Function at 0x10030cc4
Capabilities:
Authenticate hmac
Delete registry value
Encrypt data using speck

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x100601b4
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
push ecx
sub esp, 0xf9c
push ebx
push esi
push edi
mov dword [ebp - 0x10], esp
mov dword [ebp - 0xcc8], 0xfffffff7
mov dword [ebp - 0x3c], 1
push 1
lea ecx, [ebp - 0x3c4]
call fcn.100039f2
and dword [ebp - 4], 0
mov dword [ebp - 0xd20], 0x80eec299
mov dword [ebp - 0x8c8], 1
mov dword [ebp - 0x434], 0x7f6e
mov dword [ebp - 0x900], str.eqqqzgd_qbta_jnybgtnon_xefgqrod_vkpnpsev_gwkvsmnv_fdz_fzyixgd_nmyhqr
cmp dword [ebp - 0x434], 0x811a
jle 0x10030e1f
and dword [ebp - 0x218], 0
jmp 0x10030d59
mov eax, dword [ebp - 0x218]
inc eax
mov dword [ebp - 0x218], eax
cmp dword [ebp - 0x218], 0x6f31
jge 0x10030e1f
and dword [ebp - 0x350], 0
jmp 0x10030d7f
mov eax, dword [ebp - 0x350]
inc eax
mov dword [ebp - 0x350], eax
cmp dword [ebp - 0x350], 0x6181
jge 0x10030e1a
and dword [ebp - 0x2a4], 0
jmp 0x10030da5
mov eax, dword [ebp - 0x2a4]
inc eax
mov dword [ebp - 0x2a4], eax
cmp dword [ebp - 0x2a4], 0x4ee7
jge 0x10030e15
and dword [ebp - 0x19c], 0
jmp 0x10030dc7
mov eax, dword [ebp - 0x19c]
inc eax
mov dword [ebp - 0x19c], eax
cmp dword [ebp - 0x19c], 0x365f
jge 0x10030e13
mov eax, dword [ebp - 0x350]
imul eax, dword [ebp - 0x2a4]
mov ecx, dword [ebp - 0x19c]
sar eax, cl
or eax, dword [ebp - 0x218]
cdq
mov dword [ebp - 0x90c], eax
mov dword [ebp - 0x908], edx
push dword [ebp - 0x908]
push dword [ebp - 0x90c]
mov ecx, 0x1007aeb8
call fcn.10003751
jmp 0x10030dba
jmp 0x10030d98
jmp 0x10030d72
jmp 0x10030d4c
mov dword [ebp - 0x5c], 0
jmp 0x10030e2f
mov eax, dword [ebp - 0x5c]
inc eax
mov dword [ebp - 0x5c], eax
cmp dword [ebp - 0x5c], 1
jge 0x10030e45
mov eax, dword [ebp - 0x5c]
mov dword [ebp + eax*4 - 0x88], 0
jmp 0x10030e28
mov byte [ebp - 4], 1
cmp dword [ebp - 0x434], 0x7eae
jge 0x10030e65
mov edx, dword [ebp - 0x900]
mov ecx, 0x1007aeb8
call fcn.10005cf1
jmp 0x10030e81
and dword [ebp - 4], 0
jmp 0x10030e8b
mov dword [ebp - 0x5c], 0
jmp 0x10030e9b
mov eax, dword [ebp - 0x5c]
inc eax
mov dword [ebp - 0x5c], eax
cmp dword [ebp - 0x5c], 1
jge 0x10030eb7
push dword [ebp - 0x5c]
lea ecx, [ebp - 0x3c4]
call fcn.10003ac4
mov dword [eax], 1
jmp 0x10030e94
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0x88], 0
jmp 0x10030ee5
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x88]
inc eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x88], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x88], 8
jne 0x100310d4
mov dword [ebp - 0xdc8], 0xbc6e5c7a
mov dword [ebp - 0xc94], 0x6c74aa0d
mov dword [ebp - 0xd50], 0xfffffffc
mov dword [ebp - 0xc9c], 7
mov dword [ebp - 0xdb0], 0x3f5047c4
mov dword [ebp - 0xca4], 0xffffffff
mov dword [ebp - 0xd60], 0xffffffff
mov dword [ebp - 0x7ac], 0x26b6
mov dword [ebp - 0x8bc], str.hhkn_lvjpb_los_fzyyofb_zaxvebshd_xpkpdeepn_umhm_gmqqmtcfn
cmp dword [ebp - 0x7ac], 0x27e4
jle 0x10030fd8
and dword [ebp - 0x1a4], 0
jmp 0x10030f75
mov eax, dword [ebp - 0x1a4]
inc eax
mov dword [ebp - 0x1a4], eax
cmp dword [ebp - 0x1a4], 0xc78
jge 0x10030fd8
and dword [ebp - 0x220], 0
jmp 0x10030f97
mov eax, dword [ebp - 0x220]
inc eax
mov dword [ebp - 0x220], eax
cmp dword [ebp - 0x220], 0x219b
jge 0x10030fd6
mov eax, dword [ebp - 0x1a4]
mov ecx, dword [ebp - 0x220]
shl eax, cl
cdq
mov dword [ebp - 0x918], eax
mov dword [ebp - 0x914], edx
push dword [ebp - 0x914]
push dword [ebp - 0x918]
mov ecx, 0x1007aeb8
call fcn.10003751
jmp 0x10030f8a
jmp 0x10030f68
mov dword [ebp - 0xcac], 0xb76eea53
mov byte [ebp - 4], 3
cmp dword [ebp - 0x7ac], 0x2697
jge 0x10031002
mov edx, dword [ebp - 0x8bc]
mov ecx, 0x1007aeb8
call fcn.10005cf1
jmp 0x1003101e
and dword [ebp - 4], 0
jmp 0x10031028
push 2
lea ecx, [ebp - 0xd5c]
call fcn.100039f2
mov byte [ebp - 4], 5
mov dword [ebp - 0xdd8], 0x7b44
mov dword [ebp - 0x7b4], 9
mov dword [ebp - 0x1ac], 0
jmp 0x10031066
mov eax, dword [ebp - 0x1ac]
inc eax
mov dword [ebp - 0x1ac], eax
cmp dword [ebp - 0x1ac], 2
jge 0x10031088
push dword [ebp - 0x1ac]
lea ecx, [ebp - 0xd5c]
call fcn.10003ac4
mov dword [eax], 0xfffffffb
jmp 0x10031059
mov eax, dword [ebp - 0x7b4]
inc eax
mov dword [ebp - 0x7b4], eax
mov byte [ebp - 0x100], 0
movzx eax, byte [ebp - 0x100]
test eax, eax
je 0x100310c0
push 0
push 0xe35
push 0
push 0x1aed
push 0x11ec
call dword [sym.imp.GDI32.dll_ExtCreatePen]
mov byte [ebp - 4], 0
lea ecx, [ebp - 0xd5c]
call fcn.10003a4f
jmp 0x10030eca
mov dword [ebp - 0x3c], 0
jmp 0x100310e4
mov eax, dword [ebp - 0x3c]
dec eax
mov dword [ebp - 0x3c], eax
cmp dword [ebp - 0x3c], 0
jl 0x10031318
mov dword [ebp - 0x8c0], 0xfffffff9
mov dword [ebp - 0x228], 0x85d5fca4
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x88], 0
je 0x10031130
push 0
lea ecx, [ebp - 0x3c4]
call fcn.10003ac4
cmp dword [eax], 0
je 0x10031130
mov dword [ebp - 0x7bc], 1
jmp 0x10031137
and dword [ebp - 0x7bc], 0
cmp dword [ebp - 0x7bc], 0x95534fd3
jae 0x10031162
push dword [ebp - 0x3c]
lea ecx, [ebp - 0x3c4]
call fcn.10003ac4
cmp dword [eax], 0
je 0x10031162
mov dword [ebp - 0x3b4], 1
jmp 0x10031169
and dword [ebp - 0x3b4], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x3b4]
mov dword [ebp + eax - 0x88], ecx
cmp dword [ebp - 0x3b4], 0
jne 0x10031195
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x88], 0
je 0x100311a3
push dword [ebp - 0x3c]
lea ecx, [ebp - 0x3c4]
call fcn.10003ac4
push dword [ebp - 0x3c]
lea ecx, [ebp - 0x3c4]
call fcn.10003ac4
imul esi, dword [eax], 0xffffffff
push 0
lea ecx, [ebp - 0x3c4]
call fcn.10003ac4
imul esi, dword [eax]
mov dword [ebp - 0x8c0], esi
mov eax, 0x27eed050
cmp eax, 0xba832a49
jne 0x100311e3
xor eax, eax
jne 0x100311e3
and dword [ebp - 0x7c4], 0
jmp 0x100311ed
mov dword [ebp - 0x7c4], 1
mov esi, dword [ebp - 0x3c]
sub esi, dword [ebp - 0x7c4]
push dword [ebp - 0x3c]
lea ecx, [ebp - 0x3c4]
call fcn.10003ac4
cmp dword [eax], esi
je 0x10031214
mov dword [ebp - 0x7cc], 1
jmp 0x1003121b
and dword [ebp - 0x7cc], 0
push 0
lea ecx, [ebp - 0x3c4]
call fcn.10003ac4
mov ecx, dword [ebp - 0x7cc]
cmp ecx, dword [eax]
jle 0x1003123e
mov dword [ebp - 0x7d4], 1
jmp 0x10031245
and dword [ebp - 0x7d4], 0
push dword [ebp - 0x3c]
lea ecx, [ebp - 0x3c4]
call fcn.10003ac4
mov ecx, dword [ebp - 0x7d4]
cmp ecx, dword [eax]
jle 0x10031269
mov dword [ebp - 0x810], 1
jmp 0x10031270
and dword [ebp - 0x810], 0
mov eax, dword [ebp - 0x8c8]
cmp dword [ebp - 0x810], eax
jge 0x1003129a
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x88], 0
je 0x1003129a
mov dword [ebp - 0x3a8], 1
jmp 0x100312a1
and dword [ebp - 0x3a8], 0
push dword [ebp - 0x3c]
lea ecx, [ebp - 0x3c4]
call fcn.10003ac4
mov ecx, dword [ebp - 0x3a8]
mov dword [eax], ecx
mov eax, dword [ebp - 0x228]
cmp dword [ebp - 0x3a8], eax
jge 0x100312d1
mov dword [ebp - 0x818], 1
jmp 0x100312d8
and dword [ebp - 0x818], 0
mov eax, dword [ebp - 0x228]
cmp dword [ebp - 0x818], eax
jle 0x100312eb
or eax, 0xffffffff
je 0x10031300
cmp dword [ebp - 0x228], 0
je 0x10031300
mov dword [ebp - 0x820], 1
jmp 0x10031307
and dword [ebp - 0x820], 0
mov eax, dword [ebp - 0x820]
mov dword [ebp - 0x228], eax
jmp 0x100310dd
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x3c4]
call fcn.10003a4f
mov dword [ebp - 0x70], 0x6e87
mov dword [ebp - 0x230], 0x643
mov dword [ebp - 0x410], 0xfffffffc
mov dword [ebp - 0x750], 0xcd9796a
mov dword [ebp - 0x418], 0x85734cb4
mov dword [ebp - 0x8e0], 0xffffffff
mov byte [ebp - 0xff], 0
movzx eax, byte [ebp - 0xff]
test eax, eax
je 0x10031388
push 1
push 0
push 0x1301
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_SetScrollInfo]
mov dword [ebp - 0x8d0], 0x1ab6
cmp dword [ebp - 0x8d0], 0xeb3
jge 0x10031522
lea eax, [ebp - 0x35c]
push eax
push str._ld_n
call fcn.100477eb
pop ecx
pop ecx
and dword [ebp - 0x8d8], 0
lea eax, [ebp - 0x8d8]
push eax
push dword [ebp - 0x35c]
lea ecx, [ebp - 0x8a8]
call fcn.100200b0
mov dword [ebp - 4], 6
and dword [ebp - 0x1b4], 0
jmp 0x100313f1
mov eax, dword [ebp - 0x1b4]
inc eax
mov dword [ebp - 0x1b4], eax
mov eax, dword [ebp - 0x1b4]
cmp eax, dword [ebp - 0x35c]
jge 0x1003141f
push dword [ebp - 0x1b4]
lea ecx, [ebp - 0x8a8]
call fcn.10003ac4
push eax
push 0x10067ab8
call fcn.100477eb
pop ecx
pop ecx
jmp 0x100313e4
lea eax, [ebp - 0xcb4]
push eax
lea ecx, [ebp - 0x8a8]
call fcn.10014ced
push dword [eax]
lea eax, [ebp - 0xd70]
push eax
lea ecx, [ebp - 0x8a8]
call fcn.100145b0
push dword [eax]
call fcn.1003bf4d
pop ecx
pop ecx
and dword [ebp - 0x3b8], 0
xorpd xmm0, xmm0
movlpd qword [ebp - 0x3ec], xmm0
and dword [ebp - 0x158], 0
jmp 0x10031477
mov eax, dword [ebp - 0x158]
inc eax
mov dword [ebp - 0x158], eax
mov eax, dword [ebp - 0x158]
cmp eax, dword [ebp - 0x35c]
jge 0x10031501
push dword [ebp - 0x158]
lea ecx, [ebp - 0x8a8]
call fcn.10003ac4
mov eax, dword [eax]
cdq
mov dword [ebp - 0x924], eax
mov dword [ebp - 0x920], edx
mov eax, dword [ebp - 0x3e8]
cmp eax, dword [ebp - 0x920]
jg 0x100314fc
jl 0x100314c3
mov eax, dword [ebp - 0x3ec]
cmp eax, dword [ebp - 0x924]
ja 0x100314fc
push dword [ebp - 0x158]
lea ecx, [ebp - 0x8a8]
call fcn.10003ac4
mov eax, dword [eax]
cdq
add eax, dword [ebp - 0x3ec]
adc edx, dword [ebp - 0x3e8]
mov dword [ebp - 0x3ec], eax
mov dword [ebp - 0x3e8], edx
mov eax, dword [ebp - 0x3b8]
inc eax
mov dword [ebp - 0x3b8], eax
jmp 0x1003146a
push dword [ebp - 0x3b8]
push str._ld_n
call fcn.10047ad3
pop ecx
pop ecx
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x8a8]
call fcn.10003a4f
mov eax, dword [ebp - 0x70]
mov dword [ebp - 0xcbc], eax
mov eax, 0xfe6d
cmp eax, 0xc6f1
jl 0x10031543
mov dword [ebp - 0x828], 1
jmp 0x1003154a
and dword [ebp - 0x828], 0
mov eax, dword [ebp - 0x70]
cmp dword [ebp - 0x828], eax
jl 0x10031561
mov dword [ebp - 0x830], 1
jmp 0x10031568
and dword [ebp - 0x830], 0
mov eax, dword [ebp - 0x70]
cmp dword [ebp - 0x830], eax
jl 0x1003157f
mov dword [ebp - 0x7ec], 1
jmp 0x10031586
and dword [ebp - 0x7ec], 0
mov eax, dword [ebp - 0x70]
imul eax, dword [ebp - 0x7ec]
cmp eax, dword [ebp - 0x230]
jne 0x100315a4
mov dword [ebp - 0x7d8], 1
jmp 0x100315ab
and dword [ebp - 0x7d8], 0
mov eax, dword [ebp - 0x230]
cmp dword [ebp - 0x7d8], eax
jl 0x100315c5
mov dword [ebp - 0x7a4], 1
jmp 0x100315cc
and dword [ebp - 0x7a4], 0
mov eax, dword [ebp - 0x70]
cmp dword [ebp - 0x7a4], eax
jle 0x100315e3
mov dword [ebp - 0x408], 1
jmp 0x100315ea
and dword [ebp - 0x408], 0
mov eax, dword [ebp - 0x70]
imul eax, dword [ebp - 0x408]
cmp eax, dword [ebp - 0x230]
jl 0x10031608
mov dword [ebp - 0x638], 1
jmp 0x1003160f
and dword [ebp - 0x638], 0
mov eax, dword [ebp - 0x638]
mov dword [ebp - 0x410], eax
imul eax, dword [ebp - 0x410], 0xb667
mov dword [ebp - 0x750], eax
mov eax, dword [ebp - 0x70]
sub eax, dword [ebp - 0x750]
mov dword [ebp - 0x418], eax
mov eax, dword [ebp - 0x418]
sub eax, dword [ebp - 0x230]
mov ecx, dword [ebp - 0x70]
add ecx, dword [ebp - 0x70]
cmp ecx, eax
je 0x1003165c
mov dword [ebp - 0x640], 1
jmp 0x10031663
and dword [ebp - 0x640], 0
mov eax, dword [ebp - 0x640]
mov dword [ebp - 0x8e0], eax
cmp dword [0x100ffec4], 0
jne 0x1003645b
mov dword [ebp - 0x13c], 0xd6f2ee76
mov dword [ebp - 0x420], 0xf89b5461
mov eax, dword [ebp - 0x13c]
mov dword [ebp - 0x420], eax
mov dword [ebp - 0x13c], 0
jmp 0x100316b5
mov eax, dword [ebp - 0x13c]
inc eax
mov dword [ebp - 0x13c], eax
cmp dword [ebp - 0x13c], 0x3c
jle 0x100316ea
mov dword [ebp - 0x8e8], 1
mov dword [ebp - 0x8f0], 0xfafd11d9
mov eax, dword [ebp - 0x8e8]
mov dword [ebp - 0x8f0], eax
mov dword [ebp - 0x420], 3
jmp 0x100316a8
mov dword [ebp - 0x4c], 0xfffffff9
mov dword [ebp - 0x140], 6
push 4
lea ecx, [ebp - 0xaa4]
call fcn.100039f2
mov dword [ebp - 4], 7
mov dword [ebp - 0xc0], 0xffffffff
mov dword [ebp - 0x1bc], 0
jmp 0x10031732
mov eax, dword [ebp - 0x1bc]
inc eax
mov dword [ebp - 0x1bc], eax
cmp dword [ebp - 0x1bc], 4
jge 0x10031754
push dword [ebp - 0x1bc]
lea ecx, [ebp - 0xaa4]
call fcn.10003ac4
mov dword [eax], 0x51938d10
jmp 0x10031725
mov dword [ebp - 0x4c], 0
jmp 0x10031764
mov eax, dword [ebp - 0x4c]
inc eax
mov dword [ebp - 0x4c], eax
cmp dword [ebp - 0x4c], 0xd
jl 0x10031d93
mov dword [ebp - 0xf4], 0x6e60b0ce
mov dword [ebp - 0x1c4], 5
push 3
lea ecx, [ebp - 0x8b4]
call fcn.100039f2
mov byte [ebp - 4], 8
mov dword [ebp - 0x238], 0
jmp 0x100317ac
mov eax, dword [ebp - 0x238]
inc eax
mov dword [ebp - 0x238], eax
cmp dword [ebp - 0x238], 3
jge 0x100317cb
push dword [ebp - 0x238]
lea ecx, [ebp - 0x8b4]
call fcn.10003ac4
and dword [eax], 0
jmp 0x1003179f
mov dword [ebp - 0xf4], 0x94a18885
mov eax, dword [ebp - 0x4c]
mov dword [ebp - 0xdb8], eax
mov eax, dword [ebp - 0x4c]
mov dword [ebp - 0x140], eax
mov eax, dword [ebp - 0x140]
mov dword [ebp - 0xcc4], eax
mov eax, dword [ebp - 0x4c]
cmp eax, dword [ebp - 0x4c]
jge 0x10031807
mov dword [ebp - 0x7f8], 1
jmp 0x1003180e
and dword [ebp - 0x7f8], 0
mov eax, dword [ebp - 0xf4]
cmp dword [ebp - 0x7f8], eax
jge 0x10031bb9
mov dword [ebp - 0xec], 0xb0ae
mov dword [ebp - 0x10c], 0xffffffff
cmp dword [ebp - 0xec], 0
jne 0x10031a19
cmp dword [ebp - 0xec], 0xedaa
jne 0x1003185f
cmp dword [ebp - 0xf4], 0
jne 0x1003185f
and dword [ebp - 0x364], 0
jmp 0x10031869
mov dword [ebp - 0x364], 1
push 3
lea ecx, [ebp - 0xaa4]
call fcn.10003ac4
mov ecx, dword [ebp - 0x364]
mov dword [eax], ecx
mov eax, dword [ebp - 0x10c]
cmp dword [ebp - 0x364], eax
jg 0x10031898
mov dword [ebp - 0x428], 1
jmp 0x1003189f
and dword [ebp - 0x428], 0
mov eax, dword [ebp - 0x10c]
imul eax, dword [ebp - 0x428]
add eax, 0x16658069
neg eax
jne 0x100318c1
mov dword [ebp - 0x648], 1
jmp 0x100318c8
and dword [ebp - 0x648], 0
mov eax, dword [ebp - 0x140]
cmp dword [ebp - 0x648], eax
je 0x100318e2
mov dword [ebp - 0x430], 1
jmp 0x100318e9
and dword [ebp - 0x430], 0
mov eax, dword [ebp - 0x430]
mov dword [ebp - 0x1c4], eax
mov eax, dword [ebp - 0x1c4]
sub eax, dword [ebp - 0x4c]
neg eax
je 0x10031917
cmp dword [ebp - 0xf4], 0
je 0x10031917
mov dword [ebp - 0x758], 1
jmp 0x1003191e
and dword [ebp - 0x758], 0
cmp dword [ebp - 0x758], 2
je 0x10031933
mov dword [ebp - 0x438], 1
jmp 0x1003193a
and dword [ebp - 0x438], 0
cmp dword [ebp - 0x438], 1
jg 0x1003194f
mov dword [ebp - 0x650], 1
jmp 0x10031956
and dword [ebp - 0x650], 0
mov eax, dword [ebp - 0xec]
cmp dword [ebp - 0x650], eax
je 0x10031970
mov dword [ebp - 0x440], 1
jmp 0x10031977
and dword [ebp - 0x440], 0
mov eax, dword [ebp - 0xf4]
cmp dword [ebp - 0x440], eax
jge 0x10031991
mov dword [ebp - 0x7e4], 1
jmp 0x10031998
and dword [ebp - 0x7e4], 0
mov eax, dword [ebp - 0xec]
cmp dword [ebp - 0x7e4], eax
jle 0x100319b2
mov dword [ebp - 0x448], 1
jmp 0x100319b9
and dword [ebp - 0x448], 0
mov eax, dword [ebp - 0x10c]
cmp dword [ebp - 0x448], eax
jle 0x100319d3
mov dword [ebp - 0x658], 1
jmp 0x100319da
and dword [ebp - 0x658], 0
mov eax, dword [ebp - 0x10c]
cmp eax, dword [ebp - 0x658]
jl 0x100319f4
mov dword [ebp - 0x450], 1
jmp 0x100319fb
and dword [ebp - 0x450], 0
mov eax, dword [ebp - 0x450]
mov dword [ebp - 0xc0], eax
cmp dword [ebp - 0xc0], 0
jne 0x10031a19
and dword [ebp - 0x760], 0
jmp 0x10031a23
mov dword [ebp - 0x760], 1
mov eax, dword [ebp - 0x760]
mov dword [ebp - 0x10c], eax
mov eax, dword [ebp - 0x10c]
imul eax, dword [ebp - 0xec]
dec eax
dec eax
cmp eax, dword [ebp - 0x4c]
jl 0x10031a4f
mov dword [ebp - 0x458], 1
jmp 0x10031a56
and dword [ebp - 0x458], 0
mov eax, dword [ebp - 0x140]
cmp dword [ebp - 0x458], eax
jg 0x10031a70
mov dword [ebp - 0x660], 1
jmp 0x10031a77
and dword [ebp - 0x660], 0
push 1
lea ecx, [ebp - 0x8b4]
call fcn.10003ac4
mov ecx, dword [ebp - 0x660]
cmp ecx, dword [eax]
je 0x10031a9a
mov dword [ebp - 0x460], 1
jmp 0x10031aa1
and dword [ebp - 0x460], 0
imul eax, dword [ebp - 0x460], 0x89e7
test eax, eax
je 0x10031ad1
cmp dword [ebp - 0xec], 0
je 0x10031acc
mov byte [ebp - 4], 7
lea ecx, [ebp - 0x8b4]
call fcn.10003a4f
jmp 0x10031d93
jmp 0x10031b97
mov dword [ebp - 0xbb0], 0x2576953c
mov dword [ebp - 0xbac], 0x2576953c
mov dword [ebp - 0xba8], 0x2576953c
mov dword [ebp - 0xba4], 0x2576953c
lea ecx, [ebp - 0x375]
call fcn.10004111
push eax
lea eax, [ebp - 0xba0]
push eax
lea eax, [ebp - 0xbb0]
push eax
lea ecx, [ebp - 0xe44]
call fcn.100144e5
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0xd6c]
call fcn.100144bf
mov byte [ebp - 4], 9
mov dword [ebp - 0x8f8], 3
mov dword [ebp - 0x1c4], 0
mov eax, dword [ebp - 0x1c4]
mov dword [ebp - 0x800], eax
push 2
lea ecx, [ebp - 0xd6c]
call fcn.10003ac4
mov ecx, dword [ebp - 0x800]
mov dword [eax], ecx
push 3
lea ecx, [ebp - 0xaa4]
call fcn.10003ac4
mov ecx, dword [ebp - 0x800]
mov dword [eax], ecx
mov eax, dword [ebp - 0xf4]
mov dword [ebp - 0x8f8], eax
mov byte [ebp - 4], 8
lea ecx, [ebp - 0xd6c]
call fcn.10003a4f
cmp dword [ebp - 0xec], 0
je 0x10031bb4
mov byte [ebp - 4], 7
lea ecx, [ebp - 0x8b4]
call fcn.10003a4f
jmp 0x1003175d
jmp 0x10031d7f
mov dword [ebp - 0x3a0], 0xa6a1
mov dword [ebp - 0xa34], 0xca64a9b5
mov dword [ebp - 0xc0], 0x19
jmp 0x10031be6
mov eax, dword [ebp - 0xc0]
dec eax
mov dword [ebp - 0xc0], eax
cmp dword [ebp - 0xc0], 0xfffffffa
jl 0x10031d65
mov dword [ebp - 0xb28], 0xfffffffb
mov dword [ebp - 0xb24], 0xfffffffb
mov dword [ebp - 0xb20], 0xfffffffb
mov dword [ebp - 0xb1c], 0xfffffffb
push 4
pop eax
shl eax, 1
mov ecx, dword [ebp - 0xf4]
sub ecx, dword [ebp + eax - 0xb28]
jne 0x10031c41
mov eax, 0xc241
test eax, eax
jne 0x10031c41
and dword [ebp - 0x468], 0
jmp 0x10031c4b
mov dword [ebp - 0x468], 1
mov eax, dword [ebp - 0x468]
mov dword [ebp - 0x3a0], eax
cmp dword [ebp - 0x3a0], 0
jne 0x10031c6c
mov dword [ebp - 0x668], 1
jmp 0x10031c73
and dword [ebp - 0x668], 0
push 1
lea ecx, [ebp - 0x8b4]
call fcn.10003ac4
mov ecx, dword [ebp - 0x668]
cmp ecx, dword [eax]
jg 0x10031c96
mov dword [ebp - 0x470], 1
jmp 0x10031c9d
and dword [ebp - 0x470], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0xb28]
cmp eax, dword [ebp - 0x470]
je 0x10031cbe
mov dword [ebp - 0x8b8], 1
jmp 0x10031cc5
and dword [ebp - 0x8b8], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0xb28]
mov dword [ebp - 0xd80], eax
mov eax, dword [ebp - 0x3a0]
cmp eax, dword [ebp - 0xc0]
jl 0x10031cf2
mov dword [ebp - 0x768], 1
jmp 0x10031cf9
and dword [ebp - 0x768], 0
push 3
lea ecx, [ebp - 0xaa4]
call fcn.10003ac4
mov ecx, dword [ebp - 0x768]
cmp ecx, dword [eax]
jg 0x10031d22
cmp dword [ebp - 0x140], 0
jne 0x10031d22
and dword [ebp - 0x478], 0
jmp 0x10031d2c
mov dword [ebp - 0x478], 1
mov eax, dword [ebp - 0xa34]
cmp dword [ebp - 0x478], eax
jne 0x10031d46
mov dword [ebp - 0x670], 1
jmp 0x10031d4d
and dword [ebp - 0x670], 0
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x670]
mov dword [ebp + eax - 0xb28], ecx
jmp 0x10031bd9
mov byte [ebp - 0xf9], 0
movzx eax, byte [ebp - 0xf9]
test eax, eax
je 0x10031d7f
push 0
call dword [sym.imp.USER32.dll_CreateIconIndirect]
mov byte [ebp - 4], 7
lea ecx, [ebp - 0x8b4]
call fcn.10003a4f
jmp 0x1003175d
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xaa4]
call fcn.10003a4f
mov byte [ebp - 0x170], 5
mov byte [ebp - 0x16f], 0x38
mov byte [ebp - 0x16e], 0xa
mov byte [ebp - 0x16d], 0
mov byte [ebp - 0x16c], 6
mov byte [ebp - 0x16b], 0x5f
mov byte [ebp - 0x16a], 1
mov byte [ebp - 0x169], 0x56
mov byte [ebp - 0x168], 0xb
mov byte [ebp - 0x167], 9
mov byte [ebp - 0x166], 4
mov byte [ebp - 0x165], 9
mov byte [ebp - 0x164], 9
mov byte [ebp - 0x163], 1
mov byte [ebp - 0x162], 3
mov byte [ebp - 0x161], 0xa
mov byte [ebp - 0x160], 0
mov byte [ebp - 0x15f], 0x25
mov byte [ebp - 0x15e], 8
mov byte [ebp - 0x15d], 0x65
mov byte [ebp - 0x15c], 2
mov byte [ebp - 0x15b], 0x5c
mov byte [ebp - 0x15a], 7
mov byte [ebp - 0x159], 0x40
mov dword [ebp - 0x480], 0x37c2
mov dword [ebp - 0xa44], str.qesnf_jjdlec_lpjzudn
cmp dword [ebp - 0x480], 0x39d6
jle 0x10031f43
and dword [ebp - 0x240], 0
jmp 0x10031e84
mov eax, dword [ebp - 0x240]
inc eax
mov dword [ebp - 0x240], eax
cmp dword [ebp - 0x240], 0x42fc
jge 0x10031f43
and dword [ebp - 0x1cc], 0
jmp 0x10031eaa
mov eax, dword [ebp - 0x1cc]
inc eax
mov dword [ebp - 0x1cc], eax
cmp dword [ebp - 0x1cc], 0x6c70
jge 0x10031f3e
and dword [ebp - 0x248], 0
jmp 0x10031ed0
mov eax, dword [ebp - 0x248]
inc eax
mov dword [ebp - 0x248], eax
cmp dword [ebp - 0x248], 0x393a
jge 0x10031f39
mov eax, dword [ebp - 0x240]
sub eax, dword [ebp - 0x1cc]
and eax, dword [ebp - 0x248]
cdq
mov dword [ebp - 0x930], eax
mov dword [ebp - 0x92c], edx
push dword [ebp - 0x92c]
push dword [ebp - 0x930]
lea ecx, [ebp - 0xf34]
call fcn.10001a95
pop ecx
pop ecx
mov dword [ebp - 0xa3c], eax
mov ecx, dword [ebp - 0xa3c]
call fcn.10003731
push eax
call fcn.10047ad3
pop ecx
lea ecx, [ebp - 0xf34]
call fcn.10003727
jmp 0x10031ec3
jmp 0x10031e9d
jmp 0x10031e77
mov dword [ebp - 0xccc], 0
mov dword [ebp - 4], 0xa
cmp dword [ebp - 0x480], 0x35fe
jge 0x10031f6c
push dword [ebp - 0xa44]
call fcn.10047ad3
pop ecx
jmp 0x10031f88
or dword [ebp - 4], 0xffffffff
jmp 0x10031f92
mov dword [ebp - 0x808], 0x2243
mov dword [ebp - 0xa54], str.hjfrdrlsz_qbrwtoj_lkm_eyzfz_poxiu_xpofzcm_tvjiwlcj
cmp dword [ebp - 0x808], 0x2557
jle 0x1003205c
and dword [ebp - 0x1d4], 0
jmp 0x10031fcc
mov eax, dword [ebp - 0x1d4]
inc eax
mov dword [ebp - 0x1d4], eax
cmp dword [ebp - 0x1d4], 0x7e36
jge 0x1003205c
and dword [ebp - 0x250], 0
jmp 0x10031ff2
mov eax, dword [ebp - 0x250]
inc eax
mov dword [ebp - 0x250], eax
cmp dword [ebp - 0x250], 0x6b56
jge 0x10032057
mov eax, dword [ebp - 0x1d4]
mov ecx, dword [ebp - 0x250]
shl eax, cl
cdq
mov dword [ebp - 0x93c], eax
mov dword [ebp - 0x938], edx
push dword [ebp - 0x938]
push dword [ebp - 0x93c]
lea ecx, [ebp - 0xf7c]
call fcn.10001a95
pop ecx
pop ecx
mov dword [ebp - 0xa4c], eax
mov ecx, dword [ebp - 0xa4c]
call fcn.10003731
push eax
call fcn.10047ad3
pop ecx
lea ecx, [ebp - 0xf7c]
call fcn.10003727
jmp 0x10031fe5
jmp 0x10031fbf
mov byte [ebp - 0x103], 0
mov dword [ebp - 4], 0xc
cmp dword [ebp - 0x808], 0x1fb6
jge 0x10032082
push dword [ebp - 0xa54]
call fcn.10047ad3
pop ecx
jmp 0x1003209e
or dword [ebp - 4], 0xffffffff
jmp 0x100320a8
mov dword [ebp - 0x488], 0x4856
mov dword [ebp - 0xa5c], str.zbshygug_egdmucspf_zrkfba_ecf
cmp dword [ebp - 0x488], 0x4994
jle 0x1003218c
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_EndDoc]
and dword [ebp - 0x1dc], 0
jmp 0x100320f6
mov eax, dword [ebp - 0x1dc]
inc eax
mov dword [ebp - 0x1dc], eax
cmp dword [ebp - 0x1dc], 0x36d1
jge 0x1003218c
and dword [ebp - 0x258], 0
jmp 0x1003211c
mov eax, dword [ebp - 0x258]
inc eax
mov dword [ebp - 0x258], eax
cmp dword [ebp - 0x258], 0x782c
jge 0x10032187
and dword [ebp - 0x1e4], 0
jmp 0x1003213e
mov eax, dword [ebp - 0x1e4]
inc eax
mov dword [ebp - 0x1e4], eax
cmp dword [ebp - 0x1e4], 0x1d7
jge 0x10032185
mov eax, dword [ebp - 0x1dc]
imul eax, dword [ebp - 0x258]
cdq
idiv dword [ebp - 0x1e4]
mov eax, edx
cdq
mov dword [ebp - 0x948], eax
mov dword [ebp - 0x944], edx
push dword [ebp - 0x944]
push dword [ebp - 0x948]
mov ecx, 0x1007aeb8
call fcn.10003751
jmp 0x10032131
jmp 0x1003210f
jmp 0x100320e9
movzx eax, byte [ebp - 0x103]
test eax, eax
je 0x100321d3
push 0x235e
push 0x804
push 0x13b1
push 0x1057
push 0x1a6a
push 0x1435
push 0x25f6
push 0x5b2
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_Arc]
mov dword [ebp - 4], 0xe
cmp dword [ebp - 0x488], 0x47e1
jge 0x100321f6
mov edx, dword [ebp - 0xa5c]
mov ecx, 0x1007aeb8
call fcn.10005cf1
jmp 0x10032212
or dword [ebp - 4], 0xffffffff
jmp 0x1003221c
mov byte [ebp - 0xe4], 0
movzx eax, byte [ebp - 0xe4]
test eax, eax
je 0x1003223c
push 1
push 0
push 1
push 0
call dword [sym.imp.ADVAPI32.dll_SetSecurityDescriptorDacl]
xor eax, eax
inc eax
shl eax, 0
movzx eax, byte [ebp + eax - 0x170]
and eax, 0x54
xor ecx, ecx
inc ecx
shl ecx, 0
movzx ecx, byte [ebp + ecx - 0x170]
or ecx, 0x54
sub ecx, eax
xor eax, eax
inc eax
imul eax, eax, 0
movzx eax, byte [ebp + eax - 0x170]
mov word [ebp + eax*2 - 0xc84], cx
mov dword [ebp - 0x4a8], 0x49ef
mov dword [ebp - 0xa7c], str.xktzlmb_sxkpgac_vxrhvsgf_iplqvc_vctdlcb
cmp dword [ebp - 0x4a8], 0x4c3e
jle 0x1003233a
and dword [ebp - 0x260], 0
jmp 0x100322b0
mov eax, dword [ebp - 0x260]
inc eax
mov dword [ebp - 0x260], eax
cmp dword [ebp - 0x260], 0x4ec3
jge 0x1003233a
and dword [ebp - 0x1ec], 0
jmp 0x100322d2
mov eax, dword [ebp - 0x1ec]
inc eax
mov dword [ebp - 0x1ec], eax
cmp dword [ebp - 0x1ec], 0x288f
jge 0x10032335
mov eax, dword [ebp - 0x260]
and eax, dword [ebp - 0x1ec]
cdq
mov dword [ebp - 0x954], eax
mov dword [ebp - 0x950], edx
push dword [ebp - 0x950]
push dword [ebp - 0x954]
lea ecx, [ebp - 0xfac]
call fcn.10001a95
pop ecx
pop ecx
mov dword [ebp - 0xa64], eax
mov ecx, dword [ebp - 0xa64]
call fcn.10003731
push eax
call fcn.10047ad3
pop ecx
lea ecx, [ebp - 0xfac]
call fcn.10003727
jmp 0x100322c5
jmp 0x100322a3
mov dword [ebp - 0x98], 0
mov dword [ebp - 0x268], 0xfffffff9
push 1
lea ecx, [ebp - 0xb84]
call fcn.100039f2
mov dword [ebp - 4], 0x10
mov dword [ebp - 0x680], 0xffffffff
push 1
lea ecx, [ebp - 0xb48]
call fcn.100039f2
mov byte [ebp - 4], 0x11
mov dword [ebp - 0xdd0], 0xe5950169
mov dword [ebp - 0x80], 0
jmp 0x10032397
mov eax, dword [ebp - 0x80]
inc eax
mov dword [ebp - 0x80], eax
cmp dword [ebp - 0x80], 1
jge 0x100323b3
push dword [ebp - 0x80]
lea ecx, [ebp - 0xb84]
call fcn.10003ac4
mov dword [eax], 0xfffffffc
jmp 0x10032390
mov dword [ebp - 0x80], 0
jmp 0x100323c3
mov eax, dword [ebp - 0x80]
inc eax
mov dword [ebp - 0x80], eax
cmp dword [ebp - 0x80], 1
jge 0x100323df
push dword [ebp - 0x80]
lea ecx, [ebp - 0xb48]
call fcn.10003ac4
mov dword [eax], 0xfffffffa
jmp 0x100323bc
mov dword [ebp - 0x98], 0xe2c0d37a
mov eax, dword [ebp - 0x98]
mov dword [ebp - 0xcd4], eax
mov eax, dword [ebp - 0x268]
mov dword [ebp - 0xd90], eax
cmp dword [ebp - 0x268], 0
jne 0x1003241c
cmp dword [ebp - 0x98], 0
jne 0x1003241c
and dword [ebp - 0xa6c], 0
jmp 0x10032426
mov dword [ebp - 0xa6c], 1
cmp dword [ebp - 0x98], 0x9bea
jl 0x1003243e
mov dword [ebp - 0xa74], 1
jmp 0x10032445
and dword [ebp - 0xa74], 0
mov eax, dword [ebp - 0x98]
mov dword [ebp - 0xcdc], eax
mov eax, dword [ebp - 0x98]
mov dword [ebp - 0x268], eax
mov eax, dword [ebp - 0x268]
cmp eax, dword [ebp - 0x98]
je 0x10032477
mov dword [ebp - 0x678], 1
jmp 0x1003247e
and dword [ebp - 0x678], 0
push 0
lea ecx, [ebp - 0xb84]
call fcn.10003ac4
mov ecx, dword [ebp - 0x678]
mov dword [eax], ecx
mov eax, dword [ebp - 0x98]
mov dword [ebp - 0xd94], eax
mov eax, 0xfffd
imul eax, eax, 0x8af
cmp eax, 0x8951bb35
je 0x100324bd
mov dword [ebp - 0x490], 1
jmp 0x100324c4
and dword [ebp - 0x490], 0
cmp dword [ebp - 0x490], 0xfffffffb
je 0x100324d9
mov dword [ebp - 0x770], 1
jmp 0x100324e0
and dword [ebp - 0x770], 0
cmp dword [ebp - 0x770], 1
jae 0x100324f5
mov dword [ebp - 0x498], 1
jmp 0x100324fc
and dword [ebp - 0x498], 0
mov eax, dword [ebp - 0x498]
mov dword [ebp - 0x680], eax
cmp dword [ebp - 0x680], 0
je 0x1003252f
push 0
lea ecx, [ebp - 0xb84]
call fcn.10003ac4
cmp dword [eax], 0
je 0x1003252f
mov dword [ebp - 0x4a0], 1
jmp 0x10032536
and dword [ebp - 0x4a0], 0
push 0
lea ecx, [ebp - 0xb48]
call fcn.10003ac4
mov ecx, dword [ebp - 0x4a0]
sub ecx, dword [eax]
cmp ecx, 0xf1d4b082
jne 0x1003255f
mov dword [ebp - 0x81c], 1
jmp 0x10032566
and dword [ebp - 0x81c], 0
mov esi, dword [ebp - 0x81c]
sub esi, 6
push 0
lea ecx, [ebp - 0xb48]
call fcn.10003ac4
mov dword [eax], esi
mov byte [ebp - 4], 0x10
lea ecx, [ebp - 0xb48]
call fcn.10003a4f
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xb84]
call fcn.10003a4f
mov dword [ebp - 4], 0x12
cmp dword [ebp - 0x4a8], 0x465a
jge 0x100325bb
push dword [ebp - 0xa7c]
call fcn.10047ad3
pop ecx
jmp 0x100325d7
or dword [ebp - 4], 0xffffffff
jmp 0x100325e1
mov dword [ebp - 0x44], 2
and dword [ebp - 0x36c], 0
jmp 0x100325f9
mov eax, dword [ebp - 0x44]
inc eax
inc eax
mov dword [ebp - 0x44], eax
cmp dword [ebp - 0x44], 0x18
jae 0x10032691
mov eax, dword [ebp - 0x44]
sub eax, dword [ebp - 0x36c]
movzx eax, byte [ebp + eax - 0x172]
movzx eax, word [ebp + eax*2 - 0xc84]
mov ecx, dword [ebp - 0x44]
movzx ecx, byte [ebp + ecx - 0x16f]
and ecx, eax
mov eax, dword [ebp - 0x44]
sub eax, dword [ebp - 0x36c]
movzx eax, byte [ebp + eax - 0x172]
movzx eax, word [ebp + eax*2 - 0xc84]
mov edx, dword [ebp - 0x44]
movzx edx, byte [ebp + edx - 0x16f]
and edx, eax
mov eax, dword [ebp - 0x44]
sub eax, dword [ebp - 0x36c]
movzx eax, byte [ebp + eax - 0x172]
movzx eax, word [ebp + eax*2 - 0xc84]
mov esi, dword [ebp - 0x44]
movzx esi, byte [ebp + esi - 0x16f]
add esi, eax
sub esi, edx
sub esi, ecx
mov eax, dword [ebp - 0x44]
movzx eax, byte [ebp + eax - 0x170]
mov word [ebp + eax*2 - 0xc84], si
jmp 0x100325f1
mov dword [ebp - 0x40], 0xa115252c
mov dword [ebp - 0x194], 0
jmp 0x100326b1
mov eax, dword [ebp - 0x194]
inc eax
mov dword [ebp - 0x194], eax
cmp dword [ebp - 0x194], 3
jge 0x100326cd
mov eax, dword [ebp - 0x194]
mov dword [ebp + eax*4 - 0x884], 0xc033
jmp 0x100326a4
mov dword [ebp - 0x40], 0
jmp 0x100326dd
mov eax, dword [ebp - 0x40]
inc eax
mov dword [ebp - 0x40], eax
cmp dword [ebp - 0x40], 3
jge 0x100326f3
mov eax, dword [ebp - 0x40]
mov dword [ebp + eax*4 - 0x884], 4
jmp 0x100326d6
mov dword [ebp - 0x40], 0
jmp 0x10032703
mov eax, dword [ebp - 0x40]
inc eax
mov dword [ebp - 0x40], eax
cmp dword [ebp - 0x40], 0x10
jge 0x10032a51
mov dword [ebp - 0x78], 0xfffffff8
mov dword [ebp - 0x688], 0x1966c477
mov dword [ebp - 0xbd8], 0xf9534236
mov dword [ebp - 0xbd4], 0xf9534236
mov dword [ebp - 0xbd0], 0xf9534236
mov dword [ebp - 0xbcc], 0xf9534236
lea ecx, [ebp - 0x37d]
call fcn.10004111
push eax
lea eax, [ebp - 0xbc8]
push eax
lea eax, [ebp - 0xbd8]
push eax
lea ecx, [ebp - 0xe04]
call fcn.100144e5
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0xd7c]
call fcn.100144bf
mov dword [ebp - 4], 0x14
mov dword [ebp - 0x4c0], 0xffffffff
mov dword [ebp - 0xa94], 0xd7c584ed
mov byte [ebp - 0xe6], 0
movzx eax, byte [ebp - 0xe6]
test eax, eax
je 0x100327ba
push 0x42
push 0xea0
push 0x7b2
call dword [sym.imp.KERNEL32.dll_MulDiv]
mov dword [ebp - 0x78], 0
jmp 0x100327ca
mov eax, dword [ebp - 0x78]
inc eax
mov dword [ebp - 0x78], eax
cmp dword [ebp - 0x78], 0x12
jl 0x10032a3d
mov dword [ebp - 0x7f4], 1
mov dword [ebp - 0x270], 5
cmp dword [ebp - 0x78], 0
jne 0x100327fa
mov dword [ebp - 0x6a0], 1
jmp 0x10032801
and dword [ebp - 0x6a0], 0
mov eax, dword [ebp - 0x40]
mov dword [ebp - 0x688], eax
cmp dword [ebp - 0x688], 0xf4cc
jl 0x10032822
mov dword [ebp - 0x4b0], 1
jmp 0x10032829
and dword [ebp - 0x4b0], 0
mov eax, dword [ebp - 0x78]
cmp dword [ebp - 0x4b0], eax
jl 0x10032840
mov dword [ebp - 0x3a4], 1
jmp 0x10032847
and dword [ebp - 0x3a4], 0
push 3
lea ecx, [ebp - 0xd7c]
call fcn.10003ac4
mov ecx, dword [ebp - 0x3a4]
mov dword [eax], ecx
cmp dword [ebp - 0x3a4], 0x2718
jg 0x10032874
mov dword [ebp - 0x778], 1
jmp 0x1003287b
and dword [ebp - 0x778], 0
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x884]
cmp dword [ebp - 0x778], eax
jne 0x1003289b
mov dword [ebp - 0x4b8], 1
jmp 0x100328a2
and dword [ebp - 0x4b8], 0
cmp dword [ebp - 0x4b8], 0
jbe 0x100328b7
mov dword [ebp - 0x690], 1
jmp 0x100328be
and dword [ebp - 0x690], 0
mov eax, dword [ebp - 0x690]
mov dword [ebp - 0x4c0], eax
mov eax, dword [ebp - 0x4c0]
mov dword [ebp - 0x7f4], eax
cmp dword [ebp - 0x7f4], 0
je 0x100328fa
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0x884], 0
je 0x100328fa
mov dword [ebp - 0x4c8], 1
jmp 0x10032901
and dword [ebp - 0x4c8], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x4c8]
sub ecx, dword [ebp + eax - 0x884]
jne 0x10032926
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x884], 0
je 0x10032938
cmp dword [ebp - 0x78], 0
je 0x10032938
mov dword [ebp - 0x698], 1
jmp 0x1003293f
and dword [ebp - 0x698], 0
mov eax, dword [ebp - 0x270]
cmp dword [ebp - 0x698], eax
jge 0x10032959
mov dword [ebp - 0x4d0], 1
jmp 0x10032960
and dword [ebp - 0x4d0], 0
cmp dword [ebp - 0x4d0], 0x7b7e80d6
jne 0x10032981
mov eax, 0x1ebc5f93
test eax, eax
je 0x10032981
mov dword [ebp - 0x780], 1
jmp 0x10032988
and dword [ebp - 0x780], 0
mov eax, dword [ebp - 0x40]
imul eax, dword [ebp - 0x780]
imul eax, eax, 0xfffffffa
imul eax, eax, 0x41b0
cmp eax, dword [ebp - 0x270]
jg 0x100329af
mov dword [ebp - 0xa84], 1
jmp 0x100329b6
and dword [ebp - 0xa84], 0
push 0xfffffffffffffff8
pop eax
test eax, eax
je 0x100329d8
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0x884], 0
je 0x100329d8
mov dword [ebp - 0x4d8], 1
jmp 0x100329df
and dword [ebp - 0x4d8], 0
mov eax, dword [ebp - 0x4d8]
mov dword [ebp - 0x270], eax
mov eax, dword [ebp - 0x270]
cmp dword [ebp - 0x6a0], eax
jne 0x10032a05
mov dword [ebp - 0xa8c], 1
jmp 0x10032a0c
and dword [ebp - 0xa8c], 0
cmp dword [ebp - 0x78], 0xfff7
jb 0x10032a21
mov dword [ebp - 0x4e0], 1
jmp 0x10032a28
and dword [ebp - 0x4e0], 0
mov eax, dword [ebp - 0x78]
imul eax, dword [ebp - 0x4e0]
mov dword [ebp - 0xa94], eax
jmp 0x100327c3
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xd7c]
call fcn.10003a4f
jmp 0x100326fc
push 2
pop eax
imul eax, eax, 0xc
xor ecx, ecx
mov word [ebp + eax - 0xc84], cx
lea eax, [ebp - 0xc84]
push eax
lea ecx, [ebp - 0xea4]
call fcn.1002008b
mov dword [ebp - 0xac0], eax
mov eax, dword [ebp - 0xac0]
mov dword [ebp - 0xa48], eax
mov dword [ebp - 4], 0x15
push dword [ebp - 0xa48]
call fcn.10029599
pop ecx
mov dword [ebp - 0x51c], eax
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xea4]
call fcn.100038a1
mov dword [ebp - 0x9c], 0xee1c9741
mov dword [ebp - 0xc8], 0xdca2
mov dword [ebp - 0x3ac], 0
mov dword [ebp - 0x790], 6
mov dword [ebp - 0x8cc], 0xffffffff
mov dword [ebp - 0x518], 0xe4f20077
mov dword [ebp - 0x37c], 3
mov dword [ebp - 0x834], 0x6ceb
mov dword [ebp - 0xb08], str.agdwbztxs_vzs_dhqoptxxv_qryup_vrl_orw_vdq
cmp dword [ebp - 0x834], 0x70b0
jle 0x10032f59
and dword [ebp - 0x1fc], 0
jmp 0x10032b2d
mov eax, dword [ebp - 0x1fc]
inc eax
mov dword [ebp - 0x1fc], eax
cmp dword [ebp - 0x1fc], 0x5dbc
jge 0x10032f59
mov dword [ebp - 0xae8], 0x270e
cmp dword [ebp - 0xae8], 0x1074
jge 0x10032ea9
lea eax, [ebp - 0x870]
push eax
lea eax, [ebp - 0x868]
push eax
mov ecx, 0x1007afd8
call fcn.1003ba5c
mov ecx, eax
call fcn.1003ba5c
mov eax, dword [ebp - 0x868]
add eax, dword [ebp - 0x870]
mov ecx, dword [ebp - 0x864]
adc ecx, dword [ebp - 0x86c]
mov dword [ebp - 0x960], eax
mov dword [ebp - 0x95c], ecx
mov eax, dword [ebp - 0x868]
mov dword [ebp - 0xb0], eax
mov eax, dword [ebp - 0x864]
mov dword [ebp - 0xac], eax
mov eax, dword [ebp - 0x870]
mov dword [ebp - 0xb8], eax
mov eax, dword [ebp - 0x86c]
mov dword [ebp - 0xb4], eax
mov eax, dword [ebp - 0x960]
mov dword [ebp - 0xa8], eax
mov eax, dword [ebp - 0x95c]
mov dword [ebp - 0xa4], eax
xorpd xmm0, xmm0
movlpd qword [ebp - 0x20], xmm0
mov eax, dword [ebp - 0xb0]
or eax, dword [ebp - 0xac]
je 0x10032c88
push 0
push 0xa
push dword [ebp - 0xac]
push dword [ebp - 0xb0]
call fcn.1005eb00
mov dword [ebp - 0x96c], eax
mov dword [ebp - 0x968], edx
mov eax, dword [ebp - 0x96c]
or eax, dword [ebp - 0x968]
je 0x10032c62
push 0
push 0xa
push dword [ebp - 0x1c]
push dword [ebp - 0x20]
call fcn.1004be70
mov dword [ebp - 0x20], eax
mov dword [ebp - 0x1c], edx
push 0
push 0xa
push dword [ebp - 0xac]
push dword [ebp - 0xb0]
call fcn.1005eb00
add eax, dword [ebp - 0x20]
adc edx, dword [ebp - 0x1c]
mov dword [ebp - 0x20], eax
mov dword [ebp - 0x1c], edx
push 0
push 0xa
push dword [ebp - 0xac]
push dword [ebp - 0xb0]
call fcn.1005ea50
mov dword [ebp - 0xb0], eax
mov dword [ebp - 0xac], edx
jmp 0x10032beb
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0xb0], eax
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0xac], eax
xorpd xmm0, xmm0
movlpd qword [ebp - 0x20], xmm0
mov eax, dword [ebp - 0xb8]
or eax, dword [ebp - 0xb4]
je 0x10032d40
push 0
push 0xa
push dword [ebp - 0xb4]
push dword [ebp - 0xb8]
call fcn.1005eb00
mov dword [ebp - 0x978], eax
mov dword [ebp - 0x974], edx
mov eax, dword [ebp - 0x978]
or eax, dword [ebp - 0x974]
je 0x10032d1a
push 0
push 0xa
push dword [ebp - 0x1c]
push dword [ebp - 0x20]
call fcn.1004be70
mov dword [ebp - 0x20], eax
mov dword [ebp - 0x1c], edx
push 0
push 0xa
push dword [ebp - 0xb4]
push dword [ebp - 0xb8]
call fcn.1005eb00
add eax, dword [ebp - 0x20]
adc edx, dword [ebp - 0x1c]
mov dword [ebp - 0x20], eax
mov dword [ebp - 0x1c], edx
push 0
push 0xa
push dword [ebp - 0xb4]
push dword [ebp - 0xb8]
call fcn.1005ea50
mov dword [ebp - 0xb8], eax
mov dword [ebp - 0xb4], edx
jmp 0x10032ca3
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0xb8], eax
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0xb4], eax
xorpd xmm0, xmm0
movlpd qword [ebp - 0x20], xmm0
mov eax, dword [ebp - 0xa8]
or eax, dword [ebp - 0xa4]
je 0x10032df8
push 0
push 0xa
push dword [ebp - 0xa4]
push dword [ebp - 0xa8]
call fcn.1005eb00
mov dword [ebp - 0x984], eax
mov dword [ebp - 0x980], edx
mov eax, dword [ebp - 0x984]
or eax, dword [ebp - 0x980]
je 0x10032dd2
push 0
push 0xa
push dword [ebp - 0x1c]
push dword [ebp - 0x20]
call fcn.1004be70
mov dword [ebp - 0x20], eax
mov dword [ebp - 0x1c], edx
push 0
push 0xa
push dword [ebp - 0xa4]
push dword [ebp - 0xa8]
call fcn.1005eb00
add eax, dword [ebp - 0x20]
adc edx, dword [ebp - 0x1c]
mov dword [ebp - 0x20], eax
mov dword [ebp - 0x1c], edx
push 0
push 0xa
push dword [ebp - 0xa4]
push dword [ebp - 0xa8]
call fcn.1005ea50
mov dword [ebp - 0xa8], eax
mov dword [ebp - 0xa4], edx
jmp 0x10032d5b
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0xa8], eax
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0xa4], eax
lea eax, [ebp - 0xb0]
push eax
call fcn.10030c43
pop ecx
lea eax, [ebp - 0xb8]
push eax
call fcn.10030c43
pop ecx
lea eax, [ebp - 0xa8]
push eax
call fcn.10030c43
pop ecx
mov eax, dword [ebp - 0xb0]
add eax, dword [ebp - 0xb8]
mov ecx, dword [ebp - 0xac]
adc ecx, dword [ebp - 0xb4]
mov dword [ebp - 0x990], eax
mov dword [ebp - 0x98c], ecx
mov eax, dword [ebp - 0x990]
cmp eax, dword [ebp - 0xa8]
jne 0x10032e8e
mov eax, dword [ebp - 0x98c]
cmp eax, dword [ebp - 0xa4]
jne 0x10032e8e
push fcn.10021f62
mov edx, 0x10068d28
mov ecx, 0x1007aeb8
call fcn.10005cf1
mov ecx, eax
call fcn.1001ff6d
jmp 0x10032ea9
push fcn.10021f62
mov edx, 0x10068d2c
mov ecx, 0x1007aeb8
call fcn.10005cf1
mov ecx, eax
call fcn.1001ff6d
and dword [ebp - 0x2fc], 0
jmp 0x10032ebf
mov eax, dword [ebp - 0x2fc]
inc eax
mov dword [ebp - 0x2fc], eax
cmp dword [ebp - 0x2fc], 0xe0e
jge 0x10032f54
and dword [ebp - 0x204], 0
jmp 0x10032ee5
mov eax, dword [ebp - 0x204]
inc eax
mov dword [ebp - 0x204], eax
cmp dword [ebp - 0x204], 0x7188
jge 0x10032f4f
mov eax, dword [ebp - 0x1fc]
imul eax, dword [ebp - 0x2fc]
xor eax, dword [ebp - 0x204]
cdq
mov dword [ebp - 0x99c], eax
mov dword [ebp - 0x998], edx
push dword [ebp - 0x998]
push dword [ebp - 0x99c]
lea ecx, [ebp - 0xe74]
call fcn.10001a95
pop ecx
pop ecx
mov dword [ebp - 0x8c4], eax
mov ecx, dword [ebp - 0x8c4]
call fcn.10003731
push eax
call fcn.10047ad3
pop ecx
lea ecx, [ebp - 0xe74]
call fcn.10003727
jmp 0x10032ed8
jmp 0x10032eb2
jmp 0x10032b20
mov dword [ebp - 0x374], 0x1ef4
mov dword [ebp - 4], 0x16
cmp dword [ebp - 0x834], 0x696c
jge 0x10032f82
push dword [ebp - 0xb08]
call fcn.10047ad3
pop ecx
jmp 0x10032f9e
or dword [ebp - 4], 0xffffffff
jmp 0x10032fa8
mov dword [ebp - 0x2ac], 0
jmp 0x10032fc1
mov eax, dword [ebp - 0x2ac]
inc eax
mov dword [ebp - 0x2ac], eax
cmp dword [ebp - 0x2ac], 3
jge 0x10032fdd
mov eax, dword [ebp - 0x2ac]
mov dword [ebp + eax*4 - 0xdf0], 0x4e2095e0
jmp 0x10032fb4
cmp dword [ebp - 0x9c], 0x5514
jg 0x10032ffe
cmp dword [ebp - 0x9c], 0
je 0x10032ffe
mov dword [ebp - 0x4e8], 1
jmp 0x10033005
and dword [ebp - 0x4e8], 0
cmp dword [ebp - 0x4e8], 0
jb 0x10033020
cmp dword [ebp - 0x9c], 0
jne 0x10033020
and dword [ebp - 0x6a8], 0
jmp 0x1003302a
mov dword [ebp - 0x6a8], 1
mov eax, dword [ebp - 0xc8]
cmp dword [ebp - 0x6a8], eax
je 0x10033044
mov dword [ebp - 0x4f0], 1
jmp 0x1003304b
and dword [ebp - 0x4f0], 0
mov eax, dword [ebp - 0xc8]
cmp dword [ebp - 0x4f0], eax
jg 0x10033065
mov dword [ebp - 0x788], 1
jmp 0x1003306c
and dword [ebp - 0x788], 0
mov eax, dword [ebp - 0x788]
sub eax, 0x2f3c
mov ecx, dword [ebp - 0x9c]
sub ecx, eax
cmp ecx, 0x66e9f086
je 0x10033093
mov dword [ebp - 0x4f8], 1
jmp 0x1003309a
and dword [ebp - 0x4f8], 0
cmp dword [ebp - 0x4f8], 0xffffffff
jle 0x100330af
mov dword [ebp - 0x6b0], 1
jmp 0x100330b6
and dword [ebp - 0x6b0], 0
mov eax, dword [ebp - 0xc8]
cmp dword [ebp - 0x6b0], eax
jge 0x100330d0
mov dword [ebp - 0x500], 1
jmp 0x100330d7
and dword [ebp - 0x500], 0
mov eax, dword [ebp - 0xc8]
cmp dword [ebp - 0x500], eax
jge 0x100330f1
mov dword [ebp - 0x7fc], 1
jmp 0x100330f8
and dword [ebp - 0x7fc], 0
cmp dword [ebp - 0x7fc], 0xfff9
jbe 0x10033110
mov dword [ebp - 0x508], 1
jmp 0x10033117
and dword [ebp - 0x508], 0
mov eax, dword [ebp - 0x508]
sub eax, dword [ebp - 0xc8]
je 0x1003313a
cmp dword [ebp - 0x9c], 0
je 0x1003313a
mov dword [ebp - 0x6b8], 1
jmp 0x10033141
and dword [ebp - 0x6b8], 0
mov eax, dword [ebp - 0x3ac]
cmp dword [ebp - 0x6b8], eax
jne 0x1003315b
mov dword [ebp - 0x510], 1
jmp 0x10033162
and dword [ebp - 0x510], 0
mov eax, dword [ebp - 0x9c]
add eax, dword [ebp - 0x510]
mov dword [ebp - 0x3ac], eax
mov dword [ebp - 0x790], 0xe105
cmp dword [ebp - 0x790], 0
jne 0x10033193
mov dword [ebp - 0x6c0], 1
jmp 0x1003319a
and dword [ebp - 0x6c0], 0
mov eax, dword [ebp - 0x9c]
mov dword [ebp - 0x8cc], eax
mov eax, dword [ebp - 0x9c]
mov dword [ebp - 0xce4], eax
mov eax, dword [ebp - 0xc8]
mov dword [ebp - 0xd1c], eax
mov eax, dword [ebp - 0x518]
mov dword [ebp - 0xcec], eax
mov eax, dword [ebp - 0x374]
dec eax
mov dword [ebp - 0x374], eax
mov eax, dword [ebp - 0x37c]
mov dword [ebp - 0xa50], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0xa50]
mov dword [ebp + eax - 0xdf0], ecx
mov eax, dword [ebp - 0x374]
mov dword [ebp - 0xd24], eax
mov eax, dword [ebp - 0xc8]
add eax, dword [ebp - 0x518]
cmp eax, 0xfffffff9
je 0x1003321f
mov dword [ebp - 0x520], 1
jmp 0x10033226
and dword [ebp - 0x520], 0
mov eax, dword [ebp - 0x6c0]
cmp eax, dword [ebp - 0x520]
jl 0x10033244
xor eax, eax
je 0x10033244
mov dword [ebp - 0x824], 1
jmp 0x1003324b
and dword [ebp - 0x824], 0
mov eax, dword [ebp - 0x824]
add eax, 0xf62763f
cmp eax, dword [ebp - 0x37c]
jne 0x1003326a
mov dword [ebp - 0x528], 1
jmp 0x10033271
and dword [ebp - 0x528], 0
mov eax, dword [ebp - 0x3ac]
cmp eax, dword [ebp - 0x528]
jg 0x1003328b
mov dword [ebp - 0x6c8], 1
jmp 0x10033292
and dword [ebp - 0x6c8], 0
cmp dword [ebp - 0x6c8], 8
jl 0x100332a7
mov dword [ebp - 0x530], 1
jmp 0x100332ae
and dword [ebp - 0x530], 0
mov eax, dword [ebp - 0x530]
mov dword [ebp - 0x37c], eax
and dword [ebp - 0x2b4], 0
jmp 0x100332d0
mov eax, dword [ebp - 0x2b4]
inc eax
mov dword [ebp - 0x2b4], eax
cmp dword [ebp - 0x2b4], 0xd
jae 0x100333d1
mov dword [ebp - 0x33c], 0xfffffff9
mov dword [ebp - 0xcf4], 0x9ff446cd
mov dword [ebp - 0x8d4], 0x66fa4bc4
mov dword [ebp - 0x20c], 0
jmp 0x10033314
mov eax, dword [ebp - 0x20c]
inc eax
mov dword [ebp - 0x20c], eax
cmp dword [ebp - 0x20c], 1
jge 0x10033330
mov eax, dword [ebp - 0x20c]
mov dword [ebp + eax*4 - 0xd2c], 1
jmp 0x10033307
mov dword [ebp - 0x33c], 0
jmp 0x10033349
mov eax, dword [ebp - 0x33c]
dec eax
mov dword [ebp - 0x33c], eax
cmp dword [ebp - 0x33c], 0
jl 0x100333bc
push 3
lea ecx, [ebp - 0xd8c]
call fcn.100039f2
mov dword [ebp - 4], 0x18
mov dword [ebp - 0x214], 0
jmp 0x1003337f
mov eax, dword [ebp - 0x214]
inc eax
mov dword [ebp - 0x214], eax
cmp dword [ebp - 0x214], 3
jge 0x100333a1
push dword [ebp - 0x214]
lea ecx, [ebp - 0xd8c]
call fcn.10003ac4
mov dword [eax], 0xfffffff6
jmp 0x10033372
mov dword [ebp - 0x8d4], 1
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xd8c]
call fcn.10003a4f
jmp 0x1003333c
xor eax, eax
mov ecx, dword [ebp - 0x2b4]
mov word [ebp + ecx*2 - 0xc84], ax
jmp 0x100332c3
mov dword [ebp - 0x798], 0x50f2
mov dword [ebp - 0x8dc], str.rrhwsc_lpguhclh_yhucgj_kfrjwi_hpotfphyg_feii_zfb_vctsy_mggxa_kfkebf_bxc_xenk_jqrzecp
cmp dword [ebp - 0x798], 0x51a4
jle 0x100334ff
and dword [ebp - 0x21c], 0
jmp 0x1003340b
mov eax, dword [ebp - 0x21c]
inc eax
mov dword [ebp - 0x21c], eax
cmp dword [ebp - 0x21c], 0x4ab9
jge 0x100334ff
and dword [ebp - 0x304], 0
jmp 0x10033431
mov eax, dword [ebp - 0x304]
inc eax
mov dword [ebp - 0x304], eax
cmp dword [ebp - 0x304], 0x755d
jge 0x100334fa
and dword [ebp - 0x224], 0
jmp 0x10033457
mov eax, dword [ebp - 0x224]
inc eax
mov dword [ebp - 0x224], eax
cmp dword [ebp - 0x224], 0x4b4d
jge 0x100334f5
and dword [ebp - 0x2bc], 0
jmp 0x1003347d
mov eax, dword [ebp - 0x2bc]
inc eax
mov dword [ebp - 0x2bc], eax
cmp dword [ebp - 0x2bc], 0x5755
jge 0x100334f0
mov eax, dword [ebp - 0x21c]
add eax, dword [ebp - 0x304]
mov ecx, dword [ebp - 0x224]
shl eax, cl
mov ecx, dword [ebp - 0x2bc]
shl eax, cl
cdq
mov dword [ebp - 0x9a8], eax
mov dword [ebp - 0x9a4], edx
push dword [ebp - 0x9a4]
push dword [ebp - 0x9a8]
lea ecx, [ebp - 0xed4]
call fcn.10001a95
pop ecx
pop ecx
mov dword [ebp - 0xaf0], eax
mov ecx, dword [ebp - 0xaf0]
call fcn.10003731
push eax
call fcn.10047ad3
pop ecx
lea ecx, [ebp - 0xed4]
call fcn.10003727
jmp 0x10033470
jmp 0x1003344a
jmp 0x10033424
jmp 0x100333fe
mov dword [ebp - 0x22c], 0x7e2799ac
mov dword [ebp - 0x22c], 0
jmp 0x10033522
mov eax, dword [ebp - 0x22c]
inc eax
mov dword [ebp - 0x22c], eax
cmp dword [ebp - 0x22c], 0xe
jl 0x100335de
push 2
lea ecx, [ebp - 0xb54]
call fcn.100039f2
mov dword [ebp - 4], 0x19
mov dword [ebp - 0x32c], 0
jmp 0x1003355c
mov eax, dword [ebp - 0x32c]
inc eax
mov dword [ebp - 0x32c], eax
cmp dword [ebp - 0x32c], 2
jge 0x1003357e
push dword [ebp - 0x32c]
lea ecx, [ebp - 0xb54]
call fcn.10003ac4
mov dword [eax], 0x4d2edc75
jmp 0x1003354f
mov byte [ebp - 0x104], 0
movzx eax, byte [ebp - 0x104]
test eax, eax
je 0x100335a7
push 0xdd5
push 0x1ca
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_SetClassLongA]
push 0
lea ecx, [ebp - 0xb54]
call fcn.10003ac4
cmp dword [eax], 0
je 0x100335ca
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xb54]
call fcn.10003a4f
jmp 0x100335de
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xb54]
call fcn.10003a4f
jmp 0x10033515
mov dword [ebp - 4], 0x1a
cmp dword [ebp - 0x798], 0x4e3d
jge 0x100335fd
push dword [ebp - 0x8dc]
call fcn.10047ad3
pop ecx
jmp 0x10033619
or dword [ebp - 4], 0xffffffff
jmp 0x10033623
cmp dword [ebp - 0x51c], 0
je 0x1003645b
mov dword [ebp - 0x6e8], 0x2115
mov dword [ebp - 0xa60], str.cpp_miuurow_ffyfw_athgpe_imnydr
cmp dword [ebp - 0x6e8], 0x232a
jle 0x10033729
and dword [ebp - 0x234], 0
jmp 0x1003366a
mov eax, dword [ebp - 0x234]
inc eax
mov dword [ebp - 0x234], eax
cmp dword [ebp - 0x234], 0x2a88
jge 0x10033729
and dword [ebp - 0x2c4], 0
jmp 0x10033690
mov eax, dword [ebp - 0x2c4]
inc eax
mov dword [ebp - 0x2c4], eax
cmp dword [ebp - 0x2c4], 0x5ed8
jge 0x10033724
and dword [ebp - 0x23c], 0
jmp 0x100336b6
mov eax, dword [ebp - 0x23c]
inc eax
mov dword [ebp - 0x23c], eax
cmp dword [ebp - 0x23c], 0x5acd
jge 0x1003371f
mov eax, dword [ebp - 0x234]
add eax, dword [ebp - 0x2c4]
and eax, dword [ebp - 0x23c]
cdq
mov dword [ebp - 0x9b4], eax
mov dword [ebp - 0x9b0], edx
push dword [ebp - 0x9b0]
push dword [ebp - 0x9b4]
lea ecx, [ebp - 0xf94]
call fcn.10001a95
pop ecx
pop ecx
mov dword [ebp - 0xa58], eax
mov ecx, dword [ebp - 0xa58]
call fcn.10003731
push eax
call fcn.10047ad3
pop ecx
lea ecx, [ebp - 0xf94]
call fcn.10003727
jmp 0x100336a9
jmp 0x10033683
jmp 0x1003365d
mov dword [ebp - 0x90], 0xffffffff
mov dword [ebp - 0x6e0], 2
mov dword [ebp - 0x2cc], 0xffffffff
push 2
lea ecx, [ebp - 0x890]
call fcn.100039f2
mov dword [ebp - 4], 0x1c
mov dword [ebp - 0x6d0], 0x8ebdb88d
mov dword [ebp - 0x568], 0x68e10d32
mov dword [ebp - 0x8ec], 4
mov dword [ebp - 0x30c], 0
jmp 0x10033792
mov eax, dword [ebp - 0x30c]
inc eax
mov dword [ebp - 0x30c], eax
cmp dword [ebp - 0x30c], 2
jge 0x100337b1
push dword [ebp - 0x30c]
lea ecx, [ebp - 0x890]
call fcn.10003ac4
or dword [eax], 0xffffffff
jmp 0x10033785
mov dword [ebp - 0x90], 0
jmp 0x100337ca
mov eax, dword [ebp - 0x90]
inc eax
mov dword [ebp - 0x90], eax
cmp dword [ebp - 0x90], 0x1b
jg 0x10033a6a
mov dword [ebp - 0x148], 0xc863cc1d
push 2
lea ecx, [ebp - 0xb60]
call fcn.100039f2
mov byte [ebp - 4], 0x1d
mov dword [ebp - 0xabc], 0xffffffff
mov dword [ebp - 0x854], 0xa8d6
mov dword [ebp - 0x244], 0
jmp 0x1003381f
mov eax, dword [ebp - 0x244]
inc eax
mov dword [ebp - 0x244], eax
cmp dword [ebp - 0x244], 2
jge 0x10033841
push dword [ebp - 0x244]
lea ecx, [ebp - 0xb60]
call fcn.10003ac4
mov dword [eax], 0x3f6d1d89
jmp 0x10033812
mov eax, dword [ebp - 0x90]
cmp eax, dword [ebp - 0x148]
jge 0x1003385b
mov dword [ebp - 0x804], 1
jmp 0x10033862
and dword [ebp - 0x804], 0
mov esi, dword [ebp - 0x90]
push 1
lea ecx, [ebp - 0x890]
call fcn.10003ac4
cmp esi, dword [eax]
jg 0x10033885
mov dword [ebp - 0x538], 1
jmp 0x1003388c
and dword [ebp - 0x538], 0
mov eax, dword [ebp - 0x538]
mov dword [ebp - 0x6d0], eax
mov esi, dword [ebp - 0x6d0]
push 0
lea ecx, [ebp - 0x890]
call fcn.10003ac4
sub esi, dword [eax]
push 1
lea ecx, [ebp - 0x890]
call fcn.10003ac4
cmp esi, dword [eax]
jl 0x100338ca
mov dword [ebp - 0x540], 1
jmp 0x100338d1
and dword [ebp - 0x540], 0
mov eax, dword [ebp - 0x540]
mov dword [ebp - 0x568], eax
push 1
lea ecx, [ebp - 0x890]
call fcn.10003ac4
mov eax, dword [ebp - 0x148]
mov dword [ebp - 0xcfc], eax
mov dword [ebp - 0x2cc], 0x1362395e
mov eax, dword [ebp - 0x2cc]
cmp eax, dword [ebp - 0x148]
jle 0x1003391a
mov dword [ebp - 0x548], 1
jmp 0x10033921
and dword [ebp - 0x548], 0
mov eax, dword [ebp - 0x804]
imul eax, dword [ebp - 0x548]
cmp eax, 0xa38
jl 0x10033941
mov dword [ebp - 0x6d8], 1
jmp 0x10033948
and dword [ebp - 0x6d8], 0
mov eax, dword [ebp - 0x6d8]
sub eax, 0x88ca0e2c
mov dword [ebp - 0x550], eax
push 1
lea ecx, [ebp - 0xb60]
call fcn.10003ac4
mov ecx, dword [ebp - 0x550]
mov dword [eax], ecx
cmp dword [ebp - 0x550], 0x3113
je 0x10033986
mov dword [ebp - 0x7a0], 1
jmp 0x1003398d
and dword [ebp - 0x7a0], 0
mov eax, dword [ebp - 0x148]
cmp dword [ebp - 0x7a0], eax
jl 0x100339a7
mov dword [ebp - 0x558], 1
jmp 0x100339ae
and dword [ebp - 0x558], 0
cmp dword [ebp - 0x558], 0x2ef314d4
jl 0x100339c6
mov dword [ebp - 0x8e4], 1
jmp 0x100339cd
and dword [ebp - 0x8e4], 0
mov dword [ebp - 0x6e0], 0xe673
mov eax, dword [ebp - 0x6e0]
mov dword [ebp - 0xd34], eax
push 1
lea ecx, [ebp - 0xb60]
call fcn.10003ac4
mov eax, dword [ebp - 0xabc]
mov dword [ebp - 0xd04], eax
mov eax, dword [ebp - 0x148]
add eax, 0x5dd3610c
cmp eax, dword [ebp - 0x90]
jle 0x10033a1b
mov dword [ebp - 0x560], 1
jmp 0x10033a22
and dword [ebp - 0x560], 0
mov eax, dword [ebp - 0x854]
imul eax, dword [ebp - 0x560]
neg eax
imul eax, dword [ebp - 0x854]
mov dword [ebp - 0x8ec], eax
mov eax, dword [ebp - 0x90]
mov dword [ebp - 0x2cc], eax
mov eax, dword [ebp - 0x2cc]
mov dword [ebp - 0x568], eax
mov byte [ebp - 4], 0x1c
lea ecx, [ebp - 0xb60]
call fcn.10003a4f
jmp 0x100337bd
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x890]
call fcn.10003a4f
mov dword [ebp - 4], 0x1e
cmp dword [ebp - 0x6e8], 0x1f87
jge 0x10033a98
push dword [ebp - 0xa60]
call fcn.10047ad3
pop ecx
jmp 0x10033ab4
or dword [ebp - 4], 0xffffffff
jmp 0x10033abe
push 3
lea ecx, [ebp - 0x860]
call fcn.100039f2
mov dword [ebp - 4], 0x20
mov dword [ebp - 0x6c], 0
jmp 0x10033ae2
mov eax, dword [ebp - 0x6c]
inc eax
mov dword [ebp - 0x6c], eax
cmp dword [ebp - 0x6c], 3
jge 0x10033afe
push dword [ebp - 0x6c]
lea ecx, [ebp - 0x860]
call fcn.10003ac4
mov dword [eax], 0x10c93b4e
jmp 0x10033adb
mov dword [ebp - 0x570], 0x4e50
mov dword [ebp - 0xac4], str.caszutuz_igmaza_ekpudo_qhun_eoaalqdy_yjykqbn_xoqdhr_edznwwp_shlafs_gzktgciz_kraqvtdr_snvpajh_lfdtazmjd
cmp dword [ebp - 0x570], 0x506a
jle 0x10033c32
push 0
call dword [sym.imp.GDI32.dll_CreateRectRgnIndirect]
and dword [ebp - 0x254], 0
jmp 0x10033b40
mov eax, dword [ebp - 0x254]
inc eax
mov dword [ebp - 0x254], eax
cmp dword [ebp - 0x254], 0xd7e
jge 0x10033c32
and dword [ebp - 0x2d4], 0
jmp 0x10033b66
mov eax, dword [ebp - 0x2d4]
inc eax
mov dword [ebp - 0x2d4], eax
cmp dword [ebp - 0x2d4], 0x877
jge 0x10033c2d
and dword [ebp - 0x24c], 0
jmp 0x10033b8c
mov eax, dword [ebp - 0x24c]
inc eax
mov dword [ebp - 0x24c], eax
cmp dword [ebp - 0x24c], 0x1580
jge 0x10033c28
and dword [ebp - 0x34c], 0
jmp 0x10033bb2
mov eax, dword [ebp - 0x34c]
inc eax
mov dword [ebp - 0x34c], eax
cmp dword [ebp - 0x34c], 0x2cfb
jge 0x10033c23
mov ecx, dword [ebp - 0x24c]
sub ecx, dword [ebp - 0x34c]
mov eax, dword [ebp - 0x254]
sub eax, dword [ebp - 0x2d4]
sar eax, cl
cdq
mov dword [ebp - 0x9c0], eax
mov dword [ebp - 0x9bc], edx
push dword [ebp - 0x9bc]
push dword [ebp - 0x9c0]
lea ecx, [ebp - 0xf04]
call fcn.10001a95
pop ecx
pop ecx
mov dword [ebp - 0x8f4], eax
mov ecx, dword [ebp - 0x8f4]
call fcn.10003731
push eax
call fcn.10047ad3
pop ecx
lea ecx, [ebp - 0xf04]
call fcn.10003727
jmp 0x10033ba5
jmp 0x10033b7f
jmp 0x10033b59
jmp 0x10033b33
mov dword [ebp - 0x6c], 0
jmp 0x10033c42
mov eax, dword [ebp - 0x6c]
inc eax
mov dword [ebp - 0x6c], eax
cmp dword [ebp - 0x6c], 1
jge 0x10033c55
mov eax, dword [ebp - 0x6c]
mov dword [ebp + eax*4 - 0x38], 0x94643cdf
jmp 0x10033c3b
mov byte [ebp - 4], 0x21
cmp dword [ebp - 0x570], 0x4b65
jge 0x10033c71
push dword [ebp - 0xac4]
call fcn.10047ad3
pop ecx
jmp 0x10033c8d
mov dword [ebp - 4], 0x20
jmp 0x10033c9d
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0x38], 2
jmp 0x10033cc2
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x38]
dec eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x38], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x38], 0
jl 0x10033dd4
mov dword [ebp - 0x8fc], 0x2c87a752
push 4
pop eax
imul eax, eax, 0
push dword [ebp + eax - 0x38]
lea ecx, [ebp - 0x860]
call fcn.10003ac4
cmp dword [eax], 0
je 0x10033cfc
jmp 0x10033dd4
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x38], 0
je 0x10033d72
push 4
pop eax
imul eax, eax, 0
push dword [ebp + eax - 0x38]
lea ecx, [ebp - 0x860]
call fcn.10003ac4
push 4
pop eax
imul eax, eax, 0
mov esi, dword [ebp + eax - 0x38]
push 4
pop eax
imul eax, eax, 0
push dword [ebp + eax - 0x38]
lea ecx, [ebp - 0x860]
call fcn.10003ac4
cmp esi, dword [eax]
jne 0x10033d4d
mov dword [ebp - 0x7a8], 1
jmp 0x10033d54
and dword [ebp - 0x7a8], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x38]
cmp eax, dword [ebp - 0x7a8]
jle 0x10033d72
mov dword [ebp - 0x578], 1
jmp 0x10033d79
and dword [ebp - 0x578], 0
push 4
pop eax
imul eax, eax, 0
push dword [ebp + eax - 0x38]
lea ecx, [ebp - 0x860]
call fcn.10003ac4
mov esi, dword [ebp - 0x578]
imul esi, dword [eax]
push 4
pop eax
imul eax, eax, 0
push dword [ebp + eax - 0x38]
lea ecx, [ebp - 0x860]
call fcn.10003ac4
cmp esi, dword [eax]
jl 0x10033dbc
mov dword [ebp - 0x6f0], 1
jmp 0x10033dc3
and dword [ebp - 0x6f0], 0
mov eax, dword [ebp - 0x6f0]
mov dword [ebp - 0x8fc], eax
jmp 0x10033cad
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x860]
call fcn.10003a4f
mov dword [ebp - 0x25c], 0x77e8edf1
mov byte [ebp - 0x106], 0
movzx eax, byte [ebp - 0x106]
test eax, eax
je 0x10033e26
push 0x12aa
push 0
push 0xbce
push 0xede
push 0
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_GetCharacterPlacementW]
mov dword [ebp - 0x25c], 0xffffffe4
jmp 0x10033e3f
mov eax, dword [ebp - 0x25c]
inc eax
mov dword [ebp - 0x25c], eax
cmp dword [ebp - 0x25c], 0x11
jge 0x10033eed
mov dword [ebp - 0x74], 0xc0d37ad4
mov dword [ebp - 0x314], 0
jmp 0x10033e6c
mov eax, dword [ebp - 0x314]
inc eax
mov dword [ebp - 0x314], eax
cmp dword [ebp - 0x314], 1
jge 0x10033e88
mov eax, dword [ebp - 0x314]
mov dword [ebp + eax*4 - 0xa68], 0xfffffffc
jmp 0x10033e5f
mov dword [ebp - 0x74], 0
jmp 0x10033e98
mov eax, dword [ebp - 0x74]
inc eax
mov dword [ebp - 0x74], eax
cmp dword [ebp - 0x74], 0
jg 0x10033eaf
mov eax, dword [ebp - 0x74]
cmp dword [ebp + eax*4 - 0xa68], 0
je 0x10033ead
jmp 0x10033eaf
jmp 0x10033e91
mov dword [ebp - 0x74], 0
jmp 0x10033ebf
mov eax, dword [ebp - 0x74]
inc eax
mov dword [ebp - 0x74], eax
cmp dword [ebp - 0x74], 0
jg 0x10033ee8
mov byte [ebp - 0xe5], 0
movzx eax, byte [ebp - 0xe5]
test eax, eax
je 0x10033ee6
push 1
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_FlashWindow]
jmp 0x10033eb8
jmp 0x10033e32
mov byte [ebp - 0x190], 1
mov byte [ebp - 0x18f], 0x9d
mov byte [ebp - 0x18e], 2
mov byte [ebp - 0x18d], 0x11
mov byte [ebp - 0x18c], 2
mov byte [ebp - 0x18b], 0x1b
mov byte [ebp - 0x18a], 0x6f
mov byte [ebp - 0x189], 0xa
mov byte [ebp - 0x188], 6
mov byte [ebp - 0x187], 6
mov byte [ebp - 0x186], 0x11
mov byte [ebp - 0x185], 8
mov byte [ebp - 0x184], 7
mov byte [ebp - 0x183], 3
mov byte [ebp - 0x182], 0x34
mov byte [ebp - 0x181], 4
mov byte [ebp - 0x180], 0x22
mov byte [ebp - 0x17f], 0xb
mov byte [ebp - 0x17e], 0x17
mov byte [ebp - 0x17d], 0
mov byte [ebp - 0x17c], 0x22
mov byte [ebp - 0x17b], 7
mov byte [ebp - 0x17a], 6
mov byte [ebp - 0x179], 9
mov byte [ebp - 0x178], 0x25
mov byte [ebp - 0x177], 0xd
mov byte [ebp - 0x176], 0x17
mov byte [ebp - 0x175], 5
mov byte [ebp - 0x174], 0x1c
mov byte [ebp - 0x173], 0xc
mov byte [ebp - 0x172], 0x1c
mov dword [ebp - 0x124], 0xcff0ea75
mov dword [ebp - 0x264], 0
jmp 0x10033fe9
mov eax, dword [ebp - 0x264]
inc eax
mov dword [ebp - 0x264], eax
cmp dword [ebp - 0x264], 4
jge 0x10034005
mov eax, dword [ebp - 0x264]
mov dword [ebp + eax*4 - 0xe1c], 0xfa6f
jmp 0x10033fdc
mov dword [ebp - 0x124], 0xffffffeb
jmp 0x1003401e
cmp dword [ebp - 0x124], 0xc
je 0x10034346
mov dword [ebp - 0x30], 0x8f8256a9
mov dword [ebp - 0x30], 0
jmp 0x10034042
cmp dword [ebp - 0x30], 0x1d
jg 0x100342f3
mov dword [ebp - 0x26c], 0x888999d9
mov dword [ebp - 0x2dc], 0
jmp 0x1003406f
cmp dword [ebp - 0x2dc], 2
jge 0x1003408b
mov eax, dword [ebp - 0x2dc]
mov dword [ebp + eax*4 - 0x7e0], 0xbbef
jmp 0x10034062
mov dword [ebp - 0x26c], 1
jmp 0x100340a4
mov dword [ebp - 0x30], 0
jmp 0x10034303
cmp dword [ebp - 0x30], 3
jg 0x10034341
mov byte [ebp - 0xc1], 0
movzx eax, byte [ebp - 0xc1]
test eax, eax
je 0x10034330
jmp 0x10034011
xor eax, eax
inc eax
shl eax, 0
movzx eax, byte [ebp + eax - 0x190]
and eax, 0xf8
xor ecx, ecx
inc ecx
shl ecx, 0
movzx ecx, byte [ebp + ecx - 0x190]
or ecx, 0xf8
sub ecx, eax
xor eax, eax
inc eax
imul eax, eax, 0
movzx eax, byte [ebp + eax - 0x190]
mov byte [ebp + eax - 0xb3c], cl
mov dword [ebp - 0x2e4], 1
mov dword [ebp - 0x5a0], 0
push 2
lea ecx, [ebp - 0xc50]
call fcn.100039f2
mov dword [ebp - 4], 0x24
mov dword [ebp - 0x274], 0
jmp 0x100343c5
mov eax, dword [ebp - 0x274]
inc eax
mov dword [ebp - 0x274], eax
cmp dword [ebp - 0x274], 2
jge 0x100343e4
push dword [ebp - 0x274]
lea ecx, [ebp - 0xc50]
call fcn.10003ac4
and dword [eax], 0
jmp 0x100343b8
mov byte [ebp - 0xf6], 0
movzx eax, byte [ebp - 0xf6]
test eax, eax
je 0x10034413
push 0
push 0
push 0
push 0
push 0x23da
push 1
push 0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateProcessA]
cmp dword [ebp - 0x2e4], 0
jne 0x10034438
mov dword [ebp - 0x5a0], 0xc0aa
cmp dword [ebp - 0x5a0], 0
jne 0x10034438
mov dword [ebp - 0x82c], 1
mov eax, dword [ebp - 0x2e4]
add eax, dword [ebp - 0x82c]
jne 0x10034472
mov dword [ebp - 0xa0], 1
push 2
lea ecx, [ebp - 0xb90]
call fcn.100039f2
mov dword [ebp - 4], 0x39
mov dword [ebp - 0x54c], 0x3b6f9b69
mov dword [ebp - 0x298], 0
jmp 0x1003649c
mov eax, dword [ebp - 0x298]
inc eax
mov dword [ebp - 0x298], eax
cmp dword [ebp - 0x298], 2
jge 0x100364be
push dword [ebp - 0x298]
lea ecx, [ebp - 0xb90]
call fcn.10003ac4
mov dword [eax], 0xfd9d0890
jmp 0x1003648f
mov dword [ebp - 0xa0], 0
jmp 0x100364d7
mov eax, dword [ebp - 0xa0]
dec eax
mov dword [ebp - 0xa0], eax
cmp dword [ebp - 0xa0], 0xfffffffb
jg 0x100365f1
mov dword [ebp - 0x554], 0xf6e2
mov dword [ebp - 0x9b8], 0x6f93bd5d
mov eax, dword [ebp - 0xa0]
cmp eax, dword [ebp - 0xa0]
jl 0x10036512
mov dword [ebp - 0x524], 1
jmp 0x10036519
and dword [ebp - 0x524], 0
cmp dword [ebp - 0x524], 0
jae 0x10036537
cmp dword [ebp - 0x554], 0
je 0x10036537
mov dword [ebp - 0x52c], 1
jmp 0x1003653e
and dword [ebp - 0x52c], 0
cmp dword [ebp - 0x52c], 0xffff
je 0x10036556
mov dword [ebp - 0x534], 1
jmp 0x1003655d
and dword [ebp - 0x534], 0
cmp dword [ebp - 0x534], 0xedca8fec
jne 0x10036587
push 0
lea ecx, [ebp - 0xb90]
call fcn.10003ac4
cmp dword [eax], 0
je 0x10036587
mov dword [ebp - 0x53c], 1
jmp 0x1003658e
and dword [ebp - 0x53c], 0
mov eax, dword [ebp - 0xa0]
cmp eax, dword [ebp - 0x53c]
je 0x100365a8
mov dword [ebp - 0x544], 1
jmp 0x100365af
and dword [ebp - 0x544], 0
mov eax, dword [ebp - 0x544]
mov dword [ebp - 0x54c], eax
cmp dword [ebp - 0x54c], 0
je 0x100365d9
cmp dword [ebp - 0x554], 0
je 0x100365d9
mov dword [ebp - 0x55c], 1
jmp 0x100365e0
and dword [ebp - 0x55c], 0
mov eax, dword [ebp - 0x55c]
mov dword [ebp - 0x9b8], eax
jmp 0x100364ca
push 0
lea ecx, [ebp - 0xb90]
call fcn.10003ac4
mov eax, dword [eax]
mov dword [ebp - 0xa0], eax
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xb90]
call fcn.10003a4f
mov dword [ebp - 0x6fc], 0x35fb
mov dword [ebp - 0xa0c], str.hffzzursu_ctntxb_wiulnecvw_swbpezp_anauh_qxnn
cmp dword [ebp - 0x6fc], 0x3961
jle 0x10036712
and dword [ebp - 0x2a0], 0
jmp 0x1003664f
mov eax, dword [ebp - 0x2a0]
inc eax
mov dword [ebp - 0x2a0], eax
cmp dword [ebp - 0x2a0], 0x5b3b
jge 0x10036712
and dword [ebp - 0x2a8], 0
jmp 0x10036675
mov eax, dword [ebp - 0x2a8]
inc eax
mov dword [ebp - 0x2a8], eax
cmp dword [ebp - 0x2a8], 0x122f
jge 0x1003670d
and dword [ebp - 0x2b0], 0
jmp 0x1003669b
mov eax, dword [ebp - 0x2b0]
inc eax
mov dword [ebp - 0x2b0], eax
cmp dword [ebp - 0x2b0], 0x7708
jge 0x10036708
mov eax, dword [ebp - 0x2a0]
mov ecx, dword [ebp - 0x2a8]
sar eax, cl
mov ecx, dword [ebp - 0x2b0]
sar eax, cl
cdq
mov dword [ebp - 0x9fc], eax
mov dword [ebp - 0x9f8], edx
push dword [ebp - 0x9f8]
push dword [ebp - 0x9fc]
lea ecx, [ebp - 0xeec]
call fcn.10001a95
pop ecx
pop ecx
mov dword [ebp - 0xab8], eax
mov ecx, dword [ebp - 0xab8]
call fcn.10003731
push eax
call fcn.10047ad3
pop ecx
lea ecx, [ebp - 0xeec]
call fcn.10003727
jmp 0x1003668e
jmp 0x10036668
jmp 0x10036642
cmp dword [0x100ffec4], 0
je 0x1003760c
push 2
lea ecx, [ebp - 0x840]
call fcn.100039f2
mov dword [ebp - 4], 0x3a
mov dword [ebp - 0x58c], 0x676bd76d
mov dword [ebp - 0x2b8], 0
jmp 0x10036756
mov eax, dword [ebp - 0x2b8]
inc eax
mov dword [ebp - 0x2b8], eax
cmp dword [ebp - 0x2b8], 2
jge 0x10036775
push dword [ebp - 0x2b8]
lea ecx, [ebp - 0x840]
call fcn.10003ac4
and dword [eax], 0
jmp 0x10036749
push 0
lea ecx, [ebp - 0x840]
call fcn.10003ac4
mov dword [eax], 0x1d
jmp 0x100367ae
push 0
lea ecx, [ebp - 0x840]
call fcn.10003ac4
mov dword [ebp - 0x564], eax
mov eax, dword [ebp - 0x564]
mov eax, dword [eax]
dec eax
mov ecx, dword [ebp - 0x564]
mov dword [ecx], eax
push 0
lea ecx, [ebp - 0x840]
call fcn.10003ac4
cmp dword [eax], 3
jl 0x10036b39
mov dword [ebp - 0x56c], 0x4b7
mov dword [ebp - 0xb0c], str.uubcd_mkbyyunm_guqhnjtu_cioxkpd_qgvnso
cmp dword [ebp - 0x56c], 0x582
jle 0x100368f1
and dword [ebp - 0x2c0], 0
jmp 0x100367fe
mov eax, dword [ebp - 0x2c0]
inc eax
mov dword [ebp - 0x2c0], eax
cmp dword [ebp - 0x2c0], 0x1774
jge 0x100368f1
and dword [ebp - 0x2c8], 0
jmp 0x10036824
mov eax, dword [ebp - 0x2c8]
inc eax
mov dword [ebp - 0x2c8], eax
cmp dword [ebp - 0x2c8], 0x1a43
jge 0x100368ec
and dword [ebp - 0x2d0], 0
jmp 0x1003684a
mov eax, dword [ebp - 0x2d0]
inc eax
mov dword [ebp - 0x2d0], eax
cmp dword [ebp - 0x2d0], 0x69cd
jge 0x100368e7
and dword [ebp - 0x2d8], 0
jmp 0x10036870
mov eax, dword [ebp - 0x2d8]
inc eax
mov dword [ebp - 0x2d8], eax
cmp dword [ebp - 0x2d8], 0x48bc
jge 0x100368e2
mov eax, dword [ebp - 0x2c0]
cdq
idiv dword [ebp - 0x2c8]
or edx, dword [ebp - 0x2d0]
or edx, dword [ebp - 0x2d8]
mov eax, edx
cdq
mov dword [ebp - 0xa08], eax
mov dword [ebp - 0xa04], edx
push dword [ebp - 0xa04]
push dword [ebp - 0xa08]
lea ecx, [ebp - 0xf1c]
call fcn.10001a95
pop ecx
pop ecx
mov dword [ebp - 0x9c4], eax
mov ecx, dword [ebp - 0x9c4]
call fcn.10003731
push eax
call fcn.10047ad3
pop ecx
lea ecx, [ebp - 0xf1c]
call fcn.10003727
jmp 0x10036863
jmp 0x1003683d
jmp 0x10036817
jmp 0x100367f1
mov dword [ebp - 0x2e8], 9
mov byte [ebp - 4], 0x3b
cmp dword [ebp - 0x56c], 0x2aa
jge 0x10036917
push dword [ebp - 0xb0c]
call fcn.10047ad3
pop ecx
jmp 0x10036933
mov dword [ebp - 4], 0x3a
jmp 0x10036943
mov dword [ebp - 0x9d0], 0x815c
mov dword [ebp - 0xb14], 0x9eb1
mov dword [ebp - 0x2e0], 0
jmp 0x10036970
mov eax, dword [ebp - 0x2e0]
inc eax
mov dword [ebp - 0x2e0], eax
cmp dword [ebp - 0x2e0], 2
jge 0x1003698c
mov eax, dword [ebp - 0x2e0]
mov dword [ebp + eax*4 - 0xe5c], 0
jmp 0x10036963
mov byte [ebp - 0xfe], 0
movzx eax, byte [ebp - 0xfe]
test eax, eax
je 0x100369c2
push 0x81a
push 0
push 0
push 0
push 0
push 0xa35
push 0xa9a
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_ScrollWindowEx]
mov dword [ebp - 0x2e8], 0
jmp 0x100369db
mov eax, dword [ebp - 0x2e8]
inc eax
mov dword [ebp - 0x2e8], eax
cmp dword [ebp - 0x2e8], 9
jl 0x10036b34
mov dword [ebp - 0xdac], 0xfffc
mov dword [ebp - 0xdb4], 0x58c458a9
mov dword [ebp - 0x394], 0x6ca0cec5
push 0
lea ecx, [ebp - 0x840]
call fcn.10003ac4
cmp dword [eax], 1
jle 0x10036a24
mov dword [ebp - 0x574], 1
jmp 0x10036a2b
and dword [ebp - 0x574], 0
push 0
lea ecx, [ebp - 0x840]
call fcn.10003ac4
mov ecx, dword [ebp - 0x574]
sub ecx, dword [eax]
jne 0x10036a4e
mov dword [ebp - 0x57c], 1
jmp 0x10036a55
and dword [ebp - 0x57c], 0
mov eax, dword [ebp - 0x394]
cmp dword [ebp - 0x57c], eax
jle 0x10036a6f
mov dword [ebp - 0x584], 1
jmp 0x10036a76
and dword [ebp - 0x584], 0
mov eax, dword [ebp - 0x584]
mov dword [ebp - 0x58c], eax
mov eax, dword [ebp - 0x58c]
cmp eax, dword [ebp - 0x394]
jne 0x10036a9c
mov dword [ebp - 0x594], 1
jmp 0x10036aa3
and dword [ebp - 0x594], 0
mov eax, dword [ebp - 0x9d0]
cmp eax, dword [ebp - 0x594]
jle 0x10036abd
mov dword [ebp - 0x59c], 1
jmp 0x10036ac4
and dword [ebp - 0x59c], 0
cmp dword [ebp - 0x59c], 0x69d1
jne 0x10036adc
mov dword [ebp - 0x5a4], 1
jmp 0x10036ae3
and dword [ebp - 0x5a4], 0
mov eax, dword [ebp - 0x5a4]
sub eax, 0x5687
je 0x10036b0e
push 0
lea ecx, [ebp - 0x840]
call fcn.10003ac4
cmp dword [eax], 0
je 0x10036b0e
mov dword [ebp - 0x5ac], 1
jmp 0x10036b15
and dword [ebp - 0x5ac], 0
mov eax, dword [ebp - 0x5ac]
mov dword [ebp - 0x394], eax
cmp dword [ebp - 0xb14], 0
je 0x10036b2f
jmp 0x100369ce
jmp 0x100369ce
jmp 0x1003678a
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x840]
call fcn.10003a4f
mov eax, dword [ebp + 8]
mov dword [ebp - 0x9e8], eax
mov dword [ebp - 0xc14], 5
mov dword [ebp - 0xc10], 5
mov dword [ebp - 0xc0c], 5
mov dword [ebp - 0xc08], 5
lea ecx, [ebp - 0x36d]
call fcn.10004111
push eax
lea eax, [ebp - 0xc04]
push eax
lea eax, [ebp - 0xc14]
push eax
lea ecx, [ebp - 0xe24]
call fcn.100144e5
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0x850]
call fcn.100144bf
mov dword [ebp - 4], 0x3d
mov dword [ebp - 0x358], 0xaced45b0
mov dword [ebp - 0x9dc], 0x378470ed
push 1
lea ecx, [ebp - 0x850]
call fcn.10003ac4
and dword [eax], 0
jmp 0x10036bff
push 1
lea ecx, [ebp - 0x850]
call fcn.10003ac4
mov dword [ebp - 0x5b4], eax
mov eax, dword [ebp - 0x5b4]
mov eax, dword [eax]
inc eax
mov ecx, dword [ebp - 0x5b4]
mov dword [ecx], eax
push 1
lea ecx, [ebp - 0x850]
call fcn.10003ac4
cmp dword [eax], 0x1a
jge 0x10036d83
mov dword [ebp - 0x128], 0
mov esi, dword [ebp - 0x128]
push 1
lea ecx, [ebp - 0x850]
call fcn.10003ac4
cmp esi, dword [eax]
jle 0x10036c42
mov dword [ebp - 0x5e4], 1
jmp 0x10036c49
and dword [ebp - 0x5e4], 0
mov esi, dword [ebp - 0x128]
push 1
lea ecx, [ebp - 0x850]
call fcn.10003ac4
cmp dword [eax], esi
jl 0x10036c6c
mov dword [ebp - 0x5d4], 1
jmp 0x10036c73
and dword [ebp - 0x5d4], 0
mov esi, dword [ebp - 0x128]
push 0
lea ecx, [ebp - 0x850]
call fcn.10003ac4
imul esi, dword [eax]
mov dword [ebp - 0x358], esi
push 0xfffffffffffffffe
pop eax
test eax, eax
jbe 0x10036ca2
mov dword [ebp - 0x5bc], 1
jmp 0x10036ca9
and dword [ebp - 0x5bc], 0
cmp dword [ebp - 0x5bc], 0xd921
jle 0x10036cc1
mov dword [ebp - 0x5c4], 1
jmp 0x10036cc8
and dword [ebp - 0x5c4], 0
push 1
lea ecx, [ebp - 0x850]
call fcn.10003ac4
mov ecx, dword [ebp - 0x5c4]
cmp ecx, dword [eax]
jle 0x10036ceb
mov dword [ebp - 0x5cc], 1
jmp 0x10036cf2
and dword [ebp - 0x5cc], 0
mov eax, dword [ebp - 0x128]
imul eax, dword [ebp - 0x5cc]
cmp eax, dword [ebp - 0x128]
je 0x10036d13
mov dword [ebp - 0x5dc], 1
jmp 0x10036d1a
and dword [ebp - 0x5dc], 0
mov eax, dword [ebp - 0x5d4]
cmp eax, dword [ebp - 0x5dc]
jge 0x10036d34
mov dword [ebp - 0x5ec], 1
jmp 0x10036d3b
and dword [ebp - 0x5ec], 0
mov eax, dword [ebp - 0x5e4]
cmp eax, dword [ebp - 0x5ec]
je 0x10036d55
mov dword [ebp - 0x5f4], 1
jmp 0x10036d5c
and dword [ebp - 0x5f4], 0
mov eax, dword [ebp - 0x5f4]
mov dword [ebp - 0x9dc], eax
mov dword [ebp - 0x358], 0x136dc992
mov eax, dword [ebp - 0x358]
mov dword [ebp - 0x128], eax
jmp 0x10036bdb
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x850]
call fcn.10003a4f
mov eax, dword [ebp + 0xc]
mov dword [ebp - 0xac8], eax
mov dword [ebp - 0x50], 0xfffffffe
mov dword [ebp - 0x50], 0
jmp 0x10036db2
mov eax, dword [ebp - 0x50]
inc eax
mov dword [ebp - 0x50], eax
cmp dword [ebp - 0x50], 0x12
jne 0x10036dcf
mov dword [ebp - 0xb18], 1
cmp dword [ebp - 0xb18], 0
je 0x10036dcd
jmp 0x10036dcf
jmp 0x10036dab
mov dword [ebp - 0x50], 0
jmp 0x10036ddf
mov eax, dword [ebp - 0x50]
inc eax
mov dword [ebp - 0x50], eax
cmp dword [ebp - 0x50], 9
jne 0x10036f19
mov dword [ebp - 0x94], 1
mov dword [ebp - 0x604], 9
mov dword [ebp - 0x60c], 0xd4431fad
mov dword [ebp - 0x614], 0xffffffff
mov dword [ebp - 0x94], 0
jmp 0x10036e2a
mov eax, dword [ebp - 0x94]
dec eax
mov dword [ebp - 0x94], eax
cmp dword [ebp - 0x94], 0xfffffffa
jne 0x10036e5b
mov byte [ebp - 0xfb], 0
movzx eax, byte [ebp - 0xfb]
test eax, eax
je 0x10036e59
push 0
push 0x2077
push 0
push 0x14f7
call dword [sym.imp.KERNEL32.dll_GetStringTypeW]
jmp 0x10036e1d
mov eax, dword [ebp - 0x94]
mov dword [ebp - 0xdbc], eax
mov eax, dword [ebp - 0x50]
cmp eax, dword [ebp - 0x50]
jg 0x10036e7b
mov dword [ebp - 0x5fc], 1
jmp 0x10036e82
and dword [ebp - 0x5fc], 0
mov eax, dword [ebp - 0x5fc]
mov dword [ebp - 0x604], eax
mov eax, dword [ebp - 0x604]
mov dword [ebp - 0x60c], eax
mov eax, dword [ebp - 0x60c]
mov dword [ebp - 0x614], eax
mov eax, dword [ebp - 0x94]
cmp eax, dword [ebp - 0x614]
jle 0x10036ec0
mov dword [ebp - 0x61c], 1
jmp 0x10036ec7
and dword [ebp - 0x61c], 0
mov eax, dword [ebp - 0x94]
imul eax, dword [ebp - 0x61c]
cmp eax, 1
je 0x10036ee5
mov dword [ebp - 0x624], 1
jmp 0x10036eec
and dword [ebp - 0x624], 0
cmp dword [ebp - 0x624], 1
je 0x10036f01
mov dword [ebp - 0x62c], 1
jmp 0x10036f08
and dword [ebp - 0x62c], 0
mov eax, dword [ebp - 0x62c]
mov dword [ebp - 0x94], eax
jmp 0x10036dd8
mov eax, dword [ebp - 0x9e8]
mov dword [ebp - 0xaf8], eax
mov dword [ebp - 0x28], 1
mov dword [ebp - 0x110], 5
mov dword [ebp - 0xd8], 0xf065f4b
mov dword [ebp - 0x60], 0xb6ce1a81
mov dword [ebp - 0x68], 0
jmp 0x10036f57
mov eax, dword [ebp - 0x68]
inc eax
mov dword [ebp - 0x68], eax
cmp dword [ebp - 0x68], 3
jge 0x10036f6d
mov eax, dword [ebp - 0x68]
mov dword [ebp + eax*4 - 0x3f8], 0x20624039
jmp 0x10036f50
mov dword [ebp - 0x68], 0
jmp 0x10036f7d
mov eax, dword [ebp - 0x68]
inc eax
mov dword [ebp - 0x68], eax
cmp dword [ebp - 0x68], 1
jge 0x10036f93
mov eax, dword [ebp - 0x68]
mov dword [ebp + eax*4 - 0x144], 0x47aa2967
jmp 0x10036f76
mov dword [ebp - 0x28], 2
jmp 0x10036fa3
mov eax, dword [ebp - 0x28]
dec eax
mov dword [ebp - 0x28], eax
cmp dword [ebp - 0x28], 0
jl 0x1003732c
mov dword [ebp - 0xd0], 0x80643b8a
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x3f8]
mov dword [ebp - 0xd0], eax
mov eax, dword [ebp - 0xd0]
sub eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x28]
cmp dword [ebp + ecx*4 - 0x3f8], eax
jg 0x10036feb
mov dword [ebp - 0x634], 1
jmp 0x10036ff2
and dword [ebp - 0x634], 0
cmp dword [ebp - 0x634], 0x968cb667
jne 0x1003700a
mov dword [ebp - 0x63c], 1
jmp 0x10037011
and dword [ebp - 0x63c], 0
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp + eax*4 - 0x3f8]
cmp dword [ebp - 0x63c], eax
jg 0x1003702f
mov dword [ebp - 0x644], 1
jmp 0x10037036
and dword [ebp - 0x644], 0
mov eax, dword [ebp - 0x28]
imul ecx, dword [ebp - 0x644], 0xffff
cmp ecx, dword [ebp + eax*4 - 0x3f8]
jg 0x10037058
mov dword [ebp - 0x64c], 1
jmp 0x1003705f
and dword [ebp - 0x64c], 0
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp + eax*4 - 0x3f8]
cmp dword [ebp - 0x64c], eax
jge 0x1003707d
mov dword [ebp - 0x654], 1
jmp 0x10037084
and dword [ebp - 0x654], 0
mov eax, dword [ebp - 0x654]
mov dword [ebp - 0xd8], eax
cmp dword [ebp - 0xd8], 0
jne 0x100370a8
cmp dword [ebp - 0x28], 0
jne 0x100370a8
and dword [ebp - 0x65c], 0
jmp 0x100370b2
mov dword [ebp - 0x65c], 1
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x3f8]
add eax, dword [ebp - 0x65c]
cmp eax, dword [ebp - 0x28]
jge 0x100370d6
mov dword [ebp - 0x664], 1
jmp 0x100370dd
and dword [ebp - 0x664], 0
mov eax, dword [ebp - 0x664]
mov dword [ebp - 0x60], eax
cmp dword [ebp - 0x60], 0
je 0x100370ff
push 0x5d
pop eax
test eax, eax
je 0x100370ff
mov dword [ebp - 0x66c], 1
jmp 0x10037106
and dword [ebp - 0x66c], 0
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp + eax*4 - 0x3f8]
imul eax, dword [ebp - 0x66c]
cmp eax, 0xd17cd953
jae 0x1003712a
mov dword [ebp - 0x674], 1
jmp 0x10037131
and dword [ebp - 0x674], 0
cmp dword [ebp - 0x674], 1
jge 0x10037146
mov dword [ebp - 0x67c], 1
jmp 0x1003714d
and dword [ebp - 0x67c], 0
push 4
pop eax
shl eax, 0
push 4
pop ecx
imul ecx, ecx, 0
mov ecx, dword [ebp + ecx - 0x144]
imul ecx, dword [ebp - 0x67c]
cmp ecx, dword [ebp + eax - 0x3f8]
jne 0x1003717c
mov dword [ebp - 0x684], 1
jmp 0x10037183
and dword [ebp - 0x684], 0
mov dword [ebp - 0x110], 0xe1ca
mov eax, dword [ebp - 0x110]
cmp eax, dword [ebp - 0x684]
jg 0x1003727a
mov byte [ebp - 0xe7], 0
movzx eax, byte [ebp - 0xe7]
test eax, eax
je 0x100371c3
push 0x20ff
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_IsDlgButtonChecked]
mov dword [ebp - 0xd0], 0
jmp 0x100371dc
mov eax, dword [ebp - 0xd0]
inc eax
mov dword [ebp - 0xd0], eax
cmp dword [ebp - 0xd0], 0
jg 0x10037275
mov dword [ebp - 0xd8], 0
jmp 0x10037202
mov eax, dword [ebp - 0xd8]
inc eax
mov dword [ebp - 0xd8], eax
cmp dword [ebp - 0xd8], 2
jg 0x10037245
mov dword [ebp - 0x60], 0
jmp 0x1003721b
mov eax, dword [ebp - 0x60]
inc eax
mov dword [ebp - 0x60], eax
cmp dword [ebp - 0x60], 1
jge 0x10037231
mov eax, dword [ebp - 0x60]
mov dword [ebp + eax*4 - 0x144], 0
jmp 0x10037214
mov eax, dword [ebp - 0xd0]
cmp dword [ebp + eax*4 - 0x144], 0
je 0x10037243
jmp 0x10037245
jmp 0x100371f5
mov byte [ebp - 0x101], 0
movzx eax, byte [ebp - 0x101]
test eax, eax
je 0x10037270
push 0xb57
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_GetDeviceCaps]
jmp 0x100371cf
jmp 0x10037327
mov dword [ebp - 0x110], 0
jmp 0x10037293
mov eax, dword [ebp - 0x110]
inc eax
mov dword [ebp - 0x110], eax
cmp dword [ebp - 0x110], 2
jg 0x10037327
push 3
lea ecx, [ebp - 0xc68]
call fcn.100039f2
mov dword [ebp - 4], 0x3e
mov dword [ebp - 0x2f0], 0
jmp 0x100372cd
mov eax, dword [ebp - 0x2f0]
inc eax
mov dword [ebp - 0x2f0], eax
cmp dword [ebp - 0x2f0], 3
jge 0x100372ef
push dword [ebp - 0x2f0]
lea ecx, [ebp - 0xc68]
call fcn.10003ac4
mov dword [eax], 0x6a25a955
jmp 0x100372c0
push 1
lea ecx, [ebp - 0xc68]
call fcn.10003ac4
mov dword [ebp - 0x68c], eax
mov eax, dword [ebp - 0x68c]
mov eax, dword [eax]
inc eax
mov ecx, dword [ebp - 0x68c]
mov dword [ecx], eax
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xc68]
call fcn.10003a4f
jmp 0x10037286
jmp 0x10036f9c
mov eax, dword [ebp - 0x60]
mov dword [ebp - 0x28], eax
cmp dword [ebp - 0x28], 0
jne 0x10037344
mov dword [ebp - 0x694], 1
jmp 0x1003734b
and dword [ebp - 0x694], 0
cmp dword [ebp - 0x694], 0
jne 0x10037360
mov dword [ebp - 0x6b4], 1
jmp 0x10037367
and dword [ebp - 0x6b4], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0xd8]
cmp ecx, dword [ebp + eax - 0x144]
jge 0x10037388
mov dword [ebp - 0x69c], 1
jmp 0x1003738f
and dword [ebp - 0x69c], 0
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x3f8]
imul eax, dword [ebp - 0x69c]
test eax, eax
jne 0x100373b8
mov eax, 0xa3eb
test eax, eax
jne 0x100373b8
and dword [ebp - 0x6a4], 0
jmp 0x100373c2
mov dword [ebp - 0x6a4], 1
cmp dword [ebp - 0x6a4], 0x779e46ed
jne 0x100373da
mov dword [ebp - 0x6ac], 1
jmp 0x100373e1
and dword [ebp - 0x6ac], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x144]
cmp dword [ebp - 0x6ac], eax
jg 0x10037402
mov dword [ebp - 0x6bc], 1
jmp 0x10037409
and dword [ebp - 0x6bc], 0
mov eax, dword [ebp - 0x6b4]
cmp eax, dword [ebp - 0x6bc]
jl 0x10037423
mov dword [ebp - 0x6c4], 1
jmp 0x1003742a
and dword [ebp - 0x6c4], 0
cmp dword [ebp - 0x6c4], 1
jne 0x1003743f
mov dword [ebp - 0x6cc], 1
jmp 0x10037446
and dword [ebp - 0x6cc], 0
mov eax, dword [ebp - 0x6cc]
mov dword [ebp - 0x60], eax
mov eax, dword [ebp - 0xac8]
mov dword [ebp - 0x9f4], eax
push dword [ebp - 0x9f4]
push dword [ebp - 0xaf8]
call dword [0x100ffec4]
mov dword [ebp - 0xad0], eax
mov dword [ebp - 0xe0], 1
mov dword [ebp - 0x6d4], 8
mov dword [ebp - 0x6dc], 0
push 3
lea ecx, [ebp - 0xc20]
call fcn.100039f2
mov dword [ebp - 4], 0x3f
mov dword [ebp - 0xdc4], 0xffffffff
mov dword [ebp - 0x64], 0
jmp 0x100374bf
mov eax, dword [ebp - 0x64]
inc eax
mov dword [ebp - 0x64], eax
cmp dword [ebp - 0x64], 1
jge 0x100374d5
mov eax, dword [ebp - 0x64]
mov dword [ebp + eax*4 - 0x6f4], 0xfffffff8
jmp 0x100374b8
mov dword [ebp - 0x64], 0
jmp 0x100374e5
mov eax, dword [ebp - 0x64]
inc eax
mov dword [ebp - 0x64], eax
cmp dword [ebp - 0x64], 3
jge 0x10037501
push dword [ebp - 0x64]
lea ecx, [ebp - 0xc20]
call fcn.10003ac4
mov dword [eax], 0xb57a67d9
jmp 0x100374de
cmp dword [ebp - 0xe0], 0
je 0x10037537
mov eax, dword [ebp - 0xe0]
mov dword [ebp - 0x6d4], eax
mov eax, dword [ebp - 0x6d4]
mov dword [ebp - 0x6dc], eax
cmp dword [ebp - 0x6dc], 0
je 0x10037537
mov dword [ebp - 0x6e4], 1
jmp 0x1003753e
and dword [ebp - 0x6e4], 0
cmp dword [ebp - 0xe0], 0xa5dec4f
jge 0x10037556
mov dword [ebp - 0x360], 1
jmp 0x1003755d
and dword [ebp - 0x360], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x360]
mov dword [ebp + eax - 0x6f4], ecx
mov eax, dword [ebp - 0x360]
mov ecx, dword [ebp - 0x6e4]
lea eax, [ecx + eax - 0x735e]
cmp eax, 0x6fda0246
jge 0x10037596
mov dword [ebp - 0x6ec], 1
jmp 0x1003759d
and dword [ebp - 0x6ec], 0
mov eax, dword [ebp - 0xe0]
cmp dword [ebp - 0x6ec], eax
jl 0x100375b7
mov dword [ebp - 0xa00], 1
jmp 0x100375be
and dword [ebp - 0xa00], 0
mov eax, dword [ebp - 0xe0]
mov dword [ebp - 0xdcc], eax
push 4
pop eax
imul eax, eax, 0
mov esi, dword [ebp + eax - 0x6f4]
sub esi, dword [ebp - 0xe0]
sub esi, dword [ebp - 0xe0]
push 2
lea ecx, [ebp - 0xc20]
call fcn.10003ac4
mov dword [eax], esi
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xc20]
call fcn.10003a4f
mov eax, dword [ebp - 0xad0]
jmp 0x10037e67
mov dword [ebp - 4], 0x40
cmp dword [ebp - 0x6fc], 0x3411
jge 0x1003762b
push dword [ebp - 0xa0c]
call fcn.10047ad3
pop ecx
jmp 0x10037647
or dword [ebp - 4], 0xffffffff
jmp 0x10037651
mov dword [ebp - 0x120], 0x1928c176
mov dword [ebp - 0x724], 0
mov dword [ebp - 0x704], 0x3b69
mov dword [ebp - 0xa18], str.emtbutc_nbmszsk_birxenbob_pek_hsp_hpxojll
cmp dword [ebp - 0x704], 0x3cb3
jle 0x10037769
and dword [ebp - 0x2f8], 0
jmp 0x1003769f
mov eax, dword [ebp - 0x2f8]
inc eax
mov dword [ebp - 0x2f8], eax
cmp dword [ebp - 0x2f8], 0x2a33
jge 0x1003775e
and dword [ebp - 0x300], 0
jmp 0x100376c5
mov eax, dword [ebp - 0x300]
inc eax
mov dword [ebp - 0x300], eax
cmp dword [ebp - 0x300], 0x2636
jge 0x10037759
and dword [ebp - 0x308], 0
jmp 0x100376eb
mov eax, dword [ebp - 0x308]
inc eax
mov dword [ebp - 0x308], eax
cmp dword [ebp - 0x308], 0x5dcc
jge 0x10037754
mov eax, dword [ebp - 0x2f8]
sub eax, dword [ebp - 0x300]
xor eax, dword [ebp - 0x308]
cdq
mov dword [ebp - 0xa14], eax
mov dword [ebp - 0xa10], edx
push dword [ebp - 0xa10]
push dword [ebp - 0xa14]
lea ecx, [ebp - 0xf4c]
call fcn.10001a95
pop ecx
pop ecx
mov dword [ebp - 0xb10], eax
mov ecx, dword [ebp - 0xb10]
call fcn.10003731
push eax
call fcn.10047ad3
pop ecx
lea ecx, [ebp - 0xf4c]
call fcn.10003727
jmp 0x100376de
jmp 0x100376b8
jmp 0x10037692
push 0x179a
call dword [sym.imp.USER32.dll_GetSysColor]
mov dword [ebp - 0x764], 0
mov dword [ebp - 4], 0x42
cmp dword [ebp - 0x704], 0x3a36
jge 0x10037792
push dword [ebp - 0xa18]
call fcn.10047ad3
pop ecx
jmp 0x100377ae
or dword [ebp - 4], 0xffffffff
jmp 0x100377b8
mov dword [ebp - 0xa40], 0x8cdb5cf
mov byte [ebp - 0xed], 0
movzx eax, byte [ebp - 0xed]
test eax, eax
je 0x100377e3
push 0
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_SetMenu]
mov dword [ebp - 0x120], 0
jmp 0x100377fc
mov eax, dword [ebp - 0x120]
dec eax
mov dword [ebp - 0x120], eax
cmp dword [ebp - 0x120], 0xfffffff2
je 0x10037e65
push 1
lea ecx, [ebp - 0x89c]
call fcn.100039f2
mov dword [ebp - 4], 0x44
mov dword [ebp - 0x58], 0x22b16580
mov dword [ebp - 0x70c], 0x3afb
mov dword [ebp - 0xad8], str.dmqu_gtzjaza_uzpg_ikzfxia_dxcoz
cmp dword [ebp - 0x70c], 0x3b86
jle 0x100378f0
and dword [ebp - 0x310], 0
jmp 0x1003785e
mov eax, dword [ebp - 0x310]
inc eax
mov dword [ebp - 0x310], eax
cmp dword [ebp - 0x310], 0x2b4a
jge 0x100378f0
and dword [ebp - 0x318], 0
jmp 0x10037884
mov eax, dword [ebp - 0x318]
inc eax
mov dword [ebp - 0x318], eax
cmp dword [ebp - 0x318], 0x434c
jge 0x100378eb
and dword [ebp - 0x320], 0
jmp 0x100378a6
mov eax, dword [ebp - 0x320]
inc eax
mov dword [ebp - 0x320], eax
cmp dword [ebp - 0x320], 0x2519
jge 0x100378e9
mov eax, dword [ebp - 0x310]
xor eax, dword [ebp - 0x318]
xor eax, dword [ebp - 0x320]
cdq
mov dword [ebp - 0xa20], eax
mov dword [ebp - 0xa1c], edx
push dword [ebp - 0xa1c]
push dword [ebp - 0xa20]
mov ecx, 0x1007aeb8
call fcn.10003751
jmp 0x10037899
jmp 0x10037877
jmp 0x10037851
mov dword [ebp - 0x774], 0xfffffffb
mov byte [ebp - 4], 0x45
cmp dword [ebp - 0x70c], 0x381b
jge 0x1003791a
mov edx, dword [ebp - 0xad8]
mov ecx, 0x1007aeb8
call fcn.10005cf1
jmp 0x10037936
mov dword [ebp - 4], 0x44
jmp 0x10037946
mov dword [ebp - 0x368], 0xb6dad816
mov dword [ebp - 0x73c], 0
mov dword [ebp - 0x78c], 0xfffffffd
mov dword [ebp - 0x328], 0
jmp 0x1003797d
mov eax, dword [ebp - 0x328]
inc eax
mov dword [ebp - 0x328], eax
cmp dword [ebp - 0x328], 1
jge 0x1003799f
push dword [ebp - 0x328]
lea ecx, [ebp - 0x89c]
call fcn.10003ac4
mov dword [eax], 0xac70c309
jmp 0x10037970
mov dword [ebp - 0x58], 0
jmp 0x100379af
mov eax, dword [ebp - 0x58]
dec eax
mov dword [ebp - 0x58], eax
cmp dword [ebp - 0x58], 0
jl 0x10037e51
mov dword [ebp - 0x154], 0xfffffff8
mov dword [ebp - 0x130], 0x657e3b6f
mov dword [ebp - 0x794], 0
mov byte [ebp - 0x105], 0
movzx eax, byte [ebp - 0x105]
test eax, eax
je 0x100379f7
push 0
push 1
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateEventA]
mov dword [ebp - 0x154], 0
jmp 0x10037a10
mov eax, dword [ebp - 0x154]
inc eax
mov dword [ebp - 0x154], eax
cmp dword [ebp - 0x154], 0
jg 0x10037e4c
mov dword [ebp - 0xa30], 0x4dc41fd9
mov dword [ebp - 0x714], 0x54b5
mov dword [ebp - 0xa24], str.ytudpp_xachwfn_mguttn_hozuybal
cmp dword [ebp - 0x714], 0x5540
jle 0x10037b2f
and dword [ebp - 0x340], 0
jmp 0x10037a61
mov eax, dword [ebp - 0x340]
inc eax
mov dword [ebp - 0x340], eax
cmp dword [ebp - 0x340], 0x282a
jge 0x10037b27
and dword [ebp - 0x348], 0
jmp 0x10037a87
mov eax, dword [ebp - 0x348]
inc eax
mov dword [ebp - 0x348], eax
cmp dword [ebp - 0x348], 0x129c
jge 0x10037b22
and dword [ebp - 0x330], 0
jmp 0x10037aad
mov eax, dword [ebp - 0x330]
inc eax
mov dword [ebp - 0x330], eax
cmp dword [ebp - 0x330], 0x696f
jge 0x10037b1d
and dword [ebp - 0x338], 0
jmp 0x10037acf
mov eax, dword [ebp - 0x338]
inc eax
mov dword [ebp - 0x338], eax
cmp dword [ebp - 0x338], 0x576f
jge 0x10037b1b
mov eax, dword [ebp - 0x330]
imul eax, dword [ebp - 0x338]
mov ecx, dword [ebp - 0x340]
sub ecx, dword [ebp - 0x348]
add eax, ecx
cdq
mov dword [ebp - 0xa2c], eax
mov dword [ebp - 0xa28], edx
push dword [ebp - 0xa28]
push dword [ebp - 0xa2c]
mov ecx, 0x1007aeb8
call fcn.10003751
jmp 0x10037ac2
jmp 0x10037aa0
jmp 0x10037a7a
jmp 0x10037a54
push 0
call dword [sym.imp.GDI32.dll_CreateSolidBrush]
mov byte [ebp - 0xf7], 0
movzx eax, byte [ebp - 0xf7]
test eax, eax
je 0x10037b5f
push 1
push 0xccd
push 0x1158
push 0x41b
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_SetScrollRange]
mov byte [ebp - 4], 0x47
cmp dword [ebp - 0x714], 0x545f
jge 0x10037b7f
mov edx, dword [ebp - 0xa24]
mov ecx, 0x1007aeb8
call fcn.10005cf1
jmp 0x10037b9b
mov dword [ebp - 4], 0x44
jmp 0x10037bab
mov eax, dword [ebp - 0x58]
mov dword [ebp - 0xdd4], eax
mov esi, dword [ebp - 0x120]
push dword [ebp - 0x58]
lea ecx, [ebp - 0x89c]
call fcn.10003ac4
imul esi, dword [eax]
cmp esi, 0x39c01058
je 0x10037bdf
mov dword [ebp - 0x71c], 1
jmp 0x10037be6
and dword [ebp - 0x71c], 0
mov eax, dword [ebp - 0x71c]
mov dword [ebp - 0x724], eax
cmp dword [ebp - 0x724], 4
je 0x10037c07
mov dword [ebp - 0x72c], 1
jmp 0x10037c0e
and dword [ebp - 0x72c], 0
mov eax, dword [ebp - 0x58]
cmp dword [ebp - 0x72c], eax
jge 0x10037c25
mov dword [ebp - 0x734], 1
jmp 0x10037c2c
and dword [ebp - 0x734], 0
mov eax, dword [ebp - 0x734]
mov dword [ebp - 0x73c], eax
mov eax, dword [ebp - 0x73c]
imul eax, dword [ebp - 0x154]
test eax, eax
jne 0x10037c5b
cmp dword [ebp - 0x120], 0
jne 0x10037c5b
and dword [ebp - 0x744], 0
jmp 0x10037c65
mov dword [ebp - 0x744], 1
mov eax, dword [ebp - 0x130]
add eax, dword [ebp - 0x744]
je 0x10037c91
push 0
lea ecx, [ebp - 0x89c]
call fcn.10003ac4
cmp dword [eax], 0
je 0x10037c91
mov dword [ebp - 0x74c], 1
jmp 0x10037c98
and dword [ebp - 0x74c], 0
mov eax, dword [ebp - 0x78c]
cmp dword [ebp - 0x74c], eax
jle 0x10037cb2
mov dword [ebp - 0x754], 1
jmp 0x10037cb9
and dword [ebp - 0x754], 0
mov esi, dword [ebp - 0x130]
push dword [ebp - 0x58]
lea ecx, [ebp - 0x89c]
call fcn.10003ac4
mov ecx, dword [ebp - 0x754]
add ecx, dword [eax]
cmp ecx, esi
jg 0x10037ce5
mov dword [ebp - 0x75c], 1
jmp 0x10037cec
and dword [ebp - 0x75c], 0
mov eax, dword [ebp - 0x75c]
mov dword [ebp - 0x764], eax
imul esi, dword [ebp - 0x764], 0xaa9d
push dword [ebp - 0x58]
lea ecx, [ebp - 0x89c]
call fcn.10003ac4
cmp dword [eax], esi
jle 0x10037d20
mov dword [ebp - 0x76c], 1
jmp 0x10037d27
and dword [ebp - 0x76c], 0
mov eax, dword [ebp - 0x76c]
sub eax, 0xeb7b
cmp eax, 0xfffffffd
jae 0x10037d43
mov dword [ebp - 0xb00], 1
jmp 0x10037d4a
and dword [ebp - 0xb00], 0
mov eax, dword [ebp - 0xa30]
mov dword [ebp - 0xddc], eax
mov eax, dword [ebp - 0x130]
mov dword [ebp - 0xde4], eax
cmp dword [ebp - 0x794], 0
jne 0x10037d7d
cmp dword [ebp - 0x130], 0
jne 0x10037d7d
and dword [ebp - 0x77c], 0
jmp 0x10037d87
mov dword [ebp - 0x77c], 1
mov eax, dword [ebp - 0x368]
mov dword [ebp - 0x774], eax
mov eax, dword [ebp - 0x774]
mov dword [ebp - 0xae0], eax
mov eax, 0x863718bd
sub eax, dword [ebp - 0x77c]
mov dword [ebp - 0xa38], eax
mov eax, dword [ebp - 0x368]
dec eax
mov dword [ebp - 0x368], eax
mov eax, dword [ebp - 0xae0]
cmp eax, dword [ebp - 0xa38]
jge 0x10037dd7
mov dword [ebp - 0x784], 1
jmp 0x10037dde
and dword [ebp - 0x784], 0
mov eax, dword [ebp - 0x784]
mov dword [ebp - 0x130], eax
mov eax, dword [ebp - 0x130]
cmp eax, dword [ebp - 0x78c]
jge 0x10037e04
mov dword [ebp - 0x79c], 1
jmp 0x10037e0b
and dword [ebp - 0x79c], 0
mov eax, dword [ebp - 0x794]
cmp dword [ebp - 0x79c], eax
jle 0x10037e25
mov dword [ebp - 0xb2c], 1
jmp 0x10037e2c
and dword [ebp - 0xb2c], 0
mov eax, dword [ebp - 0x58]
mov dword [ebp - 0xd98], eax
xor eax, eax
imul eax, eax, 5
mov ecx, 0xad37
sub ecx, eax
mov dword [ebp - 0xa40], ecx
jmp 0x10037a03
jmp 0x100379a8
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x89c]
call fcn.10003a4f
jmp 0x100377ef
xor eax, eax
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret