Function at 0x1003be8b
Capabilities:
Check for time delay via gettickcount
Delete registry value
Encrypt data using speck
Enumerate gui resources
Get common file path
Get disk information
Get keyboard layout
Get system information on windows
Identify system language via api
Query environment variable

Disassembly:
mov eax, 0x1006276d
call fcn.10061530
sub esp, 0x8d8
push ebx
push esi
mov dword [ebp - 0x28], 0xb9f9b31
xor ebx, ebx
push edi
mov dword [ebp - 0x34], ebx
xor esi, esi
mov dword [ebp - 0x10], esp
inc esi
mov dword [ebp - 0x4c], ecx
lea ecx, [ebp - 0x490]
mov dword [ebp - 0x34], 8
mov dword [ebp - 0x34], 0x54a20a29
mov dword [ebp - 0x34], esi
push 3
mov byte [ebp - 0x60], dl
call fcn.10015984
mov dword [ebp - 0x28], ebx
jmp 0x1003beec
mov ecx, dword [ebp - 0x28]
mov eax, dword [ebp - 0x490]
mov dword [eax + ecx*4], 0xfffffffd
inc dword [ebp - 0x28]
cmp dword [ebp - 0x28], 3
jl 0x1003bed9
mov dword [ebp - 0x28], ebx
jmp 0x1003bf41
mov dword [ebp - 0xb0], 0xdd8d
mov dword [ebp - 0xac], 0xdd8d
mov dword [ebp - 0xa8], 0xdd8d
mov dword [ebp - 0xa4], 0xdd8d
mov dword [ebp - 0x34], 0x23d1bca9
mov dword [ebp - 0x34], 0x7a98815
mov dword [ebp - 0x34], 0xbb00868b
mov dword [ebp - 0x2c], 0x989b1ab4
inc dword [ebp - 0x2c]
inc dword [ebp - 0x28]
cmp dword [ebp - 0x28], 0xe
jg 0x1003bef7
lea ecx, [ebp - 0x490]
call fcn.10015a06
mov dword [ebp - 0x38], ebx
push 5
pop edi
mov dword [ebp - 0x18], edi
mov dword [ebp - 0x224], 0x2bdb979c
mov dword [ebp - 0x220], 0x2bdb979c
mov dword [ebp - 0x21c], 0x2bdb979c
mov dword [ebp - 0x218], 0x2bdb979c
mov dword [ebp - 0x24], 0x59bb7a14
mov dword [ebp - 0x2c], 0x23b16aac
mov dword [ebp - 0x2c], ebx
cmp dword [ebp - 0x38], 0xffff
jne 0x1003bfd2
mov eax, dword [ebp - 0x38]
xor ecx, ecx
mov dword [ebp - 0x18], eax
mov eax, dword [ebp - 0x18]
add eax, dword [ebp - 0x38]
cmp eax, esi
mov eax, dword [ebp - 0x38]
setge cl
add eax, ecx
mov dword [ebp - 0x220], eax
jne 0x1003bfc8
cmp dword [ebp - 0x18], ebx
jne 0x1003bfc8
mov eax, dword [ebp - 0x220]
mov eax, dword [ebp - 0x38]
cmp eax, dword [ebp - 0x38]
mov eax, esi
jg 0x1003bfd4
mov eax, ebx
mov dword [ebp - 0x24], eax
mov eax, dword [ebp - 0x24]
mov dword [ebp - 0x2c], eax
mov eax, dword [ebp - 0x2c]
mov dword [ebp - 0x2c], esi
mov dword [ebp - 0x24], ebx
jmp 0x1003c011
mov dword [ebp - 0x34], 0xfb07d0d1
mov dword [ebp - 0x34], 0xffffffff
mov dword [ebp - 0x34], 0x19583e35
mov dword [ebp - 0x34], 7
mov dword [ebp - 0x2c], 0xfffffff7
dec dword [ebp - 0x2c]
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], 3
jle 0x1003bfe8
mov dword [ebp - 0x30], 0x7eb0
cmp dword [ebp - 0x30], 0x80e0
jle 0x1003c063
push ebx
push 0x5ec
call dword [sym.imp.GDI32.dll_GetCurrentPositionEx]
mov esi, ebx
mov edi, ebx
mov dword [ebp - 0x2c], 0x7a46
mov eax, edi
mov ecx, 0x1060a8b8
cdq
push edx
push eax
call fcn.1000de0e
add edi, esi
dec dword [ebp - 0x2c]
jne 0x1003c03e
inc esi
cmp esi, 0x5453
jl 0x1003c035
xor esi, esi
push 5
inc esi
pop edi
push esi
lea ecx, [ebp - 0x214]
call fcn.10015984
xor edx, edx
mov dword [ebp - 4], ebx
inc edx
mov byte [ebp - 4], dl
cmp dword [ebp - 0x30], 0x7d67
jge 0x1003c0b4
mov edx, 0x1000b168
mov ecx, 0x1060a8b8
call fcn.1000f7c5
jmp 0x1003c0b1
xor edx, edx
inc edx
mov dword [ebp - 4], ebx
mov dword [ebp - 0x40], 0x3aa9ac70
mov dword [ebp - 0x2c], edi
mov dword [ebp - 0x34], 0x86485466
mov dword [ebp - 0x28], ebx
jmp 0x1003c0e0
mov ecx, dword [ebp - 0x28]
mov eax, dword [ebp - 0x214]
mov dword [eax + ecx*4], 0xb0f7
inc dword [ebp - 0x28]
cmp dword [ebp - 0x28], edx
jl 0x1003c0cd
mov eax, dword [ebp - 0x214]
cmp dword [eax], ebx
je 0x1003c1ab
mov dword [ebp - 0x48], 0x2a2a
cmp dword [ebp - 0x48], 0x2bab
jle 0x1003c18b
mov dword [ebp - 0x3c], ebx
mov eax, ebx
mov dword [ebp - 0x30], 0x3f6
mov dword [ebp - 0x18], eax
mov esi, ebx
mov dword [ebp - 0x2c], ebx
cdq
mov edi, ebx
idiv esi
mov esi, 0x4f9
mov dword [ebp - 0x28], edx
mov eax, edi
lea ecx, [ebp - 0x734]
cdq
push edx
push eax
call fcn.1000d990
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x1003c142
mov eax, dword [eax]
push eax
call fcn.1004c266
pop ecx
push ebx
push 1
lea ecx, [ebp - 0x734]
call fcn.1000e1eb
add edi, dword [ebp - 0x28]
dec esi
jne 0x1003c128
mov esi, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x18]
inc esi
mov dword [ebp - 0x2c], esi
cmp esi, 0x25ac
jl 0x1003c11b
mov edi, dword [ebp - 0x3c]
add eax, edi
dec dword [ebp - 0x30]
mov dword [ebp - 0x18], eax
jne 0x1003c116
inc edi
mov dword [ebp - 0x3c], edi
cmp edi, 0x2a88
jl 0x1003c10a
push 5
pop edi
mov dword [ebp - 0x2c], 0xffffffff
cmp dword [ebp - 0x48], 0x2748
jge 0x1003c1a6
push 0x1000b1b8
call fcn.1004c266
pop ecx
inc dword [ebp - 0x2c]
jmp 0x1003c226
mov dword [ebp - 0x18], 0xe3b6
mov dword [ebp - 0x28], 0x95f7626a
mov dword [ebp - 0x40], 0x16
jmp 0x1003c220
mov dword [ebp - 0x24], edi
xor ecx, ecx
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x18]
cmp eax, edx
setge cl
imul ecx, dword [ebp - 0x24]
imul ecx, dword [ebp - 0x18]
sub ecx, 7
je 0x1003c1f4
mov dword [ebp - 0x34], 2
dec dword [ebp - 0x2c]
jmp 0x1003c21d
mov dword [ebp - 0x28], ebx
jmp 0x1003c217
mov dword [ebp - 0x24], ebx
jmp 0x1003c20f
mov ecx, dword [ebp - 0x24]
mov eax, dword [ebp - 0x214]
cmp dword [eax + ecx*4], ebx
jne 0x1003c214
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], ebx
jle 0x1003c1fe
dec dword [ebp - 0x28]
cmp dword [ebp - 0x28], 0xfffffffc
jne 0x1003c1f9
dec dword [ebp - 0x40]
cmp dword [ebp - 0x40], 0xffffffeb
jge 0x1003c1c2
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x214]
call fcn.10015a06
xor esi, esi
lea ecx, [ebp - 0x1c0]
inc esi
push esi
call fcn.10015984
mov dword [ebp - 4], edi
mov dword [ebp - 0x40], 0x3aa9ac70
mov dword [ebp - 0x2c], edi
mov dword [ebp - 0x34], 0x86485466
mov dword [ebp - 0x28], ebx
jmp 0x1003c270
mov ecx, dword [ebp - 0x28]
mov eax, dword [ebp - 0x1c0]
mov dword [eax + ecx*4], 0xb0f7
inc dword [ebp - 0x28]
cmp dword [ebp - 0x28], esi
jl 0x1003c25d
mov eax, dword [ebp - 0x1c0]
cmp dword [eax], ebx
je 0x1003c2b3
mov dword [ebp - 0x2c], 0xffffffff
inc dword [ebp - 0x2c]
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x1c0]
call fcn.10015a06
push esi
lea ecx, [ebp - 0x274]
call fcn.10015984
mov dword [ebp - 0x34], 0x74489b46
mov dword [ebp - 0x28], ebx
jmp 0x1003c408
mov dword [ebp - 0x18], 0xe3b6
mov dword [ebp - 0x28], 0x95f7626a
mov dword [ebp - 0x40], 0x16
cmp dword [ebp - 0x40], 0xffffffeb
jl 0x1003c289
mov dword [ebp - 0x24], edi
xor ecx, ecx
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x18]
cmp eax, esi
setge cl
imul ecx, dword [ebp - 0x24]
imul ecx, dword [ebp - 0x18]
sub ecx, 7
je 0x1003c303
mov dword [ebp - 0x34], 2
dec dword [ebp - 0x2c]
jmp 0x1003c3ed
mov dword [ebp - 0x28], ebx
cmp dword [ebp - 0x28], 0xfffffffc
je 0x1003c3ea
mov dword [ebp - 0x30], 0x791a
cmp dword [ebp - 0x30], 0x7b81
jle 0x1003c3b0
call dword [sym.imp.KERNEL32.dll_SwitchToThread]
mov ecx, ebx
mov dword [ebp - 0x48], ebx
mov eax, ebx
mov dword [ebp - 0x38], ebx
mov esi, ebx
add eax, ecx
mov edi, ebx
mov ecx, esi
shl eax, cl
mov dword [ebp - 0x3c], eax
and eax, edi
lea ecx, [ebp - 0x824]
cdq
push edx
push eax
call fcn.1000d990
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x1003c35b
mov eax, dword [eax]
push eax
call fcn.1004c266
pop ecx
push ebx
push 1
lea ecx, [ebp - 0x824]
call fcn.1000e1eb
mov eax, dword [ebp - 0x3c]
inc edi
cmp edi, 0x53e2
jl 0x1003c341
mov eax, dword [ebp - 0x38]
inc esi
mov ecx, dword [ebp - 0x48]
cmp esi, 0x5dff
jl 0x1003c336
inc eax
mov dword [ebp - 0x38], eax
cmp eax, 0x74a3
jl 0x1003c334
inc ecx
mov dword [ebp - 0x48], ecx
cmp ecx, 0x1391
jl 0x1003c32f
push 0x1486
call dword [sym.imp.USER32.dll_ShowCaret]
push 5
pop edi
mov dword [ebp - 0x24], ebx
jmp 0x1003c3c6
mov ecx, dword [ebp - 0x24]
mov eax, dword [ebp - 0x1c0]
cmp dword [eax + ecx*4], ebx
jne 0x1003c3cb
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], ebx
jle 0x1003c3b5
cmp dword [ebp - 0x30], 0x790e
jge 0x1003c3df
push 0x1000b200
call fcn.1004c266
pop ecx
mov dword [ebp - 4], edi
dec dword [ebp - 0x28]
jmp 0x1003c306
xor esi, esi
inc esi
dec dword [ebp - 0x40]
jmp 0x1003c2c8
mov ecx, dword [ebp - 0x28]
mov eax, dword [ebp - 0x274]
mov dword [eax + ecx*4], 0x1f7e2799
inc dword [ebp - 0x28]
cmp dword [ebp - 0x28], esi
jl 0x1003c3f5
mov eax, dword [ebp - 0x274]
lea ecx, [ebp - 0x274]
mov dword [eax], 0xfffffff2
call fcn.10015a06
push 2
lea ecx, [ebp - 0xbc]
call fcn.10015984
mov dword [ebp - 0x44], 0x1c29000d
mov dword [ebp - 0x2c], 0xfffffff6
mov dword [ebp - 0x44], ebx
jmp 0x1003c457
mov ecx, dword [ebp - 0x44]
mov eax, dword [ebp - 0xbc]
mov dword [eax + ecx*4], 0x13b91020
inc dword [ebp - 0x44]
cmp dword [ebp - 0x44], 2
jl 0x1003c444
mov dword [ebp - 0x44], ebx
jmp 0x1003c46f
mov eax, dword [ebp - 0x44]
mov dword [ebp + eax*4 - 0x49c], esi
inc dword [ebp - 0x44]
cmp dword [ebp - 0x44], 3
jl 0x1003c462
mov dword [ebp - 0x44], esi
cmp dword [ebp - 0x44], ebx
jl 0x1003c57f
mov edi, dword [ebp - 0xbc]
mov dword [ebp - 0x18], 4
mov dword [ebp - 0x28], ebx
jmp 0x1003c4a0
mov eax, dword [ebp - 0x28]
mov dword [ebp + eax*4 - 0x53c], esi
inc dword [ebp - 0x28]
cmp dword [ebp - 0x28], 2
jl 0x1003c493
mov edx, dword [ebp - 0x44]
mov eax, dword [ebp - 0x44]
mov ecx, dword [ebp - 0xbc]
mov eax, dword [ecx + eax*4]
add eax, dword [ecx + edx*4]
je 0x1003c4c8
mov ecx, dword [ebp - 0x44]
mov eax, dword [ebp - 0xbc]
cmp dword [eax + ecx*4], ebx
jne 0x1003c505
cmp dword [ebp - 0x2c], 0x21c9b6cd
jl 0x1003c4e1
mov ecx, dword [ebp - 0x44]
mov eax, dword [ebp - 0xbc]
cmp dword [eax + ecx*4], ebx
mov ecx, ebx
je 0x1003c4e3
mov ecx, esi
mov edx, dword [ebp - 0x44]
mov eax, dword [ebp - 0x44]
imul eax, ecx
dec eax
neg eax
sbb eax, eax
inc eax
imul ecx, eax, 0x18f0
mov eax, dword [ebp - 0xbc]
cmp ecx, dword [eax + edx*4]
mov ecx, ebx
jne 0x1003c507
mov ecx, esi
mov esi, dword [ebp - 0x44]
sub ecx, dword [edi + 4]
mov eax, dword [ebp - 0x44]
sub ecx, 0xfff8
mov edx, dword [ebp - 0xbc]
add eax, ecx
xor ecx, ecx
cmp eax, 0x598
push 5
setl cl
sub ecx, dword [edx]
pop eax
cmp eax, ecx
mov ecx, dword [ebp - 0x44]
sbb eax, eax
inc eax
sub eax, dword [edx + esi*4]
xor edx, edx
xor esi, esi
inc esi
cmp eax, esi
mov eax, dword [ebp - 0xbc]
setl dl
mov dword [eax + ecx*4], edx
mov ecx, dword [ebp - 0x49c]
mov eax, dword [ebp - 0x18]
mov edx, dword [ebp - 0x18]
imul ecx, eax
mov eax, dword [ebp - 0x498]
imul edx, ecx
xor ecx, ecx
cmp edx, eax
setl cl
mov dword [ebp - 0x538], ecx
mov dword [ebp - 0x18], ebx
dec dword [ebp - 0x44]
jns 0x1003c487
push 5
pop edi
lea ecx, [ebp - 0xbc]
call fcn.10015a06
push esi
lea ecx, [ebp - 0x1d8]
call fcn.10015984
mov dword [ebp - 4], 8
mov dword [ebp - 0x20], 0x3aa9ac70
mov dword [ebp - 0x34], 0x2e0cf572
mov byte [ebp - 0x11], bl
cmp byte [ebp - 0x11], 0
je 0x1003c5c6
push ebx
push 0xdf6
push ebx
push 0xe76
call dword [sym.imp.KERNEL32.dll_GetStringTypeW]
mov byte [ebp - 0x11], bl
cmp byte [ebp - 0x11], 0
je 0x1003c5dc
push 0xfa8
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_ExpandEnvironmentStringsW]
mov dword [ebp - 0x54], edi
lea ecx, [ebp - 0x3a0]
mov dword [ebp - 0x34], 0x86485466
push esi
call fcn.10015984
mov byte [ebp - 4], 9
mov dword [ebp - 0x48], 0x6096
cmp dword [ebp - 0x48], 0x61c4
jle 0x1003c673
mov dword [ebp - 0x18], ebx
mov esi, ebx
mov dword [ebp - 0x3c], ebx
mov eax, esi
mov dword [ebp - 0x30], 0x4fda
mov esi, dword [ebp - 0x18]
mov dword [ebp - 0x2c], eax
mov ecx, eax
mov dword [ebp - 0x28], esi
mov edi, ebx
shl esi, cl
mov eax, esi
mov ecx, 0x1060a8b8
or eax, edi
cdq
push edx
push eax
call fcn.1000de0e
inc edi
cmp edi, 0x60ec
jl 0x1003c626
mov eax, dword [ebp - 0x2c]
mov esi, dword [ebp - 0x18]
dec eax
dec dword [ebp - 0x30]
mov dword [ebp - 0x2c], eax
jne 0x1003c61d
mov esi, dword [ebp - 0x3c]
inc esi
mov dword [ebp - 0x3c], esi
cmp esi, 0x3633
jl 0x1003c60e
mov eax, dword [ebp - 0x18]
inc eax
mov dword [ebp - 0x18], eax
cmp eax, 0x6475
jl 0x1003c609
push ebx
call dword [sym.imp.KERNEL32.dll_SetThreadLocale]
mov dword [ebp - 0x38], 0xfffffffa
mov byte [ebp - 4], 0xa
cmp dword [ebp - 0x48], 0x6021
jge 0x1003c6b4
mov edx, 0x1000b248
mov ecx, 0x1060a8b8
call fcn.1000f7c5
jmp 0x1003c6b4
mov dword [ebp - 4], 9
xor edx, edx
mov dword [ebp - 0x2c], ebx
inc edx
mov dword [ebp - 0x34], 2
mov dword [ebp - 0x34], edx
mov dword [ebp - 0x34], 0xbb4aad9d
mov dword [ebp - 0x34], edx
mov dword [ebp - 0x34], ebx
mov dword [ebp - 0x34], 6
mov dword [ebp - 0x34], edx
mov dword [ebp - 0x34], 3
mov dword [ebp - 0x44], ebx
jmp 0x1003c701
mov ecx, dword [ebp - 0x44]
mov eax, dword [ebp - 0x3a0]
mov dword [eax + ecx*4], 0x9f9b3198
inc dword [ebp - 0x44]
cmp dword [ebp - 0x44], edx
jl 0x1003c6ee
mov dword [ebp - 0x44], ebx
jmp 0x1003c71c
mov eax, dword [ebp - 0x44]
mov dword [ebp + eax*4 - 0x89c], 0x48bd921b
inc dword [ebp - 0x44]
cmp dword [ebp - 0x44], 3
jl 0x1003c70b
mov dword [ebp - 0x38], ebx
cmp dword [ebp - 0x38], ebx
jle 0x1003c747
xor edi, edi
inc edi
lea ecx, [ebp - 0x3a0]
mov byte [ebp - 4], 8
call fcn.10015a06
mov dword [ebp - 0x28], ebx
jmp 0x1003c7fe
xor edx, edx
inc edx
mov dword [ebp - 0x2c], 0x69
lea ecx, [ebp - 0x57c]
push edx
call fcn.10015984
mov dword [ebp - 0x34], 0x8e136dc9
xor edi, edi
mov dword [ebp - 0x34], ebx
inc edi
mov dword [ebp - 0x34], 0x5718
mov dword [ebp - 0x30], 0x6b32
mov dword [ebp - 0x44], ebx
jmp 0x1003c78d
mov ecx, dword [ebp - 0x44]
mov eax, dword [ebp - 0x57c]
mov dword [eax + ecx*4], 7
inc dword [ebp - 0x44]
cmp dword [ebp - 0x44], edi
jl 0x1003c77a
mov dword [ebp - 0x44], ebx
jmp 0x1003c7a8
mov eax, dword [ebp - 0x44]
mov dword [ebp + eax*4 - 0x6bc], 0xde2a9078
inc dword [ebp - 0x44]
cmp dword [ebp - 0x44], 2
jl 0x1003c797
mov dword [ebp - 0x2c], 0xe5f36f6d
xor ecx, ecx
mov esi, dword [ebp - 0x38]
mov edx, dword [ebp - 0x3a0]
mov eax, dword [ebp - 0x2c]
cmp eax, dword [edx + esi*4]
setle cl
mov dword [ebp - 0x2c], ecx
lea ecx, [ebp - 0x57c]
dec dword [ebp - 0x30]
call fcn.10015a06
inc dword [ebp - 0x38]
cmp dword [ebp - 0x38], ebx
jle 0x1003c744
jmp 0x1003c72d
mov ecx, dword [ebp - 0x28]
mov eax, dword [ebp - 0x1d8]
mov dword [eax + ecx*4], 0xb0f7
inc dword [ebp - 0x28]
cmp dword [ebp - 0x28], edi
jl 0x1003c7eb
mov eax, dword [ebp - 0x1d8]
cmp dword [eax], ebx
je 0x1003c974
mov dword [ebp - 0x2c], 0xffffffff
inc dword [ebp - 0x2c]
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x1d8]
call fcn.10015a06
movdqa xmm0, xmmword [0x1000c530]
lea ecx, [ebp - 0x5f8]
push ecx
lea eax, [ebp - 0x5e8]
push eax
push ecx
lea ecx, [ebp - 0x394]
movdqu xmmword [ebp - 0x5f8], xmm0
call fcn.100159e0
mov dword [ebp - 4], 0x14
mov dword [ebp - 0x40], 0xfffffffb
mov dword [ebp - 0x28], edi
mov dword [ebp - 0x34], 0x98e64e6d
mov dword [ebp - 0x34], edi
mov dword [ebp - 0x44], 0x1e7b
mov dword [ebp - 0x2c], edi
mov dword [ebp - 0x38], 2
mov dword [ebp - 0x40], ebx
cmp dword [ebp - 0x40], 3
jg 0x1003d48b
mov dword [ebp - 0x34], 0x31d83293
mov dword [ebp - 0x438], ebx
mov dword [ebp - 0x434], ebx
mov dword [ebp - 0x430], ebx
mov dword [ebp - 0x42c], ebx
mov dword [ebp - 0x2c], 0xffffffff
inc dword [ebp - 0x2c]
mov dword [ebp - 0x38], ebx
cmp dword [ebp - 0x38], 3
jg 0x1003d483
mov dword [ebp - 0x48], 0x9314
lea ecx, [ebp - 0x1f0]
push edi
call fcn.10015984
mov byte [ebp - 4], 0x15
mov dword [ebp - 0x3c], 0x2597
cmp dword [ebp - 0x3c], 0x290e
jle 0x1003c94c
mov eax, ebx
mov dword [ebp - 0x18], ebx
mov edi, ebx
mov dword [ebp - 0x30], ebx
cdq
idiv edi
mov dword [ebp - 0x28], ebx
mov edi, ebx
mov dword [ebp - 0x24], edx
mov dword [ebp - 0x2c], 0x35f4
mov esi, ebx
mov ecx, esi
mov eax, edi
sar eax, cl
mov ecx, 0x1060a8b8
cdq
push edx
push eax
call fcn.1000de0e
inc esi
cmp esi, 0x5d06
jl 0x1003c908
add edi, dword [ebp - 0x24]
dec dword [ebp - 0x2c]
jne 0x1003c906
mov edi, dword [ebp - 0x30]
mov eax, dword [ebp - 0x18]
inc edi
mov dword [ebp - 0x30], edi
cmp edi, 0x7376
jl 0x1003c8f4
inc eax
mov dword [ebp - 0x18], eax
cmp eax, 0x454e
jl 0x1003c8ef
xor edi, edi
inc edi
mov dword [ebp - 0x2c], edi
mov byte [ebp - 4], 0x16
cmp dword [ebp - 0x3c], 0x23dd
jge 0x1003d3b4
mov edx, 0x1000b3a4
mov ecx, 0x1060a8b8
call fcn.1000f7c5
jmp 0x1003d3b4
mov dword [ebp - 0x18], edi
lea ecx, [ebp - 0x28c]
push 2
call fcn.10015984
mov dword [ebp - 0x28], ebx
jmp 0x1003c99c
mov ecx, dword [ebp - 0x28]
mov eax, dword [ebp - 0x28c]
mov dword [eax + ecx*4], 0x29aa810d
inc dword [ebp - 0x28]
cmp dword [ebp - 0x28], 2
jl 0x1003c989
cmp dword [ebp - 0x18], ebx
mov byte [ebp - 0x11], bl
je 0x1003c9ba
cmp byte [ebp - 0x11], 0
je 0x1003c9ce
push ebx
push ebx
call dword [sym.imp.ADVAPI32.dll_RegDeleteValueA]
jmp 0x1003c9ce
cmp byte [ebp - 0x11], 0
je 0x1003c9ce
push 0x1c3c
push ebx
push ebx
push ebx
call dword [sym.imp.GDI32.dll_CombineRgn]
mov eax, dword [ebp - 0x18]
neg eax
jne 0x1003c9dc
mov eax, ebx
cmp dword [ebp - 0x18], ebx
je 0x1003c9de
mov eax, edi
mov ecx, dword [ebp - 0x18]
imul ecx, eax
mov eax, dword [ebp - 0x28c]
mov dword [eax], ecx
lea ecx, [ebp - 0x28c]
call fcn.10015a06
mov dword [ebp - 0x48], 0xe3b6
mov dword [ebp - 0x1c], edi
mov dword [ebp - 0x28], 0xffffffff
mov dword [ebp - 0x3c], 0x387e
cmp dword [ebp - 0x3c], 0x38a8
jle 0x1003ca7a
mov edi, ebx
mov dword [ebp - 0x30], ebx
mov esi, ebx
mov dword [ebp - 0x18], edi
mov dword [ebp - 0x2c], 0x4b6e
mov eax, edi
lea ecx, [ebp - 0x764]
cdq
push edx
push eax
call fcn.1000d990
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x1003ca43
mov eax, dword [eax]
push eax
call fcn.1004c266
pop ecx
push ebx
push 1
lea ecx, [ebp - 0x764]
call fcn.1000e1eb
add edi, esi
dec dword [ebp - 0x2c]
jne 0x1003ca29
mov edi, dword [ebp - 0x30]
inc esi
cmp esi, 0x7f3d
jl 0x1003ca1f
inc edi
mov dword [ebp - 0x30], edi
cmp edi, 0x7cea
jl 0x1003ca1d
xor edi, edi
inc edi
mov dword [ebp - 0x2c], 0xfffffff6
cmp dword [ebp - 0x3c], 0x35bd
jge 0x1003ca95
push 0x1000b2b4
call fcn.1004c266
pop ecx
mov dword [ebp - 4], 8
mov dword [ebp - 0x40], 0x3b3f3656
mov dword [ebp - 0x30], 0xffffffff
mov dword [ebp - 0x18], 0x25bfc88e
mov dword [ebp - 0x34], 0xb3e713e1
mov dword [ebp - 0x38], 0x52509e71
mov dword [ebp - 0x34], 0x6974edf0
mov dword [ebp - 0x24], 0xffffffff
mov dword [ebp - 0x3c], 0x716b5b38
mov dword [ebp - 0x2c], 0xb564
mov dword [ebp - 0x44], ebx
jmp 0x1003caf1
mov eax, dword [ebp - 0x44]
mov dword [ebp + eax*4 - 0xa0], 0xb02971c1
inc dword [ebp - 0x44]
cmp dword [ebp - 0x44], edi
jl 0x1003cae0
mov dword [ebp - 0x44], ebx
jmp 0x1003cb0c
mov eax, dword [ebp - 0x44]
mov dword [ebp + eax*4 - 0x6d4], 0xfffffff7
inc dword [ebp - 0x44]
cmp dword [ebp - 0x44], 4
jl 0x1003cafb
dec dword [ebp - 0x18]
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x28], eax
mov eax, dword [ebp - 0x30]
mov eax, dword [ebp - 0x18]
inc dword [ebp - 0x2c]
cmp dword [ebp - 0x30], ebx
jne 0x1003cb38
cmp dword [ebp - 0x3c], ebx
jne 0x1003cb38
mov edx, ebx
cmp dword [ebp - 0xa0], ebx
je 0x1003cb3a
mov edx, edi
mov eax, dword [ebp - 0x40]
xor ecx, ecx
cmp edx, eax
setge cl
sub ecx, dword [ebp - 0x38]
sub ecx, 0xfffffffc
neg ecx
sbb ecx, ecx
xor edx, edx
inc ecx
mov dword [ebp - 0x28], ecx
mov ecx, dword [ebp - 0x6c8]
mov eax, dword [ebp - 0x28]
cmp eax, ecx
setle dl
mov dword [ebp - 0x40], edx
xor edx, edx
mov ecx, dword [ebp - 0x24]
add ecx, dword [ebp - 0x40]
mov eax, dword [ebp - 0x1c]
cmp eax, ecx
mov eax, dword [ebp - 0xa0]
setge dl
xor ecx, ecx
cmp edx, eax
mov eax, dword [ebp - 0xa0]
setle cl
sub eax, ecx
neg eax
sbb eax, eax
inc eax
mov dword [ebp - 0x2c], eax
mov byte [ebp - 0x11], bl
cmp byte [ebp - 0x11], 0
je 0x1003cba2
push ebx
call dword [sym.imp.USER32.dll_RegisterClassW]
mov dword [ebp - 0x40], 0x95f7626a
mov dword [ebp - 0x28], ebx
jmp 0x1003cbbc
mov eax, dword [ebp - 0x28]
mov dword [ebp + eax*4 - 0x7c], 0xffffffff
inc dword [ebp - 0x28]
cmp dword [ebp - 0x28], edi
jl 0x1003cbae
mov dword [ebp - 0x7c], ebx
jmp 0x1003cbe3
mov byte [ebp - 0x11], bl
cmp byte [ebp - 0x11], 0
je 0x1003cbe0
push 0x15c1
push 0x3c5
push ebx
call dword [sym.imp.USER32.dll_DeleteMenu]
dec dword [ebp - 0x7c]
cmp dword [ebp - 0x7c], 0xffffffef
jg 0x1003cbc6
mov dword [ebp - 0x20], 0x16
cmp dword [ebp - 0x20], 0xffffffeb
push 0xfffffffffffffff8
pop esi
jl 0x1003c81b
movdqa xmm0, xmmword [0x1000c540]
lea ecx, [ebp - 0x658]
push ecx
lea eax, [ebp - 0x648]
mov dword [ebp - 0x24], 5
push eax
push ecx
lea ecx, [ebp - 0x37c]
movdqu xmmword [ebp - 0x658], xmm0
call fcn.100159e0
mov dword [ebp - 0x18], ebx
mov dword [ebp - 0x40], 0x737e0d1b
mov dword [ebp - 0x2c], edi
mov dword [ebp - 0x2c], 0xa1c33c01
mov dword [ebp - 0x448], 0xa80278ee
mov dword [ebp - 0x444], 0xa80278ee
mov dword [ebp - 0x440], 0xa80278ee
mov dword [ebp - 0x43c], 0xa80278ee
mov dword [ebp - 0x2c], 0xdb88dcfd
mov dword [ebp - 0x28], ebx
jmp 0x1003cc83
mov eax, dword [ebp - 0x28]
mov dword [ebp + eax*4 - 0x114], esi
inc dword [ebp - 0x28]
cmp dword [ebp - 0x28], edi
jl 0x1003cc76
mov esi, dword [ebp - 0x37c]
xor ecx, ecx
mov edx, edi
mov eax, dword [esi + 8]
mov dword [ebp - 0x114], eax
mov eax, dword [ebp - 0x40]
cmp dword [ebp - 0x114], eax
mov eax, dword [ebp - 0x18]
setl cl
add ecx, 8
dec dword [ebp - 0x18]
cmp eax, ecx
mov eax, dword [ebp - 0x37c]
cmove edx, ebx
xor ecx, ecx
cmp dword [eax + 0xc], edx
setne cl
neg ecx
mov dword [ebp - 0x2c], ecx
mov eax, dword [ebp - 0x2c]
neg eax
sbb eax, eax
neg eax
imul eax, dword [esi + 8]
sub eax, dword [esi + 8]
neg eax
sbb eax, eax
inc eax
sub eax, dword [ebp - 0x40]
neg eax
sbb eax, eax
xor edx, edx
inc eax
mov dword [ebp - 0x2c], eax
mov ecx, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x40]
cmp ecx, eax
setne dl
sub edx, 0xfffffff8
neg edx
sbb edx, edx
xor eax, eax
inc edx
cmp edx, 6
setl al
xor ecx, ecx
cmp dword [esi + 8], eax
setge cl
mov dword [ebp - 0x43c], ecx
sub ecx, dword [esi + 8]
mov dword [ebp - 0x2c], ecx
lea ecx, [ebp - 0x37c]
call fcn.10015a06
mov eax, dword [ebp - 0x24]
xor ecx, ecx
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0x48]
mov eax, dword [ebp - 0x48]
mov eax, dword [ebp - 0x48]
cmp eax, edi
setge cl
imul ecx, dword [ebp - 0x24]
imul ecx, dword [ebp - 0x48]
sub ecx, 7
je 0x1003cf52
mov dword [ebp - 0x1c], 0x99841b3c
mov dword [ebp - 0x38], 0xc865b49d
mov dword [ebp - 0x1c], 0xffffffff
cmp dword [ebp - 0x1c], 4
jg 0x1003cdfb
lea esi, [ebp - 0x5c8]
lea eax, [ebp - 0x5b8]
movdqa xmm0, xmmword [0x1000c550]
push ecx
push eax
push esi
lea ecx, [ebp - 0x2a4]
movdqu xmmword [ebp - 0x5c8], xmm0
call fcn.100159e0
mov eax, dword [ebp - 0x2a4]
mov dword [ebp - 0x2c], 0xc6338430
mov dword [ebp - 0x2c], 0xffffffff
mov eax, dword [eax]
mov dword [ebp - 0x2c], eax
mov eax, dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], ebx
jne 0x1003cdb8
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x2a4]
xor edx, edx
mov eax, dword [eax]
mov dword [ebp - 0x38], eax
mov ecx, dword [ebp - 0x38]
mov eax, dword [ebp - 0x1c]
cmp ecx, eax
mov eax, dword [ebp - 0x1c]
setge dl
xor ecx, ecx
cmp edx, eax
setl cl
mov dword [ebp - 0x2c], ecx
lea ecx, [ebp - 0x2a4]
call fcn.10015a06
inc dword [ebp - 0x1c]
lea eax, [ebp - 0x5b8]
cmp dword [ebp - 0x1c], 4
jle 0x1003cd76
mov eax, dword [ebp - 0x1c]
xor ecx, ecx
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x38]
mov eax, dword [ebp - 0x38]
mov eax, dword [ebp - 0x38]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x38]
cmp eax, 0xadd5
setle cl
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 0x34], 2
mov dword [ebp - 0x2c], 0xfffffff7
mov dword [ebp - 0x24], 0xffffffff
mov dword [ebp - 0x30], ebx
mov dword [ebp - 0x44], 0xf82baef6
mov dword [ebp - 0x3c], 0x3bd5
mov byte [ebp - 0x11], bl
cmp byte [ebp - 0x11], 0
je 0x1003ce56
push ebx
call dword [sym.imp.USER32.dll_RegisterWindowMessageW]
mov eax, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x30]
mov dword [ebp - 0x44], eax
mov eax, dword [ebp - 0x44]
cmp dword [ebp - 0x24], eax
jne 0x1003ce6a
mov eax, dword [ebp - 0x24]
mov dword [ebp - 0x24], edi
xor edx, edx
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0x3c]
mov ecx, dword [ebp - 0x44]
mov eax, dword [ebp - 0x2c]
cmp ecx, eax
setg dl
imul edx, dword [ebp - 0x30]
test edx, edx
je 0x1003ceb6
mov dword [ebp - 0x34], 0x60df3928
xor edx, edx
mov dword [ebp - 0x2c], ebx
mov eax, dword [ebp - 0x2c]
cmp eax, edi
setle dl
sub edx, dword [ebp - 0x44]
mov eax, dword [ebp - 0x3c]
neg edx
sbb edx, edx
xor ecx, ecx
inc edx
cmp edx, eax
setge cl
mov dword [ebp - 0x44], ecx
jmp 0x1003cf47
push 2
lea ecx, [ebp - 0x3f4]
call fcn.10015984
mov dword [ebp - 0x28], ebx
jmp 0x1003cedb
mov ecx, dword [ebp - 0x28]
mov eax, dword [ebp - 0x3f4]
mov dword [eax + ecx*4], 0x3e24
inc dword [ebp - 0x28]
cmp dword [ebp - 0x28], 2
jl 0x1003cec8
mov byte [ebp - 0x11], bl
cmp byte [ebp - 0x11], 0
je 0x1003cef6
push ebx
push 0x1214
call dword [sym.imp.GDI32.dll_GetClipBox]
mov dword [ebp - 0x24], ebx
jmp 0x1003cf36
mov dword [ebp - 0x2c], 0x35cf
mov dword [ebp - 0x44], ebx
jmp 0x1003cf2b
mov byte [ebp - 0x11], bl
cmp byte [ebp - 0x11], 0
je 0x1003cf16
call dword [sym.imp.USER32.dll_GetMessageTime]
mov eax, dword [ebp - 0x44]
mov edx, dword [ebp - 0x44]
mov ecx, dword [ebp - 0x3f4]
mov eax, dword [ecx + eax*4]
mov dword [ecx + edx*4], eax
inc dword [ebp - 0x44]
cmp dword [ebp - 0x44], edi
jle 0x1003cf07
mov eax, dword [ebp - 0x2c]
dec dword [ebp - 0x24]
cmp dword [ebp - 0x24], 0xffffffea
jl 0x1003cefb
lea ecx, [ebp - 0x3f4]
call fcn.10015a06
dec dword [ebp - 0x54]
dec dword [ebp - 0x20]
jmp 0x1003cbf0
mov dword [ebp - 0x28], ebx
mov dword [ebp - 0x28], ebx
jmp 0x1003cf6b
mov eax, dword [ebp - 0x28]
mov dword [ebp + eax*4 - 0xf8], 0x5540d7f8
inc dword [ebp - 0x28]
cmp dword [ebp - 0x28], 2
jl 0x1003cf5a
mov dword [ebp - 0x28], 0x2a71
cmp dword [ebp - 0x28], 0x2d79
jle 0x1003cfe0
mov eax, ebx
mov dword [ebp - 0x18], ebx
mov edi, ebx
mov dword [ebp - 0x3c], ebx
cdq
mov esi, ebx
idiv edi
mov eax, edx
mov dword [ebp - 0x30], eax
mov edi, ebx
mov dword [ebp - 0x2c], 0x3fd8
or eax, edi
mov ecx, 0x1060a8b8
cdq
push edx
push eax
call fcn.1000de0e
mov eax, dword [ebp - 0x30]
add edi, esi
dec dword [ebp - 0x2c]
jne 0x1003cf9e
inc esi
cmp esi, 0x2fa2
jl 0x1003cf95
mov edi, dword [ebp - 0x3c]
mov eax, dword [ebp - 0x18]
inc edi
mov dword [ebp - 0x3c], edi
cmp edi, 0x11ab
jl 0x1003cf8b
inc eax
mov dword [ebp - 0x18], eax
cmp eax, 0x46bb
jl 0x1003cf86
xor edi, edi
inc edi
mov dword [ebp - 0xf8], 0xfffffff4
jmp 0x1003d00c
mov byte [ebp - 0x11], bl
cmp byte [ebp - 0x11], 0
je 0x1003d006
push ebx
push 0x937
push 0x194b
call dword [sym.imp.USER32.dll_SetDlgItemTextA]
inc dword [ebp - 0xf8]
cmp dword [ebp - 0xf8], 0xfffffff5
jl 0x1003cfec
mov byte [ebp - 4], 0xe
cmp dword [ebp - 0x28], 0x27cd
jge 0x1003d052
mov edx, 0x1000b2e0
mov ecx, 0x1060a8b8
call fcn.1000f7c5
jmp 0x1003d052
push 5
mov dword [ebp - 4], 8
pop esi
mov dword [ebp - 0x28], ebx
jmp 0x1003d07a
mov byte [ebp - 0x11], bl
cmp byte [ebp - 0x11], 0
je 0x1003d077
push ebx
push ebx
push 0xaf9
call dword [sym.imp.ADVAPI32.dll_CopySid]
inc dword [ebp - 0x28]
cmp dword [ebp - 0x28], esi
jg 0x1003d061
mov dword [ebp - 0x40], ebx
cmp dword [ebp - 0x40], 0xfffffffc
je 0x1003cf4a
movdqa xmm0, xmmword [0x1000c540]
lea ecx, [ebp - 0x5e8]
push ecx
lea eax, [ebp - 0x5d8]
push eax
push ecx
lea ecx, [ebp - 0x2bc]
movdqu xmmword [ebp - 0x5e8], xmm0
call fcn.100159e0
mov dword [ebp - 0x18], ebx
mov dword [ebp - 0x38], 0x737e0d1b
mov dword [ebp - 0x2c], edi
mov dword [ebp - 0x2c], 0xa1c33c01
mov dword [ebp - 0x468], 0xa80278ee
mov dword [ebp - 0x464], 0xa80278ee
mov dword [ebp - 0x460], 0xa80278ee
mov dword [ebp - 0x45c], 0xa80278ee
mov dword [ebp - 0x2c], 0xdb88dcfd
mov dword [ebp - 0x28], ebx
jmp 0x1003d10f
mov eax, dword [ebp - 0x28]
mov dword [ebp + eax*4 - 0x10c], 0xfffffff8
inc dword [ebp - 0x28]
cmp dword [ebp - 0x28], edi
jl 0x1003d0fe
mov esi, dword [ebp - 0x2bc]
xor ecx, ecx
mov edx, edi
mov eax, dword [esi + 8]
mov dword [ebp - 0x10c], eax
mov eax, dword [ebp - 0x38]
cmp dword [ebp - 0x10c], eax
mov eax, dword [ebp - 0x18]
setl cl
add ecx, 8
dec dword [ebp - 0x18]
cmp eax, ecx
mov eax, dword [ebp - 0x2bc]
cmove edx, ebx
xor ecx, ecx
cmp dword [eax + 0xc], edx
setne cl
neg ecx
mov dword [ebp - 0x2c], ecx
mov eax, dword [ebp - 0x2c]
mov ecx, dword [esi + 8]
neg eax
sbb eax, eax
neg eax
imul ecx, eax
sub ecx, dword [esi + 8]
neg ecx
sbb ecx, ecx
inc ecx
sub ecx, dword [ebp - 0x38]
neg ecx
sbb ecx, ecx
xor edx, edx
inc ecx
mov dword [ebp - 0x2c], ecx
mov ecx, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x38]
cmp ecx, eax
setne dl
sub edx, 0xfffffff8
neg edx
sbb edx, edx
xor eax, eax
inc edx
cmp edx, 6
setl al
xor ecx, ecx
cmp dword [esi + 8], eax
setge cl
mov dword [ebp - 0x45c], ecx
sub ecx, dword [esi + 8]
mov dword [ebp - 0x2c], ecx
lea ecx, [ebp - 0x2bc]
call fcn.10015a06
mov dword [ebp - 0x24], ebx
cmp dword [ebp - 0x24], ebx
jg 0x1003d38d
mov dword [ebp - 0x18], 0x27cb3f4f
mov dword [ebp - 0x18], ebx
cmp dword [ebp - 0x18], 0x18
je 0x1003d2a9
mov dword [ebp - 0x3c], 0x8d5
cmp dword [ebp - 0x3c], 0xb23
jle 0x1003d237
mov eax, ebx
mov dword [ebp - 0x28], ebx
mov edi, ebx
mov esi, ebx
mov ecx, esi
mov dword [ebp - 0x30], 0x2982
mov dword [ebp - 0x2c], ecx
add eax, edi
shl eax, cl
mov ecx, 0x1060a8b8
cdq
push edx
push eax
call fcn.1000de0e
mov ecx, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x28]
dec ecx
dec dword [ebp - 0x30]
mov dword [ebp - 0x2c], ecx
jne 0x1003d1f7
inc esi
cmp esi, 0x20bb
jl 0x1003d1eb
inc edi
cmp edi, 0x21d7
jl 0x1003d1e9
inc eax
mov dword [ebp - 0x28], eax
cmp eax, 0x3080
jl 0x1003d1e7
xor edi, edi
inc edi
mov byte [ebp - 0x11], bl
mov byte [ebp - 4], 0x10
cmp dword [ebp - 0x3c], 0x717
jge 0x1003d277
mov edx, 0x1000b364
mov ecx, 0x1060a8b8
call fcn.1000f7c5
jmp 0x1003d277
mov dword [ebp - 4], 8
cmp byte [ebp - 0x11], 0
je 0x1003d2a1
push ebx
push 0x1444
push ebx
push 0x2555
push 0x6d3
push ebx
push 0xfbb
call dword [sym.imp.KERNEL32.dll_FormatMessageW]
inc dword [ebp - 0x18]
jmp 0x1003d1c8
mov byte [ebp - 0x11], bl
cmp byte [ebp - 0x11], 0
je 0x1003d2c7
push 0x1f56
push 0xe23
push 0x102e
call dword [sym.imp.USER32.dll_SetWindowLongA]
mov dword [ebp - 0x2c], 0x170e
cmp dword [ebp - 0x2c], 0x1a38
jle 0x1003d333
push 0x876
push 0x15b9
push 0x1ba0
call dword [sym.imp.GDI32.dll_LineTo]
mov eax, ebx
mov dword [ebp - 0x18], ebx
mov esi, ebx
mov ecx, esi
mov edi, ebx
and ecx, eax
mov dword [ebp - 0x30], ecx
mov eax, ecx
mov ecx, 0x1060a8b8
xor eax, edi
cdq
push edx
push eax
call fcn.1000de0e
mov ecx, dword [ebp - 0x30]
inc edi
cmp edi, 0x7913
jl 0x1003d2fc
mov eax, dword [ebp - 0x18]
inc esi
cmp esi, 0x40b4
jl 0x1003d2f3
inc eax
mov dword [ebp - 0x18], eax
cmp eax, 0x30fa
jl 0x1003d2f1
xor edi, edi
inc edi
mov ecx, dword [ebp - 0x24]
mov eax, dword [ebp - 0x1d8]
cmp dword [eax + ecx*4], ebx
jne 0x1003d38d
mov byte [ebp - 4], 0x12
cmp dword [ebp - 0x2c], 0x163a
jge 0x1003d37e
mov edx, 0x1000b388
mov ecx, 0x1060a8b8
call fcn.1000f7c5
jmp 0x1003d37e
mov dword [ebp - 4], 8
inc dword [ebp - 0x24]
jmp 0x1003d1b5
dec dword [ebp - 0x40]
jmp 0x1003d082
mov dword [ebp - 4], 0x15
mov dword [ebp - 0x28], ebx
jmp 0x1003d3d3
mov ecx, dword [ebp - 0x28]
mov eax, dword [ebp - 0x1f0]
mov dword [eax + ecx*4], 0x6b903cfc
inc dword [ebp - 0x28]
cmp dword [ebp - 0x28], edi
jl 0x1003d3c0
mov dword [ebp - 0x28], ebx
jmp 0x1003d462
mov dword [ebp - 0x30], 0xc9f7
xor edx, edx
mov eax, dword [ebp - 0x40]
mov eax, dword [ebp - 0x48]
mov ecx, dword [ebp - 0x42c]
mov eax, dword [ebp - 0x1f0]
cmp dword [eax], ecx
mov eax, dword [ebp - 0x48]
setg dl
xor ecx, ecx
imul eax, edx
cmp eax, 7
mov eax, dword [ebp - 0x1f0]
setne cl
xor edx, edx
cmp ecx, dword [eax]
mov eax, dword [ebp - 0x48]
setge dl
xor ecx, ecx
cmp edx, eax
sete cl
mov dword [ebp - 0x2c], ecx
mov edx, dword [ebp - 0x38]
mov ecx, dword [ebp - 0x394]
mov eax, dword [ebp - 0x2c]
add eax, dword [ecx + edx*4]
cmp eax, edi
jne 0x1003d442
mov esi, edi
cmp dword [ebp - 0x30], ebx
jne 0x1003d444
mov esi, ebx
mov ecx, dword [ebp - 0x38]
mov eax, dword [ebp - 0x394]
mov edx, dword [eax + ecx*4]
xor ecx, ecx
mov eax, dword [ebp - 0x44]
add edx, esi
cmp edx, eax
setle cl
mov dword [ebp - 0x2c], ecx
inc dword [ebp - 0x28]
cmp dword [ebp - 0x28], 3
jle 0x1003d3e0
lea ecx, [ebp - 0x1f0]
mov byte [ebp - 4], 0x14
call fcn.10015a06
inc dword [ebp - 0x38]
jmp 0x1003c8b9
inc dword [ebp - 0x40]
jmp 0x1003c883
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x394]
call fcn.10015a06
mov esi, 0x1006989c
lea ecx, [ebp - 0x2d4]
push 3
mov dword [ebp - 0x54], esi
mov dword [ebp - 0x44], esi
call fcn.10015984
mov dword [ebp - 4], 0x18
mov dword [ebp - 0x28], 0xffffffff
mov dword [ebp - 0x34], ebx
mov dword [ebp - 0x28], ebx
jmp 0x1003d4db
mov ecx, dword [ebp - 0x28]
mov eax, dword [ebp - 0x2d4]
mov dword [eax + ecx*4], 6
inc dword [ebp - 0x28]
cmp dword [ebp - 0x28], 3
jl 0x1003d4c8
mov dword [ebp - 0x28], 2
cmp dword [ebp - 0x28], ebx
jl 0x1003d507
mov byte [ebp - 0x11], bl
cmp byte [ebp - 0x11], 0
je 0x1003d502
push ebx
push 0x17c9
call dword [sym.imp.USER32.dll_TranslateMDISysAccel]
dec dword [ebp - 0x28]
jns 0x1003d4ed
mov dword [ebp - 0x48], 0x2c87
cmp dword [ebp - 0x48], 0x3047
jle 0x1003d576
mov eax, ebx
mov dword [ebp - 0x18], ebx
mov esi, ebx
mov dword [ebp - 0x3c], ebx
cdq
idiv esi
mov dword [ebp - 0x30], 0x6ad1
mov eax, edx
mov dword [ebp - 0x2c], eax
mov edi, eax
mov esi, 0x44aa
mov eax, edi
mov ecx, 0x1060a8b8
cdq
push edx
push eax
call fcn.1000de0e
inc edi
dec esi
jne 0x1003d537
mov eax, dword [ebp - 0x2c]
dec eax
dec dword [ebp - 0x30]
mov dword [ebp - 0x2c], eax
jne 0x1003d530
mov esi, dword [ebp - 0x3c]
mov eax, dword [ebp - 0x18]
inc esi
mov dword [ebp - 0x3c], esi
cmp esi, 0x3d9d
jl 0x1003d521
inc eax
mov dword [ebp - 0x18], eax
cmp eax, 0x718b
jl 0x1003d51c
xor edi, edi
inc edi
mov eax, dword [ebp - 0x2d4]
mov eax, dword [eax + 4]
mov dword [ebp - 0x28], eax
mov byte [ebp - 4], 0x19
cmp dword [ebp - 0x48], 0x29ad
jge 0x1003d5c5
mov edx, 0x1000b3f8
mov ecx, 0x1060a8b8
call fcn.1000f7c5
jmp 0x1003d5c5
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x2d4]
call fcn.10015a06
mov dword [ebp - 0x20], edi
mov dword [ebp - 0x38], 0xfffffffe
mov eax, dword [ebp - 0x20]
neg eax
sbb eax, eax
neg eax
cmp edi, eax
mov eax, dword [ebp - 0x20]
sbb ecx, ecx
xor edx, edx
neg ecx
cmp ecx, eax
mov eax, dword [ebp - 0x20]
setg dl
sub eax, dword [ebp - 0x20]
neg eax
sbb eax, eax
inc eax
add edx, eax
mov eax, dword [ebp - 0x20]
sub eax, dword [ebp - 0x20]
imul edx, eax
imul edx, dword [ebp - 0x20]
mov dword [ebp - 0x38], edx
cmp dword [ebp - 0x20], ebx
je 0x1003d64c
mov dword [ebp - 0x28], ebx
jmp 0x1003d62b
mov eax, dword [ebp - 0x28]
mov dword [ebp + eax*4 - 0x4cc], ebx
inc dword [ebp - 0x28]
cmp dword [ebp - 0x28], 4
jl 0x1003d61e
mov ecx, dword [ebp - 0x4c0]
xor edx, edx
mov eax, dword [ebp - 0x4c0]
cmp ecx, eax
setg dl
mov dword [ebp - 0x4c8], edx
jmp 0x1003d69a
mov dword [ebp - 0x20], 0xffffffe6
jmp 0x1003d672
mov dword [ebp - 0x2c], 0xe9ab5c29
mov dword [ebp - 0x38], ebx
jmp 0x1003d669
cmp dword [ebp - 0x2c], ebx
jne 0x1003d66f
dec dword [ebp - 0x38]
cmp dword [ebp - 0x38], 0xfffffffc
je 0x1003d661
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], 0x27
jne 0x1003d655
mov dword [ebp - 0x20], ebx
jmp 0x1003d694
mov byte [ebp - 0x11], bl
cmp byte [ebp - 0x11], 0
je 0x1003d691
push 0x643
call dword [sym.imp.USER32.dll_GetKeyboardLayout]
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], 0x26
jne 0x1003d67d
movdqa xmm0, xmmword [0x1000c530]
lea ecx, [ebp - 0x638]
push ecx
lea eax, [ebp - 0x628]
push eax
push ecx
lea ecx, [ebp - 0x364]
movdqu xmmword [ebp - 0x638], xmm0
call fcn.100159e0
lea ecx, [ebp - 0x608]
mov dword [ebp - 4], 0x1b
movdqa xmm0, xmmword [0x1000c530]
lea eax, [ebp - 0x5f8]
push ecx
push eax
push ecx
lea ecx, [ebp - 0x3dc]
movdqu xmmword [ebp - 0x608], xmm0
call fcn.100159e0
mov byte [ebp - 4], 0x1c
mov dword [ebp - 0x40], 0xfffffffb
mov dword [ebp - 0x28], edi
mov dword [ebp - 0x34], 0x98e64e6d
mov dword [ebp - 0x34], edi
mov dword [ebp - 0x38], 0x1e7b
mov dword [ebp - 0x2c], edi
mov dword [ebp - 0x24], 2
mov dword [ebp - 0x40], ebx
cmp dword [ebp - 0x40], 3
jg 0x1003d8ff
mov dword [ebp - 0x34], 0x31d83293
mov dword [ebp - 0x458], ebx
mov dword [ebp - 0x454], ebx
mov dword [ebp - 0x450], ebx
mov dword [ebp - 0x44c], ebx
mov dword [ebp - 0x48], 0x569a
cmp dword [ebp - 0x48], 0x580c
jle 0x1003d7eb
mov dword [ebp - 0x3c], ebx
mov ecx, ebx
mov dword [ebp - 0x30], 0x2b85
mov dword [ebp - 0x18], ecx
mov esi, ebx
mov dword [ebp - 0x2c], ebx
mov eax, ecx
cdq
idiv esi
mov esi, 0x4da1
mov edi, edx
mov eax, edi
lea ecx, [ebp - 0x8cc]
cdq
push edx
push eax
call fcn.1000d990
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x1003d798
mov eax, dword [eax]
push eax
call fcn.1004c266
pop ecx
push ebx
push 1
lea ecx, [ebp - 0x8cc]
call fcn.1000e1eb
dec edi
dec esi
jne 0x1003d77e
mov esi, dword [ebp - 0x2c]
mov ecx, dword [ebp - 0x18]
inc esi
mov dword [ebp - 0x2c], esi
cmp esi, 0x731e
jl 0x1003d772
mov eax, dword [ebp - 0x3c]
add ecx, eax
dec dword [ebp - 0x30]
mov dword [ebp - 0x18], ecx
jne 0x1003d76d
inc eax
mov dword [ebp - 0x3c], eax
cmp eax, 0x7a6
jl 0x1003d761
push 0x1703
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_QueryDosDeviceW]
xor edi, edi
inc edi
mov dword [ebp - 0x2c], 0xffffffff
cmp dword [ebp - 0x48], 0x5452
jge 0x1003d806
push 0x1000b414
call fcn.1004c266
pop ecx
mov dword [ebp - 4], 0x1c
inc dword [ebp - 0x2c]
mov dword [ebp - 0x24], ebx
jmp 0x1003d8ed
mov dword [ebp - 0x18], 0x9314
lea ecx, [ebp - 0x208]
push edi
call fcn.10015984
mov dword [ebp - 0x2c], edi
mov dword [ebp - 0x28], ebx
jmp 0x1003d846
mov ecx, dword [ebp - 0x28]
mov eax, dword [ebp - 0x208]
mov dword [eax + ecx*4], 0x6b903cfc
inc dword [ebp - 0x28]
cmp dword [ebp - 0x28], edi
jl 0x1003d833
mov dword [ebp - 0x28], ebx
jmp 0x1003d8d5
mov dword [ebp - 0x30], 0xc9f7
xor edx, edx
mov eax, dword [ebp - 0x40]
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x44c]
mov eax, dword [ebp - 0x208]
cmp dword [eax], ecx
mov eax, dword [ebp - 0x18]
setg dl
xor ecx, ecx
imul eax, edx
cmp eax, 7
mov eax, dword [ebp - 0x208]
setne cl
xor edx, edx
cmp ecx, dword [eax]
mov eax, dword [ebp - 0x18]
setge dl
xor ecx, ecx
cmp edx, eax
sete cl
mov dword [ebp - 0x2c], ecx
mov edx, dword [ebp - 0x24]
mov ecx, dword [ebp - 0x3dc]
mov eax, dword [ebp - 0x2c]
add eax, dword [ecx + edx*4]
cmp eax, edi
jne 0x1003d8b5
mov esi, edi
cmp dword [ebp - 0x30], ebx
jne 0x1003d8b7
mov esi, ebx
mov ecx, dword [ebp - 0x24]
mov eax, dword [ebp - 0x3dc]
mov edx, dword [eax + ecx*4]
xor ecx, ecx
mov eax, dword [ebp - 0x38]
add edx, esi
cmp edx, eax
setle cl
mov dword [ebp - 0x2c], ecx
inc dword [ebp - 0x28]
cmp dword [ebp - 0x28], 3
jle 0x1003d853
lea ecx, [ebp - 0x208]
call fcn.10015a06
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], 3
jle 0x1003d818
inc dword [ebp - 0x40]
jmp 0x1003d721
lea ecx, [ebp - 0x3dc]
mov byte [ebp - 4], 0x1b
call fcn.10015a06
xor ecx, ecx
mov dword [ebp - 0x18], 0xfffffffb
inc ecx
mov dword [ebp - 0x40], ecx
mov dword [ebp - 0x28], ebx
cmp dword [ebp - 0x28], 2
jge 0x1003d93a
push 0xfffffffffffffffd
pop esi
mov eax, dword [ebp - 0x28]
mov dword [ebp + eax*4 - 0x550], esi
inc dword [ebp - 0x28]
cmp dword [ebp - 0x28], 2
jl 0x1003d927
mov dword [ebp - 0x40], ebx
jmp 0x1003d9b4
mov dword [ebp - 0x28], ebx
jmp 0x1003d952
mov eax, dword [ebp - 0x28]
mov dword [ebp + eax*4 - 0x78], 0xffffffff
inc dword [ebp - 0x28]
cmp dword [ebp - 0x28], ecx
jl 0x1003d944
mov byte [ebp - 0x11], bl
cmp byte [ebp - 0x11], 0
je 0x1003d982
push 0x1a4d
push 0xf06
push 0x413
push 0xbb
push 0x756
call dword [sym.imp.GDI32.dll_ExcludeClipRect]
xor ecx, ecx
inc ecx
mov dword [ebp - 0x78], 0x1a
jmp 0x1003d9ab
mov dword [ebp - 0x2c], 0xad67
cmp dword [ebp - 0x2c], ebx
jne 0x1003d99e
mov eax, ebx
cmp dword [ebp - 0x78], ebx
je 0x1003d9a0
mov eax, ecx
neg eax
mov dword [ebp - 0x550], eax
dec dword [ebp - 0x78]
cmp dword [ebp - 0x78], 8
jge 0x1003d98b
inc dword [ebp - 0x40]
cmp dword [ebp - 0x40], 0x1d
jne 0x1003d93f
mov dword [ebp - 0x20], ecx
mov dword [ebp - 0x34], 0x98e64e6d
mov dword [ebp - 0x3c], 0x11fb
cmp dword [ebp - 0x3c], 0x1215
jle 0x1003da34
mov ecx, ebx
mov dword [ebp - 0x18], ebx
mov edi, ebx
mov esi, ebx
mov eax, esi
xor eax, edi
or eax, ecx
lea ecx, [ebp - 0x794]
cdq
push edx
push eax
call fcn.1000d990
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x1003d9fb
mov eax, dword [eax]
push eax
call fcn.1004c266
pop ecx
push ebx
push 1
lea ecx, [ebp - 0x794]
call fcn.1000e1eb
mov ecx, dword [ebp - 0x18]
inc esi
cmp esi, 0x25c8
jl 0x1003d9dd
inc edi
cmp edi, 0x3382
jl 0x1003d9db
inc ecx
mov dword [ebp - 0x18], ecx
cmp ecx, 0x286f
jl 0x1003d9d9
xor ecx, ecx
inc ecx
mov dword [ebp - 0x48], 0xe97eede0
mov dword [ebp - 0x2c], ecx
mov dword [ebp - 0x18], 0xffffffff
mov dword [ebp - 0x18], 5
mov dword [ebp - 0x28], ebx
jmp 0x1003da62
mov eax, dword [ebp - 0x28]
mov dword [ebp + eax*4 - 0x184], 0x43c6fe23
inc dword [ebp - 0x28]
cmp dword [ebp - 0x28], 3
jl 0x1003da51
mov dword [ebp - 0x30], 0x1ffd
cmp dword [ebp - 0x30], 0x2237
jle 0x1003dabf
mov edi, ebx
mov esi, ebx
mov eax, esi
lea ecx, [ebp - 0x854]
and eax, edi
cdq
push edx
push eax
call fcn.1000d990
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x1003da98
mov eax, dword [eax]
push eax
call fcn.1004c266
pop ecx
push ebx
push 1
lea ecx, [ebp - 0x854]
call fcn.1000e1eb
inc esi
cmp esi, 0x1e3e
jl 0x1003da7c
inc edi
cmp edi, 0x8041
jl 0x1003da7a
mov eax, dword [ebp - 0x184]
xor edx, edx
mov dword [ebp - 0x2c], eax
mov ecx, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x184]
cmp ecx, eax
setl dl
mov dword [ebp - 0x18], edx
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x48]
sub ecx, eax
neg ecx
sbb ecx, ecx
inc ecx
cmp ecx, dword [ebp - 0x184]
je 0x1003daf6
mov eax, dword [ebp - 0x184]
mov eax, dword [ebp - 0x17c]
xor ecx, ecx
cmp eax, 0xfad5
setge cl
cmp ecx, 0xe6f7fbf2
sbb eax, eax
neg eax
lea ecx, [eax - 0x9125]
mov eax, dword [ebp - 0x48]
neg eax
sbb eax, eax
xor edx, edx
inc eax
cmp eax, ecx
mov eax, dword [ebp - 0x48]
setge dl
xor ecx, ecx
cmp eax, edx
setle cl
mov dword [ebp - 0x18], ecx
cmp dword [ebp - 0x30], 0x1f7a
jge 0x1003db46
push 0x1000b470
call fcn.1004c266
pop ecx
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x18], eax
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x3c], 0xf41
jge 0x1003db66
push 0x1000b43c
call fcn.1004c266
pop ecx
mov dword [ebp - 4], 0x1b
xor edi, edi
inc edi
mov dword [ebp - 0x34], edi
mov dword [ebp - 0x24], ebx
mov dword [ebp - 0x18], 0xf5954e3f
mov dword [ebp - 0x2c], 0xffffffff
mov dword [ebp - 0x1c], ebx
jmp 0x1003db9a
cmp dword [ebp - 0x1c], edi
jl 0x1003db89