Function at 0x10037eaf
Capabilities:
Delete registry value
Parse pe header
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x10060277
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
push ecx
sub esp, 0x51c
push ebx
push esi
push edi
mov dword [ebp - 0x10], esp
mov dword [ebp - 0x180], 0x4e1a
mov dword [ebp - 0xac], 0xfbce008f
mov dword [ebp - 0x84], 0xfffffffa
mov dword [ebp - 0x54], 0x213ed423
mov dword [ebp - 0x304], 0
mov dword [ebp - 0x288], 0xfffffffd
cmp dword [ebp - 0x180], 0
je 0x10038093
mov dword [ebp - 0x17c], 0xa59c1763
and dword [ebp - 0x390], 0
and dword [ebp - 0x38c], 0
and dword [ebp - 0x388], 0
and dword [ebp - 0x384], 0
lea ecx, [ebp - 0x195]
call fcn.10004111
push eax
lea eax, [ebp - 0x380]
push eax
lea eax, [ebp - 0x390]
push eax
lea ecx, [ebp - 0x4cc]
call fcn.100144e5
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0x3a8]
call fcn.100144bf
and dword [ebp - 4], 0
mov dword [ebp - 0xf0], 6
mov eax, dword [ebp - 0x17c]
mov dword [ebp - 0x250], eax
push 0
lea ecx, [ebp - 0x3a8]
call fcn.10003ac4
mov ecx, dword [ebp - 0x250]
mov dword [eax], ecx
mov eax, dword [ebp - 0x250]
mov dword [ebp - 0xf0], eax
mov eax, dword [ebp - 0x17c]
mov dword [ebp - 0x25c], eax
push 0
lea ecx, [ebp - 0x3a8]
call fcn.10003ac4
mov ecx, dword [ebp - 0x25c]
mov dword [eax], ecx
mov eax, dword [ebp - 0xf0]
imul eax, dword [ebp - 0x17c]
add eax, dword [ebp - 0x17c]
cmp dword [ebp - 0x25c], eax
jge 0x10037ff8
mov dword [ebp - 0x264], 1
jmp 0x10037fff
and dword [ebp - 0x264], 0
mov eax, 0x7adf
sub eax, dword [ebp - 0x264]
cmp eax, dword [ebp - 0xac]
jge 0x1003801e
mov dword [ebp - 0x260], 1
jmp 0x10038025
and dword [ebp - 0x260], 0
cmp dword [ebp - 0x260], 1
jg 0x1003803a
mov dword [ebp - 0x254], 1
jmp 0x10038041
and dword [ebp - 0x254], 0
mov eax, dword [ebp - 0x254]
mov dword [ebp - 0xf0], eax
cmp dword [ebp - 0xf0], 0x58e9
je 0x10038065
mov dword [ebp - 0x1b0], 1
jmp 0x1003806c
and dword [ebp - 0x1b0], 0
mov eax, dword [ebp - 0xac]
imul eax, dword [ebp - 0x1b0]
mov dword [ebp - 0x84], eax
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x3a8]
call fcn.10003a4f
jmp 0x100384ff
mov dword [ebp - 0x34], 0
mov dword [ebp - 0x330], 0x71e9942c
mov dword [ebp - 0x32c], 0x71e9942c
mov dword [ebp - 0x328], 0x71e9942c
mov dword [ebp - 0x324], 0x71e9942c
mov dword [ebp - 0x3c4], 0xf1863d47
mov dword [ebp - 0x3c0], 0xf1863d47
mov dword [ebp - 0x3bc], 0xf1863d47
mov dword [ebp - 0x3b8], 0xf1863d47
mov dword [ebp - 0x1d8], 0x1107
mov dword [ebp - 0x310], str.wrsjdlj_lewwf_nuupajld_zngdqj_iwftrtj_coip_yafycv_pqnbobkc_ixjkvwvm_gfs_gibgvoi_fvblua
cmp dword [ebp - 0x1d8], 0x130b
jle 0x10038215
and dword [ebp - 0x168], 0
jmp 0x10038124
mov eax, dword [ebp - 0x168]
inc eax
mov dword [ebp - 0x168], eax
cmp dword [ebp - 0x168], 0x21c7
jge 0x10038215
and dword [ebp - 0x14c], 0
jmp 0x1003814a
mov eax, dword [ebp - 0x14c]
inc eax
mov dword [ebp - 0x14c], eax
cmp dword [ebp - 0x14c], 0x213c
jge 0x10038210
and dword [ebp - 0xfc], 0
jmp 0x10038170
mov eax, dword [ebp - 0xfc]
inc eax
mov dword [ebp - 0xfc], eax
cmp dword [ebp - 0xfc], 0x7e75
jge 0x1003820b
and dword [ebp - 0x16c], 0
jmp 0x10038196
mov eax, dword [ebp - 0x16c]
inc eax
mov dword [ebp - 0x16c], eax
cmp dword [ebp - 0x16c], 0x3bed
jge 0x10038206
mov eax, dword [ebp - 0x168]
imul eax, dword [ebp - 0x14c]
and eax, dword [ebp - 0xfc]
and eax, dword [ebp - 0x16c]
cdq
mov dword [ebp - 0x2d4], eax
mov dword [ebp - 0x2d0], edx
push dword [ebp - 0x2d0]
push dword [ebp - 0x2d4]
lea ecx, [ebp - 0x4fc]
call fcn.10001a95
pop ecx
pop ecx
mov dword [ebp - 0x334], eax
mov ecx, dword [ebp - 0x334]
call fcn.10003731
push eax
call fcn.10047ad3
pop ecx
lea ecx, [ebp - 0x4fc]
call fcn.10003727
jmp 0x10038189
jmp 0x10038163
jmp 0x1003813d
jmp 0x10038117
mov eax, dword [ebp - 0x34]
cmp eax, dword [ebp - 0x34]
je 0x10038229
mov dword [ebp - 0x1b8], 1
jmp 0x10038230
and dword [ebp - 0x1b8], 0
cmp dword [ebp - 0xac], 1
je 0x10038245
mov dword [ebp - 0x210], 1
jmp 0x1003824c
and dword [ebp - 0x210], 0
mov eax, dword [ebp - 0x84]
imul eax, dword [ebp - 0x210]
test eax, eax
jne 0x1003826c
cmp dword [ebp - 0x34], 0
jne 0x1003826c
and dword [ebp - 0x240], 0
jmp 0x10038276
mov dword [ebp - 0x240], 1
mov eax, dword [ebp - 0x1b8]
cmp eax, dword [ebp - 0x240]
jle 0x10038288
cmp dword [ebp - 0x34], 0
cmp dword [ebp - 0xac], 0x5bea
jge 0x100382a0
mov dword [ebp - 0x1c0], 1
jmp 0x100382a7
and dword [ebp - 0x1c0], 0
mov eax, dword [ebp - 0x54]
cmp dword [ebp - 0x1c0], eax
jl 0x100382be
mov dword [ebp - 0x218], 1
jmp 0x100382c5
and dword [ebp - 0x218], 0
mov eax, dword [ebp - 0x180]
cmp dword [ebp - 0x218], eax
jge 0x100382df
mov dword [ebp - 0x1c8], 1
jmp 0x100382e6
and dword [ebp - 0x1c8], 0
mov eax, dword [ebp - 0xac]
cmp eax, dword [ebp - 0x1c8]
jge 0x10038300
mov dword [ebp - 0x258], 1
jmp 0x10038307
and dword [ebp - 0x258], 0
mov eax, dword [ebp - 0x258]
imul eax, dword [ebp - 0x84]
mov dword [ebp - 0x1d0], eax
push 4
pop eax
shl eax, 1
mov ecx, dword [ebp - 0x1d0]
mov dword [ebp + eax - 0x330], ecx
cmp dword [ebp - 0x1d0], 0x9e4a0435
je 0x1003835b
mov byte [ebp - 0x68], 0
movzx eax, byte [ebp - 0x68]
test eax, eax
je 0x10038359
push 0
push 0
push 0x263b
push 0
push 1
push 0
call dword [sym.imp.ADVAPI32.dll_AdjustTokenPrivileges]
jmp 0x100383bf
mov dword [ebp - 0x31c], 0xeb25
mov dword [ebp - 0x54], 0x1d
jmp 0x10038375
mov eax, dword [ebp - 0x54]
inc eax
mov dword [ebp - 0x54], eax
cmp dword [ebp - 0x54], 0x1d
jle 0x100383ab
cmp dword [ebp - 0x34], 0
jne 0x10038393
cmp dword [ebp - 0x304], 0
jne 0x10038393
and dword [ebp - 0x220], 0
jmp 0x1003839d
mov dword [ebp - 0x220], 1
mov eax, dword [ebp - 0x220]
mov dword [ebp - 0x31c], eax
jmp 0x1003836e
mov byte [ebp - 0x58], 0
movzx eax, byte [ebp - 0x58]
test eax, eax
je 0x100383bf
push 1
call dword [sym.imp.USER32.dll_ShowCursor]
mov dword [ebp - 4], 1
cmp dword [ebp - 0x1d8], 0xf54
jge 0x100383de
push dword [ebp - 0x310]
call fcn.10047ad3
pop ecx
jmp 0x100383fa
or dword [ebp - 4], 0xffffffff
jmp 0x10038404
mov eax, dword [ebp - 0x84]
mov dword [ebp - 0x54], eax
mov eax, dword [ebp - 0x34]
cmp eax, dword [ebp - 0x54]
jge 0x10038421
mov dword [ebp - 0x2b4], 1
jmp 0x10038428
and dword [ebp - 0x2b4], 0
mov eax, dword [ebp - 0x34]
mov dword [ebp - 0x450], eax
cmp dword [ebp - 0x288], 5
jg 0x10038446
mov dword [ebp - 0x2dc], 1
jmp 0x1003844d
and dword [ebp - 0x2dc], 0
mov eax, dword [ebp - 0x34]
mov dword [ebp - 0x444], eax
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x330], 0xfffffff7
jl 0x10038472
mov dword [ebp - 0x248], 1
jmp 0x10038479
and dword [ebp - 0x248], 0
mov eax, dword [ebp - 0x248]
sub eax, dword [ebp - 0x180]
jne 0x10038499
mov eax, 0xc499
test eax, eax
jne 0x10038499
and dword [ebp - 0x190], 0
jmp 0x100384a3
mov dword [ebp - 0x190], 1
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x190]
mov dword [ebp + eax - 0x330], ecx
mov eax, dword [ebp - 0x190]
mov dword [ebp - 0x84], eax
cmp dword [ebp - 0x84], 0
jne 0x100384e3
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0x330], 0
jne 0x100384e3
and dword [ebp - 0x1e0], 0
jmp 0x100384ed
mov dword [ebp - 0x1e0], 1
push 4
pop eax
shl eax, 1
mov ecx, dword [ebp - 0x1e0]
mov dword [ebp + eax - 0x3c4], ecx
cmp dword [ebp + 0x10], 0
jbe 0x100387be
movzx eax, byte [ebp + 0x14]
test eax, eax
je 0x100387be
mov dword [ebp - 0x424], 0xfffffffc
mov dword [ebp - 0x294], 0x182e
cmp dword [ebp - 0x294], 0x878
jge 0x1003866a
lea eax, [ebp - 0x1a0]
push eax
lea eax, [ebp - 0x3c]
push eax
lea eax, [ebp - 0xa8]
push eax
push str._d__d__d_n
call fcn.100477eb
add esp, 0x10
cvtsi2sd xmm0, dword [ebp - 0xa8]
mov eax, dword [ebp - 0xa8]
shl eax, 2
imul eax, dword [ebp - 0x1a0]
mov ecx, dword [ebp - 0x3c]
imul ecx, dword [ebp - 0x3c]
sub ecx, eax
movsd qword [ebp - 0x3e4], xmm0
call fcn.1003bf71
mov eax, dword [ebp - 0x3c]
neg eax
cvtsi2sd xmm1, eax
subsd xmm1, xmm0
divsd xmm1, qword [0x1006db10]
movsd xmm0, qword [ebp - 0x3e4]
divsd xmm1, xmm0
movsd qword [ebp - 0x364], xmm1
cvtsi2sd xmm0, dword [ebp - 0xa8]
mov eax, dword [ebp - 0xa8]
shl eax, 2
imul eax, dword [ebp - 0x1a0]
mov ecx, dword [ebp - 0x3c]
imul ecx, dword [ebp - 0x3c]
sub ecx, eax
movsd qword [ebp - 0x440], xmm0
call fcn.1003bf71
mov eax, dword [ebp - 0x3c]
neg eax
cvtsi2sd xmm1, eax
addsd xmm1, xmm0
divsd xmm1, qword [0x1006db10]
movsd xmm0, qword [ebp - 0x440]
divsd xmm1, xmm0
movsd qword [ebp - 0x40c], xmm1
mov eax, dword [ebp - 0xa8]
shl eax, 2
imul eax, dword [ebp - 0x1a0]
mov ecx, dword [ebp - 0x3c]
imul ecx, dword [ebp - 0x3c]
cmp ecx, eax
jne 0x1003863f
push ecx
push ecx
movsd xmm0, qword [ebp - 0x364]
movsd qword [esp], xmm0
push str._.5lf_n
call fcn.10047ad3
add esp, 0xc
jmp 0x1003866a
push ecx
push ecx
movsd xmm0, qword [ebp - 0x40c]
movsd qword [esp], xmm0
push ecx
push ecx
movsd xmm0, qword [ebp - 0x364]
movsd qword [esp], xmm0
push str._.5lf__.5lf_n
call fcn.10047ad3
add esp, 0x14
mov dword [ebp - 0x448], 0xcd795364
mov dword [ebp - 0xa4], 0x485bf25c
xor eax, eax
inc eax
je 0x100386d8
mov dword [ebp - 0x104], 0
jmp 0x1003869c
mov eax, dword [ebp - 0x104]
inc eax
mov dword [ebp - 0x104], eax
cmp dword [ebp - 0x104], 2
jge 0x100386b8
mov eax, dword [ebp - 0x104]
mov dword [ebp + eax*4 - 0x36c], 0xfffffffb
jmp 0x1003868f
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x36c]
inc eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x36c], eax
jmp 0x100387aa
mov dword [ebp - 0x2e4], 4
mov dword [ebp - 0x228], 0xffffffff
mov dword [ebp - 0xa4], 0xffffffe3
jmp 0x10038705
mov eax, dword [ebp - 0xa4]
inc eax
mov dword [ebp - 0xa4], eax
cmp dword [ebp - 0xa4], 0x19
jl 0x100387aa
mov dword [ebp - 0x2a0], 0xe028f4e1
mov dword [ebp - 0x174], 0
jmp 0x10038735
mov eax, dword [ebp - 0x174]
inc eax
mov dword [ebp - 0x174], eax
cmp dword [ebp - 0x174], 2
jge 0x10038751
mov eax, dword [ebp - 0x174]
mov dword [ebp + eax*4 - 0x374], 1
jmp 0x10038728
mov eax, dword [ebp - 0x2e4]
mov dword [ebp - 0x228], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x374]
cmp eax, dword [ebp - 0x228]
jl 0x1003877e
mov dword [ebp - 0x1e8], 1
jmp 0x10038785
and dword [ebp - 0x1e8], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x374]
add eax, dword [ebp - 0xa4]
imul eax, dword [ebp - 0x1e8]
mov dword [ebp - 0x2a0], eax
jmp 0x100386f8
movzx eax, word [ebp + 0x10]
push eax
push dword [ebp + 8]
call fcn.10030cc4
pop ecx
pop ecx
jmp 0x1003a3d7
push 4
lea ecx, [ebp - 0x3d0]
call fcn.100039f2
mov dword [ebp - 4], 3
mov dword [ebp - 0x158], 0xfffffff7
mov dword [ebp - 0x3e8], 0x7fa5c62e
mov dword [ebp - 0x44c], 0xa924c000
mov dword [ebp - 0x10c], 0
jmp 0x10038809
mov eax, dword [ebp - 0x10c]
inc eax
mov dword [ebp - 0x10c], eax
cmp dword [ebp - 0x10c], 4
jge 0x10038828
push dword [ebp - 0x10c]
lea ecx, [ebp - 0x3d0]
call fcn.10003ac4
and dword [eax], 0
jmp 0x100387fc
mov dword [ebp - 0x158], 3
jmp 0x10038841
mov eax, dword [ebp - 0x158]
dec eax
mov dword [ebp - 0x158], eax
cmp dword [ebp - 0x158], 0
jl 0x10038863
mov dword [ebp - 0x268], 0
mov eax, dword [ebp - 0x268]
inc eax
mov dword [ebp - 0x268], eax
jmp 0x10038834
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x3d0]
call fcn.10003a4f
cmp dword [ebp + 0x10], 0
jne 0x1003975e
mov edx, dword [ebp + 8]
mov ecx, dword [ebp + 0xc]
call fcn.10028c93
mov dword [ebp - 0x100], eax
push 2
lea ecx, [ebp - 0x350]
call fcn.100039f2
mov dword [ebp - 4], 4
mov dword [ebp - 0x80], 0x3532fe22
mov dword [ebp - 0x114], 0
jmp 0x100388c1
mov eax, dword [ebp - 0x114]
inc eax
mov dword [ebp - 0x114], eax
cmp dword [ebp - 0x114], 2
jge 0x100388e3
push dword [ebp - 0x114]
lea ecx, [ebp - 0x350]
call fcn.10003ac4
mov dword [eax], 9
jmp 0x100388b4
mov dword [ebp - 0x80], 0
jmp 0x100388f3
mov eax, dword [ebp - 0x80]
inc eax
mov dword [ebp - 0x80], eax
cmp dword [ebp - 0x80], 1
jg 0x1003891d
push dword [ebp - 0x80]
lea ecx, [ebp - 0x350]
call fcn.10003ac4
mov esi, eax
push dword [ebp - 0x80]
lea ecx, [ebp - 0x350]
call fcn.10003ac4
mov eax, dword [eax]
mov dword [esi], eax
jmp 0x100388ec
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x350]
call fcn.10003a4f
mov dword [ebp - 0x30], 0x96dd1e1e
mov dword [ebp - 0x88], 0xf1636717
mov dword [ebp - 0x28], 0
jmp 0x1003894d
mov eax, dword [ebp - 0x28]
inc eax
mov dword [ebp - 0x28], eax
cmp dword [ebp - 0x28], 1
jge 0x10038963
mov eax, dword [ebp - 0x28]
mov dword [ebp + eax*4 - 0x2ac], 1
jmp 0x10038946
mov dword [ebp - 0x28], 0
jmp 0x10038973
mov eax, dword [ebp - 0x28]
inc eax
mov dword [ebp - 0x28], eax
cmp dword [ebp - 0x28], 3
jge 0x10038989
mov eax, dword [ebp - 0x28]
mov dword [ebp + eax*4 - 0x47c], 0xffffffff
jmp 0x1003896c
mov dword [ebp - 0x30], 0
jmp 0x10038999
mov eax, dword [ebp - 0x30]
inc eax
mov dword [ebp - 0x30], eax
cmp dword [ebp - 0x30], 0
jg 0x100389b3
mov byte [ebp - 0x65], 0
movzx eax, byte [ebp - 0x65]
test eax, eax
je 0x100389b1
call dword [sym.imp.KERNEL32.dll_GetTickCount]
jmp 0x10038992
mov dword [ebp - 0x30], 0xffffffe7
jmp 0x100389c3
mov eax, dword [ebp - 0x30]
inc eax
mov dword [ebp - 0x30], eax
cmp dword [ebp - 0x30], 0x14
jge 0x10038c33
mov dword [ebp - 0x2ec], 0xd24b5e49
mov dword [ebp - 0x410], 8
mov dword [ebp - 0x94], 2
mov dword [ebp - 0x2fc], 0xdc1b2d86
mov dword [ebp - 0x178], 0
jmp 0x10038a0e
mov eax, dword [ebp - 0x178]
inc eax
mov dword [ebp - 0x178], eax
cmp dword [ebp - 0x178], 3
jge 0x10038a2a
mov eax, dword [ebp - 0x178]
mov dword [ebp + eax*4 - 0x3fc], 0xfffb
jmp 0x10038a01
push 4
pop eax
shl eax, 1
mov dword [ebp + eax - 0x3fc], 1
cmp dword [ebp - 0x2ec], 0
jge 0x10038a48
or eax, 0xffffffff
je 0x10038a5d
mov eax, 0x81b5
test eax, eax
je 0x10038a5d
mov dword [ebp - 0x1f0], 1
jmp 0x10038a64
and dword [ebp - 0x1f0], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x2ac]
cmp dword [ebp - 0x1f0], eax
jg 0x10038c0c
mov dword [ebp - 0x2f4], 0
mov dword [ebp - 0x94], 9
mov dword [ebp - 0x94], 0xfffffff2
jmp 0x10038aaa
mov eax, dword [ebp - 0x94]
dec eax
mov dword [ebp - 0x94], eax
cmp dword [ebp - 0x94], 0xffffffee
jge 0x10038c0a
push 2
lea ecx, [ebp - 0x35c]
call fcn.100039f2
mov dword [ebp - 4], 5
mov dword [ebp - 0x11c], 0
jmp 0x10038ae4
mov eax, dword [ebp - 0x11c]
inc eax
mov dword [ebp - 0x11c], eax
cmp dword [ebp - 0x11c], 2
jge 0x10038b06
push dword [ebp - 0x11c]
lea ecx, [ebp - 0x35c]
call fcn.10003ac4
mov dword [eax], 1
jmp 0x10038ad7
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x3fc], 0
jne 0x10038b62
mov eax, dword [ebp - 0x88]
mov dword [ebp - 0x438], eax
mov esi, dword [ebp - 0x88]
push 1
lea ecx, [ebp - 0x35c]
call fcn.10003ac4
cmp esi, dword [eax]
jle 0x10038b45
mov dword [ebp - 0x230], 1
jmp 0x10038b4c
and dword [ebp - 0x230], 0
mov eax, 0x982fc9ae
sub eax, dword [ebp - 0x230]
jne 0x10038b62
and dword [ebp - 0x1f8], 0
jmp 0x10038b6c
mov dword [ebp - 0x1f8], 1
mov esi, dword [ebp - 0x1f8]
sub esi, dword [ebp - 0x30]
push 1
lea ecx, [ebp - 0x35c]
call fcn.10003ac4
mov eax, dword [eax]
sub eax, esi
cmp eax, 1
jg 0x10038b97
mov dword [ebp - 0x1a4], 1
jmp 0x10038b9e
and dword [ebp - 0x1a4], 0
mov eax, dword [ebp - 0x1a4]
mov dword [ebp - 0x88], eax
mov eax, dword [ebp - 0x88]
cmp eax, dword [ebp - 0x2f4]
je 0x10038bc4
mov dword [ebp - 0x200], 1
jmp 0x10038bcb
and dword [ebp - 0x200], 0
mov eax, dword [ebp - 0x200]
dec eax
mov dword [ebp - 0x238], eax
push 4
pop eax
shl eax, 1
mov ecx, dword [ebp - 0x238]
mov dword [ebp + eax - 0x47c], ecx
mov eax, dword [ebp - 0x238]
mov dword [ebp - 0x2fc], eax
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x35c]
call fcn.10003a4f
jmp 0x10038a9d
jmp 0x10038c2e
mov byte [ebp - 0x5d], 0
movzx eax, byte [ebp - 0x5d]
test eax, eax
je 0x10038c20
push 0
call dword [sym.imp.KERNEL32.dll_GetFileAttributesA]
cmp dword [ebp - 0x88], 0
je 0x10038c2e
jmp 0x100389bc
jmp 0x100389bc
cmp dword [0x100ffed0], 0
jne 0x1003972c
mov dword [ebp - 0x2f8], 0x9df2
lea eax, [ebp - 0x2f8]
push eax
call fcn.10030bec
pop ecx
mov dword [ebp - 0x20c], eax
push 2
lea ecx, [ebp - 0x39c]
call fcn.100039f2
mov dword [ebp - 4], 6
mov dword [ebp - 0x9c], 0x79763266
mov dword [ebp - 0x160], 0
jmp 0x10038c94
mov eax, dword [ebp - 0x160]
inc eax
mov dword [ebp - 0x160], eax
cmp dword [ebp - 0x160], 2
jge 0x10038cb3
push dword [ebp - 0x160]
lea ecx, [ebp - 0x39c]
call fcn.10003ac4
and dword [eax], 0
jmp 0x10038c87
mov dword [ebp - 0x9c], 0
jmp 0x10038ccc
mov eax, dword [ebp - 0x9c]
inc eax
mov dword [ebp - 0x9c], eax
cmp dword [ebp - 0x9c], 1
jg 0x10038cef
push dword [ebp - 0x9c]
lea ecx, [ebp - 0x39c]
call fcn.10003ac4
cmp dword [eax], 0
je 0x10038ced
jmp 0x10038cef
jmp 0x10038cbf
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x39c]
call fcn.10003a4f
mov byte [ebp - 0xcc], 8
mov byte [ebp - 0xcb], 0xe7
mov byte [ebp - 0xca], 0
mov byte [ebp - 0xc9], 0x28
mov byte [ebp - 0xc8], 7
mov byte [ebp - 0xc7], 0x2e
mov byte [ebp - 0xc6], 0xa
mov byte [ebp - 0xc5], 0x2c
mov byte [ebp - 0xc4], 3
mov byte [ebp - 0xc3], 0x13
mov byte [ebp - 0xc2], 4
mov byte [ebp - 0xc1], 0x33
mov byte [ebp - 0xc0], 0xb
mov byte [ebp - 0xbf], 0x1d
mov byte [ebp - 0xbe], 2
mov byte [ebp - 0xbd], 0xc
mov byte [ebp - 0xbc], 5
mov byte [ebp - 0xbb], 6
mov byte [ebp - 0xba], 1
mov byte [ebp - 0xb9], 0xfa
mov byte [ebp - 0xb8], 0xc
mov byte [ebp - 0xb7], 0x25
mov byte [ebp - 0xb6], 9
mov byte [ebp - 0xb5], 0x39
mov byte [ebp - 0xb4], 1
mov byte [ebp - 0xb3], 0xb
mov byte [ebp - 0xb2], 6
mov byte [ebp - 0xb1], 0x16
xor eax, eax
inc eax
shl eax, 0
movzx eax, byte [ebp + eax - 0xcc]
and eax, 0x88
xor ecx, ecx
inc ecx
shl ecx, 0
movzx ecx, byte [ebp + ecx - 0xcc]
or ecx, 0x88
sub ecx, eax
xor eax, eax
inc eax
imul eax, eax, 0
movzx eax, byte [ebp + eax - 0xcc]
mov byte [ebp + eax - 0x278], cl
mov dword [ebp - 0x14], 2
and dword [ebp - 0xb0], 0
jmp 0x10038e18
mov eax, dword [ebp - 0x14]
inc eax
inc eax
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 0x1c
jae 0x10038ef6
xor eax, eax
inc eax
imul eax, eax, 0
movzx eax, byte [ebp + eax - 0xcc]
lea eax, [eax + eax + 2]
cmp dword [ebp - 0x14], eax
jne 0x10038e62
mov eax, dword [ebp - 0x14]
movzx eax, byte [ebp + eax - 0xcc]
inc eax
mov dword [ebp - 0xb0], eax
mov eax, dword [ebp - 0x14]
movzx eax, byte [ebp + eax - 0xcc]
mov ecx, dword [ebp - 0x14]
lea eax, [ecx + eax - 1]
mov dword [ebp - 0x14], eax
jmp 0x10038e10
mov eax, dword [ebp - 0x14]
sub eax, dword [ebp - 0xb0]
movzx eax, byte [ebp + eax - 0xce]
movsx eax, byte [ebp + eax - 0x278]
mov ecx, dword [ebp - 0x14]
movzx ecx, byte [ebp + ecx - 0xcb]
and ecx, eax
mov eax, dword [ebp - 0x14]
sub eax, dword [ebp - 0xb0]
movzx eax, byte [ebp + eax - 0xce]
movsx eax, byte [ebp + eax - 0x278]
mov edx, dword [ebp - 0x14]
movzx edx, byte [ebp + edx - 0xcb]
and edx, eax
mov eax, dword [ebp - 0x14]
sub eax, dword [ebp - 0xb0]
movzx eax, byte [ebp + eax - 0xce]
movsx eax, byte [ebp + eax - 0x278]
mov esi, dword [ebp - 0x14]
movzx ebx, byte [ebp + esi - 0xcb]
add ebx, eax
sub ebx, edx
sub ebx, ecx
mov eax, dword [ebp - 0x14]
movzx eax, byte [ebp + eax - 0xcc]
mov byte [ebp + eax - 0x278], bl
and dword [ebp - 0xb0], 0
jmp 0x10038e10
xor eax, eax
inc eax
imul eax, eax, 0xd
mov byte [ebp + eax - 0x278], 0
mov dword [ebp - 0x20], 8
mov dword [ebp - 0x24], 0x6bc3ec3d
mov dword [ebp - 0x8c], 0x8b7203fc
mov dword [ebp - 0x124], 0
jmp 0x10038f35
mov eax, dword [ebp - 0x124]
inc eax
mov dword [ebp - 0x124], eax
cmp dword [ebp - 0x124], 2
jge 0x10038f51
mov eax, dword [ebp - 0x124]
mov dword [ebp + eax*4 - 0x37c], 0x55375bb7
jmp 0x10038f28
mov dword [ebp - 0x20], 0x6af1124f
cmp dword [ebp - 0x20], 1
jg 0x10039158
mov dword [ebp - 0x194], 3
mov dword [ebp - 0x7c], 0
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x41c], eax
mov eax, dword [ebp - 0x194]
mov dword [ebp - 0x194], eax
cmp dword [ebp - 0x194], 0
jne 0x10038fa0
cmp dword [ebp - 0x20], 0
jne 0x10038fa0
and dword [ebp - 0x208], 0
jmp 0x10038faa
mov dword [ebp - 0x208], 1
cmp dword [ebp - 0x208], 0xb1e5
je 0x10038fc2
mov dword [ebp - 0x1a8], 1
jmp 0x10038fc9
and dword [ebp - 0x1a8], 0
mov eax, dword [ebp - 0x1a8]
sub eax, 0x2caeaba4
cmp eax, 0xc6eb81f9
je 0x10038fe7
mov dword [ebp - 0x1ac], 1
jmp 0x10038fee
and dword [ebp - 0x1ac], 0
cmp dword [ebp - 0x1ac], 0
je 0x10039009
cmp dword [ebp - 0x20], 0
je 0x10039009
mov dword [ebp - 0x1b4], 1
jmp 0x10039010
and dword [ebp - 0x1b4], 0
mov eax, dword [ebp - 0x7c]
cmp dword [ebp - 0x1b4], eax
jg 0x10039027
mov dword [ebp - 0x1bc], 1
jmp 0x1003902e
and dword [ebp - 0x1bc], 0
mov eax, dword [ebp - 0x7c]
cmp dword [ebp - 0x1bc], eax
je 0x1003904e
mov eax, 0x663c
test eax, eax
je 0x1003904e
mov dword [ebp - 0x1c4], 1
jmp 0x10039055
and dword [ebp - 0x1c4], 0
mov eax, dword [ebp - 0x1c4]
sub eax, dword [ebp - 0x7c]
imul eax, dword [ebp - 0x7c]
cmp eax, 9
ja 0x10039073
mov dword [ebp - 0x2bc], 1
jmp 0x1003907a
and dword [ebp - 0x2bc], 0
mov eax, dword [ebp - 0x20]
cmp eax, dword [ebp - 0x20]
je 0x1003908e
mov dword [ebp - 0x1cc], 1
jmp 0x10039095
and dword [ebp - 0x1cc], 0
cmp dword [ebp - 0x1cc], 0x880d0e10
jae 0x100390ad
mov dword [ebp - 0x1d4], 1
jmp 0x100390b4
and dword [ebp - 0x1d4], 0
cmp dword [ebp - 0x1d4], 0xae88
je 0x100390cc
mov dword [ebp - 0x1dc], 1
jmp 0x100390d3
and dword [ebp - 0x1dc], 0
mov eax, dword [ebp - 0x7c]
cmp dword [ebp - 0x1dc], eax
jne 0x100390ea
mov dword [ebp - 0x1e4], 1
jmp 0x100390f1
and dword [ebp - 0x1e4], 0
cmp dword [ebp - 0x1e4], 0xa870
jle 0x10039109
mov dword [ebp - 0x1ec], 1
jmp 0x10039110
and dword [ebp - 0x1ec], 0
cmp dword [ebp - 0x1ec], 5
jne 0x1003911d
cmp dword [ebp - 0x20], 0
mov dword [ebp - 0x24], 0x486aeba4
cmp dword [ebp - 0x24], 0x9124c6e1
jae 0x10039139
mov dword [ebp - 0x1f4], 1
jmp 0x10039140
and dword [ebp - 0x1f4], 0
mov eax, dword [ebp - 0x7c]
mov ecx, dword [ebp - 0x1f4]
lea eax, [ecx + eax - 1]
mov dword [ebp - 0x8c], eax
jmp 0x10039351
mov dword [ebp - 0x20], 0xfffffff8
jmp 0x10039168
mov eax, dword [ebp - 0x20]
dec eax
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 0xffffffee
jne 0x10039351
mov dword [ebp - 0x8c], 0
jmp 0x1003918b
mov eax, dword [ebp - 0x8c]
inc eax
mov dword [ebp - 0x8c], eax
cmp dword [ebp - 0x8c], 0x19
jle 0x1003934c
mov dword [ebp - 0x24], 0xfffffffb
jmp 0x100391a8
mov eax, dword [ebp - 0x24]
dec eax
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 0xffffffe7
jne 0x100391ef
mov dword [ebp - 0x170], 0xfffffffc
mov dword [ebp - 0x170], 0xfffffff5
jmp 0x100391d1
mov eax, dword [ebp - 0x170]
dec eax
mov dword [ebp - 0x170], eax
cmp dword [ebp - 0x170], 0xffffffec
jle 0x100391ed
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0x37c], 0xffffffff
jmp 0x100391c4
jmp 0x100391a1
mov dword [ebp - 0x24], 0
jmp 0x100391ff
mov eax, dword [ebp - 0x24]
inc eax
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 1
jg 0x10039347
mov dword [ebp - 0x1fc], 0x4bee
mov dword [ebp - 0x2c4], str.lsz_rrm_ydvdmelil_tastps_sbswohmgr
cmp dword [ebp - 0x1fc], 0x4bfe
jle 0x100392cd
and dword [ebp - 0x12c], 0
jmp 0x10039243
mov eax, dword [ebp - 0x12c]
inc eax
mov dword [ebp - 0x12c], eax
cmp dword [ebp - 0x12c], 0x474a
jge 0x100392cd
and dword [ebp - 0x150], 0
jmp 0x10039265
mov eax, dword [ebp - 0x150]
inc eax
mov dword [ebp - 0x150], eax
cmp dword [ebp - 0x150], 0x42da
jge 0x100392c8
mov eax, dword [ebp - 0x12c]
or eax, dword [ebp - 0x150]
cdq
mov dword [ebp - 0x284], eax
mov dword [ebp - 0x280], edx
push dword [ebp - 0x280]
push dword [ebp - 0x284]
lea ecx, [ebp - 0x4e4]
call fcn.10001a95
pop ecx
pop ecx
mov dword [ebp - 0x318], eax
mov ecx, dword [ebp - 0x318]
call fcn.10003731
push eax
call fcn.10047ad3
pop ecx
lea ecx, [ebp - 0x4e4]
call fcn.10003727
jmp 0x10039258
jmp 0x10039236
mov dword [ebp - 4], 7
cmp dword [ebp - 0x1fc], 0x48ac
jge 0x100392ec
push dword [ebp - 0x2c4]
call fcn.10047ad3
pop ecx
jmp 0x10039308
or dword [ebp - 4], 0xffffffff
jmp 0x10039312
mov byte [ebp - 0x55], 0
movzx eax, byte [ebp - 0x55]
test eax, eax
je 0x10039330
push 0x20ff
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_IsDlgButtonChecked]
mov eax, dword [ebp - 0x24]
cmp dword [ebp + eax*4 - 0x37c], 0
je 0x10039342
jmp 0x100391f8
jmp 0x100391f8
jmp 0x1003917e
jmp 0x10039161
lea eax, [ebp - 0x278]
push eax
lea ecx, [ebp - 0x52c]
call fcn.1003bb71
mov dword [ebp - 0x300], eax
mov eax, dword [ebp - 0x300]
mov dword [ebp - 0x2cc], eax
mov dword [ebp - 4], 9
mov edx, dword [ebp - 0x20c]
mov ecx, dword [ebp - 0x2cc]
call fcn.10028c93
mov dword [0x100ffed0], eax
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x52c]
call fcn.1000395f
and dword [ebp - 0x134], 0
jmp 0x100393b7
mov eax, dword [ebp - 0x134]
inc eax
mov dword [ebp - 0x134], eax
cmp dword [ebp - 0x134], 0xe
jae 0x100393d0
mov eax, dword [ebp - 0x134]
mov byte [ebp + eax - 0x278], 0
jmp 0x100393aa
mov byte [ebp - 0xec], 4
mov byte [ebp - 0xeb], 0x97
mov byte [ebp - 0xea], 2
mov byte [ebp - 0xe9], 0x11
mov byte [ebp - 0xe8], 5
mov byte [ebp - 0xe7], 0
mov byte [ebp - 0xe6], 7
mov byte [ebp - 0xe5], 0x17
mov byte [ebp - 0xe4], 0xb
mov byte [ebp - 0xe3], 1
mov byte [ebp - 0xe2], 3
mov byte [ebp - 0xe1], 0x58
mov byte [ebp - 0xe0], 0xe7
mov byte [ebp - 0xdf], 0x85
mov byte [ebp - 0xde], 9
mov byte [ebp - 0xdd], 0x10
mov byte [ebp - 0xdc], 0xa
mov byte [ebp - 0xdb], 6
mov byte [ebp - 0xda], 1
mov byte [ebp - 0xd9], 0x17
mov byte [ebp - 0xd8], 6
mov byte [ebp - 0xd7], 0x22
mov byte [ebp - 0xd6], 0
mov byte [ebp - 0xd5], 0x13
mov byte [ebp - 0xd4], 8
mov byte [ebp - 0xd3], 0x2c
mov byte [ebp - 0xd2], 0xd
mov byte [ebp - 0xd1], 0x38
mov byte [ebp - 0xd0], 3
mov byte [ebp - 0xcf], 0x36
mov byte [ebp - 0xce], 0xc
mov byte [ebp - 0xcd], 0x12
xor eax, eax
inc eax
shl eax, 0
movzx eax, byte [ebp + eax - 0xec]
and eax, 0xe3
xor ecx, ecx
inc ecx
shl ecx, 0
movzx ecx, byte [ebp + ecx - 0xec]
or ecx, 0xe3
sub ecx, eax
xor eax, eax
inc eax
imul eax, eax, 0
movzx eax, byte [ebp + eax - 0xec]
mov byte [ebp + eax - 0x344], cl
mov dword [ebp - 0x1c], 2
and dword [ebp - 0x15c], 0
jmp 0x10039506
mov eax, dword [ebp - 0x1c]
inc eax
inc eax
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 0x20
jae 0x1003969f
mov dword [ebp - 0x204], 0x6d1
mov dword [ebp - 0x27c], str.gipnk_enui_kndwpw_eig_ril_ugt_vfs_rjrmetq_bxbwoetm_cjtj
cmp dword [ebp - 0x204], 0xa6a
jle 0x100395a7
and dword [ebp - 0x154], 0
jmp 0x10039546
mov eax, dword [ebp - 0x154]
inc eax
mov dword [ebp - 0x154], eax
cmp dword [ebp - 0x154], 0x7c0e
jge 0x100395a7
and dword [ebp - 0x13c], 0
jmp 0x10039568
mov eax, dword [ebp - 0x13c]
inc eax
mov dword [ebp - 0x13c], eax
cmp dword [ebp - 0x13c], 0x4949
jge 0x100395a5
mov eax, dword [ebp - 0x154]
xor eax, dword [ebp - 0x13c]
cdq
mov dword [ebp - 0x290], eax
mov dword [ebp - 0x28c], edx
push dword [ebp - 0x28c]
push dword [ebp - 0x290]
mov ecx, 0x1007aeb8
call fcn.10003751
jmp 0x1003955b
jmp 0x10039539
xor eax, eax
inc eax
imul eax, eax, 0
movzx eax, byte [ebp + eax - 0xec]
lea eax, [eax + eax + 2]
cmp dword [ebp - 0x1c], eax
jne 0x100395ea
mov eax, dword [ebp - 0x1c]
movzx eax, byte [ebp + eax - 0xec]
inc eax
mov dword [ebp - 0x15c], eax
mov eax, dword [ebp - 0x1c]
movzx eax, byte [ebp + eax - 0xec]
mov ecx, dword [ebp - 0x1c]
lea eax, [ecx + eax - 1]
mov dword [ebp - 0x1c], eax
jmp 0x100394fe
mov dword [ebp - 4], 0xa
cmp dword [ebp - 0x204], 0x49e
jge 0x1003960d
mov edx, dword [ebp - 0x27c]
mov ecx, 0x1007aeb8
call fcn.10005cf1
jmp 0x10039629
or dword [ebp - 4], 0xffffffff
jmp 0x10039633
mov eax, dword [ebp - 0x1c]
sub eax, dword [ebp - 0x15c]
movzx eax, byte [ebp + eax - 0xee]
movsx eax, byte [ebp + eax - 0x344]
mov ecx, dword [ebp - 0x1c]
movzx ecx, byte [ebp + ecx - 0xeb]
and ecx, eax
mov eax, dword [ebp - 0x1c]
sub eax, dword [ebp - 0x15c]
movzx eax, byte [ebp + eax - 0xee]
movsx eax, byte [ebp + eax - 0x344]
mov edx, dword [ebp - 0x1c]
movzx edx, byte [ebp + edx - 0xeb]
or edx, eax
sub edx, ecx
mov eax, dword [ebp - 0x1c]
movzx eax, byte [ebp + eax - 0xec]
mov byte [ebp + eax - 0x344], dl
and dword [ebp - 0x15c], 0
jmp 0x100394fe
xor eax, eax
inc eax
imul eax, eax, 0xe
mov byte [ebp + eax - 0x344], 0
lea eax, [ebp - 0x344]
push eax
lea ecx, [ebp - 0x514]
call fcn.1003bb71
mov dword [ebp - 0x2d8], eax
mov eax, dword [ebp - 0x2d8]
mov dword [ebp - 0x308], eax
mov dword [ebp - 4], 0xc
mov edx, dword [ebp - 0x20c]
mov ecx, dword [ebp - 0x308]
call fcn.10028c93
mov dword [0x10101370], eax
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x514]
call fcn.1000395f
and dword [ebp - 0x144], 0
jmp 0x10039713
mov eax, dword [ebp - 0x144]
inc eax
mov dword [ebp - 0x144], eax
cmp dword [ebp - 0x144], 0xf
jae 0x1003972c
mov eax, dword [ebp - 0x144]
mov byte [ebp + eax - 0x344], 0
jmp 0x10039706
mov eax, dword [0x100ffed0]
cmp eax, dword [ebp - 0x100]
je 0x10039746
mov eax, dword [0x10101370]
cmp eax, dword [ebp - 0x100]
jne 0x1003975e
mov ecx, dword [ebp + 0xc]
call fcn.10003731
push eax
push dword [ebp + 8]
call fcn.10030cc4
pop ecx
pop ecx
jmp 0x1003a3d7
mov dword [ebp - 0x2e0], 0xffffffff
push 1
lea ecx, [ebp - 0x3b4]
call fcn.100039f2
mov dword [ebp - 4], 0xd
mov dword [ebp - 0x164], 0
jmp 0x10039795
mov eax, dword [ebp - 0x164]
inc eax
mov dword [ebp - 0x164], eax
cmp dword [ebp - 0x164], 1
jge 0x100397b7
push dword [ebp - 0x164]
lea ecx, [ebp - 0x3b4]
call fcn.10003ac4
mov dword [eax], 0x60f57a7c
jmp 0x10039788
mov esi, dword [ebp - 0x2e0]
push 0
lea ecx, [ebp - 0x3b4]
call fcn.10003ac4
mov dword [eax], esi
mov byte [ebp - 0x57], 0
movzx eax, byte [ebp - 0x57]
test eax, eax
je 0x1003980d
push 0x25e5
push 0x1259
push 0x1dec
push 0x1c2e
push 0xcda
push 0
push 0
push 0
push 0
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.USER32.dll_DrawStateW]
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x3b4]
call fcn.10003a4f
mov eax, dword [ebp + 8]
mov dword [ebp - 0xf8], eax
mov dword [ebp - 0x38], 6
mov dword [ebp - 0xf4], 0
jmp 0x10039845
mov eax, dword [ebp - 0xf4]
inc eax
mov dword [ebp - 0xf4], eax
cmp dword [ebp - 0xf4], 1
jge 0x10039861
mov eax, dword [ebp - 0xf4]
mov dword [ebp + eax*4 - 0x214], 0x921ded68
jmp 0x10039838
mov dword [ebp - 0x38], 0
jmp 0x10039871
mov eax, dword [ebp - 0x38]
inc eax
mov dword [ebp - 0x38], eax
cmp dword [ebp - 0x38], 1
jg 0x100398ad
mov dword [ebp - 0x30c], 0xdc4b
mov dword [ebp - 0x2e8], 0x5ab3e90a
mov eax, dword [ebp - 0x30c]
mov dword [ebp - 0x2e8], eax
mov byte [ebp - 0x56], 0
movzx eax, byte [ebp - 0x56]
test eax, eax
je 0x100398ab
push 0
call dword [sym.imp.KERNEL32.dll_DeleteCriticalSection]
jmp 0x1003986a
mov dword [ebp - 0x38], 0xfffffffe
jmp 0x100398bd
mov eax, dword [ebp - 0x38]
dec eax
mov dword [ebp - 0x38], eax
cmp dword [ebp - 0x38], 0xffffffe3
jl 0x100398f8
mov dword [ebp - 0x78], 0x707dfe4
mov dword [ebp - 0x78], 0
jmp 0x100398da
mov eax, dword [ebp - 0x78]
dec eax
mov dword [ebp - 0x78], eax
cmp dword [ebp - 0x78], 0
jl 0x100398f6
mov eax, dword [ebp - 0x78]
mov eax, dword [ebp + eax*4 - 0x214]
mov ecx, dword [ebp - 0x78]
mov dword [ebp + ecx*4 - 0x214], eax
jmp 0x100398d3
jmp 0x100398b6
cmp dword [ebp - 0xf8], 0
je 0x1003a031
mov eax, dword [ebp - 0xf8]
movzx eax, word [eax]
cmp eax, 0x5a4d
jne 0x1003a031
mov eax, dword [ebp - 0xf8]
mov ecx, dword [ebp - 0xf8]
add ecx, dword [eax + 0x3c]
mov dword [ebp - 0x90], ecx
mov eax, dword [ebp - 0x90]
cmp dword [eax], 0x4550
jne 0x1003a031
mov eax, dword [ebp - 0x90]
cmp dword [eax + 0x74], 0
jbe 0x1003a031
push 8
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x90]
cmp dword [ecx + eax + 0x78], 0
je 0x1003a031
mov eax, dword [ebp + 8]
mov dword [ebp - 0x74], eax
push 8
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x90]
mov edx, dword [ebp - 0x74]
add edx, dword [ecx + eax + 0x78]
mov dword [ebp - 0x44], edx
mov eax, 0xffff
mov word [ebp - 0x2c], ax
or dword [ebp - 0x6c], 0xffffffff
cmp dword [ebp + 0x10], 0
jbe 0x100399ae
mov eax, dword [ebp - 0x44]
mov ecx, dword [ebp + 0x10]
cmp ecx, dword [eax + 0x14]
ja 0x100399a9
mov eax, dword [ebp + 0x10]
dec eax
mov word [ebp - 0x2c], ax
jmp 0x10039b4a
mov eax, dword [0x101013b4]
and eax, 1
jne 0x100399e5
mov eax, dword [0x101013b4]
or eax, 1
mov dword [0x101013b4], eax
mov dword [ebp - 4], 0xe
mov ecx, 0x101013b8
call fcn.100144f9
push 0x100608ca
call fcn.10047aa9
pop ecx
or dword [ebp - 4], 0xffffffff
movzx eax, byte [0x100ffed4]
test eax, eax
je 0x10039a4e
mov ecx, 0x101013b8
call fcn.1003bc03
movzx eax, al
test eax, eax
jne 0x10039a4e
lea eax, [ebp - 0x100]
push eax
lea eax, [ebp - 0x21c]
push eax
mov ecx, 0x101013b8
call fcn.100145be
lea eax, [ebp - 0x420]
push eax
mov ecx, 0x101013b8
call fcn.100145b0
push eax
lea ecx, [ebp - 0x21c]
call fcn.100145d3
movzx eax, al
test eax, eax
je 0x10039a4e
lea ecx, [ebp - 0x21c]
call fcn.1003bc0c
mov eax, dword [eax + 4]
mov dword [ebp - 0x6c], eax
cmp dword [ebp - 0x6c], 0xffffffff
jne 0x10039b4a
mov ecx, 0x101013b8
call fcn.1003bc50
mov ecx, dword [ebp - 0x44]
add eax, dword [ecx + 0x18]
push eax
mov ecx, 0x101013b8
call fcn.1003bc54
and dword [ebp - 0x70], 0
jmp 0x10039a80
mov eax, dword [ebp - 0x70]
inc eax
mov dword [ebp - 0x70], eax
mov eax, dword [ebp - 0x44]
mov ecx, dword [ebp - 0x70]
cmp ecx, dword [eax + 0x18]
jae 0x10039b4a
mov eax, dword [ebp - 0x44]
mov ecx, dword [ebp - 0x74]
add ecx, dword [eax + 0x20]
mov eax, dword [ebp - 0x70]
lea eax, [ecx + eax*4]
mov dword [ebp - 0x224], eax
cmp dword [ebp - 0x224], 0
je 0x10039b45
mov eax, dword [ebp - 0x224]
mov ecx, dword [ebp - 0x74]
add ecx, dword [eax]
push ecx
lea ecx, [ebp - 0x4c4]
call fcn.1003bb71
mov dword [ebp - 4], 0xf
mov edx, dword [ebp + 8]
lea ecx, [ebp - 0x4c4]
call fcn.10028c93
mov dword [ebp - 0x22c], eax
movzx eax, byte [0x100ffed4]
test eax, eax
je 0x10039aff
mov ecx, 0x101013b8
call fcn.1003bc03
movzx eax, al
test eax, eax
jne 0x10039b1c
lea eax, [ebp - 0x22c]
push eax
mov ecx, 0x101013b8
call fcn.1003bc12
mov ecx, dword [ebp - 0x70]
mov dword [eax], ecx
mov byte [0x100ffed4], 1
cmp dword [ebp - 0x6c], 0xffffffff
jne 0x10039b36
mov eax, dword [ebp - 0x22c]
cmp eax, dword [ebp - 0x100]
jne 0x10039b36
mov eax, dword [ebp - 0x70]
mov dword [ebp - 0x6c], eax
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x4c4]
call fcn.1000395f
jmp 0x10039a79
cmp dword [ebp + 0x10], 0
jne 0x10039b6a
cmp dword [ebp - 0x6c], 0xffffffff
je 0x10039b6a
mov eax, dword [ebp - 0x44]
mov ecx, dword [ebp - 0x74]
add ecx, dword [eax + 0x24]
mov eax, dword [ebp - 0x6c]
mov ax, word [ecx + eax*2]
mov word [ebp - 0x2c], ax
movzx eax, word [ebp - 0x2c]
cmp eax, 0xffff
je 0x1003a031
movzx eax, word [ebp - 0x2c]
mov ecx, dword [ebp - 0x44]
mov edx, dword [ebp - 0x74]
add edx, dword [ecx + 0x1c]
lea eax, [edx + eax*4]
mov dword [ebp - 0x314], eax
mov eax, dword [ebp - 0x314]
mov ecx, dword [ebp - 0x74]
add ecx, dword [eax]
mov dword [ebp - 0x40], ecx
mov eax, dword [ebp - 0x40]
cmp eax, dword [ebp - 0x44]
jbe 0x1003a029
push 8
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x90]
mov edx, dword [ebp - 0x44]
add edx, dword [ecx + eax + 0x7c]
cmp dword [ebp - 0x40], edx
jae 0x1003a029
mov eax, dword [0x101013b4]
and eax, 2
jne 0x10039bf7
mov eax, dword [0x101013b4]
or eax, 2
mov dword [0x101013b4], eax
mov dword [ebp - 4], 0x10
push 0x8664
call fcn.100093ea
pop ecx
mov byte [0x10101344], al
or dword [ebp - 4], 0xffffffff
mov byte [ebp - 0x50], 1
mov byte [ebp - 0x4f], 0xd3
mov byte [ebp - 0x4e], 2
mov byte [ebp - 0x4d], 0
mov byte [ebp - 0x4c], 4
mov byte [ebp - 0x4b], 0x33
mov byte [ebp - 0x4a], 0xa6
mov byte [ebp - 0x49], 0xe
mov byte [ebp - 0x48], 0xd2
mov byte [ebp - 0x47], 0
mov byte [ebp - 0x46], 8
xor eax, eax
inc eax
shl eax, 0
movzx eax, byte [ebp + eax - 0x50]
and eax, 0xbf
xor ecx, ecx
inc ecx
shl ecx, 0
movzx ecx, byte [ebp + ecx - 0x50]
or ecx, 0xbf
sub ecx, eax
xor eax, eax
inc eax
imul eax, eax, 0
movzx eax, byte [ebp + eax - 0x50]
mov byte [ebp + eax - 0x5c], cl
mov dword [ebp - 0x18], 2
and dword [ebp - 0x98], 0
jmp 0x10039c6d
mov eax, dword [ebp - 0x18]
inc eax
inc eax
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 0xb
jae 0x10039d21
xor eax, eax
inc eax
imul eax, eax, 0
movzx eax, byte [ebp + eax - 0x50]
lea eax, [eax + eax + 2]
cmp dword [ebp - 0x18], eax
jne 0x10039cae
mov eax, dword [ebp - 0x18]
movzx eax, byte [ebp + eax - 0x50]
inc eax
mov dword [ebp - 0x98], eax
mov eax, dword [ebp - 0x18]
movzx eax, byte [ebp + eax - 0x50]
mov ecx, dword [ebp - 0x18]
lea eax, [ecx + eax - 1]
mov dword [ebp - 0x18], eax
jmp 0x10039c65
mov eax, dword [ebp - 0x18]
sub eax, dword [ebp - 0x98]
movzx eax, byte [ebp + eax - 0x52]
movsx eax, byte [ebp + eax - 0x5c]
mov ecx, dword [ebp - 0x18]
movzx ecx, byte [ebp + ecx - 0x4f]
and ecx, eax
mov eax, dword [ebp - 0x18]
sub eax, dword [ebp - 0x98]
movzx eax, byte [ebp + eax - 0x52]
movsx eax, byte [ebp + eax - 0x5c]
mov edx, dword [ebp - 0x18]
movzx edx, byte [ebp + edx - 0x4f]
and edx, eax
mov eax, dword [ebp - 0x18]
sub eax, dword [ebp - 0x98]
movzx eax, byte [ebp + eax - 0x52]
movsx eax, byte [ebp + eax - 0x5c]
mov esi, dword [ebp - 0x18]
movzx ebx, byte [ebp + esi - 0x4f]
add ebx, eax
sub ebx, edx
sub ebx, ecx
mov eax, dword [ebp - 0x18]
movzx eax, byte [ebp + eax - 0x50]
mov byte [ebp + eax - 0x5c], bl
and dword [ebp - 0x98], 0
jmp 0x10039c65
xor eax, eax
inc eax
imul eax, eax, 3
mov byte [ebp + eax - 0x5c], 0
mov eax, dword [0x101013b4]
and eax, 4
jne 0x10039d67
mov eax, dword [0x101013b4]
or eax, 4
mov dword [0x101013b4], eax
mov dword [ebp - 4], 0x11
lea eax, [ebp - 0x5c]
push eax
mov ecx, 0x10101400
call fcn.1003bb71
push 0x100608bb
call fcn.10047aa9
pop ecx
or dword [ebp - 4], 0xffffffff
and dword [ebp - 0x108], 0
jmp 0x10039d7d
mov eax, dword [ebp - 0x108]
inc eax
mov dword [ebp - 0x108], eax
cmp dword [ebp - 0x108], 4
jae 0x10039d93
mov eax, dword [ebp - 0x108]
mov byte [ebp + eax - 0x5c], 0
jmp 0x10039d70
mov eax, dword [ebp - 0x40]
mov dword [ebp - 0x64], eax
movsx eax, byte [0x10101344]
mov ecx, dword [ebp - 0x64]
movsx ecx, byte [ecx]
cmp ecx, eax
je 0x10039db3
mov eax, dword [ebp - 0x64]
inc eax
mov dword [ebp - 0x64], eax
jmp 0x10039d99
mov eax, dword [ebp - 0x64]
inc eax
mov dword [ebp - 0x64], eax
push dword [ebp - 0x64]
push dword [ebp - 0x40]
lea ecx, [ebp - 0x470]
call fcn.1003bf98
mov dword [ebp - 4], 0x12
mov dword [ebp - 0x2f0], 0x1a86
cmp dword [ebp - 0x2f0], 0xb45
jge 0x10039f01
lea eax, [ebp - 0x18c]
push eax
lea eax, [ebp - 0x19c]
push eax
mov ecx, 0x1007afd8
call fcn.1001fd80
mov ecx, eax
call fcn.1001fd80
cvtsi2sd xmm0, dword [ebp - 0x18c]
cvtsi2sd xmm1, dword [ebp - 0x19c]
mulsd xmm1, qword [0x1006db20]
divsd xmm1, xmm0
push ecx
push ecx
movsd qword [esp], xmm1
call fcn.100485b0
pop ecx
pop ecx
fstp qword [ebp - 0x418]
movsd xmm0, qword [ebp - 0x418]
cvtsi2sd xmm1, dword [ebp - 0x18c]
cvtsi2sd xmm2, dword [ebp - 0x19c]
mulsd xmm2, qword [0x1006db18]
divsd xmm2, xmm1
push ecx
push ecx
movsd qword [esp], xmm2
movsd qword [ebp - 0x458], xmm0
call fcn.100485b0
pop ecx
pop ecx
fstp qword [ebp - 0x3f0]
movsd xmm0, qword [ebp - 0x3f0]
cvtsi2sd xmm1, dword [ebp - 0x18c]
cvtsi2sd xmm2, dword [ebp - 0x19c]
mulsd xmm2, qword [0x1006db10]
divsd xmm2, xmm1
push ecx
push ecx
movsd qword [esp], xmm2
movsd qword [ebp - 0x404], xmm0
call fcn.100485b0
pop ecx
pop ecx
fstp qword [ebp - 0x430]
movsd xmm0, qword [ebp - 0x430]
movsd xmm1, qword [ebp - 0x404]
addsd xmm0, xmm1
movsd xmm1, qword [ebp - 0x458]
addsd xmm0, xmm1
cvttsd2si eax, xmm0
mov dword [ebp - 0x320], eax
push fcn.10021f62
push dword [ebp - 0x320]
mov ecx, 0x1007aeb8
call fcn.1001ff79
mov ecx, eax
call fcn.1001ff6d
push 0x10101400
lea ecx, [ebp - 0x470]
call fcn.1003bba0
lea eax, [ebp - 0x428]
push eax
lea ecx, [ebp - 0x470]
call fcn.10003ffe
push dword [eax]
lea eax, [ebp - 0x434]
push eax
lea ecx, [ebp - 0x470]
call fcn.10005012
push dword [eax]
lea ecx, [ebp - 0x4ac]
call fcn.1003bfc1
mov byte [ebp - 4], 0x13
lea eax, [ebp - 0x4ac]
push eax
call fcn.10029599
pop ecx
mov dword [ebp - 0x184], eax
cmp dword [ebp - 0x184], 0
je 0x10039fd8
push dword [ebp - 0x64]
lea ecx, [ebp - 0x494]
call fcn.1003bb71
mov byte [ebp - 4], 0x14
lea edx, [ebp - 0x2b0]
lea ecx, [ebp - 0x494]
call fcn.10028d3a
movzx eax, al
test eax, eax
je 0x10039fab
push 0
push dword [ebp - 0x2b0]
push 0
push dword [ebp - 0x184]
call fcn.10037eaf
add esp, 0x10
mov dword [ebp - 0x40], eax
jmp 0x10039fc7
push 1
push 0
lea eax, [ebp - 0x494]
push eax
push dword [ebp - 0x184]
call fcn.10037eaf
add esp, 0x10
mov dword [ebp - 0x40], eax
mov byte [ebp - 4], 0x13
lea ecx, [ebp - 0x494]
call fcn.1000395f
jmp 0x1003a00b
cmp dword [ebp + 0x10], 0
jne 0x10039fee
mov ecx, dword [ebp + 0xc]
call fcn.10003731
mov dword [ebp - 0x234], eax
jmp 0x10039ff8
movzx eax, word [ebp + 0x10]
mov dword [ebp - 0x234], eax
push dword [ebp - 0x234]
push dword [ebp + 8]
call fcn.10030cc4
pop ecx
pop ecx
mov dword [ebp - 0x40], eax
mov byte [ebp - 4], 0x12
lea ecx, [ebp - 0x4ac]
call fcn.100038a1
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x470]
call fcn.1000395f
mov eax, dword [ebp - 0x40]
jmp 0x1003a3d7
mov dword [ebp - 0x23c], 0x51a6
mov dword [ebp - 0x2b8], str.bgojq_efhrhbeg_pty_kpsbpaai_qpx_bachjqxu_zpzn_pnklfzun_psmze_bfvc_mudiwbdo_qmfrcgui_kkm_kouyaf
cmp dword [ebp - 0x23c], 0x521b
jle 0x1003a133
and dword [ebp - 0x128], 0
jmp 0x1003a06b
mov eax, dword [ebp - 0x128]
inc eax
mov dword [ebp - 0x128], eax
cmp dword [ebp - 0x128], 0x6617
jge 0x1003a133
and dword [ebp - 0x120], 0
jmp 0x1003a091
mov eax, dword [ebp - 0x120]
inc eax
mov dword [ebp - 0x120], eax
cmp dword [ebp - 0x120], 0x719a
jge 0x1003a12e
and dword [ebp - 0x110], 0
jmp 0x1003a0b7
mov eax, dword [ebp - 0x110]
inc eax
mov dword [ebp - 0x110], eax
cmp dword [ebp - 0x110], 0x43bc
jge 0x1003a129
and dword [ebp - 0x118], 0
jmp 0x1003a0d9
mov eax, dword [ebp - 0x118]
inc eax
mov dword [ebp - 0x118], eax
cmp dword [ebp - 0x118], 0x5e04
jge 0x1003a127
mov eax, dword [ebp - 0x110]
imul eax, dword [ebp - 0x118]
mov ecx, dword [ebp - 0x120]
sub ecx, eax
mov eax, dword [ebp - 0x128]
sar eax, cl
cdq
mov dword [ebp - 0x29c], eax
mov dword [ebp - 0x298], edx
push dword [ebp - 0x298]
push dword [ebp - 0x29c]
mov ecx, 0x1007aeb8
call fcn.10003751
jmp 0x1003a0cc
jmp 0x1003a0aa
jmp 0x1003a084
jmp 0x1003a05e
mov dword [ebp - 4], 0x15
cmp dword [ebp - 0x23c], 0x508d
jge 0x1003a156
mov edx, dword [ebp - 0x2b8]
mov ecx, 0x1007aeb8
call fcn.10005cf1
jmp 0x1003a172
or dword [ebp - 4], 0xffffffff
jmp 0x1003a17c
push 3
lea ecx, [ebp - 0x3dc]
call fcn.100039f2
mov dword [ebp - 4], 0x17
mov dword [ebp - 0x130], 0
jmp 0x1003a1a9
mov eax, dword [ebp - 0x130]
inc eax
mov dword [ebp - 0x130], eax
cmp dword [ebp - 0x130], 3
jge 0x1003a1cb
push dword [ebp - 0x130]
lea ecx, [ebp - 0x3dc]
call fcn.10003ac4
mov dword [eax], 0x4e2db58e
jmp 0x1003a19c
mov byte [ebp - 0x66], 0
mov dword [ebp - 0x244], 0x436f
mov dword [ebp - 0x2c0], str.csz_nixxuaiq_kbbmpupg_qmgqyx_rmbl_abjiror_gqd_uys_qomxf_ukygfc_gvrfa_fzyggcwqz_tjaahswy_eafg
cmp dword [ebp - 0x244], 0x4476
jle 0x1003a29c
and dword [ebp - 0x148], 0
jmp 0x1003a209
mov eax, dword [ebp - 0x148]
inc eax
mov dword [ebp - 0x148], eax
cmp dword [ebp - 0x148], 0x254
jge 0x1003a29c
and dword [ebp - 0x138], 0
jmp 0x1003a22f
mov eax, dword [ebp - 0x138]
inc eax
mov dword [ebp - 0x138], eax
cmp dword [ebp - 0x138], 0x5824
jge 0x1003a297
and dword [ebp - 0x140], 0
jmp 0x1003a251
mov eax, dword [ebp - 0x140]
inc eax
mov dword [ebp - 0x140], eax
cmp dword [ebp - 0x140], 0x2277
jge 0x1003a295
mov eax, dword [ebp - 0x138]
imul eax, dword [ebp - 0x140]
add eax, dword [ebp - 0x148]
cdq
mov dword [ebp - 0x2a8], eax
mov dword [ebp - 0x2a4], edx
push dword [ebp - 0x2a4]
push dword [ebp - 0x2a8]
mov ecx, 0x1007aeb8
call fcn.10003751
jmp 0x1003a244
jmp 0x1003a222
jmp 0x1003a1fc
movzx eax, byte [ebp - 0x66]
test eax, eax
je 0x1003a2b8
push 0x139d
push 0
push 0
push 0x121f
call dword [sym.imp.USER32.dll_SetWindowsHookExA]
mov byte [ebp - 4], 0x18
cmp dword [ebp - 0x244], 0x4113
jge 0x1003a2d8
mov edx, dword [ebp - 0x2c0]
mov ecx, 0x1007aeb8
call fcn.10005cf1
jmp 0x1003a2f4
mov dword [ebp - 4], 0x17
jmp 0x1003a304
mov byte [ebp - 0x67], 0
movzx eax, byte [ebp - 0x67]
test eax, eax
je 0x1003a31a
push 0
push 0
call dword [sym.imp.ADVAPI32.dll_RegDeleteValueA]
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x3dc]
call fcn.10003a4f
mov dword [ebp - 0x2c8], 0x1b36
cmp dword [ebp - 0x2c8], 0xee6
jge 0x1003a3d5
xor eax, eax
inc eax
je 0x1003a3d5
lea eax, [ebp - 0x24c]
push eax
lea eax, [ebp - 0x188]
push eax
lea eax, [ebp - 0xa0]
push eax
push str._d__d__d
call fcn.100477eb
add esp, 0x10
cmp dword [ebp - 0xa0], 0
jne 0x1003a38b
cmp dword [ebp - 0x188], 0
jne 0x1003a38b
cmp dword [ebp - 0x24c], 0
jne 0x1003a38b
jmp 0x1003a3d5
push dword [ebp - 0x188]
push dword [ebp - 0xa0]
call fcn.10037e78
pop ecx
pop ecx
mov ecx, dword [ebp - 0x24c]
sub ecx, dword [ebp - 0x188]
add eax, ecx
cdq
idiv dword [ebp - 0xa0]
add edx, dword [ebp - 0xa0]
mov eax, edx
cdq
idiv dword [ebp - 0xa0]
inc edx
push edx
push 0x10067cdc
call fcn.10047ad3
pop ecx
pop ecx
jmp 0x1003a343
xor eax, eax
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret