Function at 0x1003fcb9
Capabilities:
Encode data using xor
Enumerate gui resources
Get common file path

Disassembly:
mov eax, 0x10063a3b
call fcn.10061bc4
sub esp, 0x5d0
push ebx
push esi
push edi
mov dword [ebp - 0x10], esp
lea ecx, [ebp - 0x128]
push 2
call fcn.10001ed7
lea eax, [ebp - 0x128]
xor ebx, ebx
push eax
push ecx
lea eax, [ebp - 0x388]
mov dword [ebp - 4], ebx
push eax
mov dword [ebp - 0x24], ebx
mov dl, 1
push ecx
mov dword [ebp - 0x3c], 0xba3f
call fcn.1003caee
mov edi, dword [ebp - 0x128]
xor edx, edx
add esp, 0x10
inc edx
mov dword [edi], 0xa
mov dword [ebp - 0x30], 0xf77722ab
mov dword [ebp - 0x1c], ebx
jmp 0x1003fd2d
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0x40c], edx
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 4
jl 0x1003fd20
mov dword [ebp - 0x1c], ebx
jmp 0x1003fd49
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0xf0], 0xc234ac01
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], edx
jl 0x1003fd38
mov eax, dword [ebp - 0x128]
cmp dword [eax], ebx
je 0x1003fd7f
xor ecx, ecx
cmp dword [eax], 0x7631615e
setl cl
xor eax, eax
imul ecx, dword [ebp - 0x40c]
cmp ecx, 0x28cae2fe
setl al
cmp eax, dword [ebp - 0x404]
mov eax, edx
jge 0x1003fd81
mov eax, ebx
mov dword [ebp - 0xf0], eax
xor ecx, ecx
mov dword [ebp - 0x24], eax
mov eax, dword [ebp - 0x24]
cmp dword [edi + 4], eax
setg cl
test ecx, ecx
je 0x1003fda5
mov eax, dword [ebp - 0x128]
cmp dword [eax], ebx
mov eax, ebx
je 0x1003fda7
mov eax, edx
imul eax, eax, 0xa4b1
test eax, eax
je 0x1003fdb8
mov esi, edx
cmp dword [ebp - 0x30], ebx
jne 0x1003fdba
mov esi, ebx
mov eax, dword [ebp - 0x30]
xor ecx, ecx
cmp esi, eax
sete cl
xor eax, eax
cmp ecx, 0xd09e
setle al
mov dword [ebp - 0x3c], eax
mov eax, dword [ebp - 0xf0]
mov eax, dword [ebp - 0x128]
dec dword [eax]
cmp dword [eax], 0xfffffff7
jg 0x1003fd14
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x128]
call fcn.10001f5a
push 0x6dc7
push 0x1879
push 0x43c0
push 0x2513
push 0x2f80
xor eax, eax
mov dword [ebp - 0x38], 0x3342eb90
inc eax
mov byte [ebp - 0x5d], bl
push eax
push 0x5915
push eax
push 0x30c5
push 0x3a24
lea eax, [ebp - 0x5d]
mov edx, 0x58b3
push eax
push 0x626
xor cl, cl
call fcn.1003dbff
mov byte [ebp - 0x31], bl
add esp, 0x30
cmp byte [ebp - 0x31], bl
je 0x1003fe71
push 0x4030
xor esi, esi
mov edx, 0x1de5
inc esi
mov ecx, 0x5275
push esi
push ebx
push 0x67d0
push ebx
call fcn.1003b974
add esp, 0x14
mov ecx, dword [0x10082370]
xor eax, eax
inc eax
test al, cl
jne 0x1003feae
or ecx, eax
mov dword [0x10082370], ecx
mov dword [ebp - 4], eax
mov dword [0x10082364], ebx
mov dword [0x10082368], ebx
call fcn.1004341b
push 0x10063d61
mov dword [0x10082364], eax
call fcn.100499dc
or dword [ebp - 4], 0xffffffff
pop ecx
mov dword [ebp - 0x30], 0x3b24
cmp dword [ebp - 0x30], 0x3d9f
jle 0x1003ff12
push ebx
push 0x2f5
call dword [sym.imp.KERNEL32.dll_GetCPInfo]
mov edi, ebx
mov dword [ebp - 0x24], ebx
mov esi, ebx
mov eax, esi
mov dword [ebp - 0x3c], ebx
and eax, edi
mov dword [ebp - 0x20], eax
mov edi, eax
mov eax, edi
mov ecx, 0x1007f138
xor eax, ebx
cdq
push edx
push eax
call fcn.10002c1c
inc ebx
cmp ebx, 0x2b4a
jl 0x1003fedd
mov edi, dword [ebp - 0x24]
inc esi
push 0
pop ebx
cmp esi, 0x884
jl 0x1003fed1
inc edi
mov dword [ebp - 0x24], edi
cmp edi, 0x40ad
jl 0x1003fecf
mov dword [ebp - 0x28], 0xc7bf
mov dword [ebp - 4], 2
cmp dword [ebp - 0x30], 0x393b
jge 0x1003ff56
mov edx, str.lwwh_tlcc_xqyinwk_nkqnj_gkpgcop_doqeuvh_ggqpd_vkeawdnsb
mov ecx, 0x1007f138
call fcn.100045d3
jmp 0x1003ff56
or dword [ebp - 4], 0xffffffff
xor edx, edx
inc edx
mov dword [ebp - 0x18], edx
mov dword [ebp - 0x24], edx
mov dword [ebp - 0x1c], ebx
mov dword [ebp - 0x30], 0x15b01d97
mov dword [ebp - 0x2c], 0x254f8d36
push 3
mov dword [ebp - 0x1c], 0x7854c3eb
mov dword [ebp - 0x1c], ebx
pop esi
jmp 0x1003ff94
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0x478], 9
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], esi
jl 0x1003ff83
mov dword [ebp - 0x1c], ebx
jmp 0x1003ffaf
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0x4b4], 0xffffffff
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 4
jl 0x1003ff9e
mov eax, dword [ebp - 0x24]
xor ecx, ecx
cmp eax, edx
setl cl
xor edx, edx
mov dword [ebp - 0x24], ecx
mov eax, dword [ebp - 0x24]
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x30]
mov eax, dword [ebp - 0x30]
mov eax, dword [ebp - 0x18]
inc dword [ebp - 0x28]
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x30], eax
imul ecx, dword [ebp - 0x30], 0x25e4
mov eax, dword [ebp - 0x2c]
cmp ecx, eax
setge dl
xor ecx, ecx
mov dword [ebp - 0x2c], edx
mov edx, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x28]
sub edx, esi
neg eax
cmp eax, edx
setle cl
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 0x2c], esi
cmp dword [ebp - 0x2c], ebx
jl 0x1004004e
mov dword [ebp - 0x1c], ebx
jmp 0x10040044
mov dword [ebp - 0x18], esi
cmp dword [ebp - 0x18], ebx
jl 0x10040041
mov dword [ebp - 0x28], ebx
jmp 0x10040036
mov eax, dword [ebp - 0x2c]
mov ecx, dword [ebp + eax*4 - 0x4b4]
mov eax, dword [ebp - 0x28]
mov dword [ebp + eax*4 - 0x478], ecx
inc dword [ebp - 0x28]
cmp dword [ebp - 0x28], 2
jle 0x1004001f
dec dword [ebp - 0x18]
jns 0x1004001a
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], esi
jle 0x10040012
dec dword [ebp - 0x2c]
jns 0x1004000d
cmp byte [0x10080e31], 0
jne 0x100426cc
mov dword [ebp - 0x1c4], 0xfffffff8
lea ecx, [ebp - 0x348]
push 2
call fcn.10001ed7
mov dword [ebp - 4], 4
mov dword [ebp - 0x28], 0x3213
cmp dword [ebp - 0x28], 0x3497
jle 0x100400e3
mov esi, ebx
mov dword [ebp - 0x2c], ebx
mov eax, esi
mov dword [ebp - 0x18], 0x459d
mov dword [ebp - 0x30], eax
mov edi, eax
mov dword [ebp - 0x24], 0xa67
mov ebx, edi
mov esi, 0x5335
mov eax, ebx
mov ecx, 0x1007f138
cdq
push edx
push eax
call fcn.10002c1c
dec ebx
dec esi
jne 0x100400aa
dec edi
dec dword [ebp - 0x24]
jne 0x100400a3
mov eax, dword [ebp - 0x30]
dec eax
dec dword [ebp - 0x18]
mov dword [ebp - 0x30], eax
jne 0x1004009a
mov esi, dword [ebp - 0x2c]
inc esi
mov dword [ebp - 0x2c], esi
cmp esi, 0x7d4b
jl 0x1004008e
push 3
xor ebx, ebx
pop esi
mov dword [ebp - 0x98], 0x1320f2d6
mov byte [ebp - 4], 5
cmp dword [ebp - 0x28], 0x2ea4
jge 0x1004012a
mov edx, str.uwmbfxuao_zkigac_fluposzcy_udeakukzw_evcohqfzv_lrrjozel
mov ecx, 0x1007f138
call fcn.100045d3
jmp 0x1004012a
mov dword [ebp - 4], 4
lea ecx, [ebp - 0x2a8]
mov dword [ebp - 0x1a8], 0xa37d7c86
push esi
call fcn.10001ed7
lea eax, [ebp - 0x348]
mov byte [ebp - 4], 7
push eax
push ecx
push ebx
lea ecx, [ebp - 0x84]
call fcn.1003bae9
add esp, 0xc
mov dword [ebp - 0x84], ebx
jmp 0x10040183
mov ecx, dword [ebp - 0x84]
mov eax, dword [ebp - 0x2a8]
mov dword [eax + ecx*4], 0xff444262
inc dword [ebp - 0x84]
cmp dword [ebp - 0x84], esi
jl 0x1004016a
push ecx
push ecx
push 0x4327
push 0x1549
xor eax, eax
lea ecx, [ebp - 0x1c4]
inc eax
push eax
push ecx
push 0x99e
push 0x4553
push 0x2f27
push 0x1c32
lea ecx, [ebp - 0x98]
mov dl, al
push ecx
push 0x2f7b
push ebx
push 0x5086
push 0x53f2
lea ecx, [ebp - 0x2a8]
push ecx
push 0x3893
push 0xed6
push 0x7456
lea ecx, [ebp - 0x1a8]
push 0x2e83
push ecx
mov ecx, 0x55a3
call fcn.1003cbf0
add esp, 0x54
mov dword [ebp - 0x98], 0x1a
cmp dword [ebp - 0x98], 0xfffffff4
jl 0x10040231
xor esi, esi
inc esi
push esi
push ecx
mov ecx, 0x1b89
call fcn.1003c83a
dec dword [ebp - 0x98]
cmp dword [ebp - 0x98], 0xfffffff4
pop ecx
pop ecx
jge 0x10040214
lea ecx, [ebp - 0x2a8]
call fcn.10001f5a
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x348]
call fcn.10001f5a
xor ecx, ecx
inc ecx
mov byte [0x10080e31], cl
mov dword [ebp - 0x24], ecx
mov dword [ebp - 0x18], ebx
jmp 0x10040269
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x48c], ecx
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 2
jl 0x1004025c
mov dword [ebp - 0x24], ebx
cmp dword [ebp - 0x24], ecx
jg 0x100405ba
mov dword [ebp - 0x1c], ebx
mov dword [ebp - 0x1c], ecx
cmp dword [ebp - 0x1c], ebx
jl 0x100405b2
mov dword [ebp - 0x28], 0xfffffff7
mov dword [ebp - 0x20], 0x5c08
cmp dword [ebp - 0x20], 0x5cf6
jle 0x100402fe
push ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_EnumResourceTypesW]
mov eax, ebx
xor esi, esi
mov dword [ebp - 0x30], eax
inc esi
mov edi, ebx
mov ecx, edi
shl eax, cl
lea ecx, [ebp - 0x514]
cdq
push edx
push eax
call fcn.10002a23
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x100402d0
mov eax, dword [eax]
push eax
call fcn.10049a06
pop ecx
push ebx
push esi
lea ecx, [ebp - 0x514]
call fcn.10002ff9
mov eax, dword [ebp - 0x30]
inc edi
cmp edi, 0x63bc
jl 0x100402b4
inc eax
mov dword [ebp - 0x30], eax
cmp eax, 0x5a3b
jl 0x100402b2
xor ecx, ecx
inc ecx
mov dword [ebp - 0x28], ebx
jmp 0x10040586
mov dword [ebp - 0x2c], ecx
mov dword [ebp - 0x2c], ebx
jmp 0x1004034c
mov dword [ebp - 0x18], 0xffffffff
mov dword [ebp - 0x18], ebx
jmp 0x10040344
mov dword [ebp - 0x30], ebx
mov dword [ebp - 0x3c], ecx
mov dword [ebp - 0x30], ecx
cmp dword [ebp - 0x30], ebx
jl 0x10040341
push ecx
mov dword [ebp - 0x3c], ebx
mov edx, 0x22ae
push ecx
call fcn.1003ed7b
dec dword [ebp - 0x30]
pop ecx
pop ecx
push 1
pop ecx
jns 0x10040328
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], ecx
jle 0x1004031a
inc dword [ebp - 0x2c]
cmp dword [ebp - 0x2c], ecx
jle 0x1004030e
mov byte [ebp - 0x31], bl
mov dword [ebp - 0x3c], 0x1a27
cmp dword [ebp - 0x3c], 0x636
jge 0x10040573
lea eax, [ebp - 0xa4]
push eax
push 0x1006aae0
call fcn.10049dfd
mov eax, dword [ebp - 0xa4]
pop ecx
pop ecx
test eax, eax
je 0x10040569
mov dword [ebp - 0x1e8], ebx
dec eax
mov dword [ebp - 0xa4], eax
lea eax, [ebp - 0x4c]
push eax
push 0x1006aae0
call fcn.10049dfd
mov eax, dword [ebp - 0x4c]
pop ecx
pop ecx
inc eax
lea ecx, [ebp - 0x104]
push eax
call fcn.10011e07
xor eax, eax
mov dword [ebp - 4], 8
inc eax
cmp dword [ebp - 0x4c], eax
jl 0x100403e6
mov esi, dword [ebp - 0x104]
mov edi, eax
add esi, 4
push esi
push 0x1006aae0
call fcn.10049dfd
inc edi
add esi, 4
pop ecx
pop ecx
cmp edi, dword [ebp - 0x4c]
jle 0x100403d0
push dword [ebp - 0x100]
mov edi, dword [ebp - 0x104]
push edi
call fcn.1002a74a
mov eax, dword [ebp - 0x4c]
pop ecx
pop ecx
lea ecx, [ebp - 0x1e8]
mov dword [ebp - 0xe8], ebx
push ecx
lea eax, [eax*2 + 1]
mov dword [ebp - 0xe4], ebx
push eax
lea ecx, [ebp - 0xe8]
mov dword [ebp - 0xe0], ebx
call fcn.1002a563
mov byte [ebp - 4], 9
lea ecx, [ebp - 0xe8]
mov eax, dword [ebp - 0x4c]
push ecx
inc eax
mov dword [ebp - 0x11c], ebx
push eax
lea ecx, [ebp - 0x11c]
mov dword [ebp - 0x118], ebx
mov dword [ebp - 0x114], ebx
call fcn.100433b0
cmp dword [ebp - 0xe8], 0
je 0x1004047d
push dword [ebp - 0xe8]
call fcn.10048fa4
pop ecx
mov dword [ebp - 0xe8], ebx
mov dword [ebp - 0xe4], ebx
mov dword [ebp - 0xe0], ebx
mov edx, dword [ebp - 0x4c]
xor ecx, ecx
inc ecx
cmp edx, ecx
jl 0x10040514
mov esi, dword [ebp - 0x11c]
mov edi, ecx
add esi, 0xc
mov eax, dword [esi]
inc edi
lea esi, [esi + 0xc]
mov dword [eax], 0x3b9aca00
mov edx, dword [ebp - 0x4c]
cmp edi, edx
jle 0x10040496
mov edi, dword [ebp - 0x104]
xor ebx, ebx
cmp edx, ecx
jl 0x10040514
lea eax, [edx + edx]
mov ebx, ecx
mov dword [ebp - 0x18], eax
mov eax, dword [ebp - 0x11c]
add eax, 0xc
mov dword [ebp - 0x30], eax
mov esi, ecx
cmp dword [ebp - 0x18], ecx
jl 0x10040507
mov edx, dword [edi + ebx*4]
sub edx, esi
jns 0x100404d9
neg edx
mov eax, dword [eax - 0xc]
mov ecx, dword [eax + esi*4 - 4]
mov eax, dword [ebp - 0x30]
add ecx, edx
mov eax, dword [eax]
cmp dword [eax + esi*4 - 4], ecx
cmovl ecx, dword [eax + esi*4 - 4]
mov dword [eax + esi*4], ecx
inc esi
mov edx, dword [ebp - 0x4c]
lea eax, [edx + edx]
mov dword [ebp - 0x18], eax
cmp esi, eax
mov eax, dword [ebp - 0x30]
jle 0x100404d0
xor ecx, ecx
inc ecx
inc ebx
add eax, 0xc
mov dword [ebp - 0x30], eax
cmp ebx, edx
jle 0x100404c9
xor ebx, ebx
mov ecx, dword [ebp - 0x11c]
imul eax, edx, 0xc
mov eax, dword [eax + ecx]
push dword [eax + edx*8]
push str._ld_n
call fcn.10049a06
pop ecx
pop ecx
lea ecx, [ebp - 0x11c]
call fcn.10034283
or dword [ebp - 4], 0xffffffff
test edi, edi
je 0x1004055b
push edi
call fcn.10048fa4
pop ecx
mov dword [ebp - 0x104], ebx
mov dword [ebp - 0x100], ebx
mov dword [ebp - 0xfc], ebx
mov eax, dword [ebp - 0xa4]
test eax, eax
jne 0x1004038f
dec eax
xor ecx, ecx
mov dword [ebp - 0xa4], eax
inc ecx
cmp byte [ebp - 0x31], 0
je 0x10040583
xor cl, cl
call fcn.1003f67a
xor ecx, ecx
inc ecx
inc dword [ebp - 0x28]
cmp dword [ebp - 0x28], ecx
jle 0x10040306
cmp dword [ebp - 0x20], 0x5b94
jge 0x100405a3
push str.anuenvpjv_eku_alobxp_kztfzdr_qujiifl_xyalnxlns_fvhot_amsjv
call fcn.10049a06
pop ecx
or dword [ebp - 4], 0xffffffff
xor ecx, ecx
dec dword [ebp - 0x1c]
inc ecx
jmp 0x10040281
inc dword [ebp - 0x24]
jmp 0x10040272
push 2
lea ecx, [ebp - 0x2d8]
mov dword [ebp - 0xb4], 0x1007baf0
call fcn.10001ed7
push 0xc
pop edi
mov dword [ebp - 4], edi
xor esi, esi
mov dword [ebp - 0xf8], 8
inc esi
mov dword [ebp - 0x190], 0x37f20bab
mov dword [ebp - 0x1b8], 0xfffffffc
mov dword [ebp - 0xf4], 0xffffffff
mov dword [ebp - 0x138], ebx
mov dword [ebp - 0x20], 0x7d1
cmp dword [ebp - 0x20], 0x8fe
jle 0x1004068e
mov ecx, ebx
mov dword [ebp - 0x24], ecx
mov eax, ebx
mov dword [ebp - 0x30], ebx
mov edi, ebx
add eax, ecx
lea ecx, [ebp - 0x574]
xor eax, edi
cdq
push edx
push eax
call fcn.10002a23
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x10040640
mov eax, dword [eax]
push eax
call fcn.10049a06
pop ecx
push ebx
push esi
lea ecx, [ebp - 0x574]
call fcn.10002ff9
mov eax, dword [ebp - 0x30]
inc edi
mov ecx, dword [ebp - 0x24]
cmp edi, 0x5a72
jl 0x10040624
inc eax
mov dword [ebp - 0x30], eax
cmp eax, 0x44b4
jl 0x10040622
inc ecx
mov dword [ebp - 0x24], ecx
cmp ecx, 0x488
jl 0x1004061d
push 0x14c6
push 0x19f9
push ebx
call dword [sym.imp.GDI32.dll_PtInRegion]
push 0xc
pop edi
lea eax, [ebp - 0x2d8]
push eax
push ecx
push 0xbae
push esi
lea eax, [ebp - 0x1c0]
push eax
push ecx
mov ecx, 0x4077
call fcn.1003a8ef
add esp, 0x18
cmp dword [ebp - 0x20], 0x508
jge 0x100406c5
push str.haaaw_ucn_ntdj
call fcn.10049a06
pop ecx
push ecx
lea eax, [ebp - 0x1b8]
mov dword [ebp - 4], edi
push eax
sub esp, 0xc
lea eax, [ebp - 0x190]
lea edx, [ebp - 0xf8]
push eax
lea eax, [ebp - 0x2d8]
push eax
lea eax, [ebp - 0x138]
push eax
lea eax, [ebp - 0xf4]
push eax
push ecx
push ecx
mov cl, 1
call fcn.1003c8bd
add esp, 0x2c
lea ecx, [ebp - 0xf4]
xor eax, eax
lea edx, [ebp - 0xf8]
inc eax
push eax
push 0x67a7
push ecx
push eax
push ebx
push 0x35f6
mov ecx, 0x3312
call fcn.1003db1c
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x2d8]
add esp, 0x18
call fcn.10001f5a
push dword [ebp - 0x1c0]
movdqa xmm0, xmmword [0x10070e60]
lea eax, [ebp - 0x44c]
push eax
lea eax, [ebp - 0x45c]
mov dword [ebp - 0xcc], ebx
push eax
push ebx
lea ecx, [ebp - 0x148]
mov dword [ebp - 0x148], ebx
movdqu xmmword [ebp - 0x45c], xmm0
mov dword [ebp - 0x144], ebx
mov dword [ebp - 0x140], ebx
call fcn.10001fc0
mov dword [ebp - 4], 0xf
lea ecx, [ebp - 0x358]
mov dword [ebp - 0x3b0], 7
push 2
call fcn.10001ed7
sub esp, 0xc
mov byte [ebp - 4], 0x10
lea eax, [ebp - 0x358]
mov dword [ebp - 0x34c], 0x307976b5
mov dword [ebp - 0x31c], 0x214c259d
mov dword [ebp - 0x3ac], ebx
push eax
push 0x2cf1
sub esp, 0x18
lea eax, [ebp - 0x378]
push eax
push ecx
push ecx
push 1
push 0x1c50
push ecx
push ecx
call fcn.1003c9d2
mov eax, dword [ebp - 0x148]
lea ecx, [ebp - 0x358]
add esp, 0x48
mov dword [eax], ebx
call fcn.10001f5a
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x148]
call fcn.10001f5a
mov ecx, dword [ebp - 0xb4]
mov dword [ebp - 0x10c], edi
cmp edi, 0xe0
jge 0x10040a4f
mov al, byte [ecx]
cmp al, byte [edi + ecx]
je 0x1004082e
inc edi
jmp 0x10040812
mov dword [ebp - 0x28], 0x2a05
cmp dword [ebp - 0x28], 0x2cb0
jle 0x100408a7
mov eax, ebx
mov dword [ebp - 0x24], ebx
mov edi, ebx
mov esi, ebx
add eax, edi
mov ecx, esi
shl eax, cl
lea ecx, [ebp - 0x4cc]
cdq
push edx
push eax
call fcn.10002a23
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x10040865
mov eax, dword [eax]
push eax
call fcn.10049a06
pop ecx
push ebx
push 1
lea ecx, [ebp - 0x4cc]
call fcn.10002ff9
mov eax, dword [ebp - 0x24]
inc esi
cmp esi, 0x3716
jl 0x10040847
inc edi
cmp edi, 0x59ac
jl 0x10040845
inc eax
mov dword [ebp - 0x24], eax
cmp eax, 0x35dc
jl 0x10040843
push ebx
push 0x1882
push ebx
call dword [sym.imp.GDI32.dll_GetMetaFileBitsEx]
mov dword [ebp - 0x24], 0x2086
cmp dword [ebp - 0x24], 0x23e2
jle 0x1004090d
mov esi, ebx
mov edi, ebx
mov dword [ebp - 0x20], 0x5c76
mov eax, edi
lea ecx, [ebp - 0x544]
cdq
push edx
push eax
call fcn.10002a23
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x100408dc
mov eax, dword [eax]
push eax
call fcn.10049a06
pop ecx
push ebx
push 1
lea ecx, [ebp - 0x544]
call fcn.10002ff9
add edi, esi
dec dword [ebp - 0x20]
jne 0x100408c2
inc esi
cmp esi, 0x3ce6
jl 0x100408b9
push 0x1882
push ebx
call dword [sym.imp.KERNEL32.dll_GetWindowsDirectoryW]
push 2
lea ecx, [ebp - 0x278]
call fcn.10001ed7
cmp dword [ebp - 0x24], 0x1f59
jge 0x1004092e
push str.ngnre_kdidcfs_rjbfwzpr_uvxuhfyb_bsd_yvx
call fcn.10049a06
pop ecx
mov dword [ebp - 4], 0x11
mov dword [ebp - 0x2c], 0x312
cmp dword [ebp - 0x2c], 0x5b8
jle 0x100409ce
mov dword [ebp - 0x24], ebx
mov edi, ebx
mov esi, ebx
mov dword [ebp - 0x18], ebx
mov ecx, esi
mov dword [ebp - 0x30], 0x3640
mov esi, dword [ebp - 0x24]
mov dword [ebp - 0x20], ecx
mov eax, edi
sar eax, cl
lea ecx, [ebp - 0x4e4]
xor eax, esi
cdq
push edx
push eax
call fcn.10002a23
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x10040980
mov eax, dword [eax]
push eax
call fcn.10049a06
pop ecx
push ebx
push 1
lea ecx, [ebp - 0x4e4]
call fcn.10002ff9
mov ecx, dword [ebp - 0x20]
dec ecx
dec dword [ebp - 0x30]
mov dword [ebp - 0x20], ecx
jne 0x10040962
mov esi, dword [ebp - 0x18]
inc esi
mov dword [ebp - 0x18], esi
cmp esi, 0x6db1
jl 0x10040953
inc edi
cmp edi, 0x1aee
jl 0x1004094e
mov eax, dword [ebp - 0x24]
inc eax
mov dword [ebp - 0x24], eax
cmp eax, 0x162c
jl 0x1004094c
push ebx
call dword [sym.imp.USER32.dll_IsRectEmpty]
push ecx
push 0x2c39
lea eax, [ebp - 0x1a0]
push eax
push ecx
lea edx, [ebp - 0x278]
mov cl, 1
call fcn.1003ca14
add esp, 0x10
cmp dword [ebp - 0x2c], 0x1e5
jge 0x10040a00
push str.ubwp_vxcd_htfxxblf_mjmksfgt_jswktmld_rtrqa_sfshtnjfj
call fcn.10049a06
pop ecx
mov eax, dword [ebp - 0x278]
lea ecx, [ebp - 0x278]
mov dword [eax + 4], ebx
call fcn.10001f5a
cmp dword [ebp - 0x28], 0x26be
jge 0x10040a28
push str.bhkjk_smjlwas_iqyecflvq_bgywwv_rmcgzef_kig_tue_egqpogvkw_zvecnpnp_wzazqddzx
call fcn.10049a06
pop ecx
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x10c]
xor eax, eax
inc eax
push eax
push ecx
lea ecx, [ebp - 0xcc]
mov dl, al
push 0x5d0d
push ecx
xor cl, cl
call fcn.1003ee3a
add esp, 0x10
mov dword [ebp - 0x18], 0xad313dd3
mov dword [ebp - 0x1ec], 0xfffffff7
mov dword [ebp - 0x19c], 0xffffffff
mov dword [ebp - 0x1a4], 7
mov dword [ebp - 0x18], 0xfffffff4
jmp 0x10040b1c
push ecx
push ecx
mov dword [ebp - 0x58], 0xffffffff
lea edx, [ebp - 0x58]
mov dword [ebp - 0x194], 0xfffffffa
push ebx
call fcn.1003f38a
add esp, 0xc
mov dword [ebp - 0x58], 0xfffffff8
cmp dword [ebp - 0x58], 0xffffffed
jg 0x10040b19
xor ebx, ebx
inc ebx
lea eax, [ebp - 0x194]
mov dword [ebp - 0x13c], 0xd907c4e7
push eax
push 0x2def
lea eax, [ebp - 0x58]
xor cl, cl
push eax
push 0x2f0f
push ebx
push 0x6ab
push ebx
lea eax, [ebp - 0x19c]
push eax
lea eax, [ebp - 0x13c]
push eax
push 0x560c
lea eax, [ebp - 0x1ec]
push eax
push 0x6e79
push 0x139d
push 0x1f2a
lea edx, [ebp - 0x1a4]
call fcn.1003d6df
add esp, 0x38
dec dword [ebp - 0x58]
cmp dword [ebp - 0x58], 0xffffffed
jle 0x10040aaf
xor ebx, ebx
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 0xe
jl 0x10040a80
push dword [ebp - 0x1a0]
movdqa xmm0, xmmword [0x10070e40]
lea eax, [ebp - 0x42c]
push eax
lea eax, [ebp - 0x43c]
mov dword [ebp - 0x15c], 4
push eax
push ebx
lea ecx, [ebp - 0x158]
mov dword [ebp - 0x158], ebx
movdqu xmmword [ebp - 0x43c], xmm0
mov dword [ebp - 0x154], ebx
mov dword [ebp - 0x150], ebx
call fcn.10001fc0
push 2
lea ecx, [ebp - 0x3bc]
mov dword [ebp - 4], 0x18
call fcn.10001ed7
lea eax, [ebp - 0x3a8]
mov byte [ebp - 4], 0x19
push eax
push ebx
lea eax, [ebp - 0x3bc]
push eax
sub esp, 0x14
call fcn.1003ddbc
mov eax, dword [ebp - 0x158]
lea ecx, [ebp - 0x3bc]
add esp, 0x20
mov dword [eax], ebx
call fcn.10001f5a
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x158]
call fcn.10001f5a
sub esp, 0x10
mov dword [ebp - 0xb0], 0x1007bbd0
mov dl, 1
mov ecx, 0x955
push 0x1673
sub esp, 0xc
push 0x9b6
call fcn.1003a976
mov al, byte [0x1007bbd0]
lea ecx, [ebp - 0x290]
add esp, 0x24
mov byte [ebp - 0x3d], al
push 3
call fcn.10001ed7
mov dword [ebp - 4], 0x1a
mov dword [ebp - 0x18], ebx
jmp 0x10040c1f
mov ecx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x290]
mov dword [eax + ecx*4], ebx
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 3
jl 0x10040c10
push 0x76da
xor eax, eax
mov ecx, 0x5846
inc eax
push eax
push 0x221a
push 0x6aab
push eax
push 0x36ee
mov dl, al
call fcn.1003d4c3
mov eax, dword [ebp - 0x290]
lea ecx, [ebp - 0x290]
or dword [ebp - 4], 0xffffffff
add esp, 0x18
mov dword [eax], ebx
call fcn.10001f5a
mov dword [ebp - 0x20], 0x70bc
cmp dword [ebp - 0x20], 0x713e
jle 0x10040cbb
mov edi, ebx
mov esi, ebx
mov eax, esi
lea ecx, [ebp - 0x4fc]
xor eax, edi
cdq
push edx
push eax
call fcn.10002a23
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x10040c94
mov eax, dword [eax]
push eax
call fcn.10049a06
pop ecx
push ebx
push 1
lea ecx, [ebp - 0x4fc]
call fcn.10002ff9
inc esi
cmp esi, 0x5626
jl 0x10040c78
inc edi
cmp edi, 0x3097
jl 0x10040c76
mov eax, dword [ebp - 0xb4]
mov cl, byte [0x1007bbd0]
mov dl, byte [eax]
call fcn.10043446
cmp dword [ebp - 0x20], 0x6e3c
mov byte [0x1007bbd0], al
jge 0x10040ce7
push str.bopbp_xcmgpia_rng_ulcm_ullzgq_yhhiwe_xlffsx_etc_nyluwln_ayubvumhp_zyd_mfdl
call fcn.10049a06
pop ecx
or dword [ebp - 4], 0xffffffff
mov dword [ebp - 0x24], 0xeb6
cmp dword [ebp - 0x24], 0x1095
jle 0x10040d41
mov edi, ebx
mov dword [ebp - 0x20], ebx
mov esi, ebx
mov ecx, esi
mov dword [ebp - 0x3c], edi
mov dword [ebp - 0x30], ebx
shl edi, cl
mov eax, edi
mov ecx, 0x1007f138
xor eax, ebx
cdq
push edx
push eax
call fcn.10002c1c
inc ebx
cmp ebx, 0x4a82
jl 0x10040d0c
mov edi, dword [ebp - 0x20]
inc esi
push 0
pop ebx
cmp esi, 0x105a
jl 0x10040d02
inc edi
mov dword [ebp - 0x20], edi
cmp edi, 0x33fd
jl 0x10040d00
mov dword [ebp - 0x38], 0xeb90
mov dword [ebp - 4], 0x1d
cmp dword [ebp - 0x24], 0xbe9
jge 0x10040d85
mov edx, str.hio_gexaejgwi_whkatypmp_sbo_bkjsezql_zmjr_foj_vuhylieiq_busny_biyuwnsj_wtt_xxlbxeo_wiwodg
mov ecx, 0x1007f138
call fcn.100045d3
jmp 0x10040d85
or dword [ebp - 4], 0xffffffff
lea edx, [ebp - 0x65]
push 0x51cb
push 0x888
push ebx
push 0x58bd
push 0x2dc2
push ecx
xor eax, eax
mov byte [ebp - 0x65], bl
inc eax
mov ecx, 0x757b
push eax
push 0x4805
push 0x7c24
push eax
call fcn.1003f1b3
push 0x2e64
xor eax, eax
mov edx, 0x5412
push ebx
inc eax
mov ecx, 0x5c3a
push eax
push 0x34ba
push eax
call fcn.1003b974
xor ecx, ecx
add esp, 0x3c
inc ecx
mov esi, ecx
mov dword [ebp - 0x24], ecx
cmp esi, 4
jge 0x1004117b
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 0x1c], ebx
jmp 0x10040e0a
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0xb8], 0x8eac8b13
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], ecx
jl 0x10040df9
mov dword [ebp - 0x1c], ebx
jmp 0x10040e25
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0x5cc], 0x942a1e94
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 4
jl 0x10040e14
mov dword [ebp - 0x1c], ebx
jmp 0x10040e3d
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0xb8], ebx
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], ecx
jl 0x10040e30
mov dword [ebp - 0x1c], ebx
cmp dword [ebp - 0x1c], ebx
jg 0x10040f38
jmp 0x10040e53
xor ecx, ecx
inc ecx
mov dword [ebp - 0x38], 0xd29729c
push ecx
mov dword [ebp - 0x38], 0xfffffff7
lea ecx, [ebp - 0x364]
mov dword [ebp - 0x38], ebx
call fcn.10001ed7
mov dword [ebp - 4], 0x1f
mov dword [ebp - 0x14c], 3
mov dword [ebp - 0x28], ebx
jmp 0x10040e97
mov eax, dword [ebp - 0x28]
mov dword [ebp + eax*4 - 0x494], 0xfffffffa
inc dword [ebp - 0x28]
cmp dword [ebp - 0x28], 2
jl 0x10040e86
xor edx, edx
mov dword [ebp - 0x28], ebx
inc edx
jmp 0x10040eb8
mov ecx, dword [ebp - 0x28]
mov eax, dword [ebp - 0x364]
mov dword [eax + ecx*4], 0xb263d188
inc dword [ebp - 0x28]
cmp dword [ebp - 0x28], edx
jl 0x10040ea5
push 0x653a
push 0x9fe
push 0x6c0
lea eax, [ebp - 0x14c]
mov cl, 1
push eax
push edx
push 0x1d
push edx
push 0x2dab
push 0x6709
push 0x629d
push 0x32a5
push 0x6aca
push 0x3acb
push 0x1df3
mov edx, 0x3d38
call fcn.1003d6df
mov eax, dword [ebp - 0x1c]
add esp, 0x38
mov ecx, dword [ebp + eax*4 - 0xb8]
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0xb8], ecx
lea ecx, [ebp - 0x364]
or dword [ebp - 4], 0xffffffff
call fcn.10001f5a
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], ebx
jle 0x10040e50
mov eax, esi
mov edi, dword [ebp - 0xb0]
cdq
idiv dword [ebp - 0xcc]
mov cl, byte [esi + edi]
mov esi, edx
mov byte [ebp - 0x67], cl
mov dl, byte [ebp - 0x3d]
call fcn.10043446
mov ecx, dword [ebp - 0xb4]
mov dl, byte [esi + ecx]
mov cl, al
call fcn.10043446
mov ecx, dword [ebp - 0x24]
mov byte [ecx + edi], al
mov dword [ebp - 0x20], 0x5f48
cmp dword [ebp - 0x20], 0x60ca
jle 0x10040fc3
mov edi, ebx
mov esi, ebx
lea eax, [esi + edi]
cdq
lea ecx, [ebp - 0x52c]
push edx
push eax
call fcn.10002a23
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x10040f9c
mov eax, dword [eax]
push eax
call fcn.10049a06
pop ecx
push ebx
push 1
lea ecx, [ebp - 0x52c]
call fcn.10002ff9
inc esi
cmp esi, 0x58d5
jl 0x10040f81
inc edi
cmp edi, 0x4a13
jl 0x10040f7f
mov dword [ebp - 0x28], 0xad313dd3
lea ecx, [ebp - 0x2cc]
mov dword [ebp - 0xac], 0x35e4b783
mov dword [ebp - 0x3c], ebx
push 3
call fcn.10001ed7
mov dword [ebp - 4], 0x20
mov dword [ebp - 0x30], 2
mov dword [ebp - 0x90], ebx
jmp 0x10041011
mov eax, dword [ebp - 0x90]
mov dword [ebp + eax*4 - 0x41c], 3
inc dword [ebp - 0x90]
cmp dword [ebp - 0x90], 4
jl 0x10040ffa
lea eax, [ebp - 0x2cc]
push eax
push 0x2d6
push ebx
push ecx
lea eax, [ebp - 0x90]
push eax
call fcn.1003b058
mov dword [ebp - 0x28], ebx
add esp, 0x14
cmp dword [ebp - 0x28], 0xffffffea
jge 0x10041125
mov edi, dword [ebp - 0x2cc]
push 0x279f
xor eax, eax
mov dword [ebp - 0x5c], 0x8c9f3690
inc eax
lea edx, [ebp - 0xac]
push eax
push 0x6714
push eax
push eax
lea ecx, [ebp - 0x5c]
call fcn.1003d890
mov eax, dword [ebp - 0x5c]
xor edx, edx
mov eax, dword [ebp - 0x5c]
add esp, 0x14
mov ecx, dword [ebp - 0x410]
mov eax, dword [ebp - 0x28]
cmp eax, ecx
mov eax, dword [ebp - 0x5c]
setle dl
xor ecx, ecx
cmp eax, edx
setne cl
xor eax, eax
inc eax
cmp eax, ecx
sbb eax, eax
xor edx, edx
neg eax
lea ecx, [eax - 8]
mov eax, dword [ebp - 0x28]
cmp ecx, eax
mov eax, dword [ebp - 0xac]
setne dl
sub edx, 0x1d77
neg edx
sbb edx, edx
xor ecx, ecx
inc edx
cmp edx, eax
mov edx, dword [ebp - 0x5c]
mov eax, dword [ebp - 0x5c]
setle cl
sub edx, ecx
sub edx, eax
jne 0x100410d8
cmp dword [ebp - 0x418], ebx
jne 0x100410d8
mov edx, ebx
jmp 0x100410db
xor edx, edx
inc edx
mov eax, dword [ebp - 0x5c]
xor ecx, ecx
cmp eax, edx
mov eax, dword [ebp - 0x28]
setg cl
xor edx, edx
cmp ecx, eax
mov eax, dword [ebp - 0x28]
sete dl
xor ecx, ecx
cmp edx, eax
setl cl
xor esi, esi
mov dword [ebp - 0xac], ecx
inc esi
mov eax, dword [ebp - 0xac]
xor ecx, ecx
mov eax, dword [ebp - 0x3c]
cmp eax, esi
setle cl
mov dword [edi + 8], ecx
mov dword [ebp - 0x30], ecx
dec dword [ebp - 0x28]
cmp dword [ebp - 0x28], 0xffffffea
jl 0x1004104a
lea ecx, [ebp - 0x2cc]
call fcn.10001f5a
cmp dword [ebp - 0x20], 0x5e44
jge 0x10041144
push str.mqneyhjaz_lfpfjukyn_qtqjdaqkl_xjwr_iomlfpuc_gffoxvms_kbgd_qaum_xwt_wxb_enfc_yrcrwswc
call fcn.10049a06
pop ecx
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x67]
xor eax, eax
mov edx, 0xcbb
inc eax
push eax
push ecx
push 0x1917
push eax
push eax
push 0x2d0e
lea ecx, [ebp - 0x3d]
call fcn.1003db1c
mov esi, dword [ebp - 0x24]
add esp, 0x18
inc esi
xor ecx, ecx
mov dword [ebp - 0x24], esi
inc ecx
jmp 0x10040de8
mov dword [ebp - 0x1ac], ecx
lea ecx, [ebp - 0x3fc]
push 3
call fcn.10001ed7
push 4
pop esi
lea ecx, [ebp - 0x3fc]
mov dword [ebp - 4], 0x23
push ecx
push 0x5258
push 0x30d7
push 0x7e5a
push 0x6609
xor eax, eax
mov dword [ebp - 0x38], esi
inc eax
mov dword [ebp - 0x38], ebx
push eax
push 0x62ae
push eax
push 0x6e39
lea ecx, [ebp - 0x1d0]
mov dword [ebp - 0x38], 0x3ffaf072
push ecx
mov dword [ebp - 0x38], 0xae2fe817
mov edx, 0x6f7
mov dword [ebp - 0x38], 0x8ab79ae4
mov cl, al
push 0x519f
mov dword [ebp - 0x24], eax
mov dword [ebp - 0x38], 0x2a3062a4
push 0x719c
call fcn.1003dbff
mov dword [ebp - 0x20], 0x6426
add esp, 0x30
cmp dword [ebp - 0x20], 0x65da
jle 0x10041244
mov esi, ebx
mov edi, ebx
mov eax, esi
mov ecx, 0x1007f138
cdq
idiv edi
mov eax, edx
cdq
push edx
push eax
call fcn.10002c1c
inc edi
cmp edi, 0x465d
jl 0x1004121b
inc esi
cmp esi, 0x7de3
jl 0x10041219
push 4
pop esi
push ecx
lea eax, [ebp - 0x1ac]
mov edx, 0x1cb9
push eax
push 0x6022
push ecx
xor cl, cl
call fcn.1003ca14
add esp, 0x10
mov byte [ebp - 4], 0x24
cmp dword [ebp - 0x20], 0x619b
jge 0x1004129e
mov edx, str.tlx_jaa_ajwxwkez_kqve
mov ecx, 0x1007f138
call fcn.100045d3
jmp 0x1004129e
inc dword [ebp - 0x24]
lea ecx, [ebp - 0x3fc]
or dword [ebp - 4], 0xffffffff
call fcn.10001f5a
mov eax, dword [ebp - 0xb0]
mov eax, dword [eax]
mov dword [ebp - 0xec], eax
test eax, eax
jle 0x100426cc
cmp eax, 0x2f77
jae 0x100426cc
push dword [ebp - 0x1d0]
movdqa xmm0, xmmword [0x10070e40]
lea eax, [ebp - 0x41c]
push eax
lea eax, [ebp - 0x42c]
mov dword [ebp - 0x168], ebx
push eax
push ebx
lea ecx, [ebp - 0x168]
mov dword [ebp - 0x164], ebx
movdqu xmmword [ebp - 0x42c], xmm0
mov dword [ebp - 0x160], ebx
call fcn.10001fc0
push 2
lea ecx, [ebp - 0x374]
mov dword [ebp - 4], 0x26
call fcn.10001ed7
mov dword [ebp - 0x18], ebx
jmp 0x1004133f
mov ecx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x374]
mov dword [eax + ecx*4], 0xdead9bac
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 2
jl 0x1004132c
mov eax, dword [ebp - 0x168]
lea ecx, [ebp - 0x374]
mov dword [eax], ebx
call fcn.10001f5a
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x168]
call fcn.10001f5a
push ecx
push 0x5281
push ebx
lea eax, [ebp - 0xcc]
push eax
lea eax, [ebp - 0x3d]
push eax
lea eax, [ebp - 0xec]
push eax
lea eax, [ebp - 0xb0]
push eax
lea edx, [ebp - 0x15c]
lea ecx, [ebp - 0xb4]
call fcn.1003edb0
mov dword [ebp - 0x18], 0x4675
add esp, 0x1c
cmp dword [ebp - 0x18], 0x4948
jle 0x10041411
mov dword [ebp - 0x30], ebx
mov dword [ebp - 0x24], ebx
mov dword [ebp - 0x20], 0x16ad
mov esi, dword [ebp - 0x24]
mov edi, ebx
mov eax, esi
lea ecx, [ebp - 0x55c]
xor eax, edi
cdq
push edx
push eax
call fcn.10002a23
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x100413d9
mov eax, dword [eax]
push eax
call fcn.10049a06
pop ecx
push ebx
push 1
lea ecx, [ebp - 0x55c]
call fcn.10002ff9
inc edi
cmp edi, 0x23f3
jl 0x100413bd
mov esi, dword [ebp - 0x30]
add dword [ebp - 0x24], esi
dec dword [ebp - 0x20]
jne 0x100413b8
inc esi
mov dword [ebp - 0x30], esi
cmp esi, 0x1f6b
jl 0x100413ae
push 4
pop esi
cmp dword [ebp - 0x18], 0x45bc
jge 0x10041425
push str.wyqbdjf_heoyj_dsyuofhl_zwmg_ejtocsix_qcmfsabtw
call fcn.10049a06
pop ecx
or dword [ebp - 4], 0xffffffff
xor eax, eax
inc eax
mov edx, 0x4c53
push eax
push ebx
push 0x6766
push 0x3c5d
push 0x3c99
push eax
push 0x3717
push 0x10082364
push 0x1789
mov ecx, 0x3a5
call fcn.1003efff
add esp, 0x24
lea ecx, [ebp - 0x3f0]
push 3
call fcn.10001ed7
push ecx
push 0x551
push ecx
lea eax, [ebp - 0x30c]
mov dword [ebp - 4], 0x2a
push eax
mov dword [ebp - 0x24], 0xcba2afe0
lea ecx, [ebp - 0x3f0]
push ebx
mov edx, 0x137c
call fcn.1003e9f4
mov dword [ebp - 0x24], 2
add esp, 0x14
cmp dword [ebp - 0x24], ebx
jl 0x100414ba
push ecx
push ecx
mov dl, 1
call fcn.1003de83
dec dword [ebp - 0x24]
pop ecx
pop ecx
jns 0x100414a8
xor ebx, ebx
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x3f0]
call fcn.10001f5a
mov dword [ebp - 0x88], ebx
lea ecx, [ebp - 0x134]
mov dword [ebp - 0x1c], 0xfffffffd
mov dword [ebp - 0x28], esi
push 1
call fcn.10001ed7
xor eax, eax
mov dword [ebp - 4], 0x2b
inc eax
mov edx, 0x3694
push 0x6259
push eax
mov dword [ebp - 0x3c], eax
lea eax, [ebp - 0x1c8]
push eax
push ecx
push ecx
lea eax, [ebp - 0x134]
mov dword [ebp - 0x20], 0x29bb2d3
mov dword [ebp - 0x20], 0xfffffff7
push eax
call fcn.1003df66
add esp, 0x18
mov dword [ebp - 0x1c], 0x1c
jmp 0x10041632
mov dword [ebp - 0x2c], 0xa9d1
mov dword [ebp - 0x24], ebx
mov dword [ebp - 0x20], 0x420ea1bc
mov dword [ebp - 0x18], ebx
jmp 0x10041557
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x2e8], 0xb3ae5d5e
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], esi
jl 0x10041546
mov ecx, dword [ebp - 0x24]
xor edx, edx
mov eax, dword [ebp - 0x1c]
cmp ecx, eax
setge dl
xor eax, eax
cmp edx, 0xfffffff6
setg al
add eax, 0x476a70be
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 0xe483bbb6
mov eax, dword [ebp - 0x1c]
sbb ecx, ecx
xor edx, edx
neg ecx
cmp ecx, eax
setl dl
xor eax, eax
sub edx, dword [ebp - 0x2c]
cmp edx, 0x467bb1a8
setge al
add eax, dword [ebp - 0x2e4]
je 0x100415ae
cmp dword [ebp - 0x1c], ebx
je 0x100415ae
xor ecx, ecx
inc ecx
jmp 0x100415b0
mov ecx, ebx
mov eax, dword [ebp - 0x2c]
xor edx, edx
sub eax, ecx
sub eax, dword [ebp - 0x2c]
mov dword [ebp - 0x28], eax
mov ecx, dword [ebp - 0x28]
imul ecx, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x2e8]
cmp ecx, eax
setge dl
add edx, 0x4e62
je 0x100415e1
cmp dword [ebp - 0x1c], ebx
je 0x100415e1
xor ecx, ecx
inc ecx
jmp 0x100415e3
mov ecx, ebx
mov eax, dword [ebp - 0x2c]
sub eax, ecx
neg eax
sbb eax, eax
inc eax
sub eax, dword [ebp - 0x1c]
mov dword [ebp - 0x20], eax
mov eax, dword [ebp - 0x1c]
mov ecx, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x2e4]
add ecx, 0x44fb66c1
imul ecx, eax
mov eax, dword [ebp - 0x28]
imul eax, ecx
neg eax
sbb eax, eax
inc eax
add eax, dword [ebp - 0x20]
je 0x10041620
cmp dword [ebp - 0x2e8], ebx
jne 0x10041629
cmp dword [ebp - 0x28], ebx
jne 0x10041629
mov eax, ebx
jmp 0x1004162c
xor eax, eax
inc eax
mov dword [ebp - 0x28], eax
dec dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 0xffffffe5
jle 0x10041530
mov dword [ebp - 0x1c], ebx
cmp dword [ebp - 0x1c], ebx
jl 0x100417e3
push dword [ebp - 0x1c8]
movdqa xmm0, xmmword [0x10070e90]
lea eax, [ebp - 0x43c]
push eax
lea eax, [ebp - 0x44c]
mov dword [ebp - 0x20], 0xf141c5ab
push eax
push ebx
lea ecx, [ebp - 0x208]
mov dword [ebp - 0x208], ebx
movdqu xmmword [ebp - 0x44c], xmm0
mov dword [ebp - 0x204], ebx
mov dword [ebp - 0x200], ebx
call fcn.10001fc0
push 0x22de
push 0x2099
push ecx
lea eax, [ebp - 0x6d]
mov byte [ebp - 4], 0x2c
mov byte [ebp - 0x6d], bl
mov cl, 1
push eax
call fcn.1003ab9d
mov dword [ebp - 0x24], 0x6606
add esp, 0x10
cmp dword [ebp - 0x24], 0x67f3
jle 0x100416f2
mov esi, ebx
mov edi, ebx
mov ecx, edi
mov eax, esi
sar eax, cl
mov ecx, 0x1007f138
cdq
push edx
push eax
call fcn.10002c1c
inc edi
cmp edi, 0x333b
jl 0x100416c5
inc esi
cmp esi, 0x5216
jl 0x100416c3
push ebx
push ebx
call dword [sym.imp.GDI32.dll_RectInRegion]
mov ecx, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x134]
cmp dword [eax + ecx*4], ebx
je 0x10041703
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x1c]
mov edx, dword [ebp - 0x1c]
mov ecx, dword [ebp - 0x134]
mov eax, dword [ecx + eax*4]
cmp eax, dword [ecx + edx*4]
jge 0x1004171a
mov eax, dword [ebp - 0x20]
cmp dword [ebp - 0x28], 0xfffffffe
jne 0x1004172c
cmp dword [ebp - 0x20], ebx
jne 0x1004172c
xor edx, edx
mov ecx, ebx
inc edx
jmp 0x10041731
xor edx, edx
inc edx
mov ecx, edx
xor eax, eax
cmp ecx, 6
setne al
sub eax, dword [ebp - 0x28]
cmp eax, 0x76c132d4
jne 0x10041753
mov ecx, dword [ebp - 0x1c]
mov esi, ebx
mov eax, dword [ebp - 0x134]
cmp dword [eax + ecx*4], ebx
je 0x10041755
mov esi, edx
mov eax, dword [ebp - 0x3c]
xor ecx, ecx
cmp esi, eax
sete cl
mov dword [ebp - 0x28], ecx
xor ecx, ecx
mov eax, dword [ebp - 0x28]
mov dword [ebp - 0x20], eax
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x134]
cmp dword [eax], edx
mov eax, dword [ebp - 0x1c]
sete cl
imul eax, ecx
xor ecx, ecx
cmp eax, 0x3fa8b742
setl cl
mov dword [ebp - 0x20], ecx
mov byte [ebp - 4], 0x2d
cmp dword [ebp - 0x24], 0x6573
jge 0x100417c5
mov edx, str.qsxlh_bqq_hdi_rjzq
mov ecx, 0x1007f138
call fcn.100045d3
jmp 0x100417c5
mov dword [ebp - 4], 0x2c
lea ecx, [ebp - 0x208]
mov byte [ebp - 4], 0x2b
call fcn.10001f5a
dec dword [ebp - 0x1c]
jmp 0x1004163f
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x134]
call fcn.10001f5a
mov eax, dword [ebp - 0xb0]
add eax, 4
mov dword [ebp - 0x18], 1
mov dword [ebp - 0x3c], eax
mov dword [ebp - 0x18], ebx
jmp 0x1004181b
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x384], 6
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 3
jl 0x1004180a
mov dword [ebp - 0x18], 2
cmp dword [ebp - 0x18], ebx
jl 0x1004183e
mov eax, dword [ebp - 0x18]
cmp dword [ebp + eax*4 - 0x384], ebx
jne 0x1004183e
dec dword [ebp - 0x18]
jns 0x1004182d
mov eax, dword [ebp - 0x384]
lea ecx, [ebp - 0x220]
mov dword [ebp - 0x18], eax
push 2
call fcn.10001ed7
mov dword [ebp - 4], 0x2f
mov dword [ebp - 0x20], 0x9989d221
mov dword [ebp - 0x20], 5
mov dword [ebp - 0x38], 0x1fbf6859
mov dword [ebp - 0x20], 0x17fe
cmp dword [ebp - 0x20], 0x1050
jge 0x10041940
mov dword [ebp - 0x23c], 0xf
mov dword [ebp - 0x240], ebx
mov byte [ebp - 0x250], bl
mov byte [ebp - 4], 0x30
mov esi, 0x1007f258
mov eax, dword [0x1007f258]
push 0xa
mov ecx, dword [eax + 4]
add ecx, esi
call fcn.1001312f
movzx eax, al
lea edx, [ebp - 0x250]
push eax
mov ecx, esi
call fcn.10043459
cmp dword [ebp - 0x240], 0
mov edi, ebx
pop ecx
mov edx, ebx
jbe 0x100418ff
xor esi, esi
inc esi
cmp dword [ebp - 0x23c], 0x10
lea ecx, [ebp - 0x250]
cmovae ecx, dword [ebp - 0x250]
or eax, 0xffffffff
cmp byte [edx + ecx], 0x78
cmove eax, esi
add edi, eax
inc edx
cmp edx, dword [ebp - 0x240]
jb 0x100418d6
test edi, edi
setle al
add al, 0x78
test edi, edi
jns 0x1004190e
neg edi
test edi, edi
jle 0x10041923
movsx esi, al
push esi
push 0x10070c54
call fcn.10049a06
pop ecx
pop ecx
dec edi
jne 0x10041913
push 0x1006a9d5
call fcn.10049fcc
pop ecx
push ebx
push 1
lea ecx, [ebp - 0x250]
mov byte [ebp - 4], 0x2f
call fcn.10002ff9
push ecx
lea eax, [ebp - 0x220]
mov cl, 1
push eax
lea edx, [ebp - 0x80]
call fcn.1003abf4
pop ecx
pop ecx
push 4
mov dword [ebp - 0x80], ebx
pop esi
jmp 0x1004196d
mov eax, dword [ebp - 0x80]
mov dword [ebp + eax*4 - 0x1fc], 0xdf1febae
inc dword [ebp - 0x80]
cmp dword [ebp - 0x80], esi
jl 0x1004195c
mov dword [ebp - 0x1f0], 1
cmp dword [ebp - 0x1f0], ebx
jl 0x10041a6d
mov edi, dword [ebp - 0x220]
push 2
lea ecx, [ebp - 0x284]
call fcn.10001ed7
lea eax, [ebp - 0x284]
mov byte [ebp - 4], 0x31
push eax
push 0x201f
push 0x2969
lea eax, [ebp - 0x398]
mov dword [ebp - 0x20], 0xffffffff
push eax
xor eax, eax
mov edx, 0x7930
inc eax
push eax
push 0x6a62
push eax
mov cl, al
call fcn.1003e014
add esp, 0x1c
mov byte [ebp - 0x79], bl
lea eax, [ebp - 0x79]
mov ecx, 0xd2f
push eax
push 1
push 0x3f6d
call fcn.1003e657
mov ecx, dword [ebp - 0x284]
xor edx, edx
mov eax, dword [edi + 4]
add esp, 0xc
mov dword [ebp - 0x20], 0x8e00
mov esi, dword [ebp - 0x1f0]
mov dword [ecx + 4], eax
cmp dword [ecx + 4], 0xfffffff8
mov eax, dword [ebp - 0x1f4]
setge dl
xor ecx, ecx
cmp eax, edx
mov eax, dword [ebp - 0x220]
setge cl
xor edx, edx
cmp ecx, 0xba31
mov eax, dword [eax + esi*4]
setg dl
add eax, 5
xor ecx, ecx
cmp eax, edx
setl cl
xor eax, eax
test ecx, ecx
lea ecx, [ebp - 0x284]
setg al
mov dword [ebp - 0x20], eax
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x20], eax
mov byte [ebp - 4], 0x2f
call fcn.10001f5a
dec dword [ebp - 0x1f0]
jns 0x1004198e
push 4
pop esi
or edi, 0xffffffff
lea ecx, [ebp - 0x220]
mov dword [ebp - 4], edi
call fcn.10001f5a
mov byte [ebp - 0x78], bl
mov dword [ebp - 0x77], 0x317b0245
mov dword [ebp - 0x1c], 0x3606de71
mov dword [ebp - 0x20], edi
mov dword [ebp - 0x38], 0xffff
mov dword [ebp - 0x18], ebx
jmp 0x10041aaf
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0xc8], 0xae355683
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 2
jl 0x10041a9e
xor edx, edx
inc edx
mov dword [ebp - 0x1c], edx
cmp dword [ebp - 0x1c], ebx
jl 0x10041ad9
mov eax, dword [ebp - 0x1c]
mov ecx, dword [ebp + eax*4 - 0xc8]
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0xc8], ecx
dec dword [ebp - 0x1c]
jns 0x10041ac0
mov dword [ebp - 0x1c], ebx
jmp 0x10041b8b
mov dword [ebp - 0x28], ebx
mov dword [ebp - 0x28], edx
cmp dword [ebp - 0x28], ebx
jl 0x10041b88
mov dword [ebp - 0x24], 0x461d0ee3
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp + eax*4 - 0xc8]
cmp dword [ebp - 0x20], ebx
jne 0x10041b1e
mov eax, dword [ebp - 0x28]
cmp dword [ebp + eax*4 - 0xc8], ebx
jne 0x10041b15
mov eax, dword [ebp - 0x28]
cmp dword [ebp - 0x20], 0x1b583dc0
jl 0x10041b25
mov ecx, edx
cmp dword [ebp - 0x1c], ebx
jne 0x10041b27
mov ecx, ebx
mov eax, dword [ebp - 0x28]
xor edx, edx
push 1
mov eax, dword [ebp + eax*4 - 0xc8]
cmp ecx, eax
mov eax, dword [ebp - 0x28]
setg dl
xor ecx, ecx
mov eax, dword [ebp + eax*4 - 0xc8]
cmp eax, edx
mov eax, dword [ebp - 0x1c]
setge cl
pop edx
mov dword [ebp + eax*4 - 0xc8], ecx
xor ecx, ecx
mov eax, dword [ebp - 0x24]
inc eax
cmp eax, 0x28d029b4
setne cl
imul eax, ecx, 0xd322f38
xor ecx, ecx
cmp eax, 0x2cc7bc50
setl cl
sub ecx, dword [ebp - 0x28]
neg ecx
sbb ecx, ecx
inc ecx
mov dword [ebp - 0x24], ecx
dec dword [ebp - 0x28]
jns 0x10041af0
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], edx
jle 0x10041ae1
push 0xa
pop eax
mov word [ebp - 0xa0], ax
mov dword [ebp - 0x18], 0xfffa
mov dword [ebp - 0x20], 0x7d214c40
mov dword [ebp - 0xdc], esi
mov dword [ebp - 0xd8], esi
mov dword [ebp - 0xd4], esi
mov dword [ebp - 0xd0], esi
mov dword [ebp - 0x30], ebx
mov dword [ebp - 0x1c], ebx
jmp 0x10041bdd
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0x1e0], 0x94ddbc37
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], esi
jl 0x10041bcc
mov dword [ebp - 0x1c], ebx
jmp 0x10041bf8
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0x308], 0x45c1d102
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], esi
jl 0x10041be7
mov dword [ebp - 0x1c], ebx
jmp 0x10041c13
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0x1b4], 0xfffd
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], edx
jl 0x10041c02
mov eax, dword [ebp - 0x18]
cmp dword [ebp - 0x18], edi
mov eax, dword [ebp - 0x20]
sbb edx, edx
xor ecx, ecx
neg edx
cmp edx, eax
setne cl
mov dword [ebp - 0x1d8], ecx
mov eax, dword [ebp - 0x304]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0xd4]
mov dword [ebp - 0xd4], eax
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x1d8]
mov eax, dword [ebp - 0x1d8]
cmp dword [ebp - 0xd8], ebx
je 0x10041d9e
mov dword [ebp - 0x2c], 0xa98ceef
lea ecx, [ebp - 0x26c]
mov dword [ebp - 0x18], 0xdefc
mov dword [ebp - 0x28], 0xcbfcf419
push 3
call fcn.10001ed7
push ecx
lea eax, [ebp - 0x1b0]
mov dword [ebp - 4], 0x32
push 0x1632
push eax
lea edx, [ebp - 0x26c]
mov cl, 1
call fcn.1003e823
mov eax, dword [ebp - 0x2c]
add esp, 0xc
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0xd4]
mov eax, dword [ebp - 0xd4]
mov eax, dword [ebp - 0x2c]
mov dword [ebp - 0x28], eax
mov dword [ebp - 0x18], 3
cmp dword [ebp - 0x18], ebx
jl 0x10041d8b
mov dword [ebp - 0x20], ebx
mov dword [ebp - 0x24], 0xf7dc2398
mov dword [ebp - 0x2c], ebx
cmp dword [ebp - 0x2c], 3
jg 0x10041d82
mov esi, dword [ebp - 0x26c]
push dword [ebp - 0x1b0]
movdqa xmm0, xmmword [0x10070e30]
lea eax, [ebp - 0x45c]
push eax
lea eax, [ebp - 0x46c]
mov dword [ebp - 0x238], ebx
push eax
push ebx
lea ecx, [ebp - 0x238]
mov dword [ebp - 0x234], ebx
movdqu xmmword [ebp - 0x46c], xmm0
mov dword [ebp - 0x230], ebx
call fcn.10001fc0
dec dword [ebp - 0x30]
mov ecx, edi
mov eax, dword [ebp - 0x2c]
mov dword [esi + 4], 1
mov eax, dword [ebp + eax*4 - 0x1e0]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp + eax*4 - 0xdc]
mov eax, dword [ebp - 0x24]
sub ecx, eax
add ecx, dword [ebp - 0x20]
mov dword [ebp - 0x24], ecx
mov ecx, dword [ebp - 0x24]
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0xdc], ecx
mov dword [ebp - 0x28], ecx
lea ecx, [ebp - 0x238]
call fcn.10001f5a
inc dword [ebp - 0x2c]
cmp dword [ebp - 0x2c], 3
jle 0x10041ced
dec dword [ebp - 0x18]
jns 0x10041cd0
lea ecx, [ebp - 0x26c]
mov dword [ebp - 4], edi
call fcn.10001f5a
jmp 0x10041e6b
xor ecx, ecx
mov dword [ebp - 0x2c], 0x1aea0787
mov dword [ebp - 0x20], 0xfa943c7d
mov eax, dword [ebp - 0x1d8]
mov eax, dword [ebp - 0x2c]
cmp eax, 0x44d9
setge cl
xor eax, eax
cmp ecx, 0x591ebb67
setl al
xor ecx, ecx
sub eax, 6
cmp eax, 0x2f506a54
mov eax, dword [ebp - 0x304]
setg cl
xor edx, edx
cmp ecx, eax
mov ecx, dword [ebp - 0x1b4]
mov eax, dword [ebp - 0xd4]
setg dl
imul ecx, edx
xor edx, edx
cmp ecx, eax
mov eax, dword [ebp - 0x2c]
setg dl
xor ecx, ecx
cmp eax, edx
setle cl
add ecx, dword [ebp - 0x1e0]
je 0x10041e16
cmp dword [ebp - 0x2c], ebx
je 0x10041e16
xor eax, eax
inc eax
jmp 0x10041e18
mov eax, ebx
cmp eax, dword [ebp - 0x2c]
jl 0x10041e27
cmp dword [ebp - 0x2c], ebx
je 0x10041e27
xor edx, edx
inc edx
jmp 0x10041e29
mov edx, ebx
xor ecx, ecx
mov dword [ebp - 0xd4], edx
mov eax, dword [ebp - 0x304]
cmp edx, eax
setle cl
mov dword [ebp - 0x20], ecx
xor ecx, ecx
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x2c]
mov eax, dword [ebp - 0xd8]
cmp ecx, eax
mov eax, dword [ebp - 0x2c]
sbb ecx, ecx
inc ecx
sub ecx, eax
sub ecx, dword [ebp - 0x304]
neg ecx
sbb ecx, ecx
inc ecx
mov dword [ebp - 0x1d8], ecx
push 2
mov edi, ebx
pop esi
mov dword [ebp - 0xbc], edi
cmp esi, 5
jae 0x100420d2
push 3
lea ecx, [ebp - 0x214]
call fcn.10001ed7
push 0x15c0
lea eax, [ebp - 0x32c]
mov dword [ebp - 4], 0x33
push eax
push 0x4172
push 0x68e
lea eax, [ebp - 0x214]
mov dword [ebp - 0x108], 0xffffffff
push eax
xor eax, eax
mov edx, 0x7c75
inc eax
push eax
push 0x325a
push ebx
push 0x4348
push 0x59a7
push 0x4c91
push 0x4add
mov cl, al
call fcn.1003dbff
add esp, 0x2c
lea eax, [ebp - 0x214]
lea edx, [ebp - 0x108]
push eax
push ecx
push 0x358
push 1
mov ecx, 0x4a59
call fcn.1003e9f4
add esp, 0x14
lea eax, [ebp - 0x108]
xor cl, cl
push eax
lea eax, [ebp - 0x214]
push eax
xor eax, eax
inc eax
push eax
mov dl, al
call fcn.1003aed7
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x214]
add esp, 0xc
call fcn.10001f5a
movzx eax, byte [ebp - 0x78]
lea eax, [eax*2 + 2]
cmp esi, eax
jne 0x10042079
push ecx
push ebx
mov edx, 0xcba
call fcn.1003f51b
pop ecx
pop ecx
movzx ecx, byte [ebp + esi - 0x78]
push 2
lea eax, [ecx + 1]
dec ecx
add esi, ecx
mov dword [ebp - 0xbc], eax
mov dword [ebp - 0x28], 1
lea ecx, [ebp - 0x3e0]
mov dword [ebp - 0x24], esi
call fcn.10001ed7
mov dword [ebp - 4], 0x34
mov dword [ebp - 0x18], ebx
jmp 0x10041f9e
mov ecx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x3e0]
mov dword [eax + ecx*4], 9
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 2
jl 0x10041f8b
mov dword [ebp - 0x28], ebx
jmp 0x10041fce
lea eax, [ebp - 0x66]
mov byte [ebp - 0x66], bl
push eax
push 1
push 0x27db
push ebx
push ebx
mov edx, 0x5441
mov ecx, 0x2ca9
call fcn.1003d890
add esp, 0x14
dec dword [ebp - 0x28]
cmp dword [ebp - 0x28], 0xffffffe8
jg 0x10041fa9
mov dword [ebp - 0x20], 0x3d5b
cmp dword [ebp - 0x20], 0x3ebe
jle 0x1004202d
mov esi, ebx
mov edi, ebx
lea eax, [edi + esi]
cdq
lea ecx, [ebp - 0x58c]
push edx
push eax
call fcn.10002a23
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x10042003
mov eax, dword [eax]
push eax
call fcn.10049a06
pop ecx
push ebx
push 1
lea ecx, [ebp - 0x58c]
call fcn.10002ff9
inc edi
cmp edi, 0x5971
jl 0x10041fe8
inc esi
cmp esi, 0x5ffd
jl 0x10041fe6
mov esi, dword [ebp - 0x24]
mov dword [ebp - 0x28], 1
cmp dword [ebp - 0x28], ebx
jl 0x10042054
push ecx
push 1
mov edx, 0x2f69
mov ecx, 0x1109
call fcn.1003ed3b
dec dword [ebp - 0x28]
pop ecx
pop ecx
jns 0x10042039
xor ebx, ebx
cmp dword [ebp - 0x20], 0x3a8f
jge 0x10042068
push str.meei_feudu_ddh_orz_voxn_foeqdo_lwkvmx_pedtg
call fcn.10049a06
pop ecx
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x3e0]
call fcn.10001f5a
jmp 0x100420c4
movzx edx, byte [ebp + esi - 0x77]
mov eax, esi
sub eax, edi
movzx eax, byte [ebp + eax - 0x7a]
movzx ecx, word [ebp + eax*2 - 0xa0]
mov eax, ecx
and eax, edx
add eax, eax
sub ecx, eax
movzx eax, byte [ebp + esi - 0x78]
add ecx, edx
mov edx, 0x20a6
push ecx
mov word [ebp + eax*2 - 0xa0], cx
lea eax, [ebp - 0xbc]
push eax
push 0xdd
push 1
push ecx
push ecx
call fcn.1003acf9
add esp, 0x18
mov edi, dword [ebp - 0xbc]
add esi, 2
jmp 0x10041e76
xor eax, eax
mov word [ebp - 0x9e], ax
mov dword [ebp - 0x18], 1
mov dword [ebp - 0x18], ebx
jmp 0x100420f8
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x394], 6
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 3
jl 0x100420e7
mov dword [ebp - 0x18], 2
cmp dword [ebp - 0x18], ebx
jl 0x1004211b
mov eax, dword [ebp - 0x18]
cmp dword [ebp + eax*4 - 0x394], ebx
jne 0x1004211b
dec dword [ebp - 0x18]
jns 0x1004210a
mov eax, dword [ebp - 0x394]
lea ecx, [ebp - 0x2c0]
mov dword [ebp - 0x18], eax
xor eax, eax
mov word [ebp - 0x2c0], ax
lea eax, [ebp - 0xa0]
push eax
mov dword [ebp - 0x2ac], 7
mov dword [ebp - 0x2b0], ebx
call fcn.1002a447
cmp dword [ebp - 0x2ac], 8
lea eax, [ebp - 0x2c0]
push ebx
cmovae eax, dword [ebp - 0x2c0]
lea ecx, [ebp - 0x2c0]
push 1
movzx eax, word [eax]
mov dword [ebp - 0x1cc], eax
call fcn.1001231a
push 2
lea ecx, [ebp - 0x29c]
call fcn.10001ed7
push 0x3bb3
xor eax, eax
mov dword [ebp - 4], 0x37
inc eax
mov dword [ebp - 0x38], 0xffffffff
push eax
push ebx
lea ecx, [ebp - 0x29c]
mov dword [ebp - 0x16c], 0xf762
push ecx
push eax
lea edx, [ebp - 0x8c]
mov ecx, 0x397e
call fcn.1003b974
add esp, 0x14
mov dword [ebp - 0x8c], ebx
jmp 0x100421df
mov eax, dword [ebp - 0x8c]
mov dword [ebp + eax*4 - 0x484], ebx
inc dword [ebp - 0x8c]
cmp dword [ebp - 0x8c], 3
jl 0x100421cc
push ecx
push ecx
mov dl, 1
lea ecx, [ebp - 0x16c]
call fcn.1003ad2d
mov eax, dword [ebp - 0x29c]
pop ecx
pop ecx
lea ecx, [ebp - 0x29c]
mov eax, dword [eax]
mov dword [ebp - 0x47c], eax
or dword [ebp - 4], 0xffffffff
call fcn.10001f5a
mov edi, ebx
mov dword [ebp - 0x24], ebx
cmp edi, 2
jae 0x1004239c
mov dword [ebp - 0x30], 0x51d
cmp dword [ebp - 0x30], 0x52f
jle 0x10042274
mov edi, ebx
mov esi, ebx
mov dword [ebp - 0x18], ebx
mov dword [ebp - 0x20], 0x124f
mov ecx, ebx
mov eax, edi
sar eax, cl
mov ecx, 0x1007f138
cdq
push edx
push eax
call fcn.10002c1c
add ebx, esi
dec dword [ebp - 0x20]
jne 0x10042242
inc esi
push 0
pop ebx
cmp esi, 0x557c
jl 0x10042238
inc edi
cmp edi, 0x6629
jl 0x10042236
mov edi, dword [ebp - 0x24]
mov dword [ebp - 4], 0x38
cmp dword [ebp - 0x30], 0x3c9
jge 0x10042293
mov edx, str.wpfdlouws_apjewhi_yprctecxb_nbd_gue_vytvaohi_sdjrlcx_cqkje_xwlake_jae_yelpmc_msxdxfojf_lqu
mov ecx, 0x1007f138
call fcn.100045d3
or dword [ebp - 4], 0xffffffff
push 4
lea ecx, [ebp - 0x22c]
call fcn.10001ed7
mov dword [ebp - 4], 0x3a
mov dword [ebp - 0x48], ebx
jmp 0x100422e6
mov eax, dword [ebp - 0x48]
mov dword [ebp + eax*4 - 0x178], 3
inc dword [ebp - 0x48]
cmp dword [ebp - 0x48], 3
jl 0x100422d5
push ecx
lea eax, [ebp - 0x22c]
mov edx, 0x3e6c
push eax
push 1
lea eax, [ebp - 0x48]
push eax
push ecx
push ecx
push 0x6949
call fcn.1003ad47
add esp, 0x1c
mov dword [ebp - 0x48], ebx
jmp 0x10042324
mov eax, dword [ebp - 0x48]
mov dword [ebp + eax*4 - 0x4a4], 0x752f67d5
inc dword [ebp - 0x48]
cmp dword [ebp - 0x48], 4
jl 0x10042313
mov ecx, dword [ebp - 0x22c]
xor esi, esi
inc esi
mov dword [ecx + 0xc], ebx
mov eax, dword [ecx + 0xc]
inc dword [ecx + 0xc]
cmp dword [ecx + 0xc], 3
mov dword [ebp + eax*4 - 0x178], esi
jl 0x10042336
cmp dword [ebp - 0x170], ebx
je 0x1004235d
mov eax, dword [ebp - 0x174]
mov eax, dword [ebp - 0x170]
mov eax, dword [ebp - 0x22c]
mov dword [eax], 0x822b
mov eax, dword [ebp - 0x174]
mov ecx, dword [ecx + 0xc]
sub ecx, eax
mov dword [ebp - 0x498], ecx
lea ecx, [ebp - 0x22c]
or dword [ebp - 4], 0xffffffff
call fcn.10001f5a
xor eax, eax
mov word [ebp + edi*2 - 0xa0], ax
inc edi
mov dword [ebp - 0x24], edi
jmp 0x1004221b
push 2
lea ecx, [ebp - 0x3c8]
call fcn.10001ed7
mov dword [ebp - 4], 0x3b
mov dword [ebp - 0x20], 0x5c81
cmp dword [ebp - 0x20], 0x5f84
jle 0x10042438
push ebx
push 0x2036
push ebx
push 0xd37
push ebx
push 0x1de9
call dword [sym.imp.USER32.dll_DrawTextExW]
mov ecx, ebx
mov dword [ebp - 0x24], ebx
mov edi, ebx
mov esi, ebx
mov eax, edi
cdq
idiv esi
xor edx, ecx
lea ecx, [ebp - 0x5bc]
mov eax, edx
cdq
push edx
push eax
call fcn.10002a23
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x10042402
mov eax, dword [eax]
push eax
call fcn.10049a06
pop ecx
push ebx
push 1
lea ecx, [ebp - 0x5bc]
call fcn.10002ff9
mov ecx, dword [ebp - 0x24]
inc esi
cmp esi, 0x3dc5
jl 0x100423e1
inc edi
cmp edi, 0x3fda
jl 0x100423df
inc ecx
mov dword [ebp - 0x24], ecx
cmp ecx, 0x292
jl 0x100423dd
mov dword [ebp - 0x1bc], 0xeef20fe6
cmp dword [ebp - 0x20], 0x5c51
jge 0x10042456
push str.sakapw_zogppgct_fgcsuvzq_slr_deani_gkyjufcm_slffoiwo
call fcn.10049a06
pop ecx
mov dword [ebp - 4], 0x3b
mov dword [ebp - 0x18], ebx
jmp 0x10042475
mov ecx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x3c8]
mov dword [eax + ecx*4], 0x571177e8
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 2
jl 0x10042462
push ecx
lea eax, [ebp - 0x1bc]
mov edx, 0x2f7f
push eax
push 1
push 0x6115
push 0x343b
push 0x6358
push 0x7ed4
mov ecx, 0x359f
call fcn.1003edb0
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x3c8]
add esp, 0x1c
call fcn.10001f5a
mov eax, dword [ebp - 0xec]
shr eax, 1
mov dword [ebp - 0x28], eax
mov eax, dword [ebp - 0x88]
inc eax
cmp eax, dword [ebp - 0x28]
jae 0x100426cc
xor eax, eax
inc eax
mov dword [ebp - 0x260], eax
mov dword [ebp - 0x25c], eax
mov dword [ebp - 0x258], eax
mov dword [ebp - 0x254], eax
mov dword [ebp - 0x38], 0x3e64f147
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x254], ebx
je 0x10042540
mov byte [ebp - 0x31], bl
cmp byte [ebp - 0x31], 0
je 0x10042522
push 0x36d1
push 0x68a5
push eax
xor dl, dl
mov cl, al
call fcn.1003aed7
add esp, 0xc
mov dword [ebp - 0x18], ebx
jmp 0x10042538
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x260], 0x71f09a2b
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 4
jl 0x10042527
jmp 0x1004255c
push eax
push 0x6b99
push 0x5ac5
push 0x179c
mov dl, al
mov cl, al
call fcn.1003ee3a
add esp, 0x10
mov eax, dword [ebp - 0x88]
mov edi, dword [ebp - 0x3c]
lea ecx, [edi + eax*2]
call fcn.1003a028
mov dword [ebp - 0xa8], eax
xor eax, eax
inc eax
mov dword [ebp - 0x17c], eax
mov byte [ebp - 0x31], bl
cmp byte [ebp - 0x31], 0
je 0x100425ad
push 0x1566
push eax
push 0x43d4
push 0x5c95
push ebx
push 0x772a
mov dl, al
mov ecx, 0x1021
call fcn.1003d4c3
xor eax, eax
add esp, 0x18
inc eax
push eax
push eax
push 0x7d48
push 0x4b2f
push 0x4b08
push eax
push 0x28d4
lea eax, [ebp - 0x17c]
mov edx, 0x5e17
push 0x13d0
push eax
mov ecx, 0x7e1d
call fcn.1003efff
mov esi, dword [ebp - 0x88]
lea ecx, [edi + 4]
add esp, 0x24
lea ecx, [ecx + esi*2]
call fcn.1003a028
push 0x3ba5
push 0x53ca
mov edi, eax
mov edx, 0x52de
xor eax, eax
mov dword [ebp - 0xc0], edi
inc eax
push eax
push 0x6f4f
push 0x6f9f
push ecx
push eax
push 0x1d8a
push 0x31e6
push eax
mov ecx, 0x3ac9
call fcn.1003f1b3
add esp, 0x28
cmp dword [ebp - 0xa8], 0xffffffff
jne 0x100426e2
test edi, edi
jne 0x100426e2
mov dword [ebp - 0x30], 0xfffffff8
mov dword [ebp - 0x18], ebx
jmp 0x10042660
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x5dc], ebx
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 4
jl 0x10042653
push 3
pop esi
mov dword [ebp - 0x30], esi
cmp dword [ebp - 0x30], ebx
jl 0x100426aa
mov dword [ebp - 0x24], 9
mov dl, 1
push 0x1bfb
call fcn.1003f2a5
mov dword [ebp - 0x24], esi
pop ecx
cmp dword [ebp - 0x24], ebx
jl 0x100426a5
push ecx
push ecx
push 1
mov edx, 0x6fda
call fcn.1003f38a
add esp, 0xc
dec dword [ebp - 0x24]
jns 0x1004268d
xor ebx, ebx
dec dword [ebp - 0x30]
jns 0x10042671
push 0x412
xor eax, eax
mov edx, 0x5a37
inc eax
mov ecx, 0x71ae
push eax
push 0x2433
push ebx
push eax
call fcn.1003d890
add esp, 0x14
mov ecx, dword [ebp - 0xc]
mov eax, 0x10082364
pop edi
pop esi
mov dword fs:[0], ecx
pop ebx
mov esp, ebp
pop ebp
ret
add esi, 4
mov dword [ebp - 0x88], esi
mov dword [ebp - 0x44], 0x99ac7894
mov dword [ebp - 0x38], ebx
mov dword [ebp - 0x20], 0xffffffff
mov dword [ebp - 0x44], 6
cmp dword [ebp - 0x44], 0xffffffef
jge 0x100428e1
mov dword [ebp - 0x30], 4
mov dword [ebp - 0x2c], 0x3036
cmp dword [ebp - 0x2c], 0x30c5
jle 0x1004279d
mov dword [ebp - 0x18], ebx
mov ecx, ebx
mov dword [ebp - 0x20], 0x337e
mov dword [ebp - 0x24], ecx
mov esi, ebx
mov eax, ecx
mov edi, ebx
xor eax, esi
mov dword [ebp - 0x1c], eax
or eax, edi
lea ecx, [ebp - 0x5a4]
cdq
push edx
push eax
call fcn.10002a23
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x10042758
mov eax, dword [eax]
push eax
call fcn.10049a06
pop ecx
push ebx
push 1
lea ecx, [ebp - 0x5a4]
call fcn.10002ff9
mov eax, dword [ebp - 0x1c]
inc edi
cmp edi, 0x24b4
jl 0x1004273e
mov ecx, dword [ebp - 0x24]
inc esi
cmp esi, 0x354e
jl 0x10042735
mov eax, dword [ebp - 0x18]
add ecx, eax
dec dword [ebp - 0x20]
mov dword [ebp - 0x24], ecx
jne 0x10042733
inc eax
mov dword [ebp - 0x18], eax
cmp eax, 0x2664
jl 0x10042727
mov dword [ebp - 0x18], 0x14d2fc5c
cmp dword [ebp - 0x2c], 0x2c71
jge 0x100427b8
push str.qdx_zaixk_jctr_hqka_xluzuztft_mvlgu_wgb_imjcydsms
call fcn.10049a06
pop ecx
or dword [ebp - 4], 0xffffffff
mov dword [ebp - 0x20], 0x211e
mov dword [ebp - 0x24], 1
mov dword [ebp - 0x24], 0xfffffffe
mov dword [ebp - 0x1c], 0xd2c8
mov dword [ebp - 0x2c], ebx
jmp 0x100427ee
mov eax, dword [ebp - 0x2c]
mov dword [ebp + eax*4 - 0x188], 8
inc dword [ebp - 0x2c]
cmp dword [ebp - 0x2c], 3
jl 0x100427dd
mov eax, dword [ebp - 0x44]
xor edx, edx
mov ecx, dword [ebp - 0x30]
mov eax, dword [ebp - 0x44]
cmp ecx, eax
setle dl
sub edx, 0xcd1b7da
jne 0x10042815
cmp dword [ebp - 0x44], ebx
jne 0x10042815
mov ecx, ebx
jmp 0x10042818
xor ecx, ecx
inc ecx
mov eax, dword [ebp - 0x44]
xor edx, edx
sub ecx, eax
add ecx, 0x3ae5
mov dword [ebp - 0x30], ecx
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x30]
mov eax, dword [ebp - 0x44]
sub eax, dword [ebp - 0x44]
mov dword [ebp - 0x18], eax
mov ecx, dword [ebp - 0x20]
mov eax, dword [ebp - 0x18]
cmp eax, ecx
mov eax, dword [ebp - 0x188]
setl dl
xor ecx, ecx
cmp edx, eax
mov eax, dword [ebp - 0x188]
setne cl
imul eax, ecx
test eax, eax
jne 0x10042865
cmp dword [ebp - 0x44], ebx
jne 0x10042865
mov eax, ebx
jmp 0x10042868
xor eax, eax
inc eax
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], ebx
je 0x10042878
cmp dword [ebp - 0x44], ebx
je 0x10042878
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0x44]
xor ecx, ecx
mov eax, dword [ebp - 0x188]
inc ecx
sub ecx, eax
mov dword [ebp - 0x24], ecx
cmp dword [ebp - 0x188], ebx
jne 0x100428ba
mov ecx, dword [ebp - 0x38]
xor edx, edx
mov eax, dword [ebp - 0x44]
cmp eax, ecx
mov eax, dword [ebp - 0x1c]
setge dl
xor ecx, ecx
add edx, 0xdbc1552c
cmp eax, edx
setne cl
cmp ecx, 0xfff9
ja 0x100428ba
mov ecx, ebx
jmp 0x100428bd
xor ecx, ecx
inc ecx
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x18], eax
mov edx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x188]
imul edx, ecx
xor ecx, ecx
cmp edx, eax
setle cl
mov dword [ebp - 0x24], ecx
dec dword [ebp - 0x44]
jmp 0x10042703
lea eax, [ebp - 0x44]
mov edx, 0x3d08
push eax
push ecx
push 1
push 0x7b16
push ecx
push 0xd9c
call fcn.1003b0b9
add esp, 0x18
cmp dword [ebp - 0xc0], 0
jle 0x10042fa4
mov dword [ebp - 0x64], 0x951f
lea ecx, [ebp - 0x3a4]
mov dword [ebp - 0x94], 0x65e790e8
push 2
call fcn.10001ed7
push 0x3d1
lea eax, [ebp - 0x3a4]
mov dword [ebp - 4], 0x40
push ebx
mov dword [ebp - 0x30], 0xd0c11e04
lea ecx, [ebp - 0x3e4]
push eax
call fcn.1003e657
add esp, 0xc
lea eax, [ebp - 0x64]
mov edx, 0x7751
lea ecx, [ebp - 0x94]
push eax
xor eax, eax
inc eax
push eax
push eax
push 0x604b
push eax
call fcn.1003b974
add esp, 0x14
mov dword [ebp - 0x64], ebx
cmp dword [ebp - 0x64], 1
jg 0x10042b66
mov dword [ebp - 0x18], 0xfffffffa
mov dword [ebp - 0x20], 0x6903
cmp dword [ebp - 0x20], 0x6cc1
jle 0x100429df
mov edi, ebx
mov esi, ebx
mov dword [ebp - 0x38], ebx
mov ecx, ebx
mov eax, esi
shl eax, cl
mov ecx, 0x1007f138
and eax, edi
cdq
push edx
push eax
call fcn.10002c1c
inc ebx
cmp ebx, 0x3cb0
jl 0x100429a1
inc esi
push 0
pop ebx
cmp esi, 0x476e
jl 0x1004299e
inc edi
cmp edi, 0x5949
jl 0x1004299c
push ebx
push ebx
push ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov byte [ebp - 4], 0x41
cmp dword [ebp - 0x20], 0x68a8
jge 0x10042a19
mov edx, str.zvll_xnad_rvkpqvm_zvjvgb_royelco_cmobzf_yko_dzof_ohndcb_ensqz_edxdsgtwz_orh_jkzrfhw
mov ecx, 0x1007f138
call fcn.100045d3
jmp 0x10042a19
mov dword [ebp - 4], 0x40
xor ecx, ecx
mov dword [ebp - 0x2c], 2
inc ecx
mov dword [ebp - 0x24], 0x46983c17
mov dword [ebp - 0x38], 0xffffffff
mov dword [ebp - 0x2c], ebx
jmp 0x10042a4b
mov eax, dword [ebp - 0x2c]
mov dword [ebp + eax*4 - 0x50], 0x339b8842
inc dword [ebp - 0x2c]
cmp dword [ebp - 0x2c], ecx
jl 0x10042a3d
mov eax, dword [ebp - 0x18]
xor ecx, ecx
mov eax, dword [ebp - 0x50]
mov eax, dword [ebp - 0x64]
mov eax, dword [ebp - 0x94]
mov edx, dword [ebp - 0x64]
sub edx, eax
mov eax, dword [ebp - 0x50]
cmp edx, eax
setl cl
mov dword [ebp - 0x2c], ecx
xor ecx, ecx
mov eax, dword [ebp - 0x30]
cmp eax, 0xffffffff
setge cl
cmp ecx, 0xf63588c5
sbb eax, eax
inc eax
imul eax, dword [ebp - 0x2c]
mov dword [ebp - 0x24], eax
mov eax, dword [ebp - 0x24]
cmp dword [ebp - 0x2c], ebx
jne 0x10042a97
mov eax, dword [ebp - 0x50]
mov ecx, dword [ebp - 0x50]
xor edx, edx
mov eax, dword [ebp - 0x24]
cmp eax, ecx
setg dl
mov dword [ebp - 0x94], edx
mov dword [ebp - 0x18], 1
cmp dword [ebp - 0x18], ebx
jl 0x10042b5e
mov dword [ebp - 0x20], 0x1076
xor edx, edx
mov eax, dword [ebp - 0x94]
mov eax, dword [ebp - 0x50]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x38]
mov dword [ebp - 0x94], eax
mov ecx, dword [ebp - 0x24]
mov eax, dword [ebp - 0x94]
imul ecx, eax
mov eax, dword [ebp - 0x20]
cmp eax, ecx
setle dl
xor ecx, ecx
add edx, dword [ebp - 0x20]
mov eax, dword [ebp - 0x50]
cmp edx, eax
setne cl
lea eax, [ecx - 0x23f2]
cmp eax, 0x7aff
je 0x10042b2a
cmp dword [ebp - 0x50], ebx
jne 0x10042b2a
mov cl, 1
call fcn.1003f67a
push 0xb5a
push ecx
push ecx
push 0x50a3
mov dl, 1
call fcn.1003bb42
add esp, 0x10
jmp 0x10042b55
mov dword [ebp - 0x20], 0x5c2a3da7
mov dword [ebp - 0x2c], ebx
jmp 0x10042b48
push ecx
mov byte [ebp - 0x51], bl
lea edx, [ebp - 0x51]
push eax
call fcn.1003f51b
inc dword [ebp - 0x2c]
pop ecx
pop ecx
xor eax, eax
inc eax
cmp dword [ebp - 0x2c], eax
jle 0x10042b36
cmp dword [ebp - 0x20], ebx
jne 0x10042b5e
dec dword [ebp - 0x18]
jns 0x10042aba
inc dword [ebp - 0x64]
jmp 0x10042979
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x3a4]
call fcn.10001f5a
mov ecx, dword [ebp - 0x3c]
mov edx, 0xcc8
mov eax, dword [ebp - 0x88]
push ecx
push 0x3dfe
push ecx
lea edi, [ecx + eax*2]
mov cl, 1
mov dword [ebp - 0x38], edi
call fcn.1003f78a
mov eax, dword [ebp - 0xc0]
lea ecx, [ebp - 0x338]
add esp, 0xc
lea eax, [edi + eax*2]
push 3
mov dword [ebp - 0x110], eax
call fcn.10001ed7
mov dword [ebp - 4], 0x43
lea ecx, [ebp - 0x9c]
mov dword [ebp - 0x24], 0x7df2f4a8
xor eax, eax
mov dword [ebp - 0x20], 0xd21f1eb3
inc eax
mov dword [ebp - 0x20], 0x79c63c40
mov dl, al
mov dword [ebp - 0x20], 0x4b541145
mov dword [ebp - 0x20], ebx
mov dword [ebp - 0x20], 0x5741311e
push ecx
mov dword [ebp - 0x20], 0xbd4856cd
mov dword [ebp - 0x20], 0x9e149cff
push ecx
mov dword [ebp - 0x20], 0x61e33ecd
push ecx
mov dword [ebp - 0x20], ebx
lea ecx, [ebp - 0x338]
mov dword [ebp - 0x20], 0x81b5f7a0
mov dword [ebp - 0x20], 0xfffffffc
mov dword [ebp - 0x18c], eax
push ecx
call fcn.1003f8b1
xor ecx, ecx
mov dword [ebp - 0x9c], ebx
add esp, 0x10
inc ecx
jmp 0x10042c4e
mov eax, dword [ebp - 0x9c]
mov dword [ebp + eax*4 - 0x33c], 0xdf39f3c5
inc dword [ebp - 0x9c]
cmp dword [ebp - 0x9c], ecx
jl 0x10042c37
mov dword [ebp - 0x24], 2
cmp dword [ebp - 0x24], ebx
jl 0x10042eb8
mov dword [ebp - 0x20], 0x999d94b4
lea ecx, [ebp - 0x328]
mov dword [ebp - 0x20], 0xbbe56890
push 4
call fcn.10001ed7
push 1
lea ecx, [ebp - 0x318]
mov byte [ebp - 4], 0x44
call fcn.10001ed7
mov byte [ebp - 4], 0x45
mov dword [ebp - 0x20], 0xffffffff
mov dword [ebp - 0x6c], ebx
jmp 0x10042cb3
mov eax, dword [ebp - 0x6c]
mov dword [ebp + eax*4 - 0x2f8], 0x4ea6801f
inc dword [ebp - 0x6c]
cmp dword [ebp - 0x6c], 4
jl 0x10042ca2
lea eax, [ebp - 0x328]
push eax
push ebx
push 0x356f
push ecx
push ecx
push 0x2470
lea edx, [ebp - 0x6c]
call fcn.1003df66
add esp, 0x18
lea eax, [ebp - 0x6c]
mov dl, 1
push eax
push 0x5f33
push ecx
lea eax, [ebp - 0x318]
push eax
push 0xc4
push ecx
mov ecx, 0x4a2d
call fcn.1003bca1
add esp, 0x18
mov dword [ebp - 0x2f0], 2
cmp dword [ebp - 0x2f0], ebx
jl 0x10042e96
mov dword [ebp - 0x20], 0x17e5c285
mov dword [ebp - 0x20], ebx
mov dword [ebp - 0x30], 0x78d5
cmp dword [ebp - 0x30], 0x7a08
jle 0x10042d7c
mov edi, ebx
mov esi, ebx
mov eax, ebx
mov dword [ebp - 0x20], ebx
add eax, esi
mov ecx, 0x1007f138
xor eax, edi
cdq
push edx
push eax
call fcn.10002c1c
mov eax, dword [ebp - 0x20]
inc eax
mov dword [ebp - 0x20], eax
cmp eax, 0x4d9c
jl 0x10042d37
inc esi
cmp esi, 0x65ae
jl 0x10042d32
mov dword [ebp - 0x20], 0x74b28ed4
mov byte [ebp - 4], 0x46
cmp dword [ebp - 0x30], 0x780d
jge 0x10042dbd
mov edx, str.zloeuw_ueejuz_yifchzs_yrlga_rrlyy_laydcds_tmyk_qtq_wlgvj_pwtvngfqz_zuc_khk_rvqlja
mov ecx, 0x1007f138
call fcn.100045d3
jmp 0x10042dbd
mov dword [ebp - 4], 0x45
lea ecx, [ebp - 0x3d4]
mov dword [ebp - 0x20], 0xffffffff
mov dword [ebp - 0x20], 0x73ee7637
mov dword [ebp - 0x20], 0x5799
mov dword [ebp - 0x20], 0x5e495761
mov dword [ebp - 0x20], ebx
mov dword [ebp - 0x20], 0xfffffff6
mov dword [ebp - 0x20], 0x7fc0336a
mov dword [ebp - 0x20], 0x2e4a6b2c
mov dword [ebp - 0x20], 0xf1636717
mov dword [ebp - 0x20], 0x4f6c5533
push 2
call fcn.10001ed7
push 0x60c
xor eax, eax
mov byte [ebp - 4], 0x48
inc eax
lea ecx, [ebp - 0x3d4]
push eax
push ecx
push eax
push 0x644f
lea ecx, [ebp - 0x368]
mov edx, 0x3b52
push ecx
push 0x6612
push 0x4f0b
mov cl, al
call fcn.1003bd02
add esp, 0x1c
lea eax, [ebp - 0x18c]
mov edx, 0x37aa
mov ecx, 0x6aa8
push 0x2a7
push 0x3898
push 0x797f
push 0x2f10
push 1
push eax
call fcn.1003be7f
add esp, 0x1c
mov byte [ebp - 4], 0x45
lea ecx, [ebp - 0x3d4]
call fcn.10001f5a
dec dword [ebp - 0x2f0]
jmp 0x10042d08
lea ecx, [ebp - 0x318]
call fcn.10001f5a
lea ecx, [ebp - 0x328]
mov byte [ebp - 4], 0x43
call fcn.10001f5a
dec dword [ebp - 0x24]
jmp 0x10042c5d
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x338]
call fcn.10001f5a
push 0x5c73
xor eax, eax
lea ecx, [ebp - 0x1cc]
inc eax
mov edx, 0x69de
push eax
push 0x327e
push 0x37da
push 0x25bc
push 0x3736
push ecx
push 0x407c
push 0x31d2
push eax
push 0xf84
lea ecx, [ebp - 0x110]
push ecx
push 0x1b88
push 0x4ec5
push 0x181
push 0x12be
push 0x3af4
push eax
push 0x71e1
mov ecx, 0x7250
call fcn.1003fa6e
mov edx, dword [0x10082364]
add esp, 0x4c
mov ecx, dword [ebp - 0xa8]
mov esi, edx
mov eax, dword [edx + 4]
cmp byte [eax + 0xd], 0
jne 0x10042f5a
cmp dword [eax + 0x10], ecx
jge 0x10042f54
mov eax, dword [eax + 8]
jmp 0x10042f44
mov esi, eax
mov eax, dword [eax]
jmp 0x10042f44
cmp esi, edx
je 0x10042f63
cmp ecx, dword [esi + 0x10]
jge 0x10042f95
lea eax, [ebp - 0xa8]
mov dword [ebp - 0x1e4], eax
lea eax, [ebp - 0x1e4]
push ecx
push eax
push ecx
call fcn.10043591
push eax
add eax, 0x10
push eax
push esi
lea eax, [ebp - 0x198]
push eax
call fcn.100435c6
mov esi, dword [ebp - 0x198]
mov eax, dword [ebp - 0x38]
mov dword [esi + 0x14], eax
mov eax, dword [ebp - 0x110]
mov dword [esi + 0x18], eax
sub esp, 0xc
lea eax, [ebp - 0xc0]
push 0x305
push eax
sub esp, 0x18
lea eax, [ebp - 0x88]
push 0x7d7c
push ecx
push ecx
push ebx
push eax
push ecx
push ecx
call fcn.1003c9d2
add esp, 0x48
jmp 0x100424c5