebp - 0x14]
jns 0x1003acb9
push ecx
push 1
push ecx
lea eax, [ebp - 0x3d]
mov byte [ebp - 0x3d], bl
push eax
mov ecx, 0x2191
call fcn.10039258
add esp, 0x10
dec dword [ebp - 0x18]
cmp dword [ebp - 0x18], 0xffffffe7
jl 0x1003aba2
push 0x13
xor eax, eax
lea edi, [ebp - 0x4b0]
pop ecx
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
or edi, 0xffffffff
mov dword [ebp - 0x14], edi
mov dword [ebp - 0x30], 0x4c7a
cmp dword [ebp - 0x30], 0x4f36
jle 0x1003ae3f
call dword [sym.imp.KERNEL32.dll_GetEnvironmentStringsW]
mov edi, ebx
mov dword [ebp - 0x2c], ebx
mov dword [ebp - 0x28], ebx
mov dword [ebp - 0x1c], 0x3672
mov esi, ebx
mov ebx, dword [ebp - 0x28]
mov eax, ebx
mov ecx, 0x10076b78
cdq
idiv esi
xor edx, edi
mov eax, edx
cdq
push edx
push eax
call fcn.10001c56
inc esi
cmp esi, 0x1375
jl 0x1003adf8
mov esi, dword [ebp - 0x2c]
add ebx, esi
dec dword [ebp - 0x1c]
push 0
mov dword [ebp - 0x28], ebx
pop ebx
jne 0x1003adf3
inc esi
mov dword [ebp - 0x2c], esi
cmp esi, 0x7028
jl 0x1003ade9
inc edi
cmp edi, 0x253f
jl 0x1003ade6
or edi, 0xffffffff
mov dword [ebp - 0x28], ebx
mov byte [ebp - 4], 0x1e
cmp dword [ebp - 0x30], 0x49a6
jge 0x1003ae7f
mov edx, str.aca_yhxqnyq_yrb_pkxypfx_oez
mov ecx, 0x10076b78
call fcn.10003a53
jmp 0x1003ae7f
mov dword [ebp - 4], 0x1d
mov dword [ebp - 0x20], ebx
jmp 0x1003ae99
mov eax, dword [ebp - 0x20]
mov dword [ebp + eax*4 - 0x7c], 0xde0b4074
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], 2
jl 0x1003ae8b
mov dword [ebp - 0x14], 0xffffffef
jmp 0x1003aeb2
mov cl, 1
call fcn.1003927d
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], 3
je 0x1003aea8
mov dword [ebp - 0x14], ebx
jmp 0x1003afba
mov dword [ebp - 0x18], 3
xor ecx, ecx
mov eax, dword [ebp - 0x14]
push 0xfffffffffffffff7
mov edx, dword [ebp + eax*4 - 0x7c]
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp + eax*4 - 0x7c]
cmp edx, eax
setge cl
xor edx, edx
mov dword [ebp - 0x18], ecx
mov ecx, dword [ebp - 0x14]
mov eax, dword [ebp - 0x18]
cmp ecx, eax
setle dl
mov dword [ebp - 0x28], edx
cmp dword [ebp - 0x28], 0xfff8
sbb eax, eax
xor ecx, ecx
inc eax
cmp eax, 0x197e7c14
mov eax, dword [ebp - 0x18]
setge cl
xor edx, edx
cmp ecx, eax
setg dl
xor eax, eax
neg edx
cmp edx, 0x3b0639e6
setle al
xor ecx, ecx
mov dword [ebp - 0x28], eax
mov eax, dword [ebp - 0x78]
cmp eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x14]
setg cl
xor edx, edx
cmp ecx, 0x137d
mov eax, dword [ebp + eax*4 - 0x7c]
setne dl
xor ecx, ecx
cmp edx, eax
mov eax, dword [ebp - 0x78]
setg cl
xor edx, edx
cmp ecx, eax
mov eax, dword [ebp - 0x14]
setge dl
xor ecx, ecx
mov esi, dword [ebp + eax*4 - 0x7c]
mov eax, dword [ebp - 0x18]
cmp edx, eax
mov eax, dword [ebp - 0x18]
setl cl
xor edx, edx
imul esi, ecx
cmp esi, eax
mov eax, dword [ebp - 0x7c]
setl dl
xor ecx, ecx
sub edx, eax
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x7c], edx
mov eax, dword [ebp - 0x14]
cmp edx, eax
setle cl
xor eax, eax
cmp ecx, 1
pop ecx
setg al
cmp ecx, eax
mov eax, dword [ebp - 0x14]
sbb ecx, ecx
xor edx, edx
neg ecx
cmp ecx, eax
mov eax, dword [ebp - 0x18]
setne dl
cmp edi, edx
sbb ecx, ecx
neg ecx
xor edx, edx
cmp ecx, eax
mov eax, dword [ebp - 0x14]
setne dl
xor ecx, ecx
cmp edx, eax
setge cl
mov dword [ebp - 0x18], ecx
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], 1
jle 0x1003aec0
cmp dword [ebp - 0x230], 8
lea ecx, [ebp - 0x358]
push ecx
lea eax, [ebp - 0x244]
mov esi, 0x91b9
cmovae eax, dword [ebp - 0x244]
push eax
push 0x6265
push esi
call fcn.100163fe
pop ecx
pop ecx
call eax
test eax, eax
jne 0x1003b50d
cmp dword [ebp - 0x248], 8
lea ecx, [ebp - 0x348]
push ecx
lea eax, [ebp - 0x25c]
cmovae eax, dword [ebp - 0x25c]
push eax
push 0x6265
push esi
call fcn.100163fe
pop ecx
pop ecx
call eax
test eax, eax
jne 0x1003b50d
lea eax, [ebp - 0x3c]
push eax
lea eax, [ebp - 0x358]
push eax
push 3
push ebx
lea eax, [ebp - 0x348]
push eax
push 0x6265
push 0xa791
call fcn.100163fe
pop ecx
pop ecx
call eax
test eax, eax
js 0x1003b50d
cmp dword [ebp - 0x3c], 0
je 0x1003b50d
push ecx
push ecx
push 0x1742
push ebx
push ecx
push 0x2ae9
lea ecx, [ebp - 0x2f8]
call fcn.10039368
add esp, 0x18
mov dword [ebp - 0x5c], 0x1101c702
xor eax, eax
mov byte [ebp - 0x58], bl
mov word [ebp - 0x2f0], ax
mov ecx, ebx
mov dword [ebp - 0x57], 0xfcf30422
push 0x74
pop eax
push 2
mov word [ebp - 0x53], 0x3a27
mov word [ebp - 0x158], ax
pop esi
cmp esi, 6
jne 0x1003b0c1
push 5
pop ecx
push 9
pop esi
jmp 0x1003b0f0
movzx edx, byte [ebp + esi - 0x5b]
mov eax, esi
sub eax, ecx
movzx eax, byte [ebp + eax - 0x5e]
movzx ecx, word [ebp + eax*2 - 0x15c]
mov eax, ecx
and eax, edx
add eax, eax
sub ecx, eax
movzx eax, byte [ebp + esi - 0x5c]
add ecx, edx
mov word [ebp + eax*2 - 0x15c], cx
mov ecx, ebx
add esi, 2
cmp esi, 0xb
jb 0x1003b0b4
xor eax, eax
mov dword [ebp - 0x1a4], 7
mov word [ebp - 0x156], ax
lea ecx, [ebp - 0x1b8]
mov word [ebp - 0x1b8], ax
lea eax, [ebp - 0x15c]
push eax
mov dword [ebp - 0x1a8], ebx
call fcn.100174ef
mov byte [ebp - 4], 0x20
lea ecx, [ebp - 0x1b8]
cmp dword [ebp - 0x1a4], 8
mov eax, dword [ebp - 0x1a8]
cmovae ecx, dword [ebp - 0x1b8]
push dword [ebp - 0x48]
mov dword [ebp - 0x15c], ebx
mov dword [ebp - 0x158], ebx
lea eax, [ecx + eax*2]
mov dword [ebp - 0x1d4], ebx
lea ecx, [ebp - 0x1b8]
mov dword [ebp - 0x1d0], ebx
cmovae ecx, dword [ebp - 0x1b8]
push eax
push ecx
lea ecx, [ebp - 0x1d4]
mov dword [ebp - 0x1cc], ebx
call fcn.10021f3f
push ecx
lea eax, [ebp - 0x1d4]
mov byte [ebp - 4], 0x21
push eax
xor dl, dl
call fcn.1003919d
pop ecx
pop ecx
mov ecx, dword [ebp - 0x74]
mov esi, dword [ecx + 0x14]
cmp esi, 8
jb 0x1003b1aa
mov edx, dword [ecx]
jmp 0x1003b1ac
mov edx, ecx
mov eax, dword [ecx + 0x10]
lea eax, [edx + eax*2]
cmp esi, 8
jb 0x1003b1b9
mov ecx, dword [ecx]
push dword [ebp - 0x48]
mov dword [ebp - 0x1c4], ebx
push eax
push ecx
lea ecx, [ebp - 0x1c4]
mov dword [ebp - 0x1c0], ebx
mov dword [ebp - 0x1bc], ebx
call fcn.10021f3f
push 0x6032
push 0x7e49
push 0x70f6
push ebx
push 0x4848
lea eax, [ebp - 0x1c4]
mov byte [ebp - 4], 0x22
push eax
push 1
mov dl, 1
mov ecx, 0x7e5c
call fcn.10039395
cmp dword [ebp - 0x1a4], 8
lea edx, [ebp - 0x1b8]
lea esi, [ebp - 0x280]
mov eax, dword [ebp - 0x3c]
cmovae edx, dword [ebp - 0x1b8]
add esp, 0xc
mov edi, esp
sub esp, 0x10
mov ecx, dword [eax]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
mov edi, esp
lea esi, [ebp - 0x280]
sub esp, 0x10
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
mov edi, esp
lea esi, [ebp - 0x2f8]
push dword [ebp - 0x1c4]
push edx
movsd dword es:[edi], dword [esi]
push eax
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
call dword [ecx + 0x1c]
test eax, eax
js 0x1003b4d6
mov esi, dword [ebp - 0x168]
mov cl, 1
mov dword [ebp - 0x144], ebx
cmp esi, dword [ebp - 0x164]
je 0x1003b2c2
add esi, 0x18
test cl, cl
je 0x1003b2aa
cmp dword [esi + 0x14], 8
jb 0x1003b289
mov edi, dword [esi]
jmp 0x1003b28b
mov edi, esi
cmp dword [esi - 4], 8
jb 0x1003b296
mov edx, dword [esi - 0x18]
jmp 0x1003b299
lea edx, [esi - 0x18]
mov eax, dword [ebp - 0x3c]
push edi
push edx
push eax
mov ecx, dword [eax]
call dword [ecx + 0x20]
mov cl, 1
test eax, eax
jns 0x1003b2ac
mov cl, bl
add esi, 0x30
lea eax, [esi - 0x18]
cmp eax, dword [ebp - 0x164]
jne 0x1003b27b
test cl, cl
je 0x1003b4d6
mov eax, dword [ebp - 0x3c]
lea esi, [ebp - 0x280]
sub esp, 0x10
mov edi, esp
mov ecx, dword [eax]
push eax
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
call dword [ecx + 0x2c]
test eax, eax
js 0x1003b4d6
mov eax, dword [ebp - 0x3c]
lea edx, [ebp - 0x144]
push edx
push eax
mov ecx, dword [eax]
call dword [ecx + 0x34]
test eax, eax
js 0x1003b4d6
cmp dword [ebp - 0x144], 0x130
je 0x1003b316
cmp dword [ebp - 0x144], 0xc8
jne 0x1003b4d6
mov eax, dword [ebp - 0x3c]
lea edx, [ebp - 0x368]
push edx
push eax
mov ecx, dword [eax]
call dword [ecx + 0x48]
test eax, eax
js 0x1003b4d6
mov esi, dword [ebp - 0x360]
mov dword [ebp - 0x48], esi
test esi, esi
je 0x1003b4d6
mov eax, dword [esi]
lea ecx, [ebp - 0x4f8]
push 1
push ecx
push esi
call dword [eax + 0x30]
test eax, eax
js 0x1003b410
mov eax, dword [ebp - 0x4f0]
push ecx
mov dword [ebp - 0x38], eax
lea eax, [ebp - 0x190]
push ecx
push eax
lea eax, [ebp - 0x38]
xor cl, cl
push eax
call fcn.10038f57
mov edx, dword [ebp - 0x38]
mov ecx, ebx
add esp, 0x10
mov dword [ebp - 0x50], edx
mov dword [ebp - 0x150], ebx
mov dword [ebp - 0x14c], ecx
mov eax, dword [ebp - 0x190]
lea edi, [ebp - 0x150]
push edi
add eax, ecx
mov ecx, dword [esi]
push edx
push eax
push esi
call dword [ecx + 0xc]
test eax, eax
js 0x1003b3e1
push ebx
lea eax, [ebp - 0x14c]
push eax
mov eax, edi
push eax
call fcn.1003912f
add esp, 0xc
lea eax, [ebp - 0x50]
push ebx
push ecx
push eax
push ecx
mov eax, edi
push eax
push ecx
push ecx
mov ecx, 0x3b94
call fcn.10039112
mov ecx, dword [ebp - 0x14c]
add esp, 0x1c
cmp ecx, dword [ebp - 0x38]
jae 0x1003b3e1
mov edx, dword [ebp - 0x50]
jmp 0x1003b38a
lea eax, [ebp - 0x38]
mov dl, 1
push eax
lea eax, [ebp - 0x190]
mov ecx, 0x5f6a
push eax
push 0x1db2
push 1
lea eax, [ebp - 0x14c]
push eax
push 0x442
push 1
call fcn.10039395
add esp, 0x1c
push ecx
lea eax, [ebp - 0x48]
mov dl, 1
push eax
push 0xb7c
call fcn.10038d7d
mov dword [ebp - 0x28], 0x5f7e
add esp, 0xc
cmp dword [ebp - 0x28], 0x5ffb
jle 0x1003b495
mov ecx, ebx
mov dword [ebp - 0x38], ebx
mov edi, ebx
mov dword [ebp - 0x50], ebx
mov esi, ebx
mov eax, edi
mov dword [ebp - 0x48], ebx
cdq
mov ebx, ecx
idiv esi
mov edi, dword [ebp - 0x48]
mov ecx, edx
sar ebx, cl
mov eax, ebx
mov ecx, 0x10076b78
and eax, edi
cdq
push edx
push eax
call fcn.10001c56
inc edi
cmp edi, 0x2308
jl 0x1003b451
mov edi, dword [ebp - 0x50]
inc esi
mov ecx, dword [ebp - 0x38]
push 0
pop ebx
cmp esi, 0x6d9c
jl 0x1003b440
inc edi
mov dword [ebp - 0x50], edi
cmp edi, 0x65b
jl 0x1003b43e
inc ecx
mov dword [ebp - 0x38], ecx
cmp ecx, 0x4331
jl 0x1003b439
mov byte [ebp - 4], 0x23
cmp dword [ebp - 0x28], 0x5e90
jge 0x1003b4cf
mov edx, str.sltudsjqq_xfb_puhyvccr_hpnno_iwwnoztb
mov ecx, 0x10076b78
call fcn.10003a53
jmp 0x1003b4cf
mov dword [ebp - 4], 0x22
push ecx
mov dl, 1
lea ecx, [ebp - 0x3c]
call fcn.10038d9b
pop ecx
lea ecx, [ebp - 0x1c4]
mov dword [ebp - 0x3c], ebx
call fcn.1001fdb2
lea ecx, [ebp - 0x1d4]
call fcn.1001fdb2
push ebx
push 1
lea ecx, [ebp - 0x1b8]
mov byte [ebp - 4], 0x1d
call fcn.10002214
push 0x6265
push 0x783d
call fcn.100163fe
pop ecx
pop ecx
call eax
mov ecx, dword [ebp - 0x218]
lea eax, [ebp - 0x190]
push eax
call fcn.1003b6b7
push ebx
push 1
lea ecx, [ebp - 0x25c]
call fcn.10002214
push ebx
push 1
lea ecx, [ebp - 0x244]
call fcn.10002214
lea ecx, [ebp - 0x168]
call fcn.1001fa90
lea ecx, [ebp - 0x190]
call fcn.1001fd00
lea ecx, [ebp + 8]
call fcn.1001fa90
mov ecx, dword [ebp - 0xc]
pop edi
pop esi
mov dword fs:[0], ecx
pop ebx
mov esp, ebp
pop ebp
ret