Function at 0x1003699d
Capabilities:
Create pipe
Get common file path
Get thread local storage value

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x10063177
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
push ecx
sub esp, 0xee8
push ebx
push esi
push edi
mov dword [ebp - 0x10], esp
mov dword [ebp - 0x80], 0
mov dword [ebp - 0x2c], 0xaa08ecb3
mov dword [ebp - 0x9c], 3
mov dword [ebp - 0x134], 0
cmp dword [ebp - 0x80], 0
jne 0x100369fa
push 7
pop eax
test eax, eax
jne 0x100369fa
and dword [ebp - 0x85c], 0
jmp 0x10036a04
mov dword [ebp - 0x85c], 1
mov eax, dword [ebp - 0x80]
mov dword [ebp - 0xc64], eax
or eax, 0xffffffff
dec eax
mov dword [ebp - 0x2c], eax
mov eax, dword [ebp - 0x80]
cmp eax, dword [ebp - 0x2c]
jl 0x10036a28
mov dword [ebp - 0x428], 1
jmp 0x10036a2f
and dword [ebp - 0x428], 0
cmp dword [ebp - 0x428], 0
jb 0x10036a44
mov dword [ebp - 0x7e8], 1
jmp 0x10036a4b
and dword [ebp - 0x7e8], 0
mov eax, dword [ebp - 0x80]
add eax, dword [ebp - 0x7e8]
je 0x10036aa1
mov dword [ebp - 0x954], 0x51f1e283
mov eax, dword [ebp - 0x954]
add eax, dword [ebp - 0x2c]
mov dword [ebp - 0x2c], eax
mov eax, dword [ebp - 0x2c]
mov dword [ebp - 0x9c], eax
mov byte [ebp - 0xa5], 0
movzx eax, byte [ebp - 0xa5]
test eax, eax
je 0x10036a9c
push 0
push 0
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
push 0
push 0
call dword [sym.imp.USER32.dll_CreateDialogParamA]
jmp 0x10036c07
mov dword [ebp - 0x7e0], 0xbc98072f
mov dword [ebp - 0x204], 0
jmp 0x10036ac4
mov eax, dword [ebp - 0x204]
inc eax
mov dword [ebp - 0x204], eax
cmp dword [ebp - 0x204], 2
jge 0x10036ae0
mov eax, dword [ebp - 0x204]
mov dword [ebp + eax*4 - 0x7f4], 0xffffffff
jmp 0x10036ab7
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x7f4]
mov dword [ebp - 0xc24], eax
push 4
pop eax
imul eax, eax, 0
push 4
pop ecx
imul ecx, ecx, 0
mov ecx, dword [ebp + ecx - 0x7f4]
cmp ecx, dword [ebp + eax - 0x7f4]
jg 0x10036b1b
mov dword [ebp - 0x818], 1
jmp 0x10036b22
and dword [ebp - 0x818], 0
mov eax, dword [ebp - 0x818]
mov dword [ebp - 0x9c], eax
cmp dword [ebp - 0x9c], 1
je 0x10036b43
mov dword [ebp - 0x80c], 1
jmp 0x10036b4a
and dword [ebp - 0x80c], 0
mov eax, dword [ebp - 0x134]
cmp dword [ebp - 0x80c], eax
jle 0x10036b64
mov dword [ebp - 0x60c], 1
jmp 0x10036b6b
and dword [ebp - 0x60c], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x7f4]
cmp dword [ebp - 0x60c], eax
jne 0x10036b8c
mov dword [ebp - 0x3e0], 1
jmp 0x10036b93
and dword [ebp - 0x3e0], 0
mov eax, dword [ebp - 0x7e0]
cmp dword [ebp - 0x3e0], eax
je 0x10036bad
mov dword [ebp - 0x7d0], 1
jmp 0x10036bb4
and dword [ebp - 0x7d0], 0
mov eax, dword [ebp - 0x2c]
add eax, dword [ebp - 0x7d0]
push 4
pop ecx
imul ecx, ecx, 0
cmp dword [ebp + ecx - 0x7f4], eax
jl 0x10036bd8
mov dword [ebp - 0x3e8], 1
jmp 0x10036bdf
and dword [ebp - 0x3e8], 0
cmp dword [ebp - 0x3e8], 2
jge 0x10036bf4
mov dword [ebp - 0x7d8], 1
jmp 0x10036bfb
and dword [ebp - 0x7d8], 0
mov eax, dword [ebp - 0x7d8]
mov dword [ebp - 0x7e0], eax
mov dword [ebp - 0x3f4], 0x3fcd
mov dword [ebp - 0x964], str.mxjskumdn_ldqkdedg_hjorvsig_ubwy_shezyeqkv_nojzad_lzysb_qmfrxsefp_bpmyorc_arql_gjt_vtopdvoi_czqfkqb_nrhpcnog
cmp dword [ebp - 0x3f4], 0x4329
jle 0x10036d3c
and dword [ebp - 0x370], 0
jmp 0x10036c41
mov eax, dword [ebp - 0x370]
inc eax
mov dword [ebp - 0x370], eax
cmp dword [ebp - 0x370], 0x2c5f
jge 0x10036d3c
and dword [ebp - 0x318], 0
jmp 0x10036c67
mov eax, dword [ebp - 0x318]
inc eax
mov dword [ebp - 0x318], eax
cmp dword [ebp - 0x318], 0x7553
jge 0x10036d37
and dword [ebp - 0x374], 0
jmp 0x10036c8d
mov eax, dword [ebp - 0x374]
inc eax
mov dword [ebp - 0x374], eax
cmp dword [ebp - 0x374], 0x435c
jge 0x10036d32
and dword [ebp - 0x37c], 0
jmp 0x10036cb3
mov eax, dword [ebp - 0x37c]
inc eax
mov dword [ebp - 0x37c], eax
cmp dword [ebp - 0x37c], 0x1342
jge 0x10036d2d
mov eax, dword [ebp - 0x374]
add eax, dword [ebp - 0x37c]
mov edx, dword [ebp - 0x370]
mov ecx, dword [ebp - 0x318]
sar edx, cl
mov ecx, eax
shl edx, cl
mov eax, edx
cdq
mov dword [ebp - 0x978], eax
mov dword [ebp - 0x974], edx
push dword [ebp - 0x974]
push dword [ebp - 0x978]
lea ecx, [ebp - 0xdfc]
call fcn.10001a31
pop ecx
pop ecx
mov dword [ebp - 0x95c], eax
mov ecx, dword [ebp - 0x95c]
call fcn.10001bb6
push eax
call fcn.1004b2d6
pop ecx
lea ecx, [ebp - 0xdfc]
call fcn.10001bac
jmp 0x10036ca6
jmp 0x10036c80
jmp 0x10036c5a
jmp 0x10036c34
mov dword [ebp - 0x9c], 0
jmp 0x10036d55
mov eax, dword [ebp - 0x9c]
inc eax
mov dword [ebp - 0x9c], eax
cmp dword [ebp - 0x9c], 0x17
jle 0x10036e20
mov dword [ebp - 0x1c4], 0
jmp 0x10036d7b
mov eax, dword [ebp - 0x1c4]
inc eax
mov dword [ebp - 0x1c4], eax
cmp dword [ebp - 0x1c4], 3
jge 0x10036d97
mov eax, dword [ebp - 0x1c4]
mov dword [ebp + eax*4 - 0xd08], 1
jmp 0x10036d6e
mov dword [ebp - 0x2c], 2
jmp 0x10036da7
mov eax, dword [ebp - 0x2c]
dec eax
mov dword [ebp - 0x2c], eax
cmp dword [ebp - 0x2c], 0
jl 0x10036e1b
mov dword [ebp - 0x134], 2
jmp 0x10036dc6
mov eax, dword [ebp - 0x134]
dec eax
mov dword [ebp - 0x134], eax
cmp dword [ebp - 0x134], 0
jl 0x10036df8
mov dword [ebp - 0x80], 2
jmp 0x10036ddf
mov eax, dword [ebp - 0x80]
dec eax
mov dword [ebp - 0x80], eax
cmp dword [ebp - 0x80], 0
jl 0x10036df6
mov eax, dword [ebp - 0x2c]
cmp dword [ebp + eax*4 - 0xd08], 0
je 0x10036df4
jmp 0x10036df6
jmp 0x10036dd8
jmp 0x10036db9
mov byte [ebp - 0x96], 0
movzx eax, byte [ebp - 0x96]
test eax, eax
je 0x10036e19
push 0
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_EndPaint]
jmp 0x10036da0
jmp 0x10036d48
and dword [ebp - 4], 0
cmp dword [ebp - 0x3f4], 0x3d50
jge 0x10036e3c
push dword [ebp - 0x964]
call fcn.1004b2d6
pop ecx
jmp 0x10036e58
or dword [ebp - 4], 0xffffffff
jmp 0x10036e62
cmp dword [0x100e05e0], 0
jne 0x1003be1b
mov dword [ebp - 0x1cc], 1
mov dword [ebp - 0x96c], 0xfffffff6
mov dword [ebp - 0xc08], 0x1ca2961c
mov dword [ebp - 0xc2c], 1
mov dword [ebp - 0x71c], 0xfffffffd
mov dword [ebp - 0x2cc], 0
jmp 0x10036eba
mov eax, dword [ebp - 0x2cc]
inc eax
mov dword [ebp - 0x2cc], eax
cmp dword [ebp - 0x2cc], 3
jge 0x10036ed6
mov eax, dword [ebp - 0x2cc]
mov dword [ebp + eax*4 - 0xe74], 0xffffffff
jmp 0x10036ead
mov dword [ebp - 0x1cc], 0
jmp 0x10036eef
mov eax, dword [ebp - 0x1cc]
inc eax
mov dword [ebp - 0x1cc], eax
cmp dword [ebp - 0x1cc], 0xc
jge 0x10036f05
cmp dword [ebp - 0x96c], 0
je 0x10036f03
jmp 0x10036f05
jmp 0x10036ee2
mov eax, dword [ebp - 0x71c]
inc eax
mov dword [ebp - 0x71c], eax
mov dword [ebp - 0xb34], 0xfff7
mov dword [ebp - 0xb30], 0xfff7
mov dword [ebp - 0xb2c], 0xfff7
mov dword [ebp - 0xb28], 0xfff7
mov dword [ebp - 0x31c], 0
mov dword [ebp - 0xe4], 1
mov dword [ebp - 0xf8], 0x923607a9
mov dword [ebp - 0xc18], 0x4a20a298
mov dword [ebp - 0xa90], 1
mov dword [ebp - 0x2d4], 0x3dda37bb
mov dword [ebp - 0xc34], 1
mov dword [ebp - 0xa98], 0xab4456e3
mov dword [ebp - 0x3fc], 0xea311c3f
mov dword [ebp - 0x40], 0
jmp 0x10036fa4
mov eax, dword [ebp - 0x40]
inc eax
mov dword [ebp - 0x40], eax
cmp dword [ebp - 0x40], 1
jge 0x10036fba
mov eax, dword [ebp - 0x40]
mov dword [ebp + eax*4 - 0xa88], 1
jmp 0x10036f9d
mov dword [ebp - 0x40], 0
jmp 0x10036fca
mov eax, dword [ebp - 0x40]
inc eax
mov dword [ebp - 0x40], eax
cmp dword [ebp - 0x40], 2
jge 0x10036fe0
mov eax, dword [ebp - 0x40]
mov dword [ebp + eax*4 - 0xd64], 0x9683648b
jmp 0x10036fc3
mov dword [ebp - 0x31c], 3
jmp 0x10036ff9
mov eax, dword [ebp - 0x31c]
dec eax
mov dword [ebp - 0x31c], eax
cmp dword [ebp - 0x31c], 0
jl 0x100371fa
mov dword [ebp - 0xc3c], 0xffffffff
mov dword [ebp - 0x1d4], 0
jmp 0x10037029
mov eax, dword [ebp - 0x1d4]
inc eax
mov dword [ebp - 0x1d4], eax
cmp dword [ebp - 0x1d4], 3
jge 0x10037045
mov eax, dword [ebp - 0x1d4]
mov dword [ebp + eax*4 - 0xd38], 0xd00693e9
jmp 0x1003701c
mov eax, dword [ebp - 0x3fc]
dec eax
mov dword [ebp - 0x3fc], eax
mov dword [ebp - 0xf8], 0
jmp 0x1003706b
mov eax, dword [ebp - 0xf8]
inc eax
mov dword [ebp - 0xf8], eax
cmp dword [ebp - 0xf8], 0
jg 0x100371f5
mov dword [ebp - 0x1dc], 0x75cf
mov dword [ebp - 0xe4], 0
jmp 0x1003709b
mov eax, dword [ebp - 0xe4]
inc eax
mov dword [ebp - 0xe4], eax
cmp dword [ebp - 0xe4], 2
jg 0x100370ee
mov eax, dword [ebp - 0xf8]
mov ecx, dword [ebp - 0xf8]
mov ecx, dword [ebp + ecx*4 - 0xb34]
add ecx, dword [ebp + eax*4 - 0xa88]
cmp ecx, dword [ebp - 0x1dc]
jg 0x100370d2
mov dword [ebp - 0x614], 1
jmp 0x100370d9
and dword [ebp - 0x614], 0
mov eax, dword [ebp - 0xe4]
mov ecx, dword [ebp - 0x614]
mov dword [ebp + eax*4 - 0xd38], ecx
jmp 0x1003708e
mov dword [ebp - 0x2d4], 0
jmp 0x10037107
mov eax, dword [ebp - 0x2d4]
dec eax
mov dword [ebp - 0x2d4], eax
cmp dword [ebp - 0x2d4], 0
jl 0x100371f0
mov dword [ebp - 0x324], 0xb8319b88
cmp dword [ebp - 0x1dc], 0
jne 0x10037133
mov dword [ebp - 0x40c], 1
jmp 0x1003713a
and dword [ebp - 0x40c], 0
mov eax, dword [ebp - 0x1dc]
mov dword [ebp - 0xc78], eax
mov eax, dword [ebp - 0x324]
cmp eax, dword [ebp - 0x1dc]
jg 0x10037160
mov dword [ebp - 0x404], 1
jmp 0x10037167
and dword [ebp - 0x404], 0
mov eax, dword [ebp - 0xa90]
cmp dword [ebp - 0x404], eax
jne 0x10037181
mov dword [ebp - 0x7a4], 1
jmp 0x10037188
and dword [ebp - 0x7a4], 0
mov eax, dword [ebp - 0x324]
add eax, dword [ebp - 0x7a4]
mov ecx, dword [ebp - 0x324]
add ecx, dword [ebp - 0x40c]
cmp ecx, eax
jle 0x100371b0
mov dword [ebp - 0x61c], 1
jmp 0x100371b7
and dword [ebp - 0x61c], 0
mov eax, dword [ebp - 0x324]
imul eax, dword [ebp - 0x61c]
cmp eax, dword [ebp - 0xa98]
jle 0x100371d8
mov dword [ebp - 0x414], 1
jmp 0x100371df
and dword [ebp - 0x414], 0
mov eax, dword [ebp - 0x414]
mov dword [ebp - 0xe4], eax
jmp 0x100370fa
jmp 0x1003705e
jmp 0x10036fec
mov dword [ebp - 0x24], 0x51ad386c
mov dword [ebp - 0x4c], 0x54bc
mov dword [ebp - 0xc28], 0x2c7e12fd
mov dword [ebp - 0x1e4], 0
jmp 0x1003722b
mov eax, dword [ebp - 0x1e4]
inc eax
mov dword [ebp - 0x1e4], eax
cmp dword [ebp - 0x1e4], 2
jge 0x10037247
mov eax, dword [ebp - 0x1e4]
mov dword [ebp + eax*4 - 0xb5c], 0x2628217c
jmp 0x1003721e
cmp dword [ebp - 0x4c], 0
jbe 0x10037259
mov dword [ebp - 0x724], 1
jmp 0x10037260
and dword [ebp - 0x724], 0
mov eax, dword [ebp - 0x4c]
cmp eax, dword [ebp - 0x724]
jg 0x10037277
mov dword [ebp - 0x41c], 1
jmp 0x1003727e
and dword [ebp - 0x41c], 0
mov eax, dword [ebp - 0x24]
cmp dword [ebp - 0x41c], eax
jg 0x10037295
mov dword [ebp - 0x624], 1
jmp 0x1003729c
and dword [ebp - 0x624], 0
mov eax, dword [ebp - 0x624]
neg eax
add eax, dword [ebp - 0x24]
cmp eax, dword [ebp - 0x4c]
jge 0x100372b8
mov dword [ebp - 0x424], 1
jmp 0x100372bf
and dword [ebp - 0x424], 0
mov eax, dword [ebp - 0x4c]
sub eax, dword [ebp - 0x424]
imul eax, dword [ebp - 0x4c]
cmp eax, dword [ebp - 0x24]
jle 0x100372dd
mov dword [ebp - 0x7fc], 1
jmp 0x100372e4
and dword [ebp - 0x7fc], 0
mov eax, dword [ebp - 0x4c]
cmp dword [ebp - 0x7fc], eax
je 0x100372fb
mov dword [ebp - 0x42c], 1
jmp 0x10037302
and dword [ebp - 0x42c], 0
mov eax, dword [ebp - 0x42c]
add eax, 0xfffc
jne 0x1003731b
mov dword [ebp - 0x62c], 1
jmp 0x10037322
and dword [ebp - 0x62c], 0
mov eax, dword [ebp - 0x24]
add eax, dword [ebp - 0x62c]
imul eax, dword [ebp - 0x4c]
sub eax, dword [ebp - 0x4c]
cmp dword [ebp - 0x24], eax
jg 0x10037343
mov dword [ebp - 0xaa0], 1
jmp 0x1003734a
and dword [ebp - 0xaa0], 0
mov eax, dword [ebp - 0x4c]
mov dword [ebp - 0x24], eax
mov dword [ebp - 0x24], 1
jmp 0x10037360
mov eax, dword [ebp - 0x24]
dec eax
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 0
jl 0x100373bc
mov dword [ebp - 0xa44], 0
mov eax, dword [ebp - 0x24]
cmp dword [ebp + eax*4 - 0xb5c], 0
jl 0x10037389
mov dword [ebp - 0x434], 1
jmp 0x10037390
and dword [ebp - 0x434], 0
mov eax, dword [ebp - 0x24]
cmp dword [ebp - 0x434], eax
jle 0x100373a7
mov dword [ebp - 0x72c], 1
jmp 0x100373ae
and dword [ebp - 0x72c], 0
mov eax, dword [ebp - 0x72c]
mov dword [ebp - 0xa44], eax
jmp 0x10037359
mov byte [ebp - 0x184], 6
mov byte [ebp - 0x183], 0xbc
mov byte [ebp - 0x182], 0xa
mov byte [ebp - 0x181], 0x5f
mov byte [ebp - 0x180], 0xb
mov byte [ebp - 0x17f], 0
mov byte [ebp - 0x17e], 4
mov byte [ebp - 0x17d], 9
mov byte [ebp - 0x17c], 9
mov byte [ebp - 0x17b], 1
mov byte [ebp - 0x17a], 2
mov byte [ebp - 0x179], 0x16
mov byte [ebp - 0x178], 5
mov byte [ebp - 0x177], 0x1e
mov byte [ebp - 0x176], 3
mov byte [ebp - 0x175], 0x85
mov byte [ebp - 0x174], 0x86
mov byte [ebp - 0x173], 0x8b
mov byte [ebp - 0x172], 3
mov byte [ebp - 0x171], 2
mov byte [ebp - 0x170], 7
mov byte [ebp - 0x16f], 0x5c
mov byte [ebp - 0x16e], 8
mov byte [ebp - 0x16d], 0x1c
mov byte [ebp - 0x16c], 0
mov byte [ebp - 0x16b], 0x65
mov byte [ebp - 0x16a], 1
mov byte [ebp - 0x169], 0x2e
mov dword [ebp - 0x54], 0
mov dword [ebp - 0x144], 4
mov dword [ebp - 0xa4], 0xffffffff
mov dword [ebp - 0x84], 0xba5e0b2f
mov dword [ebp - 0x64], 0
jmp 0x100374b5
mov eax, dword [ebp - 0x64]
inc eax
mov dword [ebp - 0x64], eax
cmp dword [ebp - 0x64], 1
jge 0x100374c8
mov eax, dword [ebp - 0x64]
mov dword [ebp + eax*4 - 0x28], 0xfe
jmp 0x100374ae
mov dword [ebp - 0x64], 0
jmp 0x100374d8
mov eax, dword [ebp - 0x64]
inc eax
mov dword [ebp - 0x64], eax
cmp dword [ebp - 0x64], 1
jge 0x100374ee
mov eax, dword [ebp - 0x64]
mov dword [ebp + eax*4 - 0x110], 8
jmp 0x100374d1
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x28], 0
jl 0x10037507
mov dword [ebp - 0x43c], 1
jmp 0x1003750e
and dword [ebp - 0x43c], 0
cmp dword [ebp - 0x43c], 0xfffffffb
jae 0x10037523
mov dword [ebp - 0x634], 1
jmp 0x1003752a
and dword [ebp - 0x634], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x28]
cmp eax, dword [ebp - 0x634]
jle 0x10037548
mov dword [ebp - 0x444], 1
jmp 0x1003754f
and dword [ebp - 0x444], 0
mov eax, dword [ebp - 0x54]
cmp dword [ebp - 0x444], eax
jg 0x10037566
mov dword [ebp - 0x7ac], 1
jmp 0x1003756d
and dword [ebp - 0x7ac], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x28]
cmp dword [ebp - 0x7ac], eax
jne 0x10037588
mov eax, 0x68cb667f
test eax, eax
je 0x1003759d
mov eax, 0xcd97
test eax, eax
je 0x1003759d
mov dword [ebp - 0x44c], 1
jmp 0x100375a4
and dword [ebp - 0x44c], 0
cmp dword [ebp - 0x44c], 0xa0b5
jl 0x100375bf
cmp dword [ebp - 0x54], 0
jne 0x100375bf
and dword [ebp - 0x63c], 0
jmp 0x100375c9
mov dword [ebp - 0x63c], 1
imul eax, dword [ebp - 0x63c], 0xcb44
push 4
pop ecx
imul ecx, ecx, 0
cmp dword [ebp + ecx - 0x28], eax
jle 0x100375eb
mov dword [ebp - 0x380], 1
jmp 0x100375f2
and dword [ebp - 0x380], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x380]
mov dword [ebp + eax - 0x110], ecx
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x28]
cmp eax, dword [ebp - 0x380]
je 0x10037623
mov dword [ebp - 0x454], 1
jmp 0x1003762a
and dword [ebp - 0x454], 0
mov eax, dword [ebp - 0x54]
cmp dword [ebp - 0x454], eax
jge 0x10037641
mov dword [ebp - 0x734], 1
jmp 0x10037648
and dword [ebp - 0x734], 0
mov eax, dword [ebp - 0x144]
imul eax, dword [ebp - 0x734]
push 4
pop ecx
imul ecx, ecx, 0
mov ecx, dword [ebp + ecx - 0x28]
imul ecx, eax
mov dword [ebp - 0xa4], ecx
cmp dword [ebp - 0xa4], 0
jne 0x1003768a
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x110], 0
jne 0x1003768a
and dword [ebp - 0x45c], 0
jmp 0x10037694
mov dword [ebp - 0x45c], 1
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x28]
add eax, dword [ebp - 0x45c]
mov dword [ebp - 0x84], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x28]
mov dword [ebp - 0xcd0], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0xa4]
cmp ecx, dword [ebp + eax - 0x28]
jne 0x100376d8
mov dword [ebp - 0x644], 1
jmp 0x100376df
and dword [ebp - 0x644], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x644]
mov dword [ebp + eax - 0x110], ecx
mov eax, 0x381e
test eax, eax
je 0x10037702
cmp dword [ebp - 0x144], 0
xor eax, eax
je 0x10037712
mov dword [ebp - 0x464], 1
jmp 0x10037719
and dword [ebp - 0x464], 0
cmp dword [ebp - 0x464], 0xfffffff9
jne 0x1003773b
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x110], 0
jne 0x1003773b
and dword [ebp - 0x970], 0
jmp 0x10037745
mov dword [ebp - 0x970], 1
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x28]
cmp eax, dword [ebp - 0xa4]
jl 0x10037763
mov dword [ebp - 0x7ec], 1
jmp 0x1003776a
and dword [ebp - 0x7ec], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x7ec]
sub ecx, dword [ebp - 0xa4]
sub ecx, dword [ebp + eax - 0x28]
imul eax, ecx, 0xebef
cmp eax, dword [ebp - 0x54]
jg 0x100377a7
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x110], 0
je 0x100377a7
mov dword [ebp - 0x46c], 1
jmp 0x100377ae
and dword [ebp - 0x46c], 0
mov eax, dword [ebp - 0x54]
cmp eax, dword [ebp - 0x46c]
je 0x100377c5
mov dword [ebp - 0x64c], 1
jmp 0x100377cc
and dword [ebp - 0x64c], 0
mov eax, dword [ebp - 0x144]
cmp dword [ebp - 0x64c], eax
jge 0x100377e6
mov dword [ebp - 0x474], 1
jmp 0x100377ed
and dword [ebp - 0x474], 0
mov eax, dword [ebp - 0x144]
cmp dword [ebp - 0x474], eax
jl 0x10037807
mov dword [ebp - 0x73c], 1
jmp 0x1003780e
and dword [ebp - 0x73c], 0
mov eax, dword [ebp - 0x144]
cmp eax, dword [ebp - 0x73c]
jle 0x10037828
mov dword [ebp - 0x47c], 1
jmp 0x1003782f
and dword [ebp - 0x47c], 0
mov eax, dword [ebp - 0xa4]
cmp dword [ebp - 0x47c], eax
jle 0x10037849
mov dword [ebp - 0x654], 1
jmp 0x10037850
and dword [ebp - 0x654], 0
mov eax, dword [ebp - 0xa4]
imul eax, dword [ebp - 0x654]
cmp eax, dword [ebp - 0x84]
jg 0x10037905
mov dword [ebp - 0x2dc], 0
jmp 0x10037882
mov eax, dword [ebp - 0x2dc]
inc eax
mov dword [ebp - 0x2dc], eax
cmp dword [ebp - 0x2dc], 3
jge 0x1003789e
mov eax, dword [ebp - 0x2dc]
mov dword [ebp + eax*4 - 0xd14], 0x1abd849e
jmp 0x10037875
mov dword [ebp - 0x54], 0
jmp 0x100378ae
mov eax, dword [ebp - 0x54]
dec eax
mov dword [ebp - 0x54], eax
cmp dword [ebp - 0x54], 0xffffffec
jg 0x10037903
mov dword [ebp - 0x94c], 1
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x28]
mov dword [ebp - 0x84], eax
mov eax, dword [ebp - 0x94c]
cmp eax, dword [ebp - 0x84]
jne 0x100378e8
mov dword [ebp - 0x484], 1
jmp 0x100378ef
and dword [ebp - 0x484], 0
push 4
pop eax
shl eax, 1
mov ecx, dword [ebp - 0x484]
mov dword [ebp + eax - 0xd14], ecx
jmp 0x100378a7
jmp 0x1003794a
mov dword [ebp - 0x84], 0
jmp 0x1003791e
mov eax, dword [ebp - 0x84]
dec eax
mov dword [ebp - 0x84], eax
cmp dword [ebp - 0x84], 0
jl 0x1003794a
mov byte [ebp - 0xbd], 0
movzx eax, byte [ebp - 0xbd]
test eax, eax
je 0x10037948
push 0
push 0
push 0x12b9
call dword [sym.imp.ADVAPI32.dll_CopySid]
jmp 0x10037911
xor eax, eax
inc eax
shl eax, 0
movzx eax, byte [ebp + eax - 0x184]
and eax, 0x8f
xor ecx, ecx
inc ecx
shl ecx, 0
movzx ecx, byte [ebp + ecx - 0x184]
or ecx, 0x8f
sub ecx, eax
xor eax, eax
inc eax
imul eax, eax, 0
movzx eax, byte [ebp + eax - 0x184]
mov word [ebp + eax*2 - 0xb50], cx
mov dword [ebp - 0xf0], 0
mov dword [ebp - 0x74], 0
jmp 0x100379a3
mov eax, dword [ebp - 0x74]
inc eax
mov dword [ebp - 0x74], eax
cmp dword [ebp - 0x74], 2
jge 0x100379b9
mov eax, dword [ebp - 0x74]
mov dword [ebp + eax*4 - 0xad4], 0x2db2
jmp 0x1003799c
mov dword [ebp - 0x74], 0
jmp 0x100379c9
mov eax, dword [ebp - 0x74]
inc eax
mov dword [ebp - 0x74], eax
cmp dword [ebp - 0x74], 3
jge 0x100379df
mov eax, dword [ebp - 0x74]
mov dword [ebp + eax*4 - 0xd2c], 0xfffffff7
jmp 0x100379c2
mov dword [ebp - 0xf0], 0x91a049fe
mov dword [ebp - 0xf0], 0
jmp 0x10037a02
mov eax, dword [ebp - 0xf0]
inc eax
mov dword [ebp - 0xf0], eax
cmp dword [ebp - 0xf0], 1
jg 0x10037aec
mov dword [ebp - 0x1ec], 0
jmp 0x10037a28
mov eax, dword [ebp - 0x1ec]
inc eax
mov dword [ebp - 0x1ec], eax
cmp dword [ebp - 0x1ec], 2
jge 0x10037a44
mov eax, dword [ebp - 0x1ec]
mov dword [ebp + eax*4 - 0xb68], 0x7e6a
jmp 0x10037a1b
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0xad4], 0x6427
jge 0x10037a69
mov eax, 0x90d88394
test eax, eax
jne 0x10037a69
and dword [ebp - 0x868], 0
jmp 0x10037a73
mov dword [ebp - 0x868], 1
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xb68]
mov dword [ebp - 0xc30], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xad4]
mov dword [ebp - 0xc80], eax
cmp dword [ebp - 0xf0], 0xffffffff
jl 0x10037aae
mov dword [ebp - 0x7b4], 1
jmp 0x10037ab5
and dword [ebp - 0x7b4], 0
cmp dword [ebp - 0x7b4], 0x8d9d
jne 0x10037acd
mov dword [ebp - 0x48c], 1
jmp 0x10037ad4
and dword [ebp - 0x48c], 0
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x48c]
mov dword [ebp + eax - 0xd2c], ecx
jmp 0x100379f5
mov dword [ebp - 0x18], 2
and dword [ebp - 0x164], 0
jmp 0x10037b04
mov eax, dword [ebp - 0x18]
inc eax
inc eax
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 0x1c
jae 0x10039272
mov dword [ebp - 0x65c], 0x5292
mov dword [ebp - 0xa3c], str.meiubj_clfjb_sonqkhm
cmp dword [ebp - 0x65c], 0x5326
jle 0x10037c27
push 0xf29
push 0
push 0x761
push 0xd2c
call dword [sym.imp.USER32.dll_SystemParametersInfoW]
and dword [ebp - 0x1fc], 0
jmp 0x10037b5f
mov eax, dword [ebp - 0x1fc]
inc eax
mov dword [ebp - 0x1fc], eax
cmp dword [ebp - 0x1fc], 0x1803
jge 0x10037c27
and dword [ebp - 0x2e4], 0
jmp 0x10037b85
mov eax, dword [ebp - 0x2e4]
inc eax
mov dword [ebp - 0x2e4], eax
cmp dword [ebp - 0x2e4], 0x3079
jge 0x10037c22
and dword [ebp - 0x32c], 0
jmp 0x10037bab
mov eax, dword [ebp - 0x32c]
inc eax
mov dword [ebp - 0x32c], eax
cmp dword [ebp - 0x32c], 0x6cb7
jge 0x10037c1d
and dword [ebp - 0x1f4], 0
jmp 0x10037bcd
mov eax, dword [ebp - 0x1f4]
inc eax
mov dword [ebp - 0x1f4], eax
cmp dword [ebp - 0x1f4], 0x7cc
jge 0x10037c1b
mov eax, dword [ebp - 0x32c]
cdq
idiv dword [ebp - 0x1f4]
mov ecx, dword [ebp - 0x2e4]
sub ecx, edx
mov eax, dword [ebp - 0x1fc]
shl eax, cl
cdq
mov dword [ebp - 0x984], eax
mov dword [ebp - 0x980], edx
push dword [ebp - 0x980]
push dword [ebp - 0x984]
mov ecx, 0x1007d9f8
call fcn.10001bd6
jmp 0x10037bc0
jmp 0x10037b9e
jmp 0x10037b78
jmp 0x10037b52
mov dword [ebp - 0x494], 0xffffffff
mov dword [ebp - 4], 2
cmp dword [ebp - 0x65c], 0x4ede
jge 0x10037c54
mov edx, dword [ebp - 0xa3c]
mov ecx, 0x1007d9f8
call fcn.1000358d
jmp 0x10037c70
or dword [ebp - 4], 0xffffffff
jmp 0x10037c7a
mov dword [ebp - 0x97c], 0xffffffff
mov dword [ebp - 0x870], 0xfffffff8
mov dword [ebp - 0x744], 0xeb905d09
mov dword [ebp - 0x100], 0x2b47
mov dword [ebp - 0x334], 0
jmp 0x10037cbb
mov eax, dword [ebp - 0x334]
inc eax
mov dword [ebp - 0x334], eax
cmp dword [ebp - 0x334], 1
jge 0x10037cd7
mov eax, dword [ebp - 0x334]
mov dword [ebp + eax*4 - 0x3cc], 1
jmp 0x10037cae
mov eax, dword [ebp - 0x100]
dec eax
mov dword [ebp - 0x100], eax
mov eax, dword [ebp - 0x744]
mov dword [ebp - 0x494], eax
cmp dword [ebp - 0x494], 0
jne 0x10037d75
mov eax, 0xf78d7cba
test eax, eax
je 0x10037d17
cmp dword [ebp - 0x744], 0
je 0x10037d17
mov dword [ebp - 0x49c], 1
jmp 0x10037d1e
and dword [ebp - 0x49c], 0
cmp dword [ebp - 0x49c], 0
jne 0x10037d33
mov dword [ebp - 0x664], 1
jmp 0x10037d3a
and dword [ebp - 0x664], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x3cc]
cmp eax, dword [ebp - 0x664]
jl 0x10037d5b
mov dword [ebp - 0x3b8], 1
jmp 0x10037d62
and dword [ebp - 0x3b8], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x3b8]
mov dword [ebp + eax - 0x3cc], ecx
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x3cc]
mov dword [ebp - 0xc38], eax
mov eax, dword [ebp - 0x870]
cmp eax, dword [ebp - 0x100]
je 0x10037da2
mov dword [ebp - 0x4a4], 1
jmp 0x10037da9
and dword [ebp - 0x4a4], 0
mov eax, dword [ebp - 0x100]
cmp dword [ebp - 0x4a4], eax
jg 0x10037dc3
mov dword [ebp - 0x800], 1
jmp 0x10037dca
and dword [ebp - 0x800], 0
cmp dword [ebp - 0x800], 0xffffffff
jne 0x10037ddf
mov dword [ebp - 0x4ac], 1
jmp 0x10037de6
and dword [ebp - 0x4ac], 0
mov eax, dword [ebp - 0x100]
cmp dword [ebp - 0x4ac], eax
jl 0x10037e00
mov dword [ebp - 0x66c], 1
jmp 0x10037e07
and dword [ebp - 0x66c], 0
mov eax, dword [ebp - 0x100]
cmp dword [ebp - 0x66c], eax
jne 0x10037e21
mov dword [ebp - 0x4b4], 1
jmp 0x10037e28
and dword [ebp - 0x4b4], 0
mov eax, dword [ebp - 0x4b4]
mov dword [ebp - 0x97c], eax
xor eax, eax
inc eax
imul eax, eax, 0
movzx eax, byte [ebp + eax - 0x184]
lea eax, [eax + eax + 2]
cmp dword [ebp - 0x18], eax
jne 0x10038c6b
mov dword [ebp - 0x7f8], 0
mov dword [ebp - 0x4f4], 1
mov dword [ebp - 0x5c], 0
jmp 0x10037e73
mov eax, dword [ebp - 0x5c]
inc eax
mov dword [ebp - 0x5c], eax
cmp dword [ebp - 0x5c], 4
jge 0x10037e89
mov eax, dword [ebp - 0x5c]
mov dword [ebp + eax*4 - 0x838], 0xfffffff7
jmp 0x10037e6c
mov dword [ebp - 0x5c], 0
jmp 0x10037e99
mov eax, dword [ebp - 0x5c]
inc eax
mov dword [ebp - 0x5c], eax
cmp dword [ebp - 0x5c], 4
jge 0x10037eaf
mov eax, dword [ebp - 0x5c]
mov dword [ebp + eax*4 - 0xcb8], 0xfffffffc
jmp 0x10037e92
push 4
pop eax
shl eax, 0
mov dword [ebp + eax - 0x838], 0
jmp 0x10037edd
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x838]
inc eax
push 4
pop ecx
shl ecx, 0
mov dword [ebp + ecx - 0x838], eax
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x838], 5
jge 0x1003846b
mov dword [ebp - 0x44], 0x272a7275
mov dword [ebp - 0x4cc], 0x7f13bcf5
mov dword [ebp - 0x74c], 0x1c46
mov dword [ebp - 0xa58], str.sxszx_etais_hhc_iilvqdpi_aufhinh_azxoysxk_bley_alxqsxevi_oqjtz_edukhwffj_mvu
cmp dword [ebp - 0x74c], 0x1ddf
jle 0x1003800a
and dword [ebp - 0x20c], 0
jmp 0x10037f3c
mov eax, dword [ebp - 0x20c]
inc eax
mov dword [ebp - 0x20c], eax
cmp dword [ebp - 0x20c], 0x45f7
jge 0x10037ffd
and dword [ebp - 0x1b8], 0
jmp 0x10037f62
mov eax, dword [ebp - 0x1b8]
inc eax
mov dword [ebp - 0x1b8], eax
cmp dword [ebp - 0x1b8], 0x554d
jge 0x10037ff8
and dword [ebp - 0x2ec], 0
jmp 0x10037f88
mov eax, dword [ebp - 0x2ec]
inc eax
mov dword [ebp - 0x2ec], eax
cmp dword [ebp - 0x2ec], 0x1817
jge 0x10037ff3
mov eax, dword [ebp - 0x1b8]
mov ecx, dword [ebp - 0x2ec]
sar eax, cl
or eax, dword [ebp - 0x20c]
cdq
mov dword [ebp - 0x990], eax
mov dword [ebp - 0x98c], edx
push dword [ebp - 0x98c]
push dword [ebp - 0x990]
lea ecx, [ebp - 0xec8]
call fcn.10001a31
pop ecx
pop ecx
mov dword [ebp - 0x878], eax
mov ecx, dword [ebp - 0x878]
call fcn.10001bb6
push eax
call fcn.1004b2d6
pop ecx
lea ecx, [ebp - 0xec8]
call fcn.10001bac
jmp 0x10037f7b
jmp 0x10037f55
jmp 0x10037f2f
push 0x857
push 0
call dword [sym.imp.KERNEL32.dll_GetSystemDirectoryA]
mov dword [ebp - 0x33c], 0
jmp 0x10038023
mov eax, dword [ebp - 0x33c]
inc eax
mov dword [ebp - 0x33c], eax
cmp dword [ebp - 0x33c], 1
jge 0x1003803f
mov eax, dword [ebp - 0x33c]
mov dword [ebp + eax*4 - 0xac], 0xd05ba772
jmp 0x10038016
mov dword [ebp - 4], 4
cmp dword [ebp - 0x74c], 0x18df
jge 0x1003805e
push dword [ebp - 0xa58]
call fcn.1004b2d6
pop ecx
jmp 0x1003807a
or dword [ebp - 4], 0xffffffff
jmp 0x10038084
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0xac], 0xfffffff3
jmp 0x100380b2
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xac]
inc eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0xac], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0xac], 0x1d
je 0x10038282
mov byte [ebp - 0x9d], 0
movzx eax, byte [ebp - 0x9d]
test eax, eax
je 0x10038261
mov dword [ebp - 0x4bc], 0x29a8
mov dword [ebp - 0x988], str.twy_rituf_vwihmnpjh_irut_ljdyqbvri
cmp dword [ebp - 0x4bc], 0x2c1a
jle 0x1003820f
and dword [ebp - 0x214], 0
jmp 0x10038116
mov eax, dword [ebp - 0x214]
inc eax
mov dword [ebp - 0x214], eax
cmp dword [ebp - 0x214], 0xa4f
jge 0x1003820f
and dword [ebp - 0x2f4], 0
jmp 0x1003813c
mov eax, dword [ebp - 0x2f4]
inc eax
mov dword [ebp - 0x2f4], eax
cmp dword [ebp - 0x2f4], 0x801
jge 0x1003820a
and dword [ebp - 0x21c], 0
jmp 0x10038162
mov eax, dword [ebp - 0x21c]
inc eax
mov dword [ebp - 0x21c], eax
cmp dword [ebp - 0x21c], 0x7368
jge 0x10038205
and dword [ebp - 0x344], 0
jmp 0x10038188
mov eax, dword [ebp - 0x344]
inc eax
mov dword [ebp - 0x344], eax
cmp dword [ebp - 0x344], 0x422c
jge 0x10038200
mov eax, dword [ebp - 0x214]
mov ecx, dword [ebp - 0x2f4]
sar eax, cl
mov ecx, dword [ebp - 0x21c]
sar eax, cl
mov ecx, dword [ebp - 0x344]
shl eax, cl
cdq
mov dword [ebp - 0x99c], eax
mov dword [ebp - 0x998], edx
push dword [ebp - 0x998]
push dword [ebp - 0x99c]
lea ecx, [ebp - 0xe2c]
call fcn.10001a31
pop ecx
pop ecx
mov dword [ebp - 0x880], eax
mov ecx, dword [ebp - 0x880]
call fcn.10001bb6
push eax
call fcn.1004b2d6
pop ecx
lea ecx, [ebp - 0xe2c]
call fcn.10001bac
jmp 0x1003817b
jmp 0x10038155
jmp 0x1003812f
jmp 0x10038109
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_IsZoomed]
mov dword [ebp - 4], 6
cmp dword [ebp - 0x4bc], 0x27f6
jge 0x1003823b
push dword [ebp - 0x988]
call fcn.1004b2d6
pop ecx
jmp 0x10038257
or dword [ebp - 4], 0xffffffff
jmp 0x10038261
mov byte [ebp - 0xdd], 0
movzx eax, byte [ebp - 0xdd]
test eax, eax
je 0x1003827d
push 0
push 0
call dword [sym.imp.GDI32.dll_GetRgnBox]
jmp 0x10038097
mov dword [ebp - 0x44], 0xf
jmp 0x10038292
mov eax, dword [ebp - 0x44]
dec eax
mov dword [ebp - 0x44], eax
cmp dword [ebp - 0x44], 0xffffffe3
je 0x10038466
mov dword [ebp - 0x224], 0
jmp 0x100382b5
mov eax, dword [ebp - 0x224]
inc eax
mov dword [ebp - 0x224], eax
cmp dword [ebp - 0x224], 2
jge 0x100382d1
mov eax, dword [ebp - 0x224]
mov dword [ebp + eax*4 - 0x820], 4
jmp 0x100382a8
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x838]
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0xac], eax
mov eax, 0xcced
test eax, eax
je 0x10038309
mov eax, 0xffff
test eax, eax
je 0x10038309
mov dword [ebp - 0x674], 1
jmp 0x10038310
and dword [ebp - 0x674], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x44]
imul ecx, dword [ebp - 0x674]
cmp ecx, dword [ebp + eax - 0x820]
jne 0x10038335
mov dword [ebp - 0x4c4], 1
jmp 0x1003833c
and dword [ebp - 0x4c4], 0
cmp dword [ebp - 0x4c4], 0x83a0
jl 0x10038354
mov dword [ebp - 0x888], 1
jmp 0x1003835b
and dword [ebp - 0x888], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x838]
mov dword [ebp - 0xca8], eax
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x838]
mov dword [ebp - 0xc40], eax
mov eax, dword [ebp - 0x44]
mov dword [ebp - 0xc88], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xac]
mov dword [ebp - 0xc48], eax
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x44]
add ecx, 0x303f
imul ecx, dword [ebp + eax - 0x820]
cmp ecx, dword [ebp - 0x44]
jl 0x100383c9
xor eax, eax
inc eax
je 0x100383c9
mov dword [ebp - 0x7bc], 1
jmp 0x100383d0
and dword [ebp - 0x7bc], 0
mov eax, dword [ebp - 0x7bc]
mov dword [ebp - 0x4cc], eax
mov eax, dword [ebp - 0x4cc]
mov dword [ebp - 0xb94], eax
mov eax, dword [ebp - 0x44]
mov dword [ebp - 0xb9c], eax
push 4
pop eax
shl eax, 0
imul eax, dword [ebp + eax - 0x820], 0xffffffff
test eax, eax
jne 0x1003840f
mov dword [ebp - 0x67c], 1
jmp 0x10038416
and dword [ebp - 0x67c], 0
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x67c]
sub ecx, dword [ebp + eax - 0x820]
jne 0x10038444
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0xac], 0
jne 0x10038444
and dword [ebp - 0x4d4], 0
jmp 0x1003844e
mov dword [ebp - 0x4d4], 1
push 4
pop eax
imul eax, eax, 3
mov ecx, dword [ebp - 0x4d4]
mov dword [ebp + eax - 0xcb8], ecx
jmp 0x1003828b
jmp 0x10037ec2
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x838]
mov dword [ebp - 0xba4], eax
mov eax, 0xc702b5bd
test eax, eax
je 0x1003849c
cmp dword [ebp - 0x4f4], 0
je 0x1003849c
mov dword [ebp - 0x754], 1
jmp 0x100384a3
and dword [ebp - 0x754], 0
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0xcb8]
cmp dword [ebp - 0x754], eax
jle 0x100384c3
mov dword [ebp - 0x4dc], 1
jmp 0x100384ca
and dword [ebp - 0x4dc], 0
cmp dword [ebp - 0x4dc], 0xa65c
jg 0x100384e2
mov dword [ebp - 0x684], 1
jmp 0x100384e9
and dword [ebp - 0x684], 0
cmp dword [ebp - 0x684], 0x8339
jge 0x10038501
mov dword [ebp - 0x4e4], 1
jmp 0x10038508
and dword [ebp - 0x4e4], 0
cmp dword [ebp - 0x4e4], 0x2e31b546
je 0x10038520
mov dword [ebp - 0xa60], 1
jmp 0x10038527
and dword [ebp - 0xa60], 0
mov eax, dword [ebp - 0x7f8]
mov dword [ebp - 0xbac], eax
cmp dword [ebp - 0x7f8], 0xfffffffd
jge 0x10038548
mov dword [ebp - 0x4ec], 1
jmp 0x1003854f
and dword [ebp - 0x4ec], 0
cmp dword [ebp - 0x4ec], 0xffff
jb 0x10038567
mov dword [ebp - 0x68c], 1
jmp 0x1003856e
and dword [ebp - 0x68c], 0
imul eax, dword [ebp - 0x68c], 0xfffffff8
push 4
pop ecx
imul ecx, ecx, 3
mov dword [ebp + ecx - 0xcb8], eax
cmp dword [ebp - 0x4f4], 1
je 0x10038597
mov dword [ebp - 0x75c], 1
jmp 0x1003859e
and dword [ebp - 0x75c], 0
imul eax, dword [ebp - 0x75c], 0
cmp eax, 0x1eb1
jg 0x100385b8
mov dword [ebp - 0x4fc], 1
jmp 0x100385bf
and dword [ebp - 0x4fc], 0
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x4fc]
mov dword [ebp + eax - 0x838], ecx
mov eax, dword [ebp - 0x18]
movzx eax, byte [ebp + eax - 0x184]
inc eax
mov dword [ebp - 0x164], eax
mov dword [ebp - 0x194], 0xf7e2799a
mov dword [ebp - 0x190], 0xf7e2799a
mov dword [ebp - 0x18c], 0xf7e2799a
mov dword [ebp - 0x188], 0xf7e2799a
mov dword [ebp - 0x22c], 0x4272ba75
mov dword [ebp - 0x898], 0xc9ad537
push 4
pop eax
shl eax, 1
mov dword [ebp + eax - 0x194], 0xc
jmp 0x1003864b
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x194]
inc eax
push 4
pop ecx
shl ecx, 1
mov dword [ebp + ecx - 0x194], eax
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0x194], 0xd
jl 0x1003873b
mov dword [ebp - 0x694], 1
mov dword [ebp - 0x3c8], 0
mov dword [ebp - 0x890], 0xf8b8ae50
mov dword [ebp - 0x2fc], 0
jmp 0x10038695
mov eax, dword [ebp - 0x2fc]
inc eax
mov dword [ebp - 0x2fc], eax
cmp dword [ebp - 0x2fc], 2
jge 0x100386b1
mov eax, dword [ebp - 0x2fc]
mov dword [ebp + eax*4 - 0xb74], 0x50b5f0b1
jmp 0x10038688
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x194]
mov dword [ebp - 0x694], eax
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x194]
cmp eax, dword [ebp - 0x694]
jle 0x100386e4
mov dword [ebp - 0x504], 1
jmp 0x100386eb
and dword [ebp - 0x504], 0
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x194]
mov dword [ebp - 0x3c8], eax
mov eax, dword [ebp - 0x504]
sub eax, dword [ebp - 0x3c8]
je 0x10038720
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xb74]
mov dword [ebp - 0x3c8], eax
jmp 0x10038736
mov dword [ebp - 0x994], 0xbffbefa5
mov eax, dword [ebp - 0x890]
mov dword [ebp - 0x994], eax
jmp 0x10038632
mov dword [ebp - 0x22c], 0
jmp 0x10038754
mov eax, dword [ebp - 0x22c]
dec eax
mov dword [ebp - 0x22c], eax
cmp dword [ebp - 0x22c], 0xfffffff7
jg 0x10038a66
mov dword [ebp - 0x14], 0
mov dword [ebp - 0x50c], 0xffffffff
mov dword [ebp - 0xb4], 1
mov dword [ebp - 0x14], 3
jmp 0x1003878c
mov eax, dword [ebp - 0x14]
dec eax
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 0
jl 0x100389e7
mov dword [ebp - 0x118], 0xfffffffa
mov dword [ebp - 0x118], 0
jmp 0x100387b9
mov eax, dword [ebp - 0x118]
inc eax
mov dword [ebp - 0x118], eax
cmp dword [ebp - 0x118], 4
jge 0x100387d5
mov eax, dword [ebp - 0x118]
mov dword [ebp + eax*4 - 0x194], 1
jmp 0x100387ac
mov eax, dword [ebp - 0x14]
cmp dword [ebp + eax*4 - 0x194], 0
je 0x100388e4
push 4
pop eax
imul eax, eax, 3
push 4
pop ecx
shl ecx, 1
mov ecx, dword [ebp + ecx - 0x194]
imul ecx, dword [ebp + eax - 0x194]
test ecx, ecx
jne 0x10038816
mov eax, 0x32d748ae
test eax, eax
jne 0x10038816
and dword [ebp - 0x7c4], 0
jmp 0x10038820
mov dword [ebp - 0x7c4], 1
mov eax, dword [ebp - 0x7c4]
sub eax, 0x5e435cc7
mov dword [ebp - 0x50c], eax
cmp dword [ebp - 0x50c], 0xfffffff9
jge 0x10038846
mov dword [ebp - 0x69c], 1
jmp 0x1003884d
and dword [ebp - 0x69c], 0
mov eax, dword [ebp - 0x14]
cmp dword [ebp - 0x69c], eax
jle 0x10038864
mov dword [ebp - 0x514], 1
jmp 0x1003886b
and dword [ebp - 0x514], 0
mov eax, dword [ebp - 0x14]
cmp dword [ebp - 0x514], eax
jl 0x10038882
mov dword [ebp - 0x764], 1
jmp 0x10038889
and dword [ebp - 0x764], 0
mov eax, dword [ebp - 0x14]
mov ecx, dword [ebp - 0x764]
sub ecx, dword [ebp + eax*4 - 0x194]
sub ecx, dword [ebp - 0x14]
cmp ecx, dword [ebp - 0x14]
jl 0x100388ad
mov dword [ebp - 0x51c], 1
jmp 0x100388b4
and dword [ebp - 0x51c], 0
mov eax, dword [ebp - 0x51c]
mov dword [ebp - 0xb4], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0xb4]
add ecx, dword [ebp + eax - 0x194]
cmp ecx, dword [ebp - 0x14]
jg 0x100388e4
mov dword [ebp - 0x6a4], 1
jmp 0x100388eb
and dword [ebp - 0x6a4], 0
mov eax, dword [ebp - 0x6a4]
sub eax, dword [ebp - 0x14]
mov ecx, dword [ebp - 0x14]
cmp dword [ebp + ecx*4 - 0x194], eax
jg 0x1003890c
mov dword [ebp - 0x524], 1
jmp 0x10038913
and dword [ebp - 0x524], 0
imul eax, dword [ebp - 0x524], 0xabc1
test eax, eax
je 0x1003893c
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0x194], 0
je 0x1003893c
mov dword [ebp - 0x808], 1
jmp 0x10038943
and dword [ebp - 0x808], 0
mov eax, dword [ebp - 0x14]
mov ecx, dword [ebp - 0x14]
mov ecx, dword [ebp + ecx*4 - 0x194]
imul ecx, dword [ebp - 0x808]
cmp ecx, dword [ebp + eax*4 - 0x194]
jne 0x1003896c
mov dword [ebp - 0x52c], 1
jmp 0x10038973
and dword [ebp - 0x52c], 0
mov eax, dword [ebp - 0x14]
cmp dword [ebp - 0x52c], eax
jl 0x1003898a
mov dword [ebp - 0x6ac], 1
jmp 0x10038991
and dword [ebp - 0x6ac], 0
mov eax, dword [ebp - 0x898]
cmp dword [ebp - 0x6ac], eax
jge 0x100389ab
mov dword [ebp - 0x534], 1
jmp 0x100389b2
and dword [ebp - 0x534], 0
mov eax, dword [ebp - 0x14]
cmp dword [ebp - 0x534], eax
jg 0x100389c9
mov dword [ebp - 0x76c], 1
jmp 0x100389d0
and dword [ebp - 0x76c], 0
push 4
pop eax
shl eax, 1
mov ecx, dword [ebp - 0x76c]
mov dword [ebp + eax - 0x194], ecx
jmp 0x10038785
mov dword [ebp - 0xb4], 9
jmp 0x10038a00
mov eax, dword [ebp - 0xb4]
inc eax
mov dword [ebp - 0xb4], eax
cmp dword [ebp - 0xb4], 0x13
jg 0x10038a61
mov dword [ebp - 0x14], 0
jmp 0x10038a19
mov eax, dword [ebp - 0x14]
inc eax
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 3
jg 0x10038a4c
mov byte [ebp - 0x8d], 0
movzx eax, byte [ebp - 0x8d]
test eax, eax
je 0x10038a4a
push 0x1405
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_SetROP2]
jmp 0x10038a12
mov eax, dword [ebp - 0xb4]
push 4
pop ecx
imul ecx, ecx, 3
mov dword [ebp + ecx - 0x194], eax
jmp 0x100389f3
jmp 0x10038747
mov eax, dword [ebp - 0x18]
movzx eax, byte [ebp + eax - 0x184]
mov ecx, dword [ebp - 0x18]
lea eax, [ecx + eax - 1]
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x53c], 0x1873
mov dword [ebp - 0x8a0], str.qmoxvxg_ekcxu_vlslpkx
cmp dword [ebp - 0x53c], 0x1ad9
jle 0x10038b76
and dword [ebp - 0x34c], 0
jmp 0x10038ab5
mov eax, dword [ebp - 0x34c]
inc eax
mov dword [ebp - 0x34c], eax
cmp dword [ebp - 0x34c], 0xb1c
jge 0x10038b76
and dword [ebp - 0x234], 0
jmp 0x10038adb
mov eax, dword [ebp - 0x234]
inc eax
mov dword [ebp - 0x234], eax
cmp dword [ebp - 0x234], 0x5d64
jge 0x10038b71
and dword [ebp - 0x304], 0
jmp 0x10038b01
mov eax, dword [ebp - 0x304]
inc eax
mov dword [ebp - 0x304], eax
cmp dword [ebp - 0x304], 0x71f2
jge 0x10038b6c
mov eax, dword [ebp - 0x34c]
mov ecx, dword [ebp - 0x234]
shl eax, cl
and eax, dword [ebp - 0x304]
cdq
mov dword [ebp - 0x9a8], eax
mov dword [ebp - 0x9a4], edx
push dword [ebp - 0x9a4]
push dword [ebp - 0x9a8]
lea ecx, [ebp - 0xea4]
call fcn.10001a31
pop ecx
pop ecx
mov dword [ebp - 0xa9c], eax
mov ecx, dword [ebp - 0xa9c]
call fcn.10001bb6
push eax
call fcn.1004b2d6
pop ecx
lea ecx, [ebp - 0xea4]
call fcn.10001bac
jmp 0x10038af4
jmp 0x10038ace
jmp 0x10038aa8
mov dword [ebp - 0x9a0], 0xffffffff
mov dword [ebp - 4], 8
cmp dword [ebp - 0x53c], 0x14d1
jge 0x10038b9f
push dword [ebp - 0x8a0]
call fcn.1004b2d6
pop ecx
jmp 0x10038bbb
or dword [ebp - 4], 0xffffffff
jmp 0x10038bc5
mov dword [ebp - 0x8a8], 0x5d16df25
mov dword [ebp - 0x1c], 0
jmp 0x10038bdf
mov eax, dword [ebp - 0x1c]
inc eax
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 1
jge 0x10038bf5
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0xbb4], 1
jmp 0x10038bd8
mov dword [ebp - 0x1c], 0
jmp 0x10038c05
mov eax, dword [ebp - 0x1c]
inc eax
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 2
jge 0x10038c1b
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0xd74], 0xfffffffc
jmp 0x10038bfe
mov dword [ebp - 0x1c], 0
jmp 0x10038c2b
mov eax, dword [ebp - 0x1c]
inc eax
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 3
jge 0x10038c41
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0xc04], 0x6b6cd333
jmp 0x10038c24
mov eax, dword [ebp - 0x9a0]
mov dword [ebp - 0x8a8], eax
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0xc04]
inc eax
push 4
pop ecx
shl ecx, 1
mov dword [ebp + ecx - 0xc04], eax
jmp 0x10037afc
mov eax, dword [ebp - 0x18]
sub eax, dword [ebp - 0x164]
movzx eax, byte [ebp + eax - 0x186]
movzx eax, word [ebp + eax*2 - 0xb50]
mov ecx, dword [ebp - 0x18]
movzx ecx, byte [ebp + ecx - 0x183]
and ecx, eax
mov eax, dword [ebp - 0x18]
sub eax, dword [ebp - 0x164]
movzx eax, byte [ebp + eax - 0x186]
movzx eax, word [ebp + eax*2 - 0xb50]
mov edx, dword [ebp - 0x18]
movzx edx, byte [ebp + edx - 0x183]
and edx, eax
mov eax, dword [ebp - 0x18]
sub eax, dword [ebp - 0x164]
movzx eax, byte [ebp + eax - 0x186]
movzx eax, word [ebp + eax*2 - 0xb50]
mov esi, dword [ebp - 0x18]
movzx esi, byte [ebp + esi - 0x183]
add esi, eax
sub esi, edx
sub esi, ecx
mov eax, dword [ebp - 0x18]
movzx eax, byte [ebp + eax - 0x184]
mov word [ebp + eax*2 - 0xb50], si
mov dword [ebp - 0x38c], 0
mov dword [ebp - 0x3c0], 0xb8ee41b
mov dword [ebp - 0xbc], 0xcb143e95
mov dword [ebp - 0x3ac], 0xde9bf9f
mov dword [ebp - 0x8b8], 6
mov dword [ebp - 0x58c], 0x898f01ba
mov dword [ebp - 0x584], 0x38884515
mov dword [ebp - 0x574], 0xa22e974a
mov dword [ebp - 0x24c], 0xffff
mov dword [ebp - 0x594], 0xe7bf
mov dword [ebp - 0x6cc], 1
mov dword [ebp - 0x6dc], 0x84d7
mov dword [ebp - 0x48], 0
jmp 0x10038d7c
mov eax, dword [ebp - 0x48]
inc eax
mov dword [ebp - 0x48], eax
cmp dword [ebp - 0x48], 2
jge 0x10038d92
mov eax, dword [ebp - 0x48]
mov dword [ebp + eax*4 - 0x828], 0x4952f341
jmp 0x10038d75
mov dword [ebp - 0x6b4], 0x2fb5
mov dword [ebp - 0x8b0], str.ygldvb_mvvei_gyyyuctjj_qaf_clmvntr_rmnr_ynbpe_hxm
cmp dword [ebp - 0x6b4], 0x2fd9
jle 0x10038ebf
and dword [ebp - 0x244], 0
jmp 0x10038dcc
mov eax, dword [ebp - 0x244]
inc eax
mov dword [ebp - 0x244], eax
cmp dword [ebp - 0x244], 0x200a
jge 0x10038ebf
and dword [ebp - 0x30c], 0
jmp 0x10038df2
mov eax, dword [ebp - 0x30c]
inc eax
mov dword [ebp - 0x30c], eax
cmp dword [ebp - 0x30c], 0xf9d
jge 0x10038eba
and dword [ebp - 0x23c], 0
jmp 0x10038e18
mov eax, dword [ebp - 0x23c]
inc eax
mov dword [ebp - 0x23c], eax
cmp dword [ebp - 0x23c], 0x2a6f
jge 0x10038eb5
and dword [ebp - 0x354], 0
jmp 0x10038e3e
mov eax, dword [ebp - 0x354]
inc eax
mov dword [ebp - 0x354], eax
cmp dword [ebp - 0x354], 0x3acf
jge 0x10038eb0
mov eax, dword [ebp - 0x23c]
cdq
idiv dword [ebp - 0x354]
mov eax, dword [ebp - 0x244]
add eax, dword [ebp - 0x30c]
or eax, edx
cdq
mov dword [ebp - 0x9b4], eax
mov dword [ebp - 0x9b0], edx
push dword [ebp - 0x9b0]
push dword [ebp - 0x9b4]
lea ecx, [ebp - 0xdb4]
call fcn.10001a31
pop ecx
pop ecx
mov dword [ebp - 0xa4c], eax
mov ecx, dword [ebp - 0xa4c]
call fcn.10001bb6
push eax
call fcn.1004b2d6
pop ecx
lea ecx, [ebp - 0xdb4]
call fcn.10001bac
jmp 0x10038e31
jmp 0x10038e0b
jmp 0x10038de5
jmp 0x10038dbf
mov dword [ebp - 0x48], 0
jmp 0x10038ecf
mov eax, dword [ebp - 0x48]
inc eax
mov dword [ebp - 0x48], eax
cmp dword [ebp - 0x48], 3
jge 0x10038ee5
mov eax, dword [ebp - 0x48]
mov dword [ebp + eax*4 - 0xc14], 0xde36
jmp 0x10038ec8
mov dword [ebp - 4], 0xa
cmp dword [ebp - 0x6b4], 0x2ec6
jge 0x10038f04
push dword [ebp - 0x8b0]
call fcn.1004b2d6
pop ecx
jmp 0x10038f20
or dword [ebp - 4], 0xffffffff
jmp 0x10038f2a
cmp dword [ebp - 0x38c], 0
jne 0x100390b1
mov eax, dword [ebp - 0x3ac]
mov dword [ebp - 0xbbc], eax
mov eax, 0x6c65b0b5
test eax, eax
je 0x10038f61
cmp dword [ebp - 0x3c0], 0
je 0x10038f61
mov dword [ebp - 0x9ac], 1
jmp 0x10038f68
and dword [ebp - 0x9ac], 0
mov eax, dword [ebp - 0xbc]
mov dword [ebp - 0xbf4], eax
mov eax, dword [ebp - 0xbc]
add eax, dword [ebp - 0x574]
cmp eax, dword [ebp - 0x584]
jle 0x10038f94
mov dword [ebp - 0x544], 1
jmp 0x10038f9b
and dword [ebp - 0x544], 0
mov eax, dword [ebp - 0xbc]
cmp dword [ebp - 0x544], eax
jne 0x10038fb5
mov dword [ebp - 0x7cc], 1
jmp 0x10038fbc
and dword [ebp - 0x7cc], 0
mov eax, dword [ebp - 0x8b8]
cmp dword [ebp - 0x7cc], eax
jle 0x10038fdf
cmp dword [ebp - 0x3ac], 0
je 0x10038fdf
mov dword [ebp - 0x54c], 1
jmp 0x10038fe6
and dword [ebp - 0x54c], 0
cmp dword [ebp - 0x54c], 0x77b69c93
jge 0x10038ffe
mov dword [ebp - 0x6bc], 1
jmp 0x10039005
and dword [ebp - 0x6bc], 0
mov eax, dword [ebp - 0x24c]
dec eax
mov dword [ebp - 0x24c], eax
mov eax, dword [ebp - 0x24c]
cmp eax, dword [ebp - 0x6bc]
je 0x1003902c
mov dword [ebp - 0x554], 1
jmp 0x10039033
and dword [ebp - 0x554], 0
mov eax, dword [ebp - 0x594]
cmp dword [ebp - 0x554], eax
je 0x1003904d
mov dword [ebp - 0x774], 1
jmp 0x10039054
and dword [ebp - 0x774], 0
mov eax, dword [ebp - 0x3ac]
cmp dword [ebp - 0x774], eax
jge 0x1003906e
mov dword [ebp - 0x55c], 1
jmp 0x10039075
and dword [ebp - 0x55c], 0
mov eax, dword [ebp - 0x38c]
sub eax, dword [ebp - 0x55c]
cmp eax, dword [ebp - 0x38c]
jge 0x10039095
mov dword [ebp - 0x6c4], 1
jmp 0x1003909c
and dword [ebp - 0x6c4], 0
cmp dword [ebp - 0x6c4], 0xc51ac06e
jbe 0x100390b1
and dword [ebp - 0x564], 0
jmp 0x100390bb
mov dword [ebp - 0x564], 1
mov eax, dword [ebp - 0x564]
mov dword [ebp - 0xbc], eax
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0xc14], 0
jne 0x10039185
mov eax, dword [ebp - 0x6cc]
mov dword [ebp - 0xbc], eax
mov eax, dword [ebp - 0xbc]
mov dword [ebp - 0xc44], eax
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0xbc]
cmp ecx, dword [ebp + eax - 0x828]
jge 0x10039113
mov dword [ebp - 0x810], 1
jmp 0x1003911a
and dword [ebp - 0x810], 0
mov eax, dword [ebp - 0x6dc]
cmp dword [ebp - 0x810], eax
jle 0x10039134
mov dword [ebp - 0x56c], 1
jmp 0x1003913b
and dword [ebp - 0x56c], 0
cmp dword [ebp - 0x56c], 0x3d0c
je 0x10039153
mov dword [ebp - 0xa74], 1
jmp 0x1003915a
and dword [ebp - 0xa74], 0
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0xc14]
mov dword [ebp - 0xc4c], eax
cmp dword [ebp - 0x6cc], 0
jne 0x10039185
push 0xfffffffffffffffb
pop eax
test eax, eax
jne 0x10039185
and dword [ebp - 0x77c], 0
jmp 0x1003918f
mov dword [ebp - 0x77c], 1
mov eax, dword [ebp - 0x574]
cmp eax, dword [ebp - 0x77c]
je 0x100391b2
cmp dword [ebp - 0x24c], 0
je 0x100391b2
mov dword [ebp - 0x57c], 1
jmp 0x100391b9
and dword [ebp - 0x57c], 0
cmp dword [ebp - 0x57c], 0xffffffff
jge 0x100391ce
mov dword [ebp - 0x6d4], 1
jmp 0x100391d5
and dword [ebp - 0x6d4], 0
mov eax, dword [ebp - 0x6d4]
mov dword [ebp - 0x3c0], eax
cmp dword [ebp - 0x3c0], 0xfffffffa
jge 0x100391fc
cmp dword [ebp - 0x584], 0
jne 0x100391fc
and dword [ebp - 0x7d4], 0
jmp 0x10039206
mov dword [ebp - 0x7d4], 1
mov eax, dword [ebp - 0x7d4]
mov dword [ebp - 0x58c], eax
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x58c]
add ecx, dword [ebp - 0x6dc]
cmp ecx, dword [ebp + eax - 0x828]
jg 0x10039239
mov dword [ebp - 0x8c0], 1
jmp 0x10039240
and dword [ebp - 0x8c0], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x828]
mov dword [ebp - 0xc54], eax
mov eax, dword [ebp - 0x594]
push 4
pop ecx
shl ecx, 0
mov dword [ebp + ecx - 0x828], eax
and dword [ebp - 0x164], 0
jmp 0x10037afc
mov dword [ebp - 0x254], 7
mov dword [ebp - 0x35c], 0
jmp 0x10039295
mov eax, dword [ebp - 0x35c]
inc eax
mov dword [ebp - 0x35c], eax
cmp dword [ebp - 0x35c], 3
jge 0x100392b1
mov eax, dword [ebp - 0x35c]
mov dword [ebp + eax*4 - 0xd44], 0xffffffff
jmp 0x10039288
mov dword [ebp - 0x254], 0x1c
jmp 0x100392ca
mov eax, dword [ebp - 0x254]
dec eax
mov dword [ebp - 0x254], eax
cmp dword [ebp - 0x254], 0xfffffffa
jle 0x100394ba
mov dword [ebp - 0xc4], 0x53aa9ac7
mov dword [ebp - 0x314], 0
jmp 0x100392fa
mov eax, dword [ebp - 0x314]
inc eax
mov dword [ebp - 0x314], eax
cmp dword [ebp - 0x314], 1
jge 0x10039316
mov eax, dword [ebp - 0x314]
mov dword [ebp + eax*4 - 0x9b8], 0xffffffff
jmp 0x100392ed
mov dword [ebp - 0xc4], 0
jmp 0x1003932f
mov eax, dword [ebp - 0xc4]
dec eax
mov dword [ebp - 0xc4], eax
cmp dword [ebp - 0xc4], 0xfffffff2
jg 0x100394b5
mov dword [ebp - 0x6e4], 0
mov dword [ebp - 0x784], 0
mov dword [ebp - 0x5b4], 1
mov dword [ebp - 0x25c], 0
jmp 0x10039373
mov eax, dword [ebp - 0x25c]
inc eax
mov dword [ebp - 0x25c], eax
cmp dword [ebp - 0x25c], 1
jge 0x1003938f
mov eax, dword [ebp - 0x25c]
mov dword [ebp + eax*4 - 0x8c8], 1
jmp 0x10039366
mov eax, dword [ebp - 0x6e4]
mov dword [ebp - 0x784], eax
mov eax, dword [ebp - 0x784]
mov dword [ebp - 0x59c], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x59c]
mov dword [ebp + eax - 0xd44], ecx
cmp dword [ebp - 0x59c], 0
je 0x100393df
cmp dword [ebp - 0xc4], 0
cmp dword [ebp - 0xc4], 0
je 0x100393df
mov dword [ebp - 0x804], 1
jmp 0x100393e6
and dword [ebp - 0x804], 0
mov eax, dword [ebp - 0x6e4]
mov dword [ebp - 0x5a4], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x5a4]
mov dword [ebp + eax - 0x9b8], ecx
mov eax, dword [ebp - 0xc4]
imul eax, dword [ebp - 0x5a4]
cmp eax, dword [ebp - 0x804]
je 0x10039426
mov dword [ebp - 0x5ac], 1
jmp 0x1003942d
and dword [ebp - 0x5ac], 0
mov eax, dword [ebp - 0x5ac]
add eax, 0x6496e86
je 0x10039446
mov dword [ebp - 0x6ec], 1
jmp 0x1003944d
and dword [ebp - 0x6ec], 0
mov eax, dword [ebp - 0x6ec]
mov dword [ebp - 0x5b4], eax
cmp dword [ebp - 0x5b4], 0
jne 0x10039474
mov eax, 0xe1fc6578
test eax, eax
jne 0x10039474
and dword [ebp - 0x78c], 0
jmp 0x1003947e
mov dword [ebp - 0x78c], 1
cmp dword [ebp - 0x78c], 0x9e3d
jne 0x10039496
mov dword [ebp - 0x5bc], 1
jmp 0x1003949d
and dword [ebp - 0x5bc], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x5bc]
mov dword [ebp + eax - 0x8c8], ecx
jmp 0x10039322
jmp 0x100392bd
push 2
pop eax
imul eax, eax, 0xc
xor ecx, ecx
mov word [ebp + eax - 0xb50], cx
mov dword [ebp - 0x3c], 0x9bdba76a
mov dword [ebp - 0x39c], 0x835357f4
mov dword [ebp - 0x120], 0xc3825062
mov dword [ebp - 0x3b4], 0xfffffff6
mov dword [ebp - 0x364], 0
jmp 0x10039508
mov eax, dword [ebp - 0x364]
inc eax
mov dword [ebp - 0x364], eax
cmp dword [ebp - 0x364], 2
jge 0x10039524
mov eax, dword [ebp - 0x364]
mov dword [ebp + eax*4 - 0x3d4], 3
jmp 0x100394fb
mov dword [ebp - 0x3c], 1
jmp 0x10039534
mov eax, dword [ebp - 0x3c]
dec eax
mov dword [ebp - 0x3c], eax
cmp dword [ebp - 0x3c], 0
jl 0x100398ce
mov dword [ebp - 0x36c], 0x4f3f7e81
mov dword [ebp - 0x5d4], 0x33ac2541
mov dword [ebp - 0xc5c], 0
mov dword [ebp - 0xb54], 0xffffffff
mov dword [ebp - 0xa94], 0x2279191d
mov dword [ebp - 0xc6c], 0x3e62c90a
mov dword [ebp - 0x9c4], 0
mov dword [ebp - 0xc74], 0x5ce4ec6
mov dword [ebp - 0x8d8], 0xe281b1d0
mov eax, dword [ebp - 0x3c]
mov dword [ebp - 0x39c], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x3d4]
mov dword [ebp - 0x36c], eax
mov eax, dword [ebp - 0x39c]
cmp eax, dword [ebp - 0x36c]
jge 0x100395ce
mov dword [ebp - 0x6f4], 1
jmp 0x100395d5
and dword [ebp - 0x6f4], 0
mov eax, dword [ebp - 0x3c]
mov eax, dword [ebp + eax*4 - 0x3d4]
cmp dword [ebp - 0x6f4], eax
jle 0x100395f3
mov dword [ebp - 0x5c4], 1
jmp 0x100395fa
and dword [ebp - 0x5c4], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x3d4]
cmp dword [ebp - 0x5c4], eax
jl 0x10039620
or eax, 0xffffffff
je 0x10039620
mov dword [ebp - 0x7dc], 1
jmp 0x10039627
and dword [ebp - 0x7dc], 0
mov eax, dword [ebp - 0x3c]
mov ecx, dword [ebp - 0x7dc]
sub ecx, dword [ebp + eax*4 - 0x3d4]
mov eax, dword [ebp - 0x3c]
cmp dword [ebp + eax*4 - 0x3d4], ecx
jg 0x1003964f
mov dword [ebp - 0x5cc], 1
jmp 0x10039656
and dword [ebp - 0x5cc], 0
mov eax, dword [ebp - 0x5cc]
mov dword [ebp - 0x120], eax
cmp dword [ebp - 0x120], 0
je 0x100398a9
mov dword [ebp - 0x394], 0xfcc1031c
mov dword [ebp - 0xc7c], 0x66b9117a
mov dword [ebp - 0x8d0], 8
mov dword [ebp - 0x264], 0
jmp 0x100396a6
mov eax, dword [ebp - 0x264]
inc eax
mov dword [ebp - 0x264], eax
cmp dword [ebp - 0x264], 3
jge 0x100396c2
mov eax, dword [ebp - 0x264]
mov dword [ebp + eax*4 - 0xeb0], 0xdac36902
jmp 0x10039699
mov eax, dword [ebp - 0x3c]
mov dword [ebp - 0xc84], eax
mov eax, dword [ebp - 0x36c]
mov dword [ebp - 0xc8c], eax
mov eax, dword [ebp - 0x394]
mov dword [ebp - 0xc94], eax
mov eax, dword [ebp - 0x394]
cmp eax, dword [ebp - 0x5d4]
jne 0x100396fd
mov dword [ebp - 0x6fc], 1
jmp 0x10039704
and dword [ebp - 0x6fc], 0
cmp dword [ebp - 0x6fc], 0xf446
je 0x10039721
or eax, 0xffffffff
je 0x10039721
mov dword [ebp - 0xa54], 1
jmp 0x10039728
and dword [ebp - 0xa54], 0
mov eax, dword [ebp - 0x5d4]
mov dword [ebp - 0xc9c], eax
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x36c]
sub ecx, dword [ebp - 0x120]
cmp ecx, dword [ebp + eax - 0x3d4]
je 0x1003975b
mov dword [ebp - 0x794], 1
jmp 0x10039762
and dword [ebp - 0x794], 0
imul eax, dword [ebp - 0x794], 0xffff
mov dword [ebp - 0x120], eax
cmp dword [ebp - 0x394], 0
jne 0x10039872
cmp dword [ebp - 0x8d0], 1
jge 0x10039794
mov dword [ebp - 0x5dc], 1
jmp 0x1003979b
and dword [ebp - 0x5dc], 0
mov eax, dword [ebp - 0x9c4]
imul eax, dword [ebp - 0x8d8]
add eax, dword [ebp - 0x5dc]
jne 0x100397bd
xor eax, eax
jne 0x100397bd
and dword [ebp - 0x704], 0
jmp 0x100397c7
mov dword [ebp - 0x704], 1
mov eax, dword [ebp - 0xa94]
cmp dword [ebp - 0x704], eax
jl 0x100397e1
mov dword [ebp - 0x8e0], 1
jmp 0x100397e8
and dword [ebp - 0x8e0], 0
mov eax, dword [ebp - 0x3c]
mov dword [ebp - 0xca4], eax
mov eax, dword [ebp - 0x3b4]
dec eax
mov dword [ebp - 0x3b4], eax
mov eax, dword [ebp - 0x3b4]
cmp eax, dword [ebp - 0x120]
jle 0x10039818
mov dword [ebp - 0x5e4], 1
jmp 0x1003981f
and dword [ebp - 0x5e4], 0
mov eax, dword [ebp - 0x5e4]
sub eax, 0xcf93
cmp eax, 0xadd9
je 0x1003983d
mov dword [ebp - 0x814], 1
jmp 0x10039844
and dword [ebp - 0x814], 0
cmp dword [ebp - 0x814], 0xfffffffa
jl 0x10039859
mov dword [ebp - 0x5ec], 1
jmp 0x10039860
and dword [ebp - 0x5ec], 0
cmp dword [ebp - 0x5ec], 6
jge 0x10039872
and dword [ebp - 0x70c], 0
jmp 0x1003987c
mov dword [ebp - 0x70c], 1
cmp dword [ebp - 0x70c], 0x241e9715
jge 0x10039894
mov dword [ebp - 0x5f4], 1
jmp 0x1003989b
and dword [ebp - 0x5f4], 0
mov eax, dword [ebp - 0x5f4]
mov dword [ebp - 0x39c], eax
jmp 0x100398c9
mov dword [ebp - 0x9d0], 9
mov dword [ebp - 0x8e8], 0
mov eax, dword [ebp - 0x9d0]
mov dword [ebp - 0x8e8], eax
jmp 0x1003952d
mov dword [ebp - 0x79c], 0x4f99
mov dword [ebp - 0x9dc], str.xwpfa_kxtbq_qdzy_fzhn_rmvi_erxnjxo_ahvqby_idw
cmp dword [ebp - 0x79c], 0x534c
jle 0x100399aa
and dword [ebp - 0x26c], 0
jmp 0x10039908
mov eax, dword [ebp - 0x26c]
inc eax
mov dword [ebp - 0x26c], eax
cmp dword [ebp - 0x26c], 0x4556
jge 0x1003999c
and dword [ebp - 0x320], 0
jmp 0x1003992e
mov eax, dword [ebp - 0x320]
inc eax
mov dword [ebp - 0x320], eax
cmp dword [ebp - 0x320], 0x8059
jge 0x10039997
and dword [ebp - 0x274], 0
jmp 0x10039950
mov eax, dword [ebp - 0x274]
inc eax
mov dword [ebp - 0x274], eax
cmp dword [ebp - 0x274], 0x4dbd
jge 0x10039995
mov eax, dword [ebp - 0x26c]
mov ecx, dword [ebp - 0x320]
sar eax, cl
or eax, dword [ebp - 0x274]
cdq
mov dword [ebp - 0x9c0], eax
mov dword [ebp - 0x9bc], edx
push dword [ebp - 0x9bc]
push dword [ebp - 0x9c0]
mov ecx, 0x1007d9f8
call fcn.10001bd6
jmp 0x10039943
jmp 0x10039921
jmp 0x100398fb
push 0
push 0
push 1
push 0
call dword [sym.imp.KERNEL32.dll_CreateEventW]
lea eax, [ebp - 0xb50]
push eax
lea ecx, [ebp - 0xeec]
call fcn.1001bad8
mov dword [ebp - 0xa5c], eax
mov eax, dword [ebp - 0xa5c]
mov dword [ebp - 0x8f0], eax
mov dword [ebp - 4], 0xc
push dword [ebp - 0x8f0]
call fcn.1002d6e2
pop ecx
mov dword [ebp - 0x630], eax
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xeec]
call fcn.10014550
mov dword [ebp - 4], 0xd
cmp dword [ebp - 0x79c], 0x4cba
jge 0x10039a19
mov edx, dword [ebp - 0x9dc]
mov ecx, 0x1007d9f8
call fcn.1000358d
jmp 0x10039a35
or dword [ebp - 4], 0xffffffff
jmp 0x10039a3f
mov dword [ebp - 0x7c], 0x7fe64fd9
mov dword [ebp - 0x14c], 0
mov dword [ebp - 0x350], 0
jmp 0x10039a69
mov eax, dword [ebp - 0x350]
inc eax
mov dword [ebp - 0x350], eax
cmp dword [ebp - 0x350], 1
jge 0x10039a85
mov eax, dword [ebp - 0x350]
mov dword [ebp + eax*4 - 0x128], 0xfffe
jmp 0x10039a5c
mov eax, dword [ebp - 0x7c]
mov dword [ebp - 0xce8], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x128]
mov dword [ebp - 0xc20], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x128]
mov dword [ebp - 0xb98], eax
mov eax, dword [ebp - 0x7c]
cmp eax, dword [ebp - 0x14c]
jne 0x10039acb
mov dword [ebp - 0x5fc], 1
jmp 0x10039ad2
and dword [ebp - 0x5fc], 0
mov eax, dword [ebp - 0x7c]
cmp dword [ebp - 0x5fc], eax
je 0x10039ae9
mov dword [ebp - 0x714], 1
jmp 0x10039af0
and dword [ebp - 0x714], 0
mov eax, dword [ebp - 0x7c]
cmp dword [ebp - 0x714], eax
jl 0x10039b07
mov dword [ebp - 0x604], 1
jmp 0x10039b0e
and dword [ebp - 0x604], 0
cmp dword [ebp - 0x604], 6
jae 0x10039b23
mov dword [ebp - 0x8f8], 1
jmp 0x10039b2a
and dword [ebp - 0x8f8], 0
push 4
pop eax
imul eax, eax, 0
push 4
pop ecx
imul ecx, ecx, 0
mov ecx, dword [ebp + ecx - 0x128]
cmp ecx, dword [ebp + eax - 0x128]
jle 0x10039b53
mov eax, 0x5fff839e
test eax, eax
je 0x10039d19
mov dword [ebp - 0x7e4], 0x1835
mov dword [ebp - 0x900], str.vsy_jcrppo_ulvhey_cvqtn_uxmwydpak_lymre_bkzihw_xdxilh_mgqxpon_snohcgvnm_yml_tlwrt_smbdnq_jfkdku
cmp dword [ebp - 0x7e4], 0x19a9
jle 0x10039c4e
and dword [ebp - 0x284], 0
jmp 0x10039b8d
mov eax, dword [ebp - 0x284]
inc eax
mov dword [ebp - 0x284], eax
cmp dword [ebp - 0x284], 0x189b
jge 0x10039c4e
and dword [ebp - 0x27c], 0
jmp 0x10039bb3
mov eax, dword [ebp - 0x27c]
inc eax
mov dword [ebp - 0x27c], eax
cmp dword [ebp - 0x27c], 0x19f9
jge 0x10039c49
and dword [ebp - 0x328], 0
jmp 0x10039bd9
mov eax, dword [ebp - 0x328]
inc eax
mov dword [ebp - 0x328], eax
cmp dword [ebp - 0x328], 0x25ee
jge 0x10039c44
mov eax, dword [ebp - 0x27c]
mov ecx, dword [ebp - 0x328]
sar eax, cl
xor eax, dword [ebp - 0x284]
cdq
mov dword [ebp - 0x9cc], eax
mov dword [ebp - 0x9c8], edx
push dword [ebp - 0x9c8]
push dword [ebp - 0x9cc]
lea ecx, [ebp - 0xdcc]
call fcn.10001a31
pop ecx
pop ecx
mov dword [ebp - 0xa8c], eax
mov ecx, dword [ebp - 0xa8c]
call fcn.10001bb6
push eax
call fcn.1004b2d6
pop ecx
lea ecx, [ebp - 0xdcc]
call fcn.10001bac
jmp 0x10039bcc
jmp 0x10039ba6
jmp 0x10039b80
mov dword [ebp - 0xb24], 0xffffffff
mov dword [ebp - 0xb20], 0xffffffff
mov dword [ebp - 0xb1c], 0xffffffff
mov dword [ebp - 0xb18], 0xffffffff
mov dword [ebp - 4], 0xf
cmp dword [ebp - 0x7e4], 0x16fd
jge 0x10039c95
push dword [ebp - 0x900]
call fcn.1004b2d6
pop ecx
jmp 0x10039cb1
or dword [ebp - 4], 0xffffffff
jmp 0x10039cbb
mov dword [ebp - 0x368], 0
jmp 0x10039cd4
mov eax, dword [ebp - 0x368]
inc eax
mov dword [ebp - 0x368], eax
cmp dword [ebp - 0x368], 1
jge 0x10039cf0
mov eax, dword [ebp - 0x368]
mov dword [ebp + eax*4 - 0x9e8], 5
jmp 0x10039cc7
push 4
pop eax
imul eax, eax, 3
mov eax, dword [ebp + eax - 0xb24]
mov dword [ebp - 0xb60], eax
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0x9e8], 0xa7790412
jmp 0x10039f88
mov dword [ebp - 0x3c4], 0xc3f30b91
mov dword [ebp - 0x28c], 0
jmp 0x10039d3c
mov eax, dword [ebp - 0x28c]
inc eax
mov dword [ebp - 0x28c], eax
cmp dword [ebp - 0x28c], 3
jge 0x10039d58
mov eax, dword [ebp - 0x28c]
mov dword [ebp + eax*4 - 0xd5c], 0xfffffff9
jmp 0x10039d2f
mov dword [ebp - 0x14c], 0
jmp 0x10039d71
mov eax, dword [ebp - 0x14c]
inc eax
mov dword [ebp - 0x14c], eax
cmp dword [ebp - 0x14c], 0
jg 0x10039d9f
mov byte [ebp - 0xc5], 0
movzx eax, byte [ebp - 0xc5]
test eax, eax
je 0x10039d9d
push 0x24aa
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreatePipe]
jmp 0x10039d64
cmp dword [ebp - 0x3c4], 0
je 0x10039f6b
mov dword [ebp - 0x3bc], 0xfffffffb
mov dword [ebp - 0x3f0], 0xddb2097e
mov dword [ebp - 0x7c], 0xf
jmp 0x10039dd0
mov eax, dword [ebp - 0x7c]
dec eax
mov dword [ebp - 0x7c], eax
cmp dword [ebp - 0x7c], 7
jle 0x10039f69
mov dword [ebp - 0x418], 0x5ad058bb
mov dword [ebp - 0x3a4], 0
cmp dword [ebp - 0x3c4], 0x699ff93f
jle 0x10039e06
mov dword [ebp - 0x3ec], 1
jmp 0x10039e0d
and dword [ebp - 0x3ec], 0
mov eax, dword [ebp - 0x3ec]
mov dword [ebp - 0x3f0], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x3f0]
cmp ecx, dword [ebp + eax - 0x128]
jg 0x10039e3a
mov dword [ebp - 0x3f8], 1
jmp 0x10039e41
and dword [ebp - 0x3f8], 0
mov eax, dword [ebp - 0x3bc]
cmp eax, dword [ebp - 0x3f8]
jl 0x10039e5b
mov dword [ebp - 0x400], 1
jmp 0x10039e62
and dword [ebp - 0x400], 0
cmp dword [ebp - 0x400], 0xfffffffe
jl 0x10039e77
mov dword [ebp - 0x408], 1
jmp 0x10039e7e
and dword [ebp - 0x408], 0
mov eax, dword [ebp - 0x3c4]
cmp dword [ebp - 0x408], eax
jg 0x10039e98
mov dword [ebp - 0x410], 1
jmp 0x10039e9f
and dword [ebp - 0x410], 0
mov eax, dword [ebp - 0x3bc]
cmp eax, dword [ebp - 0x410]
jne 0x10039eb9
mov dword [ebp - 0x908], 1
jmp 0x10039ec0
and dword [ebp - 0x908], 0
mov eax, dword [ebp - 0x3a4]
mov dword [ebp - 0xbc4], eax
mov eax, dword [ebp - 0x3a4]
mov dword [ebp - 0xb6c], eax
mov dword [ebp - 0x418], 1
mov eax, dword [ebp - 0x418]
cmp eax, dword [ebp - 0x3a4]
jge 0x10039f05
cmp dword [ebp - 0x3bc], 0
je 0x10039f05
mov dword [ebp - 0x420], 1
jmp 0x10039f0c
and dword [ebp - 0x420], 0
cmp dword [ebp - 0x420], 0xfffffffd
je 0x10039f21
mov dword [ebp - 0x3d8], 1
jmp 0x10039f28
and dword [ebp - 0x3d8], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x3d8]
mov dword [ebp + eax - 0xd5c], ecx
mov byte [ebp - 0x8e], 0
movzx eax, byte [ebp - 0x8e]
test eax, eax
je 0x10039f64
push 0xf29
push 0
push 0x761
push 0xd2c
call dword [sym.imp.USER32.dll_SystemParametersInfoW]
jmp 0x10039dc9
jmp 0x10039f88
mov byte [ebp - 0xde], 0
movzx eax, byte [ebp - 0xde]
test eax, eax
je 0x10039f88
push 0x16a0
call dword [sym.imp.KERNEL32.dll_SetLastError]
and dword [ebp - 0x330], 0
jmp 0x10039f9e
mov eax, dword [ebp - 0x330]
inc eax
mov dword [ebp - 0x330], eax
cmp dword [ebp - 0x330], 0xd
jae 0x10039fb9
xor eax, eax
mov ecx, dword [ebp - 0x330]
mov word [ebp + ecx*2 - 0xb50], ax
jmp 0x10039f91
mov dword [ebp - 0x130], 0xfffffffe
mov dword [ebp - 0x108], 0
mov dword [ebp - 0x9f4], 0xfffffff7
mov dword [ebp - 0x918], 9
mov dword [ebp - 0x430], 0x669b
mov dword [ebp - 0x910], str.kljng_ojpyfxss_zdzctud_wvsfjvkg_piumpv_lguuudb_wmgq_mbtiuf_fme_oxngce_zisljy_nwou
cmp dword [ebp - 0x430], 0x68ce
jle 0x1003a0dc
and dword [ebp - 0x294], 0
jmp 0x1003a01b
mov eax, dword [ebp - 0x294]
inc eax
mov dword [ebp - 0x294], eax
cmp dword [ebp - 0x294], 0x793c
jge 0x1003a0dc
and dword [ebp - 0x358], 0
jmp 0x1003a041
mov eax, dword [ebp - 0x358]
inc eax
mov dword [ebp - 0x358], eax
cmp dword [ebp - 0x358], 0x2471
jge 0x1003a0d7
and dword [ebp - 0x29c], 0
jmp 0x1003a067
mov eax, dword [ebp - 0x29c]
inc eax
mov dword [ebp - 0x29c], eax
cmp dword [ebp - 0x29c], 0x1b0a
jge 0x1003a0d2
mov eax, dword [ebp - 0x294]
mov ecx, dword [ebp - 0x358]
shl eax, cl
or eax, dword [ebp - 0x29c]
cdq
mov dword [ebp - 0x9d8], eax
mov dword [ebp - 0x9d4], edx
push dword [ebp - 0x9d4]
push dword [ebp - 0x9d8]
lea ecx, [ebp - 0xde4]
call fcn.10001a31
pop ecx
pop ecx
mov dword [ebp - 0xa64], eax
mov ecx, dword [ebp - 0xa64]
call fcn.10001bb6
push eax
call fcn.1004b2d6
pop ecx
lea ecx, [ebp - 0xde4]
call fcn.10001bac
jmp 0x1003a05a
jmp 0x1003a034
jmp 0x1003a00e
mov dword [ebp - 4], 0x11
cmp dword [ebp - 0x430], 0x65c0
jge 0x1003a0fb
push dword [ebp - 0x910]
call fcn.1004b2d6
pop ecx
jmp 0x1003a117
or dword [ebp - 4], 0xffffffff
jmp 0x1003a121
mov dword [ebp - 0x338], 0
jmp 0x1003a13a
mov eax, dword [ebp - 0x338]
inc eax
mov dword [ebp - 0x338], eax
cmp dword [ebp - 0x338], 1
jge 0x1003a156
mov eax, dword [ebp - 0x338]
mov dword [ebp + eax*4 - 0x438], 0x6192
jmp 0x1003a12d
mov dword [ebp - 0x130], 0
jmp 0x1003a16f
mov eax, dword [ebp - 0x130]
dec eax
mov dword [ebp - 0x130], eax
cmp dword [ebp - 0x130], 0
jl 0x1003a24c
mov eax, dword [ebp - 0x130]
mov eax, dword [ebp + eax*4 - 0x438]
mov dword [ebp - 0x108], eax
mov dword [ebp - 0x108], 0
jmp 0x1003a1a8
mov eax, dword [ebp - 0x108]
inc eax
mov dword [ebp - 0x108], eax
cmp dword [ebp - 0x108], 0x1c
jne 0x1003a247
mov dword [ebp - 0x2a4], 0
jmp 0x1003a1ce
mov eax, dword [ebp - 0x2a4]
inc eax
mov dword [ebp - 0x2a4], eax
cmp dword [ebp - 0x2a4], 4
jge 0x1003a1ea
mov eax, dword [ebp - 0x2a4]
mov dword [ebp + eax*4 - 0xae4], 0x845d811f
jmp 0x1003a1c1
push 4
pop eax
imul eax, eax, 3
mov dword [ebp + eax - 0xae4], 0
jmp 0x1003a218
push 4
pop eax
imul eax, eax, 3
mov eax, dword [ebp + eax - 0xae4]
inc eax
push 4
pop ecx
imul ecx, ecx, 3
mov dword [ebp + ecx - 0xae4], eax
push 4
pop eax
imul eax, eax, 3
cmp dword [ebp + eax - 0xae4], 1
jge 0x1003a242
push 4
pop eax
imul eax, eax, 3
mov eax, dword [ebp + eax - 0xae4]
mov dword [ebp + eax*4 - 0x438], 0x62a2
jmp 0x1003a1fd
jmp 0x1003a19b
jmp 0x1003a162
mov eax, dword [ebp - 0x9f4]
mov dword [ebp - 0x918], eax
cmp dword [ebp - 0x630], 0
je 0x1003be1b
mov dword [ebp - 0xcc], 0xbaf4
mov dword [ebp - 0x4a8], 0xffffffff
mov dword [ebp - 0x378], 0
jmp 0x1003a292
mov eax, dword [ebp - 0x378]
inc eax
mov dword [ebp - 0x378], eax
cmp dword [ebp - 0x378], 4
jge 0x1003a2ae
mov eax, dword [ebp - 0x378]
mov dword [ebp + eax*4 - 0x848], 0x53d8da8e
jmp 0x1003a285
mov eax, dword [ebp - 0xcc]
mov dword [ebp - 0x440], eax
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x440]
mov dword [ebp + eax - 0x848], ecx
cmp dword [ebp - 0x440], 0
je 0x1003a373
mov dword [ebp - 0xcc], 0
jmp 0x1003a2f3
mov eax, dword [ebp - 0xcc]
inc eax
mov dword [ebp - 0xcc], eax
cmp dword [ebp - 0xcc], 9
jge 0x1003a36e
mov dword [ebp - 0x2ac], 9
mov dword [ebp - 0x2ac], 3
jmp 0x1003a31f
mov eax, dword [ebp - 0x2ac]
dec eax
mov dword [ebp - 0x2ac], eax
cmp dword [ebp - 0x2ac], 0
jl 0x1003a369
mov dword [ebp - 0x138], 0x2121f90e
mov dword [ebp - 0x138], 0
jmp 0x1003a34b
mov eax, dword [ebp - 0x138]
inc eax
mov dword [ebp - 0x138], eax
cmp dword [ebp - 0x138], 4
jge 0x1003a367
mov eax, dword [ebp - 0x138]
mov dword [ebp + eax*4 - 0x848], 0x7d7c118
jmp 0x1003a33e
jmp 0x1003a312
jmp 0x1003a2e6
jmp 0x1003a561
mov dword [ebp - 0x340], 0x17f4039e
mov dword [ebp - 0x468], 0xb551
mov dword [ebp - 0x460], 0x66193fe6
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x848], 0x6b65720b
jle 0x1003a3b0
mov dword [ebp - 0x498], 1
jmp 0x1003a3b7
and dword [ebp - 0x498], 0
mov eax, dword [ebp - 0x340]
cmp eax, dword [ebp - 0x468]
jl 0x1003a3d1
mov dword [ebp - 0x448], 1
jmp 0x1003a3d8
and dword [ebp - 0x448], 0
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x848]
cmp dword [ebp - 0x448], eax
jl 0x1003a3f8
mov dword [ebp - 0xa68], 1
jmp 0x1003a3ff
and dword [ebp - 0xa68], 0
mov eax, dword [ebp - 0x340]
mov dword [ebp - 0xbcc], eax
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x340]
cmp ecx, dword [ebp + eax - 0x848]
jl 0x1003a42c
mov dword [ebp - 0x450], 1
jmp 0x1003a433
and dword [ebp - 0x450], 0
mov eax, dword [ebp - 0x340]
cmp dword [ebp - 0x450], eax
jl 0x1003a44d
mov dword [ebp - 0x458], 1
jmp 0x1003a454
and dword [ebp - 0x458], 0
mov eax, dword [ebp - 0x458]
mov dword [ebp - 0x460], eax
cmp dword [ebp - 0x460], 0x639
jg 0x1003a478
mov dword [ebp - 0x470], 1
jmp 0x1003a47f
and dword [ebp - 0x470], 0
mov eax, dword [ebp - 0x468]
cmp dword [ebp - 0x470], eax
jge 0x1003a499
mov dword [ebp - 0x478], 1
jmp 0x1003a4a0
and dword [ebp - 0x478], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x848]
cmp dword [ebp - 0x478], eax
jg 0x1003a4c1
mov dword [ebp - 0x480], 1
jmp 0x1003a4c8
and dword [ebp - 0x480], 0
mov eax, dword [ebp - 0xcc]
cmp dword [ebp - 0x480], eax
jg 0x1003a4e2
mov dword [ebp - 0x488], 1
jmp 0x1003a4e9
and dword [ebp - 0x488], 0
cmp dword [ebp - 0x488], 0x32d3
jg 0x1003a501
mov eax, dword [ebp - 0x4a8]
push 4
pop ecx
shl ecx, 0
mov dword [ebp + ecx - 0x848], eax
mov dword [ebp - 0x2b4], 0x6fe7d8a8
mov dword [ebp - 0x50], 0
jmp 0x1003a58e
mov eax, dword [ebp - 0x50]
inc eax
mov dword [ebp - 0x50], eax
cmp dword [ebp - 0x50], 4
jge 0x1003a5a4
mov eax, dword [ebp - 0x50]
mov dword [ebp + eax*4 - 0xccc], 0xfffffffa
jmp 0x1003a587
mov dword [ebp - 0x50], 0
jmp 0x1003a5b4
mov eax, dword [ebp - 0x50]
inc eax
mov dword [ebp - 0x50], eax
cmp dword [ebp - 0x50], 1
jge 0x1003a5ca
mov eax, dword [ebp - 0x50]
mov dword [ebp + eax*4 - 0xb78], 0x9cea445a
jmp 0x1003a5ad
mov dword [ebp - 0x2b4], 0
jmp 0x1003a5e3
cmp dword [ebp - 0x2b4], 3
jg 0x1003a76d
mov dword [ebp - 0xe8], 0x5b3b9da4
mov dword [ebp - 0x928], 7
mov dword [ebp - 0x360], 0
jmp 0x1003a61d
mov byte [ebp - 0x91], 0
movzx eax, byte [ebp - 0x91]
test eax, eax
je 0x1003a795
mov dword [ebp - 0x638], 0
mov dword [ebp - 0x88], 0x417be18
mov dword [ebp - 0x78], 0
jmp 0x1003be3f
mov eax, dword [ebp - 0x78]
inc eax
mov dword [ebp - 0x78], eax
cmp dword [ebp - 0x78], 4
jge 0x1003be55
mov eax, dword [ebp - 0x78]
mov dword [ebp + eax*4 - 0xd9c], 0xe45d764c
jmp 0x1003be38
mov dword [ebp - 0x78], 0
jmp 0x1003be65
mov eax, dword [ebp - 0x78]
inc eax
mov dword [ebp - 0x78], eax
cmp dword [ebp - 0x78], 1
jge 0x1003be7b
mov eax, dword [ebp - 0x78]
mov dword [ebp + eax*4 - 0xbc0], 1
jmp 0x1003be5e
mov dword [ebp - 0x88], 0xffffffff
mov eax, dword [ebp - 0x638]
cmp eax, dword [ebp - 0x88]
jge 0x1003bea0
cmp dword [ebp - 0x638], 0
jne 0x1003c280
mov dword [ebp - 0xdc], 0xffff
mov dword [ebp - 0x874], 0xbed162c5
mov dword [ebp - 0xc60], 0xa0cd95f
mov dword [ebp - 0x660], 7
mov dword [ebp - 0x658], 0xee72c34c
mov dword [ebp - 0x86c], 0xc9fe9a5a
mov dword [ebp - 0x3a0], 0x45ad33d2
mov dword [ebp - 0x390], 0
mov dword [ebp - 0x290], 0
jmp 0x1003bf09
mov eax, dword [ebp - 0x290]
inc eax
mov dword [ebp - 0x290], eax
cmp dword [ebp - 0x290], 3
jge 0x1003bf25
mov eax, dword [ebp - 0x290]
mov dword [ebp + eax*4 - 0xd50], 0xfffffff7
jmp 0x1003befc
mov dword [ebp - 0x88], 0
jmp 0x1003bf3e
mov eax, dword [ebp - 0x88]
dec eax
mov dword [ebp - 0x88], eax
cmp dword [ebp - 0x88], 0xfffffff8
jg 0x1003c0d7
mov dword [ebp - 0x640], 0x666f
mov dword [ebp - 0x968], str.lctgkrg_enxhv_jvqvshqw_hskfqhq_tpgqhtn_fxtky_jxvbubi_uagj_iyjfx_ddemey_hgnnx_zdoh
cmp dword [ebp - 0x640], 0x6739
jle 0x1003c077
and dword [ebp - 0x2b0], 0
jmp 0x1003bf85
mov eax, dword [ebp - 0x2b0]
inc eax
mov dword [ebp - 0x2b0], eax
cmp dword [ebp - 0x2b0], 0x7c23
jge 0x1003c077
and dword [ebp - 0x298], 0
jmp 0x1003bfab
mov eax, dword [ebp - 0x298]
inc eax
mov dword [ebp - 0x298], eax
cmp dword [ebp - 0x298], 0x66b7
jge 0x1003c072
and dword [ebp - 0x2a0], 0
jmp 0x1003bfd1
mov eax, dword [ebp - 0x2a0]
inc eax
mov dword [ebp - 0x2a0], eax
cmp dword [ebp - 0x2a0], 0x2be
jge 0x1003c06d
and dword [ebp - 0x2a8], 0
jmp 0x1003bff7
mov eax, dword [ebp - 0x2a8]
inc eax
mov dword [ebp - 0x2a8], eax
cmp dword [ebp - 0x2a8], 0x7993
jge 0x1003c068
mov eax, dword [ebp - 0x298]
add eax, dword [ebp - 0x2a0]
mov ecx, dword [ebp - 0x2a8]
shl eax, cl
xor eax, dword [ebp - 0x2b0]
cdq
mov dword [ebp - 0xa20], eax
mov dword [ebp - 0xa1c], edx
push dword [ebp - 0xa1c]
push dword [ebp - 0xa20]
lea ecx, [ebp - 0xe68]
call fcn.10001a31
pop ecx
pop ecx
mov dword [ebp - 0xa30], eax
mov ecx, dword [ebp - 0xa30]
call fcn.10001bb6
push eax
call fcn.1004b2d6
pop ecx
lea ecx, [ebp - 0xe68]
call fcn.10001bac
jmp 0x1003bfea
jmp 0x1003bfc4
jmp 0x1003bf9e
jmp 0x1003bf78
mov dword [ebp - 0xa50], 0xfffd
mov dword [ebp - 4], 0x1e
cmp dword [ebp - 0x640], 0x63b8
jge 0x1003c0a0
push dword [ebp - 0x968]
call fcn.1004b2d6
pop ecx
jmp 0x1003c0bc
or dword [ebp - 4], 0xffffffff
jmp 0x1003c0c6
mov eax, dword [ebp - 0xdc]
mov dword [ebp - 0xa50], eax
jmp 0x1003bf31
mov dword [ebp - 0xdc], 0
jmp 0x1003c0f0
mov eax, dword [ebp - 0xdc]
inc eax
mov dword [ebp - 0xdc], eax
cmp dword [ebp - 0xdc], 0x23
jge 0x1003c27e
mov dword [ebp - 0x860], 0
mov dword [ebp - 0xbc8], 0x98b94be3
mov dword [ebp - 0x864], 0
mov dword [ebp - 0xc98], 0x70cc321a
cmp dword [ebp - 0x860], 0
je 0x1003c1f7
cmp dword [ebp - 0x88], 0
jne 0x1003c147
mov dword [ebp - 0x670], 1
jmp 0x1003c14e
and dword [ebp - 0x670], 0
mov eax, dword [ebp - 0x390]
dec eax
mov dword [ebp - 0x390], eax
jne 0x1003c169
mov dword [ebp - 0x648], 1
jmp 0x1003c170
and dword [ebp - 0x648], 0
mov eax, dword [ebp - 0xdc]
mov dword [ebp - 0xbd0], eax
cmp dword [ebp - 0x648], 1
je 0x1003c191
mov dword [ebp - 0x650], 1
jmp 0x1003c198
and dword [ebp - 0x650], 0
mov eax, dword [ebp - 0x650]
mov dword [ebp - 0x658], eax
mov eax, dword [ebp - 0xdc]
sub eax, dword [ebp - 0x658]
mov dword [ebp - 0x660], eax
mov eax, dword [ebp - 0x660]
cmp eax, dword [ebp - 0x864]
jle 0x1003c1d0
mov dword [ebp - 0x668], 1
jmp 0x1003c1d7
and dword [ebp - 0x668], 0
mov eax, dword [ebp - 0x3a0]
add eax, dword [ebp - 0x668]
add eax, dword [ebp - 0x670]
je 0x1003c1f7
mov dword [ebp - 0x678], 1
jmp 0x1003c1fe
and dword [ebp - 0x678], 0
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0xd50]
cmp dword [ebp - 0x678], eax
jl 0x1003c21e
mov dword [ebp - 0x680], 1
jmp 0x1003c225
and dword [ebp - 0x680], 0
mov eax, dword [ebp - 0x86c]
imul eax, dword [ebp - 0x680]
imul eax, dword [ebp - 0x88]
sub eax, dword [ebp - 0x3a0]
cmp eax, dword [ebp - 0x874]
jg 0x1003c253
mov dword [ebp - 0x398], 1
jmp 0x1003c25a
and dword [ebp - 0x398], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x398]
mov dword [ebp + eax - 0xd9c], ecx
mov eax, dword [ebp - 0x398]
mov dword [ebp - 0x3a0], eax
jmp 0x1003c0e3
jmp 0x1003c29c
mov byte [ebp - 0xad], 0
movzx eax, byte [ebp - 0xad]
test eax, eax
je 0x1003c29c
push 0
push 0
call dword [sym.imp.GDI32.dll_GetRgnBox]
cmp dword [0x100e05e0], 0
je 0x1003c99b
mov dword [ebp - 0x690], 0
mov dword [ebp - 0x884], 0xfffb
mov dword [ebp - 0x6c], 0
jmp 0x1003c2cd
mov eax, dword [ebp - 0x6c]
inc eax
mov dword [ebp - 0x6c], eax
cmp dword [ebp - 0x6c], 1
jge 0x1003c2e3
mov eax, dword [ebp - 0x6c]
mov dword [ebp + eax*4 - 0x2b8], 8
jmp 0x1003c2c6
mov dword [ebp - 0x6c], 0
jmp 0x1003c2f3
mov eax, dword [ebp - 0x6c]
inc eax
mov dword [ebp - 0x6c], eax
cmp dword [ebp - 0x6c], 2
jge 0x1003c309
mov eax, dword [ebp - 0x6c]
mov dword [ebp + eax*4 - 0xb8c], 0xffffffff
jmp 0x1003c2ec
push 4
pop eax
imul eax, eax, 0
push 4
pop ecx
imul ecx, ecx, 0
mov ecx, dword [ebp + ecx - 0x2b8]
sub ecx, dword [ebp + eax - 0x2b8]
cmp ecx, 0xfffffffc
jbe 0x1003c334
mov dword [ebp - 0x688], 1
jmp 0x1003c33b
and dword [ebp - 0x688], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x688]
sub ecx, dword [ebp + eax - 0x2b8]
mov dword [ebp - 0x690], ecx
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x2b8]
cmp eax, dword [ebp - 0x690]
jle 0x1003c375
mov dword [ebp - 0x87c], 1
jmp 0x1003c37c
and dword [ebp - 0x87c], 0
mov eax, dword [ebp - 0x884]
mov dword [ebp - 0xc68], eax
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0xb8c], 0xe135e1f6
mov byte [ebp - 0x90], 0
movzx eax, byte [ebp - 0x90]
test eax, eax
je 0x1003c3cb
push 0
push 0x12e5
push 0x120
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_SetWindowOrgEx]
mov eax, dword [ebp + 8]
mov dword [ebp - 0x894], eax
mov dword [ebp - 0x6c8], 0xe617
mov dword [ebp - 0x38], 0
mov dword [ebp - 0x700], 0
mov dword [ebp - 0x2c0], 0
jmp 0x1003c408
mov eax, dword [ebp - 0x2c0]
inc eax
mov dword [ebp - 0x2c0], eax
cmp dword [ebp - 0x2c0], 1
jge 0x1003c421
mov eax, dword [ebp - 0x2c0]
mov dword [ebp + eax*4 - 0x34], 1
jmp 0x1003c3fb
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x34], 0
je 0x1003c4c8
xor eax, eax
inc eax
je 0x1003c45f
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x34]
mov dword [ebp - 0xbd8], eax
xor eax, eax
imul eax, eax, 0x6eea
test eax, eax
je 0x1003c45f
mov dword [ebp - 0x698], 1
jmp 0x1003c466
and dword [ebp - 0x698], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x34]
cmp dword [ebp - 0x698], eax
jne 0x1003c484
mov dword [ebp - 0x6a0], 1
jmp 0x1003c48b
and dword [ebp - 0x6a0], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x34]
cmp dword [ebp - 0x6a0], eax
jle 0x1003c4a9
mov dword [ebp - 0x6a8], 1
jmp 0x1003c4b0
and dword [ebp - 0x6a8], 0
cmp dword [ebp - 0x6a8], 0xdacd
jle 0x1003c4c8
mov dword [ebp - 0x6b0], 1
jmp 0x1003c4cf
and dword [ebp - 0x6b0], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x34]
cmp dword [ebp - 0x6b0], eax
jge 0x1003c4ed
mov dword [ebp - 0x6b8], 1
jmp 0x1003c4f4
and dword [ebp - 0x6b8], 0
cmp dword [ebp - 0x6b8], 0x2afa0177
je 0x1003c50c
mov dword [ebp - 0x6c0], 1
jmp 0x1003c513
and dword [ebp - 0x6c0], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x34]
imul eax, dword [ebp - 0x6c0]
neg eax
cmp eax, dword [ebp - 0x6c8]
jl 0x1003c53a
mov dword [ebp - 0x6d0], 1
jmp 0x1003c541
and dword [ebp - 0x6d0], 0
mov eax, dword [ebp - 0x6c8]
cmp dword [ebp - 0x6d0], eax
je 0x1003c55b
mov dword [ebp - 0x6d8], 1
jmp 0x1003c562
and dword [ebp - 0x6d8], 0
mov eax, dword [ebp - 0x6d8]
mov dword [ebp - 0x38], eax
mov eax, dword [ebp - 0x38]
mov dword [ebp - 0x700], eax
mov dword [ebp - 0x38], 0
jmp 0x1003c584
mov eax, dword [ebp - 0x38]
inc eax
mov dword [ebp - 0x38], eax
cmp dword [ebp - 0x38], 0
jg 0x1003c635
mov eax, dword [ebp - 0x38]
mov ecx, dword [ebp - 0x38]
mov ecx, dword [ebp + ecx*4 - 0x34]
cmp ecx, dword [ebp + eax*4 - 0x34]
jne 0x1003c5aa
mov dword [ebp - 0x6e0], 1
jmp 0x1003c5b1
and dword [ebp - 0x6e0], 0
mov eax, dword [ebp - 0x38]
mov ecx, dword [ebp - 0x38]
mov ecx, dword [ebp + ecx*4 - 0x34]
add ecx, dword [ebp - 0x6e0]
cmp ecx, dword [ebp + eax*4 - 0x34]
jl 0x1003c5d3
mov dword [ebp - 0x6e8], 1
jmp 0x1003c5da
and dword [ebp - 0x6e8], 0
mov eax, 0x8217c712
sub eax, dword [ebp - 0x6e8]
cmp eax, 0x5922
je 0x1003c5f8
mov dword [ebp - 0x6f0], 1
jmp 0x1003c5ff
and dword [ebp - 0x6f0], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x34]
cmp dword [ebp - 0x6f0], eax
jg 0x1003c61d
mov dword [ebp - 0x6f8], 1
jmp 0x1003c624
and dword [ebp - 0x6f8], 0
mov eax, dword [ebp - 0x6f8]
mov dword [ebp - 0x700], eax
jmp 0x1003c57d
mov eax, dword [ebp + 0xc]
mov dword [ebp - 0x8c4], eax
mov dword [ebp - 0xf4], 0xeca4
cmp dword [ebp - 0xf4], 0
je 0x1003c6c8
mov byte [ebp - 0xd5], 0
movzx eax, byte [ebp - 0xd5]
test eax, eax
je 0x1003c66e
push 0xec7
call dword [sym.imp.KERNEL32.dll_TlsGetValue]
mov dword [ebp - 0xf4], 0xffffffe2
jmp 0x1003c687
mov eax, dword [ebp - 0xf4]
inc eax
mov dword [ebp - 0xf4], eax
cmp dword [ebp - 0xf4], 0x28
jl 0x1003c6c6
mov byte [ebp - 0x92], 0
movzx eax, byte [ebp - 0x92]
test eax, eax
je 0x1003c6aa
push 0
call dword [sym.imp.GDI32.dll_CreateFontIndirectA]
mov byte [ebp - 0xb5], 0
movzx eax, byte [ebp - 0xb5]
test eax, eax
je 0x1003c6c4
push 0
call dword [sym.imp.GDI32.dll_CreateBrushIndirect]
jmp 0x1003c67a
jmp 0x1003c6de
mov dword [ebp - 0x88c], 0xffff
mov eax, dword [ebp - 0xf4]
mov dword [ebp - 0x88c], eax
mov eax, dword [ebp - 0x894]
mov dword [ebp - 0x8d4], eax
mov dword [ebp - 0x158], 0x53b26bdd
mov dword [ebp - 0x8b4], 0xfffffffd
mov dword [ebp - 0x89c], 1
mov dword [ebp - 0x710], 0xfffffff8
mov dword [ebp - 0x8ac], 0xf4a0426a
mov dword [ebp - 0x158], 0
jmp 0x1003c735
mov eax, dword [ebp - 0x158]
inc eax
mov dword [ebp - 0x158], eax
cmp dword [ebp - 0x158], 0xe
jg 0x1003c84b
mov dword [ebp - 0x150], 0
mov dword [ebp - 0x8a4], 0xfffffff8
mov dword [ebp - 0x8bc], 0x6c7f05f4
mov eax, dword [ebp - 0x150]
inc eax
mov dword [ebp - 0x150], eax
jne 0x1003c77b
mov dword [ebp - 0x708], 1
jmp 0x1003c782
and dword [ebp - 0x708], 0
mov eax, dword [ebp - 0x708]
mov dword [ebp - 0x710], eax
cmp dword [ebp - 0x710], 0xfff8
jae 0x1003c7a6
mov dword [ebp - 0x718], 1
jmp 0x1003c7ad
and dword [ebp - 0x718], 0
mov eax, dword [ebp - 0x89c]
sub eax, dword [ebp - 0x718]
mov dword [ebp - 0x8a4], eax
xor eax, eax
inc eax
jne 0x1003c7d6
cmp dword [ebp - 0x8ac], 0
jne 0x1003c7d6
and dword [ebp - 0x720], 0
jmp 0x1003c7e0
mov dword [ebp - 0x720], 1
mov eax, dword [ebp - 0x150]
cmp dword [ebp - 0x720], eax
jne 0x1003c803
cmp dword [ebp - 0x150], 0
je 0x1003c803
mov dword [ebp - 0x728], 1
jmp 0x1003c80a
and dword [ebp - 0x728], 0
imul eax, dword [ebp - 0x158], 0xcdea
sub eax, dword [ebp - 0x728]
mov ecx, dword [ebp - 0x8b4]
sub ecx, eax
cmp ecx, 0xfffffff7
jle 0x1003c833
mov dword [ebp - 0x730], 1
jmp 0x1003c83a
and dword [ebp - 0x730], 0
mov eax, dword [ebp - 0x730]
mov dword [ebp - 0x8bc], eax
jmp 0x1003c728
mov eax, dword [ebp - 0x8c4]
mov dword [ebp - 0x8cc], eax
mov dword [ebp - 0xfc], 1
mov dword [ebp - 0xce4], 0xab61b583
mov byte [ebp - 0x94], 0
movzx eax, byte [ebp - 0x94]
test eax, eax
je 0x1003c885
push 0
call dword [sym.imp.GDI32.dll_CreateRectRgnIndirect]
mov dword [ebp - 0xfc], 0x1d
jmp 0x1003c89e
mov eax, dword [ebp - 0xfc]
dec eax
mov dword [ebp - 0xfc], eax
cmp dword [ebp - 0xfc], 0xffffffe7
je 0x1003c978
mov dword [ebp - 0x160], 1
cmp dword [ebp - 0xfc], 0
je 0x1003c8c7
cmp dword [ebp - 0x160], 0
jne 0x1003c8d9
cmp dword [ebp - 0xfc], 0
jne 0x1003c8d9
cmp dword [ebp - 0x160], 0
je 0x1003c8ee
cmp dword [ebp - 0x160], 0
je 0x1003c8ee
mov dword [ebp - 0x738], 1
jmp 0x1003c8f5
and dword [ebp - 0x738], 0
cmp dword [ebp - 0x738], 6
jb 0x1003c913
cmp dword [ebp - 0x160], 0
je 0x1003c913
mov dword [ebp - 0x740], 1
jmp 0x1003c91a
and dword [ebp - 0x740], 0
cmp dword [ebp - 0x740], 0x5d09ea9
je 0x1003c932
mov dword [ebp - 0x748], 1
jmp 0x1003c939
and dword [ebp - 0x748], 0
mov eax, dword [ebp - 0x748]
mov dword [ebp - 0x160], eax
mov byte [ebp - 0xcd], 0
movzx eax, byte [ebp - 0xcd]
test eax, eax
je 0x1003c973
push 0x6d5
push 0x1e2f
push 0x1aed
push 0x2133
push 0
call dword [sym.imp.KERNEL32.dll_MapViewOfFile]
jmp 0x1003c891
push dword [ebp - 0x8cc]
push dword [ebp - 0x8d4]
call dword [0x100e05e0]
mov dword [ebp - 0x8dc], eax
mov eax, dword [ebp - 0x8dc]
jmp 0x1003d0f4
mov dword [ebp - 0xac0], 6
mov dword [ebp - 0xabc], 6
mov dword [ebp - 0xab8], 6
mov dword [ebp - 0xab4], 6
mov dword [ebp - 0x104], 0xf34fda0e
mov dword [ebp - 0x92c], 0x59f451db
mov dword [ebp - 0x7a8], 0
mov dword [ebp - 0x308], 0xfffffff7
mov dword [ebp - 0x904], 0xfffffffc
mov dword [ebp - 0x934], 0
mov dword [ebp - 0x750], 0x44b1
mov dword [ebp - 0x8ec], str.qacyai_kzvwcall_zbjxcv_qgxomfqlg
cmp dword [ebp - 0x750], 0x4734
jle 0x1003cadf
push 0
push 0x157a
push 0x1e91
push 0x7ba
push 0x12e1
call dword [sym.imp.GDI32.dll_CreateBitmap]
and dword [ebp - 0x2c8], 0
jmp 0x1003ca55
mov eax, dword [ebp - 0x2c8]
inc eax
mov dword [ebp - 0x2c8], eax
cmp dword [ebp - 0x2c8], 0x255a
jge 0x1003cadf
and dword [ebp - 0x2d0], 0
jmp 0x1003ca77
mov eax, dword [ebp - 0x2d0]
inc eax
mov dword [ebp - 0x2d0], eax
cmp dword [ebp - 0x2d0], 0x77e7
jge 0x1003cada
mov eax, dword [ebp - 0x2c8]
or eax, dword [ebp - 0x2d0]
cdq
mov dword [ebp - 0xa2c], eax
mov dword [ebp - 0xa28], edx
push dword [ebp - 0xa28]
push dword [ebp - 0xa2c]
lea ecx, [ebp - 0xe8c]
call fcn.10001a31
pop ecx
pop ecx
mov dword [ebp - 0x8e4], eax
mov ecx, dword [ebp - 0x8e4]
call fcn.10001bb6
push eax
call fcn.1004b2d6
pop ecx
lea ecx, [ebp - 0xe8c]
call fcn.10001bac
jmp 0x1003ca6a
jmp 0x1003ca48
mov dword [ebp - 4], 0x20
cmp dword [ebp - 0x750], 0x448f
jge 0x1003cafe
push dword [ebp - 0x8ec]
call fcn.1004b2d6
pop ecx
jmp 0x1003cb1a
or dword [ebp - 4], 0xffffffff
jmp 0x1003cb24
mov dword [ebp - 0x2d8], 0
jmp 0x1003cb3d
mov eax, dword [ebp - 0x2d8]
inc eax
mov dword [ebp - 0x2d8], eax
cmp dword [ebp - 0x2d8], 3
jge 0x1003cb59
mov eax, dword [ebp - 0x2d8]
mov dword [ebp + eax*4 - 0xacc], 0x5bc98072
jmp 0x1003cb30
mov dword [ebp - 0x104], 0
jmp 0x1003cb72
mov eax, dword [ebp - 0x104]
inc eax
mov dword [ebp - 0x104], eax
cmp dword [ebp - 0x104], 3
jg 0x1003d0f2
mov dword [ebp - 0x168], 0x6942a1e9
mov dword [ebp - 0x90c], 0x9a54e587
mov dword [ebp - 0x3b0], 0xef23e469
mov dword [ebp - 0x914], 0x42b4
mov dword [ebp - 0x91c], 1
mov dword [ebp - 0x2e0], 0
jmp 0x1003cbca
mov eax, dword [ebp - 0x2e0]
inc eax
mov dword [ebp - 0x2e0], eax
cmp dword [ebp - 0x2e0], 1
jge 0x1003cbe6
mov eax, dword [ebp - 0x2e0]
mov dword [ebp + eax*4 - 0x310], 0xffffffff
jmp 0x1003cbbd
mov dword [ebp - 0x168], 0
jmp 0x1003cbff
mov eax, dword [ebp - 0x168]
inc eax
mov dword [ebp - 0x168], eax
cmp dword [ebp - 0x168], 3
jg 0x1003ced4
mov dword [ebp - 0x8fc], 4
mov dword [ebp - 0x790], 0xb7c39c9d
mov dword [ebp - 0x8f4], 8
mov dword [ebp - 0xbe0], 0xefe0c237
mov dword [ebp - 0xb04], 0x28e
mov dword [ebp - 0xb00], 0x28e
mov dword [ebp - 0xafc], 0x28e
mov dword [ebp - 0xaf8], 0x28e
mov dword [ebp - 0x2e8], 0
jmp 0x1003cc75
mov eax, dword [ebp - 0x2e8]
inc eax
mov dword [ebp - 0x2e8], eax
cmp dword [ebp - 0x2e8], 1
jge 0x1003cc91
mov eax, dword [ebp - 0x2e8]
mov dword [ebp + eax*4 - 0x3a8], 0x9909d073
jmp 0x1003cc68
mov eax, dword [ebp - 0x168]
cmp dword [ebp + eax*4 - 0xac0], 0
jne 0x1003cd51
mov eax, dword [ebp - 0x104]
mov eax, dword [ebp + eax*4 - 0xac0]
mov dword [ebp - 0xc70], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x310]
cmp eax, dword [ebp - 0x8f4]
je 0x1003ccd9
mov dword [ebp - 0x758], 1
jmp 0x1003cce0
and dword [ebp - 0x758], 0
mov eax, dword [ebp - 0x308]
dec eax
mov dword [ebp - 0x308], eax
mov eax, dword [ebp - 0x308]
sub eax, dword [ebp - 0x758]
add eax, dword [ebp - 0x8fc]
cmp eax, 0x7d266845
jg 0x1003cd12
mov dword [ebp - 0x760], 1
jmp 0x1003cd19
and dword [ebp - 0x760], 0
cmp dword [ebp - 0x760], 0xb0969e0c
je 0x1003cd31
mov dword [ebp - 0x768], 1
jmp 0x1003cd38
and dword [ebp - 0x768], 0
cmp dword [ebp - 0x768], 2
jae 0x1003cd51
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x3a8], 0
je 0x1003cd66
cmp dword [ebp - 0x904], 0
je 0x1003cd66
mov dword [ebp - 0x770], 1
jmp 0x1003cd6d
and dword [ebp - 0x770], 0
mov eax, dword [ebp - 0x790]
cmp dword [ebp - 0x770], eax
jg 0x1003cd87
mov dword [ebp - 0x778], 1
jmp 0x1003cd8e
and dword [ebp - 0x778], 0
push 4
pop eax
shl eax, 1
mov ecx, dword [ebp - 0x778]
mov dword [ebp + eax - 0xb04], ecx
mov eax, dword [ebp - 0x3b0]
cmp eax, dword [ebp - 0x90c]
jge 0x1003cdba
mov dword [ebp - 0x780], 1
jmp 0x1003cdc1
and dword [ebp - 0x780], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x780]
sub ecx, dword [ebp + eax - 0x310]
jne 0x1003cde8
cmp dword [ebp - 0x914], 0
jne 0x1003cde8
and dword [ebp - 0x788], 0
jmp 0x1003cdf2
mov dword [ebp - 0x788], 1
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x788]
mov dword [ebp + eax - 0x310], ecx
mov eax, dword [ebp - 0x7a8]
mov dword [ebp - 0xbe8], eax
mov eax, dword [ebp - 0x91c]
mov dword [ebp - 0xca0], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x3a8]
mov dword [ebp - 0xbf0], eax
cmp dword [ebp - 0x790], 0
jne 0x1003ce4b
mov eax, 0x9815
test eax, eax
jne 0x1003ce4b
and dword [ebp - 0x924], 0
jmp 0x1003ce55
mov dword [ebp - 0x924], 1
mov eax, dword [ebp - 0x3b0]
mov dword [ebp - 0xc1c], eax
push 4
pop eax
shl eax, 0
push 4
pop ecx
imul ecx, ecx, 0
push 4
pop edx
imul edx, edx, 0
mov edx, dword [ebp + edx - 0x3a8]
sub edx, dword [ebp + ecx - 0xacc]
cmp edx, dword [ebp + eax - 0xac0]
jl 0x1003ce96
mov dword [ebp - 0x798], 1
jmp 0x1003ce9d
and dword [ebp - 0x798], 0
cmp dword [ebp - 0x798], 0x729c
je 0x1003ceb5
mov dword [ebp - 0x7a0], 1
jmp 0x1003cebc
and dword [ebp - 0x7a0], 0
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x7a0]
mov dword [ebp + eax - 0xacc], ecx
jmp 0x1003cbf2
mov dword [ebp - 0x3e4], 0x26ac
mov dword [ebp - 0x944], str.rrt_bwyy_fgxabvo_vypc_znwsavb_ukd_vgk_ensdezdcc_ebjgyoep_dlcfwyln_qjunjhr_agxwqey_yud_nxzvqrt
cmp dword [ebp - 0x3e4], 0x2846
jle 0x1003cfa9
call dword [sym.imp.USER32.dll_CreatePopupMenu]
and dword [ebp - 0x300], 0
jmp 0x1003cf14
mov eax, dword [ebp - 0x300]
inc eax
mov dword [ebp - 0x300], eax
cmp dword [ebp - 0x300], 0x5de0
jge 0x1003cfa9
and dword [ebp - 0x2f0], 0
jmp 0x1003cf3a
mov eax, dword [ebp - 0x2f0]
inc eax
mov dword [ebp - 0x2f0], eax
cmp dword [ebp - 0x2f0], 0x6eea
jge 0x1003cfa4
and dword [ebp - 0x2f8], 0
jmp 0x1003cf5c
mov eax, dword [ebp - 0x2f8]
inc eax
mov dword [ebp - 0x2f8], eax
cmp dword [ebp - 0x2f8], 0x215a
jge 0x1003cfa2
mov eax, dword [ebp - 0x2f0]
cdq
idiv dword [ebp - 0x2f8]
mov eax, dword [ebp - 0x300]
sub eax, edx
cdq
mov dword [ebp - 0xa38], eax
mov dword [ebp - 0xa34], edx
push dword [ebp - 0xa34]
push dword [ebp - 0xa38]
mov ecx, 0x1007d9f8
call fcn.10001bd6
jmp 0x1003cf4f
jmp 0x1003cf2d
jmp 0x1003cf07
mov eax, dword [ebp - 0x7a8]
cmp eax, dword [ebp - 0x104]
jge 0x1003cfc3
mov dword [ebp - 0x7c8], 1
jmp 0x1003cfca
and dword [ebp - 0x7c8], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x92c]
add ecx, 5
cmp ecx, dword [ebp + eax - 0xacc]
jg 0x1003cff5
push 8
pop eax
test eax, eax
je 0x1003cff5
mov dword [ebp - 0x7b0], 1
jmp 0x1003cffc
and dword [ebp - 0x7b0], 0
mov eax, dword [ebp - 0x308]
cmp dword [ebp - 0x7b0], eax
jge 0x1003d016
mov dword [ebp - 0x7b8], 1
jmp 0x1003d01d
and dword [ebp - 0x7b8], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0xacc]
cmp dword [ebp - 0x7b8], eax
jl 0x1003d03e
mov dword [ebp - 0x7c0], 1
jmp 0x1003d045
and dword [ebp - 0x7c0], 0
mov eax, dword [ebp - 0x934]
cmp dword [ebp - 0x7c0], eax
jle 0x1003d05f
mov dword [ebp - 0x93c], 1
jmp 0x1003d066
and dword [ebp - 0x93c], 0
mov eax, dword [ebp - 0x3b0]
mov dword [ebp - 0xbf8], eax
cmp dword [ebp - 0x7c8], 0xffff
ja 0x1003d08a
mov dword [ebp - 0x3dc], 1
jmp 0x1003d091
and dword [ebp - 0x3dc], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x3dc]
mov dword [ebp + eax - 0x310], ecx
mov dword [ebp - 4], 0x22
cmp dword [ebp - 0x3e4], 0x2512
jge 0x1003d0c7
mov edx, dword [ebp - 0x944]
mov ecx, 0x1007d9f8
call fcn.1000358d
jmp 0x1003d0e3
or dword [ebp - 4], 0xffffffff
jmp 0x1003d0ed
jmp 0x1003cb65
xor eax, eax
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret