Function at 0x1003ebe0
Capabilities:
Accept command line arguments
Create pipe
Query environment variable

Disassembly:
mov eax, 0x1005ef32
call fcn.1005d360
sub esp, 0x270
push ebx
push esi
push edi
xor esi, esi
mov dword [ebp - 0x10], esp
mov dword [ebp - 0x9c], ecx
inc esi
xor ebx, ebx
mov dword [ebp - 0xd8], edx
push esi
lea ecx, [ebp - 0xb8]
mov dword [ebp - 0x19c], ebx
call fcn.1000580e
mov dword [ebp - 4], ebx
mov dword [ebp - 0x28], 0x4786
cmp dword [ebp - 0x28], 0x49bd
jle 0x1003ecc8
push ebx
push esi
push esi
push ebx
call dword [sym.imp.KERNEL32.dll_CreateEventA]
mov edi, ebx
mov dword [ebp - 0x18], ebx
mov ecx, ebx
mov dword [ebp - 0x2c], ebx
mov eax, edi
mov dword [ebp - 0x38], ebx
cdq
mov edi, ebx
idiv ecx
mov eax, edx
mov dword [ebp - 0x30], eax
mov ecx, ebx
mov dword [ebp - 0x20], 0x5c79
mov dword [ebp - 0x34], ecx
sar eax, cl
lea ecx, [ebp - 0x230]
cdq
push edx
push eax
call fcn.10001ace
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x1003ec79
mov eax, dword [eax]
push eax
call fcn.1004699c
pop ecx
push ebx
push esi
lea ecx, [ebp - 0x230]
call fcn.10005d35
mov ecx, dword [ebp - 0x34]
mov eax, dword [ebp - 0x30]
add ecx, edi
dec dword [ebp - 0x20]
mov dword [ebp - 0x34], ecx
jne 0x1003ec5f
inc edi
cmp edi, 0x2cdd
jl 0x1003ec53
mov ecx, dword [ebp - 0x2c]
mov edi, dword [ebp - 0x18]
inc ecx
mov dword [ebp - 0x2c], ecx
cmp ecx, 0x2fa0
jl 0x1003ec44
inc edi
mov dword [ebp - 0x18], edi
cmp edi, 0x1a6a
jl 0x1003ec3f
mov dword [ebp - 0x24], 0x453606de
cmp dword [ebp - 0x28], 0x4681
jge 0x1003ece3
push str.unqeqyliw_blvdqjtzg_ydv_evcs
call fcn.1004699c
pop ecx
push 3
pop edx
mov dword [ebp - 0x30], edx
mov dword [ebp - 0x2c], ebx
jmp 0x1003ecfd
mov ecx, dword [ebp - 0x2c]
mov eax, dword [ebp - 0xb8]
mov dword [eax + ecx*4], edx
inc dword [ebp - 0x2c]
cmp dword [ebp - 0x2c], esi
jl 0x1003ecee
mov dword [ebp - 0x24], ebx
cmp dword [ebp - 0x24], ebx
jl 0x1003ee5f
mov dword [ebp - 0x20], 0x83111738
mov dword [ebp - 0x18], 0x15e82aa9
mov dword [ebp - 0x38], 0x2cfb6473
mov byte [ebp - 0x19], bl
cmp byte [ebp - 0x19], 0
je 0x1003ed35
push ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_GetEnvironmentVariableW]
mov dword [ebp - 0x20], ebx
cmp dword [ebp - 0x20], ebx
jl 0x1003ee56
mov dword [ebp - 0x28], 9
mov dword [ebp - 0x2c], ebx
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0x24]
mov edx, dword [ebp - 0x24]
mov ecx, dword [ebp - 0xb8]
mov eax, dword [ecx + eax*4]
mov dword [ecx + edx*4], eax
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0x20]
cmp eax, dword [ebp - 0x24]
jge 0x1003ee14
mov dword [ebp - 0x34], esi
mov dword [ebp - 0x18], ebx
cmp dword [ebp - 0x18], ebx
jg 0x1003ee4a
mov dword [ebp - 0x28], 5
xor edx, edx
mov edi, dword [ebp - 0x24]
mov ecx, dword [ebp - 0x24]
mov esi, dword [ebp - 0xb8]
mov eax, dword [ebp - 0xb8]
mov eax, dword [eax + ecx*4]
mov dword [esi + edi*4], eax
mov dword [ebp - 0x28], ebx
mov ecx, dword [ebp - 0x34]
mov eax, dword [ebp - 0x2c]
cmp ecx, eax
mov eax, dword [ebp - 0x28]
mov ecx, 0xa04f
setne dl
sub ecx, eax
mov eax, dword [ebp - 0x2c]
sub ecx, edx
neg ecx
sbb ecx, ecx
xor edx, edx
inc ecx
cmp ecx, eax
mov eax, dword [ebp - 0x24]
setle dl
sub edx, 0xfffffffc
neg edx
sbb edx, edx
xor ecx, ecx
inc edx
cmp eax, edx
setge cl
imul ecx, dword [ebp - 0x34]
mov dword [ebp - 0x28], ecx
xor ecx, ecx
mov eax, dword [ebp - 0x28]
add eax, dword [esi + edi*4]
imul edx, eax, 0xd09e
mov eax, dword [ebp - 0x18]
cmp edx, eax
sete cl
mov dword [ebp - 0x30], ecx
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], ebx
jle 0x1003ed87
xor esi, esi
inc esi
jmp 0x1003ee4a
mov dword [ebp - 0x2c], 0x17
jmp 0x1003ee44
mov dword [ebp - 0x30], ebx
cmp dword [ebp - 0x30], ebx
jl 0x1003ee41
mov byte [ebp - 0x19], bl
cmp byte [ebp - 0x19], 0
je 0x1003ee3c
push ebx
push ebx
push ebx
push ebx
push ebx
push ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_CreateNamedPipeA]
dec dword [ebp - 0x30]
jns 0x1003ee25
dec dword [ebp - 0x2c]
cmp dword [ebp - 0x2c], 0xfffffffc
jl 0x1003ee1d
mov dword [ebp - 0x38], esi
dec dword [ebp - 0x20]
jns 0x1003ed41
dec dword [ebp - 0x24]
jns 0x1003ed0e
mov dword [ebp - 0x24], 0xffffffff
lea ecx, [ebp - 0xb8]
or dword [ebp - 4], 0xffffffff
call fcn.1000586b
push 4
lea ecx, [ebp - 0x198]
call fcn.1000580e
mov dword [ebp - 4], 3
mov dword [ebp - 0x2c], 0x2a9b
cmp dword [ebp - 0x2c], 0x2df1
jle 0x1003eee8
mov dword [ebp - 0x20], ebx
mov edi, ebx
mov dword [ebp - 0x30], ebx
mov eax, edi
mov dword [ebp - 0x34], 0x5b79
mov edi, dword [ebp - 0x20]
mov dword [ebp - 0x28], eax
and eax, edi
mov ecx, 0x10078bb8
cdq
push edx
push eax
call fcn.100055e4
mov eax, dword [ebp - 0x28]
dec eax
dec dword [ebp - 0x34]
mov dword [ebp - 0x28], eax
jne 0x1003eeb0
mov edi, dword [ebp - 0x30]
inc edi
mov dword [ebp - 0x30], edi
cmp edi, 0x805c
jl 0x1003eea1
mov eax, dword [ebp - 0x20]
inc eax
mov dword [ebp - 0x20], eax
cmp eax, 0x824
jl 0x1003ee9c
mov dword [ebp - 0x18], ebx
jmp 0x1003ef00
mov ecx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x198]
mov dword [eax + ecx*4], 0x7786
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 4
jl 0x1003eeed
mov byte [ebp - 4], 4
cmp dword [ebp - 0x2c], 0x270c
jge 0x1003ef43
mov edx, str.bgsnvhm_irlwysrww_brbqr_lbdilfo_rbuxg_clznvm_hfhrei_vklklvvst_kdpwtvnrs_dnkd_ccz_tfxag
mov ecx, 0x10078bb8
call fcn.10009472
jmp 0x1003ef43
mov dword [ebp - 4], 3
mov dword [ebp - 0x18], ebx
jmp 0x1003ef5d
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x6c], 0x6960f57a
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], esi
jl 0x1003ef4f
mov dword [ebp - 0x30], 0x96e
cmp dword [ebp - 0x30], 0x993
jle 0x1003f00a
mov eax, ebx
mov dword [ebp - 0x20], ebx
mov edi, ebx
mov dword [ebp - 0x34], ebx
mov ecx, edi
mov edx, ebx
sar eax, cl
mov dword [ebp - 0x28], edx
mov dword [ebp - 0x2c], eax
mov ecx, edx
mov edi, ebx
sar eax, cl
mov dword [ebp - 0x38], eax
mov ecx, edi
sar eax, cl
lea ecx, [ebp - 0x260]
cdq
push edx
push eax
call fcn.10001ace
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x1003efb1
mov eax, dword [eax]
push eax
call fcn.1004699c
pop ecx
push ebx
push esi
lea ecx, [ebp - 0x260]
call fcn.10005d35
mov eax, dword [ebp - 0x38]
inc edi
cmp edi, 0xa58
jl 0x1003ef95
mov edx, dword [ebp - 0x28]
mov eax, dword [ebp - 0x2c]
inc edx
mov dword [ebp - 0x28], edx
cmp edx, 0x208e
jl 0x1003ef8c
mov edi, dword [ebp - 0x34]
mov eax, dword [ebp - 0x20]
inc edi
mov dword [ebp - 0x34], edi
cmp edi, 0x1141
jl 0x1003ef80
inc eax
mov dword [ebp - 0x20], eax
cmp eax, 0x969
jl 0x1003ef7b
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [ebp - 0x6c], 3
cmp dword [ebp - 0x6c], ebx
jl 0x1003f02f
mov byte [ebp - 0x19], bl
cmp byte [ebp - 0x19], 0
je 0x1003f02a
push 0xef3
call dword [sym.imp.USER32.dll_GetKeyboardType]
dec dword [ebp - 0x6c]
jns 0x1003f016
cmp dword [ebp - 0x30], 0x70a
jge 0x1003f043
push str.vozf_jkx_gntrbr_nbvldw_fbpqqly_dtz_sdlubsc_kztvwlzja_fts_hhid_lon_csbw
call fcn.1004699c
pop ecx
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x198]
call fcn.1000586b
mov eax, 0xbdde
mov dword [ebp - 0xd4], eax
mov dword [ebp - 0xd0], eax
mov dword [ebp - 0xcc], eax
mov dword [ebp - 0xc8], eax
mov dword [ebp - 0x18], 0xe56f9b2c
mov dword [ebp - 0x38], 0x7f05f432
mov dword [ebp - 0x18], 3
cmp dword [ebp - 0x18], ebx
jl 0x1003f142
mov dword [ebp - 0x28], 2
mov dword [ebp - 0x20], ebx
jmp 0x1003f0aa
mov eax, dword [ebp - 0x20]
mov dword [ebp + eax*4 - 0xc4], 9
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], esi
jl 0x1003f099
mov eax, dword [ebp - 0x18]
cmp dword [ebp + eax*4 - 0xd4], esi
jge 0x1003f0c7
mov dword [ebp - 0x28], 0x46cdead9
dec dword [ebp - 0x28]
jmp 0x1003f139
mov dword [ebp - 0x20], ebx
jmp 0x1003f0dd
mov eax, dword [ebp - 0x20]
mov dword [ebp + eax*4 - 0x174], 0x90a3
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], 4
jl 0x1003f0cc
mov eax, dword [ebp - 0xcc]
xor edx, edx
mov dword [ebp - 0xc4], eax
mov dword [ebp - 0x28], eax
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0xc8]
sub ecx, eax
mov eax, dword [ebp - 0x18]
mov esi, dword [ebp + eax*4 - 0xd4]
add esi, ecx
mov ecx, dword [ebp - 0x16c]
mov eax, dword [ebp - 0x16c]
cmp ecx, eax
mov eax, dword [ebp - 0x16c]
setg dl
xor ebx, ebx
cmp edx, esi
setg bl
xor ecx, ecx
cmp eax, ebx
setle cl
xor esi, esi
dec ecx
xor ebx, ebx
mov dword [ebp - 0x38], ecx
inc esi
dec dword [ebp - 0x18]
jns 0x1003f08d
mov dword [ebp - 0x18], 0x12
cmp dword [ebp - 0x18], 0xffffffef
jge 0x1003f23c
mov dword [ebp - 0x30], 0x1fd1
cmp dword [ebp - 0x30], 0x2321
jle 0x1003f1cd
mov dword [ebp - 0x20], ebx
mov edi, ebx
mov dword [ebp - 0x34], ebx
mov esi, ebx
mov dword [ebp - 0x28], ebx
mov eax, edi
mov dword [ebp - 0x38], ebx
cdq
idiv esi
mov edi, dword [ebp - 0x20]
mov esi, ebx
mov ecx, edx
mov dword [ebp - 0x2c], ecx
mov eax, esi
and eax, ecx
mov ecx, 0x10078bb8
or eax, edi
cdq
push edx
push eax
call fcn.100055e4
mov ecx, dword [ebp - 0x2c]
inc esi
cmp esi, 0x6608
jl 0x1003f182
mov esi, dword [ebp - 0x28]
mov edi, dword [ebp - 0x34]
inc esi
mov dword [ebp - 0x28], esi
cmp esi, 0x615b
jl 0x1003f170
inc edi
mov dword [ebp - 0x34], edi
cmp edi, 0x5103
jl 0x1003f16b
mov eax, dword [ebp - 0x20]
inc eax
mov dword [ebp - 0x20], eax
cmp eax, 0x70a8
jl 0x1003f166
mov dword [ebp - 0x20], ebx
jmp 0x1003f1e3
mov eax, dword [ebp - 0x20]
mov dword [ebp + eax*4 - 0x94], 0xfb8eb5ea
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], 1
jl 0x1003f1d2
mov dword [ebp - 4], 8
cmp dword [ebp - 0x30], 0x1cfb
jge 0x1003f208
mov edx, str.htbjpstqh_kcwzf_yxholrbg_gna_tdaodjc_src_lecjbcj_lds_cfyzjsdt_psgaq_zxlrekyz_glimml
mov ecx, 0x10078bb8
call fcn.10009472
or dword [ebp - 4], 0xffffffff
dec dword [ebp - 0x94]
dec dword [ebp - 0x18]
jmp 0x1003f149
mov dword [ebp - 0x68], 0x4401b000
mov dword [ebp - 0x64], 0xe022604
mov dword [ebp - 0x60], 0x30053306
mov dword [ebp - 0x5c], 0xe010e03
mov dword [ebp - 0x18], 0xfe0a8eac
mov dword [ebp - 0x18], 0xffffffe5
jmp 0x1003f281
mov byte [ebp - 0x19], bl
cmp byte [ebp - 0x19], 0
je 0x1003f27e
push ebx
push 0x510
push ebx
call dword [sym.imp.OLEAUT32.dll_SafeArrayLock]
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 0xfffffffb
jle 0x1003f268
mov dword [ebp - 0x18], ebx
jmp 0x1003f2bd
mov dword [ebp - 0x28], 0x6e5b
xor ecx, ecx
mov dword [ebp - 0x38], 0xca31
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x18]
cmp eax, 0x4caf14c9
setge cl
xor eax, eax
test ecx, ecx
setg al
mov dword [ebp - 0x38], eax
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 6
jle 0x1003f28c
push 0x47
pop eax
push 2
lea ecx, [ebp - 0xfc]
mov word [ebp - 0x12c], ax
call fcn.1000580e
mov dword [ebp - 4], 0xa
push 0xfffffffffffffff8
pop eax
mov dword [ebp - 0x90], eax
mov dword [ebp - 0x8c], eax
mov dword [ebp - 0x88], eax
mov dword [ebp - 0x84], eax
mov dword [ebp - 0x28], 3
mov dword [ebp - 0x28], 0xffffffff
mov dword [ebp - 0x3c], 0x4c3f4f88
push 2
mov dword [ebp - 0x38], 6
mov dword [ebp - 0x18], ebx
pop edx
jmp 0x1003f333
mov ecx, dword [ebp - 0x18]
mov eax, dword [ebp - 0xfc]
mov dword [eax + ecx*4], 0xfffffffa
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], edx
jl 0x1003f320
mov dword [ebp - 0x18], ebx
jmp 0x1003f34e
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0xc0], 0xffff
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], edx
jl 0x1003f33d
xor esi, esi
mov dword [ebp - 0x90], ebx
inc esi
jmp 0x1003f43a
mov dword [ebp - 0x3c], 0x8421705
lea ecx, [ebp - 0x150]
push esi
call fcn.1000580e
mov dword [ebp - 0x18], ebx
jmp 0x1003f38c
mov ecx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x150]
mov dword [eax + ecx*4], 0x9161d594
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], esi
jl 0x1003f379
mov dword [ebp - 0x18], ebx
jmp 0x1003f3a7
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x218], 0xc62b
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 3
jl 0x1003f396
mov eax, dword [ebp - 0x90]
mov eax, dword [ebp - 0x218]
sub eax, 0x7966d0e2
jne 0x1003f3c7
mov edx, ebx
cmp dword [ebp - 0x38], ebx
je 0x1003f3c9
mov edx, esi
mov ecx, dword [ebp - 0x90]
mov edi, esi
mov eax, dword [ebp - 0xfc]
mov ecx, dword [eax + ecx*4]
mov eax, dword [ebp - 0xc0]
add ecx, 0x677b
imul eax, ecx
mov dword [ebp - 0x28], eax
mov eax, dword [ebp - 0x28]
dec dword [ebp - 0xc0]
cmp eax, edx
mov ecx, dword [ebp - 0x90]
mov eax, dword [ebp - 0xfc]
cmovl edi, ebx
xor edx, edx
cmp dword [eax + ecx*4], edi
setge dl
sub edx, 6
neg edx
sbb edx, edx
inc edx
mov dword [ebp - 0x28], edx
mov byte [ebp - 0x19], bl
cmp byte [ebp - 0x19], 0
je 0x1003f429
push ebx
call dword [sym.imp.KERNEL32.dll_InitializeSListHead]
lea ecx, [ebp - 0x150]
call fcn.1000586b
inc dword [ebp - 0x90]
cmp dword [ebp - 0x90], esi
jle 0x1003f361
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xfc]
call fcn.1000586b
push 2
pop edi
mov ecx, ebx
mov dword [ebp - 0x24], edi
cmp edi, 0x10
jae 0x1003f79c
movzx eax, byte [ebp - 0x68]
lea eax, [eax*2 + 2]
cmp edi, eax
jne 0x1003f642
mov dword [ebp - 0x2c], 0xffffffff
mov dword [ebp - 0x20], ebx
jmp 0x1003f496
mov eax, dword [ebp - 0x20]
mov dword [ebp + eax*4 - 0x158], 0x24a8c6a5
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], 2
jl 0x1003f485
mov dword [ebp - 0x2c], ebx
jmp 0x1003f4b2
mov eax, dword [ebp - 0x2c]
mov dword [ebp + eax*4 - 0x158], 0x6df251d6
inc dword [ebp - 0x2c]
cmp dword [ebp - 0x2c], 2
jl 0x1003f4a1
mov byte [ebp - 0x19], bl
cmp byte [ebp - 0x19], 0
je 0x1003f4cb
push ebx
push ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_CreatePipe]
movzx eax, byte [ebp + edi - 0x68]
lea ecx, [ebp - 0x18c]
inc eax
mov dword [ebp - 0x20], 0xffffffff
mov dword [ebp - 0x3c], 0xffffffff
push 3
mov dword [ebp - 0x34], eax
call fcn.1000580e
mov dword [ebp - 4], 0xb
mov dword [ebp - 0x3c], ebx
mov dword [ebp - 0x3c], 0x184
mov dword [ebp - 0x3c], 0xa530
mov dword [ebp - 0x3c], 0xfbfc75da
mov dword [ebp - 0x3c], 0x48bb
mov dword [ebp - 0x3c], 0xeb66
mov dword [ebp - 0x3c], 0xbb7a2e25
mov dword [ebp - 0x18], ebx
jmp 0x1003f53b
mov ecx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x18c]
mov dword [eax + ecx*4], 0xc2039807
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 3
jl 0x1003f528
mov dword [ebp - 0x18], ebx
jmp 0x1003f557
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0xa0], 0x32da3bb1
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], esi
jl 0x1003f546
dec dword [ebp - 0xa0]
mov dword [ebp - 0x28], 0x5cea
cmp dword [ebp - 0x28], 0x5ea3
jle 0x1003f5c4
mov ecx, ebx
mov dword [ebp - 0x20], ebx
mov edi, ebx
mov dword [ebp - 0x30], ebx
mov eax, edi
cdq
idiv dword [ebp - 0x30]
xor edx, ecx
mov ecx, 0x10078bb8
mov eax, edx
cdq
push edx
push eax
call fcn.100055e4
mov eax, dword [ebp - 0x30]
mov ecx, dword [ebp - 0x20]
inc eax
mov dword [ebp - 0x30], eax
cmp eax, 0x3975
jl 0x1003f57c
inc edi
cmp edi, 0x76f1
jl 0x1003f579
inc ecx
mov dword [ebp - 0x20], ecx
cmp ecx, 0x1649
jl 0x1003f577
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_FileTimeToLocalFileTime]
mov edi, dword [ebp - 0x24]
mov dword [ebp - 0x20], ebx
jmp 0x1003f5dd
mov byte [ebp - 0x19], bl
cmp byte [ebp - 0x19], 0
je 0x1003f5da
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_SetCommTimeouts]
dec dword [ebp - 0x20]
cmp dword [ebp - 0x20], 0xffffffea
jle 0x1003f5c9
mov byte [ebp - 4], 0xc
cmp dword [ebp - 0x28], 0x5a9f
jge 0x1003f623
mov edx, str.ctewde_waj_rkbspora_jwho_yxs_rmhfdeid_pfqjenw_bknj_oxtr
mov ecx, 0x10078bb8
call fcn.10009472
jmp 0x1003f623
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x18c]
call fcn.1000586b
movzx eax, byte [ebp + edi - 0x68]
dec edi
mov ecx, dword [ebp - 0x34]
add edi, eax
jmp 0x1003f794
movzx edx, byte [ebp + edi - 0x67]
mov eax, edi
sub eax, ecx
movzx eax, byte [ebp + eax - 0x6a]
movzx eax, word [ebp + eax*2 - 0x12c]
mov ecx, eax
and eax, edx
or ecx, edx
xor edx, edx
sub ecx, eax
movzx eax, byte [ebp + edi - 0x68]
mov word [ebp + eax*2 - 0x12c], cx
mov dword [ebp - 0x24], 0x937d
mov dword [ebp - 0x18], 0x434678dc
mov dword [ebp - 0x38], 0xc5c2
mov eax, dword [ebp - 0x24]
mov dword [ebp - 0x18], eax
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x24]
mov eax, dword [ebp - 0x24]
cmp ecx, eax
mov eax, dword [ebp - 0x24]
setl dl
sub eax, 0x8b6b
neg eax
sbb eax, eax
add eax, 0xb
cmp edx, eax
je 0x1003f6e1
cmp dword [ebp - 0x24], ebx
je 0x1003f6e1
mov dword [ebp - 0x18], 0xfffffff3
jmp 0x1003f6d6
mov byte [ebp - 0x19], bl
cmp byte [ebp - 0x19], 0
je 0x1003f6d3
push ebx
push ebx
call dword [sym.imp.GDI32.dll_GetNearestPaletteIndex]
dec dword [ebp - 0x18]
cmp dword [ebp - 0x18], 0xffffffeb
jg 0x1003f6c2
jmp 0x1003f792
mov dword [ebp - 0x20], ebx
jmp 0x1003f6f0
mov eax, dword [ebp - 0x20]
mov dword [ebp + eax*4 - 0x40], esi
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], esi
jl 0x1003f6e6
mov dword [ebp - 0x24], ebx
jmp 0x1003f72c
mov byte [ebp - 0x19], bl
cmp byte [ebp - 0x19], 0
je 0x1003f70a
push ebx
call dword [sym.imp.KERNEL32.dll_SetCommBreak]
mov byte [ebp - 0x19], bl
cmp byte [ebp - 0x19], 0
je 0x1003f729
push esi
push 0x16d6
push 0x17f7
push 0x2482
call dword [sym.imp.USER32.dll_SetScrollPos]
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], 0x39
jge 0x1003f6fa
mov ecx, dword [ebp - 0x24]
xor ebx, ebx
mov eax, dword [ebp - 0x24]
cmp ecx, eax
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x24]
setg bl
sub ecx, eax
xor edx, edx
mov eax, dword [ebp - 0x40]
cmp ecx, ebx
setle dl
xor ecx, ecx
cmp edx, eax
setg cl
cmp ecx, esi
jle 0x1003f75f
mov eax, dword [ebp - 0x40]
mov eax, dword [ebp - 0x40]
mov eax, dword [ebp - 0x40]
imul eax, dword [ebp - 0x18], 0xe159
sub eax, dword [ebp - 0x18]
cmp eax, 0x4cbed562
jge 0x1003f779
mov eax, dword [ebp - 0x40]
mov eax, dword [ebp - 0x24]
xor ebx, ebx
mov eax, dword [ebp - 0x40]
cmp eax, dword [ebp - 0x38]
jne 0x1003f78d
mov eax, esi
cmp dword [ebp - 0x18], ebx
jne 0x1003f78f
mov eax, ebx
mov dword [ebp - 0x18], eax
mov ecx, ebx
add edi, 2
jmp 0x1003f45a
mov dword [ebp - 0x24], 0xbe4438be
mov dword [ebp - 0x30], 0xf703c576
mov dword [ebp - 0x2c], 0x94d0e83
mov dword [ebp - 0x28], esi
mov dword [ebp - 0x28], 0x29c1
cmp dword [ebp - 0x28], 0x2c72
jle 0x1003f83c
mov dword [ebp - 0x34], ebx
mov edx, ebx
mov dword [ebp - 0x20], ebx
mov eax, ebx
mov dword [ebp - 0x18], ebx
mov edi, ebx
mov ecx, edi
sar eax, cl
lea ecx, [ebp - 0x248]
and eax, edx
xor eax, dword [ebp - 0x34]
cdq
push edx
push eax
call fcn.10001ace
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x1003f7f4
mov eax, dword [eax]
push eax
call fcn.1004699c
pop ecx
push ebx
push esi
lea ecx, [ebp - 0x248]
call fcn.10005d35
mov eax, dword [ebp - 0x18]
inc edi
mov edx, dword [ebp - 0x20]
cmp edi, 0x274d
jl 0x1003f7d3
inc eax
mov dword [ebp - 0x18], eax
cmp eax, 0x728c
jl 0x1003f7d1
inc edx
mov dword [ebp - 0x20], edx
cmp edx, 0x23b8
jl 0x1003f7cc
mov eax, dword [ebp - 0x34]
inc eax
mov dword [ebp - 0x34], eax
cmp eax, 0x4eb2
jl 0x1003f7c7
mov dword [ebp - 0x18], ebx
jmp 0x1003f852
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x104], 5
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 2
jl 0x1003f841
cmp dword [ebp - 0x28], 0x28a4
jge 0x1003f86c
push str.wvzjcug_desfig_cum_tkn_gzlnwia_kxwvxt_bqhz_fbdnrkan_snvc_qxtdawsff_tqmlipidl
call fcn.1004699c
pop ecx
or dword [ebp - 4], 0xffffffff
mov dword [ebp - 0x18], ebx
jmp 0x1003f883
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x70], 0xfffffff6
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], esi
jl 0x1003f875
mov eax, dword [ebp - 0x24]
xor edx, edx
mov ecx, dword [ebp - 0x24]
mov eax, dword [ebp - 0x24]
cmp ecx, eax
setg dl
sub edx, 0xfffffff6
neg edx
sbb edx, edx
inc edx
cmp edx, 0xffff
ja 0x1003f8ab
mov eax, dword [ebp - 0x24]
mov edx, esi
cmp dword [ebp - 0x24], ebx
je 0x1003f8b4
mov edx, ebx
mov eax, dword [ebp - 0x24]
xor ecx, ecx
cmp edx, eax
setg cl
cmp ecx, 0xe2db58e4
jae 0x1003f8eb
mov byte [ebp - 0x19], bl
cmp byte [ebp - 0x19], 0
je 0x1003f92c
push 0x134d
push 0xf6
push 0x124f
push 0x3bf
call dword [sym.imp.USER32.dll_CheckRadioButton]
jmp 0x1003f92c
mov dword [ebp - 0x38], 9
mov dword [ebp - 0x28], ebx
mov byte [ebp - 0x19], bl
cmp byte [ebp - 0x19], 0
je 0x1003f90a
push ebx
push ebx
push ebx
push ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_CreateFileMappingA]
mov edx, dword [ebp - 0x38]
mov eax, ebx
neg edx
sbb edx, edx
neg edx
cmp dword [ebp - 0x24], ebx
je 0x1003f91c
mov eax, esi
mov dword [ebp - 0x28], eax
xor ecx, ecx
mov eax, dword [ebp - 0x28]
cmp edx, eax
setge cl
mov dword [ebp - 0x30], ecx
cmp dword [ebp - 0x2c], 0xffffffff
sbb eax, eax
xor edx, edx
inc eax
mov dword [ebp - 0x28], eax
mov eax, dword [ebp - 0x30]
cmp eax, 0x72920796
mov eax, dword [ebp - 0x28]
setge dl
xor ecx, ecx
cmp edx, eax
setne cl
xor edx, edx
mov dword [ebp - 0x30], ecx
mov ecx, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x30]
cmp eax, ecx
setne dl
xor ecx, ecx
sub edx, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x24]
sub edx, 0x24a5d932
cmp eax, edx
setge cl
mov dword [ebp - 0x104], ecx
mov dword [ebp - 0x70], 0xac06e326
mov dword [ebp - 0x18], 0x576660b2
dec dword [ebp - 0x18]
mov dword [ebp - 0x18], 0xffffffe3
jmp 0x1003f9ee
push 2
lea ecx, [ebp - 0x138]
call fcn.1000580e
mov dword [ebp - 0x20], ebx
jmp 0x1003f9b5
mov ecx, dword [ebp - 0x20]
mov eax, dword [ebp - 0x138]
mov dword [eax + ecx*4], 0x16744fa7
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], 2
jl 0x1003f9a2
cmp dword [ebp - 0x70], ebx
jne 0x1003f9c6
mov eax, dword [ebp - 0x104]
mov eax, dword [ebp - 0x70]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x138]
mov dword [eax], ecx
lea ecx, [ebp - 0x138]
call fcn.1000586b
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 0xa
jl 0x1003f990
xor eax, eax
mov word [ebp - 0x11e], ax
mov dword [ebp - 0x24], 0xdb3ae355
mov dword [ebp - 0x28], 0xffffffff
mov dword [ebp - 0x24], ebx
jmp 0x1003faa3
mov dword [ebp - 0x18], esi
mov dword [ebp - 0x38], 0x73063d62
mov dword [ebp - 0x20], ebx
jmp 0x1003fa33
mov eax, dword [ebp - 0x20]
mov dword [ebp + eax*4 - 0x200], 0xfffffff8
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], 3
jl 0x1003fa22
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0x18]
add eax, dword [ebp - 0x18]
mov dword [ebp - 0x28], eax
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0x38]
mov dword [ebp - 0x1fc], eax
mov dword [ebp - 0x18], 2
cmp dword [ebp - 0x18], ebx
jl 0x1003faa0
mov byte [ebp - 0x19], bl
cmp byte [ebp - 0x19], 0
je 0x1003fa85
push ebx
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
mov byte [ebp - 0x19], bl
cmp byte [ebp - 0x19], 0
je 0x1003fa9b
push ebx
push 0x225d
push ebx
call dword [sym.imp.GDI32.dll_GetBitmapBits]
dec dword [ebp - 0x18]
jns 0x1003fa75
dec dword [ebp - 0x24]
cmp dword [ebp - 0x24], 0xffffffe2
jne 0x1003fa13
xor eax, eax
mov dword [ebp - 0x1a0], 7
mov word [ebp - 0x1b4], ax
lea ecx, [ebp - 0x1b4]
lea eax, [ebp - 0x12c]
mov dword [ebp - 0x1a4], ebx
push eax
call fcn.10005edd
push esi
lea ecx, [ebp - 0xac]
mov dword [ebp - 4], 0x10
call fcn.1000580e
mov byte [ebp - 4], 0x11
lea ecx, [ebp - 0x144]
mov dword [ebp - 0x24], 6
mov dword [ebp - 0x34], ebx
mov dword [ebp - 0x30], 0xd04549c4
mov dword [ebp - 0x28], 9
push 4
call fcn.1000580e
mov dword [ebp - 0x24], ebx
jmp 0x1003fb2c
mov ecx, dword [ebp - 0x24]
mov eax, dword [ebp - 0xac]
mov dword [eax + ecx*4], 0xa5d6
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], esi
jl 0x1003fb19
mov dword [ebp - 0x24], ebx
jmp 0x1003fb47
mov eax, dword [ebp - 0x24]
mov dword [ebp + eax*4 - 0x20c], 0xc242ea6a
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], 3
jl 0x1003fb36
mov dword [ebp - 0x24], ebx
jmp 0x1003fb61
mov ecx, dword [ebp - 0x24]
mov eax, dword [ebp - 0x144]
mov dword [eax + ecx*4], esi
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], 4
jl 0x1003fb52
mov dword [ebp - 0x24], ebx
cmp dword [ebp - 0x24], ebx
jl 0x1003fc6a
mov edi, dword [ebp - 0x144]
mov dword [ebp - 0x18], 0xe0b4074d
mov dword [ebp - 0x20], 0x84132d38
mov dword [ebp - 0x18], ebx
jmp 0x1003fba3
mov byte [ebp - 0x19], bl
cmp byte [ebp - 0x19], 0
je 0x1003fba0
push 0xe48
call dword [sym.imp.GDI32.dll_CreateHalftonePalette]
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], ebx
jle 0x1003fb8c
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0xac]
cmp dword [eax], ebx
je 0x1003fbd0
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x34]
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0x30]
mov eax, dword [ebp - 0x24]
cmp dword [ebp - 0x20], ebx
jne 0x1003fbdb
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0x34]
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x20]
mov eax, dword [ebp - 0xac]
add ecx, dword [eax]
jne 0x1003fbfe
mov ecx, dword [ebp - 0x24]
mov eax, dword [ebp - 0xac]
cmp dword [eax + ecx*4], ebx
jne 0x1003fbfe
mov esi, ebx
imul eax, esi, 0xba79
push 0
mov dword [ebp - 0x28], eax
mov ecx, dword [ebp - 0x28]
neg ecx
sbb ecx, ecx
xor eax, eax
neg ecx
test ecx, ecx
setle al
xor edx, edx
mov dword [ebp - 0x20], eax
mov esi, dword [ebp - 0x24]
mov ecx, dword [ebp - 0x20]
sub ecx, dword [ebp - 0x34]
mov eax, dword [ebp - 0xac]
cmp ecx, dword [eax + esi*4]
setl dl
xor esi, esi
mov dword [ebp - 0x18], edx
inc esi
mov eax, dword [ebp - 0x24]
mov ecx, esi
mov eax, dword [ebp - 0x18]
xor ebx, ebx
mov edx, dword [ebp - 0x24]
mov eax, dword [ebp - 0x30]
sub ecx, eax
mov eax, dword [ebp - 0xac]
cmp ecx, dword [eax + edx*4]
setl bl
mov dword [ebp - 0x204], ebx
mov dword [edi + 4], ebx
dec dword [ebp - 0x24]
pop ebx
jns 0x1003fb79
mov byte [ebp - 0x19], bl
cmp byte [ebp - 0x19], 0
je 0x1003fc84
push 0x1ea
push 0xa25
push ebx
call dword [sym.imp.USER32.dll_RemoveMenu]
lea ecx, [ebp - 0x144]
call fcn.1000586b
lea ecx, [ebp - 0xac]
mov byte [ebp - 4], 0x10
call fcn.1000586b
push dword [ebp - 0xd8]
xor eax, eax
lea edi, [ebp - 0x12c]
stosd dword es:[edi], eax
lea ecx, [ebp - 0x1f4]
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
call fcn.1000a7c7
push 0x5c
pop eax
mov byte [ebp - 4], 0x12
mov ecx, ebx
push 2
mov dword [ebp - 0x58], 0xd5044200
mov word [ebp - 0x54], 0x5aa9
mov byte [ebp - 0x52], 0xa0
mov word [ebp - 0x50], ax
pop edi
cmp edi, 2
jne 0x1003fce8
push 5
pop ecx
push ecx
pop edi
jmp 0x1003fd11
movzx edx, byte [ebp + edi - 0x57]
mov eax, edi
sub eax, ecx
movzx eax, byte [ebp + eax - 0x5a]
movzx ecx, word [ebp + eax*2 - 0x50]
mov eax, ecx
and eax, edx
add eax, eax
sub ecx, eax
movzx eax, byte [ebp + edi - 0x58]
add ecx, edx
mov word [ebp + eax*2 - 0x50], cx
mov ecx, ebx
add edi, 2
cmp edi, 7
jb 0x1003fcdc
xor eax, eax
mov dword [ebp - 0x108], 7
mov word [ebp - 0x4e], ax
lea ecx, [ebp - 0x11c]
mov word [ebp - 0x11c], ax
lea eax, [ebp - 0x50]
push eax
mov dword [ebp - 0x10c], ebx
call fcn.10005edd
push 3
lea ecx, [ebp - 0xe4]
mov byte [ebp - 4], 0x13
call fcn.1000580e
mov byte [ebp - 4], 0x14
mov dword [ebp - 0x28], 9
mov dword [ebp - 0x28], 4
mov dword [ebp - 0x18], ebx
jmp 0x1003fd80
mov ecx, dword [ebp - 0x18]
mov eax, dword [ebp - 0xe4]
mov dword [eax + ecx*4], 6
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 3
jl 0x1003fd6d
mov dword [ebp - 0x18], ebx
jmp 0x1003fd99
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x7c], 0xffffffff
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 3
jl 0x1003fd8b
mov dword [ebp - 0x7c], 2
cmp dword [ebp - 0x7c], ebx
jl 0x1003fe94
mov eax, dword [ebp - 0xe4]
mov dword [ebp - 0x38], eax
push 3
lea ecx, [ebp - 0xf0]
call fcn.1000580e
mov dword [ebp - 0x28], 0xfffffffd
mov dword [ebp - 0x20], ebx
jmp 0x1003fde4
mov ecx, dword [ebp - 0x20]
mov eax, dword [ebp - 0xf0]
mov dword [eax + ecx*4], 0xc8f0d071
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], 3
jl 0x1003fdd1
mov dword [ebp - 0x28], 2
xor edx, edx
mov ecx, dword [ebp - 0x28]
mov eax, dword [ebp - 0xf0]
sub ecx, dword [eax]
mov eax, dword [ebp - 0x7c]
cmp ecx, eax
mov ecx, dword [ebp - 0x74]
mov edi, dword [ebp - 0xf0]
sete dl
imul ecx, edx
mov edx, dword [ebp - 0x38]
neg ecx
sbb ecx, ecx
xor eax, eax
inc ecx
cmp ecx, dword [edx + 8]
setge al
imul eax, dword [edi + 8]
mov dword [ebp - 0x28], eax
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x7c]
cmp dword [edx + 8], ebx
je 0x1003fe3b
mov eax, esi
cmp dword [edi + 8], ebx
jne 0x1003fe3d
mov eax, ebx
mov esi, dword [ebp - 0x7c]
dec eax
xor edx, edx
cmp eax, 0x5300
mov eax, dword [ebp - 0xe4]
setne dl
sub edx, 0xfff9
neg edx
sbb edx, edx
xor ecx, ecx
inc edx
cmp dword [eax + esi*4], edx
sete cl
xor eax, eax
test ecx, ecx
setns al
mov dword [ebp - 0x28], eax
mov byte [ebp - 0x19], bl
cmp byte [ebp - 0x19], 0
je 0x1003fe7d
call dword [sym.imp.GDI32.dll_GdiFlush]
lea ecx, [ebp - 0xf0]
call fcn.1000586b
dec dword [ebp - 0x7c]
push 1
pop esi
jns 0x1003fdb8
lea ecx, [ebp - 0xe4]
mov byte [ebp - 4], 0x13
call fcn.1000586b
mov dword [ebp - 0x50], ebx
xor esi, esi
mov dword [ebp - 0x2c], 0x1928c176
inc esi
mov dword [ebp - 0x18], 0x566a9272
mov dword [ebp - 0x2c], ebx
cmp dword [ebp - 0x2c], 0xe
jl 0x1003ff87
mov dword [ebp - 0x20], ebx
jmp 0x1003feda
mov eax, dword [ebp - 0x20]
mov dword [ebp + eax*4 - 0x98], 0xffff
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], esi
jl 0x1003fec9
mov eax, dword [ebp - 0x2c]
mov dword [ebp - 0x98], eax
test eax, eax
je 0x1003ff1a
mov dword [ebp - 0x38], 0xc662a2b3
mov dword [ebp - 0x28], 0x74006310
cmp dword [ebp - 0x38], ebx
jne 0x1003ff13
mov ecx, dword [ebp - 0x28]
mov eax, dword [ebp - 0x98]
add eax, ecx
mov ecx, dword [ebp - 0x28]
add ecx, eax
mov eax, ebx
je 0x1003ff15
mov eax, esi
mov dword [ebp - 0x18], eax
jmp 0x1003ff7f
mov dword [ebp - 0x38], ebx
mov dword [ebp - 0x18], ebx
jmp 0x1003ff73
mov dword [ebp - 0x20], 2
mov dword [ebp - 0x20], ebx
jmp 0x1003ff59
mov dword [ebp - 0x34], esi
mov dword [ebp - 0x38], 0xd816f93b
mov byte [ebp - 0x19], bl
cmp byte [ebp - 0x19], 0
je 0x1003ff49
push ebx
push ebx
call dword [sym.imp.SHELL32.dll_CommandLineToArgvW]
mov eax, dword [ebp - 0x34]
mov ecx, esi
sub ecx, eax
mov dword [ebp - 0x38], ecx
inc dword [ebp - 0x34]
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], ebx
jle 0x1003ff2e
mov byte [ebp - 0x19], bl
cmp byte [ebp - 0x19], 0
je 0x1003ff70
push ebx
push ebx
push ebx
call dword [sym.imp.ADVAPI32.dll_SetSecurityDescriptorOwner]
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 0x16
jge 0x1003ff22
mov eax, dword [ebp - 0x2c]
mov dword [ebp - 0x38], eax
inc dword [ebp - 0x2c]
jmp 0x1003feba
mov dword [ebp - 0x30], 0x7ceb
cmp dword [ebp - 0x30], 0x7dee
jle 0x1003fffe
mov edi, ebx
mov dword [ebp - 0x20], ebx
mov eax, edi
mov dword [ebp - 0x28], 0xd04
mov dword [ebp - 0x34], eax
mov edi, ebx
mov ecx, edi
shl eax, cl
lea ecx, [ebp - 0x278]
cdq
push edx
push eax
call fcn.10001ace
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x1003ffc6
mov eax, dword [eax]
push eax
call fcn.1004699c
pop ecx
push ebx
push esi
lea ecx, [ebp - 0x278]
call fcn.10005d35
mov eax, dword [ebp - 0x34]
inc edi
cmp edi, 0x357b
jl 0x1003ffaa
dec eax
dec dword [ebp - 0x28]
mov dword [ebp - 0x34], eax
jne 0x1003ffa8
mov edi, dword [ebp - 0x20]
inc edi
mov dword [ebp - 0x20], edi
cmp edi, 0x5dc8
jl 0x1003ff9c
cmp dword [ebp - 0x30], 0x7adc
jge 0x10040012
push str.kmqtjjagr_bitxuh_rbevin_aajjctl_wzor_amboms_hcsre
call fcn.1004699c
pop ecx
mov dword [ebp - 4], 0x13
mov dword [ebp - 0x38], 0x79b5
cmp dword [ebp - 0x38], 0x7cc3
mov dword [ebp - 0x3c], str.bzvcwcwm_uwfsiupui_iydwrqn_wptxb_yrniy_wkksj_dgel_donbkqauj_pyztfq_nsf_fow_bdhdrmin_xvimsjybd_bjwszy
jle 0x10040094
mov dword [ebp - 0x20], ebx
mov edi, ebx
mov dword [ebp - 0x2c], ebx
mov ecx, edi
mov dword [ebp - 0x30], 0x2b52
mov edi, dword [ebp - 0x20]
mov dword [ebp - 0x34], ecx
mov eax, ebx
mov dword [ebp - 0x28], ebx
add eax, ecx
mov ecx, 0x10078bb8
xor eax, edi
cdq
push edx
push eax
call fcn.100055e4
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x34]
inc eax
mov dword [ebp - 0x28], eax
cmp eax, 0x59e5
jl 0x1004004c
dec ecx
dec dword [ebp - 0x30]
mov dword [ebp - 0x34], ecx
jne 0x10040047
mov edi, dword [ebp - 0x2c]
inc edi
mov dword [ebp - 0x2c], edi
cmp edi, 0x4f6f
jl 0x10040038
mov eax, dword [ebp - 0x20]
inc eax
mov dword [ebp - 0x20], eax
cmp eax, 0x2383
jl 0x10040033
mov dword [ebp - 0x2c], 0xfffffff8
mov dword [ebp - 0x28], ebx
mov dword [ebp - 0x28], 0x6a07563f
mov dword [ebp - 0x28], 0x7182b47
mov dword [ebp - 0x28], 0xffffffff
mov dword [ebp - 0x28], 0x8cae2fe8
mov dword [ebp - 0x28], 0x6986d6
mov dword [ebp - 0x30], 0x2a3062a4
mov dword [ebp - 0x28], 0x9973063d
mov dword [ebp - 0x24], 0x9eb8
mov dword [ebp - 0x20], ebx
jmp 0x100400e9
mov eax, dword [ebp - 0x20]
mov dword [ebp + eax*4 - 0x80], 0xe3556834
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], esi
jl 0x100400db
mov dword [ebp - 0x2c], ebx
cmp dword [ebp - 0x2c], ebx
jl 0x1004027d
mov dword [ebp - 0x20], ebx
lea ecx, [ebp - 0x1c0]
mov dword [ebp - 0x28], 0xd2e8588d
mov dword [ebp - 0x28], 3
mov dword [ebp - 0x18], 0x631615e8
push esi
call fcn.1000580e
mov byte [ebp - 4], 0x17
mov dword [ebp - 0x28], ebx
mov dword [ebp - 0x34], 0x6312
cmp dword [ebp - 0x34], 0x668f
jle 0x10040162
mov edi, ebx
mov eax, ebx
mov dword [ebp - 0x28], ebx
or eax, edi
mov ecx, 0x10078bb8
cdq
push edx
push eax
call fcn.100055e4
mov eax, dword [ebp - 0x28]
inc eax
mov dword [ebp - 0x28], eax
cmp eax, 0x53ac
jl 0x1004013c
inc edi
cmp edi, 0xecb
jl 0x10040137
mov dword [ebp - 0x28], ebx
mov byte [ebp - 4], 0x18
cmp dword [ebp - 0x34], 0x622d
jge 0x100401a2
mov edx, str.fzpa_hxu_ldq_xenatyrbb_yytf_tjx_rpfs
mov ecx, 0x10078bb8
call fcn.10009472
jmp 0x100401a2
mov dword [ebp - 4], 0x17
mov dword [ebp - 0x20], ebx
jmp 0x100401c1
mov ecx, dword [ebp - 0x20]
mov eax, dword [ebp - 0x1c0]
mov dword [eax + ecx*4], 9
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], esi
jl 0x100401ae
mov dword [ebp - 0x20], ebx
jmp 0x1004024f
push esi
lea ecx, [ebp - 0x164]
call fcn.1000580e
mov dword [ebp - 0x28], 0xfffffffd
mov dword [ebp - 0x18], ebx
jmp 0x100401f7
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x1c4], 0xfffffff6
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], esi
jl 0x100401e6
mov dword [ebp - 0x18], ebx
jmp 0x10040211
mov ecx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x164]
or dword [eax + ecx*4], 0xffffffff
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], esi
jl 0x10040201
inc dword [ebp - 0x24]
mov dword [ebp - 0x18], ebx
cmp dword [ebp - 0x18], ebx
jl 0x10040241
mov dword [ebp - 0x30], ebx
cmp dword [ebp - 0x30], ebx
jl 0x1004023c
mov dword [ebp - 0x28], 0x786f
mov dword [ebp - 0x28], 3
dec dword [ebp - 0x30]
jns 0x10040229
dec dword [ebp - 0x18]
jns 0x10040221
lea ecx, [ebp - 0x164]
call fcn.1000586b
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], ebx
jle 0x100401ce
mov eax, dword [ebp - 0x2c]
mov ecx, dword [ebp + eax*4 - 0x80]
mov eax, dword [ebp - 0x2c]
mov dword [ebp + eax*4 - 0x80], ecx
lea ecx, [ebp - 0x1c0]
mov byte [ebp - 4], 0x13
call fcn.1000586b
dec dword [ebp - 0x2c]
jmp 0x100400f1
mov byte [ebp - 4], 0x1a
cmp dword [ebp - 0x38], 0x76db
jge 0x100402b8
mov edx, dword [ebp - 0x3c]
mov ecx, 0x10078bb8
call fcn.10009472
jmp 0x100402b8
push 0x5f
pop eax
mov dword [ebp - 4], 0x13
mov ecx, ebx
push 2
mov dword [ebp - 0x48], 0xad02d400
mov byte [ebp - 0x44], 0x79
mov word [ebp - 0x4c], ax
pop edi
cmp edi, 2
jne 0x100402e2
push 3
pop ecx
push ecx
pop edi
jmp 0x10040309
movzx edx, byte [ebp + edi - 0x47]
mov eax, edi
sub eax, ecx
movzx eax, byte [ebp + eax - 0x4a]
movzx eax, word [ebp + eax*2 - 0x4c]
mov ecx, eax
and eax, edx
or ecx, edx
sub ecx, eax
movzx eax, byte [ebp + edi - 0x48]
mov word [ebp + eax*2 - 0x4c], cx
mov ecx, ebx
add edi, 2
cmp edi, 5
jb 0x100402d6
xor eax, eax
mov word [ebp - 0x4a], ax
mov dword [ebp - 0x30], 0xfffffff8
mov dword [ebp - 0x3c], 0x398070a
mov dword [ebp - 0x3c], 0xffffffff
push 7
pop edi
mov dword [ebp - 0x3c], edi
mov dword [ebp - 0x3c], esi
mov dword [ebp - 0x3c], 0xd0714ad
mov dword [ebp - 0x3c], esi
mov dword [ebp - 0x3c], 4
mov dword [ebp - 0x3c], 0xffffffff
mov dword [ebp - 0x30], ebx
jmp 0x100403af
mov dword [ebp - 0x3c], 0xfffffff6
lea ecx, [ebp - 0x180]
mov dword [ebp - 0x3c], 0x66a756a3
mov dword [ebp - 0x3c], 0xffffffff
mov dword [ebp - 0x3c], 0xc39ba095
push esi
call fcn.1000580e
mov dword [ebp - 0x38], 5
mov dword [ebp - 0x20], ebx
jmp 0x10040399
mov ecx, dword [ebp - 0x20]
mov eax, dword [ebp - 0x180]
mov dword [eax + ecx*4], 0xfffffff8
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], esi
jl 0x10040386
inc dword [ebp - 0x38]
lea ecx, [ebp - 0x180]
call fcn.1000586b
dec dword [ebp - 0x30]
cmp dword [ebp - 0x30], 0xfffffff1
jne 0x10040352
mov byte [ebp - 0x19], bl
cmp byte [ebp - 0x19], 0
je 0x100403c6
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_FileTimeToLocalFileTime]
xor eax, eax
mov dword [ebp - 0x1c8], edi
mov word [ebp - 0x1dc], ax
lea ecx, [ebp - 0x1dc]
lea eax, [ebp - 0x4c]
mov dword [ebp - 0x1cc], ebx
push eax
call fcn.10005edd
mov byte [ebp - 4], 0x1c
mov dword [ebp - 0x4c], ebx
push dword [ebp - 0x10c]
cmp dword [ebp - 0x108], 8
lea eax, [ebp - 0x11c]
push ebx
cmovae eax, dword [ebp - 0x11c]
lea ecx, [ebp - 0x1f4]
push eax
call fcn.1002b06e
cmp eax, 0xffffffff
je 0x10040436
push 0xffffffffffffffff
push ebx
lea ecx, [ebp - 0x1dc]
push ecx
push esi
push eax
lea ecx, [ebp - 0x1f4]
call fcn.1000ad38
jmp 0x100403f1
mov ecx, dword [ebp - 0x9c]
lea eax, [ebp - 0x1f4]
push eax
lea edx, [ebp - 0x1b4]
call fcn.10040691
pop ecx
push ebx
push esi
lea ecx, [ebp - 0x1dc]
call fcn.10005f65
push ebx
push esi
lea ecx, [ebp - 0x11c]
call fcn.10005f65
push ebx
push esi
lea ecx, [ebp - 0x1f4]
call fcn.10005f65
push ebx
push esi
lea ecx, [ebp - 0x1b4]
call fcn.10005f65
mov ecx, dword [ebp - 0xc]
mov eax, dword [ebp - 0x9c]
pop edi
pop esi
mov dword fs:[0], ecx
pop ebx
mov esp, ebp
pop ebp
ret