Function at 0x1003998a
Capabilities:
Check http status code
Check os version
Start service

Disassembly:
mov eax, 0x1005f3b2
call fcn.1005d8a0
sub esp, 0x6b0
push ebx
push esi
mov dword [ebp - 0x50], 0x1812
xor ebx, ebx
cmp dword [ebp - 0x50], 0x18aa
push edi
mov dword [ebp - 0x10], esp
jle 0x10039a41
xor edi, edi
mov dword [ebp - 0x4c], ebx
inc edi
mov ecx, ebx
mov dword [ebp - 0x30], 0x32a8
mov dword [ebp - 0x28], ecx
mov eax, ebx
mov dword [ebp - 0x40], ebx
xor ecx, eax
mov esi, ebx
mov dword [ebp - 0x48], ecx
mov eax, ecx
lea ecx, [ebp - 0x5c8]
or eax, esi
cdq
push edx
push eax
call fcn.10001a75
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x100399f0
mov eax, dword [eax]
push eax
call fcn.10047084
pop ecx
push ebx
push edi
lea ecx, [ebp - 0x5c8]
call fcn.10002352
mov ecx, dword [ebp - 0x48]
inc esi
cmp esi, 0x4582
jl 0x100399d4
mov eax, dword [ebp - 0x40]
mov ecx, dword [ebp - 0x28]
inc eax
mov dword [ebp - 0x40], eax
cmp eax, 0x102
jl 0x100399cd
mov esi, dword [ebp - 0x4c]
add ecx, esi
dec dword [ebp - 0x30]
mov dword [ebp - 0x28], ecx
jne 0x100399c8
inc esi
mov dword [ebp - 0x4c], esi
cmp esi, 0x4f26
jl 0x100399bc
push ebx
call dword [sym.imp.KERNEL32.dll_GetVersionExW]
push 2
lea ecx, [ebp - 0x3ac]
call fcn.10001fe6
cmp dword [ebp - 0x50], 0x152c
jge 0x10039a62
push str.wcbautbed_njgkrup_qbrqfb_kagchu
call fcn.10047084
pop ecx
push 0x17ab
lea ecx, [ebp - 0x3ac]
mov dword [ebp - 4], ebx
push ecx
xor eax, eax
lea edx, [ebp - 0x150]
inc eax
push ecx
mov dword [ebp - 0x488], eax
mov ecx, 0x5fed
mov dword [ebp - 0x484], eax
push eax
mov dword [ebp - 0x480], eax
mov dword [ebp - 0x47c], eax
push 0x1284
call fcn.10035f15
mov eax, dword [ebp - 0x3ac]
lea ecx, [ebp - 0x3ac]
or dword [ebp - 4], 0xffffffff
add esp, 0x14
mov dword [eax], ebx
call fcn.10002048
mov dword [ebp - 0x30], 0x2eac
cmp dword [ebp - 0x30], 0x300c
jle 0x10039b0e
mov esi, ebx
mov dword [ebp - 0x40], ebx
mov edi, ebx
mov eax, esi
mov esi, 0x528
cdq
idiv edi
mov ebx, edx
mov eax, ebx
mov ecx, 0x100788d8
cdq
push edx
push eax
call fcn.10001e5c
inc ebx
dec esi
jne 0x10039ae0
mov esi, dword [ebp - 0x40]
inc edi
cmp edi, 0x1b86
jl 0x10039ad4
inc esi
mov dword [ebp - 0x40], esi
push 0
pop ebx
cmp esi, 0x1163
jl 0x10039ad2
mov dword [ebp - 4], 3
cmp dword [ebp - 0x30], 0x2d04
jge 0x10039b4b
mov edx, str.imdjw_ksmy_hkiggqt_jwf_qll_prpzin_kwcwksbtr_shryilp_kyfxvjbd_gcbupn_bnezizd_zat_olofras_ljlcvc
mov ecx, 0x100788d8
call fcn.10003d65
jmp 0x10039b4b
or dword [ebp - 4], 0xffffffff
xor eax, eax
mov ecx, dword [0x1044a79c]
inc eax
test al, cl
jne 0x10039b90
or ecx, eax
mov dword [0x1044a79c], ecx
mov dword [ebp - 4], 5
mov dword [0x1044a7a4], ebx
mov dword [0x1044a7a8], ebx
call fcn.1003e13b
push 0x1005f7ba
mov dword [0x1044a7a4], eax
call fcn.1004705a
or dword [ebp - 4], 0xffffffff
pop ecx
mov dword [ebp - 0x30], 0x2b67
cmp dword [ebp - 0x30], 0x2cae
jle 0x10039c11
mov eax, ebx
xor edi, edi
mov dword [ebp - 0x28], eax
inc edi
mov esi, ebx
mov dword [ebp - 0x40], ebx
cdq
idiv esi
mov dword [ebp - 0x48], ebx
mov esi, ebx
mov eax, edx
mov dword [ebp - 0x20], eax
xor eax, esi
lea ecx, [ebp - 0x574]
cdq
push edx
push eax
call fcn.10001a75
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x10039bd4
mov eax, dword [eax]
push eax
call fcn.10047084
pop ecx
push ebx
push edi
lea ecx, [ebp - 0x574]
call fcn.10002352
mov eax, dword [ebp - 0x20]
inc esi
cmp esi, 0x4a12
jl 0x10039bba
mov esi, dword [ebp - 0x40]
mov eax, dword [ebp - 0x28]
inc esi
mov dword [ebp - 0x40], esi
cmp esi, 0x3597
jl 0x10039bad
inc eax
mov dword [ebp - 0x28], eax
cmp eax, 0x2203
jl 0x10039ba8
cmp dword [ebp - 0x30], 0x2823
jge 0x10039c25
push str.qhon_eylfmexbj_htdsdfx_waqgugfhq_ucthl_apzztpgk_amwr
call fcn.10047084
pop ecx
or dword [ebp - 4], 0xffffffff
xor eax, eax
push 0x1e76
push 0x2724
push 0x1034
mov dword [ebp - 0x280], 0x41b66baf
inc eax
push 0xac1
mov dword [ebp - 0x23c], ebx
mov dl, al
mov dword [ebp - 0x29c], 0x53e3f36a
mov cl, al
push 0x3a11
mov dword [ebp - 0x24c], 0xc1094d0e
push ebx
mov dword [ebp - 0x1c8], 0x3bab7215
call fcn.10039012
push 0x1ad8
push 0x6241
push 0x3cef
lea eax, [ebp - 0x1c8]
push eax
push ebx
lea eax, [ebp - 0x23c]
push eax
lea eax, [ebp - 0x29c]
push eax
lea eax, [ebp - 0x280]
push eax
lea eax, [ebp - 0x24c]
push eax
push 0x4e72
push 0x7ebe
call fcn.1003539f
add esp, 0x44
cmp byte [0x1044a5fc], 0
je 0x10039d97
xor ecx, ecx
mov dword [ebp - 0x2c], 6
mov dword [ebp - 0x1c], ebx
inc ecx
jmp 0x10039ceb
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0x158], ebx
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], ecx
jl 0x10039cde
mov dword [ebp - 0x2c], ebx
cmp dword [ebp - 0x2c], ebx
jl 0x10039d32
mov dword [ebp - 0x1c], 4
mov dword [ebp - 0x48], 0xfffffffe
mov dword [ebp - 0x1c], ebx
cmp dword [ebp - 0x1c], ebx
jl 0x10039d2a
mov eax, dword [ebp - 0x1c]
mov ecx, dword [ebp + eax*4 - 0x158]
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0x158], ecx
mov dword [ebp - 0x48], ecx
dec dword [ebp - 0x1c]
jns 0x10039d0e
dec dword [ebp - 0x2c]
jns 0x10039cf8
xor ecx, ecx
inc ecx
mov dword [ebp - 0x2c], ebx
jmp 0x10039d8c
mov dword [ebp - 0x1c], ebx
jmp 0x10039d4d
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0x534], 0xffffffff
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 3
jl 0x10039d3c
push 0xa99
push ecx
push ecx
lea eax, [ebp - 0x93]
mov byte [ebp - 0x93], bl
push eax
push 0x2995
mov dl, cl
mov ecx, 0x463f
push 0x3ce8
call fcn.1003607b
mov eax, dword [ebp - 0x530]
add esp, 0x18
inc dword [ebp - 0x2c]
push 1
pop ecx
cmp dword [ebp - 0x2c], 0x12
jl 0x10039d37
jmp 0x1003dc64
mov dword [ebp - 0x1c], ebx
jmp 0x10039dad
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0x53c], 0x124f01c0
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 2
jl 0x10039d9c
lea eax, [ebp - 0x8e]
mov byte [ebp - 0x8e], bl
push eax
push 0x5f2c
xor eax, eax
xor cl, cl
inc eax
push eax
push 0x7d99
push 0x6ed4
push 0x70fa
mov dl, al
call fcn.10034c19
xor eax, eax
mov byte [ebp - 0x78], bl
inc eax
lea ecx, [ebp - 0x78]
push eax
push 0x3de4
push 0x413b
push ecx
push 0x1bad
push 0x11ac
mov dl, al
xor cl, cl
call fcn.100397f4
add esp, 0x2c
mov edx, 0x597a
push 0x1044a5fc
push ecx
push ecx
mov cl, 1
call fcn.10033f0b
mov dword [ebp - 0x28], 5
lea ecx, [ebp - 0x42c]
mov dword [ebp - 0x44], 0xc3203bd6
add esp, 0x10
mov dword [ebp - 0x48], 0x108531d1
mov dword [ebp - 0x44], 0xffffffff
mov dword [ebp - 0x44], 0xfffffffd
mov dword [ebp - 0x44], 0xad5befa1
mov dword [ebp - 0x44], 0xfffffff9
push 2
call fcn.10001fe6
mov dword [ebp - 0x44], 0x9ee491ba
xor edx, edx
mov dword [ebp - 0x44], ebx
inc edx
mov dword [ebp - 0x44], edx
mov dword [ebp - 0x44], edx
mov dword [ebp - 0x44], 0x66798564
mov dword [ebp - 0x18], ebx
jmp 0x10039e90
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x554], 4
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 2
jl 0x10039e7f
mov dword [ebp - 0x18], ebx
jmp 0x10039ea8
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x51c], ebx
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 3
jl 0x10039e9b
mov dword [ebp - 0x18], ebx
jmp 0x10039ec6
mov ecx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x42c]
mov dword [eax + ecx*4], 0xfffffffe
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 2
jl 0x10039eb3
mov dword [ebp - 0x18], ebx
jmp 0x10039ede
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x37c], ebx
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 3
jl 0x10039ed1
mov ecx, dword [ebp - 0x514]
mov eax, dword [ebp - 0x28]
dec dword [ebp - 0x28]
cmp eax, ecx
lea ecx, [ebp - 0x42c]
cmovg edx, ebx
inc dword [ebp - 0x374]
mov eax, dword [ebp - 0x374]
add eax, edx
mov dword [ebp - 0x48], eax
call fcn.10002048
mov esi, 0x10075ae0
mov dword [ebp - 0x48], 0x1659
cmp dword [ebp - 0x48], 0xde7
mov dword [ebp - 0x20], esi
jge 0x10039f81
lea eax, [ebp - 0x2a4]
push eax
lea eax, [ebp - 0x288]
push eax
lea eax, [ebp - 0x25c]
push eax
lea eax, [ebp - 0x254]
push eax
push str._d__d__d__d
call fcn.10047342
mov eax, dword [ebp - 0x254]
add esp, 0x14
dec eax
mov ecx, 0x1006bb38
cdq
idiv dword [ebp - 0x288]
mov edx, 0x1006bb3c
imul eax, dword [ebp - 0x25c]
cmp dword [ebp - 0x2a4], eax
cmovge ecx, edx
push ecx
call fcn.100473fb
pop ecx
mov dword [ebp - 0x34], 1
xor ecx, ecx
mov eax, dword [ebp - 0x34]
mov eax, dword [ebp - 0x34]
mov eax, dword [ebp - 0x34]
mov eax, dword [ebp - 0x34]
cmp eax, 0xfffffffd
mov eax, dword [ebp - 0x34]
setne cl
inc eax
add ecx, eax
xor edx, edx
mov eax, dword [ebp - 0x34]
cmp ecx, eax
setle dl
sub edx, dword [ebp - 0x34]
jne 0x10039fb4
mov eax, dword [ebp - 0x34]
mov byte [ebp - 0x39], bl
cmp byte [ebp - 0x39], 0
je 0x10039fca
push 0x2f17
mov dl, 1
call fcn.10033f84
pop ecx
mov dword [ebp - 0x4c], 0x6425
cmp dword [ebp - 0x4c], 0x653f
jle 0x1003a07c
push ebx
push 0x2052
push ebx
call dword [sym.imp.GDI32.dll_GetBitmapBits]
mov dword [ebp - 0xa4], ebx
mov eax, ebx
mov dword [ebp - 0x30], 0x96
mov dword [ebp - 0x28], eax
mov esi, ebx
mov dword [ebp - 0x40], ebx
mov ecx, esi
mov dword [ebp - 0x48], eax
mov esi, eax
mov edi, ebx
sar esi, cl
mov eax, esi
lea ecx, [ebp - 0x5f8]
xor eax, edi
cdq
push edx
push eax
call fcn.10001a75
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x1003a029
mov eax, dword [eax]
push eax
call fcn.10047084
pop ecx
push ebx
push 1
lea ecx, [ebp - 0x5f8]
call fcn.10002352
inc edi
cmp edi, 0x293b
jl 0x1003a00d
mov esi, dword [ebp - 0x40]
mov eax, dword [ebp - 0x28]
inc esi
mov dword [ebp - 0x40], esi
cmp esi, 0x31d1
jl 0x1003a002
mov edi, dword [ebp - 0xa4]
add eax, edi
dec dword [ebp - 0x30]
mov dword [ebp - 0x28], eax
jne 0x10039ffd
inc edi
mov dword [ebp - 0xa4], edi
cmp edi, 0x36bd
jl 0x10039ff1
cmp dword [ebp - 0x4c], 0x62aa
mov dword [ebp - 0xa4], ebx
jge 0x1003a096
push str.gjbhd_ccglzir_imvexdnb_qpx_zvhradh
call fcn.10047084
pop ecx
or dword [ebp - 4], 0xffffffff
xor ecx, ecx
mov dword [ebp - 0x2c], 0xb743d837
inc ecx
mov dword [ebp - 0x40], 4
mov dword [ebp - 0x44], 0xea381e16
mov dword [ebp - 0x28], 0xc37
mov dword [ebp - 0x1c], ebx
jmp 0x1003a0cc
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0x64], 0x624039b
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], ecx
jl 0x1003a0be
mov byte [ebp - 0x39], bl
cmp byte [ebp - 0x39], 0
je 0x1003a0fa
push 0x39e2
push ebx
push 0x5fa1
push ecx
mov dl, cl
mov ecx, 0x490d
push 0x3a5b
call fcn.100386ef
add esp, 0x14
push 0xa
mov dword [ebp - 0x2c], ebx
pop esi
cmp dword [ebp - 0x2c], ebx
jg 0x1003a3bd
push dword [ebp - 0x150]
movdqa xmm0, xmmword [0x1006c4f0]
lea eax, [ebp - 0x500]
push eax
lea eax, [ebp - 0x510]
mov dword [ebp - 0x18], 2
push eax
mov dword [ebp - 0x34], 0x4b3f4b14
lea ecx, [ebp - 0x1b4]
push ebx
movdqu xmmword [ebp - 0x510], xmm0
mov dword [ebp - 0x1b4], ebx
mov dword [ebp - 0x1b0], ebx
mov dword [ebp - 0x1ac], ebx
call fcn.100046f5
mov dword [ebp - 4], esi
xor edx, edx
inc edx
mov dword [ebp - 0x38], edx
mov dword [ebp - 0x44], 0xffffffff
mov dword [ebp - 0x44], 0xceb8a064
mov dword [ebp - 0x1c], ebx
jmp 0x1003a186
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0x264], 0xbef27779
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], edx
jl 0x1003a175
mov dword [ebp - 0x18], ebx
cmp dword [ebp - 0x18], ebx
jl 0x1003a2d2
mov edi, dword [ebp - 0x1b4]
mov dword [ebp - 0x48], ebx
mov dword [ebp - 0x44], 0xfffffffb
mov dword [ebp - 0x1c], ebx
jmp 0x1003a1bd
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0x434], 0xb8b2ef5e
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 2
jl 0x1003a1ac
mov eax, dword [ebp - 0x18]
xor ecx, ecx
mov eax, dword [ebp + eax*4 - 0x64]
mov eax, dword [ebp - 0x40]
mov eax, dword [ebp - 0x64]
mov eax, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x18]
cmp ecx, eax
sbb eax, eax
neg eax
mov dword [ebp - 0x34], eax
mov eax, dword [ebp - 0x64]
mov eax, dword [ebp - 0x34]
mov eax, dword [ebp - 0x18]
cmp dword [ebp - 0x64], ebx
je 0x1003a1f6
mov esi, edx
cmp dword [ebp - 0x34], ebx
jne 0x1003a1f8
mov esi, ebx
mov eax, dword [ebp - 0x18]
xor ecx, ecx
mov eax, dword [ebp + eax*4 - 0x64]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp + eax*4 - 0x64]
cmp esi, eax
sete cl
xor eax, eax
cmp ecx, dword [edi + 8]
setle al
neg eax
mov dword [ebp - 0x38], eax
mov eax, dword [ebp - 0x38]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x64]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp + eax*4 - 0x64]
mov dword [ebp - 0x48], ebx
mov dword [ebp - 0x38], ebx
jmp 0x1003a2c0
mov dword [ebp - 0x4c], 0x94bf
mov dword [ebp - 0x48], 0x6a6d983a
mov dword [ebp - 0x44], ebx
mov dword [ebp - 0x44], 0x69b92b2c
cmp dword [ebp - 0x34], ebx
jne 0x1003a2c9
mov dword [ebp - 0x34], ebx
cmp dword [ebp - 0x34], ebx
jl 0x1003a2bd
mov dword [ebp - 0x30], 0x1fdf20be
mov dword [ebp - 0x44], 6
mov dword [ebp - 0x44], 0x9d6240c4
mov dword [ebp - 0x44], edx
mov dword [ebp - 0x44], 0xbeba6e32
mov ecx, dword [ebp - 0x48]
imul ecx, dword [ebp - 0x28]
mov eax, dword [ebp - 0x64]
inc dword [ebp - 0x28]
push 1
cmp ecx, eax
mov eax, edx
mov edx, dword [ebp - 0x30]
cmovne eax, ebx
imul edx, dword [ebp - 0x4c]
xor ecx, ecx
add edx, eax
mov eax, dword [ebp - 0x430]
imul eax, dword [ebp - 0x40]
cmp edx, eax
pop edx
setg cl
xor eax, eax
cmp ecx, 0xffffffff
setne al
mov dword [ebp - 0x264], eax
dec dword [ebp - 0x34]
jns 0x1003a25a
inc dword [ebp - 0x38]
cmp dword [ebp - 0x38], ebx
jle 0x1003a235
dec dword [ebp - 0x18]
jns 0x1003a19d
mov dword [ebp - 0x24], 0x6e56
cmp dword [ebp - 0x24], 0x722b
jle 0x1003a338
mov dword [ebp - 0x50], ebx
mov dword [ebp - 0x4c], ebx
mov dword [ebp - 0x30], 0x6db9
mov edi, ebx
mov esi, ebx
mov ebx, dword [ebp - 0x4c]
mov eax, edi
mov ecx, 0x100788d8
cdq
idiv esi
mov eax, ebx
sub eax, edx
cdq
push edx
push eax
call fcn.10001e5c
inc esi
cmp esi, 0x583f
jl 0x1003a2f6
inc edi
push 0
pop ebx
cmp edi, 0x705f
jl 0x1003a2f1
mov esi, dword [ebp - 0x50]
add dword [ebp - 0x4c], esi
dec dword [ebp - 0x30]
jne 0x1003a2ef
inc esi
mov dword [ebp - 0x50], esi
cmp esi, 0x64c9
jl 0x1003a2e5
mov byte [ebp - 0x39], bl
cmp byte [ebp - 0x39], 0
je 0x1003a369
push 0x58f2
push ebx
xor eax, eax
mov ecx, 0x4ef0
inc eax
push eax
push 0x42e5
push 0x5b35
push 0x6ac5
mov dl, al
call fcn.1003607b
add esp, 0x18
mov byte [ebp - 4], 0xb
cmp dword [ebp - 0x24], 0x6c07
jge 0x1003a3a3
mov edx, str.crjbucqp_hwdp_pdidmo_nivykixs_snzk_jdghsrl_unxuvespi_ewyymtz_vuzkylre
mov ecx, 0x100788d8
call fcn.10003d65
jmp 0x1003a3a3
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x1b4]
push 0xa
pop esi
call fcn.10002048
inc dword [ebp - 0x2c]
jmp 0x1003a100
mov esi, dword [ebp - 0x20]
push 0xc
pop ecx
mov dword [ebp - 0x11c], ecx
cmp ecx, 0xe0
jge 0x1003a8c6
xor eax, eax
mov dword [ebp - 0x1c], 2
inc eax
mov ecx, 0x54fc
push eax
push 0x77e0
push ebx
push 0x60b9
push 0x7995
mov dl, al
call fcn.10037551
add esp, 0x14
mov dword [ebp - 0x1c], 0xffffffef
jmp 0x1003a433
cmp dword [ebp - 0x1c], ebx
jne 0x1003a439
push ebx
push 0x4c1b
xor eax, eax
mov edx, 0x7c60
inc eax
push 0xf66
push eax
push 0x2160
mov cl, al
call fcn.100371cd
add esp, 0x14
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 0xfffffffd
jge 0x1003a408
mov ecx, dword [ebp - 0x11c]
mov al, byte [esi]
cmp al, byte [ecx + 0x10075ae0]
je 0x1003a44f
inc ecx
jmp 0x1003a3c3
push dword [ebp - 0x150]
movdqa xmm0, xmmword [0x1006c500]
lea eax, [ebp - 0x4b0]
push eax
lea eax, [ebp - 0x4c0]
mov dword [ebp - 0xd8], 1
push eax
push ebx
lea ecx, [ebp - 0x188]
mov dword [ebp - 0x188], ebx
movdqu xmmword [ebp - 0x4c0], xmm0
mov dword [ebp - 0x184], ebx
mov dword [ebp - 0x180], ebx
call fcn.100046f5
lea ecx, [ebp - 0xe4]
mov dword [ebp - 4], 0xd
push ecx
push ecx
push 0x5111
push ecx
xor eax, eax
mov dword [ebp - 0xe4], 0xfffffffa
inc eax
lea ecx, [ebp - 0xd8]
push ecx
mov dword [ebp - 0x44], eax
push eax
lea eax, [ebp - 0x188]
push eax
call fcn.10036e6c
add esp, 0x1c
mov dword [ebp - 0xe4], 3
cmp dword [ebp - 0xe4], ebx
jl 0x1003a756
push 2
pop eax
mov dword [ebp - 0x1c], 1
lea ecx, [ebp - 0x46c]
mov dword [ebp - 0x44], eax
mov dword [ebp - 0x44], 0xddd9cd4
mov dword [ebp - 0x44], 0x3d5943e2
push eax
call fcn.10001fe6
push ebx
lea eax, [ebp - 0x46c]
mov byte [ebp - 4], 0xe
push eax
push ecx
lea eax, [ebp - 0x478]
mov edx, 0x79c5
push eax
mov ecx, 0x5d43
call fcn.10038a6f
add esp, 0x10
mov dword [ebp - 0xd8], ebx
cmp dword [ebp - 0xd8], 3
jg 0x1003a718
mov dword [ebp - 0x24], 0x41fc9a57
lea ecx, [ebp - 0x3b8]
mov dword [ebp - 0x44], 0xfffffffd
mov dword [ebp - 0x44], 0x17779a7b
mov dword [ebp - 0x44], 0xfffffff6
push 2
call fcn.10001fe6
lea eax, [ebp - 0x3d4]
mov byte [ebp - 4], 0xf
push 1
push eax
lea ecx, [ebp - 0x3b8]
call fcn.10036fb4
pop ecx
pop ecx
mov dword [ebp - 0x24], ebx
cmp dword [ebp - 0x24], 3
jg 0x1003a6e7
mov dword [ebp - 0x44], 1
lea ecx, [ebp - 0x45c]
push 3
call fcn.10001fe6
mov byte [ebp - 4], 0x10
mov dword [ebp - 0x21c], 0x89aa5088
mov dword [ebp - 0xb4], ebx
jmp 0x1003a5de
mov eax, dword [ebp - 0xb4]
mov dword [ebp + eax*4 - 0x544], 0xcd7d393e
inc dword [ebp - 0xb4]
cmp dword [ebp - 0xb4], 2
jl 0x1003a5c7
lea eax, [ebp - 0xb4]
push eax
push 0x7b21
push 1
lea edx, [ebp - 0x45c]
call fcn.1003700b
mov dword [ebp - 0x30], 0x7fdb
add esp, 0xc
cmp dword [ebp - 0x30], 0x801d
jle 0x1003a691
mov eax, ebx
mov dword [ebp - 0x28], ebx
mov edi, ebx
mov ecx, edi
mov esi, ebx
sar eax, cl
mov dword [ebp - 0x4c], eax
mov ecx, ebx
xor eax, esi
mov dword [ebp - 0x40], ecx
mov dword [ebp - 0x48], eax
or eax, ecx
lea ecx, [ebp - 0x6a0]
cdq
push edx
push eax
call fcn.10001a75
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x1003a647
mov eax, dword [eax]
push eax
call fcn.10047084
pop ecx
push ebx
push 1
lea ecx, [ebp - 0x6a0]
call fcn.10002352
mov ecx, dword [ebp - 0x40]
mov eax, dword [ebp - 0x48]
inc ecx
mov dword [ebp - 0x40], ecx
cmp ecx, 0x5ad1
jl 0x1003a62d
mov eax, dword [ebp - 0x4c]
inc esi
cmp esi, 0x7c70
jl 0x1003a623
mov eax, dword [ebp - 0x28]
inc edi
cmp edi, 0x2c01
jl 0x1003a61a
inc eax
mov dword [ebp - 0x28], eax
cmp eax, 0x3a18
jl 0x1003a618
cmp dword [ebp - 0x30], 0x7d38
jge 0x1003a6a5
push str.ferar_zsfim_cyrzo_krxjv_vyu_wyj_yrikr_rroek_qhtsl_dvje_ywnzcxaxc_blxgrmhu
call fcn.10047084
pop ecx
lea eax, [ebp - 0x21c]
mov dword [ebp - 4], 0x10
push eax
xor eax, eax
mov edx, 0x14da
inc eax
mov ecx, 0x42c6
push eax
push 0x21cf
push eax
push ebx
call fcn.1003523e
add esp, 0x14
mov byte [ebp - 4], 0xf
lea ecx, [ebp - 0x45c]
call fcn.10002048
inc dword [ebp - 0x24]
jmp 0x1003a593
mov byte [ebp - 0x39], bl
cmp byte [ebp - 0x39], 0
je 0x1003a6fe
xor eax, eax
inc eax
push eax
mov dl, al
mov cl, al
call fcn.1003704c
pop ecx
lea ecx, [ebp - 0x3b8]
mov byte [ebp - 4], 0xe
call fcn.10002048
inc dword [ebp - 0xd8]
jmp 0x1003a540
mov dword [ebp - 0x1c], ebx
cmp dword [ebp - 0x1c], 3
jg 0x1003a73c
lea eax, [ebp - 0x188]
push 1
push eax
call fcn.100370c3
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 3
pop ecx
pop ecx
jle 0x1003a721
xor ebx, ebx
lea ecx, [ebp - 0x46c]
mov byte [ebp - 4], 0xd
call fcn.10002048
dec dword [ebp - 0xe4]
jmp 0x1003a4e1
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x188]
call fcn.10002048
xor eax, eax
lea edx, [ebp - 0x11c]
inc eax
mov ecx, 0x4b29
push eax
push eax
lea eax, [ebp - 0xa4]
push eax
push ebx
call fcn.10037b88
xor ecx, ecx
mov dword [ebp - 0x18], 0xb0ce
add esp, 0x10
inc ecx
mov dword [ebp - 0x44], ecx
mov dword [ebp - 0x44], 0x94fe874d
mov dword [ebp - 0x1c], ebx
jmp 0x1003a7af
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0x2c4], 0x7a98815
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 4
jl 0x1003a79e
mov eax, dword [ebp - 0x18]
neg eax
jne 0x1003a7c3
mov esi, ebx
cmp dword [ebp - 0x18], ebx
je 0x1003a7c5
mov esi, ecx
xor ecx, ecx
mov edx, 0xbca9
mov dword [ebp - 0x2b8], edx
mov eax, dword [ebp - 0x18]
cmp eax, edx
mov eax, dword [ebp - 0x18]
setl cl
xor edx, edx
add ecx, 0x34d
cmp ecx, esi
setne dl
xor ecx, ecx
cmp eax, edx
mov eax, dword [ebp - 0x18]
setl cl
mov dword [ebp - 0x48], ecx
xor ecx, ecx
cmp dword [ebp - 0x48], eax
setle cl
cmp ecx, 0x4456
je 0x1003a830
cmp dword [ebp - 0x2b8], ebx
jne 0x1003a830
mov dword [ebp - 0x18], ebx
jmp 0x1003a825
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x2c4], 0xffffffff
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 4
jl 0x1003a814
jmp 0x1003a8c6
mov dword [ebp - 0x48], 1
lea ecx, [ebp - 0x31c]
mov dword [ebp - 0x44], 0xa4f2a6ca
push 4
call fcn.10001fe6
sub esp, 0xc
mov dword [ebp - 4], 0x13
mov dword [ebp - 0x44], 0xd925d3c0
lea edx, [ebp - 0x31c]
mov dword [ebp - 0x40], 1
lea ecx, [ebp - 0x448]
push ebx
call fcn.100378dd
mov ecx, dword [ebp - 0x31c]
xor edx, edx
mov eax, dword [ebp - 0x2b8]
add esp, 0x10
cmp dword [ecx + 8], eax
mov eax, dword [ebp - 0x2c4]
setg dl
add eax, edx
xor edx, edx
mov dword [ebp - 0x40], eax
mov ecx, dword [ebp - 0x40]
mov eax, dword [ebp - 0x2b8]
cmp ecx, eax
mov eax, dword [ebp - 0x48]
setge dl
xor ecx, ecx
cmp edx, eax
setg cl
mov dword [ebp - 0x2c0], ecx
lea ecx, [ebp - 0x31c]
or dword [ebp - 4], 0xffffffff
call fcn.10002048
mov dword [ebp - 0x30], 0x706c
cmp dword [ebp - 0x30], 0x737d
jle 0x1003a95b
mov dword [ebp - 0x4c], ebx
mov eax, ebx
mov dword [ebp - 0x28], ebx
mov esi, ebx
mov dword [ebp - 0x40], ebx
mov ecx, esi
mov edi, ebx
mov esi, dword [ebp - 0x4c]
sar eax, cl
mov dword [ebp - 0x48], eax
xor eax, edi
lea ecx, [ebp - 0x628]
or eax, esi
cdq
push edx
push eax
call fcn.10001a75
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x1003a90f
mov eax, dword [eax]
push eax
call fcn.10047084
pop ecx
push ebx
push 1
lea ecx, [ebp - 0x628]
call fcn.10002352
mov eax, dword [ebp - 0x48]
inc edi
cmp edi, 0x5d07
jl 0x1003a8f3
mov esi, dword [ebp - 0x40]
mov eax, dword [ebp - 0x28]
inc esi
mov dword [ebp - 0x40], esi
cmp esi, 0x7f9b
jl 0x1003a8e7
inc eax
mov dword [ebp - 0x28], eax
cmp eax, 0x2323
jl 0x1003a8e2
mov eax, dword [ebp - 0x4c]
inc eax
mov dword [ebp - 0x4c], eax
cmp eax, 0x5be5
jl 0x1003a8dd
mov dword [ebp - 0x1c], 0xfe64fd9e
cmp dword [ebp - 0x30], 0x6e94
jge 0x1003a976
push str.mfdglbygm_banhd_btnrt_hyxiez_eeeolajga_jfsy_glkf
call fcn.10047084
pop ecx
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x2f8]
push 4
call fcn.10001fe6
mov dword [ebp - 4], 0x16
lea ecx, [ebp - 0x194]
mov dword [ebp - 0x48], 0x4d0f
mov dword [ebp - 0x44], 0x9a13
push 1
call fcn.10001fe6
mov byte [ebp - 4], 0x17
mov dword [ebp - 0x38], 0x4d99
mov dword [ebp - 0x28], 0x3d3a
cmp dword [ebp - 0x28], 0x3d5a
jle 0x1003aa39
mov dword [ebp - 0x30], ebx
mov ecx, ebx
mov dword [ebp - 0x40], 0x63f3
mov dword [ebp - 0x24], ecx
mov edi, ebx
mov esi, ebx
mov eax, edi
cdq
idiv esi
lea eax, [ecx + edx]
cdq
lea ecx, [ebp - 0x58c]
push edx
push eax
call fcn.10001a75
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x1003a9f7
mov eax, dword [eax]
push eax
call fcn.10047084
pop ecx
push ebx
push 1
lea ecx, [ebp - 0x58c]
call fcn.10002352
mov ecx, dword [ebp - 0x24]
inc esi
cmp esi, 0x1964
jl 0x1003a9d7
inc edi
cmp edi, 0x6497
jl 0x1003a9d5
mov eax, dword [ebp - 0x30]
add ecx, eax
dec dword [ebp - 0x40]
mov dword [ebp - 0x24], ecx
jne 0x1003a9d3
inc eax
mov dword [ebp - 0x30], eax
cmp eax, 0x5d1c
jl 0x1003a9c7
cmp dword [ebp - 0x28], 0x3ca3
jge 0x1003aa4d
push str.yeuwjnaq_hvvbrp_djd_slgkpqwb_lfqichw_zeuxdh_bcdvvgvkk_toaywftrx_ugzwov_effrfgfjb_dmq_gbgnj_whailky
call fcn.10047084
pop ecx
push 1
lea ecx, [ebp - 0x334]
mov dword [ebp - 4], 0x17
call fcn.10001fe6
mov byte [ebp - 4], 0x1a
mov dword [ebp - 0x5c], ebx
jmp 0x1003aa7d
mov ecx, dword [ebp - 0x5c]
mov eax, dword [ebp - 0x2f8]
mov dword [eax + ecx*4], 5
inc dword [ebp - 0x5c]
cmp dword [ebp - 0x5c], 4
jl 0x1003aa6a
xor edx, edx
mov dword [ebp - 0x5c], ebx
inc edx
jmp 0x1003aa9e
mov ecx, dword [ebp - 0x5c]
mov eax, dword [ebp - 0x194]
mov dword [eax + ecx*4], 0x9904
inc dword [ebp - 0x5c]
cmp dword [ebp - 0x5c], edx
jl 0x1003aa8b
mov dword [ebp - 0x5c], ebx
jmp 0x1003aab9
mov eax, dword [ebp - 0x5c]
mov dword [ebp + eax*4 - 0x364], 0xaf9031ea
inc dword [ebp - 0x5c]
cmp dword [ebp - 0x5c], 3
jl 0x1003aaa8
push 0x45c9
lea eax, [ebp - 0x334]
push eax
push ecx
lea eax, [ebp - 0x5c]
push eax
push ecx
mov ecx, 0x11d3
call fcn.10036b7d
mov eax, dword [ebp - 0x1c]
add esp, 0x14
mov ecx, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x2f8]
mov dword [eax + 8], ecx
cmp dword [ebp - 0x1c], ecx
jl 0x1003ab5f
mov eax, dword [ebp - 0x194]
cmp dword [eax], ebx
jne 0x1003ab05
cmp dword [ebp - 0x1c], ebx
jne 0x1003ab05
mov eax, ebx
jmp 0x1003ab08
xor eax, eax
inc eax
xor ecx, ecx
cmp eax, 0x3d37f4a1
mov eax, dword [ebp - 0x360]
setg cl
add eax, 0x25005768
inc dword [ebp - 0x360]
add eax, ecx
jne 0x1003ab35
mov eax, dword [ebp - 0x194]
cmp dword [eax], ebx
jne 0x1003ab35
mov ecx, ebx
jmp 0x1003ab38
xor ecx, ecx
inc ecx
mov eax, dword [ebp - 0x38]
xor edx, edx
add ecx, 0x90611bc3
cmp ecx, eax
setne dl
sub edx, dword [ebp - 0x48]
mov eax, dword [ebp - 0x194]
neg edx
sbb edx, edx
inc edx
cmp edx, dword [eax]
jne 0x1003ab5f
xor edx, edx
inc edx
jmp 0x1003ab61
mov edx, ebx
mov eax, dword [ebp - 0x1c]
xor ecx, ecx
cmp edx, eax
mov eax, dword [ebp - 0x194]
setg cl
cmp ecx, dword [eax]
jne 0x1003ab78
mov eax, dword [ebp - 0x38]
mov eax, dword [ebp - 0x38]
mov ecx, dword [ebp - 0x38]
mov eax, dword [ebp - 0x334]
mov dword [eax], ecx
lea ecx, [ebp - 0x334]
call fcn.10002048
lea ecx, [ebp - 0x194]
call fcn.10002048
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x2f8]
call fcn.10002048
push 2
pop esi
mov dword [ebp - 0x44], esi
lea ecx, [ebp - 0x3d0]
mov dword [ebp - 0x44], 0x335c22c9
mov dword [ebp - 0x1c], 0xbf35dd75
push 1
call fcn.10001fe6
mov dword [ebp - 4], 0x1b
lea ecx, [ebp - 0x3c4]
mov dword [ebp - 0x44], 0x2f00
push esi
call fcn.10001fe6
mov byte [ebp - 4], 0x1c
mov dword [ebp - 0x40], 0x4fed
cmp dword [ebp - 0x40], 0x512b
jle 0x1003ac21
mov esi, ebx
mov edi, ebx
mov eax, edi
mov ecx, 0x100788d8
or eax, esi
cdq
push edx
push eax
call fcn.10001e5c
inc edi
cmp edi, 0x4710
jl 0x1003abfe
inc esi
cmp esi, 0x327f
jl 0x1003abfc
mov dword [ebp - 0x44], 0xfffffff7
mov byte [ebp - 4], 0x1d
cmp dword [ebp - 0x40], 0x4efe
jge 0x1003ac62
mov edx, str.ostidt_rdagwnq_fnuaeaf_ztbct_luqzlg
mov ecx, 0x100788d8
call fcn.10003d65
jmp 0x1003ac62
xor ecx, ecx
mov dword [ebp - 4], 0x1c
inc ecx
mov dword [ebp - 0x8c], ebx
jmp 0x1003ac8b
mov eax, dword [ebp - 0x8c]
mov dword [ebp + eax*4 - 0x2e4], 8
inc dword [ebp - 0x8c]
cmp dword [ebp - 0x8c], 2
jl 0x1003ac74
push 0x2de
push ecx
lea eax, [ebp - 0x3d0]
mov edx, 0x7eb7
push eax
push ecx
lea ecx, [ebp - 0x8c]
call fcn.10037133
add esp, 0xc
lea eax, [ebp - 0x3c4]
lea edx, [ebp - 0x8c]
push eax
push ecx
push ebx
push 0x5062
call fcn.10038dd2
mov dword [ebp - 0x48], 6
add esp, 0x14
mov dword [ebp - 0x1c], ebx
jmp 0x1003ad1e
mov ecx, dword [ebp - 0x48]
xor edx, edx
mov eax, dword [ebp - 0x2e0]
cmp eax, ecx
setg dl
mov dword [ebp - 0x2e0], edx
mov byte [ebp - 0x39], bl
cmp byte [ebp - 0x39], 0
je 0x1003ad1b
push ebx
push 0x1196
push 0x214a
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_GetCharWidth32A]
dec dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 0xfffffff4
jge 0x1003acdd
lea ecx, [ebp - 0x3c4]
call fcn.10002048
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x3d0]
call fcn.10002048
mov ecx, dword [ebp - 0x20]
mov al, byte [0x10075bc0]
mov byte [ebp - 0x39], al
mov byte [ebp - 0x118], al
mov dl, byte [ecx]
mov cl, al
call fcn.1003e166
mov byte [0x10075bc0], al
lea ecx, [ebp - 0x230]
push ecx
lea ecx, [ebp - 0x238]
mov dword [ebp - 0x240], 0xf825
push ecx
xor eax, eax
mov edx, 0x529f
inc eax
push ecx
mov dword [ebp - 0x238], eax
lea ecx, [ebp - 0x240]
push eax
mov dword [ebp - 0x230], 0xbdd48407
call fcn.10037a70
push 0x6997
push 1
call fcn.100348c2
mov esi, dword [ebp - 0xa4]
xor ecx, ecx
add esp, 0x18
mov dword [ebp - 0x48], esi
inc ecx
mov edi, ecx
mov al, byte [edi + 0x10075bc0]
mov dl, cl
mov byte [ebp - 0x7b], al
mov byte [ebp - 0x51], al
lea eax, [ebp - 0x248]
push 0x366d
push eax
mov dword [ebp - 0x248], 2
push ebx
call fcn.10034deb
add esp, 0xc
mov byte [ebp - 0x82], bl
lea eax, [ebp - 0x82]
push 1
push ecx
push 0x5a98
push eax
push ecx
call fcn.10038372
mov eax, edi
mov cl, byte [ebp - 0x51]
cdq
add esp, 0x14
idiv esi
mov esi, edx
mov dl, byte [ebp - 0x39]
call fcn.1003e166
mov dl, byte [esi + 0x10075ae0]
mov cl, al
call fcn.1003e166
mov byte [edi + 0x10075bc0], al
lea edx, [ebp - 0x7b]
lea eax, [ebp - 0x118]
push eax
push ecx
push 1
call fcn.100371a5
add esp, 0xc
inc edi
cmp edi, 4
jge 0x1003ae56
mov al, byte [ebp - 0x118]
xor ecx, ecx
mov esi, dword [ebp - 0x48]
inc ecx
mov byte [ebp - 0x39], al
jmp 0x1003adb7
mov eax, dword [0x10075bc0]
lea ecx, [ebp - 0x3e0]
mov dword [ebp - 0x18], 0x7e2799ac
mov dword [ebp - 0x44], 0xfffffffe
push 1
mov dword [ebp - 0x40], eax
call fcn.10001fe6
xor eax, eax
mov dword [ebp - 4], 0x20
inc eax
lea ecx, [ebp - 0x41c]
push eax
push 0x7351
push ecx
push eax
push 0x38d
lea edx, [ebp - 0x3e0]
mov cl, al
call fcn.100371cd
mov dword [ebp - 0x18], 0xffffffea
add esp, 0x14
cmp dword [ebp - 0x18], 0x17
jne 0x1003b09f
push 2
pop esi
push 3
pop edi
push edi
lea ecx, [ebp - 0x1c4]
call fcn.10001fe6
push 0x706b
mov byte [ebp - 4], 0x21
lea eax, [ebp - 0x44c]
push 1
mov dword [ebp - 0x1c], 0xfffffffa
push eax
mov dword [ebp - 0x20], 0x66efe0cd
push ecx
mov dword [ebp - 0x38], 0xb1a88af1
mov dword [ebp - 0x34], 0x312b9482
push 0x148a
mov dword [ebp - 0x20], ebx
push ecx
mov dword [ebp - 0x20], 0xffffffff
lea ecx, [ebp - 0x1c4]
mov dword [ebp - 0x48], 0x4e20eeb4
call fcn.10037302
mov eax, dword [ebp - 0x18]
xor edx, edx
mov eax, dword [ebp - 0x18]
xor ecx, ecx
mov eax, dword [ebp - 0x1c]
inc edx
mov dword [ebp - 0x1c], eax
add esp, 0x18
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x18]
cmp eax, edx
setg cl
xor eax, eax
cmp ecx, 0x74a71a6e
setg al
xor ecx, ecx
mov dword [ebp - 0x20], eax
mov eax, dword [ebp - 0x20]
cmp eax, 0xbfe7374
setne cl
cmp ecx, edi
sbb eax, eax
inc eax
mov dword [ebp - 0x38], eax
mov eax, dword [ebp - 0x38]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x34]
mov eax, dword [ebp - 0x1c4]
cmp dword [eax + 8], ebx
je 0x1003af73
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x18]
xor ecx, ecx
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x18]
cmp eax, edx
setge cl
mov dword [ebp - 0x20], ecx
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x34], eax
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x1c]
neg eax
sbb eax, eax
xor ecx, ecx
neg eax
mov dword [ebp - 0x20], eax
mov eax, dword [ebp - 0x20]
cmp eax, 0x1832d748
setne cl
sub ecx, dword [ebp - 0x18]
mov dword [ebp - 0x48], ecx
mov dword [ebp - 0x34], esi
cmp dword [ebp - 0x34], ebx
jl 0x1003b083
mov ecx, dword [ebp - 0x34]
mov eax, dword [ebp - 0x1c4]
cmp dword [eax + ecx*4], ebx
je 0x1003afd3
cmp dword [ebp - 0x18], ebx
jne 0x1003b083
jmp 0x1003b04f
mov dword [ebp - 0x44], 6
lea ecx, [ebp - 0x34c]
push edi
call fcn.10001fe6
mov byte [ebp - 4], 0x22
mov dword [ebp - 0xbc], ebx
jmp 0x1003b005
mov eax, dword [ebp - 0xbc]
mov dword [ebp + eax*4 - 0x64c], esi
inc dword [ebp - 0xbc]
cmp dword [ebp - 0xbc], edi
jl 0x1003aff2
push ecx
lea eax, [ebp - 0x34c]
push eax
push 1
lea edx, [ebp - 0xbc]
call fcn.100373f5
add esp, 0xc
lea eax, [ebp - 0x34c]
xor cl, cl
push 0x11b0
push 0x2e85
push eax
call fcn.1003888c
add esp, 0xc
mov byte [ebp - 4], 0x21
lea ecx, [ebp - 0x34c]
call fcn.10002048
mov dword [ebp - 0x38], ebx
cmp dword [ebp - 0x38], 0xd
jl 0x1003b07a
sub esp, 0xc
mov edx, 0x3174
mov ecx, 0x5a1d
push 1
call fcn.100378dd
add esp, 0x10
inc dword [ebp - 0x38]
cmp dword [ebp - 0x38], 0xd
jge 0x1003b058
xor ebx, ebx
dec dword [ebp - 0x34]
jns 0x1003afba
lea ecx, [ebp - 0x1c4]
mov byte [ebp - 4], 0x20
call fcn.10002048
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 0x17
je 0x1003aebd
push ebx
push 0x6dc4
lea ecx, [ebp - 0x81]
mov byte [ebp - 0x81], bl
call fcn.10038e07
or dword [ebp - 4], 0xffffffff
pop ecx
pop ecx
lea ecx, [ebp - 0x3e0]
call fcn.10002048
mov eax, dword [ebp - 0x40]
dec eax
cmp eax, 0x273c
ja 0x1003d23d
mov dword [ebp - 0x18], 0xfffffffb
mov dword [ebp - 0xc8], 0xffffffff
mov dword [ebp - 0xe8], 0xffffffff
mov dword [ebp - 0x1c], ebx
jmp 0x1003b107
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0x1a4], 0xfffffffc
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 4
jl 0x1003b0f6
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x19c], eax
mov ecx, dword [ebp - 0x18]
imul ecx, dword [ebp - 0x18]
cmp eax, 8
sbb eax, eax
xor edx, edx
neg eax
cmp ecx, eax
mov eax, dword [ebp - 0x18]
setl dl
xor ecx, ecx
cmp eax, edx
setge cl
cmp ecx, dword [ebp - 0x18]
jl 0x1003b140
mov eax, dword [ebp - 0x1a0]
mov eax, dword [ebp - 0x18]
mov edx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x18]
neg edx
sbb edx, edx
xor ecx, ecx
neg edx
cmp eax, edx
setg cl
mov dword [ebp - 0xc8], ecx
cmp dword [ebp - 0xc8], ebx
je 0x1003b314
mov dword [ebp - 0x80], 0xf86f25db
mov dword [ebp - 0x30], 0x2316
cmp dword [ebp - 0x30], 0x23d8
jle 0x1003b1e5
push ebx
push ebx
push 0x260f
push ebx
push 0x10d2
push ebx
push 0x217
push ebx
call dword [sym.imp.KERNEL32.dll_DeviceIoControl]
mov edi, ebx
mov dword [ebp - 0x20], ebx
mov esi, ebx
mov eax, edi
mov dword [ebp - 0x48], ebx
cdq
idiv esi
mov edi, dword [ebp - 0x48]
mov ebx, edx
mov eax, ebx
mov ecx, 0x100788d8
cdq
idiv edi
mov eax, edx
cdq
push edx
push eax
call fcn.10001e5c
inc edi
cmp edi, 0x4962
jl 0x1003b1ad
mov edi, dword [ebp - 0x20]
inc esi
push 0
pop ebx
cmp esi, 0x1a8f
jl 0x1003b1a0
inc edi
mov dword [ebp - 0x20], edi
cmp edi, 0x6d9c
jl 0x1003b19e
mov dword [ebp - 0x250], 1
mov dword [ebp - 4], 0x23
cmp dword [ebp - 0x30], 0x2196
jge 0x1003b20e
mov edx, str.sbd_kwaolb_ymmfd_qam
mov ecx, 0x100788d8
call fcn.10003d65
or dword [ebp - 4], 0xffffffff
push ecx
push 0x688
lea eax, [ebp - 0x80]
mov edx, 0x6838
push eax
lea eax, [ebp - 0xc8]
push eax
lea eax, [ebp - 0x250]
push eax
push ebx
push ecx
call fcn.1003846b
add esp, 0x1c
mov dword [ebp - 0x80], ebx
cmp dword [ebp - 0x80], 0x33
jl 0x1003b32b
xor edi, edi
inc edi
mov dword [ebp - 0x28], 0xc1979116
mov dword [ebp - 0x1c], ebx
jmp 0x1003b284
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0x294], edi
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 2
jl 0x1003b277
dec dword [ebp - 0x290]
xor edx, edx
mov esi, dword [ebp - 0x290]
mov ecx, dword [ebp - 0x28]
mov eax, dword [ebp - 0x28]
cmp ecx, eax
mov eax, dword [ebp - 0x28]
setg dl
xor ecx, ecx
cmp esi, 0xfffffffa
sete cl
sub ecx, edx
xor edx, edx
cmp ecx, eax
mov eax, dword [ebp - 0x1a4]
setne dl
xor ecx, ecx
cmp edx, eax
setg cl
mov dword [ebp - 0xe8], ecx
cmp dword [ebp - 0x18], 0xffff
mov eax, dword [ebp - 0x18]
sbb ecx, ecx
xor edx, edx
neg ecx
cmp ecx, eax
mov ecx, dword [ebp - 0x80]
mov eax, dword [ebp - 0xe8]
setl dl
mov dword [ebp - 0x48], edx
xor edx, edx
cmp eax, ecx
setne dl
xor eax, eax
cmp dword [ebp - 0x48], edx
setge al
sub eax, 0x4c6710ac
mov dword [ebp - 0x19c], eax
inc dword [ebp - 0x80]
cmp dword [ebp - 0x80], 0x33
jge 0x1003b249
jmp 0x1003b32b
push ebx
push ecx
lea eax, [ebp - 0xe8]
push eax
push 0x52b8
push ecx
call fcn.10038372
add esp, 0x14
mov eax, dword [ebp - 0xe8]
mov ecx, 0x98a597fb
mov eax, dword [ebp - 0x1a4]
mov eax, dword [ebp - 0x1a4]
cmp ecx, eax
sbb eax, eax
xor ecx, ecx
neg eax
cmp eax, 0x53e8af80
mov eax, dword [ebp - 0x18]
setge cl
xor edx, edx
cmp ecx, eax
mov eax, dword [ebp - 0xc8]
setg dl
xor ecx, ecx
cmp edx, eax
setg cl
xor eax, eax
cmp ecx, 0x7bb5
setge al
cmp eax, 0xc6aa04d9
mov eax, dword [ebp - 0x18]
sbb ecx, ecx
xor edx, edx
neg ecx
cmp ecx, eax
setle dl
xor eax, eax
cmp edx, 0xc083
mov edx, dword [ebp - 0x40]
setge al
mov dword [ebp - 0x19c], eax
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x19c]
push dword [ebp - 0xa4]
mov dword [ebp - 0xc8], eax
push ecx
push dword [ebp - 0x118]
push 0x10075bc0
call fcn.10033eb2
add esp, 0x10
push ebx
push ecx
push 0x1044a7a4
push ecx
mov ecx, 0x15c9
call fcn.100388d7
add esp, 0x10
mov dword [ebp - 0xa8], ebx
push 2
pop esi
mov dword [ebp - 0x1c], esi
mov dword [ebp - 0x1c], 3
jmp 0x1003b3fd
mov dword [ebp - 0x48], 6
cmp dword [ebp - 0x48], ebx
jne 0x1003b403
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 0x10
jne 0x1003b3ee
push 1
xor dl, dl
xor cl, cl
call fcn.1003704c
mov dword [ebp - 0xc4], 0xfffffffd
mov dword [ebp - 0x258], 0x4173
mov dword [ebp - 0x260], 9
pop ecx
mov dword [ebp - 0x48], 0x10075bc4
mov dword [ebp - 0xc4], ebx
jmp 0x1003b45e
push 0xc3a
push ecx
mov byte [ebp - 0x85], bl
lea edx, [ebp - 0x85]
push 1
call fcn.100391a6
add esp, 0xc
dec dword [ebp - 0xc4]
cmp dword [ebp - 0xc4], 0xfffffff8
jle 0x1003b43c
push 0x1601
push ecx
push ecx
lea eax, [ebp - 0x258]
xor dl, dl
push eax
lea eax, [ebp - 0x260]
push eax
lea eax, [ebp - 0xc4]
push eax
call fcn.10038f7d
add esp, 0x18
mov dword [ebp - 0xc0], 1
lea ecx, [ebp - 0x3f0]
push esi
call fcn.10001fe6
lea eax, [ebp - 0x3f0]
mov dword [ebp - 4], 0x25
push eax
push 0x770a
push 0x430b
xor eax, eax
lea ecx, [ebp - 0x420]
inc eax
mov edx, 0x21c2
push eax
push 0x6121
push eax
push ecx
mov cl, al
call fcn.1003748b
add esp, 0x1c
xor eax, eax
inc eax
push 0x456f
push ecx
push 0x798e
push ecx
lea ecx, [ebp - 0xc0]
push eax
push ecx
mov cl, al
call fcn.10037508
xor ecx, ecx
mov dword [ebp - 0xc0], ebx
add esp, 0x18
inc ecx
jmp 0x1003b549
mov dword [ebp - 0x1c], ebx
jmp 0x1003b51d
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0x1d4], 0x37d45db3
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 3
jl 0x1003b50c
mov dword [ebp - 0x1d0], ebx
jmp 0x1003b53b
mov dword [ebp - 0x20], 0xe4fc2285
dec dword [ebp - 0x20]
inc dword [ebp - 0x1d0]
cmp dword [ebp - 0x1d0], ecx
jle 0x1003b52b
inc dword [ebp - 0xc0]
cmp dword [ebp - 0xc0], ecx
jle 0x1003b507
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x3f0]
call fcn.10002048
mov dword [ebp - 0xe0], ebx
lea ecx, [ebp - 0x304]
mov dword [ebp - 0x154], 0xfffffff6
mov dword [ebp - 0x2b0], 0x4ab274bf
push 4
call fcn.10001fe6
lea eax, [ebp - 0x140]
mov dword [ebp - 4], 0x26
push eax
push ebx
push 0x40d
push ecx
lea eax, [ebp - 0x304]
push eax
push ecx
mov ecx, 0x3c10
call fcn.10037302
add esp, 0x18
lea eax, [ebp - 0x154]
push 0x7808
push 1
push eax
lea eax, [ebp - 0xe0]
push eax
lea eax, [ebp - 0x2b0]
push eax
push ecx
call fcn.10038aa5
add esp, 0x18
mov dword [ebp - 0xe0], ebx
cmp dword [ebp - 0xe0], 3
jg 0x1003b76c
mov dword [ebp - 0xd0], 0x21a3
mov dword [ebp - 0x50], 0x2a1
cmp dword [ebp - 0x50], 0x646
jle 0x1003b663
mov dword [ebp - 0x28], ebx
mov dword [ebp - 0x4c], ebx
mov dword [ebp - 0x20], ebx
mov dword [ebp - 0x30], 0x1e07
mov esi, dword [ebp - 0x28]
mov edi, ebx
mov ebx, dword [ebp - 0x20]
mov eax, ebx
mov ecx, 0x100788d8
cdq
idiv edi
lea eax, [esi + edx]
cdq
push edx
push eax
call fcn.10001e5c
inc edi
cmp edi, 0x7c6
jl 0x1003b61b
mov esi, dword [ebp - 0x4c]
add ebx, esi
dec dword [ebp - 0x30]
push 0
mov dword [ebp - 0x20], ebx
pop ebx
jne 0x1003b613
inc esi
mov dword [ebp - 0x4c], esi
cmp esi, 0x6cef
jl 0x1003b609
mov eax, dword [ebp - 0x28]
inc eax
mov dword [ebp - 0x28], eax
cmp eax, 0x678f
jl 0x1003b606
xor eax, eax
lea ecx, [ebp - 0xd0]
inc eax
push eax
push 0x52a8
push eax
push 0x68c8
push 0x6a1
mov dl, al
call fcn.10037551
add esp, 0x14
mov byte [ebp - 4], 0x27
cmp dword [ebp - 0x50], 0xc8
jge 0x1003b6c1
mov edx, str.zajl_gjicak_wadp_dhroevxi_wgmhdcwif_looolhr_ccuf_tcxuegw_kvblgoama_mevedv_lwtyvuidj
mov ecx, 0x100788d8
call fcn.10003d65
jmp 0x1003b6c1
xor eax, eax
mov dword [ebp - 4], 0x26
inc eax
mov dword [ebp - 0xd0], 3
cmp dword [ebp - 0xd0], ebx
jl 0x1003b761
jmp 0x1003b6e6
xor eax, eax
inc eax
push 0x4dc6
push 0x5536
lea ecx, [ebp - 0x304]
mov edx, 0x9fd
push ecx
push ebx
push eax
push 0x389f
lea ecx, [ebp - 0x154]
push 0x2379
push ecx
mov cl, al
call fcn.10037737
push 0x707d
push 0x5d4
push 0x5a31
push 0x70ca
push ebx
xor eax, eax
mov byte [ebp - 0x90], bl
inc eax
lea ecx, [ebp - 0x90]
push eax
push 0x3329
push 0x1920
push ecx
push eax
mov edx, 0x7184
mov ecx, 0x226d
call fcn.10037f34
add esp, 0x48
dec dword [ebp - 0xd0]
jns 0x1003b6e3
inc dword [ebp - 0xe0]
jmp 0x1003b5dc
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x304]
call fcn.10002048
mov byte [ebp - 0x70], bl
mov dword [ebp - 0x6f], 0x149b02af
mov dword [ebp - 0x20], 0x3bfb
cmp dword [ebp - 0x20], 0x3c6e
jle 0x1003b7fb
push ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_SystemTimeToTzSpecificLocalTime]
mov ecx, ebx
mov dword [ebp - 0x24], ebx
mov edi, ebx
mov esi, ebx
mov eax, esi
and eax, edi
or eax, ecx
lea ecx, [ebp - 0x5b0]
cdq
push edx
push eax
call fcn.10001a75
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x1003b7c5
mov eax, dword [eax]
push eax
call fcn.10047084
pop ecx
push ebx
push 1
lea ecx, [ebp - 0x5b0]
call fcn.10002352
mov ecx, dword [ebp - 0x24]
inc esi
cmp esi, 0x4f1f
jl 0x1003b7a7
inc edi
cmp edi, 0x5eb9
jl 0x1003b7a5
inc ecx
mov dword [ebp - 0x24], ecx
cmp ecx, 0x6fad
jl 0x1003b7a3
xor eax, eax
inc eax
push eax
push ecx
mov dword [ebp - 0x44], eax
lea ecx, [ebp - 0x76]
mov byte [ebp - 0x76], bl
call fcn.10037704
add esp, 4
mov byte [ebp - 0x84], bl
lea eax, [ebp - 0x84]
xor cl, cl
push eax
call fcn.100350df
cmp dword [ebp - 0x20], 0x3bad
pop ecx
pop ecx
jge 0x1003b83b
push str.wqn_rwpio_ecsrf_lkcmnoqk_dbdg_uam_veeu_sdsm_gclgcsd_fjq_hsyobu_spnvsxixx
call fcn.10047084
pop ecx
or dword [ebp - 4], 0xffffffff
push 0xa
pop eax
mov word [ebp - 0xd4], ax
mov dword [ebp - 0x30], 0x38c6
cmp dword [ebp - 0x30], 0x3aa0
jle 0x1003b895
mov esi, ebx
mov dword [ebp - 0x20], ebx
mov edi, esi
mov esi, 0xb34
mov eax, edi
mov ecx, 0x100788d8
cdq
push edx
push eax
call fcn.10001e5c
dec edi
dec esi
jne 0x1003b865
mov esi, dword [ebp - 0x20]
inc esi
mov dword [ebp - 0x20], esi
cmp esi, 0x296c
jl 0x1003b85e
push ebx
push ebx
push 0x1cad
push ebx
call dword [sym.imp.KERNEL32.dll_GetFullPathNameW]
mov dword [ebp - 4], 0x2b
cmp dword [ebp - 0x30], 0x375d
jge 0x1003b8d2
mov edx, str.prec_ilt_twof
mov ecx, 0x100788d8
call fcn.10003d65
jmp 0x1003b8d2
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x1e4]
push dword [ebp - 0x140]
movdqa xmm0, xmmword [0x1006c4a0]
xor eax, eax
inc eax
mov dword [ebp - 0x18], 0x950ba1bf
mov dword [ebp - 0x2c], eax
lea eax, [ebp - 0x4f0]
push eax
lea eax, [ebp - 0x500]
mov dword [ebp - 0x34], 0xd7ba9668
push eax
push ebx
movdqu xmmword [ebp - 0x500], xmm0
mov dword [ebp - 0x1e4], ebx
mov dword [ebp - 0x1e0], ebx
mov dword [ebp - 0x1dc], ebx
call fcn.100046f5
mov dword [ebp - 4], 0x2d
mov dword [ebp - 0x30], 0xd60
mov dword [ebp - 0x20], 0xee7b
mov dword [ebp - 0x1c], ebx
jmp 0x1003b957
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0x124], 9
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 2
jl 0x1003b946
cmp dword [ebp - 0x18], ebx
jne 0x1003b9b6
dec dword [ebp - 0x2c]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x34]
mov eax, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x1e4]
cmp dword [eax + 8], ebx
je 0x1003b982
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x18]
xor ecx, ecx
mov eax, dword [ebp - 0x120]
mov eax, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x124]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x124]
mov eax, dword [ebp - 0x34]
mov eax, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x2c]
cmp eax, 8
setge cl
neg ecx
jne 0x1003b9b6
mov edx, ebx
jmp 0x1003b9b9
xor edx, edx
inc edx
mov eax, dword [ebp - 0x18]
xor ecx, ecx
cmp edx, eax
setl cl
xor eax, eax
cmp ecx, 0x8d88
setle al
cmp eax, 0x6d00
jle 0x1003ba1e
mov dword [ebp - 0x24], 0xb3027fe1
mov dword [ebp - 0x20], ebx
cmp dword [ebp - 0x24], ebx
jne 0x1003b9f2
mov eax, dword [ebp - 0x24]
imul eax, dword [ebp - 0x120]
test eax, eax
je 0x1003b9f5
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0x30]
xor edx, edx
mov dword [ebp - 0x124], 0xd567
mov ecx, dword [ebp - 0x24]
mov eax, dword [ebp - 0x34]
cmp eax, ecx
mov eax, dword [ebp - 0x18]
setle dl
xor ecx, ecx
cmp edx, eax
setl cl
mov dword [ebp - 0x20], ecx
jmp 0x1003ba6e
mov dword [ebp - 0x24], 1
mov dword [ebp - 0x30], 0xa56d104a
cmp dword [ebp - 0x24], ebx
je 0x1003ba76
push 2
pop ecx
mov dword [ebp - 0x20], ecx
mov dword [ebp - 0x1c], ebx
jmp 0x1003ba4d
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0x444], 0x6eaa9bed
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], ecx
jl 0x1003ba3c
mov dword [ebp - 0x34], ebx
jmp 0x1003ba68
cmp dword [ebp - 0x20], ebx
jne 0x1003ba6e
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x444], eax
inc dword [ebp - 0x34]
cmp dword [ebp - 0x34], 0x28
jge 0x1003ba57
xor edi, edi
inc edi
jmp 0x1003bb3b
mov dword [ebp - 0x28], 0xfff8
mov dword [ebp - 0x18], ebx
cmp dword [ebp - 0x18], 0x16
jge 0x1003bb35
push 2
lea ecx, [ebp - 0x310]
call fcn.10001fe6
mov byte [ebp - 4], 0x2e
mov dword [ebp - 0x1c], ebx
jmp 0x1003bab3
mov ecx, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x310]
mov dword [eax + ecx*4], 0xfffffffc
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 2
jl 0x1003baa0
push ecx
push 0x2a5e
mov cl, 1
call fcn.100350df
mov eax, dword [ebp - 0x24]
xor edi, edi
mov eax, dword [ebp - 0x28]
xor edx, edx
mov eax, dword [ebp - 0x24]
inc edi
mov eax, dword [ebp - 0x24]
cmp eax, edi
mov eax, dword [ebp - 0x310]
setg dl
pop ecx
pop ecx
xor ecx, ecx
cmp edx, dword [eax + 4]
mov eax, dword [ebp - 0x28]
setg cl
cmp ecx, 0xa62e52ab
sbb edx, edx
xor ecx, ecx
neg edx
cmp edx, eax
setge cl
cmp dword [ebp - 0x28], ecx
je 0x1003bb08
mov eax, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x124]
lea ecx, [ebp - 0x310]
inc eax
cmp eax, edi
sbb eax, eax
inc eax
mov dword [ebp - 0x30], eax
mov byte [ebp - 4], 0x2d
call fcn.10002048
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 0x16
jl 0x1003ba8a
jmp 0x1003bb38
xor edi, edi
inc edi
dec dword [ebp - 0x20]
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x1e4]
call fcn.10002048
push 2
pop edx
mov esi, edx
mov dword [ebp - 0x114], ebx
mov dword [ebp - 0x34], esi
cmp esi, 5
jae 0x1003c5e9
mov dword [ebp - 0x18], ebx
mov dword [ebp - 0x38], 0xffffffff
mov dword [ebp - 0x1b8], 0xfffffff8
mov dword [ebp - 0x1c], ebx
jmp 0x1003bb8b
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0x2d0], 0xfffffffa
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 3
jl 0x1003bb7a
mov dword [ebp - 0x18], ebx
cmp dword [ebp - 0x18], edx
jg 0x1003bceb
push dword [ebp - 0x140]
movdqa xmm0, xmmword [0x1006c510]
lea eax, [ebp - 0x4d0]
push eax
lea eax, [ebp - 0x4e0]
mov dword [ebp - 0x1f4], ebx
push eax
push ebx
lea ecx, [ebp - 0x1f4]
mov dword [ebp - 0x1f0], ebx
movdqu xmmword [ebp - 0x4e0], xmm0
mov dword [ebp - 0x1ec], ebx
call fcn.100046f5
mov dword [ebp - 4], 0x2f
mov esi, dword [ebp - 0x1f4]
mov dword [ebp - 0x30], 7
mov dword [ebp - 0x44], 0x28694a21
mov dword [ebp - 0x418], 2
mov dword [esi + 4], ebx
mov eax, dword [esi + 4]
mov dword [ebp - 0x28], 0xb263d188
mov dword [ebp - 0x20], 0xffffffff
cmp dword [ebp + eax*4 - 0x2d0], ebx
je 0x1003bc7d
mov eax, dword [esi + 4]
xor edx, edx
mov eax, dword [ebp + eax*4 - 0x2d0]
mov eax, dword [esi + 4]
mov eax, dword [ebp + eax*4 - 0x2d0]
mov dword [ebp - 0x38], eax
mov eax, dword [ebp - 0x38]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp + eax*4 - 0x2d0]
mov eax, dword [ebp - 0x18]
cmp dword [esi + 4], eax
setle dl
inc dword [ebp - 0x28]
mov eax, dword [ebp - 0x1b8]
xor ecx, ecx
sub edx, eax
mov eax, dword [ebp - 0x18]
cmp eax, edx
mov eax, dword [ebp - 0x28]
setg cl
xor edx, edx
cmp ecx, 0xfffffff7
setle dl
sub eax, edx
cmp edi, eax
sbb eax, eax
inc eax
mov dword [ebp - 0x20], eax
mov eax, dword [ebp - 0x20]
push 0x54fc
lea eax, [ebp - 0x92]
mov byte [ebp - 0x92], bl
push eax
push 0x4eae
xor eax, eax
mov edx, 0x7134
inc eax
push eax
push eax
push 0x31cd
push 0x18f6
push 0xa5d
mov cl, al
call fcn.10037737
add esp, 0x20
dec dword [ebp - 0x30]
inc dword [esi + 4]
cmp dword [esi + 4], 2
push 1
pop edi
jle 0x1003bc07
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x1f4]
call fcn.10002048
inc dword [ebp - 0x18]
push 2
pop edx
cmp dword [ebp - 0x18], edx
jle 0x1003bb9d
mov esi, dword [ebp - 0x34]
mov dword [ebp - 0x38], ebx
jmp 0x1003bd0f
mov dword [ebp - 0x18], edx
cmp dword [ebp - 0x18], ebx
jl 0x1003bd0c
push ecx
push 1
call fcn.100389c3
dec dword [ebp - 0x18]
pop ecx
pop ecx
jns 0x1003bcf8
push 2
xor ebx, ebx
pop edx
inc dword [ebp - 0x38]
cmp dword [ebp - 0x38], edx
jle 0x1003bcf0
movzx eax, byte [ebp - 0x70]
lea eax, [eax*2 + 2]
cmp esi, eax
jne 0x1003c299
mov dword [ebp - 0x44], edx
lea ecx, [ebp - 0x410]
mov dword [ebp - 0x44], 0x335c22c9
mov dword [ebp - 0x1c], 0xbf35dd75
push 1
call fcn.10001fe6
mov dword [ebp - 4], 0x32
lea ecx, [ebp - 0x400]
mov dword [ebp - 0x44], 0x2f00
push 2
call fcn.10001fe6
mov byte [ebp - 4], 0x33
mov dword [ebp - 0x28], 0x1c45
cmp dword [ebp - 0x28], 0x1c59
jle 0x1003bdfe
mov edi, ebx
mov dword [ebp - 0x30], ebx
mov esi, ebx
mov dword [ebp - 0x20], ebx
mov ecx, esi
mov dword [ebp - 0x4c], edi
mov esi, edi
mov dword [ebp - 0x50], ebx
shl esi, cl
mov edi, ebx
mov ecx, edi
mov eax, esi
shl eax, cl
mov ecx, 0x100788d8
cdq
push edx
push eax
call fcn.10001e5c
inc edi
cmp edi, 0x192b
jl 0x1003bd90
mov esi, dword [ebp - 0x20]
mov edi, dword [ebp - 0x30]
inc esi
mov dword [ebp - 0x20], esi
cmp esi, 0x2a63
jl 0x1003bd82
inc edi
mov dword [ebp - 0x30], edi
cmp edi, 0x209c
jl 0x1003bd7d
push ebx
push 0x191b
push 0x1a93
push 0x2456
push 0x1444
push 0x11b9
push 0x10b7
push 0x114b
push 0x1377
push ebx
push ebx
call dword [sym.imp.ADVAPI32.dll_AllocateAndInitializeSid]
mov esi, dword [ebp - 0x34]
mov dword [ebp - 0x44], 0xfffffff7
mov byte [ebp - 4], 0x34
cmp dword [ebp - 0x28], 0x1a7c
jge 0x1003be42
mov edx, str.fhfb_bqfuxst_xalkvate_ulktbyf_qjtdwlx_tuirvivi_ldtatuen_anwkjtr_tcmgfgba
mov ecx, 0x100788d8
call fcn.10003d65
jmp 0x1003be42
xor ecx, ecx
mov dword [ebp - 4], 0x33
inc ecx
mov dword [ebp - 0x74], ebx
jmp 0x1003be62
mov eax, dword [ebp - 0x74]
mov dword [ebp + eax*4 - 0x2ec], 8
inc dword [ebp - 0x74]
cmp dword [ebp - 0x74], 2
jl 0x1003be51
lea eax, [ebp - 0x410]
mov edx, 0x39c6
push eax
push 0x1397
push 0x3db8
push ecx
push ecx
push 0x7465
lea eax, [ebp - 0x74]
xor cl, cl
push eax
push 0x5bde
call fcn.10037737
xor eax, eax
lea ecx, [ebp - 0x74]
inc eax
mov edx, 0x50ae
push eax
push ecx
push 0x3a3e
lea ecx, [ebp - 0x400]
push ebx
push ecx
mov cl, al
call fcn.100371cd
mov dword [ebp - 0x20], 6
add esp, 0x34
mov dword [ebp - 0x1c], ebx
cmp dword [ebp - 0x1c], 0xfffffff4
jl 0x1003bf07
xor ebx, ebx
inc ebx
mov ecx, dword [ebp - 0x2e8]
xor edx, edx
mov eax, dword [ebp - 0x20]
cmp ecx, eax
push ebx
setg dl
mov ecx, 0x18af
push ebx
mov dword [ebp - 0x2e8], edx
mov edx, 0x7b53
push 0x1caf
push ebx
call fcn.10037b88
add esp, 0x10
dec dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 0xfffffff4
jge 0x1003becc
xor ebx, ebx
lea ecx, [ebp - 0x400]
call fcn.10002048
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x410]
call fcn.10002048
movzx eax, byte [ebp + esi - 0x70]
lea ecx, [ebp - 0x214]
inc eax
mov dword [ebp - 0x114], eax
mov dword [ebp - 0x2c], ebx
mov dword [ebp - 0x2ac], 0xe9bf9f36
push 2
call fcn.10001fe6
push 2
lea ecx, [ebp - 0x204]
mov dword [ebp - 4], 0x37
call fcn.10001fe6
push 0x43c0
lea eax, [ebp - 0x214]
mov byte [ebp - 4], 0x38
push eax
push 0x355b
push 0x3ddf
xor eax, eax
lea edx, [ebp - 0xb8]
inc eax
mov ecx, 0x46e1
push eax
push eax
push 0x4aed
push 0x9f
push 0x5cd6
push eax
call fcn.10037f34
add esp, 0x28
mov dword [ebp - 0xb8], ebx
jmp 0x1003bfbb
mov ecx, dword [ebp - 0xb8]
mov eax, dword [ebp - 0x204]
or dword [eax + ecx*4], 0xffffffff
inc dword [ebp - 0xb8]
cmp dword [ebp - 0xb8], 2
jl 0x1003bfa5
cmp dword [ebp - 0x2c], ebx
je 0x1003c11d
mov dword [ebp - 0x268], 0xca0029bf
lea ecx, [ebp - 0x328]
push 1
call fcn.10001fe6
xor edx, edx
mov byte [ebp - 4], 0x39
mov dword [ebp - 0x1c], ebx
inc edx
jmp 0x1003c003
mov ecx, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x328]
mov dword [eax + ecx*4], 0x8bea1220
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], edx
jl 0x1003bff0
push edx
push edx
push 0x14b6
push 0x64be
mov byte [ebp - 0x7a], bl
lea edx, [ebp - 0x7a]
push 0x71a6
mov cl, 1
call fcn.10038190
mov dword [ebp - 0x30], 0xfe9
add esp, 0x14
cmp dword [ebp - 0x30], 0x1165
jle 0x1003c0a8
mov eax, ebx
mov dword [ebp - 0x28], ebx
mov edi, ebx
mov dword [ebp - 0x20], ebx
mov ecx, edi
mov esi, ebx
and ecx, eax
mov dword [ebp - 0x4c], ecx
mov edi, ebx
mov ebx, dword [ebp - 0x4c]
mov ecx, edi
mov eax, esi
shl eax, cl
mov ecx, 0x100788d8
xor eax, ebx
cdq
push edx
push eax
call fcn.10001e5c
inc edi
cmp edi, 0x1821
jl 0x1003c051
inc esi
push 0
pop ebx
cmp esi, 0x7f02
jl 0x1003c04c
mov edi, dword [ebp - 0x20]
mov eax, dword [ebp - 0x28]
inc edi
mov dword [ebp - 0x20], edi
cmp edi, 0x5e6
jl 0x1003c043
inc eax
mov dword [ebp - 0x28], eax
cmp eax, 0x268c
jl 0x1003c03e
push ebx
push 0x723
push ebx
call dword [sym.imp.ADVAPI32.dll_StartServiceW]
mov esi, dword [ebp - 0x34]
push ecx
lea eax, [ebp - 0x328]
push eax
push 0x798c
push 0x51ed
push 0x6dc9
push 1
push ecx
lea edx, [ebp - 0x268]
call fcn.1003846b
add esp, 0x1c
mov byte [ebp - 4], 0x3a
cmp dword [ebp - 0x30], 0xcc6
jge 0x1003c10d
mov edx, str.kplv_oumkni_lbp_mpcwtrxs
mov ecx, 0x100788d8
call fcn.10003d65
jmp 0x1003c10d
lea ecx, [ebp - 0x328]
call fcn.10002048
jmp 0x1003c1fe
mov dword [ebp - 0x20], 0xffffffff
xor edx, edx
mov dword [ebp - 0x28], 0xffffffff
inc edx
mov dword [ebp - 0x2c], ebx
cmp dword [ebp - 0x2c], edx
jg 0x1003c1f1
mov dword [ebp - 0x20], 0xe326
mov ecx, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x214]
mov eax, dword [eax + ecx*4]
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], ebx
jne 0x1003c162
mov eax, dword [ebp - 0x204]
mov dword [ebp - 0x20], ebx
cmp dword [eax], ebx
je 0x1003c165
mov dword [ebp - 0x20], edx
mov ecx, dword [ebp - 0x2c]
xor edx, edx
mov esi, dword [ebp - 0x2c]
mov edi, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x214]
mov dword [ebp - 0x30], edi
mov edi, dword [ebp - 0x20]
cmp dword [eax + ecx*4], edi
mov edi, dword [ebp - 0x30]
setg dl
xor ecx, ecx
cmp edx, dword [eax + esi*4]
mov eax, dword [ebp - 0x28]
setg cl
mov dword [ebp - 0x20], ecx
xor ecx, ecx
cmp dword [ebp - 0x20], eax
mov eax, dword [ebp - 0x214]
sete cl
xor edx, edx
cmp ecx, dword [eax]
setne dl
add edx, dword [eax + edi*4]
mov eax, dword [ebp - 0x204]
add edx, dword [eax]
mov eax, dword [ebp - 0x28]
neg edx
sbb edx, edx
xor ecx, ecx
neg edx
sub edx, eax
mov eax, dword [ebp - 0x204]
cmp edx, 0x5cbf7935
setge cl
xor edx, edx
cmp ecx, dword [eax]
mov eax, dword [ebp - 0x28]
setle dl
imul eax, edx
xor edx, edx
inc edx
mov dword [ebp - 0x20], eax
inc dword [ebp - 0x2c]
cmp dword [ebp - 0x2c], edx
jle 0x1003c13a
mov esi, dword [ebp - 0x34]
push edx
lea edx, [ebp - 0x75]
mov byte [ebp - 0x75], bl
call fcn.100385d8
pop ecx
lea ecx, [ebp - 0x204]
call fcn.10002048
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x214]
call fcn.10002048
mov dword [ebp - 0x20], 0xfeb
cmp dword [ebp - 0x20], 0x13a1
jle 0x1003c274
mov edi, ebx
mov esi, ebx
mov ecx, esi
mov eax, edi
shl eax, cl
lea ecx, [ebp - 0x5e0]
cdq
push edx
push eax
call fcn.10001a75
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x1003c24a
mov eax, dword [eax]
push eax
call fcn.10047084
pop ecx
push ebx
push 1
lea ecx, [ebp - 0x5e0]
call fcn.10002352
inc esi
cmp esi, 0x36c2
jl 0x1003c22c
inc edi
cmp edi, 0x3c33
jl 0x1003c22a
mov esi, dword [ebp - 0x34]
movzx eax, byte [ebp + esi - 0x70]
dec esi
add esi, eax
cmp dword [ebp - 0x20], 0xd52
jge 0x1003c290
push str.pxdxajd_vki_sfwas_vzhp_xhj_tzvs_sooc_gbtupryrg_teouef_wfm
call fcn.10047084
pop ecx
or dword [ebp - 4], 0xffffffff
jmp 0x1003c5dc
movzx edx, byte [ebp + esi - 0x6f]
mov eax, esi
sub eax, dword [ebp - 0x114]
movzx eax, byte [ebp + eax - 0x72]
movzx ecx, word [ebp + eax*2 - 0xd4]
mov eax, ecx
and eax, edx
add eax, eax
sub ecx, eax
movzx eax, byte [ebp + esi - 0x70]
add ecx, edx
mov word [ebp + eax*2 - 0xd4], cx
xor ecx, ecx
mov dword [ebp - 0x1c], 0xffffffff
inc ecx
mov dword [ebp - 0x34], 0x4b13281d
mov dword [ebp - 0x24], 5
mov dword [ebp - 0x1c], ebx
jmp 0x1003c2f1
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0x60], ecx
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], ecx
jl 0x1003c2e7
mov dword [ebp - 0x1c], ebx
jmp 0x1003c5a1
mov dword [ebp - 0x18], 0x8f8256a9
mov dword [ebp - 0x2c], ebx
mov dword [ebp - 0x30], 0xfffb
mov dword [ebp - 0x28], ebx
mov dword [ebp - 0x20], 0x9000
mov dword [ebp - 0x58], 0xffffffff
mov dword [ebp - 0x18], ebx
jmp 0x1003c50c
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp + eax*4 - 0x60]
sub eax, dword [ebp - 0x18]
mov dword [ebp - 0x2c], eax
mov eax, dword [ebp - 0x2c]
mov dword [ebp - 0x34], eax
mov dword [ebp - 0x34], 0xb
cmp dword [ebp - 0x34], 0x10
jg 0x1003c509
push ecx
mov dword [ebp - 0x38], 0xfffffffe
lea ecx, [ebp - 0x2dc]
call fcn.10001fe6
mov dword [ebp - 4], 0x3e
xor edx, edx
mov dword [ebp - 0x144], ebx
inc edx
mov dword [ebp - 0x2c], ebx
jmp 0x1003c384
mov ecx, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x2dc]
or dword [eax + ecx*4], 0xffffffff
inc dword [ebp - 0x2c]
cmp dword [ebp - 0x2c], edx
jl 0x1003c374
cmp dword [ebp - 0x38], ebx
jge 0x1003c393
cmp dword [ebp - 0x1c], ebx
je 0x1003c3f3
cmp dword [ebp - 0x34], ebx
je 0x1003c3f3
mov dword [ebp - 0x20], edx
mov eax, dword [ebp - 0x20]
sub eax, dword [ebp - 0x38]
mov edx, dword [ebp - 0x20]
neg eax
sbb eax, eax
inc eax
sub edx, eax
mov eax, dword [ebp - 0x38]
neg edx
sbb edx, edx
neg eax
inc edx
xor ecx, ecx
cmp eax, edx
setg cl
xor edx, edx
add ecx, dword [ebp - 0x38]
mov eax, dword [ebp - 0x30]
cmp ecx, eax
mov eax, dword [ebp - 0x18]
setge dl
mov dword [ebp - 0x20], edx
xor edx, edx
mov ecx, dword [ebp + eax*4 - 0x60]
mov eax, dword [ebp - 0x30]
cmp ecx, eax
setge dl
xor eax, eax
cmp edx, dword [ebp - 0x20]
setge al
mov dword [ebp - 0x24], eax
mov eax, dword [ebp - 0x24]
mov dword [ebp - 0x2c], eax
jmp 0x1003c4ea
mov dword [ebp - 0x4c], 0x4eb0a117
mov dword [ebp - 0x2c], 6
cmp dword [ebp - 0x2c], 0xfffffffa
jge 0x1003c4cd
push 0x14f3
push edx
push 0x1e2c
push edx
lea eax, [ebp - 0x77]
mov dword [ebp - 0x50], 0x336ae3d4
mov byte [ebp - 0x77], bl
mov ecx, 0x6574
push eax
call fcn.100386ef
add esp, 0x14
inc dword [ebp - 0x50]
mov eax, dword [ebp - 0x4c]
cmp dword [ebp - 0x4c], ebx
je 0x1003c468
cmp dword [ebp - 0x30], 0x6396
je 0x1003c453
mov eax, dword [ebp - 0x18]
cmp dword [ebp + eax*4 - 0x60], ebx
jne 0x1003c453
mov eax, ebx
jmp 0x1003c456
xor eax, eax
inc eax
dec eax
je 0x1003c45c
mov eax, dword [ebp - 0x38]
cmp dword [ebp - 0x18], ebx
je 0x1003c468
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp + eax*4 - 0x60]
mov eax, dword [ebp - 0x38]
xor edx, edx
mov eax, dword [ebp - 0x28]
xor ecx, ecx
mov eax, dword [ebp - 0x38]
inc edx
mov eax, dword [ebp - 0x50]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp + eax*4 - 0x60]
cmp eax, edx
sete cl
cmp ecx, dword [ebp - 0x24]
je 0x1003c48f
cmp dword [ebp - 0x50], ebx
jne 0x1003c491
mov edx, ebx
mov ecx, dword [ebp - 0x60]
mov eax, dword [ebp - 0x2dc]
sub ecx, edx
neg ecx
push 1
sbb ecx, ecx
xor edx, edx
inc ecx
mov dword [eax], ecx
mov eax, dword [ebp - 0x4c]
cmp ecx, eax
mov eax, dword [ebp - 0x4c]
setge dl
xor ecx, ecx
cmp edx, eax
pop edx
setl cl
mov dword [ebp - 0x144], ecx
dec dword [ebp - 0x2c]
cmp dword [ebp - 0x2c], 0xfffffffa
jl 0x1003c40b
lea eax, [ebp - 0x2dc]
mov cl, dl
push eax
lea eax, [ebp - 0x144]
push eax
push 0x622a
call fcn.1003888c
add esp, 0xc
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x2dc]
call fcn.10002048
inc dword [ebp - 0x34]
cmp dword [ebp - 0x34], 0x10
push 1
pop ecx
jle 0x1003c34c
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], ebx
jle 0x1003c328
mov eax, dword [ebp - 0x2c]
xor ecx, ecx
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0x2c]
mov edx, dword [ebp - 0x28]
mov eax, dword [ebp - 0x18]
sub edx, 0xb60a
cmp edx, eax
setle cl
mov dword [ebp - 0x34], ecx
xor ecx, ecx
mov eax, dword [ebp - 0x34]
mov dword [ebp - 0x20], eax
mov eax, dword [ebp - 0x18]
cmp ecx, eax
mov eax, dword [ebp - 0x60]
sbb ecx, ecx
xor edx, edx
inc ecx
cmp eax, ecx
mov eax, dword [ebp - 0x58]
setne dl
xor ecx, ecx
cmp edx, eax
setge cl
sub ecx, dword [ebp - 0x60]
mov eax, dword [ebp - 0x28]
neg ecx
sbb ecx, ecx
inc ecx
mov dword [ebp - 0x58], ecx
xor ecx, ecx
cmp dword [ebp - 0x58], eax
mov eax, dword [ebp - 0x1c]
setle cl
add eax, 0x9ad7
add ecx, eax
xor edx, edx
mov eax, dword [ebp - 0x18]
cmp ecx, eax
setne dl
cmp edx, dword [ebp - 0x24]
jne 0x1003c596
cmp dword [ebp - 0x60], ebx
je 0x1003c596
xor ecx, ecx
inc ecx
mov eax, ecx
jmp 0x1003c59b
xor ecx, ecx
mov eax, ebx
inc ecx
mov dword [ebp - 0x2c], eax
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 0x15
jle 0x1003c2fe
push ecx
push ecx
push 0x1d72
push ecx
lea ecx, [ebp - 0x79]
mov byte [ebp - 0x79], bl
call fcn.100388d7
pop ecx
pop ecx
push 1
push ecx
push 0x4bc6
push 0x1577
push ecx
lea ecx, [ebp - 0x114]
call fcn.1003893c
add esp, 0x1c
push 2
pop edx
xor edi, edi
add esi, edx
inc edi
jmp 0x1003bb55
xor ecx, ecx
inc ecx
mov dword [ebp - 0xcc], ecx
mov dword [ebp - 0x20], 0xfffffffb
mov dword [ebp - 0x50], ebx
mov dword [ebp - 0x28], 0xfffffffc
mov dword [ebp - 0x30], edx
mov dword [ebp - 0x4c], 7
mov dword [ebp - 0x24], ebx
jmp 0x1003c623
mov eax, dword [ebp - 0x24]
mov dword [ebp + eax*4 - 0x274], 0x8d303f02
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], ecx
jl 0x1003c612
lea eax, [ebp - 0xcc]
mov dl, cl
push eax
push 0x541e
push ecx
call fcn.10034deb
mov eax, dword [ebp - 0x4c]
xor ecx, ecx
mov dword [ebp - 0x274], ebx
add esp, 0xc
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x20]
cmp eax, 0xa6f9
mov eax, dword [ebp - 0x30]
setne cl
xor edx, edx
cmp ecx, 0x1f06
setg dl
dec dword [ebp - 0x30]
cmp eax, edx
jle 0x1003c675
xor eax, eax
inc eax
jmp 0x1003c677
mov eax, ebx
cmp eax, dword [ebp - 0xcc]
je 0x1003c682
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0xcc]
lea ecx, [ebp - 0x3a0]
mov eax, dword [ebp - 0xcc]
mov eax, dword [ebp - 0xcc]
mov eax, dword [ebp - 0x4c]
mov eax, dword [ebp - 0x50]
mov eax, dword [ebp - 0x28]
xor eax, eax
mov dword [ebp - 0x50], 1
mov word [ebp - 0xd2], ax
mov word [ebp - 0x3a0], ax
lea eax, [ebp - 0xd4]
push eax
mov dword [ebp - 0x38c], 7
mov dword [ebp - 0x390], ebx
call fcn.1000945a
cmp dword [ebp - 0x38c], 8
lea eax, [ebp - 0x3a0]
push ebx
cmovae eax, dword [ebp - 0x3a0]
lea ecx, [ebp - 0x3a0]
push 1
movzx eax, word [eax]
mov dword [ebp - 0x234], eax
call fcn.100024be
mov dword [ebp - 0x28], 0x222e
cmp dword [ebp - 0x28], 0x2574
jle 0x1003c771
mov edi, ebx
mov esi, ebx
mov ecx, ebx
mov dword [ebp - 0x30], 0x7f9b
mov dword [ebp - 0x20], ecx
mov eax, edi
shl eax, cl
lea ecx, [ebp - 0x610]
cdq
push edx
push eax
call fcn.10001a75
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x1003c73d
mov eax, dword [eax]
push eax
call fcn.10047084
pop ecx
push ebx
push 1
lea ecx, [ebp - 0x610]
call fcn.10002352
mov ecx, dword [ebp - 0x20]
add ecx, esi
dec dword [ebp - 0x30]
mov dword [ebp - 0x20], ecx
jne 0x1003c721
inc esi
cmp esi, 0x144a
jl 0x1003c715
inc edi
cmp edi, 0x61dd
jl 0x1003c713
cmp dword [ebp - 0x28], 0x1f6b
jge 0x1003c785
push str.sgprsugp_pscgziuaj_yjhmkx
call fcn.10047084
pop ecx
or edi, 0xffffffff
mov dword [ebp - 4], edi
mov dword [ebp - 0x24], ebx
jmp 0x1003c7a1
mov eax, dword [ebp - 0x24]
mov dword [ebp + eax*4 - 0x54c], 0x124f01c0
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], 2
jl 0x1003c790
mov byte [ebp - 0x51], bl
cmp byte [ebp - 0x51], 0
je 0x1003c7bb
push ecx
push ecx
mov cl, 1
call fcn.100370e8
pop ecx
pop ecx
lea eax, [ebp - 0x83]
mov byte [ebp - 0x83], bl
push eax
push ecx
push 0xe43
push 1
call fcn.10035219
add esp, 0x10
mov dword [ebp - 0x4c], ebx
mov esi, ebx
push dword [ebp - 0x2ac]
movdqa xmm0, xmmword [0x1006c510]
lea eax, [ebp - 0x4a0]
push eax
lea eax, [ebp - 0x4b0]
mov dword [ebp - 0x108], ebx
push eax
push ebx
lea ecx, [ebp - 0x108]
mov dword [ebp - 0x104], ebx
movdqu xmmword [ebp - 0x4b0], xmm0
mov dword [ebp - 0x100], ebx
call fcn.100046f5
mov dword [ebp - 4], 0x41
mov dword [ebp - 0x18], 6
mov dword [ebp - 0x20], 0xbd4aa41a
mov dword [ebp - 0x1c], 2
mov dword [ebp - 0x50], 0x2a6ca0ce
mov dword [ebp - 0x28], 0x95b676b
mov dword [ebp - 0x18], 3
cmp dword [ebp - 0x18], ebx
jl 0x1003ca1b
mov dword [ebp - 0x30], 0xfc0233fd
mov ecx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x108]
cmp dword [eax + ecx*4], ebx
jne 0x1003c92b
mov ecx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x108]
cmp dword [eax + ecx*4], ebx
jne 0x1003c925
mov ecx, dword [ebp - 0x18]
mov edx, dword [ebp - 0x18]
mov esi, dword [ebp - 0x18]
mov eax, dword [ebp - 0x108]
mov ecx, dword [eax + ecx*4]
sub ecx, dword [eax + edx*4]
mov eax, dword [ebp - 0x18]
neg ecx
sbb ecx, ecx
xor edx, edx
inc ecx
cmp ecx, 0xfffffffd
setne dl
xor ecx, ecx
cmp edx, eax
mov eax, dword [ebp - 0x108]
setge cl
xor edx, edx
cmp ecx, dword [eax + esi*4]
setne dl
xor eax, eax
cmp edx, 0xc4365dea
setne al
xor edx, edx
mov dword [ebp - 0x30], eax
mov eax, dword [ebp - 0x30]
mov dword [ebp - 0x20], eax
mov esi, dword [ebp - 0x18]
mov edi, dword [ebp - 0x18]
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x108]
mov dword [ebp - 0x58], eax
mov eax, dword [ebp - 0x20]
cmp eax, dword [ecx + esi*4]
mov ecx, dword [ebp - 0x108]
setne dl
xor eax, eax
cmp edx, dword [ecx + edi*4]
setge al
xor edx, edx
cmp edx, eax
mov edx, dword [ebp - 0x58]
sbb eax, eax
add eax, 0x5d0ae857
neg eax
sbb eax, eax
add eax, 0xffff56df
neg eax
sbb eax, eax
inc eax
sub eax, dword [ecx + edx*4]
or edi, 0xffffffff
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x18]
mov esi, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x108]
mov edx, dword [ebp - 0x108]
mov eax, dword [eax + ecx*4]
mov dword [edx + esi*4], eax
test eax, eax
jne 0x1003c9af
cmp dword [ebp - 0x50], ebx
jne 0x1003c9af
push 3
mov dword [ebp - 0x24], ebx
pop esi
jmp 0x1003c965
mov eax, dword [ebp - 0x24]
mov dword [ebp + eax*4 - 0x598], 0xd4393632
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], esi
jl 0x1003c954
mov dword [ebp - 0x1c], ebx
jmp 0x1003c9a8
push 0x67e4
push ebx
xor eax, eax
mov dword [ebp - 0x1d8], edi
inc eax
lea ecx, [ebp - 0x1d8]
push 0x3375
push eax
push eax
mov edx, 0x209b
call fcn.1003523e
add esp, 0x14
mov ecx, 0xab1
push 1
call fcn.1003897a
inc dword [ebp - 0x1c]
pop ecx
cmp dword [ebp - 0x1c], esi
jle 0x1003c96f
jmp 0x1003ca0f
xor ecx, ecx
inc ecx
mov dword [ebp - 0x58], ecx
mov dword [ebp - 0x24], ebx
jmp 0x1003c9c7
mov eax, dword [ebp - 0x24]
mov dword [ebp + eax*4 - 0x27c], ecx
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], ecx
jl 0x1003c9ba
cmp dword [ebp - 0x28], ebx
je 0x1003ca09
mov ecx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x108]
cmp dword [eax + ecx*4], ebx
je 0x1003c9fd
cmp dword [ebp - 0x30], ebx
je 0x1003c9fd
mov edx, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x108]
mov eax, dword [ebp - 0x27c]
cmp dword [ecx + edx*4], eax
jl 0x1003c9fd
xor ecx, ecx
inc ecx
jmp 0x1003c9ff
mov ecx, ebx
mov eax, dword [ebp - 0x18]
add eax, ecx
je 0x1003ca09
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x58], eax
dec dword [ebp - 0x18]
jns 0x1003c859
mov esi, dword [ebp - 0x4c]
lea ecx, [ebp - 0x108]
mov dword [ebp - 4], edi
call fcn.10002048
xor eax, eax
mov word [ebp + esi*2 - 0xd4], ax
inc esi
mov dword [ebp - 0x4c], esi
cmp esi, 2
jb 0x1003c7dd
mov dword [ebp - 0xdc], 3
mov dword [ebp - 0x1e8], 0xfffffffe
mov dword [ebp - 0x474], 9
mov dword [ebp - 0xdc], ebx
cmp dword [ebp - 0xdc], 0xb
jg 0x1003cbd1
mov dword [ebp - 0x3e4], ebx
lea ecx, [ebp - 0x340]
mov dword [ebp - 0x450], 0xe8fe7528
mov dword [ebp - 0x3f4], 0xdac842f8
mov dword [ebp - 0x470], 0xc266d8ff
push 3
call fcn.10001fe6
push ecx
lea eax, [ebp - 0x404]
mov dword [ebp - 4], 0x42
push eax
push ecx
lea edx, [ebp - 0x340]
xor cl, cl
call fcn.100395d1
add esp, 0xc
lea edx, [ebp - 0xdc]
push 1
push 0x453b
push ecx
push 0xa5f
lea ecx, [ebp - 0x1e8]
call fcn.10038a6f
add esp, 0xc
lea eax, [ebp - 0x340]
xor dl, dl
push 0x79c6
push 0x1848
push ecx
push ecx
push ebx
push ecx
push ecx
push 1
push ecx
push eax
push 0x51bf
mov ecx, 0x4e78
call fcn.10038e85
mov dword [ebp - 0x50], 0x4f20
add esp, 0x30
cmp dword [ebp - 0x50], 0x5063
jle 0x1003cba4
mov eax, ebx
mov dword [ebp - 0x30], ebx
mov edi, ebx
mov dword [ebp - 0x4c], ebx
mov ecx, edi
mov esi, ebx
shl eax, cl
mov dword [ebp - 0x28], eax
mov edi, ebx
mov dword [ebp - 0x20], 0x6bbe
mov ecx, edi
sar eax, cl
lea ecx, [ebp - 0x640]
cdq
push edx
push eax
call fcn.10001a75
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x1003cb5c
mov eax, dword [eax]
push eax
call fcn.10047084
pop ecx
push ebx
push 1
lea ecx, [ebp - 0x640]
call fcn.10002352
mov eax, dword [ebp - 0x28]
add edi, esi
dec dword [ebp - 0x20]
jne 0x1003cb40
inc esi
cmp esi, 0x1197
jl 0x1003cb37
mov edi, dword [ebp - 0x4c]
mov eax, dword [ebp - 0x30]
inc edi
mov dword [ebp - 0x4c], edi
cmp edi, 0x42c3
jl 0x1003cb2e
inc eax
mov dword [ebp - 0x30], eax
cmp eax, 0x6065
jl 0x1003cb29
or edi, 0xffffffff
cmp dword [ebp - 0x50], 0x4f09
jge 0x1003cbb8
push str.kyrpswjyj_bqcamcv_hvar_cme_fdwfdzk_yuqelco_aeqmlbyr
call fcn.10047084
pop ecx
lea ecx, [ebp - 0x340]
mov dword [ebp - 4], edi
call fcn.10002048
inc dword [ebp - 0xdc]
jmp 0x1003ca64
mov ecx, dword [ebp - 0x40]
mov eax, dword [ebp - 0xa8]
shr ecx, 1
mov dword [ebp - 0x44], ecx
inc eax
cmp eax, ecx
jae 0x1003d23d
mov dword [ebp - 0x58], ebx
mov dword [ebp - 0xf0], 1
mov dword [ebp - 0x24], ebx
jmp 0x1003cc0b
mov eax, dword [ebp - 0x24]
mov dword [ebp + eax*4 - 0xb0], 0x75c96dd1
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], 2
jl 0x1003cbfa
mov dword [ebp - 0xac], 0xfffffffd
cmp dword [ebp - 0xac], 0xffffffe8
jg 0x1003cf92
mov dword [ebp - 0x34], 0x81d21f1e
mov dword [ebp - 0x18], 1
mov dword [ebp - 0x20], 0x28e6
cmp dword [ebp - 0x20], 0x2a68
jle 0x1003cc92
mov edi, ebx
mov esi, ebx
mov ecx, esi
mov eax, edi
shl eax, cl
lea ecx, [ebp - 0x664]
cdq
push edx
push eax
call fcn.10001a75
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x1003cc68
mov eax, dword [eax]
push eax
call fcn.10047084
pop ecx
push ebx
push 1
lea ecx, [ebp - 0x664]
call fcn.10002352
inc esi
cmp esi, 0x71de
jl 0x1003cc4a
inc edi
cmp edi, 0x2653
jl 0x1003cc48
or edi, 0xffffffff
mov dword [ebp - 0x2c], 0x6add33d7
cmp dword [ebp - 0x20], 0x25b5
jge 0x1003ccad
push str.lrkcztedk_cysm_ooxgj_hlkqu_rztqbz_qoq
call fcn.10047084
pop ecx
mov dword [ebp - 4], edi
mov dword [ebp - 0x24], ebx
jmp 0x1003ccc6
mov eax, dword [ebp - 0x24]
mov dword [ebp + eax*4 - 0x528], 0xfffc
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], 3
jl 0x1003ccb5
mov eax, dword [ebp - 0x18]
xor ecx, ecx
cmp eax, 0xa8db
mov eax, dword [ebp - 0xac]
setne cl
xor edx, edx
cmp ecx, eax
mov eax, dword [ebp - 0xac]
mov ecx, dword [ebp - 0xac]
setle dl
add eax, edx
imul ecx, eax
mov eax, dword [ebp - 0xac]
imul eax, ecx
cmp eax, 0xfffd
sbb eax, eax
neg eax
cmp eax, dword [ebp - 0x18]
jg 0x1003cd1a
cmp dword [ebp - 0xac], ebx
jne 0x1003cd1a
mov ecx, ebx
jmp 0x1003cd1d
xor ecx, ecx
inc ecx
mov eax, dword [ebp - 0x18]
sub ecx, eax
je 0x1003cd2a
mov eax, dword [ebp - 0xac]
mov eax, dword [ebp - 0xac]
xor ecx, ecx
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x18]
cmp eax, 1
mov eax, dword [ebp - 0x58]
setl cl
cmp ecx, edi
sbb ecx, ecx
xor edx, edx
neg ecx
cmp ecx, eax
setge dl
xor eax, eax
cmp edx, 0xe568
setl al
xor ecx, ecx
mov dword [ebp - 0x20], eax
mov eax, dword [ebp - 0x18]
cmp dword [ebp - 0x20], eax
setle cl
mov dword [ebp - 0x2c], ecx
cmp dword [ebp - 0x2c], ebx
jne 0x1003cd8a
cmp dword [ebp - 0x18], ebx
jne 0x1003cd8a
mov eax, ebx
jmp 0x1003cd8d
xor eax, eax
inc eax
dec dword [ebp - 0x34]
mov edx, dword [ebp - 0x18]
sub edx, eax
mov eax, dword [ebp - 0x34]
neg edx
push 1
sbb edx, edx
xor ecx, ecx
inc edx
cmp eax, edx
mov eax, dword [ebp - 0xac]
setle cl
xor edx, edx
cmp eax, ecx
mov eax, dword [ebp - 0x18]
setg dl
imul eax, edx
cmp eax, dword [ebp - 0x18]
jl 0x1003cf6e
lea ecx, [ebp - 0x168]
call fcn.10001fe6
lea eax, [ebp - 0x460]
mov dword [ebp - 4], 0x47
push 1
push eax
lea ecx, [ebp - 0x168]
call fcn.10038ca8
pop ecx
pop ecx
mov dword [ebp - 0x18], 0xffffffe6
jmp 0x1003cf37
mov dword [ebp - 0x2c], ebx
jmp 0x1003cf1f
mov dword [ebp - 0x38], 0x39ce8566
mov dword [ebp - 0x34], ebx
jmp 0x1003cf13
mov dword [ebp - 0x20], 0x8b506ee4
mov dword [ebp - 0x40], 0xfffffff8
mov dword [ebp - 0x24], ebx
jmp 0x1003ce31
cmp dword [ebp - 0x34], ebx
jle 0x1003ce0d
inc dword [ebp - 0x2c]
cmp dword [ebp - 0x2c], ebx
jle 0x1003cdfe
mov eax, dword [ebp - 0xac]
mov dword [ebp - 0xf0], eax
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 0xfffffff6
jle 0x1003cdf6
push ecx
push 0x2680
push ecx
lea eax, [ebp - 0xf0]
mov edx, 0x3cca
push 1
push eax
call fcn.10038dd2
add esp, 0x14
mov dword [ebp - 4], edi
lea ecx, [ebp - 0x168]
call fcn.10002048
jmp 0x1003cf87
lea eax, [ebp - 0x8d]
mov byte [ebp - 0x8d], bl
push eax
mov ecx, 0x6b14
call fcn.10038e07
pop ecx
pop ecx
dec dword [ebp - 0xac]
jmp 0x1003cc1b
mov edi, dword [ebp - 0xa8]
mov esi, dword [ebp - 0x48]
lea ecx, [esi + edi*2]
call fcn.10033c7f
lea ecx, [esi + 4]
mov dword [ebp - 0x15c], eax
lea ecx, [ecx + edi*2]
call fcn.10033c7f
mov esi, eax
or edi, 0xffffffff
push 2
mov dword [ebp - 0x98], edi
mov dword [ebp - 0x50], esi
mov dword [ebp - 0x24], ebx
pop eax
jmp 0x1003cfd7
mov ecx, dword [ebp - 0x24]
mov dword [ebp + ecx*4 - 0x55c], eax
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], eax
jl 0x1003cfca
mov dword [ebp - 0x98], ebx
cmp dword [ebp - 0x98], 0x18
jge 0x1003d08d
xor ebx, ebx
inc ebx
push 3
lea ecx, [ebp - 0x358]
call fcn.10001fe6
lea eax, [ebp - 0x358]
mov dword [ebp - 4], 0x48
push eax
mov dword [ebp - 0x1f8], 0xfffffff9
lea ecx, [ebp - 0x414]
mov dword [ebp - 0x284], edi
push ebx
call fcn.100352db
pop ecx
pop ecx
lea eax, [ebp - 0x284]
push eax
push 0x6538
push 0x5f09
lea eax, [ebp - 0x98]
push eax
lea eax, [ebp - 0x358]
push eax
push 0x2093
push ebx
push 0x4f4
push 0xf84
push ecx
push ecx
lea ecx, [ebp - 0x1f8]
call fcn.10037c91
add esp, 0x2c
mov dword [ebp - 4], edi
lea ecx, [ebp - 0x358]
call fcn.10002048
inc dword [ebp - 0x98]
cmp dword [ebp - 0x98], 0x18
jl 0x1003cff2
xor ebx, ebx
cmp dword [ebp - 0x15c], edi
jne 0x1003d2b4
test esi, esi
jne 0x1003d2b4
mov dword [ebp - 0x4c], 0x89b54615
mov dword [ebp - 0x110], 0xb15e314a
mov dword [ebp - 0x28], 0x315a
cmp dword [ebp - 0x28], 0x33bc
jle 0x1003d11c
mov dword [ebp - 0x40], ebx
mov esi, ebx
mov dword [ebp - 0x30], ebx
mov edi, ebx
mov ebx, esi
mov dword [ebp - 0x20], 0xf6a
mov esi, dword [ebp - 0x40]
mov eax, esi
mov ecx, 0x100788d8
xor eax, ebx
cdq
push edx
push eax
call fcn.10001e5c
add ebx, edi
dec dword [ebp - 0x20]
jne 0x1003d0d8
mov esi, dword [ebp - 0x30]
inc edi
cmp edi, 0x4ff7
jl 0x1003d0cc
inc esi
mov dword [ebp - 0x30], esi
push 0
pop ebx
cmp esi, 0x279d
jl 0x1003d0ca
mov eax, dword [ebp - 0x40]
inc eax
mov dword [ebp - 0x40], eax
cmp eax, 0x1736
jl 0x1003d0c5
or edi, 0xffffffff
mov dword [ebp - 4], 0x49
cmp dword [ebp - 0x28], 0x2eb1
jge 0x1003d13b
mov edx, str.jsoxq_axxia_kzgcx_pysyojuyz_trn_cxvh_ttvxl_qthzmfdm_sdpva_wxswiqxb_iwka
mov ecx, 0x100788d8
call fcn.10003d65
mov dword [ebp - 4], edi
xor ecx, ecx
mov dword [ebp - 0x2c], ebx
inc ecx
jmp 0x1003d175
mov eax, dword [ebp - 0x2c]
mov dword [ebp + eax*4 - 0x13c], ecx
inc dword [ebp - 0x2c]
cmp dword [ebp - 0x2c], 3
jl 0x1003d168
mov dword [ebp - 0x2c], ebx
jmp 0x1003d191
mov eax, dword [ebp - 0x2c]
mov dword [ebp + eax*4 - 0x170], 0x8c3ad3b3
inc dword [ebp - 0x2c]
cmp dword [ebp - 0x2c], 2
jl 0x1003d180
push ecx
lea eax, [ebp - 0x110]
xor dl, dl
push eax
push 0x5336
push 0x16f9
push ecx
call fcn.10037919
mov eax, dword [ebp - 0x138]
add esp, 0x14
mov eax, dword [ebp - 0x138]
mov eax, dword [ebp - 0x4c]
mov eax, dword [ebp - 0x138]
cmp dword [ebp - 0x16c], ebx
je 0x1003d1d6
xor eax, eax
inc eax
jmp 0x1003d1d8
mov eax, ebx
add eax, 0x533e9821
je 0x1003d1e5
push dword [ebp - 0x148]
movdqa xmm0, xmmword [str.E_E_E_E]
lea eax, [ebp - 0x4e0]
push eax
lea eax, [ebp - 0x4f0]
mov dword [ebp - 0x68], 0x47dfa860
push eax
mov dword [ebp - 0x38], 0xab72b21a
lea ecx, [ebp - 0x130]
push ebx
movdqu xmmword [ebp - 0x4f0], xmm0
mov dword [ebp - 0x130], ebx
mov dword [ebp - 0x12c], ebx
mov dword [ebp - 0x128], ebx
call fcn.100046f5
push 3
lea ecx, [ebp - 0x17c]
mov dword [ebp - 4], 0x52
call fcn.10001fe6
mov byte [ebp - 4], 0x53
mov dword [ebp - 0x44], 0xfffffff6
mov dword [ebp - 0x24], ebx
jmp 0x1003da61
push ecx
lea ecx, [ebp - 0x28c]
mov dword [ebp - 0x298], 0xf825
push ecx
lea ecx, [ebp - 0x208]
xor eax, eax
push ecx
push ecx
push ecx
inc eax
push eax
push ecx
push ecx
push eax
push ecx
push 0x4375
mov dword [ebp - 0x208], eax
lea ecx, [ebp - 0x298]
mov dword [ebp - 0x28c], 0xbdd48407
mov dl, al
push 0x2b73
call fcn.10038e85
add esp, 0x30
mov byte [ebp - 0x8f], bl
lea eax, [ebp - 0x8f]
mov dl, 1
push eax
push ecx
push ecx
push 0x247a
push 0x5284
push 0x55b9
call fcn.10038f7d
push 0x7561
push 0x268e
lea eax, [ebp - 0xa8]
xor dl, dl
push eax
push 0xe3c
xor eax, eax
inc eax
push 0x1578
push eax
mov cl, al
call fcn.10039012
add esp, 0x30
test esi, esi
jle 0x1003da22
push 2
lea ecx, [ebp - 0x370]
call fcn.10001fe6
lea eax, [ebp - 0x370]
mov dword [ebp - 4], 0x4b
push eax
push 0x7e80
push 0x22eb
push 0x194d
lea eax, [ebp - 0x148]
mov dword [ebp - 0x2a0], 0x8d4081c2
push eax
xor eax, eax
mov dword [ebp - 0x218], 0xab593421
inc eax
push eax
mov dl, al
mov cl, al
call fcn.10039012
add esp, 0x18
lea eax, [ebp - 0x218]
xor dl, dl
push eax
push 0x675c
push ecx
push ecx
lea eax, [ebp - 0x370]
mov ecx, 0x5904
push eax
lea eax, [ebp - 0x2a0]
push eax
call fcn.100392fa
add esp, 0x18
mov dword [ebp - 4], edi
lea ecx, [ebp - 0x370]
call fcn.10002048
mov ecx, dword [ebp - 0xa8]
mov eax, dword [ebp - 0x48]
push dword [ebp - 0x148]
movdqa xmm0, xmmword [0x1006c510]
movdqu xmmword [ebp - 0x4d0], xmm0
lea eax, [eax + ecx*2]
mov dword [ebp - 0xfc], ebx
mov dword [ebp - 0x1a8], eax
lea ecx, [ebp - 0xfc]
lea eax, [eax + esi*2]
mov dword [ebp - 0xf8], ebx
mov dword [ebp - 0x10c], eax
lea eax, [ebp - 0x4c0]
push eax
lea eax, [ebp - 0x4d0]
mov dword [ebp - 0xf4], ebx
push eax
push ebx
call fcn.100046f5
mov dword [ebp - 4], 0x4c
mov dword [ebp - 0x18], 6
mov dword [ebp - 0x20], 0xbd4aa41a
mov dword [ebp - 0x1c], 2
mov dword [ebp - 0x4c], 0x2a6ca0ce
mov dword [ebp - 0x20], 0x108a
cmp dword [ebp - 0x20], 0x13f4
jle 0x1003d4dc
mov eax, ebx
mov dword [ebp - 0x28], ebx
mov edi, ebx
mov esi, ebx
add eax, edi
lea ecx, [ebp - 0x688]
and eax, esi
cdq
push edx
push eax
call fcn.10001a75
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x1003d49c
mov eax, dword [eax]
push eax
call fcn.10047084
pop ecx
push ebx
push 1
lea ecx, [ebp - 0x688]
call fcn.10002352
mov eax, dword [ebp - 0x28]
inc esi
cmp esi, 0x6699
jl 0x1003d480
inc edi
cmp edi, 0x24d4
jl 0x1003d47e
inc eax
mov dword [ebp - 0x28], eax
cmp eax, 0x908
jl 0x1003d47c
push 0x1f31
call dword [sym.imp.GDI32.dll_GetStockObject]
mov dword [ebp - 0x28], 0x95b676b
cmp dword [ebp - 0x20], 0xec8
jge 0x1003d4f7
push str.wzxe_bbpmatn_fpleekqob_vwahqrtvr_decb
call fcn.10047084
pop ecx
mov dword [ebp - 4], 0x4c
mov dword [ebp - 0x18], 3
cmp dword [ebp - 0x18], ebx
jl 0x1003d766
mov dword [ebp - 0x40], 0xfc0233fd
mov ecx, dword [ebp - 0x18]
mov eax, dword [ebp - 0xfc]
cmp dword [eax + ecx*4], ebx
jne 0x1003d5dd
mov ecx, dword [ebp - 0x18]
mov eax, dword [ebp - 0xfc]
cmp dword [eax + ecx*4], ebx
jne 0x1003d5d7
mov ecx, dword [ebp - 0x18]
mov edx, dword [ebp - 0x18]
mov esi, dword [ebp - 0x18]
mov eax, dword [ebp - 0xfc]
mov ecx, dword [eax + ecx*4]
sub ecx, dword [eax + edx*4]
mov eax, dword [ebp - 0x18]
neg ecx
sbb ecx, ecx
xor edx, edx
inc ecx
cmp ecx, 0xfffffffd
setne dl
xor ecx, ecx
cmp edx, eax
mov eax, dword [ebp - 0xfc]
setge cl
xor edx, edx
cmp ecx, dword [eax + esi*4]
setne dl
xor eax, eax
cmp edx, 0xc4365dea
setne al
xor edx, edx
mov dword [ebp - 0x40], eax
mov eax, dword [ebp - 0x40]
mov dword [ebp - 0x20], eax
mov esi, dword [ebp - 0x18]
mov edi, dword [ebp - 0x18]
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0xfc]
mov dword [ebp - 0x58], eax
mov eax, dword [ebp - 0x20]
cmp eax, dword [ecx + esi*4]
mov ecx, dword [ebp - 0xfc]
setne dl
xor eax, eax
cmp edx, dword [ecx + edi*4]
setge al
xor edx, edx
cmp edx, eax
mov edx, dword [ebp - 0x58]
sbb eax, eax
add eax, 0x5d0ae857
neg eax
sbb eax, eax
add eax, 0xffff56df
neg eax
sbb eax, eax
inc eax
sub eax, dword [ecx + edx*4]
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x18]
mov esi, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x18]
mov eax, dword [ebp - 0xfc]
mov edx, dword [ebp - 0xfc]
mov eax, dword [eax + ecx*4]
mov dword [edx + esi*4], eax
test eax, eax
jne 0x1003d6fe
cmp dword [ebp - 0x4c], ebx
jne 0x1003d6fe
mov dword [ebp - 0x24], ebx
jmp 0x1003d61c
mov eax, dword [ebp - 0x24]
mov dword [ebp + eax*4 - 0x670], 0xd4393632
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], 3
jl 0x1003d60b
mov dword [ebp - 0x1c], ebx
cmp dword [ebp - 0x1c], 3
jg 0x1003d75e
xor ecx, ecx
inc ecx
mov dword [ebp - 0x58], ecx
mov dword [ebp - 0x24], ebx
jmp 0x1003d716
mov eax, dword [ebp - 0x24]
mov dword [ebp + eax*4 - 0x2b4], ecx
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], ecx
jl 0x1003d709
cmp dword [ebp - 0x28], ebx
je 0x1003d758
mov ecx, dword [ebp - 0x18]
mov eax, dword [ebp - 0xfc]
cmp dword [eax + ecx*4], ebx
je 0x1003d74c
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x58], eax
dec dword [ebp - 0x18]
jmp 0x1003d505
or edi, 0xffffffff
lea ecx, [ebp - 0xfc]
mov dword [ebp - 4], edi
call fcn.10002048
mov ecx, dword [ebp - 0x10c]
add ecx, 0xfffffffe
call fcn.10033892
cmp ax, word [ebp - 0x234]
jne 0x1003d88b
mov dword [ebp - 0x9c], 0x824a8c6a
mov dword [ebp - 0x278], 0xeb382e58
mov dword [ebp - 0x9c], 0x1d
cmp dword [ebp - 0x9c], 3
jle 0x1003d847
xor ebx, ebx
inc ebx
mov dword [ebp - 0x22c], ebx
xor ecx, ecx
mov dword [ebp - 0x228], ebx
mov dword [ebp - 0x224], ebx
mov dword [ebp - 0x220], ebx
mov dword [ebp - 0x58], ebx
mov eax, dword [ebp - 0x224]
cmp eax, 0xcd9d75
mov eax, dword [ebp - 0x228]
setge cl
xor edx, edx
imul ecx, ecx, 0xc2da
cmp ecx, eax
mov eax, dword [ebp - 0x22c]
setg dl
xor ecx, ecx
cmp edx, eax
mov eax, dword [ebp - 0x22c]
setg cl
xor edx, edx
cmp eax, 0xdfe4
setg dl
add edx, 0x1d2250db
imul edx, ecx
sub edx, 0xa137b189
neg edx
sbb edx, edx
inc edx
mov dword [ebp - 0x58], edx
dec dword [ebp - 0x9c]
cmp dword [ebp - 0x9c], 3
jg 0x1003d7c0
xor ebx, ebx
push 0x495c
lea eax, [ebp - 0x9c]
mov dl, 1
push eax
push ecx
push ecx
push 0x8d4
push 0x12d4
lea ecx, [ebp - 0x278]
call fcn.100392fa
add esp, 0x18
lea eax, [ebp - 0x10c]
push eax
push 0x59f5
push 0x42d0
push ecx
mov cl, 1
call fcn.1003951e
add esp, 0x10
mov dword [ebp - 0x34], edi
lea ecx, [ebp - 0x388]
mov dword [ebp - 0x20], 5
mov dword [ebp - 0x58], 0x6158d32f
push 1
call fcn.10001fe6
mov dword [ebp - 4], 0x51
mov dword [ebp - 0xa0], ebx
jmp 0x1003d8cf
mov eax, dword [ebp - 0xa0]
mov dword [ebp + eax*4 - 0x270], 0xad3b3152
inc dword [ebp - 0xa0]
cmp dword [ebp - 0xa0], 2
jl 0x1003d8b8
push ecx
lea eax, [ebp - 0xa0]
mov dl, 1
push eax
lea eax, [ebp - 0x388]
push eax
push ecx
mov ecx, 0x3aac
call fcn.100393ef
mov eax, dword [ebp - 0x34]
add esp, 0x10
mov dword [ebp - 0x20], eax
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x58], eax
mov dword [ebp - 0x34], ebx
jmp 0x1003d9c7
mov dword [ebp - 0x20], edi
mov dword [ebp - 0x58], 0x1b74
cmp dword [ebp - 0x58], 0x7f7
jge 0x1003d97f
cmp dword [ebp - 0x34], 1
jle 0x1003d90b
lea ecx, [ebp - 0x388]
mov dword [ebp - 4], edi
call fcn.10002048
lea eax, [ebp - 0x10c]
mov edx, 0x63d1
push eax
push 0x57b3
push 0x41f
push 0x1044a7a4
xor eax, eax
lea ecx, [ebp - 0x1a8]
inc eax
push eax
push ebx
push ecx
push 0x57c7
push 0x531d
push eax
lea ecx, [ebp - 0x15c]
call fcn.10037f34
mov esi, dword [ebp - 0x50]
add esp, 0x28
push ecx
push 0x3664
push ecx
mov edx, 0x7f6f
mov cl, 1
call fcn.100395d1
mov eax, dword [ebp - 0xa8]
add esp, 0xc
mov ecx, dword [ebp - 0x44]
add eax, esi
mov dword [ebp - 0xa8], eax
jmp 0x1003cbdf
mov ecx, dword [ebp - 0x24]
mov eax, dword [ebp - 0x17c]
mov dword [eax + ecx*4], 0xa13b2885
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], 3
jl 0x1003da4e
mov eax, dword [ebp - 0x68]
xor edx, edx
mov esi, dword [ebp - 0x130]
mov dword [ebp - 0x68], eax
mov eax, dword [ebp - 0x17c]
mov ecx, dword [esi + 0xc]
cmp ecx, dword [eax]
setg dl
xor eax, eax
cmp edx, dword [esi]
setl al
cmp eax, 4
sbb eax, eax
xor edi, edi
inc eax
xor edx, edx
lea ecx, [edi + 1]
sub ecx, eax
mov eax, dword [ebp - 0x38]
cmp ecx, eax
mov eax, dword [ebp - 0x68]
setg dl
xor ecx, ecx
cmp eax, edx
mov edx, dword [ebp - 0x68]
setl cl
xor eax, eax
cmp ecx, dword [esi + 4]
setl al
xor ecx, ecx
test eax, eax
mov eax, dword [ebp - 0x68]
setg cl
sub edx, ecx
neg edx
sbb edx, edx
xor ecx, ecx
inc edx
cmp edx, eax
setne cl
cmp ecx, dword [ebp - 0x38]
jg 0x1003db76
mov dword [ebp - 0x1c], 4
xor ecx, ecx
mov eax, dword [ebp - 0x68]
cmp eax, 0x4ed25e42
mov eax, dword [ebp - 0x1c]
setle cl
imul eax, ecx
sub eax, 0x9080
mov dword [ebp - 0x38], eax
je 0x1003db05
cmp dword [ebp - 0x38], ebx
je 0x1003db05
xor ecx, ecx
inc ecx
jmp 0x1003db07
mov ecx, ebx
mov eax, dword [ebp - 0x17c]
mov edx, dword [esi + 4]
sub edx, dword [eax]
mov eax, dword [ebp - 0x1c]
neg edx
sbb edx, edx
inc edx
sub edx, ecx
xor ecx, ecx
cmp eax, edx
setle cl
add ecx, 5
mov dword [esi + 0xc], ecx
mov dword [ebp - 0x1c], eax
jmp 0x1003db6b
mov eax, dword [ebp - 0x130]
mov dword [ebp - 0x244], 0xffff
cmp dword [eax + 4], ebx
jne 0x1003dc4e
lea eax, [ebp - 0x130]
push eax
push ecx
lea eax, [ebp - 0x244]
push eax
push ecx
push 1
push 0x107b
xor cl, cl
call fcn.10037508
add esp, 0x18
dec dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 0xffffffe3
jge 0x1003db2e
jmp 0x1003dc4e
push ecx
push ecx
xor ebx, ebx
mov dword [ebp - 0x48], 0xfffffffc
inc ebx
mov dword [ebp - 0xec], 0xdc32c752
push ebx
lea eax, [ebp - 0x130]
mov edx, 0x7cf5
push eax
lea eax, [ebp - 0x68]
mov ecx, 0x2895
push 0x529c
push eax
call fcn.1003552a
mov eax, dword [ebp - 0xec]
add esp, 0x18
mov dword [ebp - 0x48], 0x6a8
mov ecx, dword [ebp - 0x38]
mov eax, dword [ebp - 0x17c]
sub ecx, dword [eax]
xor eax, eax
cmp ecx, 0x6bbb
mov ecx, 0xa2181788
setg al
cmp ecx, eax
mov eax, dword [ebp - 0xec]
sbb ecx, ecx
xor edx, edx
inc ecx
cmp ecx, eax
mov eax, dword [ebp - 0xec]
setl dl
xor ecx, ecx
cmp eax, edx
mov dl, bl
setle cl
lea eax, [ecx + 7]
mov ecx, dword [ebp - 0x48]
imul ecx, eax
mov eax, 0xfff8
cmp eax, ecx
mov eax, dword [ebp - 0x17c]
sbb ecx, ecx
inc ecx
cmp ecx, dword [eax + 4]
jl 0x1003dc40
push ebx
lea eax, [ebp - 0xec]
mov cl, bl
push eax
push 0x6ab6
push 0x5b77
lea eax, [ebp - 0x130]
push 0x4228
push eax
call fcn.100397f4
add esp, 0x18
jmp 0x1003dc4e
push ecx
push ecx
lea eax, [ebp - 0x68]
push eax
call fcn.10039947
add esp, 0xc
lea ecx, [ebp - 0x17c]
call fcn.10002048
lea ecx, [ebp - 0x130]
call fcn.10002048
mov ecx, dword [ebp - 0xc]
mov eax, 0x1044a7a4
pop edi
pop esi
mov dword fs:[0], ecx
pop ebx
mov esp, ebp
pop ebp
ret