Function at 0x1003b2f0
Capabilities:
Encode data using base64

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x100665e0
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
push ecx
sub esp, 0x518
push ebx
push esi
push edi
mov dword [ebp - 0x10], esp
mov dword [ebp - 0x500], 0x7684
mov al, byte [0x1007f170]
mov byte [ebp - 0x12], al
mov cl, byte [0x1007f188]
mov byte [ebp - 0x15], cl
xor edx, edx
mov dword [ebp - 0x3c], 0x9096
mov dword [ebp - 0x38], edx
mov byte [ebp - 0x11], 0x1e
mov al, byte [0x1007f178]
mov byte [ebp - 0x13], al
mov dword [ebp - 0x78], 0x803a
mov ecx, dword [str.C]
xor edx, edx
mov dword [ebp - 0x54], ecx
mov dword [ebp - 0x50], edx
xor eax, eax
mov dword [ebp - 0x2c], 0x7e9e
mov dword [ebp - 0x28], eax
xor ecx, ecx
mov dword [ebp - 0x60], 0x66
mov dword [ebp - 0x5c], ecx
mov edx, dword [0x1007f120]
mov dword [ebp - 0x40], edx
mov dword [ebp - 0x58], 0x2bc7
mov ax, word [0x1007f170]
mov word [ebp - 0x20], ax
xor ecx, ecx
mov dword [ebp - 0x6c], 0xee
mov dword [ebp - 0x68], ecx
mov dword [ebp - 0x80], 1
mov edx, dword [0x1007f144]
mov word [ebp - 0x24], dx
movzx eax, byte [0x1007f027]
mov dword [ebp - 0x48], eax
mov ecx, dword [0x1007f180]
mov dword [ebp - 0x64], ecx
mov edx, dword [0x1007f1a4]
mov byte [ebp - 0x14], dl
mov eax, dword [0x1007f1c0]
mov ecx, dword [0x1007f1c4]
mov dword [ebp - 0x74], eax
mov dword [ebp - 0x70], ecx
mov dx, word [0x1007f1a0]
mov word [ebp - 0x1c], dx
mov dword [ebp - 0x44], 0x2c
mov ax, word [0x1007f128]
mov byte [ebp - 0x16], al
mov dword [ebp - 0x4c], 0x7bcddd9d
xor ecx, ecx
mov dword [ebp - 0x34], 0x12
mov dword [ebp - 0x30], ecx
mov dx, word [0x1007f1b8]
mov byte [ebp - 0xbf], dl
mov al, byte [str.C]
mov byte [ebp - 0xbe], al
mov byte [ebp - 0xbd], 0x74
xor ecx, ecx
mov dword [ebp - 0x4f4], 0x96924beb
mov dword [ebp - 0x4f0], ecx
mov edx, 0x5f
mov word [ebp - 0x398], dx
mov ax, word [0x1007f168]
mov byte [ebp - 0xa1], al
mov dword [ebp - 0x480], 0x5cfb
xor ecx, ecx
mov dword [ebp - 0x4fc], 0xd
mov dword [ebp - 0x4f8], ecx
mov dword [ebp - 0x484], 0x13
mov dx, word [0x1007f1a8]
mov byte [ebp - 0x83], dl
mov byte [ebp - 0x82], 0xda
push 0x3f
movzx eax, word [ebp - 0x44]
push eax
push 0
movsx cx, byte [ebp - 0x14]
movzx edx, cx
push edx
movzx ax, byte [ebp - 0x12]
movzx ecx, ax
push ecx
movzx edx, word [str.C]
push edx
push 0
call fcn.10035820
add esp, 0x1c
cwde
cdq
mov dword [ebp - 0x3c], eax
mov dword [ebp - 0x38], edx
cmp dword [ebp - 0x38], 0
jg 0x1003b4d9
jl 0x1003b4cd
cmp dword [ebp - 0x3c], 0
ja 0x1003b4d9
mov dword [ebp - 0x214], 1
jmp 0x1003b4e3
mov dword [ebp - 0x214], 0
cmp dword [ebp - 0x38], 0
jg 0x1003b4fd
jl 0x1003b4f1
cmp dword [ebp - 0x3c], 0x60
ja 0x1003b4fd
mov dword [ebp - 0x218], 1
jmp 0x1003b507
mov dword [ebp - 0x218], 0
mov eax, dword [ebp - 0x214]
cmp eax, dword [ebp - 0x218]
jne 0x1003b560
mov ecx, dword [0x1007f160]
mov edx, dword [0x1007f164]
push 0
push 0x6f0f5d
push edx
push ecx
call fcn.1005a1b0
mov ecx, eax
movzx eax, word [0x1007f16c]
cdq
xor eax, ecx
mov word [0x1007f16c], ax
movzx edx, word [0x1007f1a0]
mov eax, dword [str.C]
sub eax, edx
imul eax, dword [str.C]
mov dword [str.C], eax
jmp 0x1003b68f
mov ecx, dword [ebp - 0x54]
mov edx, dword [ebp - 0x50]
mov dword [ebp - 0x30c], ecx
mov dword [ebp - 0x308], edx
mov eax, dword [ebp - 0x30c]
or eax, dword [ebp - 0x308]
jne 0x1003b594
mov ecx, dword [ebp - 0x3c]
or ecx, dword [ebp - 0x38]
jne 0x1003b594
mov dword [ebp - 0x21c], 0
jmp 0x1003b59e
mov dword [ebp - 0x21c], 1
mov edx, dword [ebp - 0x21c]
not edx
test edx, edx
je 0x1003b68f
cmp dword [0x1007f140], 0
jne 0x1003b5c3
mov dword [ebp - 0x220], 1
jmp 0x1003b5cd
mov dword [ebp - 0x220], 0
mov eax, 0xa6e4842b
sub eax, dword [ebp - 0x6c]
mov ecx, 0x1e991
sbb ecx, dword [ebp - 0x68]
mov edx, dword [0x1007f154]
imul edx, dword [ebp - 0x220]
not edx
xor esi, esi
push ecx
push eax
push esi
push edx
call fcn.1005a1b0
mov dword [ebp - 0x3d0], eax
mov dword [ebp - 0x3cc], edx
mov eax, dword [ebp - 0x3d0]
or eax, dword [ebp - 0x3cc]
jne 0x1003b625
xor ecx, ecx
mov dword [ebp - 0x27c], 1
mov dword [ebp - 0x278], ecx
jmp 0x1003b630
xorps xmm0, xmm0
movlpd qword [ebp - 0x27c], xmm0
mov eax, dword [0x1007f144]
add eax, dword [ebp - 0x48]
cdq
mov ecx, 0xb8825bf2
sub ecx, eax
mov eax, 0xfffd8822
sbb eax, edx
mov edx, dword [ebp - 0x278]
push edx
mov edx, dword [ebp - 0x27c]
push edx
push eax
push ecx
call fcn.1005a1b0
mov word [0x1007f1a8], ax
cmp dword [0x1007f1bc], 0
jne 0x1003b671
mov byte [ebp - 0x7b], 1
jmp 0x1003b675
mov byte [ebp - 0x7b], 0
mov al, byte [ebp - 0x7b]
mov byte [ebp - 0x15], al
mov ecx, dword [0x1007fc38]
xor edx, edx
mov dword [0x1007f160], ecx
mov dword [0x1007f164], edx
mov eax, dword [0x1007fc38]
mov dword [ebp - 0x90], eax
movsx eax, byte [ebp - 0x16]
cdq
mov ecx, dword [0x1007f138]
mov esi, dword [0x1007f13c]
sub ecx, eax
sbb esi, edx
mov dword [0x1007f138], ecx
mov dword [0x1007f13c], esi
mov edx, dword [0x1007fc38]
mov dword [0x1007f180], edx
mov eax, dword [ebp - 0x90]
add eax, 0x468
mov dword [ebp - 0x488], eax
movzx eax, word [0x1007f1b8]
cdq
mov dword [ebp - 0x3d8], eax
mov dword [ebp - 0x3d4], edx
mov ecx, dword [ebp - 0x30]
cmp ecx, dword [ebp - 0x3d4]
jg 0x1003b710
jl 0x1003b704
mov edx, dword [ebp - 0x34]
cmp edx, dword [ebp - 0x3d8]
ja 0x1003b710
mov dword [ebp - 0x224], 1
jmp 0x1003b71a
mov dword [ebp - 0x224], 0
cmp dword [ebp - 0x30], 0
jg 0x1003b734
jl 0x1003b728
cmp dword [ebp - 0x34], 0x4a
ja 0x1003b734
mov dword [ebp - 0x228], 1
jmp 0x1003b73e
mov dword [ebp - 0x228], 0
mov eax, dword [ebp - 0x224]
cmp eax, dword [ebp - 0x228]
jne 0x1003b85b
mov dword [ebp - 0x88], 0x1ab
jmp 0x1003b76b
mov ecx, dword [ebp - 0x88]
sub ecx, 1
mov dword [ebp - 0x88], ecx
cmp dword [ebp - 0x88], 0
jle 0x1003b85b
mov dword [ebp - 0x8c], 0
jmp 0x1003b793
mov edx, dword [ebp - 0x8c]
add edx, 1
mov dword [ebp - 0x8c], edx
cmp dword [ebp - 0x8c], 0x3da
jge 0x1003b844
movsx eax, word [0x1007f15c]
not eax
mov ecx, 0xf8
sub ecx, eax
jne 0x1003b7c1
mov dword [ebp - 0x22c], 1
jmp 0x1003b7cb
mov dword [ebp - 0x22c], 0
movzx edx, word [ebp - 0x20]
movsx eax, word [0x1007f1a8]
add eax, edx
not eax
cdq
mov ecx, eax
movzx eax, word [0x1007f1a0]
cdq
mov esi, 0x88e515fd
sub esi, eax
add esi, ecx
mov edx, dword [ebp - 0x80]
not edx
movsx eax, word [0x1007f1a8]
imul eax, edx
mov ecx, dword [ebp - 0x22c]
sub ecx, eax
mov eax, ecx
cdq
add eax, esi
mov byte [ebp - 0x13], al
mov edx, dword [ebp - 0x48]
add edx, 0xed8b
mov byte [ebp - 0x13], dl
movzx eax, byte [0x1007f04e]
cdq
push 0x231d1
push 0xbf316f1
push edx
push eax
call fcn.1005a1b0
mov dword [0x1007f140], eax
mov al, byte [ebp - 0x15]
add al, 1
mov byte [ebp - 0x15], al
jmp 0x1003b784
mov cx, word [0x1007f128]
add cx, 1
mov word [0x1007f128], cx
jmp 0x1003b75c
mov edx, dword [ebp - 0x90]
add edx, 0x218
mov dword [ebp - 0x48c], edx
mov eax, dword [ebp - 0x2c]
not eax
mov ecx, dword [ebp - 0x28]
not ecx
add eax, dword [ebp - 0x6c]
adc ecx, dword [ebp - 0x68]
mov esi, 0x54a9f96e
sub esi, eax
mov edi, 0xfff5bf6d
sbb edi, ecx
mov ebx, dword [0x1007f190]
mov eax, dword [0x1007f194]
movsx edx, word [0x1007f148]
mov dword [ebp - 0x39c], eax
mov eax, edx
cdq
mov ecx, dword [0x1007f138]
mov dword [ebp - 0x3a0], edi
mov edi, dword [0x1007f13c]
not ecx
not edi
push edx
push eax
push edi
push ecx
call fcn.1005a1b0
xor eax, ebx
mov edi, dword [ebp - 0x39c]
xor edx, edi
and eax, esi
mov esi, dword [ebp - 0x3a0]
and edx, esi
mov dword [0x1007f188], eax
mov dword [0x1007f18c], edx
mov edx, dword [str.C]
xor eax, eax
push eax
push edx
mov ecx, dword [ebp - 0x30]
push ecx
mov edx, dword [ebp - 0x34]
push edx
call fcn.1005a1b0
mov ecx, dword [ebp - 0x34]
sub ecx, eax
mov eax, dword [ebp - 0x30]
sbb eax, edx
mov dword [ebp - 0x34], ecx
mov dword [ebp - 0x30], eax
mov ecx, dword [0x1007f160]
mov edx, dword [0x1007f164]
sub ecx, 1
sbb edx, 0
mov dword [0x1007f160], ecx
mov dword [0x1007f164], edx
mov eax, dword [ebp - 0x90]
add eax, 0x1af
mov dword [ebp - 0x3a8], eax
mov dword [ebp - 0x94], 0
jmp 0x1003b955
mov ecx, dword [ebp - 0x94]
add ecx, 2
mov dword [ebp - 0x94], ecx
cmp dword [ebp - 0x94], 0x177
jge 0x1003bb39
push 0
call fcn.10037420
add esp, 4
movzx edx, ax
mov dword [ebp - 0x40], edx
cmp dword [ebp - 0x40], 0
je 0x1003bb0c
movzx eax, byte [ebp - 0x11]
push eax
call dword [sym.imp.USER32.dll_IsWindowVisible]
xor ecx, ecx
mov dword [0x1007f178], eax
mov dword [0x1007f17c], ecx
cmp dword [0x1007f17c], 0
jl 0x1003b9b7
jg 0x1003b9ab
cmp dword [0x1007f178], 0
jbe 0x1003b9b7
mov dword [ebp - 0xd0], 1
jmp 0x1003b9c1
mov dword [ebp - 0xd0], 0
cmp dword [0x1007f17c], 0
jl 0x1003b9e1
jg 0x1003b9d5
cmp dword [0x1007f178], 0x5d
jbe 0x1003b9e1
mov dword [ebp - 0xd4], 1
jmp 0x1003b9eb
mov dword [ebp - 0xd4], 0
mov edx, dword [ebp - 0xd0]
cmp edx, dword [ebp - 0xd4]
jg 0x1003baa0
movsx eax, byte [ebp - 0x16]
mov ecx, dword [0x1007f180]
not ecx
cmp ecx, eax
je 0x1003ba19
mov dword [ebp - 0xd8], 1
jmp 0x1003ba23
mov dword [ebp - 0xd8], 0
mov edx, dword [ebp - 0xd8]
not edx
test edx, edx
je 0x1003ba61
mov eax, dword [0x1007f190]
mov ecx, dword [0x1007f194]
sub eax, 0xda05a57b
sbb ecx, 0x84419
add eax, dword [ebp - 0x2c]
adc ecx, dword [ebp - 0x28]
mov dword [ebp - 0x2c], eax
mov dword [ebp - 0x28], ecx
imul eax, dword [ebp - 0x48], 0x2861
cdq
mov dword [ebp - 0x34], eax
mov dword [ebp - 0x30], edx
jmp 0x1003ba9e
mov edx, dword [0x1007f1d0]
mov eax, dword [0x1007f1d4]
mov dword [ebp - 0x490], eax
xor edx, 0xb926
mov byte [ebp - 0x16], dl
mov ecx, dword [0x1007f138]
mov edx, dword [0x1007f13c]
mov dword [ebp - 0x494], edx
mov eax, dword [ebp - 0x44]
cdq
mov esi, eax
add esi, ecx
mov eax, dword [ebp - 0x44]
cdq
sub eax, esi
mov dword [ebp - 0x44], eax
jmp 0x1003bb0a
mov eax, dword [0x1007f138]
mov ecx, dword [0x1007f13c]
not eax
not ecx
mov dword [ebp - 0x3e0], eax
mov dword [ebp - 0x3dc], ecx
mov edx, dword [ebp - 0x3e0]
or edx, dword [ebp - 0x3dc]
je 0x1003bb0a
mov eax, dword [ebp - 0x34]
sub eax, dword [0x1007f1b0]
mov ecx, dword [ebp - 0x30]
sbb ecx, dword [0x1007f1b4]
mov edx, dword [ebp - 0x34]
sub edx, eax
mov eax, dword [ebp - 0x30]
sbb eax, ecx
mov dword [ebp - 0x34], edx
mov dword [ebp - 0x30], eax
mov ecx, dword [0x1007f160]
mov edx, dword [0x1007f164]
mov dword [ebp - 0x498], edx
sub ecx, 0xea3c3143
mov word [0x1007f148], cx
jmp 0x1003bb2b
mov eax, dword [ebp - 0x78]
not eax
test eax, eax
je 0x1003bb2b
mov ecx, dword [0x1007f158]
add ecx, 0xc41a
mov byte [ebp - 0x15], cl
mov dword [ebp - 0x64], 0xa855ed30
mov edx, dword [ebp - 0x64]
add edx, 1
mov dword [ebp - 0x64], edx
jmp 0x1003b946
mov eax, dword [0x1007fc38]
mov dword [ebp - 0x98], eax
movsx ecx, byte [ebp - 0x14]
imul ecx, dword [ebp - 0x78]
movsx edx, byte [ebp - 0x14]
add edx, ecx
mov byte [ebp - 0x14], dl
movzx eax, byte [ebp - 0x12]
movzx ecx, byte [0x1007f026]
sub ecx, eax
movzx edx, byte [0x1007f026]
add edx, ecx
mov byte [0x1007f026], dl
imul eax, dword [0x1007f140], 5
mov dword [0x1007f1bc], eax
mov ecx, dword [ebp - 0x98]
add ecx, 0x432
mov dword [ebp - 0x3b0], ecx
movsx edx, word [0x1007f1a8]
test edx, edx
jne 0x1003bba6
mov dword [ebp - 0xdc], 1
jmp 0x1003bbb0
mov dword [ebp - 0xdc], 0
cmp dword [0x1007f170], 0
jne 0x1003bbc5
mov dword [ebp - 0xe0], 1
jmp 0x1003bbcf
mov dword [ebp - 0xe0], 0
mov eax, dword [ebp - 0xdc]
sub eax, dword [ebp - 0xe0]
mov ecx, dword [0x1007f144]
add ecx, dword [ebp - 0x58]
sub ecx, eax
not ecx
mov dword [0x1007f1bc], ecx
mov edx, dword [ebp - 0x60]
or edx, dword [ebp - 0x5c]
je 0x1003bc0f
mov eax, dword [0x1007f178]
mov ecx, dword [0x1007f17c]
mov dword [ebp - 0x234], eax
mov dword [ebp - 0x230], ecx
jmp 0x1003bc26
mov edx, dword [0x1007f178]
mov eax, dword [0x1007f17c]
mov dword [ebp - 0x234], edx
mov dword [ebp - 0x230], eax
mov ecx, dword [ebp - 0x234]
mov edx, dword [ebp - 0x230]
mov dword [0x1007f190], ecx
mov dword [0x1007f194], edx
mov eax, dword [ebp - 0x98]
add eax, 0x29d
mov dword [ebp - 0x49c], eax
mov byte [ebp - 0x14], 0
imul ecx, dword [ebp - 0x4c], 0x1587d6b1
mov edx, dword [0x1007f144]
add edx, ecx
mov dword [0x1007f144], edx
mov eax, dword [0x1007f1a4]
add eax, 0x779d684e
mov word [0x1007f1b8], ax
movsx ecx, word [ebp - 0x1c]
imul eax, ecx, 0x18f73209
cdq
mov dword [ebp - 0x3c], eax
mov dword [ebp - 0x38], edx
mov dl, byte [ebp - 0x14]
mov byte [ebp - 0x3a4], dl
cmp byte [ebp - 0x3a4], 0
je 0x1003bc9d
jmp 0x1003bcda
movzx eax, word [0x1007f14c]
imul eax, dword [0x1007f154]
imul eax, dword [0x1007f154]
mov dword [0x1007f154], eax
xor ecx, ecx
mov dword [ebp - 0x2c], 1
mov dword [ebp - 0x28], ecx
mov edx, dword [0x1007f1a4]
mov eax, 4
imul ecx, eax, 0xf643
mov dword [ecx + 0x103690c8], edx
mov edx, dword [ebp - 0x98]
add edx, 0x1fb
mov dword [ebp - 0x4a0], edx
mov eax, dword [ebp - 0x78]
cdq
push edx
push eax
push 0
push 0
push 0
push 0x25
mov eax, dword [ebp - 0x50]
push eax
mov ecx, dword [ebp - 0x54]
push ecx
push 0
push 0x57
push 0
push 0xd
call fcn.10035400
add esp, 0x30
mov byte [ebp - 0x12], al
movzx edx, byte [ebp - 0x12]
test edx, edx
jle 0x1003bf81
call dword [sym.imp.USER32.dll_AnyPopup]
mov dword [0x1007f140], eax
cmp dword [0x1007f140], 0
jl 0x1003bd41
mov dword [ebp - 0xe4], 1
jmp 0x1003bd4b
mov dword [ebp - 0xe4], 0
cmp dword [0x1007f140], 0x4e
jl 0x1003bd60
mov dword [ebp - 0xe8], 1
jmp 0x1003bd6a
mov dword [ebp - 0xe8], 0
mov eax, dword [ebp - 0xe4]
cmp eax, dword [ebp - 0xe8]
jge 0x1003bf57
movsx eax, word [0x1007f148]
cdq
push edx
push eax
push 0
push 0
push 0
push 0x3e
mov eax, dword [0x1007f144]
cdq
push edx
push eax
call fcn.10034db0
add esp, 0x20
mov dword [ebp - 0x3c], eax
mov dword [ebp - 0x38], edx
cmp dword [ebp - 0x38], 0
jg 0x1003bdbe
jl 0x1003bdb2
cmp dword [ebp - 0x3c], 0
jae 0x1003bdbe
mov dword [ebp - 0xec], 1
jmp 0x1003bdc8
mov dword [ebp - 0xec], 0
cmp dword [ebp - 0x38], 0
jg 0x1003bde2
jl 0x1003bdd6
cmp dword [ebp - 0x3c], 0x2f
jae 0x1003bde2
mov dword [ebp - 0xf0], 1
jmp 0x1003bdec
mov dword [ebp - 0xf0], 0
mov ecx, dword [ebp - 0xec]
cmp ecx, dword [ebp - 0xf0]
jl 0x1003bf0a
movzx edx, word [0x1007f16c]
mov dword [0x1007f158], edx
movsx eax, word [ebp - 0x24]
test eax, eax
jne 0x1003be1f
mov dword [ebp - 0xfc], 1
jmp 0x1003be29
mov dword [ebp - 0xfc], 0
mov ecx, dword [ebp - 0x54]
mov edx, dword [ebp - 0x50]
mov dword [ebp - 0x3e8], ecx
mov dword [ebp - 0x3e4], edx
mov eax, dword [ebp - 0x3e8]
or eax, dword [ebp - 0x3e4]
jne 0x1003be5d
xor ecx, ecx
mov dword [ebp - 0x284], 1
mov dword [ebp - 0x280], ecx
jmp 0x1003be68
xorps xmm0, xmm0
movlpd qword [ebp - 0x284], xmm0
mov edx, dword [ebp - 0x54]
mov eax, dword [ebp - 0x50]
push eax
push edx
mov ecx, dword [ebp - 0x280]
push ecx
mov edx, dword [ebp - 0x284]
push edx
call fcn.1005a1b0
mov dword [ebp - 0x3f0], eax
mov dword [ebp - 0x3ec], edx
mov eax, dword [ebp - 0x3f0]
or eax, dword [ebp - 0x3ec]
jne 0x1003bea9
mov dword [ebp - 0xf8], 1
jmp 0x1003beb3
mov dword [ebp - 0xf8], 0
mov ecx, dword [ebp - 0x34]
or ecx, dword [ebp - 0x30]
jne 0x1003bec7
mov dword [ebp - 0xf4], 1
jmp 0x1003bed1
mov dword [ebp - 0xf4], 0
mov edx, dword [ebp - 0xf4]
sub edx, dword [ebp - 0x40]
xor edx, dword [ebp - 0xf8]
movsx eax, word [ebp - 0x1c]
add eax, dword [ebp - 0x44]
movzx ecx, word [ebp - 0x20]
imul ecx, dword [ebp - 0xfc]
imul ecx, eax
imul ecx, edx
not ecx
xor edx, edx
mov dword [0x1007f1d0], ecx
mov dword [0x1007f1d4], edx
jmp 0x1003bf55
mov eax, 0x5166a3c2
test eax, eax
je 0x1003bf55
mov ecx, dword [0x1007f178]
sub ecx, 0x27247a57
mov edx, dword [0x1007f17c]
sbb edx, 0x8d1c2
mov dword [ebp - 0x60], ecx
mov dword [ebp - 0x5c], edx
push 0
push 0x505c1e51
mov eax, dword [ebp - 0x38]
push eax
mov ecx, dword [ebp - 0x3c]
push ecx
call fcn.1005a1b0
mov word [0x1007f1c8], ax
movsx edx, byte [ebp - 0x13]
imul eax, edx, 0x49
mov dword [ebp - 0x48], eax
jmp 0x1003bf81
mov ecx, dword [0x1007f178]
sub ecx, 0x38e86bc6
mov byte [0x1007f026], cl
movsx edx, word [ebp - 0x24]
sar edx, 1
mov byte [ebp - 0x12], dl
movsx eax, word [ebp - 0x24]
cdq
add eax, 0x4c2fb2a4
mov dword [0x1007f180], eax
cmp dword [ebp - 0x3a8], 0x1c0
je 0x1003d11c
movsx eax, word [ebp - 0x1c]
cdq
sub eax, 0x1d1eebe2
mov dword [ebp - 0x44], eax
movzx eax, word [0x1007f128]
movzx ecx, byte [ebp - 0x12]
and ecx, eax
mov dword [ebp - 0x58], ecx
mov ecx, dword [0x1007f190]
mov esi, dword [0x1007f194]
mov eax, dword [0x1007f140]
cdq
push esi
push ecx
push edx
push eax
call fcn.1005a1b0
mov ecx, eax
mov eax, dword [0x1007f140]
cdq
or eax, ecx
mov dword [0x1007f140], eax
mov edx, dword [ebp - 0x3c]
or edx, dword [ebp - 0x38]
je 0x1003c10b
movzx eax, word [ebp - 0x20]
cdq
mov dword [ebp - 0x3f8], eax
mov dword [ebp - 0x3f4], edx
mov eax, dword [ebp - 0x5c]
cmp eax, dword [ebp - 0x3f4]
jb 0x1003c01c
ja 0x1003c00d
mov ecx, dword [ebp - 0x60]
cmp ecx, dword [ebp - 0x3f8]
jb 0x1003c01c
call dword [sym.imp.USER32.dll_GetActiveWindow]
mov word [ebp - 0x20], ax
jmp 0x1003c106
mov edx, dword [0x1007f160]
mov eax, dword [0x1007f164]
mov dword [ebp - 0x400], edx
mov dword [ebp - 0x3fc], eax
mov ecx, dword [ebp - 0x400]
or ecx, dword [ebp - 0x3fc]
je 0x1003c055
movzx eax, byte [ebp - 0x11]
cdq
add eax, 0x55b2fd9
mov dword [0x1007f158], eax
jmp 0x1003c106
movzx edx, byte [ebp - 0x15]
cmp edx, dword [0x1007f144]
jne 0x1003c06d
mov dword [ebp - 0x100], 1
jmp 0x1003c077
mov dword [ebp - 0x100], 0
cmp dword [ebp - 0x64], 0
jne 0x1003c094
movzx eax, word [0x1007f1a0]
test eax, eax
jne 0x1003c094
mov dword [ebp - 0x104], 0
jmp 0x1003c09e
mov dword [ebp - 0x104], 1
mov ecx, dword [ebp - 0x100]
cmp ecx, dword [ebp - 0x104]
jl 0x1003c106
cmp dword [0x1007f180], 0
je 0x1003c0c9
mov edx, dword [ebp - 0x34]
mov eax, dword [ebp - 0x30]
mov dword [ebp - 0x23c], edx
mov dword [ebp - 0x238], eax
jmp 0x1003c0db
mov eax, dword [0x1007f1a4]
cdq
mov dword [ebp - 0x23c], eax
mov dword [ebp - 0x238], edx
mov ecx, dword [ebp - 0x23c]
mov edx, dword [ebp - 0x238]
mov dword [ebp - 0x74], ecx
mov dword [ebp - 0x70], edx
mov eax, dword [0x1007f1d0]
mov ecx, dword [0x1007f1d4]
mov dword [ebp - 0x4a4], ecx
add eax, 0xbb10f4ae
mov dword [ebp - 0x48], eax
jmp 0x1003c241
cmp dword [ebp - 0x78], 0
je 0x1003c141
mov edx, dword [ebp - 0x80]
sub edx, 0x168e6667
mov eax, dword [ebp - 0x40]
sub eax, edx
mov dword [ebp - 0x40], eax
mov dword [ebp - 0x58], 0xfa
movzx eax, word [0x1007f128]
sub eax, 0xc207
cdq
mov dword [ebp - 0x3c], eax
mov dword [ebp - 0x38], edx
jmp 0x1003c241
mov ecx, dword [ebp - 0x40]
xor edx, edx
mov dword [ebp - 0x408], ecx
mov dword [ebp - 0x404], edx
mov eax, dword [ebp - 0x404]
cmp eax, dword [ebp - 0x5c]
jb 0x1003c176
ja 0x1003c16a
mov ecx, dword [ebp - 0x408]
cmp ecx, dword [ebp - 0x60]
jbe 0x1003c176
mov dword [ebp - 0x10c], 1
jmp 0x1003c180
mov dword [ebp - 0x10c], 0
mov edx, dword [0x1007f178]
or edx, dword [0x1007f17c]
je 0x1003c1a2
movzx eax, word [ebp - 0x20]
test eax, eax
je 0x1003c1a2
mov dword [ebp - 0x108], 1
jmp 0x1003c1ac
mov dword [ebp - 0x108], 0
mov ecx, dword [ebp - 0x108]
not ecx
cmp dword [ebp - 0x10c], ecx
jle 0x1003c1f5
mov edx, dword [0x1007f190]
mov eax, dword [0x1007f194]
mov dword [ebp - 0x4ec], eax
add edx, 0xe5e2
mov dword [0x1007f170], edx
mov ecx, dword [0x1007f158]
sub ecx, 0x3b01
xor edx, edx
mov dword [0x1007f178], ecx
mov dword [0x1007f17c], edx
jmp 0x1003c241
movzx eax, word [0x1007f1b8]
test eax, eax
je 0x1003c241
movzx ecx, word [0x1007f16c]
movzx edx, word [0x1007f168]
add edx, ecx
mov word [0x1007f128], dx
mov eax, dword [0x1007f154]
xor ecx, ecx
push 0x3ed6f
push 0x1b1cea3c
push ecx
push eax
call fcn.1005a1b0
mov word [ebp - 0x1c], ax
movzx eax, word [0x1007f16c]
cdq
mov dword [ebp - 0x2c], eax
mov dword [ebp - 0x28], edx
call fcn.1002aca0
movzx edx, al
test edx, edx
jne 0x1003d11c
mov dword [ebp - 0x48], 3
mov eax, dword [0x1007f1a4]
cdq
sub eax, 0x1ee258d5
mov word [0x1007f1c8], ax
cmp dword [ebp - 0x44], 0
jne 0x1003c283
xor eax, eax
mov dword [ebp - 0x410], 1
mov dword [ebp - 0x40c], eax
jmp 0x1003c28e
xorps xmm0, xmm0
movlpd qword [ebp - 0x410], xmm0
mov ecx, dword [ebp - 0x410]
sub ecx, dword [0x1007f188]
mov word [0x1007f15c], cx
mov edx, 2
shl edx, 4
movzx eax, word [edx + 0x10369060]
cdq
mov ecx, dword [ebp - 0x74]
mov esi, dword [ebp - 0x70]
sub ecx, eax
sbb esi, edx
mov dword [ebp - 0x74], ecx
mov dword [ebp - 0x70], esi
mov edx, dword [ebp - 0x48]
mov dword [ebp - 0x110], edx
cmp dword [ebp - 0x110], 3
ja case.default.0x1003c2dd
mov eax, dword [ebp - 0x110]
jmp dword [eax*4 + 0x1003f1bc]
movzx ecx, word [ebp - 0x20]
add ecx, dword [0x1007f1bc]
add ecx, dword [0x1007f1bc]
mov dword [0x1007f1bc], ecx
movsx eax, word [ebp - 0x1c]
cdq
sub eax, 0xb18bac94
sbb edx, 0x580b0
add eax, dword [0x1007f188]
adc edx, dword [0x1007f18c]
mov dword [0x1007f188], eax
mov dword [0x1007f18c], edx
movsx edx, byte [ebp - 0x13]
sar edx, 8
mov word [0x1007f168], dx
jmp case.default.0x1003c2dd
mov dword [0x1007f180], 0x530b3fca
push 0
push 0x20
mov eax, dword [0x1007f17c]
push eax
mov ecx, dword [0x1007f178]
push ecx
call fcn.1005a1b0
mov byte [ebp - 0x12], al
jmp case.default.0x1003c2dd
mov eax, dword [ebp - 0x48]
sub eax, 0x60b2fd05
cdq
mov dword [ebp - 0x60], eax
mov dword [ebp - 0x5c], edx
mov edx, dword [0x1007fc38]
xor eax, eax
mov dword [0x1007f188], edx
mov dword [0x1007f18c], eax
jmp case.default.0x1003c2dd
mov ecx, 5
mov word [ebp - 0x1c], cx
mov edx, dword [ebp - 0x3c]
add edx, 0xdd
mov eax, dword [ebp - 0x38]
adc eax, 0
mov dword [ebp - 0x3c], edx
mov dword [ebp - 0x38], eax
mov ecx, dword [0x1007f1d0]
mov edx, dword [0x1007f1d4]
mov dword [ebp - 0x4a8], edx
movsx eax, word [ebp - 0x1c]
cdq
add eax, ecx
mov word [ebp - 0x1c], ax
push 0
push 0xe9
push 0x62
push 0x56
push 0x60
call fcn.10036ef0
add esp, 0x14
mov byte [ebp - 0x11], al
movzx eax, byte [ebp - 0x11]
test eax, eax
jl 0x1003c3e4
mov dword [ebp - 0x114], 1
jmp 0x1003c3ee
mov dword [ebp - 0x114], 0
movzx ecx, byte [ebp - 0x11]
cmp ecx, 1
jl 0x1003c403
mov dword [ebp - 0x118], 1
jmp 0x1003c40d
mov dword [ebp - 0x118], 0
mov edx, dword [ebp - 0x114]
cmp edx, dword [ebp - 0x118]
jge 0x1003c4e1
jmp 0x1003c45c
jmp 0x1003c46c
jmp 0x1003c490
jmp 0x1003c4c3
jmp 0x1003c4df
jmp 0x1003c518
mov eax, dword [ebp - 0x2c]
or eax, dword [ebp - 0x28]
je 0x1003c518
mov ecx, dword [ebp - 0x2c]
sub ecx, 0xdcd2
movsx eax, byte [ebp - 0x16]
cdq
add eax, ecx
mov byte [ebp - 0x16], al
movzx edx, word [0x1007f168]
add edx, dword [0x1007f1bc]
movzx eax, word [0x1007f168]
add eax, edx
mov word [0x1007f168], ax
mov ecx, dword [0x1007fc38]
mov dword [ebp - 0xa0], ecx
mov dword [0x1007f1a4], 3
movzx edx, word [0x1007f1c8]
add edx, dword [ebp - 0x44]
sub edx, dword [0x1007f158]
xor eax, eax
mov ecx, dword [ebp - 0x6c]
sub ecx, edx
mov edx, dword [ebp - 0x68]
sbb edx, eax
mov dword [0x1007f1d0], ecx
mov dword [0x1007f1d4], edx
movzx eax, word [0x1007f1a0]
movsx ecx, word [ebp - 0x1c]
sub ecx, eax
mov word [ebp - 0x1c], cx
mov edx, dword [0x1007f1a4]
mov dword [ebp - 0x11c], edx
cmp dword [ebp - 0x11c], 3
ja case.default.0x1003c586
mov eax, dword [ebp - 0x11c]
jmp dword [eax*4 + 0x1003f1cc]
movsx ecx, byte [ebp - 0x13]
test ecx, ecx
jne 0x1003c5a1
mov dword [ebp - 0x120], 1
jmp 0x1003c5ab
mov dword [ebp - 0x120], 0
movsx edx, word [ebp - 0x1c]
imul edx, dword [ebp - 0x120]
mov word [0x1007f1a8], dx
mov eax, dword [ebp - 0x60]
sub eax, 0xa5
mov ecx, dword [ebp - 0x5c]
sbb ecx, 0
mov dword [0x1007f1d0], eax
mov dword [0x1007f1d4], ecx
mov dl, byte [0x1007fc38]
mov byte [ebp - 0x12], dl
jmp case.default.0x1003c586
mov eax, dword [ebp - 0x6c]
add eax, 0x1b
mov ecx, dword [ebp - 0x68]
adc ecx, 0
mov dword [ebp - 0x3c], eax
mov dword [ebp - 0x38], ecx
mov edx, dword [0x1007f160]
mov eax, dword [0x1007f164]
sub edx, 0x59f7677a
sbb eax, 0x97fce
mov dword [0x1007f1b0], edx
mov dword [0x1007f1b4], eax
jmp case.default.0x1003c586
mov ecx, dword [0x1007f140]
sub ecx, 1
mov dword [0x1007f140], ecx
mov edx, dword [ebp - 0x3c]
sub edx, 0xa3b8403d
mov word [ebp - 0x24], dx
jmp case.default.0x1003c586
mov eax, dword [0x1007f198]
mov ecx, dword [0x1007f19c]
mov dword [ebp - 0x418], eax
mov dword [ebp - 0x414], ecx
mov edx, dword [ebp - 0x418]
or edx, dword [ebp - 0x414]
jne 0x1003c66b
mov dword [ebp - 0x124], 1
jmp 0x1003c675
mov dword [ebp - 0x124], 0
mov eax, dword [0x1007f158]
imul eax, dword [0x1007f158]
mov ecx, dword [ebp - 0x124]
sub ecx, 0x97c
sub ecx, eax
mov edx, dword [0x1007f198]
mov eax, dword [0x1007f19c]
mov dword [ebp - 0x4ac], eax
add edx, ecx
mov byte [ebp - 0x14], dl
movsx ecx, word [ebp - 0x1c]
movzx edx, byte [ebp - 0x15]
sub edx, ecx
movzx eax, byte [ebp - 0x15]
sub eax, edx
mov byte [ebp - 0x15], al
mov ecx, dword [ebp - 0xa0]
add ecx, 0x15b
mov dword [ebp - 0x4b0], ecx
call dword [sym.imp.KERNEL32.dll_GetACP]
mov byte [0x1007f026], al
movzx edx, byte [0x1007f026]
test edx, edx
jg 0x1003c6ec
mov dword [ebp - 0x128], 1
jmp 0x1003c6f6
mov dword [ebp - 0x128], 0
movzx eax, byte [0x1007f026]
cmp eax, 0x45
jg 0x1003c70e
mov dword [ebp - 0x12c], 1
jmp 0x1003c718
mov dword [ebp - 0x12c], 0
mov ecx, dword [ebp - 0x128]
cmp ecx, dword [ebp - 0x12c]
je 0x1003c843
mov byte [ebp - 0x11], 2
movsx edx, byte [ebp - 0x14]
add edx, 9
mov dword [ebp - 0x40], edx
xor eax, eax
mov dword [0x1007f198], 0x297c4e47
mov dword [0x1007f19c], eax
mov cl, byte [ebp - 0x11]
mov byte [ebp - 0x9c], cl
cmp byte [ebp - 0x9c], 0
je 0x1003c772
cmp byte [ebp - 0x9c], 1
je 0x1003c7a4
cmp byte [ebp - 0x9c], 2
je 0x1003c7e0
jmp 0x1003c843
movsx edx, byte [ebp - 0x14]
movzx eax, word [0x1007f16c]
sub eax, edx
movzx ecx, word [0x1007f16c]
add ecx, eax
mov word [0x1007f16c], cx
mov edx, dword [0x1007f1b0]
sub edx, 0xc0
mov word [ebp - 0x1c], dx
jmp 0x1003c843
mov byte [0x1007f04e], 0xf7
push 0xe67b8
push 0x48382625
mov eax, dword [0x1007f17c]
push eax
mov ecx, dword [0x1007f178]
push ecx
call fcn.1005a1b0
mov word [0x1007f148], ax
mov edx, dword [ebp - 0x34]
mov eax, dword [ebp - 0x30]
mov dword [0x1007f190], edx
mov dword [0x1007f194], eax
jmp 0x1003c843
movzx eax, word [0x1007f1c8]
cdq
push edx
push eax
mov ecx, dword [ebp - 0x30]
push ecx
mov edx, dword [ebp - 0x34]
push edx
call fcn.1005a1b0
mov ecx, dword [ebp - 0x34]
sub ecx, eax
mov eax, dword [ebp - 0x30]
sbb eax, edx
mov dword [ebp - 0x34], ecx
mov dword [ebp - 0x30], eax
mov eax, dword [ebp - 0x44]
cdq
push 0xea3c6
push 0xa5e6b2df
push edx
push eax
call fcn.1005a1b0
mov dword [ebp - 0x64], eax
mov ecx, dword [0x1007f198]
mov edx, dword [0x1007f19c]
add ecx, 0xd4c88f62
adc edx, 0xa44b3
mov dword [0x1007f138], ecx
mov dword [0x1007f13c], edx
mov eax, dword [ebp - 0xa0]
add eax, 0x15a
mov dword [ebp - 0x148], eax
mov byte [ebp - 0x16], 3
movzx ecx, word [0x1007f1c8]
test ecx, ecx
jne 0x1003c877
xor edx, edx
mov dword [ebp - 0x28c], 1
mov dword [ebp - 0x288], edx
jmp 0x1003c882
xorps xmm0, xmm0
movlpd qword [ebp - 0x28c], xmm0
mov eax, dword [0x1007f144]
cdq
sub eax, dword [ebp - 0x60]
sbb edx, dword [ebp - 0x5c]
mov ecx, 0xce0a
sub ecx, eax
mov eax, 0
sbb eax, edx
push eax
push ecx
mov ecx, dword [ebp - 0x288]
push ecx
mov edx, dword [ebp - 0x28c]
push edx
call fcn.1005a1b0
mov dword [ebp - 0x420], eax
mov dword [ebp - 0x41c], edx
mov eax, dword [ebp - 0x420]
or eax, dword [ebp - 0x41c]
jne 0x1003c8df
xor ecx, ecx
mov dword [ebp - 0x294], 1
mov dword [ebp - 0x290], ecx
jmp 0x1003c8ea
xorps xmm0, xmm0
movlpd qword [ebp - 0x294], xmm0
mov edx, dword [ebp - 0x294]
mov eax, dword [ebp - 0x290]
mov dword [0x1007f1d0], edx
mov dword [0x1007f1d4], eax
cmp dword [0x1007f1bc], 0
je 0x1003c912
mov cl, byte [ebp - 0x14]
mov byte [ebp - 0x7c], cl
jmp 0x1003c918
mov dl, byte [ebp - 0x13]
mov byte [ebp - 0x7c], dl
movsx eax, byte [ebp - 0x7c]
mov dword [0x1007f158], eax
movsx ecx, byte [ebp - 0x16]
mov dword [ebp - 0x130], ecx
cmp dword [ebp - 0x130], 3
ja case.default.0x1003c93e
mov edx, dword [ebp - 0x130]
jmp dword [edx*4 + 0x1003f1dc]
mov ecx, dword [ebp - 0x54]
mov edx, dword [ebp - 0x50]
mov dword [ebp - 0x4b4], edx
mov eax, dword [ebp - 0x48]
cdq
add eax, ecx
mov dword [ebp - 0x48], eax
mov eax, dword [ebp - 0x4c]
imul eax, dword [ebp - 0x40]
mov ecx, dword [ebp - 0x64]
imul ecx, eax
mov dword [ebp - 0x78], ecx
jmp case.default.0x1003c93e
mov dx, word [0x1007fc38]
mov word [0x1007f148], dx
mov eax, dword [0x1007fc38]
mov dword [str.C], eax
movzx ecx, word [0x1007f128]
add ecx, dword [0x1007f154]
add ecx, dword [0x1007f154]
mov dword [0x1007f154], ecx
jmp case.default.0x1003c93e
mov edx, dword [ebp - 0x64]
sub edx, 0x48
mov word [0x1007f1a0], dx
movsx eax, word [0x1007f148]
shl eax, 8
cdq
mov dword [ebp - 0x60], eax
mov dword [ebp - 0x5c], edx
jmp case.default.0x1003c93e
movzx eax, word [0x1007f16c]
imul ecx, eax, 0xba21cfbc
mov byte [ebp - 0x13], cl
movzx eax, word [0x1007f168]
cdq
add eax, dword [ebp - 0x2c]
adc edx, dword [ebp - 0x28]
or eax, dword [ebp - 0x2c]
or edx, dword [ebp - 0x28]
mov dword [ebp - 0x2c], eax
mov dword [ebp - 0x28], edx
mov edx, dword [0x1007f158]
sub edx, 1
mov dword [0x1007f158], edx
mov eax, dword [ebp - 0xa0]
add eax, 0x2d4
mov dword [ebp - 0x3ac], eax
push 0
push 0xcb
call fcn.100364f0
add esp, 8
mov byte [ebp - 0x15], al
movzx ecx, byte [ebp - 0x15]
test ecx, ecx
jge 0x1003ca32
mov dword [ebp - 0x134], 1
jmp 0x1003ca3c
mov dword [ebp - 0x134], 0
movzx edx, byte [ebp - 0x15]
cmp edx, 0x24
jge 0x1003ca51
mov dword [ebp - 0x138], 1
jmp 0x1003ca5b
mov dword [ebp - 0x138], 0
mov eax, dword [ebp - 0x134]
cmp eax, dword [ebp - 0x138]
jne 0x1003ca9b
mov ecx, 9
mov esi, 0x100672c4
lea edi, [ebp - 0x528]
rep movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
lea ecx, [ebp - 0x528]
push ecx
call dword [sym.imp.KERNEL32.dll_lstrlenW]
cdq
mov dword [0x1007f188], eax
mov dword [0x1007f18c], edx
jmp 0x1003cbaf
mov edx, dword [ebp - 0x34]
or edx, dword [ebp - 0x30]
je 0x1003cac2
mov eax, dword [0x1007f158]
add eax, 0xd741
mov dword [ebp - 0x64], eax
mov ecx, dword [ebp - 0x58]
and ecx, 0x3d
mov word [0x1007f168], cx
jmp 0x1003cbaf
movsx edx, word [0x1007f1a8]
test edx, edx
je 0x1003cb0c
mov dword [0x1007f1bc], 8
xor eax, eax
mov ecx, dword [0x1007f160]
mov edx, dword [0x1007f164]
sub ecx, dword [0x1007f158]
sbb edx, eax
mov eax, dword [0x1007f160]
mov esi, dword [0x1007f164]
and eax, ecx
and esi, edx
mov dword [0x1007f160], eax
mov dword [0x1007f164], esi
jmp 0x1003cbaf
cmp dword [ebp - 0x58], 0
jne 0x1003cb1e
mov dword [ebp - 0x144], 1
jmp 0x1003cb28
mov dword [ebp - 0x144], 0
cmp dword [0x1007f170], 0
jne 0x1003cb3d
mov dword [ebp - 0x13c], 1
jmp 0x1003cb47
mov dword [ebp - 0x13c], 0
mov ecx, dword [0x1007f154]
cmp ecx, dword [ebp - 0x13c]
jbe 0x1003cb61
mov dword [ebp - 0x140], 1
jmp 0x1003cb6b
mov dword [ebp - 0x140], 0
mov edx, dword [ebp - 0x140]
not edx
cmp dword [ebp - 0x144], edx
jl 0x1003cbaf
mov eax, dword [ebp - 0x6c]
add eax, 0x9528cf30
mov dword [str.C], eax
mov ecx, dword [0x1007f190]
mov edx, dword [0x1007f194]
mov dword [ebp - 0x4b8], edx
add ecx, 0x6dad9a5d
mov ax, word [0x1007f168]
shr ax, cl
mov word [0x1007f168], ax
mov ecx, dword [ebp - 0x148]
sub ecx, 0x32b
mov edx, dword [ebp - 0x148]
and edx, dword [ebp - 0x3ac]
cmp edx, ecx
je 0x1003d11c
mov eax, dword [ebp - 0x78]
cdq
mov ecx, dword [0x1007f188]
sub ecx, eax
mov eax, dword [0x1007f18c]
sbb eax, edx
mov dword [ebp - 0x428], ecx
mov dword [ebp - 0x424], eax
mov ecx, dword [ebp - 0x428]
or ecx, dword [ebp - 0x424]
je 0x1003ce0e
movsx eax, word [0x1007f15c]
cdq
mov ecx, dword [0x1007f190]
mov esi, dword [0x1007f194]
mov dword [ebp - 0x430], ecx
mov dword [ebp - 0x42c], esi
mov dword [ebp - 0x438], eax
mov dword [ebp - 0x434], edx
mov edx, dword [ebp - 0x42c]
cmp edx, dword [ebp - 0x434]
jg 0x1003cc67
jl 0x1003cc4a
mov eax, dword [ebp - 0x430]
cmp eax, dword [ebp - 0x438]
jae 0x1003cc67
xor ecx, ecx
mov dword [ebp - 0x3c], 0xa0c386cd
mov dword [ebp - 0x38], ecx
mov edx, dword [0x1007fc38]
mov dword [str.C], edx
jmp 0x1003ce09
movzx eax, word [0x1007f128]
test eax, eax
je 0x1003cd6b
cmp dword [ebp - 0x40], 0
jne 0x1003cc88
mov dword [ebp - 0x14c], 1
jmp 0x1003cc92
mov dword [ebp - 0x14c], 0
movzx eax, word [0x1007f1c8]
cdq
mov ecx, dword [0x1007f1d0]
mov esi, dword [0x1007f1d4]
push edx
push eax
push esi
push ecx
call fcn.1005a1b0
mov ecx, eax
mov eax, dword [0x1007f1a4]
not eax
cdq
mov esi, eax
sub esi, ecx
not esi
mov edx, dword [ebp - 0x48]
not edx
movzx eax, byte [0x1007f026]
and eax, edx
imul eax, dword [ebp - 0x14c]
cdq
add eax, esi
mov byte [0x1007f027], al
movzx ecx, byte [0x1007f026]
sub ecx, 0x956a
mov word [0x1007f148], cx
movzx eax, byte [0x1007f027]
cdq
mov esi, eax
mov edi, edx
mov edx, dword [0x1007f190]
mov eax, dword [0x1007f194]
push 0x5c262
push 0x24dc9406
push eax
push edx
call fcn.1005a1b0
push 0
push 0x4a62
push edx
push eax
call fcn.1005a1b0
sub eax, esi
sbb edx, edi
mov dword [ebp - 0x440], eax
mov dword [ebp - 0x43c], edx
mov ecx, dword [ebp - 0x440]
or ecx, dword [ebp - 0x43c]
jne 0x1003cd50
mov dword [ebp - 0x150], 1
jmp 0x1003cd5a
mov dword [ebp - 0x150], 0
mov edx, dword [ebp - 0x150]
mov dword [0x1007f140], edx
jmp 0x1003ce09
mov eax, dword [ebp - 0x54]
mov ecx, dword [ebp - 0x50]
mov dword [ebp - 0x448], eax
mov dword [ebp - 0x444], ecx
mov edx, dword [ebp - 0x448]
or edx, dword [ebp - 0x444]
je 0x1003cda8
mov al, byte [0x1007f154]
mov byte [ebp - 0x13], al
movzx ecx, word [0x1007f1a0]
mov edx, dword [ebp - 0x44]
sub edx, ecx
imul edx, dword [ebp - 0x44]
mov dword [ebp - 0x44], edx
jmp 0x1003ce09
mov eax, dword [0x1007f190]
mov ecx, dword [0x1007f194]
mov dword [ebp - 0x450], eax
mov dword [ebp - 0x44c], ecx
mov edx, dword [ebp - 0x450]
or edx, dword [ebp - 0x44c]
je 0x1003ce09
movsx eax, word [ebp - 0x1c]
movsx ecx, byte [ebp - 0x13]
sub ecx, eax
movsx edx, byte [ebp - 0x13]
imul edx, ecx
mov byte [ebp - 0x13], dl
mov eax, 4
imul ecx, eax, 0x4f
mov eax, dword [ecx + 0x103a81b0]
cdq
mov ecx, dword [ebp - 0x34]
sub ecx, eax
mov eax, dword [ebp - 0x30]
sbb eax, edx
mov dword [ebp - 0x34], ecx
mov dword [ebp - 0x30], eax
mov ecx, 8
mov word [ebp - 0x1c], cx
jmp 0x1003cf13
cmp dword [ebp - 0x78], 0
je 0x1003cf13
mov edx, dword [0x1007f154]
xor eax, eax
sub edx, dword [ebp - 0x6c]
sbb eax, dword [ebp - 0x68]
mov ecx, dword [str.C]
xor esi, esi
sub ecx, edx
sbb esi, eax
mov dword [ebp - 0x458], ecx
mov dword [ebp - 0x454], esi
mov edx, dword [ebp - 0x458]
or edx, dword [ebp - 0x454]
jne 0x1003ce60
xor eax, eax
mov dword [ebp - 0x2a4], 1
mov dword [ebp - 0x2a0], eax
jmp 0x1003ce6b
xorps xmm0, xmm0
movlpd qword [ebp - 0x2a4], xmm0
mov eax, dword [0x1007f1a4]
not eax
cdq
mov ecx, 0x6b1b2e81
sub ecx, eax
mov eax, 0x8af9e
sbb eax, edx
mov dword [ebp - 0x460], ecx
mov dword [ebp - 0x45c], eax
mov ecx, dword [ebp - 0x460]
or ecx, dword [ebp - 0x45c]
jne 0x1003ceaf
xor edx, edx
mov dword [ebp - 0x29c], 1
mov dword [ebp - 0x298], edx
jmp 0x1003ceba
xorps xmm0, xmm0
movlpd qword [ebp - 0x29c], xmm0
mov ecx, dword [ebp - 0x74]
mov esi, dword [ebp - 0x70]
mov eax, dword [0x1007f140]
cdq
add eax, ecx
adc edx, esi
sub eax, dword [ebp - 0x29c]
sbb edx, dword [ebp - 0x298]
add eax, dword [ebp - 0x2a4]
adc edx, dword [ebp - 0x2a0]
mov dword [0x1007f130], eax
mov dword [0x1007f134], edx
mov edx, 0xffffb6aa
mov word [0x1007f1a8], dx
mov eax, dword [ebp - 0x74]
mov ecx, dword [ebp - 0x70]
mov dword [ebp - 0x4bc], ecx
add eax, dword [ebp - 0x2c]
mov edx, dword [0x1007f120]
sub edx, eax
mov dword [ebp - 0x40], edx
push 0xffffffffffffffcf
movzx eax, byte [0x1007f1b8]
push eax
call fcn.10035170
add esp, 8
movsx eax, al
cdq
mov dword [ebp - 0x2c], eax
mov dword [ebp - 0x28], edx
cmp dword [ebp - 0x28], 0
jl 0x1003d064
jg 0x1003cf45
cmp dword [ebp - 0x2c], 0
jbe 0x1003d064
mov ecx, dword [0x1007f138]
mov esi, dword [0x1007f13c]
movzx eax, byte [0x1007f04e]
cdq
mov dword [ebp - 0x468], eax
mov dword [ebp - 0x464], edx
mov dword [ebp - 0x2b4], ecx
mov dword [ebp - 0x2b0], esi
mov edx, dword [ebp - 0x464]
cmp edx, dword [ebp - 0x2b0]
jg 0x1003cf9b
jl 0x1003cf8f
mov eax, dword [ebp - 0x468]
cmp eax, dword [ebp - 0x2b4]
ja 0x1003cf9b
mov dword [ebp - 0x154], 1
jmp 0x1003cfa5
mov dword [ebp - 0x154], 0
movzx ecx, byte [0x1007f04e]
cmp ecx, 0x13
jg 0x1003cfbd
mov dword [ebp - 0x158], 1
jmp 0x1003cfc7
mov dword [ebp - 0x158], 0
mov edx, dword [ebp - 0x154]
cmp edx, dword [ebp - 0x158]
je 0x1003d021
mov eax, 1
imul ecx, eax, 0x42b
movzx edx, byte [ecx + 0x100b6fa8]
mov eax, dword [0x1007f140]
sub eax, edx
mov dword [0x1007f140], eax
mov ecx, 8
imul edx, ecx, 0x9c
mov eax, dword [ebp - 0x2c]
mov ecx, dword [ebp - 0x28]
mov dword [edx + 0x1016a990], eax
mov dword [edx + 0x1016a994], ecx
movzx dx, byte [0x1007f04e]
mov word [0x1007f1b8], dx
jmp 0x1003d05f
mov eax, dword [ebp - 0x6c]
or eax, dword [ebp - 0x68]
je 0x1003d05f
mov ecx, dword [0x1007f160]
mov edx, dword [0x1007f164]
push 0xda9bf
push 0x868d0a06
push edx
push ecx
call fcn.1005a1b0
mov dword [ebp - 0x6c], eax
mov dword [ebp - 0x68], edx
movsx eax, word [ebp - 0x1c]
imul ecx, eax, 0x68
mov byte [ebp - 0x12], cl
mov edx, dword [ebp - 0x6c]
mov dword [str.C], edx
jmp 0x1003d115
movzx eax, word [0x1007f1b8]
movzx ecx, byte [ebp - 0x12]
and ecx, eax
movzx edx, byte [ebp - 0x12]
sub edx, ecx
mov byte [ebp - 0x12], dl
movzx eax, word [0x1007f16c]
test eax, eax
jne 0x1003d099
xor ecx, ecx
mov dword [ebp - 0x24c], 1
mov dword [ebp - 0x248], ecx
jmp 0x1003d0a4
xorps xmm0, xmm0
movlpd qword [ebp - 0x24c], xmm0
mov edx, dword [ebp - 0x24c]
sub edx, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x248]
sbb eax, dword [ebp - 0x28]
mov dword [ebp - 0x2bc], edx
mov dword [ebp - 0x2b8], eax
mov ecx, dword [ebp - 0x2bc]
or ecx, dword [ebp - 0x2b8]
jne 0x1003d0dc
mov dword [ebp - 0x15c], 1
jmp 0x1003d0e6
mov dword [ebp - 0x15c], 0
mov edx, dword [0x1007f170]
xor edx, dword [ebp - 0x40]
add edx, dword [ebp - 0x15c]
mov word [0x1007f1a8], dx
mov eax, dword [0x1007f190]
mov ecx, dword [0x1007f194]
mov dword [ebp - 0x4c0], ecx
add eax, 0xd1f8a715
mov byte [ebp - 0x11], al
xor eax, eax
jmp 0x1003f1a7
mov dword [ebp - 4], 0
mov edx, dword [str.C]
xor eax, eax
mov ecx, dword [0x1007f160]
mov esi, dword [0x1007f164]
mov dword [ebp - 0x2c4], ecx
mov dword [ebp - 0x2c0], esi
mov dword [ebp - 0x2cc], edx
mov dword [ebp - 0x2c8], eax
mov edx, dword [ebp - 0x2c0]
cmp edx, dword [ebp - 0x2c8]
jl 0x1003d179
jg 0x1003d16d
mov eax, dword [ebp - 0x2c4]
cmp eax, dword [ebp - 0x2cc]
jbe 0x1003d179
mov dword [ebp - 0x160], 1
jmp 0x1003d183
mov dword [ebp - 0x160], 0
mov ecx, dword [0x1007f160]
mov edx, dword [0x1007f164]
mov dword [ebp - 0x2d4], ecx
mov dword [ebp - 0x2d0], edx
cmp dword [ebp - 0x2d0], 0
jl 0x1003d1bb
jg 0x1003d1af
cmp dword [ebp - 0x2d4], 0x11
jbe 0x1003d1bb
mov dword [ebp - 0x164], 1
jmp 0x1003d1c5
mov dword [ebp - 0x164], 0
mov eax, dword [ebp - 0x160]
cmp eax, dword [ebp - 0x164]
jge 0x1003d29a
movzx ecx, byte [ebp - 0x11]
cmp ecx, dword [0x1007f144]
jle 0x1003d1ef
mov dword [ebp - 0x168], 1
jmp 0x1003d1f9
mov dword [ebp - 0x168], 0
movzx edx, byte [ebp - 0x11]
cmp edx, 0xc
jle 0x1003d20e
mov dword [ebp - 0x16c], 1
jmp 0x1003d218
mov dword [ebp - 0x16c], 0
mov eax, dword [ebp - 0x168]
cmp eax, dword [ebp - 0x16c]
jge 0x1003d29a
movzx eax, byte [0x1007f04e]
cdq
mov dword [0x1007f130], eax
mov dword [0x1007f134], edx
movzx eax, byte [ebp - 0x11]
cdq
push 0xda2f8
push 0xea8e2c4c
push edx
push eax
call fcn.1005a1b0
mov dword [0x1007f188], eax
mov dword [0x1007f18c], edx
mov ecx, dword [0x1007f178]
or ecx, dword [0x1007f17c]
je 0x1003d27c
mov edx, dword [ebp - 0x60]
mov eax, dword [ebp - 0x5c]
mov dword [ebp - 0x254], edx
mov dword [ebp - 0x250], eax
jmp 0x1003d28d
mov ecx, dword [ebp - 0x4c]
xor edx, edx
mov dword [ebp - 0x254], ecx
mov dword [ebp - 0x250], edx
mov ax, word [ebp - 0x254]
mov word [0x1007f1b8], ax
jmp 0x1003d2f0
mov dword [ebp - 4], 0xffffffff
jmp 0x1003d300
mov ecx, dword [ebp - 0x3b0]
add ecx, 0x3ba
cmp ecx, 0x328
je 0x1003debf
xor edx, edx
mov dword [0x1007f1b0], 2
mov dword [0x1007f1b4], edx
mov eax, dword [0x1007f190]
mov ecx, dword [0x1007f194]
mov dword [ebp - 0x4c4], ecx
mov edx, 2
imul ecx, edx, 0x7d68
mov word [ecx + 0x103a82f8], ax
mov edx, dword [0x1007fc38]
xor eax, eax
mov dword [0x1007f198], edx
mov dword [0x1007f19c], eax
mov ecx, dword [0x1007f1b0]
mov edx, dword [0x1007f1b4]
mov dword [ebp - 0xcc], ecx
mov dword [ebp - 0xc8], edx
mov eax, dword [ebp - 0xcc]
or eax, dword [ebp - 0xc8]
je 0x1003d3ac
cmp dword [ebp - 0xcc], 1
jne 0x1003d398
cmp dword [ebp - 0xc8], 0
je 0x1003d3e0
cmp dword [ebp - 0xcc], 2
jne 0x1003d3aa
cmp dword [ebp - 0xc8], 0
je 0x1003d400
jmp 0x1003d429
movzx eax, word [0x1007f14c]
cdq
add eax, 0x38e2c706
adc edx, 0x445d2
mov dword [0x1007f188], eax
mov dword [0x1007f18c], edx
movsx ecx, word [0x1007f148]
imul ecx, dword [0x1007f158]
mov byte [0x1007f027], cl
jmp 0x1003d429
movsx edx, byte [ebp - 0x14]
mov eax, 4
imul ecx, eax, 0x3b41
mov dword [ecx + 0x102cddf8], edx
mov dl, byte [0x1007f180]
mov byte [ebp - 0x12], dl
jmp 0x1003d429
movsx eax, word [ebp - 0x24]
cdq
push edx
push eax
mov eax, dword [ebp - 0x28]
push eax
mov ecx, dword [ebp - 0x2c]
push ecx
call fcn.1005a1b0
add eax, dword [ebp - 0x2c]
adc edx, dword [ebp - 0x28]
mov dword [ebp - 0x2c], eax
mov dword [ebp - 0x28], edx
mov dl, byte [0x1007fc38]
mov byte [ebp - 0x16], dl
movsx eax, word [ebp - 0x24]
push eax
push 0x22
movsx ecx, byte [ebp - 0x14]
push ecx
call fcn.10036060
add esp, 0xc
mov word [ebp - 0x24], ax
movsx edx, word [ebp - 0x24]
test edx, edx
je 0x1003d49f
movsx eax, byte [ebp - 0x13]
movsx ecx, word [0x1007f1a8]
imul ecx, eax
mov word [0x1007f1a8], cx
mov edx, dword [ebp - 0x4c]
sub edx, 0x29650fb8
mov byte [ebp - 0x14], dl
cmp dword [0x1007f140], 0
je 0x1003d482
movzx eax, word [0x1007f168]
mov dword [ebp - 0x170], eax
jmp 0x1003d48e
mov ecx, dword [0x1007f140]
mov dword [ebp - 0x170], ecx
mov edx, dword [ebp - 0x170]
mov dword [0x1007f1bc], edx
jmp 0x1003d5d2
mov eax, dword [0x1007f170]
not eax
test eax, eax
je 0x1003d507
mov eax, dword [ebp - 0x80]
cdq
mov ecx, eax
mov esi, dword [0x1007f1c0]
not esi
add esi, dword [0x1007f1b0]
mov eax, dword [0x1007f1a4]
cdq
add eax, esi
not eax
add eax, ecx
mov word [0x1007f128], ax
movzx edx, word [0x1007f16c]
movsx eax, word [ebp - 0x1c]
sub eax, edx
movsx ecx, word [ebp - 0x1c]
sub ecx, eax
mov word [ebp - 0x1c], cx
movsx edx, word [0x1007f1a8]
imul edx, dword [0x1007f154]
imul edx, dword [0x1007f154]
mov dword [0x1007f154], edx
jmp 0x1003d5d2
mov eax, 0x2ef35a6d
or eax, 0x5d06a
je 0x1003d550
mov ecx, dword [ebp - 0x40]
xor esi, esi
sub ecx, dword [0x1007f1b0]
sbb esi, dword [0x1007f1b4]
not ecx
not esi
movzx edx, byte [ebp - 0x15]
movzx eax, byte [ebp - 0x11]
not eax
xor eax, edx
movsx edx, word [ebp - 0x1c]
imul edx, dword [ebp - 0x58]
xor eax, edx
cdq
push esi
push ecx
push edx
push eax
call fcn.1005a1b0
mov dword [ebp - 0x44], eax
jmp 0x1003d5d2
movzx eax, word [ebp - 0x20]
movsx ecx, word [ebp - 0x1c]
cmp ecx, eax
jg 0x1003d568
mov dword [ebp - 0x174], 1
jmp 0x1003d572
mov dword [ebp - 0x174], 0
movzx edx, byte [0x1007f027]
movzx eax, word [0x1007f16c]
not eax
cmp eax, edx
je 0x1003d592
mov dword [ebp - 0x178], 1
jmp 0x1003d59c
mov dword [ebp - 0x178], 0
mov ecx, dword [ebp - 0x174]
cmp ecx, dword [ebp - 0x178]
jg 0x1003d5d2
mov dx, word [0x1007fc38]
mov word [0x1007f14c], dx
mov eax, dword [0x1007f1c0]
sub eax, 0x61c700c4
mov word [0x1007f14c], ax
movsx ecx, byte [ebp - 0x14]
shl ecx, 6
mov byte [ebp - 0x11], cl
call fcn.100119d0
movzx edx, al
test edx, edx
jne 0x1003debf
mov eax, dword [ebp - 0x60]
or eax, dword [ebp - 0x5c]
je 0x1003d626
movzx eax, byte [0x1007f027]
cdq
mov dword [ebp - 0x2dc], eax
mov dword [ebp - 0x2d8], edx
mov ecx, dword [ebp - 0x2dc]
cmp ecx, dword [0x1007f1c0]
jne 0x1003d61a
mov edx, dword [ebp - 0x2d8]
cmp edx, dword [0x1007f1c4]
je 0x1003d626
mov dword [ebp - 0x188], 1
jmp 0x1003d630
mov dword [ebp - 0x188], 0
mov eax, dword [0x1007f190]
mov ecx, dword [0x1007f194]
mov dword [ebp - 0x2e4], eax
mov dword [ebp - 0x2e0], ecx
mov edx, dword [ebp - 0x2e4]
or edx, dword [ebp - 0x2e0]
jne 0x1003d661
mov dword [ebp - 0x17c], 1
jmp 0x1003d66b
mov dword [ebp - 0x17c], 0
movsx eax, word [0x1007f1a8]
cmp dword [ebp - 0x17c], eax
jl 0x1003d686
mov dword [ebp - 0x180], 1
jmp 0x1003d690
mov dword [ebp - 0x180], 0
movzx ecx, byte [0x1007f04e]
cmp dword [0x1007f140], ecx
jl 0x1003d6ab
mov dword [ebp - 0x184], 1
jmp 0x1003d6b5
mov dword [ebp - 0x184], 0
mov edx, dword [ebp - 0x180]
cmp edx, dword [ebp - 0x184]
je 0x1003d6cf
mov dword [ebp - 0x18c], 1
jmp 0x1003d6d9
mov dword [ebp - 0x18c], 0
mov eax, dword [ebp - 0x188]
cmp eax, dword [ebp - 0x18c]
je 0x1003d743
mov ecx, dword [0x1007f1c0]
add ecx, 1
mov edx, dword [0x1007f1c4]
adc edx, 0
mov dword [0x1007f1c0], ecx
mov dword [0x1007f1c4], edx
mov eax, dword [0x1007f170]
xor ecx, ecx
push ecx
push eax
mov edx, dword [ebp - 0x38]
push edx
mov eax, dword [ebp - 0x3c]
push eax
call fcn.1005a1b0
mov dword [ebp - 0x3c], eax
mov dword [ebp - 0x38], edx
push 0x23511
push 0x6b3deb43
mov ecx, dword [ebp - 0x30]
push ecx
mov edx, dword [ebp - 0x34]
push edx
call fcn.1005a1b0
mov word [0x1007f1a8], ax
jmp 0x1003d857
mov eax, dword [0x1007f190]
mov ecx, dword [0x1007f194]
mov dword [ebp - 0x2ec], eax
mov dword [ebp - 0x2e8], ecx
mov edx, dword [ebp - 0x2ec]
or edx, dword [ebp - 0x2e8]
je 0x1003d7bc
mov eax, 0x28b5e5f8
or eax, 0x4156f
je 0x1003d7bc
xor ecx, ecx
mov dword [ebp - 0x74], 8
mov dword [ebp - 0x70], ecx
cmp dword [ebp - 0x44], 0
jne 0x1003d79a
xor edx, edx
mov dword [ebp - 0x25c], 1
mov dword [ebp - 0x258], edx
jmp 0x1003d7a5
xorps xmm0, xmm0
movlpd qword [ebp - 0x25c], xmm0
mov eax, dword [ebp - 0x25c]
mov ecx, dword [ebp - 0x258]
mov dword [ebp - 0x54], eax
mov dword [ebp - 0x50], ecx
jmp 0x1003d857
cmp dword [0x1007f170], 0
je 0x1003d808
imul edx, dword [ebp - 0x40], 0x9c
mov word [0x1007f128], dx
movzx eax, word [0x1007f1a0]
cdq
mov ecx, 8
imul ecx, ecx, 0x15a1
mov dword [ecx + 0x1024e1c0], eax
mov dword [ecx + 0x1024e1c4], edx
movzx eax, word [0x1007f128]
cdq
add eax, dword [ebp - 0x60]
adc edx, dword [ebp - 0x5c]
mov dword [ebp - 0x60], eax
mov dword [ebp - 0x5c], edx
jmp 0x1003d857
mov edx, dword [0x1007f144]
cmp edx, dword [ebp - 0x58]
jl 0x1003d81f
mov dword [ebp - 0x190], 1
jmp 0x1003d829
mov dword [ebp - 0x190], 0
mov eax, dword [ebp - 0x190]
not eax
test eax, eax
je 0x1003d857
mov cl, byte [0x1007f178]
mov byte [ebp - 0x14], cl
push 0
push 0x973d
mov edx, dword [ebp - 0x30]
push edx
mov eax, dword [ebp - 0x34]
push eax
call fcn.1005a1b0
mov byte [0x1007f027], al
movsx eax, byte [ebp - 0x13]
cdq
mov ecx, eax
mov esi, edx
sub ecx, dword [ebp - 0x6c]
sbb esi, dword [ebp - 0x68]
movsx eax, word [0x1007f148]
cdq
add eax, dword [0x1007f1b0]
adc edx, dword [0x1007f1b4]
mov dword [ebp - 0x2f4], eax
mov dword [ebp - 0x2f0], edx
mov dword [ebp - 0x2fc], ecx
mov dword [ebp - 0x2f8], esi
mov edx, dword [ebp - 0x2f0]
cmp edx, dword [ebp - 0x2f8]
jb 0x1003d8bc
ja 0x1003d8b0
mov eax, dword [ebp - 0x2f4]
cmp eax, dword [ebp - 0x2fc]
jbe 0x1003d8bc
mov dword [ebp - 0x194], 1
jmp 0x1003d8c6
mov dword [ebp - 0x194], 0
movzx eax, word [ebp - 0x20]
not eax
cdq
mov dword [ebp - 0x304], eax
mov dword [ebp - 0x300], edx
mov ecx, dword [0x1007f1b0]
cmp ecx, dword [ebp - 0x304]
jne 0x1003d8f5
mov edx, dword [0x1007f1b4]
cmp edx, dword [ebp - 0x300]
je 0x1003d90a
mov eax, dword [ebp - 0x58]
not eax
test eax, eax
je 0x1003d90a
mov dword [ebp - 0x198], 1
jmp 0x1003d914
mov dword [ebp - 0x198], 0
mov ecx, dword [ebp - 0x194]
cmp ecx, dword [ebp - 0x198]
jl 0x1003d9dd
movsx edx, byte [ebp - 0x16]
test edx, edx
je 0x1003d991
cmp dword [0x1007f158], 0
je 0x1003d95f
mov ecx, dword [ebp - 0x4c]
mov esi, dword [0x1007f188]
sub esi, dword [ebp - 0x2c]
movzx eax, byte [ebp - 0x12]
cdq
and eax, dword [0x1007f120]
add eax, esi
xor eax, ecx
mov word [ebp - 0x24], ax
mov dword [ebp - 0x80], 0xb0
jmp 0x1003d98f
mov edx, dword [str.C]
xor eax, eax
add edx, dword [ebp - 0x2c]
adc eax, dword [ebp - 0x28]
mov dword [ebp - 0x2c], edx
mov dword [ebp - 0x28], eax
mov ecx, dword [ebp - 0x4c]
xor edx, edx
mov eax, dword [ebp - 0x30]
push eax
mov eax, dword [ebp - 0x34]
push eax
push edx
push ecx
call fcn.1005a1b0
mov ecx, dword [ebp - 0x4c]
sub ecx, eax
mov dword [ebp - 0x4c], ecx
jmp 0x1003d9d8
movzx edx, word [0x1007f16c]
test edx, edx
jne 0x1003d9a8
mov dword [ebp - 0x19c], 1
jmp 0x1003d9b2
mov dword [ebp - 0x19c], 0
movsx eax, word [0x1007f148]
imul eax, dword [ebp - 0x19c]
movzx ecx, word [0x1007f168]
add ecx, dword [ebp - 0x58]
sub ecx, eax
not ecx
mov byte [ebp - 0x11], cl
mov dword [ebp - 0x58], 0x6971
jmp 0x1003dac1
mov edx, dword [0x1007f1c0]
not edx
mov eax, dword [0x1007f1c4]
not eax
mov dword [ebp - 0x314], edx
mov dword [ebp - 0x310], eax
mov ecx, dword [0x1007f1c4]
cmp ecx, dword [ebp - 0x310]
jg 0x1003da79
jl 0x1003da16
mov edx, dword [0x1007f1c0]
cmp edx, dword [ebp - 0x314]
ja 0x1003da79
imul eax, dword [0x1007f140], 0x3bf55e8d
mov byte [ebp - 0x12], al
movsx eax, word [ebp - 0x24]
cdq
push edx
push eax
mov ecx, dword [0x1007f124]
push ecx
mov edx, dword [0x1007f120]
push edx
call fcn.1005a1b0
mov ecx, dword [0x1007f120]
sub ecx, eax
mov eax, dword [0x1007f124]
sbb eax, edx
mov dword [0x1007f120], ecx
mov dword [0x1007f124], eax
mov ecx, 2
imul edx, ecx, 0x45
movsx eax, word [edx + 0x103a8010]
cdq
mov ecx, dword [ebp - 0x74]
mov esi, dword [ebp - 0x70]
sub ecx, eax
sbb esi, edx
mov dword [ebp - 0x74], ecx
mov dword [ebp - 0x70], esi
jmp 0x1003dac1
mov edx, dword [0x1007f178]
not edx
mov eax, dword [0x1007f17c]
not eax
mov dword [ebp - 0x31c], edx
mov dword [ebp - 0x318], eax
mov ecx, dword [ebp - 0x31c]
or ecx, dword [ebp - 0x318]
je 0x1003dac1
xor edx, edx
mov dword [0x1007f130], 1
mov dword [0x1007f134], edx
mov eax, dword [0x1007fc38]
xor ecx, ecx
mov dword [ebp - 0x54], eax
mov dword [ebp - 0x50], ecx
mov edx, dword [0x1007fc38]
mov dword [ebp - 0xbc], edx
movsx eax, word [0x1007f148]
cdq
mov dword [ebp - 0x324], eax
mov dword [ebp - 0x320], edx
mov eax, dword [ebp - 0x5c]
cmp eax, dword [ebp - 0x320]
ja 0x1003db2b
jb 0x1003daf9
mov ecx, dword [ebp - 0x60]
cmp ecx, dword [ebp - 0x324]
ja 0x1003db2b
mov dword [ebp - 0x3b8], 0
call dword [sym.imp.USER32.dll_GetCursor]
mov dword [ebp - 0x3b4], eax
cmp dword [ebp - 0x3b4], 0
je 0x1003db2b
mov edx, dword [ebp - 0x3b8]
push edx
call dword [sym.imp.USER32.dll_GetCaretPos]
mov dword [ebp - 0x4c8], eax
mov eax, dword [ebp - 0xbc]
add eax, 0x265
mov dword [ebp - 0x4cc], eax
cmp dword [0x1007f154], 0
je 0x1003db59
mov ecx, dword [ebp - 0x6c]
mov edx, dword [ebp - 0x68]
mov dword [ebp - 0x244], ecx
mov dword [ebp - 0x240], edx
jmp 0x1003db6d
movzx eax, word [0x1007f16c]
cdq
mov dword [ebp - 0x244], eax
mov dword [ebp - 0x240], edx
mov eax, dword [ebp - 0x244]
mov ecx, dword [ebp - 0x240]
mov dword [0x1007f120], eax
mov dword [0x1007f124], ecx
movzx edx, word [ebp - 0x20]
add edx, 0x56e1dcc1
mov dword [str.C], edx
mov eax, dword [ebp - 0xbc]
add eax, 0x265
mov dword [ebp - 0x4d0], eax
mov ecx, dword [0x1007f180]
xor ecx, dword [ebp - 0x58]
imul ecx, dword [0x1007f180]
mov dword [0x1007f180], ecx
movzx edx, word [0x1007f1b8]
sub edx, dword [str.C]
movzx eax, word [0x1007f1b8]
sub eax, edx
mov word [0x1007f1b8], ax
mov ecx, dword [ebp - 0xbc]
add ecx, 0x1c4
mov dword [ebp - 0x1a0], ecx
movsx edx, word [0x1007f15c]
cmp edx, dword [ebp - 0x64]
je 0x1003dc3c
mov dword [ebp - 0xa8], 0
jmp 0x1003dc10
mov eax, dword [ebp - 0xa8]
add eax, 1
mov dword [ebp - 0xa8], eax
cmp dword [ebp - 0xa8], 0x16e
jge 0x1003dc3c
mov ecx, dword [ebp - 0x34]
add ecx, 0x8d
mov byte [ebp - 0x15], cl
mov edx, dword [ebp - 0x74]
mov eax, dword [ebp - 0x70]
add edx, 1
adc eax, 0
mov dword [ebp - 0x74], edx
mov dword [ebp - 0x70], eax
jmp 0x1003dc01
mov ecx, 0x202
sub ecx, dword [ebp - 0x1a0]
cmp dword [ebp - 0x1a0], ecx
je 0x1003debf
mov edx, dword [str.AslFileAttributeTo]
mov dword [ebp - 0x47c], edx
mov eax, dword [0x10067318]
mov dword [ebp - 0x478], eax
mov ecx, dword [0x1006731c]
mov dword [ebp - 0x474], ecx
mov edx, dword [0x10067320]
mov dword [ebp - 0x470], edx
mov ax, word [0x10067324]
mov word [ebp - 0x46c], ax
mov cl, byte [0x10067326]
mov byte [ebp - 0x46a], cl
lea edx, [ebp - 0x47c]
push edx
call dword [sym.imp.KERNEL32.dll_lstrlenA]
cdq
mov dword [0x1007f130], eax
mov dword [0x1007f134], edx
push 0xee
push 0xec
movzx eax, word [0x1007f180]
push eax
movzx ecx, word [ebp - 0x4c]
push ecx
push 0x5e
push 0
push 0
call fcn.10035820
add esp, 0x1c
cwde
cdq
mov dword [ebp - 0x74], eax
mov dword [ebp - 0x70], edx
cmp dword [ebp - 0x78], 0
je 0x1003de07
mov edx, dword [0x1007f1c0]
or edx, dword [0x1007f1c4]
je 0x1003dd23
mov dword [0x1007f154], 1
movzx eax, byte [0x1007f04e]
movzx ecx, byte [ebp - 0x11]
not ecx
movzx edx, word [ebp - 0x20]
sub edx, ecx
add edx, eax
mov byte [0x1007f04e], dl
jmp 0x1003de02
mov eax, dword [ebp - 0x80]
not eax
test eax, eax
je 0x1003dd8a
mov esi, dword [ebp - 0x48]
imul esi, dword [0x1007f170]
mov ecx, dword [ebp - 0x4c]
xor edx, edx
push edx
push ecx
mov eax, dword [0x1007f18c]
push eax
mov ecx, dword [0x1007f188]
push ecx
call fcn.1005a1b0
and eax, esi
xor eax, 0xaa64
mov dword [0x1007f1bc], eax
mov edx, dword [ebp - 0x64]
mov eax, 4
imul ecx, eax, 0x13
mov dword [ecx + 0x1024e158], edx
movsx eax, word [ebp - 0x24]
cdq
mov ecx, 8
imul ecx, ecx, 0xe0
mov dword [ecx + 0x103c74e8], eax
mov dword [ecx + 0x103c74ec], edx
jmp 0x1003de02
mov ecx, dword [ebp - 0x54]
mov esi, dword [ebp - 0x50]
movsx eax, word [0x1007f148]
cdq
push esi
push ecx
push edx
push eax
call fcn.1005a1b0
not eax
not edx
mov dword [ebp - 0x32c], eax
mov dword [ebp - 0x328], edx
cmp dword [ebp - 0x32c], 1
jne 0x1003ddc3
cmp dword [ebp - 0x328], 0
je 0x1003de02
cmp dword [0x1007f140], 0
je 0x1003dddb
movsx edx, word [0x1007f15c]
mov dword [ebp - 0x1a4], edx
jmp 0x1003dde4
mov eax, dword [ebp - 0x78]
mov dword [ebp - 0x1a4], eax
mov ecx, dword [ebp - 0x1a4]
mov dword [0x1007f154], ecx
xor edx, edx
mov dword [0x1007f1b0], 0xab
mov dword [0x1007f1b4], edx
jmp 0x1003deb8
mov eax, 0xcaadb9bf
or eax, 0xdb409
je 0x1003de75
movzx ecx, byte [ebp - 0x11]
imul edx, ecx, 0xc49c5f31
mov byte [ebp - 0x12], dl
cmp dword [ebp - 0x44], 0
jne 0x1003de32
mov dword [ebp - 0x1a8], 1
jmp 0x1003de3c
mov dword [ebp - 0x1a8], 0
movsx eax, word [ebp - 0x1c]
sub eax, dword [ebp - 0x1a8]
mov word [0x1007f14c], ax
cmp dword [ebp - 0x4c], 0
je 0x1003de5d
mov cl, byte [0x1007f04e]
mov byte [ebp - 0x79], cl
jmp 0x1003de63
mov dl, byte [ebp - 0x12]
mov byte [ebp - 0x79], dl
movzx eax, byte [ebp - 0x79]
cdq
mov dword [0x1007f160], eax
mov dword [0x1007f164], edx
jmp 0x1003deb8
movzx eax, word [ebp - 0x20]
movzx ecx, word [0x1007f1b8]
add ecx, eax
jne 0x1003de8a
cmp dword [ebp - 0x58], 0
je 0x1003deb8
movzx edx, byte [ebp - 0x15]
imul eax, edx, 0x2ba6e26a
movsx ecx, byte [ebp - 0x16]
imul ecx, eax
mov byte [ebp - 0x16], cl
mov dword [ebp - 0x44], 0xfd8
mov edx, dword [0x1007fc38]
xor eax, eax
mov dword [0x1007f1c0], edx
mov dword [0x1007f1c4], eax
xor eax, eax
jmp 0x1003f1a7
movzx ecx, byte [ebp - 0x11]
imul ecx, dword [str.C]
movzx edx, byte [ebp - 0x11]
sub edx, ecx
mov byte [ebp - 0x11], dl
movzx eax, word [0x1007f128]
cdq
or eax, dword [ebp - 0x34]
or edx, dword [ebp - 0x30]
mov dword [ebp - 0x60], eax
mov dword [ebp - 0x5c], edx
mov eax, dword [ebp - 0x44]
sar eax, 2
cdq
mov dword [0x1007f120], eax
mov dword [0x1007f124], edx
call fcn.100295d0
test eax, eax
je 0x1003df08
mov byte [ebp - 0x7a], 1
jmp 0x1003df0c
mov byte [ebp - 0x7a], 0
mov al, byte [ebp - 0x7a]
mov byte [ebp - 0x81], al
mov dword [ebp - 0xac], 0
jmp 0x1003df30
mov ecx, dword [ebp - 0xac]
add ecx, 1
mov dword [ebp - 0xac], ecx
cmp dword [ebp - 0xac], 0x233
jge 0x1003e047
push 0
push 0x38
push 0x94
movzx edx, word [0x1007f1b8]
push edx
push 0x82
call fcn.10036740
add esp, 0x14
cwde
mov dword [0x1007f180], eax
cmp dword [0x1007f180], 0
jbe 0x1003df79
mov dword [ebp - 0x1ac], 1
jmp 0x1003df83
mov dword [ebp - 0x1ac], 0
cmp dword [0x1007f180], 0x1e
jbe 0x1003df98
mov dword [ebp - 0x1b0], 1
jmp 0x1003dfa2
mov dword [ebp - 0x1b0], 0
mov ecx, dword [ebp - 0x1ac]
cmp ecx, dword [ebp - 0x1b0]
jne 0x1003dff5
jmp 0x1003dfc1
jmp 0x1003dfc8
jmp 0x1003dfe7
jmp 0x1003dff3
jmp 0x1003e026
mov edx, dword [ebp - 0x64]
add edx, 1
mov dword [ebp - 0x64], edx
mov ecx, dword [ebp - 0x54]
mov edx, dword [ebp - 0x50]
mov dword [ebp - 0x4d4], edx
movzx eax, word [0x1007f1c8]
cdq
mov esi, eax
add esi, ecx
movzx eax, word [0x1007f1c8]
cdq
or eax, esi
mov word [0x1007f1c8], ax
mov eax, dword [0x1007f188]
add eax, 1
mov ecx, dword [0x1007f18c]
adc ecx, 0
mov dword [0x1007f188], eax
mov dword [0x1007f18c], ecx
jmp 0x1003df21
movzx edx, byte [ebp - 0x81]
test edx, edx
jne 0x1003f187
push 0xffffffffffffffcb
push 0
call fcn.10035170
add esp, 8
movsx eax, al
mov dword [0x1007f140], eax
cmp dword [0x1007f140], 0
je 0x1003e109
mov dword [ebp - 0xb0], 0
jmp 0x1003e092
mov ecx, dword [ebp - 0xb0]
add ecx, 2
mov dword [ebp - 0xb0], ecx
cmp dword [ebp - 0xb0], 0x19
jge 0x1003e109
mov edx, dword [0x1007f178]
add edx, dword [ebp - 0x60]
mov eax, dword [0x1007f17c]
adc eax, dword [ebp - 0x5c]
mov dword [0x1007f178], edx
mov dword [0x1007f17c], eax
mov ecx, dword [0x1007f138]
mov edx, dword [0x1007f13c]
add ecx, 0xef4f9e30
adc edx, 0xde47a
add ecx, dword [0x1007f188]
adc edx, dword [0x1007f18c]
mov dword [0x1007f188], ecx
mov dword [0x1007f18c], edx
movsx eax, byte [ebp - 0x16]
imul eax, eax, 0xabe8
cdq
mov dword [ebp - 0x60], eax
mov dword [ebp - 0x5c], edx
mov cx, word [ebp - 0x1c]
add cx, 1
mov word [ebp - 0x1c], cx
jmp 0x1003e083
movsx edx, byte [ebp - 0x13]
test edx, edx
jne 0x1003e11d
mov dword [ebp - 0x1b4], 1
jmp 0x1003e127
mov dword [ebp - 0x1b4], 0
mov eax, dword [ebp - 0x1b4]
mov dword [ebp - 0x64], eax
mov ecx, dword [0x1007fc38]
mov dword [ebp - 0xb4], ecx
call dword [sym.imp.USER32.dll_GetFocus]
mov dword [ebp - 0x1b8], eax
cmp dword [ebp - 0x1b8], 0
je 0x1003e179
mov edx, dword [ebp - 0x1b8]
push edx
call dword [sym.imp.USER32.dll_GetMenu]
mov dword [ebp - 0x3bc], eax
push 1
mov eax, dword [ebp - 0x3bc]
push eax
call dword [sym.imp.USER32.dll_GetSubMenu]
mov dword [ebp - 0x4d8], eax
mov ecx, dword [ebp - 0xb4]
add ecx, 0x242
mov dword [ebp - 0x2a8], ecx
push 0
push 0xb6
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
mov edx, dword [ebp - 0x38]
push edx
mov eax, dword [ebp - 0x3c]
push eax
call fcn.10035400
add esp, 0x30
mov dword [0x1007f154], eax
mov ecx, dword [0x1007f190]
mov edx, dword [0x1007f194]
mov dword [ebp - 0x334], ecx
mov dword [ebp - 0x330], edx
mov eax, dword [ebp - 0x334]
or eax, dword [ebp - 0x330]
jne 0x1003e1f2
mov ecx, 0x6142
test ecx, ecx
jne 0x1003e1f2
mov dword [ebp - 0x1bc], 1
jmp 0x1003e1fc
mov dword [ebp - 0x1bc], 0
movzx edx, byte [ebp - 0x11]
cmp dword [ebp - 0x1bc], edx
jge 0x1003e27f
push 0
call fcn.10037420
add esp, 4
movzx eax, ax
cdq
mov dword [ebp - 0x6c], eax
mov dword [ebp - 0x68], edx
mov eax, dword [ebp - 0x6c]
or eax, dword [ebp - 0x68]
je 0x1003e27a
movsx eax, byte [ebp - 0x16]
cdq
mov ecx, dword [ebp - 0x54]
mov esi, dword [ebp - 0x50]
sub ecx, eax
sbb esi, edx
mov edx, dword [ebp - 0x54]
mov eax, dword [ebp - 0x50]
add edx, ecx
adc eax, esi
mov dword [ebp - 0x54], edx
mov dword [ebp - 0x50], eax
mov eax, dword [ebp - 0x44]
cdq
add eax, dword [0x1007f188]
adc edx, dword [0x1007f18c]
mov ecx, dword [0x1007f188]
sub ecx, eax
mov eax, dword [0x1007f18c]
sbb eax, edx
mov dword [0x1007f188], ecx
mov dword [0x1007f18c], eax
mov eax, dword [ebp - 0x80]
sar eax, 4
cdq
mov dword [ebp - 0x3c], eax
mov dword [ebp - 0x38], edx
jmp 0x1003e414
cmp dword [ebp - 0x4c], 0
je 0x1003e2b1
movsx cx, byte [ebp - 0x14]
mov edx, 2
imul eax, edx, 0x184f
mov word [eax + 0x102f6648], cx
movzx ecx, word [0x1007f128]
imul edx, ecx, 0x1f
mov dword [0x1007f170], edx
jmp 0x1003e414
mov eax, dword [ebp - 0x2c]
not eax
mov ecx, dword [ebp - 0x28]
not ecx
mov dword [ebp - 0x33c], eax
mov dword [ebp - 0x338], ecx
mov edx, dword [ebp - 0x33c]
or edx, dword [ebp - 0x338]
je 0x1003e2ed
movzx eax, word [0x1007f168]
cmp dword [ebp - 0x4c], eax
jne 0x1003e2ed
mov dword [ebp - 0x1c0], 1
jmp 0x1003e2f7
mov dword [ebp - 0x1c0], 0
mov ecx, dword [ebp - 0x1c0]
not ecx
test ecx, ecx
je 0x1003e347
movzx edx, word [0x1007f128]
movzx eax, word [0x1007f128]
sub eax, edx
mov word [0x1007f128], ax
mov eax, dword [0x1007f144]
not eax
cdq
mov ecx, eax
sub ecx, dword [ebp - 0x3c]
not ecx
mov esi, dword [0x1007f120]
not esi
movsx eax, word [0x1007f1a8]
cdq
add eax, esi
sub eax, ecx
mov word [0x1007f15c], ax
jmp 0x1003e414
movzx edx, byte [ebp - 0x15]
movzx eax, word [ebp - 0x20]
cmp eax, edx
jge 0x1003e367
xor ecx, ecx
mov dword [ebp - 0x26c], 1
mov dword [ebp - 0x268], ecx
jmp 0x1003e372
xorps xmm0, xmm0
movlpd qword [ebp - 0x26c], xmm0
cmp dword [0x1007f1bc], 0
jne 0x1003e38f
xor edx, edx
mov dword [ebp - 0x264], 1
mov dword [ebp - 0x260], edx
jmp 0x1003e39a
xorps xmm0, xmm0
movlpd qword [ebp - 0x264], xmm0
mov eax, dword [0x1007f178]
sub eax, dword [ebp - 0x264]
mov ecx, dword [0x1007f17c]
sbb ecx, dword [ebp - 0x260]
mov dword [ebp - 0x344], eax
mov dword [ebp - 0x340], ecx
mov edx, dword [ebp - 0x268]
cmp edx, dword [ebp - 0x340]
jl 0x1003e414
jg 0x1003e3db
mov eax, dword [ebp - 0x26c]
cmp eax, dword [ebp - 0x344]
jb 0x1003e414
movzx ecx, byte [0x1007f026]
movsx edx, word [0x1007f1a8]
add edx, ecx
mov word [0x1007f1a8], dx
mov eax, dword [0x1007f198]
mov edx, dword [0x1007f19c]
mov cl, 4
call fcn.1005a1f0
mov byte [ebp - 0x12], al
mov eax, dword [0x1007f170]
sub eax, 1
mov dword [0x1007f170], eax
mov ecx, dword [ebp - 0xb4]
add ecx, 0x106
mov dword [ebp - 0x4dc], ecx
cmp dword [0x1007f144], 0
je 0x1003e603
mov dword [ebp - 4], 2
mov dword [0x1007f1bc], 4
mov edx, 8
mov word [0x1007f1c8], dx
mov eax, dword [0x1007f144]
xor eax, 0xaf14796a
mov dword [ebp - 0x78], eax
movzx eax, byte [0x1007f026]
cdq
sub eax, 0xf75b9d14
mov dword [ebp - 0x40], eax
mov ecx, dword [0x1007f1bc]
mov dword [ebp - 0x1c4], ecx
cmp dword [ebp - 0x1c4], 4
ja case.default.0x1003e48c
mov edx, dword [ebp - 0x1c4]
jmp dword [edx*4 + 0x1003f1ec]
movzx eax, word [0x1007f14c]
imul ecx, eax, 0xca748a6
mov dword [ebp - 0x44], ecx
mov dword [ebp - 0x58], 0xb4f91af3
jmp case.default.0x1003e48c
mov edx, dword [0x1007fc38]
xor eax, eax
mov dword [0x1007f160], edx
mov dword [0x1007f164], eax
movsx ecx, byte [ebp - 0x13]
sub ecx, 0x38ba5e87
mov dword [ebp - 0x48], ecx
movzx edx, word [0x1007f1a0]
mov eax, dword [0x1007f144]
and eax, edx
mov ecx, dword [0x1007f144]
sub ecx, eax
mov dword [0x1007f144], ecx
jmp case.default.0x1003e48c
mov edx, dword [str.C]
sub edx, 0x3272
mov word [ebp - 0x1c], dx
movsx eax, word [ebp - 0x24]
movzx ecx, word [ebp - 0x20]
and ecx, eax
movzx edx, word [ebp - 0x20]
sub edx, ecx
mov word [ebp - 0x20], dx
jmp case.default.0x1003e48c
mov eax, dword [0x1007f1d0]
mov ecx, dword [0x1007f1d4]
xor eax, dword [0x1007f178]
xor ecx, dword [0x1007f17c]
mov dword [0x1007f178], eax
mov dword [0x1007f17c], ecx
mov edx, dword [0x1007fc38]
mov dword [0x1007f1bc], edx
mov eax, dword [0x1007fc38]
xor ecx, ecx
mov dword [0x1007f1b0], eax
mov dword [0x1007f1b4], ecx
jmp case.default.0x1003e48c
mov eax, dword [ebp - 0x64]
cdq
push edx
push eax
mov edx, dword [ebp - 0x38]
push edx
mov eax, dword [ebp - 0x3c]
push eax
call fcn.1005a1b0
mov dword [ebp - 0x3c], eax
mov dword [ebp - 0x38], edx
mov eax, dword [ebp - 0x58]
cdq
and eax, 0x33d6712
and edx, 0x72b1a
mov dword [0x1007f188], eax
mov dword [0x1007f18c], edx
jmp 0x1003e5ee
mov dword [ebp - 4], 0xffffffff
jmp 0x1003e5fe
jmp 0x1003e6e7
mov edx, dword [0x1007f1c0]
or edx, dword [0x1007f1c4]
je 0x1003e638
mov al, byte [ebp - 0x34]
mov ecx, 1
imul edx, ecx, 0x67b3
mov byte [edx + 0x1030cfe8], al
mov eax, dword [ebp - 0x40]
add eax, 0x659d7ae5
mov word [0x1007f1c8], ax
jmp 0x1003e6e7
mov ecx, dword [0x1007f178]
or ecx, dword [0x1007f17c]
je 0x1003e672
mov edx, dword [0x1007fc38]
xor eax, eax
mov dword [ebp - 0x54], edx
mov dword [ebp - 0x50], eax
movzx ecx, word [0x1007f168]
imul edx, ecx, 0xff
mov byte [ebp - 0x13], dl
movsx eax, word [ebp - 0x24]
sub eax, 0x748cb223
mov byte [ebp - 0x14], al
jmp 0x1003e6e7
cmp dword [ebp - 0x30], 0xc101f
jg 0x1003e692
jl 0x1003e686
cmp dword [ebp - 0x34], 0xc6117f03
ja 0x1003e692
mov dword [ebp - 0x1c8], 1
jmp 0x1003e69c
mov dword [ebp - 0x1c8], 0
movzx ecx, word [0x1007f1b8]
cmp dword [ebp - 0x40], ecx
ja 0x1003e6b4
mov dword [ebp - 0x1cc], 1
jmp 0x1003e6be
mov dword [ebp - 0x1cc], 0
mov edx, dword [ebp - 0x1c8]
cmp edx, dword [ebp - 0x1cc]
jg 0x1003e6e7
mov eax, dword [ebp - 0x64]
cdq
add eax, dword [0x1007f120]
adc edx, dword [0x1007f124]
mov dword [0x1007f120], eax
mov dword [0x1007f124], edx
mov eax, dword [ebp - 0xb4]
add eax, 0x21b
mov dword [ebp - 0x3c0], eax
mov dword [ebp - 4], 4
push 0xd
push 0xb8
movzx ecx, word [0x1007f154]
push ecx
push 0
movzx edx, word [ebp - 0x1c]
push edx
movzx eax, word [ebp - 0x4c]
push eax
push 0
call fcn.10035820
add esp, 0x1c
mov word [ebp - 0xc2], ax
movsx ecx, word [ebp - 0xc2]
mov dword [ebp - 0x40], ecx
cmp dword [ebp - 0x40], 0
je 0x1003e75b
mov edx, dword [ebp - 0x54]
mov eax, dword [ebp - 0x50]
mov dword [ebp - 0x4e0], eax
push edx
call dword [sym.imp.KERNEL32.dll_IsValidCodePage]
xor ecx, ecx
mov dword [ebp - 0x60], eax
mov dword [ebp - 0x5c], ecx
jmp 0x1003e80b
cmp dword [0x1007f1a4], 0
je 0x1003e80b
mov edx, dword [ebp - 0x54]
mov eax, dword [ebp - 0x50]
mov dword [ebp - 0x34c], edx
mov dword [ebp - 0x348], eax
mov ecx, dword [ebp - 0x34c]
or ecx, dword [ebp - 0x348]
jne 0x1003e794
mov dword [ebp - 0x1d0], 1
jmp 0x1003e79e
mov dword [ebp - 0x1d0], 0
mov eax, dword [ebp - 0x48]
not eax
imul eax, dword [ebp - 0x1d0]
not eax
cdq
mov dword [0x1007f190], eax
mov dword [0x1007f194], edx
movzx eax, word [0x1007f1c8]
cdq
add eax, 0x37f3b33e
adc edx, 0xb307f
mov dword [0x1007f1c0], eax
mov dword [0x1007f1c4], edx
mov edx, dword [0x1007f170]
xor eax, eax
push 0x412e3
push 0xc3aa5156
push eax
push edx
call fcn.1005a1b0
mov ecx, dword [0x1007f160]
mov esi, dword [0x1007f164]
and ecx, eax
and esi, edx
mov dword [0x1007f160], ecx
mov dword [0x1007f164], esi
jmp 0x1003e89c
mov dword [ebp - 4], 0xffffffff
jmp 0x1003e8ac
imul eax, dword [ebp - 0x3c0], 0x1e7
imul ecx, eax, 0x1c
cmp ecx, dword [ebp - 0x2a8]
je 0x1003f187
mov edx, dword [str.C]
cmp edx, dword [str.C]
jb 0x1003e8df
mov dword [ebp - 0x1d4], 1
jmp 0x1003e8e9
mov dword [ebp - 0x1d4], 0
cmp dword [str.C], 0xb
jb 0x1003e8fe
mov dword [ebp - 0x1d8], 1
jmp 0x1003e908
mov dword [ebp - 0x1d8], 0
mov eax, dword [ebp - 0x1d4]
cmp eax, dword [ebp - 0x1d8]
jne 0x1003e945
movsx ecx, byte [ebp - 0x16]
imul edx, ecx, 0xaa
mov byte [ebp - 0x13], dl
mov eax, dword [0x1007f170]
sub eax, 0x4abab4a
xor ecx, ecx
mov dword [0x1007f178], eax
mov dword [0x1007f17c], ecx
movsx eax, byte [ebp - 0x16]
cdq
mov dword [ebp - 0x74], eax
mov dword [ebp - 0x70], edx
mov eax, dword [0x1007f144]
cdq
mov dword [ebp - 0x3c8], eax
mov dword [ebp - 0x3c4], edx
mov edx, dword [ebp - 0x60]
cmp edx, dword [ebp - 0x3c8]
jne 0x1003e971
mov eax, dword [ebp - 0x5c]
cmp eax, dword [ebp - 0x3c4]
je 0x1003ea72
movzx ecx, word [0x1007f1a0]
movzx edx, byte [ebp - 0x15]
cmp edx, ecx
jg 0x1003e98c
mov dword [ebp - 0x1dc], 1
jmp 0x1003e996
mov dword [ebp - 0x1dc], 0
movzx eax, byte [ebp - 0x15]
cmp eax, 0x48
jg 0x1003e9ab
mov dword [ebp - 0x1e0], 1
jmp 0x1003e9b5
mov dword [ebp - 0x1e0], 0
mov ecx, dword [ebp - 0x1dc]
cmp ecx, dword [ebp - 0x1e0]
je 0x1003ea4c
mov eax, dword [ebp - 0x58]
cdq
mov dword [ebp - 0x354], eax
mov dword [ebp - 0x350], edx
mov edx, dword [ebp - 0x68]
cmp edx, dword [ebp - 0x350]
jb 0x1003ea35
ja 0x1003e9ef
mov eax, dword [ebp - 0x6c]
cmp eax, dword [ebp - 0x354]
jbe 0x1003ea35
mov ecx, dword [0x1007f158]
add ecx, 0x2a
xor edx, edx
mov eax, dword [ebp - 0x6c]
sub eax, ecx
mov ecx, dword [ebp - 0x68]
sbb ecx, edx
mov dword [ebp - 0x6c], eax
mov dword [ebp - 0x68], ecx
mov edx, dword [0x1007f154]
xor edx, dword [0x1007f1bc]
xor eax, eax
mov dword [0x1007f1c0], edx
mov dword [0x1007f1c4], eax
movzx ecx, byte [ebp - 0x12]
xor ecx, dword [ebp - 0x64]
movzx edx, byte [ebp - 0x12]
add edx, ecx
mov byte [ebp - 0x12], dl
jmp 0x1003ea4a
mov byte [ebp - 0x16], 0xd7
movzx eax, byte [ebp - 0x11]
imul eax, dword [ebp - 0x44]
movzx ecx, byte [ebp - 0x11]
add ecx, eax
mov byte [ebp - 0x11], cl
jmp 0x1003ea72
movzx eax, byte [0x1007f027]
sub eax, 0x7ead
cdq
mov dword [ebp - 0x2c], eax
mov dword [ebp - 0x28], edx
mov ecx, dword [ebp - 0x40]
sub ecx, dword [0x1007f178]
mov eax, dword [ebp - 0x44]
cdq
sub eax, ecx
mov word [ebp - 0x24], ax
mov edx, dword [0x1007fc38]
mov dword [ebp - 0xb8], edx
movzx eax, word [0x1007f1a0]
test eax, eax
je 0x1003ec32
cmp dword [ebp - 0x64], 0
jne 0x1003eaaa
mov ecx, dword [ebp - 0x58]
cmp ecx, dword [0x1007f140]
jg 0x1003eaaa
mov dword [ebp - 0x1e4], 0
jmp 0x1003eab4
mov dword [ebp - 0x1e4], 1
movzx edx, word [0x1007f1a0]
mov eax, dword [ebp - 0x1e4]
not eax
cmp eax, edx
jg 0x1003ebc7
mov ecx, dword [ebp - 0x6c]
or ecx, dword [ebp - 0x68]
je 0x1003eb33
mov edx, 1
imul eax, edx, 0x773a
movzx ecx, byte [eax + 0x1030cfe8]
movzx edx, word [0x1007f168]
sub edx, ecx
mov word [0x1007f168], dx
movzx eax, byte [0x1007f027]
test eax, eax
je 0x1003eb0e
mov ecx, dword [str.C]
mov dword [ebp - 0x1e8], ecx
jmp 0x1003eb1b
movsx edx, word [0x1007f15c]
mov dword [ebp - 0x1e8], edx
mov eax, dword [ebp - 0x1e8]
xor ecx, ecx
mov dword [0x1007f190], eax
mov dword [0x1007f194], ecx
jmp 0x1003ebc5
cmp dword [0x1007f170], 0
je 0x1003eb56
mov edx, dword [0x1007f1c0]
or edx, dword [0x1007f1c4]
je 0x1003eb56
mov dword [ebp - 0x1ec], 1
jmp 0x1003eb60
mov dword [ebp - 0x1ec], 0
mov eax, dword [ebp - 0x1ec]
not eax
cdq
mov ecx, dword [0x1007f18c]
push ecx
mov ecx, dword [0x1007f188]
push ecx
push edx
push eax
call fcn.1005a1b0
mov dword [ebp - 0x35c], eax
mov dword [ebp - 0x358], edx
mov edx, dword [ebp - 0x35c]
or edx, dword [ebp - 0x358]
je 0x1003ebc5
mov al, byte [0x1007fc38]
mov byte [ebp - 0x13], al
movsx ecx, byte [ebp - 0x13]
imul eax, ecx, 0x305f6f55
cdq
mov ecx, dword [0x1007f120]
sub ecx, eax
mov eax, dword [0x1007f124]
sbb eax, edx
mov dword [0x1007f120], ecx
mov dword [0x1007f124], eax
jmp 0x1003ec32
mov ecx, dword [0x1007f154]
not ecx
xor edx, edx
mov esi, dword [ebp - 0x54]
mov edi, dword [ebp - 0x50]
xor esi, ecx
xor edi, edx
not esi
not edi
mov eax, dword [0x1007f1a4]
cdq
push edi
push esi
push edx
push eax
call fcn.1005a1b0
mov dword [ebp - 0x364], eax
mov dword [ebp - 0x360], edx
mov eax, dword [ebp - 0x364]
or eax, dword [ebp - 0x360]
jne 0x1003ec14
mov dword [ebp - 0x1f0], 1
jmp 0x1003ec1e
mov dword [ebp - 0x1f0], 0
mov ecx, dword [str.C]
not ecx
add ecx, dword [ebp - 0x1f0]
mov byte [0x1007f027], cl
mov edx, dword [ebp - 0xb8]
add edx, 0x105
mov dword [ebp - 0x2ac], edx
jmp 0x1003ec55
jmp 0x1003ec75
mov eax, dword [ebp - 0xb8]
add eax, 0x13a
mov dword [ebp - 0x4e4], eax
mov eax, dword [ebp - 0x44]
cdq
mov dword [ebp - 0x36c], eax
mov dword [ebp - 0x368], edx
mov ecx, dword [0x1007f1b0]
cmp ecx, dword [ebp - 0x36c]
jne 0x1003ee78
mov edx, dword [0x1007f1b4]
cmp edx, dword [ebp - 0x368]
jne 0x1003ee78
movzx eax, word [0x1007f168]
cdq
mov dword [ebp - 0x374], eax
mov dword [ebp - 0x370], edx
mov eax, dword [ebp - 0x2c]
cmp eax, dword [ebp - 0x374]
jne 0x1003ecf0
mov ecx, dword [ebp - 0x28]
cmp ecx, dword [ebp - 0x370]
jne 0x1003ecf0
mov dword [ebp - 0x1f4], 1
jmp 0x1003ecfa
mov dword [ebp - 0x1f4], 0
cmp dword [ebp - 0x2c], 0x56
jne 0x1003ed12
cmp dword [ebp - 0x28], 0
jne 0x1003ed12
mov dword [ebp - 0x1f8], 1
jmp 0x1003ed1c
mov dword [ebp - 0x1f8], 0
mov edx, dword [ebp - 0x1f4]
cmp edx, dword [ebp - 0x1f8]
jge 0x1003ee2e
mov eax, dword [ebp - 0x64]
cmp dword [ebp - 0x40], eax
jbe 0x1003ed42
mov dword [ebp - 0x1fc], 1
jmp 0x1003ed4c
mov dword [ebp - 0x1fc], 0
cmp dword [ebp - 0x40], 0x32
jbe 0x1003ed5e
mov dword [ebp - 0x200], 1
jmp 0x1003ed68
mov dword [ebp - 0x200], 0
mov ecx, dword [ebp - 0x1fc]
cmp ecx, dword [ebp - 0x200]
jl 0x1003edb0
mov edx, 0xfe
mov word [0x1007f1b8], dx
mov eax, dword [0x1007f1d0]
mov ecx, dword [0x1007f1d4]
add eax, 1
adc ecx, 0
mov dword [0x1007f1d0], eax
mov dword [0x1007f1d4], ecx
movzx edx, byte [0x1007f04e]
add edx, dword [ebp - 0x4c]
add edx, dword [ebp - 0x4c]
mov dword [ebp - 0x4c], edx
jmp 0x1003ee2c
mov eax, dword [0x1007f154]
xor ecx, ecx
xor eax, dword [ebp - 0x2c]
xor ecx, dword [ebp - 0x28]
mov dword [ebp - 0x37c], eax
mov dword [ebp - 0x378], ecx
mov edx, dword [ebp - 0x37c]
or edx, dword [ebp - 0x378]
jne 0x1003ede3
mov dword [ebp - 0x204], 1
jmp 0x1003eded
mov dword [ebp - 0x204], 0
imul eax, dword [ebp - 0x204], 0xc
cdq
mov esi, eax
movzx eax, byte [ebp - 0x11]
not eax
and eax, 0xd5
cdq
push edx
push eax
mov eax, dword [0x1007f124]
push eax
mov ecx, dword [0x1007f120]
push ecx
call fcn.1005a1b0
add eax, esi
mov dword [str.C], eax
mov dx, word [0x1007f1b8]
mov word [0x1007f1b8], dx
jmp 0x1003ee78
cmp dword [ebp - 0x64], 0x82
jne 0x1003ee78
mov eax, dword [ebp - 0x40]
xor ecx, ecx
mov edx, dword [ebp - 0x5c]
push edx
mov edx, dword [ebp - 0x60]
push edx
push ecx
push eax
call fcn.1005a1b0
mov ecx, dword [ebp - 0x40]
xor esi, esi
push edx
push eax
push esi
push ecx
call fcn.1005a1b0
mov dword [ebp - 0x40], eax
mov edx, dword [str.C]
xor eax, eax
push 0xa6070
push 0x9e2cef81
push eax
push edx
call fcn.1005a1b0
mov byte [ebp - 0x13], al
mov ecx, dword [ebp - 0xb8]
add ecx, 0x22e
mov dword [ebp - 0x208], ecx
movzx eax, byte [0x1007f026]
cdq
sub eax, 0x879d11f8
sbb edx, 0x2cd6b
mov dword [0x1007f198], eax
mov dword [0x1007f19c], edx
movzx edx, word [0x1007f1b8]
add edx, dword [ebp - 0x48]
mov eax, dword [ebp - 0x48]
sub eax, edx
mov dword [ebp - 0x48], eax
call fcn.10020210
test eax, eax
je 0x1003f166
movzx ecx, word [ebp - 0x20]
cmp dword [ebp - 0x4c], ecx
jae 0x1003eeef
movzx edx, byte [ebp - 0x15]
add edx, 0x562ac1cd
mov word [0x1007f15c], dx
movzx eax, word [ebp - 0x20]
imul eax, eax, 0x74
cdq
mov dword [ebp - 0x3c], eax
mov dword [ebp - 0x38], edx
imul ecx, dword [ebp - 0x58], 0xcf
mov word [0x1007f16c], cx
mov edx, dword [ebp - 0x2ac]
add edx, dword [ebp - 0x208]
cmp dword [ebp - 0x208], edx
je 0x1003f166
movsx eax, word [ebp - 0x24]
cdq
add eax, 0x9ad4d41b
adc edx, 0x5a305
mov dword [0x1007f178], eax
mov dword [0x1007f17c], edx
mov eax, dword [0x1007f144]
cdq
mov ecx, eax
mov esi, edx
xor ecx, dword [ebp - 0x3c]
xor esi, dword [ebp - 0x38]
movsx eax, byte [ebp - 0x14]
cdq
add eax, dword [ebp - 0x3c]
adc edx, dword [ebp - 0x38]
xor eax, ecx
xor edx, esi
mov dword [0x1007f138], eax
mov dword [0x1007f13c], edx
push 0x10067330
call dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
mov dword [ebp - 0x4c], eax
cmp dword [ebp - 0x4c], 0
je 0x1003ef9a
push 0
push 0x9e
mov edx, dword [ebp - 0x28]
push edx
mov eax, dword [ebp - 0x2c]
push eax
call fcn.1005a1b0
mov dword [ebp - 0x54], eax
mov dword [ebp - 0x50], edx
mov ecx, dword [ebp - 0x34]
xor ecx, 0xbc12b8bd
mov eax, dword [ebp - 0x80]
cdq
add eax, ecx
mov dword [ebp - 0x80], eax
call fcn.100172f0
test eax, eax
je 0x1003f166
movsx edx, word [ebp - 0x24]
mov eax, dword [ebp - 0x80]
imul eax, edx
mov dword [ebp - 0x80], eax
mov ecx, dword [ebp - 0x78]
add ecx, 0x353adde9
xor edx, edx
mov dword [0x1007f188], ecx
mov dword [0x1007f18c], edx
movzx eax, byte [ebp - 0x12]
cdq
mov dword [ebp - 0x384], eax
mov dword [ebp - 0x380], edx
mov eax, dword [ebp - 0x28]
cmp eax, dword [ebp - 0x380]
jg 0x1003f000
jl 0x1003eff4
mov ecx, dword [ebp - 0x2c]
cmp ecx, dword [ebp - 0x384]
jae 0x1003f000
mov dword [ebp - 0x20c], 1
jmp 0x1003f00a
mov dword [ebp - 0x20c], 0
cmp dword [ebp - 0x28], 0
jg 0x1003f024
jl 0x1003f018
cmp dword [ebp - 0x2c], 0x5f
jae 0x1003f024
mov dword [ebp - 0x210], 1
jmp 0x1003f02e
mov dword [ebp - 0x210], 0
mov edx, dword [ebp - 0x20c]
cmp edx, dword [ebp - 0x210]
jle 0x1003f0de
mov eax, dword [0x1007f154]
xor ecx, ecx
mov dword [ebp - 0x38c], eax
mov dword [ebp - 0x388], ecx
mov edx, dword [ebp - 0x38c]
cmp edx, dword [0x1007f188]
jne 0x1003f06f
mov eax, dword [ebp - 0x388]
cmp eax, dword [0x1007f18c]
je 0x1003f098
mov eax, dword [ebp - 0x44]
cdq
push 0x98270
push 0xc0de2fc3
push edx
push eax
call fcn.1005a1b0
mov dword [0x1007f120], eax
mov dword [0x1007f124], edx
mov dword [ebp - 0x58], 0x78b225f2
jmp 0x1003f0d9
mov ecx, dword [0x1007f160]
mov edx, dword [0x1007f164]
mov dword [ebp - 0x4e8], edx
mov eax, dword [ebp - 0x48]
cdq
sub eax, ecx
mov dword [ebp - 0x48], eax
mov eax, dword [ebp - 0x48]
add eax, dword [ebp - 0x58]
mov dword [ebp - 0x48], eax
mov ecx, dword [0x1007f198]
mov esi, dword [0x1007f19c]
movsx eax, byte [ebp - 0x14]
cdq
push esi
push ecx
push edx
push eax
call fcn.1005a1b0
mov byte [ebp - 0x14], al
jmp 0x1003f15f
mov edx, dword [0x1007f154]
not edx
xor eax, eax
mov dword [ebp - 0x394], edx
mov dword [ebp - 0x390], eax
mov ecx, dword [ebp - 0x394]
cmp ecx, dword [0x1007f1c0]
jne 0x1003f15f
mov edx, dword [ebp - 0x390]
cmp edx, dword [0x1007f1c4]
jne 0x1003f15f
movzx eax, byte [ebp - 0x12]
cdq
sub eax, 0x4153df60
mov dword [0x1007f158], eax
movzx eax, word [0x1007f1b8]
cdq
mov ecx, dword [ebp - 0x54]
mov esi, dword [ebp - 0x50]
add ecx, eax
adc esi, edx
mov dword [ebp - 0x54], ecx
mov dword [ebp - 0x50], esi
movzx eax, word [0x1007f16c]
cdq
push 0x5f1c3
push 0x5ec7f2d3
push edx
push eax
call fcn.1005a1b0
mov ecx, eax
mov eax, dword [0x1007f1a4]
cdq
sub eax, ecx
mov dword [0x1007f1a4], eax
mov eax, 1
jmp 0x1003f1a7
mov byte [ebp - 0x11], 1
mov eax, dword [ebp - 0x58]
and eax, 0x235f6bca
cdq
mov ecx, dword [ebp - 0x74]
mov esi, dword [ebp - 0x70]
add ecx, eax
adc esi, edx
mov dword [ebp - 0x74], ecx
mov dword [ebp - 0x70], esi
xor eax, eax
jmp 0x1003f1a7
movzx eax, byte [0x1007f027]
cdq
sub eax, 0xa080e8c9
mov dword [0x1007f158], eax
mov dl, byte [0x1007fc38]
mov byte [ebp - 0x13], dl
mov eax, 1
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4